openldap2-back-perl-2.4.46-9.53.1 >
A `dp9|B -`2 <ݸJ(aUUַ5sCClĄQrG@&1w(ҫ5`*Twy⽮P.TV_I.X^4:Y;EIm 0w)KF.¿݆$]ކZG0,zAL;(V&)n]]R%B]Wג 9Z!|f#D8mz90U47EnfeT&9fee4f8122c7979050f0756bb940cef0d81e49cc 87cfd9814dc1c018425ef59637c60db7604371853bd41c167f14eb8f6dfcc9d3 @ `dp9|# XO^J
O>\LEdeu_ YðM@ D 2KentP1L
h ⶁ)p
CCvxfxZ]n,^bP֢ , {n
}Ⱦwyi4&.6~?}nYDuӗɟi۷?=RWLb,c,_?$y BȾ٬f jNNT:ʬ"Vl2 ~]DUAtfR١#ls,8S GKs+'lTޔiL > p > S ? S d $ ; 3 K Q X l v
Y
d ( 8 7 9 7 : 7 F O G O H O I O X P Y P \ P0 ] PD ^ P b P c Ql d Q e Q f Q l Q u R v R w S x S0 y SD z Sh Sx S| S S C openldap2-back-perl 2.4.46 9.53.1 OpenLDAP Perl Back-End The OpenLDAP Perl back-end allows you to execute Perl code specific to
different LDAP operations. `es390zp37 SUSE Linux Enterprise 15 SUSE LLC OLDAP-2.8 https://www.suse.com/ Productivity/Networking/LDAP/Servers http://www.openldap.org linux s390x {8 `d`e`d`d`e 6b21e658cacf77817ef2aa608440d37e1c5bf01140e9fa3546ddd724743bbc4d 5fffeec6d691c92ca8475b7065aa6b593c5cda0f14c08f62ee96770e7d73bd9b 745765c45d372fbc49b7643f44996e4769fbc8a6cdde178327e99031cbfc4339 back_perl-2.4.so.2.10.9 back_perl-2.4.so.2.10.9 root root root root root root root root root root openldap2-2.4.46-9.53.1.src.rpm libtool(/usr/lib64/openldap/back_perl.la) openldap2-back-perl openldap2-back-perl(s390-64) @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libperl.so()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) openldap2 perl rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.4.46 5.26.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 `KW`/@`+_@_@_/@_FN_?@^ ^^*@]B@\ڭ\r@[H[@[vZ @Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@X Wk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V
@U4@T@Tuwilliam.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com varkoly@suse.com varkoly@suse.com ckowalczyk@suse.com ckowalczyk@suse.com zsolt.kalmar@suse.com zsolt.kalmar@suse.com michael@stroeder.com fvogt@suse.com michael@stroeder.com rbrown@suse.com jengelh@inai.de mrueckert@suse.de michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com hguo@suse.com hguo@suse.com jengelh@inai.de kukuk@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com lmuelle@suse.com hguo@suse.com mpluskal@suse.com michael@stroeder.com hguo@suse.com michael@stroeder.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com rguenther@suse.com jengelh@inai.de - bsc#1182791 - improve proxy connection timout options to correctly
prune connections.
* 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
* 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
* 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
* 0228-ITS-9197-fix-typo-in-prev-commit.patch
* 0229-ITS-9197-Fix-test-script.patch
* 0230-ITS-9197-fix-info-msg-for-slapd-check.patch - bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
X.509 DN parsing in decode.c ber_next_element, resulting in denial
of service.
* 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
parsing in ad_keystring, resulting in denial of service.
* 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
in the Certificate List Exact Assertion processing, resulting in
denial of service.
* 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
cancel_extop Cancel operation, resulting in denial of service.
* 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
saslAuthzTo processing, resulting in denial of service.
* 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
in the saslAuthzTo processing, resulting in denial of service.
* 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
* 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd
crash in the saslAuthzTo processing, resulting in denial of service.
