openldap2-back-sql-2.4.46-150200.14.11.2 >  A bp9|O[RbAwLF_`^i4m6|Ɍ?>^i8I5gĩ<`S&^>/~%)p<$yh\E4쯈eBL-40xA3Zܿ3D ^QXFئFA*QA}c8F'4792851e3e15decfbf88f0fb9c0ea8a94b6965c9dc2fa487c82247c1836a747a8824a82dda7f8f6bc20799250ad54b3c5439e55ebp9|?(37EZxs~ऊ N&\ܟsa6Z2zZa|bm)`L UCkt.ї-uetR0X_oJPhTϿM{~ U,R&^ُo\'Slbqrz?g&# ||[:k{A솾~^NdpVZ+6Tmd 2 koV=S2- 8Z-JɃ_ Ԉx/|X;o/`c$wjU'9o>p>|?|d + A:D ZCC 6C C C  C |CCC&PC\  & (`8h@9h@: -@FlkGlCHmCInCXnYn\oC]p$C^t bvqcwdwewfwlwuwCvx wz4Cx{@Cy|L z|p||||Copenldap2-back-sql2.4.46150200.14.11.2OpenLDAP SQL Back-EndThe primary purpose of this OpenLDAP backend is to present information stored in a Relational (SQL) Database as an LDAP subtree without the need to do any programming.bs390zp32SUSE Linux Enterprise 15SUSE LLC OLDAP-2.8https://www.suse.com/Productivity/Networking/LDAP/Servershttp://www.openldap.orglinuxs390x8 nemm&@#B!qn` -pw0ZIU0G!mS`mD%qA큤A큤A큤A큤A큤A큤A큤A큤A큤큤bbbbbZ[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[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_sql-2.4.so.2.10.9back_sql-2.4.so.2.10.9rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-150200.14.11.2.src.rpmlibtool(/usr/lib64/openldap/back_sql.la)openldap2-back-sqlopenldap2-back-sql(s390-64)@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libodbc.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.46-150200.14.11.23.0.4-14.6.0-14.0-15.2-14.14.1bx@bu bX b; b; b4t@b/.@b[@``KW`/@`+_@_@_/@_FN_?@^^^*@]B@\ڭ\r@[H[@[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@Tuwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comvarkoly@suse.comvarkoly@suse.comckowalczyk@suse.comckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.de- bsc#1198341 - Prevent memory reuse which may lead to instability * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql * 0242-ITS-9815-slapd-sql-escape-filter-values.patch- bsc#1191157 - Correct version specification in ppolicy to allow submission to SP3 for TLS1.3- bsc#1191157 - allow specification of max/min TLS version with TLS1.3 * 0239-ITS-9422-Update-for-TLS-v1.3.patch * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch * 0241-TLS-set-protocol-version.patch- bsc#1197004 - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression reporting is bsc#1197004 causing SSSD to have faults.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- bsc#1187210 - Resolve bug in the idle / connection TTL timeout implementation in OpenLDAP. * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch * 0233-ITS-9468-removed-accidental-unicode-characters.patch * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch * 0236-ITS-9468-fixed-typos.patch * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch- bsc#1182791 - improve proxy connection timout options to correctly prune connections. * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch * 0228-ITS-9197-fix-typo-in-prev-commit.patch * 0229-ITS-9197-Fix-test-script.patch * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. * 0224-ITS-9428-fix-cancel-exop.patch - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0219-ITS-9413-fix-slap_parse_user.patch - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch * 0214-ITS-9406-fix-debug-msg.patch - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). * 0215-ITS-9408-fix-vrfilter-double-free.patch- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues where openldap would crash due to malformed inputs. * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch- bsc#1179503 - fix proxy retry binds to a remote server * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of service due to incorrect validation of modrdn equality rules. * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch- bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch- bsc#1172704 - Change DB_CONFIG to root:ldap permissions. - bsc#1172698 (CVE-2020-8023) - local priv esc via start script chown -R on olcdbdirectory path. Remove chown -R on start to resolve.- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch- bsc#1158921 libldap-data should be requires, not recommends to help prevent user confusion around configuration ownership.- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect authorisation of another connection, granting excess connection rights (ssf). * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch - bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth incorrectly to another backend, violating multi-tenant isolation. * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch * patch: 0204-ITS-9038-Another-test028-typo.patch- bsc#1111388 - incorrect post script call causes tmpfiles create not to be run.- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh - fix the script- Emergency fix: move tmpfiles_create post from the library package to the main package's post script, which ships the tmpfiles.d configuration. Fixes the post script of the library (-p /sbin/ldconfig does not allow more statements in the script). - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) * source: openldap2.conf - Added a patch to let slapd return the uniqueness check filter used before constraint violation to the client. Fixed broken memory handling in affecting error response of slapo-unique ITS#8866 slapo-unique to return filter used in diagnostic message * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch - Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- Fix CVE-2017-17740: when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack * patch: 0017-Fix-segfault-in-nops.patch (bsc#1073313)- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitionss390zp32 1658374427  !"#$%&'()*+,-./0123456789:;<=>?@ABC2.4.46-150200.14.11.22.4.46-150200.14.11.2  back_sql-2.4.so.2back_sql-2.4.so.2.10.9back_sql.laback_sql.soopenldap2-back-sqlbugsexamplesREADMEibmdb2backsql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlmssqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlmysqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqloraclebacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlpgsqlbacksql_create.sqlbacksql_drop.sqlslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqltimestenbacksql_create.sqlbacksql_drop.sqlcreate_schema.shdnreverseMakefilednreverse.cppslapd.conftestdb_create.sqltestdb_data.sqltestdb_drop.sqltestdb_metadata.sqlttcreate_schema.shtttestdb_create.sqltttestdb_data.sqltttestdb_drop.sqltttestdb_metadata.sqlinstallslapd-sql.5.gz/usr/lib64/openldap//usr/share/doc/packages//usr/share/doc/packages/openldap2-back-sql//usr/share/doc/packages/openldap2-back-sql/examples//usr/share/doc/packages/openldap2-back-sql/examples/ibmdb2//usr/share/doc/packages/openldap2-back-sql/examples/mssql//usr/share/doc/packages/openldap2-back-sql/examples/mysql//usr/share/doc/packages/openldap2-back-sql/examples/oracle//usr/share/doc/packages/openldap2-back-sql/examples/pgsql//usr/share/doc/packages/openldap2-back-sql/examples/timesten//usr/share/doc/packages/openldap2-back-sql/examples/timesten/dnreverse//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24987/SUSE_SLE-15-SP2_Update/343a9c43b17f3fdc042a8f3ea98c7d12-openldap2.SUSE_SLE-15-SP2_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=87d97f5f18c7f8f9882bc2a9cd3a55f70f17f43a, strippedlibtool library filedirectoryASCII textASCII text, with very long linesmakefile script, ASCII textC++ source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRRPT[Uh$S8myautf-840219ddcd89427fb9e07a55bdb9ebd712d5ff16785620420d667f74aa6251627? 7zXZ !t/}] cr$x#F8﫜ݟX<|-X =͏m tĠ 4aPc:뢵=~~ZFeǙ "'ҍ;IjZ0/; ~>&|U0]U2tI@dxYHCϯ~Ѯ&ZxrKnT,c GKnb(5 4t%F3`e"<D%"o,d'߀n @mP3vݴ`%(pb l~6492͢ v*0sBMit?>_Z`쬷 GT.MOݩڴ~c&e o%H.\Ͷ!xki+^6:c LqkC!{I[_QnZ<04S" &#V}jDHCׯj ͊*i .U"׋AmV!&" Mp2nP7W[X'&QƖ CA_?!ZO+ŀ-4I٣ceVgifOo&r= gO`Ww6I7E_=nMn5On=mRE IXfc^4Tǜη(Vw<廅1Ry;Y<<@Av<߲1׉|ݹ-&٣t`^tv᱐s:P/y&]~s7K]E* jg660+%nkZ!