From nhosoi at redhat.com Thu May 29 00:24:38 2014 Content-Type: multipart/mixed; boundary="===============6849745324152999699==" MIME-Version: 1.0 From: Noriko Hosoi To: 389-users at lists.fedoraproject.org Subject: Re: [389-users] Retna Scan Results Date: Wed, 28 May 2014 17:24:33 -0700 Message-ID: <53867E41.2090801@redhat.com> In-Reply-To: CANd=zChCb8hmsbhGhZP16MJgCMRDOavu-Eu4S4_R7j63krQ-uA@mail.gmail.com --===============6849745324152999699== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hello, as you mentioned, all of the CVEs are quite old (older than = RHEL-6). For instance, the last one CVE-2009-1956 was fixed in = apr-util-1.2.7-7.el5_3.1. As long as you use RHEL-6, the CVEs you = listed are all fixed. Also, please note that the CVEs are all httpd = related, not 389-ds. CVE: CVE-2008-0005 CVE-2007-6388 CVE-2007-6422 CVE-2007-6420 CVE-2007-5000 CVE-2007-6421 CVE-2008-1678 CVE-2007-1862 CVE-2007-3847 CVE-2007-3304 CVE-2006-5752 CVE-2007-1863 CVE-2009-1891 CVE-2009-1955 CVE-2009-1191 CVE-2009-0023 CVE-2009-1956 CVE-2009-1195 CVE-2009-1890 John Trump wrote: > I have a system running 389-ds that was scanned using retna. Retna = > showed vulnerabilities which are fairly old. Can anyone confirm that = > these were fixed. Only thing using port 9830 is the admin-serv. Below = > are the rpm versions I have installed and the CVE's retna supposidly = > detected. > > 389-adminutil-1.1.19-1.el6.x86_64 > 389-ds-console-doc-1.2.6-1.el6.noarch > 389-admin-1.1.35-1.el6.x86_64 > 389-admin-console-1.1.8-5.fc19.noarch > 389-console-1.1.7-1.el6.noarch > 389-ds-1.2.2-1.el6.noarch > 389-ds-base-libs-1.2.11.25-1.el6.x86_64 > 389-ds-base-1.2.11.25-1.el6.x86_64 > 389-dsgw-1.1.11-1.el6.x86_64 > 389-ds-console-1.2.6-1.el6.noarch > 389-admin-console-doc-1.1.8-5.fc19.noarch > > Audit ID:6310Vul ID:N/A > Risk Level:Medium > Sev Code:Category II > PCI Level:Medium (Fail) - CVSS Score > CVSS Score:5 [AV:N/AC:L/Au:N/C:N/I:N/A:P] > BugTraq ID27234,26838,27236,27237 > CVE:CVE-2008-0005,CVE-2007-6388,CVE-2007-6422,CVE-2007-64 > 20,CVE-2007-5000,CVE-2007-6421,CVE-2008-1678 > CCE:N/A > Exploit:No > IAV:N/A > STIG: > Context:TCP:9830 > Result:Success > Tested Value:BR T WB Server: > (Apache(\([[]^)]*\))?/((2\.((2(\.[[]0-7])?)|(0(\.([[]1-5]?[[]0-9]|6[[]0-2= ])) > ?)|(1(\..*)?)))|(1\.((3(\.([[]1-3]?[[]0-9]|40))?)|([[]0-2](\..*)?)))|(0+\= ..*)) > ($|[[]^0-9.]([[]^(]*\([[]^R][[]^)]*\))*[[]^()]*$)) > Found Value:Server: Apache/2.2##Content-Length: 301##Connection: > close##Content-Type: text/html; > charset[=3D]iso-8859-1#### "-//IETF//DTD HTML 2.0//EN">##404 Not > Found##

