python-tk-2.7.18-150000.65.1 < > ,
fJBPp9| dgGM y0 P T-1eFtÚ V:5C&y3 ZN45LO¼L ph.&:Yeߣb(kl_nmzFAVT Zq0Гz68+돘y8n% GaX.)nDf}Y1%G]FE0 6X{ 4sNA* /o *,1iqyѷv\?T|$f%}. ,MGj x > A p ? ` d = $ * 0 o o o
o d o ! o
" o # o % o ( (8 o ) *P * + ( , 8 , p 9 - p : 56 p B j F G o H \ o I o X Y Z [ \ o ] o ^ b c Z d e f l u o v w o x o y < q z \ C python-tk 2.7.18 150000.65.1 TkInter - Python Tk Interface Python interface to Tk. Tk is the GUI toolkit that comes with Tcl. fJBPs390zl31 ZSUSE Linux Enterprise 15 SUSE LLC Python-2.0 https://www.suse.com/ Development/Libraries/Python https://www.python.org/ linux s390x ' < < " % % , ,
h
h - wZ wZ , 2 2 sk
6 + + w 4( >' >' 7 7 , , , ' ' C > > b Pm g} g} _ ) ) g 6 6 + # # m !9 !9A큤A큤A큤A큤 fJBCfJBBfH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB@fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fJBBfJBfJB>fJBBfH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fJBBfH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>fH@fJB>fJB>2a252ad0fd3aae378cbe7718c4ebf3832fc9c8ebbe974a1f3f88c6f98659b379 074e1bb0397d6689e5dbb1ae4e5ccd1c0d0c4704656729d3cdd1fa44f986d077 39dc0d7bc809327533ccbf9b5542242726923635b0f629727af89f1406c431cb 39dc0d7bc809327533ccbf9b5542242726923635b0f629727af89f1406c431cb 886afde4c1589a688afc857a0fb5039f8388f225443283081d9ddf072571b064 c8092620e8ed84824a4ff0c6473fa404ee1ff12de4be100b43dee7e04add0e1f c8092620e8ed84824a4ff0c6473fa404ee1ff12de4be100b43dee7e04add0e1f 9229d117eca73b48a41b6303bffed14184add10afd20273976715fdd4840042a eb972e304c0028885ce03b3f2252655c9c40f562bb3b0285977e05347cb61e19 eb972e304c0028885ce03b3f2252655c9c40f562bb3b0285977e05347cb61e19 808ece582c4a8e502c062b23aa16949d85878a9f3485d2111fd19ac6bdbb02e8 1ce04b07531ee96f8b7b73984fd2f6227aaa3aa187d78fa8b7d07c273744d804 5b84357210c722254a730f8c18fde3f8a1061df662df29fc28d5266dd088674e 54f55b9696013117aa8758f901f77cc30dce6ad6f13df8b85c26c5af843a7fa0 18072d46a20aa390bf66966c7db3a84a531781d45ad3c06761d60fb817497bf1 18072d46a20aa390bf66966c7db3a84a531781d45ad3c06761d60fb817497bf1 1dbc9f1fc85237211d52b96ee1cc1c5553c81e0a62fd7143b95e16d32f5abafd bcf18d28e97787b789201048b5e55f2f25db13c5e5f15340c37937e6ebc46928 bcf18d28e97787b789201048b5e55f2f25db13c5e5f15340c37937e6ebc46928 0e875733af8af973cb94d088dbe5b4ed36dd3db1241970ec2bf19ea97ec5fbf8 a486cdc44bb99b6cbc1796df9e1aa6c51c9042087a33f50a620f96693c12a2b7 a486cdc44bb99b6cbc1796df9e1aa6c51c9042087a33f50a620f96693c12a2b7 c01314dc51d1c8effeba2528720a65da133596d4143200c68595c02067bf1da2 4de93d89c9ec0c68d85dca522bd1d67dfca9a3cb203cdf4d735857a401cb0a9b 4de93d89c9ec0c68d85dca522bd1d67dfca9a3cb203cdf4d735857a401cb0a9b c8fb5c768f76788cb678922aed330e2b7ae3cc825fdabea1a09b18db557711dc 582dfb8892b81450a0aa57eeba26fca88ee477ed7cfb21a90657e9dcb142f878 582dfb8892b81450a0aa57eeba26fca88ee477ed7cfb21a90657e9dcb142f878 98b2cd8b857ff09c0e6b3a330b98415a97282d70fa80b9cd15d1e14b2d2aea88 e7b3630d08e858a904bc5c13d0b46c2dc561c4efc246b1c6c8733e5f3222ce2c e7b3630d08e858a904bc5c13d0b46c2dc561c4efc246b1c6c8733e5f3222ce2c fe3c79d5da8616ca37f7a9d8fddaac2c9164b593c7b116580aa99690a5f59ab5 e82c816f3b0fdff328dfc84a8076385feec2208ac94a7e402af9138f8b6996e7 3bc559fb689135eacdd5bcb7b73ebb5a9cd5c4c5576d4b2a906b46bf8e883967 3bc559fb689135eacdd5bcb7b73ebb5a9cd5c4c5576d4b2a906b46bf8e883967 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 4c68c5761d7cf1861d96a755b4303f3da6166d5d64d9457347d42b4df826328c 4c68c5761d7cf1861d96a755b4303f3da6166d5d64d9457347d42b4df826328c 0e9cbeed9f1bbec6f79a2bcebee7e12f896caba3b1a167d935446d009262dca2 9c20f54b552e8981b4fbc653a11ec61b7a158d379f53fabf47db0317408ab559 9c20f54b552e8981b4fbc653a11ec61b7a158d379f53fabf47db0317408ab559 fe5f12d6412050e1414dfabc16ecc2341779d627362e1d81666e8b466986c50a 69e8b19e997fb65e38b4b0cf84b61c3fce8c9b15bb26efc91b5cdfed628061f3 69e8b19e997fb65e38b4b0cf84b61c3fce8c9b15bb26efc91b5cdfed628061f3 07078aa64be8d2d3a02fcfa10eb73eebf06583fae23134ae47b9d4b2bf66d23a 112c2a73da7049f9fe01f0a627a99d27991748b77ff33c7bfa174dc04176abbb 112c2a73da7049f9fe01f0a627a99d27991748b77ff33c7bfa174dc04176abbb ba8ad521638ef8148d07be0925111fb57cb1b64dadf770f1ca2bd17e1bb356d6 18186ee01cb710f99dc77b3c77709e6eff2eb9af0a4a7e10ad20c75058503e42 18186ee01cb710f99dc77b3c77709e6eff2eb9af0a4a7e10ad20c75058503e42 9e9439bfa528e20f0e045905ea5a3eca4cd27c4c9f190c62c192f9945caaae28 2b10f29027354abdb26f98818a2aa3977ab3a17b3e3702a9e73deca5de8f8cca 2b10f29027354abdb26f98818a2aa3977ab3a17b3e3702a9e73deca5de8f8cca ea0ebbfcc26a428337548a5e3c6768294497b81cce8f845d23e035ea62cd1aab