libgit2-1_7-1.7.2-150600.3.3.1 < > , L f#lp9|ÚVCÿYt5xKd fE]Zs,n@0{Fg @\ c^ECɚ{#5<
*UpkgV| EFݑF/ݼ]ȻO|ûH1KZV>i0uӵSR,6
dj~\w
wC ɮlϲr^ؕ\
Yn1 ǐq5
A?;
|3ZHO_* ^,W > @ H ? 8 d ! / 9 Z ~
$ +
D ` . ( ` 8 h 3 9 4 3 : ? 3 > o @ ~ F G H I X Y \ ] 4 ^ b c d 1 e 6 f 9 l ; u P v l w L x h y z 4 C libgit2-1_7 1.7.2 150600.3.3.1 C git library libgit2 is a portable, pure C implementation of the Git core methods
provided as a re-entrant linkable library with a solid API, allowing
you to write native speed custom Git applications in any language
with bindings. f#lh04-ch1c KSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only WITH GCC-exception-2.0 https://www.suse.com/ System/Libraries https://libgit2.github.com/ linux x86_64 8 B A큤A큤 f#jf#kf#lexexf#lex 18ea7b0e67a1d21d057224a7f0bfe866ada2eacc85694a1afeb3fa55fd0fef64 d7d4f16a8e4303cc515fd4410b2c64b7ded924b1e8784a125d15195555e986b2 17d46563f9da5e4f4c37c40778c70e5a1aec3c1880260694ceb15be6c1106520 6f3c2cd59b057e366c1acc073b038135c52d77892bb33bd4d931c5369d3f062b libgit2.so.1.7.2 root root root root root root root root root root root root root root libgit2-1.7.2-150600.3.3.1.src.rpm libgit2-1_7 libgit2-1_7(x86-64) libgit2.so.1.7()(64bit) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) libpcre2-8.so.0()(64bit) libssh2.so.1()(64bit) libssl.so.3()(64bit) libssl.so.3(OPENSSL_3.0.0)(64bit) libz.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f`dhd@d6@d@d@d'@cIcc@b@bb@bV@b3"bapa0`t__^@^@^@]@]@]6\eX@\d[0[@[{[qr[DZZZZ @Y@Xv @Xv @X@W0{Wo@VJV\:@V @UpU|@UnT}T?@scott.bradnick@suse.com andreas.stieger@gmx.de andreas.stieger@gmx.de andreas.stieger@gmx.de info@paolostivanin.com daniel.garcia@suse.com andreas.stieger@gmx.de andreas.stieger@gmx.de dmueller@suse.com dimstar@opensuse.org andreas.stieger@gmx.de andreas.stieger@gmx.de andreas.stieger@gmx.de andreas.stieger@gmx.de andreas.stieger@gmx.de mcepl@suse.com andreas.stieger@gmx.de dmueller@suse.com mrueckert@suse.de andreas.stieger@gmx.de andreas.stieger@gmx.de bjorn.lie@gmail.com bjorn.lie@gmail.com andreas.stieger@gmx.de andreas.stieger@gmx.de tchvatal@suse.com mrueckert@suse.de bjorn.lie@gmail.com astieger@suse.com astieger@suse.com mpluskal@suse.com astieger@suse.com astieger@suse.com mrueckert@suse.de kbabioch@suse.com dimstar@opensuse.org mimi.vx@gmail.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com sreeves@suse.com astieger@suse.com dimstar@opensuse.org astieger@suse.com astieger@suse.com dimstar@opensuse.org astieger@suse.com dimstar@opensuse.org dimstar@opensuse.org hrvoje.senjan@gmail.com - update to 1.7.2:
* Addressing bsc#1219660 and bsc#1219664
* This is a security release with multiple changes.
- A bug in git_revparse_single is fixed that could have caused the function
to enter an infinite loop given well-crafted inputs, potentially causing
a Denial of Service attack in the calling application. This fixes
CVE-2024-24575, which was discovered by researchers at Amazon AWS.
- A bug in git_index_add is fixed that could have caused the function to
corrupt its heap and possibly lead to arbitrary code execution.
This fixes CVE-2024-24577, which was discovered by researchers at
Amazon AWS.
- A bug in the smart transport negotiation could have caused an
out-of-bounds read when a remote server did not advertise
capabilities.
- The libgit2 project thanks the researchers and outreach team at AWS
Security for finding the git_index_add and git_revparse_single bugs,
and providing details and reproduction steps during their responsible
disclosure.
- All users of the v1.7 release line are recommended to upgrade. - update to 1.7.1:
* proxy: Return an error for invalid proxy URLs instead of crashing
* ssh: fix known_hosts leak in _git_ssh_setup_conn
* repository: make cleanup safe for re-use with grafts
* fix: Add missing include for oidarray
* Revert "CMake: Search for ssh2 instead of libssh2." - update to 1.7.0:
* supports shallow clone and shallow repositories
* Simplify custom pluggable allocator (breaking change)
* repo: honor environment variables for more scenarios
* Introduce timeouts on sockets
* some performance improvements and bug fixes - Update to 1.6.4:
* config: return GIT_ENOTFOUND for missing programdata
- move experimental cli into libgit2-tools as intended - Update to 1.6.3:
* odb: restore git_odb_open by @ethomson in #6520
* Ensure that git_index_add_all handles ignored directories by @ethomson in #6521
* pack: use 64 bits for the number of objects by @carlosmn in #6530
- Drop restore-git-odb-open.patch - Add restore-git-odb-open.patch, some code was removed by error
upstream and they fix it after the release.
gh#libgit2/libgit2@e1e0d77c6f15 - libgit2 1.6.2:
* Support the notion of a home directory separately from global
configuration directory
* stash: partial stash specific files
* push: revpars refspec source, so user can push things that are
not refs
* Support OpenSSL 3
* Many bug fixes
- Not enabled: experimental SHA256 support for bare repositories - update to 1.5.2:
* Improve SSH key handling functionality: examine all keys in
known_hosts files for matches, to support remote hosts with
multiple key types - update to 1.5.1:
* This is a security release to address CVE-2023-22742: when compiled
using the optional, included libssh2 backend, libgit2 fails to verify
SSH keys by default. boo#1207364
* When using an SSH remote with the optional, included libssh2 backend,
libgit2 does not perform certificate checking by default. Prior versions
of libgit2 require the caller to set the `certificate_check` field of
libgit2's `git_remote_callbacks` structure - if a certificate check
callback is not set, libgit2 does not perform any certificate checking.
This means that by default - without configuring a certificate check
callback, clients will not perform validation on the server SSH keys and
may be subject to a man-in-the-middle attack. - Drop baselibs.conf: there is no known consumer of the -32bit
package. - update to 1.5.0:
* add the basis for an experimental CLI
* continue prepare for SHA256 support
* add a benchmarking utility - update to 1.4.4 (bsc#1198234)
* Compatibility with git's changes to address CVE-2022-29187. As
a follow up to CVE 2022-24765, now not only is the working
directory of a non-bare repository examined for its ownership,
but the .git directory and the .git file (if present) are also
examined for their ownership [boo#1201431]
* A fix for compatibility with git's (new) behavior for
CVE 2022-24765 allows users on POSIX systems to access a git
repository that is owned by them when they are running in sudo
- enable reproducible builds - update to 1.4.3:
* compatibility with git's changes for CVE-2022-24765 boo#1187234
* several correctness fixes where invalid input can lead to a
crash and denial of service - update to 1.4.2:
* remote: do store the update_tips callback error value - update to 1.4.1:
* improve compatibility with git
* some deprecated API, ABI has changed
* multiple bug fixes and developer visible changes
- build with system PCRE2
- remove http-parser build dependency, bundled lib has fixes - Update to 1.3.0:
- This release includes only minor new features that will be helpful
for users to have an orderly transition to the v2.0 lineage.
