proftpd-ldap-1.3.7f-bp154.3.9.1 4>$  ApcD!M@eee?N*j^Cƌ`$bK2/Xy +0&eV; Ԇ (uA7>ۊ#%y$5W6t"^?a(dPvÃ0o;& LnՄd06I*Ma*-Zl/Q|a0cS AP.+ e xmRwnDaLFx *#3mInhaKK6L#a<3fc4100a10a229158cc181872cfc31fd362017062d0bbcd285d867080e38720d398d7c9ac4f5370d30c2788048f35a7da5332f9c8cD!M@eeen?N\,%޳ V@;SCR+:1~Cb=84G@nHEG /Nһsa( hmEy}%] 8AV⩅@nΦ40Ü%pSWP녹cwJ7-Rh!ux[-Emv%G*xXQ&;_#`}Ԓ;hCdhc/;GMuTqeU2-Nw J' ?;>p>3?3d " :`dpt      Y \`ej   (&80"9":"F0G0 H0$I0(X0,Y04\0\]0`^0lb0c1&d1e1f1l1u1v1w2x2y2z22223Cproftpd-ldap1.3.7fbp154.3.9.1LDAP Module for ProFTPDThis is the LDAP Module for ProFTPDcD obs-arm-10:SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/Ftp/Servershttp://www.proftpd.org/linuxaarch64:cD8b9599e3449b408928d237baba37c6c3dd2a5018d2f44213f8b2573b300d21d2rootrootproftpd-1.3.7f-bp154.3.9.1.src.rpmproftpd-ldapproftpd-ldap(aarch-64)@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)proftpdrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.3.7f3.0.4-14.6.0-14.0-15.2-14.14.3cc<@cbL@b@Qb?@b ap_^@^3^S^5h@^C]@]o]@]D%]\@\+@[E@[DYqYC@X@XӸXO@XX~@X{d@WW/*@W/*@Ujchris@computersalat.deStefan Schubert chris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.deJohannes Segitz Dominique Leuenberger chris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.deMartin Hauke Bernhard Wiedemann chris@computersalat.dechris@computersalat.deJan Engelhardt Jan Engelhardt chris@computersalat.dechris@computersalat.debwiedemann@suse.comnmoudra@suse.comchris@computersalat.dejengelh@inai.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dechris@computersalat.dejengelh@inai.dechris@computersalat.dechris@computersalat.de- 1.3.7f - Released 04-Dec-2022 * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after authentication in some configurations. * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does not match publickey algorithm 'ssh-rsa'.- Migration of PAM settings to /usr/lib/pam.d.- Update proftpd-basic.conf.patch * remove obsolete config option, LoginPasswordPrompt - rework proftpd-dist.patch- 1.3.7e - Released 23-Jul-2022 * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x. - 1.3.7d - Released 23-Apr-2022 * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3). * Issue 1325 - NLST does not behave consistently for relative paths. * Issue 1346 - Implement AllowForeignAddress class matching for passive data transfers. * Bug 4467 - DeleteAbortedStores removes successfully transferred files unexpectedly. * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not SOL_SOCKET. * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as data connection. * Issue 1396 - ProFTPD always uses the same