python-xml-2.7.18-150000.62.1 < > , eap9|= soLUߚfr/mڡ?8h}݀"~ͯ@o,W|ߘ 0ZO#UU8{& ܈n4jIM٫eͮn tBU?O!H1S
o p إ?CJa^q{*][ {Xd"7HsSa " eQti8bL;{Q.3S݃ kYQcϤg,ÒR);4(ܬL_6N0C =8/ > A ? d
7
# @ X ^ h H H H
H H H
H 8 H H 0 H P
( > 8 H j 9 j : & j B F G H H H I 4 H X | Y Z [ \ H ] H ^ b p c d e f l u H v w H x H y I z 0 4 : | C python-xml 2.7.18 150000.62.1 A Python XML Interface The expat module is a Python interface to the expat XML parser. Since
Python2.x, it is part of the core Python distribution. eah02-armsrv3 SUSE Linux Enterprise 15 SUSE LLC Python-2.0 https://www.suse.com/ Development/Libraries/Python https://www.python.org/ linux aarch64 p 6 6 f f O O
8
8 ~n
f E . 3 3 01 ; ; % | D > : : r " = ;E ;E 6a 2 2 -$ 9 9 1X K KA큤A큤A큤A큤A큤 e_e^eeWeWe^eeWeWeeWeWeeWeWeeWeYeeWeYeeWeYeeWeWeeWeYe^eeWeWeeWeWeeWeYeeWeWeeWeWe^eeWeWeeWeWe^eeWeWeeWeWeeWeWeeWeWeeWeWeeWeWe981d20b1c9afa317ad408c44c745cf02d1438b8f710786a897ea9d412d73699 f7505dd698b46cea1c33df6f6271deb6d258dae44ea81a98ac0a5843f4628a2a e2b64f3587874247fa61399c2039c0696f49f1e9ff332a101d3b687d316ca4db e2b64f3587874247fa61399c2039c0696f49f1e9ff332a101d3b687d316ca4db c300c6604ca93b1881c195521d78458291e6ae7f920dff5f44e954459cdfff6c 6efc20b391b45eb78b1929d535917b13c64dbe6623c87b27ea764c5d563ec3e3 6efc20b391b45eb78b1929d535917b13c64dbe6623c87b27ea764c5d563ec3e3 41794fd3de8a997f9de757b93b1f4d6b9ae39d714bc50d6ceab32507df4baaf5 aac920f43a3adcda0890511af76fafc97a4c194df415f2f7d44221de2cd38778 aac920f43a3adcda0890511af76fafc97a4c194df415f2f7d44221de2cd38778 68c663a1ad47fb12cc385e67fe2c11780059182ea466b5dbf34036f7b930c58a 3f9025b33a9ad7b2c12d93f0cb27ffb723c65527d631e3916dadbcee48484e8e 3f9025b33a9ad7b2c12d93f0cb27ffb723c65527d631e3916dadbcee48484e8e dd0de3cefc0bca763ba5960533725891337b75fedb138c68e3e72d5511b1c2b7 c458ebe731f1cee91b07bf1c929d9d4bbada76c30302e4082bba3acf991b9eb9 2ed83229caefbd55e96d3c7265ad2d8d8f7bde92840184f56fb7fe720a38a9b4 e3c0e9f2a2cecbd7a6f1cfed48d0bae2db90f6bb3f9a15867ed707bea1224330 1b40a0a45475b909253ab2c9719486a0453b004ca6b99ad4be4e31b2ec1deea6 1b348924960d56ce458b0995ccc67aa17db451cdbd1b540dcc3c964f7d6bf8cb 2091e8e2450e35f82b8bd2de80073b0154adb7b05f0db188ef2364588ad964eb 5f8f976d68212a10dd293e51883cabcab8ea013e0a4668c7b61755ec7aa1501d fed3ffdcd3bd6eebf5ae0bf1ca8151265d9c2de75da4ede69e70a43217470c3b 9facce33207f01be7b88a107b78d2f8d33bf23e4975e23825efc360a8af0b2a0 407ac45018293d24b7b7a84594e22892efc8a1de12de6f6d72456e636b27c894 407ac45018293d24b7b7a84594e22892efc8a1de12de6f6d72456e636b27c894 bb6440075a2fcdd80185e0265c09bb12286fb13b70817ef8d76ad45445a81d50 f93bbf04466397b3cb920055a422f1daabaa0ed82b2af656a76abd4bc17b6fa3 d99c60dab93cfc55464b20eca2c6a0eb60f8947d91112f5a9f7380bdfde47ecb 0d595a393babd9c3177bb515f43d235dd03ceed56d50c782b760f3053eb22e65 f3ea7288890dd498692e58644292fe46de8bd4173e683adc0ae1800a0a9f283d f3ea7288890dd498692e58644292fe46de8bd4173e683adc0ae1800a0a9f283d 9e16e5386f600efb224c83f2e3230ac100834a72e8a677137d55a62ffbc86d23 b930954dc1abe501c1bb4bbff185394cbf0aa3906497f2c8fb2fa31084bf8251 b930954dc1abe501c1bb4bbff185394cbf0aa3906497f2c8fb2fa31084bf8251 bbeb0c1a116bec837081f4e82613ab6bede16a48a19b20312cb15e4c89cd71b5 80fca46363bccc51bb01532b694a08dba648afcf9086c2a281dcd87619078d8a b04a9678d8db508fc6881fffda492226e20e8fe0a89185a5c1ca084e8d3d8810 171cc64fd9c7ba894922a35cdec74c4e34ebfd1e7973ad25c01b80ddde35b4cd b9ffebef4bd1379b055df93b9b36728b35192737a19f9baf68c2181503e1c519 b9ffebef4bd1379b055df93b9b36728b35192737a19f9baf68c2181503e1c519 fdba1d27306b4a2b6ce4e2e8ce516d72ae54b0b9e55e8c274e69debe942ba277 315a286937499bd9c88622d756436051025e1b4845266b028d07512d641adb3a 315a286937499bd9c88622d756436051025e1b4845266b028d07512d641adb3a b88497adc30d5d5eda7789c25a2206ee9270c932d584d7ac42680325651da45c 4cb435f06667bfb103b1c38ba52a4c5e390afe8ab9d8049c646507179f281c2b 4cb435f06667bfb103b1c38ba52a4c5e390afe8ab9d8049c646507179f281c2b 6502ce9343156221b8e55e21216460d7c21904db826de630d2ca38359bfe4027 bca668d5fc0e3c00d593125a4603b1d01a823d181f2b9d8a6369ae949d8f1279 bca668d5fc0e3c00d593125a4603b1d01a823d181f2b9d8a6369ae949d8f1279 aa479baa3b683edad7021ef0f6b9382370a5b5db2f066c47e00414ab9b1fe97b 4e98a72f8dba937d6e67162882c225b90a0f3641a42d94f5400c72d8082f953d 4e98a72f8dba937d6e67162882c225b90a0f3641a42d94f5400c72d8082f953d cfa45778e457731e0988d9ceef29cf9eeef916f22d7bd53f4cb08c7a2b8b2ce2 7b20550869635dea05488502e797e6b5c40a61b97a21173cf44842d5e0d2359a 7b20550869635dea05488502e797e6b5c40a61b97a21173cf44842d5e0d2359a d185c615c70af11f0fc3cb45b0cf078b4aeb65606f8190e99d1a3885395faa5b 7b2ed5025d16cb6e9ec46c3f92202151fd345c3aa8f37bd3303876cb55078d38 7b2ed5025d16cb6e9ec46c3f92202151fd345c3aa8f37bd3303876cb55078d38 6970baec6fcab81adb5559a12759069007c34a990cd1211a5823719c23c7ac71 caba02b32e5e0bada95ccc96837cbecee09bc9de7869fed5ea0271fa0970572e caba02b32e5e0bada95ccc96837cbecee09bc9de7869fed5ea0271fa0970572e b8cbed9b8679ed5978d71c4a371f3632a7a8a1893bbc849baf1ba5a1fe79083f 6af8b6d1e1f0af21b57adf77579babfdf9b4c18ae02e28a5efddb87a297616a1 6af8b6d1e1f0af21b57adf77579babfdf9b4c18ae02e28a5efddb87a297616a1 471a6007b26231c95ac286b8fcd9236b201c04ed8308d4ddb6141027270f5986 6b2ab1cded6b3f2188b5dc2d594c03c5be5cbac54f2a5059bb633289618c24c9 6b2ab1cded6b3f2188b5dc2d594c03c5be5cbac54f2a5059bb633289618c24c9 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python-base-2.7.18-150000.62.1.src.rpm python-xml python-xml(aarch-64) python2-xml pyxml @ @ @ @ @ @ @
ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libpthread.so.0()(64bit) libpython2.7.so.1.0()(64bit) python(abi) python-base rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.7 2.7.18-150000.62.1 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 4.14.1 ee
ee Rd˖dD@dq@du@dtdm@dxdc>@cӼc0c|ck@c pcbbb@b@b@ba@a@a(@aim@aI@a'@a#aj@a`t`8`_T^J^@^@^>^>^;^8 @^.^g@^
@]f@]@]]]d@]d@]@]z@]V]y@]9]1] \t@\\7\7\\J@\J@\C@\2[[#@[6 @[ @[
@[Za@Z@ZxG@ZtRZp^@Z
CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
(boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE:
* bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch
(boo#1189287, CVE-2021-3733)
- Fix python-doc build (bpo#35293):
* sphinx-update-removed-function.patch
- Update documentation formatting for Sphinx 3.0 (bpo#40204). - Add bpo43075-fix-ReDoS-in-request.patch which fixes ReDoS in
request (bpo#43075, boo#1189287).
- Add missing security announcement to
bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch. - Add bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
which fixes http client infinite line reading (DoS) after a http
100 (bpo#44022, boo#1189241). - Modify Lib/ensurepip/__init__.py to contain the same version
numbers as are in reality the ones in the bundled wheels
(bsc#1187668). - Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids
use of semicolon as a query string separator (bpo#42967,
bsc#1182379, CVE-2021-23336). - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
_ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package.
Unnecessary dependency. - Add patch configure_PYTHON_FOR_REGEN.patch which makes
configure.ac to consider the correct version of
PYTHON_FO_REGEN (bsc#1078326). - Use python3-Sphinx on anything more recent than SLE-15 (inclusive). - Update to 2.7.18, final release of Python 2. Ever.:
- Newline characters have been escaped when performing uu
encoding to prevent them from overflowing into to content
section of the encoded file. This prevents malicious or
accidental modification of data during the decoding process.
- Fixes a ReDoS vulnerability in `http.cookiejar`. Patch by Ben
Caller.
- Fixed line numbers and column offsets for AST nodes for calls
without arguments in decorators.
- bsc#1155094 (CVE-2019-18348) Disallow control characters in
hostnames in http.client. Such potentially malicious header
injection URLs now cause a InvalidURL to be raised.
- Fix urllib.urlretrieve failing on subsequent ftp transfers
from the same host.
- Fix problems identified by GCC's -Wstringop-truncation
warning.
- AddRefActCtx() was needlessly being checked for failure in
PC/dl_nt.c.
- Prevent failure of test_relative_path in test_py_compile on
macOS Catalina.
- Fixed possible leak in `PyArg_Parse` and similar
functions for format units "es#" and "et#" when the macro
`PY_SSIZE_T_CLEAN` is not defined.
- Remove upstreamed patches:
- CVE-2019-18348-CRLF_injection_via_host_part.patch
- python-2.7.14-CVE-2017-1000158.patch
- CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch
- CVE-2018-1061-DOS-via-regexp-difflib.patch
- CVE-2019-10160-netloc-port-regression.patch
- CVE-2019-16056-email-parse-addr.patch - Add CVE-2019-9674-zip-bomb.patch to improve documentation
warning about dangers of zip-bombs and other security problems
with zipfile library. (bsc#1162825 CVE-2019-9674) - Change to Requires: libpython%{so_version} == %{version}-%{release}
to python-base to keep both packages always synchronized (add
%{so_version}) (bsc#1162224). - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367) - Provide python-testsuite from devel subkg to ease py2->py3
dependencies - Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
off tests coliding with the combination of modern Python and
ancient OpenSSL on SLE-12. - libnsl is required only on more recent SLEs and openSUSE, older
glibc supported NIS on its own. - Add provides in gdbm subpackage to provide dbm symbols. This
allows us to use %%{python_module dbm} as a dependency and have
it properly resolved for both python2 and python3 - Drop appstream-glib BuildRequires and no longer call
appstream-util validate-relax: eliminate a build cycle between
as-glib and python. The only thing would would gain by calling
as-uril is catching if upstream breaks the appdata.xml file in a
future release. Considering py2 is dying, chances for a new
release, let alone one breaking the xml file, are slim. - Unify packages among openSUSE:Factory and SLE versions.
(bsc#1159035) ; add missing records to this changelog.
- Add idle.desktop and idle.appdata.xml to provide IDLE in menus
(bsc#1153830) - Add python2_split_startup Provide to make it possible to
conflict older packages by shared-python-startup. - Move /etc/pythonstart script to shared-python-startup
package. - Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
bsc#1149792 - Add adapted-from-F00251-change-user-install-location.patch fixing
pip/distutils to install into /usr/local. - Update to 2.7.17:
- a bug fix release in the Python 2.7.x series. It is expected
to be the penultimate release for Python 2.7.
