python-base-32bit-2.7.17-lp151.10.29.1<>,_/=„UcW kDZ$ddb!asq Ƹ| UB)>]z[3{eߜq{ϮJwL9D]ΈUyqx?a}Ȁ/RzމBcbi- Y> C%qx=*zdrwHns~9$77QG墎iA+Fa!"r˕0q =B  >4?$d ) I -DJQ`=T= = H= <= 9= x=l===$$$(8E9E:$UE>cGc=Hd=Ie=XfYf\f4=]g(=^ibj#cjdkvek{fk~lkuk=vl<w8=x,=y  Cpython-base-32bit2.7.17lp151.10.29.1Python Interpreter base packagePython is an interpreted, object-oriented programming language, and is often compared to Tcl, Perl, Scheme, or Java. You can find an overview of Python in the documentation and tutorials included in the python-doc (HTML) or python-doc-pdf (PDF) packages. This package contains all of stand-alone Python files, minus binary modules that would pull in extra dependencies._build770AtopenSUSE Leap 15.1openSUSEPython-2.0http://bugs.opensuse.orgDevelopment/Languages/Pythonhttp://www.python.org/linuxx86_64/sbin/ldconfig- 6F vvtnp8(V$:8R0bT]|KD>>0<k79PJTT78g\ P<BXI'D`8)TX8\)0j @'gt+<gP&`F@Y LTAA큤_____________________________________________________________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-base-2.7.17-lp151.10.29.1.src.rpmpython-base-32bitpython-base-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibbz2.so.1libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libcrypt.so.1libcrypt.so.1(GLIBC_2.0)libm.so.6libm.so.6(GLIBC_2.0)libm.so.6(GLIBC_2.1)libnsl.so.2libnsl.so.2(LIBNSL_1.0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.1.1)libpthread.so.0(GLIBC_2.2)libpython2.7.so.1.0libtirpc.so.3libtirpc.so.3(TIRPC_0.3.0)libz.so.1libz.so.1(ZLIB_1.2.0)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.73.0.4-14.6.0-14.0-15.2-14.14.1___@^@^>^>^;^8 @^.^g@^ @]f@]@]]]d@]d@]@]z@]V]y@]9]1]\t@\\7\7\\J@\J@\C@\2[[#@[6@[@[ @[Za@Z@ZxG@ZtRZp^@ZSteve Kowalik Matej Cepl Matej Cepl Matej Cepl Matej Cepl Matej Cepl Tomáš Chvátal Matej Cepl Matej Cepl Tomáš Chvátal Dominique Leuenberger Matej Cepl Matej Cepl Matej Cepl Matej Cepl Steve Kowalik Matej Cepl Matej Cepl Bernhard Wiedemann Matej Cepl Matej Cepl Tomáš Chvátal Matej Cepl Martin Liška Matej Cepl Matej Cepl Matej Cepl Matej Cepl mcepl@suse.commcepl@suse.commcepl@suse.comTodd R Tomáš Chvátal Matěj Cepl mcepl@suse.compsimons@suse.commcepl@suse.commichael@stroeder.commliska@suse.czpsimons@suse.comnormand@linux.vnet.ibm.comnormand@linux.vnet.ibm.comtchvatal@suse.comjmatejek@suse.comjmatejek@suse.commpluskal@suse.comvcizek@suse.comjmatejek@suse.comkukuk@suse.dejmatejek@suse.comjmatejek@suse.combwiedemann@suse.comjmatejek@suse.comjmatejek@suse.comjmatejek@suse.comjmatejek@suse.comjmatejek@suse.comrguenther@suse.comjmatejek@suse.comdimstar@opensuse.orgjmatejek@suse.commeissner@suse.comdmueller@suse.commichael@stroeder.comschwab@suse.deschwab@suse.dejmatejek@suse.comdmueller@suse.com- Replace bundled wheels for pip and setuptools with the updated ones (bsc#1176262 CVE-2019-20916).- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError.- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch.- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to disallow control characters in hostnames in httplib, addressing CVE-2019-18348. Such potentially malicious header injection URLs now cause a InvalidURL to be raised. (bsc#1155094)- Add CVE-2019-9674-zip-bomb.patch to improve documentation warning about dangers of zip-bombs and other security problems with zipfile library. (bsc#1162825 CVE-2019-9674)- Change to Requires: libpython%{so_version} == %{version}-%{release} to python-base to keep both packages always synchronized (add %{so_version}) (bsc#1162224).- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367)- Provide python-testsuite from devel subkg to ease py2->py3 dependencies- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch off tests coliding with the combination of modern Python and ancient OpenSSL on SLE-12.- libnsl is required only on more recent SLEs and openSUSE, older glibc supported NIS on its own.