python3-libxml2-2.9.14-150400.5.25.1 < > , ( eS6p9|9{ K߶R
}<{t#h _+3L='FZv,) A0e:O*7 T6/\)1RBx#AqKG
a0=&}kT2*ҁ&EWUR)9yF UE\!Jy*P ,Vһckn9ԀO*̷aC\{\2Z h Zp+e
fb#mgJ|#~10L\N\~9_XJ+{'$mQ!& -l(q!#{д^Ta7k > A v ? u d ' K $ = ^ b x
, d
> p 3 < 3 3 ( 8 ; 9 ; : z ; B nS F ny G n H n I o X o Y o$ Z o| [ o \ o ] o ^ p b q c r- d r e r f r l r u r v s w tT x t y t 4 z u u u u u C python3-libxml2 2.9.14 150400.5.25.1 Python Bindings for libxml2-python This package contains a module that permits
applications written in the Python programming language to use the
interface supplied by the libxml2 library to manipulate XML files.
This library allows manipulation of XML files. It includes support for
reading, modifying, and writing XML and HTML files. There is DTD
support that includes parsing and validation even with complex DTDs,
either at parse time or later once the document has been modified. eS6h01-armsrv2 ǨSUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Unspecified https://gitlab.gnome.org/GNOME/libxml2 linux aarch64 $ $ ; H 8 H ? Y MA큤큤 eS6eS6eS6eS6^ bo eS6eS6eS6bObobobo bo575e305e9d45d48c8e5c91b0389048750336669f93fb6507cdffa6a985187b86 9ea874377e706e2b3e87d4acfc6e47864c7e46ef5eaec7244be14502ca8199d0 4fd77a8e5ec280daa20b751a7ff3676acc323a830109115ecb5b54911e446405 7e905152cafdb6f2d31d735ca874ec6cb20b8cf307268f12d9573669666a3677 a5e89415342706ac6f6060034de1e3746d3e3599c205a01331432e7f5c604716 c53a3af65a5247a3f90b6406268bc3efa2353fd80495c8e7d8b77a7c67916275 cbfe2e3a35499f7504d7ed2e92c4650f737a7749f9a63f5a39e5606aab02b8ae 228f217ac5f5628664dce870794bb6b474ea694bcde66bb6de8c979c4eed59dc c5016e56b110c3c2208c95af25071148014323c28658112821201ed9c96267e0 d9f4894ee85cf5a6ab86430a7e3435addeda55236d87227d9a3838a4d51e1c81 0045adc0a59c2cdfc8443b39cde3c3752d25515f5f16bb003726d88c2325950b 919b1082c49831544aa71e16363df41061d3dcf3fec74e0b4225a73dce329ee6 885bf4f1dd92ec88cb5ce6537e407f84dde67d45c175a8b8d17dd04de8505849 root root root root root root root root root root root root root root root root root root root root root root root root root root root root libxml2-python-2.9.14-150400.5.25.1.src.rpm libxml2-python libxml2mod.cpython-36m-aarch64-linux-gnu.so()(64bit) python3-libxml2 python3-libxml2(aarch-64) python3-libxml2-python @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.28)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libpython3.6m.so.1.0()(64bit) libxml2-2 libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.5.4)(64bit) libxml2.so.2(LIBXML2_2.5.6)(64bit) libxml2.so.2(LIBXML2_2.5.7)(64bit) libxml2.so.2(LIBXML2_2.5.8)(64bit) libxml2.so.2(LIBXML2_2.5.9)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libxml2.so.2(LIBXML2_2.6.1)(64bit) libxml2.so.2(LIBXML2_2.6.10)(64bit) libxml2.so.2(LIBXML2_2.6.11)(64bit) libxml2.so.2(LIBXML2_2.6.12)(64bit) libxml2.so.2(LIBXML2_2.6.14)(64bit) libxml2.so.2(LIBXML2_2.6.15)(64bit) libxml2.so.2(LIBXML2_2.6.16)(64bit) libxml2.so.2(LIBXML2_2.6.17)(64bit) libxml2.so.2(LIBXML2_2.6.18)(64bit) libxml2.so.2(LIBXML2_2.6.2)(64bit) libxml2.so.2(LIBXML2_2.6.20)(64bit) libxml2.so.2(LIBXML2_2.6.21)(64bit) libxml2.so.2(LIBXML2_2.6.23)(64bit) libxml2.so.2(LIBXML2_2.6.25)(64bit) libxml2.so.2(LIBXML2_2.6.27)(64bit) libxml2.so.2(LIBXML2_2.6.28)(64bit) libxml2.so.2(LIBXML2_2.6.3)(64bit) libxml2.so.2(LIBXML2_2.6.5)(64bit) libxml2.so.2(LIBXML2_2.6.6)(64bit) libxml2.so.2(LIBXML2_2.6.8)(64bit) libxml2.so.2(LIBXML2_2.7.0)(64bit) libxml2.so.2(LIBXML2_2.7.3)(64bit) libxml2.so.2(LIBXML2_2.8.0)(64bit) libxml2.so.2(LIBXML2_2.9.0)(64bit) libxml2.so.2(LIBXML2_2.9.1)(64bit) libxml2.so.2(LIBXML2_2.9.11)(64bit) python(abi) python3-extras rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.9.14 3.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 e?ddBzdBzd?c_cMCbob4t@b'E@ap`!@`!@`` @`N@`N@`N@`4@_H@_G@__V ^V@^oj@^oj@^l@] @]߶]Γ@]v>]D%]B@]A] @\s\LKZZZ@Z@Y@Y*@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTAdavid.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com daniel.garcia@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com dimstar@opensuse.org luc14n0@opensuse.org mcepl@suse.com pmonreal@suse.com rpm@fthiessen.de pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com wicked@iki.fi pmonreal@suse.com pmonreal@suse.com code@bnavigator.de pmonreal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com tchvatal@suse.com tchvatal@suse.com stefan.bruens@rwth-aachen.de pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com mgorse@suse.com kukuk@suse.de tchvatal@suse.com aavindraa@gmail.com aavindraa@gmail.com jmatejek@suse.com jmatejek@suse.com jengelh@inai.de tchvatal@suse.com tchvatal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com kstreitova@suse.com psimons@suse.com kstreitova@suse.com sflees@suse.de rpm@fthiessen.de vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com - Security update:
* [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
in tree.c
- Added file libxml2-CVE-2023-45322.patch - Security update:
* [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
buffer overflow
- Added file libxml2-CVE-2023-39615.patch - Security update:
* [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isn't deterministic
- Added patch libxml2-CVE-2023-29469.patch
* [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
xmlSchemaFixupComplexType
- Added patch libxml2-CVE-2023-28484-1.patch
- Added patch libxml2-CVE-2023-28484-2.patch - Remove unneeded dependency (bsc#1209918). - Build also for modern python version (jsc#PED-68) - Add W3C conformance tests to the testsuite (bsc#1204585):
* Added file xmlts20080827.tar.gz - Security fixes:
* [CVE-2022-40303, bsc#1204366] Fix integer overflows with
XML_PARSE_HUGE
+ Added patch libxml2-CVE-2022-40303.patch
* [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
entity reference cycles
+ Added patch libxml2-CVE-2022-40304.patch - Update to 2.9.14:
* Security:
+ [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
+ Fix potential double-free in xmlXPtrStringRangeFunction
+ Fix memory leak in xmlFindCharEncodingHandler
+ Normalize XPath strings in-place
+ Prevent integer-overflow in htmlSkipBlankChars() and
xmlSkipBlankChars()
+ Fix leak of xmlElementContent
* Bug fixes:
+ Fix parsing of subtracted regex character classes
+ Fix recursion check in xinclude.c
+ Reset last error in xmlCleanupGlobals
+ Fix certain combinations of regex range quantifiers
+ Fix range quantifier on subregex
* Improvements:
+ Fix recovery from invalid HTML start tags
* Build system, portability:
+ Define LFS macros before including system headers
+ Initialize XPath floating-point globals
+ configure: check for icu DEFS
+ configure.ac: produce tar.xz only (GNOME policy)
+ CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
+ Fix build with older Python versions
+ Fix --without-valid build - Build python bindings in a 2nd run, using multibuild: otherwise,
libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
to bootstrap. - Update to version 2.9.13:
* Security fixes:
+ [CVE-2022-23308] Use-after-free of ID and IDREF attributes
(boo#1196490);
+ Several memory leaks and another issues.
