From 68586b6a69a3a6291dd81a8fa1ca6660e09d6537 Mon Sep 17 00:00:00 2001
From: "Wladimir J. van der Laan" <laanwj@gmail.com>
Date: Mon, 12 Oct 2015 13:56:56 +0200
Subject: [PATCH 1/6] add warning about UPnP vulnerability

---
 _alerts/2015-10-12-upnp-vulnerability.md |  54 +++++++++++++++++++++++
 _alerts/disable_upnp.png                 | Bin 0 -> 18819 bytes
 2 files changed, 54 insertions(+)
 create mode 100644 _alerts/2015-10-12-upnp-vulnerability.md
 create mode 100644 _alerts/disable_upnp.png

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
new file mode 100644
index 00000000..bb0ff59e
--- /dev/null
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -0,0 +1,54 @@
+---
+## This file is licensed under the MIT License (MIT) available on
+## http://opensource.org/licenses/MIT.
+
+title: "Vulnerability in UPnP library used by Bitcoin Core"
+shorturl: "upnp-vulnerability"
+active: true
+#banner: "WARNING: serious vulnerability in UPnP library used by Bitcoin Core (click here to read)"
+bannerclass: "alert"
+---
+
+## Summary
+
+![Disabling UPnP in the GUI](disable_upnp.png)
+
+Either
+
+- turn off the checkbox in the GUI under Options → Network → Map port using UPNP (see above)
+- add `-upnp=0` to the command line options
+- add the line `upnp=0` to your `bitcoin.conf` file
+
+Alternatively, upgrade to a version of Bitcoin Core at least 0.10.3 or 0.11.1.
+These versions upgrade the library to a non-vulnerable version, as well as have
+upnp disabled by default to prevent this problem in the future.
+
+## Details
+
+Version before 1.9.20151008 of the miniupnpc library are vulnerable to a buffer
+overflow in the XML parser during initial network discovery. The
+vulnerable code triggers at startup of Bitcoin Core if upnp is enabled. 
+
+Details of the vulnerability can be found here: http://talosintel.com/reports/TALOS-2015-0035/
+
+It has been verified that the vulnerability can be used to crash the application at startup.
+
+To have more connectable nodes, the Bitcoin Core executables distributed by
+bitcoin.org include the library and have always had UPnP functionality enabled
+by default.
+
+This applies to the distributed executables only, not when building from source or
+using distribution provided packages. Self-built executables have UPnP disabled
+by default, unless `--enable-upnp-default` was provided to the configure script.
+
+Releases starting from 0.10.3 and 0.11.1, and the upcoming 0.12.0 will still ship
+with (a patched version) of the library, but no longer enable the functionality by default.
+
+## Mitigation
+
+Bitcoin Core executables are compiled with Address Space Layout Randomization (ASLR),
+Stack Smashing Protection (SSP), and non-executable stack and heap (DEP) enabled. This
+makes it harder to use this vulnerability for remote code execution or private
+key leaks. However, it is still advised to upgrade, or if not possible, disable
+UPnP as soon as possible.
+
diff --git a/_alerts/disable_upnp.png b/_alerts/disable_upnp.png
new file mode 100644
index 0000000000000000000000000000000000000000..d069d7e0ad91bc4cbd083460e5daf031b4c37c60
GIT binary patch
literal 18819
zcmeIaby$>L`!+h*A|WLups2KfbYsv+cS}fj!w@P`5+gY@0@B?uq#}&8<j_dh(B0p{
z=Y8^hzWx37AN$z*kBvGU-c##d_gdF=UgvpUcc8qiI5s93CIkY(mXr`tgg`C{K_D0v
zH!guA8(QRj;MX++X>k$A`Nf}4b(s<1$W2=b4F?G17Qw|o3`kr82{?G&QBp?q`XnaS
zEm~~<<9F^5$UTUp$TMZv5%jo=HlbR>wT($jeHV>aDsflMTJ9(mi=gg2d_|}$di8$z
zZ5d@{^rKC(kklT!=ufEzavZ8xt^|sO&}Gq?GYu6f;^P&4Ql=kWqcY?och*qAc$U1r
