CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

www/lynx 2.8.9.1_3,1

Non-graphical, text-based World-Wide Web client

Port info

Maintainer
jharris@widomaker.com
Packages
latest: 2.8.9.1_3,1
Upstream
up to date
Last update
to 2.8.9.1_3,1 · 8e7b343137
Quarterly
2026Q4: 2.8.9.1_3,1
Formerly
www/lynx-ssl until 2007-07-10
WWW
https://lynx.invisible-island.net/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install lynx
installs 2.8.9.1_3,1 from latest; from quarterly (2026Q4) 2.8.9.1_3,1
Port
# cd /usr/ports/www/lynx && make install clean
# make -C /usr/ports/www/lynx config  # change options first
Size
1.7 MiB download · 5.7 MiB installed
Depends on
devel/gettext-runtime 1.0_1, dns/libidn 1.44
License
GPLv2
Options
5 of 6 on in the package: DOCS EXTERNALS IPV6 NLS SSL
Show the 1 options that are off
DEFAULT_COLORS
pkg-message
Shown after installing
To enable certificate handling for SSL connnections, set
SSL_CERT_DIR and SSL_CERT_FILE in your environment to the
proper values (depending upon which SSL library
/usr/local/bin/lynx uses), as described in:

/usr/local/share/doc/lynx/docs/README.sslcerts

and:

/usr/local/share/doc/lynx/docs/README.rootcerts.

You may also need to generate keys and certificates as
described in the latter document and your SSL documentation.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.8.9.1_3,12.8.9.1_3,1–
FreeBSD 152.8.9.1_3,12.8.9.1_3,1–
FreeBSD 142.8.9.1_3,12.8.9.1_3,12.8.9.1_3,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.8.9.1_3,12.8.9.1_3,1–
FreeBSD 142.8.9.1_3,12.8.9.1_3,12.8.9.1_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.9.1_3,1.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (280)

Rong-En Fan (rafan) · 2.8.6.5,1
- Since iconv is used only for i18n stuff, put it under !defined(WITHOUT_NLS)   section.

PR:		ports/114356
Submitted by:	Helge Oldach <ports-www-lynx-jul07 at oldach.net>
Approved by:	maintainer timeout (20 days)
99007900ce
Alexey Dokuchaev (danfe) · 2.8.6.5,1
- Enable SSL by default in www/lynx - Unregister CONFLICTS with lynx-ssl - Canonicalize Makefile header - s/=\?/=/ since no longer master port - Deorbit www/lynx-ssl

Approved by:	maintainer
783c8c2e42
Mikhail Teterin (mi) · 2.8.6.5,1
Add explicit @dirrmtry to remove the rw-locale at package deinstall. Unlike other locales, rw is not yet listed in the BSD.local.dist mtree.

Discussed with:	portmgr	(pav)
77fdbda662
Mikhail Teterin (mi) · 2.8.6.5,1
Add the localizations (.mo) files, which are now installed by default (unless WITHOUT_NLS is set) to pkg-plist.

Notified by:	pav
172f9a8dcd
Mikhail Teterin (mi) · 2.8.6.5,1
Add a patch, which makes sure, that lynx' own internal entities.h is included, instead of one possibly installed by other software such as gd.

Remove "non-functional comments".

Check WITHOUT_IPV6 in addition to NO_INET6.

Suggested by:	timur
e79389466a
Mikhail Teterin (mi) · 2.8.6.5,1
Update from 2.8.6rel.4 to 2.8.6rel.5.

Use iconv, gettext (unless WITHOUT_NLS is set). Check the NO_INET6
knob (whether IPV6 is compiled into libc et al) and disable ipv6,
if set.

Make the lynx' release number (last digit) part of the PORTVERSION.

Approved by:	maintainer (without personal test)
2d5f9c2575
Rong-En Fan (rafan) · 2.8.6_5,1
- Force lynx to pick up ncurses from base. This fixes build when   1) devel/ncurses is installed, and 2) use OpenSSL from ports.   In that case, lynx picks up ncurses/ncurses.h which is from ports   and somehow it does not include term.h

PR:   	      ports/113515
Reported by:  Ighighi <ighighi at gmail.com>
Approved by:  Jason Harris <jharris at widomaker.com> (maintainer)
2c2f9291da
Foxfair Hu (foxfair) · 2.8.6_5,1
fix pkg-plist

Submitted by:	marcus@
ca98c2c50f
Foxfair Hu (foxfair) · 2.8.6_4,1
Add PORTEPOCH to fix a false warning of security vulnerability check. Fix pkg_plist and portlint.
5fa24b2dd9
Foxfair Hu (foxfair) · 2.8.6_4
Upgrade www/lynx to 2.8.6rel.4

PR:		111530
Submitted by:	me
Reviewed by:	maintainer
01529e91a1
Gabor Kovesdan (gabor) · 2.8.5_2
Remove USE_GPG from all effected ports. This knob is a no-op and the way it was supposed to work is useless, because if we can't trust the distfile from the remote machine, we can't trust the signature from the same machine either. Our MD5 and SHA256 are good for checking both the sanity and the trustiness of distfiles.

