libxml2-tools-2.9.14-150400.5.7.1 >  A bp9|,kLi/:P 絖hl )LUR[BhX#2Kλ.{4ݟM`AhK@|.M2Gn渤J_ڤXp"-{B㶛Lc Bi|V"BL6='~a7pD]vKC{fu|"D "[)Φm˜ _i%-J#LHHh%rn5e5d9d03ed3413094736948e0b2f99857bdf3a8ca171b29e528c344a5de583a3d8852de57281374a1b49d0678f18214fd4725e4bDbp9|[ecr7Pf>^kJ7ZB%5vb{t8VyM{#f;/vi~R5NNC'셠d *܀ĂбKj| {%R/$U1IgDs:KEEE @QOx&6u\ zD'j::lհs_ f⁕Aӥ_V/<*q(BR: >pAd?dd $ 7 #)4D L T d h l|X(8494: 4B_wF_G_H_I_X_Y_Z`[`\`]` ^`Pb`ocadaeafalauavawcxcydzd`dpdtdzdClibxml2-tools2.9.14150400.5.7.1Tools using libxmlThis package contains xmllint, a very useful tool proving libxml's power.bibs-power9-127ySUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Unspecifiedhttps://gitlab.gnome.org/GNOME/libxml2linuxppc64le  O큤bbbb5d34aec5dca84f71905cfb0ac7334df36f9b4d97c668afeb3e8962517f4c72e88bec2ec040aeacb6fea565d512b2da9af757b16201bfd5e1071e3e85298263edf37b82271f7f80e11f65c99ed88e5ff50297567dfcf5ddb65ddcaadcb53cca1af5ac9d9ca2c53d99fe5e9f42c9958fd50857464c030f886ba0355685f37a1b95rootrootrootrootrootrootrootrootlibxml2-2.9.14-150400.5.7.1.src.rpmlibxml2libxml2-toolslibxml2-tools(ppc-64)@@@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libreadline.so.7()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.0)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.5.6)(64bit)libxml2.so.2(LIBXML2_2.5.7)(64bit)libxml2.so.2(LIBXML2_2.5.8)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libxml2.so.2(LIBXML2_2.6.18)(64bit)libxml2.so.2(LIBXML2_2.6.20)(64bit)libxml2.so.2(LIBXML2_2.6.21)(64bit)libxml2.so.2(LIBXML2_2.6.3)(64bit)libxml2.so.2(LIBXML2_2.6.8)(64bit)libxml2.so.2(LIBXML2_2.9.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bob4t@b'E@ap`!@`!@`` @`N@`N@`N@`4@_H@_G@__V ^V@^oj@^oj@^l@] @]߶]Γ@]v>]D%]B@]A]@\s\LKZZZ@Z@Y@Y*@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTAdavid.anes@suse.comdimstar@opensuse.orgluc14n0@opensuse.orgmcepl@suse.compmonreal@suse.comrpm@fthiessen.depmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comwicked@iki.fipmonreal@suse.compmonreal@suse.comcode@bnavigator.depmonreal@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comtchvatal@suse.comtchvatal@suse.comstefan.bruens@rwth-aachen.depmonrealgonzalez@suse.compmonrealgonzalez@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.commgorse@suse.comkukuk@suse.detchvatal@suse.comaavindraa@gmail.comaavindraa@gmail.comjmatejek@suse.comjmatejek@suse.comjengelh@inai.detchvatal@suse.comtchvatal@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comkstreitova@suse.compsimons@suse.comkstreitova@suse.comsflees@suse.derpm@fthiessen.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.com- Update to 2.9.14: * Security: + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer + Fix potential double-free in xmlXPtrStringRangeFunction + Fix memory leak in xmlFindCharEncodingHandler + Normalize XPath strings in-place + Prevent integer-overflow in htmlSkipBlankChars() and xmlSkipBlankChars() + Fix leak of xmlElementContent * Bug fixes: + Fix parsing of subtracted regex character classes + Fix recursion check in xinclude.c + Reset last error in xmlCleanupGlobals + Fix certain combinations of regex range quantifiers + Fix range quantifier on subregex * Improvements: + Fix recovery from invalid HTML start tags * Build system, portability: + Define LFS macros before including system headers + Initialize XPath floating-point globals + configure: check for icu DEFS + configure.ac: produce tar.xz only (GNOME policy) + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER + Fix build with older Python versions + Fix --without-valid build- Build python bindings in a 2nd run, using multibuild: otherwise, libxml2 requires pkgconfig(libxml-2.0) to build, causing issues to bootstrap.- Update to version 2.9.13: * Security fixes: + [CVE-2022-23308] Use-after-free of ID and IDREF attributes (boo#1196490); + Several memory leaks and another issues. * Many regressions fixes. * Numerous bug fixes, including, among many others: + xmllint's --maxmem option should work as expected now; + xmllint now returns an error if arguments are missing. * Numerous tests and code and fuzzing fixes and improvements. * Updated documentation. - The full Libxml2 2.9.13 NEWS can be found here: https://download.gnome.org/sources/libxml2/2.9/\ libxml2-2.9.13.news. - Replace version-release macros in all 3 Obsoletes tag with plain 2.9.13 to avoid unwanted behaviors in the future. - Remove dropped