python3-libxml2-python-2.9.7-150000.3.88.1 < > , iPp9|DD ~~ T /Wol3
D@+.uiean}5c&2JO;C m
,IC4{"h0R!t q1ךmHߣh.t ]`
gRvcVW;yp[#[,&NG=tȷ&@:Ik KֲQkD @G]ŏ XI=G+L{;~*J>,YdjVU~7TjdC>+Ζ }QU2v > > h ? h d - I , 0 I j n @ @ D @
@ @ D @
@ @ @ 8 @ 8 1 h 1 ! 1 ( ! 8 ! 1 9 " 1 : & 1 F Z? G ZT @ H [T @ I \T @ X \ Y \ \ \ @ ] ] @ ^ a$ b a c b d c( e c- f c0 l c2 u cD @ v dD w e @ x f @ y g 3 z h| h h h h C python3-libxml2-python 2.9.7 150000.3.88.1 Python Bindings for libxml2 The libxml2-python package contains a module that permits applications
written in the Python programming language to use the interface
supplied by the libxml2 library to manipulate XML files.
This library allows manipulation of XML files. It includes support for
reading, modifying, and writing XML and HTML files. There is DTD
support that includes parsing and validation even with complex DTDs,
either at parse time or later once the document has been modified. iPh01-ch3c uSUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Development/Libraries/Python http://xmlsoft.org linux x86_64 $ $ ~ ~ ; F |x W Y 3 , k % j 5 I L 0 9
q Y * K V O / h d ( 'A큤A큤A큤 iPiPiPiPiPWV Y iPiPiPJq2Y iPWV WV WV WV WV WV WV WV WV WV Jq2WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV WV Jq2WV WV Jq2WV WV WV WV Jq2WV WV WV WV WV WV WV Yt/WV WV 8ede58bee3442ed2f21a68527c9674a25ce5f2ed96e2da11565ffadfa891cf7f 83c94aa3c7f2f1dcb63ef6087505b144a9f505bc7dd7b1488ac9a908c62adc94 2c4ff2483d2f3391d8ddded2b602191aa79a7bf8e730af0979fe7a1ac758a113 cec4962d6fc49a727f59911f2578f9c2749e8428ba7b8d414f3526018eb92ac4 a5e89415342706ac6f6060034de1e3746d3e3599c205a01331432e7f5c604716 a22bc379366fba314bf3300f5e571a66c9e323d39a49c6b5753590e5a4a138c2 e4e6c109b639efa13359756d5eadb76fa4d9bbe7bcd22454fe36daf937ee7afb 4c8bd6f79be092a81a75d43ecd92c9bbc01805c32164e894b72a5aecd6013d1e 3493f94d408ec7485884aab29849f89948933a9ad90814195b4ccecfb0c3cb5f 816e528a45fe3eb8805a04b5f404c1a59ae7bf08ed5a409531766b3f4e5ab60f 5c03a74ad276780f22cd27bc5587163e23351c4a148e446c05ad0ae8f9413531 380169713b027ebcc07247dcf7b6e47946a046c3a3b5e19b411e63f7e3a98eb7 d6b2cf9784a83919fff9226c03245a37753c65f7e8024046a5cf6611d25ac4f7 10692dba0adee063c0601c1ba3f6d05805420712792a43774201b62f11a25b5f 88dfc2e31c6c1d00b939cbac49004d1e12d09425482069acbc2e4179c10d1d70 ce6e1d2b8fb211956bc3bedfe4a3fa5f740095294ebde4083cd5f31a5bfbe6e7 8257f7bdba92c41b431869ad8715cef2d7229cc981240ec904c89ee088b18e25 12b40c38d5a2e6b6274d88553f020941ed88cda31e88cba32532f1cd752e0f8c 084b8337edd1027f184c81ca1bc0f0ccd3c4e4c42d06a6224f0444ebd6ff46ba 4735c1d1a788865465cdbfdd8c85a89a088b32047a9409eac73fbe4741813c7d c362c9d1f1f156e29177d474d5aae8bfac832c45683b89943d192f0f720da10b 2d8f1d339e45ce3d461a4233dde5ff3c72611043a59df3415fd09ed6b0021144 87d70a56f07787f91da715075e003601905b2267314828759360c3c293e788d6 33baab5fbd2aad49ae3d7c5c78db34e8f662ffd4debae3550e5619c0c6066e5c 7fc13b816beb54e8198ef1b55e6072982955b64b4668d57886b4d42d045a8fba d3b9d5190dc80d97a803fe5263d9fcaed1a048c84a0fd2fcff48624d75d61de2 f059104d7180b4e0276c3f5d4463ca6ea7bc8970641cf41fd2e2d7d90d856d0d c9a0ca07259dcf4c8bc42645fdd8c09d4e3ba858cab86a782ec66186284c015c 3d927186f0060e062b0014f5ab7efeea7c93adcaebb2735330568e597e76b196 ce31e8a2f786429ba11c33fded44d46e114efa57c37b68134fe6f7beed6be681 73037634d515003748d51df9fc005164bf45b92cf32ea26bfd03a02a3e1251a8 dc8b28b60f96525480182c038ccbe72da43deac6adb560af54de84a6b1287806 bdf24f42f4fabd6c14fd249c28ae23039f490acd764480d0cd7f910e056f89bb d87f79fea1ff942e2e0c1d6620a8d8661164cdebb0d611f4bf9aafe6423c74af 5946706d0bac15f464aa8c583189f4319882980baf0303e9030d1f7aaa7f3e20 65f93cdf022f5cf5a54e75dfd8e603136b38777d1dc42fbd588a5b91ef157e7b d3d05c0ceb3b5d6e4093fa09eb4762d134c33ea4420cf77b35c6fb1714b1ea77 ae04c31cd5d50e52c49073f55a2b4e402be4fea3f15f40163e9131581251f621 6e8dd170c8fcbafc4fa80de55bb50a69ab5915b4ada4e1957b26db269d96d2dd 3029a99875e64ad4a9cfab4872084da559493802801fdbc81b556ec0d0b1c511 57f4914b3450bfe0a897d7142f646b7d356bfd9b0011868a93c6c8dc76771d1e 5c645cdea531c86c9d76f040297341b4adf1e792001a9e732fe64ea7fad815c1 2db653e22c6b70eeea3c73e901b8357185de67081f7925346b283c17be33a826 9e4967a6cf4170463dce11115658b1f10928e87b8a113af991951ac697482d06 5706ad8c88efbefa478b1e8ebcb429952516b0ca835795347f09d54241d49d50 24702979009ea28cd26d573fe2dd86676e99685b28cb943b5a74b79a36f34b63 a24b1ef3c8761476f96c9efd9d6f4187e9114083ffcccdf68e3208fceb9649e8 33d20ab8fac08edb5744671b6657bff4aa72103639e7ad4a1a0b882d68933ed9 85f53c610cfd612da3b50b10a85b9a7839448dd0ed8495ab18cf4007b9decbca 1941f6cdc3e533112cecbb4d44e685746069703b26d1f6fb26f25fdbddde6f55 afb68302b1341fc3cc01fdcf6a29467d9d7663b10a84b91e6244cd401ddd3f38 75190a68c95e15a360738f0e6d30023063bdf5cd3c22d33f1e8778788a15adb0 19a60466c9f1ff384872e9406570d844d9220cd8a8eda1d7096cebe41959fa82 b21dc1379b08cda38713c03b11fcc49f7ba3107e1e9d2734fe9f3b2d9b2b42e5 eba7c19b188f23e92fc55de6a0e8aeed09c28679ab5cbf7ba7380b9298f7a8c9 6f31540b161de62846aacd9d12662cd1ec514a8537f1de227625b45f85aee6dd bed086f942f17edc82d51be74edea32dd668a884c1ea0da7af4afb80c02a3e1f 3d7c3f633ffa5ba6aabdf5bf43c03cc306b4adacef1666111bd6340ca4bd0b6e 367c498b1fc6ee87a5292fac14475f35e86f79178ccb3eb3bb0806e5aee5742b 393186756b5d59eaeb79ef71929f74eeb861a1d29bd6f5cc55394f7f076bc4ad 5512fdc3bfad5f729842305f300e9cd48252f42045fbb31a511f6311f019488b root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python-libxml2-python-2.9.7-150000.3.88.1.src.rpm