bubblewrap-0.4.1-1.16 >  A ^p9|4i7Ȼ5' I"S;\$FjΠzҘcyJLG󴮋+B;|12R }* ԝEj@J%M 53x#!T)eBfԬkq[XX&jB­1$@)naN9>c'u*Sf_kmkܝO_^իk7l-Z8|id0274c79e603bc2034042e5812c675f51252592168fe35eb71a6c4f208ab8ee6266ba89c9942a5b6ecdb67a57b3e13a6fc4faba8Lj^p9|O@Rc\',^+ˈ]2"/R-"̩M'֦96 4p))c>UTIذH%G 9Nώ/! F= >)4'pM+j)q!_8B\)1O[ڻMS$: uEr3}au2J3v0=Zl3w%dzqHq@ߞ4av-Bʯ݄g.d2K*`#zd5$C1I:Gf_GrD>p>/?/d   H .@ Vl   P  *p   (;8D9: F)G),H)dI)X)Y)\)]*^* b+c,[d,e,f,l,u,v- w.x/y/8z/P/`/d/j/Cbubblewrap0.4.11.16Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.^ibs-arm-1ZSUSE Linux Enterprise 15SUSE LLC LGPL-2.0-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/projectatomic/bubblewraplinuxaarch64   Jc' AA큤A큤A큤A큤^^^^^]q^^WPWP^^WP^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-0.4.1-1.16.src.rpmbubblewrapbubblewrap(aarch-64)@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1^@]\Q\h[;@[IZVYdY@Y_wY&@X @XS@XW֘WWsebix+novell.com@sebix.atbjorn.lie@gmail.comalarrosa@suse.comsebix+novell.com@sebix.atalarrosa@suse.comsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atwalters@verbum.orgklember@redhat.comignatenko@redhat.comwalters@verbum.org- Update to version 0.4.1: * retcode: fix return code with syncfd and no event_fd * Ensure we're always clearing the cap bounding set * tests: Update output patterns for libcap >= 2.29 * Don't rely on geteuid() to know when to switch back from setuid root * Don't support --userns2 in setuid mode * fixes CVE-2020-5291 * fixes bsc#1168291- Update to version 0.4.0: + The biggest feature in this release is the support for joining existing user and pid namespaces. This doesn't work in the setuid mode (at the moment). + Other changes: - Stores namespace info in status json. - In setuid mode pid 1 is now marked dumpable. - Now builds with musl libc.