python-xml-2.7.18-150000.62.1<>,ep9|{30%ZQݧQFCY {@ƀ.5d vE,xpRU Hd,h4odi,$\^# QfڥȰ\|\ve Ԣ;q>gYi'yUV"2I{%IkDzI/<$\ ulp/ r̵6q: D0 $XS-mm'+q _gF)~l%ͣu0 59M>A?d   7  #@X^hHH H H H H H8HH0HP (O8Xj9j:&jBFGHH HI@HXYZ[\H]H^b|c%defluHvwHxHyJz(8<BCpython-xml2.7.18150000.62.1A Python XML InterfaceThe expat module is a Python interface to the expat XML parser. Since Python2.x, it is part of the core Python distribution.eh01-ch2d;iSUSE Linux Enterprise 15SUSE LLC Python-2.0https://www.suse.com/Development/Libraries/Pythonhttps://www.python.org/linuxx86_6466ffOO 8 8~n  f E.3301;;%|D>::r"=;E;E6a22-$991XKKA큤A큤A큤A큤A큤eOeEeeCeCeEeeCeCeeCeCeeCeCeeCeEeeCeEeeCeEeeCeCeeCeEeEeeCeCeeCeCeeCeEeeCeCeeCeCeEeeCeCeeCeCeEeeCeCeeCeCeeCeCeeCeCeeCeCeeCeCbfb77e760d633a74d30c34cfa0ef00d2811445f73a54f36b579717c78224e749f7505dd698b46cea1c33df6f6271deb6d258dae44ea81a98ac0a5843f4628a2ae2b64f3587874247fa61399c2039c0696f49f1e9ff332a101d3b687d316ca4dbe2b64f3587874247fa61399c2039c0696f49f1e9ff332a101d3b687d316ca4dbc300c6604ca93b1881c195521d78458291e6ae7f920dff5f44e954459cdfff6c6efc20b391b45eb78b1929d535917b13c64dbe6623c87b27ea764c5d563ec3e36efc20b391b45eb78b1929d535917b13c64dbe6623c87b27ea764c5d563ec3e341794fd3de8a997f9de757b93b1f4d6b9ae39d714bc50d6ceab32507df4baaf5aac920f43a3adcda0890511af76fafc97a4c194df415f2f7d44221de2cd38778aac920f43a3adcda0890511af76fafc97a4c194df415f2f7d44221de2cd3877868c663a1ad47fb12cc385e67fe2c11780059182ea466b5dbf34036f7b930c58a3f9025b33a9ad7b2c12d93f0cb27ffb723c65527d631e3916dadbcee48484e8e3f9025b33a9ad7b2c12d93f0cb27ffb723c65527d631e3916dadbcee48484e8edd0de3cefc0bca763ba5960533725891337b75fedb138c68e3e72d5511b1c2b7c458ebe731f1cee91b07bf1c929d9d4bbada76c30302e4082bba3acf991b9eb92ed83229caefbd55e96d3c7265ad2d8d8f7bde92840184f56fb7fe720a38a9b4e3c0e9f2a2cecbd7a6f1cfed48d0bae2db90f6bb3f9a15867ed707bea12243301b40a0a45475b909253ab2c9719486a0453b004ca6b99ad4be4e31b2ec1deea61b348924960d56ce458b0995ccc67aa17db451cdbd1b540dcc3c964f7d6bf8cb2091e8e2450e35f82b8bd2de80073b0154adb7b05f0db188ef2364588ad964eb5f8f976d68212a10dd293e51883cabcab8ea013e0a4668c7b61755ec7aa1501dfed3ffdcd3bd6eebf5ae0bf1ca8151265d9c2de75da4ede69e70a43217470c3b9facce33207f01be7b88a107b78d2f8d33bf23e4975e23825efc360a8af0b2a0407ac45018293d24b7b7a84594e22892efc8a1de12de6f6d72456e636b27c894407ac45018293d24b7b7a84594e22892efc8a1de12de6f6d72456e636b27c894bb6440075a2fcdd80185e0265c09bb12286fb13b70817ef8d76ad45445a81d50f93bbf04466397b3cb920055a422f1daabaa0ed82b2af656a76abd4bc17b6fa3d99c60dab93cfc55464b20eca2c6a0eb60f8947d91112f5a9f7380bdfde47ecb0d595a393babd9c3177bb515f43d235dd03ceed56d50c782b760f3053eb22e65f3ea7288890dd498692e58644292fe46de8bd4173e683adc0ae1800a0a9f283df3ea7288890dd498692e58644292fe46de8bd4173e683adc0ae1800a0a9f283d9e16e5386f600efb224c83f2e3230ac100834a72e8a677137d55a62ffbc86d23b930954dc1abe501c1bb4bbff185394cbf0aa3906497f2c8fb2fa31084bf8251b930954dc1abe501c1bb4bbff185394cbf0aa3906497f2c8fb2fa31084bf8251bbeb0c1a116bec837081f4e82613ab6bede16a48a19b20312cb15e4c89cd71b580fca46363bccc51bb01532b694a08dba648afcf9086c2a281dcd87619078d8ab04a9678d8db508fc6881fffda492226e20e8fe0a89185a5c1ca084e8d3d8810171cc64fd9c7ba894922a35cdec74c4e34ebfd1e7973ad25c01b80ddde35b4cdb9ffebef4bd1379b055df93b9b36728b35192737a19f9baf68c2181503e1c519b9ffebef4bd1379b055df93b9b36728b35192737a19f9baf68c2181503e1c519fdba1d27306b4a2b6ce4e2e8ce516d72ae54b0b9e55e8c274e69debe942ba277315a286937499bd9c88622d756436051025e1b4845266b028d07512d641adb3a315a286937499bd9c88622d756436051025e1b4845266b028d07512d641adb3ab88497adc30d5d5eda7789c25a2206ee9270c932d584d7ac42680325651da45c4cb435f06667bfb103b1c38ba52a4c5e390afe8ab9d8049c646507179f281c2b4cb435f06667bfb103b1c38ba52a4c5e390afe8ab9d8049c646507179f281c2b6502ce9343156221b8e55e21216460d7c21904db826de630d2ca38359bfe4027bca668d5fc0e3c00d593125a4603b1d01a823d181f2b9d8a6369ae949d8f1279bca668d5fc0e3c00d593125a4603b1d01a823d181f2b9d8a6369ae949d8f1279aa479baa3b683edad7021ef0f6b9382370a5b5db2f066c47e00414ab9b1fe97b4e98a72f8dba937d6e67162882c225b90a0f3641a42d94f5400c72d8082f953d4e98a72f8dba937d6e67162882c225b90a0f3641a42d94f5400c72d8082f953dcfa45778e457731e0988d9ceef29cf9eeef916f22d7bd53f4cb08c7a2b8b2ce27b20550869635dea05488502e797e6b5c40a61b97a21173cf44842d5e0