September 1999 - openSUSE Security - openSUSE Mailing Lists

What does this line mean?
by Matthias Pigulla 16 Sep '99

16 Sep '99

Hi folks, I came across several lines in /var/log/warn that look like: "[timestamp] [hostname] login[26456]: ILLEGAL ROOT LOGIN on 'ttyp[n]' from '[hostname]'" I wonder what this message does mean? Thanks a lot, Matthias -- w e b f a c t o r y Matthias Pigulla <mp(a)webfactory.de> - Geschaefsfuehrer Lessingstr. 60 - 53113 Bonn - http://www.webfactory.de/ Fon: 0228-9114455 - Fax: 0228-9114499 - ICQ: 49185492

3 2

SuSE Security Announcement - lynx
by Marc Heuse 16 Sep '99

16 Sep '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: lynx-2.8.2 and older Date: Thu Sep 16 21:29:15 CEST 1999 Affected: all Linux distributions using lynx-2.8.2 and older ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description When lynx calls external programs for protocols (e.g. telnet), the location is passed unchecked. This can be used to activate commandline parameters. For example, this reference [A HREF="telnet://-n.rhosts"]click me[/A] would activate the tracefile options on the telnet client, with the result, that a .rhosts in the current directory would created or overwritten. 2. Impact Depending on the external programs called by lynx, files can be created or truncated, or even remote commands being executed if e.g. ssh or rsh would be configured in lynx. 3. Solution Updated the lynx package from our FTP server. ______________________________________________________________________________ Here are the md5 checksums of the upgrade packages, please verify these before installing the new packages: lynx-2.8.3dev9-76.i386.rpm fd29230757f76d33e21836965822f7a6 (5.3) lynx-2.8.3dev9-76.i386.rpm 2fba1f9fcf2c3ad9bbb23f0ea18acecd (6.0) lynx-2.8.3dev9-76.alpha.rpm f706fa71b38721d1d0e1e69700c467a4 (AXP) lynx-2.8.3dev9-76.i386.rpm 2fba1f9fcf2c3ad9bbb23f0ea18acecd (6.1) lynx-2.8.3dev9-76.i386.rpm 18f870d15016f63aa510cc5161c027c2 (6.2) ______________________________________________________________________________ You will find the update on our ftp-Server: ftp://ftp.suse.com/pub/suse/i386/update/5.3/n1/lynx-2.8.3dev9-76.i386.rpm ftp://ftp.suse.com/pub/suse/axp/update/6.1/n1/lynx-2.8.3dev9-76.alpha.rpm ftp://ftp.suse.com/pub/suse/i386/update/6.1/n1/lynx-2.8.3dev9-76.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/lynx-2.8.3dev9-76.i386.rpm Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - moderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN+FG7Hey5gA9JdPZAQELOQf+NYQJll4F6e2hwM0E9Qyg4KSpO1yY1pYE 3WjwHxJiXlSjlEY0/BM+FD1A6CE8W7bQiesQEu/Px0e6EjE8rG507zvvHe71QOl4 PrNy9AO3Hns4PPiNUa2RO0c+qSpA79fnqBofGGaT4obfZk613FjHVFJY/sNGj/xZ M6s/gicpLw9OfgdXEtUzJCLnS9pL0b4EjFOO8Qrh1WR0hN4TM2coItxfRis1skL7 dRN4yGsu9JIkty4021Kae9Y1cEVtzK6KP8eiUhHV8QUKeDN7f9LdFB/RvRzDNsa2 Y6Al8aS943W/P6ELjhAtDV6Z6UWx+Wk29NMVE8iVxp+CNLA9gCNhDw== =NJql -----END PGP SIGNATURE-----

