CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

games/nethack33 3.3.1_12

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.3.1_12
Upstream
up to date
Last update
to 3.3.1_12 · 683a167634
Quarterly
2026Q4: 3.3.1_12
WWW
https://www.nethack.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nethack33
installs 3.3.1_12 from latest; from quarterly (2026Q4) 3.3.1_12
Port
# cd /usr/ports/games/nethack33 && make install clean
# make -C /usr/ports/games/nethack33 config  # change options first
Size
1.1 MiB download · 2.9 MiB installed
Depends on
x11-toolkits/libXaw 1.0.16,2, x11/libXpm 3.5.20
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.3.1_123.3.1_12–
FreeBSD 153.3.1_123.3.1_12–
FreeBSD 143.3.1_123.3.1_123.3.1_12

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.3.1_123.3.1_12–
FreeBSD 143.3.1_123.3.1_123.3.1_12

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (8)

The CVE record lists the packaged version 3.3.1_12 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes 7 of the 8 unaddressed CVEs.
1 CVE names no fixed version in the CVE record (for example only a commit).
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2003-03584.62003-06-09Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s co…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.3.1_12 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (111)

Edwin Groothuis (edwin) · 3.3.1_4
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
0416031c9b
Greg Lewis (glewis) · 3.3.1_4
. Add SHA256.
0beba2cc6c
Greg Lewis (glewis) · 3.3.1_4
. Fix gnome handling (as far as I can test).

Obtained from:	games/nethack34
29bdbd398a
Greg Lewis (glewis) · 3.3.1_4
. Use the ${PKGNAMESUFFIX} set by each of the slave ports to make their   LATEST_LINK setting unique.

Pointed out by:	kris
ecd9af04f7
Greg Lewis (glewis) · 3.3.1_4
. Sync with the nethack32 port:   . By default, install things in a location that won't conflict with the     other nethack ports.   . Build and install the recover utility so that users can recover their     game if it crashes (bump PORTREVISION for this). . Sync with the nethack34 port:   . Use PKGNAMESUFFIX to select the graphics type.   . Remove the COMMENT in the slave ports. . Take maintaine
52ed0baa26
Joe Marcus Clarke (marcus) · 3.3.1_3
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 2)
053fdb6a6b
Trevor Johnson (trevor) · 3.3.1_2
SIZEify.
0c881ba59c
Edwin Groothuis (edwin) · 3.3.1_2
ports with possibly unreachable MAINTAINERs *** addresses that seem to be dead:

PR:		ports/58694
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
df3c9e78bd
FUJISHIMA Satsuki (sf) · 3.3.1_2
get rid of libgnugetopt dependency for -CURRENT, use USE_GETOPT_LONG instead.
b185046be2
Kris Kennaway (kris) · 3.3.1_1
Move inclusion of bsd.port.pre.mk later in the file for conditional BROKEN tag.  Early inclusion caused problems for some ports, so to be safe I'm updating all of them.

Pointy hat to:	kris
93872f18cc
Kris Kennaway (kris) · 3.3.1_1
WITH_QT_GRAPHICS is BROKEN on 5.1: bad C++ code
6beaf00ddb
Bill Fenner (fenner) · 3.3.1_1
Update MASTER_SITES for MAINTAINER-less ports.

PR:		ports/49045
Submitted By:	Ryan T. Dean <rtdean@cytherianage.net>
Approved By:	portmgr
8598828aea
Akinori MUSHA (knu) · 3.3.1_1
De-pkg-comment.
2ab2d59488
Edwin Groothuis (edwin) · 3.3.1_1
Half of these ones missed yesterday while converting to USE_REINPLACE. The other half needs perl to build.

Noticed on bento and others (full mailbox :-)
5019ffc91b
Akinori MUSHA (knu) · 3.3.1_1
Define NO_LATEST_LINK.
4c50297f63
Akinori MUSHA (knu) · 3.3.1_1
Make nethack33 ports a master port and the slaves, and unbreak nethack33-gnome.

PR:		ports/38220
Submitted by:	KATO Tsuguru <tkato@prontomail.com>
No response from:	MAINTAINERs
a478f11a0d
Dima Dorfman (dd) · 3.3.1
user.group -> user:group in chown call(s).
7534fc311d
Akinori MUSHA (knu) · 3.3.1
Remove MASTER_SITE_GNU from MASTER_SITES as the GNU mirror sites no longer have nethack distfiles.

PR:		ports/24053
Submitted by:	George Reid <greid@ukug.uk.freebsd.org>
83392e9b5b
Sheldon Hearn (sheldonh) · 3.3.1
Update to nethack 3.3.1.

This delta was ommitted in the original update.
cff9ea2aa3
Jeroen Ruigrok van der Werven (asmodai) · 3.3.1
I cannot imagine how this port could've worked without the missing PORTVERSION2 variable.

Weird thing is that bento doesn't yield any errors on it.
Apologies to the maintainer for not consulting him, but the fix is
pretty trivial.
348b295a59
Will Andrews (will) · 3.3.1
Update to nethack 3.3.1.

