CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

games/nethack33 3.3.1_12

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.3.1_12
Upstream
up to date
Last update
to 3.3.1_12 · 683a167634
Quarterly
2026Q4: 3.3.1_12
WWW
https://www.nethack.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nethack33
installs 3.3.1_12 from latest; from quarterly (2026Q4) 3.3.1_12
Port
# cd /usr/ports/games/nethack33 && make install clean
# make -C /usr/ports/games/nethack33 config  # change options first
Size
1.1 MiB download · 2.9 MiB installed
Depends on
x11-toolkits/libXaw 1.0.16,2, x11/libXpm 3.5.20
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.3.1_123.3.1_12–
FreeBSD 153.3.1_123.3.1_12–
FreeBSD 143.3.1_123.3.1_123.3.1_12

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.3.1_123.3.1_12–
FreeBSD 143.3.1_123.3.1_123.3.1_12

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (8)

The CVE record lists the packaged version 3.3.1_12 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes 7 of the 8 unaddressed CVEs.
1 CVE names no fixed version in the CVE record (for example only a commit).
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2003-03584.62003-06-09Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s co…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.3.1_12 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (111)

Satoshi Asami (asami)
Use MASTER_SITE_GNU  Use MAN? macros.  CATEGORIES+= -> CATEGORIES.
5dba7b6e29
Satoshi Asami (asami)
Manpages were installed mode 640.

Submitted by:	max@sfc.wide.ac.jp
630522a890
Satoshi Asami (asami)
Upgrade, 3.2.0 -> 3.2.1.
51ed6dfcb9
Satoshi Asami (asami)
This port depends on the xpm lib.

Submitted by:	Masafumi NAKANE (max@sfc.wide.ad.jp)
15a2b12163
Satoshi Asami (asami)
Upgrade, 3.1.3 -> 3.2.0.
c7c917a901
Satoshi Asami (asami)
Delete @cwd, @mode, @owner and @group from these packing lists.

Reported by:	jkh
7cd6a55ea4
Satoshi Asami (asami)
Shorten one-line comments.  Boy, I'm listed as MAINTAINERs in a lot of ports or what! ;>
14cd728249
Satoshi Asami (asami)
And here comes the next round of Makefile updates, for games.  Folks, there are lots of broken stuff and funky Makefiles here.  Please check your ports, and also put yourself in MAINTAINER so I know who to talk to.  Thanks....
f4d6acbc42
Jordan K. Hubbard (jkh)
Add CATEGORIES lines to a whole bunch of port Makefiles.  Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
ac3066bf75
Andreas Schulz (ats)
Add a SHELL= /bin/sh line. My tcsh gots upset  executing the setup.sh called from the makefile :-).
64aa1cef2c
Satoshi Asami (asami)
A dungeon chewing game.  I don't use the X interface (and I can't believe anyone would want to use that) so this port only makes the tty version. CVS:
3282d59f73