python39-tools-3.9.20-150300.4.58.1 < > , / gIn\p9|* LQģH-
_XlUN}u(K{.Nwҩ^a-Z
1@R6
Q{+|[G _hfX#+j Uo 18ߒe [2 *(ym'7 %" ;
)}lB&X.?>`ʯy` {[_0RcBE{"
B$DRtx i-ǖ\`ӋD]N4. ~R.پX0$ȋ > > $P ? $@ d & O ! 7 C [ a l H
6
$ 7
0 ( 8 9 : Ř F G ° H ʌ I h X ` Y p \ Ԩ ] ܄ ^ 8 b ? c d p e u f x l z u v l w x y " U z # # # # $< C python39-tools 3.9.20 150300.4.58.1 Python Utility and Demonstration Scripts A number of scripts that are useful for building, testing or extending Python,
and a set of demonstration programs. gIn\ibs-power9-18 =SUSE Linux Enterprise 15 SUSE LLC Python-2.0 https://www.suse.com/ Unspecified https://www.python.org/ linux ppc64le _ : : 3 'R 3
m
m + + + I
I
_ _ ` ~ ` 2 2
J q q n - m - j ;
z k q
Q b _ p 5 q / g E $
p ;u j J
k
2
e 0 9 0 # xP G 6 0 # T ^ M d 1m
F S ) B
T B # Es Yl .t " ) o
f $ j _ c - G
0 =
x P l X x v n l $ x ] o
T
7 k q $G N O (
[ d ^ M p w q . IS
}
% v5 0P D D (@ !n
& , c
# 7 = i 3 "d ' ) = 5y C H / T ` W ( Z ! N ` N q ' 7 7 e ) # ` ` h p Q G ) l z o B P -g J .
( ~ z > | `
0# (D P 7 ' &e $4 , $ 4 =a , HBA큤A큤큤큤큤큤큤A큤AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤 gImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImb5aa5a79fc6e44e172f5d7eb246e9b9f252b996484881cab417fd53ff1578698 5f465277c96c107a5af544b0a962561f97cb0bfd75906d9bf9741450ed02b0e1 33283ccf54f879f20f80bf3ef1e1396fd6bf8b0b1ee6262eb5297c74e0885ec7 6d75ec0cd7a6bdbc983140db885cd49d4a2cd6046bc8e8fb349d44a86dbc23bd 1da33c30b384a284c55816ba270b1b6d783755cd12986c9eb10a735fc2e52c41 6d75ec0cd7a6bdbc983140db885cd49d4a2cd6046bc8e8fb349d44a86dbc23bd ec00ed9d5573948b4b139d23d190884f7bbdcfcbc264a56f5bd5d93f4bb1f331 6a8bbb8667b2f12b4304b2e4ab09325a6a6debf8006ef6501cea6ef5f3499100 ec00ed9d5573948b4b139d23d190884f7bbdcfcbc264a56f5bd5d93f4bb1f331 5a4206b09a38d6e93de7d53ff01bd7771d952f7afa40110e2c1c262b100cd2a5 ff565ecf33eff5b1bdcf2ee3a1f97c2e77a806cdb05b2b28f6de4335e908239c 5a4206b09a38d6e93de7d53ff01bd7771d952f7afa40110e2c1c262b100cd2a5 b201f79fa279cd1234f0a5791a455be958f3b9f45a2ba71f049ee9d98ebd5277 b201f79fa279cd1234f0a5791a455be958f3b9f45a2ba71f049ee9d98ebd5277 b201f79fa279cd1234f0a5791a455be958f3b9f45a2ba71f049ee9d98ebd5277 1ac25d01c4f3b969992a4f1af7276bf32ee1bbfd239a8326e804c1d30deb1455 7fe3e9f1693d9d3197b042d8e8a72774c7653a24e6633046f4e7371fe3843edd 1ac25d01c4f3b969992a4f1af7276bf32ee1bbfd239a8326e804c1d30deb1455 c20b4bcc852db48e232427bb1dfcc5893581f857b3e3e3f03c2889e2dcd4d1aa c20b4bcc852db48e232427bb1dfcc5893581f857b3e3e3f03c2889e2dcd4d1aa c20b4bcc852db48e232427bb1dfcc5893581f857b3e3e3f03c2889e2dcd4d1aa 898d1f87d8baee603bba6e81ed77bb391a9a178eae546db51aa19c97a586eba2 b5ed7c2fa513c7f37b0605386f33efc6205f7b03bdd1439bb97da59576a74c0d 898d1f87d8baee603bba6e81ed77bb391a9a178eae546db51aa19c97a586eba2 98e8eebb14247de6cd20fd83bf39520d74dd61a3ff4fac4350e21030f6b29151 c4294552ec1fc81a6d2ef227177cd9ff081bc7fe4cdabcd345207b61ef5183e4 98e8eebb14247de6cd20fd83bf39520d74dd61a3ff4fac4350e21030f6b29151 78e0fa7cfd71e500eb0fba0cd4e5bbd2ac1284164f7c2916164a69ea21e85f85 f0faf2be50927ff391585820f9fe6aa45c294190a632b39528cbc01c96eef916 78e0fa7cfd71e500eb0fba0cd4e5bbd2ac1284164f7c2916164a69ea21e85f85 9d60d9b79232f782366930274b1fdcebcfe43392a38e61bd812aa6fc27c304bc 4a3b7867b5742bf57933a2f3a52e83674f2c50ab83f85386beff628c96b794c6 9d60d9b79232f782366930274b1fdcebcfe43392a38e61bd812aa6fc27c304bc ba232aa20945c149d9b1969467debff7cff69af8d8b5b3eff9c081a28463da57 2a94dfc5cc721f926d99c66eccb4d14bcb3c09cb5e0aa4821dd18a456fedd4bb ba232aa20945c149d9b1969467debff7cff69af8d8b5b3eff9c081a28463da57 eb733ae568d9d437a675c51de92a02967db4c3aa4c804f073f065315c7e22847 b1631d43a5834148bddb1e4aded43597f05f7ef11ca4ec7d9f7d627c72859c58 eb733ae568d9d437a675c51de92a02967db4c3aa4c804f073f065315c7e22847 3abfc9eb08fb2087430210dab9be2739066e21ab191acc6d09ac11c7b46bffb7 85ec0f77a73566c315cd9cceae07b1dac6d5083ba683762515c6c151a041a251 3abfc9eb08fb2087430210dab9be2739066e21ab191acc6d09ac11c7b46bffb7 b66567c1d1c13002627c1e9c7b810a0117fb08b81d948f65b3ecad6b1b48dd01 4a1e8b787a71dbd9f571fe0c7c9644a064768f54edd3d44c6ba89fc95539ac76 b66567c1d1c13002627c1e9c7b810a0117fb08b81d948f65b3ecad6b1b48dd01 d570b3e7ae72594dc5abc0ce9351131cb3bad39cbb3f0a6abcf8d5b813134329 2b7a5abf7b59a05828f91590293ccf6f3860d93639943c59a1b09fa1670e5478 d570b3e7ae72594dc5abc0ce9351131cb3bad39cbb3f0a6abcf8d5b813134329 7213e511fa397dddac4274746b34328771f16b879f461785f5c931b2d2662c1d 6d32621a5546f9d3f2a9946f0d117182c609c4f60946d19e2a643537699fc68b 7213e511fa397dddac4274746b34328771f16b879f461785f5c931b2d2662c1d 1eb03e99ec909115687243ac7e5575ed5491d4679ff8f712e85b9b45569c99b1 bbda248b2ed0e1ed292279e5867aaeb7d495c707f007e1f188368c2ad654c719 1eb03e99ec909115687243ac7e5575ed5491d4679ff8f712e85b9b45569c99b1 61de0cecf647bfba365fa324577221ba7290efd77ed701073b6879fb68c2540b 6b624aa124b60958edd37736353648b1ccec8faa7d463e78f6c989b615437d13 61de0cecf647bfba365fa324577221ba7290efd77ed701073b6879fb68c2540b 8a2509dbf3e83eff5f1a6167c634857c6a33e572e8310683606d0b7e5e118d32 660cce2d01a2c18ac8f149ce2124de02b5ae37946f44665c6c4de8641ad61e63 8a2509dbf3e83eff5f1a6167c634857c6a33e572e8310683606d0b7e5e118d32 36e460fd6e05b26c5680913343d5316d3cc4b738c13e6ab7894f3b2ff8c6eb2c 02a5a6795e659be00a8f3fa8625686a1e8ab16fe9b85ad7ed23f93bbfe640db4 36e460fd6e05b26c5680913343d5316d3cc4b738c13e6ab7894f3b2ff8c6eb2c 3b59f1ed9b7e7cb5caa5c62e2c741f5e38b08343c1537b4272c8d80adb2cc08c d7e2a9ab06272b08769543cf79120411cbfa2d65f5f79d29e2e757ed55aabeed 3b59f1ed9b7e7cb5caa5c62e2c741f5e38b08343c1537b4272c8d80adb2cc08c 2ab201d62ed85c964ea36cc7281b16b1fa06dea6d2348672c64ea3a9805a0630 bc8a3a9b77e90446fb7060ff68ee008ffd6b23b366052207ec225cc163b4dae5 3350798444aa52ebe02303d1ab17142d72bf300a98265ec72d1d4fb9b56f84ab bbb065830edb37fd53b1c004118853176fd8da32ee532cb0d363960880920374 18326a5883f974d5bbe3bc69b4f229dd1bdbc3fe010044ef40ee11d34fd23eec 6253f2957cc68f78e0cbcd67a968cc7c00b7405a1bf7ec6c85881b2ccbb6e221 4ba86a5142785f7573fb873886fa4f08c2644d5199a6f0c2a6c026bf41dd5c45 51dc079d3e9663edfbebc107eed462b0f85e8e19c72de01e4820141ee2714621 939d1ee904a7b00579bb44719b0286e7524bf560c7ffff6d482064b41b09fdb3 6a165c31636bcad07f97a1922a077c4d63ade1cda076b67dc0eed2716198e5fc 01284b125d6bda512d81636ddd959a55c3b0fe54f058db7de0dafc1e30fc48a3 6c80492309c65f94c0dc1158b270fbc9bb80eb477d640343cd67834ed8fec334 6f12e77668beb96202e0076a1aa6f47203bc65f3eb32d30e2f3eb86e3f51227f 61dfd5bb932cc5a0c3bb9caa8ed74889a19a8d3ee3cb6707ea8f63595ec350b0 4ecaac02e68f11ec1a406a6ce8a4b17e4f8af74f76157e0776360d0dd041f276 7b1519b704a1f914cc01de67f63be017b92f926084a2bf3baf98099a3f3c653e 2ad4c890622db3fd795897380991a8e0144f516b3d07ce402bb93de35c52ad8c de66698dc4f083792df6aaed1e5d94e879852d72f1f24ac09c8fb4cd144c6c88 3300593114fb9286af9360cc9d871a40e5dcbea4aedc24b832607d1dd71c7b96 f5f8cf645f4caec1a89e91fd013c14e4d884f0666f4c7690d10a16b6f21ba573 922d10f01757c397f708e8fa214a373be17ff2726cf0c72a1e99d827b702f6dd 78cbcd96cfa8b627c8523be8a84da0540b2a22fd01d820a43bca2ebb791a7db1 f0f82984cbe513ba9f4b4f96fc65c296ff019e959aacea6c8126e6d8b3582280 6f928f616df4873b99b7d4443820aa5e6283c1054f4b51a7834e21ee9f40e660 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 a64b6edba3a243c8907653b423d5c9e821957f7867c25db98ead523744374c2f 3c973bb134f42399c9c253853f49498412398d0bc4a0cf161c220a1b5eb21119 e13b382f1904892566c63adbc1418a4016688d835656ac4e56e48384cfea0148 7ea36d586ac31eeb1a055fe42e693b3ec28516c516d5bd29646292e5d3c3ee16 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 4a07e64a683c48ac26296164b48347747353afc007c7941ecc6bb349d4677395 5d4246c20d66cae8592a6647933fd1905264cc4508225d4e6a34d77529528a25 d9c155f91ff68d188673101b6da38fb2d02a223ced68c7f231944c62a9929f62 7cd3a71d7a252926221231dc9862f69a67eedda28c2b405413f037d7049f406c 167006193f881160c4ceb1513d72bf6a3c9d0467286d216dec3e1fae91bd12db e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 df1d06fc50de4ebbe1ca893b5cbf934f80414ec1f36b4cdeb14eccd72e72c587 e34af65df7b11d7e7f8b5594f7b048861d153d398632a39673f43588398b1d6d 5c34edaeb78723bfae814b99b8b8e4399f0de50e03a66ccde7fde22921ede8ea e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 664b9f911c4e2ea534a9ebb67e8d4378230d53861556468fbbd38ad8c61275b8 c6ca30cbfe71632749c4456f0a8255a3da7469dc579b110b62187a3e17538b50 e70b74a1a2957ad41040da1c3a6730d8a37b0ff2d17db505931e7dbbe5950519 3c4de620a08bf6d9f5d7b208744cf7de99c4af6fecb63b69a02823b2ff3c6440 282f101f81bad09ab6b154fea68d222bfd6a75d3e2d5a071e57138545e426bde c3e2fa0819cb65e391256ef31f8c210b6db189f5ff32d52697cf2ddd3145d589 1635d937456564e57d306058bf8ff5330c1b7ced7e137df2e186cab5d45184cc a34d35cb1c5d2d9e033fed9af55ce57f8565ecaeefb0091c776b8db685866983 1112052f5f630206ee5fdc2da2d0fcaa1cd0c07ceaa2c4de7a4f9fa83b76ecd7 7f5fb6ad6efa80834e688399bc069dff0448a0b293d099a3e09cd30890222b38 ba1e0df3a71dc26263739a8bf8410dfe8099188e4ff95b0f151e5b74e932692d 33563cdfef91229288f855458c08d8118094be7c15cb3eb386fc5aa903439d6b ddbf4d1f9300636522f72ad4a63efb5ed76e29c626bc39a5d00acd7569a65900 08ba0be07993ca6a1201c0655a4cdd3ff8dd4fb38143579f5174fd7ccf51e129 76decf7c87910f04d86ec08156a1b431fb79b0a7d7b027332ad4a5af3a7f4db5 686a97aca4892bafb9340a1b9b3a15cc4695857bfcc4375a60c164061cd982e9 39cd5aaeaa94efe57a207b3a9fc4f57311a4b100090bc77bdab944030bc745ae ba6a4e65b815f15fc2d0857c7381b0b0101917a9dea9b5626b0543ab5297a4d1 1f61c5879cd7fb74c27c922f1584a3b1da5cb0d8cee70b01d7ca33584be3873d ede85cfc1804a0bcb2d1c9d1e5241e0d2f9ee883134ca08d358286e16d8c3ec0 ff1538a82abdc54df3cc72febc007cc7f7b9689b881d6a9cc14fc390cdf145c8 f58cc39e0ce172fe5e28acf7fd9c5b0c68cb5a529505c4213d35b9daa965c933 d4bf77d3f1ed499c2d63378448685bd7a614bafbc7a0ce7b213a7601f1ab191b 70b7128bfd6df70e254235a4eec30d94dad6e39781b85945fba6155b8b35bdc2 0a25bc896da305d1f0c6917c388c65a7ecf948eb249d1ae78e145e9cc68028cf b4d3054e3f74d7742f2bd9dd9663d5e58be438dea919ec60d04e4d2ca8b03823 bef5749cb7bd621677fa6ead57938be4eecf3ca6b13f200d180750556e0786e2 5ada79fa1fdefd80fa0374619ca29d7237008c3d8cd99935414a54c7af817c04 768fb3e85706006697c438159fa47c1680809768c4c0a260e4914513ac1ca07f 4d7e085331032b5d8efb9b2cd37b27a5d0754830ae13df4d93c0d8ce3cfe40eb c4494e014d68a2ac2963dd150f6d3043980509e8891f74f7124ec5f8b6a3df85 30419d5c570336ec10d416c4e20b4bd04a29047af7068d7a1570b5d95938eacc b46d632e3c44fa45739b256ac218307404689044526d0de6fafc3db6655ff373 ad0377668444dd40783902d90a0bd908d279a00602e4df31a66cf40c67fd307f b794da217971be45a9c2aaf578874f3a7c54f38e58d3849709ce637ed5c22021 ccf276f4ad87ddf24a15acf4d14852688525114e802b53b23a761bec765f5df9 254cc4f13545f2e3595e51bcf03cc0ee67af2f6c2d9ac22e2c9852e5de2e40e4 89046394b65de956fa6fed642329d639a8326390e4536c7653f7cecf830a4182 0112e7fed259541bd16d7347f9b2ab9154261525f202d81611a89d188a078456 a5f388bfe4712aa5b2ad30ee0f14d50e448741eed9dba4e0243654bfcd1af15d b8b9bbdb9cc46744b84a4a3847be57ebf091618f8d1f9f6087b589b42213f736 fcf19381eb91a7fc0dddc2ed93d81f33c57f89a42777beca3a850046e2fac0ec 535cc9d48854133300dc7e86b8f2f39c28cbc07ec9627f2a85faf9db633d271a 48b6d2e830779039a088bf157e8a3b29b09971b27dd7e76464ef0e79b53c535b 14c75fb904c57c2197695141fb784fa0202c233163005a789791e5dc339d109c ef754fee3147486b97a182cf9149398489bcf837d88eaf5bddbf96d8d8c59127 2fffb904b1fb4fedea64ea924a76a289cabb3b46d8d7b24fc7f3027ad15b23a5 078c27557ade1c09feaaf294206aa3caf404ccf53f8fec63f92681dedd602028 0f04950103b0280adaaf06469dac81ee8bc8458606302a20a9ca864655e1166b 96218178e016d3b56c61629bf680c6d57a98b8d774e53dd470ed0c1860f9d6e0 06b810ec97d10f68f5cedc6b9a970dee9a3bdef4e14d48018acc1e3dec93bcf8 2adfce3f0c9063e6ef0a372263904d02a92d96a59e00067572e5d1696246d496 05f9b2945ac48d9447a33e829367d5463a511d72c930735e67356001a3e7b4b0 77067fbe5f86c741586c4e0a8f5945f2839f493b20596983b2706fa1741fe3dd de87c6cc8b8013ba08095a1c8893ce53572069146cf12bc2342bd911e99ee34a 312e4c9396dffd7e1389fa1ae35fb6be9b2f7d2d05ceba3b2af0d1197f62fa37 79434bd1368f47f08acf6db66638531d386bf15166d78d9bfea4da164c079067 cb95daf98edda8e08a242e1060691b6941f0911692bf468a3f9c5e4b58c09b8f 84c266aad79e7d4e6b4a0f7d6c687ecbe42a0dbcff0adcf4d9021153c44e5560 b7cb2190d8f04fa432c3b0af4288f41d8f20a178325887619ebf61d2961228e7 c58188f8b4fef222ec6faace50acaacaed2dcec13cb86f2cb593cab62d54d217 462ebd5aece64ed0d798ab1378f01666e7171deabee312aef233e46bf1799a6a 637c7e61ff8b259e6e4d994bccef59338c1d2e5ffed6263a5adbf167a88d13e4 a212c9ae9c01ffdf01532ecb3bc967560a24e461f753146754071bb57e731da4 510ca62e6e5915196a9b8ad9d38e9f38881d07ab3c0b44e7cf5d17ee571940a6 948a67caa4dfc8f2e8e2bfbd5708b268ac32b3a40a493b5b36f737d0af8e7778 626a313e891617520719be54802dd7903682fe15aa24a59682a440343d16fed2 7b4a552c1cf6f20d08850fa28fc3f348f6e06bbb5767b6e85828015ee2099309 67ea703f577ee710c116bd0f54756b7d1f216ab3c9b5191c0a9ab207a40e7c0e e26cd475f5eff12a7c6da058ed67ca089010a1c08f938589883b77025929b9f6 2cce8371410f6735950996ac2081e0aba5b84f01ca3c5f6caf0360e5b4167c8a c6f691a90e7e46b3f0f7e8b30deeeeb4172fa90b94cbffcb5db209a21a88bb22 cd10684f33fe1e5b7d61e64d33ba4b391e645782af54a48d6c62e59bfad44576 5cb2641871b42c05116f4d0259d733d14eaf85128c1dc002d3db05cd885c76e1 533bba52d0ab231d73a16278a426617418843539266aa5a6e3159acc37709cec e680cfa4a84e51c65f38394bb6e3680cbb7c62ca422d8e91ee9a1df5cc068702 0f75ac838137234bee48fe11c2040c94b8eeb5fcf52ca9b206e4a3e3f7ea67ac 89a8d617a7e6660031efbdd067c6c0e4b318cfaf5e94027e636f26bd42c72d8a 2f634332701fbab74fe53488a15ca3a30deac07c7fd5f0e10888d7d65d772050 8278fa203bf8b98412f1de93594c5c60cb702ecd4b8ab4e34296dd2b8fee1512 78111dc1362064f88696a0cfdc02350585b6155df807580c695cb8e64617c5d0 d0c4a6c54a688ed1c6018b00abb23c9de7f22de54e51881fd97d086a061373c5 c2e052ca5ec0ae3b3822806093bf997b11168bfbf195c76015c41cef83818bb9 323966fb68a376649465573562443cb915b1a871565d743a8b2fe3490422bc17 65cf32c00a59f1eaceb96e28a2705fdcfcde6c0a433f435b1ab5e7b451919062 43a9253a8226c5ff5c6fda20772d18f1bfd25275b5a21a3b4907260d8318b5b0 cad7f6518eb9ac3454c582cdd01083fc520684cb2d595d078e265a569f768565 991cde2d01f0488fb2caf424a93b0cd1b04bacc1945a8599aa3c56e0cba93760 3c64b772064588ee9b3acda840369ccbebb65c0269c60e9b3df21dcb51a47233 7537664c8dff922ee5d5d644b60a42e085afa30204dacc48848024ec050aa980 8fe3ddf6ef481e35d5f90206a972ba5015e07b3adeeef239da2d157ad6ea203f acebfae55702aa20f7976789cd6529cb6540d3b4da2bb401edbfffb520f4fe4c 559eff9e3850c4eef1963928799b7a0ad08f83a917e22f044871e618701b448e 8812f64c41da7fb44d57f9995ff1ad808d179cbda7eac64b66337722df1c1357 db7ba912d53ed93caca7df229ad75fefd00e75677018d784ab6c727e2ecfc6c0 6f09257f0c7a64bd8f6b5dd63f296cf96e9ad296635bffa7d7c6ef30f35d1a6d e0d5acf8ccc1315fdbdaf623c1e669a2a2fbbd04c71ad6c7af3ca74257d1a058 b0b771b8e71f7a790b2ab15475bf5aa5a660ba56e9848eb6501705294d836b08 3ccef35555458a1de12f762f5c49d6dcb81934909bb5e2c17b5a560c14f234d1 7bb3f96c2548e55358a804d3a85ebcaba5ebcdb08e5a323c0afa103a1249c990 d874a88ab07f5515dc02baa0f9643028fa0ce124dce5e6d85b33d76c129ce90b 0698086c0da8cd098d32cd17ba4f1e1ca6b7358464db2a87f0addabc9dbcc4f6 44e9610e5be9d2af1dc9b857fa8afc1221745b61c326ed790dfef0c2551cc13d 09826772a9d2330c76de92712616ea06b6bbc410d4f9140ba61cf718794963d3 e759d92c16940146bbef08ea8f2a3ea6f5a826cd43679843d69e12b1076d9df6 f11f7568d140a99db5945fe76bbdfb903a9d6d7436ff1740e96a185f64fcd9e6 140a8180c3dd9576d273d32ab30e85b41e9cef7563c594c4a3b8251769f1f91f 4973cef0c3348dc7a94e1da839de3e430d2add8bec175a239f076137109dfd1c 319743aa14a781f5253fc46cdcfa16a3d629cef494249a1df2e170ebe180068c b84daab7226eadb8a43218abd88ee88df076213d63cf884d93a0a9e1a9b8bbea 881612e1b014063dd67bfd3961579e195972fdc67039b4fe6db644d4a9942005 2150aa0a1af0f0e5c8ac3521cc4acecba65eaea5120a5a8c9b6dae28c41391b5 d53dc4e61c4797baa9f88ef11a09d5c7f598d310958036839115587f27c1348a d31405fb01e1d4bf4b5cc1a80d50220be4b17c99e1b30b067c48b963439e5279 2c456f4d9b0a76c14c0e518bb131f8d6f7e5da861ebce56ac20fb84599df75e7 e0cfc4b50b6f4f9bb1b66a2cc80ab2d17723ecaba89b309a5a198a8cff973441 ae228254c8d8e8cfd5d6ea8e3cba341c9c6d320fbba19026d2a74f6639f80d06 870032a8261f5f30b5500d7d3427d7c89060c307cf67d2fcdba18baf19031e90 657066af2bfea6102f52289218c493f09f04734e09bf3a06aab3469ba9b46d1c 83dc1740575ddd4cebdb2e7e749faae7149e9a7de856129c516b25c9a9be7eb5 96577bec0fb3acd553c048e3298c8c6da36c980ef9d12998bb08653e0973b656 562e820df0b5db1977dac06c88892e4df3417bce85a11f740edacdb44c028edc cb2b09b5f8f56ea362424d9f909c67eca165731c25da0c1a7158963f7292c608 9c71b456fe7858f3e8037aa1b6ec50014c537765837e3b9eb5a8406585d75b31 d4cd61ebcdffb37b85e9304f89e3ff61c168c96c6aefcd4255fa09fec5a82863 2cf606aeaa96b3bbf717c4cbfbfefdb92c0121ab85202cba6769e6e16e81cadf 4beadb75f4e9af42a6f1914534203fa27e17ad168c02daa94dc7a2b3efcd7533 f4e9aa7b621e86f5f3effaecd5c7f9eb0b3956e7560ea1a93b6c4be05c086bd5 2c8b271b2c2c81298d13dd3b841e30b102e9b11a90351a9cf30969cf84365507 a2f10d4c5085685ae9bc3985220e09b190e3b79f2a1c79b4b62b970aafd43bc3 d38862ff71f84a237f7c52cd44ca8cccdb8ca90903111a756d6dafe097e62ed7 54ba9bd9c4db6c90b545f76f7ca6c802dd954eb8e29eb6fae07fc821d49d37d5 4dc32977106fd6d39ec6d01368e5bba4243ae3524adad326e8b6d7764dec3fb6 9db7a894ecac78fe93e0a3f0b20647149f7ffe9261e2e5c960435fe4e462e898 2eb914e28ca61ed2d4fd047bddb4770d7197ccb6fa11ebc7fe48fdc36b5471d5 da4de1b45443a1d81734afc535795f191c9b6a03e677e1a59110563c192fa627 9da04438c215b29eb61dedbefbf44f18a1f573b04dda2a252ad3a7682c12f780 7e64778e4e1d4475800f44b76a34c4f1b6d818bbe4f9db786a51973dc43b4d46 9903ccb026be51bb8a3c5c05ad0d8c680b9361b2185b2faaf9f054172fa75132 4bcc6e93c797d1af4a64b9a7b51da4f3f6b28ed6fc75c9fb2f9e08e5250c5dbb 7a471dd0c2da7774a21faa3b25683e8fc532a0a3dd8aef03620d884ca2df8257 ec917ffd2bac42d3742891aaf45c665181473774333fcb78295064af11c00fb9 40eff7d5ce98a6cbc01490a680f5c208e75ba308bd7dddfb901c2462d38666cd 1721b6ec9bf0bc8823efbf5adb13d95a8cb57ae754174d7a8dea70094d798a4c ce168a62a56acdd86282aa6f38d0d47ba89e2539879a84d64e400eb68e52a5ff 94a8bd6159f9dacad56bdd22c0589cd8e5e07219e83bb13ac60dc97fe3684fea a5e241017ef176a55b30e751b02d608560220d38c98297e998385fbc62e8518e 0c75b0933b51069c5cee203a8a3ed2c3490a14f4cf46c3eee47551aea15d0f13 2b8873c8e6edc94c2d4b6aaf1ceccf101fe8767c20f3d2ac548edff91d23c10c 27a552e40a1c5f5816a514a4d3e36a2c6bc9062d00fabc56c8d2f89d333162e7 f240da4a378b50df919c87be475738b2431633a65752fed896e3745f99485435 7b016216965ad99424d4e7c76254e7111f6618724635cced3659c28abe08d7ec 377f81099e73f108e0bb53a439a935d288010021d35fe169935e71c92d1e8946 c5544a4c895f23b0e713fb07b64405ffb4213495079beb4d90085cf9d1fa6472 856c75b80114df605f15fcae554f2a8e330d9b7bc04929017531f1efee2b93d2 04e3f802364fa2b3361cc10315132422b2c8f58af81647982752c5e65c95ef0e 