Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nmap for openSUSE:Factory:NonFree checked in at 2026-10-20 18:19:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory:NonFree/nmap (Old) and /work/SRC/openSUSE:Factory:NonFree/.nmap.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nmap" Tue Oct 20 18:19:09 2026 rev:7 rq:1363986 version:7.98 Changes: -------- --- /work/SRC/openSUSE:Factory:NonFree/nmap/nmap.changes 2025-08-14 12:09:43.227845714 +0200 +++ /work/SRC/openSUSE:Factory:NonFree/.nmap.new.3698736/nmap.changes 2026-10-20 18:19:12.725593319 +0200 @@ -1,0 +2,146 @@ +Sun Jun 14 16:05:19 UTC 2026 - Andreas Stieger <[email protected]> + +- fix build with updated python, do not install po/pot + +------------------------------------------------------------------- +Sat Mar 14 12:15:19 UTC 2026 - Martin Hauke <[email protected]> + +- Update to version 7.98 + * Fixed an issue in FTP bounce scan where a single null byte is + written past the end of the receive buffer. The issue is + triggered by a malicious server but does not cause a crash + with default builds. + * [GH#3130]Fix a crash (stack exhaustion due to excessive + recursion) in the parallel DNS resolver. Additionally, improved + performance by processing responses that come after the request + has timed out. + * [GH#2148]Fix the error, "Assertion failed: (datalink == + DLT_EN10MB), function begin_sniffer, file scan_engine_raw.cc" + when using Nmap with certain VPN interfaces. + * [GH#2757]Fix a crash in traceroute when using randomly- + enerated decoys: "Assertion `source->ss_family == AF_INET' + failed". + * [GH#2899]When IP protocol scanning on IPv6 (-sO -6), skip + protocol numbers that are registered as Extension Header + values. When the --data option was used, these would fail the + assertion "len == (u32) ntohs(ip6->ip6_plen)". + * [GH#3086]Prevent TCP Connect scan (-sT) from leaking one socket + per hostgroup, which led to progressively slower scans and + assertion failures in other scan phases. + * [NSE][GH#3133]Fix the error "nse_nsock.cc:637: void + receive_callback(nsock_pool, nsock_event, void*): Assertion + `lua_status(L) == 1' failed." when reading from an SSL + connection. + * [NSE]Added NSE bindings for more libssh2 functions: + channel_request, channel_request_pty_ex, channel_shell, and + userauth_keyboard_interactive. ssh-brute will now use + keyboard-interactive auth if password auth is not offered. + * [NSE][GH#3014]Fix dns-zone-transfer to handle nontraditional + TLDs. + * Fix a bug that was causing Nmap to send empty DNS packets for + each target that was not found up instead of just skipping + them for reverse DNS. + * [NSE]Fix/update/enhance tls.lua for newer TLSv1.3 ciphers, + including post-quantum ciphersuites. + * [Ndiff][GH#3115]Have configure script check for PyPA 'build' + module. + * [Zenmap]Updated Spanish and Chinese language strings for Zenmap + to cover latest strings. + * [Zenmap][GH#2718]Zenmap language translation (i18n) files were + not being installed. + * [Zenmap][GH#3066]Fix Zenmap error "ValueError: I/O operation on + closed file" when Nmap crashes or fails. + * [Zenmap][GH#3084][GH#3127]Fix UnicodeDecodeError issues in + ScriptMetadata and UmitConfigParser. + * [NSE][GH#3123]WS-Discovery parsing would error out if the + MessageID UUID was not prefixed with "urn:". +- Drop not longer needed patch: + * zenmap-fix-locale-install.patch + +------------------------------------------------------------------- +Wed May 14 06:33:28 UTC 2025 - Robert Frohl <[email protected]> + +- Update to 7.97: + * Fixed an issue with the parallel forward DNS resolver: it had not been + consulting /etc/hosts, nor did it correctly handle the 'localhost' name. + +------------------------------------------------------------------- +Wed May 7 08:12:06 UTC 2025 - Robert Frohl <[email protected]> + +- Update to 7.96: + * [Nping] Promoted Nping version number from a 0.7.95 alpha release to the + same release version as Nmap. + * Fixed an issue preventing the Nmap OEM 7.95 uninstaller from correctly + uninstalling Nmap OEM. + * [Zenmap] Fixed a Zenmap crash