python3-libxml2-python-2.9.7-150000.3.88.1 < > , L iRp9|kwz2~9
̯^^_!:Nzِ ce=1"2qP> @V!9X#
J]_b6hLw3RУ:؝| sku/&An" `ʙ+ {W
IA$amq&N${mࡾuck}WHoYg>,}@CRLZNt4!zQabq
(z$3"zV?t
> > h ? h d - I , 0 I j n @ @ @ @
@ @ @ @
@ @ @ 4 @ 4 / \ / !D / ( ! 8 ! 1 9 "` 1 : &8 1 F Y G Z @ H [ @ I \ @ X \H Y \T \ \ @ ] ] @ ^ ` b a c bS d b e b f b l b u b @ v c w ed @ x fd @ y gd 1 z h( h8 h< hB h C python3-libxml2-python 2.9.7 150000.3.88.1 Python Bindings for libxml2 The libxml2-python package contains a module that permits applications
written in the Python programming language to use the interface
supplied by the libxml2 library to manipulate XML files.
This library allows manipulation of XML files. It includes support for
reading, modifying, and writing XML and HTML files. There is DTD
support that includes parsing and validation even with complex DTDs,
either at parse time or later once the document has been modified. iRs390zp38 6SUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Development/Libraries/Python http://xmlsoft.org linux s390x $ $ ~ ~ ; F W Y 3 , k % j 5 I L 0 9
q Y * K V O / h d ( 'A큤A큤A큤 iRiRiRiRiRWV Y iRiRiRJq2Y iRWV WV WV WV WV WV WV WV WV WV Jq2WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV Jq2WV WV Jq2WV WV WV WV Jq2WV WV WV WV WV WV WV Yt/WV WV 8ede58bee3442ed2f21a68527c9674a25ce5f2ed96e2da11565ffadfa891cf7f 83c94aa3c7f2f1dcb63ef6087505b144a9f505bc7dd7b1488ac9a908c62adc94 2c4ff2483d2f3391d8ddded2b602191aa79a7bf8e730af0979fe7a1ac758a113 cec4962d6fc49a727f59911f2578f9c2749e8428ba7b8d414f3526018eb92ac4 a5e89415342706ac6f6060034de1e3746d3e3599c205a01331432e7f5c604716 a22bc379366fba314bf3300f5e571a66c9e323d39a49c6b5753590e5a4a138c2 e4e6c109b639efa13359756d5eadb76fa4d9bbe7bcd22454fe36daf937ee7afb c276155a1f52791fa3b0f556c9ec9df48ebf7a423054cec15ac9609c7afb52f9 3493f94d408ec7485884aab29849f89948933a9ad90814195b4ccecfb0c3cb5f 816e528a45fe3eb8805a04b5f404c1a59ae7bf08ed5a409531766b3f4e5ab60f 5c03a74ad276780f22cd27bc5587163e23351c4a148e446c05ad0ae8f9413531 380169713b027ebcc07247dcf7b6e47946a046c3a3b5e19b411e63f7e3a98eb7 d6b2cf9784a83919fff9226c03245a37753c65f7e8024046a5cf6611d25ac4f7 10692dba0adee063c0601c1ba3f6d05805420712792a43774201b62f11a25b5f 88dfc2e31c6c1d00b939cbac49004d1e12d09425482069acbc2e4179c10d1d70 ce6e1d2b8fb211956bc3bedfe4a3fa5f740095294ebde4083cd5f31a5bfbe6e7 8257f7bdba92c41b431869ad8715cef2d7229cc981240ec904c89ee088b18e25 12b40c38d5a2e6b6274d88553f020941ed88cda31e88cba32532f1cd752e0f8c 084b8337edd1027f184c81ca1bc0f0ccd3c4e4c42d06a6224f0444ebd6ff46ba 4735c1d1a788865465cdbfdd8c85a89a088b32047a9409eac73fbe4741813c7d c362c9d1f1f156e29177d474d5aae8bfac832c45683b89943d192f0f720da10b 2d8f1d339e45ce3d461a4233dde5ff3c72611043a59df3415fd09ed6b0021144 87d70a56f07787f91da715075e003601905b2267314828759360c3c293e788d6 33baab5fbd2aad49ae3d7c5c78db34e8f662ffd4debae3550e5619c0c6066e5c 7fc13b816beb54e8198ef1b55e6072982955b64b4668d57886b4d42d045a8fba d3b9d5190dc80d97a803fe5263d9fcaed1a048c84a0fd2fcff48624d75d61de2 f059104d7180b4e0276c3f5d4463ca6ea7bc8970641cf41fd2e2d7d90d856d0d c9a0ca07259dcf4c8bc42645fdd8c09d4e3ba858cab86a782ec66186284c015c 3d927186f0060e062b0014f5ab7efeea7c93adcaebb2735330568e597e76b196 ce31e8a2f786429ba11c33fded44d46e114efa57c37b68134fe6f7beed6be681 73037634d515003748d51df9fc005164bf45b92cf32ea26bfd03a02a3e1251a8 dc8b28b60f96525480182c038ccbe72da43deac6adb560af54de84a6b1287806 bdf24f42f4fabd6c14fd249c28ae23039f490acd764480d0cd7f910e056f89bb d87f79fea1ff942e2e0c1d6620a8d8661164cdebb0d611f4bf9aafe6423c74af 5946706d0bac15f464aa8c583189f4319882980baf0303e9030d1f7aaa7f3e20 65f93cdf022f5cf5a54e75dfd8e603136b38777d1dc42fbd588a5b91ef157e7b d3d05c0ceb3b5d6e4093fa09eb4762d134c33ea4420cf77b35c6fb1714b1ea77 ae04c31cd5d50e52c49073f55a2b4e402be4fea3f15f40163e9131581251f621 6e8dd170c8fcbafc4fa80de55bb50a69ab5915b4ada4e1957b26db269d96d2dd 3029a99875e64ad4a9cfab4872084da559493802801fdbc81b556ec0d0b1c511 57f4914b3450bfe0a897d7142f646b7d356bfd9b0011868a93c6c8dc76771d1e 5c645cdea531c86c9d76f040297341b4adf1e792001a9e732fe64ea7fad815c1 2db653e22c6b70eeea3c73e901b8357185de67081f7925346b283c17be33a826 9e4967a6cf4170463dce11115658b1f10928e87b8a113af991951ac697482d06 5706ad8c88efbefa478b1e8ebcb429952516b0ca835795347f09d54241d49d50 24702979009ea28cd26d573fe2dd86676e99685b28cb943b5a74b79a36f34b63 a24b1ef3c8761476f96c9efd9d6f4187e9114083ffcccdf68e3208fceb9649e8 33d20ab8fac08edb5744671b6657bff4aa72103639e7ad4a1a0b882d68933ed9 85f53c610cfd612da3b50b10a85b9a7839448dd0ed8495ab18cf4007b9decbca 1941f6cdc3e533112cecbb4d44e685746069703b26d1f6fb26f25fdbddde6f55 afb68302b1341fc3cc01fdcf6a29467d9d7663b10a84b91e6244cd401ddd3f38 75190a68c95e15a360738f0e6d30023063bdf5cd3c22d33f1e8778788a15adb0 19a60466c9f1ff384872e9406570d844d9220cd8a8eda1d7096cebe41959fa82 b21dc1379b08cda38713c03b11fcc49f7ba3107e1e9d2734fe9f3b2d9b2b42e5 eba7c19b188f23e92fc55de6a0e8aeed09c28679ab5cbf7ba7380b9298f7a8c9 6f31540b161de62846aacd9d12662cd1ec514a8537f1de227625b45f85aee6dd bed086f942f17edc82d51be74edea32dd668a884c1ea0da7af4afb80c02a3e1f 3d7c3f633ffa5ba6aabdf5bf43c03cc306b4adacef1666111bd6340ca4bd0b6e 367c498b1fc6ee87a5292fac14475f35e86f79178ccb3eb3bb0806e5aee5742b 393186756b5d59eaeb79ef71929f74eeb861a1d29bd6f5cc55394f7f076bc4ad 5512fdc3bfad5f729842305f300e9cd48252f42045fbb31a511f6311f019488b root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python-libxml2-python-2.9.7-150000.3.88.1.src.rpm libxml2mod.cpython-36m-s390x-linux-gnu.so()(64bit) python3-libxml2-python