f8470e583f9355a61f8fc723988d619b21c2f09ef332cfb8747b0f3488cfa7da f8470e583f9355a61f8fc723988d619b21c2f09ef332cfb8747b0f3488cfa7da 49029a61956e79a10fb9b79000283c1e83cabc0645adacf9824a99dbe2dece5f 6d6a6b456626c279f95441086982d137bb0dde796bcd8ac419782539f08ea872 6d6a6b456626c279f95441086982d137bb0dde796bcd8ac419782539f08ea872 19a6ca5753fe74ec6248d166d2a54acfcd70f823ea578cfe803baf8f87ea346d 6163c9071f70997d5abef9c30899b6cca219cef00e969ee0b954189727c37317 6163c9071f70997d5abef9c30899b6cca219cef00e969ee0b954189727c37317 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 0ea9203d3ef60068bc3caf64528a94bdae3d1fd3da7279c476f0819b02e2c1d4 0ea9203d3ef60068bc3caf64528a94bdae3d1fd3da7279c476f0819b02e2c1d4 53b465fb6754d8c39458a1e1ba7f8504f40d724e7dbcc7ab8fc38ea65c08c02e 8e217c2e3e9fce4af0ee26a0f00227d2b40875a7784c7d15937ca1e2fa4c6e9e 8e217c2e3e9fce4af0ee26a0f00227d2b40875a7784c7d15937ca1e2fa4c6e9e 9d53e31b151af887cd26829a1331843c02288a8480ca74a7fc631833ce60d0cb c5409138724853110dd35cf1e73781c46b581c533ef2e8ab57bcaaac3fb203fc c5409138724853110dd35cf1e73781c46b581c533ef2e8ab57bcaaac3fb203fc 9fc1aec0a300d4754c94d77b4ee8f029540eb88bcf0ef288551f52e9410de8d3 4fc41cf6e7059a945407c68157caf60407ed283939782ed9ae163aa22a2a27c2 4fc41cf6e7059a945407c68157caf60407ed283939782ed9ae163aa22a2a27c2 9241c97e08b337b0b92ee5b4e029936fa3eb53bdc821c080e78b020699e2aed7 c0cfc3c5553f75f6e024bbc87efc572c2c34c6024e52bbdd86e7508afed3bac3 c0cfc3c5553f75f6e024bbc87efc572c2c34c6024e52bbdd86e7508afed3bac3 15df8a908a8e80163bca643c76ec6e4ceff80ee83da5d1fc4e10c364fadbbb85 f5db08dac6bea338d0b26753772ff1af71f36b9647715afb473baa2b828ff994 f5db08dac6bea338d0b26753772ff1af71f36b9647715afb473baa2b828ff994 2205693a5fa6a8b9e408b24e9dc938f74f6250a1212c5fe5bcf31f09be16d936 8947ae810752668b9bc455ee9c754eb45296ef538b7d74c5977caa39e54459b2 8947ae810752668b9bc455ee9c754eb45296ef538b7d74c5977caa39e54459b2 5b6a1486c4c1ce533b146cf455c599d5ef8eec94a8eb9821a847985c12e3ddcd d80fd3c231feef6d65447f2c8b990597a299299e8871e54291cd85926cc0d002 d80fd3c231feef6d65447f2c8b990597a299299e8871e54291cd85926cc0d002 9547e4f72af28ec4262f88a00b6d2eb912ff49e2f5b3aa16b5a50a3230964d83 96f0d1d789a143c0c373bd9975eba3627280917a1db5368424f4f0d2ea53ccdf 96f0d1d789a143c0c373bd9975eba3627280917a1db5368424f4f0d2ea53ccdf 360ba16e412f9d00617baa89c0ca476d49576a34bfff026cebebc71e630505a9 ecd242a735c85ac327d9035de1fb6526c9353d21697be43c5a8fa930306d4a78 ecd242a735c85ac327d9035de1fb6526c9353d21697be43c5a8fa930306d4a78 2f28b22cc571ed211824ac750e2c1b98574748f90829a7b01efd0ddfce6cbf32 2d39426e3f8bbb8db5ddbd5bf05cc7baf17c2ae5ef616329dc0bbcde49a057b5 2d39426e3f8bbb8db5ddbd5bf05cc7baf17c2ae5ef616329dc0bbcde49a057b5 cdb0fcb4cc54d55fe963aac128269754c09f8583afa00b445926951e5fb5118b 509b6b0c290125c44b4ef0655988187d01f93efa60bbc17083b9128f93cce3e4 509b6b0c290125c44b4ef0655988187d01f93efa60bbc17083b9128f93cce3e4 4b09f3aaccecb4a434d94937cb737b65767f7b595cd51a3fa48fcaddbde984e3 a79fe957e5f3e21bd131de760e8af8980479293812c3909fa330cbcbe2c84424 a79fe957e5f3e21bd131de760e8af8980479293812c3909fa330cbcbe2c84424 b4c15f951994f60a263b271323e31896e8f6e049135c9f5904d8a877ee8ea8ac dd721829a54bf1364bfb827f5a0fbf81188b3489841c1cdc135d86d04e3709ac dd721829a54bf1364bfb827f5a0fbf81188b3489841c1cdc135d86d04e3709ac cdb5a419bd0bb4b98221fa23a480c7a92733824b259b8bfefaac5da7517643db f3d8d1e3df51c58403fb0563c3555523f4078e8650c9c9fb6c9f97b6cc483254 f3d8d1e3df51c58403fb0563c3555523f4078e8650c9c9fb6c9f97b6cc483254 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python-2.7.18-150000.65.1.src.rpm pyth_tk pyth_tkl python-tk python-tk(s390-64) python-tkinter python2-tk python_tkinter_lib @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpthread.so.0()(64bit) libpython2.7.so.1.0()(64bit) libtcl8.6.so()(64bit) libtk8.6.so()(64bit) python(abi) python-base rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.7 2.7.18 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 4.14.1 fH@f?]f h@e,e @eedeee Rd˖dD@dq@du@dtdm@dxdc>@cӼc0c|ck@c pcbbb@b@b@ba@a@a(@aim@aI@a'@a#aj@a`t`8`_T^J^@^@^>^>^;^8 @^.^g@^
@]f@]@]]]d@]d@]@]z@]V]y@]9]1] \t@\\7\7\\J@\J@\C@\2[[#@[6 @[ @[
@[Za@Z@ZxG@ZtRZp^@Z
CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
(boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE:
* bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch
(boo#1189287, CVE-2021-3733)
- Fix python-doc build (bpo#35293):
* sphinx-update-removed-function.patch
- Update documentation formatting for Sphinx 3.0 (bpo#40204). - Add bpo43075-fix-ReDoS-in-request.patch which fixes ReDoS in
request (bpo#43075, boo#1189287).