- Removed patches included upstream:
- CVE-2018-20852-cookie-domain-check.patch
- CVE-2019-16935-xmlrpc-doc-server_title.patch
- CVE-2019-9636-netloc-no-decompose-characters.patch
- CVE-2019-9947-no-ctrl-char-http.patch
- CVE-2019-9948-avoid_local-file.patch
- python-2.7.14-CVE-2018-1000030-1.patch
- python-2.7.14-CVE-2018-1000030-2.patch
- Renamed remove-static-libpython.diff and python-bsddb6.diff to
remove-static-libpython.patch and python-bsddb6.patch to unify
filenames. - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
python/Lib/DocXMLRPCServer.py - Add bpo36302-sort-module-sources.patch (boo#1041090) - Add CVE-2019-16056-email-parse-addr.patch fixing the email
module wrongly parses email addresses [bsc#1149955,
CVE-2019-16056] - boo#1141853 (CVE-2018-20852) add
CVE-2018-20852-cookie-domain-check.patch fixing
http.cookiejar.DefaultPolicy.domain_return_ok which did not
correctly validate the domain: it could be tricked into sending
cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS - bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
which fixes regression introduced by the previous patch.
(CVE-2019-10160)
Upstream gh#python/cpython#13812 - Set _lto_cflags to nil as it will prevent to propage LTO
for Python modules that are built in a separate package. - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
Address the issue by disallowing URL paths with embedded
whitespace or control characters through into the underlying
http client request. Such potentially malicious header
injection URLs now cause a ValueError to be raised. - bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
removing unnecessary (and potentially harmful) URL scheme
local-file://. - bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
Characters in the netloc attribute that decompose under NFKC
normalization (as used by the IDNA encoding) into any of ``/``,
``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
URL is decomposed before parsing, or is not a Unicode string,
no error will be raised (CVE-2019-9636).
Upstream commits e37ef41 and 507bd8c. - (bsc#1111793) Update to 2.7.16:
* bugfix-only release: complete list of changes on
https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst
* Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch
which are fully included in the tarball.
* Updated patches to apply cleanly:
CVE-2019-5010-null-defer-x509-cert-DOS.patch
bpo36160-init-sysconfig_vars.patch
do-not-use-non-ascii-in-test_ssl.patch
openssl-111-middlebox-compat.patch
openssl-111-ssl_options.patch
python-2.5.1-sqlite.patch
python-2.6-gettext-plurals.patch
python-2.7-dirs.patch
python-2.7.2-fix_date_time_compiler.patch
python-2.7.4-canonicalize2.patch
python-2.7.5-multilib.patch
python-2.7.9-ssl_ca_path.patch
python-bsddb6.diff
remove-static-libpython.patch
* Update python-2.7.5-multilib.patch to pass with new platlib
regime. - bsc#1109847 (CVE-2018-14647): add
CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing
bpo-34623. - bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch
PyWeakref_NewProxy@Objects/weakrefobject.c creates new isntance
of PyWeakReference struct and does not intialize wr_prev and
wr_next of new isntance. These pointers can have garbage and
point to random memory locations.
Python should not crash while destroying the isntance created
in the same interpreter function. As per my understanding, both
wr_prev and wr_next of PyWeakReference instance should be
initialized to NULL to avoid segfault. - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
fixing bpo-35746 (CVE-2019-5010).
An exploitable denial-of-service vulnerability exists in the
X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
A specially crafted X509 certificate can cause a NULL pointer
dereference, resulting in a denial of service. An attacker can
initiate or accept TLS connections using crafted certificates
to trigger this vulnerability. - Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros. - Add patch openssl-111.patch to work with openssl-1.1.1
(bsc#1113755) - Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
converts shutil._call_external_zip to use subprocess rather than
distutils.spawn. [bsc#1109663, CVE-2018-1000802] - Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent
low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS
(CVE-2018-1061). Prior to this patch mail server's timestamp was
susceptible to catastrophic backtracking on long evil response from
the server. Also, it was susceptible to catastrophic backtracking,
which was a potential DOS vector.
[bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060] - Apply "CVE-2017-18207.patch" to add a check to Lib/wave.py that
verifies that at least one channel is provided. Prior to this
check, attackers could cause a denial of service (divide-by-zero
error and application crash) via a crafted wav format audio file.
[bsc#1083507, CVE-2017-18207] - Apply "python-sorted_tar.patch" (bsc#1086001, boo#1081750)
sort tarfile output directory listing - update to 2.7.15
* dozens of bugfixes, see NEWS for details
- removed obsolete patches:
* python-ncurses-6.0-accessors.patch
* python-fix-shebang.patch
* gcc8-miscompilation-fix.patch
- add patch from upstream:
* do-not-use-non-ascii-in-test_ssl.patch - Add gcc8-miscompilation-fix.patch (boo#1084650). - Apply "python-2.7.14-CVE-2017-1000158.patch" to prevent integer
overflows in PyString_DecodeEscape that could have resulted in
heap-based buffer overflow attacks and possible arbitrary code
execution. [bsc#1068664, CVE-2017-1000158] - exclude test_socket & test_subprocess for PowerPC boo#1078485
(same ref as previous change) - Add python-skip_random_failing_tests.patch bypass boo#1078485
and exclude many tests for PowerPC - Add patch python-fix-shebang.patch to fix bsc#1078326 - exclude test_regrtest for s390, where it does not segfault as it should
(fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
(this is actually fixed by the 2.7.14 update; mentioning this for purposes
of bugfix tracking) - update to 2.7.14
* dozens of bugfixes, see NEWS for details
* fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
* fixed segfaults with dict mutated during search
* fixed possible free-after-use problems with buffer objects with custom indexing
* fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch
- Apply "python-2.7.14-CVE-2018-1000030-1.patch" and
"python-2.7.14-CVE-2018-1000030-2.patch" to remedy a bug that
would crash the Python interpreter when multiple threads used the
same I/O stream concurrently. This issue is not classified as a
security vulnerability due to the fact that an attacker must be
able to run code, however in some situations -- such as function
as a service -- this vulnerability can potentially be used by an
attacker to violate a trust boundary. [bsc#1079300,
CVE-2018-1000030] - Call python2 instead of python in macros - Fix test broken with OpenSSL 1.1 (bsc#1042670)
* add 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch - drop SUSE_ASNEEDED=0 as it is not needed anymore - Add libnsl-devel build requires for glibc obsoleting libnsl - obsolete/provide python-argparse and provide python2-argparse,
because the argparse module is available from python 2.7 up - SLE package update (bsc#1027282)
- refresh python-2.7.5-multilib.patch
- dropped upstreamed patches:
python-fix-short-dh.patch
python-2.7.7-mhlib-linkcount.patch
python-2.7-urllib2-localnet-ssl.patch
CVE-2016-0772-smtplib-starttls.patch
CVE-2016-5699-http-header-injection.patch
CVE-2016-5636-zipimporter-overflow.patch
python-2.7-httpoxy.patch
- Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1.