upstream AUTHORS file from list of files to be installed in the documentation location with 'cp' command. - Update http://xmlsoft.org URL tag to Libxml2's new web home: https://gitlab.gnome.org/GNOME/libxml2. - Update ftp://xmlsoft.org Source tag to Libxml2's new download host: https://download.gnome.org. - Drop deprecated Python-2-related macro definitions/conditional statement from spec file. - Drop merged upstream patches: libxml2-fix-lxml-corrupted-subtree-structures.patch; libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch. - Drop libxml2.keyring source file as the new download host doesn't offer GPG signatures. - Use ldconfig_scriptlets macro for post(un) handling.- Rewrite package to the single-spec %python_subpackage_only style and eliminate unnecessary multibuild.- Fix python-lxml regression with libxml2 2.9.12: * Work around lxml API abuse: gitlab.gnome.org/GNOME/libxml2/issues/255 - Add upstream patches: * libxml2-fix-lxml-corrupted-subtree-structures.patch * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch- Update to version 2.9.12 * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879), CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595, CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928) * Fix null deref in legacy SAX1 parser * Fix handling of unexpected EOF in xmlParseContent * Fix user-after-free * Validate UTF8 in xmlEncodeEntities * Fix memory leak in xmlParseElementMixedContentDecl * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin * Fix SEGV in xmlSAXParseFileWithData * Don't process siblings of root in xmlXIncludeProcess * Full changes: http://xmlsoft.org/news.html - Drop upstream fixed * libxml2-CVE-2021-3541.patch * libxml2-CVE-2021-3537.patch * libxml2-CVE-2021-3518.patch * libxml2-CVE-2021-3517.patch * libxml2-CVE-2021-3516.patch * libxml2-CVE-2020-7595.patch * libxml2-CVE-2019-20388.patch * libxml2-CVE-2020-24977.patch * libxml2-CVE-2019-19956.patch * libxml2-python39.patch * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch - Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch - Drop since 2.8.0 merged fix-perl.diff - Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch- Security fix: [bsc#1186015, CVE-2021-3541] * Exponential entity expansion attack bypasses all existing protection mechanisms. - Add libxml2-CVE-2021-3541.patch- Security fix: [bsc#1185698, CVE-2021-3537] * NULL pointer dereference in valid.c:xmlValidBuildAContentModel * Add libxml2-CVE-2021-3537.patch- Security fix: [bsc#1185408, CVE-2021-3518] * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess() * Add libxml2-CVE-2021-3518.patch- Security fix: [bsc#1185410, CVE-2021-3517] * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal() * Add libxml2-CVE-2021-3517.patch- Security fix: [bsc#1185409, CVE-2021-3516] * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal() * Add libxml2-CVE-2021-3516.patch- Fails to build against Python 3.9: * Add upstream commit that fixes the issue https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1 - Add patch libxml2-python39.patch- Security fix: [bsc#1161521, CVE-2019-20388] * Memory leak in xmlSchemaPreRun in xmlschemas.c - Add libxml2-CVE-2019-20388.patch- Avoid quadratic checking of identity-constraints: [bsc#1178823] * key/unique/keyref schema attributes currently use qudratic loops to check their various constraints (that keys are unique and that keyrefs refer to existing keys). * This fix uses a hash table to avoid the quadratic behaviour. - Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch- Make python subpackage ready for multiple python3 flavors gh#openSUSE/python-rpm-macros#66- Security fix: [bsc#1176179, CVE-2020-24977] * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal - Add patch libxml2-CVE-2020-24977.patch- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021] - Revert upstream commit 5a02583c7e683896d84878bd90641d8d9b0d0549 * Add patch libxml2-CVE-2019-19956.patch- Security fix: [bsc#1161517, CVE-2020-7595] * xmlStringLenDecodeEntities in parser.c has an infinite loop in a certain end-of-file situation - Add libxml2-CVE-2020-7595.patch- Do not pull in the non-python deps on the python build- Revert the previous change and use multibuild to determine supported flavors. We need to be able to enable/disable pythons in prjconf and multibuild directly clashes with that.