python3-libxml2-python(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libpython3.6m.so.1.0()(64bit) libxml2-2 libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.5.4)(64bit) libxml2.so.2(LIBXML2_2.5.6)(64bit) libxml2.so.2(LIBXML2_2.5.7)(64bit) libxml2.so.2(LIBXML2_2.5.8)(64bit) libxml2.so.2(LIBXML2_2.5.9)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libxml2.so.2(LIBXML2_2.6.1)(64bit) libxml2.so.2(LIBXML2_2.6.10)(64bit) libxml2.so.2(LIBXML2_2.6.11)(64bit) libxml2.so.2(LIBXML2_2.6.12)(64bit) libxml2.so.2(LIBXML2_2.6.14)(64bit) libxml2.so.2(LIBXML2_2.6.15)(64bit) libxml2.so.2(LIBXML2_2.6.16)(64bit) libxml2.so.2(LIBXML2_2.6.17)(64bit) libxml2.so.2(LIBXML2_2.6.18)(64bit) libxml2.so.2(LIBXML2_2.6.2)(64bit) libxml2.so.2(LIBXML2_2.6.20)(64bit) libxml2.so.2(LIBXML2_2.6.21)(64bit) libxml2.so.2(LIBXML2_2.6.23)(64bit) libxml2.so.2(LIBXML2_2.6.25)(64bit) libxml2.so.2(LIBXML2_2.6.27)(64bit) libxml2.so.2(LIBXML2_2.6.28)(64bit) libxml2.so.2(LIBXML2_2.6.3)(64bit) libxml2.so.2(LIBXML2_2.6.5)(64bit) libxml2.so.2(LIBXML2_2.6.6)(64bit) libxml2.so.2(LIBXML2_2.6.8)(64bit) libxml2.so.2(LIBXML2_2.7.0)(64bit) libxml2.so.2(LIBXML2_2.7.3)(64bit) libxml2.so.2(LIBXML2_2.8.0)(64bit) libxml2.so.2(LIBXML2_2.9.0)(64bit) libxml2.so.2(LIBXML2_2.9.1)(64bit) python(abi) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.9.7 3.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 h@h^h^f|ee@e?ddBzc_cMCc @bq@b
`` @`N@`N@`N@_G@_V ^V@^Y ^(9@^
@]fl] @\N[@[@Z@Z@Y@Y*@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTApgajdos@suse.com pgajdos@suse.com pgajdos@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com pmonreal@suse.com david.anes@suse.com david.anes@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com mgorse@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com aavindraa@gmail.com aavindraa@gmail.com jmatejek@suse.com jmatejek@suse.com jengelh@inai.de tchvatal@suse.com tchvatal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com kstreitova@suse.com psimons@suse.com kstreitova@suse.com sflees@suse.de rpm@fthiessen.de vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com - security update CVE-2025-9714 [bsc#1249076]
- added patches
https://gitlab.gnome.org/GNOME/libxml2/-/commit/852c93a2dc2224f020aab55a9702f992db404836
* libxml2-CVE-2025-9714-0.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/5153c7baceca65f575efdcbb0244860d97031f96
* libxml2-CVE-2025-9714-1.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/64115ed62dd01dab81a9157a54738523fe117333
* libxml2-CVE-2025-9714-2.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/2d97a97aa515f1bd3efc35c8ea2aa68676c6f8e1
* libxml2-CVE-2025-9714-3.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/012f8e92847a4e5ff684e7bd8e81a0b1ad104e32
* libxml2-CVE-2025-9714-4.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/949eced484520bdde3348e55eba048501b809127
* libxml2-CVE-2025-9714-5.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/390f05e7033fa8658f310dce9704f4f88e84b7fe
* libxml2-CVE-2025-9714-6.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/429d4ecaae5d61d591f279220125a583836fb84e
* libxml2-CVE-2025-9714-7.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/6f1470a5d6e3e369fe93f52d5760ba7c947f0cd1
* libxml2-CVE-2025-9714-8.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21
* libxml2-CVE-2025-9714.patch - security update
- added patches
CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
+ libxml2-CVE-2025-49794,49796.patch - security update
- added patches
CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
+ libxml2-CVE-2025-6170,6021.patch - Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
xmlHTMLPrintFileContext in xmllint.c
* Added libxml2-CVE-2024-34459.patch - Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
* Added libxml2-CVE-2024-25062.patch - Security update:
* [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
in tree.c
- Added file libxml2-CVE-2023-45322.patch - Security update:
* [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
buffer overflow
- Added file libxml2-CVE-2023-39615.patch - Security update:
* [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isn't deterministic
- Added patch libxml2-CVE-2023-29469.patch
* [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
xmlSchemaFixupComplexType
- Added patch libxml2-CVE-2023-28484-1.patch
- Added patch libxml2-CVE-2023-28484-2.patch
- Fix changelog entries in both .changes files.
- Apply al patches correctly for libxml2 and python-libxml2. - Add W3C conformance tests to the testsuite (bsc#1204585):
* Added file xmlts20080827.tar.gz - Security fixes:
* [CVE-2022-40303, bsc#1204366] Fix integer overflows with
XML_PARSE_HUGE
+ Added patch libxml2-CVE-2022-40303.patch
* [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
entity reference cycles
+ Added patch libxml2-CVE-2022-40304.patch - Security fix: [bsc#1201978, CVE-2016-3709]
* Cross-site scripting vulnerability after commit 960f0e2
* Add libxml2-CVE-2016-3709.patch - Security fix: [bsc#1199132, CVE-2022-29824]
* Integer overflow leading to out-of-bounds write in buf.c
(xmlBuf*) and tree.c (xmlBuffer*)
* Add libxml2-CVE-2022-29824.patch - Security fix: [bsc#1196490, CVE-2022-23308]
* Use-after-free of ID and IDREF attributes.
* Add libxml2-CVE-2022-23308.patch - Security fix: [bsc#1186015, CVE-2021-3541]
* Exponential entity expansion attack bypasses all existing
protection mechanisms.