(dimstar@opensuse.org) - Add reproducible.patch to allow reproducible builds of various
python packages like python-amqp
Upstream: https://github.com/python/cpython/pull/296 - update to 2.7.13
* dozens of bugfixes, see NEWS for details
* updated cipher lists for openssl wrapper, support openssl >= 1.1.0
* properly fix HTTPoxy (CVE-2016-1000110)
* profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
with python-2.7.13-overflow_check.patch, incorporating upstream changes
(bnc#964182)
- add "-fwrapv" to optflags explicitly because upstream code still
relies on it in many places - provide python2-* symbols, for support of new packages built as
python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
macros.python2 - initial packaging of `python27` side-by-side variant (fate#321075, bsc#997436)
- renamed `python` to `python27` in package names and requires
- removed Provides and Obsoletes clauses
- dropped SLE12-only patch python-2.7.9-sles-disable-verification-by-default.patch,
companion sle_tls_checks_policy.py file and the python-strict-tls-checks subpackage
- dropped profile files
- removed /usr/bin/python and /usr/bin/python2, along with other unversioned
aliases
- rewrote macros file to enable stand-alone packages depending on py2.7
- re-included downloaded version of HTML documentation - update to 2.7.12
* dozens of bugfixes, see NEWS for details
* fixes multiple security issues:
CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
CVE-2016-5636 zipimporter heap overflow (bsc#985177)
CVE-2016-5699 httplib header injection (bsc#985348)
(this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py - CVE-2016-0772-smtplib-starttls.patch:
smtplib vulnerability opens startTLS stripping attack
(CVE-2016-0772, bsc#984751)
- CVE-2016-5636-zipimporter-overflow.patch:
heap overflow when importing malformed zip files
(CVE-2016-5636, bsc#985177)
- CVE-2016-5699-http-header-injection.patch:
incorrect validation of HTTP headers allow header injection
(CVE-2016-5699, bsc#985348)
- python-2.7-httpoxy.patch:
HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY
when REQUEST_METHOD is also set
(CVE-2016-1000110, bsc#989523) - Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
[bnc#964182] - copy strict-tls-checks subpackage from SLE to retain future compatibility
(not built in openSUSE)
- do this properly to fix bnc#945401
- update SLE check to exclude Leap which also has version 1315,
just to be sure - Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1. - add missing ssl.pyc and ssl.pyo to package
- implement python-strict-tls-checks subpackage
* when present, Python will perform TLS certificate checking by default.
it is possible to remove the package to turn off the checks
for compatibility with legacy scripts.
* as discussed in fate#318300
* this is not built for openSUSE, but retained here in case we want
to build the package for a SLE system - python-fix-short-dh.patch: Bump DH parameters to 2048 bit
to fix logjam security issue. bsc#935856 - add __python2 compatibility macro (used by Fedora) (fate#318838) - update to 2.7.10
- removed obsolete python-2.7-urllib2-localnet-ssl.patch - Reenable test_posix on aarch64 - python-2.7.4-aarch64.patch: Remove obsolete patch
- python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for
aarch64 - update to 2.7.9
* contains full backport of ssl module from Python 3.4 (PEP466)
* HTTPS certificate validation enabled by default (PEP476)
* SSLv3 disabled by default (bnc#901715)
* backported ensurepip module (PEP477)