- Add missing security announcement to
bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch. - Add bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
which fixes http client infinite line reading (DoS) after a http
100 (bpo#44022, boo#1189241). - Modify Lib/ensurepip/__init__.py to contain the same version
numbers as are in reality the ones in the bundled wheels
(bsc#1187668). - Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids
use of semicolon as a query string separator (bpo#42967,
bsc#1182379, CVE-2021-23336). - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
_ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package.
Unnecessary dependency. - Add patch configure_PYTHON_FOR_REGEN.patch which makes
configure.ac to consider the correct version of
PYTHON_FO_REGEN (bsc#1078326). - Use python3-Sphinx on anything more recent than SLE-15 (inclusive). - Update to 2.7.18, final release of Python 2. Ever.:
- Newline characters have been escaped when performing uu
encoding to prevent them from overflowing into to content
section of the encoded file. This prevents malicious or
accidental modification of data during the decoding process.
- Fixes a ReDoS vulnerability in `http.cookiejar`. Patch by Ben
Caller.
- Fixed line numbers and column offsets for AST nodes for calls
without arguments in decorators.
- bsc#1155094 (CVE-2019-18348) Disallow control characters in
hostnames in http.client. Such potentially malicious header
injection URLs now cause a InvalidURL to be raised.
- Fix urllib.urlretrieve failing on subsequent ftp transfers
from the same host.
- Fix problems identified by GCC's -Wstringop-truncation
warning.
- AddRefActCtx() was needlessly being checked for failure in
PC/dl_nt.c.
- Prevent failure of test_relative_path in test_py_compile on
macOS Catalina.
- Fixed possible leak in `PyArg_Parse` and similar
functions for format units "es#" and "et#" when the macro
`PY_SSIZE_T_CLEAN` is not defined.
- Remove upstreamed patches:
- CVE-2019-18348-CRLF_injection_via_host_part.patch
- python-2.7.14-CVE-2017-1000158.patch
- CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch
- CVE-2018-1061-DOS-via-regexp-difflib.patch
- CVE-2019-10160-netloc-port-regression.patch
- CVE-2019-16056-email-parse-addr.patch - Add CVE-2019-9674-zip-bomb.patch to improve documentation
warning about dangers of zip-bombs and other security problems
with zipfile library. (bsc#1162825 CVE-2019-9674) - Change to Requires: libpython%{so_version} == %{version}-%{release}
to python-base to keep both packages always synchronized (add
%{so_version}) (bsc#1162224). - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367) - Provide python-testsuite from devel subkg to ease py2->py3
dependencies - Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
off tests coliding with the combination of modern Python and
ancient OpenSSL on SLE-12. - libnsl is required only on more recent SLEs and openSUSE, older
glibc supported NIS on its own. - Add provides in gdbm subpackage to provide dbm symbols. This
allows us to use %%{python_module dbm} as a dependency and have
it properly resolved for both python2 and python3 - Drop appstream-glib BuildRequires and no longer call
appstream-util validate-relax: eliminate a build cycle between
as-glib and python. The only thing would would gain by calling
as-uril is catching if upstream breaks the appdata.xml file in a
future release. Considering py2 is dying, chances for a new
release, let alone one breaking the xml file, are slim. - Unify packages among openSUSE:Factory and SLE versions.
(bsc#1159035) ; add missing records to this changelog.
- Add idle.desktop and idle.appdata.xml to provide IDLE in menus
(bsc#1153830) - Add python2_split_startup Provide to make it possible to
conflict older packages by shared-python-startup. - Move /etc/pythonstart script to shared-python-startup
package. - Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
bsc#1149792 - Add adapted-from-F00251-change-user-install-location.patch fixing
pip/distutils to install into /usr/local. - Update to 2.7.17:
- a bug fix release in the Python 2.7.x series. It is expected
to be the penultimate release for Python 2.7.
- Removed patches included upstream:
- CVE-2018-20852-cookie-domain-check.patch
- CVE-2019-16935-xmlrpc-doc-server_title.patch
- CVE-2019-9636-netloc-no-decompose-characters.patch
- CVE-2019-9947-no-ctrl-char-http.patch
- CVE-2019-9948-avoid_local-file.patch
- python-2.7.14-CVE-2018-1000030-1.patch
- python-2.7.14-CVE-2018-1000030-2.patch
- Renamed remove-static-libpython.diff and python-bsddb6.diff to
remove-static-libpython.patch and python-bsddb6.patch to unify
filenames. - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
python/Lib/DocXMLRPCServer.py - Add bpo36302-sort-module-sources.patch (boo#1041090) - Add CVE-2019-16056-email-parse-addr.patch fixing the email
module wrongly parses email addresses [bsc#1149955,
CVE-2019-16056] - boo#1141853 (CVE-2018-20852) add
CVE-2018-20852-cookie-domain-check.patch fixing
http.cookiejar.DefaultPolicy.domain_return_ok which did not
correctly validate the domain: it could be tricked into sending
cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS - bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
which fixes regression introduced by the previous patch.
(CVE-2019-10160)
Upstream gh#python/cpython#13812 - Set _lto_cflags to nil as it will prevent to propage LTO
for Python modules that are built in a separate package. - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
Address the issue by disallowing URL paths with embedded
whitespace or control characters through into the underlying
http client request. Such potentially malicious header
injection URLs now cause a ValueError to be raised. - bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
removing unnecessary (and potentially harmful) URL scheme
local-file://. - bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
Characters in the netloc attribute that decompose under NFKC
normalization (as used by the IDNA encoding) into any of ``/``,
``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
URL is decomposed before parsing, or is not a Unicode string,
no error will be raised (CVE-2019-9636).
