freerdp-proxy-2.4.0-150400.3.3.1 >  A bƔ?p9|!@3HUhzLئ8m:K 0)L ma~4[?=l+"a,|2ׂEȪ{$GvIX)G5޴/ntDQœ(1P$/ >.˝w(TnNދ-bLa/MGh)j¤9V\9lrgTt*Уh z.Bdh9نa9+lܴ-8-&fp>_?_d # V5Va w       @Dh   (8,9,:L,F\G\H\I\X\Y\\]]] ^].b]8c]d^ce^hf^kl^mu^v^w_\x_`y_dz_____Cfreerdp-proxy2.4.0150400.3.3.1Remote Desktop Security and Monitorig Proxy ServerThis package contains a proxy that allows to select specific features and channels allowed for all connections passing through. It allows monitoring of the running sessions.bƔ ibs-power9-14SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Otherhttps://www.freerdp.com/linuxppc64lebƔ6db5e82d09144187e0018a169880e8dfe539ab858d5bce2e438e2fe25fcf4af3rootrootfreerdp-2.4.0-150400.3.3.1.src.rpmfreerdp-proxyfreerdp-proxy(ppc-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libfreerdp-client2.so.2()(64bit)libfreerdp-server2.so.2()(64bit)libfreerdp2.so.2()(64bit)librdpgfx-client.so()(64bit)libwinpr2.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3b@a^@a]aEaD@aD@aA@a@a`OL@`<@`7@_@_^@^@^^^I^@^@^T@^^t@]@\@[@[j@Zz@Z@Z`@ZkZWQZY@@YKYKY=0Y;@X~@XW local * #gh:FreeRDP/FreeRDP#6985: Support newer FFMPEG builds * #gh:FreeRDP/FreeRDP#6989: Use OpenSSL default certificate store settings * #gh:FreeRDP/FreeRDP#7073: Planar alignment fixes- Updated to release 2.3.2 Noteworthy changes: * Fixed autoreconnect printer backend loading * Fixed compilation on older mac os versions < 10.14 * Fixed mouse pointer move with smart-sizing * Added command line option to disable websocket gateway support * Fixed drive hotplugging issues with windows * Fixed smartcard issues on mac Fixed issues: * #gh:FreeRDP/FreeRDP#6900: Transparency issues with aFreeRDP * #gh:FreeRDP/FreeRDP#6848: Invalid format string in smartcard trace * #gh:FreeRDP/FreeRDP#6846: Fixed static builds * #gh:FreeRDP/FreeRDP#6888: Crash due to missing bounds checks * #gh:FreeRDP/FreeRDP#6882: Use default sound device on mac- Updated to release 2.3.1 Noteworthy changes: * This is a compatibility bugfix release readding some (deprecated) symbols/defines * Also add some more EXPERIMENTAL warnings to CMake flags as some were not clear enough. * Fixed a memory leak in xfreerdp (mouse pointer updates) * No longer activating some compile time debug options with - DWITH_DEBUG_ALL=ON which might leak sensitive information. * Added -DDEFINE_NO_DEPRECATED for developers to detect use of deprecated symbols- Updated to release 2.3.0 Noteworthy changes: * Websocket support for proxy connections * Progressive codec improvements. Reduces graphical glitches against windows and ogon servers * Fixed +glyph-cache, now working properly without disconnects * Huge file support in clipboard * XWayland support for xfreerdp (keyboard grabbing) * Improved wlfreerdp (wayland client) * Option to allow keyboard scancodes to be remapped manually * Improved mouse wheel behaviour when scrolling * Improved dynamic channel behaviour, more stable event detection * New connection state PubSub notification: Clients can now monitor current connection state Fixes: * gh#FreeRDP/FreeRDP/6626: Fixed parsing of FastGlyph order. gh#FreeRDP/FreeRDP/6624: Added support for xwayland keyboard grab gh#FreeRDP/FreeRDP/6492: Added clipboard CB_HUGE_FILE_SUPPORT_ENABLED flag gh#FreeRDP/FreeRDP/6428: Improve NLA error code logging. gh#FreeRDP/FreeRDP/6416: Http gateway message support gh#FreeRDP/FreeRDP/6753: List of pull requests to backport for stable-next - Added freerdp-rpmlintrc to supress a false positive as gethostbyname() is a windows-function call not a unix one.