CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

devel/maven363 3.6.3_2

Java project management tool

1
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
michaelo@apache.org
Packages
latest: 3.6.3_2
Upstream
up to date
Last update
to 3.6.3_2 · 86813e9ccf
Quarterly
2026Q4: 3.6.3_2
WWW
https://maven.apache.org/
Links
cgit · VuXML

Install

Package
# pkg install maven363
installs 3.6.3_2 from latest; from quarterly (2026Q4) 3.6.3_2
Port
# cd /usr/ports/devel/maven363 && make install clean
Size
8.6 MiB download · 10 MiB installed
Depends on
devel/maven-wrapper 2, java/openjdk25 25.0.4+7.f.1_1
License
APACHE20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.6.3_23.6.3_2–
FreeBSD 153.6.3_23.6.3_2–
FreeBSD 143.6.3_23.6.3_23.6.3_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.6.3_23.6.3_2–
FreeBSD 143.6.3_23.6.3_23.6.3_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 3.6.3_2 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2021-262919.12021-04-23Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if…

VuXML only (0)

Listed in VuXML, the packaged version 3.6.3_2 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (4)

Ronald Klop (ronald) · 3.6.3_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 3.6.3_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Muhammad Moinur Rahman (bofh) · 3.6.3
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Yuri Victorovich (yuri) · 3.6.3
biology/cytoscape: Unbreak by re-adding and using maven-3.6.3

Cytoscape was broken by the maven update.
e588390193