212272 2008-03-04 12:57 0000 mail-client/evolution <2.12.3-r1 Encrypted Message Version Format String Vulnerability (CVE-2008-0072) 2008-03-06 10:14:49 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://secunia.com/advisories/29057/ A2 [glsa] P2 major --- 1 rbu@gentoo.org security@gentoo.org gnome@gentoo.org rbu@gentoo.org 2008-03-04 12:57:58 0000 Secunia reports: A format string error in the "emf_multipart_encrypted()" function in mail/em-format.c when displaying the "Version:" field from an encrypted e-mail message can be exploited to execute arbitrary code via a specially crafted e-mail message. Successful exploitation requires that the user opens a malicious e-mail message. ... We have assigned this vulnerability Secunia advisory SA29057 and the CVE identifier CVE-2008-0072. Credits should go to: Ulf Harnhammar, Secunia Research. rbu@gentoo.org 2008-03-04 12:59:37 0000 Daniel, Gilles, this issue is under embargo until 2008-03-19 10am CET. Do not commit anything to CVS until this date. Please prepare an updated ebuild and attach it to this bug, we will do prestable testing here. Thanks. rbu@gentoo.org 2008-03-04 13:00:38 0000 Created an attachment (id=145259) evolution-CVE-2008-0072.diff Upstream patch rbu@gentoo.org 2008-03-04 13:18:26 0000 Embargo date was *advanced* to be tomorrow. eva@gentoo.org 2008-03-04 15:11:55 0000 Created an attachment (id=145266) evolution-2.12.3-r1.ebuild full ebuild as asked by rbu. rbu@gentoo.org 2008-03-04 15:16:02 0000 Arch Security Liaisons, please test the attached ebuild and report it stable on this bug. Please note that this issue will be public tomorrow morning. Thanks. Target keywords : "alpha amd64 hppa ia64 ppc ppc64 release sparc x86" CC'ing current Liaisons: alpha : ferdy amd64 : welp hppa : jer ppc : dertobi123 ppc64 : corsair release : pva sparc : fmccor x86 : opfer jer@gentoo.org 2008-03-04 17:24:03 0000 As for HPPA: for reasons evolution takes around 3 hours to build on a 625MHz PA8700 (C3650)[1] and the build is not nearly halfway through. I'll be off to work before it finishes, so you can expect me to report back with some test results in about 9 hours from now (and no sooner). [1] I am currently building mail-client/evolution on a comparable Pentium