ipset-6.36-3.3.1 4 > $
A p \Zp9|m #>ܮzu"؛E{LNƯmZޥ`YBuH.WGƂ ;Gj}5 yb F-:aPR''u)XESq6&Fvrw"Z 1EdB/(LwzhBJETJB]^o*zɟVͰpeWdtHCoiO2 Wkԋb07098afe020cca5057f04aded8d2cad4b693bd0 da205920333523ba9118a6e35a345a5f93828252a1a3267aca91c820a035691d {| \Zp9|x*$i'}ff9YsDۦl\S Nt|ԸsuMVlG( f5$ a2BuYck/2< 06j,U ;/2;5Xd~{
Ve\ rӥ'i)ڱс9!eOR C2}q
OZD8\{Hf a0ھ
* y >}x>- ( > p > .4 ? .$ d
:
- N j p x
& 0 L T l : ( ` 8 h 9 : F * G * H * I * X * Y * \ * ] * ^ + b +) c + d ,J e ,O f ,R l ,T u ,h v ,p w - x - y -
z - - - - . C ipset 6.36 3.3.1 Netfilter ipset administration utility IP sets are a framework inside the Linux kernel, which can be
administered by the ipset utility. Depending on the type, currently
an IP set may store IP addresses, (TCP/UDP) port numbers or IP
addresses with MAC addresses in a way, which ensures lightning speed
when matching an entry against a set.
ipset can:
* store multiple IP addresses or port numbers and match against the
collection by iptables at one swoop;
* dynamically update iptables rules against IP addresses or ports
without performance penalty;
* express complex IP address and ports based rulesets with one single
iptables rule and benefit from the speed of IP sets \Zs390zp37 SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Productivity/Networking/Security http://ipset.netfilter.org/ linux s390x j '큤 \Z\Zfd5332a6917be96e4b3eb820647ce79841be2fd04024559f8bfcca0aa73935aa 2561536685438a879330d846b036efc89c3e5969860096597933316ef714352d root root root root ipset-6.36-3.3.1.src.rpm ipset ipset(s390-64) @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.4)(64bit) libipset.so.11()(64bit) libipset.so.11(LIBIPSET_1.0)(64bit) libipset.so.11(LIBIPSET_2.0)(64bit) libipset.so.11(LIBIPSET_3.0)(64bit) libipset.so.11(LIBIPSET_4.5)(64bit) libipset.so.11(LIBIPSET_4.6)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 \QZ@Ze@ZP@YLYcYXXVJVVU@U@Ts T!`T&@SRnQRcRcQ@QkQ& @P@P @P]@O@OOW@O Jkstreitova@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de kstreitova@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de kstreitova@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@medozas.de jengelh@medozas.de - add ipset-6.36_service_names_for_ports.patch to fix parsing
service names for ports. Parsing is attempted both for numbers
and service names and the temporary stored error message
triggered to reset the state parameters about the set
[bsc#1122853] - Update to new upstream release 6.36
* Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged) - Add 0001-build-do-install-libipset-args.h.patch [boo#1077037]. - Update to new upstream release 6.35
* Userspace revision handling is reworked
* Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
* Missing nfnl_lock()/nfnl_unlock() is added to
ip_set_net_exit()
* netfilter: ipset: add resched points during set listing
* Fix "don't update counters" mode when counters used at the
matching
* netfilter: ipset: Fix race between dump and swap - Update to new upstream release 6.34
* Reset state after a command failed, when multiple ones
are issued.
* Handle padding attribute properly in userspace.
