libgit2-devel-0.28.4-150200.3.3.1 < > , +p c!|p9|+*ML(7:آP]?Z"s?50Ku";YiUd:>\"ݺqjEd*)%u/$3vMԅiQ}i{|a oI wZ6C6S*\PGJVZ9(R"
$YrηK(YfV*,{
Ъ4 /AYk>ܿh`mDC%3._S e z𱱲@wyM(nVeAZ.X6 > > ð ? à d $ 2 / O k q x | h | ` |
X | H | % |
% | ' | ) | ,X ,| | .l . . /i ( / 8 / 9 0 : 26 F $ G 8 | H ( | I | X Y \ | ] | ^ X
b c 8 d e f l u | v w P | x @ | y 0 z @ P T Z Ü C libgit2-devel 0.28.4 150200.3.3.1 C git library This package contains all necessary include files and libraries needed
to compile and develop applications that use libgit2. c!|sheep69 kSUSE Linux Enterprise 15 SUSE LLC GPL-2.0 WITH GCC-exception-2.0 https://www.suse.com/ Development/Libraries/C and C++ https://libgit2.github.com/ linux x86_64 $
i " !1 68
i @Q 5 d0 Ԃ i <
* lJ 5 Y ) J S E X a % % )^ 3 j lv yp
C
F
" # 9 ' ' \
P U -D I t
P Q P < 4 'i (u 9 9 p
M
F a < &` \ h 43
** L
B
' a Q 5d A큤A큤AA큤A큤A c!|]]]]]]]]]]]]c!|]]]]]c!|]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]c!|]]]]]]]]]]]]]]]]]]]]]]]]]]]c!|c!|c!|c!|c!|]]]]]]]]]]]]]]]]c!|]]]]]]]]]]]]]]]] 1a691bf8a76c8c6fcb28e0206ac944f9ea8459d09e14ec671761e30ca1e1a976 b12f2427151df5fc98e3b4386590e1f4626a9d63c164043f9de10ae5f1c5a1c5 e9692b244f118fbfb879fb4bf5069763705374c27515525fdcca16ffc25d65db cc052b565ef183116c2f9b182824c4124d92faddbdd00c4de56cfd373f1140dc 8d3eeea6934a199ec0f7ac97637cfbfd5fef7cdcc61aa818f3068747203db123 464d7dec6115b3d2c19d54c92504cb29c5206bb71a8391e8f21167f6187f27c6 0d5bcf381bd96bb39f8b49b28ad0c64a737655e47909b2ab71a1ffc9f169ba20 90f55a5e36617cc094abb9d36e66014fbb10b9e03aa53617b695053182da860d 5fba56e581ea78f4cce1929978daebd25a2d8ff81664c9c52c1680d17de04e66 4c17d27b996d84746152540cd02a6309b99fb54f21e5a33a8997e1fc4b006cbd e361a3ebe4f76556c670b16ee60137bf9af061d4d95ef51781a187fa72f1a7d5 956328d15708148d554a693d08d1b19004e994d71a428ca04cc190dde612f31b ffea513fe85c1a2f10ab629454239c917cbbeed8b4ae1ea6ca10523f87346237 0f01ecd61787e036c0ed2e6f95a10b2be20e69ca12d3ec84345a80343f8cd9ea b6cab2f38efd56fe0da379bf9a19493f362018a6ae31243027b1ec5a637d1bd1 8c97ab09aa2d8a5320105355198829d52d038d250d7687589cc23bf0969f0c54 6f2439bebe83283649dd21b0b6391175a7d8b27b259a67155bf04ab23b5a1f78 749451903d6ae1cb2f0959ef31774d3826ae5a20fcf5b1474f04d4d6bcd340a7 376461e2558db96b2a035b20defc78768830392a8d912b9e0913505b27ead6b7 4013f43c76c36bc5ee562f2ca1d5027b17f40760d6f69543f8ee96c0a9460c63 88e49fa7593012aa9575df08755b907b5b613f43278f477e9ca8e4feedbe6786 9b70d4c291f69803c51e8859c416f5ff81850738d3c4d1cdca0a44247fbb7086 266b8bbef564bec63b4fe7d1d3042ffd273f252f151bdec23cc4f77c0febb883 7e29b24b5a2f689519881c74806ffebba183fdf3fe67c24088e1e2bb51b46011 87d5f089436cd254bed6cf3538a2a1e9c77e5f40ec64c97ce8a8110b72011198 e2266b727b63eda6d4f19193b6703824fc11f3ae35379ae6f9446c2cccf3f450 4f0d18eb0ab5ffdacdd716a9649319683fb84a33627bb4dfa6fed8aedff55d73 72e5aa4922e6dad9aaec4d989fbcf02e712a739579b80a4e1700d9293a05abc0 dd9a84083afa7835e4445e444d85756458133ad34c96f8529c2ab942e8ade5a7 a7062d7ff0b7263a7c2a41b6885bd88097be7cf1cc2740f5b032fcb66c25739b 85a249b9ea66da28802dc0e0d93f0217b14e2c5cd621a2d4353e43308f2d905b e372cb6035721a1d77377e9ce10af0b757308ec30e35633cb76d2d6e7b748dfc 76914d36c17c739f795f45e9fbcf350b24f77adcfa08b964cd73e9973a37a264 f2743d40e068d922066ae0a3ded42a22c8b3fbcf1b2048ed94b756fee462a1b5 d23f06252b0f42ef398fc7bd5fad18951f1c9d4e626ea249e9e7039cb5133bc2 9b89c71035101bd1c315c192b72ce50307a679d212ed4be53c68af74f1d2908f 99b62a75d3f12c39ee2439617c868662064370e00fcb75f5c4a590f710d78b77 c9dfe91324fa0884c154953f1645b6354dfdca3b551de04032399e6de865945b 5b482e78f28b084ba7b399b1f4612e58c7b8077e56403d5cb8f2cbec8798eb0c 82ec3d5073478360a2645aadf912ae5cb5a5db2cf5e2a64b43549e0ba12eb850 428f916af26ba22a99bf392fb676fbf563455bcc57cd24bc7a04ec7857142e4e 77a1b09f4ea49607e7dbaadec51680316e67fc574f822e7f5c92e6e0594c3905 c3239c314b3d7bdcb056dcaf7fe31834fdc5905bf98f3e6682d11ad7817bcd4b df9cc4d48fa75361e089d96aa04ef3a17d39b17e43d89243b064fe68e92246dc 3fac2002e7bcc36fba7e353e728846423c121520e8caf00836d232493eda2db0 f38617c0441972b8ad0714db2575f8dd8cc0e14e3f7ca93109a13411111a5f8e 0a2d09f156a9626d25d1f698d8d5cdf3b6a4fc4f1b9374900da5068ed39b7a4c 303c3b9ac582a59000be80c3c2acec5eaa50c207112fd42efae77e6f3a308909 5861b733dce5bbf01ac11f9d49c7197a664a8e3a7a8e4bd17117e3fbcc6e9790 3447f28f4f811c176bcd43040f68a040111e6c46ad18a3b3fbbcab805964ed5f 5e44012562372dfd07905944b5aba5ca7b46112a23b6d01ffe390884bb40628e c4562eb9a73f0f58fe575f040bf4a81fb9228eff91a8d4e22bcbb74007ff23af bde409cf0bdea62435296cc4aa9fb644d438283ca24f05dc67fb38096bf217af 3adef7f6468fd964c80a0505faa4337ece0fd85bfcf3fe4543517128020513a6 f8e051fb82c10f81982ed3df4fb7572245112567c749a8e4b64883f5cddfc45a bc8661586c2ec8259135dec395514777d0be3fe8078a29ee8be8375d6b4b093f 95836ce59e7b22500da6ada96e1d6be7ce6abb981d2381eef1def3c11601a6f3 687f6ad3e0157757e888fdea8badfbd238d4ed394bb01976ddb094ad4709fd0d 3d1b2220325a82983ecb271c2eb8383a8db134dfc0da96b1f050f3664871252a 7888b5265f18640820d43f8ffc31e3e6b3153398ee2851d657ae8b28bdcd10a4 e341f693acb25645f6ed47c041fc4eda8996a6f1d42905ae4f87fffba22520f3 0c03098a51d5cad022dd317ad5a5837ff624f96fe36ee82da1ed5416426f0a52 5677f86c02e557c7897e98d395e83d8168c532916ecfb7f9ca5bf7b4057141f4 fa99895949c987b7d40f47f5f6ea6e7f2dcfacb6438e59af7bf3630a7c7c4fa9 46f849ec737da6bb31bd35f3a8b0cc495d8c7f296d1acb017cab0431928d437f 0f55133387914d5184ed517f3f929efd69090dbd503d75ad2fddb89e180c4655 afeb05ce45e71f23caa3057a4b5bd42c80e771bc75690d94c33d782ba6740812 011d45d1991a7d4467b5de5c574718af5b16198fb1581639845fd8d07bef7758 97adf0e0751e456546c7c0119743e50aa428fad8a29184fcc637db1eaae08b67 7526b2a43bc895c18bc164797001d8983f0cdd3e20ae19690b2ca9492793a858 c307ce8e9c8b0483ec45ce34a200f74e1ee73bfea9c4c7b0cc3923e3881360ca ee98c1aa0596b1cb409795a94de4891392e1675c42e8877a1e38bd0a5c3fd2d0 bb380c906d0b70172d02ef082be1184246f3c573d1e1e183d09adf51ad449b75 6bd6609f2dd2acaf7206c9542a02abad5439a6516f1ff160f1df040da33ad829 98c05b50edcd3a2c1349bd8fad32edc8e3c47fb45e138b3cd047859714e02e76 