*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
payara -- multiple vulnerabilitiesentered 2020-10-06
CVE-2018-14371, CVE-2018-14718, CVE-2018-14719, CVE-2018-14720, CVE-2018-14721
Port details
www/payara 7.2025.2_2
Jakarta EE application server derived from GlassFish Server Open Source Edition
Port info
- Maintainer
- dmytro@posteo.net
- Packages
- latest: 7.2025.2_2
- Upstream
- Higher version available: 7.2026.10
- Last update
- to 7.2025.2_2 · 86813e9ccf
- Quarterly
- 2026Q4: 7.2025.2_2
- WWW
- https://www.payara.fish/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install payarainstalls 7.2025.2_2 fromlatest; fromquarterly(2026Q4) 7.2025.2_2- Port
# cd /usr/ports/www/payara && make install clean- Size
- 147 MiB download · 206 MiB installed
- Depends on
- java/openjdk25 25.0.4+7.f.1_1
- License
- CDDL or GPLv2
- Creates
- user
payara, grouppayara - pkg-message
Shown after installing
To run the Payara Java Application Server from startup, add payara_enable="YES" in your /etc/rc.conf. Extra options can be found in the startup script. By default Payara server is started by 'payara' user account. On service start/stop caches and preferences are written to the payara user home directory. To make it possible and avoid related warnings set 'payara' user home directory to some writable place in the file system. To use the default location, issue the command: /usr/sbin/pw usermod payara -d /var/payara/payara-7.2025.2/prefs Because default payara user is low-privileged, to allow Payara to listen ports under 1024 you will need to tweak Mandatory Access Control policies.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.2025.2_2 | 7.2025.2_2 | – |
| FreeBSD 15 | 7.2025.2_2 | 7.2025.2_2 | – |
| FreeBSD 14 | 7.2025.2_2 | 7.2025.2_2 | 7.2025.2_2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.2025.2_2 | 7.2025.2_2 | – |
| FreeBSD 14 | 7.2025.2_2 | 7.2025.2_2 | 7.2025.2_2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 7.2025.2_2.Fixed (6)
Show 6 fixed
VuXML entries whose affected range the packaged version has left.
Payara -- A Polymorphic Typing issue in FasterXML jackson-databindentered 2020-10-06
payara -- Code execution via crafted PUT requests to JSPsentered 2018-11-28
payara -- Default typing issue in Jackson Databindentered 2018-11-28
payara -- Multiple vulnerabilitiesentered 2018-11-28
CVE-2016-1000031, CVE-2016-5528, CVE-2017-3239, CVE-2017-3247, CVE-2017-3249, CVE-2017-3250
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (16)
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
www/payara: Update 5.2020.4 => 7.2025.2 Changelogs: https://github.com/payara/Payara/releases/tag/payara-server-5.2020.5 https://github.com/payara/Payara/releases/tag/payara-server-5.2020.6 https://github.com/payara/Payara/releases/tag/payara-server-5.2020.7 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.1 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.2 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.3 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.4 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.5 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.6 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.7 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.8 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.9 https://github.com/payara/Payara/releases/tag/payara-server-5.2021.10 https://github.com/payara/Payara/releases/tag/payara-server-5.2022.1 https://github.com/payara/Payara/releases/tag/payara-server-5.2022.2 https://github.com/payara/Payara/releases/tag/payara-server-5.2022.3 https://github.com/payara/Payara/releases/tag/payara-server-5.2022.4 https://github.com/payara/Payara/releases/tag/payara-server-5.2022.5 https://github.com/payara/Payara/releases/tag/payara-server-6.2022.1 https://github.com/payara/Payara/releases/tag/payara-server-6.2022.2 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.1 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.2 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.3 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.4 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.5 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.6 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.7 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.8 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.9 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.10 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.11 https://github.com/payara/Payara/releases/tag/payara-server-6.2023.12 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.1 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.2 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.3 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.4 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.5 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.6 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.7 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.8 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.9 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.10 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.11 https://github.com/payara/Payara/releases/tag/payara-server-6.2024.12 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.1 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.2 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.3 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.4 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.5 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.6 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.7 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.8 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.9 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.10 https://github.com/payara/Payara/releases/tag/payara-server-6.2025.11 https://github.com/payara/Payara/releases/tag/payara-server-7.2025.1 https://github.com/payara/Payara/releases/tag/payara-server-7.2025.2 While here fix warnings from portclippy and poudriere and improve do-install. PR: 291821 Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>654cefd824
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
*/*: Refactor java/openjdk7 removal - java/openjdk7* has been removed from the tree since 2022-09-03 however the relevant codebases in bsd.java.mk has not been removed and the consumers has also not been updated to use the next jdk version. This commit updates all relevant consumers to use JAVA_VERSION=8 instead of JAVA_VERSION=1.7 - Since the introduction of jdk version 18 it looks like similar with jdk version 8(java version string 1.8). This is prone to error as it looks similar and is only seperated by a '.'. Remove using JAVA_VERSION with dotted fomat of java version string and update all consumers to utilize version 8 instead of 1.8. Approved by: portmgr (blanket)4cda17ab14
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
*/*: fix trailing whitespace in pkg-descr's Approved by: portmgr blanket7b4d1f0b36
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
www/payara: update 5.183 -> 5.2020.4 PR: 250207 Submitted by: Dmytro Bilokha <dmytro@posteo.net> (maintainer) Relnotes: https://docs.payara.fish/community/docs/5.2020.4/release-notes/release-notes-2020-4.html MFH: 2020Q4 Security: CVE-2020-6950f09584adce
Convert to UCL & cleanup pkg-message (categories w)a400cfc5f4
www/payara: upgrade 4.1.2.173 -> 5.183 PR: 233573 Submitted by: Dmytro Bilokha <dmytro@posteo.net> (maintainer) Security: CVE-2018-7489, CVE-2017-12615 MFH: 2018Q4 Relnotes: https://docs.payara.fish/release-notes/release-notes-183.html https://docs.payara.fish/release-notes/release-notes-182.html https://docs.payara.fish/release-notes/release-notes-181.html https://docs.payara.fish/release-notes/release-notes-4-181.html https://docs.payara.fish/release-notes/release-notes-174.htmlf9211ebd21
Update www/payara from 4.1.1.163 to 4.1.2.173 Add a user and group to run the server Full release note : https://docs.payara.fish/release-notes/release-notes-173.html PR: 224405 Submitted by: Dmytro Bilokha <dmytro@posteo.net> (maintainer)a90b7c6d43
New port: www/payara Payara Server is a patched, enhanced and supported application server derived from GlassFish Server Open Source Edition 4.x. WWW: http://www.payara.fish/ PR: 215708 Submitted by: Dmytro Bilokha <dmytro@posteo.net>62b60779b1