Upstream commits e37ef41 and 507bd8c. - (bsc#1111793) Update to 2.7.16:
* bugfix-only release: complete list of changes on
https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst
* Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch
which are fully included in the tarball.
* Updated patches to apply cleanly:
CVE-2019-5010-null-defer-x509-cert-DOS.patch
bpo36160-init-sysconfig_vars.patch
do-not-use-non-ascii-in-test_ssl.patch
openssl-111-middlebox-compat.patch
openssl-111-ssl_options.patch
python-2.5.1-sqlite.patch
python-2.6-gettext-plurals.patch
python-2.7-dirs.patch
python-2.7.2-fix_date_time_compiler.patch
python-2.7.4-canonicalize2.patch
python-2.7.5-multilib.patch
python-2.7.9-ssl_ca_path.patch
python-bsddb6.diff
remove-static-libpython.patch
* Update python-2.7.5-multilib.patch to pass with new platlib
regime. - bsc#1109847 (CVE-2018-14647): add
CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing
bpo-34623. - bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch
PyWeakref_NewProxy@Objects/weakrefobject.c creates new isntance
of PyWeakReference struct and does not intialize wr_prev and
wr_next of new isntance. These pointers can have garbage and
point to random memory locations.
Python should not crash while destroying the isntance created
in the same interpreter function. As per my understanding, both
wr_prev and wr_next of PyWeakReference instance should be
initialized to NULL to avoid segfault. - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
fixing bpo-35746 (CVE-2019-5010).
An exploitable denial-of-service vulnerability exists in the
X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
A specially crafted X509 certificate can cause a NULL pointer
dereference, resulting in a denial of service. An attacker can
initiate or accept TLS connections using crafted certificates
to trigger this vulnerability. - Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros. - Add patch openssl-111.patch to work with openssl-1.1.1
(bsc#1113755) - Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
converts shutil._call_external_zip to use subprocess rather than
distutils.spawn. [bsc#1109663, CVE-2018-1000802] - Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent
low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS
(CVE-2018-1061). Prior to this patch mail server's timestamp was
susceptible to catastrophic backtracking on long evil response from
the server. Also, it was susceptible to catastrophic backtracking,
which was a potential DOS vector.
[bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060] - Apply "CVE-2017-18207.patch" to add a check to Lib/wave.py that
verifies that at least one channel is provided. Prior to this
check, attackers could cause a denial of service (divide-by-zero
error and application crash) via a crafted wav format audio file.
[bsc#1083507, CVE-2017-18207] - Apply "python-sorted_tar.patch" (bsc#1086001, boo#1081750)
sort tarfile output directory listing - update to 2.7.15
* dozens of bugfixes, see NEWS for details
- removed obsolete patches:
* python-ncurses-6.0-accessors.patch
* python-fix-shebang.patch
* gcc8-miscompilation-fix.patch
- add patch from upstream:
* do-not-use-non-ascii-in-test_ssl.patch - Add gcc8-miscompilation-fix.patch (boo#1084650). - Apply "python-2.7.14-CVE-2017-1000158.patch" to prevent integer
overflows in PyString_DecodeEscape that could have resulted in
heap-based buffer overflow attacks and possible arbitrary code
execution. [bsc#1068664, CVE-2017-1000158] - exclude test_socket & test_subprocess for PowerPC boo#1078485
(same ref as previous change) - Add python-skip_random_failing_tests.patch bypass boo#1078485
and exclude many tests for PowerPC - Add patch python-fix-shebang.patch to fix bsc#1078326 - exclude test_regrtest for s390, where it does not segfault as it should
(fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
(this is actually fixed by the 2.7.14 update; mentioning this for purposes
of bugfix tracking) - update to 2.7.14
* dozens of bugfixes, see NEWS for details
* fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
* fixed segfaults with dict mutated during search
* fixed possible free-after-use problems with buffer objects with custom indexing
* fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch
- Apply "python-2.7.14-CVE-2018-1000030-1.patch" and
"python-2.7.14-CVE-2018-1000030-2.patch" to remedy a bug that
would crash the Python interpreter when multiple threads used the
same I/O stream concurrently. This issue is not classified as a
security vulnerability due to the fact that an attacker must be
able to run code, however in some situations -- such as function
as a service -- this vulnerability can potentially be used by an
attacker to violate a trust boundary. [bsc#1079300,
CVE-2018-1000030] - Call python2 instead of python in macros - Fix test broken with OpenSSL 1.1 (bsc#1042670)
* add 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch - drop SUSE_ASNEEDED=0 as it is not needed anymore - Add libnsl-devel build requires for glibc obsoleting libnsl - obsolete/provide python-argparse and provide python2-argparse,
because the argparse module is available from python 2.7 up - SLE package update (bsc#1027282)
- refresh python-2.7.5-multilib.patch
- dropped upstreamed patches:
python-fix-short-dh.patch
python-2.7.7-mhlib-linkcount.patch
python-2.7-urllib2-localnet-ssl.patch
CVE-2016-0772-smtplib-starttls.patch
CVE-2016-5699-http-header-injection.patch
CVE-2016-5636-zipimporter-overflow.patch
python-2.7-httpoxy.patch
- Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1.
(dimstar@opensuse.org) - Add reproducible.patch to allow reproducible builds of various
python packages like python-amqp
Upstream: https://github.com/python/cpython/pull/296 - update to 2.7.13
* dozens of bugfixes, see NEWS for details
* updated cipher lists for openssl wrapper, support openssl >= 1.1.0
* properly fix HTTPoxy (CVE-2016-1000110)
* profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
with python-2.7.13-overflow_check.patch, incorporating upstream changes
(bnc#964182)
- add "-fwrapv" to optflags explicitly because upstream code still
relies on it in many places - provide python2-* symbols, for support of new packages built as
python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
macros.python2 - initial packaging of `python27` side-by-side variant (fate#321075, bsc#997436)
- renamed `python` to `python27` in package names and requires
- removed Provides and Obsoletes clauses
- dropped SLE12-only patch python-2.7.9-sles-disable-verification-by-default.patch,
companion sle_tls_checks_policy.py file and the python-strict-tls-checks subpackage
- dropped profile files
- removed /usr/bin/python and /usr/bin/python2, along with other unversioned
aliases
- rewrote macros file to enable stand-alone packages depending on py2.7
- re-included downloaded version of HTML documentation - update to 2.7.12
* dozens of bugfixes, see NEWS for details
* fixes multiple security issues:
CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
CVE-2016-5636 zipimporter heap overflow (bsc#985177)
CVE-2016-5699 httplib header injection (bsc#985348)
(this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py - CVE-2016-0772-smtplib-starttls.patch:
smtplib vulnerability opens startTLS stripping attack
(CVE-2016-0772, bsc#984751)
- CVE-2016-5636-zipimporter-overflow.patch:
heap overflow when importing malformed zip files
(CVE-2016-5636, bsc#985177)
- CVE-2016-5699-http-header-injection.patch:
incorrect validation of HTTP headers allow header injection
(CVE-2016-5699, bsc#985348)
- python-2.7-httpoxy.patch:
HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY
when REQUEST_METHOD is also set
(CVE-2016-1000110, bsc#989523) - Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
[bnc#964182] - copy strict-tls-checks subpackage from SLE to retain future compatibility
(not built in openSUSE)
- do this properly to fix bnc#945401
- update SLE check to exclude Leap which also has version 1315,
just to be sure - Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1. - add missing ssl.pyc and ssl.pyo to package
- implement python-strict-tls-checks subpackage
* when present, Python will perform TLS certificate checking by default.
