DELTA 449708 0 22028 SVN&$<vNJ@h*}rx^Sn0 =_Ae+qR!Z ]*R*]ia/h=iDI,dL9obJ,r'%SWƝ8%;l !Ý 6x@e <ڠU8VlDv2D罐2b#/*6Ecy~ㄡJl:}Vl +Qzfi<˗Y)&z m..IJQ?M+NAj5B F']#c>' $fgBp}C)HC"VFc 1kӷbLRG2%9۷exw-U,&|t*TI>mM?TY%GIu/Hg<_FyicɒLyS&'~?@m6ow9;Ն+N>vx!x^Sr0Qrh64Rxҟ#<$˘bGl۾/wg~Smkʈӯhc?qba&Z]YٷeYu1Im<@vE]zJ,<$,c b2JY 8DtFRD)\;ATWIƓz#^F.g' t28>-=EL.3=~ATq$aG- ,{ʎjoɧ 9.,@c7,qójogi_L/7x5QO_տt vm;4dp vym9*nr+8y(*}z=*ڳOU5GqM?)R@@^M%UVL4wS~(aߧg(N8P~sBG×:5*7SA^@:'{x^]K0ݯx#RzLdE6ɌIIj{@qЋ =§/GZG(e*}{qmmS[d=tCl#Kӣ$n=zmfĠLO /x:x(}͔{' i]Gy8.Yʖ>SIGiD'.0NxDҌqihXLxH’- uh6^F67F;$FTmH]/#.BU%X7vf' x^M ϛ_r._IvWJ*J=ak i;zi,[f@<Glvq b_T{)7M Bh2gO2eG1jPijxY?2/\{)\Pӏ9yW&6jD2돯Mq( 7alj F'Q !89``!¤kHƨ= ׺}Dd>0̎7OH~QU#'>&R~\qv@N~WR~[LLx^Rˎ06NOnwX 9D˳c;e]W_2D?_3tǂ.85Ziq5wnBTф]GyY19W|@:aNƇ!F&Q/o9+oøWtK;d+? eY'Yx^n0S,rISҺAE{(kT}H)r,w3zM[9ݬI[V2Hc@JZ. er#U&Vi&vZ6rTaN?>~4[I,J7k/FkD٭__$E !QyPp.{ۚo J|؟C=%Y$|=qjv:\ǯXfGg]r'H~4 3¨v@!}Ptj/JA uo."Co$t)ld$myEQ_H ~QpvCU,'*RЈ/`]<,}:ՖyRexd2+;yN*v+I͕ϫr24E7:nu"n#(P UPHH&ʎ\iǻ\u,>>:(=tM^ xwFԲ|@@Rr?T''x^R_k0n?ѧ`;v]2m7أ"_[dI;waB8#0w'Il(3ޔlH2[8}eީAo}SP~ML*6Og<;ONxA2#,=GaNӻ_"~chGHS* ިc|z3dº%SW,#r(eXAtoLfmF+&6.$ PgeHk=PBӚHJkZʂgw.neԟٰk&[2IL2VvQ] K *cļ7m7 cO _W9f !j>( 5zib>8{8nPxBɀQUPݲCAXFSҍLu-V`WJs 8TlgC/QD[l0aBIR#"GXlEv@:.'yx^uO0xO.(X!RA$i)ɦ+q{~Ϲ{SxjyO|-/mY&v|¥m>[l~@m/Oˇl#;GCrH+Cb"j=[ z`gż`n Grc3Ely.$ɒYسUCH8TdR@Lb;8@}#^큍a[6j솒qkAOO|b4 4%_ׁԵ[7 = ;yA"te|^i_18mēF2਴b5س+ȉ%yBPe{!Iu;g䌪ĒU<4G[H xvM?V'x^n0S,K{%َ5 4H{D<}I!pD..JWR(ޫM-LSUepUIMbK/BJ b)08rOԒ'O7s.|ɐOt91Ƚ*{аZHڼ[z[7ҫq Ӣ\dE [a9BzLc/I)k~x6aG+T6ВKH1y >EGJA(w`䖢'a!garT6N{fd Ƅ1' xo]đlPC@G6Rڐ#{T`ǹDm3ߝT❞w`Jh/3l]pj0C,KXkIK^p MXVKly|CGkhiqW5,ϊdeeۋdC$d#>R8P?cxvwxEp'fx^;0cWmIv% (g md(==2zݶ2pVh@Ƙz:hKx*( Gy[Owv}-eYq^5mjpMͶR4Ke2A:B-}WP/QC9_^+:D_y&AyBI,:cG0ZKY#OP6A<$3i>Mg5:!M#B# b NӠUO?_X=n2̓4e_]\=ݽ[=Yp~ײ\=2{)zalݖe΅ +Ɖ2H _ʔˀjM"' x^K@W̱=شѢP֏"x[IY٤PuOKxޛ7Ox2=8>`aKRԠE]~i{Rhjv/\Sp"czPD'r}ꚻu`#}׏7ݪ"T! êXÒ/op}N#Wq&;IRdvRd[R&KIqm`ռޜf{~Dviܸ'WѠ('>MRot9rf%Ro5-07-15c21f4e61-65702Added HTTP "Host" header character validation to prevent cache poisoning attacks when base_url auto-detection is used.

