proftpd-radius-1.3.7e-bp153.2.3.1 4>$  Apb!M@eeeZ@Df]c,㉾ /ݙq~k*&!(4%PVy`tlRjbطO0;_*o)Wߔk pÂ3ҤP{NO6Ak vSH@fdX- ,f Abg:P4T|!C,uQ. ̕+oÉаFv0Ve_}("Xrhk" d V(WmR @+1b2c17cabd1f33f16dc5b4b7fd61ec712b3fdf1b27130ea4aa763502cfb204b546f25eb9b9086eeb0edc538e65d6d35c5681d947xb!M@eee)S;^(r-,/?Wƞm^{rC&%l-[T Kpb{ 325[^6Q~$NpǜlXu;<aG `2BVc=tOiN٪V~%ŕ{Htnr.x腌 G; "PLu"Y~։h\Wy0%)j~=z%.;ޤ#NPhuӐb%AS>p>1 ?1d $ >dhpt      Y \`ej   (B8L9:F.G.(H.,I.0X.4Y.<\.d].h^.vb.c/0d/e/f/l/u/v/w0x0y0z00001 Cproftpd-radius1.3.7ebp153.2.3.1Radius Module for ProFTPDThis is the Radius Module for ProFTPDblamb67SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/Ftp/Servershttp://www.proftpd.org/linuxx86_64b0c8c810247d9f709d00c64d9f3480f7024642a8e162e0ebbaed0b22701f38910rootrootproftpd-1.3.7e-bp153.2.3.1.src.rpmproftpd-radiusproftpd-radius(x86-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)proftpdrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.3.7e3.0.4-14.6.0-14.0-15.2-14.14.3bL@b@Qb?@b ap_^@^3^S^5h@^C]@]o]@]D%]\@\+@[E@[DYqYC@X@XӸXO@XX~@X{d@WW/*@W/*@Ujchris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.deJohannes Segitz Dominique Leuenberger chris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.deMartin Hauke Bernhard Wiedemann chris@computersalat.dechris@computersalat.deJan Engelhardt Jan Engelhardt chris@computersalat.dechris@computersalat.debwiedemann@suse.comnmoudra@suse.comchris@computersalat.dejengelh@inai.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dejengelh@inai.dechris@computersalat.dechris@computersalat.de- 1.3.7e - Released 23-Jul-2022 * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x. - 1.3.7d - Released 23-Apr-2022 * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3). * Issue 1325 - NLST does not behave consistently for relative paths. * Issue 1346 - Implement AllowForeignAddress class matching for passive data transfers. * Bug 4467 - DeleteAbortedStores removes successfully transferred files unexpectedly. * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not SOL_SOCKET. * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as data connection. * Issue 1396 - ProFTPD always uses the same PassivePorts port for first transfer. * Issue 1369 - Name-based virtual hosts not working as expected after upgrade from 1.3.7a to 1.3.7b. - rebase proftpd-no_BuildDate.patch- fix deps for SLES- remove configure --disable-static- Update to version 1.3.7c: * http://proftpd.org/docs/NEWS-1.3.7c * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c - Update patches * harden_proftpd.service.patch * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch * proftpd.spec * proftpd_env-script-interpreter.patch- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_proftpd.service.patch Modified: * proftpd.service- Update to version 1.3.6e: + Invalid SCP command leads to null pointer dereference. - Do not limit to openSSL < 1.1: proftpd has had support for openSSL 1.1 sice version 1.3.6a. - Rebase proftpd-no_BuildDate.patch.- update to 1.3.6d * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration variables when the environment variable is not present. * Issue 940 - Second LIST of the same symlink shows different results. * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly. * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is requested. * Bug 4398 - Handle zero-length SFTP WRITE requests without error. * Issue 1018 - PidFile should not be world-writable. * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on some systems. * Issue 1023 - Lowercased FTP commands not properly identified. - rebase proftpd-no_BuildDate.patch- fix for boo#1164572 (CVE-2020-9272, gh#902) - fix for boo#1164574 (CVE-2020-9273, gh#903) - update to 1.3.6c * Fixed regression in directory listing latency (Issue #863). * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for converting them to supported format. * Fixed use-after-free vulnerability during data transfers (Issue #903). * Fixed out-of-bounds read in mod_cap by updating the bundled libcap (Issue #902). - remove obsolete proftpd-tls-crls-issue859.patch - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch * proftpd_env-script-interpreter.patch- cleanup tls.template * remove deprecated NoCertRequest from TLSOptions- fix changes file * add missing info about boo#1155834 * add missing info about boo#1154600 - fix for boo#1156210 * GeoIP has been discontinued by Maxmind * remove module build for geoip see https://support.maxmind.com/geolite-legacy-discontinuation-notice/ - fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270) * add upstream patch proftpd-tls-crls-issue859.patch- fix for boo#1154600 (CVE-2019-18217, gh#846) - update to 1.3.6b * Fixed pre-authentication remote denial-of-service issue (Issue #846). * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824). - update to 1.3.6a * Fixed symlink navigation (Bug#4332). * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674). * Fixed