From nhosoi at redhat.com Thu May 29 15:59:11 2014 Content-Type: multipart/mixed; boundary="===============2351229716653515301==" MIME-Version: 1.0 From: Noriko Hosoi To: 389-users at lists.fedoraproject.org Subject: Re: [389-users] Retna Scan Results Date: Thu, 29 May 2014 08:59:05 -0700 Message-ID: <53875949.8070303@redhat.com> In-Reply-To: CANd=zChU_-9D0j5QkmeUC4UK6s-1yszbQ--svFwtgKLxP-7o=Q@mail.gmail.com --===============2351229716653515301== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Sorry, I don't know what the tool does. You may want to ask the tool's = provider the question. Thanks. John Trump wrote: > > I am running RHEL 6. Why does the scan show the vulnerabilities on the = > port that directory administration server is using? > > On May 28, 2014 8:25 PM, "Noriko Hosoi" > wrote: > > Hello, as you mentioned, all of the CVEs are quite old (older than > RHEL-6). For instance, the last one CVE-2009-1956 was fixed in > apr-util-1.2.7-7.el5_3.1. As long as you use RHEL-6, the CVEs you > listed are all fixed. Also, please note that the CVEs are all > httpd related, not 389-ds. > > CVE: > CVE-2008-0005 > CVE-2007-6388 > CVE-2007-6422 > CVE-2007-6420 > CVE-2007-5000 > CVE-2007-6421 > CVE-2008-1678 > > CVE-2007-1862 > CVE-2007-3847 > CVE-2007-3304 > CVE-2006-5752 > CVE-2007-1863 > > CVE-2009-1891 > CVE-2009-1955 > CVE-2009-1191 > CVE-2009-0023 > CVE-2009-1956 > CVE-2009-1195 > CVE-2009-1890 > > John Trump wrote: >> I have a system running 389-ds that was scanned using retna. >> Retna showed vulnerabilities which are fairly old. Can anyone >> confirm that these were fixed. Only thing using port 9830 is the >> admin-serv. Below are the rpm versions I have installed and the >> CVE's retna supposidly detected. >> >> 389-adminutil-1.1.19-1.el6.x86_64 >> 389-ds-console-doc-1.2.6-1.el6.noarch >> 389-admin-1.1.35-1.el6.x86_64 >> 389-admin-console-1.1.8-5.fc19.noarch >> 389-console-1.1.7-1.el6.noarch >> 389-ds-1.2.2-1.el6.noarch >> 389-ds-base-libs-1.2.11.25-1.el6.x86_64 >> 389-ds-base-1.2.11.25-1.el6.x86_64 >> 389-dsgw-1.1.11-1.el6.x86_64 >> 389-ds-console-1.2.6-1.el6.noarch >> 389-admin-console-doc-1.1.8-5.fc19.noarch >> >> Audit ID:6310Vul ID:N/A >> Risk Level:Medium >> Sev Code:Category II >> PCI Level:Medium (Fail) - CVSS Score >> CVSS Score:5 [AV:N/AC:L/Au:N/C:N/I:N/A:P] >> BugTraq ID27234,26838,27236,27237 >> CVE:CVE-2008-0005,CVE-2007-6388,CVE-2007-6422,CVE-2007-64 >> 20,CVE-2007-5000,CVE-2007-6421,CVE-2008-1678 >> CCE:N/A >> Exploit:No >> IAV:N/A >> STIG: >> Context:TCP:9830 >> Result:Success >> Tested Value:BR T WB Server: >> (Apache(\([[]^)]*\))?/((2\.((2(\.[[]0-7])?)|(0(\.([[]1-5]?[[]0-9]|6[= []0-2])) >> ?)|(1(\..*)?)))|(1\.((3(\.([[]1-3]?[[]0-9]|40))?)|([[]0-2](\..*)?)))= |(0+\..*)) >> ($|[[]^0-9.]([[]^(]*\([[]^R][[]^)]*\))*[[]^()]*$)) >> Found Value:Server: Apache/2.2##Content-Length: 301##Connection: >> close##Content-Type: text/html; >> charset[=3D]iso-8859-1####> "-//IETF//DTD HTML 2.0//EN">##404 Not >> Found##

Not Found

