CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

games/nethack34 3.4.3_10

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.4.3_10
Upstream
up to date
Last update
to 3.4.3_10 · d52ba0e74e
Quarterly
2026Q4: 3.4.3_10
WWW
https://www.nethack.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nethack34
installs 3.4.3_10 from latest; from quarterly (2026Q4) 3.4.3_10
Port
# cd /usr/ports/games/nethack34 && make install clean
# make -C /usr/ports/games/nethack34 config  # change options first
Size
1.2 MiB download · 3.1 MiB installed
Depends on
x11-toolkits/libXaw 1.0.16,2, x11/libXpm 3.5.20
License
nethack
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.4.3_103.4.3_10–
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (7)

The CVE record lists the packaged version 3.4.3_10 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes all 7 unaddressed CVEs.
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.4.3_10 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (144)

Dirk Meyer (dinoex) · 3.4.3_7
- bump all port that indirectly depends on libjpeg and have not yet been bumped or updated Requested by:	edwin
eca78ec61b
Wesley Shields (wxs) · 3.4.3_6
- Add support for WITH_STATUSCOLORS. - While here move to my distfile mirror instead of old one.

PR:		ports/136220
Submitted by:	Jeremy Chadwick <jdc@parodius.com>
1cc68d4767
Wesley Shields (wxs) · 3.4.3_6
- Mark my ports as MAKE_JOBS_SAFE (with the exception of nethack34-gnome which   is MAKE_JOBS_UNSAFE).
c6eb35f215
Florent Thoumie (flz) · 3.4.3_6
- Update X.org ports to 7.4+ (few ports are more recent than the katamari). - Bump PORTREVISION for all ports depending on libglut since the shlib version number went from 4 to 3. - Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't installed anymore. - Couple of ports fixes (mostly missing xorg components added to USE_XORG).
340b57f8be
Wesley Shields (wxs) · 3.4.3_5
Take maintainership.  As a die-hard fan of nethack I can give this port a good home.
d97da7ba88
Jeremy Chadwick (koitsu) · 3.4.3_5
Maintainer moved to ports@FreeBSD.org.
0ec1929bdb
Pav Lucistnik (pav) · 3.4.3_5
- Remove duplicates from MAKE_ENV after inclusion of CC and CXX in default MAKE_ENV
fa38ed02cc
Jeremy Chadwick (koitsu) · 3.4.3_5
Update menucolors patch.  Use official patchsite as well.
e5f868d2ef
Martin Wilke (miwi) · 3.4.3_5
- Remove unneeded dependency from gtk12/gtk20 [1] - Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Remove X11BASE support in favor of LOCALBASE or PREFIX - Use USE_LDCONFIG instead of INSTALLS_SHLIB - Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
	Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
	ehaupt, nox, itetcu, flz, pav

PR:		116263
Tested on:	pointyhat
Approved by:	portmgr (pav)
3e4ed01146
Jeremy Chadwick (koitsu) · 3.4.3_5
* Maintainer freebsd@jdc.parodius.com --> koitsu@FreeBSD.org (I'm both) * Add some redundancy fetch locations to MASTER_SITE_LOCAL.
aa2914e40c
Pav Lucistnik (pav) · 3.4.3_5
- Remove USE_GETOPT_LONG which is a no-op since March 2007
9fc1c4fe89
Pav Lucistnik (pav) · 3.4.3_5
- Replace USE_XPM with a list of required xorg components

With hat:	portmgr
7357ff2a4d
Florent Thoumie (flz) · 3.4.3_4
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.
d4f0d0048a
Jeremy Chadwick (koitsu) · 3.4.3_3
Details of previous commit:

* Add WITH_HPMON support - colourises hitpoints as they decrease.
* Address issue where uninstalling with existing save games in
  place (PREFIX/lib/nethack/save/*) would result in a "Could not
  remove PREFIX/lib/nethack" error.  Now echoes some useful
  comments to the user when failing to rmdir PREFIX/lib/nethack/save,
  and using @dirrmtry on the PREFIX/lib/nethack directory.

