openldap2-back-sql-2.4.46-150200.14.8.1 >  A bu !p9|~-SA.\YsyA$)n"=~pB%:Fd֭lU{S$&PAԏK#jݽ]72u Y|#C&J$^&l8h`$zDqQv +2͟CEo}g1 Ї;:x>Z#Wmy؈[XU]*+h&mBZ5im{Yp'/Rh""Z4g!f848dd0563d456ca7ae88ce26fd0b9134df0dab05d8ce799878542b4b87fd14dd9e14cdb22f2ace37db024aad0e99328542bfab8tbu !p9|,)MSmv&Ak8/W6KUҸW]U8lb3+@@х)a:rC, M2R[5Vn `̋+WdiCwsNJa8τMMy*1(g6w $p21 WXuGgj2W}^Y6Q~:&TW;c4ᙅnSiu߶ < 0 uLYGC~A1>;>p>|(?|d * @6@ V{CC 6C C C  C |CCC&PC\   (Q8X?9T?: ?FkGkCHlCImCXn,Yn8\ndC]opC^sj bucvfdvevfvlvuwCvx wyCxzCy{z{{{{|Copenldap2-back-sql2.4.46150200.14.8.1OpenLDAP SQL Back-EndThe primary purpose of this OpenLDAP backend is to present information stored in a Relational (SQL) Database as an LDAP subtree without the need to do any programming.bu ibs-arm-3 SUSE Linux Enterprise 15SUSE LLC OLDAP-2.8https://www.suse.com/Productivity/Networking/LDAP/Servershttp://www.openldap.orglinuxaarch64P nemm&@#B!qn` -pw0ZIU0G!mS`mD%qA큤A큤A큤A큤A큤A큤A큤A큤A큤큤bu tbu bu tbu tbu Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[bu 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_sql-2.4.so.2.10.9back_sql-2.4.so.2.10.9rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-150200.14.8.1.src.rpmlibtool(/usr/lib64/openldap/back_sql.la)openldap2-back-sqlopenldap2-back-sql(aarch-64)@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libodbc.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.46-150200.14.8.13.0.4-14.6.0-14.0-15.2-14.14.1bu bX b; b; b4t@b/.@b[@``KW`/@`+_@_@_/@_FN_?@^^^*@]B@\ڭ\r@[H[@[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@Tuwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comvarkoly@suse.comvarkoly@suse.comckowalczyk@suse.comckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.de- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql * 0242-ITS-9815-slapd-sql-escape-filter-values.patch- bsc#1191157 - Correct version specification in ppolicy to allow submission to SP3 for TLS1.3- bsc#1191157 - allow specification of max/min TLS version with TLS1.3 * 0239-ITS-9422-Update-for-TLS-v1.3.patch * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch * 0241-TLS-set-protocol-version.patch- bsc#1197004 - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression reporting is bsc#1197004 causing SSSD to have faults.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- bsc#1187210 - Resolve bug in the idle / connection TTL timeout implementation in OpenLDAP. * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch * 0233-ITS-9468-removed-accidental-unicode-characters.patch * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch * 0236-ITS-9468-fixed-typos.patch * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch- bsc#1182791 - improve proxy connection timout options to correctly prune connections. * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch * 0228-ITS-9197-fix-typo-in-prev-commit.patch * 0229-ITS-9197-Fix-test-script.patch * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. * 0224-ITS-9428-fix-cancel-exop.patch - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0219-ITS-9413-fix-slap_parse_user.patch - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch * 0214-ITS-9406-fix-debug-msg.patch - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). * 0215-ITS-9408-fix-vrfilter-double-free.patch- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues where openldap would crash due to malformed inputs. * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch- bsc#1179503 - fix proxy retry binds to a remote server * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of service due to incorrect validation of modrdn equality rules. * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch- bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch- bsc#1172704 - Change DB_CONFIG to root:ldap permissions. - bsc#1172698 (CVE-2020-8023) - local priv esc via start script chown -R on olcdbdirectory path. Remove chown -R on start to resolve.- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch- bsc#1158921 libldap-data should be requires, not recommends to help prevent user confusion around configuration ownership.- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect authorisation of another connection, granting excess connection rights (ssf). * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch - bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth incorrectly to another backend, violating multi-tenant isolation. * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch * patch: 0204-ITS-9038-Another-test028-typo.patch- bsc#1111388 - incorrect post script call causes tmpfiles create not to be run.- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh - fix the script- Emergency fix: move tmpfiles_create post from the library package to the main package's post script, which ships the tmpfiles.d configuration. Fixes the post script of the library (-p /sbin/ldconfig does not allow more statements in the script). - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) * source: openldap2.conf - Added a patch to let slapd return the uniqueness check filter used before constraint violation to the client. Fixed broken memory handling in affecting error response of slapo-unique ITS#8866 slapo-unique to return filter used in diagnostic message * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch - Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- Fix CVE-2017-17740: when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack * patch: 0017-Fix-segfault-in-nops.patch (bsc#1073313)- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitionsibs-arm-3 1651838126  !"#$%&'()*+,-./0123456789:;<=>?@ABC2.4.46-150200.14.8.12.4.46-150200.14.8.1  back_sql-2.4.so.2back_sql-2.4.so.2.10.9back_sql.laback_sql.soopenldap2-back-sqlbugsexamplesREADMEibmdb2backsql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlmssqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlmysqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqloraclebacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlpgsqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqltimestenbacksql_create.sqlbacksql_drop.sqlcreate_schema.shdnreverseMakefilednreverse.cppslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlttcreate_schema.shtttestdb_create.sqltttestdb_data.sqltttestdb_drop.sqltttestdb_metadata.sqlinstallslapd-sql.5.gz/usr/lib64/openldap//usr/share/doc/packages//usr/share/doc/packages/openldap2-back-sql//usr/share/doc/packages/openldap2-back-sql/examples//usr/share/doc/packages/openldap2-back-sql/examples/ibmdb2//usr/share/doc/packages/openldap2-back-sql/examples/mssql//usr/share/doc/packages/openldap2-back-sql/examples/mysql//usr/share/doc/packages/openldap2-back-sql/examples/oracle//usr/share/doc/packages/openldap2-back-sql/examples/pgsql//usr/share/doc/packages/openldap2-back-sql/examples/timesten//usr/share/doc/packages/openldap2-back-sql/examples/timesten/dnreverse//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24062/SUSE_SLE-15-SP2_Update/276c018883759eb7b7f6ddcd2b557fb0-openldap2.SUSE_SLE-15-SP2_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ade75de91cda94be09cd5d389652d16dcfdb05a1, strippedlibtool library filedirectoryASCII textASCII text, with very long linesmakefile script, ASCII textC++ source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRPЖmcȪyutf-85c23327ff85f05d745331e1bac61f2468ad741a0dbd0adeee24e64f1dd01c8b6? 