libxml2mod.cpython-36m-x86_64-linux-gnu.so()(64bit) python3-libxml2-python python3-libxml2-python(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libpython3.6m.so.1.0()(64bit) libxml2-2 libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.5.4)(64bit) libxml2.so.2(LIBXML2_2.5.6)(64bit) libxml2.so.2(LIBXML2_2.5.7)(64bit) libxml2.so.2(LIBXML2_2.5.8)(64bit) libxml2.so.2(LIBXML2_2.5.9)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libxml2.so.2(LIBXML2_2.6.1)(64bit) libxml2.so.2(LIBXML2_2.6.10)(64bit) libxml2.so.2(LIBXML2_2.6.11)(64bit) libxml2.so.2(LIBXML2_2.6.12)(64bit) libxml2.so.2(LIBXML2_2.6.14)(64bit) libxml2.so.2(LIBXML2_2.6.15)(64bit) libxml2.so.2(LIBXML2_2.6.16)(64bit) libxml2.so.2(LIBXML2_2.6.17)(64bit) libxml2.so.2(LIBXML2_2.6.18)(64bit) libxml2.so.2(LIBXML2_2.6.2)(64bit) libxml2.so.2(LIBXML2_2.6.20)(64bit) libxml2.so.2(LIBXML2_2.6.21)(64bit) libxml2.so.2(LIBXML2_2.6.23)(64bit) libxml2.so.2(LIBXML2_2.6.25)(64bit) libxml2.so.2(LIBXML2_2.6.27)(64bit) libxml2.so.2(LIBXML2_2.6.28)(64bit) libxml2.so.2(LIBXML2_2.6.3)(64bit) libxml2.so.2(LIBXML2_2.6.5)(64bit) libxml2.so.2(LIBXML2_2.6.6)(64bit) libxml2.so.2(LIBXML2_2.6.8)(64bit) libxml2.so.2(LIBXML2_2.7.0)(64bit) libxml2.so.2(LIBXML2_2.7.3)(64bit) libxml2.so.2(LIBXML2_2.8.0)(64bit) libxml2.so.2(LIBXML2_2.9.0)(64bit) libxml2.so.2(LIBXML2_2.9.1)(64bit) python(abi) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.9.7 3.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 h@h^h^f|ee@e?ddBzc_cMCc @bq@b
`` @`N@`N@`N@_G@_V ^V@^Y ^(9@^
@]fl] @\N[@[@Z@Z@Y@Y*@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTApgajdos@suse.com pgajdos@suse.com pgajdos@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com david.anes@suse.com pmonreal@suse.com david.anes@suse.com david.anes@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com mgorse@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com aavindraa@gmail.com aavindraa@gmail.com jmatejek@suse.com jmatejek@suse.com jengelh@inai.de tchvatal@suse.com tchvatal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com kstreitova@suse.com psimons@suse.com kstreitova@suse.com sflees@suse.de rpm@fthiessen.de vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com - security update CVE-2025-9714 [bsc#1249076]
- added patches
https://gitlab.gnome.org/GNOME/libxml2/-/commit/852c93a2dc2224f020aab55a9702f992db404836
* libxml2-CVE-2025-9714-0.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/5153c7baceca65f575efdcbb0244860d97031f96
* libxml2-CVE-2025-9714-1.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/64115ed62dd01dab81a9157a54738523fe117333
* libxml2-CVE-2025-9714-2.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/2d97a97aa515f1bd3efc35c8ea2aa68676c6f8e1
* libxml2-CVE-2025-9714-3.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/012f8e92847a4e5ff684e7bd8e81a0b1ad104e32
* libxml2-CVE-2025-9714-4.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/949eced484520bdde3348e55eba048501b809127
* libxml2-CVE-2025-9714-5.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/390f05e7033fa8658f310dce9704f4f88e84b7fe
* libxml2-CVE-2025-9714-6.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/429d4ecaae5d61d591f279220125a583836fb84e
* libxml2-CVE-2025-9714-7.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/6f1470a5d6e3e369fe93f52d5760ba7c947f0cd1
* libxml2-CVE-2025-9714-8.patch
https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21
* libxml2-CVE-2025-9714.patch - security update
- added patches
CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
+ libxml2-CVE-2025-49794,49796.patch - security update
- added patches
CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
+ libxml2-CVE-2025-6170,6021.patch - Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
xmlHTMLPrintFileContext in xmllint.c
* Added libxml2-CVE-2024-34459.patch - Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
* Added libxml2-CVE-2024-25062.patch - Security update:
* [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
in tree.c
- Added file libxml2-CVE-2023-45322.patch - Security update:
* [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
buffer overflow
- Added file libxml2-CVE-2023-39615.patch - Security update:
* [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isn't deterministic
- Added patch libxml2-CVE-2023-29469.patch
* [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
xmlSchemaFixupComplexType
- Added patch libxml2-CVE-2023-28484-1.patch
- Added patch libxml2-CVE-2023-28484-2.patch
- Fix changelog entries in both .changes files.
- Apply al patches correctly for libxml2 and python-libxml2. - Add W3C conformance tests to the testsuite (bsc#1204585):
* Added file xmlts20080827.tar.gz - Security fixes:
* [CVE-2022-40303, bsc#1204366] Fix integer overflows with
XML_PARSE_HUGE
+ Added patch libxml2-CVE-2022-40303.patch
* [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
entity reference cycles
+ Added patch libxml2-CVE-2022-40304.patch - Security fix: [bsc#1201978, CVE-2016-3709]
* Cross-site scripting vulnerability after commit 960f0e2
* Add libxml2-CVE-2016-3709.patch - Security fix: [bsc#1199132, CVE-2022-29824]
* Integer overflow leading to out-of-bounds write in buf.c
(xmlBuf*) and tree.c (xmlBuffer*)
* Add libxml2-CVE-2022-29824.patch - Security fix: [bsc#1196490, CVE-2022-23308]
* Use-after-free of ID and IDREF attributes.