- Complete list is available on
https://github.com/libgit2/libgit2/blob/main/docs/changelog.md#v13 - update to 1.2.0:
* Add support for commit graphs
* Add support for multi-pack indexes
* And core.longpaths support
* Add support for additional SSH hostkey types
* Add NO_PROXY environment variable support
* Developer visible changes and bug fixes - update to 1.1.1:
* Fixes a bug where decompressing packfiles could fail in rare
instances.
* Ensure worktree paths are validated in more cases.
* Builds without thread-safety (`THREADSAFE=OFF`) are supported again.
* Builds without mmap (`NO_MMAP`) are supported again.
* mbedTLS is supported in non-default locations.
* Malformed branch names or missing branches on remotes are ignored.
* Use compiler intrinsics to detect arithmetic overflows in more cases.
* The configuration cache functions properly on systems with strict
alignment.
* A missing options initializer function (`git_blob_filter_options_init`)
was added for `git_blob_filter_options`.
* Several documentation fixes. - require library required by pkg-config file - update to 1.1.0:
* The refs/remotes/origin/HEAD file will be created at clone
time to point to the origin's default branch
* libgit2 now uses the __atomic_ intrinsics instead of __sync_
intrinsics on supported gcc and clang versions
* The init.defaultBranch setting is now respected and master is
no longer the hardcoded as the default branch name
* Patch files that do not contain an index line can now be parsed
* Configuration files with multi-line values can now contain
quotes split across multiple lines
* Servers that request an upgrade to a newer HTTP version are
silently ignored instead of erroneously failing
* Users can pass NULL to the options argument to
git_describe_commit
* Clones and fetches of very large packfiles now succeeds on
32-bit platforms
* Custom reference database backends can now handle the
repository's HEAD correctly
* Repositories with a large number of packfiles no longer
exhaust the number of file descriptors
* The test framework now supports TAP output when the -t flag
is specified
* The test framework can now specify an exact match to a test
function using a trailing $
* All checkout types support GIT_CHECKOUT_DISABLE_PATHSPEC_MATCH
* git_blame now can ignore whitespace changes using the option
GIT_BLAME_IGNORE_WHITESPACE
* Several new examples have been created, including an examples
for commit, add and push
* Mode changes during rename are now supported in patch
application
* git_checkout_head now correctly removes untracked files in a
subdirectory when the FORCE | REMOVE_UNTRACKED options are
specified - update to 1.0.1:
* Improve merge efficiency
* git_worktree_prune_init_options restored for backward
compatibility
* Configuration files that are unreadable due to permissions are
now silently ignored, and treated as if they do not exist
* v4 index files are now correctly written
* Improve compatibility with some servers including Gerrit - Update to version 1.0.0:
* CMake was converted to make use of the GNUInstallDirs module
for both our pkgconfig and install targets in favor of our
custom build options BIN_INSTALL_DIR, LIB_INSTALL_DIR and
INCLUDE_INSTALL_DIR. Instead, you can now use CMakes standard
variables CMAKE_INSTALL_BINDIR, CMAKE_INSTALL_LIBDIR and
CMAKE_INSTALL_INCLUDEDIR.
* Some CMake build options accepted either a specific value or a
boolean value to disable the option altogether or use automatic
detection. We only accepted "ON" or "OFF", but none of the
other values CMake recognizes as boolean. This was aligned with
CMake's understanding of booleans.
* The installed pkgconfig file contained incorrect values for
both libdir and includedir variables.
* If using pcre2 for regular expressions, then we incorrectly
added "pcre2" instead of "pcre2-8" to our pkgconfig
dependencies, which was corrected.
* Fixed building the bundled ntlmclient dependency on FreeBSD,
OpenBSD and SunOS.
* When writing symlinks on Windows, we incorrectly handled
relative symlink targets, which was corrected.
* When using the HTTP protocol via macOS' SecureTransport
implementation, reads could stall at the end of the session and
only continue after a timeout of 60 seconds was reached.
* The filesystem-based reference callback didn't corectly
initialize the backend version.
* A segmentation fault was fixed when calling git_blame_buffer()
for files that were modified and added to the index.
* A backwards-incompatible change was introduced when we moved
some structures from "git2/credentials.h" into
"git2/sys/credentials.h". This was fixed in the case where you
do not use hard deprecation.
* Improved error handling in various places.
- Change sover define to 1_0 and in baselibs following upstream
changes. - Update to version 0.28.5:
* Fix an out-of-bounds read when applying patches that do not end
with a newline.
* Fix an out-of-bounds read when decoding specially crafted
binary patches.
* Fix an out-of-bounds read when receiving a specially crafted
"OK" packet via the smarthttp transport.
* Fix lifetime for parsed patches depending on the lifetime of
the parsed buffe.
* Several fixes when parsing and applying patches.
* Fix computed patch IDs for patches that have no newline at end
of file.
* Fix applying patches to trees that add new files.
* Do not read configuration from a user's home directory if
running in a sandboxed environment.
* Fix handling of nested ignore rules overriding wildcard
unignores in parent directories.
* Fix reference locks not being correctly honored on Unix
systems.
* Follow 308 redirects when fetching or pushing from remote
repositories on Windows.
* Fix a race when detaching the libgit2 library on Windows.
* Update the "binary" gitattribute macro to match git's change
to "-diff -merge -text -crlf".
* Refuse to delete the HEAD reference.
* Fixes for several memory leaks.
* When fetching from an anonymous remote using a URL with
authentication information provided in the URL (eg
https://foo:bar@example.com/repo), we would erroneously include
the literal URL in the FETCH_HEAD file. We now remove that to
match git's behavior. - libgit2 0.28.4:
* CVE-2019-1348: the fast-import stream command "feature
export-marks=path" allows writing to arbitrary file paths. As
libgit2 does not offer any interface for fast-import, it is not
susceptible to this vulnerability. (boo#1158785)
* CVE-2019-1349: by using NTFS 8.3 short names, backslashes or
alternate filesystreams, it is possible to cause submodules to
be written into pre-existing directories during a recursive
clone using git. As libgit2 rejects cloning into non-empty
directories by default, it is not susceptible to this
vulnerability. (boo#1158787)
* CVE-2019-1350: recursive clones may lead to arbitrary remote
code executing due to improper quoting of command line
arguments. As libgit2 uses libssh2, which does not require us
to perform command line parsing, it is not susceptible to this
vulnerability. (boo#1158788)
* CVE-2019-1351: Windows provides the ability to substitute
drive letters with arbitrary letters, including multi-byte
Unicode letters. To fix any potential issues arising from
interpreting such paths as relative paths, we have extended
detection of DOS drive prefixes to accomodate for such cases.
