freerdp-proxy-2.4.0-150400.3.18.1 >  A cSp9|=EM`W-䣛~ Ҵ%ywNܟoo a0]ŷRy!\f%q%C6b=%Yy5䈹 Oul1rOQi}=f*ؾytux‘0) l\؂$<+^x1KOi&An3\7;jUzڗEd}44cfN]af13f0417f8fc8a6f29916930a673e8f47c4c477fcd67aa4171c4f933220b10aed4ad19b80125039b8f6e2f0d1328ba0329a8323䌉cSp9| zʗɂ` ?4\wa6q~#[(˷rvQ yfqR:'nJY÷DnwT 2 d8@8aK!țO J^U?я9%1-Ѳ5?3h]M8>>4̽-b z]1kI8+3+e4N>Wעk s-wb:7wRȰWaA* % A<$cO`+kp}^UJ >p>e|?eld $ W 5Va w       @Dh   (8191:1FbYGbpHbtIbxXb|Yb\b]b^bbbccqdcecfclcudvdwdxdydze ee e&ehCfreerdp-proxy2.4.0150400.3.18.1Remote Desktop Security and Monitorig Proxy ServerThis package contains a proxy that allows to select specific features and channels allowed for all connections passing through. It allows monitoring of the running sessions.cRnebbioloSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Otherhttps://www.freerdp.com/linuxppc64lecR284613a48a6fc65ef2ae2fb21b3798ca5228b2649214633ddf086384e719efa8rootrootfreerdp-2.4.0-150400.3.18.1.src.rpmfreerdp-proxyfreerdp-proxy(ppc-64)@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libfreerdp-client2.so.2()(64bit)libfreerdp-server2.so.2()(64bit)libfreerdp2.so.2()(64bit)libwinpr2.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c=@cEc\cN@bL@b@a^@a]aEaD@aD@aA@a@a`OL@`<@`7@_@_^@^@^^^I^@^@^T@^^t@]@\@[@[j@Zz@Z@Z`@ZkZWQZY@@YKYKY=0Y;@X~@XW local * #gh:FreeRDP/FreeRDP#6985: Support newer FFMPEG builds * #gh:FreeRDP/FreeRDP#6989: Use OpenSSL default certificate store settings * #gh:FreeRDP/FreeRDP#7073: Planar alignment fixes- Updated to release 2.3.2 Noteworthy changes: * Fixed autoreconnect printer backend loading * Fixed compilation on older mac os versions < 10.14 * Fixed mouse pointer move with smart-sizing * Added command line option to disable websocket gateway support * Fixed drive hotplugging issues with windows * Fixed smartcard issues on mac Fixed issues: * #gh:FreeRDP/FreeRDP#6900: Transparency issues with aFreeRDP * #gh:FreeRDP/FreeRDP#6848: Invalid format string in smartcard trace * #gh:FreeRDP/FreeRDP#6846: Fixed static builds * #gh:FreeRDP/FreeRDP#6888: Crash due to missing bounds checks * #gh:FreeRDP/FreeRDP#6882: Use default sound device on mac- Updated to release 2.3.1 Noteworthy changes: * This is a compatibility bugfix release readding some (deprecated) symbols/defines * Also add some more EXPERIMENTAL warnings to CMake flags as some were not clear enough. * Fixed a memory leak in xfreerdp (mouse pointer updates) * No longer activating some compile time debug options with - DWITH_DEBUG_ALL=ON which might leak sensitive information. * Added -DDEFINE_NO_DEPRECATED for developers to detect use of deprecated symbols- Updated to release 2.3.0 Noteworthy changes: * Websocket support for proxy connections * Progressive codec improvements. Reduces graphical glitches against windows and ogon servers * Fixed +glyph-cache, now working properly without disconnects * Huge file support in clipboard * XWayland support for xfreerdp (keyboard grabbing) * Improved wlfreerdp (wayland client) * Option to allow keyboard scancodes to be remapped manually * Improved mouse wheel behaviour when scrolling * Improved dynamic channel behaviour, more stable event detection * New connection state PubSub notification: Clients can now monitor current connection state Fixes: * gh#FreeRDP/FreeRDP/6626: Fixed parsing of FastGlyph order. gh#FreeRDP/FreeRDP/6624: Added support for xwayland keyboard grab gh#FreeRDP/FreeRDP/6492: Added clipboard CB_HUGE_FILE_SUPPORT_ENABLED flag gh#FreeRDP/FreeRDP/6428: Improve NLA error code logging. gh#FreeRDP/FreeRDP/6416: Http gateway message support gh#FreeRDP/FreeRDP/6753: List of pull requests to backport for stable-next - Added freerdp-rpmlintrc to supress a false positive as gethostbyname() is a windows-function call not a unix one.- Updated to release 2.2.0 (boo#1174321, gh#FreeRDP/FreeRDP#6381) * SECURITY: CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel * Sound & mic - filter GSM codec for microphone redirection (gh#FreeRDP/FreeRDP#6263) * windows client title length (gh#FreeRDP/FreeRDP#6335) * "Alternate Secondary Drawing Order UNKNOWN" (gh#FreeRDP/FreeRDP#6370) * remoteapp with dialog is disconnecting when it loses focus (gh#FreeRDP/FreeRDP#6298) * v2.1.2: Can't connect to Windows7 (gh#FreeRDP/FreeRDP#6299) * fix: memory leak in nsc * urbdrc: some fixes and improvements * build: use cmake to detect getlogin_r, improve asan checks/detection * server/proxy: - new: support for heartbeats - new: support for rail handshake ex flags - fix: possible race condition with redirects * Drop upstream fixed patch: freerdp-CVE-2020-15103.patch - Removed freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298- Updated to release 2.1.2 (boo#1173247) * CVE-2020-4033 Out of bound read in RLEDECOMPRESS * CVE-2020-4031 Use-After-Free in gdi_SelectObject * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` * CVE-2020-4030 OOB read in `TrioParse` * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet * CVE-2020-11098 Out-of-bound read in glyph_cache_put * CVE-2020-11097 OOB read in ntlm_av_pair_get * CVE-2020-11095 Global OOB read in update_recv_primary_order * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order * Gateway RPC fixes for windows * Fixed resource fee race resulting in double free in USB redirection * Fixed wayland client crashes * Fixed X11 client mouse mapping issues (X11 mapping on/off) * Some proxy related improvements (capture module) * Code cleanup (use getlogin_r, ...) - Removed obsolete upstream patch freerdp-bug-6205.patch- Updated to release 2.1.1 (boo#1171441) * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common * Enforce synchronous legacy RDP encryption count (#6156) * Fixed some leaks and crashes missed in 2.1.0 * Removed dynamic channel listener limits * Lots of resource cleanup fixes (clang sanitizers) * A couple of performance improvements * Various small annoyances eliminated (typos, prefilled username for windows client, ...) - Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205 - Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148 - Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207- Updated to release 2.1.0 (boo#1171441) * Fixed CVEs: - CVE-2020-11039 - CVE-2020-11038 - CVE-2020-11043 - CVE-2020-11040 - CVE-2020-11041 - CVE-2020-11019 - CVE-2020-11017 - CVE-2020-11018 * Fixed leak and crashing issues: - gh#FreeRDP/FreeRDP#6129 - gh#FreeRDP/FreeRDP#6128 - gh#FreeRDP/FreeRDP#6127 - gh#FreeRDP/FreeRDP#6110 - gh#FreeRDP/FreeRDP#6081 - gh#FreeRDP/FreeRDP#6077 * Noteworthy features and improvements: - Fixed sound issues (gh#FreeRDP/FreeRDP#6043) - New expert command line options /tune and /tune-list to modify all client settings in a generic way. - Fixes for smartcard cache, this improves compatibility of smartcard devices with newer smartcard channel. - Shadow server can now be instructed to listen to multiple interfaces. - Improved server certificate support (gh#FreeRDP/FreeRDP#6052) - Various fixes for wayland client (fullscreen, mouse wheel, ...) - Fixed large mouse pointer support, now mouse pointers > 96x96 pixel are visible. - USB redirection command line improvements (filter options) - Various translation improvements for android and ios clients - Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch to fix boo#1169679 and make USB working again - Fixed build for SLE_12 - Cleaned up spec file- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order to fix boo#1169748.- Added cairo support for scaling - Cleaned up spec- Removed patch freerdp-Fix-realloc-return-handling.patch - Added pkgconfig(libusb-1.0) for building - Added new package for freerdp-proxy - Cleaned up spec file - Updated to release 2.0.0 * Fixed CVEs: - CVE-2020-11521 - CVE-2020-11522 - CVE-2020-11523 - CVE-2020-11524 - CVE-2020-11525 - CVE-2020-11526 * Fixed security related issues: - gh#FreeRDP/FreeRDP#6005 - gh#FreeRDP/FreeRDP#6006 - gh#FreeRDP/FreeRDP#6007 - gh#FreeRDP/FreeRDP#6008 - gh#FreeRDP/FreeRDP#6009 - gh#FreeRDP/FreeRDP#6010 - gh#FreeRDP/FreeRDP#6011 - gh#FreeRDP/FreeRDP#6012 - gh#FreeRDP/FreeRDP#6013 * sha256 is now used instead of sha1 to fingerprint certificates. This will invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a new connection is established after the update * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372) thanks to @kubistika * Smartcard received some refactoring. Missing functions were added and input validation was improved (gh#FreeRDP/FreeRDP#5884) * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880) The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still available but marked as deprecated * Support for Remote Assistance Protocol Version 2 [MS-RA] * The DirectFB client was removed because it was unmaintained * Unified initialization of OrderSupport * Fix for licensing against Windows Server 2003 * Font smoothing is now enabled per default * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215) * Unified update->BeginPaint and update->EndPaint * An image scaling API for software drawing was added * Rail was updated to the latest spec version 28.0 * Support for H.264 in the shadow server is now detected at runtime * Add mask= option for /gfx and /gfx-h264 (gh#FreeRDP/FreeRDP#5771) * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)- Disable LTO on aarch64 and %arm to fix build- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return handling that results in memory leaks (boo#1153163, boo#1153164, gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)- Add Requires: lib%{name}%{major_version} = %{version}-%{release}: freerdp should depend on the same release of libfreerdp2 (boo#1129193)- upgrade to version 2.0.0-rc4 (FATE#326739) * Fix the following issues: - CVE-2018-8784, boo#1116708 - CVE-2018-8785, boo#1117967 - CVE-2018-8786, boo#1117966 - CVE-2018-8787, boo#1117964 - CVE-2018-8788, boo#1117963 - CVE-2018-8789, boo#1117965 - CVE-2018-1000852, boo#1120507 * Security and stability improvements, including boo#1103557 and boo#1112028 * Refactored ntlm_av_pairs API * gateway: multiple fixes and improvements * client/X11: support for rail (remote app) icons was added * the licensing code was re-worked: Per-device licenses are now saved on the client and used on re-connect: WARNING: this is a change in FreeRDP behavior regarding licensing WARNING: this is a change in FreeRDP behavior regarding licensing. If the old behavior is required, or no licenses should be saved use the new command line option +old-license (gh#/FreeRDP/FreeRDP#4979) * improve order handling - only orders that were enabled during capability exchange are accepted. WARNING and NOTE: some servers do improperly send orders that weren't negotiated, for such cases the new command line option /relax-order-checks was added to disable the strict order checking. If connecting to xrdp the options /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926) * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840) for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon * add new command line option /smartcard-logon to allow smartcard login (currently only with RDP security) * add support to set tls security level (for openssl >= 1.1.0) - default level is set to 1 - the new command line option /tls-seclevel:[LEVEL] allows to set a different level if required * new command line option: /window-position to allow positioning the window on startup * client/X11: set window title before mapping * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg- upgrade to version 2.0.0-rc3 See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1 * Improved and cleaned up the command line interface * Fixed automount issues * Fixed several audio and microphone related issues * Implemented AAC and MP3 codecs * Added Wave2 support * Addedd dynamic resolution with full screen toggle support * Improved redirection handling and certificate issues * Improved automatic reconnects * Improced connection error handling * Fixed invalid pointer, double-free, integer underflow, buffer overflows issues as well as other memory leaks * fixed X11 Right-Ctrl ungrab feature * winpr: Updates time zone data to April 2018 * added libressl compatibility- removed SLE11 condition - removed no_connection_to_windows_10_17101.patch - removed -DBUILTIN_CHANNELS=OFF switch - explicitly set -DCHANNEL_GEOMETRY=ON - Disable the new X264 and OPENH264 codecs because openSUSE does not provide them - upgrade to version 2.0.0-rc2 See: https://github.com/FreeRDP/FreeRDP/milestone/8 Noteworthy features and improvements: * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488 * basic support for the "Video Optimized Remoting Virtual Channel Extension" (MS-RDPEVOR) was added * many smart card related fixes and cleanups #4312 * fix ccache support * add support for memory and thread sanitizer * support for dynamic resloution changes was added in xfreerdp #4313 * support for gateway access token (command line option /gat) was added * initial support for travis-ci.org was added * SSE optimization version of RGB to AVC444 frame split was added * build: -msse2/-msse3 are not enabled globally anymore Fixed github issues (excerpt): * #4227 Convert settings->Password to binary blob * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc * #4276 Big endian fixes * #4291 xfreerdp “Segmentation fault” when connecting to freerdp-shadow-cli * #4293 [X11] shadow server memory corruption with /monitors:2 #4293 * #4296 drive redirection - raise an error if the directory can't be found * #4306 Cannot connect to shadow server with NLA auth: SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918, CVE-2018-0886) * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes) * #4527 pre-connection blob (pcb) support in .rdp files * #4552 Fix Windows 10 cursors drawing as black * smartcard related: #3521, #3431, #3474, #3488, #775, #1424- Fix boo#1090677 activate pulse optional component- Added no_connection_to_windows_10_17101.patch to fix Windows-connection-problem after Windows march 2018 updates. This fix is related to boo#1085416- Do not use xorg-x11-devel, instead buildrequire individual x components. - Only attempt to ge rid of __DATE__ and __TIME__ if SOURCE_DATE_EPOCH is not set.