tomcat-servlet-4_0-api-9.0.82-150200.46.1<>,se,9p9|N}> 0tsC<"*D ]S>~aKaLS]Y/Ԟpw D2Q7$y !|*ŏLu!nK?}g)}8 ~R$-_! [ї͵G\Nj1Z"Oyۚ#_ K?ȣ|k[1 &:)8g)ׂ8ץʇ2(m9]t6#Dq9gDGBaU>E ?d  , ]  /IOV/ 4  F  X  |      1 ^     ( 8 e9 `e:e>@BF>GT Hx I X Y Z [,\4 ]X ^bcBdeflu vw8 x\ yzCtomcat-servlet-4_0-api9.0.82150200.46.1Apache Tomcat Servlet API implementation classesApache Tomcat Servlet API implementation classes version 3.1e,9h04-ch1bFSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://tomcat.apache.orglinuxnoarchupdate-alternatives --install /usr/share/java/servlet.jar servlet \ /usr/share/java/tomcat-servlet-4.0-api.jar 30000 # Fix for bsc#1092163. # Keep the /usr/share/java/tomcat-servlet.jar symlink for compatibility. # In case of update from an older version where /usr/share/java/tomcat-servlet.jar is an alternatives symlink # the update-alternatives in the new version will cause a rename tomcat-servlet.jar -> servlet.jar. # This makes sure the tomcat-servlet.jar is recreated if it's missing because of the rename. if [ ! -f /usr/share/java/tomcat-servlet.jar ]; then echo "Recreating symlink /usr/share/java/tomcat-servlet.jar" ln -s /usr/share/java/tomcat-servlet-4.0-api.jar /usr/share/java/tomcat-servlet.jar fiif [ $1 -eq 0 ] ; then if [ ! -f /etc/alternatives/servlet ]; then # /etc/alternatives/servlet was removed on uninstall. # Create a broken symlink to make sure update-alternatives works correctly and falls back # to servletapi5 or servletapi4 if they're installed. ln -s /usr/share/java/tomcat-servlet-4.0-api.jar /etc/alternatives/servlet fi update-alternatives --remove servlet \ /usr/share/java/tomcat-servlet-4.0-api.jar fiY A큤e,7e,)e,(e,'e,'e,7e&e,(e,'59a034359a329fd4243286bffe63eb15f6d767a0fef2be203f634f3e196996ba6f939fc48667e2ddb1ed62e9902ff4e6780b1c4d72543b9175d22609484a88addd39330a0e8372cd8d826a838bb5539fed7b523bcb665bff7eb2a838799dfa0c74b03fe1ce0e54a9dff187e44239468c071be7a5f43629f6a8b3f495c0d05f59/etc/alternatives/servlet.jartomcat-servlet-4.0-api.jartomcat-servlet-4.0-api.jar@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottomcat-9.0.82-150200.46.1.src.rpmmvn(org.apache.tomcat:tomcat-servlet-api)mvn(org.apache.tomcat:tomcat-servlet-api:pom:)mvn(org.mortbay.jetty:servlet-api)mvn(org.mortbay.jetty:servlet-api:pom:)osgi(org.apache.tomcat-servlet-api)servletservlet31servlet7tomcat-servlet-4.0-apitomcat-servlet-4_0-api@@    /bin/sh/bin/shjava-headlessjavapackages-filesystemrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.1e)1@e 0@e 0@e;eRdld0d?@cc@c@c{h@cQ8@bγbbN@b!b@aaaA@a@a{@azamaamaama`X`Q@`OL@`OL@`3__F@_@___FN_!d^@^^_^@^Y^U @^1s^%@^!^@]҇]Γ@]4@]?]V]@\\\r@\k\j@\Yz\X)@\LK\?\8@\'a\[v[u[@[@[ug@ZZ_:Z!D@Z@YYYY:Y@Y@XZnW@WiW|W'A@WWKV@V2V`VA@UlI@UlI@UlI@UQU hU hTTи@fstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comolaf@aepfle.demichele.bussolotto@suse.comfstrba@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comwittemar@googlemail.comwittemar@googlemail.comwittemar@googlemail.comamehmood@suse.comamehmood@suse.comwittemar@googlemail.comwittemar@googlemail.comwittemar@googlemail.comamehmood@suse.commalbu@suse.commalbu@suse.commalbu@suse.comjengelh@inai.defstrba@suse.commalbu@suse.comfstrba@suse.commalbu@suse.comjavier@opensuse.orgmalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comdimstar@opensuse.orgmalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.commalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.comecsos@opensuse.orgfstrba@suse.comsean@suspend.netmalbu@suse.comecsos@opensuse.orgmalbu@suse.commalbu@suse.commalbu@suse.defstrba@suse.commalbu@suse.comrbrown@suse.commalbu@suse.comecsos@opensuse.orgfstrba@suse.comecsos@opensuse.orgdziolkowski@suse.commalbu@suse.comastieger@suse.comtchvatal@suse.commalbu@suse.commalbu@suse.comdmacvicar@suse.dejcnengel@gmail.comtchvatal@suse.comdmacvicar@suse.dedmacvicar@suse.detchvatal@suse.comdmacvicar@suse.detchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comwittemar@googlemail.combmaryniuk@suse.com- Update to Tomcat 9.0.82 * Catalina + Add: 65770: Provide a lifecycle listener that will automatically reload TLS configurations a set time before the certificate is due to expire. This is intended to be used with third-party tools that regularly renew TLS certificates. + Fix: Fix handling of an error reading a context descriptor on deployment. + Fix: Fix rewrite rule qsd (query string discard) being ignored if qsa was also use, while it should instead take precedence. + Fix: 67472: Send fewer CORS-related headers when CORS is not actually being engaged. + Add: Improve handling of failures within recycle() methods. * Coyote + Fix: 67670: Fix regression with HTTP compression after code refactoring. + Fix: 67198: Ensure that the AJP connector attribute tomcatAuthorization takes precedence over the tomcatAuthentication attribute when processing an auth_type attribute received from a proxy server. + Fix: 67235: Fix a NullPointerException when an AsyncListener handles an error with a dispatch rather than a complete. + Fix: When an error occurs during asynchronous processing, ensure that the error handling process is only triggered once per asynchronous cycle. + Fix: Fix logic issue trying to match no argument method in IntropectionUtil. + Fix: Improve thread safety around readNotify and writeNotify in the NIO2 endpoint. + Fix: Avoid rare thread safety issue accessing message digest map. + Fix: Improve statistics collection for upgraded connections under load. + Fix: Align validation of HTTP trailer fields with standard fields. + Fix: Improvements to HTTP/2 overhead protection (bsc#1216182, CVE-2023-44487) * jdbc-pool + Fix: 67664: Correct a regression in the clean-up of unnecessary use of fully qualified class names in 9.0.81 that broke the jdbc-pool. * Jasper + Fix: 67080: Improve performance of EL expressions in JSPs that use implicit objects- Update to Tomcat 9.0.80 * Catalina + Add RateLimitFilter which can be used to mitigate DoS and