(boo#1158790)
* CVE-2019-1352: by using NTFS-style alternative file streams for
the ".git" directory, it is possible to overwrite parts of the
repository. While this has been fixed in the past for Windows,
the same vulnerability may also exist on other systems that
write to NTFS filesystems. We now reject any paths starting
with ".git:" on all systems. (boo#1158790)
* CVE-2019-1353: by using NTFS-style 8.3 short names, it was
possible to write to the ".git" directory and thus overwrite
parts of the repository, leading to possible remote code
execution. While this problem was already fixed in the past for
Windows, other systems accessing NTFS filesystems are
vulnerable to this issue too. We now enable NTFS protecions by
default on all systems to fix this attack vector. (boo#1158791)
* CVE-2019-1354: on Windows, backslashes are not a valid part of
a filename but are instead interpreted as directory separators.
As other platforms allowed to use such paths, it was possible
to write such invalid entries into a Git repository and was
thus an attack vector to write into the ".git" dierctory. We
now reject any entries starting with ".git" on all systems.
(boo#1158792)
* CVE-2019-1387: it is possible to let a submodule's git
directory point into a sibling's submodule directory, which may
result in overwriting parts of the Git repository and thus lead
to arbitrary command execution. As libgit2 doesn't provide any
way to do submodule clones natively, it is not susceptible to
this vulnerability. Users of libgit2 that have implemented
recursive submodule clones manually are encouraged to review
their implementation for this vulnerability. (boo#1158793) - libgit2 0.28.3:
* A carefully constructed commit object with a very large number
of parents may have lead to out-of-bounds writes or potential
denial of service (boo#1158981) - Update to 0.28.2:
* Fix include directory ordering when using bundled dependencies.
* Fix infinite loop when searching for a non-existing repository with
Windows-style paths including drive prefixes.
* Fix symlinks to directories on Windows.
* Fix paths with a trailing "/" not always being treated as
directories when computing ignores.
* Fix false negatives when computing ignores where ignore rules
that are a prefix to a negative ignore rule exist.
* Fix patches with CRLF line endings not being parsed correctly.
* Fix segfault when parsing patches with file addition (deletion)
where the added (deleted) file name contains a space.
* Fix assertion failure when trying to write to a non-existent
locked configuration file. - Update to version 0.28.1:
- The deprecated functions (git_buf_free and the giterr_ family
of functions) are now exported properly. In the v0.28 release,
they were not given the correct external attributes and they
did not have the correct linkage visibility in the v0.28
library. - Update to version 0.28.0:
* Changes or improvements:
- The library is now always built with cdecl calling
conventions on Windows; the ability to build a stdcall
library has been removed.
- Reference log creation now honors
core.logallrefupdates=always.
- Fix some issues with the error-reporting in the OpenSSL
backend.
- HTTP proxy support is now builtin; libcurl is no longer used
to support proxies and is removed as a dependency.
- Certificate and credential callbacks can now return
GIT_PASSTHROUGH to decline to act; libgit2 will behave as if
there was no callback set in the first place.
- The line-ending filtering logic - when checking out files -
has been updated to match newer git (>= git 2.9) for proper
interoperability.
- Symbolic links are now supported on Windows when
core.symlinks is set to true.
- Submodules with names which attempt to perform path traversal
now have their configuration ignored. Such names were blindly
appended to the $GIT_DIR/modules and a malicious name could
lead to an attacker writing to an arbitrary location. This
matches git's handling of CVE-2018-11235.
- Object validation is now performed during tree creation in
the git_index_write_tree_to API.
- Configuration variable may now be specified on the same line
as a section header; previously this was erroneously a parser
error.
- When an HTTP server supports both NTLM and Negotiate
authentication mechanisms, we would previously fail to
authenticate with any mechanism.
- The GIT_OPT_SET_PACK_MAX_OBJECTS option can now set the
maximum number of objects allowed in a packfile being
downloaded; this can help limit the maximum memory used when
fetching from an untrusted remote.
- Line numbers in diffs loaded from patch files were not being
populated; they are now included in the results.
- The repository's index is reloaded from disk at the beginning
of git_merge operations to ensure that it is up-to-date.
- Mailmap handling APIs have been introduced, and the new
commit APIs git_commit_committer_with_mailmap and
git_commit_author_with_mailmap will use the mailmap to
resolve the committer and author information. In addition,
blame will use the mailmap given when the
GIT_BLAME_USE_MAILMAP option.
- Ignore handling for files in ignored folders would be
ignored.
- Worktrees can now be backed by bare repositories.
- Trailing spaces are supported in .gitignore files, these
spaces were previously (and erroneously) treated as part of
the pattern.
- The library can now be built with mbedTLS support for HTTPS.
- The diff status character 'T' will now be presented by the
git_diff_status_char API for diff entries that change type.
- Revision walks previously would sometimes include commits
that should have been ignored; this is corrected.
- Revision walks are now more efficient when the output is
unsorted; we now avoid walking all the way to the beginning
of history unnecessarily.
- Error-handling around index extension loading has been fixed.
We were previously always misreporting a truncated index.
* API additions:
- The index may now be iterated atomically using
git_index_iterator.
- Remote objects can now be created with extended options using
the git_remote_create_with_opts API.
- Diff objects can now be applied as changes to the working
directory, index or both, emulating the git apply command.
Additionally, git_apply_to_tree can apply those changes to a
tree object as a fully in-memory operation.
- You can now swap out memory allocators via the
GIT_OPT_SET_ALLOCATOR option with git_libgit2_opts().
- You can now ensure that functions do not discard unwritten
changes to the index via the
GIT_OPT_ENABLE_UNSAVED_INDEX_SAFETY option to
git_libgit2_opts(). This will cause functions that implicitly
re-read the index (eg, git_checkout) to fail if you have
staged changes to the index but you have not written the
index to disk. (Unless the checkout has the FORCE flag
specified.)
- At present, this defaults to off, but we intend to enable
this more broadly in the future, as a warning or error. We
encourage you to examine your code to ensure that you are not
relying on the current behavior that implicitly removes
staged changes.
- Reference specifications can be parsed from an arbitrary
string with the git_refspec_parse API.
- You can now get the name and path of worktrees using the
git_worktree_name and git_worktree_path APIs, respectively.
- The ref field has been added to git_worktree_add_options to
enable the creation of a worktree from a pre-existing branch.
- It's now possible to analyze merge relationships between any
two references, not just against HEAD, using
git_merge_analysis_for_ref.
* API removals:
- The git_buf_free API is deprecated; it has been renamed to
git_buf_dispose for consistency. The git_buf_free API will be
retained for backward compatibility for the foreseeable
future.
- The git_otype enumeration and its members are deprecated and
have been renamed for consistency. The GIT_OBJ_ enumeration
values are now prefixed with GIT_OBJECT_. The old
enumerations and macros will be retained for backward
compatibility for the foreseeable future.
- Several index-related APIs have been renamed for consistency.
The GIT_IDXENTRY_ enumeration values and macros have been
renamed to be prefixed with GIT_INDEX_ENTRY_. The
GIT_INDEXCAP enumeration values are now prefixed with
GIT_INDEX_CAPABILITY_. The old enumerations and macros will
be retained for backward compatibility for the foreseeable
future.
