-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Dec 2024 10:30:10 +0100 Source: fastnetmon Binary: fastnetmon fastnetmon-dbgsym Architecture: amd64 Version: 1.2.4-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Patrick Matthäi Description: fastnetmon - fast DDoS analyzer with sflow/netflow/mirror support (community e Closes: 1090387 1090388 Changes: fastnetmon (1.2.4-2+deb12u1) bookworm-security; urgency=medium . [ Moritz Mühlenhoff ] * Fixes CVE-2024-56073: Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service (divide-by-zero error and application crash). Closes: #1090387 * Fixes CVE-2024-56072: The sFlow v5 plugin allows remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples. Closes: #1090388 Checksums-Sha1: a1b4f1a334b9fdde50ee0164381ee858ed476c60 16715980 fastnetmon-dbgsym_1.2.4-2+deb12u1_amd64.deb 126190e95ab177aca9bbcfc3c20fd9a4114a3d3a 12329 fastnetmon_1.2.4-2+deb12u1_amd64-buildd.buildinfo 9b66594bdde575730892bbb41aac8399df527f1a 1182308 fastnetmon_1.2.4-2+deb12u1_amd64.deb Checksums-Sha256: 31126792d03a9b5f53d2abbb1577d89a09e0afccdfc708050253b9dc09c8f2f5 16715980 fastnetmon-dbgsym_1.2.4-2+deb12u1_amd64.deb 1d867a6708401d99e606cd5a21b6f7b45794a0f9806233129ad2c144c213ff69 12329 fastnetmon_1.2.4-2+deb12u1_amd64-buildd.buildinfo ff3beb5112ff115198995fc586e382eca2a719c0b065800680bca5cbedb0bd90 1182308 fastnetmon_1.2.4-2+deb12u1_amd64.deb Files: e9843a01de07b1d72ec166a640d3cfca 16715980 debug optional fastnetmon-dbgsym_1.2.4-2+deb12u1_amd64.deb 98f2b66bb474f5ed04dfc7d9f47671a6 12329 net optional fastnetmon_1.2.4-2+deb12u1_amd64-buildd.buildinfo 5b690dca8a7e70e5d53e47852204817f 1182308 net optional fastnetmon_1.2.4-2+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEe8x49oT2k+seQstpgDm7h4zfCpIFAmdpUywACgkQgDm7h4zf CpKbdA//Wd7ruNgCyIjBqmyEabHZzlpDI5X7qVMEdR33uQEvQpf6qM6rt6rj2Vns /O7qmHolUNCxeLk8xTkphHZsNIoGp3MbkHBEwki1rCvgCtS0jHGVNa0Rl2i71Gq+ HE3PANyu/QoFfqwpNNUI6fMUQETPq/iDCDs9+U5BW6sEIPUoMPskkH2qNO6cyEoR PNtUeY3sFnxHfJZtR2otDr7eRwNMrZzICrEnZhC6a5sMN8s6K75ourb6ExaM57ui Ti5aKCQz+DVXt93+7IiH+/LakvTtsDEMp6pWgNz0hKAtV6s1c9Owo8XqDAcOgmYi fplFwouWJeqUIXTJNQdieso+CKubE0gdMPCUytRVxlyZYKxIVTGkVithC9tMymM4 0vXhIPf5Ndg+X+hNcHNaM6gwylc0lVDBO9HGzyRNV7dGY+F7yIZJGo3I0DtSd6WQ ILP+YXFuaz/drXCPzv76j1gUM1kChEfgEiA55sp5WnilexTfa1brZ0Fg9dPLtVNj WrY28Pjpdejg0mXgfwT5i1L1LZN+QLnsqLV6tERDSdH27z3lr1tIOSgxSnOCieme k0JB1XixyjWIW4AxKSTwjGSx+62bBLqftTqaCYmIkFISQR6QOP6Xde//fzyqMMLH Ac73PrHi8KndiC/R5F13V9xkx6c1f4abydsMDJ0Nw4idVWDxA+I= =5duT -----END PGP SIGNATURE-----