bubblewrap-0.4.1-lp152.1.2 >  A ^'3/=„O+OVl'dwH73xYvqLewA.,V3`U<~F|Q'x) ت<~|ڴnĀ5c/ŴOM0-4vҰpb`7Qm)n9/3l@V݃E1j(fi_M!$ v9gWbOn]b3&D;`9n._W[;D8yԝzӣXkn b0625525ef0ec882635cb7133bffb0eb225e168b9337064c61bb786c8d90655b889a5bf5640e76f82660bb5bd09caf6a3676b075 ^'3/=„flD3}d/Ov"◈!ˠI A2F8?E:"®ܟQ1\3EDpSǪ]l/>&'HZp-Cr`AeɲSD\*$Ԫ \Y,/CzCaK ^=twr #0}ގÅ<*:|o .^ˬF$d,s&4sl22@ =!˴2Y5 ^PI9t>p>1D?14d   M" <R~   4  Tx(89,: zF*}G*H*I+X+Y+\+8]+p^, b-c-d.(e.-f.0l.2u.Dv.|w04x0ly0 z000010Cbubblewrap0.4.1lp152.1.2Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.^'+lamb27openSUSE Leap 15.2openSUSELGPL-2.0-or-laterhttps://bugs.opensuse.orgProductivity/Securityhttps://github.com/projectatomic/bubblewraplinuxx86_64  Jc' AA큤A큤A큤A큤^'+^'*^'*^'!^'+]q^'!^'!WPWP^'!^'+WP^'*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-0.4.1-lp152.1.2.src.rpmbubblewrapbubblewrap(x86-64)@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1^@]\Q\h[;@[IZVYdY@Y_wY&@X @XS@XW֘WWSebastian Wagner Bjørn Lie Antonio Larrosa Sebastian Wagner Antonio Larrosa - 0.3.1sebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atColin Walters - 0.1.3-2Kalev Lember - 0.1.2-1Igor Gnatenko - 0.1.1-2Colin Walters - 0.1.1- Update to version 0.4.1: * retcode: fix return code with syncfd and no event_fd * Ensure we're always clearing the cap bounding set * tests: Update output patterns for libcap >= 2.29 * Don't rely on geteuid() to know when to switch back from setuid root * Don't support --userns2 in setuid mode * fixes CVE-2020-5291 * fixes bsc#1168291- Update to version 0.4.0: + The biggest feature in this release is the support for joining existing user and pid namespaces. This doesn't work in the setuid mode (at the moment). + Other changes: - Stores namespace info in status json. - In setuid mode pid 1 is now marked dumpable. - Now builds with musl libc.