Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nmap for openSUSE:Leap:16.0:NonFree checked in at 2026-07-31 17:19:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:16.0:NonFree/nmap (Old) and /work/SRC/openSUSE:Leap:16.0:NonFree/.nmap.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nmap" Fri Jul 31 17:19:37 2026 rev:5 rq: version:7.95 Changes: -------- --- /work/SRC/openSUSE:Leap:16.0:NonFree/nmap/nmap.changes 2025-09-26 15:02:21.817239128 +0200 +++ /work/SRC/openSUSE:Leap:16.0:NonFree/.nmap.new.16738/nmap.changes 2026-08-01 00:02:08.973831411 +0200 @@ -1,0 +2,7 @@ +Tue Jul 28 09:24:14 UTC 2026 - Marius Grossu <[email protected]> + +- Fix CVE-2026-58058, crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash + (CVE-2026-58058, bsc#1269570) + * CVE-2026-58058.patch + +------------------------------------------------------------------- New: ---- CVE-2026-58058.patch ----------(New B)---------- New: (CVE-2026-58058, bsc#1269570) * CVE-2026-58058.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nmap.spec ++++++ --- /var/tmp/diff_new_pack.CHzk6r/_old 2026-08-01 00:02:09.445847817 +0200 +++ /var/tmp/diff_new_pack.CHzk6r/_new 2026-08-01 00:02:09.449847955 +0200 @@ -45,6 +45,8 @@ Patch3: su-to-zenmap.patch Patch4: nmap-ncat-skip-network-tests.patch Patch5: zenmap-fix-locale-install.patch +# PATCH-FIX-SUSE bsc#1269570 [email protected] CVE-2026-58058 +Patch6: CVE-2026-58058.patch BuildRequires: dos2unix BuildRequires: fdupes BuildRequires: gcc-c++ ++++++ CVE-2026-58058.patch ++++++ Index: nmap-7.95/libnetutil/netutil.cc =================================================================== --- nmap-7.95.orig/libnetutil/netutil.cc +++ nmap-7.95/libnetutil/netutil.cc @@ -625,6 +625,8 @@ static const void *ipv6_get_data_primiti return NULL; *nxt = *p; p += (*(p + 1) + 1) * 8; + if (p > end) + return NULL; } *len = end - p; ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.CHzk6r/_old 2026-08-01 00:02:09.513850180 +0200 +++ /var/tmp/diff_new_pack.CHzk6r/_new 2026-08-01 00:02:09.517850319 +0200 @@ -1,7 +1,7 @@ -mtime: 1755166182 -commit: fb2c70a7dfe2512139c993cf1662182794a3bc52a573a432862169cac50e68fa +mtime: 1785231020 +commit: 3d43c5acafc8d2b32ed3306dc431479dcec1e8b8b623a5587710806efc2d007b url: https://src.opensuse.org/pool/nmap.git -revision: fb2c70a7dfe2512139c993cf1662182794a3bc52a573a432862169cac50e68fa +revision: 3d43c5acafc8d2b32ed3306dc431479dcec1e8b8b623a5587710806efc2d007b trackingbranch: leap-16.0-nonfree projectscmsync: https://src.opensuse.org/openSUSE/LeapNonFree ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-28 11:30:20.000000000 +0200 @@ -0,0 +1 @@ +.osc
