freerdp-proxy-2.4.0-150400.3.18.1 >  A cSLp9|DG06p䦶AG9_訸e^1"?o]2ھu{PQx1Y+ƽS2P1Kl\=l* Vִ:a~protm!#M4B+a:[N-x*EDV,c[u?cBoZš%< YKe9wfxDAU[[ǎ5$4 p&Ԏǐb }{\OGgg֥a3b2c5d4c25454fe9505f14d00b74b342daec6863459fe30c315ab7a615bee3e21af68c31857a2a37a92d1af64ace1e893e1a3ff5DcSLp9|V0>I&6uVnPDgS한/P4̉i2emb5Z秬4VOpxyGKHHa}gf'|8(1 !D~R\K'P/v%NY@,8$kKRO̙/p' l |?}.bL ވQ7_*]!n֣\+o~r26fHI\oj>p>e?ed $ W 5Va w       @Dl   (8191:1Fb}GbHbIbXbYb\b]b^bbbccddedfdld!ud4vd8wdxeyeze e0e4e:e|Cfreerdp-proxy2.4.0150400.3.18.1Remote Desktop Security and Monitorig Proxy ServerThis package contains a proxy that allows to select specific features and channels allowed for all connections passing through. It allows monitoring of the running sessions.cSs390zp34SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Otherhttps://www.freerdp.com/linuxs390xcS~e84519909a8ddcc789d6a242e43b474ce53b15e76d18f5cffeb86ca32fefce95rootrootfreerdp-2.4.0-150400.3.18.1.src.rpmfreerdp-proxyfreerdp-proxy(s390-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libfreerdp-client2.so.2()(64bit)libfreerdp-server2.so.2()(64bit)libfreerdp2.so.2()(64bit)libwinpr2.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c=@cEc\cN@bL@b@a^@a]aEaD@aD@aA@a@a`OL@`<@`7@_@_^@^@^^^I^@^@^T@^^t@]@\@[@[j@Zz@Z@Z`@ZkZWQZY@@YKYKY=0Y;@X~@XW local * #gh:FreeRDP/FreeRDP#6985: Support newer FFMPEG builds * #gh:FreeRDP/FreeRDP#6989: Use OpenSSL default certificate store settings * #gh:FreeRDP/FreeRDP#7073: Planar alignment fixes- Updated to release 2.3.2 Noteworthy changes: * Fixed autoreconnect printer backend loading * Fixed compilation on older mac os versions < 10.14 * Fixed mouse pointer move with smart-sizing * Added command line option to disable websocket gateway support * Fixed drive hotplugging issues with windows * Fixed smartcard issues on mac Fixed issues: * #gh:FreeRDP/FreeRDP#6900: Transparency issues with aFreeRDP * #gh:FreeRDP/FreeRDP#6848: Invalid format string in smartcard trace * #gh:FreeRDP/FreeRDP#6846: Fixed static builds * #gh:FreeRDP/FreeRDP#6888: Crash due to missing bounds checks * #gh:FreeRDP/FreeRDP#6882: Use default sound device on mac- Updated to release 2.3.1 Noteworthy changes: * This is a compatibility bugfix release readding some (deprecated) symbols/defines * Also add some more EXPERIMENTAL warnings to CMake flags as some were not clear enough. * Fixed a memory leak in xfreerdp (mouse pointer updates) * No longer activating some compile time debug options with - DWITH_DEBUG_ALL=ON which might leak sensitive information. * Added -DDEFINE_NO_DEPRECATED for developers to detect use of deprecated symbols- Updated to release 2.3.0 Noteworthy changes: * Websocket support for proxy connections * Progressive codec improvements. Reduces graphical glitches against windows and ogon servers * Fixed +glyph-cache, now working properly without disconnects * Huge file support in clipboard * XWayland support for xfreerdp (keyboard grabbing) * Improved wlfreerdp (wayland client) * Option to allow keyboard scancodes to be remapped manually * Improved mouse wheel behaviour when scrolling * Improved dynamic channel behaviour, more stable event detection * New connection state PubSub notification: Clients can now monitor current connection state Fixes: * gh#FreeRDP/FreeRDP/6626: Fixed parsing of FastGlyph order. gh#FreeRDP/FreeRDP/6624: Added support for xwayland keyboard grab gh#FreeRDP/FreeRDP/6492: Added clipboard CB_HUGE_FILE_SUPPORT_ENABLED flag gh#FreeRDP/FreeRDP/6428: Improve NLA error code logging. gh#FreeRDP/FreeRDP/6416: Http gateway message support gh#FreeRDP/FreeRDP/6753: List of pull requests to backport for stable-next - Added freerdp-rpmlintrc to supress a false positive as gethostbyname() is a windows-function call not a unix one.