Sun has issued updated packages to fix a minor, older vulnerability in lynx.

If lynx receives special characters on the command line, it may include faked headers in the HTTP request. This could possibly be abused to make lynx download from the wrong domain from a server hosting multiple domains.

Solution
This is hardly a security issue. Any script taking arguments from non trusted users and passing them to lynx should do proper checking of the arguments, as it possibly could be abused to much more dangerous things, than making lynx download something from the wrong domain.
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers