libpython3_6m1_0-3.6.15-150300.10.60.1<>,`f p9|a"ub)ǧ$ћ ]yPuF˒& ĥ# {Vm`>r3T JzʋB݇؍.R.˻d%O'+);q, 9y!=?8bP| LokE |I9f1<|џP6mldߍR.,+zWgbQUem/L#EW>@?d ) K 7=DH J L P  (89:[>Q@`FoGHIXY\]^bcd!e&f)l+u@vDwxyz8HLRClibpython3_6m1_03.6.15150300.10.60.1Python Interpreter shared libraryPython is an interpreted, object-oriented programming language, and is often compared to Tcl, Perl, Scheme, or Java. You can find an overview of Python in the documentation and tutorials included in the python-doc (HTML) or python-doc-pdf (PDF) packages. This package contains libpython3.2 shared library for embedding in other applications.f h04-ch1b*SUSE Linux Enterprise 15SUSE LLC Python-2.0https://www.suse.com/Unspecifiedhttps://www.python.org/linuxx86_64*񈁤f ef5717a35a08470d977c5134a9bf90159382eb1f8f8d555db23e72db431bd545rootrootpython3-core-3.6.15-150300.10.60.1.src.rpmlibpython3.6m.so.1.0()(64bit)libpython3_6m1_0libpython3_6m1_0(x86-64)@@@@@@@@@@@@@@@@@@@@@@     /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.9)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libm.so.6(GLIBC_2.29)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.2.5)(64bit)python3-baserpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.6.153.0.4-14.6.0-14.0-15.2-14.14.3f @e؈e4@d@dVA@dRLd>@d@c>@ccv"@ck@c[@c$e@cbb@b@a@a*@a*@aaaayay?@af@a]aLl@aLl@aA@a'@aj@```t`[``@``/@``U_T__@_v@_0@_0@_@_G@___P_P_m_O@_N7_L@_?@_>e_>e_=@_@_______^^g@^>^>^8 @^0"@]f@]+]@]m]y@]v>]8H@]8H@]1]]@\\8\@\E@\C@["@[6@ZZԐ@Zx@Z@Z@Z Z Zz@Zhu@Z`@ZLZ"Z }YYX@Yo@Y@YY@Y@YI@XӸXƉXXqX@Xv@W@Wx@W_W@Vm@VhV*!@VCV }@U@U@U@UU[%UT@UCjU@TeT;mcepl@suse.commcepl@suse.commcepl@cepl.eudaniel.garcia@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comdmueller@suse.comschwab@suse.demcepl@suse.comdimstar@opensuse.orgmcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comschwab@suse.deqydwhotmail@gmail.commcepl@suse.commcepl@suse.commcepl@suse.comdmueller@suse.commcepl@suse.comcode@bnavigator.demcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commeissner@suse.commcepl@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commmachova@suse.commcepl@suse.commcepl@suse.commcalabkova@suse.comdimstar@opensuse.orgmcepl@suse.comdimstar@opensuse.orgmcepl@suse.commcepl@suse.comtchvatal@suse.comschwab@suse.demcalabkova@suse.commcalabkova@suse.commcalabkova@suse.commcepl@suse.commcalabkova@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.comtchvatal@suse.commimi.vx@gmail.compsimons@suse.comadam@mizerski.plschwab@suse.debwiedemann@suse.comtchvatal@suse.comjmatejek@suse.comnormand@linux.vnet.ibm.comjmatejek@suse.comdimstar@opensuse.orgmimi.vx@gmail.comjmatejek@suse.comdmueller@suse.comvcizek@suse.comschwab@suse.dejmatejek@suse.comkukuk@suse.dejmatejek@suse.comasn@cryptomilk.orgjmatejek@suse.comjmatejek@suse.comjmatejek@suse.combwiedemann@suse.comjmatejek@suse.comjmatejek@suse.comhpj@urpla.nethpj@urpla.nethpj@urpla.netjmatejek@suse.comtoddrme2178@gmail.comtoddrme2178@gmail.comjmatejek@suse.comtoddrme2178@gmail.comjmatejek@suse.comdimstar@opensuse.orgjmatejek@suse.comfisiu@opensuse.orgmeissner@suse.comschwab@suse.dejmatejek@suse.commailaender@opensuse.orgrguenther@suse.comp.drouand@gmail.comjmatejek@suse.com- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109, gh#python/cpython!16557) fixes syslog making default "ident" from sys.argv[0].- (bsc#1219666, CVE-2023-6597) Add CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from gh#python/cpython!99930) fixing symlink bug in cleanup of tempfile.TemporaryDirectory. - Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into skip_SSL_tests.patch, and make them include all conditionals.- Refresh CVE-2023-27043-email-parsing-errors.patch to gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing gh#python/cpython#108310, backport from upstream patch gh#python/cpython#108315 (bsc#1214692, CVE-2023-40217)- Add 99366-patch.dict-can-decorate-async.patch fixing gh#python/cpython#98086 (backport from Python 3.10 patch in gh#python/cpython!99366), fixing bsc#1211158.- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix CVE-2007-4559 (bsc#1203750) by adding the filter for tarfile.extractall (PEP 706).- Use python3 modules to build the documentation.- Add bpo-44434-libgcc_s-for-pthread_cancel.patch which eliminates unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329, bsc#1208471) blocklists bypass via the urllib.parse component when supplying a URL that starts with blank characters- Add bpo27321-email-no-replace-header.patch to stop email.generator.py from replacing a non-existent header (bsc#1208443, gh#python/cpython#71508).- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in the garbage collection (bsc#1188607).- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding extremely long domain names.- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer overflow in hashlib.sha3_* implementations (originally from the XKCP library).- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix CVE-2020-10735 (bsc#1203125) to limit amount of digits converting text to int and vice vera (potential for DoS). Originally by Victor Stinner of Red Hat.- Add patch CVE-2021-28861-double-slash-path.patch: * http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. (bsc#1202624, CVE-2021-28861)- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the command injection in the mailcap module. - Rename support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch to unify the patch with other packages. - Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests on s390x.- Update bundled pip wheel to the latest SLE version patched against bsc#1186819 (CVE-2021-3572).- Add patch support-expat-245.patch: * Support Expat >= 2.4.5- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.- Don't use appstream-glib on SLE-12. - Use Python 2-based Sphinx on SLE-12. - No documentation on SLE-12. - Add skip_SSL_tests.patch skipping tests because of patched OpenSSL (bpo#9425).- Don't use appstream-glib on SLE-12. - Use Python 2-based Sphinx on SLE-12. - No documentation on SLE-12. - Add skip_SSL_tests.patch skipping tests because of patched OpenSSL (bpo#9425).- Don't use OpenSSL 1.1 on platforms which don't have it.- Remove shebangs from from python-base libraries in _libdir (bsc#1193179, bsc#1192249). - Readjust patches: - bpo-31046_ensurepip_honours_prefix.patch - decimal.patch - python-3.3.0b1-fix_date_time_compiler.patch- build against openssl 1.1 as it is incompatible with openssl 3.0+ (bsc#1190566)- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore permission error when changing the mtime of the source file in presence of SOURCE_DATE_EPOCH- The previous construct works only on the current Factory, not in SLE.- BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation.- Due to conflicting demands of bsc#1183858 and platforms where Python 3.6 is only in interpreter+pip set we have to make complicated ugly construct about Sphinx BR.- Make python36 primary interpreter on SLE-15- Make build working even on older SLEs.- Update to 3.6.15: - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. Library - bpo-45001: Made email date parsing more robust against malformed input, namely a whitespace-only Date: header. Patch by Wouter Bolsterlee. Tests - bpo-38965: Fix test_faulthandler on GCC 10. Use the “volatile” keyword in faulthandler._stack_overflow() to prevent tail call optimization on any compiler, rather than relying on compiler specific pragma. - bpo-40791: Make compare_digest more constant-time (bsc#1214691, CVE-2022-48566). - Remove upstreamed patches: - faulthandler_stack_overflow_on_GCC10.patch- test_faulthandler is still problematic under qemu linux-user emulation, disable it there- Update to 3.6.14: * Security - bpo-44022 (bsc#1189241, CVE-2021-3737): mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server. - bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks. Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks. - bpo-42988 (CVE-2021-3426, bsc#1183374): Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer. - bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network. Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it. - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server. - Upstreamed patches were removed: - CVE-2021-3426-inf-disclosure-pydoc-getfile.patch - CVE-2021-3733-ReDoS-urllib-AbstractBasicAuthHandler.patch - Refreshed patches: - python3-sorted_tar.patch - riscv64-ctypes.patch- Rebuild to get new headers, avoid building in support for stropts.h (bsc#1187338).- Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858).- Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668).- add 22198.patch to build with Sphinx 4- Stop providing "python" symbol (bsc#1185588), which means python2 currently.- Make sure to close the import_failed.map file after the exception has been raised in order to avoid ResourceWarnings when the failing import is part of a try...except block.- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove getfile feature from pydoc, which is a security nightmare (among other things, CVE-2021-3426, allows disclosure of any file on the system; bsc#1183374, bpo#42988).Update to 3.6.13, final release of 3.6 branch: * Security - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache poisoning vulnerability by defaulting the query args separator to &, and allowing the user to choose a custom separator. - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static buffers when computing the repr of ctypes.c_double and ctypes.c_longdouble values. - bpo#42103: Prevented potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. - bpo#42051: The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. This should not affect users as entity declarations are not used in regular plist files. - bpo#40791: Add volatile to the accumulator variable in hmac.compare_digest, making constant-time-defeating optimizations less likely. * Core and Builtins - bpo#35560: Fix an assertion error in format() in debug build for floating point formatting with “n” format, zero padding and small width. Release build is not impacted. Patch by Karthikeyan Singaravelan. * Library - bpo#42103: InvalidFileException and RecursionError are now the only errors caused by loading malformed binary Plist file (previously ValueError and TypeError could be raised in some specific cases). * Tests - bpo#42794: Update test_nntplib to use offical group name of news.aioe.org for testing. Patch by Dong-hee Na. - bpo#41944: Tests for CJK codecs no longer call eval() on content received via HTTP. - Patches removed, because they were included in the upstream tarball: - CVE-2020-27619-no-eval-http-content.patch - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution.- Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686).- (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency.- readd --with-fpectl (bsc#1180377)- Adjust sphinx-update-removed-function.patch- (bsc#1179630) Update sphinx-update-removed-function.patch to work with all versions of Sphinx (not binding the Python documentation build to the latest verison of Sphinx). Updated version mentioned on gh#python/cpython#13236.- Add CVE-2020-27619-no-eval-http-content.patch fixing CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support calls eval() on content retrieved via HTTP.- Add patch sphinx-update-removed-function.patch to no longer call a now removed function (gh#python/cpython#13236). As a consequence, no longer pin Sphinx version.- Pin Sphinx version to fix doc subpackage- Change setuptools and pip version numbers according to new wheels (bsc#1179756). - Add ignore_pip_deprec_warn.patch to switch of persistently failing test.- Replace bundled wheels for pip and setuptools with the updated ones (bsc#1176262 CVE-2019-20916).- Handful of changes to make python36 compatible with SLE15 and SLE12 (jsc#ECO-2799, jsc#SLE-13738) - Rebase bpo23395-PyErr_SetInterrupt-signal.patch- Fix build with RPM 4.16: error: bare words are no longer supported, please use "...": x86 == ppc.- Fix installing .desktop file- Buildrequire timezone only for general flavor. It's used in this flavor for the test suite.- Add faulthandler_stack_overflow_on_GCC10.patch to make build working even with GCC10 (bpo#38965).- Just cleanup and reordering items to synchronize with python38- Format with spec-cleaner- riscv64-support.patch: bpo-33377: add triplets for mips-r6 and riscv (#6655) - riscv64-ctypes.patch: bpo-35847: RISC-V needs CTYPES_PASS_BY_REF_HACK (GH-11694) - Update list of tests to exclude under qemu linux-user- Update the python keyring - Correct libpython name- Drop patches which are not mentioned in spec: * CVE-2019-5010-null-defer-x509-cert-DOS.patch * F00102-lib64.patch * F00251-change-user-install-location.patch * OBS_dev-shm.patch * SUSE-FEDORA-multilib.patch * bpo-31046_ensurepip_honours_prefix.patch * bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch * bpo36302-sort-module-sources.patch * bpo40784-Fix-sqlite3-deterministic-test.patch * bsc1167501-invalid-alignment.patch * python3-imp-returntype.patch - Working around missing python-packaging dependency in python-Sphinx (bsc#1174571) is not necessary anymore.