libjasper7-32bit-4.2.8-150600.4.5.1<>,(ip9|<E>QAkYY<*%ЩΑbF, h(/ڤou·?mtT / =FT@Rd /xI\NwEZEnR78iKW* ƒX!IL[@Dfx͖;Zw zuo_;ౄ4s^5.t2nl@>DșbkPB#|/$~>w@?w0d & 8 4]cj|     ,4pi(8B9B: B>tGtHt It(Xt,Yt8\t`]th^tbtcuRdueufuluuuvuwvxvyvvvvw,Clibjasper7-32bit4.2.8150600.4.5.1JPEG-2000 libraryThis package contains libjasper, a library implementing the JPEG-2000 image compression standard Part 1.ih01-ch3cSUSE Linux Enterprise 15SUSE LLC JasPer-2.0https://www.suse.com/Productivity/Graphics/Convertorshttps://jasper-software.github.io/jasperlinuxx86_64/sbin/ldconfigii1841ba4162d80b390fe55d6f6be53a575ca5c330536ab710dc5ac8e512ccdc9elibjasper.so.7.0.0rootrootrootrootjasper-4.2.8-150600.4.5.1.src.rpmlibjasper.so.7libjasper7-32bitlibjasper7-32bit(x86-32)@@@@@@@@@@@@@@@@    /bin/shld-linux.so.2ld-linux.so.2(GLIBC_2.3)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.34)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libjpeg.so.8libjpeg.so.8(LIBJPEG_8.0)libm.so.6libm.so.6(GLIBC_2.0)libm.so.6(GLIBC_2.29)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3hChhg@f,f P@eCeԔ@e@e@eg'eGeGcgc$e@b@bUbb1@b D@b D@b@b a}aS@`}p`}p`a@`S@`B@`!'_@_j_|\@_k8_i@_V _ @^p]\@\\|\@Z@Z@Yf@YdYdX@Xg@XX~@XO@XZnXOX=XX V@VVUVT7T@T@mvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.comwbauer@tmo.atmvetter@suse.commvetter@suse.commvetter@suse.comkieltux@gmail.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.commvetter@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comsbrabec@suse.comfstrba@suse.comfstrba@suse.comjengelh@inai.defstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.combadshah400@gmail.comnadvornik@suse.comnadvornik@suse.comnadvornik@suse.com- Update to 4.2.8: * Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (#402, #403) bsc#1247901 (CVE-2025-8837)- Update to 4.2.7: * Added some missing range checking on several coding parameters in the JPC encoder (#401) bsc#1247902 (CVE-2025-8836)- Update to 4.2.6: * Added a check for a missing color component in the jas_image_chclrspc function (#400) bsc#1247904 (CVE-2025-8835). * Fixed a minor build problem related to the use of -Wstrict-prototypes with Clang.- Update to 4.2.5: * Made a change to a configuration header file in order to avoid undesirable compiler warnings when JasPer is used in C++ code (#393).- Update to 4.2.4: * Added some missing checks to the jas_heic_decode function in the HEIC codec (#383).- Update to 4.2.3: * Added a missing check in the JPC codec (#381) bsc#1223155 (CVE-2024-31744)- Update to 4.2.2: * Fix minor build issue (#374).- Update to 4.2.1: * Fix a build problem for the DJGPP/MS-DOS environment (#372).- Update to 4.2.0: * Add the JAS_PACKAGING option to the CMake build in an attempt to allow easier control over rpath settings by packagers of JasPer. * Remove a number of obsolete scripts. * Make some cosmetic changes to the code for the JPC codec in order to improve readability (#371). * Fix a portability bug related to threads/atomics. * Replace some lingering uses of strtok in the JPC coder with jas_strtok, since the use of strtok is problematic in multithreading contexts.- Update to 4.1.2: * Fix invalid memory write bug (#367) bsc#1218802 (CVE-2023-51257). * Fix missing range check in the JPC encoder (#368).- Update to 4.1.1: * Disallow in-source builds by default #364 * Fix a potential integer overflow problem in the jas_get_total_mem_size function (for the Windows platform) #363- Update to 4.1.0: * Add support for building several JasPer application programs for WebAssembly target with WASI support.- Update to 4.0.1: * Fix integer overflow bug in PNM decoder (#353). * Fix a few minor build issues.- Update to 4.0.0: * Improve static linking (##336). * Fix path relocation in mingw environment (#335). * Improve logging and build scripts. * Improve JPEG-2000 conformance test results. * Enable PIC by default. * Fix memory leaks in function cmdopts_parse (#332) (CVE-2022-2963). * imgcmp: + Add quiet (-q) option. + Add debug-level option. + Fix memory leak. imginfo: + Add quiet (-q) option. * Fix bug in parsing PGX header. * Fix integer overflow bug (#345) (CVE-2022-40755). - Remove jasper-CVE-2022-2963.patch- security update: * CVE-2022-2963 [bsc#1202642] + jasper-CVE-2022-2963.patch- Update to 3.0.6: * Fix bug in manual deployment script.- Update to 3.0.5: * Fix a minor build issue (#328).- Update to 3.0.4: * Eliminate some bogus calls to abort. * Fix a typo in jas_safeui64_div (#323). * Add some additional logging messages. * Fix the source of a potential compiler warning (#321).