- Add provides in gdbm subpackage to provide dbm symbols. This allows us to use %%{python_module dbm} as a dependency and have it properly resolved for both python2 and python3- Drop appstream-glib BuildRequires and no longer call appstream-util validate-relax: eliminate a build cycle between as-glib and python. The only thing would would gain by calling as-uril is catching if upstream breaks the appdata.xml file in a future release. Considering py2 is dying, chances for a new release, let alone one breaking the xml file, are slim.- Unify packages among openSUSE:Factory and SLE versions. (bsc#1159035) ; add missing records to this changelog. - Add idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830)- Add python2_split_startup Provide to make it possible to conflict older packages by shared-python-startup.- Move /etc/pythonstart script to shared-python-startup package.- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes bsc#1149792- Add adapted-from-F00251-change-user-install-location.patch fixing pip/distutils to install into /usr/local.- Update to 2.7.17: - a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7. - Removed patches included upstream: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-16935-xmlrpc-doc-server_title.patch - CVE-2019-9636-netloc-no-decompose-characters.patch - CVE-2019-9947-no-ctrl-char-http.patch - CVE-2019-9948-avoid_local-file.patch - python-2.7.14-CVE-2018-1000030-1.patch - python-2.7.14-CVE-2018-1000030-2.patch - Renamed remove-static-libpython.diff and python-bsddb6.diff to remove-static-libpython.patch and python-bsddb6.patch to unify filenames.- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py- Add bpo36302-sort-module-sources.patch (boo#1041090)- Add CVE-2019-16056-email-parse-addr.patch fixing the email module wrongly parses email addresses [bsc#1149955, CVE-2019-16056]- boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server.- Skip test_urllib2_localnet that randomly fails in OBS- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch which fixes regression introduced by the previous patch. (CVE-2019-10160) Upstream gh#python/cpython#13812- Set _lto_cflags to nil as it will prevent to propage LTO for Python modules that are built in a separate package.- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised.- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch removing unnecessary (and potentially harmful) URL scheme local-file://.- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch Characters in the netloc attribute that decompose under NFKC normalization (as used by the IDNA encoding) into any of ``/``, ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the URL is decomposed before parsing, or is not a Unicode string, no error will be raised (CVE-2019-9636). Upstream commits e37ef41 and 507bd8c.- (bsc#1111793) Update to 2.7.16: * bugfix-only release: complete list of changes on https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst * Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch which are fully included in the tarball. * Updated patches to apply cleanly: CVE-2019-5010-null-defer-x509-cert-DOS.patch bpo36160-init-sysconfig_vars.patch do-not-use-non-ascii-in-test_ssl.patch openssl-111-middlebox-compat.patch openssl-111-ssl_options.patch python-2.5.1-sqlite.patch python-2.6-gettext-plurals.patch python-2.7-dirs.patch python-2.7.2-fix_date_time_compiler.patch python-2.7.4-canonicalize2.patch python-2.7.5-multilib.patch python-2.7.9-ssl_ca_path.patch python-bsddb6.diff remove-static-libpython.patch * Update python-2.7.5-multilib.patch to pass with new platlib regime.- bsc#1109847: add CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing bpo-34623.- bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch PyWeakref_NewProxy@Objects/weakrefobject.c creates new isntance of PyWeakReference struct and does not intialize wr_prev and wr_next of new isntance. These pointers can have garbage and point to random memory locations. Python should not crash while destroying the isntance created in the same interpreter function. As per my understanding, both wr_prev and wr_next of PyWeakReference instance should be initialized to NULL to avoid segfault.- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.- Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros.- Add patch openssl-111.patch to work with openssl-1.1.1 (bsc#1113755)- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which converts shutil._call_external_zip to use subprocess rather than distutils.spawn. [bsc#1109663, CVE-2018-1000802]- Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS (CVE-2018-1061). Prior to this patch mail server's timestamp was susceptible to catastrophic backtracking on long evil response from the server. Also, it was susceptible to catastrophic backtracking, which was a potential DOS vector. [bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060]- Apply "CVE-2017-18207.patch" to add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this check, attackers could cause a denial of service (divide-by-zero error and application crash) via a crafted wav format audio file. [bsc#1083507, CVE-2017-18207]- Apply "python-sorted_tar.patch" (bsc#1086001, boo#1081750) sort tarfile output directory listing- update to 2.7.15 * dozens of bugfixes, see NEWS for details - removed obsolete patches: * python-ncurses-6.0-accessors.patch * python-fix-shebang.patch * gcc8-miscompilation-fix.patch - add patch from upstream: * do-not-use-non-ascii-in-test_ssl.patch- Add gcc8-miscompilation-fix.patch (boo#1084650).- Apply "python-2.7.14-CVE-2017-1000158.patch" to prevent integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution. [bsc#1068664, CVE-2017-1000158]- exclude test_socket & test_subprocess for PowerPC boo#1078485 (same ref as previous change)- Add python-skip_random_failing_tests.patch bypass boo#1078485 and exclude many tests for PowerPC- Add patch python-fix-shebang.patch to fix bsc#1078326- exclude test_regrtest for s390, where it does not segfault as it should (fixes bsc#1073269) - fix segfault while creating weakref - bsc#1073748, bpo#29347 (this is actually fixed by the 2.7.14 update; mentioning this for purposes of bugfix tracking)- update to 2.7.14 * dozens of bugfixes, see NEWS for details * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664) * fixed segfaults with dict mutated during search * fixed possible free-after-use problems with buffer objects with custom indexing * fixed urllib.splithost to correctly parse fragments (bpo-30500) - drop upstreamed python-2.7.13-overflow_check.patch - drop unneeded python-2.7.12-makeopcode.patch - drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch - Apply "python-2.7.14-CVE-2018-1000030-1.patch" and "python-2.7.14-CVE-2018-1000030-2.patch" to remedy a bug that would crash the Python interpreter when multiple threads used the same I/O stream concurrently. This issue is not classified as a security vulnerability due to the fact that an attacker must be able to run code, however in some situations -- such as function as a service -- this vulnerability can potentially be used by an attacker to violate a trust boundary. [bsc#1079300, CVE-2018-1000030]- Call python2 instead of python in macros- Fix test broken with OpenSSL 1.1 (bsc#1042670) * add 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch- drop SUSE_ASNEEDED=0 as it is not needed anymore- Add libnsl-devel build requires for glibc obsoleting libnsl- obsolete/provide python-argparse and provide python2-argparse, because the argparse module is available from python 2.7 up- SLE package update (bsc#1027282) - refresh python-2.7.5-multilib.patch - dropped upstreamed patches: python-fix-short-dh.patch python-2.7.7-mhlib-linkcount.patch python-2.7-urllib2-localnet-ssl.patch CVE-2016-0772-smtplib-starttls.patch CVE-2016-5699-http-header-injection.patch CVE-2016-5636-zipimporter-overflow.patch python-2.7-httpoxy.patch - Add python-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1. (dimstar@opensuse.org)- Add reproducible.patch to allow reproducible builds of various python packages like python-amqp Upstream: https://github.com/python/cpython/pull/296- update to 2.7.13 * dozens of bugfixes, see NEWS for details * updated cipher lists for openssl wrapper, support openssl >= 1.1.0 * properly fix HTTPoxy (CVE-2016-1000110) * profile-opt build now applies PGO to modules as well - update python-2.7.10-overflow_check.patch with python-2.7.13-overflow_check.patch, incorporating upstream changes (bnc#964182) - add "-fwrapv" to optflags explicitly because upstream code still relies on it in many places- provide python2-* symbols, for support of new packages built as python2-foo - rename macros.python to macros.python2 accordingly - require python-rpm-macros package, drop macro definitions from macros.python2- initial packaging of `python27` side-by-side variant (fate#321075, bsc#997436) - renamed `python` to `python27` in package names and requires - removed Provides and Obsoletes clauses - dropped SLE12-only patch python-2.7.9-sles-disable-verification-by-default.patch, companion sle_tls_checks_policy.py file and the python-strict-tls-checks subpackage - dropped profile files - removed /usr/bin/python and /usr/bin/python2, along with other unversioned aliases - rewrote macros file to enable stand-alone packages depending on py2.7 - re-included downloaded version of HTML documentation- update to 2.7.12 * dozens of bugfixes, see NEWS for details * fixes multiple security issues: CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751) CVE-2016-5636 zipimporter heap overflow (bsc#985177) CVE-2016-5699 httplib header injection (bsc#985348) (this one is actually fixed since 2.7.10) - removed upstreamed python-2.7.7-mhlib-linkcount.patch - refreshed multilib patch - python-2.7.12-makeopcode.patch - run newly-built python interpreter to make opcodes, in order not to require pre-built python - update LD_LIBRARY_PATH to use $PWD instead of "." because the test process escapes to its own directory - modify shebang-fixing scriptlet to ignore makeopcodetargets.py- CVE-2016-0772-smtplib-starttls.patch: smtplib vulnerability opens startTLS stripping attack (CVE-2016-0772, bsc#984751) - CVE-2016-5636-zipimporter-overflow.patch: heap overflow when importing malformed zip files (CVE-2016-5636, bsc#985177) - CVE-2016-5699-http-header-injection.patch: incorrect validation of HTTP headers allow header injection (CVE-2016-5699, bsc#985348) - python-2.7-httpoxy.patch: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY when REQUEST_METHOD is also set (CVE-2016-1000110, bsc#989523)- Add python-2.7.10-overflow_check.patch to fix broken overflow checks. [bnc#964182]- copy strict-tls-checks subpackage from SLE to retain future compatibility (not built in openSUSE) - do this properly to fix bnc#945401 - update SLE check to exclude Leap which also has version 1315, just to be sure- Add python-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1.- add missing ssl.pyc and ssl.pyo to package - implement python-strict-tls-checks subpackage * when present, Python will perform TLS certificate checking by default. it is possible to remove the package to turn off the checks for compatibility with legacy scripts. * as discussed in fate#318300 * this is not built for openSUSE, but retained here in case we want to build the package for a SLE system- python-fix-short-dh.patch: Bump DH parameters to 2048 bit to fix logjam security issue. bsc#935856- add __python2 compatibility macro (used by Fedora) (fate#318838)- update to 2.7.10 - removed obsolete python-2.7-urllib2-localnet-ssl.patch- Reenable test_posix on aarch64- python-2.7.4-aarch64.patch: Remove obsolete patch - python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64- update to 2.7.9 * contains full backport of ssl module from Python 3.4 (PEP466) * HTTPS certificate validation enabled by default (PEP476) * SSLv3 disabled by default (bnc#901715) * backported ensurepip module (PEP477) * fixes several missing CVEs from last release: CVE-2013-1752, CVE-2013-1753 * dozens of minor bugfixes - dropped upstreamed patches: python-2.7.6-poplib.patch, smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch - dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it with ssl module from Python 3 - libffi was upgraded upstream, seems to contain our changes, so dropping libffi-ppc64le.diff as well - python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional "import ssl" from test_urllib2_localnet that caused it to fail without ssl- skip test_thread in qemu_linux_user mode/bin/sh  !"