Brute Force attacks + Move the management of the utility executor from the init()/destroy() methods of components to the start()/stop() methods. + Add org.apache.catalina.core.StandardVirtualThreadExecutor, a virtual thread based executor that may be used with one or more Connectors to process requests received by those Connectors using virtual threads. This Executor requires a minimum Java version of Java 21. + 66513: Add a per session Semaphore to the PersistentValve that ensures that, within a single Tomcat instance, there is no more than one concurrent request per session. Also expand the debug logging to include whether a request bypasses the Valve and the reason if a request fails to obtain the per session Semaphore. + 66609: Ensure that the default servlet correctly escapes file names in directory listings when using XML output. + 66618: Add a numeric last modified field to the XML directory listings produced by the default servlet to enable sorting in the XSLT. + 66621: Attempts to lock a collection with WebDAV may incorrectly fail if a child collection has an expired lock. + 66622: Deprecate the xssProtectionEnabled setting from the HttpHeaderSecurityFilter and change the default value to false as support for the associated HTTP header has been removed from all major browsers. + 59232: Add org.apache.catalina.core.ContextNamingInfoListener, a listener which creates context naming information environment entries. + 66665: Add org.apache.catalina.core.PropertiesRoleMappingListener, a listener which populates the context's role mapping from a properties file. + Fix an edge case where intra-web application symlinks would be followed if the web applications were deliberately crafted to allow it even when allowLinking was set to false. + Add utility config file resource lookup on Context to allow looking up resources from the webapp (prefixed with webapp:) and make the resource lookup API more visible. + Fix potential database connection leaks in DataSourceUserDatabase identified by Coverity Scan. + Make parsing of ExtendedAccessLogValve patterns more robust. + Fix failure trying to persist configuration for an internal credential handler. + 66680: When serializing a session during the session presistence process, do not log a warning that null Principals are not serializable. + Catch NamingException in JNDIRealm#getPrincipal. It is used in Java up to 17 to signal closed connections. + 66822: Use the same naming format in log messages for Connector instances as the associated ProtocolHandler instance. + The parts count should also lower the actual maxParameterCount used for parsing parameters if parts are parsed first. + If an application or library sets both a non-500 error code and the javax.servlet.error.exception request attribute, use the provided error code during error page processing rather than assuming an error code of 500. + Update code comments and Tomcat output to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. + Avoid protocol relative redirects in FORM authentication (CVE-2023-41080, bsc#1214666). * Coyote + Update the HTTP/2 implementation to use the prioritization scheme defined in RFC 9218 rather than the one defined in RFC 7540. + 66602: not sending WINDOW_UPDATE when dataLength is ZERO on call SwallowedDataFramePayload. + 66627: Restore the documented behaviour of MessageBytes.getType() that it returns the type of the original content rather than reflecting the most recent conversion. + 66635: Correct certificate logging on start-up so it differentiates between keystore based keys/certificates and PEM file based keys/certificates and logs the relevant information for each. + Refactor blocking reads and writes for the NIO connector to remove code paths that could allow a notification from the Poller to be missed resuting in a timeout rather than the expected read or write. + Refactor waiting for an HTTP/2 stream or connection window update to handle spurious wake-ups during the wait. + Correct a regression introduced in 9.0.78 and use the correct constant when constructing the default value for the certificateKeystoreFile attribute of an SSLHostConfigCertificate instance. + Refactor HTTP/2 implementation to reduce pinning when using virtual threads. + Pass through ciphers referring to an OpenSSL profile, such as PROFILE=SYSTEM instead of producing an error trying to parse it. + 66841: Ensure that AsyncListener.onError() is called after an error during asynchronous processing with HTTP/2. + 66842: When using asynchronous I/O (the default for NIO and NIO2), include DATA frames when calculating the HTTP/2 overhead count to ensure that connections are not prematurely terminated. + Correct a race condition that could cause spurious RST messages to be sent after the response had been written to an HTTP/2 stream. * WebSocket + 66548: Expand the validation of the value of the Sec-Websocket-Key header in the HTTP upgrade request that initiates a WebSocket connection. The value is not decoded but it is checked for the correct length and that only valid characters from the base64 alphabet are used. + Improve handling of error conditions for the WebSocket server, particularly during Tomcat shutdown. + Correct a regression in the fix for 66574 that meant the WebSocket session could return false for onOpen() before the onClose() event had been completed. + 66681: Fix a NullPointerException when flushing batched messages with compression enabled using permessage-deflate. * Web applications + Documentation. Expand the security guidance to cover the embedded use case and add notes on the uses made of the java.io.tmpdir system property. + 66662: Documentation. Fix a typo in the name of the algorithms attribute in the configuration section for the Digest authentication value. + Documentation. Update documentation to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. * jdbc-pool + Fix the