freerdp-proxy-2.4.0-150400.3.20.1 >  A eGp9|ڣmYios|V;lV{qEtIOxV,0:ZTڵ- qcq|\iAXDԨ@ _.eY@'UA:5lIbպ0OtǢ8B j:/r| eO fmfZ)opۥ8$sA&.{ouڅ(tB< $ޠb86:)s8VvA]A nX\61b52d4968884b4fb426f77edc69d578a4aabb86f9e1fba37345ed15e2e681765e49f4aa2e96eec9fb835b2378bfeb97d88b3a626beGp9|Z*#rKě+[x>`=Ve[3b*Fvp-GsyҹeH,^ =Δƨa`/Tw[iA^L _iLs>rv?萚tfX 5'i9 Z8_!VI1z>Oƒfyq$Da&ޖw_-eֻ@]c5[kE8`2-mMyÍ!- NntL>p>e?ed $ W 5Va w       @Dh   ( 8(191:1FbGbHbIbXbYb\c]c^c&bc0ccdd[ed`fdcldeudxvd|weHxeLyeP zeteeeeCfreerdp-proxy2.4.0150400.3.20.1Remote Desktop Security and Monitorig Proxy ServerThis package contains a proxy that allows to select specific features and channels allowed for all connections passing through. It allows monitoring of the running sessions.eGh01-ch3bHSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Otherhttps://www.freerdp.com/linuxx86_64HeG881a3f0f45feb96d61104462d1ed913213e6c42ac8191005786295b1132a4cc6rootrootfreerdp-2.4.0-150400.3.20.1.src.rpmfreerdp-proxyfreerdp-proxy(x86-64)@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libfreerdp-client2.so.2()(64bit)libfreerdp-server2.so.2()(64bit)libfreerdp2.so.2()(64bit)libwinpr2.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c=@cEc\cN@bL@b@a^@a]aEaD@aD@aA@a@a`OL@`<@`7@_@_^@^@^^^I^@^@^T@^^t@]@\@[@[j@Zz@Z@Z`@ZkZWQZY@@YKYKY=0Y;@X~@XW local * #gh:FreeRDP/FreeRDP#6985: Support newer FFMPEG builds * #gh:FreeRDP/FreeRDP#6989: Use OpenSSL default certificate store settings * #gh:FreeRDP/FreeRDP#7073: Planar alignment fixes- Updated to release 2.3.2 Noteworthy changes: * Fixed autoreconnect printer backend loading * Fixed compilation on older mac os versions < 10.14 * Fixed mouse pointer move with smart-sizing * Added command line option to disable websocket gateway support * Fixed drive hotplugging issues with windows * Fixed smartcard issues on mac Fixed issues: * #gh:FreeRDP/FreeRDP#6900: Transparency issues with aFreeRDP * #gh:FreeRDP/FreeRDP#6848: Invalid format string in smartcard trace * #gh:FreeRDP/FreeRDP#6846: Fixed static builds * #gh:FreeRDP/FreeRDP#6888: Crash due to missing bounds checks * #gh:FreeRDP/FreeRDP#6882: Use default sound device on mac- Updated to release 2.3.1 Noteworthy changes: * This is a compatibility bugfix release readding some (deprecated) symbols/defines * Also add some more EXPERIMENTAL warnings to CMake flags as some were not clear enough. * Fixed a memory leak in xfreerdp (mouse pointer updates) * No longer activating some compile time debug options with - DWITH_DEBUG_ALL=ON which might leak sensitive information. * Added -DDEFINE_NO_DEPRECATED for developers to detect use of deprecated symbols- Updated to release 2.3.0 Noteworthy changes: * Websocket support for proxy connections * Progressive codec improvements. Reduces graphical glitches against windows and ogon servers * Fixed +glyph-cache, now working properly without disconnects * Huge file support in clipboard * XWayland support for xfreerdp (keyboard grabbing) * Improved wlfreerdp (wayland client) * Option to allow keyboard scancodes to be remapped manually * Improved mouse wheel behaviour when scrolling * Improved dynamic channel behaviour, more stable event detection * New connection state PubSub notification: Clients can now monitor current connection state Fixes: * gh#FreeRDP/FreeRDP/6626: Fixed parsing of FastGlyph order. gh#FreeRDP/FreeRDP/6624: Added support for xwayland keyboard grab gh#FreeRDP/FreeRDP/6492: Added clipboard CB_HUGE_FILE_SUPPORT_ENABLED flag gh#FreeRDP/FreeRDP/6428: Improve NLA error code logging. gh#FreeRDP/FreeRDP/6416: Http gateway message support gh#FreeRDP/FreeRDP/6753: List of pull requests to backport for stable-next - Added freerdp-rpmlintrc to supress a false positive as gethostbyname() is a windows-function call not a unix one.