rmail-8.15.2-150000.8.9.1 >  A cYKp9|?s7WD޻o{KeK Kr:kU/΢wh˪_>/^I$vںTbۑstWZ<&RThA  QP1ۆKF )VBl[Bp%Ar<쁛٬ZOڔ_FuZw8ůtK1ɅAoT7d,԰uS .`/1~ 59c9edca2ecbc99d90f959c3846b4fc9538a86cb64b4c649d32e0877e638bf2c603a605df464c747927f373555bb0d2a7e564b73cYKp9|o J"q8< qzCs߼r1R,0 2c7P2̙HQM֡J3v".B@ml4Gƒkߘ䯰PYG,u^9ZjO{vs.3):#yDb|HN›'8K;oP"Ѕ!z^ $f{jYD0 L6R|YPerە}Y >p>8?8d  6 ;TZ`h l p x  @H`   (8 9X :] F5G5$H5,I54X58Y5@\5h]5p^5b5c6Id6e6f6l6u6v6w8x8 y8z808@8D8J8Crmail8.15.2150000.8.9.1Rmail of the BSD SendmailRmail interprets incoming mail received via uucp and passing the processed mail on to the MTA (e.g. sendmail).cYL)s390zp36WSUSE Linux Enterprise 15SUSE LLC Sendmailhttps://www.suse.com/Productivity/Networking/Email/Servershttp://www.sendmail.org/linuxs390xT큤cYL&cYL#8f4e36173333e7f051af148b0b1a161555094ddd0febb49fd441c1ffd595f2dc210aa96aa6acd7aa79a9a3458cfa1bb565cf37f6d751a27bed7d652b6a64f0ccrootrootrootrootsendmail-8.15.2-150000.8.9.1.src.rpmrmailrmail(s390-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libldap_r-2.4.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cW^2@]f@]c@]K@]v>]:@\/J[[ @[LZ&@Z@Z@ZC@ZY@YoIYR@XXX@XӸXO@X@W W@WbWbW=W@W@V]werner@suse.dewerner@suse.dedimstar@opensuse.orgwerner@suse.dewerner@suse.dewerner@suse.dematthias.gerstner@suse.comwerner@suse.dejengelh@inai.dewerner@suse.debwiedemann@suse.comwerner@suse.derbrown@suse.comwerner@suse.devcizek@suse.comkukuk@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dejengelh@inai.dewerner@suse.dewerner@suse.dekukuk@suse.dewerner@suse.dedimstar@opensuse.orgtchvatal@suse.comtchvatal@suse.comwerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.de- Remove maybe perilous shell script code from sm-client.pre (boo#1202937, bsc#1204696, CVE-2022-31256)- Add upstream patch 8.15.2.mci.p0 (boo#1164084) * If sendmail tried to reuse an SMTP session which had already been closed by the server, then the connection cache could have invalid information about the session. One possible consequence was that STARTTLS was not used even if offered.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- Avoid recursion trouble in spec file cause by undefined _lto_cflags- Add patch sendmail-8.15.2-glibc-2.30.patch * The former deprecated macro RES_USE_INET6 is gone with glibc 2.30- Use FAT LTO objects in order to provide proper static library.- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Remove alias to mail-transfer-agent.target (boo#1116675)- Replace exec rm by delete/print.