5 of 6 on in the package: DOCSEXTERNALSIPV6NLSSSLShow the 1 options that are off
DEFAULT_COLORS
pkg-message
Shown after installing
To enable certificate handling for SSL connnections, set
SSL_CERT_DIR and SSL_CERT_FILE in your environment to the
proper values (depending upon which SSL library
/usr/local/bin/lynx uses), as described in:
/usr/local/share/doc/lynx/docs/README.sslcerts
and:
/usr/local/share/doc/lynx/docs/README.rootcerts.
You may also need to generate keys and certificates as
described in the latter document and your SSL documentation.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
2.8.9.1_3,1
2.8.9.1_3,1
–
FreeBSD 15
2.8.9.1_3,1
2.8.9.1_3,1
–
FreeBSD 14
2.8.9.1_3,1
2.8.9.1_3,1
2.8.9.1_3,1
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
2.8.9.1_3,1
2.8.9.1_3,1
–
FreeBSD 14
2.8.9.1_3,1
2.8.9.1_3,1
2.8.9.1_3,1
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.9.1_3,1.
Fixed (3)
Show 3 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (280)
Rong-En Fan (rafan) · 2.8.6.5,1
- Since iconv is used only for i18n stuff, put it under !defined(WITHOUT_NLS) section.
PR: ports/114356
Submitted by: Helge Oldach <ports-www-lynx-jul07 at oldach.net>
Approved by: maintainer timeout (20 days)
- Enable SSL by default in www/lynx - Unregister CONFLICTS with lynx-ssl - Canonicalize Makefile header - s/=\?/=/ since no longer master port - Deorbit www/lynx-ssl
Approved by: maintainer
Add explicit @dirrmtry to remove the rw-locale at package deinstall. Unlike other locales, rw is not yet listed in the BSD.local.dist mtree.
Discussed with: portmgr (pav)
Add a patch, which makes sure, that lynx' own internal entities.h is included, instead of one possibly installed by other software such as gd.
Remove "non-functional comments".
Check WITHOUT_IPV6 in addition to NO_INET6.
Suggested by: timur
Update from 2.8.6rel.4 to 2.8.6rel.5.
Use iconv, gettext (unless WITHOUT_NLS is set). Check the NO_INET6
knob (whether IPV6 is compiled into libc et al) and disable ipv6,
if set.
Make the lynx' release number (last digit) part of the PORTVERSION.
Approved by: maintainer (without personal test)
- Force lynx to pick up ncurses from base. This fixes build when 1) devel/ncurses is installed, and 2) use OpenSSL from ports. In that case, lynx picks up ncurses/ncurses.h which is from ports and somehow it does not include term.h
PR: ports/113515
Reported by: Ighighi <ighighi at gmail.com>
Approved by: Jason Harris <jharris at widomaker.com> (maintainer)
Remove USE_GPG from all effected ports. This knob is a no-op and the way it was supposed to work is useless, because if we can't trust the distfile from the remote machine, we can't trust the signature from the same machine either. Our MD5 and SHA256 are good for checking both the sanity and the trustiness of distfiles.
Approved by: portmgr (erwin), erwin (mentor)
Remove from PATCHFILES things that are not patch files (thusly avoiding "I can't seem to find a patch in there" messages).
PR: ports/89729
Submitted by: Scot W. Hetzel <swhetzel@gmail.com>
Approved by: jharris@widomaker.com (maintainer, timeout 14 days)
Update to 2.8.5rel.4, which fixes a remote buffer overflow in NNTP handling.
Security: http://www.vuxml.org/freebsd/c01170bf-4990-11da-a1b8-000854d03344
Update to 2.8.5. Add CONFLICTS, fetching (and verifying) of PGP signature. Use DOCSDIR macro. [v]
Submitted by: Jason Harris <jharris@widomaker.com> (maintainer),
osa [v]
PR: 62713
o Rollback PORTCOMMENT modifications while this feature's implementation is better studied o Turn PORTCOMMENT variable in Makefile back into pkg-comment files
Approved by: kris (portmgr hat),
portmgr, re (silence)
o updato to 2.8.4rel.1b. o fix the format string vulnerability if configured with --enable-syslog (disabled by default) http://archives.neohapsis.com/archives/bugtraq/2001-12/0276.html
PR: 33936
Submitted by: KOMATSU Shinichiro <koma2@jiro.c.u-tokyo.ac.jp>
Update all ports using OpenSSL and RSA to work without rsaref since it is no longer required. Apologies to the various maintainers whom I did not yet hear back from, but the ports freeze is coming up in a few hours and I will be verifying all of these ports on a 4.1 machine myself to catch any problems.
Neil Blakey-Milner (nbm) · 2.8.3.1 · as www/lynx-ssl
Upgrade to 2.8.3.1, and unmark FORBIDDEN. (non-ssl lynx was unmarked broken when crossing 2.8.3.pre5)
PR: ports/20399
Submitted by: Stefan `Sec` Zehl <sec@ice.42.org> (MAINTAINER)
Mark lynx FORBIDDEN due to numerous potential and proven server-exploitable buffer overflows, until the lynx team get their act together and clean up their code.
Noticed by: Michal Zalewski <lcamtuf@DIONE.IDS.PL> (Bugtraq)
Reviewed by: the rest of the security-officer team.