7zXZ !t/㲩] cr$x#FGC/$C+b21CR:^y(Er<'YC賌|Y iuB'@fu,\ bSC*Wd(oXu4 ORHNϳR>Œ賃JK`,gS_!b8I^6cB~U?@|o 8Ե ΅c+)>C-ς9ѣZ^&g`(~\??w"i?F+qUkY/iV A6b;`Sƶʲw';Qi0%P}7$:ڥH"ekT 5S.ף3 挅rp9Iy\`%(ar"諾$W[oF ݺY_UNȿ4Mǥ} ڮbQ$ӭ0?5luS #I#~=)*?v^;β8Ý.ujiL֥&QݾB3f+j&)UelTMW&cQ#j*2(+T ,׎>ίq+䜍߯k8ĬөwTd-ۃI(0JP̶S6^GyRdǸ46n Ù2H/@q$EYQ)9z ftF˅kH;Eޕ3i\{_W Р,,T4 `VnO ;GחUn2g8tPvb7rLzdN2B2KJb,U1YpmÝ$0g^ȰyvoxN-1?k ZuFJzʧsse\%7(3^@8!x/}b!0\ ͷi/]gX*ڟhٜp ٺD3yж,Is1KjE4ޗ "SJ|ű=92IPj42TlG =H>> $6${u7TWMoIˍke»!]J*x :I;=Lڌ |"u:jr~§C߀ 97fHm 0mo]HO"0/4IຫQ"iĢcXA %Ez.줟GEܘ` 0j"><^c$D>ȫI_7`V*xt TPrdo^_Wp:![}E9 p-?䄜mо…{@b7)ɺ\&FJ5Ŭ`Tl=©EMlnh#B+Mz Ebbͫ\%"zP}8Bʈ~+䡵<=Yƪ:Ź /j\Ru`ÍZ"e\&ZK3C5z%7CXՒyuh nJwW7ς?9|ӽR„L*+`nT Q]ԅeSDBCDqxm4) *h zEX9A:,;cN!SNHdXkC*#v?ċ&=&*LH{i" xxݴ "ԟ hǙШSRꉮuGt0Sv6'( `!.gV:XC8D̠ @_]E9ݤiHߒ aQjWpIJF 0=\bՃ(Ӂ^'0{/~ ܳd:.?Ԏt0D3YǸ8zc=ezrR po7ڋXTڞ6}i6M}>}8 jY)  yB|_aϢ@y6ܸ0ס--a[]zdmXXc[M1F%% OQ$c[O$8LXt;hF OŴ>*teRFB, O,XTϳMҀs$(i+-9"K>)HBkZE'.Rmi( PZfZFV~kqS7E8B."=dM7Oz #"|"1LWx?vX+tzӪmFy97 02_~?pM2c[2 H{2wUwYv#g"1s1wْK9? j =̓ ˰6eWk\l3rn9ܠw N+QmA=J2SP<@1 maR7]eKى*6#2*f>EK,Bᅴ>i]bH!bz%ITM<]߶ZPkVi EbXB~m% ȸKTQ_T3Q8'&2"T Q /^7Vp!cg QUw4z1jI򥠋Z|5'cr 3*OlF bEo_6cI!Ԙr<=rihu>#8 鄃vnB{T; 'e*/^Dc(*8۟LOmeȃ]MJ:B8R8Խ4K8 }bQobWd,4-w*ؗv|Au̽s I3nBʱi "r)OY^3L9ldx 9fIǶsXAi?]"JGoc-a e`Pnhfr#Iy&aRl2onLWGqɥhU4\c];hlr:I 洭7QNp[ mn ~$#8M\j^Y}]gHݫWq!i0 ͮCUa 0<ʘ+)J`9&yͫ#2R췗vyEH_DoZev2d)H;OC- @^W,hˈhȴT0-#R:.P8KAd1e߽]B5dy^aH2hkQl4 @|!Jf :b3׉IY2Tc%Z0No[Lғ|gYn5wdIK`ww#d޼PUbo #((q&/YrrEt4w_G9952svhdM+Mְ:ħZ]* A /Qqh\]`\WU7ضIW1'u\xd NeTqnMujZ?n U2[uGeA2T IkdLu3Z mw[V3^: Gx!EzMPf~V;|\ǰϙnqZKN{W>%'ċa肱Qj7Ƽ `@||R2 Pxz{R$\@˚Bm䝋*n䏁+ P6cv)+C_F !@J"DgwOʱَ2eP/~R<ݤ:,&T5W 3o;T#>B YnZO-#+|^G̍=tW_e ?k 3 GT]X:2aSAP/#GmE\5 ћ3#]ME?Qk鲬#'hjCԌW^I4BS9R!3KM *EdIŤlQ5BawD51kZE)E]l@.8@]3"oKo~*ssp;`xmIx`鎻vKҧWPux$0e⵼C:\:J>P $ g2=Qx8jkE5%Dcz^/$3[LHl=c-&2лBo>bkƃ ,6htxxK߶XJ$Zn߈/Tx8VʚJa57t3(vK[ E^80IdF-^Q`1iٝ%%kx:Ho5 26ou#V^!\Zc|62Nk̄Qz7[P1=26fO@#dhD4A}S0!Yk9r=ZLˁjo=-&vxc=.Cӹ|)Ȓb@Q[kk*3JRdka(0Ksдrs]wS <P/4<ڏY\@wfLÿLZ/vW?a.=ش0oɻ|'~+>8CϏ}ʳjO=g [|*_&QFL|Ia u%8sH 5k|\w{ƿ?Q-t}>QHY؎۳Г-ޅ^9'f44tTV>*y~W1tRSBEn 77káIfk^%?Y֊ÔN6&_ a.GA=ЏMNOH0b-sjijN#iw"CzfJ$6nVSozD@򻃖8lp?#`}?qt3j9mI4w9ؠ{g:aIgټ_"5F=Ganf>)"/+S!UP*Ӆ R%` u鑝ԯ^fLؙ*&.?n7GEt{j( {{*qDuhkc@P63kv=]'PmȮ3<ӻBݓsnv攴9ιe8?S؊dV1_h`꾍XvU XW֜N2%GLswI)ڰ^XK;b)㝭Jj˭O}ѓ)8`eN6iy)jrtZ1[怕=/xZ,K"Ġ,8TzPYxij엘'NߚeKC0bOt(h|Y{fYA XWIL>t $=b/yOHy!,t9]և.26q X: cD6;w[VIjT9XE$}K"8|J~`+;$qa3H>қ3@ߣ\"6-3\_#Xjy- 9cG~񐑗P{uzŢ2w(%yέ-E'H 5sȩHj1jģI%.ذXfCv K7uxO~hkf!6 .I)(G@(P`(5S}wM0,sisVy?(u+}2|wɮIzADrHb=LjzSt=1/Ėe[kna8]2c{n?[X<^v5ؘ=c? fʴۜ\-&p[3).]ɕt/r؊ 9уG rg}/U^oߑVA_2a 2I&Mڄ`f&iK{'(YFz&Nux DmvY`έMG  a-M0˶B'#~2s.vk9(ntJL}{cCW;&SvKK|zz~alXڥ(:x#^g~A;^ ƕ4{:"zo,PҹTf͇X~٘ũ C( ޞT̰+ )r:Mso|P9p1+FKv +CmD" KØPܐ)A X 'a#> `uZj+ L#W!┬밡@uKAXGYI 1аt[6tܦ{ wOhgf^囩zelcb0!VƷIqݞW6#`KIģFDgF@cW5FC[e9T$ڢ41Tő]nlH9č`uzT AȦV[p$EnkPx&MRrw^[_)Wʋjb?SrH* o ^1.~6/s_^A"͕2?O9t1ITuCuX<)i43E$jBt*nRˈytB#߹QEv {ĸc3A,`,r^rFHAbYM0!Q@21C \vTV0 Acp0DEI4^AM]iY8;֭\d-"n=LE_ /ɯX ;*`%C<Alѕeu. 6r%bSfuږѵ1w8+sO=xXZ*5/NØC@&P"B.RUƪp.A"n`I gYCnʔ7qb;Ңf< >  vT)iq{LMS'GÙRw~⸠m\O?,kb4ӫovqC}b g^jQӾ[Bxp[Y )9m1j#iJA=ݹm9G? X pc n-|hH2ɾK*_gR=90e畏jx蜏REjz}iVPLؒ-)8\YO*s"T[ƜL%Hf2qع(BgqW|vp mhU9!҅fr(MLՕ< pL&EM֑tI谠H섧=P,YWܗ@?,Xx4&ugs򊦩ǵ"(0rlVO4Oe\[{iNB(POq$U uL#Q9Q`hd#p@I[c̼Ӣ%~-o}3A,Q!͠(1_Ւf[&$.o3.R.u"mi"J+ ~fp=H5D-(31άέe%n%7 [aլFrpę3T\q(J^H\[%.PlnXEiL1nWF+ϯ7w?̔WCu4Y-XT#cvv|P7LXMڥf>MJu_/-$fy)A=L&Xf(%Gv CGbi mu6Q[”J-g K}Udu횻O+Z򏡇jd>/C3;X۩P;=[e%D}g4SZɆ5 FQxOb~e[5 'B,WF.$ `b!w` ?Z~o7—D1`ZB&D.;3:0cyw;'و^uݯ#MXF3c/R> |OF׉{Fr¿Sb3Ϋc(ȥ?hOKϊNrF]@(& kcױ3Qϣ eR`OPDv_Jxg>Z @u wmz XͲ(MmQNpP KFIWJdACPhm-f rˁFS4{F6IrTAd獏fs #k]2~ꮊ{9ra<>SlK'OJ,\ZZɏfx YțOtzQ=Ʒ+q^Jbun9wѤ49aPqDH2RΒ4({7;nqRn@7yJS crn (XzWϐ[-"$료 |+ $AVSku]_,.x(uۀ ݧD}MǠ[Y/\pZok!RA1c<ϠE8.}O EG7U9.tFsP;NةIҜruݐ3d5$}#g+<Dn umb+7;k6.[#1km3v3w;kh~RL_&sȷsNxM#JBPr/eG-s*VCHh jR ,%jEY] [RJ8/Nc–o8߀ulK&hM\[DZy@MG˹{Ly_-h6Ek9b2ff8F}a*Y^d̤jT hGDc,N>B\}uzD΍ЋB/w[8gy]>Oi蛕ac c#g[z(NO.q&A*>k~(7RfG;8Rz]4ӿsMR:Tu#[zcזLHreUs۔$J<#ۤޱ2pCOxP,erIwBs|?nr\~I}h ArUqT߁%CbeaNt4Wn)߅Vww:SM,rּp ]@;m8fa6v%l^]TqîȲ@JWU}sdo,eQ6N>cNpXLtFIC+SP@DU(DB)J5}F;Qɪ}6JOCi_Utm@\:Lј1-dV@Q#_(9:%fIwj47nRٯNY `4bsXߦ͞郇{U5ň6Mx̓ZH/}c7uaG+p! +ao$ 8KZ B `8*-q3s} 2蜄S!M RovI#rg_ڷ[=c" %cXv/R3{5fAԾd&(g#@838k+iۄ’AҞ9@RE$2)~!`_,>(M'ZPqZCΫq4R(P(>SMc;$>)*C#CG}u1[jiJ~ɚIbu  (&AR +W8;F۔d([Luᵱ־4~,<2 0[ Khz9)pf,[R~CT  ^2~^y>,l`E U|Fؒ8<`;<2NM=.`Q"ZJ$۟*`+Ȍ>TlpQ)~`,{΍vl8҂X +FrV3[u)ji8d1.X`M D/AN{Hf-6Z`~B7Ou>a޽^88nR,NK="|Q)_l0 H҉ *ՠ\SƠZ q[cdC7PTAs^ ziX(酑}; M-*Sh勀fk~#:' }e_ n2r&*gH9wX Zm#1~zJrwb@Py!aXvJoM6$SɁ$0pR;ńcJN+el}Wqcj2"'wu9FP2:;ܬn=a".@v0M ԇ`ȩEf$ypvhz&TkbRQF\juf#PA}eO[*^C&d2tEJ$~:cLnN'ޒ1oadn CPB)1Gp(ǰ،pH˚ȝsW5ݔfO[kNhJ;cX 2SWYǫ2vc6hz'?ncp/ߋ=cCQc(vՙ[3J77#w[۳?UYN vWֿWc\<] E2|HѭA/\V7-+;]w*KeQʖU͡2=E0dꌆvP@IUd <^_e]Ρ#[bӽ#p0_2-~GW3v^CV |X򄊥vY,q}o .Q SDэ876GASs(W/q=Q˛I|:.ݭ?o6X;p-/^EBS5"7bgOBE bfA)hRJ=` H~qFK+ *4t.8L/ ;d7ER e:g,I!1\F@+͉Fd;ܧ =Xl Y|]lV_J6G1b"@HLpL6'u3~Ҍr"MT"'h_ɺk$э'9˦Z?v%ӉIlhFĎ3ÉUY~gA59Ft%oI3':{;<`K@dQ>9_VX7x)^gVO6#v +s՞Y~)[6iҀ_MwSSni#T *O)I! w1)NR)"v:w ԰in8 Cb:Tukʍ`t>|/:Y?'[{ ?76PN ,ԝgȵ~QPhw%Ť7ͪS}2|g6}bַL6u3#|,ɡr񧛃p1BW XQL5C!<#oOQiCKMg^īp8f̏~t+S^!GeVCqҔ%|^ܵDƐ>zr&..YjU_M%x;>{91Ƴ&7Nĥ%2T~8'S^1-6gtdv6&XYlyAZNG]q*.tC̄9F @Hrcr:!D=%. ;X9~[T LFgS(gs!\|4q8䀤JZUP9?vw>h X.>OǜZY1aiv9  PfDtg7[)>׬vXD*e`p _ç#ׂ^'l N ݷF}7+?tx P9uD n(%Į+c qcEN0پ>5?Tә o9#[pZi/ksũ7T;lݛlv,<7awD>V0ikIm.7"͂q/RnȐ@|_kܡ6G~ {kUy͵fLń{Ž۞QaS !bFJDHaޑK.*=J͓vVU{2@QM*񁔷y87yUaRMAY*} Rn N#4]u=#--0H`\08Ę!7=Oj',U];w-tօ? p"=UDϑlDOܚq;w4CL8iMN;*nDnsڬ{vtbe Z0u/#Y\.Ob|VZ4O*BQI/g&/)bn99cf(N;J9N/X*W#xڇxG}vA~׉00%ܶS4"u$ + ^ ],,YFDܟgrhMBGX7ZQH?j(_Rhm!bꍬ$)=\!9"UD)5޴- x r5e4fle6|mXYx>Ic@3ʥfZ ;4*lw`_z40BES0Rf`[ަ~Pk':>j @^:Zn.E0vz"rK!'K`QIeW/&'25,o ؗos.R=f]5rxՅr{gV+s E7D<QM4 :` W]P %1Ե'FX3^Jfc"aiH8.\n?Itk-|';a"-=o %e.H\cUt?ʸV` Aujda5UPYIHN{j$VfgN8LHhc]ͧ1W oDx}b>BǔCiCDP 08^=HYt8t/&e!oĦʿH~ϰAJkI6 P41Er0>r_3U N]Muz͌&Y]WL rtO2Mhq-IcB/BSbv>ÿ48}2ù3"ۉ>[WVkJ'"; Jޥٚm wov~'`4_Ao3nnX'rYcm Rr- 2nۊSgNy>'^]rٞ1ʢ+UY4&@5zf()+({s3_$:e$K J-pMkHYRjl>mrrnʥcP{b-KzD*a 8Kie1,ل["\JdtQ3Rll<$ :5F`{τ9&dL<+d'QS N/M/ 9f^Op~̪|biwrgJ`O;eCNo]6e+rD)N>AN͚G 9c)1i|fk-:zјG0sk=P'/6!B7c\iz{/Ep϶r! Ӈ/JM|vk5ӽpq@{r, ͇GeQ&  2X`ekO!,҇jس%=_َAM8k !\3^gLUnp?EkTŶ3^o /T}3=|R'(8FxOM U76ESrMNB(ߜ#C%}yLMS%**Ww=@t)?-W)5֓Y!&fDk`C8U}E?C 緺 l14ssTƻQZ4ʊ+: ChY%_+5-&]2,+"Nڲڕ0\eT E=t_p< v|j`I-5LgYBX*gtBXm]E $<‰eNH(cP_̌FT H:ƃ3_ИY&xf`QW!2hIq GxۑFt{X-z׸d2hߤu9Oe)텪9ilN]\MVMYU_337MH&ɣ*$*bbrw./)'wgޛ7}", (l2T%"βxIyGwxW?5De3#_<,jˢwXv@[s(ʲ!'e{%*xߡ ҥk>eX8lYeGiZ"j9sFZ1 X"Є7E.umU տrb//8ɜX4vT@[;`2tzY'ً,G%Lgux _":(I|/bH +W\HuF irғ]^@2voIiqҊBy{{v›QDUd0s%b>#T~R yXN Jïgv/+D1mUO*vCtcTTظQ`f MBuF[a;fZ񛇗FJ"Ke ݮ.r<>X pƺX꺮@En1a}jh=ǠxV!;r'HB3DRT(Ecb#hȕkt&2o1?I: pwK=UaTDY O. }w">GD:n~X r[Bw\sT{P,if(Xg|Z?ϴb7N66$oAGOSz%ddX6+ud5} 0LZ#mǭYȣ:EUq@݈4lL'Z]̳d{SF dr90Jn(sZŵ) 7-AzZ]=>ZZr||*: ~!ܞr3DA|%p^q? 1 4M׹Onc0r]tezIltٿN@l_;l?tCW:|Wn:4S'-!^b Y%3?~9GLb+xA Ok^&;dI@ikϘ>8!fwC/(f(}<.ڴ;4o.]TI5D"fꦇ +1Z3Z%!&gã1{o?et4 xݸcT<`镆%O.{S?9`ݧ`i,F> )o6킼J1Q^*3Fen)Q^^NP$~m7aiw/w䍐'&+&>J"a_u(dNAil#}Є$nKhVe-Isp8|jC3,7Z։[6"gq@p1m*U!hk/l3T?]a (>~tHVD;t=#GrR&yo`=pÍۖO`a l5*gJcZ?ϹK`&mw)qf\- } yuCˇP,2`dv7K4&y>%ܰ %t$[68EE$RBrID}. Fg~dߙE,'2v3%x\a 8Pm϶q?7+xq.zK#g֕u LRS(mfSw? ax?KHu'`6FB<a3^4ƃUsN>Ibhbbe*ÄNQ7߼[4_R>_:9ZV=:Tu2x6H{%n+yh[洠'мzGqs+!n[ó\pWg"#`0FI5zₓIHl_XC߸;wLx}fcS3_/"?, s6-la xET?nb紙G&Cl*azsC? kE+,Vi 3 B3\US=ů4{j x|V )冷eOnTK ?RקH+&0Ӵ'28O G :C͓>`~nnVěd@dCCagf`@4I[0ny;}c#9Bofr:a#< o7:F05߲gj&}yVPfq=%T`d#o¨ehW#[9([Ižvu%n?)1<.H]Ljǘr S\rnIQLSwUOSouͥuU& !4 h(.ux zFœDfypK;ҎDo6Kx][Mmb(3k])p%r}O&3 遘LPu29,,C.J~ڊ{,BUɟ$TLg!-Ŏ|hv*12)'hʓxGroH=ɩȕ]WBCﮋjί~G/S;$@r\a;eMb. ;;ws{ f>uՊnᒼl~]: j!(!^2K? 450,/mpugSp|R0kP|]*ȿ& %h 'VT/CMoM<)-lG |mCMyBS}(jU07,z X]!֘8;L~{LĴV}EC+75?QMV斉9P4Q,Fx.}@ؕ>Y"Gsjpz)͕gӔIB\=wqb{0vh̾:Y6)^'PP]C- \rr@'=g1@{Y/$IX/S|DЫKDPdb? `)˷zibCp̸$zSca0=G%\\ Db?S4BR`b9bG8[z,ͬ_p塴N{ 6,4yK󢪚@TL}fa,H$gzoγ[J$d$~@ڊa'Y"gR-t2g;ҭ1>ֵTRP sRMr)}N 4Ȃ'U &Jvo{i'3mq_Dc&&e=+Hou*Ha%j׮Ǜ.͟k70\3tkYy;;؆#V>QڕvrZڙ伷~fi UVD]F ʿ`7,Jn #ަՙ4.j;yB=|So1}HT %# 8FPg6?2"ΙTgD"F%fs"F󤰋Am E|I .cNx)1l~=#RInx i6 5_A5a tРQCP=l{ %:Mu|-\%Sڅ]C]A8%8}H*\ ,gLe!#4g fJ5=YtmsڠZ;g`MޤC;.X*0C! @Hc2,E=:WGfT;3I'eHGԢ%~] 讲hǑCǷ V9Ȫ/e R"a6UI,\'4qKԖtsjFF$ǀ w0FyC٠x##(n+}_=la]LC\%yW)V꾕6-"P9CfRqY>}p{_Fk`Ȗ CpEװlZn_"pK8>JJlԺqX]6N G]'̀O`bOashl5}R:p82TynTv߁ۑK!\@?SSEg{7#횝HZM MGy)m1@h ;u05%~etd  (tF]6afB>"̫ x}jf6lܽǍ5apE <~Acdqon_C% Fpxo?Pv?11vC/{`vu~H `~X>60]?[/#_F'B/ʋ2ˆz@j BK2>@iF_.V5L7+^0rX ݖ};W@9h=: 1Q0۞'@T+\ R5+4k1-Uޠ('L7v#"+jd5ͤRBULAl"ֻu1 Nic:iµ֞$ivں߭ c"⹱ϒFLoL뵤ȔDϩn©Y"}PX`#S2"fGѨٰ*'$hIW]RUCM ./v+J, W>+ǫ]X Ou4h+/ _T>vbA3hA{Kİ~ߖW 1 99ċ<9jm 3wLX fn5΀ǥ\/DܑՖtv$%3 92zYK a23>}RQWčQZK.{ wQZVht:0 oj!l÷|`2W$c'`-Y0z57r&9xP-yPR9 :&2Ȣ^bϧqTl9883>3PE`om;@įUusA1 9lG&AυTY (w}@=!osN]~֜Gn# 4Pk"w@Wk]Z"icY=nC)=ǝxrO6S(="JYaG ,drXXb[5&劄6^Z\v=%5G ܥJ߿Z'Thhv"1 _|]i~9:z$n h#.34JYɶVgjB\E.*%ݢg^ \\ON ([FRpwlnf,y:U&=pu7Ha^OiR䚔$V!J+cwtlݜD6衸OwbчMu}D@P)ウ[i_%Ƶ9ٟ˜NQAA}m E&F!z 3Y48ӳ).`c@,@#f3Con3tBR*4 kKj. cg&ǣ+`arƕA2:E?c*@ K1BRd{8;R@#XGln|jv]Nȶ/?/[\$ݡ'\Tm邷tK=. ):,ԜCPsV?F׬Az-%11?W@J?%>ԇ=weܓuewl\`^\C0 3?`pL)W`@0LA .c(M5e7^h*!Z`LcV5e*ę®k `Xu"j[$׍#v$̣x&^ܻ# hAN?.E0OxoIB;s>B*Uj#ARyG XZ/!P+MTE)cVDf8]#~L`N:s=WZ~J0떟GPd'%g/uK.SZ^-~?d^BDۏKإk2FϠ5f6%R`l9MA BL0w+..Fy {0Hp163¼±L$08^xr _ (ؚfb N1+L"w =3Y+c6>yV^jjJMRIte!r s _L}ؽ/O}fݥ($:|&Gag $Y4XWk0:Pf*=+PaYp택i>v+j˓G<2 ,j0rSGEY$/B , $h3/Ѓo)_n5F0cnVc7ND Bo~6G< ̬':(m};}ϣ俿ð|!0W[/l+k$g({fzcS?}a~dJ7u%2FY|7ՒiKA+,h0pvJN7\JC]:%*-.ìPus3 UDX6ciT178m%'A5à{5 ~m &@bVZ~ (]A"QCw!@<(/;.H֎Lu۬k>Y]2QQ | A  [\vOb^ʛ}:,SUe&h$wрoUtR{ogJ+5j/_qИdQ:R*b!X$:sh]4M Kr|:gpI䒷[:x3-U_gwgK|O,Ex4.R!;S&?z̆wX~YL&NXz5Y_\ΩŬɆOH[H`␨АWf HVs րii02r~ŞV?es9wv4&Ulע֋#C*OȍKRF昘vfPE.a((9ёF#\ʣ=_JhL:ou>?v%;*}5G9;9D Z=apOm08ܦ18O(ޱ*z R-Go/5@qEubB V@.JxӴdd|g_;dϓzWIQJI5 GuϮanPk;ßk&Jo:_{vɬ 2{)÷H;1{Y (r]N7݈FU.Taqe[owH!C,t6ng*_UL^$ H=g]${}dNwG7s\Ygez= f%<їP62@ُks2L&s QZ&ṙeEj6T:򀺜p m11pj*cv@э 70ܒ=D/BixU`=|%!6[B1쭱Ͷ)⺗8*cn+cnw uw:\ P$)W?cGmy:H k'RB@9k eJAw/g c!lVFPǀ |.i񋷁)uߓ0ބ[y1=?[- O風__GNpҼd( cbYR; V moŬCʼn ܛ?V Jgпi+̰xj!*GmY&538A.#J_HhX,Ǹru6bg"` Ĭ(@;O7A(({ bhH Fj,ozJ{)9=#r"n)U2_"g1JVҼw\L bJu 4ibxUYO0OތB.{cBgN0x\W} N{_d@ *o6^\piP(Zk6?x, LiYb]$ !̱M(sJ se,xFʢX)0|f c}+ &.;ަ;Se/&q9 GOٺ{˰;ymÐT#PJ'c~eD5~-a7~#}#ЂTOã4Ь4H,f ]1Qo^gا{iqH;nXH1Fo֍xPEO$dn/Bhyn88[YW_*i:ܵ]UaQ{]vXk?`"@pU#fX@+ u1K:PGS7>۹FX1#[h[b^v 6$rOiw$2xN]G;+)Y!,1jdOO _2?TVMp/S`ͨ)l2؛fv!ac4l`E2 -?Yp$/Ώ?M#Ae594?Aݴs)kJݘ[wXLe92w?Jz<ə4epRh6 FT&d Dqi\oQPjZ8{&bI4!Φ!-iҞ+&;\?U3-hxm M=Ll"3Ly}j<90ia)x<:DF⅑ >5,qJlw4,u2Wt+7X bFk&n%o y L(+rWBiW)6og;kSB#{2l^LNDTRsNJJj(TH"Oh#?]7AƖ$i;TYL7QjBW-אb S& Xfd=ņe~?_7h:kA;p4r BuYٷ+zDgo_g˓#J^옸O>Om^ЪA l7|#Ih2g% WiË)8XWbP_fwTBO]ӇʳXH-Ń@D& +ʠU

 ' zHL4˅{M<ۤfC_?ǭf(Q^ ccWҦ}! I/4?MN7$27l_6t!M`)CUR,S.T.|@HɊ`f>(7p[ HJ!Cr|H=3' %^ 1]jvt/B>EmCyMI !CŶ~G:Ix D̐2ȭ˯E4z°H-Og>Kdqp ؍~k2H\hMf7tnz񒅕}ǥɩR%ӊOvր)IہA1[]EԀX}} q3I;Rxd)5#sӮH & LXY=n4 )ڞW :ZT23b϶AzV~V#v5(-E!a$hjtJ؝ch ))$*VM$GlE&dKOMp)cГ//WroVj"oU;ګ߇5nf۟$ϨJDKrG XBCD/]H ݧV/t>[8*!vD;a3EF պTHFJjn!" zaN,Z SSĶqr~iݏ{V2oɸ1BZg{*Q`"#҈!:v3kaJ7hAe\uuiɱ,f;\~ ŏz/1F4r@= rۣ'(2hvzI?hTxWwj<`n]JTo#Y2`0GYy:2Ko uHw4c'1(rzHE{m8xCo܁kd,ymA*# XČ÷)TQ<{'08ze?Dx?ﶎz*ebXc<5w̾`<9X gxD]!ޅ y@8a'Qo'k 2x \E}B AjR'/ hu&9oǙ3d  n@hUO&kQ ;-+$_ ofn.f3`!^l8AyraVȩn0yXGgc6V!N +e+/zZ})wu3mɾ]xSXQb#p uzi9*L6 P/kF@*5yC)< 5nư*?2+767EeiLiQcvS,4ޔ{L{,BJ$,>hUV8'L9j^5Nhlύ/MZVxt ' r\ :&4hBG\Z"(>9J [K nb~\Z&"Y-)GQ{Tŋ$NGx-Ox \.[KԢzaa Rh |n)M8 3'bS -XatUm`Q> m /JM:[e>G1F.QH9s֦sucwmUqFN>&sܢȊlﻱMB֘M┝g>.y&`p6h]4=&ThAr_jaP<.Ӊ]YR2ЧǥdV@0REE 1T}1+%6srAe#M)FѺ|e ZQ2lχta%;" E 6fcrkG2`r~"|cFl_0dmuF{2/`Fxª`7عShݾ[wM@g!] W}in#N"JLjqٿ喾 t5'Fb;KneZK² ~U!hW;n2j4 Xҹt#J_!ʊi"7sftvQpB6|/u=Lq\L!kH1kk#hYVpytFI{Ǥ^JFtMĐ^Y=#cm{]\p]syV"R^JLgR(w ~yS;3>{RעAQG)ٔ\gɺOd_H?\[k ?dG˚ٳi"3YE 3{ECEͻ O7$ҨY3CrHd~ɘNJ`9d7k@XU= AA\Em?oI~6#؜; |}T]pO,Kjurukigd!?SXfQeV6f_Z8G DI_xg|hC=G]*m=敔`I,HbLAŐbc0˴]O|~^`IB +Ͽѻ.GdX{R@ i(֭io׿uSb K'ny7zThJ*_EE?l˹cgr$/+/q2 ꧅td<<x YTRqdvm6ЯT];xK墾0׎:/R-jL,澥{ ɑV"@_M-)>A?d EuTg_ps%qϚ}~v*:yHƧ#dK"bKu50xzxVuO-qjiuHKLX"-)Ôl?#ەhMŚze@6/ECp%RTqc_{rke|/)a+wY .+j:TmBϰ @F˗࿍T v>!{<9DF' js&eXG߼yBdbǛ]hսeNL:@҉*@{> 8pɼ!x󁭆'"i҆)GeU'T8954&.Q?q1=QmG2FW*zR:;aBnrt` 88JVY*-\i~pO< ء %T&Elvt;Ne!r J cmQ>;"SP#OYѶ״tI*Ǒ=fܘsx gww0oN5ZZ.uh$জv.6X.GaS8ȅ @%7tJ\ d=ҟ#QGT 3l`e_g.fg0}v@WZm#ȇWOIKO?B:;bwRgkF;AbC:. U}i[I- }.16ūߺK,٭׿ޗB]( j1!H&y0Z\uŽ2v`鵧 F vJGa*ed ^ K#c^F$烋)8K͹^?ΞoǞWjAB0~ʩdk7;y _w-MӦⱈY{Uzi ;qUp ?Ȣ @h1ZPc2PtD YwꌼYtqKϰCRP+yW2Ξl|ʬf$ H>~fqX >u\A%D^#$:^-j'&-42+tc (i5 V_eXY": :'{h]i}E ՗L%V/ #%!7^c67M_7!:.F.Rx`56%yɤ9iXdyIw<(4vCxݘ-Տ\FQ3~k }_ĩ} ohxjҨ ޶Ĭףf%}:٠=͐.yiJgɋNiDa0ߠXxbG{)~k,n|%jkqllfB:ȎGe8<ćY#9蔡G9Ӓ6(؏p5(N7Qt.,:ڤM5X&RU^%N+޴,qxyLKs8%)$kwxs1( @f*4-tFoDMGD} }_=S~dc OoۻGh)62%P1IXyˤX` ٍB#u)ۜ0C˥s QPgp[*(d# SQB-lIC ;]n*_߶|aC̸,x}g19}0!Q/͠(\ =Шc=>G$lfWɜ IFW8k;B1tEQӎ_"M/o)53kՆb\u!ejdkcsﮐZ9lJX7bjrc$JyZA,'Cu38 ۓ=eMG˛E}c !30PqT&:gAݜugRXPu[2AxZ,[@%eppC Tx ~ZW7]|nAt/6 V-/T IJ| o6< tm^<*ν뎙V#ίL6#o)3M06eHx뎎g d#F[Sϐm\]_PK*FvcʪM;Spb4{?P.J %=n$lh0VN1}be9l]S٦eTX3w9OY DKvi )ěW`O,](ɫ>&d@FT3ç,ͮ f?=,J,r=$$}uaVۓc L*`"!-~'DjyӺ(mTb^0; 1/--vXa%bn>;R-X#CƏ`l⊊څ $2B]1Ao\`=oJOxGeRi 5xȽũYsWm'5i*L@v*~Zԑr\$Gα7vTiiwrJap!laD3u`A%Di[6 !3Ə^UnBa%АJ>&@z v=ɓM/@}4FpJfrn8K*l}۽'dnuٽOk *l?.9c.E%P^^٘''PbgPZL :cy-^7`cwy"mB2y,xp_oh(˶_ȰA y?.gwp={iUWAG=]TBeỎfȝ[9U˘AF/Q]x^gR)mG|j$uR?(*WufG:[jk)ݿ{[ D@i~`ɋpN&bg;02Gj^i (qygb(KB;̰1i9`0Wg Z)T5ኃ8f`foۚB-pQXR lfڟlLuC% ?!܎ѥ@S|q&tt}-_OՍ0.==iM"_.gn|FH.RC,#yV΢/{ Q6^4dg XB 7^4[)xw]n'Gaw08ػ`tbbFNg\r 'Jl.»q|ܬ~+)Z/$CRK-B&OTF'+sН,#7@Ӝ TMB`q붵Y;u$EDpw:.Xg&SfRWܶo4ftH+PbIpT<Uϰm^[!YzFcXJaֆ |ޙ4Җ*@G߾1Xz,2H:E5 ?iF5VbDdb,:$=NMȹ*YR{2^_K>n^0,Q*E.6C(W#[~}R^yvd#-N#W9+@6„dW5#@TPl>{ (]o!b <+ٗr kUJU4P bNiMN&f<_ګ0If@ 2+^b2I,}֤ BBq{#b>5"E+2"HtC>'-{+(hRR (ƿ%+N!dgn'm؟œ{G\Z#a?] ylE 6sR:9(>HR~va95|\S<ހ>';hdHܣAz#z>} A*I}J ,LN͢ mZxyZb*s$ΨR>@﹂{g;.-&8?vV\`/%iE%`UK>Dc׊8|PxllڂK`oo0ʇ#ޗa7Gc-G(=7(ueDՆan1MKi;?k~kǻZˇ^k?g1˜Tv*hTHMwO~w^kv˱jbOtIڳQcmC04h4mH{/~h.wLT8q kNN-SMa7~\j3bAӦ/ݕT8zCtLK iblG< Ȧ`ګ)_472p:f#ڑ?S^X#&TFQZD=ʎf;1谯0!t dtfhn˄ O@67'Z<l00Z%BPsjMDh>-zԎy݉ȉxl^wR]WƉ;V*yz^I _/ys=.}(ˆ꟏>RF5}B[&EwGvۿ(4@ K\rHm]Pz5ga4$hTPu;`q^xQ%C#:>f1-̕ 6] I`%0W!SCka0o,1 ~wVkxM< eŒa3w3~E%6ÎHH ڑ*s_F<^>>dXv9fO[!n)eϜ>Z*cj{gr5I}\ #>Ͻ]+UFoC"j`h5q1;#5@ؿyKSV?eƒO$[,jQaļ7f0\o/}3Rˊ &{3w8i}& Dz|щ"Jχc>9|ܾ'c_ rȋZCJgzo7=)]:+=DC&g(+ƢYuͺo͢˾V ֽ,JѠ]-PU.n6\XjBZ.Yb"ZFo̐59 ^\qQZlIy×6a!X1I!(dgeDD]@/+V0kEY)Pu^ZJ ?i3bu&ŵ/P} 2W4WKtÝ׺Prkc?.c#φ8}a6ݓW$<ۖ~x}@܃.tsfﰦ . uC!ژ0 )EXn\;>VGQF^V4TB]S/[mȵol3.{+9.6,22q(QQc +]mY_s0"<^E*kJ6gwH'Hg&h. \، Ɖ,լkfS ֩VFvr l{??a?7 a" te M=ϡxipn(j^5,üъ^JP/2u D5_t5;#!_effwErgM/ h' 7uT&S"51Os\kp5 m](w!;#GBY Fj pgh 5 ʓ' tü\6pcrQЁ[h]ߨRYC||=U㇂uOsLظCuDzvrT @B㼠(ErT> )SQzG1CZW/X`K Sъ>PL$-5H9ꢖdOfm"L,{zE+eh}f)NWt:YO_|!