* fixes several missing CVEs from last release: CVE-2013-1752,
CVE-2013-1753
* dozens of minor bugfixes
- dropped upstreamed patches: python-2.7.6-poplib.patch,
smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch
- dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it
with ssl module from Python 3
- libffi was upgraded upstream, seems to contain our changes,
so dropping libffi-ppc64le.diff as well
- python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional
"import ssl" from test_urllib2_localnet that caused it to fail without ssl - skip test_thread in qemu_linux_user mode pyxml h02-armsrv3 1707796833
! ! # $ $ & ' ( ) * * , - - / 0 1 1 3 4 4 6 7 8 8 : ; ; = > > @ A A C D D F G G 2.7.18-150000.62.1 2.7.18-150000.62.1 2.7.18 0.8.5 0.8.5 pyexpat.so xml __init__.py __init__.pyc __init__.pyo dom NodeFilter.py NodeFilter.pyc NodeFilter.pyo __init__.py __init__.pyc __init__.pyo domreg.py domreg.pyc domreg.pyo expatbuilder.py expatbuilder.pyc expatbuilder.pyo minicompat.py minicompat.pyc minicompat.pyo minidom.py minidom.pyc minidom.pyo pulldom.py pulldom.pyc pulldom.pyo xmlbuilder.py xmlbuilder.pyc xmlbuilder.pyo etree ElementInclude.py ElementInclude.pyc ElementInclude.pyo ElementPath.py ElementPath.pyc ElementPath.pyo ElementTree.py ElementTree.pyc ElementTree.pyo __init__.py __init__.pyc __init__.pyo cElementTree.py cElementTree.pyc cElementTree.pyo parsers __init__.py __init__.pyc __init__.pyo expat.py expat.pyc expat.pyo sax __init__.py __init__.pyc __init__.pyo _exceptions.py _exceptions.pyc _exceptions.pyo expatreader.py expatreader.pyc expatreader.pyo handler.py handler.pyc handler.pyo saxutils.py saxutils.pyc saxutils.pyo xmlreader.py xmlreader.pyc xmlreader.pyo /usr/lib64/python2.7/lib-dynload/ /usr/lib64/python2.7/ /usr/lib64/python2.7/xml/ /usr/lib64/python2.7/xml/dom/ /usr/lib64/python2.7/xml/etree/ /usr/lib64/python2.7/xml/parsers/ /usr/lib64/python2.7/xml/sax/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32576/SUSE_SLE-15_Update/c42c9c60349e24d7db57de982a5d7ed3-python-base.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2dd07d1088f60e39607a65ccf4141388d4a45b04, stripped directory Python script, ASCII text executable python 2.7 byte-compiled ASCII text
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R Cx96ݾ utf-8 b32f205ea5ad7bdaee33f5156ae0f96d89d9033339dd86422b22b7362eee3f51 ? 7zXZ
! t/䁖] "k%f9%) ֎lIG}ӭ1Y7s5ݦZU
`+eq#i2:woy~K#%ݧEtԛ\Hs
c,NE -OTp~saeZ)Af$\ݪo2ܖ^' ; Mddp.G7pRFL,%-AKP?Ab֧riUŧWz UM,ﵶ][@⤝ߵ{ 0)( Ww=p*gJ %sQ0Q D℮ ^ԱJ(q:>:E]1N\[ Ù%p8#gq$J81:=dHZv 8T,zKt(*[BGνEODG@ـ(-cłj)W0%mEX(-&זDc6!8BQȔ% ) !%Dl=pw DfU2L!Oz)`aW|pk~tQ_q2uNqS_5 rri#o'2`ɑV1p9Pѱ|^\9lx>Z=:oO9bK翆b6i)R|xg('*Ng?ܐc\`#YF+p cө-qr;-es ]XlCWڵLJm#ݚ=&]1ɥ=eMy% Z &/K24m=Cja_H~hKĎ+֚Vo*XKbjw_J1ͪ|kƂf^0~e|o2 Ϡ+0 jڵ[P<,,y~eTYy SѳD#Ni V"Z2 gIPjU xr!vno n1"izt~_;K+DhNUu茱 q#nu
(.=wB|}#|)=&tm|NĵVfk!Iޜ2XJ?軄j퍛o jK״{4OgͷA 1AGM9T#}~@"n wy1
$,ؼ7--Ȇ~%p]D&{c͑115|wgdi =
Ny{,GsCa L.Fle`3cIeK,ИsIB 'ƈmT! ko'֝ iMUsK
4Ma!E T7k| ƹqd²qy T;Nr+Q*Wq %j_'S+˃e
&\mbr_IFZ7Je}E@}`j Jlj~/Lߠc +SHV
GL# ~tM8ӾjXWY
I[hxDtcPQ}a7Uw8S[.QR%,*U '3PoR/Ք>ԚS@H)xrx'_/俍1hEËOrfK4ӵpO&r/P!M7CN LJƂG
zhPr4Z_3yg4h¢4Q۴^ZS' ᕘ߈sWܰ9 ^
[xLu_MW+xQ=ҍmuGN<W_vy9_U ߂l?(VA o-K9 1\9:*c[9Ε]2n#XGmg}n>զ:(w =ӡĤ10"\; <} *(hZ.,u/ /(QZ a5S5ge {
;B`U?糷Cm L!ljɵQK:>0}#*6ϚX;3-3)WҧLuBF_qDMNߋOp tMm@xc`~*fC(pu&Utk!IYhcȽ78=xj[lЕUP [9ͦ&cM2w WtpzxGaW{>1oO oS}[^V ڛ LNrhhжŻh K)rTDEGUw_>a.YȌ}h1y <|+cHV
oX{%ҽٯڭSRikbQ( }ĥ>{,~@x <y9$efS%7MV£j%mg@kI (-k639 ;aFVl3y:;h!WݔHl&XolʶȠ
YO0ɚm
d
zKu:?ũDnx}phFvi`^Z.(S N tN?,,F !v >L @wx/l1NleyLŗGuLAqm_a"-aV=^ ? gʥ؛- #b"Ywܮvtz `;AOHl{dKsk /Jd\w 9Qnn<0AȬ0V =1YI|ߖʾr?^1b'\;}H%kS,< s>q>)CrJS +w/3vzk2?VB|Bdñk!~mFT@IvLZ,l扠I
