10 of 13 on in the package: ACCEPT_FILTERBROTLICOMPRESSIONDOCSEDITORFORCEHTTPS_INSPECTIONPRIVOXY_TOOLSTOGGLEZSTDShow the 3 options that are off
BROKEN_STRPTIMEDEBUGEXTERNAL_FILTERS
pkg-message
Shown after installing
To start Privoxy on boot, add: privoxy_enable="YES"
to /etc/rc.conf.
To start Privoxy manually, run:
service privoxy onestart
The rc script understands most of the commands listed
in rc(8), it also contains a list of other rc variables
you can use.
Privoxy's example files were copied to:
/usr/local/share/examples/privoxy
For documentation see:
/usr/local/share/doc/privoxy/user-manual or 'man privoxy'
Note that default.filter and default.action get
overwritten with each Privoxy update. Instead of
changing them you should use your own action and
filter files as described in Privoxy's manual.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
4.2.0
4.2.0
–
FreeBSD 15
4.2.0
4.2.0
–
FreeBSD 14
4.2.0
4.2.0
4.2.0
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
4.2.0
4.2.0
–
FreeBSD 14
4.2.0
4.2.0
4.2.0
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 4.2.0.
Fixed (4)
Show 4 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (76)
Yusuf Yaman (nxjoseph) · 4.2.0
www/privoxy: Update 4.1.0 => 4.2.0
Privoxy 4.2.0 fixes a couple of bugs and brings general improvements
such as support for elliptic-curve keys.
Two potential security problems have been reported and addressed.
Changelog:
https://lists.privoxy.org/pipermail/privoxy-announce/2026-June/000013.html
Port changes:
- The Privoxy tools come with proper man pages now so install
them when the tools are enabled.
PR: 295848
Reported by: Fabian Keil <fk@fabiankeil.de> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
www/privoxy: Update 4.0.0 => 4.1.0, improve port
Changelog:
https://lists.privoxy.org/pipermail/privoxy-announce/2026-January/000012.html
Improve port:
- Add zstd option and enable it by default.
- Enable the already existing COMPRESSION option by default.
It doesn't add additional dependencies and some users may want it.
- Declare licenses.
- Parametrize "privoxy" with "${PORTNAME}".
- Replace "CPPFLAGS" and "LDFLAGS" with USES feature "localbase".
- Change pkg-message to suggest using "onestart" instead of "forcestart"
to start Privoxy manually. There is no need for "forcestart".
- Replace PORTVERSION with DISTVERSION.
- Switch to *_CONFIGURE_ENABLE and *_CONFIGURE_WITH.
- Use ${ETCDIR} instead of ${PREFIX}/etc/privoxy.
- Merge MKDIR calls.
- Move install DOCS to do-install-DOCS-on (and merge INSTALL_DATA).
- Move install PRIVOXY_TOOLS to do-install-PRIVOXY_TOOLS-on (and merge
INSTALL_SCRIPT).
- Optimize do-install (merge INSTALL_DATA).
- Sort pkg-plist.
PR: 292213
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
www/privoxy: Update to 4.0.0
While at it, add an option to enable external-filter support.
changeLog:
https://lists.privoxy.org/pipermail/privoxy-announce/2025-January/000011.html
PR: 284251
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
www/privoxy: Update to 3.0.33 stable
This update fixes a couple of security issues. Quoting the ChangeLog:
- Security/Reliability:
- cgi_error_no_template(): Encode the template name to prevent
XSS (cross-side scripting) when Privoxy is configured to servce
the user-manual itself.
Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543.
Reported by: Artem Ivanov
- get_url_spec_param(): Free memory of compiled pattern spec
before bailing.
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit 652b4b7cb0. OVE-20211201-0003. CVE-2021-44540.
- process_encrypted_request_headers(): Free header memory when
failing to get the request destination.
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit 0509c58045. OVE-20211201-0002. CVE-2021-44541.
- send_http_request(): Prevent memory leaks when handling errors
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit c48d1d6d08. OVE-20211201-0001. CVE-2021-44542.
The complete list of changes is available at:
https://lists.privoxy.org/pipermail/privoxy-announce/2021-December/000009.html
PR: 260290
MFH: 2021Q4
Security: 897e1962-5d5a-11ec-a3ed-040e3c3cf7e7
*/*: Remove redundant '-[0-9]*' from CONFLICTS
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".
Approved by: portmgr (blanket)
- Update to 3.0.26 - Use official website as primary master site. - Add option to increase the number of connections Privoxy can serve at the same time - Quote variables in the rc script more consistently.
The upstream changes are documented at:
https://www.privoxy.org/3.0.26/user-manual/whatsnew.html
PR: 212240
Submitted by: fk@fabiankeil.de (maintainer)
www/privoxy: 3.0.23 -> 3.0.24
Changes:
http://www.privoxy.org/3.0.24/user-manual/whatsnew.html
- Use Uses=autoreconf.
- Unbreak installation with DOCS=off.
- Add PRIVOXY_TOOLS to the default options.
- Remove BROKEN_STRPTIME from the default options.
FreeBSD bug #173421 is fixed in all supported releases.
PR: 206504
Submitted by: Fabian Keil <fk@fabiankeil.de> (maintainer)
- Update to version 3.0.22 - Clean pkg-plist
The changes are listed here:
http://www.privoxy.org/3.0.22/user-manual/whatsnew.html
This update fixes two security issues.
PR: 195468
Submitted by: maintainer
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Make small changes to three option descriptions, to avoid creating the false impression that no additional configuration is needed to use the features mentioned in the descriptions
Approved by: F. Keil (maintainer)
Feature safe: yes
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.