CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/onlyoffice-documentserver 9.4.0_4

Secure office and productivity apps

Port info

Maintainer
fsbruva@yahoo.com
Packages
latest: 9.4.0_4
Upstream
Higher version available: 10.0.0
Last update
to 9.4.0_4 · 97a84ef467
Quarterly
2026Q4: 9.4.0_4
WWW
https://www.onlyoffice.com/
Links
cgit · VuXML

Install

Package
# pkg install onlyoffice-documentserver
installs 9.4.0_4 from latest; from quarterly (2026Q4) 9.4.0_4
Port
# cd /usr/ports/www/onlyoffice-documentserver && make install clean
# make -C /usr/ports/www/onlyoffice-documentserver config  # change options first
Size
710 MiB download · 1.9 GiB installed
Depends on
archivers/brotli 1.2.1,1, converters/libiconv 1.18_1, devel/boost-libs 1.92.0, devel/gumbo 0.14.1, devel/icu 76.1,1, ftp/curl 8.23.0, graphics/libetonyek01 0.1.13_1,1, graphics/libheif 1.23.6, graphics/vips 8.18.6, print/harfbuzz 14.6.0, security/ca_root_nss 3.132, sysutils/pwgen 2.08_1,2, sysutils/py-supervisor 4.3.0,1, textproc/gsed 4.10, textproc/libodfgen01 0.1.8_3, textproc/librevenge 0.0.6, textproc/md4c 0.6.0, www/nginx 1.30.6_5,3, x11-fonts/webfonts 0.30_15
License
AGPLv3
Creates
user onlyoffice, group onlyoffice
Options
0 of 1 on in the package
Show the 1 options that are off
LLVM_PORTS
pkg-message
Shown after installing
CONFIGURATION:
-------------
The configuration file can be found (or created) at the following path:
  /usr/local/etc/onlyoffice/documentserver/local.json
The default values are available in the default.json configuration file,
which is available in the folders above. Please do not edit the contents of the
default.json file directly. The default values will be restored each time you
upgrade Document Server to a new version and all your changes will be lost. 

1. Enable services at startup in the /etc/rc.conf file:
  nginx_enable="YES"
  supervisord_enable="YES"

  Optionally in case of a jail with local IP and no internet access:
    update /etc/hosts in order to resolve your nextcloud server to its local IP

2. Set up supervisord in order to execute documentserver services:
  - let supervisord.conf load files contained in this directory by adding to
    /usr/local/etc/supervisord.conf:
[include]
files = /usr/local/etc/onlyoffice/documentserver/supervisor/*.conf

  - start supervisord:
    # service supervisord start

3. Set up nginx:
  - Include the configuration appropriate for your deployment within
    your /usr/local/etc/nginx/nginx.conf file:

     HTTP:
       include /usr/local/etc/onlyoffice/documentserver/nginx/ds.conf;

     HTTPS:
       include /usr/local/etc/onlyoffice/documentserver/nginx/ds-ssl.conf;

   Review and customize the supplied ds.conf or ds-ssl.conf nginx configuration
   before use, including the listen directives, TLS configuration, and any site-
   specific settings.

  - run documentserver-update-securelink.sh once for creating a verysecretstring
Note: documentserver-update-securelink.sh updates only the packaged ds.conf, ds-ssl.conf,
and local.json files in their default locations. If your nginx configuration uses custom
copies or alternate paths, synchronize the secure_link_secret values manually.

  - start nginx:
    # service nginx start

4. Install OnlyOffice plugins (you'll need internet):
   # /usr/local/bin/documentserver-pluginsmanager.sh --update=/usr/local/www/onlyoffice/documentserver/sdkjs-plugins/plugin-list-default.json

5. Set up Onlyoffice with Nextcloud, if desired:
  - JWT is mandated within Onlyoffice Nextcloud app, requiring edits to /usr/local/etc/onlyoffice/documentserver/local.json:
      In the token:enable section, set the browser, request:inbox and request:outbox objects to "true"

  - create a secure JWT secret (Base64 avoids issues with JSON/PHP character escaping)
    # openssl rand -base64 48

  - store the JWT secret in /usr/local/etc/onlyoffice/documentserver/local.json:
      In the services:Coauthoring:secret section, enter the JWT secret in the browser, inbox, outbox and session objects

  - restart Onlyoffice:
    # service supervisord restart

  - specify the JWT secret in the Nextcloud administrative configuration for Onlyoffice app

  - see the following for more info:
      https://api.onlyoffice.com/editors/nextcloud