* 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
saslAuthzTo validation, resulting in denial of service.
* 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
* 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
Assertion processing, resulting in denial of service (schema_init.c
serialNumberAndIssuerCheck).
* 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
* 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
control handling, resulting in denial of service (double free and
out-of-bounds read).
* 0215-ITS-9408-fix-vrfilter-double-free.patch - bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
in the issuerAndThisUpdateCheck function via a crafted packet,
resulting in a denial of service (daemon exit) via a short timestamp.
This is related to schema_init.c and checkTime.
* patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch - bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
where openldap would crash due to malformed inputs.
* patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
* patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch - bsc#1179503 - fix proxy retry binds to a remote server
* patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch - bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
service due to incorrect validation of modrdn equality rules.
* patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch - bsc#1175568 CVE-2020-8027
openldap_update_modules_path.sh has a number of issues in it's
design that lead to security issues. This file has been removed,
from the package, and the %post execution of the install. The
function is replaced by /usr/sbin/slapd-ldif-update-crc and
/usr/lib/openldap/fixup-modulepath, through the addition of the
source files:
* fixup-modulepath.sh
* slapd-ldif-update-crc.sh
* update-crc.sh - bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
SAN's falling back to CN validation in violation of rfc6125.
* 0206-openldap-tlso-use-openssl-api-to-verify-host.patch - bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
chown -R on olcdbdirectory path. Remove chown -R on start to
resolve. - bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
* patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch - bsc#1158921 libldap-data should be requires, not recommends to help
prevent user confusion around configuration ownership. - bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
authorisation of another connection, granting excess connection rights (ssf).
* patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
incorrectly to another backend, violating multi-tenant isolation.
* patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
* patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
* patch: 0204-ITS-9038-Another-test028-typo.patch - bsc#1111388 - incorrect post script call causes tmpfiles create not to
be run. - bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
- fix the script - Emergency fix: move tmpfiles_create post from the library package
to the main package's post script, which ships the tmpfiles.d
configuration. Fixes the post script of the library (-p
/sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
* source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
used before constraint violation to the client.
Fixed broken memory handling in affecting error response of slapo-unique
ITS#8866 slapo-unique to return filter used in diagnostic message
* patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
correct and in containers we don't have systemd. - Fix CVE-2017-17740: when both the nops module and the memberof
overlay are enabled, attempts to free a buffer that was allocated
on the stack
* patch: 0017-Fix-segfault-in-nops.patch
(bsc#1073313) - Fix slapd segfaults in mdb_env_reader_dest
with patch 0016-Clear-shared-key-only-in-close-function.patch
(bsc#1089640) - bsc#1085064 Packaging issues have been discovered around the
openldap_update_modules_path.sh which has been corrected:
- the spec file was wrongly configured, therefore the script has
never been called
- the script should create the symlinks first, as slapcat is
useless on a system which is already affected. - bsc#1085064 Add script "openldap_update_modules_path.sh" which
which removes the configuration item olcModulePath in cn=config
which is after upgrade from SLE12 to SLE15 holds inappropriate
information. If the cn=config is being used on a system, the
conflicting items in slapd.conf are ignored, despite of it, the
backend DB configuration section has been also commented out in
the default slapd.conf.
In case of correct cn=config (the olcModulePath has been already
removed), the script stops without touching anything. - Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
* 0013-ITS-8692-let-back-sock-generate-increment-line.patch
* 0016-ITS-8782-fix-cancel-memleak.patch
OpenLDAP 2.4.46 Release (2018/03/22)
Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
Fixed libldap MozNSS initialization (ITS#8484)
Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
Fixed libldap memory leak with cancel operations (ITS#8782)
Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
Fixed slapd to maintain SSF across SASL binds (ITS#8796)
Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
Fixed slapd CSN queue processing (ITS#8801)
Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
Build Environment
Fixed Windows build with newer MINGW version (ITS#8697)
Fixed compiler warnings and removed unused variables (ITS#8578)
Contrib
Fixed ldapc++ Control structure (ITS#8583)
Documentation
Delete stub manpage for back-ldbm (ITS#8713)
Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
Fixed slapo-syncprov(5) indexing requirements (ITS#5048) - Use %license (boo#1082318) - added 0016-ITS-8782-fix-cancel-memleak.patch - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Add openldap-r-only.dif so that openldap2's own tools also
link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
crashes in threaded programs which unknowingly get both
libraries inserted into their process image.
