From bugzilla_noreply@novell.com Tue Oct 9 07:08:41 2018 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 1111159] New: VUL-1: CVE-2018-17846: The html package (aka x/net/html) through 2018-09-25 in Go mishandles
, leading to an infinite loop Date: Tue, 09 Oct 2018 07:08:31 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5129536855554866811==" --===============5129536855554866811== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit http://bugzilla.opensuse.org/show_bug.cgi?id=1111159 Bug ID: 1111159 Summary: VUL-1: CVE-2018-17846: The html package (aka x/net/html) through 2018-09-25 in Go mishandles
, leading to an infinite loop Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/216016/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-17846 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-17846 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-17846.html -- You are receiving this mail because: You are on the CC list for the bug. --===============5129536855554866811== Content-Type: text/html Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.htm" MIME-Version: 1.0 PGh0bWw+CiAgICA8aGVhZD4KICAgICAgPGJhc2UgaHJlZj0iaHR0cDovL2J1Z3ppbGxhLm9wZW5z dXNlLm9yZy8iIC8+CiAgICA8L2hlYWQ+CiAgICA8Ym9keT48dGFibGUgYm9yZGVyPSIxIiBjZWxs c3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjgiPgogICAgICAgIDx0cj4KICAgICAgICAgIDx0aD5C dWcgSUQ8L3RoPgogICAgICAgICAgPHRkPjxhIGNsYXNzPSJiel9idWdfbGluayAKICAgICAgICAg IGJ6X3N0YXR1c19ORVcgIgogICB0aXRsZT0iTkVXIC0gVlVMLTE6IENWRS0yMDE4LTE3ODQ2OiBU aGUgaHRtbCBwYWNrYWdlIChha2EgeC9uZXQvaHRtbCkgdGhyb3VnaCAyMDE4LTA5LTI1IGluIEdv IG1pc2hhbmRsZXMgJmx0O3RhYmxlJmd0OyZsdDttYXRoJmd0OyZsdDtzZWxlY3QmZ3Q7Jmx0O21p Jmd0OyZsdDtzZWxlY3QmZ3Q7Jmx0Oy90YWJsZSZndDssIGxlYWRpbmcgdG8gYW4gaW5maW5pdGUg bG9vcCIKICAgaHJlZj0iaHR0cDovL2J1Z3ppbGxhLm9wZW5zdXNlLm9yZy9zaG93X2J1Zy5jZ2k/ aWQ9MTExMTE1OSI+MTExMTE1OTwvYT4KICAgICAgICAgIDwvdGQ+CiAgICAgICAgPC90cj4KCiAg ICAgICAgPHRyPgogICAgICAgICAgPHRoPlN1bW1hcnk8L3RoPgogICAgICAgICAgPHRkPlZVTC0x OiBDVkUtMjAxOC0xNzg0NjogVGhlIGh0bWwgcGFja2FnZSAoYWthIHgvbmV0L2h0bWwpIHRocm91 Z2ggMjAxOC0wOS0yNSBpbiBHbyBtaXNoYW5kbGVzICZsdDt0YWJsZSZndDsmbHQ7bWF0aCZndDsm