zP*>fKj%7FLB3+p3z^du!Y3ixjZ@CSDJYD@!qo$Vf^pz<c{*9~GJT6nhkTaWA+Bp7A
zbG9UY`mSuTcgL?lAm!qck~i@-T?KI9?fN`-am2HgS+SZ}rJ_E(5E1azertUR@<x+T
zCp{fJMZ@~D{SY%rF<UuDS$p7?$meOg$N**tBumtYEmphWV>=OM`tx*U1{JAvsq9qm
z(x5cOoF6g}h&=TBoPD)+!NoICirI?vDhx#N+9DzhM4RZi%9IyK^9%~M*q1aBt#kHo
zpWX|TU=@HsKIQ8hY7r0+C@Cp{#}_YNgh@QSedEAG2%Lv~^<5l)m;J$k<<VNj?2gXP
zsP?(eI8KXkgj1<;XB?MR+mvmFOuSz)1_Y9LCfi_PX%xAyOnoOvlsZNJ9xE&B&uzE6
zIB?_)8<zjR!KFRD!^6Wzj~?L%irl+>TfxlCOjkEao{r<m6SwrvcB7JO*kmUMGq6i<
z-z2)y6Mk@5=-PCxB^z=hYS8s`crg`mJp6i$coolSS$L$c_2KST3+EKBC=Xac=J%tv
ze2GyvB}GNz^qU{#FSfO}J2*P-?Cs%TVHv@{&uz`M!~OmJX&*hR>-7~9N=^<7d*X~9
za@(HYJoIqZ*VK$V+Ldk<eLS+eHc(Sn9(6NWIo*x4a*gKf3>kIuoG8t^ne9PkV5$4?
zkBE3iud%ZOQ7QVDcSqFOL^?+}=Ea2`KEk;Tc{3uO?G?9?{JuBgb@tHp+4j!LkxCn3
z;|>x6f{3fP?i4AdgU6Vdm|#-&4A0{|FdI>mCo@RcDjF>yAV7#Ix+%=Y&d$iY5+2KQ
z_>yc2l^Y9&5)gnV5m&K}-X2$m(PSjR1$0uW{nE<iH+YPXZM@G&D-Ffj>~BFnRdgXZ
zsNSocn)o#{&lVFrDGv`152fIrUs%XhX1ILW2b?Wl*xR?y6cq59SSk3O1-#EZ9<h)M
zc^ug8E)QJ0cC9-}5W0ts<zuH3@=%XmRJ7~R!ggL^QV3t(T+O2Jx1L=fD>q%>8!FA0
z?|1q<*~xp~1#7l;UU9u%&`L%o<mz3;D1mzDet-RC;%&^c#E97PB!mGT9yfGyq})4W
zW3;NqyFYw%WO=W7z<WDVJ1Bz+mt?53t1Tey`}xX5>-SR=ss#qptA%dd$zFn%ogKjk
zSYg!bXLS)Zdx@Qo<)4UnSd+6fc;#!xk$ud`W8Ln}w!+KA#J0`CfGArz;we<WS3Lht
z?@}mD9mb?ybnpKCl(Mq2qN0!OU{{QN{ra`HxA*<~_uvvJpS?>-Pk#h&uk$)R^0|(?
zwYBASI0qldRU^K0N67Q2jIBq-xHnBt`Vn3frDomA*BSBV^w+S$L~Pt3&$j#coNGNL
zl-ZF2?YP30mex!^>0ZCa6f>Pj&0jc|amK&Nv8*7#^1Zv;J6em55ycrS*>pyL+&43R
z{p~)Hos6aCUNYD4z|cpD)>6xHL|8RmvO;TH<hLjeE8bVV0k~}>sfv;fVab&iX6B!m
zI^4oDZx0Yew({_FK_EF?H31UM#w1Hs#_B@PuUvXtS9gkVS~)pA<#$G_tE#pzH#jc!
zf-Q+&T^+v8-A4cT@nc3tf}m!wj}z52G&S*iP7b$^ca~m=<f;|k!Sod&#K-@-uubac
zX4W2sKYAo0BG<cqr%mD@wR)?8WkLnv{3t3m@e#{hPf&@k2KmB!BaV_qZYOiO`joy;
zvI|}z(9OXJe)9f(1W9jIv#M(MKqezRYgXalYdQQdfwHguJh}K29L}NNhc_oYU>#G+
zmi8KMM^H-^M8?O(RU5xOmL=)w7r=I=-C%I8gke{G_bRSGDdcICT<y+DmSIcdlx<#K
zUPniV6lY9aoTi3GaqH*D+}xGoFiN!VGim8|jZ))ms!bmEoyC&Z?Uvxj%F4>p(p5nB
z^k|n6wMD#{p&T90sw%G;8z1J%86R*(Mr#0iDE^+VQ@HG5YA=6aYdRZ4ryL^knaEg6
zKKaSQ3ySJC@yb3Uk#B`8Qv{n1U3%Sy0eJ|oQrn!uZDjPp6$!|j<rv4XE)xz%abkY&
zqqUlKGHz?_j1<WT8jv824D-eqFnzxc4IONE3sbSaYRpnd%aBX9wy=;Ene;vv)N1VM
zQFw@t2R31Jbaa$Q?Z*gslC+4?U|zL)-Me=tec8PJ0X%Z&?hj4MdV@}%iurA?^9Rr4
z&hae>-^?b8T{ghveIdeN5TINeE`5wbkHsITg+4c$sE}*8+2_Yi|HbYaM4r8`kQhV3
zS~da>C%%1KUQsbTK3+>x(|vQgIf$4Ad~b<xC^<JX3rnFk5!f7EU28pQ;$X@gY;9c+
zHl|8Vx-l^^ui;Xj&~$QsmkX{#KBD$HmpRGv$&Qt1<UTDbg}WqQlS&Oovsc=mcangl
zcAGRnv(ijL<O8i)wRULgM)kXZmt?VaydvM`qNUBcW@i0G9-8*#hrE%yM1Yi475V%f
zu^XJ5se&0=9J@6VHOa-KQ#JF$5GU;Ldj4kdJqScaGDX?+<TWZtcvZ0{Nbbo)#i$0k
z2ZWf!EV=^jJEmb0kqHTRDJf+|CMG7RybknrbthUv$jhnvKDHWVWMrUy)-A(V$Evsc
zvy~G0oZKTa*xS$+3dq9Hm2p|i!<79UT+T|@B@{)a8<|`sx#qz+N1?LWy`T7D%UfTB
zlegW*BHKyFqPZR(8Z0Fk@HU`5)Hlwg<9cGC0$b0Kfr-BJFYa{hyFWpNCk9F}O`kiM
z$Xt&d*mzSMf*oX^9A&!_&k#u1oh(2*JuQD3lJ#URt^M1#*~9IHmBIX#;nIba7yd#A
zKQB{b;^MkEI7mxK{5X6|2C_GG7>LU!qO+{Q&r^y(@M<-RI`1<~Jm?NZtJ^iCIaI<%
zM>x2q@S=!}C#oY3j;Y|ubByN>8ifzndG)AiM7{QW7h@*bw*%YhD7D9+Ma3@NYZYRb
z@Cwn{3CPp#lW>K(*CK@)$?H!f%twEGRJddOIVm()^1G+3JLP?Sp2*|H>}*dTcVh#^
zJFhbnM~NLmzUW_p$VbHJj8=YYNo20vnQHPM9v*(IS@vpOfryxRvf3e2zsV2n;4>%S
zwlxbDeW6-m5+8z$!?ehH9MRjWm<W5IdOx;kA!~T;aka0;%0k{5ITiW}WP{n%RAKVl
zP?guIdrM1;pC5IYyy-mv8V&`R_nVRH%i5jb-R$Wi)C$LYtBfOl+RSR%%HC&(CSqb@
zs;a8a&dv%7VZOe;<>j2$04B`QCOVP9Pwqb7L{f=Thoz*Xs54c7=Qud>7M}ow_@<Id
z2doV6W0Ssn68_%G0e>j=ehWV2r{LRaJb)k(;6rZffQJjT_0$odn*IP{ITG1;4l+;h
z9~&Lp?_wR`ML%_X76D`xAqFo^y#*e6uKxC(KM(!!F%Uu5#di#-3{Mnd2u-fmrH=+L
z-%XlVrRaQfQ^~kMgY-S#l{YTzh>5|x=j{0As~s6@T{`ajYl8Z19aU9Td?ROkcCN49
z-P&+YU3uKa(BJn?lfN`O4URb(Qfj^`EWrBZY8FG`UQElVAbnBaI|Nh|$JW)9i|EBQ
z`4<=CdUG+<r;Y>Go@3Xn4qw+urBkPljS1k&>8-LgH$Mt`=hfEH=GA27=6W>I?fORO