- Use /bin/bash instead of /usr/bin/bash in SLE12- Update to version 0.3.3: - This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers.- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packagelamb27 1589651243 0.4.1-lp152.1.20.4.1-lp152.1.2 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/682faa9a149e5a3f4dbc632428aad155-bubblewrapcpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=3492d4697e26ac307f9d550ed2e7abe740850abf, for GNU/Linux 3.2.0, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R RRRRRRRRR R R}VUPutf-813935d1343973edcf5a09fdb4c525d3e80780a251cf72e01436f18481b497dfd? 7zXZ !t/s] crv9uQV\ iK idzzz%އ}g]J˺B_RP_Tʮour偼*UVV5AN}׍{J7J͖;Xni@~FG1-_ V\4֯oZr{(Z+!<R+e WtߞKyipWn71DZ"{6XES &؏ `T{T/d0'XEH钽%R0*[#UtTt43Qrq?'=OSVx|l~n%w-j R^k^u<(G hnmy% M!Bh@q9Ƥ,5Ozys@ggzBG[B uLg0mQRjֹ-/evd0 Bc!hg ]KV^A.qk 4@gN˚+9&l{8}}?a܉D/'~qd uWdTPIxTYC@dB£ 9ZuS@(Lq] K{Nϭm&5G˙WXF 9@d'V#+9e$թgGmudP~Qn8j )M2Ke +`+/h0:Ξ8}IbÎCy5Mܑ>nr3@)ͭS' WX:oۨN ;`[dŊ ~CW\P5) YvPC9@e]Gݿ93dW<*u`0rB k#M99.Efⴟsפ(Ě2J0#vNÍA 5(VNLmznGC~,S9#r킌U Gh" W?@]~j* ~wEmi$"0B(K;-H0-Ni'Ljٷl^5 -I1)2O-ҙAp'šKonTG{f%M:Cfm c ͇/-苚ٗl;ܛ;n5_+xI0ZN`xmƎc3։F?J9ՃLPN%Ve&cM$ MQp"v*O'38Qu_"鱶 r+V- c"hYEY=z 4W ĥh>'t̃TQ,jQ F [CQM+u]R"+ ^~!mCXGrt` u_ xsS |:cݕ ]VzpeR4G*ULht!MU7ppA%]䋀jI!8*L{+MdV^_V}o,: yYci5EzHZvn7U\{ ]j`](!E]6wfɊӚluDaOJld<}S!e^.aL EŊbݍAt-CpS sQ$QkS[2Dj` )Sהj@2&іywI R(ږ]`n[RY""69 )Cˋ M=0v勁frRCAԟH]&Z1#fT8N< ~W7.v旧u|E%h/X :nI,[-S殷-PtvLi@.c")JRƦؑ1Iqu.?|*E?E=zJ HW[bܺJq)*Fa$֐h{ཆo#KF ⎾ /="SKc>t{;s+aA|ٻk wC8L rl~MȓF ̯ۢo9QV])v\k4X~eI c'=QG'S;^'6t f1FTpcxW@,`sJ+`dLf!A"h|U}t'̝IӦ{_ع-nTEő:%"pޅ)u}g( nLU|*c<&;j'ih:Kcr_79lYZnYǻ5u) `Ek+ #:Iw<bMV5Ty}VWSM1P֠ 0a/ϪKžhH+)/9vոIu[q"٩,Ov k*B 6N&=Eǘv(K$=ہW"i¹ZrӝcEg _IJ 9{jygu3Jj$مV$ζkORQ 5꺚7Pꊆnշ%UO:о"%=NqޓDL·%S:1q%ۤϧvyW3fس(^؈4AI0v-d Թ$>4*wB$la߷4Wɠ/,|c7}W}yT IjH~[wҸ ~nBZ˔Cͻa7Q.z0\ 1В'K80.KWU~݀*Hc~X8L=X!sZ}uȴZj(1ZO\~ .lC,ZΙ*$`|`lAy{"օ@ bp|W=b-(XC!)LNzФԄڵNj腾1|iP#&gT_.iSHJ`/ȑzz'۔