CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

games/nethack32 3.2.3_8

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.2.3_8
Upstream
up to date
Last update
to 3.2.3_8 · 20707ecd65
Quarterly
2026Q4: 3.2.3_8
WWW
https://www.nethack.org/
Links
cgit · VuXML

Install

Package
# pkg install nethack32
installs 3.2.3_8 from latest; from quarterly (2026Q4) 3.2.3_8
Port
# cd /usr/ports/games/nethack32 && make install clean
# make -C /usr/ports/games/nethack32 config  # change options first
Size
897 KiB download · 2.4 MiB installed
Depends on
x11-toolkits/libXaw 1.0.16,2, x11/libXpm 3.5.20
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.2.3_83.2.3_8–
FreeBSD 153.2.3_83.2.3_8–
FreeBSD 143.2.3_83.2.3_83.2.3_8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.2.3_83.2.3_8–
FreeBSD 143.2.3_83.2.3_83.2.3_8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (8)

The CVE record lists the packaged version 3.2.3_8 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes 7 of the 8 unaddressed CVEs.
1 CVE names no fixed version in the CVE record (for example only a commit).
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2003-03584.62003-06-09Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s co…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.2.3_8 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (96)

Akinori MUSHA (knu) · 3.2.3
NetHack distfiles are not on MASTER_SITE_GNU anymore.
f26032e3b9
Patrick Li (pat) · 3.2.3
- PORTDOCS police - DOCSDIR support to some - Brush out some lint
b666502afd
Akinori MUSHA (knu) · 3.2.3
Define NO_LATEST_LINK.
db8bcc3a53
Dirk Froemberg (dirk) · 3.2.3
POSIX syntax for chown.
d284a66d69
Peter Pentchev (roam) · 3.2.3
As much as I like Nethack, I just do not have the resources to maintain this port anymore.  Taking maintainership over from -ports was done in an effort to unbreak it and preserve this classic game, but now it seems that my unresponsiveness is only standing in the way of more and much better updates.

Apologies to all those who have CC'd me in the last few months in mail WRT
updating/unifying the various Nethack ports; do not let my silence stop
you any longer!
19b9975a13
Peter Pentchev (roam) · 3.2.3
update my email address - roam@orbitel.bg -> roam@FreeBSD.org
05ce43b4f6
Ade Lovett (ade) · 3.2.3
Unbreak port Maintainer switch from ports@FreeBSD.org to submitter

PR:		21096
Submitted by:	Peter Pentchev <roam@orbitel.bg> - new maintainer
1fe6c54528
Alexander Langer (alex) · 3.2.3
Distfile changed on mastersite.

From the UPDATE file for this update:
>This is a minor bugfix release.  Sorry, no major new functionality this
>time around.
The complete changes can be found in the UPDATE32.2 file and are
therefore not included here.

PR:		20563
Submitted by:	Jimmy Olgeni <olgeni@uli.it> (md5 fix w/o description)
c90047fdac
Satoshi Asami (asami) · 3.2.3
(1) Add new variable, XFREE86_VERSION, to specify which version of     XFree86 (3 or 4) to depend to when USE_XLIB is set.     XFREE86_VERSION defaults to 3 for now, but adventurous users can     override it in /etc/make.conf.  When XFREE86_VERSION=3, USE_XLIB     will add a dependency to x11/XFree86; when it is set to 4, the     dependency will be to x11/XFree86-4-libraries.  When     XFREE86_VER

Since XFree86 version 4 includes some software that used to be
    separate ports, when XFREE86_VERSION=3 the following variables are
    provided:

    USE_DGS		LIB_DEPENDS on x11/dgs
    USE_FREETYPE	LIB_DEPENDS on print/freetype
    USE_MESA		LIB_DEPENDS on graphics/Mesa3
    USE_XPM		LIB_DEPENDS on graphics/xpm

    When XFREE86_VERSION=4, these variables have no effect.  The
    LIB_DEPENDS in the tree for the above four ports have all been
    converted to the USE_* counterparts.  For your information, this
    is the count of the number of ports:

    USE_DGS		0
    USE_FREETYPE	16
    USE_MESA		36
    USE_XPM		236

    There is a new variable, XAWVER, which is set to 6 when
    XFREE86_VERSION=3 and 7 when XFREE86_VERSION=4.  This is also
    passed to PLIST_SUB so ports that build Xaw based shared libraries
    can use this variable to substitute the shlib version number.

    There is also a provision of using a separate mtree file for
    XFREE86_VERSION=4, but that part is not enabled yet.

