CVS commit: pkgsrc/net

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Oct 20 18:31:29 UTC 2026

Modified Files:
        pkgsrc/net/ndiff: distinfo
        pkgsrc/net/nmap: Makefile Makefile.common PLIST distinfo
        pkgsrc/net/nmap/patches: patch-configure patch-ncat_configure
            patch-nping_configure
        pkgsrc/net/zenmap: PLIST distinfo
Removed Files:
        pkgsrc/net/nmap/patches: patch-nmap.cc

Log Message:
nmap ndiff zenmap: updated to 7.992

Nmap 7.992 [2026-10-15]

o Upgraded included libraries:
  - Source: libpcap 1.10.7, pcre2 10.49, lua 5.4.9, libdnet 1.18.2
  - Binary installers: OpenSSL 3.5.9, Python 3.14.8

o [Windows] Upgraded the included version of Npcap from 1.88 to 1.89, resolving
  one crash and upgrading to libpcap 1.10.7. See https://npcap.com/changelog

o [Security][NSE] Karan Bamal of SentinelOne reported the following issues with
  NSE scripts and libraries, which have all been fixed:
  - afp.lua used a hardcoded DH private exponent, so that credentials passed
    via command line could be decrypted from network traffic. The DHCAST128 UAM
    is known to be cryptographically broken, and has been replaced in this
    release with DHX2.
  - Redirect to unverified URL in anyconnect.lua and upnp.lua
  - Unbounded memory consumption in rpc.lua, drda.lua, eigrp.lua,
    msrpctypes.lua, db2-das-info, and dns-zone-transfer
  - Uninterruptible CPU usage (infinite loop) not subject to --script-timeout or
    --host-timeout in rdp.lua, tn3270.lua, and ospf.lua
  - Infinite loop waiting for errored coroutines in tftp.lua, effectively
    mitigated by --script-timeout

o [Security] Zach Hanley of Horizon3.ai, in collaboration with Claude and
  Anthropic Research, reported three issues, which have all been fixed:
  - Two distinct use-after-free bugs in massdns parallel DNS resolver.
  - NSE uses the default seed for Lua's pseudorandom number generator, namely
    the output of time() and the heap address of the Lua state. A brute-force
    search based on math.random()-generated network traffic can reveal the ASLR
    base address of the process.

o [Security][NSE] In some non-standard builds (e.g. --without-openssl), NSE
  scripts were attempting to load missing Lua modules from the current working
  directory. Fixed by removing Lua's default package searchers, leaving only
  the existing nselib file fetcher.

o Added a libfuzzer-based framework for fuzzing internal functions of Nmap,
  Ncat, and Nping. So far, 10 functions have been instrumented and 3 minor
  issues have been fixed. [Daniel Miller]

o Fixed an rare false-positive case in TCP Connect scan (-sT) where a
  failed connect() may leave SO_ERROR set to 0 even though an ICMP error has
  been received and select() has indicated the socket.

o [NSE] Introduced execution time and memory allocation limits for NSE scripts.
  Script threads that run for more than 5 seconds without yielding (e.g.
  calling a socket operation) will be killed. Memory allocations beyond 400MB
  will throw an error. Specific limits may be changed in the future.

o [NSE] Added 8 new scripts, for a total of 620 NSE scripts, all for auditing
  DICOM (medical imaging) services:

  + dicom-info fingerprints a DICOM SCP via A-ASSOCIATE, reporting its
    Implementation Class UID and Version Name, accepted SOP classes and
    transfer syntaxes, max PDU and protocol version; over TLS it also reports
    the server certificate (key type/size, signature algorithm, with weak-
    crypto and self-signed flags) and the mutual-TLS / client-certificate
    posture. [Paulino Calderon]

  + dicom-cfind-ls performs C-FIND queries to enumerate studies and series and
    the patient-level metadata an archive returns, flagging unauthenticated
    query access. [Paulino Calderon]

  + dicom-cmove exercises C-MOVE to test whether stored studies can be
    retrieved to an arbitrary destination AE. [Paulino Calderon]

  + dicom-get retrieves instances over C-GET, performing SCP/SCU role
    negotiation so the retrieval actually completes, and reports
    unauthenticated read access. [Paulino Calderon]

  + dicom-store-fuzzer fuzzes the C-STORE service with a corpus of malformed
    datasets, classifying each response (accept, reject, timeout, reset,
    corrupt) and running a periodic C-ECHO health check to detect crashes
    mid-campaign. [Paulino Calderon]

