bubblewrap-0.4.1-1.16 >  A ^p9|>Зяߨ1.=ms@ݘs ?dIY0%v|~é5mY/u>4+fԑNIwV5@i=HT/%= ܗtc"v7bÓFYxpL'AU򱌡VM䷸aԫ8>8PW{O{g+(wd=- ]އWhObZ(s92239052c4802041e59ab0897845d1f659d9cf0c7fcab68b620096c18c9f36ddf408bcbd0ab63f991e5daebbdf5c1bb6744f7068ŀ^p9|P;c}'f=TZ,s_q(K4$ENeUfm-ˆjL˓m>q4c^Xo^z2_~tv oHF{C.e݁]YTuh>e.XksdC* $Y\[73_` ¦jo=qXʓ ߯/ 37p%t> ^7Sت,XJlfyH7jsk%s`?P`6xDWR3>p>0d?0Td   H .@ Vl   L  &l (89: F)G)H)I*,X*<Y*D\*\]*^+7 b,Bc,d-Ge-Lf-Ol-Qu-dv-w/Xx/y/ z/0000PCbubblewrap0.4.11.16Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.^^s390zp362SUSE Linux Enterprise 15SUSE LLC LGPL-2.0-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/projectatomic/bubblewraplinuxs390x  Jc' AA큤A큤A큤A큤^]^]^]^O^^]q^O^OWPWP^O^^WP^\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-0.4.1-1.16.src.rpmbubblewrapbubblewrap(s390-64)@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1^@]\Q\h[;@[IZVYdY@Y_wY&@X @XS@XW֘WWsebix+novell.com@sebix.atbjorn.lie@gmail.comalarrosa@suse.comsebix+novell.com@sebix.atalarrosa@suse.comsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atwalters@verbum.orgklember@redhat.comignatenko@redhat.comwalters@verbum.org- Update to version 0.4.1: * retcode: fix return code with syncfd and no event_fd * Ensure we're always clearing the cap bounding set * tests: Update output patterns for libcap >= 2.29 * Don't rely on geteuid() to know when to switch back from setuid root * Don't support --userns2 in setuid mode * fixes CVE-2020-5291 * fixes bsc#1168291- Update to version 0.4.0: + The biggest feature in this release is the support for joining existing user and pid namespaces. This doesn't work in the setuid mode (at the moment). + Other changes: - Stores namespace info in status json. - In setuid mode pid 1 is now marked dumpable. - Now builds with musl libc.- Use /bin/bash instead of /usr/bin/bash in SLE12- Update to version 0.3.3: - This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers.- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packages390zp36 1591410014 0.4.1-1.160.4.1-1.16 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP2:GA/standard/682faa9a149e5a3f4dbc632428aad155-bubblewrapcpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld6, BuildID[sha1]=5e8e9a44f5297115754798c5b71f42b2fa4be8e4, for GNU/Linux 3.2.0, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRRR R Rk1Bg{ơ utf-853950a5236597d9c56d2cc153ef169ff36b2c66ccc242d3a7391409d9e8c3581? 7zXZ !t/] crv9vW:tg1lQɫYo0R䂛ɏf2v*n=:ihsĠ,ߡ^_ kpV^d'tx1`O":@Clˠ.$sb튺FN_`ʙ" P"Sq@x' tW —i,."Z~^L8ILq҄n}T6]rzSw̎d{YDM &7G&^W )U]$b0`4`%#]}?^җ5B:kF&+9JfpFНFEHQ4&̭N wE'Ү+ g db!A>^i⦙q{x~q+ssDr \jԲlAcu`?l׻OfCs:Ozu!NQ V&;ɔh/ūGG^frA=]lAi& cʹĩl:P. ӽKMG,9;͕Ha޶L)3l@c\H;l$+.ݒG|+(قrHWڴz굃L45)Bj,xG5To=OCW鶴*7VWϋuEՐ[%+FW= (:ƣ8 ђt\~S m~#Ʉ0pȃ r0IV8UX9Jxgf^V\[Ee:c.vչ 3@guU g=Zy󍗗^c-\vˬԍl\EE@-@XQ$"1 ZRl+$mG~H8by8#G`x} sL:2@8&:oŔdq,ښ>v(Wj)rSz hnڙe^U)> fn/?gHY@喬c,lxу9$cD':-]BKM幓&˴kщ1 HTu܊_NAe}dgr!nPfCSavs.󱤛 汼݌Ao*-Tp(Q  e6ż~LaI̝o ˧l4ܖsa菘YA͍50ʷ@{*~Ҽֿ5*F+Mϱ~a%+IԾ~ e{=c {P7%E @dhaX+&E$Czlۭ)fOc f(Z ;~abx0ְƊ2c*a4sJmqtac݀a6@b04,w}(t/Lثߡݏ]޴H]o]$y;:>W%rB0j~N;Ջ֡ \E= w& G(*hkO~<^P;mGH$ -=lJ^҇ٿȚ(:5})3o|MJS.bOZTT5}帥r3XSKrWydX xMsu̎LO޿fv W[Mu 5L.`z\ os8 ʡrCU, kOVj/: puH6SD):!-uiI}ovTf+>Bb-`Wo ?8V:sLue$\F==(붕l z.$ӌn310!u 3'874ǑINtć i[pa(EDDpw,:Ⲵ Ut7;q{IyG1d4y?b4لcS kCMPHX|$vz1LH6j䆽f\6έxQY$;LwOsNed&(]V+9$V}]|Hho9WVuaiɽu'j3kLt$Ϋ;-Q^ ۏMmU[nz\&UhiC-3oA zjNyb^1Y qOŧbfIrQ;&m05>X٩0 㓹G`nÌMe8`_v|k}-Hs}>v),XC*>͏Htk6oVR^H"hV) !6>$'~ %fus[?e [m"B3B̓ۘiiU?ĽjBf c?r]r*־ I"B TJ:P NXP@v~nDUY` #v+\zUܯ4[vgR*+8ӟ'+q`y:UIš<֮7sw8Hr`X,U wZ\-tnƆڴR%]$h?u)ȴH%[D^$ :qvmGZT0'׷dž,7ZP""x?)c//%ΰta;~}N-"Nl h:mOғC%f4&UJ3Ұ=wHp H\As9H@Mcs~r<) GҍÅ5vjI7Z󹮬%͑q ,GԼz*K2'hswef<);rX`#VZTa"𞗽eRNZey~{zVVfXǮzRJXQ b$R.Nu/">?>6=|u_:^ $\2u!Ks:_ ձ+<bqɴKyVO跐'zXL3>wd]P܄+?ʍJ$>Wb8"7oS[?6hPT4STՙtȥ[,]׉%;1GpFh-_ f¤B|d}K{a=9 (L%*FxS/3t'q]m _r.60:4!jۮQb35^\Z=>x} ]R@e/ը.T Aȸ }ٛtQF?B<=rv\Ha1HYz-"gD墢 )HHhG!3V@WC093AWpwܨt9l9_zeLag_U P*ՠVH[ꟻeb- x LAwEПj:?p.:K={kÛ;OIU蔂˫V&lS`:[.QqʍN"X]rj/Dn#5зp],j9a0;Tu2pD2gH|BCQ_7-DL)S_xI7Dޣ&.