III at 833MHz to see if the HPPA build time is indeed overly long. fauli@gentoo.org 2008-03-04 20:09:54 0000 Calendar and Tasks: * import of big ICS...check * import of tasks...check * modifying tasks and events...check Mail: * IMAP...check * SMTP...check * POP3...check Good to go on x86 armin76@gentoo.org 2008-03-04 21:38:16 0000 Looks fine on alpha/ia64/sparc rbu@gentoo.org 2008-03-05 01:13:23 0000 Looks good on amd64. rbu@gentoo.org 2008-03-05 01:14:34 0000 jer, it compiles a while on my core2 too, no worries. ranger@gentoo.org 2008-03-05 02:09:24 0000 was cool for ppc64 here too jer@gentoo.org 2008-03-05 04:05:18 0000 (In reply to comment #10) > jer, it compiles a while on my core2 too, no worries. Takes ~2 hours on the Pentium III, so I guess that's normal. Anyway, it appears to be good for HPPA. leio@gentoo.org 2008-03-05 09:04:36 0000 Committed ebuild at 10:05am CET. Patch extension renamed from diff to patch to be the same as every new GNOME packages patch and explanation added on top of the patch as I like to do for future easy seeing what a given patch is for. Tested to work good on amd64 as well. +*evolution-2.12.3-r1 (05 Mar 2008) + + 05 Mar 2008; Mart Raudsepp <leio@gentoo.org> + +files/evolution-CVE-2008-0072.patch, +evolution-2.12.3-r1.ebuild: + Security fix for "Encrypted Message Version Format String Vulnerability". + Stable on alpha, amd64, hppa, ia64, ppc64, sparc and x86 + rbu@gentoo.org 2008-03-05 10:05:49 0000 Thank you guys for the fast work. Target keywords : "alpha amd64 hppa ia64 ppc ppc64 release sparc x86" Already stabled : "alpha amd64 hppa ia64 ppc64 sparc x86" Missing keywords: "ppc release" dertobi123@gentoo.org 2008-03-05 19:29:52 0000 ppc stable, ready for glsa rbu@gentoo.org 2008-03-05 20:09:34 0000 request filed py@gentoo.org 2008-03-05 22:30:51 0000 GLSA 200803-12 pva@gentoo.org 2008-03-06 10:14:49 0000 Fixed in release snapshot. 145259 2008-03-04 13:00 0000 evolution-CVE-2008-0072.diff evolution-CVE-2008-0072.diff text/plain SW5kZXg6IG1haWwvZW0tZm9ybWF0LmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gbWFpbC9lbS1mb3JtYXQuYwko cmV2aXNpb24gMzUwOTYpCisrKyBtYWlsL2VtLWZvcm1hdC5jCSh3b3JraW5nIGNvcHkpCkBAIC0x MTkzLDcgKzExOTMsNyBAQCBlbWZfYXBwbGljYXRpb25feHBrY3M3bWltZShFTUZvcm1hdCAqZW1m