CVS commit: pkgsrc/net

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/net
From: "Adam Ciarcinski" <adam%netbsd.org@localhost>
Date: Wed, 2 Sep 2026 14:01:41 +0000

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep  2 14:01:41 UTC 2026

Modified Files:
        pkgsrc/net/ndiff: distinfo
        pkgsrc/net/nmap: Makefile.common PLIST distinfo
        pkgsrc/net/zenmap: Makefile PLIST distinfo
        pkgsrc/net/zenmap/patches: patch-pyproject.toml

Log Message:
nmap zenmap ndiff: updated to 7.991

7.991

o Upgraded included OpenSSL to version 3.0.21 on all platforms.

o Fixed a memory-consumption hang in Ncat's HTTP proxy code that affected both
  connect and listen modes, reported by kumama_nui.

o Patched our included libssh2 source with upstream fixes for CVE-2025-15661,
  CVE-2026-7598, CVE-2026-55199, CVE-2026-55200, CVE-2026-58050, and
  CVE-2026-58051. The version number has been annotated as 1.11.1_NMAP1

o [Zenmap] Fixed several issues leading to crashes when parsing,
  editing, or saving command profiles containing '%' characters.

o [NSE] smb-enum-shares failed to produce output for valid shares when
  an error was encountered on one share.

o  Fixed an issue where DNS resolution would incorrectly fail to match
  the same name in a different case.

o [NSE] Added service names for SSL-protected services like
  amt-soap-https to portrules for several scripts, ensuring they run on these
  as well as the standard unencrypted services.

o Audited and converted most instances of strcat, strcpy, and sprintf to use
  bounded functions instead.

o [NSE] mysql-dump-hashes now uses the correct column name for MySQL 5.7+

o [NSE] http-referer-checker was incorrectly fetching off-host URLs.
  Now only URLs on the target are fetched.

o  When an interface is specified with -e, also bind to the IP address
  for that device so that it works for non-Linux systems and non-root users.

o [Nsock] When nsock_iod_set_localaddr() is used, nsock_connect_*()
  will now treat errors in bind(2) as connection failure.

o  Fix a potential crash on 32-bit platforms in debug mode due to
  incorrect format specifier for 64-bit integer type. [Christopher Chavez]

o  Increase line length limit for nmap-service-probes and
  correctly handle lines that are too long. [@liquidpele, Ashutosh Kumar Singh]

o  Avoid out-of-bounds read when parsing PTR domain names. [@toor11 (Juri)]

o  Ensure variables updated by signal handlers are volatile sig_atomic_t.

o [Ncat] Fix an assertion failure (count <= INT_MAX) in ncat -lk in
  some cases where stdin or a listening socket produces an error.

o [NSE] Fix a cryptic error in smb-enum-services, "Server returned
  less data than needed for header" when smb.start_smb() failed.

o Fixed an issue with parsing nmap-service-probes that could cause a corrupted
  file to crash Nmap. Reported by Muhammed Hussein.

o [NSE] Removed hostmap-bfk.nse, since the service it used shut down.

o Fixed several issues reported by Himanshu Anand: infinite loop in TCP options
  parsing and out-of-bounds memory read in IPv4 OS detection; integer underflow
  in IPv6 extension header processing; and undefined behavior in DNS label parsing.

o  Added checks for returned pointers from OpenSSL allocation functions.

o  Fix an incorrect assertion "timeout / 1000 <= (long) o.scan_delay"
  in traceroute which failed for timeouts greater than 1 second when there was
  no scan delay.

o  The --stats-every option can now be used in conjunction with
  --noninteractive. Previously, no stats messages were printed if a TTY was not
  attached.

o  Nmap can now be built with OpenSSL 4.0

o [Nping] The --rate option will not accept a rate higher than 1000
  packets per second, since Nsock timers have millisecond resolution. Use
  --delay 0 for unlimited rate.

o [Nping] Fixed several issues with Nping in IPv6 mode including:

  +  Incorrect BPF generated leading to "expression rejects all packets"