gTˡE.q&ZmKR7\ +W"3Ej ϪtUߝjYڷRM{{ 7~?i"yr#DYWsibYWP5ӟIx,되<&`ٻ j =tIo*e1b`G_ry8>mW$SkRwC:%Q _aK˜en={o4ȥƈF ^W~L1jTXXd[;{ɔO,(qq}?1 wXIP\Y0P Vn[BQ,zH|4}`"ᱏ ѬYHmϩK.ZRca>)x:ҸAun+G} ˊgVumљY-15KhK=4!{R텯&}:~/b2! * f+Ԃپ\P{J+W^}})) bi+ofxʇy͉kbU$#'uWzzk@9착KulUl 5~HH;:xu1dk'ƟiP%X$oo.Q7 Nm|R2V$eBTQxM pcti `Wɶ=5u ̣a+AEN`R5 n`qـP7GmZU&RM(L"Ka/vOjk-6O! ItQ5"Pw!; kMC@).kc[vZƺ,X56﷤6aچ v47V!_2b$a !6>rhzbX#Ԉ g[F>㑟x}{qCdP{CL@|eY)4sfbY~+V`BT "b< eEcv>O+s}}̤+XJ__F\eT#leM6="$-1yNtΪM&B^aAs(~_? CZ$W(0v7W<64RhtcvHXڌpLE&!ᙓ23HdĬ+Ӗ'uvpoe+ʂ ZLCLqz7sۮ댩;4(!K 3 :C(F=2XA@L&W.ߡpō8ɼA@e1K . *D~~=̕>9t#=Ͷ2 #LJzZ,]]-C1Oɥ_L5zhZ!S6F˘ VkpsY:WtON^q8F48g-[膟0oݴҠH/;I9 u:vE1i:m͋5n`b8g95Nx}4PfR!vMy6Fجh[/)SٙL AV@n} tSc՜t.܀p(UaR E5Jak8[{<-5-p 4w}d%cIO2‡_G5%pa%W-` [QF@+kȰqZ}vC3#+5 >})De+^e}*7$m/^ &+>]]*BCXw[l؉{whSFtL|XdQW3(OM+ä{഻|rـup (Q_I𘬵W :շR3j8Gg:-PeޖrܩWļyz)?ZP̉-菨06w^4٤%pVXr0P&k@C|Ɔ,8_y@և ^i9nE~:s/ ÿ|a@}/6J>⊼Wzԋ<)^㲧:=kY #徂$I c` &O!='%!M=7Z Z(xЈt- ŧb? !Z{ZKaEk^G;W&_:XI S,boGkI9mAywh4pvկ@k3tLB*1`Nt*_;'UT_lWhfAAw:>j?Ex6_=q9Q;NLûpA?"Bs6Ė6HLn&:oV] t}Jp*<.YPwp/NϹ d8+t2Cl9_Zg=JP߉^ @lm<7"$|UmMхG Zi4}`>[Vn>C2'"n|G7XrQ4 4# qd-Qi@*l[wdfY ;܊y\$~- E#=#qxǓ.+OܑYɵpa653A0(7Pg{Y,Fˮ2>,=*0Y-Gb(]#iSƎ3`J3:]; 4Ļ52e Z{[ nF_fG'Y?(pG6eJ/lpw 46,kr&׋OAEN DucjWL1DV{Wfъj'΢.l|uyi , p-H1driw.d+[w !Dx^AF:h)⼧?\)(|d=.M-/lv-t̉`7(_lZ{@Cd)M;Vcsױh`H´SwG47רeTNcޞAѯ츤5aTR;Ik@:9}༲V.?&@\r El$ڍ\zCCy2_uJ o^Z95/!-Nt:R<کW4)X%oX[FEgҽ| >*ͺJ}IF!:tOw0|{`e]pƓWľ3mxJ,ǤA&4b:~s?$_ЦUrrvƁ0+@pzÏ16!yI)xA6y ȿQig,MEvˎA^qc$FF:Ǥ`!ՊiUZO2cOt/2Lk(j񵛚=W/ޡ;̀frڄ6ʀE_j:DXJ7eK:;s$6t^<ͯ[b5N ύJR77#q>L@ R:8,ۺ -ӗ8ɲs!D!Km.&O`$&kTuV 7:T I_B8qU[B#(;gROW)ݯ1SSB–Y$ɂx|m3USDE-\<@y!5c*HuAW>Φࢲ)v$K G}w܍L mRCrm~oWڬHIr?]UG AZSz!+6.gK9 k[s$Ɂo1FxjNӅ&O箒e&q\됫/}ĦRg41pB4hЙ2\92t[5' ²+k+78w\Po 6m` +:ܱE>O@ۥN̒ @@ nl!@MǙw ~SFwVt'yxddT0cx苂9Y5A:-kP=RSQd̕s2$3ؐB\< #RG~,AuWFAW?)D q&vQcm};B\4H؍^7cxRMmO:0_pPXK>iX 5}؋=%/8Ҫ vħluE6cd_Qo;Ƽ-Oy~DyevYUѰYK^x(\}6[ 4vc c> \2v: p^eWCs8H飿2C;dǚqMMR!cΣw{EJ5!]io}HCz?Z-Tm4&4o=$0?K6k4OpLWG!E8BOf\-!