February 2005
Five Red Hat Security Update Advisories
ID: 00146
Ref: 130/2005
Date: 17 February 2005:14:29:57
Version: 1
Title: Five Red Hat Security Update Advisories
Abstract:
Vendors affected: Red Hat
Operating systems affected: Red Hat
Applications affected: Red Hat
Title
=====
Five Red Hat Security Update Advisories:
1. RHSA-2005:057-01 - Important: gpdf security update
2. RHSA-2005:066-01 - Important: kdegraphics security update
3. RHSA-2005:071-01 - Moderate: ImageMagick security update
4. RHSA-2005:073-01 - Low: cpio security update
5. RHSA-2005:090-01 - Moderate: htdig security update
Detail
======
1. GPdf is a viewer for Portable Document Format (PDF) files for GNOME.
2. The kdegraphics packages contain applications for the K Desktop
Environment including kpdf, a pdf file viewer.
3. ImageMagick is an image display and manipulation tool for the X
Window System.
4. GNU cpio copies files into or out of a cpio or tar archive.
5. The ht://Dig system is a Web search and indexing system for a small
domain or intranet.
1.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
ESB-2005.0159 -- RHSA-2005:057-01
Important: gpdf security update
17 February 2005
===========================================================================
Product: gpdf
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux AS/ES/WS 4
Red Hat Desktop version 4
Linux variants
UNIX variants
Impact: Execute Arbitrary Code/Commands
Access: Remote/Unauthenticated
CVE Names: CAN-2005-0206 CAN-2005-0064 CAN-2004-1125
CAN-2004-0888
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2005-057.html
Comment: This Red Hat advisory is for Enterprise Linux version 4 only.
The same vulnerability may exist in other versions, and administrators
are advised to check the vendor's web site for further details.
- - --------------------------BEGIN INCLUDED TEXT--------------------
- - -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Important: gpdf security update
Advisory ID: RHSA-2005:057-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-057.html
Issue date: 2005-02-15
Updated on: 2005-02-15
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-1125 CAN-2005-0064 CAN-2005-0206
- - - ---------------------------------------------------------------------
1. Summary:
An updated gpdf package that fixes two security issues is now available.
This update has been rated as having important security impact by the
Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x,
x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red
Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat
Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Problem description:
GPdf is a viewer for Portable Document Format (PDF) files for GNOME.
A buffer overflow flaw was found in the Gfx::doImage function of Xpdf
which also affects GPdf due to a shared codebase. An attacker could
construct a carefully crafted PDF file that could cause GPdf to crash
or possibly execute arbitrary code when opened. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CAN-2004-1125
to this issue.
A buffer overflow flaw was found in the Decrypt::makeFileKey2 function
of Xpdf which also affects GPdf due to a shared codebase. An attacker
could construct a carefully crafted PDF file that could cause GPdf to
crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0064 to this issue.
During a source code audit, Chris Evans and others discovered a
number of integer overflow bugs that affected all versions of Xpdf,
which also affects GPdf due to a shared codebase. An attacker could
construct a carefully crafted PDF file that could cause GPdf to
crash or possibly execute arbitrary code when opened. This issue
was assigned the name CAN-2004-0888 by The Common Vulnerabilities
and Exposures project (cve.mitre.org). Red Hat Enterprise Linux 4
contained a fix for this issue, but it was found to be incomplete
and left 64-bit architectures vulnerable. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0206 to this issue.
Users should update to this erratum package which contains backported
patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red
Hat Update Agent, use the following command:
up2date
For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:
http://www.redhat.com/docs/manuals/enterprise/
5. Bug IDs fixed (http://bugzilla.redhat.com/):
144210 - CAN-2004-1125 gpdf buffer overflow
145054 - CAN-2005-0064 xpdf buffer overflow
147518 - CAN-2004-0888 xpdf integer overflows
6. RPMs required:
Red Hat Enterprise Linux AS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/gpdf-2.8.2-4.3.src.rpm
0d2d40d1e98b5e2ecbebabf18f4941f7 gpdf-2.8.2-4.3.src.rpm
i386:
bd095233bada6a9596cc0a27a88c3991 gpdf-2.8.2-4.3.i386.rpm
