libavahi-core7-0.8-150600.15.3.1<>,`fyfp9|LLyXHϮz';K+_QȧOgp4tE*> 7p A2UdƹҵʉuL*6cD\ө2p\5TcL:CNR@V0?V d # J  2CZ`hp t x    d   (8E9E: E>R@S FSGS0HS8IS@XSDYSP\Sx]S^SbScT_dTeTfTlTuTvUwUxUyUzUUUUVClibavahi-core70.8150600.15.3.1D-Bus Service for Zeroconf and BonjourAvahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zeroconf Computing.fyfh04-armsrv2SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttps://www.avahi.org/linuxaarch64fyafyea7e0e15a52d11f5cb9b2c9fea14ec6f9a1d4060195f464e702069beb6c290d94libavahi-core.so.7.1.0rootrootrootrootavahi-0.8-150600.15.3.1.src.rpmlibavahi-core.so.7()(64bit)libavahi-core7libavahi-core7(aarch-64)@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ftehy@ede_>e]@eReB=e:Te d5Kd5KcR@cc@c@bmbY^@b!b8b @a@aZ@aav@an@aC1a@``r`~@`+`#`_O@_L@_+_$_"@_^^6^,-^@]^]QT];\@\6\/JZZZZZ@Z@Z@Y0Y-^XBW@Wk@Wk@W>@W@V@V$@VZUoT@mgorse@suse.comalynx.zhou@suse.comdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgalynx.zhou@suse.comxiaoguang.wang@suse.comlnussel@suse.combjorn.lie@gmail.commgorse@suse.comdimstar@opensuse.orgkukuk@suse.comjsegitz@suse.comandreas.stieger@gmx.degmbr3@opensuse.orgjengelh@inai.dedmueller@suse.comdmueller@suse.commgorse@suse.comgmbr3@opensuse.orgmgorse@suse.commgorse@suse.comyfjiang@suse.comdimstar@opensuse.orgsbrabec@suse.comyfjiang@suse.commgorse@suse.comchristophe@krop.frmgorse@suse.commgorse@suse.comjengelh@inai.decode@bnavigator.dealarrosa@suse.comalarrosa@suse.comjengelh@inai.demgorse@suse.comdimstar@opensuse.orgmgorse@suse.comtchvatal@suse.comkukuk@suse.comdimstar@opensuse.orgmliska@suse.czjengelh@inai.debjorn.lie@gmail.commatthias.gerstner@suse.comdimstar@opensuse.orgjengelh@inai.demgorse@suse.comtchvatal@suse.commgorse@suse.comjengelh@inai.dedimstar@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgrbrown@suse.comjengelh@inai.dedimstar@opensuse.orgdimstar@opensuse.orgmgorse@suse.comdimstar@opensuse.orgmgorse@suse.comalarrosa@suse.commgorse@suse.comdimstar@opensuse.orgzaitor@opensuse.orgmgorse@suse.comdimstar@opensuse.orgdimstar@opensuse.org- Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). - Add avahi-filter-bogus-services.patch: no longer supply bogus services to callbacks (bsc#1226586).- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in avahi_rdata_parse (bsc#1216853, CVE-2023-38472).- Reformat avahi-gacdir.patch to apply as patch -p1. - Use %autopatch instead of deprecated %patchN format.- avahi-autoipd: drop the post script part migrating the user owning files in /var/lib/avahi-autoipd: the code was aiding migrations from SLE<=11/openSUSE<=12.3, which are no longer in scope for upgrades nowadays.- avahi-autoipd: guard %post chown with -h, to not follow symlinks (boo#1217398).- avahi-autoipd: only migrate files owned by avahi user if said user exists: if the user does not exist (fresh installs), then there is no chance any file is owned by the user (boo#1216730).- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470).- Add avahi-CVE-2023-38473.patch: derive alternative host name from its unescaped version (bsc#1216419 CVE-2023-38473).