CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

games/nethack34-nox11 3.4.3_10

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.4.3_10
Upstream
up to date
Last update
to 3.4.3_10 via games/nethack34 · d52ba0e74e
Quarterly
2026Q4: 3.4.3_10
WWW
https://www.nethack.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nethack34-nox11
installs 3.4.3_10 from latest; from quarterly (2026Q4) 3.4.3_10
Port
# cd /usr/ports/games/nethack34-nox11 && make install clean
# make -C /usr/ports/games/nethack34-nox11 config  # change options first
Size
1.1 MiB download · 3.0 MiB installed
Depends on
nothing
License
nethack
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.4.3_103.4.3_10–
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (7)

The CVE record lists the packaged version 3.4.3_10 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes all 7 unaddressed CVEs.
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.4.3_10 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (53)

Jordan K. Hubbard (jkh)
Add CATEGORIES lines to a whole bunch of port Makefiles.  Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
ac3066bf75
Andreas Schulz (ats)
Add a SHELL= /bin/sh line. My tcsh gots upset  executing the setup.sh called from the makefile :-).
64aa1cef2c
Satoshi Asami (asami)
A dungeon chewing game.  I don't use the X interface (and I can't believe anyone would want to use that) so this port only makes the tty version. CVS:
3282d59f73