* Add libxml2-CVE-2022-23308.patch - Security fix: [bsc#1186015, CVE-2021-3541]
* Exponential entity expansion attack bypasses all existing
protection mechanisms.
* Add libxml2-CVE-2021-3541.patch - Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
* NULL pointer dereference in valid.c:xmlValidBuildAContentModel
* Add libxml2-CVE-2021-3537.patch - Security fix: [bsc#1185408, CVE-2021-3518]
* Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
* Add libxml2-CVE-2021-3518.patch - Security fix: [bsc#1185410, CVE-2021-3517]
* Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3517.patch - Security fix: [bsc#1185409, CVE-2021-3516]
* Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3516.patch - Avoid quadratic checking of identity-constraints: [bsc#1178823]
* key/unique/keyref schema attributes currently use qudratic loops
to check their various constraints (that keys are unique and that
keyrefs refer to existing keys).
* This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch - Security fix: [bsc#1176179, CVE-2020-24977]
* xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch - Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch - Security fix: [bsc#1161521, CVE-2019-20388]
* Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch - Security fix: [bsc#1161517, CVE-2020-7595]
* xmlStringLenDecodeEntities in parser.c has an infinite loop in
a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch - Security fix: [bsc#1159928, CVE-2019-19956]
* Memory leak related to newDoc->oldNs in xmlParseBalancedChunkMemoryRecover:parser.c
- Add libxml2-CVE-2019-19956.patch - Synchronize changelog files for libxml2 and python-libxml2-python [bsc#1123919] - Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH
to avoid nodeset limit when processing large XML files [bsc#1135123]
* Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch - Add libxml2-python3-string-null-check.patch: fix NULL pointer
dereference when parsing invalid data (bsc#1065270
glgo#libxml2!15).). - Security fix:
[bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
* Infinite loop in LZMA decompression
* Fixes CVE-2018-9251 introduced by CVE-2017-18258
* Added libxml2-CVE-2018-14567.patch - Security fix [bsc#1102046, CVE-2018-14404]
* NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
allow attackers to cause a denial of service
* Added libxml2-CVE-2018-14404.patch - Version update to 2.9.7 release:
* Bug Fixes:
+ xmlcatalog: restore ability to query system catalog easily
+ Fix comparison of nodesets to strings
* Improvements:
+ Add Makefile rules to rebuild HTML man pages
+ Remove generated file python/setup.py from version control
+ Fix mixed decls and code in timsort.h
+ Rework handling of return values in thread tests
+ Fix unused variable warnings in testrecurse
+ Fix -Wimplicit-fallthrough warnings
+ Upgrade timsort.h to latest revision
+ Fix a couple of warnings in dict.c and threads.c
+ Fix unused variable warnings in nanohttp.c
+ Don't include winsock2.h in xmllint.c
+ Use __linux__ macro in generated code
* Portability:
+ Add declaration for DllMain
+ Fix preprocessor conditional in threads.h
+ Fix macro redefinition warning
+ many Windows specific improvements
* Documentation:
+ xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
* Fix XPath stack frame logic
* Report undefined XPath variable error message
* Fix regression with librsvg
* Handle more invalid entity values in recovery mode
* Fix structured validation errors
* Fix memory leak in LZMA decompressor
* Set memory limit for LZMA decompression
* Handle illegal entity values in recovery mode
* Fix debug dump of streaming XPath expressions
* Fix memory leak in nanoftp
* Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
* upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8 - clean with spec-cleaner - libxml2-python3-unicode-errors.patch: work around an issue with
libxml2 supplied error strings being undecodable UTF-8 (bsc#1065270) - convert to singlespec, build a python 3 version
- change build instructions to use setup.py (and %python_build macros)
instead of makefile-based approach
- add python3.6-verify_fd.patch that fixes libxml2 on python 3.6
- rename to python-libxml2-python to conform to package naming policy
(PyPI name is "libxml2-python") - Update package summaries and RPM groups. Trim descriptions for
size on secondary subpackages. Replace install call by a
commonly-used macro. - Add patch to fix TW integration:
* libxml2-bug787941.patch - Version update to 2.9.5 release:
* Merged all the previous cve fixes that were patched in
* Few small tweaks
- Remove merged patches:
* libxml2-CVE-2016-4658.patch
* libxml2-CVE-2017-0663.patch
* libxml2-CVE-2017-5969.patch
* libxml2-CVE-2017-9047.patch
* libxml2-CVE-2017-9048.patch
* libxml2-CVE-2017-9049.patch
* libxml2-2.9.4-fix_attribute_decoding.patch - Security fix:
* libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
* Fix Heap buffer overflow in xmlAddID - Security fix:
* libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
* Fix NULL pointer deref in xmlDumpElementContent - Security fixes:
* libxml2-CVE-2017-9049.patch [bsc#1039066]
* heap-based buffer overflow (xmlDictComputeFastKey func)
* libxml2-CVE-2017-9048.patch [bsc#1039063]
* stack overflow vulnerability (xmlSnprintfElementContent func)
* libxml2-CVE-2017-9047.patch [bsc#1039064]
* stack overflow vulnerability (xmlSnprintfElementContent func) - Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
XPointer ranges. Namespace nodes must be copied to avoid
use-after-free errors. But they don't necessarily have a physical
representation in a document, so simply disallow them in XPointer
ranges [bsc#1005544] [CVE-2016-4658] - add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
decoding during XML schema validation [bnc#983288] - Update libxml2 to version libxml2-2.9.4. The new version is
resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch. - add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
push parser that fails with bogus UTF-8 encoding error when
multi-byte character in large CDATA section is split across
buffer [bnc#962796] - Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
while parsing certain XML files in recovery mode (CVE-2016-3627,
bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
to improve protection against Billion Laughs Attack (bnc#975947). - Update to new upstream release 2.9.3 (bsc#954429):
* Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
* And other bugfixes
- Removed upstream fixed patches:
* libxml2-dont_initialize_catalog.patch
* 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
* 0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a missing entities after CVE-2014-3660 fix
(https://bugzilla.gnome.org/show_bug.cgi?id=738805)
* added patches:
0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a regression in libxml2 2.9.2
* https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch - update to 2.9.2
* drop libxml2-CVE-2014-3660.patch (upstream)
* add keyring to verify tarball
Security:
Fix for CVE-2014-3660 billion laugh variant
CVE-2014-0191 Do not fetch external parameter entities
Improvements:
win32/libxml2.def.src after rebuild in doc
elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
Provide cmake module
Fix a couple of issues raised by make dist
Fix and add const qualifiers
Preparing for upcoming release of 2.9.2
Fix zlib and lzma libraries check via command line
wrong error column in structured error when parsing end tag
doc/news.html: small update to avoid line join while generating NEWS.