ia64:
e8ad37d8c0c724526af8d0d59f7bc8e3 gpdf-2.8.2-4.3.ia64.rpm
ppc:
226b1a316072a0aa69e9c8729a8a37ed gpdf-2.8.2-4.3.ppc.rpm
s390:
7945af0b72f4ddc8942d00a8b279fc1c gpdf-2.8.2-4.3.s390.rpm
s390x:
18935e86dc836057e5bc7bb0da86d281 gpdf-2.8.2-4.3.s390x.rpm
x86_64:
7438f03d85d8e28d180fa4aebc16e624 gpdf-2.8.2-4.3.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/gpdf-2.8.2-4.3.src.rpm
0d2d40d1e98b5e2ecbebabf18f4941f7 gpdf-2.8.2-4.3.src.rpm
i386:
bd095233bada6a9596cc0a27a88c3991 gpdf-2.8.2-4.3.i386.rpm
x86_64:
7438f03d85d8e28d180fa4aebc16e624 gpdf-2.8.2-4.3.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/gpdf-2.8.2-4.3.src.rpm
0d2d40d1e98b5e2ecbebabf18f4941f7 gpdf-2.8.2-4.3.src.rpm
i386:
bd095233bada6a9596cc0a27a88c3991 gpdf-2.8.2-4.3.i386.rpm
ia64:
e8ad37d8c0c724526af8d0d59f7bc8e3 gpdf-2.8.2-4.3.ia64.rpm
x86_64:
7438f03d85d8e28d180fa4aebc16e624 gpdf-2.8.2-4.3.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/gpdf-2.8.2-4.3.src.rpm
0d2d40d1e98b5e2ecbebabf18f4941f7 gpdf-2.8.2-4.3.src.rpm
i386:
bd095233bada6a9596cc0a27a88c3991 gpdf-2.8.2-4.3.i386.rpm
ia64:
e8ad37d8c0c724526af8d0d59f7bc8e3 gpdf-2.8.2-4.3.ia64.rpm
x86_64:
7438f03d85d8e28d180fa4aebc16e624 gpdf-2.8.2-4.3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1125
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0064
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0206
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
- - -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFCEcwwXlSAg2UNWIIRAr2KAKCUF0J398aXkz2kMNFZ7RmUoKLxZQCfaInC
i0W10wuCqbLiT7T2d8eHfOU=
=CUDi
- - -----END PGP SIGNATURE-----
- - --------------------------END INCLUDED TEXT--------------------
iQCVAwUBQhP17yh9+71yA2DNAQLqqAQAmhQzUu3WzcEsSDWv82CZyS8+0yKKQ5Q/
RfuzWNzgSGycvXsJswMjrEb79FV7wcdkaopz482cRZbSOxQDxWdXRX1BSDT91mKi
BzEmqf6Vt/3f62oG8S3L7PkAbSBiMq3efzWNNFCuxqRiW+ubDTJd31FPJsES3zMW
F/UMMheBLmc=
=uI/U
- -----END PGP SIGNATURE-----
2.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
ESB-2005.0160 -- RHSA-2005:066-01
Important: kdegraphics security update
17 February 2005
===========================================================================
Product: kdegraphics
kpdf
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux AS/ES/WS 4
Red Hat Desktop version 4
Linux variants
UNIX variants
Impact: Execute Arbitrary Code/Commands
Access: Remote/Unauthenticated
CVE Names: CAN-2005-0064 CAN-2004-1125 CAN-2004-0888
Ref: ESB-2004.0677
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2005-066.html
Comment: This Red Hat advisory is for Enterprise Linux version 4 only.
The same vulnerability may exist in other versions, and administrators
are advised to check the vendor's web site for further details.
- - --------------------------BEGIN INCLUDED TEXT--------------------
- - -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Important: kdegraphics security update
Advisory ID: RHSA-2005:066-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-066.html
Issue date: 2005-02-15
Updated on: 2005-02-15
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-0888 CAN-2004-1125 CAN-2005-0064
- - - ---------------------------------------------------------------------
1. Summary:
Updated kdegraphics packages that resolve security issues in kpdf are
now available.
This update has been rated as having important security impact by the
Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x,
x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red
Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat
Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Problem description:
The kdegraphics packages contain applications for the K Desktop
Environment including kpdf, a pdf file viewer.
A buffer overflow flaw was found in the Gfx::doImage function of Xpdf
that also affects kpdf due to a shared codebase. An attacker could
construct a carefully crafted PDF file that could cause kpdf to crash
or possibly execute arbitrary code when opened. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-1125 to this issue.
A buffer overflow flaw was found in the Decrypt::makeFileKey2 function
of Xpdf which also affects kpdf due to a shared codebase. An attacker
could construct a carefully crafted PDF file that could cause kpdf to
crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0064 to this issue.
During a source code audit, Chris Evans and others discovered a number
of integer overflow bugs that affected all versions of Xpdf which also
affects kpdf due to a shared codebase. An attacker could construct a
carefully crafted PDF file that could cause kpdf to crash or possibly
execute arbitrary code when opened. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-0888
to this issue.