- Updated to release 2.2.0 (boo#1174321, gh#FreeRDP/FreeRDP#6381) * SECURITY: CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel * Sound & mic - filter GSM codec for microphone redirection (gh#FreeRDP/FreeRDP#6263) * windows client title length (gh#FreeRDP/FreeRDP#6335) * "Alternate Secondary Drawing Order UNKNOWN" (gh#FreeRDP/FreeRDP#6370) * remoteapp with dialog is disconnecting when it loses focus (gh#FreeRDP/FreeRDP#6298) * v2.1.2: Can't connect to Windows7 (gh#FreeRDP/FreeRDP#6299) * fix: memory leak in nsc * urbdrc: some fixes and improvements * build: use cmake to detect getlogin_r, improve asan checks/detection * server/proxy: - new: support for heartbeats - new: support for rail handshake ex flags - fix: possible race condition with redirects * Drop upstream fixed patch: freerdp-CVE-2020-15103.patch - Removed freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298- Updated to release 2.1.2 (boo#1173247) * CVE-2020-4033 Out of bound read in RLEDECOMPRESS * CVE-2020-4031 Use-After-Free in gdi_SelectObject * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` * CVE-2020-4030 OOB read in `TrioParse` * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet * CVE-2020-11098 Out-of-bound read in glyph_cache_put * CVE-2020-11097 OOB read in ntlm_av_pair_get * CVE-2020-11095 Global OOB read in update_recv_primary_order * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order * Gateway RPC fixes for windows * Fixed resource fee race resulting in double free in USB redirection * Fixed wayland client crashes * Fixed X11 client mouse mapping issues (X11 mapping on/off) * Some proxy related improvements (capture module) * Code cleanup (use getlogin_r, ...) - Removed obsolete upstream patch freerdp-bug-6205.patch- Updated to release 2.1.1 (boo#1171441) * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common * Enforce synchronous legacy RDP encryption count (#6156) * Fixed some leaks and crashes missed in 2.1.0 * Removed dynamic channel listener limits * Lots of resource cleanup fixes (clang sanitizers) * A couple of performance improvements * Various small annoyances eliminated (typos, prefilled username for windows client, ...) - Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205 - Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148 - Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207- Updated to release 2.1.0 (boo#1171441) * Fixed CVEs: - CVE-2020-11039 - CVE-2020-11038 - CVE-2020-11043 - CVE-2020-11040 - CVE-2020-11041 - CVE-2020-11019 - CVE-2020-11017 - CVE-2020-11018 * Fixed leak and crashing issues: - gh#FreeRDP/FreeRDP#6129 - gh#FreeRDP/FreeRDP#6128 - gh#FreeRDP/FreeRDP#6127 - gh#FreeRDP/FreeRDP#6110 - gh#FreeRDP/FreeRDP#6081 - gh#FreeRDP/FreeRDP#6077 * Noteworthy features and improvements: - Fixed sound issues (gh#FreeRDP/FreeRDP#6043) - New expert command line options /tune and /tune-list to modify all client settings in a generic way. - Fixes for smartcard cache, this improves compatibility of smartcard devices with newer smartcard channel. - Shadow server can now be instructed to listen to multiple interfaces. - Improved server certificate support (gh#FreeRDP/FreeRDP#6052) - Various fixes for wayland client (fullscreen, mouse wheel, ...) - Fixed large mouse pointer support, now mouse pointers > 96x96 pixel are visible. - USB redirection command line improvements (filter options) - Various translation improvements for android and ios clients - Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch to fix boo#1169679 and make USB working again - Fixed build for SLE_12 - Cleaned up spec file- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order to fix boo#1169748.