Not Found

> (truncated...) > > Audit ID:6059Vul ID:N/A > Risk Level:Medium > Sev Code:Category II > PCI Level:Medium (Fail) - CVSS Score > CVSS Score:5 [AV:N/AC:L/Au:N/C:P/I:N/A:N] > BugTraq ID24215,24645,25489,24649,24553 > CVE:CVE-2007-1862,CVE-2007-3847,CVE-2007-3304,CVE-2006-57 > 52,CVE-2007-1863 > CCE:N/A > Exploit:No > IAV:N/A > STIG: > Context:TCP:9830 > Result:Success > Tested Value:RR T WB > (Apache(\([[]^)]*\))?/(2\.2(\.[[]0-5])?)($|[[]^0-9.]([[]^(]*\([[]^R][[]^)= ]*\) > )*[[]^()]*$)) > Found Value:Apache/2.2 > > Audit ID:9820Vul ID:N/A > Risk Level:Medium > Sev Code:Category II > PCI Level:High (Fail) - CVSS Score > CVSS Score:7.8 [AV:N/AC:L/Au:N/C:N/I:N/A:C] > BugTraq ID35565,35253,35623,35251,34663,35221,35115 > CVE:CVE-2009-1891,CVE-2009-1955,CVE-2009-1191,CVE-2009-00 > 23,CVE-2009-1956,CVE-2009-1195,CVE-2009-1890 > CCE:N/A > Exploit:Yes > IAV:N/A > STIG: > Context:TCP:9830 > Result:Success > Tested Value:APACHE(-ADVANCEDEXTRANETSERVER)?/2\.2(\.(1[[]01]|[[]0 > -9])(\.[[]0-9]+)*)?($|[[]^0-9.]) > Found Value:APACHE/2.2 > > > > > -- > 389 users mailing list > 389-users(a)lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users --===============6849745324152999699== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5IZWxsbywgYXMgeW91IG1lbnRpb25lZCwgYWxsIG9mIHRoZQogICAgICBDVkVzIGFyZSBxdWl0 ZSBvbGQgKG9sZGVyIHRoYW4gUkhFTC02KS7CoCBGb3IgaW5zdGFuY2UsIHRoZSBsYXN0CiAgICAg IG9uZSBDVkUtMjAwOS0xOTU2IHdhcyBmaXhlZCBpbiBhcHItdXRpbC0xLjIuNy03LmVsNV8zLjEu wqAgQXMgbG9uZwogICAgICBhcyB5b3UgdXNlIFJIRUwtNiwgdGhlIENWRXMgeW91IGxpc3RlZCBh cmUgYWxsIGZpeGVkLsKgIEFsc28sCiAgICAgIHBsZWFzZSBub3RlIHRoYXQgdGhlIENWRXMgYXJl IGFsbCBodHRwZCByZWxhdGVkLCBub3QgMzg5LWRzLjxicj4KICAgICAgPGJyPgogICAgICA8ZGl2 PkNWRTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPjxicj4K ICAgICAgICBDVkUtMjAwOC0wMDA1PGJyPgogICAgICAgIENWRS0yMDA3LTYzODg8YnI+CiAgICAg ICAgQ1ZFLTIwMDctNjQyMjxicj4KICAgICAgICBDVkUtMjAwNy02NDIwPGJyPgogICAgICAgIENW RS0yMDA3LTUwMDA8YnI+CiAgICAgICAgQ1ZFLTIwMDctNjQyMTxicj4KICAgICAgICBDVkUtMjAw OC0xNjc4PC9kaXY+CiAgICAgIDxicj4KICAgICAgPGRpdj5DVkUtMjAwNy0xODYyPGJyPgogICAg ICAgIENWRS0yMDA3LTM4NDc8YnI+CiAgICAgICAgQ1ZFLTIwMDctMzMwNDxicj4KICAgICAgICBD VkUtMjAwNi01NzUyPGJyPgogICAgICAgIENWRS0yMDA3LTE4NjM8YnI+CiAgICAgIDwvZGl2Pgog ICAgICA8YnI+CiAgICAgIDxkaXY+Q1ZFLTIwMDktMTg5MTxicj4KICAgICAgICBDVkUtMjAwOS0x OTU1PGJyPgogICAgICAgIENWRS0yMDA5LTExOTE8YnI+CiAgICAgICAgQ1ZFLTIwMDktMDAyMzxi cj4KICAgICAgICBDVkUtMjAwOS0xOTU2PGJyPgogICAgICAgIENWRS0yMDA5LTExOTU8YnI+CiAg ICAgICAgQ1ZFLTIwMDktMTg5MDxicj4KICAgICAgPC9kaXY+CiAgICAgIDxicj4KICAgICAgSm9o