zIz&XxS1cs9%4xK#x0j7tk&aN|7}tZ7?Nh3f`R;13+Jno?v^tNdqokbB2RE;aFRcmU
zSt_6Gq9%pvo1C~ZG#`9U_?{KBv(vCkNcZ@$AoT3r^OP)K@eb*l{d6BKg;yvNT4L_&
z;`GN2<NA0~>042ut(Bv$kgVy&qm}jJ1_}YkbFXW7f^Om4?G=e;OG|vxE$C4l&zk;{
z=IfQ#lM30&n7-6&-&$c%Ct<r~M~&E*>5A#+P7Mlaeo=)veAFTj@poO;YhJGu0<c@h
z%Fb@_{@nGtc(#A0O>dON<vKsG01mOKL`Bjr)6gaf%89@u3izt4PQ4CrsS!}_=BB>=
zFFqZ?*JIOKUOL)Fx*r}qnyi%(S)-hgh8HT*mPw_55RPRvnSgN))(!AgsXV97c3FHn
zTizbX=;JeJGlqYsz7PSEgk;tA0I197vTS?UrUGW`xJz&)L*|>o18Ri(svm6K7K|w(
zXtZ0)CCl5!X@4V$-y83kabvA0Ajez`i4)2lZo?4OmMNE<o_@;N;w|#*85q_}YDAbv
z-`B6H+J+oUfgc%WmwRin77t^;Z7)AcA?Na*MmuudclKz^in^b2{9u1*baZv7A~paa
zUGp$OC|90t2*Mxrkq+M8o!IaL@!COJIw&gld47KWv>`46!E^mFHVt*`OJjZgdbcLB
zih1zmiBdf5PQ6ueOA~vmBdQ!#q_}JiWTZc5rz<Svs<fF+;F0Y*r@T7lX^pJGL8X2B
zlbz}fc0orm0?sE_MvYx?*N0{{(OciME-pH*+@u96Vj$OoYGAp=#Ml^nmt0{k!U>WU
zy-1zPtiz{QlccRm!+*ZuYu(E%KnV*_^?Q#)$@6o%IwJQSTnu?vnK-)Dh&tsS4TEL#
zRx^4jO^U;2f{FiF!Om`TV1+v`Kfc0zI8{j;$sV}S-e#1Yy(B5A=EOChj;B~oD!jGA
zQn@}B5g*^q%<FPy@T2#YnH*|qvWuBpWp$!%C1f^UE@}3mPW8O-bZ%s1KfoBY3B03)
zg^Vzyw6q-6^2}>vV?Nhc=VP@V6<bMypJ`}XL>|K1UC>zUgrtMHwArz1R;UUYQJ)$b
zN5l3zROr!~h=30tFass{U3M27qo_`?nmqce(?k^I>K>X7e@Ggy(GhSl*m_^QGH64S
zT3b8znGyBX<$QS%<<y*0z8pRxUfzckoSv2g)etx%w51hON2je9MizO`Ypd6yBBZ#K
zpEJ@cZ5A4twd;-ay`Fv9AuX*><fUa{QQO8^6ErIN_U-f7(hRnSdd#+Ktv@)ShY$Bo
z`$g}uF3uda4m&J3*xTE0Z{1<R>K~4Qi%AR|6*=WPTaBVa0*t*mo^XxSKv#A@m!cxN
zl6agYN{y5l8DG3mI0<|o9*(aDp8#dU@yz1pyLaz!LRZ@dS{Lkwi7&l<nn=~sBKADx
z9t%r@F#<K%f=K-$BO^mT&HKH-?CruQ478*6uL;3Efs*X*7QJT=EL~tS?a$I5D##ak
zc!%6`YQ<1re~s6)F(M)JViufS%uwX5+*CsDccCZmbEVhg%vd3*xtKTJzXOB4D})aU
zPa}QnF6IQzh3mf0pLBG)^t`J^^R7&8ohKOOeoT=tvN5R<o_}Soi7-5_5ZQUg4z1QM
zHnA}RkSF?TVNTYQqX(Zq949uB9u0rIMa)ucB1lfYvJtQds)ohW>wZTeui6O-3Gu_^
z={`E2(m6I|;A&N}adWTq=pa0r&5?VnLvB$aAx`QC^$7`?AY2AC8>}vkt2H&eBAIV1
zU*YVl!w(Eh`l6B(Nu<&~Z$0OLkjhfd5oXcuJ;62(KsBZZ5f2S<B=SNhS~|7PNtyf}
z=bg<xT~HXWvU>pb=%lxBcsv|c>`sOS8Nk=UYI0ouNkZXJ^umA7Lnv7%CN^rk<h6sA
zR{UuLg;61)3ZtL?NV(Pa_8>**>ZsJqmqVrJv~|$aS|{=LJDsH^R7+;TNjI|X=Z!P;
zu#ew)3cl{GitOhAyP<rATP~49mX2^}So8YJn6GQH`_?*vS(Qq1%<$1PC`v4Z%xh$U
z0LTA@NCfS*F@zJcwONq)Y_@|`$!X88x_Wr(K`}U4_YAVmxZ(8)0=rYOtpmxv;UrYo
zMU<GUb`n^d{n{*z45iH0J=o2%b6HP6g54Dw>*i(>2*21Y#8*!p7uM>sPOra|kr{YY
z4l}=e`3za-ZaG<wEY{KLym9>vgW4{N17Pl<>@>p#Sqi|iz_E5WPxSR~<5eSgEaV(>
z9w0Q!4nBc|;3@2+KibIpvYT?8jMIE^s6Ia>MMBOn<0aYt>DblYq=FDKPHmoZsMCAp
zDXf>L56PQY*Q}EfHJ(x;gEIMEr>}jCi&efz_ZJGA8W&nOUhhQ1C_kKWTja;Doj8?t
z9Ss!b$7{Mlv2$YARB#a$k~7GTq?%XD+@&<Z<aKlKRm-)mBd_|1pkx1ht*-dvM83?*
zldW97Oc(SKcV@1Xu5N*rH_P5GdcFRzV^ryMuwQcK67iK{?g?Y>eQfBLA|-M0^J0Sh
zIF48<9%&uL<1Ay63~=o7<!4lC3prM-kVs*?)sgx~Tx&aJl4*=eN2^{>wMBNO4h{|g
zcF;V&?-aE}1@g?^*A+>VN%xuIwfq{YTUs)J49Q#{`8X$&AE#_g<}x)s2lB-Vs(^!w
z%iX_*?33nIe@n~%EjWXNikc@OC&6h+fF2dTU6Ld=XuEB$VxzqJ6ct60moZ7XwY5#m
zq`5aooJ>j@Xt#%vrK&=z<23#G1n1%PqavD7y+dJ@0@|>j>v0(7*9yL0hBWf?ttfg2
zPHUZTHFK@j05+nRe={VsTy=bPl+V#MD;{&B-p<*%AiSowwxc6Y>P|DUK>es6)-tz|
zyl^lZL^&d0u}MXR$p3VP2w)z>yNHbaQEmXu%yk@Fjb1MTAe8k&cYEr9%l*9My7>gQ
zzz!~Cy*n?coBJsXz(+bCn6)e{b^uiBzb`<Q{H1d3bHm<ImF%wbRNG@nEv%F|mqz9X
zz<ToV)LXwGVu945<$=-3KIa)Y8g*J<U_U96Uf;aszK;+h7vi-XW!O23-ybE%xdM3_
zl0C~kpfZ1qnCQy8Rqg9_8RBZCvgfH2b*SCk*!a|W*-t}Fr4t~_+d4K6g@kmwYoIRH
zEoh8VW<V+t>4*>#6RY)T!Pu2pp^bUBAU`|n=Ab$No{S-^Ow7zk@j!k68>XI&R6akR
znVDIGa7W2lbuYJIacb$9EO)HiwXwddv(wPR*51y+Hj<A=Dp7mPi{Dma;R8|BGiwY;
zZTX_2@WLr-a^IWZb@A*Ji`sqb;R4)>zpuA1*QqZ(J>8^RPo9pj5Mj_!Kd#aX3H&^f
zaybmeOxtzpH9x55Qm;rVK!pq0*fY_g4$E@L#DN!Tt7I#KbX#gYBErN)otlfXJ~+TJ
z$)pgr8UNDtiaO08L3>O<z_U<Cj+wifeqXi4r$fPz28^xF<0RZ>f`%GkhxB%}!vh?u
zMNSS*&Q6;Hy2QQ*yJL$(n*`{7<aiVRo@=f9;N04jpvxKcUOqsR=n6ki!Isu$tJabz