- Updated to release 2.2.0 (boo#1174321, gh#FreeRDP/FreeRDP#6381) * SECURITY: CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel * Sound & mic - filter GSM codec for microphone redirection (gh#FreeRDP/FreeRDP#6263) * windows client title length (gh#FreeRDP/FreeRDP#6335) * "Alternate Secondary Drawing Order UNKNOWN" (gh#FreeRDP/FreeRDP#6370) * remoteapp with dialog is disconnecting when it loses focus (gh#FreeRDP/FreeRDP#6298) * v2.1.2: Can't connect to Windows7 (gh#FreeRDP/FreeRDP#6299) * fix: memory leak in nsc * urbdrc: some fixes and improvements * build: use cmake to detect getlogin_r, improve asan checks/detection * server/proxy: - new: support for heartbeats - new: support for rail handshake ex flags - fix: possible race condition with redirects * Drop upstream fixed patch: freerdp-CVE-2020-15103.patch - Removed freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298- Updated to release 2.1.2 (boo#1173247) * CVE-2020-4033 Out of bound read in RLEDECOMPRESS * CVE-2020-4031 Use-After-Free in gdi_SelectObject * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` * CVE-2020-4030 OOB read in `TrioParse` * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet * CVE-2020-11098 Out-of-bound read in glyph_cache_put * CVE-2020-11097 OOB read in ntlm_av_pair_get * CVE-2020-11095 Global OOB read in update_recv_primary_order * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order * Gateway RPC fixes for windows * Fixed resource fee race resulting in double free in USB redirection * Fixed wayland client crashes * Fixed X11 client mouse mapping issues (X11 mapping on/off) * Some proxy related improvements (capture module) * Code cleanup (use getlogin_r, ...) - Removed obsolete upstream patch freerdp-bug-6205.patch- Updated to release 2.1.1 (boo#1171441) * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common * Enforce synchronous legacy RDP encryption count (#6156) * Fixed some leaks and crashes missed in 2.1.0 * Removed dynamic channel listener limits * Lots of resource cleanup fixes (clang sanitizers) * A couple of performance improvements * Various small annoyances eliminated (typos, prefilled username for windows client, ...) - Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205 - Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148 - Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207- Updated to release 2.1.0 (boo#1171441) * Fixed CVEs: - CVE-2020-11039 - CVE-2020-11038 - CVE-2020-11043 - CVE-2020-11040 - CVE-2020-11041 - CVE-2020-11019 - CVE-2020-11017 - CVE-2020-11018 * Fixed leak and crashing issues: - gh#FreeRDP/FreeRDP#6129 - gh#FreeRDP/FreeRDP#6128 - gh#FreeRDP/FreeRDP#6127 - gh#FreeRDP/FreeRDP#6110 - gh#FreeRDP/FreeRDP#6081 - gh#FreeRDP/FreeRDP#6077 * Noteworthy features and improvements: - Fixed sound issues (gh#FreeRDP/FreeRDP#6043) - New expert command line options /tune and /tune-list to modify all client settings in a generic way. - Fixes for smartcard cache, this improves compatibility of smartcard devices with newer smartcard channel. - Shadow server can now be instructed to listen to multiple interfaces. - Improved server certificate support (gh#FreeRDP/FreeRDP#6052) - Various fixes for wayland client (fullscreen, mouse wheel, ...) - Fixed large mouse pointer support, now mouse pointers > 96x96 pixel are visible. - USB redirection command line improvements (filter options) - Various translation improvements for android and ios clients - Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch to fix boo#1169679 and make USB working again - Fixed build for SLE_12 - Cleaned up spec file- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order to fix boo#1169748.