- Added cairo support for scaling - Cleaned up spec- Removed patch freerdp-Fix-realloc-return-handling.patch - Added pkgconfig(libusb-1.0) for building - Added new package for freerdp-proxy - Cleaned up spec file - Updated to release 2.0.0 * Fixed CVEs: - CVE-2020-11521 - CVE-2020-11522 - CVE-2020-11523 - CVE-2020-11524 - CVE-2020-11525 - CVE-2020-11526 * Fixed security related issues: - gh#FreeRDP/FreeRDP#6005 - gh#FreeRDP/FreeRDP#6006 - gh#FreeRDP/FreeRDP#6007 - gh#FreeRDP/FreeRDP#6008 - gh#FreeRDP/FreeRDP#6009 - gh#FreeRDP/FreeRDP#6010 - gh#FreeRDP/FreeRDP#6011 - gh#FreeRDP/FreeRDP#6012 - gh#FreeRDP/FreeRDP#6013 * sha256 is now used instead of sha1 to fingerprint certificates. This will invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a new connection is established after the update * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372) thanks to @kubistika * Smartcard received some refactoring. Missing functions were added and input validation was improved (gh#FreeRDP/FreeRDP#5884) * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880) The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still available but marked as deprecated * Support for Remote Assistance Protocol Version 2 [MS-RA] * The DirectFB client was removed because it was unmaintained * Unified initialization of OrderSupport * Fix for licensing against Windows Server 2003 * Font smoothing is now enabled per default * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215) * Unified update->BeginPaint and update->EndPaint * An image scaling API for software drawing was added * Rail was updated to the latest spec version 28.0 * Support for H.264 in the shadow server is now detected at runtime * Add mask= option for /gfx and /gfx-h264 (gh#FreeRDP/FreeRDP#5771) * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)- Disable LTO on aarch64 and %arm to fix build- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return handling that results in memory leaks (boo#1153163, boo#1153164, gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)- Add Requires: lib%{name}%{major_version} = %{version}-%{release}: freerdp should depend on the same release of libfreerdp2 (boo#1129193)- upgrade to version 2.0.0-rc4 (FATE#326739) * Fix the following issues: - CVE-2018-8784, boo#1116708 - CVE-2018-8785, boo#1117967 - CVE-2018-8786, boo#1117966 - CVE-2018-8787, boo#1117964 - CVE-2018-8788, boo#1117963 - CVE-2018-8789, boo#1117965 - CVE-2018-1000852, boo#1120507 * Security and stability improvements, including boo#1103557 and boo#1112028 * Refactored ntlm_av_pairs API * gateway: multiple fixes and improvements * client/X11: support for rail (remote app) icons was added * the licensing code was re-worked: Per-device licenses are now saved on the client and used on re-connect: WARNING: this is a change in FreeRDP behavior regarding licensing WARNING: this is a change in FreeRDP behavior regarding licensing. If the old behavior is required, or no licenses should be saved use the new command line option +old-license (gh#/FreeRDP/FreeRDP#4979) * improve order handling - only orders that were enabled during capability exchange are accepted. WARNING and NOTE: some servers do improperly send orders that weren't negotiated, for such cases the new command line option /relax-order-checks was added to disable the strict order checking. If connecting to xrdp the options /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926) * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840) for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon * add new command line option /smartcard-logon to allow smartcard login (currently only with RDP security) * add support to set tls security level (for openssl >= 1.1.0) - default level is set to 1 - the new command line option /tls-seclevel:[LEVEL] allows to set a different level if required * new command line option: /window-position to allow positioning the window on startup * client/X11: set window title before mapping * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg- upgrade to version 2.0.0-rc3 See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1 * Improved and cleaned up the command line interface * Fixed automount issues * Fixed several audio and microphone related issues * Implemented AAC and MP3 codecs * Added Wave2 support * Addedd dynamic resolution with full screen toggle support * Improved redirection handling and certificate issues * Improved automatic reconnects * Improced connection error handling * Fixed invalid pointer, double-free, integer underflow, buffer overflows issues as well as other memory leaks * fixed X11 Right-Ctrl ungrab feature * winpr: Updates time zone data to April 2018 * added libressl compatibility- removed SLE11 condition - removed no_connection_to_windows_10_17101.patch - removed -DBUILTIN_CHANNELS=OFF switch - explicitly set -DCHANNEL_GEOMETRY=ON - Disable the new X264 and OPENH264 codecs because openSUSE does not provide them - upgrade to version 2.0.0-rc2 See: https://github.com/FreeRDP/FreeRDP/milestone/8 Noteworthy features and improvements: * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488 * basic support for the "Video Optimized Remoting Virtual Channel Extension" (MS-RDPEVOR) was added * many smart card related fixes and cleanups #4312 * fix ccache support * add support for memory and thread sanitizer * support for dynamic resloution changes was added in xfreerdp #4313 * support for gateway access token (command line option /gat) was added * initial support for travis-ci.org was added * SSE optimization version of RGB to AVC444 frame split was added * build: -msse2/-msse3 are not enabled globally anymore Fixed github issues (excerpt): * #4227 Convert settings->Password to binary blob * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc * #4276 Big endian fixes * #4291 xfreerdp “Segmentation fault” when connecting to freerdp-shadow-cli * #4293 [X11] shadow server memory corruption with /monitors:2 #4293 * #4296 drive redirection - raise an error if the directory can't be found * #4306 Cannot connect to shadow server with NLA auth: SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918, CVE-2018-0886) * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes) * #4527 pre-connection blob (pcb) support in .rdp files * #4552 Fix Windows 10 cursors drawing as black * smartcard related: #3521, #3431, #3474, #3488, #775, #1424- Fix boo#1090677 activate pulse optional component- Added no_connection_to_windows_10_17101.patch to fix Windows-connection-problem after Windows march 2018 updates. This fix is related to boo#1085416- Do not use xorg-x11-devel, instead buildrequire individual x components. - Only attempt to ge rid of __DATE__ and __TIME__ if SOURCE_DATE_EPOCH is not set.