- Users can connect only once wo windows sessions due to [#]gh/FreeRDP/FreeRDP/4348 Therefore WITH_GSSAPI has been disabled until that issue has been solved- Updated to 2.0.0-rc1 Noteworthy features and improvements: * support for FIPS mode was added (option +fipsmode) * initial client side kerberos support (run cmake with WITH_GSSAPI) * support for ssh-agent redirection (as rdp channel) * the man page(s) and /help were updated an improved * add support for ICU for unicode conversion (-DWITH_ICU=ON) * client add option to force password prompt before connection (/from-stdin[:force]) * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146) * add support for "password is pin" * clipboard is now enabled per default (use -clipboard to disable) Fixed github issues (excerpt): * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4 * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width. * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush. * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main. * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface * #gh/FreeRDP/FreeRDP/4117: possible segfault * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program- Remove extraneous Obsoletes for packages that never existed in openSUSE:Factory or X11:RemoteDesktop. - Rename libuwac0-devel to uwac0-devel and libwinpr-devel to winpr-devel, as that seems to be their upstream name which packages are encouraged to stick to. - Remove duplicated pkgconfig requires (these are autodetected).- Fixed download location- Switched to official RC0 - Create wayland client package and libuwac0 package - Create separate libwinpr2 to be used in other packages - enabled gstreamer (currently disabled for tumbleweed) - enabled kerberos authentication - Update to official RC0 Fix the following issues identified by the CISCO TALOS project: * TALOS-2017-0336 CVE-2017-2834 boo#1050714 * TALOS-2017-0337 CVE-2017-2835 boo#1050712 * TALOS-2017-0338 CVE-2017-2836 boo#1050699 * TALOS-2017-0339 CVE-2017-2837 boo#1050704 * TALOS-2017-0340 CVE-2017-2838 boo#1050708 * TALOS-2017-0341 CVE-2017-2839 boo#1050711- Redo history by using changelog url - Update to version 2.0.0~git.1497095982.1dbd2d28d: See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d for full details. - Packaging : + Move to xz tarball in _service + Remove 3472.patch merged upstream - Update to version 2.0.0~git.1496304402.c42ccb508: See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508 for changes.- Forcefully enable PIE in CFLAGS as the automatism did not work.- Add 3472.patch until upstream #3472 isssue is fixed and PR merged this fix boo#1004108- Update to version 2.0.0~git.1477034991.043243f: * fixed kerberos authentication * shadow/rdpsnd: Fix race condition in rdpsnd channel server. The output buffer and format parameters are not protected. * wfreerdp: fix invalid VerifyCertificate callback * rdpsnd/server: decrease audio latency and make it configurable. * Add an environment variables section to the man * protocol violation: rdp_read_extended_info_packet * Added support for OpenH264 1.6 * freerdp: fix sending of TLS alert on NLA failure, add better handling of server-side NLA in shadow server * freerdp: add configurable NTLM SAM file option for server-side NLA * freerdp: make modifications to NLA server-side fixes according to PR comments * Fixed a windows 8.1 issue.- Kill off __DATE__ from built sources.