- Don't require sudo. There is no indication it's actually used for anything.- Use ldconfig_scriptlets macro.- Add avahi-CVE-2023-1981.patch: emit error if requested service is not found (boo#1210328 CVE-2023-1981).- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts: they are not used, or supported, in a while already.- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch and avahi-daemon.if-up Doesn't work since about 9 years and will not be executed on a fresh default installation anymore- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_avahi-daemon.service.patch * harden_avahi-dnsconfd.service.patch- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E (boo#1203092)- Move the dbus-1 system.d file to /usr (bsc#1201345)- Stop requiring "avahi" from "libavahi-devel". The devel package ought to facilitate building programs with avahi, not run the whole deamon.- switch to use _multibuild - delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete - use https urls- remove avahi-mono* subspecfiles, they are no longer required by anything. this makes the spec file slightly more readable.- Replace avahi-0.6.31-systemd-order.patch with avahi-add-resolv-conf-to-inotify.patch: re-read configuration when resolv.conf changes, per discussion on the bug (boo#1194561).- Change to systemd-sysusers- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561). This can probably go away if/when gh#lathiat/avahi#118 is fixed. - Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should no longer need this given the above patch. - Add several patches from git: 0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch 0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch 0006-man-add-missing-bshell.1-symlink.patch 0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch 0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch - Build manpages with xmltoman. Currently needed for bssh. - Minor spec file clean-up. - Require python-rpm-macros for all builds (boo#1194744 boo#1194745).- Move sftp-ssh and ssh services to the doc directory. They allow a host's up/down status to be easily discovered and should not be enabled by default (boo#1179060).- Change %python38_version_nodots to %suse_version which is compatible with Leap and SLE. See also: https://github.com/openSUSE/python-rpm-macros/issues/107- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd (boo#1191750).- Remove obsolete translation-update-upstream support (jsc#SLE-21105).- Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec.- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes (boo#1184846 CVE-2021-3502).- Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn't require the library it's pointing to.- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling HUP event in client_work (boo#1184521 CVE-2021-3468). https://github.com/lathiat/avahi/pull/330- Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on ifconfig, route, and init.d. - Rebase avahi-daemon-check-dns-suse.patch, and drop privileges when invoking avahi-daemon-check-dns.sh (boo#1180827 CVE-2021-26720). - Add sudo to requires: used to drop privileges.