in DiffViewer when Ndiff exits with error. + * [Zenmap] Fixed several UnicodeDecodeError or UnicodeEncodeError crashes throughout Zenmap. + * [Zenmap] Fixed an issue preventing Zenmap from launching if nmap was not in + the PATH. The issue primarily affected macOS users. [Daniel Miller] + * Fixed a couple of issues with parsing the argument to the -iR option. + * [NSE] Added TLS support to redis.lua and improved -sV detection of redis. + * [Zenmap] Added dark mode, accessed via Profile->Toggle Dark Mode or window::dark_mode + in zenmap.conf. [Daniel Miller] + * Upgraded included libraries: Lua 5.4.7, libssh2 1.11.1, libpcap 1.10.5, libpcre 10.45 + * [NSE] New script targets-ipv6-eui64 generates target IPv6 addresses from a + user-provided file of MAC addresses, using the EUI-64 method. [Daniel Miller] + * [NSE] New service probes and scripts for MikroTik's WinBox router admin service. + mikrotik-routeros-version queries the 'info' and 'list' files to get the RouterOS + version. mikrotik-routeros-username-brute brute-forces usernames for the router + using CVE-2024-54772. [deauther890, Daniel Miller] + * Fix 2 potential crashes in parsing IPv6 extension headers discovered using + AFL++ fuzzer. [Domen Puncer Kugler, Daniel Miller] + * [Nping] Bind raw socket to device when possible. This was already done for + IPv6, but was needed for IPv4 L3 tunnels. [ValdikSS] + * [Ncat] Ncat in connect mode no longer defaults to half-closed TCP connections. + This makes it more compatible with other netcats. The -k option will enable the + old behavior. See https://seclists.org/nmap-dev/2013/q1/188 [Daniel Miller] + * [Nsock] Fix an issue affecting Ncat where unread bytes in the SSL layer's buffer + could not be read until more data arrived on the socket, which could lead to deadlock. [Daniel Miller] + * [Ncat] New Ncat option -q to delay quit after EOF on stdin, the same as traditional + netcat's -q option. [Daniel Miller] + * [Ncat] Ncat in listen mode with -e or -c correctly handles error and EOF conditions + that had not been being delivered to the child process. + * [Ncat][Windows] All Nsock engines now work correctly. The default is still 'select', + but others can be set with --nsock-engine=iocp or --nsock-engine=poll [Daniel Miller] + * [NSE] SSH NSE scripts now catch connection errors thrown by the libssh2 Lua binding, + providing useful output instead of a backtrace. [Joshua Rogers, Daniel Miller] + * [NSE] Several fixes and extensions to the libssh2 NSE bindings: fixed libssh2.channel_read_stderr, + which was reading stdout instead; add binding for libssh2_userauth_publickey_frommemory; + allow open_channel to avoid allocating a pty; + * [Nsock][Windows] Fixed the IOCP Nsock engine, which had been demoted since Nmap 7.91 + due to unresolved issues around SSL sockets and IPv6. [Daniel Miller] + * [Nsock] Improvements for platforms without selectable pcap handles (e.g. Windows). + Interleaved pcap and socket events were favoring pcap reads, possibly resulting + in timeouts of the socket events. [Daniel Miller] + * [Nsock] Improved memory performance of poll engine on Windows. [Daniel Miller] + * [Nsock] Improvements to Nsock event list management, fixing errors like + "could not find 1 of the purportedly pending events on that IOD." [Daniel Miller] + * Fixed the issue where TCP Connect scans (-sT) on Windows would show 'filtered' + instead of 'closed', due to differences in understanding timeouts. + * Nmap will now allow targets to be specified both on the command line and in + an input file with -iL. Previously, if targets were provided in both places, + only the targets in the input file would be scanned, and no notice was given + that the command-line targets were ignored. [Daniel Miller] + * Nmap now performs forward DNS lookups in parallel, using the same engine that has + been reliably performing reverse-DNS lookups for nearly a decade. Scanning large lists + of hostnames is now enormously faster and avoids the unresponsive wait for blocking + system calls, so progress stats can be shown. In testing, resolving 1 million website + names