Users should update to these erratum packages which contain backported
patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat Network
to download and update your packages. To launch the Red Hat Update
Agent, use the following command:
up2date
For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:
http://www.redhat.com/docs/manuals/enterprise/
5. Bug IDs fixed (http://bugzilla.redhat.com/):
144231 - CAN-2004-1125 kpdf buffer overflows (CAN-2005-0064) 147517 -
CAN-2004-0888 xpdf integer overflows
6. RPMs required:
Red Hat Enterprise Linux AS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/kdegraphics-3.3.1-3.3.src.rpm
fd1d7060c8cca799483a27173d5bc7b6 kdegraphics-3.3.1-3.3.src.rpm
i386:
4a2e830f82d3aa0e05dd95426d5a109b kdegraphics-3.3.1-3.3.i386.rpm 5937d9c3e8c5f7175f71078ffb7f717e kdegraphics-devel-3.3.1-3.3.i386.rpm
ia64:
e2fd3f531b80d5bb50c3ae080639f4f8 kdegraphics-3.3.1-3.3.ia64.rpm b383cbe0daccb73a4fe053d156a73164 kdegraphics-devel-3.3.1-3.3.ia64.rpm
ppc:
331f2f1866dbe6eae83af3c2724f6fa7 kdegraphics-3.3.1-3.3.ppc.rpm 640fe6bd9af17924905c7039e3638dff kdegraphics-devel-3.3.1-3.3.ppc.rpm
s390:
b09f34cabeb4bfde4bd32aa829fd5976 kdegraphics-3.3.1-3.3.s390.rpm 5b94414dc45320387c924fd2ecc5877c kdegraphics-devel-3.3.1-3.3.s390.rpm
s390x:
af43161748d3a158d954aeab1175fdba kdegraphics-3.3.1-3.3.s390x.rpm c43192a518f3ee03420c4d29aedc12f0 kdegraphics-devel-3.3.1-3.3.s390x.rpm
x86_64:
a4e5fd8221c93b22a601abcdfb310886 kdegraphics-3.3.1-3.3.x86_64.rpm 7e462597879404f94abb47e742fc1851 kdegraphics-devel-3.3.1-3.3.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/kdegraphics-3.3.1-3.3.src.rpm
fd1d7060c8cca799483a27173d5bc7b6 kdegraphics-3.3.1-3.3.src.rpm
i386:
4a2e830f82d3aa0e05dd95426d5a109b kdegraphics-3.3.1-3.3.i386.rpm 5937d9c3e8c5f7175f71078ffb7f717e kdegraphics-devel-3.3.1-3.3.i386.rpm
x86_64:
a4e5fd8221c93b22a601abcdfb310886 kdegraphics-3.3.1-3.3.x86_64.rpm 7e462597879404f94abb47e742fc1851 kdegraphics-devel-3.3.1-3.3.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/kdegraphics-3.3.1-3.3.src.rpm
fd1d7060c8cca799483a27173d5bc7b6 kdegraphics-3.3.1-3.3.src.rpm
i386:
4a2e830f82d3aa0e05dd95426d5a109b kdegraphics-3.3.1-3.3.i386.rpm 5937d9c3e8c5f7175f71078ffb7f717e kdegraphics-devel-3.3.1-3.3.i386.rpm
ia64:
e2fd3f531b80d5bb50c3ae080639f4f8 kdegraphics-3.3.1-3.3.ia64.rpm b383cbe0daccb73a4fe053d156a73164 kdegraphics-devel-3.3.1-3.3.ia64.rpm
x86_64:
a4e5fd8221c93b22a601abcdfb310886 kdegraphics-3.3.1-3.3.x86_64.rpm 7e462597879404f94abb47e742fc1851 kdegraphics-devel-3.3.1-3.3.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/kdegraphics-3.3.1-3.3.src.rpm
fd1d7060c8cca799483a27173d5bc7b6 kdegraphics-3.3.1-3.3.src.rpm
i386:
4a2e830f82d3aa0e05dd95426d5a109b kdegraphics-3.3.1-3.3.i386.rpm 5937d9c3e8c5f7175f71078ffb7f717e kdegraphics-devel-3.3.1-3.3.i386.rpm
ia64:
e2fd3f531b80d5bb50c3ae080639f4f8 kdegraphics-3.3.1-3.3.ia64.rpm b383cbe0daccb73a4fe053d156a73164 kdegraphics-devel-3.3.1-3.3.ia64.rpm
x86_64:
a4e5fd8221c93b22a601abcdfb310886 kdegraphics-3.3.1-3.3.x86_64.rpm 7e462597879404f94abb47e742fc1851 kdegraphics-devel-3.3.1-3.3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available
from https://www.redhat.com/security/team/key/#package
7. References:
http://www.kde.org/info/security/advisory-20041223-1.txt
http://www.kde.org/info/security/advisory-20050119-1.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0888
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1125
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0064
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
- - -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFCEcx5XlSAg2UNWIIRAmiYAKCB6I9P5nAjmXrvfO/eHRda5QEbMgCfe08W
W1LNPoYWZIVsTNukM2lhJx0=
=MVn9
- - -----END PGP SIGNATURE-----
- - --------------------------END INCLUDED TEXT--------------------
iQCVAwUBQhP3Tyh9+71yA2DNAQK3KAP/QWrkGczHMnDp3Vtrmi/WliTW/hXpHuvg
ZVyoTKs6B4hh4KcCH8/VqHqg7OAmWrCephABX7pVAl/Zxa0rr6OZO54d6odo7WUP
pCI6LB6nm51ExZ/Jp+FkmYZwgTRLjucfD3UhC9T2oG/OtpGchX6UK5QwqigU80W4
gab3k5Jw8EA=
=86UX
- -----END PGP SIGNATURE-----
3.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
ESB-2005.0161 -- RHSA-2005:071-01
Moderate: ImageMagick security update
17 February 2005
===========================================================================
Product: ImageMagick
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux AS/ES/WS 4
Red Hat Desktop version 4
Linux variants
UNIX variants
Impact: Execute Arbitrary Code/Commands
Access: Remote/Unauthenticated
CVE Names: CAN-2005-0005
Ref: ESB-2005.0048
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2005-071.html
Comment: This Red Hat advisory is for Enterprise Linux version 4 only.