* Many regressions fixes.
* Numerous bug fixes, including, among many others:
+ xmllint's --maxmem option should work as expected now;
+ xmllint now returns an error if arguments are missing.
* Numerous tests and code and fuzzing fixes and improvements.
* Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
https://download.gnome.org/sources/libxml2/2.9/\
libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
statement from spec file.
- Drop merged upstream patches:
libxml2-fix-lxml-corrupted-subtree-structures.patch;
libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling. - Rewrite package to the single-spec %python_subpackage_only style and
eliminate unnecessary multibuild. - Fix python-lxml regression with libxml2 2.9.12:
* Work around lxml API abuse:
gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
* libxml2-fix-lxml-corrupted-subtree-structures.patch
* libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch - Update to version 2.9.12
* Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
* Fix null deref in legacy SAX1 parser
* Fix handling of unexpected EOF in xmlParseContent
* Fix user-after-free
* Validate UTF8 in xmlEncodeEntities
* Fix memory leak in xmlParseElementMixedContentDecl
* Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
* Fix SEGV in xmlSAXParseFileWithData
* Don't process siblings of root in xmlXIncludeProcess
* Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
* libxml2-CVE-2021-3541.patch
* libxml2-CVE-2021-3537.patch
* libxml2-CVE-2021-3518.patch
* libxml2-CVE-2021-3517.patch
* libxml2-CVE-2021-3516.patch
* libxml2-CVE-2020-7595.patch
* libxml2-CVE-2019-20388.patch
* libxml2-CVE-2020-24977.patch
* libxml2-CVE-2019-19956.patch
* libxml2-python39.patch
* libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch - Security fix: [bsc#1186015, CVE-2021-3541]
* Exponential entity expansion attack bypasses all existing
protection mechanisms.
- Add libxml2-CVE-2021-3541.patch - Security fix: [bsc#1185698, CVE-2021-3537]
* NULL pointer dereference in valid.c:xmlValidBuildAContentModel
* Add libxml2-CVE-2021-3537.patch - Security fix: [bsc#1185408, CVE-2021-3518]
* Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
* Add libxml2-CVE-2021-3518.patch - Security fix: [bsc#1185410, CVE-2021-3517]
* Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3517.patch - Security fix: [bsc#1185409, CVE-2021-3516]
* Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3516.patch - Fails to build against Python 3.9:
* Add upstream commit that fixes the issue
https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch - Security fix: [bsc#1161521, CVE-2019-20388]
* Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch - Avoid quadratic checking of identity-constraints: [bsc#1178823]
* key/unique/keyref schema attributes currently use qudratic loops
to check their various constraints (that keys are unique and that
keyrefs refer to existing keys).
* This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch - Make python subpackage ready for multiple python3 flavors
gh#openSUSE/python-rpm-macros#66 - Security fix: [bsc#1176179, CVE-2020-24977]
* xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch - Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Revert upstream commit 5a02583c7e683896d84878bd90641d8d9b0d0549
* Add patch libxml2-CVE-2019-19956.patch - Security fix: [bsc#1161517, CVE-2020-7595]
* xmlStringLenDecodeEntities in parser.c has an infinite loop in
a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch - Do not pull in the non-python deps on the python build - Revert the previous change and use multibuild to determine
supported flavors.
