copyright | disclaimer | privacy | contact  
Australia's Leading Computer Emergency Response Team
 
Search this site

 
On this site

 > HOME
 > About AusCERT
 > Membership
 > Contact Us
 > PKI Services
 > Publications
 > Sec. Bulletins
 > Conferences
 > News & Media
 > Services
 > Web Log
 > Site Map
 > Site Help
 > Member login





 

ESB-2012.0705 - [OSX] Safari: Multiple vulnerabilities

Date: 26 July 2012
References: ESB-2011.1032  ASB-2011.0095  ASB-2011.0114.2  ASB-2012.0010  ASB-2012.0019  ASB-2012.0025  ASB-2012.0033  ASB-2012.0040  ASB-2012.0045  ASB-2012.0051  
ASB-2012.0064  ASB-2012.0073  ASB-2012.0096  ESB-2012.0874  ESB-2012.0898  ESB-2012.0911  

Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2012.0705
                     APPLE-SA-2012-07-25-1 Safari 6.0
                               26 July 2012

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:          Safari
Publisher:        Apple
Operating System: Mac OS X
Impact/Access:    Execute Arbitrary Code/Commands -- Remote with User Interaction
                  Cross-site Scripting            -- Remote with User Interaction
                  Denial of Service               -- Remote with User Interaction
                  Provide Misleading Information  -- Remote with User Interaction
                  Access Confidential Data        -- Remote with User Interaction
                  Reduced Security                -- Remote with User Interaction
Resolution:       Patch/Upgrade
CVE Names:        CVE-2012-3697 CVE-2012-3696 CVE-2012-3695
                  CVE-2012-3694 CVE-2012-3693 CVE-2012-3691
                  CVE-2012-3690 CVE-2012-3689 CVE-2012-3686
                  CVE-2012-3683 CVE-2012-3682 CVE-2012-3681
                  CVE-2012-3680 CVE-2012-3679 CVE-2012-3678
                  CVE-2012-3674 CVE-2012-3670 CVE-2012-3669
                  CVE-2012-3668 CVE-2012-3667 CVE-2012-3666
                  CVE-2012-3665 CVE-2012-3664 CVE-2012-3663
                  CVE-2012-3661 CVE-2012-3656 CVE-2012-3655
                  CVE-2012-3653 CVE-2012-3650 CVE-2012-3646
                  CVE-2012-3645 CVE-2012-3644 CVE-2012-3642
                  CVE-2012-3641 CVE-2012-3640 CVE-2012-3639
                  CVE-2012-3638 CVE-2012-3637 CVE-2012-3636
                  CVE-2012-3635 CVE-2012-3634 CVE-2012-3633
                  CVE-2012-3631 CVE-2012-3630 CVE-2012-3629
                  CVE-2012-3628 CVE-2012-3627 CVE-2012-3626
                  CVE-2012-3625 CVE-2012-3620 CVE-2012-3618
                  CVE-2012-3615 CVE-2012-3611 CVE-2012-3610
                  CVE-2012-3609 CVE-2012-3608 CVE-2012-3605
                  CVE-2012-3604 CVE-2012-3603 CVE-2012-3600
                  CVE-2012-3599 CVE-2012-3597 CVE-2012-3596
                  CVE-2012-3595 CVE-2012-3594 CVE-2012-3593
                  CVE-2012-3592 CVE-2012-3591 CVE-2012-3590
                  CVE-2012-3589 CVE-2012-2815 CVE-2012-1521
                  CVE-2012-1520 CVE-2012-0683 CVE-2012-0682
                  CVE-2012-0680 CVE-2012-0679 CVE-2012-0678
                  CVE-2011-3971 CVE-2011-3969 CVE-2011-3968
                  CVE-2011-3966 CVE-2011-3958 CVE-2011-3926
                  CVE-2011-3924 CVE-2011-3913 CVE-2011-3426
                  CVE-2011-3090 CVE-2011-3089 CVE-2011-3086
                  CVE-2011-3081 CVE-2011-3078 CVE-2011-3076
                  CVE-2011-3075 CVE-2011-3074 CVE-2011-3073
                  CVE-2011-3071 CVE-2011-3069 CVE-2011-3068
                  CVE-2011-3067 CVE-2011-3064 CVE-2011-3060
                  CVE-2011-3059 CVE-2011-3053 CVE-2011-3050
                  CVE-2011-3044 CVE-2011-3043 CVE-2011-3042
                  CVE-2011-3041 CVE-2011-3040 CVE-2011-3039
                  CVE-2011-3038 CVE-2011-3037 CVE-2011-3036
                  CVE-2011-3035 CVE-2011-3034 CVE-2011-3032
                  CVE-2011-3027 CVE-2011-3021 CVE-2011-3016
                  CVE-2011-2845  