The same vulnerability may exist in other versions, and administrators
are advised to check the vendor's web site for further details.
- - --------------------------BEGIN INCLUDED TEXT--------------------
- - -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Moderate: ImageMagick security update
Advisory ID: RHSA-2005:071-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-071.html
Issue date: 2005-02-15
Updated on: 2005-02-15
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0005
- - - ---------------------------------------------------------------------
1. Summary:
Updated ImageMagick packages that fix a security flaw are now available
for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the
Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x,
x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red
Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat
Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Problem description:
ImageMagick is an image display and manipulation tool for the X
Window System.
Andrei Nigmatulin discovered a heap based buffer overflow flaw in the
ImageMagick image handler. An attacker could create a carefully
crafted Photoshop Document (PSD) image in such a way that it would
cause ImageMagick to execute arbitrary code when processing the image.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0005 to this issue.
Users of ImageMagick should upgrade to these updated packages, which
contain a backported patch, and are not vulnerable to this issue.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:
up2date
For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:
http://www.redhat.com/docs/manuals/enterprise/
5. Bug IDs fixed (http://bugzilla.redhat.com/):
145123 - CAN-2005-0005 buffer overflow in ImageMagick
6. RPMs required:
Red Hat Enterprise Linux AS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/ImageMagick-6.0.7.1-6.src.rpm
a5c8511327dc216e6543f2bcce9dbaef ImageMagick-6.0.7.1-6.src.rpm
i386:
1145a7d29a8b8f444d94834b5e6c32af ImageMagick-6.0.7.1-6.i386.rpm 7f77e9423e940706e843737c6caaf53f ImageMagick-c++-6.0.7.1-6.i386.rpm
e1b8cf2f535ba390f07619327540cb84 ImageMagick-c++-devel-6.0.7.1-6.i386.rpm
7748f74dadba601fb43eb04b6bd5787a ImageMagick-devel-6.0.7.1-6.i386.rpm
e907c9aaab08c87c815d289ae3e34d24 ImageMagick-perl-6.0.7.1-6.i386.rpm
ia64:
6389e67ad2ec903f8744355a026671c0 ImageMagick-6.0.7.1-6.ia64.rpm 0a5415a7dd437424be36edda7e59404f ImageMagick-c++-6.0.7.1-6.ia64.rpm
7ccc183bce8e328c017a6acd15f85746 ImageMagick-c++-devel-6.0.7.1-6.ia64.rpm
0fbfca7d0531822f1b64fe28410b089a ImageMagick-devel-6.0.7.1-6.ia64.rpm
975b389ef4c61819221a33b46d5798c5 ImageMagick-perl-6.0.7.1-6.ia64.rpm
ppc:
0005695a74c40faa555381d9294bbce8 ImageMagick-6.0.7.1-6.ppc.rpm 7e07a4f6de79a6185867b12b13263200 ImageMagick-c++-6.0.7.1-6.ppc.rpm ab2dac355d35242988da6873de6422e2 ImageMagick-c++-devel-6.0.7.1-6.ppc.rpm
62a235627ca1eee014b69ee68ee6b93f ImageMagick-devel-6.0.7.1-6.ppc.rpm
76d2a6e6ab17003535fa8019d3fbeab9 ImageMagick-perl-6.0.7.1-6.ppc.rpm
s390:
6d43807788a76a876b4abef3ff0ff1b0 ImageMagick-6.0.7.1-6.s390.rpm 321e1f007114e0bd581bd83b0eda7fe6 ImageMagick-c++-6.0.7.1-6.s390.rpm
3b0d090b96e796c6aff5507d13ed35ae ImageMagick-c++-devel-6.0.7.1-6.s390.rpm
764d139053a2964c1ecee0407ea60c41 ImageMagick-devel-6.0.7.1-6.s390.rpm
c239527e5377076c6d57afea04fa18c3 ImageMagick-perl-6.0.7.1-6.s390.rpm