- Update to 3.0.3: * Fix some portability issues in a few scripts.- Add back missing Requires to the devel package- Update to 3.0.2: * Fix a build issue that occurs when a cross-compiler is used (e.g., #319).- Update to 3.0.1: * Fix some build/portability issues (e.g., #317, #318). - Drop jasper-cmake-warnings.patch: contained in upstream release- Update to 3.0.0: * Introducing some API changes please refer to the "News" section of the JasPer manuel: https://jasper-software.github.io/jasper-manual * Greatly improve documentation. * Add support for multithreading. * Add some customization points in the library, such as the memory allocator and error logging function. * Add improved memory usage tracking and limiting. * Add experimental partial encoding/decoding support for the HEIC format. * Fix some longstanding issues in the JasPer I/O streams API. * Fix many bugs (e.g., #305, #307, #308, #309, #312, #314, and many others not associated with any issue numbers). - Remove jasper-freeglut.patch: not needed anymore - Add jasper-cmake-warnings.patch: fix cmake warnings - Remove legacy provides/obsoletes related to sle11 and bsc#437293- Add jasper-freeglut.patch, fixes freeglut detection and linking - Run spec-cleaner - Change license from SUSE-Public-Domain to JasPer-2.0 - Cleanup docdir, only package the html and pdf docs and not the sources- Update to 2.0.33: * Fix a JP2/JPC decoder bug (#291) * Fix a build issue impacting some platforms (#296)- Update to 2.0.32: * Between 2.0.29 and 2.0.32 were only experiments with GitHub Actions- Update to 2.0.29: * Loosen some overly tight restrictions on JP2 codestreams, which caused some valid codestreams to be rejected. (#289)- Update to 2.0.28: * Fix potential null pointer dereference in the JP2/JPC decoder. (#269) (CVE-2021-3443) bsc#1184798 * Fix ignoring of JAS_STREAM_FILEOBJ_NOCLOSE at stream close time. (#286) * Fix integral type sizing problem in JP2 codec. (#284)- Update to 2.0.27: * Check for an image containing no samples in the PGX decoder. (#271, #272, #273, #274, #275, #276, #281) * Check for dimensions of zero in the JPC and JPEG decoders. * Fix an arguably incorrect type for an integer literal in the PGX decoder. (#270) * Check for an invalid component reference in the JP2 decoder. (#269) * Check on integer size in JP2 decoder. (#278)- Update to 2.0.26: * Fix JP2 decoder bug that can cause a null pointer dereference for some invalid CDEF boxes. (#268) (CVE-2021-3467) bsc#1184757- Update to 2.0.25: * Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. (#264, #265) This fix is associated with CVE-2021-26926 bsc#1182105 and bsc#1182104 CVE-2021-26927. * Fix wrong return value under some compilers (#260) * Fix bsc#1181483 CVE-2021-3272 heap buffer overflow in jp2_decode (#259)- Update to 2.0.24: * Add JAS_VERSION_MAJOR, JAS_VERSION_MINOR, JAS_VERSION_PATCH for easier access to the JasPer version. * Fixes stack overflow bug on Windows, where variable-length arrays are not available. (#256)- Update to 2.0.23: * Fix CVE-2020-27828, heap-overflow in cp_create() in jpc_enc.c (#252) bsc#1179748- Update to 2.0.22: * Update manual * Remove JPEG dummy codec * Fix test suite build failure regarding disabled MIF codec (#249) * Fix OpenGL/glut detection (#247) - Remove jasper-2.0.21-glut.patch: upstreamed- Add jasper-2.0.21-glut.patch: Fix glut.h detection See https://github.com/jasper-software/jasper/issues/247- Update to 2.0.21: * Fix ZDI-15-529 https://github.com/jasper-software/jasper/pull/245 * Fix CVE-2018-19541 in decoder https://github.com/jasper-software/jasper/pull/244- Update to 2.0.20: * Fixed several ISO/IEC 15444-4 conformance bugs * Fixed new variant of CVE-2016-9398 * Disabled the MIF codec by default for security reasons (but it is still included in the library); in a future release, the MIF codec may also be excluded from the library by default * Added documentation for the I/O streams library API * Improved adherance to specification - Move to GitHub repo https://github.com/jasper-software/jasper - Update URL to https://jasper-software.github.io/jasper- Update to 2.0.19: * CVE-2021-27845 bsc#1188437 https://github.com/mdadams/jasper/issues/194 (part 1) * Fix CVE-2018-9154 https://github.com/jasper-software/jasper/issues/215 https://github.com/jasper-software/jasper/issues/166 https://github.com/jasper-software/jasper/issues/175 