8. Enjoy.
Shown after upgrading
If you are upgrading onlyoffice-documentserver from a version prior to 7.1.0.215,
you need to update the database schema:
  For PostgreSQL:
    psql -U postgres -d onlyoffice -f /usr/local/www/onlyoffice/documentserver/server/schema/postgresql/upgrade/upgradev710.sql
  For MySQL:
    mysql -u onlyoffice -D onlyoffice -p < /usr/local/www/onlyoffice/documentserver/server/schema/mysql/upgrade/upgradev710.sql
Shown after upgrading
If you are upgrading onlyoffice-documentserver from a version prior to 7.2.1.34,
you need to update the database schema:
  For PostgreSQL:
    psql -U postgres -d onlyoffice -f /usr/local/www/onlyoffice/documentserver/server/schema/postgresql/upgrade/upgradev720.sql
  For MySQL:
    mysql -u onlyoffice -D onlyoffice -p < /usr/local/www/onlyoffice/documentserver/server/schema/mysql/upgrade/upgradev720.sql
Shown after upgrading
NOTICE: The Admin Panel has been made closed source as of version 9.3.0.
It is no longer included in the community edition and is now only available
in the Developer and Enterprise editions of ONLYOFFICE Docs.

Attempts to access the Admin Panel URL (http://host/admin) will fail.
All configuration remains fully available through /usr/local/etc/onlyoffice/documentserver/local.json
as before, with no loss of functionality for the community edition.

You may safely remove any Admin Panel logs and configuration files:
  # rm -rf /var/log/onlyoffice/documentserver/adminpanel
  # rm -f /usr/local/etc/onlyoffice/documentserver/supervisor/adminpanel.conf
Shown after upgrading
NOTICE: As of ONLYOFFICE Docs 9.4.0, the upstream Community Edition no
longer supports PostgreSQL, MySQL, or RabbitMQ. These capabilities
remain available only in the Developer and Enterprise editions.

If upgrading from a version prior to 9.4.0, net/rabbitmq and any
database client packages used solely by ONLYOFFICE Docs may be removed.
After verifying proper operation, any database previously dedicated to
ONLYOFFICE Docs may be archived and deleted.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.4.0_49.4.0_4–
FreeBSD 159.4.0_49.4.0_4–
FreeBSD 149.4.0_49.4.0_4✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.4.0_49.4.0_4–
FreeBSD 149.4.0_49.4.0_4✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.4.0_4.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (89)

Dima Panov (fluffy) · 9.4.0_4
*/*: update boost consumers after boost-1.92
97a84ef467
Mikael Urankar (mikael) · 9.4.0_3
www/onlyoffice-documentserver: Fix build with npm 12

- Switch the npm dependency cache from npm-shrinkwrap.json to
  package-lock.json, since npm 12 ignores shrinkwraps
- Bump bundled NodeJS to 24.21.0 and hunspell-hyphen to v2.8.9

PR:	298496
d5df9ffb40
Vladimir Druzenko (vvd) · 9.4.0_2
*/*: Bump consumers of devel/gumbo after soname changed: libgumbo.so.3 => libgumbo.so.4

PR:		298115
Sponsored by:	UNIS Labs
97e3d4ff8d
Mikael Urankar (mikael) · 9.4.0_1 MFH 2026Q3 ✓
www/onlyoffice-documentserver: Fix local.json, update securelink handling

- Fix invalid JSON in local.json.sample
- Add storage.fs.secretString override to local.json.sample
- Update documentserver-update-securelink.sh to synchronize both
  ds.conf and ds-ssl.conf
- Update packaged Node runtime to 24.18.0

PR:		296567
c534cc4196
Tijl Coosemans (tijl) · 9.4.0
*/*: Use C.UTF-8 locale

Ports 02f27a83b44d fixed the ports tree to the C locale so it would work
correctly in environments where users use a locale that isn't compatible
with the C locale, e.g. xx_YY.UTF-8 where [A-Z] includes more than just
upper case letters.  USE_LOCALE was introduced to let ports use another
locale if they needed it.  The C.UTF-8 locale was created later on to be
mostly compatible with the C locale.

Switch the ports tree locale to C.UTF-8 and remove USE_LOCALE.  The
world has moved to Unicode so all ports either require it or know how to
build correctly in a Unicode environment.

PR:		295945
Exp-run by:	antoine
b6ec06f079
Mikael Urankar (mikael) · 9.4.0
www/onlyoffice-documentserver: Update to 9.4.0

Upstream removes MySQL, PostgreSQL, and RabbitMQ support from the
community edition. The converter is now embedded in docservice rather
than run as a separate process.

Fix build failures on amd64 and aarch64 under clang 20+ (-current).

