bubblewrap-0.4.1-1.16 >  A ^ p9|z#lJ& ;PLJOQuuSO!X}n[/@fqp>/x?/hd   H .@ Vl   P  *p(894:F(G(H)I)HX)XY)`\)x])^*S b+^c,d,ce,hf,kl,mu,v,w.x.y.z////"/dCbubblewrap0.4.11.16Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.^ ZcabernetSUSE Linux Enterprise 15SUSE LLC LGPL-2.0-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/projectatomic/bubblewraplinuxppc64le p  Jc' AA큤A큤A큤A큤^ Y^ Y^ Y^ L^ Z]q^ L^ LWPWP^ L^ ZWP^ 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-0.4.1-1.16.src.rpmbubblewrapbubblewrap(ppc-64)@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1^@]\Q\h[;@[IZVYdY@Y_wY&@X @XS@XW֘WWsebix+novell.com@sebix.atbjorn.lie@gmail.comalarrosa@suse.comsebix+novell.com@sebix.atalarrosa@suse.comsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atwalters@verbum.orgklember@redhat.comignatenko@redhat.comwalters@verbum.org- Update to version 0.4.1: * retcode: fix return code with syncfd and no event_fd * Ensure we're always clearing the cap bounding set * tests: Update output patterns for libcap >= 2.29 * Don't rely on geteuid() to know when to switch back from setuid root * Don't support --userns2 in setuid mode * fixes CVE-2020-5291 * fixes bsc#1168291- Update to version 0.4.0: + The biggest feature in this release is the support for joining existing user and pid namespaces. This doesn't work in the setuid mode (at the moment). + Other changes: - Stores namespace info in status json. - In setuid mode pid 1 is now marked dumpable. - Now builds with musl libc.- Use /bin/bash instead of /usr/bin/bash in SLE12- Update to version 0.3.3: - This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers.- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packagecabernet 1591413338 0.4.1-1.160.4.1-1.16 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP2:GA/standard/682faa9a149e5a3f4dbc632428aad155-bubblewrapcpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=f2670d99b0346162687eb0f9675d91f21405ad31, for GNU/Linux 3.10.0, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRRuL{pF Eutf-82669b494adf166bae05e0b3a75e4539059ae459d4ade002752d644ed3658da35? 