1
1
#Nmap Changelog ($Id$); -*-text-*-
2
2
3
+ Nmap 7.95 [2024-04-23]
4
+
5
+ o [Windows] Upgraded Npcap (our Windows raw packet capturing and
6
+ transmission driver) from version 1.75 to the latest version 1.79. It
7
+ includes many performance improvements, bug fixes and feature
8
+ enhancements described at https://npcap.com/changelog.
9
+
10
+ o Integrated over 4000 IPv4 OS fingerprints submitted since June 2020. Added
11
+ 336 fingerprints, bringing the new total to 6036. Additions include iOS 15 &
12
+ 16, macOS Ventura & Monterey, Linux 6.1, OpenBSD 7.1, and lwIP 2.2
13
+
14
+ o Integrated over 2500 service/version detection fingerprints submitted since
15
+ June 2020. The signature count went up 1.4% to 12089, including 9 new
16
+ softmatches. We now detect 1246 protocols, including new additions of grpc,
17
+ mysqlx, essnet, remotemouse, and tuya.
18
+
3
19
o [NSE] Four new scripts from the DINA community (https://github.com/DINA-community)
4
20
for querying industrial control systems:
5
21
@@ -15,32 +31,31 @@ o [NSE] Four new scripts from the DINA community (https://github.com/DINA-commun
15
31
+ profinet-cm-lookup queries the DCERPC endpoint mapper exposed via the
16
32
PNIO-CM service.
17
33
18
- o Integrated over 2500 service/version detection fingerprints submitted since
19
- June 2020. The signature count went up 1.4% to 12089, including 9 new
20
- softmatches. We now detect 1246 protocols, including new additions of grpc,
21
- mysqlx, essnet, remotemouse, and tuya.
34
+ o Upgraded included libraries: Lua 5.4.6, libpcre2 10.43, zlib 1.3.1,
35
+ libssh2 1.11.0, liblinear 2.47
22
36
23
- o Integrated over 4000 IPv4 OS fingerprints submitted since June 2020. Added
24
- 336 fingerprints, bringing the new total to 6036. Additions include iOS 15 &
25
- 16, macOS Ventura & Monterey, Linux 6.1, OpenBSD 7.1, and lwIP 2.2
37
+ o [GH#2639] Upgraded OpenSSL binaries (for the Windows builds and for
38
+ RPMs) to version 3.0.13. CVEs resolved in this update include only 2
39
+ moderate-severity issues which we do not believe affect Nmap:
40
+ CVE-2023-5363 and CVE-2023-2650
41
+
42
+ o [Zenmap][Ndiff][GH#2649] Zenmap and Ndiff now use setuptools, not distutils for packaging.
43
+
44
+ o [Ncat][GH#2685] Fixed Ncat UDP server mode to not quit after EOF on stdin. Reported
45
+ as Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039613
46
+
47
+ o [GH#2672] Fixed an issue where TCP Connect scan (-sT) on Windows would fail to open any
48
+ sockets, leading to scans that never finish. [Daniel Miller]
26
49
27
50
o [NSE] ssh-auth-methods will now print the pre-authentication banner text when
28
51
available. Requires libssh2 1.11.0 or later. [Daniel Miller]
29
52
30
- o Upgrade included libraries: Lua 5.4.6, libpcre2 10.43, zlib 1.3.1,
31
- libssh2 1.11.0, liblinear 2.47
32
-
33
53
o [Zenmap][GH#2739] Fix a crash in Zenmap when changing a host comment.
34
54
35
55
o [NSE][GH#2766] Fix TLS 1.2 signature algorithms for EdDSA. [Daniel Roethlisberger]
36
56
37
- o [Zenmap][Ndiff][GH#2649] Zenmap and Ndiff now use setuptools, not distutils for packaging.
38
-
39
57
o [Zenmap][GH#2706] RPM spec files now correctly require the python3 package, not python>=3
40
58
41
- o [GH#2672] Fixed an issue where TCP Connect scan (-sT) on Windows would fail to open any
42
- sockets, leading to scans that never finish. [Daniel Miller]
43
-
44
59
o Improvements to OS detection fingerprint matching, including a syntax change
45
60
for nmap-os-db that allows ranges within the TCP Options string. This leads
46
61
to more concise and maintainable fingerprints. [Daniel Miller]
@@ -57,9 +72,6 @@ o [GH#2731] Fix an out-of-bounds read which led to out-of-memory errors when
57
72
58
73
o [GH#2609] Fixed a memory leak in Nsock: compiled pcap filters were not freed.
59
74
60
- o [Ncat][GH#2685] Fixed Ncat UDP server mode to not quit after EOF on stdin. Reported
61
- as Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039613
62
-
63
75
o [GH#2658] Fixed a crash when using service name wildcards with -p, as in -p "http*"
64
76
65
77
o [NSE] Fixed DNS TXT record parsing which caused asn-query to fail in Nmap
0 commit comments