bubblewrap-0.3.1-lp151.1.2 >  A \/=„}r.PMJ93Q*;`S n./BGӌMUwn<8Uե@SWήț{Hⷑ>=@cݐ^ ӇV{A;k bm kA׉(0 "bcb32fd8cb256ea36af1de787b038ec44457146b03fb09fb8c1f732ce3984771d4fa3aeec8f7566f39741aa742ff6e56b768b698`\/=„py@ ,oa[ZRײQ9LP :"EƲD7#;>"xr֜3j)iF#鵤+b^Ca(nE5ވˆАPbYtԣ {2]P}i0Q0zeQ?/3Ri޶l>B}x tCG<ţy\i}+`%<5 eH:}>p>*\?*Ld   M" <R~   4  Tx (8 9 : F#G#H#I$X$Y$ \$@]$x^% b&&c&d'0e'5f'8l':u'Lv'w)Px)y) z))***HCbubblewrap0.3.1lp151.1.2Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.\build35topenSUSE Leap 15.1openSUSELGPL-2.0-or-laterhttps://bugs.opensuse.orgProductivity/Securityhttps://github.com/projectatomic/bubblewraplinuxx86_64 3 Jc' AA큤A큤A큤A큤\\\\\[lB\\[lB[lB\\[lB\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-0.3.1-lp151.1.2.src.rpmbubblewrapbubblewrap(x86-64)@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1[;@[IZVYdY@Y_wY&@X @XS@XW֘WWAntonio Larrosa - 0.3.1sebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atColin Walters - 0.1.3-2Kalev Lember - 0.1.2-1Igor Gnatenko - 0.1.1-2Colin Walters - 0.1.1- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packagebuild35 1545078209 0.3.1-lp151.1.20.3.1-lp151.1.2 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/83ddf51924c7399d0763da0179dd7e5b-bubblewrapcpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=291432ff6adf9dd2c0670b6222dbaa5ce1114a09, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRRR R R̒ßZ)utf-800a171798155f9036142405318d3ca132cc8524c26084567d94fd7203f6f0071? 7zXZ !t/}] crv9u:厉;Ƞ'S\_R:nS( D׏Y."/=H*SMJ~}52hX9' -rlvI@[ai=;n_F5ew훏e^+>~7 bF(Z (]xR3 d̐<<1֣ذ-U.eLzu;,Cc >Z%Bs(M~o5VZe,Ծu#Xc鞋RFMRsp 9L\,ɽc|56/XX]Nb`V|bd9+%a9Kb(oHѬxƦMveȷiLE5,>ͥ$8Җdwm~qYH5rH|+t_J&U`GECt#b'RzxkDZWrXm{> ;zd]z 󣲨Phi]$:J[YTSpӦ^i1gGZAdy'c0br<*;jqjv"kxV/7cN)djS;QwK9S$ȐIhq^Up"dpB}>Gz C '6<47h"0[X!