Tuesday, February 23, 2016

IT Security Alerts Weekly Digest (14 Feb ~ 20 Feb 2016)

1. Vulnerability in Adobe Flash Player (110714)
[19/02/2016] Vulnerability was identified in the Adobe Flash Player. An attacker could bypass security restrictions and execute arbitrary code on the system. The affected version was not specified.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110714

2. Vulnerability in Cisco ASA (110718)
[19/02/2016] Vulnerability was identified in the Cisco ASA. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. The affected version was not specified.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110718

3. Vulnerabilities in Symantec Encryption Management Server (SYM16-002)
[19/02/2016] Vulnerabilities were identified in the Symantec Encryption Management Server. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 3.3.2 MP12 of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2016&suid=20160218_00

4. Vulnerabilities in Google Chrome
[19/02/2016] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions and execute arbitrary code. These vulnerabilities affect versions prior to 48.0.2564.116 of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:googlechromereleases.blogspot.hk/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110753

5. Vulnerability in B+B SmartWorx VESP211 serial servers (ICSA-16-049-01)
[19/02/2016] Vulnerability was identified in the B+B SmartWorx VESP211 serial servers. An attacker could bypass security restrictions, obtain sensitive information and compromise the system. This vulnerability affects multiple firmware versions of the mentioned product.

URL:ics-cert.us-cert.gov/advisories/ICSA-16-049-01

6. Vulnerabilities in AMX Products (ICSA-16-049-02)
[19/02/2016] Vulnerabilities were identified in the multiple AMX Multiple Products. An attacker could bypass security restrictions, obtain sensitive information and compromise the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:ics-cert.us-cert.gov/advisories/ICSA-16-049-02

7. Vulnerability in LibreOffice
[19/02/2016] Vulnerability was identified in the LibreOffice. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affect versions 5.1.0 and prior of the mentioned product.

URL:www.hkcert.org/my_url/en/alert/16021801
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110712
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110713

8. Security Updates in Oracle Linux (ELSA-2016-0258, ELSA-2016-3519)
[19/02/2016] Oracle has released security update packages for fixing the vulnerabilities identified in the thunderbird and kernel packages for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:linux.oracle.com/errata/ELSA-2016-0258.html
URL:linux.oracle.com/errata/ELSA-2016-3519.html

9. Security Updates in Debian (DSA-3482-1)
[19/02/2016] Debian has released security update packages for fixing the vulnerabilities identified in the libreoffice packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2016/dsa-3482

10. Security Updates in Red Hat Enterprise Linux (RHSA-2016:0258-1)
[19/02/2016] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird packages for Red Hat Enterprise Linux 6. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:rhn.redhat.com/errata/RHSA-2016-0258.html

11. Security Updates in SUSE (openSUSE-SU-2016:0510-1)
[19/02/2016] SUSE has released security update packages for fixing the vulnerabilities identified in the glibc package of openSUSE 13.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html

12. Security Updates in Ubuntu GNU/Linux (USN-2895-1, USN-2903-1)
[19/02/2016] Ubuntu has released security update packages for fixing the vulnerabilities identified in the oxide-qt and nss packages for versions 12.04 LTS, 14.04 LTS and 15.10. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.ubuntu.com/usn/usn-2895-1/
URL:www.ubuntu.com/usn/usn-2903-1/

13. Vulnerabilities in ManageEngine OpUtils (110677, 110678, 110679, 110680)
[18/02/2016] Vulnerabilities were identified in the ManageEngine OpUtils. An attacker could gain elevated privileges, bypass security restrictions, perform cross-site scripting and web cache poisoning attacks. These vulnerabilities affects version 8.0 of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110677
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110678
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110679
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110680

14. Vulnerability in NTP (110676)
[18/02/2016] Vulnerability was identified in the NTP. An attacker could cause a denial of service condition. This vulnerability affect versions 4.2.6p5 and prior of the mentioned product.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110676

15. Security Updates in Red Hat Enterprise Linux (RHSA-2016:0241-1)
[18/02/2016] Red Hat has released security update packages for fixing the vulnerabilities identified in the chromium-browser packages for Red Hat Enterprise Linux 6. Due to multiple errors, an attacker could crash the application, execute arbitrary code and obtain sensitive information.

URL:rhn.redhat.com/errata/RHSA-2016-0241.html

16. Security Updates in SUSE (openSUSE-SU-2016:0490-1)
[18/02/2016] SUSE has released security update packages for fixing the vulnerabilities identified in the glibc packages of openSUSE Leap 42.1. An attacker could execute arbitrary code, bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html

17. Security Updates in Ubuntu GNU/Linux (USN-2901-1, USN-2902-1, USN-2903-1)
[18/02/2016] Ubuntu has released security update packages for fixing the vulnerabilities identified in the xdelta3, graphite2 and nss packages for versions 12.04 LTS, 14.04 LTS and 15.10. Due to multiple errors, an attacker could execute arbitrary code, ause a denial of service condition, crash the system and obtain sensitive information.