Add methods for python3 iterator
Support element node traversal in document fragments
xmlNodeSetName: Allow setting the name to a substring of the currently set name
Added macros for argument casts
adding init calls to xml and html Read parsing entry points
Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
Implement choice for name classes on attributes
Two small namespace tweaks
xmllint --memory should fail on empty files
Cast encoding name to char pointer to match arg type - fix for CVE-2014-3660 (bnc#901546)
* denial of service via recursive entity expansion
(related to billion laughs)
* added libxml2-CVE-2014-3660.patch h01-ch3c 1762873599
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ 2.9.7-150000.3.88.1 2.9.7-150000.3.88.1 __pycache__ drv_libxml2.cpython-36.opt-1.pyc drv_libxml2.cpython-36.pyc libxml2.cpython-36.opt-1.pyc libxml2.cpython-36.pyc drv_libxml2.py libxml2.py libxml2_python-2.9.7-py3.6.egg-info libxml2mod.cpython-36m-x86_64-linux-gnu.so python3-libxml2-python TODO libxml2class.txt tests attribs.py build.py compareNodes.py ctxterror.py cutnpaste.py dtdvalid.py error.py inbuf.py indexes.py input_callback.py invalid.xml nsdel.py outbuf.py push.py pushSAX.py pushSAXhtml.py reader.py reader2.py reader3.py reader4.py reader5.py reader6.py reader7.py reader8.py readererr.py readernext.py regexp.py relaxng.py resolver.py schema.py serialize.py sync.py test.dtd thread2.py tst.py tst.xml tstLastError.py tstURI.py tstmem.py tstxpath.py valid.xml validDTD.py validRNG.py validSchemas.py validate.py walker.py xpath.py xpathext.py xpathleak.py xpathns.py xpathret.py /usr/lib64/python3.6/site-packages/ /usr/lib64/python3.6/site-packages/__pycache__/ /usr/share/doc/packages/ /usr/share/doc/packages/python3-libxml2-python/ /usr/share/doc/packages/python3-libxml2-python/tests/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:41582/SUSE_SLE-15_Update/4afa7823737cce62be93d384f29f247b-python-libxml2-python.SUSE_SLE-15_Update drpm xz 5 x86_64-suse-linux directory python 3.6 byte-compiled Python script, ISO-8859 text executable Python script, ASCII text executable ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=405a4fa5da1feff61b890c28ae2d668b741f65e5, stripped exported SGML document, ASCII text Python script, ISO-8859 text executable, with very long lines - R ,R ,R ,R ,R ,R ,R ,P R R R R R R R +R 'R "R R R !R %R R R R R *R R R (R &R R R R R R
R )R R $R R R R R R
R #R R R R R d5iFL7ٙp utf-8 491b521bd92898b4c36d75ae44fa6a0d33317f28a0237c47cbbae2b63b4203e4 ? 7zXZ
! t/am] "k%a
Ó\ǩoiițrOMW[;S\#w F9Bm_2Z*ļ 8Ȗ['"Pj08i${-{`.πFr=X ;w4{Va3uGէ> l!͚;n
#(q6 d.P״4 csؖ[0ǒG;xs aVűCw=he4;iD2 t%[O*z 8|UƆPDCF,P 씥7G31r,g!E :Zx-7**Lyi{~%@@en
SIi߅[i!. Ie6âFGFj!S [w00Wt_PDH
l2j kn,%$U1]Ae&yX/I Zjqwh%"ǰI~\x^Wq}~XŧE~6~FF] |nM7gB_k~hϐլaehz]-3oN~6>\,ދxA7m?do
{*U:Qۇ!Mcl@ #WOydPG\%\7QB V8 [ Iߚ%o G{Uc+P|LAI%(ϟ
S8$ap~ Kn=yD<;dH+;E2SI&Ldz ,;kiva6L$]_1qN(}眬'4EDPWGǯV ri=D{~]jAY8W9@%I%veja{fmh|UyO&xivY_c` ;vi͚A ii?7=FӆiP '8>S OsS+N~6,, ̔Vy^?έPHa[ 8%428Ԏ_^
c/G='ff*<? ;%fC8My4|ICJCJtZBH- >rf +$kۆ
0 %ݥ =.Pxm$J!.ܟ r:
'ՐB7w
H|`JEm6k恡EX
zuw89Z%:NK LZP`T&"S}Nx 9 L[~7 a1A&ݯ
کJ+ZM?e3s ^wK挄wL+5(sߒ6JVxݖ}ףs+P< /cgJ d\BQ:
σ5<i#_TN kd,%]c.Sv3~쿨ƪ-N;b301#E`Ю91sa5)y1E T|_B+J"tTYc @"|, \߉KϤ898 Єo