- Build python2 and python3 bindings in separate flavors. As python3-libxml2 is a dependency of e.g. itstools and thus many other packages these packages no longer have a build dependency on python2. Breaks a build loop for python2.- Since libxml2-2.9.10 perl-XML-LibXSLT fails to build: [bsc#1157450] * Revert upstream commit to make xmlFreeNodeList non-recursive https://github.com/GNOME/libxml2/commit/0762c9b69ba01628f72eada1c64ff3d361fb5716 - Add patch libxml2-xmlFreeNodeList-recursive.patch- Version update to 2.9.10: * Portability: + Fix exponent digits when running tests under old MSVC + Work around buggy ceil() function on AIX + Don't call printf with NULL string in runtest.c + Switched from unsigned long to ptrdiff_t in parser.c + timsort.h: support older GCCs + Make configure.ac work with older pkg-config * Bug Fixes: + Fix for conditional sections at end of document + Make sure that Python tests exit with error code + Audit memory error handling in xpath.c + Fix error code in xmlTextWriterStartDocument + Fix integer overflow when counting written bytes + Fix uninitialized memory access in HTML parser + Fix memory leak in xmlSchemaValAtomicType + Disallow conditional sections in internal subset + Fix use-after-free in xmlTextReaderFreeNodeList + Fix Regextests + Fix empty branch in regex + Fix integer overflow in entity recursion check + Don't read external entities or XIncludes from stdin + Fix Schema determinism check of ##other namespaces + Fix potential null deref in xmlSchemaIDCFillNodeTables + Fix potential memory leak in xmlBufBackToBuffer + Fix error message when processing XIncludes with fallbacks + Fix memory leak in xmlRegEpxFromParse + 14:00 is a valid timezone for xs:dateTime + Fix memory leak in xmlParseBalancedChunkMemoryRecover + Fix potential null deref in xmlRelaxNGParsePatterns + Misleading error message with xs:{min|max}Inclusive + Fix memory leak in xmlXIncludeLoadTxt + Partial fix for comparison of xs:durations + Fix null deref in xmlreader buffer + Fix unability to RelaxNG-validate grammar with choice-based name class + Fix unability to validate ambiguously constructed interleave for RelaxNG + Fix possible null dereference in xmlXPathIdFunction + fix memory leak in xmlAllocOutputBuffer + Fix unsigned int overflow + dict.h: gcc 2.95 doesn't allow multiple storage classes + Fix another code path in xmlParseQName + Make sure that xmlParseQName returns NULL in error case + Fix build without reader but with pattern + Fix memory leak in xmlAllocOutputBufferInternal error path + Fix unsigned integer overflow + Fix return value of xmlOutputBufferWrite + Fix parser termination from "Double hyphen within comment" error + Fix call stack overflow in xmlFreePattern + Fix null deref in previous commit + Fix memory leaks in xmlXPathParseNameComplex error paths + Check for integer overflow in xmlXPtrEvalChildSeq + Fix xmllint dump of XPath namespace nodes + Fix float casts in xmlXPathSubstringFunction + Fix null deref in xmlregexp error path + Fix null pointer dereference in xmlTextReaderReadOuterXml + Fix memory leaks in xmlParseStartTag2 error paths + Fix memory leak in xmlSAX2StartElement + Fix commit "Memory leak in xmlFreeID (xmlreader.c)" + Fix NULL pointer deref in xmlTextReaderValidateEntity + Memory leak in xmlFreeTextReader + Memory leak in xmlFreeID (xmlreader.c) * Improvements: + Propagate memory errors in valuePush + Propagate memory errors in xmlXPathCompExprAdd + Make xmlFreeDocElementContent non-recursive + Avoid ignored attribute warnings under GCC + Make xmlDumpElementContent non-recursive + Make apibuild.py ignore ATTRIBUTE_NO_SANITIZE + Mark xmlExp* symbols as removed + Make xmlParseConditionalSections non-recursive + Adjust expected error in Python tests + Make xmlTextReaderFreeNodeList non-recursive + Make xmlFreeNodeList non-recursive + Make xmlParseContent and xmlParseElement non-recursive + Remove executable bit from non-executable files + Fix expected output of test/schemas/any4 + Optimize build instructions in README + xml2-config.in: Output CFLAGS and LIBS on the same line + xml2-config: Add a --dynamic switch to print only shared libraries + Annotate functions with __attribute__((no_sanitize)) + Fix warnings when compiling without reader or push parser + Remove unused member `doc` in xmlSaveCtxt + Limit recursion depth in xmlXPathCompOpEvalPredicate + Remove -Wno-array-bounds + Remove unreachable code