a66772c8f202c2a9a6e0a0f92f90f8f3938b62d821275b0a611b99f278c2917a 3f81e774515f3652e9f9e5037d8bb9770ca458fb4cf654828499a7e7200cd35c bc082cb98e1923b47e874bb3fa8411280a045c0d4dfb7c08d82ba41f2e34afe3 4c7969130a952134c597e84a06f38ca4b19e0b372df88085cb4f846292681c5b 0421c617243d49ed685a4144f77a278503e6302d167159aa36c589b63e0d30ad 35334de1882725c45f46b7bdd6763e8120c1fa101c4b2a13cad709bb1312acc0 adc4621772c21eeb4e1b0e30a07b295a69c8c471038ead998086ae9a6147d57a af80ad86ba475a1171e741f828ff8f4d8981331d5f90f6aecc50cc739efb0d61 ecfb9a1760af8ad8314140f46a9ba06107b08452efd2bd9242a68d5aa43a2f4d 27027783b24f98c956c309c303907d385e0d1dd284cb30de8d632f0b81fed95d 7e4a488f6c8d6187bd98575bca19d7b570d08f96d96685b1e127cccf86d6fb62 a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499 418026aef6c3f2870b7c000df5b4cd7847f644f2fbe52dc9ea0ccacbbe37cd64 f244a776df48860a3e478dbac0134bea0ecc4276906b62f9444c7d5c51863bb6 c74ac19e48ff182308ced7701cbda90f8795a8ff1331ae87d01c7f3afc5abae9 b1cd202c0845fa6ec043fbdc956692ccb8c2bc4461a1fda2e4981523174dbef9 d7ed4caeb8a14ba56782c04db8b82ad92c1935f4ee5f0ac457f85b378203d0aa 5831fae9b4c8559a04a937c34efec0e3f5d39cb6fc41a522ef975d9e1e3cafe1 32187044d1cfae745d769a11ade8f3a946a62cb6b68b2659ce2b55b6dcb6587d 589e775269be4f1bc1df418619c080f0ddf51e7f2e39e1d5c48635b074b4ea0e bd6c54d0efd67b216bdd7d22830945b0d94b0e7a81611a5a8caa6fbd3588f863 9bb182d83af5eb5979161fc5bc5054376a98a80dfd278172418c4cf264361ea0 00c649b0c0b608266d80147aebf7e8422a8566849a6c30d08e6a9e7530f73e35 233f355401e4b5c97e06c8b8547798376fa87fc2aeaa79bf7add5831ef88e7c4 133a50246645a1ec28e4ae5f1f5ec88a51a4ff70944cbe5b94f63f7ceafc8018 c4d2a23dd4e01e233f74b6823ba247b3adea824f7cc50b89345d94c314161d6a b70fe0b582802a708a5c41efc51315fd1fbe7229077f92b472dd08dd83341769 30ab0aacb3196ee990ab9f312ca73c97e8070f1818fccff7507677b3ea502996 48025c760e0dfc709889ba695ac90307d4dd57d6facf690a92eff1835c4e0160 5b12ef83d93590c6c3200d58a275488993d06933273f92a976c3a0a633851f5a 70515845ff13da9071b59ae20110f459fd4acd4530a8035b8910c14a825a6b93 ae26fc5ce9a1ab487db4892ea23069f97332b16c419423bf8b0c179af0ec3a45 52d204e6c01bdfb160c11dbba2bc5903e10837167d59ab5ba1c607a7de50e6bd 0493df7d1445b804a1998376071aa1bd079a60c00c9144846d4f42671e323003 5e12383b144ea701cc6c8b4a6343b64799d7712b4e73267f8538c8b038c1d8f8 cc4b7042ca8aecc54783f90ba142c745956f86d7602312bfecde1279ca6581ed 7876b2e4a6c67b53e49b5a4cabc0c2274238e878ff5cc79feb95fb9718b9d073 f5d464efbbe322b4212eabac013d0cac321e8e5d0d7bffa8d717a67cfbb8004c 9a57960d8fa93ef02ba6aabc01849dafaa3c73f6ee1c6741e1bd07ae1c84f358 01e2b757657803965c3dbfbc937fc6ee3e1080fe637054c023f70f142bcfdff3 193726077cef5ab403b27c72c82224c0b70b9ae847ffa882c6ee56a115f1e680 256b7db68befaac50e6989bc1ab63d4597fa0a5e5ff6f651c38367fda1d78f4f libgit2.so.28 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root libgit2-0.28.4-150200.3.3.1.src.rpm libgit2-devel libgit2-devel(x86-64) pkgconfig(libgit2) @ @ @
/usr/bin/pkg-config libgit2-28 pkgconfig(openssl) pkgconfig(zlib) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.28.4 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 c]@]@]6\eX@\d[0[@[{[qr[DZZZZ @Y@Xv @Xv @X@W0{Wo@VJV\:@V @UpU|@UnT}T?@alarrosa@suse.com andreas.stieger@gmx.de andreas.stieger@gmx.de tchvatal@suse.com mrueckert@suse.de bjorn.lie@gmail.com astieger@suse.com astieger@suse.com mpluskal@suse.com astieger@suse.com astieger@suse.com mrueckert@suse.de kbabioch@suse.com dimstar@opensuse.org mimi.vx@gmail.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com sreeves@suse.com astieger@suse.com dimstar@opensuse.org astieger@suse.com astieger@suse.com dimstar@opensuse.org astieger@suse.com dimstar@opensuse.org dimstar@opensuse.org hrvoje.senjan@gmail.com - Add patches backported from the upstream v1.3 branch to fix
CVE-2022-29187, CVE-2022-24765 (bsc#1201431, bsc#1198234):
* 0001-buffer-git_buf_sanitize-should-return-a-value.patch
* 0001-path-refactor-ownership-checks-into-current-user-and.patch
* 0002-repo-ensure-that-repo-dir-is-owned-by-current-user.patch
* 0003-fs_path-mock-ownership-checks.patch
* 0004-repo-test-configuration-ownership-validation.patch
* 0005-repo-refactor-global-config-loader-function.patch
* 0006-repo-honor-safe.directory-during-ownership-checks.patch
* 0007-repo-make-ownership-checks-optional.patch
* 0010-revparse-Remove-error-prone-redundant-test.patch
* 0014-repo-add-tests-for-bare-repo-permissions.patch
* 0015-fs-remove-mock-naming-from-change-ownership-constant.patch
* 0016-fs-refactor-file-ownership-checks.patch
* 0017-fs-allow-ownership-match-if-user-is-in-admin-group.patch
* 0018-repo-allow-admin-owned-configs-by-admin-users.patch
* 0019-repo-validate-gitdir-and-gitlink-ownership.patch
* 0020-repo-allow-users-running-with-sudo-to-access-their-r.patch - libgit2 0.28.4:
* CVE-2019-1348: the fast-import stream command "feature
export-marks=path" allows writing to arbitrary file paths. As
libgit2 does not offer any interface for fast-import, it is not
susceptible to this vulnerability. (boo#1158785)
* CVE-2019-1349: by using NTFS 8.3 short names, backslashes or
alternate filesystreams, it is possible to cause submodules to
be written into pre-existing directories during a recursive
clone using git. As libgit2 rejects cloning into non-empty
directories by default, it is not susceptible to this
vulnerability. (boo#1158787)
* CVE-2019-1350: recursive clones may lead to arbitrary remote
code executing due to improper quoting of command line
arguments. As libgit2 uses libssh2, which does not require us
to perform command line parsing, it is not susceptible to this
vulnerability. (boo#1158788)
* CVE-2019-1351: Windows provides the ability to substitute
drive letters with arbitrary letters, including multi-byte
Unicode letters. To fix any potential issues arising from
interpreting such paths as relative paths, we have extended
detection of DOS drive prefixes to accomodate for such cases.