誆,{|-m
t&6Ja۸1p^86sHRnqvؖݨrd
ܡݏ^8Nv-jr4 R è/_=kbxGs͊'ԋ>sAi$ s-ϰב7J`4@Ib灣aŦmepL*il2j@np ǜ[B]HĢT>蒩 J>E W@KJM^&kߟKn 0u h,9 3%PKgEqIu▧*{tvAyyՅg> Y *,ħf~zUex, m5cdK?*JCmXh8N"*%l,J"56:;<醅tJMnl/aѰxaKWzKODP?țeJsM @jvPEG ^]o݆/2Xxܠ3e & ▬;E{ Oh-\ͭD$qM5d# ӭqۨ@cD J4;ȔZ0=z?bYLsbAT|J]֢B Cvs}^$Or Fp85 XiL!=
+4I;[F|zc_ݸuyk}Ie9?, _:ݫ`"))F3ș 0Bi aĪ
⬷&zP缤A?(f-
*XKR -`5RIt$0"b}-WҠ=i녅 MM2~Hj)]IPs \;"<7X`,:JL؛.*2}|uB5l7۾s ͵pʴ#+ ]0
B!˘ښ&d ON2z8{xB4cHNHfT&#`ߩIhRѥj^k$,5aӖ8x Յ2^|2<
KsŚ$fRBH?w
,DS>AuQPd0:Sˮc'"s ˥
3qM,zQ C
V9aWc[HrpaJh5|_֦SW>3A"S:Ms:LJͳw *@!+mpn *ʖy00ȸ8A" V[(fADfq`DNJ)(L2O;Q M;2?:O!lC}4A [},Ǹ:OP3R+ >|wq>S1(7(aHǧVOӽeDI##$vzv\C2A2WJ[tm, R= 4d&V\U
{w/r/ 7v5tDecT1O\-u\8uSѦ.ާ
0ho}mpszJ8άb Al{_m1''5=ܸD ką#!?~:䩉b~\fRfSʀ!~< Lcכ^*Y>'YvT
?k u& ?ȚFmQ܂PSm
$z냶 v5$-uU5_\ΓE ݶ&TviNgdǮ5O M0il.v<;-<3>>=wS5U; ,gerLfw PF9cò3Q X09|KB 0XIۥTbsԄ%t3`84rPjq7v*TN?%hVȋW m
E3G0n:qg z
Hќj犠C{I7r)Wd4Tv7"*E;3I {ZeA+xj#˘n4D D#/YRCڸ]ៃ ۿ WW)jZߧj 2ȠYbp. \@[r*UɷZ4,Lkz- rmӏ cdH/00TC6L3'#08IDhMGO9JNTLsS|_@'X_`ԴX g D\{bOtoV ֒ 1仢Rf|h/?TcJ- O,~w fKXɿ^e̲ڔ܋z)m ,'D'fhA\$'v%Nd g}Ъ[aF\y w:Y[ -4|}`S R^ҢZ' vl#MfVӵF$563.xS]yzT2}IM⦴;M/~Is8ЦuҐ6ɪGZboj L4|}cu1C119 ; ;,_S@H /'|vy oWL?$*K so؊GyVlnbL=(hh킖 0P+fI 7S#ku)>&ioEշr,C
pNޗkeyz[7H:
$_Aņ|6C OO#b_;BK%_S9IH5_oZ0iv)K [Q 7>D^xN@"_70 VJC Ā7MRC"Qb'XdpK_6w wmo9!y 3B\;99.7%q
+ uP@eپ#'c؋X}%dD Tݖ'1ǂ敚Їp {൝;> ʞ u=YS8qi6_fRCYpZ m']TL&?ݑ;KvH:]SxmtQLzl MpԬ^$
^gpm )ק
؈^u:/j%EqbvF{A *"U"(Ol]arCU,8Na6Mjp(ڳk0=UI ʛc^e]!RaU \y lCMU,Rr鷬 k< YnN|.ګoى+hj6 W'qF佛4QXd&-$*='#.UmmˁCp9ivN7:iߥn*)ˊjoiWM:qyb5ل=&R
dǙz, D-bI))D 3 ̪U4Ճ1Ȣ}kĿEl6DX$1c;[3Fr_N1&QSJ)#1,9+Rɵp.b5$敍;XM4xǠ k0uJ 5= 3J
q yEE #g3f4a v&+1km^ЪWM2 J0s=?ǭ6zUUwO?GŔ/ezȹIC @vMs 2+ مbgL}2sc鬯8Y@H
NN6"p\|-?GѼJ:f/]o34UbP Nh1vKa|A̎wV@Z.pR"uIQb9=Rts
R[]"&xx]v N"t
w!]טKOz8|S ZzX,U[D-,9oh%3ZهNr9{enZy3"`FJAdtBiĤ/{I
k(-O;=q58oP:_Na`&&/Q ,8qK~媃
c`n+)dm35s;fQ/ի=7V ?l`aOX0.v ^^jbԺ́ !KFzZ/&!Uf$ (M s]GNrdÞg \qfy^b`p{(0b'i81W\4wx vKm@+ )b!Ѫz/hSp{c;ǰ^o=&\(Td9 C2̯ 4e i yh_TAv8y69/Z61i}VM&r1U}b*OO*ȿ`
)BݙrCx K=״wO˵RWOD fs>2Δ́t Xi*eDv pnZ-dlE!-4Ql -3F7;m;lzuԸnm0 0 ~//5 VKNZr11!+'x.Ut=L! 䶠 8#C_,X7?`Ɉ<)?n/T,\z@sNR{6+~h?LxWWn}M<$+BY%
6aT`5}~lVUJFAc[ myr2\}J=1xG?_b vdp&w_Ҩ`A8m +3<U|SzOXJAnn"]z 3{n@EK<.|Ow{ P x@7Vţm-7 >b C%4PfP59i2= B>d{+mn,
5g3h|qj$7/8=驉|jD~ .[1nҌ4'zo E%τ\5 Qggv<#q9!Vq#P _,k 'U0z|u?}otAuɏV@(~'2a22x&nnj>Rbwoс(b U+uy_ ڎ( Kh~Ǫڲhk ;[PrL\>]9"S:݆|Ēv//us$voWQ-cܫw`d/o6JlA+_OU: G# ϗLo٭>M9؞(=3 iUUO |җM^w^J"d0ygx<g
XGVQ\g%ra! l=B:X9pB(k |{}X
[ oUmGy]?fP
6$zVDy4 bNk̏cܯj(_ .)<փ֣*gɧ#;R|ԴZ'\5 Ux{LU:}Wcw"ЦD[
" MU٦d> TMobh ai<6Pc990gzjMwWٶ~{Y2 f`ˏzca2{X
)A2|Ҥ ̝c *z_cˉ-qO8, r%lJ?T#Gcu 2VJ$nNxNy ΄| @#| 0>v"UxBz+$F7 bUanX{V ;۩2E*w<֦JV)JϨn#I8^X;+-4}
c5i:n
S^CI9*'4AQwoKx_l81@8 k\Kb
)}} Ex;b7y-:6d~x yB8- ;))Gxu(ht+
URN^M=q+y`'_LF:qD^鋬s^ (/4h.i{5 ZɔA2%x!e)YW *%5NHHp P(:Peq B"!p+,x[ÖHyu_"MRnIay:p[
8}hݾ6 669d|>4I pfo:[]Q
Ni|)uQY7+S |zQXkqaب @CEPDFΖ<0MHTwV@% ṅgTOM6k00`Ma;P,uߦ$O0 X>?:XĄjNC+E|iRQ0d Ihz:i!x
`qQVvIX4ۍ ïs,{^Ob&I?*%w8\9@ۮ
XRTH<*FC]:s5A6{zκSX4a R?fnʰnK>*]snDj7Iωx~{NKò
ͪ{ERhnMRLtDV)s&3eϋ<:v@MCQ4P(<QUmESLa 3~?P s9s
uRv ,
pBqc=w/S=nê2"Z7s&ԣӺq2ZP.3ۓ9'Y?GgQ iz`֊%*L e42d 5~0@Kͱ]Kz96E+b%ayHeN耜vF!կK 2a s(]o;6HrЏs*U "[VI,nPȞBHDXv ){Y 떵+PͮNez;
