CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

games/nethack34 3.4.3_10

Dungeon explorin', slashin', hackin' game

Port info

Maintainer
glewis@FreeBSD.org
Packages
latest: 3.4.3_10
Upstream
up to date
Last update
to 3.4.3_10 · d52ba0e74e
Quarterly
2026Q4: 3.4.3_10
WWW
https://www.nethack.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nethack34
installs 3.4.3_10 from latest; from quarterly (2026Q4) 3.4.3_10
Port
# cd /usr/ports/games/nethack34 && make install clean
# make -C /usr/ports/games/nethack34 config  # change options first
Size
1.2 MiB download · 3.1 MiB installed
Depends on
x11-toolkits/libXaw 1.0.16,2, x11/libXpm 3.5.20
License
nethack
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.4.3_103.4.3_10–
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.4.3_103.4.3_10–
FreeBSD 143.4.3_103.4.3_103.4.3_10

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (7)

The CVE record lists the packaged version 3.4.3_10 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 3.6.5 fixes all 7 unaddressed CVEs.
Fixed up to each version, cumulative: 3.6.0 1 · 3.6.5 7
CVECVSSPublishedDescription
CVE-2020-52115.02020-01-28In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote c…
CVE-2020-52095.02020-01-28In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vu…
CVE-2020-52105.02020-01-28In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation…
CVE-2020-52125.02020-01-28In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/pr…
CVE-2020-52135.02020-01-28In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege…
CVE-2020-52145.02020-01-28In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. T…
CVE-2020-52533.92020-03-10NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched…

VuXML only (0)

Listed in VuXML, the packaged version 3.4.3_10 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (144)

Akinori MUSHA (knu) · 3.3.1
Remove MASTER_SITE_GNU from MASTER_SITES as the GNU mirror sites no longer have nethack distfiles.

PR:		ports/24053
Submitted by:	George Reid <greid@ukug.uk.freebsd.org>
83392e9b5b
Sheldon Hearn (sheldonh) · 3.3.1
Update to nethack 3.3.1.

This delta was ommitted in the original update.
cff9ea2aa3
Jeroen Ruigrok van der Werven (asmodai) · 3.3.1
I cannot imagine how this port could've worked without the missing PORTVERSION2 variable.

Weird thing is that bento doesn't yield any errors on it.
Apologies to the maintainer for not consulting him, but the fix is
pretty trivial.
348b295a59
Will Andrews (will) · 3.3.1
Update to nethack 3.3.1.

PR:			21942
Submitted by:		Gregory Bond <gnb@itga.com.au>
No response from:	MAINTAINER (6 weeks timeout)
fae5a028c5
Satoshi Asami (asami) · 3.3.0
(1) Add new variable, XFREE86_VERSION, to specify which version of     XFree86 (3 or 4) to depend to when USE_XLIB is set.     XFREE86_VERSION defaults to 3 for now, but adventurous users can     override it in /etc/make.conf.  When XFREE86_VERSION=3, USE_XLIB     will add a dependency to x11/XFree86; when it is set to 4, the     dependency will be to x11/XFree86-4-libraries.  When     XFREE86_VER

Since XFree86 version 4 includes some software that used to be
    separate ports, when XFREE86_VERSION=3 the following variables are
    provided:

    USE_DGS		LIB_DEPENDS on x11/dgs
    USE_FREETYPE	LIB_DEPENDS on print/freetype
    USE_MESA		LIB_DEPENDS on graphics/Mesa3
    USE_XPM		LIB_DEPENDS on graphics/xpm

    When XFREE86_VERSION=4, these variables have no effect.  The
    LIB_DEPENDS in the tree for the above four ports have all been
    converted to the USE_* counterparts.  For your information, this
    is the count of the number of ports:

    USE_DGS		0
    USE_FREETYPE	16
    USE_MESA		36
    USE_XPM		236

    There is a new variable, XAWVER, which is set to 6 when
    XFREE86_VERSION=3 and 7 when XFREE86_VERSION=4.  This is also
    passed to PLIST_SUB so ports that build Xaw based shared libraries
    can use this variable to substitute the shlib version number.

    There is also a provision of using a separate mtree file for
    XFREE86_VERSION=4, but that part is not enabled yet.

Reviewed by:	the ports list
Tested by:	make index (XFREE86_VERSION=3 only)

(2) Add hebrew to list of valid categories.
Submitted by:	nbm
c6bcad2436
SADA Kenji (sada) · 3.3.0
Cope with FreeBSD 3. Fixed the path to gzip.

PR:		ports/16417
Submitted by:	Gregory Bond <gnb@itga.com.au>
523b9b7615
Satoshi Asami (asami) · 3.3.0
Convert to PORTNAME/PORTVERSION.  The following ports hand invalid version strings so I fixed them: quakeforge, netrek-BRMH, netrek-COW3, tetrinet-x and xnibbles.
2971a93e52
Steve Price (steve)
Update to version 3.3.0.

