head 1.2; access; symbols pkgsrc-2026Q3:1.2.0.2 pkgsrc-2026Q3-base:1.2 pkgsrc-2026Q2:1.1.0.2 pkgsrc-2026Q2-base:1.1; locks; strict; comment @# @; 1.2 date 2026.09.02.14.01.41; author adam; state Exp; branches; next 1.1; commitid afFkRtKT5sRtl3UG; 1.1 date 2026.04.01.13.00.05; author adam; state Exp; branches; next ; commitid RJNsPXcwVjVjXfAG; desc @@ 1.2 log @nmap zenmap ndiff: updated to 7.991 7.991 o Upgraded included OpenSSL to version 3.0.21 on all platforms. o Fixed a memory-consumption hang in Ncat's HTTP proxy code that affected both connect and listen modes, reported by kumama_nui. o Patched our included libssh2 source with upstream fixes for CVE-2025-15661, CVE-2026-7598, CVE-2026-55199, CVE-2026-55200, CVE-2026-58050, and CVE-2026-58051. The version number has been annotated as 1.11.1_NMAP1 o [Zenmap] Fixed several issues leading to crashes when parsing, editing, or saving command profiles containing '%' characters. o [NSE] smb-enum-shares failed to produce output for valid shares when an error was encountered on one share. o Fixed an issue where DNS resolution would incorrectly fail to match the same name in a different case. o [NSE] Added service names for SSL-protected services like amt-soap-https to portrules for several scripts, ensuring they run on these as well as the standard unencrypted services. o Audited and converted most instances of strcat, strcpy, and sprintf to use bounded functions instead. o [NSE] mysql-dump-hashes now uses the correct column name for MySQL 5.7+ o [NSE] http-referer-checker was incorrectly fetching off-host URLs. Now only URLs on the target are fetched. o When an interface is specified with -e, also bind to the IP address for that device so that it works for non-Linux systems and non-root users. o [Nsock] When nsock_iod_set_localaddr() is used, nsock_connect_*() will now treat errors in bind(2) as connection failure. o Fix a potential crash on 32-bit platforms in debug mode due to incorrect format specifier for 64-bit integer type. [Christopher Chavez] o Increase line length limit for nmap-service-probes and correctly handle lines that are too long. [@@liquidpele, Ashutosh Kumar Singh] o Avoid out-of-bounds read when parsing PTR domain names. [@@toor11 (Juri)] o Ensure variables updated by signal handlers are volatile sig_atomic_t. o [Ncat] Fix an assertion failure (count <= INT_MAX) in ncat -lk in some cases where stdin or a listening socket produces an error. o [NSE] Fix a cryptic error in smb-enum-services, "Server returned less data than needed for header" when smb.start_smb() failed. o Fixed an issue with parsing nmap-service-probes that could cause a corrupted file to crash Nmap. Reported by Muhammed Hussein. o [NSE] Removed hostmap-bfk.nse, since the service it used shut down. o Fixed several issues reported by Himanshu Anand: infinite loop in TCP options parsing and out-of-bounds memory read in IPv4 OS detection; integer underflow in IPv6 extension header processing; and undefined behavior in DNS label parsing. o Added checks for returned pointers from OpenSSL allocation functions. o Fix an incorrect assertion "timeout / 1000 <= (long) o.scan_delay" in traceroute which failed for timeouts greater than 1 second when there was no scan delay. o The --stats-every option can now be used in conjunction with --noninteractive. Previously, no stats messages were printed if a TTY was not attached. o Nmap can now be built with OpenSSL 4.0 o [Nping] The --rate option will not accept a rate higher than 1000 packets per second, since Nsock timers have millisecond resolution. Use --delay 0 for unlimited rate. o [Nping] Fixed several issues with Nping in IPv6 mode including: + Incorrect BPF generated leading to "expression rejects all packets" + Incorrect constant used to check for IP version in Echo Server o [NSE] Fixed an out-of-memory issue in packet.lua when parsing a