Bug 20729 - virtualbox new security issues fixed in 5.1.22
Summary: virtualbox new security issues fixed in 5.1.22
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: advisory MGA5-32-OK MGA5-64-OK
Keywords: validated_update
Depends on:
Blocks: 20747
  Show dependency tree / graph
 
Reported: 2017-04-23 18:47 CEST by David Walser
Modified: 2017-05-09 08:44 CEST (History)
6 users (show)

See Also:
Source RPM: virtualbox-5.1.18-6.mga6.src.rpm
CVE: CVE-2017-3513 CVE-2017-3558 CVE-2017-3559 CVE-2017-3561 CVE-2017-3563 CVE-2017-3575 CVE-2017-3576 CVE-2017-3587
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2017-04-23 18:47:00 CEST 
The April 2017 Oracle CPU includes security issues in VirtualBox:
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixOVIR

It lists the following issues fixed in 5.1.20:
CVE-2017-3513
CVE-2017-3558
CVE-2017-3559
CVE-2017-3561
CVE-2017-3563
CVE-2017-3575
CVE-2017-3576
CVE-2017-3587

Mageia 5 is also affected.
David Walser 2017-04-23 18:47:07 CEST

Whiteboard: (none) => MGA5TOO

Nicolas Lécureuil 2017-04-24 15:28:17 CEST

CC: (none) => mageia
CVE: (none) => CVE-2017-3513 CVE-2017-3558 CVE-2017-3559 CVE-2017-3561 CVE-2017-3563 CVE-2017-3575 CVE-2017-3576 CVE-2017-3587

Nicolas Lécureuil 2017-04-24 16:30:26 CEST

Version: Cauldron => 5
Whiteboard: MGA5TOO => (none)

Comment 1 Thomas Backlund 2017-04-27 13:23:01 CEST 
Advisory (also added to svn):
  This update provides virtualbox 5.1.20 maintenance release and resolves
  atleast the following security issues:

  A vulnerability in the core subcomponent of virtualbox allows high privilegied
  attacker unauthorized read access to a subset of VirtualBox accessible data
  (CVE-2017-3513).

  A vulnerability in the core subcomponent of virtualbox allows unauthenticated
  attacker unauthorized update, insert or delete access to some data as well
  as unauthorized read access to a subset of VirtualBox accessible data and
  unauthorized ability to cause hang or frequently repeatable crash resulting
  in denialv of service (CVE-2017-3558).

  Vulnerabilities in the core subcomponent of virtualbox allows unauthenticated
  attacker unauthorized update, insert or delete access to some data as well
  as unauthorized read access to a subset of VirtualBox accessible data and
  unauthorized ability to cause hang or frequently repeatable crash resulting
  in denial of service (CVE-2017-3559, CVE-2017-3575).

  Vulnerabilities in the core subcomponent of virtualbox allows low privilegied
  attacker to fully compromise virtualbox (CVE-2017-3561, CVE-2017-3563,
  CVE-2017-3576).

  A vulnerability in the Shared Folder subcomponent of virtualbox allows high
  privileged attacker unauthorized creation, deletion or modification access
  to critical data, unauthorized access to critical data to all virtualbox
  accessible data and unauthorized ability to cause a hang or frequently
  repeatable crash (CVE-2017-3587).

  For other fixes in this update, see the referenced changelog.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=20729
 - https://www.virtualbox.org/wiki/Changelog



SRPMS:
kmod-vboxadditions-5.1.20-1.mga5.src.rpm
kmod-virtualbox-5.1.20-1.mga5.src.rpm
virtualbox-5.1.20-1.mga5.src.rpm