(boo#1158790)
* CVE-2019-1352: by using NTFS-style alternative file streams for
the ".git" directory, it is possible to overwrite parts of the
repository. While this has been fixed in the past for Windows,
the same vulnerability may also exist on other systems that
write to NTFS filesystems. We now reject any paths starting
with ".git:" on all systems. (boo#1158790)
* CVE-2019-1353: by using NTFS-style 8.3 short names, it was
possible to write to the ".git" directory and thus overwrite
parts of the repository, leading to possible remote code
execution. While this problem was already fixed in the past for
Windows, other systems accessing NTFS filesystems are
vulnerable to this issue too. We now enable NTFS protecions by
default on all systems to fix this attack vector. (boo#1158791)
* CVE-2019-1354: on Windows, backslashes are not a valid part of
a filename but are instead interpreted as directory separators.
As other platforms allowed to use such paths, it was possible
to write such invalid entries into a Git repository and was
thus an attack vector to write into the ".git" dierctory. We
now reject any entries starting with ".git" on all systems.
(boo#1158792)
* CVE-2019-1387: it is possible to let a submodule's git
directory point into a sibling's submodule directory, which may
result in overwriting parts of the Git repository and thus lead
to arbitrary command execution. As libgit2 doesn't provide any
way to do submodule clones natively, it is not susceptible to
this vulnerability. Users of libgit2 that have implemented
recursive submodule clones manually are encouraged to review
their implementation for this vulnerability. (boo#1158793) - libgit2 0.28.3:
* A carefully constructed commit object with a very large number
of parents may have lead to out-of-bounds writes or potential
denial of service (boo#1158981) - Update to 0.28.2:
* Fix include directory ordering when using bundled dependencies.
* Fix infinite loop when searching for a non-existing repository with
Windows-style paths including drive prefixes.
* Fix symlinks to directories on Windows.
* Fix paths with a trailing "/" not always being treated as
directories when computing ignores.
* Fix false negatives when computing ignores where ignore rules
that are a prefix to a negative ignore rule exist.
* Fix patches with CRLF line endings not being parsed correctly.
* Fix segfault when parsing patches with file addition (deletion)
where the added (deleted) file name contains a space.
* Fix assertion failure when trying to write to a non-existent
locked configuration file. - Update to version 0.28.1:
- The deprecated functions (git_buf_free and the giterr_ family
of functions) are now exported properly. In the v0.28 release,
they were not given the correct external attributes and they
did not have the correct linkage visibility in the v0.28
library. - Update to version 0.28.0:
* Changes or improvements:
- The library is now always built with cdecl calling
conventions on Windows; the ability to build a stdcall
library has been removed.
- Reference log creation now honors
core.logallrefupdates=always.
- Fix some issues with the error-reporting in the OpenSSL
backend.
- HTTP proxy support is now builtin; libcurl is no longer used
to support proxies and is removed as a dependency.
- Certificate and credential callbacks can now return
GIT_PASSTHROUGH to decline to act; libgit2 will behave as if
there was no callback set in the first place.
- The line-ending filtering logic - when checking out files -
has been updated to match newer git (>= git 2.9) for proper
interoperability.
- Symbolic links are now supported on Windows when
core.symlinks is set to true.
- Submodules with names which attempt to perform path traversal
now have their configuration ignored. Such names were blindly
appended to the $GIT_DIR/modules and a malicious name could
lead to an attacker writing to an arbitrary location. This
matches git's handling of CVE-2018-11235.
- Object validation is now performed during tree creation in
the git_index_write_tree_to API.
- Configuration variable may now be specified on the same line
as a section header; previously this was erroneously a parser
error.
- When an HTTP server supports both NTLM and Negotiate
authentication mechanisms, we would previously fail to
authenticate with any mechanism.
- The GIT_OPT_SET_PACK_MAX_OBJECTS option can now set the
maximum number of objects allowed in a packfile being
downloaded; this can help limit the maximum memory used when
fetching from an untrusted remote.
- Line numbers in diffs loaded from patch files were not being
populated; they are now included in the results.
- The repository's index is reloaded from disk at the beginning
of git_merge operations to ensure that it is up-to-date.
- Mailmap handling APIs have been introduced, and the new
commit APIs git_commit_committer_with_mailmap and
git_commit_author_with_mailmap will use the mailmap to
resolve the committer and author information. In addition,
blame will use the mailmap given when the
GIT_BLAME_USE_MAILMAP option.
- Ignore handling for files in ignored folders would be
ignored.
- Worktrees can now be backed by bare repositories.
- Trailing spaces are supported in .gitignore files, these
spaces were previously (and erroneously) treated as part of
the pattern.
- The library can now be built with mbedTLS support for HTTPS.
- The diff status character 'T' will now be presented by the
git_diff_status_char API for diff entries that change type.
- Revision walks previously would sometimes include commits
that should have been ignored; this is corrected.
- Revision walks are now more efficient when the output is
unsorted; we now avoid walking all the way to the beginning
of history unnecessarily.
- Error-handling around index extension loading has been fixed.
We were previously always misreporting a truncated index.
* API additions:
- The index may now be iterated atomically using
git_index_iterator.
- Remote objects can now be created with extended options using
the git_remote_create_with_opts API.
- Diff objects can now be applied as changes to the working
directory, index or both, emulating the git apply command.
Additionally, git_apply_to_tree can apply those changes to a
tree object as a fully in-memory operation.
- You can now swap out memory allocators via the
GIT_OPT_SET_ALLOCATOR option with git_libgit2_opts().
- You can now ensure that functions do not discard unwritten
changes to the index via the
GIT_OPT_ENABLE_UNSAVED_INDEX_SAFETY option to
git_libgit2_opts(). This will cause functions that implicitly
re-read the index (eg, git_checkout) to fail if you have
staged changes to the index but you have not written the
index to disk. (Unless the checkout has the FORCE flag
specified.)
- At present, this defaults to off, but we intend to enable
this more broadly in the future, as a warning or error. We
encourage you to examine your code to ensure that you are not
relying on the current behavior that implicitly removes
staged changes.
- Reference specifications can be parsed from an arbitrary
string with the git_refspec_parse API.
- You can now get the name and path of worktrees using the
git_worktree_name and git_worktree_path APIs, respectively.
- The ref field has been added to git_worktree_add_options to
enable the creation of a worktree from a pre-existing branch.
- It's now possible to analyze merge relationships between any
two references, not just against HEAD, using
git_merge_analysis_for_ref.
* API removals:
- The git_buf_free API is deprecated; it has been renamed to
git_buf_dispose for consistency. The git_buf_free API will be
retained for backward compatibility for the foreseeable
future.