releaseIdleCounter does not increment when testAllIdle releases them. + Fix the ConnectionState state will be inconsistent with actual state on the connection when an exception occurs while writing. * Other + Update to Commons Daemon 1.3.4. + Improvements to French translations. + Update Checkstyle to 10.12.0. + Update the packaged version of the Apache Tomcat Native Library to 1.2.37 to pick up the Windows binaries built with with OpenSSL 1.1.1u. + Include the Windows specific binary distributions in the files uploaded to Maven Central. + Improvements to French translations. + Improvements to Japanese translations. + Update UnboundID to 6.0.9. + Update Checkstyle to 10.12.1. + Update BND to 6.4.1. + Update JSign to 5.0. + Correct properties for JSign dependency. + Align documentation for maxParameterCount to match hard-coded defaults. + Update NSIS to 3.0.9. + Update Checkstyle to 10.12.2. + Improvements to French translations. + Improvements to Japanese translations. + 66829: Fix quoting so users can use the _RUNJAVA environment variable as intended on Windows when the path to the Java executable contains spaces. + Update Tomcat Native to 1.2.38 to pick up Windows binaries built with OpenSSL 1.1.1v. + Improvements to Chinese translations. + Improvements to French translations. + Improvements to Japanese translations - Removed patch: * tomcat-9.0.75-CVE-2023-41080.patch + integrated in this version- Fixed CVEs: * CVE-2023-41080: Avoid protocol relative redirects in FORM authentication. (bsc#1214666) - Added patches: * tomcat-9.0.75-CVE-2023-41080.patch- Modified patch: * tomcat-9.0-osgi-build.patch + make it more robust to change in number of artifacts in bnd + do not enumerate jars, just take all jars from the aqute-bnd directory into the classpath- Require(pre) shadow because groupadd is needed early- Update to Tomcat 9.0.75. * See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(markt) * Fixes: + bsc#1211608, CVE-2023-28709 + bsc#1208513, CVE-2023-24998 (previous incomplete fix) - Remove patches: * tomcat-9.0-CVE-2021-30640.patch * tomcat-9.0-CVE-2021-33037.patch * tomcat-9.0-CVE-2021-41079.patch * tomcat-9.0-CVE-2022-23181.patch * tomcat-9.0-NPE-JNDIRealm.patch * tomcat-9.0-hardening_getResources.patch * tomcat-9.0.43-CVE-2021-43980.patch * tomcat-9.0.43-CVE-2022-42252.patch * tomcat-9.0.43-CVE-2022-45143.patch * tomcat-9.0.43-CVE-2023-24998.patch * tomcat-9.0.43-CVE-2023-28708.patch + integrated in this version * tomcat-9.0.43-java8compat.patch + problem with Java 8 compatibility solved in this version - Modified patch: * tomcat-9.0.31-secretRequired-default.patch - > tomcat-9.0.75-secretRequired-default.patch + rediffed to changed context * tomcat-9.0-javadoc.patch + drop integrated hunks * tomcat-9.0-osgi-build.patch + fix to work with current version - Added patch: * tomcat-9.0-jdt.patch + fix build against our ecj- Fixed CVEs: * CVE-2022-45143: JsonErrorReportValve: add escape for type, message or description (bsc#1206840) - Added patches: * tomcat-9.0.43-CVE-2022-45143.patch- Fixed CVEs: * CVE-2023-28708: tomcat: not including the secure attribute causes information disclosure (bsc#1209622) - Added patches: * tomcat-9.0.43-CVE-2023-28708.patch- Fixed CVEs: * CVE-2023-24998: tomcat,tomcat6: FileUpload DoS with excessive parts (bsc#1208513) - Added patches: * tomcat-9.0.43-CVE-2023-24998.patch- set logrotate for localhost.log, manager.log, host-manager.log and localhost_access_log.txt - use logrotate for catalina.out * update tomcat-serverxml-tool and spec to configure server.xml - Added patch: * tomcat-9.0-logrotate_everything.patch * tomcat-serverxml-tool.tar.gz - Removed: * tomcat-serverxml-tool-1.0.tar.gz- Use catalina.out for logging (bsc#1205647) - Added patches: * tomcat-9.0-fix_catalina.patch- Fixed CVEs: * CVE-2022-42252: reject invalid content-length requests. (bsc#1204918) - Added patches: * tomcat-9.0.43-CVE-2022-42252.patch- Fixed CVEs: * CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868) - Added patches: * tomcat-9.0.43-CVE-2021-43980.patch- Do not hardcode /usr/libexec but use %%_libexecdir during the build * Fixes for platforms, where /usr/libexec and %%_libexecdir are different- Fix bsc#1201081 by building with release=8 all files that can be built this way. The one file remaining, build it with source=8 and target=8 - Modified patch: * tomcat-9.0.43-java8compat.patch + Do not cast ByteBuffer to Buffer to call the Java 8 compatible methods. Build with release=8 instead- Security hardening. Deprecate getResources() and always return null. (bsc#1198136) - Added patch: tomcat-9.0-hardening_getResources.patch- Remove dependency on log4j/reload4j completely (bsc#1196137)- Do not build against the log4j12 packages, use the new reload4j- Fixed CVEs: * CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255) - Added patches: * tomcat-9.0-CVE-2022-23181.patch- remove instance units from post scripts, they can not be reloaded- Fix NPE in JNDIRealm, when userRoleAttribute is not set (bsc#1193569) - Added patch: * tomcat-9.0-NPE-JNDIRealm.patch- Modified patch: * tomcat-9.0-osgi-build.patch + account for biz.aQute.bnd.ant artifact in aqute-bnd >= 5.2.0- Fixed CVEs: * CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279) * CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278) - Added patches: * tomcat-9.0-CVE-2021-30640.patch * tomcat-9.0-CVE-2021-33037.patch- Fixed CVEs: * CVE-2021-41079: Validate incoming TLS packet (bsc#1190558) - Added patches: * tomcat-9.0-CVE-2021-41079.patch- Update to Tomcat 9.0.43. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.43_(markt) - Removed Patches because fixed upstream now: * tomcat-9.0-CVE-2021-25122.patch * tomcat-9.0-CVE-2021-25329.patch - Rebased patch: tomcat-9.0.39-java8compat.patch -> tomcat-9.0.43-java8compat.patch- Update to Tomcat 9.0.41. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.41_(markt)- Update to Tomcat 9.0.40. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.40_(markt) - Removed Patches because fixed upstream now: * tomcat-9.0-CVE-2020-17527.patch * tomcat-9.0-CVE-2021-24122.patch- Fixed CVEs: * CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) * CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909) - Added patches: * tomcat-9.0-CVE-2021-25122.patch * tomcat-9.0-CVE-2021-25329.patch- Log if file access is blocked due to symlinks: CVE-2021-24122 (bsc#1180947) - Added patch: * tomcat-9.0-CVE-2021-24122.patch- Update to Tomcat 9.0.39. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.39_(markt) - Rebased patches: * tomcat-9.0.38-java8compat.patch -> tomcat-9.0.39-java8compat.patch- Update to Tomcat 9.0.38. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.38_(markt) - Rebased patches: * tomcat-9.0.37-java8compat.patch -> tomcat-9.0.38-java8compat.patch - Removed tomcat-9.0-CVE-2020-13943.patch because that fix is upstream now- Update to Tomcat 9.0.37. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.37_(markt) - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) - Rebased patches: * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch -> tomcat-9.0.37-java8compat.patch- Fix HTTP/2 request header mix-up: CVE-2020-17527 (bsc#1179602) - Added patch: * tomcat-9.0-CVE-2020-17527.patch- Add source url for tomcat-serverxml-tool - Fix typo in tomcat-webapps %postun that caused /examples context to remain in server.xml when package was removed - Remove tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from package. They're not used anymore becuse of systemd (bsc#1178396)- Fix tomcat-servlet-4_0-api package alternatives to use /usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar. Keep /usr/share/java/tomcat-servlet.jar symlink for compatibility. (bsc#1092163) - Change default file ownership in tomcat-webapps from tomcat:tomcat to root:tomcat- Fix CVE-2020-13943 (bsc#1177582) - Added patch: * tomcat-9.0-CVE-2020-13943.patch - Change /usr/lib/tomcat to /usr/libexec/tomcat in startup scripts (bsc#1177601)- Replace old specfile constructs. Remove support for SUSE 11.x. - Drop %systemd_requires, which is considered a no-op. - Trim redundant license mention from description. - Make documentation noarch. - Do not suppress errors from useradd.- Avoid hardcoding /usr/lib as libexecdir- Don't give write permissions for the tomcat group on files and directories where it's not needed (bsc#1172562) - Change tomcat.pid location from /var/run to /run (bsc#1173103) - Use the /sbin/nologin shell when creating the tomcat user - Use %tmpfiles_create macro in %post instead of calling systemd-tmpfiles directly- Update to Tomcat 9.0.36. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.36_(markt) - Fixed CVEs: CVE-2020-11996 (bsc#1173389)- Update to Tomcat 9.0.35. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) - Fixed CVEs: - CVE-2020-9484 (bsc#1171928) - Rebased patches: * tomcat-9.0-javadoc.patch * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch- Update to Tomcat 9.0.34. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.34_(markt) - Notable changes: * Add support for default values when using ${...} property replacement in configuration files. Based on a pull request provided by Bernd Bohmann. * When configuring an HTTP Connector, warn if the encoding specified for URIEncoding is not a superset of US-ASCII as required by RFC 7230. * Replace the system property org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the Connector attribute encodedSolidusHandling that adds an additional option to pass the %2f sequence through to the application without decoding it in addition to rejecting such sequences and decoding such sequences.- Update to Tomcat 9.0.33. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.33_(markt) - Notable fix: corrected a regression in the improvements to HTTP header parsing (bsc#1167438) - Rebased patches: * tomcat-9.0-javadoc.patch * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch- Change default value of AJP connector secretRequired to false - Added patch: * tomcat-9.0.31-secretRequired-default.patch- Update to Tomcat 9.0.31. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt) - Fixed CVEs: * CVE-2019-17569 (bsc#1164825) * CVE-2020-1935 (bsc#1164860) * CVE-2020-1938 (bsc#1164692) - Modified patch * tomcat-9.0.30-java8compat.patch - > tomcat-9.0.31-java8compat.patch + Adapt to changed context- Modified patch: * tomcat-9.0.30-java8compat.patch + add missing casts (bsc#1162081)- Change back the build to build with any Java >= 1.8 - Added patch: * tomcat-9.0.30-java8compat.patch + Cast java.nio.ByteBuffer and java.nio.CharBuffer to java.nio.Buffer in order to avoid calling Java 9+ APIs (functions with co-variant return types) - Renamed patch: * tomcat-9.0-disable-osgi-build.patch - > tomcat-9.0-osgi-build.patch + Do not disable, but fix OSGi build since we have now aqute-bnd- Change build to always use Java 1.8 (bsc#1161025).- Update to Tomcat 9.0.30. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt) - Fixed CVEs: - CVE-2019-0221 (bsc#1136085) - CVE-2019-10072 (bsc#1139924) - CVE-2019-12418 (bsc#1159723) - CVE-2019-17563 (bsc#1159729) - Removed patch: * tomcat-9.0-JDTCompiler-java.patch + It was not applied- Update to Tomcat 9.0.27. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.27_(markt) - Uset aqute-bnd to generate OSGi manifest, since we have that package now in openSUSE:Factory - Removed patch: * tomcat-9.0-disable-osgi-build.patch + not needed- Add maven pom files for tomcat-jni and tomcat-jaspic-api- Distribute the pom file also for tomcat-util-scan artifact- Build against compatibility log4j12 package- Adapt to the new ecj directory layout- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini- Update to Tomcat 9.0.20. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt) - increase maximum number of threads and open files for tomcat (bsc#1111966)- Update to Tomcat 9.0.19. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.19_(markt) Notable packaging changes: - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed. The classes contained in this jar were merged into /usr/share/java/tomcat/catalina.jar. - Fixed CVEs: - CVE-2019-0199 (bsc#1131055) - Rebased patch: - tomcat-9.0-JDTCompiler-java.patch - tomcat-9.0-javadoc.patch- Build classpath directly with the geronimo jars instead of with symlinks to them- Don't overwrite changes made to server.xml contexts when updating bundled webapps.- Set javac target to 1.8 when building docs samples and serverxmltool- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps (bsc#1092341). Affected packages: - tomcat-webapps - tomcat-admin-webapps - tomcat-docs-webapp - Remove %doc directive from tomcat-docs-webapps files section so that zypper installs files even if rpm.install.excludedocs is set to yes.- Require Java 1.8 or later (bsc#1123407)- Clean up OSGi manifest injection - Put embed maven metadata into embed subpackage - Use the .mfiles* lists generated by %%add_maven_depmap macro- Fix tomcat-tool-wrapper classpath error (bsc#1120745)- Fix tomcat-digest classpath error (bsc#1120745)- Update to Tomcat 9.0.14. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)- Add pom files for tomcat-jdbc and tomcat-dbcp - Add org.eclipse.jetty.orbit* aliases to correspondant artifacts- Update to Tomcat 9.0.13. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)- Update to Tomcat 9.0.12. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt) - Fixed CVEs: - CVE-2018-11784 (bsc#1110850) - Rebased patches: - tomcat-9.0-disable-osgi-build.patch - tomcat-9.0-javadoc.patch - tomcat-9.0-sle.catalina.policy.patch - tomcat-9.0-tomcat-users-webapp.patch- Declare following files to config(noreplace) to prevent override access rights: - host-manager/META-INF/context.xml - manager/META-INF/context.xml- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's configuration during update (bsc#1067720)- Update to Tomcat 9.0.10. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt) - Fixed CVEs: - CVE-2018-1336 (bsc#1102400) - CVE-2018-8014 (bsc#1093697) - CVE-2018-8034 (bsc#1102379) - CVE-2018-8037 (bsc#1102410) - Rebased patch tomcat-9.0-JDTCompiler-java.patch - Added patch tomcat-9.0-disable-osgi-build.patch to disable adding OSGi metadata to JAR files- Update to Tomcat 9.0.5. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)- Modified patch: * tomcat-9.0-javadoc.patch + Don't append to javadoc --add-modules since we are building with source=8 + Avoid accessing Internet URLs from build environment- Update to Tomcat 9.0.2: * Major update for tomcat8 from tomcat9 * For full changelog please read upstream changes at: + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html * Rename all tomcat-8.0-* files to tomcat-9.0-* - Changed patches: * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch * Deleted: tomcat-8.0-sle.catalina.policy.patch * Deleted: tomcat-8.0-tomcat-users-webapp.patch * Deleted: tomcat-8.0.33-JDTCompiler-java.patch * Deleted: tomcat-8.0.44-javadoc.patch * Deleted: tomcat-8.0.9-property-build.windows.patch * Added: tomcat-9.0-JDTCompiler-java.patch * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch * Added: tomcat-9.0-javadoc.patch * Added: tomcat-9.0-sle.catalina.policy.patch * Added: tomcat-9.0-tomcat-users-webapp.patch - Renamed subpackage tomcat-3_1-api to tomcat-4_0-api to reflect the new Servlet API version. - Commented out JAVA_HOME in /etc/tomcat/tomcat.conf - Added "tomcat-" prefix to lib symlinks under /usr/share/java to avoid file conflicts with servletapi5 and geronimo-specs - Fixed wrong %ghost file paths for alternatives symlinks- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Build with JDK 8 to fix runtime errors when running with JDK 7 and 8 - Fix tomcat-digest classpath error (bsc#977410) - Fix packaged /etc/alternatives symlinks for api libs that caused rpm -V to report link mismatch (bsc#1019016)- update to 8.0.47 http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVE: - CVE-2017-12617 - rebase tomcat-8.0-sle.catalina.policy.patch- Added patch: * tomcat-8.0.44-javadoc.patch - generate documentation with the same source level as class files - fixes build with jdk9- Version update to 8.0.44: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVE: - CVE-2017-5664 (bsc#1042910)- New build dependency: javapackages-local- Version update to 8.0.43: * Another bugfix release, for full details see: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVEs: - CVE-2017-5647 (bnc#1033448) - CVE-2017-5648 (bnc#1033447) - CVE-2016-8745 - Renamed and rebased patches: * tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch - Enable optional setenv.sh script. See section "(3.4) Using the "setenv" script (optional, recommended)" in http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt (bnc#1002662) - Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412). Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api, tomcat-servlet-3_0-api- update to 8.0.39: (boo#1003911) * Improve handling of I/O errors with async processing * Fail earlier on invalid HTTP request - includes changes from 8.0.38: * Refactoring the non-container thread Async complete()/dispatch() handling to remove the possibility of deadlock * Improved UTF-8 handling for the RewriteValve - includes changes from 8.0.37: * Treat paths used to obtain a request dispatcher as encoded (configurable) * Various jdbc-pool fixes - drop tomcat-8.0.36-jar-scanner-loop.patch, upstream- Switch to commons-dbcp2 fate#321029- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862) Added: tomcat-8.0.36-jar-scanner-loop.patch- Version update to 8.0.36: * Another bugfix release for the 8.0 series. Full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt) - CVE fixed by the version update: - CVE-2016-3092 (bnc#986359) - Fixed a deployment