in xmlXPathCountFunction + Improve XPath predicate and filter evaluation + Limit recursion depth in xmlXPathOptimizeExpression + Disable hash randomization when fuzzing + Optional recursion limit when parsing XPath expressions + Optional recursion limit when evaluating XPath expressions + Use break statements in xmlXPathCompOpEval + Optional XPath operation limit + Fix compilation with --with-minimum + Check XPath stack after calling functions + Remove debug printf in xmlreader.c + Always define LIBXML_THREAD_ENABLED when enabled + Fix unused function warning in testapi.c + Remove unneeded function pointer casts + Fix -Wcast-function-type warnings (GCC 8) + Fix -Wformat-truncation warnings (GCC 8) * Cleanups: + Rebuild docs + Disable xmlExp regex code + Remove redundant code in xmlRelaxNGValidateState + Remove redundant code in xmlXPathCompRelationalExpr - Rebase patch fix-perl.diff- Do not depend on setuptools to keep the depgraph small and avoid build cycles- Use python[23]-libmxl2 as python names not python-libxml2-python which is kinda confusing- Do not ship libtool archive anymore- Enable tests also in the python subpackages- Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH to avoid nodeset limit when processing large XML files [bsc#1135123] * Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch- Merge python-libxml2-python spec and changes files into the libxml2 ones using _multibuild [bsc#1126499, bsc#1123919]- Version update to 2.9.9: * Security: + CVE-2018-9251 CVE-2018-14567 Fix infinite loop in LZMA decompression (boo#1088279 boo#1105166). + CVE-2018-14404 Fix nullptr deref with XPath logic ops (boo#1102046). * Bug fixes: + Fix building relative URIs + Problem with data in interleave in RelaxNG validation + Fix memory leak in xmlSwitchInputEncodingInt error path + Set doc on element obtained from freeElems + Fix HTML serialization with UTF-8 encoding + Use actual doc in xmlTextReaderRead*Xml + Unlink node before freeing it in xmlSAX2StartElement + Check return value of nodePush in xmlSAX2StartElement + Free input buffer in xmlHaltParser + Reset HTML parser input pointers on encoding failure + Fix xmlSchemaValidCtxtPtr reuse memory leak + Fix xmlTextReaderNext with preparsed document + HTML noscript should not close p + Don't change context node in xmlXPathRoot * Improvements: + Remove redefined starts and defines inside include elements + Allow choice within choice in nameClass in RELAX NG + Look inside divs for starts and defines inside include + Add newlines to 'xmllint --xpath' output + Don't include SAX.h from globals.h + Support xmlTextReaderNextSibling w/o preparsed doc + Improve restoring of context size and position + Simplify and harden nodeset filtering + Avoid unnecessary backups of the context node + Fix inconsistency in xmlXPathIsInf - Add libxml2-python3-string-null-check.patch: fix NULL pointer dereference when parsing invalid data (bsc#1065270 glgo#libxml2!15).).- Use %license instead of %doc [bsc#1082318]- Version update to 2.9.8: * Various -Werror fixes and compilation updates as travis is now used by upstream * Few additional tests added for ICU operations - Drop patch python3.6-verify_fd.patch merged upstream- Version update to 2.9.7 release: * Bug Fixes: + xmlcatalog: restore ability to query system catalog easily + Fix comparison of nodesets to strings * Improvements: + Add Makefile rules to rebuild HTML man pages + Remove generated file python/setup.py from version control + Fix mixed decls and code in timsort.h + Rework handling of return values in thread tests + Fix unused variable warnings in testrecurse + Fix -Wimplicit-fallthrough warnings + Upgrade timsort.h to latest revision + Fix a couple of warnings in dict.c and threads.c + Fix unused variable warnings in nanohttp.c + Don't include winsock2.h in xmllint.c + Use __linux__ macro in generated code * Portability: + Add declaration for DllMain + Fix preprocessor conditional in threads.h + Fix macro redefinition warning + many Windows specific improvements * Documentation: + xmlcatalog: refresh man page wrt. quering system catalog easily - Includes bug fixes from 2.9.6: * Fix XPath stack frame logic * Report undefined XPath variable error message * Fix regression with librsvg * Handle more invalid entity values in recovery mode * Fix structured validation errors * Fix memory leak in LZMA decompressor * Set memory limit