1 0

SuSE Security Announcement - ProFTPD
by Marc Heuse 16 Sep '99

16 Sep '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: proftpd-1.2.0pre6 and earlier Date: Thu Sep 16 20:59:18 CEST 1999 Affected: all UNIX platforms using proftpd ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description Several buffer overflows have been found in proftpd which have been verified to be exploitable from an remote attacker. The fixing and finding of new holes is going on for over 2 weeks now, and there is no end in sight. Even with all known fixes, proftpd is still vulnerable to remote exploitation. 2. Impact A remote attacker can gain root access to the system from remote. 3. Solution Deactivate, or better, deinstall the proftpd package. Proftpd will be dropped from current distributions until there can be put trust in this package. We will provide an update, once a completely fixed version is out. Until then, please use a secure ftpd server. If you only need to provide readonly anonymous ftp access, we encourage you to get the anon-ftpd from Bernstein from ftp://koobera.math.uic.edu/www/anonftpd.html Otherwise, we recommend to run the stock ftpd which comes by default with SuSE and is derived from OpenBSD. ______________________________________________________________________________ Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - moderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - ------BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - ------END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN+FAw3ey5gA9JdPZAQFMrQf7BRtio3p4EcyIGTIJh9MsQVZD6HGtGPPn lQzvtL2V9EmjrgqZnx+yCvTi5zOznjtbERKChsLL/EOFGCkhBtklNvL0/rT8RLpL MsCsVE//RBPOcZFYISLaf5QHGX/wANGHAaLTfSl2M3SybMy7ZmgjSUffTaSsTRqI JndDFQ7wXs1nQ7yrtua/R8yMHfYpJKqzn+PotBgjaNkQnXSqj1oRm+erMnltzcN/ B1K69NtGzDA3ac83oS9R2r4Jmq66NC2rstLr0dp/YLCdpPZTkrpw7s2Tnn7Wuwfb LAauppK1iFmdWUnhtWr9G0M5/MJNNy13xoTu5DkiNjU9iXmyU/oKIw== =+2Hq -----END PGP SIGNATURE-----

1 0

Have I been hacked ? And how ?
by Marc Baaden 16 Sep '99

16 Sep '99

Hello ! I found this in my messages file: Sep 4 09:14:42 causul in.telnetd[2562]: connect from 137.226.141.203 Sep 4 09:14:42 causul sshd[2564]: log: Connection from 137.226.141.203 port 18193 Sep 4 09:14:42 causul wu.ftpd[2563]: connect from 137.226.141.203 Sep 4 09:14:43 causul telnetd[2562]: ttloop: peer died: Invalid or incomplete multibyte or wide character Sep 4 09:14:48 causul sshd[2564]: fatal: Did not receive ident string. Sep 4 09:14:49 causul in.telnetd[2565]: connect from 137.226.141.203 Sep 4 09:14:50 causul in.telnetd[2567]: warning: can't get client address: Connection reset by peer Sep 4 09:14:50 causul in.telnetd[2567]: connect from unknown Sep 4 09:14:55 causul wu.ftpd[2568]: connect from 137.226.141.203 Sep 4 09:14:55 causul wu.ftpd[2569]: connect from 137.226.141.203 Sep 4 09:15:01 causul /USR/SBIN/CRON[2571]: (root) CMD ( test -x /usr/lib/cron/run-crons && /usr/lib/cron/run-crons ) Sep 4 09:30:00 causul /USR/SBIN/CRON[2590]: (root) CMD ( test -x /usr/lib/cron/run-crons && /usr/lib/cron/run-crons ) Sep 4 09:43:33 causul -- MARK -- Sep 4 09:43:42 causul sshd[180]: log: Generating new 768 bit RSA key. Sep 4 09:43:43 causul sshd[180]: log: RSA key generation complete. I was running a SuSE 6.0. Meanwhile I have upgraded to 6.2. Thnak you in advance. Marc Baaden -- Marc Baaden - Labo MSM (UMR 7551) - http://crypt.u-strasbg.fr/marc mailto:baaden@chimie.u-strasbg.fr - FAX (+49) 89 666 171 68 68 ICQ# 11466242 - Tel: (+33) 3 88 41 60 86 or (+33) 6 03 24 26 56

