libeXosip2-5.3.0-bp155.1.6 >  A dk?I%z W2+ a!COfɦIQ q_ YT1TZQڈ!{.#{ڼ ɵШsA2&S7qe>aU}0 ڞnF%,# +]DƑy۴Ua EPȾI}0<ĚtQ7Έ2̭ nxrRU&dHUyZ¨(BQ}vۥ5W/á^UY%3ʷRs3"Rk4Z}=H_ʴWjʑ 4LÞ(kRt }uIb@R3IVʾF`"32VyLfɡzyC Iԛlzw7~C/p=ҋM/'{]>,]LIx/n= mN9g=RuN'g`pB^4vO">t&.t^6IJ̍ 5w2ˆzfdA\19ba9c83f08426c5ba9546e70f6d29cf428ee8faef98ccf035acf589a85db9ac38f1cf83b90a7bd01e488c14c13d24691bb97072~dk?I%z t{ #S#OA1^O{l NEwĊb`m$D \5{X rC_Zon4#-gf}|`Gi5H(RvP3"k_6Q!$L.3얻~dSX)rQ=-`⇾C濨O:i&'8 wO>xш&WpQګFԄT }E3}[^8RMfнbᝠU_}CJ]A:Id#uPz<֌5]=ru 9>sbT"9(Gz(zJ)=vs`(iKS.3.q]/5_ ړ|3E7WflG. 2̾VC?ù&x݇- z%:cz"IO|r|iW}" 3v:ԉk#ne+NDbP}ޥ0̉/8ivEvvJ07!>p>@?@d   4`dtx $0 6 < H   +:`l   (8 9 : F;G;H;I;X;Y;\<]< ^<>bDavid Sugar hpj@urpla.netfisiu@opensuse.orgfisiu@opensuse.orgmeissner@suse.comjengelh@inai.deseife+obs@b1-systems.comhvogel@suse.dero@suse.de- update to 5.3.0: * rewrite socket error management in order to apply them to all pending ICT and NICT transactions * add time information in cb_xixt_kill_transaction callback for debugging * eXosip_lock will now include read on sockets * [TLS] allow to accept wildcard with a new bit in tls_verify_client_certificate * [TLS] disable loading OS certifiate with a new bit in tls_verify_client_certificate * [TLS] I beleive there is no reason to cut packet in 500 bytes chunks on ios * [EXOSIP_OPT_SET_CONTACT_DIALOG_EXTRA_PARAMS] new option to set Contact parameters in request/answers dialogs * [AMSIP_OPTION_SET_SIP_INSTANCE] allow any value inside +sip.instance instead of only urn:uuid * [epoll] fix eXosip_event_wait when using epoll implementation where events are distributed in the next eXosip_event_wait call - additional changes from 5.2.1: * [ENABLE_MAIN_SOCKET] fix epoll mechanism for server socket with TCP and TLS * [crash] check scheme upon processing 3xx * [ssl] fix to be compatible with libressl * [ssl] https://savannah.nongnu.org/patch/?10046 compatibility with openssl below 1.1.0 * fix when Content-Type indicates application/sdp, but there is no body * [TLS] modify the code for TLS validation in order to improve logs and details on the connection * use time_t instead of int for r_retry_after_delay variable [fix 1367a34ca commited on March 1st] * eXosip_default_action will return OSIP_RETRY_LIMIT when limit is reached * make sure to obey the Retry-After header from REGISTER reply * use newer osip_timersub MACRO * [bug#60024] fix openssl usage to always use callback mode for private key password, even when missing * eXosip_reset_transports was not effective any more since [5.1.2] [commit 705643fa 2020-07-07] [do not use unless you understand it] * [windows] a HANDLE is leaked when loading trusted certificates * dp layer: handle WSAEMSGSIZE when buffer is too short for complete incoming message * cleaner code to retreive an SDP from a SIP message * fix crash when ENABLE_MAIN_SOCKET is defined and epoll is used - additional changes from 5.2.0: * fix memory and socket leak [major] [affected TCP, TLS, UDP: since 5.1.2, need update asap] * fix to make sure a non yet established TLS descriptor with read descriptor set will be processed when no outgoing transaction is in a state to handle it [since 5.1.2] * fix SRV rotation for TLS [was rotating TCP records instead of TLS] [since 5.1.2] * fix duplicate packets for TCP and TLS when several outgoing NICT are happening at the same time [since 5.1.2] * add outbound proxy parameter in sip_monitor tool * ABI update: modification of "eXosip_tls_ctx_t" - additional changes from 5.1.3: * EXOSIP_OPT_FORCE_CONNECTIONREUSE; new option to force reusing established socket for ACK and dialog message * tls: fix building DH parameter with 5.1.2 and openssl < 1.1.0 - additional changes from 5.1.2: * tls: use RFC 5114 dh param with 2048 bits size. * tls: use 2048 bits for ephemeral RSA key genearation. * tls: use SSL_OP_NO_COMPRESSION to make sure it's disabled. * tls: use SSL_OP_NO_TICKET to disable ticket. * tls: use HIGH:!COMPLEMENTOFDEFAULT:!kRSA:!PSK:!SRP cipher list for higher security and less ciphers * fix possible race condition in sample code [sip_reg and sip_monitor] * new format style using clang-format. * reduce and rewrite logs for readability. * fix broken epoll implementation. (DO NOT USE 5.1.1 with epoll) * rewrite UDP/TCP/TLS (and DTLS untested) for both select and epoll mode. * Fix NAPTR/SRV on windows when CARES is not used. (not advised) * ACK sent out of transaction with no existing connection may be sent later. (TCP/TLS) * Upon TLS loss, try to use domain or NAPTR SNI when TLS connection is not initiated by an outgoing transaction. * sip_monitor: new tool to monitor sip service * add support for authentication using SHA-256 (openssl required) * only use first supported proposed authentication when same realm is used * fix: upon UDP errors, like ICMP buffer size may reach abnormal values (avoid useless reallocation) - additional changes from 5.1.1: * new API: int eXosip_hexa_generate_random(char *val, int val_size) int eXosip_byte_generate_random(char *val, int val_size) * provide more entropy with eXosip_byte_generate_random (with openssl when available). * fix TLS security issue reported by Alexander Traud regarding hostname validation when using NAPTR/SRV. * add support for epoll (detected by configured) // becomes the default on linux platforms with autotools * fix bug #56839: The cnonce should not be static -this is identified as replay attack by some services-. * fix tcp and tls connection failure detection (accelerate error detection and recovery) * fix: fixed a crash with DTLS - update soname to libeXosip2-15 - add source archive signature and author keyring - add new binaries sip_monitor and sip_storm- Update to 5.1.0 * critical security issues * See package, very many long