-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
                         AUSCERT Security Bulletin

                               ASB-2021.0138
                    Oracle MySQL Critical Patch Update
                               21 July 2021

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:          MySQL Cluster
                  MySQL Connectors
                  MySQL Enterprise Monitor
                  MySQL Server
Operating System: Windows
                  UNIX variants (UNIX, Linux, OSX)
Impact/Access:    Execute Arbitrary Code/Commands -- Remote/Unauthenticated
                  Modify Arbitrary Files          -- Existing Account      
                  Denial of Service               -- Remote/Unauthenticated
                  Access Confidential Data        -- Remote/Unauthenticated
Resolution:       Patch/Upgrade
CVE Names:        CVE-2021-25122 CVE-2021-22901 CVE-2021-22884
                  CVE-2021-3450 CVE-2021-2444 CVE-2021-2441
                  CVE-2021-2440 CVE-2021-2437 CVE-2021-2429
                  CVE-2021-2427 CVE-2021-2426 CVE-2021-2425
                  CVE-2021-2424 CVE-2021-2422 CVE-2021-2418
                  CVE-2021-2417 CVE-2021-2412 CVE-2021-2411
                  CVE-2021-2410 CVE-2021-2402 CVE-2021-2399
                  CVE-2021-2390 CVE-2021-2389 CVE-2021-2387
                  CVE-2021-2385 CVE-2021-2384 CVE-2021-2383
                  CVE-2021-2374 CVE-2021-2372 CVE-2021-2370
                  CVE-2021-2367 CVE-2021-2357 CVE-2021-2356
                  CVE-2021-2354 CVE-2021-2352 CVE-2021-2342
                  CVE-2021-2340 CVE-2021-2339 CVE-2019-17543
Reference:        ASB-2021.0135
                  ASB-2021.0076
                  ESB-2021.2408
                  ESB-2021.2381
                  ESB-2021.2380

OVERVIEW

        Multiple vulnerabilities have been identified in :
         o MySQL Cluster, versions 8.0.25 and prior
         o MySQL Connectors, versions 8.0.23 and prior
         o MySQL Enterprise Monitor, versions 8.0.23 and prior
         o MySQL Server, versions 5.7.34 and prior, 8.0.25 and prior
        [1]


IMPACT

        The vendor has provided the following information regarding the
        vulnerabilities:
        
        "This Critical Patch Update contains 41 new security patches for
        Oracle MySQL. 10 of these vulnerabilities may be remotely exploitable
        without authentication, i.e., may be exploited over a network without
        requiring user credentials." [1]
        
        CVE-2021-22884
          8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows unauthenticated attacker with
        network access via multiple protocols to compromise MySQL Cluster.
        Successful attacks require human interaction from a person other than
        the attacker. Successful attacks of this vulnerability can result in
        takeover of MySQL Cluster.
         Affects:
         o MySQL Cluster 8.0.25 and prior
        
        CVE-2021-22901
          8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows unauthenticated
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        takeover of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-25122
          7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
        Supported versions that are affected are 8.0.23 and prior. Easily
        exploitable vulnerability allows unauthenticated attacker with
        network access via HTTPS/2 to compromise MySQL Enterprise Monitor.
        Successful attacks of this vulnerability can result in unauthorized
        access to critical data or complete access to all MySQL Enterprise
        Monitor accessible data.
         Affects:
         o MySQL Enterprise Monitor 8.0.23 and prior
        
        CVE-2019-17543
          7.5 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows low privileged
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        takeover of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        [WARNING] Found details of CVE vary depending upon products
        
        CVE-2021-3450
          7.4 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
        Supported versions that are affected are 8.0.23 and prior. Difficult
        to exploit vulnerability allows unauthenticated attacker with network
        access via multiple protocols to compromise MySQL Connectors.
        Successful attacks of this vulnerability can result in unauthorized
        creation, deletion or modification access to critical data or all
        MySQL Connectors accessible data as well as unauthorized access to
        critical data or complete access to all MySQL Connectors accessible
        data.
         Affects:
         o MySQL Connectors 8.0.23 and prior
         o MySQL Connectors 8.0.23 and prior
         o MySQL Enterprise Monitor 8.0.23 and prior
        
        CVE-2021-2417
          6.0 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server as well as unauthorized update, insert or delete
        access to some of MySQL Server accessible data and unauthorized read
        access to a subset of MySQL Server accessible data.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2389
          5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows unauthenticated
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2390
          5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows unauthenticated
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2429
          5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Difficult
        to exploit vulnerability allows unauthenticated attacker with network
        access via multiple protocols to compromise MySQL Server. Successful
        attacks of this vulnerability can result in unauthorized ability to
        cause a hang or frequently repeatable crash (complete DOS) of MySQL
        Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2356
          5.9 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows low privileged
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server as well as unauthorized update, insert
        or delete access to some of MySQL Server accessible data.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2385
          5.0 AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows high privileged
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server as well as unauthorized update, insert
        or delete access to some of MySQL Server accessible data.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2339
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2352
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2399
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2370
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2440
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2354
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2402
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2342
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Easily exploitable vulnerability allows high privileged
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2357
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2367
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2412
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.21 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.21 and prior
        