zero-length TCP header option. [Maxim Suhanov] o Fixed an issue where Nmap OS scan trusts a packet's ip_len to size a CRC32 computation over TCP RST payload data, which may result in reading arbitrary heap data. Reported by Michael Bommarito. o [Ncat] Correctly report listening port number. `ncat -l -p 0` will cause Ncat to listen on an ephemeral port, but it was reporting itself as listening on port 0. o [Ncat] Fixed an issue where Ncat in server mode would quit without printing the last received data on a connection, particularly affecting SCTP. o [Ncat] Fixed an issue where Ncat in --send-only mode would ignore disconnects and crash when it tries to send data to a disconnected client. o [Ncat] Fixed an issue where Ncat on Windows would quit after 2 minutes due to an OS-enforced timeout on the half-open TCP socket used to emulate STDIN. o [Nping] Allow Nping to fall back to TCP Connect mode on Windows when Npcap is not installed. o [Ncat] Fixed several issues reported by Muhammed Hussein involving crashes in Ncat's server-mode HTTP proxy, as well as one code-quality issue with its Telnet negotiation code. o [Nsock] Fix an issue where Nsock's SOCKS4 proxy code would send additional null bytes on Windows and other platforms where the compiler does not understand __attribute__((packed)). [Daniel Miller] o The --release-memory option is now a no-op. Nmap will always run finalization routines that release allocated memory before closing. o Fixed an integer underflow in service_scan.cc that would cause little-endian integers extracted from the beginning of a service banner to be interpreted as 0. Discovered with AFL++ by Malek Althubiany. o [Nsock] Use OpenSSL security levels and callbacks to prevent errors connecting to certain insecure targets when using NSOCK_SSL_MAX_SPEED. The default, as used in Ncat, now uses stricter-than-default security level. o If a target times out due to --host-timeout, do not perform traceroute. o [Nping] Disallow combining Ethernet-related options like --dest-mac with --send-ip o [NSE] Fix assertion failures in cases where connect or send returns immediately with a status other than ERROR, e.g. TIMEOUT or CANCELED. [Daniel Miller] o [Ncat] Enable ncat -l --ssl to use DHE and ECDHE cipher suites for perfect forward secrecy. o Fix a crash when writing long CPE strings to output. Reported by Harshit Gupta. [Daniel Miller] o [Ncat] Fix several cases where Ncat's SOCKS5 client could interpret uninitialized data as protocol data, triggered by a malicious SOCKS5 proxy server. No code execution or application crash is possible. Reported by Govind Pratap Singh. [Daniel Miller] o [Nping] Fix a out-of-bounds access in Nping Echo client allowing a malicious Nping EchoServer to zero 32 bytes of memory outside the packet buffer. Reported by Harshit Gupta. [Daniel Miller] o Fix a 1-byte overrun (read) while reading certain crafted DNS labels, reported by Peter Parker. [Daniel Miller] o [NSE] Function url.build_path was mangling special characters in URL path segments. [nnposter] @ text @$NetBSD: patch-pyproject.toml,v 1.1 2026/04/01 13:00:05 adam Exp $ Don't install ndiff. --- pyproject.toml.orig 2026-08-05 21:12:13.000000000 +0000 +++ pyproject.toml @@@@ -24,11 +24,8 @@@@ Changelog = "https://nmap.org/changelog" [project.gui-scripts] zenmap = "zenmapGUI.App:run" -[project.scripts] -ndiff = "ndiff:run_main" [tool.setuptools] -py-modules = ["ndiff"] include-package-data = true [tool.setuptools.packages.find] @ 1.1 log @ndiff nmap zenma: updated to 7.99 Nmap 7.99 [2026-03-26] o Integrated many of the most-frequently-submitted IPv4 and IPv6 OS fingerprints, as well as dozens of updated service fingerprints. o Upgraded included libraries: OpenSSL 3.0.19, libpcap 1.10.6, libpcre2 10.47, liblinear 2.50, zlib 1.3.2 o [Windows] Upgraded the included version of Npcap from 1.83 to 1.87, resolving several crashes and