- Updated to release 2.2.0 (boo#1174321, gh#FreeRDP/FreeRDP#6381) * SECURITY: CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel * Sound & mic - filter GSM codec for microphone redirection (gh#FreeRDP/FreeRDP#6263) * windows client title length (gh#FreeRDP/FreeRDP#6335) * "Alternate Secondary Drawing Order UNKNOWN" (gh#FreeRDP/FreeRDP#6370) * remoteapp with dialog is disconnecting when it loses focus (gh#FreeRDP/FreeRDP#6298) * v2.1.2: Can't connect to Windows7 (gh#FreeRDP/FreeRDP#6299) * fix: memory leak in nsc * urbdrc: some fixes and improvements * build: use cmake to detect getlogin_r, improve asan checks/detection * server/proxy: - new: support for heartbeats - new: support for rail handshake ex flags - fix: possible race condition with redirects * Drop upstream fixed patch: freerdp-CVE-2020-15103.patch - Removed freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298- Updated to release 2.1.2 (boo#1173247) * CVE-2020-4033 Out of bound read in RLEDECOMPRESS * CVE-2020-4031 Use-After-Free in gdi_SelectObject * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` * CVE-2020-4030 OOB read in `TrioParse` * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet * CVE-2020-11098 Out-of-bound read in glyph_cache_put * CVE-2020-11097 OOB read in ntlm_av_pair_get * CVE-2020-11095 Global OOB read in update_recv_primary_order * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order * Gateway RPC fixes for windows * Fixed resource fee race resulting in double free in USB redirection * Fixed wayland client crashes * Fixed X11 client mouse mapping issues (X11 mapping on/off) * Some proxy related improvements (capture module) * Code cleanup (use getlogin_r, ...) - Removed obsolete upstream patch freerdp-bug-6205.patch- Updated to release 2.1.1 (boo#1171441) * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common * Enforce synchronous legacy RDP encryption count (#6156) * Fixed some leaks and crashes missed in 2.1.0 * Removed dynamic channel listener limits * Lots of resource cleanup fixes (clang sanitizers) * A couple of performance improvements * Various small annoyances eliminated (typos, prefilled username for windows client, ...) - Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205 - Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148 - Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207- Updated to release 2.1.0 (boo#1171441) * Fixed CVEs: - CVE-2020-11039 - CVE-2020-11038 - CVE-2020-11043 - CVE-2020-11040 - CVE-2020-11041 - CVE-2020-11019 - CVE-2020-11017 - CVE-2020-11018 * Fixed leak and crashing issues: - gh#FreeRDP/FreeRDP#6129 - gh#FreeRDP/FreeRDP#6128 - gh#FreeRDP/FreeRDP#6127 - gh#FreeRDP/FreeRDP#6110 - gh#FreeRDP/FreeRDP#6081 - gh#FreeRDP/FreeRDP#6077 * Noteworthy features and improvements: - Fixed sound issues (gh#FreeRDP/FreeRDP#6043) - New expert command line options /tune and /tune-list to modify all client settings in a generic way. - Fixes for smartcard cache, this improves