libdbus-1-3-1.12.2-lp150.1.28 >  A ZD/=„ϹV ˏ_%۴|v0:,1Vl8sTk>M=ĒN]?zèGK!Нh;(EEq_B\9j%%T$H^rj&algs")㑝y9puz>cU̚+p {]zޙlb^.ˬ8QnrhMK:,A;SIy \"aDdOb=I &X&HD>3c6ab77daaa982f29a0c690dd687b47ba2c19e642ea299fae4f8f1f08ed4cce77ab9acb81406aaa7e41f53854e6d45bd9b5876eaf5ĉZD/=„T1tUF^\\H|eR6SFwa ^D/~8֙"\;)8Kw"؏Z &n[B^E_Kc)SSk eF/V}=($D 5%f kG,QUo?0G9UNfwزrO6d\ep@"<?",d  : /5< `  r         4 a  `(8q9q:q>@FG H0 IT X`Yt\ ] ^(bfc d le qf tl vu v w!D x!h y!z!!!!"(Clibdbus-1-31.12.2lp150.1.28Library package for D-BusD-Bus is a message bus system, a simple way for applications to talk to one another. D-Bus supplies both a system daemon and a per-user-login-session daemon. Also, the message bus is built on top of a general one-to-one message passing framework, which can be used by any two apps to communicate directly (without going through the message bus daemon).Z'lamb15openSUSE Leap 15.0openSUSEGPL-2.0+ or AFL-2.1https://bugs.opensuse.orgDevelopment/Libraries/Otherhttp://dbus.freedesktop.org/linuxx86_64AAAAAAAZ Z Z ZZ Z Z ZZbf87feef247058049081d960d1a2524a6913000f87b8e45e7406b68b642be3adlibdbus-1.so.3.19.4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootdbus-1-1.12.2-lp150.1.28.src.rpmlibdbus-1-3libdbus-1-3(x86-64)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdbus-1.so.3(LIBDBUS_PRIVATE_1.12.2)(64bit)@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1Z.s@Z-!Z@ZfZ }YzYY_wYV=@Y?X@XX@X@Xs{@XJXIK@XF@X2W@W@W@VV`.VV@VKUYUeUY@UTء@T@Tto@T`T*@T@T&@S]S@S@SDSd@RRRΏ@R@R@RsRUE@RR@RNRH@RB@R+@QɆ@QőQőQyQw@Q']Q"Q"@PP*P*PP@P{@P@PqnP;a@P@OE@OO@OOr@OKp@OG{OG{ODO/N@N/N@Nu@N6@N N @MӴM‘@MM3@MMwkM hL@LMLLLJL and rules in dbus-daemon configuration can now include send_broadcast="true", send_broadcast="false", max_unix_fds="N", min_unix_fds="N" (for some integer N). See the release notes for 1.11.18. • dbus_try_get_local_machine_id() is like dbus_get_local_machine_id(), but returns a DBusError. • New APIs around DBusMessageIter to simplify cleanup. See the release notes for 1.11.16. • The message bus daemon now implements the standard Introspectable, Peer and Properties interfaces. See the release notes for dbus 1.11.14 and spec version 0.31. • DTDs for introspection XML and bus configuration are installed. • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but never uses Linux abstract sockets, which is advantageous for containers. On non-Linux it is equivalent to unix:tmpdir=…. See the release notes for dbus 1.11.14 and spec version 0.31. • [Unix] New option "dbus-launch --exit-with-x11". • [Unix] Session managers can create transient .service files in $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12. • [Unix] A sysusers.d snippet can create the messagebus user on-demand. Miscellaneous behaviour changes: • [Unix] The session bus now logs to syslog if it was started by dbus-launch. • [Unix] Internal warnings are logged to syslog if configured. • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured, or to stderr. - Enabled "make check test suite" - Patches removed, fixed upstream * fix-upstream-drop-install-sections-from-user-services.patch * fix-upstream-increase-backlog.patch * fix-upstream-timeout-reset-1.patch * fix-upstream-timeout-reset-2.patch- boo#1027201 dbus-daemon not found - boo#978477 systemd reseting under heavy load * fix-upstream-timeout-reset-1.patch * fix-upstream-timeout-reset-2.patch- boo#1027200 don't generate machine-id in %post systemd will do it on first boot. - swap usage of /bin/false to /usr/bin/false - Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1- No need to set --libdir anymore now that prefix is /usr/bin, * fixes boo#1047532 - No need to set --bindir, bindir in dbus-1-x11 was incorrect - Other fixes required to properly change prefix - Don't pass --with-initscripts we don't use them anymore.- Update to 1.10.20 * Fixes: + Fix a reference leak when blocking on a pending call on a connection that has been disconnected (fdo#101481, Shin-ichi MORITA) + Don't put timestamps in the Doxygen-generated documentation, for closer-to-reproducible builds (fdo#100692, Simon McVittie) + Avoid an assertion failure when connecting to a semicolon-separated series of addresses, one of which fails (fdo#101257, Simon McVittie) * Documentation: + Update git URIs in HACKING document to sync up with cgit.freedesktop.org (fdo#100715, Simon McVittie)- swap to /usr/bin bsc#1029968 - Add the following fixes from SLE12 * bsc#980928 increase listen() backlog of AF_UNIX sockets to SOMAXCONN fix-upstream-increase-backlog.patch - The following bugs were already fixed but are missing changelog entries * bsc#867256 (No longer applicable) * bsc#916785 (No longer applicable) * bsc#1012564 (Not applicable) * fdo#90004 (Fixed Upstream) - Rename the following patches as a tidy up * dbus-log-deny.patch to feature-suse-log-deny.patch * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch * 0001-Add-RefuseManualStartStop.patch to feature-suse-refuse-manual-start-stop.patch * 0001-Drop-Install-sections-from-user-services.patch to fix-upstream-drop-install-sections-from-user-services.patch- Update to 1.10.18 * Fixes + Re-order dbus-daemon startup so that on SELinux systems, the thread that reads AVC notifications retains the ability to write to the audit log (fdo#92832, Debian #857660; Laurent Bigonville) + Fix a harmless read overflow and some memory leaks in a unit test (fdo#100568, Philip Withnall)- Update to 1.10.16 Fixes: * Prevent symlink attacks in the nonce-tcp transport on Unix that could allow an attacker to overwrite a file named "nonce", in a directory that the user running dbus-daemon can write, with a random value known only to the user running dbus-daemon. This is unlikely to be exploitable in practice, particularly since the nonce-tcp transport is really only useful on Windows. (fd.o #99828, Simon McVittie) (bsc#1025950) * Avoid symlink attacks in the "embedded tests", which are not enabled by default and should never be enabled in production builds of dbus. (fd.o #99828, Simon McVittie) (bsc#1025951) * Work around an undesired effect of the fix for CVE-2014-3637 (fd.o #80559), in which processes that frequently send fds, such as logind during a flood of new PAM sessions, can get disconnected for continuously having at least one fd "in flight" for too long; dbus-daemon interprets that as a potential denial of service attack. The workaround is to disable that check for uid 0 process such as logind, with a message in the system log. The bug remains open while we look for a more general solution. (fd.o #95263, LP#1591411; Simon McVittie) * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching was disabled at compile time. That test is not expected to work in that configuration. (fd.o #98665, Simon McVittie) Enhancements: * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian stable and Debian testing in addition to the older Ubuntu that is the default (fd.o #98889, Simon McVittie)- A note for scripts bsc#974092 (remove sysvinit script) is already fixed here.- Don't restart dbus on upgrade - Includes temporary work around for last version boo#1020301 - Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually start or stop dbus.- Add systemd unit files to start session bus via systemd - Added patch: * 0001-Drop-Install-sections-from-user-services.patch + remove install section from socket unit because it does not need to be enabled explicitly (see fdo#92402)- Requires systemd >= 209 and drop the compatibility pkg-config names that don't exist in newer systemd- Drop useless --with-pic which is only for static libs - Abort installation when user/group creation fails - Avoid calling %service_* more than once- Build the dbus-1 package without X in the dbus-1.spec - Move the dbus-launch.nox11 to the dbus-1 package and install it by default - Build devel-doc package in dbus-1.spec and don't build any documentation in dbus-1-x11 - Make dbus-1-x11 package contains only the X11-enabled dbus-launch - Fix some rpmlint warnings - Delete the dbus-1-x11.spec.in file, since maintaining it is more complicated then keeping in sync a dbus-1-x11.spec file of less then 120 lines- Create new subpackage: dbus-1-nox11 - contains dbus-launch without x11 support - Rename dbus-launch to dbus-launch.x11 - use update-alternatives to switch between dbus-launch with and without X11 - Solves [bnc#934214]- Update to 1.10.12 * Security fixes: + Do not treat ActivationFailure message received from root-owned systemd name as a format string. In principle this is a security vulnerability, but we do not believe it is exploitable in practice, because only privileged processes can own the org.freedesktop.systemd1 bus name, and systemd does not appear to send activation failures that contain "%". Please note that this probably *was* exploitable in dbus versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing check which at the time was only thought to be a denial of service vulnerability (CVE-2015-0245). If you are still running one of those versions, patch or upgrade immediately. (fdo#98157, bsc#1003898, Simon McVittie) * Other fixes: + Harden dbus-daemon against malicious or incorrect ActivationFailure messages by rejecting them if they do not come from a privileged process, or if systemd activation is not enabled (fdo#98157, Simon McVittie) + Avoid undefined behaviour when setting reply serial number without going via union DBusBasicValue (fdo#98035, Marc Mutz) + autogen.sh: fail cleanly if autoconf fails (Simon McVittie)- Moved dbus-run-session from dbus-1-x11 to dbus-1 (bdo#836296)- Update to 1.10.10 * Fixes: + On Linux, when dbus-daemon is run with reduced susceptibility to the OOM killer (typically via systemd), do not let child processes inherit that setting (fdo#32851; Kimmo Hämäläinen, WaLyong Cho) + Output valid shell syntax in ~/.dbus/session-bus/ if the bus address contains a semicolon (fdo#94746, Thiago Macieira) + Fix memory leaks and thread safety in subprocess starting on Windows (fdo#95191, Ralf Habacker) + Do not require systemd to have a service file if using it for activation (fdo#93194; Simon McVittie; backport from 1.11.0) + Stop test-dbus-daemon incorrectly failing on platforms that cannot discover the process ID of clients (fdo#96653, Руслан Ижбулатов) + In tests that exercise correct handling of crashing D-Bus services, suppress Windows crash handler (fdo#95155; Yiyang Fei, Ralf Habacker) + Explicitly check for stdint.h (Ioan-Adrian Ratiu) + update-activation-environment: produce better diagnostics on error (fdo#96653, Simon McVittie) + Don't fail the build with an unused const variable warning under gcc 6 (fdo#97282; Thomas Zimmermann, Simon McVittie) + Merge dbus-1.10-ci branch, containing backports from 1.11.0 in build/test code to support continuous integration (fdo#93194, Simon McVittie) - Avoid -Wunused-label when compiling with libselinux but no libaudit - In development builds, allow OOM tests to be disabled as documented - Accept and ignore the --tap argument in all "embedded tests", and run all automated tests with that argument for better diagnostics - Fix the systemd activation test under CMake by installing the required files - In Automake, fix shell syntax for installcheck-local with no DESTDIR - In Automake, don't try to run manual tests in installcheck - In CMake, don't run manual-tcp test as an automated test - Add travis-ci.org build machinery- Update to 1.10.8 * Fixes: + Enable "large file support" on systems where it exists: dbus-daemon is not expected to open large files, but it might need to stat files that happen to have large inode numbers (fdo#93545, Hongxu Jia) + Eliminate padding inside DBusMessageIter on 64-bit platforms, which might result in a pedantic C compiler not copying the entire contents of a DBusMessageIter; statically assert that this is not an ABI change in practice (fdo#94136, Simon McVittie) + Document dbus-test-tool echo --sleep-ms=N instead of incorrect --sleep=N (fdo#94244, Dmitri Iouchtchenko) + Correctly report test failures in C tests from run-test.sh (fdo#93379; amit tewari, Simon McVittie) + When tests are enabled, run all the marshal-validate tests, not just the even-numbered ones (fdo#93908, Nick Lewycky) + Correct the expected error from one marshal-validate test, which was previously not run due to the above bug(fdo#93908, Simon McVittie)- Update to 1.10.6 * Fixes: - On Unix when running tests as root, don't assert that root and the dbus-daemon user can still call UpdateActivationEnvironment; assert that those privileged users can call BecomeMonitor instead (fdo#93036, Simon McVittie) - On Windows, fix a memory leak in the autolaunch transport (fdo#92899, Simon McVittie) - On Windows Autotools builds, don't run tests that rely on