* Add libxml2-CVE-2021-3541.patch - Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
* NULL pointer dereference in valid.c:xmlValidBuildAContentModel
* Add libxml2-CVE-2021-3537.patch - Security fix: [bsc#1185408, CVE-2021-3518]
* Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
* Add libxml2-CVE-2021-3518.patch - Security fix: [bsc#1185410, CVE-2021-3517]
* Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3517.patch - Security fix: [bsc#1185409, CVE-2021-3516]
* Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3516.patch - Avoid quadratic checking of identity-constraints: [bsc#1178823]
* key/unique/keyref schema attributes currently use qudratic loops
to check their various constraints (that keys are unique and that
keyrefs refer to existing keys).
* This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch - Security fix: [bsc#1176179, CVE-2020-24977]
* xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch - Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch - Security fix: [bsc#1161521, CVE-2019-20388]
* Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch - Security fix: [bsc#1161517, CVE-2020-7595]
* xmlStringLenDecodeEntities in parser.c has an infinite loop in
a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch - Security fix: [bsc#1159928, CVE-2019-19956]
* Memory leak related to newDoc->oldNs in xmlParseBalancedChunkMemoryRecover:parser.c
- Add libxml2-CVE-2019-19956.patch - Synchronize changelog files for libxml2 and python-libxml2-python [bsc#1123919] - Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH
to avoid nodeset limit when processing large XML files [bsc#1135123]
* Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch - Add libxml2-python3-string-null-check.patch: fix NULL pointer
dereference when parsing invalid data (bsc#1065270
glgo#libxml2!15).). - Security fix:
[bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
* Infinite loop in LZMA decompression
* Fixes CVE-2018-9251 introduced by CVE-2017-18258
* Added libxml2-CVE-2018-14567.patch - Security fix [bsc#1102046, CVE-2018-14404]
* NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
allow attackers to cause a denial of service
* Added libxml2-CVE-2018-14404.patch - Version update to 2.9.7 release:
* Bug Fixes:
+ xmlcatalog: restore ability to query system catalog easily
+ Fix comparison of nodesets to strings
* Improvements:
+ Add Makefile rules to rebuild HTML man pages
+ Remove generated file python/setup.py from version control
+ Fix mixed decls and code in timsort.h
+ Rework handling of return values in thread tests
+ Fix unused variable warnings in testrecurse
+ Fix -Wimplicit-fallthrough warnings
+ Upgrade timsort.h to latest revision
+ Fix a couple of warnings in dict.c and threads.c
+ Fix unused variable warnings in nanohttp.c
+ Don't include winsock2.h in xmllint.c
+ Use __linux__ macro in generated code
* Portability:
+ Add declaration for DllMain
+ Fix preprocessor conditional in threads.h
+ Fix macro redefinition warning
+ many Windows specific improvements
* Documentation:
+ xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
* Fix XPath stack frame logic
* Report undefined XPath variable error message
* Fix regression with librsvg
* Handle more invalid entity values in recovery mode
* Fix structured validation errors
* Fix memory leak in LZMA decompressor
* Set memory limit for LZMA decompression
* Handle illegal entity values in recovery mode
* Fix debug dump of streaming XPath expressions
* Fix memory leak in nanoftp
* Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
* upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8 - clean with spec-cleaner - libxml2-python3-unicode-errors.patch: work around an issue with
libxml2 supplied error strings being undecodable UTF-8 (bsc#1065270) - convert to singlespec, build a python 3 version
- change build instructions to use setup.py (and %python_build macros)
instead of makefile-based approach
- add python3.6-verify_fd.patch that fixes libxml2 on python 3.6
- rename to python-libxml2-python to conform to package naming policy
(PyPI name is "libxml2-python") - Update package summaries and RPM groups. Trim descriptions for
size on secondary subpackages. Replace install call by a
commonly-used macro. - Add patch to fix TW integration:
* libxml2-bug787941.patch - Version update to 2.9.5 release:
* Merged all the previous cve fixes that were patched in
* Few small tweaks
- Remove merged patches:
* libxml2-CVE-2016-4658.patch
* libxml2-CVE-2017-0663.patch
* libxml2-CVE-2017-5969.patch
* libxml2-CVE-2017-9047.patch
* libxml2-CVE-2017-9048.patch
* libxml2-CVE-2017-9049.patch
* libxml2-2.9.4-fix_attribute_decoding.patch - Security fix:
* libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
* Fix Heap buffer overflow in xmlAddID - Security fix:
* libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
* Fix NULL pointer deref in xmlDumpElementContent - Security fixes:
* libxml2-CVE-2017-9049.patch [bsc#1039066]
* heap-based buffer overflow (xmlDictComputeFastKey func)
* libxml2-CVE-2017-9048.patch [bsc#1039063]
* stack overflow vulnerability (xmlSnprintfElementContent func)
* libxml2-CVE-2017-9047.patch [bsc#1039064]
* stack overflow vulnerability (xmlSnprintfElementContent func) - Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
XPointer ranges. Namespace nodes must be copied to avoid
use-after-free errors. But they don't necessarily have a physical
representation in a document, so simply disallow them in XPointer
ranges [bsc#1005544] [CVE-2016-4658] - add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
decoding during XML schema validation [bnc#983288] - Update libxml2 to version libxml2-2.9.4. The new version is
resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch. - add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
push parser that fails with bogus UTF-8 encoding error when
multi-byte character in large CDATA section is split across
buffer [bnc#962796] - Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
while parsing certain XML files in recovery mode (CVE-2016-3627,
bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
to improve protection against Billion Laughs Attack (bnc#975947). - Update to new upstream release 2.9.3 (bsc#954429):
* Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
* And other bugfixes
- Removed upstream fixed patches:
* libxml2-dont_initialize_catalog.patch
* 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
* 0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a missing entities after CVE-2014-3660 fix
(https://bugzilla.gnome.org/show_bug.cgi?id=738805)
* added patches:
0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a regression in libxml2 2.9.2
* https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch - update to 2.9.2
* drop libxml2-CVE-2014-3660.patch (upstream)
* add keyring to verify tarball
Security:
Fix for CVE-2014-3660 billion laugh variant
CVE-2014-0191 Do not fetch external parameter entities
Improvements:
win32/libxml2.def.src after rebuild in doc
elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
Provide cmake module
Fix a couple of issues raised by make dist
Fix and add const qualifiers
Preparing for upcoming release of 2.9.2
Fix zlib and lzma libraries check via command line
wrong error column in structured error when parsing end tag
doc/news.html: small update to avoid line join while generating NEWS.