- The error functions and enumeration values have been renamed
for consistency. The giterr_ functions and values prefix have
been renamed to be prefixed with git_error_; similarly,
the GITERR_ constants have been renamed to be prefixed with
GIT_ERROR_. The old enumerations and macros will be retained
for backward compatibility for the foreseeable future.
* Breaking API changes:
- The default checkout strategy changed from DRY_RUN to SAFE.
- Adding a symlink as .gitmodules into the index from the
workdir or checking out such files is not allowed as this can
make a Git implementation write outside of the repository and
bypass the fsck checks for CVE-2018-11235.
- Bump sover to 28 following upstreams changes. - libgit2 0.27.7:
* Various improvements for handling repositories
* Various API correctness fixes
- includes changess from 0.27.6:
* Various security fixes for parsing integers from buffers,
and buffer handling bsc#1114729 - libgit2 0.27.5:
* CVE-2018-17456: Submodule URLs and paths with a leading "-"
are now ignored to avoid injecting options into library
consumers that perform recursive clones (bsc#1110949)
* Avoid a buffer overflow when running repack
* Avoid stack overflow from unbounded recursion in configuration
file parser
* Avoid heap-buffer overflow when parsing "ok" packets
* Fix heap-buffer overflows in smart protocol parsing code
* Fix potential integer overflows on platforms with 16 bit ints
* Fix potential NULL pointer dereference when parsing
configuration files - Use pkgconfig style of dependencies, refresh dependencies
- Use more of cmake macros - libgit2 0.27.4:
* fix out-of-bounds reads when processing smart-protocol "ng"
packets (bsc#1104641) - libgit2 0.27.3:
* CVE-2018-10887 (bsc#1100613), CVE-2018-10888 (bsc#1100612):
Specially crafted delta object in packfiles could trigger an
integer overflow, bypassing input validation and causing the
object database to contain copies of system memory. This may
allow denial of service or, potentially, an information leak
- includes changes from 0.27.2:
* various API and correctnes fixes
* Fixes related to handling of .gitmodules
- includes changes from 0.27.1:
* CVE-2018-11235: insufficient validation of submodule names from
.gitmodules allowed writes to arbitrary paths (bsc#1095219)
* disallow .gitmodules files as symlinks. - update to 0.27.0:
- Changes or improvements
- Improved p_unlink in posix_w32.c to try and make a file
writable before sleeping in the retry loop to prevent
unnecessary calls to sleep.
- The CMake build infrastructure has been improved to speed up
building time.
- A new CMake option "-DUSE_HTTPS=" makes it possible to
explicitly choose an HTTP backend.
- A new CMake option "-DSHA1_BACKEND=" makes it possible to
explicitly choose an SHA1 backend. The collision-detecting
backend is now the default.
- A new CMake option "-DUSE_BUNDLED_ZLIB" makes it possible to
explicitly use the bundled zlib library.
- A new CMake option "-DENABLE_REPRODUCIBLE_BUILDS" makes it
possible to generate a reproducible static archive. This
requires support from your toolchain.
- The minimum required CMake version has been bumped to 2.8.11.
- Writing to a configuration file now preserves the case of the
key given by the caller for the case-insensitive portions of
the key (existing sections are used even if they don't
match).
- We now support conditional includes in configuration files.
- Fix for handling re-reading of configuration files with
includes.
- Fix for reading patches which contain exact renames only.
- Fix for reading patches with whitespace in the compared
files' paths.
- We will now fill FETCH_HEAD from all passed refspecs instead
of overwriting with the last one.
- There is a new diff option, GIT_DIFF_INDENT_HEURISTIC which
activates a heuristic which takes into account whitespace and
indentation in order to produce better diffs when dealing
with ambiguous diff hunks.
- Fix for pattern-based ignore rules where files ignored by a
rule cannot be un-ignored by another rule.
- Sockets opened by libgit2 are now being closed on exec(3) if
the platform supports it.
- Fix for peeling annotated tags from packed-refs files.
- Fix reading huge loose objects from the object database.
- Fix files not being treated as modified when only the file
mode has changed.
- We now explicitly reject adding submodules to the index via
git_index_add_frombuffer.
- Fix handling of GIT_DIFF_FIND_RENAMES_FROM_REWRITES raising
SIGABRT when one file has been deleted and another file has
been rewritten.
- Fix for WinHTTP not properly handling NTLM and Negotiate
challenges.
- When using SSH-based transports, we now repeatedly ask for
the passphrase to decrypt the private key in case a wrong
passphrase is being provided.
- When generating conflict markers, they will now use the same
line endings as the rest of the file.
- API additions
- The git_merge_file_options structure now contains a new
setting, marker_size. This allows users to set the size of
markers that delineate the sides of merged files in the
output conflict file. By default this is 7
(GIT_MERGE_CONFLICT_MARKER_SIZE), which produces output
markers like <<<<<<< and >>>>>>>.
- git_remote_create_detached() creates a remote that is not
associated to any repository (and does not apply
configuration like 'insteadof' rules). This is mostly useful
for e.g. emulating git ls-remote behavior.
- git_diff_patchid() lets you generate patch IDs for diffs.
- git_status_options now has an additional field baseline to
allow creating status lists against different trees.
- New family of functions to allow creating notes for a
specific notes commit instead of for a notes reference.
- New family of functions to allow parsing message trailers.
This API is still experimental and may change in future
releases.
- Breaking API changes
- Signatures now distinguish between +0000 and -0000 UTC offsets.
- The certificate check callback in the WinHTTP transport will
now receive the message_cb_payload instead of the
cred_acquire_payload.
- We are now reading symlinked directories under .git/refs.
- We now refuse creating branches named "HEAD".
- We now refuse reading and writing all-zero object IDs into
the object database.
- We now read the effective user's configuration file instead
of the real user's configuration in case libgit2 runs as part
of a setuid binary.
- The git_odb_open_rstream function and its readstream callback
in the git_odb_backend interface have changed their
signatures to allow providing the object's size and type to
the caller. - Update to 0.26.3:
* Fix cloning of the libgit2 project with git clone --recursive by removing an
invalid submodule from our testing data.
* Fix endianness of the port in p_getaddrinfo().
* Fix handling of negative gitignore rules with wildcards.
* Fix handling of case-insensitive negative gitignore rules.
* Fix resolving references to a tag if the reference is stored with its fully
resolved OID in the packed-refs file.
* Fix checkout not treating worktree files as modified when only their mode has
changed.
* Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
* Fixes memory handling issues when reading crafted repository index files.
The issues allow for possible denial of service due to allocation of large
memory and out-of-bound reads.
(CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
* Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
vulnerable to security issues in the prior version. - Modernize spec-file by calling spec-cleaner - remove unneeded dependency (python is used only for testsuite, which
isn't used during build) - libgit2 0.26.0:
* Support for opening, creating and modifying worktrees.
* Can now detect SHA1 collisions resulting from the SHAttered
attack CVE-2005-4900
* Fix for missing implementation of `git_merge_driver_source` getters
* Fix for installed pkg-config file being broken when the prefix
contains spaces
* Can now detect when the hashsum of on-disk objects does not
match their expected hashsum.
* Support open-ended ranges (e.g. "master..", "...master") in
revision range parsing code.
* Correctly compute ignores with leading "/" in subdirectories.