i586:
dkms-vboxadditions-5.1.20-1.mga5.noarch.rpm
dkms-virtualbox-5.1.20-1.mga5.noarch.rpm
python-virtualbox-5.1.20-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-desktop-1.mga5-5.1.20-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-desktop586-1.mga5-5.1.20-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-server-1.mga5-5.1.20-1.mga5.i586.rpm
vboxadditions-kernel-desktop586-latest-5.1.20-1.mga5issues:.i586.rpm
vboxadditions-kernel-desktop-latest-5.1.20-1.mga5.i586.rpm
vboxadditions-kernel-server-latest-5.1.20-1.mga5.i586.rpm
virtualbox-5.1.20-1.mga5.i586.rpm
virtualbox-devel-5.1.20-1.mga5.i586.rpm
virtualbox-doc-5.1.20-1.mga5.noarch.rpm
virtualbox-guest-additions-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-desktop-1.mga5-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-desktop586-1.mga5-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-server-1.mga5-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-desktop586-latest-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-desktop-latest-5.1.20-1.mga5.i586.rpm
virtualbox-kernel-server-latest-5.1.20-1.mga5.i586.rpm
x11-driver-video-vboxvideo-5.1.20-1.mga5.i586.rpm


x86_64:
dkms-vboxadditions-5.1.20-1.mga5.noarch.rpm
dkms-virtualbox-5.1.20-1.mga5.noarch.rpm
python-virtualbox-5.1.20-1.mga5.x86_64.rpm
vboxadditions-kernel-4.4.59-desktop-1.mga5-5.1.20-1.mga5.x86_64.rpm
vboxadditions-kernel-4.4.59-server-1.mga5-5.1.20-1.mga5.x86_64.rpm
vboxadditions-kernel-desktop-latest-5.1.20-1.mga5.x86_64.rpm
vboxadditions-kernel-server-latest-5.1.20-1.mga5.x86_64.rpm
virtualbox-5.1.20-1.mga5.x86_64.rpm
virtualbox-devel-5.1.20-1.mga5.x86_64.rpm
virtualbox-doc-5.1.20-1.mga5.noarch.rpm
virtualbox-guest-additions-5.1.20-1.mga5.x86_64.rpm
virtualbox-kernel-4.4.59-desktop-1.mga5-5.1.20-1.mga5.x86_64.rpm
virtualbox-kernel-4.4.59-server-1.mga5-5.1.20-1.mga5.x86_64.rpm
virtualbox-kernel-desktop-latest-5.1.20-1.mga5.x86_64.rpm
virtualbox-kernel-server-latest-5.1.20-1.mga5.x86_64.rpm
x11-driver-video-vboxvideo-5.1.20-1.mga5.x86_64.rpm

Whiteboard: (none) => advisory
Status: NEW => ASSIGNED
Assignee: tmb => qa-bugs

Thomas Backlund 2017-04-29 00:37:07 CEST

Blocks: (none) => 20747

Comment 2 David Walser 2017-04-29 22:24:16 CEST 
5.1.22 has been released on April 28, fixing an important regression:
"Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression)"
https://www.virtualbox.org/wiki/Changelog#v22
Comment 3 William Kenney 2017-04-29 23:18:36 CEST 
On real hardware, M5.1, KDE, 64-bit

Package(s) under test:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
nvidia-current-kernel-desktop-latest

default install of:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
nvidia-current-kernel-desktop-latest

[root@localhost wilcal]# uname -a
Linux localhost 4.4.59-desktop-1.mga5 #1 SMP Thu Mar 30 21:28:55 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.59-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.18-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.18-3.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.18-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.18-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.18-3.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.18-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-kernel-desktop-latest
Package nvidia-current-kernel-desktop-latest-352.79-10.mga5.nonfree.x86_64 is already installed
[root@localhost wilcal]# lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)                                                      
        Subsystem: Gigabyte Technology Co., Ltd Device 3518                                                                                                    
        Kernel driver in use: nvidia                                                                                                                           
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current 

Created clients:
M5.1 i586 Gnome Live-DVD runs as a Vbox client. Screen sizes are correct.

install from updates_testing:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
nvidia-current-kernel-desktop-latest
from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 4.4.59-desktop-1.mga5 #1 SMP Thu Mar 30 21:28:55 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.59-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.20-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.20-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.20-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.20-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.20-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.20-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-kernel-desktop-latest
Package nvidia-current-kernel-desktop-latest-352.79-10.mga5.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)                                       
        Subsystem: Gigabyte Technology Co., Ltd Device 3518                                                                 
        Kernel driver in use: nvidia                                                                                        
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current 

Clients created Pre-update:
M5.1 i586   KDE Live-DVD still runs as a Vbox client. Screen sizes are correct.

