expat-2.4.4-150400.3.9.1 >  A c2Qp9|k mP+Gڊ+nP "&' *AS]ƿ492؝T=g5WmҢ0Y""_9Q3" /Y{pȻQx^ާ?53AA)3%}rsLiP}C8e8*Z}P9}ITe*=4;5ɡ+cx36e0f2b355219370a0d65780577ca2ed7653cd9e7c2906821bb12d70fe54ecd617096c0d19ce2c506c2ca4a90077832fff6de8f4cpc2Qp9|ū2cW,}V<Tޟ"j:Ko} <5TI^˥mB[ hkMQ([ nϧFyUXdMV)XkQ\§Z=FۡQ(g޷7֯7mQUI2]ܡaKq~? Gvx0&`TMw|]^F;LN گқ_1 gqƔmߘ|83*;ÉEJeպ\2`>p>kl?k\d  .>B Xx   L Z h,P   (8!9d!: !FeGeHeIf$Xf4Yf<\fd]f^g&bgchAdhehfhlhuhviwjxxjyjzjk kkkXCexpat2.4.4150400.3.9.1XML Parser ToolkitExpat is an XML parser library written in C. It is a stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags).c2$ibs-arm-3)SUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Development/Libraries/C and C++https://libexpat.github.iolinuxaarch64 R"Z' - xA큤A큤c2c2#`n3a=a׭aHc2a=c2a=c2a=c2#`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-2.4.4-150400.3.9.1.src.rpmexpatexpat(aarch-64)@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libexpat.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c1@b#Pb~a a@aZ@aɪa7T@`@`@`u`lM@_y@]@]y@]o@]G@\\\-@[@Z }Z }ZY@YYdY[@WW~W=2.4.5] Fix to CVE-2022-25236 breaks biboumi, ClairMeta, jxmlease, libwbxml, openleadr-python, rnv, xmltodict - Added expat-CVE-2022-25236-relax-fix.patch- Security fixes: * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs - Added expat-CVE-2022-25236.patch * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before 2.4.5 does not check whether a UTF-8 character is valid in a certain context. - Added expat-CVE-2022-25235.patch * (CVE-2022-25313, bsc#1196168) Stack exhaustion in build_model() via uncontrolled recursion - Added expat-CVE-2022-25313.patch - The fix upstream introduced a regression that was later amended in 2.4.6 version + Added expat-CVE-2022-25313-fix-regression.patch * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString - Added expat-CVE-2022-25314.patch * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames - Added expat-CVE-2022-25315.patch- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]- update to 2.4.4 (bsc#1195217, bsc#1195054): * Security fixes: - CVE-2022-23852 -- Fix signed integer overflow (undefined behavior) in function XML_GetBuffer that is also called by function XML_Parse internally) for when XML_CONTEXT_BYTES is defined to >0 (which is both common and default). Impact is denial of service or more. - CVE-2022-23990 -- Fix unsigned integer overflow in function doProlog triggered by large content in element type declarations when there is an element declaration handler present (from a prior call to XML_SetElementDeclHandler). Impact is denial of service or more. * Bug fixes: - xmlwf: Fix a memory leak on output file opening error * Other changes: - Version info bumped from 9:3:8 to 9:4:8; see https://verbump.de/ for what these numbers do * Drop unused file valid-xhtml10.png- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474, bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480): * CVE-2021-45960 -- Fix issues with left shifts by >=29 places resulting in a) realloc acting as free b) realloc allocating too few bytes c) undefined behavior depending on architecture and precise value for XML documents with >=2^27+1 prefixed attributes on a single XML tag a la "" where XML_ParserCreateNS is used to create the parser (which needs argument "-n" when running xmlwf). Impact is denial of service, or more. * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow on variable m_groupSize in function doProlog leading to realloc acting as free. Impact is denial of service or more. * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows near memory allocation at multiple places. Mitre assigned a dedicated CVE for each involved internal C function: - CVE-2022-22822 for function addBinding - CVE-2022-22823 for function build_model - CVE-2022-22824 for function defineAttribute - CVE-2022-22825 for function lookup - CVE-2022-22826 for function nextScaffoldPart - CVE-2022-22827 for function storeAtts Impact is denial of service or more.- update to 2.4.2: * Link againgst libm for function "isnan" * Include expat_config.h as early as possible * Autotools: Include files with release archives: - buildconf.sh - fuzz/*.c * Autotools: Sync CMake templates * docs: Document that function XML_GetBuffer may return NULL when asking for a buffer of 0 (zero) bytes size * docs: Fix return value docs for both XML_SetBillionLaughsAttackProtection* functions * Version info bumped from 9:1:8 to 9:2:8- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253] * Remove expat-CVE-2018-20843.patch upstream- Update to 2.4.1: * Bug fixes: - Autotools: Fix installed header expat_config.h for multilib systems; regression introduced in 2.4.0 by pull request #486 * Other changes: - Version info bumped from 9:0:8 to 9:1:8; see https://verbump.de/ for what these numbers do- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"] * Security fixes: - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks (denial-of-service; flavors targeting CPU time or RAM or both, leveraging general