%O-,}Z@I˯%ҿC[Mejm=H hjj@NA>O^X!mL ,[j}my}~r4:Y68(R/xF$BZޞ?1t3tt8 ?1 fLcq@ ZvG+&V^#)r @}"kv>Q<4[l*ftӉeӌ17I>p&_xNH9.jQ/x)9Z|`G3ϰ3gGGC΍~})"HUW _fRhN? qHhΥ{ԩwAR z6'{rr?_Aٴ7u~.6,P*_pEפ;6ĘEM-i{ `.+9e. gJxOk6'B0"1踛t+PLwtd!\[.>ƃn#j2b*%RSB;v@oHjf[nl %< n6aG6/|bXNvz 供*ɕ^U!}~IWa}1 8!'..c5Ze2YLWQju(!g`%t&Ya# Bk|sw[w"rN 4̖/݈juo'R\QG rM(]NiO#M f7^ RF3H ՘.8+whԞዯ,4G]%>C2Urc},5;.V1snv-c[ofVmJ?&k2E {EL'L5lOQThm:Km~\ Pi7+6-0' Ri&q dG "KBJ [T"􄉏E,cw@^Wٌ꣥oaBԯM ~98_^ J#hFWѢew3+H7?G: Pold݅jc< 5$+fWÊZ κ .رXLu4sַ^s0!m  8|'NӜǼK7NCNgZߠD&kBRkT6 D;AY4—!L?k׌5L^9hF3&$=Yjq!,fۼXKard(Mh6I!$ )5]a^G`1Q02iW`fs-N-88`n@ `^Py譄πf{ɮr>~t+6Qʦ0NA~E5i`q ө Ks-4M(D٤iz3D}yݼ=9`ݟu9Ơ.Ы<])ӨK\'{eo 倁`]UG?+KMmKU,eD.ݕdO!6~LW17F b'#b-TCSdu\kj|m,MWX #kb_FFpΝ̥h5W)u47}GհB LU_9R lu͌5Nuf 0{( ersA+&|!>3#^3]gU1[`d`X;P*e'm\mn`Oi/DQ|W,j"8?hl3iBgMk(6&sWYQ^n)ٜis[~T)0P:Wj}c%ɳcubHA&TAڞ7 61,!dI//'# dS $XsCÕ9^VmUhc׻֟VLw1Ęĩt1MCWuv(H0hQ$K43sQ~4~aLd56Bg妀̯D":PD]yUeSQ:rn,E$Lҕ2<%^?zCfVd_y.2Ӽe 1k%SuӋ ֨yW+ƌ y[;<`T_a,e(6>1H){{v rsdӋB~'[LgJzM?Z13NlTK WY_kFc4g#GՌ/QxTz XT d1V_Z ܎6y"6~ uzILXmaD6οڒȢz3vEeh75](0mw$РJ(7i_f`ܲO8XH˒Kg3j<.Sߵ\eL|Il~Xڵi&5;"7G ij˸Bg |1T=?iz5@h#-<9|2)ʓ6{d(宾^N)Vkp oeXŖ5SzȾ8h閩7 L; ؑ9DfƊ"[IɌUw˧ʛ ǭ5c!x9Y*VH"]wi+K%U}r [[ف{"i}@EpV%s ZA8yo)]{(2g4/Yr<7]:hvRjL|<Ϣ?h^K`Py1\F·<.Ϊw.DQ*ޓnrz :c6X L dxWH1 o1:8.B홉1Tu:@gpGۆF"I/uB@ņ&Re2=4v$З]ۧGؙVT?8Gjbh8R;3e5kTTC\xVW\^)&180o{| 3|1z}1bmeW^B5ۄhlQrWojLI N QhcjT4-5X@j&QP\.̡ZcO|oBld>f% *" lz|;ܤ`bPkPt.NPkwTlFvc.>Sq Q qy.}~Ss|&oc?VR IwiJcDI2cn'ogj,>֤L3 %dc6 TPch 1ns\~u OP7ql}\~Ͽ%52n '4,eԻ $8'oY|Vmdts,'͢%Qio@3Ew@̱U4۪sqKh|QHq˹5oe!E;@| 1],>SZ |Ma| ػdy ({,?Y⭥}Icނzg6c/ѡ^ՙOcO3{;^aH_(%QW@W!E8m )7`W/`kb`ņ<^D\Ui<J|>$ҵrKeY,\t!nA1q L6 *K! M`L&:vTd+lj2% ~摴BUJ«AEN/O| ^g!gyK^kHE(BaV4d{OBrl"URiq qAse.}e#'+T'*cR0D tr#GWc]ؒ&Ŧfz2$L[IyKq<(ay MFf{ c_@chB] vS[~bӻ!چ7fS>h!f6c#ҿ[Wgl+tpp o# Pb@̖ߜ׸4!vN8|'Ar hT1j]_:*!&Jld3Ld}VkE/@Pci[ j.z;(?W@wo 72 ty% 3ļdG17Mmvz[P\emY{ i]H!# Ii_'gW ;CJ@@IcKzrɥ 7;Us7B]83昺-|_]!5 +`}|$Kkmi5a3!)d! X5ACSn,'C'jۆ@&x'B AkESyx"C:HW?GBv.6þrPuH+EUcga*Ǐ[R ;{wږZ_<-xh$YqT!-H\|1\2LIhs )hSZUWqBrVI?Y [`bupz؟ӀI,fz+N}zP{pO^Ȳd >CcAz4p|%2J!^p,d$#f1K'\t}0urU(/a ʁvd2xxi$GQs`mQ9[$JؐXsNt2Qnh[p7ohq~ ]68,'F<,F&m2%9kLz]9$ 8iLJU*) ^D>݀RM[&8\+p 힞]zMKT9L:@\ZuM^"?R/&!1V4eBLb!Uÿz jVDB<*rEǯz#WPob%L :#f ݺ%L%WFC)L>0ak^:s.KݪGb.|H3U}di>b7[7?%|UyNʐfZ3p;+T =aYeEfMOnvr AR#̄gzhL03=97 PFyQYVT K07M!&Ж|V.5/JpD0Moeqg %=EV3$Lg+XSѐsp '/*4=90uBl/xGzWnf4 Gvŵԟ_=_>xɉ\:tH*b_U~>吔{NDE22_Rl(,@ϠṙzI;Y %B RP2zc g^Aݫ)>9RP:"9$ ZJLwD:gq\ 11LߧGi1KuF[1V?zlt4d@`9[8^*4F/Q?x|5ND% 7E^RY\)%H^YlTgc׷ WB[2qcLSL3'\晑a}c5xeG(2"xt,pUϠ j{etK^31_J(cDxc{<`ÍJ*{op;3;"DSacs f '^H?68M89z1x@Y l= @]^%R;`ق5VMoqd~ w5ȄpNí0Y?1?oXPwKe;y£w+uEn@#w|]y$^|lp^Rp#ur9wB\m;-J=jmdgrU>)[7d9n. V#lQ-dq1)Й.i48u2t.ÛcᙿMN=E߇*\u_-`G]}R,(C';.T>P< 5ڕ*K[G0^Pgo D[&U.:cMo|idI,֖4W X alBՂJO A U ..>TGM C}8w扗 P˹=(s fKR5O7tJnji#r "c)?yw2 5 THlڇ[[S^}z%lYV?@G5%5%_׏FTtH3W[&*L؊(.瘌UMAIݻܯWBU%O1BVŨI{҆QclO/38SPⵦDX]7PZuYu(vZ/ 㼧p5c\B{tLY-W(㙤'JEajCp":Go&"ҟV^Fw\@FF1-I[mֈor󪣯61=iMܕSX=%ppl\{K.W"/$Fશ9VqBƶ -$0gw)pӲ];0]3v}# ="s0n@qsZHc{5k2϶ iy\Dk?k|r|*orkhgr;ZC妔k7%SmoWb w5;GW1xVa;#/iUzq[n 4 *+b]1ğ{f(E9jmLp '־hp EW5eiw9_Cs_al)a9rmFK_:5@YckE2ShD$J(VȌ(u 25=[ hnm:`´'^l.fϷK4 lC /?jdJJdW !ӉH$s򻉪5IoSe?5хBog|# b}.'X|:J5w8"π]? rMCoLv0eid]6}:),Π(*Ô$īRqH(( \&%y$勼#HӲ Y9U9ESJi{&iR bQ3*55Òm3ޕ?VXݾCq!! [id,`sc~۬qtQM;d=LB_]Ջ_}޸|c1G0eU6.l%.={`*0(eqloyÍFGY5d"s7z ]5(UzMKLX$(6ږl+JVI Iә2>Q@TuT υɻPZ|wJ&c8xa4Kn -cgpY6-X:,I<ӱExbBɜюTӯi ӀC,˃H^sa)[5uP7bL~Q\=<hjޢJ+,mGF78EܷǼhJYE[~*5, Ue~9V314k| Ǣ%Uo^I(*6Ml:o ]=sFv]@C5S7˓+h?D[^3d긂o`s0 B䒜t$lWmU'dY{ثʆNfQٕ<-@;\'\#tTfcGG(fW^(yN5ERUlٱ ;t;LGy~݋V̷4X> KyTű}麪NH TN< ~8*,^VeLqaj/NzU{(3)@AIa8հ˳R}Z)2u]\&%L!rLIg\KơXeBtGgwJ8,MWQ̽-<޺XOfGCЗר_;:)f}+D-L$!(b̞K-J2ߏ;U虪\B" 䤕<۷SNݭΒv,AkPkV>x|߂R&>V rB%֊mD]6ٿ=_w<(v|Ō3 y2nKu aw}3<<,U-2PemHZQ\Kj*8A.kƧ8UQ8y U@!;|73H٥xA[c-ܠ<[#zP?|Ҋ/A ݎ,dZ 4=}Y%z0}!zkL;,Byapw,V(Hv&)OGC$t=`'YMux\ZnE䒫 TrC#uk8k:i 2TrnaZ|5qqLdeOs֑۸A4qT05B  5B.j"hAy "T"mvnfԺua0D'd𠎈A3PQ5@$*h`a > έ%cpu,4;0xZtK(^eT"~%՘ wȏkU;rH ODTEP]״*>Q/o{ x"YK pHC*NQ2R/s]nS$p9)޸Ϛ t.M83z&DyrKR: UYL۫Ö3ת0=3ٗHqZX .