Changelog: https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#940

PR:		296259
74a4ceb8e1
Mikael Urankar (mikael) · 9.3.1_2
www/onlyoffice-documentserver: Bugfix Node OOM error on aarch64

Also update cache fetch method, and yao-pkg/node versions

PR:		294620
0eb5320b1e
Ronald Klop (ronald) · 9.3.1_1
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Mikael Urankar (mikael) · 9.3.1
www/onlyoffice-documentserver: Update to 9.3.1

- Update node and @yao-pkg dependencies
- Shift most dependencies to use ports
- Implement new offline caching mechanism

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#931

PR:		294028
84c1c58e02
Ronald Klop (ronald) · 9.1.0_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Mikael Urankar (mikael) · 9.1.0
www/onlyoffice-documentserver: Update to 9.1.0

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#910

PR: 		290652
547b81edbe
Matthias Andree (mandree) · 9.0.4_1
*: Revise USES=python:... version range constraints

and strip all lower bounds of 3.9 or 3.10 because they are implied now.

python:3.9-X  -> python:-X
python:3.9+   -> python
python:3.10-X -> python:-X
python:3.10+  -> python
(options such as ,build preserved)
1403bb7765
Dima Panov (fluffy) · 9.0.4_1
devel/boost: bump consumers after boost upgrade (+)

Get rid of direct dependency ob libbost_system.so, use libboost_thread.so instead
67fb95fb3b
Mikael Urankar (mikael) · 9.0.4
www/onlyoffice-documentserver: Fix build when ssl=base

PR:             289287
4c6d8f9177
Mikael Urankar (mikael) · 9.0.4
www/onlyoffice-documentserver: Update to 9.0.4

- Restructure version and build numbering
 - Refactor Makefile and patches based on linter tools
 - Modify USES, BUILD_DEPS and variables to ease node version maintenance
 - Shift openssl to USES macro
 - Accomodate npm 11.2+ 'Unknown env config' warn/deprecation

 Changes:
    https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#904

 PR:		288919
6f1951d2e0
Robert Clausecker (fuz) · 9.0.3.31
www/onlyoffice-documentserver: partial armv7 fix

This makes the build not stop immediately due to a wrong target.
Now the build fails in src/codegen/arm/cpu-arm.cc due to v8 using
Linux' arm_sync_icache which we don't have.  I think I have patched
that one before...

Approved by:	portmgr (build fix blanket)
MFH:		2025Q3
af8fdbae92
Mikael Urankar (mikael) · 9.0.3.31
www/onlyoffice-documentserver: Update to 9.0.3.31

Upgrade port version to 9.0.3.31
Upgrade port to use yao-pkg 6.6.0
Upgrade port to use node 20.19.4
Fix Apple iwork file conversion error
Minor bugfixes

PR:		288374,287122

Signed-off-by: Matt Kempe <fsbruva@yahoo.com>
623860bda3
Mikael Urankar (mikael) · 9.0.2.16
www/onlyoffice-documentserver: Update to 9.0.2.16

Upgrade port version to 9.0.2.16
Upgrade port to use yao-pkg 6.5.1
Revert port dependency to node20, to match upstream
Fix compile time errors on aarch64
Add additional cache cleanup steps in Makefile
Add timestamp based versioning for cache tarball
Shift pkg and npm caches to use github
Take port maintainership

PR:		287819
b293e8710f
Mikael Urankar (mikael) · 8.3.3.23_2
www/onlyoffice-documentserver: Fix distinfo

PR:		287145
9852b060df
Mikael Urankar (mikael) · 8.3.3.23_2
www/onlyoffice-documentserver: Bump amqplib and node22 versions

Upgrade node to 22.15.1
Upgrade port to use yao-pkg 6.5.0
Backport upstream fix of bumping amqplib to 0.10.7, due to net/rabbitmq upgrade

PR:		287145
e832a322cd
Dima Panov (fluffy) · 8.3.3.23_1
devel/boost: bump consumers after Boost update
18632db919
Mikael Urankar (mikael) · 8.3.3.23
www/onlyoffice-documentserver: Upgrade to 8.3.3.23, node22

Upgrade port version to 8.3.3.23
Upgrade port dependencies to node22, now that node18 is EOL.
Upgrade port to use yao-pkg 6.4.0 (required due to node22).
Upgrade port dependency to optipng 0.7.8, closes CVE-2023-43907.
Tidy pkg-plist to pass poudriere plist and leftovers port tests.