_L'1Ԝ̱x^N k'TFm84pV/GB(ÐA^ -7HG6@2BqᰮW o*ZQo||}Wj]0aռKU"Gڠa']e($/e|tBݖrcderyR1hLՁ57]h%i3Ce9iKdp5!Ԇ4ՊeTbyD͒ա>*Sh'=K!&AֿjU *Xg?gWTuN!)[-׀ 膾Ȇt ,eE@ G /k!x9 6иF{1ɐC[(l}P̙ل *}56˥~VEwԪm(rdrY(eJOÙbc!# LnY,;9e(X)p&xa5=9͈0V*zsD[d/dIiYIo4/)3΢bfMUl sz%G3[uxUK=2&HzPT4Hsj9c5GbSTX: \ٝqP_o L 0sӎbedd)D]l и)`HJrd&TFU48,]w'Lk3r\ MW|@ːt;,phF%MPJ-8M@z q}VU] P8\Mz)ڪ!lgHkg7BOxB ܻF"dE)l^!/<<*8`4bןlu"=1r1 }n]d}<;  ~3\Ζků0bC,ZDXJ~4MD\bRK @h?97NLZjC ]8ҥ:+lp6z_zdyĆHœq7qd-#@0Sd$/p=)iŊKP UwxYCx,{D.  Wzٸp&cvEj50h!ާsmn/'Go #tʆN~\ж.Ѩ|W3SesY67˒cHxkzh.*/f `^G)1׹(s ڣPR΂(ܔÊ{}SL$ڟ@{"C&C`}}uW8y^M} ?bk8cy. ÑquPd}4A%7 Јnm2[>Z&TG-LChx X"][h\"ETz(6"z:B^Vj~QcW:otxŒHޔ4WӬ4F/,9Uz9&~Y, oM ~ll@'amS;:dP S0s J0OY`*'3J?"¡QRY.+uE\F[gը)u(fxLۍEA÷FEjؤbh #)nqMd~Z~ iɞֆ[7HyآQ~X( E稗Js۠ D a$٩7VrN7ItoHk\3"I3C_xIhwѥL$6^#c@8 n !º6V&, ce+yE׮Y͊W[ }O,?ux.\;;f!SO?}WUS֡l 07baex\anhA s6E=w7XYY8X#!w@b1.fZ7Z5FXWYglz͜DJބFRtJ&>ȮMp\O}pB,ye;J&dq$CMN*Þb]*0=Bg*g۵^IȷrcB" t1oUoVT<0͊PH#T~T4; l'zL~]ܰ t֋S:.?Ȅܩm 2SG&H\- MMk+A7kPr,V6fyN/56-*JnɿT!ۉtKVaF`R*cݠ"bj@xz'gVƛ+ވ+C GE۫a8ޯihg9/l6e&3o/8bYFtyFNfݔو>(~(ADf#10ڧ{S3gF3KSeۡ&9H9uJ̅^7u.!9-Dm;h9hvSKS,&,HbiAyBMh9&Gnފ7- }z+k6똎+ݼKT7 h(|Ɩw1IEZdCkZ{_gWH=DO6N"˷>,ԔGx*G3<#TV-p´2i54G3X)/֋ȶJj7b뤨ӾeSаiv)|S%'/`kW s`_2  !^L^˱6Վ`y Qj< 4zNP^|cz=kr:{It`'^jvO˻-V74OM۲S="8yYs$ m &&>ŅE~+pM7{GB ]" ةrP)8!-+4uV&᭮WnC/~qWs Mae',3uW9.%=] }ѫ/>KkLa~߱.n 0}Llb%6 _Y,wq607FK#(VZ_|u&d.jȡ>๎E'?יyPT0$bwm(MSjEVEW@ip.K\[ JNsYCi <QBDE=喣NKz_bG=vv6B@njD3[6X9qK DW@Imxو^9f|+8H K L2d4⼏13b}koi!LR/cHՔ!v>)'$qw3nDTHy,B]_gw:B @؁Gqݓ!yOY2B 8T%ЏL9n+?P_?^)mViSe_pZҪY$Iq|Ͽ,IއBx o~ogY6wOd^1iϔuidԨ([;@* GZuߨ#\Xǿ"J{>/IRݘ8\<8Clqr4Q%I-a1EW(>,6Ł[s-od;ܨJH&9_`a<;6C ѩhYa /$jfjǠ#:ḣ;z|\ <0bkϿHdsօBO``>3\KIǘ]˕V=ґ)cPw:D_lZ#af2E8i[6{X+BOq5-zp;6.ӆxS2'yöN%D єm#}}+K4 uphg4vYzfJqQj\&y ˯@V7⯛HAP;n[ݯN;n*ԭGecf77CDdս{FDc4(tʯAphH*Ne{xɮ2"ž")N~չۉ/>_g"t|{wIg= Oj/4'?4oǭLȯP!X/NB,$I8c=M*8x HTg>no68CQӰ}x/5w˼_ $"%Wd,b&jhCQ!