-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Dec 2024 10:30:10 +0100 Source: fastnetmon Binary: fastnetmon fastnetmon-dbgsym Architecture: armhf Version: 1.2.4-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Patrick Matthäi Description: fastnetmon - fast DDoS analyzer with sflow/netflow/mirror support (community e Closes: 1090387 1090388 Changes: fastnetmon (1.2.4-2+deb12u1) bookworm-security; urgency=medium . [ Moritz Mühlenhoff ] * Fixes CVE-2024-56073: Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service (divide-by-zero error and application crash). Closes: #1090387 * Fixes CVE-2024-56072: The sFlow v5 plugin allows remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples. Closes: #1090388 Checksums-Sha1: 7beae5883f830a93832206b69513110c47d509c0 15938632 fastnetmon-dbgsym_1.2.4-2+deb12u1_armhf.deb c45fbec9e9616af24f0baa6ff639b1c6a8eb6ed8 12204 fastnetmon_1.2.4-2+deb12u1_armhf-buildd.buildinfo 4195ca5e8cffe97cae300c1c58bb8e1b15051b07 1025824 fastnetmon_1.2.4-2+deb12u1_armhf.deb Checksums-Sha256: b581bfdbad079f5bca628561ec3d445792d7fbc3d3aaf46ea1dcea0a4713d8e8 15938632 fastnetmon-dbgsym_1.2.4-2+deb12u1_armhf.deb b5548a1867391f4ad65b393e7c98357db9a6ad27701297294f6268546a3f7fce 12204 fastnetmon_1.2.4-2+deb12u1_armhf-buildd.buildinfo 162d4558419ee87c857239d518e7c594142e97651dae94eb0fb0f0fc9ce2c7b5 1025824 fastnetmon_1.2.4-2+deb12u1_armhf.deb Files: 71d754f4f02d5accfbbca371d9ae696d 15938632 debug optional fastnetmon-dbgsym_1.2.4-2+deb12u1_armhf.deb 2500155303fc120c43b7a2e913016678 12204 net optional fastnetmon_1.2.4-2+deb12u1_armhf-buildd.buildinfo 4894525151b9835ff92588a480e38ee7 1025824 net optional fastnetmon_1.2.4-2+deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAmdpVHIACgkQ+XaKpT5f kBLUChAAw9etgHZB8E2IDdLOBOZWE4tTasKctA85+lv/9OEwTQ3vi2RW8jfStnID cWL8J1TV3lCs9WJq0PgODYOHxCMZK30b2bH+wRjPqVnU8mWvPiE+qMFSqkKq7itM dIIpo6hJ6h+3ivCx2I7KW+DYLsqCYjcPoIsHhQ3gYrByDWkWbB0TkU+axUP2r2oJ Bi8MZ7ITKgUUiYandDvUH3tNhUmH2GB123sWHkJIiOOcQ/N3dxW60XbqM+m7xPgC YwPFpeYRbGwC5C/hAP3VdZN98r3qfr2nMzUuGihie9o/giVeUqV1YSOfTnFGrzqS HOiH0CaisvJAJdoDtWiOIZZa0i3ErBB710qq3JRoe2du4pfsmcyrq52lq9jhVuXQ WdXVNxMBnToXK8up1c4rWLtXhuoKME4SPx7qlcq0AbG7bLEywEw/O/Dwjfc9Sth7 Qiuji4toSk/CTZthYdQyYyG1SMOC9bK73h8/SzQU5yQJG7Kdnh0S10XQQ0G/dnH4 iUIU/Fjt/k3vSv1sKhM+SmG2XqU4D/0M5/4vq45vPz2FdwX2S+b3mhkfKnkaedxd vQ/yi3LpB/uSRMbCEr9xeirnBb/yA3r0T5Lw3RFXki3dSEHbyizwl6hokDQbS2L/ ySJJH2EovngGa4MBDxt3FeqD3rkiybkftUw6s1QFjQFZA35krjY= =JBEl -----END PGP SIGNATURE-----