7zXZ !t/N] crv9vW=:^9y )yP~RAP}Kefw*8*Kqvᘖ8p.J:ڱ愿-mLԳI+>c=El6er$|0$X!~Ƕ¸,Tr{J4=q}R 궹 -%F?qf3?@5j б4N؞1Fp8e1ThSmAEeh>P /v3W;) =8Xjȯ7_H /IU8jշ] [39,%"qGr٪S\AEƼj2Ҡv&;n:{qgn5]!_l![ҡ[uAw2C/jɽvOT6[xڜ1v[]M #ڥe?$JJ8AmY"*c VXW_],PΠC4~`4;hN՚FMw"/pljc!Qrzwhm)th@nֿdg*x/o_#پgRJʌbs QiZ)(oy'w}U3\BBU1=䅬v>#ϻ=-9iD}Vq gќGk=!АD% Q$,G/Ю/WoN)`s(H&Xbby|[A~c[:RCU~_nV2V0 e)\w>1J0)-^?Dg^Lh ).A:սv)W[Ez̉L zĘVF\4-i'3G{`x@D^ hrҫCxF,$P}wi~QJ3!jyLN QC?\#$Ǒ3Pa#VZ$<}Pϥ]'GN SgZ^W#`惡veWG"0i>4Do@W5} pbY07hKGri9x0*c0Ҟ1c+tBY pi* :'[d} %lE}܆1HzBb|DjOA8BM#LHo9[c} ǩg<&lg?v/8qo'VyGPI͵zB ZN!\׻'w{aÅ8Byeȍ }&L*tV"ЎGg^f^Zd>d=v_>q0ݼ{h_Zg0s0Iڹ8^/ӪwvZ{~Q09ԷeՀ4<7Icz+umѹY$d1ylɸ\۫:'2VZ~~ci$9kbn1BLr,0{Ǣn*478Y\&EzN=EʌaWLߝ5fJ{OqY:2Ad"I߁B=`Ơ'd=vé{XGw! QI5M'f_kl\O-9vE;,>!ϼ [>`_@b}:Edv*@i<]jS=J 6EKyѳHRvq k OM8ϸ0b͍ Cgw\f k]eiKuI>ZIr/};nĆ4;$`0{0Π3=q\VS2 ER|L=py_WR?riN$LLcR}LN5FF C߱yVi>aÔm D:Dz'V}](jr*31h` ;6DyvN”MGL)q7էvѶ9BQj"8װ" aM5 67Il\VN•>hE2R2vՊpy 47zԭ!EXfx*5fY \}GB;82Cs!gB E~L x0/O h~e9[g}4 I<2'ISp>$7ip1[~m) ؚRpƻ"U6\]_"ɮW*M_j,;gâ;8"nzF<=WBNLc4܇񬓣qԘ-1xc0ßb0HmES6$>YT+FqNG)C*VVziT .iȯ蛊VpKrqj^vVU"45ξJ okal07Jw/[̮`Sh^!(3N9%t!' (^0sFhwR.o\Dz=և~y k@m&zɐoڌ% 1|YR1 ~򸯈!Di|CPЏZlm 3[`ɔJj, N*؍#b?#JzmMLUc|UeݾGr3II)]JNceTJm Y oeW<Ge1bi%φP}֬ZD^ o_sԠ[jʞI1R9ި5|N;6&q)a4ښ.vؤq_1y5Cz;ùlոV=l ڰ#9E~ɢv%씖9.WAf/Jdxv~l~Udإ?ZB3a*^jNZ2s֔t.+ ƥ12xP}[' gSk EքYfXnb *Tuv#=\JҊ◢U?P? Z>Z.Ԉ>:$nvlsQgk-֣iwdհgJrjaQTF& PٽxZ?!qӱ]$#͂?g~Oso\:[FhWG)= IyV.[Uykmnҁ)wG5~$eK 8)4  Zw 45`lL<s{Cju!H-|(=^+:8KFGk aCy'>R`QCEPFCa6Wp~,ӊ9n_NNGR,I#➉"6޶aָ/L>uo_˔(] Ԣ~1ujL1@WI-z [bo/J´_H/t~ȠC龒ږ){E/6qA Plx ͪt{1I70no]h*hT"BK{l CG[rDf#$Q2ѴNP{ˋF,J 3- bu>ܳMo ,Vy{c 4L}Dm1^P%rB X&ss߹T7D;h,W2í?%W)[:+AlN(KYwV;lGYҢ6\Z&.sku=S'eU<Ѱ޲(Zu o=+PWYu&'3 ¥9W]pVhz`5h0YMT N)#vGdb:9^ t \ш3+T!Y㻶|/v4Uޙ!