for LZMA decompression * Handle illegal entity values in recovery mode * Fix debug dump of streaming XPath expressions * Fix memory leak in nanoftp * Fix memory leaks in SAX1 parser - Drop libxml2-bug787941.patch * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8- clean with spec-cleaner- libxml2-python3-unicode-errors.patch: work around an issue with libxml2 supplied error strings being undecodable UTF-8 (bsc#1065270)- convert to singlespec, build a python 3 version - change build instructions to use setup.py (and %python_build macros) instead of makefile-based approach - add python3.6-verify_fd.patch that fixes libxml2 on python 3.6 - rename to python-libxml2-python to conform to package naming policy (PyPI name is "libxml2-python")- Update package summaries and RPM groups. Trim descriptions for size on secondary subpackages. Replace install call by a commonly-used macro.- Add patch to fix TW integration: * libxml2-bug787941.patch- Version update to 2.9.5 release: * Merged all the previous cve fixes that were patched in * Few small tweaks - Remove merged patches: * libxml2-CVE-2016-4658.patch * libxml2-CVE-2017-0663.patch * libxml2-CVE-2017-5969.patch * libxml2-CVE-2017-9047.patch * libxml2-CVE-2017-9048.patch * libxml2-CVE-2017-9049.patch * libxml2-2.9.4-fix_attribute_decoding.patch- Security fix: * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663] * Fix Heap buffer overflow in xmlAddID- Security fix: * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969] * Fix NULL pointer deref in xmlDumpElementContent- Security fixes: * libxml2-CVE-2017-9049.patch [bsc#1039066] * heap-based buffer overflow (xmlDictComputeFastKey func) * libxml2-CVE-2017-9048.patch [bsc#1039063] * stack overflow vulnerability (xmlSnprintfElementContent func) * libxml2-CVE-2017-9047.patch [bsc#1039064] * stack overflow vulnerability (xmlSnprintfElementContent func)- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in XPointer ranges. Namespace nodes must be copied to avoid use-after-free errors. But they don't necessarily have a physical representation in a document, so simply disallow them in XPointer ranges [bsc#1005544] [CVE-2016-4658]- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute decoding during XML schema validation [bnc#983288]- Update libxml2 to version libxml2-2.9.4. The new version is resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835, CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838, CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and CVE-2016-1762. - Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch, 0001-Add-missing-increments-of-recursion-depth-counter-to.patch, and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML push parser that fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer [bnc#962796]- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion while parsing certain XML files in recovery mode (CVE-2016-3627, bnc#972335). - Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch to improve protection against Billion Laughs Attack (bnc#975947).- Update to new upstream release 2.9.3 (bsc#954429): * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941, CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312, CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242 * And other bugfixes - Removed upstream fixed patches: * libxml2-dont_initialize_catalog.patch * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch- fix a missing entities after CVE-2014-3660 fix (https://bugzilla.gnome.org/show_bug.cgi?id=738805) * added patches: 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch 0002-Adding-example-from-bugs-738805-to-regression-tests.patch- fix a regression in libxml2 2.9.2 * https://bugzilla.redhat.com/show_bug.cgi?id=1153753 - add libxml2-dont_initialize_catalog.patch- update to 2.9.2 * drop libxml2-CVE-2014-3660.patch (upstream) * add keyring to verify tarball Security: Fix for CVE-2014-3660 billion laugh variant CVE-2014-0191 Do not fetch external parameter entities Improvements: win32/libxml2.def.src after rebuild in doc elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement() elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode Provide cmake module Fix a couple of issues raised by make dist Fix and add const qualifiers Preparing for upcoming release of 2.9.2 Fix zlib and lzma libraries check via command line wrong error column