>> (truncated...) >> >> Audit ID:6059Vul ID:N/A >> Risk Level:Medium >> Sev Code:Category II >> PCI Level:Medium (Fail) - CVSS Score >> CVSS Score:5 [AV:N/AC:L/Au:N/C:P/I:N/A:N] >> BugTraq ID24215,24645,25489,24649,24553 >> CVE:CVE-2007-1862,CVE-2007-3847,CVE-2007-3304,CVE-2006-57 >> 52,CVE-2007-1863 >> CCE:N/A >> Exploit:No >> IAV:N/A >> STIG: >> Context:TCP:9830 >> Result:Success >> Tested Value:RR T WB >> (Apache(\([[]^)]*\))?/(2\.2(\.[[]0-5])?)($|[[]^0-9.]([[]^(]*\([[]^R]= [[]^)]*\) >> )*[[]^()]*$)) >> Found Value:Apache/2.2 >> >> Audit ID:9820Vul ID:N/A >> Risk Level:Medium >> Sev Code:Category II >> PCI Level:High (Fail) - CVSS Score >> CVSS Score:7.8 [AV:N/AC:L/Au:N/C:N/I:N/A:C] >> BugTraq ID35565,35253,35623,35251,34663,35221,35115 >> CVE:CVE-2009-1891,CVE-2009-1955,CVE-2009-1191,CVE-2009-00 >> 23,CVE-2009-1956,CVE-2009-1195,CVE-2009-1890 >> CCE:N/A >> Exploit:Yes >> IAV:N/A >> STIG: >> Context:TCP:9830 >> Result:Success >> Tested Value:APACHE(-ADVANCEDEXTRANETSERVER)?/2\.2(\.(1[[]01]|[[]0 >> -9])(\.[[]0-9]+)*)?($|[[]^0-9.]) >> Found Value:APACHE/2.2 >> >> >> >> >> -- >> 389 users mailing list >> 389-users(a)lists.fedoraproject.org >> https://admin.fedoraproject.org/mailman/listinfo/389-users > > > -- > 389 users mailing list > 389-users(a)lists.fedoraproject.org > > https://admin.fedoraproject.org/mailman/listinfo/389-users > > > > -- > 389 users mailing list > 389-users(a)lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users --===============2351229716653515301== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5Tb3JyeSwgSSBkb24ndCBrbm93IHdoYXQgdGhlIHRvb2wKICAgICAgZG9lcy7CoCBZb3UgbWF5 IHdhbnQgdG8gYXNrIHRoZSB0b29sJ3MgcHJvdmlkZXIgdGhlIHF1ZXN0aW9uLjxicj4KICAgICAg VGhhbmtzLjxicj4KICAgICAgPGJyPgogICAgICBKb2huIFRydW1wIHdyb3RlOjxicj4KICAgIDwv ZGl2PgogICAgPGJsb2NrcXVvdGUKY2l0ZT0ibWlkOkNBTmQ9ekNoVV8tOUQwajVRa21lVUM0VUs2 cy0xeXN6YlEtLXN2Rnd0Z0tMeFAtN289UUBtYWlsLmdtYWlsLmNvbSIKICAgICAgdHlwZT0iY2l0 ZSI+CiAgICAgIDxwIGRpcj0ibHRyIj5JIGFtIHJ1bm5pbmcgUkhFTCA2LiBXaHkgZG9lcyB0aGUg c2NhbiBzaG93IHRoZQogICAgICAgIHZ1bG5lcmFiaWxpdGllcyBvbiB0aGUgcG9ydCB0aGF0IGRp cmVjdG9yeSBhZG1pbmlzdHJhdGlvbiBzZXJ2ZXIKICAgICAgICBpcyB1c2luZz8gPC9wPgogICAg ICA8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gTWF5IDI4LCAyMDE0IDg6MjUgUE0sICJOb3Jp a28gSG9zb2kiCiAgICAgICAgJmx0OzxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIgaHJlZj0ibWFp bHRvOm5ob3NvaUByZWRoYXQuY29tIj5uaG9zb2lAcmVkaGF0LmNvbTwvYT4mZ3Q7CiAgICAgICAg d3JvdGU6PGJyIHR5cGU9ImF0dHJpYnV0aW9uIj4KICAgICAgICA8YmxvY2txdW90ZSBjbGFzcz0i Z21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAKICAgICAgICAgIC44ZXg7Ym9yZGVyLWxl ZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+CiAgICAgICAgICA8ZGl2IGJnY29s b3I9IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgICAgICAgICA8ZGl2PkhlbGxvLCBhcyB5 b3UgbWVudGlvbmVkLCBhbGwgb2YgdGhlIENWRXMgYXJlIHF1aXRlIG9sZAogICAgICAgICAgICAg IChvbGRlciB0aGFuIFJIRUwtNikuwqAgRm9yIGluc3RhbmNlLCB0aGUgbGFzdCBvbmUKICAgICAg ICAgICAgICBDVkUtMjAwOS0xOTU2IHdhcyBmaXhlZCBpbiBhcHItdXRpbC0xLjIuNy03LmVsNV8z LjEuwqAgQXMKICAgICAgICAgICAgICBsb25nIGFzIHlvdSB1c2UgUkhFTC02LCB0aGUgQ1ZFcyB5 b3UgbGlzdGVkIGFyZSBhbGwKICAgICAgICAgICAgICBmaXhlZC7CoCBBbHNvLCBwbGVhc2Ugbm90 ZSB0aGF0IHRoZSBDVkVzIGFyZSBhbGwgaHR0cGQKICAgICAgICAgICAgICByZWxhdGVkLCBub3Qg Mzg5LWRzLjxicj4KICAgICAgICAgICAgICA8YnI+CiAgICAgICAgICAgICAgPGRpdj5DVkU6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPjxicj4KICAgICAgICAgICAg ICAgIENWRS0yMDA4LTAwMDU8YnI+CiAgICAgICAgICAgICAgICBDVkUtMjAwNy02Mzg4PGJyPgog ICAgICAgICAgICAgICAgQ1ZFLTIwMDctNjQyMjxicj4KICAgICAgICAgICAgICAgIENWRS0yMDA3 LTY0MjA8YnI+CiAgICAgICAgICAgICAgICBDVkUtMjAwNy01MDAwPGJyPgogICAgICAgICAgICAg ICAgQ1ZFLTIwMDctNjQyMTxicj4KICAgICAgICAgICAgICAgIENWRS0yMDA4LTE2Nzg8L2Rpdj4K ICAgICAgICAgICAgICA8YnI+CiAgICAgICAgICAgICAgPGRpdj5DVkUtMjAwNy0xODYyPGJyPgog ICAgICAgICAgICAgICAgQ1ZFLTIwMDctMzg0Nzxicj4KICAgICAgICAgICAgICAgIENWRS0yMDA3 LTMzMDQ8YnI+CiAgICAgICAgICAgICAgICBDVkUtMjAwNi01NzUyPGJyPgogICAgICAgICAgICAg ICAgQ1ZFLTIwMDctMTg2Mzxicj4KICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICA8 YnI+CiAgICAgICAgICAgICAgPGRpdj5DVkUtMjAwOS0xODkxPGJyPgogICAgICAgICAgICAgICAg Q1ZFLTIwMDktMTk1NTxicj4KICAgICAgICAgICAgICAgIENWRS0yMDA5LTExOTE8YnI+CiAgICAg ICAgICAgICAgICBDVkUtMjAwOS0wMDIzPGJyPgogICAgICAgICAgICAgICAgQ1ZFLTIwMDktMTk1 Njxicj4KICAgICAgICAgICAgICAgIENWRS0yMDA5LTExOTU8YnI+CiAgICAgICAgICAgICAgICBD VkUtMjAwOS0xODkwPGJyPgogICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgIDxicj4K ICAgICAgICAgICAgICBKb2huIFRydW1wIHdyb3RlOjxicj4KICAgICAgICAgICAgPC9kaXY+CiAg ICAgICAgICAgIDxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPgogICAgICAgICAgICAgIDxkaXYgZGly PSJsdHIiPkkgaGF2ZSBhIHN5c3RlbSBydW5uaW5nIDM4OS1kcyB0aGF0IHdhcwogICAgICAgICAg ICAgICAgc2Nhbm5lZCB1c2luZyByZXRuYS4gUmV0bmEgc2hvd2VkIHZ1bG5lcmFiaWxpdGllcyB3 aGljaAogICAgICAgICAgICAgICAgYXJlIGZhaXJseSBvbGQuIENhbiBhbnlvbmUgY29uZmlybSB0 aGF0IHRoZXNlIHdlcmUKICAgICAgICAgICAgICAgIGZpeGVkLiBPbmx5IHRoaW5nIHVzaW5nIHBv cnQgOTgzMCBpcyB0aGUgYWRtaW4tc2Vydi4KICAgICAgICAgICAgICAgIEJlbG93IGFyZSB0aGUg cnBtIHZlcnNpb25zIEkgaGF2ZSBpbnN0YWxsZWQgYW5kIHRoZQogICAgICAgICAgICAgICAgQ1ZF J3MgcmV0bmEgc3VwcG9zaWRseSBkZXRlY3RlZC4KICAgICAgICAgICAgICAgIDxkaXY+IDxicj4K ICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgPGRpdj4KICAgICAgICAgICAg ICAgICAgPGRpdj4zODktYWRtaW51dGlsLTEuMS4xOS0xLmVsNi54ODZfNjQ8L2Rpdj4KICAgICAg ICAgICAgICAgICAgPGRpdj4zODktZHMtY29uc29sZS1kb2MtMS4yLjYtMS5lbDYubm9hcmNoPC9k aXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Mzg5LWFkbWluLTEuMS4zNS0xLmVsNi54ODZfNjQ8 L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4zODktYWRtaW4tY29uc29sZS0xLjEuOC01LmZj MTkubm9hcmNoPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Mzg5LWNvbnNvbGUtMS4xLjct MS5lbDYubm9hcmNoPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Mzg5LWRzLTEuMi4yLTEu ZWw2Lm5vYXJjaDwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PjM4OS1kcy1iYXNlLWxpYnMt MS4yLjExLjI1LTEuZWw2Lng4Nl82NDwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PjM4OS1k cy1iYXNlLTEuMi4xMS4yNS0xLmVsNi54ODZfNjQ8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRp dj4zODktZHNndy0xLjEuMTEtMS5lbDYueDg2XzY0PC9kaXY+CiAgICAgICAgICAgICAgICAgIDxk aXY+Mzg5LWRzLWNvbnNvbGUtMS4yLjYtMS5lbDYubm9hcmNoPC9kaXY+CiAgICAgICAgICAgICAg ICAgIDxkaXY+Mzg5LWFkbWluLWNvbnNvbGUtZG9jLTEuMS44LTUuZmMxOS5ub2FyY2g8L2Rpdj4K ICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgPGRpdj48YnI+CiAgICAgICAg ICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICAgIDxkaXY+QXVkaXQgSUQ6PHNwYW4gc3R5bGU9 IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPjYzMTA8c3BhbgogICAgICAgICAgICAgICAg ICAgIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5WdWwgSUQ6PHNwYW4KICAg ICAgICAgICAgICAgICAgICBzdHlsZT0id2hpdGUtc3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+Ti9B PGJyPgogICAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgICAgICA8ZGl2PgogICAgICAg ICAgICAgICAgICA8ZGl2PlJpc2sgTGV2ZWw6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13 cmFwIj4gPC9zcGFuPk1lZGl1bTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PlNldiBDb2Rl OjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5DYXRlZ29yeQoKICAg ICAgICAgICAgICAgICAgICBJSTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PlBDSSBMZXZl bDo8c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+TWVkaXVtCgogICAg ICAgICAgICAgICAgICAgIChGYWlsKSAtIENWU1MgU2NvcmU8L2Rpdj4KICAgICAgICAgICAgICAg ICAgPGRpdj5DVlNTIFNjb3JlOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwv c3Bhbj41CiAgICAgICAgICAgICAgICAgICAgW0FWOk4vQUM6TC9BdTpOL0M6Ti9JOk4vQTpQXTwv ZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkJ1Z1RyYXEgSUQ8c3BhbiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+MjcyMzQsMjY4MzgsMjcyMzYsMjcyMzc8L2Rpdj4KICAg ICAgICAgICAgICAgICAgPGRpdj5DVkU6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFw Ij4gPC9zcGFuPkNWRS0yMDA4LTAwMDUsQ1ZFLTIwMDctNjM4OCxDVkUtMjAwNy02NDIyLENWRS0y MDA3LTY0PC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+MjAsQ1ZFLTIwMDctNTAwMCxDVkUt MjAwNy02NDIxLENWRS0yMDA4LTE2Nzg8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5DQ0U6 PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPk4vQTwvZGl2PgogICAg ICAgICAgICAgICAgICA8ZGl2PkV4cGxvaXQ6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13 cmFwIj4gPC9zcGFuPk5vPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+SUFWOjxzcGFuIHN0 eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5OL0E8L2Rpdj4KICAgICAgICAgICAg ICAgICAgPGRpdj5TVElHOjwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkNvbnRleHQ6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPlRDUDo5ODMwPC9kaXY+CiAg ICAgICAgICAgICAgICAgIDxkaXY+UmVzdWx0OjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUt d3JhcCI+IDwvc3Bhbj5TdWNjZXNzPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+VGVzdGVk IFZhbHVlOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+CiAgICAgICAgICAgICAg ICAgICAgPC9zcGFuPkJSIFQgV0IgU2VydmVyOjwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2 PihBcGFjaGUoXChbW11eKV0qXCkpPy8oKDJcLigoMihcLltbXTAtN10pPyl8KDAoXC4oW1tdMS01 XT9bW10wLTldfDZbW10wLTJdKSk8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4/KXwoMShc