openldap2-back-sql-2.4.46-150200.14.5.1 >
A bWFp9| YO=a
~JPoCɍFZP<m"I mD\jH6уB p50Y6Et8y 0zҼ6PAٍlnH!9U&'fE 4!O8`)guo=E@Jm\]سRd bs" x c8.s+>K>ArKk(kB X7 v ?:Q <ԸCE% eada56f478a282720407f230b90ddbc02aef8362 d92a369b79d308e90194d0c8c35050594217512eee11ff73cec15b6defacff08 bWFp9|D*䰱V^i"|Њ"Ӌ@T=Mb]8GV >3|Rvm[.V%ÉP3e&
&f dLᑊ
Oo<8ĹZ<9"`_T,zҔFX9O X3 0D0X *n>0%J^1!f!Фw7^\V`bpDyBaWQ ܑ8c[O Fp3*
$?w譀loexv2
j }9s. > p > { ? { d * @ 6 @ V { C C 2 C
C C C
x C C C " L C X
"
( [ 8 d > 9 \ > : > F k0 G kD C H lP C I m\ C X m Y m \ m C ] n C ^ r b u1 c u d v^ e vc f vf l vh u v| C v w w x C x z C y { z {0 {@ {D {J { C openldap2-back-sql 2.4.46 150200.14.5.1 OpenLDAP SQL Back-End The primary purpose of this OpenLDAP backend is to present information
stored in a Relational (SQL) Database as an LDAP subtree without the need
to do any programming. bWKs390zp35 SUSE Linux Enterprise 15 SUSE LLC OLDAP-2.8 https://www.suse.com/ Productivity/Networking/LDAP/Servers http://www.openldap.org linux s390x 8 n e m m &@ # B !q n `
-p w 0 Z I U 0 G ! m S ` m D %qA큤A큤A큤A큤A큤A큤A큤A큤A큤큤 bWbW/bWbWbWDZ[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[Z[bW 834d27c560b3895062064d6bd269934a6945f35b71bc201d39b26da4349f6f02 341ab2ba2a3a6e15c8fe0e11ae92252616a7ce54a9fbd707e8268269823044aa c83dc244825269e391855595f09bd30a5d87d930a6b33428a7399ae8676b4a7b 69599f2e3e46e386207d289ae3968febddeb73d0ebb222c39be4df0dd37fb652 120d714e89ca5f2a0fb2011be6d215b33dd74633f22f8d760e2fdc03261efec6 c15eec03a5c3e3223eeba22e096f1ed5532c55f21cdc42c11a0be2348c5a8f51 a7da928a027c430875ed2acd9b26b2fb02eb3e7978aaa81631856a6616374073 4641165486ff26910aebc92c0386065eb4f3ac0c0aed1e3617f8086c943acb36 07186033919fbf3f707942a037a6be78267a45762d353789282407c24c29380e 110723edc618b7f43b7daa8ab6659239a1cd23634f0cc9cedb107d2aea7461c8 14fc0189df0a4e0a618edb3f77bd32068a9d3eb2ca4bd7c42ce10e22c7e426cd 5131989c539225510e33c7d229e06ef19725b37e99388bc28414f7e0ff94a4d8 1441c8d0bf25896fa74069648416d8af0d87da855135b07e89afab0c326c6dd9 3413cf74ec0aadd207d1119399b2dcb20a7b3e869dda978b023a45331be9abf4 df960d8ad464bb90a87ab2331d38100e99f5ba902a0c7b7585c861983836a862 d44987078542763b5e477999adb5444ff77923a78e5873a6a163ea12950bfdac 408d5d128264cd7e450344e5d56b76ccbbf74fa9868807e9ebe38cede7101fed 4a27c9369e1bc495cf6783b445031e36a0f381874e8ba380582d44086cb17d83 67f3d27c295ef1c5a31d0d78c970aa5663d00d5eaffe4c3760c943f818f081d4 4f90922bed269f48ac66e9805312c99e0a5a6d73a51b58b413700ed7fd1d9137 89a44abc4d59d8c1fc7ddf56f766d2aaf048d829964bc3c79ee731287d2eb7d9 a929da2daac5d154c768ee4e175e365eaad25b5e8f87e377c41e54b47c5a8520 f5b0a3ba47ec115715d517925d151c3d8d58706b62c355fa57495a20d98ded53 e40b2c76b7bcd22f9029db89bef5856777f600da507738c22adfd65bdc3f3918 fe239ff9d1a69a0a0b46f4f08a7d7fdcefabbddb8322a01a5e87fce43a60f0f4 3a4d449deb182364abb7f04421785a89149f4dcdac319d11f6073ea2df53c8e7 6ccb55422720542367e80472c1c44fcc0b2622aef4e7a08bc4b57e3b46f46053 59c0fdebc8392531ff631c1f91885105cb44941ed95c20a2784b22a3ae0b9635 7941ac74546298a443153ef619ec8d9aed527d1cd52c6e5fadf8be79a1771ee1 8d088136526201a17c2e116b8cae94cedc895fbac4b17f3588a2fd486337d2b0 15cf2430987848717040a3c7391a194d7e551d0d10b47bd4d77b406db5e4a0e2 bdbf88928954065912bcbdb7b5e6160e80fba73dac406e99b679ab7aa26a7073 037428938edc91e94f8f8f1567e42947fbe5f2469100b5ae7a24d1be2513ec66 b91c308e3d16bddc1b96097ab209c6cdac64a9df7851b4b8a5ab0d4a1665c5dc c6c9d254efbd3a3a8bba4f4be0337401dd27d887f64d0e5664448f1a6dd9bd06 6f746461a49cb7b966e43b0ab10a163fe6464cd3d78f002021f7220ca5960c59 792e938b367087a3f83682f8fffc4a6d4d13ece4eba24bcc7d6e8acf1eaa9a47 2e047e3949d6471376c52a11f1a25a3dc706ed532bba96195d41d774d29567ab 24e2868805c104d7cb2bbcb701aed6fcdf9752ce1095dd5c1c7aa8d87a72d2b7 4cfb89d19a1e6c9561183914d96968b29e8e73838de09e2f7f2d1cb19ef9b54f c864d31bb42220ba7654ce133ce79139d80effbed05a66e146917a040d5d7ca8 efafc3ada4dabfd111d61daca3215625666ac65f12ae7f453db8b19a493489a4 2361cf7a66de52087ed6023fbdedf908d187f85dc241d3fe0e419dc167d8f165 345b52d183dcdd6ccee6efd28af55d579e1df57bbe235b6e853171a92b28ebac 84f0a9a5fc720b98390b6534bc128c1d64be7a36a951aae34fc616ebcbbd3b9c 265a1535c526c70bc346e6266b68ffb9ec5848b7161043172374a242997df948 3546b6059c61b41050500e38e0fc182437be0f07331f6b7eec4e8e3f56839b6d 110723edc618b7f43b7daa8ab6659239a1cd23634f0cc9cedb107d2aea7461c8 1312880bb67e1c15045a61f34a7885c004521b9e8587517041945dc2b0567015 dc6951296bd475901df2b1e7f724140ff2cc57dbdd1c4916269120097a70c4c9 35c867bd3d4feab04c3d8f6e820aca04bb271b338265b6b3bd642641f68706cd 673f1f7a12bc71dc017812d2fdce9b63fb59e72ff4daae65d14c6a6e71fd2f31 110723edc618b7f43b7daa8ab6659239a1cd23634f0cc9cedb107d2aea7461c8 5e20e821ca3f6fcb86a1e453860d32f861f70dd576110af06c6812a9b93a408d 74b35982a754ad7b92769b6597653eb5072ec18578c491b974932c082c00fa39 b08cc0d0e45ced5d61ddb4e1b15301013a997d1866cb0557c0ffc3e38dd207e5 back_sql-2.4.so.2.10.9 back_sql-2.4.so.2.10.9 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openldap2-2.4.46-150200.14.5.1.src.rpm libtool(/usr/lib64/openldap/back_sql.la) openldap2-back-sql openldap2-back-sql(s390-64) @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libodbc.so.2()(64bit) openldap2 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.4.46-150200.14.5.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 bX b; b; b4t@b/.@b[@``KW`/@`+_@_@_/@_FN_?@^ ^^*@]B@\ڭ\r@[H[@[vZ @Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@X Wk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V
@U4@T@Tuwilliam.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com varkoly@suse.com varkoly@suse.com ckowalczyk@suse.com ckowalczyk@suse.com zsolt.kalmar@suse.com zsolt.kalmar@suse.com michael@stroeder.com fvogt@suse.com michael@stroeder.com rbrown@suse.com jengelh@inai.de mrueckert@suse.de michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com hguo@suse.com hguo@suse.com jengelh@inai.de kukuk@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com lmuelle@suse.com hguo@suse.com mpluskal@suse.com michael@stroeder.com hguo@suse.com michael@stroeder.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com rguenther@suse.com jengelh@inai.de - bsc#1191157 - Correct version specification in ppolicy to allow
submission to SP3 for TLS1.3 - bsc#1191157 - allow specification of max/min TLS version with TLS1.3
* 0239-ITS-9422-Update-for-TLS-v1.3.patch
* 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
* 0241-TLS-set-protocol-version.patch - bsc#1197004 - libldap was able to be out of step with openldap in
some cases which could cause incorrect installations and symbol
resolution failures. openldap2 and libldap now are locked to their
related release versions. - jsc#PM-3288 - restore CLDAP functionality in CLI tools - Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
reporting is bsc#1197004 causing SSSD to have faults. - jsc#PM-3288 - restore CLDAP functionality in CLI tools - bsc#1187210 - Resolve bug in the idle / connection TTL timeout
implementation in OpenLDAP.
* 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
* 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
* 0233-ITS-9468-removed-accidental-unicode-characters.patch
* 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
* 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
* 0236-ITS-9468-fixed-typos.patch
* 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
* 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch - bsc#1182791 - improve proxy connection timout options to correctly
prune connections.
* 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
* 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
* 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
* 0228-ITS-9197-fix-typo-in-prev-commit.patch
* 0229-ITS-9197-Fix-test-script.patch
* 0230-ITS-9197-fix-info-msg-for-slapd-check.patch - bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
X.509 DN parsing in decode.c ber_next_element, resulting in denial
of service.
* 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
parsing in ad_keystring, resulting in denial of service.
* 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
in the Certificate List Exact Assertion processing, resulting in
denial of service.
* 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
cancel_extop Cancel operation, resulting in denial of service.