}$! ) v3W:huꦼtwHYԃ2Y Jx~jY]&]bCD/BEs3oe-1(۠-V E1@4O,.F7^'C]jCgEܗbj[94B3 _@@^½"shi~9NmtO}{(>mJJSy6jKaX+hq Ҽ:a$v{|rnz?AHɼ5\U2cȝWa=ѕД{)QS^I|S9fwlG}uF[koH o}FUT>**aytÔH(n?| j> 2?)aE}j~[Wg*;Trzr fvy&UrHAծ$u$0O$xjd-ϛ4tٚfB1F <עBPK!DF]ʽ'C-l}W\oU  #Ә^RIQa JPNk%0gФkEpQk"ݰ'դR#CjE^Uj_4J \mQY z +]JꙬ9jY7 (Uf2anG< M8'| t6>?qMmm|un\$ouP1J{F[k(I&9%!ʘߩh eM-AܚkX(T?^Ŷ=uquo<))a-#_4;j@~rOot9cVr8Jm[2[ F76}^n& z۴;,W@x \a `ǐ7<~G[|-}+ 3!$[v)KtYO:Pqg}դK[(F Nũ9뚹-L?gFd9 I631Vۜ,zueC2:[NǕB`g-@h:7:WQ~|(}%  Yl =}N+X[ZWe;*&qV_̱c ~} RQB5b[r @?Scԧ62H1WiPBZ?sl MmcAMuz_X:n%{1)-7j_x XNЬ$O$jr=PGx'[(/&8_=HT=#Vlnio)^ ]^N #3ȷs5.dY*ib\)#o?-Mp ֦{1OcUĽS]/\x#VyOsE-F}\2U% ~u= Yyha-Qw=r \ܕԕ 1,l-SVuRs1>\3nK:*!%@T1_N~]~a!GQaWtm\$keZHû7]UY* K׻.֪@ӷ^Y4E8,pmcyh01V_>˃H_ 6!i7W:`_`edM:N2J ]v#~0go( f M/T2b;]"Y,X]KTɗEY5`3߲i$ r q:T9вYq,院"Vھ6pi =.12q( 7VQt(G"#=-;hI꯿УN(36%bZ} zF'|Qt@{^Կ,@ցbJ>(p v+قa)hȞ : -nOҐ \,{-a@RX+0o lik&`O>Sod]Dw%]fpU!=&fTZ[Ef*9Y33;)UHclE0\cL~cN"w'.* %Zu{ .-##zWLWHS_WNW~tӴĽN&><warYm>>\K]Ή(rv5;ϒBE땋'*)^{>H(d0lhؠi#*rO GlQqwYU&vNO^lPmLk%N^+2D4q-'7k>pmȩ4L"ZYCx@}HHQV!=9eLkI/932Jr}Υ-W&]_gd´_łʣ',o@ FR˔D/Яo0V:z'q)ujl>ZhQ)jt x\B?'! dAEjɤ5h(<%<|sZO},lfEJ*_fqVwp5ZMz۷ڕ`$m/H y;}fׇqӓCOned %s9p'!BLr=f6j85rI0mi,F bIB;~7TP% L*z ֝ǫmEN#h_I|#ƽoټХ.4f UaB4*M{zmG4Ԛ Mscuow+"MWKdQd\/GsU{? N&& gk6U\$ mH- >NN4zϺ>9~'ޛ>'0`H8?qkƹ&a,%8P_~@vXù[\MO6R5sRv"_۳][ }avDUKt䤈eM< Zdbнaek$ݏEҺR$%G/Μ.1š<C &_`'8zkt&w?:" VІ3їfsψ~9$cUV_ِx-,2fEbhD=]%YǴOEׁ#}fFKP+4ϟCG) {|\EA\9"$p0`㜁x~б R5l]ii}usx5zrYUs'3x= 9yAc77O 4uo>P(grGTz8;p6b3xujUNu$uC+/b5G1 D#E6Z[nsrY#K+KUAW m o ŀE?8/e,2҃[-fmbdԨ ):bҴL0N %zfqg12')SF~&h;n֓[)RI Wh"6˾Ђ,|5>#ޘv^d&$w[#F'73IeMsew)MIK]aLJV=+D <94ZB&DӘ7J=dl+.{@lƾVvOX) dUw#NZQscr*,)n XΫ9`Eɕ0nbn`D[&`T/Tr}Ic jS[ #aay e/N<\q,}TzG82Vw!eǠ*!VH= :y|H"WYwnDz]ljmUh_%gpU@ ݀L|Vu]g(NX>)'5a%q>Qx6I+X{w#/P?el+!