\Ʀu8!'*Trկ!K4A%@ zЖ7q쐞sCo(AKfPHZ4lW IN3/PB򺪚Fщ[ʒUthyPi;YO"hCCܱe>ā:8QwzV&jVB} eά! >/U(ƃSj 薸J t|͐X(!ʡx[#U回kba%s"7:D a%3b5un8ٷ`F%_]p+^ ^~|`F: -(#[_Apj y.DŦƍ5(g6o'IϜYuMb[pCTgVviQ2iTTZJ%d#c Tمo&E\@vk|v@ſy)-՞\hE7^SQx{j971+$NcO(k'fo/{ܗӑ()HqD6+3gJ/k[ 6 HWqp]=D&~I䍳Qԩ7)&*?jU?,P ["N*YHkƧhQycQ( aMTg :'3/ꕣ:rO'="0ڛ~ rƉk/ ݷǵQxL럔\ m.8+{a'9Ga9aJmDPXo=vsmpЗiEI-JKL&D,Z^F=J:l&t;#Ԝqu 8&ZݭCUKD^a+L͞<~S,pU0m/hk)ӘtfѬ)0G&qI\0lM2gґߍeqCNıYˆ0yO8nupQab ="a߿XJyÿ]vcJJ5VMGś*JsKU4%᫹o_$g9!48ÒccV^ =+&BH܅cR.nRw\^ˆYдF0&Rr,xJz1z볘q|"Wr(q>ڴvH3T* L{?# *hָɘ(^/f3zH׸WA&q>Wkh1 ;JR~T-<]N-+JaR"! /{nh~iܸ5!~.cY@#Ah2a5t$BL60}͵ !׫~:z#)|,7)CޑϤԢfA2 T0^$ؼOg)hIZw(~@b\+(^Po 键 KyU$fdCTF(KPіQYP3g{V~ ,H00Lޢnh4pg bmwpkhN]͂9/Vb|$\G-}k4(z9+ocs"=!i u#Y.\YopRkB{f|, w3l$T 7^9,TRˤ{X<\BV{LTxY !sB>}Yi ?"-qU T9a!cg) u3Z.'[s)kS6pYlfa kLX

B 퇆1,J.z{?ҫv.oÊDzSCCDژG1=L?|Ej%" {GyN3)ҽY.P{HPm&.`Aiod>yKCqUsz[Cw9Rf [ľ] c\{ICr) W{Y;kkkJMALRG5\ȩbAy3$?ACI0My1\jՌɩ;I;X CjIZ$LNq ˂1SF`c!~x׏u&jіkj_D'z]w7s(sv>FhNKۨ7#h XdN*'?D8%"x +-u3ϵ{{~af/:?7%(Ȓ&4ƤW i^ؾk39h[ l}3hQT5lT-~~lT涐#ِ"1  a(WdճUP8_u}CV#/$:QWl"1}I*FI|)hqKn7T!gԈ=@ fّYVJ@\u$Y-!uGq ~=an[o2n/ *:r.tO 8;}y'U9rVg 1h󼉭;KQz {&y;Jɓ3G1br==97J++:X1u  UwлwX2tmW  FuL'aeAD,+2ߺKH6:2j|H9 Kռ 4q _БŠ]:16BN_?~Uv-G`me Xu" ͜m)#a =ﲲb:Hs܆!r-*%ŶzZT(;*&,GWG敡N! ۍ>h2~C,I1¯F,|xRF!Ԃ>4eNOp.9VU]سAfY1r X =JܡF9:Tz os|!._c>uhF]k pZ8ΤζL=:Z4Dɢ!ғ|WF'PWNE(w+~}Yت"h7&n7ʻ{/œN. 6a{ 3{ 0~UtF27檊b(}kHXp\=SЏ>`9r-Þ$* ԥw-zg"对uNNdYa$Iͭyqt'v l,ŜbQz K?(8=QP0}%d`n'=j۳\&1K êi!@_g2H U(Xtt- 6)Ө2rHmyn?t6ͲDy,q^f4-n9/y$-qwgO fcY^8*k31f-SPO7V A_u0yY{ůO&?WɳT=*`[v(5X\$zc10=hIip<ƑRڰ79詵up Rj`XqLSOj]^]m|;T%[ :nVÀ_-.ݬ83P<#F_[ m~WIz[>r }CuBj($b7ɫ8$94K d Ԯrq_6C+.1׈{)MVʌ/XoZ"#ʀĵ5U@,'Jk@7!2S;RؘD;(U4%'yl˫ m*T 631MY\Oξq PXvZoʌ&wl&m~7j%k\rpgL2eek{[Gi4}7ӽlrZ) ! tׄK]zkFΚ$r1] Q3ܙ&7ުUS+.)jĘ$816bJ{!J:DzgV %v-Hf8Ud(+YZXD6 ]H򸿿Z-.amkTjDVMJv4<a|:[MA7o˅w2ϞW'`*iD]X1mI t.Q[6/*`WWFeY1Rj9>[)_9͚9YTbe8Ֆ? ʱ'ϷSY$ތa)MEc= RNA;S,px^G)vڈ*X[~Rþ\yA5EC5wR bP\y/k>b¾]ݣddpllubz{90D;W$xѬ:'#~gL8nm[NA\M j+!lF)0MEmnSN09yz^vOߡn>d̼fMnc3Cn}F;Ab;ެ u@~#pwzd#_ ^=s|$\ I$g PL%@:aAuZֲ/ 6d#F cT2}R\\3XmT09?ti WA$@M3ϨP"θ;g (#moaCChB4.7|G3mC8/̕)V11s=[mHNlvRUCŊ1Ud &I|X1:̶+~=B2+#^2M yasuhkG4#~'Fڐ͘x}^Jw62]`ӸS^OnOJJEIĚ]*ҊN C,+IJ&wDUi3QG Qs溞X!sJQs!3a?T֋iF/-o1UoJjTͧRK?4 W۬:щ Y #YXN8Ֆxim $ʘY¿%M J`1 ODM!Ӄ c_ݸ<57|'}љ10cNId.|#pn Gf}ZnEPf~\([RgLryP^ƐS9e!.`DִԞᔃx.Ma?,%4k|Iظ\ &b˜Ҹ[1lن+EN1g _k>d/,Hp_9f[ә+_k^wb"~JtEOU/HcBU[DTe^Ǭ}X,TY@!S`+2KWʒ[__B-yXwK ǸcsYx,#/I>==h4 i4N9_줮+_jK zh"{,GCͪ@cxʥ95RLS(D٥N["_ij,?3 E29i\G-HAǐH>av Djxr-9>y!̳f!s,h 鄻y"Etʲ5+`S՝4 MKVZ`uj4|ݎ4qTmh#%|֯wQ>Vs"֧#E -?R9SgIyՄd+04M2UxUSLKSj=U%>v mj.$ 6A~itf<_(K[+uv;PNTdGY:jr, p$bO|Y_0dIת ;󰵮(}ݰPe6?aܨݧT-T2CQW_X19l]@S/%E2ZWk8 ,!e)Md\H/Y:)WN-V<`CZ,h7*Xu),K`x_ZZTiԴ;؎F{&/:)eEyRݥQR{N@zsO$2M$*~v,,-(RV:ȱo VaܱODIǩP.4y d'?Ph ȠK[[yGC+<-g>@|Z8l$&u%{E4 >,&9 u^c)tۖGA^ Փf>f7S^ ĉ\9#q0M?6VE]_"$Q"YDmZ43QLb0'xܞ p6Qv"@rQԂ!Fp:6OcG޹s(g[h7םlG₸ɝ^H%`kyg.h)&?"-~8 S=ed^KfI?>A~'['`(-fXQ^c(Kl|)FYR3;606daÍICZ6eS=cQ ']=;xi>_hgSt Pa/a zT\pp~b@.˕J-~P'oG8w:5t SbUne:PgLh9 in MBd"¸pZ8{]E:^Dfq@v]"YZ6R_ L5: aTɅ讗R 6qL])M% /g86nI *NV֮dZ{ʉk 0#r&NV+ 'c*&)XMv -퐿έ1n:JAǖH=!kXgnu6=>;%W f҃)( *4c]%Oiޒ`FO_F]A>_&m}4JބT ҋ!~j@BJK~4 rzы(/8%vFeG7c(qKyMY]C`(NS3h=sJ^_Fw Z*bŇnxDpMբ&@]Z[>`0D #_orȵrϖ?re P[l&Ž,8~Oiz!/"JL73TykdlD0k 8e͂QiKMßsu RAb:DǺ-JhG!*.q`Ԋ֌~bb{Uɍ٦dֿ.i27lbT)F  *.MOM=gK@b#f E$n_661R"S@yZ C.v'6P}|>kPqOesYS`i%QgB@{|,;psQ4,Nx_=&!d?2V ץ Cm>8kn\bȓ+v:0<9j\h럄nX"PPt@,F][cM! O!؆z`"+;ǥ82NrOaLtXdIZGTQv&ۚ}v񁈞 8I.dLRN5#k*@YHq^%j A"ӰԵ=H[I@NB3ze8T\,ݭ'ԼPxw`{Ax רZ!wnD(ky&S}Պ5[X -;jb۝ !]5 1 S{5xIEPNXr? p|dqLY]Mh#=@%Ftk쬙*]S5- ڂ|S<=CDPOщ8&o9%я>-ּu{8;{6e-h4Rm*c!*TS4f#',.pd٦@K * wcb̺t0-xiVC(x](PrX^ϡl tlƍ|7 ]/)ҏ^WA[^Bl*DYK- Kcig1[ D&XKUm NT:dvS0 L!1"r 1U'UѿԳ"wy Xbi,"\wr%Ԍ'2KTqSh*o[N[QEIhtl6 ="SotDC3%y0ndeF1+SP5"I]-oo.+Ty6fK(#CR't8]#=I AbPm^U% eq_[[K~}H-Zg ΂|4t8UPQ=!tWC-Iٛ}t#]By"䲷RVstsJ_؉'y0u?ld>3 LNT Tu Ƌ%%u0YZ|~7$2 qUqCfp<}pXqA;F*$zĎ-]N|uvl~f5\ A 'V{R sQ 8_ǀpZnϱu6J`;A׭(v,e[YEn|fe?$jС`\XK$ bv~7G-oPa?SläGu0Yr{Utg>F`'~ߙ:dZŧMq5QUEc ڢTQ[":gr/Zpl <`) ),Oے.PXhWUe,sSю<1·pCZQ+:Á7P8k%/]hP 2[C~ zmƛή0fMkNOjk0`UJt= ?![s.!