it is possible to remove the package to turn off the checks
for compatibility with legacy scripts.
* as discussed in fate#318300
* this is not built for openSUSE, but retained here in case we want
to build the package for a SLE system - python-fix-short-dh.patch: Bump DH parameters to 2048 bit
to fix logjam security issue. bsc#935856 - add __python2 compatibility macro (used by Fedora) (fate#318838) - update to 2.7.10
- removed obsolete python-2.7-urllib2-localnet-ssl.patch - Reenable test_posix on aarch64 - python-2.7.4-aarch64.patch: Remove obsolete patch
- python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for
aarch64 - update to 2.7.9
* contains full backport of ssl module from Python 3.4 (PEP466)
* HTTPS certificate validation enabled by default (PEP476)
* SSLv3 disabled by default (bnc#901715)
* backported ensurepip module (PEP477)
* fixes several missing CVEs from last release: CVE-2013-1752,
CVE-2013-1753
* dozens of minor bugfixes
- dropped upstreamed patches: python-2.7.6-poplib.patch,
smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch
- dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it
with ssl module from Python 3
- libffi was upgraded upstream, seems to contain our changes,
so dropping libffi-ppc64le.diff as well
- python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional
"import ssl" from test_urllib2_localnet that caused it to fail without ssl - skip test_thread in qemu_linux_user mode pyth_tk pyth_tkl python-tkinter s390zl31 1716142672
! " # $ $ & ' ( ( * + + - . . 0 1 1 3 4 4 6 7 7 9 : : < = = ? @ @ B C D D F G G I J J L M M O P P R S S U V V X Y Y [ \ \ ^ _ _ a b b d e e g h h j k k m n n 2.7.18-150000.65.1 2.7.18-150000.65.1 2.7.18 _tkinter.so lib-tk Canvas.py Canvas.pyc Canvas.pyo Dialog.py Dialog.pyc Dialog.pyo FileDialog.py FileDialog.pyc FileDialog.pyo FixTk.py FixTk.pyc FixTk.pyo ScrolledText.py ScrolledText.pyc ScrolledText.pyo SimpleDialog.py SimpleDialog.pyc SimpleDialog.pyo Tix.py Tix.pyc Tix.pyo Tkconstants.py Tkconstants.pyc Tkconstants.pyo Tkdnd.py Tkdnd.pyc Tkdnd.pyo Tkinter.py Tkinter.pyc Tkinter.pyo test README runtktests.py runtktests.pyc runtktests.pyo test_tkinter __init__.py __init__.pyc __init__.pyo test_font.py test_font.pyc test_font.pyo test_geometry_managers.py test_geometry_managers.pyc test_geometry_managers.pyo test_images.py test_images.pyc test_images.pyo test_loadtk.py test_loadtk.pyc test_loadtk.pyo test_misc.py test_misc.pyc test_misc.pyo test_text.py test_text.pyc test_text.pyo test_variables.py test_variables.pyc test_variables.pyo test_widgets.py test_widgets.pyc test_widgets.pyo test_ttk __init__.py __init__.pyc __init__.pyo support.py support.pyc support.pyo test_extensions.py test_extensions.pyc test_extensions.pyo test_functions.py test_functions.pyc test_functions.pyo test_style.py test_style.pyc test_style.pyo test_widgets.py test_widgets.pyc test_widgets.pyo widget_tests.py widget_tests.pyc widget_tests.pyo tkColorChooser.py tkColorChooser.pyc tkColorChooser.pyo tkCommonDialog.py tkCommonDialog.pyc tkCommonDialog.pyo tkFileDialog.py tkFileDialog.pyc tkFileDialog.pyo tkFont.py tkFont.pyc tkFont.pyo tkMessageBox.py tkMessageBox.pyc tkMessageBox.pyo