bHQ7c2VsZWN0Jmd0OyZsdDttaSZndDsmbHQ7c2VsZWN0Jmd0OyZsdDsvdGFibGUmZ3Q7LCBsZWFk aW5nIHRvIGFuIGluZmluaXRlIGxvb3AKICAgICAgICAgIDwvdGQ+CiAgICAgICAgPC90cj4KCiAg ICAgICAgPHRyPgogICAgICAgICAgPHRoPkNsYXNzaWZpY2F0aW9uPC90aD4KICAgICAgICAgIDx0 ZD5vcGVuU1VTRQogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAgICAgICA8dHI+CiAg ICAgICAgICA8dGg+UHJvZHVjdDwvdGg+CiAgICAgICAgICA8dGQ+b3BlblNVU0UgRGlzdHJpYnV0 aW9uCiAgICAgICAgICA8L3RkPgogICAgICAgIDwvdHI+CgogICAgICAgIDx0cj4KICAgICAgICAg IDx0aD5WZXJzaW9uPC90aD4KICAgICAgICAgIDx0ZD5MZWFwIDQyLjMKICAgICAgICAgIDwvdGQ+ CiAgICAgICAgPC90cj4KCiAgICAgICAgPHRyPgogICAgICAgICAgPHRoPkhhcmR3YXJlPC90aD4K ICAgICAgICAgIDx0ZD5PdGhlcgogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAgICAg ICA8dHI+CiAgICAgICAgICA8dGg+VVJMPC90aD4KICAgICAgICAgIDx0ZD5odHRwczovL3NtYXNo LnN1c2UuZGUvaXNzdWUvMjE2MDE2LwogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAg ICAgICA8dHI+CiAgICAgICAgICA8dGg+T1M8L3RoPgogICAgICAgICAgPHRkPk90aGVyCiAgICAg ICAgICA8L3RkPgogICAgICAgIDwvdHI+CgogICAgICAgIDx0cj4KICAgICAgICAgIDx0aD5TdGF0 dXM8L3RoPgogICAgICAgICAgPHRkPk5FVwogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoK ICAgICAgICA8dHI+CiAgICAgICAgICA8dGg+U2V2ZXJpdHk8L3RoPgogICAgICAgICAgPHRkPk1p bm9yCiAgICAgICAgICA8L3RkPgogICAgICAgIDwvdHI+CgogICAgICAgIDx0cj4KICAgICAgICAg IDx0aD5Qcmlvcml0eTwvdGg+CiAgICAgICAgICA8dGQ+UDUgLSBOb25lCiAgICAgICAgICA8L3Rk PgogICAgICAgIDwvdHI+CgogICAgICAgIDx0cj4KICAgICAgICAgIDx0aD5Db21wb25lbnQ8L3Ro PgogICAgICAgICAgPHRkPlNlY3VyaXR5CiAgICAgICAgICA8L3RkPgogICAgICAgIDwvdHI+Cgog ICAgICAgIDx0cj4KICAgICAgICAgIDx0aD5Bc3NpZ25lZTwvdGg+CiAgICAgICAgICA8dGQ+c2Vj dXJpdHktdGVhbSYjNjQ7c3VzZS5kZQogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAg ICAgICA8dHI+CiAgICAgICAgICA8dGg+UmVwb3J0ZXI8L3RoPgogICAgICAgICAgPHRkPmtiYWJp b2NoJiM2NDtzdXNlLmNvbQogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAgICAgICA8 dHI+CiAgICAgICAgICA8dGg+UUEgQ29udGFjdDwvdGg+CiAgICAgICAgICA8dGQ+c2VjdXJpdHkt dGVhbSYjNjQ7c3VzZS5kZQogICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgoKICAgICAgICA8 dHI+CiAgICAgICAgICA8dGg+Rm91bmQgQnk8L3RoPgogICAgICAgICAgPHRkPlNlY3VyaXR5IFJl