* Optionally call `fsync` on loose objects, packfiles and their
indexes, loose references and packed reference files.
* Builds against OpenSSL v1.1 and against LibreSSL.
* Improvements for reading index v4 files.
* API additions and incompatible API changes - libgit2 0.25.1
- New features and functionality:
* repository discovery features
* Support for reading and writing git index v4 files
* Improve the performance of the revwalk
* reference db concurrency improvements
* Nanosecond resolution is now activated by default
* restrict the set of ciphers used with OpenSSL by default.
* user-registered merge drivers
* built-in support for the union merge driver
* callers can now specify proxy settings
* New API for creating signed commits
* New API for creating blobs from streams
* New flags for opening repositories
* New functions for various git operations
- Removed API:
* git_blob_create_fromchunks() has been removed in favour of
git_blob_create_fromstream()
- Changed API:
* git_packbuilder_object_count and git_packbuilder_written now
return a size_t instead of a uint32_t for more thorough
compatibility with the rest of the library.
* git_packbuiler_progress now provides explicitly sized uint32_t
values instead of unsigned int.
* git_diff_file now includes an id_abbrev field that reflects the
number of nibbles set in the id field.
* git_odb_backend now has a freshen function pointer
* git_remote_connect() now accepts proxy options. - libgit2 0.24.6, including the following security fixes:
* bsc#1019036: edge cases in the Git Smart Protocol can lead to
attempting to parse outside of the buffer
CVE-2016-10128,CVE-2016-10129
* bsc#1019037: MITM possible due to lack of parameter for
certificate parameter
CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
* add support for OpenSSL 1.1.0 for BIO filter - libgit2 0.24.3, fixing the following vulnerabilities:
* CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
object files (bsc#1003810)
* various bug fixes from the 0.24.2 release - Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0 - libgit2 0.24.1:
+ various compatible backported bug fixes - Update to version 0.24.0:
+ Custom filters can now be registered with wildcard attributes,
for example filter=*. Consumers should examine the attributes
parameter of the check function for details.
+ Symlinks are now followed when locking a file, which can be
necessary when multiple worktrees share a base repository.
+ You can now set your own user-agent to be sent for HTTP
requests by using the GIT_OPT_SET_USER_AGENT with
git_libgit2_opts().
+ You can set custom HTTP header fields to be sent along with
requests by passing them in the fetch and push options.
+ Tree objects are now assumed to be sorted. If a tree is not
correctly formed, it will give bad results. This is the git
approach and cuts a significant amount of time when reading the
trees.
+ Filter registration is now protected against concurrent
registration.
+ Filenames which are not valid on Windows in an index no longer
cause to fail to parse it on that OS.
+ Rebases can now be performed purely in-memory, without touching
the repository's workdir.
+ When adding objects to the index, or when creating new tree or
commit objects, the inputs are validated to ensure that the
dependent objects exist and are of the correct type. This
object validation can be disabled with the
GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
+ The WinHTTP transport's handling of bad credentials now behaves
like the others, asking for credentials again.
+ Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
soname bump (also in baselibs.conf). - libgit2 0.23.4:
* various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch - libgit2 0.23.3, containing critical fixes:
* blame: guard xdiff calls for large files
* diff: don't feed large files to xdiff
* merge_file: treat large files as binary
* xdiff: convert size variables to size_t
* GITERR_CHECK_ALLOC_ADDn: multi-arg adders - Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc. - libgit2 0.23.2:
* documentation fixes
* diff: don't error out on an invalid regex
* http: propagate the credentials callback's error code
* Fix bug in git_smart__push: push_transfer_progress cb is never called
* remote: don't confuse tag auto-follow rules with refspec matching
* curl: use the most secure auth method for the proxy
* Forcing libssh2 lib location
* fix duplicate basenames to support older VS
- includes changes from 0.23.1:
* Stage an unregistered submodule in _add_bypath()
* filebuf: remove lockfile upon rename errors
* Increase required version of cmake to 2.8
* Handle ssh:// and git:// urls containing a '~' character.
* documentation updates
* submodule URL handling fixes
* index: allow add_bypath to update submodules
* blob: fail to create a blob from a dir with EDIRECTORY
* submodule: lookup the submodule by path if available
* submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser - Update to version 0.23.0:
+ Changes or improvements:
- Patience and minimal diff drivers can now be used for merges.
- Merges can now ignore whitespace changes.
- Updated binary identification in CRLF filtering to avoid
false positives in UTF-8 files.
- Rename and copy detection is enabled for small files.
- Checkout can now handle an initial checkout of a repository,
making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
clone.
- The signature parameter in the ref-modifying functions has
been removed. Use git_repository_set_ident() and
git_repository_ident() to override the signature to be used.
- The local transport now auto-scales the number of threads to
use when creating the packfile instead of sticking to one.
- Reference renaming now uses the right id for the old value.
- The annotated version of branch creation, HEAD detaching and
reset allow for specifying the expression from the user to be
put into the reflog.
- git_rebase_commit now returns GIT_EUNMERGED when you attempt
to commit with unstaged changes.
- On Mac OS X, we now use SecureTransport to provide the
cryptographic support for HTTPS connections insead of
OpenSSL.
- Checkout can now accept an index for the baseline
computations via the baseline_index member.
- The configuration for fetching is no longer stored inside the
git_remote struct but has been moved to a git_fetch_options.
The remote functions now take these options or the callbacks
instead of setting them beforehand.
- git_submodule instances are no longer cached or shared across
lookup. Each submodule represents the configuration at the
time of loading.
- The index now uses diffs for add_all() and update_all() which
gives it a speed boost and closer semantics to git.
- The ssh transport now reports the stderr output from the
server as the error message, which allows you to get the
"repository not found" messages.
- git_index_conflict_add() will remove staged entries that
exist for conflicted paths.
- The flags for a git_diff_file will now have the
GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
of the diff. This is useful for understanding whether a side
of the diff exists in the presence of a conflict.
- The constructor for a write-stream into the odb now takes
git_off_t instead of size_t for the size of the blob, which
allows putting large files into the odb on 32-bit systems.
- The remote's push and pull URLs now honor the
url.$URL.insteadOf configuration. This allows modifying URL
prefixes to a custom value via gitconfig.
- git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
and git_diff_buffers now accept a new binary callback of type
git_diff_binary_cb that includes the binary diff information.
- The race condition mitigations described in racy-git.txt have
been implemented.
- If libcurl is installed, we will use it to connect to HTTP(S)
servers.
+ Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
soname bump (also in baselibs.conf). - Update to version 0.22.1:
+ The following (critical) fixes have been backported to this
maintenance release:
- checkout: introduce git_checkout_perfdata.
- git_path_join_unrooted: return base len.
- checkout: don't recreate previous directory.
- checkout tests: nasty symlinks.
- checkout: drop newline in error message.
- checkout: remove files before writing new ones.
- checkout tests: emulate p_realpath poorly on Win32.
- checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
+ git_signature_new() now requires a non-empty email address.
+ Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
+ Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
TLSv1 in OpenSSL.
+ The fetch behavior of remotes with autotag set to
GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
1.9.0 and later. In this mode, libgit2 now fetches all tags in
addition to whatever else needs to be fetched.
+ git_checkout() now handles case-changing renames correctly on
case-insensitive filesystems; for example renaming "readme" to
"README".