- Update to GNOME 3.20.2 FATE#318572 - Add obs git integration. - Update to version 2.0.0git.1463131968.4e66df7: + Fixed memory leaks. + wfreerdp: fix name build without client interface + libfreerdp-codec: fix xcrush decompression, revert remote control fix + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and Morocco + libfreerdp-codec: make proper xcrush context reset fix- Update to version 2.0.0, git master branch id a7ca42e (FATE#319661), no upstream changelog available. * Warning: This is a git snapshot regarded as technical preview by upstream. * Warning: For xfreerdp, new /long-option commandline interfaces have replaced the old --long-option interfaces. Existing user scripts need to migrate to the new interfaces to avoid breakages. For more details, see: https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface * Add Network Level Ahthentication support. * Add Windows Portable Runtime. For more details, see: http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime * Obsolete libfreerdp-1_0-plugins. - Drop FindALSA.cmake: deprecated - Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch: fixed upstream, implemention now in include/freerdp/scancode.h. - Drop freerdp-CVE-2014-0250.patch (bnc#880317): fixed upstream 532c420. - Drop freerdp-CVE-2014-0791.patch (bnc#857491): fixed upstream f1d6afc. - Drop freerdp-fix-FindPCSC-macro.patch: fixed upstream 9148af3. - Drop freerdp-handle-null-device-name.patch (bnc#785437): deprecated, related implementation dropped. was: freerdp-fix-pulse-no-device-name.patchnebbiolo 16757766632.4.0-150400.3.18.12.4.0-150400.3.18.1freerdp-proxy/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27685/SUSE_SLE-15-SP4_Update/a64f425c5a27903b78125078a9f91196-freerdp.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=8a786633b5c9fb02bd70f32caa373f91b57b2dfe, for GNU/Linux 3.10.0, strippedRRRRRR Y l-+$tVutf-8166156381af6826f80f7ba5cc7aa6c307764bab56123c21c3a73a62910958319? 7zXZ !t/ z] crv9w![KI_fbϸjZI:,ܦ[dK~JL ϟPZ 2*(V íYCg۠Yem̹c$90zo$/_XwI@6;f|0:;v *#_˰yOv~xGIGX]WT &*|WoťEjba%h[oOiܒ5>l[`PJ](ni7\lkdNdnߎ8k6i:DS.b4,>K{uy|6%>A\|&wFc99 gÏdjj`jpෛڦK3Ͷ*}]CЏ8;:y|RN†rZ:j~#'&*)niºR)(OR?$kHF0༂chܸNNԉ6%"&TBH\~鮋Ob=C ~W )aYxwPo}D\B{J&C*Q$ݹ Jk+vйofA- = AgCiNkJd#*[r4_';!:B2׵- rLIc: 㟸U/S `b'(Obv&%FķKCecuq6rԤavA],ſQy=Igq^i\ottg5vR.ThdJ'ئ:pyͶ3D w /FG 3W1hD| F?*1p8<f = jYf;WAԻCk0>“:t0{nfQ3lU>yM?"Y7B=œl>C^+`0ɬ8 دTt(q/ 6;jqlo=E^.E4kUB gc+5)PE6ѓ>g齶9yHaEsHE4G\Q_33ޓ+iTȅ?@"L_@* 6JuS9e8weOv``Hir.g/OV;) Ϝ*i!$Fg-U鑡m1<ԴRLgɌTL`x}=:vNQrh\S A%;{/*xrB_/:mhM{V^>b>!/Yj*QmejF_x y|ahDGӴ;$ɢxHrRxJr )%I8\n9>8INꔑubٵW TH ',A2ݕYy^.֣<]wqIq2MgR8~.[R`=Gm0:mcv[N)0MB(m;XDՙl^+TNb'.WUpaYf)}ȴW͈'m@fJ4]ewV#5WY'T;وAگtymF&N^sVژ<4D3%:y ׁ?Qubstt[(E啄ܴOgR [`1,5 Y_询h7PE +( &% *|pTI%`]8Ѐ)_y81e1=P_OOB5c+9_&tD %8hiXz ÕD1b~KHR ^{iQכ zMa#^xQZ]k%o^ࢼhk+ j@{w?fn&.N]GyRep,x[YVX4Zk; IAt{JwCGk.l:/m}U_߈1>,ʃ G'{  I BW;$)1ԥN vZC} #}G ǺNZ?*?A-ѠI Lx$M mwhrg%ti]ŏ 23D` d6MW*jx &ftBOx MKwqAjrӄ@9cj:pw+$s%78 {ov<[bsxij*ZpJsQ,*+둰ŏCZ+լ TtQm:U*SHĕۭAY+>014V,=Lg-Լ45GPel'^ y!qR32{TPކR+Q%rhיjm.*36,}pcGcw  aJu3z4 Y3?i;Zm"LV2|8E\ L-&xȩTg+ DWoɷ3̛},#luFyɇODFi%cudZ=J]֭XmG3RY+mOnԎ s*mz7)]_c:؀ ü/7}#3\Qр3D0BI+R̺.EF< Zrpcs}:9ɼ++||u8KFLS2Rzzݖ?".'.22ռabv\Rzz5&ʋLsS†lF=LPKO9^iixem\Wfv|ifU q͂ \%p[x<`E(H2M@yH52^uj^Igc;>=o"beu׈ksЉ^|ݑZmɢ~8¬Y"dj,!6~GX"gWg"o$]xyA<z,5e2g@Lݰ@Vm͕'ǎSK^5rQdԊZ Y6p,ycA'T>1 TN+s']q b2+[SS%:o~mM32 & m0 / ́b?a2Aa>G(Onx& .gL;{sfmDoh wѷ_ WsHu Zڟ#^Rf3maHɤ;?OXbPmpp[@?fBඹc9M!ᆶş&h;5n]g%hk3֡mᾠ@P+XIbԧiÌ5H*uAwÉu }};>bι)[ ; {79.z;nR^U]>ňqPqIJ&BPPK+FEҸIH=9Q_`ů^0iCFe-PJUJwF=.$YcuS$?J[c6NKٶA@lнbddI@NA㬕d[}F+Q.Vv~+[(ǟ=">9T%XrhtH6ΊM C~A>х % ghy _yŌ*+~Gc7 X+yh\ҁ@p1x˃I%;+{ VPT>s1m|T)N_m.RPeT9 K"WWuk2̼15X*H,K .wTA_J 151ګTkLJ(_2KЅ]-2;Eմ/z`xQyB2$km%ps u?>L(]}sI99'䰟yt|~8$CyMgl4T@ I97)Y.U64 ϐ2Cѕ5h2erVlĩs$Sۀu;R^(mwXw̎rnpNKK.;4 VD7qڲ5VlxڋUj} vh]^Y :s5f~>~d[kZB,%j S[ԞWҔ-dȿ;ju8?gn[ Wk5#k \[|Flj4T< r|*f'*Jt|%&M| L ~cNN#=ļ$vnsK أZ\@' >Lt8 +3`G#+m~[Cof0FBЕ2*+D^^ajäsH?$^A*֛`K +Oh$VO,&@^/PC{"׼Hx{tx0:.~1}Qĕ!lPd$0Ylܚ{ "Md>m`]uNCB@)Ꝓs}4 ߄Ηevi|F^sA Z +M 7K0,1 MGwf.0rvEJJLjjBǭ5VCQ<ٞ, ^@ukr#!7.X(]xr2oXfQJ͒++*a'h(2&j %OsD"M\dKv[͇y! _,O:l7 F0}MD_o[LKb!