c3BvbnNlIFRlYW0KICAgICAgICAgIDwvdGQ+CiAgICAgICAgPC90cj4KCiAgICAgICAgPHRyPgog ICAgICAgICAgPHRoPkJsb2NrZXI8L3RoPgogICAgICAgICAgPHRkPi0tLQogICAgICAgICAgPC90 ZD4KICAgICAgICA8L3RyPjwvdGFibGU+CiAgICAgIDxwPgogICAgICAgIDxkaXY+CiAgICAgICAg PHByZT5DVkUtMjAxOC0xNzg0NgoKUmVmZXJlbmNlczoKPGEgaHJlZj0iaHR0cDovL3dlYi5udmQu bmlzdC5nb3Yvdmlldy92dWxuL2RldGFpbD92dWxuSWQ9Q1ZFLTIwMTgtMTc4NDYiPmh0dHA6Ly93 ZWIubnZkLm5pc3QuZ292L3ZpZXcvdnVsbi9kZXRhaWw/dnVsbklkPUNWRS0yMDE4LTE3ODQ2PC9h Pgo8YSBocmVmPSJodHRwOi8vcGVvcGxlLmNhbm9uaWNhbC5jb20vfnVidW50dS1zZWN1cml0eS9j dmUvMjAxOC9DVkUtMjAxOC0xNzg0Ni5odG1sIj5odHRwOi8vcGVvcGxlLmNhbm9uaWNhbC5jb20v fnVidW50dS1zZWN1cml0eS9jdmUvMjAxOC9DVkUtMjAxOC0xNzg0Ni5odG1sPC9hPjwvcHJlPgog ICAgICAgIDwvZGl2PgogICAgICA8L3A+CiAgICAgIDxocj4KICAgICAgPHNwYW4+WW91IGFyZSBy ZWNlaXZpbmcgdGhpcyBtYWlsIGJlY2F1c2U6PC9zcGFuPgogICAgICAKICAgICAgPHVsPgogICAg ICAgICAgPGxpPllvdSBhcmUgb24gdGhlIENDIGxpc3QgZm9yIHRoZSBidWcuPC9saT4KICAgICAg PC91bD4KICAgIDwvYm9keT4KPC9odG1sPg== --===============5129536855554866811==-- From bugzilla_noreply@novell.com Tue Oct 9 07:08:42 2018 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 1111159] VUL-1: CVE-2018-17846: The html package (aka x/net/html) through 2018-09-25 in Go mishandles
, leading to an infinite loop Date: Tue, 09 Oct 2018 07:08:37 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2332302504998185611==" --===============2332302504998185611== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit http://bugzilla.opensuse.org/show_bug.cgi?id=1111159 http://bugzilla.opensuse.org/show_bug.cgi?id=1111159#c1 --- Comment #1 from Karol Babioch --- There are no actual packages built with this: $ osc whatdependson openSUSE:Factory golang-org-x-net-html standard x86_64 golang-org-x-net-html : golang-org-x-tools $ osc whatdependson openSUSE:Factory golang-org-x-tools standard x86_64 golang-org-x-tools : -- You are receiving this mail because: You are on the CC list for the bug. --===============2332302504998185611== Content-Type: text/html Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.htm" MIME-Version: 1.0 PGh0bWw+CiAgICA8aGVhZD4KICAgICAgPGJhc2UgaHJlZj0iaHR0cDovL2J1Z3ppbGxhLm9wZW5z