- Drop configure --libexecdir variable as it does not appear to be used by the source archive.- Build python bindings subpackages for all flavors * use the python-rpm-macros singlespec system: The macro %python_subpackages together with %python_subpackage_only creates the pythonXY-avahi bindings package for all python flavors on Tumbleweed (currently python36, python38) * Put the avahi-bookmarks command under updates-alternatives control to avoid package conflicts between flavors * outside of build_core, the build continues to use but not install everything in the primary python3 flavor. * For distros without multiple python3 flavors and/or older python-rpm-macros, the status quo is unchanged.- Use sover variables all over the spec file- Update to version 0.8: + The Avahi 0.8 release brings a number of new features and bug fix changes including a backward-compatible addition to the D-Bus API and the avahi-core API. + The existing API is still fully supported however clients using the new API will not work with older Avahi releases. The avahi-client library is not affected. See the "API Changes" section for further details. + New Features: - New options for filtering reflected queries between networks (reflect-filter) - New mainloop integration for Qt5 and libevent - docs/THREADS: Information for multi-threaded avahi-client apps - Listen on loopback interfaces by default, allowing local-only services to be consumed by the local machine - New D-Bus V2 API and additions to the avahi-core API for splitting "New" calls into "Prepare" and "Start". See "API Changes" for more details. + Notable Changes: - avahi-autoipd: Initial IP selection based on MAC previously ignored first octet - this will cause all hosts to select a different link-local IP than previous versions based on the same MAC address - avahi-daemon: Delay sending results on an object for 10ms in an attempt to give clients enough time to subscribe to signals from the new object after receiving it's path in response so the New call. See "API Changes" for more info + Bug Fixes: - avahi-python: Various Python 3 enhancements including encoding unicode strings as UTF-8 - avahi-common: avahi_string_list_to_string will now escape embedded quotes, backslashes and control characters. - avahi-daemon: Fix a crash when txt records have an empty value in .xml service files - avahi-daemon: reflector: do not incorrectly cache responses on outgoing interfaces. Previously we would incorrectly cache responses reflected from one interface on the outgoing interface. These responses were later sent to clients on that network even if the original client had disappeared and could cause those clients to have a hostname conflict with themselves on restart. We no longer incorrectly cache such traffic. + Security Fixes: - Drop legacy unicast queries from address not on local link which can lead to UDP traffic amplification attacks (CVE-2017-6519) + API Changes: The avahi-core API and D-Bus