biBUcnVtcCB3cm90ZTo8YnI+CiAgICA8L2Rpdj4KICAgIDxibG9ja3F1b3RlCmNpdGU9Im1pZDpD QU5kPXpDaENiOGhtc2JoR2haUDE2TUpnQ01SRE9hdnUtRXU0UzRfUjdqNjNrclEtdUFAbWFpbC5n bWFpbC5jb20iCiAgICAgIHR5cGU9ImNpdGUiPgogICAgICA8ZGl2IGRpcj0ibHRyIj5JIGhhdmUg YSBzeXN0ZW0gcnVubmluZyAzODktZHMgdGhhdCB3YXMgc2Nhbm5lZAogICAgICAgIHVzaW5nIHJl dG5hLiBSZXRuYSBzaG93ZWQgdnVsbmVyYWJpbGl0aWVzIHdoaWNoIGFyZSBmYWlybHkgb2xkLgog ICAgICAgIENhbiBhbnlvbmUgY29uZmlybSB0aGF0IHRoZXNlIHdlcmUgZml4ZWQuIE9ubHkgdGhp bmcgdXNpbmcgcG9ydAogICAgICAgIDk4MzAgaXMgdGhlIGFkbWluLXNlcnYuIEJlbG93IGFyZSB0 aGUgcnBtIHZlcnNpb25zIEkgaGF2ZQogICAgICAgIGluc3RhbGxlZCBhbmQgdGhlIENWRSdzIHJl dG5hIHN1cHBvc2lkbHkgZGV0ZWN0ZWQuCiAgICAgICAgPGRpdj4KICAgICAgICAgIDxicj4KICAg ICAgICA8L2Rpdj4KICAgICAgICA8ZGl2PgogICAgICAgICAgPGRpdj4zODktYWRtaW51dGlsLTEu MS4xOS0xLmVsNi54ODZfNjQ8L2Rpdj4KICAgICAgICAgIDxkaXY+Mzg5LWRzLWNvbnNvbGUtZG9j LTEuMi42LTEuZWw2Lm5vYXJjaDwvZGl2PgogICAgICAgICAgPGRpdj4zODktYWRtaW4tMS4xLjM1 LTEuZWw2Lng4Nl82NDwvZGl2PgogICAgICAgICAgPGRpdj4zODktYWRtaW4tY29uc29sZS0xLjEu OC01LmZjMTkubm9hcmNoPC9kaXY+CiAgICAgICAgICA8ZGl2PjM4OS1jb25zb2xlLTEuMS43LTEu ZWw2Lm5vYXJjaDwvZGl2PgogICAgICAgICAgPGRpdj4zODktZHMtMS4yLjItMS5lbDYubm9hcmNo PC9kaXY+CiAgICAgICAgICA8ZGl2PjM4OS1kcy1iYXNlLWxpYnMtMS4yLjExLjI1LTEuZWw2Lng4 Nl82NDwvZGl2PgogICAgICAgICAgPGRpdj4zODktZHMtYmFzZS0xLjIuMTEuMjUtMS5lbDYueDg2 XzY0PC9kaXY+CiAgICAgICAgICA8ZGl2PjM4OS1kc2d3LTEuMS4xMS0xLmVsNi54ODZfNjQ8L2Rp dj4KICAgICAgICAgIDxkaXY+Mzg5LWRzLWNvbnNvbGUtMS4yLjYtMS5lbDYubm9hcmNoPC9kaXY+ CiAgICAgICAgICA8ZGl2PjM4OS1hZG1pbi1jb25zb2xlLWRvYy0xLjEuOC01LmZjMTkubm9hcmNo PC9kaXY+CiAgICAgICAgPC9kaXY+CiAgICAgICAgPGRpdj48YnI+CiAgICAgICAgPC9kaXY+CiAg ICAgICAgPGRpdj5BdWRpdCBJRDo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJl Ij4gPC9zcGFuPjYzMTA8c3BhbgogICAgICAgICAgICBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3Bh Y2U6cHJlIj4gPC9zcGFuPlZ1bCBJRDo8c3BhbgogICAgICAgICAgICBjbGFzcz0iIiBzdHlsZT0i d2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPk4vQTxicj4KICAgICAgICA8L2Rpdj4KICAgICAgICA8 ZGl2PgogICAgICAgICAgPGRpdj5SaXNrIExldmVsOjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0 ZS1zcGFjZTpwcmUiPiA8L3NwYW4+TWVkaXVtPC9kaXY+CiAgICAgICAgICA8ZGl2PlNldiBDb2Rl OjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+Q2F0ZWdvcnkK ICAgICAgICAgICAgSUk8L2Rpdj4KICAgICAgICAgIDxkaXY+UENJIExldmVsOjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+TWVkaXVtCiAgICAgICAgICAgIChG YWlsKSAtIENWU1MgU2NvcmU8L2Rpdj4KICAgICAgICAgIDxkaXY+Q1ZTUyBTY29yZTo8c3BhbiBj bGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPjUKICAgICAgICAgICAgW0FW Ok4vQUM6TC9BdTpOL0M6Ti9JOk4vQTpQXTwvZGl2PgogICAgICAgICAgPGRpdj5CdWdUcmFxIElE PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj4yNzIzNCwyNjgz OCwyNzIzNiwyNzIzNzwvZGl2PgogICAgICAgICAgPGRpdj5DVkU6PHNwYW4gY2xhc3M9IiIgc3R5 bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5DVkUtMjAwOC0wMDA1LENWRS0yMDA3LTYzODgs Q1ZFLTIwMDctNjQyMixDVkUtMjAwNy02NDwvZGl2PgogICAgICAgICAgPGRpdj4yMCxDVkUtMjAw Ny01MDAwLENWRS0yMDA3LTY0MjEsQ1ZFLTIwMDgtMTY3ODwvZGl2PgogICAgICAgICAgPGRpdj5D Q0U6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5OL0E8L2Rp dj4KICAgICAgICAgIDxkaXY+RXhwbG9pdDo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3Bh Y2U6cHJlIj4gPC9zcGFuPk5vPC9kaXY+CiAgICAgICAgICA8ZGl2PklBVjo8c3BhbiBjbGFzcz0i IiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgPGRp dj5TVElHOjwvZGl2PgogICAgICAgICAgPGRpdj5Db250ZXh0OjxzcGFuIGNsYXNzPSIiIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+VENQOjk4MzA8L2Rpdj4KICAgICAgICAgIDxkaXY+ UmVzdWx0OjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+U3Vj Y2VzczwvZGl2PgogICAgICAgICAgPGRpdj5UZXN0ZWQgVmFsdWU6PHNwYW4gY2xhc3M9IiIgc3R5 bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5CUgogICAgICAgICAgICBUIFdCIFNlcnZlcjo8 L2Rpdj4KICAgICAgICAgIDxkaXY+KEFwYWNoZShcKFtbXV4pXSpcKSk/LygoMlwuKCgyKFwuW1td MC03XSk/KXwoMChcLihbW10xLTVdP1tbXTAtOV18NltbXTAtMl0pKTwvZGl2PgogICAgICAgICAg PGRpdj4/KXwoMShcLi4qKT8pKSl8KDFcLigoMyhcLihbW10xLTNdP1tbXTAtOV18NDApKT8pfChb W10wLTJdKFwuLiopPykpKXwoMCtcLi4qKSk8L2Rpdj4KICAgICAgICAgIDxkaXY+KCR8W1tdXjAt OS5dKFtbXV4oXSpcKFtbXV5SXVtbXV4pXSpcKSkqW1tdXigpXSokKSk8L2Rpdj4KICAgICAgICAg IDxkaXY+Rm91bmQgVmFsdWU6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+ IDwvc3Bhbj5TZXJ2ZXI6CiAgICAgICAgICAgIEFwYWNoZS8yLjIjI0NvbnRlbnQtTGVuZ3RoOiAz MDEjI0Nvbm5lY3Rpb246PC9kaXY+CiAgICAgICAgICA8ZGl2PmNsb3NlIyNDb250ZW50LVR5cGU6 IHRleHQvaHRtbDs8L2Rpdj4KICAgICAgICAgIDxkaXY+Y2hhcnNldFs9XWlzby04ODU5LTEjIyMj Jmx0OyFET0NUWVBFIEhUTUwgUFVCTElDPC9kaXY+CiAgICAgICAgICA8ZGl2PiItLy9JRVRGLy9E VEQgSFRNTAogICAgICAgICAgICAyLjAvL0VOIiZndDsjJmx0O2h0bWwmZ3Q7Jmx0O2hlYWQmZ3Q7 IyZsdDt0aXRsZSZndDs0MDQgTm90PC9kaXY+CiAgICAgICAgICA8ZGl2PkZvdW5kJmx0Oy90aXRs ZSZndDsjJmx0Oy9oZWFkJmd0OyZsdDtib2R5Jmd0OyMmbHQ7aDEmZ3Q7Tm90CiAgICAgICAgICAg IEZvdW5kJmx0Oy9oMSZndDvCoDwvZGl2PgogICAgICAgICAgPGRpdj4odHJ1bmNhdGVkLi4uKTwv ZGl2PgogICAgICAgIDwvZGl2PgogICAgICAgIDxkaXY+PGJyPgogICAgICAgIDwvZGl2PgogICAg ICAgIDxkaXY+CiAgICAgICAgICA8ZGl2PkF1ZGl0IElEOjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3 aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+NjA1OTxzcGFuCiAgICAgICAgICAgICAgY2xhc3M9IiIg c3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5WdWwgSUQ6PHNwYW4KICAgICAgICAgICAg ICBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPk4vQTwvZGl2PgogICAg