ڵw&qp-OϜvDih}%a:iQ[i}ۉh'zA/\;vf4i.g)d t@v(BSS;[~q (ә= Dg:gь _w&`2 bj.l%ڧʆ3@N25aKO;SyB<˸3:g1v6{8P :+~Z BϨ.sX7!9cf=1,Ŋ/WJ7ާSv#'cCbo u6[1{\{w>ǻ(혍ۢz0ǘh$Ӹ6\j1p8Ѥe;'+!y,e;Cw J*[ ey YϚRʜE:|ˏjuNq?ɢˣ/]Zw҅ ~OUHL\Mha*-N%Y.9%8ƨpɣ _,>"4f#m1&pi[ZCjafOqw=-Xb=m4Q7 ) lm5U#ȳ̡0gZ>nEh|þ*PkR ӦhC\$i[ nix9ٻG+,hp*nJ >$;d:@?}}W Y ޿s'cQ7ŀႩ=l.Y~PH )Xy[bwºMSVbJ"W⍰B`d]}"ʧHAba_4Y&L٩'߮qߗn@Ua<v1@Q _Y`^YZtH |}QGH=wpk@4XMKB Μ}oYkC"E;xmcjm=fz5c`f:e` f0j‡F=NJs+~>_+Nv9'M+zSW0^O59 bO ҭ8E('틹H{&8KyՋ{ X@g |Dj zGEEvJ{6T ha>v3JMgӗ ~f 4-ήF'}J4Gۂcѳn2폥eGP~Hd͗ [y*ݮ@e.v}d,2Đ|̯am mo w ]04ތ` 6v՜i!?bbK|I%5=z阇9@lAw4Q})94בLM)5|C6VѼ&ɆzP%b k5H%@e'^BBM|oB^Tq~UxĞ3Do\IHݥNA%. DLes+.5=b%F:7um"& ?[*;u"tke:0_&^QL acVQvv?Hw&ڥ~mvʎ({d/6˅.8]~ ƺ) G~C>p9飫ykSKIDt&1/s> >B PhzTy^Vzir.騚mڈ` %QsWVAqçK @g=kAQ eɁG`ݚBFy_ $.TƔkKzZ%Ie6kPPڄ_mb ~g#@6po8wjOF%[+)%|#8"uu7^0֥EsycB9ZMONy 4+JrNw`/Lc&TlLsFt"=k#^F.eK΁v37M _s 'J/ƍAu(ǵiT5~T<pV X{yw&༧0zx&&K 1]BV Fe 5 MI_(qWF&y'n!=&o_f"H>M }V» H uXw0n*Z+$!'A G'XNz̰T.N5x~]2.sTߋ;ʨ$F7WBx3l3JpR vhH^K>J5%IU:'Ybrwu7Wt )W*IN: U"OU^o'!8 *#ɪvi-)|fdL~5mF:g:5<HzǸD=1u"^ : BNPwuٜKL`b!D6sӐ_k ;Myn{#LuBcXtթ uv,jD6W"fu>AfO  *?>Eݨ(GJJ5}8`X+[u'7(LS"O5PJUzhcj9Y bτ .lb+@/7 CDeÖϋO;|腰

8/.EzNORdTK_?Go$ 0!д`)vvs|3/\ ѩנr|j DkOĉ$Aƛ/ !z`?mh} ! +ә,P(v5םhe͑nǯQiAA+—#o&m<.ѳqٮ={}ЍTVxpG}B4Cj,sFkI'1JM <U7r_3x3/` z im߷IL>{U{RH}UXJ(x$509׭X(XAKC#x5#"ɝ!YrtKO$+6S;?&ڎ5?ՠ;Mk+(~99Q:0ٳݎ_J@[Wԅ-j=6g8U'k; !vvFS63t \40-wi)-Z YWЏ鹉DH}͌9FZI_SQTn=]yc놟O?ZVo<2[|ǒF@FT}SOӰ1y*n ]B=G9lĠuH?1?Of6ҞF }ǟHY~))spl9^Ɨ B8bf͋AWgDq4)lbg3{9N,Ѐ2;XQ _C⽵W߀ E'8Es,6vuÅV SJ4]KFrhKU$"x4Lp)e~!u@IFF'HSP@n{9RXt&2'JTⵖp2GG(aƷǜ$yARc3kr8ĥS˃iy63%fM Rګ^) Ɂqg[&1:A6K>#e 񻾛N* VI*9M(;{z='Xnp^YFp+@( )9U2P z[oIUH3}8W~G4N s ~]-6E 6w^83,U.|_RO})tᦽgڱSL|&i>xyhd࣐i{ι"#ZY=VFu&fK]l!c+ِ]>lzτ; s@2{KNV"6e[u@ %bAm >*H3eլj:4P౏7_uߐE($o*9q;U]9 UPK$;쿙 SJb2w@p:$y£u3!5_@r// oV^*~P;+21qbڂ{d8 ga=4{]3FŤVmL druqk7BDJrzw<R+)3SwBTҽX56>2{')l.p>jŸ\mG;hUjosTW5pa 3hI7mt`3z,Հy+K"Oeҕ9ܩHiO6W$am-jZN3)o9ٍ{TlZ<\Z+BP3_::vE5@Ɗ%YPMݕGEЬsdSǬ>LQY0F0Z6A}2W⍝F v3t_E2X0fZ'] x;]`&ДH`ZE|MC< pJgSBs~C8dpefûq'B6}KADž6{pQ7xyc|=QN@B8yI<c0-a#Ba!Ӯa{U2]yȲ6w( {Bd@YΑh˿E*=7"XKisjYF3`5ge~K鰒JE(5b֓H;Jj8&UBQ{;gO<l6r^ WFkj,s&qt+ɶ0~3Z#R5guVXke"qaì8] 2]yק}&kv胱씺EƏpP{4"[HQysٹy{] \Tw${F/O?KS_IW<'uH ~#_1Hڬ/>'†cиAD8<*v%EQYo7Fr !?wIaQY*~iH3({:yhX5]fBͿE9yX6_PnlEvxCUJ ޟlj*0($`"2ۅQR6<"(NkiV=D\7w-[:(S?_E䣳080;Bu¢;)i)]~ hcrS?U*q' CDcxz -+k2Q `(_oȵOĎZu`/7@o`d4 = & ^0 +Og:M\0\$ͳȢE1ĭPHT *Tjɂ_ܦG"(9PbAH!E/ |nIIgE>v?}rK IaFCs?Ec+ɍV?"]ƂVxo}SE>AE۷%^sgߠ肨\M,& sxD8CW ]srWRHDWGw],!޶M$(p./ULV;D2գ];@e, Ch@W2z3,@9Qd(.+wPٯ#jt5-홹УqaG6tP }OwK@`.oczjc{WB.-nMX SJo.(cXtN!UAw:xiyԐ _t-7`1IZ{6*X4-10?0VL޶dPh>!c^c6fjrv凬*~2q K!uS%aA$'xH\[].IW㩢2D2-=[a!fH ͪ.>ãʕFuj5W_}9aWm?f2ALBg .lV"2H7Lts.t[s+O7oJ^;WՌNcJLJ0 E^ny7& :E;Dp?{Uӗ2WGSk$oP`B _t@qf7\h<Ě*J(Oqa%^rujF =  FwfD\{OO vyYd`۰MrP54 J1 w17dڇ1Yg<_KbvE;~9B|JDMa{1~;zoΎD -tvϟ?TiD]ߗKPF7Zݞ&pl-.Olj{EVњrvP W؈`u`\b:[-:$5]?dRh?iMppQ-կLֻ 0x\fe2Ј+}QYYGU7Q;wAp OJtr`&+Ülxb2AOH,|z\(f<ٺ bJypO=rw2.hxlm 5/$Al醢~<kրu4+ Ԡ o'.![uӦtI z ­7; O@0 學nuQL>UN݃lP#k( [kFZHZ6EΔ O[h}/b&vu3mr7cmr4ʜ6PC7O6ոg+$Z\s:=.׏N>sL=GѥMmSYW~X +{OT-IR}io*`-Hdn= w0c2k6$DE *Nqs vdyvj~Q $n9Z dh)?vq9tU3?&^`ö6iBޡp渭th5۩ҹ% au'x5X%) NFk5Z𱭇Y6Zd43MJ{`H3rHŽt>p]i(69G JlNr5К83%w0Sug_~,dj)Ke7$6\[#p^y'|Z$ {I:RP^]hK[=1RR:s9h`aT `4L66DтTɺDeC&bo~x| <6"GMYD8/FEL&oF=l'ؖ5?oCcw܁.m^OReqWϵU.rDH7>dЧqO?U9wwۀ2^}Kl\yHHy; e`l4B9 ֓]afr3-n`2:4%My*yvV.% s Ơ'\)}쯪ː.10b w-,ԇؑ]I}NE8]"(nY% ѶD*`4!xPY] r-ys~\n^ps$nZޕ+GKSq#ύVTW /nN [qv֫_[(px'}Xlg}}SX`tc q 64\$smodZ S fpQI̠M^&2lgp4jKgb)`21Q05e6XMr-4jF3EŽ%ް?GD r7r 8j99LWVbszIې[^| IA^brY={Q65V#XLiBEc:^~t:H̤N޻}8}Zjt p#Y5SiQҭL2|\r7(D kUpKSeJ,Ϣ7V9uVߦS#wn"47>2c o\v0ьilr;ΈL>rL^( jU[ppƩ@R~ *dGh=9I r_5\E5xѱVPU:V[e+ڥ}A#FMdm[H@2$07)a e oqɋ 7˃*2C^4WI%p8 hfb|;px*@ )i?Lqv?sX&+}|+lݧ.=L%_0u4.df?( k _?&\DOfKfvP9,'YHϤrk= ҺAdNmߩPTkeQBiJ5ԕþuH8 *Eҽ8ڙ_z;}Vz0_$0Y믍LbDVTR鎋JB]'XTZϢO#2m+h y>o~vC$pinxbE~i Xpqbl{=s밂LHIA!Nqr1mz'md6W1]A! A 7uS0H,cn^CB5(&WKTI gsח[e驾3\_sSgJ!xº4ќ!e#y+>Xf'@A%_ T7~U!iWFOz`ar?E ]4G 6T<U@rҟw9-?