PR:		286808
a1ed471404
Mikael Urankar (mikael) · 8.3.1.25
www/onlyoffice-documentserver: drop maintainership
eda38927c1
Mikael Urankar (mikael) · 8.3.1.25
www/onlyoffice-documentserver: Update to 8.3.1.25
1ee427d6c2
Daniel Engberg (diizzy) · 8.2.0.143_6
www/onlyoffice-documentserver: Fix build with ICU 76.1

Import patch to fix build

Source:
https://github.com/MikaelUrankar/onlyoffice-documentserver-ports/commit/5398d404cb22a07fd2de2b4f5dfa5ad7805f2135

PR:		284332
a6b4b0c0cc
Daniel Engberg (diizzy) · 8.2.0.143_6
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Dima Panov (fluffy) · 8.2.0.143_5
devel/boost: bump consumers after Boost-1.87 update

Sponsored by:	Future Crew, LLC
fa53920e72
Mikael Urankar (mikael) · 8.2.0.143_4
www/onlyoffice-documentserver: Fix ds-cache.conf path

PR:		283445
6c76f28cc8
Mikael Urankar (mikael) · 8.2.0.143_3
www/onlyoffice-documentserver: Fix documentserver-flush-cache.sh script

We also have to change ETCDIR in this script

Reported by: Loïc Fraison <lfraison@gmail.com>
5e2f630371
Dima Panov (fluffy) · 8.2.0.143_2
devel/boost: bump consu,ers after update Boost to 1.86 release

Sponsored by:	Future Crew, LLC
312ee18b02
Mikael Urankar (mikael) · 8.2.0.143_1
www/onlyoffice-documentserver: Various fixes

- Fix nginx ds-cache.conf location in documentserver-flush-cache.sh
 - Fix sed invocation in documentserver-flush-cache.sh
 - Remove extra whitespace in documentserver-generate-allfonts.sh
 - Remove todo list in Makefile

PR:		282724
29abb996b4
Mikael Urankar (mikael) · 8.2.0.143
www/onlyoffice-documentserver: Fix patch
f690c1a6f4
Mikael Urankar (mikael) · 8.2.0.143
www/onlyoffice-documentserver: Update to 8.2.0.143
1fc08c4923
Dima Panov (fluffy) · 8.0.1.31_1
*/*: bump consumers after devel/boost* update

With hat:	office
Sponsored by:	Future Crew, LLC
55cfbcf56c
Mikael Urankar (mikael) · 8.0.1.31
www/onlyoffice-documentserver: Fix build after node update

Regen the cache file
0a65d4fded
Mikael Urankar (mikael) · 8.0.1.31
www/onlyoffice-documentserver: Update to 8.0.1

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/v8.0.0/CHANGELOG.md#800
  https://github.com/ONLYOFFICE/DocumentServer/blob/v8.0.1/CHANGELOG.md#801
cb8bd7aaf4
Mikael Urankar (mikael) · 7.5.1.23
www/onlyoffice-documentserver: Fix build

Regen the cache file
80628c2054
Mikael Urankar (mikael) · 7.5.1.23
www/onlyoffice-documentserver: Fix build on aarch64
bfbfda0966
Mikael Urankar (mikael) · 7.5.1.23
www/onlyoffice-documentserver: Fix build

Fix nodejs version in USES and regen yao-pkg patch
81ddc72fda
Mikael Urankar (mikael) · 7.5.1.23
www/onlyoffice-documentserver: Update to 7.5.1.23

While here:
 - Update node to v18
 - Improve pkg-message [1]

Submitted by:	Niclas Wagner [1]
01ede3084b
Jan Beich (jbeich) · 7.4.1.36_1
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Bernard Spil (brnrd) · 7.4.1.36
security/openssl: Chase removal of openssl30 port
c883e9e4ca
Mikael Urankar (mikael) · 7.4.1.36
www/onlyoffice-documentserver: Update to 7.4.1.36

While here:
  - Increase default connection limit [1]
  - Add missing command for postgresql 15 users [2]

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/v7.4.1/CHANGELOG.md

PR:		273910 [1]
Reported by: 	Benjamin Connelly [2]
21df741b75
Muhammad Moinur Rahman (bofh) · 7.4.0.163
www/onlyoffice-documentserver: Mark DEPRECATED

- Depends on www/node16 which has reaced End of Life
- Set EXPIRATION_DATE 2023-10-30

Approved by:	portmgr (blanket)
7036992848
Mikael Urankar (mikael) · 7.4.0.163
www/onlyoffice-documentserver: Update to 7.4.0

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/v7.4.0/CHANGELOG.md
bebb90bffa
Mikael Urankar (mikael) · 7.3.3.49_4
www/onlyoffice-documentserver: Fix build after npm update
3ff054290d
Mikael Urankar (mikael) · 7.3.3.49_4
www/onlyoffice-documentserver: mark as BROKEN after latest npm update
d70bd0e00f
Mikael Urankar (mikael) · 7.3.3.49_4
www/onlyoffice-documentserver: Fix path in documentserver-jwt-status.sh

PR:		270780
Reported by:	freebsd.org@vollkorn.cryptobitch.de
dffad46a57
Mikael Urankar (mikael) · 7.3.3.49_3
www/onlyoffice-documentserver: Fix path for node headers

NODE_VERSION is not defined, use the correct variable name.

While here, remove an empty line.
b556ea75bb
Jan Beich (jbeich) · 7.3.3.49_3
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88