- Use /bin/bash instead of /usr/bin/bash in SLE12- Update to version 0.3.3: - This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers.- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packageibs-arm-1 1591414529 0.4.1-1.160.4.1-1.16 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP2:GA/standard/682faa9a149e5a3f4dbc632428aad155-bubblewrapcpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=162fa41479c77e7af1ed664fb09ee44a5ec8a82d, for GNU/Linux 3.7.0, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRRRRAߥB&Sutf-8ef939814f859b6272c004c1d970c2d7a12a9c443ed4a6766d723c9b104e630a9? 7zXZ !t/C] crv9vW>Lˁ+eހ0x>.8̯'uKiG @N\jW0AwKA& D!L>A%IoYM-//Hzg"p`p?9HaK[}]+)Ԥ\L1HdQ4[T ==3ԉTelwx @"bIOZzʬleb3 RYIwD)?R8OO"^]=EݢYNP4Ć_?ܼk$L :u93I*]v<ӤWЈ +H]XGc .muTQۤ1^Tv_g݈obWd @G7 Y/˭3|JϮ'K4LEp3 NZzx6ؤ 05|WҞ ^2z(!l<zlAMbgGK~ikd!Okݚȩ[n ~qHX' /Jb@[wQẁ99U:hKX9L08>Onn9ikǡW['y: 7U'Z h1&6W2;Pu?#bz@0ܭyqƷU3៥^BMd=2c~y'T.?vox慴 ]q~{jh4<DUQE]+=dӝ|߹|cQ6^nZc7]'?_?I))JELB*#s,7*;Qtm\6w[m! '_+ӎ6f/di [spyM,!rX N"ʶW87dJ[w]W4%On]RDyFpq!k4NPyFMmښJ2RvWߞjL.}XIrN'Eu&#mݼ0 rjڍ'I D ='n!5Z6Iۛ?\qJoӏE0{[߹Pa [fS-I6h* lD{mC\Fz&MQ5(f'j 7 p >e#$$s_D}:Lt,GT!LkUF[ko=T],eO:0\. .%4rCavva'5/U/,E-?Sq:H]۵ ;l8*Y$5xxfݰ$l 2V>l2*6,J2Voǿ$ YǸj'Ȑԭa4))=7&D 0 pE?+r=llj30{Q=3;[:)ÀFKh܋(x! pM솨4_~IrKfc! `W&r>8{Znb: ldQcA>1SӤxuEA[!Z|g3lNg._|U '%X>F7 bM7m!@Vq@Fs\!NWAK7A.HQ;a&_ɼDC6lD'zDq>>Շ8jwA& YHMoVu>T-raں%90 }ebc5фӺ9T^DjW0zBg7T~iN}6tXz]ŋգҋp91kŌLmݫ,&H,}/#,9ͽؒeٟRѧxƲ٬?$~.kCAq}Q.J|VMPz-6raZTYnU"efK@AEܪhJz{c}%J2Ñ85o&o:tu&OId`_8DN[)!0- njd)p@1m;չ!q;CtJGv(iC[J:)~ŌYa#}}`a?/韃汥S$ ~=O=^s9ERnsΔԂc&9”r&6hT%ƶ'QЍjm#H=dthꗦ%q׶oLKrkrE *Fn@ OzJ3!u ^B6 eOHE/%4FKH<)ܟ Rob]ʜ=p6dqu/ q'1ؒ.KH\2h);eFk&Rvl=CS .2U 6}XpK8;8ީVk"u]086U(E(2_&eì !vIjfc%#w] V( : Q3%4.u)ͽnH1JR$ WE VG ]3^R"l[k4p`MN[A4]o (d~YĢ[6[JOȢj++uVL ۴Z8:5ͭ:.h5m&tjus:\ QP8*s{(UNSmqx7z6A?