Also added:

* Reference MASTER_SITE_LOCAL for hpmon.diff, in the case the
  main patch site isn't available.

PR:		ports/107941
Approved by:	philip
d5fb42b34b
Jeremy Chadwick (koitsu) · 3.4.3_3
Committed.

PR:		107941
Approved by:	philip
7f497ec7aa
Tilman Keskinoz (arved) · 3.4.3_3
Fix nethack34-qt variant
f54e8ab4d6
Kris Kennaway (kris) · 3.4.3_3
The qt variant is scheduled for removal on 2006-12-01
d5de0913f6
Ion-Mihai Tetcu (itetcu) · 3.4.3_3
Broken if builded with qt.

PR:		ports/98198
Submitted by:	maintainer
Approved by:	lawrance (mentor, implicit)
97d3208ce8
Pav Lucistnik (pav) · 3.4.3_3
* WITH_MENUCOLORS: Now references jilles' newer site/URL * WITH_MENUCOLORS: Use POSIX-compliant regex via MENU_COLOR_REGEX_POSIX * No more reliance on gnuregex * Squelch patch-time calls to REINPLACE_CMD * Update distinfo to reference new menucolors patch * Update patch-ad to remove -lgnuregex (see below note) * Update patch-ad to remove use of $LIBTTY

PR:		ports/92958
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
dc8eed9a2e
Edwin Groothuis (edwin) · 3.4.3_3
Remove USE_REINPLACE for categories starting with a G
ff21f59f9f
Ade Lovett (ade) · 3.4.3_3
Bump PORTREVISION on glib12/gtk12 consumer ports to ease the upgrade path.

Discussed with:	kris
Approved by:	portmgr (implicit)
fe279f0df8
Greg Lewis (glewis) · 3.4.3_2
. Locally mirror the menucolor patch due to the patch site having gone on   walkabout. [1] . Add SHA256 for the above patch.

PR:		92147 [1]
cb33283b97
Edwin Groothuis (edwin) · 3.4.3_2
SHA256ify Approved by: krion@
350df42a30
Edwin Groothuis (edwin) · 3.4.3_2
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
0416031c9b
Pav Lucistnik (pav) · 3.4.3_2
- Menucolor patch was updated

PR:		ports/77735
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
6fa41a0acb
Volker Stolz (vs) · 3.4.3_2
Assign maintainership to submitter of previous PRs. Thanks to Jeremy Chadwick for volunteering to keep an eye on nethack!
c9fa380d51
Volker Stolz (vs) · 3.4.3_2
- Fix MENUCOLORS-support on -CURRENT - Add WITH_MAIL-knob

PR:		ports/68522
Submitted by	Jeremy Chadwick
aedcefded2
Volker Stolz (vs) · 3.4.3_2
Add WITH_MENUCOLORS tweak for console-version: http://www.netsonic.fi/~walker/nethack.html

PR:		ports/68363
Submitted by:	Jeremy Chadwick
f367f0e92e
Joe Marcus Clarke (marcus) · 3.4.3_1
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 2)
053fdb6a6b
Trevor Johnson (trevor) · 3.4.3
SIZEify.
0c881ba59c
Pav Lucistnik (pav) · 3.4.3
- Update to 3.4.3

PR:		ports/60136
Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org>
effde617aa
Tilman Keskinoz (arved) · 3.4.2
Fix nethack-qt with Qt3.2. Set Maintainer back to ports.

Submitted by:	Adriaan de Groot adridg@sci.kun.nl
Reported by:	bento
29ac1ae4f7
Edwin Groothuis (edwin) · 3.4.2
Update port: games/nethack to 5.4.2

- Update to version 5.4.2

PR:		ports/56279
Submitted by:	KATO Tsuguru <tkato@prontomail.com>
294865e862
Christian Weisgerber (naddy) · 3.4.1_1
Fix build on -stable.