dXNlLm9yZy8iIC8+CiAgICA8L2hlYWQ+CiAgICA8Ym9keT4KICAgICAgPHA+CiAgICAgICAgPGRp dj4KICAgICAgICAgICAgPGI+PGEgY2xhc3M9ImJ6X2J1Z19saW5rIAogICAgICAgICAgYnpfc3Rh dHVzX05FVyAiCiAgIHRpdGxlPSJORVcgLSBWVUwtMTogQ1ZFLTIwMTgtMTc4NDY6IFRoZSBodG1s IHBhY2thZ2UgKGFrYSB4L25ldC9odG1sKSB0aHJvdWdoIDIwMTgtMDktMjUgaW4gR28gbWlzaGFu ZGxlcyAmbHQ7dGFibGUmZ3Q7Jmx0O21hdGgmZ3Q7Jmx0O3NlbGVjdCZndDsmbHQ7bWkmZ3Q7Jmx0 O3NlbGVjdCZndDsmbHQ7L3RhYmxlJmd0OywgbGVhZGluZyB0byBhbiBpbmZpbml0ZSBsb29wIgog ICBocmVmPSJodHRwOi8vYnVnemlsbGEub3BlbnN1c2Uub3JnL3Nob3dfYnVnLmNnaT9pZD0xMTEx MTU5I2MxIj5Db21tZW50ICMgMTwvYT4KICAgICAgICAgICAgICBvbiA8YSBjbGFzcz0iYnpfYnVn X2xpbmsgCiAgICAgICAgICBiel9zdGF0dXNfTkVXICIKICAgdGl0bGU9Ik5FVyAtIFZVTC0xOiBD VkUtMjAxOC0xNzg0NjogVGhlIGh0bWwgcGFja2FnZSAoYWthIHgvbmV0L2h0bWwpIHRocm91Z2gg MjAxOC0wOS0yNSBpbiBHbyBtaXNoYW5kbGVzICZsdDt0YWJsZSZndDsmbHQ7bWF0aCZndDsmbHQ7 c2VsZWN0Jmd0OyZsdDttaSZndDsmbHQ7c2VsZWN0Jmd0OyZsdDsvdGFibGUmZ3Q7LCBsZWFkaW5n IHRvIGFuIGluZmluaXRlIGxvb3AiCiAgIGhyZWY9Imh0dHA6Ly9idWd6aWxsYS5vcGVuc3VzZS5v cmcvc2hvd19idWcuY2dpP2lkPTExMTExNTkiPmJ1ZyAxMTExMTU5PC9hPgogICAgICAgICAgICAg IGZyb20gPHNwYW4gY2xhc3M9InZjYXJkIj48YSBjbGFzcz0iZW1haWwiIGhyZWY9Im1haWx0bzpr YmFiaW9jaCYjNjQ7c3VzZS5jb20iIHRpdGxlPSJLYXJvbCBCYWJpb2NoICZsdDtrYmFiaW9jaCYj NjQ7c3VzZS5jb20mZ3Q7Ij4gPHNwYW4gY2xhc3M9ImZuIj5LYXJvbCBCYWJpb2NoPC9zcGFuPjwv YT4KPC9zcGFuPjwvYj4KICAgICAgICA8cHJlPlRoZXJlIGFyZSBubyBhY3R1YWwgcGFja2FnZXMg YnVpbHQgd2l0aCB0aGlzOgoKJCBvc2Mgd2hhdGRlcGVuZHNvbiBvcGVuU1VTRTpGYWN0b3J5IGdv bGFuZy1vcmcteC1uZXQtaHRtbCBzdGFuZGFyZCB4ODZfNjQKZ29sYW5nLW9yZy14LW5ldC1odG1s IDoKICAgZ29sYW5nLW9yZy14LXRvb2xzCiQgb3NjIHdoYXRkZXBlbmRzb24gb3BlblNVU0U6RmFj dG9yeSBnb2xhbmctb3JnLXgtdG9vbHMgc3RhbmRhcmQgeDg2XzY0CmdvbGFuZy1vcmcteC10b29s cyA6PC9wcmU+CiAgICAgICAgPC9kaXY+CiAgICAgIDwvcD4KICAgICAgPGhyPgogICAgICA8c3Bh bj5Zb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1haWwgYmVjYXVzZTo8L3NwYW4+CiAgICAgIAogICAg ICA8dWw+CiAgICAgICAgICA8bGk+WW91IGFyZSBvbiB0aGUgQ0MgbGlzdCBmb3IgdGhlIGJ1Zy48 L2xpPgogICAgICA8L3VsPgogICAgPC9ib2R5Pgo8L2h0bWw+ --===============2332302504998185611==-- From bugzilla_noreply@novell.com Tue Oct 9 07:09:13 2018 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 1111159] VUL-1: CVE-2018-17846: The html package (aka x/net/html) through 2018-09-25 in Go mishandles