* Test to check the fix to add an IPv4 range containing more
than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged) - Update to new upstream release 6.33
* Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff - fix build for Factory - Update to new upstream release 6.31
* ipset: avoid kernel null pointer exception in ipset list:set
* fix bug: sometimes valid entries in hash:* types of sets were
evicted
- Update to new upstream release 6.32
* fix possible truncated output in ipset output buffer handling - Update to new upstream release 6.30
* hash:ipmac type support added to ipset - Update to new upstream release 6.29
* Fix race condition in ipset save, swap and delete - Update to new upstream release 6.28
* Test added to check 0.0.0.0/0,iface to be matched in
hash:net,iface type
* Check IPSET_ATTR_ETHER netlink attribute length
* Fix set:list type crash when flush/dump set in parallel
* Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
undo spec-cleaner refucktoring
- Add ipset-destdir.diff - update to 6.27:
* kernel part changes
* fix reported memory size for hash:* types
* fix hash type expire: release empty hash bucket block
* fix hash type expiration: incorrect index fixed
* collapse same condition body to a single one
* fix extension alignment
* compatibility: include linux/export.h when needed
* compatibility: make sure vmalloc.h is included for kvfree()
* compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
* compatibility: Protect definition of RCU_INIT_POINTER in
compatibility header file
* netfilter: ipset: Fix sleeping memory allocation in atomic
context (Nikolay Borisov)
* userspace changes
* handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner - Update to new upstream release 6.26
* Out of bound access in hash:net* types fixed
* Make struct htype per ipset family
* Optimize hash creation routine - Update to new upstream release 6.25.1
* Add element count to all set types header
* Add element count to hash headers
* Support linking libipset to C++ programs
* When a single set is destroyed, make sure it cannot
be grabbed by dump
* Check CIDR value only when attribute is given
* Permit CIDR equal to the host address CIDR in IPv6 - Update to new upstream release 6.24
* Alignment problem between 64bit kernel 32bit userspace fixed
* Potential read beyond the end of buffer resolved
* Fix parallel resizing and listing of the same set
* Introduce RCU in all set types instead of rwlock per set
* Remove rbtree from hash:net,iface in order to run under RCU
* Explicitly add padding elements to hash:net,net and
hash:net,port,net
* Allocate the proper size of memory when /0 networks are supported
* Simplify cidr handling for hash:*net* types
* Indicate when /0 networks are supported - Update to new upstream release 6.23
* Order create and add options in manpage so that generic ones
come first
* Centralise generic create options (family, hashsize, maxelem)