Clients created Post-update:
M5.1 x86_64 KDE     Live-DVD runs as a Vbox client. Screen sizes are correct.
M6   i586   Xfce    Live-DVD runs as a Vbox client. Screen sizes are correct.
M6   x86_64 Plasma  Live-DVD runs as a Vbox client. Screen sizes are correct.
M5.1 x86_64 KDE CI installs, updates and runs as a Vbox client. Screen sizes are correct.
The Audio in this Vbox client is set to Host Driver: PulseAudio   Controller: Intel HD Audio
Using the VLC that was installed I am able to play and see an mp3 & mp4 file.
But, the level of the sound is quite low. I would expect that some folks would mistakenly
think it is not working. It's just usable here.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 5.1 64-bit, Nvidia driver

CC: (none) => wilcal.int

Comment 4 Thomas Backlund 2017-04-30 01:58:10 CEST 
Packages updated to pick up the alsa and gl regression fixes


SRPMS:
kmod-vboxadditions-5.1.22-1.mga5.src.rpm
kmod-virtualbox-5.1.22-1.mga5.src.rpm
virtualbox-5.1.22-1.mga5.src.rpm


i586:
dkms-vboxadditions-5.1.22-1.mga5.noarch.rpm
dkms-virtualbox-5.1.22-1.mga5.noarch.rpm
python-virtualbox-5.1.22-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-desktop-1.mga5-5.1.22-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-desktop586-1.mga5-5.1.22-1.mga5.i586.rpm
vboxadditions-kernel-4.4.59-server-1.mga5-5.1.22-1.mga5.i586.rpm
vboxadditions-kernel-desktop586-latest-5.1.22-1.mga5issues:.i586.rpm
vboxadditions-kernel-desktop-latest-5.1.22-1.mga5.i586.rpm
vboxadditions-kernel-server-latest-5.1.22-1.mga5.i586.rpm
virtualbox-5.1.22-1.mga5.i586.rpm
virtualbox-devel-5.1.22-1.mga5.i586.rpm
virtualbox-doc-5.1.22-1.mga5.noarch.rpm
virtualbox-guest-additions-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-desktop-1.mga5-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-desktop586-1.mga5-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-4.4.59-server-1.mga5-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-desktop586-latest-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-desktop-latest-5.1.22-1.mga5.i586.rpm
virtualbox-kernel-server-latest-5.1.22-1.mga5.i586.rpm
x11-driver-video-vboxvideo-5.1.22-1.mga5.i586.rpm


x86_64:
dkms-vboxadditions-5.1.22-1.mga5.noarch.rpm
dkms-virtualbox-5.1.22-1.mga5.noarch.rpm
python-virtualbox-5.1.22-1.mga5.x86_64.rpm
vboxadditions-kernel-4.4.59-desktop-1.mga5-5.1.22-1.mga5.x86_64.rpm
vboxadditions-kernel-4.4.59-server-1.mga5-5.1.22-1.mga5.x86_64.rpm
vboxadditions-kernel-desktop-latest-5.1.22-1.mga5.x86_64.rpm
vboxadditions-kernel-server-latest-5.1.22-1.mga5.x86_64.rpm
virtualbox-5.1.22-1.mga5.x86_64.rpm
virtualbox-devel-5.1.22-1.mga5.x86_64.rpm
virtualbox-doc-5.1.22-1.mga5.noarch.rpm
virtualbox-guest-additions-5.1.22-1.mga5.x86_64.rpm
virtualbox-kernel-4.4.59-desktop-1.mga5-5.1.22-1.mga5.x86_64.rpm
virtualbox-kernel-4.4.59-server-1.mga5-5.1.22-1.mga5.x86_64.rpm
virtualbox-kernel-desktop-latest-5.1.22-1.mga5.x86_64.rpm
virtualbox-kernel-server-latest-5.1.22-1.mga5.x86_64.rpm
x11-driver-video-vboxvideo-5.1.22-1.mga5.x86_64.rpm

