-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Dec 2024 10:30:10 +0100 Source: fastnetmon Binary: fastnetmon fastnetmon-dbgsym Architecture: s390x Version: 1.2.4-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Patrick Matthäi Description: fastnetmon - fast DDoS analyzer with sflow/netflow/mirror support (community e Closes: 1090387 1090388 Changes: fastnetmon (1.2.4-2+deb12u1) bookworm-security; urgency=medium . [ Moritz Mühlenhoff ] * Fixes CVE-2024-56073: Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service (divide-by-zero error and application crash). Closes: #1090387 * Fixes CVE-2024-56072: The sFlow v5 plugin allows remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples. Closes: #1090388 Checksums-Sha1: 7fc60180cff6bc2bf593c9867649fb2cb1c48fbd 16255572 fastnetmon-dbgsym_1.2.4-2+deb12u1_s390x.deb d4afcbe5ccf09febd3c417140cf2b871e9fb9789 12240 fastnetmon_1.2.4-2+deb12u1_s390x-buildd.buildinfo a11f8a1e1db9054e68875bda3119cbc9e6598fcd 1037112 fastnetmon_1.2.4-2+deb12u1_s390x.deb Checksums-Sha256: 3e49ace2527cc75983ded615e3836211f58a76595760cef655abf6a205fc4559 16255572 fastnetmon-dbgsym_1.2.4-2+deb12u1_s390x.deb ff9359ec75eb5ad4e7e43a8c8956af69866c404e1395740ebdeef0740b7400f8 12240 fastnetmon_1.2.4-2+deb12u1_s390x-buildd.buildinfo 0d51bc7b2fbf60a4b04726fab67d622a4abeb99f0a1379e644b2f27ee703eda2 1037112 fastnetmon_1.2.4-2+deb12u1_s390x.deb Files: 2dce6bee10b9e60c094e9fb95a742e38 16255572 debug optional fastnetmon-dbgsym_1.2.4-2+deb12u1_s390x.deb b49365d6460167b0e8ab883459f1cd22 12240 net optional fastnetmon_1.2.4-2+deb12u1_s390x-buildd.buildinfo d5f0e60ddd4525de6ffe41f9e6fd4fe6 1037112 net optional fastnetmon_1.2.4-2+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZTC4/c20pi1/n7UBUhVQ83ojQ7QFAmdpa9YACgkQUhVQ83oj Q7TXbRAAx7AcyYOdM2m7xIGp1Xb++N9RUqe6o/iNvf7/RsTBpgO4suDsXiYBR2zR gWXzQWzu4Bk1LN5Fk3iVF8mMtlsnpkvroo4QqOv7a3hIktVZKJlpRABF38ZCP/PV C/Le9KjUkPLD4wXnfa+2Nd8ElLP5d2aB2wikkrpjHT5VFWLlfF0KxcFjTq31jmWY 3kEuzuz8Z9lCTLhHdGiRzzbZJLN+nDIyAOoqF652fzg5r7s2vPEjRIBLhQrW0LMJ Pbsj0p4WiA6RQTtzmyVwm8Dd9sR1eNmK/a8+cgldyukNJivCnkQYHTGtwzL4MDM2 6K7wL3nLTI4XSrpSz3koquAetb2k763P5zsQ2fhcu5r9Y/rt6FaZpAj41iqWPhVx 9h3W4s3h7x5kxbt77J0eEepWzJ4a064W39+Ff22betjJwwjjUKBZxWs8s/Ru3CYF 6n9zGHd+0azqPheD27Ia+mx7N5TqEBm9EPmcAmBlzH4OJrC/0AuXKXvHrQdzpPVJ BqGP5ylc+2lhD12doX2gYFEDMg+ARMnBBSqD/4e5EIaVP6yPgaRotgThsVT98aH4 L7JMZaQUNRpE4Put/e/7Hk8CXgAthhMiZ63JasjANQdcDMT9OGDypS3A4kTH203b bVJ0Q/AXGR9+H3n/3Db7ZrdxAcYcYg8IqRukNYw3QJGLuQji1wk= =JLA3 -----END PGP SIGNATURE-----