API have implemented a new API where a call to the "New" method can now be split into a "Prepare" and then "Start" method for some objects. The previous "New" API is still fully supported and there is no intention to deprecate it. This change affects the the following objects: AsyncAddressResolver, AsyncHostNameResolver, AsyncServiceResolver, DomainBrowser, RecordBrowser, ServiceBrowser, ServiceTypeBrowser This is because the D-Bus implementation in some languages would only bind to signals of an object after it was created and had received the new object's path. This led to such languages missing the initial results sent between the time the object was created and it had setup a filter to receive it's signals. This primarily occured in languages that create dynamic bindings for D-Bus objects using introspection such as Python. The avahi-client C api was not affected as it globally binds to all avahi signals without specifying individual object paths and still makes use of the V1 API. The v2 Prepare/Start API is available under the new org.freedesktop.Avahi.Server2 D-Bus interface and also has corresponding avahi_s_* calls for users of the embedded avahi-core library. The old org.freedesktop.Avahi.Server interface is still supported and there is no intention to remove this API. Additionally this problem has also been solved for old clients by adding a very small 10ms delay before we start sending results to give the client time to bind to the signals which should silently fix the issue in most cases without introducing a noticable or impactful delay. Clients implementing the new org.freedesktop.Avahi.Server2 D-Bus interface will not work with older Avahi daemons. It is suggested that clients may wish to either check for and fallback to the older API version, or continue to use the OLD API and rely on the 10ms timer to resolve the issue. - This release is backwards compatible with Avahi 0.6.x and 0.7. - Add qt5 bindings in a separate package - Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize can be used: * add-IT_PROG_INTLTOOL.patch - Add file missing from the tarball: * build-db - Rebase patch: * avahi-desktop.patch - Drop patches already included by upstream: * avahi-0.7-dbm.patch * avahi-0.7-encode-strings-as-utf8.patch * avahi-0.7-python3-bookmarks.patch * CVE-2018-1000845.patch- Skip the xargs dance and just use find directly.- Pass -print0 to find, to match -r0 being passed to xargs.- Call xargs -r0 instead of just xargs -r: guard against file names with whitespaces.- When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits (bsc#1154063).- Do not pull in dbus-1-python which is py2 variant but properly pull in the python3 package- Require shadow instead of pwdutils: pwdutils has been absorbed and replaced by shadow long ago.- No longer recommend -lang: supplements are in use.- Use %make_build.- Trim descriptions of secondary packages.- Drop gtk2-devel and python-gtk-devel BuildRequires: No longer build gtk2 support. Following this, pass --disable-gtk to configure. Drop sub-package libavahi-ui0, no longer built. - Drop long disabled sub-packages libavahi-qt4-1 and libavahi-qt4-devel.- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Drop -Qt4 variant: Qt4 is EOL.- Remove %if..%endif guards that do not affect the build result. - Write "D-BUS" per its own name, "D-Bus". - Replace FIXME PreReq with proper requires as needed. - Update boilerplate summaries, and remove em dash grammar.- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use what is upstream (boo#1110668). - Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as UTF-8 (boo#1110668). - Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3 compatible (boo#1110668). - Add CVE-2018-1000845.patch: drop legacy unicast queries from address not on local link (boo#1120281 CVE-2018-1000845). - Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.- Drop the qt3 parts- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402). - Build python bindings against python 3, rather than python 2; - Python-avahi is now python3-avahi, and python-avahi-gtk is now python3-avahi-gtk - Obsolete the python 2 packages - Replace python_sitelib with python3_sitelib in %files, and add __pycache__.- Rename %*soname to %*sover to better reflect its use.- Modernize spec file by calling spec-cleaner- Use SPDX3.0 license tags and package COPYING as %license.- Update to version 0.7: + The Avahi 0.7 release brings two new features, binary TXT records in XML service files and the ability to start the gobject client in a custom context. + New Features: - Add support for binary values in TXT records in XML service files by specifying value-format="text|binary-hex|binary-base64". If not specified, defaults to the normal value of "text" (thus backwards compatible). - avahi-gobject: Allow starting the client in a custom GMainContext by passing context to ga_client_start_in_context instead of ga_client_start (avahi-gobject minor version has been incremented). + Notable Changes: - avahi-daemon: Remove all default rlimits from avahi-daemon.conf, as two main problems happened with firstly rlimit-nproc causing avahi to fail when started in a container without user namespaces and secondly because memory rlimits were causing avahi to crash in some cases. Leave it up to the init system to impose any modified limits instead. It is recommend to ship this change in distribution default config files. - avahi-common: Fix watch cleanup issue in watch_free - avahi-discover (python): Updated for Python3 & GTK3 - avahi-autoipd: . Clear previously set address before binding a new one. . Fix dhclient hooks to check for avahi-autoipd before running. - build: Move default rundir from /var/run to /run as per modern system setups. + Other Changes: - build: . Fix the printed value of "Building libavahi-client" in ./configure. . autogen.sh improved to work when called from another directory. . Fix warnings when compiling against musl libc. - avahi-compat-libdns_sd: Fix incorrect URL in warnings. - service-type-database: Add new service Types: _ipps._tcp, _xpra._tcp. - avahi-dnsconfd: Update manpage with the correct action script name. - avahi-gobject: . Use the correct shared library name in AvahiCore-0.6.gir . Fix build failing under some locales. - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon. - Update gentoo init scripts for newer openrc version. + Updated translations. - Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch, avahi-move-everything-to-run.patch and avahi-outdated-URL.patch: Fixed upstream. - Drop systemd_requires macro: on a machine managed by systemd, we don't have to require it. If the machine/container is not managed by systemd, we don't want to require it. - Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Do not suppress errors from avahi-autoipd user creation, but do suppress getent output. - Replace $RPM_* shell vars by macros.- Modify user generation (boo#1010384): + Use getent to check for existing users/groups, only creating them if not found. + Do not hide output of groupadd/useradd. + Do not mask failures: if a user can't be added, we have a problem.- Drop %insserv_cleanup scriptlets: it's been a while that avahi did not install any sysV init scripts anymore. - Simplify avahi_spec-prepare.sh: OBS is well able to handle macros in package names by now. - Drop conditions to only handle systemd services on openSUSE > 12.1; it's been long that we did not ship the sysv scripts anymore and openSUSE 12.1 is long EOL.- Replace avahi-0.6.31-systemd-order.patch with avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn on missing resolv.conf if the options that use it are enabled. https://github.com/lathiat/avahi/pull/63- Update to version 0.6.32: + Don't log warnings about invalid packets, commonly triggered by Windows 10 systems. + Fix issue with bad packet size estimation, causing probes to continuously be sent when hosting large numbers of services. + Fix build on Solaris/SmartOS (filio.h issue). + Fix build on FreeBSD (PCAP_D_IN issue). + Fix debug output with libdaemon >= 0.14. + avahi_server_set_browse_domains now correctly uses the provided list, instead of re-using the list from the configuration file. + Set nl_pid to 0, this will automatically assign the value and prevent conflicts per netlink(7). (Bug #334). + Check for netlink pid=0 (kernel) instead of uid=0, which works correctly with network & user namespaces. + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355). + Don't fail the build on deprecated GTK/GLIB usage. + Gracefully fail if SO_REUSEPORT is not available. + Minor Python 3 update for the python ServiceTypeDatabase test usage of print, should be backwards compatible. + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42). - Drop upstream fixed patches: + avahi-unicastdomains.patch + avahi-gtk_box_new.patch + avahi-fix-mkdir.diff + avahi-enable-ipv6.patch + avahi-reserve-space-for-record-data-when-size-e.patch - Rebase avahi-0.6.31-invalid-packet.patch.- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).- Update to GNOME 3.20.2 (Fate#318572) - Added License field in spec file.