- Update to 3.6.12 (bsc#1179193) * Ensure python3.dll is loaded from correct locations when Python is embedded * The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This resulted in always causing hash collisions. The fix uses hash() to generate hash values for the tuple of (address, mask length, network address). * Prevent http header injection by rejecting control characters in http.client.putrequest(…). * Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing. * Avoid infinite loop when reading specially crafted TAR files using the tarfile module - Drop merged fixtures: * CVE-2020-14422-ipaddress-hash-collision.patch * CVE-2019-20907_tarfile-inf-loop.patch * recursion.tar - This release also fixes CVE-2020-26116 (bsc#1177211) and CVE-2019-20907 (bsc#1174091).- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch.- Make library names internally consistent- Disable profile optimalizations as they deadlock in test_faulthandler- Disable lto as it causes mess and works with 3.7 onwards only- Sync the test disablements from the python3 in sle15- Update to 3.6.11: - bpo-39073: Disallow CR or LF in email.headerregistry. Address arguments to guard against header injection attacks. - bpo-38576 (bsc#1155094): Disallow control characters in hostnames in http.client, addressing CVE-2019-18348. Such potentially malicious header injection URLs now cause a InvalidURL to be raised. - bpo-39503: CVE-2020-8492: The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service. Fix the regex to prevent the catastrophic backtracking. Vulnerability reported by Ben Caller and Matt Schwager. - bpo-39401: Avoid unsafe load of api-ms-win-core-path-l1-1-0.dll at startup on Windows 7. - Remove merged patch CVE-2020-8492-urllib-ReDoS.patch, CRLF_injection_via_host_part.patch, and CVE-2019-18348-CRLF_injection_via_host_part.patch.- Fix minor issues found in the staging.- Do not set ourselves as a primary interpreter- Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 (bsc#1173274, bpo#41004), where hash collisions in IPv4Interface and IPv6Interface could lead to DOS.- Change name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).- Add CVE-2019-9674-zip-bomb.patch to improve documentation warning about dangers of zip-bombs and other security problems with zipfile library. (bsc#1162825 CVE-2019-9674) - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367)- Add Requires: libpython%{so_version} == %{version}-%{release} to python3-base to keep both packages always synchronized (bsc#1162224).- Reame idle icons to idle3 in order to not conflict with python2 variant of the package bsc#1165894 * renamed the icons * renamed icon load in desktop file- Add pep538_coerce_legacy_c_locale.patch to coerce locale to C.UTF-8 always (bsc#1162423).- Update to 3.6.10 (still in line with jsc#SLE-9426, jsc#SLE-9427, bsc#1159035): - Security: - bpo-38945: Newline characters have been escaped when performing uu encoding to prevent them from overflowing into to content section of the encoded file. This prevents malicious or accidental modification of data during the decoding process. - bpo-37228: Due to significant security concerns, the reuse_address parameter of asyncio.loop.create_datagram_endpoint() is no longer supported. This is because of the behavior of SO_REUSEADDR in UDP. For more details, see the documentation for loop.create_datagram_endpoint(). (Contributed by Kyle Stanley, Antoine Pitrou, and Yury Selivanov in bpo-37228.) - bpo-38804: Fixes a ReDoS vulnerability in http.cookiejar. Patch by Ben Caller. - bpo-38243: Escape the server title of xmlrpc.server.DocXMLRPCServer when rendering the document page as HTML. (Contributed by Dong-hee Na in bpo-38243.) - bpo-38174: Update vendorized expat library version to 2.2.8, which resolves CVE-2019-15903. - bpo-37461: Fix an infinite loop when parsing specially crafted email headers. Patch by Abhilash Raj. - bpo-34155: Fix parsing of invalid email addresses with more than one @ (e.g. a@b@c.com.) to not return the part before 2nd @ as valid email address. Patch by maxking & jpic. - Library: - bpo-38216: Allow the rare code that wants to send invalid http requests from the http.client library a way to do so. The fixes for bpo-30458 led to breakage for some projects that were relying on this ability to test their own behavior in the face of bad requests. - bpo-36564: Fix infinite loop in email header folding logic that would be triggered when an email policy’s max_line_length is not long enough to include the required markup and any values in the message. Patch by Paul Ganssle - Remove patches included in the upstream tarball: - CVE-2019-16935-xmlrpc-doc-server_title.patch (and also bpo37614-race_test_docxmlrpc_srv_setup.patch, which was resolving bsc#1174701). - CVE-2019-16056-email-parse-addr.patch - Move idle subpackage build from python3-base to python3 (bsc#1159622). appstream-glib required for packaging introduces considerable extra dependencies and a build loop via rust/librsvg. - Correct installation of idle IDE icons: + idle.png is not the target directory + non-GNOME-specific icons belong into icons/hicolor - Add required Name key to idle3 desktop file- Unify all Python 3.6* SLE packages into one (jsc#SLE-9426, jsc#SLE-9427, bsc#1159035) - Patches which were already included upstream: - CVE-2018-1061-DOS-via-regexp-difflib.patch - CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes bsc#1149792 - Add bpo36263-Fix_hashlib_scrypt.patch which works around bsc#1151490- Add CVE-2019-16056-email-parse-addr.patch fixing the email module wrongly parses email addresses [bsc#1149955, bnc#1149955, CVE-2019-16056]- jsc#PM-1350 bsc#1149121 Update python3 to the last version of the 3.6 line. This is just a bugfix release with no changes in functionality. - The following patches were included in the upstream release as so they can be removed in the package: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-5010-null-defer-x509-cert-DOS.patch - CVE-2019-10160-netloc-port-regression.patch - CVE-2019-9636-urlsplit-NFKC-norm.patch - CVE-2019-9947-no-ctrl-char-http.patch - Patch bpo23395-PyErr_SetInterrupt-signal.patch has been reapplied on the upstream base without changing any functionality. - Add patch aarch64-prolong-timeout.patch to fix failing test_utime_current_old test.- FAKE RECORD FROM SLE-12 CHANNEL Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which converts shutil._call_external_zip to use subprocess rather than distutils.spawn. [bsc#1109663, CVE-2018-1000802]- FAKE RECORD FROM SLE-12 CHANNEL bsc#1109847: add CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing bpo#34623.- boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server.- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch which fixes regression introduced by the previous patch. (CVE-2019-10160) Upstream gh#python/cpython#13812- FAKE RECORD FROM SLE-12 CHANNEL bsc#1137942: Avoid duplicate files with python3* packages (https://fate.suse.com/327309)- bsc#1094814: Add bpo23395-PyErr_SetInterrupt-signal.patch to handle situation when the SIGINT signal is ignored or not handled- Update to 3.6.8: - bugfixes only - removed patches (subsumed in the upstream tarball): - CVE-2018-20406-pickle_LONG_BINPUT.patch - refreshed patches: - CVE-2019-5010-null-defer-x509-cert-DOS.patch - CVE-2019-9636-urlsplit-NFKC-norm.patch - Python-3.0b1-record-rpm.patch - python-3.3.0b1-fix_date_time_compiler.patch - python-3.3.0b1-test-posix_fadvise.patch - python-3.3.3-skip-distutils-test_sysconfig_module.patch - python-3.6.0-multilib-new.patch - python3-sorted_tar.patch - subprocess-raise-timeout.patch - switch off LTO and PGO optimization (bsc#1133452) - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised.- bsc#1129346: add CVE-2019-9636-urlsplit-NFKC-norm.patch Characters in the netloc attribute that decompose under NFKC normalization (as used by the IDNA encoding) into any of ``/``, ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the URL is decomposed before parsing, or is not a Unicode string, no error will be raised. (CVE-2019-9636) Upstream gh#python/cpython#12224- bsc#1120644 add CVE-2018-20406-pickle_LONG_BINPUT.patch fixing bpo#34656 Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data.- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.- Add -fwrapv to OPTS, which is default for python3 anyway See for example https://github.com/zopefoundation/persistent/issues/86 for bugs which are caused by avoiding it. (bsc#1107030)- Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS (CVE-2018-1061). Prior to this patch mail server's timestamp was susceptible to catastrophic backtracking on long evil response from the server. Also, it was susceptible to catastrophic backtracking, which was a potential DOS vector. [bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060]- As we run in main python package do not generate the pre_checkin from both now- Move the tests from base to generic package wrt bsc#1088573 * We still fail the whole distro if python3 is not build * The other archs than x86_64 took couple of hours to unblock build of other software, this way we work around the issue - Some tests are still run in -base for the LTO tweaking, but at least it is not run twice- update to 3.6.5 * bugfix release * see Misc/NEWS for details - drop ctypes-pass-by-value.patch - drop fix-localeconv-encoding-for-LC_NUMERIC.patch - refresh python-3.6.0-multilib-new.patch- Apply "python-3.6-CVE-2017-18207.patch" to add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this check, attackers could cause a denial of service (divide-by-zero error and application crash) via a crafted wav format audio file. [bsc#1083507, CVE-2017-18207]- Created %so_major and %so_minor macros - Put Tools/gdb/libpython.py script into proper place and ship it with devel subpackage.- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64- Add python3-sorted_tar.patch (boo#1081750, bsc#1086001)- Add patch to fix glibc 2.27 fail bsc#1079761: * fix-localeconv-encoding-for-LC_NUMERIC.patch- move XML modules and python3-xml provide to python3-base (fixes bsc#1077230) - move ensurepip to base- Add skip_random_failing_tests.patch only for PowerPC- update to 3.6.4 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed python3-ncurses-6.0-accessors.patch - drop PYTHONSTARTUP hooks that cause spurious startup errors * fixes bsc#1070738 * the relevant feature (REPL history) is now built into Python itself- Install 2to3-%{python_version} executable (override defattr of the -tools package). 2to3 (unversioned) is a symlink and does not carry permissions (bsc#1070853).- move 2to3 to python3-tools package- update to 3.6.3 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch- drop python-2.7-libffi-aarch64.patch: this patches the intree copy of libffi which is unused/deleted in the line afterwards - fix build against system libffi: include flags weren't set so it actually used the in-tree libffi headers.- Fix test broken with OpenSSL 1.1 (bsc#1042670) * add 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch- fix missing %{?armsuffix}- distutils-reproducible-compile.patch: ensure distutils order files before compiling, which works around bsc#1049186- Add libnsl-devel build requires for glibc obsoleting libnsl- update to 3.6.2 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed test-socket-aead-kernel49.patch - add Provides: python3-typing (fixes bsc#1050653) - drop duplicate Provides: python3- Add missing link to python library in config dir (bsc#1040164)- update to 3.6.1 * bugfix release, over a hundred bugs fixed * never add import location's parent directory to sys.path * switch to git for version control, build changes related to that * fix "failed to get random numbers" on old kernels (bsc#1029902) * several crashes and memory leaks corrected * f-string are no longer accepted as docstrings- prevent regenerating AST at build-time more robustly - add "--without profileopt" and "--without testsuite" options to python3-base to allow short circuiting when working on the package- FAKE RECORD FROM SLE-12 CHANNEL update to 3.4.6 (bsc#1027282): * fixed potential crash in PyUnicode_AsDecodedObject() in debug build * fixed possible DoS and arbitrary execution in gettext plurals * fix possible use of uninitialized memory in operator.methodcaller * fix possible Py_DECREF on unowned object in _sre * fix possible integer overflow in _csv module * prevent HTTPoxy attack (CVE-2016-1000110) * fix selectors incorrectly retaining invalid fds - drop upstreamed python-3.4-CVE-2016-1000110-fix.patch - move _elementtree to python3.rpm to match its pyexpat dependency (bsc#1029377)- Add 0001-allow-for-reproducible-builds-of-python-packages.patch upstream https://github.com/python/cpython/pull/296- reenable test_socket with AEAD patch (test-socket-aead-kernel49.patch) - reintroduce %py3_soflags macro (and better named %cpython3_soabi equivalent)- update to 3.6.0 * PEP 498 Formated string literals * PEP 515 Underscores in numeric literals * PEP 526 Syntax for variable annotations * PEP 525 Asynchronous generators * PEP 530 Asynchronous comprehensions * PEP 506 New "secrets" module for safe key generation * less memory consumed by dicts * dtrace and systemtap support * improved asyncio module * better defaults for ssl * new hashing algorithms in hashlib * bytecode format changed to allow more optimizations * "async" and "await" are on track to be reserved words * StopIteration