{Cbwn]Zt(ap}zWJ؋0^h"2y`rG?WB%n3/Ez*֣dǺu+3 N9!C@|J1i&lюد[Rj4Q9%5z{8'_ w1IKAvng>LOMyz[sso9Z b'(,!ʼ U6mQ9H=g &Xr'B}_ydOt!h ehněҙN!He&ݮbt8?he‚3 7!e&DY6-,LF%@}>e>>fT(Gi5tj|/2d˞牔sʁ!cwfv ޕnN[f{̥v-uHyWAHY^ڴ(-$SuqEQY*0I.YMW#dxca\1&OP_"V[y& >Z mH @0зm 9zj>~g8Cע)رKw Wj~ϴ/D<-8SO.95}M\u ntas>iɵPw#X|'<[V ǘfNm: F4!p>QH|4«֡nV}/xv*jU̞g fθݙK_)N8'P9?&N./-oGr.vZO$mc3oHͿ%7̽ᡒFJD@W e-WaAo!Pu+JB_tNXķ΍/*zcrгݝx#ٱc]i2O&uz 5=ð56wzoxh䜧 qNK/Fز9c(tѳͯ3}')(2vEfJ0ޛV-Kee[{P}a+ݝJA+g2_䒷GtV4]_ 0wwGkh3 ݣp]"cی".7" O6D$[cZ"ôah9DpkܽAtlG ؍jb#tNk7lxw7 UlU-PwF}ZzP8god&[ɦ,xy?'"{4!0jNyeF>JnE&<妀ĵ C휶K;UIݠ ;z.c1:wa稽ĚD'/m#+Yhq|ۃxNvXǍ/qQ=OHݴ"tЌ*0{I.>8ÐV}msX=5s7ێ9،F4_T^bCM/F]l4GR-@;;]m7Oi w|o+ #sVd3/. CΊ{;kAE:, s/Ɩt7qq_pEPW z|hya8<-`S$śg?=?c?5>`$o+?9Рy:ڌ;'.2X8y GՐEbxlw?XpVפɥmlb[8NNxh #q J#o1 ݇1:<DM!(ԇ0{|:P`a.#%oF;-bHS b-Mp|"Ff1vIiuO3 nsmD.kLbkpEU? cpA&8ZMITxvbɹp[0ሙ7\=;Erd.unӉM 8 }@,R/9m7[ӝ'vvz􏰈â9)L@ok'\@ҧė_aG<ȕ5׻Lw#$'FP@:l7ц@r 5_ NMr24_-JzzEc0mj˜s?vEȻ=C#[:L7dR.}'{c q%Bֲ%__Lze$d!syj) 8"xtlv6XQ,CcT4 Ki8,UͲOaTXp4*REOg\̗ؑx&Aw,a&<:z`7p V*+.NR:A|T4#ܺT\_22o1l WXs)4iWVWӌ> 56!tDž6΅AN!?i }ѿ^('lFqcK%nu|פfK|)tچO@|FmUn_tov \f*y<$61=Aբ #1\}顨=kgs{ b2YkC G7YD6gzGPze@j耗RC-+Ҁz =`{/lb@3^KǟfPwdd/-ƎAlZ4Iuy!nZ7gƱtEnd5{z38ٜWf_!NctitKaT''[^CNIJ}EXOR\àp T/1*@,NbNBJ#P⋏ND/^qw!a!A"zΫs]pRM3`O*<.G3JW „.'ȉ):ǕgGPor\S%O ߕΔu fi#?Ȋϭ.qsfF Ūl<di[SǤ7_:H=bT^ 0S+V5tOV8z٩ChS*44ay :[ocr'WSU|ƀEM ;!MmKTW26d/'9HvgWi=$c3I{}Dnnj}o5O5Q!`VFw%/d> a,-LܯyvtT$}{Zb_א !1[ iuq2UÍu{XLi^|ZfB)KKVaw.Xιba#x 7kz".:pUXOvCϚ@ށ{iJժ ڟ͎u9f갑-;;=:bq<bSlqBFU!xp1+#(TLB+Qpq쳬,_UniNJቮVH %,P6P7 ړ>WmpN '́VW{(cmX㮇U2hZ"F T7wkLQA鏩G rJE WG7σn[J7}^@|BQPL z |Om?93"(a UON!N m9>VZZXJ)VaW"M$zOyψQARFd!AZMhj[/x 1:b#^?IJ87U}S]2AC—al $~ڛ!eѳO -T$99M8^4d8|_KP7(5qfbgFco[BV!1gh"e!LtޕኽQ<AQs3F F)wD1Zz:({'岏V?YȆ7b!̵6)v1e_1Q=Q@<ݱ`rӲ .yAV>nf.` yR(kY r&Kό_ygdnTnb#iԪz tJ' ^m˅|1>ƓYJJކWw6'`d!`({J8:aI&@,J}VT>`*ErM ?6֛p>>fK^)^m'g5EVնE" Wi͑,S4lzˬβf 7޽[Ѫ1RJ:}6b߼@gaOh6d R-l&<ߐ2`90ģ+Nd31FRP\)GMg7@wre@ulIIܾM}8N*lȴoi.LERl$ S^kF\<8Cri8iY'3Gy7˂jvdqٿzԃ3'5v*fB1}A%"0~?'hSFs boXI dlt&*7$2i"o\?ׁ9c)4">~/֔F|A'@,PǏU 3nF(V+O?y 6z74jV wBA5lJlz&?0BzKwR sD;[Lkgŷd3*(?XWxҨ\sEvyO @R86|6u#-KJDPyݏ`ٙ:QkTi]ޝ{X +BVH|A-ݲawV)շ,5]%~wLo'JIyj`MjӇb'Z|`՛wixgw4t7sդ98~eON펂\\έM$٘,/C–biybeNꔥȾ8g@ -~ ?rFz#"~h)vE*; r}r%CZ+Ig] N{vR٩V~wx֣Gl%摥 М;黝# "̩:qd}Q 1gF92`QpsLr;E}.Tr M0lREGfX.L (`hFQ*x6*4Aǖ?7DMS`DvE$ԆV<,c"xxD˭ Kb//ejj:zSX *ksu7?_WCM@輈~7 PyTAģ1m֫ΙDd uL76UC!c04 J0I8EIЁNbQ=͠VLh {O~<ӄ쥏\|MJ6Z{"'d101bTG䄤, ( 7𘷠vbK,תnBb+?Ϫ_#ҋC76l2WϤf ?+fBoV^_ 7.kVMhϙ=W#4$h]3%lL 7I@MjUYIȋ`EjH:FC$f_vkB|QlƂ'tn6v8죏h"">@=!RlKi"41yÂ0^@!ZJDM$TOy )T* 6'@"AXNK•^BWN TL}ź,:nwd HtL`\WΏ+ *N&>I08뻎5TUIYN匈ub #;-s"G :,LOvxWYNO ddv FF z]iCn1r7ZLTQ4cN޸*;eth[}bt.g^-7RbwFHO "⣮,* 5SX@kv70[tKn E@_KBsc4pг5:磥v$g3 IiN+P8Vvao^o.v|ߐBX-1_k3J[-n~$?T}u:dܦ~;7ցa5~:޿>}Qj-;WWi3N ,G6aJq ܯo甡n˯mzyATPLE](!=]3C F7iҾ, iJ66o_:日7,&l6&uh6h~w@^4(uD$lQ{KK->ϹXe2Z$qЎ|K J|YOFnr9s+I8:7p& T5<4uL]KL~rp`6Bmsc2ٵ ˉN Fd,m^Fl]o]kݟ;)JTg\%W`KZ+dWf\tY(𒊀KWJʅI"d xy6/&X.|\Wh::} M\A'< R1a^`#dL;&YҽPbk'+Xro&14R"tͲD_?hE܁IVsd R1Rڑسt%xH")m3'MOL%zP^"(wc4y}TIX9ƙM ]Ʉw⵼oqvOLwqf#spa? =W;SĀ)%۰qkzH,[a-V1Ж)oCJL"۬VêY&*dTjgJB'cdj%S ȡSAիP z)hNu퀾l[|QL1µE;g:SPːõf#XLT2y*`" :I%G ~яvQ);m/к.X=\hF M2.= dCqW±ZJYiX>TG|OfP{@N׫2k9a25}k_<=#Ϸtz 먭5IN<){VBt,<./NwHQ>Ѣ|C~8n϶5׃[Lmmީ0'kZKrZqΡ/$A&h.b#V-2*&8 Q$N|}i`iG>t.PIvI 1Z iZ(Cp)χgjۂؽQ`4kQT^M[ -w7s/9+ nyȢbV0%9CY>sFIXɖ0CKn*y^xnhK]xݕ?_vfG=Dƃ}:gdTM*fjm1Gg~kۅJePbxo_cd@Mm<FpiՇ7o7?N/Cnd#4lkI 8Ͻ)RΘ?ס 2eS>?=҉9cSҸ񎓽lmxo³p{QuD"|\)>el[AG4)Bnh]P}f/p>9D+:k3aٲgk`Jy:5hRRoܬtb9 "Ia#7,f!@b0X#G]WB-(>n;C=Ɯ-Wf|tix]žy`>k>Zβ$؀XV G  n$\?7 @V5U=r=fB\m?Ko)O ߟӃ5_ib;mQGY+KB6`Uu$/UQ_gQLRX(#==g#: SpQ&V?[x$àVv_ئ ?'|᚛={OotӢ%1A#_(*/pg4K6J82׬_ePV)> ̪`/ٍ#&<`J5?k C 2 gV3*>n zփL;C4g$Ync8Rďz-F|IE f (Ҷ!*F*?+{7GB#[iְd]5]ǹ]0PG˶l?zYq! A3l `}۬\V^ʦT͑%?g[r~ y Q6S JL'3V@QF|`Hn׆6G`jA\Mj{eh!:.n18H%iI{\䂦(L0՝5=!3W$߆9{bW4 vk/'R=GZ?;zqR07-y2KەֹρdB r #Aq=/P.iVW:Zv< h7 V)AWr eYu+x؟o lv16.awo9ͬj9ўs%Vd5Ka`Cc#eTmOff{alc [Jz,{lDo x> v$c=kvÞa>3;ǎQ%[RC--h)s@pNR[GRH)I^Kwnv)m]".4U({/h D>&&`p2~9 utK:V(s:)nCa<ܨ~l&]Ԫr? JՓϳrlFpcF+[L`4kPE;hmKp0϶ a&|fZ@68k712fzm . CJ 7;I4 fs@}4wt;D xizЇ#yks.G;H88Ij-6pl4!i0r< (j4wHj̼紊oח) S{B} MUy/劢#ØN4Ξ`SO2g ƒpnmbF\H @ {IB_Mo0RL(680VOV* VYTFvo>+uQR}HpNPҫx)6FBmywcn*#KU )#;ЪxKy[]5. 