zfY+kX7{3DHg9t{)!EBvtzowII<$s1X9{yKCjw?57D7RP1Dlb>@KtEF>Uig&$MdV>b
zD-%-(w~czKusy7<ZamZ~ez%hKAKCp}OPwYn@cp}(tRkXz;=;))QJRQ+oyu&tZR0R~
z{@~zmqN2WFu<43!Q(s>T!E$vnyVzo!Fd+TW8pL=SS{ir?Ek4(?&6ZY2d5dnrSu|qw
z<XJsi@@!1HTHD(nQ5O#_-qNGGb<3gq+2y2Jfq^`k<NUInofIKmW8(~;>wDdu?IxKn
zf=~&Wm%)s~UlsIlrFkNFpk41kIQLr}$<bxT53KdaijIl-4W6vK+1W`+Ez8@mu(K-_
zexXE1Dnv-7Gwf5du%PlA)M`S<eWI_z?ml^0Bb)e|b>$L7ex@!e-&}~E_BJNSI}QgD
zdBtI2zSX=nwu1>&;0Sw1H(Woak?KxEfCf&J@tb*(*>sz1_>C*?;9O`oyJBr-+SL2H
zm#wVwyU*S1=Fx7a<Hw=o$Lm*H?04x1F^RG{nj|}a$ScdsH`X&VF&Jo3hxLyZTRAA@
zo_j3YRr5JT-xtuo0g;zB{y*i$uS7&d%$P?@UE@%YrU9p9KA3SD{m;~WjgatUp)E<9
zSvbmeelvphne@BiPESGev2kej*#m#v{cY@9usl<7EYZ|EkK_EsMaFC3e9*Ob_QY7L
zmR2}aysFAO0>TaVENwoEP-lMy`yCWuJ9*OENI+3IFE0*ND_!@~AA0n{Q@~rDWL9uT
z`t8$3U0;Hr5I!fz9V-4OQ;yTYHfN=XJ*|JHS<YLxd@u29t$^Z@gIG46&8sORIZ@}B
z+uW$t+Iso39rQsepEQ(3z04847)G>uBe|Q3>SwaY_TKj=Gc}SmMeyT(nh>gp=%k5q
zB<;BHS_F7%zqCGo<RT~us|+L8#YCtm7uGWy@V8q!IT+m@Q6|+}yok2Yd(n5U8bTk@
zigTBz%*1APVtmxxzUJUS2a?5@voYh6i`G?p_39^MC*?$lg&qhQ&!pAfi;EG2flZNj
z9-nbo;8Re@T7Pzp)CURzsIo82thU#2nX{|G{fxRQ=S=;86Rd|uUiQli9sP%EyE#cW
z?^lAT9X+;kX@?y0)CyKmWR<(&i7edIyC}i~0yF^T-CFG@JBv2TVj#J3F^;V#Aw?VC
zD^~ex53_+@^vT$^xA$D^KLI{A533Gj1gGy7LU&>Oj6iZ4G}iH`$8ZO={j#Ftu%=cT
zsOUd2i^5^uuYRS1^u-eM-YdV}BoXE5rw=kKJo+XUmdC1G=yfo*X;8Nu9JmUuuZ>re
zj$;FvhY=A#$IM)iT1jb=@u>y_gzABB$n~6tV|Cg;3g*y6eTJwHIv_abo~>Izn+7cM
zx^fh?wM*z0GduFoniH}h>Qm|*IRpjF+8<5{8$kCKodwQ}>?9?LtPy<m$d$)l+(Xh)
z(a}kQ-p^9x`?s7gLHZGky&XC5`8#;8g*_tU;<%i50swl2?kkqxG7|WHm(w`aC#}C7
z$#OVvMNLM*%Dahnqedh+4zxC}?l*bg?isJ42Ui-G(kMFqel^q;6o}tjn>)WKAo!Wy
z1(cMOAY~Hff6}eaaM7I^z3Y;3bv-J$Ilc($Kv2vk*6f1{x_CuZ*#v}feLa|+y`5Hx
zWqOT&rSUOiDeo#~Io!zDIAnur{U_b-#*PfaUZ!ULt?mmYrM?qCm||rq8#x~+7?0Cx
z{9VwSt|t+YH~Wr*%{0+`mHlvxa-f90?+a8_mC>v;@A*<Z-ZR9LuBcJa(Wa6zIH<Z=
zd|gK;!6*6}fr5(}{C%GZ5$09$SDE<ubM}YT+r*lcmeyuw3f4|Q`ohOFNd2nHq*v=T
zbB7vJqvlIT2YPn%MPKGi^*ZCaE*X$$Z(V)&^K}r6GKe^+d9pL6t01>jHuhzO^LWO5
zXS}H2Dk~d4F%gkD*C)34KI_kW;XknBh3%aA;&1Z{z3OlKD8CxFFTPe>Sqb7(X;ML7
z0oOlr!HfbK#8odXH@sR@<k6#aal@ITDxO<cE`fZ)9%!<?eXA`>@*mYE_45C9d8&5y
zg&<5~_E)_(o7P3~DBN8nGCX{Fzgo`c+V1hLQ^;7&iv=3MqpeTWp;s*fvvfwedJCwE
zSC;d({}JmAio=XAGgMdGhxF^(ubni590y=>UqfPIbW%a-Jlr|axje0&GTN5LZZF{~
zfX`T?<wWNXA)oeURNO)sqH-?Ii#|IW{AD-kj^~9^*38=Xsw_;@F)(y5*ac=~M@6Ni
z(4C1qmy`?yrCh{KlQSOo+E1T8`4~bIEpA@9)JX-d-;3ZgnIel~ejrXTDrJ69=5wju
zitlT<Nnn_!@<mJ7ay%!TQ_cRxi`r`=Bbv$Q+tVGx+ebC~6x_~)XDX1!W1bZQxk;AJ
z$5B#5P^L3)>(c^VJ_o@iG+=4iO<wZb@5E>`qnL~h4Jq!_v(PS>^`BifD2@qu|NL#)
ziZ~!rJckfb)zuoXwca^KRsISa69WV7*!khnQD1Sfg}DW)kdW=I&A#eDH3K^Qa?>6G
zfs1R@KkPspS@TL=CBC${7zY->%)}Ht;r%LW@<t*jfx@$ADPSV^{!#ScgSq=D7*fzS
zdk1fBZceYxxv9O+r)lao&<Bzce1Ihp^f-_x9hwcqsI(pj`wA8$%<IsiTw(ODm03j+
zJdW+jPhBZ<7))3P51-Fz>q=t0>mv^#Z;v<LTb-j1kiqLTtEp~g#hBdO|E&9Jj8o)a
znOIP;>VE)3<pR7<9iBpBdL6*>e9k)(7u#|KHeBv0Z8^4N79qC60(ece)8r{aJWtnz
zhU7D;4svd2rSOfMmo)sgKYt|Eg+X0xnu@PN<e6!vXJ$}&SiO2oJVu5uf{tifT6R}Z
z>|9)29E5@IpI?59kqnkcwKg-nX-avxuAs58ao<@$N?O_{y5I&Zn1&h(t<gB=#zxXX
zp6+IsEV?HPtEt_)eWfdwl*fc7los-atnnE!WO=4j`FAhCU&z@{p#?Lv_&vYjcZ+^H
z5BCeCpS>tm2fh3&ywf9o{K=JqeDI44zMxO#33AZvSPxQh8_HgS^mcrr;13Sgqy`0m
z6WXn<aak~S1a(G#0Z0X)<oYn-o)G(P?Hc3__kQ%cQ|sIofTe(W<>iqQKY*PBf^(oU
ze|kDx^qKH$<JT+N(^E@O;hARx)(UcoE^8CyQ^FHp6qbL|of-^f0V0AROfg$v3;Dza
z*XFvo8CB)8sjwdV>e^IYMKvJv@1sK!*w>M%sSA9$GBVOG_I8HEAPx@<{mfC$x!gc?
zXxy?Ncgw+H8{lk425&&u(h^q=Sa2(sK+BP3aZI{febIUqYV$P>7(d5h1(Uc`;}mzQ
zJzBrMClDX0bWpE-SanpP0%W7TldHbZQ%od7G^$KBz`E;B6go38sNMhgMfjvDGC-Cl
zL8IPacQ(+FK(3iN;rw(jQU5sAU}ryEF?)<04<srf=)7a`ki1E`%i5U5%8&W2<jexv
zL_s^We8{Sy^Ip?9^eghJ@?Jy>kYc?xtBr%t1MCdN>-J()Bf=i|CG*7EF02VAuz~u>