compatibility of smartcard devices with newer smartcard channel. - Shadow server can now be instructed to listen to multiple interfaces. - Improved server certificate support (gh#FreeRDP/FreeRDP#6052) - Various fixes for wayland client (fullscreen, mouse wheel, ...) - Fixed large mouse pointer support, now mouse pointers > 96x96 pixel are visible. - USB redirection command line improvements (filter options) - Various translation improvements for android and ios clients - Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch to fix boo#1169679 and make USB working again - Fixed build for SLE_12 - Cleaned up spec file- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order to fix boo#1169748.- Added cairo support for scaling - Cleaned up spec- Removed patch freerdp-Fix-realloc-return-handling.patch - Added pkgconfig(libusb-1.0) for building - Added new package for freerdp-proxy - Cleaned up spec file - Updated to release 2.0.0 * Fixed CVEs: - CVE-2020-11521 - CVE-2020-11522 - CVE-2020-11523 - CVE-2020-11524 - CVE-2020-11525 - CVE-2020-11526 * Fixed security related issues: - gh#FreeRDP/FreeRDP#6005 - gh#FreeRDP/FreeRDP#6006 - gh#FreeRDP/FreeRDP#6007 - gh#FreeRDP/FreeRDP#6008 - gh#FreeRDP/FreeRDP#6009 - gh#FreeRDP/FreeRDP#6010 - gh#FreeRDP/FreeRDP#6011 - gh#FreeRDP/FreeRDP#6012 - gh#FreeRDP/FreeRDP#6013 * sha256 is now used instead of sha1 to fingerprint certificates. This will invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a new connection is established after the update * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372) thanks to @kubistika * Smartcard received some refactoring. Missing functions were added and input validation was improved (gh#FreeRDP/FreeRDP#5884) * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880) The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still available but marked as deprecated * Support for Remote Assistance Protocol Version 2 [MS-RA] * The DirectFB client was removed because it was unmaintained * Unified initialization of OrderSupport * Fix for licensing against Windows Server 2003 * Font smoothing is now enabled per default * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215) * Unified update->BeginPaint and update->EndPaint * An image scaling API for software drawing was added * Rail was updated to the latest spec version 28.0 * Support for H.264 in the shadow server is now detected at runtime * Add mask= option for /gfx and /gfx-h264 (gh#FreeRDP/FreeRDP#5771) * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)- Disable LTO on aarch64 and %arm to fix build- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return handling that results in memory leaks (boo#1153163, boo#1153164, gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)- Add Requires: lib%{name}%{major_version} = %{version}-%{release}: freerdp should depend on the same release of libfreerdp2 (boo#1129193)- upgrade to version 2.0.0-rc4 (FATE#326739) * Fix the following issues: - CVE-2018-8784, boo#1116708 - CVE-2018-8785, boo#1117967 - CVE-2018-8786, boo#1117966 - CVE-2018-8787, boo#1117964 - CVE-2018-8788, boo#1117963 - CVE-2018-8789, boo#1117965 - CVE-2018-1000852, boo#1120507 * Security and stability improvements, including boo#1103557 and boo#1112028 * Refactored ntlm_av_pairs API * gateway: multiple fixes and improvements * client/X11: support for rail (remote app) icons was added * the licensing code was re-worked: Per-device licenses are now saved on the client and used on re-connect: WARNING: this is a change in FreeRDP behavior regarding licensing WARNING: this is a change in FreeRDP behavior regarding licensing. If the old behavior is required, or no licenses should be saved use the new command line option +old-license (gh#/FreeRDP/FreeRDP#4979) * improve order handling - only orders that were enabled during capability exchange are accepted. WARNING and NOTE: some servers do improperly send orders that weren't negotiated, for such cases the new command line option /relax-order-checks was added to disable the strict order checking. If connecting to xrdp the options /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926) * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840) for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon * add new command line option /smartcard-logon to allow smartcard login (currently only with RDP security) * add support to set tls security level (for openssl >= 1.1.0) - default level is set to 1 - the new command line option /tls-seclevel:[LEVEL] allows to set a different level if required * new command line option: /window-position to allow positioning the window on startup * client/X11: set window title before mapping * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg- upgrade to version 2.0.0-rc3 See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1 * Improved and cleaned up the command line interface * Fixed automount issues * Fixed several audio and microphone related issues * Implemented AAC and MP3 codecs * Added Wave2 support * Addedd dynamic resolution with full screen toggle support * Improved redirection handling and certificate issues * Improved automatic reconnects * Improced connection error handling * Fixed invalid pointer, double-free, integer underflow, buffer overflows issues as well as other memory leaks * fixed X11 Right-Ctrl ungrab feature * winpr: Updates time zone data to April 2018 * added libressl compatibility- removed SLE11 condition - removed no_connection_to_windows_10_17101.patch - removed -DBUILTIN_CHANNELS=OFF switch - explicitly set -DCHANNEL_GEOMETRY=ON - Disable the new X264 and OPENH264 codecs because openSUSE does not provide them - upgrade to version 2.0.0-rc2 See: https://github.com/FreeRDP/FreeRDP/milestone/8 Noteworthy features and improvements: * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488 * basic support for the "Video Optimized Remoting Virtual Channel Extension" (MS-RDPEVOR) was added * many smart card related fixes and cleanups #4312 * fix ccache support * add support for memory and thread sanitizer * support for dynamic resloution changes was added in xfreerdp #4313 * support for gateway access token (command line option /gat) was added * initial support for travis-ci.org was added * SSE optimization version of RGB to AVC444 frame split was added * build: -msse2/-msse3 are not enabled globally anymore Fixed github issues (excerpt): * #4227 Convert settings->Password to binary blob * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc * #4276 Big endian fixes * #4291 xfreerdp “Segmentation fault” when connecting to freerdp-shadow-cli * #4293 [X11] shadow server memory corruption with /monitors:2 #4293 * #4296 drive redirection - raise an error if the directory can't be found * #4306 Cannot connect to shadow server with NLA auth: SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918, CVE-2018-0886) * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes) * #4527 pre-connection blob (pcb) support in .rdp files * #4552 Fix Windows 10 cursors drawing as black * smartcard related: #3521, #3431, #3474, #3488, #775, #1424- Fix boo#1090677 activate pulse optional component- Added no_connection_to_windows_10_17101.patch to fix Windows-connection-problem after Windows march 2018 updates. This fix is related to boo#1085416- Do not use xorg-x11-devel, instead buildrequire individual x components. - Only attempt to ge rid of __DATE__ and __TIME__ if SOURCE_DATE_EPOCH is not set.- Users can connect only once wo windows sessions due to [#]gh/FreeRDP/FreeRDP/4348 Therefore WITH_GSSAPI has been disabled until that issue has been solved- Updated to 2.0.0-rc1 Noteworthy features and improvements: * support for FIPS mode was added (option +fipsmode) * initial client side kerberos support (run cmake with WITH_GSSAPI) * support for ssh-agent redirection (as rdp channel) * the man page(s) and /help were updated an improved * add support for ICU for unicode conversion (-DWITH_ICU=ON) * client add option to force password prompt before connection (/from-stdin[:force]) * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146) * add support for "password is pin" * clipboard is now enabled per default (use -clipboard to disable) Fixed github issues (excerpt): * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4 * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width. * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush. * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main. * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface * #gh/FreeRDP/FreeRDP/4117: possible segfault * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program- Remove extraneous Obsoletes for packages that never existed in openSUSE:Factory or X11:RemoteDesktop. - Rename libuwac0-devel to uwac0-devel and libwinpr-devel to winpr-devel, as that seems to be their upstream name which packages are encouraged to stick to. - Remove duplicated pkgconfig requires (these are autodetected).- Fixed download location- Switched to official RC0 - Create wayland client package and libuwac0 package - Create separate libwinpr2 to be used in other packages - enabled gstreamer (currently disabled for tumbleweed) - enabled kerberos authentication - Update to official RC0 Fix the following issues identified by the CISCO TALOS project: * TALOS-2017-0336 CVE-2017-2834 boo#1050714 * TALOS-2017-0337 CVE-2017-2835 boo#1050712 * TALOS-2017-0338 CVE-2017-2836 boo#1050699 * TALOS-2017-0339 CVE-2017-2837 boo#1050704 * TALOS-2017-0340 CVE-2017-2838 boo#1050708 * TALOS-2017-0341 CVE-2017-2839 boo#1050711- Redo history by using changelog url - Update to version 2.0.0~git.1497095982.1dbd2d28d: See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d for full details. - Packaging : + Move to xz tarball in _service + Remove 3472.patch merged upstream - Update to version 2.0.0~git.1496304402.c42ccb508: See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508 for changes.- Forcefully enable PIE in CFLAGS as the automatism did not work.