SITE COPY honoring of restrictions (Bug#4372). * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656). * Fixed restarts when using mod_facl as a static module - remove obsolete proftpd-CVE-2019-12815.patch * included in 1.3.6a (Bug#4372) - add proftpd_env-script-interpreter.patch * RPMLINT fix for env-script-interpreter (Badness: 9)- fix for boo#1155834 * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)- fix for boo#1142281 (CVE-2019-12815, bpo#4372) arbitrary file copy in mod_copy allows for remote code execution and information disclosure without authentication - add patch * proftpd-CVE-2019-12815.patch taken from: - http://bugs.proftpd.org/show_bug.cgi?id=4372 - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3- update changes file * add missing info about bugzilla 1113041- Fix the Factory build: select the appropriate OpenSSL version to build with. (fix for boo#1113041)- Reduce hard dependency on systemd to only that which is necessary for building and installation. - Modernize RPM macro use (%make_install, %tmpfiles_create). - Strip emphasis from description and trim other platform mentions.- update to 1.3.6 * Support for using Redis for caching, logging; see the doc/howto/Redis.html documentation. * Fixed mod_sql_postgres SSL support (Issue #415). * Support building against LibreSSL instead of OpenSSL (Issue #361). * Better support on AIX for login restraictions (Bug #4285). * TimeoutLogin (and other timeouts) were not working properly for SFTP connections (Bug#4299). * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes the child processes to be terminated as well (Issue #461). * RPM .spec file naming changed to conform to Fedora guidelines. * Fix for "AllowChrootSymlinks off" checking each component for symlinks (CVE-2017-7418). - New Modules: * mod_redis, mod_tls_redis, mod_wrap2_redis With Redis now supported as a caching mechanism, similar to Memcache, there are now Redis-using modules: mod_redis (for configuring the Redis connection information), mod_tls_redis (for caching SSL sessions and OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored in Redis). - Changed Modules: * mod_ban The mod_ban module's BanCache directive can now use Redis-based caching; see doc/contrib/mod_ban.html#BanCache. - New Configuration Directives * SQLPasswordArgon2, SQLPasswordScrypt The key lengths for Argon2 and Scrypt-based passwords are now configurable via these new directives; previously, the key length had been