CiAJb3BhcnQgPSBjYW1lbF9taW1lX3BhcnRfbmV3KCk7CiAJdmFsaWQgPSBjYW1lbF9jaXBoZXJf ZGVjcnlwdChjb250ZXh0LCBwYXJ0LCBvcGFydCwgZXgpOwogCWlmICh2YWxpZCA9PSBOVUxMKSB7 Ci0JCWVtX2Zvcm1hdF9mb3JtYXRfZXJyb3IoZW1mLCBzdHJlYW0sIGV4LT5kZXNjP2V4LT5kZXNj Ol8oIkNvdWxkIG5vdCBwYXJzZSBTL01JTUUgbWVzc2FnZTogVW5rbm93biBlcnJvciIpKTsKKwkJ ZW1fZm9ybWF0X2Zvcm1hdF9lcnJvcihlbWYsIHN0cmVhbSwgIiVzIiwgZXgtPmRlc2M/ZXgtPmRl c2M6XygiQ291bGQgbm90IHBhcnNlIFMvTUlNRSBtZXNzYWdlOiBVbmtub3duIGVycm9yIikpOwog CQllbV9mb3JtYXRfcGFydF9hcyhlbWYsIHN0cmVhbSwgcGFydCwgTlVMTCk7CiAJfSBlbHNlIHsK IAkJaWYgKGVtZmMgPT0gTlVMTCkKQEAgLTEzNTAsNyArMTM1MCw3IEBAIGVtZl9tdWx0aXBhcnRf ZW5jcnlwdGVkKEVNRm9ybWF0ICplbWYsIEMKIAlpZiAodmFsaWQgPT0gTlVMTCkgewogCQllbV9m b3JtYXRfZm9ybWF0X2Vycm9yKGVtZiwgc3RyZWFtLCBleC0+ZGVzYz9fKCJDb3VsZCBub3QgcGFy c2UgUEdQL01JTUUgbWVzc2FnZSIpOl8oIkNvdWxkIG5vdCBwYXJzZSBQR1AvTUlNRSBtZXNzYWdl OiBVbmtub3duIGVycm9yIikpOwogCQlpZiAoZXgtPmRlc2MpCi0JCQllbV9mb3JtYXRfZm9ybWF0 X2Vycm9yKGVtZiwgc3RyZWFtLCBleC0+ZGVzYyk7CisJCQllbV9mb3JtYXRfZm9ybWF0X2Vycm9y KGVtZiwgc3RyZWFtLCAiJXMiLCBleC0+ZGVzYyk7CiAJCWVtX2Zvcm1hdF9wYXJ0X2FzKGVtZiwg c3RyZWFtLCBwYXJ0LCAibXVsdGlwYXJ0L21peGVkIik7CiAJfSBlbHNlIHsKIAkJaWYgKGVtZmMg PT0gTlVMTCkKQEAgLTE1MTUsNyArMTUxNSw3IEBAIGVtZl9tdWx0aXBhcnRfc2lnbmVkKEVNRm9y bWF0ICplbWYsIENhbWUKIAkJaWYgKHZhbGlkID09IE5VTEwpIHsKIAkJCWVtX2Zvcm1hdF9mb3Jt YXRfZXJyb3IoZW1mLCBzdHJlYW0sIGV4LT5kZXNjP18oIkVycm9yIHZlcmlmeWluZyBzaWduYXR1 cmUiKTpfKCJVbmtub3duIGVycm9yIHZlcmlmeWluZyBzaWduYXR1cmUiKSk7CiAJCQlpZiAoZXgt PmRlc2MpCi0JCQkJZW1fZm9ybWF0X2Zvcm1hdF9lcnJvcihlbWYsIHN0cmVhbSwgZXgtPmRlc2Mp OworCQkJCWVtX2Zvcm1hdF9mb3JtYXRfZXJyb3IoZW1mLCBzdHJlYW0sICIlcyIsIGV4LT5kZXNj KTsKIAkJCWVtX2Zvcm1hdF9wYXJ0X2FzKGVtZiwgc3RyZWFtLCBwYXJ0LCAibXVsdGlwYXJ0L21p eGVkIik7CiAJCX0gZWxzZSB7CiAJCQlpZiAoZW1mYyA9PSBOVUxMKQpAQCAtMTU4Niw3ICsxNTg2 LDcgQEAgZW1mX2lubGluZXBncF9zaWduZWQoRU1Gb3JtYXQgKmVtZiwgQ2FtZQogCWlmICghdmFs aWQpIHsKIAkJZW1fZm9ybWF0X2Zvcm1hdF9lcnJvcihlbWYsIHN0cmVhbSwgZXgtPmRlc2M/Xygi RXJyb3IgdmVyaWZ5aW5nIHNpZ25hdHVyZSIpOl8oIlVua25vd24gZXJyb3IgdmVyaWZ5aW5nIHNp Z25hdHVyZSIpKTsKIAkJaWYgKGV4LT5kZXNjKQotCQkJZW1fZm9ybWF0X2Zvcm1hdF9lcnJvcihl bWYsIHN0cmVhbSwgZXgtPmRlc2MpOworCQkJZW1fZm9ybWF0X2Zvcm1hdF9lcnJvcihlbWYsIHN0 cmVhbSwgIiVzIiwgZXgtPmRlc2MpOwogCQllbV9mb3JtYXRfZm9ybWF0X3NvdXJjZShlbWYsIHN0 