\by>ަO,~-p+! l;]^:)*bX4y?S58-Lf?Q2AO4uO9\?sc`Pwd>ќǍC.&.A<)864{C!w&j2,Ò=q{^]26~ةm$dI 3S2| ء@ht,q3 ᓻ+jB\B&aueo@vC%#-3Zs,1[::El01;J(11#ե?2i~g/,Y`LtU8XWA7ȸs,‰`XnGo'>vɀe壾aJuΎ5ͅ#jo1'^6Dn`M웺xHu&`GO2vf1Lۡ,s$n # *QϢ Gm9}$MFUw'D5 M2q}:DH.A/'rQf:DQO܏"mۺJm4}3ٱTNA):8n'ئ o6e bM=k1c찤ր?_ aSy "KV8(wgи!`3.ElS.'>@p7VS1&;@@a ѿPCӆ4 j'N4a~;$4 [Jq&zr+|AJ˽7Y21j]5PnDܱZIq5v[:/ _fx Ctb @8}qѨlrOmh ~BlFIM8y J*ܭKAtY!W5JvoY0oSxBw8Q2R2dPYج%\^t͵w 6غj&2Iըmߓa%_z6yx.1kؽ@:b>_~d^פ]l[D ^ߤ (K6cIPͫ'TJf9m#0~/{Xޚ@]!&rH U_"mp*-j3o*vׅ١7? &wl2rmTYP\gQ!ߔXa-m[MwǟQ ,Q.J#7mus3L)ux\ υ˵$%+|2REx{6R@dHbϖYRW~~>\7P>+/JSzx&@O;F.NpYnkYQއV/J+822tvTK/ÝVN ܽ@83(؍Ot)p?:sJ+OKljd'8v CF 5F"=H%yWȮg^郦Njq !睻` Q68N$!GP{d݀t2dIE=/9MsK5{YҟMD1-· k(*zj-S{ؓ٦%!޷鳸(6i/nz?ƮB-)Ed$8n;%\m\Ǔ+L\bj%wk$=6%k$Ĭb@#2l< Wu*j!fy eգK5[6Zǥ!݊Za)'s=oNًGAJq ץvϵGr$j Y¼;|t݂OIl,R/T},m9ĩtnxȣvNiDQ iOIt$4\0 lP5q Ây>Ja?yAӬ`͔3 \IBه[H4R;I'=߶S99 g8S}%=!({So[I|[qU6X RSލ﶑9?OG bTp'̺ؖ ƲRSuPϛ q@4vuߤ"Jۡ*?%nT-{ŕr*97<;a oK<JVR>:kԲuu+HfoytSDSތ&{k/D.{_sNEE.!\Ό2]Fƈ>>UYV2f xG1Q9 ayC:V˺2:'a>*ګ3æ'f(|"5\hKo#獞|XvǰpF}0ZjHND $du@s.R3WiVcԙ˹ۈ:ِ(cJ-x҃x&1Ȗl0ɷ_*r  ht>~/=+\J#۵8+N)CsHϟP/~t@9edKͯHKWFWtd6p֧?}0ݛkҋc4 ) }#VSRDb6Wҷ7">^_I;A+gj V^bUwq$e*>"d 3~Z*gE攙adrvk#Gz2lʑX}yM^tCn3{kaTnOQr4>@"dCaSz߇Qd4fcta) Ėf ҷn"/-[Z 92!GPFW 'Sk?E|Ol, Ml&$AL ӿbLmq7Ղj!ßZ^ jxh~n7F/,6ް sߛH).X?2Pޱk⻳^^0s\& %"m"l)&=f B /jUK?릮'ȥFB]P!U*'Ku^bP;t "㺖<ͮ$-[KQBxH~4$c,%;aDPqX"jWÜ qHKFZ)B<:+UՅ9_\+><7՗P1fMg߱Isyh[;@/n VmT+62e}V \U”tfl:R7:S`ť΅lo1mޫk 3>/0ʌ3 Jy=R>W1ׇ@$WlqϱDύvTA9w(VlHzC§/k#_K`̵Tؑ)& \ *tc7;\&ة^県 =߹$SWcFS^ǀѺwa/ 0% X^O!%~3@L`0N9 9NDY4hؤz_(!nk6B1I`/ϧ"FJ vgv;q 4&6MkF/P)DҔ4oBڔ[myiۛz*y~}IGg*/Ѡ%h%X҃$/ f#սHKu-!