>sc(&;ge}=&^` sзD,i,S; ^ي῭vN'9~vAjLhsl0ZKL<:G:,Ud >7OMgD n[YS-=:A(d\UO!]X84QX]tvۿZsi>y<8ϸrλ2նVq߁,b7ry ͝Ov2'_? LJs&OP!o $ |/(S 4E!rڸu[Ұa&-57#IǍ `#i3rŚ[MdBohl 9cGYaH *i|lN@O `/=Gnc8Q.Rl ַњ8.PsBהڅLWcedi Ļzt9Dji0o@^@USslyr@(reqQbo2;{t{V ))6 ,a{WxT*'{X_ʗ!pլ+wxuJд4SFH 8p[e˳-B2ɞ qsf_ű_}S?O=qnjMD] ;TQCJVGc\uQ37<Ӟ'5H/>WB\3P:j&N9G2?p5sV+VM}58CМqpгД;V΃,X߂ >J$u 6+N^樁;Y5g6εuzc0Y45{zTT{ ۟[^_M<#Em&*vqjZ {b cu}]g%a3:HcHql0gI?,E,ejE9L"S N&M )V <>PD0ZB>,T%ڢ| Z'^ 0V#>/~ 37!eA .csjt /#M4AuWɁ`#t0Cf⦐)q4~)/ I 5H?* ج{xe%54lā;* <$G _R id$/\ZF@@fOf bYbk?x i)+s]2Qa:/# "?+r/Rp6LV?2)HOS:设xڄt~_pr;.C RhT q΀fHn0@o|WJ %yY^S)!*+oiZN(}㰊;k4 M@vۥџ50ىl$̃a+i4TٙNJ`iwӴ%eΣK1Qp޵mЬ =ՏY#jx J泄UqHHBk!g1lH?x2Jwd QА4.Лo G$'Jܦk& |lHK~ ^䜘`U;>wj @&pM ' #Zc"b }ϕܞ*tKMəoyYj g2UEЕ=EA? <ԊII !w)] = :-MӇ{seڄl0[P!Au!5;iw3@82Q[&z&CPHoȝ$w8Lĺv lݡcSPd}^Μ'w{( N V4==n؎iDۣ}w1 `c%,z` gב:OR8QM} L͆i.N++\ղղҖǣ);f^ Usۚ<g;f698`3W#M!i<;C;w^3T%T[WT b\!ec}0a#W|_19lC|]Ɏ%@+mJ7mV.Xc/sim|a{EV'+3r>=j-H h/8mgTBvƒ`7za ֚K%@84n \V./TPT?^8(YO~LHӳ5Nѝ kʆInʡu?d>ET-Dq6^(I1[L',N~vyOUh_;ݤnXDx] 8̣:Dd>V g«@]%$:ty/Ŗ]!=Kv\kr˴cx'mI KKF 5#i:H%5j 4tgy&0F4BܨRP ER̳U]o @f'^ݐ ʤ}\=)#2M#ޗYRgi1*.M(Ȏ']p#4]]i>9AbI[Yϥ|HaAzOܓv8G3O/8zJ5}\.|$p"o?QڶXQBގk* G]U  dj#K3t hRi%z?8Z4 a5F#15j&!PIaebD9`/:E?&>ޚ%}B~ᭅ-FmQ]ܪ(Mb=GӰo)\-tUb5s$@ofSx:ٕVh; |yO|鲸2cgU\*Jk0ɤLs m7 1hDR,`e˰W"?I-$MM-ɔ*ie#yE^@ ;3vH"?cE}tUaT^tvTHuK`2>hcwLI}nɸ{-00Jq )V q223%$uoCh7KCk&ϓap]٤ӿSIRtOS(!ѓi^U:عdjB;hWN×83N}Ǻ8kq0.o5?Q# ,:G5Y&6dmd~$ecϑ?' j(A*CDΜ+`+#Ey j'b&QD W$Lf.A6X| :{wa| n@rkbjƆ2o4#--CDhkXKjVII `[x#Y[QsgxA s%S0\.|Z5F)Wh"Řa.; 0"9lJ-fګ )rdZbyV A/:^LSM-X!SZ<>i79fTWcrLO;S`0>v=ħ[/YVW-W}'-@5Fx`9< _f+Pwm'Fb(7W6!swā'x6\ U{ļ$ivGdѯAa"+rDĒ+] B(IDڤk!65;lՏ/uCtB鸛OѼ`blݬ|Qa߿PX1k?