  +  Incorrect constant used to check for IP version in Echo Server

o [NSE] Fixed an out-of-memory issue in packet.lua when parsing a
  zero-length TCP header option. [Maxim Suhanov]

o Fixed an issue where Nmap OS scan trusts a packet's ip_len to size a CRC32
  computation over TCP RST payload data, which may result in reading arbitrary
  heap data. Reported by Michael Bommarito.

o [Ncat] Correctly report listening port number. `ncat -l -p 0` will
  cause Ncat to listen on an ephemeral port, but it was reporting itself as
  listening on port 0.

o [Ncat] Fixed an issue where Ncat in server mode would quit without
  printing the last received data on a connection, particularly affecting SCTP.

o [Ncat] Fixed an issue where Ncat in --send-only mode would ignore
  disconnects and crash when it tries to send data to a disconnected client.

o [Ncat] Fixed an issue where Ncat on Windows would quit after 2
  minutes due to an OS-enforced timeout on the half-open TCP socket used to
  emulate STDIN.

o [Nping] Allow Nping to fall back to TCP Connect mode on Windows when
  Npcap is not installed.

o [Ncat] Fixed several issues reported by Muhammed Hussein involving crashes in
  Ncat's server-mode HTTP proxy, as well as one code-quality issue with its
  Telnet negotiation code.

o [Nsock] Fix an issue where Nsock's SOCKS4 proxy code would send
  additional null bytes on Windows and other platforms where the compiler does
  not understand __attribute__((packed)). [Daniel Miller]

o The --release-memory option is now a no-op. Nmap will always run finalization
  routines that release allocated memory before closing.

o Fixed an integer underflow in service_scan.cc that would cause little-endian
  integers extracted from the beginning of a service banner to be interpreted
  as 0. Discovered with AFL++ by Malek Althubiany.

o [Nsock] Use OpenSSL security levels and callbacks to prevent errors
  connecting to certain insecure targets when using NSOCK_SSL_MAX_SPEED. The
  default, as used in Ncat, now uses stricter-than-default security level.

o  If a target times out due to --host-timeout, do not perform traceroute.

o [Nping] Disallow combining Ethernet-related options like --dest-mac
  with --send-ip

o [NSE] Fix assertion failures in cases where connect or send
  returns immediately with a status other than ERROR, e.g. TIMEOUT or CANCELED.
  [Daniel Miller]

o [Ncat] Enable ncat -l --ssl to use DHE and ECDHE cipher suites for
  perfect forward secrecy.

o Fix a crash when writing long CPE strings to output. Reported by Harshit
  Gupta. [Daniel Miller]

o [Ncat] Fix several cases where Ncat's SOCKS5 client could interpret
  uninitialized data as protocol data, triggered by a malicious SOCKS5 proxy
  server. No code execution or application crash is possible.
  Reported by Govind Pratap Singh. [Daniel Miller]

o [Nping] Fix a out-of-bounds access in Nping Echo client allowing a malicious Nping
  EchoServer to zero 32 bytes of memory outside the packet buffer. Reported by
  Harshit Gupta. [Daniel Miller]

o Fix a 1-byte overrun (read) while reading certain crafted DNS labels,
  reported by Peter Parker. [Daniel Miller]

o [NSE] Function url.build_path was mangling special characters in URL
  path segments. [nnposter]


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/ndiff/distinfo
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/nmap/Makefile.common
cvs rdiff -u -r1.35 -r1.36 pkgsrc/net/nmap/PLIST
cvs rdiff -u -r1.93 -r1.94 pkgsrc/net/nmap/distinfo
cvs rdiff -u -r1.22 -r1.23 pkgsrc/net/zenmap/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/zenmap/PLIST
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/zenmap/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/zenmap/patches/patch-pyproject.toml

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/ndiff/distinfo
diff -u pkgsrc/net/ndiff/distinfo:1.12 pkgsrc/net/ndiff/distinfo:1.13
--- pkgsrc/net/ndiff/distinfo:1.12      Wed Apr  1 13:00:04 2026
+++ pkgsrc/net/ndiff/distinfo   Wed Sep  2 14:01:41 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.12 2026/04/01 13:00:04 adam Exp $
+$NetBSD: distinfo,v 1.13 2026/09/02 14:01:41 adam Exp $
 