- Users can connect only once wo windows sessions due to [#]gh/FreeRDP/FreeRDP/4348 Therefore WITH_GSSAPI has been disabled until that issue has been solved- Updated to 2.0.0-rc1 Noteworthy features and improvements: * support for FIPS mode was added (option +fipsmode) * initial client side kerberos support (run cmake with WITH_GSSAPI) * support for ssh-agent redirection (as rdp channel) * the man page(s) and /help were updated an improved * add support for ICU for unicode conversion (-DWITH_ICU=ON) * client add option to force password prompt before connection (/from-stdin[:force]) * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146) * add support for "password is pin" * clipboard is now enabled per default (use -clipboard to disable) Fixed github issues (excerpt): * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4 * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width. * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush. * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main. * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface * #gh/FreeRDP/FreeRDP/4117: possible segfault * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program- Remove extraneous Obsoletes for packages that never existed in openSUSE:Factory or X11:RemoteDesktop. - Rename libuwac0-devel to uwac0-devel and libwinpr-devel to winpr-devel, as that seems to be their upstream name which packages are encouraged to stick to. - Remove duplicated pkgconfig requires (these are autodetected).- Fixed download location- Switched to official RC0 - Create wayland client package and libuwac0 package - Create separate libwinpr2 to be used in other packages - enabled gstreamer (currently disabled for tumbleweed) - enabled kerberos authentication - Update to official RC0 Fix the following issues identified by the CISCO TALOS project: * TALOS-2017-0336 CVE-2017-2834 boo#1050714 * TALOS-2017-0337 CVE-2017-2835 boo#1050712 * TALOS-2017-0338 CVE-2017-2836 boo#1050699 * TALOS-2017-0339 CVE-2017-2837 boo#1050704 * TALOS-2017-0340 CVE-2017-2838 boo#1050708 * TALOS-2017-0341 CVE-2017-2839 boo#1050711- Redo history by using changelog url - Update to version 2.0.0~git.1497095982.1dbd2d28d: See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d for full details. - Packaging : + Move to xz tarball in _service + Remove 3472.patch merged upstream - Update to version 2.0.0~git.1496304402.c42ccb508: See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508 for changes.- Forcefully enable PIE in CFLAGS as the automatism did not work.- Add 3472.patch until upstream #3472 isssue is fixed and PR merged this fix boo#1004108- Update to version 2.0.0~git.1477034991.043243f: * fixed kerberos authentication * shadow/rdpsnd: Fix race condition in rdpsnd channel server. The output buffer and format parameters are not protected. * wfreerdp: fix invalid VerifyCertificate callback * rdpsnd/server: decrease audio latency and make it configurable. * Add an environment variables section to the man * protocol violation: rdp_read_extended_info_packet * Added support for OpenH264 1.6 * freerdp: fix sending of TLS alert on NLA failure, add better handling of server-side NLA in shadow server * freerdp: add configurable NTLM SAM file option for server-side NLA * freerdp: make modifications to NLA server-side fixes according to PR comments * Fixed a windows 8.1 issue.- Kill off __DATE__ from built sources.