- Added cairo support for scaling - Cleaned up spec- Removed patch freerdp-Fix-realloc-return-handling.patch - Added pkgconfig(libusb-1.0) for building - Added new package for freerdp-proxy - Cleaned up spec file - Updated to release 2.0.0 * Fixed CVEs: - CVE-2020-11521 - CVE-2020-11522 - CVE-2020-11523 - CVE-2020-11524 - CVE-2020-11525 - CVE-2020-11526 * Fixed security related issues: - gh#FreeRDP/FreeRDP#6005 - gh#FreeRDP/FreeRDP#6006 - gh#FreeRDP/FreeRDP#6007 - gh#FreeRDP/FreeRDP#6008 - gh#FreeRDP/FreeRDP#6009 - gh#FreeRDP/FreeRDP#6010 - gh#FreeRDP/FreeRDP#6011 - gh#FreeRDP/FreeRDP#6012 - gh#FreeRDP/FreeRDP#6013 * sha256 is now used instead of sha1 to fingerprint certificates. This will invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a new connection is established after the update * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372) thanks to @kubistika * Smartcard received some refactoring. Missing functions were added and input validation was improved (gh#FreeRDP/FreeRDP#5884) * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880) The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still available but marked as deprecated * Support for Remote Assistance Protocol Version 2 [MS-RA] * The DirectFB client was removed because it was unmaintained * Unified initialization of OrderSupport * Fix for licensing against Windows Server 2003 * Font smoothing is now enabled per default * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215) * Unified update->BeginPaint and update->EndPaint * An image scaling API for software drawing was added * Rail was updated to the latest spec version 28.0 * Support for H.264 in the shadow server is now detected at runtime * Add mask= option for /gfx and /gfx-h264 (gh#FreeRDP/FreeRDP#5771) * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)- Disable LTO on aarch64 and %arm to fix build- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return handling that results in memory leaks (boo#1153163, boo#1153164, gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)- Add Requires: lib%{name}%{major_version} = %{version}-%{release}: freerdp should depend on the same release of libfreerdp2 (boo#1129193)- upgrade to version 2.0.0-rc4 (FATE#326739) * Fix the following issues: - CVE-2018-8784, boo#1116708 - CVE-2018-8785, boo#1117967 - CVE-2018-8786, boo#1117966 - CVE-2018-8787, boo#1117964 - CVE-2018-8788, boo#1117963 - CVE-2018-8789, boo#1117965 - CVE-2018-1000852, boo#1120507 * Security and stability improvements, including boo#1103557 and boo#1112028 * Refactored ntlm_av_pairs API * gateway: multiple fixes and improvements * client/X11: support for rail (remote app) icons was added * the licensing code was re-worked: Per-device licenses are now saved on the client and used on re-connect: WARNING: this is a change in FreeRDP behavior regarding licensing WARNING: this is a change in FreeRDP behavior regarding licensing. If the old behavior is required, or no licenses should be saved use the new command line option +old-license (gh#/FreeRDP/FreeRDP#4979) * improve order handling - only orders that were enabled during capability exchange are accepted. WARNING and NOTE: some servers do improperly send orders that weren't negotiated, for such cases the new command line option /relax-order-checks was added to disable the strict order checking. If connecting to xrdp the options /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926) * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840) for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon * add new command line option /smartcard-logon to allow smartcard login (currently only with RDP security) * add support to set tls security level (for openssl >= 1.1.0) - default level is set to 1 - the new command line option /tls-seclevel:[LEVEL] allows to set a different level if required * new command line option: /window-position to allow positioning the window on startup * client/X11: set window title before mapping * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg- upgrade to version 2.0.0-rc3 See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1 * Improved and cleaned up the command line interface * Fixed automount issues * Fixed several audio and microphone related issues * Implemented AAC and MP3 codecs * Added Wave2 support * Addedd dynamic resolution with full screen toggle support * Improved redirection handling and certificate issues * Improved automatic reconnects * Improced connection error handling * Fixed invalid pointer, double-free, integer underflow, buffer overflows issues as well as other memory leaks * fixed X11 Right-Ctrl ungrab feature * winpr: Updates time zone data to April 2018 * added libressl compatibility- removed SLE11 condition - removed no_connection_to_windows_10_17101.patch - removed -DBUILTIN_CHANNELS=OFF switch - explicitly set -DCHANNEL_GEOMETRY=ON - Disable the new X264 and OPENH264 codecs because openSUSE does not provide them - upgrade to version 2.0.0-rc2 See: https://github.com/FreeRDP/FreeRDP/milestone/8 Noteworthy features and improvements: * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488 * basic support for the "Video Optimized Remoting Virtual Channel Extension" (MS-RDPEVOR) was added * many smart card related fixes and cleanups #4312 * fix ccache support * add support for memory and thread sanitizer * support for dynamic resloution changes was added in xfreerdp #4313 * support for gateway access token (command line option /gat) was added * initial support for travis-ci.org was added * SSE optimization version of RGB to AVC444 frame split was added * build: -msse2/-msse3 are not enabled globally anymore Fixed github issues (excerpt): * #4227 Convert settings->Password to binary blob * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc * #4276 Big endian fixes * #4291 xfreerdp “Segmentation fault” when connecting to freerdp-shadow-cli * #4293 [X11] shadow server memory corruption with /monitors:2 #4293 * #4296 drive redirection - raise an error if the directory can't be found * #4306 Cannot connect to shadow server with NLA auth: SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918, CVE-2018-0886) * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes) * #4527 pre-connection blob (pcb) support in .rdp files * #4552 Fix Windows 10 cursors drawing as black * smartcard related: #3521, #3431, #3474, #3488, #775, #1424- Fix boo#1090677 activate pulse optional component- Added no_connection_to_windows_10_17101.patch to fix Windows-connection-problem after Windows march 2018 updates. This fix is related to boo#1085416- Do not use xorg-x11-devel, instead buildrequire individual x components. - Only attempt to ge rid of __DATE__ and __TIME__ if SOURCE_DATE_EPOCH is not set.