- Update to GNOME 3.20 Fate#318572- No longer install sysv services: the systemd services have been installed for a long time already and are masking the sysv scripts; those scripts existance only add confusion (boo#959908).- Temp disable 2 old Conflicts that are breaking staging. These can back in once there is a new release of avahi.- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for invalid packets (boo#947140 bsc#948277).- Sync up the multiple .spec files.- Add avahi-outdated-URL.patch: Do not redirect users to , which no longer exists, but bring them to the more generic blog entry http://0pointer.de/blog/projects/avahi-compat.html (boo#914298)./sbin/ldconfig/sbin/ldconfigh04-armsrv2 17192065020.8-150600.15.3.10.8-150600.15.3.1libavahi-core.so.7libavahi-core.so.7.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34466/SUSE_SLE-15-SP6_Update/15082fe1f3a98575d225c590bfb65560-avahi.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=99b3d1776d23b7d7864098779a8ce8279eb494cc, strippedPRRRRRV3ᢒT\@"utf-8301f0814ebd53a6f900c4e1a9621a37738296d8195f19ebda5da42f3eb02ce19?7zXZ !t/h]"k%]do4F)A'yۓgvU!_1mu_٧]Z'NgAWxkb̄%j6/bn$fU6.B^[q'ۛN !zii%emQ_惴+Eeݯ[ st3|ovϔOX򧻎ީR%gbG7gui0/:K )Ust.ZHY#|#C>yLӼV\%'leqLIQ8*D9^bLLC T\jS~UhNKOUĥ͜n]u *jcm.fWy{V-VeYͥ!Tcu!s ܉bf+#j{6nw][jUf6ra[ W|/w?+! 'ΚGZUvB=6eKbdү+-)jeIAZ8[\=dlu{ȢIU3BSWJ6# H u5Y5_,z$"Hu; [89Syx'2qO7/jCؾkɜ-T2 E V1]wY]QHm>GT.'\bެrpoE͆s%`,|<]#{"=U,yoCW~uې zP>oyK*uhfCsepn"QӷYR%Keʔ6jbodllz=߇䙳5F3]>"Oۭ3xD?܁ģazTїu$Js $Y_8mI`l˕brB^Z%X?9=n9+qOg]n#)#S oի" llڷת(rzI-7I"WO}SF#D˽ M0JngBjN"f; ڻձQ *K!n Lf~DOdmk'p3V3:K kul_  ymlvȲAZ4+j'K@efA&$:'P v3lkߖq^1zK&Iil WY 6FS' '8ߏA,RK+:`g|㻟mOiKz&x lu,Pp:)u,ЉK+%Ƙ`aZ#xKCp7p{Q4l.j3Qoq biڻ| LB(%~a{weIpG#dj)YjIITEc9:OQ.$ .>h(e}Tu/әS"?rZXT.ҫp7KFpa%ל I iPz@a wql':v!#[ z΍XRGYd,S$}N^S46o MF*6$H`(U4j^P󏸏./ށgZf&x3 sR|Z`:CMoQK͉-vtsm`I  ]l Y+Chpeme ԧ"m ˻@ l ߽X@E si{< ug@*#9Yý MB`B:<b`R;qkfoo֖ic8kwSFIc h?ԫ!?݊[{?@L-쉇3_fik,"ɷ{7;?*nڃ͉V986Y}m7)|S_4Os S/ڶTr\齱*eת%6hB)MI1DqZF290* OZ[)c1j N,si7 M@Va4%LaFH?YO)t"^eAKT_O]mY-Ϡ)K-"$~1؃)rq< M.8Z7@PL57&4IJCGhH d,N[< EM +Iu\PlPumީ9#i-Kwu+$'@J3K7P~&|S3ޛH։&UG(C{6V* Xqit޶N#φ*?ODs9g.)/hDh!V3:8iPGoKpZM^C!VeT,k}V w˗#aG8^c5ّǽנ 0(YmÏ$$yl-{oŕ7%2>tԓӖ/$!.%+.5'Eg<yNRaڴj\-jhĎE N~Uq%kmGqGcP|SH;fW㙟_4t^8sQܕ-sʻ+1S9@q!oVhkD_j`'imV+[>ɞ=Nn ĭY'*K<3Y*ip!P UTް ИP?wc>XQ&@~b̄I"SP[B9bv⫦z~V…J! 1֒h,27iK¹&hEC7j&_M9g$|$]-ed9h~ۜ.AɮZUΕent' * {xC=F F(b)x.2}^+?UHE} :ֳ?m#9(% =͏Ehѝ+x x0iCV3eWK3)TF\m<n:߳gKk :- Vl;L;|*~ Z"Y#f@ফVIr3`U~4aBl:~[Ot. *]AE4dӍN qݛ )}PTLJk Cr0NGYixxQLѳ.Sp 7{lRa( ǝJuo͌fNONS^DRQyJL) ђ~~J}kV?'ùB"v>BC#L̈́3nXq8dH] _Ӌ9e]|ق*쑣g=?B]n[n|)6|.xZ3¼|BuR67!j_Yݿ@ nC (txvY(A:7)槅#|x^0rNlš^FJ^ c0M"ŸG Un @}.6>ImRe [7ƉHW*mfԡ ?Pj.E}>Cl`\aS[;?|Rᘯa?\Wx#!"?n1kd2;,j 6m%gx;ҼJ}Qv~nO0j6W55uhlC~2ީ g$J9œkl 2@9q'د8؆<˩+YD2}q~y ϯ{ㅌ#e ZX2UH4Mpk -b='b# ZxE*}JfJ"+>ӹN0WEɚтj o)$SsI1̆ޡ@C5]i}7m"bc6By+IJjC_`lmaZTcN Yg~0]@,Pvʓ]ްUn?Lk[ dΖHD[-a/[E^"hGrRˏqY܆)eiL#.7TjUZP>4IS;`+ʗNX$_;{Q%у.g0]_^2e@9J^3 y5ݡ9%{҃GO, 䴙Em )x?;\i(no(go<HfV|cݹ}iwܸj?]!AzE@v4jfAiXJs}(7)eYZ9j,\Gr&(y)lI$eA?Gȷ/ 3n㱅o >ىXW17ȉȒWTsJVIu@l#o؝}knFRx jiVPӰ =?Hm\MDVVCϡ02$x-w1H5cs=1QbG4b#i l&ꇌ 5Q"M"=C2P-\30Bc,YX̞1sZ$c=}#RZ!M$7mE3q&Bc4wc<:!c/*\k>5 #o&а)"ap%=o4)fG'vDŽ;e8v-x>_loLMZ_BuSCP bK'c"oe-ATxco:0.gq&ڎƭ@Z/;pi&9h*LPh #7fB;U0 ʼ5MWP8e)zv(R,,ƒ_ϡ mXiZYt@iE-2d0xM:BX@搟,,9]*Aw~nSF.