Security: Added FSCommand and seekSegmentTime to the "evil attributes" list in CI_Security::xss_clean()5-04-15(8'rV?Z-Y9S7\. '!x^Mk0 =m$M[cڱȵi"~ $YW>]UFb:Q逅jbt2T6V0tu D K]<<]cG5 [OGLWvT#{ +<6?ۚ|l6LzzP Zm]3;M./d7sXu 5WlK#l 2gfzh^,aCًQo|hěiCX$(;#'"VQ|v5z8&4eg87u,!m3R`% /?=mm@ٙ"Nbp2It2Xv(4."u8{ɩ?f[g==v>K_@'x^}Sn0xȒ%%%v@qf1dI|/)%)DAl4ETtˢ 6 Xc?XFhb!?-D-0䗖6ۋ< J>\VͺǢZdQ׸*8BVjYn*Y]ruJl[AQǗwzvy@hxQ-= ^G~ŗ-tIZMۺoʦeilrF9>L6scOci+/PTIx.OJyb{%HQ47-%|Ws_J۝1GE :5a @XӫC(3`T)%Y-ΕHD28m9QJk?Yz` pZ%.p^ >i;j܀7'eղ;*,Hm͡HOpĩ_a!ĐXf2 zVA*AWsi@phl֛ۖ3.m>+&t?Mxkv>]Jl;x^Q[o0~_q4^Cse*R^lh!uN;SӬӌM"crk4,XgT5cKZ@J^? $Q#0xRI]0䑆{G:~5,,Nfn(j]Aa,zwIYvԹ2b4AH/eVU)0vj\P|Ò(FxGF*TD&%3;'Ke#pRj x m$!IkgԊsU 9f\{i4,x:踍\x Nu'C󮔤a'}=$O,NxXs6yF2IRc/^.a"UT}¯[nč3O<gl4/$!yJ&R/HUc5p8b\$}Ku eX&R%`wͪ9#"Nc[mTvO~]'kx^RMo0 =Ba7[Wtb@1 (bBi[,o àIG>x/J *#dRoAH0,bD g|ÏOIʤv%dyT=`-JA; 3R?lYQm(^/|XFϓu4Ea[U.bdA2ʪ6)++E}jAƓ$!_0LJLggF/i:g8^EJeWqaB]YVW;׭;ָo(#N/ @.㸉)O@j\Ö́km&-M?,?❏9 O"; ˣPOQ'?>yb I C8 Gz |0DZikqnb [>h^{8Ï=^ȕLh[b /G6،wrL31:y zk.b曓EǸB`D_P>P>O>O>P=O>O>O>O>O>O>O>O>O>P=Cilla.org/security/announce/2014/mfsa2014-17892022223242526272829303*i#wj'yx^SMo0 =7iϺiVƊv(v"Ӷ$٩(+ 0`|{rEY^&\MhjS蔧]Y`?4ʡZO:/>xmY47iVlRVO҂W?47"x^2fNvuڀcM cXnʁX)HH+^b,aJ6P]I&cfeQut(Py\Fh!qBtOCփA>m/?CӺsN?&xODbĽ1'siB4l/p3zʺcH _h8Z Ge}Jt&>0Y+ P&߼|aԢuc h߈GqdQ,oDh4p$FG>z!aQ.6b[%rPCFRa?kfk:#C)6юf^y'5:tU_+v$4k r5"BG1ja?B@pt='Bx^uR <|]zMID-UmUx`_Ťr(ffw}Bst |p w)bl='Sa6 mrDɪ>ނ2ucpFmEZ~J7՜ia@`ęԿ\q:eNIL0mfSRHJ]Z̷<*=hJ51 02ΔH݆Z @O`H-K2w;q =mȃt58}7m}LDɺ,uFIKzl[ԌVح`Yj)rQ\.uD;vlֻvW-gw>D քpVNޏ'Aպ~H! gdlaólvlzW[)J঩vC䮑j<ߴZu~TbIeھ'#) ?)F+gEP'q bdIYqa{rlRl vSM֭ヨ>y zK.S_Kl7x%KA&OuC}t3unauthenticated clients to send requests to the puppet master which would cause it to load code unsafely. While there are no reported exploits, this vulnerability could cause issues like those described in Rails CVE-2013-0156. This vulnerability only affects puppet masters running Ruby 1.9.3 and high3 CVE-2013-1654 CVE-2013-165537]6]J=v?_oR)-&c}F x~r5[> linux-flashpluginlinux-f10-flashplugin 11.2r202.2587.html">