>gfhoS1p%ɏ >XYLh7ĝQ"(Mn*YzC WNx%qSG L0I=%#O>NR0Gaöh Qnfhm"EsԺ)9ӄC ^{b0$pyfXXA~1 YEb5# F Y;{^v=a|6"_:/Nrr]OnJd{VHϸ]AmC#sQ|Ih~+ jN#f%ߟͤubr6fhNNP-'WNRnTAZ[mќ"> 63 c1q j)r᧋f!nel4v:Ԩ|g߀ܾ_V$}#8q٢@8W|`6nFUdVU>NRvn2zS A*Ԍ%]Tq>EdL<kR@A;&d -2 GOMk/s #7u'́[Qx).7*O÷p-* FjyotoCT{m .qvғa8c~w݉Jk֥}6 ^{o# % H 7)a[ꊬ '?Q5@qѢ¬!To%lOUggK0=ZO=4dfsy2!+'rdBWQ*vUa>g @(Ns_Ϣp.RQmiAQfftSPLjlB$Kj9cLMݘ?/S!2Lb9:6ŰիS=:&?ԔUٝeĻߓPu vN;(.`uZ &`ߚ!,c IsIpT E>m{~μ'@sx\}W+ gͬϽG5?b)V){ ܖ-لX_zF^; j , '5 d!+ D%\㧾pW}T $@ KKC48\SŚ~]8LZoCG-i}1pqNp2  fdu*nѸ^lB{6جL4Utܾ-[ަD/;B#\/ vۉtaf==!HD%D]Zw+P\_!#~jw|n򣈀\}VC-%G1i`#MFx>Њ\+BѦY1M1\Dԩ#N[K6F6׺|UyNfXYVJMuR~ºF !o0k|<5EN|_؟򅳖WbiW7(f/("0Lݙ(=yT0(afZRk%)r=ṡ4IZ}(v1bχ5H9m{yxhL|aJ[Nq(c/NXn18yғ1",t@cΊvpW\/rِH$x0X{`͋"a1RkLdӘto6<qMmҏuYY`TX͖sCꊵ7oe|,w"F(s-Bgl^ k-ڃZqw5m NlHBQ2ohۀىri Ξ⎴=5&?/H2%/ꆲM5pPIE.^ o¸W+M3-{-O{J>O_ )7H%s\/񚰈5km/*ݹa%ࠄv)'}횪kge@HvHΠh  DVuf_*̿d!T6h-2TX&͟.v`9?xQ;9v/\Zҟmv']=QGhQ+rdʍmBCe5(T%逝:Z8dIi#WRTL9Ē'w\ <!r[ E9l4?h1Etg_=ۧ? x087:gO#C`?sϲ1sBp\-wn/c) 9$tB] ȉM\e_M8ҩ 0k4 jϫG&,!-%&y#{3ӳ3YLC]"摵@2zitL6֩cd3iՆ˟A+"O CR9@ʀ=a(ܓp8q)ę떚R}h:}N(=G] <amaÚMצ.]ÔK&H(4/Ÿ՚ y@pYVlΧ<Aca]Q鬆O0{W?U5X_(M_䒪sbxx]aV!t.`?-k~z7P/p}174Q k >~LA$.K=x\˥x H'"{)hؖAbqͲC՜~᧏U&Ɇ/[ g8$^Z LƂssJB#rrnZW_Wq+Eӕ Fhb.jN TB*}$uKg٧Zg}h\z>`g-qP= 6a=-֮5Ҫ+푃 Z$[F (~xY%VxEٻ CD)n6@v}^?4] ?Tn.$'wYąFo aB}LUt֣rpeq$5X!+˻.@2[暶=YOmxZ:+mC˞^V(gEN>/c^pe՚xjs12h z8Ha.Ҕ6r[[>e+אaiX_&=oC rNb3|xK~L6Ƚsg J]M_)냵 v`rݲň-mހi5j_ԶϬpRSbpu&P]*9X,sm}ۖͷks0c!7' ;aR=6Sv |Z*[̫L:hņ|E_X]BL՟̟qӪ)<.*cIRyS,t1ݛ R)sÀKUQLJء,]9*WշO튾߫U?{LQcU&D+u2T5̟=K6FKDUU>I/7\Ϫ ^T9O2 /5S~4LDٖ'+NGCƄvBȔ$L"Ck69>K}V XbywDL8.Q1,gҾ#:yߔhpNUcU-˟l܍u۔%e4K^;k_ KwGy^mOk]5;Vvf%|L7YEQ&LLX1|>f]f^r"by( Ov`]ٝFbu'0jFjSrND'*D}:){3\]m%3VzSC{ Ů]V}/Q]Gº Kr' 6-N]WV~I9oQXY X;^3_vnM7F<.κK Mp}'v/7=)1FqfNӗ_ 9.ڼG{}gU2Ue@CzLѡǭ%WJ8lDU&a1{:c"ӿLERBk3f";t&Lq[VryjY2BK<M*k!OTgd oKr}"G(8@qcȴюF *>4\>JL⹧KOͿ#8~kXy>LjF<\]"sֽu!b٠r8J3RDMzg[$(=O$YUj6ZO9'pVqҝBd pRsZ2 l> t}6zy`?.ؠhCqY02H-*RKmbTT ݺ'`>g#4>Owv &3?T&I qڴ%HF~]\8B&>BFUV~]cFe{ xZ{ ''` rjeq^A;M-CCi?5UZaza}w%Av ԩ"1(MF b~=S)ɔ&Eo$" }7}r¾^y 0Wn6\˿9vY&%F?y•O`/mw|]\#n^v*>>?eLè Tj8=a 0S 84XfJn?.aeH.{-C„LZD̘aGSy)Yr3 7( 9'%a0xc$7f [z1ЊtMz1#q$E 2ENenaqI6b}V+B .{bAf`tn)))nPtOM,WI6Ah7fyc/w? cI!wid;/'i't$bH^iK$73x=J RsI3434(U}nj)U:iV'|*L- #6qJ7+(8dI4>"nWfX#wY3O,F+g9pE\f_?^>>Wd42<Ճh˘]PM9/Hr=4V軜=ij=ؘژJ݆62X9b ޅ+DF E FllEnH+r-dSsa%$LiNS%_bÂ?OPNŠ,T;u3W~!*i8:?6I`[B ;)ŘS^=HPvoOw,.Y=)8p0i`07쒺TySR_)ѐ;@$oMjsHȓ')){~\.UiO;Dhc=J`(>׀,HusSSsiah J]'K%7wP{.i\3&<]Eti@"FM-G^rtD z\G5S>R ZRA ISh?c˟2O\gBRS&v̸vײ+ ta2;p=96ǝiҪut1A!+2#Wo US[л|<*\OSdU6 ,)@Ϯ,|#|CFuZ+b<γL3cp'Ƃ%79y|ٮ}bUaD#1 ibU &+b&Jtwp‡Y@S}vxx{P90s*,ޮՑ#pD7dkѹ`Дl߫S.췁Oߗ\bSR;E-2nK.PdgDMk.o峣VG5Ϙup|Pث&vG9#K$3U9~:lk=rQg o]u[^}HeXhQ Ls R+Վ$PV>N%mXdq\~,lui㘮&k ;׻&l#PT,% y}>؍uG<=[G.js q|9!1K[0+f@X;]%S *D ' ^mig-"ݍ{ |jNN]$?d(KI$g4y;N8Re3;hkVoe.TYJ u2L>GHnZK?J;J<cw4wW鰲VCW&u;x!^HmO!]}\+eZ.z/ƣ'O-j_ CxQMM7oE 0W, blL"g]qtcYJP3og_ gܭdfڅ΄~Ujѩ##r/N)PñJT_"!Ƹ߮*y FO(?w} "i]Hl td,Ҟ̦=ؖ*WGlD0gq8Ri -/`t',~UTpz0س$1df[>FԊg8bS\±crq,'أٶhNJ0O֕̀R z.[ a} XŚ1ov=_u4wr`eͨ54j|, ZyЂ>ͿaC1lRJHFV}2MV\˼`K 4ޣ2TWh_p i,;՗۔}C0W(c{]uܪ7*3qfvd§tIg 6 K]6ʢ]gr}IԻ:z-JH*PQD]T} [.$ʒWuf̺o _jZrn-Pm=xB>Ѫ[-*{ͧIO҄8vyv!^ #Gf [תh+&:{bD~U[׽I`r[лe2me ?ۑ4P IbmN|&|~[t YgLzb! `?Q(&jH;7-xj9 +=Gby[Q~f$j)AjW8'd3PШ~e3aWw̘b|xh*kzmUAdDqYyBnODʓG)߹&̦iD]>M;ѵY -)ݬ޻cS=M7ED.Zt旵9'v+DOS}+c)yzѫ-.kCr[? B%;%H`3˓Y%EUqz(&@I+H  UR u 畾U+$Wd? //Nboun`_|A w=NjXwyfkGZ\%fl(w ´WČmx|׫M|R//FKB&*LoDOns̃FԺp ڵ"u*Q^9f7߹E`!L`W.Lh!q{0~ytb7 #U9˳ur|Dq9*3ٜO'!;;͚V8oDkyN&UHV&]j)TƍTlwwn2iGw,n!m~*edNկ3%U L:f wM"FmFǭڻ(裣޸!;0@B9Qx.M6еHS-Uv ˣFe";+gBY^2|ģGw-F;u/ J8SgzTҾ{`L9|lR 縶mJcv=9[}O񀞜 L )dTT=ͥށ>O }{/Bzv^s#H) \>}.V U W2t MLD S+O9h-$eL%Jx Ah\[~F"vn ᇌE%~J*g#vK1[G, #k2lߘk9p*`4kt@wT\N^:s9NW8 GFH weU4~X|OKAoxiΫ7wǧ\ }>mLdUk8~ru"?΁$xbv5 7|*I٥d'!