hardcoded to be 32 bytes, which is not interoperable with all other implementations (Issue #454). - Changed Configuration Directives * AllowChrootSymlinks When "AllowChrootSymlinks off" was used, only the last portion of the DefaultRoot path would be checked to see if it was a symlink. Now, each component of the DefaultRoot path will be checked to see if it is a symlink when "AllowChrootSymlinks off" is used. * Include The Include directive can now be used within a section, e.g.: Include /path/to/allowed.txt DenyAll - API Changes * A new JSON API has been added, for use by third-party modules. - remove obsolete proftpd_include-in-limit-section.patch - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch- update to 1.3.5e * Fixed SFTP issue with umac-64@openssh.com digest/MAC. * Fixed regression with mod_sftp rekeying. * Backported fix for "AllowChrootSymlinks off" checking each component for symlinks (CVE-2017-7418). - remove obsolete patch * proftpd-AllowChrootSymlinks.patch (now included) - rebase patches * proftpd-dist.patch * proftpd-no_BuildDate.patch * proftpd_include-in-limit-section.patch- Sort SHARED_MODS list to fix build compare (boo#1041090)- Removed xinetd service- fix for boo#1032443 (CVE-2017-7418) * AllowChrootSymlinks not enforced by replacing a path component with a symbolic link * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed) as proftpd-AllowChrootSymlinks.patch - fix proftpd-tls.template * reduce TLS protocols to TLSv1.1 and TLSv1.2 * disable TLSCACertificateFile * add TLSCertificateChainFile- Remove --with-pic, there are no static libs. - Replace %__-type macro indirections. - Replace old $RPM shell vars by macros.- fix and update proftpd-basic.conf.patch - add some sample config and templates for tls * proftpd-tls.template * proftpd-limit.conf * proftpd-ssl.README- backport upstream feature * include-in-limit-section (gh#410) * add proftpd_include-in-limit-section.patch- update to 1.3.5d * gh#4283 - All FTP logins treated as anonymous logins again. This is a regression of gh#3307.- update to 1.3.5c * SSH rekey during authentication can cause issues with clients. * Recursive SCP uploads of multiple directories not handled properly. * LIST returns different results for file, depending on path syntax. * "AuthAliasOnly on" in server config breaks anonymous logins. * CapabilitiesEngine directive not honored for / sections. * Support OpenSSL 1.1.x API. * Memory leak when mod_facl is used. -rebase proftpd-no_BuildDate.patch- fix systemd vs SysVinit- Remove redundant spec sections - Ensure systemd-tmpfiles is called for the provied config file- fix for boo#970890 (CVE-2016-3125) - update to 1.3.5b: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b * SSH RSA hostkeys smaller than 2048 bits now work properly. * MLSD response lines are now properly CRLF terminated. * Fixed selection of DH groups from TLSDHParamFile. - rebase proftpd-no_BuildDate.patch- fix for boo#927290 (CVE-2015-3306) - update to 1.3.5a: See http://www.proftpd.org/docs/NEWS-1.3.5a - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch - remove gpg-offline dependency - fix permissions on passwd file * unable to use world-readable AuthUserFile '.../passwd' (perms 0644): * 0644 -> 0440lamb67 16603237891.3.7e-bp153.2.3.11.3.7e-bp153.2.3.1mod_radius.so/usr/lib64/proftpd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17605/openSUSE_Backports_SLE-15-SP3_Update/68ca15df4417cfc6624b4e70b17d3622-proftpd.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0cec55ad68f72c5b8082dd2542e6ec6dea7083b, not strippedRRRRRRR.֡:nAzutf-8b6a92fcc4399ce76b584e576300ab833d62eeecbef517b2fd53dfe58fbcf64c2? 7zXZ !t/T] crv9wPJR@%C:@λDC%-s `)$cȎWZ1=7 t%V/Ï3 ^1`LH\yj/D(hr72J.,;Yc8sFLI ^?~-!zn˝}|E!Y# }WBNЪma9/Cc6+֚WR 'IC2#"Gs {~QWuTܽpuZb4\yNpb-iVK[}w`xFpIgJX~RglM{ }Fx}h%7%C7(ⴥz 5{\ `n ajWw6hD&P)}.^|نŲ\aGB5{>C,&`.Nu V>p[ˈ=Gy:$p癿\Qv]MR/ʚ|G<۶ ێcju@3fm_AswDZ4_#%&`H"v_$^uʼnǦ#fFJr&0Eв9()iɺ_y<}jBUuwbV0yootqWM?R78I|RuKWn,J l& qD`7}iw=\C3ű뽆bw [jZF 2z.pђݵ8Q)6zALJX/B~Gni Y|;v>.Y-zǗftmϲfC^|v1G}C˓T^A_48hPuľ&5<I]YLJ#8&o`UԺ<_L-mCNsX.'[4B`E6)9> j'fV ϹiGv3~<)뷔5-g]')ٴkJzƖp]gU9ZBZ CCq=j`,SzU@3tWfn\}V4j3y8tC%_lH iƻ ,I-$_aV[v+}y|[Hc 3j$SwRK&!z+?FWU_ av# pXmtNtP`•D9Cw jw8I ?d&M~VZ*yxa[= =J -/Sy[e M^FO]kܞh3rNX|O4uF,6^;MњZt>Ŀߊ3>3Rg95AfDSz~xZ*d*VcBVU!Ŗ쫒BA3 xGHa ٨=^ 8!m8E?2Rñ4qjP0F4"~ZlN‹c.q]2CO?6f2);䓅TK58"$Uuf13$ Nr\O!#0\M-i7a.q̬+ј9$}ZbAoT> e. w Sl@-P~'BPNruVԙ ,VO`Dk4䮙v6̹=)x,lmO}MO@20W݀;͕GĭRyeV |y׀Uk}uGrCjnj&VujЮVUҪQ(TR OYKԚT3k7C,{4iVDdpUǟɯ_#U8(6~䲽%/kMҝ[_Q#_5 kd\#_Cz85Gy F[M㚝P4`ԭt)CvS3nc"|?v&0fr.6ۭ8}ՁR߄S諆fsŠ"e7֘//X,zsA)'zuVPE%;LjvY"SiXPۼ9,V~Q!5DPfJN^e++nF,|nͿi:_j֐;lHPEFWtETU8_W yD|di{,z/ߑ dewT`FhiOW hWqq^@^Tͣ8.x_ƊI5|V|_?x˂1gtuBL],d:2sU{b[.AK3ߦ0 @Br@=G#!Ҟr/E@|gg(\q*ɴB!C0u4$Kr ݤJ4x"-NTHpsv!Tod(ve΢|m!?ojCѐ}ӛRh@C^^Atd^ A*_HCI|͘)cϷy Û[㥍D%! ~X5<g#|u~7Xu 7[L{^dcG_Yx{D 9fbuaQ/O]:?Ma+2NeBɗ3|Y֐ZqfZngL%3CHdye2Uxq۾?0Z۷HOn?}ލ > oNS8i5+FUBd` .[.@K^\˔okNo/װ_X ;kAi$qrhpBcRmzbQ~.}y>[=X.om+i0^|k0>C@|tG+̰=[2_720.