130889f0e0be480acc5a3e2bc7ecfd579b3d4b8ae92852605f59c3a4d8ccfea7 2c18519e8079be6d1b9ee72d445929d5b991aefd0e2005f8bc4aae70e87fc019 1cfe3f314ccbed7418b581ab17444058b3229c7a5962eeeb6558ad640bec02e1 ff53f1097f64330329b80658b594780a9da72aae76bb53c4b4a6a8e6d33e3fa3 d9767f01013b48c6a44f2b6570b4d6ceff084ee413d68489fb2b912d215bd7bc 3cee96ec4d8f1ef56787351e23ed92ba9f907d99a5b2a6a7c46ee324db6ae304 27071075696ac7aa289e8a56c03e6805f56a61015fb33bbaa1bbefe752fe1782 3371bd5f2ff214275383fc830028db31d3a0b0097b9303faba6e204776697a9b e00602af2c621579e7315d3731202fe86c6ccbe3d73f2112a0767a00e8e50881 24b955e69a5026af78a22ff7dcffecd7c99883ac315d793d7f6102525920e8a2 446b621077e9626746155e7a8c7c80a0e0787c092bac6be054cba259c9a59339 2e04af2ef03c7bdca201351dde0b257d7fc611d39258f9e715228e3d120a022f 36e83cf8634cc174973e7275799cc201050746889ecae7126330cd422566026d 85d478b6ad31de498190f12afd526c2329d94a789c22a3bf917f76872910f729 f142ae03e460f989d9c2ac76adeabf8e01b519f5b08817905fb4fb728010c1d8 30349887024aea4c3cdfa32a2222acf85a57bcec4ae7ad52c72f1765e646e29f 8ebff2c56d6c33111efa6fb8b71a2b44a34869f1bb2f2ff19877300c2d2391ac 9fbc9949070da466e945d48d4a02928bd4d8ae01855c9b296b10edb81d2a9fea a29fd1e339a960763c199d41ce90d5b2786af9bd2e7cc7f919d64f50d8ae1d4d 0fe2532921be71b64a6064b5bbb4591403aaffa97d28e820539325e3302c3267 fe127bde11258d9fea475be802d0f7e460eb0c4fc3645c3459557ebbae8fb0c3 1f40bef0a1ef6844716c25d7b6b46bbf90114d4e4448e3b553caf02f1ce00d8e 94bbe0cb9bb074c2067691eb0dcf9d89fc6fd419242c3e6c3e7bc5702b144bd5 d5962ef4522e872b47efe5f595ee9bca63051bd8f312028d9a7ef893c234feba a3fc70abed6cfeb32ea6197906337949602eb6c00c3db58d9179a4fd0f006390 412466fa81e5607798e1f3abc9a2df8289f31a42a51fdded1d441a969563a75b 1b4dfeb9d15c0e75ebac41f3fcd9d45bb3eda9cf87a9d80e08f0bd35a357ba0a 4016f1cc73100225aff84043965a55382c518a27f6d1ead8161c19336c5f48d0 a2cf4d55a8441e94df9c1165b5b19333db9065f3399ce09db5f357ed400ab8c1 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 8cc4541d89134f2c08d6affae0db81ce8e7ef9c5e421abd0fde4ca99aa79b5cd e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 79134842a333f651b1294a00ba8b469db5c088af1ee6fd7fd209245d3422187d 14bacb0c9d2fa69e3a1f830df6532750dadeaf0d66cc75bd369e9106bc32a993 cdbe3f164d098f5025fb9bfa57fc872a1a7e268a8978f04624e6bc7d856f29a8 517d59fe3175ade4b3b8e770197e0e4c22cf7cddf4ae9f2520dcc127d49a2f43 546cd5533aeba3c8c87e8bed31b7f040cf5091fd361cfc49b87c08b95a898cca 03452a8537283291a41aff7dda602804d06104e6b3f5a837a4d3b073490ebca1 aebfda138f135ce23d57a69b5b80dbfee6e372690441565fd0aba1b93fbbe5e3 b9c60c40976453bbe4fd86f94a83944d6d15f36a7d2f742fc6dd36dd518fd334 7bb37e4ccaf58eabac1ea456efc2e4a73a2512ec6df8c2d1fab8982250315a22 e11e0fc4c0c69cd2e5bc14c968f5691906e15b2efd3e0326d1f420c73152d2c1 ef2da296b01340e8aa378e9b8bec38e3b8660d0a4df7f380884cce1b68790839 befc596719e5726b7abe8215a878962250c459bcc0724a22948b4922f4cb0122 06312f8684975108956af54172098c31008a766706ef875e7b21a7a15436d6c5 f08ff13303c7c2c12184452a1e15a2e8753695b8e7d2a02848050a0a8b299564 c04a8fc0e869cf8892cd546a9b96b61470b0ba01b577d21387317fd458701118 5c7cf59318a37d01b3a65053d5b803bf8fc957304916e508991e6db78567adab 4f46af59d1cf78108bcf25e9695c5b3ce47253885b2d6a2065dc44ad2c181868 683da86966c8a6466955532a5c3c20e2828152eb63d3a003073c609fcd636b89 a587173751fc10a5f7394d4f0eb0928adb6282cfdc6728be52751b4f8461b151 02969cff683460fb052b78a0fc47042bf8e4d3ae3525fcf434f138200e1c9b5c 2fddc4fcbc593fb42fa50753fcd9c3de7a568db1aadef6609f3bfdc56094af90 af99fde5e2ca44e11163ce31d57fbd92aa39f3bff5c2abdc46473cbc7629eeee 757a159eb9684acc8fe33933ba695af675eac49a6e2198c4db9c122cb8cfb795 d30837dba2bd7b99564df2a00b418483b0138f6d2e6a0cf7397f25c8b3d60fec fb2069994fdb0a7321f99542f0c4cbb084d7445e9500896f36aa0d7e309971ab d6c3d57f73e7255b22db376b08efd54b7139e8912e119320b226a0d5a0c14e9b 5fd2afe4a4bf7c33ae72755992d894a67c6d00c1dc22e3cc0d54e93493348f75 736aaeac18566569096c746058ffefafc32a59e9e79ac878b96a6619be365dda d58e84e196fd0f859c58df779ba89b8a8dffc736fbe7466230a12ea1cc07c986 177ffcb6f3714202703d8c763b154148bd4407d384854753babd357a0471d0b8 e9ccd679b6afe6383dbd0bdfb65d82e82d1f9e5e036cb0b9d3b1995bf3af5824 e1ccfaea7c54706082fe95692ebf4c64d20d0deff81e5dcafceacd41a309fddc 4210e13b7c1d435fe3f0c29be9973f6bd663b6834def6153bc4334bb1d273f2e b1c01ed87adb8b5788f66f046cc54766536fbbcd2542f069f0c8da46183a3ec6 21829ed79ed2c0a19649be81cb7cf0fe42fab69a967902387d81f7385ab94fb1 dbc5c75ebe04610d11e5b46c2a494be92c21cef28d81ebaadd6ab3f9ad1e51c7 837cacbab8e88147f6fee4c55385d336d1e21af438e98f9531ac6aedc8dd0f42 ba3511af7bd98495f8a489e97aa276e675999ea180339f6a0c06d00caf6eebf7 ae01e5a661fe26bcb34023496d8e9a749668cfcc2606b16a86088891955ae6ed af6c056a95ae725f98534db22b9a4916d17f2356fdca84a4a038211a82fa8a73 50ca2b67ad509c248d9a0137ff7ca214476c2d0f63625e3491dd65d0f283e44e 836cdb388117cf81e78d9fa2a141cca1b14b0179733322e710067749a1b16fe9 f41008bc9423d44d4d8a8be25eb6835bcba82653f9a823d2afe7619039483e5c 4f8d8b62c1ffcd18bfef84491b9bc273e044a7016f7448229cf1be3094c6d48f ce1584fb838cbc4c91208c686acaa25cd11f0db45a0ba41da6c7a5bf6bfcb3f1 b53dcca77795b6cef65705f715422d5074940c73068aeee73f791429712b7b01 8b6fbf8816d2c92a2d9ccebb14fbf9d562ed7ea12699b31ab86f97261b7aff3f 40fc35ccf29d0e3efbeeba45f63fb3b51d39a16cfed2fa5e460d497b555f9304 e575fe1ed0424f31764b3fc7572df06756e40e5212f85c97bc07b60d1aee8935 20033343a6830afdb6824aea0963201af5b42b81ff9ac576826190f3e56437b6 841634e228c0de6c67269a2822e668af15271c45ef38cf294f67d5c2b2658394 081712c31d9114113486021abeac27e1083f60422f83e34a5b18715c81f66012 6b452cd913fe7bd8ab9eb6b00e2c3639161a0ec5337039d7effe50dee278a5da 0745cc9a34f3dd7dc6a3115d756df3997658c4f25c8af9412bf601ce01292cf8 600da1799a278b893d0b61d2a8ff5cd97647156a83f6085786b6d4c0243b3a5a 0f94d265a1040ecd0442457be60f4a147a540fd2fa92c3115cafaf70bab72596 67477183546c8e74d596838d45c90c3299ad07f8f6f9834ea9120da622e48244 7b8debd669837bf57fef02a88be4a78546b61d60ac1d640f4e208b374be37498 f0fbd4610aba76a4185e5fec4f560312e151d7397dab6fd4787dd18cc4244f18 7523bad9554715bebda71fc85bcefec98b9a3e12a328e061b5fc5a81df68ee06 78b564948565c66f2dcacca1748897afe258a4fb8c7e595df8973842dfafc0a7 03a8de1ef151640664a8cdace56603dfdcb117e39dd7e6aa9880718b941955df c05b2cf6f868f0bef26fbdae3cece12d82c6199f2d8bed6f1ffd6ffd6ce2bf66 2186a50ef0170a1a38ce426b691aac14fea0cb90baea4180f5a15140b8d39c99 2f6e9051caa3e8ab515b5f68bc13befba18e105d31736385781592a078c3df0f a4610629e38aebe8129b7458cd5e6c2e822a0ff1439355bb4ed7c47b49ebf0e7 49535bef24aff445a9f9568ae1e73c442952e6b4de2c30093faefd780fb256ec d36c3214000c64830919f188b7fec0f53f3d637dcd6b45cb8d4acf402f6fb212 dd853071e6c7dc86e0cea5b9ec4ca592a541fa07344afc6fb153132d7694158b 58c3837a051226ba0e17da482ac69ad2c845a3fb31b51330cf9d53a239055633 b4ef5d5d33649ab820bf41318a7e7ebea5e2d19d67706cfa3ba362e127256f49 4f520b54ff61d370238523d68d9445aa87e77e5d95ac47f42833ec89222fa475 30ac39599a73dee558b72e41ee8517bdf5c2cc280cc8840750c5e385cf797b7a 0e4e2d6ff126c024348d33c82260a6f454906008b4c2a08632aec113e20ca173 1f70d8016b88ad3ca1558c5fbdcf897b21f9d0486c94595a408a23d0015afe82 3258661cee4c5ee764fb5273db0971228fcfa303c831aaec7486e76ab68f6177 eb39e08525d0f7ed99d8daaed504067667bdd3a76f82a3c48bb4bc247689f198 29cbed9a595fc5170a8218e9dc2d1f23c9a8c2ee7f68bbf25cd20c112163fc23 e5dad814041f2a00fd6e78542af24e83e56714d43b61673182d0a063c2891d16 c0d8eaed3766612f998cc8ebb303c9d7210e6354f2602b410b66a67b5559e016 9eecf3dc79245b319328843a86e94826d985d3f84bc8b73a6d063b0af45a3092 3c8b2bf84ad5085bdea2dc594e9ae0eb93707f1e7ffb60830f8886704c514044 bbef10c42df4674658aa0eba04d4e9411886d21f862d7863ce44441d3b1e37ee ee4d7467e3e29ef41a5698f5bad88550a9cc722c67d7ce1b170fb7ade224d5ca ab8d98ed5494b35eac35ee2847cf2f8e74fa3bc3593594d4a32c0682d0c3eae6 351bd0f4e2982797f3dc597b768bce876be80a7ce8f173df3c73538c6774cf6c 8b7e9ac173b2d4820eee5bff92c92aa3f1a6c98be031fdaac6a52a06183cb702 8855726dd609c06fb00d814cac21091660f37df5805e2d13178105ea35120557 4ab0bfcbd7d2e92a9f87dc89d1a0e9408d3718c7e9b25fd00db32b2ec7d6409c 7222124a0d51dd6d3c0d915fa21cdf1ddcb254d2ee352801408de5a5919eb351 abd5049b357173f7391e211dd0f570aee889d7735703d64a336bcb8b5bb6fe6f 6c168e616996878aba8326b71982cce03fe714fded554ae8d8c13752c08b2d86 8a590ccc4a3b72c6212ea27293e3a99dafbe7225e9ccab4e7ce8db0b39870f8b e0e18976a41b73295e7ea48279c1197beb93cb81494adb2c15c6c32c8068ea02 e934940914987baaf8faf7b3f633b58cf1135d4c4f92eeec29dcd898c79a85e5 95876caaac7926958b3391ea5c4ef3200b6d88fa416509d741c338885c2efd63 0a336d2793e1881d6443fc9a2aa10c22936b45c0902f6d3d2b8738ca46e5db15 b49bfdf32bec1a7a42cd8015f42bceff32a3582dd95d76389e3d7d553bea398a ac33c0c43ec6494682924c95d034b2d9fdbdd4c3eea4ba6646554aaed94a38cb 40527c51e29fd8e3f45781b0fc3c26ba4888f8738c45d7690840a53dd06d2cfe c0619417bc16fc80128048e8751c5261f2afd61f7a87fdc350a63936fcaf8d20 a20eef35ef068753633693e1f31a6528060b0f9a0e41392b670ce6f2f2b7c498 b0d76f793fc2ea045eec220e5b39821426d9642fa22b6bf81789e562fc6d9611 f9092543110cf0ac73a21d9758508fa5154b22c80527393a05609d6627e2ea39 f03ae1cf496ad34a2cf82e33ff0a975878cccf769475015e95a7e0955d6e7063 9038aea781124cf1514761ba6194c54a73c452d0ccdebe47cdfdd6ae57732099 a3e9037c58661e9ce678da077aa09c172034ae7a9166b65d5c2b5cfd9ce95797 d1cf1f20ae4db1a371ba24f37189af9d74dab95ef2629ee54c92c4d2b9e5197c 24267e46bf2938d21a02dcf09a3611ef7559e519913a4bacfeba14f684afdb5b 88a541699db8de726acf32506b62f7b84d24979f14f9bd3106fe39963ea67d97 05dea783649f30f700ab32158e8b1f2d96a93f5d148a381e711bd62d2c9e265f 7fc34bd36e4923c8c31fb5accdc84499bfcd52608ef96ac4de474a1e5d142f14 fdd004ab24c3546a8347f04a1c5eea9adb1ddb25fa53216f1cdac3f30a819c25 eb80ce551aee88df2e6e95d64c9a1fa56ba2b59ced94b40f481cc3eb98ec1d34 e892c500e0d5bfa89dcb6626d64a154fd297f92bd319515b94eec5f7107b8b3e c6b86696411750e065a184dd8797ee1c2df567482c4cdd9107ed066b5a5feb9d ff0fd735a9a548cebce4380d9e1e7660f5f86a3d2ca3c240e4314a1231a27ea9 a302dd8ef11f7c8f30e7a9abd77c092c01f4ebd2e832490ac0aafafffa84faee b325d7257f3d04422327941dc55f40158f9679a4e5dde0b34216c8c37f5393e2 30034ace8427493f3169bb46d870d6f0224eea86e0e1a3e85bc5faed1d398553 0c45aed3b98967b340486904c6bf3bb167c10edf70a2092acef777105f37785c a8869c4404674cc99a01eb0ab330596585af14467ea27ab43378346303a7b2cd 5b637ece7c876b928a4bb52541806779dccb72a9dce15c17788f9d823867ccf4 badb32eb1ab22d820f38b9e226c42058540b680fbcb3dfef34ab4d566e9dcf4c 9ef295164242f02539b5d722d9fcd48f8cc6764a9f02aa0d50d1b22f1f6d0ef6 769a92c77cd65bffd4ca2919ac41e6dd3e4faadb65024dccd19af7f0677a3819 78658f92ba3acee3000b5327df257184b7002ba66ac72a1d86cee31f38a1173f 625d45ad1e83e253f0b5e5ca826e4d5a358832d2e94cf9f26d95367e47d4132f 35468977d3f7452c0c91d616349948b4dae3b78f663c90b2c773862ed36e4d4b f7ff302fd49cbfcfc2b3c1c9c891c6bf1d6fc1712bb2ebe5b00a8d64b709411d 48a5e33c264896539df42780eb87afbbdaa2883e412a6550f893c6958b89a687 6c4c70f3d172b009ae4d52bc38d0b3726d5b415fac8c7a3501c518f582540992 88979dcde1f3f1e070601b9d4e0d9ccde9236b95af64523505a60270f9e069c1 10ba8256173ad4854993d8dcbd5470477cf5be2926c912f448b70e30a823f09b f293a6a6946c3423c0acaff5f8b9b1cc565382a59c6f1de48de9ddbb232e056e d5fdf82eacc3547d67eb7a46df914414e08ed30642a9dfd984d2f63d013e222c 836862b0285506be1c8afb9f3b80019d784c88b5a6deb50ef140f87734f1ab7d 8db54ff9e465a3dcc689f71cddd5526be23e1f194a3556f907371b5a9a6a0904 cc1419414271bc0c6dd8487de5c5b183081b923a90118ae61e9cc9628f09a795 30577b14652b800efb340d351fd40e311bb80e5f89a4fe870630213cc58195f9 3231a1eb55ee749d3c362993729cbf2f05a94b02da63609e82a46b5b1c3b820b 3807687faca36420cbc9830f49a1c764ee731732d559668678de534947307ee8 b2e81558e0d5c388932ac314e5d8b1d3f9fbfb593d1a6a9786518327c9919a59 e96b92f57980209b6aef47fcf7ab5182bade6f57930a11bc26ebfce30d5c579a ed1528454e20342829cce283585b9f2cf66dc265296b28ae3b0cdd675e4266cc 52335c54396c41d3e04856cb6018bd600469f210556233aa9895b1f396b257ed d36ca29a43ff9d397377f7a39f90991ef1d076ff831dfd4a03e3a55e068a9217 07647d2cd06373e449a6c6b7ba64dd17a892fe1246e968449cfe6be55be148bb 6f11327d6b3c8b32c7780f38f3bd7c69bab8f29e3c8ad17135cc392225d93692 6b92b2af68964cf18f2219c2fbf647a9d80c7442d4e86dc2c4d7a887d6cc67c6 47350d44c6db23e0f0c9e9f4a1bf2e966369f52357fd01425bc06b9aaf83f943 41c9b4c9221162a94cfa5a87016256c42321a8a4f81c852034564e67eab46446 2b01c2232a104b043a91fdb360978216a069a357264eea90ad912fd148297375 a9b671865c10cb2068b23ae4f00820bfa17578c50dbc3aefc2a60ee62c033032 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python39-core-3.9.20-150300.4.58.1.src.rpm python39-2to3 python39-demo python39-tools python39-tools(ppc-64) @ @
/usr/bin/python3.9 python(abi) python39-base rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.9 3.9.20 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 4.14.3 g5@g4g$g6f5fcf@fٝ@fٝ@fըf@fafIf@f|fuk@f e!@eZe @e؈eԔ@ee4@did˖d@d@d8dd dVA@dRLd>@c>@c@cӼcGcck@cc@cRcOc cb?bbb? @b@a@aaan@a}3af@a.a(a'@aa@`@`g@``r```@`N@`/@`"y@`!'`_T___
_v@_u@_P_|\@_m_O@_N7_>e__@__A@___
@_X@_X@_X@_X@_X@_X@_X@_X@_X@^z^z^z^z^)@^^^^@^(@^3^@^'@^H^|@^h^`^>^>^8 @^8 @^ P@^ []f@]f@]]]]W]]c@]]]z@](]]]@]V]w@]i]g@]W@]Ik]6]!]G@\\9\~\@\\@\7\+@\\s\b@\b@\Q\C@\4\4\,\2\\\\&@[[@[^[
@[ͻ[ͻ[$@[ā@[/[[@["@[D[;e@[6 @[4ZnZ@Z@ZZԐ@Zx@Z@Z
Z
Z
Zz@ZxG@Zhu@Z`@ZLZ"Z
}YYX@Yo@YY@YY@Y@YP@YI@XӸXƉXqX@Xv @W@V@Vm@VVhV CV
}@U @U@U@U@UU[%UT@UT@UCjU@TeTBV@T;mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@suse.com mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu mcepl@cepl.eu pmonreal@suse.com mcepl@suse.com mcepl@suse.com mcepl@cepl.eu daniel.garcia@suse.com mcepl@cepl.eu daniel.garcia@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com steven.kowalik@suse.com mcepl@suse.com mcepl@suse.com kukuk@suse.com mliska@suse.cz mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com steven.kowalik@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com steven.kowalik@suse.com mcepl@suse.com mcepl@suse.com steven.kowalik@suse.com mcepl@suse.com mcepl@suse.com dimstar@opensuse.org mcepl@suse.com mcepl@suse.com schwab@suse.de qydwhotmail@gmail.com mcepl@suse.com mcepl@suse.com mcepl@suse.com dmueller@suse.com dcermak@suse.com mcepl@suse.com mcepl@suse.com code@bnavigator.de mcepl@suse.com mcepl@suse.com steven.kowalik@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com code@bnavigator.de mcepl@suse.com mcepl@suse.com dimstar@opensuse.org mcepl@suse.com dimstar@opensuse.org mcepl@suse.com mcepl@suse.com schwab@suse.de callumjfarmer13@gmail.com mcepl@suse.com callumjfarmer13@gmail.com callumjfarmer13@gmail.com tchvatal@suse.com tchvatal@suse.com mcepl@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com dmueller@suse.com andreas.stieger@gmx.de callumjfarmer13@gmail.com mcepl@suse.com mcepl@suse.com schwab@suse.de mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com mliska@suse.cz mcepl@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com stefan.bruens@rwth-aachen.de stefan.bruens@rwth-aachen.de mcepl@suse.com mcepl@suse.com mgorse@suse.com tchvatal@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com bwiedemann@suse.com tchvatal@suse.com mcepl@suse.com guillaume.gardet@opensuse.org jayvdb@gmail.com mcepl@suse.com mcepl@suse.com mcepl@suse.com schwab@suse.de mcepl@suse.com mliska@suse.cz mcepl@suse.com mcepl@suse.com mcepl@suse.com jayvdb@gmail.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com tchvatal@suse.com mcepl@suse.com toddrme2178@gmail.com mcepl@suse.com jengelh@inai.de mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com mcepl@suse.com mcepl@suse.com mcepl@suse.com tchvatal@suse.com mimi.vx@gmail.com hpj@urpla.net jengelh@inai.de tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com mimi.vx@gmail.com adam@mizerski.pl schwab@suse.de bwiedemann@suse.com tchvatal@suse.com tchvatal@suse.com normand@linux.vnet.ibm.com jmatejek@suse.com normand@linux.vnet.ibm.com jmatejek@suse.com dimstar@opensuse.org mimi.vx@gmail.com jmatejek@suse.com dmueller@suse.com vcizek@suse.com jengelh@inai.de schwab@suse.de jmatejek@suse.com kukuk@suse.de jmatejek@suse.com jmatejek@suse.com asn@cryptomilk.org jmatejek@suse.com jmatejek@suse.com bwiedemann@suse.com jmatejek@suse.com jmatejek@suse.com jmatejek@suse.com schwab@suse.de toddrme2178@gmail.com arichardson.kde@gmail.com toddrme2178@gmail.com toddrme2178@gmail.com jmatejek@suse.com dimstar@opensuse.org jmatejek@suse.com fisiu@opensuse.org dimstar@opensuse.org meissner@suse.com schwab@suse.de jmatejek@suse.com jmatejek@suse.com mailaender@opensuse.org rguenther@suse.com p.drouand@gmail.com crrodriguez@opensuse.org jmatejek@suse.com - Remove -IVendor/ from python-config boo#1231795 - Add CVE-2024-11168-validation-IPv6-addrs.patch
fixing bsc#1233307 (CVE-2024-11168,
gh#python/cpython#103848): Improper validation of IPv6 and
IPvFuture addresses. - Update CVE-2024-9287-venv_path_unquoted.patch according to the
upstream PR gh#python/cpython!126301. - Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
path names provided when creating a virtual environment
(bsc#1232241, CVE-2024-9287) - Drop .pyc files from docdir for reproducible builds
(bsc#1230906). - Add sphinx-802.patch to overcome working both with the most
recent and older Sphinx versions. - Update to 3.9.20:
- Tests
- gh-112769: The tests now correctly compare zlib version when
:const:`zlib.ZLIB_RUNTIME_VERSION` contains non-integer suffixes. For
example zlib-ng defines the version as ``1.3.0.zlib-ng``.
- gh-117187: Fix XML tests for vanilla Expat <2.6.0.
- Security
- gh-123678: Upgrade libexpat to 2.6.3
- gh-121957: Fixed missing audit events around interactive use of Python,
now also properly firing for ``python -i``, as well as for ``python -m
asyncio``. The event in question is ``cpython.run_stdin``.
- gh-122133: Authenticate the socket connection for the
``socket.socketpair()`` fallback on platforms where ``AF_UNIX`` is not
available like Windows.
Patch by Gregory P. Smith and Seth Larson
. Reported by Ellie
- gh-121285: Remove backtracking from tarfile header parsing for
``hdrcharset``, PAX, and GNU sparse headers
(bsc#1230227, CVE-2024-6232).
- gh-118486: :func:`os.mkdir` on Windows now accepts *mode* of ``0o700`` to
restrict the new directory to the current user. This fixes CVE-2024-4030
affecting :func:`tempfile.mkdtemp` in scenarios where the base temporary
directory is more permissive than the default.
- gh-114572: :meth:`ssl.SSLContext.cert_store_stats` and
:meth:`ssl.SSLContext.get_ca_certs` now correctly lock access to the
certificate store, when the :class:`ssl.SSLContext` is shared across
multiple threads (bsc#1226447, CVE-2024-0397).