`\ii'(y|V!j 5'#x%agEnAlRwKbu@{P))g?c4,k FJEBLjNt̀H'larlʽ޲652 >_}Pc}Z0 F2C}k-Qw=0^Y:tq<32~Ζ t6Hh^֝]bQp{< J@) F6!qL4<@LIQv_fӘxNm q!tWgJejl̹%KҮ Ck,HUãJjI63bq^]~NhjJ[2Y9H|}S_U6C"m!\{p(Vzmccֲi3Ic<@2DQ;i^'[~ Z6 Lt#/xz&(5)` 2*h"0ibC9i;H,9XqU/QS0ֿb8 ,\n.b+!V+?^_@;R -u[ԫ>D5bT Qq9Y6{ = ]<m^{4ɸ+MBx.&pF 뺟6I~? UJg-a̤,SBQAla~JlPD7LBu(1d>L;j$X,E#̜n ](pqwRmPlx>+b H2ec&0Nx[?aSa%/<*]Q(¦:b ,ް Fd?93K=c)|7P{Pǜ,h8! NL 0PK_}Y"Z-T[ŝ,Sk t9A /H|J3݊c;-Uc~ygdٛ@B9P@&.nCqn`;E W4k6b>Ky{%VT!3]l,Q}F<~3-Wm6Xvq\I5"X~;6v;0 $!4|i{!90g6d4N̊2^kGGr̥(EUUjR+;Ql\dՖ W WULySR?[&N)sFO.;R5AcUIjq蓱[FL@m S#t$K0 m}՝(,7i{{e,m֯>(ށMTsD8#H} G+kI3Ns.҄RY̚DZycWes޽c}l}*I&˝z4ܫ"H,9B*Dg'>b$?kaMWEߐxHΟؑ;n<6;>*fqކ g*:f)]- 9 {EZ CF 9Z*]dl3p   vigH"ױGwWدk=h$DJ ˢVdSvg6N~Q+d \ R#r|1 jsF%$]=`'?ɣqR]lg!%kbgT \o.KNg_B=!|5:ѱ7j>3kNS QgUQ2,AO/BZFux|VOW4X1ATVq_QގĠ=<7wFQ>gUj,*Xm{#$f,4 qL]0TpZ7'l?'ܞ _"dOYRsSS32o7dV9oZ«X 88-ݧJ"%:cȋ|nogwxP }od9ZEA!섢PdauE25G) ӢnHpQ#O94Zq88«H؀Mp4 Z;fM1&Cbgz HG1Z^ڻ3DƸ|s-[ݭRO~&^H/QH&d`y."fPU3U>BhmBY"& uQ ] lp_m:{TشK '|&뜋~ElĶ0Umoޏ?/8r[ė*%?^SV쯶emMμ6W ƉemU驚lVP!-mO8Ǡ7ne+9$DFl@xkBέ޹Zja[>0}r!׷ 1rv[mbs\T EGw@KLAWktV+ @Բ2ܠ}[5*$oިȎN'maĀA4XlPu';"fOyA p7YIÅ75?jﱢxCF?YX.a^!w]WH{3,ťx"XUj;뀍 aO<f]RVH1Ԕ`~j'®[F "*;f6D؈2ߤ8TGO6 ;J,_:|z ̗eF]0 GI4@I*;'$H_ar}&-Qse9+5a6o'xEm}){'|]Ћsp =-ptTM~ htp܉b IUUOn5 %u)ReqxK=//|?QTR5R޾ ^ǯ̀Nj=%swVXTtZv@6̪.(OztJ:>p3v Єo\e꣐:hڼ\AGA)꓂ĉor3q|1$4;Jꋪ?V,/ LZ؇ 8Bj1I,Sp4;˾aᔽLn&iQw&շgmT>,I pq535)= $}d}?*}:f|ӆme$MY%qbC*m#IS06J3i1W(v̬6B躒Z9H qGDwgEX YVCU00Ƕ(:JPD Z`@ⱔClrGZӷ"FGydC^MR 19ÙpkXցUӠժilU-r y,Rq▚|MVMr t`,qxtşG8-2}ŗ#h;@ 'x.:S(Vuy)ɨӴ-AZћ] 7N|Ұ1`5S*/?> k'kM3.SXp/#5$ʭz;fzɵ[֩9ܭFEn HHÎN4UxHwlN3~rB?oBI?_yhem;-VHOVjp?mRS?$*D Jz$井#AL3^R`H+O Bf[zY^hOo"<X8*YsO!)uҾ6V|,fȁgU=\;_QHk-?Y^hECk _ oy>ݸOS&D|nڢ|<,/ S 7ä82F ôt>#>R*_膎uFP>_)gl~xbPL]3X"F\՛QTabQ "w}xjrteQYϩ Cq]ѫ|jnqё'wPs@ť$fiIR!Tן\I:#L6@D8,x1B-UOAō'Q=WSh׌^d k{@ "ELmhyQwQj&Xkl98aNqA q $\؛ĊLH"\:nTNCS9:^&Tl˻Z Z[yOPCs{E.Vg3VZ]0*ٽ 7n4mmR@ d(! fmnftna ٪F3"uYu8D5pH[G,Ǭ\wrRX7Dxin-v.h~J@ୃS@}聚"TvR?O ̑QHCzL{͟Rbuhfimd1_)!qwO/GeiݽV^d+"'0Y)\H:mN0.|H)߄9dpey83LΐNYH*NoЊ tFYp:I鼖ps"<ew(t,9dVS^Pf ѕe|aE,OcV*=}q<E`]D}Jpk46,c#oFա]q/WδA#MBt-|' ]]L$1#Oڭ1X5~&Le-}`MbpuIކo'ʓb֪# `O`}WRHqAWo0M%z?| !@ogm1ÛhG>&=k≎ſW^Ա\*۾SAOOi.7,i!Zf0PKN9)^\.S1rn:d"مc;>ٻ5 *ZSn u4}f~=LFv|ȅ4D7v=ߜ# Zv"ҩ3i.G ?F >mE+iKJΊch' y^!ǂ{A]&ۅosyx_ll?Q|~:H _`SFf)p&7aA3 G]CIYhլHTS ΐݣ\}ŰEtV'zߪ58h@!v쌅9..AU.*xf;$L5HqIO;hT07L=9iP8 hVqB]/o=2Qe'ˬ֖w㧰!T~`c" 6xXCPvO {T&ojԁ__waE⌴K]=e.#&&LVmUe/_ Di6$1r|Sq9T˳v8Rx(+ 8SjK)ȃxm"ˏkXS>9A" yȞgz38ɩ^1(Q 296~L8G] pVdLxS=׻,S}Dn8)kF䦱P-o@Iu:}Qd;њO l͂Yĸ1?M\?[Qx5tBL9"bzVXg[ϴ0L ܶH=u$j?^מh7b%>Ld\1:7±iEt 7Xp&sx^j0n{(O˟i }Z7\8B;psmqrRD|.D֒OͤOa ɳO,O`x "t\z`wL$a4ON 8@2Q)7/u& s=bAn@]JGx?;miޗP+ZaK'V~kj+--1Z_)#2&_R*sF}1lMF+OŵZI\$: D6Z8q_a*6:7}4]N?.p% P];g4,T Z{,Z2V MH?uL" I4EN݃yf\Cw))KA: 7_p@MQD]8(uOOQ<=$pŽaŪ/Ǔe&)I?p|yNwFuttZYǙ8 5FŎƃ| +n6_3{یu2Hecp#FEyrzgX4,';~$݀̾BSvʙ"P|n`ެx/uP"aΣwd~TUٻ,_V;5i'ҍg5qt@qa6 ׈atmh~nmO"юʗhdh H5㒵N 5iGt3Jh QFf.+{b\)E!-hGTWX 2$KYX[ c@^JliJQ3B9 pz[՜6MVv5dЇVw(΁0ww}&SKBL鹗<ֵYdv\\~*azɾ-q7a0Xَә6 &* p߱*FcE\lw O4N:F{D`G)uFl>g}h#N m+SJb %6Lb?/tޱ _K/:Qp/q H eSfM2<4O r8KKGv3=UW?nٲBSng%ݫȕVӻJ/]Q})@g╞gic@ijB ,].]{eǿxw-hș_f4jb'v๥h ,bh\YRL{!~ΛZ7S5-MH0@܄A!AP$=oЋ[ _F2"I[HV0(r43uZ@. mS%:$9ڈ?=U Çڇ-G?i.}7n΂dABQ[^x+ypPA!8#lճIS =O5cݶ"G\Mc]LYʛ ^6Lm2G/'!2_FߤA`U$Ӱl( @Ǔ$Pe/#%F+r,LDcts/ehXƫ )!L#)%C֌5Puk_9{*3=2w6p{i那]-v 14&ʷk I;LX,R- U}fQ"fhٖN n7R*0*tT^2Web[z${W(Nrϔ6[7uvJQ|-KC:a2MGL3S;@]ڎq!Tx`mК΢QXjK[2JKM4!Xg/]AmĒ< nJ4k&צP[w VcA&3e~vb9@Q/gQ2/(94X0G֝hvHE/dRK9{"ktNLPn&ȤPraJpPQ-2 ZʼnYz4:~VsDIk;_W3 PHx7^Ao*hBT۾.OHȢӭF4n܌RPϣ^ؗ}TUBH}k8 yޠ+Y)a(VvVᎍK0wP09a=S}:Qrܮ&7ݑ $糑<_yQìGbDs..&Vʾ1p::=R_1 ȴtщ [mF"! kΜx"yfmI2n:m2jɄ%j:[S[/NJ3QqG/~|-Hr"UT&75(7; wWl8*rm8I4k Tym=%JBH0۶\.Lk?N1)wB~| ?;r?&$swKHPQb{ݢs\KQ YZ