entities or parameter entities or both) by tracking and limiting the input amplification factor ( := ( + ) / ). By conservative default, amplification up to a factor of 100.0 is tolerated and rejection only starts after 8 MiB of output bytes (= + ) have been processed. The fix adds the following to the API: - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to signals this specific condition. - Two new API functions .. - XML_SetBillionLaughsAttackProtectionMaximumAmplification and - XML_SetBillionLaughsAttackProtectionActivationThreshold .. to further tighten billion laughs protection parameters when desired. Please see file "doc/reference.html" for details. If you ever need to increase the defaults for non-attack XML payload, please file a bug report with libexpat. - Two new XML_FEATURE_* constants .. - that can be queried using the XML_GetFeatureList function, and - that are shown in "xmlwf -v" output. - Two new environment variable switches .. - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and - EXPAT_ENTITY_DEBUG=(0|1) .. for runtime debugging of accounting and entity processing. Specific behavior of these values may change in the future. - Two new command line arguments "-a FACTOR" and "-b BYTES" for xmlwf to further tighten billion laughs protection parameters when desired. If you ever need to increase the defaults for non-attack XML payload, please file a bug report with libexpat. * Bug fixes: - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake) or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault for UTF-16 payloads containing CDATA sections. - Autotools: Fix generated CMake files for non-64bit and non-Linux platforms (e.g. macOS and MinGW in particular) that were introduced with release 2.3.0 * Other changes: - xmlwf: Improve help output and the xmlwf man page - xmlwf: Improve maintainability through some refactoring - xmlwf: Fix man page DocBook validity - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR - CMake: Add support for standard variable BUILD_SHARED_LIBS - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters - Resolve macro HAVE_EXPAT_CONFIG_H - Delete unused legacy helper file "conftools/PrintPath" - doc/reference.html: Fix XHTML validity - doc/reference.html: Replace the 90s look by OK.css - Version info bumped from 8:0:7 to 9:0:8 due to addition of new symbols and error codes; see https://verbump.de/ for what these numbers do- Do not BuildRequire cmake: expat is part of the distro bootstrap cycle and any additional dependency makes the ring larger. In this case here, cmake was even only used to own a directory.- update to 2.3.0: * When calling XML_ParseBuffer without a prior successful call to XML_GetBuffer as a user, no longer trigger undefined behavior (by adding an integer to a NULL pointer) but rather return XML_STATUS_ERROR and set the error code to (new) code XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer) of Clang 11 (but not Clang 9). * xmlwf: Exit status 2 was used for both: - malformed input files (documented) and - invalid command-line arguments (undocumented). case of invalid command-line arguments now has its own exit status 4, resolving the ambiguity. * Other changes- Update to 2.2.10: * Bug fixes: - Fix undefined behavior during parsing caused by pointer arithmetic with NULL pointers - Fix reading uninitialized variable during parsing - xmlwf: Add missing check for malloc NULL return * Other changes: - xmlwf: Document exit codes in xmlwf manpage and exit with code 3 (rather than code 1) for output errors when used with "-d DIRECTORY" - Autotools: Use -Werror while configure tests the compiler for supported compile flags to avoid false positives - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g. ensure that they have the last word over flags added while running ./configure - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t) - CMake: Detect and deny unsupported build combinations involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t) - CMake: Install pre-compiled shipped xmlwf.1 manpage in case of -DEXPAT_BUILD_DOCS=OFF - CMake: Fix use of Expat by means of add_subdirectory - CMake: Keep expat target name constant at "expat" (i.e. refrain from using the target name to control build artifact filenames) - CMake: Expose man page compilation as target "xmlwf-manpage" - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control generation of pkg-config file "expat.pc" - CMake: Add minimalistic support for building binary packages with CMake target "package"; based on CPack - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default OFF to build fuzzer code against OSS-Fuzz and related environment variable LIB_FUZZING_ENGINE - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF - Address compiler warnings - Address pngcheck warnings with doc/*.png images: Version info bumped from 7:11:6 to 7:12:6- Version update to 2.2.9 * Other changes: - examples: Drop executable bits from elements.c [#349] Windows: Change the name of the Windows DLLs