* 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
saslAuthzTo processing, resulting in denial of service.
* 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
in the saslAuthzTo processing, resulting in denial of service.
* 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
* 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd
crash in the saslAuthzTo processing, resulting in denial of service.
* 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
saslAuthzTo validation, resulting in denial of service.
* 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
* 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
Assertion processing, resulting in denial of service (schema_init.c
serialNumberAndIssuerCheck).
* 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
* 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
control handling, resulting in denial of service (double free and
out-of-bounds read).
* 0215-ITS-9408-fix-vrfilter-double-free.patch - bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
in the issuerAndThisUpdateCheck function via a crafted packet,
resulting in a denial of service (daemon exit) via a short timestamp.
This is related to schema_init.c and checkTime.
* patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch - bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
where openldap would crash due to malformed inputs.
* patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
* patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch - bsc#1179503 - fix proxy retry binds to a remote server
* patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch - bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
service due to incorrect validation of modrdn equality rules.
* patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch - bsc#1175568 CVE-2020-8027
openldap_update_modules_path.sh has a number of issues in it's
design that lead to security issues. This file has been removed,
from the package, and the %post execution of the install. The
function is replaced by /usr/sbin/slapd-ldif-update-crc and
/usr/lib/openldap/fixup-modulepath, through the addition of the
source files:
* fixup-modulepath.sh
* slapd-ldif-update-crc.sh
* update-crc.sh - bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
SAN's falling back to CN validation in violation of rfc6125.
* 0206-openldap-tlso-use-openssl-api-to-verify-host.patch - bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
chown -R on olcdbdirectory path. Remove chown -R on start to
resolve. - bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
* patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch - bsc#1158921 libldap-data should be requires, not recommends to help
prevent user confusion around configuration ownership. - bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
authorisation of another connection, granting excess connection rights (ssf).
* patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
incorrectly to another backend, violating multi-tenant isolation.
* patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
* patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
* patch: 0204-ITS-9038-Another-test028-typo.patch - bsc#1111388 - incorrect post script call causes tmpfiles create not to
be run. - bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
- fix the script - Emergency fix: move tmpfiles_create post from the library package
to the main package's post script, which ships the tmpfiles.d
configuration. Fixes the post script of the library (-p
/sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
* source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
used before constraint violation to the client.
Fixed broken memory handling in affecting error response of slapo-unique
ITS#8866 slapo-unique to return filter used in diagnostic message
* patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
correct and in containers we don't have systemd. - Fix CVE-2017-17740: when both the nops module and the memberof
overlay are enabled, attempts to free a buffer that was allocated
on the stack
* patch: 0017-Fix-segfault-in-nops.patch
(bsc#1073313) - Fix slapd segfaults in mdb_env_reader_dest
with patch 0016-Clear-shared-key-only-in-close-function.patch
(bsc#1089640) - bsc#1085064 Packaging issues have been discovered around the
openldap_update_modules_path.sh which has been corrected:
- the spec file was wrongly configured, therefore the script has
never been called
- the script should create the symlinks first, as slapcat is
useless on a system which is already affected. - bsc#1085064 Add script "openldap_update_modules_path.sh" which
which removes the configuration item olcModulePath in cn=config
which is after upgrade from SLE12 to SLE15 holds inappropriate
information. If the cn=config is being used on a system, the
conflicting items in slapd.conf are ignored, despite of it, the
backend DB configuration section has been also commented out in
the default slapd.conf.
In case of correct cn=config (the olcModulePath has been already
removed), the script stops without touching anything. - Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
* 0013-ITS-8692-let-back-sock-generate-increment-line.patch
* 0016-ITS-8782-fix-cancel-memleak.patch
OpenLDAP 2.4.46 Release (2018/03/22)
Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
Fixed libldap MozNSS initialization (ITS#8484)
Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
Fixed libldap memory leak with cancel operations (ITS#8782)
Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
Fixed slapd to maintain SSF across SASL binds (ITS#8796)
Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
Fixed slapd CSN queue processing (ITS#8801)
Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
Build Environment
Fixed Windows build with newer MINGW version (ITS#8697)
Fixed compiler warnings and removed unused variables (ITS#8578)
Contrib
Fixed ldapc++ Control structure (ITS#8583)
Documentation
Delete stub manpage for back-ldbm (ITS#8713)
Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
Fixed slapo-syncprov(5) indexing requirements (ITS#5048) - Use %license (boo#1082318) - added 0016-ITS-8782-fix-cancel-memleak.patch - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Add openldap-r-only.dif so that openldap2's own tools also
link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
crashes in threaded programs which unknowingly get both
libraries inserted into their process image.
[rh#1370065, boo#996551] - use existing groups instead of inventing new ones - added 0012-ITS8051-sockdnpat.patch - updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - Added OpenLDAP new feature implementing OpenLDAP ITS#8714
0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - added overlay trace to package openldap2-contrib - Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
and 0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib - Remove legacy daemon control that was used to migrate from SLE 11
to 12. (bsc#1038405) - There is no change made about the package itself, this is only
copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
/usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
"Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
openldap2: slapd crashes on search with deref control and empty attr list - Drop binutils requirement; the code using /usr/bin/strings has
been dropped in openSUSE:Factory/openldap2 revision 112. - Remove superfluous insserv PreReq. - Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
to let OpenLDAP read system wide certificate directory by
default and avoid hiding the error if user specified CA location
cannot be read (bsc#1009470). - Add more details in the comments of slapd.conf concerning
file permission and StartTLS capability. - Test for user/group existence before trying to add them.
Summary spello update. - Move schema files into tarball addonschema.tar.gz:
ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
attribute in the generated LDIF. - Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408. - Move ldap.conf into libldap-data package, per convention. - Move ldap.conf out of shlib package again, they are not allowed
there for obvious reasons (conflict with future package). - Build password strength enforcer as an implementation of ppolicy
password checker, introducing:
ppolicy-check-password-1.2.tar.gz
ppolicy-check-password.Makefile
ppolicy-check-password.conf
ppolicy-check-password.5
0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
(Implements fate#319461) - Remove redundant -n openldap2- package name prefix. - Remove openldap2-client.spec and openldap2-client.changes
openldap2.spec now builds client utilities and libraries.
Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
for OLC.
- Be explicit in sysconfig that by default openldap will use
static file configuration.
- Add the following schemas in LDIF format:
* rfc2307bis.ldif
* ldapns.ldif
* yast.ldif
- Other minor clean-ups in the spec file. - Use optflags when building - Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch - Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
into 0010-Enforce-minimum-DH-size-of-1024.patch - Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
/etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
"not index" logging:
0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif - Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
to address weak DH size vulnerability (bsc#937766) - Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
(bsc#955210) - Remove OpenLDAP 2.3 code and patches from build source.
Compatibility libraries for OpenLDAP 2.3 are built in package:
compat-libldap-2_3-0
Removed source files:
openldap-2.3.37-liblber-length-decoding.dif
openldap-2.3.37-libldap-ntlm.diff
openldap-2.3.37-libldap-ssl.dif
openldap-2.3.37-libldap-sasl-max-buff-size.dif
openldap-2.3.37-libldap-tls_chkhost-its6239.dif
openldap-2.3.37-libldap-gethostbyname_r.dif
openldap-2.3.37-libldap-suid.diff
openldap-2.3.37.dif
openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
openldap-2.3.37-libldap-ldapi_url.dif
openldap-2.3.37.tgz
openldap-2.3.37-libldap-utf8-ADcanonical.dif
README.update
check-build.sh - Upgrade to upstream 2.4.42 release with accumulated bug fixes. - Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
* Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
* Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
* Remove already applied patch 0009-gcc5.patch
(Implements fate#319301) - Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
for Berkeley DB version - binutils is required for "strings" utility invocation in %pre
[bnc#904028]
- Remove SLE10 definitions s390zp35 1649928011
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C 2.4.46-150200.14.5.1 2.4.46-150200.14.5.1
back_sql-2.4.so.2 back_sql-2.4.so.2.10.9 back_sql.la back_sql.so openldap2-back-sql bugs examples README ibmdb2 backsql_create.sql backsql_drop.sql slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql mssql backsql_create.sql backsql_drop.sql slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql mysql backsql_create.sql backsql_drop.sql slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql oracle backsql_create.sql backsql_drop.sql slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql pgsql backsql_create.sql backsql_drop.sql slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql timesten backsql_create.sql backsql_drop.sql create_schema.sh dnreverse Makefile dnreverse.cpp slapd.conf testdb_create.sql testdb_data.sql testdb_drop.sql testdb_metadata.sql ttcreate_schema.sh tttestdb_create.sql tttestdb_data.sql tttestdb_drop.sql tttestdb_metadata.sql install slapd-sql.5.gz /usr/lib64/openldap/ /usr/share/doc/packages/ /usr/share/doc/packages/openldap2-back-sql/ /usr/share/doc/packages/openldap2-back-sql/examples/ /usr/share/doc/packages/openldap2-back-sql/examples/ibmdb2/ /usr/share/doc/packages/openldap2-back-sql/examples/mssql/ /usr/share/doc/packages/openldap2-back-sql/examples/mysql/ /usr/share/doc/packages/openldap2-back-sql/examples/oracle/ /usr/share/doc/packages/openldap2-back-sql/examples/pgsql/ /usr/share/doc/packages/openldap2-back-sql/examples/timesten/ /usr/share/doc/packages/openldap2-back-sql/examples/timesten/dnreverse/ /usr/share/man/man5/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:23732/SUSE_SLE-15-SP2_Update/36ba2bd8cb01c63571ed0cf00662250c-openldap2.SUSE_SLE-15-SP2_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=692d3cc223be02e6e594f7898e7f5ccae442cad5, stripped libtool library file directory ASCII text ASCII text, with very long lines makefile script, ASCII text C++ source, ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R P uCɓX)[ utf-8 8d15917f8da25f6c2a1cda37921c790fff616b0089995baa7b4fbd3c570afc0e ? 7zXZ
! t/t]
cr$x#FKРAX8vs[z5RB/ B ݧxX=UD+ڝ cx!oD 2ah3|gOSg~tb9X>a g% QJ>Zk]bL2@+# BIm}
ߐwPy+
Ѩs,QFc!1S;':[_,K]CI2pHtpa? |6u*SM{~)MpcU54nʥ]s**K(2]31u#Is·BӢ ?xͺzU>r^'2E_,I'69Nq݄_4P3
ҡs(Q>ίywvr|$T=EPwi)O_&]M"+.Uh5-e3dQ,o.IEP2aysOЭ۳FqWMXyB)ev"mW6#GKJbDEM};={= 2&5퓱ĉ۽|V_BqÏQ
;Is'GSyg_|# 熋 E?xޗָ/g]MdoFɚV7Gu֒ ceX VVǘ,:m['rJK 0?V>zlud >\S?Zum R/ @fte)~_:#ῳua,(ΆЧT])O q &ONU B^UnƲ 1$d%'щW-Ĺu}OrY3ctvW Ô5PJf>5F9Ha^RZ~L۫_&.=3~0~my}n.}ްR,X<$K'}9;k*+wc_Jf i]sf]>>),~ x St &Knrw(/ @g+f Tu2 Y]arJ+&O4x5Y[#TY~KpEz뉺2xFK=Eoh=q-PЉTə!<^, I U'Yj.S T,OAy$_rTl4Lb{V
z^4=A g_ "b_6 F+b&)):Z[v
#~g-hv~^`T ;Ḱ/Got< 67^x0w4
^)w Sꐝf[KDAJ( ev8,e\'3[\vOM(Z$3!'͟Wu-}z=kkQ(n!({ObK n (PG"h[WcT[^ënSl8E] k'k p`?,ԋ! ɝn
E{W GV`B0@Ӟ̍ᔡ}C^BQ9
]7f/i{=yg$O~Wxh-;` vNxG.7>,.vcO<7dAڱq tQv9 M r/-Х2ޘNeخlZ:
j
đ
O~ lNK$8KIa!4|pMB]x8&#Vxa$N50ٙJg?@Wumېu.ЖoOo+3Z/F bO3F
(o n`$N0 Fd%>7i+hRPQ\^dK]eX2;N0Xbn? Ƴ9?U|U-&rG `xtRϘY8˕K_ݒ)R: !Pbb{D IM SA]Utw9 :'pas, 7 K[(V
ٹ i-%r w,;8m^kS܆ T*)+6KN9k|75HA*Z>,BiC\߇|;t#d>hL\n lͱ5axb7]0[[5t]n(aϨ 6;O- E0.~Z^
85\)`lJY1ݔͣaT=C/peD;©98 9 Ac'05SӜgcO DiQ\^@\]HJAܾ:^ W5? `,{Qҟf22ߊ)ʔL U
J?Y 1ӓR/>&~PkJxeUi33Q8 OI Fluva `mu0)#{VJO%o;x)Qcy֝2a(vڐU$5/:)ͅ g0t&݃TrVo`o^:w-?-ˍ#.kvt<_^]Q`pLnW7eW̧C"Ж]zKG $Cja=2@Y'[qM<$lwi0PV3ew|wfv ` };Aܹ ]6
e'+շ* .M ҍ Hr cfGr6a lllO ܮioxW1aKڑ۷u8a?L/rxn{G?Y,2n1Kdoj@j}?ImwybTNE2M8_ei>'b@鋡Ldry?,o_Jr@X[A]ikPVWTY5)$ĩ*q7hH}L@E