Add methods for python3 iterator
Support element node traversal in document fragments
xmlNodeSetName: Allow setting the name to a substring of the currently set name
Added macros for argument casts
adding init calls to xml and html Read parsing entry points
Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
Implement choice for name classes on attributes
Two small namespace tweaks
xmllint --memory should fail on empty files
Cast encoding name to char pointer to match arg type - fix for CVE-2014-3660 (bnc#901546)
* denial of service via recursive entity expansion
(related to billion laughs)
* added libxml2-CVE-2014-3660.patch s390zp38 1762873879
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ 2.9.7-150000.3.88.1 2.9.7-150000.3.88.1 __pycache__ drv_libxml2.cpython-36.opt-1.pyc drv_libxml2.cpython-36.pyc libxml2.cpython-36.opt-1.pyc libxml2.cpython-36.pyc drv_libxml2.py libxml2.py libxml2_python-2.9.7-py3.6.egg-info libxml2mod.cpython-36m-s390x-linux-gnu.so python3-libxml2-python TODO libxml2class.txt tests attribs.py build.py compareNodes.py ctxterror.py cutnpaste.py dtdvalid.py error.py inbuf.py indexes.py input_callback.py invalid.xml nsdel.py outbuf.py push.py pushSAX.py pushSAXhtml.py reader.py reader2.py reader3.py reader4.py reader5.py reader6.py reader7.py reader8.py readererr.py readernext.py regexp.py relaxng.py resolver.py schema.py serialize.py sync.py test.dtd thread2.py tst.py tst.xml tstLastError.py tstURI.py tstmem.py tstxpath.py valid.xml validDTD.py validRNG.py validSchemas.py validate.py walker.py xpath.py xpathext.py xpathleak.py xpathns.py xpathret.py /usr/lib64/python3.6/site-packages/ /usr/lib64/python3.6/site-packages/__pycache__/ /usr/share/doc/packages/ /usr/share/doc/packages/python3-libxml2-python/ /usr/share/doc/packages/python3-libxml2-python/tests/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:41582/SUSE_SLE-15_Update/4afa7823737cce62be93d384f29f247b-python-libxml2-python.SUSE_SLE-15_Update drpm xz 5 s390x-suse-linux directory python 3.6 byte-compiled Python script, ISO-8859 text executable Python script, ASCII text executable ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5d7162a53a1278bd53429a027e69b7d349a80e5, stripped exported SGML document, ASCII text Python script, ISO-8859 text executable, with very long lines + R *R *R *R *R *R *R *P R R R R R )R %R R R R R #R R R R R (R R R &R $R R R R R R R 'R R "R R
R R
R R R !R R R R R B)|ޒ>F
utf-8 1b43148ae1152cf03f6fb3b7c16947d11788da548c4f15fbee3d312c4a989643 ? 7zXZ
! t/i] "k%a
Ó\ǩoiițrO|4q
*|41RPۋ7CYT4+>Ю}L}r# j=pDxO|a4)UU a" _[YI1S=L&7&S0^v2 J FWbZ.KC78S^F[} ]9aʔ%[zD;55GH;;/_Nz橮"C\L*yժfa":ؽBJك|j%i6(r`GWETV qŸ=깊U fX "{ FÂgY =)%{g!/H4e$@7嗭UQ jNDDRpSE.
6yF v9~,Ѷy#H
3vc9 # j,A:ɼ:(% 5gPZAH"t%Bx
U*¼CHfw
ҿ +LiչBWE+c٩FF,: %0 w<]w5IhJﭭ h
' !أc&!P@*FD@ MyO/fh=y"b !yH2e8zU{1z% ˣ2*f*7*O
w쨻UcN~fw f
P r-;ԝ {W#',G0mIM|HSH~)"*S办42ԥ+kpR w_\PTwZ%+`Sol7(M)`W G' Y*/܌3 $
c3 l)
N!ѬUȰx Dv\-NOy:#Aӱ2źa2j ำP9_Cy'O^MIoK;֪uv'YV%ls|i \U 4>OBⱞMjv(G;6Xw}.HR߅Z%ȪCxQ3rd]`#df# =y4k7 SpY: :}lЅlɴM =#U3%S*cA`ۤUHwQ߃̔&^RXdW {JZ:3@|GNF$Qy^b5l1'.73 K[B^!8T@L* GVveu(
g~^֊J<AN"W<:6
&pkKKɕ2+"rYrqW>"``| kqZKY%ǩ $3mc bLj0d
Q? EApW6A 0Z 5#@ސ
$C\ mӼ!(A)̩%KAI K\7)0;(14 UNE)TcwL"*.PT=BI[1oXDʰra֗- }7쇈5rQ^E
H'I ;)[ Ώ7t. ݹ aS IK 5cC: 2exΞWPԿq\ NP ް^]x}JAiae93
Ģ;FŲEpi- FDxՆR 5k^<-m ZE߇%7cL ιnvw^~!+dxfT $1NW4U'z7t3T+ Ake-) իOIb6r ,WȪFH;:IҞk;574D&/ Q'bw$V' 2Fnޒ
D=
F祻 />SR`w4ػ B܉ ٯ{GC_tӗ{}D]3{տ=g5(UOȶ.m[&))ǓUlx\p ƿ8l1 `H4 ,xG b.'{~~}١6]Ґcb3Jţq"F7VUX;ubzh}O >1Y<MKB65[ !Nz%k=yjhՊo8^6 c "Jk𪷚:` 9e Pѭ *Bk&}J3W
S"p\Nu &O"V
}`ҹ
Y|oO(bdm$ q UՉ4pB ڡQS
zRoCfIĻѓ--Y'Kӡ(y E)W" 23[}v./ ѥh>G`(G] >b,XR?Խ̡#\6=ʦip::J+콵};F!TO&9/
Z6LR}PB*D2hخOduHCXeW
H+y^^J4
I" LlnC3cZeI/S$=8QAdTViWqK@;ћ0pdWKcEGΊ%6hz fꇰ7GK@ݝ;(\{^-\RJ'cs
X .asKvؙ;o*xD9()&~x=|LZj?*= ]ckPt Ř>ؿGoA9 %A$J|m.C 3m=hʉq +Dȼ m
EYχk?TMXL@f!eO"=U(mcN> F3G5yn;F
zy03 Nx.qos' %G̭Ղ"mo.z$-h"畱a&Osɐ T)8PFKVCiB#{vlLj0Jye8 N %Ct #; \U- /De{kߜm]2 gC 2Jv1/X{.tzT絻 &. 9rFQu6wJD ϡC :ذ+L\.|1)&;)-qÅ^ڪW\P8^NkaIwZFf!h =Ŝ톚`~RH
ϳG+J
.8:ɕчvqNK*Jp\_`:"YAW8[0B
|0 $
gS|я FOLoD젊@~&܊.eUg\)z~~wIc,( Jt ~o KHAVa{;<lX9DOP@D Q-ᜓFh~t,`g{?\pa?