from generators is deprecated * support for openssl < 1.0.2 is deprecated * os.urandom now blocks when getrandom() blocks * huge number of new features, bugfixes and optimizations * see https://docs.python.org/3.6/whatsnew/3.6.html for details - rework multilib patch: drop Python-3.5.0-multilib.patch, implement upstreamable python-3.6.0-multilib-new.patch - refresh python-3.3.0b1-localpath.patch, subprocess-raise-timeout.patch - drop upstreamed Python-3.5.1-fix_lru_cache_copying.patch - finally drop python-2.6b1-canonicalize2.patch that was not applied in source and only kept around in case we needed it in the future. (which we don't, as it seems) - update import_failed map and baselibs - build ctypes against system libffi (buildrequire libffi-devel in python3-base) - add new key to keyring (signed by keys already in keyring) - introduced common configure section between python3 and python3-base - moved pyconfig.h and Makefile to devel subpackage as distutils no longer need it at runtime - added python-rpm-macros dependency, regenerated macros file, drop macros.python3.py because it is not used now - improve summaries and descriptions (fixes bsc#917607) - enabled Link-Time Optimization, see what happens - including skipped_tests.py in pre_checkin.sh run - run specs through spec-cleaner, rearrange sections- FAKE RECORD FROM SLE-12 CHANNEL apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user supplied Proxy request header: python-3.4-CVE-2016-1000110-fix.patch (fixes bsc#989523, CVE-2016-1000110) - refresh python3-urllib-prefer-lowercase-proxies.patch- FAKE RECORD FROM SLE-12 CHANNEL update to 3.4.5 check: https://docs.python.org/3.4/whatsnew/changelog.html (fixes bsc#984751, CVE-2016-0772) (fixes bsc#985177, CVE-2016-5636) (fixes bsc#985348, CVE-2016-5699) - drop upstreamed werror-declaration-after-statement.patch- FAKE RECORD FROM SLE-12 CHANNEL Due to being fixed upstream (differently), removed outdated patch CVE-2014-4650-CGIHTTPServer-traversal.patch (bsc#983582)- move _hashlib and _ssl modules and tests to python3-base - recommend python3- Add Python-3.5.1-fix_lru_cache_copying.patch Fix copying the lru_cache() wrapper object. Fixes deep-copying lru_cache regression, which worked on previous versions of python but fails on python 3.5. This fixes a bunch of packages in devel:languages:python3. See: https://bugs.python.org/issue25447- update to 3.5.1 * bugfix-only release, dozens of bugs fixed - Drop upstreamed Python-3.5.0-_Py_atomic_xxx-symbols.patch - "Python3" to "Python 3" in summary * This seems cleaner and fixes and rpmlint warning- FAKE RECORD FROM SLE-12 CHANNEL Issue #21121: Don't force 3rd party C extensions to be built with -Werror=declaration-after-statement. (werror-declaration-after-statement.patch, bsc#951166)- Add Python-3.5.0-_Py_atomic_xxx-symbols.patch This fixes a build error for many packages that use the Python, C-API. This patch is already accepted upstream and is slated to appear in python 3.5.1.- update to 3.5.0 * coroutines with async/await syntax * matrix multiplication operator `@` * unpacking generalizations * new modules `typing` and `zipapp` * type annotations * .pyo files replaced by custom suffixes for optimization levels in __pycache__ * support for memory BIO in ssl module * performance improvements in several modules * and many more - removals and behavior changes * deprecated `__version__` is removed * support for .pyo files was removed * system calls are auto-retried on EINTR * bare generator expressions in function calls now cause SyntaxError (change "f(x for x in i)" to "f((x for x in i))" to fix) * removed undocumented `format` member of private `PyMemoryViewObject` struct * renamed `PyMemAllocator` to `PyMemAllocatorEx` - redefine %dynlib macro to reflect that modules now have arch+os as part of name - module `time` is now built-in - dropped upstreamed patches: python-3.4.1-fix-faulthandler.patch python-3.4.3-test-conditional-ssl.patch python-fix-short-dh.patch (also dropped dh2048.pem required for this patch) - updated patch Python-3.3.0b2-multilib.patch to Python-3.5.0-multilib.patch - python-ncurses-6.0-accessors.patch taken from python 2 to fix build failure with new gcc + ncurses- Add python3-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1.- improve import_failed hook to do the right thing when invoking missing modules with "python3 -m modulename" (boo#942751)- Build with --enable-loadable-sqlite-extensions to make it works as geospatial database.- dh2048.pem: added generated 2048 dh parameter set to fix ssl test (bsc#935856) - python-fix-short-dh.patch: replace the 512 bits dh parameter set by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856)- ctypes-libffi-aarch64.patch: remove upstreamed patch - python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64- python-3.4.3-test-conditional-ssl.patch - restore tests failing because test_urllib was unconditionally importing ssl (without really needing it) - restore functionality of multilib patch - drop libffi-ppc64le.diff because upstream completely changed everything yet again (sorry ppc64 folks :| )- Update to version 3.4.3 - Drop upstreamed CVE-2014-4650-CGIHTTPServer-traversal.patch (bpo#21766)- Add python-3.4.1-fix-faulthandler.patch, upstream patch for bogus faulthandler which fails with GCC 5.- asyncio has been merged in python3 main package; provide and obsolete it - Remove obsolete AUTHORS section - Remove redundant %clean section- add %python3_version rpm macro for Fedora compatibility - add missing argument in import_failed, rename Novell Bugzilla to SUSE Bugzilla/sbin/ldconfig/sbin/ldconfigh04-ch1b 17126558283.6.15-150300.10.60.13.6.15-150300.10.60.1libpython3.6m.so.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33304/SUSE_SLE-15-SP3_Update/787731e77fff0d06ceb8f755b517dd75-python3.SUSE_SLE-15-SP3_Update:basedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c93010aa210545059e3ac51ccd7ce5d4d4467158, strippedPRRRRRRRRR RR RR R R RRRRRRR_ s*sutf-86a3133cf8c44fc0ffb40957bedd98468116593d6c0e4cc908e7605b38ffeace3?7zXZ !t/?]"k%۫5B1we9rSG!~kX5298j8wEp"I4.RJ5 g]eGt܃voI-? 2, /sj N*偞 JOU;~3Xu{% j~qU;xL5 c"ѵx=#YūiِWi딮r\N!gHZC/3R:Zi93$` t[XLDs n5`V WXKYQ_݁R9N0x'|q4=$QO};"`3\pk 倉?7xmd!A# 0Rv*NLf@:3s1fMYu \݀rd-DASON\`b)7&IV޺Ur-n,rM ?(zxkRdTb5BY/<$7,| SD8w%O4m={4ڄ?:uOƛYȊE=YUWI& #G=T ?t\#d\eD>MUVɯo=XSC=>!֦7 csew j/_[*ŗclRtϯT#8vɅDbS"+4h4-F)=nG}/szBIy0G"UdZ!Vx&{`o? PL|%ye 7Ϫ7!/f0=u0^*&xd Z8Ǡ+)yN1| "0Jm&ڰ쫸qghO5҄gRj񼷑3 (3* sX! SBiB,S\ $c98 q{}IʤRYflRy1 -;U쎒ًrwrȗ3vz}s^ ߈u]Kf#lS>˦ZϞVx3l]1+i>~/Y@rqR晨$0ݦCچ e=O_Zw)vśZ*SP YZc1 _S)J򘜣6_k9氡cJJDТ;V2ARh|VRH8q3aV[6/ht:Ivݫ*NIʶǻ@(! lIs%|qm |Z;@Ӏ(lEWGgt52a(ܟg 0]:l_QIDz%免gV몽186F?