https://github.com/jasper-maint/jasper/issues/8 * Fix CVE-2018-19541 https://github.com/jasper-software/jasper/pull/199 https://github.com/jasper-maint/jasper/issues/6 * Fix CVE-2016-9399 bsc#1010980, CVE-2017-13751 https://github.com/jasper-maint/jasper/issues/1 * Fix CVE-2018-19540 https://github.com/jasper-software/jasper/issues/182 https://github.com/jasper-maint/jasper/issues/22 * Fix CVE-2018-9055 https://github.com/jasper-maint/jasper/issues/9 * Fix CVE-2017-13748 https://github.com/jasper-software/jasper/issues/168 * Fix CVE-2017-5503 bsc#1020456, CVE-2017-5504 bsc#1020458, CVE-2017-5505 bsc#1020460 https://github.com/jasper-maint/jasper/issues/3 https://github.com/jasper-maint/jasper/issues/4 https://github.com/jasper-maint/jasper/issues/5 https://github.com/jasper-software/jasper/issues/88 https://github.com/jasper-software/jasper/issues/89 https://github.com/jasper-software/jasper/issues/90 * Fix CVE-2018-9252 bsc#1088278 https://github.com/jasper-maint/jasper/issues/16 * Fix CVE-2018-19139 bsc#1115637 https://github.com/jasper-maint/jasper/issues/14 * Fix CVE-2018-19543 bsc#1117328, CVE-2017-9782 bsc#1045450 https://github.com/jasper-maint/jasper/issues/13 https://github.com/jasper-maint/jasper/issues/18 https://github.com/jasper-software/jasper/issues/140 https://github.com/jasper-software/jasper/issues/182 * Fix CVE-2018-20570 bsc#1120807 https://github.com/jasper-maint/jasper/issues/11 https://github.com/jasper-software/jasper/issues/191 * Fix CVE-2018-20622 bsc#1120805 https://github.com/jasper-maint/jasper/issues/12 https://github.com/jasper-software/jasper/issues/193 * Fix CVE-2016-9398 bsc#1010979 https://github.com/jasper-maint/jasper/issues/10 * Fix CVE-2017-14132 bsc#1057152 https://github.com/jasper-maint/jasper/issues/17 * Fix CVE-2017-5499 bsc#1020451 https://github.com/jasper-maint/jasper/issues/2 https://github.com/jasper-software/jasper/issues/63 * Fix CVE-2018-18873 bsc#1114498 https://github.com/jasper-maint/jasper/issues/15 https://github.com/jasper-software/jasper/issues/184 * Fix https://github.com/jasper-software/jasper/issues/207 * Fix https://github.com/jasper-software/jasper/issues/194 part 1 * Fix CVE-2017-13750 https://github.com/jasper-software/jasper/issues/165 https://github.com/jasper-software/jasper/issues/174 * New option -DJAS_ENABLE_HIDDEN=true to not export internal symbols in the public symbol table * Fix various memory leaks * Plenty of code cleanups, and performance improvements - Remove because contained in upstream: * jasper-CVE-2016-9398.patch * jasper-CVE-2018-19540.patch * jasper-CVE-2018-19541.patch * jasper-CVE-2018-19542.patch * jasper-CVE-2018-9055.patch * jasper-CVE-2018-9154.patch- bsc#1092115 CVE-2018-9154: Fix possible denial of service Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()- bsc#1117507 CVE-2018-19541: Properly fix heap based overread in jas_image_depalettize. Original fix caused segfaults. Update jasper-CVE-2018-19541.patch- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1 - bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize Add jasper-CVE-2018-19541.patch: Check number of lutents- Update to 2.0.16: * Fix assertion failure JPC_NOMINALGAIN (CVE-2016-9396) (#50) bsc#1010783 * Fix build on Windows 10 (#162) * Improve README * Fix build with CMake 2.x * Add missing dereference operators (#178, #157) * Check data in jas_image (CVE-2018-19539) (#196) - Remove because contained in new release: * jasper-CVE-2018-19539.patch * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch * Remove 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch - Run spec-cleaner- bsc#1117505 CVE-2018-19542: * Add jasper-CVE-2018-19542.patch- bsc#1117511 CVE-2018-19539: * Add jasper-CVE-2018-19539.patch- Added patch: * jasper-CVE-2018-9055.patch + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.- Upgrade to 2.0.14 * Soname and package name change libjasper1 to libjasper4 * Security fixes: + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c - Removed patches: * jasper-1.900.1-uninitialized.patch + not needed any more * jasper-CVE-2016-10251.patch * jasper-CVE-2016-8654.patch * jasper-CVE-2016-9262.patch * jasper-CVE-2016-9395.patch * jasper-CVE-2016-9560.patch * jasper-CVE-2016-9583.patch * jasper-CVE-2016-9591.patch * jasper-CVE-2016-9600.patch * jasper-CVE-2017-1000050.patch * jasper-CVE-2017-5498.patch * jasper-CVE-2017-6850.patch + Fixed upstream - Added patches: * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch + fix assertion failure JPC_NOMINALGAIN() which can be caused by a crafted JP2 file. * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch + allow JasPer to be build with CMake 2.x as well as CMake 3.x.