error in the examples webapp by changing the context.xml format to the new one introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources- fix maven fragments paths to build in multiple distribution versions- Version update to 8.0.33: * Another bugfix release for 8.0 series, full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt) - Rebase tomcat-8.0-tomcat-users-webapp.patch - Rebase tomcat-7.0.53-JDTCompiler-java.patch to tomcat-8.0.33-JDTCompiler-java.patch- Fix fixme for the prereq preamble value - It seems systemd prints error on adding the @ services to macros so do not do that- package was partly merged with the scripts used in the Fedora distribution - support running multiple tomcat instances on the same server (fate#317783) - add catalina-jmx-remote.jar (fate#318403) - remove sysvinit support: systemd is required- update changes file for CVE information - Fixed CVEs: - CVE-2015-5346 (bnc#967814) in 8.0.32 - CVE-2015-5351 (bnc#967812) in 8.0.32 - CVE-2016-0706 (bnc#967815) in 8.0.32 - CVE-2016-0714 (bnc#967964) in 8.0.32 - CVE-2016-0763 (bnc#967966) in 8.0.32 - CVE-2015-5345 (bnc#967965) in 8.0.30 - CVE-2015-5174 (bnc#967967) in 8.0.27- Version update to 8.0.32: * Another bugfix release for 8.0 series, full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt) - Rebase patch: * tomcat-8.0.9-property-build.windows.patch- update to Tomcat 8.0.28 * Multiple fixes, read upstream changelog at: https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)- Some whitespace cleanups- Remove pointless conflicts on provide/obsolete symbols- Version bump to 8.0.23 fate#318913: * Multiple testfixes all around, read upstream changelog at: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)- Fix previous commit. Fix one rpmlint warning- Drop gpg verification from spec, it is done by obs- Fix build with new jpackage-tools- update to Tomcat 8.0.18: * Major update for tomcat8 from tomcat7 * For full changelog please read upstream changes at: + http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Rename all tomcat-7.0-* files to tomcat-8.0-* * Update keyring file - Update windows patch to apply again: * Deleted: tomcat-7.0.52-property-build.windows.patch * Added: tomcat-8.0.9-property-build.windows.patch * Added:tomcat-8.0-tomcat-users-webapp.patch * Deleted: tomcat-7.0-tomcat-users-webapp.patch * Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch * Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch- Version 1.1.30 or higher is required for APR listener (bnc#914725)/bin/sh/bin/shservlettomcat-servlet-3_0-apitomcat-servlet-3_1-apih04-ch1b 1697445433 9.0.829.0.829.0.829.0.829.0.824.09.0.82-150200.46.19.0.82-150200.46.14.0servletservlet.jartomcat-servlet-4.0-api.jartomcat-servlet-api.jartomcat-servlet.jartomcat-servlet-4_0-apiLICENSEtomcat-servlet-api.xmlJPP-tomcat-servlet-api.pom/etc/alternatives//usr/share/java//usr/share/licenses//usr/share/licenses/tomcat-servlet-4_0-api//usr/share/maven-metadata//usr/share/maven-poms/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30729/SUSE_SLE-15-SP2_Update/1f5b6e9de4003dbcae3fc0bc675fba51-tomcat.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/tomcat-9.0.82-150200.46.1.x86_64/etc/alternatives/servlet' (No such file or directory)gzip ERROR: Stdin has more than one entry--rest ignored (Zip archive data, at least v2.0 to extract Java archive data (JAR))directoryASCII textXML 1.0 document, ASCII textPPPPPRRBJ?V͎2ޢ#Ɲ Wrg!+z׼rv2ܚ Φ-4hu|M`rpśjNԍ!0'ˁ= «JG+R)ڽ/R-^CVPҪ+: x`S>xxe[t+t3pƨ`ܷ'䉓, t(FÛX\[zbonj |IS.|( T2FZH_/}? %4]"~AЖl"y{&w= s*)8|&,e0d>@BTiYkV][8ҟt8={5CAm/} ;bZq5-N+ j2wj'Xq.sF$LkQcRkVF ! 'IqvшjRs U*;Lh)2i3d1yu2^,lTy/R*[XrvG)'AT[):+ߠL;B*O̿LIF4!0viٿ<1 HyoR5 ru:!_OebTLכS鯃2z[ʍ:VX9ImS~O:HrimQ}>f }YggSF%Pvo`bƜ 529u m8FVDphh#vRrkBE{יl-0 T~ɒے5ڗ1GCp*R {7B=j1'bK@hF;E"x=&86͕"ڬBe!DRH`sf(o&K,ީ)Met}QRM뙸iT/?9J I i*q:DA[?ߩՈ .澚Ā,9I#L}6i+P]oiDY%W7c9(A}]I/Z2Sw$_֭r@]y! 嬏RfJDz"J2мn$  hI {"N2w-3LY•+'R`e0Xi{PNf"h7[c7.<_LQ'1z$hnN 4[xWkdnJ}d?Ln#49f)#pFk G3j8(pUqa٢[@U cQ4ea8Q ZRRcCDqkSdg.x+6MAOF RC٧#׮{G¦ |o~՛媔˒ B@aZԖ2Th/OT#p񨥤X/moC}XZZ1LS–0!C[ޠD^?2.ιI;lVa^}(:pְ`h&=l 6$p\N /0rZ +B;/Jx&Cҽa)6Λ<~ۿƬSŗi:* Zurp4Mbv12:R8«Fÿ.v S/Pɘ,P-1u34NdH(ZNxj .hCnJ H@q}Fg[1; P8z迚B\ tߖ@M0ƤzuROT"oRe܅uotӣ*Pz!ҮrPnL0b4ChX1K:MaHKmLFAnѵU-%ˏ,TiZcT6)U\ v\BI2ReޫrQ V 䭹dųYU;Kr (`!5qx0~:4AN;<Wid{).N`Pʺ6N`rq\bX~9Da5oyY7n6o^o#2{RCv#X-n Wݩ|'@!Y=ҙEtM  .Q@?kSpDŽȮ;tj%y)sw # A$)+7P )Z!A6ybQv!h+>_9"h_}Trl[[RyI"$WTY4j`va}鲳Qf FQ-b;~l7\LjK[^gTwfeEyhq*ASej#J /١d6CYu/:UDgǶ9q:j`|y(Eź/̝ b6T8j:.RNj[ma\]eKjX9Aۡc'AQ~ EuA "A|_= SuprNWe{e ɚcp)bOh0K6q<<2 L"J>cٜOAQ07yM~i._PZSQE}<\<;\[ ) dšBZIMuٚ>cdu|Crؠr nYnE{,n<d$}=daZjh:&751! 6u."Ȃo"'La;qcfJz>/~}lbm< کx17^7{x?+#JZx${?DR^,8TT ߒޠ7Rg6lA5JD"2|yJo,n=;=NBS8eyTt1hm2ءBoY䵚FHPHdbΖT2};+G5K#T{%_g9XR;X_|jrWH~wS;I'?J>m%c! 8vHB3ӹ`шW|-e C,adH\PxŹ[܂r9ks+( 1(W)Tf:@EN jJCDmf=Is#`|lnWV/ܟϺX[7{۽6#n'-(ґ#Ek`_s""ÍfRIz󈻰]품/ ȁC_QeOyUnuT~e6ZPK޸im+*@GG˝l(3bB1jca$tKOfN kJb{k A *a9POz7qSB+AtAg*K,& v,a72ɝ5~pxƾ`4x9Sż$\y=Aٮva<{Y [JML<szk\Vf?>ur 2$J3aهZV`nc'Aq-O}V6&N>]7a,1Guo~,Se WzJ^s#G*.Pk8ZBl'{3H\g»݀_.չA-ShbL`[[!,WV {VfGb !2DT%GLRG0>%(IpHTy1E}>|dp3W]ƱhwZ|`tUUל03z;#|d2 {ćΨ#ɈWŒ[B:Vn2fCDUOF ҇a;W8D,q9{2.SX-T xYWr S?_% dd@ȷ骏6pjG.eYhJn?k3+67=>Pi)L1gdcItfYΧNE-ڪ6N%> zãHP[ҫo7i75|7Z;P?O4ruq-}byC秊sKUPXZ\[`[L&ph V3@Θp䔶GvhVQVۛ,lxʕc?7lGM$,;; Rɟ{1 Et\0t]O P'J%lƩ2-Bk,`]T3А/'T3 tΉ53'fLQˮ l7~!/x |`w5#vyeu7OaC)i+yTxrӘ){MANމRC;n#dg")t(Z]3B,L@|fT&-"=-dR/~ C;~m 9oAA -dpEnW,k[f{lO(Aв8jFaԢ[MmT,\dm]'ŌSxE)0Z>&r`Ay OsEm2X(N t pTIAwrnFMWkBˏôeПڜKP=| t"8Q]%c-{cD^Sl Lnlmί*QH*c㾪T蓼mvEX|Z⽍5% E]y)qRQ3KYIqeЇ\J,b5Q2 nz&=;/eyKuBylވ}{=[T&**@>b Y%mVMD}BBoL8D+YJ|' B!Jڶg_xzvaKL zM[r $L4|TH"nJcbI$= k(h?kSJ(6)oH0>}2Zh0ܢ5|e")29RYPγFԛF)PTl+x9#7aYw74Dx`EE.H:`kHO\@Y=zls_o@9JDj}wx ,)+?cRDf8p&k(H,UUAVZsoF@TY&-Cp{l-榶\ x{L^mϲfat Qv`3 lyʷ lr$v 2j.j|!)nQBxx,7c#N`Dk_L&Ӣ=*>8eOR0.wA0!QSk oIziŇ;.엫4a ź'zB{uFE"3@7n7KO9šw8x|y#1bs,EÀ7iy Xut/?эaY}>s¹a [(־,UHh; \;7BGFsݷ)ݓ-cP&P{fFj(̣ruqJ_|)NeĶpd/rL? -5|7-X [7jl8O|dθ5ee- Ř!]>|Mu0p>jnԤ2gǔS#Hsbˋ9(SATwu~?