-BLAKE2s (nmap-7.99.tar.bz2) = 2a4f8ad74dd7b0206dd78ca01b1f783a49596e9f947d385627ad9abd9af70dac
-SHA512 (nmap-7.99.tar.bz2) = 9ff69659b76573eb10b6e472a0217032fd5fed20f0ac971b3736a4222fb6251c5fbf381ebea7ede313b8ff2feac90a848f645000c61200772d01b843594f4ba4
-Size (nmap-7.99.tar.bz2) = 13036588 bytes
+BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
+SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
+Size (nmap-7.991.tar.bz2) = 12877122 bytes

Index: pkgsrc/net/nmap/Makefile.common
diff -u pkgsrc/net/nmap/Makefile.common:1.12 pkgsrc/net/nmap/Makefile.common:1.13
--- pkgsrc/net/nmap/Makefile.common:1.12        Wed Apr  1 13:00:04 2026
+++ pkgsrc/net/nmap/Makefile.common     Wed Sep  2 14:01:40 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.12 2026/04/01 13:00:04 adam Exp $
+# $NetBSD: Makefile.common,v 1.13 2026/09/02 14:01:40 adam Exp $
 # used by net/ndiff/Makefile
 # used by net/nmap/Makefile
 # used by net/zenmap/Makefile
 
-DISTNAME=      nmap-7.99
+DISTNAME=      nmap-7.991
 CATEGORIES=    net security
 MASTER_SITES=  http://nmap.org/dist/
 EXTRACT_SUFX=  .tar.bz2

Index: pkgsrc/net/nmap/PLIST
diff -u pkgsrc/net/nmap/PLIST:1.35 pkgsrc/net/nmap/PLIST:1.36
--- pkgsrc/net/nmap/PLIST:1.35  Thu May 15 15:44:40 2025
+++ pkgsrc/net/nmap/PLIST       Wed Sep  2 14:01:40 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.35 2025/05/15 15:44:40 adam Exp $
+@comment $NetBSD: PLIST,v 1.36 2026/09/02 14:01:40 adam Exp $
 bin/ncat
 bin/nmap
 bin/nping
@@ -367,7 +367,6 @@ ${PLIST.lua}share/nmap/scripts/hbase-mas
 ${PLIST.lua}share/nmap/scripts/hbase-region-info.nse
 ${PLIST.lua}share/nmap/scripts/hddtemp-info.nse
 ${PLIST.lua}share/nmap/scripts/hnap-info.nse
-${PLIST.lua}share/nmap/scripts/hostmap-bfk.nse
 ${PLIST.lua}share/nmap/scripts/hostmap-crtsh.nse
 ${PLIST.lua}share/nmap/scripts/hostmap-robtex.nse
 ${PLIST.lua}share/nmap/scripts/http-adobe-coldfusion-apsa1301.nse

Index: pkgsrc/net/nmap/distinfo
diff -u pkgsrc/net/nmap/distinfo:1.93 pkgsrc/net/nmap/distinfo:1.94
--- pkgsrc/net/nmap/distinfo:1.93       Wed Apr  1 13:00:04 2026
+++ pkgsrc/net/nmap/distinfo    Wed Sep  2 14:01:40 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.93 2026/04/01 13:00:04 adam Exp $
+$NetBSD: distinfo,v 1.94 2026/09/02 14:01:40 adam Exp $
 
-BLAKE2s (nmap-7.99.tar.bz2) = 2a4f8ad74dd7b0206dd78ca01b1f783a49596e9f947d385627ad9abd9af70dac
-SHA512 (nmap-7.99.tar.bz2) = 9ff69659b76573eb10b6e472a0217032fd5fed20f0ac971b3736a4222fb6251c5fbf381ebea7ede313b8ff2feac90a848f645000c61200772d01b843594f4ba4
-Size (nmap-7.99.tar.bz2) = 13036588 bytes
+BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
+SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
+Size (nmap-7.991.tar.bz2) = 12877122 bytes
 SHA1 (patch-charpool.cc) = 6d72e5723f41965fd80e166c5507167aab760022
 SHA1 (patch-configure) = 5d68f319f1581bb07a586e107155510c7decc342
 SHA1 (patch-libdnet-stripped_src_arp-bsd.c) = c56c4e70eca2fa04dd8aab38ed2c3f4cac83f5e3