2rl"0ϊ, I)|/p Fo~!R~6txn_92>(5Ùj ڮ$緯 %?^:D{6ϩ;KM\xvwz<^Rw!j&,xzݑOcJ55Ovv""q77%*R Q uS7*O6 xJHqTBoEZ e뎗:VӴTfHȵeׯI<|s,2hJ.2J`=%z/qyk<EХYXG0r25-^LJZ1ᐇckv j at >۽tg3ҴX ?F+q3/v$6ߩHR̢͙l3t"eңsx^_1Q4 ='D geK 􅚥6~5T݆ uXzGe.\F[CqtҌ{>G._^rHbqoQquW}ޒ׉jDsZ Pm% Z<Kn V-dHP^?Rx1RZ .JDrA"RNto3߇Sd8>zh+,yߟdI.psօKnOcmA{GRُmBk8ta14C)%;:ϰLɢ(n&`s]3>Af=77] ",SP:* 8BpMr d C@^^銭ތol| 7]:Lgɨ;[z骤1aիS2ATr% {ӟ)تz< ٳ4Z\*9&Ĵ֓g=;bɐ(J. 4Nrאȑq;b1R$iT:$V:o[j׆E yXdTM 䪂(AT2dK^БnNcvݓD57L )q.q'?%"ekxo^nLYo[ Negd)mn<9\֋͗i/H Z_0𔿯ChY}bLP6K=@Rc7(bY+4+ͅ kҺyH9jmGeopMAS@'kbQܓ/4y! 烅@w/EU !QJ/4X 9ғ;F4(2Qf/F+uI3r&ta oi0w֜ECW[ J&i8'X:?8V3(+0؛ަy߹[lo6 $C_6B晆-&-ʨ叾ACv{dMi4 у/eD"A@k5r߬;U8hXJӏN%)ϰNprqUnL|D̾-%`MT^ľ&7xfPԻ PHG4­$XBYY8d:VU[g/X;#fB{ڪL>Z*Nl+z!yfhQbZ( ^κq8PgkuDdI2}3-%߼ KZ`sv՝bd[m0Fj!}ssœG  ϘD i8t fr* lkPrg@-ל(-A<.NcQ2#ͧ}2q2rv2R@5P!%Tu+PS8V.9,i1Ih߱$ǡo[Q+8Kn5QnJf|b-ke:]GٯY^,+"(`zk)0&F"u&PUļ Lwُ7qZG&_OLojaR aIW.G0or3cԆePfȶJS*Wxc-֑mkO{e + hiNqnk!D_V&2ͥ/WvxxbsryYQ Wbq5Io4Jifcn.a zM:igWA #J#ioGM}و 2`=_xi#yȾG?Fr]YB1D&bD}!蓯%7/z`@l 9#Ǐc]Z+O<q.f;7L?+gӹV ["eڇR3Bg n-Q^)l5y\(z[7q*(Q5$"]5=酺WDmC|Pff|\ /`Mt Z0xZ -Z+htH:j͆f\Fj>g!wͽ" ӱݡ!'=*1>8K\)PJW6q I9H S}sԝKL@bZ'1ڇb^l`UkBgQKkF=hfnc0΀2- \WKژ1B虦!( G}:'DJ( ~nǺ RXXd8f83Fz*}Ev<#`O,P(^?t0# ]cJ*GЅ 9/ȹ}k4aT:[,䵱qw]?eȁcQi !<KlSZzG`x1cL|=x%q q\{UyW)GS{'ℝ,hIYlI(iHI>St +^cf8 h޲~ɧgiw Uߐsf /&}Zg֓ ɉoꈅ\T-*fptowZАm0AEF#Aɬa_zEɄaO( C7s NE1 iD}07t=J` hIud9"s ;gJۥKR[I/ PZDYS֬\@ٮ6M6wzLLKȖV z-8i(RAI:~;>Fd:lMZȏ3h]8s@í9 xj{cԴcPe!q;м`sUMc󚭤[3d{3:@_\,vB&7AiE e3.DįGb6AxO3S zP@CL:=/:@p–~uk㔫߈g z԰1e_Ac6Ygw:W*r`TDO*;ݫC0jmG)F`a1BzTU= Aףah9|,\bwKvj )t6Zθw`>'I1X YՆn( [ϮݨR Elp0ѿ`؃`硱?U8@bO\{YJŝ#͜\d+LRi <y 1qeg 4fɉRƿ" I3Cm mj$x򪜵)U} iGv.ASaTMK?1]d ijggY V[*<,T.)1(i"`r:l"/E 6nQ aO*SvyR(l Qn2#yM7f0O_e6=6zbM(v "(vÉ~mDՊp+2I}0}h|XVbLw( ϰ {KlIg‘tRި|oia7&g/4'P4|\syz6Bt行O" VCK&Kx;-\a9D zY]/\#gɐ7QΔch( ]-^֬0"zX]#2>ݟѣ26PGSdȜ= LdIOg^BalDx7˚M}M]=s;Jx_tqw(dv2Keny)̶&^+!_/j`ɽR½bYcgs9wP<UdO&A_mտ1ˁ4xilvm U #KRBFB h_Yxu-G7gW2 _eWpߪfo$ucAu^3yH:F.iPr ɇe2]U,yF@a>}`ŋ(l1hKS мi7@: (k5~LrniEaM0:Ɛ4@ ˘ vWVp IS!E!'E0jTq5&o| # il(HRq]*جMcABl3[u2l}tgk `YwJ1VIShvf8i2xI?(пe&R(3xCDk&ާoͻڨ( eu;}>! !t"=0%WJp4jzjc*v/ #gBU5ov}D]bspe鲱6Oq% KPXe:Q:ܠ t=&פ>"P`6ir/Tجt& {(aG׉f`l`u7ǠWʀ¢%UjJ 7p焠Q'xnvJ `dh% 4o_UBmenNqBdp9;_qw;tj}Q"iF=03dlBq5NԵAFJ,e5mH>ѵi;_n4QvMunQ'n^?4msJ&>s0΄WkiD/wiKv=rEͬ3ɈJॹ/r0cw6/9yRo(H]t># /sQ1Y7Mٙ9Y^5?yoUBkJamÞAB xpeEѝnt[z;ť^Jb߃uPfM^Z%C#[84H>饳">a6㨖(g?v)]zVqoyfsY`dMt-W/Q1?1@{c&=9'm52E-T{ՕLsizt}& εA.엝nZMxmc6խ+hHNYW` ] Ty2 =-3L-u\B;LLh\3OvMHA'閯G& &0R7ũr[goHNM;"Q|~!2ЖcpP0Nm|#f]dҬ<{Wh깗41Z>J,sgPW%sL1h@h=8*V+ ; D)O_G='3jlo}a O ךjJC"[;լ@u"(.k0fݵQjF1/uĵGtqy}ИJXޖ ]YkB,@DH|C n g'AQ6XׯS lӁ&j()0T'h S^i(_|8EBz\o |c]bxB0G+] ڧ Q.+  'b .=&8_ݯkC>ޜaj0 3fJ;gi9ٸ.Iy[dcnP_` JU^ņ)-~^: c>Ɉ4)V5OhS\;H%ejk4\>!2s^ ,[dtX l)ZY !9RV%zc;8z^mybdԒ/I+cgt5ņ8r ٢mKjq6wɵq r>>YeeOK*nj5sbǘűڧ};TB`n$;NC>]/ ;Y}q=ߟJw|9i_ZDj6J<Z9 REL`!4,"tVib`}{E|ہ8G+|䢖X%!KExu >j&-+lśNr?k29lgC8닫cZ\ E2 LQވ/Q+ƅ 8ΎǘHP?V68Bl"+H~ y!3rmwr*Aen_y+\t g"y(F=cWΟD%$Ek*jz-Rs{%F3ngv \M əG˰xaۙgr9;m8Aa]RoDu1M8Q b͹/^Az'bl" T7}I*놦 ~yb:5sYRS2)up5p/sfuwg%~ SX\% ?6)ނiʱN,e _QvGURnzGS|R~O" _FW$bS4[ Ĥ_f q ;̶|Y_t,ohH:w|B(7E1 t9%,tf1wr˷LI%xb,q[7A֟Ek UP.f(Irq9k:3& 9o"SjxRU'on]%GI$07B 8-Y!_F~3QoF%}Fh6/྄SkoY>,D ՍpF坕|9z=v(fQzl1KfQn x 43W[|'o/J53_.f2aJk!%Jq\Q~w;.%#֭Ф5T,!z4ƞyyӥtu9:.N3=kx b/Z<)M'cClj6B^\x( "\_ NA=lw `̊`cɃ\t OHŅhx0Jb 8w@q8G`Zu`g.=TknJ(?TSK^;6ѰAʐަɖOTRBb >n7/Yz#K.œ++Z,kW5)d3; g1t*DNJl(%!&6!ݥԍd}]Ddex*Z#pH~d rB rO7e/hZ/eO+<.KU"=ąiC}?Պ(>&WL'#DJu f`>ڣdQH0;=8u u٢Af|SoC?@ #C|Ra:V,Ӻ=ʈmeMOj)rH޹hߪXCߟBs;2D(i0X΁ !& ?7R%ez'1FR2e!Ж,?o/r) Q߭vzck$,0}.w 5]=8c 8W5}q9&n*>}kO`sKaD>)\XC[ ۳T{ٺ* J%e-7'ئYӟG4zFk@@]~i+pgru+80*olf%^2a=Rѷu ?jٚL."Z];.3/߽-ą)2~@'B=%mRp?玅Xo1˽1 -)F'UŰy=ܟwmLo̰SЗ VEyUV.|Bnا-`n#KC\xGWH:~8<_ gȜn{' kHa ܴ=8$&O<6oq"JI@ Z],REywp`l"=Q2Hs-<H=U=0 ,u(j[0kBny a=E84?ѫ7ʱAaENi؏28 dm҇xa י^7 |G֖#.@Q9Ԯ1T1/q/N63(S]tqƻ0 N':4XK۩ДnS{n DP}3"|:(Y A:p9uʮ$y[>T>0rX\ASW2KwTX)?F}R-uxI!m x ێ`W+%Nb8DDy\W?dZԋKdBB^)%r_U'`2*5~$piSW˙Ӟoe#:Ww(Cv(lú@p%?