2 1

telnet and su attack on my linux
by gbruchhaus＠makrolog.de 15 Sep '99

15 Sep '99

Hi, today in the early morning I had something like an attack on my linux system here. After the attack, I couldn't login as root any more. I found out, that it was not possible to set a password in the "shadow password system" any more. I can use only the "normal" password mechanism. My log-files showed me some hints to the attacker (if it is any): > Sep 15 00:13:29 d64s_pattr imapd[16408]: connect from 134.102.152.136 > Sep 15 00:13:29 d64s_pattr imapd[16409]: connect from 134.102.152.136 > Sep 15 00:13:34 d64s_pattr imapd[16410]: connect from 134.102.152.136 > Sep 15 00:13:38 d64s_pattr imapd[16411]: connect from 134.102.152.136 > Sep 15 00:13:39 d64s_pattr imapd[16412]: connect from 134.102.152.136 > Sep 15 00:14:59 d64s_pattr imapd[16413]: connect from root(a)155.207.113.137 > Sep 15 00:17:12 d64s_pattr in.telnetd[16417]: connect from 24.95.241.60 > Sep 15 00:17:20 d64s_pattr login[16418]: no shadow password for `shizat' on `ttyp1' from `wintersprings-ubr-c4-60.cfl.rr.com' > Sep 15 00:17:23 d64s_pattr su: (to www) shizat on /dev/ttyp1 . . . > Sep 15 06:53:14 d64s_pattr su: (to nobody) root on none In my warn-file I found the following entry: > Sep 15 00:17:20 d64s_pattr login[16418]: no shadow password for `shizat' on `ttyp1' from `wintersprings-ubr-c4-60.cfl.rr.com' How is such an attack possible and more important: how can I prevent such an intrusion? I am using a SuSE Linux 5.2 with a 2.0.33 kernel Thanks for your help in advance Gerd

4 4

Sirius Firerwall for SuSE 5.3
by F. Steiner 15 Sep '99

15 Sep '99

Hi, for some reasons I had to install an old SuSE 5.3 distribution. Along with this comes the sf package (sirius firewall) which I already had installed in the past with the same SuSE distribution. But this time the installation failed. "insmod sf" returns "/lib/modules/misc/sf.o: unresolved symbol unregister_firewall" and the same for "register firewall". I did include modules_support and the modules version option in the kernel as well as ALL firewall options (to make sure I did not miss one). Has anyone an idea what is wrong this time? The last time the modules ran immediately without any problems. Thx :-) Best, Frank ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Dipl.-Inform. Frank Steiner mailto:steiner@informatik.rwth-aachen.de http://www-i2.informatik.rwth-aachen.de/steiner/

1 1

Re: Wie CD Image als Datei erstellen?
by rolf＠informatik.uni-bremen.de 14 Sep '99

14 Sep '99

In article <99091409150100.00590@theofilu>, Andreas Theofilu <theofilu(a)eunet.at> writes: > Hallo an alle, > > Ich habe zwar keinen CD-Brenner, möchte aber ein CD-Image erstellen um > dieses dann auf einem anderen Rechner, welcher einen Brenner hat, zu > brennen. Geht das überhaupt ein CD-Image als Datei zu erstellen? Ja. > Wenn ja, wie und welche Software brauche ich dazu? mkisofs. Ist ein eigenes Packet, daß bei SuSE dabei ist. -- Rolf Krahl <rolf(a)informatik.uni-bremen.de>