+*s5+@^Et<]w` WІ4ߚc h64Un|Bq~t#' Eo;o׮D"6UUI~+\\$֞ X5-WP$|CG_|J 42]_8fͅ@lUeXC;F\S\b3,*kqc""8"uykmlvԔk13Whk"H>mTP@'L ni@DV97۶iFudk5@zId6E.2,d(:BE7T_FVlt}8,*w% PD< ù$2Ь_ sJn5tMS֘3I'`@ď IV EJaA3έid^@y| !W\¢($&j"ʮ@'|AM Zz _\׿`޽={ )ov0մ`Ԁ*tǔc(9솙cF+uL,Kg{ jRY nLT p}?ɈQzaMLȴxws;SZNW,8C+bGotOl3y,B6ZMjp;'GrwsvY~e*)>v[:OtXvBił“DӏMzD ~n1P)mXʎmț߉י4]o/*bey/O2Gb)jevtKH^Ot$l2dhR 7FTy9eݔ:JAaH1w$g2qf*19rg7cM_JR%}! ؋# kaj i1rR`|_n[ N CUiـjZݬD'zڪ@`kj8]9ҾU*~b߅&2WAJsAoxJl Tz-GsK6qK=;o MGC7eJt/~1Q [νa`.1p+YoWwY |T ,P³Щ6v7O}pFY(o{wcv@(3{9ם#:b|ϡt"9΃1.ORTy%&-۾; BSO9Wdm|;<% ^`C)ɐ3U xY٥1Dd^JKt,$"ǵpWU_}(kgG[zW|[0/mK/m594۫VsSa*Khg0) 5Xh['E/nr9ؾv_uW-KE >,.sv c mF~%O/M^nBRՊھ WG%=St26\HT-sew̠`6`Qg(&vܕK2b3כOCeZD &#~Gi\Wq3̐e9W{򅨢`3`&oHs^x41&DۈHmA0 W F(syޯ3$Jœ|WoU;+&*fG00C2q]OM$caȖ#OqzN@̰x7~` ?R N̦f8 EAciE7-k&tZ]&etxJM pjvqёJ[*Q9A#u:kᨉN꾪r_R?KDC &@I)'t `Vx r"Up'[vJ-ܠO' ^E_ xlZc˴ l)S#=\. wrep1CHh#vB,sd4W;MPѱ3&z|o2WZ;O "jfSV| A߿yxx1F@E¹lPʔrA$F{Q#o)%v4$L:Ĥ#LrXr=CWe?P7̄q="f`էk vݞbójM\ n>nyW?+A\Ba[+~_];P([{̶D34IIui{ls56T3^2!& ܛeopA]AIU(|I;cu)oҝªV_JlDVl!Yj8'@Rr}lnɡ%cP4!S2~cbJ;Jɵ?@ymS>̲QGb''(2Zŏ>гK:J#@| Oh㎾lR/9nۆ^O̼IԷa6̙yw0{[ #z+; zSߙCfUYΗRZzD+gV+""L+tհ`mq)^v)V*sYt̻Mш0CVrˀц{!4 r \LչϮBVb[Fro6>UVNP26e86`I9)$.mJ0f[t5Ftg?;@;2JK`p@Ag"قA`K9SXa@M4灠(I|&!X#*T|5?JGڗh ԬΪF8~ M3/ʶG`GM&NDgzy%[}A: JٺEIsYӊ9-.خnRÄT!c!z$\AY@R+Pz 6+.3KYφ+_ =П\ݕ`ӭgT,tAٯЧؤ*#O=L}ׯ޲qyD,k?rL/lkM0':0j&)e2>}Nx{ĩK? 6cҨ98YbwٌBlpnp-NJj66#Č7老yMaf+WBP1翴>h0q,թIX< 퀕l دζ>a] *?˗5S&\:F~ҏ36L ;{S 7AP(1(ᳰ줁Vˠ(t9d뇟/g}Z* (Z_RM##U73)Y |P:ʓPmx. r*Ikz(S&_ +|N k 尅8cjrK(}â68$-KCӭ\j v<n/{20DCuq4 jFOx7(sX+_')UB?Qz#:'c0ot }S06EC#w怕""qlN^s>  ,o1ѭ415ە\]KI[^ azwhv}aQ7 FǙSTgi$8s[^)Hyr 7{\\Gno&MU>|8j9py2L^="47(ET_t0Ƭ` 0\V.-3m;vO\+e!Qs%o^Zũ[ru8.P`VzSL(|aNSǺNc|f!{9/t&,/aĩP Y}u5譭я {H%FD.@.^w#FC+nF4_p ͲjbALPG%'8])]'Cb F}mpUG4jVPa<~V!~TRZ"}_N֐}Jth-wveJkB'j.epp@X#5]Hqu\TMGM{ǀ9!ȕ"p&9Ǥ]3}=PZOZ4"u" }\\¬:Ь؟