tkSimpleDialog.py tkSimpleDialog.pyc tkSimpleDialog.pyo ttk.py ttk.pyc ttk.pyo turtle.py turtle.pyc turtle.pyo /usr/lib64/python2.7/lib-dynload/ /usr/lib64/python2.7/ /usr/lib64/python2.7/lib-tk/ /usr/lib64/python2.7/lib-tk/test/ /usr/lib64/python2.7/lib-tk/test/test_tkinter/ /usr/lib64/python2.7/lib-tk/test/test_ttk/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:33823/SUSE_SLE-15_Update/c3d7a98e982ee4fdb63bafae676a379d-python.SUSE_SLE-15_Update drpm xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f01f7361e6755b3b250d9c24e524298574e3b35b, stripped directory Python script, ASCII text executable python 2.7 byte-compiled ASCII text empty Python script, UTF-8 Unicode text executable
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R Vzj>x5^:[o utf-8 222e4f30221f4001da0269e1b79b3dcef8f2f3ec1c40b9fe5a552f6783867f10 ? 7zXZ
! t/n\] "k%a) \/sɝoe cW+U^ Pdf3ј϶L>݉Xh3߭@wZjbU^
mq]2edNj?[{yB5 DxUR:j8p/Xʢ7MAX=i
"%uUCQT C2[NE![Ilޡ|{Zi;
U2jh5f75gKvzH'v YL >@9h9EIGcjh Ulý}~k{ʔz^g BqbyoՆ6qe/ 2[, Jl
/JoZQo:(O˕⢵` ^||vC ~ Fѳ'zIj\rs>:Tq\I VN xlހqWϹ$ լ|@p;+tNԏC5EtyR]ɒb-j1 zJw]LȄX'l 3IzcTwm?,b/%$%D4m3e'LBD
k@ӡpV&)lƠBq! $ l:ܲT?E3O qG90bc*~GX\=.q|' bSe :X^ : s fҕz)};.f Ak sL`1 p6n7j* O=AswHa7BC )5졖hU2VLE1,"ipR ZHqA >M2ys?j|v u 3`se`;W6k:BGP{N? kMi;ѤyHTRL\cI%@I"5|>p qYυxG˪?LHUbgpx<ƌXHiYmV_|9U.`= M^4.LiOBKCHx_ |fl)tvg uݎך`aU=^tT\U0DM؍A\\0W9.efuէ\|bK'Rx)"Nr/I.Gk]ӫ(NF: ?-wi T v#(chC[huU kdz_Op©)&xʮT@x x2RRgqQn["R:9>#Ҝ6`@7j+$jPW%0!4> ߯&8U-Єq @T4aLa<"B}S>8*ooҏ6thx+L s>*(|fOa8Ȅ%˖_KG. xńkE:R3 GMyJGe
rmZ~UL:-鈫m<۠nքzmfL+
U Kx)>,=ҜZ>O,~&3?R -gq\ $t|Нg˖=dN=*#zJXޤu \^BV߳W ?)T2}7Rr+Bx">ґ/ /Ȏă!k~un&RNn \ݗ|S Crl)ePaAUȢ2LF+'-!-̐9:xY5z Y&R$$ZU`f#tw CdsYIi2AF۟7 Wv;Z-CȄNh=~:
Ƙ͝g) ("W kX8px 2
ªh8#7h" ُJy+۳\]`Ά1(us Y1|zB.$١O0fsjh }@vݻ<-)R`ؐ\Z}~w^'$\2*M'Q-W%bXҥuLr~ƛow%yٗv_o "!7qTˢc 0BMkյX2uT H&ݮKzS7:T(p-B>|-yoxM)iR얎k*kV$s~Y #XP_^ C2q3D< \#6ԏ/DȲ3ů IsHY~+mf8 2 (QKƙ+U8Հs rM( ~%dIc0K%x.X;-e3}0/I.uXӑjo5g# 8/C
.kJ'KI" ]_/ ygC ,bʓ+hDM|SxCL )" !>RCEtM
yM2sji{jnʔ#` jVd~r+[M!h%MM 1)O|BDTcc 86 CS uNEڕ h75ot6GGNB,
@S1 >}Ao+p$ef~=%1vԦ"mu&wF#uV[~T2e
6Gk*qaRgfփa J<"!m*y
7 XN;*3+p}zZ)w*T
4Jc2 EgLѪ[++ãq 0*?Z!Ŭ9u[
'S^ O(
᷎!41
V!w0d_}ضi>j"3Ga9c0 #jd2i3}sԉLQ#Q!W:.{RvG-d =;k6 ל& DqL9N`
iڣًA% 0m1X@D
m£Dor?#wOZJ}-GNn ;}Ȱ-^P;@mG;/BX/e糷<5b mhCg
2{'J>N 'E)?9%
}h6 u@ t * rCd'F~y6S$"^3hMk hwX8ӢJ !FA=Gc0/ۆS?3J~x`
?qu .}kF=Mmٹ
^=G(֚`×`So[%t5{\h!
NlY X%M rOCF/ԏ݇ 2 K,K@S6ѵ\K)4loQJJ=M!R';mnF
9NVCc
`1 1D/F|TYA\C*+ EbiDM;Ll$V# О(^t V'KLT:rb% I*lvȎ@Gl. <,;$f2zsb9*DVlLr4걾HNߋ uqAi]u
1XMF|j V5*rV9;h _&7K@\*W88ad9ÿ k~kU<(RlϮEtKtpa6< M )C hg{z:髚Hn}D
cYeJb*t@YrYfx0@ӥؚWP[}ye.: 0c{lM&7M9c 32wOO'Q
XuI8Bb%5%1zn&( N\>_
y쓙!4 :'"p2V])Hy
PGn/Nn d606˚k5"=tS9B ڎcd
n9B1>
90D֖F.oic(6 3[93gz R
ّ2/BoM MCN>i=K0n4 S5Q/\EQK; &<9 g~D' 8pyo Z!'`Z@qwI C++B(4%gA< +ܛc1r\}YzGq2O)D_.Ѽ!,6^bJدb;7e ) je W4ȷp$SS xg'ytu `iïVaON2f[䃄Nn^r,kst#b ]ZEPq^'~Xi0&X+zP%Gm3Js؍ccXzPgkwMؕ PNO[Q3d҉:5k͗qe
ǎ+ VxxۏojV{`8f[|Z~\W>2.erDnM%$vΪA:8dQ AҞjri (ꉼ-ĜN͘T98 *#Y*9eK?* EQ3dI]b4㱊rclܢ9gV%m*':a zD XTm T cԭk: mΞP=IPMr(=:7+<:O$2Q$#I&_DX
R yE'm4b֩Ϛ |^k{6I,iiUCm\T%.3'{ <ÙjG{7X7a\}{QVMA]
ץNRgEFؓ_ä1ri'߾*+~'@u($>{42D/h`
fILެMOE>;LbZk9j1頛we y 'TلF
nܰsڡs0$~C)UӇbR :jh c@W?Th0y2QR}t7f[)YLE{O&kij
IwSx~a6aV_f##yC± V&*o `"Nwoﹲ괞ڀ)<6<6ZȲl=uR聲o)\8 %41g