These updates address vulnerabilities that could cause a crash 676 CVE-2012-5677 CVE-2012-5678 https://www.adobe.com/support/security/bulletins/apsb12-27.html4 ;UץaY49ϙ) Ce^P"ɗ,{N8|ĔINt~4-RYvI\Z,ZS_0Fp"fJ`W$)EU\5zUٹV0VAI-jUm$lČxۡos[2nV|JzyL?=$:#N^@Fv~dL@UA@'xx^ώ S\+ xm'T=U8TTU*'}3uޕ֨葈k [B(ZF g-uS*+DN`uAU赊frB5''zpap"s et`]\4srr2ڴ˼;4mYFN5f tE/MY]Y:%۟@^MJkBdV7n2>RWŐ,N.-&emYE<8czxeF]s*ΑWg4U]srjPU :c*hj6x^*o{%{lw/7g7Qz"zV |5|'S h= LԥX{j6E,e eg7 g`SJəb@I=fœ̡ܔ&TV:wz_Բu:bv U)Y[8~)3E{!kt28%I$.P<F?@v' x^Q0 ǟOaI 4@NNݤ:M{;@$pח~r&MgcA]+!՛'䐧̡Ж⧸= K89хeC<}LD:c]7ǽMX5UQPJR{F*L֭ *' fe~+5U{d{SՙR$cEV뺨*,arÙ) ~@G{XǯغI4e^\< )宨!{72SuT~RvKF!+`^/?(}ʧ.q!d1xF{dxxsxqIҍS ń@И Y7  2iL!2pQ'cod)|DD3iN>HJ@'Ax^Oo0O1;k B"K)R93^LvkO6] )yϖڌvQ'X/nDa,!(Mxl;jMi;+jb-IVl'{BǞM秥]A${ K5u[ç=H[eKkjAM;x~I]Ixe n/<SWQrFlsD!r.xa ,<,Ea268M9LVU؟+VWvDwO}?ƟÖ0q(ةr>5Tq0m`'2N4 x\gAF|6,9lU^ȶ!R78{'꬯:Nz͉ë8\Ԕ~Wxq$AsX'oJJAY@N@O?N@N@N@N@N@N@@@'(x^M0 }CنA.Ŀ}$5=mM 1B QdMF00, $ h°?6m~uvx縳mUl ݱ2Ǝj܇*QnN߿G8%s 4&,RES[HHJ4SH% Ju$%"&5ӥ(5l^>RȀr]N~Lx?p7Xx^SMo0 =/ݖ$]Qb D'Zɓk'{||,m1Q1xH=㑚'5rUn~Zu ɥӭV}Fn`1-R8Ke;|TLUUWպ^uϼ67O_|(B:v. 4vhSp#0nGŭ(%Ht(K`<{B pH(:N 4 `G!Qy;KK' ;g/90x JmgQ1' sYi=Į߉jVZ+6:%N,WZE_H,y?ZGCkpZZZȿN-ouºXg,ڶnXUYo,g.3 ,GHHTLt=]@o!#uꂾ0aے7Gp7i"ƿ\;Π`hNDM~'/x^]AO0+F)Ӵl {Zf^JA{fF|N>n7/Ɩe)t4i~tW?wjҶ)2uyl|q$ia :" 8Z; RX v 3fVzI dC%L6hMQU[6鮳eZײ mf$]kbW//̟]E{SL m6HCft9ҏa ebdG$g-<bK>1z>6]P'7x^SM =o~(w?qZʽ+J./|Iݪbfx t=*EFd)/ݩtŲee+MxĬ+>e.