- gh-116741: Update bundled libexpat to 2.6.2
- Library
- gh-123270: Applied a more surgical fix for malformed payloads in
:class:`zipfile.Path` causing infinite loops (gh-122905) without breaking
contents using legitimate characters (bsc#1229704, CVE-2024-8088).
- gh-123067: Fix quadratic complexity in parsing ``"``-quoted cookie values
with backslashes by :mod:`http.cookies` (bsc#1229596, CVE-2024-7592).
- gh-121650: :mod:`email` headers with embedded newlines are now quoted on
output. The :mod:`~email.generator` will now refuse to serialize (write)
headers that are unsafely folded or delimited; see
:attr:`~email.policy.Policy.verify_generated_headers`. (Contributed by Bas
Bloemsaat and Petr Viktorin in :gh:`121650`; CVE-2024-6923, bsc#1228780).
- gh-113171: Fixed various false positives and false negatives in
* :attr:`ipaddress.IPv4Address.is_private` (see these docs for details)
* :attr:`ipaddress.IPv4Address.is_global`
* :attr:`ipaddress.IPv6Address.is_private`
* :attr:`ipaddress.IPv6Address.is_global`
Also in the corresponding :class:`ipaddress.IPv4Network` and
:class:`ipaddress.IPv6Network` attributes
Fixes bsc#1226448 (CVE-2024-4032).
- gh-102988: :func:`email.utils.getaddresses` and
:func:`email.utils.parseaddr` now return ``('', '')`` 2-tuples in more
situations where invalid email addresses are encountered instead of
potentially inaccurate values. Add optional *strict* parameter to these
two functions: use ``strict=False`` to get the old behavior, accept
malformed inputs. ``getattr(email.utils, 'supports_strict_parsing',
False)`` can be use to check if the *strict* paramater is available. Patch
by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix
(bsc#1210638).
- gh-67693: Fix :func:`urllib.parse.urlunparse` and
:func:`urllib.parse.urlunsplit` for URIs with path starting with multiple
slashes and no authority. Based on patch by Ashwin Ramaswami.
- Core and Builtins
- gh-112275: A deadlock involving ``pystate.c``'s ``HEAD_LOCK`` in
``posixmodule.c`` at fork is now fixed. Patch by ChuBoning based on
previous Python 3.12 fix by Victor Stinner.
- Remove upstreamed patches:
- CVE-2023-27043-email-parsing-errors.patch
- CVE-2024-6232-cookies-quad-complex.patch
- CVE-2024-4032-private-IP-addrs.patch
- CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
- CVE-2024-8088-inf-loop-zipfile_Path.patch
- CVE-2024-6923-email-hdr-inject.patch - Add CVE-2024-6232-cookies-quad-complex.patch to avoid quadratic
complexity in parsing tarfile headers (bsc#1230227, CVE-2024-6232). - Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
patched libexpat below 2.6.0 that doesn't update the version number,
just in SLE.
- Remove old-libexpat.patch, of course. - Add gh120226-fix-sendfile-test-kernel-610.patch to avoid
failing test_sendfile_close_peer_in_the_middle_of_receiving
tests on Linux >= 6.10 (GH-120227). - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent
malformed payload to cause infinite loops in zipfile.Path
(bsc#1229704, CVE-2024-8088). - Add CVE-2024-6923-email-hdr-inject.patch to prevent email
header injection due to unquoted newlines (bsc#1228780,
CVE-2024-6923).
- Adding bso1227999-reproducible-builds.patch fixing bsc#1227999
adding reproducibility patches from gh#python/cpython!121872
and gh#python/cpython!121883.
- Add CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch removing
support for anything but OpenSSL 1.1.1 or newer (bsc#1227233,
CVE-2024-5642).
- %{profileopt} variable is set according to the variable
%{do_profiling} (bsc#1227999) - Remove %suse_update_desktop_file macro as it is not useful any
more. - Stop using %%defattr, it seems to be breaking proper executable
attributes on /usr/bin/ scripts (bsc#1227378). - Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
(CVE-2024-4032) rearranging definition of private v global IP
addresses. - Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
fixing bsc#1226447 (CVE-2024-0397) by removing memory race
condition in ssl.SSLContext certificate store methods. - Add old-libexpat.patch making the test suite work with
libexpat < 2.6.0 (gh#python/cpython#117187). - Update to 3.9.19:
- Security
- gh-115398: Allow controlling Expat >=2.6.0 reparse deferral
(CVE-2023-52425, bsc#1219559) by adding five new methods:
xml.etree.ElementTree.XMLParser.flush()
xml.etree.ElementTree.XMLPullParser.flush()
xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
xml.sax.expatreader.ExpatParser.flush()
- gh-115399: Update bundled libexpat to 2.6.0
- gh-113659: Skip .pth files with names starting with a dot
or hidden file attribute.
- Core and Builtins
- gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004
codecs read out of bounds
- Library
- gh-115197: urllib.request no longer resolves the hostname
before checking it against the system’s proxy bypass list
on macOS and Windows.
- gh-115133: Fix tests for XMLPullParser with Expat 2.6.0.
- gh-81194: Fix a crash in socket.if_indextoname() with
specific value (UINT_MAX). Fix an integer overflow in
socket.if_indextoname() on 64-bit non-Windows platforms.
- gh-109858: Protect zipfile from “quoted-overlap”
zipbomb. It now raises BadZipFile when try to read an
entry that overlaps with other entry or central directory
(CVE-2024-0450, bsc#1221854).
- gh-107077: Seems that in some conditions, OpenSSL will
return SSL_ERROR_SYSCALL instead of SSL_ERROR_SSL
when a certification verification has failed, but
the error parameters will still contain ERR_LIB_SSL
and SSL_R_CERTIFICATE_VERIFY_FAILED. We are now
detecting this situation and raising the appropiate
ssl.SSLCertVerificationError. Patch by Pablo Galindo
- gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup,
which now no longer dereferences symlinks when working
around file system permission errors (CVE-2023-6597,
bsc#1219666).
- Documentation
- gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under
“XML vulnerabilities”.
- Tools/Demos
- gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11
and multissltests to use 1.1.1w and 3.0.11.
- Remove upstreamed patches:
- CVE-2023-6597-TempDir-cleaning-symlink.patch
- libexpat260.patch
- Refreshed patches:
- F00251-change-user-install-location.patch
- python-3.3.0b1-localpath.patch - Use the system-wide crypto-policies [bsc#1211301]
* Use the system default cipher list instead of hardcoded values
* Add the --with-ssl-default-suites=openssl configure option - Update SPEC file to build on SLE-15-SP5 (jsc#PED-7886). - (bsc#1219666, CVE-2023-6597) Add
CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
gh#python/cpython!99930) fixing symlink bug in cleanup of
tempfile.TemporaryDirectory.
- Repurpose skip-failing-tests.patch to increase timeout for
test.test_asyncio.test_tasks.TimeoutTests.test_timeout_time,
which fails on slow machines in IBS (s390x). - Remove double definition of /usr/bin/idle%%{version} in
%%files. - Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
with Expat 2.6.0, gh#python/cpython#115289 - Refresh CVE-2023-27043-email-parsing-errors.patch to
gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
now useless. - Update to 3.9.18 (bsc#1214692):
- (bsc#1215454, gh-108310) Fixed an issue where instances
of ssl.SSLSocket were vulnerable to a bypass of the TLS
handshake and included protections (like certificate
verification) and treating sent unencrypted data as if it
were post-handshake TLS encrypted data. Security issue
reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory
P. Smith.
- gh-107845: tarfile.data_filter() now takes the location of
symlinks into account when determining their target, so it will no
longer reject some valid tarballs with
LinkOutsideDestinationError.
- gh-107565: Update multissltests and GitHub CI workflows to use
OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
- Refresh all patches:
- 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
- 99366-patch.dict-can-decorate-async.patch
- Revert-gh105127-left-tests.patch
- bpo-31046_ensurepip_honours_prefix.patch
- decimal.patch
- distutils-reproducible-compile.patch
- gh-78214-marshal_stabilize_FLAG_REF.patch
- python-3.3.0b1-localpath.patch
- python-3.3.0b1-test-posix_fadvise.patch
- python3-imp-returntype.patch
- subprocess-raise-timeout.patch
- support-expat-CVE-2022-25236-patched.patch
- downport-Sphinx-features.patch - IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
partially reverting CVE-2023-27043-email-parsing-errors.patch,
because of the regression in gh#python/cpython#106669.
- (bsc#1210638, CVE-2023-27043) Add
CVE-2023-27043-email-parsing-errors.patch, which detects email
address parsing errors and returns empty tuple to indicate the
parsing error (old API). (The patch is faulty,
gh#python/cpython#106669, but upstream decided not to just
revert it). - Add bpo-37596-make-set-marshalling.patch making marshalling of
`set` and `frozenset` deterministic (bsc#1211765). - Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
stabilizing FLAG_REF usage (required for reproduceability;
bsc#1213463). - Revert faulty fix for CVE-2023-27043 (gh#python/cpython#106669) - Add downport-Sphinx-features.patch to make documentation
buildable even on SLE-15. - Update to 3.9.17 (bsc#1212015):
- gh-103142: The version of OpenSSL used in Windows and
Mac installers has been upgraded to 1.1.1u to address
CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
fixed previously in 1.1.1t (gh-101727).
- gh-102153: urllib.parse.urlsplit() now strips leading C0
control and space characters following the specification for
URLs defined by WHATWG in response to CVE-2023-24329
(bsc#1208471).
- gh-99889: Fixed a security in flaw in uu.decode() that could
allow for directory traversal based on the input if no
out_file was specified.
- gh-104049: Do not expose the local on-disk
location in directory indexes produced by
http.client.SimpleHTTPRequestHandler.
- gh-103935: trace.__main__ now uses io.open_code() for files
to be executed instead of raw open().
- gh-102953: The extraction methods in tarfile, and
shutil.unpack_archive(), have a new filter argument that
allows limiting tar features than may be surprising or
dangerous, such as creating files outside the destination
directory. See Extraction filters for details (fixing
CVE-2007-4559, bsc#1203750).
- gh-102126: Fixed a deadlock at shutdown when clearing thread
states if any finalizer tries to acquire the runtime head
lock.
- gh-100892: Fixed a crash due to a race while iterating over
thread states in clearing threading.local.
- Remove upstreamed patches:
- CVE-2023-24329-blank-URL-bypass.patch
- CVE-2007-4559-filter-tarfile_extractall.patch - Add 99366-patch.dict-can-decorate-async.patch fixing
gh#python/cpython#98086 (backport from Python 3.10 patch in
gh#python/cpython!99366), fixing bsc#1211158. - Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
CVE-2007-4559 (bsc#1203750) by adding the filter for
tarfile.extractall (PEP 706). - Use python3 modules to build the documentation. - Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
bsc#1208471) blocklists bypass via the urllib.parse component
when supplying a URL that starts with blank characters - Add provides for readline and sqlite3 to the main Python
package. - Disable NIS for new products, it's deprecated and gets removed - Suppress warnings for Sphinx 6.0+. - Update to 3.9.16:
- python -m http.server no longer allows terminal control
characters sent within a garbage request to be printed to the
stderr server log.
This is done by changing the http.server
BaseHTTPRequestHandler .log_message method to replace control
characters with a \xHH hex escape before printing.
- Avoid publishing list of active per-interpreter audit hooks
via the gc module
- The IDNA codec decoder used on DNS hostnames by socket or
asyncio related name resolution functions no longer involves
a quadratic algorithm. This prevents a potential CPU denial
of service if an out-of-spec excessive length hostname
involving bidirectional characters were decoded. Some
protocols such as urllib http 3xx redirects potentially allow
for an attacker to supply such a name (CVE-2015-20107).
- Update bundled libexpat to 2.5.0
- Port XKCP’s fix for the buffer overflows in SHA-3
(CVE-2022-37454).
- On Linux the multiprocessing module returns to using
filesystem backed unix domain sockets for communication with
the forkserver process instead of the Linux abstract socket
namespace. Only code that chooses to use the “forkserver”
start method is affected.
Abstract sockets have no permissions and could allow any
user on the system in the same network namespace (often
the whole system) to inject code into the multiprocessing
forkserver process. This was a potential privilege
escalation. Filesystem based socket permissions restrict this
to the forkserver process user as was the default in Python
3.8 and earlier.
This prevents Linux CVE-2022-42919.
- The deprecated mailcap module now refuses to inject unsafe
text (filenames, MIME types, parameters) into shell
commands. Instead of using such text, it will warn and act
as if a match was not found (or for test commands, as if the
test failed).
- Removed upstreamed patches:
- CVE-2015-20107-mailcap-unsafe-filenames.patch
- CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
- CVE-2022-45061-DoS-by-IDNA-decode.patch - Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
extremely long domain names. - Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
privilege escalation via the multiprocessing forkserver start
method. - Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
allow building of documentation with the latest Sphinx 5.3.0
(gh#python/cpython#98366). - Update to 3.9.15:
- Fix multiplying a list by an integer (list *= int): detect
the integer overflow when the new allocated length is close
to the maximum size.
- Fix a shell code injection vulnerability in the
get-remote-certificate.py example script. The script no
longer uses a shell to run openssl commands. (originally
filed as CVE-2022-37460, later withdrawn)
- Fix command line parsing: reject -X int_max_str_digits option
with no value (invalid) when the PYTHONINTMAXSTRDIGITS
environment variable is set to a valid limit.
- When ValueError is raised if an integer is larger than the
limit, mention the sys.set_int_max_str_digits() function in
the error message.
- Update bundled libexpat to 2.4.9 - Update to 3.9.14:
- (CVE-2020-10735, bsc#1203125). Converting between int
and str in bases other than 2 (binary), 4, 8 (octal), 16
(hexadecimal), or 32 such as base 10 (decimal) now raises a
ValueError if the number of digits in string form is above a
limit to avoid potential denial of service attacks due to the
algorithmic complexity.
This new limit can be configured or disabled by environment
variable, command line flag, or sys APIs. See the integer
string conversion length limitation documentation. The
default limit is 4300 digits in string form.
- Also other bug fixes:
- http.server: Fix an open redirection vulnerability in the
HTTP server when an URI path starts with //. Vulnerability
discovered, and initial fix proposed, by Hamza Avvan.
- Fix contextvars HAMT implementation to handle iteration
over deep trees. The bug was discovered and fixed by Eli
Libman. See MagicStack/immutables#84 for more details.
- Fix binding of unix socket to empty address on Linux to use
an available address from the abstract namespace, instead
of “0”.
- Suppress writing an XML declaration in open files
in ElementTree.write() with encoding='unicode' and
xml_declaration=None.
- Fix the formatting for await x and not x in the operator
precedence table when using the help() system.
- Fix ensurepip environment isolation for subprocess running
pip.
- Fix problem with test_ssl test_get_ciphers on systems that
require perfect forward secrecy (PFS) ciphers.
- test_ssl is now checking for supported TLS version and
protocols in more tests.
- Removed upstreamed patches:
- CVE-2021-28861-double-slash-path.patch
- Realign patches:
- bpo-31046_ensurepip_honours_prefix.patch
- sphinx-update-removed-function.patch - Add patch CVE-2021-28861-double-slash-path.patch:
* http.server: Fix an open redirection vulnerability in the HTTP server
when an URI path starts with //. (bsc#1202624, CVE-2021-28861) - Switch from %primary_interpreter to prjconf-defined
%primary_python (gh#openSUSE/python-rpm-macros#127). - Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
%primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
and update the patch to detect expat >= 2.4.4 instead of >= 2.4.5
as it was fully patched against CVE-2022-25236. - Update to 3.9.13:
- Core and Builtins
- gh-92311: Fixed a bug where setting frame.f_lineno to jump
over a list comprehension could misbehave or crash.
- gh-92112: Fix crash triggered by an evil custom mro() on
a metaclass.
- gh-92036: Fix a crash in subinterpreters related to the
garbage collector. When a subinterpreter is deleted,
untrack all objects tracked by its GC. To prevent a crash
in deallocator functions expecting objects to be tracked by
the GC, leak a strong reference to these objects on
purpose, so they are never deleted and their deallocator
functions are not called. Patch by Victor Stinner.
- gh-91421: Fix a potential integer overflow in
_Py_DecodeUTF8Ex.
- bpo-46775: Some Windows system error codes(>= 10000) are
now mapped into the correct errno and may now raise
a subclass of OSError. Patch by Dong-hee Na.
- bpo-46962: Classes and functions that unconditionally
declared their docstrings ignoring the
- -without-doc-strings compilation flag no longer do so.
- The classes affected are pickle.PickleBuffer,
testcapi.RecursingInfinitelyError, and types.GenericAlias.
- The functions affected are 24 methods in ctypes.
- Patch by Oleg Iarygin.
- bpo-36819: Fix crashes in built-in encoders with error
handlers that return position less or equal than the
starting position of non-encodable characters.
- Library
- gh-91581: utcfromtimestamp() no longer attempts to resolve
fold in the pure Python implementation, since the fold is
never 1 in UTC. In addition to being slightly faster in the
common case, this also prevents some errors when the
timestamp is close to datetime.min. Patch by Paul Ganssle.
- gh-92530: Fix an issue that occurred after interrupting
threading.Condition.notify().
- gh-92049: Forbid pickling constants re._constants.SUCCESS
etc. Previously, pickling did not fail, but the result
could not be unpickled.
- bpo-47029: Always close the read end of the pipe used by
multiprocessing.Queue after the last write of buffered data
to the write end of the pipe to avoid BrokenPipeError at
garbage collection and at multiprocessing.Queue.close()
calls. Patch by Géry Ogam.
- gh-91910: Add missing f prefix to f-strings in error
messages from the multiprocessing and asyncio modules.
- gh-91810: ElementTree method write() and function
tostring() now use the text file’s encoding (“UTF-8” if not
available) instead of locale encoding in XML declaration
when encoding="unicode" is specified.
- gh-91832: Add required attribute to argparse.Action repr
output.
- gh-91734: Fix OSS audio support on Solaris.
- gh-91700: Compilation of regular expression containing
a conditional expression (?(group)...) now raises an
appropriate re.error if the group number refers to not
defined group. Previously an internal RuntimeError was
raised.
- gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
the per test event loop executor before returning from its
run method so that a not yet stopped or garbage collected
executor state does not persist beyond the test.
- gh-90568: Parsing \N escapes of Unicode Named Character
Sequences in a regular expression raises now re.error
instead of TypeError.
- gh-91595: Fix the comparison of character and integer
inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
- gh-90622: Worker processes for
concurrent.futures.ProcessPoolExecutor are no longer
spawned on demand (a feature added in 3.9) when the
multiprocessing context start method is "fork" as that can
lead to deadlocks in the child processes due to a fork
happening while threads are running.
- gh-91575: Update case-insensitive matching in the re module
to the latest Unicode version.
- gh-91581: Remove an unhandled error case in the
C implementation of calls to datetime.fromtimestamp with no
time zone (i.e. getting a local time from an epoch
timestamp). This should have no user-facing effect other
than giving a possibly more accurate error message when
called with timestamps that fall on 10000-01-01 in the
local time. Patch by Paul Ganssle.
- bpo-34480: Fix a bug where _markupbase raised an
UnboundLocalError when an invalid keyword was found in
marked section. Patch by Marek Suscak.
- bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
names for socket.AF_INET or socket.AF_INET6 families.
Resolution may not make sense for other families, like
socket.AF_BLUETOOTH and socket.AF_UNIX.
- bpo-43323: Fix errors in the email module if the charset
itself contains undecodable/unencodable characters.
- bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
exception memory leak
- bpo-46415: Fix ipaddress.ip_{address,interface,network}
raising TypeError instead of ValueError if given invalid
tuple as address parameter.
- bpo-44911: IsolatedAsyncioTestCase will no longer throw an
exception while cancelling leaked tasks. Patch by Bar
Harel.
- bpo-44493: Add missing terminated NUL in sockaddr_un’s
length
- This was potentially observable when using non-abstract
AF_UNIX datagram sockets to processes written in another
programming language.
- bpo-42627: Fix incorrect parsing of Windows registry proxy
settings
- bpo-36073: Raise ProgrammingError instead of segfaulting on
recursive usage of cursors in sqlite3 converters. Patch by
Sergey Fedoseev.
- Documentation
- gh-91888: Add a new gh role to the documentation to link to
GitHub issues.
- gh-91783: Document security issues concerning the use of
the function shutil.unpack_archive()
- gh-91547: Remove “Undocumented modules” page.
- bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
shutil.copytree().
- bpo-38668: Update the introduction to documentation for
os.path to remove warnings that became irrelevant after the
implementations of PEP 383 and PEP 529.
- bpo-47138: Pin Jinja to a version compatible with Sphinx
version 2.4.4.
- bpo-46962: All docstrings in code snippets are now wrapped
into PyDoc_STR() to follow the guideline of PEP 7’s
Documentation Strings paragraph. Patch by Oleg Iarygin.
- bpo-26792: Improve the docstrings of runpy.run_module() and
runpy.run_path(). Original patch by Andrew Brezovsky.
- bpo-45790: Adjust inaccurate phrasing in Defining Extension
Types: Tutorial about the ob_base field and the macros used
to access its contents.
- bpo-42340: Document that in some circumstances
KeyboardInterrupt may cause the code to enter an
inconsistent state. Provided a sample workaround to avoid
it if needed.
- bpo-41233: Link the errnos referenced in
Doc/library/exceptions.rst to their respective section in
Doc/library/errno.rst, and vice versa. Previously this was
only done for EINTR and InterruptedError. Patch by Yan
“yyyyyyyan” Orestes.
- bpo-38056: Overhaul the Error Handlers documentation in
codecs.
- bpo-13553: Document tkinter.Tk args.
- Tests
- gh-91607: Fix test_concurrent_futures to test the correct
multiprocessing start method context in several cases where
the test logic mixed this up.
- bpo-47205: Skip test for sched_getaffinity() and
sched_setaffinity() error case on FreeBSD.
- bpo-29890: Add tests for ipaddress.IPv4Interface and
ipaddress.IPv6Interface construction with tuple arguments.
Original patch and tests by louisom.
- Build
- bpo-47103: Windows PGInstrument builds now copy a required
DLL into the output directory, making it easier to run the
profile stage of a PGO build.
- Windows
- bpo-47194: Update zlib to v1.2.12 to resolve
CVE-2018-25032.
- bpo-46785: Fix race condition between os.stat() and
unlinking a file on Windows, by using errors codes returned
by FindFirstFileW() when appropriate in win32_xstat_impl.
- bpo-40859: Update Windows build to use xz-5.2.5
- Tools/Demos
- gh-91583: Fix regression in the code generated by Argument
Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
* Support Expat >= 2.4.4 (jsc#SLE-21253, CVE-2022-25236) - Update to 3.9.12:
- bpo-46968: Check for the existence of the “sys/auxv.h” header
in faulthandler to avoid compilation problems in systems
where this header doesn’t exist. Patch by Pablo Galindo
- bpo-47101: hashlib.algorithms_available now lists only
algorithms that are provided by activated crypto providers on
OpenSSL 3.0. Legacy algorithms are not listed unless the
legacy provider has been loaded into the default OSSL
context.
- bpo-23691: Protect the re.finditer() iterator from
re-entering.
- bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
when reading a ZipFile from multiple threads.
- bpo-38256: Fix binascii.crc32() when it is compiled to use
zlib’c crc32 to work properly on inputs 4+GiB in length
instead of returning the wrong result. The workaround prior
to this was to always feed the function data in increments
smaller than 4GiB or to just call the zlib module function.
- bpo-39394: A warning about inline flags not at the start of
the regular expression now contains the position of the flag.
- bpo-47061: Deprecate the various modules listed by PEP 594:
- aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
sndhdr, spwd, sunau, telnetlib, uu, xdrlib
- bpo-2604: Fix bug where doctests using globals would fail
when run multiple times.
- bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
- bpo-47022: The asynchat, asyncore and smtpd modules have been
deprecated since at least Python 3.6. Their documentation has
now been updated to note they will removed in Python 3.12
(PEP 594).
- bpo-46421: Fix a unittest issue where if the command was
invoked as python -m unittest and the filename(s) began with
a dot (.), a ValueError is returned.
- bpo-40296: Fix supporting generic aliases in pydoc.
- bpo-14156: argparse.FileType now supports an argument of ‘-’
in binary mode, returning the .buffer attribute of
sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
Patch contributed by Josh Rosenberg
- Update to 3.9.11:
- bpo-46852: Rename the private undocumented
float.__set_format__() method to float.__setformat__() to fix
a typo introduced in Python 3.7. The method is only used by
test_float. Patch by Victor Stinner.
- bpo-46794: Bump up the libexpat version into 2.4.6
- bpo-46762: Fix an assert failure in debug builds when a ‘<’,
‘>’, or ‘=’ is the last character in an f-string that’s
missing a closing right brace.
- bpo-46732: Correct the docstring for the __bool__() method.
Patch by Jelle Zijlstra.
- bpo-40479: Add a missing call to va_end() in
Modules/_hashopenssl.c.
- bpo-46615: When iterating over sets internally in
setobject.c, acquire strong references to the resulting items
from the set. This prevents crashes in corner-cases of
various set operations where the set gets mutated.
- bpo-43721: Fix docstrings of getter, setter, and deleter to
clarify that they create a new copy of the property.
- bpo-46503: Fix an assert when parsing some invalid N escape
sequences in f-strings.
- bpo-46417: Fix a race condition on setting a type __bases__
attribute: the internal function add_subclass() now gets the
PyTypeObject.tp_subclasses member after calling
PyWeakref_NewRef() which can trigger a garbage collection
which can indirectly modify PyTypeObject.tp_subclasses. Patch
by Victor Stinner.
- bpo-46383: Fix invalid signature of _zoneinfo’s module_free
function to resolve a crash on wasm32-emscripten platform.
- bpo-43253: Fix a crash when closing transports where the
underlying socket handle is already invalid on the Proactor
event loop.
- bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
including bugfix for EntryPoint.extras, which was returning
match objects and not the extras strings.
- bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
22.0.4, bnc#1186819, CVE-2021-3572)
- bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
determine size of signal handler stack size CPython allocates
using getauxval(AT_MINSIGSTKSZ). This changes allows for
Python extension’s request to Linux kernel to use AMX_TILE
instruction set on Sapphire Rapids Xeon processor to succeed,
unblocking use of the ISA in frameworks.
- bpo-46955: Expose asyncio.base_events.Server as
asyncio.Server. Patch by Stefan Zabka.
- bpo-46932: Update bundled libexpat to 2.4.7
- bpo-25707: Fixed a file leak in
xml.etree.ElementTree.iterparse() when the iterator is not
exhausted. Patch by Jacob Walls.
- bpo-44886: Inherit asyncio proactor datagram transport from
asyncio.DatagramTransport.
- bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
for selector-based event loops. Patch by Thomas Grainger.
- bpo-46811: Make test suite support Expat >=2.4.5
- bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
transport-based APIs.
- bpo-46784: Fix libexpat symbols collisions with user
dynamically loaded or statically linked libexpat in embedded
Python.
- bpo-39327: shutil.rmtree() can now work with VirtualBox
shared folders when running from the guest operating-system.
- bpo-46756: Fix a bug in
urllib.request.HTTPPasswordMgr.find_user_password() and
urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
which allowed to bypass authorization. For example, access to
URI example.org/foobar was allowed if the user was authorized
for URI example.org/foo.
- bpo-45863: When the tarfile module creates a pax format
archive, it will put an integer representation of timestamps
in the ustar header (if possible) for the benefit of older
unarchivers, in addition to the existing full-precision
timestamps in the pax extended header.
- bpo-46672: Fix NameError in asyncio.gather() when initial
type check fails.