(>k"֋éHU /1TU%~`y"\V/vuR'<=/} wWX $5]RiUV FRha>>]E#] ֗[+2}0d2=h䐒b) 晄²{A*B2/Y'[:やrjT瘶~|ʹ&{Fj=Uanf+sp(eE&+S *g3ˠ cQM|'J/\16nsl| x]+ĆQ|4]9o[ݾpO\jǦI>Ы-{DgGnIOSx~DdbuY([Gr,]@F%*:y)fE90*8Xܯ\22\#7m!5Z|# u91rrPnYb^V2MPLZ{zN s2ŷPl=ZԺq/N/Z 2ݙqoHYe~ ֛2X &޳V^\V2NvٍG+$dR!3MV+WtbO޶::kqOAgO|x2~p97,c [)Txc;ܥ&P)2q8w;)\‘ 0Mn @pmzfKDmvâEE RQvhGr&z#>6&㿡T:j8i|,*$9 [K<^ä<2*QlV 'nQ%bEہXeC1Ƈ|1"=6uv s[u _m dO%H"O%H\荧c1d (S荨4 *p:(z@2M3c+TGL1x$9929.dGőxn Cۍ6XVJZ7)5E2Qϒci|y֑;MI X@[/k>M+lA-S yUUO/sө %jb%M1=Dba< /2ʿo/Yh)" 31V`r\@e?ǑuR]2>Zzާ$F:wcqɯjmȋ=˿kzIzE,zǔ.o*NX;@S=s# =<xL9(Ñ 0{!0!|9` ~|㜎Cg\I+˲^$Mi,'NyJk[X'7+dߋax>g"l뼶w̩j%D 6%+K? Kt篪' L:vQ~!ɛ⠻V`jJ;dyn7V,N24OAx瞩.Wi0맜fXxˠ͔ixERrOHlNޒP2G:Q2ԓD 2Ѓ-~ΐI !q̆4;8lHd+\0nkϳÿqfbk od*H4ac[vZ _WSaJdCٖ1swй DJ7pWJB x)$A<엣D4*7qy?f>1 .5%O.fZ{(b+R kYҽ Dz$;^e)֖4^:3V>ds3jwV0lE'iqQ[fˀKBx\)A/rAe”D/$c5t/(FmU.!>$J)?-:a`E$<*x"BVW:A0Dߵ7L6lӲ~K#d#Art9֝$R'?$wa~aT&bLbbcSn48#ȂeRnG]?Ti ?ざ״;|f2L7VLή-n# Dfd%ry󞌳{z <=**o@/2gn =[Sb7'oF㷶ɽ gad!!-l)-yJ(G-o21ǕIݯZ}9Jr0f0(n3T$*X۷oZ׍sud̴+Dd|pn&؅U~yKD~<<6*᝟Ѩk50?rk EZVX*^ |o=M \gw`gd𐟨)3FdOeA0P*MlOp١K[C2gs`~! nu,Y|Gn6⿙p Oo+kf*crafn`PCG| #ey-I3EXltѭ+\&T&|1Godw"I~"*a;ST1w0Wɽ**4Xe)Subq;2v}f&-ٿsG4y$( l0mzLjY΁d?Oz8YVt'eas) N(@p wVzا<[Z/jvӅ=FzCF9? fU)-A$ځKA@ध2k@Efl{ѩ,/v}jn0 cFpJw$&1C>ٳX/*] GOD:f\|uz!TO ft(;xNjQSr,8p\|Z݁wT xOX hp%!>P*m/(e>^p4Rȱ0ť2'KclmɎKq(f*>ʨgr@Lq/V/ 5qE[Y {=>AƔ"·eP@o<_euw1q%:! ;u+91bKڬN"h~U6Md=`OQ77w nǪkgcz u}D4W )E"Då:]3 r O@,#*1M?vuU |OPНl^M'2@Ih{Xnvh/++Ě9Fv`fRztzrv0%%^Λ{)!{7&,ˌ=`҈g22^ ] hpd|oa69M-4xeBYT$pm&oU Dn2`KTaTXet~Rl;kΔ:[TO]Gχ5￶4\fw(H*M?xIʲS["dUUi+G{0AwN3{48ʶ{' 5 Ov/bsl!$`"82a\mVCI!S`TQCƇoagU8(0qSHprZ/08v^1:gO,ڎޅѶVҾ73ce:^a߄r/K(&ҋ߱Ov0Z8z.S;y'醝);S:g Avh1-$ ֶ5::J\û37]\* Dw`|f-Ā޳M|zOJx妁G EW,ZH+^ya'g4߯6rR0s3#R2@zӇM/68GtJ*HNR'xx:0'&*F+qdO<6ߺ L&'o0u80<|%N0:JDȣvi^/.L< p*.ܓY/@$5cB%{%wB1o1/ JU6n%Z;"eڙxcET >OŒ !