CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/onlyoffice-documentserver 9.4.0_4

Secure office and productivity apps

Port info

Maintainer
fsbruva@yahoo.com
Packages
latest: 9.4.0_4
Upstream
Higher version available: 10.0.0
Last update
to 9.4.0_4 · 97a84ef467
Quarterly
2026Q4: 9.4.0_4
WWW
https://www.onlyoffice.com/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install onlyoffice-documentserver
installs 9.4.0_4 from latest; from quarterly (2026Q4) 9.4.0_4
Port
# cd /usr/ports/www/onlyoffice-documentserver && make install clean
# make -C /usr/ports/www/onlyoffice-documentserver config  # change options first
Size
710 MiB download · 1.9 GiB installed
Depends on
archivers/brotli 1.2.1,1, converters/libiconv 1.18_1, devel/boost-libs 1.92.0, devel/gumbo 0.14.1, devel/icu 76.1,1, ftp/curl 8.23.0, graphics/libetonyek01 0.1.13_1,1, graphics/libheif 1.23.6, graphics/vips 8.18.6, print/harfbuzz 14.6.0, security/ca_root_nss 3.132, sysutils/pwgen 2.08_1,2, sysutils/py-supervisor 4.3.0,1, textproc/gsed 4.10, textproc/libodfgen01 0.1.8_3, textproc/librevenge 0.0.6, textproc/md4c 0.6.0, www/nginx 1.30.6_5,3, x11-fonts/webfonts 0.30_15
License
AGPLv3
Creates
user onlyoffice, group onlyoffice
Options
0 of 1 on in the package
Show the 1 options that are off
LLVM_PORTS
pkg-message
Shown after installing
CONFIGURATION:
-------------
The configuration file can be found (or created) at the following path:
  /usr/local/etc/onlyoffice/documentserver/local.json
The default values are available in the default.json configuration file,
which is available in the folders above. Please do not edit the contents of the
default.json file directly. The default values will be restored each time you
upgrade Document Server to a new version and all your changes will be lost. 

1. Enable services at startup in the /etc/rc.conf file:
  nginx_enable="YES"
  supervisord_enable="YES"

  Optionally in case of a jail with local IP and no internet access:
    update /etc/hosts in order to resolve your nextcloud server to its local IP

2. Set up supervisord in order to execute documentserver services:
  - let supervisord.conf load files contained in this directory by adding to
    /usr/local/etc/supervisord.conf:
[include]
files = /usr/local/etc/onlyoffice/documentserver/supervisor/*.conf

  - start supervisord:
    # service supervisord start

3. Set up nginx:
  - Include the configuration appropriate for your deployment within
    your /usr/local/etc/nginx/nginx.conf file:

     HTTP:
       include /usr/local/etc/onlyoffice/documentserver/nginx/ds.conf;

     HTTPS:
       include /usr/local/etc/onlyoffice/documentserver/nginx/ds-ssl.conf;

   Review and customize the supplied ds.conf or ds-ssl.conf nginx configuration
   before use, including the listen directives, TLS configuration, and any site-
   specific settings.

  - run documentserver-update-securelink.sh once for creating a verysecretstring
Note: documentserver-update-securelink.sh updates only the packaged ds.conf, ds-ssl.conf,
and local.json files in their default locations. If your nginx configuration uses custom
copies or alternate paths, synchronize the secure_link_secret values manually.

  - start nginx:
    # service nginx start

4. Install OnlyOffice plugins (you'll need internet):
   # /usr/local/bin/documentserver-pluginsmanager.sh --update=/usr/local/www/onlyoffice/documentserver/sdkjs-plugins/plugin-list-default.json

5. Set up Onlyoffice with Nextcloud, if desired:
  - JWT is mandated within Onlyoffice Nextcloud app, requiring edits to /usr/local/etc/onlyoffice/documentserver/local.json:
      In the token:enable section, set the browser, request:inbox and request:outbox objects to "true"

  - create a secure JWT secret (Base64 avoids issues with JSON/PHP character escaping)
    # openssl rand -base64 48

  - store the JWT secret in /usr/local/etc/onlyoffice/documentserver/local.json:
      In the services:Coauthoring:secret section, enter the JWT secret in the browser, inbox, outbox and session objects