- Add 3472.patch until upstream #3472 isssue is fixed and PR merged this fix boo#1004108- Update to version 2.0.0~git.1477034991.043243f: * fixed kerberos authentication * shadow/rdpsnd: Fix race condition in rdpsnd channel server. The output buffer and format parameters are not protected. * wfreerdp: fix invalid VerifyCertificate callback * rdpsnd/server: decrease audio latency and make it configurable. * Add an environment variables section to the man * protocol violation: rdp_read_extended_info_packet * Added support for OpenH264 1.6 * freerdp: fix sending of TLS alert on NLA failure, add better handling of server-side NLA in shadow server * freerdp: add configurable NTLM SAM file option for server-side NLA * freerdp: make modifications to NLA server-side fixes according to PR comments * Fixed a windows 8.1 issue.- Kill off __DATE__ from built sources.- Update to GNOME 3.20.2 FATE#318572 - Add obs git integration. - Update to version 2.0.0git.1463131968.4e66df7: + Fixed memory leaks. + wfreerdp: fix name build without client interface + libfreerdp-codec: fix xcrush decompression, revert remote control fix + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and Morocco + libfreerdp-codec: make proper xcrush context reset fix- Update to version 2.0.0, git master branch id a7ca42e (FATE#319661), no upstream changelog available. * Warning: This is a git snapshot regarded as technical preview by upstream. * Warning: For xfreerdp, new /long-option commandline interfaces have replaced the old --long-option interfaces. Existing user scripts need to migrate to the new interfaces to avoid breakages. For more details, see: https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface * Add Network Level Ahthentication support. * Add Windows Portable Runtime. For more details, see: http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime * Obsolete libfreerdp-1_0-plugins. - Drop FindALSA.cmake: deprecated - Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch: fixed upstream, implemention now in include/freerdp/scancode.h. - Drop freerdp-CVE-2014-0250.patch (bnc#880317): fixed upstream 532c420. - Drop freerdp-CVE-2014-0791.patch (bnc#857491): fixed upstream f1d6afc. - Drop freerdp-fix-FindPCSC-macro.patch: fixed upstream 9148af3. - Drop freerdp-handle-null-device-name.patch (bnc#785437): deprecated, related implementation dropped. was: freerdp-fix-pulse-no-device-name.patchs390zp34 16757769042.4.0-150400.3.18.12.4.0-150400.3.18.1freerdp-proxy/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27685/SUSE_SLE-15-SP4_Update/a64f425c5a27903b78125078a9f91196-freerdp.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=e56247befd5a67523449dff680e2053a4a2b63c8, for GNU/Linux 3.2.0, strippedRRRRRRR%. D0utf-87626e753877780de43c3051f696551039a87c02eeb8e981d220be60a525befec? 7zXZ !t/ṋki] crv9w![fnfS>ù$|jyc_yvwX4<~'oS͑^T[kI\]^BdGw5\+Ek@.cኺ!=IHm\7_Y56b:CeL*o IoK&=/s :Y*tgszX#߄U]5s$XCm/ h=n12&SET]o,8F8k '7#T !6,ZdX0~8DQ %6t A*x"WT:^n}"zErDҾ]=s|۫7Z|~JG:=|yD mXK1_v"60TjǶaȩk),) }~Ʋ@qCM>ĦpӁcs{2uv7;nTѭɎBXbQ銀5t5-0,jݲɕ%^c% ᗭ@E͐͝_%0[;ߓR3u2ؖ8\fߊ2;ӆug.5 5Q>=U_Gv^FM-lujvB0v hm>:5YSch'LՔ Dg1DLC"3P;#sS~Nu (]uԖ\ .jh`_@)?4,5^suəJekD=ha]zgTm({61(q s)1ze%7:8 'lq;-=D:t]!X.\)Sf Gp@ӊ5 !FJXwW4l|^ y[zsq/U (6j.kaSiҼ6U?RЬd" Ҿ/{{|T@V9)/Z˵\eEm?z/ , G354Iܿrwf#m/4dV+b] '枎{1<7n?DmܙZ)?ADw\_ bIںz401CPqblt{.Cj:!JqO7eg7Y. kĪ?H9NWmKs[ayJʷYQC7 σ D8؍B| ɤbkS8.H>_RF?