|:ȓfl{S GƲ0X^._%DAĜh['}gϚw̕N֔rpOzVv=iA5`1D\KJD$v;0'08|[chZv1B;bOEJ5pdġz/'|@= I[kW̧M!0j;0훣7$wfYܦ8!>WGdlاa 66ʥ8wo6 94adՃ+Z|"o&.o\(I~i[ҡte5ic)SQkr%DބL >`n {v_3]rV:AO (^|~3)E=:ƌQ@jlޱH4L^7bcәB U.w9 A/ -9q}C pס Q ($k4>Kg[,k}?PN 1Z磡wDWąex֢߆|&;!T 7B&sT0#}r~::\3Bjwtu6^gi Wűď\)b{""b!AxQMXD6'yvII{]ߛ۽p8ЙWb 67W#cg>|3P +4ms&\\VvXިb_ )iӿ>5ZJ,XTW ^n[51VБ5&q6J3=(]l&TpHr4SFN+e ^YI,bu[ -N ^fP]3dKhJ,O)qٿDCI fC8pgwޤZ4U vc[Es+Owh:˥Ra:$c]m^XR~z\ @f4]ZQzPQ+ZHF㼢\¢L[d6ůj=*%(BB=^:C)~Fci`g9mӀ˞i qcOvq(v_aF+]E%jhkvp9s³ᕣp \lCcw^[^5#Hc>)ZyPhNhT8G -CoZ clr;F_a$ԃ<uy?|F*B,̩}z( GPLz'JۚwGp}NH0m >WZKPQ8f` d% lϞv^ަ i<&ꧼIw%4x(єk/ڍrF:/(fҘaHKSйrկ2',79՞o.,>PrIË*) A4ʇ`M?47,IҚ4.rӄWi/Ye|lxOcPxC] )8ߤ*>~zpJ0+E#qoѠDVv@4#qTǞꨗ⏅(1 *v \&43D ֖HJ<_}Gb7&={px"t" 8/gP5<(W={i}hܲ@ Tgf$qsl`VɖΖwi;~;|𔊰e^ Kir_J֌dԝ}W-lP|\#\kcͱ1ec dݱ5@|{_TUV+}م CCuZ]IY J`"/o[ xg9J;ܰo$s Jg.Q3A]qhn[Ʀݳ*.Ϛ/'0Z\N EJķ$(6?&(Q;pg^@%B" Ň@tɰ鿅q3AQﻑm*ϭui#7_Q6d;b#GC4@?jCI33E ȵ4uI|SMT$MbzB,83ˎ~"10 q1k~>#F%[:_' oF+̸kҺD-G7o(L"e86G#V%@ Ɓ{(J8|w .I!{L4\o_QÎ4S_&!pdw,@M&y><7)Ck*bFWB(A%z$IыsR!\װLU3>TXX[4tzis$|^AAG]IOx,o: Ax\P2SA7\vd!$lL9FEi& 6jInZ\GL?DZf ?vv'C38`c(xRʩ4g^i_ Ͽ9\ a> ~jQ>CF&,f>xKw&7 "r\k\2ulklO|]~qyݍF;YEӼpSH:a<& @O21:-Vަ-QVIonNJ gbsiÎEV"uds+ryl-R,֮j8 ~DCVJcz;rzO|´'a|EcRjF8od*@[GHe0MJy`KP [X!#; #=2Xvԁ6b-EiHFYO ^P)TeڄȤ聯v=V1?7J.b>#乧Čυ[Ψ"Gi**$DKЉ 5E3pxN _dqh'RYp%M]cɫec 3u%p53'}ӻ`px!k1Ôܔ9eHEB+[߶ɣv;ϙ~kJah9 #CBS[%#B9< p҆LFIKݗ+RPIV%T,pgJ@B2'-HĕUz(4y4=+&PW!sq@$l8LVza䯶3$F;NdE=p#8B!-̺?GQA!G(n:PH\ *}>y5L 5P9&"gE/M@~&/mC{2cQ0&gOi:D?OI=R7[;̭m]N.L(5(>S߉Zr`R|r"ᅰҀ*%NcLoV~!UKv#/ D}}|L ,O# >GϪn.:e)S(dpj;>gz2<:KT|W̷n5~$&_]p=1zuI%B41-5q#nIj8Bfq8"fċhK,|)B"͑MTH֜qPr`nm%R|zkPKEմ̊r-Sz[SV~6JTMYh~sJ Y{Se>0;1~&PAB*aE^.D8o?}|(@+Cv#meD hJuM:/n;dٍ 'HZkGבcƂzm{l_T&εDTGklTx M_$hzʳ66јN`7-pV 1U&7Y- Kїv"=mt82ъ0-dI_IM׊aEغpn7RZ;a>2` 'B*ovл}o+<ɍ/,; f{!6KȑiiF& "ɑ[:0V5tW_զBԲhj6oD$i09˞N蓠U%$0wk FLiT~L]ĜxH'E!a.