Index: pkgsrc/net/zenmap/Makefile
diff -u pkgsrc/net/zenmap/Makefile:1.22 pkgsrc/net/zenmap/Makefile:1.23
--- pkgsrc/net/zenmap/Makefile:1.22     Wed May 20 14:31:07 2026
+++ pkgsrc/net/zenmap/Makefile  Wed Sep  2 14:01:40 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.22 2026/05/20 14:31:07 abs Exp $
+# $NetBSD: Makefile,v 1.23 2026/09/02 14:01:40 adam Exp $
 
 .include "../../net/nmap/Makefile.common"
 
 PKGNAME=       ${DISTNAME:S/nmap/zenmap/}
-PKGREVISION=   1
 
 COMMENT=       Nmap Security Scanner GUI
 
@@ -18,9 +17,9 @@ TOOL_DEPENDS+=        ${PYPKGPREFIX}-setuptools
 
 USE_LANGUAGES= # none
 
-DEPENDS+=      gtk3+-[0-9]*:../../x11/gtk3
-DEPENDS+=      nmap-[0-9]*:../../net/nmap
-DEPENDS+=      ${PYPKGPREFIX}-gobject3-[0-9]*:../../devel/py-gobject3
+DEPENDS+=      gtk3+>=0:../../x11/gtk3
+DEPENDS+=      nmap>=0:../../net/nmap
+DEPENDS+=      ${PYPKGPREFIX}-gobject3>=0:../../devel/py-gobject3
 
 .include "../../lang/python/batteries-included.mk"
 .include "../../lang/python/wheel.mk"

Index: pkgsrc/net/zenmap/PLIST
diff -u pkgsrc/net/zenmap/PLIST:1.10 pkgsrc/net/zenmap/PLIST:1.11
--- pkgsrc/net/zenmap/PLIST:1.10        Wed May 20 14:31:07 2026
+++ pkgsrc/net/zenmap/PLIST     Wed Sep  2 14:01:40 2026
@@ -1,5 +1,12 @@
-@comment $NetBSD: PLIST,v 1.10 2026/05/20 14:31:07 abs Exp $
+@comment $NetBSD: PLIST,v 1.11 2026/09/02 14:01:40 adam Exp $
 bin/zenmap
+${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/RECORD
+${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
+${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
+${PYSITELIB}/${WHEEL_INFODIR}/licenses/COPYING_HIGWIDGETS
+${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE
+${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/radialnet/__init__.py
 ${PYSITELIB}/radialnet/__init__.pyc
 ${PYSITELIB}/radialnet/__init__.pyo
@@ -87,6 +94,7 @@ ${PYSITELIB}/radialnet/gui/Toolbar.pyo
 ${PYSITELIB}/radialnet/gui/__init__.py
 ${PYSITELIB}/radialnet/gui/__init__.pyc
 ${PYSITELIB}/radialnet/gui/__init__.pyo
+${PYSITELIB}/radialnet/share/sample/nmap_example.xml
 ${PYSITELIB}/radialnet/util/__init__.py
 ${PYSITELIB}/radialnet/util/__init__.pyc
 ${PYSITELIB}/radialnet/util/__init__.pyo
@@ -102,13 +110,6 @@ ${PYSITELIB}/radialnet/util/integration.
 ${PYSITELIB}/radialnet/util/misc.py
 ${PYSITELIB}/radialnet/util/misc.pyc
 ${PYSITELIB}/radialnet/util/misc.pyo
-${PYSITELIB}/${WHEEL_INFODIR}/METADATA
-${PYSITELIB}/${WHEEL_INFODIR}/RECORD
-${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
-${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
-${PYSITELIB}/${WHEEL_INFODIR}/licenses/COPYING_HIGWIDGETS
-${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE
-${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/zenmapCore/BasePaths.py
 ${PYSITELIB}/zenmapCore/BasePaths.pyc
 ${PYSITELIB}/zenmapCore/BasePaths.pyo