[rh#1370065, boo#996551] - use existing groups instead of inventing new ones - added 0012-ITS8051-sockdnpat.patch - updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - Added OpenLDAP new feature implementing OpenLDAP ITS#8714
0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - added overlay trace to package openldap2-contrib - Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
and 0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib - Remove legacy daemon control that was used to migrate from SLE 11
to 12. (bsc#1038405) - There is no change made about the package itself, this is only
copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
/usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
"Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
openldap2: slapd crashes on search with deref control and empty attr list - Drop binutils requirement; the code using /usr/bin/strings has
been dropped in openSUSE:Factory/openldap2 revision 112. - Remove superfluous insserv PreReq. - Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
to let OpenLDAP read system wide certificate directory by
default and avoid hiding the error if user specified CA location
cannot be read (bsc#1009470). - Add more details in the comments of slapd.conf concerning
file permission and StartTLS capability. - Test for user/group existence before trying to add them.
Summary spello update. - Move schema files into tarball addonschema.tar.gz:
ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
attribute in the generated LDIF. - Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408. - Move ldap.conf into libldap-data package, per convention. - Move ldap.conf out of shlib package again, they are not allowed
there for obvious reasons (conflict with future package). - Build password strength enforcer as an implementation of ppolicy
password checker, introducing:
ppolicy-check-password-1.2.tar.gz
ppolicy-check-password.Makefile
ppolicy-check-password.conf
ppolicy-check-password.5
0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
(Implements fate#319461) - Remove redundant -n openldap2- package name prefix. - Remove openldap2-client.spec and openldap2-client.changes
openldap2.spec now builds client utilities and libraries.
Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
for OLC.
- Be explicit in sysconfig that by default openldap will use
static file configuration.
- Add the following schemas in LDIF format:
* rfc2307bis.ldif
* ldapns.ldif
* yast.ldif
- Other minor clean-ups in the spec file. - Use optflags when building - Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch - Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
into 0010-Enforce-minimum-DH-size-of-1024.patch - Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
/etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
"not index" logging:
0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif - Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
to address weak DH size vulnerability (bsc#937766) - Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
(bsc#955210) - Remove OpenLDAP 2.3 code and patches from build source.