- bpo-45948: Fixed a discrepancy in the C implementation of the
xml.etree.ElementTree module. Now, instantiating an
xml.etree.ElementTree.XMLParser with a target=None keyword
provides a default xml.etree.ElementTree.TreeBuilder target
as the Python implementation does.
- bpo-46591: Make the IDLE doc URL on the About IDLE dialog
clickable.
- bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
- bpo-46487: Add the get_write_buffer_limits method to
asyncio.transports.WriteTransport and to the SSL transport.
- bpo-46539: In typing.get_type_hints(), support evaluating
stringified ClassVar and Final annotations inside Annotated.
Patch by Gregory Beauregard.
- bpo-46491: Allow typing.Annotated to wrap typing.Final and
typing.ClassVar. Patch by Gregory Beauregard.
- bpo-46436: Fix command-line option -d/--directory in module
http.server which is ignored when combined with command-line
option --cgi. Patch by Géry Ogam.
- bpo-41403: Make mock.patch() raise a TypeError with
a relevant error message on invalid arg. Previously it
allowed a cryptic AttributeError to escape.
- bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
potential REDoS by limiting ambiguity in consecutive
whitespace.
- bpo-46469: asyncio generic classes now return
types.GenericAlias in __class_getitem__ instead of the same
class.
- bpo-46434: pdb now gracefully handles help when __doc__ is
missing, for example when run with pregenerated optimized
.pyc files.
- bpo-46333: The __eq__() and __hash__() methods of
typing.ForwardRef now honor the module parameter of
typing.ForwardRef. Forward references from different modules
are now differentiated.
- bpo-43118: Fix a bug in inspect.signature() that was causing
it to fail on some subclasses of classes with
a __text_signature__ referencing module globals. Patch by
Weipeng Hong.
- bpo-21987: Fix an issue with tarfile.TarFile.getmember()
getting a directory name with a trailing slash.
- bpo-20392: Fix inconsistency with uppercase file extensions
in MimeTypes.guess_type(). Patch by Kumar Aditya.
- bpo-46080: Fix exception in argparse help text generation if
a argparse.BooleanOptionalAction argument’s default is
argparse.SUPPRESS and it has help specified. Patch by Felix
Fontein.
- bpo-44439: Fix .write() method of a member file in ZipFile,
when the input data is an object that supports the buffer
protocol, the file length may be wrong.
- bpo-45703: When a namespace package is imported before
another module from the same namespace is created/installed
in a different sys.path location while the program is
running, calling the importlib.invalidate_caches() function
will now also guarantee the new module is noticed.
- bpo-24959: Fix bug where unittest sometimes drops frames from
tracebacks of exceptions raised in tests.
- bpo-46463: Fixes escape4chm.py script used when building the
CHM documentation file
- bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
built with undefined behavior sanitizer (UBSAN): disable
UBSAN on the faulthandler_sigfpe() function. Patch by Victor
Stinner.
- bpo-46708: Prevent default asyncio event loop policy
modification warning after test_asyncio execution.
- bpo-46616: Ensures test_importlib.test_windows cleans up
registry keys after completion.
- bpo-44359: test_ftplib now silently ignores socket errors to
prevent logging unhandled threading exceptions. Patch by
Victor Stinner.
- bpo-46542: Fix a Python crash in test_lib2to3 when using
Python built in debug mode: limit the recursion limit. Patch
by Victor Stinner.
- bpo-46576: test_peg_generator now disables compiler
optimization when testing compilation of its own C extensions
to significantly speed up the testing on non-debug builds of
CPython.
- bpo-46542: Fix test_json tests checking for RecursionError:
modify these tests to use support.infinite_recursion(). Patch
by Victor Stinner.
- bpo-13886: Skip test_builtin PTY tests on non-ASCII
characters if the readline module is loaded. The readline
module changes input() behavior, but test_builtin is not
intented to test the readline module. Patch by Victor
Stinner.
- bpo-38472: Fix GCC detection in setup.py when
cross-compiling. The C compiler is now run with LC_ALL=C.
Previously, the detection failed with a German locale.
- bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
and pyconfig.h no longer defines reserved symbol
__CHAR_UNSIGNED__.
- bpo-45925: Update Windows installer to use SQLite 3.37.2.
- bpo-45296: Clarify close, quit, and exit in IDLE. In the File
menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
are no other windows, this also exits IDLE.
- bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
- support-expat-245.patch - Add patch support-expat-245.patch:
* Support Expat >= 2.4.5 - Update to 3.9.10:
Bugfix-only release - Remove shebangs from from python-base libraries in _libdir
(bsc#1193179, bsc#1192249).
- Readjust patches:
- bpo-31046_ensurepip_honours_prefix.patch
- decimal.patch
- python-3.3.0b1-fix_date_time_compiler.patch - Update to 3.9.9:
* Core and Builtins
+ bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
+ bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
+ bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
+ bpo-45167: Fix deepcopying of types.GenericAlias objects.
+ bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
+ bpo-44959: Added fallback to extension modules with ‘.sl’ suffix on HP-UX
+ bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
+ bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it’s called directly or via super(). Patch provided by Yurii Karabas.
+ bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
+ bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
+ Library
+ bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
+ bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
+ bpo-45438: Fix typing.Signature string representation for generic builtin types.
+ bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
+ bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
+ bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
+ bpo-45467: Fix incremental decoder and stream reader in the “raw-unicode-escape” codec. Previously they failed if the escape sequence was split.
+ bpo-45461: Fix incremental decoder and stream reader in the “unicode-escape” codec. Previously they failed if the escape sequence was split.
+ bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
+ bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
+ bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :’func:inspect.getabsfile, and return None to indicate that the module could not be determined.
+ bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
+ bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
+ bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
+ bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
+ bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
+ bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
+ bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don’t support the TCP_NODELAY socket option.
+ bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
+ bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
+ bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
+ bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
+ bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
+ bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
+ bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
+ bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
+ bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
+ bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
+ bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
+ bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
+ bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
+ bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
+ bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
+ bpo-45030: Fix integer overflow in pickling and copying the range iterator.
+ bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
+ bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
* Documentation
+ bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
+ bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
+ bpo-45655: Add a new “relevant PEPs” section to the top of the documentation for the typing module. Patch by Alex Waygood.
+ bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
+ bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
+ bpo-45449: Add note about PEP 585 in collections.abc.
+ bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
+ bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
+ bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
+ bpo-45772: socket.socket documentation is corrected to a class from a function.
+ bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
* Tests
+ bpo-45578: Add tests for dis.distb()
+ bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
+ bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
+ bpo-40173: Fix test.support.import_helper.import_fresh_module().
+ bpo-45280: Add a test case for empty typing.NamedTuple.
+ bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
+ bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
+ bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don’t expect it in the output. Patch by Victor Stinner.
+ bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
+ bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
+ bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
+ bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
+ bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
* Build
+ bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux’s libuuid, too.
+ bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
+ bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
+ bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
+ bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
* C API
+ bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
+ bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included. - rpm-build-python dependency is available on the current
Factory, not with SLE. - Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
(from gh#python/cpython#28153) to remove incorrect deprecation
warnings in asyncio. - BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation. - Update to 3.9.7:
- Security
- Replaced usage of tempfile.mktemp() with TemporaryDirectory
to avoid a potential race condition.
- Add auditing events to the marshal module, and stop raising
code.__init__ events for every unmarshalled code object.
Directly instantiated code objects will continue to raise
an event, and audit event handlers should inspect or
collect the raw marshal data. This reduces a significant
performance overhead when loading from .pyc files.
- Made the internal putcmd function in smtplib sanitize input
for presence of \r and \n characters to avoid (unlikely)
command injection.
- Core and Builtins
- Fixed pickling of range iterators that iterated for over
2**32 times.
- Fix a race in WeakKeyDictionary, WeakValueDictionary and
WeakSet when two threads attempt to commit the last pending
removal. This fixes asyncio.create_task and fixes a data
loss in asyncio.run where shutdown_asyncgens is not run
- Fixed a corner case bug where the result of
float.fromhex('0x.8p-1074') was rounded the wrong way.
- Refine the syntax error for trailing commas in import
statements. Patch by Pablo Galindo.
- Restore behaviour of complex exponentiation with
integer-valued exponent of type float or complex.
- Correct the ast locations of f-strings with format specs
and repeated expressions. Patch by Pablo Galindo
- Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
frameobject.c instead of the old ones
(Py_TRASHCAN_SAFE_BEGIN/END).
- Fix segmentation fault with deep recursion when cleaning
method objects. Patch by Augusto Goulart and Pablo Galindo.
- Fix bug where PyErr_SetObject hangs when the current
exception has a cycle in its context chain.
- Fix reference leaks in the error paths of update_bases()
and __build_class__. Patch by Pablo Galindo.
- Fix undefined behaviour in complex object exponentiation.
- Remove uses of PyObject_GC_Del() in error path when
initializing types.GenericAlias.
- Remove the pass-through for hash() of weakref.proxy objects
to prevent unintended consequences when the original
referred object dies while the proxy is part of a hashable
object. Patch by Pablo Galindo.
- Fix ltrace functionality when exceptions are raised. Patch
by Pablo Galindo
- Fix a crash at Python exit when a deallocator function
removes the last strong reference to a heap type. Patch by
Victor Stinner.
- Fix crash when using passing a non-exception to
a generator’s throw() method. Patch by Noah Oxer
- Library
- run() now always return a TestResult instance. Previously
it returned None if the test class or method was decorated
with a skipping decorator.
- Fix bugs in cleaning up classes and modules in unittest:
- Functions registered with addModuleCleanup() were not
called unless the user defines tearDownModule() in
their test module.
- Functions registered with addClassCleanup() were not
called if tearDownClass is set to None.
- Buffering in TestResult did not work with functions
registered with addClassCleanup() and
addModuleCleanup().
- Errors in functions registered with addClassCleanup()
and addModuleCleanup() were not handled correctly in
buffered and debug modes.
- Errors in setUpModule() and functions registered with
addModuleCleanup() were reported in wrong order.
- And several lesser bugs.
- Made email date parsing more robust against malformed
input, namely a whitespace-only Date: header. Patch by
Wouter Bolsterlee.
- Fix a crash in the signal handler of the faulthandler
module: no longer modify the reference count of frame
objects. Patch by Victor Stinner.
- Method stopTestRun() is now always called in pair with
method startTestRun() for TestResult objects implicitly
created in run(). Previously it was not called for test
methods and classes decorated with a skipping decorator.
- argparse.BooleanOptionalAction’s default value is no longer
printed twice when used with
argparse.ArgumentDefaultsHelpFormatter.
- Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
- Fix the os.set_inheritable() function on FreeBSD 14 for
file descriptor opened with the O_PATH flag: ignore the
EBADF error on ioctl(), fallback on the fcntl()
implementation. Patch by Victor Stinner.
- The @functools.total_ordering() decorator now works with
metaclasses.
- sqlite3 user-defined functions and aggregators returning
strings with embedded NUL characters are no longer
truncated. Patch by Erlend E. Aasland.
- Always show loop= arg deprecations in asyncio.gather() and
asyncio.sleep()
- Non-protocol subclasses of typing.Protocol ignore now the
__init__ method inherited from protocol base classes.
- The tokenize.tokenize() doesn’t incorrectly generate
a NEWLINE token if the source doesn’t end with a new line
character but the last line is a comment, as the function
is already generating a NL token. Patch by Pablo Galindo
- Fix http.client.HTTPSConnection fails to download >2GiB
data.
- rcompleter does not call getattr() on property objects to
avoid the side-effect of evaluating the corresponding
method.
- weakref.proxy objects referencing non-iterators now raise
TypeError rather than dereferencing the null tp_iternext
slot and crashing.
- The implementation of collections.abc.Set._hash() now
matches that of frozenset.__hash__().
- Fixed issue in compileall.compile_file() when sys.stdout is
redirected. Patch by Stefan Hölzl.
- Give priority to using the current class constructor in
inspect.signature(). Patch by Weipeng Hong.
- Fix memory leak in _tkinter._flatten() if it is called with
a sequence or set, but not list or tuple.
- Update shutil.copyfile() to raise FileNotFoundError instead
of confusing IsADirectoryError when a path ending with
a os.path.sep does not exist; shutil.copy() and
shutil.copy2() are also affected.
- handle StopIteration subclass raised from
@contextlib.contextmanager generator
- Make the implementation consistency of indexOf() between
C and Python versions. Patch by Dong-hee Na.
- Fixes TypedDict to work with typing.get_type_hints() and
postponed evaluation of annotations across modules.
- Fix bug with pdb’s handling of import error due to
a package which does not have a __main__ module
- Fixed an exception thrown while parsing a malformed
multipart email by email.message.EmailMessage.
- pathlib.PureWindowsPath.is_reserved() now identifies
a greater range of reserved filenames, including those with
trailing spaces or colons.
- Handle exceptions from parsing the arg of pdb’s run/restart
command.
- The sqlite3 context manager now performs a rollback (thus
releasing the database lock) if commit failed. Patch by
Luca Citi and Erlend E. Aasland.
- Improved string handling for sqlite3 user-defined functions
and aggregates:
- It is now possible to pass strings with embedded null
characters to UDFs
- Conversion failures now correctly raise MemoryError
- Patch by Erlend E. Aasland.
- Handle RecursionError in TracebackException’s constructor,
so that long exceptions chains are truncated instead of
causing traceback formatting to fail.
- Fix email.message.EmailMessage.set_content() when called
with binary data and 7bit content transfer encoding.
- The compresslevel and preset keyword arguments of
tarfile.open() are now both documented and tested.
- Fixed a Y2k38 bug in the compileall module where it would
fail to compile files with a modification time after the
year 2038.
- Fix test___all__ on platforms lacking a shared memory
implementation.
- Pass multiprocessing BaseProxy argument manager_owned
through AutoProxy.
- email.utils.getaddresses() now accepts email.header.Header
objects along with string values. Patch by Zackery Spytz.
- lib2to3 now recognizes async generators everywhere.
- Fix TypeError when required subparsers without dest do not
receive arguments. Patch by Anthony Sottile.
- Documentation
- Removed the othergui.rst file, any references to it, and
the list of GUI frameworks in the FAQ. In their place I’ve
added links to the Python Wiki page on GUI frameworks.
- Update the definition of __future__ in the glossary by
replacing the confusing word “pseudo-module” with a more
accurate description.
- Add typical examples to os.path.splitext docs
- Clarify that shutil.make_archive() is not thread-safe due
to reliance on changing the current working directory.
- Update of three expired hyperlinks in
Doc/distributing/index.rst: “Project structure”, “Building
and packaging the project”, and “Uploading the project to
the Python Packaging Index”.
- Updated the docstring and docs of filecmp.cmp() to be more
accurate and less confusing especially in respect to
shallow arg.
- Match the docstring and python implementation of countOf()
to the behavior of its c implementation.
- List all kwargs for textwrap.wrap(), textwrap.fill(), and
textwrap.shorten(). Now, there are nav links to attributes
of TextWrap, which makes navigation much easier while
minimizing duplication in the documentation.
- Clarify that atexit uses equality comparisons internally.
- Documentation of csv.Dialect is more descriptive.
- Fix documentation for the return type of
sysconfig.get_path().
- Add a “Security Considerations” index which links to
standard library modules that have explicitly documented
security considerations.
- Remove the unqualified claim that tkinter is threadsafe. It
has not been true for several years and likely never was.
An explanation of what is true may be added later, after
more discussion, and possibly after patching _tkinter.c,
- Tests
- Add calls of gc.collect() in tests to support PyPy.
- Made tests relying on the _asyncio C extension module
optional to allow running on alternative Python
implementations. Patch by Serhiy Storchaka.
- Fix auto history tests of test_readline: sometimes, the
newline character is not written at the end, so don’t
expect it in the output.
- Add ability to wholesale silence DeprecationWarnings while
running the regression test suite.
- Notify users running test_decimal regression tests on macOS
of potential harmless “malloc can’t allocate region”
messages spewed by test_decimal.
- Fixed floating point precision issue in turtle tests.
- Regression tests, when run with -w, are now re-running only
the affected test methods instead of re-running the entire
test file.
- Add test for nested queues when using multiprocessing
shared objects AutoProxy[Queue] inside ListProxy and
DictProxy - Add decimal.patch to add building with --with-system-libmpdec
option (bsc#1189356). - test_faulthandler is still problematic under qemu linux-user emulation,
disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
run during profiling - Update to 3.9.6:
* Security
- bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
avoids infinitely reading potential HTTP headers after
a 100 Continue status response from the server.
* Core and Builtins
- bpo-44168: Fix error message in the parser involving keyword
arguments with invalid expressions. Patch by Pablo Galindo
- bpo-44114: Fix incorrect dictkeys_reversed and
dictitems_reversed function signatures in C code, which broke
webassembly builds.
- bpo-44070: No longer eagerly makes import filenames absolute,
except for extension modules, which was introduced in 3.9.5.
- bpo-28146: Fix a confusing error message in str.format().
- bpo-11105: When compiling ast.AST objects with recursive
references through compile(), the interpreter doesn’t crash
anymore instead it raises a RecursionError.
* Library
- bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
301 (Moved Permanently) for a directory path not ending with
/, add a Content-Length: 0 header. This improves the behavior
for certain clients.
- bpo-43776: When subprocess.Popen args are provided as a
string or as pathlib.Path, the Popen instance repr now shows
the right thing.
- bpo-43318: Fix a bug where pdb does not always echo cleared
breakpoints.
- bpo-43295: datetime.datetime.strptime() now raises ValueError
instead of IndexError when matching 'z' with the %z format
specifier.
- bpo-37022: pdb now displays exceptions from repr() with its p
and pp commands.
* IDLE
- bpo-33962: Move the indent space setting from the Font tab to
the new Windows tab. Patch by Mark Roseman and Terry Jan
Reedy.
- bpo-40468: Split the settings dialog General tab into Windows
and Shell/ED tabs. Move help sources, which extend the Help
menu, to the Extensions tab. Make space for new options and
shorten the dialog. The latter makes the dialog better fit
small screens.
- bpo-41611: Avoid uncaught exceptions in
AutoCompleteWindow.winconfig_event().
- bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
macOS.
* Tools/Demos
- bpo-44074: Make patchcheck automatically detect the correct
base branch name (previously it was hardcoded to ‘master’)
- Upstreamed patches were removed:
- bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
- subprocess-raise-timeout.patch - Use versioned python-Sphinx to avoid dependency on other
version of Python (bsc#1183858). - Add bpo44426-complex-keyword-sphinx.patch allowing generating
documentation with Sphinx 4 (bpo#44426). - Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
test on SLE-15. - allow build with Sphinx >= 3.x - Exclude test_capi on Leap (test fails there) - Stop providing "python" symbol (bsc#1185588), which means
python2 currently. - Update to 3.9.5:
* Security
- bpo-43434: Creating a sqlite3.Connection object now also
produces a sqlite3.connect auditing event. Previously this
event was only produced by sqlite3.connect() calls. Patch
by Erlend E. Aasland.
- bpo-43882: The presence of newline or tab characters in
parts of a URL could allow some forms of attacks.
- Following the controlling specification for URLs defined by
WHATWG urllib.parse() now removes ASCII newlines and tabs
from URLs, preventing such attacks.
- bpo-43472: Ensures interpreter-level audit hooks receive
the cpython.PyInterpreterState_New event when called
through the _xxsubinterpreters module.
- bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
no longer accepts any leading zeros in IPv4 address
strings. Leading zeros are ambiguous and interpreted as
octal notation by some libraries. For example the legacy
function socket.inet_aton() treats leading zeros as octal
notatation. glibc implementation of modern inet_pton() does
not accept any leading zeros. For a while the ipaddress
module used to accept ambiguous leading zeros.
- bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
Expression Denial of Service (ReDoS) vulnerability in
urllib.request.AbstractBasicAuthHandler. The
ReDoS-vulnerable regex has quadratic worst-case complexity
and it allows cause a denial of service when identifying
crafted invalid RFCs. This ReDoS issue is on the client
side and needs remote attackers to control the HTTP server.
- bpo-42800: Audit hooks are now fired for frame.f_code,
traceback.tb_frame, and generator code/frame attribute
access.
* Core and Builtins
- bpo-43105: Importlib now resolves relative paths when
creating module spec objects from file locations.
- bpo-42924: Fix bytearray repetition incorrectly copying
data from the start of the buffer, even if the data is
offset within the buffer (e.g. after reassigning a slice at
the start of the bytearray to a shorter byte string).
* Library
- bpo-43993: Update bundled pip to 21.1.1.
- bpo-43937: Fixed the turtle module working with non-default
root window.
- bpo-43930: Update bundled pip to 21.1 and setuptools to
56.0.0
- bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
returns a consistent error message when cadata contains no
valid certificate.
- bpo-43607: urllib can now convert Windows paths with \\?\
prefixes into URL paths.
- bpo-43284: platform.win32_ver derives the windows version
from sys.getwindowsversion().platform_version which in turn
derives the version from kernel32.dll (which can be of
a different version than Windows itself). Therefore change
the platform.win32_ver to determine the version using the
platform module’s _syscmd_ver private function to return an
accurate version.
- bpo-42248: [Enum] ensure exceptions raised in _missing__
are released
- bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
to suppress deprecation warnings. Python requires OpenSSL
1.1.1 APIs.
- bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
(OpenSSL 3.0.0)
- bpo-43789: OpenSSL 3.0.0: Don’t call the password callback
function a second time when first call has signaled an
error condition.
- bpo-43788: The header files for ssl error codes are now
OpenSSL version-specific. Exceptions will now show correct
reason and library codes. The make_ssl_data.py script has
been rewritten to use OpenSSL’s text file with error codes.
- bpo-43655: tkinter dialog windows are now recognized as
dialogs by window managers on macOS and X Window.
- bpo-43534: turtle.textinput() and turtle.numinput() create
now a transient window working on behalf of the canvas
window.
- bpo-43522: Fix problem with hostname_checks_common_name.
OpenSSL does not copy hostflags from struct SSL_CTX to
struct SSL.
- bpo-42967: Allow bytes separator argument in
urllib.parse.parse_qs and urllib.parse.parse_qsl when
parsing str query strings. Previously, this raised
a TypeError.
- bpo-43176: Fixed processing of a dataclass that inherits
from a frozen dataclass with no fields. It is now correctly
detected as an error.
- bpo-41735: Fix thread locks in zlib module may go wrong in
rare case. Patch by Ma Lin.
- bpo-36470: Fix dataclasses with InitVars and replace().
Patch by Claudiu Popa.
- bpo-32745: Fix a regression in the handling of ctypes’
ctypes.c_wchar_p type: embedded null characters would cause
a ValueError to be raised. Patch by Zackery Spytz.
* Documentation
- bpo-43959: The documentation on the PyContextVar C-API was
clarified.
- bpo-43938: Update dataclasses documentation to express that
FrozenInstanceError is derived from AttributeError.
- bpo-43755: Update documentation to reflect that
unparenthesized lambda expressions can no longer be the
expression part in an if clause in comprehensions and
generator expressions since Python 3.9.
- bpo-43739: Fixing the example code in
Doc/extending/extending.rst to declare and initialize the
pmodule variable to be of the right type.
* Tests
- bpo-43961: Fix
test_logging.test_namer_rotator_inheritance() on Windows:
use os.replace() rather than os.rename(). Patch by Victor
Stinner.
- bpo-43842: Fix a race condition in the SMTP test of
test_logging. Don’t close a file descriptor (socket) from
a different thread while asyncore.loop() is polling the
file descriptor. Patch by Victor Stinner.
- bpo-43811: Tests multiple OpenSSL versions on GitHub
Actions. Use ccache to speed up testing.
- bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
protocols TLS 1.0 and 1.1. Tests are failing with
TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
- bpo-31046_ensurepip_honours_prefix.patch
- python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
Bluetooth. - Make sure to close the import_failed.map file after the exception
has been raised in order to avoid ResourceWarnings when the
failing import is part of a try...except block. - Update to 3.9.4:
- bpo#43710: Reverted the fix for https://bugs.python.org/issue42500
as it changed the PyThreadState struct size and broke the 3.9.x ABI
in the 3.9.3 release (visible on 32-bit platforms using binaries
compiled using an earlier version of Python 3.9.x headers).
- bpo#26053: Fixed bug where the pdb interactive run command echoed
the args from the shell command line, even if those have been
overridden at the pdb prompt.
- bpo#42988 (bsc#1183374) CVE-2021-3426: Remove the getfile
feature of the pydoc module which could be abused to read
arbitrary files on the disk (directory traversal
vulnerability). Moreover, even source code of Python modules
can contain sensitive data like passwords. Vulnerability
reported by David Schwörer.
- bpo#43285: ftplib no longer trusts the IP address value
returned from the server in response to the PASV command by
default. This prevents a malicious FTP server from using the
response to probe IPv4 address and port combinations on the
client network. Code that requires the former vulnerable
behavior may set a trust_server_pasv_ipv4_address attribute
on their ftplib.FTP instances to True to re-enable it.
- bpo#43439: Add audit hooks for gc.get_objects(),
gc.get_referrers() and gc.get_referents(). Patch by Pablo
Galindo.
- bpo#43660: Fix crash that happens when replacing sys.stderr
with a callable that can remove the object while an exception
is being printed. Patch by Pablo Galindo.
- bpo#43555: Report the column offset for SyntaxError for
invalid line continuation characters. Patch by Pablo Galindo.
- bpo#43517: Fix misdetection of circular imports when using
from pkg.mod import attr, which caused false positives in
non-trivial multi-threaded code.
- bpo#35883: Python no longer fails at startup with a fatal
error if a command line argument contains an invalid Unicode
character. The Py_DecodeLocale() function now escapes byte
sequences which would be decoded as Unicode characters
outside the [U+0000; U+10ffff] range.
- bpo#43406: Fix a possible race condition where
PyErr_CheckSignals tries to execute a non-Python signal
handler.
- bpo#42500: Improve handling of exceptions near recursion
limit. Converts a number of Fatal Errors in RecursionErrors.
- bpo#43433: xmlrpc.client.ServerProxy no longer ignores query
and fragment in the URL of the server.
- bpo#35930: Raising an exception raised in a “future” instance
will create reference cycles.
- bpo#43577: Fix deadlock when using ssl.SSLContext debug
callback with ssl.SSLContext.sni_callback().
- bpo#43521: ast.unparse can now render NaNs and empty sets.
- bpo#43423: subprocess.communicate() no longer raises an
IndexError when there is an empty stdout or stderr IO buffer
during a timeout on Windows.
- bpo#27820: Fixed long-standing bug of smtplib.SMTP where
doing AUTH LOGIN with initial_response_ok=False will fail.
The cause is that SMTP.auth_login _always_ returns a password
if provided with a challenge string, thus non-compliant with
the standard for AUTH LOGIN. Also fixes bug with the test for
smtpd.
- bpo#43332: Improves the networking efficiency of http.client
when using a proxy via set_tunnel(). Fewer small send calls
are made during connection setup.
- bpo#43399: Fix ElementTree.extend not working on iterators
when using the Python implementation
- bpo#43316: The python -m gzip command line application now
properly fails when detecting an unsupported extension. It
exits with a non-zero exit code and prints an error message
to stderr.
- bpo#43260: Fix TextIOWrapper can not flush internal buffer
forever after very large text is written.
- bpo#42782: Fail fast in shutil.move() to avoid creating
destination directories on failure.
- bpo#37193: Fixed memory leak in socketserver.ThreadingMixIn
introduced in Python 3.7.
- bpo#43199: Answer “Why is there no goto?” in the Design and
History FAQ.
- bpo#43407: Clarified that a result from time.monotonic(),
time.perf_counter(), time.process_time(), or
time.thread_time() can be compared with the result from any
following call to the same function - not just the next
immediate call.