rj Ў+ p v+Ei5cJIL `(UDSZ Z,7>ͭVb{\]ߞ+4L6.;2>4zu߿͕G=s3\g( hc@Di& %Q:,Y9£R?dKp ݛU :0hǴw#;mlKK) q2vS̮wE Wm5vIsS 2WFռԐ~9,{v˧vn!We@rҲ:K/OGzq9821GWcq=߶$DwA'sEWE2RtٻvP=uPB%Lܥ3SLggzbc6<j[盅y`LŞn 4 7,#4eE +_oG ʪy+y_By cxLyi\@߮h6 P'Q->^_OLp8&1IH_x:hNJB/KqܟKmslAyheB= i3C+2 v)<Z Lx/EX'lJ+S -.s1r BIRur Ki[-?O]8J8>w-FaC{j]Ȃsh`e/ n>CT>,WݖDwh `dV~e"r<B)#҇pY QA> bCֿ~tJ u P#aZmIj+#9~\4 =\vO[0a ', Y_z(z6n) . B
Aqk
H^ 2FF3fۜͷ.Z#m}Aa!!ܢ!64*$>j:B
e3a} wE
N^\XBQQ .h G<^ 1kN#R ܺQ#y녻OfZj?)VkfĄ Iλ{ 9B!0]
czIfG5eP:f#gǣWE edJX{< !7j?d\TfA Чws%jxomŐ* f[/ƬYgm-Uw0װ}/)_֙oI6N^AtaY|/V'%9ƙwXJZNV[XMfm~E@`é('
2 Xk%D IVa+K 1w/Sg;
e{|xE.G|]eP?V
߷G}6%2&}mѬpb'uv0oM?5m_^tr o-c B&U{&U mwxTM.`YG8аƹ:,]lK֢tmv g{hok?hRe"ʶ"R|RH _v(2 |st& )TB`~u2Pc9@KRw%9n0garӏxI^ˬ 2_(+T{{b7J+yENC
\G՜F$
(G,m9 lh]tӘݟ,fa,ُGXS,㹏99u1P!q;d K \3*-`.ESA'Mc UfGO,dN~eV,7 +*ĜET.LW9 V1@w5B ]|83 | DJJ\\amBVזmGZ]3
-K
v2'vѺ`>B ,kM[+fYx6ZiƍH2_"
klJT_y
9'6H)+VAapKBhb9)#$vcCY4lkrT5}cuz3i;Yȥe0Y0+q_V~-ߐuT)T1 'XQ
n ! CSS~vIRnuu* ߄ݰp9PR#G"]CP4[ZVK qhBpH! w?rDQ%$z#VPZ\ΚXI\s*\>S˹` eS!D
cIW^.{Y@2r],vЌ6c!\k>G/P)% "Lr>A(O@ZMS:
ݶέԓW
&BTgRC>?*Zn l+0VYn}='FDY˖jg3/ #ۻb, ';\Y Q{f1o~{6--1X+D@nȯNiK)xΑR0 ޥ INˉck37@! s
}(2+uy3^AKPDޮp.vuxZ9!T_HR3r3zKN|s= Q`zth) 8 igH`HWRգ̀V3*|`&4|)|xnrƦ9gyu&r5rљ_I |
#*.D/7$f}b-A/&y$':C=+ xjfm+2h.٫mx[nE A:|86w k&pol6oȑ=s/8u9/R%(bHDwaY-kY-ϋ.QжbA82#?jc7 %Td bQ~\_Z6QADA1l 9bЎfLxv7Ǧb^IUںٟ1djk;/I»O:tm\qq'6;~R 4Op1Z j yO'/:!sh^' W w[f&\ktG̚R2. 90Cu< TGfWIqB
?RM7"ly/^a`ZTqpT,xjG ]Z x|NqF<>>`Y'xCKqb/F!H4(
4/h_F Leb1 M (4 'e Hڀ=3!xl zȿ!f j&p)<-nMGBn+Bƭ;7]5\C7 g~u
9*\%6
d/JrsBUށ qdw
F-D5?~r%^/Him#E)^_VqxT5p&d" yƆC&qV 7 . P݂HNn]h
My aQʤ6~M &`w\:"5_ MW8m<&I3B;!gVٮ%yv4u0nAajג,J 7& vn&uf<7⋦iD3nv. ;7yԆ5|abM3uH gp!G m
֊vS,(kl"|Aud:]j+?;Nr cEBћ
Wftg]qV"j&CB".*f2Bq/)a8֗dDwkN Yϒ{xϕ>%7U T7#ax
cA~;_deJOT|qٶp5Ha
CuSbҎM
Wj[8#dm+zzjl3r*ۼ>4!
} C!,BqXڛpDdB[ _ QQY73Q::^ʴvxMs3Њl9D.E, ]d]洠ޝ9^gbf-E`'\|_ FTYDĠOQYrVx sCh Izs$2\# {u6 ,w%͢FuOh;ݔAVxQkqY21E#+ rϽ @ %e'
O&7E. ܕo(%?t^
\[d1 M%Z=VJ G~#\{'ơZ\2nO|cj:!Bf>3.ۛP92l5/%a)}` Ċajt֔x^A\Y/A)o%Ԏ$Z9C/VѵDTmc5%}7m\XXڊ;MO\
`ϯ#Rb # MԁMsϋ}SHk*|L
M\ \1ߘ4KOZ,,# 5b9Np?ogٍP Z:BkTP54gK6oq-!TL{5@V %g) ?gZQw -
@ 6X ga#Eht/v{9@^^lffDz'6= /gX>K2 $ $2(?GYB`ZWL~g' ^ Wab"9b4m2pb= .[` &xvI@dS]`3q6>J&Q7W:#7E?:MU|MDٜ:) */h+LK>9t¥G@M0bѫq '}'aH-Nq b)!<խZǖ;c~F zw|obKבu#t̙W(˾n 4G+ X^H b@R57s
i?8:\e= Mۣ
JVڿd(33&Dn뎁 Bbm0rM[F UA ֱ"A$_uC`W-&- *r%Hb$t X-ʹr0 7-\0/A2DWu=8t"]ZGяJ~P>3랊cٵ7y$[5N\!QUMeBE5%sY;Y:T ]tZH
+{i5;Cϡ&Ci)voA'ڌ4
k3nXS,Ǝ$$`"qb6:ѹmز<>6k^Ŷ¾tюPvh "dO* F?]yKiL{pq 7 hĮKm$w -oQ(ۍFДZt,6lQm>b2jdnQy}R A NS0pw2 ln䊇&2$k}p[IVr07 Jx A ]#ϲ VnF֪ 4SF[ :hx /fnʠe* c6
љ=Ln{]PRG*k^9"K܀ 0m!/KX5]iFƈ>& J @j;
Fͩ0RsVn15 0b M^ToonSO?82gʡF}ʄQº
!3i (tp VŘ_Ŝ U ؉4P K^Pɩsv|X\mNį ^p !, Ei/=P濣$ k )~%3t iÖ*uo4y]W5ydGa
Fe[ Mo*BP sJ
w>Ʈf}?4qȥ`Aҕ:)৪c4Z~<0sXcbuʴ 1-MY/bvI [)ntRO#i&!.ǹL*siD_E(td $ͱ UTt֎;CTvWi_Mz~=@fcBrͬY7'ԋ, A?H:w@2kr.te$ħO]`lo /&ݙDd_)LDAV<$Lf MlԀ*"xEvu U2r|rF0k12FOG7A6lǂQ !F1l_̙mMS*7 (+Y9B g~B^`f InfL`Fg ] q>7P
*+ (Câ[SGzve. S xW采GіOT֙p`}tq{`RtGwJ㼮/uEesz%y5sئyXӇGXl, uMkY-씧F ." <
E?3 ͔ R]K#j _+`8y$Kܥ'uEӳJx:v7O糬h];8Q=҈X7iQ HhK/hODa9} q5F%;]j(
PmȺhL }@Us iV.)cܮ/S+;I rU N&N^ޮ[z>9 NpV}2+^uGV'T놰.:ܐ YpT!# % ^ AU&#p^EQ' /sF#F\Tnx&Du? )_ y
v AfmeP 4qAh1.P+Ç3Ф [3 9oSM}kkgKrfZ:!Ɨ|S?fgg_l)t/:W U4^i{ -<q BtFeg8*uvW8?i~{±FXj
{V}wުF ݫhsˬ hҦn+:scHC
]^i;eRo z7^5Y/;aZMY8e+!ń7.BHEK]J]2f8d> *o@I0Ö@ 6Lh ɖ ƃ1*!~u!݁77-Ia^8]}ZwEkY2V&H ꥩ2,jZFP?