i@sT*UktĄpV88w"ب0Fs[8O!6c,z|X@>s;z=N/.H "5 4Nۦw7tʓʭM\lKLr?)3kzhRk~s*|rA2tUDүẕ$&YhO q/0 9v%R&Ba,O.iyIY[Ƴ ?,AM+ϹuW\͠6'=0Uc\=$"BϞ:əaԁ?@5^rRȚF#q3prwBsrKc>xPmRgQ K"r yEbN*RVaz@Yw|uZztX^[C#kP VN:B48ŹWz/-ȍ5tBZY2dqAJ_ sØF)qw{e;#-.Btv5k D ybhx5nRUtwf6#nsL!~dS-xSom[=\Aho@7dS>X(ںEa$9StVj>dG"h #invh\),!鏔Ћ𓓱*dЧYKy27ު1^j4܏!}wz0̺a'iWwfZ-M5ۛ^i"uubppœ,s+'&C - :ѧH3ٞG>{yYe|+$Tߡ`1 ->~Z)A*H+Mm3}Q"&I ַJ2_jajp,GT ?@=Հfm?L;Q] ʍGg̀Q6~x6ViX%QZkf68+C%Nn:ȃd@>KtGTUw-z-1'I&1"(ѴRS/DwDJ6G _f 8<O,^%,c*a3] -d[|(y2 XV7 + Q@tPqƀ;洐\RDvb40f,qVytttaBSd)iq~WX]lq'o ɠ0rk.A~J*ts% ҇/KaF dj^I95HǷ-kF_(m Qx~_mZq^EᐧfkrvPJ F;t@MnZ!tf5+hlxJp3ϫ4sӹV6'/3i:'@K&z8{V42BJAMbf>HmaH>qVb",?YF8r4' F4oQ؝E *ؿ)$ЙKiI(;Xm*H|v0b̃G2}9DV$n->?ikh*Xmc2҇3 B61os%l/L[hC}D߲]T% gЮ>>Z5FxZ0bNÈ V7in`)#n mj 0< ',)#\(4/OX͢ eZY 0# Wrci OT5ϲeHY kCxj(/Pi8Ԕ1{.6RǃCETHN^Vz^$˕nR-@HՌ0~꼍_˶){ss #֖宰B ) Z [ ܣ+Bՙf7ɞ1IDvE2*? ߧ 0LOfH'ՌPjXb*ƓR-qW9Oe o,gB xs0QJ. 35*E ;8edV nrD{i"{;^r75MH z,JV+ yW{"Mӄ@넜[1 v ~: IlSyo4_P?b%)๻=2mN;䌄SpOY~AB@&z` @|!&y~VU#fi1ՓԆN/ DV3ْbhYTN{t^@/޳WMޣq< K 1<ҶR?Qe. 5xCՕ͝u\9B'eS-‰Ͷ VyjQpIk '"sFOqᾊ?[ingL_\3BnQ"Chc4:5,L}ˋl+A ӥ" x8Z/ZG0+PT.i{IGE"d뽧9|G-{G8YI)f;7|048KsxOpذ{QC @sjRjf!vՏ]8ʽ?wҫu1D۸>TsJ`uvعczռ?>|IgLÍaۯټ> <-6=c&-˳r| .M,{Q8&h e.Rb PvaML(mZ.e%&F1mzoJ6rPio{*cUs/ vt MکI V<;zj|x߭/Bmd-,[ mRm-mBgw=<k bpIYEgq:hƵFw.rLv5@;mW*zP+=<%d\.J1xD%;ѿS1+A|T6J</ܘ3c R-1߫:qft>1ISjS\A\qbY_)4ѾLAlJ4'ۏ4F{}C ψ2C#]`59cr u^JvQ&槫ӮUjPzi)sj+}+LTqu$qC) r(pݝK1IIȨg`.B,PO2!-]yV2EB߄+t)LjEoi*یa_l_fO~I11@8?~KrLSMgUz&]AxR/t8u=-|,u Ŷؒ8 "1_%1] _ \j+E>)ߘ_a̴<זo&)Pv=q;lc|.dzң& C8 iSG\אlEėȡ>S Iy:Ol:aT]xˋ a5}!eE!:j3"bX9ݟa J+xkU2>E@$z4 : g@ RhNl^hE>tMʇ",j$ldm*@<jbUg=_HBQ\&m."aoY L[ )$:>hc<"J{p 3ՁX-m:YkAP8qha)!Ev.