  - restart Onlyoffice:
    # service supervisord restart

  - specify the JWT secret in the Nextcloud administrative configuration for Onlyoffice app

  - see the following for more info:
      https://api.onlyoffice.com/editors/nextcloud

8. Enjoy.
Shown after upgrading
If you are upgrading onlyoffice-documentserver from a version prior to 7.1.0.215,
you need to update the database schema:
  For PostgreSQL:
    psql -U postgres -d onlyoffice -f /usr/local/www/onlyoffice/documentserver/server/schema/postgresql/upgrade/upgradev710.sql
  For MySQL:
    mysql -u onlyoffice -D onlyoffice -p < /usr/local/www/onlyoffice/documentserver/server/schema/mysql/upgrade/upgradev710.sql
Shown after upgrading
If you are upgrading onlyoffice-documentserver from a version prior to 7.2.1.34,
you need to update the database schema:
  For PostgreSQL:
    psql -U postgres -d onlyoffice -f /usr/local/www/onlyoffice/documentserver/server/schema/postgresql/upgrade/upgradev720.sql
  For MySQL:
    mysql -u onlyoffice -D onlyoffice -p < /usr/local/www/onlyoffice/documentserver/server/schema/mysql/upgrade/upgradev720.sql
Shown after upgrading
NOTICE: The Admin Panel has been made closed source as of version 9.3.0.
It is no longer included in the community edition and is now only available
in the Developer and Enterprise editions of ONLYOFFICE Docs.

Attempts to access the Admin Panel URL (http://host/admin) will fail.
All configuration remains fully available through /usr/local/etc/onlyoffice/documentserver/local.json
as before, with no loss of functionality for the community edition.

You may safely remove any Admin Panel logs and configuration files:
  # rm -rf /var/log/onlyoffice/documentserver/adminpanel
  # rm -f /usr/local/etc/onlyoffice/documentserver/supervisor/adminpanel.conf
Shown after upgrading
NOTICE: As of ONLYOFFICE Docs 9.4.0, the upstream Community Edition no
longer supports PostgreSQL, MySQL, or RabbitMQ. These capabilities
remain available only in the Developer and Enterprise editions.

If upgrading from a version prior to 9.4.0, net/rabbitmq and any
database client packages used solely by ONLYOFFICE Docs may be removed.
After verifying proper operation, any database previously dedicated to
ONLYOFFICE Docs may be archived and deleted.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.4.0_49.4.0_4–
FreeBSD 159.4.0_49.4.0_4–
FreeBSD 149.4.0_49.4.0_4✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.4.0_49.4.0_4–
FreeBSD 149.4.0_49.4.0_4✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.4.0_4.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (89)

Mikael Urankar (mikael) · 7.3.3.49_2
www/onlyoffice-documentserver: Bump NODE_VERSION after node update
8e3923b6e6
Mikael Urankar (mikael) · 7.3.3.49_2
www/onlyoffice-documentserver: Fix user:group in documentserver-update-securelink.sh
c7bb53705e
Mikael Urankar (mikael) · 7.3.3.49_1
www/onlyoffice-documentserver: Fix path in documentserver-update-securelink.sh

PR:		270588
Reported by:	freebsd.org@vollkorn.cryptobitch.de
b5437dc630
Mikael Urankar (mikael) · 7.3.3.49_1
www/onlyoffice-documentserver: Add missing pwgen dependency

It is required by documentserver-update-securelink.sh

PR:		270589
Reported by:	freebsd.org@vollkorn.cryptobitch.de
778a941e48
Mikael Urankar (mikael) · 7.3.3.49_1
www/onlyoffice-documentserver: do not strip the json binary

binary generated by npm/pkg doesn't work if they are stripped

PR:		270591
Reported by:	freebsd.org@vollkorn.cryptobitch.de
3661e14f6a
Mikael Urankar (mikael) · 7.3.3.49_1
www/onlyoffice-documentserver: Remove redundant "onlyoffice" in nginx conf

ETCDIR already contains "onlyoffice", remove it from the nginx conf

PR:		270561
Reported by:	freebsd.org@vollkorn.cryptobitch.de
aacdea6317
Mikael Urankar (mikael) · 7.3.3.49
www/onlyoffice-documentserver: Fix build conflict with devel/py-build