- Users can connect only once wo windows sessions due to [#]gh/FreeRDP/FreeRDP/4348 Therefore WITH_GSSAPI has been disabled until that issue has been solved- Updated to 2.0.0-rc1 Noteworthy features and improvements: * support for FIPS mode was added (option +fipsmode) * initial client side kerberos support (run cmake with WITH_GSSAPI) * support for ssh-agent redirection (as rdp channel) * the man page(s) and /help were updated an improved * add support for ICU for unicode conversion (-DWITH_ICU=ON) * client add option to force password prompt before connection (/from-stdin[:force]) * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146) * add support for "password is pin" * clipboard is now enabled per default (use -clipboard to disable) Fixed github issues (excerpt): * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4 * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width. * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush. * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main. * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface * #gh/FreeRDP/FreeRDP/4117: possible segfault * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program- Remove extraneous Obsoletes for packages that never existed in openSUSE:Factory or X11:RemoteDesktop. - Rename libuwac0-devel to uwac0-devel and libwinpr-devel to winpr-devel, as that seems to be their upstream name which packages are encouraged to stick to. - Remove duplicated pkgconfig requires (these are autodetected).- Fixed download location- Switched to official RC0 - Create wayland client package and libuwac0 package - Create separate libwinpr2 to be used in other packages - enabled gstreamer (currently disabled for tumbleweed) - enabled kerberos authentication - Update to official RC0 Fix the following issues identified by the CISCO TALOS project: * TALOS-2017-0336 CVE-2017-2834 boo#1050714 * TALOS-2017-0337 CVE-2017-2835 boo#1050712 * TALOS-2017-0338 CVE-2017-2836 boo#1050699 * TALOS-2017-0339 CVE-2017-2837 boo#1050704 * TALOS-2017-0340 CVE-2017-2838 boo#1050708 * TALOS-2017-0341 CVE-2017-2839 boo#1050711- Redo history by using changelog url - Update to version 2.0.0~git.1497095982.1dbd2d28d: See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d for full details. - Packaging : + Move to xz tarball in _service + Remove 3472.patch merged upstream - Update to version 2.0.0~git.1496304402.c42ccb508: See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508 for changes.- Forcefully enable PIE in CFLAGS as the automatism did not work.- Add 3472.patch until upstream #3472 isssue is fixed and PR merged this fix boo#1004108- Update to version 2.0.0~git.1477034991.043243f: * fixed kerberos authentication * shadow/rdpsnd: Fix race condition in rdpsnd channel server. The output buffer and format parameters are not protected. * wfreerdp: fix invalid VerifyCertificate callback * rdpsnd/server: decrease audio latency and make it configurable. * Add an environment variables section to the man * protocol violation: rdp_read_extended_info_packet * Added support for OpenH264 1.6 * freerdp: fix sending of TLS alert on NLA failure, add better handling of server-side NLA in shadow server * freerdp: add configurable NTLM SAM file option for server-side NLA * freerdp: make modifications to NLA server-side fixes according to PR comments * Fixed a windows 8.1 issue.- Kill off __DATE__ from built sources.