Compatibility libraries for OpenLDAP 2.3 are built in package:
compat-libldap-2_3-0
Removed source files:
openldap-2.3.37-liblber-length-decoding.dif
openldap-2.3.37-libldap-ntlm.diff
openldap-2.3.37-libldap-ssl.dif
openldap-2.3.37-libldap-sasl-max-buff-size.dif
openldap-2.3.37-libldap-tls_chkhost-its6239.dif
openldap-2.3.37-libldap-gethostbyname_r.dif
openldap-2.3.37-libldap-suid.diff
openldap-2.3.37.dif
openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
openldap-2.3.37-libldap-ldapi_url.dif
openldap-2.3.37.tgz
openldap-2.3.37-libldap-utf8-ADcanonical.dif
README.update
check-build.sh - Upgrade to upstream 2.4.42 release with accumulated bug fixes. - Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
* Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
* Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
* Remove already applied patch 0009-gcc5.patch
(Implements fate#319301) - Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
for Berkeley DB version - binutils is required for "strings" utility invocation in %pre
[bnc#904028]
- Remove SLE10 definitions s390zp37 1620665627 2.4.46-9.53.1 2.4.46-9.53.1 back_perl-2.4.so.2 back_perl-2.4.so.2.10.9 back_perl.la back_perl.so slapd-perl.5.gz /usr/lib64/openldap/ /usr/share/man/man5/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:19532/SUSE_SLE-15_Update/973988899f41ed2d90252e8ef75f8516-openldap2.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=86f9b0de50ca6b92a1f7634bb7c7aadee918b38a, stripped libtool library file troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R P /2Qw%UԁbEa utf-8 6990afde0d5720983bdac3eb40ba7a9616993734083a43e13735107f031a39bd ? 7zXZ
! t/, ]
cr$x#Di|U |VZI^Ee
x~z#B@\r6jO&aٴy -)f.߳J>}6
]#@C|IPν8! X' x ~YmlT'C8Kz[[U(:mmKYɴG3Lr;A ށ!Ynߋ݄sbg|ڱWV$ ~.pv $iFpy
aL:B|*?|{|i`giVsLZlX0zg؋L^@ѳGל)W n w0֓3Y,R͵aGG>@KC0 ڟ1D;A/pI#^Vd' =Y7F1^q^8"Ò9r dCz& r NF9b3 .Cq%*ҁ.*SX1YZ1"J]:ߨRrO ջp |8o D$JvvOn#!./:ukE[QG q{+✒_nV`#RyDJSĵYRY.ݓ,W