- bpo#27646: Clarify that ‘yield from ’ works with any
iterable, not just iterators.
- bpo#36346: Update some deprecated unicode APIs which are
documented as “will be removed in 4.0” to “3.12”. See PEP 623
for detail.
- bpo#37945: Fix test_getsetlocale_issue1813() of test_locale:
skip the test if setlocale() fails. Patch by Victor Stinner.
- bpo#41561: Add workaround for Ubuntu’s custom OpenSSL
security level policy.
- bpo#43288: Fix test_importlib to correctly skip Unicode file
tests if the fileystem does not support them.
- bpo#43617: Improve configure.ac: Check for presence of
autoconf-archive package and remove our copies of M4 macros.
- bpo#42225: Document that IDLE can fail on Unix either from
misconfigured IP masquerage rules or failure displaying
complex colored (non-ascii) characters.
- bpo#43283: Document why printing to IDLE’s Shell is often
slower than printing to a system terminal and that it can be
made faster by pre-formatting a single string before
printing. - Update to 3.9.2:
- bpo#42938 (bsc#1181126): Avoid static buffers when computing
the repr of ctypes.c_double and ctypes.c_longdouble
values. This issue was assigned CVE-2021-3177.
- bpo#42967 (bsc#1182379): Fix web cache poisoning
vulnerability by defaulting the query args separator to &,
and allowing the user to choose a custom separator. This
issue was assigned CVE-2021-23336.
- Upstreamed patches were removed:
- CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch
- bsc1167501-invalid-alignment.patch
- skip_random_failing_tests.patch
- CVE-2019-5010-null-defer-x509-cert-DOS.patch - Add Obsoletes for python3-base when primary interpreter is set to
properly replace it during upgrades. (bsc#1181324) - Update to 3.9.1:
Security bugs:
- Prevented potential DoS attack via CPU and RAM exhaustion
when processing malformed Apple Property List files in binary
format.
- The plistlib module no longer accepts entity declarations in
XML plist files to avoid XML vulnerabilities. This should not
affect users as entity declarations are not used in regular
plist files.
- Add volatile to the accumulator variable in
hmac.compare_digest, making constant-time-defeating
optimizations less likely.
Core and Builtins
- Allow assignment expressions in set literals and set
comprehensions as per PEP 572. Patch by Pablo Galindo.
- Fix a regression introduced by the new parser, where an
unparenthesized walrus operator was not allowed within
generator expressions.
- types.GenericAlias objects can now be the targets of
weakrefs.
- Fixed a bug in the PEG parser that was causing crashes in
debug mode. Now errors are checked in left-recursive rules to
avoid cases where such errors do not get handled in time and
appear as long-distance crashes in other places.
- Fixed a possible crash in the PEG parser when checking for
the ‘!=’ token in the barry_as_flufl rule. Patch by Pablo
Galindo.
- Fix handling of errors during creation of PyFunctionObject,
which resulted in operations on uninitialized memory. Patch
by Yonatan Goldschmidt.
- Fix a bug in the parser, where a curly brace following
a primary didn’t fail immediately. This led to invalid
expressions like a {b} to throw a SyntaxError with a wrong
offset, or invalid expressions ending with a curly brace like
a { to not fail immediately in the REPL.
- Fix possible buffer overflow in the new parser when checking
for continuation lines. Patch by Pablo Galindo.
- Run the parser two times. On the first run, disable all the
rules that only generate better error messages to gain
performance. If there’s a parse failure, run the parser
a second time with those enabled.
- Document the default implementation of object.__eq__.
- Fix peephole optimizer misoptimize conditional jump
+ JUMP_IF_NOT_EXC_MATCH pair.
- The garbage collector now tracks all user-defined classes.
Patch by Brandt Bucher.
- Fixed potential issues with removing not completely
initialized module from sys.modules when import fails.
- Star-unpacking is now allowed for with item’s targets in the
PEG parser.
- Fixed stack overflow in issubclass() and isinstance() when
getting the __bases__ attribute leads to infinite recursion.
- When loading a native module and a load failure occurs,
prevent a possible UnicodeDecodeError when not running in
a UTF-8 locale by decoding the load error message using the
current locale’s encoding.
- Correctly count control blocks in ‘except’ in compiler.
Ensures that a syntax error, rather a fatal error, occurs for
deeply nested, named exception handlers.
Library
- types.GenericAlias will now raise a TypeError when attempting
to initialize with a keyword argument. Previously, this would
cause the interpreter to crash if the interpreter was
compiled with debug symbols. This does not affect
interpreters compiled for release. Patch by Ken Jin.
- CGIHTTPRequestHandler.run_cgi() HTTP_ACCEPT improperly
parsed. Replace the special purpose getallmatchingheaders
with generic get_all method and add relevant tests.
- inspect.findsource() now raises OSError instead of IndexError
when co_lineno of a code object is greater than the file
length. This can happen, for example, when a file is edited
after it was imported. PR by Irit Katriel.
- Fix handling of trailing comments by inspect.getsource().
- ChainMap.__iter__ no longer calls __getitem__ on underlying
maps
- TracebackException no longer holds a reference to the
exception’s traceback object. Consequently, instances of
TracebackException for equivalent but non-equal exceptions
now compare as equal.
- We fixed an issue in pickle.whichmodule in which importing
multiprocessing could change the how pickle identifies which
module an object belongs to, potentially breaking the
unpickling of those objects.
- Clarify the error message for asyncio.IncompleteReadError
when expected is None.
- Extracting a symlink from a tarball should succeed and
overwrite the symlink if it already exists. The fix is to
remove the existing file or symlink before extraction. Based
on patch by Chris AtLee, Jeffrey Kintscher, and Senthil
Kumaran.
- Fixed tkinter.ttk.Style.map(). The function accepts now the
representation of the default state as empty sequence (as
returned by Style.map()). The structure of the result is now
the same on all platform and does not depend on the value of
wantobjects.
- Fix various issues with typing.Literal parameter handling
(flatten, deduplicate, use type to cache key). Patch provided
by Yurii Karabas.
- Fix the threading.Thread class at fork: do nothing if the
thread is already stopped (ex: fork called at Python exit).
Previously, an error was logged in the child process.
- The onerror callback from shutil.rmtree now receives correct
function when os.open fails.
- Fix os.sendfile() on illumos.
- Fixed writing binary Plist files larger than 4 GiB.
- The repr() of typing types containing Generic Alias Types
previously did not show the parameterized types in the
GenericAlias. They have now been changed to do so.
- webbrowser: Ignore NotADirectoryError when calling
xdg-settings.
- binhex.binhex() consisently writes macOS 9 line endings.
- Fix a stack overflow error for asyncio Task or Future repr().
- The overflow occurs under some circumstances when a Task or
Future recursively returns itself.
- Fix memory leak in subprocess.Popen() in case an uid (gid)
specified in user (group, extra_groups) overflows uid_t
(gid_t).
- Improve asyncio.wait function to create the futures set just
one time.
- InvalidFileException and RecursionError are now the only
errors caused by loading malformed binary Plist file
(previously ValueError and TypeError could be raised in some
specific cases).
- Pickling heap types implemented in C with protocols 0 and
1 raises now an error instead of producing incorrect data.
- plistlib: fix parsing XML plists with hexadecimal integer
values
- Fix an incorrectly formatted error from
_codecs.charmap_decode() when called with a mapped value
outside the range of valid Unicode code points. PR by Max
Bernstein.
- Fix pickling pure Python datetime.time subclasses. Patch by
Dean Inwood.
- Fixed a bug that was causing ctypes.util.find_library() to
return None when triying to locate a library in an
environment when gcc>=9 is available and ldconfig is not.
Patch by Pablo Galindo
- C14N 2.0 serialisation in xml.etree.ElementTree failed for
unprefixed attributes when a default namespace was defined.
- Fix a bug in the symtable module that was causing
module-scope global variables to not be reported as both
local and global. Patch by Pablo Galindo.
- str() for the type attribute of the tkinter.Event object
always returns now the numeric code returned by Tk instead of
the name of the event type.
- fix tkinter.EventType Enum so all members are strings, and
none are tuples
- Fix SQLite3 segfault when backing up closed database. Patch
contributed by Peter David McCormick.
- Fix the tarfile module to write only basename of TAR file to
GZIP compression header.
- Allow ctypes.wintypes to be imported on non-Windows systems.
- shutil.which() now ignores empty entries in PATHEXT instead
of treating them as a match.
- Fix time-of-check/time-of-action issue in
subprocess.Popen.send_signal.
- Fix --outfile for cProfile / profile not writing the output
file in the original directory when the program being
profiled changes the working directory. PR by Anthony
Sottile.
- ZipFile truncates files to avoid corruption when a shorter
comment is provided in append (“a”) mode. Patch by Jan Mazur.
- Fixed KeyError exception when flattening an email to a string
attempts to replace a non-existent Content-Transfer-Encoding
header.
Documentation
- Fix the URL for the IMAP protocol documents.
- Document __format__ functionality for IP addresses.
- Clarify that subscription expressions are also valid for
certain classes and types in the standard library, and for
user-defined classes and types if the classmethod
__class_getitem__() is provided.
- Documented generic alias type and types.GenericAlias. Also
added an entry in glossary for generic types.
- In Programming FAQ “Sequences (Tuples/Lists)” section, add
“How do you remove multiple items from a list”.
- Fix RemovedInSphinx40Warning when building the documentation.
Patch by Dong-hee Na.
- Update the refcounts info of PyType_FromModuleAndSpec.
- Fix tarfile’s extractfile documentation
- Document some restrictions on the default string
representations of numeric classes.
Tests
- Reenable test_gdb on gdb 9.2 and newer:
https://bugzilla.redhat.com/show_bug.cgi?id=1866884 bug is
fixed in gdb 10.1.
- Fix test_asyncio.test_call_later() race condition: don’t
measure asyncio performance in the call_later() unit test.
The test failed randomly on the CI.
- Include _testinternalcapi module in Windows installer for
test suite
- Fix test_logging.test_race_between_set_target_and_flush():
the test now waits until all threads complete to avoid
leaking running threads.
- Avoid a test failure in test_lib2to3 if the module has
already imported at the time the test executes. Patch by
Pablo Galindo.
- Tests for CJK codecs no longer call eval() on content
received via HTTP.
- Fix test_site.test_license_exists_at_url(): call
urllib.request.urlcleanup() to reset the global
urllib.request._opener. Patch by Victor Stinner.
- test_ssl: skip test_min_max_version_mismatch when TLS 1.0 is
not available
- Add tests for SIGINT handling in the runpy module.
- Fixed a failure in test_tk.test_widgets.ScaleTest happening
when executing the test with Tk 8.6.10.
Build
- Fix a race condition in “make regen-all” when make -jN option
is used to run jobs in parallel. The clinic.py script now
only use atomic write to write files. Moveover, generated
files are now left unchanged if the content does not change,
to not change the file modification time.
- Update Py_UNREACHABLE to use __builtin_unreachable() if only
the compiler is able to use it. Patch by Dong-hee Na.
- Addressed three compiler warnings found by undefined behavior
sanitizer (ubsan).
IDLE
- Fix reporting offset of the RE error in searchengine.
- Get docstrings for IDLE calltips more often by using
inspect.getdoc.
- Mostly finish using ttk widgets, mainly for editor, settings,
and searches. Some patches by Mark Roseman.
- Use ‘IDLE Shell’ as shell title
- Rewrite the Calltips doc section.
- In calltips, stop reminding that ‘/’ marks the end of
positional-only arguments.
- Typing opening and closing parentheses inside the parentheses
of a function call will no longer cause unnecessary
“flashing” off and on of an existing open call-tip, e.g. when
typed in a string literal.
C API
- Fix potential crash in deallocating method objects when
dynamically allocated PyMethodDef’s lifetime is managed
through the self argument of a PyCFunction.
- Py_FileSystemDefaultEncodeErrors and Py_UTF8Mode are
available again in limited API.
- Readjustet and reapplied patches:
- CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch
- bpo-31046_ensurepip_honours_prefix.patch
- python-3.3.0b1-fix_date_time_compiler.patch
- skip_random_failing_tests.patch
- sphinx-update-removed-function.patch - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
_ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package.
Unnecessary dependency. - Make python39-doc building again
- Add no-skipif-doctests.patch, because SLE-15 version of Sphinx
doesn't know about skipif directive in doctests. - Update sphinx-update-removed-function.patch patch to the latest
version in python36. - Last try before this results in an editwar:
* remove importlib_resources and importlib-metadata
provides/obsoletes
* import importlib_resources is not the same as
import importlib.resources, same for metadata
* The backport packages from PyPI needed for older flavors are
specified as such for setuptools or in pyproject.toml. If a
package requires them they typically add them with a python
version qualifier and the packages have their own version
numbers. - Add patch sphinx-update-removed-function.patch to no longer call
a now removed function and to make documentation build independent of
the Sphinx version (bsc#1179630, gh#python/cpython#13236). - Don't require packages which break build on SLE-15 although we really
don't need them (python3-python-docs-theme and
python3-sphinxcontrib-qthelp). - Fix build with RPM 4.16: error: bare words are no longer
supported, please use "...": x86 == ppc. - Update to the final version 3.9.0:
Complete changelog with all (many)
changes from previous version is on
https://docs.python.org/release/3.9.0/whatsnew/3.9.html
Changes from the previous RC versions (not that many) are on
https://docs.python.org/release/3.9.0/whatsnew/changelog.html#changelog - Buildrequire timezone only for general flavor. It's used in this
flavor for the test suite. - Update to 3.9.0rc1:
* Core and Builtins
- bpo-38156: Handle interrupts that come after EOF
correctly in PyOS_StdioReadline.
* Library
- bpo-41497: Fix potential UnicodeDecodeError in dis
module.
- bpo-41490: Update ensurepip to install pip 20.2.1 and
setuptools 49.2.1.
- bpo-41467: On Windows, fix asyncio recv_into() return
value when the socket/pipe is closed (BrokenPipeError):
return 0 rather than an empty byte string (b'').
- bpo-41425: Make tkinter doc example runnable.
- bpo-41384: Raise TclError instead of TypeError when an
unknown option is passed to tkinter.OptionMenu.
- bpo-38731: Fix NameError in command-line interface of
py_compile.
- bpo-41317: Use add_done_callback() in
asyncio.loop.sock_accept() to unsubscribe reader early on
cancellation.
- bpo-41364: Reduce import overhead of uuid.
- bpo-41341: Recursive evaluation of typing.ForwardRef in
get_type_hints.
- bpo-41182: selector: use DefaultSelector based upon
implementation
- bpo-40726: Handle cases where the end_lineno is None on
ast.increment_lineno().
* Documentation
- bpo-41045: Add documentation for debug feature of
f-strings.
- bpo-41314: Changed the release when from __future__
import annotations becomes the default from 4.0 to 3.10
(following a change in PEP 563).
* Windows
- bpo-41492: Fixes the description that appears in UAC
prompts.
- bpo-40948: Improve post-install message to direct people
to the “py” command.
- bpo-41412: The installer will now fail to install on
Windows 7 and Windows 8. Further, the UCRT dependency is
now always downloaded on demand.
- bpo-40741: Update Windows release to include SQLite
3.32.3.
* IDLE
- bpo-41468: Improve IDLE run crash error message (which
users should never see).
- bpo-41373: Save files loaded with no line ending, as when
blank, or different line endings, by setting its line
ending to the system default. Fix regression in 3.8.4 and
3.9.0b4. - Synchronize formatting and fixes with python38. - Increase testsuite timeout to account for super long running
test_peg_generator - Removed CVE-2019-20907_tarfile-inf-loop.patch: fixed in upstream
- Removed recursion.tar: contained in upstream
- Update to 3.9.0b5:
- bpo-41304: Fixes python3x._pth being ignored on Windows, caused
by the fix for bpo-29778 (CVE-2020-15801).
- bpo-41162: Audit hooks are now cleared later during
finalization to avoid missing events.
- bpo-29778: Ensure python3.dll is loaded from correct locations
when Python is embedded (CVE-2020-15523).
- bpo-39603: Prevent http header injection by rejecting control
characters in http.client.putrequest(…).
- bpo-41295: Resolve a regression in CPython 3.8.4 where defining
“__setattr__” in a multi-inheritance setup and
calling up the hierarchy chain could fail if builtins/extension
types were involved in the base types.
- bpo-41247: Always cache the running loop holder when running
asyncio.set_running_loop.
- bpo-41252: Fix incorrect refcounting in
_ssl.c’s _servername_callback().
- bpo-41215: Use non-NULL default values in the PEG parser
keyword list to overcome a bug that was '
preventing Python from being properly compiled when using the
XLC compiler. Patch by Pablo Galindo.
- bpo-41218: Python 3.8.3 had a regression where compiling with
ast.PyCF_ALLOW_TOP_LEVEL_AWAIT would
aggressively mark list comprehension with CO_COROUTINE. Now only
list comprehension making use of async/await will tagged as so.
- bpo-41175: Guard against a NULL pointer dereference within
bytearrayobject triggered by the bytearray() + bytearray() operation.
- bpo-39960: The “hackcheck” that prevents sneaking around a type’s
__setattr__() by calling the superclass method was
rewritten to allow C implemented heap types.
- bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the
C implementation raises now UnpicklingError instead of crashing.
- bpo-39017: Avoid infinite loop when reading specially crafted
TAR files using the tarfile module (CVE-2019-20907, bsc#1174091).
- bpo-41235: Fix the error handling in ssl.SSLContext.load_dh_params().
- bpo-41207: In distutils.spawn, restore expectation that
DistutilsExecError is raised when the command is not found.
- bpo-39168: Remove the __new__ method of typing.Generic.
- bpo-41194: Fix a crash in the _ast module: it can no longer be
loaded more than once. It now uses a global state rather than a module state.
- bpo-39384: Fixed email.contentmanager to allow set_content() to set a
null string.
- bpo-41300: Save files with non-ascii chars.
Fix regression released in 3.9.0b4 and 3.8.4.
- bpo-37765: Add keywords to module name completion list.
Rewrite Completions section of IDLE doc.
- bpo-40170: Revert PyType_HasFeature() change: it reads
again directly the PyTypeObject.tp_flags
member when the limited C API is not used, rather than always calling
PyType_GetFlags() which hides implementation details. - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
(CVE-2019-20907, bpo#39017) avoiding possible infinite loop
in specifically crafted tarball.
Add recursion.tar as a testing tarball for the patch. - Changed bpo-31046_ensurepip_honours_prefix.patch to include fix from py3.8 - Spec file fixes
- Re-added subprocess-raise-timeout.patch: now compatible
- Removed bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch: contained in upstream - Fix minor issues found in the staging. - Do not set ourselves as primary interpreter - Update to 3.9.0b4:
- PEP 584, Union Operators in dict
- PEP 585, Type Hinting Generics In Standard Collections
- PEP 593, Flexible function and variable annotations
- PEP 602, Python adopts a stable annual release cadence
- PEP 615, Support for the IANA Time Zone Database in the
Standard Library
- PEP 616, String methods to remove prefixes and suffixes
- PEP 617, New PEG parser for CPython
- bpo#38379, garbage collection does not block on resurrected
objects;
- bpo#38692, os.pidfd_open added that allows process
management without races and signals;
- bpo#39926, Unicode support updated to version 13.0.0;
- bpo#1635741, when Python is initialized multiple times in
the same process, it does not leak memory anymore;
- A number of Python builtins (range, tuple, set, frozenset,
list, dict) are now sped up using PEP 590 vectorcall;
- A number of Python modules (_abc, audioop, _bz2, _codecs,
_contextvars, _crypt, _functools, _json, _locale, operator,
resource, time, _weakref) now use multiphase initialization
as defined by PEP 489;
- A number of standard library modules (audioop, ast, grp,
_hashlib, pwd, _posixsubprocess, random, select, struct,
termios, zlib) are now using the stable ABI defined by
PEP 384.
- Remove upstreamed patches:
- F00102-lib64.patch
- SUSE-FEDORA-multilib.patch
- OBS_dev-shm.patch
- subprocess-raise-timeout.patch
- bpo36302-sort-module-sources.patch
- bpo40784-Fix-sqlite3-deterministic-test.patch - Update pre_checkin.sh and regenerate - Convert few dependencies to their pkgconfig counterparts - Remove release requirement on libpython, it is not really needed
to be equal as the abi changes with versions - Add provides python3-bla on all the subpkgs in case we are
primary provider of the functionality - Remove unversioned files from devel subpkg too
- Remove main python3 files from -base based whether we are
primary interpreter or not
- Fix idle to be co-installable
- Add condition to be primary to provide/obsolete python3-*
- Fix doc to build in versioned folder so the pythons can be
installed next to each other - Revert the full versioning of calls on the macros. These
are generic so they should really just call python3 X - For the doc package we can build with generic flavor, we don't
need the our-interpreter based one - Add provides for pytohn3X-typing/etc to allow BR on those still
to work when needed - Change macros.python3 to use full versioned 3.8 instead of just 3
for python interpreter - Reduce some now unused conditionals - Redux the -base dependencies to match up pre-merge layout - Generate baselibs in pre-checkin too - Generate the importlib-failed using pre_checking again
- Add back the information about skipped tests on the pre_checkin
output - Use %python_pkg_name instead of hardcoding python3 where
applicable
- Sort out preamble with spec-cleaner - Calculate required variables instead of relying on their continuous manual update - Fix the -base module build again to generate only the deps
we need - Replace OBS_dev-shm.patch with the upstream PR#20944 - Use the %{python_pkg_name} on more places to allow easier
multiversioning
- Switch to _multibuild approach for easier maintenance of this
package. All is now in one spec file with 3 conditionals:
* bcond_with base
* bcond_with doc
* bcond_with general - add requires python3-base on libpython subpackage (bsc#1167008) - build against Sphinx 2.x until python is compatible with
Sphinx 3.x (see gh#python/cpython#19397, bpo#40204) - Fix build with SQLite 3.32 (bpo#40783)
add bpo40784-Fix-sqlite3-deterministic-test.patch - Update to version 3.8.3:
- Complete list of changes is available at
https://docs.python.org/release/3.8.3/whatsnew/changelog.html#python-3-8-3-final,
but most of them are just bugfixes.
- Removed patch CVE-2020-8492-urllib-ReDoS.patch: contained in upstream - Add #!BuildIgnore: gdk-pixbuf-loader-rsvg to python3 SPEC - Add patch bsc1167501-invalid-alignment.patch
(bsc#1167501, bpo#40052) to fix alignment in abstract.h header file. - Update list of skipped tests for qemu linux-user build, test_setegid
(test.test_os.PosixUidGidTests) is confusing it - Update to 3.8.2:
- Complete list of changes is available at
https://docs.python.org/release/3.8.2/whatsnew/changelog.html#python-3-8-2-final,
but most of them are just bugfixes.
- Updated patches:
- F00102-lib64.patch
- OBS_dev-shm.patch
- SUSE-FEDORA-multilib.patch
- subprocess-raise-timeout.patch - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367) - Add Requires: libpython%{so_version} == %{version}-%{release}
to python3-base to keep both packages always synchronized
(bsc#1162224). - Do not pull in bluez in base again, explain the cycle,
it needs to be solved by bluez maintainer for us by providing
just the headers separately - Reame idle icons to idle3 in order to not conflict with python2
variant of the package
* renamed the icons
* renamed icon load in desktop file - Add importlib_resources provide/obsolete as it is integral
part of the lang since 3.7 release - Add -fno-semantic-interposition as it brings speed up:
https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup - Update to 3.8.1:
- This is mainly bugfix release and no significant changes to
API are expected. The full changelog is available on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1
- Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch,
which is included in the upstream tarball. - Add bpo-31046_ensurepip_honours_prefix.patch which makes
ensurepip to honour the value of $(prefix). Proposed fix for
bpo#31046.. - Move bluez-devel dependency to base as it is needed for
socket.AF_BLUETOOTH and otherwise does not work - Reintroduce QtHelp with the help of the new BR
python-sphinxcontrib-qthelp. - Fix SUSE-FEDORA-multilib.patch, the platform agnostic infix for
library installation is "lib", not "dir". - Move idle subpackage build from python3-base to python3.
appstream-glib required for packaging introduces considerable
extra dependencies and a build loop via rust/librsvg.
- Correct installation of idle IDE icons:
+ idle.png is not the target directory
+ non-GNOME-specific icons belong into icons/hicolor
- Add required Name key to idle3 desktop file - Update to the final release 3.8.0. .
- New Features:
- Assignment expressions
- Positional-only parameters
- Parallel filesystem cache for compiled bytecode files
- Debug build uses the same ABI as release build
- f-strings support = for self-documenting expressions and
debugging
- PEP 578: Python Runtime Audit Hooks
- PEP 587: Python Initialization Configuration
- Vectorcall: a fast calling protocol for CPython
- Pickle protocol 5 with out-of-band data buffers
- New modules:
- importlib.metadata
- Improved modules:
- ast asyncio, builtins, collections, curses, ctypes,
datetime, functools, gc, gettext, gzip, idelib and IDLE,
inspect, io, json.tool, math, mmap, multiprocessing, os,
os.path, pathlib, pickle, plistlib, py_compile, shlex,
shutil, socket, ssl, statistics, sys, tarfile, threading,
tokenize, tkinter, time, typing, unicodedata, unittest,
venv, weakref, xml
- C API improvements
- bdist_winnst command has been deprecated (use bdist_wheel)
- https://docs.python.org/3.8/whatsnew/3.8.html remains rest of
changes including documentation on how to port your programs to
the current version of Python. - Add idle3.appdata.xml and idle3.desktop (originally from
Fedora) to make Idle3 full GUI desktop application.
(bsc#1153830) - Drop intltool from BuildRequires. Doesn't appear to be used. - Add folder version to allow tarball downloads even for beta/rc
releases - Revert patches from Fedora (F00102-lib64.patch and
F00251-change-user-install-location.patch) into their original
prisitine Fedora versions, SUSE-FEDORA-multilib.patch refreshed
accordingly. - Correct quotation of platsubdir in Lib/distutils/command/install.py - Replace python-3.6.0-multilib.patch with two patches from
Fedora (F00102-lib64.patch and
F00251-change-user-install-location.patch), and our own
SUSE-FEDORA-multilib.patch to allow better cooperation with
Fedora and better upstreaming.