Reference:        ASB-2012.0096
                  ASB-2012.0073
                  ASB-2012.0064
                  ASB-2012.0051
                  ASB-2012.0045
                  ASB-2012.0040
                  ASB-2012.0033
                  ASB-2012.0025
                  ASB-2012.0019
                  ASB-2012.0010
                  ASB-2011.0095
                  ESB-2011.1032
                  ASB-2011.0114.2

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2012-07-25-1 Safari 6.0

Safari 6.0 is now available and addresses the following:

Safari
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to a cross-
site scripting attack
Description:  A cross-site scripting issue existed in the handling of
feed:// URLs. This update removes handling of feed:// URLs.
CVE-ID
CVE-2012-0678 : Masato Kinugawa

Safari
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may cause files from
the user's system to be sent to a remote server
Description:  An access control issue existed in the handling of
feed:// URLs. This update removes handling of feed:// URLs.
CVE-ID
CVE-2012-0679 : Aaron Sigel of vtty.com

Safari
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Passwords may autocomplete even when the site specifies that
autocomplete should be disabled
Description:  Password input elements with the autocomplete attribute
set to "off" were being autocompleted. This update addresses the
issue by improved handling of the autocomplete attribute.
CVE-ID
CVE-2012-0680 : Dan Poltawski of Moodle

Safari Downloads
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Opening maliciously crafted files on certain websites may
lead to a cross-site scripting attack
Description:  An issue existed in Safari's support for the
'attachment' value for the HTTP Content-Disposition header. This
header is used by many websites to serve files that were uploaded to
the site by a third-party, such as attachments in web-based e-mail
applications. Any script in files served with this header value would
run as if the file had been served inline, with full access to other
resources on the origin server. This issue is addressed by
downloading resources served with this header, rather than displaying
them inline.
CVE-ID
CVE-2011-3426 : Mickey Shkatov of laplinker.com, Kyle Osborn,
Hidetake Jo at Microsoft and Microsoft Vulnerability Research (MSVR)