- The git_otype enumeration and its members are deprecated and
have been renamed for consistency. The GIT_OBJ_ enumeration
values are now prefixed with GIT_OBJECT_. The old
enumerations and macros will be retained for backward
compatibility for the foreseeable future.
- Several index-related APIs have been renamed for consistency.
The GIT_IDXENTRY_ enumeration values and macros have been
renamed to be prefixed with GIT_INDEX_ENTRY_. The
GIT_INDEXCAP enumeration values are now prefixed with
GIT_INDEX_CAPABILITY_. The old enumerations and macros will
be retained for backward compatibility for the foreseeable
future.
- The error functions and enumeration values have been renamed
for consistency. The giterr_ functions and values prefix have
been renamed to be prefixed with git_error_; similarly,
the GITERR_ constants have been renamed to be prefixed with
GIT_ERROR_. The old enumerations and macros will be retained
for backward compatibility for the foreseeable future.
* Breaking API changes:
- The default checkout strategy changed from DRY_RUN to SAFE.
- Adding a symlink as .gitmodules into the index from the
workdir or checking out such files is not allowed as this can
make a Git implementation write outside of the repository and
bypass the fsck checks for CVE-2018-11235.
- Bump sover to 28 following upstreams changes. - libgit2 0.27.7:
* Various improvements for handling repositories
* Various API correctness fixes
- includes changess from 0.27.6:
* Various security fixes for parsing integers from buffers,
and buffer handling bsc#1114729 - libgit2 0.27.5:
* CVE-2018-17456: Submodule URLs and paths with a leading "-"
are now ignored to avoid injecting options into library
consumers that perform recursive clones (bsc#1110949)
* Avoid a buffer overflow when running repack
* Avoid stack overflow from unbounded recursion in configuration
file parser
* Avoid heap-buffer overflow when parsing "ok" packets
* Fix heap-buffer overflows in smart protocol parsing code
* Fix potential integer overflows on platforms with 16 bit ints
* Fix potential NULL pointer dereference when parsing
configuration files - Use pkgconfig style of dependencies, refresh dependencies
- Use more of cmake macros - libgit2 0.27.4:
* fix out-of-bounds reads when processing smart-protocol "ng"
packets (bsc#1104641) - libgit2 0.27.3:
* CVE-2018-10887 (bsc#1100613), CVE-2018-10888 (bsc#1100612):
Specially crafted delta object in packfiles could trigger an
integer overflow, bypassing input validation and causing the
object database to contain copies of system memory. This may
allow denial of service or, potentially, an information leak
- includes changes from 0.27.2:
* various API and correctnes fixes
* Fixes related to handling of .gitmodules
- includes changes from 0.27.1:
* CVE-2018-11235: insufficient validation of submodule names from
.gitmodules allowed writes to arbitrary paths (bsc#1095219)
* disallow .gitmodules files as symlinks. - update to 0.27.0:
- Changes or improvements
- Improved p_unlink in posix_w32.c to try and make a file
writable before sleeping in the retry loop to prevent
unnecessary calls to sleep.
- The CMake build infrastructure has been improved to speed up
building time.
- A new CMake option "-DUSE_HTTPS=" makes it possible to
explicitly choose an HTTP backend.
- A new CMake option "-DSHA1_BACKEND=" makes it possible to
explicitly choose an SHA1 backend. The collision-detecting
backend is now the default.
- A new CMake option "-DUSE_BUNDLED_ZLIB" makes it possible to
explicitly use the bundled zlib library.
- A new CMake option "-DENABLE_REPRODUCIBLE_BUILDS" makes it
possible to generate a reproducible static archive. This
requires support from your toolchain.
- The minimum required CMake version has been bumped to 2.8.11.
- Writing to a configuration file now preserves the case of the
key given by the caller for the case-insensitive portions of
the key (existing sections are used even if they don't
match).
- We now support conditional includes in configuration files.
- Fix for handling re-reading of configuration files with
includes.
- Fix for reading patches which contain exact renames only.
- Fix for reading patches with whitespace in the compared
files' paths.
- We will now fill FETCH_HEAD from all passed refspecs instead
of overwriting with the last one.
- There is a new diff option, GIT_DIFF_INDENT_HEURISTIC which
activates a heuristic which takes into account whitespace and
indentation in order to produce better diffs when dealing
with ambiguous diff hunks.
- Fix for pattern-based ignore rules where files ignored by a
rule cannot be un-ignored by another rule.
- Sockets opened by libgit2 are now being closed on exec(3) if
the platform supports it.
- Fix for peeling annotated tags from packed-refs files.
- Fix reading huge loose objects from the object database.
- Fix files not being treated as modified when only the file
mode has changed.
- We now explicitly reject adding submodules to the index via
git_index_add_frombuffer.
- Fix handling of GIT_DIFF_FIND_RENAMES_FROM_REWRITES raising
SIGABRT when one file has been deleted and another file has
been rewritten.
- Fix for WinHTTP not properly handling NTLM and Negotiate
challenges.
- When using SSH-based transports, we now repeatedly ask for
the passphrase to decrypt the private key in case a wrong
passphrase is being provided.
- When generating conflict markers, they will now use the same
line endings as the rest of the file.
- API additions
- The git_merge_file_options structure now contains a new
setting, marker_size. This allows users to set the size of
markers that delineate the sides of merged files in the
output conflict file. By default this is 7
(GIT_MERGE_CONFLICT_MARKER_SIZE), which produces output
markers like <<<<<<< and >>>>>>>.
- git_remote_create_detached() creates a remote that is not
associated to any repository (and does not apply
configuration like 'insteadof' rules). This is mostly useful
for e.g. emulating git ls-remote behavior.
- git_diff_patchid() lets you generate patch IDs for diffs.
- git_status_options now has an additional field baseline to
allow creating status lists against different trees.
- New family of functions to allow creating notes for a
specific notes commit instead of for a notes reference.
- New family of functions to allow parsing message trailers.
This API is still experimental and may change in future
releases.
- Breaking API changes
- Signatures now distinguish between +0000 and -0000 UTC offsets.
- The certificate check callback in the WinHTTP transport will
now receive the message_cb_payload instead of the
cred_acquire_payload.
- We are now reading symlinked directories under .git/refs.
- We now refuse creating branches named "HEAD".
- We now refuse reading and writing all-zero object IDs into
the object database.
- We now read the effective user's configuration file instead
of the real user's configuration in case libgit2 runs as part
of a setuid binary.
- The git_odb_open_rstream function and its readstream callback
in the git_odb_backend interface have changed their
signatures to allow providing the object's size and type to
the caller. - Update to 0.26.3:
* Fix cloning of the libgit2 project with git clone --recursive by removing an
invalid submodule from our testing data.
* Fix endianness of the port in p_getaddrinfo().
* Fix handling of negative gitignore rules with wildcards.
* Fix handling of case-insensitive negative gitignore rules.
* Fix resolving references to a tag if the reference is stored with its fully
resolved OID in the packed-refs file.
* Fix checkout not treating worktree files as modified when only their mode has
changed.
* Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
* Fixes memory handling issues when reading crafted repository index files.
The issues allow for possible denial of service due to allocation of large
memory and out-of-bound reads.
(CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
* Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
vulnerable to security issues in the prior version. - Modernize spec-file by calling spec-cleaner - remove unneeded dependency (python is used only for testsuite, which
isn't used during build) - libgit2 0.26.0:
* Support for opening, creating and modifying worktrees.
* Can now detect SHA1 collisions resulting from the SHAttered
attack CVE-2005-4900
* Fix for missing implementation of `git_merge_driver_source` getters
* Fix for installed pkg-config file being broken when the prefix
contains spaces
* Can now detect when the hashsum of on-disk objects does not
match their expected hashsum.
* Support open-ended ranges (e.g. "master..", "...master") in
revision range parsing code.
* Correctly compute ignores with leading "/" in subdirectories.
* Optionally call `fsync` on loose objects, packfiles and their
indexes, loose references and packed reference files.
* Builds against OpenSSL v1.1 and against LibreSSL.