$&8ke;;!<'ԋ+q"1Z*nMz7sp'|7:m{t$mUlwdU }".ARn71~`%0^wCa:;Qv˖t^OsԧTԂ`t 1HjLQKt*F!զgd~eU_g F VDvA=NS*Dlff6yX{aw:`@\ϤzOT~m!Kڇ,\_ yO"! z[t#z %Hln,k|Jg!QUƜ ˭hq;)~n< J͵W5lC ˡSl$9[W.հ,tnh g^5f Vș*&hIp]ؿy⋴*'Bob Ț~r ۝W:P9BYUɲmRIY ROqt\%*&n fǕU.Ј+5k7$1hy]_$y´ AAM^`p"܀!+(´)H"U~M'X4dfw89 Ŏq`a2ՖHf?zFaϩL)gMx _o!9 ]<2_Ҥbݞ1Xkb"u?δ &"mz9ˑk爈{ +@lU![AGyO,ݡ`neeʢz&Ⱥk;=%% e~-$\n"cO<)5[o.OJəh&Ej[@yCՄ)z Rg&+Ny!\)'QՇ= %'XiP“R>"w$fxG7xK khWg!|-pfiIas$0HEO Z 8Q ECk O@EqmVymh7E*]g2P6dkteK(6{܁>m,xxHDȥ f޼ 8.,1 MZ]f[:zrz ,( PGinlt00+Dl3{&$*3I(VmL\COE0ާWX?)i?BdoF7Vϗ~oGV5 Iaik8ӗ.~@KвvbKz ?lt;.LJO=~?Xxe z&y$? ;&?T`= ˛2D pMzdo@_ ?ehSUj) z^)}p*(|.ˈ%$-Ve ;y5V;~n6Yh}D5~`݈-K}m|U2~WN\SaA =eneXĆzNfI%+>|1o^ʖN|kpfxr%#d&ݨֺHC,;剄QУO4 h b1m0 (VM*k[C% aKlhR2:s_u$^qH~)#vk C@:BZØ"H&B8@@ ڐ_T=hvs<7ΝjvdsϋKDRR iͺۙoiɩfSdovO9ZnU_`i+$?sgd#îΕ\j`,UG{]ghR ȃBIR(#77,Ԥ}Җ$#~͡䇗k&d!3gMR"5=q"0AѪ._Mmx"zNIN^,cl&r~9oƞF/$+Սm>v5/vR uq1JZƌu.$ZNH[bd+ d$xiƛQwt9\ʗ wП46$ء~]X҂mQ_DJ&V/V(59'L/, {\*'%Xj v\v%=h}}Z< WKa-Ǽ.%mA/dS|13jF"6gUs0D|")@)p|Wj+,7 #] knȺ*gG15j/IW h~j G`R> XڂHIEaaxuDԦmqlCadUHU ҭVpmO8w,SIn"Khh9Cv7%Ey53Pqi*RrKˁrOـ΄0aaV<8a9 `; vhrSmSzК;BDFw0 9{E"lM #ׯtMH0bXc4oXܼWA_'YH &aVA)La6}JZ?'g.\Wm#i_0Ye&ٰjpwp3E^Kf%+;"}R63SK e$|$4z~@k&Èc7as<( ?oK:/ŕrlsf'y׊7X]GcHv׍ɧ9`P fŷo;TiA77yX վ:a֩-Jm,} *U>Rp'Dw3 Ɗ_paL jnzNv`wkb3O!(R/a49TJZB5X7WjRSoʀ{k5ZVd"B@\MJX>cNs3:Mؾ#vU_Z2H3ʺȹrrcua? mO.vJ?٭ 8)urkP{)XyTUÑHT!L?CΤy@f )S:Ty[F3dHD1CŠ2gSUNw!hv }QtQѴGV8>l;y,[j^~Δ:cr't8\M~  MAL]-5Ih8z4};fG+.v [BKC+n(*ZiWwYtu yȹ3镡X/Ŷ)$KW <V0uԔrrg2۷R`3?wKFYktS2Q5ud} &).2%(4u cTb.ȟ"lԓx.b'j.P q̌ _Eb[P!n(a88.Kd˫.4dؿ9P|vpl^([64p\K7"=Od*xPFT ޙ ںj!J}[W^q&jONa(G|e,]^+aϸ7odfbA7v c[~+p&Fl`gu5+kGQ:F<0HxUBMႪޫhмXPS]]2%6Ua[ޯeCtt#],u(=x3D!f;Yzmhwr+1K Mቴ)2 "&B@B.5q>\LfXZ̏g/h99 k8c(Df;WGU粣ޏ+,E+X6XT(JG+ح,%P'!·ۿQMhq+|(pЖŊaCNda'!IPq T:EԘr|ZĉbN^!$%{_poȘ@k%sajzz<5Z5&W[ oZ_vrw!Id݄&tq?zkb.o=-SLm?>&{aJbYO`HjO#tE]"TU_P6խ=dW8 Kod#-X0 !'A#lJt{W.@.]54!ks :{k\% V#*@.6ʗY􉂉,B;`|?@9KłGWJb'"`C,XeHFQޖ߬@^kvvqrm)LͅN7ƤĻ/b#d pņ-2!3x /@g2zl 3.