d2359a7b20550869635dea05488502e797e6b5c40a61b97a21173cf44842d5e0d2359ad185c615c70af11f0fc3cb45b0cf078b4aeb65606f8190e99d1a3885395faa5b7b2ed5025d16cb6e9ec46c3f92202151fd345c3aa8f37bd3303876cb55078d387b2ed5025d16cb6e9ec46c3f92202151fd345c3aa8f37bd3303876cb55078d386970baec6fcab81adb5559a12759069007c34a990cd1211a5823719c23c7ac71caba02b32e5e0bada95ccc96837cbecee09bc9de7869fed5ea0271fa0970572ecaba02b32e5e0bada95ccc96837cbecee09bc9de7869fed5ea0271fa0970572eb8cbed9b8679ed5978d71c4a371f3632a7a8a1893bbc849baf1ba5a1fe79083f6af8b6d1e1f0af21b57adf77579babfdf9b4c18ae02e28a5efddb87a297616a16af8b6d1e1f0af21b57adf77579babfdf9b4c18ae02e28a5efddb87a297616a1471a6007b26231c95ac286b8fcd9236b201c04ed8308d4ddb6141027270f59866b2ab1cded6b3f2188b5dc2d594c03c5be5cbac54f2a5059bb633289618c24c96b2ab1cded6b3f2188b5dc2d594c03c5be5cbac54f2a5059bb633289618c24c9rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpython-base-2.7.18-150000.62.1.src.rpmpython-xmlpython-xml(x86-64)python2-xmlpyxml@@@@@@@@     libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)libpython2.7.so.1.0()(64bit)python(abi)python-baserpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.72.7.18-150000.62.13.0.4-14.6.0-14.0.4-14.0-15.2-14.14.1ee eeRd˖dD@dq@du@dtdm@dxdc>@cӼc0c|ck@c pcbbb@b@b@ba@a@a(@aim@aI@a'@a#aj@a`t`8`_T^J^@^@^>^>^;^8 @^.^g@^ @]f@]@]]]d@]d@]@]z@]V]y@]9]1]\t@\\7\7\\J@\J@\C@\2[[#@[6@[@[ @[Za@Z@ZxG@ZtRZp^@Z CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch (boo#1189241, CVE-2021-3737)- Renamed patch for assigned CVE: * bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch (boo#1189287, CVE-2021-3733) - Fix python-doc build (bpo#35293): * sphinx-update-removed-function.patch - Update documentation formatting for Sphinx 3.0 (bpo#40204).- Add bpo43075-fix-ReDoS-in-request.patch which fixes ReDoS in request (bpo#43075, boo#1189287). - Add missing security announcement to bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch.- Add bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch which fixes http client infinite line reading (DoS) after a http 100 (bpo#44022, boo#1189241).- Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668).- Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids use of semicolon as a query string separator (bpo#42967, bsc#1182379, CVE-2021-23336).- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution.- (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency.- Add patch configure_PYTHON_FOR_REGEN.patch which makes configure.ac to consider the correct version of PYTHON_FO_REGEN (bsc#1078326).- Use python3-Sphinx on anything more recent than SLE-15 (inclusive).- Update to 2.7.18, final release of Python 2. Ever.: - Newline characters have been escaped when performing uu encoding to prevent them from overflowing into to content section of the encoded file. This prevents malicious or accidental modification of data during the decoding process. - Fixes a ReDoS vulnerability in `http.cookiejar`. Patch by Ben Caller. - Fixed line numbers and column offsets for AST nodes for calls without arguments in decorators. - bsc#1155094 (CVE-2019-18348) Disallow control characters in hostnames in http.client. Such potentially malicious header injection URLs now cause a InvalidURL to be raised. - Fix urllib.urlretrieve failing on subsequent ftp transfers from the same host. - Fix problems identified by GCC's -Wstringop-truncation warning. - AddRefActCtx() was needlessly being checked for failure in PC/dl_nt.c. - Prevent failure of test_relative_path in test_py_compile on macOS Catalina. - Fixed possible leak in `PyArg_Parse` and similar functions for format units "es#" and "et#" when the macro `PY_SSIZE_T_CLEAN` is not defined. - Remove upstreamed patches: - CVE-2019-18348-CRLF_injection_via_host_part.patch - python-2.7.14-CVE-2017-1000158.patch - CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch - CVE-2018-1061-DOS-via-regexp-difflib.patch - CVE-2019-10160-netloc-port-regression.patch - CVE-2019-16056-email-parse-addr.patch- Add CVE-2019-9674-zip-bomb.patch to improve documentation warning about dangers of zip-bombs and other security problems with zipfile library. (bsc#1162825 CVE-2019-9674)- Change to Requires: libpython%{so_version} == %{version}-%{release} to python-base to keep both packages always synchronized (add %{so_version}) (bsc#1162224).- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367)- Provide python-testsuite from devel subkg to ease py2->py3 dependencies- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch off tests coliding with the combination of modern Python and ancient OpenSSL on SLE-12.- libnsl is required only on more recent SLEs and openSUSE, older glibc supported NIS on its own.- Add provides in gdbm subpackage to provide dbm symbols. This allows us to use %%{python_module dbm} as a dependency and have it properly resolved for both python2 and python3- Drop appstream-glib BuildRequires and no longer call appstream-util validate-relax: eliminate a build cycle between as-glib and python. The only thing would would gain by calling as-uril is catching if upstream breaks the appdata.xml file in a future release. Considering py2 is dying, chances for a new release, let alone one breaking the xml file, are slim.- Unify packages among openSUSE:Factory and SLE versions. (bsc#1159035) ; add missing records to this changelog. - Add idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830)- Add python2_split_startup Provide to make it possible to conflict older packages by shared-python-startup.- Move /etc/pythonstart script to shared-python-startup package.- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes bsc#1149792- Add adapted-from-F00251-change-user-install-location.patch fixing pip/distutils to install into /usr/local.- Update to 2.7.17: - a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7. - Removed patches included upstream: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-16935-xmlrpc-doc-server_title.patch - CVE-2019-9636-netloc-no-decompose-characters.patch - CVE-2019-9947-no-ctrl-char-http.patch - CVE-2019-9948-avoid_local-file.patch - python-2.7.14-CVE-2018-1000030-1.patch - python-2.7.14-CVE-2018-1000030-2.patch - Renamed remove-static-libpython.diff and python-bsddb6.diff to remove-static-libpython.patch and python-bsddb6.patch to unify filenames.- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py- Add bpo36302-sort-module-sources.patch (boo#1041090)- Add CVE-2019-16056-email-parse-addr.patch fixing the email module wrongly parses email addresses [bsc#1149955, CVE-2019-16056]- boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server.- Skip test_urllib2_localnet that randomly fails in OBS- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch which fixes regression introduced by the previous patch. (CVE-2019-10160) Upstream gh#python/cpython#13812- Set _lto_cflags to nil as it will prevent to propage LTO for Python modules that are built in a separate package.- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised.- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch removing unnecessary (and potentially harmful) URL scheme local-file://.- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch Characters in the netloc attribute that decompose under NFKC normalization (as used by the IDNA encoding) into any of ``/``, ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the URL is decomposed before parsing, or is not a Unicode string, no error will be raised (CVE-2019-9636). Upstream commits e37ef41 and 507bd8c.- (bsc#1111793) Update to 2.7.16: * bugfix-only release: complete list of changes on https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst * Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch which are fully included in the tarball. * Updated patches to apply cleanly: CVE-2019-5010-null-defer-x509-cert-DOS.patch bpo36160-init-sysconfig_vars.patch do-not-use-non-ascii-in-test_ssl.patch openssl-111-middlebox-compat.patch openssl-111-ssl_options.patch python-2.5.1-sqlite.patch python-2.6-gettext-plurals.patch python-2.7-dirs.patch python-2.7.2-fix_date_time_compiler.patch python-2.7.4-canonicalize2.patch python-2.7.5-multilib.patch python-2.7.9-ssl_ca_path.patch python-bsddb6.diff remove-static-libpython.patch * Update python-2.7.5-multilib.patch to pass with new platlib regime.