, leading to an infinite loop Date: Tue, 09 Oct 2018 07:08:56 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8203183819472228428==" --===============8203183819472228428== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit http://bugzilla.opensuse.org/show_bug.cgi?id=1111159 http://bugzilla.opensuse.org/show_bug.cgi?id=1111159#c2 Karol Babioch changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #2 from Karol Babioch --- Closing as invalid, due to previous comment. -- You are receiving this mail because: You are on the CC list for the bug. --===============8203183819472228428== Content-Type: text/html Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.htm" MIME-Version: 1.0 PGh0bWw+CiAgICA8aGVhZD4KICAgICAgPGJhc2UgaHJlZj0iaHR0cDovL2J1Z3ppbGxhLm9wZW5z dXNlLm9yZy8iIC8+CiAgICA8L2hlYWQ+CiAgICA8Ym9keT48c3BhbiBjbGFzcz0idmNhcmQiPjxh IGNsYXNzPSJlbWFpbCIgaHJlZj0ibWFpbHRvOmtiYWJpb2NoJiM2NDtzdXNlLmNvbSIgdGl0bGU9 Ikthcm9sIEJhYmlvY2ggJmx0O2tiYWJpb2NoJiM2NDtzdXNlLmNvbSZndDsiPiA8c3BhbiBjbGFz cz0iZm4iPkthcm9sIEJhYmlvY2g8L3NwYW4+PC9hPgo8L3NwYW4+IGNoYW5nZWQKICAgICAgICAg ICAgICA8YSBjbGFzcz0iYnpfYnVnX2xpbmsgCiAgICAgICAgICBiel9zdGF0dXNfUkVTT0xWRUQg IGJ6X2Nsb3NlZCIKICAgdGl0bGU9IlJFU09MVkVEIElOVkFMSUQgLSBWVUwtMTogQ1ZFLTIwMTgt MTc4NDY6IFRoZSBodG1sIHBhY2thZ2UgKGFrYSB4L25ldC9odG1sKSB0aHJvdWdoIDIwMTgtMDkt MjUgaW4gR28gbWlzaGFuZGxlcyAmbHQ7dGFibGUmZ3Q7Jmx0O21hdGgmZ3Q7Jmx0O3NlbGVjdCZn dDsmbHQ7bWkmZ3Q7Jmx0O3NlbGVjdCZndDsmbHQ7L3RhYmxlJmd0OywgbGVhZGluZyB0byBhbiBp bmZpbml0ZSBsb29wIgogICBocmVmPSJodHRwOi8vYnVnemlsbGEub3BlbnN1c2Uub3JnL3Nob3df YnVnLmNnaT9pZD0xMTExMTU5Ij5idWcgMTExMTE1OTwvYT4KICAgICAgICAgIDxicj4KICAgICAg ICAgICAgIDx0YWJsZSBib3JkZXI9IjEiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGluZz0iOCI+ CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0aD5XaGF0PC90aD4KICAgICAgICAgICAgPHRo PlJlbW92ZWQ8L3RoPgogICAgICAgICAgICA8dGg+QWRkZWQ8L3RoPgogICAgICAgICAgPC90cj4K CiAgICAgICAgIDx0cj4KICAgICAgICAgICA8dGQgc3R5bGU9InRleHQtYWxpZ246cmlnaHQ7Ij5T