November 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:3095-1: moderate: Security update for tnef
by opensuse-security＠opensuse.org 25 Nov '17

25 Nov '17

openSUSE Security Update: Security update for tnef ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3095-1 Rating: moderate References: #1038837 Cross-References: CVE-2017-8911 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tnef fixes the following issues: Security issue fixed: - CVE-2017-8911: Fix underflow problem (boo#1038837). Bug fixes: - Update to version 1.4.15: * Use __builtin_mul_overflow when available. * Fixing Unicode related bugs introduced in previous release. * Prevent against various cases of null derefences, buffer overshooting, and fix some integer overflows. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1307=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1307=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): tnef-1.4.15-8.1 tnef-debuginfo-1.4.15-8.1 tnef-debugsource-1.4.15-8.1 - openSUSE Leap 42.2 (i586 x86_64): tnef-1.4.15-5.3.1 tnef-debuginfo-1.4.15-5.3.1 tnef-debugsource-1.4.15-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-8911.html https://bugzilla.suse.com/1038837

1 0

openSUSE-RU-2017:3094-1: Recommended update for empathy
by maintenance＠opensuse.org 25 Nov '17

25 Nov '17

openSUSE Recommended Update: Recommended update for empathy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3094-1 Rating: low References: #1050469 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for empathy fixes the following issues: - Empathy ported to webkit2gtk3 (bgo#749001). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1302=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1302=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): empathy-3.12.13-6.1 empathy-debuginfo-3.12.13-6.1 empathy-debugsource-3.12.13-6.1 telepathy-mission-control-plugin-goa-3.12.13-6.1 telepathy-mission-control-plugin-goa-debuginfo-3.12.13-6.1 - openSUSE Leap 42.3 (noarch): empathy-lang-3.12.13-6.1 - openSUSE Leap 42.2 (x86_64): empathy-3.12.13-2.6.1 empathy-debuginfo-3.12.13-2.6.1 empathy-debugsource-3.12.13-2.6.1 telepathy-mission-control-plugin-goa-3.12.13-2.6.1 telepathy-mission-control-plugin-goa-debuginfo-3.12.13-2.6.1 - openSUSE Leap 42.2 (noarch): empathy-lang-3.12.13-2.6.1 References: https://bugzilla.suse.com/1050469

1 0

openSUSE-RU-2017:3071-1: moderate: Recommended update for okular, kfilemetadata5
by maintenance＠opensuse.org 24 Nov '17

24 Nov '17

openSUSE Recommended Update: Recommended update for okular, kfilemetadata5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3071-1 Rating: moderate References: #1069393 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for okular, kfilemetadata5 fixes the following issues: - Unresolved symbol error would be shown and PDF files could not be displayed (boo#1069393) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1301=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kfilemetadata5-5.32.0-5.1 kfilemetadata5-devel-5.32.0-5.1 okular-17.04.2-5.1 okular-debuginfo-17.04.2-5.1 okular-debugsource-17.04.2-5.1 okular-devel-17.04.2-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kfilemetadata5-lang-5.32.0-5.1 okular-lang-17.04.2-5.1 References: https://bugzilla.suse.com/1069393

1 0

openSUSE-RU-2017:3070-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3070-1 Rating: moderate References: #1037727 #1039656 #1047615 #1047929 #1052042 #1054400 #1054933 #1056633 #1058396 #1067172 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - AutoYaST: Do not display a warning about disabled second stage when the hostname setting is read out of profile. (bsc#1054400) - Do not clear /etc/hosts when installing virtual host. (bsc#1039656) - Fix device name recognition during AutoYaST installation. (bsc#1037727) - Fix crash during write if Host.Read and Host.Import are called together. (bsc#1047929) - Fix a crash when /etc/hosts does not exist. (bsc#1047615) - When installing via autoyast, do not blank out /etc/hosts when no host section is defined. (bsc#1058396) - If there is a global DHCLIENT_SET_HOSTNAME option set, use it to determine whether the hostname should be set by DHCP, use the control file default otherwise. (bsc#1054933) - Do not override the hostname configuration in /etc/sysconfig/network/dhcp with the default defined in the control file if the user has disabled the option. (bsc#1056633) - Properly update canonical name and aliases in /etc/hosts when FQDN is provided as a hostname. (bsc#1052042) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1295=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): yast2-network-3.2.44-6.1 References: https://bugzilla.suse.com/1037727 https://bugzilla.suse.com/1039656 https://bugzilla.suse.com/1047615 https://bugzilla.suse.com/1047929 https://bugzilla.suse.com/1052042 https://bugzilla.suse.com/1054400 https://bugzilla.suse.com/1054933 https://bugzilla.suse.com/1056633 https://bugzilla.suse.com/1058396 https://bugzilla.suse.com/1067172