ޭpсl0r臉]gL,Ǒ~MmWqHUyA}OO*ZN8 !UD-+1NXN׫KN l-r:/Dmb/X c_tE+ wZWŋazPj5.M>%tz$SHb YT nsD 8:ѾZW'P* "|ڞ~8@{ȏz^7Y4Y4UQz 9LK-bL/Ā\bG9ݩk|D"gmVEDžf`3o%{mP/}|<`9u9;P7+vB\N(NfCviEzti-EfB| FL x ?@'I{Yl C'@/>8bYeUF}ZOEVİMޑQE'OL%S{kw3ύ 83Sҿ IS/t% ' J 2(@2j6F] uٌO\#  ?CZjt[ =ΖԋW*; oxRD^Jz*UWyWX̆io2W %hxN( "N՛s V&Q8*=ץI L4u0fZOw W* -SxwZ$(0#W+ 0?L2S{yTy`W'ڌ#D5lRwavr޽9[Me~tacŎiQ?!NQ>lPHvP=\f$Z/8}p.FF!?VAn >.J#`D:Y*wQY ۗ_,mIw 5 Qڞ?ķij1(Bg5f\:+R%1' $̒m~caE0MɎ; dVY`{*T.[FdY@^UoO\ @ﺵCo6ZquVb}ƀJeR37믞]o0ro(sķt;Ifaj%YC9+6'+nʷ]}4C}*OݛL@r'; ]1qOE)-թN<kӸD^de;|`7_0,1AMB@ܴ]2 KW&@5ujSt2 p#VD4Kٰ/i+n"[YD~ ۵@W o_BHyY<^Lq:m"/=M/7Gt:4}2 l%O̮f=?4r?!t3x2~A5p_L'mӫ9鉞?@w'h&\lC&ՍF}!~_)0h#gA(o ,hP^Azw/76Wdx/]ܤֲ% y >uL~Ӷ Ҏ´:yR~hӍjrX 9]hJu uROY͓`45I&>T/i,F AIH8Qg.qۧZKO6EmxF:.}8Nѹ&b$f:ˍp,{VS+[Y`i* h7 >W% "5 ʵ{tPֲLtHP_#iCw5:x)O{+Le>}Qp췏! ]>%x*'g.ЬX#Ʈܭnsܑ _I,H2ƺŭ?~# :nssSΩ%Uv,-#ؚӝޤ' Ixs\}gA|ݣOlw M= "yqo L*RVMbK7'rOFup*H=.f F>%Ah2^ms}%;;m݉֨`{i%˫h%w^1948ŠjS#M}xfXo*Dkb}> 1OOeDmFi*E6Z &nLm}i.c.Nc.RsII !'$`el-fAS~^#|QftNLGzܧ.&_ٸ3#`yK49F|eKuTgJ"pz.w'2l9eF57ݗ5==Ew+9#PUbl`'L9hkvXQ7YbϊHǼ($' YXkM48e0]s,bIW&Cd_x4v;o aI!1wt_7zjc@ 3II©af)sSh)OB%½_5ZXl&;9̊CHmwy;vњ؁ūW%.Vۜ-i4`7|tRQT$:i%Od6z~91ޛ<]2%x@y;eXQP'N6fu,[ez%Bah{L_s7r"![*-vU4Y{ݪ?J^ 9WZa#-kZe}ՔiT6u.2"÷M337+062U?d6/S|Ĉd#` !u e01L<˒q lR C}t }j@sR aWpia.a^ajH O`!;4?kzOcH>GyQ:X3U{]fQc" qU'`)ShnQoPz]XAI6LC_Lݎ[!c\ Ǎ4mfo3YR.q:^@7gnbGkNJUJRQJ隬9hdtiK(%gR tz?k_\L:y~dVcR뺼2:wn[?#.>_}%-;Q!i]`TG _}urZTHv6wPE+\0[l/ctXϏ"UٱQ=" :Uls=!?Q!85510jIXIz߷cd~&EaݻW$j+Px-lVo[2|ScAzR%J>hfyHL{OK!{ݽAKZ6pE[$4{ٜBA%J â AXJ,|IɠF{baךGL`K*>!>5[[B;d?EJ1ρ鬗,G+&2-SdUs0T>,滰_B6b0@bFqL 5|*XM6~; K'PyķᱶCPEFb*Jf*@Q S }GOv ݗ 'OGif↹F fqUzl3C5_8gGB֐i)њ=q,) bEX$ EhT|qXHUB;1-xM;Ja:>(DN~jYa5zO>m.ǍQQƬZ3՞`% iM%уxs@RǫgUJ@ҹaTp~=Q8FV$dSqp䰌cM Q ɦ;bgBfqMiINS%! DLNbJ"rSN|m9-Dp T-dR)ճ4L[O85y:Wt@ ahCh'#衵PKXR +Wn#3zlNa>MsMo2D:j`e T.UlYx -2H~ׄ<>.