ICAgICAgPGRpdj5SaXNrIExldmVsOjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpw cmUiPiA8L3NwYW4+TWVkaXVtPC9kaXY+CiAgICAgICAgICA8ZGl2PlNldiBDb2RlOjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+Q2F0ZWdvcnkKICAgICAgICAg ICAgSUk8L2Rpdj4KICAgICAgICAgIDxkaXY+UENJIExldmVsOjxzcGFuIGNsYXNzPSIiIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+TWVkaXVtCiAgICAgICAgICAgIChGYWlsKSAtIENW U1MgU2NvcmU8L2Rpdj4KICAgICAgICAgIDxkaXY+Q1ZTUyBTY29yZTo8c3BhbiBjbGFzcz0iIiBz dHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPjUKICAgICAgICAgICAgW0FWOk4vQUM6TC9B dTpOL0M6UC9JOk4vQTpOXTwvZGl2PgogICAgICAgICAgPGRpdj5CdWdUcmFxIElEPHNwYW4gY2xh c3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj4yNDIxNSwyNDY0NSwyNTQ4OSwy NDY0OSwyNDU1MzwvZGl2PgogICAgICAgICAgPGRpdj5DVkU6PHNwYW4gY2xhc3M9IiIgc3R5bGU9 IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5DVkUtMjAwNy0xODYyLENWRS0yMDA3LTM4NDcsQ1ZF LTIwMDctMzMwNCxDVkUtMjAwNi01NzwvZGl2PgogICAgICAgICAgPGRpdj41MixDVkUtMjAwNy0x ODYzPC9kaXY+CiAgICAgICAgICA8ZGl2PkNDRTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgPGRpdj5FeHBsb2l0OjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+Tm88L2Rpdj4KICAgICAg ICAgIDxkaXY+SUFWOjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3Nw YW4+Ti9BPC9kaXY+CiAgICAgICAgICA8ZGl2PlNUSUc6PC9kaXY+CiAgICAgICAgICA8ZGl2PkNv bnRleHQ6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5UQ1A6 OTgzMDwvZGl2PgogICAgICAgICAgPGRpdj5SZXN1bHQ6PHNwYW4gY2xhc3M9IiIgc3R5bGU9Indo aXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5TdWNjZXNzPC9kaXY+CiAgICAgICAgICA8ZGl2PlRlc3Rl ZCBWYWx1ZTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPlJS CiAgICAgICAgICAgIFQgV0I8L2Rpdj4KICAgICAgICAgIDxkaXY+KEFwYWNoZShcKFtbXV4pXSpc KSk/LygyXC4yKFwuW1tdMC01XSk/KSgkfFtbXV4wLTkuXShbW11eKF0qXChbW11eUl1bW11eKV0q XCk8L2Rpdj4KICAgICAgICAgIDxkaXY+KSpbW11eKCldKiQpKTwvZGl2PgogICAgICAgICAgPGRp dj5Gb3VuZCBWYWx1ZTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9z cGFuPkFwYWNoZS8yLjI8L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAg ICAgICA8L2Rpdj4KICAgICAgICA8ZGl2PgogICAgICAgICAgPGRpdj4KICAgICAgICAgICAgQXVk aXQgSUQ6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj45ODIw PHNwYW4KICAgICAgICAgICAgICBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9z cGFuPlZ1bCBJRDo8c3BhbgogICAgICAgICAgICAgIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFj ZTpwcmUiPiA8L3NwYW4+Ti9BPC9kaXY+CiAgICAgICAgICA8ZGl2PlJpc2sgTGV2ZWw6PHNwYW4g Y2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5NZWRpdW08L2Rpdj4KICAg ICAgICAgIDxkaXY+U2V2IENvZGU6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnBy ZSI+IDwvc3Bhbj5DYXRlZ29yeQogICAgICAgICAgICBJSTwvZGl2PgogICAgICAgICAgPGRpdj5Q Q0kgTGV2ZWw6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj5I aWdoCiAgICAgICAgICAgIChGYWlsKSAtIENWU1MgU2NvcmU8L2Rpdj4KICAgICAgICAgIDxkaXY+ Q1ZTUyBTY29yZTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFu PjcuOAogICAgICAgICAgICBbQVY6Ti9BQzpML0F1Ok4vQzpOL0k6Ti9BOkNdPC9kaXY+CiAgICAg ICAgICA8ZGl2PkJ1Z1RyYXEgSUQ8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJl Ij4gPC9zcGFuPjM1NTY1LDM1MjUzLDM1NjIzLDM1MjUxLDM0NjYzLDM1MjIxLDM1MTE1PC9kaXY+ CiAgICAgICAgICA8ZGl2PkNWRTo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJl Ij4gPC9zcGFuPkNWRS0yMDA5LTE4OTEsQ1ZFLTIwMDktMTk1NSxDVkUtMjAwOS0xMTkxLENWRS0y MDA5LTAwPC9kaXY+CiAgICAgICAgICA8ZGl2PjIzLENWRS0yMDA5LTE5NTYsQ1ZFLTIwMDktMTE5 NSxDVkUtMjAwOS0xODkwPC9kaXY+CiAgICAgICAgICA8ZGl2PkNDRTo8c3BhbiBjbGFzcz0iIiBz dHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgPGRpdj5F eHBsb2l0OjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+WWVz PC9kaXY+CiAgICAgICAgICA8ZGl2PklBVjo8c3BhbiBjbGFzcz0iIiBzdHlsZT0id2hpdGUtc3Bh Y2U6cHJlIj4gPC9zcGFuPk4vQTwvZGl2PgogICAgICAgICAgPGRpdj5TVElHOjwvZGl2PgogICAg ICAgICAgPGRpdj5Db250ZXh0OjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUi PiA8L3NwYW4+VENQOjk4MzA8L2Rpdj4KICAgICAgICAgIDxkaXY+UmVzdWx0OjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+U3VjY2VzczwvZGl2PgogICAgICAg ICAgPGRpdj5UZXN0ZWQgVmFsdWU6PHNwYW4gY2xhc3M9IiIgc3R5bGU9IndoaXRlLXNwYWNlOnBy ZSI+IDwvc3Bhbj5BUEFDSEUoLUFEVkFOQ0VERVhUUkFORVRTRVJWRVIpPy8yXC4yKFwuKDFbW10w MV18W1tdMDwvZGl2PgogICAgICAgICAgPGRpdj4tOV0pKFwuW1tdMC05XSspKik/KCR8W1tdXjAt OS5dKTwvZGl2PgogICAgICAgICAgPGRpdj5Gb3VuZCBWYWx1ZTo8c3BhbiBjbGFzcz0iIiBzdHls ZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPkFQQUNIRS8yLjI8L2Rpdj4KICAgICAgICA8L2Rp dj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAg ICAgICA8L2Rpdj4KICAgICAgPC9kaXY+CiAgICAgIDxicj4KICAgICAgPGZpZWxkc2V0IGNsYXNz PSJtaW1lQXR0YWNobWVudEhlYWRlciI+PC9maWVsZHNldD4KICAgICAgPGJyPgogICAgICA8cHJl IHdyYXA9IiI+LS0KMzg5IHVzZXJzIG1haWxpbmcgbGlzdAo8YSBjbGFzcz0ibW96LXR4dC1saW5r LWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86Mzg5LXVzZXJzQGxpc3RzLmZlZG9yYXByb2plY3Qu b3JnIj4zODktdXNlcnNAbGlzdHMuZmVkb3JhcHJvamVjdC5vcmc8L2E+CjxhIGNsYXNzPSJtb3ot dHh0LWxpbmstZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vYWRtaW4uZmVkb3JhcHJvamVjdC5vcmcv bWFpbG1hbi9saXN0aW5mby8zODktdXNlcnMiPmh0dHBzOi8vYWRtaW4uZmVkb3JhcHJvamVjdC5v cmcvbWFpbG1hbi9saXN0aW5mby8zODktdXNlcnM8L2E+PC9wcmU+CiAgICA8L2Jsb2NrcXVvdGU+ CiAgICA8YnI+CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============6849745324152999699==--