҉@~FCdx4%H;4ìiA! ,˻75{2z|#3jf=4Kpu\OA/\ڑho)ԿE%aR+$)yx}B%ejZmd& 1 lrD 1DA`E3ē r]yl39IKw=:u^v1I'M [ '@$"~ !jT\!-+U~b~HiI=zߴcr4L R둠fŒ2o3Ì0¬0}rIA&0J-cnGe"I"svmMOAVѡebn[`.ȼ-, Sn3ځzҴlFgJ4]z4 x\KE&2,=EnNF2x9+AbJXHz.br"7a2# q0<3㫰M4Q2|FWzfn<9wfJ䒏36>sf)س ^yj86L|I=ձ=٠E)-;Cb*jz[x Ԇ'eahwPxvAD-Y@TȞ3C*I/ p1K 斓21uO AK=Kj3rh6mDgO,LmiNֲfO++iJ)$.9AJ̄5ӧ\e?ŒV:cBKm,%3jw.zAb6̩ s8U4SI? !zg-0^TyUZ@e0= jM*DoglJ~qſ۲aر=g%*AFbFj?.UxfFI Oa' P+Xrl^:cB% -ڃOm4 0q5+e07ȫb+G#l>m);M.M2s]l]st1z:5@ho'N~\~>o' Uno$**]YTXgt돒FЎ+Qfqo{izۑ ]ѾUU_=ʫ~,4rdž0fsvB_ 4*3IVp~$ #_:~si,qNH`ΠZubڽf 4fiRlΦg;Y4·cF8vQvgaU"Ta"%׉т_r)ҾZI,e\T#(C[$.@/t.c9;Ӈ:X6X!1۱yiykޙ^'UQzLgX9{A?&[J9ԡsy!j/:X*:*Z o@OIyGVq' ~7S6Tdy* re ,qOh\췟k8xUs"SG~ e.X,JG4RyV= 옗[sѷ3{LJ;lXG`.Sŵ\\_㡅B߽`,".2 [SEJ6}Ҟܒ|^ԜHo+Hisc5RF`wN}C_T1/ʱ̈B<('5]W%}zqGBKVHaxNӌ!46ؕX\n)yЕ?6hx݌I P==IUN- O f>#I;N=ό$+ckavSeձ%\{QMŒS!:"FIC/kk4'G{ ~tb@}i-nof1#8c!ʣSdRC-7IBҺ5GMo0%Qw 7;+RheXBխ@ .k{]EКaϢ6&>k.2\!cB4p Z ˑP;mpYfy*<}`^i:7i%UnmmE\-Ęz2UM@BL:av}Oz- >b8Q@im:4)Pދڅt1p؉Tzn:7X#5KǕX!d38MEZ4ɘC;(]a),)f/<wp ]2B1I 8XZ`H] M$45rK]qlatj@4yUyQ.tg|"^-] +<__*LF@`RЛq/ު&zC@f"WЖr# wm&1? tybXFPir*X`b~5]'uz2ծ0~L:zFՙ/cɍW~1; ԬDlÄaf?x6)prrFdR8A W]o@9ЭML@"Wq㳯Գך8`{Rj,S5tmM7iY0,b; NO~R*Ai'PQ cfN*ٚ 1Wg ^6P7w˘ɜo1>%~WQ&R-=qvO<&g4rqB@+@:]/fTJM{}I*IY_ڂyu?Ư) GxTG qsl ~dlkŸKN4}S:IOC0i 9h8q C]pJ5QrO_}> ME٣bR!7"nRn~/1Nq~]p0LܞJ>U-ugkHӖ܂MSQbK SѐCv.>,mΔ6}@f 6%$zI}8Wp_ED\B%\}8ġg)ba>lxaxY*u 2NoKP ,l:y̥+th#V0mRXi,Z32b?u6䣷`#bj &k̫ܰ-#\g샇uE?gc4c!`1o\pWʀSǠCvOu}j$_2OLL~|kN,|Sg;)0|?oU5Y,"UB7֟_-i ͸!vF<6TZRUu <*jib/j,Vj*KhթF,`=\}ه{H}! ϐ8@mA;`IX>*r"S]^"lXܩ8Vqmtpmtx?+z82JEFE.'kl4ED2vx^b`'|-<il)A3(s43^ xL5U#^4̇#ƣVҮ%x9'@3\8NapcAb2;~?+?pƔv"aa=:6x>f26޽Z6$jb fVp\yFU~iK$L}VhޮTpi: F }0򽉡G3<3s0sfU Y՗uwq&MA0X8*&z!w`+Jmyn VOEz1JŠK[B]WqwwB^;_cBνt\K `HVwSw軬pCu5IU i/_QSGI(V*ONA{!޲p;xЯQS`(Ķu*GȑB{h81ER\R#y:V7Ek`!dloT6YCyXE 曧yx3. MJ ER:f}`-+r"M!?W`L灶fso˨դ+ù*!IuMyWxPD^USO@{1% Ӿ՟ٷ&X|t y?@4oQᕍRr*2 0)  {ߺ:is]pO}56OnwꢇyC&:U& 휪^d~ؗek$dU0㨻UFY筬{J~ ĖUe?<E 5K{@΁!