cmVhbSwgaXBhcnQpOwogCQkvKiBJIHRoaW5rIHRoaXMgd2lsbCBsb29wOiBlbV9mb3JtYXRfcGFy dF9hcyhlbWYsIHN0cmVhbSwgcGFydCwgInRleHQvcGxhaW4iKTsgKi8KIAkJY2FtZWxfZXhjZXB0 aW9uX2ZyZWUoZXgpOwpAQCAtMTY1OCw3ICsxNjU4LDcgQEAgZW1mX2lubGluZXBncF9lbmNyeXB0 ZWQoRU1Gb3JtYXQgKmVtZiwgQwogCWlmICghdmFsaWQpIHsKIAkJZW1fZm9ybWF0X2Zvcm1hdF9l cnJvcihlbWYsIHN0cmVhbSwgZXgtPmRlc2M/XygiQ291bGQgbm90IHBhcnNlIFBHUCBtZXNzYWdl Iik6XygiQ291bGQgbm90IHBhcnNlIFBHUCBtZXNzYWdlOiBVbmtub3duIGVycm9yIikpOwogCQlp ZiAoZXgtPmRlc2MpCi0JCQllbV9mb3JtYXRfZm9ybWF0X2Vycm9yKGVtZiwgc3RyZWFtLCBleC0+ ZGVzYyk7CisJCQllbV9mb3JtYXRfZm9ybWF0X2Vycm9yKGVtZiwgc3RyZWFtLCAiJXMiLCBleC0+ ZGVzYyk7CiAJCWVtX2Zvcm1hdF9mb3JtYXRfc291cmNlKGVtZiwgc3RyZWFtLCBpcGFydCk7CiAJ CS8qIEkgdGhpbmsgdGhpcyB3aWxsIGxvb3A6IGVtX2Zvcm1hdF9wYXJ0X2FzKGVtZiwgc3RyZWFt LCBwYXJ0LCAidGV4dC9wbGFpbiIpOyAqLwogCQljYW1lbF9leGNlcHRpb25fZnJlZShleCk7Cg== 145266 2008-03-04 15:11 0000 evolution-2.12.3-r1.ebuild evolution-2.12.3-r1.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA4IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6IC92YXIvY3Zzcm9vdC9nZW50b28teDg2L21haWwtY2xpZW50L2V2b2x1dGlvbi9ldm9sdXRp b24tMi4xMi4zLmVidWlsZCx2IDEuMyAyMDA4LzAyLzAzIDAxOjEyOjAxIGV2YSBFeHAgJApFQVBJ PSIxIgoKaW5oZXJpdCBnbm9tZTIgZmxhZy1vLW1hdGljCgpERVNDUklQVElPTj0iSW50ZWdyYXRl ZCBtYWlsLCBhZGRyZXNzYm9vayBhbmQgY2FsZW5kYXJpbmcgZnVuY3Rpb25hbGl0eSIKSE9NRVBB R0U9Imh0dHA6Ly93d3cuZ25vbWUub3JnL3Byb2plY3RzL2V2b2x1dGlvbi8iClNSQ19VUkk9IiR7 U1JDX1VSSX0iCgpMSUNFTlNFPSJHUEwtMiBGREwtMS4xIgpTTE9UPSIyLjAiCktFWVdPUkRTPSJ+ YWxwaGEgfmFtZDY0IH5ocHBhIH5pYTY0IH5wcGMgfnBwYzY0IH5zcGFyYyB+eDg2IH54ODYtZmJz ZCIKIyBnc3RyZWFtZXIgZm9yIGF1ZGlvLWlubGluZSwgd2hlbiBpdCB1c2VzIDAuMTAKSVVTRT0i Y3J5cHQgZGJ1cyBkZWJ1ZyBkb2MgaGFsIGlwdjYga2VyYmVyb3Mga3JiNCBsZGFwIG1vbm8gbmV0 d29ya21hbmFnZXIgbm50cCBwZGEgcHJvZmlsZSBzcGVsbCBzc2wiCgojIFBhbmdvIGRlcGVuZGVu Y3kgcmVxdWlyZWQgdG8gYXZvaWQgZm9udCByZW5kZXJpbmcgcHJvYmxlbXMKUkRFUEVORD0iCgk+ PXgxMS1saWJzL2d0aystMi4xMAoJPj1nbm9tZS1leHRyYS9ldm9sdXRpb24tZGF0YS1zZXJ2ZXIt MS4xMS45MAoJPj14MTEtdGhlbWVzL2dub21lLWljb24tdGhlbWUtMS4yCgk+PWdub21lLWJhc2Uv Z25vbWUtdmZzLTIuNAoJPj1nbm9tZS1iYXNlL2xpYmJvbm9ib3VpLTIuNC4yCgk+PWdub21lLWJh c2UvbGliYm9ub2JvLTIuMTYKCT49Z25vbWUtZXh0cmEvZ3RraHRtbC0zLjE2Cgk+PWdub21lLWJh c2UvZ2NvbmYtMgoJPj1nbm9tZS1iYXNlL2xpYmdsYWRlLTIKCT49Z25vbWUtYmFzZS9saWJnbm9t