*7ҊFmY\T:^e^L;i(iES|~ vP?W̫cDnO(NVTzbm2{|{gO=F&jYVs0t$˒u8dyotH$C; #z|--yxL%l? mݰidiēOa;zt w?1-l}eb9;ia$[k#4xL+Ə\><~ݭ:K b@1^3F-N0(YQf߲:t撹%d^0E0y^>nvrٶE^)]YQM 4+tMG:Y/jRQHv,0D` $t`Uۢ7wGu@ʩoU>I6('˕\mw7iZ?bU/3|TC63&ue%nZt͊4N;%f~+_WʚźWnm/ζ&f"ul @i9 LL<$ز|4|®##h{z8AD tibk]0J3ݞ9Ǜqئ% TS L񎼡'XNaKM{RmP9HT =IS|'={@cπIKVCI3 >6 w)4 cIIJ&:9L Sn3SmcϏFY^DTMTM?I_A*%pd,>kvAdjDQZiIjxVrE: C Xwt8ĕqO>ՉZlv# I{Uӆ+`L9X݋*<#$l`@8ۢ߀&Y GR;]@MJJ'Rx^=ˎ0 E3_A̦A"&h>ֲLB%QRrR# ThY-:ZaQ 1 *p|nwB(C6WQchD P#g(3+tԨ<$cJx(,VCTQ6}f3~TҌ/^N㠌i̤)kzM;Nt-”8n=m刘:aN3z;Kt񁴥Pm-xv4'@FMU^+ZQ:^$T~xXVV)xbL+huV'x^}SQk0~N~ű9k0d\:#d&>+5T:.A<zt Κ?dP4 $óL[r#*.ACfWG&G q{;$"Rx^Jg'x^}Tao0Sm01Ҵ}V)95c# ͿHVj޻wP2 z CZK۟OГHhd{ ;mt{=VڬdJ{H2" ]V2jglQ< w>o.]b߶sûDJ0== :}|bgT4ΚD{Уtd/d4 $u!q3}Ƹa}f+r$CQiiphi"TH*]M\* szZ#Nu%/^7UcaR`J^8>je=ld}}<Z&k l~|FW!zZ7(o|-OiVsM=dI/_ Sqj1Gz;ֹ! e6L(kN~o' x^Tn0<_ȱ(EJ\`u)z-EEl"R}IK z 9iio5€:b'$fzu]+6E Gq#^kϩ0)Li%EPր?6*g[NS)HYT9 F}+r}LgrqeJsD=q걋Ì",qRјc}3^Ѕ&TNȒm:LIy]Σ9Mn׫vaXlĚ)RVvMXUvn˲{딬C3 g%4"c֍NPF2\ WQ7ܒ(IVJ ܔGKz&B[dnגn˗PW:c,c\v~`'cx^}Sn0='_1ʡ7nKJT=fajl6KweR0 =hhB4PHP\poj^^EPu(\[&yCh!68>k%D|v;6'>DRs?o_S}Ax"Q%I>@mO AY3~=,+Qa?u585F~5b4ЂTECZfn SfUfgXGC:gF>/ q)\∆SR0NfWfK? j"ՈcboY6iﶛJ> WqB*l{obto^twH΍ԙ7uۜ囂̦S

Workaround:url>http://www.mozilla.org/security/announce/mfsa2005-43.html 2005-05-11 2005-05-12 mozilla -- code execution via javascript: IconURL4488|Uyfu!'x^Sn0=_ASݎJ(zN)q$-$eW_Re7X7oV cvDP &"l P!Pv;Be,AyPnx&j(Wiw(xfG"3z87?DQwdD+kCVc2Վ1t$|x;0nREAAR-0i׫m‚%[zCC~42̧>y~y̒dLu~ WַomȪ4[`~W‚uD>&YZ$4)(]P_cd UMoFjǂ&腌u| }D"ild'OYfwȟR)MeqZyٿSQl|skgH. xC,HJ `@6`'$\S+Se=@k gld~W38S~H_@qN' x^n0 ק z]aRx֬zQغ32h 4{Q>$ŖLUgZ@"ZU)X6?JVvp#S%O5 '>߭ޏi -ƾ@Fՠ1P2g'ìD)D$aM}H,I".Zu˰Ep(Pߺ_YA A!J6 I~cxVvk{<"Huz5/ guc/RIXDoL:J*a45E&aMl=P`g|c2v&XypgmSiTiqak a'=%:L+H`5YIa1APw DK5U٬(t:_>m)O-Mߖ67|Mhu"9c#,`VrZ񺸰 C?"Z7k_:ftQG&ʙ˼ ]2oetL'he4e~q5aeK4zqiD-Rs'fx^?o0St)TP PS=8GZ$HJ})VIQGf0rj_b'VEYb{EQȻRmROֱl"k BHZEH^|Pk1̻w(_fsSx3$yӻP˪|*<|3?wM,N`#o쪬Xk)\D6 gcքuTG%6[e|*r͆>0}\am/5 [ ,2֪ӯ犂즢I -aV 8wzC>p%K'vx^]0^VE&bֲ`ZR1}if:`P@Iɖ_-5sʤLVkoM6ĢNlg}|Q)49fCP )%Zm)!)04gqTM~q{=L _/|? 6'&ͨnULv@@N@R*Dx^Sn ]g*,&?ʵԮ]`uS $*uZ5s&˫6|pJwU5\>_&cU\|jS)ʊBþ