Reviewed by:	the ports list
Tested by:	make index (XFREE86_VERSION=3 only)

(2) Add hebrew to list of valid categories.
Submitted by:	nbm
c6bcad2436
Satoshi Asami (asami) · 3.2.3
Convert to PORTNAME/PORTVERSION.  The following ports hand invalid version strings so I fixed them: quakeforge, netrek-BRMH, netrek-COW3, tetrinet-x and xnibbles.
2971a93e52
Chris Piazza (cpiazza)
Update to version 3.2.3

PR:		15442
Submitted by:	David Scheidt <dscheidt@enteract.com>
6bca316376
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
David E. O'Brien (obrien)
Change Id->FreeBSD.
253c66d044
Michael Haro (mharo)
chmod -> ${CHMOD} chown -> ${CHOWN}
5281212be3
Tim Vanderhoek (hoek)
Commit #2/4 to enforce Caps, no period.  I ran this oe as $ time cvs $FREEBSD ci -m `cat msg` `cat ci.ab`

Results to follow.  :)
4b7f92f936
Steve Price (steve)
time(3) returns a time_t and not a long.
ddcecda9c9
Tim Vanderhoek (hoek)
(Null Cowit Mewwage)
7c0c0fc3ca
Seiichirou Hiraoka (flathill)
I forgot remove patch-aa. Update PLIST. Submitted by: h-nokubi@nsk.nis.nec.co.jp
2f1875f6e9
Seiichirou Hiraoka (flathill)
Fix 'missing rip.xpm' error. patch-aa contains patch for some files. So separate to some patch-a? PR: ports/10680 Submitted by: h-nokubi@yyy.or.jp
03d9e353db
Bill Fenner (fenner)
${MASTER_SITE_GNU} got rearranged in December; let's catch up.
5261958626
Steve Price (steve)
Install files in share instead of lib.

PR:		9475
Submitted by:	Sergei Laskavy <laskavy@Berkeley.Gambit.Msk.SU>
f10ca81db1
Vanilla I. Shu (vanilla)
Add more MASTER_SITES. PR:	ports/9037 Submitted by:	josh@quick.net
d17c12dd8d
Seiichirou Hiraoka (flathill)
Add pkg/DESCR URL about original nethack
06723c36f6
Seiichirou Hiraoka (flathill)
Fix BROKEN_ELF
c6daffe7e0
Steve Price (steve)
Doesn't build in an ELF world.
4b819b19c1
Satoshi Asami (asami)
Roll back libXpm major to 4.  Sorry, it wasn't a good idea to bump it in the first place.
081079e0db
Satoshi Asami (asami)
libXpm major is now 5.  Also remove regexp support in preparation for ELF conversion.
03d5b496f6
Tim Vanderhoek (hoek)
Sync package with reality as defined by source-build port (setgid games binary, list ad. documentation).

PR:		ports/7673 (Sue Blake <sue@welearn.com.au>)
1f7dbc63b5
Satoshi Asami (asami)
Remove manpages defined in MAN? macros in games' Makefiles.
3fc5e40f2e
Satoshi Asami (asami)
Be more selective about which ports to maintain.  I no longer have time to maintain all these ports I once committed (sometimes as a proxy).
ed1ba38a9f
Masafumi Max NAKANE (max)
Correctly set the mode for scoreboard files. Add @dirrm for lib/nethackdir.
9bb5b997e1
Masafumi Max NAKANE (max)
Use ${SH} from bsd.port.mk instead of locally defined ${SHELL}.
bddd60e979
David E. O'Brien (obrien)
Switched to using MASTER_SITES=${MASTER_SITE_XCONTRIB} and 	MASTER_SITE_SUBDIR=games swallace wasn't listed as MAINTAINER of any of his ports janek@gaja.ipan.lublin.pl wasn't listed as MAINTAINER of any of his ports bin.bin --> ${BINOWN}.${BINGRP} chown --> /usr/sbin/chown 	(not everyone has /usr/sbin in their path, esp. if you sudo'ed to root) mkdir -p --> ${MKDIR}
20b9bbed0a
Masafumi Max NAKANE (max)
Moved the @exec mkdir ... line so that it won't fail to mkdir lib/nethackdir/save when you do pkg_add this package for the first time.
090e1f74d4
Satoshi Asami (asami)
Update to 3.2.2.

Notified by:	andreas
1bbaa422d5
Satoshi Asami (asami)
Use MASTER_SITE_GNU  Use MAN? macros.  CATEGORIES+= -> CATEGORIES.
5dba7b6e29
Satoshi Asami (asami)
Manpages were installed mode 640.

Submitted by:	max@sfc.wide.ac.jp
630522a890
Satoshi Asami (asami)
Upgrade, 3.2.0 -> 3.2.1.
51ed6dfcb9
Satoshi Asami (asami)
This port depends on the xpm lib.

Submitted by:	Masafumi NAKANE (max@sfc.wide.ad.jp)
15a2b12163
Satoshi Asami (asami)
Upgrade, 3.1.3 -> 3.2.0.
c7c917a901
Satoshi Asami (asami)
Delete @cwd, @mode, @owner and @group from these packing lists.

Reported by:	jkh
7cd6a55ea4
Satoshi Asami (asami)
Shorten one-line comments.  Boy, I'm listed as MAINTAINERs in a lot of ports or what! ;>
14cd728249
Satoshi Asami (asami)
And here comes the next round of Makefile updates, for games.  Folks, there are lots of broken stuff and funky Makefiles here.  Please check your ports, and also put yourself in MAINTAINER so I know who to talk to.  Thanks....
f4d6acbc42
Jordan K. Hubbard (jkh)
Add CATEGORIES lines to a whole bunch of port Makefiles.  Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
ac3066bf75
Andreas Schulz (ats)
Add a SHELL= /bin/sh line. My tcsh gots upset  executing the setup.sh called from the makefile :-).
64aa1cef2c
Satoshi Asami (asami)
A dungeon chewing game.  I don't use the X interface (and I can't believe anyone would want to use that) so this port only makes the tty version. CVS:
3282d59f73