FtT)AHnQ~tBN^ am^ݞWR댵FS*N @!#-a68hI槥H1Bd!m ݷHW
68:]Os=Jb5S9KibR.9Jzd߽?)H7>!y 'F@^dNaZóad
ܜI ~;k57֫ K}\ ٥qxzE&.|谈̰*˲Zm|ؤIjrN"|tr%4+Tѣ$ݾMh'5r
6V?l Gt59c&, ~]Q"u7tϯ䕫@ vߩ䞎lľ% GڷQ +TL\Y 9tϢ³HMgM+kߋiwEWC_8(`
D^ ɳdImr1= {b/L Qs?GB!yv~1I4y_"Uib &Д:fo?X%<`k (kNּ89l.Y\U /C @ .,;6r6 s0}V$PJA;z(!`H
] c- [o'Jsbs/
R[7i46%XFf |N5(op2:[C bj|xC'#l[_|SG
b۹Lhs2,ARp2=S:dWؘz
.eVw\$>}CNȺǤZ kuCc(TG"5^ij AeTP>@!CzY)F! BMx{9lXlAYU锈8*GPB?K 4;鸑C mx[ .`
|x:J٘17mgnC5>ֿo27'Nn]=~mHv?oxעjm kؓ G2[/)_ Û9)Մ9* /~c Hi'rυ\iܴZU<).RxLh?C gۋŽ}V!̬;Ś}q866@CT&`{IӓL~ TK>0jo.XPfїopa0XblN_Nٚ)?2r<7=Mw0 " 1mLjk~ՎwDm[w䦳 ~%b2Tw%|ٟ-ݳk*!;cQ]
}/5's;h"{ \mM#S[_dcZ ufu|1hGas :n`D5DvF1oIcd7gXٻSs[qR/`oR5<42Z*_@('P,Pą~Ownɮ5[kq|۫>`wL0˨J: e}X>ZZu%*?#c/IJYt=k-zZ;s ]XƧ|&IPD5110Q+Pr[@W-\͕*~aU- [-eM~K1͆'kdJQcSw!ҹIִ4 һna{Pȋʬ #StZX
1l%
$ O\I;=Ri < S9ICO=q~O Z'p\6;Б8 ض>B!_3`N:RSq^
ovF =a7 cA&mRX< ,P 5De97!)`L[.,dl:QtݸLD)Q9wKdP!x4TV/5 yX,0!O߅Pi rյ . B%ɼ"& m^C+{@{uĬZSGI%^T(B$:Y ۣg"Z2&$FsW:ޣv_&ݛqp-ZrTO\*
\¶ R9m!Q@!2>i6'U2h~|=7%vL|7>jJD9)b[S`d*Ђ2"4ԍ^oW
Lt
rl7^ (a +(n)@\dW͑G 3zc;܈bEz -9 l_F.lEf@BS{^IfVHdjZU9lhE߃C[~r0s|y[0=X^5
J}䔌uVV?#.x/okXz[ 6ߏxbwU[uE5khӿ;T\(![>S7J8Ą_??RnU|gD4zq/{iuH'If 3?
aYjgG X,ɸɬl Yʻߵu9] 7Vp @{}:&.;!|);mP()*?q}]3K)n?$ᴣRxq=7tag,Ҝ. ,Y0P,W+YRe9V :JHeK>h׳|=X;5xM~㧌#+FUДE/
V quӐ^[6uPK@f4;t{6ᗼip ,3Y. )};4t]R(22f$wTKE.̼;em1/GTy[*:BtdA91ȨQr`(jlE8Շ豇0 cb8-13ZtЂJX!P ]s%ήJ6rȩ!6ޒ+܅)YJ
d"ø3ÇeܾU,xv?EY69[eۙآKേ+_&9;KR{5v0,*~FMnuݔ%:Kg 1 g$j!6f쫓EG
HRA|<Ͽؕ⣑i.OޏҨdm>+*S/fn\#'C}'F(G&^G&\4ޠD1V6!V29=3ٗ+QŕE h,&}
p}ӪyN_Ki[@[)wgKXЧ\
Uz 6v,3
ՓN ?Qך_Okj)_s;|PQv5@rb%w hJ.Kl2P_BKVB8 ۾$9 5>"V,i=Q)6vIpo. a%}C5T9Q( ?h(nP6:G2.<{A-:
Z#,V)
{:JS/'q|t/@ʨH5+
!P-i@ ax~=WƲ;9! <7ob5sZh/ۈ1C`-Ut$i㯷2 FO4?ډi;gwFlh#o֮+.oVT<;EI=>LFs"G뫆o6 xOV>*! /l04R]
@}zc-uX콡x"Yx SNѓuDp:([W~w0_QkN,S nI,4u&}N)@8+\R%&9tݣB=ח3c A҆?Y2 , Kr73v y,PvӰ簰+s`H~qcx=fd09 )Xқ孴 /U(LQp` l )!II`k^{`&5LaeW:lL}שMTIe+ìp (~dH}Zj ZGcfeBz <|:u{ icrSɠy/lUEiGCR}ky
g ԽWb ِE$\u ?P%d/M(.,=Oeٔq.+=]^SE@ŝXdP=[kN
K5b$͢\0s+kB:vFfv& ' ɡ *SŬ4STV7,XS#N,K=zz0*wOv59eahu)w*3S%CnGÉN:!α \C9]4&4&ctU_{G&zC*Bz FR`9.Fvꇨ ZN]$tH̍Z5DN֦VWw'~>UQ+#'8P AyW~@305%a3w&E%~ j3bV6q i03X{<+;G*0衶\t
2KhmIhv4~堒71 ^8@a7 $W,ZܑV]:`N-vagt߿<nuA@ GnKarI$ YUN9 p p7CN )x.*-P53$ 4[tf-Z(
jbl?C _֦^ ΄2 ;>\wRf^ֆ%qi!Q&
ߥL~EY-bʇI7 R*"ſ#ġ,Ӳ"`wfg>m}&]{+Z ]w8¶w8mޯ8Fq,e$P[ nO
l^QCƮJѣ Lj-:#:K ƛ\;zqf= 9,~!3Rނ8R7^[1!U:5^T6y9
`^6Y
140Zή^ ~6쬸g;Et68#"WR ?b?MțPj{jxE=gY=آP3|I|+`Qe𫿡)Դ̳'hڧ3^qfJ=Lq 3%u5鉽i%F7\)Nb4De>$tp !~ #c Y @q>ߖQ}&{5(ֿ/G716.=ndLy7Rgw-mtD&߸nko)Z\AY{H
ӰN|%=Kk!Bҏ
YB? 2- ވ#+
!66|p i+b
| ,P.= biFUNq.]wG}!waS|e{Љ̞.bSжҗ^|aj
W!qO { 6Ƒ[SMqƫYMMsK7 ;PD{d _ #-f m:\9pJX<Ҙ8w[)|2{@ѝI{+&n+): %kǵq=F)9i H.G4u "wָ.~ 3 ˭ .fls$&I3h@7V"8[F xx\կ<\oT)c jS?Fn#z1 \wHiE&o,ol
Iur+4 uZnUFYsFPV g|G@b$D`4RUdfp%bg;ZNlpUedžd"kh5M'A7#}<2>ST]_ǎ SS]2tG1~RL>3w6Ի3(H2>wFC6WB1v/;B"Q hXRI&y0^U;@~
12,p'Sy'bd >FEyx5cT![SCԉoE6_۽h;
7E͇0 z>nrM⼼ =#
hWa 44\AGO%8(wK UL帇FWn:Y(1#-f;LJX_I>&%l2l (i z{Ai[Q5l$ئGzY Uk?eRJ9V[M`r'{uO
!6n1$[ G& J 5\(6; mIufT:,ps
Ɠ% ӻ*EtwGWxcuLV8[
Wsriw kvWhQhFCpxȜ Ŷ[=- ,FrAt=(>RT$A_7B0>)\_JɐNv ӛu<׳Y D`pr }DF~)nY[(d_QOZ-TVTg\)$xZUv̜Py =
X7
"m M^x i}P0SH@|"q{.=57퇯K A oB<%sKʥvXD9 vX )uԇ9ǯ+TpukrLk 'gP#GjHGHpc~!Lۣ! [ػDzb˨*?1kr-鲋
=^ؠI_Ry&=\O ?