from expat*.dll to libexpat*.dll once more (regression from 2.2.8, first fixed in 1.95.3, issue #61 on SourceForge today, was issue #432456 back then); needs a fix due case-insensitive file systems on Windows and the fact that Perl's XML::Parser::Expat compiles into Expat.dll. [#347] Windows: Only define _CRT_RAND_S if not defined Version info bumped from 7:10:6 to 7:11:6- Version update to 2.2.8 * Security fixes: (CVE-2019-15903, bsc#1149429) - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype; * Bug fixes: - Fix cases where XML_StopParser did not have any effect when called from inside of an end element handler - xmlwf: Fix exit code for operation without "-d DIRECTORY"; previously, only "-d DIRECTORY" would give you a proper exit code: Now both cases return exit code 2. * Other changes: - examples: Improve elements.c - Autotools: Add argument --enable-xml-attr-info - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom - Autotools: Fix linking issues with "./configure LD=clang" - Autotools: Fix "make run-xmltest" for out-of-source builds - CMake: Pull all options from Expat <=2.2.7 into namespace - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO - CMake: Install expat_config.h to include directory - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..]) - CMake: Now produces a summary of applied configuration - CMake: Require C++ compiler only when tests are enabled - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON) - CMake: Port "make run-xmltest" from GNU Autotools to CMake - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF - Removed patches fixed in the update: * expat-CVE-2019-15903.patch * expat-CVE-2019-15903-tests.patch- Security fix (CVE-2019-15903, bsc#1149429) * Crafted XML input results in heap-based buffer over-read by fooling the parser into changing from DTD parsing to document parsing * Added patches: - expat-CVE-2019-15903.patch - expat-CVE-2019-15903-tests.patch- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937) * Security fixes: - CVE-2018-20843 - Fix extraction of namespace prefixes from XML names; XML names with multiple colons could end up in the wrong namespace, and take a high amount of RAM and CPU resources while processing, opening the door to use for denial-of-service attacks * Other changes: - Autotools/CMake: Utilize -fvisibility=hidden to stop exporting non-API symbols - Autotools: Add --without-examples and --without-tests - Autotools: Modernize configure.ac - Autotools: Fix check for -fvisibility=hidden for Clang - Autotools: Fix compilation for lack of docbook2x-man - CMake: Make libdir of pkgconfig expat.pc support multilib - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR - Remove fallback to bcopy, assume that memmove(3) exists - Removed expat-2.2.6-fix-make-clean.patch- Add expat-2.2.6-fix-make-clean.patch - Allow profile guided optimization again- Drop docbook2x dependency, the manpages are generated in the upstream archive and this way we break buildcycle- Version update to 2.2.6 Sun August 12 2018 * Bug fixes: - Avoid doing arithmetic with NULL pointers in XML_GetBuffer - Fix 2.2.5 regression with suspend-resume while parsing a document like '' * Other changes: - Autotools: Fix docbook-related configure syntax error - Autotools: Avoid grep option `-q` for Solaris - Autotools: Support ./configure DOCBOOK_TO_MAN="xmlto man --skip-validation" - Autotools: Support DOCBOOK_TO_MAN command which produces xmlwf.1 rather than XMLWF.1; also covers case insensitive file systems - Autotools: Drop -rpath option passed to libtool - Autotools: Detect and deny SGML docbook2man as ours is XML - Autotools/CMake: Support command db2x_docbook2man as well - CMake: Introduce option WARNINGS_AS_ERRORS, defaults to OFF - CMake: Introduce option MSVC_USE_STATIC_CRT, defaults to OFF - CMake: Introduce option XML_UNICODE and XML_UNICODE_WCHAR_T, both defaulting to OFF - CMake: Prefer check_symbol_exists over check_function_exists - CMake: Create the same pkg-config file as with GNU Autotools - CMake: Use GNUInstallDirs module to set proper defaults for install directories - CMake: Utilize expat_config.h.cmake for XML_DEV_URANDOM - Address compiler warnings - Fix miscellaneous typos- Expand description of expat-devel.- Do not generate manpages from docbook - Temporarily disable profiling due to bug in build system- Version update to 2.2.5 Tue October 31 2017 * Bug fixes: - If the parser runs out of memory, make sure its internal state reflects the memory it actually has, not the memory it wanted to have. - The default handler wasn't being called when it should for a SYSTEM or PUBLIC doctype if an entity declaration handler was registered. - Fix a case of mistakenly reported parsing success where XML_StopParser was called from an element handler - Function XML_ErrorString was returning NULL rather than a message for code XML_ERROR_INVALID_ARGUMENT introduced with release 2.2.1 * Other changes: - Add argument -N adding notation declarations - various compiler-specific fixes - Improve docbook2x-man detection - drop expat-docbook.patch * fixed in 0f5186c7b8e503c669e332d944712de010b265f3 - switch to github for release tarballs and website- Version update to 2.2.4 Sat August 19 2017 * Bug fixes: [#115] Fix copying of partial characters for UTF-8 input * Other changes: [#109] Fix "make check" for non-x86 architectures that default to unsigned type char (-128..127 rather than 0..255) [#109] coverage.sh: Cover -funsigned-char Autotools: Introduce --without-xmlwf argument [#65] Autotools: Replace handwritten Makefile with GNU Automake [#43] CMake: Auto-detect high quality entropy extractors, add new option USE_libbsd=ON to use arc4random_buf of libbsd [#74] CMake: Add -fno-strict-aliasing only where supported [#114] CMake: Always honor manually set BUILD_* options [#114] CMake: Compile man page if docbook2x-man is available, only [#117] Include file tests/xmltest.log.expected in source tarball (required for "make run-xmltest") [#111] Fix some typos in documentation Version info bumped from 7:5:6 to 7:6:6 - Release 2.2.3 Wed August 2 2017 * Bug fixes: [#85] Fix a dangling pointer issue related to realloc * Other changes: [#91] Linux: Allow getrandom to fail if nonblocking pool has not yet been initialized and read /dev/urandom then, instead. This is in line with what recent Python does. [#86] Check that a UTF-16 encoding in an XML declaration has the right endianness [#4] #5 #7 Recover correctly when some reallocations fail Repair "./configure && make" for systems without any provider of high quality entropy and try reading /dev/urandom on those Ensure that user-defined character encodings have converter functions when they are needed Fix mis-leading description of argument -c in xmlwf.1 Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__) for CloudABI [#100] Fix use of SIPHASH_MAIN in siphash.h [#23] Test suite: Fix memory leaks Version info bumped from 7:4:6 to 7:5:6 - Release 2.2.2 Wed July 12 2017 * Security fixes: [#43] Protect against compilation without any source of high quality entropy enabled, e.g. with CMake build system; * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse; resulted in NULL dereference, previously; * Bug fixes: [#69] Fix improper use of unsigned long long integer literals * Other changes: [#73] Start requiring a C99 compiler [#49] Fix "==" Bashism in configure script [#58] Address compile warnings [#68] Fix "./buildconf.sh && ./configure" for some versions of Dash for /bin/sh [#72] CMake: Ease use of Expat in context of a parent project with multiple CMakeLists.txt files [#72] CMake: Resolve mistaken executable permissions [#76] Address compile warning with -DNDEBUG (not recommended!) [#77] Address compile warning about macro redefinition * Added patch expat-docbook.patch to compile the man pages with docbook-to-man * Cleaned spec file with spec-cleaner- Allow building when do_profiling is undefined- Build with profiling when possible- Version update to 2.2.1 Sat June 17 2017 - Security fixes: CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS Details: https://libexpat.github.io/doc/cve-2017-9233/ Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f - [MOX-002] CVE-2016-9063 / bsc#1047240 -- Detect integer overflow; (Fixed version of existing downstream patches!) - (SF.net) #539 Fix regression from fix to CVE-2016-0718 cutting off longer tag names; [#25] More integer overflow detection (function poolGrow); - [MOX-002] Detect overflow from len=INT_MAX call to XML_Parse; - [MOX-005] #30 Use high quality entropy for hash initialization: * arc4random_buf on BSD, systems with libbsd (when configured with --with-libbsd), CloudABI * RtlGenRandom on Windows XP / Server 2003 and later * getrandom on Linux 3.17+ In a way, that's still part of CVE-2016-5300. https://github.com/libexpat/libexpat/pull/30/commits - [MOX-005] For the low quality entropy extraction fallback code, the parser instance address can no longer leak, - [MOX-003] Prevent use of uninitialised variable; commit - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b Add missing parameter validation to public API functions and dedicated error code XML_ERROR_INVALID_ARGUMENT: - [MOX-006] * NULL checks; commits * Negative length (XML_Parse); commit - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f - [MOX-001] #35 Change hash algorithm to William Ahern's version of SipHash to go further with fixing CVE-2012-0876. https://github.com/libexpat/libexpat/pull/39/commits - Bug fixes: [#32] Fix sharing of hash salt across parsers; relevant where XML_ExternalEntityParserCreate is called prior to XML_Parse, in particular (e.g. FBReader) [#28] xmlwf: Auto-disable use of memory-mapping (and parsing as a single chunk) for files larger than ~1 GB (2^30 bytes) rather than failing with error "out of memory" [#3] Fix double free after malloc failure in DTD code; commit 7ae9c3d3af433cd4defe95234eae7dc8ed15637f [#17] Fix memory leak on parser error for unbound XML attribute prefix with new namespaces defined in the same tag; found