- bsc#1109847 (CVE-2018-14647): add CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing bpo-34623.- bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch PyWeakref_NewProxy@Objects/weakrefobject.c creates new isntance of PyWeakReference struct and does not intialize wr_prev and wr_next of new isntance. These pointers can have garbage and point to random memory locations. Python should not crash while destroying the isntance created in the same interpreter function. As per my understanding, both wr_prev and wr_next of PyWeakReference instance should be initialized to NULL to avoid segfault.- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746 (CVE-2019-5010). An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.- Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros.- Add patch openssl-111.patch to work with openssl-1.1.1 (bsc#1113755)- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which converts shutil._call_external_zip to use subprocess rather than distutils.spawn. [bsc#1109663, CVE-2018-1000802]- Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS (CVE-2018-1061). Prior to this patch mail server's timestamp was susceptible to catastrophic backtracking on long evil response from the server. Also, it was susceptible to catastrophic backtracking, which was a potential DOS vector. [bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060]- Apply "CVE-2017-18207.patch" to add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this check, attackers could cause a denial of service (divide-by-zero error and application crash) via a crafted wav format audio file. [bsc#1083507, CVE-2017-18207]- Apply "python-sorted_tar.patch" (bsc#1086001, boo#1081750) sort tarfile output directory listing- update to 2.7.15 * dozens of bugfixes, see NEWS for details - removed obsolete patches: * python-ncurses-6.0-accessors.patch * python-fix-shebang.patch * gcc8-miscompilation-fix.patch - add patch from upstream: * do-not-use-non-ascii-in-test_ssl.patch- Add gcc8-miscompilation-fix.patch (boo#1084650).- Apply "python-2.7.14-CVE-2017-1000158.patch" to prevent integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution. [bsc#1068664, CVE-2017-1000158]- exclude test_socket & test_subprocess for PowerPC boo#1078485 (same ref as previous change)- Add python-skip_random_failing_tests.patch bypass boo#1078485 and exclude many tests for PowerPC- Add patch python-fix-shebang.patch to fix bsc#1078326- exclude test_regrtest for s390, where it does not segfault as it should (fixes bsc#1073269) - fix segfault while creating weakref - bsc#1073748, bpo#29347 (this is actually fixed by the 2.7.14 update; mentioning this for purposes of bugfix tracking)- update to 2.7.14 * dozens of bugfixes, see NEWS for details * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664) * fixed segfaults with dict mutated during search * fixed possible free-after-use problems with buffer objects with custom indexing * fixed urllib.splithost to correctly parse fragments (bpo-30500) - drop upstreamed python-2.7.13-overflow_check.patch - drop unneeded python-2.7.12-makeopcode.patch - drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch - Apply "python-2.7.14-CVE-2018-1000030-1.patch" and "python-2.7.14-CVE-2018-1000030-2.patch" to remedy a bug that would crash the Python interpreter when multiple threads used the same I/O stream concurrently. This issue is not classified as a security vulnerability due to the fact that an attacker must be able to run code, however in some situations -- such as function as a service -- this vulnerability can potentially be used by an attacker to violate a trust boundary. [bsc#1079300, CVE-2018-1000030]- Call python2 instead of python in macros- Fix test broken with OpenSSL 1.1 (bsc#1042670) * add 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch- drop SUSE_ASNEEDED=0 as it is not needed anymore- Add libnsl-devel build requires for glibc obsoleting libnsl- obsolete/provide python-argparse and provide python2-argparse, because the argparse module is available from python 2.7 up- SLE package update (bsc#1027282) - refresh python-2.7.5-multilib.patch - dropped upstreamed patches: python-fix-short-dh.patch python-2.7.7-mhlib-linkcount.patch