ـxYwo& YpH|Ì6ٽMG֢y%+AM{o{t8^$%<uS+lmdrFd2ټ/sLRoGc,2X|)L&TZvHlgPz[h,_ ȻAqq+Yrڠ(ŋ U~:^zGosjEY:9S%t~VO6\5ށ9ec*ʔN+jS\[ߧ->T'$S0E"@׋IN㹽˓3̕f)'¯zmZޢO zCO꾹\bWpKQw)RSѝϊQչG(pp+%&N>75GG]rCnϼp[ʊYvUβ}p1EyKp6un&.FHR1#^gk${3ydygig~dz_j i>Md0k$ҏ5o/y?[~V+4+V]A>qr "P%),{yYQmF -PKvvrNbaY?l+_J5F>;fYғQ*dY.PM?=v*Cx{eG<%ٲB@kqf5?i 0o`}|r0lgsʀV5w{p1)OWS?`1;ELr_!Z_D65jU6FDy=*iUZVD[\c<8Z'Yje] t08pC7+>nXfcB z+LKgm xA8#k5CzHKzB݄?82a 狝CH{~mˈ$#_>ҲE ^u0WB+{Ro "K-U+Ǵ !.]?2QG_6hu[mk=5Y0|֢9MB5$(0t`ܗ;yL I7 kX^5AXYU5=C#Nj_n;0Azf pU`o"=G L61䙂EYeÖ`rq&y  $t2y׾.g1o[q‹>AO}oDʼn k5=|@~ZS,f0-cgG |]d館ÈslRz~A850 Yl|u05q夦VrdΖ`XC"0҃ \ԖٟI-͍Xj|T8e۰d)fO[ړ:7I ;u]a^Vo!|BuGiC _َpNH +Nd T9ǺM13%Sʎ;D"ҮQy>|*H|73Jn;~G7,7:R+u*~fs9Dwsի_4\gz:+@qx:4*3Ч?`0E'_3Ba B%ya=c-zFR&AraOe=i|7A.Qd\b9RF\x: +.&HN:y $(Kvm DF.|v{wׅ&.z֢u"2زݔ1"QM6pVqśI7`Zq$Jr?K@YW7#ȗD8^'?I=Y{//EY gL¹ 0u #oב,kܞ ZEKS C6b_QO l[@ 6_$r&`=j_.|Us@wͶs>zu_~ Z9mZ֎3w $4鷏B}3۝= KųĩjbwKrC&QړLNm"̒$$%,,.X1 V݇˻T?<7_mݭ$1d5+`-\0~5D3nSUi!G1׆NM;[V|GHH Ȫ:0_ 4o]eOs͉o`Tms kM>kt,ɓl~$10YBSHػSX?RpEZ6KR67B#OX՛wX ?"$/}y/&3ɩ9]],|(iKŵuVF2p#9'v+ufI`-*=eOCõꊹ]M|"%p{[K}ŰaqnH`MEV7W!|Z$J))b?=7カT( |Ax $ ux3JyJJWYf;"^GW kKX(<闹WG&T""j nrlxdd44Qp^H;W9?sy 3>\.DF@Kj/A&$SKL%^&8Z()csUYDo3ܵ<|AT@ywN߇\]m ADӂ5iJ& &%vq 诓+ !X.I>%aD,RLS9|QQ3tzhطDxs*/i ÆfS!< )9E%ĠzwT%ҰD.GI^-ӒZ@931)*y-&+Vsw2@\#/6V {;A +]N )LeJQxųq#{sP6%YM6 ^.2']"G{\ݔuUssa5:&TScRFH, ? ʝW;A7SE-Br5bu8ee$OT]ikMl)~kYB_&}=s~#Z/Uߩ 2K5Ti*&0GHRK0}9nZ=%/4Ak9CUC]M A!z]˽nGʦDTNլ9zس{SQryc/zMS1aw[;QdIdzX *oQ.mWLCCUrntZ=")W. Z+m$ +asV^M^Xlh3mPkciw& or ƝGEynlՀ6=2]N'kM?8NŐ$h=uH}j^ ƳeV{,~g2atޛ'!w!?@74p #\(sP犧=-e9'eA7!4dԫ^oN 4Zy.3 OWm)qW[.ߴPO >р 'J]'ir^=3π I?Zc#O_]|TaƘAc0YVwYRs1 ܚ Zhm"$:~ L!!e$뚹cbݎŞcWD'^V5Ӳ٭ op}7US#VzϺETLtObAOBeo?M`h>8iQdK@Ȝ$З$ѱ-I9!s+׬Ɇ;w&{4EOb 9߱ns$ \d6Kl>>b[8=6!q$&|l}6hF ah rhYRo]͆>#w5֙(`<:P8?Q}v{]8H؞Su'~&4S8n~#l> d?})ag<'0^e[?KolW$j]CkUPz9 #4w7kEzuۨӓ_h5c]ֿW#^}`n#븅lUL}1駗$fe|_z4Bltdqy.t?a__!/G(.i#3@j{ğ  UӉ25 oZO6cuI§훍N.w]@Ew*yތ]RK^$ʪ')RL sq -J:Lʆ r=_V6!