- Update to GNOME 3.20.2 FATE#318572 - Add obs git integration. - Update to version 2.0.0git.1463131968.4e66df7: + Fixed memory leaks. + wfreerdp: fix name build without client interface + libfreerdp-codec: fix xcrush decompression, revert remote control fix + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and Morocco + libfreerdp-codec: make proper xcrush context reset fix- Update to version 2.0.0, git master branch id a7ca42e (FATE#319661), no upstream changelog available. * Warning: This is a git snapshot regarded as technical preview by upstream. * Warning: For xfreerdp, new /long-option commandline interfaces have replaced the old --long-option interfaces. Existing user scripts need to migrate to the new interfaces to avoid breakages. For more details, see: https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface * Add Network Level Ahthentication support. * Add Windows Portable Runtime. For more details, see: http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime * Obsolete libfreerdp-1_0-plugins. - Drop FindALSA.cmake: deprecated - Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch: fixed upstream, implemention now in include/freerdp/scancode.h. - Drop freerdp-CVE-2014-0250.patch (bnc#880317): fixed upstream 532c420. - Drop freerdp-CVE-2014-0791.patch (bnc#857491): fixed upstream f1d6afc. - Drop freerdp-fix-FindPCSC-macro.patch: fixed upstream 9148af3. - Drop freerdp-handle-null-device-name.patch (bnc#785437): deprecated, related implementation dropped. was: freerdp-fix-pulse-no-device-name.patchh01-ch3b 16958934462.4.0-150400.3.20.12.4.0-150400.3.20.1freerdp-proxy/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30864/SUSE_SLE-15-SP4_Update/68b85ce8df772b65b5a8d1fee1cfea0a-freerdp.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6019a6bf47f98a38fca930ef8c646b3f96ceffb0, for GNU/Linux 3.2.0, stripped RRRRRRRRRX%+{veZ1E|utf-86201f9fcac8e2f193cc296984f4c78e31bafc1f4b4657895b9c944b1a2f6d81c? 7zXZ !t/Kw] crv9w窑Y[&揅o{ ==npf%mHG (Al8^{pt:g;~&%eNv}[ q哜WB@ԃo3gawEȲI42EwϥY[RuHgg WX *G#CI&VpJh76il,˭ 7ӧJ8wH>я9~ڬ+u(;Mm;ok]v]0EW&h9+ɋErȚAE8۔ῐ!|Q^х-5 fV{!Ed%Z),RpXvx03qS{J!ܬɾWDvoØ'ЬvsECtgHa F\z16~5Jz~b.Z o?sPC njԖbM>S(`GYEZI8W*/cqrSH 2m2␽9ۗLjoK37:wjST 9d;#q/!/ΜhuU M i1}TB6c?{VLlPO>[ nEo΋d|4լoKh4xa?'#~< (j^ÅOu]tPת#gxGє'4M~%XZ 7"dw'RkfoeZ,?TZPy8MeUC”1 ϤOUl|j-6P~Mw=DQO SS1 NvKx8vUi)F f8HU2$J%hqn#{egkyEEcL4 PokV<؟DEn;^ۆ&(/ $m%l[9{ꉐxlXO%rnSf KCceAkh\\2L|!ZM~>'4]H =JP1L*ͯzOGbcۥ,K3 ?9Bk+KJҠ Uf@L c)\\΂Z\fr;R V ;վf`W;1aw1vY_d >!"`K/ 2' 4L$j!>ǡ{AˬxzqT C~ǔQJ N{6VB.R4lmc:puۥi{>fjblزLɘKgܨyr1mVSʏkTW`ą'z7otڥ ?b"LI dv _ӡj#]_,|/D4ak>t>HUĿ-4l?|>6{]Efg$vzzZFH9KxɎ7}6K?¯/Ӫb\nu7NT&uBpbI/B(ưӌr&>76Fиh9iu$әA%Y/!X7VCt6fu.]|}9jH5D܋A&(F/&RN%xu`7[uD?l1[4VI!ilE˖+RrqS? $o6/<˖fH%ҸZCcs27 ɑ%\y;De$}V[Qز^,, _\#U=;7]A!'!hwc( ;}e<,Nd6_ 10K9ݺ䦲n|2l8ܧ_IaC4 WQӔJ;3bh@agq8̓rNju 9.ʬkoo"\QWIA2*E$Ҟ" ȶ6yyқoG7p,Y"}Eф _GaoPqrosp=ʿ?.t]h𺔢@-`9zg$VG1w,G:J2[tq2QjHYd(@/fƄC;1, Acn^Zg\,KJ宪 կayܸ Z{7ޘ7O|kP]a|ᐵ-b{/r]3G[>#ge@ߘї C4UL?2IaCw΍W}[e e{p48YZ缼Gc~z_փ(7ҜK϶_FqcS)ɨG>Z/ZD7VZ-nr}߷QJ& fkGt3lS+lXaA{lA6 ]l"ʺ;8«q>Q]DXY[T_]7i7쓪0GNCB'mF ђ~%麲Nau@mYq/Oe: ccX(;G#T52ʂA|;p%wSiVXR)I;R7в82l8 soR}Q zA/{DD/! ^[wn/;AuIFF$M|Jgy4|8h xٛr༾azc]} Fz^(lRM Vf,0q  Dc}n/OBů;{/jcc5ܳ E/(M d g4.ߠ֋9;ewC"ę0mb'㵝hXN6z)i~ ̯ #TAVt͒"F=y 4B (I:"&Lf?6]ٙ!,+ɂ+ysnPqmnL/q*`;GR^ J%:nJJyAd'%4nV̀ѫs3`.&P~;Bp;U,nu>ط IoY;=[_%)8YS e7CCmo =z};IՃܸbh/G|~)Y߾0PW8G`Oӳ= UqׅI)Rib~ C]BU@t~r:ea LI9LN+_ak3.?+\ W4[FI4^^u\(/7u99Z|s#Zr(I(gϱ h}C $ᮇ'nC؉soZl|O\TQsC2c+]M9lJ(6ک_H:xl4YXpto;IZ5M8k)b[ CRXqb0 a\S*Y43mq{4V^LXJ&f`}[,FBעeYSx}Ժۼ~[uq+#U+ƀ%c*tuRGz =&ɔ:VJ zQz?Sh'I WԥqaK-*wow$21QݞѦ:dUa]4o]K\(dIT4L4i$y-`qr |ܥp@eym'ٓq^$ۮ:V" vdNww8iv>r&p nB E flE-< 9r3LPRҝ;GvI`Eq@fQWAoIۆ8`~ gor`Ws讻 A|) ȗ bJnh.(t1`#;uDK2vG%FC ݓY,1 K0^1B68ʶ^;X~aeKP4=Pw^n2.-?6D4}G)2P5!>AGT7ܾ6hg{齈KIo̤>rl0n@bЪ/uYSCR63?:t/#Cn$0{&Jxf-ϽhPFRTxhw{1ܧnA}lWD8Wt2 ?MF]cxu7d,~ezH*8*9*@'U(9g50'ڙNl\€HlT"#E2[4&qW+ `PE%]ZtϿ0Nv]^8(rXOO H;orUfOaf_I]t$iJD腕.;5ԲԂ:K4?U@ʹW9=lbqvЮg +5 nF8 t@^9Y|*|^̣6QpD4C&IJY0W7h%r1>L?˵P7hK x(l۩ >\*s'iKf{"R\$Z-cr&VDeĉ)w;=j>gDiU3:&Un!]{_cIp+FI: ۑsG2]xf=qg7&pq^sQEKFSslomI`΀F:CjƵ|.-I2]ɟă bIjӁAh~Uް5"xu9RL=&iǤ^TR̀T O.(mSgh,_|xN 4zä̈З? J/tɻ|(sFS-hXiQTSlu/LthAՙ0k+m | Dﮍ$y:dp^&5HtO 6>]C{Z@ۆ.;67g3HR/]މ,ggT01܉ׁd@Nߨ -{k[6rrf+~MecyI w9~|LeolulHRtr t kƏ .?