CVE-2011-3378: Malformed Header parsing

Debian Bug report logs - #645325
CVE-2011-3378: Malformed Header parsing

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <muehlenhoff@univention.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2011-3378: Malformed Header parsing

Date: Fri, 14 Oct 2011 14:16:23 +0200

Package: rpm
Severity: important
Tags: security

Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3378 and links to patches.

Thanks to dpkg the attack vectors to a Debian system are rather limited, so I don't think
this warrants a DSA. It could be fixed through a point update, though (see
http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable )

Please contact team@security.debian.org if you disgree with the severity.

Cheers,
        Moritz

Message #12 received at 645325-close@bugs.debian.org (full text, mbox, reply):

From: Michal Čihař <nijel@debian.org>

To: 645325-close@bugs.debian.org

Subject: Bug#645325: fixed in rpm 4.9.1.2-1

Date: Mon, 07 Nov 2011 10:17:32 +0000

Source: rpm
Source-Version: 4.9.1.2-1

We believe that the bug you reported is fixed in the latest version of
rpm, which is due to be installed in the Debian FTP archive:

librpm-dbg_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpm-dbg_4.9.1.2-1_amd64.deb
librpm-dev_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpm-dev_4.9.1.2-1_amd64.deb
librpm2_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpm2_4.9.1.2-1_amd64.deb
librpmbuild2_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpmbuild2_4.9.1.2-1_amd64.deb
librpmio2_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpmio2_4.9.1.2-1_amd64.deb
librpmsign0_4.9.1.2-1_amd64.deb
  to main/r/rpm/librpmsign0_4.9.1.2-1_amd64.deb
python-rpm_4.9.1.2-1_amd64.deb
  to main/r/rpm/python-rpm_4.9.1.2-1_amd64.deb
rpm-common_4.9.1.2-1_amd64.deb
  to main/r/rpm/rpm-common_4.9.1.2-1_amd64.deb
rpm-i18n_4.9.1.2-1_all.deb
  to main/r/rpm/rpm-i18n_4.9.1.2-1_all.deb
rpm2cpio_4.9.1.2-1_amd64.deb
  to main/r/rpm/rpm2cpio_4.9.1.2-1_amd64.deb
rpm_4.9.1.2-1.debian.tar.gz
  to main/r/rpm/rpm_4.9.1.2-1.debian.tar.gz
rpm_4.9.1.2-1.dsc
  to main/r/rpm/rpm_4.9.1.2-1.dsc
rpm_4.9.1.2-1_amd64.deb
  to main/r/rpm/rpm_4.9.1.2-1_amd64.deb
rpm_4.9.1.2.orig.tar.bz2
  to main/r/rpm/rpm_4.9.1.2.orig.tar.bz2