Approved by:	portmgr (erwin), erwin (mentor)
c0ce4105e7
Oliver Lehmann (oliver) · 2.8.5_2
fix ssl detection if openssl does not exist in base but in LOCALBASE

PR:		ports/105791
Approved by:	maintainer
51e32e73cc
Sam Lawrance (lawrance) · 2.8.5_2
Remove from PATCHFILES things that are not patch files (thusly avoiding "I can't seem to find a patch in there" messages).

PR:		ports/89729
Submitted by:	Scot W. Hetzel <swhetzel@gmail.com>
Approved by:	jharris@widomaker.com (maintainer, timeout 14 days)
c0cec89a6f
Marcus Alves Grando (mnag) · 2.8.5_2
Add support to application/xhtml+xml Bump PORTREVISION Add SHA256

PR:		87694
Submitted by:	Ed Schouten <ed@fxq.nl>
Approved by:	maintainer timeout, 14 days
194da69536
Christian Weisgerber (naddy) · 2.8.5_1
Update to 2.8.5rel.4, which fixes a remote buffer overflow in NNTP handling.

Security:	http://www.vuxml.org/freebsd/c01170bf-4990-11da-a1b8-000854d03344
ee67fc8834
Kirill Ponomarev (krion) · 2.8.5
- Utilize ENABLE_DEFAULT_COLORS knob

PR:		ports/63295
Submitted by:	Gene Hsu <gene@hsufarm.com>
Approved by:	maintainer
e7d096a439
Sergey A. Osokin (osa) · 2.8.5
Fix CONFIGURE_ARGS in master port for build slave port (lynx-ssl).

Submitted by:	Jason Harris <jharris@widomaker.com> (maintainer)
PR:		ports/63044
e01e0e6955
Sergey A. Osokin (osa) · 2.8.5
Update to 2.8.5. Add CONFLICTS, fetching (and verifying) of PGP signature. Use DOCSDIR macro. [v]

Submitted by:	Jason Harris <jharris@widomaker.com> (maintainer),
		osa [v]
PR:		62713
42b187699a
Daniel Harris (dannyboy) · as www/lynx-ssl
Add CONFLICTS, portlint.

PR:		62589
Submitted by:	maintainer
31ba264b14
Clement Laforet (clement) · 2.8.4.1d
- Pass maintainership to volunteer

PR:             61216
Submitted by:   Jason Harris <jharris@widomaker.com>
Approved by:    erwin (mentor) (implicitly)
391519e609
Sergey A. Osokin (osa) · 2.8.4.1d
Update to 2.8.4.1d Update PATCH_SITES

Submitted by:	Serge Gagnon <gagnon__s@videotron.ca>
PR:		53118
Approved by:	fjoe (implicit)
a9fc7b472e
Akinori MUSHA (knu) · 2.8.4.1c
Allow overriding MAINTAINER and COMMENT.
c9830c0c23
Akinori MUSHA (knu) · as www/lynx-ssl
Add MAINTAINER=ports@FreeBSD.org and de-pkg-comment.
92ef0d4afc
Akinori MUSHA (knu) · 2.8.4.1c
De-pkg-comment.
cb07270bfe
Kris Kennaway (kris) · as www/lynx-ssl
Convert COMMENT to COMMENTFILE until these ports can be converted.

Submitted by:	lioux
02baa4219f
Mario Sergio Fujikawa Ferreira (lioux) · 2.8.4.1c
o Rollback PORTCOMMENT modifications while this feature's implementation   is better studied o Turn PORTCOMMENT variable in Makefile back into pkg-comment files

Approved by:	kris (portmgr hat),
		portmgr, re (silence)
f0a1969d34
Adam Weinberger (adamw) · 2.8.4.1c
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.

Approved by:	pat
d9611f9375
Patrick Li (pat) · 2.8.4.1c
Fix post-patch removal of correct .orig file
28d02437b5
Trevor Johnson (trevor) · 2.8.4.1c
Remove CHANGES.bak.orig rather than the nonexistent CHANGES.orig.
cf9a18f377
Oliver Braun (obraun) · 2.8.4.1c
Upgrade to 2.8.4.1c.