The script "build_tools/make.py" tries to import "scripts/build.py"
but does this not properly and instead imports the module "build"
from devel/py-build

PR:		267265
Submitted by:	freebsd.org@vollkorn.cryptobitch.de
dab5a38070
Mikael Urankar (mikael) · 7.3.3.49
www/onlyoffice-documentserver: Update to 7.3.3

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/v7.3.3/CHANGELOG.md
c67d03ad16
Mikael Urankar (mikael) · 7.2.2.56
www/onlyoffice-documentserver: bump NODE_VERSION to 16.19.1

Regen the npm cache so that it's compatible with npm-node16-9.4.2
478934de17
Mikael Urankar (mikael) · 7.2.2.56
www/onlyoffice-documentserver: Update to 7.2.2

Changes:
  https://github.com/ONLYOFFICE/DocumentServer/blob/v7.2.2/CHANGELOG.md
57cfc912ac
Mikael Urankar (mikael) · 7.2.1.34_1
www/onlyoffice-documentserver: Fix build after node update

Regen the cache file for node 16.19.0
baa66e312b
Mikael Urankar (mikael) · 7.2.1.34_1
www/onlyoffice-documentserver: regen the cache file

The cache contains a precompiled amd64 binary (.pkg-cache/v3.2/built-v16.13.0-freebsd-x64),
remove it so that the build system will compile it.

Reported by: dch
7ce2e73845
Mikael Urankar (mikael) · 7.2.1.34
www/onlyoffice-documentserver: Update to 7.2.1.34
c1df68539c
Mikael Urankar (mikael) · 7.1.1.23_2
www/onlyoffice-documentserver: Fix build after node update

Regen the cache file for node 16.17.1
953bff75d2
Jan Beich (jbeich) · 7.1.1.23_2
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Felix Palmen (zirias) · 7.1.1.23_1
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 7.1.1.23_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 7.1.1.23_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mikael Urankar (mikael) · 7.1.1.23_1
www/onlyoffice-documentserver: Unbreak after node update
3b8f88d25c
Dima Panov (fluffy) · 7.1.1.23_1
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Mikael Urankar (mikael) · 7.1.1.23
www/onlyoffice-documentserver: Update to 7.1.1.23
4f361f8832
Mikael Urankar (mikael) · 7.1.0.215
www/onlyoffice-documentserver: Fix build after node16 update

While here remove useless code
347e35c1c5
Mikael Urankar (mikael) · 7.1.0.215
www/onlyoffice-documentserver: Mark as broken on i386

v8 doesn't compile on this arch

PR:		264367
Reported by:	salvadore
8e42787633
Mikael Urankar (mikael) · 7.1.0.215
www/onlyoffice-documentserver: Update to 7.1.0.215

- Update v8 to 8.9.255.25, the bug with 8.7.220.31 is fixed so we can
    compile v8 again.
  - Remove ONLY_FOR_ARCHS as v8 may builds on all archs.
  - Fix a few hardcoded /usr/local
  - Fix mysql instructions in pkg-message.in
  - Add upgrade procedure in pkg-message.in
f7218859cc
Dima Panov (fluffy) · 7.0.1.50_5
devel/boost-all: bump all library consumers after boost upgrade

PR:	246106
b082b3d13e
Mikael Urankar (mikael) · 7.0.1.50_4
www/onlyoffice-documentserver: Add missing EOM marker in pkg-message.in
37e2d17e9b
Mikael Urankar (mikael) · 7.0.1.50_3
www/onlyoffice-documentserver: Fix misplaced quotes
42384a5510
Mikael Urankar (mikael) · 7.0.1.50_2
www/onlyoffice-documentserver: Fix trigger path in files/onlyoffice-documentserver.ucl.in

Use the correct path for the trigger.
db0fd6b831
Mikael Urankar (mikael) · 7.0.1.50_1
www/onlyoffice-documentserver: Fix build after node 16.14.2 update and improve port

- Regen the distinfo after node 16.14.2 update
  - Fix for an hardcoded /usr/local in files/patch-core_Common_3dParty_icu_icu.pri
  - Don't chown in pkg-plist and documentserver-generate-allfonts.sh.m4, there is no rational to do that
  - Use a trigger to execute documentserver-generate-allfonts.sh and fix pkg-message accordingly

PR:		263114
960d9357ec
Jan Beich (jbeich) · 7.0.1.50_1
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Mikael Urankar (mikael) · 7.0.1.50
www/onlyoffice-documentserver: Fix build with MYSQL option

Add missing "localbase" to the USES list.