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 645325@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michal Čihař <nijel@debian.org> (supplier of updated rpm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 14 Oct 2011 17:53:46 +0200
Source: rpm
Binary: rpm rpm2cpio rpm-common rpm-i18n librpm-dbg librpm2 librpmio2 librpmbuild2 librpmsign0 librpm-dev python-rpm
Architecture: source all amd64
Version: 4.9.1.2-1
Distribution: unstable
Urgency: high
Maintainer: Michal Čihař <nijel@debian.org>
Changed-By: Michal Čihař <nijel@debian.org>
Description: 
 librpm-dbg - debugging symbols for RPM
 librpm-dev - RPM shared library, development kit
 librpm2    - RPM shared library
 librpmbuild2 - RPM build shared library
 librpmio2  - RPM IO shared library
 librpmsign0 - RPM signing shared library
 python-rpm - Python bindings for RPM
 rpm        - package manager for RPM
 rpm-common - common files for RPM
 rpm-i18n   - localization and localized man pages for rpm
 rpm2cpio   - tool to convert RPM package to CPIO archive
Closes: 645325
Changes: 
 rpm (4.9.1.2-1) unstable; urgency=high
 .
   * New upstream release.
     - Fixes CVE-2011-3378 (Closes: #645325).
Checksums-Sha1: 
 a47392ab004564d449ba1039f597abf7d24ad054 2674 rpm_4.9.1.2-1.dsc
 5ec557424d90461f76d4ad30bfb6653b79920d58 3500371 rpm_4.9.1.2.orig.tar.bz2
 e5151f0a268a8ff3ecc36759101f347e6e3680eb 34297 rpm_4.9.1.2-1.debian.tar.gz
 81ca65f2b24a98c3174e4b527c9f01d247534a5b 1287150 rpm-i18n_4.9.1.2-1_all.deb
 5ebb10d48bcb656c2716c957015517d901f3267a 991670 rpm_4.9.1.2-1_amd64.deb
 ae459a590514c0a7c6ce44a5af0506c1784fe0d8 838718 rpm2cpio_4.9.1.2-1_amd64.deb
 c27a9074a433b7efb933bd2b045158e6e45ede6c 852146 rpm-common_4.9.1.2-1_amd64.deb
 7e80772ce66827c9813f6d2ed84f6fdd821709e9 1891076 librpm-dbg_4.9.1.2-1_amd64.deb
 4bdfdd9ca2c949989ba36cda6f120cdd5ad57e5d 1020320 librpm2_4.9.1.2-1_amd64.deb
 f01ef434fd0bd539e237215cd71cf9321e02c333 914776 librpmio2_4.9.1.2-1_amd64.deb
 178ba4650cae8cba49ddd08a479730ff64e466ae 903934 librpmbuild2_4.9.1.2-1_amd64.deb
 951c1ae9cbe840089adaa659bb9a94d9eceb7d02 842666 librpmsign0_4.9.1.2-1_amd64.deb
 3942cb7a4563493a8fae84b446ec4f289926a882 895214 librpm-dev_4.9.1.2-1_amd64.deb
 74acf4484696b7b0a5e4736300fd73236fbece10 914452 python-rpm_4.9.1.2-1_amd64.deb
Checksums-Sha256: 
 f8fba6549fbe76ecf4e1177363f8337a8a76f20a8fff2d3b2d1c33f96bb6b045 2674 rpm_4.9.1.2-1.dsc
 ea55e5c5b70703a3fea33e5debec27a694816ae86d1bf5ce99bc9e27db84b60a 3500371 rpm_4.9.1.2.orig.tar.bz2
 2e9e07fae151ce31469d0f9bb753429387384f32af81737cc92faaa810e05f05 34297 rpm_4.9.1.2-1.debian.tar.gz
 0010791ca24980cd4bf7ce7c20e0f7fdf5840675913daec41f00451b7f4737be 1287150 rpm-i18n_4.9.1.2-1_all.deb
 eee2ecb44a02cd646ed7bc99dd837c700c97c13f674720192cbeab070255ec7b 991670 rpm_4.9.1.2-1_amd64.deb
 15041d8efd68e8a1bb7e912dff2441132c8a8d4929765ac2c65312905b5e3602 838718 rpm2cpio_4.9.1.2-1_amd64.deb
 b33482ceec2f093c1e87de000789b4bbec08176fa5a048db412a6e6cf48fc2be 852146 rpm-common_4.9.1.2-1_amd64.deb
 77e3a2f0ace27b000537567a1a59ba6705d64653a98c0e84dd252553f040f9c9 1891076 librpm-dbg_4.9.1.2-1_amd64.deb
 553e0ff32618c7026f3bec1b5b9b91189390ee8fa0fba37f071b21da3426b607 1020320 librpm2_4.9.1.2-1_amd64.deb
 cb07a44c60de5e0b3e3ce0df1f542d4d44a90bea289e7787c16436b80e6bbfee 914776 librpmio2_4.9.1.2-1_amd64.deb
 e6ad88aa21a8134446fe88c35fa5a10402e2f0ed44ffef610ae172069b845294 903934 librpmbuild2_4.9.1.2-1_amd64.deb
 21cccc27c2f3b6aaf336f94936e6b05b522ec61efa4c57a6e4debeacd16a90b2 842666 librpmsign0_4.9.1.2-1_amd64.deb
 f227a85435c070b870ef2be459e5df6bdd5779544eb37f6b5aca8f84cafd86c7 895214 librpm-dev_4.9.1.2-1_amd64.deb
 d6d9be7463febe21f130f30a86c01cd270c1923e91a3a4e0ba5db1a6140100ac 914452 python-rpm_4.9.1.2-1_amd64.deb
Files: 
 ad5f54184097b2b1a24996c655d7ce87 2674 admin optional rpm_4.9.1.2-1.dsc
 85cc5b7adb5806b5abf5b538b088dbdc 3500371 admin optional rpm_4.9.1.2.orig.tar.bz2
 889ac41bfc680cf469003f0646e037b2 34297 admin optional rpm_4.9.1.2-1.debian.tar.gz
 be83270eb521a9dfecbdde62b4a30c21 1287150 localization optional rpm-i18n_4.9.1.2-1_all.deb
 28090bc3431892e4dafefa8a08126ba7 991670 admin optional rpm_4.9.1.2-1_amd64.deb
 68e64e6a79871f91f36e07135c80ba58 838718 admin optional rpm2cpio_4.9.1.2-1_amd64.deb
 204fb45820a3de19f3500f33537da2e7 852146 admin optional rpm-common_4.9.1.2-1_amd64.deb
 3b97929f29da8d5b188e1633082c6acd 1891076 debug extra librpm-dbg_4.9.1.2-1_amd64.deb
 d58e69da82a1130aff3bd875cf3be593 1020320 libs optional librpm2_4.9.1.2-1_amd64.deb
 c006186a9f60d812c1b3d3a2f9ab5df1 914776 libs optional librpmio2_4.9.1.2-1_amd64.deb
 88a5ae956f9e69a51b9eb117d8afa4ec 903934 libs optional librpmbuild2_4.9.1.2-1_amd64.deb
 08d096f8effc9923b8c4fb34bd46c75f 842666 libs optional librpmsign0_4.9.1.2-1_amd64.deb
 85315afed2570e06aae2b8eb9320f041 895214 libdevel extra librpm-dev_4.9.1.2-1_amd64.deb
 5dbb0bc70fac14b875f70b759f0a6635 914452 python extra python-rpm_4.9.1.2-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=7E1b
-----END PGP SIGNATURE-----