* Improvements for reading index v4 files.
* API additions and incompatible API changes - libgit2 0.25.1
- New features and functionality:
* repository discovery features
* Support for reading and writing git index v4 files
* Improve the performance of the revwalk
* reference db concurrency improvements
* Nanosecond resolution is now activated by default
* restrict the set of ciphers used with OpenSSL by default.
* user-registered merge drivers
* built-in support for the union merge driver
* callers can now specify proxy settings
* New API for creating signed commits
* New API for creating blobs from streams
* New flags for opening repositories
* New functions for various git operations
- Removed API:
* git_blob_create_fromchunks() has been removed in favour of
git_blob_create_fromstream()
- Changed API:
* git_packbuilder_object_count and git_packbuilder_written now
return a size_t instead of a uint32_t for more thorough
compatibility with the rest of the library.
* git_packbuiler_progress now provides explicitly sized uint32_t
values instead of unsigned int.
* git_diff_file now includes an id_abbrev field that reflects the
number of nibbles set in the id field.
* git_odb_backend now has a freshen function pointer
* git_remote_connect() now accepts proxy options. - libgit2 0.24.6, including the following security fixes:
* bsc#1019036: edge cases in the Git Smart Protocol can lead to
attempting to parse outside of the buffer
CVE-2016-10128,CVE-2016-10129
* bsc#1019037: MITM possible due to lack of parameter for
certificate parameter
CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
* add support for OpenSSL 1.1.0 for BIO filter - libgit2 0.24.3, fixing the following vulnerabilities:
* CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
object files (bsc#1003810)
* various bug fixes from the 0.24.2 release - Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0 - libgit2 0.24.1:
+ various compatible backported bug fixes - Update to version 0.24.0:
+ Custom filters can now be registered with wildcard attributes,
for example filter=*. Consumers should examine the attributes
parameter of the check function for details.
+ Symlinks are now followed when locking a file, which can be
necessary when multiple worktrees share a base repository.
+ You can now set your own user-agent to be sent for HTTP
requests by using the GIT_OPT_SET_USER_AGENT with
git_libgit2_opts().
+ You can set custom HTTP header fields to be sent along with
requests by passing them in the fetch and push options.
+ Tree objects are now assumed to be sorted. If a tree is not
correctly formed, it will give bad results. This is the git
approach and cuts a significant amount of time when reading the
trees.
+ Filter registration is now protected against concurrent
registration.
+ Filenames which are not valid on Windows in an index no longer
cause to fail to parse it on that OS.
+ Rebases can now be performed purely in-memory, without touching
the repository's workdir.
+ When adding objects to the index, or when creating new tree or
commit objects, the inputs are validated to ensure that the
dependent objects exist and are of the correct type. This
object validation can be disabled with the
GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
+ The WinHTTP transport's handling of bad credentials now behaves
like the others, asking for credentials again.
+ Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
soname bump (also in baselibs.conf). - libgit2 0.23.4:
* various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch - libgit2 0.23.3, containing critical fixes:
* blame: guard xdiff calls for large files
* diff: don't feed large files to xdiff
* merge_file: treat large files as binary
* xdiff: convert size variables to size_t
* GITERR_CHECK_ALLOC_ADDn: multi-arg adders - Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc. - libgit2 0.23.2:
* documentation fixes
* diff: don't error out on an invalid regex
* http: propagate the credentials callback's error code
* Fix bug in git_smart__push: push_transfer_progress cb is never called
* remote: don't confuse tag auto-follow rules with refspec matching
* curl: use the most secure auth method for the proxy
* Forcing libssh2 lib location
* fix duplicate basenames to support older VS
- includes changes from 0.23.1:
* Stage an unregistered submodule in _add_bypath()
* filebuf: remove lockfile upon rename errors
* Increase required version of cmake to 2.8
* Handle ssh:// and git:// urls containing a '~' character.
* documentation updates
* submodule URL handling fixes
* index: allow add_bypath to update submodules
* blob: fail to create a blob from a dir with EDIRECTORY
* submodule: lookup the submodule by path if available
* submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser - Update to version 0.23.0:
+ Changes or improvements:
- Patience and minimal diff drivers can now be used for merges.
- Merges can now ignore whitespace changes.
- Updated binary identification in CRLF filtering to avoid
false positives in UTF-8 files.
- Rename and copy detection is enabled for small files.
- Checkout can now handle an initial checkout of a repository,
making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
clone.
- The signature parameter in the ref-modifying functions has
been removed. Use git_repository_set_ident() and
git_repository_ident() to override the signature to be used.
- The local transport now auto-scales the number of threads to
use when creating the packfile instead of sticking to one.
- Reference renaming now uses the right id for the old value.
- The annotated version of branch creation, HEAD detaching and
reset allow for specifying the expression from the user to be
put into the reflog.
- git_rebase_commit now returns GIT_EUNMERGED when you attempt
to commit with unstaged changes.
- On Mac OS X, we now use SecureTransport to provide the
cryptographic support for HTTPS connections insead of
OpenSSL.
- Checkout can now accept an index for the baseline
computations via the baseline_index member.
- The configuration for fetching is no longer stored inside the
git_remote struct but has been moved to a git_fetch_options.
The remote functions now take these options or the callbacks
instead of setting them beforehand.
- git_submodule instances are no longer cached or shared across
lookup. Each submodule represents the configuration at the
time of loading.
- The index now uses diffs for add_all() and update_all() which
gives it a speed boost and closer semantics to git.
- The ssh transport now reports the stderr output from the
server as the error message, which allows you to get the
"repository not found" messages.
- git_index_conflict_add() will remove staged entries that
exist for conflicted paths.
- The flags for a git_diff_file will now have the
GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
of the diff. This is useful for understanding whether a side
of the diff exists in the presence of a conflict.
- The constructor for a write-stream into the odb now takes
git_off_t instead of size_t for the size of the blob, which
allows putting large files into the odb on 32-bit systems.
- The remote's push and pull URLs now honor the
url.$URL.insteadOf configuration. This allows modifying URL
prefixes to a custom value via gitconfig.
- git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
and git_diff_buffers now accept a new binary callback of type
git_diff_binary_cb that includes the binary diff information.
- The race condition mitigations described in racy-git.txt have
been implemented.
- If libcurl is installed, we will use it to connect to HTTP(S)
servers.
+ Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
soname bump (also in baselibs.conf). - Update to version 0.22.1:
+ The following (critical) fixes have been backported to this
maintenance release:
- checkout: introduce git_checkout_perfdata.
- git_path_join_unrooted: return base len.
- checkout: don't recreate previous directory.
- checkout tests: nasty symlinks.
- checkout: drop newline in error message.
- checkout: remove files before writing new ones.
- checkout tests: emulate p_realpath poorly on Win32.
- checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
+ git_signature_new() now requires a non-empty email address.
+ Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
+ Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
TLSv1 in OpenSSL.
+ The fetch behavior of remotes with autotag set to
GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
1.9.0 and later. In this mode, libgit2 now fetches all tags in
addition to whatever else needs to be fetched.
+ git_checkout() now handles case-changing renames correctly on
case-insensitive filesystems; for example renaming "readme" to
"README".
+ The search for libssh2 is now done via pkg-config instead of a
custom search of a few directories.
+ Add support for core.protectHFS and core.protectNTFS. Add more
validation for filenames which we write such as references.
+ The local transport now generates textual progress output like
git-upload-pack does ("counting objects").
+ git_checkout_index() can now check out an in-memory index that
is not necessarily the repository's index, so you may check out
an index that was produced by git_merge and friends while
retaining the cached information.
+ Remove the default timeout for receiving / sending data over
HTTP using the WinHTTP transport layer.
+ Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
systems.
+ Provide built-in objects for the empty blob (e69de29) and empty
tree (4b825dc) objects.
+ The index' tree cache is now filled upon read-tree and
write-tree and the cache is written to disk.
+ LF -> CRLF filter refuses to handle mixed-EOL files.
+ LF -> CRLF filter now runs when * text = auto (with Git for
Windows 1.9.4).