1 0

openSUSE-SU-2017:3069-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3069-1 Rating: important References: #1019016 #1042910 #1053352 #1059554 #977410 Cross-References: CVE-2017-12617 CVE-2017-5664 CVE-2017-7674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for tomcat fixes the following issues: Security issues fixed: - CVE-2017-5664: A problem in handling error pages was fixed, to avoid potential file overwrites during error page handling. (bsc#1042910). - CVE-2017-7674: A CORS Filter issue could lead to client and server side cache poisoning (bsc#1053352) - CVE-2017-12617: A remote code execution possibility via JSP Upload was fixed (bsc#1059554) Non security bugs fixed: - Fix tomcat-digest classpath error (bsc#977410) - Fix packaged /etc/alternatives symlinks for api libs that caused rpm -V to report link mismatch (bsc#1019016) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1299=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1299=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): tomcat-8.0.43-9.1 tomcat-admin-webapps-8.0.43-9.1 tomcat-docs-webapp-8.0.43-9.1 tomcat-el-3_0-api-8.0.43-9.1 tomcat-embed-8.0.43-9.1 tomcat-javadoc-8.0.43-9.1 tomcat-jsp-2_3-api-8.0.43-9.1 tomcat-jsvc-8.0.43-9.1 tomcat-lib-8.0.43-9.1 tomcat-servlet-3_1-api-8.0.43-9.1 tomcat-webapps-8.0.43-9.1 - openSUSE Leap 42.2 (noarch): tomcat-8.0.43-6.13.1 tomcat-admin-webapps-8.0.43-6.13.1 tomcat-docs-webapp-8.0.43-6.13.1 tomcat-el-3_0-api-8.0.43-6.13.1 tomcat-embed-8.0.43-6.13.1 tomcat-javadoc-8.0.43-6.13.1 tomcat-jsp-2_3-api-8.0.43-6.13.1 tomcat-jsvc-8.0.43-6.13.1 tomcat-lib-8.0.43-6.13.1 tomcat-servlet-3_1-api-8.0.43-6.13.1 tomcat-webapps-8.0.43-6.13.1 References: https://www.suse.com/security/cve/CVE-2017-12617.html https://www.suse.com/security/cve/CVE-2017-5664.html https://www.suse.com/security/cve/CVE-2017-7674.html https://bugzilla.suse.com/1019016 https://bugzilla.suse.com/1042910 https://bugzilla.suse.com/1053352 https://bugzilla.suse.com/1059554 https://bugzilla.suse.com/977410

1 0

openSUSE-RU-2017:3068-1: Recommended update for hawk2
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3068-1 Rating: low References: #1037430 #1046820 #1053456 #1056483 #1059492 #1059662 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for hawk2 provides the following fixes: - When generating SSL certificates, make sure the commonName is not too long, fixing it when necessary (bsc#1046820) - Fix a problem when parsing the IP resource that could cause Hawk to grant a ticket to the wrong site. (bsc#1059492) - Don't offset a failure's time by 10 minutes when showing the notification. (bsc#1056483) - Make it possible to revoke locally granted tickets. (bsc#1059662) - Fix a problem that was causing Hawk to add one new attribute per character when entering a name for an Utilization Attribute of a node. (bsc#1053456) - Remove some strange characters showing up in the dashboard when hovering for information. (bsc#1037430) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1294=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): hawk2-2.1.0+git.1505978564.e8d29bb3-3.1 hawk2-debuginfo-2.1.0+git.1505978564.e8d29bb3-3.1 hawk2-debugsource-2.1.0+git.1505978564.e8d29bb3-3.1 References: https://bugzilla.suse.com/1037430 https://bugzilla.suse.com/1046820 https://bugzilla.suse.com/1053456 https://bugzilla.suse.com/1056483 https://bugzilla.suse.com/1059492 https://bugzilla.suse.com/1059662