PassivePorts port for first transfer. * Issue 1369 - Name-based virtual hosts not working as expected after upgrade from 1.3.7a to 1.3.7b. - rebase proftpd-no_BuildDate.patch- fix deps for SLES- remove configure --disable-static- Update to version 1.3.7c: * http://proftpd.org/docs/NEWS-1.3.7c * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c - Update patches * harden_proftpd.service.patch * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch * proftpd.spec * proftpd_env-script-interpreter.patch- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_proftpd.service.patch Modified: * proftpd.service- Update to version 1.3.6e: + Invalid SCP command leads to null pointer dereference. - Do not limit to openSSL < 1.1: proftpd has had support for openSSL 1.1 sice version 1.3.6a. - Rebase proftpd-no_BuildDate.patch.- update to 1.3.6d * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration variables when the environment variable is not present. * Issue 940 - Second LIST of the same symlink shows different results. * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly. * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is requested. * Bug 4398 - Handle zero-length SFTP WRITE requests without error. * Issue 1018 - PidFile should not be world-writable. * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on some systems. * Issue 1023 - Lowercased FTP commands not properly identified. - rebase proftpd-no_BuildDate.patch- fix for boo#1164572 (CVE-2020-9272, gh#902) - fix for boo#1164574 (CVE-2020-9273, gh#903) - update to 1.3.6c * Fixed regression in directory listing latency (Issue #863). * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for converting them to supported format. * Fixed use-after-free vulnerability during data transfers (Issue #903). * Fixed out-of-bounds read in mod_cap by updating the bundled libcap (Issue #902). - remove obsolete proftpd-tls-crls-issue859.patch - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch * proftpd_env-script-interpreter.patch- cleanup tls.template * remove deprecated NoCertRequest from TLSOptions- fix changes file * add missing info about boo#1155834 * add missing info about boo#1154600 - fix for boo#1156210 * GeoIP has been discontinued by Maxmind * remove module build for geoip see https://support.maxmind.com/geolite-legacy-discontinuation-notice/ - fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270) * add upstream patch proftpd-tls-crls-issue859.patch- fix for boo#1154600 (CVE-2019-18217, gh#846) - update to 1.3.6b * Fixed pre-authentication remote denial-of-service issue (Issue #846). * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824). - update to 1.3.6a * Fixed symlink navigation (Bug#4332). * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674). * Fixed SITE COPY honoring of restrictions (Bug#4372). * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656). * Fixed restarts when using mod_facl as a static module - remove obsolete proftpd-CVE-2019-12815.patch * included in 1.3.6a (Bug#4372) - add proftpd_env-script-interpreter.patch * RPMLINT fix for env-script-interpreter (Badness: 9)- fix for boo#1155834 * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)- fix for boo#1142281 (CVE-2019-12815, bpo#4372) arbitrary file copy in mod_copy allows for remote code execution and information disclosure without authentication - add patch * proftpd-CVE-2019-12815.patch taken from: - http://bugs.proftpd.org/show_bug.cgi?id=4372 - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3- update changes file * add missing info about bugzilla 1113041- Fix the Factory build: select the appropriate OpenSSL version to build with. (fix for boo#1113041)- Reduce hard dependency on systemd to only that which is necessary for building and installation. - Modernize RPM macro use (%make_install, %tmpfiles_create). - Strip emphasis from description and trim other platform mentions.- update to 1.3.6 * Support for using Redis for caching, logging; see the doc/howto/Redis.html documentation. * Fixed mod_sql_postgres SSL support (Issue #415). * Support building against LibreSSL instead of OpenSSL (Issue #361). * Better support on AIX for login restraictions (Bug #4285). * TimeoutLogin (and other timeouts) were not working properly for SFTP connections (Bug#4299). * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes the child processes to be terminated as well (Issue #461). * RPM .spec file naming changed to conform to Fedora guidelines. * Fix for "AllowChrootSymlinks off" checking each component for symlinks (CVE-2017-7418). - New Modules: * mod_redis, mod_tls_redis, mod_wrap2_redis With Redis now supported as a caching mechanism, similar to Memcache, there are now Redis-using modules: mod_redis (for configuring the Redis connection information), mod_tls_redis (for caching SSL sessions and OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored in Redis). - Changed Modules: * mod_ban The mod_ban module's BanCache directive can now use Redis-based caching; see doc/contrib/mod_ban.html#BanCache. - New Configuration Directives * SQLPasswordArgon2, SQLPasswordScrypt The key lengths for Argon2 and Scrypt-based passwords are now configurable via these new