yNѣzXLջ-mY@^R_Pױ(>a-X32`^&JN*!URtV6z &w! 3"˞YHW 2v tQ{0%$5-zns`Z"Qh>?5ri_qÈ1X_=6? E"LS\/D =P{$\}Lrr2s9hU.@ Vuê4.eNq3}FěTl#32+i w#Br k*bǖ`Crj`Tͩ4%EB?X'2ղm6HIu=2 ryNHhpN4{DaKXw %&
RH_,G5vޱV( })6o o 6VL~xY(3^Fx_:_'c6bvՍ-"Fl4ɵk5K+U*68 1p%KS'ŵwHN6\F!-eޮl1<$`,s
#_~4 Fkll0x: !-.1)7
RFecY|
n~k L']?y3cT v| =vD[ KӼZ wj79 ;~|ߚȖ07 =T&3gTau A
c 5QAFМnVaWFm(~ T>0UWNNe7 fOo.k':C%4Ox+0x=zrw;
7m`GGX῞_עoPBaWz>7Fx(z?Aʾterg3QV,KHu1 Z05
JW?ɻ[o[
,#zT?G. 3M"|fnAlu!_Ol}oVuMpN .6 J7 Xܩ5Tcj6Y7 (紀\
M]r,lI >\1H@ea , S$,fA :@ 2 6ydy4F sS ~͖qǨ[1؛++5pm⡃8>!Lo:Wq[ |%>> Wxq%;H,q.QJWџ#8pN?/ۓr
WGQAW3 b6w8EL;#0ys٤~rM R)q(BZk$-D; t3 XL:o8c-QH[eJp c~gJXCyʐ oU 9Ɯշ]_$%U}ںhtj`sBۋ&b FQ7 3JJ/A0sd)\E5C"5mH}GJ'd4,aL6m)'ȑCZ L4w¤drd%FgОZ`g[?Cv(p{Z.IPޠK jr@ZcH9W<&*l~ Hwc I~^a?{XL ,}fE SsD&aj۪S&"Ũ! x a v←Yj|qu>1GHİpas~I3@GWݔ~71 hg#`dB-Бw" 3i9eUlR8Dqi >W0L^?#t¡jk? +j@&`&R{
mFn0wF:N6N8Hb_zF6+L-}+$;NTS{yW#Ƀ2j ۷9eZ:=2)_qNwN% `0QS4 5AU;w 3m>"
JWTڌYn q^ 1.ύCk]Ќ?T-M>#zk1$]{[ܮ]ad(Xvv[CU:;ԣ.:qa
M4){ص=v Hma'}m%]wS3@)$vS"2C2|YS7Z 49hG'hxU*ْn
X8G ɴX !SF l0+A ,Y>LN@DR8dI]zGZ 2qҝ 4 %|"koS*G #LвUoUN*+- ?:,OQF`@)5]b+t
+DApQ'
䱖 嗣u)Pɝ]R[ (c|va;# ڍUC )bIvr[7ػP@ n[a駊H/w:/@y$|jˉU t9pM
^4m1m[&} YE .N zr|mDZХqh `k@s(ɷ) 7뢡m1;"\8ne}.m#tP;]G&S". k`vm6Ϟd `>- *?pR"!ݖ/*Yz(a+[~$%`쟩nLܑ8Jh>;w^qmS?-zVǴqxu{#I
|AZ^]ź;XKzÅ1ׇz4UòH[h?Zӄ:eoH{naQ$۳.ѷ]ʩԼd*AY1V ;Z%^ ]0ymW!)|@fzfvt Ġy}^WDooeo(:7iL o~
Z3 (Km4},e ,! C|A_ MX¦v& i$_~ZBŔuo?k~G|ug<{SQ> `|IkD77M\m1~M_?J|:%2c(, ~2a(]+Qh˞ZnQغ!d' c
a+Lƕ߫InK| Tp C-PIH!vX BMW
Oؓ EB\7Vhx6h}_Hiod؞ U7hdpODuA.ǵhd2b> k |ڸtݺ8ncbB~j/?Zsدr[P}RCD\
b~)K=Q BR }GVGX9~1E)ٗfY9ͭgƻT[_HQ m8hvh0B#_tD%o"B[OVۓY ХŨ;4XD6|%k>1+)7k$yzt^Ή3R؋G Y^f1시\)8BO
|U7;e ΔY DMfc'<лaԵ>y վoƷi S h94;hI1PՒXlq,~=327ZˉږZaLMZ!pԀ*}rD7zL@<?h22"0i3r {Kh{<Uo z Ds
3*@hai[,^x(a@LyJ$JLg -\]{rE}3]Y+AC2Oi$% &.h(9)CzC
W\s RL<})1/k %b1ckHȉjlgܷu X >A ok
.R Rb/ԫLsv2[ӞUi [-I7nFMl@ }cX R!^^d1|#fN c&HT 2Aj+r'WٛQޛJ@J!|Bvm%gEӲ 9 ni:̀Bt0¦;'\kRV+)WC^)3f> aZ/95ћ4U3(߶=Ɲȥ֢ qNL loxS5M}<-6pCE/AŦ{Q6#lң7GM
ٌ]>U95傧BvlKfQ%n`5$^BxY :DcjM=!9G"e.8s EѪpxijWbO
Zq^I֨riBԣg Ҝ%iD>:F]=e!?[Yr $|WɟMS]Onlb\\xY4SMzn}G (L?x![AWֵXШMxv qGS6
.O ge pK )aF
@ V#w %&"x^doD-orDF~7 E6Fgy+An|tC
g'P-(EV!X7O* K1E,Sf& AkE%9?5Dn3OCFoXe+FR"St$LCu;ޚDzFBJY!zUUj' ͒CU46)C_Leݘ\{»[NYN9]SL dQKLq2PR9
ZGD&.2z .lp*uea:6[
%xO/s[ljL JJٶKZ Od(QN97*6jDr_o'( ∜$ro3J+1,QZxkԸgm_#&eA1wPF@0bv]b.vd8c\#sM^[½3Cc/ꈪqZ [:ҹQk& &Zj@ԥu5JP#FE$ weג_, ƹ`U㙴aD1rXmX5LRO䀠.{\]5ŏVݩ(^s3+d;L4w=KuEb}$ov z7)賈vZ-QvԖ=Pj[K33V;iIf{^"x' )X}Rt[QB=4b lj~GUSVFqs[[nݏ>x߭= 킥603 0;yק} \ Q- N7W%Dn#Y^sI<>.Yi,el5eq! |C3 gp:.WHD:t4.s3
6W?UY] G>`3U<JGIVjb|Q=`3[&[wZW;SF,&:,.4JvMq4"ɵj1W>bNAp`C4ig;J#+ݯӭZf,5,M zc.&?>jĀS >YDG$ %m {tt٬/i2Un0A)
M"uhw3,Z:IZ6P "7c2
nFa伲O
:dBݦ˽4Cky
&0 28.(
k duroT$?ڴWJfQ! ' Q7իyq >К=.3'fIC-әLrރ'a %XDpw<{3~fRQpVqwi: 3`:Rft^mB2~ǭmAOeq<]Ec㛖/g忻K[ JxZB/QИU>%C6ћ禩PFnv
Pkֶ?Pj :ViL;H8.]1=)=egܥ/7{3XK>HoF55 uԔwQBs4ҥ3ۈoEk!TbS( s1Yc|1,-F'L
/o `h;m6, K= Yf=BS6aЍom
v䢧&kYӪ5>> 4Y.o7 oͬPFuOXЊt!)U+̭Nzv1_
dv3P61I݄t} Wiy\#6"sQ
ndh(Mq:GbcDʤSvW9{Ha*,"9a C\^0.ŻkIMR_%@PM_DCLWn0 -VR.Kx]A>sh۔ؙKZoԤtD[JH6\Sn%oSN ; 9ÿR.ăq&r+F_Ƅ~/xgyGe ƘN+$leTE>ac9 =H8Ykp tlI@4N]Bh!q]_n z-es4@L 4E3=`Z`kxnT/KRAr msk @aݱzшKf?4w^^ -'JkmxESMr9%A?q:+b ^YI6H7~VXt) dLD'I# ~lQPN3'{n(e~ ΙPݍ,~ vd^fQy =DŠCwIV$T۠ !xe.aG / VG<2/mc$n/w-ARؑ XK]zظ3mbܜ i˭D` vuq0{;k4Qd`}̠,N3U =LT+o7gϯ6Z~x,$GbyQ2.N4lޗW[s}o)
Lf
hl_i!5U!$UL7Nՙirk{|ll#`u=ej8'%Jm,_AXrDPo+1>lYY7Kj ݀^6Ԛ M:/T\F`4Eul^zC;(瓻WJ
A &oSyAyP|Ϛ hfï -q ½=zU>++~V/N]O
Nی^`h#on~6惛_ _7J^k]QI4%VdR}P
t< {~fYΧӼ3LSva8s[Ⱦ:(b:L&bNe`ZyPLw!mEjؼ؉aSߘ;1]Sc\]Bo迕D=%fá ՄSӠ;_b@T %Y@f1r)r,XG(t
\T5 te 9n )9꼡/VPxU10 0⼊{Lh;
ڪ-d6GGm&YGw"U۔NB4o+ 2g dk. ! DB fŗ͡p ڽ߀@D\.˦,sT0=~C: IQO:* ?jeN\0}#˟l.GW]`AJRӴ'1j9ږ!l_~ M)գ 8W
˻=i=55B _BpIN+O#uܱV#
._ryWTo ݄5e!Ge)7PFߙfBR%aQ-'y.IU\x9#jG~Q-o,1' kYTA1.]e/&"(KET.,&El}5e$֬,r$-}jS䨇~ZCR2+ !,05Qv
9
fY$V$Amφ2[ܵ=܊ `Օso;w3aQc邒h !3=?<3_}dBC!fi3sEnK!j E!1ks N CKGe? r4g30$B*"i1e $ }7)dغr{נRQ`A}iWNJy~)1AoNb쫜EEK)E`趆 ƏĂEV}-'#Q|VnׅIcC1 JMe41scY_xR]a_Z#ޅhP;lHwp_F3VJdU܋d3^V {Ր 3ncp*fKOEiD= "r>kݷ)xc|]܀kAٖjXx)56]G[R=NA
=h
/ 'ɤX@$ kNacJDu̠ l'z,c?.K.G
qt{Ro Z30w44fa |7?TD%( M*BTʝ2 3dxޛtXX^wV>Yjs.@ EO.},^
Σkl}̔NugeyY9 ρg=a_7Y=w 1w' OZim[OŴƬ^O eq5 X <=Z*[DR2AZ]g].Nϛ&ao0y q4]ktsڃ265XD kJ%*_&/VԨ^2~Yw/`tXr }r4?%rsc-;A/e4u 6)^KGWA, Ig/ЧmC t#wT z-ڻY&zx 6VN:E4ޔ^xؒBMjd8"OQG ."~ҟ!3 K{3\ eBp| AHiL4r ;hKx(>W"tWXmK0%'MZٱ#10bR Mw1N -2QVhZ6sUGNi!CLE>z((= %VGDݏLQ7 d80/ "< yI
@:CGٴfVqF*
Oʎ@?Ϣo3~D
+Iv9*ܒ`xm7V,ג>98{kTƷn6%4[}- +scm\ : vI
h!˼ H17e;
`x Xp}5&L,&od @ӿ<҈'u?k<+PC@;|ֻ8:p{>q<|HE
wy/%D^iq~`adƎF
+]9 yFddv xU-cxo~M^ .@@:#K|' K F0IbD
I>
̵ofX| U',օO{N28Cf`a|u{DI9;r5uRIh _0m pORMF5tƞר^ hJ*b 9LJ%}X n戟"; M
{Y/nC5[#t;쬣 sL Qa:
M35i厔YO_:aC"fEw_k
24/&] H-뇨Q~;2
X3ꚁ y
,{OjeJX &NA0 Q->{8Lb.r"roS&
J99"78|)D v+FT>sM`T,WK8gH2M'qJQꎨJy ʎ 'S$~EfEW[ ~ Ed_80[gDGwǸ],Fmi;Ef?r ?Ha٧=*'2 -NvkL)7*1}{
ʟ =!@C3:2k^$"KvӺOD"?>{LM3ӿ c˗st=3:D(\Xá<NR P'/;XzNޫb]C"Lp6MؓpCP 2 KEz GϾPE$B( %2,7PL 9Tn D9$Kvce UݫwE&p{ kKH":0eTx'4PJɨ;tQx-;}xj\Q([6Gns
A!g J2o~ZD3_Wj:C UBm~~@(J۞;,|Air$(D@,oHp
h*hl/J0m&1Ä$3NPP.A -V{K 7,-N*;m$LR4o#КyHi]!53M`lcH=g8MbB-#5 Q l>WYc0%#3mʃnP'gZѯtĥ # ,Щޖʵ",;qMry{/,ccq8~fީ\(F" nWiVMj/VM %84F&
٦Zj2iY9y$LtV
܂]: 4
}oe2) M 0ǀЉl`|]?X{;F A;`"m <*`,.h#&_sX`qqD# pXe4ľ
jP3iGC'g
<;%9GNY_ LGӑ?7`Z%f0 CB.W&LNjiF^7`v%>wVM(1C Ino^kZ hftLrp68 LR+]/0X~eq6vX ~ֺ[$dSS,"#rX~=:_6u
~4Ԣ֘Gqf O|So ; Ɵ
Wj*>>_B``A_b< muXJڰwc Οfi!)gO(&/{d;=2 nMkbR+Nkl e9fQ1 -O 3tVTCS3ih(#
B觖"` !>p y6'&:30\p}xp}f«f?e$ ' Ä\34>7@(ɊI5'mj,f!7k} I3mf=Ma' /a}l礡ҜJfO u}?T;4wW P t3 flȺ6^>`&? +t}Ǒ/( l:ɢZ}|~o9 TG @-Fٟz)BDڈG$^y 4^[Iu u.F\Q&PQwڑ[2l1_+uD0!7X1·B 0¨ wg4XB!VBj4#_t6N1fb"
FȆo@b <{ 餖Ttm; B (4ҠK&h gY_/a
hC^F[ r^;gp (kS`a_%
:I_x7?iϔYLTj$&jfVQמRARo{щ?({ez77#m0GMh3q}vi7G)(ҌQj5mmp bTcy4Zh,; /'J7N6]xV9bM. 84mGm4#=<7 koU-IŏL=` uJ3efa)+a$=tXn
ga+ycv tP}sjhؽ"o{fM3
:5!tFA NfA sZFtlu&7Lpo {v۟ĥNAtLWYl0)b60mJB/{}P. V*
.K8z -^C |n0k5ƞTJZwI2Jzow
;TN >XJA_C2{Ί"G6&C.;fk1 uZUCry'M͡TRB8&.ĭZ.Dȼл`߆ۯޡ u JbZa kHP/k&gs 7_ !e XvX Y,/U
^gkj[
3!@iPū(m5ў;z\T}/ ,DZY LIr MM`";Ke CݛgKL:DoA-HG2@KfQe.+FgK. 0Mm^[xmH4%([FӠ GR| ei7m@#e `p QĄ>]+RKۥ3(hfcMq @mq
h ==E ﮄ mL?3d|/;ɜqXM^3M.8yX0 ` JŁe Y$QA|'
]@g py?S?ŭՏQoV>xQ 3;$62@7KUn=1%* ȎYw YloL>V] ,\} 3#'\!6 p~2AXwZx,gyN)S[Pt^RCGCGnȑ3 )pOb @3e Q̨;
JtNWe >]l t_bжNukb:W%ƧAMd /|Jn $ |P뀆u'feabCI:x`~3ʮ;dtqN(-cnJniPxA)ک*Ao콴hr" !<\rqWҡkTzXbm<gP/I,1t 5,A;qo)`ͻ.ḅ@zXS7r
3A{ycZA Q)@BP"bԓ ٯZ; 8Y
Ul(Ot[R7fy1tj).3@]-LZxZ;Mk hRW,ȊR#뇞Vǐ,y3!y˫6_~^
N Ra}"ų_Kh3ɝQdbq&`pSƈLՈ5vb9
bn_p[-D>k,
\ 6lft))#MN'"~bHë+;œtˊm+ʿ'~gC3MO⽋ALSd|\ƿԛd%!vWfT1 aa<hW!.M(m7ȕ8.gxM)l뀴" q~=@
?͚3a4@aiiBQDC.& `\ [:c&{څQ99AT':b% SG]/I#8rjp` s .BU&}q Kނ?L*tVftؔ0" /tRH˳
RhK SoX+"1PtޕQ;=M>~`tب b>%E'PB?jVWպIIe8*_{3W| 03#ϚgB\~ѐž<1Zv$C:yP:]e WM 3U
/Q 8"Tř uslwgjQYɆWA/WD^_ZBZσ`rgLy]c[U:FJs%J8Ls;( s2 p1m u
?!q=
叔wz)C~xe Ld+i
{X0gXP(-K/. C>%o (`"2\b䷊?o]7'ѵ'I\Hc^jjZM=IS0h
azs2?n PۂU8Z5EE}\L6wDm; 77s
٬ЈٜgDSh,πQ+.*nA_"QJ [wy|3b Z8˸ Zab/>ϱuG6'd# Rr h,Ƌ GA3V#1]Wa+ߤ6D tdrDZ Q&iK 8?#IqLҠD'XVqڥIP^R:˛4J8|riFL1 GCk7X0 ˤ&0
*WTweנȏڭo=rv Bq@(Beg?q_W3B]h('#̶s%U*kT*לVT"6Vb_|A8.fȓ=h IIth49Xl߽_au q:9\DA #-m iSSmrU:NT!l.sektY 1OBVN[f ꧌+GV/oD[qBĬ(AmZ#蔏WŽDv,:R-חl A\MOOTODu SL{ P}Ҥ^Ų %YkCD+ysRo)\I~1*:*g!=)dXbQ
Ia2('OODEʺ( Y˾xp ^`wNM ʻ!߽O5U2E9ay ϣGyg a5w'!鸞%DCc Y=83<åh] LjaEGF~=2* q[#!އLQ N]ɡF%^`w_6=ƘXLӴOBQbF9/@*_& m-\Qw'8 A~i gWqr}94ڀUY!*-~_'%os5U5èZB?E @iK5oJez+qK7{tgm-ǰ?dH o6j2$gBA"[sm $
8 *<Ի Ls("@e\ INA߄)zFdńSRXP )? Fg>稓 -qT
IfU}C q =a& #&IzR =t_TZۈ=`Pܗ / ]ܠzS K?)