|[4mAn_-\Uw_-{݄;%w"s#>MAu+k^OVJԥt3%+AJApRDoSӎs4.j>9ģ&2 $Ӻ(DOZ^G =쮺`ZaEwT6pL>YzNQ(tm$%@c݂➉.NjK7~dUNr ʁfJiܬ8e#$'a tAš5_5N^&#%ND&.`JĻ2WD-X ρ9#obR&7L<.4d[5`XCVK޿ 렃ˇĦ5@H td} u/7:F;9p|AmV/YنA1~)˲􏙯JBNA`"; Uf{{ `jiDV"~ռ; )؋ [ec6@~\bQpGvAC[ w6"0yTb$oFrܚ83*yc/d6 lj7z{:]rYE>aq1du0t}zc4>xHp11(K[*KD_˴1~VQ6Y/ki-ҩ`P]~P G/x"Aнkxw]Uu8w,V߱ *Jml'^'g{e,Y *7T1}mdߔP)!|id2l+}vGJ@F:Z$/,,%4NK\ Kfm\%kNp+C 4at6ɸcAC[&0_r9C^ m._h>|qBԺkD5Hi)Cĥ̃hV'd2L?giں>:Va߄Ǯeo kJ$}!J{2^84cbf Op -am2"8Eo\U"2+V:$6&a^,Qb.P/K\U/Riޜ^f9#!`D+.Fl +~,j"hTg~=@+]ى cWI1rӅwjƐ:W7EEK/BpPÌʜ 0޹ŵzFUB}x$C:*LˬΰݡMӀGWq<P=,m44?/5&BW:=cV2 Q>>D' i ֦9Ps#]% 1aG(g )Rj'adD ]_ FggwIu|.͆W4`ʓh~S[9G/뒎q!(ϙP| HJeUڴPp7M-VDґ ,3lŅ-bIIb'=bܙ;&P|6|Rc'`6l9:] Q3|" (pi5>am֩bUŦF:b!XRwJȬ (bnV`Kԛ$"ңBPjLϦ܄D4x \Z:'cJZ1Nj×̡j{1ަq?sn*7,fWn>iY! @*+ 7h|R@E(n+; aUnf6{.ϕm`, ٥Asht7:x!pb!&_J# hOYahmF&at^\WzNOи"20b{/Ιtff3L#S.z @D:_$AG=R ЀyDZf+۹[?`.B۔XM':b[;OJv/MG{[&(߅FV"*z6V^ V򵨡ݯe?bR;>97}!;Kզob6CsU2@tW)p%/ 0Q^AGA_dCo):t_ 1#3yq oIf5A}^6ԅA}ւ#oW tu)ټ%^*N)rҵݳcX3ب (w7tu+#ьɱ. nΎ%~^E6CuP|Tݬr!pֈЪI:>aw%#(|L5瑃\T ?,Μo`}fRIèovEvh_*ߵf\A\åa^>j\+=\Ue:\k-IPUUpGH&7N!(ooI'\ßqy1g1q=@b۸~GrM5t0l*5 |^3.?Xg3D,3u,k*رtC}d|0WFS"(H2lBF$Ϙ5`s7YiglHMAl4ׅ+Xm/553 ۈ|mӧٵ qJ˄-2Rƽ%/ԥSGM+Mtd!s# 1Y9.B!rv[* KrJ9,lCmqHi SB ^'l_$gyx6bH} !Ŷy`vy {Fxd|^b Ռ ׹x/3d?!Qץ|(epyqZ3 <"SU;PhmcE19(!uIv3͞> tJҪN1B5STҠa P45(݈1 ĸWU9e'vJ9&k'g{2&~a]i_5 m;Ze(DoP!Pլڨ<Hjܣ.i)Z;PKpYg=o)2tĊɋ2'Sr~LEG"Hm3щ+yDP1o/p}s ;S5÷2UvXBIUo?o 7CN cOzbfp}];ٕ3{!Evxl}t( ݟYC.n|p$o2r(Qp'%M(R@x/,j,izVYwԞ( CߝP6"\>&@MunʷiS0yYK;Dx_~ǎʳX8\&0,baPQVL M(+b-1ì(.^DXp8Eh[&(U5xYO 8TXb$#,)ycͦnڀNk#bAFov0G"G>XÞ`ߔum~*fYZKc\o"aT'jf9#(zt =>En]SIkC<'Ȁ嚖"HTy㦉XI@ZaKE]rYvv ! Pl7#rbey=3\il27I*an{b5W=2#*G&lgi @*IRh,u4Ha=ɑ(=9+oV]ԫ}D}%v!7{-CUژC2E_ad4%j^'V:0h<6AmH[:EKÌ#9R❵Q gEgc&@ďK+"P 9E|@7%}.D/U;?c|tLH$wS_0qZ!\,G}l[j`о#e?S @BaݼĻHtxTƴFUix :Z'7Ň(^a]Y&Zf|5 Uk7WЗYqq]<޵`S7,-=:0@1e D/_2LjN 5 g gQNUdp@ּ|U +2q dA kΣLe|$Vnφws&]l}<쉚9C(ɝ;O镕V <+hT ܩ6Xb*Dݸ/;d#w&x+E n }x>s]{-?szfhΒ47{:,Q&bx!R/!S~VVA$_ƙWeqqi#~4Mh O*6N9 >D\ė]q~\[#Og u0GӼp/<9gM{}Zx`'[߲5qMd*)7Eϙ\#&\zp\҃auq5vf:qI_L!eјȻu>=<]%!3OMoh**K4P5$CBidIl-(rhj3*6qnk ؼS ܻ{h ݞ@AMF62g4g#GCx;_AZxi]WoG7Ke sj[LJZːOFo&k4bѼn)(C':Ky[u㖬 '1=yin_ PnO 5GH~o?T n¼۹FY%֯&赹>6Et ܯ;HEoR^&WFgq/{kG4W-\V~Ųr!@Pa wn3 V#J$FΆHYK'Ly496b'E'4$?V\S?<` AmxߟJ{1贩śi MRgȼn}05ɴ=[0{\[BF*Ǡ毆MANLHc+w}ǘO!<3a_Dž+1ĵ+栲 o J|B@8;q3>PE8YQp8"  k ،hgQ4si٦z-.@ϩ.\mE?fzp(9zߒTk=5C>gCŐq,5S-J:'4{,lwyBMGn!$4kWIѴU `*UkEe4<{$5RhMM9Ir㹔 C(tż;8S~~L]0cU li`Yt^PՒj~Cn<ydt009l}b3!L ^ur㳹&Ḷ11?G03Wt[x5gǃq(ᨪ!H)ľcNNx!"/˻AV˿oF *<)VPm&NWgbtW<`Y$bq>} -U7T1xBby7rxϝ^ Q#zsITkq]4pF/T1wdgk"ˬ/WɣXb3A6e Q].-&'qO0RL筁Nb8疉ji>RP(V@]v2f_kfVN4J/m3xqʹYc'V;G}I#'g_*zG>B5g skxzR 8G[hYQdto=͠Ķ>W%+1+kY=7''0/Z]>.:I/+Zos@+) j J\= xZ';Q+lJ_$ Bl t\IݫC(PwCUds>n]> (zE!W7GqI 46N-"jRZ(ޠe*p @D|:)_Q0¾)ko^7_|k]Bax Q.bL?U-=]KP.oI4[.S[8y4}E"{BփRAi?C>}V=^ym%w)>%lPsϼUax龫^˥ͨ抒"M).0ȉƨƋw;7a,)ޯa'0< lL4}=GO Qs7 ̈v2NNx;˝GU.]ißθ=cqڌbE qL(m_`FC;(E{DFd3_WV1nt z^s%Oa?Zˊ俳bnd`:robt9FY ?Qy5&\O\z]Y| y_#I/щZa .\rl;YӒ5-+J8th2y<⿑ɠ?`'WaEd (5kAJ߁S*8(.P8I5p֘.в~[A!&E O$ N ⪰lDq]#A|׫t6P~0HJ<<6{]{]ό7JM#,K =}\ޡF^ߌ e9fؓ}FlՓAWFŷwŰ#,y|O|jEK~7Ɂe]rG)/n<3hoVqʲ ,ʒ APklGJC7SMX㹋0ω9CbIDaYQUHN;][CD||qʹ`Sx42%h}Μ/=]xf̸M!K,XNA%s ,hE2{Cc b6iX{LDCc_T@D"gJպw/]}xs>׬U~.t~r ,3F 4Ks}osn|81cL BdHL`WWk ?ĬT8{.k m :6uEZ[YU1ݣˎa_<,gnHja4O-)fNηHX12d9@\9[fPf<9 UE&CE,*3DסCah \]{z(9g!`P\LcOŃ u*X_fbKpn{@oC? g'4\^rCPY4oR &KɺDߟH'I> 7><@#e@q@cġFkZ^eAK{XcZI'r|G-Ca?CWA,[՞OզO9@ _N˂ۙ_983RK#@ >pFtŁt9iu{; A+QEr΁C?k63bC'3>c%͔WxTxF^#NKtEhZ Oz?G8f8bNtɝmXpg̖枅?0d}r>W_Տ"! >.N%/ ؋N@A@^y*yT, +ɋjn%߀N+0"#ںH,4e9 B2us >*4{wju[Uͮ7+`9kC _C 5DĢk0!PK/o/lM N+᚛E#/Faof!Zf̓/fL?^"2hVᯄ޲78Ae?