- Other bugs fixed by existing patches: * jasper-CVE-2016-9395.patch - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t * jas_seq2d_create(int, int, int, int): Assertion `xstart <= xend && ystart <= yend' - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void calcstepsizes(uint_fast16_t, int, uint_fast16_t *): Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 - ((bandno > 0) ? ((bandno + 2) / 3) : (0)))) & (~0x1f))' failed. - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int jpc_pi_nextrpcl(jpc_pi_t *): Assertion `pi->prcno pirlvl->numprcs' failed. - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t * jas_seq2d_create(int, int, int, int): Assertion `xstart <= xend && ystart <= yend' failed. - Other bugs fixed in current version: * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t * jas_seq2d_create(int, int, int, int): Assertion `xstart <= xend && ystart <= yend' failed. * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion `n >= 0 && n < 32' failed. * bsc#1010968, CVE-2016-9389: Assertion `((c1)->numcols_) == numcols && ((c2)->numcols_) == numcols' failed. * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *): Assertion `numcolors <= 256' failed. * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix<= yend' failed.- Added patch: * jasper-CVE-2016-9262.patch + Fix for Multiple overflow vulnerabilities leading to use after free (bsc#1009994, CVE-2016-9262)- Added patch: * jasper-CVE-2017-1000050.patch + Upstream fix for NULL Pointer Dereference jp2_encode (bsc#1047958, CVE-2017-1000050)- Modified patch: * jasper-CVE-2016-9583.patch + integrate upstream change 99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null pointer dereferencing crash.- Added patches: * jasper-CVE-2016-9583.patch - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400, CVE-2016-9583) * jasper-CVE-2017-6850.patch - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868, CVE-2017-6850)- Added patches: * jasper-CVE-2017-5498.patch - Upstream changes putting braces and belts around CVE-2017-5498, bsc#1020353, left-shift undefined behaviour * jasper-CVE-2016-9600.patch - Upstream fix for "Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600, bsc#1018088)- Added patch: * jasper-CVE-2016-10251.patch - Upstream fix for bsc#1029497, CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)- Add -D_BSD_SOURCE to fix redefinition of system types in jas_config.h and breakage in ppc64le, s390 and s390x (bsc#1028070).- Added patch: * jasper-CVE-2016-9591.patch - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy- Added patches: * jasper-CVE-2016-8654.patch - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec * jasper-CVE-2016-9395.patch - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion 'xstart <= xend && ystart <= yend' failed * jasper-CVE-2016-9398.patch - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed * jasper-CVE-2016-9560.patch - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)- Update summaries. Use %_smp_mflags for parallel build.- Updated to bugfix release 1.900.14 * Security fixes + bsc#941919, CVE-2015-5203 + bsc#1006591, CVE-2016-8880 + bsc#1006593, CVE-2016-8881 + bsc#1006597, CVE-2016-8882 + bsc#1006598, CVE-2016-8883 + bsc#1007009, CVE-2016-8884, CVE-2016-8885 + bsc#1006599, CVE-2016-8886 + bsc#1006836, bsc#1006839, CVE-2016-8887 * Changes + Add another data file for testing (Michael Adams) + Ensure that not all tiles lie outside the image area (Michael Adams) + Added a note on sanitizer options (Michael Adams) + Added a simple test script (Michael Adams) + Added an --enable-memory-limit configure option (Michael Adams) + Manually merged and edited a few changes from Bob Friesenhahn (GraphicsMagick Maintainer) for Windows (Michael Adams) + Added some new mostly small image files (many of which are corrupt/invalid) that are useful for testing purposes (Michael Adams) + The debugging function jpc_dec_dump did not consider the case that a band can have a null data pointer (when a band contains no samples). This caused a null pointer to be dereferenced (Michael Adams) + Changed the JPC bitstream code to more gracefully handle a request for a larger sized