s390x:
83717e077a6401a30f9d52b858d62809 ImageMagick-6.0.7.1-6.s390x.rpm c4898fe5d9b06b537f7871c812846d22 ImageMagick-c++-6.0.7.1-6.s390x.rpm
5aaf3be1910b8ce7b4e7ed01fb35e049 ImageMagick-c++-devel-6.0.7.1-6.s390x.rpm
7672587e292ef5e94490749e367508a8 ImageMagick-devel-6.0.7.1-6.s390x.rpm
7bc82308c1b8b405ba45ced6553a1fe0 ImageMagick-perl-6.0.7.1-6.s390x.rpm
x86_64:
2f0ee7ea6c2facad27ef786ded68e8c1 ImageMagick-6.0.7.1-6.x86_64.rpm f0950411b38e248645c771ea85b9125d ImageMagick-c++-6.0.7.1-6.x86_64.rpm
4fdf0a7ccc22f73ddb510ac627bc63d5 ImageMagick-c++-devel-6.0.7.1-6.x86_64.rpm
0f8e9d58c905273acc2a5a0410bbd801 ImageMagick-devel-6.0.7.1-6.x86_64.rpm
616716d249de35ad9e3888a251757675 ImageMagick-perl-6.0.7.1-6.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/ImageMagick-6.0.7.1-6.src.rpm
a5c8511327dc216e6543f2bcce9dbaef ImageMagick-6.0.7.1-6.src.rpm
i386:
1145a7d29a8b8f444d94834b5e6c32af ImageMagick-6.0.7.1-6.i386.rpm 7f77e9423e940706e843737c6caaf53f ImageMagick-c++-6.0.7.1-6.i386.rpm
e1b8cf2f535ba390f07619327540cb84 ImageMagick-c++-devel-6.0.7.1-6.i386.rpm
7748f74dadba601fb43eb04b6bd5787a ImageMagick-devel-6.0.7.1-6.i386.rpm
e907c9aaab08c87c815d289ae3e34d24 ImageMagick-perl-6.0.7.1-6.i386.rpm
x86_64:
2f0ee7ea6c2facad27ef786ded68e8c1 ImageMagick-6.0.7.1-6.x86_64.rpm f0950411b38e248645c771ea85b9125d ImageMagick-c++-6.0.7.1-6.x86_64.rpm
4fdf0a7ccc22f73ddb510ac627bc63d5 ImageMagick-c++-devel-6.0.7.1-6.x86_64.rpm
0f8e9d58c905273acc2a5a0410bbd801 ImageMagick-devel-6.0.7.1-6.x86_64.rpm
616716d249de35ad9e3888a251757675 ImageMagick-perl-6.0.7.1-6.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/ImageMagick-6.0.7.1-6.src.rpm
a5c8511327dc216e6543f2bcce9dbaef ImageMagick-6.0.7.1-6.src.rpm
i386:
1145a7d29a8b8f444d94834b5e6c32af ImageMagick-6.0.7.1-6.i386.rpm 7f77e9423e940706e843737c6caaf53f ImageMagick-c++-6.0.7.1-6.i386.rpm
e1b8cf2f535ba390f07619327540cb84 ImageMagick-c++-devel-6.0.7.1-6.i386.rpm
7748f74dadba601fb43eb04b6bd5787a ImageMagick-devel-6.0.7.1-6.i386.rpm
e907c9aaab08c87c815d289ae3e34d24 ImageMagick-perl-6.0.7.1-6.i386.rpm
ia64:
6389e67ad2ec903f8744355a026671c0 ImageMagick-6.0.7.1-6.ia64.rpm 0a5415a7dd437424be36edda7e59404f ImageMagick-c++-6.0.7.1-6.ia64.rpm
7ccc183bce8e328c017a6acd15f85746 ImageMagick-c++-devel-6.0.7.1-6.ia64.rpm
0fbfca7d0531822f1b64fe28410b089a ImageMagick-devel-6.0.7.1-6.ia64.rpm
975b389ef4c61819221a33b46d5798c5 ImageMagick-perl-6.0.7.1-6.ia64.rpm
x86_64:
2f0ee7ea6c2facad27ef786ded68e8c1 ImageMagick-6.0.7.1-6.x86_64.rpm f0950411b38e248645c771ea85b9125d ImageMagick-c++-6.0.7.1-6.x86_64.rpm
4fdf0a7ccc22f73ddb510ac627bc63d5 ImageMagick-c++-devel-6.0.7.1-6.x86_64.rpm
0f8e9d58c905273acc2a5a0410bbd801 ImageMagick-devel-6.0.7.1-6.x86_64.rpm
616716d249de35ad9e3888a251757675 ImageMagick-perl-6.0.7.1-6.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/ImageMagick-6.0.7.1-6.src.rpm
a5c8511327dc216e6543f2bcce9dbaef ImageMagick-6.0.7.1-6.src.rpm
i386:
1145a7d29a8b8f444d94834b5e6c32af ImageMagick-6.0.7.1-6.i386.rpm 7f77e9423e940706e843737c6caaf53f ImageMagick-c++-6.0.7.1-6.i386.rpm
e1b8cf2f535ba390f07619327540cb84 ImageMagick-c++-devel-6.0.7.1-6.i386.rpm
7748f74dadba601fb43eb04b6bd5787a ImageMagick-devel-6.0.7.1-6.i386.rpm
e907c9aaab08c87c815d289ae3e34d24 ImageMagick-perl-6.0.7.1-6.i386.rpm
ia64:
6389e67ad2ec903f8744355a026671c0 ImageMagick-6.0.7.1-6.ia64.rpm 0a5415a7dd437424be36edda7e59404f ImageMagick-c++-6.0.7.1-6.ia64.rpm
