<div dir="ltr"><div>Hi Sylvain,</div><div><br></div><div>LORIS 23 is a very old version of LORIS that isn't supported anymore. The current release is v26. The page in question was completely rewritten for LORIS v24. (I just checked to make sure the current release doesn't appear to be vulnerable) but I'm not sure who is responsible for <a href="http://ipmsa-loris.bic.mni.mcgill.ca" target="_blank">ipmsa-loris.bic.mni.mcgill.ca</a>. <br></div><div><br></div><div>I think addressing this would either require upgrading the version or LORIS on that instance or someone involved in ipmsa to do some development on an unsupported version of LORIS to try and fix the issue. The former is probably more advisable.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Sep 26, 2024 at 11:06 AM Sylvain MILOT <<a href="mailto:sylvain@bic.mni.mcgill.ca">sylvain@bic.mni.mcgill.ca</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg4376551476318214056"><br>
Hi Folks,<br>
<br>
what is your recommendation to mitigate this issue ?<br>
<br>
this is Loris version 23.0.0 (Release Date: 2020-06-12), if I'm to trust the CHANGELOG.md file on Ubuntu 16.04.4 LTS<br>
<br>
Unsure if this is maintained anymore but the person who was responsinle for it is a member of this mailing list - Alfredo Morales Pinzon I believe.<br>
<br>
---<br>
Sylvain Milot (<a href="mailto:sylvain@bic.mni.mcgill.ca" target="_blank">sylvain@bic.mni.mcgill.ca</a>, <a href="mailto:sylvain.milot@mcgill.ca" target="_blank">sylvain.milot@mcgill.ca</a>)<br>
IT Analyst / Research Systems Admin<br>
McConnell Brain Imaging Centre / Montreal Neurological Institute<br>
3801 University Street, Webster 2B, Room 206<br>
Montreal, Qc., Canada, H3A 2B4
<div lang="EN-CA" style="overflow-wrap: break-word;">
<div class="m_4376551476318214056WordSection1">
<p class="MsoNormal" style="margin-bottom:12pt">Hello Sylvain and Ivan,<u></u><u></u></p>
<p class="MsoNormal">The Government of Quebec's Centre Gouvernemental de Cyberdéfense discovered the vulnerability or vulnerabilities listed in the table below.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">By law, McGill University is required to:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">take action to address any vulnerabilities they find; <u></u><u></u></p>
<p class="MsoNormal">promptly reply back to them with a plan for resolving the issue(s).<u></u><u></u></p>
<p class="MsoNormal">As we have a limited timeframe to address the situation, could you please reply back to this email no later than Sep 27<sup>th</sup> to confirm that you've either resolved the vulnerability, or provide us with your proposed plan and timeframe
to do so? Due to our legal obligations, if the vulnerability has not been resolved after Nov. 25<sup>th</sup> we will have to temporarily block external access to the service, system, or site (e.g. it will not be accessible to anyone from outside the McGill
network).<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Vulnerability Details:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal">Name: <a href="http://ipmsa-loris.bic.mni.mcgill.ca" target="_blank">ipmsa-loris.bic.mni.mcgill.ca</a><u></u><u></u></p>
<p class="MsoNormal">Address: 132.216.133.49<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Vulnerability webpages :<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Times New Roman",serif"><u></u> <u></u></span></p>
<p class="MsoNormal">Affected Items :<span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black">
</span><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/" target="_blank">https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/</a><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<table border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<thead>
<tr>
<td width="100" style="width:75pt;border:1pt solid darkgray;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>ID PSV </b><b><span style="font-family:"Calibri",sans-serif"><u></u><u></u></span></b></p>
</td>
<td width="429" style="width:321.4pt;border-width:1pt 1pt 1pt medium;border-style:solid solid solid none;border-color:darkgray darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>Actif <u></u><u></u></b></p>
</td>
<td width="94" style="width:70.15pt;border-width:1pt 1pt 1pt medium;border-style:solid solid solid none;border-color:darkgray darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>Criticité <u></u><u></u></b></p>
</td>
<td width="142" style="width:106.35pt;border-width:1pt 1pt 1pt medium;border-style:solid solid solid none;border-color:darkgray darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA">Date de création de la PSV
<u></u><u></u></span></b></p>
</td>
<td width="258" style="width:193.3pt;border-width:1pt 1pt 1pt medium;border-style:solid solid solid none;border-color:darkgray darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA" style="background:yellow">Quel est l'impact du préjudice maximal?
</span><span style="background:yellow">(Ex</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow"> </span><span style="background:yellow">:</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow"> </span><span style="background:yellow">«</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow"> </span><span style="background:yellow">Réputation:Élevé</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow"> </span><span style="background:yellow">»)
<u></u><u></u></span></b></p>
</td>
<td style="border-width:1pt 1pt medium medium;border-style:solid solid none none;border-color:darkgray darkgray currentcolor currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA" style="background:yellow">Est-ce qu'un correctif est disponible?