PR:		53492
Submitted by:	Ports Fury
5050eb35de
Christian Weisgerber (naddy) · 3.4.1_1
Remove check for obsolete "bs" termcap attribute which is disappearing from new termcap entries.

Reported by:	Guy Middleton <guy@obstruction.com>
91a7be6e44
Christian Weisgerber (naddy) · 3.4.1
Update to version 3.4.1.

PR:		52664
Submitted by:	Ports Fury
cd7ae2a8fe
Kris Kennaway (kris) · 3.4.0_1
Move inclusion of bsd.port.pre.mk later in the file for conditional BROKEN tag.  Early inclusion caused problems for some ports, so to be safe I'm updating all of them.

Pointy hat to:	kris
93872f18cc
Kris Kennaway (kris) · 3.4.0_1
WITH_QT_GRAPHICS is BROKEN on 5.1: bad C++ code
b61c7a0f39
Tilman Keskinoz (arved) · 3.4.0_1
USE_GETOPT_LONG[1] Remove a duplicate PORTREVISION

PR:		51857[1]
Submitted by:	KATO Tsuguru <tkato@prontomail.com>
8e2ff6ca60
Bill Fenner (fenner) · 3.4.0_1
Update MASTER_SITES for MAINTAINER-less ports.

PR:		ports/49045
Submitted By:	Ryan T. Dean <rtdean@cytherianage.net>
Approved By:	portmgr
8598828aea
Akinori MUSHA (knu) · 3.4.0_1
De-pkg-comment nethack34 master-slave ports.
e3c8c8a32a
Peter Pentchev (roam) · 3.4.0_1
Add a patch that fixes this particular misuse of strcat(). Remove the FORBIDDEN keyword with some apprehension: there might well be other holes left :( Bump PORTREVISION for the applied bug (and security-) fix.
cb0cbed40a
Peter Pentchev (roam) · 3.4.0_1
Mark FORBIDDEN due to a locally-exploitable buffer overflow, as reported on BugTraq: http://online.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0

I wish people would contact the vendor more often, so patches/updates
are available at the time of the advisory, but oh well...
2a000747a0
Edwin Groothuis (edwin) · 3.4.0_1
Maintainer emails address bounced
0ef20d3b09
Edwin Groothuis (edwin) · 3.4.0_1
Update games/nethack34: - Support QT3 - Add knob for WITHOUT_SHELL

PR:		41768 46939
Submitted by:	User & <freebsd@stevenwills.com>, KATO Tsuguru <tkato@prontomail.com>
de857028c1
Akinori MUSHA (knu) · 3.4.0
Add a note that HACKNAME, HACKDIR and HACKDOCSDIR are configurable.
04a8eec3d0
Akinori MUSHA (knu) · 3.4.0
- Define USE_REINPLACE and use REINPLACE_CMD instead of perl.

- Make the install directory and the program name configurable.
  We'll change the defaults in future so one can install
  multiple versions of nethack at a time.

- Do not mercilessly remove non-empty logfile and record on
  deinstallation.
556ffa2aa9
Akinori MUSHA (knu) · 3.4.0
Don't pretend we are SysV.  We are BSD.
adeb2b50d8
Akinori MUSHA (knu) · 3.4.0
Update to nethack 3.4.0 after repocopying from nethack33{,-*}.

Unify the variant ports and make them slave ports of the master port,
nethack34.

Unbreak nethack34-gnome.

PR:		ports/36576, ports/36880
Submitted by:	KATO Tsuguru <tkato@prontomail.com>,
		Jan Stocker <Jan.Stocker@t-online.de> (MAINTAINER of -gnome)
cbc10a11c1
Dima Dorfman (dd) · 3.3.1
user.group -> user:group in chown call(s).
7534fc311d