ZWNhbnZhcy0yCgk+PWdub21lLWJhc2UvbGliZ25vbWV1aS0yCgk+PWRldi1saWJzL2xpYnhtbDIt MgoJZGJ1cz8gKCBkZXYtbGlicy9kYnVzLWdsaWIgKQoJaGFsPyAoID49c3lzLWFwcHMvaGFsLTAu NS40ICkKCXgxMS1saWJzL2xpYm5vdGlmeQoJcGRhPyAoCgkJPj1hcHAtcGRhL2dub21lLXBpbG90 LTIuMC4xNQoJCT49YXBwLXBkYS9nbm9tZS1waWxvdC1jb25kdWl0cy0yICkKCWRldi1saWJzL2F0 awoJc3NsPyAoCgkJPj1kZXYtbGlicy9uc3ByLTQuNi4xCgkJPj1kZXYtbGlicy9uc3MtMy4xMSAp CgluZXR3b3JrbWFuYWdlcj8gKCBuZXQtbWlzYy9uZXR3b3JrbWFuYWdlciApCgk+PW5ldC1saWJz L2xpYnNvdXAtMi4yLjk2OjIuMgoJa2VyYmVyb3M/ICggdmlydHVhbC9rcmI1ICkKCWtyYjQ/ICgg dmlydHVhbC9rcmI1ICkKCT49ZGV2LWxpYnMvZ2xpYi0yLjEwCgk+PWdub21lLWJhc2Uvb3JiaXQt Mi45LjgKCXNwZWxsPyAoID49YXBwLXRleHQvZ25vbWUtc3BlbGwtMS4wLjUgKQoJY3J5cHQ/ICgg fHwgKCA+PWFwcC1jcnlwdC9nbnVwZy0yLjAuMS1yMiA9YXBwLWNyeXB0L2dudXBnLTEuNCogKSAp CglsZGFwPyAoID49bmV0LW5kcy9vcGVubGRhcC0yICkKCW1vbm8/ICggPj1kZXYtbGFuZy9tb25v LTEgKSIKIwlnc3RyZWFtZXI/ICgKIwkJPj1tZWRpYS1saWJzL2dzdHJlYW1lci0wLjEwCiMJCT49 bWVkaWEtbGlicy9nc3QtcGx1Z2lucy1iYXNlLTAuMTAgKQoKREVQRU5EPSIke1JERVBFTkR9Cgk+ PWRldi11dGlsL3BrZ2NvbmZpZy0wLjE2Cgk+PWRldi11dGlsL2ludGx0b29sLTAuMzUuNQoJc3lz LWRldmVsL2dldHRleHQKCXN5cy1kZXZlbC9iaXNvbgoJYXBwLXRleHQvc2Nyb2xsa2VlcGVyCgk+ PWdub21lLWJhc2UvZ25vbWUtY29tbW9uLTIuMTIuMAoJPj1hcHAtdGV4dC9nbm9tZS1kb2MtdXRp bHMtMC45LjEKCWRvYz8gKCA+PWRldi11dGlsL2d0ay1kb2MtMC42ICkiCgpET0NTPSJBVVRIT1JT IENoYW5nZUxvZyogSEFDS0lORyBNQUlOVEFJTkVSUyBORVdTKiBSRUFETUUiCkVMVENPTkY9Ii0t cmV2ZXJzZS1kZXBzIgoKcGtnX3NldHVwKCkgewoJRzJDT05GPSItLXdpdGhvdXQta2RlLWFwcGxu ay1wYXRoICAgICAgICBcCgkJLS1lbmFibGUtcGx1Z2lucz1leHBlcmltZW50YWwgICAgXAoJCSQo dXNlX2VuYWJsZSBzc2wgbnNzKSAgICAgICAgICAgIFwKCQkkKHVzZV9lbmFibGUgc3NsIHNtaW1l KSAgICAgICAgICBcCgkJJCh1c2VfZW5hYmxlIGlwdjYpICAgICAgICAgICAgICAgXAoJCSQodXNl X2VuYWJsZSBtb25vKSAgICAgICAgICAgICAgIFwKCQkkKHVzZV9lbmFibGUgbm50cCkgICAgICAg ICAgICAgICBcCgkJJCh1c2VfZW5hYmxlIHBkYSBwaWxvdC1jb25kdWl0cykgXAoJCSQodXNlX2Vu YWJsZSBwcm9maWxlIHByb2ZpbGluZykgIFwKCQkkKHVzZV93aXRoIGxkYXAgb3BlbmxkYXApICAg ICAgICBcCgkJJCh1c2Vfd2l0aCBrZXJiZXJvcyBrcmI1IC91c3IpIgoKCSMgV2UgbmVlZCBhIGdy YXBoaWNhbCBwaW5lbnRyeSBmcm9udGVuZCB0byBiZSBhYmxlIHRvIGFzayBmb3IgdGhlIEdQRwoJ IyBwYXNzd29yZCBmcm9tIGluc2lkZSBldm9sdXRpb24sIGJ1ZyAxNjAzMDIKCWlmIHVzZSBjcnlw dCAmJiBoYXNfdmVyc2lvbiAnPj1hcHAtY3J5cHQvZ251cGctMi4wLjEtcjInOyB0aGVuCgkJaWYg