>P#bPWaJ*GZC[>K2u3d4xKVH{Ao = kgŤrodA[e[ Gߜ8Mx5]r{:g{1= 7خ3ҭm_| } @
6Q\8x`
LmW5)u/U:Ak[$j_NS{þ_ج?-\N?BU~0/~XۿoƧT:&?B= &gyz襛O wE1d۴Zsmm%14ދW) IPc=F5Pbǭb
FyPiJ"P~@zGMɶ?B?`mN\zT 9
};˚JJH8VI[#U&9R?=OuYi.wJƞaqp=lKߑOa Q%aOxԖ.A2 #S0f7[ڎx[ 5Ae ` +$:Rv&<_X|E}_gʙr|Q@0+XƒK2T iUGz~$gs,xh #U÷Y.E~
pk%|ux5ڶ{Lj(~\fߖn`Bԗˁxa`kl[S5uN}"EU^ F<}`@ͥ!N༓x}{ʰT:Ű;3W-r[^ud!^> L(˞ZOǠ@:bj*cgJ@T6˼oY74fz \t<:
dtE Y2ѧΝ_Rmb`@X_f&vyTt&PI ܰF Y9B(
%a~"2T+lIXs$; @tBLvP
wzF_Q k5c>#A'IpF Ä~;D;eꨔgmbE`[(: %4,H-!dyy DRS)!%B-ȬMѠc#L3r"(^z:{? ےj劦&/so #~B3K29dA5u(4_ ߰R, X m^1T Ҝe={+d,8W2%
4!;I;Mz==ӟF63 ̊#MTժ=W?mf/7d$jd 9K kH~2u9ABinphOu`5S!;Y|akԓkLiTᣝt~|{qo p7oZ-
8q=+R\ :ؤV !`bx?A@ ̀9o[ӕt]L¡}wشÌfv-sQ'2;ENGI )40} ALo+gr ~#
~)af˱h߷ g^*Cd.Ʃ 02 B ol ns~]}DCJ 6w}$x-T7+UHG'ϚrT"QaIEDb"\_ w
t#ڠvYy]s(\CLgZ0[ȗu5+9
aʜHXk ɪleBRr-mer
DKd7<2C
q [^3)]/3%j? l~fem#%St~-+tnC" ցZ7S{q;!J) fsQ [. @-%*z U =]2|3/)1ios,_"8{X,|fNWN'} O|EqH 7zU].)ϡ{oZphe2ȓvqQ !yCyT Mx'쬎E8FDO-/oJel{isU0o_Eߵ|TEycܬvIꎓ'UEh-<N]Og"7>7# ]v+=얢ٜ f6܃ gJn i:k`Ƕ&NKZ?R u~1 =0e6>,溢ZFIvA Hnb~'|-̱ .й %٠x 9r[CƟVm [Ϫ.%H.k:e+|C~l)Pe` 7MS }wXUPZXha`[rE%MH6^p'ݴ֥sJ w/;}v+
fYUl|2
SZšIQB0PD'ʪ11
LC%eߘ[.J| #}B% ߌNcRD=@&ٞq&$B?iZȲIk~y[4o8{;&:LHUN<`=uP$0 b*=~TڷG2
Ӂ%Y Gտ+CΝdkgS0WH ӫ~ZYΣFqd
03pgW >Q +9E(K c ڤv #3(^?*~#!ܝRΰ #w-dW}x@`
X~<~_ .Tvn 8xw8[q
85Bc{byeʲӾJ6Feߟ
_N"'WFCˍ[E!{rmn8C czY" h1`Rf*T \%!,}B^$e @Ch7*sB.uAMO_4WƎ-}{xuoU|6#⏊#4Y ϋ ;#FVOtQK,yV^A-&o'A*^|t` )e\7^=v>qC*tW[S9k< *N~F=8|v@_Z%bt xGyO+7@o) %SBqz<6%P ZwRkOz#epE6Bg~BCr.f He>Hs
bcu |}hոЇQ F!WmuWbʖL: Nm_H ɯ)
{lnb
LZ pr`'Wpc#k0 E[ aQ4w.:2{6fQ"% .}yt&-WySKsH Ye1n]ǖDn_ h!zg8dѡhGVANg&$RF5 M[b!?^ N2=\zh$ t_硪$lEmgW6ؿYH"L|- <1=/T,~`.#U)(Ռus5`Im%+ X'˔;r48@bszy\fE-)\e0 74 0->.> Cqy TM1Ms|n7.&/7%:ܳ|ӒK7@O`D~я|_yH%1׃N]'Xػ;`]@íd0eAS)P(/@|8gw ,<*rd5h.ؿB~*}t|
v2Sd. 6ZZ^5!"+P`IXO 4(rK_ns' 9b _Eԧ;?40(;mobH,V8& <
O+% /E۰Aԟob]JcIyJPTo V6M-B=)y;gz[
tzF rib@$_H#BNșt2pZrvMW ah hMo]i$ǶR# PY}H g, '
o%7f0r]2U IΈ1ԙ& L7 B- 7b*vl4CO{Wn v0v/̛`dSUYM>;98®U"yo 5Hڅ#Q8V*>Kԃ?ƒVH油 |c" ߯[l oѲl/v1Z;.B& ڡ{7
YDl{ Fǎ\ . .9k1* (eEeOyX>NRZ!7
\gC_otq MNJ@)ID
q´WKؠ Oਆe>*؆s+K<DR
./v%/s (_%{ GXF^?S9T )@<:b
wMijUkC`WE,f"vL\CFg\bk;~ƟIlEli,wno4؈n F2Ӓ还!@V }hV&3HCF) q(ۗ^gs%kg &~_AS FY( Ҷ"F_*>gI?dPԦ#Iiopz$BiRVg[w 'GV;]n Ih4LsyEQ61kC$sW|g.X-LC
\
~,@{ne+ m'榔lxCjllfi';Ͼ^ }tݤ3 *`ݒՁStTd>UW+w.<.U[H-F1\ HƝ3z)7aGΛ.zh Alt_8`+K Бkrt l-<ν+v4[(B]T?A!&T ȟmMet[~X
&Y)V;;,|fC&.; m9-CncxSrTQeFGgB)CчBjgtOSÿ\$2(tjy$ŰN u[Yx*7ô9Qu w (Xu8wTAB-12a7ťHX!&; +xppjo'QNlֹQ[[{?rvzv k\p P y\[
n. 8T1/Szʜ̃vic6ņ$DR̝ {G}: $znqa#
#OeL.В 뻝PQ
g]2;Ôӏ _O]Y=
jމTxn'JjZǰS-O*1FքH3e
*2SAu %I[/Ḡ`'u̲pcK^KML6ˢa4bڀӖka}|#"Ewu3CkF IBTWue9˹R
O
r"NPU|:ι[vt.q ѐ̆%efjE䁱t13T!73f@!-O#L>54MMDV꾂{ꌵ4(VeHz K$&d OP[rRwB|={F_d{Ɖ &+t@6YU1Iʬih1rCr9i
]>^=l#X)29s4.tu2@s+!J N/ dV/
jH˜?L Qܛ;0KE U+9(Z!Ҩm)v:ĴX~Ls Z>W&1b]` DSbO ˗@8B v+ӱw^η&; p3|A'BXT
GTJ z¡7I8 ^ dH=;[9w_^M Vs^4c3Kݠ%~'+QN#(O~ %qZ;=3beZ 88b:9ٟdW lc' 0?C7UFҝ ^PoҕUΰU#a5裭xcJ5a4/AJ$BmA{IaPc
3 jfeڛ,phaͳ ˗鹫ڠ&M3 bd7Kۍ)l{TEM ,NUK_dEayZ `̧UuJ-#˳C泋AA)h'f
?3n(!ݠx2{yպ-${s]}&T gVd =&MӮ;_uQ/%?JpUx/tO# ^3;dz
WkX
$ >5:zFC& Q^$RKȡ*KZ)o:k1JMAd VZhOgj,pA%\h5䒏R
qK[=nƯRr$Q# v >U q Llub+ra =l @Zi3m*/&؈̪OϹF3$da"v
+vhJyCƦ $_:?[mQ_lc˃Ab2 !rg85"ez`Vqs \)qFU*?GP,T\!7]c N?b&qIreG% 68 ֕漿bRԿ3!g
3pbSrF
JDa)rY6v]&eԘR@hϺ jOS̵JJ.1Y th"eMHV*Q~v ;_%wC@CG /sѪZLs'z94/|Fkdiz[
As∿K F->!k!φrt}r=JN*$d$gDV)l!