by Google's OSS-Fuzz; commits xmlwf on Windows: Add missing calls to CloseHandle - New features: [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1 for runtime debugging of entropy extraction Bump version info from 7:2:6 to 7:3:6- Remove pointless --with-pic (for static only)- Version update to 2.2.0: * Fixes bnc#983215 CVE-2012-6702 * Fixes bnc#983216 CVE-2016-5300 * Various cmake and autotools script updates * Fix detection of utf8 character boundaries - Remove all patches merged upstream: * expat-2.1.1-avoid_relying_on_undef_behaviour.patch * expat-2.1.1-parser_crashes_on_malformed_input.patch * expat-alloc-size.patch * expat-visibility.patch- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid relying on undefined behavior in the original CVE-2015-1283 fix [bnc#980391], [bnc#983985], [CVE-2016-4472] - add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix Expat XML parser that mishandles certain kinds of malformed input documents [bnc#979441], [CVE-2016-0718] - use spec-cleaner to clean specfile- After simplification of expat-visibility.patch, it became uneffective as no symbols are getting hidden. add - fvisibility=hidden to CFLAGS again. - expat-alloc-size.patch: fix braino, realloc()-like functions should not take __attribute__(malloc)- Update to version 2.1.1 * Fixes CVE-2015-1283 — Multiple integer overflows in the XML_GetBuffer function * Fix potential null pointer dereference * Symbol XML_SetHashSalt was not exported * Output of xmlwf -h was incomplete * Document behavior of calling XML_SetHashSalt with salt 0 * Minor improvements to man page xmlwf(1) - Simplify expat-visibility.patch, refresh expat-alloc-size.patch - Drop config-guess-sub-update.patch, fixed upstream.- Cleanup spec file with spec-cleaner - Remove old ppc obsoletes/providesibs-arm-3 1664264484 2.4.4-150400.3.9.12.4.4-150400.3.9.1xmlwfexpatAUTHORSMakefile.amMakefile.inREADME.mdchangelogelements.cexpatfaq.htmloutline.creference.htmlstyle.cssexpatCOPYING/usr/bin//usr/share/doc/packages//usr/share/doc/packages/expat//usr/share/licenses//usr/share/licenses/expat/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26153/SUSE_SLE-15-SP4_Update/047c4930a890fb4bc290a69e50e16431-expat.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c23fc546e36072605e806214043b44a556f95bbe, for GNU/Linux 3.7.0, strippeddirectoryASCII textmakefile script, ASCII textUTF-8 Unicode textC source, ASCII textHTML document, ASCII textXML 1.0 document, ASCII textRRRRRrAfvyЀ\$Zutf-8b8ae37ecbc14d2c9f98297a6fdd1bdbad80514f377cb217711e86cab71110453? 7zXZ !t/] crv9w7=ThUx|_OIƖ@ktВwOĀ+Ttî(z$9rͪW,8h{~EGN#uy7좮/'E_6y(,+`y쓤^92` 蛹n['qÙj8!{Qo MC;ꆈUtji!aLHMʞ&OIT3/Na98υn8;26T O*>k5rhQ)5R͛Ѵg"0;~ !P11Gw0V(90Pb25;Z|W8~Z뮮h &Z+-iߣS%Ge-K ȍ yiu NOCIPۆZs ,WYǰU7v2"UӨbFnF 9PO"jyqlΥ92cӈVhڿW{9QxfDn̥D+' =㮮;L1k9Irlgvvfϼ7)l-ֹɸ cN$c=0xYиgc?I?nԤm _X=:-Hh߼d̐s|\ڞ}[j>; y̔,Xͩoz]],(P: 9LHј|_ >9-/u1f8?z1pm`"fTn˹`*s_/Y -A?w[H; (/̘i ȋ7(*J(^F֭(v:h*ؙהL^LqJ{E׻X_{ϲN럹sVOL=宴Zx:;ON^3nTC?u:(dzxƸ:u"r*KqqfeKZ2|{ ERG.;s'ygig4[Uo^4bh%:Î'.Je!S)d7 vo?Hg%Lb-F&IBg}= c\bKj?fRYvAgB`Uuţ ڋ1B\0T>$Ʀ>: | tH2֝P6VØydAe:Gf0!B`prbȲޫvv paߊQ|g?&-'@}Px%YkKR!h弑F@BfM 'I-~FYp#yn#+' ,k4lYb(C eLao= ΆsO R?4^Y2m՟=kC }+GϩW7ٷ+M3&;_/Xkcc _9zA|KH o}EE_ڤ[5<=yʒШNw)rVS{rlڶ?15kLjV"eZ{0ATi΋$J\|jITC_CGVQ1V`ͰZCM:(]g E/9 ;9#-R⧚cc.i*bԫ` 5 /A̲T=OGn4#~" Y9HW+ңpoMۂ˱&>6p9p=(傻(XM25@liQ5wX1' CdHN3w/;t ?x۪'zrAf{\ ψu;(5kRpc[.w#̱ 5[4MgKui1BȾɉk)tiHl( ~ p60Mp(,o@jj>1P3` ? } rUj,wp3z58݌Z";ȄTx]A(ts5٭j\+8'Q] ePȸEDG!AE2gS'E@eoyajƤs1OR~8<ɋ)\nuSE;`\ޙS') ½ٕb**B-W 4 K"~|5|z,7L5j-ʦ` ޘz[:i܊S|{s` q7!Q='B \KI"ARH&>T:viOs_dQ[ԣTHn?ѤeT s i9."7IЙܾ3T+޴'Py6>xf aςDndY"w@n DZ> 'Q%!fSf5iD]#Y`HCMM!U 9t.bƀL4,tLnp[\p>WΔϪ hׇv~+I4m)g3w{_IW~vM0u!#c):[j|̰2-,4,,%(LnT䦗ܠ *1~*RMmqp) -S*$~0p X(Ț:\'W3PKiq($Ba2>pΑ޲jkψ'ڕj:u,S{YPqY :Cpz(ƐYCE+da`u4w( iTw ?4r;[~ Л_F5QFXnuD"R+Lk5"}R5Uy_I_02=7r߻FAQpZ%9Q~K'/(35R_#XDV~P>V2`ۍ{کl'y Q*X5(fMAb'C؋Eo j[)ޙw]f5Q&@1&'UNµPjAA&>4MS$'.[V0g; `J:tB){w;nrŵ*y)sAuפ sa$L_N~:^ʤ/U޴7ÍkH~֫:ae ϹeSn\8Lk`a ޮk`CC`Iw4zG9ϨTuMF҇ WEoV$S~T{@.AΤmeV *+[y |"y\[B2}/,+)&n`xJӑ 9Q<ΘU٢?t6؍"+D ?CEÀYN`N]“m8+$E*ICAecok 9(G2B>G n8τ/X0aOvNlGŊ}DrDM>*^(.IYQhbTq,GL>QHJ=zi,p_ȒX"hQ;N){ 6|^ʊPԐ:>/gP60{:1 ar`H}JuՐiT\N+'&ڦ|LgɁ^eɋv=e̩40x*Lj %cv[Q4!( *'CǠFw[f̭o5J܂r͆EM -^X){C-<"{}EWI heMMV^.~9!.h;&һ'BL(j cӖPi,gCdn)s| ;4roO[{,쨿Ç ]]f8G9N@N8^}g;,ki Pk^$&U)!(D"icj {[:3{(RKNRYPFϨgBG"N CtS0:S$s,_9,[}jЄ=W9ȧ̉gí$i$&fTaߡ.3`eS*)[˦>p7S *JfyrRƻ~$MD}%BQL0PEֻ$'0ndQуX[ xXTV _ҥvGU (c&`b/?l2FVġp Wu~WgҗK#.Q&+ \*%g53fvPRJ!6pa}d""R2!*J? Flϖ7= v01lZVkZH6ՀN+ў:Ty7BfL*8gɬM2^.VlW9w09ew:5'3ȗmY/U!kGL[bs ֽG'aEt q% 5.g0o \\ϚS# Up:}_2Z7]+{gD2K:o뙓ZT̄`rdiD|4zl F%T3_܎k]{ Ovjk:auC苳Wz;?m~E0J]IoJB݁+^2_X#⎠msO^,E5kh63;/{>[F\k,*_?GSd?8Mt2@lD{bZWڂntTE~P$ D'-W_8@v OzD{fYLVCBurӴ>>V%T+$ Pn,K8.tn܄W=1A+|J`nyU!;䂗$^V {"c/ gWۗRy)%| ke$6^WjzWӅ0}$\D`j%cԠOmLwu62_j0bMeQ 礎4q\1Zl̑d1D ᠀WČzFոY4ep7˻J ȑBN6gp&_WA6Uu5n j;g^S8%;M8Ȩ Unm̨PO1OBK6+R]wTU><Ӭ>&4Ur_㟯YM "{xekmAE I B]}Q= ' {5++E?fCzQtq;Ɠ%n|ȭh2˾c_TdwH>;C>`7ˆ|8PKzHu QC9Zј:b扔GODatd'L?emۜ@45ۏ}438Hѐ5 *ʟ,#`F j059Ld3*Qŗh<&RoҚ-FF﹐Ԓt̉0ӘՖvPZ- OI_ԗ-PeGN: C .+o ?Ҥl(yahgc,2YotBےg}vD>,l:d?