We need to be able to enable/disable pythons in prjconf and
multibuild directly clashes with that. - Build python2 and python3 bindings in separate flavors. As
python3-libxml2 is a dependency of e.g. itstools and thus many
other packages these packages no longer have a build dependency
on python2. Breaks a build loop for python2. - Since libxml2-2.9.10 perl-XML-LibXSLT fails to build: [bsc#1157450]
* Revert upstream commit to make xmlFreeNodeList non-recursive
https://github.com/GNOME/libxml2/commit/0762c9b69ba01628f72eada1c64ff3d361fb5716
- Add patch libxml2-xmlFreeNodeList-recursive.patch - Version update to 2.9.10:
* Portability:
+ Fix exponent digits when running tests under old MSVC
+ Work around buggy ceil() function on AIX
+ Don't call printf with NULL string in runtest.c
+ Switched from unsigned long to ptrdiff_t in parser.c
+ timsort.h: support older GCCs
+ Make configure.ac work with older pkg-config
* Bug Fixes:
+ Fix for conditional sections at end of document
+ Make sure that Python tests exit with error code
+ Audit memory error handling in xpath.c
+ Fix error code in xmlTextWriterStartDocument
+ Fix integer overflow when counting written bytes
+ Fix uninitialized memory access in HTML parser
+ Fix memory leak in xmlSchemaValAtomicType
+ Disallow conditional sections in internal subset
+ Fix use-after-free in xmlTextReaderFreeNodeList
+ Fix Regextests
+ Fix empty branch in regex
+ Fix integer overflow in entity recursion check
+ Don't read external entities or XIncludes from stdin
+ Fix Schema determinism check of ##other namespaces
+ Fix potential null deref in xmlSchemaIDCFillNodeTables
+ Fix potential memory leak in xmlBufBackToBuffer
+ Fix error message when processing XIncludes with fallbacks
+ Fix memory leak in xmlRegEpxFromParse
+ 14:00 is a valid timezone for xs:dateTime
+ Fix memory leak in xmlParseBalancedChunkMemoryRecover
+ Fix potential null deref in xmlRelaxNGParsePatterns
+ Misleading error message with xs:{min|max}Inclusive
+ Fix memory leak in xmlXIncludeLoadTxt
+ Partial fix for comparison of xs:durations
+ Fix null deref in xmlreader buffer
+ Fix unability to RelaxNG-validate grammar with choice-based name class
+ Fix unability to validate ambiguously constructed interleave for RelaxNG
+ Fix possible null dereference in xmlXPathIdFunction
+ fix memory leak in xmlAllocOutputBuffer
+ Fix unsigned int overflow
+ dict.h: gcc 2.95 doesn't allow multiple storage classes
+ Fix another code path in xmlParseQName
+ Make sure that xmlParseQName returns NULL in error case
+ Fix build without reader but with pattern
+ Fix memory leak in xmlAllocOutputBufferInternal error path
+ Fix unsigned integer overflow
+ Fix return value of xmlOutputBufferWrite
+ Fix parser termination from "Double hyphen within comment" error
+ Fix call stack overflow in xmlFreePattern
+ Fix null deref in previous commit
+ Fix memory leaks in xmlXPathParseNameComplex error paths
+ Check for integer overflow in xmlXPtrEvalChildSeq
+ Fix xmllint dump of XPath namespace nodes
+ Fix float casts in xmlXPathSubstringFunction
+ Fix null deref in xmlregexp error path
+ Fix null pointer dereference in xmlTextReaderReadOuterXml
+ Fix memory leaks in xmlParseStartTag2 error paths
+ Fix memory leak in xmlSAX2StartElement
+ Fix commit "Memory leak in xmlFreeID (xmlreader.c)"
+ Fix NULL pointer deref in xmlTextReaderValidateEntity
+ Memory leak in xmlFreeTextReader
+ Memory leak in xmlFreeID (xmlreader.c)
* Improvements:
+ Propagate memory errors in valuePush
+ Propagate memory errors in xmlXPathCompExprAdd
+ Make xmlFreeDocElementContent non-recursive
+ Avoid ignored attribute warnings under GCC
+ Make xmlDumpElementContent non-recursive
+ Make apibuild.py ignore ATTRIBUTE_NO_SANITIZE
+ Mark xmlExp* symbols as removed
+ Make xmlParseConditionalSections non-recursive
+ Adjust expected error in Python tests
+ Make xmlTextReaderFreeNodeList non-recursive
+ Make xmlFreeNodeList non-recursive
+ Make xmlParseContent and xmlParseElement non-recursive
+ Remove executable bit from non-executable files
+ Fix expected output of test/schemas/any4
+ Optimize build instructions in README
+ xml2-config.in: Output CFLAGS and LIBS on the same line
+ xml2-config: Add a --dynamic switch to print only shared libraries
+ Annotate functions with __attribute__((no_sanitize))
+ Fix warnings when compiling without reader or push parser
+ Remove unused member `doc` in xmlSaveCtxt
+ Limit recursion depth in xmlXPathCompOpEvalPredicate
+ Remove -Wno-array-bounds
+ Remove unreachable code in xmlXPathCountFunction
+ Improve XPath predicate and filter evaluation
+ Limit recursion depth in xmlXPathOptimizeExpression
+ Disable hash randomization when fuzzing
+ Optional recursion limit when parsing XPath expressions
+ Optional recursion limit when evaluating XPath expressions
+ Use break statements in xmlXPathCompOpEval
+ Optional XPath operation limit
+ Fix compilation with --with-minimum
+ Check XPath stack after calling functions
+ Remove debug printf in xmlreader.c
+ Always define LIBXML_THREAD_ENABLED when enabled
+ Fix unused function warning in testapi.c
+ Remove unneeded function pointer casts
+ Fix -Wcast-function-type warnings (GCC 8)
+ Fix -Wformat-truncation warnings (GCC 8)
* Cleanups:
+ Rebuild docs
+ Disable xmlExp regex code
+ Remove redundant code in xmlRelaxNGValidateState
+ Remove redundant code in xmlXPathCompRelationalExpr
- Rebase patch fix-perl.diff - Do not depend on setuptools to keep the depgraph small and
avoid build cycles - Use python[23]-libmxl2 as python names not python-libxml2-python
which is kinda confusing - Do not ship libtool archive anymore - Enable tests also in the python subpackages - Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH
to avoid nodeset limit when processing large XML files [bsc#1135123]
* Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch - Merge python-libxml2-python spec and changes files into the
libxml2 ones using _multibuild [bsc#1126499, bsc#1123919] - Version update to 2.9.9:
* Security:
+ CVE-2018-9251 CVE-2018-14567 Fix infinite loop in LZMA
decompression (boo#1088279 boo#1105166).
+ CVE-2018-14404 Fix nullptr deref with XPath logic ops
(boo#1102046).