1 0

openSUSE-SU-2017:3067-1: moderate: Security update for file
by opensuse-security＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3067-1 Rating: moderate References: #1009966 #1063269 #910252 #910253 #913650 #913651 #917152 #996511 Cross-References: CVE-2014-8116 CVE-2014-8117 CVE-2014-9620 CVE-2014-9621 CVE-2014-9653 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has three fixes is now available. Description: The GNU file utility was updated to version 5.22. Security issues fixed: - CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. (bsc#913650) - CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a large number of notes. (bsc#913651) - CVE-2014-9653: readelf.c in file did not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file. (bsc#917152) - CVE-2014-8116: The ELF parser (readelf.c) in file allowed remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities. (bsc#910253) - CVE-2014-8117: softmagic.c in file did not properly limit recursion, which allowed remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. (bsc#910253) Version update to file version 5.22 * add indirect relative for TIFF/Exif * restructure elf note printing to avoid repeated messages * add note limit, suggested by Alexander Cherepanov * Bail out on partial pread()'s (Alexander Cherepanov) * Fix incorrect bounds check in file_printable (Alexander Cherepanov) * PR/405: ignore SIGPIPE from uncompress programs * change printable -> file_printable and use it in more places for safety * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP is present print the interpreter name. Version update to file version 5.21 * there was an incorrect free in magic_load_buffers() * there was an out of bounds read for some pascal strings * there was a memory leak in magic lists * don't interpret strings printed from files using the current locale, convert them to ascii format first. * there was an out of bounds read in elf note reads Update to file version 5.20 * recognize encrypted CDF documents * add magic_load_buffers from Brooks Davis * add thumbs.db support Additional non-security bug fixes: * Fixed a memory corruption during rpmbuild (bsc#1063269) * Backport of a fix for an increased printable string length as found in file 5.30 (bsc#996511) * file command throws "Composite Document File V2 Document, corrupt: Can't read SSAT" error against excel 97/2003 file format. (bsc#1009966) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1298=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1298=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): file-5.22-10.1 file-debuginfo-5.22-10.1 file-debugsource-5.22-10.1 file-devel-5.22-10.1 file-magic-5.22-10.1 libmagic1-5.22-10.1 libmagic1-debuginfo-5.22-10.1 python-magic-5.22-10.1 - openSUSE Leap 42.3 (x86_64): libmagic1-32bit-5.22-10.1 libmagic1-debuginfo-32bit-5.22-10.1 - openSUSE Leap 42.2 (i586 x86_64): file-5.22-7.3.1 file-debuginfo-5.22-7.3.1 file-debugsource-5.22-7.3.1 file-devel-5.22-7.3.1 file-magic-5.22-7.3.1 libmagic1-5.22-7.3.1 libmagic1-debuginfo-5.22-7.3.1 python-magic-5.22-7.3.1 - openSUSE Leap 42.2 (x86_64): libmagic1-32bit-5.22-7.3.1 libmagic1-debuginfo-32bit-5.22-7.3.1 References: https://www.suse.com/security/cve/CVE-2014-8116.html https://www.suse.com/security/cve/CVE-2014-8117.html https://www.suse.com/security/cve/CVE-2014-9620.html https://www.suse.com/security/cve/CVE-2014-9621.html https://www.suse.com/security/cve/CVE-2014-9653.html https://bugzilla.suse.com/1009966 https://bugzilla.suse.com/1063269 https://bugzilla.suse.com/910252 https://bugzilla.suse.com/910253 https://bugzilla.suse.com/913650 https://bugzilla.suse.com/913651 https://bugzilla.suse.com/917152 https://bugzilla.suse.com/996511

1 0

openSUSE-RU-2017:3066-1: Recommended update for cpupower
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Recommended Update: Recommended update for cpupower ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3066-1 Rating: low References: #1048546 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cpupower provides the following fix: - Decode MSR_IA32_MISC_ENABLE only on Intel machines to prevent turbostat errors on AMD Opteron boxes. (bsc#1048546) This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP3:Update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1296=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1296=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): cpupower-4.10-4.1 cpupower-bench-4.10-4.1 cpupower-bench-debuginfo-4.10-4.1 cpupower-debuginfo-4.10-4.1 cpupower-debugsource-4.10-4.1 cpupower-devel-4.10-4.1 libcpupower0-4.10-4.1 libcpupower0-debuginfo-4.10-4.1 - openSUSE Leap 42.2 (i586 x86_64): cpupower-4.6-4.3.1 cpupower-bench-4.6-4.3.1 cpupower-bench-debuginfo-4.6-4.3.1 cpupower-debuginfo-4.6-4.3.1 cpupower-debugsource-4.6-4.3.1 cpupower-devel-4.6-4.3.1 libcpupower0-4.6-4.3.1 libcpupower0-debuginfo-4.6-4.3.1 References: https://bugzilla.suse.com/1048546