- Remove left over from last patch - Group daemon is required- Add sendmail-8.15.2-reproducible.patch to make package build reproducible- Add _FFR_TLS_EC m4 macro definition for site configuration as well (boo#1070065)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Apply former patches only if openssl 1.1.0+ are installed- support build with openssl 1.1 (bsc#1067222) * add patches from Fedora: sendmail-8.15.2-openssl-1.1.0-fix.patch sendmail-8.15.2-openssl-1.1.0-ecdhe-fix.patch (rh#1473971)- Add libnsl-devel build requires for glibc obsoleting libnsl- Change requirements for libmilter and sendmail-devel as the library is also used by other MTA like postfix (boo#1049188)- Require user and group mail- Add bitdomain and uudomain to possible targets for refresh- Change spec file name scheme used for getting soname down into libmilter- Replace a find|xargs rm by -delete- New package libmilter1_0 for the shared library version of libmilter, the Sendmail Content Management API - Also new package libmilter-doc for the substantial documentation about Sendmail Content Management API (milter) - Make sendmail-tls a noarch package- Require m4 at build time- Don't use insserv together with systemd- Use _unitdir macro instead asking pkg config of systemd- Fix License: Even https://spdx.org/licenses/Sendmail.html lists "Sendmail" as the valid identifier. Same as http://license.opensuse.org/ does. "Sendmail License" is in the column "Full Name". The License: tag requires the identifier. - Fix some more rpmlint warnings: + sendmail: W: suse-missing-rclink sendmail: - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service + sendmail: W: suse-missing-rclink sendmail-client - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service + sendmail: W: suse-wrong-suse-capitalisation: - Rename README.SuSE to README.SUSE (fix spelling also inside the file). + sendmail: W: permissions-dir-without-slash - Fix permissions and permissions.paranoid inside sendmail-suse.tar.bz2. + sendmail: W: systemd-service-without-service_del_postun: - Add corresponding macros to postun script when not building with sysvinit support. + sendmail: W: systemd-service-without-service_add_pre: - Add corresponding macros to pre script when not building with sysvinit support.- Drop unused patch: * sendmail-8.14.7-warning.patch- Split uucp to separate package, no technical reason for it to not stand on its own - Drop uucp related patches: + uucp-1.07-contrib.dif + uucp-1.07-cu.patch + uucp-1.07-grade.patch + uucp-1.07-lockdev.patch + uucp-1.07.dif + uucp-texinfo-5.0.patch + drop_ftime.patch- Do not use http://license.opensuse.org/ as reference for the Sendmail license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html- Avoid warning from chkstat due slash on directory path as last character- Update to sendmail 8.15.2 (boo#975416) * If FEATURE(`nopercenthack') is