libcap2-2.63-150400.3.3.1 >  A dOp9|;"%R#s+\*5A^DGې(-T "Zt?K7jtk'cxu_~^O_h!!E&>R0²xlub%lKS🺘 Wԅ[U*M5MZ ^\nfXo+M2c :>V^,cr|KxdiA#78(fVֳlCi4?.0Ugz-*o^Ce4a5d040fadab1bbf14b92faf19080cea38097800b941e905b385c1d36099cf03c89a65d6940070aac8a83dde826ca4f3228e91cdOp9|UOnOb΀gԳbH<‰g`kqmϗtRZi~+,`et,G!ͧ>ss"3꼺Tp@0?0d   K; Qb    P dt (89`:J>-@- F-/G-HH-XI-hX-lY-x\-]-^-b.c.d/Ce/Hf/Kl/Mu/`v/pw0Hx0Xy0hz0t0000Clibcap22.63150400.3.3.1Library for Capabilities (linux-privs) SupportCapabilities are a measure to limit the omnipotence of the superuser. Currently a program started by root or setuid root has the power to do anything. Capabilities (Linux-Privs) provide a more fine-grained access control. Without kernel patches, you can use this library to drop capabilities within setuid binaries. If you use patches, this can be done automatically by the kernel.d$ibs-power9-12YSUSE Linux Enterprise 15SUSE LLC BSD-3-Clause OR GPL-2.0-onlyhttps://www.suse.com/System/Librarieshttps://sites.google.com/site/fullycapable/linuxppc64le O!A큤dd d#`*40c135e8ab23e4b5392b10670c581eeb0be81b31387251fa3104113d66b6cd37f58c80bcce8c929db39a23c32e924876e3311f3ffa54f66076c38056d38fa59blibcap.so.2.63rootrootrootrootrootrootrootrootlibcap-2.63-150400.3.3.1.src.rpmlibcap.so.2()(64bit)libcap2libcap2(ppc-64)@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3dcp@ba@a͟@a4aS`@`r`y|@`X`"y@`U_@__O@_+^G@^0"@^[^]qZX|@Xh@W#Tabergmann@suse.commeissner@suse.comdmueller@suse.comdmueller@suse.comandreas.stieger@gmx.deinfo@paolostivanin.comdmueller@suse.comchristophe@krop.frtiwai@suse.dedmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.cominfo@paolostivanin.comtiwai@suse.detiwai@suse.dempluskal@suse.commpluskal@suse.commatthias.gerstner@suse.comfvogt@suse.commatwey.kornilov@gmail.comjengelh@inai.dedimstar@opensuse.orgp.drouand@gmail.com- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch - Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch- Use "or" in the license tag to avoid confusion (bsc#1180073)- update to 2.63: * restore errno to zero by the time main() is executed * Consistent psx handling (a panic) for syscalls that return thread dependent status Inconsistend behavior noticed by Lorenz Bauer * Add a test case for a deadlock under investigation in golang * Trim some of the #include file use to make the tree compile more efficiently- update to 2.62: * Bug fix for Go package "cap" and launching * Build cleanups * Documentation updates: cap_max_bits has a man page entry * Recognize default securebits as a libcap mode: HYBRID- libcap 2.61: * Better error handling of the numerical arguments for capsh and setcap * Fix executable mode for all of the .so files. There were two situations where this was failing (with a hard to debug SIGSEGV inside libc) * Added an example of a shared library object with its own file capability * Fix the top-level include for Make.Rules in the contrib/sucap example application * Add support for running constructors at libcap.so start up time when running as stand alone binary. - includes changes from 2.60: * Some build, code linting fixes, the addition of the cap_fill_flag() API and a memory latency optimization * General improvement in thread safety for libcap and cap package * Minor API change replacing libcap:cap_launch_*() void returning functions with int + errno status returns. * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API * New features for capsh: --quiet, -+ and =+ arguments - add upstream signing key and verify source signature- update to 2.59: * Fixed a potential libcap memory leak by adding a destructor * Major improvement is that there is a path for Linux-PAM compliant applications to support setting Ambient vector Capabilities via pam_cap.so now * Added libcap cap_proc_root() API function * Added color support to captree * Fixed contrib/sucap/su to correctly handle the Inheritable flag * capsh enhancements * getcap -r / now generates readable output * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now runnable as standalone binaries * The module pam_cap.so now contains support for a default= module argument * Enhanced capsh --suggest to also compare against the capability value names and not just their descriptions * Added capsh --current support * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su * Fix for a corner case infinite loop handling long strings * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs * Added a Go utility, captree, to display the process (and thread) graph along with the POSIX.1e and IAB capabilities of each PID{TID} tree.