Kכ3)(+I וcrH)!
Ra_ G%6dkۊ IS."*`x{xت=pQ);ʚF_ڹpuÄ1caLO d
wFR]^)GT t7 #v[A-~v imq"#q_ Xhr )ЩufkPƽ;#Y|? U
"O^FvhR",fZL0L?p6=ڌr+Fz7|}SjgMI=>kK{nԎs[63=*:]ﰹUEPc# `)
h~"ߥak4/g=lɪX9.
H)5oUʁПhn/!S63pr1DU-2G{kD#$wЩri鶗;Ffߩ,8(ς*wg¾m5obz30-y+/B5Ec m(t13qҮwYV"sh#qun?hˁDq 62,*ۘk9& cdS J
Prr.-TtX 0w3[QSL8X[]}o"/venX^%_a#%!) g,*r\y&q >%uu^/i
M@s]=LɊ}z1/k
z(F
Xf,k x.PvZG)'mh8:)-, 7aQ
N;kVY0mM9SA_a[M
r_hp
g'r1)1>8Ϟx/^ #/fA뚧ݖȫԣZD {(Q-8y:É]p$eyPd;_?sƤ?sN, Vc{S.O,zh=i]3P(ۚnX) TBt{2wBO<2VpAAuދcKiKD U_״4d+|]Y5H}TLU$M50+9C ΤT@L~ \
SxB\DF:9EטjkWN5YGO)6YJ$+hU^
'5W;hj\cɔwP">v5F( Tw5bZbnU0K(tcry%DVK O-y*/ЩԳw^1KZO WW8՜nˎk_!# bǛC%6 I|34StKt}Y0n#j^3+h~tcEp/${%FN (LctJaT)Aխ ]|igflr)aUa#/QkZjz=&㭣R9"\]u49Fl>X.Akݸop?ftGT!a7mY;t֕7lI֯ބk{4+a3 TʔSG?pNcZ{G_h$P/$lwz2}XG痘7@X =1W MW38/ϋdfa c'F4K[d##e S'2d餳a ˅'cnCf2B f58व,'
Ϫ ),\é~$>c'ap^aVh @
IVB!D%Y(u\G'xzDAm<(Tۋ_qOz>tYc2BHQ- B+w\l
lܙd
_וA[oF5 aτ_#a(c'XM` Q% 5>U !q$(Vg
5$oQg u]3>mi.3?90dC t|]¡!,$En k
1 gUhZ6q
6vEH9Տ I@E7Z+k; ,= V>^$tLdup%·0 WZ*v~)qIѾ]ϲ Z:eb S3h`/VN{
6[Fw zB
RMK/ 3ߏ}xMS y1Ч9W"VcE) jaq|8iqc oݕR"7n1]i-N*s89TtXv> TP4Gǰmfv8,;frRу-MQOً& ̝)mjNn* L"L 1f[ xy`^ͦH#+ X]
>;SUR,|p yeЮL_0uvl3'E7ܟ P#erHv8 (_a=4.Fc e rC6O$#]%kzrğ mB÷f)<=c̛L(FwV P i(S&Zzo O-9:evp-@ӍCGDb] ",Y;Tl2p#DZKwE)clzrSm4팈=HV/ƆUqrI-/W7JO e^syJjhu"/Q$MSdǐ-N^K1bu'-٤6ЭDa}h&'Lw8KOڍ@9'P/BW wBtQN]ɗ"Lz .'*g+Rýz/9'hamUͮ ؚˑv38XuL. h@;@%LOWd4zD #tJKL[[* ŗ$I44 |)R Od Gu aȞ [K Ԏ%H!h gAl x{q41'YI
4ad| wa ݹT 5Mƨ_tO
6;3/&i9V]_Qc\D̅G b8)9pqIMqH 2eXF\;QaWV#Q}1r)4HeIQhgWu_ YFJU&,n #e+.~ \/Rlj-ҥ{vT)uAē[8|pߜAf(ok; A &}RDa;
8@+?hhl!7u
(wu& j{ Ty-^(9ʘ0x2:E]Z.cf8F˅{fL] Ϻ+FjVDv 1 l'AlnB4G0 $E¦)٠GCZDd1Gr`5
V23>A<|
eۙWS(vHz HlADҸוupUZ
'D"EѓLqyw9\^h߈!a"ēKJx:oXغnzg wcCJdd6s+$S/Eo(k1-O5`piIŢ|kg̯ b@g2*a Ap]cW~"[aq?)y4;S24
|y]+ (esڱ&q\EpJH?=j[Lni dJHkwC]h,!2*
[$=:6x( au Q9EqҾA6C!IL*|*ۯBbvK l7LEpZ=;ţPDNBm!8I=?Mey|h`R[ӽ]Djۦ>C#}JwRwS)X]KJeKAfQƂ:_ y%HDS !Dv[gz3T2]§!˩.'U%rRj qyn>!]MƽQ: MOסFg| ߊ pqX"x j=)wq{'DJR\vFmc$Mi33 5@+!!G' Z{oL[aM^8LmK Jpqs;J~4A'T數EbCz