( Nm==DE//b0rZ( 3Ro{o"V=,131cPWw8SYyv?j =j*j_Eώ;LSt0(Ts^!K.I4Q uRREQR 1onpgVCBBߎ+xSjcwʄyYaTiÂF[ Oٌu^LÇz'4Cxp-1.O?-I9Hb\pȢ&4; ϱx>qi'8ɯVY6!>'6/3fpep}X [G$?<R1i+<#y/[%eHB KB Po}aoiJ^{&׮Xu,ؘoA7F=XQӆz8sjWFHjm+V@F DTLHŦWohjk|W1_L"Xt{Ȧ sll\ŕϋb3ւsj0)w]sxN(W%$m s(y̢Ii s+nk䇩, X6]9 0M{虂x IF΂~/Sʒ(,G$OWl5?$QyQcp2W~kX trk= q=J9ie|[PbvjӡIǔLKeR ;vƟSuZT&unaUf,IrXzW4 ݟF7Oܓv3"1=pW0iLf8ZYulx^AJka$͟p{oCʏb ҁco5ۓzܐo77@ tH 臿2 <Tt|=6'm/GE˶u6L)թ=%IPx/8;Py-H\2QxUj`HR51g Yr@1XOȾgft*|7wLVy֨Dų M}!/0cM˖=>'c,ԫIУ<ƺ1Ftv`o|^T&o<DzXjuJ~?ΪvZKajX3q mZiʦH|+m+eǎk~}{oyeH.Mh̋\͐90ޱx89>z^2?t5!E_T;iD"`jԱ&n05w!{DÊ-X `6@x @ux(|]䬃[.0?flWWAVqO:Z|y!u^lÌN}(_ 3&Y2^3P *,iA z\ }?Kj8@a}-T~F6(t6ǔ)I 6rkt&T׶l'-vc8EXM?~&͸ԇ]L7Ӻ|oy8tZ^.[YGjoٝ=O п# yRN< o 4hCCVnVOv4)D!8v\'6Ii\XBD:ʳͱnQ7KBvgNLJӨTm?Z*yƱ1s [EF4n-P\(]sjg5|M~5;l+ f7p0/ʄdRNDER^es"rUT'G0ϑNQUV;9 N tSAv~}I(P" %Ujݰ]}50b#?|/ٶMvrb MsY*."5[| UÀY/n|y6oey!HΪRVXW_ M[ߟ|L`@; p3W e}4a[+|_}K{/_LiL2_0sp5d~P M?".GKcVKL՜ %K0u~Crz[({mZX}%pJ5Щq+&wu Scm-ո\s$LM0.Yb-:Mu콖oihFxKpWX} 7JImili`H)]:lK0%eFR!MJGDQTdkxJ݌p6'.vSKo5moWYg)"H' zWoĪ`/"/u7wwiv r1p#=a`KrܥIJKБQѵG;'yvz(]jVABU:dKnzkx$m+W-F.;^dg'v,J5M\D (O^&mrZy!+v{ !A<Ϭ1q!?iq w}]  2қyFoyf?=l}f Xh0OE>HT*EiY*{Mp-B9gĽlw9&u:hZBJ:eGd|m}τQt/2gPPb4ڂ/~z+ Υ;%=U:.!V.=3$m:f߰ӹ8~ pF1|y/:3Tax% M~/!LQ~QIN}/P,x7t}Y8/ Kޖ,J:B ]/: +Ǐ?bG`P ,Q[JL\sh1,Ś" V=*3V{w5eY!+c>vWV;$;>H` es+iMLdnwe"9⎟=YHwp5.b&7;@^CZ:jcT5%`*A—KU(¸Z2J8^BFpYBr+ *:ܧtrq1/Z"ZQ3\Z m:lb੡v9$oZ\XjFNGTNh:e)Y>u)LFH CUm{z6ֺUJQm`d&VF˵`9kҀ5Gj8\Mq90Ŏuw=[K\e o09RXg#SD2 V^z^zl/ 0M8 T q # |r`)T7|H?w{wnW '*ԦqH_㱂"4淯cҨ-'n ޘIRQ!-cPBG,S*SH pE +gn!Dm5VMe;pB4gh8#4-FTCHznF4vrX)רٖn<{wBN@ Cn*wy*O P53D4&G=Eh+6FFj?SW=jP:]uu':})tPD<$8bld'BZg?JFMY̧ߡPmbZu-2/c=('fu_Z+;d!foռk C@!V _)ܩ?o~Q3VQe)syb`G2 V5 xZXmF: s[~2kiOП[|&DD1N=O>+bEq"JUaGX;2Cℓ)[!>}u^[s +Ivȿd#-~2>oc `ZmcWS:iΈ@+հ(5iCO(&#.^?-6e,v^hʘh~N%gy2)+3g2$ǫ5ABl5m|hAMd 7vemD*|jY`|KN§X/Hc]'MR0xr[#bXfR_jùGvz#FwѭMk3D)lCW^P=Lbu/Ւϕz 3"Bq(z?(E3;wwZA{6FfU2hI ֚hd.ڔOWl(Ը?&3J9Aռw@Sbhl,9,&&1+ \cbD7n {*8lcnLt}k[WE[D=Loe ;TrNaa=U'2}Fz;6I .){[gY_q*sa9ibe#1c\84zGoL͚>]+J6MgfY%:!2ou3lq)<:d;WoH/52\ ͂.o*%'=0 nJ9keW@fi\9a{~jS{ez C[By/5@nՌYUfA5T,~#P<ǥ\0PEط&Op <@Bޡ EF*]۸@?mkuoQǎ rP[ڡ-1Wr'bֻY׍.}Q\ E\;mHm^JQjWYrQNr Uđr>^Im+_ao0j2.p$MXFV)wR\[ y^ΙH]c/d@' !˱ȊK2=C%\G4啜?DXkC̢sjl&({Oс+Z 39N:{]|yy:m 5b\Sx$s5)6΄Y)HVYYzV=o>8Zo}8tMřO[ 3`t%N3:~Z^hbǃכDF I'oZ#$} KxO >yhds\Frq44 6-Vp7}H4QD ^I@֒jwlI'?fZn j'bd"e=]cZkNG18ɧneL/ñ:\3Ҭ ~݁QBP[OX7ȉhxxjܕrϣb|:'û˯qhHB.Z 8?ePTT7K.¹QƼ7ٶ ,&Exk h O q2i|zl*0'ch̪("{DYͱNgLebo󍌔AGrRGnu@gtu05:nSwioqXY}7Z6ď'9]4X$=yGX?<:ldV9!O#\,&, P+~~eiIpYT0-RPӅy;aQd; a$Wb˄^L.g'ZmOp/*δ5XOwB0UU KtX"yEX/!Ak䣙j@7 ˠ6I)6"He(J)ʭ@C>YХfg,Ş<~p2;05L֖ΌDU\S+XV֒OB%aŘ.R-,xR i.#5]6؁#gGƣCX+|EŘxu+QNm30#ď.l[awzEΕO5l'*: yTEߜriN$ƽ _lT_']hy ?_ A?V`ujQرno` \ˁK#$|6#RB@m|Faj%e0̾_Е).G|@9b ?^~Ry%j*Ch^_BgF/,6Y rҏWy4h8ieMR[|/g# w).QjWxLd,Qɀ$@%`34] x8LeJxJ I"l6Nu9rS?qmV6 LD^]3zԒ3vrVܔFi[ΘJvc}x+Xe"(:+T3keftyO37Gz=r7ʚ6jԭ`( U8۩ޛ]K\9S>Ձ\C8WRjNG'64%ŅO3.ja|[ol:B;EG[Cfo8"^|&|^pnݙ5X*m 8A$} "R7mNXHҌ4̥4B#6[7djIRpHVFͽ3p> )_y2uLVq(V:͕sckT9]!v2 efrJXJx/4v̿[M#6ׁvmqv]}3s8ޏ{ Mt&a_ʓe0-.TH ߒ蕵 mԮeG/\˦'!9S բvJo}F?x3EUXwnEC t-k;׾ bײ+yߪlvjfkҝ2&W\vɽ`nK3b9\9]de 22΀dgW Vq3z]€c> H AYsnly12sz:m8Yb8DkD(+TJZur?F[Qnwt9iUzwz}sK>(#pgC+#Ω i"g9ail\>URzs;!LA5&Rw+l`[X? ?i>!26Wl^e].Ԑ)󔘺 2"oM␚\ʘ aR[m^Ai#+`COjQ:q!iz[SM;VC0 ѳYU0TC.5Lڡ|A詫UH/pEIaHtęjJ8q2Ly9>s(iG" w{)t Ϩ 培? Yie9lz.4;u;\ %'X`M vZ"63rǾN|V!]Dp,`ORC@yX4j5HKF`#$EDPCI=Uj;WJhKŽ eO6C"K,PC<NWkANm<\A+gD9wK rkBO|1LeIkM;60jC7cey>X,py[Je(uL5= }sBJ0/15/3ˆ=K%= CS&@~%܋kCarsd,鶭&o!UIJ[C#0f؛B&+FT|nk%oeگSoN;-q8?jx>ϸG#NdxMlJixt>jSRDeTA65Ѐ= bF AN `0|$9Qc)h =v$VѲ- vp Į:'ۯo',{}Y(T~HwQUWu4Nh~1C埚7 nkDyԣ=ksF->T¢jEo2 <}Cs:Bh dŦL&sIYL'D뽿.-u~ccbpeׇCj\?؋0.jw7L-_;'qୠƒ7׌96ڍL"-.m?mPl2;ҵ?ذ, uڋmdXaI9n>Y' vw 7>ܒkN۩:'j*}=1 $ D gR8Bh%cj&+:[U;τ򵥄Ĥ8F?Mwݐ ꈞXn$'O 1hL7:hq7I9lv=Ԣt۵b2@4MM/vmmcrTީ_&SB,{-5^Z?V+CIAvRʃ'R LS ͹lG)?F=hU%[Lcu^ȿg`:B[0[Gz b`zW%dWwׅܷ.ZēTaD4^Cw֙FT?ҒԄ/ٕfaǡIkF%ߕK5O܌⍅:dbK}  T?W{fT{d /VP3)#/QE5Jr[gj#ܘv v,͇xl'~l2$Ń2' Qp-y" @s؈Pe#zgg-Z4=k [(>Hb*n:Oׁ^DLJUoYqۭ1RDM Xr 5#$x_~UDc^SGVVX;KV_ͬ O>8k|B :Tj2M ]VʎYʻA$} 0:D(,Y%gJHp36nDŽRϴ8)&Kq%mm)Kc^QC}w~AEy]l;ey WL'73V < _oY&eҎCy<,V۫㴦P-BlX@pڈkߪpa %pלf;UvE =)c3B u)@A"YN#{W#^ vM-w ^(~1/5cxsU=z`kP:o/C-5v]75' X7t>8UeP2 vLHXJel=mvG`7'GtjMxX! 2co6߻#S6}m]h=y8 R\wJR[ӡzHپs`F5GA3x3[ׁO+̿4TKhV񎺊SSK-?)5,R zc4b폝Ͳ42?&:%S+9@\Xq DB+VoDeP]HŤ -i)Lmٳ\Ad$)<>-O\'f2oIGI3(ѓQ1Tzw%AbDtfS9TڗZ|ѢM<+#­$ɰ}R΁ 0v<8ݬpbT}e*0F̹HR`d>OvKؗrg%baAžw*1kG/;wo"*yԊL혖chGbu0u@tb[f$mƀA " }O_u0ZF' Z&/*,8U#R4k)8-]tsŘwяdi^t1ݶm] \ch<N!'簎]>SbFZ_*ѽ =EF1@G+\|?u4Zq 1OplG(%R'h$TO\Y!?4- R-}F0y;Ivk uWYJRS$T<'P{m LaSN4/FʐZ:v?+< ai矶[y.`+En܏Xp;[ش:Mf@e>v6f#:w$)g8 oƈ ФPSH Xsy84G4'5z/ʖ FĶOcSp+jdqNǫA_I'*5>7Vpxǵl+jAU8`ߕxmbxb:u-9dNiN&*\~A(<’j`tk,b?śWbo!GSP#0m[ 5ڻ6B=oD^V,v=[g.SșHAR˜po58VY w2%XCzJdd Bݯ۬Ja}f6Kj4^$Ԕ?8wyL"j$&96eQpR HII}H<֔#oe::u3  Rj:  /{MP{RPő۝M4kqţ%YϋxJ}?ɫm&Cnfŭ?Z&꺩y@.b ,?ܤđaukΝ9 lv7.}[!9t=~Eb՞'<N (0iXUJ< RDke5AQZw rC+mZO3砕J&[=Ӟ-l4Fq_!'撑F_VFik4Έm#,5V~ SۛFq#9@یE8]ږLTpGx٦|L΄1"u@nզfs"G@P@苶U?NYYd&ϥR=;7 4UȫUha?,!%&f"nHl;4n /o7dgxmhP d9.",k+YC3|_*AޮwQ (k#ν/9'B{RUp@G7J%3FN,PMGQ+urQfG[VL?5"Ψg:V˷Q@[&g'<3|=iJ "MwS:'F5;Nk.Ȕjs˷$vxiiĽC٢&' 7|-7D gx7rnN.;tiљ!E5b~FʳI;xnĤPJy>7v Ǿ/ iWe&W]Ïw;ve,#e&ai<P8҅8iXMpr=bȩtstc̦ю̅BûVVz _@)Rilv윒_*95{RK`nAhKa=僳8pkuqfYÛj.SW$8b^_BniZ ě]~% N9WchN/'\əN%!