%ڔ4iMܰXkV;F1[@A-HT߬r(v4c28N٢2_ +uO)aoCI?/2a(NT=Of"! ~;vHs.Ns@ e^d]T—N5Ètf ӆ6ٖV1b\L sUܽN? z/ bZX e`V^ѕ%qqɁ?K+k{-Q]w jFŴ[ 7AlW*z,"~1oh:'!LQP!3s穉2<gXvVB 9W!Ĵe7&б?-A+*zX}DjEx3:eD '$Mb筧;!GqvI05-29&A:yLjKRyj O?qlrL2?x/f6Ѫd`ݲ>ǧ2Y362Bd qpd4#0+zӤU.Gg )/v7VVѰbXKJͣ΋EyR{Pu5tlG2 \ ȓHY*~#^.7Tl</8^=X,xjf@Ч=7V;ɧCk;^%ĵ9Oq:DP&!~\7ZH_&Ɉ~ns(C z/V ιfߞ^vkA%51-pre4g1JbGkh kxp &oNMnJ rvj/*WxY*F&/.oD0IX=)J},NmasC[0LIZ`iA(h-~eQcNb fO rulaM];>nac[Pbp:.L9eu-5XD#fLM1L}/b宍Ơd8ңOr7mPZ10+Em<]؉\!>5[VxF׾KCR@#=T|3bY"՟g',M߯b r>I't "7Lث^OgE"鈲ϔ8a>ٿ2=jb$MaP/(\=vdgAsqd gj=DiR7e4VcIzuyal9)P"W'٘Ѡ-glf!֦(PO}Yŝ]Lk@iW0o* ^Q1"!9y6yZ~Ȭ5 hhQѹٖn@`l<$>eg&HnQfBRHYnF*@^- j:1ӗ{k4+M/z W lW%*$d:;,'clD/;'W#_kVۯ,&U˛2B =DЪ=v1$ܻ؜@j-Nr%j3P'"yRfa" oG|P}Pf{b])WbpIyAkSZd 8W; L|U2!qJJFk͎fDz؀ʆ#Jn%!ח c M.N9kz .gBД?6-%n"_<)xy7węMΈnԌ2ql;54|2Q9Bǡ9yQH52CdAKGx>+wje8J &5Q璃Bo^fLlL-kYoiTAiƜCuf9/; r-GF>/l$*~$<+A,D:섑۱A䁍>p?QnAԞ=Ռ^ƞfk0eCCy3wIv+Gz?`iL%F.kdϹ N&hW"Le6m@kDĩėX[k lZ@Dtz7&B碕tJO?%=5:'Y> )ܮW?s"-4RܫEq\B2W1J 䤏^oʚwυH[[gp)9Lq T@f!=wַUů=+A. qsA AV_5yjX蕼yA#T5\_[n=OBn_ֳrwR 2jE_䋘Yu̢{DЮ~:r;z>k?\JY/DAQɅheuժii(8竣Ӵ0Y5Q+&0n4)b&14끥eIWd<=P-)Ti#6_E'{6)qafYʝHRنtEO4/1K^ LCqKR:[n|5-,8?~*!7Gk\cn:gu^t L$ hN=<ߧU WJT㌵@z;m~j&tY̳ҞZQQk'zR+0'A:od?2IZzNE+6D"ʼ[(G VZu1 ,boYBX#*lնd(O^rZY :hfwq>K }VgLWsFn( Ȓ t6WA摜=$KB7hw,rQ~(S'эV(eZA2f%0 @Bjz|taGW=may-0R:>?Cxmc%=*"Y`Cb+|ѦSd's:`lEƂ$~ iw-p4>v (FfsפӁ{"_sdBӍd]iRU덯-X0f}.R”%ls`/:+A+zo\dJ?}Chcais_Zh lqMlA;kETRҶw@=AF]X 7Tt$d/@#Iu-ii*)DzjRsmXE$xbPa絰:B >qWF20T' 7dF;X> E[wN3yQ (AJ`cʃ:_GR%B\kU2G)Vk_*|&jS{U| aG4oO]C~ V~e?w3>*NTibx۠YQ. xl!s&wH`y7=l`aJ]\z EY6w-Fi4.[ؠ~+"ޗ@!CIqluhPfjDH!d@-Pv5 tiO1"jb+ Ϙ# ={B8+U>iQadSΒ28> e`_k@j48N"45ZJyQicy'Bpœ] VBs,*^V/w8?Ƌ࿦фц>?J,k+A{xSVDeDsxc.?-%nqd$4D=qe۝OlHS#$qإP1:krR`fJ "`:7c%;v揌+:yJ:P G^& l:wi.Dg( )DL .aV%٨CZ|kldO*4dhwДh.sɄ56Pe JMaYd~7PSY2W"|}{NAP] t/,A\5P#;13K8|X{ =7Ȳ0.ei5q1M.nzbG4x3e~zZwxCCXl@L–)['-eQQ&$3 I|>TM JТɤ@"NI]|! ׊E9z6Kнu'Ȧ.@}־*_bBmNiip_tg,T&QY/$X& #!