#$%&'()*+,-./0123456789:;<=2.7.17-lp151.10.29.12.7.17-lp151.10.29.1python2.7lib-dynload_bisect.so_codecs_cn.so_codecs_hk.so_codecs_iso2022.so_codecs_jp.so_codecs_kr.so_codecs_tw.so_collections.so_csv.so_ctypes.so_ctypes_test.so_elementtree.so_functools.so_heapq.so_hotshot.so_io.so_json.so_locale.so_lsprof.so_md5.so_multibytecodec.so_multiprocessing.so_random.so_sha.so_sha256.so_sha512.so_socket.so_struct.so_testcapi.soarray.soaudioop.sobinascii.sobz2.socPickle.socStringIO.socmath.socrypt.sodatetime.sodl.sofcntl.sofuture_builtins.sogrp.soitertools.solinuxaudiodev.somath.sommap.sonis.sooperator.soossaudiodev.soparser.soresource.soselect.sospwd.sostrop.sosyslog.sotermios.sotime.sounicodedata.sozlib.so/usr/lib//usr/lib/python2.7//usr/lib/python2.7/lib-dynload/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15217/openSUSE_Leap_15.1_Update/23cfcfd00487dd74ec0abaf6291d1a5e-python-base.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;directoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f282548ffd30bb6eb2a39b87f6719417a4643535, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f790290a271964513512a11b516ac4961e7549a3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0724d3ad3e5672c7a0e4f6e6cb2c38ac741fd9b4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f14a03d828da25c8bf016456c0279d1901a64362, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=86bcb1413b1d56f2b68bc6abaf2ca95bb8a53211, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=829c374d407236a4bc9dedff836db7de46449cd2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=25494c986825842d9f89580550bdc9917afb3ce4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3d28ebdadce2d83ddc12799458861fb79e8ce1d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=519f107ed9c7d3d55e0a6b6e53a7e76c20da2da6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=df47771fc66f22027cf6ae05f928fbed26157e1b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=401e756002fe0001af9ae34b11fd073d209856a2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2271754c56c9eac1b38b6cb3a1cc851b5bd40945, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=91eea29b6447184736822354f6c17a44a43ab832, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1cf20016f4db9caef7aa66febc4881f343bb06fd, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cfe87884804dfbf99a0fefa574d193b45ea2b05b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5424d747c4eead3152de82c7560fdc73c3a0ddca, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd05ac175fccb86e0d24065682295548598f818b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4738027f71ce1808856128a743e4499b5faebdf4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=74a551ca915826e92eb863776965932bf215f882, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8bb9c284be2e1078fb93f37ecf726e9692c1996f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d2d1de28cb960b717c7076d74bf06e5ceab8248, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5dc75160103cfe198010a4066d3ffd8f6755202, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=86da547ef7e1a47ea821159c1af244f548a0dc0f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e22c9b35f01141bdb7996dc0e7f38c7a52bef822, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1518e86d3d7580a4a8ba93ba9967c5b84c2fb5b1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=896d197f9a2c4cdcf0009b401355798d8c9cd13c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4e0148f1b40c41175fced40409ea71336295c38, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=684783e80c20063fcd20261e31dd28d908eae03a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=eca23c60e19f417fbd516df3ca27b8544bd3fbb8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=21a48131fe12509bea8b68b96dd69942fa67cbbc, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