\27/JrFERTXŔBa-rTmzz$xfQY _Q#38ht$F7Y2x3.CŢ83d"Y܇ aˉrUtK*SKs=7h+G[!+u:\Gdh6mq$QJ-Lfy32!GB*/":rg k(%zf"#k/wQpdPi*)ﯻ[7wa+2jU6ʢ|>doqa J`9l 4 gF͚bLCU )T`fz@]C\NA;.Ft1+`V7inxaAƹh(yVȏ%Ogl)?5?<#ڔ|8]X"yBegȴڳ %C3sĨiiBg!"<`N@g뮿rQHwtD~C5>J&щٽ[A]P;RL82/T犩6` "faȈ#ժQAAԨ>ogHO[sB4سf1c`44"^iPyե05\Ü}) 笃KXzvVm,X\[$֮b=H*!*j1ᘛj_qCBgҍGe9#'}B2Ƨ _E7GYXMV<[ӭ׏>h/ɛieXB͉GUd%`E jpݜ< @Q9Oe&OԌGE/eMnp6">!wG@I/Ŝ=ƿ!_({b ÜSeCd w!TwYh^j`[[DY Xr| WH+ |50+ Nt,:rk0єĿY{{ϭ́N8iz3DZ)USyvPP`⁼iF2<c:utt$ԱcmSjfMr~4Pˣw~TDbN[< }vh6X}%#`;f! R"] FlEUV\ݳΕJLV"JQU%HݕC@Rn..:Y+*5]Ͻ"d'ۣnGo&$I&VRĂ%)"nς״@C'X[è.?EUC)aVBXTMr [yHCNJy(nɸȐNӏ} T3}5Pxb9|O{{M}Y,e\B\R!)CLȪܠ^S:3rjtDeP`:<צƭ0҂(NJ vz ݙCljPYaAZrn']OA4D&͘bQ8xw)a:o78\]z,/&=n*fwa,NC#kE#ߖUV\~=qXUsH@ ¢Rqeqbnh+"%hnjwѺ ]0Rux?y$eyvmsj|˛SDe_ )NRcmP\EpVsDן}:fgsd"1mA2Kꩢ6cѻ+&*çĠϪ9c}'ܻ%5i'SbYAuҾvŹ^"X,ru_k[HٰͪDZg-Υ$YlaBLi3 eޝlO ^}jRSFM.@k]2hASusA/x,ty:V*ل\'簱c6_&가j6Ή74V {#QJi%ۂhn :ѤfCK1ߞ(%T3|DcgFLDp?*䇲b { Y(c3DdzJ2bX\ʬz꜃dncWMƯ(|R hFWKō)bOlƔ#h'&~?8R""kжa_b㯗TѨ |-1] 'Ny1|S.(:2b~ʞM29)m;M% Udt3Od٠'%Hqd>Ckd3`k8K, `f EBXyDxN)t5q!*TS&~-`AYDҝy:x̯;)i_'V&WM/)$A0ar H9500ܛ7aT㎤u,xP.T@^*^so=`M>ҕ.spUi.s zw?(ញW s7 qдC':x4ݢBƏ) GV;&W$;2#q6ef0Sx1V d&g3OTUwn;Y&eq&e-"}6jإ7퉟&lMΘ\rLˬOE@ŇDZ^D>)ۛo{I_Љ~JB~7gy26^vz668]g-E RD}E7&FkG6{+PV=!6\az_NP}x  ]=Ϙ,vJ%IꁰEK/{!.2ps<"u\f*LL <ÂO"A^X}(Oݤ;w$9XSb o:'(Bu^v=H墹4R'ěʮV!I&KFP'aTN&5+E&,ϼE[᪘=5vy룵 tj-]b"X54 ]2I Z4/eU|A_\$#vr 'PQ-I0.@ZY!3:O+7z`]͘,_mkC[VvLt%'hݠ#ºV _LNW] x!QXV[FMӖֵPˉ\|?ӤY|tPZW>.+;٫7)w#$T (V4\CvSim $t'*pw>½<+E8ri >%)mP./44v-u ~Gyu u m'"eO#9PË[hbڴTI9س@kzMQi dh.224eQӨQN_Ū)3-)m0ܟ]s?A93e42Lw/Js؞GPGUCĕ@-WNTL qowW]=yjyV>E0Vf{ZzJ-.=B$L:.!/ \8egMXOV:(zM^QUA*IS^Hsx S,X i6,|Yyhy%H屲6w 7FWX+jJm1I'oFL>:bp v6Xvw^fZcK;Q'8UKy47y7pFtKpmʉ =ze\pFXLm578te:5K6Y5>TDqv"M,sWkpZ[:k.Ǔ~3f[lRSSWlW$ްh*{^*Fhe؀Eq42wɒ0G=O4dky5~}gn]yF6:[e݊)x 7Guʶm~T d>o>]alIee1^ 5?LS<{]yleqE^X#Z)*FU9#\UdV!]<` /}I5/ jq1zmܝݠq@).L,@jU~&Q[ !#Iekf)AGz 7@L'VY$i_]MM-,{yιzܙએtDR)b$ȱXT0A}nQϝz5녍_wB`(*-됹e۴] GEG} \;2t%O7*Tk! d&"Zץ?(_9yFԓ0OLdЄhQAc.˵k£Fiqgc-jdK b0(_2o.]xx$oF4 l4ب vᆋ2,B 9mykHx6llvq?q%MsjJ H[Ơ0<rUĀT ddEF#{ XrHpRϦvLxMag/n֕O`4B|Fd?<K1u^%j%󀩴W#Sʾ95kvlK~KwᏽC_򧜟^)hYL]Rw~/({t]zp>L놋7]wtO/D^M B*Wi)w*Vl#_QnWH܇|kPkU$B)R `Q"N wpa޵bti[ o\|``८I FdP:jөeU)~0%$ePY\UηTҦW8<~5D.cm.QW"Fq"M~/,˕N+aw^bE"Q= 2 :tb:96 bۏ3#L t Z^xh*A[ ^o`nqN?{WN>=;tJ6o-e*T.Cch^WyYF8;PX 9 KKDZwpaE=  Gf y\x"8S t i[ 9s[woM1lcUR=??bt`=겓e#3C!Osf`v=e5dԝ{}xkO9^l| ~p&gw!Z.c{_M&n{>B Il"Z~)k[9zѭ&! v՘NgBԖ]5FXLhQĄpx>M'bO>g;#M^x1jP/ErP,%AUQP/*c"H^lfBF~/xH'ْg WiqIO[M&|6f'=**$ zdRН<;/ a F8n!Jqf|Yӕv242P@;.CMgq8[ m  (5)0R1ZHS :cvϒ&U B$Pq68Ifu閕SddS23#?By[qXiݖ1\ND?P E~)xS8W)*A:bwk;raP a~Cxh5;F_LBs"*+T_Gە#`Ea FoyXkJP:M沯jfmJ p?0.