stability-related issues. See https://npcap.com/changelog o [Zenmap][GH-3182] Zenmap is now distributed as a universal wheel (zenmap-7.99-py3-none-any.whl) instead of an RPM package so that it can be installed on any system with Python 3. [Daniel Miller] o [Ncat][Windows] Limited the number of handles inherited by subprocesses launched with -e, preventing interference between clients when -e and --keep-open are used. Reported by Nimish Verma. o [Ncat] Several fixes for regressions or longstanding failure cases in ncat-test.pl [Daniel Miller]: + [Windows] Fixed handling of socket EOF with --exec + Fixed the -i (idle timeout) option for listen mode, which was broken when adding the -q option in Ncat 7.96 + Fixed HTTP proxy server when SSL is used. + DTLS (SSL over UDP) shutdown connection on stdin EOF. o [Windows][GH-2711] Nmap now supports scanning over various VPN virtual adapters like OpenVPN TAP adapters. [Daniel Miller] o [GH-3280] Fix a performance regression in reverse-DNS in Nmap 7.98. The fix for -3130 had caused Nmap to send requests too slowly. [Daniel Miller] o [macOS][GH-3289] Fixed a configure-time failure in libdnet that resulted in incorrect MAC addresses being reported. [Daniel Miller] o [Zenmap][GH-3189] Fix a crash in Zenmap topology and hosts viewer: "TypeError: format requires a mapping" [Daniel Miller] o [GH-2955] Fix a routing issue with -e and -S related to -2206 causing error "setup_target: failed to determine route" [Daniel Miller] o [GH-3214] Improve compatibility of build process on various platforms and add multiplatform autobuilds in Github workflow. [Jordan Ritter] o [NSE][GH-2183][GH-3239] Script hostmap-crtsh now reports only true subdomains of a given target hostname by default. In the past, it was reporting any DNS name that included the target hostname as a substring (but not necessarily as a suffix). The old behavior can be enabled by setting script argument hostmap-crtsh.lax. [Sweekar-cmd, nnposter] o [NSE] Function url.parse_query was not interpreting plus signs as spaces. [nnposter] o [NSE] Function url.parse was not properly parsing URLs with query strings but empty paths. [nnposter] o [NSE][GH-3287] Functions tableaux.tcopy and tableaux.shallow_tcopy were not behaving the same when the input table had a custom __pairs metamethod. Both functions now perform a raw copy, ignoring the metamethod. [nnposter] o [NSE] Function tableaux.shallow_tcopy did not work correctly for tables with Boolean keys. [nnposter] o [NSE] IPP print queue job details were not getting populated, having a hard dependency on Apple-specific attributes. [nnposter] o [NSE][GH-3245] Functions connect and close have been removed from the IPP library, as they served no purpose. [nnposter] o [NSE] ipOps.expand_ip was crashing upon malformed IPv6 addresses. [nnposter] o [NSE][GH-3262] FTP banner parsing is now more closely aligned with RFC 959, section 4.2. [nnposter] o [NSE][GH-3253] Function stdnse.make_buffer now accepts an extra parameter that allows preloading the newly created buffer with data. [nnposter] o [NSE][GH-3191][GH-3218] Script http-internal-ip-disclosure has been enhanced, including added support for IPv6 and HTTPS and more accurate processing of target responses. [nnposter] o [NSE][GH-3194] RPC-based scripts were sporadically failing due to privileged port conflicts. [nnposter] o [NSE][GH-3196] Script rlogin-brute was sporadically failing due to using an off-by-one range for privileged ports and not handling potential port conflicts. [nnposter] @ text @d1 1 a1 1 $NetBSD$ d5 1 a5 1 --- pyproject.toml.orig 2026-04-01 12:55:12.423831238 +0000 d7 1 a7 1 @@@@ -24,8 +24,6 @@@@ Changelog = "https://nmap.org/changelog" a14 5 packages = [ @@@@ -44,7 +42,6 @@@@ packages = [ "radialnet.gui", "radialnet.util", ] d16 1 d18 1 a18 2 [tool.setuptools.dynamic] version = {attr = "zenmapCore.Version.VERSION"} @