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description:  Multiple memory corruption issues existed in WebKit.
These issues are addressed through improved memory handling.
CVE-ID
CVE-2011-3016 : miaubiz
CVE-2011-3021 : Arthur Gerkis
CVE-2011-3027 : miaubiz
CVE-2011-3032 : Arthur Gerkis
CVE-2011-3034 : Arthur Gerkis
CVE-2011-3035 : wushi of team509 working with iDefense VCP, Arthur
Gerkis
CVE-2011-3036 : miaubiz
CVE-2011-3037 : miaubiz
CVE-2011-3038 : miaubiz
CVE-2011-3039 : miaubiz
CVE-2011-3040 : miaubiz
CVE-2011-3041 : miaubiz
CVE-2011-3042 : miaubiz
CVE-2011-3043 : miaubiz
CVE-2011-3044 : Arthur Gerkis
CVE-2011-3050 : miaubiz
CVE-2011-3053 : miaubiz
CVE-2011-3059 : Arthur Gerkis
CVE-2011-3060 : miaubiz
CVE-2011-3064 : Atte Kettunen of OUSPG
CVE-2011-3068 : miaubiz
CVE-2011-3069 : miaubiz
CVE-2011-3071 : pa_kt working with HP's Zero Day Initiative
CVE-2011-3073 : Arthur Gerkis
CVE-2011-3074 : Slawomir Blazek
CVE-2011-3075 : miaubiz
CVE-2011-3076 : miaubiz
CVE-2011-3078 : Martin Barbella of the Google Chrome Security Team
CVE-2011-3081 : miaubiz
CVE-2011-3086 : Arthur Gerkis
CVE-2011-3089 : Skylined of the Google Chrome Security Team, miaubiz
CVE-2011-3090 : Arthur Gerkis
CVE-2011-3913 : Arthur Gerkis
CVE-2011-3924 : Arthur Gerkis
CVE-2011-3926 : Arthur Gerkis
CVE-2011-3958 : miaubiz
CVE-2011-3966 : Aki Helin of OUSPG
CVE-2011-3968 : Arthur Gerkis
CVE-2011-3969 : Arthur Gerkis
CVE-2011-3971 : Arthur Gerkis
CVE-2012-0682 : Apple Product Security
CVE-2012-0683 : Dave Mandelin of Mozilla
CVE-2012-1520 : Martin Barbella of the Google Chrome Security Team
using AddressSanitizer, Jose A. Vazquez of spa-s3c.blogspot.com
working with iDefense VCP
CVE-2012-1521 : Skylined of the Google Chrome Security Team, Jose A.
Vazquez of spa-s3c.blogspot.com working with iDefense VCP
CVE-2012-3589 : Dave Mandelin of Mozilla
CVE-2012-3590 : Apple Product Security
CVE-2012-3591 : Apple Product Security
CVE-2012-3592 : Apple Product Security
CVE-2012-3593 : Apple Product Security
CVE-2012-3594 : miaubiz
CVE-2012-3595 : Martin Barbella of Google Chrome Security
CVE-2012-3596 : Skylined of the Google Chrome Security Team
CVE-2012-3597 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3599 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3600 : David Levin of the Chromium development community
CVE-2012-3603 : Apple Product Security
CVE-2012-3604 : Skylined of the Google Chrome Security Team
CVE-2012-3605 : Cris Neckar of the Google Chrome Security team
CVE-2012-3608 : Skylined of the Google Chrome Security Team
CVE-2012-3609 : Skylined of the Google Chrome Security Team
CVE-2012-3610 : Skylined of the Google Chrome Security Team
CVE-2012-3611 : Apple Product Security
CVE-2012-3615 : Stephen Chenney of the Chromium development community
CVE-2012-3618 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3620 : Abhishek Arya of Google Chrome Security Team
CVE-2012-3625 : Skylined of Google Chrome Security Team
CVE-2012-3626 : Apple Product Security
CVE-2012-3627 : Skylined and Abhishek Arya of Google Chrome Security
team
CVE-2012-3628 : Apple Product Security
CVE-2012-3629 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3630 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3631 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3633 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3634 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3635 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3636 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3637 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3638 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3639 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3640 : miaubiz
CVE-2012-3641 : Slawomir Blazek
CVE-2012-3642 : miaubiz
CVE-2012-3644 : miaubiz
CVE-2012-3645 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3646 : Julien Chaffraix of the Chromium development
community, Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3653 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3655 : Skylined of the Google Chrome Security Team
CVE-2012-3656 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3661 : Apple Product Security
CVE-2012-3663 : Skylined of Google Chrome Security Team
CVE-2012-3664 : Thomas Sepez of the Chromium development community
CVE-2012-3665 : Martin Barbella of Google Chrome Security Team using
AddressSanitizer
CVE-2012-3666 : Apple
CVE-2012-3667 : Trevor Squires of propaneapp.com
CVE-2012-3668 : Apple Product Security
CVE-2012-3669 : Apple Product Security
CVE-2012-3670 : Abhishek Arya of Google Chrome Security Team using
AddressSanitizer, Arthur Gerkis
CVE-2012-3674 : Skylined of Google Chrome Security Team
CVE-2012-3678 : Apple Product Security
CVE-2012-3679 : Chris Leary of Mozilla
CVE-2012-3680 : Skylined of Google Chrome Security Team
CVE-2012-3681 : Apple
CVE-2012-3682 : Adam Barth of the Google Chrome Security Team
CVE-2012-3683 : wushi of team509 working with iDefense VCP
CVE-2012-3686 : Robin Cao of Torch Mobile (Beijing)