= I~9*fI+_-w$BIෙfϔC={UJ}u:,(42YS6ct<FG %ѻp˕o!v̹A_W{^~Y -1BOuF9@y7ػL 6@"mt*ga7ӡ*[SC5pˮP^l(xʭ OãFe{l ~ȞK9JK0_󓟜8x PMgM5)wdz/.i@.޾!}zf̙ܺ~)F_܃56=gi_ 4<#2خ_fq\&93Jt3b 9 +,A[\7Ά"ZHgWu#i[* ƪC4%wgt9 қƘ+_3ڀ< Dw\b9/|b_ "q͘g2 2@+K!c1 WyG4g- ~ۅ$,+N5Ѵ,;yLD.W[f;iBNI7J `|0lH7,dCڶD92λB:=8{xe"S 2r2aNǸ7!ZIoc~?={zys*ߕAMRa(W}clع ;w _Hg=1}aA? Ѩinp` 5mt#ç C{%:_O)Kft 6lyrQ%ys%CpRYVJK*!Ɂ,Fok$ EE}>ꂛK/7WL|O?S@S~'` >)iӷNz?k1˭?L6&s5(^F'RGU93[s (ݽVlKGfmWUy2 Ƨ}ت~>a`j^ "vvo~]-Q5OnT!a̯Jk-5#=a60D#yp|vWPH8:4pWg*,dZ8+̠h,  eAcu(cc5[Jr~7 kJ>rz̚7rQ^y_9%/#0`^_yIvdgyC'Yo1|F-7B4jF97uxw-rRx蛛c ==*ZhLV+y| TzְJ$/7p!8p5 =yxD}$o#?yk tgP͛'dA)F)b4tY'I]mwpDWDDie&`Es~k~ca3M#,pћۜ'YI*Q$x14CGֶ,a (r hB/3 S1a6Q_p/QnfI^9C%㯗k?HM~ z(  UAO-ی 0a~j {2Z"pYP'AuIX&F8sAp N}m ">~phNQ"4x-`zR:Y~?q@ 8IcE<q=JM _GO[oAԗ{ {\̂=,U@r uTGQXp)A^{Z+ӬQOtN~]Ns.*X&lՙ”˿=_/MpH4F Dy XiweTO\l+Wfn,BWPp}|`͏^u>H)^ {0#Zj$AH uO6="1my=^OXZ+2I(X\-61RVJ9/'Ry輅#@=2`FZ!K2՞dW^} և%J >PKą3<2YDZ#B8io;~D>~e6M c^kibStt9:ۆ#@BSތ{?aegH. zla1XdG9q@dMH PY_iuG^\| W)]*@;|UT ҨSޠgp/`GH/X~"d}c<=wMnxvcXE1~;'W7}'rk2XurͳEBC:VG31g܄:ps~Dr-O |\oWXJ2@% e^c!T$$aa(ܿ1o[mΒ@da-.MIi0Beu[^- )y:8֠m8Cr19fNp-%pB^b]k?#ia$ͧNˠP/T۩N߉y0Pڂ"OڢJ}HoxjzTf:`X|(VA1Ƅe^Ii?k6U?BZs S$? eľ>}XescX:0b ZupЧZ0zCJ4u"fx`*ӑ#P%|к=ryAe'.HjTzt%Dh]:lAB3rfSi7uQ^a_#2W`b|8AcRyiJWKG#͑h GYw + =4#rTuKO6')5(A~7Sf2׊䁲t)}QݯUՔ ƔKx]_m*ةx J)Aw\{p1:x4d]叟# ;k;{ cTm(WGT?.~}{.|72t)%eD`Rvnbs.+V=z0vnz^ T%}Y ST`h"BAF R/02Ds*g"Xh[S#οx|zc5u;_utO+. M$s)49YK4WuH=50N|L>:e޳ac͕Q5ԟd&E<[{o1 M#PmImV{,9 -B&0;(ڞ].e3*[zy"$oh%'L/ʹḱSlZi%`8Im^bJ-+ u).-6pҨVDaީIgsAe_Z?̹D2g0\X>' _Ftbk?QTԌh}(R?~)+ɫHm}ܲbqzB4ց+ߜ(/ϖ{f~;VjTQUǂcb@yw%"s1n`|FLR;H$Dx?B M!AJD]9{qɐ[m j$HFF"əR 4vx `%6X>,ˢ= Bq[1PC*ƌ@ex̫hΏd/ގf ;&u_ `A?A w)a4csCT\`F4=6z#?\^bmc.*_&ʠpNn_oU/3T7 q)l6c4~mۯ&qJSrHfd芙~V˱FlsHDmHgVA*j3,'XTIZ0WTB* X# :H92h[C=$/63ܓ.+Ѡ*Vd*ъ7Y0uH]`ZmQdU.9Azs8n+R~n3=#kz 1E C<|,`<-/$p;2z$MFNP6A50DC@Y7d:精F^Cĕ\7.Jb󭢩,! r{14 YN`oD ?V1nىT1chRнr4O>ͨ-γfo;c9)W˛"xb^K2[\;U?;S痞k<<|W5΋M詩hhyDHQ/f,0 {Oݴ x%sPbg&tdK9}QւN pn[zfEq+HEK}X9r15uh;"] r \JKNȰV?n)9dǓx>*YYJ`H/rd yMk;{ikc8>0aϯ0ԼS ,~!;`N>{LY gZd+#[Ve3U!4.#Rz+[;'[D:.j.bhxk-Sp B!^so,t+а27 MJ\ nuAeIQŶphuy 1 LVj&`H\3]M !'X 3BC!oh/?3Ts9j Twt u}}N)K"Pi]#\m}ۙ4ω53NBu^1%P閺fszB83UepL8"g-R}rjPv%_cYokk:(d1R}2 <\;@?Q&(]d}Vo4RﭿgKA>~p,E`%{d7+u+̉b#I[κ)$=o?pPd #6unŠiE},(R|ľ= v륐 z7'˅OKLW@2}lF l0QfOC-lk3mV[l: OCœ o3{T~k9!H$+;g;,:cD(9VO'P((4x\RT?L"ofٵamoA es 5F`R3nxDy_xD8@e㿊e&` 开,쁣,:q$s^UFL%0em[Cq#Dv>&: TiYqA!Ϋݬ>fGAq%Q`iP88爣h8WlFh4n[ a E-n+}M) }&( >x6+q&p:wL3ـ-5)Dªw߿rZ@Ň5D5K&H/潻OS WS@Q3]T4 !G}9%dI\lABXE*ő&~&[`%\pSf5**Pޱsh9˫ԙ` r1wF{?/0@aY0u(3=?yOX id=8{f*|qPm ӑ0&@@AVTcYyn&<,J)ic;T%6NMYמGꛕS_+^ ؍a)c(6ek2\OzI$Oc6POڰqNձj Wo%> >%9m(W$ E[m:lIo %쳋 Ɇ$w NS(eoQJ]21:Y ĺ#)_whӽwg,צR#5y0U&`X[. t2@؂>'_\=:OrKgfT$]($9DlyÍ!`Ţ)&^9z[VAѾWpNs*b}ڗuO~_B L ѮPgcYYJN :d4쭖./!fpsߦ tҤdLh|Gy3o6h2n8:3a3#*|/=rhC>Bk =!f՞q{NEgIj66 =}IMCgo=?O Ra< zvZ E%h䫛WR?#,j^3Xu<;pKXm#ݳFE,``-SPLѺKFXÈnt^w8 #/旗ЋTP%P?p{u,y~1 FX}H|N2υeGP7`1Q*8&C!3=K[tDs}OTB$%0v|aFUJSxJYĨH)ZBD8%v $zHm_hԠDQm¹tt41$AH!3c(@aY^pd:YxWAwIS3!8ky263$ TmJy( X`e]Γ;KbX;̌iu';ҳJ0jWF*omI^/rˮ313("ݩVuXCQ=bЯvt)>#bt$/e/[ U#,P ѐ"T\|?1S%hy{Q^ZPH@ nNBRr3ds^|<uX9pe8`G3%A3RX^A=# V]`"WA!S+g)^ܗcN>!XUS5PED0 H;w2vra USFؑZepOA/K ՗xi=g>˪o\Tmm+n| 9zןE-taE/k12y߀dPSD kt^7s4O,@@'W`샮e(L>X?a΀bHܘ-/D"Ιޛ LKKtr% ` ^rL@.Y"> Ut *1/T(Ff vL0[.BWŏpMpߨSN.> ͼ`yi:*1@W3 _TO8xUNV2n>J;]tB=M'&ͭ#mFt%8u@ Vڞ+/N JJKOm7ؓgh4mSPt|2ɕ>12NSM`Eqf@''yƍ(nĢU v!*JP-;|4{l̸1T9L>􅧐0y6'-5Ҏ_0^hV"Y@8ˁ^M=X'ek -;E QR~X+y89aO[6r_&Fi>AXrZNeXkYbF\sR%T=O[Ts M<=4nfKD_C)G߷eYJK܁Q,By-*QQ0Q:yd?4/f Ɏ 0ԟ]O'+-x!|4Bz$²󬼿Ŭ?\ݵ p5Dp;pNאKBl|Ä<{_%}Pfр C3ųuM6RXԿ ngڐ4L:7ޕ4ةJ6$tdjYyk sa'oV#3q]rYDU(iozd~/ t&\xLX,albkna0ǝ߃BA?rs2YTޠ.zn!QtmN~_8(53ERf`9wa0|%hr#aeIIQjLLG^IlěFZLd\/-ܣ+6f4F(@ ֎gL=Z)yإ«ԂIp_屏 a2ORM݀AHo]ՙ'1C!S\\ ,DQ#W[c| 9˅\:#IT@)dƇ3YGZf1/1q0DŽPS{FeޡV;gE& b3] y\Ah-NSTa?T lJZ $4?xjGsbs1u4rOK;)w{yx2[;drSuD в8;_E]aizն^Ʃ-!YX_;4F(H wToɒ#FJcU8]}Ln#t#2G<dٿtLS]o[2ezD}{oBjȄm~QrJyu7^H[@B`j'[͎uđM)F 5PGrꁘe֬|Wh;/]4Qi*7W-龕ʺ9[qF#lrq.0e:"]05U׉pK Qq:ZSn/I %m֧3JjX 8M٣[p1!ָ !z_j39p}d;# T&? Oi-xɛB=݊i4'h\u<%r}RB`mӵqiPcQιyG7Y (m$B3N.NǃR&g|V3q> tۜ+y1@[^ۓjTªɠ?d疯Ҽhb2 o/|6.2Sh&B߶eJGe$ұn @O N[ `s{PUI?/r Ir ؓ^Y)Xɜqԟ TF-YYNO<$wpYF&;wmER 5ܙLEyY)_K6X YX*Sv?F&1pq )]\z3wN_ ӫCwöxEY,FhК 2V'zu!`uNxz6ƻ R0cH M%O>tjۘI+1 ]DLFY8=1]M~.qIR2["+2tq׾!gUSzpihbxl o%aݝt W<Ͻ ǸA&dX$d%Pz-1{ʂRwX)&J })>\"ѳts] -qI $Ҿ|۬WPؖ$ g25/|rl=DCBҏM80_<^~u`9AX\0ۏz jy%(Ɛi|Ө^ffًa?:ohff;$!iuO%\[#&3ŰH .Iff+n즊*kpWK?Ud#Eנdƿ1BhM8 Dkgj(iN>X ME} A8LM7܊73VG}F0ޟוܯ;j6癑l4Н%:KCvG,Q&]^j-ӯ[1FTq)ĺdcTeiJjj{֜qa%|`GZWƀ `|U9"gwd& Fdw*/r8h@[~D:j Nd>f8 ԸX=ej &|+!4S^X>dLr6Iܻk9#/z'ꪮ87'x (fϹ.:_dQ+!s:H"?˩wI]pgDНP!kdFGyo"%o6M)d0޾UR+DGݭ4Aq'W v.AeS"K$1`-͇F\ 'p{j1p%pnſU\V$! :VJ0Ѷۙ"3K-qvToS J;7-[$v!|pϰMUP{<|hyJBmdp"% \,q+=O:.efp_W xqۗ6G 0NQߏJOEtL t|pQ,m"^Ixϋ_ 3&/U daj_qgf$'2jЇAh< NWS@F#0G1lw_ðz|/w&X̊I0ё2~ 9@)Wt4BGi=<7cv#rU a%,\U^W 2eR)?Wf墟aZ{-+s@H Wp2fmBA9}P֛|+C)J #))o$gc~Rw+PU{dFdFz*_&p+{3 Y%j8Ǧ$^ЛE*gP=3r&*ui ^{wRly4l yߨd15cb8,.0nQ,LxS{G/e=(:Z4|_7; DXQ+{v@6/g_QqFs@GTX1%l~xUTZt&-oNO-fٷCU3LZ:L nxQ (W(C`fTd]S[|;1.&w:(g#N{ݖ{g0Iɟb0s̉1kLy0͗' |]}9 -_6LKA>̛pfbK̿sdJG v ˈVKYľH9t}N=fp3vϨ] 2m ]1=of~w4|6p}@bH$veq\U}ZB(o7!9bj_&'GBA)FS7d󘙚 JnGf͐3"dZHQ,7]oK)Y{koE+5U])#i .Y0D=/ĕ2qOUDzǦ<~@D6!Qz3sh T}u$\M  CGHq͂gQzvēVvt-NqTZEЦq(%&PXA@_|Agp3z%o?Z$kjNcRjd"R|-9v9{_mv NCV sᢂx|]ZzLJ!%~!oԞE P LD=;S$H)+րT)XR+Y,D1Iϐo14vO0Ps0VY#^@FhtR^Wu VȎn$и2~T?`h:ascfVą9~~U;9;2"\t{@uC#RTNQy'@]l2:vē}JH2c_B { ;k0\:S(<wvlbLܠ7e~)I  'ڄ  Qח@j30awneXD̄s@^tjK@ݻMͤW塴]E<0%U4ޗ {Ĺ5- JQZ؄r|>ٰ*Gl@5#(Ăܧl:\h,+<>P5DMћ쳍WdKOL cɣ&2(-œVD y'vgPTOTy 5M!UHDKFP+]_d(O"Ij" \HMd.&T=u(AXV#岕|\U`x3BȨ࿿,Jٳ3]ܲOR-T_!ui]طIӫ|:VPnv *zNe5}f fKh%0vHEKM%#ɳoX!vWhsTD% W1O&nUDm֠J䅬[]ܕ#t՚e?fiTG֞=p3ZʃlH ݿvm ^&cf{r8m' W|xbʷf,Nc$vќ3ae4.^иŕ/gPӑ4(`C^d?~!Z9-U]h}΅YYCE}\MOtGXCVveOEl?Wk·\<7v*8'̐.l^2o+ѭԥu"TP!ICٔVBߥB|oʚ!Q( %ڸzǓG^nn}UlS̙FZ ֌2cΉI@tb qoa'~䋌-|1 ".+ %Cо{NHpo,Pw;$Pj*"گ2t\' r6h+Mfj-'ʒcY8HӲ`;cӵĔ{JͨiMiWk}8NL}/HL3ڭu{+wxkp7&TF]!ۏ'TvI󼶒;6neʣˊ\D k1+zGO8l hoU:ݏ"I(kAtseR0`w=')Yk̄G )YEK'/YɈW] O^˥Dŗ-,S_;q+ut\FOgzxnE uQEށDzyzcE!5"grZr^P$+3 YABYKSt4 i0wmdb qo-l{LP$ω_p ; ayMې01I|cشcv&"q03v;̲wJ* О65:fҸّx Nj+Nof&ĐGFG+Tl~LJF'R6wgfoVW@#\bPA/rW Ra]Q-uS^gDRڛAZ_l3햹Zz#=DhI{ު7YD\tQTRnV2zԅ'ߐ ƿ& {кa;*+[w\ņDbSgCׄEHQHI7xgcUj+qu &!8R=ػgj!