Index: pkgsrc/net/zenmap/distinfo
diff -u pkgsrc/net/zenmap/distinfo:1.12 pkgsrc/net/zenmap/distinfo:1.13
--- pkgsrc/net/zenmap/distinfo:1.12     Wed Apr  1 13:00:05 2026
+++ pkgsrc/net/zenmap/distinfo  Wed Sep  2 14:01:41 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.12 2026/04/01 13:00:05 adam Exp $
+$NetBSD: distinfo,v 1.13 2026/09/02 14:01:41 adam Exp $
 
-BLAKE2s (nmap-7.99.tar.bz2) = 2a4f8ad74dd7b0206dd78ca01b1f783a49596e9f947d385627ad9abd9af70dac
-SHA512 (nmap-7.99.tar.bz2) = 9ff69659b76573eb10b6e472a0217032fd5fed20f0ac971b3736a4222fb6251c5fbf381ebea7ede313b8ff2feac90a848f645000c61200772d01b843594f4ba4
-Size (nmap-7.99.tar.bz2) = 13036588 bytes
-SHA1 (patch-pyproject.toml) = 57c7caa4efd8ede5ea047c8176f1727e16eab91e
+BLAKE2s (nmap-7.991.tar.bz2) = 50d48fbfbddc2769c98a9c2c2193b04ccb641d573c5be584cc8b735c9bda2364
+SHA512 (nmap-7.991.tar.bz2) = d87836eedd453f4f5e55075b50640a6ad61cb5dbc1f887dbaf725fa8c32b6a472d838d174c68a2efa749b3b028512d2f0467aea0ff0b5f5752df714db62f8320
+Size (nmap-7.991.tar.bz2) = 12877122 bytes
+SHA1 (patch-pyproject.toml) = ea02bf0e5b6a415e96889a2bd063b1f2bb4db086

Index: pkgsrc/net/zenmap/patches/patch-pyproject.toml
diff -u pkgsrc/net/zenmap/patches/patch-pyproject.toml:1.1 pkgsrc/net/zenmap/patches/patch-pyproject.toml:1.2
--- pkgsrc/net/zenmap/patches/patch-pyproject.toml:1.1  Wed Apr  1 13:00:05 2026
+++ pkgsrc/net/zenmap/patches/patch-pyproject.toml      Wed Sep  2 14:01:41 2026
@@ -1,10 +1,10 @@
-$NetBSD: patch-pyproject.toml,v 1.1 2026/04/01 13:00:05 adam Exp $
+$NetBSD: patch-pyproject.toml,v 1.2 2026/09/02 14:01:41 adam Exp $
 
 Don't install ndiff.
 
---- pyproject.toml.orig        2026-04-01 12:55:12.423831238 +0000
+--- pyproject.toml.orig        2026-08-05 21:12:13.000000000 +0000
 +++ pyproject.toml
-@@ -24,8 +24,6 @@ Changelog = "https://nmap.org/changelog";
+@@ -24,11 +24,8 @@ Changelog = "https://nmap.org/changelog";
  [project.gui-scripts]
  zenmap = "zenmapGUI.App:run"
  
@@ -12,12 +12,7 @@ Don't install ndiff.
 -ndiff = "ndiff:run_main"
  
  [tool.setuptools]
- packages = [
-@@ -44,7 +42,6 @@ packages = [
- "radialnet.gui",
- "radialnet.util",
- ]
 -py-modules = ["ndiff"]
+ include-package-data = true
  
- [tool.setuptools.dynamic]
- version = {attr = "zenmapCore.Version.VERSION"}
+ [tool.setuptools.packages.find]

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/security/py-krb5
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/security/py-krb5
Indexes:

Home | Main Index | Thread Index | Old Index