used then some bogus input triggered a recursion which was caught and logged as SYSERR: rewrite: excessive recursion (max 50) ... Fix based on patch from Ondrej Holas. * DHParameters now by default uses an included 2048 bit prime. The value 'none' previously caused a log entry claiming there was an error "cannot read or set DH parameters". Also note that this option applies to the server side only. * The U= mailer field didn't accept group names containing hyphens, underbars, or periods. Based on patch from David Gwynne of the University of Queensland. * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again. Patch from Lars-Johan Liman of Netnod Internet Exchange. * CONFIG: New option UseCompressedIPv6Addresses to select between compressed and uncompressed IPv6 addresses. The default value depends on the compile-time option IPV6_FULL: For 1 the default is False, for 0 it is True, thus preserving the current behaviour. Based on patch from John Beck of Oracle. * CONFIG: Account for IPv6 localhost addresses in FEATURE(`block_bad_helo'). Suggested by Andrey Chernov from FreeBSD and Robert Scheck from the Fedora Project. * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset. * LIBMILTER: Deal with more invalid protocol data to avoid potential crashes. Problem noted by Dimitri Kirchner. * LIBMILTER: Allow a milter to specify an empty macro list ("", not NULL) in smfi_setsymlist() so no macro is sent for the selected stage. * MAKEMAP: A change to check TrustedUser in fewer cases which was made in 2013 caused a potential regression when makemap was run as root (which should not be done anyway). * SECURITY: Properly set the close-on-exec flag for file descriptors (except stdin, stdout, and stderr) before executing mailers. * If header rewriting fails due to a temporary map lookup failure, queue the mail for later retry instead of sending it without rewriting the header. Note: this is done while the mail is being sent and hence the transaction is aborted, which only works for SMTP/LMTP mailers hence the handling of temporary map failures is suppressed for other mailers. SMTP/LMTP servers may complain about aborted transactions when this problem occurs. See also "DNS Lookups" in sendmail/TUNING. * Incompatible Change: Use uncompressed IPv6 addresses by default, i.e., they will not contain "::". For example, instead of ::1 it will be 0:0:0:0:0:0:0:1. This permits a zero subnet to have a more specific match, such as different map entries for IPv6:0:0 vs IPv6:0. This change requires that configuration data (including maps, files, classes, custom ruleset, etc) must use the same format, so make certain such