|>^ ;. # yo^S8I7ð}7<]!'kM/1d0vF<`e]jl4ΎO߉b"& C}.B:k5 rĒaKvZqFw /˖\XƑ @g> w5JN&â4OLv0zJmE.СCja%. \Q:W躏G:Ln<[^;$s]۾6&=b(kP%՗Ͽj76}wmAݺ؈iy~iR=ずK]x!zO볕]4@5`nhv$ N)j=t.JA3#P>hw' ƌ<ݗb:~[ӗSIb=F.@~Ϝg& " =&5*[#>]S ً%iqvE:/q`KwX 0cIbwj6\#WaA+޳zASYf Cnsڥ?0eL\o+o!~x+HK3ɉ&aXac\yyy6:VgI;EFLN"j%On0N>Nm. 껸DhmV:"<wx*2p/bڛ*{i;@p]ʿ@+噼&Ru?5P*lẴA|ߚ Ϸ<9#Kyb#rY*MX2v{Et´VJ n‹bpG[[FkX wI40ҀkOmD-Q[34UYb]FU[K?TK@ <-S$`Gt7&U.4jk2A/!b0rEźQcs*U&&@bV]Y$phbfgk9šE즙TKS~2ˑBؾ6ٗ_?>o75[xBSXmld*#ol4x\nWmDkyС.gc+W/`,Nɚ2e!3d1]B*aܻe 6M:CNP"(aCT$p*ll? |A6P#~8kU޸EڒʀT`˴V<3P?͕^᠞aL/qz۴`1-Ng '}:g)^orWmYi'gu^&LXF% oĹkܘd)3J ԉD,=Wiq?+ $SlaS>\i}%pgV!7=?Ę_3㯐5VMnFo%~V${yW鲆=5BRpÄ1x n<s+|P3-9*oJb4Jɵ]+]韽c  *&@v`)%k)qmZ#g8κJ7;)6!\S/Kka?uߩhjfc`DnL]aVgC,=rZ8S?˙"q I4cO Vu=ِjϳ\W骝1@ ?40]õu+ޟ_dxVt{a-=,$ 7#tqe-@^Gdr>Au.ŇB\fy_ Wt-ߚx _:H Gk<n\{(U/5 SdfN8Ktb qQrq{hy#hMgU%in"rƝUyO8GR1:8秄z)‘ \r:ea2f9i4<ߤex1GW _@zqN 3?m7OFe&< WxӌTcR72MJuTF)uCOoZ, Dр>$nbB<~!Y-MDlbY+U~$Z!k݋L%Fȩrx M˞DE8<3TeI6ᴀT|;A{ hV7`e]s 'S;)}4<5W/.s*S"`OLEjTL,MgpFߓC5]TFx#^A֑hß;LR?2sY2w!EޘdK2,libj,g[+ټ qEvuYub qEP%u"JgqE=/ Zga¡'S1sm\ueeI51`7{ȗE@$Z44b Ѐrj|\dA&8ӆg-\t%/}k~z 'Z}`}oקUf4Nqȡ 4j_ѩ':ϖx9 X}#؀N> %TPeeکAp6 z:g,Bq5 "y%3~?呈&_ &= SlC O7;jy!5/b}6_*Q˚X完iU~JsozmQxN9x

Tݡ? +_v!! &uA@ :*^g^}ZS4[Jg8Jnajw, W:$` erF%-!©;zW5YnHGE ] 1ly7Ηityd8owH6QmkY`MwCKѮ웺N&!l/b<Ǔ@`04C[?ejeC%B ^`[/-ذDLC"xOċqNn?Xv|oB?@T [4bbORjKE+#0 G4/>3_"Ԇcx}?A5 ^b Dm^ed;S-Te;Plƞ,6Q@K(r"'=gPsl?4QT77ҙ|!Bc6MSg.0,+)-̙;s9UY.OG 9+,.D)XqSUR٫ 7U+s/mؘ [+W“`""D/ZwB_ jѶ $β8F]ڱF/msYVSB19g/M !/Ґ5u< eG:U9Ś,ESWōIfEKhWr6T>ڳ$#YeH9;]q-"{#xUrEd]CVpFTkA]ۑpK$>ß 'ѳ㒮k۵ ֖sYycKʤ6afq|ݟls4gCb?١ƺH&u ӧ7Ur#~V^n]ek- uZC2-JŞH-FFzT&yG\ = V 0{ ?&٨N fv|3〳y Ǹ9πDW;O?H=͊3yz(NK$"IhDjARAe45q@ HGh><Ֆ)Lj{,85Z'{w?礨VlY Ϡ5Ko.Hpؤ՛ l]>ל#~Ϥ|R֟=-i}xDd[S8"HXxϴ͵M&hĥhP л;Jyj(7MO.+f(aTHeƥd&ll^_ϖvq0^qWJ]he sSdWeY|țBfdHj>Y4Fnn-rL3 OG"-*OH1B(w/ג@|ӅEݴ:%;%|rs)5xH>6_&%@9x3[Um.p$ߑvqh}ڸP 4jSV7;!J"0 C9-Z΄)R[rծmw k_QP4\~ƕ5'9F4_YTWٶ8 NOVL T IQ(ܶ?