- update to 2.51: * Fix capsh installation * Add an autoauth module flag to pam_cap.so * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one capability flag to another. * --explain=cap_foo: describe what cap_foo does * --suggest=phrase: search all the cap descriptions and describe those that match the phrase * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945) * extend libcap to include cap_prctl() and cap_prctlw() functions to regain feature parity with Go "cap" package. These are only needed when linking against -lpsx for keepcaps POSIX semantics. * this likely requires substantial application changes to make Ambient capability support usable in general, but doing our part for the admin. * Add a test case for recent kernel fix * Go pragma fix for convenience functions in "cap" module- Fix a broken symlink. libcap-devel installs libpsx.so but didn't install the library it's pointing to.- Add explicit dependency on libcap2 with version to libcap-progs (bsc#1184690)- update to 2.49: * Implement cap_func_launcher() and cap.FuncLauncher(). * More robust "psx" redirection for nocgo compilation - the documentation for the cgo implementation is now included in the nocgo one because the go.dev automated documentation builds the docs from the nocgo version. * Lots of documentation cleanups and added a few man pages: for IAB and Launching. * Some general no-op License changes that might cause folk to notice but only for formatting reasons. These were initially inspired by some lawyerly interactions, but I ended up rolling back half of them because they confused automated software infrastructure.- update to 2.48: * More uniform use of $(MAKE) in Makefiles * No longer include symlinks in the git tree * Provide support for make GOLANG=no ... * Provide support for pointing at a specific build of the go binary * camelCase the contrib/seccomp/explore.go program * A number of documentation fixes to man pages and source code comments * Last use of GO major version 0- update to 2.47: * Restructured gowns to default to uid base of getuid(). * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit. * Improve the usage and diagnostic message for setcap * Documentation fixes, license declarations, example updates- update to 2.46: * The bulk of this release concerns fixes and improvements to libpsx * Fix the capsh == argument handling and add a test case * Added build support for systems that do not support libpthread * Added build support for not building shared libraries- update to 2.44: Generally, this is a release to help package builders: no functional change to any of the generated code just documentation and make related fixes.