* Bug fixes:
+ Fix building relative URIs
+ Problem with data in interleave in RelaxNG validation
+ Fix memory leak in xmlSwitchInputEncodingInt error path
+ Set doc on element obtained from freeElems
+ Fix HTML serialization with UTF-8 encoding
+ Use actual doc in xmlTextReaderRead*Xml
+ Unlink node before freeing it in xmlSAX2StartElement
+ Check return value of nodePush in xmlSAX2StartElement
+ Free input buffer in xmlHaltParser
+ Reset HTML parser input pointers on encoding failure
+ Fix xmlSchemaValidCtxtPtr reuse memory leak
+ Fix xmlTextReaderNext with preparsed document
+ HTML noscript should not close p
+ Don't change context node in xmlXPathRoot
* Improvements:
+ Remove redefined starts and defines inside include elements
+ Allow choice within choice in nameClass in RELAX NG
+ Look inside divs for starts and defines inside include
+ Add newlines to 'xmllint --xpath' output
+ Don't include SAX.h from globals.h
+ Support xmlTextReaderNextSibling w/o preparsed doc
+ Improve restoring of context size and position
+ Simplify and harden nodeset filtering
+ Avoid unnecessary backups of the context node
+ Fix inconsistency in xmlXPathIsInf
- Add libxml2-python3-string-null-check.patch: fix NULL pointer
dereference when parsing invalid data (bsc#1065270
glgo#libxml2!15).). - Use %license instead of %doc [bsc#1082318] - Version update to 2.9.8:
* Various -Werror fixes and compilation updates as travis is now
used by upstream
* Few additional tests added for ICU operations
- Drop patch python3.6-verify_fd.patch merged upstream - Version update to 2.9.7 release:
* Bug Fixes:
+ xmlcatalog: restore ability to query system catalog easily
+ Fix comparison of nodesets to strings
* Improvements:
+ Add Makefile rules to rebuild HTML man pages
+ Remove generated file python/setup.py from version control
+ Fix mixed decls and code in timsort.h
+ Rework handling of return values in thread tests
+ Fix unused variable warnings in testrecurse
+ Fix -Wimplicit-fallthrough warnings
+ Upgrade timsort.h to latest revision
+ Fix a couple of warnings in dict.c and threads.c
+ Fix unused variable warnings in nanohttp.c
+ Don't include winsock2.h in xmllint.c
+ Use __linux__ macro in generated code
* Portability:
+ Add declaration for DllMain
+ Fix preprocessor conditional in threads.h
+ Fix macro redefinition warning
+ many Windows specific improvements
* Documentation:
+ xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
* Fix XPath stack frame logic
* Report undefined XPath variable error message
* Fix regression with librsvg
* Handle more invalid entity values in recovery mode
* Fix structured validation errors
* Fix memory leak in LZMA decompressor
* Set memory limit for LZMA decompression
* Handle illegal entity values in recovery mode
* Fix debug dump of streaming XPath expressions
* Fix memory leak in nanoftp
* Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
* upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8 - clean with spec-cleaner - libxml2-python3-unicode-errors.patch: work around an issue with
libxml2 supplied error strings being undecodable UTF-8 (bsc#1065270) - convert to singlespec, build a python 3 version
- change build instructions to use setup.py (and %python_build macros)
instead of makefile-based approach
- add python3.6-verify_fd.patch that fixes libxml2 on python 3.6
- rename to python-libxml2-python to conform to package naming policy
(PyPI name is "libxml2-python") - Update package summaries and RPM groups. Trim descriptions for
size on secondary subpackages. Replace install call by a
commonly-used macro. - Add patch to fix TW integration:
* libxml2-bug787941.patch - Version update to 2.9.5 release:
* Merged all the previous cve fixes that were patched in
* Few small tweaks
- Remove merged patches:
* libxml2-CVE-2016-4658.patch
* libxml2-CVE-2017-0663.patch
* libxml2-CVE-2017-5969.patch
* libxml2-CVE-2017-9047.patch
* libxml2-CVE-2017-9048.patch
* libxml2-CVE-2017-9049.patch
* libxml2-2.9.4-fix_attribute_decoding.patch - Security fix:
* libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
* Fix Heap buffer overflow in xmlAddID - Security fix:
* libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
* Fix NULL pointer deref in xmlDumpElementContent - Security fixes:
* libxml2-CVE-2017-9049.patch [bsc#1039066]
* heap-based buffer overflow (xmlDictComputeFastKey func)
* libxml2-CVE-2017-9048.patch [bsc#1039063]
* stack overflow vulnerability (xmlSnprintfElementContent func)
* libxml2-CVE-2017-9047.patch [bsc#1039064]
* stack overflow vulnerability (xmlSnprintfElementContent func) - Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
XPointer ranges. Namespace nodes must be copied to avoid
use-after-free errors. But they don't necessarily have a physical
representation in a document, so simply disallow them in XPointer
ranges [bsc#1005544] [CVE-2016-4658] - add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
decoding during XML schema validation [bnc#983288] - Update libxml2 to version libxml2-2.9.4. The new version is
resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch. - add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
push parser that fails with bogus UTF-8 encoding error when
multi-byte character in large CDATA section is split across
buffer [bnc#962796] - Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
while parsing certain XML files in recovery mode (CVE-2016-3627,
bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
to improve protection against Billion Laughs Attack (bnc#975947). - Update to new upstream release 2.9.3 (bsc#954429):
* Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
* And other bugfixes
- Removed upstream fixed patches:
* libxml2-dont_initialize_catalog.patch
* 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
* 0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a missing entities after CVE-2014-3660 fix
(https://bugzilla.gnome.org/show_bug.cgi?id=738805)
* added patches:
0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a regression in libxml2 2.9.2
* https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch - update to 2.9.2
* drop libxml2-CVE-2014-3660.patch (upstream)
* add keyring to verify tarball
Security:
Fix for CVE-2014-3660 billion laugh variant
CVE-2014-0191 Do not fetch external parameter entities
Improvements:
win32/libxml2.def.src after rebuild in doc
elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
Provide cmake module
Fix a couple of issues raised by make dist
Fix and add const qualifiers
Preparing for upcoming release of 2.9.2
Fix zlib and lzma libraries check via command line
wrong error column in structured error when parsing end tag
doc/news.html: small update to avoid line join while generating NEWS.