(<~QL12`4}i$<^\J} ^tf!HLRPA<=֜T" {C1&n*˹U9Kʡ\hF]իNi 28+FnUHkCHK_Fp>ȁW“3eӈBrFq1-9T' V82y{4I\_W&28}LJ|+jYb0+"*Eđ|~nm܊Lk_+uӿdnrkkiPK-U6w ~KZe*q3+B%d#̯<3wM ~ZJĪ&Cޥe0$DU.rBrKo'c݉Qσz𞶙;U1ٟE9 cd̙ 7OOޥ-OB۵D:'I-Yy(γY`xw|}9Y俕ß64ڢT( 7J4^{nWq-,FlR,93Ke`#4!e}~ABN F`+v̫́ho|ЏQ?0$}*nn&\ZA,(T)=ԱiXLk* kyu$C[(&s>aq]И.( CLs*&^D[{U*\PGC^A\(|#% Q͌VFϩ)$mU?w9)x!-ɼ7/ vw]*r8ZO<0wrX\~')`A{h Y8oxyggwJaI,[L^wE 9a+U׿=:k-=H -N.kOfL U%0#V+EI@'=ޱDrTKNSLy z dBuf]uǽ˱TOLQPz)wo: }ඝ@&ڸc!4%[K^]۲՜C2-iėxT;X[*|8QFszYb_P|4P͜F.?^=^#Pm}Ip==-"{ X!.oO2M)\:N“IU*$33: vKWL /vPO>ܐ{aR7M9q3?N3٤OĔTOŦ_Qv% 5 YEO"YGG"7Vz4mdemuԗrE,8alMnp9l3~j/h 3єw+H@M'b6h}p v$>tl޳Mh?񎥉85D4=Z~j.:` r8K 2բ?™͒ . 4X :Vtq٧א~wy.sF${44'8z)Ű7;rߋ Fepx5~'!r K>\6E y lo)Ub-;=@});~3wHȩ (eQhL镏F#2*!dɝm$(R}RߥL){1uIBkX"ib)BL琊ԫR!YUZ)1qXoSF<1VhvDc v | a=n\Yݥ?R3+R&Hx }8?D Bgи[2Jh!Tڧq+`FZbȠl&+[ ƾ1 [潙MrhErmgc\-4l!8/;n^RFA=tGGy@21M0pEzcAf4Ȯ.ڿ+:1-;N&f=Y8h1bkۋ cxG7\|+֯cZ~/AG̪IlP@/Wjp6EB:$Frat *4 J+kz IorGh8Qz̽g Shnw5.0Dź@)g+2ow%:H7ұxhj~c_(|4ӻ#:;?r!1wWIF lR* 81>! _6,%U p@]/h4(198W/ǜ5,nl T]k`+0N:FB_Ip@!:RQ`dnp'*w.E1Bţ{/Rz̜oVKŸn b9 44&Jp&gC[l}x/c9fukǝ64lJ+8USVC'd^/d`=;6XOx!mc4ۋO ӹ~;hB0J UVLa{Q c5 T>JPZ?[񗹴k|4֫iL^NEdH[=m!+XZ{6D~e;2Z£eFi\0Qgv B&#!pǯXy6{Ν\A'YYQHF"ӱ)0ھs/<ۖFd RV JR'<8kVyʮ~RVDRO;#+?%) ; 'ˣn*n,.L!H3̡V.l0i@N`dn7Q8:Q/}~`mЪCJ[Iڼ }~*Ԙ˸ Kvu/CjVlXц O,VMS3 튊|% "r4aK?a#VD0^m4ZQe۷:*Qp)'rxRJK<@ʊ*YYXEsN\}&_88gC>p YY'e|r=ǤIk fӷk&wE%JeYHх ܏ 2⽻G"5);-(O&Sd?~.| IdE֊3d w8:Sylע8ӝ]#EI^7lR/p<ȦQE펩A\DC_%gr 1ucSN$Ԝ=h7ۀGFo:HoeB# Y'M})rvx/y>{+.^ P` |J^rXR<!"tTF]kEI\[T!*y~˷o}/]qp9V/L|l@%X}gU. J__,_LI F3V-~j7|Ѐ!W{)I)V$ ƽyN=+kO~ ]L=,}Bx:p,"K]`}6ߢ!ӯfQ!R` gͺwFם\xO=>ޝu"Y K UoےDO0ѐZIerP<,'wV&颁 (͠gR~gfCɖχ;mqT^R#?)3)ÀWE'8liS ?a^}9 ;(|>@^CӰ;.RռF Ҟq®\..YKhLF ;]-aڒ/pmkd,~w/wh+9f/;XCwj~s!L1n1u2qA-2qSVsdKh8oSDY7U`_8/?K\X] mSiH*:ϱM?L j,.x)9f!2PDaO욅n01$E&T&%E4y%C2C N(UR4of#^ ל&]EP|0ٿx*lJ&?&ͼs{+7eֺ;,{Y hNp<#Ee-#~$^dXDP_paG3:mE8Lj&-D^+VٍeZah&zs3Cj3hAd|lL+7_r՛-*/3Mgswks'*Cލ{q v+ޭ+7nqY݈$c݈ѝsϛsݩamڮPڑ sF8x'`'_s}%͕@2Z \MlLo\&l'ʬA$7vx3XOhэV-bZ̪Dvԣ[qޤS}qY+ϬiGH>W$oSQ>e>A e[& PqwG_7EizU bA3VNiH* zYnl Rpܜëy,Ţ @Q0 ZTY\NLcT9kNx!ETB!mksƋq5Nqlמ ,;砚N[Wa_+'2IHOWݮU0RgCLҒPQ3rR F@|댎-{R~o vדڋ.D7nt|8k RNaKGrL&HQJ$>_։xoc~ħ-KQܼz%?=7a\!&ج4ܫ:;g3xUE`F*+?IU eݱv+02!޵B{eWO y~řz!jͦ2oQY7].TjiY}oSgFmo܍-Sېϵt, ]ΤzbbG~JwݨoX#L9f|ޮGdXk 1SS!0({6DB'g`3{}:P孈1#`d݂3aOu>]/j!n4΃ YkI\t]fCeiPJ1hgk-&kDy&)܆l64k^]B̰;U !~p0'ߠ(7c/ ˷~qaSz6&ڳC^%6e|hĺSeT=gaHG==y4oh"k׸z|>Os65N5Ý ;Q ]B/6 (J\Y[ߓ?{QD 0"9&p8C(\amGdxJm{uXdApzn4/wvp"N~L(.hKm!W.Q}ڵxYCIa-6YmU, *?J쓉9h֘ z:N@OG࿤PT8Pj65Mb_R|gܬa8ZG>~55Z3KfFf>U埜,VA¦JF`+8/iu4_8kgL!@No eG2Z-aS 9U@zbopAt%Y\v_U*3Q15B]WJj$/}BRBshVj5YԗP34۩X@HTėvQm$a7v=יn0Zn%?2O^ !/ 約rzYDKsL'qm|BfJ#\h2|٣"0Ze{/%Z]\ULaSL(%`vO-gS tc;Y_)K@uDMUOIl(W(l5JaDznWͳKIkF]Tɹx@SP<_ft]?JĐ"7RQT fEZg 5c:wn9ry=EPZ#D± ӂ\DSIFWcH0F$BHr^PCY7-; Z(Æ'<8wvك2 ).|xӁi[4*#y :T|kKI-߸AC|atÕ\wm'VC$ -ΆhˍRuXK2ԫ]頵ԩAq#.m| 1@:hȝ u {5%on6&6 `TgK2[4"/z0LZOT'°kUț JYmgX#mt-S9oC%_MYGN>ӚJR%9[ăA <^ŷ||LI1pHU XKj1煺gl!=ʱѣz<'U&?T|H?:Q*Ip mf; V;&PL*s@5ewabhe1)R=!zT;3 z]C}խ mXvfˌ2(mNe1MsinƷtIqbXugF~TXx2J2F7B+C<}W*ܥ@հ a>@t 'x#:˽=f0E֜ G_({mz{ʵB7ݸ5:;\uU"kX^X~ =kv]| t|zY߆ˆi9}G󽾴W7AoUj Ƃ._UdnGpSzd.Ueٞ޺iy, ) ĈWB껺{^j'n/I.*隖:XIzD;907`Sw# x @bW\x)'!Z0Iso ^̰}?MQlgNJ&v abF#B8ԡhs Fdt1jm@4Q PW]Nΰ|R0[el sj:a!yE3Y?|GU/~71&5%z5by,Yi”Vuv⠥.R5eP߉F*Ur U9k +JmOg īpzXb@BlC%}s)D 3/NRx2HqKZ*IT3dԝ$٧v@Cڱ X4K6~NLk u%M/)̗$]O6MCbm\[0ߕV[\(z ]tiO5+.UО%ӧ '"ZkrD1HO:*nٗH]mq^;(4Z*-vs@ i:}aD~$ |+PNj)}q#R.ϿB?I~(3L ɒ5ϵeutgW0qbHn ϰ~\"U;簩N"y2q|2v$I&ӏ.05X-ZhXʟ) {kQj\hݛ<.e1֧uKT_C(`2_ s!'n߀@ + UaPTpcj8SbљOBb ,ec v?MBƠH7~V9 IG~{%>UI k9mY>J3.'S8u r`CUB&N?] lk'JBͿoӿh^CGCCÐzq_ŠV4:'~s`%NOG6?=ioمv+kyO;{y:t Pv% d5H+^O ql}2mP);8I̺V2_Ԟ0k";?6!Y2󟳆m<[ 1)d'IV>3܂2Qpfy(0͵uK s~(C/_(b'KQ}X`FNlI8T)(A\SA|aEffDndJx}Jiwh\dQ2D緄Pc[ަPRpNvfEO\o+ SfE*37f6Kʑ@Xvț^4]3#oT2ELLӐ1h sO[T PmX`c;VEVztW{ 40]+žUlήvDc8Ĭa`ݜ9NݩnRtkdJZrmI,IB@azal65`G*4㕞oMW|&O ˜" YZ