neglected bug fixes * directly supports openssl 1.0.2-1.1.1 (and libressl) without patching - drop no longer needed openssl patch openssl110-fix.patch - now requires libosip2 >= 5.1.0 - now requires c-ares for proper resolver functionality - license was actually gpl-2.0-or-later, confirmed from sources and headers- apply openssl110-fix.patch for Leap >= 15.0 only- Update to 5.0.0: * major API update: add a new parameter to eXosip_call_build_prack in order to create the PRACK for this specific response and not for the latest. * major API update: removal of eX_refer.h API. REFER are now handled with subscriptions APIs. eXosip_refer_build_request removed eXosip_refer_send_request removed * major API update: subscription now handle both SUBSCRIBE and REFER with the same APIs: eXosip_subscription_build_initial_refer ADDED eXosip_subscribe_build_initial_request renamed eXosip_subscription_build_initial_subscribe eXosip_subscribe_send_initial_request renamed eXosip_subscription_send_initial_request eXosip_subscribe_build_refresh_request renamed eXosip_subscription_build_refresh_request eXosip_subscribe_send_refresh_request renamed eXosip_subscription_send_refresh_request eXosip_subscribe_remove renamed eXosip_subscription_remove EXOSIP_IN_SUBSCRIPTION_* and EXOSIP_SUBSCRIPTION_* events may now relate to REFER subscription. * major API change: eXosip_automatic_refresh is obsolete and has been removed. only use eXosip_automatic_action instead * API update: eXosip_options_send_request returns a positive transaction id (tid) on success. eXosip_publish returns a positive transaction id (tid) on success. note: eXosip_message_send_request was already returing the transaction id (tid) on success. * new API options: EXOSIP_OPT_REMOVE_PREROUTESET: to keep Route Set EXOSIP_OPT_SET_SIP_INSTANCE: define +sip.instance parameter in Contact headers EXOSIP_OPT_ENABLE_USE_EPHEMERAL_PORT: option to use/not use ephemeral port in Contact. EXOSIP_OPT_ENABLE_REUSE_TCP_PORT: option to reuse port. EXOSIP_OPT_AUTO_MASQUERADE_CONTACT: option to enable automatic masquerading for Contact headers. EXOSIP_OPT_UDP_LEARN_PORT: obsolete and will be removed in the future. EXOSIP_OPT_SET_DEFAULT_CONTACT_DISPLAYNAME: define a display name to be added in Contact headers * new API options: (high load traffic use-case: DO NOT USE FOR COMMON USAGE) EXOSIP_OPT_SET_MAX_MESSAGE_TO_READ: set the number of message to read at once for each network processing. EXOSIP_OPT_SET_MAX_READ_TIMEOUT: set the period in nano seconds during we read for sip message. EXOSIP_OPT_GET_STATISTICS: retreive numerous statistics. * rewrite/update autotools and ./configure options - -enable-pthread=[autodetect|force] autodetect POSIX threads or force -DHAVE_PTHREAD [default=autodetect] - -enable-semaphore=[autodetect|semaphore|sysv] select your prefered semaphore [default=autodetect]. * fix bug when reading sip message longuer than 8000 over UDP and TLS. * improve eXosip_add_authentication_info to avoid duplicate credentials * if a SUBSCRIBE is rejected, the context will be released automatically * add failover after a DNS failure. * fallback to SRV even if we receive a NOTFOUND reply for NAPTR. * fix route set with strict router. * rename usage of -DHAVE_CARES_H into -DHAVE_ARES_H real name of header. * remove warnings mainly related to socket API (getnameinfo/bind/accept/recv/connect/sendto) * rewrite all loop using iterator to improve performance (useful for high load traffic) * rewrite Via and Contact management: both will now contains the IP of the real network interface instead of the default one. * improve NAPTR failover, more reliable // add failover for 503 answer * improve interval to force REGISTER refresh upon network error and failover. * improve TCP socket management * add a callback to simplify/optimize/accelerate usage of wakelocks in android application using exosip2. * improve TLS, add TLSv1.1, TLSv1.2, disable weak cipher (FREAK) and enable ECDHE cipher. * add support for SNI tls extension (openssl 1.0.2) * add try/except on windows to catch possible missing qwave (windows server) * implement a timeout (32 seconds) for establishing a TCP and TLS connection. * if a connection is failing, report the failure asap. * fix memory leak in eXosip_call_get_referto * remove extra connect on socket for TCP and TLS (not allowed for tcp stream) * fix to correctly discard INVITE retransmission with same branch received after original INVITE was replied * add WSACleanup for each WSAStartup call (windows) * do not include contact in BYE and CANCEL * fix to use sips when appropriate (in Contact) * fix to avoid handling negative content-length * do not start naptr for incoming transactions. * fix bug when rseq is empty but exist * add support for QOS on windows. * improve connection handling/failure detection, keep alive options, in TLS, TCP, UDP. * update static IDs (cid/did/rid/pid) to use range from 0 to INT_MAX to avoid possible collision * other minor updates. - Drop libeXosip2-sslverifypaths.patch: fixed upstream. - Add openssl110-fix.patch: fix build with openssl 1.1.0.- Update to 4.1.0: * improve timer and use UPDATE if advertised, INVITE otherwise. * improve PRACK support. * option to disable automatic BYE answer. * option to enable/disable IPv6 per eXosip_t instance. * option to disable DNS cache. * improve network support for several eXosip_t instance. keepalive setting is per instance. ipv4/ipv6 setting is per instance. improve network setting to avoid conflict upon transport change. * fix tcp and tls connect() for slow connection. * use TCP_NODELAY on more platform. * use Authorization header for 401 // simplify authentication code. * minor expires for REGISTER improvments. * copy