\!5&iNn-x:DLǷkbguĞ9Iq25ob W޴1&IE |rt+\| SMi*sZTK["ޣaQ>SJp Ŀ]U]~:u rR3G7ό>G= $ܙ 4:T̆"[ڪ2иѻ3/FMσ@t{cMI+0LC6exħ}d qj;&kgSᶐ;V>6bк4Z>}#̓5f2W~"gw#VAK7rw/ߑ073rV(dɛը3n`i@/KTh.l<P66SUQՠ2΍X|$4.J`C?RљZ< s:0IJ<DӒWIR@x>kȋ]$(_,@NWP꫌°j"MQ@*7Bp'pJ?#QQ~q=nc6d&64D)*Evym­Ioj MЬ,>Jɩ$g.^>Pw7y;ZsV$& ʬ+r֔;: %FR=BO2$`-i ,YoJ.h պJ3e>v ㈬2_!"&|5كâ{] {1v-lT'.`O"ղN\K2-# +1t{^hQz#5@rD mX;λ҉8wN68%b׿dg#vn E 'wY|*gj6?D%XԀq0n |_.=oT MћKl*5\ b,7Z*"<7qDa'Dt*[< қL6Z0ؕO xՓ-gG۱)iO(|'C7~U\I[a$S]Y6vnl*(VbWWY)A cx`w"v)R$VJʹ"x16,@H}q,9NP7[Me+y& ]雞-+Rmyϻ 3SVF{{.Q? v:>uJ_Zذ]!-;h:t@6lg԰ \s&\nջx 3vくI\hILVMT, <ީy*Gܶ+$/˥J=l{W6#H=AXbzo\|[Q ~9b-&3(E&UrOp^ )JHc2, y"z"tsl¾RF7<2ؒpw y: JNAaVz嵾TփWf$xIt_=is߁ľNvsacZ beYGyb:Ub#iUJVȼ)!QA4(aaPe(EA_uSM"Džlfc- }Y0߽D0Ա7RQdyHh ab2X0`D%"fݑ cdh[]]-8Wʈ0@hUkj ! P`Oأsk]ḳ*-!هe0 бޛ"tx ^G3yFi` \FS^[t'5vF1 vrT4e' n;KbT.g@G}̜ދf^2u Χ{Å1xpu2n*7`A_. J HR)sA!jih "G^dWIrZZ>3$G$7)ah5&$o?OtL6ص -ɍ"`؆2!Knz9E:F|+R _\ÍW&?:Efg M aD^m-CkGOf :h"I;%-'in-y 2zڕHdz_F @[ϣ:98if;C7pdze6I0R^eM;€% 2mC'x6H2@ڹƔix]]e 踡TuQ#[`f9o*iWHWFV1B[SO*QsN];U;ʗB\Ÿ[~CpEjjaH n纜n/x?:$Z;BVť PAJ*T8OiA9Г9ʡZ}eZ]Q=mUЇZ6"a61Wn#mő-}NDF@AhP0'\pum7Ak;ʎ].hŨ=1Gel_Xed !5r VɧS5l8pڤ0^uR*̜+kB !aNӎS^BKBRɩg' 2vSt 5GF4xX'[bE!ֿL$K[ZUT Tm0.ꥦ) I'j M;F:^ κߓٱrHw|ydG4Bd02rf< 'Uz4:9 ;Y qIwCJTўmqE&nٳuM՞0Y DxfB4iZPO;ڮv_ M*dD7 ia5zxyzua-oDB>ᰩb1}6< IER{kGU%'>SA6[d{&ޞ-|{G/jW.屁wD%pŨdlVV#@6.J27z77ZFĎ|AOwHA 8QUd>IeMTHMqkCnKS)nuƿdB욦A$dEgbʑs]1a4"Q}O08(O8LUgޓ L'N.DS?̐0la%yI^1iQ[O`:އ=8[WInIP|icKX!+j󬿣գ8,'fcm,s&5Y g3vvZRiV9=v6:ϴ1{8`GY 1+Y]ZJ|#ҼgoPk1@YrȚ*爵.*"r 侀nQoAno B;/;_9#0A+ՙw$l4֑` Y0کV !F$C[{;ŰSH\Ǿ8x+n#VYEQ@l3QC@. {@CNś,b}ZZX7sce ,mO[d(-1_c%skn%ߢA}m(Dm5^ĦߪB On)z].ϛV`aYD܂̩ƁKa!y`=&!/ 7D>x^.M2 :J X@#He? }%99=XD|Sj.l98K;/MG:&OY‡nFLI<( ` +:@n}RrGv,)NPL~dShnGWz?hXOUE+3)`LGhշ!dM-72b8 xZS[yoћ cCZgbeAA||+=N'sTIo5ט\5.,dvez VNOds L2{Ik\q/Q?FաbUg!eiI^IR]zӕWE5t3piYS= MpVE`7jBm|lU>9_\|8Y Z-(7X]G.SUHQN\gl2-$~d etu |@u7\Rʄ3pF~_@D Q5ӧVz1q߲u|Nv\Tm.DLGwR ^=ǚ@B $4oL?u/NӖB@h=8(v ej4jBNl#r tliZɁ$op͝ڢg mT|&Mb}1Rt-}m'v_JtS4HO\&8:ȰfE26H;ocU p,]7M&kj='x.PGߐ)8~;`³g4)Oݪw=Ws^J5~b~Mۃ<o#=Ֆ .ׄ T\_bƢi#F 5/N;7O KO1ێ'\|_8%̮<.3MXr6C/*g8:U!8f98Wδ_!g4 ) /0rY" O3\T2_h?YBpD/ Yl<(ݷ:ti5q +2oFd?(S24D2,1}t#z:R[:g9Óc&}¤/A!A0i>@`d7 <' ڢ.\we9%G6ĝnu,:}d>P%1=Lw܀(ȔxթH1f4|X]٤= ŢUЬM#\`)3p?sf4awg=t7Xu*Ypě~pi$5( fx2w!NVp$)]=*Ρ+$60GnNz˟F'i4)o59,\U4/eQICUVU;2 z`iYLTp H [NZjp, ؽn໐1q9B.``"/1ΌDa;Ү8KF8i \Oʦ~]^0\Dݽwf0cV~-|doU$z(]ɬ?AKۈ…cϼ{?6.q@TȆg*@XvVPF _ޮlu? {upwBˉXce%aRv]M6\£T&4%q45;U _+CU %7{l Me8~uQ"bHl4{ M&ܻ[5QC,K䮲IF<׵D 9;S8dn_p7Z%VђRV E$*V&%Z*QEP`s  oExG3*L;7+؄N >kZ9xjKӹq3xaxC}NpW~L2N(ǖfY$(;).tJ':'1$ '9e<;mOSb$Ir"U߿ARX *x~f*9z=G,fR\.2k": q%0u,;ǦU98 k~yD:r"2Hx$zgߦEmaS\'֦>p{O"EY\5ڔEV5O:k!5].<E:sҴ|bK,Z&+Ji>ah PM5V7.3~\X Xzn2`]"›*@Cb킠ڙu4G{7j]:@O%mLۏ l'VdY#f{+}("ިFEj`0ټ :>|c+ jcH+͙d0̹!w˥I&^6yFe&EHe,?!W) >>7p1L_f43=."cYlz&LQk,]3~ jcN mc} f F 09ߢFrǹAW۩@Nk˺Ua>.r{]87[XL-՝@axv%>sEkWGs,(NOOtSvTL[v.gFP^2 /]H.ύ5d+[u],h7?/C#/Qt0dH/[=DG\}P~-^>0pУN97D@ &;Y>ާ˰I1,jVL3Q}Iۘ8i| kf H>y7 FFHck R)P(}/D]Jaֈ7=Y"z|˙o"=ˉ=XV Kw3ҒH졢B":VԣS#O9oG萭d@8 1!$Gi '>;n؟Cwvr b'R 2]4M"ؓ<^6GzdY^\ vpϝJ>GA=ڙP p 5 K8|s9}Jʬ*s =ɞhT K?O1]UED FȆO1ٶ( É*XN-} ,Gk硼@M~SFt.~,V{ŧF)zLqhG[dbu#Ӫ{͓#ME!U}d;YPU]=89&l2B%{zw7!~UGLq?.%_z(WL[q-E ݅['ڐ.ߓC] 2daxSʧ:VMIMHR ,+ tQ(^hlzjƞ7`Gt)>' l~&ѮI ޠv׃2+wA4TW2YAg6̛p 'uf#CZ#gm.ݨ%b3 )<&Y裪&Lpa4\c{KAJjLLR6~W{Kǻ^Qͦȫ5='$ak:mIκ| }CCý3\v\ 5 MaJ:͗}}pӥvÚxJɲcI/Hm7N}>2FiyՕVOv3Sۢϔ)z;-ξ[j\wZ|U*6Pk@LdL!(^>4lZup# C 9t2jN\\Y{}lӰQ(qK˼g){?+ƐWA4c3!LS aB ]f^aDUH?:$s4゚&IĨ7/m8yȱ60O.