- Update to GNOME 3.20.2 FATE#318572 - Add obs git integration. - Update to version 2.0.0git.1463131968.4e66df7: + Fixed memory leaks. + wfreerdp: fix name build without client interface + libfreerdp-codec: fix xcrush decompression, revert remote control fix + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and Morocco + libfreerdp-codec: make proper xcrush context reset fix- Update to version 2.0.0, git master branch id a7ca42e (FATE#319661), no upstream changelog available. * Warning: This is a git snapshot regarded as technical preview by upstream. * Warning: For xfreerdp, new /long-option commandline interfaces have replaced the old --long-option interfaces. Existing user scripts need to migrate to the new interfaces to avoid breakages. For more details, see: https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface * Add Network Level Ahthentication support. * Add Windows Portable Runtime. For more details, see: http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime * Obsolete libfreerdp-1_0-plugins. - Drop FindALSA.cmake: deprecated - Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch: fixed upstream, implemention now in include/freerdp/scancode.h. - Drop freerdp-CVE-2014-0250.patch (bnc#880317): fixed upstream 532c420. - Drop freerdp-CVE-2014-0791.patch (bnc#857491): fixed upstream f1d6afc. - Drop freerdp-fix-FindPCSC-macro.patch: fixed upstream 9148af3. - Drop freerdp-handle-null-device-name.patch (bnc#785437): deprecated, related implementation dropped. was: freerdp-fix-pulse-no-device-name.patchibs-power9-14 16571811962.4.0-150400.3.3.12.4.0-150400.3.3.1freerdp-proxy/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24946/SUSE_SLE-15-SP4_Update/71c519325454756ac258bebb6114a714-freerdp.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b365e067edb15c6e80bb1303a3cca85227b789a0, for GNU/Linux 3.10.0, strippedRRRRRRRO4]^Outf-8595b499606ac87fb920c47e1f28916c4bc9c20460aecbe3ea6fde245622efb56? 7zXZ !t/ z] crv9wM zldfzFD0 V}PT Q&Hdyͬ١y5Pmj\pZxpgc.S=s ;^8.."+J׆nzzHcNZ `a3L`,]NpeaU(eKj42P +4OJ8˓0U`zH혉9՚ݢC۬)؅lQM߀eS[ÇW-`mP;ޕ/EnӀʊuT4}M|ܾǦ}pvZi5JR D[vB%(rRbN'Zaw)xd5`7.*!d7!~g tDV$Θl`3A=Y"s>4bU7 +.ݚ0~zF/\U )V! z(Rc;F4 7PI=ZƇL`iڞaoԢ:*&jȐ":jS֊Pz=j5EO 4BE[VߠFȨw=_(W㛵GVE28L@n|NPsc{w'5.PcYjbGܓe6PbiepR+fXk._ۛ肷-i< k7-J48q,lշY7~C.MOn e,\o8?dKpT̈́im4I T 5lo 7I}5o&]K v#5^ A~qUPxof?5 Qk%Z >wYN$͔]*)9wJ7^O44qɗkj8We  g  e:ɦ޲E_J!Uy[4*I ^Di Rkt"/kcRw1H`Dv*7{34޽Nv6p*s $mo̭\PPhj} e_C6.yVljn,ewiCaY(x,QOXEcFosU6ػsXe+IE^ (k"b_Cа (VaI B}-3NM]`C%,ҙph5ݯ?X1CP8Uqy[>ډz>e?+?(`k]j_3oOg]l~ĊmzY%PZLP+&Pd1*yC:om.Rdnro)6Si趢Mx*ⷀ>&H8(Gi°5`e3IQ#'ع@W_V6rFᵲ`M_ |9|; 0kĎir! WE<'zD6l3>ٔZir >1'v`鿄1{mLU}͘3JI: _9[\$]Ú0bdGKwzՆd[.qziK AS EYvEwV؅C,_N͓;9 B @ǽ- EҔFѰ \?]R(WSʳ~>ͭ%u'#W;9::1xdX녠/䐋t~ 0ךOd%=>)nUP랚b4Ж0 Y@- ez2[*h{7w<+2.- _\%ԟ/hA2fOUJc~q4`z@` 뀣eeH3F _Gs:81)'Z֛`L:^9T0! KH)LJ ztYÁ2hT'mc^#ׅXwBS7Ȏm,K~7&o4>!aOc$KC]jE+J>CoYIsiM@lE2J2NQPl[&8ކ wEYX }θq' ֊U!k2R,2D;Xsp X^BZHNFigkihJX(eSFǻe%fbHW̓YԏGD\?\V^MQΠ ŘUeهɆ/;ĘQk]Wc+҆4Zkr*!> U+ krjd<$EUjp*@H\F]㢴*2^b~g5S۔Ǹbf)NytkVKl9G)هswM@+ xR}_֎=BkDS# *Sl,*mCSPupʠY͆ >B 7WbT聖B6v2v{XN0>k̋)6 'd^_Ӎ8@̹fHzx+&%܇%/d6=Fp5N>C` +2Դ4vb1#sU ?PN7+z{iK*7ijak4;jDw >G[sMw2Gx'Hys8JtD i&)@MrMP̶dO _Iڕe} G.&_/uu= z;'.c#hJcOUķǬLdNh* `;3h;_]P9/~ De\錚g8,iG-FRpgqj@~zLgDj2o4j8Nm?s}nvA4o4ϦTuJɋDC3ZUBQ.m\`YZF )UC' ntd!aFa90p'6y$Ƙ`&Sfл %::Rۛ=˚*+vJ~RvqFV}3ǒf_->ZLxXFfF|Z4S[g.IIhVn/p+O?ϵ@'OQj(wt)$F8(8x 4e\pd=.7ޭX {$y7mXWblVjߑ*KX`hYQmdh1M01;Mn ˒K% zvO F.R8.˽Y69[:,Ε@&W$ ɱrLvO)aT7F< Zc׌[+ GeꯨcXZI4"a]qZ'z`MGxDǸkܬ ٫$pd(5E]{i}Bo^`kO@ ݹD^ud >d ڙp]ut!