dbus-run-session and other Unix-specifics (fdo#92899, Simon McVittie)- Update to 1.10.4 * Changes between 1.10.2 and 1.10.4 - Enhancements: + GetConnectionCredentials, GetConnectionUnixUser and GetConnectionUnixProcessID with argument "org.freedesktop.DBus" will now return details of the dbus-daemon itself. This is required to be able to call SetEnvironment on systemd. (fdo#92857, Jan Alexander Steffens) - Fixes: + Make UpdateActivationEnvironment always fail with AccessDenied on the system bus. Previously, it was possible to configure it so root could call it, but the environment variables were not actually used, because the launch helper would discard them. (fdo#92857, Jan Alexander Steffens) + On Unix with --systemd-activation on a user bus, make UpdateActivationEnvironment pass on its arguments to systemd's SetEnvironment method, solving inconsistency between the environments used for traditional activation and systemd user-service activation. (fdo#92857, Jan Alexander Steffens) + On Windows, don't crash if or --syslog is used (fdo#92538, Ralf Habacker) + On Windows, fix a memory leak when setting a DBusError from a Windows error (fdo#92721, Ralf Habacker) + On Windows, don't go into infinite recursion if we abort the process with backtraces enabled (fdo#92721, Ralf Habacker) + Fix various failing tests, variously on Windows and cross-platform: . don't test system.conf features (users, groups) that only make sense on the system bus, which is not supported on Windows . don't call _dbus_warn() when we skip a test, since it is fatal . fix computation of expected . when running TAP tests, translate newlines to Unix format, fixing cross-compiled tests under Wine on Linux . don't stress-test refcounting under Wine, where it's really slow . stop assuming that a message looped-back to the test will be received immediately . skip some system bus tests on Windows since they make no sense there (fdo#92538, fdo#92721; Ralf Habacker, Simon McVittie) * Changes between 1.10.0 and 1.10.2 - Fixes: + Correct error handling for activation: if there are multiple attempts to activate the same service and it fails immediately, the first attempt would get the correct reply, but the rest would time out. We now send the same error reply to each attempt. (fdo#92200, Simon McVittie) + If BecomeMonitor is called with a syntactically invalid match rule, don't crash with an assertion failure, fixing a regression in 1.9.10. This was not exploitable as a denial of service, because the check for a privileged user is done first. (fdo#92298, Simon McVittie) + On Linux with --enable-user-session, add the bus address to the environment of systemd services for better backwards compatibility (fdo#92612, Jan Alexander Steffens) + On Windows, fix the logic for replacing the installation prefix in service files' Exec lines (fdo#83539; Milan Crha, Simon McVittie) + On Windows, if installed in the conventional layout with ${prefix}/etc and ${prefix}/share, use relative paths between bus configuration files to allow the tree to be relocated (fdo#92028, Simon McVittie) + Make more of the regression tests pass in Windows builds (fdo#92538, Simon McVittie) * Summary of major changes since 1.8.0: - The basic setup for the well-known system and session buses is now done in read-only files in ${datadir} (normally /usr/share). - AppArmor integration has been merged, with features similar to the pre-existing SELinux integration. It is mostly compatible with the patches previously shipped by Ubuntu, with one significant change: Ubuntu's GetConnectionAppArmorSecurityContext method has been superseded by GetConnectionCredentials and was not included. - The --enable-user-session configure option can be enabled by OS integrators intending to use systemd to provide a session bus per user (in effect, treating all concurrent graphical and non-graphical login sessions as one large session). - The new listenable address mode "unix:runtime=yes" listens on $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the systemd user session. libdbus and "dbus-launch --autolaunch" will connect to this address by default. GLib >= 2.45.3 and sd-bus >= 209 have a matching default. - All executables are now dynamically linked to libdbus-1. Previously, some executables, most notably dbus-daemon, were statically linked to a specially-compiled variant of libdbus. This results in various private functions in the _dbus namespace being exposed by the shared library. These are not API, and must not be used outside the dbus source tree. - On platforms with ELF symbol versioning, all public symbols are versioned LIBDBUS_1_3. * New bus APIs: - org.freedesktop.DBus.GetConnectionCredentials returns LinuxSecurityLabel where supported - org.freedesktop.DBus.Monitoring interface (privileged) . BecomeMonitor method supersedes match rules with eavesdrop=true, which are now deprecated - org.freedesktop.DBus.Stats interface (semi-privileged) . now enabled by default . new GetAllMatchRules method - org.freedesktop.DBus.Verbose interface (not normally compiled) . toggles the effect of DBUS_VERBOSE * New executables: - dbus-test-tool - dbus-update-activation-environment * New optional dependencies: - The systemd: pseudo-transport requires libsystemd or libsd-daemon - Complete documentation requires Ducktype and yelp-tools - Full test coverage requires GLib 2.36 and PyGI - AppArmor integration requires libapparmor and optionally libaudit * Dependencies removed: - dbus-glib- Update to 1.8.20: * Fixes: - Fix a memory leak when GetConnectionCredentials() succeeds (fdo#91008, Jacek Bukarewicz) - Ensure that dbus-monitor does not reply to messages intended for others (fdo#90952, Simon McVittie)- Account for openSUSE:Leap in the conditional for chosing right local state directories (boo#941352)- Move common-begin sections around to make pre_checkin work again - Unconditionally build with systemd features, there are no cycles now, systemd no longer buildrequires dbus-1-devel- Update to 1.8.18: * Security hardening: - On Unix platforms, change the default configuration for the session bus to only allow EXTERNAL authentication (secure kernel-mediated credentials-passing), as was already done for the system bus. This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly unpredictable pseudo-random numbers; under certain circumstances (/dev/urandom unreadable or malloc() returns NULL), dbus could fall back to using rand(), which does not have the desired unpredictability. The fallback to rand() has not been changed in this stable-branch since the necessary code changes for correct error-handling are rather intrusive. If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using NFS or similar, you will need to reconfigure the session bus to accept DBUS_COOKIE_SHA1 by commenting out the element. This configuration is not recommended. (bsc#931066, fdo#90414, Simon McVittie) * Other fixes: - Add locking to DBusCounter's reference count and notify function (fdo#89297, Adrian Szyndela) - Ensure that DBusTransport's reference count is protected by the corresponding DBusConnection's lock (fdo#90312, Adrian Szyndela) - On Windows, listen on the same port for IPv4 and IPv6 (previously broken by an endianness mistake), and fix a failure to bind TCP sockets on approximately 1 attempt in 256 (fdo#87999, Ralf Habacker) - Correctly release DBusServer mutex before early-return if we run out of memory while copying authentication mechanisms (fdo#90021, Ralf Habacker) - Correctly initialize all fields of DBusTypeReader (fdo#90021, Ralf Habacker, Simon McVittie) - Fix some missing \n in verbose (debug log) messages (fdo#90021, Ralf Habacker) - Clean up some memory leaks in test code (fdo#90021, Ralf Habacker)- Sync changes from SLE12 conditionalized for suse_version <= 1315- Update to 1.8.16: * Security fixes: - Do not allow non-uid-0 processes to send forged ActivationFailure messages. On Linux systems with systemd activation, this would allow a local denial of service: unprivileged processes could flood the bus with these forged messages, winning the race with the actual service activation and causing an error reply to be sent back when service auto-activation was requested. This does not prevent the real service from being started, so it only works while the real service is not running. (CVE-2015-0245, fdo#88811, bnc#916343; Simon McVittie) * Other fixes: - fix a Windows build failure (fdo#88009, Ralf Habacker) - on Windows, allow up to 8K connections to the dbus-daemon instead of the previous 64, completing a previous fix which only worked under Autotools (fdo#71297, Ralf Habacker)- Update to 1.8.14 * Security hardening: - Do not allow calls to UpdateActivationEnvironment from uids other than the uid of the dbus-daemon. If a system service installs unsafe security policy rules that allow arbitrary method calls (such as CVE-2014-8148) then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment. We believe that in practice, privilege escalation here is avoided by dbus-daemon-launch-helper sanitizing its environment; but it seems better to be safe. - Do not allow calls to UpdateActivationEnvironment or the Stats interface on object paths other than /org/freedesktop/DBus. Some system services install unsafe security policy rules that allow arbitrary method calls to any destination, method and interface with a specified object path; while less bad than allowing arbitrary method calls, these security policies are still harmful, since dbus-daemon normally offers the same API on all object paths and other system services might behave similarly. * Other fixes: - Add missing initialization so GetExtendedTcpTable doesn't crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)- Update to 1.8.12: * Fixes: - Partially revert the CVE-2014-3639 patch by increasing the default authentication timeout on the system bus from 5 seconds back to 30 seconds, since this has been reported to cause boot regressions for some users, mostly with parallel boot (systemd) on slower hardware. On fast systems where local users are considered particularly hostile, administrators can return to the 5 second timeout (or any other value in milliseconds) by saving this as /etc/dbus-1/system-local.conf: 5000 (fdo#86431, Simon McVittie) - Add a message in syslog/the Journal when the auth_timeout is exceeded (fdo#86431, Simon McVittie) - Send back an AccessDenied error if the addressed recipient is not allowed to receive a message (and in builds with assertions enabled, don't assert under the same conditions). (fdo#86194, Jacek Bukarewicz)- Update to 1.8.10: * Security fixes: - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536 so that CVE-2014-3636 part A cannot exhaust the system bus' file descriptors, completing the incomplete fix in 1.8.8. (CVE-2014-7824, fdo#85105; Simon McVittie, Alban Crequy)- Reformat the spec file using spec-cleaner- Update baselibs.conf: Provides dbus-1-32bit in lib package- Update to 1.8.8: + Security fixes: - Do not accept an extra fd in the padding of a cmsg message, which could lead to a 4-byte heap buffer overrun. (CVE-2014-3635, fdo#83622, bnc#896453; Simon McVittie) - Reduce default for maximum Unix file descriptors passed per message from 1024 to 16, preventing a uid with the default maximum number of connections from exhausting the system bus' file descriptors under Linux's default rlimit. Distributors or system administrators with a more restrictive fd limit may wish to reduce these limits further. Additionally, on Linux this prevents a second denial of service in which the dbus-daemon can be made to exceed the maximum number of fds per sendmsg() and disconnect the process that would have received them. (CVE-2014-3636, fdo#82820, bnc#896453; Alban Crequy) - Disconnect connections that still have a fd pending unmarshalling after a new configurable limit, pending_fd_timeout (defaulting to 150 seconds), removing the possibility of creating an abusive connection that cannot be disconnected by setting up a circular reference to a connection's file descriptor. (CVE-2014-3637, fdo#80559, bnc#896453; Alban Crequy) - Reduce default for maximum pending replies per connection from 8192 to 128, mitigating an algorithmic complexity denial-of-service attack (CVE-2014-3638, fdo#81053, bnc#896453; Alban Crequy) - Reduce default for authentication timeout on the system bus from 30 seconds to 5 seconds, avoiding denial of service by using up all unauthenticated connection slots; and when all unauthenticated connection slots are used up, make new connection attempts block instead of disconnecting them. (CVE-2014-3639, fdo#80919, bnc#896453; Alban Crequy) + Other fixes: - Check for libsystemd from systemd >= 209, falling back to the older separate libraries if not found (Umut Tezduyar Lindskog, Simon McVittie) - On Linux, use prctl() to disable core dumps from a test executable that deliberately raises SIGSEGV to test dbus-daemon's handling of that condition (fdo#83772, Simon McVittie) - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232; Alban Crequy) - Improve documentation for running tests on Windows (fdo#41252, Ralf Habacker)- Remove all remains of sysvinit compatibility. - Do not force-fed -fstack-protector in CFLAGS, already there and obsoleted by stack-protector-strong in gcc 4.9. - Ensure doxygen never generates timestampted html docs.