on top of man page in the generic options section.
* Add description of hash:mac set type to man page.
* Add missing space for skbinfo option synopsis.
* Support updating extensions when the set is full
- Drop sovers.diff (no longer needed) - Update to new upstream release 6.22
* includes the new set type hash:mac
* The new skbinfo extension makes possible to store fw mark, tc
class and/or hardware queue parameters together with the set
elements and then attach them to the matchig packets by the SET
target.
- Add sovers.diff to counter missing symbol errors - Update to new upstream release 6.21.1
* add userspace support for forceadd
* fix ifname "physdev:" prefix parsing
* print mark & mark mask in hex rather then decimal
* add markmask for hash:ip,mark data type
* add hash:ip,mark data type to ipset
* Fix all set output from list/save when set with counters in use.
* ipset: Fix malformed output from list/save for ICMP types in port
field
* ipset: fix timeout data type size (Nikolay Martynov) - Update to new upstream release 6.20.1
* build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged) - Add 0001-build-fix-incorrect-library-versioning.patch - Update to new upstream release 6.20
* netns support
* new set types: hash:net,net and hash:net,port,net
* new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix) - Update to new upstream release 6.19
* This release adds per-element byte and packet counters for every
set type. (Matching these will be available in iptables-1.4.19.) - Update to new upstream release 6.18
* bitmap:ip,mac: fix listing with timeout
* hash:*net*: nomatch flag not excluded on set resize
* list:set: update reference counter when last element pushed off - Update to new upstream release 6.17
* Fix revision printing in XML mode
* Correct "Suspicious condition (assignment + comparison)"
* Fix error path when protocol number is used with port range
* Interactive mode error after syntax error
* New utilities: ipset_bash_completion, ipset_list
* Ensure ip_set_max is not set to IPSET_INVALID_ID
* Resolve corrupted timeout values on set resize
* Resolve "Directory not empty" error message - Update to new upstream release 6.16.1
* Fix RCU handling when the number of maximal sets are increased
* netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream - Update to new upstream release 6.15
* Userspace changes:
* Use gethostbyname2 instead of getaddrinfo
* Support protocol numbers as well, not only protocol names
* Kernel part changes:
* Increase the number of maximal sets automatically as needed
* Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch - Update to new upstream release 6.14
* Internal CIDR bookkeeping was broken and would lead to mismatches
when the number of different sized networks are greater than the
smallest CIDR value
* Support to match elements marked with "nomatch" in hash:*net* sets