¤UE#Q1d&/ ~r-* al^smr|w onfBC L'TE2 89D9ez :tÎa \C:~ eI~7iB2c3_b0A\>itB{s@}_ iG뷿74 XYhy8'&q+Db"rϫ$V'f 4@aY0L1#"&mOȚUAV&9 0$O=&}OA %U >yJ2U'kkXLjRů 6Wl8]h:=d:sV<)"؉|vFeĪbdw0S8䬮Z gzCP^F'$<_3lci?sڧ\Z! P26ƫ'ю65RRJ7}E(8uBVݿ_ g4-Vp} Smr(\gLA=aAü1e'ag#.MtڢkF{?qIS ʠVK3?5I(S8\б;hbpśm3*Fb68\j,j~-P]S 5Sk}e~Ss .MohJC@ḅIv"LqS[+2jAV)Fgp v0q!̻'ל/ux{>!K3$qf6v/+%NH4yE6 i[0Aተ3KNunC/o12GL>RzXk@%8UxZpA:WFl%5㾌aWzS6;p%ɢm= /tWR0BSǀޢέOh/k;FL2^.݇}|I'Kz2d:uzLFq*R, No"ț g5 3[*62$|k-n2 3рqJ0fxV9" JXE |QKD|^^d3e,T+CIJ0d~ h9F 8@^yI )"#CWvWtԌ̢xHٱr,,_4WͨNbLv>G6.,_s _Y.R{>λo%*?eĐ 8j5Ocf;+>[̗Ɗ |`ܧ_3Znuh&7ofu+MVn%5.dMAUr4l5-#!/>۹6xjY|R\ϋ(Nܼo4x6?B=Ŧc޲%{Y;8Ұ,ܔykĬ?K rGV4 Z/By-/$14)0N۹he&lUC c;:Y?ڜ "4tt_q<^]\v'^3^ KNb^lNY#KߦYD$Bأs24y}Es s7 :@MuOa; Y+BTD&k'l :iDpϩ ~R|N&b|]cZ3Iԛ~0\gEP%PR~B2}3?wR@:HF p _ݝu`߅|Zd҇IID`5Rk|l>xP:Ur ?InX^Q2' w׹/qu-i՗,P?nGbv=Nmzu{pַE{c9_IŴ¤qTj@DHEAn sFLR<="V(sGXB{)a>I2_B\ ER'0_Pv'}1Qq1Yc4^%nG &"kjڀ/6l\o)Q,>@iIJ8l󟨇lG5 a';B2E$Wt 0SS|7轚:rScZuczVH1P Mbx ggu)M0E^ j]oQIR7fsw;$%YeyYx>zqV(-xcc3ebc_Q(O(K͒Y;Kx] }&,C`*ë&tQr&˟)ƥۺWaH5jZe#ez(+Ԕ(h.@J}9\h30pExE?bˈ.*2bLa|;΢dFWFaK{yrUB3|W USȹl\\r݀Gogx,]$і"`I ieZoı] "DQDe|ܣhmtŀJoNKT0W g?%V-*=%,}D" Cd#+Y|=?埽G ?úߴ (8_QYQOIv*Ig2)ՉiP83 >UB5tؾB 5)|)_:uR؜$(sů(5n @Qh>ab -$ `(vDzҳl#,\0jA޻tMYg:] %uۮot$(\ZB,'`W {#AmRj9KtiH=#Cf(= %+ipJ`4n!S9ew T5YJ09YqnH9O<2 &!~b.[I/Yk-,45`o1%{Θ~ў+["j,"|X7՗J5JjnqnČBA-Bw*=҉ IZ7ɯijƿpX5@Mń~A ޵NC7몊s G䳘RԎ7qJ}6x8p|tUDFlL^ƇⴸJ,*(A4Af/č~#aC}3:׹ɇzu dM+fx_3;eX2haoܲAwD0S,wN&c2bBl[Bn 6r|&ޭMT2wb Ҷo\ 6Z{ݢѩG Y^:qaۯKvdF[!vm;v:r|뚭Dί^h=%ph "exTcS\1s1>#t*]NN%lNx: 7Eʶ |9{sNȣ$(-2ڽ$+?$cZ!86$,%&"xX,%<²5@w}-Cqy]tgM5*| ] 416-G;9WnoB: T-VC)ɹB7z9YH3[f1S):.mS%3RA0XjVR&|o̜CEb$?Mv-t} SB{KCO)=gDJ#SG jt}Xy-UMFwp)/3 ~WGHUʛ=[$LspN A?0 b<4@*Z͝qKΐ~ZqlTg  Ef6`C6zeT9o՟9r]/ 9 & \LA2FCn70Đb5{עGjB.etMs5Y hc-q:(Y|UA-Gv>]yXŖS+LZx[aMo Pl\!0HX`Q|_R?GDpi ?ȯ :{g4<931?[8' -z-ԜL 4,@ȠG@~^ÐfBl;py@CD̄l96'fYLjbX( 6:iuXs<;BN"35b*t<5hɨN`v/+5ʡ<Ed g,߶WERldCmG ؗ*l<8β k(`,g퍢U{bBi$_+XH‚a-xyίppf-d#667Qub/ɒ0DZ.]bH 72Ӱ|ٮʞ- NZ?@sCb*.3$()W%>RwZ~v`Mnr r~ Ts܊w@fiI@53 I*=",. eA7,D8}MIPrܼh5yn9t/x>Nk/ޝ?'Dt7sqRpۭfc$!_ Uk?ϴV9SE*vs^BwfmmMdJT[n#a-0-ja.Aɢc+RTB$;'(Vm+EgbDh-?cKnp]N^%nY L4ц9)$[ԠҸ^YiCqhV: mfsG\ A7p&;n6 x2ݩHȺ799U=GQY4_U&${@D٬1W#č%ll |xшjѽtbjj//Av,r%2,w X|4,flzU 4 #VIAaq|u%Sf;J9L8fvtCixY naDw<(+7Ժ!._\} W͚~sÚ[ãh!H\5E25hznɗRD`8rs*?"5G0al Kca$RB5K^Qq4YO (J[{Ľ @ĵ]z~'2#V$QM\PP讏4 ֈ%f`"1B6: 8AkT!1ja)a:G tz- ad>GaɣSHԟQԊΣκd[]%,˧Vnz>Y=PX!{CaxUW$E w#al@c׳E|&3ʻw۫.M]F[h_[&N!uU +{8}b$u=ޏMyCpʫq2͈܍m\{pW65@l2UKcԩC9+~1"dٜFABzo;H\Of0t~N/P3÷1&: :2#֭CP+;3&P"[Bw% &B箉h-k%VS/0,/dq^–-3;aVvx%€(3[l0,XSZңC{Ր1p6jJpS@ٛ.6v#؏?C֞H1ÍPg8$ͫ-m3WYŹ0!x>n&mXlE9؟6(r{G0+Ϊ$p<̔ӷջaN=Ү6Ў[72FӤōxPI[$czA 2rD^Ȱ\Oٿ|a?zFD&^:2%۹tʾ &B Ŏ@} {d^v3l흛  Ea6a>p-?wD5^ûk' &+e+kh_.2CjSR\bDd[q;czO~‘Ctdj/ H:@7\s[|7-yOPE2LBEt6dNR(T9?ZebE: q;SDdg`~~ +X!D#+z> G*#(㴬wk76)>^"Icb˦w BS2&P(T-Y-_60â"wr'fb^ZlI=Uʹ@uEc;FK4|/9g4vi~o/z&?pR,qqƩ P3+Ra x~d}9NZƽ'Qѩe&'̏Æ4U{'ԕ(L'1 )1F|`漂|5=79 $t,?$J(2סieyZ˯a&Z/ opR7n8}AClKgdxI/<ƷIytP2KYr_9wDK2꼵&c+n!0\- 2hHr%tڗ:憦'[ *ofMW;%59 @P(OpdVÐϭk,3n/]Mv Y7j[cmBjD+Ĉb6vSRui+F%GlRi;J*KLB]9T56Үu&z4Tf-a(,e-|xJ;ƙ!;֫ G"+^w7$.;gv}V0?lIE-?`ynnA@NR,XX<%e~~= sTјQ"5݊"l ]o6Bˏ K:kҨ7wY2W龨ס&P L3jȍ4b~n+‡nJAes~HJś-`42n}^V>. 0gƵ> DY*8ѻ{&4 E5\P^GM%T\ <9>jCm#* <9TܼTST`H ؿeU:ٮ SPmP` RʈOn>m'xso8,oI:XunP^Q0Kh]+nI oL&^IOCC :iR3N/;@B_jl95(ãxZ- ^l}WF[ l tUT?I sWdJU_W/0qTEh^O[(UPL~${؟3'5 /_C$v+.)6u?[ӥ_Ry muN! ϷWS@%wMɣO/5 ڲJ8M=p.vfd:حoƜqK8T6 X+-cV'z%y@j+eK@BR6p:m9ǦC Xє4\W[WNS>۳e $6وwᡡbTG"w /m<ӦPdm(aĈm;As=~"ԍuJ~R&GݲU3MXә͕(G/SoReaD.j"ڦǗTOcd`fG[ȋxsp Xh&ݭ.8ҽdm` OƅsDqM_Z-A2CWl8wGGTmXAvhuE'kA [9@HDOz<+:hW9j7=I,~{A8ˈMQtߜ9{7 ?Z6#H2CqUq}",z5ϗR&[E!VIӤ/lˠuzTnj֧/>$s`b֤[ Wi]si9P"n2o je+O;f `p=10Fl YPȀefHw\M%AIţ`xo夭a`(48rzUtl_"r( DF22´E8j̦ whJE;zlP/vD]Z0A-W7 SpU7taW>r ?