Li4qKT8pKSl8KDFcLigoMyhcLihbW10xLTNdP1tbXTAtOV18NDApKT8pfChbW10wLTJdKFwuLiop PykpKXwoMCtcLi4qKSk8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4oJHxbW11eMC05Ll0o W1tdXihdKlwoW1tdXlJdW1tdXildKlwpKSpbW11eKCldKiQpKTwvZGl2PgogICAgICAgICAgICAg ICAgICA8ZGl2PkZvdW5kIFZhbHVlOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+ IDwvc3Bhbj5TZXJ2ZXI6CgogICAgICAgICAgICAgICAgICAgIEFwYWNoZS8yLjIjI0NvbnRlbnQt TGVuZ3RoOiAzMDEjI0Nvbm5lY3Rpb246PC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Y2xv c2UjI0NvbnRlbnQtVHlwZTogdGV4dC9odG1sOzwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2 PmNoYXJzZXRbPV1pc28tODg1OS0xIyMjIyZsdDshRE9DVFlQRSBIVE1MIFBVQkxJQzwvZGl2Pgog ICAgICAgICAgICAgICAgICA8ZGl2PiItLy9JRVRGLy9EVEQgSFRNTAogICAgICAgICAgICAgICAg ICAgIDIuMC8vRU4iJmd0OyMmbHQ7aHRtbCZndDsmbHQ7aGVhZCZndDsjJmx0O3RpdGxlJmd0OzQw NAogICAgICAgICAgICAgICAgICAgIE5vdDwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkZv dW5kJmx0Oy90aXRsZSZndDsjJmx0Oy9oZWFkJmd0OyZsdDtib2R5Jmd0OyMmbHQ7aDEmZ3Q7Tm90 CgogICAgICAgICAgICAgICAgICAgIEZvdW5kJmx0Oy9oMSZndDvCoDwvZGl2PgogICAgICAgICAg ICAgICAgICA8ZGl2Pih0cnVuY2F0ZWQuLi4pPC9kaXY+CiAgICAgICAgICAgICAgICA8L2Rpdj4K ICAgICAgICAgICAgICAgIDxkaXY+PGJyPgogICAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAg ICAgICAgICA8ZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkF1ZGl0IElEOjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj42MDU5PHNwYW4KICAgICAgICAgICAgICAg ICAgICAgIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5WdWwgSUQ6PHNwYW4K ICAgICAgICAgICAgICAgICAgICAgIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bh bj5OL0E8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5SaXNrIExldmVsOjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5NZWRpdW08L2Rpdj4KICAgICAgICAgICAg ICAgICAgPGRpdj5TZXYgQ29kZTo8c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlLXdyYXAiPiA8 L3NwYW4+Q2F0ZWdvcnkKCiAgICAgICAgICAgICAgICAgICAgSUk8L2Rpdj4KICAgICAgICAgICAg ICAgICAgPGRpdj5QQ0kgTGV2ZWw6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4g PC9zcGFuPk1lZGl1bQoKICAgICAgICAgICAgICAgICAgICAoRmFpbCkgLSBDVlNTIFNjb3JlPC9k aXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Q1ZTUyBTY29yZTo8c3BhbiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+NQogICAgICAgICAgICAgICAgICAgIFtBVjpOL0FDOkwv QXU6Ti9DOlAvSTpOL0E6Tl08L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5CdWdUcmFxIElE PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPjI0MjE1LDI0NjQ1LDI1 NDg5LDI0NjQ5LDI0NTUzPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Q1ZFOjxzcGFuIHN0 eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5DVkUtMjAwNy0xODYyLENWRS0yMDA3 LTM4NDcsQ1ZFLTIwMDctMzMwNCxDVkUtMjAwNi01NzwvZGl2PgogICAgICAgICAgICAgICAgICA8 ZGl2PjUyLENWRS0yMDA3LTE4NjM8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5DQ0U6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAg ICAgICAgICAgICA8ZGl2PkV4cGxvaXQ6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFw Ij4gPC9zcGFuPk5vPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+SUFWOjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5OL0E8L2Rpdj4KICAgICAgICAgICAgICAg