- Update baselibs.conf: Obsoletes dbus-1-32bit in lib package.- Update to 1.8.6: + Security fixes: - On Linux >= 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop the message. This prevents an attack in which a malicious client can make dbus-daemon disconnect a system service, which is a local denial of service. (bnc#885241 fdo#80163, CVE-2014-3532; Alban Crequy) - Track remaining Unix file descriptors correctly when more than one message in quick succession contains fds. This prevents another attack in which a malicious client can make dbus-daemon disconnect a system service. (bnc#885241 fdo#79694, fd0#80469, CVE-2014-3533; Alejandro Martínez Suárez, Simon McVittie, Alban Crequy) + Other fixes: - When dbus-launch --exit-with-session starts a dbus-daemon but then cannot attach to a session, kill the dbus-daemon as intended (fdo#74698, Роман Донченко)- Update to 1.8.4: + Security fix: - Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service flaw in dbus-daemon, part of the reference implementation of D-Bus. Additionally, in highly unusual environments the same flaw could lead to a side channel between processes that should not be able to communicate. (CVE-2014-3477, fdo#78979, bnc#881137)- Update to 1.8.2: + Enhancements: - in the CMake build system, add some hints for Linux users cross-compiling Windows D-Bus binaries to be able to run tests under Wine (fdo#41252) - add Documentation key to dbus.service (fdo#77447) + Fixes: - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id to /var/lib/dbus/machine-id instead of generating an entirely new ID (fdo#77941) - if dbus-launch receives an X error very quickly, do not kill unrelated processes (fdo#74698) - on Windows, allow up to 8K connections to the dbus-daemon, instead of the previous 64 (fdo#71297) - cope with \r\n newlines in regression tests, since on Windows, dbus-daemon.exe uses text mode (fdo#75863)- Update to 1.8.0 final: + This starts a new stable branch. The 1.6.x branch is now considered to be outdated, and will only receive fixes for serious bugs such as security flaws. The 1.4.x and 1.2.x branches no longer have upstream support and are unlikely to get any more releases, but if distributors still need to support them, please share security patches via upstream. + Enhancements since 1.7.10: - Enhance the CMake build system to check for GLib and compile/run a subset of the regression tests (fdo#41252, fdo#73495) + Fixes since 1.7.10: - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840) - fix compilation of systemd journal support on older systemd versions where sd-journal.h doesn't include syslog.h (fdo#73455) - fix compilation on older MSVC versions by including stdlib.h (fdo#73455) - Allow to appear in an included configuration file (fdo#73475) + Test behaviour changes since 1.7.10: - If the tests crash with an assertion failure, they no longer default to blocking for a debugger to be attached. Set DBUS_BLOCK_ON_ABORT in the environment if you want the old behaviour. - To improve debuggability, the dbus-daemon and dbus-daemon-eavesdrop tests can be run with an external dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the environment. Test-cases that require an unusually-configured dbus-daemon are skipped.- Remove checks for obsolete openSUSE versions - Make sure that dbus-1 requires libdbus-1-3 during %post (detected when built against DBus-less systemd 209)- Try hard to assure that /var/lib/dbus/machine-id and /etc/machine-id are the same (bnc#857377)- Update to 1.7.10 (1.8.0 rc1) + D-Bus Specification 0.23: - don't require messages with no INTERFACE to be dispatched (fdo#68597) - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301) - define "listenable" and "connectable" addresses, and discuss the difference (fdo#61303) + Enhancements: - support printing Unix file descriptors in dbus-send, dbus-monitor (fdo#70592) - don't install systemd units if --disable-systemd is given (fdo#71818) + Fixes: - don't leak memory on out-of-memory while listing activatable or active services (fdo#71526) - fix undefined behaviour in a regression test (fdo#69924) - escape Unix socket addresses correctly (fdo#46013) - on SELinux systems, don't assume that SECCLASS_DBUS, DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to their values in the reference policy (fdo#88719) - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW < 4 headers (fdo#71366) - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h and winsock2.h (fdo#71405) - do not return failure from _dbus_read_nonce() with no error set, preventing a potential crash (fdo#72298) - on BSD systems, avoid some O(1)-per-process memory and fd leaks in kqueue, preventing test failures (fdo#69332, fdo#72213) - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix sockets, which doesn't do anything anyway on at least Linux and FreeBSD (fdo#69492) - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL from sendmsg() with SCM_CREDS (retrying with plain send()), and looking for credentials more correctly (fdo#69492) - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid getting mixed up in XDG/systemd "user sessions" (fdo#61301) - refresh cached policy rules for existing connections when bus configuration changes (fdo#39463)- Drop the dbus-fall-back-to-old-run-directory.patch, and the sed workaround from dbus-1-x11 %post, now that transition from 12.3 (/var/run) to 13.1 (/run) is done- Update to 1.7.8 + Dependencies: - If systemd support is enabled, libsystemd-journal is now required. + Enhancements: - When activating a non-systemd service under systemd, annotate its stdout/stderr with its bus name in the Journal. Known limitation: because the socket is opened before forking, the process will still be logged as if it had dbus-daemon's process ID and user ID. (fdo#68559) - Document more configuration elements in dbus-daemon(1) (fdo#69125) + Fixes: - Don't leak string arrays or fds if dbus_message_iter_get_args_valist() unpacks them and then encounters an error (fdo#21259) - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write disallowed method calls to the audit log, fixing a regression in 1.7.6 (fdo#49062) - path_namespace='/' in match rules incorrectly matched nothing; it now matches everything. (fdo#70799)- Update to 1.7.6 + Build-time configuration changes: - Directory change notification via dnotify on Linux is no longer supported; it hadn't compiled successfully since 2010 in any case. If you don't have inotify (Linux) or kqueue (*BSD), you will need to send SIGHUP to the dbus-daemon when its configuration changes. (fdo#33001) - Compiling with --disable-userdb-cache is no longer supported; it didn't work since at least 2008, and would lead to an extremely slow dbus-daemon even it worked. (fdo#15589,fdo#17133,fdo#66947) - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most assertions. It has been renamed to DBUS_DISABLE_ASSERT to be consistent with the Autotools build system. (fdo#66142) - --with-valgrind=auto enables Valgrind instrumentation if and only if valgrind headers are available. The default is still - -with-valgrind=no. (fdo#56925) + Dependencies: - Platforms with no 64-bit integer type are no longer supported. (fdo#65429) - GNU make is now (documented to be) required. (fdo#48277) - Full test coverage no longer requires dbus-glib, although the tests do not exercise the shared library (only a static copy) if dbus-glib is missing. (fdo#68852) + Enhancements: - D-Bus Specification 0.22 - Document GetAdtAuditSessionData() and GetConnectionSELinuxSecurityContext() (fdo#54445) - Fix example .service file (fdo#66481) - Don't claim D-Bus is "low-latency" (lower than what?), just give factual statements about it supporting async use (fdo#65141) - Document the contents of .service files, and the fact that system services' filenames are constrained (fdo#66608) - Be thread-safe by default on all platforms, even if dbus_threads_init_default() has not been called. For compatibility with older libdbus, library users should continue to call dbus_threads_init_default(): it is harmless to do so. (fdo#54972) - Add GetConnectionCredentials() method (fdo#54445) - New API: dbus_setenv(), a simple wrapper around setenv(). Note that this is not thread-safe. (fdo#39196,) - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer connection, like --address=ADDRESS in previous versions) and dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor --address=ADDRESS). dbus-send --address still exists for backwards compatibility, but is no longer documented. (fdo#48816) + Fixes: - Avoid an infinite busy-loop if a signal interrupts waitpid() (fdo#68945) - Clean up memory for parent nodes when objects are unexported (fdo#60176) - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as documented. Previously, it assumed its second parameter was TRUE. (fdo#69165) - Escape addresses containing non-ASCII characters correctly (fdo#53499) - Document search order correctly (fdo#66994) - Don't crash on "dbus-send --session / x.y.z" which regressed in 1.7.4. (fdo#65923) - If malloc() returns NULL in _dbus_string_init() or similar, don't free an invalid pointer if the string is later freed (fdo#65959) - If malloc() returns NULL in dbus_set_error(), don't va_end() a va_list that was never va_start()ed (fdo#66300) - fix build failure with --enable-stats (fdo#66004) - fix a regression test on platforms with strict alignment (fdo#67279) - Avoid calling function parameters "interface" since certain Windows headers have a namespace-polluting macro of that name (fdo#66493) - Assorted Doxygen fixes (fdo#65755) - Various thread-safety improvements to static variables (fdo#68610) - Make "make -j check" work (fdo#68852) - Fix a NULL pointer dereference on an unlikely error path (fdo#69327) - Improve valgrind memory pool tracking (fdo#69326) - Don't over-allocate memory in dbus-monitor (fdo#69329) - dbus-monitor can monitor dbus-daemon < 1.5.6 again (fdo#66107) + Unix-specific: - If accept4() fails with EINVAL, as it can on older Linux kernels with newer glibc, try accept() instead of going into a busy-loop. (fdo#69026) - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for instance on Hurd or older Linux with a new glibc, try without SOCK_CLOEXEC. (fdo#69073) - Fix a file descriptor leak on an error code path. (fdo#69182) - dbus-run-session: clear some unwanted environment variables (fdo#39196) - dbus-run-session: compile on FreeBSD (fdo#66197) - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352) - Use dbus-launch from the builddir for testing, not the installed copy (fdo#37849) - Fix compilation if writev() is unavailable (fdo#69409) - Remove broken support for LOCAL_CREDS credentials passing, and document where each credential-passing scheme is used (fdo#60340) - Make autogen.sh work on *BSD by not assuming GNU coreutils functionality (fdo#35881, fdo#69787) - dbus-monitor: be portable to NetBSD (fdo#69842) - dbus-launch: stop using non-portable asprintf (fdo#37849) - Improve error reporting from the setuid activation helper (fdo#66728) + Internal changes: - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing conditionals (fdo#66142) - improve verbose-mode output (fdo#63047) - consolidate Autotools and CMake build (fdo#64875) - fix various unused variables, unusual build configurations etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165, fdo#69410, fdo#70218) - Dropped 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch, included in this release- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id present on the system. Dbus knows how to use the system-wide machine-id file and this solves problems where the two files have different values (bnc#831626)- Check for existence of /var/lib/old_run_path: if found, only then is dbus ListenStream swapped for old run path. This is done for supporting 12.3 to 13.1 upgrade (bnc#802525) - Fix rpmlint warnings about %verifyscript and %set_permissions- Revert to previous version of dbus-fall-back-to-old-run-directory.patch as latest version causes a fallout- Amend dbus-fall-back-to-old-run-directory.patch to prevent a new class of hangs while upgrading D-Bus along with other services (bnc#802525).- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch from upstream for resolving fdo#68945, bnc#782909- to avoid a cycle with systemd, build the daemon in dbus-x11.spec. It would be wise to rename dbus-1.spec to dbus-1-libs.spec and dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback- Update to 1.7.4 + CVE-2013-2168: Fix misuse of va_list that could be used as a denial of service for system services. + It should now be safe to call dbus_threads_init_default() from any thread, at any time + In dbus-daemon, don't crash if a .service file starts with key=value + Fix an assertion failure if we try to activate systemd services before systemd connects to the bus (fdo#50199) - Adjusted dbus-do-autolaunch.patch for this release- Remove the override that was added in solving bnc#802525, as it causes similar situation when upgrading dbus and systemd simultaneously. - Adjusted rc.boot.dbus script so it uses /run instead of /var/run- Update to 1.7.2 + Diagnose incorrect use of dbus_connection_get_data() with negative slot (i.e. before allocating the slot) rather than returning junk (fdo #63127) + The --with-dbus-session-bus-default-address configure option is no longer supported + Under systemd, log to syslog only, not stderr, avoiding duplication (fdo#61399, fdo#39987) + Under systemd, remove unnecessary dependency on syslog.socket (fdo#63531) + Allow use of systemd-logind without the rest of systemd (fdo#62585) - Dropped dbus-move-everything-to-run-directory.patch, since we can define location of system pid and socket with configure flags and set the flags accordingly - Added xmlto BuildRequires, it is needed now for man files- Update to 1.6.10 + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF, U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072) + Diagnose incorrect use of dbus_connection_get_data() with negative slot (i.e. before allocating the slot) rather than returning junk (fdo#63127) + In the activation helper, when compiled for tests, do not reset the system bus address, fixing the regression tests. (fdo#52202) + Fix building with Valgrind 3.8, at the cost of causing harmless warnings with Valgrind 3.6 on some compilers (fdo#55932) + Don't leak temporary fds pointing to /dev/null (fdo#56927,) + Create session.d, system.d directories under CMake (fdo#41319) + Include alloca.h for alloca() if available, fixing compilation on Solaris 10 (fdo#63071)- Spec file changes moving files from /var/run to /run. - Add dbus-move-everything-to-run-directory.patch by rmilasan. This moves everything (pid files, lock files, etc.) to /run. - Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).- Move everything (pid files, lock files, etc.) to /run. add: dbus-move-everything-to-run-directory.patch- Update to 1.6.8 * Follow up to CVE-2012-3524: The additional hardening work to use __secure_getenv() as a followup to bug #52202 broke certain configurations of gnome-keyring. Given the difficulty of making this work without extensive changes to gnome-keyring, use of __secure_getenv() is deferred. * CVE-2012-3524: Don't access environment variables (fdo#52202) Thanks to work and input from Colin Walters, Simon McVittie, Geoffrey Thomas, and others. * Detect that users are "at the console" correctly when configured with a non-default path such as --enable-console-auth-dir=/run/console (fdo#51521, Dave Reisner) * Remove an incorrect assertion from DBusTransport (fdo#51657, Simon McVittie) * Change how we create /var/lib/dbus so it works under Automake >= 1.11.4 (fdo#51406, Simon McVittie) * Don't return from dbus_pending_call_set_notify with a lock held on OOM (fdo#51032, Simon McVittie) * Disconnect "developer mode" (assertions, verbose mode etc.) from Automake maintainer mode. D-Bus developers should now configure with - -enable-developer. Automake maintainer mode is now on by default; distributions can disable it with --disable-maintainer-mode. (fdo#34671, Simon McVittie) * Unix-specific: - Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie) * New requirements - PTHREAD_MUTEX_RECURSIVE on Unix - compiler support for 64-bit integers (int64_t or equivalent) * D-Bus Specification v0.19 * New dbus-daemon features - rules allow the service to own names like com.example.Service.Instance3 - optional systemd integration when checking at_console policies - --nopidfile option, mainly for use by systemd - path_namespace and arg0namespace may appear in match rules - eavesdropping is disabled unless the match rule contains eavesdrop=true * New public API - functions to validate various string types (dbus_validate_path() etc.) - dbus_type_is_valid() - DBusBasicValue, a union of every basic type * Bug fixes - removed an unsafe reimplementation of recursive mutexes - dbus-daemon no longer busy-loops if it has far too many file descriptors - dbus-daemon.exe --print-address works on Windows - all the other bug fixes from 1.4.20 * Other major implementation changes - on Linux, dbus-daemon uses epoll if supported, for better scalability - dbus_threads_init() ignores its argument and behaves like dbus_threads_init_default() instead - removed the per-connection link cache, improving dbus-daemon performance * Developer features - optional Valgrind instrumentation (--with-valgrind) - optional Stats interface on the dbus-daemon (--enable-stats) - optionally abort whenever malloc() fails (--enable-embedded-tests and export DBUS_MALLOC_CANNOT_FAIL=1) * Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1 spec-compliance (fdo#48580, David Zeuthen) * Don't use install(1) within the source/build trees, fixing the build as non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot) * Add missing commas in some tcp and nonce-tcp addresses, and remove an unused duplicate copy of the nonce-tcp transport in Windows builds (fdo#45896, Simon McVittie) - remove patch dbus-cve-2012-3524.patch as incorporated upstream- Enable systemd integration (with_systemd 1): follow the rest of the distribution enabling systemd support. As agreed, systemd is the main supported way for 12.3.- Move default home from /var/run/dbus to /run/dbus - Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses dbus-send to receive signals from systemd regarding resuming, however looks for the moment in the wrong directory.- Fix factory breakage on systemd units directory- remove sysvinit requires from the package - remove %run_permissions macro- baselibs: dbus-1-devel-32bit must require libdbus-1-3-32bit- remove libzio build dependency- dbus-cve-2012-3524.patch: Add patch for CVE-2012-3524 to fix getenv() vulnerability in setuid root binaries (bnc#697105)- Add pkgconfig(x11) as BuildRequires instead of xorg-x11-devel so we don't depend on Mesa and create a build cycle.- Move ownership of /etc/dbus-1/{session.d,system.d} and /usr/share/dbus-1/{interfaces,services,system-services} to libdbus-1-3 instead of dbus-1: many dbus users put files there, and it's annoying to force them to own those directories.- added libdbus-1-3 to build for -32bit... - adeed post and postun sections for libdbus-1-3- More news from the dependency hell: Let dbus-1-devel require dbus-1.- Split dbus-1 into libdbus-1 and dbus-1.- Update to version 1.5.12: - Add public API to validate various string types: dbus_validate_path(), dbus_validate_interface(), dbus_validate_member(), dbus_validate_error_name(), dbus_validate_bus_name(), dbus_validate_utf8() (fdo#39549, Simon McVittie) - Turn DBusBasicValue into public API so bindings don't need to invent their own "union of everything" type (fdo#11191, Simon McVittie) - Enumerate data files included in the build rather than using find(1) (fdo#33840, Simon McVittie) - Add support for policy rules like in dbus-daemon (fdo#46273, Alban Crequy) - Windows-specific: - make dbus-daemon.exe --print-address (and --print-pid) work again on Win32, but not on WinCE (fdo#46049, Simon McVittie) - fix duplicate case value when compiling against mingw-w64 (fdo#47321, Andoni Morales Alastruey)- Revert my last change completely, and go back to using -fpie in CFLAGS and -pie in LDFLAGS for the whole build: after discussion upstream in fdo#46570, it appears that this is the recommended way to harden the build.- Change the way we pass -fpie/-pie: + Stop changing CFLAGS/LDFLAGS in %build to add -fpie/-pie. + Add dbus-1-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS when building the suid binary (dbus-daemon-launch-helper). + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.- move with_systemd definition into COMMON part to fix dbus-1-x11- Update to version 1.5.10: + D-Bus Specification 0.19: - Formally define unique connection names and well-known bus names, and document best practices for interface, bus, member and error names, and object paths (fdo#37095) - Document the search path for session and system services on Unix, and where they should be installed by build systems (fdo#21620, fdo#35306) - Document the systemd transport (fdo#35232) + Make dbus_threads_init() use the same built-in threading implementation as dbus_threads_init_default(); the user-specified primitives that it takes as a parameter are now ignored (fdo#43744) + Allow all configured auth mechanisms, not just one (fdo#45106) + Improve cmake build system. + Build tests successfully with older GLib, as found in e.g. Debian 6 (fdo#41219) + Avoid use of deprecated GThread API (fdo#44413) + Build documentation correctly if man2html doesn't support filenames on its command-line (fdo#43875) + Improve test coverage. To get even more coverage, run the tests with DBUS_TEST_SLOW=1 (fdo#38285, fdo#42811) + Reduce the size of the shared library by moving functionality only used by dbus-daemon, tests etc. into their internal library and deleting unused code (fdo#34976, fdo#39759) + Add dbus-daemon --nopidfile option, overriding the configuration, for setups where the default configuration must include to avoid breaking traditional init, but the pid file is in fact unnecessary; use it under systemd to improve startup time a bit (fdo#45520) + Optionally (if configured --with-valgrind) add instrumentation to debug libdbus and associated tools more meaningfully under Valgrind (fdo#37286) + Improve the dbus-send(1) man page (fdo#14005) + Make dbus-protocol.h compatible with C++11 (fdo#46147) + If tests are enabled and DBUS_MALLOC_CANNOT_FAIL is set in the environment, abort on failure to malloc() (like GLib does), to turn runaway memory leaks into a debuggable core-dump if a resource limit is applied (fdo#41048) + Don't crash if realloc() returns NULL in a debug build (fdo#41048) + Unix-specific: - Replace our broken reimplementation of recursive mutexes, which has been broken since 2006, with an ordinary pthreads recursive mutex (fdo#43744) - Use epoll(7) for a more efficient main loop in Linux; equivalent patches welcomed for other OSs' equivalents like kqueue, /dev/poll, or Solaris event ports (fdo#33337) - When running under systemd, use it instead of ConsoleKit to check whether to apply at_console policies (fdo#39609) - Avoid a highly unlikely fd leak (fdo#29881) - Don't close invalid fd -1 if getaddrinfo fails (fdo#37258) - Don't touch ~/.dbus and ~/.dbus-keyrings when running 'make installcheck' (fdo#41218) - Stop pretending we respect XDG_DATA_DIRS for system services: the launch helper doesn't obey environment variables to avoid privilege escalation attacks, so make the system bus follow the same rules (fdo#21620) + Windows-specific fixes. - Get ready for a switch to systemd: + Add a with_systemd macro, currently set to 0 as the systemd support would introduce a build cycle between dbus-1 and systemd. + Add pkgconfig(libsystemd-daemon) and pkgconfig(libsystemd-login) BuildRequires and pass - -enable-systemd to configure if we build systemd support.