  + dicom-store-inject tests whether an archive accepts an unauthenticated
    C-STORE by uploading a single clearly-synthetic Secondary Capture instance
    (fake patient, "safe to delete" markers, UIDs under the 2.25 arc) and
    reporting whether it was stored, refused, or the association was rejected;
    it prints the stored UIDs for cleanup. [Paulino Calderon]

  + dicom-web-enum enumerates DICOMweb (PS3.18) services over HTTP(S) --
    QIDO-RS, WADO-RS and STOW-RS -- classifying each as open, authentication-
    required or absent, reporting the study/patient metadata an unauthenticated
    client can read and flagging an open STOW-RS store (image-injection)
    surface. [Paulino Calderon]

  + dicom-slowloris probes for DICOM association-pool exhaustion (a slowloris-
    style DoS) in idle, C-ECHO keep-alive and partial-handshake modes,
    measuring a latency baseline, requiring repeated confirmation before
    declaring exhaustion, and reporting a graded verdict with recovery time.
    [Paulino Calderon]

o [Zenmap] Fixed crashes:
  - configparser.DuplicateSectionError in Profile Editor
  - KeyError: 'vl_6_logo'
  - sqlite3.DatabaseError: database disk image is malformed

o [NSE] Expanded the dicom.lua library from a basic A-ASSOCIATE/C-ECHO helper
  into a full DIMSE toolkit. It now supports C-STORE, C-FIND, C-GET and
  C-MOVE; A-ASSOCIATE-RQ with multiple presentation contexts and SCP/SCU role
  negotiation (so C-GET sub-operations work); command-set and dataset build/
  parse in implicit and explicit VR; and DICOM-over-TLS transport (PS3.15,
  port 2762) selectable with the dicom.tls script-arg. [Paulino Calderon]

o [Ndiff] Fixed `make check-ndiff` to work with Python 3.12+ [gargamel778]

o [NSE] vulners API queries for versions like 4.100 were being
  truncated on the server, resulting in false positives. Fixed by encoding as
  string. [huuyafwww]

o [Ncat] Ncat in listen mode no longer sends termination
  signals to its process group. Ncat inherits the group of whatever launched
  it, so a SIGINT, SIGTERM, SIGHUP, or SIGQUIT could also terminate the
  caller's shell or test harness. The signal is now forwarded to the children
  Ncat started for connections when -k and cmdexec are both in effect. [MRX-72]

o [Nsock] Nsock no longer calls fatal() when encountering a
  pcap-related error. Instead, errors are propagated to the caller the same way
  other socket errors are handled.

o Fixed warnings and crashes due to bind() failing on macOS
  and FreeBSD, as well as Nping probe failures. Error messages similar to:
  "mksock_bind_addr(): Bind to <IP>:0 failed (IOD #3): Invalid argument (22)"
  [Daniel Miller, MRX-72]

o [NSE] Added DHX2 authentication method to afp.lua [Daniel Miller]

o [NSE] Function ipOps.isPrivate() was incorrectly treating all IPv4
  addresses starting with 192.0.2x or 192.0.2xx as private. [Pasi Abe]

o [NSE] Function ipOps.expand_ip() now strips off any leading zeros from IPv4
  octets, returning "10.0.0.0", not "010.000.0.0", for input "010.000". This
  also resolves a bug where "010" was not recognized as a private IP address.
  [nnposter]

o [NSE] Malformed TPKT header could have caused parser infinite loop
  in library iec61850mms. Truncated data were silently ignored.
  [Zasnit1, nnposter]

o Prevent -iR from running forever if all addresses are excluded or if all
  available addresses have been scanned with --unique. The underlying addrset
  trie has been optimized for fast lookup and minimal memory use.

o [NSE] IP options parsing by the packet library no longer crashes
  on incomplete options. IP header data after EOOL are no longer parsed as
  options. [Ibrahim AlJaafreh, nnposter]

o [NSE] Rudimentary support for 802.1Q / 802.1ad VLAN tags [nnposter]
  - NSE packet.Frame:new() parses VLAN tags and captures the result in list
    frame.vlans. Each element is a table containing the expected fields:
    TPID, CPC, DEI, and VID (all in lowercase).
  - NSE packet.Frame:build_ether_frame() takes an an optional parameter
    in the form of the list above to build 802.1Q / 802.1ad headers.