configuration data is updated before using 8.15. As a very simple check search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary, the prior format can be retained by compiling with: APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0') in your devtools/Site/site.config.m4 file. * If a connection to the MTA is dropped by the client before its hostname can be validated, treat it as "may be forged", so that the unvalidated hostname is not passed to a milter in xxfi_connect(). * Add a timeout for communication with socket map servers which can be specified using the -d option. * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow numeric logins even if HESIOD is enabled. - sendmail 8.15.1 * The new option CertFingerprintAlgorithm specifies the finger- print algorithm (digest) to use for the presented cert. If the option is not set, md5 is used and the macro {cert_md5} contains the cert fingerprint. However, if the option is set, the specified algorithm (e.g., sha1) is used and the macro {cert_fp} contains the cert fingerprint. That is, as long as the option is not set, the behaviour does not change, but otherwise, {cert_md5} is superseded by {cert_fp} even if you set CertFingerprintAlgorithm to md5. * The options ServerSSLOptions and ClientSSLOptions can be used to set SSL options for the server and client side respectively. See SSL_CTX_set_options(3) for a list. Note: this change turns on SSL_OP_NO_SSLv2 and SSL_OP_NO_TICKET for the client. See doc/op/op.me for details. * The option CipherList sets the list of ciphers for STARTTLS. See ciphers(1) for possible values. * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL" if a CRLFfile is in use (and LogLevel is 14 or higher.) * Store a more specific TLS protocol version in ${tls_version} instead of a generic one, e.g., TLSv1 instead of TLSv1/SSLv3. * Properly set {client_port} value on little endian machines. Patch from Kelsey Cummings of Sonic.net. * Per RFC 3848, indicate in the Received: header whether SSL or SMTP AUTH was negotiated by setting the protocol clause to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP. * If the 'C' flag is listed as TLSSrvOptions the requirement for the TLS server to have a cert is removed. This only works under very specific circumstances and should only be used if the consequences are understood, e.g., clients may not work with a server using this. * The options ClientCertFile, ClientKeyFile, ServerCertFile, and ServerKeyFile can take a second file name, which must be separated from the first with a comma (note: do not use any spaces) to set up a second cert/key pair. This can be used to have certs of different