#6hhᄄ!LDn}A*Hp7}4T1r3xp_KqoXp3ESƑhKgϕ8-DN˖~o<%zRW90-"WRJx*CIGm-\io$RUgH=NҊ5͜$!º]#qKnvzr$c~/׸ArpF9b;#l49M՛R ??AYv-V`.$NQFZט0`F0CHzI;#q:iE 1Z.yYwD4e"!ԻL `IU‚=+ ~xbt?AyF1mz" IN>4ѦO6ߡ{<Ԥ>3𑋭 F2im'e8E-8SXiv~f-TyB]ɏB'bQy+bW R)*䍠e_\9% 6u? dng SQ=b2UzX.zxr$ G)w4V), *ީ G@_YNjqBkm.1E'X9n^#aF[g:'V0#eTFܓPe=9x*}GMĢ$;ЦHԍGke2)H=ء< Y@Y1ʠJ[Teѩ<ߗ%rd3H [fԶ LȹV4`!즨Bc8P~ۤ(%D>%u(.| |VbS<" P"GFXf*=un5{ kI/.~ȇXϚ/?O}.x*K׹ްW\؏p tQ;{{ߩP]x+3ԍj6_r/#6 bkiʴ]4~9,C?CȼO+GrB$=5t Fًz 'CG뷿g'K= D#g]РB!R<86T:8rBJXAJg9OMP=c̮Sx5".;^DdU,n!M7*H[+dX#\ ox4.Z%]/;kVa[wXmRg冫ac˛p}@ϽR| UjFOĘ#BaV+*n2y0Zx,uSXgO'G"*&;FBO < Xмk-AQsd =z i]?S$6e>eBqTU_xU^Y(B]"2g G[ - #s%}YY%퓩! t1OaF&:bG+~ y՗C 1FLo!oVu >twqD9xors<}^*p% [6})܏(=a"V} l:tF,~n{hlO NEr,G)l\sp *{0=~JMlMO&+IOc1|Ż_A ,X8eR U}wJ&̺_/e\?iצGc5g.EPm "z|-!.&><.Э\LoCI)vܢ3;%gvNW4H*&wRh.7AIĐk7]?W?C(SajTn~<\ŏ.EgI Mϋ+1ӕ>U7xf] c4$Nl3PW2|)aRJTDRMH<+Al3U$q$Dwz'm!]ҐB;oaO  )@Y*MM; 4,RTԕ"D<텐U2x<% s0|ٙw4Jچjƍcrk_+"*߶8vʍH!;1V85i@9lpAl|Ѹş#myDj,geXaVOh[Fplo?? [<#+7V!Ǜ/-A/up<@ef xU^evƺ1ʃ>dǕD%QFZNH$l0hVI,{-kxHFQpߚP@ 77]bT^1mP̱,e#BDzw"2޺79k#2>G LteK-atĀNdG=w-۟ޑ]boSLt9^1BC%~S#ssp%Hj|9kܘZ6Q%{"Ygd>A *QjQՏY`+ƽrE(2byR^ ĤCsCc2܂KkFLj(Vȸ)'YHAGG; =P0?0Z8qzp7Y/)KйzB^Xd4 {dgV\=N@Cvq@9t7yl`_ುZq`)oF1qqꡂā JI-uWZł?~)pV(PSУrsUeY M^Ѿ8`_oZyГ {W.JaAޞQ>9-U92䵞/r:,vZߪriPl>cHVU ?狋WNgѰnZ}Qit'5Pꆵ ?v]G[G=wGMS0WĹ,FpIBWYNb ctޫrv/MoKhXtp7K؛HTQUbϏ*/}`X˥(y1B^/*DhG0bI,c߀gqaG! M\"p7e[BxQ/}L$"DWI18 xa.*C;Re:|qƲ)'hl)dI_58+ΏlKOu XdDܽ0Ot¤(PmU5 n|p{F6;mK] X)WLKe^'-"|@T3PRV%x/7=(X  O+;aϢA/Ar]5{Dv-[D`3@ ~֙05;ӥHL^uhNN,u#3MLgmA;Taյ2AxFllz?t0 "D0h]z/c.|pb]I@-~"nSw76ݜ$%󔴬K^瀙Lj USz4ˆo3yՖ==T)ڳ|}r"4y2%jn<ۊWvء,]f/vr1[¢OoYH5\A lQMG6bY^S肨7CjQmIspLz/ϞF5f T$f"N- vBebQH .Έ$GM"`iNBfa!Q%!96뎙 jX!V1 vH} Mm ^=A8ҁ/Ju p*-8 ##0}PSDQ"M-ezwv( /-8zj 8*S u[kM;ݺEg?):Lb01f,,JQquC-A^fіݫTtqbYAd{Jb*BlguiG ev{\ouE9˚R_Uьz?P9@RCYFўBI>k929  6tf, R0A_)8*Bik=F3_u/f틓,.crO\q%pP_B?aPT rXW8^GA)gz+c}h!