+ File unlocks are atomic again via rename. Read-only files on
Windows are made read-write if necessary.
+ Share open packfiles across repositories to share descriptors
and mmaps.
+ Use a map for the treebuilder, making insertion O(1).
+ The build system now accepts an option EMBED_SSH_PATH which
when set tells it to include a copy of libssh2 at the given
location. This is enabled for MSVC.
+ Add support for refspecs with the asterisk in the middle of a
pattern.
+ Fetching now performs opportunistic updates. To achieve this,
we introduce a difference between active and passive refspecs,
which make git_remote_download() and git_remote_fetch() to take
a list of resfpecs to be the active list, similarly to how git
fetch accepts a list on the command-line.
+ The THREADSAFE option to build libgit2 with threading support
has been flipped to be on by default.
+ The remote object has learnt to prune remote-tracking branches.
If the remote is configured to do so, this will happen via
git_remote_fetch(). You can also call git_remote_prune() after
connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
soname bump (also in baselibs.conf). - Add baselibs.conf sheep69 1663138992
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | 0.28.4-150200.3.3.1 0.28.4-150200.3.3.1 0.28.4 git2 git2.h annotated_commit.h apply.h attr.h blame.h blob.h branch.h buffer.h checkout.h cherrypick.h clone.h commit.h common.h config.h cred_helpers.h deprecated.h describe.h diff.h errors.h filter.h global.h graph.h ignore.h index.h indexer.h inttypes.h mailmap.h merge.h message.h net.h notes.h object.h odb.h odb_backend.h oid.h oidarray.h pack.h patch.h pathspec.h proxy.h rebase.h refdb.h reflog.h refs.h refspec.h remote.h repository.h reset.h revert.h revparse.h revwalk.h signature.h stash.h status.h stdint.h strarray.h submodule.h sys alloc.h commit.h config.h diff.h filter.h hashsig.h index.h mempack.h merge.h odb_backend.h openssl.h path.h refdb_backend.h reflog.h refs.h repository.h stream.h time.h transport.h tag.h trace.h transaction.h transport.h tree.h types.h version.h worktree.h libgit2.so libgit2.pc libgit2-devel examples CMakeLists.txt COPYING README.md add.c blame.c cat-file.c checkout.c common.c common.h describe.c diff.c for-each-ref.c general.c init.c log.c ls-files.c merge.c network Makefile clone.c common.c common.h fetch.c git2.c index-pack.c ls-remote.c remote.c rev-list.c rev-parse.c showindex.c status.c tag.c test test-rev-list.sh /usr/include/ /usr/include/git2/ /usr/include/git2/sys/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/doc/packages/ /usr/share/doc/packages/libgit2-devel/ /usr/share/doc/packages/libgit2-devel/examples/ /usr/share/doc/packages/libgit2-devel/examples/network/ /usr/share/doc/packages/libgit2-devel/examples/test/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:25921/SUSE_SLE-15-SP2_Update/03ab1dcc5d9f003aeaff77a85e9772cf-libgit2.SUSE_SLE-15-SP2_Update drpm xz 5 x86_64-suse-linux directory C source, ASCII text pkgconfig file ASCII text makefile script, ASCII text Bourne-Again shell script, ASCII text executable P R R R ] SX jˍ_ utf-8 a6cfe66985266b0de3107a7ff4270f79ace15cd08d61c7d89120301ef94b9b56 ? 7zXZ
! t/oYcx] "k%r=dٶ{ߒ8W^ytd]ccnI $9jMf\:'C E]}斍b*ѥq0 k34 Pߪa(M~[(?H^D.1+U5aㆇ#d F_o_k(Z핚*w=89{ ߍ;[d5%
!0ͧ}B}0[ 7 3z]
*7$ ~ȡ}YOf7i=VT,m=G1:Ϭs Uk+u<"On!-. %e͢4פz;Hi4%ՂfsU R2gL h:1Q 'JO*
;տ2_잆 ;
yPl\$ }+{j( Y4Ns2}>i@uP0un5U>P<.%
Cv] S4=ȤӏKPԹ4yGBP ܬmN]Ր
(XC2YE{Y!u %:re)_אX1_9कuf t-(hYnxȐ" N~R
f=͋B'\|M7g].8 H;vuް ;s\ĚNvh'죲0C}-qbN] @%+=zUf
zy,ױֱT]P@sV! lwsƭ"_/; ~(S㰣p2Ok1*k,cH@WmRm @7rːz qǗR(J~;'rpd4A*9y2Ru\͑:{!z -0չ[_y?Ƹeչ}fGCWG=83䣖I`Z4$ .ƿvxgϣ\ޙH Q.oܶ :Wd$Va) "y Z-_3c^ 1cL;&)+wqVlO* ʺE"*ObI<$R=bԖϱp?;V u+³}c¬1Ի 0is8
mo42"X%Z?~E+Ķy"<x7 *am#< 1D`{B8"|
a jR,C1cZP_tTA>(1 T fGxi_L-'}RӜ|<2͊'S\WNӐ06|$=(
`;u BM ÚJxo_
սϭtBZX XE3 y :3n_9_n#ƱPEf\_F aHjEh՟Qr}#j.TJBF"4
FG N:$ߩm@6R!}@Ht^0[h Сq goU]}2O{2I )\+KsA,6~VIP CL䛳Țe\*Y~nPa 65|T Ȣ<# K]iA}><5ݻ_Ksi8j$`P{,g|cUb!EP&E{L,L#}쑿+xN݇ L[.o`Jy;t-hjq07ɟAo'tU6[|
P7s
ԇaBI*^s65{]. B+ʥ2 \6잎a5ÈŶ,^[#?+g 4x3RIbL{Cu~8U dȣS :1Mb0r&K dɸPB9`{Dn:Tq>Q)+@(MA%M