欲fgXO(?^vj=]K IyG{Gٳ$ן<.<bv.䝗 `{j[^2~X2TU"F `1+G``;bf J!TQ\9nu[apHJ̍F~Zk2`5_J Bà?H6kF!1K<{ӊ^mz2nV\A.;I ILfN^+y.uO*c>ۻ%:CnerE1³>r+sbk;êFbkw*&ug veAT9b|NS,ES+^P@vXI1'耝$L 9ʖwGG3= I DKK߼ k( o8:>bZK6tqvvuLss4#zCܿUa&_xGh:sKb& >ΪP _r@;'$P!O$SE\9voݰPr&tY9;:ueGْJ>lk+&i㜝46s0_2݉vղYDu"TGF0LEȷ;^Dyl ) g`HeLP-KDZ* MjN aF@ ꠂb{\=) _֊i>C4EʱT 3޴,B~z?em6ևp5"ByPZ;>_Iy Bߒd1x#j)9KRn Vhp8iuj<2bŤ0H9j@ j=Y^ϖMa"V!(b̢t[E2$7OApSmy=lBXѹQ/S箶eY%A{}%dքx oX  rRi2EimU Ϧj.νY#=vdf6:HqULh!A2Bkd~8FJf;pL*gLmow廉f`=3o'n ^v.}1poD,>}}.P ĕ59r Jہ@i]27õ3Y0`t. R{uT/>)` @ye*Ýe ԙ# i\[{/DC UC9kb;TqՃKHOX.D=Z9aq4"h-dpkɻJAw6oB뵀 /qZ5g)),Uo3b ,118ꋯ2l%пXMȄ?,9Jr%"M +1ȏ0i՛bH]iQd8wcij ,):BM&/@hcM{fPpuirGl}uN5jep?ts4ښhnlDFC:ڌ,c㦬H٩HuE%(s :V'Zm u 'l wL|_;NZ7 +yȿs!h#x{n6MQ!^ir{oD/  mO~qJXjY/. r` d99rh[7/YT ⳉ].op"pxfŋӫ(6E]3,6)rhws+7yw%&yc:fZS3)Χ>D-; MSQ1G,#O;3NaȦj%>bkV `ZAN߯#H 4y )5OV#XUJ8]B;uM;<_m܄I{ܕ"m?V_eمJΊ2cQ_ ZӀYbՏw7~q\ س&;ޥ$264d)7[FY}IVܙUZe@Z0^Wd5v~l!9(3ه)~Qȏ^~@^'ad_Bv~v-ZtUV_Z)Wc[=ʅ׽L/X'p,- ?7C0I/_|X|=ǧ+%i@|RgSg|oef$Fj.XG:>hw:%eU)#OЂ7 XĥNKK D[ 6K]4[|@Xux,ؤ%rN! <[3&Vϭd+Tn&K-g"EjaCQV76g,vpW[١NI.sXBi<k0,sdžxHcC*Cx!(]wLJ ~DZƋڿO| ~LSK fgbZ I_)-'h(R[؎{WJqpϜi+#"l|;,K}` ݕtZiG+}e֩QǏkM:lX|lDç8+++DۤЃܯ ]2FFj>h)l:kLA-e(͑J?cl$p+C;4z6Acf1SU<wgWYOET@C ed[lʇss$mG(^#e1cX)VhL1 E4TV.sǏlnݓKOKVBT1~Ǫ#5o7AIw (@TgDׅt4aw,n=bOOl[37AND}qTV\Eey'.,dn$f&mBR}Wwf(ZQӇHR-`"lw*:q bZU7`䌝3Jd7v ʑaaZ2?M VFD#E(U3/iqc=pw{MZq\ b_. *[[=f3|F+ӻl[qɄ-జm\dz{VCzwp}ubr'Z.fm);sP%\=юm(lKdH#(]\N0] 2rݷ5GB႙SIZ6 Aqn&PŒDD=0[d]<VJ9FFd3ڌS`<)]f.+)z,-rT '"#<-_^j]$2 #D &b χU_g Ta(qj7>pZ|3SF݁})̠+VVݖgCMN>H`kV>3.RwPȔ^UC 5%ulMyq6W.He UM y5Xm) H޸(A6 EX-<.!p̸e?9/!uAd4RYw74 u B|xݸ}RJvBԮ +5$U#r;e/13q>G.dp||~E!G( agb&~?o$AxW)KlC GU DGgtY/uZ%"OsO&3d(Ysō!wԀ~X[iߠjT.+;7ofkܓʼnUbԇFNr2{/pkkx*Հ2x\=h0_ΡM_Ew5` =P ;"97]KjR\Ůܢ" Cىě:(6NLJz _a7Ƃ`q v WD_QMtTnPORb Iu׭^ZYDM*UY\83isNhU+(:""`j79mְSۭW\DuV$*L􍹠c9F~ؔ%0xRE] x" {2^̎5'Iz~柁&1Xh&lc ԐflJP[S#B /#УjK xjVO+?7=FGDeN8Rf4XNDUz"6/%wAߦYmq ;WHN@/{q-2SZhyd!(103 56\*ľCO{?UI-r#mdJRM0`AljA>)^JبL=9T oB}B^墇?HnɹtPꣲ陘zgDe}1qxPov0m$VψL4Z@8_j&-;?ԖNn||[ H4UZZC<̐ʌdb8q2l})z!^[LwUdfddk5.֦> !n=AaP)[AV򯑵{p@R,O#䁯5+ ^}#ԕ0l7T!ӵ8הҏ:P~;jm캾TwD oٰEqbXEo_MkwX6]K׮5^Fqu 'K*ASɿeLkR6!Cxk'n~'͹ &9>c~)%m"t_CWK$:ݺ'g{HŎ\l J9Tcz%8~Fُ~J o8!ٻZ> n]XL)k%@@a"##a~C3<(~G\q<ԁkE^ojcU(1sEK7˓c[b׏TqgQ: ~bsaF`_Q)߷e~0(A[DݲlִH݋CM%\ s-{n[tMedOrh-]i%ZgOn|ϦУKV&9+$H[Yك8r\%%C5M1#-qŖvvE?*NfL?{ H&-]Z 9 GZiy"Ta)yv .*dFq8gY$"<?}I5e^ GH6E4yk,a!"O 9e^$u$'LI\Uq`sv5#a|o^'f0SݺzÇV":͏}*W kG֮% y:%ԑU\2 `ao[j^K$#Z{J>f)[5P;0k_%pj3R_bFA;fe.ud+oD͉T ntR$ut*JAspU8^UnE~c[MCm ;(ǘO|jJ/uiVА2GzUhH|4v7ЄOWULvre'<^`[]*L^^ 4>q&Bu- ĆkC}"Z͡@< 45 &r})e($Bs4;W2XOѬJ'\2h.KY@|mGYRq>-}8Pn>os9几b@ċ=%a$?x93+=j5ODe)%rIXF 񷾐U9QHS)>e5)|cNG9ͮ&qۤ$k &f4ij;ه.:=,mӳ FP芪$S[4F %~ B62sDX)^`,|B1݆`2ph|L/x/)_.$X䝘]+^E\ꎂȯ S|SF>QPb̹w+ȢǐvI =\%2KBg7(S_;Eī+pl˲'J/,˿$hہm[Z4g.?2+b6\hFM'),\B|Z/* vɨRcGpXVgYl,I%Q+lӐ[9гMC9 ``3q>?;׼pW!Uwj*$C@/vk7ЋAh@'IUz)*愫gl^?G:!_W_um`R'ArJ]GU>(NI/k%B EJW?y֒SJ|IA9\O zo !|XTlla-(bL|z%oR!B/&KaBj2 D9z|e|#cy,ߢT9 :X.a1qo38P<; 5sⰉ0=@哑f>t$S&o?~Ӕ"ŝmЬen&2jyWWc|-SwS֘$5 kMٷHCoC ]]}.|';UKaǓެ7?Ooޡ?C7Щ tBHƦQU^8՗>b-x|a̋<_¥(^a{<2j[\E[Sd󒝅0jj0x iUGW\+[LhcU͈ķ o8yx9NG 95U9_~B̆H4RsULɕty!&32h"?^BbC_zeIdY0p^@㫧 ])wѧ_pDa5SR#.x\$쉔ERYnͩz 糌Zt[:]C6'MWK@50ÃL:i6.#|@C'A4+gllO! Ezgm2oN5Sr ,8X́be)H2 f6co.>aVdϔH|^+}*+ i(1?:BE^W*C}WAz'Ino=fac3ܽөf$6(8BklԷU=x#;0w~~h0=[~z漸Zߨ8]_o* .2f2.,C/&@hvHV0] JtR[#1h/5#) S3N̎kdrYZ6*LD<B-҃=OX qm}{MUDKkI+_ #.@+vi%Sb⃯s*q…/ J-G}lAZHU6r̫,rF5r}v|i먥SVqUDҽS*3o!e#,lAyI 玥+15n:dIct+g0haa>i]JRtojNwV4ܠY2, ~.MB³y e?%3>d)uKѡ+ʠ+ bkDɭy!ܒd3ۖTdAݫw=5_!["=Ց62$1@OYtl5bEa_JQaXY-40̓BRa_J:+#y]6`|h?ȚYF4{LU&PӯCS!.qbMhbN4)s?aYUI'-]xw˜̙j%h.7XZ~ǚ[g!{͏gRINJ&s&ŃV ՞rRX HTo˵,Ri--D cզgC`OX68)A`B ~M< NA@ANלJ7v*L )q"p ?={Řs,%4!<OUa?]ř<%N0vp̳oa\@J{bGg$,qggkҠD(%gr% 4VM?]rk]3Nl;X.<ĘjBgLh#Å7B0m$;: X>BNs,?gs nWVi:v3j,>z> JNrxmrv|H<;mi76ͤfI]#tp?78m]`:8Z!0VE& M)vLEAX& K:rfSׁ*%aYyAsm\tW'GY1;e0S]tsqmZVIw x&<4e3@Y#l_8l q t~IRŕГS$_CqὝ0%Q}0*\&p$φ -{\I-FRv,b^ů %ff~`u;yAS$.;E(o&.9Q,\T)iX ؀\灻.e "&~گ&%wsA BYl7NOxԁi{ MPv٨?}S6ۄj4:iv?H,4h ?i^jh>I| IaWA9 hqE;\PutP8С% jD}P=bP8th櫏ᾉʅ W(0/˔Zٹ@EW\ $^\j%~tg[ v <7&}r+42丹nTY J]o3l[hag5Nj9&Z"1EB^>( XLI,MB:hǶP&%_6ɠ5܃Sа1+?o*Up^Y3y Ha/މ:LvI$,/́Hug, =oQ1@- Fe:߃^dBvbod1CvO\Ze023[TAG-nXuyҏ!\udfqN nF Y$8LFƊMKW]T~L*:Th_$?c:/ԑ\3!+0\ԐR7Jm!KHRvAt'^E`cD@`zU?OQjNj OoCb?`m#[j#j d\vG-tс#urîmujBY: Z'Q?2ˠuKx , xC x`q3Zj$pރolvYp];u4P9%\n6/M͉!f73&#jm FgoG1R(;OEg%'%LY8]z}g*#lb:~vvp!Fmcmy兪v@ 20R"Vm8&  m`50+`aSU,Bi%Emb6uJ:][(VZ.Z]EsS'$o4/VjO1} (:7sĂ}/\u{.26J鑯;ܓx,EURz$c HٴzdIMaֿWZ  ^#Ư%Djk4+2^8pQ҇DFwIt3m%b%2]x-ܠ"o>7ꛁLPNsC(ʰw^-J@f -#8%9$1mT M&i%p_웚ЧsmZlV5GLj/Sh< p2?=?WP?p[BCqJ|v^QWlAHy=.l7eCڑEƬ DW3adVHd½4#uME" !7Ƞm()ٞucev?\obpv(Wn#*}XN@e?̌ӋF0Ύ']]BFjG5C$p~{3cWfZ5 Ww$Tya∄BDf4iCbvLJZlcBxXUYyMI}f2k#Z~`U9 ҇HGH/!ZyS0['9V:q2 aEL \|1ΒH.ɔW$$l8mSKs=O0# 1mDȝ\=fcfYZoNE'JEhCGEj?2Ο GDEm5S?騨Ɯ}$׾S{zԖLYΖcWuW `&g(稾dSR%l5o>YOs07?m˰6tGE 0*CM# P-mTIr~&VXږq8<5Phdگ6vАP}JU^?Ә},=[lyCoa$GT@`o১i[rt.}%:PůMguKA銉hEkoyڰuށG \U2c r| \QdNkK"W'uCcL1;u. FZDRo9ӂxəм*{(I[1G!nN`1M @ .8Dz,9|q I RlζSwd8z@w_\kmoă)-6O^6 "n=Y" f ]-3Վt@2禸^)Ka2}d~R2乗.uV~[bd}(ҖÄ0 DUHi?/W651nzckS;atq1nE.T]C #l~[48^,)f[|Y (?.uW^3y9ڮCTҕ̍Ӈ|%疀a#/p2=ͣ7]0E`j`98AɶuB^@yi $G߂nzd"2-ʰ&?5|rs "]z7SzD4ڲCRg}ˆQ , `H帪D/*4M`Y/uJtWسXb8D!sP?