integer than what can be handled (i.e., return with an error instead of failing an assert). (Michael Adams) + The component domains must be the same for the ICT/RCT in the JPC codec. This was previously enforced with an assertion. Now, it is handled in a more graceful manner (Michael Adams) + Fixed a few bugs in the RAS encoder and decoder where errors were tested with assertions instead of being gracefully handled (Michael Adams)- Updated to bugfix release 1.900.13 * Changes + Fixed another problem with incorrect cleanup of JP2 box data upon error. (Michael Adams) + Fixed another integer overflow problem. (Michael Adams) + Replaced the remaining left and right shifts in the QMFB/MCT code that can result in undefined behavior (due to shifting negative values) with call to inline functions. These functions collect all of the undefined behavior in one place and also allow code sanitizers to ignore this ugliness (via function attributes). (Michael Adams) + Fixed a bug in the row/column split operations for QMFBs. (Michael Adams) + Made the PNM decoder more gracefully handle the not-fully- supported feature of signed sample data. (Michael Adams) + The PNM decoder did not gracefully handle an invalid magic number in the PNM header. (Michael Adams) + Fixed a MIF decoder bug. (Michael Adams) + The imginfo command did not correctly handle an image with zero components. (Michael Adams) + Fixed an integer overflow problem. (Michael Adams) + A new experimental memory allocator has been introduced. The allocator is experimental in the sense that its API is not considered stable and the allocator may change or disappear entirely in future versions of the code. This new allocator tracks how much memory is being used by jas_malloc and friends. A maximum upper bound on the memory usage can be set via the experimental API provided and a default value can be set at build time as well. Such functionality may be useful in run-time environments where the user wants to be able to limit the amount of memory used by JasPer. This allocator is not used by default. (Michael Adams) + Changed the configure setup so that if GCC is used warnings and pedantic errors are enabled. (Michael Adams) + Fixed a bug that resulted in the destruction of JP2 box data that had never been constructed in the first place. (Michael Adams) + The memory stream interface allows for a buffer size of zero. The case of a zero-sized buffer was not handled correctly, as it could lead to a double free (bsc#1005242, CVE-2016-8693). (Michael Adams) + Fixed a small memory leak for CRG marker segments. (Michael Adams) + Fixed a problem with a null pointer dereference in the BMP decoder. (Michael Adams) + Introduced jas_fast32_asl, jas_fast32_asr, and friends in order to pull all undefined behavior for left and right shift of (negative) integers into a small number of places and provide a means to have UBSAN ignore this ugliness. (Michael Adams) + Fixed an integral type promotion problem by adding a JAS_CAST. Modified the jpc_tsfb_synthesize function so that it will be a noop for an empty sequence (in order to avoid dereferencing a null pointer). (Michael Adams) + Added some extra debugging log messages for memory allocation/deallocation. (Michael Adams) + The RCT and ICT require at least three components. Previously, this was enforced with an assertion. Now, the assertion has been replaced with a proper error check. (Michael Adams) + The member (pi) in tiles was not properly initialized. This is now corrected. Also, each tile is now only cleaned up once. (Michael Adams) + Initialize uninitialized variable. (Michael Adams) + Added some options to configure for enabling various code sanitizers. (Michael Adams) + Added some range checks on parameters in some JPC marker segments. (Michael Adams) + Fixed potential integer overflow problem. (Michael Adams) + Added some functions for safe integer arithmetic (for size_t) in jas_math.h. (Michael Adams) + Fixed some indentation issues. (Michael Adams) + Converted a few raw mallocs to use jas_alloc2. Added code in the jas_* memory allocation/deallocation functions to generate debugging log messages. Only disable JAS_DBGLOG message if NDEBUG is defined. (Michael Adams) + Added more error/log messages for debugging in the JPEG decoder. (Michael Adams) + Added some extra log messages for debugging. Added check of value returned by jas_matrix_create. (Michael Adams) + Applied fix