- fixed bnc#743149 - added position independent flags to compilation and linking(-fpie/-pie)- add patch to enable X11 autolaunch even if configure thinks it can't be done (bnc#707817)- update to version 1.5.8: * Clean up dead code, and make more warnings fatal in development builds (fdo#39231, fdo#41012; Simon McVittie) * Add a regression test for fdo#38005 (fdo#39836, Simon McVittie) * Add _DBUS_STATIC_ASSERT and use it to check invariants * Fix a small memory leak, and a failure to report errors, when updating a service file entry for activation (fdo#39230, Simon McVittie) * Clean up (non-abstract) Unix sockets on bus daemon exit * On systems that use libcap-ng but not systemd, drop supplemental groups when switching to the daemon user (Red Hat #726953, Steve Grubb)- add libtool as buildrequire to make the spec file more reliable- Remove redundant tags/sections from specfile (cf. packaging guidelines)- Update to version 1.5.6: + Potentially incompatible (Bustle and similar debugging tools will need changes to work as intended): - Do not allow match rules to "eavesdrop" (receive messages intended for a different recipient) by mistake: eavesdroppers must now opt-in to this behaviour by putting "eavesdrop='true'" in the match rule, which will not have any practical effect on buses where eavesdropping is not allowed (fdo#37890) + Other changes: - D-Bus Specification version 0.18 (fdo#37890, fdo#39450, fdo#38252): . add the "eavesdrop" keyword to match rules . define eavesdropping, unicast messages and broadcast messages . stop claiming that match rules are needed to match unicast messages to you . promote the type system to be a top-level section - Use DBUS_ERROR_OBJECT_PATH_IN_USE if dbus_connection_try_register_object_path or dbus_connection_try_register_fallback fails, not ...ADDRESS_IN_USE, and simplify object-path registration (fdo#38874) - Consistently use atomic operations on everything that is ever manipulated via atomic ops, as was done for changes to DBusConnection's refcount in 1.4.12 (fdo#38005) - Fix a file descriptor leak when connecting to a TCP socket (fdo#37258) - Make "make check" in a clean tree work, by not running tests until test data has been set up (fdo#34405) - The dbus-daemon no longer busy-loops if it has a very large number of file descriptors (fdo#23194) - Refactor message flow through dispatching to avoid locking violations if the bus daemon's message limit is hit; remove the per-connection link cache, which was meant to improve performance, but now reduces it (fdo#34393) - Some cmake fixes - Remove dead code, mainly from DBusString (fdo#38570, fdo#39610) - Stop storing two extra byte order indicators in each D-Bus message (fdo#38287) - Add an optional Stats interface which can be used to get statistics from a running dbus-daemon if enabled at configure time with --enable-stats (fdo#34040) - Fix various typos (fdo#27227, fdo#38284) - Documentation (fdo#36156): . let xsltproc be overridden as usual: ./configure XSLTPROC=myxsltproc . install more documentation automatically, including man2html output . put dbus.devhelp in the right place (it must go in ${htmldir}) - Unix-specific: . look for system services in /lib/dbus-1/system-services in addition to all the other well-known locations; note that this should always be /lib, even on platforms where shared libraries on the root FS would go in /lib64, /lib/x86_64-linux-gnu or similar (fdo#35229) . opt-in to fd passing on Solaris (fdo#33465) - Windows-specific: . fix use of a mutex for autolaunch server detection . don't crash on malloc failure in _dbus_printf_string_upper_bound - Manually create /lib/dbus-1/system-services in %install so that we can own it.- Update to version 1.5.4: + Security (local denial of service): - Byte-swap foreign-endian messages correctly, preventing a long-standing local DoS if foreign-endian messages are relayed through the dbus-daemon (fdo#38120, deb#629938, no CVE number yet) + New things: - The constant to use for an infinite timeout now has a name, DBUS_TIMEOUT_INFINITE. - If GLib and DBus-GLib are already installed, more tests will be built, providing better coverage.(fdo#34570) + Changes: - Consistently use atomic operations for the DBusConnection's refcount, fixing potential threading problems (fdo#38005) - Don't use -Wl,--gc-sections by default: in practice the size decrease is small (300KiB on x86-64) and it frequently doesn't work in unusual toolchains. (fdo#33466) - Use #!/bin/sh for run-with-tmp-session-bus.sh, making it work on *BSD (fdo#35880) - Use ln -fs to set up dbus for systemd, which should fix reinstallation when not using a DESTDIR (fdo#37870) - Windows-specific changes: . don't try to build dbus-daemon-launch-helper (fdo#37838) - Changes from version 1.5.2: + Notes for distributors: - This version of D-Bus no longer uses -fPIE by default. + Changes: + D-Bus Specification v0.17 . Reserve the extra characters used in signatures by GVariant (fdo#34529) . Define the ObjectManager interface (fdo#34869) + Don't force -fPIE: distributions and libtool know better than we do whether it's desirable (fdo#16621, fdo#27215) + Allow --disable-gc-sections, in case your toolchain offers the -ffunction-sections, -fdata-sections and - Wl,--gc-sections options but they're broken, as seen on Solaris (fdo#33466) + Install dbus-daemon and dbus-daemon-launch-helper in a more normal way (fdo#14512) + Ensure that maintainers upload documentation with the right permissions (fdo#36130) + Don't force users of libdbus to be linked against - lpthread, -lrt (fdo#32827) + Log system-bus activation information to syslog (fdo#35705) + Log messages dropped due to quotas to syslog (fdo#35358) + Make the nonce-tcp transport work on Unix (fdo#34569) + On Unix, if /var/lib/dbus/machine-id cannot be read, try /etc/machine-id (fdo#35228) + In the regression tests, don't report fds as "leaked" if they were open on startup (fdo#35173) + Make dbus-monitor bail out if asked to monitor more than one bus, rather than silently using the last one (fdo#26548) + Clarify documentation (fdo#35182) + Clean up minor dead code and some incorrect error handling (fdo#33128, fdo#29881) + Check that compiler options are supported before using them (fdo#19681) + Windows: . Remove obsolete workaround for winioctl.h (fdo#35083)- Fix filelist to own a directory. - Do not package html files twice.- buildrequire update-desktop-files for mimetypes.prov- switch to download_files service- changes license to GPL2+ or AFL 2.1- Update to 1.5.0 * D-Bus Specification v0.16 - Add support for path_namespace and arg0namespace in match rules (fdo#24317, #34870; Will Thompson, David Zeuthen, Simon McVittie) - Make argNpath support object paths, not just object-path-like strings, and document it better (fdo#31818, Will Thompson) * Let the bus daemon implement more than one interface (fdo#33757, Simon McVittie) * Optimize _dbus_string_replace_len to reduce waste (fdo#21261, Roberto Guido) * Require user intervention to compile with missing 64-bit support (fdo#35114, Simon McVittie) * Add dbus_type_is_valid as public API (fdo#20496, Simon McVittie) * Raise UnknownObject instead of UnknownMethod for calls to methods on paths that are not part of the object tree, and UnknownInterface for calls to unknown interfaces in the bus daemon (fdo#34527, Lennart Poettering)- Update to 1.4.8 * Rename configure.in to configure.ac, and update it to modern conventions (fdo#32245; Javier Jardón, Simon McVittie) * Correctly give XDG_DATA_HOME priority over XDG_DATA_DIRS (fdo#34496, Anders Kaseorg) * Prevent X11 autolaunching if $DISPLAY is unset or empty, and add - -disable-x11-autolaunch configure option to prevent it altogether in embedded environments (fdo#19997, NB#219964; Simon McVittie) * Install the documentation, and an index for Devhelp (fdo#13495, Debian #454142; Simon McVittie, Matthias Clasen) * If checks are not disabled, check validity of string-like types and booleans when sending them (fdo#16338, NB#223152; Simon McVittie) * Add UnknownObject, UnknownInterface, UnknownProperty and PropertyReadOnly errors to dbus-shared.h (fdo#34527, Lennart Poettering) * Break up a huge conditional in config-parser so gcov can produce coverage data (fdo#10887, Simon McVittie) * List which parts of the Desktop Entry specification are applicable to .service files (fdo#19159, Sven Herzberg) * Don't suppress service activation if two services have the same Exec= (fdo#35750, Colin Walters) * Windows: - Avoid the name ELEMENT_TYPE due to namespace-pollution from winioctl.h (Andre Heinecke) - Include _dbus_path_is_absolute in libdbus on Windows, fixing compilation (fdo#32805, Mark Brand)- Update to 1.4.6 * Remove unfinished changes intended to support GTest-based tests, which were mistakenly included in 1.4.4 - Update to 1.4.4 * Switch back to using even micro versions for stable releases; 1.4.1 should have been called 1.4.2, so skip that version number * Don't leave bad file descriptors being watched when spawning processes, which could result in a busy-loop (fdo#32992, NB#200248; possibly also LP#656134, LP#680444, LP#713157) * Check for MSG_NOSIGNAL correctly * Fix failure to detect abstract socket support (fdo#29895) * Make _dbus_system_logv actually exit with DBUS_SYSTEM_LOG_FATAL (fdo#32262, NB#180486) * Improve some error code paths (fdo#29981, fdo#32264, fdo#32262, fdo#33128, fdo#33277, fdo#33126, NB#180486) * Avoid possible symlink attacks in /tmp during compilation (fdo#32854) * Tidy up dead code (fdo#25306, fdo#33128, fdo#34292, NB#180486) * Improve gcc malloc annotations (fdo#32710) * If the system bus is launched via systemd, protect it from the OOM killer * Documentation improvements (fdo#11190) * Avoid readdir_r, which is difficult to use correctly (fdo#8284, fdo#15922, LP#241619) * Cope with invalid files in session.d, system.d (fdo#19186, Debian #230231) * Don't distribute generated files that embed our builddir (fdo#30285, fdo#34292) * Raise the system bus's fd limit to be sufficient for its configuration (fdo#33474, LP#381063) * Fix syslog string processing * Ignore -Waddress * Remove broken gcov parsing code and --enable-gcov, and replace them with lcov HTML reports and --enable-compiler-coverage (fdo#10887) * Windows: - avoid live-lock in Windows CE due to unfair condition variables * OpenBSD: - support credentials-passing (fdo#32542) * Solaris: - opt-in to thread safety (fdo#33464)- Update to 1.4.1 + Fix for CVE-2010-4352: sending messages with excessively-nested variants can crash the bus. The existing restriction to 64-levels of nesting previously only applied to the static type signature; now it also applies to dynamic nesting using variants. Thanks to Rémi Denis-Courmont for discoving this issue. + Various bug fixes. + For details, see http://lists.freedesktop.org/archives/dbus/2010-December/013861.html- Fix package list, own /lib/systemd directories.- ConsoleKit may not be installed on the system, so kill the process at "stop" only if it is running- add missimg BuildRequires on libcap-ng-devel so dbus can drop capabilities when needed.- version 1.4.0 - make dbus-uuidgen atomic - fix socket descriptor leak in _dbus_connect_tcp_socket_with_nonce - unconditionally enable D-Bus on systemd boots- update systemd service installation- drop systemd-units- update to 1.3.2 snapshot - New standardized PropertiesChanged signal in the properties interface - Support forking bus services, for compatibility - install systemd service files- use %_smp_mflags- Update to version 1.2.24: + For details, see http://lists.freedesktop.org/archives/dbus/2010-March/012436.html + Highlights: - Fix a critical crasher bug in the syslog code + [bus] While creating a syslog, correctly get pointer data from DBusString + [bus] Don't install a SIGTERM handler + [64 bit printf] Update to use DBUS_PID_FORMAT, print (omitted) + Move dispatching to destination to bus_dispatch_matches() + Dispatch post-activation messages to anyone interested + Build changes. - Changes from version 1.2.22: + For details, see http://lists.freedesktop.org/archives/dbus/2010-March/012395.html + Highlights: - Fix to avoid UI freezes in newer Evolution versions (and any other program that makes synchronous DBus calls from a non-main thread). - Monitor service directories for changes + When handling a watch, return if another thread is doing I/O + Monitor service directories for changes + Sync up UNICODE_VALID with glib, add documentation + Support inotify on older kernels + Handle OOM in reload watch + Refactor _dbus_log_info, _dbus_log_security into _dbus_log_system + Add DBUS_SYSTEM_LOG_FATAL severity + Add _dbus_credentials_to_string_append + Add a prefix to our syslog messages + Make SELinux initialization failure fatal + Don't send an reply for driver messages if one isn't requested + Fix double-free in error case. + Other simple fixes, build fixes. + Explicitly specify in the spec lower-case hex must be used + Use AM_SILENT_RULES if available - Changes from version 1.2.20: + For details, see http://lists.freedesktop.org/archives/dbus/2010-February/012156.html + Fix inotify shutdown + Fix compilation in --disable-selinux case - Changes from version 1.2.18: + For details, see http://lists.freedesktop.org/archives/dbus/2010-February/012150.html + Ignore exit code zero from activated services + Switch to libcap-ng, avoid linking libdbus against libcap[-ng] + Don't drop pending activations when reloading configuration + Update messagebus.in init script to start earlier + Clean up inotify watch handling + Don't crash when reloading if we haven't loaded user database yet + fdo#23502 - corrected wrong verbose-output + Correct timeout handling + dbus-monitor: use unbuffered stdout instead of handling SIGINT + fdo#25697 - Fix memory leak in policy reload + fdo#23977 - dbus-launch --exit-with-session not killing dbus-daemon on SIGINT + Use monotonic clock for _dbus_get_current_time() if it's available. + Make array-printing code easier to follow + Forbid zero serial numbers + Include reason when reporting corrupt messages + Add an accessor for the loader's corruption reason + Print byte arrays as nicely-formatted hex. + Print all-printable-ASCII byte arrays as strings + Build fixes, including fdo#19432, fdo#22788, fdo#22805- add baselibs.conf as a source - package documentation as noarch- Implemented /etc/init.d/dbus reload (bnc#503074).