* Add /0 network support to hash:net,iface type - Update to new upstream release 6.13
* more restrictive command-line parser
* documentation updates w.r.t. src/dst for hash:net,iface
* allow saving to/restoring from a file without shell redirection
* kernel: hash:net,iface: fix interface comparison
* timeout fixing bug broke SET target special timeout value, fixed - Update to new upstream release 6.12
* Report syntax error messages immediately
* Add dynamic module support to ipset userspace tool
* Fix timeout value overflow bug at large timeout parameters
* gcc 4.7 support - Update to new upstream release 6.11
* libipset is now complete; ipset is just a frontend
* Log warning when a hash type of set gets full
* Exceptions support added to hash:*net* types
* hash:net,iface timeout bug fixed
* Support hostnames and service names with dash - Populate ipset package on build.opensuse.org after disabling
ipset-genl compilation in xtables-addons s390zp37 1549459631 6.36-3.3.1 6.36-3.3.1 ipset ipset.8.gz /usr/sbin/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:10273/SUSE_SLE-15_Update/33022e4a81d0ec463bf0c893a05b8d50-ipset.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=8a705a96a9035605344568d8f46bd4a1b9639774, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)
R R R R R R R R R R JOW3_ ģ utf-8 187da04c911720c8695aca94b845c92fe3cefc38210e7caa5e16d913228a1346 ? 7zXZ
! t/'H]
crv9u= aLvєfRTRU'9V2:u~Xe"A ! b-GubԆlq"8 nT H[!%kJY.Dx[#%~uݲ: =3A,չr(ܵx;UsYOYmixNMSq2R~NyejB.`0`p -Jx'X $C7YALjI T.YO 4(O?f4Yr5yr"(wҰ67ᑮ1k ($ ci>W#.+ )r =ư*TwSsD .m!)?zX^EݻaŗZ.w"Et;LAoU
R
HHăhE;XSK2/J0ܩgy;>MLb3i6<0i#AS.
5J4"fk\5 gIv%T l"DmMch;}6/}
Ē-ŷ("C[Ɋ!1%5$X6k,4u/2?.zuZ$:!Rú;0y,-jS OHWN|Y+K/yǪqVq
:֑zP ִk ijAW؛Tѣ!|UD~6UW@A5T63MI $,uQ4ŧKx#a[^IY>Ǥ=Ia^2[ #sk㣌ЯQЁuJt4v{2{e W!ixxRruCHӜIjZ9O8ga7WXInzzAP]R~k+52n祀l1bA^wRrT N @F8p80܁
kFdA8WR'1:N5o~p"i }ȼ?I u+[rZ>J06U!&LsÌs#d~JL aYx\v>r[,ʽw/%hrOuOKwy#2$IYpO?dcݖ}p3K0ih8y ʚ/rp{%e } Q/C2uw >y>\t1s1fr!nǃo@e'|]Yf4zL&NtS
$ b & 隘n; U_[0M]kQ*"\Q+ݨ+Ġ3sH8nG[{%\IvEs'
Ns J]CfkDS~5xkD\CL!dv*tcx,fE!$ P7RB6GM% .6K ʮT0Reh 5xeY cK>C(d>m
|{w.0w*n]` g`":1EF;?l~~Trڦ߽| CeE[nYҮS9 ֎"Vm8tﮛ 4V)4
ҵ\HXA9ɂ) G{z UԙxK!Wl97*%vp5ʙCvL <J :j`|jMe VðI
E^ˍfx꯳o0>"<3: (AXb'wAS OQ6NPUO}l2+Xa}55UW)E17@T3TJCԥ:-t@i5Lpx ;5'p8꒝IfOMd5}!n\ r[+'UG~~re[Z()FfDBz=d3DvyvCx,fO/Qî\FIn BpO2/Ys-N}rQ9Ϝ-_H߉ }mRui'J ̋-} 8'@fn e. ) Ud{!u}'-ZY71k&3T9D|]R \# ﰿoˣXLhLH.d c2`
GYu]Aգ8R89MB3|NA HrՖJ)'Ǟ oOG;$oH0f
D mjf8=
l`.0o4Q@IXb/ a1Vsig;5ďB .rkS8iEWb.V !s`@e[ |! ΔZ[z %
G]FcA*2y2 *vn #%KePbn`%Ii+9H٭%Zآ!K:錵 a#+ݟf
TټZ u
b.|W}TyUD V,ޗFrPm\i:gI
TnD>#pSNI\ߐj!WEoArNh pݷV3piR6Н)A0Bb9ߝPԁXO̖#gKLWK1-/2ثSYz]2'-|ϲao(ZB]p饏<ߎ v,l\w]MgI2:l;̶uA"9
oOo'Wh(U9UE ~O? \UY<cqNP<ЃҀ4c})鋐bcZh+5X@ hnFr~9& y)e~!x%&"wF4s 2P?&ɮtIѺoڀiA3ZxtRAUhVgC6b-1wD
J"G5 ]]?yɴ*3B M1%s(2 x,I6ufA_ Fy}),'p %رovfpȕMa%x!1Lr ֣+G:nQb<Æ(z(-^߷<<Ӡ bg
l ݨz/CL氟q^}Kpr8t2[ +Mۯ 0fV,7~KewolSbp#i tvgh૱xM/5-WyBv h&yw%;; M6- xVr h-ܵNlݻI?g 4%nD r7NkpΠpa0]Hje8)DTZEhڧ '7>&ð;^h+[Hsj}r_6_Ą_%[T1^X^*L]#cDılT3gu`)ԖܱCY&P.3!X..vsEb$Ѵ!2(Fd|7j2_=09SXm $7PBlA>>[^V1Rq 'N#.69 j#8Ć{GXtMد}V"Z~9|!Z
