Debian Patches
Status for nmap/7.99+dfsg-2
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0001-use-su-to-root.patch | use su-to-root | Hilko Bengen <bengen@debian.org> | no | 2014-04-25 | ||
| 0002-Use-Debian-s-ca-certificates.patch | Use Debian's ca-certificates | Hilko Bengen <bengen@debian.org> | no | 2014-05-30 | ||
| upstream-Fix-incompatible-pointer-type-error.patch | Fix passing argument 4 of ReadFile from incompatible pointer type ReadFile returns the number of read bytes in a DWORD, i.e. unsigned long, not in an int. Mangle returned value into an int when it is used with calling output(), it cannot be greater than 1023 (= 0x3FF) anyway. |
Sven Geuer <sge@debian.org> | yes | debian | 2025-03-28 | |
| dont_define_strlcat_in_libdnet.patch | Drop strlcat definition from embedded library libdnet-stripped Upstream tried to do this at https://github.com/nmap/nmap/commit/1c2402122251d237e2b7af3fa8582d33f0d15a4f, but it wasn't enough, at least for us. |
Samuel Henrique <samueloph@debian.org> | no | 2025-10-29 | ||
| CVE-2026-58058.patch | Fix CVE-2026-58058 Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. |
Sven Geuer <sge@debian.org> | not-needed | debian | backport, https://github.com/nmap/nmap/commit/bb6754e | 2026-07-16 |
All known versions for source package 'nmap'
- 7.99+dfsg-2 (sid, forky)
- 7.98+dfsg-1~bpo13+1 (trixie-backports)
- 7.95+dfsg-3 (trixie)
- 7.94+git20230807.3be01efb1+dfsg-4~bpo12+1 (bookworm-backports)
- 7.93+dfsg1-1 (bookworm)