tQc= Rxr`}1,
R𫺒L 0:F`5Ob]O#wX^"w~2.. (4}`G E"P^boi̶vmgI*,:'JX J =w4J媉I=dq3gJS?tɚjF4}neC
t}?|j=kk\~>8 02Ģk+- bZ7fZ+=-n#-wPdlj R*D= Μl gkTecZ4 d "DrG:zUߚgmG-[H|rFk"ͽMe]+FŰ2 ϥY2'?mG+s(bñZC ]"FH+E27 ^ (ER" ]G_79뮸hp_+i֪ IPrVdnȴp+Xx(dh ߟ6t1pu
k5]*~V@ꩶW>u{8
{TΩ
sޯNW2.>
*8` T8Opej|:?Dnh"0VIwڑ.]}WnG"pmT\Vj l"M
$5K aѐyp G4"=m0y2b wL%DiשEK?
8~E5q) -3 ,^:
6p^Bm>6B/rjo¤/v+u:=7]ޘ ,^9蒎0ƫNBqQmgG;*/F,i_!v~3
xTL)7q1!=Rnׁ}c]pM ` IVN 0Fr1@2n2q5mB8 g!an&I G2K,')۷E 17` }'mݮ /fufUF3
((o}x , cTНQ߯h@|jpkZm1aL$W5!si4&[ȄO\
a 8/*=6ؗRv,K̅56!ЮEGH ڭM!"Eu1 į/ |,nwu}?'Qh=SS"N}>FH~MtV$!>d"e ]ɀ J'.Aʲh -FϺɀ ik= R."FrK$*č鬖Y ;λnu@:OR>['zs}g. oWeAˆ"uM?%feT|á&>E=rG϶NYH{$
m/Hkc>Բ* qЅ 0yB -lj|S tI;͊ K-kn,h/MʋU\ށb]~|ESh1=4}Fɲ-?nASEiRU]]- ًWukt}o g+7B[q\~x~#,LuxèKd }E$8l5 HNLn'Bʦ!?*=hE[IIl7(b'W(% ycVG$ kxT2 -7/X۪{'1 qkeϷ/D /FS;r#]fYDG baq3$!D:-_Y# >c%YîZpJ1 >Fv b| ePItid2ld(y~7M$m\ٶvJ
L4_F)P#k,(j-ΥW(v. ? 5(dB6(W8'})p+ Jm/2Pq:s;+F$>;UoLY ,%fYԢ~M0W+Ps
j_UaW!9A__?HiC?*@Y9qrJnۺTDm-Zcu%UT)cعi=@[vɍ1J17ީSJa)xX|Q-|p20a"m4]V`SC{Wts.i XjezRW^uϖZ% oZV&oYA34vm{6"`seFNp f,>Yqgvj^Fqj 2
͓qm16M}9τ^ FږYֶ
E)4IHyr&<a.H)"We{~ëRh AI~f
zҔ%LK,(s+.vRqDfKfTRJrnXc2sp5bZmS.PCKm vo}u3iw#$Fx8`1z1G=~ CR]
|GC}oXgasм0zR|'N_7$آO
b|LdųaEFyj鞅Vb"&0 i1 R jy ϰ'p4PBXRLm- ( GGU6vKTE
pUYaG;Nj;5Hm
UuS3n#JosGi(nFT STx5rɷGT{5ZYs|cHt08k=\M.t\w0>.1%TdGDAze0=_( UĽ) ]L)T%jA
.lnM}lnS! %]F4_@^hV5= t+gv<ΨL:y8lFg{v6 Ϳy3Ū 'Īco6uSrqaq( 8ci+ 8:=)5H
x Mr&96y+%h ~9:7$'[#nO6ً
bX6o7$= r2+LVk Y{S־ b1
ۿ픽݉# Mr
]@yܡ|_^uXͻb@\l.`غ89w/< -wC 39Q֊,Ļ%X YF.e u?Y4~hi+֜"xc/DuڻLqXyd$>Se}f;pWG@Sc#ҫ>/w 'lj (MP`z8-A *(۫&y\@60YqUmh*8\VwC^>IIZfe9Aq}a;ϿHme{*Z꾝7).i&(*Ҧdr
Tn0Mw8@Her)zoW8,NM"bֵ~LxiS<Ӂ^>AyGgF h c(U
jJUL}b%|PXAмiq%7oJTK6:>X#0TIƘLQXAMټ~~yT"{ '9X ,p`ǃ pID/D6B@ZGV| HɢoŲ~ ZՇzw!"f(N Q73vyI`(]%>n7Nu}"劎]ާEՒ[0th>]`8 jO^a&KJpśY
Ϩy4#KXv"j }e9Z<FnNHjp?ë#9JTC iF #ҽ+_מgc]k<[|7$1'z#/,N*HfvreR F"=nIh 6-= GLwx F0[~I2Bm4zģQE ]h;k6uⴄ 1ٲc୍PEBi7YRE2鸣o9kdž0+Ҝ j%Pg1PiH/u з vRr"?2?{Ԓr`lK8BD2}rw ~8WFo֩fKòM
kt:U^#z݂'4w2C"z`&qڶoZ(@pAy;l@~q;MsFw:|NETّ~hCt*\9 4z?w>Q) %c
KL !_g|a .%$whXV˃FِدHPs RPicBiV#N7>!QvGPNogݷ7ZSg'-0uMVN2IL!E!Se>~
2%?T_W"2Z$@_ o[[DXqMe# VMK3) Nj/`a ~DK +{}g X$2Ό'z6^&GZbAk@HA3^jU>)eG[ [V.γ;)+]\)C`@'LiS(`s߆[{0s&k#P]<_IF;C CW86m鏧
m"dߚ ]
FXR4f}z0hN=x o#v:nMh^¶Ea"̓
A>0 !v"G @KFu2ͼDy=EDCy
3lς8bj ?XnR07"b]ItЕn¦an#}K2d\E7X'AaRz%g[eb+νSR5_xM]T63=]7@@]xkSY%Ode" b14t "IvYvѯ\Je5S jaE_h ͤКoVV
!G ~^0creLj[λ u=iޮo '>zZ> Hl=I(l*^ qbU̱' n9:5Bu3>
7L
p_SJ 1]dF>S iŻ2552"lc[ 㚠-wOzNp Y:npg
p\i'M z>h!x+)ft{yce-
C,=>%g8ȱ뉳a2PL{q]ˍi\8} +fu~cp$cd${D*6jmO5"$5nf= +J~,Y t
S) 4Y X6?)P((gC_0}HS3\Id ~T}rQ3kvA2MF)ߋJ/s?m
.b3;S*]v`μ%ʗFt0' k[H#
A&;VKeBu0i6d}/$i^p'=fm ȱڑ +?GEeQUpp;+k\1^ 6M C$7ł)_ czʚt~zKty_pJ*`9@/@f z]E+/.=1|7!p A3bۤ`O
!eyZ;17!1!x^kE _.[ %"6dZ;(3Г/ʳpWKD{caiZEkl9ҘWņLg!POd~A9|TI[`W"Dgf>0K%毱!Ȼl]q ]a 됝x'"y\mW " #T!T`{"RYnC9F<H6^㌗B)U
L:ZiHL)<8YK1RjY4^& | ǩQ k H
h 0/H
`zjh<O$y,S']r. qoz6~!dIw/ ' ?sʍֆX1nQ6 :J.srEC U1
XZODuiVhK gt2j ms@PnD8 F/C
r(Ȱm5nCo4M!#nȆQtp.N $;M7>!5yDiahOTanḥXT:i7JW5 h5 eހV8ͯβʋӱ%P蕀ѵ\C "5ݲ3vzچ yNlZiCfJdMk$\á;{M`$]í?>#&[H!>!#k_ N iE\÷!OIO
>BΊMGMɴXO]e7<0M Xh\k(Mެ*k̽H5 yW/_"wUO" 'O; :(ȎP aˠ_ʼ%pJgR=bs|sgZ>^`(v kм>Br @hU⫝̸D$sR'q4Ц=mQfoHGVPv jn@JCƅ5q]OD] ųv&oYYAc\u$tݦz+QA9sl ]>hTE EGa֓*TK l0 q
˥|Ę2guU5-#!w
}BM \p~d ݬ&qyHս^\,34](Q4('q+HlR;OL(!;
3gcsRpbLz g0 ;1&* NثWdL$l V$TXU4HS
I'vN C n/
vW壳-oτ7)E饨#ݕ4MtZ b_auUiqD60N7EH<9A\IJt+@ )a4M> v\Uy< fqy+Va= YGvG^^U+{2 pz:Id?z{ s]4Yv
1,R \<'Wn4]Dy4({TJB%lb4{#YL&'2 VY,H:D;՜B ^W I1zID'ԘbsDi8 {m@4W--t+q˙ا0f|o^pY3vZJ eF_Y&9]ͪc> M9W]$^,wm seD1i^?
]r dXRYs5{:.ʨo*E@lc%/{ۜX2U%F)( kLŔD,B $ TCVȎ