\Ǥה#-XA Se$ Oģ1Ee8]a>k*ipA-^joFQ߭B*\[eE~N j7Q6_aJI0FiKR5qث ~E i[ Uʰ2R p[0z4/QK :ߵO6J|l?\@
xr3 ++ oa zyžMyFGH Ӳf֝ c.j6]L ,%H*ګz,نL=1r ;%"h"N"sMqc;bpE0_Iw bUpJjA7*u$$qG#
W1l$>`J7 Rؚs27p;P N4}TF1 »j%߆|@Ş:+֣'A
,2m 4.@}9II~i`>g*Nz-{l$B K7DLMߏ3p\h>K?$ 6ө) vox,IFz;+?] _+3j# d lH `4j³E7HqCU+95/|U&>#.;b0_fìa=2 ܓ Ҳ
RײUU.4A* w _1d8<>#:g{
~:# ^/bowmjݯ ;VQ}(
::1/C:yШU$T9 Z-`Pʑf3#%5ˣں5] zX/EY0 ;| g j ^[NWs 1 {+$tyVU1$M:%4~_ mnpa.w,ѷ60BT:$e-_hmJ /c"(j7~H HW9Y0֢?3. UVx ~f~4r 뿡JF䵭ns B` DLlYR॰:7K&nT۴Q|I<}O{*qVWd 3v.rv&k9<4DxL߀POj.ȳW|aq$wmN
em)ck IÈsV!B%[Um$;GN RvGYc >~J ԏ[8ěf3 =L8V ś67}7}2(Z } CSczۋl3Z&qXC>!sdt~@}͘Z{JCmC
*܈ K^N|enSC>2.d$(E%X=b=R[ޅ$m DCyK%.6A9ltot|YZ8Ͼ$eSiP#r@.5ù q-V5(0}۬t x ; \vǐLas>M;X:~%Q-EKw 0oQEФw1Z|ho]>1SDNCn@AAnt;rPdN , ͮ.ym
Ƕ
}Yw# xb
\vF"q֓ qXF% /:{81)Mh#ۢAʸ9c:}ex8 tr e zA.Ǿ3]8ëSBR9VEOp
Ew"ץD P@HA1sN3%Hqn2u6^F K)`@w+S}qھ'HQVr{YQ*JϤ;z1tw sեmR ^1vaLSW<e E\?'-v$EJ8̰5NM2BݵgJ̠|ƇdaHP3&1e/!v gego ^IT'=}y x)<=<w!Ia@L y6ΐй^~x*
td zTPùM3kkIѭBi{k NZaj@&DY\ 8~ϒ"rAhkFP,U
\ebV4M
o FfYjG*w J.I ɇge97y
_FCSzס * |uL#6KX;`wOO +X8Rz©b ϠQD&KRNUi^Z$RAd)Co Hd ehZY菿@
> P" efWD a`h
h D|n) WocָҒ펆-ct(hNd dzU1A=l"Zƚd=Ayخ/fhQw5L mO\Vr~JAud; iS{>Hn"loԱ9iT+f9]%lѢwDWL)9Mg`^ e3 ?[ݲBQgh9։
`v.1NN.շ)i3Xcv϶7-=oҭE@Za`i&lfPZ7?Bb\[Y:~ĸ#ƦljC*[ ĕF3SuꪙEi![fs *E 3XG} mȝ`Hm6W#B #;N>QTMU*{LFOPwx+Уq՞ClA%RXrq*gޫpliY.6 z\' ֓z95l
T}z +\ 383 Mc }73en{>_}Iq;UQ͚6}a"L Y#0f$j I$ ꩰԋ/j 4 ZhG^]ݎʠZi1<C+k \s_ԁ
IEQd#íCJe #85hJ}*
]sӅ7O M cwֽ<2A7̐ r\Q>O%)bcd
[op+_5Ζ6B"&ō<}$3Ӽu u ҳ(Z|g#@b@j ~ "1b&d1zxP-XA*YZA ȅAne
y\AÁ2EP??#7K0=of\Yɱ.y59_W-yڑ(Pj~ ǷH>t2
lߜy /f|vyt hLlw#gٓbx`]|qZ_^b?顽3?`"[xA=4&wr7*УUMM}'x|IF̌ }ual?j&[t݊&~>z:lT \ eHcvwg~\4==ÆnMC
r'MƷfo^wZ98Z˺I rV9 ] Q+d"jgM!51njSKعg~K#L[cH0)rCd"ZklM 3|WY' MX{)k_mQ S
2=^~'L 3d@]DѾHNCs;쩎`]U1N Lp%a^k}W3T^ J¸_zPpcgӫ*&)պ`'-wL}}~qor"
rL,ߎ逷 JdjO|vhkFBLkFɰ w71@%D/:tOeATea\E"{ڃg^G64d; ش6="O I364ɜZ/Yݸ} 0Lp %VIn5_ᳫ}ҊMsC x.8\gYZyp G0⟑p6PR6
hh9sjxhzKgߟn=X$/s(JM0i° 8}WpKq#v ͗و>Y 6-JU sHĴ6BIW
cn{"O-QU&x&yf :WAvJ?} ,`ezg Ĕ@^:}甑"<eN- R} ^{9 b^O:0d<Û%9'5A NYi՞}7D[+%eXGbŇ#0|Ȗ73B72GGvz q?Ie~, pPS$JayVt
Mְ]s=N'!qoP6p2aE? 2B۸Q *^0spV}=TkDh{ֽiR3^muڴW,^ B w
ڦFrg X'\
0.] 1y:'K۬7A"=AFq`oL!TKlS5SA[<L%뢂C-洛/ 7=2k5,v { 07 ?d7$
)D ?G*z$;bkeu bK]h?~zIkִ,-*n4Zs]븷 ukZ66>^ JG.pƶ8iqfю =,SXC^õxtkN b"HG5wf1Eď62$MhD Ņdz_%2rǂeg<6v|i*͓ <'lFbzq *pp*g\ hH4ɳ@auF$ 2 QWx <,NvVKj,NQ_!N(%oñQ3" &E]R#77Hy~}Ŷjw\4xM*g&2EaOxi_ᎏ$PlĭSk2J.w@7@;E\41 K@.mSak]ȃfYhn t+Rk.lirԄ)NMt7In
|2 z2jde@~ 0la*{Y[25p ^ۺ.%w\
RY`?Gޑ(C҄"aL5N$ֳSn@"jp{$R|R(DRMǚ*Ԅ M5ɤ;D?J+ ,ZjqS-U$%*dm^et@:9W" ߍ"l,hh2z3RTn<P6p> u9lm9F9*,M3
8qe>i>e/?Oj@18
ݱ55}b?|K{0GC[]eV)^ =gE^`/GL!S _OC`^ixq ,%J|qr57o˚]Q5Xۄ WR/ߋG!g?fݡ(C^(%
TPny2wiT0I #G3;k!bGѶmӈ?Ztz˴ `I#h^ yЌc݊>QX040LJKLŗi7[ewY螢C["Z}|UQ!_$Tٖ'CjΕgxnZC0Xg,(ELH
dJm
ځVdbM{}!n+ 6̴}8<'-v8rzQ*7O&!Eɶqcѐ' \1u[Ud1ŃhO?b& fq BMQ^ ^c[mNMt^X;HhCJGr -2 +cWP
1X~ijz/mAk7Y#73hZ!!!H p
W*l
(tsZ r.=`vߝ,i/ͯaӞؽ[n WpJ+fO\ ,Tbk`^D5ZS(?_9Eh !! vt%^ z'RK|r"А:44o1&ɾFP)%\-%礷S<:)([Z_up夼aUvu|ڟYՒgjB. CO
zW)[p-[*!㖬:ms'Sr~.M J 5
nuעSR p
yUZ * d rlH 3|t uG rO @ *=]nMJ