)D>l:I RsJ4y3LS>(u͆8`%0 'b{ןג=Dn+ |x'Vz9 Xpx
.\TNI3 p$ԦFR'9bR/ ʵdtnԋ -ܖ #< Xο}M'ulV9
86wl?h\ծNd e\ڬd"Ic=ɎǏGҘ^blC s9VQH0㬃^| jd gvNFvmZw'rV&3aR%L oB@(9{xuFs
j*Cm OۦN[XNzwwq4[&^p
KVVoAa:3\AaN7QF\P`yެ}Ud U}3هH0-epC``oW^,'R@H?;w<̟@i31\`k:$H\Av\+sѱyeey4a
m!5DxF -zN>_lKNS#6!N YTIŢ5H7wBD<>N'6PIȄ"
;ނlGK[oXb;ד/JiS. 9l(^>~7%fҗ EA Kɞ?lmvw@c'miH=*&Cw@&6"{Һâ}͜4csa p3R~^tĮXg\E~ƅg( &J& ;c*.dj ;Rn&+ -*tZ*<_.5:s| [l Ձ\݄ [GC\4ξ*;4!lfw PfՐh}%.|T˹0w}'_YJ\ } m;T a|pۛ$;XELZdZyH\ˇ&vlM ȅ:`EUiJqf^ʵjo^2o
턯tq$p _^*NY= #)䦑~pU>Ql{N{2} t(U.1!0s>оݛdYKPG ܨvy!:g?,'e:,«"Q"$U ǘzT@ r&oTdgTc4Ç_M7[vI([SmmV:2L` 4k3R e %
w&6EV<|.ۗC!v}j h w.&OY<(W1.W2XسEP~$ r\VnQ4^ 4Cl76vQ 8K#e"(ڟ4fouqB),^eu7+>ڏZCL@cle~e;Uyܾ-ʕ` i<47!8n$τ\9v";y06LZ;Y
l7gOg8M 0p3>lԡM4\3w3hmt@-@9#<.i]K YRPݽ鿆y°qGW W>²WS'WS˃a' "hp2b<}d ]X>|& %ZN&X3U/p;,|mjmk*cor oyH,ek ddo{זL? ҄ Rc`[>_3RCȩ>tm[U|
e G| k\Q|?bɭtVz)2݀ !i~R@C_)xr%w6.Q;iE ?oNgup~ B).BK NZLǃ~6ӡ5 \S\<;/I(L6?
##m=KcGz~\A E]V1H
b YxS(*S
7ΐL@{k M%'qWaqRz u{f_'[wcge
[{6]BwL6szcu'/K18I-bzoA«h;_N:b
h2. r x|.j:.gOfa#ȳw#]&w#ܔ|;V%jWԳ f
ٽs 7HeZd qQr_{
yde[;'9A| $RX/O ܶxb: PHe |{wo@؏{kU7ԪiמUqTLmY!=kOY&LZ()?"^`=Be0f 8\$_&8 >un7Iʦ+ms"LQ^VX
FmK
j Sآ|ygֶ֙+w(^ؤ6 Ȼz= HA, vD6`NӃ.cF#p,
g!7:50rAi8o\{$;*K9FGw^$&>}hgӡSkY^G3Ds 6ٜS%v
Bv̮&}Tno- I6Y!Uv Uu"F(jfT)ЭbآI037|kK8*q<Ƶ^Wkz ncYh r 9YH7~Y|3y] X"vC4D
rgV 4eh.0:O'?Ṯqڱ Z:iPz|x28DD u< җ
A:Ʒ WG8 =+1\5@4ۮ3cr5jXneM\R8q xRRݜ6$J [Z"3!*q,^,' Yjn!ޟea^~wc^ІfLoC4 x ql?IsiˉrbAJ2(X
|IgNczR^}F.7Z`<)߉?_T& &|M <?xWÕ]wY *;1wnp#V~NבO\d3PJ=ly@-lS`;nsJsU7
!nJF[U ՓxUm\[ܞjgR&uxO_ Nm!AIqbw{n\j#\ ,IU ,8LۀFGnB7Ly AZeJ
Cyظf/c%j_7A@ z039Kw0Oë{Y?#m nD
qiX>> { Yxn!7@}O3lia-sU w
4s^fH'Y.ݭQƱFɽNm@y\F_
Hbg JB`dp/
352Es&s PԎE -Bl5v7VG"^x '2#8|^+Ä5GJݼEol O& 鸄NjK*{`
Z CiC6V U_t2h#b
9E'~o0 s YO ٲ'N^1vѐ ;aSK:qֳrGtvbEgg>luXxwģ#% %B?VN(gLq| HppzEc˪r,3m1mn&v{ynQb5`C/ tA FmlU| ؊xK#I1k90MIj5ytRK7 i59Ht90} 5Z_!P߁M7 Ё88F^a^:W
z@9^qf7 TCL\&0ն1@oC
! 7OAޭ )_gҝ 9(x$#BW1oFV6 *u;$
Z4)iA9erنK< zpDy^PF @)Gњ\[y3HE*
W+6|jd(ny_AIm1EVømlذ?xPymw鎇Y>@
O&&'X՚3ϫeLg!0Q(pOv Gs]RøӾe/`iw
<3Ġ6NsJn"
01g3./tY yW;e0z)ޯzyJ-=rLTiT O^#fR93!ːKh-am/ ]f yb]<8Lou#$uK< UeX-tKX]ѥ݊sYw$*G|4bK=ЧFwp'K{Z#c -V]b`%˾長
cuBX^0ZyTF!6UQ$(
lZu.+Vͦ.X #)l{ a
YZ