- update to 2.43 * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it. * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets * Clean up a binary from the distribution * Added some more release time checks for non-git tracked files. * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.- Update to version 2.42: * Closed a potential issue with "libcap/psx" Go package and errno * Documentation updates * Minor optimization for cap_to_text() and (*cap.Set).String() * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap * Multiple fixes * Support Go module abstraction * A new kernel capability: CAP_BPF * Better support for cross-compilation * pam_cap now honors PAM_REINITIALIZE_CRED * implements cap_launch functionality- Update to version 2.32: * Bug fix for fakeroot incompatibility (boo#1162014) * Slight perf improvement for cap_get_bound(). * C++ support for psx header inclusion. * Some new testing features for capsh- Update to version 2.31: * primarily a documentation update * fix libpam.pc to not require libpsx.pc * changed the text format of the default output of getpcap- Build using -ffat-lto-objects for static library- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460): * BUGFIX: arm and i386 fixes C and Go setgroups choice - used wrong syscall in 2.29. * cleaned up make clean and make install to actually work as intended * updated Gentoo libpsx.pc file from Lars Wendler * refactored the way libpsx linkage with libcap performed mutual discovery. * Previously (2.28) libpsx had an API call overridden by libcap using weak linkage function in libpsx. In 2.30 this is reversed, namely libpsx provides the stronger function and libcap has a weak "no-op" version. * a bit more consistency in handling the 'all' sets in libcap (C) and libcap/cap (Go). Namely, they both dynamically discover the number of capabilities named by the kernel and use this as the definition of 'all' for the current runtime. + libcap (C) exports cap_max_bit() to export the number of supported capabilities + libcap/cap (Go) exports cap.MaxBits() for this same value. - For changes for older releases see: * https://sites.google.com/site/fullycapable/release-notes-for-libcap - Add glibc-static-devel as build requirement as tests need it - Install libpsx.a as it seems to be needed in some cases: * https://bugs.gentoo.org/703912- Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security wise.