for VPATH builds (Michael Adams) + Did some configure.ac cleanup (Michael Adams) + Fixed 'inline' for older version of Visual Studio. (dirk) + Fix a potential double fclose of a FILE* in the JPEG decoder. (Michael Adams) + Changed jas_types.h to assume that header files required by the C99 standard are present. (Michael Adams) + Incorporated changes from patch jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael Adams) + Incorporated changes from patch jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch (Michael Adams) + Incorporated changes from patch jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams) + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch (Michael Adams) + Fixed memory leak in jiv. (Michael Adams) + Fixed a sanitizer failure in the BMP codec (bsc#1005084, CVE-2016-8690). Also, added a --debug-level command line option to the imginfo command for debugging purposes. (Michael Adams) + Added some missing type casts to ensure promotion to the correct unsigned type to avoid undefined behavior (and stop warnings from USAN). (Michael Adams) + Fixed a linking problem with newer versions of GCC. (Michael Adams) + Changed --enable-debug configure option to enable some GCC sanitizers. (Michael Adams) + Added range check on XRsiz and YRsiz fields of SIZ marker segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael Adams) + At many places in the code, jas_malloc or jas_recalloc was being invoked with the size argument being computed in a manner that would not allow integer overflow to be detected. Now, these places in the code have been modified to use special-purpose memory allocation functions (e.g., jas_alloc2, jas_alloc3, jas_realloc2) that check for overflow. (Michael Adams) + Add fixes for CVE-2014-8137. (Michael Adams) + Added fix for CVE-2016-2089. (Michael Adams) + Moved abort into default case of switch statement. (Michael Adams) + Remove auto-generated file aclocal.m4 from repository. (Michael Adams) + Removed HAVE_VLA stuff from various configuration and build files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake files (since INCLUDES is deprecated). (Michael Adams) + 1.701.0-GL (Richard Hughes) + pkgconfig (Richard Hughes) + Coverity-UNREACHABLE (Richard Hughes) + CVE-2016-1867 (Richard Hughes) + CVE-2014-9029 (Richard Hughes) + CVE-2014-8158 (Richard Hughes) + CVE-2014-8157 (Richard Hughes) + CVE-2014-8138 (Richard Hughes) + CVE-2015-5221 (Richard Hughes) + CVE-2016-2116 (Richard Hughes) + Coverity-FORWARD_NULL (Richard Hughes) + jpc_dec.c (Richard Hughes) + Coverity-CHECKED_RETURN (Richard Hughes) + CVE-2016-1577 (Richard Hughes) + Coverity-UNUSED_VALUE (Richard Hughes) + Coverity-BAD_SIZEOF (Richard Hughes) + CVE-2008-3522 (Richard Hughes) - Removed patches: * jasper-1.900.1-bug258253.patch * jasper-1.900.1-bug392410.patch * jasper-1.900.1-no-undef-true-false.patch * jasper-1.900.1-bug725758.patch * jasper-overflow-bnc906364.patch * jasper-CVE-2014-8137.patch * jasper-CVE-2014-8138.patch * jasper-CVE-2014-8157.patch * jasper-CVE-2014-8158.patch * jasper-jpc_dec.patch * jasper-CVE-2016-1867.patch * jasper-CVE-2016-2089.patch + Fixed upstream - Force -std=c99, since the upstream sources assume C99- Modified patch * jasper-CVE-2016-2089.patch + Use the new version of patch from https://bugzilla.redhat.com/show_bug.cgi?id=1302636 with more targetted checks. - Version the Obsoletes/Provides so that the package does not obsolete itself- Add jasper-CVE-2016-2089.patch * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)- Add jasper-CVE-2016-1867.patch * CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)- Add jasper-jpc_dec.patch to fix failure when manipulating images with 4 component color using reversible color translation (deb#469786); patch taken from Fedora.- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837) + jasper-CVE-2014-8157.patch + jasper-CVE-2014-8158.patch- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475) + jasper-CVE-2014-8137.patch + jasper-CVE-2014-8138.patch- fixed possible overflow CVE-2014-9029 (bnc#906364) + jasper-overflow-bnc906364.patch/bin/sh4.2.8-150600.4.5.14.2.8-150600.4.5.1libjasper.so.7libjasper.so.7.0.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:41419/SUSE_SLE-15-SP6_Update/e567bb653628089eeb7b8a97a2eee001-jasper.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7854fa896c91dc9d1f79267335cdfe4c7d639e5d, strippedPRRRR RR RRR R RRR RRRutf-84f8f037254e33fb0ad33eda7be7fedf30fc5a698d089b561a8f765df294223a3? 