F~YX*x?E1! l< I(wF-t
c8⼉S;~6( ͱ#d*+&-SKne{Ԡc{Ԕ).iFe5O[ZRܧ@q`6kV N²!F 1MƀMoR"[<DZ:
21F.$f?g wH2ZA %WȆ@R?frA*xւl,g|⇹quIe)Gw_ @t 00Oi+Xb2?z`=ȹ:}- W*KvʿPPG N"+}-ߘ=mܺ[-e;K 7bv."9}6ĒLZ2a`O_
3.*E nt {{buDo[# > M =5%/ɔWweܳjZ)ki2]wLmmvi\C` q6lly2A
Stp?(X5훅5RۅpkxPz͈4t:}9h% mk>
7~&9BFvM.-XfP? ! )72h6٭0˃^ $Bxnh iOwq@X.7o8(o
6t&@qS >% Xy2d췬 M|5 C/Jf}"9x(WT-o<@dh~ n"D&֕=LJy Qss=tb[^RЇ]SF|s̊G eX6?
~(d%IA)Њ Rx9iRQϧ P2²J| !dIQqr4&hӀo'{]DG¿a>bpY0 MЋMb#aji&^T'w,Sù A5u. -4Y5SI)P ?_PZ!`?w)1%R-8Sr7[72|AVg;+Śv
x01!'5w] h<ƶ s6liL4HYxo½_u?iJ/f=lϫ+~Wӆk#VDRaqMk@UH*q1}~yoCh P]HʂyK 4LGtqMXW,Rpy W
>\ BܪN x[xs;hnh>=i
xzu_<@TbqDEŧpюM'z0o[U> wrFL>1碣M!@8VU 7K$p *!";A qb.9~`S"^hzg 2>(@ y<
dž#M4ng9LK9iqE;pv]e<` <敶
b 疭odmX0ӷ-y>
(LW4mK ''J`e: o
ja#{](GRD"u|B(/UH4/=J1xz;yi RL( z(ABWPC (P{uҀ;2nMݪ=0C]ڞW% k2G
8g{];ĹORMɣ~ȜAoK~go֞Q&ӕm;jM'w2 x"t :<̈́fn48{ X=2`-%Bm9s lD XX9Ij:rCTҁ^٣W5 0UBU}DqG?$[4 <.:@TZ!_ }ҘU)1o0 }̶?='7!heluda~k@_TjQ%*gf,@Eq>D}sԘe1KV >{]2 ݍѻ4 Jk|^Oaqwa:{WOB2GW/ Ƒ$v܄ +%.&pgbO5ڵPxnϾr OxPt0: 914џ`OEeb2 FkJfru&nbL x1S/2)kٸtǺ,%Q2f 述[(,P֣oJŕSESbVT7Ғx_ a۠u09O5j괥~}F'_ [WDNsc߹h("qg(#hF=K&ZPdX q~Pv>cH
.z\!w ^EjF{$+ .NPw ԜG|l'S 8p:9+W"(. J̄-&Y(Co /}~f@ IOb$!WA¤A05%t*l^J4s74k=ꮁ*2B'.F#(_/Ui
mp Q^JJ˴sQ^ۢ=/#1ׯM=mɓo; .4
Hƨsls pD w^6k 9TY8' hxњp*ISHwo bWik qPl FiJgG_*kef-B{r060x@5t`B Q zO4y]/x2܋R6^q
cܱd6% I@!x-GȍGF$ r" ܬI/Zh
C^+,M
L<h%Q>azlpTF# xEDGDzϸX2W=ΘLAGT5Nt8ii(\+0<މ{rEyGhn/XxAF@yT,c*)#͚caԴbM
,vR!pU@-M$qp`^# r50 z&I x6 գfVe,Imh" ڸ~h3FOQ.~>:P !vXXR HɈ}B' H">$eu͏ߝ?Ȱ_J
RmY3)} X eFSގ .-oOՎi4`?Z ywK 6 ;Re~vkQ)FEk ߫XCXs|)vĩn 4F%qG l5 -w#j8uUW1Lq5t%B yŠv@g?o 3Ȃ^DHp Fy)#7B| _sMĽF
c(i߬ȎFIⳅ$9%34n;}19 t1 0wEڌ C ;
X 61NlY8q /πUpJV<,n}i˵HZ vY%-^}'=Y[ FTB.@V{$Jse%`vW
|?12:3!Ý05 @J ȡτv(3PzꗄB~>P%RIș._OD"*NH Ė2fb4"l C_v . .IT'#X:rqĿM+-:y7B9jR:&(!ɭ~^NJZ 4e;B J*~(TQ,ُXL5
9f+0KyRFa=p a>quPR4D0 k*t FaG3#v[عf^Ǜ_a m
b&N{&
#]< ?ڜ{%T#W}hNph's dkEe}PW Ϝ, !8qns/j# {Rt5U[$,8 z/otShnHf;|l %1Gl]t_F^=?P4UjGq.2D N$e gO+) xG_~$em:I챈G#} h)#t ˪ vbsv 2qfǂvC3> bA܆ Dc ģɎzġ56TI g 焷RzE9l`Lޕy==zU{VxDvcv.\7Y??dsĊ⦨Y;niw/:CN(~o.vh]C]X刬:#$ɄZR6 `BJMX4@GFZgV7Lry㥡ݨT
8 t"$-x\Գ:Q ;:Gax![1*ۣQP/ OA+9OB&嘀NT;V1vN4Eia zN_' @)Fce@m%s;ܦ {H16
A~%NJ}Y/p~
vu?^W@Cu S?n Pq3, jѿD.4_sf;ĕk"?U=[TBҩ⳿^-OߚJCTP/[IY-8[! IOR%EqN;fz;@vGZ|-Beb Uнk"#vxM_V$ /19%A[slZ2ͥFS_ɹ*Z{$ΡlF`7 S[r$'xk\XXjدr~3~UtZ7 7)K9X{#ʡ"
"VEkqJ}=ӚҝղM5zB'XwV3Yq)]a84c$Y7N)jE\T[I) qR)-ç6݆66HaQ2sJq pg|j,AoI#Wp\9czܞGуg ѽÖ0&wZ#'W;kǼ"4eL<
]gNIW T1U0Y ZʂzeH$A6/
?0.J{9䆮!' M6"1D]x7N` + ;鴚*_y+4:zε9őgŌ*! Տ]ͰFEA Fqpwn B9~Z78/LNc XeE=G$ fv=B=ފAxپS7
ai}Q2+MnC*G"
iҎB| Ap1G?c߱v?gs̗U(}6WAs2g~U| .ҷvȶCu$w"qdlٱ!t5co2