- Use %license (boo#1082318)- Enable PAM pam_cap.so module- RPM group association fix- Update to versison 2.25: + Recover gperf detection in make rules. + Man page typo fix. + Tweak make rules to make packaging more straightforward. + Fix error explanation in setcap. + Drop need to link with libattr. It turns out libcap wasn't actually using any code from that library, so linking to it was superfluous. - Drop libcap-nolibattr.patch: fixed upstream. - No longer add %{buildroot} to all variables for make install the Makefile learned about the meaning of DESTDIR.- Update to version 2.24 * Fix compilation problems (note to self, make distclean && make, before release) * Some make rule changes to make uploading a release to kernel.org easier for me. * Tidied up some documented links. - Update libcap-nolibattr.patch - Add pkg-config build requirement; libcap now provides a pkgconfig file - Clean up specfile - Move libraries and binaries to /usr because of #UsrMove/sbin/ldconfig/sbin/ldconfigibs-power9-12 16877919082.63-150400.3.3.12.63-150400.3.3.1libcap.so.2libcap.so.2.63libcap2License/usr/lib64//usr/share/licenses//usr/share/licenses/libcap2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:29616/SUSE_SLE-15-SP4_Update/acc1a57c9c21449596cf148fbbfeb63b-libcap.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=90648b2cec91af0b63e55cdb4bd468be0720f688, strippeddirectoryASCII textPRRA,]r'@utf-81a90d8011e46462d6543355e8e9c115e20a669105641af4e872ef4aa408ea291?7zXZ !t/\sd] cr$x#H5JuF94\%hU&%uD&Q55seB5Xޔ6m@J~dÖmtYgѾ^ud0[l{][MCjkF4GLKE%3<߳&&rxe,|jkcߡhF/ S/% ?->IP [^hJR:p( ^(5Xhd2bq|; T0|A yFɻV>5l l:Ѣ;rAg%o t%H3T$05yq2ˬK t 9[;,knDmkU+"}?l_%E;αM߶bk ]Oy%Ӫ^awz}n:|ׯ-g+'9ό>o@i3lispzQQ*6Rnrv#OU*xsU irC6%+rG+4&XGj DC梓.cr,bn5zi!*:੉A~Lj-@o8I9)pHRRfN`ಅb.Iɓώtzv*~d6h]5 甘|)n4YqmAż{isv|b\XO Rhxp'~nv~'!Y OƧ/-Lj{j"@%%5\eaceH],:%)C\dn٧vQ>Bu,۝ė7gt(D1e +t]7,ar΀VJB4"E͉::Q% xCʀ3s@JW~a΢@s〰-(GcvޭI~ o* /L$i۩›?Kᝌ6"591өD`MILw!u p8E4hEt}yZd2I{,3>0Gݖ+ElZkvuI8ZȄrC̸In" nH%2 Dtzc`-SFk=@8*-u[ޯDx'U naԼ-HնBOc@U<=PV^Z= V28'F,ltشy&)_p߁N4gBc.1؄^1YQ8ܹ)ג 5.jgw:)鳧bBVH fT/H=]*x%C^9?>.4LL_)Pw_IL[e1{j Avy|c #ȥIrl:10ѳiPṽ{Xj(T aQ 5ko<3uH NA.=&o^Jm"Bs Ȣe'LuQ<$`A1X"2ttadg!BĀ/E,k!m%f|2@ uuĵXP֧]$u;BҬh #/ OBRYR<? =cqcy&~36_QɗњXD'Bە(nB]=j -8Mz:eWFaRe8qpI=ObO/$膀=*3] ;s)a;DnNGQ*LSܟa{W]L:eD~|T, k{Dڄfˆn6rE2gj6txk§̚߆86Ħ.9$϶P$yst/"tOy9=9ߵ7G8]6Yc(܈M($[0N7Rd~!2忼~pyf *%^k ^@@M*Ŷؚɹ -&x s vefrY A&#/3 Xє39;,v`-e`/?Hn͙>G-w-b"8[w[.=?1ٚ9*7R狙}ٷ8C4Dք_ Ђw Cy= [S8>J^g`HCI8at.o[)HHK /?