z@#oK};<N_q$*z<n5w_`E77*SZrT!aR>#)FLkcm^%MD57j+R<S^dl#fPNwoqz1y$9(
zs=&S>(w8T#?|;uh=TOalZEASCH@|H_;${|ivEv~F)#Mak{O6>dtV}$>diwvhvfx`$
zW~8S-{COGr%P?_wcC#VIvnJ4VvOZ=L<188BWngL9KbIy863fu}=sM9ZJ{~>M2OTK&
zwA{m&i2}NGgsRG`pt=EYZ+6p_kCr)1;fXA>H5ehPfVRQ0aDnB<NU=pBpqd3Kg?HoE
z156zoXTOy$44+Xgb3b>u<hUr2_ac6<f@{!HMK1&k)ODlfv<Zn|*Q1^mrg)!wdIMO<
zURqM9TQfDopO8p%R_o;7g~P)AZUCVKXrJVrGahQTxO^&FoHzS?2*3hra-6^M1kx$T
z_Ze@IvVW;^M4mr;sXX*yE(m2amg*q6=+~Ld!=ES<KtaW7{#t?#&o^)Um9eq&)<MdW
z5>1|Nsh9UGCD^kRqi3F)A`X%Y3R5#kIj>W<x_O%43Z}GD$+_=FCFLtzoPfk-v-A%O
ztIEofH%T-H5c_)9x!rdYy=#Tq4r?b@_bkuuv6srMsA4r;#Kn9~E*3hboGkdPy_>qL
zvSRN5AgYBtcGTs{)e0vAM!bux{H=9`yogyIow}q(#5>Mu9<1q&A0Z0V%lFcug6{ol
z-ggC^xB6o#_?uc_yR_7qFzC1DWFU2z;CBxXkEqAQXEO>z*8pu)W5;usT9W`#{5lAC
zZ*{!YIjCz>5m#I(mxl4h^Xs^GZ8yhS0Yj8#h@<LwVhS_kTqSH`)j>ESoM&k8iW_c&
zTtuz|qFR|X)#vm~+}%y!@SqSV@&@C>3lyPVzwh&ihK9;%jV`ReuX=XuFzA`IPr9H^
zrZ+$TW5L7#MMcF^p?$L-pS&9C3qUkov<VbZTnE)2sLVQLcF^}ZpF9~H{%oH_Oq}`o
zGtTZF`1oBi^!+>JOL<E9uoYTyT%^bOc%?zHtEj|c#^ceUIV^t#xITMcsxAWqLq}`t
z1+z4=o95F%rEk-;nCILbnryhYTJOwj_vK_=EnhcNBT(IP$F~sX>st-TTRHorddEU?
zuCkM@pcJsh(4)w74R(I&W#(1)2Z!@b;xI#4vaQonK5u1vYpdB<)%{~WPEM<Ug?mbU
z*OGj$6(yz#>c&O?qlWcN_sNNKZUboSaNFS5KJU*_X|LJW6>!T^%wC&#d`?K6jC`#J
zDg=9*C@lj6%QE0g0-V->iz6XG3oqx$AKb1tBAAQ&jPuypK24rZ`LltGh+LxiH4iU;
zoK@t3H$|;wPs)R0k^U@&rWI7g@PG=#z&Mn?MQr+myCiisH*=#N6W0#OPcOEqm$F@b
zA97T#>%Wk0PfbnT5{LNf=MMA@j6fepv=0%7kaL%ml^vY!Kd5$dqo5eI$ltXIr&p0W
zok=$X^)4Z1Gpq2V=&kt@h0O7(Bb*iUA$m%<R)GMdHnV5$c=+SS_r=-x%4A|<o5R<~
z6%;iA-&<Pvm^}2rw*nUDn}OY<+>(Fb2kMf_%3HADuJ&$WGV+DF8RQ*CIy$Dx)II#f
zD7Z!VUklZs51810FH0}&#l=wSVUZINdw-~lj*5%x5{vA<-5sJ;k;vnOC@b3m7)Ls~
zknG1~eyT1t^`2%zh*RG@6-SUDWuaoWqbfgo<q2|HmM*I8daTC${QO*oHBb!^4*R+Q
zH32b=WqbvV_UCt5*WvNDMi;y8#a{gzXB+rU#K8$<A+$ei2=#YfxT}YfMJ85b_^}pO
zWqJAV`RKC>k7^tg`@4ZMCAnllLmRqFjiayv!1z`2u9y#xITVREzNgng@X}7!a+*Dd
z;K?MB*scsx&=T)g9Yg?Rmv5w^L=z${DHE~hs8i#$4G7f$)3$GKp!C^-LT8R(5A?SZ
z0F;-Q?*u+*S)~lFEK(!cmk~T!v}9s}ItwAw_|Po&545DXw)LrkxAdHa&AcHZNXsAQ
zp0824d0w9=B?3s5Oc_$DT6?R^0$Bifk3AMY-cP#BxSZ~tiQ`cZHcSK6QCd-vgh@H5
z<nuJ^>UEH7+g|D%W?y6MQG<Ui_h~@f=eC|0DJ-<;rtD>DIAC%-HFjo0Wv8XReftTP
z%TAtdu2bX47vUP3C?ZQHJimTSs?-q6iEi&6{xy$(V-va%ZBA85czL0Tz(+{TtXol9
zdS4&|L;e;k2sS?|bo~Ff_-)}I_$~J|ACzo5<R!J)DiNrHw}P34ST}VVoYRXpy$jH<
zO@tGGY=OINti@fPv%<f-vs4<WRDWtb@)?Liwu2B?LA)OSng2QX+W-~2^=Ls;d?h_A
z>jvkby=|m9OKp;4MHjXtunhj_B?1^o#K^{md*wW%juvU4>vi@{w7vdhn*BlA7Tg(F
zo;>`paC91Y7m;pGo|zRVC3Vos0zjSpL|>L?G}gfnEQZ7P<GTTe05LZn^kosmfV|=J
zYg!=x^q=xSznt?woWS7$*6-}WKlxu^5%?wdHwwG1FNcbXP_--$8ozz}mUCNtt^8af
ztGM8T^ugGk?`(pgWI0bX^vVw<vVy3f*WN6Cb;GcI2x-jyQun*j;1}NP&q3?L!2*-*
zVy9-~%s=n!mqc^-sSyF)6rhVqTLKuBa9}9!qOd*B@ysf}%Z%JZz>fLpBP45hDr{=3
zo9^r}dIkpQ$Gmy+U|?lJT2hdVJX0~7#BXUR#S_Jx$haN7CzgT<O9cRwD0k3{^CYMx
zgiO_oV1M1@E+0N4yxsTt)SEMF01!qV#KgvypI1%}`@9vz-+{3~`Ue)nC6<AjJe(sr
zGqXwi0%esmvgp1oqg|8aanzyV#D>?C{r=lvz9t|MXOf9olKH*A6nkoM0r%lR>^BEq
zUO7&+^X;#X7;|a5>Y$1I-cv^*@o^^1f;MJ0ggLeW($do1Nevt6lRwl(M9`ZA`C8?R
zG^_SN3^GK{_#e5N!CtlaybMeE-i`7{&eS<ZVtksn3r&{D`?^fxXNIZ>d0BApPtut7
zzcJx9@s-t~a<z2DW=dG{QKyRt2j46E>EUgW$k<rUej5=$nM-p|O)Y7)`sq}=*8vtg
zZc>iR{96$Wx_diNWObyXhw1R=vw6UF0Dne$^#*YBfP+u)gD6HkvXmJZ55e?KslcdL
zABcNuWABi~#l_8Yd-O9>+<g7|H3)n_g9ZE_5h3C7-7gL6CLGp7z?-OQ9EtJsu?Q+%
z8lF?c_d5kFEy5Pt@%5|6wjbwzqcM*E34p0{BzSV{tX87$m3&-g*`p1umP!W+_D+zV
z2dw5IVSF4ys7M<=c+hEJU;X?Z>pkGUQD5swU&#N!g&8IMp$v9+*RK2zQd@6H0{D5)
zPxnuIOG<!FJ!@axh3B!y#QpfR(22ala%iU=tjOJqg(5J)t%O9jBzkRs*xIrmKZ4?g
zWt*LzA3HMu#FP3T;XE=rsr~@z_8UPh?D#M`fb0)Uad$<y<Ug3==r~1~@;BXg|Kqb|
z3r=?~g{z%i-Es)~a#-$m5WSkQs=h)Pz`|HfroLlAS$$F7MD<r~TnWvnc$a4wxVhIk