- Add OBS_dev-shm.patch fixing bpo#38377 - Pull in just gettext and let solver to sort out between:
gettext-runtime-mini and gettext-runtime - Update to 3.8.0rc1. Overall changes from 3.7:
- PEP 572, Assignment expressions
- PEP 570, Positional-only arguments
- PEP 587, Python Initialization Configuration (improved
embedding)
- PEP 590, Vectorcall: a fast calling protocol for CPython
- PEP 578, Runtime audit hooks
- PEP 574, Pickle protocol 5 with out-of-band data
- Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal
types), and PEP 589 (TypedDict)
- Parallel filesystem cache for compiled bytecode
- Debug builds share ABI as release builds, also the 'm' ABI
tag was removed (irrelevant since 3.4), bpo#36707
- f-strings support a handy = specifier for debugging
- continue is now legal in finally: blocks
- on Windows, the default asyncio event loop is now
ProactorEventLoop
- on macOS, the spawn start method is now used by default in
multiprocessing
- multiprocessing can now use shared memory segments to avoid
pickling costs between processes
- typed_ast is merged back to CPython
- LOAD_GLOBAL is now 40% faster
- pickle now uses Protocol 4 by default, improving performance
- Refreshed patches:
- CVE-2019-5010-null-defer-x509-cert-DOS.patch
- python-3.3.0b1-fix_date_time_compiler.patch
- python-3.6.0-multilib.patch
- subprocess-raise-timeout.patch - Add bpo36302-sort-module-sources.patch (boo#1041090) - Try harder obsoleting importlib-metadata - Update to 3.8.0b4:
Many bugfixes, full list on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-4 - Re-enable test_threading on aarch64 - Remove xrpm from subpackage tk description - Update to 3.8.0b3:
Many bugfixes, full list on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-3
- Patches reapplied:
- python-3.3.0b1-fix_date_time_compiler.patch
- python-3.3.0b1-test-posix_fadvise.patch
- python-3.6.0-multilib.patch
- subprocess-raise-timeout.patch - Add Provides: python3-importlib-metadata - Update to 3.8.0b2:
Many bugfixes, full list on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-2
- Patches included in upstream:
- bpo-37169_PyObject_IsFreed.patch
- Patches reapplied:
- 00251-change-user-install-location.patch
- distutils-reproducible-compile.patch
- python-3.3.0b1-localpath.patch
- python-3.6.0-multilib.patch - Update list of skipped tests for qemu linux-user build
- Don't do profiling in qemu linux-user build - Update to 3.8.0b1 (changes since 3.7.*):
- PEP 572, Assignment expressions
- PEP 570, Positional-only arguments
- PEP 587, Python Initialization Configuration (improved embedding)
- PEP 590, Vectorcall: a fast calling protocol for CPython
- PEP 578, Runtime audit hooks
- PEP 574, Pickle protocol 5 with out-of-band data
- Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal
types), and PEP 589 (TypedDict)
- Parallel filesystem cache for compiled bytecode
- Debug builds share ABI as release builds
- f-strings support a handy = specifier for debugging
- continue is now legal in finally: blocks
- multiprocessing can now use shared memory segments to avoid
pickling costs between processes
- typed_ast is merged back to CPython
- LOAD_GLOBAL is now 40% faster
- pickle now uses Protocol 4 by default, improving performance
- Remove patches which were included in the upstream:
- 00251-change-user-install-location.patch
- 00316-mark-bdist_wininst-unsupported.patch
- CVE-2019-9947-no-ctrl-char-http.patch
- raise_SIGING_not_handled.patch - Set _lto_cflags to nil as the package is using LTO via --enable-lto.
That will prevent to propage LTO for Python modules that are
built in a separate package. - Update to 3.8.0.a3:
- PEP 572: Assignment Expressions.
- Other (mostly small) changes are on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-alpha-3 - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
Address the issue by disallowing URL paths with embedded
whitespace or control characters through into the underlying
http client request. Such potentially malicious header
injection URLs now cause a ValueError to be raised. - Fix metadata of patches.
- Rename boo1071941-make-install-in-sep-loc.patch to
00251-change-user-install-location.patch which is the original
name, so it can be looked up in the Fedora VCS. - Mark distutils bdist_wininst command unsupported
with 00316-mark-bdist_wininst-unsupported.patch
- Remove Windows bdist_wininst executables from runtime package - Update to 3.7.3, which is the maintenance release without any
significant changes in API.
- Updated patches:
- CVE-2019-5010-null-defer-x509-cert-DOS.patch
- distutils-reproducible-compile.patch
- python-3.3.0b1-fix_date_time_compiler.patch
- python-3.6.0-multilib.patch
- raise_SIGING_not_handled.patch - Remove building of Qt Develop help files. - Return distutils-reproducible-compile.patch which is still
missing (still unfinished bpo#29708). - Update to 3.8.0a2:
* List of all (mostly small) changes are on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-alpha-2 - Build nis module again. - Update to 3.8.0a1:
* The most visible change so far is probably the
implementation of PEP 572: Assignment Expressions. For
a detailed list of changes, see:
https://docs.python.org/3.8/whatsnew/changelog.html
* Recover building of nis module properly in python3 package
- Update patches:
* CVE-2019-5010-null-defer-x509-cert-DOS.patch
* python-3.3.0b1-fix_date_time_compiler.patch
* python-3.3.0b1-test-posix_fadvise.patch
* python-3.6.0-multilib.patch
* raise_SIGING_not_handled.patch - Put LICENSE file where it belongs (bsc#1121852) - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
fixing bpo-35746.
An exploitable denial-of-service vulnerability exists in the
X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
A specially crafted X509 certificate can cause a NULL pointer
dereference, resulting in a denial of service. An attacker can
initiate or accept TLS connections using crafted certificates
to trigger this vulnerability. - Do not require full gettext in order to avoid pulling in the
glib2 as a dependency - Update to 3.7.2:
* bugfix release:
https://docs.python.org/3.7/whatsnew/changelog.html#changelog - Stop applying python-3.6.0-multilib-new.patch (which is still
WIP), and apply the old proven python-3.6.0-multilib.patch
instead. - Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros. - Upgrade to 3.7.2rc1:
* bugfix release, for the full list of all changes see
https://docs.python.org/3.7/whatsnew/changelog.html#changelog
- Make run of the test suite more verbose - Write summaries without em dashes. - Remove python-3.3.0b1-curses-panel.patch it is unnecessary anymore.
- Add boo1071941-make-install-in-sep-loc.patch to make pip and
distutils in user environment install into separate location
(boo#1071941)
Set values of prefix and exec_prefix in distutils install
command to /usr/local if executable is /usr/bin/python* and RPM
build is not detected to make pip and distutils install into
separate location
- Remove finally python-3.3.3-skip-distutils-test_sysconfig_module.patch
- Remove distutils-reproducible-compile.patch which doesn't make
really much difference in reproducibility (see
gh#python/cpython#8057 and discussion there). - Rename Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch
to bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch - Add dependency on bluez-devel to build support for Bluetooth
(boo#1109998) - Add devhelp subpackage and split qthelp into another
subpackage. - Remove python-3.0b1-record-rpm.patch and
Python-3.0b1-record-rpm.patch, as they are not needed anymore - Switch off test_threading for optimization builds. - Update to python-3.7.1. This is just a brief overview, complete
changelog available at
https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-1-final:
Library
bpo-34970: Protect tasks weak set manipulation in asyncio.all_tasks()
- Patches already accepted upstream are removed:
* 00307-allow-to-call-Py_Main-after-Py_Initialize.patch
* 00308-tls-1.3.patch
- New patches added:
* Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch
* raise_SIGING_not_handled.patch
- All other patches refreshed via quilt. - Add raise_SIGING_not_handled.patch to fix bsc#1094814 - Add patch to fix importlib return types:
* python3-imp-returntype.patch - bpo-34022 still not completely fixed, so we have to keep
excluding test_cmd_line_script,
test_multiprocessing_main_handling, and test_runpy from the
test suite. - Update to python 3.7.1~rc2:
Core and Builtins
bpo-34879: Fix a possible null pointer dereference in
bytesobject.c. Patch by Zackery Spytz.
bpo-34854: Fixed a crash in compiling string annotations
containing a lambda with a keyword-only argument that
doesn’t have a default value.
bpo-34320: Fix dict(od) didn’t copy iteration order of
OrderedDict.
Library
bpo-34769: Fix for async generators not finalizing when event
loop is in debug mode and garbage collector runs in another
thread.
bpo-34922: Fixed integer overflow in the digest() and
hexdigest() methods for the SHAKE algorithm in the hashlib
module.
bpo-34900: Fixed unittest.TestCase.debug() when used to call
test methods with subtests. Patch by Bruno Oliveira.
bpo-34871: Fix inspect module polluted sys.modules when parsing
__text_signature__ of callable.
bpo-34872: Fix self-cancellation in C implementation of
asyncio.Task
bpo-34819: Use a monotonic clock to compute timeouts in
Executor.map() and as_completed(), in order to prevent
timeouts from deviating when the system clock is adjusted.
bpo-34334: In QueueHandler, clear exc_text from LogRecord to
prevent traceback from being written twice.
bpo-6721: Acquire the logging module’s commonly used internal
locks while fork()ing to avoid deadlocks in the child
process.
bpo-34172: Fix a reference issue inside multiprocessing.Pool
that caused the pool to remain alive if it was deleted
without being closed or terminated explicitly.
Documentation
bpo-32174: chm document displays non-ASCII charaters properly on
some MBCS Windows systems.
Tests
bpo-32962: Fixed test_gdb when Python is compiled with flags
- mcet -fcf-protection -O0.
C API
bpo-34910: Ensure that PyObject_Print() always returns -1 on
error. Patch by Zackery Spytz. - Add Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch to
fix problems with SOURCE_DATE_EPOCH variable (bpo-34022) - Add patch to fix build with tls1.3 supported openssl
* 00308-tls-1.3.patch
- Add patch to fix Py_Main calls after Py_initialize
* 00307-allow-to-call-Py_Main-after-Py_Initialize.patch - Add -fwrapv to OPTS, which is default for python3 anyway
See for example https://github.com/zopefoundation/persistent/issues/86
for bugs which are caused by avoiding it. - Fix ownership of _contextvars, _queue, and _xxtestfuzz - Switch off LTO for distros with older GCC
- Fix %files - Add dependency over libuuid-devel - update to python 3.7.0
Complete overview of changes is available on
https://docs.python.org/3/whatsnew/3.7.html, these are just
highlights:
* PEP 563, postponed evaluation of type annotations.
* async and await are now reserved keywords.
* New library modules:
contextvars: PEP 567 – Context Variables
dataclasses: PEP 557 – Data Classes
importlib.resources
* New built-in features:
PEP 553, the new breakpoint() function.
* Python data model improvements:
PEP 562, customization of access to module attributes.
PEP 560, core support for typing module and generic types.
the insertion-order preservation nature of dict objects
has been declared to be an official part of the Python
language spec.
* Significant improvements in the standard library:
The asyncio module has received new features, significant
usability and performance improvements.
The time module gained support for functions with
nanosecond resolution.
* CPython implementation improvements:
Avoiding the use of ASCII as a default text encoding:
PEP 538, legacy C locale coercion
PEP 540, forced UTF-8 runtime mode
PEP 552, deterministic .pycs
the new development runtime mode
PEP 565, improved DeprecationWarning handling
* C API improvements:
PEP 539, new C API for thread-local storage
* Documentation improvements:
PEP 545, Python documentation translations
New documentation translations: Japanese, French, and Korean.
- drop python3-sorted_tar.patch
- drop 0001-allow-for-reproducible-builds-of-python-packages.patch
- refresh python-3.6.0-multilib-new.patch
- refresh subprocess-raise-timeout.patch
* new C API for thread-local storage
* Deterministic pyc files
* Built-in breakpoint()
* Data Classes
* Core support for typing module and generic types
* Customization of access to module attributes
* Postponed evaluation of annotations
* Time functions with nanosecond resolution
* Improved DeprecationWarning handling
* Context Variables
* Avoiding the use of ASCII as a default text encoding
(PEP 538, legacy C locale coercion and PEP 540, forced UTF-8 runtime mode)
* The insertion-order preservation nature of dict objects is now
an official part of the Python language spec.
* Notable performance improvements in many areas. - disable lto with gcc versions below 7 (results in link failures) - Use faster find subcommand execution strategies. - Do not mention the testsuite disabling in opts as it was moved to
main pkg so base is test-free - As we run in main python package do not generate the pre_checkin
from both now - Move the tests from base to generic package wrt bsc#1088573
* We still fail the whole distro if python3 is not build
* The other archs than x86_64 took couple of hours to unblock
build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
least it is not run twice - update to 3.6.5
* bugfix release
* see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch - Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
subpackage. - ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64 - Add python3-sorted_tar.patch (boo#1081750) - Drop python3-tk and python3-idle recommends to reduce python3
always pulling X stack bsc#1081751 - Add patch to fix glibc 2.27 fail bsc#1079761:
* fix-localeconv-encoding-for-LC_NUMERIC.patch - Update skip_random_failing_tests.patch (for PowerPC)
to avoid test_call_later failure - move XML modules and python3-xml provide to python3-base
(fixes bsc#1077230)
- move ensurepip to base - Add skip_random_failing_tests.patch only for PowerPC - update to 3.6.4
* bugfix release, over a hundred bugs fixed
* see Misc/NEWS for details
- drop upstreamed python3-ncurses-6.0-accessors.patch
- drop PYTHONSTARTUP hooks that cause spurious startup errors
* fixes bsc#1070738
* the relevant feature (REPL history) is now built into Python itself - Install 2to3-%{python_version} executable (override defattr of
the -tools package). 2to3 (unversioned) is a symlink and does not
carry permissions (bsc#1070853). - move 2to3 to python3-tools package - update to 3.6.3
* bugfix release, over a hundred bugs fixed
* see Misc/NEWS for details
- drop upstreamed 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch - drop python-2.7-libffi-aarch64.patch: this patches the intree
copy of libffi which is unused/deleted in the line afterwards
- fix build against system libffi: include flags weren't set
so it actually used the in-tree libffi headers. - Fix test broken with OpenSSL 1.1 (bsc#1042670)
* add 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch - Update RPM group for python documentation. - fix missing %{?armsuffix} - distutils-reproducible-compile.patch: ensure distutils order files
before compiling, which works around bsc#1049186 - Add libnsl-devel build requires for glibc obsoleting libnsl - update to 3.6.2
* bugfix release, over a hundred bugs fixed
* see Misc/NEWS for details
- drop upstreamed test-socket-aead-kernel49.patch
- add Provides: python3-typing (fixes bsc#1050653)
- drop duplicate Provides: python3 - drop db-devel from requirements - Add missing link to python library in config dir (bsc#1040164) - update to 3.6.1
* bugfix release, over a hundred bugs fixed
* never add import location's parent directory to sys.path
* switch to git for version control, build changes related to that
* fix "failed to get random numbers" on old kernels (bsc#1029902)
* several crashes and memory leaks corrected
* f-string are no longer accepted as docstrings - prevent regenerating AST at build-time more robustly
- add "--without profileopt" and "--without testsuite" options to python3-base
to allow short circuiting when working on the package - Add 0001-allow-for-reproducible-builds-of-python-packages.patch
upstream https://github.com/python/cpython/pull/296 - reenable test_socket with AEAD patch (test-socket-aead-kernel49.patch)
- reintroduce %py3_soflags macro (and better named %cpython3_soabi equivalent) - update to 3.6.0
* PEP 498 Formated string literals
* PEP 515 Underscores in numeric literals
* PEP 526 Syntax for variable annotations
* PEP 525 Asynchronous generators
* PEP 530 Asynchronous comprehensions
* PEP 506 New "secrets" module for safe key generation
* less memory consumed by dicts
* dtrace and systemtap support
* improved asyncio module
* better defaults for ssl
* new hashing algorithms in hashlib
* bytecode format changed to allow more optimizations
* "async" and "await" are on track to be reserved words
* StopIteration from generators is deprecated
* support for openssl < 1.0.2 is deprecated
* os.urandom now blocks when getrandom() blocks
* huge number of new features, bugfixes and optimizations
* see https://docs.python.org/3.6/whatsnew/3.6.html for details
- rework multilib patch: drop Python-3.5.0-multilib.patch, implement
upstreamable python-3.6.0-multilib-new.patch
- refresh python-3.3.0b1-localpath.patch, subprocess-raise-timeout.patch
- drop upstreamed Python-3.5.1-fix_lru_cache_copying.patch
- finally drop python-2.6b1-canonicalize2.patch that was not applied in source
and only kept around in case we needed it in the future. (which we don't, as it seems)
- update import_failed map and baselibs
- build ctypes against system libffi
(buildrequire libffi-devel in python3-base)
- add new key to keyring (signed by keys already in keyring)
- introduced common configure section between python3 and python3-base
- moved pyconfig.h and Makefile to devel subpackage as distutils no longer
need it at runtime
- added python-rpm-macros dependency, regenerated macros file, drop macros.python3.py
because it is not used now
- improve summaries and descriptions (fixes bsc#917607)
- enabled Link-Time Optimization, see what happens
- including skipped_tests.py in pre_checkin.sh run
- run specs through spec-cleaner, rearrange sections - move _hashlib and _ssl modules and tests to python3-base
- recommend python3 - Skip test_asyncio under qemu_user_space_build - Add Python-3.5.1-fix_lru_cache_copying.patch
Fix copying the lru_cache() wrapper object.
Fixes deep-copying lru_cache regression, which worked on
previous versions of python but fails on python 3.5.
This fixes a bunch of packages in devel:languages:python3.
See: https://bugs.python.org/issue25447 - Build the docs in .qch format as well - update to 3.5.1
* bugfix-only release, dozens of bugs fixed
- Drop upstreamed Python-3.5.0-_Py_atomic_xxx-symbols.patch
- "Python3" to "Python 3" in summary
* This seems cleaner and fixes and rpmlint warning - Add Python-3.5.0-_Py_atomic_xxx-symbols.patch
This fixes a build error for many packages that use the Python,
C-API.
This patch is already accepted upstream and is slated to appear in
python 3.5.1. - update to 3.5.0
* coroutines with async/await syntax
* matrix multiplication operator `@`
* unpacking generalizations
* new modules `typing` and `zipapp`
* type annotations
* .pyo files replaced by custom suffixes for optimization levels in __pycache__
* support for memory BIO in ssl module
* performance improvements in several modules
* and many more
- removals and behavior changes
* deprecated `__version__` is removed
* support for .pyo files was removed
* system calls are auto-retried on EINTR
* bare generator expressions in function calls now cause SyntaxError
(change "f(x for x in i)" to "f((x for x in i))" to fix)
* removed undocumented `format` member of private `PyMemoryViewObject` struct
* renamed `PyMemAllocator` to `PyMemAllocatorEx`
- redefine %dynlib macro to reflect that modules now have arch+os as part of name
- module `time` is now built-in
- dropped upstreamed patches:
python-3.4.1-fix-faulthandler.patch
python-3.4.3-test-conditional-ssl.patch
python-fix-short-dh.patch (also dropped dh2048.pem required for this patch)
- updated patch Python-3.3.0b2-multilib.patch to Python-3.5.0-multilib.patch
- python-ncurses-6.0-accessors.patch taken from python 2 to fix build failure
with new gcc + ncurses - Add python3-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1. - improve import_failed hook to do the right thing when invoking