o [NSE] Script http-config-backup was always failing. [h00die]

o [NSE] The rsync library was not correctly parsing server responses
  for protocol version 32. [h00die]

o [NSE] Script iec61850-mms was never executed due to a flawed
  portrule. [RyugaXhypeR]

o [NSE] Scripts http-config-backup and rsync-list-modules now provide XML
  output. [nnposter]

o Fixed a fatal error in traceroute with -sO: "Unknown protocol _: QUITTING."

o Made DNS TXID random, not sequential, in massdns.cc.

o [NSE] Nmap now tolerates TLS targets that do not send close_notify.
  [nnposter]


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/ndiff/distinfo
cvs rdiff -u -r1.156 -r1.157 pkgsrc/net/nmap/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/nmap/Makefile.common
cvs rdiff -u -r1.36 -r1.37 pkgsrc/net/nmap/PLIST
cvs rdiff -u -r1.97 -r1.98 pkgsrc/net/nmap/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/nmap/patches/patch-configure
cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/nmap/patches/patch-ncat_configure \
    pkgsrc/net/nmap/patches/patch-nping_configure
cvs rdiff -u -r1.1 -r0 pkgsrc/net/nmap/patches/patch-nmap.cc
cvs rdiff -u -r1.11 -r1.12 pkgsrc/net/zenmap/PLIST
cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/zenmap/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/ndiff/distinfo
diff -u pkgsrc/net/ndiff/distinfo:1.13 pkgsrc/net/ndiff/distinfo:1.14
--- pkgsrc/net/ndiff/distinfo:1.13      Wed Sep  2 14:01:41 2026
+++ pkgsrc/net/ndiff/distinfo   Tue Oct 20 18:31:29 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.13 2026/09/02 14:01:41 adam Exp $
+$NetBSD: distinfo,v 1.14 2026/10/20 18:31:29 adam Exp $
 
-BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
-SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
-Size (nmap-7.991.tar.bz2) = 12877122 bytes
+BLAKE2s (nmap-7.992.tar.bz2) = d936bf8c3c763535d2779e83db367d13a0e3b214f4d50bda198c3f5a4b9fb392
+SHA512 (nmap-7.992.tar.bz2) = 0c38610b78190b1865d5adb900e9bdc5813a29f6f5d47b768f4b1c9d0d36a26de476f7c7fc55b04e2421c6e6b149890ab0207ea1740786158bbf594a834fedc7
+Size (nmap-7.992.tar.bz2) = 12935896 bytes

Index: pkgsrc/net/nmap/Makefile
diff -u pkgsrc/net/nmap/Makefile:1.156 pkgsrc/net/nmap/Makefile:1.157
--- pkgsrc/net/nmap/Makefile:1.156      Tue Sep 29 06:07:07 2026
+++ pkgsrc/net/nmap/Makefile    Tue Oct 20 18:31:28 2026
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.156 2026/09/29 06:07:07 wiz Exp $
+# $NetBSD: Makefile,v 1.157 2026/10/20 18:31:28 adam Exp $
 
-PKGREVISION= 3
 .include "Makefile.common"
 
 COMMENT=       Network/port scanner with OS detection

Index: pkgsrc/net/nmap/Makefile.common
diff -u pkgsrc/net/nmap/Makefile.common:1.13 pkgsrc/net/nmap/Makefile.common:1.14
--- pkgsrc/net/nmap/Makefile.common:1.13        Wed Sep  2 14:01:40 2026
+++ pkgsrc/net/nmap/Makefile.common     Tue Oct 20 18:31:28 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.13 2026/09/02 14:01:40 adam Exp $
+# $NetBSD: Makefile.common,v 1.14 2026/10/20 18:31:28 adam Exp $
 # used by net/ndiff/Makefile
 # used by net/nmap/Makefile
 # used by net/zenmap/Makefile
 
-DISTNAME=      nmap-7.991
+DISTNAME=      nmap-7.992
 CATEGORIES=    net security
 MASTER_SITES=  http://nmap.org/dist/
 EXTRACT_SUFX=  .tar.bz2