Message #17 received at 645325@bugs.debian.org (full text, mbox, reply):

From: Jonathan Wiltshire <jmw@debian.org>

To: 645325@bugs.debian.org

Subject: CVE-2011-3378: Malformed Header parsing

Date: Wed, 21 Dec 2011 18:02:09 +0000 (GMT)

Dear maintainer,

Recently you fixed one or more security problems and as a result you closed
this bug. These problems were not serious enough for a Debian Security
Advisory, so they are now on my radar for fixing in the following suites
through point releases:

squeeze (6.0.4) 	- use target "stable"
lenny (5.0.10) 	- use target "oldstable"

Please prepare a minimal-changes upload targetting each of these suites,
and submit a debdiff to the Release Team [0] for consideration. They will
offer additional guidance or instruct you to upload your package.

I will happily assist you at any stage if the patch is straightforward and
you need help. Please keep me in CC at all times so I can
track the progress of this request.

For details of this process and the rationale, please see the original
announcement [1] and my blog post [2].

0: debian-release@lists.debian.org
1: <201101232332.11736.thijs@debian.org>
2: http://deb.li/prsc

Thanks,

with his security hat on:
--
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

Message #24 received at 645325@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>

To: Jonathan Wiltshire <jmw@debian.org>

Cc: 645325@bugs.debian.org

Subject: Re: CVE-2011-3378: Malformed Header parsing

Date: Thu, 22 Dec 2011 19:01:57 +0100

On Wed, Dec 21, 2011 at 06:02:09PM +0000, Jonathan Wiltshire wrote:
> Dear maintainer,
> 
> Recently you fixed one or more security problems and as a result you closed
> this bug. These problems were not serious enough for a Debian Security
> Advisory, so they are now on my radar for fixing in the following suites
> through point releases:
> 
> squeeze (6.0.4) 	- use target "stable"
> lenny (5.0.10) 	- use target "oldstable"
> 
> Please prepare a minimal-changes upload targetting each of these suites,
> and submit a debdiff to the Release Team [0] for consideration. They will
> offer additional guidance or instruct you to upload your package.
> 
> I will happily assist you at any stage if the patch is straightforward and
> you need help. Please keep me in CC at all times so I can
> track the progress of this request.
> 
> For details of this process and the rationale, please see the original
> announcement [1] and my blog post [2].
> 
> 0: debian-release@lists.debian.org
> 1: <201101232332.11736.thijs@debian.org>
> 2: http://deb.li/prsc

I've prepared a spu update for this, will send a mail to debian-release
shortly after more testing.