- fix %changelog- added dbus-1-devel to baselibs.conf- fix --libexecdir to be the proper /lib/dbus-1/ directory- update to 1.2.16 release - Avoid race conditions reading message from exited process - Ensure initialized variable in dbus_connection_remove_filter - Don't fail autolaunching if process has SIGCHLD handler - Ensure inotify fd is set close on exec - Make sure a pending call timeout isn't assumed - Allow a pending call to block forever - Don't allocate DBusTimeout for pending call when passed INT_MAX - Update documentation now that INT_MAX means no timeout - Fix issue where timeouts can overflow - Remove 6 hour timeout restriction - Unrestrict session bus timeout- use --disable-static instead of removing static libraries- Make boot script smart/sbin/ldconfig/sbin/ldconfiglamb15 1526315047 1.12.2-lp150.1.281.12.2-lp150.1.28dbus-1session.dsystem.dlibdbus-1.so.3libdbus-1.so.3.19.4dbus-1interfacesservicessystem-services/etc//etc/dbus-1//usr/lib64//usr/share//usr/share/dbus-1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/5922ce494fd11f9540e2127aa8f2993b-dbus-1cpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc584f507fe77479b62a02843d026e66c1b7675f, strippedPPPR R R RRRRRRRR R R/$2%Z@\utf-8683ee7c9bea4eee87855b711c1bb0c1615df80ae0a5b8c66fed0241f8c2d0f0b?7zXZ !t/i] crt:bLL ~ȑZ)ly _r7-yٓ#Ns!K]C*4754CtŰ> "am#[:vBFSΟLBt@t)xEgȣih?N/n2LnG]p\<\1.&BKSp*\_ e55-hXjtzU`s8\/ n6PF0&nX6%EmIL|J>ϼ/oU 3c]^~i[avYeBxÝR!D "2;dI_U0pCmI\t^*ۻqh)錍M-vu,jx.ʄb6Ec[6 g>J= wNhrfUk-'тi]Ow=m*$ {?AnwOTD, 2ܷ?#~!]ؒu?`FHw7VIauE*|@nw-#R,Ky~Cn](|v Ii}w|jc}X'7Q cK=qB:O]d-gH肮Dnta~QT}}rv 6&,17Ɇj?)WYi; B䝴[K g۳k/ƵwCF$9e|ܯK%F Xwu dz҂J<&B61NXn guY9w rL.\ 2o+b]4wzڂ%oG: N#nDK64/yQw&+M)elv/mJ*,Y9ŘE2V02m~-B;E"^R|(U_]/X\q\sEbC:2R7݀>OY3U.>aqbav%Ē}&l\jwjͤ7z cCPHHs߮"3K0L˫kCM\Q8MիB$Uoy-fRgx8N$dM*J[촒}WմVG,Hb9/p5~w0L t['ttfzS}R[ty>'PVLiiMJ]CpӓildDHcif5>!Ȥ;\\MpDM#ՎNG!Ԑ3riF< kTwSk 0\1:i[N3luU^k)PG v5 l>Priv ɧ|s&0d<˱$еbExm:y=UkROE\F Y'i[~Udaⅸ'\QPp'k /kP𭩮*h.hlI3/AErN}d?6}; .HG'>>(k3mGZy= v} R W9 ѐmm^ ^(P6 B#DnFc7J/Mc,LM-bD[E>/<;ߤ,7}-8dz"怫NCqL:cd9ߝeDQY&ҪC€߇gt52[Q枽J=_@`w"g| BL&_H2?m+jF`TavGoANw;Kզ[j`BzU#6,~1ÚӸ.[7> y3&wr߹.& N;9,ixdq᤽纳bM+2xͰ R3>0~>M&)H 7X(<]ыΛ }$*5<k@QʁNˈ2Vvq4e箱s,{Z ùScr6I:1֬M= !ַ*YwFR[B9D3aҾ"HK;Y( 58}E q 8j7 NE~˒@z?[YCRJ)əYU֪Woۻ̹ևͿ.[ wrt,H-`iGoAN1){&1daYEѲ8S$``sJ 1%³aWS\$fCpǻ޾um!ai'[5n9c٥Q8e{br(=zE󶑑.-]kțV`h,VņjRpzлhP!nROt A4.jdûn>+ܚ uF >g BeӎaZ?#e2 $3m}<r-4>tj ڄiR r9s\_L d_Zz8$cE 62ra9tv)L‰B|hʣ% cC|Ѥ{@m=uED5wd^ׄoc^[`t8LGzBHѩA?69a0Nim< ,.!{ d_#?e_8ȎP`d3&6\HP'Νe@C&VHmDϰ`agr >.չEJ\3ŃR Fp1.͋-XuĜwZ y&[\)),Z:Kd <\0jv{} C,SrzD2p)HGow8w4PdUz{g9"Bt`'yW֭oՇ!DPN%*jS)f@@FE@|f}3Z8))2ǚPy;M_[n5K3gy9eLQς?@,.Odv3ā"dOef:`qm龉f^\lD+V窧L\SZ$6}3Uľ4 'dApNJҰFщ߭cOL[nTlEghIrQV̑t8ŧ*Vi*{5-r>Dٹ3L0Àmh0رw+jW-a>B3/Ƣ@DF< (}ECS5THV>ŝ^ lݟ+\(> |r_#n Oƚ6ӧSO<"UB:\%l"b 3a.0#fF(2$qkLFɣww=*V ̎P19YDkN/cr1\] >wY`RQ‚_K 8m Y hctmUrSDū@OAFu*ele3&AT'mx=TO"'M(ۇdBMͯB$+m qp&^7푚;*<*{yyg$\?G7>id42B˩EȭG:?j7*MM[d_Ko:bgq[PqQ]/ fa4u$_/4:\}Gta-PD;~K<5jT.a`Um:HT#6kGI]$b0VxOm62'BŊ@ۆA#t7/FD4Ս:. E}CME u|NEzoToitD](JGk6"!ILz1l NSz\ Ґ%ь׀g3cr˖jP욘G1)EIX5:؝Xg̭N0Ⱥߔkz+KIuRt)~Š>1(ltQ'co(Kٹ^\W4RVҨ68U$o7T jp/Qu'OCTz_]ٟoDW\OmEf1~Z aזEE\ W]~j{ሞ!cׁEH\5/ӲC^O"fp*TO&¸+2F\ͻJ)h^|*\lҙ$Db&1ZA 8wTP[YQN kdCFb #156 맂Ԍ*(v FC#>!,Ǧh%?}Ӷa![)r,}C#!p\Klf$qšPc֬Gsy6;|. ERbV$xV,QmّcN[r.!Drz8}f }v¶*֢Pߠ|]Hj"B žT 5t~f4ЋFY]`w!Ӗ^~)ҷWPcK!kq|%͒]:aqAc[4]ǒ_)ӏp?*+:ۆ8{SG@@&"C=+%_8^Ue}=/bӅiÃO5%W]č0l9^ec-#ˢAwn{ڝRUTKN DCh~2㉢)xⶨKY\bz_O i5K#89ZZ\_ʥ5ld0_jo_}[ 7*K \gb7쮓yR7*5͑y5XJ:aWq5e؊,Ǒb:?wl%Sc}1PƗtOiecbzuTP=Vip=7#qd\(ɈNN~/]eaqKsjLֹdt1=.ZWueeVF;nOHvjh5(Udycf=<H[x- .UyzL:[}ej>;A+.wf"7VO}&(x<-doFr ek7ǐv-XiK%=r[rzF.<}|9T5E,S90;Izpt^̏Ggg(rF.CE1:(\ȴG c șCRvu\NX ,)J\u; >=,ӓȕך2cʌTC6k6kC{@( Zƚ.?.=n_J[XU1J1;z &pnº`T=M2. 8*v@&b @T ^}bUܣhfJ:\WBdf*gp/r¡bfJijUrcbڦaQ1>LzT`G10wJ>Π3߂%a+-ӁPILc}h|Q2ouyٵB|ŹDD]n(Av2j5Unh 0 xdx$0!>zpdW ZP˳PbAw+ݵĎ@EӎY.O'7Ke>̈s/$  Tm 6Kf f@`‘˧5E8F.'|1MKB>C^.Z-\Ke~-nӸx78|۫xK}AF?$uy U}ٓ]&%4"씋QkMV?S>EI Cq8lXVņ|ʍ\0-mh+LƝL` 4jMU}~y13:1qg$6\p0ȂlƄl:+=Z? NOGe 3tq+< +N+U[OC|k^ 7"4c#vz?qxW =0(%k*n4Pψ=PFE~mN㪙u6%xFo ] 豚ŘH옊 ̼!πXaš0&[&B{7íJ͜Ȅ"UY8f 9<̚::m[#y+=/5ћ č }zy#1N!LIC@36`u 3}dTm~ :v R3b{=0 7/# 8Z&aܑ=3]Vu/9 ZؒT,yEw'9,Nste-QA"Lz\ $$D2#v6>$ VH=6ˌP A &x<ʪH@oAr:F?Р25_V NöPmsB Օp5SV[_2٬Ez{9wMBWHZBYQ+,^P&H?iyk/7Qk47LUԊ۟/ QAjhBD)_ zeՙ[Ɛ;RBrkfeYJՊz3-3ʳz?YN;PbXhSs{xmI皺/ihkC$ הS~ͦ2myu)#|^4 a1Ί[.q3r9zGPZY~w噯6x +1]z]ۍfN5Ԁ=w5#&NFz:XX!vU98kT=;59Oi5^ǩHy aԪaiNjqBͭ@zi.L@U?ꮳ]q4 a<^Qm_@D i*m X#?Qb-kaq|S4vEQ\+$+ A7$Xd(T g ^d"*c%/N %)w;3}V= [!yV|Gsf_a޹=WI9(&Ao I8m&Gz?Ŗ]Z88OS=.QeÜm}C￘,m9ߧ12B's>7(m$*P 4zD^t1U lUc$@`aG///+RRBHU@\Nl)(Ϊmu1_#'Y-Ew F5{,NNaŏ :%j~u@F G !ĺVh^"߉{D\AW7[Z/1 y(paThݻQڪO'VKD 1(W;{ý3ie3xhʈt`YU3A)x6\@e۠9YΒ2!r8!-%x?&D9Z {`c3nt55/sʏ<6 ju._ $,~o#-]/3|bwA9%/ $Urqߜ票/ˠd)"|DQj#5zc$бX^=t 7 dhI^L;R0p婢Ѡ$تKxI> Ţ3aFSDE@&NDVO~|3%PX\.A-`4XG39t%*k  hWmIe)3|S^3}*faN(*d&ö́Wa[SV髂 Ǖ=Gl[ "!>ﳌv$X͸7W&vOzGϷ?TriKuM6h}bP˜\͊`Yޥ$|6>WkQG P8.B=,F Z|uO E)HHhP n&,䯢^> ' #@Qh0UBXzlkIE+DY?ٯxcy.eNfC;T× /Jc:oyBSgq= u2V*&{;py QUsyD 旁oزWFk.jJȀ2 8#n] Uu"ULu<.ťeaa-v"P ''xN>@NaJ[>).gܓXtdnfoL4 xpMȅb2y}9%~-:=*_ P)[. Hhgu;/_N7K1|/D3G_INZm:"U!GJ| Ƽd{:6Vh$@eQ%s*%}:u:yD(q' fjصֿ ~#YI8SᜢCŒ :*,P]le\auVov$8~@rPT{8 TX=slP^9Ŀ1R4Jӷ9.ZuJ.0FXՆXzMiswV o fބJ;d7L]Uc{T7GYpiڸ1S4-f^I"mƑAΐ(r@Rͽ:6P|K>ML")& [P߶.)~J ñk?OlㅜW Q\W6Tx`ڰHC{b-F#Fi Rh~ ۧyfT 9. d/ܒs "b@oD׌a'Y S}2V#~ـkдu'<,e3j{Z_w>S7`ף_fbE6 ʨNlGq WW^@AD5r%78F׳kz?bTy֦6ߕ͝E0yJ8w[,]o\;:CGkfkBqn 9k_=0Ef ^NYH"]^9 lQjO-F S۴:E OBsBX$N ]XKQzX4+Fz eqHFw %tf;,TvZ#N(My +t VS +?S)vyg"D~&4?)(&N6gIrӇ̎R,yTAڃ3lD |:h6TxlT=Eפur@f^_dG v0\̡JPLFҿe`VGxZ;yb|UGMYs\34/jjpG7Ts')&8 ^`_˺ܩZT^%'Nܮ\oj0YSQ2yXCZYzPik-Ѳ(!I;BI ؟WAL_<%GOgԱ=tAX_9b7Rpl7EE0ƎH*Nc̰[#=#O]-+q{'VPaǯlNkMͷ3|ћUz;ZV :PÞ>/ZPZU-@0bKMWvş HMWrx}D˰'L20c/IV#Rtx'͹,9? :ʛg;^k9KR&}{/jtܼÞKzė Ps5w`4(gq:>!߿YfBVVAiu]^cϐU_ ϳ{a>*'MYw1bK>uWu^a_Pn8$߲(k,C~y_Z$E/!Ic ]KzHk76fU~T 'x0S)RRa(6K>ӟ1YhI^O Q-bi5FZNoک\ag0aMO9awtPnndnrSU MwTT0/jbzxg"`qEU 9 ?tw”+XcLDS["B級͜w̰Gу:ãP.:5Ҁ.$G~jRW4=n5.<Ԫz6tӱ\S +͙סj;Cdq-ިHtk#tw vw 7E4P67(pe< 3IZ`,V*I, TC#.xH3Bnݵ ==E׃>oazF ¾2l!{9 iWaJ\![bxb9֨n&|i1hވBafڱS6@Z9gs|B YL]~>j!2Hk9/^pJ.P1$-(y詣7L˺BE8;FSFb?g: %"({C‹WO+J?G!djͱƄqs7د5_Ϡd3x)%OƳ:glkhЮup$VNC׊-~ӲªB=gjM,SDl;xaxȈ*qkz8I?V8 y}"in3J}e$1OufQ_2+M|bZbb*Jʖd5M"(:c^\К0##HҚ${"wjzP'&T) ֥oܚTq)Iԇb,=0=ZHƍ;~d IA `tb~sNukzmGdAdzWsN3nMfF煙z,,AZhZ}C0vsu78LnK[$[o}KլUւR8CDLOdhщߐ#&:B:;/؃*8"70Pt7lGa-O.pq> G{@`Hr}GƘRĿXu.-.M)#݌ƓkD-ww@vL)>*EzIwR ֹ"Ȩ8bh}Ȁq66b?^Q;4-q ׀USM*iu.Ar4x8bg@ nh[O&s/^ՀC'obS;ɽ/ϘzMIw_q&E׀ L+0qu|oyyTԨFΥp}nWe6BqQӐ@ ٤*̮C杇S Ӓ5%GwuG4`'`}<{4Ad@H8a(c[KtuQz>ҠmeO+`6Oe2N$K⾬ElH, H&K@mAr1E?&oRcc9B<6X?xq(IGGj:Rh'P{*v8:.LR6:i%xrCXr' w|a B trD&g#E jEv7iBy $o$/RϺBءˆ %|$)]*83hשd43!oȎ %X˧t5`կ!"ׂI ..l]߼}{-  5[~7W(dZʎxltmZ&+щzQ LhukͰ(U<¾!s"p3qx;MAt;#ko3y!wo[T!3?k͸Zw}?ρ( x/ۣ|D,Z8+an𤡹 ϠS١#r~]$0=5.%xĹCZ&?,Eyav{{oϸqN,oâ'  EQEvmsgx$xe}7w&I"ܲ/*넽%S_ a'1hKuCEb6I(p{ 5;Fce@L;@E):`E٦d>UohֽCQB?=~ Bpakb 1v "D=MbypF8U$a::U{-dI%JXHTOIlH`*X'ƠcDtN%Q%Ǜv̗AI)%r&tBw}QR3šcLqc{!Gڼ-&!#sĢy_9 32Px/2Se[5 a¥鿈=ц=U~MƮf5a3%L1Y:x1buk'9 ^ڢBvN8<>Nc"*SʾY 7tL2*j۸TJZ/pxb6l#&@R gK_ WB6&1krFk*?T/[ e?e8t|" o%7@r(f&!À:HHI '>U7z$̉FUPQNV>]Y鰍̎5y>hn3P(J@zҠ0YrDVu82+yI=pm1lZ`7 H\}' G1ܑēW;S !`~hC;i'Cx]v7KKĆ52oB Db #`Fя|>w3lR~Z &݊O_SSU?D(i&o61~TG]ZkV{c#I 'Z [YGJ.K%Zz ,,Q Nl]sq1`G3C#Z=&]I6& O@l6`BGr0Μ8_'LYֻk;91`پkUu^?<&jV ~M]=_}K cmj0 @Zkڛ*kCUTi6лxLiT9 t\짇a \Ą23C׌r `>;=e *o6CbmE_X3Bzdk-Q`pJ @ɞA6YS|){hh}]0!ݏc* -v;W9>(7p08&89 )$z^fqbOR"޴'B USѾONxV܉{ %>h]y/΂HpvGj`#_O22QQJ#6]x3MЦ^|Ӥ dDF&)2DJBgմ7\ e^$fbY*} Kۍ?zBX=f:'ʛo0ӆ,B2-HH(ZTY'7>1uۅ'# Gh%w9c =` sXݴHd~C\,V#{yRx\( LU\SB-z 7+(`:'^/a~('kNzbrǥ>rWWYkf?~D>EI7Sr$j_UvUƵ> lzF``“y_゘Vёe_Fj'ұ7ܚ=qs.8RgyKoz?T{E?+]xӋef3s|Cn"x2X!!/Ȥ_ n]_DIf]cp{IWǰS,jF%݃JEtʡÉlW>Uʽ(yQ_&'[QnZXf:KrNx2vde5| jfwO+Zw"۳%un(!-"0#&b>IüX3i@s7qY Y yPl~v lȓo HȧH{Z/-pPCT+ #Y̺D*N ʖML]T /Wab3˵zC|P.@AB{oI64"^fF3M6lh{ՋshTE43 6}(:TeSym5DqFEuS@r"#reiz6ƚݼs 2 @.SH P<%W!|bePMϖՖuRJ e.X~h@D;V>&/ u,aپxډ_s;nI Q7Y,P{-0O x+[;j <'C uoS%r&:ZF)(`Zg.缊aZwF5*ӿrtӟN_u*v 6.+ gO:8cuӗiV充}jm@O?\G޽jJƘw[2h9͑Amk >/pD:mFX NPs!#t+OZ} MҠS;`%D=q?o FI`5 Y~DLNحͭ ߘlXQM'6qGítCf9I+>K{Nr66 ״&TϯNj#Ey* ?-)D{dV5o2mxjcH{+ljX@%~v=E9s72U'&xt, pR}IK _`e]Yguqc~!1%yZp>GPB#aBΩ)xfBc0/ڂ@k2{⮒uFЊ:]-HWo|' 5փש&RbD5:t`=肅Xmn3Pjc= ƦzT}z6:J/Lv(?J/?%4ʜ!^h 婯Ob;eT9'V8@AX"vrcCmǥ\PsX_ .}cԐVt })ƱCj^`MdԧٜE28|RbR<aڬ3Tf8`$[U'ڂxz)8βwl_żӯ {)`Rs2}X~1\VC|jSgNgX6=w'J@z`\!qHDGjC+B_C9끕0ӽz,' *|b0K܇0: YmyO6lsj'IWypy{ Ve#fE"[c§FVŸNM-S[rƊ\=5k_>Oy†V$qotfJj;Z[PyҮ TK@|j!5(ҥ%`; %½azJ"sPXl.U[l;ߞEgnhsx{${)% )Ox#l1'ݤ2oBQcdHծ2rf/t価 ׯ{`pi,;>? .aYrYAL<'9K(NoĶadF eq*8]a߻s, 5՗hth\i<4"Ǹqk+kZ R΋A<-]AD=/, Ns 1PѕnsF/K'wŸg$Gt&"Z8$RuT=ޓEn A:f`ʫ3v$Vuzbx<9kDcjD̏D|_Ν*jXO%)Ҧs≮׹T: UN*|u1Ϯe?H⇒O ON/c,Ipc[BeṛzLwBM#~UZ`[8L% % Yz+&=RAYWѧɈY0L~7XBQ [\$Gz&؄r ![6*N$#縃3MAa%F;gj305"%SYbb8Pm`M^/u[X}b5-)L*)!S9hm"f+丿7 +H 3>%"r$Vw;*u=:)^QL's/E=ztR#mE8d&~B^ҽ%’~hhE~/ ,jk0#" HfS@6F݋?~=sT{q"SQIx6cC(vwĚu{b+:9 A)vđ g9wzZYU.VZNc4|wr*i+ybJ>DsLxW'F>l_bÐE${'0R&?^hFЉCq13M!۠:WhAƒ Rc l'P'fG; _;it\ӗǡqbld-wgSׁ4i b@ qzJ$J Ms ؕKn(ApC$f [ _RsO13nӍo^7⼐ust=A-:Rc(Y(k_"o޸ˊK Xa#=r dC<0bEFɃdezO2XJjph1 obWL?>ftpgaDGwb;Z^uݽs*lPV f@鰱nU$sՙ7~,{J$ԐR#t%swZRMss9ri{"֪Q𘰫#gSh" \N6y*y,Ϊ8xʏ3./b kg&>3Ș etVRc n,^ "}P;qxŠV eڼ*Mré%e( jPBl$^To&BQl窊`qk~^)(LG$P(UgI{V{?L>k¥շ4DOO{ @m`rG~sk?Z|Ȫт79/[=rwO0;]TA$olѱ0*ɡ?7ϓ k'j.z9@MΒ!(k˥X¨[Bo$d_S8Q=FՐl+rןlXy9L@tw&u}b:uL r4d=D5G|Db}]'IKOYߌ[VC2hx5gd&s52%b>v3M,(i[81KD |w[1JkJ,e>eTܕȽІqU_[cB,]›q"=!">̨`s{Hѵ/X/i>ҊB:զDdezuݦPq!'T|mM{1 ,\(=Ku$ڿNܪ%='B2;F7A!fs.3FOo̳d&oiQ"4ٙC+jpC 3,IE9DgѐneTA%$^~G+܅FߝtԙPچ]DͲLiSߐDw+%؂qcQΙaN@שxv≮Fyqk6J _h"]8V2G'mP3[DR#{~˥a `VL-lsOƓҤ$+qF!=TN mw X-L>ͷEKW_u?wW@hM1z:_ۏUh\=z=j@ғJe8kˋ1@[\`zSS!|){KEBHwD~kIezw_YInbD;xgb(ܑ#B {LM [ ̍DQG2LUc˭5g< #؜Yq̇~] z4 >zv=z͍߬.2IT"U[N"'Uy+_j>);?=|m3pΥ q(V1ji8B !`񑌜z$j_#|Av~;C,{"7*uK~zxcGqt;ضV/`ȫHn\ID܅ZJWN4q nZnވ$,0oݿD3:PI$4>\)ƾ`ы*O j G4pƂux|-4TǃX|$ol|_h.bZwi''nN[]!$:qh#{Yn޶0_QpiУ6Ū$.@G]dyaQf;Ѫ#bL I1e7~%fSOS_:Fnf=hZiꝹUQިVB>TyyU:V8҈ \gfk'!)jթGe~I>jY%ک _\2dhhlL?O8^nxNb!t#3i^%)#<(/DaEm?xbv#Kl+U{]HsD$TtO|N!pňh{ޖv1xh}qAJ|ye|#5NUm3>_Jb3=2ip4E'Ƙ6Te>;SOG ,DY,Ӽ7;!I6TUw V~2pp[Fy!VpVQgPQyah/A 0]ԤzM$[:|PE׮X8rGfǪ{l{UD:hN}gOmaM`TH󞋒~y/fo0Ixw18&=@Ԧ4pYUu'*dZԻ[bY=OνtG~bcYBuVE-):\Z<t$.@Q)xۻ)/6UFQ"=~e{: zK۾{FsS D/ݫ!o"tոF]&MU+G^sxcmyCcjZƎ(BvSg]1/{R'Dlzi%O:C|wt IKrт7DJo>O[v;.2/̧٥J4C5CVm^]60~k M'XP<U,$E]Y~R̃Ʃ|mGi´(tN(Bq1LVd#q۞`"ӎkԥtQ|>L/mAt&}Mד4 F{`kUIXpi~cCB2?u E|JRV ~֢oߟ3'̗v G,lr !Y>wؾa ϫGrppTpe}:F* *b* . XmlURӲBy/ʠg/̰aZzômzojҞj; Jx *ZPeD FG蟤EP ceWzY=v wb8,na V4kvi9wtJ9],}ryM W#2-Q1VyQژ N͉sKpUk?01=#v*pO0_6A4/IbK$ *]b/KYrM`|FzQb_ZC H?s֗Q tR&Fg9ɻv 8O8Dh}0Jj[7gyC6yT rE}mԓgѝ/$yIds6%ͩ- xr[N,1^H(Y%rЛn3Ƥ&'m_k*W%;.*p+{ wyB%VAńQBbA,}9Hr.\r-Mκ@Sme 0iGJj>"s^[Vԥ`ݱs̄+LZ>l !<$76^ _tqpR?sW7os P")?-Ǝ9n'~{&9U bC>cl d8Ѳ\ Ta,/"jFoRv5c9ꨗs=g^m욚yt/(G@Al]:Bod,y ExTZhV+؄p`DJ#I5:qWZj|zJj0vljg}e;;Y+P6#I7Nk' M3/;_cWt]޼{ )<. -`2usd*˅X&΅w',P>?D!礓"ƫ: b >fQRovAJ ڗyPMzҞDX˅ЃÞHk 0Ht\Nl,+[p)q,@Z ѢҒӁ'G0~˿C|w":δL[C(Ӷ<yȮˆ2f8-z2HH~F8m";R_!vi?KLyPp.ݻqgJg C_w]Eky"e<-| r.<&Zj :Ѯ[cT!*@"{"=3 9W=EP:sưEJ:?f|9&[tZg.k iDkY7we׳GaQ6k0%#Ǡ. Ptu~h"[m,ȷLJ`;turCh]x} c4P)#=4=Zy\ o(X=Y/%amn> TP}#ٚ8b_.Wx];u3;sG4Xc4tn4Yoq--UB "eROK )|aU4-90YG(t<>`yy'%\04m6Pkb¢YajyĮ٘^IPnsX 4۷\S|%TȅQY֢ GT5YLZ(R7)4,o&*f+ɢ2L$06Y~qt1LREN.ϐRsPT }Y(_L rlǑT~ϴjEq \JN<`>&g7ql β.wOZ\ٯ#f->S1g )-۹N^C+,O0أAX@ŭ 0x9}oɨMŗ1qY 7g,ȗ`j$6W55yhZvI̽I7% ]۟4g,Zqv5qnqG$J 5cb~v~۶C$DQOg=˕\Nr!@6yMW!0`@X2 f$8%|ݬ@0ҾseQ 26mšyv[,ouMd6a`o,9/iճtB:CȞn䳈hb. ,|KˌYWLH۸M}̂Fux@~oa)s;lM HwY @XAMSXyc-.L6m,9B^m";=A)R Yȱ' yVT( C)VI}Pk\=R{CHČ\EGcyfP<)4 A&b؇P5 ^͢$IxýhfѦ97p9מ~x(׃)Uq WL?vr]Qkmd7@+yl %6O(^]V, ^c e}w)o9ӑ|c3/BQ$iNeH@ h ?㗱`hVJk+E*:}+wԝͧp~lsKDȆEF G#]SCsEDk}ff[WT~|x JIv럏t }>GV9uq}RbCI2Ѷ ~v: W$+kc{ 亦}O.IKXoN?jvѤ+f~@F7U/A׃/{1Y+88I4qfrchr{˾2(';Bn_s;4f7-FfS:3vc\$9r-?] (ozC"@7YLi"kauMq~] C)]6ܵ4(8_گ)9O8ly Pwa8R;H $m{5O^-3$n󕄰+Z$B "`\D9fpxnXMao^h˧>ٟiIfjW\>u %)MeH?F?O.O8BpIk5,g3gLĽIWmRn[t賞XCymK (B==3!#/+0FV2 Ę=S8aO" Eݖ[WTpꍿc?y#K{%o#,UFAXjL#;Θ4 r=u&m;BzW(N@V_Bhm!*P|f;`Je ]zJ!yyL7bSH~0f0 Ds}.~0'=|Lќ^ʝ~"٪0*Wy; g2/,ළE3{@z>}Y8ؾ8TPȐu\Z-0ȴcj+!O+C;U . sCt"5 vu5`%%|`dm5k RdWOd1TvBRzwp1Jl'C|R+Z_Dvǻ6 2Ly.CD.{D ^ *J6(V . p}viYiOdm`Xe uݻXH e_#tp"Nu8C4qm6/_쎡#v CnLt`K[4}gK.Wֻ֬7wK>ߋ=_;Tl,m^)f33LY_P=4p݁ ;o$輈u{f8A59fEVrLK:=Tb&:E[oͬwr8[ :gy&pGwzwK: 6fO$T@z7ޒ!x7=~~G"M-,1})?