        CVE-2021-2383
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2384
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2387
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2444
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.23 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.23 and prior
        
        CVE-2021-2410
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2418
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2425
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2426
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2427
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2437
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2441
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2422
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2424
          4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a hang or frequently repeatable crash (complete DOS)
        of MySQL Server.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2372
          4.4 AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
        Supported versions that are affected are 5.7.34 and prior and 8.0.25
        and prior. Difficult to exploit vulnerability allows high privileged
        attacker with network access via multiple protocols to compromise
        MySQL Server. Successful attacks of this vulnerability can result in
        unauthorized ability to cause a hang or frequently repeatable crash
        (complete DOS) of MySQL Server.
         Affects:
         o MySQL Server 5.7.34 and prior, 8.0.25 and prior
        
        CVE-2021-2374
          4.1 AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
        Supported versions that are affected are 8.0.25 and prior. Difficult
        to exploit vulnerability allows high privileged attacker with logon
        to the infrastructure where MySQL Server executes to compromise MySQL
        Server. Successful attacks of this vulnerability can result in
        unauthorized access to critical data or complete access to all MySQL
        Server accessible data.
         Affects:
         o MySQL Server 8.0.25 and prior
        
        CVE-2021-2411
          3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
        Supported versions that are affected are 8.0.25 and prior. Difficult
        to exploit vulnerability allows unauthenticated attacker with network
        access via multiple protocols to compromise MySQL Cluster. Successful
        attacks of this vulnerability can result in unauthorized ability to
        cause a partial denial of service (partial DOS) of MySQL Cluster.
         Affects:
         o MySQL Cluster 8.0.25 and prior
        
        CVE-2021-2340
          2.7 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
        Supported versions that are affected are 8.0.25 and prior. Easily
        exploitable vulnerability allows high privileged attacker with
        network access via multiple protocols to compromise MySQL Server.
        Successful attacks of this vulnerability can result in unauthorized
        ability to cause a partial denial of service (partial DOS) of MySQL
        Server.
         Affects:
         o MySQL Server 8.0.25 and prior


MITIGATION

        Oracle states:
        
        "Due to the threat posed by a successful attack, Oracle strongly
        recommends that customers apply CPU fixes as soon as possible. Until
        you apply the CPU fixes, it may be possible to reduce the risk of
        successful attack by blocking network protocols required by an
        attack. For attacks that require certain privileges or access to
        certain packages, removing the privileges or the ability to access
        the packages from users that do not need the privileges may help
        reduce the risk of successful attack. Both approaches may break
        application functionality, so Oracle strongly recommends that
        customers test changes on non-production systems. Neither approach
        should be considered a long-term solution as neither corrects the
        underlying problem." [1]


REFERENCES

        [1] Oracle Critical Patch Update Advisory - July 2021
            https://www.oracle.com/security-alerts/cpujul2021.html

        [2] Text Form of Oracle Critical Patch Update - July 2021 Risk Matrices
            https://www.oracle.com/security-alerts/cpujul2021verbose.html

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours 
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBYPdn/uNLKJtyKPYoAQiSAg/9Ffh+HLdv8qrIGchaYn4xA7liSq1JuMu5
mTx6qsLw95m7HZhE+urx4rabR4GfL5k9bcbP6Bv9CxJiofQlu2ZiJGH6aza1VLJC
ddqxq+gNadTo8Bm/N173NgdDwDH125SakrFFC3+vjLAyL9u1oWfYszEeS86K6ENA
j44DLkXcuQiD89FSh+ef0P32tx5gXmyxmyzoNN6MelfiiMFsywrT/eHk2n9ROL0s
5hd98EKennN1+R6UOyLHhTEe8Kb0VEA3WlRGcrHxhHoaYdFownjXErIjOotdDri+
4IHSESrC6On40oiZdZNLDTPdgIN7K8HvyEMUtKOb1wFVvCZOP3spmyhIMMUcszpq
bHGRVLrqj1uD3abkstqmaiDIPlclpXelPEMG+51VsKNWPIuz9oW4JGauzvZXYdlN
P61zJqkr8TkwA4unDyFhFJuX1Vfwpo8tqN8+1Y8xfTVz9gfBvC2dpH0DwOIQpjT0
Qi3bYRxL7XxSKv7yY3/Sj7zsaf6EQGxQTgtC1FmeNpOk4qGy/QcveJuiViM58YG9
hlf74xe7qEI2uROIe3Dw+DcnNtMt8oV6f/78mk80ucIYRirb+dyI3dQMyOHmK6Uy
X/HmV8nCQIzhoIZbf+Du2axVT3Y5gX4+mdpXQVx3BH5bcjwzW5POFTSNXBXOi9P1
pfRZcGr6gWM=
=zkMY
-----END PGP SIGNATURE-----