Add methods for python3 iterator
Support element node traversal in document fragments
xmlNodeSetName: Allow setting the name to a substring of the currently set name
Added macros for argument casts
adding init calls to xml and html Read parsing entry points
Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
Implement choice for name classes on attributes
Two small namespace tweaks
xmllint --memory should fail on empty files
Cast encoding name to char pointer to match arg type - fix for CVE-2014-3660 (bnc#901546)
* denial of service via recursive entity expansion
(related to billion laughs)
* added libxml2-CVE-2014-3660.patch libxml2-python python3-libxml2-python h01-armsrv2 1699952356
2.9.14-150400.5.25.1 2.9.14-150400.5.25.1 2.9.14-150400.5.25.1 2.9.14-150400.5.25.1 2.9.13 2.9.13 drv_libxml2.cpython-36.opt-1.pyc drv_libxml2.cpython-36.pyc libxml2.cpython-36.opt-1.pyc libxml2.cpython-36.pyc drv_libxml2.py libxml2.py libxml2_python-2.9.14-py3.6.egg-info libxml2mod.cpython-36m-aarch64-linux-gnu.so python3-libxml2 TODO apibuild.py index.py libxml2class.txt python.html /usr/lib64/python3.6/site-packages/__pycache__/ /usr/lib64/python3.6/site-packages/ /usr/share/doc/packages/ /usr/share/doc/packages/python3-libxml2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31448/SUSE_SLE-15-SP4_Update/b7c84f6800b875019405d6b2dfa92d27-libxml2.SUSE_SLE-15-SP4_Update:python drpm xz 5 aarch64-suse-linux python 3.6 byte-compiled Python script, ISO-8859 text executable Python script, ASCII text executable ASCII text ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee2ed3c613ecd8c13b38763f0e53e3b69efff93f, stripped directory XML 1.0 document, UTF-8 Unicode text, with very long lines . R -R -R -R -R -R -R -P R R R R R R +R 'R "R R R !R %R R R R R *R R R (R &R R ,R R R R R
R )R R $R R R R R R
R #R R R R R R |@e AM; utf-8 f25952edc3b03a7a013615e0b49b854b7b6fd1ad966e6f6888fa66725028dcf2 ? 7zXZ
! t/E] "k%na
Ó\Ǩ//TI0;
XfFLb̚9n]p5ѵzKJDFŇ,kbkUbJ̺VW3*}[ |Oe|{^ĈVtL0#1=jI > [?_^N$-H t-y,jzh1 (R>J)84j&p>9%@< 4f1 ,m
rA![$UJh6O4$CZk_? L '~8Wb
,obx36h[
0TÜcI 3I0+*QiU|mm,]jdvQ [B#$Difذ8cyGDBm5ܢׇ<$֜zՄ+'KT0R~$<)y] #mc64Mz
ajx" '{
4ЮsV POKEEق~ב]r
lX${MQ5.iS JOEmf;"r?W[xy3ٝ0/\x5G""
cؓ㒽"BLTz|-}i؎]1Ofx=xֵH
E]@pٗWƁ+ybݖP⬛ m,*r|: ]gL @Gz}_.#eOQt̻c\d`I eODepV ıy /=q,ώU O re)"#f H1nreCF#G]̗&`2KxMk-4\ ZC6٭W3["
ѕ:ƨ/Y=fbVOMˌol
Amssw0-Oq9sG̅mR_[s]!*vU(Ǹff#}|8NqHʰ ?~Zf9¯
W/Շj#_E$({܋Jx;ϿGԣ8ӂh^H-.kca
e8ѩ$ ! ݄]CwkW 0 1$@ w
7[TB5|1W>)뢄:y%Fvo?Ƹ>[R[g_ B2ILUsV8 K'e7 A+f LkX>$ qj݄ Sc٩)n!?Ҏnwk:2 苢JQ&trbm4UO^P7褧 9 Vbhs 3voym7(۵G&y$ZO 7:_x3P !^caUZ zMBmF7P?zzsIoy=~sqaTV633 J0?/`62^zs FHe2yp Zw\)![ jn{%#ov>.kƄ&f>h\0>*As CMk} հ̠;~6ityv)yc-1=jP>l(>ڞVjRv9w.|Jޗn-XZO"[f8@ACLGmKRd1! ۖXGTF-ڷpTOm 4yV`f4#^ZШWEJڛ! (@C+??Ҹ[g&.:%z."nD?Z촄]3͔xO֮TLOi/Nϧ_%^s1[?fd0iaVubMUδxփ =O)؇tz?Nv `rZp
/]ύsjfߟ_zn20]D(aG mqHϕ7-荸 @\5FZko>rYN*5ݚMIF a
Q:Q=$IZ r8v]U;+^!JH@=+Jf
S 噴
dsX^г &WsէY$.;E^q^ķ[nUnU X# ~oX'3WͺgOn mt
<'\2 HZ{KZWwwx[b&
Ȉ^by1JuM5 ;Զl> !(]U6al` VǐM,9P3,ǫp{'Uc&&',N,)k" 8ɵEgJ (,, c׆j Pp>݄6I r4{2 ?C%cq^}m}wce0ԜO-IKWɮQ 42&"H{IP/M.vp|ԥ DAspyt ;b7ƲHW sh͠BG`2Euod]FL@}h ]$jJ/7; 8c0ho*DpJX5-Ù 9y"@B/)艼_cn'׀ZC&0`)O+k5ªzC0 iVxHTK]jTKS }$ aN.e-G9uD 9߯&IG=Jbaj @P' ;6]꞊SJ
0lsB@;ކ6\/:>q}4F 9[َ2Fn2m k%ؖկTmUc%9pdf n9`AK=o_>h<]|*tnqԶV.2#3}taghb}(18 = (=描I#7s-49t I+ % (Q(>NO+Ch *6V/~Ҁ 36~jx쁓 owp D`ʬM w>-?>B֑Tihn
YG\x @aڻMeGTɻGM4fه樮
3q=R
^ ɖqM³VF`s
O(f2C54a-
]} [nnhQ]hnu^1 7"۽o
*25l?l 0as{+D\˫U(r"Ow;ΒjA7En{%*Man/ x,n(Kl0zd3E6Q,C WOy%uMȢ1Mº^s]vGB:ߟmaWe&Q B_)82EOnŅΣ[ Ҧx]Γ+\!ܯ*;JZl +O[(%gC5bGsܹIGSl=i8y;HaVv.̕ 8ddٽG^ö IPu8
ns3"LVJM!Z;,-_xFD( %MCBX/6 _2%5::`xmk۩KbJ]l1: -ѠeJ4tz;A~atܡҢxh&N##fܾ@<ŽTez!.7,ux{ ooiȷki{k0[: (ܷx.}@6 @5RB3qC&/g9P@Z8rԌiJlT7-!{tM;_BՑ/]!uH%t7] 69ѶV {nٔ? Dj8 GkRj.ɊbY>;B8D.e}8UtgvҀ*wA:P{8N@ ֲEsJJRz(bXbSS E>:`X1 7 SϾS?d&k?A ';_Iu0ҎO<*Sk?%SB |__o)m~kۃGb]) i8p*aKա~3DC9K~'>E* KoCz˞(=O| ODDMs1g|AadO ƤVB^=BH aXو9d7s&qI?VIHmÌrb=>SVGXqTzʭKP\GxlMT