>.$7&KqL |H! z"SpYpBW|RޑQV}: Sd WK>ީshxs%pbNd!x04߈v]ܦ`.g] ,K
t}7VܑmCOg/~{5:a_G50vժ/g *),NܹBBo}1{O)ں>mڮsM&R!~^mKuY U S3kyԝ"vUaٲF"
մJl'RW^/W5 L6 O "?R7,|PWٍic>[[U0L5諹b7#夦+ЈosLY| <.{7,}!"VOxp#>y %p
Ѳ۟e1P2#\2^5|91M\ XbWZ^"z8^mFnpq! .bHT[9)Z9N[>gT6Nٕ`zij^@ ~yX kV̎Tp^|9dz;ݠS4Qf81yFR7^W&n xr*3as@ 90,|&QK E,=ߪB ͶΉF+J
^8r[zVbҴB V8 ae@> MoQUgrˤE`!ϛͅ*R$9, -FkD@\C&1 V0wff&: S
E1G Sց+N;ٙ߀ <[ tA衉5G^q^EPfY S3^`+Cm#e4TA G։Mv7QćTC|m읰w5ֶX 5
ۉͼ+B89O+q|w4rߌfUڿi@2?uρTQ +h̍4sKOgK-9|H)VW:^Y&[7UBs*H5whIqrb;.c?-=mQsyg "2-$XwV
5K?H_X`8 q8QPY+Q'{ҥPWW\v(IJ;
kk->F_N{ZF<? ,+"3äSj iX
Zuγ
ݔDvͮ }>D=YyߔjQ:لI!4Bq6P귖C_]R%x}/C%'5YW^:;E[r.'4#BN>eݑSݬqDk%5ڴU>Gϥg>߁˿>hgK/9N-r(^Z$"l XYzXjUqa J@בZFbu7Pdw
n֊3&2:H䡇 ۾Zh*ԬQr\|\7V~ p=zq0;ĕض&|=҄Ǽy>0s+e-Sղ3"JsK-2 瞫?8iQωrี2ވ{|y@4Yr) ulBr>.ꫂh Q%Hyi0^9,WxX*
A=9 Zm8xs qUT>~P. mՃW2 ).q÷1 nkd );y NVk'I?;$bW6}8VF\Q)9 إhݼgyJ TFJ&h|7I*#D0{ {wJr:}_JH4Q$,W+l` f"ʤC+[֚XhkX/#.\uŶP/wc(K6Ox:e^/BrM^c=}h(aIPnH>hu<
A0e;9}EtA:~b4ڮ
8F?0o#g}$'"64^_]G-Hp?huL S@ .+6_bqRF7!.wT $^Prh4Mo4!ʓpTE0ltw7ZZ=5}2Q, `w>
Œ"
ܪ}PxK) h
ZuQGƚh^dtڥZW _DЩonZ TC!!Y#H6AvM5%.݈yQl{}|iPCaVUe+}7'/b6J:I|lTEm|^ hƃ`Bp.dDoϫ8YUQ9'Ie\b]ǁkXil6ni1"9m`|3/ahWgJ&YLzHs*>T Rn o;_ҹn-N& L~V'#ת[n];j "t8w%^pVC7X0 ZlA; dlV0 gtf 05& qR[@,@( O>KL̙^2ÛFDt"}г$~FC ~ڿ6ۂ 9rPRxÇ?`+R;j+疮 Y Fo7`L t1ʣ&,Jjq %2ٻ"1?oxKi[^Z,~k}+"S6gKai*q>hQd ;$IbG{x;39ʐW5d(Q;9<;\ut+Rp
$GCw]<&˱;cGWeEN' YҟǢNij'3
#'H N6w!* j1\[zQ4˧\bBȀ2aTQ&O[-~ ]w+
ݥ0Ag6qcQ죤`[n3~x`*|D^spzzf%Z1"EH*@IwXV5!;[f9/ q(05JnZ#6lMIHe GTA)D45' Ai6Koy I$hye ~a'oŒR@ͩ'!(n ]m#[
_{=Nx2ڽhiwk,8)5A#ɬ }Pшi ٥pHu' r~> ?]e.08
A`d"=%888XA!wQ;IĪxlَZ,7"۞~M$C*t
H]6^ agQ,)cs[@R8Mo7C ^MCT註͂Ir9wU<ע{
*jw8 Vif<")ϏL+u; "2csʖ/՜o4]VZunTDAө,Q 31Jj~ncUyE-#Sѧ8\lDXۛ@Z`Yў?:S y0DwkbғTn8p%_yJU5wS 'BUjelH]ͣ>JC+y =K54Y a`g*N4߽(;'
{y[I(bCgCp Y^ͯ9<|% NJ9i@*"B6] r+1&'C[Ƅ[11~y&G<{X6tqjj)CXޱJ
g^ fc;Z'`8i\A
P36y]r=5^1<&OG|t(Eh N(
Ke3{E fwLɁw"U%~6>ޖŦC?(~] ۩% ˴i#W|h څ"KOT\
st}Mg-=6p! vtlFt&!,: N,ڦD 93((O"6!#}!cϮbZѕ i6~JpzqM|Fu* rHUT!!w8ߋdL)$}ӐeH8W$碜97 mҟ
P
ʯ ~>4ѕWX 83ٓr: hpA!с
Wh\\ 9<(Gc= ujp9iݑ ʺ :/a&6UWlf +p]-UhkO a)2SF@2@}
w yj. OP_GB HZlE?08?s7#ZPv*9z쫖J(XA;E˟Ͽ.|υmԑ(uOsГ EɽE*ƞG,ؿ>68$n[w~+@;W}E ##/PfbpZR5Pz.8dÁM J;3H * (/Hg|vv,DJg[b;cz7Vy+e`g6L<]P;j2 8N")CDmCeP> *Qcԅ&r!C(6DAKvT3j}q-&}/[h1]M l U8N:+?P koy;t!FMEv
sd咠5(8Kc+'v(M,OCWn+w XK9џ+~ÎVi>Hn\x;*Ec)=,E,d4
ԴH t&M5[9|҉Kձss}(Ĭ&spCVqK NǒD 1] duq"3iE]i
cs by˦YLbJ^ &O# '
>.SRl+*ΨɪC,qw:r`lt_
_ߙǥ~П 6Iд/`}F(qyx
ƈh~w^[ㅉΎ.Lx,ǡ"ƛ
b0
n>{ٟc;Wux*U5'8Dv MV9QD&/V_@S4 5"( 4,`Q(]q$OPJ/UkFt 6L
&#UA,lWش9
GΘXk#Zd/'_r[A
]- {O\u͛\]]H=Ǝ< C@aH> *ClT3:h s Ԟ3-LPB@{gGkQ.?$9_LKwEse
)BwJO QS A K;p pK o闆9u$7<{҅Y
̼rhC:@
)\WG1o!05+4T3NSA?m[h{wnO;$U2O;ApJz<
\E$Μd)r,^&Vɲ p,! 褊hw"?GU3[ ~u6RhQJ>] $\tFwFߧ
-f
n 0 ^SG! NMT?u˔>by'E]Ê;i.mgH. ޫ%B+Mh ح/EVewo3ȫb_+
d 'M
nf D s'
?v6,@X ƥxO\ d=lC78s=K8A3xn4`0+R08;uz,=4B=+q 7lHQYE4cٴJdu4˥?EWr,v% t5 S쵓}@Ŋƥ_ţȈ>i750
oQbx|8Hsy+&ny!4_,.ռ Vq -QI~0m% Z yȮl .]+^ė`dy 4,|
HBdCq(EJ"7-eblC= 8vH8& h|γZB}XhI5f W ;#$40&iflLĻR+j%͂ ܴŌU\u7 JJ":4xdbQ; ŝf@7ۼ2# Ae~pKTX#7-;EQl:q֫+-U~xxmTE ZBG{Jj
*S/p_pY~pLJkmLdN9_eDb7{ FlI 8肣LU'W"o"zNyu? k}uix(/_x 2Ӆ`"3|2|75"Ug;1ӔW0NXm~/vDHG B0A~JC$.%q͜l4g'äMs]rQ% RAAdQڑ)ܴ@I&o: w$k:0&Ֆ`yK\NZ@
%N@I
V#{ W WVHIG'в~ |纈 ̛فQ/`#1 [7悟[Da&^7 @џt{ W-e9 OQ~]Ӯ7o{GΩe@? aTf R c+KβqTnD~ %w$7/VcK^:VVjfBmN3Ƈ̺aŀ|jbm:p).2ˏ8m0ͬYL0KNVByk9% 2u^d2^%ie@.y#3$cv:sƟr7)JwOQ$_ףWqD&<qf4L gҁx.7
S(rcU t qPC/ AM0DcP>R ۷?P'or(n뙕9*hFyLvmb<,]r p瘟s.OZCnQЂd t80x"c@QbԹ3(A*{EpGS֑-G[jV]o7ژB
uF )$!+WHGe)VG,udYyӶ "v} (Prx։X+o3:뚂_HlM/ k$EʖS .mE 30 R ZOx%<BҬ~63]|e+}S+E/ Wܹ"]k%4N> ?SGg$s@"#V_mdĖ'%F;͒2AOm)*O|y~ Sbp,\fd2%6=AQP ϽR?V*i%ʾYżƬkG˵Q%7exGyksvV⣐`8&
']@9XcYŬk6~Gl!+gd2*n.FIc gEk&sk}0NX Z\lӸaFe&rmv* &`鎖(+N (eC37W!