={Ǚc7s_ʍc9K0&~
D2 h8E1t_""Wo`QX
[N@0%Ydy
ţ:H 8.s IYtRv샔;7'nV"B1xi,Wrl*\
o]+{-d:։ˊeODm-죙{bE%M7)QSC ,u4['O%}rFOޝ9v{ߞ yv_[Dq 3my aBR 0#doTPָx i mu[#pRbWqgH>/X^OA|~fZQC䜼}2n. aVk{5HxC;?x UX x9D,=pWBe'cɔV4UA&9OG ޡM
:0} =J~};m ;>Y DA n,> 埒L$HDsđl[XrX^ VkZ 鞥;L1+D3otF
5W΅oBve5_trrjT0q%☯nOM# ;ŜIրCt-@\Bt{ '4c]VXNDAY
YTi! J6:&K
2F]8h=N J7ӃDzp. nST"MBN2N
i^ڹqy\ n2A7A
tB3KՌ;& !CvS5P _EzԠҺ=B]n1O m=;aI|(sz~)/ٶ&0ibq b yZ
Ȇz6}?W$:,|H9zY 2v =5t ĕSn ՟20j G5&oD
1Ǽ0Ll|4HZg# 8]?'.6b% pWr 3NY1;wX`: BQ=6(u>@0%q #I/=-JFv%;| n-;q%O&2~x5Qli;X |,ai>%;ZJ5+%KQ
:"]3vF\~XB& aq7qm~8B7K\%i]yg~OUYO܉ oK+
U;vJ&YipRphyfo=4 S eG-ъ 6 @ `ȷD<oluU 90 gPI}#ܘqP^[(3({Ne3#|ƼX@ԌC6XtG &iKjs $Q
q fXTCX";r5%ӏuoKǹ?X9><&`~: k' wD⮄N;C)/*vaL8Hv~n^\hxUB%&i ٔ m.qUO~+
^|nΔS^,X`=յ!K]i7S{d 3 oZJ% |i*SCa}f؍5?H:5$%՞ɻki)/|y'RQ.X}+f:ܑG%qvan'4;p )f5NnԔ "J\%*`R^aItJ|܅N7 y|2RvYa+(lɆ{ȸc8cM>Ћ0:y7@~GRUN6NeCҶ
rҍ
g]Ol,G:3w?zf
*@wAaF`$W yz}}!Ռf҈B
W¼ϫjʄ|?\5nWg jXb(Q݆bZJC^ea;+7?8xoM9[N 9=2Q|i0I̗snf 2KF3*i-(R*CiV7poD l)S3!@V|7X) U3"acHq7ZԒC *Px@H%"a z 4&IIދ4/ (4Ps|oCWx'NZEc aJ8%] U
q[o:#=fҦPs;5is E8-m& \5, $0}E@ rx8ֻ2peXe
-S*nu7#BDHuF9.GU$0[^]s/J'&,6r rO`~ǿ7WU<, K4}=C~7鯘 &˨&D:na ,vzL{
P\DdСa9U X贆ުp6^8dXՊ d-Wgabd7Ge:ϧ]B*|n[,+~Sv'?dKg'X#{JޏyG:qDM襩^M&\uC`-,d9Q4ѲqVg3uZ$`.[PH vtS\M=ZQ k0"iN77Kt;#|7'Zo4u/_wL1fNN5 5^
^%&Jgs}7#&RX0 v6ia֒En ,h]+& 3 N 6nJ,nBq7
(~ݖ Z9!NF 4[ed
9Vq+^#v+>k1Kpŀ*^ǟ:NL(`L .h~k(bSZi$7ۣ;M |39]() g(l\qLlKʤ Z)5 $6viGYj#\ xb90eϨo
)sΠg]Ά(^>hclPyUH9<`uc
tU Jp7dT2mH
,w]g`L$LHa3@ Z0:;أVg(v~z;:hOu>}v} Ǚ85UQp P&LuB"M?&렞?!ZELY#}=~~UR훩4zAPߠ#ёZ*B$FV?C Ey QcZ:9jBW`I. 鎴 0`{t4B~HJ
)Z|8`IS_'tM-}O|qs2 gVy i}Ѫ2!%gx͝V-y\$PPgD {o#M9i%~vԾtȏ6x&[\pՍ ABoE_, f*
cqiy
mbnQqch}MRD9PIpuY˖/设f6wA.Z9ޓ_ `DžN ޤS~xi#,Hqzm^:TB
2״nf7؉=(GH>L~ 婼Ō_Qt5:p=|G g+HSލo5璊hڌ=o͛GxfSx䇀lwJJ125 A8ZsrH;֏kh_?|Bã]r;0CL"]_KqbAHsA1Tb$}y%?t79%E.,~3ǤE*E_/ٵo?ފ y.#ԝVŐ*zx,O GKp[o/c.2$Ax&n!|l 0Þo BX~! Oʧb|"]egr_͞VKT"x "yg8 91 _^q2]s, "Ha ;j$T9;bC]\fdj .4C/^ 6ZY@- u ZJMz>7w]MZ_?87( 3S罶'}>&4懖W0G
EP -
Y{ѳrE8)WQ<4dTq X#㭻d;Z {͛(l\u']ˣLb
MJsQwbqTk^
ɞh
e^7Àԙ ޑ3#D=N铐FheAc' A^FJRn ϒm۔=דhGWW%"7~ E _媡=D6vfy]͠}7)b beZUW_f gn}fNdBY ;eCԫmjyqٸx'E>vm3DllMUj'Rո-
y6w3{rjhj1LHDŋBT=|
gŮ;X?!ҸttD sqt`6
}0^r+);)q LF!Y+e מ$α. 9\f3֒ZmV<ceNwX䏆J;R}>_$#op ? v/m$|ݸtemb8)>=iasDdg/Z _kW}Ok/N҆yD3(<6
V|F&BPk0eth|"Ou^NkL@ЕDq?{ ,l T?+g~h
sjE{qt
1Lfz uUW]E>Pyi sT`tO@z~=/Ս˪?+6=s UͧWoZA8Y$fD R-k{ b䉎Zu=6yb<~j'%~{%8!l=f:`SaahslAA:[L=ܟD KBfca-mGoqMW/2fu{q/T21%l!yg|R6w6|[ 1QPF
BSA} [M#Z^ ̭\3˵Щpy#<r'>EaeM2'֟>+AGtڎk W.x2 Ej~-L]s9BN+8_z3 w3MT|:5mReKX] CA.m>.ʘmQ
ALJؗa$jɨ.J4ixFB O|` ;_#W;EtMJ֔Ogl&6{^X-#z*8\ V%h3zYWB*XEf77*'{lv (j6Mi
Q\(ԺJIop ց ĂWO˵W@Ay
wDYVhy;U0>ev?vV$h-d(>h5Mk Nx:iˀE4W@F'z f݁,y @|\$H xЌ6z>C#"Hf?)w'# 0jg3̙kpF- \0m
DwC݀-w$m4G4Ac_ሹBU嫯5;yq 6(μ}ݫ9ww0}AE]GvW"z=)Dz Aw (vw gW ZL,>H}T:" ^oaKk;p> gSǧ#܌&f<+[ۊDy$s(N>@#Y!
fR!~D3-QܵBB]軍n9 1#Ӻm3B.f!Xya]uKVRWR)3i|ʂyKm8qˋՒ qYff } ;8&gA?a3
xRV_]6;
]I)W` }kd#_dw~swM
V] vTYp+)㲭($ jT3 'M|~0lh
Gviac `"+5ԛd?/MApx }NHp)[ VG״#jNWXޱPI^s.R{U/j ags ch
~Z
<#fymRqvQ4#$)Jo`TOǝzC _.s1
o<^$0E5nhHQ sQX- Z=fuYy5"cG/n'}h}Ô'8)n_tX㘱1Oʶ* +ڣ=8Eua q{tpݢ v.B 줅K=l=_IKF ~.)H!s#'eFbSw3<VySoPgXDk V̮dJ7Zꓖl氮l+mF!,D
n.%
"-Bmޥ}ua^#4+wHvS9 Lͩt7]5I0//GٍQ+PX_Jv/! GruJ,2IbpTWƈRǙn1~'`C^JwW
.ʾKU8 ! ?UA,J vRYLc bB{@f b5lZ!`N7N&/eOϲ
~F־K 14w Hgr3,kA}=1zݯ1֨aLAWH)HFh C2c Rw'sY i F(0J8vNes rJS1j
2CڮDz5 QxD}Յ '<0(W [2MQʉ_yD= g- =ۭYTěPw()_G0Wigs,SE@-w V0l,)%$*\ppl#7O.f3涁4s%cnAcޣe1ġp)s6jAr"qhIO/dBP2A<ՎJ/$,yu;*svfr3Ptq v/vZTU5cH$ F٫
sZ(' )x^~PgCV Sĺ ]o5كBWLkA}-ɜ8_'o%b~稲LsHюK7[5lnn\֯Ti>:SRmf3,2 1(Q*D>SVC y
,hkwG%UD9b{TVbv7(` _5ܭ)Ip_Cǀʍ:dTF1nuWxҰpWR9&yQ 8)lO(6-{v8cuW^,tJ $%@;AՔ P1EN #R~q `kXX{c!6$z|j Z1&gg:D2q_C5kia cmm-K>Z?Y /ěϑm {ϫd YJ+b҂ms t*BD5>]ITEs,)H|g -pL)ޓ%U0 f^vVQ֗
]r&W Foݥ!q|J6yΐǁ2[ \vpDj| >>Ҭs"s+/+v[_ mR mkJ:~3{9N/1橷
0I A1r r!h Qn^tF0R?a<,-)^Л
[NofZ[ KBymRm]XCT'C `qryW>}+ LxMd֊\綏|b;.+~"6;KU_C͓V:2Tοi@Gv[O3 'B\E͖U!jb=^`kGF YOS] i^AcUB"[z73x)L@\-
&~ |/㱮 ?6x* ğ:Q[]~j<תE߱.㴱,J`fK8b۰T+ӟSbXZª|{[3}sVl%{V pyi)V<*<,a |CT:/[h Une_ƒ99ek ZBW
pi u!=FB9OA^+5mȳ!nAU܅ݗ]8M
ɿ|
r}Ogf}o7{^_R% y.nu%t3a%\m=z
65i f3`c לkֽ`bLByՓ8֘ivx>jR2ªrdWs2⻓MvcYGNDb9oPS̤ VCqX|`B ї -⒞us*[p70!k櫍ej| 7VEP( 1 ~
ą<8C75V#
#_ۃsi;bZf=Ƙߝn.QX`?jG]g!@MK!