>z Շp. 4C{CVP#7/x(-8jP.9V WN*N Ks-Ohw!NyP #TXC.fhrIlkAm(4Gm0)0BāiN XY84ELeZеw
_zԛs ܝHI'Ng0!]R Ze4XV8
Yz"&Ī -=*ӛ ƞOt.$mik *3="|=p 6OmGX?zIBzdOd}%?) hw5 O*J_dM8AA_`o 6^zi\oM3s,SHTݝ
Wb` ]`L!1AT]N9_{=ܥDdO~8Gߍ rDjMnSFW(B&YjTVMǁ DTQ^ TF:^t^&kx-uD( N c7 ~s.[j):Df${b MuG;s
-S0mTsNFHH:fp" ?]<hKn
0}B2/2̣w7ږ5yVӥ95?_,*5ĥ҅Tg \I݊!2|dp~ DӜ#B8QZ8KF[cY٬k J
Z gČqҞ utjˠ25$@`$:)AZOc]im.S(V0z(7#TBDJϩV+o?0ˍGd6f hF {v ֔ѕy]JgîK̘SEl6/{UrҔC~
w"4p#{8o '(,-Ս?%_[B&R¾8^8<@Ja4X x;<'Ju #)-~/Ti,qq{/`Dyˁ8؊*=6 ˽oȫ՜W`:iDnb
.rn+@ˏ{+Kp3m7Z#+Hƈ!̆V9zjJySq"
};{b˔fb v % #De2ɋinݙRk/rMkpM} 0b1+Z4|{IQV4+r9LHؚ'q1*ڍg W@}
O{Ң WKCRT 0E-ީ.-_zkC0]Rll
>\'I 'Ȕd}&0 kLeQ =\>%~Om m'Ȝ|b--E[{#iw0|;ɵ٨b< 8,8ad(ѓUP|ݝy#dBjU3 i j }R bg tYxO*chdDCRK&lneXKm(;L7l%N42, Cs/By &N *nU@<)H>;]'%}qsOB4ɬϥWc5YlzՁT>" 4e݁_L $; mв wz2j=:'MyI&y )eI߸=fm29N@Ko aBr dq6OQKVAjxa
;)Tm6 ڲ.װ@0iP:Q:JD*UR7xTbRӖ05Q[ Vk& ʴVN j$o-5lub K
:ڧt2ݏ0R7ϖo-4v[l50B0gA !X⪚)F$8T1[h˞]O&a_>m۹_I6wP=# P.W!pψrJ,=|}aP-]ybRc w88\3",U{[k*{evLӠ :?}bngZCZ촰-[SNݝ} qip5 v|5[sɅC->x#8@vSM]]t@~߹s&
ڌ?l,h(% ӵ{ -V1hՅKη7 #$hed dFXP v#%@FO /qs"BBlz8:^gYQD3Ҷ[w=ydhd5E
hZm}˼;'~)PfsA^*uzu9 } ^paH&nx:TfI-ï.:jprR Z~&ޒ
%a$3"P{pwei~:SY^$
48ؔ2|e#
Nj_,W p m7`"T1upS
.̾ c0Hņ~$g`XcBIZIsQ%PyTː~M rti3(3qc1ƫ讖qy D{ ёo]"@<-DZ
{$Q{ܜb09W_1_yyzl9 Ѳ,D9 bܚJUvaG[RkX)VӿL{s R 6ͱboNUɓO e 4DCK+ofeTeji#4pT?H)̢:@i음@=I&f0bʑ&ae @e e;hy&FO8 D+U+vv"46f8PVL#?¯ǎ#Y&4n?m %ۙϊض4IVJ6/j?u+k ǃkK/v ۂNRD1I4 k-]t" +fXjT ,Y܍.4 A u녅l*2n!f5lXm"y,.v" n K}f$DA )RU-ry+ )`k$"&皙Eն
ɲ߳l!Rz@\DJQW!y=V][(TOrC銑eAx% =Fep
+4s[db-`cbdXz#2
#4&Ȋ%QHx/d9jJ@/qdAٙrD3>[Pxưqo7kTm@H)h5m JĸTZ ~
uR ՊE(3)oWև:vMH\ʀ&b7+SaD⊥Ԛ Lȥ<$w J놫Kkr=qgu57FUi5
_$ܷ) .ʬK5J1dcwm`e[`Pվ@@ iclpaTֵ%R",6AaT̐AA0d8;"3-x(d
o`sycܚ ų&dFQ]`| Hq|UKA[ZĤ]ө:n F~ן,L -:#osF^04BkaNdct֡n3 Ń _hjr=tɳk D]JG_!a
kMS:g}T@q_Gw6*\mwE;(
,돐pw3P* ]6-rW|aD}7yᛆ 鷼. | 6D*_xǁ Qrál NNHXؒstyi&Twr}k}d{i}͡gN r- HRl: V YxQ
n+0c*3/DAC3Ǽˮ/8"=*ģ.bxl>37S˹ܤgz\, 8HIew5JOLpro7 3emL`Fd9Җ|qbVΪ>TdbK:fP2VYm}= lw|cB\r,h
qto Fv$^ާɡ2ZC*F(G#P HN5V}&XmV[SJY1!KiƱᑲ^}8U l+HJFla\Alhʻ Z ~yJ?HsN
& G ÖR
'|a^b _ L +F %4 m жʯ~pIhؔSY?: ^@Ar
2n/[k(6Tlv̀ S
K11瑘I]y dsU f?e}D<=hQ })&=}0d@J,` )QmsяozCd墹02q+gK@fP4Oeq(ϫ7|gE8ı> ^|V6LqA 5A{/՞eg|ΌDM>;0t{?!^K~{W&-H ILY
#
2} Ju]40`v^^6CEDrꣷq+ ?δ$ݚAC7 L6P 0ξ=h@6w|84y$ί4kȭ}LWL@\k&P]y5 q1͒]#a
.n8mM#ws¤ 18{5!;/ &6'oP4~
Bx
Ru&4 !umw=&9AE~Zi ,]эpE+hlBP+DWc2 d5VwԐ ~ doF0 ݛ[fo @ڣT0ɓ dWrݪHLA_(o շ^!q}fZ sCJCGtR~xn?%os)bf͔Ӷ8kUW_I: IW `x ,Ҟma 94TXݞ \y%jUh
Q&a {`?G%`?eB %IH EScۂ-ż#xC ˇA0(=KJ ֈ)o`R"*. GEMTo砝*x"߈"Tf,FZ4Rn_gz,G܃ "rDJKؒ1LE[Vyh)7pdAe 4[T2> ij/1
qrz0}aygW O\Q=:X&=pa6}V?*Yⅇ~ HEZ@;@lW FQ?w eE/d;/m{Fks-v|>WJ[a?B$ Ѕ-A6Y%?[1sN0cz0$`;!iqX"w-
5Zƴ:
ox`A#=0ctO#,6dPH38 y룰uvIߌ79AZs`@`yAn;Mr@"ЧJ0C#adu`X Vsj$b*]+ *!%Y^gP$ld(,Tj;+pYJH>$LTu^]i-\s V
1\t cj΄+jDD nVA! DnTR=[+&)6E$&gO1. ,{+!;lotKJf6(nսsS-|[o9d8dCAXD7!`tQg}D%
Ƽt$G
ZY ت{
VEm`)X;{邁_jOi+ﻟsXpdT9;`;]pDԜ}q' E)FlAY]69䦳I[S˻'}7nݪ ;9d%)[>ſԷ,dwv\ki|ȓc?_fi:C*|7bQ Sڢgfvn^UY9t? Ph }g-\S0vo xp4E_^XBsάؼ@ch89 ʅ R r ~odUM.xT[ &v b鱝Qjt,,M Q++sBnJӕw%;"Wn/_xC(luC}Į1\߮
;NX#o jE W!]N(We5u'i~X19ڰG^%I
hᨍ858ly r4wɇ#8 0FeȌcɱT:G);N6 ~7Mz sܹz[<3{<\9= "_d8w{iV YpA]3L!ɻj%H]h!|}X=\
hZN |:)0+#cQYzٙ@ -}T
eH?(I 5ӄd*$Kfqn^H;![~HkpAS ib ^ .7GEWI
WPkjvOT 3Л$ ј P,` p
ƻt)`%flB
1:\~hM\E &+]Ё 0}:ax//= Й^N
j؏ЅO"*@0δ I* 9#Bp\*¡0חYkz .L%E(7oQpc<ݩvѩ~W@fx&FoS2b·{`Ou"`F+wk3 O/ NU&lܘ(@T=4_ԛ%o6(cY}*n, _f|Dx;m0ťVۇ$f
OX^إF)s7' bC)d^s^M ]!P5/}ZZ$P0 ?'`XO2:~jܴ^JPʌg듷,g=ۻ1.Z=D [xt% <e.;Dn"sq?qXg
2k{;? tmUU( (/ŮC=;R" .k \~-BKw*jJVrkzivq :z@~ kco<^besޗ.ȯj I7Լ :^E1gΏA+&oYSUi)!0;4f܀> .zĞFbc{#oZҚ>,0 Ĭpٟ5ߍjո̊3.qUezx\a%H{lG>#
a.c.BmOvy0
J 4 = ;/BtӚKR܇WѪ7Ap9-K
G5&f BVGn#(2!C H3y."P E̗f?ݧMCL5Ʋ}Z!]