7zXZ !t/ঀm]"k%GQ R$Q<ZSs|x6c{(g8+,$6fQO|ܵM$J|`UVdl5gVIa܎"<23<:O Ԍ$IyӉitCxI*8V>>N8潾7Eg 48o|^]J qu$ݐn +tn ,W8tvca>G|ng/v2p-پܭǗ;>߬##0qj"%[s,ٛ8-bn5>E 7]"J٨,Lfa__L_IDY<_>4k['K% h5%FQ{_94|$4()7g'z,"-$#lGx-`/ Q+`: u6 ^n+H[!LsaJ8R/ 8TiJFc=|TvnQc)C6oW0zh@R/Y9Fw?85F}ٟ4 T#'G3q!xTdx{ݨ\%-[ oQԧjn?jd6qqA㴟>b/C߹q*+Fy*ak(L\RItG̺i}^Yl ($Rl#"Bo}V< 3LVXo7{W"])zD㕋V]>!UsHFrϤnC4,s;faCEo".vۤdp"EBYCVkh&%=v=fmŲ B$M:h-)6A*WϨX$4#?S 4D.nD;+W u'PV nNigDM%+ΪaA{yrWJ!JiXuI2":05YX NtP,_H%Xԡ%*L۹EUpsaCA/]Q&>#SaYܝ CSÛ,й̴mCX-OWSդKÞ>ڃџ„[ D"1l?1wizPy@z0mWeD7!<@S7DU(ErhB Èp1+ x4LJƓ<ÓUm Jofz*qo7~cfsM6Wm] ƍ2.§;osjcˁWTy*i+ ɟi7=TPh9bh39ѓ^ldQ])|N+jzI;ń8]eIKU&]DZ";:4qO$PM>dx>M, ꦍ2Զ(^}ȩIVlq"6֬Y,WiMp:#&#xc y`veScS<@WΦE^\,Lj/Yv<"4`@vHk<1gK5)J ^l,W.{5SL jSQ, Y۽+qިs6jF{y= Pe`uCgBz&`<8C:hg a4TDI}_CsQ8DnC[vU.E%|ȗ>BP Gm39FLSINl* m/xkNJ"BLĿ/%tU+e6Y#;>ܦ ^zo+SG>Q#\CJ엝&2[խ:?sY \gjDFٌ8)W xHXWJaw[uXj>My&c"q}VEЏ0M4R;s Ra a؝9⮵֕p ة>4M&?HɈK5Џ Hl>v+fYԧ@@0fgDWݘ9vO=&dyb"3N9j=ZW&֕{і 8..R8ė"L6E^ lI=Ŏ 􇢾!/\(F:VGIS M%+k bvx_uF4WJT\\wUi bFf#MaS1 "5Õ"[_Sm 'qobN3F]P/@LC,R61C;*Hٵ 뮈Z& T[Ǭ=BJ!Y/90`f JbD4-6s+ O:[]3sq@O\QY:c3N_%KMzU϶蝶*tltN+0^|kY/Էs*I^@`Cdt4LgbPJ2yǴسv.~ebk YOPJ+XK;ۃ^HY_'"V-͈GXo-.}lDޏsR!MS NpEV w=@+-_-5ɪy4 psRZ;\m 2O~v݄'HIxEǸM$sV(Y@G d~Z0g4nJh X(NYiJj:ڂ.#nHVEg.YͭFY5RvFv>]ÃEIQիZ9_*I<3(-Ѻt|,t B :[AjIȪ%شWɽyBRsFAerܾЬ]@o%ED?Fۈݻ%0وrx\F[ 7tNު愝}] JWhͰ J0aJG Yy]xG'7;SUN/XV5b^KiB ةnAɳTi VXEt$ ^(m> !٪5fj l:&D}~*] A@jÆ,;+}tl**'ߊ, $j;W*7'yNk3FLeL 'ޛ$Mx"Džð] dj -yBFʅ8J JO -q~'ڑ66??ߏXݧ]X6D%"U<5QNoVN,MyNC>4G-,c}1'b#dhRضA .~}!-^tI~9fMO(EG1Ez ig`Vn Sy9OFgihQv \W$((tF6`?Z398 L-NW5Ȧ8U*t_ewn-'~fcn_wl;}D5 0}:eVr:xD3m zVȃqa/Sg"_ͅ 6W)5UpA vF=J:!(O.+xϚHd&[v V>y唜ztV88|[|ˠQ)[G#*'"c3$'kWuY?6|cĠ^앂 zӌVݝwJ\`ćL7u ,-L;@*{_?Aụ8o<=bOS%N?i|VBWq̉ O57]ASt<2?6/LԐB__LvIF{Mqmɧ,hr|.ak}3" t >wb#Biժޟ5v?̌˝\CE ݕ,2 io=Q϶@ݸug,`3JD-ws; !zA!H]nK 4dQ {KDkX!hI!uj?x(ОK?^_g@o00 WԬ>3UЯse&Jߙ$8hLBT^x‹?:B;*TV&j ]3 <\ΰv&|yV'pV.ǝHS趫FZonfwo%~ƌ*I?+7ڝTAv1?h邍~?cV &G ^ߎZ>+wtV waPȻmR} CmyAu]41yNDqHgBx)zέg]*,ǀj`W&oQF_phTOtɵ o/28;$N#wp-#q x5c'/9N'%*2'c ph޿jp b~PUųB˖I ioU2,ü=~QV3?&RSOU8;!L.2u:fB, 'LH6yXŒiS MEU!|n_2}ˡE~GoOYqAy%O6UA/7oB @on6WD@ߙ>e3ѵei;i' jF^[ ?8U2 1,X-q tGnzj7!egU0o(D$=\0cRHF]jZZ6oEx!f\w]r;MRV;/s߽vWe6̵pzl5Z K:٭QOۊ .=:pj&9ɚ?`P9(gJCc/\ Umuh1/uY1Eˌ9PH82_!A^f u~ii>> ׅDrTRi53r G,yfiv[zUff{U5n[8,A͑ǗdLȸ\ #bWL*#`=צWju5lGBCl!ZFy?o7r=*F /l pkY2)6eCޤA:ldmAoy7b6suͫu҇=ާ Ž̓˧oeD5h'c*xҒS](IN-+qpM;*^$YfQ}\grg(Lc]ӎkb6._l:޾d@1cfo/jJ&.ms, X~ϼi(bw=g㭘]uM/iۅvJe˼=e@^u^Ӭy+x)ooxë.m}V5QI+$1X*`S<0!&_0_cz:@>|6t ;N <( 4 %b2e$eE9ff'dv~fv.gtآZm gd{}C|<F }SB{q vLAF <1Z*BxcفU5`wALDh>e0̗F7ZYܺxӢ? VIZex~՗&8)/nph, q -VL|Ntjbi-Ϸ#WY)`ZKSx#4ZRp'՝Z{fb5M3s{v,p^|.xr~*@MAlinJSY]J33)"(Zuq"nT8"9 u;EA>fYfKHH?xؿyӺt_ҶSSU@ MmhM"IzJ|>մѓ CI(q@,6KĪctbE10D`U}Cc}G[:WDUHvfmbɨv>.>ԯ۝K%5쿞61}/E-JGo.8oU|+IMH6M^ ꟈy;*s9 LJR4l1Q)3̬s_Y}q30mei=kexIqG?GK4t"}N._%uCyy6v!eЈ)1q6,C:bJy.*ؒUCnt LΫ/)mmvQ|a{ue"6FuFJrH1(v7ꥮ~O1#n7?ۗ-0f!N\;cC/Wjsoeﮫ ?V"Mx:ډ(L_Ĩ&!=yC04je >-G(]1N0cjVS7d8'+=*.f  #A[4f}ɀ_f(]Z6}/v,iab8] ]e%,P_`D7#*}O_1YoSM𐽔l+Iv;FHطūF=:/uhE3&T/w,jH"9p5Uk*o}8MZ, 3Uw#sZt'b [#WRڂ%IshЈ,悒ELUU;R;"KsY$2\Tw^7&t Իo{ϱ`8oVo?{ |zy7ѐ-'X$zvw<"WŸA '$qޜw͌!pUsOawp7{hcJ=C'9wZ4kmhޠAaO>tFH{jPp"ZطE2z=bnQIK즺ߛ ʴXG("EN.Ӑ9'L @ Ƙ&QSFUgY,i(SPOآ\σj63h-I"40۴ |_%HSz jT7CF&@4(MK/=rR! e#djbY`Zvnq"qպ52j):korjU3%iQn( D/:N1 Ck㯬$7# Ħ7Kө?q=Tv ,zdb:eȒp Njy[@)y^z-y۝GMqU>dw}ci^.~ٲ\:k/asMRX*C*!8"h<DcZV*{'e=V# Uz@i" {`L?X8+ݎ!`zxҪznh|Pi2yw$o7n)fO#&R}!1GF*HcФg%H.3`}r+I0p)V=_ <қ~`v*|~Q (6OoM,kf= eqUh~c 9 >96^$W~:m?f12Ě[1uqT,AY׳DP@,.Ѥ`|)84fWFTaƷQwoBж4(mpWq-(ٲv{M'b)w"J'_]aG@v\#S)aMQZ ".r9P/f | d 5(G- w30Ȇ$&\E~hS'edGv5xİ Sa46q~h.wgМM^][Jv|VFq~ vΉHA s^1@Хs@:psBm=6}Lɨ2}1JjXZ^x/2е9&RVx*q Xu)FxW2 _`nvq]v K,IތEA~ =z䬩\GJa-Eh||EjݔkW|)/"eβ |zK2딑@T֘6s&fu}|g^!1b 1(ڦk>x{xBI@`mߑpфD<"C0(456}(gĈ[do)W 8 <+] s5bs a=BH2= ^./C"u DVVn2 Πޕ!$GP˶#U~[6W#9!ʯƖ!3Yi{Ԏ{;ڭIC}o l)PKt!@fz֚-3}G ~eUZONv Ӡx`hPRke4Pl|ArT&C0ā {&l*DYշMi'5}JQ^:L"5Tg[y買dnP! "JQة<XzEaƭ}oN>"π, }d'o&cEUa+ #e'@>WِBgDz[q6XPDos9R3ƗDbϋd4 ;>w mӥO6o>?j 㑀jLX<0i+eT_ZqW\Jse5 TqpD5}HqS8–.=󉐰f%{1] ++J)hˍÁ;'w3Zmۥϰ z4\/ g*egM1Q>2iXCu{Dy㝳*vq`j8;'~U> 8Jo`d҃t'(بլMz/[Y3.Glo7*3WwsVٷq I|ԍBS&FU*::[iB7RCSid^ž`R=n^hU( vL}qZ`;tBYOX:kF.Z'QJiG'웥"|P\tC}Q) h3}%/qѡ;9H/șm>AڮP7\V0%ʳng6w V z=87,vwE* qWpu⡞Ab^T4 [$H_YK'x_(߆1[D$ D, .-''V2{5 ČEPvq5KqsVQ SnN}XOjF!S#@G g]I$}B84SAZ {,g%z`fyLx H~Xo/lB2FMڣ$-ǎ2;Erxm!12U9[pLw$GpCM { !8xɸRa|r:P!jXJ}Vy9Q0-9iUn1v3z2PE 6~ՠ#sZDՍ>6J0khis^kDc U')Z*{"Wm☋ӑ-cd@]*aXc^-t𞛵)_$3+6c$ga 鐰s|8;Uŷju-6;#C M·Rrn |.X>%P񈜟T%ѓtdJ㓠 \ Aj[V5hR|S{bUݾv}zğO'Wa&&?