ICAgPGRpdj5TVElHOjwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkNvbnRleHQ6PHNwYW4g c3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPlRDUDo5ODMwPC9kaXY+CiAgICAg ICAgICAgICAgICAgIDxkaXY+UmVzdWx0OjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3Jh cCI+IDwvc3Bhbj5TdWNjZXNzPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+VGVzdGVkIFZh bHVlOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+CiAgICAgICAgICAgICAgICAg ICAgPC9zcGFuPlJSIFQgV0I8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4oQXBhY2hlKFwo W1tdXildKlwpKT8vKDJcLjIoXC5bW10wLTVdKT8pKCR8W1tdXjAtOS5dKFtbXV4oXSpcKFtbXV5S XVtbXV4pXSpcKTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PikqW1tdXigpXSokKSk8L2Rp dj4KICAgICAgICAgICAgICAgICAgPGRpdj5Gb3VuZCBWYWx1ZTo8c3BhbiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+QXBhY2hlLzIuMjwvZGl2PgogICAgICAgICAgICAgICAg PC9kaXY+CiAgICAgICAgICAgICAgICA8ZGl2Pjxicj4KICAgICAgICAgICAgICAgIDwvZGl2Pgog ICAgICAgICAgICAgICAgPGRpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4gQXVkaXQgSUQ6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPjk4MjA8c3BhbgogICAgICAg ICAgICAgICAgICAgICAgc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPlZ1bCBJ RDo8c3BhbgogICAgICAgICAgICAgICAgICAgICAgc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFw Ij4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PlJpc2sgTGV2ZWw6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPk1lZGl1bTwvZGl2PgogICAg ICAgICAgICAgICAgICA8ZGl2PlNldiBDb2RlOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUt d3JhcCI+IDwvc3Bhbj5DYXRlZ29yeQoKICAgICAgICAgICAgICAgICAgICBJSTwvZGl2PgogICAg ICAgICAgICAgICAgICA8ZGl2PlBDSSBMZXZlbDo8c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJl LXdyYXAiPiA8L3NwYW4+SGlnaAoKICAgICAgICAgICAgICAgICAgICAoRmFpbCkgLSBDVlNTIFNj b3JlPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Q1ZTUyBTY29yZTo8c3BhbiBzdHlsZT0i d2hpdGUtc3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+Ny44CgogICAgICAgICAgICAgICAgICAgIFtB VjpOL0FDOkwvQXU6Ti9DOk4vSTpOL0E6Q108L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5C dWdUcmFxIElEPHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPjM1NTY1 LDM1MjUzLDM1NjIzLDM1MjUxLDM0NjYzLDM1MjIxLDM1MTE1PC9kaXY+CiAgICAgICAgICAgICAg ICAgIDxkaXY+Q1ZFOjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5D VkUtMjAwOS0xODkxLENWRS0yMDA5LTE5NTUsQ1ZFLTIwMDktMTE5MSxDVkUtMjAwOS0wMDwvZGl2 PgogICAgICAgICAgICAgICAgICA8ZGl2PjIzLENWRS0yMDA5LTE5NTYsQ1ZFLTIwMDktMTE5NSxD VkUtMjAwOS0xODkwPC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Q0NFOjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5OL0E8L2Rpdj4KICAgICAgICAgICAgICAg ICAgPGRpdj5FeHBsb2l0OjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bh bj5ZZXM8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5JQVY6PHNwYW4gc3R5bGU9IndoaXRl LXNwYWNlOnByZS13cmFwIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2 PlNUSUc6PC9kaXY+CiAgICAgICAgICAgICAgICAgIDxkaXY+Q29udGV4dDo8c3BhbiBzdHlsZT0i d2hpdGUtc3BhY2U6cHJlLXdyYXAiPiA8L3NwYW4+VENQOjk4MzA8L2Rpdj4KICAgICAgICAgICAg