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Dragging and dropping selected text on a web page may lead
to a cross-site information disclosure
Description:  A cross-origin issue existed in the handling of drag
and drop events. This issue is addressed through improved origin
tracking.
CVE-ID
CVE-2012-3689 : David Bloom of Cue

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Dragging and dropping selected text on a web page may cause
files from the user's system to be sent to a remote server
Description:  An access control issue existed in the handling of drag
and drop events. This issue is addressed through improved origin
tracking.
CVE-ID
CVE-2012-3690 : David Bloom of Cue

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to a cross-
site disclosure of information
Description:  A cross-origin issue existed in the handling of CSS
property values. This issue is addressed through improved origin
tracking.
CVE-ID
CVE-2012-3691 : Apple

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  A malicious website may be able to replace the contents of
an iframe on another site
Description:  A cross-origin issue existed in the handling of iframes
in popup windows. This issue is addressed through improved origin
tracking.
CVE-ID
CVE-2011-3067 : Sergey Glazunov

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to a cross-
site disclosure of information
Description:  A cross-origin issue existed in the handling of iframes
and fragment identifiers. This issue is addressed through improved
origin tracking.
CVE-ID
CVE-2012-2815 : Elie Bursztein, Baptiste Gourdin, Gustav Rydstedt,
and Dan Boneh of the Stanford University Security Laboratory

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Look-alike characters in a URL could be used to masquerade a
website
Description:  The International Domain Name (IDN) support and Unicode
fonts embedded in Safari could have been used to create a URL which
contains look-alike characters. These could have been used in a
malicious website to direct the user to a spoofed site that visually
appears to be a legitimate domain. This issue is addressed by
supplementing WebKit's list of known look-alike characters. Look-
alike characters are rendered in Punycode in the address bar.
CVE-ID
CVE-2012-3693 : Matt Cooley of Symantec

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Dragging and dropping a file to Safari may reveal the
filesystem path of the file to the website
Description:  An information disclosure issue existed in the handling
of dragged files. This issue is addressed through improved handling
of dragged files.
CVE-ID
CVE-2012-3694 : Daniel Cheng of Google, Aaron Sigel of vtty.com

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to a cross-
site scripting attack
Description:  A canonicalization issue existed in the handling of
URLs. This may have led to cross-site scripting on sites which use
the location.href property. This issue is addressed through improved
canonicalization of URLs.
CVE-ID
CVE-2012-3695 : Masato Kinugawa

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to HTTP
request splitting
Description:  An HTTP header injection issue existed in the handling
of WebSockets. This issue is addressed through improved WebSockets
URI sanitization.
CVE-ID
CVE-2012-3696 : David Belcher of the BlackBerry Security Incident
Response Team

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  A maliciously crafted website may be able to spoof the value
in the URL bar
Description:  A state management issue existed in the handling of
session history. Navigations to a fragment on the current page may
cause Safari to display incorrect information in the URL bar. This
issue is addressed through improved session state tracking.
CVE-ID
CVE-2011-2845 : Jordi Chancel

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  An attacker may be able to escape the sandbox and access any
file the current user has access to
Description:  An access control issue existed in the handling of file
URLs. An attacker who gains arbitrary code execution in a Safari
WebProcess may be able to bypass the sandbox and access any file that
the user running Safari has access to. This issue is addressed
through improved handling of file URLs.
CVE-ID
CVE-2012-3697 : Aaron Sigel of vtty.com

WebKit
Available for:  OS X Lion v10.7.4, OS X Lion Server v10.7.4
Impact:  Visiting a maliciously crafted website may lead to the
disclosure of the disclosure of memory contents
Description:  An uninitialized memory access issue existed in the
handling of SVG images. This issue is addressed through improved
memory initialization.
CVE-ID
CVE-2012-3650 : Apple

Safari 6.0 is available via the Apple Software Update
application.