Szp'l0ggV n. MYUZr1.F_|&;^nB"7+a]J7 Ϫ$Sɏ~7 ag7Gy:kiG~yhJD^^S1WRH> R&V0#-'++{
r{ 5n>&x (|o<IVPsk9kxYm~=8~$H뵦 ")o7ݝU}Kܯ3!UI'{Aq *#VxufhJՂwS)c
q692icI͢"ڍWwTGB~A
EZ%b3'+8^: >v$Bݻswb$R8i)89wcvv+ k_qyx=+Q.!v۳gۙas] faɧ`K7):mV9Dcq+C p%^.D5SƮF ) Aw"퓵wFx!ejAoՌTם@>)˄X>i֟ |||KƹO+2̶- j
Rٰ&>X9VVy3?Le>0LݼNR3!Iߢh@ @'TÉzt S|kN/ j#? 0 {nOoׂ}A!}`-Y' qTϋe zdzU !G(ʶ{ pݤgq ~Q}: q(뢧 Nt4 *MG<[ e?_Q i9_9lV>,0+|#$@$xAu⌲ ޗgXNc/J+NVQȳEd|
&l'G#RQW\q=S(qR`ĉ ݶ҂^ǥq K1ܟhۓ sKiŎa-0: ހŕt{=,ߊ| /< qn: UxT@c&R8ȴG s [a!fۼO2D|ԃ˭ săp-h
w+T(%< n<;zW%LRd>4$LLn5GY(w28z\
S^B&&u pr܅BhJ;)| yVn%>Cȡ
4 1^~*I"t~k|~81 7JyAe3= !_VjKyYr6iNd3"8hcI?rq1Xlɑ-qH&.|
T?JA,փpo_6VWmQQe tE@xgDjO7˻ 'i;!kA#yw PVS6T5cC9 ]MVr ];_{|lsOjMa^b66\
F[bŖWi]z :N57sY
pmt?Z fgla]|x(z ;7QʐwgP5Z*^'.K]~8dwne2p¡XOPj;(F$ M+vr❨lJ[w0z,ހHi Vgՠ\C|#.wEҦz
&s[#tWKd
MJ6{n7N¥N!pO%)'鴇D>]%
q"ᄒJ9!^?+-jD]*-_(fAc/q6L_
tsS{fQB̕&veNZ?X곅5.`EH
j/ `>7H09k YiHIӅ B0l(w;/h.u1ES0R'
3!&j4$IȒRS[If69c_
u E=npnx1'5^M}Dw!bc;@ZSGG(g> s"Hi 44OR4SVjIް-M[m /j8$HJ =XSv
>otFFXAlٶ /x!X{?I[ПPz u[IՖ$9Xi EgLv+T %IfJOo]Rq dp˸b
]Vzڌ/ O+7笹(߉5wwџłaԠ " aPQ3x:5VB3ۊLbuD''ށ&gYfzm2?|'xsL?>-Zj%ɫM曷q"(d )%BdM # FN;xAxK4l&[qc!Eiօ_
|҆fGCotҐ9o3^\UoQ/ nMG3u8"_N:F͈$V,ki]ְ$*q'U,1e.y;~QEcDz
tB$4 &_݊M;D8 & 6&"?} %>+e!bC $'Q5h!mRlͧgzQ1)Ȍxkg/~\A>a9֗*Ţ{qpwRPH)jQ3b FKZVT$HIS6ҮB GئNaR}c[Tϕ@ HQ}>jp]Rg=tX]tl rߞo'#R)b'H _ D2=52Pŝ >E 7kIZvӨ~b`vbb_4j6uؕ 4(I56,
ӔP@ G`;,`v+ $nqLz8h͟%\CE &-?A?~\IJ,l6%k;mT<
*ؙȆjsHA%%C
;j\z:0lr -2J䊒cC&3 `yʞ{ PYƥ i,+{ۍea7Ivnqy sG Aa\M'Z|2$%^e4 jh6I {~*a+JBM*vWZ86 ϊ r9x`x? 7ޅ<6 A M7q{椛f
7Lpg=,=j!^5DUmaCC`j6"lvc X;JCn.hXS^vh'u >0`dxdo= q<pD I#ōSvlԀ
hYgFn )'=B5DPA0#XH:&E8e,Wà-'9: BV j}Igso"L[2\Zٺ ]
0qPm r26P
b<
Em4p^avg=?uqLW.cwkxh<Ǽ {sZubgJcxb~^QMJC"[9# ̜\uS;%wm_
}qB=㈌HS=C϶ rJOw:*: J 2i5L" ӝl549qN%c,D *sTڸsXeWO<% 'F8&f߰|p 5 6B\%Hɧ$YT T⹚nz@zd#h:Њ-0,Sy,͜ +Lj=s8a}VujC&=hbw7^9-/fa4
V94|Xwp,T..,"?: 25iJBH
C?b)eXd}g![|^mUHD[Ve#֖XB~
-fƗ]kǚnֵG-$} X 'aPJMlIx~0k/.~6bz%kLj6?.~VQ~ y}E$#*rrJol83떒uS%ߦ$CEr"Q Z}DZE./߃*T? zRS̹H
Yv/v,.OaDG{J3}N|{#am
I>ʆXvW由 #^T)⧚}gZʲQnP)qK
q?' Тkq 1t``y 'e0Rr5I$9`=0`VfxY2+lϯֲ)anĀ4 " c'0Obo'c
|(ḥELDI ͤNĀ:6NȪO[Iq"}$]BY Oפ/gW5/ B㽋`@pzƩ Ǵ6dsӱLC V}=) 4mN[5Z|ή:+u//G: + ]Ϫur,&KRVD{Q¹:*>]u=]&sH Vtr 4`#W B6
W>XBzԭG9;=[TWwSUSS=p&k&AGm4wTAy,bub L;#"9s lNwk,r5NB˺@ynWE Y#d%ܒ.Ô2xy^ SJ? <G*
&3ksQB{,_-ZG4̭ZMn5{u~|0DXKo~kh7
АzZ C08Hò14k2m|*ǭ:`s<㑵Ѓe%[+T.mAɯ+\Vb/ݢzU}4b^u[
È +86l*t^ʢ5T Dî)
F80O9ܹl mPH7"1kB+n }z3d%=@QQ?WqyÙNIcM'6fiFBO \ƨ Nݢ9Uy[q70[ePrN/]$iAtrz1fZ%z9j «Uv1aE\2>Bk}]Ȑ؞ӛ@Nv D`Ru!A1YsALaxGz?ﶾzI9<@lr%ah68,iVcmxOP*_e{TA1Jz\i$A\'YNնJ><_2]OA
h{lEX-9 Wbyb稥{=BE 8yMK{$w]%AR`]-(O]g,M h.b? )gI
S\ݖ UZmr!Ч&r!a('}Lq8߿1Մ+)Q/e/py@YѦR R>[%YkX _Uʮ''E}ou'6ڛ8pګO
Y~,Q`4e"Re>NsإfA-?Ս̲ *`W@.ߎ茮
i
;g 6!g[|N{ٌS¼0 4~&L O~Z ._)4EE/+!PRϨlx7/N7 ynP({ޞ8IՍͣpr=zkNƦ&mtwLZB -dVTvn?%jFyq# Xr>QFB6Ҹ 4|r~mB b Xu=m? N8q 3PˏUYUܪmpH6 EKQV*$jve@4vFuǸn9aТK j
A7vخ"Fإ
C &w»,;
*"idkg hpP7e0A wU-9_⏈FT/D[ ?xíE8S%>/V \9S~1n ~]) |5
26~HวYbݠV]Or#_9|qrxyq_ؙ5USN"%J4ϙؗ=|͉GG %hdQ'aq"`t&΄솈b
TǞq~8?qזh!~X \05t&>PDJQv7 q\'| /!Nm֒;- V! UcؘP6T]zgC!1E]S,y%7iov'w%IM|6 )q63W#,8W/[m. J`i
aoSsڪ=UR< #/zk]g1"|"_+j3F`n^2`!