~ R-# *wWL} ETǑ%<Vuә.JXf`'V)Ƒ]]8aAZ*p.>,(MMnAO' u8sَ=S";j=fR۱iȋc=贝m[,R(~<ނqpjJEv"DHrFuUj;VDA᫢&Rj> M̾VH=˥00XǡThc&4ձ)gR!LD0|2,tjQ4 sɘn|^3zNnGEV<Jj&{D*PFUÅ+CNԍ|›v<"-3M܃փ4qWh2^-Y)dsAX;/A&G0q(4Nh P&]2LV h6&&1b Jj m[>WaJ+3g(OQ˜e!\@b%Jkt߇t3\>gVq SRP>iX$$OsN6_ X/Q/5\`U Q>1к5`g5ъC 0OQ0JZP]ΛrpɈ立Vp NJI~,-C9ACtŅ{v;,W~c-~SB#9.]0CJ+"7D"o.H)iD/H䵫Y~ۡ #Z ˙گu)0nZ|pUXcLf"N /M*m$HX'ӱ5w' 5'e!_z6)q?'6ah;CԳ>+HȩlK˛+KYΎ,Q$u޶x)kfH[m-[LHd3a&0䎣  Ij&b/vusAnT~r.!]>Z]$Jw9.D(So S3WHJ{epr׊]M J)4W Nk%\&˙s1%FBON^Jd$KBL-1X0z?bc+)gň99Dk~Z0lF3%X\p/7 Y}"|gyD?'@ 0pL̡QH_= qo7 y)k:efV.ddqCo{c5ibhw+$tX3cU9 =%rhK(!M?Ր7I1 ~#{qzyZCsc%)ݧs Dɱi*2IWi&VVǢ>LN֨v~6mȵt"f,;]EdȾV\⩢٨]ؽƙ\0m5e]XΈa%|s ڽh᭍A$BXlCukO`q g|n)xk)6tDl`0C13:Va6NPR's6>BǼ<<1\Jru*"/I~9_XVxwIv]^<387mRkch߲2gjak&*p4 e8][YOR\ S+8'fFWb$BRGE>ʭH؅ fUHiE5giEeyoe,{*gy 2WgaLybpso}41"~(s~@h@7XiYaOiw) T? J$~ ,6MQe8= k(FR늋V]URyNn ?pW[ 'ɠm ¢] ֬Zr,:ߩoA>o,2fW`7r6rR3氻5twm=m]Y4з2D{\*qP ,ІZ$B?t:6nn;<=n.pMkc$!̈N3иaa2(:n!KVl1XCwG)Bu[*Gh3Y fMT@(I`]SM&=h;Mp"ޞ(-&IoZ 7s28Qݕw~zjuyҝt`4E|biesmGRK&?Mܙ0ʳ; # 4u#%X/z\|]abύ:DU&t)?g'=)J,5s囄C]3wmh8-m8 np|]"wNSi\~:*IvL`jdle'ֽZv27Ov72[Цn#X؛^L WLn. l.Z7ՙ`[Py[?9.Bh?horΣirz$S4RkQ鵐qqUރ.3O:f* k ;0}DQVNQ?:pi|S1`qSdBmnZs& ,x^҂1v 6n.#>i (=2rk` [&P ]{X*ָrց.wZ PYHCto;Ӊ??{8!F\e[24бﻎOb&hOK〯=2 O7+$Lcv WzluHӋ2yݸ%XS#jb{]W`Ʋx+Z !2U?¶YTz5cܰC!X{|rYZHhʒ1jP,aέ$њ,[9_~mmv\&:pQ':1WfR@u@IfV\/=SJ7|SdCÂЭ_A3y R6j%V<$1^Z~SJKc|P&eq ЦǻWzV;'25=o^תԷU\&{T gÜS V\!Nw$;& Oc]Jj$!v=Cl z~4U(e}2HK]kO5A4 2FPvY+t~+49^rIU w&kд v[>p\7<";笥вMew%:/.,ԉ4-zkz#&Kd⍾4B&Dg'v*RMd4Jk( ZGFH8lY{I t[@@p}¤6p)TB)#rb.IByYI@}xy8ܳ._T*>lJDE1<<_km;0G*Djx"Zꡍ@LI/ыkn?ypDtA5 |Ul| ΢<+iE=Sח)NXsWIN%:g 0 <ލ0'Tq6I f!).pfqSZpXį_f!a m\Lք"j8d@gGmg2jnnČËg2pTr}-̙~JԊYw|&=M`$DL{G>A@Rnj>"`@#NLjߘ2ZE@ɖ&roŘA)CBMD.G+ 0YA){OOƅ>mF?JJaۖx&cgqE XWw<֗ 6O WNCXq6 Z|&˱γ}{39 ʾ+).63bKɢ 2=fJ>"hM7_b VY'x[9\o*m5 ;+M.dzJ БĚ 7&r/rJlmW3Aq/{Q_UAC"խWg:yrU{[1H%ݱKNtreY26~!6SW{&Z[]LcD=̽|^kj6^|O}TXu{%Q=\e21#'R0z)etGNZ;t0ZZX ^ŋ{2Tös4K;@`~[ѥxsnDz4 /Ö65#c2BO;cPyJ8A͕*7|6BpٹF=-ZJ]ӮzwMex*Iv B0l#WkIUTY&A*J{&<} ںCuA*VF[VSe2YB~' .=N܁^e'VEuS@(?\ݴ/,jBvЇk(1` LIh^ o4gx~8>2p ԮX!kst_U9"]HUoY[W_K|^=vؑ(% M53T.P,E "1[)x=JnKw[ f a7 ,?+z)?(ze' ZBjX}·O)li)XCUB#@_'8?^)ǰZ:$F:%;V(9j8f HvW8%]hƌ :3?`I#=`MFhIH1*OzfmRgt [bw˥ɸ辣^P͎EF Ki;84}Hb /noz)ˮ3C)@l(=J,Q"ΪOg7KCP3@/M,D91˨2nR;f?@)+?p`9? L PKE .Y_3@Q`3cgOߥ\ բujr&ޣ/5L#Ga^b3t6H K9KF]ͩ!MDa UICx 7M@/;cg얁ϔ.7v_yH 4XCVTV$6x5]=cqϖ_, .- )|;C4ir bWo'4r??u°yҮ)|6ͳ~+BQt dFN@PpB4Z)^uN=͗oMq*C|X!򥑪 7\=K5o76nVh~s|1xf@[jZh>*tl R6NL(8HτxgP6#/s^b$b龫I} Ыrgq8MI&8l.ʎL{=,Χs]}6=D,pL Wn*DЭ=n!Y c~W`Xm"aMɖl#y xLww59*\}Um9q[bÙAg|Kuϧ?Q+jmSo[Hp¶/HOc6,bE,sQ"_=x5nT: u'o_ WaSJW%*xc)+ØK.$C_S|O-R iQQún.dQ?oCv!T#V dU?H~]{ %dٍꗻ*6!7I`' %Q@!jBƲa&^D N,o.+Sw_pGI5:*翿3hYnDj,NB/$AvtqcE&"p%8#_*2ӹv [8{ ~KݾL6`nئJ@Fs*o FN!8¸5xd$2B4E B4v%~5HiAp0i+"?.8%)vCR?\eilOra.؂ "< n:<2m>{g:m=@Qȡs%J>,u׾yT'yJ~E$H#XZŷX_*#wUt&E).lFH06f/^g8D+9ūKxL Ifioztpnڜۭ(^~;^T,51`"b%[EIq>d TQ^mtT)ێ]XRbB9v%RF /9*2//IcpK#y_ּWl|%n]w\h'~ei>?Ơn$5bBT ߿u6,؈6>k >]`(e#9ٯ#/ ^j,=,X~ْ.CC(Rڝ*2TiPb۟W,fA`u}@pKQ= E6_|\rO(3$>`bDry#!f^ȀIj{ءR\@*.ԛs GߵKsEg ȇ 怫hۼ/hO~4$>nYeHآ?QȋK8=jCM\Y~g_$aRρ㐌?doFO-T| [Æbs+lo"55H̐'RJttsLD#.TYq):Iobrj1R 7K!Op8DL a,7s}!(n̳Ushu0EȤ͞ }SL\`;{04:䘝K:}Rf?ޘʤM΄=V8wx+Oz|UI!(o`6]:gG]s1_+9m=2tOoTbK"$ a {!|5KedY7v켔|}ǒ̙>Δ)lo,gE Gޅ%#3TT^R(_$f k{;v;{FTڧ kY^'UG;(TfN$p 5ǹ$u_&X^ .akJ|w K҅vmU?y<ѵ<s.z@yişѤl,MJW@.jgH;Izhg낈y@ _=M+4a#@XH; g^c,`rǨxk1G; wBo(? 3ȪGʛEK'&_D$QpA Ԓ' [ݰ+g\q!Sk ( &h-9kT 6CW20# PW`2~{T-P77YuTҪȞWj,-jNOŌ#*(t;5\\\%Q3 |JMn%ؚ0$olv>NzEZ_ɯ=a7HL 'Wr̈^|sN,a DSLn +1k"] 7pqYR$-!!g8^DO˨Rሏ^,B{D5dKJBz 0ѤpzʠJNeEy)8RkmB&s֩i>Ia;@`|.&J6g:8>IϯZx|A y\yZ|*hlA!; #oBht[xx,YJ]yxL\ZRRrEKZ8ՠkݦzgI>ipHqqhQbO/I-k?A37T}e]#%UWL N[[WY/tW4faэv!