/|H=ZEW0MlL]w8jEKJ$yHTn" 6Xb~t:S}t$pe6wfcTA#r Yn**ƎDQ15pK^xѶ I L2T#i危jr``)"hE|3) 3e+1}7L)! JVeQ7l>S{e@ ʼnV|X#WlG 3u6s?}vB2P@!=H&}C^g +8@>cB9Q(Vx}: Iީ/!LOꞟ3h/xQzȴf{%ZDaR<5rZj XuD{DXI^y>KHVuI '4k^K{w|ɧ)IfHE3<3^Dh>rkbvBS=(oW᪚nKԖ BƂE}a^c}~}뵤CR+v2dF#滧\p%sA#cSz0=@໛ᜤU8a}gʹ%E /l}Crqt$MF'9/ SbŚլH!Y$Jl-2WzVm_I5w9 uakyψs JV8\Mx[H`n}Ce/ Ѫ)W)w)dQH}k7m1lӼ(Sv3pUqzB~"?GN(Y~E%eO3$N8ľyzlUpzeF'.X7޿oadKzUSW Mwؔ (n6Kje'(L!PJ0Cۨ@Z2Ck($|D@|ĕw7`oi y =BB&AtN5 8{xȯ2Ʒ*||LL*;`h[T!g31 ކ'rrK_nI3A>ec8;F/ %+TEͿK]w1ܽy;q-j<؋q# M;Ao q/%^i vgp\-qA@޳&-ozLJ$mm$\D욟tpgD?qP @TR6y c*pl]tqL ]-YÐ$!;FD+p*9 ~Gth X6O)Nif>n֤rti|i:3bz \(Grt aCwՃќKƯLXávչmع p'>@k{s:_gxlɳ?E'+RJ,+a YSUP{er!{"HAY@nzŽ\Fikvv'":[nds>yg>s,w-p?X3~5+EC1e}2oSj>uG?n(&r{"k?棻!Qdy0dAe@uA!{΢g1cr'_rm{ ݺeW:H6Uv^Iu<|h_Ea"h$h-#^h;]Az1 &T#LSkֿ2Rw\a_ܩj ;ltzi/Q~-=˾'JEZV{ťfpҌAؚA|C~U.<|v?qlWxZcAA9Ry 8e_ߟ03" @ ?d Tq=JE 4nY?[?Hw>c?3kQu!>ʷtV:3.FJ9JVWk1; [+]urt;Demnq U`-| kS2Wa"d#v8X9OGḑ7M#_hb4cn9¬RQѧptU;#,A<#'yϸ2CK hppN~c#\R]@Car(uu] a*MM+{jG0k9[pF)~ s}]2C3ғ4P,hlNƧ±L}z4`?3A2?ՑOکUVpdAHЎ4|-qO:if˜@8W> o$g˸0Kfc"ٍIP~P:A%1,m'ieak}~BV Тďb8 ̊QM0B_*_,% ~,ՅtK5Cu}qrrz:8=>K`IhqQ2a( gD;+)4ne2Nzp?bnn^",! |P]5) C01IgdCp~HĘC!38&>cU`u^$}w-17UJZf_?e*n DتKIyS,oĥNx,-sn.Cq/1Wt*V/d"޿IK 0?\ Z A);&8|[u $YԬJs"MtWq"wXc,VN塚0|.M%T-KqM7=:Y[#ZMߊ$H4$Wj8jbjPjrTVwvDvKX[dHzA\VdV>ץP2#*+_:60\PyZGf,K-Χ-o^9_xi6;*D{ 4zߝgUǴb|X-I[EBõK[ uzHh V ԇ-+t$T6eLW }.z>WāǵCJf!Awɗ%:.H`Ve/)91l[D(]S+d3-iȍy]'ҡ1˥3cQHHd,8*}n+#jtB n$;i$aO׎&e8w۞*ffyK0͟Fs^HU>ȘH"Y5'Aɠ&-sH c_Z9=(I)#D}.Yc}kTnc V(鹟ոo%1> 2-Y4=d}SRPuicl7*-~Gq:?` iRݝ7tbr0G̈́!(P|&d2:cEo(+`; Z<_OFU54B [xa/*Ĕe^$QOljٜGXR;CE^ خ &$]P>QQD riC!$M—LDlUH%/N  ]hsݻ;)&^ex'AgVۑ$T )k9E=D06^ndcecx@mrH0ډ @ 6ݏ\ZKP~}}}2fy#ݘPCV+QЬMI6$\cF&/UlX&?%7mդ:z]M+L]1)'8y´N"C/_;u!hPUBu|ZSa.\C~ ŨgWΤB%ߒc˴͒gJib%9g NKz dFiXoLͱ\wVyF窈hU#v%Q.5-\FYjk _Ic2P4$_bBBtH5vd h%B vSUb>GYDka9c[טέ~2@z -/tb_ި [`8 p/\2)aN^&Rx ` ]A_֝l?w#7=6Wi–͒x _Wzd?WwSN0"\q.3Eؚ'\`L?