types, e.g., RSA and DSA. * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6) address. It returns the string for the PTR lookup, but without trailing {ip6,in-addr}.arpa. * New operation mode 'C' just checks the configuration file, e.g., sendmail -C new.cf -bC will perform a basic syntax/consistency check of new.cf. * The mailer flag 'I' is deprecated and will be removed in a future version. * Allow local (not just TCP) socket connections to the server, e.g., O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock can be used. * If the new option MaxQueueAge is set to a value greater than zero, entries in the queue will be retried during a queue run only if the individual retry time has been reached which is doubled for each attempt. The maximum retry time is limited by the specified value. * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile to relax requirement for DefaultAuthInfo file. * Reset timeout after receiving a message to appropriate value if STARTTLS is in use. Based on patch by Kelsey Cummings of Sonic.net. * Report correct error messages from the LDAP library for a range of small negative return values covering those used by OpenLDAP. * Fix compilation with Berkeley DB 5.0 and 6.0. Patch from Allan E Johannesen of Worcester Polytechnic Institute. * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or nospecial which describes whether to disallow "%" in the local part of an address. * DEVTOOLS: Fix regression in auto-detection of libraries when only shared libraries are available. Problem reported by Bryan Costales. * LIBMILTER: Mark communication socket as close-on-exec in case a user's filter starts other applications. Based on patch from Paul Howarth. - Modified patches sendmail-8.14.9.dif becomes sendmail-8.15.2.dif sendmail-8.14.7-select.dif sendmail-8.14.8-m4header.patch sendmail-fd-passing-libmilter.patch Removed patches sendmail-db6.diff sendmail-8.14.7-warning.patch- Do not enforce dependencies like for amavis and saslauthds390zp36 16667965858.15.2-150000.8.9.18.15.2-150000.8.9.1rmailrmail.8.gz/usr/bin//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26584/SUSE_SLE-15_Update/9cd0bf2f8bb529f0831c527ce6ee49b0-sendmail.SUSE_SLE-15_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=2d58e23ba9a6560e838497f1ae4d35707476aedb, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRcXaJxnZԌutf-8e49be2984c251305e7c50a0224b3a89644bcb80cbadb50c0b889f79583f6a60e? 7zXZ !t/Y t*] crv9w*هF:S͵9rL iŁSKKJ6^\ to UZ-meOXj?u44XG[(}mɅͽEY{Pf~j59ԣB 97o62 a27Y6ZNR^~L P0WbthgkeR[; Du\x/N$.RUڈ,y|+K16@AmRg؂$-w]nQZ8XK D̵:@~jE_=lvv^q DcβwҫXǹ[LF jz!<4}؂%sx"𦼮ac>eƆVbyp0q&uT^xC`j<ڌWMNo紡…-$!?3𛇩c ʌ6ob%: ݺ: tX6&qpCd}C0P!