Error message:
Error: Command failed: /bin/sh -c ./configure --with-system-zlib --with-system-libpng --prefix="/wrkdirs/usr/ports/www/onlyoffice-documentserver/work/DocumentServer-7.0.1/web-apps/build/node_modules/optipng-bin/vendor" --bindir="/wrkdirs/usr/ports/www/onlyoffice-documentserver/work/DocumentServer-7.0.1/web-apps/build/node_modules/optipng-bin/vendor"

Checking for system libpng...
./configure: error: missing libpng or incorrect libpng version
./configure: note: libpng version 1.2.9 or higher is required

Reported and tested by: Martin Waschbüsch
b70f5cb564
Mikael Urankar (mikael) · 7.0.1.50
www/onlyoffice-documentserver: Update to 7.0.1.50

Update to 7.0.1.50
  Cleanup patches
  Remove obsolete dependencies (they were required to build v8)
  Don't force the installation of the database server, the server can be hosted anywhere.
  Fix a build fs violation (with PYTHONDONTWRITEBYTECODE=1)
  Various fix in pkg-message

Changes: https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#701
0e03a8f10f
Mikael Urankar (mikael) · 7.0.0.133_1
www/onlyoffice-documentserver: Improve port.

- Option'ify the database backend and add MySQL
  - Add a newsyslog sample file (pr 261514, submitted by Martin Waschbüsch)
  - Add a missing nginx sample file (ds-ssl.conf)
  - Fix an hardcoded /usr/local in files/patch-document-server-package_Makefile
  - Improve pkg-message:
    - Add an 'upgrade' note (suggested by bapt@)
    - Add instructions to use MySQL as a database server
    - Pass the erlang-cookie option when invoking rabbitmqctl

PR:		261514
d8171126ac
Mikael Urankar (mikael) · 7.0.0.133
www/onlyoffice-documentserver: Fix distinfo for v8-6.8.275.32_122aarch64.tar.gz
4855d915b4
Mikael Urankar (mikael) · 7.0.0.133
www/onlyoffice-documentserver: Update to 7.0.0.133

- Update to 7.0.0.133
 - Downgrade v8 to v6.8.275.32:
   onlyoffice doesn't work correctly with version 8.7.220.31
 - Use prebuilt binaries for v8, version 6.8.275.32 requires outdated ports:
   devel/gn@v1714, devel/py-Jinja2@v2.8 and textproc/py-markupsafe@v1.1.1
 - Restrict the port to aarch64 and amd64
 - Fix user name in pkg-plist

Changes: https://github.com/ONLYOFFICE/DocumentServer/blob/v7.0.0/CHANGELOG.md
7bad2e9cdc
Mikael Urankar (mikael) · 6.4.2_2
www/onlyoffice-documentserver: Fix onlyoffice username

This file needs to be changed too.
5fe18fe48d
Mikael Urankar (mikael) · 6.4.2_1
www/onlyoffice-documentserver: Fix onlyoffice username

It's "onlyoffice" not "ds"
While here remove a trailing whitespace in pkg-plist
54d51fc319
Mikael Urankar (mikael) · 6.4.2
www/onlyoffice-documentserver: fix patches

These patches contains DOS EOL, for whatever reasons git has removed them and put
Unix EOL instead.
Restore the DOS EOL.
db1eae8258
Mikael Urankar (mikael) · 6.4.2
www/onlyoffice-documentserver: Add new port

ONLYOFFICE Document Server is an online office suite comprising viewers and
editors for texts, spreadsheets and presentations, fully compatible with
Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing
in real time.

WWW: https://www.onlyoffice.com/

Reviewed by:		bapt
Differential Revision:	https://reviews.freebsd.org/D33923
e6f2735684