directives; previously, the key length had been hardcoded to be 32 bytes, which is not interoperable with all other implementations (Issue #454). - Changed Configuration Directives * AllowChrootSymlinks When "AllowChrootSymlinks off" was used, only the last portion of the DefaultRoot path would be checked to see if it was a symlink. Now, each component of the DefaultRoot path will be checked to see if it is a symlink when "AllowChrootSymlinks off" is used. * Include The Include directive can now be used within a section, e.g.: Include /path/to/allowed.txt DenyAll - API Changes * A new JSON API has been added, for use by third-party modules. - remove obsolete proftpd_include-in-limit-section.patch - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch- update to 1.3.5e * Fixed SFTP issue with umac-64@openssh.com digest/MAC. * Fixed regression with mod_sftp rekeying. * Backported fix for "AllowChrootSymlinks off" checking each component for symlinks (CVE-2017-7418). - remove obsolete patch * proftpd-AllowChrootSymlinks.patch (now included) - rebase patches * proftpd-dist.patch * proftpd-no_BuildDate.patch * proftpd_include-in-limit-section.patch- Sort SHARED_MODS list to fix build compare (boo#1041090)- Removed xinetd service- fix for boo#1032443 (CVE-2017-7418) * AllowChrootSymlinks not enforced by replacing a path component with a symbolic link * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed) as proftpd-AllowChrootSymlinks.patch - fix proftpd-tls.template * reduce TLS protocols to TLSv1.1 and TLSv1.2 * disable TLSCACertificateFile * add TLSCertificateChainFile- Remove --with-pic, there are no static libs. - Replace %__-type macro indirections. - Replace old $RPM shell vars by macros.- fix and update proftpd-basic.conf.patch - add some sample config and templates for tls * proftpd-tls.template * proftpd-limit.conf * proftpd-ssl.README- backport upstream feature * include-in-limit-section (gh#410) * add proftpd_include-in-limit-section.patch- update to 1.3.5d * gh#4283 - All FTP logins treated as anonymous logins again. This is a regression of gh#3307.- update to 1.3.5c * SSH rekey during authentication can cause issues with clients. * Recursive SCP uploads of multiple directories not handled properly. * LIST returns different results for file, depending on path syntax. * "AuthAliasOnly on" in server config breaks anonymous logins. * CapabilitiesEngine directive not honored for / sections. * Support OpenSSL 1.1.x API. * Memory leak when mod_facl is used. -rebase proftpd-no_BuildDate.patch- fix systemd vs SysVinit- Remove redundant spec sections - Ensure