ٴY2 ( sJln BFD}X)G-R_[WwBr ,rD0TcWFh!)\X`8L jׁgk4_ʒ=nۧykG"; 6D<, A-̿*ݯ~Bs_'- i؈0B#NBQ\SjA%e\9J0>m~%#Z;~p€d{|7 3!ͥoS'={/ M^ٚT9a ')ERgS v=F\rbd %{O}'n,$*܁<ҢQ$Ȟbu|^E/D^a^nĘ6-O&.lHv7־ XF+_7<3_D9nH+8q@v T9.Ū?v<̴l9Rq77,4/ejz"PN9!,HYIlgf <->1$F=ώr|n8`@Dt.<iL9͋: | g ,?X/C2H꾣y(牢1 ) P-I)o;X#ҖZz"(F]K>EWw 4!6eS:dp9D1ޏ[`;H5|CEZT] e}5483 3*$8DbR#~Ϟ7`~MIJvEf0'&]Kɺ6ϐ4~ !q85z %vtV';>qOT-IQU]ZA@hU]o8PݱvdR gu zt&'^=:Cs Jp@ܭ{ =) 븫"&cx -".'{$h6;9r2ܢ\(BE%;4Ѕ7R!X bvs.O=Hkmdk\;9G9_8 ]'Z&5 3hN՟D_T%bZԢo Q C7y*1" [+31(jr"T> ɝCggb$խm7^YxRݐ$UU2S̈ "aqYZn>iF{k^B^YSc8fVg5-zsaD(w*+4ְcɯCW&6鿪xaMQA"-I.wP6}5l22gI9NwÛsʧ -u.;,Ÿ_&Ap^ N΃0 !A?)ظF`^^P|Twu2wy'QtuS>RQ6?VAVgL궶j_󗛞/9TD^ϼcGưםx&rO !ӸwPMȑvWuNZ^=i fS {qEwyrh:[(խy1KzĈ&]YoA <::h?uտ^>JOe+ r @QZae`䳌K?'lz%3V1m,БQK']Mut; g0IғTb;թh]gr-􊨵t0`G]HеR#+sg^IT>t#\vp xWNK:tW뚒T+ƼFD5` Hoy޸J C[֟̐E tE=?; eߣ{24U@h-Z&>w ğ?x\Z<#zAY]hAc<Aed;N$WYgO^]i35'2xQ/c0S;|4Yp\5w6$) QV*S}j<ßVx_K33wE~wIb&mp)Ŗ;U)îa7},PG@Lo %Y*ސ-%C$zSsaQG!nf;۴,dƣ3w71 Ttei,|O\P8]k FwWE^i1/KZ)@L`TtƲ yrS>eg`QY՘co{sQ*LF+|JOHg/ȭ`]TgXZZo,/ll. M#0 .#c\ !oPc}홄H+Ǡs|14ȅ!r )l`Q@4Xm3o@tEPhgIh[U/utT&țV~Ģc qxH!+Kℙ3BvS^rxB1nvX`5JI>Jğѓ iώ"92]Έ,6ͺS<B-v \M6zDDw\؁m$qL}4 JTžvo  @]#Ū;Z }اEO /YnkF'!v|QhgӴϽhqyT&Q4RwgTpz B՝\VK40 ftzowUƁ@}ǔh-ܐ 6zdnY "k}JXispgy!~9w TX{[ٹ#@V[􁑫|A0&mWztpD噱'OL{YwIyJ詎N[q]ZCa@:uQ?$vwG>Pe8*\B~Tu,K6rGG)ZfyԖ!e9%6Te3(fV[)ֹ.20}$9.tS'i=e&R8 B?(USW_2#yry]䀯]lj!]I=E MXtp]FGr(Gȣ: /A͓6XDžs+SN7 HTpD``1?&;tYQC-j< )4ňUo8f:-|:W.}:ĘZRKNn&J!2D`E9dqE4wᵨ}kxp5oj{/^WN:lH{][FY^˵U:eiBd]1-'EZ-aV)tc&\Kw9~+Y;_L> &-,C2 3  P6$Lʤ`އ^,m`*TXɒ0[Ыm{d"T:4},094?!RXkDAZ}plwNNp? #[#Q6KqvDSB~YXv< [iAIИV+100OYfQxETzJN{h럓jڽ\8l~r4EO젰&C5[n,(k /]WmAx|P$Q˞ɣ;$ P/?оMQ 0CH@ ;R@c,Pġ@%,OJ2.G1E. X#;R BkPOq E8l.BD%$O֞4vDkr7\沚;*jI_ BMɕj8IA[p35#&`hqRt|GɗqGH><@T ^hEZ-ع |[CW%R%َvb7sv5%u T}.˪t}kKA k$v$[mVhef!e-$y`/تoZ-)qpk+Yl|a+ҡV9PR(,k z)H7euӏ<=|Rj$e.Q`%dǴM/`y߳(Pgt~hTLkFn= IrEpm 5N K®fX9?P+-pRW;ua|i Sa} KYL@"İgL5J(K a@R֛3LlOOL 5'`uHvZPͷ\`)$`~:"T6$jT 1рEUD||Z6"K|}9|W̏bHHvBkPf\uǛp3cUT6ՖtvH׻ țUqv E,;'H-< VĵM1M5ø>Hili+yrnV zFCo8v/]A&tbs?cPɷAӕWZyRt+£pJ+KL#a'0so98fD:bh eb5+,g$ELG5,0JRkg0(`O;=Xtۆ4B,oRȈT'V/i[[ mh)f&I{6+4#Oq1Q}RA|#:I6e2JW6 .%v ?7&zRz풨olbR|27:FkwnP,#sqY9} O@s HoXʅR֧a 3!*Q 噭\J6%$$*\+RVW;fi_?:kR(oE\: =Nr!v_WX9,X}Qq5_Q#NP~We 7nPMstp?޺ol`'шQ ^7| Ͳxx4beBIN+t춛x8$?TRϒF2 PG~^//5~$ :׸}dME^2Qc?YAyR&Y[];)!_@E-ZR o g5doxd/iG*EOlM郛O a[9j L=o/QPXc8mm־yZCw ,dS";v=N@38b^M3٪ӝa-+|Q08uJhy`,F'la\PIw`eđ{ô>2B@9N[UۉYdg{# )9V4^-St@σ,pL^`Sd RC?v)ZLBdll?2kpA{NK1˘JQHxn[x%:ۡ}F9&sNY2/z Xa'/~%: (lJ TD\Yγ fcog)KqX5;hQCkY{z7|~*  {*)V80\KXE2Ø "Lٲ3l sx'ߜ3fKeS|WD 75Ruv`f 4 uDy,N>)&vV[ļlf-Z?Or_DWg_uuSa~b)'⼡ FWOZdI;Dۈ85ԵL`)kB-ߣ2ħܘ6dd6s HRmoyVjMBG lyt*ĆLo{hD#6oSj-F㵚,S5?iSm93 cKƘ4]1555WDj >kJ"<04Iy)-X5ܛ3ö1;[j#[/d1lRZYؑᥘyLƐh}p,UIB8&iQKWS((ȧpt\9DÎoRRVBCO Qvj^*ǽP9;N4ϵMm# i\Kΐ&/Jn$',,Swmm ȶ}01o֔$J- * IiY`{2#|zg,: Ză]FOjo_p!1KI|:R %呾VsaybR*k(Ψɫ^Ϧ19HQ-(FVVx][NEM; 7d([L=\VMLk6 ;dP:X::;$+SMD%#M;AN,M&@Y~3`rP!Kdo;.݄^vM|t8mNO>)Cxčn~yA?~h;1S0[Z'P^lUz7/adc.GêZ%8Hqj밬 ,Qy z0v@5XuKR)j4HisNwJnk|hHTYe_Bs!563[gljd]sQ 3Gh-]xDԉ}]3]cܝ<Sv{SUg]IGLK ZY:8Ń+qk,a"#?"bg]~cP)DOXeWGiM+E3K {lC'FvK ]BGv6\XS8.slM7kd2Z0]*;M~vx_߅_X>polє<,ُ!M0BUv>#r[ۤؑI%=O3Քt=3@kU\TW%ʠet]}5yjp貅+!b]tOLeW+ _j6*?5MZF~X>zDզŠ]u7arDSi ֕&*@`#DB:ָVWMIfPIP MJ\/~;j8 %:(kGX[Bをǡ /32)|s#6շsb(kGXfE[6Ci=a;:3yMd`2F?eo!ײQ/ sۙjNeduNXm6/s`ˆם%yLu," ZS02+ ZP h Qmĸ$rr~~z#Kņ < R㐏  5RTGV1me:ƚ$1'-hSFYa5Y-~A/͔ηFsK+8 4XKq37{8Q@|]Bl7]!(D NĦ_9k;^*fJ-ƙtM@\;QK< 1oHr[ 챢u'Ĩh̐&=pǜzD)Q;zm pzߕ0 dvkS3z=@*jJ = |cT~ x1y:hk1ChN}Mī3ٙ4\]΁wUt @ Jh߉sQuU\d %x-EȻO'QS{?{Ta_+L=`pz}8\׵$zX>v85$ߙJ(?1%C *aߙN Qo"Mqztpe SѼ\j`Dβv]tCm.}st$;9 0SڊM5ġKR FaYn3Eu1B_.ɠzp(0–76L