+!tÃvEL8˹!9/kM [I%)Mp]1Vf0͑eu&`-6UnHl܁QȈt"q\ A۬w
-&a ~ /՚wٝ"P.%(ғ|S>n! > 6Gק#& G[}T= >h&X3&$ )sRb\by42¯01ރT;qap
uG:5-Yu;im9_$Q /v9>:l]5\\S&69p0~#XB.RV^&ôV\+u}^(nhчF)=C1};R'?˜䫛eW7Z> +c1xܠFP.Цt`CT&uT}7,
! M,2wOeFrLQkȨ }LV{/xiZO R}(imqyKcԂ*fG, RKUFrj>6PVkHt"K
n"juذ/{aP9BdU
T
'ӉoxQfZ1XS+,.±wТi:vA3 eE$O4 Y yB)@|
<ȭGEzpF9H&@O(DUw ፯
} 5} 3o Ӎ[T!A^d hݟق RBI~{p5gyv#$D֢=`L (
,];j9SsP-5#I,[,$::,CwU+~b='S vE!NSjlt[胟a b^ /Q7O% _]KC2H^T0$=T6ArGƎ. 8!sτ_;H〦rO GHa_?Z{{qNUp3ON ^KB;tA^ x*#J
|d\
nSN,m[SO%Е{p108RM1.is;&IQ 3
Ж u$ s}J:U)oTݒooeMeUjym$<^r`eS;02OIaq|oՀ$tR z
w X xf2y^LNqpL%Czr/<4pq(^C olTUV6ej7nu vl1598\2J9ؖ +A۽+bpdH%-߱Ҹ6T f aIn>隝2V
?׆,aSI(YPfiGruMrcGdy% ޥJZl*v-jVWosyZiPXSo}S٤8V +Ǎ uXjB3ד==xy/Г( dJ\+ ]gA?zbIA 帼
Zcxm\ZXcIdwB !
Hᨂk遚MH,iq˲/ ! *>6"AVh5ܹ)a61>k>!.0T/EpnDdRBsb5ۘp\y?0}GgPf7e93ZkFPLʏ˓z.(XO= U˜,ki>$v(LkiVXK PIQ;G ;KSUo^z|ڮJ^O嫷F'ʚC4SEk+,2ϣSI|4)s_sN^kJ)J!l3A7
@},m9\D41< j ;IuELL9Q*fr>r`cAg7>6 %m}n, ¨f lQENꋆ2pT4G@I`UFc+Ջ'i -"70HbQ8;"lMO 8gvQCFsjKj{ ,[yx{8pC 5|b,9! $,_zGHCҲ5|3y#> 6SjG9.MgЇ?p'jěTRt>nbxZ*$0xq = 9jQr3{egGzC9S:fP0 J=od/ W\ό#vϘͅv▭On:}ǣ [Σ4UѓdyyWNn;'-Ea65ِ䍣]JJXb jV0;(ԁJoKe+{0R$UڼMxE>a c P͋s;zݜ5/HxIFտǭz/D%d|3.Ka\ch2vAe6VTe[7:툲>P44&@Ŷn~{z=A&㻞L=rht a@hNk xދ;Bl"hP- whZF̓LwdEQwn ` \wtn(J|5/o O&TTioZjmO2?Q{z)EPN+5@d9Pd$_H ,3} m[ PI$\۰<sz_PfKUz=lJVxÏK[]մ]9z@HѢ_=0c%H."<^^%ưAN?o< ȦM9}UF{ M?n3lNRCz,8K6Q:1uZs -X8O²qAwG:Oni$uc+vIB/*6I\pԡ6iߏmsib &\X ތV ܒk+/yjoQ(͔_OX(Y_ Nq4UL$N>^2wZPL4@6|Kepg#J bEa!)~vx:6}7rGPE4DSVXcA@ULf9~[{0;>VܕKa"&:vĞ/MQސ7wta`uΈf#Vέqkf #Ѡ Ot x#x^fUN81b=>87w6e(@Rr-XUb& L#> \/H%D z3"qUڑ.'[yFQ|*`1t'w}q]Ev8 NU~v6hR` 擱yN W35"$Aꦾu}{jAaao*HyD8_\U9}Z0 cyt,g2ן:iU{ .?ȺTU2E#
0( -BHt#EkzkLqkF iFbB +& QIuɝU.:Gif̄x ,K+('T- P.G=z<;
`*_4+ ԩHe @*ֹkbeV/P7WF` u!P QiM ھ>@LHSH E* J@Kט P݈ c4|DUd i!Ep;IS%y}a3,Z8gha!Ic3 ,P+=
l;
rZ9+JCK)x" -"7_DgQמ#| ~ds q3}w+;2j4c7hlĹ܌'P ;딨8urnBD9$jA-'"dp6rIR cv ˟^ 7 +V{a/ÊmnI +%uItgn$L*dC~-oib "o'b(KzDjpA]O*(~b,\}1R hc}pL= 6@ܭ&) )P܊@
>y;G`kN3S3B8x7#4.!)B/96Ӂїx/#9Uʣ*M;KQd5/7})|Q}E ty(A{PnPr '(}mVay7dHl,YL\┃ԏc̐'xQZvS_{-xU)%L
jgmVx>O'RMO(]qbqǸ:8|c%3^V:Phۅ.I o'UY*D̊~t0Q_:8m@W83{?Љ(ۡh恛+, P8g=*lų=K )51wf-,]ZAjNE٢W%F.p.|z^{o"ˤ7 opSR8GSGZn׀< 8 k&3l1D;e6t
A͋^Et0?4"RfiB (f{!`džz)X5'AY|dv{ E^}f%e EWv!fތYu[۞U{'dXtL{Qy'eʷ% t:lf HĠ;\|;Uk 9X
5ؒ8|Gi5(
NU X$'bE7\$s<řkΌs
CifڙFh#sE^% כN_N &
@$Ð=heck ɘ8vdn
e2
, !2![Gnh<gO} dRܞ Ng9wHޣ]9jMhsJe AdQ=@z;cSWDbv1ܕ25pp9rc /-Ȱ+ߺMd7 wZP '2'J F!DdʬQ*l ujYM`~v1YrzoC
.06 >789N̋2qD z.M
kv0ʒP %F")h3=BޱC_@| ;vhpBD QB_ jQ*! ?,}+|`͜!` ֧}Ḿ~7 ,
y2c˝M₀ fZJ nVQ`\Ҿ%-$-\dMriL DPoQ?O^i< +shl2l6;^-) m8`)aIZ.,Uz!Fۓ8ʸC_*)NNj] 'Ѡ,~F` *,yDhz<gV@%(~ӌU g5T76
K|-.֎O>^[*P&|Ȯgn~Jz_0 'yt}H`|clMRo(n3"lD?"[bjؠT(g% N ~|OGmpNFg
̳ca_W7#^u`@\-i(`fD `Q/$GjyCמ l IMp!= L"0O♟٬H)䵃;Hl4ZF5奄DŽkpV(-Tԑ?{r({VTz8x >M HR֟V!fzp:/86`t@mRm/1{vGF+|VrxEV QܩƎ|URsz&d
-9zSW%Jc.܉?81 ]MW1 ړ-=?ڙcHA6+X Hܾ61r~sM%؟B-紬@34Jfټ a
zJȆMY !5r\ɾx7$aosu/Np93V Q ;~(&aWZ:pF`^r ^"()t(i KONOc2M;ͻ/H >kSSv% mynm~+a{7;8HЦ] b
#I wti(f֓<,1fWM&\> }mD jUd*Y4zw3BL]wQe=$= w".uYͯ=,fxLLf6ܳ5R4@ a%1Qܬ[ax ڼ\% bY0!"}Wbի wҫ LY$ݢ. '|] +|tPڂ'3,&m #[R_'Q v:.W~`1At"8((/.5 !Shk!