systemd-tmpfiles is called for the provied config file- fix for boo#970890 (CVE-2016-3125) - update to 1.3.5b: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b * SSH RSA hostkeys smaller than 2048 bits now work properly. * MLSD response lines are now properly CRLF terminated. * Fixed selection of DH groups from TLSDHParamFile. - rebase proftpd-no_BuildDate.patch- fix for boo#927290 (CVE-2015-3306) - update to 1.3.5a: See http://www.proftpd.org/docs/NEWS-1.3.5a - rebase patches * proftpd-ftpasswd.patch * proftpd-no_BuildDate.patch - remove gpg-offline dependency - fix permissions on passwd file * unable to use world-readable AuthUserFile '.../passwd' (perms 0644): * 0644 -> 0440obs-arm-10 16747243631.3.7f-bp154.3.9.11.3.7f-bp154.3.9.1mod_ldap.so/usr/lib64/proftpd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17825/openSUSE_Backports_SLE-15-SP4_Update/462dc8220afd8c1aa0ec1c97e632a4fc-proftpd.openSUSE_Backports_SLE-15-SP4_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b510fb16ae604cd7518afb7207c34e5c21360c0b, not strippedRRRRRRFHUפutf-8b166b08e7274e4daaef8e40ee54d0d43197d3563ccf5b276423ab077f0e5bd36? 7zXZ !t/;T] crv9wOqUT)g<agq{dN%7L3J 9ź1RVp]UcsDϦ]JJz6QK ʸj*9T@vx"NA8hXߗ0 ! IRuݻHQH ynMT1a*PM@XMHR=76,j]eQfwJ#>QS+T %xQT/d0>Ldq~µ,+dW pS%a]LNumJWk[k|N !^sMw,63Q/l -'运H`!lS ~Al1{`oB?RA) /"+45ٖ}rbG(zKlP-Px!a M4/DSMˈ9k-\9̣O|0W,#?uI(a/?GCo˖ Va%,M]{6&46j`/u$"K7"y rX ?%JoʨB׎ cbERUI XifhX#Zw46sUS5a#G !y [W)TƉ_pKuΎ9OD=V!<Ϥ;~W&\넙ke'C,iŷg#A ԃ+M 7VzWxt|wy86TĎs~;\tDM~p'~1D-'*1^&Ud}јL]W Bބ[ce=|I#Bi.JXY3a#kbs@1}'`ax/)WlVL4> @UV.^B 3AC#Bg ge$*/ R dD /7ßNy'ኅqOEx_J([J;bnghkv.=Dg}1jPFRN* j.ٸJ_ -Ӎ2f e/֫&q{BdR7U_gATAnz1_v̗9z bJRZ(Z;OHсܐ b(uU8? 8q9ܚxb;p.޹#O!iB_M8sQ"39{ u";KJp)IR5< UqĤǗ{0>Ox*#UVmDxəJM쥌IIFt^*"a09X>#iZ Z Fס6Jh<e#.P¿n"odg#I/2e#Jey@Z0#k4)A6G.KfUy^x|]kQof8fESdIeۥ0J ]@Cj#ѹTleNٿ ᥪ5(ۺ-Ur E_uE}OI;ǖU<ۭ?]N2E)ȇڻH7?Y\(\J뿁e΍([p@ 0#W/vJ "ow6}sEdf\0SRw<-jĭ!y¼WhP9)`Lg;) XwGʖR)xsƀ*@M=Un⾣'6u&X|3{T^E}}oV4L G cG5fpݜ N@Z.X,Ĉ:>ḻcBvdUtIRviM&0d3Wρ[cPQ# 97 K'!fb17ĆB#FH{|۟Y -p6Ix,MpK\u%RY.*el<34=(wbE-j2>^u]_gɃ{/\k<:sY:#|} #eoq`OXkJ5NMiDt <]&^ FWcc)?[[)IVoV9({3.C} Ƒ)`_,8MQQʨ.ΔM &&\dI𿱭=~ a7]*/4˭]Pca e-2%5bJ/3A20qq] CzlJi"1$5a8}=i"Z M!F-1!‡`hKmVtXzRʊio^sDq#|UWE m.M"M;Kf,";b@,՟IzP9SET>9^-KWv' Tش)5 r_($ %tIa>7X=n:6Ei3A@S>좟)R\i3%h2NV4A7?4C%1}jYu`ZZ6wea^ƲI"~0;W3&zvd6I h]a/4_Xmy̼=II*-U>ʍ .R"7#iZ98ܪʐKyp9Ɔ y k`ڇ\KT=Cʺ(+E/2ʖ۱m'#Hq_L|$ɄmYgcZvO"k 6A/LS{0{CwjƤ9[ocT+NPYc7"IB\Mܲ%7VY.R"xGiCXt0"Kc]E~?M̀ю1ؗ:UQ١_ln@YP4"ewG$y%BnHVwװ6ވ> |_ao*E잾2< OJvʸ=R#tx¹`?RH\{?32y84NB*i!0"EO!ڞѡ4`hCVJޓv;K#tYn{%B-m _!#L xYԂΥ>>_S$SY]T{f4RM/! L x}1߳^'ýt6:$?'GvLC62Y?!zn2#RoAPzZպ/P .@s׵0Z!