Index: pkgsrc/net/nmap/PLIST
diff -u pkgsrc/net/nmap/PLIST:1.36 pkgsrc/net/nmap/PLIST:1.37
--- pkgsrc/net/nmap/PLIST:1.36  Wed Sep  2 14:01:40 2026
+++ pkgsrc/net/nmap/PLIST       Tue Oct 20 18:31:28 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.36 2026/09/02 14:01:40 adam Exp $
+@comment $NetBSD: PLIST,v 1.37 2026/10/20 18:31:28 adam Exp $
 bin/ncat
 bin/nmap
 bin/nping
@@ -303,7 +303,15 @@ ${PLIST.lua}share/nmap/scripts/db2-das-i
 ${PLIST.lua}share/nmap/scripts/deluge-rpc-brute.nse
 ${PLIST.lua}share/nmap/scripts/dhcp-discover.nse
 ${PLIST.lua}share/nmap/scripts/dicom-brute.nse
+${PLIST.lua}share/nmap/scripts/dicom-cfind-ls.nse
+${PLIST.lua}share/nmap/scripts/dicom-cmove.nse
+${PLIST.lua}share/nmap/scripts/dicom-get.nse
+${PLIST.lua}share/nmap/scripts/dicom-info.nse
 ${PLIST.lua}share/nmap/scripts/dicom-ping.nse
+${PLIST.lua}share/nmap/scripts/dicom-slowloris.nse
+${PLIST.lua}share/nmap/scripts/dicom-store-fuzzer.nse
+${PLIST.lua}share/nmap/scripts/dicom-store-inject.nse
+${PLIST.lua}share/nmap/scripts/dicom-web-enum.nse
 ${PLIST.lua}share/nmap/scripts/dict-info.nse
 ${PLIST.lua}share/nmap/scripts/distcc-cve2004-2687.nse
 ${PLIST.lua}share/nmap/scripts/dns-blacklist.nse

Index: pkgsrc/net/nmap/distinfo
diff -u pkgsrc/net/nmap/distinfo:1.97 pkgsrc/net/nmap/distinfo:1.98
--- pkgsrc/net/nmap/distinfo:1.97       Mon Sep 14 22:10:11 2026
+++ pkgsrc/net/nmap/distinfo    Tue Oct 20 18:31:28 2026
@@ -1,16 +1,15 @@
-$NetBSD: distinfo,v 1.97 2026/09/14 22:10:11 tnn Exp $
+$NetBSD: distinfo,v 1.98 2026/10/20 18:31:28 adam Exp $
 
-BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
-SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
-Size (nmap-7.991.tar.bz2) = 12877122 bytes
+BLAKE2s (nmap-7.992.tar.bz2) = d936bf8c3c763535d2779e83db367d13a0e3b214f4d50bda198c3f5a4b9fb392
+SHA512 (nmap-7.992.tar.bz2) = 0c38610b78190b1865d5adb900e9bdc5813a29f6f5d47b768f4b1c9d0d36a26de476f7c7fc55b04e2421c6e6b149890ab0207ea1740786158bbf594a834fedc7
+Size (nmap-7.992.tar.bz2) = 12935896 bytes
 SHA1 (patch-charpool.cc) = 6d72e5723f41965fd80e166c5507167aab760022
-SHA1 (patch-configure) = 70167bb20f9317536dbdd8a970bb4c3c8ad6feea
+SHA1 (patch-configure) = 34e9269d6f4283ad3be5b3d6f010c02823cba6ba
 SHA1 (patch-libdnet-stripped_src_arp-bsd.c) = c56c4e70eca2fa04dd8aab38ed2c3f4cac83f5e3
 SHA1 (patch-libnetutil_netutil.cc) = 7bd1059d6cbcf4f6d129730d6c6f6bc3ab54c0a0
-SHA1 (patch-ncat_configure) = f5a6f1e7e4cb8d863d7ccb19a80576e3edf7c685
-SHA1 (patch-nmap.cc) = d5da780c4fd40d5cee5176a6c3bc0255308f8e5d
+SHA1 (patch-ncat_configure) = 9b97c7fb40850ad4d84d15c2859f1e0be2479f70
 SHA1 (patch-nping_EchoServer.cc) = e5b0213e3cfff8a32b5ae291c1921a86b9b17dd3
-SHA1 (patch-nping_configure) = a13d2e2a37e271bc6cd31e5492a094df660cc08c
+SHA1 (patch-nping_configure) = d72b594a5150657eb76d963ffa8de584a7ef97d4
 SHA1 (patch-nsock_tests_run__tests.sh) = 88a7447f93dd3377e7e24e317c55528a73a17401
 SHA1 (patch-protocols.cc) = c3e2013a0c7016fbe1cabef5226685bd74377302
 SHA1 (patch-traceroute.cc) = 3084f766e0ae49f11ff72e0a29549cd3bcfd4783