|FDh觊(s<U?.YR=zu!m;AJqxC[0+w1iʤ\#wMr+}pXLa@:mti@ B$6DA lh4%zʰKb-!~"k?p1bٙu5/ks롙-guGоA3p/U|^2pr& U6ؠ@ц#YgUكh<\B8@@!vSK@ؑ;C}(X(~-]MI7MVv'zwsi 4\( q34КH;9S9F(ϝ#.XsGقp,!1JJy\ıa~| :=$Fju9Ru^=P䔫nn&2G7ˑMڝCmŽX ɭBA$IeP+O3'0hk $ʘ+V*bp>O(atQCf}G28t[^3 Ҧ{m,\ewJ7򄓝T6}EF~1M19#x@cܵǜjq',_c`Bs,tsd[{CHh *KBZ9ˡp)-5qRh  V z*yT0DXq}DLw Uh'ma":9/ð}Hc6T8$f)M 8_ ڐ4X-Ź5\^hd;@-Est?Ճ$H__ A8Ɵ|ͱo ܸk-BmzE\c/ G֝^a L-d˄m-%?Ö[Ip7Mà2q _Omȕ]]đNGەpCai@f2G2\@#G8P~CfQտ!rL4W^A;h 4ŋ4My-%j5jI}#Eu[cgS gOn4fZxb3:!q I6.MF~oƄ/"YP=LyPmz5zyW˲Yӗ$(()L c !PxXwD&2 k`j>8=hFD2] Yy5*ߟ%tIi:=jh!8 y}@7T0Y^AM_z:UŁb:~=lɊO{j e Oxs5[ue=CMG]D[﮽@}H8 3囔Ѵo 5JgWR2y~XcZ5wXU+ $ BaZDű&|4&y]?R.&$`QD( *kp+E:Ql1hh 'mxNe>_ܤe}jX6KSæL>;A44Bjd:=_Pc;&J/L^ӱ{xj[@l\lg#'K:X~Zϼj6bPV!+B9= d:bKY`Le4eBjmoUI聬 .V/&íȝRċV a $HbWqC/0ZA9$ϿGѐvdV(dͳ0gB˿+s QF0^ͻyx[߫81%\0/ SHv8Ϭxv#/ehί1 ϶1?@%$S_kjp͗k'i5SNj=ddá#ؤ}Kl M gb8NyV6lfu4#tRTVyA )#W$pmm @7qY?4pKSjfN)Vcge7SQ%pS 5U[z7YcX@C9:|^_f ubk,WHD i;gc9}{JBߦ]< #ҐЍ>DHr  ""UVg$HGzĦ 艑S1!p˛ĝ}?I΋׭UG[D_vA Ӈ!)+r}^@gśada<~Olj=L_m>"; *f}8*|> ?twsT!-!-Sf?]s0m 2ψjQ8LqdϿFMԩQ%v8+<1[3gMɫalXY5髌OF;7 '<0ԹGrqOڀT?ߖ$yV?~JAAgG#\Mf:_PS=َR)YnTғ*H 7&;BΨ83bB\Le,R:‹vV#$(1m^N~ {Z$ܱLM3Ͽk=dI+np#cU0uee?%\ -@TmsIhYn;m6" Y~ S fkA;鏆q hҩkk+ꁯaT59ϻ(=12Kpsؑ[6^7($N&;9ktV]*~aiTXs őZ8[@)D'm~&,rD|zgT,>})(D]ˀf!cu_1"{Qu}gEC,::7FM_jNJ˕͝Ar/e>OP{SV8xQTɑnJ^zYHzCA˶a1!Qj`_5Sï[{*2/=LZ3^lY/B"xHIb}h퇥=EƸֆ?[&WѮALp>@X9K!A64jzh8$c_q1*@N U8¼JζѬl*]Vi&|=k'GY'oWwq*dQ^S5*dsorw1lY`爌j -^218!d2nJ{W%*9\ЋX! t>do7_!AXH F(QXT uf4Z 4 kG6_OG!2(!~'&Ctafc;Y!>R͂_ ~?@ RZk;vGa?:oV(1]"FrZ}.v\E<->H g[[Yq˨/=<Pb*n_ߕXLewa.ye92Z䢷<`TZ [gn <_e'{Cc?ֲ2m)X)9KN.։Ux}D9CPj8[uy!.7aI S%'rKfD0EC /^y=2T-sH_պuBJRِ޾j[&7XZKyڶa.giY0vxVYcié:)>,t۵_> CvrX~_)Zvlb e_]b\ȍc@O Xl{FT[-TCɹ$0>9B{}9KVSII+R~RP%X@fQJyԧ>fNHYP/h8{k+vH_Q PK+E0J` u4i,KpBy 3rheA -mkhoUX?(i@:ͷ6J+*s${e3:A4ߥZR̡1Y31|Q*$\:e57cBX-xx|^醆/C prۤDJyw_WZ>[( 7yV6+$*>P/iȓ4.c-\CV08;{̮£Pүn [tμ$X+$ŇD"̦J ɦct:_୦ t.q]@n29K DR d$LSډnrBK/G7 /&:o}?ϙ3fF^Yz2vN2* SqwPcހpBwkIbY֑9W {AՂLpM7}T@ۯh2'NC<`C[k[V={r@ޟhTC{و;~bt Q E0$I/SDsi)G4@IP_ -+ffCW?!9=Qk$&I-Pe8Xb V0{JNX^x%(#/9K}B-LÍ.1`AU/]RH.9: Y1/?.Vo" Ot;p/=dD_ kR(5)r,W5p Ht8B?)oƛ)xj" UK+7;^#8W$>E\ #uoDيR:Iyr{!k 1{1p kؗrPMiviO `S#\>ZD#0(4.%1?9;^rC0՛Gi L/}A.[ ;Vu.[TMTT^e?c?拎>MnI?QY N ;]HLjkӢuqxw쫏7|lM#5]ׁw 1۫ZWpŬ GZȨa{V^ C?/"wrϭTl ;6bN@ #_Ux$jŧ_KB4a|IΫ˚U  pF/!V IOΜ۽pUMdM6h*>rPUbNNCEɦR*LV'pg혃nԁy53׾hߖ=AXz_i\*HӉ¯|hv y} q*!2\IruxhZ ;5TTK~8v%ߒBa A!vX zJ^hL`O~f5ЈcX;{^@Q03f{JJ0%'IeM[|KHlN))5/TZ t(wY_D Zh"ijDryCz];:T߁}_?hisj 8{`i("EOy98b{P&jD/uW׭Z奧0U(:1mKXZU`au9;Yxh\u gni`}NTD5U;{4dW8!=U3[>0\3Y.J^oMX1h˚l&\,,_TBD\cm) ~(Mwk/JQShIֆʗ10iMvd6uI Y-i-hG4xDHbʋs@=*NilE9[r;MON&Ye^D7qkg<2Bn˾w;:Dr޿`,K PFO@mzCez+%z{o\Ⱦr!B5)m#zg se5BȆHq%0t @mK5):q3RFi"Gh?z$V${Pd'SjA*DS]9^\A-h:r,rF9[ܶB+zsH'yu۲1Bw"y\o}g MmE=LNt-UהT_?wl,saMXgfY +ߵàj0|b"zΟ;R ko?L{ V;a-ςud"S#/DG)pP,*ŸH !mգ+/Xzҁ낢.