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQIcBAEBAgAGBQJQDy1eAAoJEPefwLHPlZEwJRQP/RJ41oMUhox0171MDfV4rs/h
7PpoGz3ZfIijyzy6KlF6mqdJqy/Oh/iGSJlCxhrboZZWPsgvtCQ7DoNC9p5akeH8
+h5ygcEbNm/bus/MDc0nHtHtXwcRGDLhdKtT6Kf5FUIa/lDUZbPOoe/H0/jQ5ROW
DzIXImuioV2rskQvQVXMlKNVkaxLleStU84bBUwH+cCVNj5u9nWPQ7nLbptCzzG/
aL4t8MLAjkqJc/c3/a5fdqzveY0N21rkVceBeJuY5F+ejtPVCIUhqdIYzQXmZNst
r5aEp1hvuyvFj00T/OT7otW52+cNnXwPOU/h/aT29S6ur9cP0mbvshMDhkESe5dv
HjCRrBlkRlWQiS9u8SMwALLsI83Btk/UN5FNRe2rhtMD6O56B0RecZ14R/Uu6GEl
IDRg72AwVq6NO0hFc+z9xoYrvLnmkD1mTq6HiNVbreFsOwyu/psKPwJsUpYJL+gS
5/u/Nh4XVnbK+MpXwpL22w3kzk8zoYazGmh+5B1DdevazjpKkXxj2l/MRxDEI/AE
pYsgA2EwYpQeow6T69MjCuoiGK9EXSNs3bc6rsd/9WLvEedbGS2SnFYnHIO226cl
OwENb/iR7hIm4JEB9pgLFRxvaWMOQVCuTDXKnnQkXPYNvUYUt4I9IZcURVDNlr+5
R4Tyq4x4MZg/D3Ho0YqS
=K1+I
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBUBCppe4yVqjM2NGpAQJ+DxAAu+GFgHEO2KsEvHJ8G8vwgK6kUIGAH6dG
gnKqOBeVnqrOmkHuixSLvhERYIL8onwvxRAU75P1FH4GuDEhGACsb3ixMV6LzmiB
cxx7wyfquFRu/EuionfvNdD8lwjdLwPtR0FtSam4EyG5bLjIMAy6d49zOgVu8lm+
R63NnAqrCBkXU4abRS2vPUOHetcKx18J4pIiga8mx/Qyjh7E30etIpPq5ggxJVxk
jfob49mW6Hp+MCuSPJpuY0QDCR1jRZ2+Vc9ZjVcYhr0koaWXiMP+Uh/wl5Xn4K5P
FO0FdfMJffQZ69Y3z3OsmR26gcDh2jL+9XRERVUs+HWL7xBWjzrTj05EOaaWVTqb
77RGbMbbx+Da/hSUJHFaHuaFqueC7tbAJ1B6zANaF2WdFWp+SDNjU0pgBBlCKI9K
KyJWtn+nR2i8lABQBr7h7DT0BYWXtSELiyEtW3PH1iH5u2W3jDZMRs0feVXdjV9E
t6PsAItWd/3+OqS4+uVIChYDpjRs/RFCfZ23lYAKzzWLcq+utZIiZ/T+eJ6RHHCw
83GqQLXkZN+oWCSGwPpGbQSEF6enybOhujTaouKZZxosELuDHetKsIuGA08iZ08q
n7FzMun8P+K+QZVzawpYz23193d6U4W0vJDW61ivO5D4rXBpJBJ6xuYjY5Z9fpCU
a4F3FFi+t5k=
=96JM
-----END PGP SIGNATURE-----