=408895f1c7df4f047fad7411978fec0615c74fd6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c53123bfcff19781d55dda01d994fce24a192048, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d92bc30fe3a774770aa1050ea1831e3e9938e9cb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cde4d8828128903cf312d1599f7fe43687400e35, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e23b6482aeb9c7197519f9479e87dca2edd3e25a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=90c554e6f43a54dbe9af0e765a72b3c11bf5a50a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbacf982c8bde1dedd253307f2d28b516fa5a049, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b578b16f3df588e7aef190bee71977be4fb12df, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=60bdf8822bae586f112f25600f6bcead6f53d55f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=06ebceaf7ead8eb3f2741c424be6101db5288007, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=42799cb6360a57021d5f86ffa7132c1e8a37886f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=42b4b61909dddef71ecc47a7686119c39811f986, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf4697c39b9ee856aa1a3641e82a1855f7907bf4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbe06740a673270c7289e3b152770143c91a2a9e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ece40d71509fcc4a94ba9e09bf6db23f1c8d3adb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee900599a1f54901ac12194e5cbce5d818b4f7e1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e4eaa85931bcde778b927bdbcef4b421830c3b12, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=07a2f55c855722ca9ee2bdc43109a92044e92756, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f8b4750f6344d659c20a99bcd6b513934e19aedf, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0aa3889a4f2c45bda65a4eda1dc1b415fbdcbc70, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f53889ccfc8feea2a041a268e037569ab3fc3cf1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6f86de0bc6ec6f0dd1f92be0d813de84ccad6ea, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e45850310a49bcf2ecccd173ffa153b0619791b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8ebb75be23baa21f85350be7bfab4a44796c1a3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dec5bfe213f3c986755dfe8aa8db7848ae896abe, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4473527152ccb56d627b34532cd54e76222cefa, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=21e0c9eb28f58a92f6c13e25813a9b217d5ae7b9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6ec15ef845aaaa9c3d05eff9abf73f3eb221d99, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=817f9bad7d18ebcc012dd624c2b1531cb2a7afab, stripped%-5=DNV^ekt %-8>GMT[epz                RRR RRRRR RR RRRRRR RR RRRRRRR RRRRRR RR RRRRRR RR RRRRRR RR RRRRRR RR RRRRRRR RRRRRR RR RRRRRRRRR RR RRRRR RR RRRRRRRR RRRRRR RRRRR RR RRRRRRRRRRRR RRRRRRR RRRRRR RRR RRRRRRR RRRRRRR RRRRRRR RRRRRRR RRRRRRRRRRR RRRRRRR RRRRRRR RRRRRRR RRRRRRRR RRR RRRRRRRR RR RRRRRR RRR RRRRRRR RR RRRRRRR RRRRRR RRR RRRRRRR RRRRRRRRR RRRRRRRR RRRRRRRR RRRRRRRRRRR RRRRRRRR RR RRRRRRRR RRRRRR RRR RRRRRR RRRRRR RRRRRRRR RRRRR RRR RRRRRRRRR RRRRRRRRRRRRR RRRRRRRR RRRRRRRRRRR RRRRR R RRR RRRRRRRRR RRRRRRRRRR RRRRRRR RRR RRRRRRR RRRRRRRR RR RRRRRR RRRRRRRR RRRRRRRRR RRRRRRR RRR RRRRRRR RRRRRutf-845c6b7fae4228a4994241e482bed45c8f1b785609bd1b24a342a935a8a2c35ef? 7zXZ !t/ D]"k%0a C4ntf`^ųШS<8m:/=;g$Ӕ Jvf«$;;(˸j[YT K'qtؿH:Z>LZ0SXZ@-=H,9K#| =uck1=^aJQ4W)O_9։u֭iTb9guN(#u9vAz}qdE!r7gDN]\q9 ^x|N\˟K#6",#anyORW'q<3 hH{#'+Q.2gs?(O0a?wvS"DMؔ_^;34Q3R(3[?$slZC{5VA"hkUFlD{Dob!l.:5gwE~ܨJH%eFu1ɢq0^Şm̬ m; & f4BlVcC2nyP ľ5%&B^^zVOh5WA'a~!Pb> y|יe0ʌ_ܨ,Ӷ4<ȑgGki;L!!L'0*<եhX'l~`roYwǬ$un ,f6&'&5Bzn]Kʅ,N.1Qofk=G2+Ss(: 㛯yQUJ~)ct=8f%Hd߿ދ[w`1Da+J}4~9gQnj>! }o`Pn l+*rG4$~/U.v5nDԭ`(SᇬT|BqQ)V[+cqSE^g^[LqhQIe#9m肝.*UZG31#dqC7)nbg:κ!nۋ#;\44<›|>MUSk[ xEАW2B0NèarBigPRcS:ȁdckΠX&h@VG2Þ>2IKM] 5²w -r̳O0Ҟ4]nhuȞ|ZcDzhˤ ,a{9"e] ܥp&#S0U2 ^ ͋s`xukn W:iVӐ^cT%!Ш 柉ΟC4&b# 5\Vi* =d7TI\5ZV!_z=Y =21mr.BWx;Uʶ\O3`a-BM>Z;"l7vQx<.pp"Ej@.7=FH婻W#}4v$ *#Ŷu_Eph00s :%dxOI,';sɼ, YZ