=>=FNޞ6L jkT!- G->]iE4B}x:<q$οڛܝιvo]o^JBx Xc&+kO*&&娲AVmgᏕNE‰Ⱦ# eIMm4Ey?Z xJU2goR⸰5*;lc tf2b4F׃\ _A$r)#ueN;iZŮpJ ;6fQ6rƖ^L3X$lhKJ4aoG2@lC.ByMBLcW@w> &B+&wpPK{crc/j E2~;Ai|C3ALjdcoLb3O+Y bcV.m ꟬hݿ*Lsbjq2+FQ`X n NZc!3( 6K|} Fzd!ѩXE+yؤ?6jq0${Roo[b^y&i8@IGՈG %J񧈶wK#gqtk򱖏ʽYͣyXNxK %)Dvo (vᔖӈu)RMv.cn'G<}-5!)^~9#[O+D垴JnH[z}X̽A7q==T!.OeqJX4w"Nm2LU6E{Sʒ;t f<ĵ=}O|[A.U#Y1pΉDYM2@z]2n4%F%f֝ԧ0Ez~".,0Y\ t_#:/t:[Dۧ94>^A#a *(^li擈lc*E5;<<HHR]'/sȱ9 .lÌ3xUer5]V( \Ec5DIbUq)ʖmb1q UuSUPo f钼5!pcXꥴꑨ- Eڦm3i&gEFx82yj9 ?y?.+& L=9G 6{rKS]rfӝyX Kv*F8({Ŷ0b:{Oq)  +!Jm~ΨlL V5CDŚ}APhjVYz PًOۉō4[FcJ};c(7UY;@u-^W/8n؂TN %'y*@EZe't-Ԕseyndvc\V`3Mf^KO1>mlhIHH|`m?w0Eo9 l/#"ab*rLc@4Qnö=:e饨HV`ޭ(]M료\e}HhǙ*7aGG1pKFn,&YksL`yS?9-ZldfGxB.iH.waT=.>Q^>S.ohygE:R]hTn/ZkRr>}P ]5[b+є:/fUf gu wZ n9sOI WYuvN70f My%V poJI<,eB֍􁜌G9]/%%ԷaU 2&3Uf(_,:R]Q"P:T[1? 캈~-OزtҶ|Xa)αlޏ'PL 6iT\3s'7Eqc?ph^h;Z}i>zwsYU+H?}H.{mTg9&qi1$1s@hU+2piǤy. Cbk5t+yal$!1?fɣpkCT%wFnzQDhw%$/Hۣ50΄jTJ<6WҘW9v6;Xh?sFEXu,,ZoKͮ7CٮFj nD/smKRq('o֡t En^o5w"uw?Mo&7zpɌX(<')hR49-'#k^eS>d.mV+CѾTC ҈lk]Vh`@<ш5,+n]5 |ֳyOo`j̅GD=.+PSnD +m nX%TO|!*5pC+CBs;w1#d'ELIiBETSEkMKt']bo:k &Pf[.Nu䃠_搟K'kalW!{>$ f_S$\uB1N TY|8'.MkKq*Xu=m f¤Cl1 .ac[^P(xFP^쮦3@͈kiAW~Ue)7?r'2/QDY2C{rʙ,%ֻ>Dfx۽!Mvxn^RCPޖxBq7_9 P ( Ne^2|*[:u& &DؓKP?@ x6"כj gEH ̇h>Y?h.#v,C'XǮČ{Υڇ/Q!h)VU5 'FL~>{N VAȣwF9ԳћŖ > 0WW?6_{l4Xro>FQ2c&[;8Xġ +IVV(W AgI*Tg9C9vNֽuȢ z@ut.K c?$f˼fdD#[. ܈n+75k--o9'U#mE(7v *Kg*fB }]bpT LCݗG%a,K®mQKDS :ԩ Z~#&;,skpbȭ WgWى#tT5QAȂ~l`&.63P r U-^;+ 2e1r,f-`L [&jv| D2-u2@39$sq8Im-dUGfelGWe}2IxCTݕNNQnL\f^.Gfq^OVj,Kz'[xgE BwA -aRNJ0 фie?#\h BӺ5ٍ2R:0eA1u+|\g [6u59bf#Q@_oHh>[VaИ^^ZsMvV)l`鯺e]SIO-yTR0kP0MJ.62>.ya]<90E.p3E5s/E#܍ܲ,o' (}0lbiް^s ueZϽOYV"x *s 0ki9QOAL;Y)P:$K(1> +̪n~]2V_ݰFʪ0N)\VQqVT$_d7I?9BgX;C:B^& \G1uOVLF+~9ixӶ?8ixـwty!@Frpdu{Vc;*ZnH^`%De^뭡,ظl3A/OOH eIEJ]T0cԝ|uY^qi,sVqD:ƘUpE9)80\}sk,laCЕlP ^X8iW&, tLy7)HTBi 3D23v$x+:tDH}y 4y%99-t{k1`Y)TJ&'G `ܒJ<VzjET(z)_ hl*Yt "\uok`F8:#o0!~|Vw| 8 cӫ9 nCƿN6v-ռi|nx+Ze@ 0 O.` .O$X6(opqߓ܏Ywܶ~Ї!T͙-bgv4_cCLA^r,'܋H3=4|-z }9V (Qd@ì$ h ggW͵B \Uwg{CfM50g_% ՉEg4꿹H0@bܗ]~_#e :rGn&u/qg;hr_[yu5|8P:n%+h+Qs~g'jnh(hAʼniG啋VåtQ .;*J\|#mna}S(eqO0f⛡-(5K^c@p6fz']ACt&J-{x89k%[sDC )E` 1U$Ba6>6^VDŦm>o8i?6W(ϡUE`IļE',@X^*pJU Hf ZQ961D dxŪ&Qjv3/ߞdS7v_3£2w-+Z8kB3ZW16s#ՓOB7t|Zl$SsAē'1f`,%[>9dIjg nJ~:t[^ɢhxMZ*;\(\Ol" -!/PWV7?3XAÓ4GpPuϹӺ6r%,g_Q-ӆ0iC~H VՔEh<[]$c.~pDaL`~^/Q9x[NVxmz"3׻,oaJt"À ]'Nz"RXP8Gwq~|/rPpnZY9'S+"[)9gn3/=՚7<'z]eM qr8E-gVߪ8ϋ2~lI[)KHѶC OA kvON?h@z2SZ h Ooǐ"Z۫<U=e+[ݖdϐg%-t};lI-:ԗYy&mk6 9!OOc?ăJ;da 1tI_sN"'ѢĸJ {RI!$P10f^bƿK g A w]  Mx%)aeuÂ.W%+&|8D3Ɏ}?ٓk;`)U"3_ 9:}ɑ$2}q)I7Te>}`^g)XI0K9 ċ4}:uDa J8,*Dē'F d[gS:GozT#/5z-ՋǒmOI>uk<+4E?#R6MMS1s?IAȰh|_z:G̘UkX)@]( ,iP+~mp͋q(x =8aZM[9diC@*y-_ Wq|Dq Ob iCxt)J;sJ:'&+ֻGȦ)#fhVpEQU5u1Y1D p5RL{Ke5S9*Pд`}ZuSV45Fum0ķ^c֏]NcvhFp) ڊ=_ov.lbB-Rìq0FRӅpIpTl0 L! {zۉ7dڤ",;ZBc$9Pp3Q߃זBJ<`<6;h4 T~s(I; d?2 uZ:M4E.Oyfp;as} <3}͒Yݕu`X@"MY>(Yr :,8nt1yU!kv_<#6U?λy7կ۠j#n1VU wQba| 0_29 29dfn7 D6e n+BO5QةFwrO0f/YҥK"xTTʷ-bXMʛcOQHޘ=RMY#刑KӖ~/5KfWd%McCL H^b[:)~-xmRS3qXDE$P HLTLv!3'oC 8Ίcח2"ς@H]s_ ^ -7}p]A?3T3S?hBȳџ?NshӺɷ6]AiT!ܪB=6MbX zZR^`6$qpWZQG%fntS/+Sy~ݾLC ě̓ym7rpnk#Ӯd-PѪhL=EGah_빢|'zԎiѧv=ipOu GXQJ[@,yl=G⽦`*F|OBU1$uʄ55#߻5/OB5P0A,1bgC[dJu%YcJʐeE?O=I.n=x9Z QN$Heg>نTNt}!t^8^)\䢷jt4*kPX2E-ṟL?Mav(d|txyD :?EԜfu,%HdsSiO! pD D@[zU\*r1%HY1UDZ6%=$K+,/׀lS[KZ]Hil5Mi^^Rm BDܐEj@'#/RjAvv8nBf$'o` ;jpB{8=͙0ʈ^{ᨋWFFJ@*TdG@X IScb -oϻTxτj'><’tA X-3ˣUpF/6I}]O9)bX(z3ޅ/=_*>Na N0{zV\)]Gf\u~h*Nhss~ӣ9?^ˀ0pI Re#gq*t ܒa㬗{0>T\a L@B2BC\wדh,wH2Yeu| eb {cY^ii^`@2lq~?ZGݾL9}EۅJoSQi c ֭,[Qvh9N>&#f@A*9u~eץWw#W]N:~3i="pFGĚߛzz~sA0Ã/3@ec卻2gYՊrc6 wX1|&n4B@:R2q _76HG$f KYf8~c}4Le+S^34Đ!1N?k۟Ih r^k5wA ;%E(Ox-{z g8PXZm ͸0"?B#xn  ɮU$b'$"(=s¢( b1؈RL^ixnWгz9 ,95 EE)Ť%#Ig Āɱt._>g~^ec=XNl*2"zc`HmM'G&eѹ=N>1{YRМ^6zDe#Er1DbZDekXyIal|!"A0~=L7$͛D>WX >2@] 7@T.ѣl fR~(7lQvt4I(̤mEͅ/HN?Y{6 ]~nӚl3"yOzX|QUU'@0^ ̉{q&piO,* ) Fqt 'Eʄյ) ah<]@ˣ`)f枇۫U9[:@ֈH]х>|_I=}Ls,9{2ö}h"% E]',&x;!- G%@1q\ӈko ;é.CIEh(Ss-m9SpՊ#T(1w[KHT._h9nDMM+un >R%` ḡ[ KYC,[,n YZ