>/;Y_gB)9vYK (AOn{]AY =\̻U=@Y'CVUKtuF\\ 2*vQ8Չp9ZTqv5AŲavJ8K en\fҁR/Hӈ6d?R dSLÀ|^XŋB7O3OM&bj&\g( S昊)3#/_rd3/MJ`?x빩'G~J}Bi~% GKtM>djeGJ(3 H.$l&-'mhbC⿩}Lotf[dq]P/u5٭67W؞hQ)S(.A7 5&mUL"]ȡ8#|ϋN 62-[w4lΖj.L4Ihu+~yqUp"Ec e9jO)Z ERtk?ML06m (BR_1kn t{_ӗthn#],Ht@7ьyf9T3 Ȱ3cMҳk~K;("OB:kU[C555A2?kd5\1O`lmSb@58\ H\!0]ԞfгcXmLy!}'ϒ&},+: i' ~Eʜ4H~ e<^D'  [R-7 tez-Z?nc9/#5kgMȒel\a}7:p GlmhNϳf-ڔvǿyi\y֥/CU!fra{lQ>-^׈|S ̰P-2w]pvB tΰ4.GhG_ FNe~<31!H')P&_YJӷ^.N:v5ȀoJR]JH> Cގ{q1P`޶r URIaYJ,B3BܩvJ>7WqZ[ʓ(RnB!B.݉{:csD[<仳U\MBBgqi0}Z]دLrKo2WP/87{cP)fC',nRKݭ%^(Ju-i hIsYY64N뭋1QSme6#"MHmxDɒ&[k>)t<ʅ܀$L99+l 7^m%CHB,s< wk[5q@ wV$U?1_JŒ _ ^VrCe M)e۵LR>-z^FGyv!16.NJcQ2d+Y˳sqĤٶք^:gHѳ_W>w}!Iw]>_o;on`؂]u|u4^J~`Z"**綟G_!Ls۞jc T3Xl1:,)L)5 ݑ-4GjR6]NfC#:}Sb=$QH4DcvǒDضbyM̅".F)S$o:P`DWY +͜zx۲{~2^{b0r8fz dxRUJ*~`d+C[DeA--κ/ JZ  +wMV@i1!n,'mF6\cwьcdBrzDvJR~u:yK>%oq43oy[=L i4ϢBi}^AVy Nka&Bwo4kXݖ(hFY<UU ~]n7рS:&L |.Fbi$^dbP=4g/"STJ]HO݄{O 5z=G-!H=(DL:TҼvX'EBN:Gg0n]ff3kV̄w_JjI*6h(֨Ys,#$1gTʜN_LT4?e*Y*3x|ӇދEMWICcz{c9XohuX=rcWC5id/ v֫Î.vULH< ٖw,i|Q#L8g[Y5;;#0*M=e=nh#P=4]h鶀"޴6l!iN-+ wL] g*;m筙s8Hug}vˊZ !?ݥr)$szGdw\n/;Ӽ:~Hzs8&Mﭙ5sNJBp0/h[|wkA:K坖UP!T­Đ5rh@azk'k+} U8N3­":: E$d 0C>^!JԈR}U:^$/ހ+{(TQqEto*׸Yn3llJO1gj KӷT 3␐R`zF  p`,28d]4\u9,oEZ)C9hlq܎67tsE~܁X+[B +aaUWz[>㵽NXCq CwIlRƎؿ0525ו]㾼^r@S-NpIzҟ!Ϫ(䚎čTs}g #%,x(q/S* m),oeHG_0_?ދR+  .L7 3upm1|i֜q]BoUb4>hJL?V;ϡ[ݐb_SK'6g)N`e9x"qlj* }Xi{wġ.,/͡[sиN/1nhp+ToRH+Bvxh6̵H2682/X\ȰgH:iN{E^ӥjU\γϡT,!3&K,cW<amJ&4}įMQmZ6#PʙscXh!|Si"W F %O|RMhD xS\ߏ-iĐ?*ly CEks_Y'1jSTߒ @hĂ[;)@J7ťᾷS啿zm~FOꭱfX"wrtg=H̶A^!YYr0t66uh11{ܑR,۴@ԇ~+C.+*QGUDjmZ)FCy| PHn vs@I1nbYྔ\)2(\m=$m@-8&N:*ܐW$|;ק-=4J.,p[mH4QSC'zց7mepiK\oT׆$MGOOe92gdz`bT "OH׭bl{ l(KX'<ƃ{6I̹*xykD3}Y_Eq%te(Ida=?*Z^'XeBf-7[up!*a-?ȤQƅ9f|P_FӬ}Oٿԡ`dLjZj>N1E- DV.S5 [a>7%E)A3{ƦHzdפ )h1I"KU3HWS\lyYǍD'Z-b9ceE4P>ESRJՅn~7.uJ  x=4I9㲓K dcnjա cfxIf)M#ZҾ߫}W-~1uԹA}V7y{q([dc׍Jg#nrƵNrg|!iӓl]Q}Ĩ`g֜u,+L3*4r֓?Dw ;2 ʢ<==* @^w?P3؂^qG+7Pk`) ֭-n2-1RޭD}J8..^joff^@=Cu4m~ %e}>BOna#u=u1gFKWRY &G} rOin }{ƦКtlC#1+%kFU`VsMuK uDc̔&82IL-;wnУjR}6D1; I}m4a{afԎfU}X|+TZ!nC@? T%pCO޸En!98`8!l1s(6W 3(؞/ZH|T4uUe*A?|d3I#`4(."VCsFe:M9I"T/ &WhE{̫6U~_X,tSQKEmR+्rE0%v: OWMSxiW6Tqfƨ$ns ޘW8F>k" TDlVta  oܞTwF T3o*1҇G7JyBW ={/Qȱi]Bf@TvhkL){WE2w4OWdٜo0JK6=m%6> [ Bvy 1N 1e֟S'B:A9f7%1Mh#{v}/V79oQbCD^sydyLt]w!mPK ~e~g wTLh, yO Gl ϧ!|P!gAJKҁ߱)WI9ՒAǵLtwXΟQI>ٮS;ڕsIc%6>RA('üu5{2cRabNJBAr@sT.V]\+,8Q`@czV:UׇȄ bPݧMLYVf6 OBЦ7ͽJ4FHɲ3֧ؕvX"[U bw3N&;2#Zgl| 庨84H!ҁ7gA?r9j#_yɅè  YZ