missing modules with "python3 -m modulename" (boo#942751) - Build with --enable-loadable-sqlite-extensions to make it works
as geospatial database. - Fix source list for previous change (add dh2048.pem). - dh2048.pem: added generated 2048 dh parameter set to fix
ssl test (bsc#935856)
- python-fix-short-dh.patch: replace the 512 bits dh parameter set
by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856) - ctypes-libffi-aarch64.patch: remove upstreamed patch
- python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for
aarch64 - drop the PDF subpackage
(removes the massive texlive dependency, and most likely nobody is
using the PDFs anyway) - python-3.4.3-test-conditional-ssl.patch - restore tests failing because
test_urllib was unconditionally importing ssl (without really needing it)
- restore functionality of multilib patch
- drop libffi-ppc64le.diff because upstream completely changed everything
yet again (sorry ppc64 folks :| ) - Update to version 3.4.3
- Drop upstreamed CVE-2014-4650-CGIHTTPServer-traversal.patch
(bpo#21766) - Add python-3.4.1-fix-faulthandler.patch, upstream patch for bogus
faulthandler which fails with GCC 5. - asyncio has been merged in python3 main package; provide and
obsolete it
- Remove obsolete AUTHORS section
- Remove redundant %clean section - Only pkgconfig(x11) is required for build, not the whole
set of packages provided by xorg-x11-devel metapackage. - add %python3_version rpm macro for Fedora compatibility
- add missing argument in import_failed, rename Novell Bugzilla
to SUSE Bugzilla ibs-power9-18 1732865628
! " ! $ % $ ' ( ' * + * - . - 0 1 0 3 4 3 6 7 6 9 : 9 < = < ? @ ? B C B E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ 3.9.20 3.9.20 3.9.20-150300.4.58.1 3.9.20-150300.4.58.1
! ! ! ! ! ! ! ! ! " " " " " " " " # # # # $ $ $ % % % % % % & & & ' ' ' & & ( ( & ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) & & & * * * * * * * * * * + + + + + + + + + + + + , , + + + + + + + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - . . / / 0 0 0 0 1 1 0 2 2 3 4 4 4 4 4 4 4 4 4 4 4 4 5 5 5 5 5 5 6 6 5 5 7 72to3-3.9 turtledemo __init__.py __main__.py __pycache__ __init__.cpython-39.opt-1.pyc __init__.cpython-39.opt-2.pyc __init__.cpython-39.pyc __main__.cpython-39.opt-1.pyc __main__.cpython-39.opt-2.pyc __main__.cpython-39.pyc bytedesign.cpython-39.opt-1.pyc bytedesign.cpython-39.opt-2.pyc bytedesign.cpython-39.pyc chaos.cpython-39.opt-1.pyc chaos.cpython-39.opt-2.pyc chaos.cpython-39.pyc clock.cpython-39.opt-1.pyc clock.cpython-39.opt-2.pyc clock.cpython-39.pyc colormixer.cpython-39.opt-1.pyc colormixer.cpython-39.opt-2.pyc colormixer.cpython-39.pyc forest.cpython-39.opt-1.pyc forest.cpython-39.opt-2.pyc forest.cpython-39.pyc fractalcurves.cpython-39.opt-1.pyc fractalcurves.cpython-39.opt-2.pyc fractalcurves.cpython-39.pyc lindenmayer.cpython-39.opt-1.pyc lindenmayer.cpython-39.opt-2.pyc lindenmayer.cpython-39.pyc minimal_hanoi.cpython-39.opt-1.pyc minimal_hanoi.cpython-39.opt-2.pyc minimal_hanoi.cpython-39.pyc nim.cpython-39.opt-1.pyc nim.cpython-39.opt-2.pyc nim.cpython-39.pyc paint.cpython-39.opt-1.pyc paint.cpython-39.opt-2.pyc paint.cpython-39.pyc peace.cpython-39.opt-1.pyc peace.cpython-39.opt-2.pyc peace.cpython-39.pyc penrose.cpython-39.opt-1.pyc penrose.cpython-39.opt-2.pyc penrose.cpython-39.pyc planet_and_moon.cpython-39.opt-1.pyc planet_and_moon.cpython-39.opt-2.pyc planet_and_moon.cpython-39.pyc rosette.cpython-39.opt-1.pyc rosette.cpython-39.opt-2.pyc rosette.cpython-39.pyc round_dance.cpython-39.opt-1.pyc round_dance.cpython-39.opt-2.pyc round_dance.cpython-39.pyc sorting_animate.cpython-39.opt-1.pyc sorting_animate.cpython-39.opt-2.pyc sorting_animate.cpython-39.pyc tree.cpython-39.opt-1.pyc tree.cpython-39.opt-2.pyc tree.cpython-39.pyc two_canvases.cpython-39.opt-1.pyc two_canvases.cpython-39.opt-2.pyc two_canvases.cpython-39.pyc yinyang.cpython-39.opt-1.pyc yinyang.cpython-39.opt-2.pyc yinyang.cpython-39.pyc bytedesign.py chaos.py clock.py colormixer.py forest.py fractalcurves.py lindenmayer.py minimal_hanoi.py nim.py paint.py peace.py penrose.py planet_and_moon.py rosette.py round_dance.py sorting_animate.py tree.py turtle.cfg two_canvases.py yinyang.py Tools README buildbot c-analyzer README TODO c-globals.py c_analyzer __init__.py common __init__.py files.py info.py show.py util.py parser __init__.py declarations.py find.py naive.py preprocessor.py source.py symbols __init__.py _nm.py find.py info.py variables __init__.py find.py info.py known.py check-c-globals.py cpython README __init__.py __main__.py _generate.py files.py find.py known.py supported.py ignored-globals.txt ignored.tsv known.tsv ccbench ccbench.py clinic clinic.py cpp.py demo README beer.py eiffel.py hanoi.py life.py markov.py mcast.py queens.py redemo.py rpython.py rpythond.py sortvisu.py spreadsheet.py vector.py freeze README bkfile.py checkextensions.py checkextensions_win32.py extensions_win32.ini flag.py freeze.py hello.py makeconfig.py makefreeze.py makemakefile.py parsesetup.py test ok.py win32.html winmakemakefile.py i18n makelocalealias.py msgfmt.py pygettext.py importbench README importbench.py iobench iobench.py msi README.txt bundle Default.thm Default.wxl SideBar.png bootstrap LICENSE.txt PythonBootstrapperApplication.cpp pch.cpp pch.h pythonba.cpp pythonba.def pythonba.sln pythonba.vcxproj resource.h bundle.targets bundle.wxl bundle.wxs full.wixproj packagegroups core.wxs crt.wxs dev.wxs doc.wxs exe.wxs launcher.wxs lib.wxs packageinstall.wxs pip.wxs postinstall.wxs tcltk.wxs test.wxs tools.wxs releaselocal.wixproj releaseweb.wixproj snapshot.wixproj common.wxs common_en-US.wxl_template core core.wixproj core.wxs core_d.wixproj core_d.wxs core_en-US.wxl core_files.wxs core_pdb.wixproj core_pdb.wxs csv_to_wxs.py dev dev.wixproj dev.wxs dev_d.wixproj dev_d.wxs dev_en-US.wxl dev_files.wxs distutils.command.bdist_wininst.py doc doc.wixproj doc.wxs doc_en-US.wxl_template doc_files.wxs doc_no_files.wxs exe exe.wixproj exe.wxs exe_d.wixproj exe_d.wxs exe_en-US.wxl_template exe_files.wxs exe_pdb.wixproj exe_pdb.wxs exe_reg.wxs generate_md5.py launcher launcher.wixproj launcher.wxs launcher_en-US.wxl launcher_files.wxs launcher_reg.wxs lib lib.wixproj lib.wxs lib_d.wixproj lib_d.wxs lib_en-US.wxl lib_files.wxs lib_pdb.wixproj lib_pdb.wxs make_appx.ps1 make_cat.ps1 make_zip.proj msi.props msi.targets path path.wixproj path.wxs path_en-US.wxl pip pip.wixproj pip.wxs pip_en-US.wxl purge.py sdktools.psm1 sign_build.ps1 tcltk tcltk.wixproj tcltk.wxs tcltk_d.wixproj tcltk_d.wxs tcltk_en-US.wxl_template tcltk_files.wxs tcltk_pdb.wixproj tcltk_pdb.wxs tcltk_reg.wxs test test.wixproj test.wxs test_d.wixproj test_d.wxs test_en-US.wxl test_files.wxs test_pdb.wixproj test_pdb.wxs tools tools.wixproj tools.wxs tools_en-US.wxl tools_files.wxs ucrt ucrt.wixproj ucrt.wxs ucrt_en-US.wxl uploadrelease.proj uploadrelease.ps1 wix.props nuget make_pkg.proj python.nuspec pythonarm32.nuspec pythondaily.nuspec pythondaily.symbols.nuspec pythonx86.nuspec peg_generator .clang-format .gitignore data cprog.py top-pypi-packages-365-days.json xxl.zip mypy.ini peg_extension __init__.py peg_extension.c pegen __init__.py __main__.py ast_dump.py build.py c_generator.py first_sets.py grammar.py grammar_parser.py grammar_visualizer.py keywordgen.py metagrammar.gram parser.py parser_generator.py python_generator.py sccutils.py testutil.py tokenizer.py pyproject.toml requirements.pip scripts __init__.py ast_timings.py benchmark.py download_pypi_packages.py find_max_nesting.py grammar_grapher.py joinstats.py show_parse.py test_parse_directory.py test_pypi_packages.py pynche ChipViewer.py ColorDB.py DetailsViewer.py ListViewer.py Main.py PyncheWidget.py README StripViewer.py Switchboard.py TextViewer.py TypeinViewer.py X rgb.txt xlicense.txt __init__.py html40colors.txt namedcolors.txt pyColorChooser.py pynche pynche.pyw webcolors.txt websafe.txt scripts 2to3 README abitype.py analyze_dxp.py byext.py byteyears.py checkpip.py cleanfuture.py combinerefs.py copytime.py crlf.py db2pickle.py diff.py dutree.doc dutree.py eptags.py find-uname.py find_recursionlimit.py finddiv.py findlinksto.py findnocoding.py fixcid.py fixdiv.py fixheader.py fixnotice.py fixps.py generate_opcode_h.py generate_symbol_py.py generate_token.py get-remote-certificate.py google.py gprof2html.py highlight.py idle3 ifdef.py import_diagnostics.py lfcr.py linktree.py lll.py mailerdaemon.py make_ctype.py md5sum.py mkreal.py ndiff.py nm2def.py objgraph.py parse_html5_entities.py parseentities.py patchcheck.py pathfix.py pdeps.py pep384_macrocheck.py pickle2db.py pindent.py ptags.py pydoc3 pysource.py reindent-rst.py reindent.py rgrep.py run_tests.py serve.py smelly.py suff.py texi2html.py untabify.py update_file.py var_access_benchmark.py verify_ensurepip_wheels.py which.py win_add2path.py ssl make_ssl_data.py multissltests.py stringbench README stringbench.py test2to3 README maintest.py setup.py test runtests.py test_foo.py test2to3 __init__.py hello.py tz zdump.py unicode comparecodecs.py gencjkcodecs.py gencodec.py genmap_japanese.py genmap_korean.py genmap_schinese.py genmap_support.py genwincodec.py listcodecs.py makeunicodedata.py mkstringprep.py python-mappings CP1140.TXT CP273.TXT GB2312.TXT KOI8-U.TXT TIS-620.TXT diff jisx0213-2000-std.txt.diff jisx0213-2004-std.txt.diff gb-18030-2000.xml jisx0213-2004-std.txt unittestgui README.txt unittestgui.py /usr/bin/ /usr/lib64/python3.9/ /usr/lib64/python3.9/turtledemo/ /usr/lib64/python3.9/turtledemo/__pycache__/ /usr/share/doc/packages/python39-core/ /usr/share/doc/packages/python39-core/Tools/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/c_analyzer/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/c_analyzer/common/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/c_analyzer/parser/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/c_analyzer/symbols/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/c_analyzer/variables/ /usr/share/doc/packages/python39-core/Tools/c-analyzer/cpython/ /usr/share/doc/packages/python39-core/Tools/ccbench/ /usr/share/doc/packages/python39-core/Tools/clinic/ /usr/share/doc/packages/python39-core/Tools/demo/ /usr/share/doc/packages/python39-core/Tools/freeze/ /usr/share/doc/packages/python39-core/Tools/freeze/test/ /usr/share/doc/packages/python39-core/Tools/i18n/ /usr/share/doc/packages/python39-core/Tools/importbench/ /usr/share/doc/packages/python39-core/Tools/iobench/ /usr/share/doc/packages/python39-core/Tools/msi/ /usr/share/doc/packages/python39-core/Tools/msi/bundle/ /usr/share/doc/packages/python39-core/Tools/msi/bundle/bootstrap/ /usr/share/doc/packages/python39-core/Tools/msi/bundle/packagegroups/ /usr/share/doc/packages/python39-core/Tools/msi/core/ /usr/share/doc/packages/python39-core/Tools/msi/dev/ /usr/share/doc/packages/python39-core/Tools/msi/doc/ /usr/share/doc/packages/python39-core/Tools/msi/exe/ /usr/share/doc/packages/python39-core/Tools/msi/launcher/ /usr/share/doc/packages/python39-core/Tools/msi/lib/ /usr/share/doc/packages/python39-core/Tools/msi/path/ /usr/share/doc/packages/python39-core/Tools/msi/pip/ /usr/share/doc/packages/python39-core/Tools/msi/tcltk/ /usr/share/doc/packages/python39-core/Tools/msi/test/ /usr/share/doc/packages/python39-core/Tools/msi/tools/ /usr/share/doc/packages/python39-core/Tools/msi/ucrt/ /usr/share/doc/packages/python39-core/Tools/nuget/ /usr/share/doc/packages/python39-core/Tools/peg_generator/ /usr/share/doc/packages/python39-core/Tools/peg_generator/data/ /usr/share/doc/packages/python39-core/Tools/peg_generator/peg_extension/ /usr/share/doc/packages/python39-core/Tools/peg_generator/pegen/ /usr/share/doc/packages/python39-core/Tools/peg_generator/scripts/ /usr/share/doc/packages/python39-core/Tools/pynche/ /usr/share/doc/packages/python39-core/Tools/pynche/X/ /usr/share/doc/packages/python39-core/Tools/scripts/ /usr/share/doc/packages/python39-core/Tools/ssl/ /usr/share/doc/packages/python39-core/Tools/stringbench/ /usr/share/doc/packages/python39-core/Tools/test2to3/ /usr/share/doc/packages/python39-core/Tools/test2to3/test/ /usr/share/doc/packages/python39-core/Tools/test2to3/test2to3/ /usr/share/doc/packages/python39-core/Tools/tz/ /usr/share/doc/packages/python39-core/Tools/unicode/ /usr/share/doc/packages/python39-core/Tools/unicode/python-mappings/ /usr/share/doc/packages/python39-core/Tools/unicode/python-mappings/diff/ /usr/share/doc/packages/python39-core/Tools/unittestgui/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:36554/SUSE_SLE-15-SP3_Update/add00b7e7ddb5b6c45fa0e7caca4b2a2-python39.SUSE_SLE-15-SP3_Update:base drpm xz 5 ppc64le-suse-linux
Python script, ASCII text executable directory ASCII text empty HTML document, ASCII text, with very long lines Python script text executable Python script, ASCII text executable Python script, UTF-8 Unicode text executable Python script, ISO-8859 text executable Python script, UTF-8 Unicode text executable, with very long lines XML 1.0 document, ASCII text XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines PNG image data, 176 x 382, 8-bit/color RGB, non-interlaced ASCII text, with very long lines C source, ASCII text UTF-8 Unicode (with BOM) text, with CRLF line terminators XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators XML 1.0 document, ASCII text, with very long lines XML 1.0 document, UTF-8 Unicode (with BOM) text ASCII text, with CRLF line terminators XML 1.0 document, ASCII text, with CRLF line terminators ASCII text (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract) a /usr/bin/env python script, ASCII text executable news, ASCII text a /usr/bin/env python3 script, ASCII text executable unified diff output, ASCII text
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R }m_?=#L utf-8 b03e789fdbdc9d0aa5197cd5532a780e6bf6ac05598a7eadea4063ed5e48f07e ? 7zXZ
! t/
] "k%ne) `{ڙzq< mѴ?}{|=ٝ~Ip
7\(Gu*/v$5^& Iӑ7;_>+'d!iE*\BF;ow] f^r8VSG@+
n
<,ZR)4WII| s~e?b41Najz Y8C} ' S$aPÊԈ?Q-{A?f]D|7e!s
W-%F12l"o [wu>QצN>*l$q )ւ!B5OJRD Z 5ۍ#pLm;`!vz:P!@
ٽ 03eUAv|t+SPmJ9flڏlKG$2{M-ɜ ƞ.T
k\?\$"\qb/RK]0-nF H]xSh$ CO瑇3HDmGidV 䘛 |i Z:Fq#eroINmR7v Y?,-*
27UI<.L Wc,-HCĤsX2 (>КRn^GqGm<}Y*-70yUb(>;fj
A_'3&\MQO$/%7dy.,%QڱsdbGAn[aC
w^8 EjD ")BZ4.A.Ҽ6I{4fK@^F#nW8zIM89N/!Ht7v͜KXb$zRcx6~kQpޙl@ux[$DJSc
*E+KA@~/i<$Pe~mNMm}ŋ.vg=HX5 `mh0'p%f"< &JdGdȑ`@7A:agjL(4BmM1ԅR.a",ޫb'U8K#.V .n5p_6R@_/3 JTàW/,jA^Ho-71pjvS}X 4% XS'Fɳsu>N Ż^FJJ.ϬHBOu_9IE ~>bAl H, 63nBA1joI`@@1OzLC5Cd֛؇Cts&*v?vl{̀90Qq
#%L$˼Ԛ{/xk-BT.S ?T?MABϤ se'DQ[' k@A%Q!eltxp 9GBS? *"篽AguZ ;Mֺ]f~, IDmǠk M6rjP,{>olQйjj $[Z^gL
RXUAvW
6B}$rћ)zEߤnC=҈Cf|8x1L-&2 g]9'RJq>1M%
rًWU U6DId;)O0_5amP]\!yLJ@ܞK]P`x:i P3FMfbprd Қ"dT!2~jтO+6 U|YeB5 z=v(J/ g!4M35
c| GI -&31`{:`t!xUVH<%E =U䪖m>ח=[F4
F \rMcGdG.؆skbqg B:r4D$ns5qL{Etsx<ˎ۴9ﬓw8lr# 7 V7u7&Sѿ(-R #y;Ua cdieJ+[in1M^a {Oo')&J&7= C eRMg咙D o?biY19-ZI3B)
{g\$C
j3A
!L ݭ_l|yYw@k$Kڤ28H˪Խ2˶ Fr.0}h0"l^쓔O&ЩGIĒXiRxfdTn'Vp SHޔ f k&ڏ2G;7ZtRV+ T -s SR" 8qn ZӆrPA lҎ_ G`Ub D@Z=j9;}Q} %2]tx̕ImAlR=ԯuP}fqH/Jl'0IǞbR>Ƕ[O G{xbvqmۑe5& lM|+ pc3;JhT= =c7_Tp]XC=^u MH}GW8ZCmqk+wZ&C2tG6F#Qe;@^AC%fEI[rճ덊 hjY:x[j ^LƝIH&5D eNp>E" 7½Q# J>Nv @u2uW,XR-z va o`'j *q%ЖijdCH^~zN~}9!( 15}TVCYdx0]Hs8tVYJT4)9w;zXpEXp}^ _Xcf9Я|D%4|_bejxv"]2c!QÃEAiޛ
>50IL[ZzP{
[&|ѤQZx.3y>7±Wsɜ2Vng9Se9UuaT48DR폘T^WG&ϏQ q@
tUXPTK6 @[D(o"Vuu{>^8>RJs?ޮ8 x|*i2'QYdPZ<agN?i"OJ)to
d;7)glJ5^+' 981ƣ~a D X!Rh
m
m}R=$?Ƌa3Vy롡v[ÆALTM g/5!rؔ_7qRrC'BsYܚ`Iy]{|mK]5$W@(qE J}a SzWWD _t<,lG) Gm @U?Ǔ(-8m%$DŽ^B67gUxnIHa]R<$CFyaOw{hhDYS<@z{R_y_t痘10㕔ڄLkJ_$> EVWx Uj cu13qկ0
Ck @g43y,_E TgX_Z!`̷u՛hrg2f$/`ܘ+TZ#}VgPf(~V[KQ= !+,.MS߹%nʹv%(
Z"1n NώJ{* <'&T4Bc0:f9/I'
x/f[bb58iBFM
h屏jޟl.N?a!$'c -a&[/T~π>Uwy袞 IàuD7nq`_`
DS= 5?fƄ< 3|a.kU,:u#7nkHobL;ÑϟYoM%ϖKK%"Qz #_:|>-;R@*~` ]f桃tĹkfP [04* 7Ei]sT4b.lmU#* FgƲ}5l;@<vx-u am~vj:I R35{.$YS;`nN/KS: +B{AUt(r; &2v-`!Tl:i{I0KOgr(^۟X{ 7]A]0>qUlZ(7l w'DX^}[J⪈BՃ]Nnr6 L:m^ϹGM4N~$
L|%aı@h/e?g-y6pOyW h
Iӎ ξM(fWLk[5 2K̆0S^ Џ[eq21"$ta>pyocB.N3Wugf9 0SC.uǵ=P
^u͝u 9 J=iLyE%u1 fCET
1&EQESC OՓb s?$S8с r#<<.g{J ]rFOeH(hG,ϡEE>^Eл3a` :&/F+`N@ِmtqex9mE>J|Bv{!5$S `Zy!Yt;\G3b9ajkXfqNJC3F
pL̴iԡ5SO$=EZ>$Xc rg4_7u }~9K 5Ε'57 #B #{1 [/ϑ~m8 㲴jKmἜ#'jX53. u !l 3z)@Ն @FH%HP.>ʧ~YecI\z5E.t &* ;{Q Ն}0Cwei6u;a3cxIu g::}A0JD() ͣg5NI]3D i_ oD6UyyDz
oBV#jbMS /yxgDR̭h
w{MmU~- A/hS\R ʜa4m> eU?RZH%kv@o `D`d
-7PFcS7+o Aۛ dnA}?an} @#İRs!h=F6q%I`zsD )FFSNԻMև#`l`-aY桻{jg|23++ \è3(K:H
w}G@7Ȱ8-ExaȒUņi1!\-/ 7
9I+#]5JJvo f 627g GAiWGZh\wMi
FA".G! n>Ј,Y!h3nE 7_AMcDhG ;) ;x^xj$!=DޮO ^ɏ)!Sp; E:FջHCCР5S~9b'ѫA(JC@b/OvL2Mz*91Cݎ Ke al"EAu4/w 2OɀE>6@+S/MIɗ Sde6'r C_rLfG].?_ 2 w >fsݗ>e
)ϤwperNȽ 94@f,|gqP &㹓ۿ w%t5jvQ_ovX֦ld6fl; `Ε`1v#J`R0cA/n C4J tR\ ꤹB1DלWlKH"ÕFF 5^O!w5*pbzG.*n+趐/vhAUbk2XPP{ ʀK'>' @29xf2l3ϑ^w8?gإ1 UN ppZ6i߲Tk:q L\F_a?$3tNFzBFax:9ccu!mі` Pݹ2%4BfgOb{?DMu8 8 9m\쪺UZar) \kw H$Pwsr5=@@T
ɑsIo 9AY snT% n;K? ?A8b7WdacT
9F\4WB ʥ, 5)X kBGةˆX-#Q%1$0c.a ǹc T-4f+N#˝D!"Jx Pdz<śqsaDZ+WC>6?L7w v7\#duBlLdzZqA&V_рjUCh>n0Yax݇G -Vf4G) |~_u h p]^ыL#Hqf`37
mfIaA>>'j cF\JYEDtV].ƿ/ bB3]9=mա|'OՎd6kX1 tb
yÜ V#|/x|*e9 {-I)u 8z_\_a8|?Ϝs4mXksU3U)ye d; oLx~) bK)^9I }8{ siAjܻH㗰bE39M#_h7Ue7 R_BMcPip>pD
nļ ݙmf~5y,M@& M5 \`{LTT69ET ި19z@.LGD$NPPRޠ?.^Lj\:mB8}T2H$-t P a1a;۽D|9(U<%z 7|K
ɪXdCUm(?٬
&VtRXLQ ~{m /O~7Ud 6JMO1˄k%jy31ñKt!8 LZux@Dlr@uݕ XK{]=pwgxzmZPxvm "~hɞVԗp clӷ
: e+ZF4cHA4ztaDI
S
"ІK&Mrϛ< ˕fT{tz"j7rK=6~¥M(uE{Syl7/pI0ZiÐs<8 Z+gqP흞-F vfDzm
2
`ܦx vY"L( D/O{MqXZTuR9ͮ.3qRB DE8q
^kgtlvv\)yZ&t7k[?c$A yJ1ȥr 7Ύ?SE g NP!a-IV Omk%F~ϰKǜLWСx\SN) IfO
'U;7b Wznq͖ԔvPyRߩvs-؉ 53:E/4 " +Ed%yYNѼn$iV!19S"a$ WLjeJ)5쩕+GYV3l8Gc%[y e>pCEOMC@/~;sY]]d(hp4 eU3^i-]^5Z~Vm5˙`ǣ<+H]3fM7?rAdUi]V@{U},C8c϶̣& 8w{YHQg.Sđ zݔb4 (ࣛ9
N|=iwsY@5rKDI/彣l8ӥh}5"0^_`7*s?7_R {2͡ @ BȱjPuɍ#xKK8?,8rf /t)?dvfHT届Sbvz`8TrA<5b5qzV1X?cS&^dE4Ի?`YWw^B |0~0
}~{TF3Ӡѡ{Ř̈b`eejS?bD^Fp& hNFF t
ݠ8QxIi"CZqUe.:=:"PE0҄>$Ywy4s"GJ.=& @GۼM2NWlD W` X r4ե7NM, qJ860(t ֺWۼ'1E\[G@zɴe{fxzKvq93ptv176@Ӏg8qC]ͤZ'B~:n=@Qz|? ޘy%fPhFţOg ;/b cUx4+F7rDi#*ePK+{ TJ{Ln#acgj ԅEͧr4'po7nmZ?visM
[Mq5SEk-),bN?Uk3$Y"̚ۑ}WG_c܅o+M}ƶn$WNU40i&Ξ4A
DٔefߴHOva?_P<U -[AȼK7jם{ShZ%۶Gو_Z,Sz×?.dEx!&\?="P.48<>]B.hxkN
d~tޟ)n[i"F{$\ Rq^"=Ɖ7 2 :;l$|ʼnY?A 6XCuRQ`dYA)0B`P&A<؆
h w&L"F}YoA!4U {F]a>r
2 v!K
z #Ʊp D:R:MaG6>x>az;-lw|[zL-NQʮu 16Zʻ`,[pOBΖ1e/cJ"mUKB$hU~Xgx>nt YFOʎ>P( +sCEM!W}j3TFoL"z
k%TSV6 f!w}.036Ͳ70t5*/Tf+gB"bLX N\5? 8`it^ڌfG-`sTf~|LK+ asr5(*CdCr 87i}9<ѦcJBK%c -!z<t_l){5";z_D& HXk0d6^Sڸn7ӓ~K$CPЀHwCT-+ʉ_D83B%^ =3"<+71:ͭ.ʓ8هS>{^,.g Veu RspEdGq0NO=@P ^97J ӑ9nâʂ*p|{4%ZٝZc w a2 /U52=J8JaT^ .zť%K S8smY]\0jRN%+?Lʃ?y5xDk}Lߌi-@Xֿm1#~t'Wrw|tuYFbZܔ $WҰD[,\ ZnK -^O \]ZE'Pm) 0g~*T*ӊ@R5_נ
r`.!5>_F ҁ4e! Qy[+\n <;'dUA7!
R m;hy}2QLCH]=?cɻJws52>Va\\_|a"E!r7`SjBpt%PCt3G#DO7tw
嘕J=&='K[k̚ˎg轚1"aݚ{
J["Ib%@m o^Ī-@
M5[.;#2"93 0CST5s_6OޚV?tӮYz?jN:!߯ѴH-87vFܮ K2R
pSJTP'j"Y/LO1 yYq9Su
mpD_0hzd-8Զo. )CRY[;n+# uH5lZl!u#5=(]{s
PTD͔!, ;3:Ξ! Q`zw
'o: 42,y]N=;v?}r0rTN
b"^K f}\$L'@$1Vg:+O!2?жl^nO^ty%ϡ C`fȎfL ξAq/nbFWngigӮ=g1e;Q蒋uĩl?;g{z 7.\s
'uW9O?WB
"dYqWy/ xdG#B D4 0P8x˥V'V`rp 7he6k i.۫/nOfUrUn
zs r]# NtM Թ6&ݛȺpIuNЬ=Z3Dl&8GEТp̯:Kԇ8~6 +BB-'mMXRjW 11ů&f"ަPp"L: 9LE3JP9ԡ,~A)Z~]
Tq̽6F<:_Ԁ;q ҹ:{*ᓔ.57>+ ]Sw]G# zel
-lT=v 끞ό!> #wF8F7jO EH̠
bzANY8T\v'w$+ ͒ЌЬ;ڡ'=/rωEyB3"ХY$@YQJ^݅)Bގpn, w@ Jdw^u dGJf:ZRU fqPE XIO ?ׄ7!/~9\Ss3nV'XP)} tm[SE^\F `2.,|Yv3k=NS%C]Ǧ` C/aR N?״TkrupK^lہ ]aTolo9b0#ݎTʮCۖ:T5>̄2
Fe&jo~H; -?]&cst[Q45
k\[fzw|-寛r̀:ClX+~cϥ}Bl@IDa6ЃW2ka<^S
ӑOإ3#Q*xDqn`>z1tWqv`
YE\9|[9`& ՓdȔ#dEߒ *a ` _&Znk7Ue2?o] ,HM$yEw\xN@ʏ0-Eg
Bd'f1Ps?bz/>}ten$(%ӻ \POa}3wmsc! جfK,j݉تdU,ԮF"7xyi C4E^`O
WO"X
S(ꕃ|?oeZ-
v̄Mᢐ g3da^Mԭ~kѧ\vCT ؖ"F|*R)Qx'jw%Q٦Ar+ ax"oLc0-c@+bhwE
Ȏ+rpK4rÕ&Ö t3
< 7
"KT=:)C(UaJigMۅ$a 7["8JLd!zdaT;f+|LQ2W3t7ՍOң
9 qf@_m κbR02؉n
"Q:{"쌖'c26ޫ
XB< I,S{8R=EA5h4U/=smH
~
;KbY41Kd'ᓈޝ[#x 2=s`8ݴ1w9Wbޖ_#=[8k戢ybAmZyUj=B^= fq2N@H\~(yv*ތ˅UGYS:m SzDԹeJH 54F K_DRŮwZj?Ê4ir3WťAAZ^Ĭ E1d/Nwv'BE~-PE-hCEtl'.%t\s0D lC;
pK1
nYc î]vôNg?q?^0Է6+4V6G z^vz ֦y NU)o%`t
u
o\ےOQ&V產IW.Mc}D `
>UV/Hfds U@KKe]k rRIݬ?R"upc
6v庖$.DT(I!. µ0]F jeb7x_\6Vf`r}fA|7˝2% :)sB:O{bݪ<{y bnEpe@ƵaK Nꈶ0^LçЩ6s w~ndj}Y?̢&FɌΖ Ik`U aP@O_pjKJ]1HJ8E 3I_vnclֵ٘Q vf8\"Z2!9vIDU$ПDp
% ={V E 7ME)?B@S;aWX|uqTr0/\ $vYTeڙ <@-U#= 9\U
Mk✖~EL.z6MU5)PBa i͌jA
y 6c,`fYˑ egCUz@RDM6R"iQգyxR_ʸqGw.'Z []#{. # .1>^kF K2/vb\V~䮓5Q]Ju
,|z[k0 ~J9ۺFJXz;Ԑz{(H\U~ljᶑ,U ʷOκA3]iޠ%wAV7zbF ;5n+ـ0PqD~ Gc' xAe>:ݷߋK ⲕL7tlFr˰0g7 UcvV$WtZ< d$Z
;q>?~mO y~/-@ۿ[ڦ*%S@X 6 AUd /(=>yS C~"|@16hhHVdPM@I[pqoJ :'wa7\GgsZj m!8d $9{哟 հoh5,0V;ͪ ,;۩#F^rIP4&t9CmHP?$ү52:;yKϷ6m)@phO Y(J܄rcm
UtLbI{ZkhlR4Mne}"}O0' K ӤMN7~ YU k%c
A2ţ>#5c/Z%#"P˯4j{p30 ZXbNaYšv)Y#W5!q
dїŜ" ԏ(HBY)h--PRjN`rCQթ6# > z edcA$f WW y h-GW`qS+ vڈZ|圲X)jQ}3Gz_}?"yy;`- KN+ 78$DşP?ob.7t?E?NHGDlB ) '>:9xO;vThGyyre]i_J;c>m_;ٻ4zx.WU^|F9kKjbo6gUJ/ύ = ) bً\P>zzӣ@z&'* " |+ k*Am?;G6|"+[(J\i=O(3뮳b6D.\_fQRd4-ڮI.Md* )6* O]'`ҹ}̱J4%i`V *JU/jWGQl|ǘ hNZՊ(˧ իhWFnrwqqd*ԒFAAwPlhmv.O]Qi3BoaUN 3 ظ# 2*z=Lc"dnq^a#eg7 9} X bApƉzdP75-.V=1`c7GSȇd~XS: 4E;l5 2ร))]qނ>" WtPk< Yrx#E ,Umv~ʒW]8ұik0w#Q= Ki9 qxnZ p̹Pu`[SҿS^/3wZW J" q &_h'{#8w[6S־*Z4y}EctV&b*bco{qx3co7vV} 8`>dbMMڴV* @z IܿDQho0n}_̩!d_.%~'R і@~(2]Z-(el?T2~}uPe$ J$X% յ&9~ANm`_s"W0ObG*L&)
8 ˵Z1@d\=ҙU{o_!2aqHuvpwm?)WNyR.O:ͽHXJq l4bST e[
iPE8* ,Vk5wq@-Ǚ_??I>J$0]ڹ)[B
t= Pq)to~6EKLRa1p%oaڵzw' >pU#ͷKw?