call-info over SUBSCRIBE refresh. * allow more TLS error if verification is disabled. * fix if NO NAPTR is availble. * add support for Windows Phone 8. * fix to use cache for TCP and TLS. * fix possible leaks on implementation errors. * add TSC experimental support. - eXosip2 (4.0.0) * modify configuration APIs to use eXosip_set_option * fix bug: do not create new PRACK if it already exist for an answer. * update to latest osip // test time compensation for android. * use ephemaral port in standard TCP and TLS version. * return tid number so that we can match the response event. * use system independant time for osip_gettimeofday on unix platform. * major API update: several "struct eXosip_t" can be handled at the same time. This can be used to have several transport layer running at the same time. * many tiny other change. - Rebase libeXosip2-sslverifypaths.patch.- libeXosip2-sslverifypaths.patch: set default SSL verify locations (bnc#871099) - build with -O2 (--disable-debug)- Remove redundant tags/sections from specfile- update to version 3.5.0 * a lot of minor change/fix/improvments, sorry for not being able to have an history here... - eXosip2 (3.4.0) * handle keep alive for TCP/TLS. * fix when receiving additionnal CRLF on reliable transport. * modification to allow non-blocking socket for reliable transport. (TLS/TCP) * fix tag issue with application where tag is missing. * fix Contact header in request within dialog for non-udp protocol. * remove 481 auto answer for unsolicited NOTIFY. * fix static id range. * initial code for TCP fragmentation. * osip_list prototypes and warnings fix * fix transport matching for redirection using other transport than udp - eXosip2 (3.3.0) * Fix when 200ok include a contact with an empty line parameter. * Fix for replaces header longuer than 256 char. * Fix SRV record with more than 10 answers. * Sort SRV record. * Option to disable NAPTR requests. - eXosip2 (3.2.0) * Improve TLS support and add an API for ssl information & files. * return new error code for all API. * remove automatic answers to PRACK. (must be done in application now) * remove automatically outgoing non established susbscriptions. - packaging stuff: * fix spelling errors in descriptions, other rpmlint warnings * rename libeXosip2-4 to libeXosip2-6 (changed SONAME)- update to version 3.1.0 * add AKA authentication * improve compliance & flexibility * fix building SUBSCRIBE refresh * fix compliance issue with refer-to to-tag/from-tag parameters. * fix bug for retransmissions or ACK with proxy that resolve to several IP. * handle the "expires" parameter to update registration interval. * handle the "expires" parameter to update publication interval. * handle automatically publish refresh, and some error codes (423).- fix build with current libosip2 (MD5... -> osip_MD5...)obs-power9-13 16847502575.3.0-bp155.1.65.3.0-bp155.1.6sip_monitorsip_regsip_storm/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP5/standard/efffe8d914ca8c9f85449d68da892f64-libeXosip2cpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=3a1018049976815d55c5e301fe748a8b8af7c37c, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=d5f7e96f505bfc99cdeb1cc3f9df81b3e6714994, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=5be93a4af422a740c689a2a97e95c48fa860b295, for GNU/Linux 3.10.0, stripped RRRRRRRRRRRRRRRRRn҅aiutf-8bdcbf86e378c5094db6500f49940624e9f24b77e4b4a37b1bd8c2a22355c0499? 7zXZ !t/!9Y] crv9wC9ALson4AQo.rwUar FGV(PV6PAhs%qъbZ<~հtԸ xUX~1t p C J}棱W#,iJ H:O^75f((1m å}4Ɖ;7Ff;ZDk c8/u`3hÛ *PG3Iaq ؍f Y`N. _tE0XCE|j dL2®jknKB19iy3{DNĢF^6ZdH_=~dD# bRۋ08JfW+ȑŶ]va8[hΉ;{]Cw yjkQcCi7'{4PJs%η 1TIˆ5:Ўcܧ},όS.FO \ I'>D,/XqĵO{Og\mS*<=Es8)xg,;5#{ a]b)Cs;ϪK^(?:.q_/6p"LϏPj|((HVBzws^5 kͭւ—J|R|ş_!aEx ~pB*xi$Y|JOS"/4 I׾!p)a$uWƤsNFZm-|RriJmkū#GU"pB9,4_t`b]꧕7ip3ߺYs8/wN -bg2n},:h;z<$+_~i03T/6V^ҿ0ms; ۉ9Z7HW1;'NҮtZOIzwKD%#Ԟ0SxqE-H3gXŷWW"I!Mn"-+J5)gïO=ea@ 선"MYޮe3td«o\/ 9齬> }!u:k$OM@hn|)bkHS>{uչ?Tm;6u]J(Η z z x* Z8zi,FS>6T/*zu^ Xcza><*13^T!EZ_'-$/ NlF=#;יFj(}lvtpu(P Q伪h,z[fc`Hn4iI4cjam"o=`ƣz*A`8Kª.Y c 8!Y/H; Tdw=E.pNӼzOFNKB#D7ZE=p3@,|>J-ynfoY ϗk+kI3uIN 'SĔ V~lT fM,LQ[@mZE"iBQpjbS6'Ck§ H|\#=/F _7;N%jJp~qRa((z!'iaAubMVؿkȏlXM|@` Wtłp; qK¬{ r3G~s4N-|x9fb>ShɊZR/&z6<@5KH'3ҵ"{qmqX;4b_GY[IH:1ؖ{=R?_>#c]d$.Qk|.oC,bOH/myV58:.0SZ E'1A) /`<ߡW޺{Qw4u| c",EeZుU0Ao'({ʃ{jm+(;:9} ;jP5 B<6+:k9FWY4M&| ?^>w+ͻ7&:XI| M[EDU "`,'7(H18պH x+9 jw3[YjTn]r,h䙐x *e2y@ag#2˯$3lل7|\0W,]t^쳧W)I9pwdG?BѼ^ yMwffst֓3U/xka?8UI[ 폤7d=Z LwS7Sa^tɝ d5V[g޽% Po OvREkyqUjVAjKoTVm\Í?tLBѼFHUa$kyT26#"uⷻɡQMkJ$L_re.Q1F N=deaxH[bV|OŋʐK\)d Yըl:X DRt[TEN I_}`i@rU^?%&]qaQKPZBiٻdv$JeyZ%GxxV3 yE:ND75HF1nbijkԩcK(ƧƌR2cPo'椒EwnL,>E/~斕~Sc i%8fG~8pFP)F;ْmJmWH'݊8@Lp,ܲ}.Kj(eQ TJ8LY[LюF@60u.& kL _V"i<Ǔ"C"ưKLnE3mR p͇ڰ4?%6%`Hy2K`j] "nrA\JgC 4bhj I:d3?rV`E/)7ؙnc+*~OqODqi12 0v$<%ʦWc B`! }k'm0Ż(T9=  ɣix!(;vb]صgTg#b-.E7M~gr0~{+7&MŭaJ6_9:A_"n_(X\1hi=^.᪥]L!Gh\LjKw33cxڷ*ckĨ̾5P5_)|ye^;3aɹ ~)["H)LJw1 _[CR i7[,PDr۟#D#v9$͙%4}k2HKUj+j»`AUXe2,:ЩDFN2Ӛ%Ad ]y86$^ {a(m_X8= Y*?6KEq GFn;ȟS QX-uS`Rզm8zphW@3XVi*]P?k/Bs4a8dn)\5Y@$c'b>Ȓڅ[X%gK@z1e'(9ۏ44l0Yyø-&0<VL s,ˍe!kףrW"mՋ"npzuMjAW/ mkU7ea_7N%I\J - $~0dm c5Լn(p|1??DLv|nͽ]ߺ6~BLK )YܚFYC-&]8>Q={8཯1ܱf(m@8Tɺ - F =@Hs̶bFc1q"*fX|.o BSH_0rn PvQ5Ec}A!l2Xc9nrbfuި nRRVJr`{%*S6SPj7V)>B.}tLqkBRP.h^qlbe[~V" bK]q.ڐ?ETd4_ꨲ>+A9B9 xWޚHzgs p;IA }szX 'j-fIS0gcR%vAaVۇxudY!KO0)ꁿUY\ QB՘Ub㡥N ]BYH1_dg̫t]1>@GԎ7oo_6ppX% *'R[$+J壱ۆ Ew\:@7G|n">Re#mSQ?pC5"OI;8S;Kw?1! (;kEHg"LJbI³NAѕw檆xT5%:S(*yA|FHq(Fv1.*}|n|?$:bކD/-#jbJN$27 IyWأ/3x6#Ph=5tkF@8I90dq[Č) 80éov/h>d|f֦@;Tƨ(;+SJp/9=ʄra[X=: +l4:xyQϽb)=y!xvhr^b%Ò*tb\N g7 mkf$D፸KUv rqFh!1ѝ/ M2z>{2"Uk 8^%$fA@4bP;9^ZUQQ S&y,dpxTk|,*u9 "k'¿PDH !Y,PmpS ́r)EUt!q[ZSYOUY";5ovX:$yaUO57 y \0 KkTK֝?y6@ؘ;tj .uOYsоڈ?ĝ_K :a~嶭B eVz<n'+2w ?(: K,-y1 pӅ8VlZF-y]$AiQ' 8UĪI1bbIO:,7D JzGa4y?z0Rh0?!{@W۔