&-vN &dv] M[3d.3+ִ ÓлX#?DFCZ>#ܶ!DAUUdT(a'-܈%g my rrGaQ@|5hcqL"W iXj|+ӓ`vk ZOx P- o,Cc)f)f1MKkM޸Iae#F^˂}g@%eA,H-v=$jEesJI\d+=z Oi[o{$FN9wC@1,ԭIA I8[Z8 9%ouz("(H7W?/m!X?p󇔭<"MYZnmQj ['bE(òGB7c*l4e,XƱQ _Sj-ճatMn% [`=Fq1ޮ.rS>޷IQ׾W?(J'BkOn,OAYqž#O8{ h!f+D|N;BJˉ+Lv5W(Eو 8y0D]X T8;,}4+Ԯ˝8)0qH!D#[:03qAbǐOAZ }()R8uQJ[9QxEDч@Z5A`R$wG*!`XDqtW42&(!'}ZXt mF=EAR}OŘ.9YΓ +?= ,k~;RjEW22"J*rkFo>E׮A)y!ͧg3uK`i? |ﶨb]Xv/~n^+"hI 7=2kR&ĜBHE͔̼o3n EW^$P.KGɦmTpɲk(mzlQ'AlQ&ys`X[4*FLYCe$)p_q޾uM䪲+^J8ƢS@s/[.Z!8RE‡'5RVlR*\ L-xqW g/֧vB*b3)qGߥ&!],p+Q|©MgΩ9%t?I&Exek'x0.&)5r :)eߖoZA'qzG0nmJ&W37wXB )mik,>lv%.d1+5oQs@[!Ȗp_mX@JM\FlD@M{*Ѹ].ɢv"iC6d͞Ȁ2c<#et暴DŽM}~ g`6P0@nϵS/" #;"5 3Vҝ}7e>_|JobN)H%7Jd?~wt:# wඳ7 3$,g7sޞ xW7J{5xP,8{7!} Qa`~eVV!o|7y@GejE=HpDL(zX  M Tx8 ]֊˨ NQy!iCeqa=8Aɝs]B"ED$N)t`Dk~8Sp^k1M α7@C' f)RK_ag*lL^CVGA4u[K v_.j32Eq;h6n)}D21VGj)'CN&h-GY;I_%Z7 ]I y5HR\&X^ '?ߠ<=A&yf۶K~z[z64asx] p a3QGpTFIAfEWpHDAB"7HH Wgt>=00LyZDȦq65p\a]yyk`ɘFLͦEd$n&Ww,C< Ȃ#][Pc[!,I@Le[^G5WbuDHG'Ƕ9ۥ^>_^+3 W,i"Z )6n+xwZ\4 D֦"Jx!/˘)HJG<,/lוvx 3t,d$MˆN%Omr޴Oʟa7);€IlFB5KgQNIW3*'5iaBDwp;K`av0J u,cԛhmCwjǑ_ ٛE{`0ۋrjW.U%'*m,|cP"_KB,XBĔ,knܶã?ŽbT"{?SDs#llOm6ϸpa0} S_ǖ:< `5PViQNkj*jrE.օSʀaV; |!|Zc~3YaVn0C=MɊ}b!m'{4hϪic0Z{:+Z5I(ƸoQO2- (} \ϡn|' e)r6D^z+{Q9%k+ꩌmW+VqL&}\mZMNK,k{y`B6&}06#kݣuˤ|/2- p8Mk#-&syp`i- DOr&P^4~Cpq>+r_~Df"V AOQ2c$ j o5-RTU;iu cJ+恀#Jfޥх0VgzWF8J`f5U>~; ^1|9C%\$yLx a5RߣbY6dY^bM8&] JX)|I|2@Z?lT~y-mμ":P]8v0sV9IdCviy0 ~ 7ɱe[@;.>>ӻ&Xf(YekH=$*c)%y}" :CIV/ qQ_CB|-@$\FTlE3 1CWFIխY> m%~-F֛Scd5Ǹ^5#pBm+cK L=vۍ~bV@6I#n+Q?҈eى1KPU\LK_J cYJ!m:)7/JV?[Vp޻(h|K5L־m~',Yd,_'Cp0P|<Mb`ҧMp<}S3 :ʐ x yB(L1huXC H,Rߕ0rQ@4?ztLTM}MQsL )=i,za*n^2njXڞ"T߱/c V231RaAp֓QdToN;c+ֽ>꿽r7K9+CBws熯|\.N܄$pVA@;6h[HB~7@+ɕꎎ`WVZɡ=SZ-|">d+UN2PJѼ5=Ptү-Эiŧ#]A ܴ%O}څ=K! ;3\'xL|ҢC&1`O$JF;isǘ(ӧuGUE3Xp<tMbC]J0L3jK͊ nCOxJ%7?Y Yx]t;S48,GJ@7kΓe"?Y0SP(ryha7mQFgk5mzj4C# _N/Zb63ZfTXN0Ƭ4Tss /pt& AiJqA .^&~y!/g˷lUѫT~V j,Ӵ)fKu`U2cu T6[C}bQ@t «Q*,]@3Aj74J\KPQ1 _N昱P3J0hf8q&ˈj[!&\E{8-˰/>{w3k^#7؝o:uZߪ{ -ȿb5Ȣ)}A`X\!ԑiUzA`70 e1 쫚 f#{kUL>E%dzL]Otɢ&ȇ`Wޛ7R5܇ ~d(lI}g> qr> Rc"\XSGdƤQ\Rh(QG ,3'Ik.{MI~#+`WU_3\,(ofn'Ԁx!(%K]j6I,F5bVNOV&hJJG!öu|/TJܹjp1gURF(Q4n- f\_k^\[Y$|1ԝ~`E/xS 6U4!P2k ^GN.ecHXf~>(X 'eQQbfV I<::ߜF:;14>#=%.lΕhDpGwWqyt[LDAF w *WvV6/&lٶOE2#yx3moOSo_h)0 M8q.r@9<,_vȔhO{+8!f`R隽h3T4%Q=d2 ]סXv$D܉?5 ։N/^ϣ*=1?(gcE=P6 G 1#NuƆ1.qgl.2Ú%0kФֹOɦ2ީ&+p:u }}Z @U'Lhaot [O,Ws,ͬf4:\uw,5 ^/# ңJҫ1wn7[ZT J6 FMn+II g`U޷^AtF=K3B kCj, ]c3nsF]L̐&Lۂ65'S`4bS<Ё'#<נگVX V<3iwnDMU]Z T܎  JEV_ ȸ0!.VC$ot~܌Z~vȖ1Y6Y՗jrO-1x&E 7XйTqBeh7$ZO_2~zj(R_0/BQ#i(g+Vz[[:e5 ' h }r !