]?;1 \75u\˘BRW
bju^#h><){9mfj |%@, 9f_ze^KE+|^ O=cf*y% t;r xe
3S ڠw)Ȉ4=ZWa/m TCE1l~ }Gg5)> 9 <1ro5 (3@
"= w&4 }qJO h
࠺tR,d ;'>w˵փKlD>̋-*/%(
qȖI,N|xy -iCR8'1\5uju4U1شo-LAaԞFO]ƛczNHmta(~#O57 +6iv!dBءѩ 6]4uyΡs~4!6tA8\w+P}a_>0yU5rǖrEwѲQ+1 ;
,/LWbΪTU[2 s 7"@ Zҭ҉1gSfvֈS4A Z*Vf9wx%Dѐ! /6L r[Y-}S0ϮEnS$Bn0?Nkdެ5s(43 RleĸsvVY&Z!rΙS8 :!@^o0̐g_g{2# zd Flk}Rd
.GmhQ=XFWY~Aou#*AaN60h 嬅7z.< 5-u`5BwBUǺ1ab;pF08wǧWL!4;azRw;ȯu ^Wk H4|欶x`+%WkO {cajOe<.Z7J62c{h0g^)_Z"9e#v > 5V0z6b_۴A"7 kytP%K:G{3g`K NS ᇆw$P&+x%|Ma"ȞSĵ%alr]'aϮc@^t'u`['*cHkku7|3^ЂP v8P?Z }| )% dB;zGS
=< {pRx$*Qy. <->81lFHEX4Z Jm PR՟
p]Y"*nAFBFmwg! {< B[T0hud0 2{ >VYI`. qa W?-6txp; WUr^coDRf@䆑'Y=Hks>p-MN;bVCVԘ-:[-5m& sΛ[c8mwwLP, )vB8v ~Rژ?3#z`>_~ ɋE #%Q`7*=1qst)W1;TC*!1s6mh!jگY \zgc1KH Vrn=
~AQP'gRVoQ"S%L{lҺ)eUTn^Kd:r'B"sFAʦ42D+̊o3HM=ewۼ"½x@tسVYeroLǗ̟ :g#rmlA$~V\-53~bT!(7j3U)}>ZyO&|`OE'$ l
;ZV)=a*>&[ZD.r$} g67r帧b"/DH]cnxqʾs0%- Byv}<`4HH0W&qHV-D _{pZSư{'} AffH-n`no׃LGݼBULݜOkp!N,OL1kDfjVش4~,QغS d["ɸȠt> 82N03q[ `T&WӖ~tSHVJNA'cVPx64ovm 6!)Ű HfQqC}$c'1ئ 9{܂
E2CA05-z8K*hjO!y*d=Z/\qj^A! <ොodLs \ƶk"Ók)F]KH.g.0ZC̭ =gB|b1ƚB{cnD 5?1F(_SoD pB!tArv)e4·Vӕu{T;u2)N`5ш
BQ(FWmUVz(
XͨY֊s *mԄ-(LABKy<az7G
z[袽,(aQ6S`l!r6¤+FPz&]nzvY[֡ [Q!oہ
Ҳlj
ehan' )[0(OY+[W#ާa"vOR Du&8,IvX=jWؿ˝1dº :|n$ AA܌y&f&^lg 6ɱ.϶B *7L'QOl~zFkR;WïqWPI~xS; X8DVIA7/ #@Xk( w id ^d6e"V'5Q7Lֻb%NV>L'.f3g!ɘ6jW,`F5 ^vE StYN:M7 BQ{ ^Wyixq @vtvaRwz 7i{xj n_^Z5*Hk MOo[0Nf7E@ x%cZ9u⿑T Jmq<'L% uaXWg G-qۿolӫ/9лƣF$
N?V%C! ErޏtMo<&ihO0r{ o#!jʴ iGP;PZP8Ƕ_5 ҿ JkkQB;ISd LDi7;.:B5IFWRo˭v5liLت*8kW c:qajܦ2aQXЕPNQ}&.7d'C͎iկ':4:dƣI0scЄ,NJiNNICv Bx .xvBC!94V.Jn`ӷ# wcT8Hxs'ۋAr1@gٚzq'߳)"[gM "`#uRdmWmt% HyˋSf_h&!MpְœG$5 `{kmF6(Yu{< )'Jdc.My
/CXi C9٠ e0 %$YOX[1= 3{|\sb83 5o{P,wA/kt9/F, -
A#gP|mY6g ,
لqE+TIN;{z#l<½ ґ1x?O3Zz"I jm]u+%+< }~":KqM(Q ? w
T % uNY6fB:#(Ry f8Ap*95VpOd8\B zj7Ž&JVܖ'>9U&_I,H6 YIG
Ô}~]JZ6S9=?GOX;0Ǐ@#
,o{ RfggHx [x>̍>{pxu[o,&8 OO`(1"} D@,Q&؆wry(j@@=ߣ-&gkϋ%Â
)6| gP4 wH;2h&)qW6lĞh[$f IaNutl{=CXBUV5B "RYs bY824#M9Q5l~]SZ Q3DŽr"q2vryg#l * =ȗzlU)4zhZ& K?WDͼM߄N}pqgtUN @*mZ_y_7gG:ܸf\ n m{e@1uw@6Ί1M1eBXaF˩1%2%6ҜX| 'F1翍
wŞ"3ެ@w}. ƙGT=Ơ-
q ҳOj Ic h3j7|SY[ ;9|>U%8gSK}C17~N/U'@ fNc#gF/h)ۡ͡Y8
]TA|՚ NV3ȝ,zRbFP7sUij|U Kyu3/3 ~q:Q )QYҌ#Ig ߿S"zi6"dtOʌbUA
+ۺkS`BMϯXcYf-Ьu4fT4ߴF*k- uGg6S2QIeKFsl:#rAc[9eBb'@
!= G9w KW:
kZZY 1fݏT3zxEoO{DyR(+HXO08[4nFM "6l#8J=oy%2 1<ZmEJ`wݝ7 O})P
c\<
x]A B~0FGk/,'^w
N=oJ%Z0vdk!JNp#F՛&$PCFCZg0 9ym8 D. /jsGȺ볦Z؞(h{$BEn5zfTz.ɿxaϗ ¢,H+fPn'.\K7D!Nl(]P Oq, Wi) rY=>jh
F&f.Z `oFn#x
$*R ?Ɂ+TY" yi!]ԜԘҏpe)FW=u +pK
K*%#iχ 5rCzm}bC Dm-/F0R.4Uۿ\Gکn
C tş}Yg$;tƩL;S,,2 f`S Bm?^h2aJth嚉7qLD 5 NxXFmTM Pj:ȇ6 [Gy"<*Q _"4\K+&O; ̪xV qU~SG }lf uM`]kh_EnmRgR#Κ9 5 rP:d6td.9ZAOh~ u5ђrV73K|Ru*opa6d:͏:xe2Vs{?O
^FׄzR/ҩIWa䫷BL*4 !601AjE {"W 6u7z:i8EwveRG3JߍbS!+#e\^痭[)mYb n+|b0҅0,JςL+>x %w@>$jæo$?Z[n6 ʆBDHa'G;MN>
^1ĸc KM k*K g?77E 5|# I ⟦+dEy[\kJ? Dn(I51ρQǕѪT<"(3:B=`Ь? `ڶ'lՔBnN63wrɢQpG
4&'l8Ɨ95=F:}Ydk-` " %aJS?=RMLKG
8U6oPZmm>ևۺQ5U
]xB*Weh+&e``NqиuAe %FGP{=tJZ-`rrA _8T% I^-'/9N,SC^jdd giq.S&B+sjr?^JQ2SH@%,GB~6x B yAQ/jeB\y0?() ̃#ZSZpI( < [`) m =1
~v+37ie{߅D )Ą
7 <;% A+k `2m0a G|}A= =8xMF&ԊOf͛0Ab&`m_Ng
n
Ґr {/qJTLO#+sd;È xMె ڔLp[StX$[v 0gLR dG2g4fyC,%b-ğrTwB R4#y
8+/h]b88M7@4WA N$`)CZ",!qbw#<
cF6HAAzi\jON:2Y@҉\O/ w FCI==4M2+uw`g#PO}t3 (t!M})>^QA"ԋmB8BV kPthſ2f?e6m]售+DZ!=2&E~ H0xj{ѺIo% ε 5 l}6 />{
3y\X5 !vChO#~4xѓ[7L n v]ic * }f4 \i |Zj&i Q6ho+NDpl{2Ung@
\>(L!8
*g
Q$DJLbӑVr^SK@PS0(~.aRo5e32Z EpJD$X "v"3h0 \0YeaίO>X0J M[i.ç 5sNۯEmy@
V}^L8sЈ@o#Vh%|i0sET;Oڪ=|]Khc#;,Ni Hut_ QMS!"
'қdfè86qЌ0b1F0S0 ^Ēqݦ|DAtsѝtZ݈k^x6<`/ѝsc?d͐y!1͓6ujDy^qGݞ#O b AJx53ϥءcP U@JW$4.Ԃvع9[p)h$YY lܤ%?Zr!íbmY0 0-]#!',Ǽ.0$f Ed\\@m"Os hKD\Gr=f,Ov$ 9( /a2fP Ul1:3AL?AqZ?죥J ٳɱ')<~k d²" ˍ6H;` jܣ2;2~!,vlhWÕvJGٜBn*=l3؆SouŖYL$w^C'Տ-eLNv۪Υy9CqgS1@F'N,b ^$ M|~ˬ2,4OiżlA,hd &MOhUg~/ |(]KS$ Lk#NxC!qfWtjjw^rڊ֨ۙ$#z
z"
J6!ukґΔrVw>q vMa[0:RCk8CX_OI dp>N]DЁ1&w{>C.kk)(Do-6 0l\p_n$au@7sW_2"VMF uj]gGs=h̳ѬRm9`G}
C_F@e@Jii ?df0 XjJՊ= dmM7
Շ+8 ]TX8ʊ +P b
AX^\l `59[qB]x6ϡ
Jݢk N&"FR7t4t\R= סxa-{ OmgNDN]m H$\ @%AtNξVFhݧ>9yA 2kD?k
C)tH IGיkJEy¿@??U|7|WjeʲطY
g`I,GBn*n|P7ėV/ \vT h ` uAbв@ xq>o19.*T'|Q$QUtGe]eĘ<%[ i7 x2@#/:pR#Nq+Q ec m.KQeWXjR&5/^EG͊-nഌcq7*j\l aT(TNg!Q qbGqW4>zH1'xL Gi+`FͿ}b >;.ڋ[
M:R먿veߠj$T~d,hZ(H! Ƌc ` eLKLPSa!MIB=ڦ+ҎagsI`B# pڈVbzuO[ nh%.?:օT"E >{D>Ni~5 3-j?<מ,|cb*WJ,[)2rx=pjlGgx9? _*t(Kٚz<.yayBU~ó=6ƴ?&:u5Ջe$@=QI١ ^nZla l\=`Ui
0;2m%u/mfć6,;AС ղ8 v_X`5%۪O4mV>mlT~ٽDVE;oZxT `MҖ5>5߀< ltA`4Zy&WT Ov=W5Zf +&,@6d.4]+#4938h:/j~S[H
APIe5|X#Rd`D%w1U89ң,÷HD`̄ C
(\-d;(Y)
FQ<A{@5lB &mC8횼F*&پDgF2c\*F1fCFWǁRd-(ZCDx2?2?;>^y_D/k Buغ*LHH\g=byd:1N!YI cL%F
Tֈ"NR5(CR >arpTЀD|QoDhRi
79;QP"uWcaE5t4dԐMj[VG/lbHo?M%״ׂ)(8W;ۦEW][jR]#!q5f0j ]mg\TI Vc9? A7 n4?+Ay:ti2R"+WpzW49sm!OYB^;
HnKe[%9Dߡڮz1o_vZ(C!53M/xp P3]8֭\O/y hZp r$v+N1硯MpwG7SfV.,m殶6TD_&uOb%o a}?Ҁ`[Rw} <WvzЂr-P f]v̴U>[CxX2xжTYfx+
eDDlJ 3mI%J+[4f8V -ԩG`?n^w\Tǩ80dOs4J
V?ERZ݄vS]E_,kh=S5@1-upI Daό)PR ,l
h}@4`MlZ5( ޖ?]W1 Z쫥m+~HF_ ~1 rY`h.LszzZjI\wxEt+)%+ xߥBLz@8* |TRdK%|iv45aHt\dk`Gm&v-Rijm\7sϤ 1G7C -YoS Py^6DɶnmAf~wS{g|BpZ.z,u,Y?];փҵ Ρ?8" $'5k̇Ѷ%QjG4YcnyyZ,{:
1߿ۗ,Ț5e "7 wfv0qD zYb[/:=,Oz!w",dԓ IJ
,ӀRN\.$XU-"Y˹9j~z\?0wA: U+ZǹE@l `)])H!FtwH &# zzQ֮3IdUe]k%{wt*
/o >Q5{i=z::fXT/N-:9aUV1\˶ _*'}D4ɊxU26b\Gw䫒%N,it0`, j+$6nN>
)1w_ D2dG 0~BmS5sYA $v:ȾJLgNn#3 H`R.Qpb
$o0c< ';
kɅoje 'Y(x 35(T <CS\zv^O k65a-_ 'X@ia1ˤ/u+?'q~#UtxIӟ[S{Y3M "C ;4z5-bV*r<5z̾%JS}ABmPz?~ Iμy/G#r+:vG]f%;_72ڂ^..M
H@GTaj'#NAcw[oȣmY 6-A5;ӎ9ͅ`y=.vFv%P_Aq fu[Џ8%'߉|U$T 1{-S
Ň %j +,$ ұ8;'olxq#1 ҿD,C2mmoW:p][ \9ElL!o&~Wu|#!d^ ۷𡨪S'B|fPJkۺہi?_JW D`=bjʶ2rCv۶@j ] 1Bv lohkuS1H,Ϗz^nEayE:ܝ>/ ' Z7Co-zio)S145u
&Crњ0́<^Լf۸
3ះ#!.g磧g X2`h&<nR}%K#tP-5 o>hq"` w w*|,2=/[2O5zRORF*Ϡk;ܜOikv%:7rkj9~@PT ?^7`q
WU Pݟ/SW`V0Qu^ #! Ͱ Ng6] kG}
-i`TF R q+K?aQ 3. Xѻ@ԊZrY[zSb-CNbr [?sd=̎I1 ,QAUʽ6 2VJL wzl QvB*36`l^l% 燶$X霖[E w0kfz2n(Ha&>0̵ :
ީwE_- "h1[{QY Y Ɗ֠YwǾC}
B o @Z /K4iJj E]\fũ[v@x_,J1W`(D$HMdb*3/ $AO-շft.Tdih1>${P!M#xm?&#Fg_
G.r8V(/-kP͇RzE6{xCAlߣ$f ǔ7@&aK)QĹ -Gw:Wájꛈ Qx\EQ@f6͆QJzkÖ ;|\V Ydfm,MN%` L喉М''G♶[& k8tHY6յ dN̟u菧d0:+qO8,ʳP c_I`5`&zHH x!y@DX)6= dׅx i'jAc%\ݵ0A kW=<LZ dnJ %@X* ]9e:W#I
4Ӑq?pHEPbڡuP2[ PI~C%UD;-G,"]_stvd;io3`s 3{uFLX>و% m᪗Pbl_T[<#~C%rv&uŅ 5Sq8Mr0~;Nt)ud]ZgӦeQw<)}~! |B5FЁLc:~.'¬.nIOv~#0~}dC9--?l Q7K Q˵PNR/H }[ǧªrld]QX6^yN .
_| '٩g+,Lht < It嶘zkkg{/ %/e0
ܲs_
''7BjXV{Q58{k5f NWRw Dh
C k=(Peb )\ҙ TԷ}WI*M ]=tY6S'FȈ4=͟WـD3Q1ʩU/ -M1~
6%Gaߑڣ^1?j' A/&i?{KUq^7Tek FSA3xy "xC\4[?vztYY цac9z5J L䘟K8$E]b>'NJ7X=*BMU٪ S_n2fP2ff00m
8#GWӄ15DnC2D |EB ҾN5?kI)q;0
es%O+r'`/VgrÖC \BRgN:
Ӏ#>?,|)+%{@"ڛ>b!o @7FKE? J Wۆ5(hqߥeXy]oKo[r⥊.IR6+kWq =pdsU[($ҍ YUDҏ 朩<
BoΜNy{FRFP#-K1[W)QyN MVV0s *%nq< v,Ԟ,z۴11 Ip
:]V-^)uC" ߙޫ: A[4 bQ20Z]mJuE}HV[(AjK$}d@;Xcl O]Zee.Fq=y%sf*K(y z6QDYuCtIR?K
)G_c {$y;c
uu&DoWq4ygCE~B 嬒Cc&PSM^Nf}wpQ"F?g_H$ )pLؚ0$W?,`+X<͍m,W6vY4V}ı 'Br[7z ?G\\,w5
"9⦹#[J@ac7&?\Ƶew# G6&| r[c9迮Ș=;:)@Őmi8rѹL@y^dlN2_|& !Sez/FXva| ^Aib^_ A
Xb$>\ $0 Cw֑imxTQj}ex?!R>LOG|ȍsQf8O
^[zD&՛95
ۥ~X{ 4s|HT - TQSdC~l8S(YVZu߫<$sŝ~. Lz[6 e57DRL2cQ>bad=RݳR
\e܂3b 뀝HnvzyH&ɒ8=ܞדg;&40ٲiӕ}`>Y#9 3a ɣ7Ụb^sɣ'^.Gk jA@t^pnJ뛚UNJꄽ_"s%
4Zjq/ NUh#Fyaoߘv({jusB"0&3kPɕBq$]sfC&ʱng86) e͓oNA7[^B\&H}+Ks,1(#~n.ڜg3jU\~h{rlN MUu^5v^OYPi-fbcˆ](/WHSQ@eM:=_TLt!|PPϐ0&
qd͇ ;LڃD/xJb %^FY%t a.S ֟bt!stė'SƶmUУpsk"}WqRyIEO\ f\myOӒg8j{}iHvNՍ3_seiU&¤ :&]f`7qUmyK;"HPgv 4XUΤg7 +d^Y#;7H5|z/I_#jb@ѻ whe]43ZXnp cOfA YDyK˖5?Ќ~[E"} ]4ufqMvFQvMƑC]XiI9?|^J|t|$_G[a tOD%M#0
2lU =,TfF
m捯V$1oRݻ7(Q٭uD@/&c=mu+aqV7m1
|Ay Ì](7 O3S(1\6v&L,/"WrRD y$3{CéfdbeMzƑ,S ` IGʛv Eq- m|?
K-Z"1. BNCݳ s@&hwB%^W(;=գ3S5 g Q1k .7#w|5+ ?N"!
/;.
L̠S k1/nc]JiD0ޛYen4_yt)1^TܿIupC Vw
2ikc_.E13vJ.YWQL ̼Zu8x_~Vx2c}aA팴*D`|δpNm@
4[۲`Z SbYeA& 0x^
9e>AjxX~)(h"N_Vx iGCQ A\ )4(Mv;e#z ڎQ<<}K`Y]N);Ͳ??RϢJ.W,sA
$jh|CL ̝J5p ]8low \ .JXO.r#CI+? **^`V (ljC9CRſ>ǝvW\[2L~3ҫae0hrKR.F׀آ*0@Kh GwkC<DƢ,۩@ O0%)m&$s9:WY_*\
~EjD"Hʠ jDdU`3^b ?)+!YZ#wԌf\ږLk(Zl9 E_WGJCD VVjgr͋(k_Ό7[23T)N 89MqH C-~~KJ<4"_SFoowjl3mS5z 1m zP$z{NExGWUAp^1U麟S*0 J7uf;i|y wA#vOS*Å@/3WdU+8R[.Ԓ.wU;`73Why!V)>z#O}f`D7f R ޔRrm>D! 2oa`g72>K\ r
#<`T @wG_<H˵8ZNĬu n{G ,3 3X-X_ Lg߰.%[5n2Yt Q9)߅UÁ:Jv!sM<ȇ;gqg 6"J5c٣ [
bq$0A'rʸ˿[w`ǕRi,!t'mX+)B$ ggJ8bE[0תaX>HC@ '4;1?%f9 v_NAL"I^G0MR6ӥۺ} "jWPc Baāg 3"/6Sq"'Lkx T;f3,TR?x8rYhB
s<ɷ> 4 >
2`6,7WU2%ƷG! @FZP'Gd6eXr: ֚Ci5ܾ7:q 4E)4*6CCg&ySn>en)"~+38r߳ђ t mM t{W@l5Y|(W T&O3 Qї8ЯZZ3m2Kh T9ZYOe3Q[1T _DGF' ezJ+z@P<ѠCJAȏ2~܃j^_\ &md'1> V 1zuUf5YRЧ|hb_xxxXif1$[^ q [:VZWxҔO&3DĢ("#|T\bA釼.}3$#tUfI+o2 $ HvImmXgߣy q x@K =%=TEЈA&dJ1&iAeuNoJPJQ{ۖ_ vco;oǕ\ } ~,g0P`YS\yN D<4۟~+8].a$H)Ki:F)SvEQ?Ojǽ ˥"iqB@)[|;4B0ERk`dz2 7}uqnCjF1>ӹWѽIY\.'sfbپ3m FN I;o] dd|83L (^7^6VxTRylwTS,~{\y VH(BNKfkx9fj'mŏf4pVڞ+k4ECJgmm%sg;TQ'_ P
,֤ sc!tW A5(r (Vɵ2A?v]klNi S[Ĭ5$? @dWIJF ;5 6j.xLOa!44 k[ _'_ޘ/7W
!Y jKrz ^ :$m5w1FۃCi'&SGVJw-)#JEg K.OG;rRA>!A)W.[oPD ~ S{2:I?fMS}͗GDZvv2 1^BdYoJ7`( `j? Wf0,.8:Yҕ഻Еb~(]VRTU*ٲSZ!=]ri}r7 USOLe
i?DlcoԦe/.2ӂ(fLP}6 W & dF;9^#7x(dJ y+C0R3^@,+z>U\F-r1mJc ʐOݗI)au ؚKM[ZZ7 H<[pTH s!V*YO:32.ԅHE`d(orw.լ͔J5$RI"n5cw[αFL`Z1[[GY}D~+F aui,7[
Kmcb=mr4(bq5<~Oj
ˇ-_y\ xVl ]#ʲS
&oԢy qG=emn #J asPiH#իSUtr䁟ΰ>GoܿAzr"d
[\dǩp[vJ@rRB};'h[G'dG X>*.YX+H yGeUrCaZ!ű fb=e߱Z
X|á-<0w3 |GZ D͠3[
6
[ltp_b,l[x=8ĭTYU4ZͲr'fY5eϿ AW1@;9`Dv"YMR5(* ^ěړ .l%g)(4u 5ɞ:K~tGԬ($滙8x-r)т!ᣫBK h*>٥l 0wτ%LT@WC4ҲU<#y]2lpVo! v \KӲ79JwWI*÷,8¿ 릉0Zpٞ372~tjݏO JN2Xb`=FPmNg*A1%܀ɒ|Rh(HK[D QkluEɝvUk|1MĀ XKLDi ڤ6$x?6ق ?ṗC~T63҉x]C`qCpvV.NJ$n[q(|m%x> 1R#3,
u%r{UKk/i{r.jqj
LƖ br6mM]6HZ$"Z2& 8cw:+m Ҕ?
7
Fcwvk.g9M/eM D:n21̘ 8RGttUy&&T]S ڶJWcЕ! #KKb p bk68h"hwA±qǷ n/a&@htƌ|00hg ʪhHj]lKj3,r} a뭠qc2̑j?|xm
R ʿFƖ, d$ΩR,1ˏK k ³b % y`ZNHjs{`u
eS !`zw1{Su`<90). *L ? P"s}Pmqw=&crYt6>З/Y=
eewX
&?iwfOcOt{++@<76#ـ6̬kف|xhoi{8*6KETg)I/X_;DbgY*Ui o"m|-L3_ZePZSQq3<)
B- jG3 ǻBt|VV>dNDxQǽ̇ۇcp:3WHٽrbY@//?z$N I;_7C/
vm;7-MKG|#kA76wD)7 ō$<; fN \_1nek-Zڇ;a))r
ҋO#&cxY0ceT_Hdk
# _\ `c.`ј۪eU$;![BcDTDt 1rBAR\(jQ@6a6_cIָÌ$R O.e]2>^'c%(zCU&yU|߳4_4byKC&-A۷!@/ D o*u g2T2S!x5#!6Z/;>$[{t]_6m(H&3*.r +[Rmbü
w_#Rac贞 bH9h
]
us54S8H v +9k]"
UQ0χORFr͚/^}-WLI G3Fn[mݸUTSmd-q%Dg +\J}V:W0#d`f U6ǭMޏzxK1[rp%k1
pU$Z'
"L|"ʾû́< Hސ
$!3Z/D*\ R (HsU {r +I.}ѹDOF 8MVѢ'Pޔ(ؐBiN~!CIBPl۲QG<-
_
|>HrQ@㟅 +4 Olk-
rB+i0Jx*cIQX8@` G'T5Եw>y `62jS1 ->Woj0iD.Ma,?/lSv>jڅ)k ܬ' ~I${ֶ䧍旽ߛ)3Z*kf> a]F3;E]Mfr(s;9B j`iKbzz)yl3{VOÃxj .%ppI\
_ )>3:<ؖ^lPRTk' :m`C_S\"plw"ePcD>C;V+Şk|&&dld\6: SUǎ1K*Ӧ. gӠ]o6*W6qʝ`z2+b v+B[IY8}6JV*Hw̲hO7 t ~S%}sյI7qm )-Q; u^Ćf8pN:+lw)g|ׂqB)FkƖ*Itz❝_A &SnZ(q "wv`+p-j2DZf5[㱟Rݕ>-4A ]V{7hn {wP
1_Sfc776;"nNi
GVTW PavU?6;(."NFӋ}%
[LUfqǃX x;@<{IQKWX8d_F'+J*G[J6{@6
C_ͳ2ߙݶ[%ťѱ~ z4\rYZ H
[qofF{(I&\BΌ| z4whx '7_"hIߨz߃, ՚}}PxZꌕh?qQ[7Z
LH>o *s陼=r'oIB!
Nڟv3,5Zyi3Zi v-PpB$>]Zu; Bm %b%6] PzdÍWY|r#zd r딏Vc/
xLRHhtHyz ?q
R
Q!I6j S}HO
8K/g .>YAǧ Wyu IUb=7Mh ǁzEIY6TY7Uq}q~D]uWwW&a;ccR:A@ŴXi ͝ L
gr}-$#B1
FŊ/է0pU
0t%>";ss|#)ŧ@t8Tlw(fGNj!Vf$&x$,_5~N0SJ|Gh[BaC%E0z*="\t)Ѝx79o4b# E 0L ϤBB4ar מ7D!N.K81T̻)c', 8 m(/j$$5.rȘF%͜LĩRyTP+3P 8q=.Д_MeH%۸ .oMual)!sUBZ&>Ǥ<9/[)\h; OɣnJ2Y pg(#FD 9vDOun8_ FHCR7oFr[RYWuṚEvP=!8m2"[tVl ^FW#ɐ*?*tbUU˽j
n߫1zC;P
QI50)} c 7s Eh79?'YȖ; w(tʔ qz:TcV
[rT)<KeG9XILO>4=|,+\ rc Um8ԫ .9 <ě<*R8nmc f=fc {iʅ03/ O_m:4$8x{VV$^]q<\i[r&w$"}P; MtN5~khU
2NJFw
[f $FȎF`ނsOsޑfS@-R9B 8a$ ZӞo ֗k|Fɬ]u)@'RWIwBRM&59{ET%'g_.0rr?d;냱ӛ7\o.mpIY/m(:aƀIA{;s 6 B9 pbb<~-U?CTfY نr@XvߖUSEO[]m>η^cw+ 7T3,& APbGitMbr
a'=>a*օSFnIň3ViO(D b>rԙۭ'j@"7rX
q
k 3ֈԠZtrE @,.ŎMg4~U.6d6-J-J e=yxiOO+wP2[6os$qAbU(G\*5md˷lO3I:_ xro D bЪ[ Ċ,V 3
<RTNGf|AFe֢[
á }͙_H2pDgn
L
-coYw<ʎଡ଼'b2wmpG1ѻ ȵ8rϑ)A\_z?ܵ-=h o\#2o4)XrBA%L@ '5p9ظ&$ɜ7'.C/p Qjsa
ՠ ƱN3G,h@^^J_\## {3G9fj^&/@55t38XZ0tv{W @Ci@nMW##lFd7c`fVq^i)!ć/fp9i5 PSU6Buj'b&Ky]GjvRI'FS'6]={a'h^DMy
5cV_ǂb,sTYl>TR61CgPQ
mERbLqshQ=(k7X` O OS5JOuhmq^^1V h0WM X0Q8V,(_jYhM U2R0Gb61u$lu1!^z3faߕVkqGk c" z7Y4ʕ[pLrU Cpti:F gS?`3~G 1}DކJTi4 B`*x
D Օc(4F
+?Er}/ G -r[lU| *rjolpG :Յ6i_###6q i
/FNrC`{e6k-3 ҁ~o $W9b&Ȃ
o?Z|_[o> U5ᢶA:3y5ޞ5J2
h#7\ >H!;@@š
Fx 35
+, 櫎$*%@ΡXTpZO?P& +.3+^+[yWMW{tOwI"vno<{)RiEp ;Ll|dŧ?)q#5D
vO;<'iK>F~Z1L`OL"4\
?!
VSʒ-#ob{M']&/CSC:pd嬩ʖx?'eRLj 'yD5TX-x**D:t 6,|^t{C,ˮ *E4rLFe | @ |c;։o X{BDRȡшA=sݗU*gXl5U}ߙ0Fk
v!
@t{
+xz h}VrJ~Xsyb9qVʖfT`ls#=Ri"(/\eUtiEyddP X&;0l>!Pr&ݜj"Uk0PuE/oep' tseAQ-Z}r߈ljzTV (ltAq_MMvWOqeܽX.\c ̂k6
YZ