</span><span style="background:yellow">(oui/non) <u></u><u></u></span></b></p>
</td>
</tr>
</thead>
<tbody>
<tr>
<td style="border-width:medium 1pt 1pt;border-style:none solid solid;border-color:currentcolor darkgray darkgray;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center">PSV-4804<u></u><u></u></p>
</td>
<td width="429" style="width:321.4pt;border-width:medium 1pt 1pt medium;border-style:none solid solid none;border-color:currentcolor darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/" target="_blank">https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/</a><u></u><u></u></p>
</td>
<td width="94" style="width:70.15pt;border-width:medium 1pt 1pt medium;border-style:none solid solid none;border-color:currentcolor darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center">2- Moyenne<span style="color:black"><u></u><u></u></span></p>
</td>
<td width="142" style="width:106.35pt;border-width:medium 1pt 1pt medium;border-style:none solid solid none;border-color:currentcolor darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal" align="center" style="text-align:center">2024-09-25<u></u><u></u></p>
</td>
<td width="258" style="width:193.3pt;border-width:medium 1pt 1pt medium;border-style:none solid solid none;border-color:currentcolor darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal">Moyenne<u></u><u></u></p>
</td>
<td style="border-width:1pt 1pt 1pt medium;border-style:solid solid solid none;border-color:darkgray darkgray darkgray currentcolor;padding:0.75pt">
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Times New Roman",serif">OUI<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span lang="EN">1) Criticality : CVSS 6.5<u></u><u></u></span></p>
<p class="MsoNormal">2) Description : <span lang="EN">Cross-Site Scripting (XSS) attacks occur when data is included in dynamic content that is sent to a web user without checking for malicious content. The variety
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN"> of XSS-based attacks is almost limitless, but they typically involve transmitting private data to the attacker or performing other malicious operations on the <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN"> user's machine under the guise of the vulnerable site. The "from", "firstname", and "lastname" parameters have been found to be vulnerable to XSS HTML
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN"> injection attacks. These parameters are used on the IPMSA account sign-up page.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN">3) Probability : After intercepting the request, the attacker can test the parameters to inject malicious code. This vulnerability is often exploited by attackers.<u></u><u></u></span></p>
<p class="MsoNormal">4) Impact : The attacker can inject malicious code or cause a redirect to a dangerous site. They can also exfiltrate information entered by the victim.<u></u><u></u></p>
<p class="MsoNormal">5) Proposed solution : Data from the form must be validated and sanitized on the server side before it is used or stored. The "from", "firstname" and "lastname" fields were used
<u></u><u></u></p>
<p class="MsoNormal"> for injection, but it is important to validate and sanitize all fields in the form
<u></u><u></u></p>
<p class="MsoNormal">6) Reference : <a href="https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS).html" target="_blank">
OWASP Top Ten 2017 | A7:2017-Cross-Site Scripting (XSS) | OWASP Foundation</a><u></u><u></u></p>
<p class="MsoNormal"> <a href="https://www.cgisecurity.com/xss-faq.html" target="_blank">
https://www.cgisecurity.com/xss-faq.html</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">7) Details and proofs of concept : <u></u><u></u></p>
<p class="MsoNormal"> To demonstrate the execution of the JavaScript code, here are 3 links displaying an alert with the value 1:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last&from=testest.com%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&site=2&project" target="_blank">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last&from=testest.com"><script>alert`1`</script>&site=2&project</a><u></u><u></u></span></p>
<p class="MsoNormal"><img border="0" width="423" height="93" style="width: 4.4097in; height: 0.9722in;" id="m_4376551476318214056_x0000_i1030" src="cid:ii_1922eec3f084cff313"><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&lastname=last&from=testest.com&site=2&project" target="_blank">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first"><script>alert`1`</script>&lastname=last&from=testest.com&site=2&project</a><u></u><u></u></span></p>
<p class="MsoNormal"><img border="0" width="416" height="119" style="width: 4.3333in; height: 1.2361in;" id="m_4376551476318214056_x0000_i1029" src="cid:ii_1922eec3f087745b44"><span style="font-size:11pt"><br>
<a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&from=testest.com&site=2&project" target="_blank">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last"><script>alert`1`</script>&from=testest.com&site=2&project</a><u></u><u></u></span></p>