#Vق)[,HOC>(HEA࿨]/1 5Fr?Wh@]k7/2*1܎r i\XeCuk!?1{_3K,zieL{uD%VG|tM#݉ǎXڥ Ij:K*+^J7Y `ԏ<Ά]].4N8h+R1~ ^Kj-`,&xA0KFMaQ2vq8._zVτ4l.ŏ$lJm\aӨӂ!?J"Ş?$q' ޸b}f l pwOL1^[}YyOФ)jې.Y{t4Byt{ByZ!6CA$fcз)O/ޕ[gzLn<91$ѐOC-<*>$53`y&`tvמLH:_/[<]Ha֖9Not3y &$(Ձ xd1-z('}UL~/+FʐJ<ĸmdQ…E,_.Q"F[TA;wAײ\&Ezq>I %d4cH%kRP$Sk , G5ƵeGEK'/fkZD1 ؼ `2+݃dT|tGPMZoP$ ^-o^]) ),өr274UAi6Pv^{sx0vDϒ_E[".ݙS.SS]Ht"%;ꗗ~}['ESmk.3u7Î|[fD#.hW!aAmJ̗?q?[йh̢qrSpF:|YABH{dA ӃxI6gKJ?s}յI;[|m<@zWn&C/ EC.gl;hyfo-aQ`Kg˱?fg}6ZYdňEO4SRfQuXTɡyvH>D;I}_XEF%2I6Lm'`\+b D~)%čE:^^{5s{Y@Cŝir׽8==8is 䂲ɷ/zMKF4dsaЛvS>yWRM;V6gs@9Un C)΋HR( 73qmQ^2@Wq,Ո sM>wV]K\ ¸w,@)ǿw^P3c',J 6,>pIF:"kG!`!3O588pWNP ƨ|cVʍz- dX-L>۞FЎO WfjyV-!F:eJD^YnBIwkzlLmrLǼ-N|y S-#?D6k"y!œv ظsX9\m\~o- gׄ2s^Vhwщ]{(XQPbc ͊d{@,˙{rH\=((QiΩoƫԒzOӖޱɩؓEu0/s)9m&0F5B-xE3<`5uiwRNTVblCv$jvpdq$=&\D毂Ĭ icYCuz2KxE4bQ-AZJJ|yG *ޡ=y`gI/`3lZ(cZhR6_ϏV*S/϶iN]#t)2kAc4Ҕ$[@lc&!UciopSVE.['cT!| jiJe[r΅4 hdOpD`-Ҫ.[ ƣClUofzZ6joѩV^^WS#6\"״1"RlBYqFJH6umpR5:?va4|*+`?$^m8ˋѩ6җX| }" :yQ2@=|㲟e)UЂ<ƜmI. xw(5yl*fuPF:.ȗM C|b<n(+o45Oe-麫ôL~0l> _ʦrrm# \?i-Fjж9\hX“6-xa}y.PY{$Qn s֑K(bi/E)k#V.r$nXʼnQ|+oڭ1{sq1U"IͲ~GqD2+rҴvp(T5`&q !IvHL[t㘟AÑW{B},Xi>v-J4GxrR_˕k1cxPQNM$C77y{6" KA_ӍoMڻ)yXk#c r' f(!A-q3Ū F8K;:f[)\ΐJ:/͊LN7~a3a: 6lTixTIנ763CQt")u*IHνPNrg@pXԮ nw6ӯ黶$3+&p{7P(i2 ߐ+&UCPqS@Һ O.R$jɠWt{9N%mvّ:(P}y,>-dz>LJA;g "~ zP$YIƧΪy5`a'֧Nnc*׾ ]]K"Yk~o/Ha/^^YfK/ ԳgNo}Hj/b0Sگ[atѺ!@څ_a}ΎCVs=sSΣxJBO/ v!!kCsY+<$^uROfzo٪ĭ )4ITw`Ttk5ӛeG_:qmUXa3Rϟ.0ĘRWS|744ERץ 3¥QFe n \1Ҙ\+&eLMٚ]dHY""PX>gw.ҁAm.7X5a"˲^WUlL- QrVgM=xC ؋A޸a8b4wXT:j=S[b+D|T- *Ckaʃ OTpJ|?frZ," Be81}UiҨR\a ?EɹXC>J1kxWR&U ;?y\(dU9a(D0}RZ"[W.Wz\/<./溒V]YkR~ڌ;31lS,4eW8xŭnb4hz7aiiG2>Bȶ34Re QdGz(@J 7-wuӳjB^)]`|I`.ȃDᵕW= HR~J=-C~@d8 %cW/95KFٖE_?8vM7D{꜅ݿߺN>%V PȖv1΋N9op1pM4 :FAj 0E@vZksS~BUS]]N (py6U;~`tCI>~?luR bgpک^-kCuT; f'd8fJU.ɛ=eI_w OfcL,cI!e8nLgY>ixRuA̅s%`Jv7d3,/|/L}<>wΡߝ렋wن#טttNKm z)/\%re#k*15z3\k >tc*!O ^CR' -}Ap9l`.U:Fm6<2J?yEpx{[; =Z {ٔ|h9<^^l5j8rCy5$#Vfˏ<4 ӰXPNYI0}擢-=xX޳Cc4ha6؄0L#@]8S5LV_*#? -,==9w'EX≧-m"ac/a:2' StNR>!JV R*oBm͢ch߹VZ"M:'S/ۛ?