(2Ca LFy" %Q0N2e#n$)θ1ڹZ~;j4׊ U^S~EpPˏ;@_І+@n;>Z{̫-ء76b:&8|v#_P(`]w(yKLAb֍RsDa\*+ {R-gJ7)k ڷQ._6鍊Pr  EfuZ6  zRƣ[pg/wq>"ȟMNarR@tto ={(Omh"އN`]#+1!^2C@PI_hSYi2x9OIA}DV+&2n?ocxU^pʋ.kׅq)xěo8z[W A6&3xk؆y6 Vަ`-yRUH R`5"V= vYɂ߈8{7" :1Jޤ%Ӡ..Dy v( }oa1fs)ܢ s}CIzb-s$ciڪ)RTNm\ *qs=LkpRZnR KOOt8 y"Lʮ1tm{8 <9?]]2lЍ;7T)7f F3ˋmDn1<'Ūb /$Z6`൜io7g?)cKnAudfR]--(m x6TD=n~ y~!F5DE֗{S==*gw@;!KKCs7{y1ʁfVN}9%̄`$Asg\uH4m=\<ԃF׏xʔe׋逩ᤪNMi<OPLwvJVIn\!4y]9"C؜69", ) T#Awc;:;-`) 83W57*+MkzCus:LgtTUpNI%'5jtɰs.~_ >HX hSGQnMVv~'-m6nxpZˑ$3Lؔ6 Xku('0W~8FYrP#~a(#oLVLҀ0( UEHJ1>iL3$pjB6u2䇟mȝP-RMHo{zLHJsƱ!@%{l+BʂA\ĻD/B~nB,l k<.Zz.8Zi:K{ QՑH`B[5r127[ ~%2vc//b՘t*dBzԟ`RzwJ>]߳>rѬhn{o:43M9ccpORPCY=?v$s8)vd8YV6Z}2㮄Ꞑݽw$GCKse$!|Gn}sQ ImE3xĶqnY+Q+$;K -ػǡ="]K޶j0/UQiì㻰{t@V"B4R D<[ʉy)Z[׊WS db:wa*ƍ BD8P).o9eL2Tܷ@,^"&GiMV*}]݌AmܸZR4edƾJd ~qvp~}[ʮ3Fd>)vmʞT)$%"*Bi] 3Q?{ 8AysCp9_+(A )8}V+LG=zb{~OBޟ3=& sbEaK$}'C;+e|%X+Qd>[;#Z/]Lq/3YD#ȼ5!Z]c*!LR*^Tq{52DNS:kp+AYP{pmRGD.Ry]<12Y}IUXNS3눋=&$ fOW/!gG9I]GP$c٭D6^/MZ +Anrjg8"Gi!h$Wp>F_l>|jXϲ8Q=Vf"93-d C/Bw;piY~^Jhϵm^4w,g~ zJZD"/4x=VSa_l72-;mt{hI? l 8ALw1jZ T% ` Pon5YMr8 ˘EFsW_*յ9@łzYn{Xsј0?DFВkb!"JO>sՑѾ t3Q!6lد5خȃ5r6 [J}{]:7(zRێEv~w1(%T5 I8f.q"5Rw{* 4P. e?0Ҵz?Qk>yAGմe Sg]{OzHyC]躚a`6FٙTѤc\*z<-P5975AB^(Xǣ!*RÂA@7u}Wh万[ׂ2v,`Ua[axc@ x瓾0V69P`oS,-:6qhUѡWݢsԂt ӷǶIH()f|0>ijC -4 #ƩLid̳RK`&VgG[Ҏ$cfS6Q `GWE,pXKJzu$]S%9kuObUkސ]L<QPJa^}w}殌\ٗ r+i@;iy iV2mJQRtdgY?xF86h@py[l烈SY H0@6WI~Fm[SʦWX$}A 2yo,VU^EƜݢT~?O( v):N iEAPWZ؆z < 5E\Zg`֪$oxL{ao>(ÈkUWTLhቘ4F쬟OF(&>vP(U? 8PPyU7w!|CĈO>O?7rd<11߅73)3BfG?'}꘸IgVJV/ŎRo5 8" 'Dzð1N?Ԭ0hia Lȝ/}×}Q1 |bP ΑY (Tk7.#I3 xJX0K}JaZŢuFB~^Ik0Qa@+h*p[kmҝ18gqhQ^Hy̮o[u 1/sw U=ncT6-(C9_$NɌ9Kg+6lݎPg 5| н_/63sLdh"U 24 ".@Bd؈~$yqJFN'ţьA)P*2lځUPfWWI.4f}Cl6 ;+42DałG`̖F:\ո҉m^T  ewWODɰ)ll BJOfql=w{pfMBe5jD<{5lDH&^KNm0CjZ~~@{I zkp][ZM.=l86҇FnhVp‚QfxVSm m[L{ja NϬ4+[E(jDXًEzmb}gcQrB}7IkfY~ҡ Pk~P]88_u>i0z`'"#y0=-GÓog8؏t`t8ɷvY'6xBYZ@QsUW4z(ĸMiohF XAs+45.wbO"l!W Cḽfٿ3E; Vȍ#Ώ6DaofA_1#HbV=bmJIB<2B dž\qhecXMK37ZVIä[?U6LP0#NCݓփi${nQOZhk뚆a+bKwvq;J; `>AuoJX I~k]?{X)p 7,?"#@$@!B¢_ZBȌsK,Uzrurel够`:!D|k֍a{~)HٻᅯL_Ȑ[zT~@|/QsW{ [:໺`F>'rwMgo+x6Jbۋ#f~qhLqqrBڲ2/i_x6-Vi ݂AC qt'FuqD֮#jA8vsl+5:S͐%\\5>'iC|N"]eqZI -!զC!NkrSs xXXۇE\^P.4U|LbTA=]P";˝rm]rZrb;2[ fZi`lB`aB D6llڒv(e?= P: '6d%H5l[X}WhtQPS~26FzRS>WcGrd>-G6XDCr%@ FNOcbZfR9/vsf⇇Kϔi%Yj\\"S$s+\q}OeJ$2=%oCddj.!=QM{sCmTsQ\(P!& KB@lPwE%wJH_`։\S~LxU80x<5}uwxlkqJ聰DB)d5l5Ns&wAnDa[Y\SԐvC/M@AZU6лkgz\_woQPJZ5 ogG`@7oVW![{C婁u<1S yPqFTZ 2W2OiF_!}[;JA[^lG V٘ Y7м~9G꺈^RlJ 8Fv7h庵QGDO긜-"X}I"BFI :ݼ0@1@oL{gn74@BZUi|v!fRA7fh@NqJ}KU|ՐnRK.7!k@2& 90]F)Xc&wqWd!Y7$\'AM5tbl RU_ $ANzNmG6qa1+YzE/QՇ *C`F/@lMEtf{;_-VqVk TAY>dM.eT-A F٨R5IƑn-R MA[#gf[h;3/1pmѻ`[j/1|/ ĶH_!I]1r{qa2_RI rMANJ,+S4iC%̪ ZJC}7bQ;۳RgEB->KS+À^-.