+ The search for libssh2 is now done via pkg-config instead of a
custom search of a few directories.
+ Add support for core.protectHFS and core.protectNTFS. Add more
validation for filenames which we write such as references.
+ The local transport now generates textual progress output like
git-upload-pack does ("counting objects").
+ git_checkout_index() can now check out an in-memory index that
is not necessarily the repository's index, so you may check out
an index that was produced by git_merge and friends while
retaining the cached information.
+ Remove the default timeout for receiving / sending data over
HTTP using the WinHTTP transport layer.
+ Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
systems.
+ Provide built-in objects for the empty blob (e69de29) and empty
tree (4b825dc) objects.
+ The index' tree cache is now filled upon read-tree and
write-tree and the cache is written to disk.
+ LF -> CRLF filter refuses to handle mixed-EOL files.
+ LF -> CRLF filter now runs when * text = auto (with Git for
Windows 1.9.4).
+ File unlocks are atomic again via rename. Read-only files on
Windows are made read-write if necessary.
+ Share open packfiles across repositories to share descriptors
and mmaps.
+ Use a map for the treebuilder, making insertion O(1).
+ The build system now accepts an option EMBED_SSH_PATH which
when set tells it to include a copy of libssh2 at the given
location. This is enabled for MSVC.
+ Add support for refspecs with the asterisk in the middle of a
pattern.
+ Fetching now performs opportunistic updates. To achieve this,
we introduce a difference between active and passive refspecs,
which make git_remote_download() and git_remote_fetch() to take
a list of resfpecs to be the active list, similarly to how git
fetch accepts a list on the command-line.
+ The THREADSAFE option to build libgit2 with threading support
has been flipped to be on by default.
+ The remote object has learnt to prune remote-tracking branches.
If the remote is configured to do so, this will happen via
git_remote_fetch(). You can also call git_remote_prune() after
connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
soname bump (also in baselibs.conf). - Add baselibs.conf /sbin/ldconfig /sbin/ldconfig h04-ch1c 1721377644 1.7.2-150600.3.3.1 1.7.2-150600.3.3.1 libgit2.so.1.7 libgit2.so.1.7.2 libgit2-1_7 AUTHORS README.md libgit2-1_7 COPYING /usr/lib64/ /usr/share/doc/packages/ /usr/share/doc/packages/libgit2-1_7/ /usr/share/licenses/ /usr/share/licenses/libgit2-1_7/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:34823/SUSE_SLE-15-SP6_Update/35b5988de4460d6d039c5e9af38c7e84-libgit2.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=373c857f738da8e6d4fd66511c8e1e3acf2a3885, stripped directory UTF-8 Unicode text UTF-8 Unicode text, with very long lines ASCII text P R R R R R R
R R R R
R R R R R R R R R R u^~@ys utf-8 e537cae49c23be0713f0f04428af7e78a13b3781b7789715d1ecf3d03578bcf8 ? 7zXZ
! t/jX] "k% dٶ^$-ߐӐ94*,ρ5 S_i}/u3]2U4 {:'D B6'ϋ@7> |kp}2z0@Q$C!V' Gt $Ha<&ʞCL,
z)E!oYIR
z K(E W7{4Iٍ HV)$;iö[ܣlG Lm ='@ @H;?L*r!): U{ 5; 6hQ^Zø[F9\qsb?3lu"
~ʍK9({|0STeS~Aު8 (CyT~w-W&ۇlX!r|u=PQveifKp77 7qG^GPT'LMAl'Z:GV+<]ϘvFG^vK*Y/0U7xoG H'PjT\"w$>-'j e\cj1~˦ 9%- m[jҔc4=Y&< T`6|RvT\c)qs6hY#qKG}gLg0} I ]_
[ +Q|` R:. u)WEA^? ,~}ȓn үA# q+-Is
6X}y|Ǯe
p] k%2LˣGF6{K>Ӳ[z6UȩqP;gp:鿑FjNL\=ʇ_J&ʾ9@ڌfgWFソ^WOѲZ^@5(8ih,Hl~$sk1 ҩDs$"$I*5{7Z^0P=[T=BxXr3|i#)\_|b2g9Fּ|G_ 0ii҈{p/Qښ yƶ ei# bk,KK"k'ma\. \i0t
wxY/T=ߧ[~.L-fIvL g+$hQKi^1 =w\Xzmg$(
nf먧O oU[KHp@p21f`KW>.KT\|ETͬOJx] a[˸ GL|;&$6( 3)
Z&Rq 8' *Iϫg)c
ZI
$\Gj*Qܜl
:h| @0w
5ݲ QxPr26Q%BEG+eXzCYOߧH3$?Kb#RjW .79[Ӫ16ߢȷ\qWta?| A'SM0R}ΝlEϺ8``@L3ux')ma|᧟ bVh#( B~&߮8Bԛ Vl<0(ʥ>R s ׆h$P^ (\g
]GӟLp7]KWUJi:oBb% fd>?Pv/}%Pd[gHJɵ8CEi [XU g"SbpGAWuy o{>@o&G i wHJд0[@*K&ϝ]Ɓ`I !D "{0 F駦 ˻ C<-u؆W=&A.'Mދ$-E@^K NҶ
RBJIQ+_$&ו <R5ᝤ[_@$o&puqa =x\6Kx~=Sy`#:~@ wRʲ]y=ă5h:Je&74qQx,߭$,r؟l&bqMՃN0j^8FN,K_
*א6}J(2>/|ۛ'і+E߈67$uM(cX Ĵvj'+O>BW)D-rb\DgZ{ eh6т"\vՐm0=@?rC߃70 P}+9yqÛ'bw'5JY8XjB WXꁱhH
2ӷә եQby4c`
zpn7[yZ!pmݍJ9̀@+ݵ "\2gI=[!N #ZA`7
qHtX<9S (LA* #_Vz& mL՚jfZ*>ve,A+6JM D`.|M:@x}\m7 }L>}JJ 솿rDKa4ĜϮDWHgy)}dEz,Er-,-SZ!]uI81Zjb݊"܉"&0iLqږ! aa@$-;xP(0Xxl*<A"σXOs"MRȞbR+V K_sZVQUH 9a e6%
t1㘸VhFeFG|~\YQ :yq0\. 6 #2 RClˎl[*]8%gL4aƥ+6P >ʠrL#\21(8%#mqh
"whV20Smn@0I14qôCl4m@y?fwT6Uaƌnm%аDơw/.hcAE _FGŠudHVE~,fm!Wz{Ez44(5O=BC[ O'0<ЊE荗(R62>ȚS /2F8μ8pL{J_L=/ 5Jy[,rbUQ<+ WݍL;`>Ԝg Q6y[ ̼j1r ~j &G (S)@ǾR@H/`HLFfhA8ludN' 'Jkx 'zy *p>N&8`$N7z 7H<*| 8)Kx4H Vbۂ@lYπy\Z
G{l.!ܽDzJA1q äF
awg:^&.'^RE,} 7vu:8>60Ц͆O索9ԺߵRX^nRnHTZ"첕"kşUgy]b={%HSM m^?T:hBDW~!1[U[?."@V>pCcǣ0wl:} l lQx4DCm7Ѥ9#
ӱ uKzynN&˥])VDڙسۦ kFsڥ54G1j
ެ>Xd1`yKV{H2mgzC ޝ% $3u~ÇW]:Y'?S 3*Op. "Y="* {< !~VةRuH2UbhfǴS]1K Q,'+z-B+crO7I (M1 9no(m; zL: (glZi
SY
]h= 9l K A M*̺ ͵zh9d`lLbEC]"u&2eژڻik9s5 "Mz 8ʚ&L* ̓Y!6+t yBqNe_ jo!$ +Ba{ >58]pzgcs8Hs
/tO
eܓE 3o HK!# !V\+L C` d TӰ(}.VDyȡ*6߳nȌC-4yR
=o>
sr3v@ş 9ⵧ|2ouqK{"
Qg:
^˫x({CB i[Mxi,$yn[PA Wwe 2Q} 0ά}_O0$T1$u`wJžҌs/Ħ| i?9Ъқ՝ 1톦z. qS"00|/ ;'JJ62[眂~aN٦Hb+ NƠÙ0b2XpdIZ
Ig2C~Fy硕^:PAzN sه
Jt SdcqdO^QXhnqt O)ET_;IZ3C]xIOk!G2Rb^j%YUy
ǪPkekT "L$~wJf=҇."E2@: =$f(8d&>b/1s{<j=Ej LLS#{H" vd
)j/Z!qg\rQQ Բg1xa5:lݺBN]6Rl
ӹ2ȃGE7nlԺɐݥyVYae XM-.DҎnh=YyHS,)qvg|qm: ,Gޞ/yD+k A$WC
5u(#%!mY dsUWa ,B~i[?ITG7>И\< t STDhjا
WXyBՏ)Y?Y8{m|tmd@hѦBGʦ1Uun~/,_. d$N[F $5% ύ_̯ᴦ,Eߟ&f
fVoM_U$אm}Ҕ.Z(E0q:pq%~,pfZlCKH(^&;\-/[9<)u!F!