1 1

Re: [SLE] SSH for USA (SuSE 6.2)
by Nitebirz 13 Sep '99

13 Sep '99

Robert, I usually download the package from ftp.replay.com here in the USA. I believe it can be found under the encryption directory or something to that effect. It is in a tarball. Nitebirdz On Tue, 7 Sep 1999, Robert C. Paulsen, Jr. wrote: > I have SuSE 6.2 as delivered to the USA. It therefore does not > contain SSH. The SuSE support database says to look at > http://www.suse.de/e/ftp.html for a list of mirrors that have > the SSH package. Well, I looked at several of the sites and none of > the ones I looked at has it. If I go to the main SuSE ftp site > (ftp://ftp.suse.ftp) it just tells me to go to ftp.suse.com which > is the USA site without ssh! > > If someone has a link to it please post! > > Thanks. > -- > ____________________________________________________________________ > Robert Paulsen http://paulsen.home.texas.net > > -- > To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com > For additional commands send e-mail to suse-linux-e-help(a)suse.com > Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/ > >

1 0

nmap
by ice9 13 Sep '99

13 Sep '99

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well, to me it looks like this guy was scanning for your RPC services (hence the high port numbers). Most likely, he's looking for a specific RPC service that he has aquired an exploit for, so this is porobably a mass scan. He also sourced the scan to port 20 (FTP-DATA) to give him a better chance of being let through a firewall. The question is, were you running the RPC service this guy was looking for? You also might want to let tli.de know that somone is port scanning from their mail server. (Most likely hacked as well) Scott G. Danahy - ----- Original Message ----- From: Gregory Conron <gconron(a)hfx.andara.com> To: <suse-security(a)suse.com> Sent: Saturday, September 11, 1999 9:04 PM Subject: [suse-security] nmap > Hi all, > Seems I am getting scanned from 195.252.142.6. What can anyone > tell me about the type of scan (aside from the fact s/he is > using nmap) and the flags set? Something to worry about, or just > someone scanning a block of IPs looking for an a possible > exploit? The log from /var/log/warn is attached below, and the > address is mail.tli.de > > Thanks, > Gregory Conron > > --- /var/log/warn > Sep 11 22:14:59 Lucia scanlogd: From 195.252.142.6:20 to > 24.222.24.206 ports 2558, 2559, 2560, 2561, 2562, 2563, 2564, > 2565, 2566, ..., flags ??r??u, TOS 08, TTL 236, started at > 22:14:51 > Sep 11 22:18:01 Lucia scanlogd: From 195.252.142.6:20 > to 24.222.24.206 ports 4102, 4115, 4128, 4153, 4166, 4179, 4204, > 4218, 4231, ..., flags ??r??u, TOS 08, TTL 236, started at > 22:17:54 > Sep 11 22:18:36 Lucia scanlogd: From 195.252.142.6:20 > to 24.222.24.206 ports 4936, 4961, 4974, 4999, 1038, 1052, 1073, > 1100, 1120, ..., flags ??r??u, TOS 08, TTL 236, started at > 22:18:29 > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com> iQA/AwUBN9wCZiXYR5yQ1RJFEQIeKQCfSOgxj8tWtbcmMS7p3Sde6p+ElMEAn3jS TbuS+AykPjESsJ8tr892gkmR =ev0u -----END PGP SIGNATURE-----

4 3

Re: [suse-security] Privacy software on SuSE ??
by Graham Murray 12 Sep '99

12 Sep '99

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 dproc(a)dol.net writes: > Now GPG 1.0.0 is out we have more choices. GPG is only > compatible with the new (DH) keys of PGP 5 and up - a GPG message > cannot be read or verified with the SuSE PGP 2.6.3i in SuSE > Linux. Not true. "Out of the box", Gpg is not compatible with the RSA & IDEA used by earlier PGPs, but there are optional modules which support these (available from the gnupg.org site) and make gpg compatible with pgp 2.x. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.0 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.4 and Gnu Privacy Guard <http://www.gnupg.org/> iD8DBQE32fv0EhN/ETQwnEERAiQvAJ0Y7OaFTQ0xjVmaXR+eaxBVrJholgCghMaN TkP2r+0Ma945U+VKRda18m0= =1ogv -----END PGP SIGNATURE-----

2 1