顚PDz0j@MAoO3|\&,-GA O1И=hd3\*gWeԼOU `}I'GQU}VC[p im h7vFf6|Ho:y _^UMm բ*v| K^P*o ] &ΦW*A<7Oq+H#t.gӊKD8i-h,=H$(XE9 ޽urrdSvS|9k I(3N.r'g%6WFV;Y>|nʦ#U!K"c PTGl'gnwdQ#?CӼi/2$D2:͛-1 p]WU(/ cKȟOG DN)Gx,Vek6Ʉ V=VX2֑p*ɓNZ1Ԣ@!f\"Gt  QqD[s vZ5*>A{ @su'*5EY[Of;Ϲ]7ˬ=(q-M-td^8;aG^6=*BU+{! zED5z.ܦA*\À_"[ 317}qݭM:p~e6(iuwӓ-v -E{~. ,Z3tpɠ}\!+LY!䂪PlȑEwXFLܯ ؛'kO` gfo ADA+ĜO&xG7.4/ӻR֐W}(ʪa-D}1c*uav1~ h]w;{j"l}h 'E; 6R}猡M2%^Hbe{ u1uer"dHX[\XsG}zV @픡@4+ꈹJ][_Gק6x_[ bqi6u-z$@Ip~JSZn50ms`sbKamؖ/J65{t"=Vmz+mnU LLgf a\z7_U> k Rid[v5APh/5WYf -hټjZޟv?d{~݌hex2##} mC/:,R*LO yb^GW\ 9rG*1}iD _^Aqr/Qqguz]w&_ jyB&ʩi_۳lО1F0C@p7Ya}^<#um/a#n\JB`.|m\0 OCTK4k>نl̓ ){PE'7ݴ#Ie K1{B ݄=Na=d78#㟭itqbk" QwDC wl'~譺͂GRxnkG:}V_ _3PΜ(0Xq 4$x)N `Z-X%:We%'Ӝ.@9>XAODF8FV*QwV!VTD5YRr`[^WK14hC&C}٭k ҲO:5@E6 Ϻ|8+3}Wd",ފ~qu˱2%PwHۅVuc\G@!MAK$Hz>=Nд P{d•%bPNx1qM'E'0dMLӥZ!N]D"d L QOf*Dκ\OYeHs6.ѝ eqHփLi΃UyyҊ /&J^q}Ep43&ŐhG" D.%7}^ fLN;o*NVEPͺkCQ𲵇 {^k&+뫔 HsL\] $I>619<6ێv]>IG`::j"ĢOQ4Ȋw.{`ZHwEܡFFq%zҾ{nΕmDĄ 0Wxxr&Ls嚒FjPQ2XҹtS 2KEML+c 8wM{gKw0MqV%}>&bt]D5sL#TZϐ`n2N<:ZmD| 1@;nca0 mw~yAQ[2hfD2jFTT ]E,b_WByNc wnRPʝ)ӕZ fܿD-"҆|^];)Jd\Kp8(0B &egq6)51Bz3)"&jFK3)lX2|af=uM݊NqYdS:0>=wڽkPB{,#zb25.,&IwL?DŽp- Bae}|TDC@Fƛ {׳ R]|f*n~0'UI5r܃Ug /1V=rG񔯶=nPAW493˜4p&e>(sV-Ap؈ E<$%.귮7%t;ռmA[Mp3dN߅Yy7L0!@L~x'oMAM73li(֒a o=~5+u|r]ŋSj B7i?Jp1A_3.?pXBmxt.܇2j '{f[:"".Si uWL|Rco@0"ҵNfM4 \m~:IKWml"bX22ۀ3;.0%`tƉBUikŢT$l @A77<0Vz-I H<آ6dىu/Ѩ6hM ]bƂ&c",xw /3JnphY]WOxl;Hk9YimI>CahjM Hy\:(lc0?Njubl0R6zFHiDg@5q -K7%|cPIJMɅa5 h1qhrs^u3=bc`O2}M郈CuS0׬%֓vmqG9+KL: rw i]ͿT fFlYTS&gZ=bkfl@ݼ(},7w]54vT1{{DuC tJE~[p`.>1WʭYG$.Qz& {8>,ro){!BYM{+AA3-ei)k@N!tM%X'\"f@\Z .Lp^Mc7O!Է1{mnk.VS*ǜiEz0 "lg \Lҁ V4.kUԤG?vHCl N֊P!@ Ư/)m<чkfr sBlUz^1^/BkJmIz&P b<.:c@Y[yu5[@͝uVוN5Ӯ06N 2"q瑄{Z 29MQLvV{AƁmq\m\|`4@nq9 {\OQ1@EIֳ/>4[#k:erۻ|SHHבs2 qnDS DA=(Mp\7& /^#sfz5L+&B>$_UpEކ%up5N'MoY=V@݉xQ7طP'jQ|G+fNOExn l b멺񃶠fncx#Hw JIA%0Rn{E_3;^ |먇H%Xe}@F';)( <څLe/Z׵8 ǂ;~`kJ}x.EJ6(ys $ UaqEwwhutcj B*<`Pm/Ibb2ؼ;K R*8^>JZxޜbFd0m\wt +}o~ȠYR0L Yܼ2G;aj&Fm<|iwEE]C.r(U|Ql2 mhm37cM暬AYiYQr]vTPWJvY7(FMRqRPCLq;9Hv٧Nnv^Pau)-ɍ3kY"‡3z?\rF^8UiՏS7gJP`AͯU1@T96`}ǣYKA ~XmztMϤ&Mp x/l:BnG@q:C<ݘď7acݛ1'X(8. :4 ,mM^f<'eQX2> W/ 0݌{X HTE;u`=d+/aaY1vϮEF%M2(J5޼$*gwUl]>7;LLv%5i^`3A㖍zyc~fJB~' )JOxyiQw[-i sD=[+TW?O2-]M'4C%`Vˏ^WGeD]wH n$lgXO%ߵg?%6x<OՎZ`&HDHP| Ӵ "f ކ;DN+`k>(vmB^ y+ou,)q[OkX>ՅVhʀ/l?΢#o;\y';4(mj<& ٮ!+.[-X'8W%}='[@;$~X)qRpunt@DmK-CI˹ Ӥ$:"*z* g~uLԥ!kt Fwc4$LJ& 88 Z̺ f w+ DŽV,IQHkWsS+X5K: _@oT%7/Gv8_JPim*bA,oj"}f/-s2ūYR<>DP5+Mg1yBt`5H,:Y@<;Z`Gw$2ܤA # _y<[`O7|URLȸ, 6\h $r*Nnѩ֢)n4tmA}1-/ژj3Dzgvnt20 81>)cIaQ%͌(mr4 F+935O(৵K4 p: Qi>3:SU&@x&Dcv//4dc{ii3 g [|o\+5aug.r1+ P/yl[cnqyq#t Fi:efr}RQu3Ƿ.UO4D/@FFX# c)-J)ؑml̤IyUYmrB/[,OJDwlH閅z~}8ezO\f˞E7DAy/viX'D @Crz-IIh/du:/[&U.q7GخBѺy_Mz뮏Ae<752ln諉 RmE~|6gE^؄wRw`.NeXl;-G;T(Xf0b`NӉ doC-V#|^o}oǤ/p|q~kX,Hn7ԁԷ֔쎟\F(A+9o#jB W5ʆ G,Eв;q-,P \Vw)Wyr8 -\X$ L2.pYX޻=2߾埮n6~`M+ri򇈁|_}84L0]IMcữPAe}zA8+ur f.h$e8" _cLɕBYtp!Fb!^nj~'Y"; 1*yҬ^K($H<L2_5Fjs}؀TL_  EZ$u| ME%or̈́ڧƟ̙ly A6u}uݮAp96RYtKMxKJ[ꈂ'y]tn3hv=N+Àތ1*_&\P Fvbh6l쀐낾COUGqz@r b_j#։Ssײ,I$:@nו ,B_gO~xR|S"TubМ` <7Z%>Ak:l#|E1"*_kaeMO_LwQ^!WX){d.da1{xtR- ŦpũekTr3^@P+ V*yg{JΣLŚusV5:Ls` /qfE1ؼkT|')F_#ڍ@ocX6x/#MrK$kgpQodJQvNM.*PQN"{!~0^nζj.j]ycHğ T(ۓPF>@dSϤon GRVO DhcOWfbDzNj0M{4ivTj=[_`'R4fQl uⓥg"tʠNq!{aJ1yG`/p)-3tBv:ٗ.Sٱ$V/X{Zxk5F߿8.I6cSÝ4{5Lq(u"Jee\t> zs:ｸ1_+ە,X,O,`8Z,{َ){"p:#,Gw`*>F4Ii6vmDp &=rjFw;s3¸bAH$S0Vls>6G/ZVau7'BSiۢSIb:"c|@qu1[lZ_3qO@Ijvj^y>0MB!ZK m59Y29\]ݰ g ہa(h)oòSX#d CR]cm_ lN|0 ۲DC@dsml:_ռ@|˒չϒ/}/k;kg@[*Lq޼e]P /b~u=+/7r _/'Cu,a=u[cERopF 2{/Xp칕<QJc 8s+<\v)bƊ<ɵg?.yv$0o[,{7~E§h2̺8}G5uqxؽdǜ^uξVr\:B2bcۀ1Cz*ji`s޸RJ@G"KWͪ%$ jG`utr ȓӽdhHn[o\ר!0j!XJ K-p*Bs(,mf<;W >޺@E"uWcl2h8*_BI"1e—T5lL貳3sɊ$CTGY.IXl#r~vtn3RQ esY >+Gˬo֗%!!ֵD>m)as  %!)x'yj?G`ӅỴ952I1N'ѬjTb(ߊb'^bB?YGEiW񣗭10($M%һg/ç5qLH3e>xFU+!6uhNeN7k2* YK|vsyp(;ffuĬj[--;X.HyrN/G̑|Wn:,)v2[ي$`2izAZ3YoW P.e6eij>sՠn~{tR~]DeXxK=/oKq2CHr b sWQ=0E}fP=}1޵P=^89!fP:^G=aÞ@|aX"N>7ŸHHȨ3)H:"+DؒrUoATQ첛DT@ׅ6KP`BF ۯ5ǽV&&^]ԥ]1y8]ƍ4a3(- H1!&^T+JarK}Ie!^JHA3tԟH2 /:ڿpCC^xm Uʢ(sj*z06?J}Y+ngQ T.vopN(a[FCZ:w< ŵ[Q Г5"3zh2Mt[.5FyIj)֧>FśIaEeIR);a3hFV9dpp=g<ȾD/j߄i`Q>YQU.b-.1}reeA7qיsCc)-ҠXL%:18P=>X+S ͨDwU|ɟwFcgnM=s@|~kf.X qB? a]jӔ_QUx6K!զ^Kwy͓d`Lxh\Ě5u+U]&.&$D޺/1 d4]sP/&P !.LBH-l. w<#’[ak6Bt7ٮ 㧫RN[ن8|QX9l W&5F#9g$t7vzDQbvI? *A)8VGYC[^]+30|C>\FP8iCW*';T {1 !RaeJ/:j{(gዚ?B +;y%0;L|%οl~ofٹ;cld^`Sщ4[G=k̒/8aեtz t3(ulW>ŝC-G>Y'ow+f;,<ɳe(+0[;;#'1zU2ֿōaP3ܭb2ȩ2!-qnAW;-.惦ci$ 6s&-Y:úIϟ͞'V;KL\}aAHfZ3e;a2H*]@)K`2uD0}} y;%6kmgf@?,{–>˥5M2҉leo̚HUS$\-.ēpmz̀,r0+Kd/ĞNI:#ǃpIYoˊEAKb[:TZNF80o}*+e܄ĎtcLwtjxM^8Ǡ9ّ)}kc>L3bVq/6ձ &AzF73 m{L4BC~sב>S)7:AgK>IύֵGն(Ac[ۮh>:Gj0YMpPylWr1@\t!J%6sy)3܌KB9ܺgE3x}aC ՚v3msFLl~Bݳ $BjCr ԄT>bJzLGѷ Ov2~#A5hJQV J/-}0=}ʂ7x9wtyY&9 ƶy,bmi¿`$)>R,MJy*JST&U#}36R"lr$Z{ /u2ҽᡥCG~C h Ham>fqQa-DR«aYՃ'LPat@2+fNb~\tD4۰ JεjhvfCfDj|+[8!eXDBr_xGxH8^] g@DNn_ !"ku,4ATCuhE4Ed8F}H^㪴ퟥecq(U}Pz@jL5dh{LStG֛,[ RE^ڐ,!Z!bPBo2d p"PLa;x[爫Vq0~wŠJ(q[r mR {ءdmPg#ΫUhXn\74~HpE}( ڷ(mtIЁ:2L/kOIr.)ѱѦ~*‚T S g0`ёr4\K`Iɩ}Iؕ-]5f/p1[=Qպ*Gvw"3NU,@Zo+gc$i*G›Z85#tjmZ9-f?`v"$Sh]Řj;AʹOhg\%sQ`ֽbGS$Z2ܳ,nFdE]z?'}ı >9p槂1`S]M`z[vY3ɦ%Xc|5Щ)3n rPEoƶG5)c8it#ٲS;~97G}sx)<&Gp<|[43^b2\wy+>4<auHWRx_B%h| 鿅pI oA"N1/$Wge rֱ:2JC;f}(>h4әn%_/m ;~oӺP>%mN`K q" YZ