PR:			21942
Submitted by:		Gregory Bond <gnb@itga.com.au>
No response from:	MAINTAINER (6 weeks timeout)
fae5a028c5
Satoshi Asami (asami) · 3.3.0
(1) Add new variable, XFREE86_VERSION, to specify which version of     XFree86 (3 or 4) to depend to when USE_XLIB is set.     XFREE86_VERSION defaults to 3 for now, but adventurous users can     override it in /etc/make.conf.  When XFREE86_VERSION=3, USE_XLIB     will add a dependency to x11/XFree86; when it is set to 4, the     dependency will be to x11/XFree86-4-libraries.  When     XFREE86_VER

Since XFree86 version 4 includes some software that used to be
    separate ports, when XFREE86_VERSION=3 the following variables are
    provided:

    USE_DGS		LIB_DEPENDS on x11/dgs
    USE_FREETYPE	LIB_DEPENDS on print/freetype
    USE_MESA		LIB_DEPENDS on graphics/Mesa3
    USE_XPM		LIB_DEPENDS on graphics/xpm

    When XFREE86_VERSION=4, these variables have no effect.  The
    LIB_DEPENDS in the tree for the above four ports have all been
    converted to the USE_* counterparts.  For your information, this
    is the count of the number of ports:

    USE_DGS		0
    USE_FREETYPE	16
    USE_MESA		36
    USE_XPM		236

    There is a new variable, XAWVER, which is set to 6 when
    XFREE86_VERSION=3 and 7 when XFREE86_VERSION=4.  This is also
    passed to PLIST_SUB so ports that build Xaw based shared libraries
    can use this variable to substitute the shlib version number.

    There is also a provision of using a separate mtree file for
    XFREE86_VERSION=4, but that part is not enabled yet.

Reviewed by:	the ports list
Tested by:	make index (XFREE86_VERSION=3 only)

(2) Add hebrew to list of valid categories.
Submitted by:	nbm
c6bcad2436
SADA Kenji (sada) · 3.3.0
Cope with FreeBSD 3. Fixed the path to gzip.

PR:		ports/16417
Submitted by:	Gregory Bond <gnb@itga.com.au>
523b9b7615
Satoshi Asami (asami) · 3.3.0
Convert to PORTNAME/PORTVERSION.  The following ports hand invalid version strings so I fixed them: quakeforge, netrek-BRMH, netrek-COW3, tetrinet-x and xnibbles.
2971a93e52
Steve Price (steve)
Update to version 3.3.0.

PR:		15469
Submitted by:	David Scheidt <dscheidt@enteract.com>
aaa10906ce
Chris Piazza (cpiazza)
Update to version 3.2.3

PR:		15442
Submitted by:	David Scheidt <dscheidt@enteract.com>
6bca316376
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
David E. O'Brien (obrien)
Change Id->FreeBSD.
253c66d044
Michael Haro (mharo)
chmod -> ${CHMOD} chown -> ${CHOWN}
5281212be3
Tim Vanderhoek (hoek)
Commit #2/4 to enforce Caps, no period.  I ran this oe as $ time cvs $FREEBSD ci -m `cat msg` `cat ci.ab`

Results to follow.  :)
4b7f92f936
Steve Price (steve)
time(3) returns a time_t and not a long.
ddcecda9c9
Tim Vanderhoek (hoek)
(Null Cowit Mewwage)
7c0c0fc3ca
Seiichirou Hiraoka (flathill)
I forgot remove patch-aa. Update PLIST. Submitted by: h-nokubi@nsk.nis.nec.co.jp
2f1875f6e9
Seiichirou Hiraoka (flathill)
Fix 'missing rip.xpm' error. patch-aa contains patch for some files. So separate to some patch-a? PR: ports/10680 Submitted by: h-nokubi@yyy.or.jp
03d9e353db
Bill Fenner (fenner)
${MASTER_SITE_GNU} got rearranged in December; let's catch up.
5261958626
Steve Price (steve)
Install files in share instead of lib.

PR:		9475
Submitted by:	Sergei Laskavy <laskavy@Berkeley.Gambit.Msk.SU>
f10ca81db1
Vanilla I. Shu (vanilla)
Add more MASTER_SITES. PR:	ports/9037 Submitted by:	josh@quick.net
d17c12dd8d
Seiichirou Hiraoka (flathill)
Add pkg/DESCR URL about original nethack
06723c36f6
Seiichirou Hiraoka (flathill)
Fix BROKEN_ELF
c6daffe7e0
Steve Price (steve)
Doesn't build in an ELF world.
4b819b19c1
Satoshi Asami (asami)
Roll back libXpm major to 4.  Sorry, it wasn't a good idea to bump it in the first place.
081079e0db
Satoshi Asami (asami)
libXpm major is now 5.  Also remove regexp support in preparation for ELF conversion.
03d5b496f6
Tim Vanderhoek (hoek)
Sync package with reality as defined by source-build port (setgid games binary, list ad. documentation).

PR:		ports/7673 (Sue Blake <sue@welearn.com.au>)
1f7dbc63b5
Satoshi Asami (asami)
Remove manpages defined in MAN? macros in games' Makefiles.
3fc5e40f2e
Satoshi Asami (asami)
Be more selective about which ports to maintain.  I no longer have time to maintain all these ports I once committed (sometimes as a proxy).
ed1ba38a9f
Masafumi Max NAKANE (max)
Correctly set the mode for scoreboard files. Add @dirrm for lib/nethackdir.
9bb5b997e1
Masafumi Max NAKANE (max)
Use ${SH} from bsd.port.mk instead of locally defined ${SHELL}.
bddd60e979
David E. O'Brien (obrien)
Switched to using MASTER_SITES=${MASTER_SITE_XCONTRIB} and 	MASTER_SITE_SUBDIR=games swallace wasn't listed as MAINTAINER of any of his ports janek@gaja.ipan.lublin.pl wasn't listed as MAINTAINER of any of his ports bin.bin --> ${BINOWN}.${BINGRP} chown --> /usr/sbin/chown 	(not everyone has /usr/sbin in their path, esp. if you sudo'ed to root) mkdir -p --> ${MKDIR}
20b9bbed0a
Masafumi Max NAKANE (max)
Moved the @exec mkdir ... line so that it won't fail to mkdir lib/nethackdir/save when you do pkg_add this package for the first time.
090e1f74d4
Satoshi Asami (asami)
Update to 3.2.2.

Notified by:	andreas
1bbaa422d5