/p")OXO8+1?ckHn6g8<ayذ+iO US./ aXʑOCɐ\ R#Mh/`dN)ת`X4A!P5\Yt9 )=?9R/hZ׌2SRL£8qRT:MDcRԀ \6nuLChJ+P>7ɋɄujؐۄ,Y_PR,!+Q3뒄g'"O/Qt3Q#f,Hh]AxkJAWy}u|cBڏUΘojl&ֆ$38AyoGw`~_?#5T$MΡ茽bΜR(pաs3҆?O|2L̀ _5٠Jb+=#be?6:GvHSNN%e"26@`duGb)yNYBq$ a! 943<-+ )aRMR5D O'5Zfa{/<&7n_9vZ>J!Tľ%]3&3J쯪rAՇwN9іLn (8,)%GUTX3D(48DYƳۺڟ6|K-e6>^Xdl-t0{<{U@ݷf,&?τ>4㞁!?<6g<l_i#(b )Y-(<1oy$PFrqM.i}D \G~c>0*m(؜\3fR*Y(WE*3P>@>cؼ_!.{GjL9ܶЌ`7LOєJ%sX⑍eė9f7`ųG͂D!P& +d18  {{N ]֮-v7gJdB;nq?թ2F~&^F t̕E_CY6ݶ8h5V,TwXu$ I?>htER h.?U% sTnZm ~O} 5SA ?Ȳg/G/d6?/ zE`RM![)/Ű '4]xa{RO{ 8BL1kCfb{Ex~ÿH&c%uɃnAѬ0swc;i_tNk 09:fQ4Ar)-3-2r`1WRJ'O \ckZ4x2(T4XZJjv*r$F$ӆq$ U?]xԃN1Qeor+hОKh, =z@v\*u].>jb.?bZ i.,'[,nfaj>N;ZAH\M*BRQ}k3ĢfUM ]aFƸ1ww4Bc{z8mL@ L"'Ŵn T SQ7S:wDnm J8m~!xqG~~'QrƧ*.)M @ݞ)pтl*?m'xB0|\Ŕ-O:lĭ~)3ag4:̓LЮ|ڭB~}d=DG(31sSw[ur`-Fg<N72zlZsfpIȄc# W <^uy-%̱vAH v=m빝^ iJZW>QHkUACYm>%! L ǙJkhL_,<7("·K1n$dFA6z2kn fxאᘰg̝L}_?,0wxVF̄`Bw 'U,k * O %M=L+}5:]:6PJqj9d!Pe{咩'r^#X8)3xɦ 35 %,&&C5LpsVcOKCӑ{EGY}QvՃqREn.07IB^"&'*U[e&3;<#:QvJm:!ؗqάC[~_X͵^zv],sGI6'zLZ~Mٯ83;ࡔĽ4 |SFo/7^F6Qے$ǣ%U Ng`Q<\ EXIdNG9[H .Џ{NiޘI'唅Ms=RͫC>nO%;gP81B叏n?`EMTg]x>39@L@U5~av+6u>'CHZqgTɲ-V"u@9iC[D+6ďX} {Pgg-s>c8Tqڗ݌^; p@d0}U$g(h:L􂥚3^^QPY<gޮ-Ze*A31@Vd8S.@fqSsEҮbO)(Ck'?O%TΕH،r\b1XHʩyA"ЗUG8 ^hHz{TdDw$%eGFYn͈/ô<\ӑa,b:Ha(I)eXw#1kz38N z{(?.Wo(쥼qDV@]X BonEۙArtn [W 3+ HI\UYRaSK9.Tfȧk\=p$? uBsgگ(1.jb o ~3;FWñ071 |đ&GYrKcoD솱*-sl@7U9r..Ә۹f$fwv>DÎFƭ.Os-,Yܴ]Z% 2C =c^}?FҒF"`4J|BֆI. sViGmyC> fM^Q|*ǪN1Pk?ȋ- G+~{qsOv2.~ P sիA zn ξ-Yv6VTMBs_y9Jh,#B)2ȥ"S`T.y` `T^/4R`[YhWΤFNG?b`(#O#u&{vJëȫ|ab$)5) *e@]->SB]3t[|+qcB~ka9BUyi!q5<1. ELW"ϟ N![D䠦껫4w߄N $<5HVYo܍_-gA!J<7c3cj+κːdatLr{;%Ye;dlIoak~]=#+\\!m=_'7MvajN ;CrcFV<u174s*I#-4Kͬ. e!쮵Q;N]A3,4uK茌cb_kȝ6q>7.-2@ Whe"oɊJP7''`uR,L3)/VYvEYBQMSp ߉c\P'8esFG̟(w˭$St]x=PMƩAuhm/%/hn߮GvFFZo#\a4gΩS)) uŬdV f-W\#W/G'צ%Uոkl&C^o!xɁ0A6{0XBM+E~xp]/[ew|)r*$I-yegm5" b[cp)\"{4bxw[El,`e }%nJzizV+mYgtTUogͦ}⣿ PEe4 Y\9Y*##2S{W=fa@;kac@K.쇺< E0C(v4G\ l B{=2ldtZ<mJn1uZrdwY1}bfMD̏9yIq׈Xv{on$( iZ2=P=YL jAʡеz&=ar6ۡ[z=%B9}!90{_&_z|_q'&3 F0X uȶU1NLJНzV=BގwзTc78Gk'JL4Ѓ2_R ҔOE7L5C1[ʄ'MS> pYĉq g_K!