Index: pkgsrc/net/nmap/patches/patch-configure
diff -u pkgsrc/net/nmap/patches/patch-configure:1.4 pkgsrc/net/nmap/patches/patch-configure:1.5
--- pkgsrc/net/nmap/patches/patch-configure:1.4 Mon Sep 14 22:10:12 2026
+++ pkgsrc/net/nmap/patches/patch-configure     Tue Oct 20 18:31:29 2026
@@ -1,4 +1,4 @@
-$NetBSD: patch-configure,v 1.4 2026/09/14 22:10:12 tnn Exp $
+$NetBSD: patch-configure,v 1.5 2026/10/20 18:31:29 adam Exp $
 
 pcap_version is not portable; use pcap_lib_version(), which returns a
 string like "libpcap version 1.10.7 (...)", so skip to the first digit
@@ -6,15 +6,19 @@ before parsing it.
 
 External liblinear must be configured later.
 
---- configure.orig     2025-05-06 17:33:27.000000000 +0000
+--- configure.orig     2026-10-12 17:36:47.000000000 +0000
 +++ configure
-@@ -6274,9 +6274,12 @@ else
+@@ -7477,13 +7477,16 @@ else $as_nop
  /* end confdefs.h.  */
  
  #include <stdio.h>
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor1, minor2;
 +  int major = 0, minor1 = 0, minor2 = 0;
 +  const char *pcap_version = pcap_lib_version();
@@ -23,13 +27,17 @@ External liblinear must be configured la
    sscanf(pcap_version,"%d.%d.%d", &major, &minor1, &minor2);
    if (major > 0)
      return 0;
-@@ -6310,9 +6313,12 @@ else
+@@ -7520,13 +7523,16 @@ else $as_nop
  #ifdef HAVE_NET_BPF_H
  #include <net/bpf.h>
  #endif
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor;
 +  int major = 0, minor = 0;
 +  const char *pcap_version = pcap_lib_version();
@@ -38,7 +46,7 @@ External liblinear must be configured la
    sscanf(pcap_version,"%d.%d", &major, &minor);
    if ((major == 1 && minor >= 1) || major > 1)
      return 0;
-@@ -7196,7 +7202,6 @@ if test "${with_liblinear+set}" = set; t
+@@ -8668,7 +8674,6 @@ then :
    *)
      CPPFLAGS="-I$with_liblinear/include $CPPFLAGS"
      LDFLAGS="-L$with_liblinear/lib $LDFLAGS"

Index: pkgsrc/net/nmap/patches/patch-ncat_configure
diff -u pkgsrc/net/nmap/patches/patch-ncat_configure:1.2 pkgsrc/net/nmap/patches/patch-ncat_configure:1.3
--- pkgsrc/net/nmap/patches/patch-ncat_configure:1.2    Mon Sep 14 22:10:12 2026
+++ pkgsrc/net/nmap/patches/patch-ncat_configure        Tue Oct 20 18:31:29 2026
@@ -1,18 +1,22 @@
-$NetBSD: patch-ncat_configure,v 1.2 2026/09/14 22:10:12 tnn Exp $
+$NetBSD: patch-ncat_configure,v 1.3 2026/10/20 18:31:29 adam Exp $
 
 pcap_version is not portable; use pcap_lib_version(), which returns a
 string like "libpcap version 1.10.7 (...)", so skip to the first digit
 before parsing it.
 
---- ncat/configure.orig        2025-05-15 09:52:29.731026958 +0000
+--- ncat/configure.orig        2026-10-12 17:36:47.000000000 +0000
 +++ ncat/configure
-@@ -4832,9 +4832,12 @@ else
+@@ -5299,13 +5299,16 @@ else $as_nop
  /* end confdefs.h.  */
  
  #include <stdio.h>
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor1, minor2;
 +  int major = 0, minor1 = 0, minor2 = 0;
 +  const char *pcap_version = pcap_lib_version();
@@ -21,13 +25,17 @@ before parsing it.
    sscanf(pcap_version,"%d.%d.%d", &major, &minor1, &minor2);
    if (major > 0)
      return 0;
-@@ -4868,9 +4871,12 @@ else
+@@ -5342,13 +5345,16 @@ else $as_nop
  #ifdef HAVE_NET_BPF_H
  #include <net/bpf.h>
  #endif
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor;
 +  int major = 0, minor = 0;
 +  const char *pcap_version = pcap_lib_version();
Index: pkgsrc/net/nmap/patches/patch-nping_configure
diff -u pkgsrc/net/nmap/patches/patch-nping_configure:1.2 pkgsrc/net/nmap/patches/patch-nping_configure:1.3
--- pkgsrc/net/nmap/patches/patch-nping_configure:1.2   Mon Sep 14 22:10:12 2026
+++ pkgsrc/net/nmap/patches/patch-nping_configure       Tue Oct 20 18:31:29 2026
@@ -1,18 +1,22 @@
-$NetBSD: patch-nping_configure,v 1.2 2026/09/14 22:10:12 tnn Exp $
+$NetBSD: patch-nping_configure,v 1.3 2026/10/20 18:31:29 adam Exp $
 