}065uS MXu1i"9P2 %Ɍ ~MYJY%LUÝGCDNn8vܠ&MK8]8l)BmgL-0J~)OK\b'1B5+]}o/yg|\"ْq:BQqIF܇q< 4ZoӢρ;G6'yFEͰg_0k7[|.IϸBqx1@8w]k5(gE"l1ea4`"B^ /rٓ53 q5p,C}7tg+?|8.['qre:0 <8okC|bw,kTٞ~| _s߶qaH2h6fS &GK=vdJ[38 h౑% m#-θߨY%! ΢cylԇp:T.$Kߑ Swv|7G *zXChuP?-sppX6dE16G sbBU\&8߮R+da(|916Tk?S{r1wAz [B;3ol\` q9bb<*vM3 KڻX S+q YM $&^]IV䀽{pt'~,*68uj!D`E :PX&H{g|ЩքkVLЮu6}mor'%. [Gxɉ]]h?ШWQBe&ZSqiFNSWO )+EЇYb05l{33'?~AT/!x:3 gPfV|2E?Y]f)q"SG#KQy#NQ{*ZMg0NME^NKGCtroT K++=х- ܋EVAlpS ^^S[V"V;t'yn>׆oILE4C{TFnola q4nVxD+a 4* 5/paf؄x4^쾟?6tEI[']d΀.{U_sNTY3"BKa'+vqu) Fl5h0s<*A/xUc5LOX LQ',xi0,A硹eNXB-xPJ&Dezt^9)Jd hFD/4ױ $"_I2g0HZ;;b;9iN1iYp(F0Y4j@H8RQ&af-0&+XhpNrp|c w,Sn Hpq0羷[z&=[ ^j9m4Rh KD /dVCDyWΪUHT%~̶ozQ'RSJ(9f'\yl\Yj/2)u]n`̾I qA Nka W*~߿-NK S @pr3p_ ',L[i,1Հ8p6mZr@}dBbMP6 E%W` }]2j!(E%jbJyi9|Jr`ބf*645uā!,[UЂH!um cc1xj9up7Gνy>;GB0qx93<T-}ArI0TFot9ewY#H}k ka0Eo;8-D,dT%&,d/v@x#w+:OMi7nBiJ[# q_L< ї-gI?aӍrLsl1Oesyڀ729$nm|Yi]ݴiyUA řd93LGN: fh4Qݛ ,|Q"r,[jMIaz>T}1iyYQ|d#TA.GViÑpYg!xT}-3+S䉞S=vPRERm6]n_of1ZlViEAmA ވ1lYSк:BR}T%lhT+th h ]//cM+wƀ:jd+a! ,&rUpn8e>vmf|I/hyͰ+.o֓󌋳#&g8&X ]ǣc2G d3ؒ6`z{rq^هǷVv0*oHrm>3˟OZ~wstS[AmhTB 6/WMYBѕT(sxWdk(+1:yy 9X%n8%4#[giy~^j_Ar %' =f5݋P m iHe{ BxU} 18NAANFVzҢ}"Ġg1 0l5D* <⚒MS xkV157>HJ Gs]6'Zﱁ([ +oA H\Bw|q]:#>oiL+썟d;# =0]uKGMr ͼ4toj0KзU,18K:}#-k"%:.l<5w#eAz'[G"NA){VBX?'6CRU%P1r( ;G&rhVeNSd7SoI̞vp t@ؑopDy-#ޗcd6 e;%<a4T\=O}jmf -WHg̭EM܋a׌mc&M齚s=^.072 ^>,EKǁ@u[2 l7II >u_W>m"HpsVR9AQ'\9V?*!pCͷU&>/R"qyGBarc/QZ<`e,tPlH"UOocOtD6m6ؾ.]M!gUFo] /_YF yz :zw"6 -aJ 5)$.>LRGd|Ju 򳈩nXS(A,_FO`J7Ƅ9vݢSgp̄\8 q1lP0!TH+^qXR{mZG4]l#$XCڂ* bz&jv"@?GנS`s19t-%EhK] RZof;iIxhH=(Y>ۋg[HLv:&=bFǗ׆fiR "1" nKH|R ZtZM=d`R2:FcqŬ3O/mN4qQp=XCk[ЦGӰ^$fe /ԡjM?ȷsj$XC _TɳA$f|SL6B%^xWIm7y?uq7:L`ipdGDždq~.?'l~ ̟ d,5 q84悡iqˤйf+kG!iW89Br3H[27wE?zq~h^X{C <]~ '?/JrqGKܮDVJq֦~7T@wBEK_;s+nPJ>G9ZE| sM[+i8ű={NSQ)89PWqgAx #z,Us8W~h~N65sM9yl~$}^]Y֥Z(W3kzO;Z:PAS%VaT"|QMp9Ed1ݐ"s}Zt"zsH?w՚s.?zq@,LRS'mxA-fɹu%11 kI 3q`i%M}SYNp$:`C53E4O>J)+f% W0kS<_wrP󉫌Ysu)+}g\5ps,4' I[f{hqu wR[zO+G|tkI4pM]OqKXÔbɿ 9WC uPҨ.k1C%_z %290Ӆ1]r42j&;v1^Ja0 d~QL5R;Q|/6C~ Wp6C)~ܬi[U(oDaq4/ѪW3,fsUhKbr6+̙׼r賐-m7Fv [AJf .X<?+5YQ+\jzJc(kLTv7"ܣN$9Zs-S!ۏPiP!Z-@}XB]\)Zn7;Un pXƒ <p]hZ;Kl'jd<;Mn0m`EJ0"$]Vfu]K{]ʋRGo6W~y3U\}\yK|pYSudbaGl#?|O T90ir(H O7AvS f EJ]ԭ~u6/8aY񸰑c@bs}gakne ӳ,;B#_Tug#C[i}p9r=7Эr4?t6֧L@x+{b!G [wJ, -8xYےJ㞉?g <ҧiICEڴ]U4׫/' !@L>fI#jg7 [}p!&%zmE t!>2(Q B _Y5t ˔B޼k8(b*FEju#c9lYa﷨˰93W2*CPV>Bz̯|:@%zH x ]FW 7H>HW;3Y "ݦUgI 2j~(@M5oAzTj>׫#Ųd/N,VAx(MJAL#(fikG0+ùc]bGoP]*!vz[ _CF6c G{v6-;!M(*W ʟ┛BwiGSГ`+g0ԵjGM\\ 9W"|ٰ0D@3Ҫ4xcboux.(cwPL-07 #MΆԲ@90oC0l\@8H-CMI*oqC=bKVlK3`ZNMd()}T÷8XF-gi`ͧz?|'UB N|AgL_H[],wXbf &9#=/ w뤦th' bwX?:~@ou˱ykuCϑ=iLw"D?,q7Tp?͜ceH;Lg;;F߹$=U˘k{# FƩ٠Y `A_kozhZ}\PK\6q3fȗ(`;ɺaprG/&֚:fҏ?%nѮk&Oۃ3搨yKCnػJ^] s\A70d0 z}go欿PhPDfGq?Y|O 5«CTk<4;>BhiLR*1!/ٸ>fGoA^.'p4vS\=RT rOP7jluǧ:&=?}qOLdFʏ\ۼ~H֭hRX~r8qb0Asŵ^\ M0#LH,8ՉH](OPG"/;[8-WILii;wbMu^؀PKl`at ]{h2s <Qt"}ޘI=^P/hUh 5*d@p']oEg̮a~BOmcj/AQ*l>Z62Vi?KyAT1~oWJŕl=S %nO8V?lN 7Lc(uyr Ynrg  64|Jt!,,No!{2Jt ͬVҞ8܄aμӎ8eV5,!tJD :H%uŜ3.RTO1~~qīOdΎms!GK\?μoOr`,'p&;%!#WK KׄRYŸo,p<#*HJ{&=[3:'A !YXdt]zD.V?b3,s}WP=P }YD0I7X9ڣl%M^DA][9t1V)UƺfL%V@!O=l~hnE;fCqD KyC?-fԥn'4!Լ τ |eHM-RܤuCz]Zy#%D;X3HZQc^dLhD%,([OcE7tb~²֖2ViHp+ g&?\RFoc7Vm"EӫHlGaI {tqId `B_ZϘ9n#,8A+AփF z˷sd43%)ԛv-UQP=_\,ȉaj) 4IԄCWluP(*@*(,ps328GЈI۟l{U x-Odv^qqD ǢkN:Co67lD$&;ѱ QuM8'zڭ]"XH?~̃H00Z Ѧr$EJd@ܤrҳ#o5H0L;=ѹ"7m CU :㈔1؁oV1 mPS bweD YX}_eZw.?AJ/T #+ F(q.`9JiȞC]+?*d7vJx4+wLD)#2&E:*[l7WgHMUq 7,ڋ&I7FN;IVΤ^NkZluGt9߶ YZ