>C40WPZ5Soй`+tPg۪g/WRVn-m7+2Qk0=&ޚ>w3N(5Rt _)A鸂Mi(ϙ W"tMuc/{K/'l:oG@)pH,}NwªCǃg5{h L vVDeyJ$>wPxcA{;.ЧzmRk3BFa08Tp 7q#45@Os;ۑhT.*\).q: 7ghlS#(U R{qL_AIZPwYrRȆjq ѻ9)'XJ5D.ImOx4TlbX{ת{( R ӚeeC$? bq`uy]i5sB;krX惡Tj]+?MmXCQ#,: 8fv:鈪llLNjFԌl6bMUy4qt͇ q~c1hPN"Қ!%FE"Hq PA [Ee=y8^3 1Р|5fb*CA荐vK*K7xMTK:PNp0|q5ߑeAqp2ã5H[/h+PY8V8J9%u=KjN!;L,YecGJe(= 醿 )C/@&;rD,mHm76t-1/jNfꆄc\U$urœ/\,ո]qg !b! w5}oM 8? ߌk=4gf\ @1ۧDr$ q `Ctez]tAXi 6|LN @~f 0S&CܫPO'b;%4H@qmU[_yv{&g1=;g If!&,fגf(l_)3߻Qc(iAŒ-5Vmw'i41t+gL{c+> XbCaG8: &Gk=~3/䈈!/1Hab*Jփ{om/vv;GdyڑKpNylFOo3_P2nWn,[#SF6LS8`(!pZ6/r`)XΈOһ;>7DRvIg/w7f}| IQLN)wq JK:yY2Zj[њiDE9mJ(2M4[?F>%._tKϰtrp~"1l0eG 8"/ܱֆ\Ts@1v`RefPc>!U9Pt{m%(3_DJDG}AD+VtZZ)>3au}f`iE韀Z(P_VPz:m%zG4pChP }ݚ)wZrjj/)CE6 ͜/%JUX*őh؛:B FY;&m+29FeԞ"}NGD_tҾX:MVxtÍhW7Cj|f)' K#T [fK$&~}<פi8}f3"h֒9֙Ԃ` X! 5dE_aq婦 ~ܘS,z{1]=n仲wv$46-;Ȳ Oa(,G %K tFEUU)r[mP2`pEy,NJME4)xjP wSlU}p.LY^f2_7uc uU;0W&b.C$;rVe8+6~&F`X;uВ 7YKَ3bz4{n6]|: })Vת|W7} "_o3mR5+(iEĐ$!z'BIJYך'?`_)蟩u{h[ɑ@!,,%c6)cN|s@;b#ANܐ)NycnQ}|;J2ы~D;v8R~6m8n!5)"B>B Mb!S*Tg5s5ǥLgDe3`Rpʼn/&LuV5(qFn,m˟ػp7}.1yU{ǰQ4RD ml]#^VzZ yZI/$!vN'Ɓⰺ g:pD&,y׽jeGJ3xRl3'FZdy نՕ8)WuWIIrR d SIvbS [˾KZ~q9=w |Xϥ03:SV^+iT-jg.-fv8A'Vխ d?lx<@|hg{yCWn9R+[ r+> QO|j֕ܞדlum1.0̑6?l/ߥb'w j]|mhXV%+R?'A)Q]o|AMre\ls( 'jhͲD{[{eKۺXUdŞyZ:2zK9\]*=& oz9q lHX.zٱ@z 'kӯAȻFK!~R*CY!Sgmc[^ 3_+ȟt󿋹L*8$M#f^:e#V5N(=]қMPm&}.} Uğũ|1.F(s@\z_ uXߋZɗuI\fV 1CUS h"jG/CjB8ظjhe/ٞ #p xu0m h,s6twMkxJKY3  )+᝔mzX>: YT ϵPc.1p ^ e >A".m.`*BZ610pa>q*g9,%!>(4/MσQLÓ7'y@:(zo^YʔG:Dhy6 M2L!ޢ#C(q'`\p!3 ++ l7Xz;S^dl)K ~K=')˺wFh v*ы*VMh0Eq~d. iڎiȞ<sq%$+L*)7{DeԌ ]2Ig]mUwTת)Ck1R1W 㷄RFQEhБϞu/$Mh~@Mߛc?Hv! R[YKpP+l1g*n<{1kW6$rg*HUmT:+͖b(ԧ 1]O g38Li,z_]Joa x(kD; nlc\ySkc6 ED^ַRd'D>nvihwh:)W:-̝Qcy3Iyv]z)SXµ(4Iƣ ,H,j !0%Wql(\#M95vA`|*3~~Fl{m:)U(^m275 Κ6`;?-Q>±  EŹ ]nBmMJdZ"^h%3~dY@~2]"4H6*[>CGt1ksdFܲ;9J~Y貼D.r @059g/ow-'xa]?:jhpp@E*ԁ0ZUF,pUvw'®\~bTKT>rn(2@M O.e,NGWn q :c12we 8e`:?2٧@5G5a*\~Iua =p4g"!T 9e2srȰ͚٨e?+`g 0?ʛI+&M}]lQ WXܗ[yYD%sC4%U.?֜ Li`qGfMhD(Ph~َV%l2jGzK-?&M?WV/Pƻ\J 5ֳo]D}d;oknat Fݚl,0@U{q4u584y4uIoz9FO 5o@Q!bŜ[X6gzGŎvvX1%|ַĦyc4'Qtvl)$P5yFJ_aN>VnɆO&:>fa$^`Ϋ1{ah+>`--ї_j*\l@WuaOLSLt%?[ti.],]ydG.2ֈwӂi |g%Kd_aAxz\#C /˿8:E0)"$%J.=;2ed)'&D!ţ')oqKIPA-!^V~#ZfJ 9`je7ijq hHp_G;HQjN %UT>sX ¼Xqi,(\[},MK?~H S2a:l+_(pD[tFs|/|Hr= ;zKPL O-YdAd3I4˝EAPuKM[{l\i_I @_׫/(ZֈtCް`ͻdFV1݃d}sH<~po*uZ/c.#{s|.9pNQ^/Лv+>ԒZ\y(yBf]?X'*nm vY < nq@[cbb^sL)k@ȀR[haZA}ks @kd\PEVdtx#m2 ckԑ_3+0o2X׷T>=* $WMcg eaYhV~o>mk\OZg90"9:|*n^Vhj$$28m4BB ڑS$nfZ8΁w[p75R_"b$ ^:|<H0'@]SNX=.+ZD *_1jf^&/,@jMbI^Mۋl?!(Ԉ!': i^YW$o\"eVFi}HX&N"6PdA41;DJ&|/,&rXs&gxs*uyү G)Oce:3q|jgLbOp!+gIfΠ%]Ą0EO|,ڑ_OTf@,(mXc6XWlwy*ARGxTs#ܑoKo:Q)Oaj!Ku$5!"]BUMg0ϓ$ttz~SBh4)c nWC}=ℓo[ >76ц`~%O k.,&n;oM Yy!1MS#+5جuq(CE^=_+DPfGQ 4$Wo{ټgߘw/ۣ8 wTfSlSLzx2@]?ġΤ44= 55ƚ۶.G{g/jZ[Y#;Ēx)GO(;zX#>'Sɚo Ȁ9z?uQ44"v٭ [A0@}TCQ}fcᷯ7Zs,MK 3P=;q6gsIzjC}a5!@:hJ.'v {=|co>4/31BYX< iʰ:*ݯ!v ⾌i 4d+.6s M6w3=/L6l]XR}! 7Lm5">vkOpMEވ k`NmFedw4yDv& xsMAtB^tܪc0<ҩYO=' XƖR*9K &h^< SFt7_Y ۇ0SyNèG7x0#-m>/+m$rP[LfH))8&#:WSN՝Y0 e42p܈nf:hAp.^ⱵZT;Qޘ,̔bZrx)&nT5m~f- Q e@@Zwg螷nQp@\_ \4 >фr#B" p[U~ԞoJ_ #3N ?vZy خ`Y'gnI =5Z5;xԯNF҃R3 3T{[Y|Uϱ*Ŷ,3DǞ _#?5d+v@|ǞHLmwKM+=GcBYWUo,k_}=)KhXZ(D=݂f-ˁf<)hRPp U%,"_ޝjd5fO|Ɲic;9tåĢct4y% 0ի3V cFSvb-anDTfupY&Ti?kc<˟/ eZ=y u~SS F.tWW4Y nZMEir!*umr7Y;M!Hh6Ƣk Pp2:j*7_Ø;[QMkvu3%¾ 3U^pJl:mcw%qsN)8L~T\kesl)eîw'%𪨱|H^Ɲw?0tl!0z+: ,OkWGSU%>E!ҍJBGlTj}b ([z8 &6% b - *+cúNԽz!E/ܓj i;(Q阎#p /2 ^OԮ$r//#:J\p50ڮ2˂-U:Ҧd}U4ՎrS%\+/3R³_( w !vΊbnۖrU(c" 2F8qP!(MwpTJ3&:S j >$:%cUG̅y;[< DdW[uHk]@!y#&ҟ1ԆYQ^^V]mv`׀螧k>\}7|`-SY2ÙE(7j\݌?! /{ ?+E&PKW6`Di b&m&jr!w_OK_vuUk휥xJ܎[&B4 u{=Na#R0 n/렝Gl;XТIQbK zUcT$CDȶH?AjR+LT#Dt/]IFq7q~rF|Rљme @)q2$/J, |JB:r{ JBbQ-#ڬ&cMw9;Wv-` lX% ngV3g-ka\О`,wN%Y4pr\cTDi,Ǿ!8fڴ]cc)˒1ImNd]O H>7\?ݘ6ǒ-צFH;3y,u.搄뿟 q?sm ędcr]k=U:S+u&%V