URL:www.ubuntu.com/usn/usn-2901-1/
URL:www.ubuntu.com/usn/usn-2902-1/
URL:www.ubuntu.com/usn/usn-2903-1/

18. Vulnerabilities in Cisco Products (cisco-sa-20160216-grid, cisco-sa-20160216-wap)
[17/02/2016] Vulnerabilities were identified in the Cisco 1000 Series Connected Grid Routers and Cisco Small Business 500 Series Wireless Access Point devices. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affects multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap

19. Vulnerability in Hirschmann "Classic Platform" switches (VU#507216)
[17/02/2016] Vulnerability was identified in the Hirschmann "Classic Platform" switches. An attacker could bypass security restrictions, obtain sensitive information and compromise the system. This vulnerability affects versions L2E 09.0.05, L2P 09.0.05, L3E 09.0.05 and L3P 09.0.05, of the mentioned product.

URL:www.kb.cert.org/vuls/id/507216
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110668

20. Vulnerability in GNU C Library (110662)
[17/02/2016] Vulnerability was identified in the GNU C Library (glibc). An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affect version 2.21 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110662

21. Vulnerability in Squid (110669)
[17/02/2016] Vulnerability was identified in the Squid. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affect version 3.5.13 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110669

22. Security Updates in Oracle Linux (ELSA-2016-0175, ELSA-2016-0176, ELSA-2016-0185, ELSA-2016-0188, ELSA-2016-0189, ELSA-2016-0197, ELSA-2016-0204, ELSA-2016-3515, ELSA-2016-3516)
[17/02/2016] Oracle has released security update packages for fixing the vulnerabilities identified in the glibc, kernel, sos, polkit, firefox and 389-ds-base packages for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:linux.oracle.com/errata/ELSA-2016-0175.html
URL:linux.oracle.com/errata/ELSA-2016-0176.html
URL:linux.oracle.com/errata/ELSA-2016-0185.html
URL:linux.oracle.com/errata/ELSA-2016-0188.html
URL:linux.oracle.com/errata/ELSA-2016-0189.html
URL:linux.oracle.com/errata/ELSA-2016-0197.html
URL:linux.oracle.com/errata/ELSA-2016-0204.html
URL:linux.oracle.com/errata/ELSA-2016-3515.html
URL:linux.oracle.com/errata/ELSA-2016-3516.html

23. Security Updates in Debian (DSA-3478-1, DSA-3480-1, DSA-3481-1)
[17/02/2016] Debian has released security update packages for fixing the vulnerabilities identified in the libgcrypt11, eglibc and glibc packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.debian.org/security/2016/dsa-3478
URL:www.debian.org/security/2016/dsa-3480
URL:www.debian.org/security/2016/dsa-3481

24. Security Updates in SUSE (SUSE-SU-2016:0470-1, SUSE-SU-2016:0471-1, SUSE-SU-2016:0472-1, SUSE-SU-2016:0473-1, openSUSE-SU-2016:0476-1)
[17/02/2016] SUSE has released security update packages for fixing the vulnerabilities identified in the glibc and vlc packages of SUSE Linux Enterprise 11 and 12 and openSUSE Leap 42.1. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00040.html

25. Security Updates in Ubuntu GNU/Linux (USN-2855-2, USN-2899-1, USN-2900-1)
[17/02/2016] Ubuntu has released security update packages for fixing the vulnerabilities identified in the samba, libreoffice, eglibc and glibc packages for versions 12.04 LTS, 14.04 LTS and 15.10. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.ubuntu.com/usn/usn-2855-2/
URL:www.ubuntu.com/usn/usn-2899-1/
URL:www.ubuntu.com/usn/usn-2900-1/

26. Vulnerability in Apache Hadoop (110609)
[16/02/2016] Vulnerability was identified in the Apache Hadoop. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects versions prior to 2.7 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110609

27. Vulnerabilities in Cisco Universal Small Cell devices (cisco-sa-20160215-er, cisco-sa-20160215-ie2000)
[16/02/2016] Vulnerabilities were identified in the Cisco Emergency Responder and Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches. An attacker could bypass security restrictions, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affects multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-er
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-ie2000
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110610
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110611

28. Vulnerabilities in F5 Products (SOL02201365, SOL61570943)
[16/02/2016] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, Enterprise Manager, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security, BIG-IQ ADC, BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration and Traffix SDC. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:support.f5.com/kb/en-us/solutions/public/k/02/sol02201365.html
URL:support.f5.com/kb/en-us/solutions/public/k/61/sol61570943.html

29. Vulnerability in FireEye Operating System (110608)
[16/02/2016] Vulnerability was identified in the FireEye Operating System. An attacker could bypass security restrictions. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110608

30. Vulnerability in Kamailio (110603)
[16/02/2016] Vulnerability was identified in the Kamailio. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 4.3.4 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110603

31. Vulnerability in Foomatic (110606)
[16/02/2016] Vulnerability was identified in the Foomatic. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affect version 4.0.6 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110606

32. Vulnerabilities in Xymon (110590, 110591, 110592, 110593, 110594)
[16/02/2016] Vulnerabilities were identified in the Xymon. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 4.3.25 of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110590
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110591
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110592
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110593
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110594