python-2.7-urllib2-localnet-ssl.patch CVE-2016-0772-smtplib-starttls.patch CVE-2016-5699-http-header-injection.patch CVE-2016-5636-zipimporter-overflow.patch python-2.7-httpoxy.patch - Add python-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1. (dimstar@opensuse.org)- Add reproducible.patch to allow reproducible builds of various python packages like python-amqp Upstream: https://github.com/python/cpython/pull/296- update to 2.7.13 * dozens of bugfixes, see NEWS for details * updated cipher lists for openssl wrapper, support openssl >= 1.1.0 * properly fix HTTPoxy (CVE-2016-1000110) * profile-opt build now applies PGO to modules as well - update python-2.7.10-overflow_check.patch with python-2.7.13-overflow_check.patch, incorporating upstream changes (bnc#964182) - add "-fwrapv" to optflags explicitly because upstream code still relies on it in many places- provide python2-* symbols, for support of new packages built as python2-foo - rename macros.python to macros.python2 accordingly - require python-rpm-macros package, drop macro definitions from macros.python2- initial packaging of `python27` side-by-side variant (fate#321075, bsc#997436) - renamed `python` to `python27` in package names and requires - removed Provides and Obsoletes clauses - dropped SLE12-only patch python-2.7.9-sles-disable-verification-by-default.patch, companion sle_tls_checks_policy.py file and the python-strict-tls-checks subpackage - dropped profile files - removed /usr/bin/python and /usr/bin/python2, along with other unversioned aliases - rewrote macros file to enable stand-alone packages depending on py2.7 - re-included downloaded version of HTML documentation- update to 2.7.12 * dozens of bugfixes, see NEWS for details * fixes multiple security issues: CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751) CVE-2016-5636 zipimporter heap overflow (bsc#985177) CVE-2016-5699 httplib header injection (bsc#985348) (this one is actually fixed since 2.7.10) - removed upstreamed python-2.7.7-mhlib-linkcount.patch - refreshed multilib patch - python-2.7.12-makeopcode.patch - run newly-built python interpreter to make opcodes, in order not to require pre-built python - update LD_LIBRARY_PATH to use $PWD instead of "." because the test process escapes to its own directory - modify shebang-fixing scriptlet to ignore makeopcodetargets.py- CVE-2016-0772-smtplib-starttls.patch: smtplib vulnerability opens startTLS stripping attack (CVE-2016-0772, bsc#984751) - CVE-2016-5636-zipimporter-overflow.patch: heap overflow when importing malformed zip files (CVE-2016-5636, bsc#985177) - CVE-2016-5699-http-header-injection.patch: incorrect validation of HTTP headers allow header injection (CVE-2016-5699, bsc#985348) - python-2.7-httpoxy.patch: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY when REQUEST_METHOD is also set (CVE-2016-1000110, bsc#989523)- Add python-2.7.10-overflow_check.patch to fix broken overflow checks. [bnc#964182]- copy strict-tls-checks subpackage from SLE to retain future compatibility (not built in openSUSE) - do this properly to fix bnc#945401 - update SLE check to exclude Leap which also has version 1315, just to be sure- Add python-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1.- add missing ssl.pyc and ssl.pyo to package - implement python-strict-tls-checks subpackage * when present, Python will perform TLS certificate checking by default. it is possible to remove the package to turn off the checks for compatibility with legacy scripts. * as discussed in fate#318300 * this is not built for openSUSE, but retained here in case we want to build the package for a SLE system- python-fix-short-dh.patch: Bump DH parameters to 2048 bit to fix logjam security issue. bsc#935856- add __python2 compatibility macro (used by Fedora) (fate#318838)- update to 2.7.10 - removed obsolete python-2.7-urllib2-localnet-ssl.patch- Reenable test_posix on aarch64- python-2.7.4-aarch64.patch: Remove obsolete patch - python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64- update to 2.7.9 * contains full backport of ssl module from Python 3.4 (PEP466) * HTTPS certificate validation enabled by default (PEP476) * SSLv3 disabled by default (bnc#901715) * backported ensurepip module (PEP477) * fixes several missing CVEs from last release: CVE-2013-1752, CVE-2013-1753 * dozens of minor bugfixes - dropped upstreamed patches: python-2.7.6-poplib.patch, smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch - dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it with ssl module from Python 3 - libffi was upgraded upstream, seems to contain our changes, so dropping libffi-ppc64le.diff as well - python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional "import ssl" from test_urllib2_localnet that caused it to fail without ssl- skip test_thread in qemu_linux_user modepyxmlh01-ch2d 1707796399  !!#$$&'()**,--/0113446788:;;=>>@AACDDFGG2.7.18-150000.62.12.7.18-150000.62.12.7.180.8.50.8.5pyexpat.soxml__init__.py__init__.pyc__init__.pyodomNodeFilter.pyNodeFilter.pycNodeFilter.pyo__init__.py__init__.pyc__init__.pyodomreg.pydomreg.pycdomreg.pyoexpatbuilder.pyexpatbuilder.pycexpatbuilder.pyominicompat.pyminicompat.pycminicompat.pyominidom.pyminidom.pycminidom.pyopulldom.pypulldom.pycpulldom.pyoxmlbuilder.pyxmlbuilder.pycxmlbuilder.pyoetreeElementInclude.pyElementInclude.pycElementInclude.pyoElementPath.pyElementPath.pycElementPath.pyoElementTree.pyElementTree.pycElementTree.pyo__init__.py__init__.pyc__init__.pyocElementTree.pycElementTree.pyccElementTree.pyoparsers__init__.py__init__.pyc__init__.pyoexpat.pyexpat.pycexpat.pyosax__init__.py__init__.pyc__init__.pyo_exceptions.py_exceptions.pyc_exceptions.pyoexpatreader.pyexpatreader.pycexpatreader.pyohandler.pyhandler.pychandler.pyosaxutils.pysaxutils.pycsaxutils.pyoxmlreader.pyxmlreader.pycxmlreader.pyo/usr/lib64/python2.7/lib-dynload//usr/lib64/python2.7//usr/lib64/python2.7/xml//usr/lib64/python2.7/xml/dom//usr/lib64/python2.7/xml/etree//usr/lib64/python2.7/xml/parsers//usr/lib64/python2.7/xml/sax/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32576/SUSE_SLE-15_Update/c42c9c60349e24d7db57de982a5d7ed3-python-base.SUSE_SLE-15_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=619578a4f451956354163d3e13a3b46d82792ba0, strippeddirectoryPython script, ASCII text executablepython 2.7 byte-compiledASCII text  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRѫyŜbutf-8cbf014fd2e2e5d36e66e4781f90607c6bc22a0bf9052b751d941050252dd7f90?7zXZ !t/B]"k%f9%) ֎lIG}ӭ29wܔBsuDH5'ˉBS$ؖΫ_8UdʝnI0\lt!$OrJ?f-gB"Ir0y[8 kZ؉.[)%L#W]d˴z7$takRiD~b)[ Raĩ4%Zked8K$uOJ6}A.61 09FnP W{Œ_aH2EX~3 ϔ¸9)iU6ʁ$c 'u-/kI{HJԉɜLN)M}P*( =֭}6$qfc!N$ãӫЬ.>9׾pSݩoe-`) !e|^DkK~ͣǣVib=S5߀E #dU?DBט+I:RXJ<< FVhtrSl2/OqP(JU _yTZ@fFᘤTSf+aC9l% Cto(Rw?SOŘ)LN~"3|"WRK$ nX lm/~Ei׳o15{®g߹M/%;qO13QwĎZV Yvxl˘o<©$j97b hu}ޱ6}ݙzfOr1䋻YEktM:˺7p'ӝ:B/`.ޱB-RhώC4*YjmH"FXY" jUE0=v|dLnO<^.ˁ}3V-ps<.gQN$7q&7~]Ǥ/[O6M<6qHlj8 ` KǴT9mh #D3'c\jBUp" 2Il(\30>(1.ᚷCW'q y5s9iU_kP8(UلyQvi8.ܨU3k~9,XjZ!^y|m0f=Iar{ v)lQvhQ'nR֋rL3QK_A a})Xqtlx ΦקD9WwP V?F6_%?I0F"Y qe74 ؃ x+7lӯM+4JXI [O6/ϟ^51bv ܎i ]ǻw UT| -~ltR1P~™aσ!̂/m6ɢ(3-oÇ4Ԅkofv懨Kb`6zNIDm]E%!tJļpN1U˙(D5ȡZF$O㓣_Qo,b Rr/1J˜Zk.,9,4WBh!]yӊג  W*.[ mRWnPj  .gv ^KgMTYVHϹYR6O9̟u:0j. 2z DRb A^+8w=RNeń)U\PߟȹFjf^:&]Ŗ3@\+ǸF@9Ioj=?OTev&A깝<*kLj)團B S3Bl@(̒nʢؤY;q)v5ߔ蘗g>jG#ofJd { 9̷f5Ɛ%[b-`җRnߩ7"'e`…Ai-ȋkd'hgmTzwQ)p Or&X 9ƩtOfKitb~h*"4{@05k~RVb Y~e8< Dv&5cw=_6#1n2.`,峤Cxvo0 'xRV<4z>ל|qɷ/N!OH/!Q]i S`#Bf劒[p^["/z [* PX^ӾjPrltVD^u0&Q@eP@Asn0pȖn,Rp.H-{?+zj-[<;DAG7~ q¦β,1cF3$NH}) _ÕCh0Ѣ 㩬8mgUl\5@P(g!JʹOtJ\;0rx0qZuLR|3bi#aǴLҊ=3Kn\~flswYj×2\Z vZK+ؽSƒtLٱe7KH& x@ɧЃ1|Ag.Lq k`غٽ~lDOkzijk0S{3CJ -tk$ߑD F$XR|a3OB1~KI}ՍկPö1!Gb4,>ijV_%XuY# nUJcy[wX]78[Oe9ӭN&E~Eetɣ?HTS݈ Yc8t5mT!)ϗg\6pF4UkK" "Xx|E,b!T"QќHc[b1b+ny] gцvPS9߫y }wRT}sIM$aJ/be͌ 7\ ؽyIH[i΄HPܖ_  R@zsu~ꊑmBYx$BQ;{఺)IFhxF}g"mo׹1i q46|3Z >z-2aFjXn;y~,X `N^]ߤa$0/%Op"7+P!*7%j?oW~y` uZEv֐Pw)J st2'Dp#5h8º26}m4tdfC=u'tOiw}b؜7L18.<)+s r`P_&㧋z@mu3egnPѤ,|ST,2^2 (j*/F,TCǜҷRU A^O.b d(6C"u1뉹&2F$mx6Z tgQBYU/[ڄGy2w3X]nh } @c+OTnYʻk.3:hׄ5"kqv6I=~}Zd5 w.6|yIJ:';Hkc~n LqC1 VdMsب EǠ>yA<;4r@HЍ(h3&,gBpɺM߱ݔ! =( h&LD8"#X~>2=iZx)pNeSW>߳Raʗu"^JyD]8#s9/k:v= xgx\,}k~hќ,_c N@} ȯ3f1ژ2Kwjc؜Aa0 .B8ht!D2_\UD03@Is_~Iּro{wOBCiہ@:$ųͼ@:i3r.kDPpfC,aCfC:߾4`E#P x_T &uwoJZzR@L:K~:OHnvJ/Rܦa{o}t4'1S{ |6J5 zUD|"gR0MCϾ:IַQef^MaX8cud;=AE % rViX@|mM_{ܿTłHM\ꬖ]Na]EfO堁(1;Pe|gv|Y Rrfa֎ ÑZ fŅA*9|Ҽ5 ?k6zZ3C3cui-8N64xK 1ž_⥽ Rn,Z%NJZU 7odl [|iNCVt2ŠUB GMf{+@b־v%tX֊=!