1 0

openSUSE-RU-2017:3065-1: Recommended update for gnome-desktop
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Recommended Update: Recommended update for gnome-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3065-1 Rating: low References: #1029083 #1056289 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gnome-desktop provides the following fixes: - Switch new user's default input engine from "anthy" to "mozc" with Japanese language and ibus input framework. (bsc#1029083, bsc#1056289) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1297=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1297=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-desktop-debugsource-3.20.2-6.1 gnome-version-3.20.2-6.1 libgnome-desktop-3-12-3.20.2-6.1 libgnome-desktop-3-12-debuginfo-3.20.2-6.1 libgnome-desktop-3-devel-3.20.2-6.1 libgnome-desktop-3_0-common-3.20.2-6.1 libgnome-desktop-3_0-common-debuginfo-3.20.2-6.1 typelib-1_0-GnomeDesktop-3_0-3.20.2-6.1 - openSUSE Leap 42.3 (x86_64): libgnome-desktop-3-12-32bit-3.20.2-6.1 libgnome-desktop-3-12-debuginfo-32bit-3.20.2-6.1 - openSUSE Leap 42.3 (noarch): gnome-desktop-lang-3.20.2-6.1 - openSUSE Leap 42.2 (i586 x86_64): gnome-desktop-debugsource-3.20.2-3.3.1 gnome-version-3.20.2-3.3.1 libgnome-desktop-3-12-3.20.2-3.3.1 libgnome-desktop-3-12-debuginfo-3.20.2-3.3.1 libgnome-desktop-3-devel-3.20.2-3.3.1 libgnome-desktop-3_0-common-3.20.2-3.3.1 libgnome-desktop-3_0-common-debuginfo-3.20.2-3.3.1 typelib-1_0-GnomeDesktop-3_0-3.20.2-3.3.1 - openSUSE Leap 42.2 (noarch): gnome-desktop-lang-3.20.2-3.3.1 - openSUSE Leap 42.2 (x86_64): libgnome-desktop-3-12-32bit-3.20.2-3.3.1 libgnome-desktop-3-12-debuginfo-32bit-3.20.2-3.3.1 References: https://bugzilla.suse.com/1029083 https://bugzilla.suse.com/1056289

1 0

openSUSE-SU-2017:3064-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3064-1 Rating: moderate References: #1032140 #1036637 #1039850 #1041090 #1052029 Cross-References: CVE-2016-10221 CVE-2016-8728 CVE-2016-8729 CVE-2017-7976 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for mupdf fixes the following issues: Security issues fixed: - CVE-2017-7976: integer overflow (jbig2_image_compose function in jbig2_image.c) during operations on a crafted .jb2 file (boo#1052029). - CVE-2016-10221: count_entries in pdf-layer.c allows for DoS (boo#1032140). - CVE-2016-8728: Fitz library font glyph scaling Code Execution Vulnerability (boo#1039850). Bug fixes: - Update to version 1.11 * This is primarily a bug fix release. * PDF portfolio support with command line tool "mutool portfolio". * Add callbacks to load fallback fonts from the system. * Use system fonts in Android to reduce install size. * Flag to disable publisher styles in EPUB layout. * Improved SVG output. - Add reproducible.patch to sort input files to make build reproducible (boo#1041090) - mupdf is not a terminal app (boo#1036637) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1300=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1300=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): mupdf-1.11-16.1 mupdf-devel-static-1.11-16.1 - openSUSE Leap 42.2 (i586 x86_64): mupdf-1.11-13.3.1 mupdf-devel-static-1.11-13.3.1 References: https://www.suse.com/security/cve/CVE-2016-10221.html https://www.suse.com/security/cve/CVE-2016-8728.html https://www.suse.com/security/cve/CVE-2016-8729.html https://www.suse.com/security/cve/CVE-2017-7976.html https://bugzilla.suse.com/1032140 https://bugzilla.suse.com/1036637 https://bugzilla.suse.com/1039850 https://bugzilla.suse.com/1041090 https://bugzilla.suse.com/1052029

1 0