<p class="MsoNormal"><img border="0" width="413" height="107" style="width: 4.3055in; height: 1.1111in;" id="m_4376551476318214056Picture_x0020_1" src="cid:ii_1922eec3f08855d355"><span style="font-size:11pt"><br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal">Next steps:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Get help if needed: If you're not sure what to do, don't hesitate to reach out to your IT team or service provider. They can guide you through the steps to fix these issues.<u></u><u></u></p>
<p class="MsoNormal">In the future: It's crucial to proactively scan and address vulnerabilities promptly to keep your system secure.<u></u><u></u></p>
<p class="MsoNormal">Stay in touch: Once you've taken steps to fix things, let us know. We'll do our best to help if you need further assistance or have any questions.<u></u><u></u></p>
<p class="MsoNormal">Hope to hear from you soon,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Kindly find the attached file.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Best Regards,<u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US">Jaetaek Kim </span></b><b><span lang="EN-US" style="font-size:10pt;color:rgb(166,166,166)">CISSP</span></b><b><span lang="EN-US"><u></u><u></u></span></b></p>
<p class="MsoNormal"><span lang="EN-US">IT Information Security Analyst<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Infrastructure and Information Security (IIS)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">T: 514-396-1036<u></u><u></u></span></p>
<p class="MsoNormal"><a href="mailto:Jaetaek.kim@mcgill.ca" target="_blank"><span lang="EN-US" style="color:rgb(5,99,193)">Jaetaek.kim@mcgill.ca</span></a><span lang="EN-US"> |
</span><a href="http://www.mcgill.ca/it" target="_blank"><span lang="EN-US" style="color:rgb(5,99,193)">www.mcgill.ca/it</span></a>
<span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">805 Sherbrooke O. #200, Montréal, QC, H3A 0B9<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><img border="0" width="395" height="97" style="width: 4.118in; height: 1.0138in;" id="m_4376551476318214056Picture_x0020_3" src="cid:ii_1922eec3f075b006a1" alt="IT Services logo w McGill Crest_tagline eng"></span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><i><span lang="EN-US">Get<b> CyberSafe </b>and<b> Secure Your Journey.
</b></span></i><span lang="FR-CA">| </span><a href="http://www.mcgill.ca/cybersafe" target="_blank"><span lang="FR-CA" style="color:rgb(5,99,193)">www.mcgill.ca/cybersafe</span></a><span lang="FR-CA"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:11pt"><u></u> <u></u></span></p>
<div>
<div style="border-width:1pt medium medium;border-style:solid none none;border-color:rgb(225,225,225) currentcolor currentcolor;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif"> COCD <</span><a href="mailto:cocd@education.gouv.qc.ca" target="_blank"><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">cocd@education.gouv.qc.ca</span></a><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">>
<br>
<b>Sent:</b> September 24, 2024 1:44 PM<br>
<b>To:</b> Sylvain Hamel <</span><a href="mailto:sylvain.hamel@mcgill.ca" target="_blank"><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">sylvain.hamel@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">>;
Dennis Hayson Wong <</span><a href="mailto:hayson.wong@mcgill.ca" target="_blank"><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">hayson.wong@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">>; Jacek
Slaboszewicz <</span><a href="mailto:jacek.slaboszewicz@mcgill.ca" target="_blank"><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">jacek.slaboszewicz@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">><br>
<b>Cc:</b> Alex Aragona <</span><a href="mailto:alex.aragona@mcgill.ca" target="_blank"><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">alex.aragona@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:</b> PSV-4804_Université McGill-979000_ Signalement de vulnérabilité par le CGCD _ 2024-09-25<br>
<b>Importance:</b> Low<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="FR-CA"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12pt"><span lang="FR-CA">Bonjour, <br>
<br>
Nous tenons à vous informer que nous avons reçu un signalement du CGCD d'une vulnérabilité touchant l'un de vos actifs.
<br>
<br>
Nous avons déposé le rapport du signalement <b>(PSV-4804)</b> sur le Teams: <br>
</span><a href="https://eduqc.sharepoint.com/sites/TM-SI-3-Reseaux-GTIR-Partage-Universits/Documents%20partages/Partage%20-%20Universit%C3%A9s/979000%20-%20Universit%C3%A9%20McGill/Signalement%20Vuln%C3%A9rabilit%C3%A9%20CGCD" target="_blank"><span class="m_4376551476318214056MsoSmartlink"><span lang="FR-CA">TM-SI-3-Réseaux-GTIR
> Partage - Universités > 979000 - Université McGill > Signalement Vulnérabilité CGCD.