ӈ -RBw|Ie?92a$ި釪j+˙n"\FO~RX2sRV$ס~=U[~$`2iH'=#,a ҼK#a.H({TvsX,5@cGR gKvJ/jr&۾C3HJ`KCe)ܪpW&<ü%꼠4q%$qߨ[OYCeGJBWT"#XO{B܅pE&}Mm¥x:QWmo(D}; c ;@;x Ul1Gy֟yf.حDM|F)7w5 M*[ y ΍}\%:Pf'~B,NĬmk0@@Ÿ/QGNNI`O,͆uS(&٨gRP2ѯZRf/Hn`Bútmx Ѿ=R\B&hd;V(}Z3Jf.)+WkB0_GkUo8HuznΤn|#-C,b( *b/j'!,?Z|GwD:d9P-=5ۇ>y9HR͔ ?^~%"޸w*'ۨ#z?ơ9LJSM7ZSs4gdV/a"C7'W Rz4)zM3YXuݧLk ljj`Y(J<@ [ @K H 56|hƧ&"f$3%=\qk"iv I{=bC˶N߹T`iT;1!>>٣ou(K`?Ȭ<ѼbOcD@7o\5/նRIMzފY/0a㋔$b*ex~p24bYIJ_vj.: P-oO5E&UHrHƭ )DB݄Cy愬KXt(\}U1;WGKa8],WNRhuQK=@G4ΖWBwcR`= hi[NܼF{P| 84^␺M~#֢[W%I]Ak050nxկ\;G# r4)WJGe݁ZKzEc&g3vюD27ZUp{ZHGhj3k.5Ɖ#n}r̛7e=yU%X|8kNԺMVwcgFuwDkٰ3kK ͹GG/co$͜Yxc{0#]a,={._c0+g2`d8xH'㚌@n<4qm)~ϝ%l]Fq(iHL*lduyVvZ>y,Yh/qG:e Pl^#sQw]hhL,{weӈKI~/ibcakI;/!ѳ~I=1uBkvH;a5 "h,YA~ ȟ7 ^ gyj r~dOd;O"]18$|!n}-O٠Uus5^ZC R!Y~M4oTDט Ži®Z⎝jξD(R{Џq;q㘞 :fFnXnG*olRyfUj]3bTjl1'd3_Vpck u/gв9hDֳoKXOP}Q{o`B]ċ_s"n1l`iuHdH͙(8è4=DhV.`<bLUϗJ_ؒ8Ji#x7\ZZG#sLg *t2ʉ={b6#:Vvn lxOݜ#h~Hi ͽe̩&ie]{a{ŕzH.17נyNAUAT"Zu4&))mnfLnj(,"7-JAD xY,wlh !$\, ܅2l 咖|[GjݞSٽ}Xp=ڳ:-?,k6`gR]6u%;Y?Eep<`v@/pc!MnjߔYwpzIoLDƨ 0̼TWP{PlIadMp|J=^kp>Ph.xk#9~aN02V>2wPd{d,S71 SB:ح_v`-5ny^?D^VkF2ŒY&]$=ؤ8O y|`jf=  ,oic $%> ҲV.T7Q^_bg/ iApXf0 OTI~My(<ر/ s(As)3Ŭu!S7ju4! \UHU6";QfjIE9@,-'~0MSz L1xĥp&1MO1:~R)IS?[6_97 ?g먃# ٽJ<䷄QLG~dFHqvS4!qRau}i3K{D YMpyw*/)"M*\PFwy0U#"S&skZl{pWJ" ,^/$ugފ{𽡥g]{|%4C@r6{zaǒ]RhM]׮,1'ޅhqdӨRlT ;%P5Q{'$>w!@+N8>HfrTwe_g<,$6g빊ѝ+ Y覸{JT3ѓ) ^vG3$^&?S~_Q08#!-Α8B&m8%9'H/]z'_zM*X=ӗ]473jQ7f|lV1Q[rJLEv3/fYegi@5kM3'sƅ;|Y!=F\34Md:A\L 8jv}B)$#΀zH<}Zv]E3aT<0-p>LkL=M{v hΦ[U7VBWךw/Æo\sEzc/ːiP3pzzĮ{/ϖ_ƻ[u!#9١>H0Ha^*k : FqSͥMjal;v&uݘ׶2[doYM]$rLoL6٣[93Km&h3w*} S9j`A𩊦[CwWu).y()Hbk`ge+՞Q[Ճ#-fPԿd&֒WVnȹѱ7{.{Q+7-4Pus~%k~V i@x6{HdgZ5`5Q~s#[!V~(BYZ7)&qsa~}o|2G;b`..* dGcOCI|W R;"`W`mxPGkh=VlV50@y6U?#<;2\eb7*LqƋ5,'4dyɆ78њ\a5_Wh4Zm9.6 7u_kpqJf!hcܔ|rP4;ޮo6%Lg!@Oԑu FYsPv"=RfTG586~ ]bJ3CzWzpj㶢JSn lOFD =P~?