^M|Sn-Q8 XbbYwga'q(8OeZ bUSKae8oʨz-ukېաXrO< 9HΚ,^-`0쟬8Xgxd=J9wEQG˨|(+cU-*d̘o~G"{0:KO|"cٷwOĨw.DnФwgl^[3+P%ڈQO#]mP/pa9 f/'7"|.N 2tbP^R/2)πC]-MNȼwoս'OI;HU>B-K7DӰC.("E!& U}fXOOC ˴]{#B*AJv mYpB3vb 9@ːTwtnI8K1zUaYz`mys6ISX2=cLڛRmC e'acz9fR+Kwd"*U84u` !SgA7p=+XAO 5Q}LLq$-씴ÕS 4BN3'< =ɲ/r #Z"b^w&5p=587_WѸAhž%@"xG}8:?#Q@:\1 qd4+]|wCGKآ{X̒rB}㱉R;c_¥z\))׿v]Q%kɝ* Z\#|'d=lq C.͗m[a)R.Q n9!n]b[}xU~911z*$~FiH~.}8Y7DH׷87]:'^cZ, Bo@X]hIplZnC! x~5QShb*euQYa*OI^bm dƄBx NhT$W?!to1'H:c$ fhFELDG|SASIXC=J2Dm!&sV#LJJj:wM:&Z90!)ѡ7b:]B.^~F9s2R4;,PԆ>w'H̞/Q9^˸ [?\rb[.L\4؞PF62M%[,R"S/!_ ;KY2j)}K\v<²z^Ԏ fĬ7LZ0ztҾS$L 1I9Y0oȖ.EˋcE `.L /qg<i [6+N>[©c8&eL|߮GZI77D3@OzXű2>̬+geB_ϥ1x2#(uHN d_tw3eG`?؀8M!$w&4{L? L K#7+1·N*|ZEFŹzd"+Owc ϋv4^l!yyzŘRE`0|b&. b&"͎Z{KYPp @PԻtd t?kYoڦ9j[ص?5C%G\wh=Cp'uk X҇B C񫗺'$WN V,6/ksc$>9J5^m tƧيsxܰ?f PC*3#YbGFNzc(?Q]m cNq:UסfޙZY<~TFLZ')Fl3+d2XMH.5Kt"^Ubsy:G{YےN `/V GTmOt +xA 61sU;-(LAk)#O^qz4D{m DG<~WW0#f9Phd3e<0 [" H}>J~p~@S<P[=Ɂ,Tw6m~+Y kO!k7M!S%x& n-KpyI4/ oTJ٬>E8. ]Q5KTmE*}]۩tP\m.^=]x}heggBf$ږ9n 9Xd8/ӄ4}%$@aUʆ2lS',ԎB kx7ܛv`՚ E:ng2uuBts:L MfZjiBf"J4Ծ{1j~}DEQ^=p헹o۶c!2Uc(%{OYa4WޱBst&*1F=Mp\=)uL312UpB#;ɧ~ie{[ 0ͼbʳGiiJN03.x.ZşF;k߿CNh :zrq~pһu΄+#وdڋGzΤ|nR>e%.WlқT9֠Iw Iڴ3d47QdH>h~`E( W{maZ;HSPc INCVV NyȤP*A6pOm8OAh7[;CO PoˑK3f1 nզ: f~иB \"yO$Y se"Zik n-9jp4uxMY7I J~dW^qً_!bb?]د)=ޫW1,`6%'$O@!I, /"Iv>N|mQ܃R`B`_5dϩ7>rXyEEYzG( $hZ=ُH>#cqtj PU'A{֔b63iasB9PoӺK%?jl_. lD|>ɿ*`t(hSH>lKu\a*Kp}{wյ>ۣ.BT fh.toJrT `-Q}JWLX(엚hooK2'q6FtYX^wq3S$` t.}iN8s|NFjU)oP3춃@AжĶʠRXh&sXDM_赟yXv O7Db]lտ9-/pT ˯U{7TwTAƠYF)w;^<KN!Q~ ͨl8S\Z2l1W% SO1_jO]ﻟADeMPF%cIx&pl!u3?> K#L&&H3cucFzm+8oE4^&XN|y+5sBv_bK/ aNh M~ĵcyIͿ g !7 =j=_}(N%ءvkHd/sK/&ʤӐ<ʙu3H1ú WwBb[o .wnbLѣ;GsYJ+p+KvStxYuo%&:lnp0 SFrAx;}!];Hz#G4N/g ,[͑V0j-2+" /$+^"^˘$6Us~bN zWz#!YmI0{8U <ݴR .