};#(Ճx,˞`ۑ^olLMsR(;RPgח3Am8E2 s`]ϩrހY”(kd!yk<ɸJ.0-jrLd խ9qH<3}yt@k}q*7[Kw^v.Eĸ0̯CpCElu2:U5ƩJs&=":f+Bfz2 U4hYe"uPt69ڒ]gp~wE$ 9$(+~̙gNJܞ)':$ľ 4hVG.v#5vDw|WXh]:eAٶZX}R+[0'6Im@"zj !q}XG9J)"QLVD,_"&.d^q ^oxڀ;Lv½=E k@:$T a@Ώ9e q抣I<0Ǵkl}RB;3,1'dc-3ޙs@ $D*-\-^l@m}!F@z6\3VcEKu#0a-Ap*0p3 LR8LӉ-5 󎍣`)Dw@ GTEi|*X:I߄UJJ"Ϳl76KFxE_QEm:ӵQ30Uӓ-;;w|hޭRcYϫӤ5$MY bb %Ǎ҅z߭Ať>h,[ Cr v6 bS-ih#{;|2O:+8Ul6W|Z ..p!FT$J'^AZ.}R!Q?s%E HFqo^ .o.diiSMx$W8gE]oħ@S0Y{y;J>peǖo0v =9X pg;wϦ[&+ q9}ɓGz iKWOeR_$ᐱ|qR~`#kY[=,<679-w L0Vxӡj\peݡ0*qD^$ [ATBbQ[ڸ w?xl|/",XSzd# 쥷Z TCacZ ([_ɢ 6(jN! Yq餜J0Mg[w(.` P !$.E$ɩS5 6~@^A(It+ IE% jq}b,yqa hcTs3TN]wEX!v vlkFw V&ݙL(9 ˫]kxZm)1:HnJ"L+Mt2O>iGin.x Ns&87=[M! $nhԫFٛyFL_=:Y1a)*xFFZVSTO!eGܮ%TgR0ڼ+d^21MpTí,Gb%m0 8U|񝌉Lۅ7П͎F' LQ_Mū&qj5d$e)O΂Co~>)0#$ Ͽ@*PPӀ$1#6E$q>V<|J:ge+">\VnR@DfFק#Phck4Z S2v]ZdAsʰKX#)!LֆʬoߐV* W)]D7U-pf 'W 8r2 6jzueq~(ת%r[. ZjT!Q*t8hD1 Z)jKS=i"]3.7 "EځMh/¦u{rտ;&oY*lF- H/=[TuߥB\l*ds l>qofM5UV"j :VhG %6naP1%%k[r11]KA'0;l_s3N|ٗάkGd1B>7z[k;fvݷtI }"˅,ѓc;U2:}q$O)MB K? xjA7ݴf,+卍O$Ab#*VΦr} *<fiq/Ki=.G68Z!MIʌ'34NH?`fIfme,<ѾƸٳKn|_\OB(\ 3̦@{,-psWD IܚHUQ4'Z(,yAkC$THvCcW1>'d jI8#ڟ s)bbHS{pO%lFl&hA܎nϷd8>9WR]j; ^u-]iy6)'Lma|Ǒ7QJ|\Jʆ=UY@7GPN~?Bw@AfU^T)ҏvPXq; y(m1,DlqzMkX66jЌW愻pO7i[/hYGh "$Q]ivDX>tl0e+fX#E0S"0<s{cŘz{_eCsp7}!g ES-7_BB_+תY+ z?žНCZ of! ɍ=nΫci"dpf(ehp Ps{Z̮\jlN<3DI>0STT5 .޵fس G~`sbLi){(ߝ]=— ?J^TB^Ixyc]_<`ɗظUmn`u@<)˼;8-tȉo$INEk;`$+GT(Ɗ* fj8[zBJv.~a׃TJEY잱չ?44w8ÑƐR8^%T2w,CfbZbFB=Ox골^J%R=;&  qvR{ʗd\Td`0޶wK+ d^l_D%#nt4#56Q>w4ƨL;+L,9i7w6ߞQ)l0rǰ 0kR\~>}}h /$Cw Sc1,ip?X:^ta^M}am@V,tJÒ3ӽ=R 钬G)h˫18ϫ *g۳^L_zڹ(6~MW) Q[8!h;b ߱c1}m>֦N;]fm;o՟$3]o>=HETS ҡ!+:NMxPu2fΚffae5Q= "l"MJOfm`*h␞a7>2΋LN8kX #S{N*GioBյ^=ހ2(W4ﭻ6f d %d ƦMP`q'Ruu*[ClYBkAq}9E CwLb{J)ȪH@ к@y:))NK߇&-wgʽc-,Fxv&8Ɨ H,_f"R-h%7;ß٨v/BڐΩ{b~_&5xh܊ DO=n#gOgQ JP.