2t5[۴Tx!]PƩ L3So
KT s. F /g5'%)D98 1h8+:SN Pg~_x;B&x]~iaL 6P/4ם"J\ )Jf* cM
o= f紗Wd#9 AP]++8N>۟d{tMwf8uLN-ji I''
Jk}bub`o#A \%E6Aa;&I_elyУZ
UP)&T"dlЮħwx57$u-m! nK 3^N~*DžQuc/)k k2 #UpLt'ʹ^#Xݥ,VcU q&f2'Tu-e+f_9θ&;u:4$a|CtNO`%YaZѫJV遨_Bw'U% % l2oBMC/Unj@Ms * ) AA̳' 0djO[䢴!DggvAe856A'-ȿF1m"?JuŻTV+i
7(UD5*٘M1"aIɏ+y6ҦeHR#
ݕEt:Tj@^~fNJ +SŧL% zJ9i|Jgl{ ;n[Nc۩Z:ܦ=3*AzA+h&,Qᮄ,Wj%ЂGHO=qBEg=乬[ѱg+w3"@5htSq dkK_ؙה㟹_*g^kˠ.Z M}xր{35_ ;YH/=o9/9~+r
}L $p*,Rǎ8>Q <ȹAA;[w#,v A'r %lL!MD9F GQ&ةN1JZgq5LV
ǽ뺺CIUXbV.c
g`>O3G&bBcc´ܮ䱘 _E
U4 h{ .=j7
XgB RC+|N"a2O'C:gG
}Ix ݚ;, 5{c[խOw2d <OV1X9Qyc9 Iֻw04O䭹b Fy#Ee}FkOu`aq9dح_*2rz!,ɊXx ֽ6Ȼ2A ]NT9Z'9lY-
h ɇ M /XRPh 1O0[~ |4X!LGU\j 烵 G }'lfQMlGD¡K ;3*LZ/ħ) ˛K
ȯ"Fv4߯ZF`6^u?U< Q^1 i\KKr-ۖy}ix a+f/, ޯ͐Gi] 3gfƣԼ~D`|2CH Y
Q6ft- &s"U , Փ@0_BV7לow c^et474RD)Qh f$8 b )ZLc;" ٙ kg^pJ#|%"u~O K騮fǡsRAFF'v>ؿv|Y>0Qjľʼ# RY7fN`/> mpA672v!N9q\Ayr9AV
A!\ЅaBw/M\WvK4Ȇ˟y:$e%C
tc`/$!شY❴ ]B"oXjRP> g +\♷;r 걓IZ4F} 4 l4ų! ܆1]
<(?+. q=E 69)29! 8āv#2
^X!gCL Qƃ2 [lޯ)s= 4=2/1c KmܽuLrj&
no`I\GH 45 wuMtPVфqf >,Jik-[▴k{J4,5" ,fٯ1Nw{M/ _
zFJCQ 7ǢJk@$L}nVdAl}d4flC,
e - [Ic\K$"k?Dq-*P @1@J^Ki$r!:BMG RZꅧ~Y& 3 jNAgY.Q xJy[GP,!/G~
0]<`af%rl@Z@tvp0P)_u\7$9~jOvO$ ygke}''=4TrC8pB/7nU?ƬYΥ
*82]w13U\)N
t'/GCRvkMPbj
a[8}zT
Ã~Pb
~85 āy=1-m2yYqg)D5_TY7oAJɦR k0"Bψc̣uMxct>L!pBu5C52=PHEw GaJ LBtqb煑/"[SC}vN),,F8|-(뜁bCZ># F V{w;a:~t9mȇIp>?W}_Rx/p}UQ
BM¦c.=َV. 9akCO֢um6ema#H /3ƾq
+Ke 2VC%JSn}S&kb^ηv)kn/[zрP~v%LL),0-4!pŖ-Y ʆj a$CZbrkź?rIm35#]/V"?W(+ v3 ʰgLmgMn'ɜE-K Išk
'a\bAMm>rk GH2/w<$,,HHᨓ*'bv.DZXȯAy FNh_R}Y*EIohfi9tcc`/OC#ߎB
`pX4w,lt.
xE&ψٖoxywfJ tQ=P̿E{"X)Iq#i`n',l { j^̄bN %V ٵRWZI,n]#.AqU6_=R>07a7XHmEUpEˌ *
&Bޣ7K`&_0r>,rj1u(z^i6HA)7M#78:V-# *kpc
ԁx" RXW@h|#~f uLk:V; '2 ))-(t%pR #FHZc~]&ٸy0D7[>[00w:aILkQ;YnoI1. 1=x^1g8J> (N%^ˎHU|hy1v]-1K_w yX
>uhc_FvZwDRnSweʸaюgo֖(rAQd{VR45|$M L!~m'0BV+GsBD䠳A yPcD"as I]8niɸeVZ<,?kCoGfRV:Xvwq1~9DL9Ɔ|l &A"U?XX,VT#D7Or85u\t-y\!{b[O"lHV"4$Eɦ K6RMުG,t@kʂ+ (^!!Tu>/@?x CKLcpLADm ҪU>U7i< Ъl
\ "$\Ͷ=.5SY?q oN h(I/X,kFO4m 7lH @ʞThi
~& % g9 YgyKIlw^0n]1 64zn%]w'֖ۚ[INLVg}cquy|>i"~wbz _.棵Z9p>-v71 ӓދGjOǓo{-*ˑ_~;ToSl il$7k5UTT'bw{*|.0Aު4o%3Wʐo 7)Cv_7`ƈ֯
ekI
h)DMҺlwITZjC#>
5jPb}fz;?B`W^w ܛ˶+)OK#$?-%/Y!gKEev7s]=nj;WKjf6 b+'Dز[<۟<3ƃuuE8)$ A%^ zG-Pw< ԝ>{8U^[v5 04rq[c!V1* XOLtd`v<$熆m?N5ٗc(C"y^EoF ٣9i
]o.#)"Z}UY158 ب 4a#p} Ӳh\0t=omoi[~u
t'j /CcŴFWq#O!3 mXa#2v^v=얌.4d ^Yvҹ 2 ':͒ ~
P^ /D'au*mw;4 ? )0uuT+.+pOrvΌAV̍)Tz Ԧ ~Ҩ$$ G&=ZIC0|CЦ|jW8Ơ,wܒl15ZøEL $us@YҕU-L~5MH˷ s 0OZxZH/;~DPI5<,g FEQ ;s<.eYƖaFOA5vDJx> .v KMXFQ;bf{I`-¢eNIHq[, ;\3%5=(y7$ɉ,N dLکm:d<+h*j7?>#4(UVaI
[)2RI tp ڑ78Wvەҏ5Uؿ^"fry6 NFE6O$ZLtQ"
Yk8T?wb.A=KHfDaW U,8b`Eǔ;!ΣPlH`]fsqRu'k'bnkڸg}@)N*+:2W9.5Y$ CA(L:fzrb6 8HV*9u- g^&nׄZ9Dh
)U*huuڎ
s ș @}! M
R=pq*5 kIUQ%N ޒ#2aݧBy#@E5!nE[ZzZRYiWG>c302e>FO-K2D|CG*l_Jl[C#n1 JjJ8_6Շ*,K=
|tH)ΰ"Y[`>ʤ .joE!zt6Lsd;mdWҮZCrBWxZSo{ 58`ϻ">o3_d}#wl%fF]>+R;ʳ
=0_o:P_M'SIE|׳gaI 0O5ߠ D{LL}[0|b?^ F+@=zZE3> :DyPEUnD(6-mgś06囅 䄁v MNy-yc+xa^`+BGr5a49M49;ÉP
_ k 7i#6xSgXtOcc+U/ z;]rHxёŕ/rh+3VEMXY$ԷqqA$w zBrc&p -A!{YlKqFOc=*;rRp[4; k'ER59S5H_OU2R F-i4
blV" C>*ΐBU˱ is
bw/9
GXMRLjᕭ {IFZ t" d`KF#ǵ@yKg )Q݆5w1m ( H
@1j$)Pd1 Csd$Y
lb$"ǻ``l\2C.)i X^ C=#ɸ!b] a2My4&ߧLNj =ǫ v/:ʘvٝ[ůlLJ?kPIOysO?"1o˺NLas{H3b:bD:5XeZһ_R@Y[8|H3Z-(XSE][V=rc:B>lb.l?a\:qJ%0$P?;5E3y[
+-vgfʞct^miWD[Uswx
8()(ߍtOm#;ƦxATaȃ$7YpˉD| aEZLm/\9G*"nJhɼ;ۿ"f`A[ѷ 3G]@T]דsya5(Zmy^*Uשr@Wd8~OZD^ 6ӘGljsIR
Dw׆oZN~7o OgcT-~yu. NL8aF^97!GpU ;PEq;ݼ)gʯ<$kHZ^!&BIѫް趟)9JA³8*j6d,[S^ 74<ZR} {VG^
) z]\ Q9'rg&{aG1J7n?Z+hkԼ.0F A2MӒp|@HR==3 i`({ R9GvM-Ocvt|zҺ{42}/2XQb6GLg26,OxTR :.1qeyzzA{Kke@b,%W]9yZ5k7nz#_ ?Rz^:keGH+_t\;Ĥs*,[jiurm7@`J㻇;7f+:2G`VR2 6<^XFbҙM_>]T|86KQ9pRJD iC}(YMe7iD sFx -è[Bw/Ikl&J!=fs )T+ 7 6[7J29 TT7qى-bU\VYfڥ
I۽&,1i8$GB%= r2YkVݢKh }˲!NJb,v}t Dm>ۘp./[&r--H"rTO{32Tmݖ$Gj1=y>4s*W G@Zg_ ( X%M rȈOO}% 'tylk Gh.e#JPy_^ͩ7Pmhtw}w8ް`91W3) C`rx SXLOg}J8#
sa= +2m95Qk3\C.WBh[Ē'di0KO}1}) (hh=O߱|+,iul g
ovDsC5 /:V I<~>X: `yiD^TR$oj^U2K+[>W# Ahk~ؐ pFڵH/s
F A/ @ D|+E }aEhYq{ @J l?| e%D) #iZbVC<;Iob(fB뿹d2\^0(f3o0 7 Y.wm }]1l:REIזݑ
FM Ah5i?Zp2[Ba4\f4u0* ) RqE?<ᨥh"/r?sbi +&G5&a[AZ_6]@@s21HAd}BM i |lRځ_qj3؋0
@VA Pr; nyB3sݶs-k;FN"kpeŮ ̫ Úڛ altĵ[1KyCe| +WEN]}ʜ;B9gU)z'ړ Ozz7-SBW_,~Ug ͦyO`# "cMZZz-DhmxGYEy0*PDWLoERav@:bP[PqQN'8 Ҹ3ZG= +q Nv$ۀc9úòqbƖ#YJP0euR z1y.LR=N<\iKW9щ@PԿe n8A9[>kEw A)fl`d=ZnPak8k)jo$C&h\"u>`5=QRBJ^4'XqXd> )Q`MޟAh=8BXs(1@:\6@+Xc ЧOv'&40|| 6
lƫMVhÏ#r4~<& 89ޘŇ-\SV"V>p6 f4??"7D
6ʄBg >0_]Pa yIZ
)i)RMi#9 ocjNݗVH$懵1+wwXʥOSÜwx rQBjϹ?