FmN&Y5 ㉸2~]ˑZXtgoJDxPP9gL %s ̡9.Kq"6䳆$Ը7n0W72 ḿmZO)̺ !Q I#&={i- ĐщfCyO]
`3fn in$Ո <24-M ~F /@
7 w/p'h-Ƌ_p
fFo4 #Ѱ2EY>;Ôs9ATc
DRor/dQlBX YIsS{9ސMK7 Y碧mw^l9&8dY4G.C Je++Ofd!`X(.^ e^ 0q!%zVֶpk<:E: # 3&X곆qKtnOYttY AkupM=1DLꝟbݵ f3`APȎ\5Ҏ-ΖKg}H1㇋w3#$%LxsXf*.]^wR,mrM6O|?k
6@Sh77@0 D찬`w EsEW
~@R.nk d\ٶ4RI^VXcpmfz
U>Z4C&zg`E6D,Mތ+-^ETՊN&P ҿ|?RQVa>1?HVkLcJkF- 0 0V5ξ{&v:BLzM)S}+ q쇣 TvOʭBeXhDCVOtZ
aOIo.hzK?~ O8_ D53ckqu GHǭeb 0fx'!gBOH2 sF*]ͳP9 JixB$+9lqmX^b<89m[E28HBF{?֗/xFkJܚ}56rauf;rtnok6% -Mpr; %kE7q^H%0-<*&['X1,h5'#ƝQꌦj~_
Ra5,]kzS ~lRZ
, J$!uo:]]9 rysyv=4# " g 'ϔ\#A9BHT7hik_lw"t Ee2fU
#(xIzCڹ!$$[LJ(gۨ(}j +sH:/wtzHf˫uX!$)Rv;M?Mۯt/?4$E`ULG72z؈'4E⏞ib
U=# <$õ s?<(khAk`fZ, A.,gP`vb &Qc֕wuꟄ $R{"ũqiު5قl&>B,En{:(VuGy$3X?Te.1 <>ym4kfx~ j
&
o(&!UpB*c4)tӝHb lA"MCE!ZSI6-CBpZ5k߲t,V Ԇ` kD z
lwfE(ܒ'BLpzd]e5 no#8v7$,ȭ%~&SHhVJQR|QǏ!tC51 =`io:-w]j+dW7eR6O2{s*(,u^݅[Bln1Vd J^:ټbL ǡ{@Q[ ?Z
U [%}\^cNr唙M,NJ_|C 7յr\H]qx?\ 讻o0js^-Xr^je JW5+H~<ʗAw9K/P GV9mÕDRI:fK]?ϝ S u ^&I7o
[x+tF$WRz9vx\"eڝ2_p27(^ԉ<8 0Ar = 6=B~ 'MCÏQM.}6dpF^Y @4J&1T-j FfLiHw2+`[wLNp乖*Wç| !ztnlUj~Ɯl0DhA0FW5 qAp=a2AR@@2`יaCBEb*1ፖ\`lB}K\5f$1֪l &'Kr 1sa
&FvS*$ :I}bƮ ƻ O9ZO"PHDZ`ebFxUCYRxl vΡvzШR XVF?Yz.[,WTuÊPG>lb~|%;\&f2 *qM1k`oY(@쑺*'Tu.h7ti2өuufjLV%wLvr=E}%fv8:Vݖߔɺ UNu"KrIV}6:q0`GqL3UfW5dfm!VE7Aۡ#-g,\n]ҋkm؋1R_>hKU/ל6BCcu\)R_jYuecC
ܡtd:LSQ?Ԛ;)j',pѠ1*w?EUw)&{~$Gp6ӏ-Y"Fz ydq}(#m$\bkwk>O7&j 2Jzw-=~=c N!a$ 5\Ť6dzfwvUהg8[l\`{ ePk4nrXGͿx]4 2cwY~֡AmtzQT8>HH?GΩ4 H 3hNఽ!ag#_|$K[̸Q @v pIYBxr/:{.! xD3sfA06XsH -TgQ:W qp~k-ZDop`Ǧ>A?ڙ;ȾHܗ>,,pG>l^>i0V>
c'
_M&ʹP
VJ(ZPq Lf$1f(O,[B85Qy <T+>\ӗH(ue/XC:R8DҚ<̤9Cm
G f ,4u$`YV(] `O?1:w
>F aw# >1
Ț.:.8T(#fMӧ)mU?Ƅ)r BJ㽐d8Bq&zGlngRb~tyC)$8!{( FP2egyYe98Zf4GP9x
k{XQ75℀_*9.fn@#X``ϭq[" 0NDȔF 0a`ߟrþo?zgr KwUWIBG$& NywkV4k@@K*(x)
tԲ#;NZWq0GX a1 FnF'8z*2GJ-(*@*s 4 )Y ?bHp>J͗M~S{{wOޔeJDckjm I~Jɬ*CժqV V_D( &9듷4_W|c%u °7g_@$R[?LN8"dTs"I:g`I \ !I2 Pbt)x?`#>u8F>SAXU_, q+ Ǫ
j^ Mae(=PwxIy.^` ߚGʃZHñ%䛝[}t8dP :˻Tco9=)5
(w(Uy [ijUKQX^d-Oߝ#q mFLeΛD2Ҙ`)
qGw\Ckh\ zm<:+QjbQҍzu09yBV&|AF ͡&bП{t ̝ 4 Of2"Y-
n8׀y\ 16k;ƛ BOH
! "_BY(r^.,h>S v9?ك4{n)>;Q
KzT%qCB ت`swJnjJS*
o2_gqhp2j@}h8BH3ǽ:Egz"f$ GDiTJ.d*w3w 3V"A2kx?2 ny
&ۊsHt,o d:sJ<AmU H&G=&*Pv77G;SiT|:NJSz SclCW@72פ=-LX+M%Uc-,{"R Nvj3Ww2bR*¤&1ԔNd,b75)MAǦ0ԕrE_$0Jjd$}bl,j08]zP_=/|2N*JBk&e[j,eo~: @on¦F$oZ2ҋ l| i.p"lY
ݢZ{"Qۉ=PF@bW]˟7@ %MV 1XDc+8. @mNW̵qǎDTo坉C=Ӡpwjdl8`JN}|H7F=y3>Fx[fe>%).P' `-֎lPMҘ-ӋS jJ r4l W Db[?Hu ?MprhDWs<9q]' _ƋсKS{*YސrhU{JN9"Z_z F 0f[C?A<]ng0̰OߥrH]wSa3/lYs?,Z >eVه j"0HS 1:PglDjb
&O@1XId%c^Ib%MT'TZ^PE뵿CDal&m%wԨAhhuqaeU*ZZبI!dh߁ظ>jeL$ \M;/l͜JKA}Hðp
3k*b
YDܤ=|GR'-Fz*5~ϚfI-{htgVO~"ͷ2RC ot uRLεsűƒu U^[0V%zK9\5+ZcѴ*ڨ|fllO'-l
P,xhί g!)TA]qPӟt=GO[`S$QQk2MZ *k
/.] 5B ENjJޣ6.)QU_L>㓙4|KWEy72%yKdJw=?ëS"fb>t
^=%䖳ܚ4-ϔ1Xdǂי R4qJ*x ,ѢƑG,3@v~Y]EkIrҢ/J/(!ʤ
Y@CDLo.d㳊
Te] .:-3'՚2gk\s/6gXm|8a ws7GҡƢq ,VHك]2gN^/,E[m%ҷLE1 r˶
̈ EkKS癈S >Bv̗RIQu\[#Y$ġ178N<^*_=(~+Nڋ;OG(QKH
,:yQ1ӑC˵mHW]YU| u rTHbZ#i쏢:YZagZ3kw#߯*@Ζ}v yl/uy;L-s8>X{];?