_&lz~%NI 5n' d иb/0 `*ZiG8_CS^aڦ,@``2hqn@tF *xAxX$\)&YNJBD&w/|J'9v :aYضW1Di|gvCb3۟P˂N`-~5eʑbX֒tb\m@Ki1‡=dDu}Y)׮ŭ sEija"8۰`cJ+ xL6oq@n{ꍪM*]7{ JF54O*\a?Dq p 珛O^Z[|9> h}Dz!q ]7,oGZa.Sa-Ґ GZtWzqi37{Wm~g07\b]:Ϩqp 1eg´zE)v#52pwo&pkx,p+xɪ2> R lSn>F̄_ci\Ah:fP7X,]ckT|-m2Jy*i0t` kzld!$4VZV96D٫li)1 Egy|T5=~+I`[lo[) c-R\2!#&1Sbg;d.(‘ݔ>Ȫ&,Bs*}HfԮ3)/&6hc#@Mq4`߲c2gyg77Z>$Ƀ o]Õa'&=]~c4n&ܕzI?}(Hy(_)á3Q-v ў}k=cłL?,П֠v#m(>X5 [`8A(Y^ <{?ѥ]A=CIUw9iWDI5VZM.sw0\Av*ImSJ4=C8Gj]˥|UWrJݒS0~z=RL20(Q$CRH%PeB PKݿ@*(nZ ֛^8aG* }|g쭼_+qZ@N#8bAi1XF|Oc+ׄmꄓ55ڱ,e[sX47b\gp4]d ԩ<~R]#WOJʋ6&x6)*A 2X]4 e34އWd[|gűS ͬŭhD˗W ^0Mఖ8wcSg^w"$I^oxU.JGK_AP.KGi㒙3L0POB$ӻq9P.N5=!;kwJ"Z /1^JO %ms+=5 > HHz<'wz @g7GI H$nwOI CW)Sv]{r)vk~O&bb6 ^oӟ"5i XQȐDY(⒏3DizJ43)@]baŃr5m0ڀ59լ&&6V9d>Jr `Do!}< kjJmk]v}D-Pu Pbh{,\5I_ކ{(ZTꮁt1E :G/ʇ3bYAj,spY3"B/NwʢsV d`c ,WqS}QO {4Q%>s,n)Cg!:1>deU7KHL!Qh]+:⧬+>$e); 1OqoX/IPBVwTZ;_uk?Z2T2 %.Of YqHh@8d"D>T1 0yJhXuB{Xu`Ɇ 03ŇN£^ZP뉂% rw!|ė#v駱{)R5LpFØ U2*^^8*5&۴t?v]2Ws(|&f Wa _5j%^ya1Lc5\-O]~MYgWO,@2'`q&8GaB®&2X>J'+1úT7`w9Lk6B*'{=adFE3yҙr|C>d K0$4URWvSN}d\0N Tw!߆j?Q'~bs_1+>)\j O 6Yv\h^,l⬐2ȗa9Wv:~5Qzo! JTObP'^ 4_ta >ĔѦӊC?o75[FpG\E $K WAco8K%k$Gh/Py>a?w65`ucݣE[Su3]MJB׳"F9?Ys򊟫Hp*

_6(SgV5Zr,ϠW'߃QT+bZ\ewy<:n(`s_eBGuT۰JVQw䐴L0#`X_DBPjS-Tz1J;1!3DԳCa#/\A/B IlZa\Os֐ m S62I~PoN"LU\?foBH/*lCׁvu=&f@d v;<:Hh VEBK mzq:G#,%TzbvDn[XSs1u:{s2򎦈@"rh{/' !1^81c#΍vO@ *MP(PQe󧌆Hd˜F~Ux:[˿\w#G]"LɆEXmN_f]\ \y~"od8 55 D )zcaKjOPp}K]Kl. Ge9hL3ed^TGd>^cBZKB+( ,lAO$^\5uI.bj֎9j\7ll@쫖HwܬxќFUi- &FrσʿDrRƐb;/뫹DF:&.5&>ioR?rsނVQ-ԅOF<$AAŷPZqi "U @!yb !6X[w1`:&I7,$Lv쾝B>4wKcZ͢[H\у+{ iBrVJfDLfO۷8PC~[c* ݺ-oyWi'pI'5ߠf5_ҍ1/A0najM(g+RߛCS{v~>-@SyʋzX^$Tz~$a(EzOGя]M-VXV]Kߥހ]Ud%fgv^P¦0cBϠ@XDrn2+ޞ!/D~Sl;z~K㸶QǥPȡMr^ӦlM pJ^`R,'OvS76@4 mSpZiP'ciF.8x_HGy5Kua@L[o-Okost~w{M菓 Ps^5\j/bpݠQB,IhRozX+@.#A4GSؕ^ny oYz87KO_^T["Ք_!pKf)3N1sm ~ZF͌ƿ_  D!GQAs1<qC&s9YɔNh[C~!#T)C(h:0wg;V+i"Ɯh/ٔ7Gv+F;KN| G`d\`+ӿQ<3UR䜓T?qf|`+nAt2А;3܇(qL'h߻tvG"KF>Pw/ /{3b6ђbtݜ qtm?˅ qȫAܪRG@a~ź$ y5d1Eߋ'o&vis~RiDg}>.1 k$_e7&u+= #_,Kcy(_EDіCMu8VxxB%BTQ2QSjwac tIgJ'lm1.'J6JFtvɅH3^.@R(?< SWÈ Wn@zG T+n%7,JKnUQ>ppgm)_Ձ,CZWX7*);J Lqd͂4uN:Qq}5 %̩%ý{)xLޣϼ*|34XوՃ,SKMq?)=!Em05h#!5˸:CK3]%&:i͸b5 2QBeƊǣmỰNԦ{rS`"=pqigqӝtX1X2C׫ˬS'o kh :sEwWJgcWװNePdO7::0;*-, ŝLOLoQ%~ՆUS+EgG%`4YH:$kAX iniU)?u6]%k3 sIϠUKy{Ւpų2R/CM7@O%vׇ>d"^vlh_*Q,Yy7VG:\ o~bd؊e4n0AawfȳqݫQg7=6tNk^nl@$&#X,:x].QL5i5YBzD*n öڭi듚=Іfěn+5T ,7cZ໧0H`n:G.g>ywbᏲ-+ui+ɺJKgG&2 W o'7jߞx`gF;P;fΔE.