ۇ+,\ƈA]3Π~g8 ~'CJDŧWJ(jr0($T;dqrW3,ErW 1c3}f!멯M@7~X]u!'Dtth3p ~x,f} 54%j[ .Y|CYM,ɉ:S!>6qm̮z >Ӷ~OZϴ&QP|;|G[\m3 8 Z20"Һp}, S7D{#r|_/@A( ];6ֺ3l R<Ān3_yxYh]H)]@!ADx"WoCHCԦm2߮$q,, ~gtN->7 mP{=HwJ%3ʤ};SAĦ]N;JApk&,G>b@;ufȒ}ȏ-bZ{gs4; 3t\o^Nūջ3#D 1Oմ5p@P}z!|斬z'Z%8W%j_^ E !|e [qNi>f9< Q-,8?7Ǜ+${.rl #+ʘ4Iz6P -aj6ed^62'*l)m ڇ *(>]Bc]nj]vQ< @- 8tZ[Iz";4-=F$ p['z[vR6R]x*RGͦ+P фx\ú5_Cvv Cms 2꺥zB#qlB \Q,-%n3*g1X]sFjUQϣEzT+I[>2t:E4lD? /]bA<ތ9Xjp9-q@P`' rkؠh_i_$Ĥφ͍f gPH?P_%O=cWaU KL ZMjnzb-d᮷C8C6^Km-UntrOV&;Xuw k@Pʾ@.b2޻UM@`90<to%L[u+^ff#/)*Dڽ9|ݢKT4*z6.kw_ݔK!ǻ Y.ߺ6%΀w lݝ +q sWtluN߶4։͘N;p՘%"D2-4q"o'~U;n-dlpc1%uA;PF59 )t$铖k5uvzMzwSIiQ<堄s3sw`Yn#9YUOL*~ǝwpV]1H(,Q ^P4deϝ{Xq U-q)ڌG|'}8 {_Ae->6!Tn|aR󼋻aR}PaԆ03mh Űi rw #jD|qvƉCWW(d)Wh@]g$Xd֐PVt^Tf6 +[Jm荏>:@rgX?z[QuU0qҬ{:'|OLƊG/7y5I>sz}~DSmuTQXɨ$g|V| #) 7< &EQ <<,hq<߅tDi>1~ptiy.\A2z1>8WG.enr:#srA«yf3h Q'C  8 яFkHŏ"J!$"y9M.P0:.{Cck ڄ\םQByKX7J<=*SE Ack%Q.."|j/g;PIX,㾢7zNqެF'rOsWrr!ElOf r!Yl?2Hu %}W)[vU$ : eBNv|iwKT챩ON{1\{¨ɤ^KfٗGA41+ XjLXԱ$ NN}ql@&_!rOGki vz#Zp]kۉaI ;{ȏtjSocהz=鐄^7 v1a$!d;ސ56yoCgD+Y:{pP3kdH~Ec%g餺Q_ךlWeHDrv_ۿss(`V9|'Hl4qKmxrţFϕ;Z4 &W8l E`r.|f\8F|3A9KPV\}lZE0~N:a`hrٷ`Dӭhi%>a_oL l-zZմQd0 Fo5=MSB[9<}LЯW<$G c$-Iu>RkҲp yW#_u5:dR`U<rrT+aثĩoG} [8N74~pI=@duG˝ p0+wqnv";6"glW,ԿTynFcd N]5ÜX|0"INbӃLFϴyDLxu5l%#j\T9#3n3tzzBB 퉼S\>; v!/9"zQ>/ jN*q$:@uzTFhxry4{ICfoT0&\TԦURt`p14}ͳ5Kdoi,y[#|_"@ّMt<s;>׭󝖗zOW %`9y}^N,TM9HliiQR?F`eIos|e}Lym;h? q5aT׍R6+hVc-C,K C*68ݬZFU"a 8+0W)a'&~بVX0[m)n d4%V6x$'"7'\ h DmqѳW#.qI՟j'{3Xm[A*W4[?$".ES qeBP{ {$aef91U/gP]OffpDXU͕uNuY"U܂QCQiLe↔;T&BХ&VZ|nKŲ|3JՊa-7gUٖx6; ST(Bc@ֈEl]ѩ>PcFEOTu C9gGjP^r6*}2=/1P8$Q;ܔbt-On7ß;ofJh54Л*cfWb!ػh{5hj {FƮ; nQH3/~閐)a?{69nDYH A_훭'wZzC. 6P@jM&3 z-3|4MWB.+`Fw]1ئUз[\(В6wE::l.X@CΆl$ :Rvz&Ib;|N>zOg+Vŕ̷׭@F,f]pv\^dbhN(݇R4 H") Оj\eH"Uܺ2Zq֥@]* 6M^&P[_Nꉢ3*3! 1#nu4NrL <,AзI|>UF@9(3g% WYXN%ZcYe&SN=զvoq(3ޅLo?A >j^8BκGKf?L>9)6j e ڠ_>uQy}ÌzD$d!@nԹ\eFT-pʺft4$7}T#0&6=ġ͕! 1x3kiʗoD9\!LrCFIz˟BvkPk;}5xץ' ofb9|s.GEŲn"!EJ>g^y0xi0¤$Ѽjg!~kZEE~ϯMBm돕lYbY$Sf+Tl Db^HEM[__zr&[nZ4O },-ϊ?5K5{9J` w͠$<cV` #Sfʡhk~23Y..L8&;ΰ )b^%/#_3H _&퀥8x1?`-okL+H?f+Tñl1zBidв$(ӎpSi#A='iU'w! ?:l1E (lK D3حi2Ro7cփpDbyyQq`\T}ߣpwh6ep[[#у.XԸR ë s'Ǖ#LOΫ}6\`ŕl!?Ĩ8}%q?'ˆԟI0MJSW\1T™!JX&&Sv"Mw!ƽ;{W"+X</9P+O}J39` Y>JF+"%& 9}{عB<ĺbۤI~F*!f/=@T?0:&jSGc<%1UT'~n$#ۭ{(`P[{g ;Yt{Xmuק/>Jȁ r)*|5f{');3#it?Dƭ-c!\ sй0@qȝ0 6D?2> @1MSLWc[I6/<} i'x0;ԴvTۨ2eʋ vr?CuLjVT A?fb/\vw4mE(F#:^ o#->쥩ދH#FW RqÕl˭T!AO.=ETPfTo ~@g ޶)X|96&j.~ Zl$=8H1)2Em%HTaijRKsʢu$G1m6zxxw0Q Gc\/ 5M6T,7$^BU1ob{"r"<„֛CE6ڔ,[S3mO{1 r$+~C8;=G9H(I9φSd%JN^-ޕdR f^4Ov@)'[Z p#Ƨ;N*`PLB*3wJ3bʘ>`ͪ&o.Y - m$iNޤE ګb{t2"]s#TgF`3L:>M]WpH>Bw΅: m*>3גuXV˹ɲ`2(dR3LvO+pǎ@V&!$ eHtxS#*I#cBpf-̎Kv1@^} 2.jӠ=㟧`YҨVJ*jE@/KC3tio@.ѩH<蛨8S $WinӦ&>JWx-<7[pp"Hug`"UfY\IlK~"Ϗ.k k0 )L߂d^rv>4h:{(P-ٺ:E0@f Now!80ҡj<855zܶDrbߚ*dȷ!ꛚNݽ7Wc J,R(}fcsn1-0;>agӏH,oÍty0u#87>U7h ~MC0bջކ)AY<Ua嫼7BX_^3fCOȫ&mSck#Y!EPҧz'É&j&.oGVy >zqnl߮+9^DVfD`}d{˔J ̲Jlʹ'7x*g_H [MC}d镃-P>v{h^t\2V5VHtW8u |Ci, ja5`?+ϵkV6Ǔ5&#O*AQ㰠cTgU䚻7Kfe<k 3#+nn>뢩wӅ kQJqt,P^wLDbMch@ Yُz'Mg4ҋȎNmq˼)e55ݨ붓DAlL MTpZ aȮZO) Ź-dDb$D;)1sRAxe.8bpVlZsJiIeِ|~AfɈ[KX"AtgR z=&1+sP~-S.ȴ7{AI*LK)2%{<!z!!2*iZ(dC%Ǽ#x%cVC08+.Zi H s]KB$:3bM<ÅH kY~dgFEc{`!vF0o@L^ &[6 BEX7&R[.Md/Rk:1A#ZS%߶LL;   nuukmU)88fq ]p/(IRx֞YZڽ9(Ks.*L=sO;4 0?`S;B ϓ9-uRx|MVdk"'"8nH&6J%v`'+{mFnju?<u ?.-C:qwGRc:?|prlVV=;%"ǧ@*6<$TC~uӯtx$y ydǕwCP.o 9g3?!٥3JRɺ[kuN#3"#M.RaCI1E˅FRw,,_s-cD+j8M8ȐKӊ0eXĄH>upg O9L@SN~ juSؘT~d6I }%]z $k E"JAh?pP_'[*Ω\hSYn-cyqf*`Qjv~~Sg4bѧ'MxuK5r/YqBҵ\rLI"/e2:m)?ɬJUeA)ǩOY7l_ؖcoO {,֠%+Ď;!W6e7]]K aiV>ͳKE^sВ_Y 63/*alNɥZ8'%oTfAdžSx?N+XXm.s^3G;c`=S>.5vT E%RKjju48\U՟GX:юz'˿- +FMVݐdy$ Nt0roܳ~>o6VZggTgPkxs)Q2 we2zdّ"v󼊙MWD2^E GDp{,MtoYxcM?ϒ$4]?I\KVbߐ +Ͳv8f~9rYDׇ^Ē+j3k2~ƚق.όg';Puղ2"T} ZրLāزg=dMw8/Fd7K˩dc] X]<5a ooJv “R$Y*Nr?@#;z&$\K ]q~ʻ_jwy^iɵ+(YP;޽EK8\(` 3sU_B;O (|v,G/?<QS/+k#Ѩeɭ*IqyEܦ`Z9ÈDayLB&IV|]aJmc[^&]5~6t_{V6rKlH ~j~%QL S nN56;Ϣ.Oyu梫2~MOn 0RyOe~&5ٰ v3R6#4tsLIk+&{z~{N訄mל6,-}?]Ph2ZqtT"uΜHpc.R^a褵(p*}5 (E\,\1e[o>e+ĒXoi;&%.ǔsMw#\е.Hx9l?XE,Af#6VSZB]]·^ѓOu gJ,U3X]rgð>A; ߃ UoƤ{{xNd 8?bJ5@-@04[6<6Q˥NURIW(*A Fh ~,2I k72PτnMC)NB_xnki7%'(]m޾T}meM mG:H|IQ-P0;C@0^KKn:iNE8M& DzLi]8HD}Iݷ\QAJ/Z 2Aĝ3.QR]3)õ,p74ݖhsT*F8/z P# -`ݹ`T<=q:`[*ټ`Ҷx2!шKFi*8$DwMd04𔑨^4}8>;h!