\n5eϷQRqt2 .ey偖|ZJjWTB=ՙGڷ؆@b8R2
>HCh4UN*6!/:ir9rfsܠ{7[׀ "UExn5F [.t23i)p`}x9gޡ L%ɜd L]U~+X=ƨE먊exwy O͗
GeHAMu6Y'HDJ ?fNA%#S
$F$y^]pPjA`FX*6<- j.4/ΣϪ}$wKAuiVX%.ɭuuWtļbOx|] ?,, Qu=`5j
@\ `:&&Auy8> }zD;#c(5Wu>oD7LǞ}t@03-9ƽ%i@MV|b*
R%? $U|" tba}У{1GM#9kmGl8B՟ ::K[b)8\ɱ談9E
@85 9B@&s&Z8apb
( #a{\ֽpغ7 HH\" mnw U&8p`xTh:i23 $U /FtrC>r,
]^j
i:11 {I$JN ^뷶vG{^LiX4 Z{ds1 XRa_[gfN ǣ+]N1T'4FIJ'p!;Χ @4 ĮEƶF*i^$L8ZEzS/UwgJOQ8El Jw *+aٝcN{h>HLQ-\Smc76ruCMNYFCOP-D ]{7f1ZrA f5y7(l簷~W
Jw&eCV0ҕٿ% ,G#%/1R/ l2*'ݎ.XA- W1f
+ `hOu98)%HTi(/y(gXws*,|YlRT.&]\Q_Go"$`m 4"5(Uд'l28?G !hd~mu^HBw63 kv Aa"jX
A27fdY;/M22 :fO5D*[(0`o݇+T\Ҋ~+%(x$ *VYȻpCN\wݕO
a Q7(4oZ {HowHmm ULJ\HV] VKBE,ϙ !2zv'?Xqiu<b븓ibl aXB4CoX-۱[>zFAz,uI>`;Ge2kS3g R'@XZ-u5쇱c X$2?\B#>\>zKw7_ 2cM¡ܦ lx#Ģَ~9Y^H\ƃV4f lp˘ `O{Q+Np3ba@
lR:Qx^]~
c*Su|zEAàbr\ Mxf6H#<-Jmu]B,zkt' &RV~]
(ηs /|nvV#Ш!Q1l5m,Mi`Wܪ 3SJUF,PaT/|xpB- l
_i$0RO6x-YD{ͷmB%w=hb۷ lHWVA|qYay 2;DvC q4@È߃|V*\&?o+R',l"L^"PZ้dNiMgm3%$~1hխNReccr A6 }.ڶ˻tٙWūV5KQ@| v(TtP t'B0ڏa5P&U`J>c;dex}X I!Պo_hoh3~yȈrBX~p1mX@Q-w3vSP .}}꾢3%Vٳ{M~E
I/4W6KiDWeQL( a5TSÛ %Vk1f9nуƑ|6BbϒqOj/iGLi8 冬F0{
n^J'+Ao W)YQAuQ&ٯ"{[g(Fٷj3$3qqQZ2Q~:wtGC 0㋄'^B0C';; *vtlڌp37.B ЌG
DCg`4\v¥CCo-HHRJ5,ˬ[k(- L .ש z;j
q(( 3Cu+DBloY `
Dmc` =7![o<6[ wvH'Ix!k1
KCh(a$6r=ّYP+A}8Z
ŋLk]\dyF 5ḞƸ$f㴸~"0ISS
H7.]Tr{zmd:VoSvdKN/YQHOnM 'wrFaʷ`R/NgU;aPE +ҏaf ^ڦ r IM+ .+%C1Z5@AeVa X
놆R"q{9EED:0ˎṮ EF& mTu; Jsfe,
Q "z|ݿ}azz qiU#|^[9er
{-FAN/Є:ڤx*/L@8tuI,!0g.5+4i#6HM# kX6Äop裫m kt^[nD4F.~-}
Kxf|9 UZof 9حF%Y(<|GJ%Ex Q@?o;9VytU~;OhpD$9 b]2v{,Ỳy?=.e̩gԛ!_ӡ1Ү Xjc]G^hvB?gP_nZ0%f?Lta!Llp8 9G]T
medG\fjҪ}N Ŷb}jhf E`E]- E±6I@3Ym,:^9v~~_ o^7眦OP48Ifo3)ͻ *Vm?y`IZFճF^t#+66V µTcw$:?!?jH_<
$w61jQ;'5j)-F'V2C @3(;)W ]nV%>V/0W65 h5E[v??<#w m9g;}T'^ F7/ o墾~zѷ`,_3M ܋9)/ɄJ(ϴ]a >e˔i taMmuL'
>ޙZ36 n'F?53i ]O ) .~ 1{V^dwL#6:h[lL4:g2/%6Wu АVa )akhΈ{6 r]#q //
%"qF9dR:3r"E`ز_F\nX]I`Qm} b]nZV4SRyc !?v o7ӆD$!J|Kg9 8 "J|^~MIZq;ri/b"- bPZ63E? LZUYyPz*J3pPG#?-_~\
⅁64\j
z l -jr)M:F}U~i?TW9ЃX :б}i]&͗DN~rB j[-Z݆(xq S 'gufK " X 16
YZ