b9}4 x& ~ "+G{mFQctt ^Ot\&y
dكȨ}|4YFV_ [`TiSeӵMLhvXĝ870Ƽ(,(@> ?dmXp149tk֊aVU:uۯ&OLc
< {qlp$kuZ,UY."ϭ)rC_ :lz?M#HUKL DA(tT S(sBŲ<4-͕
^:Yv_!
6!E7ڄ^C (oZHA '6:%7bU} 9쓶-680 N\]eN[!_ @$cCjzK FOC c%5VsK+_o/ڒOliwEv\ȊSNxhgn6&z9J B"f3_BS*lcۿ= 4u܍{a,5aIU W-L=JV˪MI W3^nN>bF|^ `il䑬ה0Di$V/ 'B`RN :G#Eu l,A/l Ҝ P0O [,Ӷ-y(1?78R:9jw/ sODi7Y.:iz-a}4Rtӄ~WXΎj-s pV"uj !( TNrq" ~q20Lۆq*+vyxVX"ljE11Y)$ T\n"A }9H &ę~~
Qū[yqOFi5}yK\ "nnNˊy_ciZ]N 4ŵ&,]x,B=x dd
!uN~#NDSl"|}LY I[R>= K5I_ 8v ._Mş3 zqJhڌ uJmbRkҾd4F{·hF"L >q87H'Dޖo2Ӹ˯eͱӕQ ePdڂq*"BxZVIt>UAdtL!ff8١~ڜæE}4J/f"+w zś1?? `5M;1ҾD ( Elj!e`B̺WV^ft4uāh""'B6uĈ:\-(9L"ǘ擉r6fw9rP[rϾGE^Ķ6n W νoPZQk bV5+.\ ֓HWSKk
k: F{ tw~"W+Z CF#@^I6zT%* ^jtbCKZ봭55B/zx2QF!1OArEڄTzE#m.C-@d .TSʔg%3=]ZT|-nyLNVh]Xiʻ?fA2+'ŃvRfh4` -y@xldžl,9 ~W2] rqk,dg[
Ox-$[B+ݷӡml2 sv3a[ӣ̿W8D8~2*'!+GlI"pD^.wgx S0#`v)C`
rK$˝Cu
9Oehk1G)Nz
倀3ɞ{đN.*$U|4Φ#f'ݔAL*Pcb#Y*5E idu{093 &zaDU5A
,Vx a ,e>l#!7$ 4*PrrWm *Wj qI]X`2rr~6 QN V`yUv^f" \[Gb)n~6YWqO +#G7&H.yafGt|6Mީ4 Yy&ثd9eF[f鲾sis^A: 1^|V&~Xk7
4xK= ?T=_DrX4GHZ^VU74dyAO3/jGZB網鬻 ( n`kp-'Pd)J{3tgߣruprx51VkޤD,w@j}zSl#ۄpdO](I+/ǢVZάLYE׳70bO @ l4qbLrݒvG ]ͬ_ZGQt _:;snjmi!/6puqQQLDJ(!GʾEG/!\ Xw N _%͏ R_`b&vjHcbNv$0 ~yɨ21Hhb
/zTR70U5 Cf0߆I={ANysd]' )jrdCUD!7ȇ8v NꆦIdB(e[xt l
.XYфR\sĜr5
(,zj
ߞS=α+t<38 PA*0f$ϾYuv,@juIm$:"*ko9 oI9G(/kֿDsz#Ab V"T 5 S` pz7WO&9G>xW
o_`H6
$A*9CCݽEmY4
?~O: mB(Љ_($6yAG-1%HOޢ{`S M$AJ A ٷx04gA Ş⼄kD1JCP|hާu &D^lU֡kYXYm wS:Jh `_BɒOEdsK^O/8 :Ct/RkK _8㫲
K ^WjBh fKRXP,:Wd
UbgU_1L:ߚkt&@٨s@[\}Qc;jdZW '+' 3uGuڨ槑*eiZ*lL(;#S'Ggg[3kK3 o=YdVX.N挺
O/kK!{TCZE.AfX$ |>O*SdO7M}Ϳ
T\L!Ea2$YLs{> egXP:EÀV?^X og|hG
. e.̆nRyf/uP'VhRblq$s㏈ ޘvsoD
P5Ά"3/@4eF\`z еg?ACRț~9<kte TM4(݊Fj(.cHm%
K5
#%6c%*e Z0٫M3\\ߔc]?7]K@ "s$Ft[GL{ 1!<?SuoJ|&>Px~)l[)S Go0
[wOpYG% W/~5sk
XCGg^ z>ɈƄs=}G-֡x]ija@X0sC6iRVKV=- ^G͗z_骨5 1 %{5]=BZ.U%?kVݙ]L᷊vJa u a۳!>WQ !% ;5;>;xv+Ĺ`0 si]_ 97;d'
Rb-5:tN&j;S}Rت&((>,ı
\9pQ%aJi|D{W1RF&#^q}S g[ }
ؐdT e y3p/D1HFQ\K4`oyiilu({a½JQw?,/W{sX=%ρ%p Tv}ykKW3Bk{Ԫ 菥v3DO4HA;JkZ
˞!YsQ߭kvY$ϛ挦]LB(ћ*?Ye^WL?'jexTR#SoR HzdR V3/PX4{l$
^V@~Q-\9p=|i>DScV{C/D[G &/ArOѾwm_xq 6u=e1s
2Rژ\Pj@GK yajXim`QY<˜Bpˇ 澡RΤ'N _SG0kATp4i"oe]2
IT܇[3@ %e*8,\IL;>f0 ]&o+ҀNS̮ F[ӏیmS^? lXH7۽JZ=]OX
+aߏfOnjCc|8=B! n~UrP-$/џF%mrh0=2-f=V?-Iķ{l T1(Kz_#Gx},ص=s^D L3 GF,sp O<C%|N\wQŲ t\%Ƴ?nj hruXVkcHUs]z+ھBWt0=<.U7;OX% D%w6GZ&j}(w[C b#Dnt2/[]F
k >ceR/.ːsyiGu S(lDyGˎA2\7u\hejjHĸ l=_H6)l%4E{u)Ǟ t9I4r aR' $7֝ $2*OyE_U${ ][hI'. >n+s^KMMu=hq]BJN&SuU j?NݔhV
P5M^}fB0]뽷iZ!<6F{s!