Cheers,
        Moritz

Message #29 received at 645325-close@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>

To: 645325-close@bugs.debian.org

Subject: Bug#645325: fixed in rpm 4.8.1-6+squeeze1

Date: Sat, 24 Dec 2011 19:56:31 +0000

Source: rpm
Source-Version: 4.8.1-6+squeeze1

We believe that the bug you reported is fixed in the latest version of
rpm, which is due to be installed in the Debian FTP archive:

librpm-dbg_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/librpm-dbg_4.8.1-6+squeeze1_amd64.deb
librpm-dev_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/librpm-dev_4.8.1-6+squeeze1_amd64.deb
librpm1_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/librpm1_4.8.1-6+squeeze1_amd64.deb
librpmbuild1_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/librpmbuild1_4.8.1-6+squeeze1_amd64.deb
librpmio1_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/librpmio1_4.8.1-6+squeeze1_amd64.deb
lsb-rpm_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/lsb-rpm_4.8.1-6+squeeze1_amd64.deb
python-rpm_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/python-rpm_4.8.1-6+squeeze1_amd64.deb
rpm-common_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/rpm-common_4.8.1-6+squeeze1_amd64.deb
rpm-i18n_4.8.1-6+squeeze1_all.deb
  to main/r/rpm/rpm-i18n_4.8.1-6+squeeze1_all.deb
rpm2cpio_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/rpm2cpio_4.8.1-6+squeeze1_amd64.deb
rpm_4.8.1-6+squeeze1.debian.tar.gz
  to main/r/rpm/rpm_4.8.1-6+squeeze1.debian.tar.gz
rpm_4.8.1-6+squeeze1.dsc
  to main/r/rpm/rpm_4.8.1-6+squeeze1.dsc
rpm_4.8.1-6+squeeze1_amd64.deb
  to main/r/rpm/rpm_4.8.1-6+squeeze1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 645325@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Moritz Muehlenhoff <jmm@debian.org> (supplier of updated rpm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 21 Dec 2011 17:59:47 +0000
Source: rpm
Binary: rpm rpm2cpio rpm-common rpm-i18n lsb-rpm librpm-dbg librpm1 librpmio1 librpmbuild1 librpm-dev python-rpm
Architecture: source all amd64
Version: 4.8.1-6+squeeze1
Distribution: stable
Urgency: low
Maintainer: Michal Čihař <nijel@debian.org>
Changed-By: Moritz Muehlenhoff <jmm@debian.org>
Description: 
 librpm-dbg - debugging symbols for RPM
 librpm-dev - RPM shared library, development kit
 librpm1    - RPM shared library
 librpmbuild1 - RPM build shared library
 librpmio1  - RPM IO shared library
 lsb-rpm    - RPM Package Manager for LSB package building
 python-rpm - Python bindings for RPM
 rpm        - package manager for RPM
 rpm-common - common files for RPM
 rpm-i18n   - localization and localized man pages for rpm
 rpm2cpio   - tool to convert RPM package to CPIO archive
Closes: 645325
Changes: 
 rpm (4.8.1-6+squeeze1) stable; urgency=low
 .
   * Non-maintainer upload by the Security Team
   * Fix CVE-2011-3378 (Closes: #645325)
Checksums-Sha1: 
 e5ca210e42e7f035da004486605b604a9a6560a1 1785 rpm_4.8.1-6+squeeze1.dsc
 ea219f8463e4bee916dad578587c99683b0f5453 70619 rpm_4.8.1-6+squeeze1.debian.tar.gz
 d0692a0e2c7f2b3574669d9875a93032a1ecc697 1185214 rpm-i18n_4.8.1-6+squeeze1_all.deb
 1864d4a2a14fbbd205925d6b9d7b89448ed30412 843194 rpm_4.8.1-6+squeeze1_amd64.deb
 03b87809b6ba916daf037cef29548e2a9c4de2c3 699506 rpm2cpio_4.8.1-6+squeeze1_amd64.deb
 36696904746ba02dedb0f0f0029c315a6b7de408 714898 rpm-common_4.8.1-6+squeeze1_amd64.deb