33. Security Updates in Gentoo Linux (GLSA 201602-01)
[16/02/2016] Gentoo has released security update packages for fixing the vulnerabilities identified in the qemu packages for multiple versions of Gentoo Linux. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:security.gentoo.org/glsa/201602-01

34. Security Updates in Mageia (MGASA-2016-0043, MGASA-2016-0044, MGASA-2016-0045, MGASA-2016-0046, MGASA-2016-0047, MGASA-2016-0048, MGASA-2016-0049, MGASA-2016-0050, MGASA-2016-0051, MGASA-2016-0052, MGASA-2016-0053, MGASA-2016-0054, MGASA-2016-0055, MGASA-2016-0056, MGASA-2016-0057, MGASA-2016-0058, MGASA-2016-0059, MGASA-2016-0060, MGASA-2016-0061, MGASA-2016-0062)
[16/02/2016] Mageia has released security update packages for fixing the vulnerabilities identified in the docker, golang, cakephp, cyrus-imapd, gajim, python-nbxmpp, cgit, copy-jdk-configs, java-1.8.0-openjdk, lua-lunit, lua-posix, imlib2, curl, phpmyadmin, phpseclib, krb5, socat, mbedtls, hiawatha, belle-sip, linphone, pdns, privoxy, openssl, radicale, php, jasper, ffmpeg, nettle2.7, nettle and flash-player-plugin packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:advisories.mageia.org/MGASA-2016-0043.html
URL:advisories.mageia.org/MGASA-2016-0044.html
URL:advisories.mageia.org/MGASA-2016-0045.html
URL:advisories.mageia.org/MGASA-2016-0046.html
URL:advisories.mageia.org/MGASA-2016-0047.html
URL:advisories.mageia.org/MGASA-2016-0048.html
URL:advisories.mageia.org/MGASA-2016-0049.html
URL:advisories.mageia.org/MGASA-2016-0050.html
URL:advisories.mageia.org/MGASA-2016-0051.html
URL:advisories.mageia.org/MGASA-2016-0052.html
URL:advisories.mageia.org/MGASA-2016-0053.html
URL:advisories.mageia.org/MGASA-2016-0054.html
URL:advisories.mageia.org/MGASA-2016-0055.html
URL:advisories.mageia.org/MGASA-2016-0056.html
URL:advisories.mageia.org/MGASA-2016-0057.html
URL:advisories.mageia.org/MGASA-2016-0058.html
URL:advisories.mageia.org/MGASA-2016-0059.html
URL:advisories.mageia.org/MGASA-2016-0060.html
URL:advisories.mageia.org/MGASA-2016-0061.html
URL:advisories.mageia.org/MGASA-2016-0062.html

35. Security Updates in SUSE (SUSE-SU-2016:0459-1)
[16/02/2016] SUSE has released security update packages for fixing the vulnerabilities identified in the qemu packages of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2016-02/msg00035.html

36. Security Updates in Ubuntu GNU/Linux (USN-2896-1, USN-2897-1, USN-2898-1, USN-2898-2)
[16/02/2016] Ubuntu has released security update packages for fixing the vulnerabilities identified in the libgcrypt11, libgcrypt20, nettle, gtk+2.0, gtk+3.0 and eog packages for versions 12.04 LTS, 14.04 LTS and 15.10. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.ubuntu.com/usn/usn-2896-1/
URL:www.ubuntu.com/usn/usn-2897-1/
URL:www.ubuntu.com/usn/usn-2898-1/
URL:www.ubuntu.com/usn/usn-2898-2/

37. Vulnerability in Cisco Universal Small Cell devices (cisco-sa-20160212-usc)
[15/02/2016] Vulnerability was identified in multiple Cisco Universal Small Cell devices. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160212-usc
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110573

38. Vulnerability in ManageEngine EventLog Analyzer (110566)
[15/02/2016] Vulnerability was identified in the ManageEngine EventLog Analyzer. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects versions prior to 10.8 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110566

39. Vulnerability in Deepin Linux (110527)
[15/02/2016] Vulnerability was identified in the Deepin Linux. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code and compromise the system. This vulnerability affect versions 15 and 15.01 of the mentioned product.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110527

40. Vulnerabilities in Linux Kernel (110459, 110480, 110574, 110582)
[15/02/2016] Vulnerabilities were identified in the Linux Kernel. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiples versions of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/110459
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110480
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110574
URL:exchange.xforce.ibmcloud.com/vulnerabilities/110582

41. Security Updates in Debian (DSA-3473-1, DSA-3474-1, DSA-3475-1, DSA-3476-1, DSA-3477-1)
[15/02/2016] Debian has released security update packages for fixing the vulnerabilities identified in the nginx, libgcrypt20, postgresql-9.1, postgresql-9.4 and iceweasel packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.debian.org/security/2016/dsa-3473
URL:www.debian.org/security/2016/dsa-3474
URL:www.debian.org/security/2016/dsa-3475
URL:www.debian.org/security/2016/dsa-3476
URL:www.debian.org/security/2016/dsa-3477

42. Security Updates in Slackware (SSA:2016-045-01)
[15/02/2016] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-thunderbird packages for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.360335


No comments:

Post a Comment