in structured error when parsing end tag doc/news.html: small update to avoid line join while generating NEWS. Add methods for python3 iterator Support element node traversal in document fragments xmlNodeSetName: Allow setting the name to a substring of the currently set name Added macros for argument casts adding init calls to xml and html Read parsing entry points Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c Implement choice for name classes on attributes Two small namespace tweaks xmllint --memory should fail on empty files Cast encoding name to char pointer to match arg type- fix for CVE-2014-3660 (bnc#901546) * denial of service via recursive entity expansion (related to billion laughs) * added libxml2-CVE-2014-3660.patchlibxml2ibs-power9-12 16570059962.9.14-150400.5.7.12.9.14-150400.5.7.12.9.14-150400.5.7.12.9.13xmlcatalogxmllintxmlcatalog.1.gzxmllint.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:23790/SUSE_SLE-15-SP4_Update/9b26915b465ea6c6222b18b275da7114-libxml2.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f64b7b66c1672d5c2af2979718edee6880ec1dd4, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=27ad5efea4a7ad3588141692d59fe098a693c2bb, for GNU/Linux 3.10.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRRRRRRRR RRR R RR RR RRRR^!J(^utf-88ae5562475d5e3a06673755586fcbd7a81a406848cd51d17b5e5d8eaabaa5ae6?7zXZ !t/:] crv9wM3kV̰6e ]\9*dJ3DB+"_ ֜nįʃ|iÔ`GF-v*A*[ t <NGDT?T$ t\lQ7 F \cg8mg,_(Qqm,P1%eWu1fڇf~ߊ+m&h{vS$uwS{1"&#Z|/ub^%=8il%F)ϲ:̈́cGvxpǓ>/Fԟص7zbFewi?MM9$%4TNćds༭hxU+3{Ok>l#\1`C n  n e`7Sq6 r[@qmaK=wF1۾,?G?!wĬi%Pr'b-KXե#, "iXSj4韑swDVX~^RsLY$rq+uZZ q#6~.قlX)>sH%[YcM+cqgДI.# RAW2D #\ JS'KS&T3&XIqIIoO@$qRTHQ_<|wj1-eA}2k= ,tpLs*Ww $s2ξhh,p3Z(Ly64J\|z:Zl3:κ'dlGZ/5܆-iJ2*a:Y ;qSN{ɚoF?39 + ƪ-ox49+@ Y>RNMb0-"X31bῤVM.K l&Li)(`۟dCS,V./0?G bX񣽆=6s= TzG62_R Cg&c>p2E]QagЗa10jv 9X FWGKjàmx92ZM)y(J+$ =T]G~vKݛ = \o N=^:|y`6!T y*$΄ȃ1! }*~8X\"`]f-q7ήϡ릀 0syĝNM OqCUXv So-{-#ˢ>BrMƸٳ OѺ8Z[N y0`?)]˔Au$.40бL*xզ[/5DMJC4tz#ɲ%1brsѭ:j*rn8C0EqO23Q@yD<@O{f{n@jDeI51o,e3/2M2tDe?/[XO4a h9V!aۭ-g16Roǃ"CC/RMv!;>UA*#.Ϯ_d8$9?roP42čʵ% 94uAyɋStd5ؒ5B]>5(3 Z1[Rހ3X'pIDC+X1O8τH|}HK$εWyfTAbl]GoWDc@9º1YE3;:&i */}EF6n'KHۀ/^ 4Id*/` AȖb-:|^뭺;v稃iiVST y)g/?\,YZ&j4_A`đM7rvQi{@ھ{\gC|q:( [ )5tp,8~xզ 8YVΊcL HjCϒ|TxDfSvtpǧ]S%.pנ;q>9.JCl#a8(iR&CEӄc]owd%IFcj4W0dEd̸p'h'7 7*a{ysmE$+#hKEsQ+TVfBVPs"ɺ!|:00vg(ξ>6ڝ> Ew_UTiαG'ObD*xXL[/Hd4=^oE 2mՃ "RCbAv21ANDt H,e~J`|fp +VoM#MGtR[6J<ړ8ܞ%=. |c C7Q"[h`n 9%N]Ja;kx!bEԟڥ?+- GZ&ނ~YMBTD]9hv#h`uHp}!!h+>U8ŔC 2jxvVLGvM~AbV7@ vuoSX<y!d^em3 $4nͬM>#F<:awmj fca"K}NDҌB2ubT)Ɨ 6VJ7ZLgG`b+6רGwLaX,-|,qV|̩W͘ Dgc b+H%V W 󯠔%AE/4I45N\/Qam3IKSځgk4r6F,d9&AП\+> NLlR\וlob^ßܢ7E *5 # GS- щdž'-Khc`WcU%7*X:k7.(N\NVBjs,V7k_orK RytFRLV}XI*9A׽fcr 'Rbp%wxHeϷ9~xź l4z Ώ7z"ÊGT'FJ uN/ N[pܨ MgU! l7kܕ׮ې|vۘD }[ȟ͌ Orj$αe\)$nF ~`^w@5dx;FQ٤ɲ[^sr}"THN?IWinJ1A}_Ż_tbDmh|J2z zʋ ?;ݜptȌ9pTq0t^/Y^A9+U.Q.[`]tچ$bg\cZcQ8pt̍-h/ \_T&Wz)uXVr9xdTҩC tfĉ [1[ ߺl#lC5?˵ [/}u;\hj|k{{I%^ lU|^I'2mY,q;&#Oß]&x-~D]"#3?F3Y@$@qҎmʇq --Tw4ˆ ܩɱ&k]J K~T(LshX 3dJC΢A] tȠؚתKo$9"xYGW;$ĝ+} -h`MԠ&~?vO`ۑ|=29G[X ӮQV||}KUPjD#ۃXow 'ʼnDx }L߮|n$d_v IA 2 ` Gu/0q`zP暹t,.R@B Gn4)ʺl넛XqSb8^4CJud36N ݈U^a-JS"sg~6Y6bHnhi Cl>[F)cl{l!** Qv7XZm7 L`N9.`8>}J%Ta2? 3t>)56ى%sz)FgșhLgse%CA8"}[?0ǥrCݯ)n9j[*a9 ^nR'vND* d[8gx$ku{ydvcЬbO$9)8p ="+f-bqOC,A ?x8u׍CC]vt-_ߞQ:M>槞2 "z1%@,)uOqC'ퟘ,BR !<dqmkM̏.QU1ҽDFunܶηy*Iݛ5^fTbzq:zsSԡ<v36#cZ6dY9g;U>]vI~o2jJݒ' vI~RaJJM2oƍj# 1h@bq.дdeIOX]|2\N*X'D b-s^_%'mLy[R:"L)t6MF5H/6xf"pnt5~7B 63$6K վCe-_  lHt’OYE 2fr?'kYb#x`B6giZH"]Aˡۘ?}̣`FV}VF{g ת~>'0jc-.˚;/8sQI./g[:$gPrSrP^XKHJJ- Gi+l|߽^,|Lkz"eӥhY DtO?L P U0$6'99>LJz#~4~U zW1PƱh,e)y뼺'ݔu%2-|? w K}i$q<3pUxeEJfVxv/ jAȽP!*0*C;e@w(MCrL96y ʮn0C1 2ř:!'Q42K @2%u=GoX1EguFᤄt<flݖfS8"xQl)"ԣ|'},Ì"[t>K'q@U8|&@bK>Z`BAQr.kE 9j}HYZ]*Ȍ8 笺+P'0]+Yk{lD Yvsw}|XR@=1l.~RP/dkNj&Lݔ@3 }p**5J Y +lĽR)uO-Eˈ^8=J8qPۈU8Ȳp#ptn smuO%TgOћǰAԥ pL)70I(׃S= ]m;jơ&(>sxuܭ!?H619ĤOfqvx,+}S\9-J}nȏx}0}.K2Sn?آ)V)NlH4R\ii{_*:;f<;c|ӬsQ6V?  ꀁfFeBSD;O@*-rv*#e1wum?iWʑ,0ZP|3 1yUՃr3o{ )|Nc*tFm˘ z|n}gPg|,ihwЕ"itPpαh)6ղC%\K0T0Z܅dLkr'F\hЃӓ+B<uR՞eQPVؽ98I*UiN> r|uzg|TWYX2оgo"WqգΊ|r̔_$k?>PB+kL`j!8xu!t\5k5 [/àuBi@J LJ[`졶fo--bO ễѨxbe;41ݙMa2wj~Y؏Fqc ia<ĽWa!?+_ ֹ{|6HH1a2vhb2P,gķS*.hVn>H}l?ud.l:|vcǁ9ı/)אH?F[kK>HѱdA_SdQP|64Y#T~NŹJQ*"8xȂX+)3< ;ˡNb.D>kdB&_J2ʜ=ࡷSI1g:Za>OIf]U+.oBVyI˔_'3úrIȸ"慓X.Nø{띄g^zeeu3=fD{lFI\DsfK  Ãhw/ DWLB<Î^)BIg 3\{ҾuaYBc1WGN?f=F"h8Q`C:E\O85VMb5>B+-`Y]1KR`d7jJMXc^~(xj7JNM0'Y7]h7:a|a鱂R qVАfEc&GN bgG>p -(JL5\5V3Ho8!