zxu$mPy3>m7;LLhq5-<DHw5_iULn9cX7)}ctU=+e%&d%N{T+0&e0rF9?3w@mC=>nrN
z@K!oY?p2y`#%j0Jn~qh5rKdNqH&C^9wyyvcF+ASY3cR0oVQI4}VjSUIT*hhwAFHzK
z>*(nJ@uNsvpBb*DsQp#fngMR^KJku$_hL2^kt&adM~6c<&*K8l&iH4(_ZYg1ebguE
zyM_%Qj2P*sitLn8RxYkV{i$Pn`y{bd;YQuW_Aaj~hy4lP?S&S~pazG1O6a478C}7O
z^^utiwcJ2)Tn6DaGk-RTvxmN4URtUTk8Cx9Q3_XBo2PraNHKBMCV6awbqdTRQSms-
zZntt~zSH~H>8ZHIS6K4L+Rh(tPebYHvB~;Tyzk<@&vpS80G^!Ih`X0BUk+w#gp%p}
zlYtI2ote)+JwkvlJlzWFevYy+_HJG6@9AlL`U5#o9S-ACKAW$t0EPuA0G|wT{0b&(
zL1>~5kBS17U~K&90_CWmOv7!3V`nRNHcHD=Cse0a<!Gft)~uF1g?MP3JY7*~IZh1g
zTvX_L>t2}kSXK2dDiNRrw6DP`9(tg3G?|z=fAV0v$Iz}W(Os3J4YE<eT2o;Y7{V`T
z)oXe>H&V8)IZkDrub9oOU0cic(D8I63V0H1)U^PE3w+R15i92TWIU<MZDI0;Iv5+y
zAbf|yV0xu&65ho>KZamGUXCXrM-}RI4-F0dkbj7eiGAf7P}-3f{(2mLr66X{*|`Nk
zvZLEsgxJ{_ymh{RQII;gGO!Qf{}IQ!2we4dMAZZXKc|W(*qyn{z50aliERT_a^c4M
zTDbA%0R|+ekN-Hv=GCivV#FX7+(Rtm3zS^t!G}z!RG|RvaN$7vH#gaZ=j>m6YJVL1
zkK607491^_{_v{(I`luYul@0=KOJrV{}}$fJbz65pPs=#4*fatzYhJyj0Y~y{|Bx`
zBY%k6VJbjpJ$iuBGD&S89wto$YtM-uF_?$-+yn!NE^jWhn*T>m<ky@`3@ie8iVRJ*
zwT)aGBFzBhMl}8J0yY;O@FWgaC$)8U_E~e)eCBh`G_T3kw%TW>R4%dQq^}g`JFZ}h
zTAU2i6rzJ{M5jqJ!>P_5RG7f5ku!34;E{_=O23m=&qP2nY>-Y=r>IdXA5YiN8n{y+
zD5!dQV#<)@r)O{hs7(}=`dUIM71Y&T*L4|cSQ#0iW8chhLVJa*eWvATuzpYHkw@Hv
zJs1()50f6G0(C`Dz>`YgJ8-Cz{YKqQEdjbAZl0!XKn(b^*u+C(7lGulwJBZi7N74d
zvnci(1&1E1Ljj%IMg4u!oLb@d#wNwuPdX=iyJNQ%9BTVtX27tBpm?9O$j1?z_qKDx
zFaSMNv-ci2F9aQKtUB$YL%UkU#hQ7ltH31b)+FVP>x|@@+H78k<1nCo7b9l|;`{Ps
znBnKnKR*H?#y#Ku^pl3VoDU<r$8TQ7txXEuwQ_e@+irdmWgjIIwUliA+zkI1(&b>6
zytQ!rdmI&E#}H(~%kf|J7fF%(7Tf?OCJK0&9!1{FMdeLWRU;=RtdSL+%S6I!12f9c
zQ=g~s>@WBNw-ji_xG`RINMMp#db4=uvRFRW&4Dqg>X87`xg2>5i`;`Dp91DCKz;;f
zRaL3e-M+%21qhv5b*3}xmYrSl%0-QO5XUzfF^IbpwTWsu_~!57wHmR7$=@a*sxUY-
zsOX6M5%O5eqsV4mmKrb{{e8G2E6c+at1Sz2b2K{Dcj}MTD(edvRr3edm{(QGDoM&L
zMZ4F=nUnaRxP2XRS~=HIE3HUP{fdMopB!zw?`qB+J%je~RqDo0MYI~-xicTnokzbP
zmp)#3<o?p42p}6d+9a)-BU&Kb%zeq#s|n*2ri&@Ys6Aa|pr;4O8-;AvxOck>!ILa0
z5TC5~RD_;B8(=XGQ~3rxJ=FI){xUW6M1DKSeGc|XG)aP!m9SedB>!KXiL%miD5g9e
zElu|$c`6{r_kFp1yf8lp#GZ%CKyt22e2iCaF)B8)`ylXhQW9u#V(MU_ixDy$tYlx9
zotrCpRQJ28|3Hi8uPjVJvzR+LJsrWCv~kye+6M~s7S5tar?U$EA0<d82%0=g6T@zD
zwi+0g1-1|3dLe+>mdneIQ`oc$J2w76baT3;Wyh*=Ff(pNCa$gHG2~cBM_R*ZpGh@X
zNh7RagG#yD=!#02n@gE51GUDuD+$S54Ft$)7Z%^=Uv8(FG}DBTbDGMZ{|Fm8IeCXe
zF@hHsSlpBIGoPx$I$cNI+scCy?s@<A4HCcm)I!OH8c!FtG#tE4Q5Bu6!g_xCm%P>U
zm^BLQK~vme+HX~qQr{76C<TLB$r!@jS=?lX_pV=Ja}HeD*qalMyGdqhVc~h!9R$ku
zmGudiu^|OMHR2oRrO{npu1kZAydH6nJ<KMTm!6!4^sg1GnHyP=5JIwgG}O?=2j|th
zHSS9t7v@M{f=PI?3eX&Aq?njs7GUFJ5k5DyOn}3vw5mS+oV2h8Zl*eSXT80?9N?h^
zcD!GNj{r5IsEF15{B4TY1CGj6o%p|-5T;S4ZpNz4?a`f}qh;^hxhOU0?ccc*HgIZ)
zBtXwpmMvYZbD&E8-Pz!x_IhuBMPX)bLVA~q*P|-gM%~q@+J(~sY9<`Xm{+%}MpiGi
zm!CvdMy{c(%;R#F8Uzmq#+--vt?}Gj`B<2c+Qh{RuQELIx_{GsYCnA;C#SBC4)=qN
zp2$FqeMLp6$H~%%k3X^_Xm9*(O6X@~!`fC@2pt@h5nkQC$^R&h%}iU$JgzKrWn?!#
zQ<f~VI?BEruje0nRzJ%0P@bxr>drMc+*8GSx0M~A*!CVg@t*9CIqJ;Q*YoPqJ<k^S
z&vMQB%@#)>OWSo|T;lAaV(bk*xRRSXr?hPUo#=1w!UCQ6B(EPD>d=)!4v#3bmLR7o
zZnTJExA(V=NA0Q!k^<Zo^E=!&Mj_aklzkA_7aawwS_U(+au;U*O=l2P3$QgN`g3j~
zF8N&A5W0mkJoF>AKCsvhSVn_GLa?zxkK>Q0uNoJ&-2l7WK3Aml2qa3r_x{XTk2V@P
zu3d#N+ys83-`WWNZ$g3%Sy5C}F6y`n8;~D+cI1wW8$BOBOvQh^Fo>0lx*GL2VytD#
zojo~e?{0dK_QW3G#ey7AxdJH(18;7AzL?-1;0*q1x(@t4-UMAc5d~QUq%@#O@wJ<_
zfB)|2WCvV7Jf34Sz=d;WtPRvhq)Qbr3IJEYLO#EvHOI`e`JzH3NHdQ$DtgD8v`hqJ
zV>KR}Ao+QuK<bMq(C*W~1@c#s`FVZ89}Z?RQle6WfsthH{HXu<wb3VsK|s&iJ+%yQ
zCIu-lA;H8FJ0oLP?k+!Y_1we187N_CdT??mooew~V)5tO%M~``j@yH)K)(+;Xe%5O
z^LNG3uCZ1EbjmyUW6WEVYRbwIA|vG3zvYyVMAEV#8k6E9oZ9(TTV_ZuL9#R@)od_*
zpM#dx6nWEEzpj+PM9{kUJm|~K-dn^E3aQ`NEiPi+zsvFSN0>S_XiJ@VaZUQ=OQGd4
z1?ud~(vCnwf5-lGMZ7Sn^y%%YBW?tc#sGP{#BMxZ?@*YRrwmQ&4hm9IRP;X4FNlrJ