6 rBww v~\H;v.N &1C<]IטּFh -NjeJ'a{hx4Z̴j^]c`@K
zj>CGO%}BLQ9Ľ&vG"k؛uG.[O;=y`C
tV gmZΠqE uQ2g"b Ze egh.x _
g76wUôa[7zaGM*MV 6evFF~(dmn{>>UQ>' ` N,
@CJ''n\|K1
@-(kkJ1> M9M+ fSG~icA4 I/w16']/kʁ+`U#*3W2cD6ƼL{ T7$ECmuI+Ewߪ9{I7"5CQLb s,-3
q1: . Ee w@+'8s -M #y h!*Hh Q Lk>|!CG}ozl n*mceTgSOLLoH[ m]Cb7uH] Pʑ l hMS\ Y RAXCo+dKDw6tAqrK鸞Su
e qO'IpF9Fe'MV,H]zzG g(a'o+Ylkŏ[s/4{4ZgL-ڮfdK?fPވeS(aLJʗov8 Xlf6)#{V ǫw0?w79@~=q1s@9>9MmDN,. kutˌ:? ь/^v ,De6>}cX5y
9ІY-
{2-xأ8alyiמL}aWs3UxO~hĆ&-w{BH@^\y(,nc_$4t'lgrV(%gm) H%lkRddqHC_esntL|Y$ n\{)Ա-&c?>Jk"iiR A;Ɛ}'#tTF;qU"WG]v_7T}(ER[k3S-#4lL@vVo :@)rYCo,):L*Ry6הCKh;#oWSٳ [ݫOkJiޣ+p,/zfǸڑ(+- ֛D5DǙub3B`b]1]0mqnfAGW ǓJ|m/&5 є+O%Fh-
U|1vK5B:U|M2rxCz3vϢ,aN3]D$=*IՓU쇧J PтΟlƿV s3)*opyRpgll Do ];^z \dXvӨATs7>
űe<+@|ܪQ%FI0NfJ.Naa4PYtx!Y! X|"
RꛄVtnB|-!CZHOٗ*%%"D &˽>Fˤs߈a2g6mͱmHR71ZmTi1{{-c8,C;!bclTEb
+ߴ`ǫؘfNmgD pbLb.0"H|X4;) ( vQscCQV[2S&; P|驴@Ndf>8a}ZUV k5
ݴ (?', <{ӵ4%&?cv#d p)^_H*tʳLa^Ww
yEG
NG4 ]/{ow6&dδ٘r;SLNR RseKpbF",%Ol)Πݧ}bm00 n-FzHnwZ 'ƹ $5K2b V3K;
zFDs^tMI? ["R:]oc5#6$W]r!ϐs!!U~ 5>$y*]4h , ϸܸNlEgr=C:+uncQGD +i^8OwP?*#\ (1dʓ:x[GE}{)6uN[:%v8\fecT29FpV" U$ '#>D_lXLڇ9[]qʤ%eնgcۿ>v(nrxkrYlH 0!L>W"C4: #hE6X_LsHL>PWئ-d^d635|jZzr (AVGIPhʍUͷ)`;}ɡ`ٶVvgM^oP;\KI 8u5hA[Yav5 +3'
+ a Ko4ҾQ6(ӴS[4Kp=zIBӀ=kiMK 9w~goȠڈu2k-ґR#F_vsO,;i(/wJ
ԧ$.Ht 0NNϿS/se)l
,#<LB:`n5;1#>*Iϔ$8Lsd\ L
hCF Wp)&0dΐO,j( #]Kw B(/JГ\L1
yR@ؓ&-J/~ZS ` yV5Jͼ 1^/fJT_ +xI/ZAi`yy{ J45lM} 9tiRu]HQ MZᲆ2${C=˕,Aʘ >Q3fVw]j-o)X7++寍)r'B[
-ʫ6M7\f]V@XWdRreHH}#GOe ž3 E2@&x.rC")]blM(pQ0pb6BG@>&-"_T&(?Tk8QƇ)%s1 u4:,?]k{̼ V&$Ku bY?M2"ƃyT-ls*kD\X#x
?+cend&s;DTVu[ГB?0*vg;R+nضDKdT.c(yTS)ton&
w%ѦL/V
X)`4J6廚%DKL=(JQ4 "; z$,BH)c3nS6t ٷ3-$>35
1gk 3:gMȬJ ) h JFvpw"e!\ApyOPe jHz4jPꮆ@jS0Xv3h5Xbl#`LZrb~0^e3a
y Jpi} m5rKX5cLe->XCͥ
'od0kՓLBQAkl19zD;iq_e"bTgiUf[vWQZ*qδԡ/+zda;j }Ƭxu)_wvu.$:wީWXsBF8J7? (t4;ÊϋqMPi9Gf &]ukR;A*F}):rr:hXX~?+@قbPpp,ARKT⍃eq ͑@$zK-%lEZnMO"OY=FE0[*+b ו(w- L6,+ ] EC#Vbգ$ N@'PrƘg~FLiێ(-mEr3Y'F Ygx ԴP۾YL_Bk *ރ 1duu']R-?M E呲~U[~q٦k'( C$7Uܛt?#wtN+'Qͪ{ Ag3"-hA0}tޣT?*L bJQǾ Nz[ 5} Xj>bu8\_^6)'?*XQ$sD
ېV#c.+-C~ng [yQա $ǐV{gMvo.#a
!?t5J}kἙW5^@ OΌp-v>-{kW(e V倡+r<$TE*βU\V`TKQt N.{'y Cq+D7 7tMx-*cO-C S,2oX&e@}ԛXAq\8ep Zd[sڨ =n+IMЫ'Wv=,>y-T?ELM
/ 6ޏ=bO$՝`AG\RN D0n@ӿ5c:ny]48ck#UDUqu'HEE ,PPӅ@*+a^S.9J O
2^}d%;]aFI
6XWW\ze㙜b%g |<;SHݜc{! ,Y`*u{^a SRٴMլ;R?҄NC;)2Ȯ S[Ck㇆jZ.(2 s*C
D-
](b}oYsp6>1
|v5^^YHaO8ޒ7~0oK^MƖMQ:VtFʩ>ʳms| z! S`o4O_7;d| #u
,D 02>e$Y5ޱܯ?dU`Q4$OETuLҋD 3 MC!E-F.2=NUѠ~1t`|>e+6YgqaXdz(8"}?FCO4
Q|)^!DJ9}.GV=}2dINk=k?p2,n ZSk5f*9<xН8\QEe:JSxJ-.} obw82c%EMɈ T8U VhrRsKj%wGA 6kl* S+G. Q eCY*% Єq^v)N#t!e\!_xF"ا FħP&7)H#|@l! |1woXzw|AqPn *>f0 |B M?rT!aIifU
$Dn
XKz=g~``zI%;鎜,PyY|cbS~o =T%
>A*M-P EOl%.\bH"O7ʹ&a7t @Hhyޓ kKCoO6`z;:rC.7PݫC10ɱu,AX*ʎHbBb tBiWV zAZAQ?\ဇɬf|GMɲz $5 [Ztq߰-&`"*hx :%->f)7QpqluVjvS /UjT.V#_T {ۃ$&IBg@gD}碞l<͙k #Eҩ@\X եM̦oS42r%ۀiWh=On%ߎy7~tWUa
!:97%IbULnw ; 缣'gxTaMʝn`i`3F Yp'Ma@}"ΘVd NzU0]GDe70$\c>
>i]b wW",%ƞô3%p89#Xydf[ovAKywG;qEG_ۥ=Z\&zy
5ItJD {dIhJ\q
ɝס^}3U9 |95u^H |7Q['/jD ::THtx Pt c A'z:NSڮVfr)Lq
>V#?z>Ф-WF Av*@Pjyv/.ܸB1u}Nw ~dLs2keOՔsR!dpC@Ȕ7Mk3x FTɬF.C k5q& Jɉ
Qzh/?O#ۜ5ctpqն^8aO
ftØ_ YFbݘlz-&YKBʌYv6̢$UJHZ>>Us68rgYq
s5$= 9"3@'%%!;:#z= :ϫG}:)Eb,!)sU6=YS{soJzTGVŚR_ +YY0y- f fx Oms
Ahӌ8^ Ms'{[c;YmᲯ!AqDNX͵@.i&yF'_OFِm5>천zf}cʝAD_Shu`*Z
..06XT:C9fay[p*6s.i {{V4,FI5]1"zI<_~hx
} 9gx=/ИJEn x +tO5{#e@;5F5bk5䌫yq
GVٙ"Z5n}ngG`r,); QC?|\δ:+{)AAiF7T%sHK Zf"?#i!T4H<< F.7}^[q3C"菊ke_\CzH
C ge26, z.Fd3UK$g>9I@X `2adך Ϟ4s9i4ʶRaC )j@֯2:.:R\Ch{}`ufo V+6e;51m ,y9CrA{oȇOԭl&%^w.s2l"(HQt #o8=s"z|@3uي;SˠձM Ӌ1cn PtFꉾ wh}(h> U9tTܖ-i4!eԘܮ`6 H أĊ%9 Bz٠HAIJH*]P Hg: $+9L9e=_ # 5h"n1@LS+ 7ˬ.K 8}!Ԍx3Y
cjՙ?ź|~ɹi\d"g5t28WoJP Y֎h6f" 9gErKfo}m;3$_g"!EB;G\^`iYܲbq_bd\,*ic,r6ljL?
UM CTom~ yU2l6R?tr,;rLE@53d@|eF^Fο&$=ЍJ#6m9IL[oNǁN@z]˾6[]G
]SwQZbB`& 螚xM+HV#6LX 2)N =M0cgSfQl(bJzEsG|mHzaMҊ_n
9$M- a;A(Y`M^jy}e/p6J̿`A|72h8Jy?[~mrkFGG!J³.9MI!a'ݞl~;
nސ(uȁmg3dv \d hdxoSMt[
|NӄvQ\*wb0@YT YYJӗ=,D<_3)S @Ɋ#ae'>4s] a0&2{g+1|
l'-MI`g+Zr ]҇Epz(vH ߒjHdGD(`^ S6{.Suuހ) y._w?Mg$Rl,<_Hv% p0vd].c 4W,RĞ)V?;oONIBev&_WTܭl"B!RLr6o(raA|м^}۾V/PtOg
ʂ)C
Il/
+@.V}+S"tٍbMXdYi&O P}ZpL۴+/,6 G{X$ >C~i'Kb@ָ
_څ=qƫn oc{Yqu, J!!nxwB"^v
0 fD^
9bf&}p'Bˠ t<ʅDuTȡ`pK\O%)߶ ϡ*,>
8L j
kTC?? 2R`V%;gp=0КݑDG5y!5R$4G_ Nԥ˷%t(mI5 ЯzYe{8t| 0ثh5+.oKe8gTNIXmٌ}6*"C FG=SƤ5ZJ`$2CD\4_&{Wze ښhQ^షVSYg~*:ɗYe;[8[="en7 P= oWk*zC^N2Xy6έ ]͢ B#ιmv
k @=q$%?p^nBAa A"Θ. {C5$'PN VH+
Z5ر_ubu[jH6 So>@7ZS~z@cE'w
kY h* jXF//>~. Bku )R@E'c[QE=yV] zM*!в]); rwncd3OXVǥfR>б Zs:I0< |d_S v, kB@/
Oyog
VJlmgkkJ=rb_ ~*?cO-\&O(bQ"M
`iyؘ\hC ^liN/u 'k%ItQ-&c[P}9ryx*d%Ȣޘf3O>C 8E'C^8 i4L_zJSa3kp"k q]/- B@il%_3'V+x6S
k-.O L\m{1 BoSRd0-EҚ*"\}kԼa!h +V35Q6{n5FGIc 9ZѰ;gQ0ɩ=*Dߝ[.2.pŏ#CSj3LJiGftm Fa2<1JX =vtd:تfM]?S_LlJk "T*Eձ)Yݻ0 t<>' D[/ ZǻuxVMtEYd1p:s,R_k\E ;oUFB&9}5/f {*O%ŷtANߍ S]Y<@Ħr={4I,#7[ n0af$eٺ^iF"?{Y,.