= "!H8Kri(ޢX#yqP5ٷυ+_ 3GXOR#992oX5/P5)4ߕЇcw-jTȰR+E3m%P奙/?RH c)t|D^>t)޺ u15M׻Z-]:\|9-#OMVz'8lk'ߞuDqp[bK|Xۄ|;KTXu2 8OdtgU\Sʱ#^$龾 rbcDsD͙٧:NiՕ:&%>2,,[uCJIdJ b(ѓ+k//4Ao/D/EgD&~չx06M0c1MqȂȢg4O{Paҏvz{勼qKT";}f%2C2B)mݮ"F_IIG{t{Pv :6N!Q<&1wȖ%םF`=waI()U@d_mݴ[ܗ9I]nhF}5YȞ)([t^B^38EȪ+ A`@RgL:$[I966_O-Lx(}eP7ڜaHp5"L޽'UK .γB-v0{wG S֥6 |m|ga K۳8~ئ;v@ttI^1n~6^(|c9ƒ"a &RF/+5zH0^Js`uh%^i{Z YkҐ[T"&aךȦ_ޮ7*nȦ)U(+,^ S[ ³cbwJmk7li@bɯb)DW ¯زf4Ә+` ,oɒQhd$`q|#zo7<cPmt83v+KkCp;B~$zcٸT{n{`d@\>Ox*H*ľ,/>/KΎ[J{ƚ ;XY߀ok:ޯ*}v @:cud~v6[[Bqd٣gDTnB?y uJH⡕:=/M ijaAXi?Ef?*8&y-go?H)9pDS[4J;J'8Bi,G}P^.@Q8ڢ٘zCh+)CmaQSNlRc|&V/1s!8 =$wRkxbn屽q'ӳV<\p`Q}k^"Q(!#iYJx}`S LH̽~28ꊽo3v*LȜ.Dh'Q\ױ=Y2J`}C"\#yNNC)CD8;\R*[78;"O-Q3uPN@ NlŮ*'Վ{;TZJ:7.Hzg߹c=l|nO0 kG%k=oP8%\: kÞ˼|eH,q>øI[҇4ԴK}HZHFbҹL _?'[b4¡jt{:חacsŹj-{k0цr.h iHԑƑi!~7ȓ@^\Vn'MQ%+*LW/?{iRUMkT4&72Ìr'Vp.^R֥D-3R/UyF).h(}}c9̓SɎہ7R]@jw*lSYdR*wMP0n* g[~B)8B6xI,໏~ʩFyMwpr!:mMd?L=ͩ8@:4p/S{L+0%Qj1:{5SQQ1Äf0ز#]g+K:D76-f+6z[E6<۳9G`,:O߲Ҥ+uj+M~Ɉl$Ɵ`)y|FV%jkpjSc~_Q6`yuz`ч¬㭝t/O@ 5g/>o [;Sq]L9B_=H;]pK M~øymcKиHͭ 5 6:\Nq]ơAsuJqX<.YMun W$ j5pu*Ιm&@/票{ڐ5NvP;vO2+zӯq3d ;AW08h-;c *OlL4 Ϙ|4I T-; 6nd4F4i .TD8*P)(~*Ճ۹NIIVqyZ!l)I4Qyq|;qNbRRTY7f< Wa\P8MBbzn| ݇G< ̚ d<܉D Rl;1u>}ĉ,z$ X mR\i`" fDŗN;.$.~~6g`-2yjNxψܲذy+%{y2zVIaQ}:u8GDt:_5RsB8('ljZs$Q+I*O_'6 (.x[c1Bc'g&X4${99(2ax|o1FzdsjV:5leX]K`rRdrO1ZKNvwvK_Gd ܁yYuSXp6(7TJ7EA%y@zN{fJ7$ q~rΕy66G??"js ſ{1IzQ-; ^u`yk]ۑ.]>Y0Ȱm@RTM8ϵhE3IRG#;91h3L'.*LNc"KqdМ /ױ^-"VU֒Tfvp,OLY:\ɱ6~Fs97b=D\c&OX6Kj޲p=)uțYe) 85 vKH]i aPt%${?ϱ{ vHj/w?L 38 ^Io4/5lq{ȘaaT}ӌL*t6ڑL| lfȖj[ٲa)h=F@d\3,~}H=. }4 vpZ"/f ,k?Am^ qTC=ր͵*qYaafYn1m2ZǼLuޔXQb>XJ>p8mj"){5o>ƶ_nNY'pW+#6/[lxl!f%?"v>@[:.&Rq9Sh Dۋ&*ۦ XG̅\ 2\2y+Y>G /@I=-.m@ɧpw@&ML푃hP6JQ!&CC9LbygGy~_PW+; a.&>ɛGު3AAKS$xؽ)POFD蝏R_Qc*w KvsGҾtH ,(&L-?|7@`ͅ?&'Z6o* 5!8DE3UԨLMrYS@T-}[\kU~Fv1ڝ %"m +l/??-t0D5¦kN䠃s1@_]LSo `0ny@沆h _4!F6> ͓eLmHHoMMRorr7wE$]o r <݁E-.3-&G! hP"(c;bx)L!A0Xrn2Ҋ6E^9̑lMf9R[e &Jwسd#?0<6 1'ĎSO N;@3WUw|N7KM#ktS]Y0GJ4_Nƶ9ƅ c 鮰Pc'qGI§IZ vIutX`c#R^_ۢ}T6UAasց[F;#_P$`Y6aM\`C"32 ЫA,!`+#48 ^_#!4D&ޮgAI ߇k">ޚ0uJBqfF.][.$|6ZiQ 4XlM߱3X"y]OMc"pXxp( E],ŊY!J,8B cRű=p޶hKbatĺ>z>*H+/c Zkx̽-|&@4pމ'p-a˯~gDt:i2? 2}If3JɷYzX1JA>e=K6"46w^[<o?݁tgw3g'c f#f?ߪ^ꑋie s7!^  #au o ͖|dYu"d$0eZŠO6?\3QȰ4@+[xE 1jfeM_d1p=MPkL)V8GJ㔌#b$?A0v])MNlDPfΓk#T3RW6ҴOlb k陳ـnRPQצЃsԲ >eYVP)`w2C)fpCyku%  K\0}O;I~s5wð_5k ]ӧ tgheΏ$Nk<-vTjI\.ߵWD ksNK$6l6^W9oMVjtaʲ^ZT` HzэRs8obMTD$zkk= p QsPj'hc+⾵U^s"0)$3>C=*w甃7|ڕad)LqpXs2HaYd.'[>b_ƈayT[ҔuЯM@Ӫ;m[wQ=WhA; BvrQ[.KUrs9AYr;}Pg_PomڶE&dAvd|[$No6~<#Rf;ܫ Lu XwglJyܣ"Ӝudͻ?\|i f>*w筬(tIJ Baq9r,u=YPq3?]E7-v9g.{[筡鹫綩|c_lWތclE]t1%{)JΨk6_;'*:w3#(NaeDqNpEt`|ƕokEPK$vWOFAN7pqK\s3M.=TkLk(d6038(z8[a,Ku?g.<՛@#vFC&G-BCG#W}lBhnDPMi)]=nk+r۫i6MG0|.23^n?] Pc $11R^89PC!Bԥ¹<~GK̽7{Uo@D.znњ@6г i},Lz%܏] Aҁb3搖\V͒ ~lR B^*;,Xku:kjo2<m,Thf톍}ɻ^^_84x{CD`\uf<,T˷O]{1;mv;OOε:fXZJ9ncn; .rU:GeL# GŤ !6|y$(XO|Kc#q̘!gq}=c˗ '?=|﨨($jib-EhܥR cV.c!"}AOڬ4S1qj@Ƈk0 )i ?rˇ'1ⶃ%2fzriG8ĕYp1J~gڂMZ xS٪{&/0PښhXѳε!]$Q?E` (+`aZQrt4jΕBhַR<"z.S".;gūzTEaG: uz6o&l`Ne~.cz%.ZQeRUKclN =D*k!?|nI76-u%qf%MHost_bK5}_aLa64^aRg>9!Y}I΂&vq,|V_ވ&quk3S*VH >4T4nu0]@qHį%ۚT*)uMJ5}ļܳϻOUmuȶA:T4' @G`iP#qacewnu{\!MIE5,CL0(7:8@c8PmVLnk= "X3X0lVM!z`g<7ȧ46R27~nS9JS6K<4b:_E@=em®u{(V.Bt=hVJSFs淲b׆Z [v<:5411y|xHܫ|r5~\sbncLO/sg-]fbٲ,$67-~yp^6 v[NҙjW:h)P05qͮ9:Zy $j<=Hɚͻp+ ;vE:gB)^e2v5+K\Jt(jPkLd<"9uRk8R?aGQt$(71R&C1?Ua拙Tva\L^=)HyBčB* ;hu pUޤ;H,E/6"{J.RϧsD1Aە^tN!8>RZ,^RsA>;Wqw7/3v/04v)FbF` N5֭߉\%Y*EX_ */%y&/GNT|X_Ӟ3p*96#\pY62qP Re9ܔUxK0x c{ԌG 0k3$w]\*JYl;8W;t)_EH'!c6`)CoOG6+īwKkz#-zBVcZu.#Ldn@c)Yy,lFD:j66d(B]㧍G~5~+F)!NnRP W|;rfC+P}-`l,Aԙ_?qWx9m 3E7uIoҡjNz-FV q4z/.\ddTTgW "N,N[9HlPTDMY<.Lf!G }5a ŶH\a"j%[t}yW2(4 |0х"Ga+kȯ`H Hs`3!dB,V~3rJF@ [-e9-8{D t.'sU_Z<{ܩ5rS Q88c6_DYSB85j8)OkcΎgKl?9hL $8-25=,}wI)O!6h$emHD=DnX0-Zye~ 6>zpM2`!mjWrXЧ j/f&'7pK)`*99|d JXt_(i'꽟D+J8T:z*30 )K0gǮP3JG>#0!/(0l;?j'q+>^tS; vWԶO4Ep EYTR2PrWM$a j~QSڟ߯U㿓 #]Vn',&W{9YWz(O#Vs>GD]H6b!i,{;=b}Nq74]F ϬuLVJ~yYYBQ|ŖȆA:4?IXklg;dLSUUY,͔/ XT{m@ NkkDtҊ0՚z%+V9\}SE<*"Nu.r1ձ8w(Oy?kHFˏ z-!6A%=En`n~EiUp60,G.W}-[ )ɓ[GBFK~Vp e@珪q̗$rXܠd^3W|CV;e#gRwfs$rmdKFUЪgFwZUޙ~_ g[ N$#F°H@U!&ݫ!y9ͮD.pA, Kc>5ci7WRaB%볘^s`C_ELfRK'3#`DžAW&Vk|`Kdcs涪0lx1k8INw{kl-*OUB{HOw˸s,!f-N8NkB%ygo@X$j=4BtrĪ&)#U/{?|[ W_ h9^'0oqU,q޴ӝ#X ӷ&b (X^8wAempA/0(I-6/ j\`ug{TLK,0=DB*2$f攼2{ɢF]&db%Aajaq|= ͋{q*T$ tε*8E@(];OM$ړe|C:;0!6+-#v'Huҽ !v rt&i廠[Gj]VU-ޕf?/ o%Br{ŒwWE@0T Bn\CKa+ 1h5KgE?zHKmЋ:^zҬp>Q)Q5k j & W~ zqޏ5ϝ٬V&UPڡv>} w{7.XUd1ʚPS#>:k, k{,,d*1:} ٮ~nr9D}8) d}1}7h] ' ܽpDl1b\$Ƕ0N qu:$tJKz5Ȗl#ԁrokʅ-ް'l#OAdh.mr# (97;tn/ qK y0HVuB8fYzP=.WnFH?¦f %j[Pahv+Ka+wA_o ɻK@c HEZ~sԜCi>Ognjy7bs !K})zfB peYCa;Ve ib*-WeJtZbuH߆:4$)0](*7x%ԅ7TGbZ%Lchd~ԓ5 H?GIb,ZE>JBqʹ HiI  ?