Skip to content

FastNetMon Advanced 2.0.382

Latest

Choose a tag to compare

@pavel-odintsov pavel-odintsov released this 20 Jul 15:11
93aeed8

Changes:

  • Added sanity check to ensure that malicious actor cannot manipulate length of sFlow sample. Addresses: GHSA-852r-3wcv-pjx2
  • Added limit for length of Netflow v9 interface name to address security issue GHSA-ff5f-p5jw-8fq2
  • Implemented logic to make full copy of Netflow / IFIX template to avoid potential race condition during template update, addresses GHSA-ph88-95vc-x6gv
  • Addressed security vulnerability in packet parser when IPv6 fragments are involved: GHSA-jmjw-392h-4g93
  • Added validation for email_notifications_auth_method to allow only following options: scram-sha-256-plus, scram-sha-1-plus, scram-sha-256, scram-sha-1, plain, gssapi, external, oauthbearer, cram-md5, digest-md5, login, ntlm, xoauth2