$?AԒ[=I(5l] PRODl *S"$:l}@zãZ52d-}bw;*]yMlcf15O-CVL8wAA qY%؀6[s- RU)^aO>uwr ;ʯmI>HW#{WW 5y[\!8gk 9 1s)+G8I|,]tuqHӥu_kdQi cϯ@ y{"GS=niX74Llh4e1iwE0 vx6TRMtnY&5§Gim&bU-IOg? sp0옛"8O\A"eRSML盆tx|BAv̊v,uwؚ ׬Y,i:R1}+AؕJgRP-՛Wg{cH7K˶E T+: A7WLr|;9EBo "P)'t3C J`ӓm`;h[lx$ .ALj5W7]AqނF)| YBUQ^}:)l]TȩkԊ'b@?p w"뇦a-G2o7ٴe?ͻY8@R\뷞{wa*t*4jhEfTi}ΆW>}@G/ϟ'(uTʀ>Yiqh'U_f~QveĩӰ]RtD,WFD, fUp.%PK8)OG:SMk.TĿ 6×kI=)#+p l:j6Fq;}uI6H6w_Dn' MD譬P \\&m"gE|YhGKy*7ۙ5i_!>OqWT2€tj_75ogw+W ⱚQ,HS8x lқrlTvՇl=z+N9~[N%?1Ib>\8Lz\LmPZN kӝy>s/ eOMf‰h-`4Zdn9a5Ūg/iߛodq$دehS:E毢t a"P"IJ= dOao߫`Xt(6$EiM~^󤳝,TRRit:Б'2J tYf{WG]ͮ׬l4ï uZrBzUl`!e86~}> Z5JǬ~K65hr %)g# r`>ɔ*E4cT^NcQ)K1Z\j:r1/.}xqVo(Zę# pA3\biP8#Sr ~dxF/Ri{%{{+V0c,mOXeNoRj51:1 rPBvk|NHFdV|_c_i{O ~mOϧ7iYRp6aybcc .F]pDo3*kvZ|k]b\[9oTZ )9VIe'\L]}{-0fWʡXO1̨μŀ:N_K0lT$ ʴӜM9Z~Z\H@])ѲC,0&ѣ5K^5+9 *_|#:Wa_e1Bվ ;lBƻ,jM>u»?/98vٺqx04 *IC%]E2b;2@8/ &SN;A o;8 Q RGFJ=RTkzǙrdG1j.,PKRi-} oIʄ{:CJξkӼBMцR[y? Ua"R1'Fb5ܠ\D偙:Z_u_VX1F!%פͮUCMW?Du+I̷uf+xF,5REk=/:-;ܡNaic  W$+O^b LL9#e.FSTdo T:`ѥՑ 5?{ Q'dCg)NjABdZ`ʇ,W9Lz$M!c_=Z.TW ]*J~u6nw遜3E2Hʱi5uUk[,H])\&ؤ:5qiDuV)aj_ d7I,yMWyѥȐ=1tzqK `zU(^*P ||O_\Ϥ Rfz[Ѻnu G_6EMWu„eL 9Е |"rȷ2XtN5AuS΃ybJҼts+Z䅠 3?]DIyW8&2iQ,73 U0NֳD#\N'hIKHZ\!s ߖHVѨIk9L36 )jĹXEVL»:aTG9֠K]#MwkçN(Q`$%Ls1 |P , WO؃Ձ'qLM- ܞ AF.B.z0bQM)@ʐoB+ Y ʱmoޜTP0RZk4X&XXˈL\HGXa/ȍn5>o>]܏1bZϼF눧m.X'Зphy[[(r]54;^lTp~U@˜ǻQtD&\ɸ7chZOzK'>8~y'!sy#ټx0~1m`kGLG혼x W˺ 9\y~ j,P3{S#1{~v(4_ly$4C Tl]_vM yǼg;DPIHj WԐ(16lM;qt511U8cۦs6B&?]dpDčݺ lDcظvCoRٓ^HNOn +-༵yVuI}Do`IC9 43o-}f 2 [H u'ugfOΑPɡeWem j˕Q;Hc]Cs2[EWuYH>>}ר%i:_p".gbԵju #¡w2vl^e&g^3pD$d9CMFT>jX|9BK}N;]v}B<.E(^@a˒xA ֨~ !EH3LS6M\W$Ú;p̽v7"ĮǪm6L)EpD 6Ek%^LF+ظە\r69\P82* 3A_|N҄<(RSG+<!S !