7ccc183bce8e328c017a6acd15f85746 ImageMagick-c++-devel-6.0.7.1-6.ia64.rpm
0fbfca7d0531822f1b64fe28410b089a ImageMagick-devel-6.0.7.1-6.ia64.rpm
975b389ef4c61819221a33b46d5798c5 ImageMagick-perl-6.0.7.1-6.ia64.rpm
x86_64:
2f0ee7ea6c2facad27ef786ded68e8c1 ImageMagick-6.0.7.1-6.x86_64.rpm f0950411b38e248645c771ea85b9125d ImageMagick-c++-6.0.7.1-6.x86_64.rpm
4fdf0a7ccc22f73ddb510ac627bc63d5 ImageMagick-c++-devel-6.0.7.1-6.x86_64.rpm
0f8e9d58c905273acc2a5a0410bbd801 ImageMagick-devel-6.0.7.1-6.x86_64.rpm
616716d249de35ad9e3888a251757675 ImageMagick-perl-6.0.7.1-6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available
from https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0005
8. Contact:
The Red Hat security contact is . More
contact details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
- - -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFCEcyEXlSAg2UNWIIRAskuAKC10/Xi5883UVe4hB+cMDDUo2ksOQCdEvka
+u9EVyCFUobEDbMm0nQR+2o=
=ixMf
- - -----END PGP SIGNATURE-----
- - --------------------------END INCLUDED TEXT--------------------
iQCVAwUBQhP5Yyh9+71yA2DNAQJLeAP/a4Nk2g4kJpNHIppKaeiofA5FKTdiMMh9
z3gvR/6ZBvEJX/yukj9DACyDq9pWHewPsIT4cErzo962sqObmNzDox55ZPvS5idp
FlHe4iCU4i5wgsZM81CaoWmMc7mY8pFwG/SRpsILPHx3hKrmuPRgoR5SOQSgm5LR
A1m7xD9c86I=
=iOmN
- -----END PGP SIGNATURE-----
4.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
ESB-2005.0162 -- RHSA-2005:073-01
Low: cpio security update
17 February 2005
===========================================================================
Product: cpio
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux AS/ES/WS 4
Red Hat Desktop version 4
Linux variants
UNIX variants
Impact: Inappropriate Access
Reduced Security
Access: Existing Account
CVE Names: CAN-1999-1572
Ref: ESB-2005.0099
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2005-073.html
Comment: This Red Hat advisory is for Enterprise Linux version 4 only.
The same vulnerability may exist in other versions, and administrators
are advised to check the vendor's web site for further details.
- - --------------------------BEGIN INCLUDED TEXT--------------------
- - -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Low: cpio security update
Advisory ID: RHSA-2005:073-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-073.html
Issue date: 2005-02-15
Updated on: 2005-02-15
Product: Red Hat Enterprise Linux
CVE Names: CAN-1999-1572
- - - ---------------------------------------------------------------------
1. Summary:
An updated cpio package that fixes a umask bug is now available for
Red Hat Enterprise Linux 4.
This update has been rated as having low security impact by the Red
Hat Security Response Team
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x,
x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red
Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise
Linux WS version 4 - i386, ia64, x86_64
3. Problem description:
GNU cpio copies files into or out of a cpio or tar archive.
It was discovered that cpio uses a 0 umask when creating files using
the -O (archive) option. This creates output files with mode 0666
(all can read and write) regardless of the user's umask setting.
The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-1999-1572 to this issue.
Users of cpio should upgrade to this updated package, which
resolves this issue.