>%¨|ehb֠WO5QF=7!a50p6;bj}dW:Y#Zz~hw)3c]|S NcB nџ#ɚ;ă qVhѤ +SM\C2ko[~ʬ'5gE`8 [FcFoJF `y#DFB?0kh=18sݭF"PlbM~"K^jdz ͱS>mŒ8 ݋3q@2 EzW9%¬=OQ@=l9%F+_U%2fEMDOdgZ\|\tL&l͕FbN]ZҖ:jb[ Z` ˷tx6g8=[)}?:]Iާ}" :)/^h@RkܰҲԹ "qhqDh1"7hda1%E t0(ʔ_`C:OyI_7 bKD_F%tK(e `zZxIpKj֟qۢM%x A~2!▥K+PX-\mqG%§Xt_)Gf54Hx:bߔ_~ y{Ol4<'o`4\aܞxȮq9O '4T^:o &4bQ]o8 d^}f `XzqfϺpM_Ylv$۷130Ԭ0 dv3êN%J]uR50j8|RBSKC_έvj<&$ q E'kϸD[Ɇe!\־ X2u-ң﹭8 6u+Jo*]ulT HS!+{KnA=g^l.ؗq]#!0lUf0\ub4b63 FUfb8wTX[)&+R.)|BTޥ f>D!A5yHoUCB?,7EΆ(RKqF3Ծ31.k5u$`o&S? ޿>eIuK|Eff~*% du#&Tfd>xV`"v"Ư^~(ƭudoz<'5^42,=_-?Z3[ "fO/-JƕMa 1qQM4 _XBUbΥnTɗF%0RNCv95d԰KiݏNM-^vCp=`M qwl{#<_ ؀>%<ȔՐ L D]uV\əj;itBņ |raK=fiҡ:'CՉB41@̮.aa6>XGjI*6SՆM r#QcݭJSWzB>x vp?3Un4"@#<;\Q7ln~ -%QzKZ):5"p\^y!8"7NFLj?"ӄ#W"T-LC SP҂W\o1aN@u>`5ҊS4aW}n;`=)J!drŅcUԻؔRzR(\OV:YdMF(8 Rv7Ϳܴ 53B4ׇE4{ZVV)e"RZOm"J={Y/FV`x5Ryut~5lqDY[uN%o?}TߜYPdRIz(3SVr( uZ;WƂQ1:#yD!LUZ^LJ@ >t|ψ1~PeTth v볇x& ʩڥbXIJ,P3fƯSfJvyr"?%HΡ~^!kʬc|EohU,Uݙp|!!x=Y‹.fnp;r0:;*j `+UuƮIѵ-eb560frZ:H iH:ZO0 #@%Pz64ϘuZpމOQCh\I$VYҒePDg<ΰG)5 =^CO½NG^lvu6fr -$ۀE87o4>6&)_.f Z)bJF*̹ &C6{ +9D$Q"IG6WMv(kHi/XW$_ y$ij85i-іdVaVn=e{˘ ?6' RkC Я|#;2p._. ʜ>+#עpL $2RU. FL*[E#uSEt+R=4|6 ,r&/O(o# ,۠c[ }I~(o^[- .T>:^ *N/! K[Z '{jlWY!9vʠj£p\%kɣUsqBY$2N^S4(a%?%J/?, s:(<j"v2u3j9@N-=7-:)̤nsbF̚SKN`tOxlXtd. VRy3 [lqƇJ?~`~nXi3ް#A\[ZgYS0gҤd>v_sH=hn[9=iMcf_]Vݦ4j B y3N0) )Iȵ rLFr.Qf gӻsDEE5r`}y 8RqD>6h\oN3;*ͺ-e"OJl0AHǚOOu} TpКz=vk)UZmeu_I$4L5UD8ROF3D2)mOYg< &),A&>鏰wET_@Q:[?MrM\%}$M{Cΰ#|-",gv)3P0ֿypaE/ODTi@LZ m{&^g'_,8bJRjeg:[VY+ ʮpnYBj^yNMuqY_Ʃ:U;.ˇq 0#E'٥-uQ)[&p|2.K!K\9|URnYRdkd闶4Uc 6gpa)@ܴ'>JR I]#SvXpà 5p ]MJc3'd2#cbMxTl ]F$Uyr-st; j'2)I8+}k?&|֯uR,g~0WnKu%x0xhLo[8Eoy. [U/="n|n o?a9MD-a/:M "i/v7W>3g DOKґ~XݪUz2T˛έ6E7Ȕ!yg5 SygWK+VP!`+BFXl7 b u2}~_W ]A0ˆ:GW-:(ə/ÆqDZI"x>Ni`l= ă+@9F 0\PRu_ndAx lXzk۝r)gpZ 硟ޟփ(w,p1cbSW] l.jy#hM&$c1W dBtΚ,d@o\0{EgK '~*/J&3Ջ[ |z\ G`Fֲԙpb;SC$_ #g6 ~XE>ySEvV |ǫm /úy{hb #[w_!