֣+\<V%|^懙٠89d)V5z{w6#1) |' &{,Ǹy'B\¥^EPQŘ|XQJWzVL;6Q/ݽQ؄ì~3y1PYIS.ѷn/B%S"G103)_7-v @NϷ,PʷȔqfEyz|S<̿VmpKGHȁ|CQ7[8R(ѸՉP[u@NLvaZ F!&ԟ_2 [pa35vx8tnϑgnyr _Oؿ7Bؚ ̈́Ǵ8ΉWis" #k2ʧ'A+9G%pOH7 St֙oTH3ri yҰ X}dA|*]b S2|w2Op♳>{T  +x&Vl:FP7\n&?^y K) аIi!*@)_"y:*]~?D\αȡj19'McE6kQh;]ʪ d %3z2Gwd 4ƩmO&PT5B@ZbŘqRzXddvu1i,ct1zHWP#SI1RF!irL~mkSTW1?fٓ׃ӜzQ}+_%#$Rh!𔬹t*U5:ьfX,K4d'˃zu35Φf`|^$AI55nVlEwMřF>HRe e;4'ury،F" ;$TVX x#7.O+'2%f_irNϮM^TP@L1{`\ɿN)vP[ߝ-U1澃 _'G$EF}wPY9Pe?R=Ξ+!3ҍRY](_NZ1jx9]׵ʙDT,A M0Na2Zc ]T&wd(@Bv-Ft|:f13]+E>Qe G˽uMRɂ:*fb?3뜫(P~RdAKS(dIȮ/m'L]]UO0StRA.uJB (Rl )>Nc5I9EX. ]">R{V?棤4# /WES5u!RSۈ]k]KҘ]N#'p..6W3-@.?ZЃ?3&{Ȫ7ОUm1.DtNs_ H "V`c@^h(Q\< ?ɞՁ`x[^]˭CL9s^R@% g!.U])WTl?$qmXI {pf qԳt#]axvIUZoۉ~&Pa_ M.j>"|x$ 6Ocl^m߭ʁmbEV>uC(>[bO`c^x|EAzwwZ惲 Z']d ?S[Zg숭?4pc~e%R Υ Y@#%<7Xg>"8{n}2HW󹮦9s+^]AyH>Hd$Y4͘4gAiԯW]cݭѓIRykWsr燡<%ꞽb:iG,p7S)e=3CvczU쯾 Ui,9H_Of"&;Y+1s-Mq#B)\sͭ?7]k7>\Cg Uv}b$91{[MnOSPJP_x6_cTR'yrzaB8|f%!h/3*V0;Z-Dީ оToZWU{[&( w!5 "#_)Z1gm-e7D^dК&){ pͰ{D6†@3MAg EPN`s0vÀp-֩5trLdܶ.AA泰U0g^8&7`~|zE>MNJݥsGfmzB˜Ju7? bW8*\A7GXhfA +D8)/ Yf $ḛl0eq77T,q!K;e,sbBLԥr`/F ?Y\:os 1$_1A EC=L͓UJN5ALY;#w(PzmE#u3F&א^)߳+41s  (>ǃ?:t jXpIpx8X#a9Aqu 4Worr FM' 5NWhoB2v Ǡz].] ZUr'^ 'o &u J's sg39=D gNAJJĒdX=?DOzbJNI×Q9qQo-޾ŕ <v2LxMx[;SK}jTXLvܫ|ph X1};T:,4Vt UVB쨔PVt$SQZNVLTX 3 O@\BDqyɧC͌CÇQ@ g^mW&xG<NG[, hu|şK*(6+P|I e$JG.';9}"a+=ڻV"O~]T'PL7_&QUع~n~0aKŌ{|/[-NOnXTWvY<XVMŢ8`? C_Ր̰"0Y [<[w/Y{C)T%L ָ֣Lf2K4Hh}} c8 g`ٍ|bƭ?P`BX:ߛyÒƌPv[r_`58t68[&a@_`áނ޸ =P.