Red Hat would like to thank Mike O'Connor for bringing this
issue to our attention.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat Network
to download and update your packages. To launch the Red Hat Update
Agent, use the following command:
up2date
For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:
http://www.redhat.com/docs/manuals/enterprise/
5. Bug IDs fixed (http://bugzilla.redhat.com/):
145725 - CAN-1999-1572 cpio insecure file creation
6. RPMs required:
Red Hat Enterprise Linux AS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/cpio-2.5-7.EL4.1.src.rpm
f81762b300053347ae0a624a459c60eb cpio-2.5-7.EL4.1.src.rpm
i386:
3d34cc1565e00928cd59b33b3cc25bec cpio-2.5-7.EL4.1.i386.rpm
ia64:
c51a21e61349908197e629af8c86e619 cpio-2.5-7.EL4.1.ia64.rpm
ppc:
38e0e1b27dd0175e38ff67fceaf36ab9 cpio-2.5-7.EL4.1.ppc.rpm
s390:
dd7b191ed868f845fd1d74646a6ec3f8 cpio-2.5-7.EL4.1.s390.rpm
s390x:
21f6e67def41f73d71bfdfed5174b7a9 cpio-2.5-7.EL4.1.s390x.rpm
x86_64:
6e75a65c6f877fc4d7603f749642aabc cpio-2.5-7.EL4.1.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/cpio-2.5-7.EL4.1.src.rpm
f81762b300053347ae0a624a459c60eb cpio-2.5-7.EL4.1.src.rpm
i386:
3d34cc1565e00928cd59b33b3cc25bec cpio-2.5-7.EL4.1.i386.rpm
x86_64:
6e75a65c6f877fc4d7603f749642aabc cpio-2.5-7.EL4.1.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/cpio-2.5-7.EL4.1.src.rpm
f81762b300053347ae0a624a459c60eb cpio-2.5-7.EL4.1.src.rpm
i386:
3d34cc1565e00928cd59b33b3cc25bec cpio-2.5-7.EL4.1.i386.rpm
ia64:
c51a21e61349908197e629af8c86e619 cpio-2.5-7.EL4.1.ia64.rpm
x86_64:
6e75a65c6f877fc4d7603f749642aabc cpio-2.5-7.EL4.1.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/cpio-2.5-7.EL4.1.src.rpm
f81762b300053347ae0a624a459c60eb cpio-2.5-7.EL4.1.src.rpm
i386:
3d34cc1565e00928cd59b33b3cc25bec cpio-2.5-7.EL4.1.i386.rpm
ia64:
c51a21e61349908197e629af8c86e619 cpio-2.5-7.EL4.1.ia64.rpm
x86_64:
6e75a65c6f877fc4d7603f749642aabc cpio-2.5-7.EL4.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available
from https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-1999-1572
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
- - -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFCEcyXXlSAg2UNWIIRAs5JAJ41i08JPvrRX0YX8ZM5g9GQXyDF8QCfcyiR
yeOin8xllV26v0L6RMvu7gs=
=i1Os
- - -----END PGP SIGNATURE-----
- - --------------------------END INCLUDED TEXT--------------------
iQCVAwUBQhP7Nyh9+71yA2DNAQJB9AP9GEY9g2/u4vnDX/GmyPcWeMGOKRdId7r3
5prlSd1ox+t79bNRsoCEE4ectc/LctL2Yj4uEH8W6qjeg1Qf+/iq7Wk5Aswmnojw
szj68sf+mXvh+j+wyO0emrYipTin+F7UeEflLsOiEsqVJLyV2TlbcllLpKNFC0WH
GHDNpn+7R2g=
=vxdB
- -----END PGP SIGNATURE-----
5.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
ESB-2005.0163 -- RHSA-2005:090-01
Moderate: htdig security update
17 February 2005
===========================================================================
Product: htdig
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux AS/ES/WS 4
Red Hat Desktop version 4
Linux variants
UNIX variants
Impact: Cross-site Scripting
Access: Remote/Unauthenticated
CVE Names: CAN-2005-0085
Ref: ESB-2005.0150
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2005-090.html
Comment: This Red Hat advisory is for Enterprise Linux version 4 only.
The same vulnerability may exist in other versions, and administrators
are advised to check the vendor's web site for further details.
- - --------------------------BEGIN INCLUDED TEXT--------------------
- - -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Moderate: htdig security update
Advisory ID: RHSA-2005:090-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-090.html
Issue date: 2005-02-15
Updated on: 2005-02-15
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0085
- - - ---------------------------------------------------------------------
1. Summary:
Updated htdig packages that fix a security flaw are now available for
Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the
Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x,
x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red
Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat
Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Problem description:
The ht://Dig system is a Web search and indexing system for a small
domain or intranet.
Michael Krax reported a cross-site scripting bug affecting htdig.
An attacker could construct a carefully crafted URL which can cause
a web browser to execute malicious script once visited. The Common
Vulnerabilities and Exposures project has assigned the name
CAN-2005-0085 to this issue.