to both IPv4 and IPv6 took just over an hour. The previous system took 49 hours + for the same data set! [Daniel Miller] + * When Nmap is used with --disable-arp-ping, a local IP that cannot be ARP-resolved + will use the "no-route" reason instead of the "unknown-response" reason, since + no response was received. + * [NSE] Various bug fixes in the mssql NSE library. [johnjaylward, nnposter] + * [NSE] Testing for acceptance of SSH keys for a given username caused heap + corruption. [Julijan Nedic, nnposter] + * [NSE] Scripts were not able to load SSH public keys. from a file. [nnposter] + * [NSE] Encryption/decryption performed by the OpenSSL NSE module did not work + correctly when the IV started with a null byte. [nnposter] + * [NSE] Arbitrary separator in stdnse.tohex() is now supported. Script smb-protocols + now reports SMB dialects correctly. [nnposter] + * [NSE] ether_type inconsistency in packet.Frame has been resolved. Both Frame:new() + and Frame:build_ether_frame() now use an integer. [nnposter] + * Nmap is now able to scan IP protocol 255. [nnposter] +- Added ndiff_build.patch and ndiff_install.patch + +------------------------------------------------------------------- Old: ---- nmap-7.95.tar.bz2 nmap-7.95.tar.bz2.asc zenmap-fix-locale-install.patch New: ---- ndiff_build.patch ndiff_install.patch nmap-7.98.tar.bz2 nmap-7.98.tar.bz2.asc ----------(Old B)---------- Old:- Drop not longer needed patch: * zenmap-fix-locale-install.patch ----------(Old E)---------- ----------(New B)---------- New: * Nmap is now able to scan IP protocol 255. [nnposter] - Added ndiff_build.patch and ndiff_install.patch New: * Nmap is now able to scan IP protocol 255. [nnposter] - Added ndiff_build.patch and ndiff_install.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nmap.spec ++++++ --- /var/tmp/diff_new_pack.JJhx9n/_old 2026-10-20 18:19:14.909685005 +0200 +++ /var/tmp/diff_new_pack.JJhx9n/_new 2026-10-20 18:19:14.912685131 +0200 @@ -28,7 +28,7 @@ %endif %define pythons python3 Name: nmap -Version: 7.95 +Version: 7.98 Release: 0 Summary: Network exploration tool and security scanner # nmap 7.94 is licensed under Nmap Public Source License Version 0.95 @@ -44,7 +44,8 @@ Patch2: nmap-4.75-nostrip.patch Patch3: su-to-zenmap.patch Patch4: nmap-ncat-skip-network-tests.patch -Patch5: zenmap-fix-locale-install.patch +Patch6: ndiff_build.patch +Patch7: ndiff_install.patch BuildRequires: dos2unix BuildRequires: fdupes BuildRequires: gcc-c++ @@ -60,6 +61,7 @@ BuildRequires: pkgconfig(lua) >= 5.4.4 %endif BuildRequires: %{python_module setuptools} +BuildRequires: %{python_module setuptools-gettext} BuildRequires: %{python_module build} BuildRequires: %{python_module pip} BuildRequires: %{python_module wheel} @@ -156,8 +158,6 @@ install -d "%{buildroot}%{_datadir}/pixmaps/" install -d "%{buildroot}%{_datadir}/applications/" -rm "%{buildroot}%{_bindir}/uninstall_ndiff" - pushd zenmap %pyproject_install install -m 644 ../docs/zenmap.1 %{buildroot}%{_mandir}/man1/ @@ -167,7 +167,12 @@ ln -sf zenmap %{buildroot}%{_bindir}/nmapfe ln -sf zenmap %{buildroot}%{_bindir}/xnmap popd +# TODO: only temporary fix and might need cleanup later on: +# 7.98 build does not produce the correct dist-info folder yet, likely due to new ndiff/zenmap build process +mv %{buildroot}%{python_sitelib}/ndiff-7.96.dist-info/ %{buildroot}%{python_sitelib}/ndiff-%{version}.dist-info +mv %{buildroot}%{python_sitelib}/zenmap-7.97.dist-info/ %{buildroot}%{python_sitelib}/zenmap-%{version}.dist-info +find %{buildroot}/%{python_sitelib}/zenmapCore/data/locale -type f -name "*.po*" -print -delete %find_lang zenmap %suse_update_desktop_file zenmap System Network @@ -231,7 +236,6 @@ %{python_sitelib}/zenmapCore/data/{config,docs,misc,pixmaps} %dir %{python_sitelib}/zenmapCore/data/locale %dir %{python_sitelib}/zenmapCore/data/locale/* -%dir %{python_sitelib}/zenmapCore/data/locale/*/LC_MESSAGES %{python_sitelib}/zenmapCore/data/locale/xgettext-profile_editor.py %{python_sitelib}/zenmapCore/data/locale/__pycache__/* %{python_sitelib}/zenmapGUI @@ -246,6 +250,7 @@ %{_bindir}/ndiff %{_mandir}/man1/ndiff.1%{?ext_man} %{python_sitelib}/ndiff.