{"Sn&ᠤ "~R<l,?pnmn9 _t8s};Z^(|$~4.7VĵҚΠ&-䵪 ++*ly7x}@.Nհ[~`mܰ_C4 E[Pn>|M+"mXPZYM>gE˪ «aܭ{5zxz]J Ьsz)^<6X ) uSZ%VF pQ! ͟Jg2asx~tѫWfš5 IKIS&\A#J+9 nqN[ l_s5hK-vsU~ʀSm:Kҗ4K(܆n$xu/[;Ħ&,MUҰϝxî18 o`QPa>g7YіG|m]Rv论e#*4I5]4sWt =T ~.dzgPmdΡ妌lN1(G- 쁛HΏ9TtPAp;4m8ã<<$C0MD{ 1f/h{FKNt`8U;z zm6V{Q,@=NvˢL^)XX]P!p:hI0W49wͩoK߬Y~Չp\-\ `s.3]q.Ǩ[f'609_y@jX]*S#btԊ+l$OY&ԥ'(mUBK>NFrlc") fz'"gVs3p-/\6̴|5^)JN$%W9#@*;x~[lo="rd!_vb.)/'/aCP#ػ1U8kt"pҪJYQ`,C2D1K]aNtFp5mk O` $w?2mB.S<#RcH wiU'ֶţܼ3,ͪ"ƟK'wezM@rNWdt#,?:G| |'DK8?EG,=%~ Mx=4g?C~[ j+#{]k_=ݳ,V#qE @).6=% O>RMn>|{2~>_{$c" += $X̖Z$idsN'{6.;zi>i_i"V =bҩ] ¸8Cd#|PYG~'Guw@#{cq3;D-U|5@MdN4!F~##,x{6Qzk}H潵g :1X(9NZAn=rA.@5hff>y/ N5bH$a nIZ7.3.KBZ%]L`EQ?0nkQƅ?6!P#8=$3 `_BRH (m^>duUGf՗'pd|2h`g_@D.* 3^=.y%,N{z\#1OߧIsqiV8Ȭ6Sb Joy`dsDN ?p#zKܙy Lߦ23lA| oAnh|~&b&gٚO@.($Ys2%Rc`^|.ǚ79NcP)UFUb'nRl;chzٴ}*\6ҨNUmn̉ĝ{®(,djL)K29S3Ðzh{a5tַۧӥK[{OYpiҒDAV@>c}VCp7+/ij(k{$i>(0mԻfլ)<}AZ# tʣlpr=cqkֶhAW}LW+EOaZW:ZC8}nv+#>kN(%# <}Zg޻,f$$W) ks<~xI M%vu[j2K(: 'UT>e}{~lѝմaY֏C>y{!E*5;a6w]gׇ' 䔔 UVHm8t'0đߊ>8 p֒\AJVUl'l~`EaVrZR>=Y0? .zawKقx=73 >Bņ^!BC5,k0gzm?,`IOPs*U9LtQ+ osiݔq/mhT'հm*؋!av-.gIϡqu7Ébz?\OvϱH=>8)*x?ޘ>VGl=DҴ (kq[Qy]I$ffPpY>NOϗ͎lw  Y<qV+ֺ N'ڑ>_9t^}zTNA~fs$ ~O3tFna 1*ob%"9@6d.Mg_{$K\s 0| s4lsGxhVbcZXM=Zhy/z O UuCG:Dn.Owq^0x ˗KA^2]?QypڎdzRAJ4.7TƄ;~Wm>y{+@+j$|tPVnՍV۹o.dQҩÃDl=Wct{ +' vt=~^qIܵ>5ڟ'e*cKvE1 6k[Bd\쭛ׄIˏQpBdD⩭#q6X),y܍KsCdӻ)[#O{sGDIq|$IvDߟӷeE+qXb[Id0U.DL)}H`VTlJOJ0'ٯ/iwYE<i~LShyS4o)|tJ tvS}UU- {!j\aB0U9+>FLgNzQv-Ser׹E̊$js5@^$ N WmH-MUiZ $ ߇7kֹZ5D[LL0UrMw]P>/90[H[S+VBl>ƻjwܷ<ݻAa}ڰހN*l4>uHÁL^f/q)6 4q8I%%SZ7ԯs9&~5$ear4YH u1iRǪFg/C` Mx ehA[ /i)7d4,Ch -v1rgUe9=7+Vz,p0I&*Z`= z^ǐ|,J|a hX UI'v|9/w*S푡e]1;l=r3ȱ5_k [oHoϾ G*7sѰP2BE KT@;EN'J=Y=NwiUAafR xf͜QП^' >1ۡWŨ-2 JqnH evRUdI#+Jy\G|0Fd@dʊ'Yci*g_\y9Hʷ#$5c6T ׃r/Zq}bE^`KP!?6wBDSXH+LD(aN\12ـNBg$_ m]Ӫ^MShUħ%@=C͑?\40U-+播XeӑwuQ/ fۈ sb`Y^iIpQSZwnlsj O.5$f1a}&ns2rȉ7rwptPj_@)V.ٹ yO߃Z,X<~*-֨LDʪQ|^uK-Ʉ=,⧭#z2[YB.wCOF 6tiQ$y$FaYcOJ0s@"LaSW Y2$|AF/\q"̦I֠ %uܷ坶A 'GpQYT0Y\qQ3|-R9_[OQ}fξ5i3 XS9m 8/Kœ}P8b}ysѪ4ΤPoxyn!́P7NBapwϸ4LmDnsZJXr!aiYSG@_ӅRmia\onL9UlWK }a`e)nhAR4Z287yH억پTfg Vh,w;z_06VtQ ,o @@{rѠ\^maNOibm(EҎZ2iТPV/;CZj{0q 럋z㍠.YpӲM ѭoH-9SPhmR3 M *ZE[U2L +n'>bűH1 2gFd^ .pPЅo]'G+@ ]!JSl濭zb@ O/44L'/tѾ< 5;:4eZ$ :ru @֐,:~%\/}њ,cRJ[}^+:DɃ]3AlD58IF seF쩯zF]|ICȻ64Jp\zTai sjh tMUC=iק2*XӇbWϨvљیg?\S(/ =q3y1ä'k|d,K.jkQ[ wH/SdPj$fp^}NQe cfE!%>M$S(A+R:)GGl;QJ}5OWK3J:W{B!-j`kgQZ6 Q6V#HBt٠ܩ6[*^ ]#.£Yt*~}|H_搞kI); ":WTSs̴B#:v*8tƺf&싢O䆘紐pm<ɿ'-[wp ^JXlK54Gv ǕWkwA.(Aow}}Ms[:\mɯ1rv1cb6s<-n9ݔ|YE֛~i'9Y{UÝ^MzV 98:'Lc}`rKĜ= bq6&vFt#{tMyC X"Ƨ:r$MiΚ0*6A|Z~RÀ]7W&79l.3(`[h*/E؇쒇tL$cbT̶fB{YCkuM13Ѥʳ_B2aʠ 3_Q NHw R(LDpǹT ,b'#+e<ĶxQ-khvS#gK3y汳=oG3<{>̪,=W fnŭ- LKpl~$s*챳TC-򃦯(BO¢|_;;X`hSG>Q&q؍jխux#oQoRyyf =*zԇNIw&GJMuNfvq@ٟ(~n&^l,hF3>zbZf߫)𛸪1.E'|壟Uy (/KSVtl |f(ebU{3F&NP?D 1⊙ǂyƼowdx],Z̸C@loXiОݯZzӽU S4=<*5*HO>N12FY%9mY)b1JD[; 3deMM%ۊ\qD/H$u!X>/?\\4SoC5]\ lNY|^( 0oO,ҒF4f: ؏?ىY̨5g6sc5*zɝ^a/wS!<$Ҁ,cڜqϟcAK@#򈃿a˶$$&z9O(G.B&p\FHFǯ$v#S ly!N@oDH)D,-U0{!mO/%Ӫ(Nfe5PN`*@񚦡s)$kpG¸M o%1Q;ANKn/]&#N?"לRk YJ?vlz^#o-I;  YRZ9ԓy  vӉ72idW44X ~$qewT ω!l6I]xa5U5\'sYAX'i.cAXOqczX&b(Nοant\do9ܧɃ-AF-:wQ7[lh-"氇j2-6 M"Lbsox 4gZZY?YSGsbOvIY>ζ>:J&bC#Tv T|M/(:}J' Z!9Ķwa`\(*PSy]}f~ױpvR2; A =JC2%FD Ϣʭ+8񠤏_TV{RvboxX܍J#z!s.gveNCr2 |3/& ޖhC_߀RFT8}!7~v^d$b_4\ DsuN̰]Ŧd9Lakŧؓx+քT,y3fU&?EXnTw[Sj?U%0ǖprbAL !nCi1 1-rʑB)O%z3r%q^ͺ>8 '=um֠Lepq,tL\vt kU|G%ݑpbq,w\rFY#435U"& d. $bd9@QXbsqL(r( `أ&-` Q#ܼo(Wu>"{Q9="Sp82e %T6cgd7F3}b5~e+HH'-P&Qﳩ&v--&3|9h#(rm-+4͕Y`z Wq 6ٶ6 JVmZ%I2 W>()>tD8!(TRl,yOf{D^. cT]ۄvAcu.wpdyLEQ/BxJus;7,cHMQHɝDL0-cJ G7H}l.g5;kE&L-zONrYxBFAbrHA{1% 7t/gc: Atevv)D\hUr3&]B2?*1حTǯTYNZ"b[aQ%&jwlGqtz1_uRlBTWׁ"tҪc D`"ܢ.:NJ4 D|l^TuO2wEwAjG'lKIB@_u ]=^L=9`Pħff#p*1  #?~ik eX`'-ޭb+Hb4Q-H{ D^>J6ù'{nxęDҜNd*M nF7uEX@Ւ)U@Ѓ@%>2;S뤡h"?9rFkJh1cѬ1dKDZa׸AJEޤJ[ Y hU?=-!in]Rx{rQ {yR0|M R^b=];x]K|:jn\(IpF_qU!MVX[b S^v>g{T{ .  A7eX.xkr-|hhJy!봌Htv*ΨIgnRCk2w=f0-],\^|:-`̂t`Ejdn%B|FT,xcڸ$]ulL0* EvևJWmGTeΊK/Ӕf۩H62g!,W%:fY#6Ij0D/ag֯ _“2v =4"^T垟+T'I,C1_w\rzjMy7n7Iuh u*28ՒG@bY3iԟ&SwbNp0wm ^tr^&J??g";UꤜxS6GYUbg] =Uy*[MQحrzwhJ 4!jWM] E#;$"79Ḯegm8ʣ%ۦ1@KyY4<{ 5 {A9)9Wp>,{IRQl3̪4)xkuNa>fUS|^~t`nhZBJށ6^BAf(;K7/:T/'wY7Ғj<h|ze"7:都aĨÜ MMi[蘭'6hx<҉>HCLjR Fo4Ǎ/yvE+%K":$њ(ژ`l(Kh=@kk(pq2RtK =+ht Mu{-3*vOPLS~ ̗`llP{k [OVsXH}-"mga`Gz'@=A)-Lod#{rޯ5e;g&Xsr6z9㴫dm q8a$R0YhhUg>nB8Y䞉xno#_,wDOaEO}4 e0\{@GO5U8M[sͼX;\.?ß34 1ZvUaWmF"y2 ٽ?"W+`rBD1 c\40%dO} WFĐ0BRUHY$3v/z[l4FZ_.ċ YZ