#{YlZ=jAJx/O+ o4W,ɀ JWlx2I';:OQ{2^3qDY GW<ڿ2i'[wlT{Ek$1[kWv׸Oa@W4-#duVڪ)E>fA[^-.GԘy 5û0?6#=%r^%EB^#w1y+TJ$N)#J-"| WޚE /AղLa ? YR@y/Q߬F8==bw{zYwo}yˑ؃FMݺ`t:%&*1gͻc3_xqwJ~@ܹW+4&1X~9DH' &֘uH)3JMWl]lO=VHߵl]\#pk8-pΪaY7S18@}u+뽕}o+e1lxsHuMI]GuҘ*{ ܜ 1 jL;-Y502sdzp1,kh =S:UR)zWx fjYt`fҎ6 tW/`ϣk~R r]b)ɮIrqBjogv$ p5 DA( -R!H[xāQPKiI?^b-nKGv-ωM<[bN\EG?qpǭ,Ul]$YrӐJ,[BK&r ]oG:&IL"*>>>^ÉYռЌ)pD9c]i>OglTF|&9Rr`.jJ }M WC- lUkA 3q4`2U-2阅Ar_I7ɱ:&z/[%d7IS#g9VY LC+;ǾyiJ^۾SO(TaNdxpvSpĴ\AY&޳Gv1_n:ikzY KаGx' /RKHdwkNxoP ;ҢA}VrX*/BYkDZw$ˉH |0z<|>69e.qۣ+Θt{ ̸rD@S ScQ~>F%9ϵa]@E"B~S`nJX?,V0~VA~W{1>>Fh1=PXmb ^GN󒖖(-4Qz?R*L/"pR,cA 2 ;T+hT@!Di|1\M+rU=1cë:LJj敞#~Dn 9培v Q[鿈IC R'QGOJ?^߮5L#Z4+Q4`&jny+7Xp&@e?<_&_]}v&80-dp7d$NDBRvp"4M:E"G/=Ǜ=Ϲ `ZF*z-C8IcP( 8&oĠpkyU'JRb tt,Ӱ 5LhZHR,j/ɝA֎An-G15 =jF030P;Ƿ)2="GmBn?.M9 F={I]jvF=:C(Θbf>8NQл= N*= gsF{t_Te,r@U(T\XF1R 92Z-žDs!škwRP6UX*]5Ϧ-ׯFr]rcB@bsg= q#R-Xz8%0:d όJaȡ~<D}+-abp 4P٩`wblֺnhDg4z;`0Kkꖂ a¯'1\ 7{GWO"_ mSaJR;X ݓl;f .}-*|3Z% -D-GI$ 1 7z16-=^iߊbLjI({,qHf҅sE~=wu!4 b*U-cZ,%V9%F, í ץb\[iOȾ;ٷ(|!H?Cp#۾\^i\4=L h/mv]J[i@58a|vDCemQ!:}UѸ ?=äy@cg;c}/Ⱥ#%?cG$cS]*?Dw7?4*'9UxZ/-щz(pߖ ^g^fvGHQ ]KUءؼ`̝%ҾbeŔr!{3DL yqT/ m%b'3J^O* l]{ڌ?\ߵAj3"LpOX_<+H2.zv3`9E\IP+4CwO0.ôi8(zNOru^6Y]=C#YM(OWjB}>6")I#b`1 J,EA+fv!h]e4ğS zӯШ2Fq|k^bB-]v=b~L-4Ġoc=B3v@^jIR^vb#?7j_21K#_+Jy -["?YIƭ &ŘmSny3&瘚%4x%E&]5ErNI5gW OMZ7{&gC`Y^b(8TS " ɛ; 5n/^xalo4m]lN:G?;+1> @X`>qo;h/h{P V ]C843!f~-ii|ɐNv(-Zj]JΦhI `º4ELvT#v/6/;TI_=ea7N5%s/i zRSBYU0.ry*FJ*ڋ"OE{: 8 歯[`#=4 BFbcopSYPLʪԞKG|ߐ̀/I?@ 5oT$ޢɊH6NKhU+8=kHFSk~:4dZ4K Y)9'a1|ܛ|_XR'VYʞRdֵD[cN`qzi3Poԡ8)EibhF mX*lЬb?,f[{O!;J[9MG,rǒ}ȴ ӕL/u7>'Ucf~.,5HC]0REFw b;ͥp^aQ{m/|۫bpt]k,W'F--+N6TV|^ǷvCًR'+]a.>,<&f3eV,t)N\MӟFk P}px) I.njv$~{ =ֺ+sK륀+LtͳG{ Aڬl5)5&4V+"',t$k͸u CV 7!qTkO5s< tfICCܸ4@!b)hQ'(D^HBz!mŨn՚<qo| r=6~;Q8~`{$q+/`O U $`Jd&ayY~E̩1R_BG7d(}b3b:UЂt 0>HN Tv+Elz-D= opKخx_cV+0eVv =|Ę} ,_p KTt#):1skK$&6֠F 7)*N ʣZ'e(0!>ǹ_*aT^xy7-*\dj - 9Kt?tuXؠ'-2\*'#.SoGCm9齕gƙ?[r+'7%msYiNBLvVnҕ}ҕRx}a1S' )` zɳ>Y{LWeOq`?0ȅfQAϲoq0ewǻ g'-/#3X82*; >.[§"~̫cؒvCOgG ;6J'oeubyr'زxc|eus$vXQLҶ YZ