̸v @tc\\n),L}R 0g|itp.ʜ 6O 6ZJTw- ]#۽09]]"_9(1:0(~!OJvSEԆJ 7EHT+'j=RaI\9\$bn+2 s=Vla !1^ G21Ͼ@0AT"C˾LA*ekDc7Jvߞ=ɳ- r rdÆ q,ܣ7mC&#:ynrqHnm髃`F 47r 8z;ѡ>=I!.1 o??d.l `^4\ Cm}%jiJ_-I]D;pr@]:Eʸ;QQtfeD5zMbEgjmGclq7ҷ^nAGA{&Q\ m8\{$n}&;a*ѕq bĝs!zfa4l'S3C_;[ 31Z^ܑLђCiU p/SMBuOYuFq wڮCGΙ猻&=i)nHS-2hPಬ*tNoc%%h8Ak*7DbPB=>>QLgB~]߉K֓B[03P]IM,b&"(2fGDn'~'bc:kOIzK& H'|26 t٤(ϓ޹ɥ}yi8to(vG UhX<:vY@2UzZ::*$M\[F"GZKvVl8Rς'TO qe\pIzBO/sϺ5Fřl tXc3ɧQôWk=Mаt)[ܜ'>%D—4e|6Jvd:ye {41_qZhx Ⱥ%["MZlBMIwꀔvj!m,}vzeh:2;/iaċSPVWX.{}]O_K{Af*w ={.1Y1UoY&*k rcYS,k+& 5IץONmץR@SHi+SA},e-aN< Te LT41jd>tGcآT`T&`NUFت>Z1ޛ4]A}DǏ~>.Jj!:hKbp@%k>; 6To+!*2g@gce6cM6_qn#"h_#i~ vL 'x{WK`ݑ^ *GFʜ]`p-`yiAm|3ػ |5$dG1Yn LJ޹?9ʃ E_Xszrza8%L:(~Xrj\q@Fz#ZLmjG}<ѯƔO1@Ժ;dIH^ 6XC&DNB_XGZFS;uv겆3ƳZ?8C@é|t9TRUϙmRJ~sArSRy.ozJ'7)$9|Ŷ:J^`<teo8 Z :f#~/ mIi%)C-Mf=  qQv"uu4& \SAsw/1kl!7ٹXȳ$#\ˮ[v<~;֡vZ=~{'*?YHLtr)@( 1tVga J\#~2Jg Z\x*!=mzɉ"m7 Q=^_JsmlEsh ط'a1 -&-8BR cge쮥LWyBBR(_*cxl0,gV!WM`s|D7sP2SG\ GVoicԽ%Oq;rN8P#~IDäj{ӡ5'Ae,9GN2ݗ?5S~f9-Y,v%}xZ']I4jRXضVXSNkE{E@kԪ;[pR[7,&g)8eĭѯR hV6۪ZSٜ Y*'; %KvY)-f "-xuW&5`;1I WKsHԀ4' ,cjBΖ3f!VyZ3z.+4_*D}d7 _`a Sz8'7(Ua5^↪j(;}Z4f~A(/.v=:T|NS=fqJ8* s톪JL&\h;ރsVТW;J4 $0'LcYL<b(v?ȉQOd,w83'ԲAסVQ(86M4m|5BɑA5_mᔖ.+QGTMkgcl2 ڍʖҒJ L8'䋰y!n ¼n ]C+]QëhJB:s/ 8 i&/ާy8PH" LXq$.2=O~1GŔ7e)7 M@{q+7uLd{~?HЬO4[$b!F+G OS,]R9`g|X61&e?mPʭ11/:$ "ūܷ]X'ӴA/agb=}.[Rw=]#"ne+anęe &43Lԡ((#;WpF̖f|fzi%uƪSJk@ׂfRPmkl2Pi* ~1rBKٌv#\ʓiNPpP$CI=Vsm۫0OeC#k1zjʝe417H'gY "i08PYzZ9m6F 88ЄpӮ>t$t݆,mS& 5Y {R9 4EhtG=.^rPeG5#e[1&\e 7yDgU-]2~2=&af9 L݅h+VQXI吺\"yV׬ZX|+N2_.(§:|q6̎yy$YF]l׌bXR2]a/*2?]ˤ֨*έ ,2JR!E ?) HS%]@8GiAr2k@EFbH.U.DF dj;9S9(Rd\XE~F{e3#Me$8% ?LhkNW DcS37|"Bc"F#Y}r_dxj9'/3akԘ IE|KskV!hJWU|#=:rV=UdOAЛ2FwC2]O) }Sij;؊^YCc9J,DTlS__F#}Fcs G#a5n}Ӹ!@f*R̪q"5%C2m wFjM (fqmp"}?O{C:4Ai!=(N{xCKMZ:GH:1nΔqY}921k)) 1]4s@F?,R}(Hpw:άG)j0=PÒ_s)PzYz/,UB2]!ol'Y=^(48o~g&'BL"=+֒@`j\*hdVȡ ?UFd@IYj/5Dt>%6EٍOIbU|?o|`80Pq vS"C?oBp`lΌ 2R:d.k:ۗǓ415 .[^`78Pf)M'N((HT5Oz K}z̖Of~-˔-,sS Bw `yD` ^nMbMS@[C ) M zo^g̓VsfU\R#YVoڭXK3ð0"[)j :; Pp1_UOq֛E;Gee{{ī$8FM+`&qfQs!Y Va  Xݧ,F~,JF[̈́(FX2f,B̓>~n8@&{$e 16_|Fb) _ƇoM(ux8B?*"UKng 7.K e[F ŠʝH9#zR UN%:{XQ?,Qf.p1ozRob/ˑI0咱7$kta_T{!CNwNY Q. t:cҺ QqygfOYhYF.UK0]XFcWp&)Yj< 4hDBfA0Ec iO"7tF̲Hw;FX)jjі,DgEBm/xHGW՞ 2FnpV`ݎ+FwK@'lcT6ۈqw"˻Y0rП'kd"|J8)=t~(u#Nq };il&g{ԡ(SF$æլҨ2|x˸ vo0%^̎*dP)9 sϣŝr@mq=)rpU=`rÓxKͦOuhVz cwP3#aܲYNm3Z\0?V=vZ,|tSRT]]ޓ%CxE7~'MRkYm[q` 0@?3PI8YOHp`qIv+t<R1?6 O'(zVbZm`Zs&Sy-Q2 {MrӡD=qIj;wԓJ6MJM0zR{ n&W3/ST7HS:>;V3|ScvTO[n-{iv(1TRD[