ǣl@RW.p@PJL(5 )tyOv%XLê͈6͖ǟ~ ;! FƲgԉ Xn&Y"׮_$59kUE"k"q;#{\b">݉t^ B @WPHzI2͏M&ȶt6WזÝVt&ndsHl#0r<ņҝ!@Xu R#3jtmN/5C{^m螸H) .ޘՓi }1a@eR:gVKB%`IQ8b41uf;-u؃,|џH}50տ\[x30};-xl(uER1,-5?O/AW+ɿn;ܫT(͵bVS\=jB\>J>YLj2slYE vvgkQ]GCN$ؽUT{%`:'sƁ-.sHgS.DԎ@"jگle4vB`CGe)eJ}Jz%/uzR92"p0^0;-RT 3mj25Bb 6n%7M0}.5^wrk ݨ  8vΗ?2YˢsDN::g7{!x+Ҡȟ"qC25ϾNe=hϏ2Q:i 9*1B xlj,O6SsK_v5km2%Satm wR>fL/mZ|rظ%6 |&{s=|@']*ضxSp pK' KW" .Po&5,7v#wuj]V20w(4ܙB7Kl>vȉ.18A 9Gqxt`k)l<n,(} 0KC%oZIRvĀ<\7u9s10Cx[?Xa VHz^9=vsy G][ Ϝ>|u9w6C QIoF*pTIi* K{(XF_B4sIIƗi0e41ձԠ}'ˢ?=*F2U;;%y x6Qa9Jl*6|կXfĠ > 0֫gZ\t]?4i4Pj*ȸƭ8yc;Po!Ne=fqNXOAPL,`G+8^_U 'z՚dž5q# "88)Hl%٘%?*D"y0EtY}No'b_՚کOtaN$LD݆q q'a* @Leo`A6;c_oc keˁjG}^7Rt!}lq {scaۻ|o&<5~\9q_v%}G0mz_g&,;= GI"r̝'9Ñ4یOv]1Kv]ݭjΩĄI77M˲+ [ԜGEYSoRcNW:jUIT*J (/F`Vhi:APRg#Ārp{D[o#^vD|U| tv&6p?䐋բ;ОqQk Zqg¿wY 'C{;cq#R70CWV¤;MM$W"L[Y)΅cN<q8uk+ :C%33U|' $22d*Lr >JXx 87ߕfe ><n.xH:\#GM8(OᒷN9N2 K?fU:k%_FV.%PǼiVqg?y>b+@sɣ ڼ9~G33ؑG!ؖ <8a3{imeCrID(yT*]2NRs NZ}-SMPo]D5X.O],?w|A/,mQܾӎyM ,h&R[!8P<H( iذ-F6;oqq>3F!QR6WFNPyZ{E$;UuOb79 d,V}B%9aPj(tOM:W5+ ke@q'( 6{T5 iߡpx;RzZo(% ^ɖ],;,~NUlW 2TB )s`=pĀ2][~l%N݈{-DR#ѐ+49Z҅,ꈎ%'1 H"n){v1) 4^Ch%SZmuԛ% Qi|UEHIg>)4Sz!]՟N _Pq|WnW9ŮI?|c@ bTaݤrTn@: : '!Pfگ;JU}s7(7!הvY}7`]ZF;\3d湔 -/}{åyxmx8}ar1 (Lu*}3Aa Q^w1@1> 禼/ic$A T`G?U%GAjO,J?x.s/FXW8 ڈ7: |5s_#4]N&`}v/w^:fs'O)2*\;(( clQMi3yu.Sc` ʹһ2V/B,۞͸ GiC?KQo&K"s<3twhgs@ڽhFW3E j]iOYEzʂc^3"4āRϱ/3@T yL2, ,꽱O_6,Ͼ宺X%ȩUDSܬ]Pzn8먈0,>1MFk']6@Cu\ pJѫ0bFb2*TuKr3)e'뛽 cff-!e!oUa|Ҥ]澫MVSdBϹ)_˂Gz8X࿼XA2TQŏ͌[4b9Wis˛n +Jݡj[](vQc,)7O⭁&%ߜ*xf?I{EI2IJ#s;yFnM~YR. 2?'Z |7HʼnuW?z~XzBREė{h{,Ws[VXZcew6:T6zsq_kǔ45\N꩟tesP}gNFWzz۩.! )a-4ڦS'XZLx435#:)<D\dYMRZ2atw,R! ^K|\1j4ɡ6g>eտ[r[JE@(&ߙl(y`y7t*ZVB0"HVUU"Q#'H'faWMWSHCfʠ1up;FythN7ߢ|1*|a0=ۊR1",zۭO~>8iTJ5%3488NYmxy ]1l<Pt'T΀a7E0!PFӊ%jhi d8fNAAYz v2*wزA툆 rOC/m+tMoL,_f:2x6O|Q>+=Y KX,xDZඃ;oef$յd^5Ouգ(n# I~|Ӎ J9 (H]"ձ[M,<*(;۔wS=D`nx뎅u7?hçc8djg:ْC>`Ƣ/mX4xlչ]*dHܡbdɏb{LK*i)0:Ӯ02zwiJ>Yڙ[5ݔfOL!|T] m]P$xtV8Œ]{S[dIBIV]:yWȱ35>VMjjTW7/gnYI޶1bs vAs'dn/F}FBRu* ``3%@Z@β r",z ¬$ur%edҕٟ=^HpX VM+FQs4WKOH.K.~0v6 d^.-Yɵ`&8?M4$Ʊ$O=/( >[SMy({:EȫXh@7ZϾDϐ$leZ|~ESw|G1py`8ua'R Tq F];3'Ҵ65Ã$m J Dl%# d73_Udg!E[g`Ƨwzj&0m|joQ-Wmuп:.zeɝ =* vK0朮-FB,zMARQ=~ͥSnxjSc.q0O|8/@!yx|-ىaO@4V1e~0Uw@Y+ki7e,߉3k嘔4kkOCˆ{k3 ;8ѹl}Tw^$*2fXs}!ew>q<f;w@v؜Hkg¬">T+¶'_VcEу>!#aB. ~Ȼn70Omq[jN! lp3!O"(e3 1KcHa1݋?*[%Kdţշ^ў/WHIQ[(JlpRc!3lUqOZHCG>Z[J 4JfQXsZ8zy%'ٹm8(θ34O~t{13BN،9ӣhgf3 =5`gyJ/Aw(]p腲(tZ(tG:-1$];~N4ň"Vz׿Wx:h@<4u=C.FCD.Wf`lou@j5R+n@f &r'ȨU'H g9-o)!V#'C4]N-dxTw<nş+ [%kٝDW&>:dשb;WKhh UXbM-,6Ģ\Ky q <fkZ´ɡ*;> !(?WA&nT5ws*H%\feLUF}#bfWT#Io.קT~691ԟ~#guw7PcjCj71q~_q@ /s]X:T&D b&a)և'8MHaEJ+?6S:Lt^$nX/eFHU& \>`r7mWSBрUUױlK0ZZ淭,D߉rgAqro!wfW?]O0TBP'%))]TuEXi(vWNMslwI𑨙$UIaBeZ ޻nv^kҘ*;TZ$^p@fq}Gip@^MN8ݍR q&ZHV?