qU 9LCQNuG~;ń' 0ea{ /Ah- TxQIj=SK鷃Jo
X`W(2I{B3.Mdc)ɰ7ǮhSm2IJVM{d T[As4 &Za p^eh}ovBiDO< 'dT~Md` f70Uq{Y|s
~rARyvyٟ3SU\ڒ0^yD }ߥ2,:)\w/6`Q5J -?F*PDQ'4D$zYw$gec?vsv'M1 Onuv'&\o/ {A':Ze6N!Ew/fZU \_fwd -
,_UjqN]/pAZ@pLӓa4zH - ԉVvF$1;;IB`,=ym42/V֮ 7]Nʆ8?#;
b91
nD߸?|$#@
SyB)KÖe*9g#R3фQ9@P|3ͺT, c.v73v0c
B,3w*s'(k.ΟPC)mTFu4BXo?`:Qn ݻXzo̐ _+*pV+9mphAMD7PT}ܨW{%$qm5*
mF@ kE7 J?gB\h꺭j)K;h>g rwmw H Cwh |r;. CWk,=X
{N}Eg{wˮzj頙@*3&.,ś 5fdX_:O /p3{ 9`pLpH]W?5 ׂU
?& 5"Y
GNXa-l[<"Mwʞ! .c24 +1
4\FYmY^ 2#;O2uK0ָb9SB`"B*{j4f.hb,]x<(^^
vzW1@ ]NkϦ 2dEw,DՐK t% q(PK30kuCǕg&6_;p}(x<:e 5BUȷ品$$qMIĢ6y4eq,k_XmR^
ʺA#xx!Z!;{˷W#2:aABGUҝݑ;wnĈۍ4%
{ G͓ ;KWM=Xb7O4);ڧk yfE鎿aG_. t]KJt #AD3iG6|r@ %|̀DfȍIߨ$"S46*@~I?/aoArNIs|ul"o#9p rMfե0"s7/H qf A>jkfxw{w욨I!5XجtGts}ZgeQd5~$TR'U4lW #V1
8"29g?9쬂T>2;L£P]`$ Æ>m* 4#so23MԈV2%^v 6:ɔqBʸym)r(]2#OxU !ހ(KzYbDZ7*"5PPr#d^/k,LvN5 b]And4sT%]$
B[ #g(5mutՔRw<B6.{9 ;PѶ%GQɺÆvuF լ =W} L؏q}K|#h|!Ğ2#, ZS.vRG;y-\ GY#HbGm.[IJ~tU,#G;SʂF |M( s%w!41Ms: ꗫ^+>(e,i\גs/f_#۳C+L ֹ#kl:HħZ *°$[Q(TPڅE~D ] OEfbT 1߿Bs >[V3O 32(RZ R^vTGϪWB1|Y0 *%{ZtA kGq|#{Q8KǶ (EL0籾ԏ3I7(__Y:bQ(?]s,% J"f֠GA®b,/
ұJ/ ǻhZGH\+6=m/cjel'_ CшSi mbt6bpٙ9AǏl
4};.SJw_;|[כ&gGz2F{XGme * NeURUNX+ʤO
;TpJ"ϗH'~οԠ)Y+vjw gY߭fΨ4~\]7!jT9 /yp2 |FSl+
beC,Fsz1;0Ū ؖ"?ySB_;+oHڲ3
ӳ." }%*G*cz/7\~Vcl; #BFDU U4QP̣[v)k;$ˆgxÓ(ܱGLqC :dâ)]ߧՒQ#c1IB \O Wڢ$w>][p %ua
6=$__@o|)}.;#X)bCm،fIi t|`ᒄnx|ӚR T+i< }`RA>c
˰ /˾![.lqPE&RFj ' `ǠiCi}*6kZᇴh ì3r݃_XagՒTǕg0[ HF&F ]@mD hƲ.r_e dP_
.kewn "Sc;ޤo.a@vc %{=ĺ~[;!TtQѹWVF: 2 aZ٧{<ʮ" ?8(z6çDw,hk- E&(ys8E-Gmc`~}͍WL]вEQ(N 蠞dzXn?eω }Fߒg$qh*ϸd8PT{KоK(3[/ W!T͚Wz)u
n+ ٪PYV[Vޓu혨-ت
Fy_GƂO@C٧`|4M(`-* %w?'tk=! {8<>dsjg:?NoU]Lr+Ӝ_ *l13qR>r_@i7ۆ
2+$5#k
EoWL$۲b?×.* Jɏ҈YGV2#ݰ ./ Sl`jDO0Mݛae0C RYn;'/k 5Ϋ;K=w jcDo:\fЬ̎ZyIf2klL%\qqCa
:;0uIN
HN FrV;) ؈u김>Se#z\Xqa/;Y|5Ѣ^$VB9 ?3ȌlaM3o Y ͽ~%skF4FJ{HM,#/_Rf-'Μ߈WsAla
_sIR ߞB <-JZ=3>HLUy=qZ~zo黖]O4 z6^o4$Flh5'XS8#.`Q? i.\F , CٹXьYINo_1t}Q1dCL :I<i+M2$?Ť(Z:u`f(fLA͌Ye8@t [_j4 ͟ЏlGJ:*{ڏ În (aYL'$Kq\rw#XS>
A^%ޱlՅ \UJ5kH.2 rFXQb`}X(W^*X{DQ֎@*lu v$
=]q&!Mo/(q6])sn͇
ӕYᒩ`} T 673Kc e oz )2kR |e)UQŗoz`Tpڄ $D F.#?a1S>2TͭPb~cn#[`)~ޑ́%vOVl>YS5fꉑ*V^56) B[{rVhb}ȳmھ ~vɑ'qJ[ K,u %Zs=a4lxP ;}b*Mst#> C4;.FI
*Ptr=(x6-& ' ]
KH<,Ծ =l f mz[ +fUe%DK߶1,Kb@0z' fugBw/u>3&P>3Tz ζfyY+:x?{@6\Ts1Xڢ5@ \X>&[% q/鼼B'&74'YrZXީ:C[w->lO'7X \h9v7hm 97iOuVk e
q.M>h\ w5#]5 *8+Y3 or1%r'P هxMCmn}6Fխc;;RrȯD`,X _0kՀM/aUG{3QK|Iy
"y-B)_Q>R>zq+ lV fs**&!_3eA&bμ[dy?2S~nGX4 yb>^gS_&D7B[