\ p+:J_9( Qmz:f8+ahZnX3EMUZ]uLPZPxID\w )0d63=cb]jDws]_@DX.KuqB[ USZk(/Od: X`XFFZ2ƫe;G~@+훟=h ᚼ,x{<,68F/f9/a:q1BsE"cbk$:ױ!&}}u.q! -`˟D]tX'/H(n"^G;yY?{^* `yogC]gO p=JUp=vM.'RvS跭-،M8?s\uԍ.n6fͅ.d:Ik:5BhzvJT`yKwѭA"L=Rw{PNIPr 'ںD_-WcjZK֯pOEue%kȢB QTbauqy#%B]Yb_iYQX̊oIA6:3uv5*8jef/=fgA*hf|.']6c[KdG"ć5 JwuyKEx 2[v(+h(RI~g/)(<^Jp@mjP U[3Ÿ䬓Ljz_hVCW?ʃ!d_Kzbw-I Id\FwAͽLn7m9G򂴹5Ikm~{AuC$ TU@8UukvZ>I-k}}ދkPc.`{+p9Ȳ򫕦ܯZ_&׽JҴޗy%*u"n黔G q.K㤃sБÐLS\8qC@( sA1qpɛ/MiD1fCf`Cj}  /@b8#n `¶`<vаi~}eq@>pf)r>{=9hR`:P(/6v) de]{Ɍک5jv2({!2X䄾`*gjnf_.L^Oa5:mџEֶ5 L7G3y҆>bDCkv[z݄)=w7XaQHO 3Ţp~;.໱j5^}:vObaqKOM0[q]yS~4G:^XWd0hH'ܼn8t'*$u\3q>N7_x/+W')cE+eH)x97P}7X.G_(xa%4[SA㹛b8F#~-2Vy_.J;OMzɃ4o>WXk"s[u %x:8W^I JW!-= #m*GKr#h$2ۀ5㗁Ow)0M_݃zvv%t# _4UZ@s0Nkr /HFn|$!SuFv(LRUlwO9)tڑ3AqUbghU`^aI5 Ot`Q.ȸ2A“"bln0E|F yܬļ%T2X\o)^C\(Bg$$J_WU8d7NIaZw^vMNI@8!KSR͆9&-M BwGy,O_7d#0/7 v1z N 0l{ ^dޗ6JD>=w2K9,決<̏xolڈVH&NnWDŸ$Đ!ę8Hw\̙jzERRWC=L}ʘXx06j+i ,4X7?2I4a]*Q6٥blR==G9N`?J8EV:hP`X;CGQqwFkHu 9s10cS(3s!﮽h.aK[l3gy< ,1$#ȭ\Set>ʋXHz /Gz+^[1"z3w),xFt4AIe3gk+|_ M7&PN-+ԀEpx|ŏ)yV=%6W>\vf*┥_M"VN$i[X;''I=]W{>7­~wUjcEC'brJtAA؜Օ:[ ݤ%ۨ;F)%";|5#RX1w{V97!v҃bBj%+૛ LSan3$/z;_ts!t |R*7Ё95xVd19}Gosg_a Ԉxl%냛O<=84D_ֶI 2NYpah " NiHOJD]ZjqY~g W)= x/Sؓ;׉X-e񓝭זuN} > B?! D%_d迡;Zd)lTzsfawcb;L ƌOfN뀙9I>o$gR\-C\TK{`Bw;=gڲ2!y^JM 1>®@BRRժ[L6WX86rwJ2F u= [SlNY QkAO}qPk+z.Tn: f#^:4)~<))%gYIYރƃӪ4*#+RFc3!{js.)(Rio| qoJU (E#'1#x-hVÃR嚇YC^Sq`Q=$) 4xenyXL!w1ozR&\0;>2q#4.r<5T[W)m g'!yԥ6ͮM{13am?L=ܚ ל콚4]ectgnco;?C 0ȁ. fӡbNʷ40 1[()%kLW{C.Tz62*TOiK, PԨcx]^+x.#G 925VryQ"E2s:PU+ʡ()ճ6(K>⇮EdfmET0CcSdz-4ZYSDs̕,{QJ/ 2y:j{BB⹰V u۰g-Q8$eOG.0ߨW&N~(UwiFB MSCO8ib_]`UpQ@ [CS :PW&JM]"$؈$-ellѴRjcn`'lFC#N[eS@ųb V qLpI6Ij erg_׆DnNքfeT*T_6IUΌ$sB9t?o1IQN鳸H@h^+5ɢ275QO0;C┢2C:V@ի@o0@< #\uS<',R[0Hȿ/F˕mEkv1bz}zm\(߭ckD H={2zggqٻX':p^m ʧ cY!q8la%BxE OwPŃ]\VMu&c9ߗZݨ@qJL3~*9|t͚nr|QiQBهFaɅOPhoXQMdz&Y)gu.R <# &L))hQn L_[cL i -fz"bWyV)0MD~Q `/ƴL:'YͷDߑom݅Jkᕱ)!k%䜇7nqvqW&8[3 =X}!g95d+W2q4P4ׁdq0AlGsߓ@h0peٓG,62BƞfVBeMH I5f BLߨr5`L9szVG8B۫*<~2V"AnkK0z}"`k rWJ!.]~*Z۰~P2dy2:=<'?Q*EӵaPa,iGq76Q\\5()!ҦOUG%/z2gkr!M,'2 ̑L(#C=Oh!.iݔp[W-I앙*ypT E}1nFjd.moƅ67 SoOGVD:Oh>>X !)3*\:7/?/lzNn3]5L F.m-n̻gjDPk5;3T>vZvcWש[zk^?F yqGNW!KUb 7nwh ?<|mOBafC%tPumC^ŞS 6J KKJ%Td># !"%A<@b<_w=9 &yO+oqT2;f/v׍3xߩ;W⽕UĆT/^;W 0$eD~k '׽\zjF=Ff܃EJ"Eĝh4?iJU#6QJU;EY;)$imɭ]nv"65@d#a+:Oq@[GzWI@ srF86Qߏkg̲Mkri*4c3Z_qF$xIFxWRJsչ/S5;Ä 'I`mxFM=ƶM,ZXB(e$PRCI+wkj~c))ڍ~iIHVÉ:EnmMlc]5N/]b^I\yWli6V+GX;0?+F![n?Zwp`V\閡΋&1tY\hJT@XX,9{pGi/*"_ mgHF3R*d͎/>*P azJxVТQƟH=tyjFl4Lݖ?pnQӱl{&|!TWI-Ys,ElNeB2p |! .hhSKyv?BU[7R1v|B[Z2@VXF]3ld=ho/<3*U?%~.V]e`0>Y2.Oa+FWg^o1 Z ;rFh%PɈoNrkL^Q\ɨfQ>V Xa`Tr elk^'kUkJI + u;z(' r&Bb$"7ǘ;/PT|@* ByDsDqʮn.Fioo !}8.GQ|^@.(T8Aso$vqN7X} 5<@綗[7Lz!!54?@\X{$BvxhyLC JrH%pZVTqF6f/SY ~n]Ƽp IIvآ9Avhk!!]ɀK"ZQׅ7g^ 9ye\ ٙ #'[.FzA~2%_͍81Hz:&fߓk5&%GVMe6<'RĦ=$vtaX$nyQ䥕t1%r׻[͢[O5QizK&'|ʝsc׍`E06jMKn<Äň)r@U_=B5^6+"jhy"/R|SPsx&  o4\ʏwQHAԯ7%k8knu-_` '[ak>)an;i CɆA*}f|*Mj%,h DҸO=RFlbQ'ǽBS0YvEߪMQRWDmrwwLpxMk8#Hhk(3殌\FIKB9 -avOH{9Sv{LÛ{l.: DQL[Q!mSH/;~\<8\h00H>yJy )fQj^RK[4Wl5U0b. |LhRI=k83G^(a惘*#A4`-mԉL ޣ\H@-Ŵ9t 'FL^7x`٧P3;"F[n)oDsܱH6)@C%]I:m-r0A4].0.spؠ\k~I*N/*UtZ$P;O,_%tH7X]o"y42'#c-[t,E}:K[L?qY$/Rm?a>CAH+bV!U9hE4K'QD?YlJm jx=nvEwA{duI%s1$4v".hoHM!LToH1UnV}U6̙ NvNf5UQ%\;0L աK$sLRDaƎl1Z#u*Kr= pKm~l0b?PIKK8ފ' [˸/> ky\p{J- q]Q:RYm&7Wvjbŧqqצ{)~Է:-889 "x.-|N е7u ?m됅wA)5xTu9"dPcX{𰓭ZzYmf\ڤQǠd T h[h|ÅZ'R $X;9Țl_y_C4'8 M,N9^I%W,%5؝ Nz{R""͢,R~2v ir̒Hj&,R5^(U#G #5+?)e!I|znQ0ބ* NUf,>9A9 n꼾e[Оbs ??SBO\G.k.XdW'D.`kјBJ[)Xj߅gv_=wl& ed#^T 4.wdQ@oLq&!NZɒUWk^tYZw"@Vۏ]D 5sX69*.˥aWY0gCf E&.1NLBit!_#*vGV: =uBFJE%7oX֛yUF,CRa+B{%*4 NE!#{v>V!AQH#y3P,;ID׼+,O{ZL]vixU? ۯۮJ~&99 `>HӖSʎ*t {$':ܔ㹿BW׬ zN"fRW:-Mknپ~oyuy %4D؇EdE'?d KRwiisd@/ֵ~c~r'*e?C$ sp46KҪrUz#;o8W{%yLENbi8̶אaE-.[@us9k{M@W1ye]Ua1=he7U@(kpY6C㦬N)RRTzwTJ5q ;GԘJ2_-3/'/Gz+ʏxun%V. %pBՏIӹTnv4gr@#/Ш6_4Ґ.\Qyi P葡ȷ0m,@k/TzQg eR-#C;y}'Rr?tRi2qnRѩ 6dUً:JeZ5WD&~T gQno$n(;Ix姾V6╹Aֈbq?AV"g$3'ŗʬ6oXM][)ީEsʻs/V5.hNP-sG$fF!Qi1Ø\o\YC)NM:Oa\zuJ~u,h^?b'pW<d7i䞄 Gw x!&15*lPƭUuz8"mY]R᏶ :֥L)AESk}򧔳$B2P'g+<HUQC9O7n|.ȍͩOY>x$:.ZG&,#Wj7Ӕo!4z#7.Bee=M*+x Z}l몕zR-mSiwD6&vBpcǠJqORC>S,O`3ƶ;(窏/ݣcT~6n~:"E& k ,@ҚS3ny}y>FM!v5['S;Zj!K "ΟzϸPkG^d<3L0ȅ jtk |βcw 0ălVmO(Mc!'|]Ơ/3ZtH{\QH#d^x;ֺXf #62Gfti>绱~Hi:b.tz:U&'ƱT,Xk񣶐4o'說Eϭ򮩛sxo_؄z"n3 rӻnʛΥ3TK!~\;F|L]p=ŕ!ἌoG6@P 8q\$ j[ wrV6 F8(-]5-S@>NaNj}V1 2sBk>Y=dv!4T<'fm u~< d,Ȩ!RHEf@jqG}ZLtY?-nzwS֣'ubŋ Ԍ[k;l3ģ?;eFB%$.r<5TUڋ ^&y. ]g%4OڳhbnǢ(N2t+w8_~q0}mE3%wvSt.{0ۓբ.YđK΍&087'fE=Yi.\"?ۋ(FB]Z|V>{1,򃸱sgOqTaolv36)$pgtn(8*YB0t`ZnP@ʹ 6jv(kimSao֤7 D >hP6}.σq!:#mypg$;Ь&gPs|}s6A%GGcyFT}{X1cr.TmL*gq1{q eϐ̡RtC&4 t )T|}0Q)8*tqq*uKH0X_@t#o \Z-` v4RS#H-p Ɨžcܫr3X"9UnYUOBb5Xt) { Ը(C>NK}!Hg+^rAMօݳuʗ&a4CRR|jy@qEϰ ^ui,Ԁ$+٢06qޡ sI Rn_2M&WB,BV06 XS1>{?`H_pVXlܷiDѯc IBn_.k"ә-jQ`@ӗKf_\5c1)~{ SŝH,tvMṕ ɝ .Ħ`VfV! L.qOu09+Z *;" cC^Iz<1W}G˯ZPMWl44xQF9Iƅ3^SB6Ɨ`8L!݅F=rpw/Ip(s#>7/0ꄟe+; 6KJ8+B!r8 xq;Gux8WYrVd@kՌlSJv@<Ȣ"T,G ҬN6EG (F^n9QlLqxW1욁88JN*#3=ȕLKvw1T1!UGt0}0q9L"',A[M|`zհ%|JT?P7M]"Wcg),YY@3#!&c&%Hg*0.p  ,nu4a2* L!jY,hzI=[3|q}0C_" %=ͦcY*;l?/0yt9"傟7Io,9q'G. winb_,3ޮ‡o١7 VF4c >م6NP4BQth @}IB+׵tޔЮjֻ\* |,l(a!>\j QeQbi:+Z6AL=TX@ܳksg/l#$lf0 Xl.Em6sƔgI^:}MS͙!r$oF2!G{Sךii4'H9֞8lԲ=/\v]zFW>#ȴT1EU8<M=oQ:z|~0ړP# |C& G@&NՌƈ4>'-qqHHAAo`~@"b9J@k^-0S0u~~ w[X䈍1$;$?7⧂I-Ŵ\A@}pt_r9C}%h N1Alېc҈FZly~qKg^ :RiUV y[Bh)F]Gh?D2r>Ǖ6R[Ktl5ȨJ` ar=NS=~.wMU:DXl(X:(Gd KN8`0% @5JjvN;(V{n?u Jz_huXFS+}Gf"u:SkhL.w~cw&誩^edrH7H,Y~G8ћ}M'wؾ.\.bi 䞝#VHx{)rd1:x(Q'pr\=o]>F6JlPӊ8x]!,'*tޫ4\Ƴ2A:A ~XtuD7r!Ikc!w?> b 泍R2oM#Uy(_gf4Tjնq/Qj.lVdBjܲ"/S|g\WLEт&lV."a/`=s! xөOë/V *,UDH7>S?z"5lH!GK[k:Xv¦{7 ""2V4v0"󬿖G+?ip۞eH7}L@MGUϴs͈T 4kB  ?NRW`z$:pbGW1NH-ž:ԐP Gg@?;V!Į cl˴=qR\IbAUĖzB[JB!(ՍqM!ԫ3ϡLm@ y5Dhxc 蝪>^ZO;.b |onPv^FL?ۆLdY1pC{pz$WÝA3&Ջesc+9L喴4dL(͏{Y*YᅾbP";3/[䞔 kqu+TM f1 5.ljRkIB 7$KbS)-;M'FTeS7[cdWB(fmnflR[Qꠖ_yd[.Ҙl>ӺKlnQɄƂvx}7R;&-߯OɍֹF[Sre:f:S&̃xE8'\4~gq LNa2x9g]jcA!ҹ|MDX± rV0 (yKJïw,D[3\ wմAGUÈD{(L,""ʱ ,J#PC<1vB&:+-%o}$=QsY"J9X6emAG]W?#[@ >jA(l5IU !&.l.ARDό0nѹ"+a-KP3Ԣ )*r:$@wX= "RJަmjIˤ)苴XRQ%->ެ?yƑ7wEBrHf2W">Nf d-qʺaWɜlǙ9GSMo5R,ZW-U?7w^{h7GyfW=ג QTV:DZkxve֥ LJb72OOӼE Kj.l<_ʙ2#9>g~6`CBdLa&AYC`&aJ!CC\2 7,ڿICFa#L~k I |H_:)6$Q ux0HMuJVg8Czf1J+W% H{ ^`'z䶯FL׳o#Bkw<$U?_E&/>UZ=JF_@E$T 4=zв7@X|u5\5G!-3纒Diw}i+4= o)$7G\'0ZAN@pgqx{^dha&ϼZ ykkHd!0ʽJ Xp%ί/T yZGQ_ oDA"yloal=Br]lk{EFX2^*<lc}4]y-2!'s8I (khmדnUܨ9pcD!Oi(]lQb@Ow'>&i8']T@nCxV&\hV:.֬`Ԛ \F+Djnj<{ \wG3T{m On>.^Yĉ;V@}1@04z^m&a)XBOkz6(U31Y rB}?,tI!-*c4Ji+;2vh[DX] KRBJ4iJȼiQH>V>֊\p)r9 * Kjp@ .E ISx@w%6`FJh"%Xth:.b)og3 Ag/EL1hx4=)?fPٳK7XM 1["2E}&վ-EH'|obXRi&)Rf]S3i\#5",NGpg \"h!.Uqoa$ei>L]_u =oQlD=O8\pg} u2(&s),srpMj\֮/HXp¢uI vAڹ=8:h& 32v!BGx;,ܫPT;yŢbL[ S7QHD3ƏQa}ό7=̢S?Wz$% y& ]+Q-Q:>( N7Zza%GT@҃,EAFM&'nҋ)dQ\~3=j"mgίۄ!x zꔮ: Ym![GyC;nf۩K"|p_{Wk z`n/Um Pxl{%쥫GJ\X1#-Oww5S _)SD*4|aWG5n񍴥7!Mӈ/KD57 UCƻ:Y"Uu푪:CU {+#dޗBGg}]<=Pe$zuEk:(ɜq(##9) Bk5@ta-!lq$9W=7HVV?4C,a~ЯZ٥k^ Vr^tx )v5,|f$Ҙ$LHh]h@#Ѝp9bb㺕AoZO=׌>?J3Ap&I" [:܌׶W0jO7D90bcف '(?G 6RXnj.G"O7L u3Eq#6v>,?E_?sR$'KAƂ|Sje3EKbm2C[v3ޑEM%CF/iQ:BJnmFJ:/[Àw \WdkQ PEYz:Q Gpo/gj,3tD=3fӕ,ˑ݃#"|KbV*0[VAQ``z^zz:'Ku)e+0F{n\g}\;A&c.