PR:		15469
Submitted by:	David Scheidt <dscheidt@enteract.com>
aaa10906ce
Chris Piazza (cpiazza)
Update to version 3.2.3

PR:		15442
Submitted by:	David Scheidt <dscheidt@enteract.com>
6bca316376
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
David E. O'Brien (obrien)
Change Id->FreeBSD.
253c66d044
Michael Haro (mharo)
chmod -> ${CHMOD} chown -> ${CHOWN}
5281212be3
Tim Vanderhoek (hoek)
Commit #2/4 to enforce Caps, no period.  I ran this oe as $ time cvs $FREEBSD ci -m `cat msg` `cat ci.ab`

Results to follow.  :)
4b7f92f936
Steve Price (steve)
time(3) returns a time_t and not a long.
ddcecda9c9
Tim Vanderhoek (hoek)
(Null Cowit Mewwage)
7c0c0fc3ca
Seiichirou Hiraoka (flathill)
I forgot remove patch-aa. Update PLIST. Submitted by: h-nokubi@nsk.nis.nec.co.jp
2f1875f6e9
Seiichirou Hiraoka (flathill)
Fix 'missing rip.xpm' error. patch-aa contains patch for some files. So separate to some patch-a? PR: ports/10680 Submitted by: h-nokubi@yyy.or.jp
03d9e353db
Bill Fenner (fenner)
${MASTER_SITE_GNU} got rearranged in December; let's catch up.
5261958626
Steve Price (steve)
Install files in share instead of lib.

PR:		9475
Submitted by:	Sergei Laskavy <laskavy@Berkeley.Gambit.Msk.SU>
f10ca81db1
Vanilla I. Shu (vanilla)
Add more MASTER_SITES. PR:	ports/9037 Submitted by:	josh@quick.net
d17c12dd8d
Seiichirou Hiraoka (flathill)
Add pkg/DESCR URL about original nethack
06723c36f6
Seiichirou Hiraoka (flathill)
Fix BROKEN_ELF
c6daffe7e0
Steve Price (steve)
Doesn't build in an ELF world.
4b819b19c1
Satoshi Asami (asami)
Roll back libXpm major to 4.  Sorry, it wasn't a good idea to bump it in the first place.
081079e0db
Satoshi Asami (asami)
libXpm major is now 5.  Also remove regexp support in preparation for ELF conversion.
03d5b496f6
Tim Vanderhoek (hoek)
Sync package with reality as defined by source-build port (setgid games binary, list ad. documentation).

PR:		ports/7673 (Sue Blake <sue@welearn.com.au>)
1f7dbc63b5
Satoshi Asami (asami)
Remove manpages defined in MAN? macros in games' Makefiles.
3fc5e40f2e
Satoshi Asami (asami)
Be more selective about which ports to maintain.  I no longer have time to maintain all these ports I once committed (sometimes as a proxy).
ed1ba38a9f
Masafumi Max NAKANE (max)
Correctly set the mode for scoreboard files. Add @dirrm for lib/nethackdir.
9bb5b997e1
Masafumi Max NAKANE (max)
Use ${SH} from bsd.port.mk instead of locally defined ${SHELL}.
bddd60e979
David E. O'Brien (obrien)
Switched to using MASTER_SITES=${MASTER_SITE_XCONTRIB} and 	MASTER_SITE_SUBDIR=games swallace wasn't listed as MAINTAINER of any of his ports janek@gaja.ipan.lublin.pl wasn't listed as MAINTAINER of any of his ports bin.bin --> ${BINOWN}.${BINGRP} chown --> /usr/sbin/chown 	(not everyone has /usr/sbin in their path, esp. if you sudo'ed to root) mkdir -p --> ${MKDIR}
20b9bbed0a
Masafumi Max NAKANE (max)
Moved the @exec mkdir ... line so that it won't fail to mkdir lib/nethackdir/save when you do pkg_add this package for the first time.
090e1f74d4
Satoshi Asami (asami)
Update to 3.2.2.

Notified by:	andreas
1bbaa422d5
Satoshi Asami (asami)
Use MASTER_SITE_GNU  Use MAN? macros.  CATEGORIES+= -> CATEGORIES.
5dba7b6e29
Satoshi Asami (asami)
Manpages were installed mode 640.

Submitted by:	max@sfc.wide.ac.jp
630522a890
Satoshi Asami (asami)
Upgrade, 3.2.0 -> 3.2.1.
51ed6dfcb9
Satoshi Asami (asami)
This port depends on the xpm lib.

Submitted by:	Masafumi NAKANE (max@sfc.wide.ad.jp)
15a2b12163
Satoshi Asami (asami)
Upgrade, 3.1.3 -> 3.2.0.
c7c917a901
Satoshi Asami (asami)
Delete @cwd, @mode, @owner and @group from these packing lists.

Reported by:	jkh
7cd6a55ea4
Satoshi Asami (asami)
Shorten one-line comments.  Boy, I'm listed as MAINTAINERs in a lot of ports or what! ;>
14cd728249
Satoshi Asami (asami)
And here comes the next round of Makefile updates, for games.  Folks, there are lots of broken stuff and funky Makefiles here.  Please check your ports, and also put yourself in MAINTAINER so I know who to talk to.  Thanks....
f4d6acbc42
Jordan K. Hubbard (jkh)
Add CATEGORIES lines to a whole bunch of port Makefiles.  Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
ac3066bf75
Andreas Schulz (ats)
Add a SHELL= /bin/sh line. My tcsh gots upset  executing the setup.sh called from the makefile :-).
64aa1cef2c
Satoshi Asami (asami)
A dungeon chewing game.  I don't use the X interface (and I can't believe anyone would want to use that) so this port only makes the tty version. CVS:
3282d59f73