CC: (none) => tmb
Summary: virtualbox new security issues fixed in 5.1.20 => virtualbox new security issues fixed in 5.1.22

Comment 5 James Kerr 2017-04-30 08:43:20 CEST 
On mga5-64

 uname -r
4.4.59-desktop-1.mga5

Packages updated cleanly:
- virtualbox-5.1.22-1.mga5.x86_64
- virtualbox-doc-5.1.22-1.mga5.noarch
- virtualbox-kernel-4.4.59-desktop-1.mga5-5.1.22-1.mga5.x86_64
- virtualbox-kernel-desktop-latest-5.1.22-1.mga5.x86_64

Extension pack updated cleanly

Clients:
win7 and winxp - additions updated cleanly - OK
cauldron - OK

No regressions noted

OK for mga5-64

CC: (none) => jim

Comment 6 William Kenney 2017-04-30 18:01:44 CEST 
On real hardware, M5.1, KDE, 64-bit

install from updates_testing:
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 4.4.59-desktop-1.mga5 #1 SMP Thu Mar 30 21:28:55 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.22-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.22-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.22-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.22-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.22-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.22-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-kernel-desktop-latest
Package nvidia-current-kernel-desktop-latest-352.79-10.mga5.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

Clients created Pre-update:
M5.1 i586   KDE Live-DVD still runs as a Vbox client. Screen sizes are correct.
M5.1 x86_64 KDE     Live-DVD runs as a Vbox client. Screen sizes are correct.
M6   i586   Xfce    Live-DVD runs as a Vbox client. Screen sizes are correct.
M6   x86_64 Plasma  Live-DVD runs as a Vbox client. Screen sizes are correct.
M5.1 x86_64 KDE CI installed, updates and runs as a Vbox client. Screen sizes are correct.

Clients created Post-update:

M6   x86_64   Xfce    Live-DVD runs as a Vbox client. Screen sizes are correct.
M6   x86_64   Gnome CI installs, updates and runs as a Vbox client. Screen sizes are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 5.1 64-bit, Nvidia driver
Comment 7 James Kerr 2017-05-05 10:26:31 CEST 
I've added the OK for mga5-64. Can this now be validated or does it have to be tested on 32 bit?

Whiteboard: advisory => advisory MGA5-64-OK

Comment 8 William Kenney 2017-05-07 23:35:53 CEST 
On real hardware, M5.1, KDE, 32-bit

install from updates_testing:
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
from updates_testing

[wilcal@localhost ~]$ uname -a
Linux localhost 4.4.59-server-1.mga5 #1 SMP Thu Mar 30 21:57:15 UTC 2017 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.22-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.22-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.22-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.22-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.22-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.22-1.mga5.i586 is already installed
[wilcal@localhost ~]$ lspci -k
00:02.0 VGA compatible controller: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller (rev 06)
        Subsystem: Gigabyte Technology Co., Ltd Device d000
        Kernel driver in use: i915
        Kernel modules: i915

Clients created:

M5.1 i586    Gnome    Live-DVD runs as a Vbox client. Screen sizes are correct.
M5.1 x86_64  KDE      CI installs, updates and runs as a Vbox client. Screen sizes are correct.

Test platform:
Intel Core i5-4460 Haswell 3.2GHz  ( 64-bit )
GIGABYTE GA-B85M-D3H LGA1155 MoBo
Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller
‎RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
DRAM 8GB (2 x 4GB)
William Kenney 2017-05-07 23:36:17 CEST

Whiteboard: advisory MGA5-64-OK => advisory MGA5-32-OK MGA5-64-OK

Comment 9 William Kenney 2017-05-07 23:37:04 CEST 
I'm gonna let this go for 24-hours. If no one else wants to work it I'm gonna validate it.
Comment 10 Dave Hodgins 2017-05-08 21:10:33 CEST 
Working fine here on both i586 and x86_64 host installs.

Validating the update.

Keywords: (none) => validated_update
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 11 Mageia Robot 2017-05-09 08:44:39 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0135.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.