(qnYmjkH3_`:Y؅'WH a0=^-(mwqs AWR-ٽ>x;Oܻ=۽hWkV0]PQ7ZݑįLS\4w,Y qv[k H_O]!FtP^aagS" "N {;wBNAE7:MepR흼 2]y Kx,*V );BȆv ֽ/YMN×С4Q|˰ZWbjϋ?l禚` 4uVQ9-e_ 2Wg9(dOJyS387#G=Ksd xzSNJ)oքaGzsF$|D_^`81kT*`FM<HV'y:ZmSQC#sT7{6{%$!lYTrp后-JBg){xDnBɺw@DO;xL}22Buh쳰] x8ZڴyH & .m ^APS%$%_ي. sgߍT/+W[Skҋk{b/qU OQ#>!,x"%W W $V#LFqHר?d{J{tKi4qm]c9yp<-83 T/T>/nH^w4 R# -Ao0 swS2@{Re="1B2P@ պWN7ԿP]Lz9.AHu;0벹I! $ԛ‡xѼ;&IE>@ t:Efrh$U|Ɗ6[7Nh0R xGvVԡE]uIW.D @)eŢeㄦOg|Z  M:. @Ӓ3#Śli w$M)2ڗI7$~:+9@20\~ʚAN,{F[0?Ԋp~!/cA z;T(ם+p=5[q1k }6MoV ZI ׍D9kaӪ{92"< 폿]-l_wNqY@6j|x{kU+!B&%^-Q2vTeD9@uRSbZ5 WvC<mVR+oW'IZ^(@jZ^E-4c=jK 8d?cRr0|ro2c AE8It?v`#7s."foUKX7ڠ$4( !W1RYl,?'K]^vG[38-kDpW6J'!ҷjy!{SB(:횡NoU#Dpp̗[ (OK[g𼟌Rt&UA Z' !>U4^J՛8H[KE1AFdH,ad@%uՇZ07]d$rghK>vpBqCֱ{+mRhicrggU5@SwFlA:ɁE+_`8tOҊ _n@?Aj V:^1?V0qfoXӦ<")לEt>^h)U72K,Ÿvf\ԵθQDk]-Ä] Tj'kjJ~`|s 㚭Tl͑4@v*Y)^۷ׇ3.:YWT=Loj,p]S&R*X^DRoO.jGک-$<![5ȫ;Q[IQlhsez u~ho(Z"&Wo='`>_)t;g0wZUЭ@Q{c5AS)m{=;ɱd×ċ\]fH/b 3*n+&M'gE4%vQG ^~c_bK7qQ;;nw.]6A캡#/ Q'5.ejY(L/h|:lXߍM\oG(ޱ$R'@$ԴFp64m0ImC9zNv~*@;gZ䡤~lcJ8Q3Z.0{5@ .%_vb8WrG&=N$Jz\Du0MOj? vjZms/J[E鵏htM^90 aLBCi8TT_=~9TUvt$ ͇KJ61-&x WE/~+S:8"{v@YEAĝ_O4tr0bW]kMfZ,QWX#>_t˽`"vhik#J>$NMkFc_ZXJ[ȧ*Bq ӭ+V!D1W}6@4r} iG ^tqB@q{ŘcQBƞ{@l ݚOpF#M ¹/фjEBVn4liUu8v Nb\zTk篘2D%D@jp,PeL争%9ž~w/5.RY8Q?"$^ak}"Z0cØ0̈́cPD) kqː.xV!Nn9?ݧ6Ru ,n#.Ysz@[/XKR_b2Ue:\NwЍM~XLb1Mq%=z4,Q:CPa͞}9feb⠓^\IOXYoJ0Ek 0}R$`bg.8YGUrDh7rvғ;Ga{;R7|wYgd1EԽ?i 5;rI^M_߫^hxբ$b+ryf#ڗ}7WnjUӨAp򪛝4bsIx|zA=ƭdzD5CEu4Fn0TNzte˶'1f u[q%zscPG`Vxժ_x7ZU3\jHsǯaq C0ĶM^^?RNϰw,40XAlxgEJEl "Xhq#uhQ_xp&58p34a4X? JrJX)P ,}%z̆um?N+=8RWPҖ4Dd@bU6uvO&iW1J՞', պAkȆ ?ԊVi*iD.QsJ'#my<7v '<Ò '!u:֐\~΋uBfBxN`np'|Igo|\l/e @@4mKqPg"!x>#d{1(PpwV,"!ccE2L'?(fy`pKy9'=3SQk"9kX nxAt:c^lNv^!;fXeǻWmni6ζ-ŒH *05*ίʄwR$}aȇQ.IT3@\ߣ7T u%n(l'mA N҂i/yrP ll3 =P ""2Pm_M0~Rqn;h(IJYC45ATOS"7e셽!^{ A-_3ՐS>Q# ti0ML&Ȉ?@tݴ W7 [$8E.,uv3VXQ8@COA F)Oo{ס}n(`cɥ]FM'F) ch&?<4G Rswb^P(B<&/if<ћ!w#I 5't6HX'Fb;Ȳ1n:h0aZLiݕIzCi~{ėvOJP}B лXͭ+e3tJ4qha;1B5փw:v џtNDBCd\>,&9RbKyUn4.! lx/'O,&O;2:a{TH bWO( }YQ&Mh$sd`)7RnEs%S Rn!W,O`>lnYeTED zxӂIh+>  8 (!4 .p < P')Y0:kNojuei| I0,+\zHU:vݹ ?b4k8c0Q/!4(\dy(j,:*B6%Gi{Md)$ {P 01lc74ҵ(܊%ns%S݈ 0}$kqȋHl|qd5:VCG<ce LMV%X+ QXHt-኉F^lݢGR;CRN2^zrDF H j*f@p!nkyk%AKVաkK<#'@\&=M̄j6Weіf)0r)P*Sj9\GcPF=8si5v_VlneيTRރr''D.iWdnM\O*gdF0qTYo="&6y1*9FzcbF/} HyQlaVH*:5|5lT r <}fs#LY'NjmIj<bdDwB f5E {L1+; pӡ X- }S _J0f:d,6n vϛdMH͉!N J{AQGS7aٖ[Ţ7ae_oN SNy([K^®F-ν. _>RI HLzh҉W /=}~ &D.OLe7D >//vNyO::6 FnԾ+VXGhlx/$;^<!0n-hiFBXAQυ2-zXӒK\#O9΋805>mC e{;]tfϑƆT%C*cwhI5z6 Μ&$DY|5ceM_oF$|h8ݐpjlC/':gejYq{3#onҢXn?-6ߨ@ߓfϏn|Vz6^S)4lwlGJhkqJ֢5͉RGɶicR,1$5bۦ%>̡Mİg/xpfR?U’|=D߲#Ri/+]nU}9GAUly.҈OH|@8[hgO5-WĆ={omrۛ.?L{H$$`) _Dد N~{Cڥ}29oA^2 XzH%UWjERC iqL}d,m'zc_3 oPS>NTorkm$2SѝB-93dCy);7*,\d?imlI)Hw-ej鄍 Յ.\rWۑ/%VuuI= 6oT.M AK1_#H̎F'ҦLta`-Ӿj|sB3{ ǥ̑DrE͈S7Dr9}9e].Ez[tÖE?g 1 NBH@H7h\|(ʵK`!vNU㇏zGq4uDdu6d9J'ruW^:CM5W^x o'5چQnU1xgK}0hsĉ* H=|ޕSX:1 풪#7}ƿǏo V7m_^WS2AA,Na& |n r~5F*⌞!3 xMƎڵK~^"T(s2*?^5C&Po(s.i7a#9=Hݎ|'VVw ➵\qv% &B`]\OK0aI]^_Z{M}MƧzSv6gt6H>z}Ǡ 'R0Swfr1=9_G\A_i@ ޲r &۶,[RzR\&w1ZlQoB~ӣ*W",{}S&DY+ @VU|a0|r5%pO id>ˁS*lK7TSryJ?ũJ\6l%Pi>8*@#~, ºpťL٦(G?KJ͈'*2ڌ J.9t#*0;cy{s`d&ep7Ye 2(z&,i7Z*vP#I߇BlZy /bgBn /iXj4 7 |ضOC"亍-j[igͬ+8 r[*Z]rwgXO_PSIƧ)Jlt>2ulps_W>% *tzP1o= p_2l FmapT֕,(DŽkGi&pF ]J.bz͡T6ޠث]=q P/"r~ X}9d2P22hdS1l~8<dBwUlJP:‡=b¼U5wŞ)DQ4+8E^s=g b+dL|zt;/Uѓh{$DCX[[:d kDf{slׅf~GIxX̿ΕкNj?\:lUӧڳW5ޓ5LJ2ɍ^W{O7x߶ {?F3ܭӚx~ۺ fU%6V>-N)ҰE{E*=w#T(M ,?f A:!rV 38ԃWatitۂQ ߹0!/o:G2X(@/n;]^_[Ǻ(ψ4R1p6ڴl'#O^4.CX^z`5ZBYtA.: wj5}%0΍x[fS tr+5Az&1.i[ǖs"4 CF#Ibb]f/4'crĵ6jddL]~*>H< 8e_iHr i4 ՏI6ѬO74>hM>KݵEAfPCwggq*#LŷGUnOiNz`ћRI2e? ZҜ۵FxԽkO37 0l+`q۟L 8oJ(n#"6/7}^e/0KL@aNq*4AC7<wƕD^` Γ 6(rm!UKw= ]`^{] q ,%R ;j_:[z+}ɨ@rqՁ?Usbor|Uz%n6ב9^FRJѕ!2__im@Y(tBYH9NʴL(pS3TY[~Q)sAi7f"f`A5뒀gORI Ⱦjy}(F Aw* 9)0%W@*s_-}̓IκlwDPeùOm;Sq%XG3ݯ5ͧPg`Zn}tR/bYksAaUӧ= X3c@~m! x؛zmkB/Cbamg4؆*=VxJC#"oxN@m SSf#KeP^M7mJN6 !GO"XDE7&PbbF Q539mX ;9D#><>'/sXl8ܕ<#/4fR6cB1d~Bg)S0B\b#ln&!l3#YVd?a}U`_e"e\[>Q:)UUViMD6Wy_ZiE)zAXk;v?fM܇1J|)B:Fj\t+hB`L<4m47ɸny7N~tA[48TNw /Il礅E-A~G{o{ۚ" "ׇ' ] $)ғ4}Td1@ Q^CH7?{p).q|\Y)0oG5,cES͔5 ~C 7(Vݭ"T\Iڛ1XƑDNULAhR=|'>S[&PS!)tRdWU'4oyQMqt|lK _S գJM0q@cn/{no"! YȄ'z&u.^3Bxli6س4~x; MvI却LKΝƏCpyz&E;(w&ҭ?)zCJmHVQSQ26*mI*oXc 'st,˃,/{B!]H[K<bh?$ Bޙj$ȧVc{eM4}Uwq%bFd1_t j"M]YLUa1ԋ8yh y`6B(>A`Akvߓ~H4 uG eتYW tBιAPe :lO2?bSQ` f] msۺEXq.w2jׂ<ũ/$u6m:u A[ɕBe!P2tc9v /y>s)m{éds=ç;^-&6Z22LދlH7H* ۩Ԟqt$4$?|ų zi0Ι /R%GRoH<ƒg֭|/5qȽQyzSYX0-.SCkB6'UhpյL9$C^LtdQqRՏ?/feLh"Ds0 \"%.ۃ1W\8c'xd >'v,Ҋ~Y+uȧE-(^ ! :Lƕ9>`#To2?r,𲢶Oda ݱ7lPkM?a?F窱23/i7pLcPΉ [Iq#>.tE c吘ų[JZt^Ҵ=j.}r8uW T4Tr!M:'vzs5Be싙bh`p{4ۍ WTPGr'8$V:?t@ RU!p/h{ )}X}tv ˮh7T^7WCb _I9Epn0݋o1A|h]oc%(qy)kvFӄ"2g9N$zlV3wDU` u;2T@do.) hQ2\N;u3:ADtA!_Fg,G\;u+1a \ltȫq"c/i5~Yw;`{,}֜4 A:O 6_P)#4Hkn5[ {\ jKǬJͪc*b!Sd܈տa`G1Kk&-SBlZl7'¡Kq!X\AU~1 #}]*L y4ɇZN3Y֤!CzCIUfeW1- ^(jOHVKُT$ Z1*\f_H80k[b_ 0K9=$>.jJVPOZr퍟|!Wݭ;Nݎl ]iGP%}d\)?d S3.(7NPZmmӓ͈DG?yDE߇"tY84qg7g2ˁ^bpp=P\Ǫ%y~ʓ-r.Ԥ5]zjJ: U\jAyE2'Dh>lCpUdb>b ^,EeZ7UcbdS"Pd/ꋰ%=ܘ=}gMi7dL%_7TY8p}EgLx@@ubcBM3`6lC<P37OnD|l,)4N~Lb O,&WV 'X&鐫 z_fT{-%QATM7\& v?-f=Z7?"lEOcoweg\$qiU43G]P1i*[)4 bL)eso΁E O &K3uy͑F5Y{{ 7=VfJ6cUB0re̩}Ui"FF&.kcѼ_DJMQ2gvOX#מETDx{^tx2Qm.OsJ(E!~QG3V8XEJ,ذ99uzgZ{ۍ?4~:#TA|C2vBA36"OkU.3MMH=.soB"q`ʹOn,O% y'^R\Yy vPM|vKAC]75xk g*2C!H(K 5rbU(bQSѱgj x~UG(eBr;4H+*$HiA}? lМRFfYm!@xMZ׈P SéhmxΣ40&Z&س4vtZ:s%]׽[a/F/F ;9@E:A]{Mr3{ Wx|2Z,^)#f$,*{O#oqq3~<{; tWA@4_(Tp힨ĴrFx#@{4 y35(;lg|.|zңLS*u8Va.'r/m[}KgoB%R͉fe?HUP<8ޏ 08R>+pG't)M[<);.vWޘD3]y0T%>ۮSyqWncsaԒQg3h̃rI7ßRzl ='4p`Q 6jN5Gzrss%]='*r-aPF*>" ]PXMJӠC Qh Fo& J<ғ=/ #^ht1*~zXZO M;@M #H ֫猟WC ,eL&դ`T)؏-:hM&;.tAv|5LG^TPF[B eGYxƶ: >}KEWȨKPC>K6KKP%yI RPH(|ߍ5!>\K:%6_.mRG |w ;2tL{ . /]O !بA9%3 z? ILSTP2R39[P)70J{[evLH}TF䋢ir2; V@*f3W-%.xDEy݋luqBsLcT5 _"=^6GƓ}UJtG˓(FA= `,M<<-'eTs";tGi@H }d L02(ʢu CĜIS!P#OLl\ _ U~>bܢmm>NKןiS0nCd/esʑ-aW_,{ƿdq<Ȉ/\ryQBVH*PS\8&@є ~WǼ!QfvG뇏|8m)濯\vޓdJ;1G3@*DJcUunjt"fi6+ClIv39u3P8|S7KNm䋬ܓ#4q]ql}[wl> JyK7-\RݜYZ_mpVUx3keMt-Ko^:uI$冡X-DԞ9>I1TN8IEU@8rwL6ɪ2W=Շ(0ff' PMCȻKfRQ,lҮ^}yls;AM ^>poh>yuc%mz_#uN ;{QA MA?4p͟\]h<ї-/5,҃WթD0D 0K>LtIuTpjM476GBeB4 95=fjnÓK.W%A8oxㄭZ%$r|jD\s>̌M@7$R?KrGe |Ad"0XmV]tt6T/&9gO8n$%$ڃ+0Y\% ciyT"qsҒ6X·ꌛK;7>tH!k-z @fe/4}z&g#GF bw!F Tח$W/k f7<ɳGٛlI!6z{3,O.8h]5f5DrA %SBS8e2Vа\Y=iԉ1E1*pzZ["K^{{re:cMUFRI5ǹ(j!kmaKTڪkc"n֢l*^ *w>70:-)"l6XƾHr"6RS#lquHVB]" ѰNGpee=DȮMlD,(jӆQjaw 0 5@:k7*XAll,zسX9Y@\qmȯu9 %[S E_cS& @B.w_L| hDyn 5&>E1TɌlX 0GfB;rLpx+ p}3*L.Q.i?lDt>~A([P66#h38}bjS.~6] f$bbWn7(SMC'kuv|oPS6v*E#tA_U'GOyp"./A[d׬ Gk %E9tA~͙Jyhz7P15& )yc04{58։h@Am͏$\Șt5dD?'3;.;g(F說L4}h'!%b0zpU8n Q%~hi0+k8jtTjzu/0^n\.ELy;y͆e(\A獷=ɩ(W.PN}먍,oPѕ5!$iyY'C}AJ$>_8_gɠr+MzkaCל׻r@bZ|jrޡt53&zk_[zE>aZM2T!K{ױ I&:7kU}J\<1kۏ}f򎟈^S*b!!J>GFA0۠2։.Dɕ)|4龽hsQ[B:A6#V7c=xe }HMdۜbXoGj7t0'."_(CyVc>Lѵn;A6W;ԁ6OY2Ù}KzDK--&dgNb>ud/׿o>-kPN Dʍ$@ |ޔXg){&iL1ʛ7X֌OԼiAZ0k [Ht­Z/ep= p/>RbYC 2gc~*뗝]AU?>kE&, [p!XjS =*!'\Lb %;z&='̕3 zFMhy?tDA&Ku'[mZ|I^a~v,-=G3Q.PE"5 0b lZPG+--(?;M-_~U ؑ4;^%WZ'1lRXSJ~nYhגIߪDu m"DDaQ2: Wz42z`Bg4e`[$]xk9eF) O,Pd͋8U)yqѵ rt~辉^d==eUfڐnu$l_bjuLg {SpMqh` F߀^`2L6Ipw\K)b]\KV<1Siz $\#Y*rt$mѦP 2.bhfOR?Wx.^%3/Uw1X-_ dT8Hב' Ğg9mA OK"L<[cəjn k15{uH23㡱[+ w$ؼKHV@G91S HHfY-x mc(ͬ5Zf(;m2AtR+Іhk;F{#Gu3ڳ߿c S)2'm\ biH䵔Y%ytei"<*\V|?.o%]Kz Bd(+U4ڜ+u|!G܋"L/ Qz1-1zhS8F4\KQ5Kd 74҉)7=~V3N^8GYb6*3{T\r ZQyBB6 6ʣ_'ҸҢV+ǗR42pRO;U f|LSw)ֈp~CDAԭ 3ݪ^70PQY)_Mm WS{f_ue?M0/.+'4QhPGYֿ@+jׅyl{ ߈Vh;ɹjw0$T~X&ѪԜ^S(44.uʲ k !,Ap+{Iv> YZ)ޕ(хwS{y̠ڸvTaC26f~ㄸ݂82~8I,'ߜl/ጯC X^ʪ+  5#%^G1Rpt<Չd7K:ge!gã?;X\dmQ`U_b}u~;k:*^{o=#αhES8"# mf~{!1TsTZlR[́؃Sn7&GQ>VGPHɴg2!W_99=`6$HÔ>w%oi9-=dM*J7܋c'> "䓲b9) /|"gƄ&bHX+vO9oOj?UE|&+J(-̉L' `Y@57'aA`Xbm:T~E i*b xGY)[wA#-E~!׉KTRMXG3?Z*R Nx@qq0p'Xgǁ!|tͺÒ#}~T}EIR]P7 j}vhz0W. 1;|P36K֣[!&uU|@=!h~鍡kK !_es,[W+U'F]3HvY ,= pr"Zի ބp,|h7L`%? MFeN@/TtVQ^x Xf֝F h": ⶑW\l斆5nA qԚNQo wPX3~_Bj`\80(PH97'-nj/f UfJyޭd'y;5P TIy6?VZHTh:S kp$[a-}=lWL&磓D '`9 Z_I#} 'CòPwAQ4e[z5@:r5$BGD7_' jx10N4ϊ!ܐ  ~Of@gU 4 N,bvE0n* iO<립n>8K+^#6bz腬;~HwoSl[dA r PMƍg>C,k ³:޲YpNz`VVh`P&dpPN&VnOk?,xfIIEIUUoo 2?@nJ.X[&dD y7_7[Pgg`3_4v%Xƒf,ayFG=iWt+xNfkhs*W+xzG;Ҏ4ѻ*!I?o#UU.>=pXb&9jJ,Kܫuەyt>at䢨UwU[,&Ïj.$ ˇs0){S(L ęzDUp3f7UMYozg@nk1<,.'I@EVιϲT;6N! n]P([):Ty2S9PqtG1W˃=刍tDm*yn <'[D̛&qpJ;h;VpgaqIh ܙ8:C|4}=qZ)8J1Z<٣.I-2CԵ݈<$S$;:6q\X0g-(Z/Pc0 eBC4K`dݧ-0R|} .6ϗM=;6H:ø>Y߰vLg6?.V vb㥡9bId3)p3@~xfd0؛jy BPp`oQ^]d ̜.ѕUi.-PҁJ发fToG.[NnH셧ȗ΂FjKb`9d|Am|;3" KNZJ;eP0B~*HcA,B4A.Ṵ@o:"LlToQ^K/̏!nS.!i`XFQ$ryBLv {|OCp\ĽL4E\#M~ZHcۓ^93('KI.#Z;4Aؐﵗ5ESF`]!zFZjOeuQ-te=7027X[ӽ'W;ŝr'o3c.ԬrG( q8 DxdMWq?4èuBYoP9!6fir(8ƣTҢVImf_ؑg\)#9 Erϸ9H" 'O@d::weXhǬ7᪲{&LѫLL8*5DE6FoH |pGWN4O:+} &oKVyow(1I3g| 7z-&!$_Q\zSޟpkd#ř鴥ItZ./]'ds4%n3;JqEhuO֐϶Z [Cŧ+yf+dHS;W9XlɲH7DO=1B'HXPy򹢅ETWLf!GȚrP+rdpZ=Xp~Js  ^_lCzU xGAM>2^!Km\%:t9c;7LVDyv mg,'fD A2$s10}A*%[jUsmܰqdnnO+n~5 g:Z, hCTHk  v9W`Jg3KYF:c/u(h[jn:LWW sA\,RwW>&H dz? fHt47lmmd}Qjtɓ/ _!SPO wle ޴wQRAZ} Vn$e$ݠz߻T|OsVh (@w '$[}V(D= ypk7;joWQJPm\qs_S HC/NaKP\xƛqH~rѬ;'c@"iG}ȌSb+ a(P("GQț@j,y\` tO_SGt>9//0щPD58쉮~9dRĤzx rǁ%lŗmLuzEgU‚ UPCx,r1ms%K،-otŵR͝uGuhԐ!!~;OGR4v'k䇿55Gx`Ç#6bC4S@ɍ-쫴\^iz+#0ՍZ%MToOFiG %D26`ȞgkF$= *&:r$SLT}̒:ı,(!0L<5 |eqŃi$.wܺd.W8i>80Rդx+5)e 4/+]K%1<'/h*yBW4?t.ꛁ,94cc]1ceZ*!1 \cV*~c g~̚=o Ri_0}9F}~BZH1Ek9EGC|3Rz4( #w{שz%[_jSӫ 'lJP1*XiLv[K,ôP>'{8{6?ғKWxTI,Z (0~:Z@½s! PmET5sK,'Z;(Koz]`Mܬ 0m'D!~*x5ֲgxy"SMrsDi_>`/7̔h!M! IyfP9at6r(]xG5Cr^բukΜ"]Q1PZODz/vҬ. 6'}P XEqʓcsٷ|phWLU4JiOTc+``G8DAE2"`S]z͵ER+R+QzƁ]:o+B>T!ֹds+l :*,l'" 5۫T<d%ß;MApGacH؃qiyr\qmxM%#8$O=c)K+fƜ6fqZh)ǻ50C~\W.b[1g4<җ1b՛ޔgMc83^+0 )4Πo,å{8>n.)@-]Pne}u,Xa6gr ?D(ŒHQrћxT Q@qVNWdk2p$FI+{R>z9l'R4TJ&ҨN6x0ϷFXW*b}'DG"QV[>% zSܲH܋6nFK0Ƈj1" v3zHR\z~5fy[h1~$- /'Ĝ?Kmzy!s7Ά0A&7Ssd;e5=n/T2e{lFr8gؕ~ VY+qI`pc[Cr:88qDQo"Q\}.%,;L텲\?Vw92 %>T4FFJK#LM~δs%s:ajɪGpzu\1$T*m%PYrbqբk D~x4r;6v0B52z!#piCU)4$dyJ*ٕ |{{~*bMB7Ld|VHuKv<-3 W4jRIyϰ=Tρ#|.MxBgB{0ee;_eȉzuB &'}eQwst_̕(6vBE"+g4OWƘ|bT*ZSC\j,rS%1;Tj4k7C}DK3[ĥ5 ǿ:cڌͥhMxMz4ە#8.eb+@ &oeob*C;rٌ1!d].f"s.gQ#5z*Xf/}QUϤNڠl:! Z3h^)Ye \Hg%AK# -e70J-AP'CܕNHڮdI ˲q]g;/N*.CV0ǻu3coؗ,kFXO=‰NxՓ*hIfά6~ VWC.G?#8TﶺZEg3. !0rM ̶my깚X?u{N_$3ǔ&+U:rx\)`G K1KJPL߃1+uOrfr]twtZ,!-%Iq)eh_M]Wi)d7Se|/r+#seN߽Zq+oIƒIIUnwq@Gy|x1qMTr>n IhfX^F@) ;~\'sfaO3 ?`,W;u7|ϰ&Ċ0S\x$;*2"#m,ؙ=V|ŌxaHkdJ˥3_A #-Ŏd'vz2ځ{ŀ43{_DN{vHO%D^Θ3SVhlޭ< fvv+g2ZL#WDC{2 & 34Or]ʼ3*.;ǔ3]PՀ֝#fLQ4a`AGa?`-"!$#$p se) a>ɹjڎ(A,+fMY`]m2^&Ww>!AFPlV1^lZxIxAOH_=rjЗ7hYc2zvH|i=m.`fO|w+B\tO_i9R9>fD4gLن-0 1ny/Kp{"BlD7'k//`>Fak@'Fg;ݝy>,^Bcid3Et;a(%=y3尟LX#|Y]쇘vk{5@,ݑ.c+@]@m!"&Hg}ĶT:A 5WC>Yv5+!]plǯ+~Jt)6u jJTtlSJb(~B0 <2!u [l $e.FCX[z=D6łwc/2\AaÇվA7 #"fh'_]3a:jU+;fX8 Nxzi,_J~\.}~efe)Xy@)gτbk̤ =0bEBl.å4ܱC^Te~{xsdn!&wU k)k ڝ[ހ$4oդXfVC_zk s9VT],/6`T:,L&u)FzH#Aw-2ŏLi6`G?hVAݟ%:̯c|yAxpD<єqSIvSľs{1%LƯyZ檐C#ٶw zLav&Ttk.}KX 6xE`Fa.XBuM/AJao)n=Rέ,1ԟ{SR3nT f $YZ`g.qa1^ x UoI/@АFaۅ:~dBc*O~,Q_;wX1pݏB vZXQhxsЌ>swC$Q=}[m최M|/HOvvmY7;\FƢ.^UoA)llِđ+khQpF6.\v#va'M^])I(gyG\ٖU kvz~QZc97aͱ 09[p/4fwSIi'y,KJvTٻجaU]snq!#o&,|%T ^u+M 2R3Fɟ&z>zbu "7Ap4n|a{$ZTz8ˮµI\8bb:zɴ).08lrx D߳nE/3 E呁S.T' ŠϪ My, |%>X[~#oOz}Ṽ͓%e r)wܼ6c>t|Vba/, r5.zXL=yj?(w6_r "$k|9&eGо !ix]hnY%k?-HF_Ź5]4Btqx=_ ?raw?r =`fL~mTyIpzDAA'#d8z4cSqR1 T7׬LlAi7C4]^"TygL2!%;j Ԯ"K#[oNODmq3Zl8C9IKvF~W:fY`^@Uwc{_ L@zr1e?Y^3fV P5 U}_]>Lָm0v`,Aa'pF__W T/2(stH r ^ҥk4"c֐#edQ&H!PG]n}d軒Ku|[v\hw_b3#R4JbbC{H e V=Y}Z!l|y=YP9xDLt` -ߔ[ڏ˷۠%[0Bᶟ%O j 3(f>\ad \R~% /8 B`JW^d0shBWhi:JT,87Vc݀I(wQN2KHRLn綵/U>ʶd9[Ta^$Cu(<ы&c&T-4>`+&ẀD֒ .;H6>1$?߭ ^_X6J- ` + 4ԇ8g1kqЬVݩ.y =aF6dcN*pi]F+a,$Ѵp3=e5ʅ"J.۽9}!-rM'/Tn4ۭ.4/hs4sƤ40XxKWLj ώI8V rm4ɲ3 עBE΍❍BUƮ PRPWF| .Cg^BDdCc௡*yfm[R|GJe @dYЅ-Ye1wf@NCCzj 潿Wk\%J"Z ɄT|P80 -] Ô\Hy-O2{.Ku5º=Ky0]N׺XE]OV"5bX7Q-5$zomԾ_wj ILA6 [XtҠNTE\D0quOmd%iNޛmf)$^0ӕyz|M$ӭ8/h/_n,M')'KUv ӣ(/s/9ygQ>_u VUv,h zpfsq4LGY )&TOf_aS"WɃL]a_vno+cjCI@Rм>%v*AC Ҏwq&v-ll%]'M+lBk93Ď^_$ƫ89qX8jҷd\ðd۴QzQf׋/$hK5zg4M. ޡj` \PjOď3 [(_I),"9v&& `֤6%6enk{ cI.;2YP_]+f:JEqxy)jthb9X,sН j5mh."'!fb>`6eWjnҠzo}# 9(w8ȥHvzg~tf+O [kws,`=V=2V.>X9.2CtQ@ ?ismu @W04@ȴgYg/BohS% 2pcB1z%঺DlK!-W\Ȃىa%Kw-yc#C^C`Ȼcx:V<"#.濗USP@sQZS*Uۀ/ŋxO\ 9_~-) 5oRuCL,u!̆\w%3r_h[[7m Px(.'"M/yg[ NҀOMA\Ie+5#7ãw-I5Zg<iDEEi#n4+ǭ%3fC}׭]RsXBZ p|/[] ]\U=֓,w"H8̧V R6yoJK$= 5G fd+ SD$qÊQJa 9>r\I~~dtw"ՙse]rC<"W=ن\?6k$izϗz:$t{Y/]Ztՠ!K豳"/j#pQj NDeBdH"W)ƓZVɰ=av~*%GM:Vkуϊ+L.yx+-h27KO`7/XjܙqjcK{"vE&ʗAˏ̲^0:leo'S?>m!zYޅhl,t3 !r[|kvXJK l#F$]9m_h/1 /_vՋKtu7x+YR/ӻTNŋܤ!ߓf0Z0_@F꾻{"8N=K3d8h=v - SUmqnO*>35Vo$~-_9#͔a6”W 쯗[JCv{ t 8hÖӽk6.Kx}t/`Hn38lpAQ/Yt9}『kb ﺙx]9<~K!`{@x7^W=m_J[׫#- D"žA,Z6l**7̄9mE7C򉝲 :OG'"wkb Ey 3ϮǤ_+7pT˱ץbl o24'r{It䟨9Q̣}!A7o(St7"q9=ŵ'wA9Bw'V"K`Z~tTnD$C[c`lzηذIp9+ӽyҚW^h}|lyoSCτsGfܲWǻU%O&xm0nqmi;Oۘ[!)qs$q~k|gHJ9M,]Ĥ4<:%'K(KDLЬ翩Y! Bwo$aZ{yk$q $hd>#˷,Evg=xJ9MW>wgfr1zΓqCsF8'.X2MƵڬ?uo}NÑ{wNz%uA'QwA)ԁx"&O|d(iv鷺l@8XeX)?]-uIx8^`,R[N08TZFڛ~AhK4d ;M`;Ŋ\ ҫ3Xl3kJywkiD.o/vAs#9B%_K?vA-sA$BհC5mh\Ufa_!EBR^zSP/txVZ\&|ZblW:ٶzP4X'A[;.}mJ'c ؁ёCϱ5fZ#6Ȏb݅k2tSαxJƛ2 9PXS(Qd톸61^kx%7I@R=Z%ͳ‘+Jt N0v!٘*!%$} m>Xχg~X&:@Bl/ y٩;v8loa7u9*t^ m$)|&};>~r-xlV-/ `aQLɥ<ºuo.#$4[ ]=!gFJ=l'wמnRIS `YY{-^rh*&F Z:"˔Ƥ'̾t 0B='eT6P>˖ _ې<z5qaǧ#LaWs:hqu/Ab {o {Y$zvULbү6D+3^dGC[pHcjo*?IVb#CkLר2nX! $$ԩ$8)Kz$yP,Uan}N̵D<]Y5:'~A N٣fFʭgccQF2[|eZsRK۴5lLDlGO7)K# x^ t7Р:55hqi"n˙eyg*&6}˓jƒF3{>fK27`p烜i%UBYMAH"|9NN3m.)ܴwY`D'Uޤt (n)e=O`ƫA.pY=T`[jv—D<j֒A&k;}r2*B'ayM94^O .D a@|+bMH_ɡnWBGer>ǯSJ0ba5 ^)e}-,nP[}7 (r~+Zs&jRHBuadUyܯcSVn9S^K`j-{gcp )iYvi5ԃϡ)my5?3Ougdԛ'ߊn $-?([epGa,E;$9cXFvLOӰ'66"@FL!v溏@]p7> r-[T9TH{djlWWlϊ.Ċ3+RG U8p'!>c70d;Oh(nO.6dXũ-ak ϻu=N Vz)Vޱ3РznsfЗe|dVӛ2MILd5Wo 0u_knA1ZqYteVK>5.Dԡߢn^E)[62,?Gaw6ȵHյd߀::qPuA^41[QPéo䌾T%ul:jQ\~3c{X;y {a|l)|Io%'Y& .