\yמB˫ꕕ kj\-\Ǡp|E^=7;Bo™+5ṇ]^ fc b1m'D<hu烧i)ut@Cq\HrꚘwo9MD >ܨK(2΄nvƈ>minv4"{qK"}Mz +ѻq]&E4 j La (JY^ m"&#h/^4kqZ;c-j_:^Y-Y&U]swp_@MMa ݀ctgCq~M9W9W"a(6 hs@$)ʼwW:V. V~ޚ0ԩ8k#?aX޿h;Tv}vu]Rt59K^m2i/q#k0>j}n^E}𤉌 a&UfvE]U 3snaN$LQN:)/o&tx'fP Vzu+L?٘ke_ _dR":[Qe&W&4\즩swX DXk05 ^kear_&Nϱ&#C`4], jZ[(;ơݮ2}LA\)7tpu"K]W:EO~O[.w(`#òuBC}*:7 TG8}̧ڵur|6Jy0 8%>4adDUajabq&{F#uqz3 pNy4z.o@5mK!L"~ E /SFܣsPqv%2мԠr)d@ j(^iUUSm_ m CU\7LV'mݑXfTKoO(;M5eh6:r믐:vRǼQp;^GRvrs[Bp{/D6O$P3<@rj%[A74Bu:#nptyϯ yM]F<Y2\.<4pтrC%nP r ^XMo)ť6$c6N[('[aqx& xYTmso#MqNC- =n[5UjSgIs> ]u2;ai P Qn)aR712YPA$5rX^ӆ ͸7B7u+8}H Xƭ u}hl](~weO[7`*Axٜ+[YT4_,ů,Gv 9"c%ްn"P+ќ=opZLYHv8zBѦn 7%}\iI~NR`^^lA˞ Ё8X5FPҬÜ~@K;{~xPy(HutV٬c+9JBQ$*ʯCAJJ;JaBpZՒ2[o-V;9!Х2lD)v}AY;YHdJ8#~ZJ!QUٝk[x?loc*/)cׄw*]nMSFß%P4XA`Ld6}Pa .?ꕶڴTފ/bMCi!CdNilFZz↻E!Yu%aXd{>&y[֨zSI3m#՟&Q8븻]6lm\oω+o>q?άΏ%]t'[|W'Ql 4v]A+䰪dKyIizܰ 0|umD 5Ҍ-B :zZՉnwHc's4$>2 !bv=$fꭎr hG ׮Fk e}&IvYQ}z4ma#ڪI +R2.5id6܍V\F\dfy_Zv2V0D&AK;Z70;-W#xEwI׋xXn'qIQJt+dFLڪh[tlxБc;-@|.XF=7Mɘڋ Y QF_ V\`i`f CqNG-B Fh=Fn byfsP$w˲rCX׾cdߝB6ˏ jQJܴ azsM)U|0N4W7iV}$*Je nN!?B!#??vZNH4"qKߞ[׵_ˀ 1jdgRL״+ ~%2UE Ё"L3aY<5{u ];a>~3r(kUez ^И%j U?keҟw*^|BUtFrx\XDX PDeemxQ259b U~ q0̥U6!TP™I<)U0~7uߏ27k_HcIN&JtA;t9\RM Yզx+^cV( C$#)}SLUғmhD8Z8!@,vYeuw ҈ך'A ^:+&_Jr,L֣uз60a`io-SYXVG[Ќg}F!k׆Pq'#<`}twsZA\jZih#IQn *amqrpZ@>_f25t}>l <9mJzӭ0oiURr΂b"jQx>kr*"ͤnUe+9G(Czخ:TMc{>$Ss3{p=0xԩlb{{VBSii|>f^JKP#'zIb}gJY.H϶cotÿΝ_ߕmI @Tx=#?Ÿ>m!'[{ S ?|w'ayj>ꂀ+-_S#*h_`;' @ bK[Lj%  )7,pv[w=WC4+T>^\JQI&aLP% p%G.0I :3}Z,Z:V^dCl'IaMn)mX  rw<f5rDJW2>#Z$XZ E1:_ E n`uN-Dd~ n(z6Vl{؃#= k&A^5690&M^$;^pld#' eK(]9\g`4+z2D"ZApH5L#dY׻ڜI*? >TcNj jp!c? j^h;fb& Z&u9 GSfU+ ?;u>k/`"'|rdqd.1QmK(Lw:E/eb3;#:(!6:Ge@ Tc Ǐ>fiU5"l/gKEWC,d *X>{ŒV æ,@A eL>bj_+WJtlJ[kɔ;s&@h֛jC-4H8}IL)aVf$*@Q7&mO{wQ琜WĂgi$ YrE3 4}kO܁qXCJ6KԹFz6+r_ .#9瘵>DɆɥQ@?EkTĿn^93@?7k|e5ꍾBT pMz54I g8gZmM!/5E/6x\~He݅+!)+QfƯ!7tDJѽgfl8ې-;Zg@o8P}9=Qhzځ[-yV#V;#l*[n@;i lkY&.߼APB+C 7:L2vEuq:'AzV Ț.7#U;c2JT7xvĝIN)ĴLe5uUV$Id)NH=9$)2s3|o߽Upiu4s7Eu]:+%*DV(UnuVNOa|V&zC"dOHC}Fka-g5i} D ӡ"-˾VUb2YԓQ `, sz/a>z' {xy1=7 nx_*e1K8pjHHgc%9FDh-t/]ޤ8/#PyJR~{EaJa=Ņޝ&^Jf];A"Qj|1@ЩWtCo 'yCZhϷ(]AT{[ZYpC"c;ۚRjE’ wؐ{~11 O(k~ubI!^3[%^ܻaoWӑX,f2ޔ?[e(J?Xwpcьcga+UԆ542$W[ _`kw&h| t3ߣn6 .3I+Ln^7lF校-vjE302 FD{buxp!Ԝlqumݩ:ҁkW:OaҾڿ5CNKd@Re(6cAvrzn'E1عfB\STAN[tLj`ܙ[Q*nFc}Uo@Ҏ$(cSL4VڞU1r]n<='F]Ă9f)jbo-ͶB:&,c jb=L]|;}nO/ >`*I%/q赴af?ΖTA+pVs'Y D0*~~-ݹ4FAuRtq՝oQ1ޥ4pk+C.$:Y47 %p% &} >47ƴdSczY`'TT֏f)Ml; JjͪE.u 7-H*^uCIx.`:=Gź!vs=KE]fOu\IJו΍{Cx'{hn@ǯV(@i_P$€"KeZ!qV%|+28t{жBYƱ&b-fWl}%=1ԫW.<|ۍtxpڗ@+|m&\Se ~oUE3QLT&_ V2Af_^砦(NyWR71^Y7) Cf;^lz+ؿTMzkuїlߙ+kVHKE3(H9}N'-2JnlX]q]{W~Px15b͐T\8%Vah7_֜KXqS;-H0\טw(TrGV"ں-\pA) Evg45+.=w ڷC&z 4r L}иrgs?p g@Puh?NtUy#+ն~k RJׂ YZ