dGF0dXM8L3RkPgogICAgICAgICAgIDx0ZD5ORVcKICAgICAgICAgICA8L3RkPgogICAgICAgICAg IDx0ZD5SRVNPTFZFRAogICAgICAgICAgIDwvdGQ+CiAgICAgICAgIDwvdHI+CgogICAgICAgICA8 dHI+CiAgICAgICAgICAgPHRkIHN0eWxlPSJ0ZXh0LWFsaWduOnJpZ2h0OyI+UmVzb2x1dGlvbjwv dGQ+CiAgICAgICAgICAgPHRkPi0tLQogICAgICAgICAgIDwvdGQ+CiAgICAgICAgICAgPHRkPklO VkFMSUQKICAgICAgICAgICA8L3RkPgogICAgICAgICA8L3RyPjwvdGFibGU+CiAgICAgIDxwPgog ICAgICAgIDxkaXY+CiAgICAgICAgICAgIDxiPjxhIGNsYXNzPSJiel9idWdfbGluayAKICAgICAg ICAgIGJ6X3N0YXR1c19SRVNPTFZFRCAgYnpfY2xvc2VkIgogICB0aXRsZT0iUkVTT0xWRUQgSU5W QUxJRCAtIFZVTC0xOiBDVkUtMjAxOC0xNzg0NjogVGhlIGh0bWwgcGFja2FnZSAoYWthIHgvbmV0 L2h0bWwpIHRocm91Z2ggMjAxOC0wOS0yNSBpbiBHbyBtaXNoYW5kbGVzICZsdDt0YWJsZSZndDsm bHQ7bWF0aCZndDsmbHQ7c2VsZWN0Jmd0OyZsdDttaSZndDsmbHQ7c2VsZWN0Jmd0OyZsdDsvdGFi bGUmZ3Q7LCBsZWFkaW5nIHRvIGFuIGluZmluaXRlIGxvb3AiCiAgIGhyZWY9Imh0dHA6Ly9idWd6 aWxsYS5vcGVuc3VzZS5vcmcvc2hvd19idWcuY2dpP2lkPTExMTExNTkjYzIiPkNvbW1lbnQgIyAy PC9hPgogICAgICAgICAgICAgIG9uIDxhIGNsYXNzPSJiel9idWdfbGluayAKICAgICAgICAgIGJ6 X3N0YXR1c19SRVNPTFZFRCAgYnpfY2xvc2VkIgogICB0aXRsZT0iUkVTT0xWRUQgSU5WQUxJRCAt IFZVTC0xOiBDVkUtMjAxOC0xNzg0NjogVGhlIGh0bWwgcGFja2FnZSAoYWthIHgvbmV0L2h0bWwp IHRocm91Z2ggMjAxOC0wOS0yNSBpbiBHbyBtaXNoYW5kbGVzICZsdDt0YWJsZSZndDsmbHQ7bWF0 aCZndDsmbHQ7c2VsZWN0Jmd0OyZsdDttaSZndDsmbHQ7c2VsZWN0Jmd0OyZsdDsvdGFibGUmZ3Q7 LCBsZWFkaW5nIHRvIGFuIGluZmluaXRlIGxvb3AiCiAgIGhyZWY9Imh0dHA6Ly9idWd6aWxsYS5v cGVuc3VzZS5vcmcvc2hvd19idWcuY2dpP2lkPTExMTExNTkiPmJ1ZyAxMTExMTU5PC9hPgogICAg ICAgICAgICAgIGZyb20gPHNwYW4gY2xhc3M9InZjYXJkIj48YSBjbGFzcz0iZW1haWwiIGhyZWY9 Im1haWx0bzprYmFiaW9jaCYjNjQ7c3VzZS5jb20iIHRpdGxlPSJLYXJvbCBCYWJpb2NoICZsdDtr YmFiaW9jaCYjNjQ7c3VzZS5jb20mZ3Q7Ij4gPHNwYW4gY2xhc3M9ImZuIj5LYXJvbCBCYWJpb2No PC9zcGFuPjwvYT4KPC9zcGFuPjwvYj4KICAgICAgICA8cHJlPkNsb3NpbmcgYXMgaW52YWxpZCwg ZHVlIHRvIHByZXZpb3VzIGNvbW1lbnQuPC9wcmU+CiAgICAgICAgPC9kaXY+CiAgICAgIDwvcD4K ICAgICAgPGhyPgogICAgICA8c3Bhbj5Zb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1haWwgYmVjYXVz ZTo8L3NwYW4+CiAgICAgIAogICAgICA8dWw+CiAgICAgICAgICA8bGk+WW91IGFyZSBvbiB0aGUg Q0MgbGlzdCBmb3IgdGhlIGJ1Zy48L2xpPgogICAgICA8L3VsPgogICAgPC9ib2R5Pgo8L2h0bWw+ --===============8203183819472228428==--