 3472b9d91eef72080866d84feb237cf061de6b80 1254048 lsb-rpm_4.8.1-6+squeeze1_amd64.deb
 b35075ac49f7649abdb8263c87a7d29e8686af8e 2667270 librpm-dbg_4.8.1-6+squeeze1_amd64.deb
 df3028140a8b8bd49276a28ebf045f60fda78320 891226 librpm1_4.8.1-6+squeeze1_amd64.deb
 753f66ae0c1437fe5fc0818bc5a6df43e81fab01 779210 librpmio1_4.8.1-6+squeeze1_amd64.deb
 53e8575108b341e9fd3a817248c252d1069f8562 764600 librpmbuild1_4.8.1-6+squeeze1_amd64.deb
 65d56f1e6296f0fcbf13c10dd61e704856d87a1a 762120 librpm-dev_4.8.1-6+squeeze1_amd64.deb
 6be4ec95da652e5aed58828f80b4b667ae1ce716 733904 python-rpm_4.8.1-6+squeeze1_amd64.deb
Checksums-Sha256: 
 0f31c4df7185b4f5900310a3fd88f47cdf4f56c3b94f8515df041f75087d010c 1785 rpm_4.8.1-6+squeeze1.dsc
 45ad8976607507154bcbce4b3c426adc50f4a43bb72ae2a09783f1c355e506c9 70619 rpm_4.8.1-6+squeeze1.debian.tar.gz
 b4729d2dc748b6b0da722cabf73ce5c6ef644c7045d9b6df47480ca43d0dd65c 1185214 rpm-i18n_4.8.1-6+squeeze1_all.deb
 c2b9e0a33e4f300621b8b673479ec4cd154e61e6047e5f0962dd1c2c871c1290 843194 rpm_4.8.1-6+squeeze1_amd64.deb
 f41bd7c37b1bfbdab31176d8934f2f54fee1b0d6d3cef37557cd5aeec054b970 699506 rpm2cpio_4.8.1-6+squeeze1_amd64.deb
 5f9a8b0bc522a0a385b2015e96b3da5bd1d728169ee3b4c47bc5779ce64e996e 714898 rpm-common_4.8.1-6+squeeze1_amd64.deb
 7615ce3e880ca23b63bca2846167a5005e24dd8dbce67cb4bb978937244ac477 1254048 lsb-rpm_4.8.1-6+squeeze1_amd64.deb
 b268829b805b6b0cd3fb0acced6d3a599319c209917dcca40b61fdf50101e44f 2667270 librpm-dbg_4.8.1-6+squeeze1_amd64.deb
 734fb958f17a839be1ecd7d22c426571a7fcf031f86e1655d0b0e02371a6515a 891226 librpm1_4.8.1-6+squeeze1_amd64.deb
 9986275339a0d7a226e6e5c62bf0ae26e068c3fc8024ac8a72404fc2d3505072 779210 librpmio1_4.8.1-6+squeeze1_amd64.deb
 96f6dfa552028ae3ea4cfa1aac3bc77d442aa20998d0a63e2301ab0f3b7d0ed8 764600 librpmbuild1_4.8.1-6+squeeze1_amd64.deb
 83cdead633edcd92cd9eb14e7d7c823d0b58db4b8cd8e51268efe00fbdc37878 762120 librpm-dev_4.8.1-6+squeeze1_amd64.deb
 7e1541e329526a713291efeb6ae6befdb6a1940424d18d909b834c2f89e17f58 733904 python-rpm_4.8.1-6+squeeze1_amd64.deb
Files: 
 021cfb63de7e5325267736128b0d1e59 1785 admin optional rpm_4.8.1-6+squeeze1.dsc
 bde4335352e0fee58d9ad4cb42a6d245 70619 admin optional rpm_4.8.1-6+squeeze1.debian.tar.gz
 09ad3d755195c0e5ad11ce08800bb931 1185214 localization optional rpm-i18n_4.8.1-6+squeeze1_all.deb
 e1e9000bbac6031f626d0ddc03979378 843194 admin optional rpm_4.8.1-6+squeeze1_amd64.deb
 20eddf04f9a77aed223e058b7cd09089 699506 admin optional rpm2cpio_4.8.1-6+squeeze1_amd64.deb
 1780921f3f24b9be591baf6d947a93b2 714898 admin optional rpm-common_4.8.1-6+squeeze1_amd64.deb
 6ceebd2769bbce0e77c580926ffe1e65 1254048 devel optional lsb-rpm_4.8.1-6+squeeze1_amd64.deb
 c5b6fd54597d13934ee09ad040e62c25 2667270 debug extra librpm-dbg_4.8.1-6+squeeze1_amd64.deb
 c1ccf7f3f62b36af7b7c441de0e9785d 891226 libs optional librpm1_4.8.1-6+squeeze1_amd64.deb
 a4f8189712af0d3b86c42dd143e4ee7a 779210 libs optional librpmio1_4.8.1-6+squeeze1_amd64.deb
 3c3d0d3d9f0b349116c02392a836d4a7 764600 libs optional librpmbuild1_4.8.1-6+squeeze1_amd64.deb
 f3c22015a7e64c056fcff2d477d63533 762120 libdevel extra librpm-dev_4.8.1-6+squeeze1_amd64.deb
 689f9501325ba6a6a4f9f553927b4578 733904 python extra python-rpm_4.8.1-6+squeeze1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk704DUACgkQXm3vHE4uylq2hwCgsMDsRj9vGQCRktGWqqVfnPTr
mlQAniKFOl9TD/o8rAA+InMacum0RyjY
=YIUu
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.