ѵY桟4ww*Gt|ޖ H9H9=ޝ"d 7qkX>L; ~M02w7y ՞h8dZӱvGo %?o>$NA*>MYBjL]1"6Iٯ {}Q#/7נ0b-.O!j29N JݴtʰFL~:lŭ Eiȅ=gAހZBO.냉!8g-qVӵaQĊa$'r`j wJ?[,qs 3(gh!TE.H<8'Z`ugK^(uq['"`o30֟gqZRH?n=/_Uޝfw RuPH"/1L BD +OWfF]( vNyNG(9 :ڠQ"/q1([Wc`hhr@[&l ͮܢeE6#.ҡQ`7и%6b,1_ [27Ns^dW@ȜaZ0+%؝E;J,sO6f\ߴwY׶poXM1 \:O.d @h{&L˽ѺZw,~G( }Wʹo(\&$%oW ^A/Z?6jᵵAMJ<Ɂ[9R[kZWk,ڵ6V 9֚_Ƶ]l|3m;ZĢP4h9f[QvGW#젾9h:eft@T4XQWCV{DMέ=l//{k=VjJQw3SQ} A{*;OR~[>N%I.}*65l w`vMxq u +XZD])t$+Zcm)Z4舔 Uʒ|{Ckvڦh`Pf䃣XP"$%Mڌ ד/ɫҕP9& Nlr1 4L(8,V>TJh&ŵ5 kI"醟U$nFxMp0ckŞedfz\ !J(̠F1эbƞRGW;Χ 1*Z&Q[g^+ POӳs8Wg"eWjg"ΐe𤘢 xAM~qW ZUWe%s t~bpjA 戢X9l㯎a0Y!LNAѼ<)k)W]őRGWB򌏗{ Ѝ{#\^)ENwH-*|QW 7z ɢ_6m>kb/ g4mBumiǥ@?x˫R\XH>(9?>Yj>^|OY!@/. IU 5>M]+r-Kr3[DTM95P&䋽=č ~g$nD Cj)&ۏPW+ɀE"֥4 p2G~9B$ݻ66 |biV1*H p@978 *H~3f&dQ+6Gs3hU"˒8[00+9xy^jv ў,h1^ߎ؀Z.ƈKiU56.H 4A ۽Ak}\",VU -s]׍%b4]<5MrekCY I+6v5 4ဴw ~l q2̍?ź)tI8'[U`JK]4z\=HPŢiA~ԮPo[e䏢4ä́(.ށm{l~>hpdODV qo> ߚAc0100g1jϭ04KL| W'6H8]>"}|az!gL7)TJ16Nܺ:Tu;D+Y~0L*g {GfS!DUR.mVղ9ïֺ_QK oYeb:0?gS0~sEW ] jL-̊@PFujFC `#Ɋr[\?{]^?8[O뷎o]q1y#v ҖY)(Fg6Fb{t˧}"FVRIBm/,>ʧKc0Ip tg~Ͳ?gr60/7i"+R2ĸTo6WQt݋rd ѕez _a0wċӕcx#ثAv7ɫkE { 'ۢ C%Df79|yJ+?eV@g?gD=y'!X+yQllpKct]iZ 6 l1&pR`2UQ4jҥ`M8B/!w4V[2xpZx몘"< Я{w9U夔g˻;anMŞQΝ>en3Nq1_IbdwDމw~\$ySу+fd{nSAL_yԃ xۼSF hkо*W JKR-Ӆsܙ8\ Ih,A{X/51X1wX>H_KB+i:/RO?I/zVmX5#7q%(8]nYv]|9~u=]{ZldLcTǪ譣fp^ziyK7# QKt!!xBgkPG<ߔ,H@aja.=VB#KJ$17bG0ҵOmlPӫ+$g(4S4>p+{-=PAXEx l1O滞pt1^@u3V @RϨ?FYBIk%F| 4EG@n_㽮[pB;C}m#kjupEK}AΰrOu;zE*"fa!q^ճ} eU|O>SP[A =NԃY.ݹ dZf4JeB3-{*Bx!̓g2KN .q HXYC"*pM.|3Hk47XY|B},Zzw.iW%m1ZtVH&7Yޮ =DCGhnt>3 )S%ƪ 3[U)łF3RhoaoxH}|6snI#p7Doȱp0kn0>gϱen]: a]y baS0dKo 8j;AvC?I &'4 /XD@]5k3G^΢oUp߈8rﵠK 5(jwGz لPYԡPќ Bvy[H JQ}1ixc/)yHLʉmeڬn^b_*²yp`h[%^Ou :ETx =?ܯ b|(㚄lωy_ ܏6&EDy$ UUϳcFOU1 j@T\7t/x4Ƀ9h˜&VdUanPrq-9+z!_ x KŒo]rȯisu !L嵎y7BRN[pnqJPm*+MgdUYzK6SÙ ˔9g֍/K"*mwMQƧ;JI]l 7#@&QMMaL\)O9 * fzp. w egckևr[ 2.2 QAk"-S\\n߾;fQDA8͹6]?<ˁђf$| Ӡ72~bŊǢe&Ֆ!jh.ٖTA8^" d;;-g6:-[ZЉEBN?'o[h?C@v(=ygLDZH" Xd)S)s%G6^LIy8<ٕ TNP~C"<CQY\C SZm-}U^g_Td'J~aGb:1OrvХ@!\]ӆ;soxԤ"{;)\̜KMp g1|Jz3e|/鶁:z0S3!jS8Nj0{1L&ӯ4*:Ԋ_ĞlDٽZ u\Fv!h 6"@}v޽ޣjJWya~`}^]JfƘ*Zo7pb B}P[VHaCyQ"pD&xKRF#vᘮb= = j\ծHbraǢ&}BYlZ.q5Sۼ*<~HH~JNs#8%/mr*u|_`h51.seNlqvބ?RC)B=΂OM0T%g+ #\u&,m_m]/vR~Wsh; (8,&tJӤB5[N>٢}!fetQ2~-ҥ:Bp^T˓G]N6A|m;5QV0mQP']4&?>k<{Mvb1$a^kOO> q%9 |MZ6"MT$ \f(05QZPrO?,rE}yj*ri$j5.foy dф6;:obNIŖ_x_^zz -rMٵxBim1Ҽ (D|5Ȣ Y@hz7t)j>5+% 9U+?=!|Di]khw*⢀^sF%k[rGsb+` lڢ#Aa RJ۬5~vtڢ=2&E'.H+*ɧӡ{~Sm&!;wRZ{QlbꌼML"fwh/ZW!gOGR9JIA4&<@f;TR9h^/[a;GYˆYZB߳{1aK$/̵:Wp,G4_ô췈asڧ1|΅gZ谳S'B`S3 x K_+J>lom!h1̥mkSxī=|8~zƧk{w`HhF1`0%~sP6[ SL[aGRjQ'Y8dzL.Ij$21 @w)K "iz~I"ĺI Z!x=+9PM P4Q?s{ysэo2;-3li cBM=׈3[ >zaE"9oyҴҾ]-j,ǗanܠN֯)Rm5NWzGҦp@y8Df]iF#a=JWT2~O}aݛ\5cRS:-!e!S#B&,u:,=+ՔRJV8~V(rhiΐCbXg{ Ł}:g@`on;>oQM3RlsX]`yl_[R $q*%2L*JP[i1fJ+k~X06"O+f5<#͞Dc41;Mt1iPٔ6 G:7gG~zͼЄ@V|:ʗzlmֶM"rhgÑdY%e@dQ]rn,(G  L;"u@.F48%AB!$vw!=6xr\|OݝYLUeT݀37N;ͻMz t/= h_q=\Ce%et"3p.زJKWz⅕J;jT#iLZ+$"{M-_1fB 2\sIe0V奆_-4*DJZ%,={όHC2a?=kGpa[|YMLnc <7DKﰜph1RzDT,s5t;EO\󱬔JfgS!V9jZVSfHIa1iI/'}Tmovh_l4:*It!ݵzIk}Òk^n<4S_ʚu|.5Ps\+$o3k)I$`0fBS0rDuCqF䰯K4MB։`HS ! #ʑhrJ'DM8рXx *ӟBW3%:$%m>SSUuBUH v;@P.#ЧP$Ƿ;Љ+aճ69>\FKMClm 5%g+#2x hypԎ4MZØgWk†ǞRq6*5"I"ߐ$N|zhZ&Css}4}|.|It~"x4qJKoY08/b\ ^NKDO -F4X\ AD731rQ71,#X g7B^ 96u E GV n]}Ц2<TXsN 3\T S\X:Elot6WR, Y,:"ţ0Cavo]D׶QLãM@IM8 >3o>ZD°c3fl}h -R +P+}X ̛g|rvxnl:m=`njQ4?_o+-|\af0-Rm1[_ovT sJ&ms.Rs2I/I CeQ 7JbkfyPDl_ s(Z0WbJb{>$ oc(6 Ap0xƸC6ʄznծ0¸iɖbĚG #au1PwSw8J1'] yYyWo+P*m$ -8e(sJk7M`HN>&moeQe:a$]BS_GĤ\d#Q9ŸwTj4g:@ Nj_nyO?`b,  >"'-U!$I^5XK"CO C޻ Vc\Zէ/gӤo sDb3p}|Q4z@[ws9Ӡw>{ /\i^Y73b/2 P9y |*/S ZbmsxWea6jkW&ŵI=19N%#W7f^H_`;H5 4 Q3ڮa ͳp}_^Iuާq|xHi*Vq +/)?l13S\F WSx/rƖ`+Y`jd[:9q$/[ yZC8p }NpӐdZodJR]>oI7o>P7ӕX#QIO.H,1+>NOD5z\ǜ;n.ސ寅&,RUMNJw6/w[:3Z~@_V0Kpsƈ\y/q|R`hL&UҨx'K>k;zSd6p)Ij=QVa)qvf]k_2~ӵ䆢PqbePuCM~ kǩ'WpCՒ6 c\@Ue|4$d6$v_| }2z#Pقt44XSY='O*9_wIOWہ}$/^g14Ѧ SIu>YϴCtƒm;!lبj_}pR~3jYFD'kcl0 c9ټjO 3KAK W~ݗO‚[AZntYYl'hx^%lXáن58>ѯlKgՊ@a )WҼ2䈗ą4"ut鶽ؑ ݬѴ LN |# .R#WTS3k7di{­NYV|7N͵G1T^ 9.J~V7ltq{yD2_5)"k"BQM닠 ,\Ql{RRX\w4R粉>п;ZTv ?yCHdY0 m{Ξ(U-ci +YQq Pܥ",ԿYpVD$h4h75(ż`ND^c!GW8BfMfwݛoO'C:hs"~y- mΉM3XMb/xE ;FR ){A*|K)xM/,whus$,iPSm+H63;kl_8O9LIP2Goٮu0Zn͆: Cg 0Mvq,RbKTko3$Kj]AONVsͣRF(IOA(bL<@f+i8JhAB<ڀX d71-= > #nU}o=JFNuWں0 C:7ک_2^U]G @yɅ b^EU+ipsgdu&9z-x~jM?TxvJm- %ΏA<|c&qL 80Ybb3-KH!7q\Ɣ60q1b}G[]=DBt׏e}/@o}ϫލY}3LJzqe=Jrv%xfw%1*.-Gdz*ψ⎪bKpYUO"Ryj{~1Kv =Bѓ"UX[{0&oqQ"mTwH~ͦkH"2LCCb4 S)G U&>%3@;maǴ(wt b2pcZ^>@\~ ~zMfwe'˰ANfe1+h$>M2k?6w;0v`-Awp(DW(~'>ԒBe?`Eڟl̸ ] F?;CydFC6݅>FxӤsj6L, $F `ݒAZڊO٫)^ ~Ƕ YZ