zM!kah_@Di#?g6~G*t#%D8Al8@dt%6S$eSFe{WTp*Sf(r!R~ZSm%55FAk#Ax~7O@Zu
zb9DP0+5*R)o|yO2+fUk$=Gsi<-T)3*UjYv<Dl*cxTKg0`hI7Fm7@e`Uw_lUcZ1^|x
zapwSndx!cK=St65)}Jx5I@Ngw1M&&e4eA#2Z{^FrT(HVBM>Cq}Uwm-}EZ5;j_^Ukz
zZJ^Dheo8j(Oz;8{A!r0n<TQo%BtbN^w3?ffORPsYrgk(y3+o56M$js<N6GemaFE8R
zldpnwj^u;LV@(cRSin)os6|hB@(|m|?$D4ra74)^^WEQ5KS|o~ggT!Dzrck2%+H-h
za%9MmHt6?tcNLtHbCwVWg#<`2aV>+|(Hs2@I6T<vWAhyH+agIfgey0`XIa;2zu>lX
zU!urJ5lRwf!rG!dN`HFqRlEYuKU_`9j!QOepY7<g&45?I0%eoLXLc8d7>Lzx{uHa#
z`mO;P6y?WcV?Hp8-L4$L7K?6t`vSTrwl-deEq)o&s6~9Yq&P+N)V$%9Ix#3!uRYfJ
za^@NHn}5l#=_=$?LDt^lhvCW^sW#=uZ=c@gF){v`5X%Fk<mI~_e)s=hsLcKdED)7Y
zwN`tp5f@J?MAPuFTW8z7yLTYv-)cPPd)&Ud;ks0lr3D38YxC|~pFao;5DI3$`qXN>
zAjxef!FHla$4jN^)eV6Bu`bGzf2s7$9UOV9tAL0-d=7pC4@85m;2+IHgW7=nf}PlP
zj5m#bQ5Zp5$-5er0eeM5fqy0oXs==@Ox+F!e&f^N>y~c?p$`^1j*GJv-6%#_s<rF+
znNne+_dpxbjq^?KQ_luW#zH}p5mYeqe=MdEUAon-NB)iLmFrm0I(J|Q03_ij&^1n+
z^pdC4qj|ZN07;YdL5Ju3c$L3tPqcYakK1_C`b6o<8*Q4aX%NVbgNyqDwDox>DKJC<
zcO2*fHt9}azC%8ka(Z;S(KD_e25{3$9=p$;{Qk|-@1Csmp2i2gWH$8H0<!U6Q9T(R
z1;5w3#AM)(LQ=v|%<MlbOwG;XCN~t~oYqE(*@YU<l~8gZIUqdx%>W`k_C8L;KKW}D
z=0v^rCjRdFk=MLK1h}%{Fg@VN5SjhW!CHZRp;dF;giO33N;C<O$d*Ts5a4-J>o3o4
zf?h!DRn%J_e`M$x0*uogzcrw+9*sgp1r+=y@zzP~0lPn6cZi0@@C=Qt;lig)S^~$U
z-W3l=U@JlF?t@g~e2|5DM+Fb2+$F;EwH`VNEbSY9KeUOF2KsF96@HWu3D&sOxUPMh
zy=jQbpUl%S{$0Z5vQYgO0oH&!?yt(KDs=o`dWrsKxk{9|^k!dPbb+*5oAM52RHWnX
zQeP%6m0*Fxaa2S^U+Up?w1uHz+B3@Y2dTi2?sFZd%5`lv=VyA)lj}}N<Sz!TK|2?}
z+sTg|dIHr#jl%6n-G#KEx>v48vsBinM;@H$ptqOD0vG>FMiuiEWSV+8jpn@t+5ku@
zEONWp_@3OIpG0*8p$v+90H_53AE=W8t!_DWs{aDFw<y`v4Ggvbu)&uU{B;@;UE41e
z6!c|fyG|N4fSHQo<TOAkJx7bbdCp!kxAmV`d|7}y<MZbu&$Yf!&rZEObsp@mWt}V`
zm_<=R5cVgrTy7o!Ro3h)27LcEWV*hV4|;BN<@lh}L-(o4ra5hwrmu2w$(VE{RoZQ<
zCcZA?H1FRy+BMn>0PS#~hk}GWP>%!NRCMc5px~?``_>I$qnaD}eYU|?s)BeI5B)HF
zbKLr#ofqLHUC^mnZr+;oQ4ft8C!~)1Yu^lTfOR>fJx_TR(4(yw+vk)R%uH=Q^rJVe
z;TZVtsQ*ivJaX@^0s}u4$DvwVAiqPIU5bSVIBxU7CH8L)GtpMGvWd)(AJ;h^wuR5-
zUfXdo^d{FN-01@>dg>k(D<|iGF6!_4XK~jx3+~^yK>)Bqh5eyN>Q&O{)+b}%gaymi
zyB)jPZ36#_&1i8@09$E^R)r;KvMxQZ^Z{;aKDDyHE2e5aOGgxe%zpYudrqxwT{Nlm
z5iRMTGbEvi0-XjoV4M}<_@~`zmF;;-W7i<xtFMHee9*m*z-=q!IyWM#lL%^;{lg#k
zUkF^s4^y}72MXQ!P~go>0uv8*4d{3)!DZ0+Ix{;>N$hPuADqoco;Usw;)<){m~^<`
zhMl|)I-A!0&*+$#a->TOqB{kzL$ADy=}nJ!*y_}Zpt*9p=dVaO%S31HWh{v;%cF86
zGP&T!%|t%8cU?;Et6$K6G=A*DE&A$Lw9fB(0oYf5zdc@)Gdtr5n3j-8<jgSwVh$Uz
zozI>k=z><Y&t3UHwszc|SSfG(qL5R!;ohrpB7OM{-?IftGzAZ=j+S--6<ko+i+50C
z2+3ktUoIS3Zza5x49wSma$;{r7{^vVfE;sn=?&Q)Ws;k1Nq)(qy|c5J3C2@wC~mg^
z&#>xi$Em_Z$fx-_e-p|COUBFl7joSHoFZG7ceLZdx=`uNahd(w-QMbx_zj&u@B__2
zB-9s1f6#tOB8EJ{y!goS#|0ec$)P*XK}+vbt7OZl<FGUbX3#Rc;hd?1g$K=)=C9*f
zP6q=hH)?CHl_)&#syjQxBgO(?ic1U?v|}K#J$<j{<BMNOviznvg$^RA{}su#i$Q;i
z?nH2$<piBokEfHW9z+;{uhyx$i_-)~G?lfW$HGi`=1>^q(;x**VVXob0&79I{jYT2
zlN?Kup(BF>c(9BC#U>xW;R-q)kyExLI89SUl@&vBZ>gybNT%(0wW%?2h6B354Pr*#
zbT4eXYE#16=WI!L$AZr4?7z=!Rh=GtDyl0h1FMLlCIe$cE0Mjgc8WYh6ej44RnAua
z3>Y?W6Bxx5IbcVYIXND>+5~Pr18zbC=55N>O`8&q<o<c<>Loz<3&FbQ?5bIkQ1?PI
zaY!kXyOkIYo>#vK;JF(bj8p?!<Hdbv=p!)=45fFeYc6ntyl78)7xlD#6_)>$J?IC8
zcQ25VkleWVG@<14>9+e9_rcK>AnInt>V9L>IM_V1X>{pwwRVa!!-Y#%4QLIb>cu_j
z7ni0nUKD<mM1<EQwA2Mg2%s;xi_VPQp+Nmx4841VBpcXZir~olCYA2Gi^<9lY65q5
z@$gmL>~?ytNFRlM3HUt;aOquV7LT}_bUPY(?)s&87u>b47GMVFvM_jF>2j?V8=U@?
zr)TF#YUoF5{?JVS&z(1++qax08kNO9Qp0CiOAFGO&5Z^~#t#Iix6rSHpUj`SS$NmK
z*L_Hc*ULoOl^2woV>kBW`^S%vduG83v6+r5A0wSEUMI}qT<iVvUB98j!J_H6X03-x
zm=K99x@?3q=Zqy2F-P!|mXmZuk{<hTRLC4XeW>%bLyr#DN0%@@J<UlQfXbQLkQxRb
zCe;<e?wDWGTe%y_94;M>|K{Ebbw0VFo0Tc}3Z>VZgZd_K?N)Et)N*Drt3<tDTeQxz
tzBc92PGZ;r*LJ3C2-SnJOpKgBQoVd>GW4Hmfpra$6qOYzc>e0${{sCYY32X`