F|dl<5<ʌW+Qܟ\ʌXFD)C``-=d䎆i xy[oEkw* -FJݦҤP!/HŔTuٳ^rd GQE UkL/6X tx5W_rjh*.yfɮ _X d>=ш'ʠqWnU~_hÚ)!K[ (fp3j`G ѡȷ>4<#2ntVH
0du.%eSpQϕv w]ʸ Bp (Cq?*@/:ƢiF+ +1*c q ,d R1ZR}e|.f0kP֫bU*HqBkgH:] w^Yn"Hv/= bwa1'60udAt"H8
}ȇM :T];RnxqI!M _GWgbe?C75*s0BMf)K;4ӨnPAX p
<$r UnHZu E } +ܼmibC.S W}'QtU>|5?hlL_f_a
+Y h3`
\/к:8(UUlÞ"Ĥ܀(?l,69 M_ZpD Ą_5h
cXz&zkpt H67m.k=PQ娥K}X{c *dZQ:YT\rۨ|w8>Cӷ;ks>V/_Uڤ i
nOީ#w (c<U?QtP(3%)lZeXۦҁ'nWN=1p ?
*a loQVc̣O12Z%IZ[5Ⳅkai4p xw8v.ʬfR22ElĤfPE2#M4%P7Cw
fw{^j..\xUbn`lsS
&Q&\hXԺ!qBv(iU\>YQ6$eR<k+bk;
gm~l~r3 `44lxe?)Ld1XєX
Q
JI0荠zts|Af-uioJq ]5i7ԍ9ܦQC=c)v dvW5MA. ;fklPk ҷWH$(+j?Em=% #O\|u0 =%WVM o-p9 `iYs87c7W8AP}\XI !X]{*W5¡ӡ4#o wIG a ף:+RZXI7t% Haj
d _:w@. }RcA/ gR~˵%|*x61)ODchNue`UP_&OdZ mwuыڡǰz/ R3h<ӯ!'_>b L) y{"-VJ94SHSA~D]GG8yqٟ 'ߗ=5険,j?2>8#l[S\Uv(u/LK]&mK*ڙ3wx61 !;\Zs l\~Fi38MeCj}$re'r"3T ׅ (:&2E (˵sѠx[LČ'=` :ZhgM)Q(.c (J7f5G4't⑧,ZQk`J~#Yn0 ^HGd嚔e@k|JmzD`]&O8"h' `VfԺ ]pcKXP!L13EJB0{D %`
-ܫ^VNY3Aгs`x>8!
oT(
usCrm ojeR.zvm+i!ʧu*9
L:MZ柅=-,agE{7%2!!o<
W/fMi)@kȬWi|&²Ӛ$ߵ|A1O&N;# oGSB
͑??AwdYt0))@.XG6(=1ssOG"ݸ5%@6 ?ems >ѡxIג.<D^MI!j`G7 z:D Pǽ8)9#ޖ.No<9]lvq$Y4 Ex -i#b9p"9*p9eJfgT%,^h8!8r=vKv~ѼH+ #{}ۚkF$vX}Q ?YmȶKjh֬G$Mzw:-Og Ǒ,^uǫO> w 'qI|>] G.@^M_D!5̉1=1#o?{(Zxe#+Qqbl"m;`q݉az7
;N@p6䅥^(!$QJf71E
`p 29U
EU obrnYi>rxɻߣl8XngR(|eB~u\T`.494̒iJUK%l1a kXioX%V2ezj .RO,"^;"v;G&-LZ*ږŐ4&v:5;(Nat ВF&.^M@@ԛ?N16xsN|Y
YI+ַG9m}{mo9=mݢCA&
3vUz
uZ8Bʬ%L6 tI8k 1|ap4\n\ @SоaDmXٽ( ~} M 9[T; b5~1?FϹGqkI GBB9X)eL{A@v 6~b .s(4ՆK
:i
jSA|AGdIjꅨ:>, zm@G#hre} M@I}(!% ۩^ ;@ h V YV'
} rlstvn/̴VIӻS- OMUD~eKơF~'kwZ KYmM[ (dPl'Wz&^''+? ??h^cOOgH@ٮn^/BZ#tV`m"-
K t$HmjQyM\撄 `[G;z ZFMj-:z9᳕ ^`S'÷ z3M މd 2`V~I .2Վ1w`Uq1Bo Qj"[rE?#o}u( Y܆;, `1
%OIa)-9:0hs*3Ѳ䋸 3qA"-ۑ~#|}81VZrUm
'=; . =ͪH\
-I8Pi*ladYϖpJw8]P!D/#AǕ#\g^p`c\H3E53Ep(e$1!F
< R#2^0UK={`
LCUOI~`A>fU̐f#tRQj/T
9q5e\C6+>^}ҟ-Q^WF@0;l͋4`=& % pqB4j5A&kc ЩY!֘e'Y;1&:j~r[H.ŏѭk<>T.R }C ܷ2 BY^!Hmٵ(ț$ÚU+e/RkjlB->c Rߥjqeζ}ja% Hcl\rl'6Uwn8M Z{nsqث۹%ʝ =nb`/|x+Yg85f{K%zȇ4KHe<̩)B`d~Cyl| s[s#Nh4T%*}.{A { /o]7WP?F$:bFpzJ~%M,gfJPK_Mb\/k 1< ZX "Ȭx
MEWlk`fBT;',e%64c!5xX
Pϔfyjá' zg8G\XG;ڿ :1OcCxNfʗf%V|tՏl78xl/$A nN @ +{~ F@Qtn]% "~b] t_ҙ3t_!Rɻc0~ַ-J4Jⅉ I 9ڤB*+/n݂oJ-aK"QUجSHv. "Wqmmw t8N.y9`CD6{9
BҦFD] IMU!_ l iB8'Z8XT)}WԊ}99]a? Yyh̴rү3YѭᡈEluPaZN˽;ԂLe,-jgjۤX=Ww:_ OM9Ԕj
, xVDM*4]O 2O7D
ߞS82fč*_up'hhz~r
`#E탽dR=|7o_4pċ<cw~7a)`n 5 C73Hԅ+ ڲ IzF_yO-EsFw`OvgQ
_hVhůN4Nk(ϵ o <%qQ!=k{ kZ8Ow7R+Ki" 4,oHD\0 aĥ4vFFL44cjpfW3]"&'yyouܫĠ2D\qXL; YuT[K]2Mm
:e8[2a'#$\ "%7}V\v
lZI@&ϘM m yXP
yգU2!08=Q s
gΈ$ig|^)ɝ{15w| u8L)p+U++ {w@fJ7ׇ[ ّ#ӥ^KblN'bwɠ__ebZ&*I1PbrMIﴱljouO~36oY]Sj9DW>&Jr+~ia٠rvv dG}>fb Yv:8:#,@-)ʍ