* +%{python_sitelib}/ndiff-%{version}.dist-info %pycache_only %{python_sitelib}/__pycache__/ndiff.* %files -n ncat ++++++ ndiff_build.patch ++++++ commit 08f2621cd0c7dc542570bd517fab5492087837a1 Author: Robert Frohl <[email protected]> Date: Wed May 7 13:40:17 2025 +0200 Fix ndiff build issue, if build host has no network access [ 97s] /usr/bin/python3 -m build ndiff/ [ 97s] * Creating isolated environment: venv+pip... [ 97s] * Installing packages in isolated environment: [ 97s] - setuptools [ 97s] > /usr/bin/python3 -m pip --python /tmp/build-env-55g_0_ls/bin/python install [ 97s] --use-pep517 --no-warn-script-location --no-compile -r /tmp/build-reqs- [ 97s] qwsq0oeb.txt [ 97s] < WARNING: Disabling truststore because of missing certificates [ 97s] < WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, [ 97s] status=None)) after connection broken by [ 97s] 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object [ 97s] at 0x7f465360b0e0>: Failed to establish a new connection: [Errno -3] [ 97s] Temporary failure in name resolution')': /simple/setuptools/ [..] [ 97s] < ERROR: Could not find a version that satisfies the requirement setuptools [ 97s] (from versions: none) [ 97s] < WARNING: Disabling truststore because of missing certificates [ 97s] < ERROR: No matching distribution found for setuptools diff --git a/Makefile.in b/Makefile.in index 29a6d0e..6b0e7b1 100644 --- a/Makefile.in +++ b/Makefile.in @@ -375,7 +375,7 @@ install-zenmap: $(ZENMAPDIR)/pyproject.toml ln -sf zenmap $(DESTDIR)$(bindir)/xnmap build-ndiff: - $(PYTHON) -m build $(NDIFFDIR)/ + $(PYTHON) -m build --no-isolation $(NDIFFDIR)/ build-nping: $(NPINGDIR)/Makefile build-nbase build-nsock build-netutil $(NPINGDIR)/nping.h @DNET_BUILD@ @PCAP_BUILD@ @cd $(NPINGDIR) && $(MAKE) ++++++ ndiff_install.patch ++++++ commit 58963267164e8059531c328812aaa9b4343a2027 Author: Robert Frohl <[email protected]> Date: Wed May 7 13:48:33 2025 +0200 Fix ndiff installation issue, if build host has no network access [ 79s] Processing ./ndiff [ 79s] Installing build dependencies: started [ 87s] Installing build dependencies: finished with status 'error' [ 87s] error: subprocess-exited-with-error [ 87s] [ 87s] × pip subprocess to install build dependencies did not run successfully. [ 87s] │ exit code: 1 [ 87s] ╰─> [8 lines of output] [ 87s] WARNING: Disabling truststore because of missing certificates [ 87s] WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7 f330b223770>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/setuptools/ [ 87s] WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7 f330b2e0910>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/setuptools/ [ 87s] WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7 f330b2e0b90>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/setuptools/ [ 87s] WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7 f330b2e0e10>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/setuptools/ [ 87s] WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7 f330b2e1090>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/setuptools/ [ 87s] ERROR: Could not find a version that satisfies the requirement setuptools (from versions: none) [ 87s] ERROR: No matching distribution found for setuptools [ 87s] [end of output] diff --git a/Makefile.in b/Makefile.in index 6b0e7b1..50f5f67 100644 --- a/Makefile.in +++ b/Makefile.in @@ -382,7 +382,7 @@ build-nping: $(NPINGDIR)/Makefile build-nbase build-nsock build-netutil $(NPINGD install-ndiff: $(INSTALL) -d $(DESTDIR)$(bindir) $(DESTDIR)$(mandir)/man1 - $(PYTHON) -m pip install $(NDIFFDIR)/ $(if $(DESTDIR),--root "$(DESTDIR)") + $(PYTHON) -m pip install --no-build-isolation $(NDIFFDIR)/ $(if $(DESTDIR),--root "$(DESTDIR)") $(INSTALL) -c -m 644 $(NDIFFDIR)/docs/ndiff.1 $(DESTDIR)$(mandir)/man1/ NSE_FILES = scripts/script.db scripts/*.nse ++++++ nmap-7.95.tar.bz2 -> nmap-7.98.tar.bz2 ++++++ /work/SRC/openSUSE:Factory:NonFree/nmap/nmap-7.95.tar.bz2 /work/SRC/openSUSE:Factory:NonFree/.nmap.new.3698736/nmap-7.98.tar.bz2 differ: char 11, line 1