literal 0
HcmV?d00001


From 5b4ca428ef1ef4c00c57e572ad3e38ffc7fde2a5 Mon Sep 17 00:00:00 2001
From: Saivann <saivann@gmail.com>
Date: Mon, 12 Oct 2015 08:10:15 -0400
Subject: [PATCH 2/6] Move uPnP alert image to /img/

---
 _alerts/2015-10-12-upnp-vulnerability.md |   2 +-
 {_alerts => img/alerts}/disable_upnp.png | Bin
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename {_alerts => img/alerts}/disable_upnp.png (100%)

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
index bb0ff59e..a411c7c9 100644
--- a/_alerts/2015-10-12-upnp-vulnerability.md
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -11,7 +11,7 @@ bannerclass: "alert"
 
 ## Summary
 
-![Disabling UPnP in the GUI](disable_upnp.png)
+![Disabling UPnP in the GUI](/img/alerts/disable_upnp.png)
 
 Either
 
diff --git a/_alerts/disable_upnp.png b/img/alerts/disable_upnp.png
similarity index 100%
rename from _alerts/disable_upnp.png
rename to img/alerts/disable_upnp.png

From 8b4abfdc1f2ffc430636938a084559f64b00ded3 Mon Sep 17 00:00:00 2001
From: "Wladimir J. van der Laan" <laanwj@gmail.com>
Date: Mon, 12 Oct 2015 14:34:32 +0200
Subject: [PATCH 3/6] improve the text a bit

---
 _alerts/2015-10-12-upnp-vulnerability.md | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
index a411c7c9..a4510784 100644
--- a/_alerts/2015-10-12-upnp-vulnerability.md
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -16,29 +16,31 @@ bannerclass: "alert"
 Either
 
 - turn off the checkbox in the GUI under Options → Network → Map port using UPNP (see above)
-- add `-upnp=0` to the command line options
 - add the line `upnp=0` to your `bitcoin.conf` file
+- add `-upnp=0` to the command line options
 
 Alternatively, upgrade to a version of Bitcoin Core at least 0.10.3 or 0.11.1.
-These versions upgrade the library to a non-vulnerable version, as well as have
-upnp disabled by default to prevent this problem in the future.
+These versions upgrade the library to a non-vulnerable version, as well as
+disable UPnP by default to prevent this problem in the future.
 
 ## Details
 
 Version before 1.9.20151008 of the miniupnpc library are vulnerable to a buffer
 overflow in the XML parser during initial network discovery. The
-vulnerable code triggers at startup of Bitcoin Core if upnp is enabled. 
+vulnerable code triggers at startup of Bitcoin Core if UPnP is enabled.
 
 Details of the vulnerability can be found here: http://talosintel.com/reports/TALOS-2015-0035/
 
-It has been verified that the vulnerability can be used to crash the application at startup.
+It has been verified that the vulnerability can be used to crash the
+application at startup by running a malicious UPnP server on the local
+network.
 
 To have more connectable nodes, the Bitcoin Core executables distributed by
-bitcoin.org include the library and have always had UPnP functionality enabled
-by default.
+bitcoin.org include the miniupnpc library and have always had UPnP
+functionality enabled by default, to forward the P2P port.
 
-This applies to the distributed executables only, not when building from source or
-using distribution provided packages. Self-built executables have UPnP disabled
+This applies to the distributed executables only, not those built from source or
+from distribution provided packages. Self-built executables have UPnP disabled
 by default, unless `--enable-upnp-default` was provided to the configure script.
 
 Releases starting from 0.10.3 and 0.11.1, and the upcoming 0.12.0 will still ship

From d3d01dcf0faf5fe2e328d24e2da18c8df4859cdf Mon Sep 17 00:00:00 2001
From: Saivann <saivann@gmail.com>
Date: Mon, 12 Oct 2015 09:04:17 -0400
Subject: [PATCH 4/6] Make link clickable on uPnP alert page

---
 _alerts/2015-10-12-upnp-vulnerability.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
index a4510784..7b3e2547 100644
--- a/_alerts/2015-10-12-upnp-vulnerability.md
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -29,7 +29,7 @@ Version before 1.9.20151008 of the miniupnpc library are vulnerable to a buffer
 overflow in the XML parser during initial network discovery. The
 vulnerable code triggers at startup of Bitcoin Core if UPnP is enabled.
 
-Details of the vulnerability can be found here: http://talosintel.com/reports/TALOS-2015-0035/
+Details of the vulnerability can be found here: <http://talosintel.com/reports/TALOS-2015-0035/>
 
 It has been verified that the vulnerability can be used to crash the
 application at startup by running a malicious UPnP server on the local

From 3fb01e8c72fb378b57326dbe75f3135abcaad57d Mon Sep 17 00:00:00 2001
From: "David A. Harding" <dave@dtrt.org>
Date: Mon, 12 Oct 2015 09:10:57 -0400
Subject: [PATCH 5/6] Alerts/upnp: show banner / describe manual port
 forwarding

---
 _alerts/2015-10-12-upnp-vulnerability.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
index 7b3e2547..5475c4a0 100644
--- a/_alerts/2015-10-12-upnp-vulnerability.md
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -5,7 +5,7 @@
 title: "Vulnerability in UPnP library used by Bitcoin Core"
 shorturl: "upnp-vulnerability"
 active: true
-#banner: "WARNING: serious vulnerability in UPnP library used by Bitcoin Core (click here to read)"
+banner: "WARNING: serious vulnerability in UPnP library used by Bitcoin Core (click here to read)"
 bannerclass: "alert"
 ---
 
@@ -54,3 +54,11 @@ makes it harder to use this vulnerability for remote code execution or private
 key leaks. However, it is still advised to upgrade, or if not possible, disable
 UPnP as soon as possible.
 
+## Manual Port Forwarding
+
+With UPnP turned off, your node will still connect to 8 other peers on
+the Bitcoin network to receive new blocks and transactions.  However, it
+will not accept incomming connections from other peers unless you
+manually enable port forwarding on your router.  If you wish to do
+that---it isn't required---please [follow these
+instructions](/en/full-node#network-configuration).

From 38c10793e01f6ff673473368f5410cb675e25085 Mon Sep 17 00:00:00 2001
From: "Wladimir J. van der Laan" <laanwj@gmail.com>
Date: Mon, 12 Oct 2015 16:19:18 +0200
Subject: [PATCH 6/6] mention that 0.11.1 and 0.10.3 aren't released yet

---
 _alerts/2015-10-12-upnp-vulnerability.md | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/_alerts/2015-10-12-upnp-vulnerability.md b/_alerts/2015-10-12-upnp-vulnerability.md
index 5475c4a0..cae4d65f 100644
--- a/_alerts/2015-10-12-upnp-vulnerability.md
+++ b/_alerts/2015-10-12-upnp-vulnerability.md
@@ -19,9 +19,10 @@ Either
 - add the line `upnp=0` to your `bitcoin.conf` file
 - add `-upnp=0` to the command line options
 
-Alternatively, upgrade to a version of Bitcoin Core at least 0.10.3 or 0.11.1.
-These versions upgrade the library to a non-vulnerable version, as well as
-disable UPnP by default to prevent this problem in the future.
+Also upgrade to a version of Bitcoin Core at least 0.10.3 or 0.11.1 when they
+are released (the release cycle is in progress). These versions upgrade the
+library to a non-vulnerable version, as well as disable UPnP by default to
+prevent this problem in the future.
 
 ## Details