P [
m XL8ni+ZPfYrd0l0 d 8@F !
-:9tQ5JeWeLF %ƟwGkVҍfeHV.XB"R/FfO8Cf 8?$m4Ū6?'
ytE|7|:\c
NU
#mO bFlgo"=/璭> ƆeR TNdTMDpsHd4 syMr!B4{DwCa4 L}^\S:p(ֆ +_W qBųIoIsE\jЀL:J9kuwtӽ%3N~kÁs۠5=ϖPϗ9=ĵS-/uer :CFT}bi P32` -˕Iك8+ufbLC50RⒼ
a u9}'N3pI2/}.U¶`61ģΈ'21UԄ5nr6P<4.f+y*fkO[,~9< t!B{Cp}+CX#}
^t5^&v
Rjϕ>(
d8
} (2yTnq؉y`p68Aկ65 ,&4ѳh``i;8 PJyi\ }М&#rl^a[oи~BNU3(9A}9YY@6X"a/;H.y$Ӟ 擄 h0ȴah[% RXt TҸEJ/Rk]qz/G +Inʀ !0{Lojե/yTgi)-{@V,
p\FNqX~ώփܸ3o q(!.'}2dpաuAJ輱> Mȟ W-;cJ.]ӽ^IFIvo)^3Sߥj;A!rVdQF
I\C
oC[u 嗽ܐdkôbx! vWj 9gܟw}Bts{(^5 ?-nt8@1hMZrFq L
H*~]ٮؠ|/AObMӰh46W4Շ"S_{h jP045{m#N
U< ʂ)?/lQ; f,Yr*[ iQTlNJ9WpsdCs:d1? ws rz;j X/. Cy,I``HXg>ZsR,$JW3gaFH1ٕqZ☑D6E=-0&ofx/ȅpcƦo3͟v5bܚr4R * 69 (5 ߄"Mi2t@[N1g_՟?aF-/B]E /asTRJDKH^3*k0 S*>rtP[ts{,.8p[3Dï>_W,&6ek/}bJ @ 2 T=#=!챋O/<=B
Jl',Y
u ̚C(ښG+_icVQ\ꪀRbBY=6R
,o|1hGy½ ߟ,.bJ *- @~y#{h@ mSc٥4- Vp#Ǟ3}OSbsQk6>>;U"aן3tLrC"qL
ie
uz'qFZC ṯ5: }](By,$F + ,M)lGc֥ 5n6LW>t;z\\\I}9Ӎ-8re[odd Z{tc[AۑY> ]C 3`02+Y!2
p䕵TrvA4]8ΝA|r3| ? ,{+zxs-VCTAcUb{0-uoMq ?,z@S [KDcP\?TBVtR$W+5_*EhE!Ǖ-`:ON͝I0!u ǣ q-@D?3|
d~Ej- xMl.{r%'uoRj/&XωKEG:͠(ضYhYǭ.k9zaQ
d `؆y(i[ 6q_2uġJYv4ҕG
+dw &1 kŀa+_+<h]@:sQ*` VCa
wbPL=[DyE¡5 NT
#R^Nҵ? y ʬn^Oyr sh ]6mjj39OV` NbV п
jY: Ooͯs~=>y$_QF?~ӎNz/= t*VQrv@$h*
eN:jh즐e{q7͚FG@nE ;[t ^cb/iM($z~"=N^V ܜ% eC=W |c }VV}|U!,j|fq]` 2: ջdwJ_p7@itĢBm@~d
xK0u]օ@a*6%
e5~ۚM>돂 ⣹?mIZ-UG%$4U|Fo S)B4t;MˋuEgΫ324S(Jv[KxŠ m*?7Y ڟ~U擤@MC3v5b]O
Mװ3 BfaͽeI
DHc''/Y82
xpmNvIqz? nnOA4hQQ*ȍdyOMOn່D; !A1O5 XKudH ͂G6xL , i cݚ#H(Mqf|u7Dym>
̓P\T3 L1 ǜi5f缾CB;x֡c~< &ET
`Y}KUF/:;rLݚTXjI 5 Q 5 ~7# |% a sD l1Qf ؒ91/*Đ Ɨ1!VmH 3ڐi
I's솺KVi UGLF`zRr \g@ |Y R Dγ,\n`&Q#R۸4"+o`,ϡ|$*9sz<Ǽ^LLR\ 3'PB. r xJw
JEۊyET
åx J$ZQgԇu6zz vs;quz8Z3jN,A4<}-lt\մTq CߗoóuX0H {=$HQ%mz.H9 ˿ ۗ$ gZꯩS2X$vV3M=i= Hbm
vS Xq_Lo1Z'
Tj>lm;3W]T!zMSom )=2ǁ1 y /?>
ŋtݭ-u,'C3r9멋h?6\<'=VUN2̻:و[l5Yf
͕ܳ/Iut%bCRXHK 3Q< =+( MI DoHۅzJ꾍Ƿ9(#=uVУQ4$NANtݔ|(^̓rv}^GU>:`p93nq˻gB&DO,0@Q]"+
-u*aWr윟*Mo/)j Ӹڧb@ԅ Sj4r&Gtځ V
*{1-
<ċnhs9Z9Dtz`Y˱E{2"EjedҙG | . ѐ!R!(X_j
@0x |^A5'՛&ozi
a} bf{mD2s}F=T;/iˌX-es i+a .&dʋw-$rK#E*k
\flꦏ8rgin#t\5w5*A3/BưjV!xR|eDb,9>7-ML`R-:+mW.zy_@es{*r=s-h!Dp0I V
6p)# i`b(gkXu vK%0MUz04t%p}/ \^ZU_8R&&
%d.0JrG6ȣm3(D;D)oz0XW>]v7}/m&d Zƨ7#zL,N3 ˋϴ»usv
X Yō3@ qy>^TrX[̋$Sd)1w
O L8ni?P:QLuC|ZNX
>ZB-L6f*oz>R@ߘί,آ[m{$/G.d?7}!~ZA=W 0)1ǿA3Զ?Y{[)_z<bNeO f" 7@?N,?D+:K#NZ) F` *VHzg$wbׂbq '$LJ J!e YI/\M>S8B%$D9
hZ~'&
P_P=IM i( /PVJOy5(9\ DJ2WaK1<=iim܆Tt a KzsFNs+{lx7$<Ќ0qrO+2(Jd@;
̀KB4@Ȁ?m7ƒ 's `YD0 EIEz4)OO1gsJ]R,A]{y5cTU+F3,9w*9Hr
oo P3(79`e %\L"4hbVSWИ3fK "t 9-a/ t.dnVA=zr]F}Y 3 T'ƒȺUT^qBf6a2)K=1KqM4vrNe4YU1#:AJ #&3M_M ="1P *ߩbk~x 2&
uza4ǡ4vc$;3R6+g9~~=ECrc :jVLWT+Nuvq WT}ѕIgY,",&!
ry}iD 5A`C{ Fм9d*4~4xx d,Y9G2A,ҼB),=+F~kO_M; %K_a+_l{ƴXjeXOazUIVϕٍ`ob\fۮA秩]8%l\vўzTVisw궔bŏ&0!gn* M(ge_GmRSl NU'0UiF8 CF d ޘfX<مq#0 I
><TyV^oo$MN[ MAD./{z>I0*Uae`J qTCEnKR
s >J) ݃K% V:`Q~mxtfGTM6v ksz_`d1wCisX uJZqBKq(B~^f#drZE vE>:^];JJ#$M[8韆uϭ'JPnOR_ԳGg
$pG R
ýTLBH[>O sieI |(V(TRd $2%ա¼"`̚Wc̘kRh2joҝ: h$:ӹn&
{I6at'=i<#'zN?WLeEj+?6 ^Ki ;4g]kI|4CL`! }V3G )sڃ DoЈk-? % GLMc#clqzZGP. \Qm\BnL1QM=B1yމ)FeY .He7Q!eԪQNۃΒǑ3||+* ,z|RY2ck`uH0Vc\"`T(60h*Z/ͤKbCe N%.Y!^
)M5 k.^ۓOG #x1RPXPu7"FT{זa @PŜKG YY%H:wNʝ4; YA5tMdNm1ai1<+/J v[Z/5>Yq[ug4UۣS(eB)mT\<D~,-'c50'$s0M&RQ}ŢYل\b>m˴͠a"ZE' bU%^M= kFx& WGGFa9=LGDQHrq+v1&2IaT)\#I]=i$\$ zF$dۣ^0 $ }
BrXOIȩ:Ľ~P-8?'4FW}̌ i#ҐwpLJ$X4Wv7h k$*R y63Z!ԟLו jśI9o3 dM
*Fu}q d 4¦T hvqE
4ҁv=нDUK-0 C@D'"']{ܖ竬RV.3ŷhbW7-t(ؔ2}m@ %`E
D'ʴ~7Y?x
RqAcS)l Y cVCeW4Ղna\-*}qPR>FYX{u-;!@]b;TgkJrԻeD $k
To"\5q=Pd.7B<[#fl!O .#!M.iX?_Z̈.crYkWH0SkP@K~uf7rDyL!S6P` NЎ:4k vA8Ø?[I`,)T \]÷.7Σ*_G@џb;5 uIj [_\"YSU6!;lb59}(Jgʣ:>ݱB%3IZ~y`FFւ}3:2- [ y4)A,=f[Vĥ -MKЎ 4xH[\C7},aƐ
ngJt&$}8{.g4fff.n4e)xnv@3P8>az2QqJ~6,bY=
A!Ey W},ex% Ux{-O1PL.^%k2d}'_H6`
Wt|Xx֝WI_J|9*b'·3z:g`IxxL|d; oP$C%H[xDlɅ.|t ȷUdc
YZ