</span></span></a><span lang="FR-CA"><br>
<br>
Selon </span><a href="https://eduqc.sharepoint.com/sites/TM-SI-3-Reseaux-GTIR/Documents%20partages/General/Processus%20GMVI%202022-V4.2-2022-06-22.pdf" target="_blank"><span class="m_4376551476318214056MsoSmartlink"><span lang="FR-CA">le processus GMVI
</span></span></a><span lang="FR-CA">, vous avez l’obligation de prendre en charge cette vulnérabilité et nous fournir les réponses aux questions ci-dessous au plus tard le:
<b>27-09-2024</b> <u></u><u></u></span></p>
<p><span lang="FR-CA">Sachant que la probabilité de concrétisation (Priorité) est:<b> Moyenne
</b><u></u><u></u></span></p>
<p><span lang="FR-CA">En utilisant le tableau 1: <br>
1. Quel est le type de préjudice ayant l'impact le plus élevé ? (Exemple : Préjudice causé à la réputation)
<br>
2. Quelle est votre évaluation du niveau d'impact du préjudice sélectionné? (Exemple : Élevé)<u></u><u></u></span></p>
<p><span lang="FR-CA">3. Est-ce qu'un correctif est disponible, sans développement interne?<u></u><u></u></span></p>
<p><span lang="FR-CA">Selon les tableaux 8 à 10 et votre réponse à la question 3 :
<br>
4. Quel est le délai de correction prescrit selon le processus GMVI? (2/8/15/30/45/60/90 jours)
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR-CA"><br>
Si vous avez des questions, n’hésitez pas à nous contacter. <br>
</span><span lang="FR-CA"><br>
<br>
Ce courriel est confidentiel et destiné exclusivement à l'organisation propriétaire de l'actif cible. Si vous n'êtes pas le destinataire prévu et que vous avez reçu ce courriel par erreur, veuillez le supprimer immédiatement et nous en aviser.
<br>
<br>
Responsable du traitement: Sofien Khayat <br>
</span><a href="mailto:sofien.khayat.ext@education.gouv.qc.ca" target="_blank"><span lang="FR-CA">sofien.khayat.ext@education.gouv.qc.ca</span></a>
<span lang="FR-CA"><u></u><u></u></span></p>
<table border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100%;background:rgb(230,230,230);border-collapse:collapse">
<tbody>
<tr style="height:48.75pt">
<td width="160" style="width:120pt;padding:0.75pt 30pt;height:48.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="color:rgb(110,110,110)"><img border="0" width="140" height="50" style="width: 1.4583in; height: 0.5208in;" id="m_4376551476318214056Picture_x0020_2" src="cid:ii_1922eec3f08692e332"></span><span style="color:rgb(110,110,110)"><u></u><u></u></span></p>
</td>
<td width="40%" style="width:40%;padding:0.75pt 15pt;height:48.75pt">
<p align="center" style="text-align:center"><span lang="FR-CA" style="font-size:10pt;font-family:"Times New Roman",serif;color:rgb(110,110,110)">Centre Opérationnel de Cyberdéfense
<br>
Ministère de l’Éducation et Ministère de l’Enseignement supérieur<u></u><u></u></span></p>
</td>
<td width="40%" style="width:40%;padding:0.75pt 15pt;height:48.75pt">
<p align="center" style="text-align:center"><span lang="FR-CA" style="font-size:10pt;font-family:"Times New Roman",serif;color:rgb(110,110,110)">Courriel :
</span><span style="font-size:10pt;font-family:"Times New Roman",serif;color:black"><a href="mailto:cocd@education.gouv.qc.ca" target="_blank"><span lang="FR-CA">cocd@education.gouv.qc.ca</span></a></span><span lang="FR-CA" style="font-size:10pt;font-family:"Times New Roman",serif;color:rgb(110,110,110)"><br>
Tél.: (418) 644-0602 poste : 4000<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><img border="0" width="1" height="1" style="width: 0.0069in; height: 0.0069in;" id="m_4376551476318214056_x0000_i1025" src="https://u20063366.ct.sendgrid.net/wf/open?upn=u001.7eFyKHmFPn7AOoxT9FXJFRBj4MrkZ84ZtCQf3IPiq4I201WgnNCe20N-2ByKZXyntLrUzJzjKRXPVbhHlcLPBWFwiXzGNzIgtbhQjAbcSXvXSm-2F-2B76xQicGWfaE67l8SBc7r948-2F88UyiL8-2F2kOpFIZA2OnLswETHUwqypp3nbpc57DNo3cinfj8b-2Fh29e6mOZWGVzh9yx00M-2FB4sezC9WsQ-3D-3D"><u></u><u></u></p>
</div>
</div>
_______________________________________________<br>
Loris-dev mailing list<br>
<a href="mailto:Loris-dev@bic.mni.mcgill.ca" target="_blank">Loris-dev@bic.mni.mcgill.ca</a><br>
<a href="https://mailman.bic.mni.mcgill.ca/mailman/listinfo/loris-dev" rel="noreferrer" target="_blank">https://mailman.bic.mni.mcgill.ca/mailman/listinfo/loris-dev</a><br>
</div></blockquote></div>