ISBidWlsdF93aXRoX3VzZSAtbyBhcHAtY3J5cHQvcGluZW50cnkgZ3RrIHF0MzsgdGhlbgoJCQlk aWUgIllvdSBtdXN0IGJ1aWxkIGFwcC1jcnlwdC9waW5lbnRyeSB3aXRoIEdUSyBvciBRVDMgc3Vw cG9ydCIKCQlmaQoJZmkKCglpZiB1c2Uga3JiNCAmJiAhIGJ1aWx0X3dpdGhfdXNlIHZpcnR1YWwv a3JiNSBrcmI0OyB0aGVuCgkJZXdhcm4KCQlld2FybiAiSW4gb3JkZXIgdG8gYWRkIGtlcmJlcm9z IDQgc3VwcG9ydCwgeW91IGhhdmUgdG8gZW1lcmdlIgoJCWV3YXJuICJ2aXJ0dWFsL2tyYjUgd2l0 aCB0aGUgJ2tyYjQnIFVTRSBmbGFnIGVuYWJsZWQgYXMgd2VsbC4iCgkJZXdhcm4KCQlld2FybiAi U2tpcHBpbmcgZm9yIG5vdy4iCgkJZXdhcm4KCQlHMkNPTkY9IiR7RzJDT05GfSAtLXdpdGhvdXQt a3JiNCIKCWVsc2UKCQlHMkNPTkY9IiR7RzJDT05GfSAkKHVzZV93aXRoIGtyYjQga3JiNCAvdXNy KSIKCWZpCgoJIyBkYW5nIC0gSSd2ZSBjaGFuZ2VkIHRoaXMgdG8gZG8gLS1lbmFibGUtcGx1Z2lu cz1leHBlcmltZW50YWwuICBUaGlzIHdpbGwgYXV0b2RldGVjdAoJIyBuZXctbWFpbC1ub3RpZnkg YW5kIGV4Y2hhbmdlLCBidXQgdGhhdCBjYW5ub3QgYmUgaGVscGVkIGZvciB0aGUgbW9tZW50LgoJ IyBUaGV5IHNob3VsZCBiZSBjaGFuZ2VkIHRvIGRlcGVuZCBvbiBhIC0tZW5hYmxlLTxmb28+IGxp a2UgbW9ubyBpcy4gIFRoaXMKCSMgY2xlYW5zIHVwIGEgdG9uIG9mIGNyYXAgZnJvbSB0aGlzIGVi dWlsZC4KfQoKc3JjX3VucGFjaygpIHsKCWdub21lMl9zcmNfdW5wYWNrCgoJIyBNYWlsLXJlbW90 ZSBkb2Vzbid0IGJ1aWxkCgllcGF0Y2ggIiR7RklMRVNESVJ9Ii8ke1BOfS0yLjEyLjEtbWFpbC1y ZW1vdGUtYnJva2VuLnBhdGNoCgoJIyBGaXggdGltZXpvbmUgb2Zmc2V0cyBvbiBmYnNkLiAgYnVn ICMxODM3MDgKCWVwYXRjaCAiJHtGSUxFU0RJUn0iLyR7UE59LTIuMTAuMi1mYnNkLnBhdGNoCgoJ IyBGaXggQ1ZFLTIwMDgtMDA3MgoJZXBhdGNoICIke0ZJTEVTRElSfSIvJHtQTn0tQ1ZFLTIwMDgt MDA3Mi5kaWZmCgoJIyBGaXggdGVzdHMgKGFnYWluKQoJZWNobyAiZXZvbHV0aW9uLWFkZHJlc3Ni b29rLnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCgllY2hvICJldm9sdXRpb24tY2FsZW5k YXIueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMuaW4KCWVjaG8gImV2b2x1dGlvbi1jb21wb3Nl ci1lbnRyaWVzLnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCgllY2hvICJldm9sdXRpb24t ZWRpdG9yLnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCgllY2hvICJldm9sdXRpb24tZXZl bnQtZWRpdG9yLnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCgllY2hvICJldm9sdXRpb24t bWFpbC1nbG9iYWwueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMuaW4KCWVjaG8gImV2b2x1dGlv bi1tYWlsLWxpc3QueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMuaW4KCWVjaG8gImV2b2x1dGlv bi1tYWlsLW1lc3NhZ2UueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMuaW4KCWVjaG8gImV2b2x1 