HK,~ę"0BXLE\;f}`\*1~ |yΣ/ atNUbڿXK,/O DA&jxjVl@M؊PT ! Tߊ]O 'ʣmv"ia]a(Bȩؕ4[.;I]GwZ3HJBpKF۬uF˹4f/B^>a LΝm
[ 3DGG-%WNi'P<[Muמ >Ʈ<[I M
OnǕzg q:ވs^$rtm&V* IF/$cҬ{{=D,䉾IVpNVI7rD`
脠71Ui%R8 $L2ܓGf$n d#
_qe, eq5 <'z/V5x]-W7g,`$`;L7_FyR# ZUi,$r3V#Qig y~R7juU
_Z#ѥ"6# Hrz̟ ln>%RzّW*z
! d;&#_FE4:Ɖ$PȰ+kNk%ی27m@J-YlPѠ4Z4d(p'Nf!?^
O NAI~?~"_)8u s܌4T'˫]dota] VXJxTnʞLjoomQu [|!E/5sfG-Q|}l( eM fٱlOq:bJ||vj7V3b5B3+l摄 +CT#t(O%Il
0wW8FYi
LJ-%F]ht_KйiN4VԾnej8srvZ cs2^nNf*=#l@Ij^6`e,$hvL|dRJI#H.{[uT1)1 QTw
%>pGv/"!`02g3VB0Tg8z3b1_/f6^(ȩ*:'f39*%
#wĹvv{xxٿ2Jg"f)Vh7LZr9 bK4a% V#2ya]h#OG(Xrmŝ'g]Co9 b -H8mI ?Avl ZwU2%ވ3=GJ7B4>V!>VD eQo*utcѭT s.ajv xzf*[,p5p H' c?%)l;oF3*d[ M`^uV=S1
0BS fMg2;ոvLNuk !cĵRIOSGWڷL5ֳٔH{ j+5 |̙bT1> o&f`7=Փ閙3UQooR
:hmP0ehW;C
d?9!9*rP[T^amtREDŢߵuϨ},6(
Y0z?d56UƮk\QE)HqvT7EKoS?%NYɎOu
AG8p
sm]NMDCR[)/KXeB( H>Gs 霣h_Ow{m=,mw~ [uclF#.UNNg{CF̸.Z#snAUPS13y܈4JdX1o$5oMay,}Tn"O/uE9F:qqHs Tʫ)Z (, >Tj/%;2Wy[H͍i k\,ruS =k7t96'A9+^V**}V '*VV*NMHݨ
so0=C,iG =G]mUCpZP¦ 8kX6#M,dsV!* e2:[86Pxi!+o?Nt#f} ǿXH *1K XzWC *+
^g<"``1+L+楰Uդ=# h\ :eZgZISu%,jJ0 k`^#[: Gg (fz@P5tww_+vM,MB83PeFTZ j\ٞV3^
' ىϗ\LBE̅u7xi51#AS M㕮kd5Xڍ|
59S 5l˔Kİ G3@#v|ܵ܀h/(;5f`Lԑ '7s + A>W[!H x joK5wZ4u 5* w~W@x/I.nXN/nϹק2K:ldk<]1c4 _/.gz
^& #ZE 1?M*VCN =!2n<
gDB*o|!>-392eK4DөGZ ~j
Mч G?g:x܍sPTU 0 1jc 41lCƆ=W9:P2l2+214 heJpˍP9^+kTW]Uq0 7WjF I+Tpy X
b747ė CyʎH)_ f3fV} yPk/$>̮E}Ur6,4vSG$lNv75oC}}I*bֵB`ZE;S# Za?m5(kLIW>M/q:MM)x 22)S}iGY*n B_aNa9VR--MfşC"dQ{XZbۙ;ΫT*_gؗ> *a6v؎^x =Dx푖\52݂91jA,8 MoY- ȷ`MmI% sdGGֳDk"6M,Q1d(T>1V gw}VMOm ]՞ g!msQ\iB0Pţo+ޯG 9~C&>,J䦥r)A
kR[
*0c²t] IeWo239f-6t`gq' CvHY/yaP">_O8l0 BZH y{.@ Ov2Ȟ )3MTz
MI=ݬF"hHhnOg@pPkhO&JL+p^LFC/m}n6KɇMW&폘Z?/v
ք4{*U)q zg⬇;ߊhj 4pɌ
:;1ΌWL
5GG+n_aU4gD&!m3_P$;Md 0)ޞu:g5`gQCeAg٪-/Qy6 !@o+άmk.*e;4l^5w
Sp0ER@H
3ZWky*Dk\e ͓rbOU7a< &85f3Ycτ18h Y>+rA)_ S6FUɢLh\yYXpjz`InRK9 -ϭ
XdxGG74d5DγoO
>_2SBƖΦx=VBkO/') ы/LnZaӄb \-]1ܺ*zm ] w~ϷTn$7A }Z XEtἬp>D|cEAۢSF̨G4vCT/kGϥjԖ|#b>Mऎ"? Uxn¿S8>,CxjX! Qb ӆDzN'^ ;"mrZ Yxhi<BUsuQX,XH1'Sq`SOGArvnB"~%ʣ9z`Hz"g̾bx˺Eí#hA8hqj//ILߴ mfb{7xϢVt#Cb
mՖB\=$mӐP?*ݐ/ pzc.qdކ / 9)WC?u;~]8G gu,d%?[EUb NS+VBk9XmHw Օ>`ukVi'azNXPt=x9;u^%K*9^J|{ e{|HAM2=(tӸ%=mɑHcӸ 0>`KJrɢ?&:m97$ XT,d9dQQޝi| g~bn=AeBEA ߩzKNrД2Kx~aDQ [y5AtO N
.;'V
Krx%g(5o%ݥ\>;=+OYDFy9'Y.t:6ä u#r=ʘk*
gvx̽}b̓`a'H۹~L}@
~$Ѕs
&_D226 zmD `Ta6
k%^+>Q/ aX#G . _A&31CdO< 0Б9%F"h;qfRR=B,|4l%0P` .sn&x Xws4Fyg,cocJe7ph(܆gHy9iKK8G\3lci'L9/NJh$/} r&3$$n>3z<3Y*_]OEBs,`a aaʕy~ @sJSq]-D͊Vn"QMvP=Sm