G=ǬE Mՠ&44"Ƀ-/{T6Bu 3Jb $뤨){u@WB
P_!UYT8qT w73"M$F?`< [ Z Pb"iRu,;W7L8܊9\j: / ['ְ)8nk+"ċ"N\SФ=nT_Px?MfwPPr'x~)xZHМ/i. 17T]%y=H{rpM|wYMSQs i {@ow܍moX<,I#dxaF.U Hakv;Jr7Q_Rt5>q#~
d
4oȉ}^57*Nv-C0PոQ_DxCyVWPyco+7zoZ\_7IBBLNAs%(q`4ݨ./l b {=A۵-LAO7ԋ.$F2VT(@ ?莳8AzкN[#9-UJPf~d<\ٝXiUɎޮ
]e N?A [2ѬThY`9|hvJ#:ϟ@) "'b `
h
,8mXA
?ڂH@8o\Ek;X)\Bn
[cVijruZ֡x^9@|l:Gqxt( @&!9|lꫯ?s7u\T:%̚}%_,?t ;J :kc:~}o6i}Vh +d13{G 4il'Nm^ j> =K
u*, ka-8~)!PΟٹ~
H mI3)&:{1ع! '*$ x#} 4*.,˥MVf'F(X;3҉ Ϻ`p9f,@ب= +ĵ1SQgv`0-\q 7p0g8D@\KﶰE{ ̿(N83VٌjUG(rJk&z#xW
O+B7 BM:r,U§rd+ȡJ÷#%q gW.juH{.J/D݅QJ䊼֬e J/@Cuy7'DǶqJu&@=`?],Jy\4j ۴Q"no d.]p>̧0Wh;U3ɏ@d@~DuRlflQGTDa2C[ < @ HHGյ_
3lD#=yõlYv%\_0UE;Yz)T)y~bYpk7?~K
O M716:ׂOfBPDY$1vb^`\C;'v^F::\?Em9;ԞemUB-D,)+ TDBԱz'UN0p{q
$j a!Y+|"~t3.,w"Z Qc*nUY)JY]Hp\dn ZVn=Aq. cUmSOgDӮ;Ҿ,-uwQ?`Ĺ 1 /@; a"b-rAu~*H,:=gGxtGY+M1
MSUJ#SGܹWBz 1ݢ2Lġ23a;__=Z'rd&K19j;3ewp%(v /W __ uSsR?-h
) Z!#)q]dg9UALP鏳p!O+:.6݉ `E Ae1 Y ae+JI96g(̗-go
|F ;nw.Gf tN1ʚesk74jROa> %c T̀!
Cnah_ A &p7tMWuA0s^{{8%HJ[V "{Ч* Nn+~ n@} \3S}ڂB*J9eqzCH Ü.O%/լ3oۖ~(3R%&&lȠcL,4 bUsF'f7xg\
c% ƧwLBbwx-T"O8"yZ6Zfб1279omf)uh7J?\ρLƬ#
>Z`q,KgXʍƨE_7J
-BW%2(<Տ}ohx^FRo,ѐd
vڸ\p$EO1YkO./;3Cn:Buz Kx$eĦ|6-vu
;J"kjU7Fȳ `N ̿5-u)N$ kN/ 0_On&ZE_ k] ˂0̅@!Y[7 Vcx9*g{ˏ}V7.꽏
=XɂPZ|.hlt;z\c G\ \㊑a/I_w{ hP 5|&Ck0 w<7kWl8h@=
\|5CئTѓ!sw+q oc5J# ;uȩwh!'lݒ 1ʑAy_b+\2vƩ@KhP/3YOYPGMK\ ŘI+\JJ$kĀ,xnc
7*ޮk g[y)ɪX%(C鸍̊bzVv! ^c0D~e>> [F1sxyfCd \P%]EHzu\}A]O/!8#yD ݭJl\Nr-,4kvOVYr"UQ=v(\ +JkĈ
s8z'ѓQA
Vci`sgy1U B <$@8F/5]aJ[z |b94|Mk,?a|V{mvFǜAmWitE$U04Zd7B614L'p">{ڻq7)σ+p xjVm5
ry I=\K3Ttn ~D.0JDJ/w4~|%s<+{:`Q/VPԮ 0sP"f DO S'4ιRT և| gĥVhEfUayP`zPᙧTNeփ>KA7 {x'k_?@XWb$*[CW&BY6]4My
e6Y#
Ċ(A8lBLrC ;CeI/4#4+Ƴrѷ7> xU &sAk ZpRqix͎i(L_IbS VDWi3KE2 n QQ(x}<{ l-]︑6߂ʔG ![&WTEzy8=%q-ČީEa/ W}HXvs\dM[īPmI3.o(Hp2Zgա5 SL^-ՇRv,pq}`jX O JwvAŧuf6` *Y幃V#O~ҏMt}|"רHr#D\)~ߤopSfxgK'Q_~yk-4!B)Z-套d?ξX9ٰ"K9ƳoAVҢ 촟~[yܫ$)
̎Xy .» )utkG7(
.5 vYǃ-p/tgCTB8ӆImC*O1f:j'lD >:X-8G H)FS긪 tu5AcA{MC &$@ǑI®}MŞ g+1 i?vx?L8gQqS!+).ZCk>:Hcl5Md(dӘZ o3_< OdMKAsPz0K}n"':3%#K ݛ
k:
YZ