 pcap_version is not portable; use pcap_lib_version(), which returns a
 string like "libpcap version 1.10.7 (...)", so skip to the first digit
 before parsing it.
 
---- nping/configure.orig       2025-05-15 09:53:51.037421707 +0000
+--- nping/configure.orig       2026-10-12 17:36:47.000000000 +0000
 +++ nping/configure
-@@ -6057,9 +6057,12 @@ else $as_nop
+@@ -6293,13 +6293,16 @@ else $as_nop
  /* end confdefs.h.  */
  
  #include <stdio.h>
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor1, minor2;
 +  int major = 0, minor1 = 0, minor2 = 0;
 +  const char *pcap_version = pcap_lib_version();
@@ -21,13 +25,17 @@ before parsing it.
    sscanf(pcap_version,"%d.%d.%d", &major, &minor1, &minor2);
    if (major > 0)
      return 0;
-@@ -6095,9 +6098,12 @@ else $as_nop
+@@ -6336,13 +6339,16 @@ else $as_nop
  #ifdef HAVE_NET_BPF_H
  #include <net/bpf.h>
  #endif
 -extern char pcap_version[];
 +#include <pcap/pcap.h>
- int main() {
+ 
+ int
+ main (void)
+ {
+ 
 -  int major, minor;
 +  int major = 0, minor = 0;
 +  const char *pcap_version = pcap_lib_version();

Index: pkgsrc/net/zenmap/PLIST
diff -u pkgsrc/net/zenmap/PLIST:1.11 pkgsrc/net/zenmap/PLIST:1.12
--- pkgsrc/net/zenmap/PLIST:1.11        Wed Sep  2 14:01:40 2026
+++ pkgsrc/net/zenmap/PLIST     Tue Oct 20 18:31:29 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2026/09/02 14:01:40 adam Exp $
+@comment $NetBSD: PLIST,v 1.12 2026/10/20 18:31:29 adam Exp $
 bin/zenmap
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
@@ -184,7 +184,6 @@ ${PYSITELIB}/zenmapCore/__init__.pyc
 ${PYSITELIB}/zenmapCore/__init__.pyo
 ${PYSITELIB}/zenmapCore/data/config/scan_profile.usp
 ${PYSITELIB}/zenmapCore/data/config/zenmap.conf
-${PYSITELIB}/zenmapCore/data/config/zenmap_version
 ${PYSITELIB}/zenmapCore/data/docs/help.html
 ${PYSITELIB}/zenmapCore/data/locale/de.po
 ${PYSITELIB}/zenmapCore/data/locale/es.po

Index: pkgsrc/net/zenmap/distinfo
diff -u pkgsrc/net/zenmap/distinfo:1.13 pkgsrc/net/zenmap/distinfo:1.14
--- pkgsrc/net/zenmap/distinfo:1.13     Wed Sep  2 14:01:41 2026
+++ pkgsrc/net/zenmap/distinfo  Tue Oct 20 18:31:29 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.13 2026/09/02 14:01:41 adam Exp $
+$NetBSD: distinfo,v 1.14 2026/10/20 18:31:29 adam Exp $
 
-BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
-SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
-Size (nmap-7.991.tar.bz2) = 12877122 bytes
+BLAKE2s (nmap-7.992.tar.bz2) = d936bf8c3c763535d2779e83db367d13a0e3b214f4d50bda198c3f5a4b9fb392
+SHA512 (nmap-7.992.tar.bz2) = 0c38610b78190b1865d5adb900e9bdc5813a29f6f5d47b768f4b1c9d0d36a26de476f7c7fc55b04e2421c6e6b149890ab0207ea1740786158bbf594a834fedc7
+Size (nmap-7.992.tar.bz2) = 12935896 bytes
 SHA1 (patch-pyproject.toml) = ea02bf0e5b6a415e96889a2bd063b1f2bb4db086