- { TJ(F@SB/mbtڜ3o`7HΗ6mz/ehn -ʹn>-w ';V<-1ܬ蕍[20ZrEX)! <'u!GQcҩ+Ow!2v_Cq6 T ="OY qP7_< R(8;~ Jjb""-OJ E HY2'ZE|MQh'@Bܱ ޢ;e3(UjZhj4oV%@bJ:+څ-ܗ$\yOb&s7̄l!EV5t7j@M\^'y鱇;'gX>2Hj hkNWM{PuZYqr{ΈmCeyh鵚=+eN(EB8rg%|YJ}َ1>c EswNwTH k|m؄YAZ,"cM9lu{t4l-`qsI^J#5𢹛.gݨ_{z%BFR, LF- 8ydrvcd)MЁp4uwsgT9C)S AJjF]~/H5{ ֠ BB~jxObO[>FNOe sY{[`5TbvEJ; WXĕ'Jh!S#3?]ii"hp%>ȣװhWZs;j D V0Z%Vudl8AS,GeGdKlďeO*~O Nz,80mRԇIh3 1пt7c] 㭚\(ejx# <h~y2drBuǻ@qN21lc==!U8 y k2q6<|%+ߪ)ExǜK9;G@0tf 9J3WG ,t{s~'tGIB{2#vgt L A/'߱K'ZW8 '3.vOWx8Ϳ?1l82肱` T^L$ DW 1)џZI7mSz^TDP"K9C nuʨ\0dWmݖ7ĨHĆH"*lͰܪyk!D{}fWޘ,uHSdīcIv:sUx 7DKŨt.K)LBpZ{,ڨ=qFS(NX~H׾w:ҩ]vgWC(!Wwe []!31N! }(/aK]1 us,#p /3K7ZBOV5b g*Z X Mᗩ_SU-CK}=RӠU {GުIq(UUDrө9"t_)2rkggqLJXW>5κ?ؒ=W`gXOp40)MNPz*woԗjwqgZuSpW}Y OFUAc?k4.cI Hx8LMd0s۟](Y1q(Ϭ ciJ[qZ:*JhO "6dN)B\TQO xOzg|۠yeTjO&41`>ʿ0VSqD/-Oa e4)`!_@:k5+XSeZ )5Ai ߽^4H= r%kMzqFˋ8pӾo(~=zI ? מ4S=cu>ȨRpnrܙP'Cjth MWMx_hX T@]m7L`TPz_.yF2hb  6V'p}\}Dݸߜ `S_^+^yņt-^8FQE\o;44W>X&Ilvh00OO;?b v _cdhGo ]@ 8;,`3=Uر\V#հyqT `>{+RSqq<Rf]cniW[gĆu<wkO/࢖)9 DdggP-Wjz&wƕ!-v8N`y`Dư՞*4+'nd? ]$UQrI@1s!GhGZ6)󏊬7bѰ) Xp]  "d{VNdF~Eu; 75^ՓAqS~^.uN (V$n}Lo?7ӣ )TZ@ _Y_/@ro4~ 0JPqpQ/+ ŸP ET`FEAOJ[s&ř1Tzʸ$[q>l}B*ʼ?@ލQې:F1[B JԂk2AT誁>+DcKt*WNY+͠< -cҥ *=e"( 먆*RI1k} W&'j"0QQ˹;Q``4oa>Fvwm)lQWm>ovdts6`N"!oqCJ#ؼv\V뺟2{$M^l0B\%QM]9fIZt6wEYydxr6"Dn7ўL4Ef1wn6OL`l$=(đ+nXÌ0 CS51K6͋TGȾ16olt$iȦ_pQޢ0G?RЇ/j]l]+ycUoavr}w0OLBXXmOrztp&X ZU^vz0Ǐx⟀]d_'.F>D^p&:Ȕ#8X lMyE k}"E;9"su{jM.{RG;8k-$y޻Hwt,0A^xrri]vk_22?{ʢ"X'w44[%m N){U2H! i^N?Ui)e­_x(1V 8~6_2;r"0+훚rWSƧR|K y#-rG"/ _qG&N w)TUE+ ll0fU`Hiޫa0l̵E D߀gMPK Q~~9 =<IF%hqwuݒCJ-Tw(!?E)=k|KxkR *;^m]&2W$s-s7cll:]a'(wUkp41Pb,X&5Vbf38V +$CIkVjB| sE㓄5pUێlDPd0S5)Vg@w+cr-C佸6^l"쁢yUTѢc~g|a3Z%S+@ƞIJC/U U6~Sݪyh;T1@"f**'!{jLGCpz[ȕvب _E2\2h?}^>+T*IU\6Whz6z"Ƞ$pU}'q<$gm< ]B˫BJ^.ͻhÎ+A$ITY:KX3<6M2:G_8(ه;^A/Z] 7>n0X0߄ h}^9ʩO"|YI['"0]@2ڃ #sICgaC炸HCK8Bg;gry_G(` - kA8/1M1*lҐTogqI0gU 6-1󎪻 ꬘qZh(}" 3 #GpSs3aB^&eX? U3ٓl|/~1j݇ȭ*l:Wں/4L0֌>QW8(pp&@tm[VvV8|*~V .bh- gseLquq5+@ Uc~OMWwv2r"htuMʢ(}m{@HG6>id?zl#6jD!,r&EچGQ뗍,; ! H@Ux^j7@<[; _XwPklBP=. 1*hE$P9Ā D YZ