Ҳ:=SvL5ǘ%V.)K Im<-C5C)ծ-EntCu"8hȣ2A@iayAkO;`P̬^;1]9Y]ʽhҧͳĆ 􅍔5xt`* bSeZȈHKoʿhĿd8Wt+ @=0W!Vf)^*΀pJHbMЗYG6X ʚ8 N?lYtBk(@vy^̓2mӼ3!j S6UG,femp1|BZPj6΅mv 2!t QZ+>*Љ$ wā~vck6P9TH$mVcV%ǮX|d9z[ĐOZ>q:3dQXŠ2}G:M6*햜FfO=E,z9I-k9/i7pPӮ'&Ed=>hά~Iw/ZQ./}LJONJyAޘ%G@?x :5/]_sOx4Z/~iː3V=ɸm d˹}\uizיW(†sH]܈ѠpV1/[`dº+\BۈoVv _dFU¥j Ț[IBP3 MF>D'0ng(,Fu+9͊51LP^TruAE8:v0^m$׏iGh Fm/Xx`Ik \w7I?e(D@p\~*] `~ts`2$|L87=8vݳ"= LT$7G.Sz" ]SCmƱ4@qןxAz2] vBQ+L;n~=Y~6 FP$clS_Ļ/R4&asJۋTƥ٧$)rh%R>ٿa nv@ dZ C.8poQ e70Pn0̀63هp_1d_]nx~u O Mg@ `Fu:#:˻Ѯ 2}5]QڞLcHf=(j ȶWHk?̈́! -/24 <@?گ`T6sλL~V CDgQQImyUD\tZ1aπdd1-7"<8A+woaP4)FEI_U:.LIE)?_'vhhA[<(E!@w(lɡ{N(?2.lRM՚x4H^jL$mݞD2^] 쉌؎XE*&R4n.iUwR9Mi$ ZNS7KYt$ͦ˺M&3{ȬpU2@ϰu_ǯM>IǣK5+ms0pa(4hƷC;;;]9zLi LɑP`nIefD2*l:%aWm_eS^ZSv!P݁9nE`鷻RֈZC.p@QgS/ql^0,E@߫*)"CNz*$ ut+v5tq}x  ;Ug6s!otRļgR7>X0YFYBxJhC}ِk5:01̣ 7jLYfEXD.2Lb)Rɑ E#MmJ~/Ozn2aah@j5RB=͝tSXpHX0 +;Bx=돨\9߀sͻY*8a2_6xUHI-r?? ꋱ[PJ/s'k&ךmAiw5Ll#=m?vu,*9a.]%aͳi=-1xIY[ְ@pX ŪpC2cADLR+!{A@餉[Nڊi$qGe<*ݖ(1܁`N $gg[$1U@pf} *aB|rV*>jJmڈmՍi*%]?1"ى"hv!1bՇ-f)EnmD9 zND['o/XIyVP-CVsbt_IJVNfTHۖ`Jѻ'7_( M!o怩3.ۆnjJx >WczJ_.MY+Xl/D^Gݪ9Duj C I]C Ļ^ʚw6fjx Pu Au RE)e' b?>aJ;f$d]˔bv7QK M {כ\|a~B0@$6&4WmBl,72 Ykf'\@zCM*ep^$SWe'߇TH/7V| xo,Mf_1-G [nڛEk?(mIZ}C:a!yw`PyM %b"Hؿ8! zcP`RgC\u 5*P Q}˃fʻ5>0 N a.4g_;*%UA5ZIߡVn3n83ƠQ֏%r@m >0?"nRaT\4Xt0CAJcfwJ'D<5k'(P-zڞ)'hVٔGu ;" iĐZY5vE_x|gڊ&ɐZ ltX0yn i|JNNsț5ca мF*EƮiJPj&\&h6,mip5Sy."OY]}áB|zW]3`x}劜ZkY;:W-8%2/ةh6vבqviX{ˤ}[L;(D:` hxqk`\)=V%kEzvYsu FW*yִi"QTq}4]A]Xjlp`Ϊ'Jɀh62uĸ-X$Kݤ|C r fqTSoG7Veh fv L[Ud{Cpmx!Cc-^#;&m^x83l3 `QNś?'LaY—t3Oe8_+墨2ݺ&4܂Z®؅4v8.F(D6*fby@0TS=;溺-ԏ5fpQQ_T(D#c\~çL!NVqey`MUGs}\\>$~Bz- XzBÒ4Lr(ܩ?[V܅Hg ?X "6]3 8寯굣6U% ^q7J1ԑ2pfJ1 PΠ/lJD{S@ЙF{۱H]^U쫇5489 РJӠ$$^8'_2~˞y Q/oV5|ĔnOdt/m-NEI#-Y{\~zHk@%Tt),D5xi_0RۋlK{~Dȍ^h4E@5܁>`;4-[γ\}Iqr>0 zDc@x/0a.QY'z}q_'ӣ4(j/_~3H :Pn%H+m:ZJ *LDp+٢6SVZix/^&,R~g.'_ZF81j'7#Ԋ%^֔ NHGSo~QjIFO ꒰&5㵘v_Ü_3@rfJa)3>R2pR(\t`JOp4YLhUwaB_5(ޛ,+( AT@ qQC+;e4Np@ AJaVAy3H׭ۘ0#9L<$v cW gW`pF@#0(!PUto|H&NY@謋zBuLI(@`Qw2]Lq[; #{:Jt cw{Ynw noGi_;e!%3D|bʩ ^*o9~T^1gjJ`9кy7B] +>RnbC` Qnni?N𙅬#omp3_D|{v]99jMzAݸ2h܎_/*WOqm+0FD* 6BN%rBU\s{C†~mCQ,y3Y< YZ