<_8j H"uJAPD@0c:\aNh݃89d#[BZ觢~L8#~t260#HQK;!`i'KD:JZGٙrK12˼n| `t[s9Kl( rPBЍ Ve68|x#)49忦r/H- YQdBaq;:nhkdQ}shD%Kaj\yq!)[3; 0휷<ܷpC]S\׈Lzl=V9N\gWI\ y[O}W ˡKğJYψl}3}W Aƅ 25qB!%Bp/chGA.*G7$q<Q%+xtp{]ϑCjm9$E#tJY0C/Bg-3; X`tX_ʹC4N8yXŌ}v# ũ"tIt(CHy<#nƶȸ8Ū՚](|DJqꗙyw?Ȭƾ ~xP=Y<6D+&I fw;~"VM,NOM-w<~b3},'`{m 7+Jܰ_YNYU6%AŸntel-Kl;8s2agPYΕWfU+00gNQAQ\ 0}=rWn(Q/FT9u:#8"<\w@"h6Ƌ;_@s);kY_#g z|#R;8LĜhGEYHp ˯Pk"wu\#\^U fYaJqgsC0l:e0AuBph {:XI"DgvTLLxEr'GV'Ui>TxyeEJRkWd1&")DUdFŃɴ?KɎ KR+8b/݃d # Ŵ2q|MG9oQ p)X6LnHĻ' A*f# ҤYϹ|mS?Z!TD~M87r( "QO|;';ZWWlу*#HşHo>[5&s Bz xdDcE`O[xnлҠKn"4eC$1@9Ә){^R"3P M;Rj17Q.5#jGQ~>zzB5@S7قFpXWw Gz1;ZV3X/#]zkQP8KNi6Knl,U)1\1lxZQW )eƇ1nԟ*0e\>0hRg3 hQ+X tlzm_EL1+_xnT2b~nKm͏@hlѲԊ[Z1#/gr輥Nr ?Nh%Ņ!Х:Toan@o"íQY/؀ 3sZ||-L~W|i$k=9SzLE1d4^=ֈ P +5ưB|(Q%Ií[dB6\ P[_s}p/ <8޾un!bZYl>Bǎe:⸙=TMp%j~&yӽϰ#booD - 컛ÃWlA.]7ԋi{^@0"C,jU!eJ5<5I{ʄ>JbYvg`z8EJfn{{6Oj!q}EySB 25fMvTp OBG,q`JxDp}R3 84EB8cǞx[U-9* @+޶>^}i$ { ۛ W)>n]䊽p5"+4H@igKc+IU7˓e}$6`ySȉ3A)mPzipgԏ٤!C5FlJlrfSb:H=sIZOdj3&]De hJM]LԀ~oL6$Vj] S K:N7ƔB\? 6{T 74dNrk$s&)7sh cAo㖮J{XF4cԦQ_3FR(s 3"ػ ;/jI$Z7 [Lvz%+)4 Ac[Kˉ`ud{n1v:TFQ>Ŗs0,Ѝ?;#'~ϖ>LFR#?X6Qyp%G\5iC^P$-TX<z4Dqjw@ 6N` 1)r2} 2b6xw@W{;ןaz$u$$0dBJ_Rcdpkf>^se 6O֏9nA?^&Q5_U:DWtPGJS" %XjPt){@DAoKleƠ!t?25LBۤх=vkQe'!tpJlZ w#=-)En+"txIԜ桱=rbUmIEi%逌j\g \^ߜ[͵Ezt0k`жMdQ R>M&ںE\WUwD#;b̚(r2\܄IXCN1Nl 2{cbaϨݰ^i{XlD`OXDkι6Ҝ-e;F9fX:`{CYEYj"oUFVnI+9C(LI@0tđq^&k%INʷsv3!Ս=HO?95ZR3u@G&o K@j|=].YObdҬ,,oH%Y)ԭ%[[w[ \Q,ݧ jQtq 2%aWA2KF3#pfu)YckwE.&Z_.9=(}iONȼ,FS5kEYP0!ٙ& a6Y\~\(.NՈ2. FQ0KIXPasԌx$"]񃡜=P۹LZ֪[sf ^Jj?MprG$79+$aŤ{pQ]qG ׊]3!^Vh vL˴z}ٟ2|'LVqA=ً8M`gcտ }drI:an'+@n:P銞nS]};=-< ]m.Pkj㊪hKLzӍ*(55CT`T!U caW5{ #*1l^8 LSmYy0`Ϊa }q2I^94%JRt ]!G;k18+0v#/{)M1HQJSF4p8D}d{B?YYy=Cd ?qu_R/dAx T=|B 5%Rp4JF: ) ËC3^?ȍF3 h 3{$#z5|3:4#^\{ o D@Ǿ'ZFS}]S/1Y;-XVQ*@<Λk d83L>'ò_ /p;$/^-h-|㠰u%tJ.}"o2sS1~9ÿ4O)J` 7k.qy=|NºL\_2uzLXQ} =k1/\,q2+ZiY<" B H7FxHg"b?GU'aL]E*sŭ&-U=܇|Y 2uԅb.,k cZDz|1 KQl`|4b^&?mcy"Y9j+]!лHAaݸ29!GEj-95mùk7^yCO`5sʾЅT?c]vkǶ _5 &旴%F zH)o$@1PёYy;5Ư& S>_p]lBr!2 вVѦ$q!ESO%D$$̘Q, De 9AeEB5"Q7.$\z;TFk,JYZ6fNǴ̘HIy~_AM-`bC`J1sw-<&mҍnFwoӾ)szMsA..|wlp?e懁$_%dH?T$$P>|KsQ/U a;-1k)vآ<>Q-9@H"e9\@tE;%[[/QGr,aVRjv?WLbN pnMȐ# "(]3[ ^</W(f}z+xB&;Vkyy$γuw\;7nJ)1k-Bjgs^4$+BY;W̲+ڰV"`.?g+(a -!Kk)F2L5)?| jƹd$<%Ur$# i92&^('ԑqFǛk ͭW4CLa_$/v^fL2+4g*ܩĬ\ Ezds]6U i?òh}SqS=Z0ט zߧ,D6ḾۚW ˷ZVSJ)Wuo^Z^5To70I"g߬{Rԫ@9_zyV$Â_PDHRQe㆏B^pJ"!v08;` ­?sp}0p3F=,^eA`臄WޏPN8ܧ=X ``vB #N҈BMEHHg^oθiUei?ON.^Jg+%g27@QXe} mkR"5"$H58mZŚ +%kj۩7 `bU> .#&YYE߰/uk>`G!IoAA@_~\I#V9 w+S1%噸C^! ` dGB%px2LJiEoGKIH^AdѱذtJ0c=|3lC;98+7ۚb;^zc|gZjv#0CtuRn)q/2\luU\[H1_h)EmHz H) WrxQ\Wf2F[2֪eبՆjRP&T'3ͦb+{^?SUlpQYM`;k  2YѴb>CRR.nH /oZe$XE@[_ɩVw.FˣO-*g \`_\ݳXiI[t EWbq]6VZOtFdN|Jx`Uf#+b_iIse!6~{:i:lI9ۖZ> O r`^ԚqynsFI 0B۲~khd6C9IIKn'wܘHm|SI6j $_Ov549k05NՃn`Px=*!$T K-@O!-kY/d >z`?'UJ\x48Q`m&d<{l "M:.xrwp,w<Nٍ:b )r- T@@NlX0jg +=uzuw&cPR1IzZ{`ڥ_?B= 8j c~_U\aUء݃IYPNqBp,w0=''(|~])zd{Y\io%vDGc7WQnW:Cv9kIt?<ɼ!s8ҋUs*kyXGͦt s̆l>N[NKʧ+Srr k} )6CՂG`~ݭ6Dj_3b]L_`THZQ`vWh߭}CVڷg)&;]2n;Mm,`{uz7aJ&ӧxMF/":R )!Lu`Q`Ԑ\C0jmDh|ySBߠ<7N@T #Ϙgu>?HsQϘ('ْ! w#W`}&K0]Mo,YW룺h2KTuZ6iv>"8j9(<< ;Kz;YFo̿T)REkKnub i-F- Wb({HmE/q<3ϔmH."܉zXS"g(i6v<ٕw-s"pcVf툔lSPnR]kwf c7.=n}8tMUiM|+y0CzPZc~;NWЎ9je6$?}g=fچ(湙,p;m# S~l>0%*YR>9Vuz೛K!aʖ"AX0f^0/xHp"eT݊FŹ5CJ.>b ~ 4EKan0Sqi2Nn՚FsJhcpo)B}bO+~^7͵曼xF}xN2 hƅF@m4Tr.@AmW/g˕Ֆ]K|O7E#/UhzQJ+ۉ,t.{֥4BCnM㠐YOjzݨx秊5wP T\ݗ> Jj(fdVz=U|7[\`L<2|^-AB`KB8/-P- vY@DV|>gu#q<W2#5ѝ {E !Wzy]9W/ifRcj3^M0G~>V4iSm+CBwaު8- )-hWntkP34':S Nb$`3};- : DiJg0GHH3p-Ǐ}fg-劑PR:B_?++7:Oa]o{ <+#*#!Jܥaq#/ D!/U I>>$CapΫZ_&sL4Tl"P^>zP$mL_?b/6pty6)*6o۰71U_+Eҥ^)kLOBX6x^" w5HDhϵe}3'YgTF@/ڡ Twe#ߩ5籎;e.0v1tnE:9fG {{k'#0r0s䚦 h-4EOlȘ%>1ZX̓U&g"{钒i@ rSBu/ #Ӗ&bբ<5SV"p q ȧWڅlJ=t>&%NMauQ5G՘[f(26Cg4KlbYU/Vml9vpъuP5o,cj+ohߔ؉ejY>?ۼ=y'`eGdЇ5e'ߡ^7l,kS$i7P++zrpϒ6=Y֝|U/1A*JQwLg!E6{1@ׇϙ.9J.H0>RDJ"Ux2~N'7^xeܧ[QR( HR| Ok9qDr]a8i7@c 6D#!bFMGnsCRu&T)H*{ar*y#J u{-xlwύ.k#C\V=w!&¾3D+lp]\=)ۇ!ьyC´8|cPν`B>OiCl`{*e&^=DD#8_E\kT!,rr( Y6N)dA "r6=p#^7q[PY;-,vA Gҟo5Vƿy+ݸEv I۸X7L^ڠ^g"cϩ:WxC"~}(vb8؊A ԻV08;S~I X硽,rI2KLaFjxK;؀n(_ )t"~;u%A!![)vQNPp"KH aYLtۤ,znB ;?fBcQ|Se`Ob)uguX'`c'Pp hEk3 "[*dK5$e|=Ud^$|c4OlK"Wr4LK>miĸdwIJ|:YUi8D!€dH_RF!֑D/Rz+[&DL鬉Xkd;XnW\AH$o# (.ŒlLyiJkf%`]GZۖxXWR[L-^K ߞ6cz$4Ω-$| ٤S~[*HRzLltЉ|{uTJ`X!׿wj5( ٵ0(K'TIOgP8淊.{2Id̥6<;)e<%b1pkjš!{OxZUZA$\z~Cg; K3ٞH`>+̽s^ɭ[g Ik>{Ѧ =NDwxTyά&X;_}CnԩX5>>B&Ks8shk ;7.kqͅub4Nٸ* >F#@p1 꿺Vs\/\ꧥd+y^ zsk̡nicPRQg@;32%jv0 -j]=4PS~uU;m{Mʭ5r>Ah%.4LjM-6J\vë4Y{v9bG1JY״@(5(ĢRik24Vgq`zn.(."Mq[է5n9VC#p ! Tʧ6G]M;89N-'Bz!.+WY$jsn锞K$#yb/꼗*݋TFn9,v A=JڮuCL!9#b ) ^暴HMzIPGۂFȟ1ù `Z}c証qLg*߭gC.\,*N` 6\oiLŻ3h%y|O;]HǎJkۇJ,L9C$G*͹Le%s!kx`!Unt^k\4! I 1OH`~WAAIIT@梧d@}^QVk# nh]WasSl##S:Wڗw ?~vvUO|5سflUFuYHWjBi2-%A!'Fkё]-ѿ]u[J?2̣2*.5d (B]WTicvӴXz#}M\&! Ns/Kig"| ÷@.ʗJ԰]J꾴П;V(pe7Yi.-0!<;NQ3RmQ<1HqU10qil 6˱TtMAak_ DO5ɂi;Ӕu*G^egQL zk"f'n<V*1RHޖÄe6 %ہ4o3C$$qZ/2g 5Xj&>\5 =#f&K釣+P]/9 eHxT0UND|w\M{x4ʫJ}!Я1XvS|d<]SKshH3t{ z<;hS:O֯e {#b9}l*N bw 'taE}t्c$ P7 jQd:Arh&@3M.[=G]KMj|#oN8=n_g(ur̈́V%4.QGOy4hxjcd#?Mڻƀ+:e-;?iQ9c(㜌%7K.F$T>0&72$_Rpaȋ6%P m7Z (w;*̲ tp*^aʱB)*A_([gw w΢V?$[Գ,9=N9u-.jOŮlDoA 9ƶq%!LMHeU l[DW;N59Q۶BɪﰌEkA ׻1dg>]݁:fxBqJ]H"ӫ6 YM/.E[׭C-Vq.[tJ0^ūbZċJU[B\˂ꭹs+ˈZw>Tlp>_9܀h0_™xBPH-axYdZ2Z#5Zx&l@ Ciin_@ۅ,qgD"~PLj  @g UEa$]܂}F.._f2U퓓n DR=o锠*O) āΪ%f2e'STW0y0@[cD bpN5ogҁajC{Ζ&/*-)Bs\ufZ, Q8dy@>4lvVbIҎH 2f3ֱ#nWڇtltS\u ԏzhEO'5PH yh 4TR8 ,JEb.NTS;1277ydXB}Q"'I\Ph.MWۍX>*K6Ly'ٳ!˺w^ʂ)rFF\b\k-/z(a)+GEMpz^~ՔhTG}ey%}@M"]0szäRqLM,+.v8Q㯳_ r‘IԲ͘yLJ^8n"Z`ɵf8D!0>_bK qU6޸vM7dCS &T[4d%$]][G !1MR޲@?JP h1YQZtt7 5A'fܽHW K@|U:(NTwes|q# ; T s.>Hw8'>VYIH;k'3eHϊENt#~Hzp,IJчxGJRQ̮i{"!E{7C?eV!~WLe:㌭zAX!*'/^!8 +[dQs\*PpS Ĺ6Á'* Q?dT8(0~"~XA[&8b)4@ W(J<S[~޻_;eY6v؉!$D@ѕn <.K:ܛfI1Ҷ 3, ϵ80b &sz/Ts-m]oD(\]+"TZju7kr:J$6ț=kp$gtX` 'sʘ1;:ӏђY/u"-^47dIpmB-3P!ڪ}q.Z餰cD2>\@B0Ӂ -lOJew)KA *sE%o{K;*(\Lz?JU! c*IMvQyp]B Q:kf-ٷCZ{!<[Svn2߸|7<(늈!Upߕͤ@?GQEǎ6QʃPFT|50MLU*1=$S51=*96P *8'CvC0Is1otxo!Ytrը[f&\eȻ˞Hcz]=C{Oxr$ Ώ^Vt4YW\6 &47%bskE׹+xÂ/k ՒNibX3G vF49iFSΣ&~ &svKg Puu:nHV+ٯ;#wdCn`Ϯr)=wTF%(PJEnuSs(1ڃ㕻ͽ!fpaȰYE\蜺8,SV~ZGtQMoi_ )΢+ fviU7a Ɵ4(Z5 }A#{ g{7)!AkQ\zwϔ^9erZdC.2nhC0*N$kKZM.n~`&3}A2On|3%$sxvZ$BVѶzW(3hPe5י z0qֽFx؀5@~\ l6 a[,rZ4Py`{7FUwUڈ[ޔ܇Yq`XVh w"Sdy!mgu䡬in e;H6JM rԮC9ĪndP{ZK7j l,ʚQS` m|&a)ILK9S  =M l(z;VK3{4#ྋ]Y#&rbi-ة~.HY58]N53ᆁ{@e{(5f3+ 7YS/a7I-+F'zyG=:Q/ ov /%muW&; i )ȳPS%3#`ػDfvo#\\uj^42~R ƓlSS4'0{Cro ތ,eyvZ"{6k47E <̍_ o_RX)_DƧxYz9uk:o]DǺ붕h& "0H(R){dS*XLxdh H]qLT`ړ _ozN^u,e{}*ܡpm){i5QN@eǸihvQ\t8?,B/42KLT=2]ddϖthݚh!]^C5uir{mhxo$G6e芁l!ݕQ#XjzJaw|`rz߅զXRnA3zs;ar`u&lYgF_2WQϲS ;fY5#>}"LS~]^5Eyw`W%GH%7=l{vžq%!ײAGE{]Ð!_hpJkmRKuw[)>ts?EwhYȵx(~^{;bc2oSe>t쏧` ̟.ՏBw:x\N\X&}#.&/auHjgN(ۋkC8}mo݈?ğǸ=zf$~5:ԽWPxTz"}g7J XsK.㛣 bcE[Ŗ:1$sIrLNj`L&LMavk( Im}ñOҞ$pA@w*NwR1Pab*\1MZvM7l =%Ȕ[ZlkN~Z/΁q0}9*{+0,,?2G57p: (DzmNOz6K*Ьs.