ICAgICAgPGRpdj5SZXN1bHQ6PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4gPC9z cGFuPlN1Y2Nlc3M8L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj5UZXN0ZWQgVmFsdWU6PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZS13cmFwIj4KICAgICAgICAgICAgICAgICAgICA8L3Nw YW4+QVBBQ0hFKC1BRFZBTkNFREVYVFJBTkVUU0VSVkVSKT8vMlwuMihcLigxW1tdMDFdfFtbXTA8 L2Rpdj4KICAgICAgICAgICAgICAgICAgPGRpdj4tOV0pKFwuW1tdMC05XSspKik/KCR8W1tdXjAt OS5dKTwvZGl2PgogICAgICAgICAgICAgICAgICA8ZGl2PkZvdW5kIFZhbHVlOjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUtd3JhcCI+IDwvc3Bhbj5BUEFDSEUvMi4yPC9kaXY+CiAgICAgICAg ICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICAgIDxkaXY+PGJyPgogICAgICAgICAgICAgICAg PC9kaXY+CiAgICAgICAgICAgICAgICA8ZGl2Pjxicj4KICAgICAgICAgICAgICAgIDwvZGl2Pgog ICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgIDxicj4KICAgICAgICAgICAgICA8Zmll bGRzZXQ+PC9maWVsZHNldD4KICAgICAgICAgICAgICA8YnI+CiAgICAgICAgICAgICAgPHByZT4t LQozODkgdXNlcnMgbWFpbGluZyBsaXN0CjxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIgaHJlZj0i bWFpbHRvOjM4OS11c2Vyc0BsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZyIgdGFyZ2V0PSJfYmxhbmsi PjM4OS11c2Vyc0BsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZzwvYT4KPGEgbW96LWRvLW5vdC1zZW5k PSJ0cnVlIiBocmVmPSJodHRwczovL2FkbWluLmZlZG9yYXByb2plY3Qub3JnL21haWxtYW4vbGlz dGluZm8vMzg5LXVzZXJzIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9hZG1pbi5mZWRvcmFwcm9q ZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvLzM4OS11c2VyczwvYT48L3ByZT4KICAgICAgICAgICAg PC9ibG9ja3F1b3RlPgogICAgICAgICAgICA8YnI+CiAgICAgICAgICA8L2Rpdj4KICAgICAgICAg IDxicj4KICAgICAgICAgIC0tPGJyPgogICAgICAgICAgMzg5IHVzZXJzIG1haWxpbmcgbGlzdDxi cj4KICAgICAgICAgIDxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIKICAgICAgICAgICAgaHJlZj0i bWFpbHRvOjM4OS11c2Vyc0BsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZyI+Mzg5LXVzZXJzQGxpc3Rz LmZlZG9yYXByb2plY3Qub3JnPC9hPjxicj4KICAgICAgICAgIDxhIG1vei1kby1ub3Qtc2VuZD0i dHJ1ZSIKICAgICAgICAgICAgaHJlZj0iaHR0cHM6Ly9hZG1pbi5mZWRvcmFwcm9qZWN0Lm9yZy9t YWlsbWFuL2xpc3RpbmZvLzM4OS11c2VycyIKICAgICAgICAgICAgdGFyZ2V0PSJfYmxhbmsiPmh0 dHBzOi8vYWRtaW4uZmVkb3JhcHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby8zODktdXNlcnM8 L2E+PGJyPgogICAgICAgIDwvYmxvY2txdW90ZT4KICAgICAgPC9kaXY+CiAgICAgIDxicj4KICAg ICAgPGZpZWxkc2V0IGNsYXNzPSJtaW1lQXR0YWNobWVudEhlYWRlciI+PC9maWVsZHNldD4KICAg ICAgPGJyPgogICAgICA8cHJlIHdyYXA9IiI+LS0KMzg5IHVzZXJzIG1haWxpbmcgbGlzdAo8YSBj bGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86Mzg5LXVzZXJzQGxp c3RzLmZlZG9yYXByb2plY3Qub3JnIj4zODktdXNlcnNAbGlzdHMuZmVkb3JhcHJvamVjdC5vcmc8 L2E+CjxhIGNsYXNzPSJtb3otdHh0LWxpbmstZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vYWRtaW4u ZmVkb3JhcHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby8zODktdXNlcnMiPmh0dHBzOi8vYWRt aW4uZmVkb3JhcHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby8zODktdXNlcnM8L2E+PC9wcmU+ CiAgICA8L2Jsb2NrcXVvdGU+CiAgICA8YnI+CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============2351229716653515301==--