=hRDaaҔpŸN Aww2\u(bZ~Ĵ-bƠ84%޵Ri4TjN #"&h #*`Oq)P/3\uАnTSv85G'~N. GP'7-r!ZH~3Xr.UFnRMvF ,f~oX [7nUZH؄沃~.7XحL ȅqW-=(aS kgHB潙ghQ5j6 7-A ^0ME;mR8IBt?RU rx.'z"ۊ],c@T$IhEL?!YI#풢ի( |b-z4LNa AxuX+xp8 a[  :F{|}|?MϛD4v:/^'Ha9cMC?&8{b05TZH@|ynbRMna/`3r "=SM 3cb}tGD2[g`#+{[&͢`F [JP6 coaҍ (ZADٳXTkk"ی#*a?f<~"_W0d0i8H\1r#Sdo.9j'e~>1*?; 6)3q)ԡގEo x 3g9ம2x<\{E >ޜc؆fLů)T&je@|ٿ_蓗W(afK>n@ߞdHDa`X3OPRbU,1;ByV@n{ޱ2  wz/a#b)dŅbУ])aҵ-K0Lp^%i(wr^T֋ٲ#$Z3:6]T/<6/m1`'6W1@qHMv}ttLOY8&0⊺>)ã{No8OULv4Y2^(O8z1@hRI'SK#li>~7p&<8@uaǘ_.Տ&XE&9J!g]NhC3}4uR qlp4j2 !1ct&"DnڟSp.I>LKKd^^7 S dU;þtmB;3->I;zx匉7ĒtyFMyDRLk_o/.N(&WQ*֍u3bl3EvB`Ain6* ;E"R;JA8qn ϥ~wudnP~1۫EP gt ɛAclW4urG2COA4VRp{2>d1YQLddZMjw QO=/u93{0hxP+]µgS*_d;J"KG_%<`yyՙL WٸJ&bR u+/gtqӗ[=iEN$_ܷA/ʶw@ Ʀ \J<\ڒ-&9,Oea#CdKMKOOp=u|RJ-5Ғy$ mesyAqpHVrIřfqLy,'Aɠ H-v?c#TwԎ]qf<z׉+ 3pdݏ*(ޝX^|)K$=_I2F3sACg׸\WqȴAy ZZ@d#=a{ngOW]~jTb>vʟHڨ^@Jscoh) ҰvMZ$?Ez@[ʨU,Q|+ܔK¤vUGa/BkT}F u6BZA(TW sUX!KiB5ڶ z R: ݳ N[|ٽr& 5`)pUpDFr qcѸ=d;*"SH"at.ZLFJ}E˶j~+ThF&l> )#?fC=>I*e'UHV͵p4%plo?TV74s>8b]ܽ |̉KMa?i1Dr'! AR!>2lp8] 4fQb/M 0)xK„ب ͉& Iq4o]9W.nAv^/>BTYaSO#qӒ\)%i. cay YOYd.eў9*!Bq%Xu'+E=*rg$G3UJF;y|`*U=Le%L5 Μu.NJ?3&Cn!j,0ϊck\ ,( a/>kZhph(d1y c,L˱UL^L^( PNn3[]DJZ I5yr0x &)o̬o_ {18 :t/ʘAsw?g"СtNGōgUyEnN _˓W$'(Uaܧȥ86:#T SIMX٣Wu`zٌG/w]P m>$(Ψc/^M̳ GuO!K?}3eҐ0,ʧ: *g[7NAV=C[(BZ2{։'UvgU5`G#c0n, +v9{;y#ِÑ}uA*k/1|ԜKo^uYPQy S WFYoH<#] CK[Xeywԋm fW>@qrB*'[s[*LF)܉[Q) K+.<; ccsJ#7aFX1LJ\Z(cu"AVX@os@ɉDz`ΩH!!Yw0KC~&\N%|Q^i=Ze9T!x Ii%[JD%y:ypol΍Ō(FGnfRP'+jeX5Ud_ 3!3.mLSgΐA⯣AMߜ5I-ǚWe@`5r>@DSH/1ʣB ǵawh |}DIU*6axW.qb\^yIy6Ine`vĚdGOdÛtMCD/'/CrYh.&"QAlʄ cA\Bp'G)$-2QJ) `Y3[ ?jQ飶=U/6T)BϏ)ͣg 䡱Y- G!RS軍@50JLjX{/? 2a\ -ޒh:XbZF Dv8`)E\T[NŸrs:L11dgʐMΩ=?K jxǯ V٢rqTT}`TE&vy}7IDR\6S'UզP\K5ҊlO N6ƿq]2\ ZkU = R^fiesoeL]·˵V5 جR3yT=H"ƖQԎ  cA~B Yr./w_h8&\:T(KT4ZWp\ PB.sa7*֙kWs N#t}!=lhN 1*^pμ tֵ2ߒ`–IJcZ[r0Lb cL'9lӼ!zsZ0!&I:"h!f9:J`e]7+&Dٞݱ!C@ Eny$0`yƯӉg51.:w󅋇l KL"*[?C#ltLPr-* qe4_0o;А(nRSBEEa1Z)^32#Ao0]lVuXr՜/^yY^ʿLWLn=hTR`Կ?4Sr: %֒ݴ?|> H+jܺUfJﰐ_*$KζI֛ܰ<t03m`3(\Sc'ٻ%x蝓Il`e;QοHSt\.cloNbfo!% /KI*jM߶C|kެi#> Kė+åU]YosTodͥn=FR6mZV4m+K;:3\ o]prtY"Bl$FK0C} q1$a5[z5wziEV6o)hC %&:pUAA+ir % msˀndOzr閃Xkc -cPi*,*jms t"/}9SF^0=rb=?u&o ;->1zl&LykeRxSbV٨J =pT < 8Y'c.)W=x?*$ h[`<'įEq&l*4>7ϸtС߮tԁ|XϞCe3zڈɹp:518j8о=gc|=NS )yB3{mChڪb&@n@s J9D1nU괊}XϵQ`CD<Jŏ@oI!9Oa!FBq&s gtQTb o`('C]xoJc*uWN殅Q.i8r#_s,*e!n3OZѥ?S@䨏_}th9dQ%c+YG.A:GXp+t3S`@Lj02" Ibx,ܾaQn%@ :0pߦxxEero?H.=-lCUIK^E.$szԎma %mK}6Bպo,<,CDpWx %p$JNv1F@H 9mA2`cv5a/Gw ̏)ꖽUvB@~ңsO[xl-ʜͅ,g;hdFؚiH-s'Md"5zNvjVW<R$3ZU %Ekha-EGp`wă3fNI 5*L ;vڭٶs3~a҉=Y-L_qcJbԑާVWu=$Tᕧ+-<*(04M7$4\FI.A8s 5X}ꔙE`C g7Y4{׈N(`at[h9G~qCpH אL)ȥ+ve[<)ś-$b0*I >ӧ]2QoI7b2'N`U_\\@J%4''[;fV۫ȵkGsqc!|%*#QE"sKc2YtO$j|O _(#/F%횀d낁P,J5P/(:$#Ɵmz\avڭ$o k#v(g$ AσtX]tW^6 k~T缥%Q;7`TZn+?Edq=Osi_|}:p^yiuŴ#__$SZI鷡=X|b'i0s3/y( D<wO2 Z=Q(@r7 rV)2" {Զ?dm~5P e_>dEtP}垾_g}c (=a _9ӯf|зV|mzkVN78 YSX c=$i20~so`AJțML.6H^QSULr GҬ6}p42IiڝroQnHdI ܠ̈V u;%t>evc8e øWbn0Bi %djo q!|.SqMf<;t˭6VqШ-OcЅJ.,^`xV[^DO |Ԑ,cIo=40Y_Nh* "$ ҍb6z*Md<λ_A2Y.a*w;d굧azI׆ǎII#/&,FtI s~L2}К7<8uh S8y>GXnEc=~X eZf]DxMbfӌ)m\KAPs6sN1YPG3 %v9^;4ȳ2v2$UvJ̻zEEFX_cҨWO۴k7`?t.*ըݦ-/ VkdP"#jyaqЗ Fβ&HdA^nh9hP.f{ ,D}h:§΢^W7:v(%2BZNrGFP-h7z^-8Hh,VKd&>-́V\SN+p:8+ʊaĚR5 aR,3p=cHܔq[ jؖe#{3ϭ,*Ǎc5\dLjcmr/K?A*,x}bc%^r5Gyb,م*xbA}u|eqPB3'Zmc~79E2؆x(kF:T1kD 1U ܇~q>S2 9$J c&H>BGW>ˑ"]V8~o/YML K=pveP- estW~@4Y6&JeU/ e+>Ē>.T"1q}ވx|=aWC%w;CeK^)4sH)f^YKt&d̔$kNyx ԧn9UIK)z!>  LDoko鵟f#  YYNa\(lILMܲ5-SS!(~Q? 1%SEdO|e_&/X2f,DuLol3ێNOaKLD0$ S|In1B!R1.jqSW*T#\^-+XĎj{)?.o=4m80WTBQM2Յ(chSSxr'Fڣ"tjw,`8 i7)N%4#@;ڎ}'vh;AΫW7a+KE N×JWFVu> C;aѓUe.E&f2,?Il֛ 90'n 9a7%3 )agPe?A;v `Yέޞ`L%ⓣe7ev;0L˸ӭ Ff` ZOx6_At@盎39# JDTt(O cu^ hV M`\WHR 1܉U2XFrD6@Jd =[&LO"2LBPӹ2L ђJf^d&.VN.ޖ.[3q[ֿcq?# ?ٝ`1FoN(҈$-+^&ш{ T[;N|∢m(pM EtT.ߜ5:^0S^^|ڙY2c[u<'p3 cfgէ׏LRXf=syZ!OzKX2dfV&WyPL S+H߰^P/BB`h Bo )`72׃7KA_RYbNck',4E,a7qޠ3k%v2:]%יBx.@02a@ԕ6#qQ,BJ׋cj"+WORQ @ijf1@?S5Hx6^­Y BTH[R#*x S6ݼsdֿ?%QVUvť0GlU\F./nFM{_" VَB+w%hX)cd5 eٓ|7w]ɯ3ai`wA e HR!GNTtY%6b"O[ݘlRLO):ߐGEdFS~N\L6xHB4[ /''E)m?1E9ޕ`ӄJS1t(3k" 73m&*r^ر>zMp@^"/j=W  53|AÃB 5W z;ꚝrX3sE(9^x D^ɾJt5D[0G;-󱁀#ZrlXbLTkXcDճ oGz?v%=_2 [xh w |$1zrL3Z] ygRi6׫*8w+-|S͖|ipB,Ω:=O³[wѳ)_?4臵q)^A "T"Cn-]&F'{܉< %8Xrd >0Du/|ޔiL2nItAR6rg JZx1JicFʜkǪ$xp9}h? cpȱp q#a`MIѱ4#cyE~ńIq 6M;U###Dᕟ99/nc1TE:9 y393#2iASfgntzǔn yDP.\WJ.{S=@ pALKE? miC9z#@' K42zPV⒂2И((@m%[kK];{a&fMjl / $S dJ;+x\G -~$pq>}Sߒ p_koF39S.8S_ڊ5=)=LABEǻlL {5%"C!Z6u!D@EpCWvlBRJXmy.zP:ԱVD-XPAKe.8]Po-' 2Ny%k2'u0ɪh=@ o* tC1k!N*K/~߮rp"Fs[雧re-_ TfD^,mUƸF|lV!Fk"w@'SXOe 4yj6m{qL_'=>^=y"ȡZ C)>$O8[[OVgTk_HW9-@rÞ`egVU/3!{{8+#; vcsuRU@?r'Ps>6͆mTUh-4|19[C.,Ryh:0-MLq׋0||lepCx`ș?MmaEd Ãuo%hxRH޹xdFvz4gp2\#`C*w!=u