q'mE %
O}tKq*3*1VLO?LgLfupNOŵ x_kॡZHuWq6ȃ6Nx*6d ::[c _'DH+x5qk>$ӡ@2~UO7V@wd h yC8 H!g!Dx[Rͣm9L'_ ?" Q l#ͷ)ǨDDI4?{bDwGޘvgDFx TDlj>~4h쓷VmHCc0ݐR\?H)fq -ͦT+CAj踫 -21Mp JRR8Yw1!잺yv*KWP_.b.guN̹(,>[,yv>Su8r@e),MsL U,׃ ~
2l!{%;|V8
"%m=e<ݕI1MtښU(1R Ť2 YآbK~F@[rK:ˎt4d^9F?*,H5)DWBD Tķ#"`.>uM1C\(<'bڢmFpr.q41o8Įڇ(ByD\D2\h`z&LY`=f;uYJ,ᡮn8tJ/v"M9]+t /Ҟ._b\ c/#]M71d<\{("Y^v+ +('< # #k
T I1pͼxX!1W_ab#U/~D6hp;$ KK]Kr vB|-1gKCV.P4HX[{!NP7DΥ6Otp^:fXr!*ooCQ'Ht8MBYiۺ`[FJ*)WAk\FHts
qbMV5y}d~DeuHSSrBq' |Dr^3l h6b傭{D j9;pP
8m{ںFGՌV9mdV'̾iR=?0w[temV!ox
ڻ3
֛&;ph_x'}7J&Ί9:#)0q'[>(JiPI ]
R>4P> rO"(xڳ0nɳ /TY nIYfP:Sݠb r**"19¶)(#(l H :wnX&z}_w)"\ݼ)Qh}A@H"k`) N[YLpZ4S{Kn,Sj@>\^ `eӌpx`wJ}3v
BE k% ]pnH[.o;خVCjԇ;vYrigiPvF 9C>W]{=;u-' !9?k@xԴiD Q?BcĶ;lU
s,eтH G *=zAYM]LK0 R1ұo PZTM A(]OevLZxBwIͼ]A@o%U?ƃ٩cUI ̅udӣIpeD\S9EeiѨ''QH;aY of6 MWLT n"u^MIFHp:QCA]+G:'c$O,Tڈ iJ.c{d|
hIA"l(L+x;>TC.(Ş>ٸ
X 8:EA ۬'g)K72QB&pNt> {p͝ެ{_mƓByZ##!iV|0^9I;Ž= ̿͞^N_*w+F , ⧸F:?#%9;[ʯ9 "[b=9YE?L6=>6`κrXxVX[6l،2`xa7J~9ڎ0 w]r _bՑc7
;_ rGA$8ssIzHivv+FM
6H/}ZDaߑ氄\[TfbW~VRmG{t&`,ɯ 57b0Ӷ"_^)dG3S:+jV\hGPKos |K'-XRW;xf-9N+n&g)-hwB pP'
o"H$ T X}!X#zzz`
2tUXv8QYSSmLŀMڼ: ז{ -jJqĒ |G]FuN N ~2՟fŶ`AkHkX/ȟߦFH -gF~?Hm^6#+FSn 1;4oT"syMX7( 11 {< @{[mYW
~$٢uKCtl_W<ǪUռ?ޥԹ~Ʌ55Q_c ' 5foҴG= 2VX0U?ꓝKӪKaL|߽/ 7kZ΄
)9]1'!Uӳ Xbr d\T5 K%Α3J
VK3%B[y[
㘒UBN^Sy "Pg. ӝ$"x Sto$9\;c\&<8M!Q1\73 i/4ҏ1~f<#KMǁeB= )J' -Q
/y¼ Yҹ[
ɻaO9v կi]6b`2
CN) T b g Lؽ -;⺓in?0h=x"0QG%}Ğ뗮h#lBƪfy$-<5D5NP[o'WuB-*兕Fk tptA0pfQ
(c,NotK- vv??/ ;_ IO ?iW<#,E+YQi1nD}%6Zz˻LNS5q41Py >iE]y/l$/ǺɌC6^o ,ZwqyIቛx iR>~m`9kd
X'
g:I s
ưj$3SGNvA1璜
~FďT z+qК 0NSh5b@]P!aTNWQ7-V?d!kjɝW BllL(.L=.R 6wNR5WS@bu?DwE 7'M($WL99 ٮGЮ'-4VAݱiVtS'mlw~Q!Ȧ< >ouF D@#ęNc#$)w+O\Y* ߥp]H"$@AfU87@_$:;Ofo~RH!|!IA"m`fyEڨۖۍj\vI(>[uKD`ŵa㟎B!LG %AՊ
-G$]^e~~5#xS։jO:x]j_kuYV=B :=N ܜE)mg٥\ t>(cmȺ^ .кU)Oj=l7mB|,ioYl9-;n+XwŬOݤI+`/#Y2J1n
nSX&GkzVǡdr$ k*#;WMIsdL̿\d6H^."rW\kEaO&Olċ:$6ZD?Y@RRo wiIf,'YD"_K׳} 2߬<';LBMHII K1ׁJN`EΛi ¹cS ?$gҌ Z 5Ϣ7*'1Bك܈&^ՙkha$QC~%L8 dPI_T5Y>D0d0ӓ,%Gc{7XU;$ c݀%e_!io[]C6",;%
$Ih'ׂ|9\V's,#tV1;My{`bf&<
p=}S* E5ќY˱*ЮL O"uN%DCfj.QMyC |՚Q%q#76//FD_is7j)2Ӈ
R,e<,RB盈1N !3)5r <hF:&ia㢫`}y[g̴y36dn&f/lm
@=< ^i%H q뗒y,|MIEqݲ ߳_ ܺQ^~kT qϻDn\Բ ]M'2~3UcĚlMrB,(= z\쎟T«E`ݜ&^Qryf9w?! :^̐,qąLM sS<`o̓Q?A6߃NN *n#F߭-Lm;f *uV{~}]+wfsT1GBe! .A{lb)Y:Q=Mɇ,4uu8Uwm"
XZt| 36,=: y|vvAH_Q~q}rׯLC7mE taN :6gmpDmTI/cbnh1kB|KLPsuqD u d /u&c<`>]&.N*e_~C)2x1)>7ם9$QQeMH-qΌ^tp:27O
Q$9Z(( ֺZ})pQdF2][D380t*| ,0[ 0Ԃx`OTg٪Z[c:~^zd<%7 ƨ5|eV\P/c;S,0mSME"/ 1MP_J ). f^`If* rٮ.Nf&v'9\.}?] R_.(+ef
fLT~ɒ{R:9fvMsx o6h~q&TΧFP8gA9&fq!2x
zVm
HB&R_Ow=gzL,s}7eD$-:1jUV^t': r5
QK,䮮)6?O֝BC$u*S?d|Y)ªn On8k2 }z|eS4MnJ&h-$hSn9P iqF ֖oKK_}Fi 3 6UÚ6pw4gat2DH* ݜmЂK,{%
`laX[w}M*+تW [靧g{k{O
dT,ĭ֨@Ur CPW՜n.˯#]8I(kҶyN_-#2%C IL4s,INKN!.9K@JʰSHЛ9[a-r+炥\1ָV־ >Y)攅QɽX +Hҟj9̔R|G|Fy/Ɋ$T)x|iBAe205(|fE!Ej3 6 (/H 0F+VԢNכ5T :R
x(? яj21
`|Q"- tm1`&bCɥy~<.&kUKyt)PoSq{Xڛd;\r߱Ƙ'wvTHmb=gZi 4m hS2 <6rB3RkZ#(spdQBe<9 ]M:dj ݹsN°2Pk0,yOPFZ87
,v0 +oYO&:חi+O ͡
YZ