}h@3m];6 ݗC9BXGXe\S)]Ǜ{FwzA\]$,0%k^Pe(2x($>"_\?Gtny& %o0LIOdCBWkmH z!{,1?'`t\ {wH{l8\۲^dWb3EbwT4}tzਨA `gCRP75d **Cy(q Sqd_)X18fK=/ hlM? ]P9H7?ֵ)n{~ (n]?b ڳdhv \+%tku@ A\j롙 s U,@Ո1Mfi( _.l!}T#_I3@hrj['Ss H |P@|ub`?hS!,{頳 >%8Zfkg;ȟx`CIݧ_m[fU72?;+Qs]N uR&'(ތ%o lsYnlѡWG:]G!h^# &8@)PҍLľЄN}I<UuicEn]6DKhȺhUyR \7:3L!u@m$ 7xxs\GKS"WX\Wu戍c@w#zO qy__NT Ӝ?!n'^xS~;tFo W}7=*!^^ az7YnCkO檚C-ʫ+ܣ:jqPX$,Oa0hV.6F(Gz˔y;[,SY6` n NQdg@@<_F~>̮遙jR/V XhmuSgmB%qJh6er^6â[?P#T;q.*Ⱦ,^ =yJK_UlC:1q|rFfs&  A` %<2&v$.S.!?SfťsfM݆ fRFvux PY<I񔬊_k}UHwEh юոܥ%:yr!Iu( ֳO 3"t?'~݀cpZf7aDtgKE9n:4uP.3Yd{GojB}<(Gͷ;juQ3$@υsŨvdsC<.C0loo8hNJ<ݖf~ߦ .)^xZmhts\ɔ ҁ ! @2 }AUy.'J+x~b:jQxîE_ oS肘#sg8qxyk6V]).Qʸ"o=\{r$>D* ?S/4X=ajaAul5LmiD&ww QkUQ[ stiӘ:'\Mu쥌S߉:v_CFLjʳ !=Σo0ЪO(lOmI:5 &Ӿ(r+RRչgn5 T3p#I@$zd F7o(6{B>i+#] N W<'U;>/Tc"G6>+0Qr}o#yez5@<6ms^m²_3κSci9Kޣ5(lM啩fvJ? NU 3&ę߉W\UƇۨg@G%^f"4KjљDw+yƺ5}AV`"f*&Mѽ۸C,މɇCeMv˷?>Yݷ #dz)!E3e-WZA ~1*Ymuc_SC2s|9[ބQdC\=V˷*V+/@ p)|+/} 'QU{NQSX"a鼴JCGKhS bVtA81G"KLǥF>鶞 p]xcǖևg~wlE9gjfT>OK8/T7 a;4'ȅt7j24Թ 6i*C'AX-7ۿhgKx!L)?B;V c v3@5A)ҫgf'0u;M`X`iFġW'{7uLy&$^3t}˷וnv.3@[:$fLeRT 4']A ā)u1k,}LF)-p5*J5oeKs@l`{Z Wh]*X~v]+`sI^ґ냲gb"U# {?plS=TxZ%47J<σ2,ϜPGA ϶}x$mHǒغ"Gn)``0zyX"|*WUM1M?\Wai9+( s&!ȄBr7Xz\`S{%eqKɲS1,@M>AqbRB+3OFt7X5{.#r^Dx'tp|x>zm PK+ɹit&#'#x b).LP3uB(dŲז4uZ#4QxpUٔ>qe&b7g <6~Q؍bVfsLTd( 惺:0Ձqh RTр3Y G.4Ef3: A4\)_U"Tb]@ -FPyS)tX؆pu"=ImZ׫TJ~b(Kp3hSg :kyS S2 Swi H rYnc6 vlG?suGEl"^5NdwCnH=!^ a#L3^gfxõqbs{)߁j0>vq笵x7Vee0%_yϻ3'>[NT:Th{'U`ZAsٴ-p! l(ð X$ŲYQ|$ {&v~'Hpx"bEwP9gWMjsM°IAȃ/RV,0حZ̠9m}n9w^j]Ș•B7b'32,=!,UecUҔPfހ"aсoD⬴f2nH t,@@O#es0nD `JqV&AnXuvvs_BnW/$5P$\ܓ_a:o-saN ~xxj\m-oA[sL\%F{u׌jt|t̥{j 3\%u4J?1Of8E~6t\t`D9b"~_Trry/h,+4^cVqHg0?AB(`g0Ԙ0H=D7+,!O^ŵ@Q(Q v"8Nv:t!Y?%SN+`GLNze.o.o{mAvNwۑ^\DGu?{Ҕ _ͩwX N90DEBrYߝDAL`?Az'c!y`L6R%:WDjQ8 &mB)w7ډLFU"!s rT(Д$pB#OeOe@:gXQ֣$)s]~0y>8 seG:5ezɸs?0\.re! 8PY#)Ա~YYX+kȘoPp7yY'"VpM: Bm Xdwq6:F!XpZqTT*3RN ӰACkʬƇ6r}m>5@V3t[p姖QF/~r@ȵ0SR\k$ fF#Yԩn@(=v%M<TF+W Egv`$Q $:.QU`,1p]7⸕mc4?ںD,A!ձ ]:X6-A:JX6\O+?OVӇk*-a~׾q%.K g& 'J -rW Ȝitե 3 ;`$@~_llyB*B}DqrK%W?:ƾB V2T]U(eO|v2 -4j\ wps7Ӷ-2KFf|N zX t=i_<} |ijZT 2{$ M̑d ySKKu :na0~l)^3&#~4M?Lpܐtot!j#7pqv*m]*)Q-qROtңc+eNO:s(港:[-$i{,ۋx^qG.\̂ڶjlk2v0 U3"耊gP nf'(#CrLDʡ-P1Lŗ @W V:AmSBVf*҃Hk3ҫp>(3 @̫߹C6fZfE"@8w>!VH|m\ghӁ3 ǟ49xHe\a@;m횷4CQ*ݻ cna(v:ܒN49Iڽ6=q%U:b ^.Fdf"D}w,TI٥6{O2D㵎=fK벹Ix'\l *(nI*<VSȌ =ڸI":^TTf  CrL^շhV em)-܋Mm1Ң^)Ŝ%AÄlc]M6W.^/ɮ89@"5}lTo>'<6M@5Bv SyL̕؀Ә|%=tT~seԭC0nO ܀ǿ}齦{GNݧwRYkzbCC޴NJҒ,Byn$%#a[;`p࣎ 쉵dbUKLZ.+ȃDIO>FD+luv+WX8;;Ou,yek$GtY\'v?c4 Ѷ`j!s큛{#eYr 2W {QC|U)v'&4Op ֦bH8؟@-R[RyU6hMF%!#|*d{tQrf*9M݁Βsd<jB/34׊P=X6Fv"05Gc@'1P r]};Z25_I"c5" x" =w^Y/eY<: hR/1ƗI PP,mlP"yh?'e( wKNnܤ'B(p c?n>28z e dd)UC,u!P\BѲCEBkJ00&;s9!q2ReN׹A3h kޘc/yOYLe8kCpH>cUqP걚J#"c?f7Ljܶ+q,ǠJe0[ܣ<dL;p9DYu'X T;=sRRbEհviRVvxY0ٌuc7LpDa|72d\;(wZ {nbm, _,4f8ԴؠÀ8 AKu呖8S{I 3[[{E"] A\d\frPPS'%n--՚|jVVs'v^1,OWn"YS%Kub٫ǀ);F+Y\/V;z&!-j̭{s.ZOy %穖)JKʙK #%([PLxi[˨&1Fb!aZkR j^\СH͠_$KCD,W̘4JIjqW#n. A^j\(9TxncD;U f8 " woC#,PXP==qs rhJB.!Ӯ W+%ħ[x毻/Bq3n҇+{#1^Zg<^[׀.yxcHZXFa;Y1}*M'UD"]41c=eTVH95LڠӗW 8/ΜPD1s9tRgJXEu,M#l,UUaRR<{Y|׵z64!$^U=ݏӏF-ѵ9Yb ]Zc,l%Ϡ*V[Dc`tis6y$H?hci8s?B4"[yMmTֽڤ;jZc}ܕHwǓ9H9.L*ʡ>'c@:c>T]i\pjSxnzBvhH:J_b֬~(hRdt9WM|BI_tRhMd`BBiˑ$XIfVD B'zGk <;BZ5t}C! $n! prsȜ: H~bD(_Kw^71N!X, #. UI_.KK6ej,q;Fl!+!8vnmn{1o掫$&{U`~ ?>)츕@?3?X;w"$4Lu!B:iCs#iͧl4 &Re_FA|Ġuw!*n•Es1^fTH3RIAE=6*cJORXoŪLNoMy;NfmGS2Ny4tXBY<Yty;&N*x2,9i驗4 Η^9-yq {:7*45E)3G4z*V;'3A4z5i7pJ$ۥs= } 0ٹ-7iSVȝGbk bő1 l N% S&6rV~fz-ZU 9PBi`k;mG5dQ`=4t3 ޸[nRZƼ7Ity/NRRH9eX6gAZ[y4wK)6|5L5ѽ D0 RH*ru8  z tI[\?]|D~QЌ/)=MIܴsX}0q ?%yM>[2$0T-6X.|oVJWKL0Vsd !cMraq:fR͢Xy^S/vIJ^bJ &EZU>t,! 27e@.C*7eC;pZͤDK𡼱$T6ؕēufqNZI'}'~mt+-\%`qL\2lS/p띔9«&hi[FyOPz\$4A! M:0Rh"gڭ׽9У:T8TV%iCDBLV'5^<껯ؗ"gffGLK#  iށo~wfϾ*l%L.;k}wYti#MٰF~y4WThzL50nm|>x$m=z ScPԜ+z9W(",!pF%gƨ. ba_n Y$ x< 9_")mGjNa46-9B;GtI;ASc +AeY槰 Q1Jl6ù&)~(Gy> VrT@,lN8S-*S0ԜDGV/<ۋQFn)g..{ !dBa0*({Ȉ%F=ĠUhTw9 p$SWGVʕ AUp•ŋr@oM?([7D觝=#Sx4hDA䓣Mǀ)TZ zr۹+ s'#]@ Ƌw !,[љ/0bNzOp y$Jz,rV*5\~V%Pz/]VյGsj_)}͂s\WwpK<ș75o e#PY&M&,;)'/K%=36V^K\bMzrn@æao !|yVbY$ Eg+UsH@l6[{~7PvuoGgj #"Iť+$5ObZ,{g~7L=긋U쏑e?%y&%[o*&J¹tX#o:feJJڂ{)gd\&1ekUbiꍜW|"#.&|6M>%=2oQE X<qF.0HQ @FHVNiR`\E>[V>o<`_r}m6?7mt͉k,걛ʦFfG8Kl^~Ʊ*GP[:"jveWpbY-?cX7qdu.` vf@CT s,! ^W+5_p-hx f5%=>a0 *ad~XIϑAQD~KNMJ+2?M^Y}teq5?Ƴ8Aͦ ksCxgHjZ2KЏ B660ɔ5 ȿ"Ac<.gGˑ'ZjBKR} MB]OXHQ!s˭0FZ@t%C:BK~p]'K>땭 Gh2N#ZDB9Q͠Y̕ţ}AAvv'yUfdrར6<3ϪٙI6r#3JRES%!tx6G 4FuLOY@7^ Km,b;d|V`6@")B-Hxdn2`{"o3>Ki .p.:eH`4i#>3U<Μ`:b`ՃbRrunKcgMH>_%Y UUȐ3%$'QK/ u4ы~;M4DCDSPFdRjΊSZ32CQDQF!Ҥ)9b;Q3Wϸѱ3w6vl1B-l\T2v1)+:{(YmF] QpZ\g`x#VcG0;-ЯI:*8osM0Xs.EůI꽟#S0V?);cf11TM2W, ő~f_ݵ-JS%УVH`~2ƿ1l˰]յ\ݽ@"d~gb6Ɛ_ƥqJˍv6^j;e#;~;g̀(Np屯nK+"ty:E:;R6Ϗy8|栜VȌ#[C3fݓ?Ӥz6@q1veʎ`A5a<蛭Q,,?ĉ/r5qQb>ra)5mMRDoc*<b(%ו :+D<i6~aepG?GsvVm )2YH;ÛhR䖯 tXNLսK =9:#GUx$ ;.lqa8qᘟpO̓ʇ^[`QD; AH-aR50cgKl_Fw f"?x9{/R??䡎':o_{x:lk*ډ(\#<1vqN3q:ӛy7ڕdwDyN;{̋s Mh .R"%[/3m(:hB|G{],EBru ?^RLX3[Ｇ|+R'e zҒIf(:wZ%,e4(ه0IDŽb;џ.ƨL|:w!iaNp׿S7&AБ|ٽ@{+C6f41E5G.69Z{U]t/nv{sz2qƕ~tWR&?8B-*p[ i}{e8BZLd-DbzcLH<$v+p1֒e׆0y4"*Gy2 ".0dAѥb*}E־=6HA9k1TGzZZ.SL+R@P ?-IF'>7N/bdfrUOS_{H5R;R%GمK)g&6!St SgO02B(^nb]0F8'ob:I#_oQGb -id[|fmĹg0Y 8 ݀y/-2?ģ{t6d^+zQ{ ~7SȰOt֛ V_bJ{-S_쉵K*/JH&NlTJGbt{>!檑N5(CU!,˺Ts :SHq lAq4V~<Jhm[AtzdTA+ѷv&-bDҁnn'b_Txyi`'^H^+ , evE $. ucI{-c@:P"YJf?2 &|=6hy;ZEg* ? "|A>h{fynƌ Z!n}>+p ˃UXyOP` A ds$ѧY;!Ee҅56-8&':~dj6}#!N}0X] t'/;g8vz0h cXg͞%|Eۑ|1S]`DK_ &'VʛTh/Foq݇qh3?2#d9 &v o@HG=zmDŽ"ӠYH",|ȑ _g'$gڄ|zR1^DW3lOM ?F?5 +68`/W$xr@an@}8E7:tVu_P61A~r j/,2di%O8#z^PR?W罢˖=MeLCœv*2Y +у.'f蔙j-t^ 4Uڳ!0t5mWw~8 QU]x)Qp6|bZTxN#;YoӀ#*Y(tnAZ!4_83G%G kcsL?2xV# tk`̊bE7 <Y Oyg- 5h̲pe=m(l} YYES5k۠ә)*Ǖh\C5k@W5Rt?Sp.,`TNs$K&HI),@0v&ymΦG$H7ׁ0on_`0kP[S0l#JڹM]19 |b,7D;3q@yr}I:rCS{zEj5 x6Z29qQD9824+fJ*?%glnO)fc^cS=@^&eHƷ|M-qY}q g@l8KokXeq7ht~p ]CTm$ع@9+CA],lQ}=]V|h$q r΄B?g0*?"1_Itb\_ ^ᐐTqJQ 51}|u9X8]0dLmTfՐ'X25=>B?AI}!r.ƃDP}cIxLhءnT>AR\JKήnd tTek񷴥A媯`!h,F<pFx\G!PW :ʌ0l6:[Ϫm͟(JO5B9z.Cnmd]ec/kOzoy~AnĆ@A̧uJ·^,RLb~fΙ҂Aw,.1hep=ܾ؏ 8 'GU^^P /9$Z.LPo W )20Mop7Q9#K(SPtE§Zx쨞Kdwm#H0#*y!6txQrx "΋E[ur)IBQD;lː{GWBZ Rԥ7~fe~.$w 0pWz@P _&;K1K9~sy: )pe< gG4E_C-MUIF/^IN=?[/PR>.Mgj&i?kO-Rnly+DVaKGыz_힖Pm & ۺcBo7Df;SE1I 끘R/U:8-?M_ )?r/ ~}q<Vf3|4|_}-ƽJ4dMS=z[hlܳ/\-m5ƨ.`=Hv*8 툥eo&>1H=~ljzUL&qcJS,C|QbŜ,دp7jQ.JF[*Oo@^A䚌.̡JU'FHl= Dk+  %\}.e܋&!g&, 0,0]8CڽuWBMF 6!IٗT uzlq/`XAͧ&M@qke쟻_-W$BS5*JmQ0jABë_{ef~9aq2[SpJoSH]rT zY]ĺAue$&Up1=0 *+vO$w #pNΡ1j_;. 3#ꟊJ%u# g85W*%] S}d`'կBz1#Wг vKaOanIݻNa \ErSAGu[]|3u @~;΄r(nL8G ϧ'ehUTl Ig_)J~ϲ7 /{,ƌ[N멦NB D\H w ɎÙPEjQnƌa͖G!v4"^a52&/*2 Mva[/1΂/ap{q'YQgc@wwÆMMs;Xl%ӑ^>x޻[iEzi`=+2'lgCDNCSL >xJaOg=(E9<wѡOPyՠ}؆ġ8U=_ LQVEgة0̅L0JPj{}Z]0i!YU&N r('"?N Cz:Ilzʇ.wjniW'V?v{j7]iJI/ i2ڗIs+s<.~^U{F2rejؓРǶkUnSItr~;EPI\5;ҖLm#jS-=xX^M`:Y1Ao+WYau_}AKH[fdxO Ee캄O9bUJ]RgM`AL!&i>43M[2;;9߅èMs֚Rik[[̞' _4_dJ;ѭup>Djg΍_ hPrLƸI'y`R/lr\uKT$NȖJIfTܮ9Kғ>-7tf`I ~^01@19v3Rw̡CO(?N4`{Oj^F#yQ[DH*a*S Z+Б*,WcgTj*\a`5c}'a.vEl? =S(F |@N~ݓV]oM4|o,v˝UЖn)F,2x`k3î9R m 8v|LgV8,2d\8lGS+lx7;k^JwC,]fZ_Rq掾s墳^J2lR [ln#ԈyQΞn."uv(a#6C BS_(IzuPDR ·Q>3;qY lX'U4jۂ'2䴊5mE؟M~j}@qWNĽ}}?!1 ZA%U_ ^Q:8C/,.*2Bn]o#AyГ`w+]C*zE(eE-8X(r-& zQTKj?6*Cy|܊>D(9MT !}:}cE LvI^P|# ݳ1j TՍ ]“\#'S($7(( ճ#`uM}m Tlaa| 1JVʌ6yCI#H ^hWulGiY%5f`Lpo zc0U~m0D-&e@gOD_ (MR+Р~Weۧ#{Ye~tD`Gm2+aֳ`cQ g_!XԲl_X|Vۂ:b#,+^B*~ k @fÑ애y*$˼њ6^-xGˊ](&<%m2< dX]`'pΎC"&k<5Ţz)hA΋#pyB^3zG-V_3kŞy]čU= vt$+>1j;=d$qQϋ:eYgrtWFhE3".n?'.$72~$v8ʣ*^b=w!\CDDz)9k0DydXaonʛsLEtfa@E$nie@eNq߷JSȝXM%@[[ 1N8¾9ǰ(XJO>$(C@_r%g#zo"]EpL'm4L´{"eT?<(E<+ V*宷Q|H q,Kz `Q*+]i퓆tn2gH@zfrnSY[a7Ѭ$:Vn4P|wwT#0H%3hhf /'&h)ʠ*q"+3r7ᴥ~'u_FMM->043Ө+? <+ޏvp8ă=놫w3s />3m|q[l6bO .O%4L SQsU!BvILb$u|=BTO :V"ؘ ^ܯCriѠθ's/BUաhE$B>jzNUֹ|5r׳Q/"b֟4aBY‘Tt&kӮDe )ԁ':Eo{QJh[`bD]]5*mދ;0Oaݍb;$wA+ ϝH9HWFfY冡;aIQ`zǜљP:+iHvmh H= n;wWmISln.o ajݓ洉D8S fzdDKMwP]]k?G+9k@l5 9Wƒ`qd^H(DcVxb8ђpH4eHrV ^u? ?=R!g-!ǵPo eP9B>p+휏=m^AY/&d@m]xZBZH>:ؑ#<-b+qi}0&B<◢ٯ֣0A"(܂RQ a3y;jnA DVqÙ2ڌng~Hr0ˇ{&u.oC{&+Kոb݊jƂrO$~3D6Yjz}y' g%DO;@m١W嚎=Wؘ!r5$nƔim/d7sX648DcXU80;Զڲu t2g~b9mЯw﹐XkSjVN¹g>t $Gk=HybDBI~M,2 YpE)::ϰcdb=i[i,aFQ@g~*r` IMXǩɃË6z ;9J hZ9VF*G2Z 믘ٔg:YUgUCQ@/[RDW2_컗dE7x&n}M[~;1O%2,Rnx~k64(w2\\Dۨ0'.6深QߪN]`+FR{kX-꞉Y5iߌH&]dȑ(.~-/׳`IF_t? x&lJzQVk_gIW)US{8-\!g\-YTߧ1L=up¡M˽pZbR^B$<ߙ}$ssk"Z)GƒKKfM:|}o ?綝3|i =9Úq(+L/GZ?npz1vR.UNj<~pm5D Hw>*3>*cjJiEALT7>O KzZ3}^WeӋ$S9Ⴜ[' ˴{?8_pn.0A;L6uspO]Ц-? eMc +/DI2 $_H#`V!ND ;9s"S;'dmX0VZFX!ۯ9/Ia| j]?F{W?Zbݜqp6SvZ^ AgнҔD}8H{H2a)h;gM)7ٚs18xW eiw<[qF706.hk?zHu i6]kb:4%1!wgn,!j_nO]v!ɕk- '\mqjld{2\c̸:KƬ\S e< #l`|\EUкhO &3Dq\ti׽˕A W5~w2@W,֪=it+H: V8hq:%M N[B:{%~CV>O]3L7JJ$m-f8_}MTK>nځD  x'̈(E)(uWFYׁ]zvF~to&:Z&?L)3M%1f (A@ѷAZHZ2R~%X 0 +J0 +<sp1H?:DR)Mue!DȈ+an6H^bBc"eڴƮl]'iZUg;euwja<Qb3.cU  b n/2"l^YV׍"eyBtaBI#K^Rl\#2`0]ttS~@( "X=)Gٴ;tk*Ş ŌuQSh,-$fi1;))߂ɫ`d-"YOȎ{w4o՜M^eG`]b^UiK:`-r@jWq`0e.H]>*HJfHl}WiRTLch7=JfD~qm?z.M(#"T`p j Bp8Ob, P]/v%n3#:i8jTFOD4C 3{ DYIDeo^RgN\wtfeZ<𜴍P Bs94{7"3+ vSblا蝶("7. 59[LMK9m#|ߺ>94JW\|p,0$>@mkc+#YCEa3uTiϩR8$0V=Q߶69H*S6ƴ@T|_I كϻ Ca:<*YbNjF$ UA1Bv-آ.M}pz_SbBC0{"H(2~,;4o^39V& 27>ٻsc ),Ƥb5 B1b[>J| gs'fҺV ^gJ[! ִK,ť66iϨǣ*bΣ_3:Gv< V7D)9հLC5IŢ G ^B9 ""`;fnO}P_#w%Om<\1|OP"ɬAˠsElgNf¯,V QЯprF"϶uoSE ֞6' J\G7&fRcȼR8ڢ+XcI;Ho ۑ3n'ZIL‚T'h*֌(phO>qV8s ?<{: ^R"*QR6=S=OP[P'^hi\\ pz?F8}"؊ X R *; FfC&̠"k\څQzm Vn:ڕy9qAqD5~iHEh.UJRuDq$rxu>ںA\O|wDx|(.;ֵ5kL<~D~PGw3(fH :R&C|F SlTiBtWJ?ڻƬJmtO#d/Y@?bLٝ7˕XbJg>!-)ޣM ^!|VV">땴:34J`EcREY+إ>Z ljjsz<Ɓ;Y{^P`/.#kCI0/aiו lQݬ?)+L(H q'#.e! .0PfA倅t '(xٖuS\5Oa2F˅t~رNv/P|.(PL$YZuf'u^ys~ )> -M0v!gЖrDiɅA6$eC-@S]-cBbTZvyd1{eq34{9|0Uf#vkwl6wW]g~*n+[a?^ ]ޑM0.S$uj I[62IN"̮fFpNElB5bAw@O^Sg|#J((faG&Ԩ޳feZM40řq pUZ՝B='68 mk[j *G3J Iʆ3zu( pV% }ueb`Mب4`#[ uwOy"ʢ; "{{z!@ՏFMAQo)bơdɯ#z`@$=xv@r^Л6ίQ-9t^[0¼eJ:Lt@E[9z% c(zuy5G@-=Ap,CA,^YL $ Se~bCWd5 162:Ϯ8hg\x%ZOeM6Q *z' xhoݗl㱲#V~vUgnF7Q YkA ;Vb?]blV K/5ә_q*yR@|-}JKFoICQd-Uzɇ`nIʊ&Qn-*rɭ ~ԍ'S^Pؖђ}٦Ju!Y TAV4==W1AKO4j89DPm:zQǜohQFˢPZq+?A#즔9&cBԚ׹hXPK!=dLS&b+;˩o|_Ⱥ-ꏟeaIi<-NV[ɫ%8QvuWl]@ed ϯY1\a+,p =ckukC65xbgKŘ-xώIV5 r ŤvFeĒ-gB(8~iS$WaPEjh7J fōr«cdJZ q7WM.tEij@DL2/ ЎiU5kqw㍋s VR~د$isKiz%K!dS}䱂)+Ϟ&!U3h)=UouB7(|&+x{!Ƣ:xyɠ)TR| ");W?4ؙ[ Ĭ*$l@z 0X8 OߎZ<φ"~Y# 2,?gk+jvc㨵a+4a6l~`&a8,hl"L=n_D/Mf+S}[l)GK:(߈p3j{0w{e$Ba_^[W4yY#|PK EPX<9_A0-FAkx̙Ȱ&N=KtHj/QQ 5KuoS')0iͻ}AjVMa6X+}/uVђ}ʢ:)qg 5SjG =prQoDԩK.LTd?)%C91pCjC@T"a<˞hiiO:wpM1AzGe6O)zĆ`IJ^{\ﺙŔKC?';vO\xoԴ0ӯ:߳\.^yD[?S!S77[v/(Yp9BB2*vE?_cz 1de/y֮iw/d@mqc>ҟ|J2B14$g,=G?QLvy onrnse蚜bJϛ>@F [%GAMU2qt: g\F)Ywsy>y9`坪ך@R@t. wZcaNyZx).kȂ7=p!Z^6ݣ:"nl|y`]xJmGtCBsGwy{ar Ɲ8&YvV} k Ew052/4 t|oA7J|F+'A(A Z #Jς=) Jb8b|hj͹I~LڍC¥/NaSnnhlݬSWSCS&֯=tٍ4M )"zuZSl䶭JOg B| ms +l ʌ5M,OŁ2E?oȕ 'p!t=ט)KIrİ/ Cޚ3hޱƕ'*ҁoEruIbR )Jԗ1p+j8lb:$kbkf-'c 56g(d2u[n@c=WnО^}J̖/ JP/ ONſ[P݊1dZ`؇ MVI0^1'mqQWf o Bf@g &®Y fO%K,C6^R-ħ%LƁc(/⻄VΧlQ Uc?hDdA̿)ަtɐès~v:Q顅 K6A{y%2l6+p0mօ̩im^$O.s:h[Aפ@D>vmv!@BۤGݮ͵"~1 LNXVZ{sYϏ?Rص^*>BzV_kE߾*#F,.+6]-x-B`51rz5ܚh!Z[`t17h>y} c7Ko'8@.-mˁcf!g͕Pk2 "VgWAdJCiKeZ[Lͳ¬nЈX fd"+ݶTH>f[AQG:O2Sd!qh=_Zr/o)Mh?F@$>eYa :=kW8?=+6dy -zRP'du]խ{Q0 T8pRoKeFw/=BV;!5] Dڪ(|Xvd ~a(^)z%v,%ndkQ$c+@Y*`([T8X ˁXW0sGԫ:kvAdEG4˽E ed57חՖ&CIz=Wi"O[৞WX~E񁵿~$O3/)R(PG@|c1Uvi߫%,Yز O7:gS@Xth UWUߗ5­lҿU6zT(o<7_2ţзy;d rI㕭YC4ZoV"zO/O\m Ya)& ]$?7|y%NY=WK* 5?w7M qc(ˆZV'KYc,r59 6^RgSN[3[5lMӵI9$e]=ai*WJjs͘`%Lwkh#<ͅE0A>vQz*:`I~w:D'W#t~ jl< FCĨ=G,"KL|.])者x¬a#b.9%xw+A4 v.w^p&䕺- Zs=T܃kGWA?Vcx--: |UB= o)t5!GENidQZ'woԉwX8l Q,E1lX|͞=z[B({Fx6MbÙ. (͜WT!oۋ% *F:HEO=wyiKh|5+뵽|+C#F~Td/acR/SMd :i2Cr)Rg84w.Y[MbF δl2ioϻ,:`s1ߓc~tF 5)>)fs)z ֚p )rSV|Kz2C9Ćj`c; ņUwm"OIN$](6)| *lAum\O Wևbi]b\\5H_1Z9.Fлnqv:*mUCb5z %av\{5O"!K?HaXo2\fo`xMssF?6T;h%$LVx}ǠoS}FhݵN?˯JXcN7YP 8EqRa*|7%XNHeF4{E S*|upd"=MVtc>UD(I4u>㌽I )[2Ϫ倻mkSGXb;h :ܜ,/9zfJ>eSK9'}#XɔĒ*5SV>ם-9ZOm'-%wu( V,CY;ނθX[])`>JTgz5t'XPR۰0ذ4q)cG*[B'̜ڪh!նȉ0YWD6t{Crp &0YtS24( [i{I)Ygs#B>+fG įLY^x#rXlI8z8 /t+ݢ} $~֘d̓3*^㨻]8cyl+w ue\=:)sfн1Cn!+Z@<7 @O1UtTdhv:&碜c7H֝'8 @^@M=ĢSʲ-Nߙ >ShO_kٷk^%[O`?4l k]8t'ˏ_r4 Rօ`-"NG f!HJ=xZu9K+Z& }/z;r 8~&^*xc&d| ectFkV~KSF?|ۥ} |Q%&]٢LiP^n jF_Ak${y ȃ8Pk7e{Y#XYL 0/> -\)oxgIo  q戅G*2]Ŵ ʈ8BA=1ۮjHY$[v6)@# i-ч4KCpI}Qw'#/QK@oi6]@,¸hV0ClȀQTQ@sQZbzk7wtcRXWٚF%3%K75"SrhC0_(-tUrMm6`2ydqY}[VĀ)2֮ꊘ> Qk*R4~x=\,35Lp z5x.9DZab{T@SK쵉zhU~'Lo E l1XȬw:L UwrAL7CV5ĕcO4(. BWpQO-[/uM%iFfq qmḒ*}܌ʟ}߂w3~Hu=*tEvAc.!Vݖ^ wcWVt??7avF sH T߹~b. q-34QM [ iv]a` & ^L $ <]ϏpcD'6*Gr`4-5]αXdNz7SN* z?͊MP1>(# >Ȩ1A'rOEi\O%q)r0[>l)Nj Y]샇?xw-S)lMC2 %ЊuEeoMNѕМ+R(1v9[w%N$Z7յEfG{FR0Mn}DkT7Xu1W]^BbB2A'?2{#f;V?vcݟf5oVae)yyK4XSJqހ fQ<o93&MeD@&Ƿ\>8% śP>Dp83yX/IMRT̉Ե@NNmse@6^M>EW? ZlGUB29myWF]|tl (Wrp7 FHZ&v:c/y­fOD(#}N/D%-dHQp=G>|MbH\-AnA7k@mUܚ$q1ۨ/Rӡ_upgi%Lc iD>MAHKYhoVDXiܾd)ܧjMhʴe@85% y?~X!;2Q(Q@u| xMd>^msk+[܆[nLr7nG[kCCYQЎtt;Z¶0ԃƴf> LeVȞS$%fG֗),lZEdLN٧],\S|1 -IG;"(l6Ҩީ=%2܄9vkS7 :$~֐-D5  N$زiվ0344Qo+#۫xhUƭmh hh~ >dbJ0ϪڇW' 7m`RbӴ\ ϟD*[̮D,7az Ϗ*rf ;|8Ji r-)/ zʌo.[G}`@caĝdlHsaṆ[4S A}.G3O'ˋlg~Ƿr,!v\X# Cv2՟׌+ˀ0u]v{i{9NwfZY0fSe؞h0]8g dkj\CT #_sOYv Dʺ׷7C"'eڞ `5_%YK(6}qqG)0l ~6/<ذ2]4?R0d4'cł1g A"W5( qà0[s;iGfs7'O#@ b CL 4k$돬`b"= t̷*s Ɇ<Ϸj'x" c~Y5 bOt9{RE/*߷{`&N[PW.ܵZ eLq*R ݝV+{=i&}|'rϭkdTdR$WEV9!(}C΍!7"S"|-MZ':2c\v!=f7ei/2MA JD[sPdr8+Lt"/XnNp fH9EjUFSTrу 37 j\l3Y4LHg>8=]w ~:jK=e8@Bu_%IH^w5)RFb ࿔ȸ|ۀlM8N4fev@F:re܊ooJE-"g$$AtM)㫃 {NBǂ3y~m0 E8O(TA ,n"zsO(TdT#ӈ}*žSws.9 dZŴ$wVv*2U4~B,c*3ksK=A+y_.lNLXr>Ȱ/j0Xb^kϷEk.+ׂi"oH_LIRM@OHKTdXa-?YIkT*cߍS&]_r3>T5v0}r4Ҡ} YZ