M`%86~Y.&9^: 'jgYinlnzyCțr; =ýY8 9W6=ƴ%+-\iX 4Yz՟FvS;j[9=tGX- oy/v9 ,]BM)`i ,'3ЂJUhu H ASvٜ4 icZ4:wq\n7i7W>µ{YI()3:}B%VDTH" 8(
{;8u2 vmCl= F.\.~\O`7:CDc M/7Ii /HWeWRSHAjO
@̐w#;!@%Dk_y:?n |%s/MC >8ڂ0J\QT;A)#N1d58_v 8uc] [eqb:k ˴ ?.v>
{x *rѱ qSxYU $!I.ozYc4bx[uEVQj,Q{k'i@;`_X mst>(F\#5̀܍9NֱEsFe\шed8uټF%؏+|!Lx*Qʰ=B3sm@$h4q &b']@^Uy;,1+)]:Zϔco 2u9xJ f7KimM>gh|3KS9tUlr]bJTw* ;ʐ֖
aܧkL$7]"G-
I IJY/)u\Is{PQt3 mZWf_!KxH,w"e|i; {Hetp"{V~S; ea V ~Jaѹ[
.|q{e澘$n)s0˂IJ'U9%K:E99>c+N
j9
e%9yuqR
70Qu4PWQ1S?u,Ee6[)J=4L_Hv7X8iU V*4$qP;I<$#q%* q35[WOS; 必H-pqκ5PB ,4 -,0:EׯyM&mfm+-b
Dv zlZ̊w&FApne^DJcY}0 4{dHq8
n!]P AeXS:)%wHϊ;u hEy{;{jce|0xPb0&SߗsR %}۹˫߳
mGS~78NJd%2D>x,e
C ،q9Sr˓-=6|#u.%.>
Eg:>, ֿx>mIP.xf/~meKm,%6>뻹m P?
NJǶv.4_ JKhKH^VA ;?W CC
7 tϧ Uyz w|W V>KCPWqlBcSw0't&Mj& _auhy~PuoISbyT8LDoxTIx *I$X8.f&=1* ¼ *9fCE-M]0 A5k11
ɫPK⨵2;kTͥ|6, XkėtE=ʐl\O"TiAWvEd)eScF>U{ -=Ik'/ѣ:?9ɩ _D Kk&6'B!G$T? a*ter(lя s :Wߛ6Hrd,
+ (?ww|1: JC\YYυ+m4YPeȤoŮ
fɲaX.=n ~v "J0lK&B?I2Bz&/=E+=K~ɨ:.8x>hNoGwVL@O:eAI}=!HXX;[3mG1,)W?G>&YDI EΐGŵm]Ppކi$^F:tYT/E3D@C ˣ2 O0Fr{cLCZy>Eˢ; q3^i!}Y6}# .Z~NTaY }RY kqlZc=wOv&?zR'{_(>{mYA'P#0d]L.}z " 5.RdPFx i!j!8Mfn{IWQ= -ɤP@* }Vή?*ndajAE+˱Q| Zt/uZ -eMf B➳w LcNz9ø*3.]Y!%0hPI ǐKiCA&J&-SEucJ&G8>l[*vLCGQ\ fir G@ov`ڲ 5#735/\TuDg!Oժ%S 3Ll^ZĀԐ^@+W.a'7moU&U%{@ E(b9BGi:U{)&J
,^UVi_8rd:"\ ( I5 $4PS9noYU9l:h`-bMUH<930b,
wdo tӇsWր n"_L鯘m"kK|Rh> 4| }JpzAadvwЩ*Fz P0o+IHgڼ$xǼa1 WRRQE<9E !:/ t%b1ITh%ަ ,ZtWIwm 1WQF.}ٶ"iY}{V{)*4ʼ lj.a@P?wY^A|uxPM Ȭ F%<~֊w ^/3i)Fl;r,Uc8Uh'D1iX|:s ʀ
2wDh(U Q_ :$xObYC\A!TίRMΟD 2H0țe[کMD,Φth}nǧF]Cf?B&D,. 4+{GC L) t-zJgl&!zC+!MA^5J@RI ȨNG D^8To _Ѯ "Ӊ_^a.
Gyb\ ExY-]v0싱dJbDe"oͳtK40:yhv˴ Kr{ҥ(Ks!9N۶ntJ7VA~LV)i:N")s=E%Sr '}lΊq]N{Z:8|ZQ:Yn-:h>0/I
^! `%Sl vN>8fiTl!WDq
n}m=` y[GNA?Ubq@h}!HRwm}S%QE33oZȔ-2=tH G݁wĝ o&& ?~4ErOֵ +C"u(KD+q{=ALb
W@4 U`)B]dobNP!2tDŽ-fH#6Tv[Ǣ_SAeɠ$Y!+ lð\-jD3B3N9#;4:c%<zTɜL =?Gs,hZ " |9qTVEx$X ed殐91!`ܬoFUpAG7hj%Ѯ6\XHi̿n=I_\M2j^D.ⷌ/
FvDZq 0}) )b@KBa '3,a0+=D|P/JR &36[qK<>??^2VLp/vka_DT
/4m]zNKZFƻꤷo>5g5t)v!@P68<!Rf1ɛ}ɐ-:#
ZGuǾҷ 6q "]
ܝ-Ié٫|iE~ϐA*{, {ĥjq%+15v$ث$RyoiRDklt3X\X f0ZU1 gH. ˺G*ZCb49{PR*ukxt%Y$a 4iǷ̑_H}mm^2(:{
)>|OQLFPN4 óc"i&R |Dq&xY{[+Kue+KIqyj>cH|1өZ Џ t+s={bY=L: T> OyBCTک(UT֬61HX/&yg=tDsDoJf;Y0<[/0 I
5 ⱹ
0c4Њy3z3Z,NL/3Xɮ=' (7j]
$WkCw 9@3pjqg[sjv}by I/YO_bI VT
IUO kQ}d I=drꋈJFE!sS*%gCk<4=2 hYHmpƯM -L:jZ}Xaj9ɱ9WM,u 8s蕙{R3X,{koH(u~͊JK0Oc
n o ]zA<*\Abcn7˧Ҫg+[Eڳ{|Uo 9+̃lzQT N=dpoԙӈbiP:sH H`6ZT>WOif,GK} ԣf2 Fq k2* wnB;RS#Wqq2yGtuô&@ٽ&H&Z?i.4|,23F£8^k;`h2Qz?[%@(:es[""D0 _z2K-̗ƆjvYS mA 9
Qj`Px1 8B2
ڸd
YZ