v?IocdG,|U.Q !ؙ@=5=ix)zj7
⚌cxq.eVO,l(1?GQseXOPq[вj`gy/k%"b {;#I:YҊdЋi=BYܘter$ pLdVuYi}`uQ M)D/?d!] 4.6
_@N]=byԍg#|5Y;AG*i S> I g#źCdcfOaLe.Wit77fNu,"ׄ\^Ip\Va f_8@m?F- -Zm&1[ Qzn0찠I;tf83a^˕
,G{rz_
?) E3FGZ S~2^h,sh
iq^}, ts ok j+TF f!])y7$)UkS | ($R #OiAXYyZ!7]>/t81sG T} $L\ ?^ X1
G_%&i@h
[K"_}K v>(9bK-of5Rkk]vD:i9o6xn<(mRA NjrfQ/{}IYߨ?Bmi1mOhH QoO7 ch-TU\YT3>ʺi+X/yxCMJb66|O
hc
]cA @X͘5[XUcrxOgƤ+-
{e|XfOͤnOD/ldz{܇ۼ*q.bX OO:`NpS$ /1efEmlnљRT);ܼ*ߍ
/X:Tpb^ Sm.\tM;q[N/p,3կ̉wzIUq6=ϵ __d4R~{_adO:14/GQ5VVfÍ W[HnryNK+QVS@6 0/*n`pgŻN"
MuY nܲ[`?a+[I H&=}+_75Q O?QIJ]`܈YV+/ ;pp UHx_x6N>)0@s8{mVYaġy!x8!*sƊEgJ,qɎ,lOUUEMȡԃJju3u0
z+4;+ w fP ~N,6Pt*a sNo Q溬 \qPY&l($O 5BTW_M;zqOP`˭j
ݢlߨV4F#Mb~Tp~
v-"žPqp;`z;S9|I^'>j-Yd8*"!cf[ģG 6 ,.GK?"aPFQ>A*{ ǘ_pD rZhM 9P Z
0COKgB]E
iP P)8udE:deTuիYCI.ƕ0ʎӰ}3/`ET( /_LL룴)O bTՇJg!y<]dI<>
G%SLuY@ _'ƫ ]y
LCFܰP _Br 9w5-◥q ;Lbb>{]IhԶx
S44b`QR`!m=І(σ3 Pt;18˘ HL!;dž. iy (%WtC_:'U-:+A%m C;Т]IPs67tq1*nt_ωe3 t@* vsMVuJ) @PYP|R;w2zf X6=l#wD+_.\ylZ< 4&NO 'JC
H=MS4g:MUVH-zX徢FR)g
]R}YRM< .IXO73<@$lYFs$Y1p$?>!Wt9TsJ8%
7[g"hf54gзW} -֏9iJ@Lؓ%T] nl4(o]I-?5VȰKkG!203N=~.G #0@d@ II 4͟ՃA[ЇW\$ ds:JJu4V*-
TL."ûuhpl*II6~{ /npM )/npkQYG6_#A$硙.Ñwá jKyή%s?e ^C(ҕ ܔ/ǟE@-XӇlP!e"{5@
(zA75J b Lzq QmhGcc hKhHp蟕p;& {. wM c̪E<1 %Y"./um N q+㹣ڢHS )
H9;B0_Q[
k9PLSoDSF^̄@ir HD
ooj; wQC5\IȟN
~8h#`F qw-nfL% \ʊCsaML-,?_sdG us9)YzUtg\=-ɎQ'&Q\ 2UkijwPnIjUB6^lkO PjupD3Ob,>b .Nʯ3E}>U {a^Ec\EERdI.[ԄY\&*&{`\<<p
Ot հS9^NUx$Eoz\M6
xXve7^
h(Fe / ݷ6B]nHeLB t;QLo'>{3._FI \P;N#w/`UJOu.ex*ôVyNb+C MGLsʝC|˛
DЇ],*rܒب B3؊ Kvt dH+YB^%8r- Az~)Fn9S!Ӓm}
gpsK4sdr 0Ǹ?L U| qa.\ :W5s
Q
(.1 TJowuŪQܓW̍By7mP*cSA#syfyK2=;q8Q^f|Mڗl@7aWc[ z8˶iBK^FchN ?Wڇ4<Ţ ل(_F9݁P$ev5T6K& |>`Դʪ _1o Hm/]1vmZ-gU`*\ +AxGY9tjC_m6q+ 4[w9g|`n A}goJ. jD&F^RK r}x IAڢ[F҄[O$g!攜pD/w~ Sp1C:Ӵ˫
ۦNm;A wG~*NqVgz" q."S633)'`arlr,a,+'v ]̲
#t-J|q?u y)?^8dbunT? ̪U ~!pç~:*qC Ho Ș*P{ziȬ>E -F
YZ