~YMv̸%@2yA,?-(0J!NQ3bkIk4o2!ˊ_ZT:lxeE ơrgݯ¹8XՉ׉?'#$;';{^-xo f~4.C.$Fgcs9X3X(BYW'fbK\ZXjo7t[~jÿdG?? Gaqkxt(^'UЕ͒t`jc}|>kw=>:wB0J' L`*NXјٖtDg)bD \)sSOߤ< .)Tpx7Ip7(-`D;v"&؎Cb=;x9WX[jCp&Mym."1Xq\lzGt}]RSڹ4;aٲZo$%:B8ځ&o jWg,W=bI187}Łﭩwrf) Ù% @vq\Y-Q ;4{,j-yF,Ԙy}j|\􎯭q{rj1tk8UaǑq00Ĺ-h+Mp[PJ[7o!kZ0Gк=JkiCtk,e Ռ$bٿ#Y+2NM~F?}n%|ؤoG_1UQ/~ژA(M a,`i2V)h2IJݤYi霯$p{2پNQt~[>KN'55´x*A%Q7\)gfG{m)Qު76~e ]Su主|I } 2F@T*m:sYVG4ŷ[cwc,#{h(Қlbxal0T[a)QPw8 K;u×;V?IC eQZst'=?hq4{QW[)x?$-'}P$q}T-*_`2ߎY] ŽmT(hwX(iHf3 Cbz UWq N6owef*4w+LWDґ.ǜ)Bv.M)4lčg>3<5` X \SG˗(}t\LB )3 TBaqk|rZ(~n;Cߌ[(2az;,zl_ۥQ If fn7b;,nܓRN@EB3/um ApNG K#t[ Pp>};O؂9𚀹On@vf 7fN]YpXήcyc>Bʼn@˫ IsqZ51F.#d!陝9D'9s:Dh! W*ېC҂ HHa>i=y&Z"nb8@c% uϚs$ٶJ'HCWp5#Dǒϳ=cBCzYdorE!,%tVTjӵm~űJ$r,:c9> D'cCRHؒ$T|~ p1ǶZzNB=3[0"KA^}8w5 '\9UT/q Xq~!&`0Rq%0tRu3 Vz ;Q21hă/|``Iоx97͐wGHzGyS$bw`3*B323탬0duI7*@Z?L.y@k2硡[CC{ցaT-ObB.7 Νt |l/Ze˨n-uG47f*(5~q ͇p$[*'1(xo9#'ܺl5Oy E@3[:UraNpx+gLT|zj7 bȾe8x!])FpFq"ɁH_cT;S5Wsҽ"z8遊0D^L8k';b|7mB4u.1W3̪9z|F{ӜPhiSq8=@I"#NKig 6Ec2S/EQ)Y) eʁuWjP(׿SGTw+ }F[qM[O砸urܗ ]oE/Bn ;Q6~/=AnM/A 0jT.K`)vբu}Wʂ<$:"0YBR᳢{R E"jr'}%-݌Fp=T~DX|ge`i=Mzūҕ3؍, 1aT ''*9On CÏtW3GĚ5*`ӳ]sN{!j;)?nvX}Lu%~->SH*Ci&J9~Th@#9:)UUlUa&J YqbaΌXbꄩR1DGHhs%۔3j4Aә]et͈aEq1k*`/V x?k֕Ƙ$ivo}MIWFa<^X\8Z RxM_,]rT=#^GvRp֟ThʩË́$>"E37I͖ܯՊ4vb_qY9EsLIډ֦+*}VH^p=Ne߸ }TlJdPх_8sPבθy]BQ\'˂7,iq9: F eW .vӾ p[0 X x'ݤ*(L<נo\ucOBvFXkc9lC/=XDbD!0c<y!% mr[B% X9"曫r=qq.ԀQV%Li}!|祒֞bg$[*}pD~vGI3!.xvm[ l88)H]qԏ7a;)5*⽽`SݨedG2)$'#8-`;]l*|{ڞI5 tF# sKDϤSIl%Di%@0^,:VAtxT\ |X2Se^C̵!G O-8aWʓc7O}LMjCG"Lʧ$.}Y3[ _0WغEB<;ݣf$&k $I0]'W>TWאq n#؜Nb6RK/VUx-Z@s+ѲaXxGn&D!sx+!Hi{|hp0bMT~6Iϵq*&)}(tXЗK[{UfهXwS.U:w?1t1s@J^83ífݚ3]ꔢ/\ ښ8ΛiuTؒK詗7z#'D1;&BuJ"&[^9w :l J}l7:( xD*nbӭ~23yܖ ϝ!k#`/"iNl ^+G0=3 N|$9|AS8.,ȭ Qc-'ٮhc\bTW+~kDv ;gl3a#֬-P@#$Qx = MUuvӟr7d#ŦxȀu{p]\.g3eC9 I6}8y.L6!~e/OSk~WD{68碬}F닜xrnqﰛuD@?~7u#> ='4+ l֗9q>?ٔwՈif#b1Hzƍ(,*L- qԫ"(N$@Nmjlۋ*#{2 9%RȰ)Hc 8K}X5k0aͱ&1A3LbzO l AeǞ#K49Y_SdMHIu[Tj~ml(AD}H4cd-eLGeho%b%℺*.YCRuA~@š.Y &7z̢o_~ c\d$#3_|t>[H92ξ~xn.(U /[N~!>VXj76Hʩҋrܓl%vҶi<1\Ṇ "(E*^}J0Żde(V0ύ*_dYH&] 8PwA[ͻ꓏:{1o &ܸz #ZL(O_lx)}2g~QM|I<Mv=)t`C/Nv#)/)`S]+hg݂>j^6ZfQۇDEZ  !lT&} $k懦\sWV B!A&?N,>Hq!|xoV0S^@`ܳhZ0[0MיCϒ:oB5aexYKvC?Clg :zYce1ȃ$-ۼxfQm,G7v9ĖBSl!~Ȱs4pꂞ|yG_s U7sRI>$|WUؘ){],\plG7շY1 l~-=jD}[oI#TLw(>'/+bKqY CQEh%!;Umv\ߺWBCْ兩"+΄(FX&1,wuD#`IZߥl8/;eMfYD6qjA,h?l@CnYlږ\ϒiɍM&JIRO(o)'{q+*A'I1o¶isԂEH^0Y.Omy,^&$[Ǽjf܈UIN2r$+ ubȊM3%㉖oBb^Οf=)OO1ӕ:ܜG$@[r_pk4oX8u62yz8Khc[dl.~)ـp;0P:Ϋˎ P&ܠɶGdO/KVXӶ+i@ĈeR{yɸGVR4RC+HO*.=z lMժkwɴ庯Ub|}LQ H<)\K KﶀǩY5{<*7~+ys^^D|DPJ!TOJ7i(_b]X keW?s cB} eV50QR~O#FP9K{YJ "m'}vzhXuUgWY5)ʄFˉB9?7"L&ԡ>*HĨZ(>\}`jo=_ I- Ɲ_ZLN]#mĶ:m ڎS }H~[O~֌2T.]G,DO9>V [{La:R]]nw݄KE}"ԟQ JbEzDbWkWh4MV՜DGTS˾>Hl)Ue?wd KhDݐFrR64.֎HOzY ۖq9*e0QoC$bo}xb? zXga,GIHϭr [J|k`>e6Φu!VDMGγҷ{Rx'cޫ\i)4H!GڿDl'ML |f4KMyk<v3}|k+~˝׫1bZDO6bX57VX`f}XOx{t:`aJoya)8˟V#}R %igO@|Luq‚cgj3gqWs/^vzwIX&DQG*4Y)Eh'mQ Mn1v2 hS,Ji"g2lc2 @PJJ$\əVLPI\ws#\Cڵn$q鵆nx~Qch1c>Γ540hlD.5J Eql{Um+L|a4IjB^{o'U)ʠ7)};h MzR90 J{,f:rg C#]ŕ{GCx-8]o74.6j+>0CӽلU]Z2"ua61!tƟ Ukőϸ+ MKo:7{N;?jLv统pO!txe Tl}*Zb6L5'`Jv IҔ+cZ @%t%薵Mph9u+ *IfpQwNR(o(oXK۹}m)~mvF#3PpAqW!uAY/o7L28EC&L,oX_/e vP@os6 n* C9:|05y+4,62 afQAl?XčrwL'cG! Ldr&o>#4XTǿ|[ ܸ ͫ ڪ+uT ,t#>qD`*uHjq0S/@lr#RB @O- dɵ=4}ڄ=1?l]9(S38>j@ct`t&$&|YǢpB5Nj2g׵_&B;㰦EtRfX^qBXңЂhYZаiʸ+Laa\=Nrz{_6Q\0K*$&\+ SFL{@j I̅`:H#§pJ/O;M_{i Wr%X!4eȓ5\hRr9;$lϳ0o)ka] <"Ģv;~:JtnyU|!:(7;FIg 9R _TX|RI'6^}_E,yS0DQm㽾`Xs->Gozhh]eY  cʑ7 Tdu) C*id`,\Gq{|bw&֑( l}p:Q=9atVby&KOLS+d`QnГ*0I'*U'@/|QCGI:o33ʼnS!.\-с䝈#PfՕ`#{j`r!imBN ^] MF 2C*1?{Y(p"4UZiͪ-*H婧Z4E@gůRScZ-NaiҩouKO7a4 BPgu|q{/I܌k,J׏#H |$ue1iκR\9ASi3Laͻ\c ^h w߱jTj].;!~e N%"TDR8ZzX,ykӈ8@ 7ybRD|.N/ci{]"!37H-THO°(:aL9pHa]vQߣt3xtC.|@#Ti)\4\%W;sdū/ |1HIX_HAjA T1J+ /r q5i{Ï?F0g^O6~$*LX,ac. 5lvjx/<1qV7a#Dd#q!Cǽjz-PX"[3gOt/䣖9Zch;-"ɳW.]JPttkDU+| ;|ZqS7 GtRkSDe $ KD}z|KT.- 3Q^J T Ztݯ ![pgI3ժ[ ~Yhhdd](T?pZmW,]V Z R|;/~%DH1j%v}8e,y}%) ewuP,7Yv3+3J\!L{ Y^9< [,'Y fn^DnO#| +n'~,-wgMsid:z"8{;}3?lUNR Vpdc }2ĭ^g qDYM}HlwͰI #G H 9Gf&7oUdY!fi߃!x O=D=;G]`]Ok,l<^AvHˣ U$O{A6H7\`ӦRx,fx6 /~VW-Ͱ:P[irK 0xt{H³v>pTU}byYbGN1}# G!QSEeo%"7J*28uzӮ3jagQېt1o0>|Ǹ/ѥ}cY*HDXẄ́s^HS+i,+Uz2&̋rX؆&X8'Q2ZiF 8Yt+S!̳ >P#${w@#ЦFơzf f{[B3 )_E3w564ځbsL g&~`-JZ;޺^ 4 ; qU{IBK&q8E1:9s0dlBqfmgsG̔  @nV 8֐(η2v>Ԥ$䜬O;1센yI4;3f*SA֥t}u-g&'nn yiн@Q y-ڑTES3d"^;|)[}`ҞXc>Y ćx=}aOQ#7ۧkgU:ު~*U 5z;^ݨ߁^;MҖ9u%95Pu"xp'A\xcb'}^7ڶMԣ 7>hlb`N#ZDlV˵97ť4sYf2I#4䲶vmX9%Llj 29@Lw1dI]iי4a0L%{1l8 6Х-؟֣VJf+k9 ɝZMHUk|cM hFk]qNwѫVm &*,\nb ;kz `l0Do5nkd0`)zKbZMy[夯}+a)Id^{ЮVa8E=)\$ .v0L^BY(z(<~ہSYxwt|-I /'\wKL QBAi ~H[e$ }<1=FrT8)TO;p&5VSOE@q e(ؾO !se~B/nYj'8}XM-lcKFnMtEPGcVc&0\H,'|9?" <`=XB0*tz0<ӗVՁOjPL%C"'&?F3bgJ~ZA%2X@YXI;lsh/>g8eوrJʄkcҸeK$r‘@Հ%8C3%%IT [ <7Cylؽo(R ;ΰ]wU%Gs.`DtL|LC:Q!2Ѩ>+Q{Vճf`k S/̽qnDL T#ms Y G I3fmp IM+.+;[c8IX#_Ζy3B`W"ؚ ^[82sK; R7FmRߺړ!7 e66 Bf-ʞhETb0sb 7ߨQ'FFnHƏa-BLUT aFܒ0[L%Yx{EouxI1Zdu)%5AÝsbKnM3"DwʣnI&wA%ȨK油G7 :Ѓ|Zbφl7R}Gpa:k&@^1@jp=w`2+ܠE1߾ C#-rJ`I$a} d{oᎬmiGYƧ-6uRAe(Oh[݌@OQ$b,4y hB1BΧ}'($eF2 pMqQ3̱\{}YriܤD+x,pK!k"Q ǣ#Q,I /nf_ygbTq$v^ `ixtt/I^1{<8\fc wR |R dOF;UXCql|-")AυLioCHT}wu1~tkFPrvvOO\@􆲐gH\G矊o?W:(P v.Geo-TQ<8,<ho0$>ipBf,wk ,!icDdn@ w-"T{Yv!%X  d͈FEy3v=Su aTAzZwPSW+۸:o,aZ+KȗU(~`<+E'ms}lxMIlukTGxOmt+%k U/tUR5,yyY{U+W$7I\lrew+|hk>`&H; ׄfի/BG?l/Gܻm=ۈeY'N/BqSHP軎PIo@H|a(1>Ŗ" fI=P4"s,Z G{N oъǏeVtˬ^=6_@:^E('N# j6A&;Y>G MĐQ7aΊsO`luxZ:Baz 1r&luj:ug6#;h&UaʕԱM5UěHZh'NDM lT&^puxaҦ'h =a2їJ:v /`ƥٳ7};IB`K2k2Iͯg"B? ZXEh0,rk:w˶ՑixPfO[_xDF ࡲh1$aS.+4/iO6w^HU/\o-3|o1Tg,&$gog7ˬ$@LT/>`Ǝ~_buz/<1-b܋L:d`i$ϚD{Sy^O뀠\*mʻleF.JzEgޕ Tpƛ;ަxD!C|}~#mY˘}[C2`@!鯏WͿ;l0Gn8WV<&hؕ|s0t{nrK UJ+\0$+L#5LT62u AI!A }7sߩ(R4l':n|ʝDMF 7,CZ7/.;&,4qS!+# q'T[22syp?•"9Pzm3Lߗ{dqbq j'Q$ gu!1yQ0` ?8:ea$Hs\1n!T!#O2\vƊ-A+XY Į}:v噄 ɔ Vۦ2&iz *ņ-+Hф Oi1g7|$q_F>ӦrG K{;{&djA.NCkrhhi1-lu9x݅2#uܗI"M~QUQL;7A~:3wc/>7B%m.a$&WFRA9(u''tg8sXz+qljP{%>㌩ty1;+zKY0 a꬗#uTRX$Iҩ+$&h*.k k;(}f$(J%Jƶ7CTWV6Q#NYLƔu$ҋ~"Ԕ!iwzhR'@ [bshqx|iă& {^yø(&2>Kdu[5D |-ײ~܊z63&7o3DA5xh٢"e4NzSUXX2]As`Xw` Sw$c)@>7r3}\`e5,.@N_V'q\Do3To 8 Uױ'V0R& JǗv mHFc: \&z;w2e.l1u@z7K4KJv[Hy{䈄;%PQPeXR|S`>t UHg& D!V;3_2zP/1)z1@5'7a6#WM"n+K*;/\z::M@ Z$T֢ldŃPy!{@,; P% s$ۆLirSPOp<@_^GU ]&|b݄} YZ