Users of htdig should upgrade to these updated packages, which
contain a backported patch, and are not vulnerable to this issue.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat Network
to download and update your packages. To launch the Red Hat Update
Agent, use the following command:
up2date
For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:
http://www.redhat.com/docs/manuals/enterprise/
5. Bug IDs fixed (http://bugzilla.redhat.com/):
144261 - CAN-2005-0085 XSS vulnerability in htdig 3.2.0b6 145649 - htdig
packaging cleanups
6. RPMs required:
Red Hat Enterprise Linux AS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/htdig-3.2.0b6-3.40.1.src.rpm
bb2c2485bc40ac6842dc81c17d63f0af htdig-3.2.0b6-3.40.1.src.rpm
i386:
3a92066c374c430a9e581b76b65358db htdig-3.2.0b6-3.40.1.i386.rpm f7af349ddce35eb4681a416ca0d24ad9 htdig-web-3.2.0b6-3.40.1.i386.rpm
ia64:
764d07486a1df065acf0e4b41145efea htdig-3.2.0b6-3.40.1.ia64.rpm 42f417c64c812c224cb061b09bf819d8 htdig-web-3.2.0b6-3.40.1.ia64.rpm
ppc:
0b67dcc567f484da5a2100cbb4974b40 htdig-3.2.0b6-3.40.1.ppc.rpm 4c6cad4ee1320469cf8fb5916ccc2f0d htdig-web-3.2.0b6-3.40.1.ppc.rpm
s390:
db34676305160bc30d1a47dd4e2a15cc htdig-3.2.0b6-3.40.1.s390.rpm 103e9d013e58acb9888bf2894a22f0d8 htdig-web-3.2.0b6-3.40.1.s390.rpm
s390x:
e9afa0d245cf733c2c14c7815de4dc7e htdig-3.2.0b6-3.40.1.s390x.rpm 5e93175510c2734e7bc15224bac7d9b7 htdig-web-3.2.0b6-3.40.1.s390x.rpm
x86_64:
1c00d64041cd9b2a2975222d1a6285a3 htdig-3.2.0b6-3.40.1.x86_64.rpm 4e295161fb868cb875a3e581d680138c htdig-web-3.2.0b6-3.40.1.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/htdig-3.2.0b6-3.40.1.src.rpm
bb2c2485bc40ac6842dc81c17d63f0af htdig-3.2.0b6-3.40.1.src.rpm
i386:
3a92066c374c430a9e581b76b65358db htdig-3.2.0b6-3.40.1.i386.rpm f7af349ddce35eb4681a416ca0d24ad9 htdig-web-3.2.0b6-3.40.1.i386.rpm
x86_64:
1c00d64041cd9b2a2975222d1a6285a3 htdig-3.2.0b6-3.40.1.x86_64.rpm 4e295161fb868cb875a3e581d680138c htdig-web-3.2.0b6-3.40.1.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/htdig-3.2.0b6-3.40.1.src.rpm
bb2c2485bc40ac6842dc81c17d63f0af htdig-3.2.0b6-3.40.1.src.rpm
i386:
3a92066c374c430a9e581b76b65358db htdig-3.2.0b6-3.40.1.i386.rpm f7af349ddce35eb4681a416ca0d24ad9 htdig-web-3.2.0b6-3.40.1.i386.rpm
ia64:
764d07486a1df065acf0e4b41145efea htdig-3.2.0b6-3.40.1.ia64.rpm 42f417c64c812c224cb061b09bf819d8 htdig-web-3.2.0b6-3.40.1.ia64.rpm
x86_64:
1c00d64041cd9b2a2975222d1a6285a3 htdig-3.2.0b6-3.40.1.x86_64.rpm 4e295161fb868cb875a3e581d680138c htdig-web-3.2.0b6-3.40.1.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
SRPMS: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/htdig-3.2.0b6-3.40.1.src.rpm
bb2c2485bc40ac6842dc81c17d63f0af htdig-3.2.0b6-3.40.1.src.rpm
i386:
3a92066c374c430a9e581b76b65358db htdig-3.2.0b6-3.40.1.i386.rpm f7af349ddce35eb4681a416ca0d24ad9 htdig-web-3.2.0b6-3.40.1.i386.rpm
ia64:
764d07486a1df065acf0e4b41145efea htdig-3.2.0b6-3.40.1.ia64.rpm 42f417c64c812c224cb061b09bf819d8 htdig-web-3.2.0b6-3.40.1.ia64.rpm
x86_64:
1c00d64041cd9b2a2975222d1a6285a3 htdig-3.2.0b6-3.40.1.x86_64.rpm 4e295161fb868cb875a3e581d680138c htdig-web-3.2.0b6-3.40.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0085
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
- - -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFCEczmXlSAg2UNWIIRAgtFAJ4qv5SNPQ+T1ds2X5ATl86JS+xx2wCcCYJX
/Rv3qB9VeIkoybtEHMbbIAU=
=6A4f
- - -----END PGP SIGNATURE-----
- - --------------------------END INCLUDED TEXT--------------------
iQCVAwUBQhP8RSh9+71yA2DNAQIvCAQAjWP6geW+m6nl8DxZ3yGMBBKJC1/SGHiN
/ev+fGa/e9JNS2/mfrz/JwVyrj77hcrLi5DfEBKkjVerJ41xfYP7pb3wEk4Pt9Ho
y4l1/sprnL/R2lAbJYlgL3qnuoUsY7M1A/imawS6pYffVIAM4igPd5dZLkJxhqY/
HKD2xHTpCjA=
=pMvC
- -----END PGP SIGNATURE-----