[1,`Bli0 !/=%fuآB$XQEJ++rvxʹ./ 0Nā,OB9yE2ri~)0mŦy0y{@4]OI6AHqiRH@Ӯ,7B[쨒8~p93 U1[k됡'C sĮ)l.|gf8GN2w_^e7B->iM1Q{%Iyx"4SӅ_>H-T& Ő G#8m'RI{~8<:e\G㩴ef?ei) S-A-:fQ2HM*rݾxgu 6k!9SHh6l"W=kNx=N;Sz[Ep/ Vıbk8d[ŏUBη¨{^oNSu/zoCF.Qe$<@韸rU3Ժ6ve >|4M|f֮ŽЪkK@lOMHeT :|@?(#D07Jf2F7@,",]+ -!W]5|&]Qu!h _KިHJ]fHwx9xZaQ𲗖{SI co,hE%_Z^Ps5Hxju^X{Xc)w0-b`{Xut^<[o=\kzF* -F=*` Ni@zOTJx h풻3(6Ob>x}Ilou[B2\'5uWxqb=W)9;zkÿżϲ΃Oz-&33l&r^qϚ =aMѿ ⲁ\ʰk,rsAU_}YL!\mS,\![)٥<2:z){/GȺ 8A(*V= 9Fj|wx-߁׾gvT`+af ީ&ARFT%yTНPtn0wlGC"ySşVAC.|ǔFg@jVj toƁ>( }󻴂I[[pxbНv}KbM7~SpFb}+k(۾W仒%P=V-=xckalT 5%S GlS^f5Hݻ,s{ 6ui.wà"jT\ꆨBUZsА +,UJwGCQ{XS1go} #HsZv+u7`4$g)05W|J!EL{Eva' cj5 PN)^cNLH&y޶2wf9X?dx9uBeǁL*gxB0mV4@ v a(PZf^Cgc2UEН*"7\7j fH.ANٹ,d5e3P3xh=N`O)5|l8W]~$΀ta:_04eJHL@']mH><4e w} ݨ k)f}ZE9çÄӆZ.SdV-c4k64~$rVrwq&*Ѕ"kFg w[(+wIp`pFL~$INw.nAFT&鎩_ f zq pQ0-r=nrMn*㌶LF;vNL!ik2m̠+};LV:<QE#VfyqԵM1؛~lpm{Ղ$2 `¡| R 33‰t (VF@}wǼJ=VoLCZ%~G&ӛWOF5pzC!t`0ML}wf  Er9\ϖl>c8$[^M0o^!L3RlȻ^m GxA|%2$7yE L{;Y]&D̔k SߙNL_uyS_)IX=XʨYvxV@)kG 1Q^[ip:/TsDaټZ\߫>?K3X| Ft !ysPòЅj`Ƨ_Equ%So8mċ*cOHc n:X^VNqRR0\˷ a;9G**|N.74T{9nCJm$dKxٮe+E.3O6G N힙B(.=JH# HF@lD|"'j@iD jo,/ͭ1BӐtp=X_!9_pgs!ͧ8a" y?ݠ/8W1'>=IMHd_qtȚE 66+oiOȿqi&ɉ+}}B]δ g >Y[y zO%o[iweG<`['eD6TR *$O5Lȡ-xlBYz;ʬ"5VUo[d]nrmȗ>jrKd Ca O-#S$  %|[gٱ̃䊕R7f˔X*Oś$+׳ve?U`:;?"?ݿc>wQw- ou+?~=:PwE A/q:~/=\j90,2Rk3XJMWq]Os!eisNy< ݊Z6*{_#ۀKD"Lx^lZ2ŦU U3Q3G E6Mý5#hʿM3̬r1^vR#ћ{HfOAzrӳUW.k] rTI>r]ê Rj=u.:X+piYhlw#3ѐ%5MD-Ǥs::#>m"/b*>(!2U(MQaw~ƃǥVT0$&1K?`)F:~aZU%4mٚVW%iI3ɹgOTTԇS9m2,H@4:4/T_ZWORT#[/vIC|'ouf:H/Z/e\"6_ӊ_'5-5g,^* |N:F[֌&169K6+!N 럥]V͎#9H:^WfUjvCAtykZ[x\)h> ՓeFu~ktR'% < Ma:2Va%7dy@UÌ!P4 ff(;O]ԓŻuਙ5g4늏4os$'CZ|ݥK[+uq3Idw p >598*Ӕ9_aw?i@tDM6[l/9=-()@T%޿ ۘgudbM9lLjgmCe PJrU,]3N0(H3TDӹ.͔?%}hBa6it՝BzE;vAfBV?śNϼQ}@n#]ȶ YZ