* {#eކb m@Y^)@0^< y._:N/MJ ʠ%2V%YawBZa '\Q]7{>=NvFhd*)B+޷LRtM@*kAOYaLطP,Qfl,.e'+wWʾ ɹ2f{xaϊN0Lc@+7q۴ӰjE;-nHwڹwUrRB*FœOYBM,'#up>cp;x&1j E|Cw?Ajpd 7qJCq(b~ǴE-9 7BY\Wu+Y&=k)_ eocݴ1\HC݄جIRSFp;R`Lo>&5Ndc5MTsOv[HF4+)Ǎ'_Ԣ zm+PfH٦'G@&MN<!c!A3P*gWs,4E~ 눘4I=Z:#VSl֬unU2Q; -9Tiޠ9k(s}lw\=NnYHL$YKmS0C@ɔiydv3AH7ÅIyI/(Dɑ$;sz+f%ZWܛJyj*(TQX=ċFo$mEi݅0\twr:@oU4.}c0w"ºs\7mߨ\^gX snt],54, WX 1ޏrHF9SR@>3w;7۱]-Ous== '@FzS8ˬE ~Թ}5,a6ЕobJsl !ײ̿@w2͒(kuERBd5Y#D`b:@t } TJ's1^HǟcRԧwֈiQߴ(K\*e6UF (A$6v>L~&܌ߝ$:G3/Y{`.'kwJOGJ%B^qiFr̪G#ա>fh6#& _eK{aI-nz}Id_XgRno ۤ ej ) 7zn8dqf"ڪ fBb:ݸ <K튛TJSw7 |7{Y ;E;H}IME=u~WQNҀӲ_OP\a(RX +MJ [NOP"yopr"T34aqX<5=}xg TS Df{-:Z*1%,5%Aw mXNP :;9:~a܎+α-ӕV?|)}Zf/,H s]S]'pDǣiuB@uZ^%)}#UE`!2zp-9y rm tɷH"~s`PWVTp=H#HkS=Eó[M kKμ!ɸK//9Ͷq7jP 901c ag㶜׺'ACNX .sJK. Oj' k5jWہEm)2Q28}ox#Xs9k]^_X:T&0qsFOLQMpS?ɜ Z1k@GrK$Qv]e>4å1^{aOo_q]c d~]" ޭ OFƛdPk50?L 9rSoLjR|xUK: 7,ߤ* ݰ}(Bip iW~ )ZJGu;])I?%f|6$a@>bdGP`װY+3zu(`۟oI~E$23{\(1]m^CYBy!)&BуQoj/] F%m"&P|kzG.O= #}|;XN })H4bU8앷}T䡧glS/T.Zgi?Qk^.&!+΂ǀT->׶=/G-Ž TYxR2Ӝe}wvm0z3}fGOqp5)'X8wXY(߉? `FlDG*%F\}Ý5qXJ>H!v cW#E HlrMʯmV0$MiqՏI._{FKtdMJ ה7jHjmM=AgP_9{փa?Xoxs{]4gYrv НYmKד&Z1U"EPWl/OW>4I2޲ O2Pc3!j%?QQ"-&kP adGPV5Yjj\z$o.ǯN&ONFkQ؇dDW`"Y Ƙw9'' :4)-g?R=ܭE%!VrU%whlDCnoRPtHKRh ۷9\GN$``..xҼX3"Mb_)×EbA3~6;#̆j{b,C0LI2y.rU.ocrp;Z@eSSU0ThLݯM$HUDY$d ]\ȣݺdבR^qauGYjV*N>5.;`gkeDp-?9ZR2l.Uiبհ&ER"T~+C7G3 1Ok^ٽ0=OX(6@t?؁s:Ͱ#Og_ ~Zu קYSٖcЏP]g܎Q}:F-Ж4%aa">O H/1pŌ!áwVΔ8zS'܎7vҘ775T-|nuwMWֽ{J43>bD2MCfityZ Z%JS6g 5҆(g @0gm)&8`ͽn3B"ǘxU 6"r#C#Po8۷+Q|= ,X N) 'ϊJ$&~7I31i)/ /Oѩ?۩2=cw *|3@h7LRp}kSx' SAW4i!# !O) I/fp+uT XMϸ.B 2KxHqT xwA& .BTg}]N9%cW* ˛{'P|ly[sl!mCGcȷ䤐INP?@d0A9I 17 0T3i\)AB5*ǀCgwDԤ̭[J .)`GgVLdK8O0ޢ0M8"';xa#®tOA@U;fKx5b6$"d:L3fw1(V;A{&RAaB1teT+5Mu B.LI!.Ő*0<]Ad0סרQY֧UT% 9:a"ʀʚ,J*eQFfGxHK۹nWhl07kDM"fkRRc| *֟p;"HQKG_Y`%WsdF'ŘǗ<\&ÙbSFw05f {{:X sm<2 E&H5p;J /koKwo|.\q$~ݒZp9\nl KjWPk Tj3c yr;wP2؊ӤǙZjBf3DNJ\+ MQmCFeth0PpZ/iⅫ#+2͔"mjҬo,_wx {/82g8&-'}O% lV'RY ;4Fm7Eh2w؜!Կ\$ R4G³1$u\#?53Kߨ _t-zhz7$$--|7*AzLI(ᮜJt ke[z28; NFTg634öZ;槒~jBw/_఑S0*!};awv*n*],MWI{AU@Qrtxkf8J$JNg{GsS0H1FܩlkWuE*\TB4Tc5Ϧv_XjfF|R"3k;;]cs>BEw z8ӼXHOGϗ[TgQrix!)5?ՆV $I!9+U!ް$̿N`0-٨p 225s7f Џ#lB~I+tO* DZe.ةS3VӔOWm^lq9 \_zfn8#<| ;< )Ay3W9p08v~ 0c'eU]-A2Lpo.s68۫ 6PR@\.#W@P% pO|ĆO*_89XfN˼ӑ|f|zC[za-* Z>Gt@K-j@-UNx%[}ȊE&mq~=Goyk eN9B/ ,(Զ7_3,ʓ:ECs:tc?X-x/q25ctCܙj=r51 p[f5 Sߗ!޳zlEPgolyLXe&<@SC>K֊wJ3r4~uQÌ3*Gi!G0F"ON~["tJYJ;0eʼ~@2Eҙ#Sy)w]B4=}u\]ZC78pF ֽ,NF.)[0iV{߳GxcY"jY`e XD 7pc?ݷZBt ד+Bv(Hó FFsߑTDyRbu[\CZWM+kq҆ (QYJuy/jx.=(ESNAzJ;4}ړ8S2*CtSYcq!4y%Z1k%*|H>uqfo70h A<`Z $ȥX$%(rQ_ 8[}쩹0n~*ϲ&4.0@]"Vj,ͺȟ)iDbEl̦Hz=!㬟`C% Qf bs8 |RBE; a>;Ɨ9j$骧,gΠ=ƃ+iDd6eɤA=@dž i`F$_xX 0(/n饞 BPBRPglY?!)U4ֻǽZpb,YvpnS.\pr 2AӍ%^wѷ?ۻd$ LתHNFףk}a]T0`*ڣO( h>,zm}mj+8ma!pڕ v KZMV][ͣ5<ieĮ` eCpg۹c[?'I}Hu`RY89oD}'8 pv%-'&PF  ',7}i{~˗cElU$"+Z1C Da!Gz몃;AX8t4W dw =5bbEFw/lӗYvl КZ]2 5@k @Öƛ_m}6!fh%4_WgdIk<%NXp@OOd:?yxV.Q V>Zi}4v(0B0D{Ngvwf3%pM6`ftʁ*7/ \ Mk!N'7"(_y8+Z+Y~ >ǥu0t}mdfadmߙOQE'$`:2LRo߭t9a%;#lC+؈F [ikmd+d2ˤ7XE`zƴI_^t/=2{#Ď֫Fttt:mH,A6}7LJc-(sB JSf18GRɺ=;C_'>ągrqssfmm f`nD[6]k_ "OV؈GZܹB~Ng^9$-!joB4cBd֞4{Bo /R:sE&|[mD7+`2!g'PWImd6j4{FprCum7 SSyy\X,ǫAdpârK E$d6آttMi !WO_0[|YQӉQϓCԄڽ8,j"xL]Av؞G<;'L[*U2y^M, ہe' zzº ~wsd=;oӣCpwHi|ì7O]^HLX\*Z ,›]X?~=A$?"rq5:63]M'۾q 4>28NmۼwtEA)s]cuJdh Ja0Kݶ=MrybgQ Ai? iqKO r֑;ON*T!6qn"i>J2~ ڱSĽx YraLyZz`Iju*JZdgxiB塚8 o=xjzkP4jnͥjyD8 %T>{Bbbzm]աu KX6QGW[P ܠf1!ɵtEԱ5q)4a*a=vZNXKiX9P) -S[_~F+c6mX} {laX56Ԏ9Qd0}Z0A]c *~5VEq,D-6?_br+Ufy Ǐ, [ya/e 9zlS1hG2mqj&ln-nJ:ZzC8_ Q5Wè*ɮ²! /x],~At!wό+]-X9boTvk*%' bR Sj^e/7%b2F(#FCbWϭEw~O'bZ!d8U7@ؽ@OzR ݧG1 bv´z9c@we~dxK[Pd #,͊ˤ7l:0 e]9֘ 7wA ne6[ +-4n}Q+ʏof+J¡m5\d^>Y+S {W:}Ѓb!2.HקX@ , Q"LjnR Cex-Pg8^1҂UDHw8 nyyp.Gvc];{e<ЛcB+ cl IIW f럎9!N+"$SJ=q$4`O̚#K;HrDIeI)7'x(K%u<*E{p4, !ݛS-;|אJn˶~ŕp4#2Im*UĨvP^n5Zl"a, VGq҈+ז>jFģr^+QDp)'vsNYԱ d Oao pfg??hfk#(lrNgKs܎dX +QFDWqjF ˚Iˮ̴|:pR?D_򓤽PLNY# +{+"68NRBߘP-9"s2˟ٍ2o^:9dxcL3d$:MHo#"\Ζ)E}c#@PGu,#/z:($H MIDx/c>-M23$<>LUl+b+!C15#ЗFl-Ϳs3U֖^6|sR}hR-P;6\F² tEINL;"a%<#.gqBSѰ^Οui0evEIzlB<#`T(jIğE$qҌ[+F{5b!ALӬꟖSg ($G!K݂Pخ3^q*'"+8whB-i\21g>ѳ-$$IyN>mdP JU|hv@-q} Z~4{iM[P<Ǒ fgsx%^AsuKQ}#.x=/=ʗ$1ms4^`@@w""Fn.6匹[?cIh%sr?6Nqd8KMߠ|Nw'B%4/G7 lE7&$a|`*AVۦLTuٙ'4ڔ2?((.-5z'o}>βu-|}$ccP(}HyFͲ u:PWiQfyL$&0xm$z.0N^zȪrRUfS`*L:5NBOR$JX5fa jc1d,B@q=>{^ͶIkH;޺ W!@'VիyoOZd"UKj828@po~ozk S}.G+<+1(H%)XgD\vFIhQU A Ք{fM L4TϋSM9꓀\A|VA"w+r_NnCy[-7/` Vx0Y W]-zb^&-LQ[S0 M Pxk12!z ߮B௳͉Ā7̢dxB" 汈 RaBYaKFȨ#gf)l~e(cJګ®aRK|ߝT _˕iT߿~ZQܷ훯!Efq""*m$4n/(Ypy0W^Ri/F6L& 1n fa-ֱ\ b0U0%UYc5Х#Jv^%+ۨ"[*;Q{Ϩd ArrGOe!"ͩTE!6xkZ{fޙn"Nm#Y4ʵk?\U|9E;3 T T&5 D&S1uY?~_EPuVץ6|DPHu>@!)S d0@? -6l!ֻgP N]q|T@''{cJM3,P V%ihE|T;TJUe5|XH$ϜILń]n>g5sǮyw@|DiH }eoց:%H0E+] jhܑ8vS0b-|F1ciArUAUMTU]wkrʚ&5T i8|9;SX(VRd8rHp`URT@ܟC2,}O(= J!p+O-'<}rHPUߓvy%ȘEMpU9AYS ܯL0dz\fɋ*bkio]s ,xzTμI3#z~В4$QYcۆ]KAÎ74[%X71ܐЭ;QXCFYQ!:7Qg4{#rv!`l&wes|ʻocב,Ћk/zxhyD\.~Y?_Ck-Ӥ: V~0oi͏STtB-hԇ '{IyIkj6nH֓OLJ~z'?ji9'VF@a߅(/N&t_KWܵ045 w/< 7H}<[ҖWX+k4MTIXӦ[`+Hٷ+S]3_+%tݾw(c8GhӨ b h~\ՆG \ 5  ָW_IlZ MsѫAvbjַ:m/P+o{9y9:^K5; Yhp, u3-ԹV2GFnaэ[3ʇ\1sN8t(xWSs^(m3Ԏsd)[mqa®A&5#m%B#?)ff?8'mm'l]|ƨ-#^RsWxI`s3+Vb;cT,CQO_E ߓ b!Bzav.J;vz&I͙5}nخmo4꠽ (Z9kœ{u64hܬORϑHC z96%'uvi OwF?;ۊAaT3El#gn?b4wOFOE{"  kwD6#k6EJo?8E yoJcD/r_uѻzTd_CۣDNVuUa!Uw6N5L@N[?{y[3b+?}ks<use>BT\.(wc; kA`ɐb2p"H@#wm˜ܹc\Q]9]tssMIV:ɯ˕5?Mf8 E"A?Yݜ!QEO3u\0fPMg~i?X_nmIͶBXGqyoTo=0!S_|V ـ6?ChS4izx}XO-V bb4/30׉(Ja$pHQ8TD_gE:z&ɯj=#Y[3 ڿOy0qkYD9²8|-8[Ylh}\.~.nިv7S-{SNr4) @4@ *Wsz>θVq8\&%X} LG;ye3bt2mLELM.~C2w$w7f.CCCB=oW?@Rf@}3'Bjc ϹޡH17_=bdE-2KkUsպ( նA}A g% 42ryUC:@E=4LLCɸgpCy?Z<5wt_nVJd8hQ]t:lv%V|'Q(̖'66;c1M7 ֯"w{һ\Yf9ݯsXI,'s{oS[Ar%(z8fEķof1jJݤ,ͻQ7(goq_{<GSȊw|z͈N;Dn7X_OGN4}; ƿin[, HiRq LnE&պ+W/ޛ Gojf!sGscn3םJCC*čb%& FVRA|@0L[X7PRk6^d oU_Wlwz Jig3YC=8!!  ;N';+i;_ q4Kc6[ W4߽opyLbHz| Jң=t_վzj߳NM?@#)&Ix4"D6TE!0 ܸHl])g~ˍb{8-^7Տ2fF.QKN{)dn-ګ:w?BFf&;Šyڷg=oN;]H~q4EB7`c8)r)J`Q( $qTZ]&ڬêa13<' 2>h FbBH% tCNMm;187xu>ywKD-~X {J [|.;@gid@ Qmj6V鵒766W5U6hմkm4TkF߰ױ-c H 4H@ MyFW;NquO=m+X !$ [Nhn}fp&*a5fMFH~%L}T{^#9_ړ갲{}כ<߼+|ocHqL#&h{ïQ`S@G0\.x0(+ShBPUTb rda0$d<||+Rߏo -6fLl+?bKb{oSPOJ9lBUr&.g-\Qsa7tX}IEx]۱ jlVT2ndMu#v*@<*܍H׍QtQst#mhm PޓQD&$EઠV8IeZi rhw(Ap}?&{~S!ΐ;La\\Tînp%ݮm]"7n0K </%te#3sE>{\S/O Z;b9f3D\M]ˮmR5DlT"ܰ0\m.J226Aʷ!H8!ww+sD:mw W4x.nI !u/OG ݘ2T *nl"69}U/v~sE,Dw<3#8sΨMgg8t*BZ1nL\T#])F3$H͖MnsRNPEa#/^{{wŀ,!<qEYwuqSϞDn#&()TFIP`BL"|3&\/;ʱ0+ RH&`mۊ='awu9g1Mg/~nOWU/wV*Y$Lq̭#+qk$"$@FѮٓ$Tu Z"_!# !bLj&yׁ0d$c2)$,$fbЍ3ۙ2$g#i+ c/SDG7tjqˉ%JA[ 5 B3pN]%XdBO]R!N׳=8e`-&PkR̈60XqK%,b;AF1Qd"壘ȑD׌T?:8&}s#h $#FCF~> ݄R>X*Iȸ$uTUF3.+DkXĄ L0$bF$Gw\3.s9,aF-&Eb&DQQqIHssxx-z1uwp˝|PX&Y-2( %)A^wgR݈Px%!<:Kr lNҀ^wuxsy1LUQGgIF)HUcl+VE ,Mma1 ĈF(&"1E.E []_ ")2,|lŬ$ i.tSkԭ'ܱoDHY?^C3˘AI H "Y3{ xO tY\2)FN':N/;ChӮ8GymdE2.a 6W>飯E^EWd!$MWQ`,s.E)L5\%Xʻllj(w[5D7RXŊJFU_9u[|7y!^ɵ\-k]u,: mkvtr,O^湠nZ!>]?n|M070ΩOdz%brE8Pw__gmon_start__64siginterrupt29GLIBC_2.3.2GLIBC_2.25HHH5^dH%(HD$1HL$HctA<$t$G?w:-}xQH: HHT$dH3%(uIHf(A BBB b J VdsXc^'Zk YZ