ïHʩr#nAav٤%:J_
6:JF++Wo(UR4^{虦A .|e=OX6
ث6zn1 Zo ||6W&)lˏVPi/Kvd,k3I':jZ@Yʆ #gkffBVL 98]@UMK*5X!:AzI8Ez|tfd **$ h+1Ca: l#Cl^;;EHP0!R|-UџY- }Mcԓ'mO
\lk¡;q-42l,)O[{GqY<
"0Obmvo}Dk͑@uF@= YceL %- 0Yo50JvI,C $hN;D|ֈ~q3|!)|iԅ:}'Ѷ 8=95ȹ v % dzuE"5{'ݜ3Dc >a CC
qz~"Ewcwʰ^{YEI3][f+bZL +peO,uvU1P^k
W< >=CHT(dt`f[BNB+rχǻ ׁД]؆Տ?m)Aa۽J6 C3&z(sKgƥ)?lĻȱc8+d2
9@r"T]#0 _Xz+|mĎDP#`.Ph3%66N\=|X61;jFtE
@IBk$TFqfu xc wa)va% bߥv Үɦ!b}.jTdޅ":E$I qhX bS p|u] mP]F+ %Y?H!mL` M CM~Ő`5+l߽>2CJ
.CH M!5P% Xshl*=
/n/7y}4@DH-:OƗڵ h3 AyNARo65r%9^`r{Tֵ:~ ȝNQ$;-I 11U<wVrXUm;-fljOH`c/? jU
ؼY s)ڰVY>}on>GX
j(_ybyyHuHX-J5,J*۹haPM[4yNeo~֤(s:)
o"nb<$h0Yrz|/q l%q Hzt0Tn1.~+y<>ШL7P]U-(pp@[Bq&ݔmѵh7~x < "8_ݵ!Τ:%$|Oh
\%D
Du$!0pqbzqj4w,J{{(P_&i0
7")ֵLȉGk:J'GWm6|HQu;f#9 g ۅ6aÏ 4 kT!co,.0ˤf6mA#v&NVtE"9m~/#Bφj Cv/IO\%p]HcQe'WҞ:d ΓE{鍂v1
-WrqO $)Ld*X*^b/sdNjr_;^wv3U0m@dfAqe%Pv)+';]'2X\N:`֬_yNyaM1E ])-6?Sx|?ْVbpTnĆz^R`t*5_>Fc iq¹&&@ߤR^16ǣKR _XjfbS-3%幔nd" BOI /u fu\1'MǗ郊5ߗ!r;Βc9aȩ U{CnSUE]`Lb]U{ge {#֫+O9|aß+FqFo1RjLu &j݅ %};Eb|ie
c -XΗ1<\23D~:7. .ZyKw>mg'< ppUk:l K$^ձ:,Z$c\w]=/9~}6up ȪkIɖoP"qNz? ֍لČGyb{*'¿\Um."pxE[%2 ࡓn!Wg dq#|W<$*LhEZ0
Zk>K|Ny8wWWȟNOIVus 8n]Kl4VA I{G=mW <
./o\FמlӧozS^M
Ui;l 9cqu ^(5hlZ՞Ld
V Zg:~$ w
yG1"EpȒgb[Y-#--bRYq15U Hφe Zr\!\!J5r}3:e H ~ rgf͇"&e} ݚS
@Pq/3C"L
b˻~G] IȺ2 ;Jo|7*2>`q; p魫äh]&9k{OH4g9GLb5R0t#v?"3U% )Ѹ&NĘ55Zw>O^Jn 9&8g[>cI>.. DY4tQ8,bB#?r&bՇj|kM(Y C_0 Ɲ VC?p=o{z~ 뿕̤@ecJn~<cs XR~U)9 tтW Fɓ (bub3a~ LJXf7. \$69 L .?& ;X}M
9$@`'HkFyi| B/Ϙ{ABmi !9ik%u`(nM!1u~^,r`S 3 o xw9qK'!-eY"ԡq>ũz-_p6b^5A!O3U#Ӭk;=l(7ܙG-Q-($GQPwU!\$*kֻbo#h*_GOւ8 -LA+. :&ί*~aC ɨR__09Rad+MyV "
y>VM!p lJ>;~Ar46>O<{UdcԨ V5ޱnDȮ9R}8DoUPY@|l _@=ՌXWʫz%נkF5,a alH2- 8{E-o^IbI^̍6m_3 FѼ-s6D[1t&7[DS:訮ŧ7e%"悥}ر )bi[hmKwL ׁ ]BLr ѿÏ >&" M+?QA,ƼK2=s6]@wDZ>mί+ A]Fj 2 s@2& \.ka9Kd |1X݅&G.I4t: {^s!o8?0hz NJَ{BGǔ*
i
Cf+se͑Cs @LĆʁo= >hC[ˤ@1(5F`:4 Qm@_tnV ٪b
`dWV?` Jo +nn.Rѡ )7)`ddDxYndSa+*
// Y)c 2!Nx `I!-lJ9j"\3?T>ӱ)4uw؎l w$] +WF(ռy4oxYɄ[= !]mQ0]lK[5eԋk8h!]҄h4GTy\q4nPikzq 3%4Uu5!ۃ,{JN^ތ\{m$
dʾwSx"wF(^(Gפ>>t6cI]aI{ZG8`t@,X W^W&4,\Tł9 uu_N>F[z;ok?X@ cOJKxzUM"aFE{\I:qŭ;HH&5FS0wj i*R1 OPHS <)
wRyG0Rzz$RzrIQqBI`Z-=nb6VƵa8Q%h,IWϞY#0̖XV *NJ"z&^rV͚ -P`n`,9=E#]bdWjSdU[j>fd
!=xZo72HKJ1ܢ qgvT4j{:\^~x'7nQϒ6Wg̬ Fi ġ+]:32\?i&5#ge=x6͂ۗF-earG6\)CJWЛ2]G: fo9 P>yH`GҠ_ Yc*>
YZ |