PR:		ports/42024
Submitted by:	KOMATSU Shinichiro <koma2@jiro.c.u-tokyo.ac.jp>
Approved by:	dwcjr (mentor)
83d23bdd7c
Munechika SUMIKAWA (sumikawa) · 2.8.4.1b_1
Enabled IPv6.
aa5a9684f4
FUJISHIMA Satsuki (sf) · 2.8.4.1b
o updato to 2.8.4rel.1b. o fix the format string vulnerability if configured with --enable-syslog   (disabled by default)   http://archives.neohapsis.com/archives/bugtraq/2001-12/0276.html

PR:		33936
Submitted by:	KOMATSU Shinichiro <koma2@jiro.c.u-tokyo.ac.jp>
89d951773c
Dmitry Sivachenko (demon) · as www/lynx-ssl
Make this port slave to www/lynx (and thus update it to 2.8.4.1).

PR:		31619
Submitted by:	MAINTAINER
059608b4d9
David W. Chapman Jr. (dwcjr) · 2.8.4.1
Remove jseger and torstenb from maintainership of their ports, they have been inactive for too long

Approved by:	will
5872a89c3b
David W. Chapman Jr. (dwcjr) · 2.8.4.1
Update to 2.8.4rel.1

PR:		29826
Submitted by:	tkato@prontomail.com
No response:	maintainer
522888f834
Maxim Sobolev (sobomax) · 2.8.3.1
Massive style enforcement - use ^I instead of spaces for variables identation.
2b1a883dc4
Kevin Lo (kevlo) · 2.8.3.1 · as www/lynx-ssl
Switch distfile to bzip2.

PR: 21731
Submitted by: MAINTAINER
9f9a8fb2d2
Kris Kennaway (kris) · 2.8.3.1 · as www/lynx-ssl
Update all ports using OpenSSL and RSA to work without rsaref since it is no longer required. Apologies to the various maintainers whom I did not yet hear back from, but the ports freeze is coming up in a few hours and I will be verifying all of these ports on a 4.1 machine myself to catch any problems.
e088a4f458
Kris Kennaway (kris) · 2.8.3.1
Remove out-of-date comment.
3a764d046c
Neil Blakey-Milner (nbm) · 2.8.3.1 · as www/lynx-ssl
Upgrade to 2.8.3.1, and unmark FORBIDDEN.  (non-ssl lynx was unmarked broken when crossing 2.8.3.pre5)

PR:		ports/20399
Submitted by:	Stefan `Sec` Zehl <sec@ice.42.org> (MAINTAINER)
5baeababef
Satoshi Asami (asami) · 2.8.3.1
Remove lynx.cfg iff it is identical to lynx.cfg.default.

Found by:	bento
b29294f8ad
Akinori MUSHA (knu) · 2.8.3.1
Update to 2.8.3rel.1.

PR:		ports/18302 (update to 2.8.3pre.8)
Submitted by:	Ben Smithurst <ben@scientia.demon.co.uk>
f9541c31b3
Justin M. Seger (jseger) · 2.8.3.p5
Switch to a more FreeBSD-port system compliant PKGNAME.
bbcdfa3724
Justin M. Seger (jseger) · 2.8.3pre.5
Upgrade to 2.8.3pre.5 (sync with lynx-current)

This version has been cleared by Kris to no longer
be marked FORBIDDEN.
f7676e4483
Chris Piazza (cpiazza) · 2.8.2rel.1
Update with the new PORTNAME/PORTVERSION variables
c3bb46468e
Satoshi Asami (asami) · as www/lynx-ssl
Mark it FORBIDDEN, buffer overflows galore.

Submitted by:	Kris Kennaway <kris@hub.freebsd.org>
35c27d4e72
Kris Kennaway (kris)
Mark lynx FORBIDDEN due to numerous potential and proven server-exploitable buffer overflows, until the lynx team get their act together and clean up their code.

Noticed by:	Michal Zalewski <lcamtuf@DIONE.IDS.PL> (Bugtraq)
Reviewed by:	the rest of the security-officer team.
f9b5816b42
Kris Kennaway (kris) · as www/lynx-ssl
USE_OPENSSL

Assisted by:    Jim Bloom <bloom@acm.org>
cda9d9b14a
Steve Price (steve) · as www/lynx-ssl
Honor PREFIX setting.

PR:		15137
Submitted by:	Matt Behrens <matt@zigg.com>
36af88dcd4
Dirk Froemberg (dirk) · as www/lynx-ssl
Change dependencies from static to shared openssl libraries, because openssl also builds shared libraries, now.
acf3546644