`^.)Iݕ i!Wzhw,KcgvϽ0QuJɔ|;;G|kwR$ܑWVV0Q4r͓='![:X[vkn9 tmy'` 5{8xD @nLM$PO kWʈ@M9 3 n&)ozc2$ޔd!KmUC(:d(Қ(> sn:9$a0+Q<G;rsQ=YbrK(wZo\Wb V~zsWhJE}E/0X:pcHFq.]C]&RDtL52+,E5ԟoeϝT͹-q4 ƥk& cUs3E;H KQq1J2 &+w0=s`gR/O\ߩu:Ŕ\dgp>(j rMv`aaCAroqp4*Ӗc#`i0qT[L\:I aGѱքΒ-;+]/,]iƅ۩)N"MC:2y)Ӳgxje*y/M=.JL6VF%CE 'BʙVCTVO2===eoT/VD$evm}|,7y'f!nBA&7g N5I=sic!!14 Фu?XZX7(<4t^0MCQ6en.4@󦭠V=)qzŏh1"8qȿqj)3|dDodxXjGCT2Ȁ)y~Zc+IC:!knPXUN牄+ʺw>;qf6#Ä-l u|uKմqӇS ki cKh xo'#{X(pI F\H0=Oنei%>9HjGk$׈TBiKC ! !F$uig  %_ay4H]Di&ѵch iV4 k}4etgk'(dac0P8/=28jvG,jhJRhxSX#7Ρ@4G-,XD,b:^K*yc]e(͸-T`򩚆~׉:>B 'PJ 6PX.~}2%rt:A-s4:u0*N9o0+8؂PAhmijX'v͢lHgÊ /.iUdw73\WG`=&}ѿs!\I3&msG6ƶcp=R1Nf^Pr3񯹸=w𵠕rY K|pH 9CyW8s)Jqx܎*]{٩歌@[;dEg=;>zqDPO1OWwLo5#JڽY^a׈ԝ"F"iֽ-}|Wۺcz:rf̏'Xy nGKO Rl#CB{*w OƩ)+ҁ(kA:+CLpy],BP^m[́^HJ3W0Xۘ@W@S%P>ҡ\mɌ2bIkN<+f/׉?#i,NDkHx 鹉e5I%{_0a|s;ˑp)"E +Xx)فX I3} (u*?Tܺ~m.a O^W`MxJLZе4KܩjX I&!c ى8jp JM8t[_@}gw+V6 {fkt3lP OS΃NEK<eӵ-*-kl/ S/x\}DiH'L%Vt2l.tBǵloTqcߚFpޣ mi'u)颂~$CxƂ~κhhgINxX"AB;'P-s9I1eD1cakwSț6$(DM3esđ(»e ۑNT{Әwcf2LDҝ Xc$7(;$k8$38,iّx}*v-޲ ?M1c7|tNGJfV9zVkT҂1ɡss!iCgoaYqj /ӐBF Q6cζom'T *~Gl}d.^1j{~Ƽw@#.LT . k[@$5>g?ߊψ ^QB70wXh" GLavf[0W'3EB~œOiӶE0:xWb :DH1kk@dR^-Gm=|TTT4.S͕gtʨKRޗ^sJn; ڕ QhGb /6"/ @Mcd"y9jyq rW?eh ĠnՠjtmZK꠮x/أRXs'wxBzCz^hPf3 h<i5 N gP~V|1Q~W>3.!g!AX'V&59Iw+p%@ۉmsg_:uScZH*E  $1RqS~|+xwGyݤhkwFӪٞ0~ -D~ 4{c+qX_ bYu+q'__>S_2}ߛ.m?$ Vm?dJڨp D/r`_>޾rPblz6h| aNĪ9x&>E6VO}%E[rSL%c'AH*;6樭 r,KepV=rp\bۂG|h-+ٔHz[9(S*RIW)Hf ^]˄JU)˽'<&8ZϡXKX(,h@pqkw^ 5k~Y(YF9|P`q^XzuIfΎ={̿FslipU(&*U鸯kcBWkvJdsC^Eu.}/"oVۓA=X); 4;j}LjӽGOP`p0zaEOh6//*6&?_[_vfSuM#7%)afVHʧ׏@y> d>d/nxѷZίI2f?E"*'?g9t%:l!)MÆe2u̟~-A ڣLMav/y<PA)΃8KIȾ[%OtXBʝC bȚCGb4t 94TF»!^O2I9ܪ&,+ĔEڇ!SCpkY, W Q@e\&@hB/TJP t޺n."-qTa5noWC}+oW0 *-E1 t} &u܋L:+.uASg%CnPy~^ӹs"jRsYs/Yc6#+j9́=|>FDw)w}=464i[Ժ ,Gs)R-i Y9WrmZ"6Z2ǽ0^\йp,Q |(yxiھh~h*tRӷ?GE(rY}4+:[VRqM'PbzfӚ-e)n^ps =fj0]r(+ZaS{PbZ.W,eV}ͳ,X,O lF@\!KpP'ch%Zo?m}KzWTOdzt78ab0fm4$O? ޶ YZ