ϷKzaB3n% #xY1r o]@ EutH('C>1'5W:CNKZ_,_&+*&Rg!Hvr|E ՙVðF8z{$>?նFdbsObq5ןO|A'Nmg*v<"R҉Ш虊`hHm " -Xܮ|foc >J_4ݚ^r Gʱòh?*S_(, F؉ i&Fۺm0b+?*2XpRM2F"lHʳ>}FCD̚4>'+$uٳ.`ʻ( sa0!"_z 1J0Bqg>(Qg 1?ɣH9ֱ ۂd00'{PٺϖV2E + sE9<6Fh1xssJE暄y7ڠ\[X^K?h r~fNԇ9f̟^sL%3n1VR鹹XXane?F X 1Ϧ.yxQ6\# Itz.4юD pbUƬଌK]%Y3fq'FB|a oAE]";|э+0?Ԏ,?3>RCC$7(@JFY5GOk9ݽc-Eemx~}AudDP6Y'>&Oo9@ +} lL=A=a\@j-Qݶ{uO"rψIz]qN"\"զ`O \xʿ#e_y7Z*w9q2S"hsy7鑏!1ى}{px[֭Rt@ooRq֐5t֓c%Wh/fg7@1XR|p6a=f'LL<Q j$/RZf\S$Oc5hAɦ-ؓ=/s6*f< }igmXA4d i3;X;14[cVYb0_{`:V $} Q?\l͘'}6s4js/~V(C=Sҵv֝ .Sm'lJT.sB_gw{;nUџx GbL־~g u$w45Qa:Bܽ9bFuJp~MNX\óq@؉% B_sZ~La;xrlt!.{7L׎. /E|7/))IrE=n7.ėN$U *1~t[]ܕLyy\JֱbL@d37?,+L%mm l| H IWu|eԚhTes)@-+dYsB۞MY8J BG"?֖B>gRZ'$t(c݋]d#S HuIмiG6ٜՄqt.~5g9ǖjA2ML h/"P:@SFK8UꜲe čaNxۆ%a俬&x1[́7i|`ܯCЇ9yC"\n"3lbDfm+MV|iyzBSwKo%v%P͂Mcjո7b0W!UerZ~鰱 *ᲊOtDh6VA6{خΒgHvܭ}u͔4C4#o\ {gPz+ ǽ:䁌q.5&`%@F j=> A$*l7iyr NFRT{ V!2he = )L3mweCyR0r80qThyy-? D2,v;+ącLZ걩|ŶA7_ (Ix<4I)F)P%9j┣4O_f{,?ѴKLaYBCsJwW'BGzX;@?Yʷj5 Ѫ1~nBnY7"L:NPzm&4J p e~$5K~ ] FJI4yCM#Op%kHGG*n%R਴-S6G%瓁 Xqޟ ¤W-"[]mBln$_v/kVp[7EH1uVD]-g$[(+K-uY2K驴n9bpbiwDqF\etٕCT.;С1څz(p?LR}6y2Cr!\rD @g  G)츃Y sQ#Y?K]eQpo@lPƉL[ %DTlYuzHudٺf݋ `:/C%]a⹈sZw^P 4~^ī48,EtwU >D mJwZٙ*#vZ COk.$23Kthv yّq'ol7B^)G'{@:@5oы9. (:HHس̼qlZՊfY#:cPbtVX\ EV4LlR'ˢ{|a޿Q،GQ@B=juGS@7HL;& yh#d+NKh˸PzĒ/(!wkƌIwHgix82Bcqot#bvAaJOArDf50EL .WtKҮo75Ԁf$1(J=Z(R 0Ks"1u8pw2n:2j`o8С ޾_w0x"js zsCuO "E2V!uqc Q)$Bѯaܶu"&4ݢ9'nԥ?͢IЊͧ5'v0z&_ Dݤ‰eN6XG(?(d{GrqۂW=zI:Ɠ'mirG8V\-vN9iK Q!McDrmXqJL$gz__b 3[ÿ5.x-DN#2"2W^;UFS `'DtWMBV 2IlV98A.b(ORK}]19ٗI0@mNԞޙ@ ՀM3(賦9ز:XcZk#rm2ǚ(ǫ=|mmDѢ:|-vs;ɢ81,=:+]AO>mA34:~C]Àǰ=ó /

UtDtxY5eO^=p0:Mpo/ZǢ$\9N}Js)NKG%5"artPZF?#eDۜ& ǦT"X_5f>~z`u/uZ]~bK6aXvԞ3o!N6j_Ųgf{JF ś!w%uil>ٓnۆ3eUgX`p&[ 3N;ЫR] B`kUﺇS0\~Rf<"0ΏNYf)`Y @n_5W@棪ap({_]behP1Ye*ՙMciU iٓS `Ѵrި4 VtRh@DSpxZퟺ3_HDu>r7/ckc|}JQQqUDb4p94pv}@̽wNHs`].L/슩% {" *_[f?-.^Y\g=ڹ'cU ^] Yد2Ԡn|g%NQމ-_8 q=];7|WJ*L1!=$ЇK!/^@u`=q@AtG$,`[\2 X-ʆkFxu4h^M ݾbϣL߱5/.[= = $r:Y4,Al+R? Eڧ%\D`uoVSǪ}IDC]:Ffb&n~Hׅ&Oqq@w7IQA'#b(ĉч"?klnezůZ"YjĥH p9gZ[?Rcf;LZg$2zm5D@{1Ʊ<UZɴF犗- Mdd@dؿK^; *Օ_㌦\.jan;#9I6b8`nqZ$mp/Xf2m$;Z.mPtx>?U=}h~i਱]ĸCUL $YğViqĹ>#p4[`U}h)u$[9qC|ΜaҪ&^t66JP콰(*Xfjy(/#ֽ-p -61uu[]=~i5LpFe;" md[EJVغ#+>f2덳5$GMM;`M)y^?>u_g;HioqA`CC 5q -oGuk0A3;E=,F֟BY^kKRm{LXu0j0/ݜX[!#a(/#k,E>gD|d IQDb~9A[.DoXAfz 33G]q4!tMX:26Ӏg3T~s47mbEMۦW\6''6V|To]Y#x]0c"'k4$ =ҾgY5}U >;]Y ~@1f{|aRJNJ&PO ̊=,C5DަTC #6Uܵ^*ܠ@RA_(軮`IL*M94sM(ARl!Oh JtZp ? Hhg ahvkP!4b-64~?U*+AbNl#^'Zϰ*BzͬR&qdA#%(>+dlx_ ܊} -2 UWrA36 D]͵\E\0e)U/:&3~+Iju$֫\ǀ=[Z6 sPPvA69N;35_0y\%iHC*A$i8=|Nv WF5@d2Fhx_OcB u^MN.jj׋˃^~Pt?;w_ WMM3PYI 첲YA\ Sx .mg(sS*y͹ĪtW(j! #Cƭ!@+eoߙwGGy18lxlHs+ax<{f,BVpƑ7oV(B4x 9Lt~$ZY O!w+pv{3_IZ*fȟĂ]Hdrb%f