IfAyg`/> DJk=~W&3*VMI u[7!dsH%ih IJ٣Tts35sq[Q,2QS.?KT]З> 3x o &PM'͗]| V^G踘o9YyCg1Ѻ\ۊ۲ss!#M Y +or|ruc5SXd0/]k7$]6+TGiK )m~uS7VGd]hȅ}<y-V8˖{E(!qHަw5}Kqw0o8Rwv:sc 75Ntr4aX_RR,u&=moРh$P] ;`RGٓ<&ҟtH?I1[ŧ@p7M5Yd~}Pasodӻn1],g />\<&k\4ߪe;_%A$9hJŧZqҋd[oWň X]|ݵm 뷣)b$ .W̏%ƫnWĬTp0_`zR 5s?%Jt^E#6tX-=KcD V`-J!yOf>b!ްM @@JEk/&tkʼ M n*Vg<fkp@]"W~Ct/S:֝Sg57c -i `L҅*\Up6C Yc7z|w+Fotb-Dqt1b$#78H0ccw4Xy>khbM+H\X3-I7}Ylnoԙu+gkjX*p[5m>: W'i|NN#,^B0_ó+]% Iϓ[X;jj|a_GC JDjbȱIHߑ. w/ęVd+\:h3OLR|, s;X_ZCy#{P) X&_V2/Ft)8bD$Qi-UKyl$1`+*v(3!5vo6kA/W7;CV 2^ NOj抇e;ܴ}l$/< hEVms% `d7 MDgXuK!($Dֲ9 S-q_ X-`sveOEr *FD76}/0u}Wh=%suAFFvsCRwvY90 9"Ox1 =/Z <E*pr%--( lLDHW Alp!%9'Cl|K_ Og 9Tp>wBT+rt=tx$(X_k0w]G=VBI+GnLM?vd_gw(wKjijO"yok\M|Oꎢ' .bJP]ђf _. )S0[uɄVS TvE[l{.^==[Ɵ|Rxy"#|??vB*_v~\HL?ܘ&|!n(̲FD0p=K6)ܧQ:F/Q8S$pvfMl`էF\*wc(5X‘L26 Z!v-oohE D\bi͜( JvcҊ+s5Jn2g Q2CbX!hIV"'jfdD$ʨ`Zc)2c hBWSo(Gxb 5`䮯$r5+/hlm|$;ﳖm-S v5f֛J(Ler߮zΰ8@޷kZR[ED`-]j 9O7޴'V~o'1m3UFe Fl!^i˹~pe+ӑp?E`RÈQMF0)v.VҊO@Ҝ{9^0ÏE_Mp3F ~<ĵ9!uv#kI1A0\,LJ 2F<8A~+Q28ח \2|:X7گS-C呫vʡajCwZ+]/Ϲ {Lk~c|ьBX䛤w|@_m$2g_1N,Kɝe]4.׌hQr6W^ xvqh A1;.{C.=}ּy][ еNz~ډvAaj`)l *g/ Y%4t۫iGH:cDzhɧKF(uq!ȇuXR00ĮY1/M$k)֋$aC]8gXƠKc[Z3d I$3M9c1y1|ay9* Qwށ HAԒOsNO(ոj-+wq7w9FXǛaU 'F%2V;4`Cۺ%`5=6R T 04x*U:iZP\Ӆ|:ˠU)$NiӥQ\CΝoQ3jt.H8Lm3y 1t(zl<1/Ѓ`% geq1ЈLU&muhyZ B=zC$^0"BFYʴN혁 :b o_jH< Spԉh43t~ FoGjAȅL|Nynq`+8tze CN0 !Nc" rOrenܥrI~sɘb#R-4\3V匛}478=$/9w͔͞ƍUCgV*?&]bn'\=pow"ifG;X_Ǎ?͍lO-aU-DC]FXQ xu݂-ުe&_E]ڂ}, Uv|Y8)ΎH 2={Ơ4w (8.a26,bm,_qQ1!>$G*4|Ӄ5―^Lt$'q F%%k#g.T®XdSrg vRp6))FE(8Н`{/\|εn"*!4T <>O_נQ; ~vH2VYLK(in,2B nDX.jA0@>=ЋzI`b?&W=jÆj*bP t <|l >Iߐ_{ODK󉪄s9=? UzU =>#zyLo=3zLT-|/iJ2LWSA~]XT"8:' t>-h+j;KX= #+քv_UCw{zUޣ/] Z=d nj9eT d&€)o-  Cu{uߑ!~å%l."Lyy,PڥP@HX ;#0 U8GK٠]( bvIoNOb:*WVur;SKW9tKDݩ1EuONAxA†MW*+JQC3f$Jʋc= 5W߯]_EJe\Hvc@̰gJ7%ywv.(BѰfէ2DUTl ~'OIċ/4:X#_P/ixUWfߜzd:%llt; =$SK#Ho:ڴ\ˀc13qbjp|堍9QCJ~Zӄen@"ps^{VdX=+ŁEԜ/[LxAln!Hٯ"#2N4qu)ȠƿwFQ\sЀ1=٨Cnsب?x\.'Z6 Pd Q RCK^MBD5[Tm C+`IKdb{ж 5e dJwk'P ϖA|6KW]vd>$!qph tݗ>s#ų7%NBK5`"Љ5"fj*-R,xeM sLd a*v B5v+mQꊦ$MZ_rPS\$!xD]bߍY󙊇[ C(Ԫ{hm,%m< wZmi 5S75MϣzVsx׆'lԂ?9F^]LN=(*KWY]G җ4 "N-uܾ}jb'`md 嬑p@qNt(<@sf>Y>ȿs]/gE}`RTddgvMKO<_st 0]E~sw Q[pwϵ ci)$X^:o3vMe^;#B0ycl>UcxDbq A%kx!'t ${D#P#Ppޙ㵡.n,Q+<2_#2S6`9\a 0،ݥ^3|Se&P]q{]d%12Nv!;Y m/+dL :CI%][C͞;[E uI֐ޫd[= a҃׿vn)_Zbj[>97V|p͡ˏOC d^9\w]5&cC{@\ŕPW a=_@)8/'X-BCO:]Y"glM /\=[wN-"/*n'jNpXFP׮J,6oGYPMWqV429)u9j{;uj.0"6NI-OI2=G_Q[|ʷ +*|E=߃q(>% cKq]us.Ic"K;x[#&9flG]*P rZ6 >j;xj#g]?-n8Bj{B+7G!XXUWG$$̏ $pĨdZg@@{0]`u@?|ٌ:TVݵCrH>$ e`CVNRX.M~1_IMKWpANԷD"G(dEd8f`92DiGՆyኍ8ypPڈϿYx}r.)qx@黜? }C+O״38QTJui%IUc|83{S߷̵fF-TOQ 3] Ij'6.L# d![3jFt>n#0̖e@I# IW zZQ/&y;]&YZnxB_(!SZIԝr )iiI%2G8rR4LE80vհ鼕ڰ1厨1ŃsBOq: -|(3&@55 oG3\x~mCH԰L1mNfd"Q@Js*l}" 8)_zR^u\z+N/&| l L:f?jh]F7gh@7Á7P6Qo\ ̸"e\D/*RG+\Rvi @OdvL*m={|!U,4zIr>lI+y/g $c5kP$`15D4^R ,+s?ڣzu'"?/J8 !ƷFG#wa_lf6iʒ)mգtSޙ||ctC@p^Z EY1z}xD436F4lޞ9JOGI#OGEƜE)oKw7hB^º+|L]J¬dq]nd x4g4.(yi>9ErtUQ=ȔtιG7hBۮȓAFrߥ[Qn^tW+Pq@ouN;EKDs~P.XCE O>f-'Vwso