dGlvbi1tYWlsLW1lc3NhZ2VkaXNwbGF5LnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCgll Y2hvICJldm9sdXRpb24tbWVtby1lZGl0b3IueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMuaW4K CWVjaG8gImV2b2x1dGlvbi1tZW1vcy54bWwiID4+ICIke1N9Ii9wby9QT1RGSUxFUy5pbgoJZWNo byAiZXZvbHV0aW9uLW1lc3NhZ2UtY29tcG9zZXIueG1sIiA+PiAiJHtTfSIvcG8vUE9URklMRVMu aW4KCWVjaG8gImV2b2x1dGlvbi1zaWduYXR1cmUtZWRpdG9yLnhtbCIgPj4gIiR7U30iL3BvL1BP VEZJTEVTLmluCgllY2hvICJldm9sdXRpb24tc3Vic2NyaWJlLnhtbCIgPj4gIiR7U30iL3BvL1BP VEZJTEVTLmluCgllY2hvICJldm9sdXRpb24tdGFzay1lZGl0b3IueG1sIiA+PiAiJHtTfSIvcG8v UE9URklMRVMuaW4KCWVjaG8gImV2b2x1dGlvbi10YXNrcy54bWwiID4+ICIke1N9Ii9wby9QT1RG SUxFUy5pbgoJZWNobyAiZXZvbHV0aW9uLnhtbCIgPj4gIiR7U30iL3BvL1BPVEZJTEVTLmluCn0K CnNyY19jb21waWxlKCkgewoJIyBVc2UgTlNTL05TUFIgb25seSBpZiAnc3NsJyBpcyBlbmFibGVk LgoJaWYgdXNlIHNzbCA7IHRoZW4KCQlzZWQgLWkgLWUgInN8bW96aWxsYS1uc3N8bnNzfAoJCQlz fG1vemlsbGEtbnNwcnxuc3ByfCIgIiR7U30iL2NvbmZpZ3VyZQoJCUcyQ09ORj0iJHtHMkNPTkZ9 IC0tZW5hYmxlLW5zcz15ZXMiCgllbHNlCgkJRzJDT05GPSIke0cyQ09ORn0gLS13aXRob3V0LW5z cHItbGlicyAtLXdpdGhvdXQtbnNwci1pbmNsdWRlcyBcCgkJCS0td2l0aG91dC1uc3MtbGlicyAt LXdpdGhvdXQtbnNzLWluY2x1ZGVzIgoJZmkKCgkjIHByb2JsZW1zIHdpdGggLU8zIG9uIGdjYy0z LjMuMQoJcmVwbGFjZS1mbGFncyAtTzMgLU8yCgoJaWYgWyAiJHtBUkNIfSIgPSAiaHBwYSIgXTsg dGhlbgoJCWFwcGVuZC1mbGFncyAiLWZQSUMgLWZmdW5jdGlvbi1zZWN0aW9ucyIKCQlleHBvcnQg TERGTEFHUz0iLWZmdW5jdGlvbi1zZWN0aW9ucyAtV2wsLS1zdHViLWdyb3VwLXNpemU9MjUwMDAi CglmaQoKCWdub21lMl9zcmNfY29tcGlsZQp9Cgpwa2dfcG9zdGluc3QoKSB7Cglnbm9tZTJfcGtn X3Bvc3RpbnN0CgoJZWxvZyAiVG8gY2hhbmdlIHRoZSBkZWZhdWx0IGJyb3dzZXIgaWYgeW91IGFy ZSBub3QgdXNpbmcgR05PTUUsIGRvOiIKCWVsb2cgImdjb25mdG9vbC0yIC0tc2V0IC9kZXNrdG9w L2dub21lL3VybC1oYW5kbGVycy9odHRwL2NvbW1hbmQgLXQgc3RyaW5nICdtb3ppbGxhICVzJyIK CWVsb2cgImdjb25mdG9vbC0yIC0tc2V0IC9kZXNrdG9wL2dub21lL3VybC1oYW5kbGVycy9odHRw cy9jb21tYW5kIC10IHN0cmluZyAnbW96aWxsYSAlcyciCgllbG9nICIiCgllbG9nICJSZXBsYWNl ICdtb3ppbGxhICVzJyB3aXRoIHdoaWNoIGV2ZXIgYnJvd3NlciB5b3UgdXNlLiIKCWVsb2cgIiIK CWVsb2cgIkp1bmsgZmlsdGVycyBhcmUgbm93IGEgcnVuLXRpbWUgY2hvaWNlLiBZb3Ugd2lsbCBn ZXQgYSBjaG9pY2Ugb2YiCgllbG9nICJib2dvZmlsdGVyIG9yIHNwYW1hc3Nhc3NpbiBiYXNlZCBv biB3aGljaCB5b3UgaGF2ZSBpbnN0YWxsZWQiCgllbG9nICIiCgllbG9nICJZb3UgaGF2ZSB0byBp bnN0YWxsIG9uZSBvZiB0aGVzZSBmb3IgdGhlIHNwYW0gZmlsdGVyaW5nIHRvIGFjdHVhbGx5IHdv cmsiCn0K