&_]eM-T<ئÿˈ$6^QO[|Y:TP~0F>Bh~Uk?LQMw%$c#Z%m̡F , #[!p]4Kcw$ԥwDȘS 9T(ɾ?,rT(]b0-&XNo?zZH`ƆwCjx6͑SW;+Q3x=Nfp[{꿨>kzgQ |WY)!`fJP>ɈQY.B)qdY%^^=Hz[Bh_8Tębȶ |Y%U0C:ёh /[5%.Hs 2/HVQd*%YL1+mμĞpHf(*tx qmB 6yQ,eF>$ [dd(fbck1 wOL$TH$Sqh} Y!,n|ͷK4'g*QpPCc5~6;)6JnEԣHFhhUT֯j%cf8V@Ltܼu;IC*`4ߦiV5UF_(ܸ0E7Tп˞vp6"/0[䈘̧? 0Oap:j |}f Iî+Y$F%},׾+P<.(7y+{t:5@X/ 4b pDW[r# X19X= )av>xԝflfYӼ(EΛ=Q _Iɱ,J2,|,+g: k\+ Z4 OhO}fW$w7ʰ so h87oli5Sw9.#P0$S:)޸ҐeTr2fm_~$"Tי6?qf#d^"t nnDz#(DUt WcKD" $UѪru2ЭMCXTis({~/{Ї +04zrH^B_j buݽpLnTK0܎E軲d dv ޮj%̸ݬdux}in*}8mVK9Pe*-ObpXC`ҵ< >6HOsXJ>Bds ah}K3Q\6#u?z>t$< i([#=hΖ얘&=u"m4>0tP{C,"zy-]]0 ɞi ڞm1,u;128mnff-5:a[B̒Qʜ'qk1k{{gVZv_¢G(?h"|[E:b:f4Ӂ&bM59N8čE"Bwm- )j gPy7?5T%q v,tACЅg#DrxL'-+6cW;gn x̢2cр~foq),gJsqU} NyٽsOM սk ,kVxiqTCؖ9k-Rbܟ( v 9u׫.>dCѤ nMzJc1+ $3IH%ғ&0mTnco$– y VXef,%_DXvS |rNN<a}$W+0z_xN?6ø&MM*Bۖ&Qq5//!*Wb{QO̯FWCRﱕ9lCevߣq/q__1t^-"ٽY3(U^Kmo[AV ˔2 4ޖ̀d7mJ Ɓ5diӸa=S\\EYgN"GϘְbu?HMv3m v7LGW2I %Z_9. >(O%e(g\)#  1JexҔ'{;?6$(  U1]| aT / oޮ.Ucb,)IK6&1&58Is.p.YMB5:MzPՎ9 ,\α~Y ugwf>ŤșF&ggSFgd] Äױs9K9C3o"%'!2 `4wEkWԥn+ ^8ޝbaW DDsmQ/*1XԄHյVX@HsJrƟA Kbi!WvԀC~ T uF|Dʕ?4m-;Lz5{VH-L>*atՙUȚJ!7P/O gJt$Ax՛|,;䏋iSj9v\mu4{и&N gXw^Fϐjjc9-,*W ^޲1$$xwHfcuZANT ;ܽ5)QJb^â, ŌI/J#-4adz|rv-)3?GjC>bP0؋ EZDlDaDɡ5(3 /"mͣ\,YB.$ܾ?eB@oHZ%nfgp,V/Ů8Fx[DL rԯѤa*YaxoFrCkh㐭1 g(CXoʘg !c;ÙiJr%˗vDdǬW^ѿEH|Dsbd#s-M=Y 9)_qqcJf^g܌SS1r5a:jSݽyԫ7cC dVkѮi}ޙǫV9If?&4McH@c+5s8iQWNF@}RmIUۈegߏIx!-cH6Mi%fGq5)X;M%ʶ$t:CarÌ@%zݛirkeǹ- BM= i锲FG VGF+PVrGlY5j!ˈ+(*21/'}w 쮚BRI#fY& bVbڨ3ߧ 4ex1 `oꩶ ,W>:, PAc^s\#HYaFsߌ!F\BKZ&Zq/{ ϭ!^tKU3\9l8'ay3+*_>\sTAbo(NrAFjX0#:nfNPaW9ɨ^v.ѓ4`ݣS̞eA]64ع)'7"0N* GyQjBR,{7+4GG騭=xk +4բCe!nMQfUеMqq8bD[6K jreG xS[d?fEȞ1:d*<=1攜0gBτ;Y~W *ܔ:M5ni\3NKhtcS= P寉ʗNu^ElN]ÙW䷈v$G_F89mx֪gbgp }x(N%mjt+ f&BwQ/u3qn/LAt_A8P ;+DcV5v뚜PS32?a:Ǒ&tz4m4Qd54~1#C}]Q*2+.NmOzq2V5MK^H=7]Q$e`}b'NnXUŶM7_l4.;iF0Q/rid.&mU!饫aoDH;!qX" 5Ei`ߓ6_o1)Zԟ|}`p}@Aq5n{P<v&צ??n%jW1pF <LM 姲`=Htb3ߠ$sꞍ5QZC?ANt'ᮛ<a鶵3˪#&̹~p>0L'7 RicH@1NѪ}XE7'K-u}WHPMpsP*SjIiorlɋZ3 09 BkUЋ&1f\%{v:)I6iΣ&b=I#Oq,H( x$\j٢b+䷹L"U:!ϥ,BՄ:[6~(&߫._ RDt41{@v!C,`^ Jo{R24sn,sZ)q-e/} e9P3|DZ+^~* ܅:Mkr޶8Y- 3%'W_̼¤tFW'}~:A1ϽU/"nI~,OaB.] oҟ7t}o2^e3L5V=b(67+XQ@!:<^wxg'2F幅ϮLfpiO>E1yXd ?,ؕM|Pƍ u'> !jHc?,:c}ɕH^y:)fTSt\DxBnmM__Cm*4/BcW%zk O *Mv}"^]晃޸?D <2WY<jw%?g0ͯBhT(B }bȝ 3h0ư fgV#,NՊ;1~4aN nr3]5I!qlKt(;jQ𢡄{ooӮr_Y.G48k7i1Ȥ 4p ?]l!›~YLK!WR;e:N^ }J|#eax̧CjZAVun[  pK?Pk~j8q08쒟JH X,uyd? ^ B&Ճ"fr/^z/qZ34CCA#SOFԌ=eH2E35GlI\/x;8U䗰Xn$K4 @w.d!6&>0f&֍Ls,"PMɒK-A 2&A5}4eeoRMhwGl S3Vo56SJoHo!Z8 A}~f?]$&p72nsBkh'䔛LFh)>6(Fg}Yw17yG)ޏ @cl7{L"oΉF؋H5`wSӣ"㔔0*fF? @UIu(Ѭ=%U],h*Bh~JBm(HOM,??ZYT Ny~.ܼ~|/pb@Ix<'{t2J`Xiy@ie~Gɝp zWЄ(E!akm_O")&fȥljb~uW.e!/ϣ%:'Mݭcx /E b{?O9g:ոmvN%\/nLr QBK[׼USo{UEÇ8Dh\\I',`cf7յH)ތ^X7y5nN!ŮP,? O6'_0T\Z %E(-`4S$~=I#/Bz3Wtָ@ފ箾`{pA A 8s)܈[<}!ѕSJ65|O v'itjDY5' MoǠ-9g'(euP^U)d9p ;|96S+vKv F`b,EW6(AdU/;Lc5RۂlɜQ_ؠaӮ۸#%sjd V Q~%` elױ9/˂?%YL9I^K[; Jw HV@92؟զQM\v2}OClXxᷪsJv1cD bBV!l󓛽@]&g!E^b/C:0 2Lz8ux3 DaQB/Ohg龍MZo"ۡLz,B~W_\Ū.1& Y LjaU pU?Rk^l ǝlxoeA2%Q?GsP7#`=d7 pl#d- U.w2oTT'/*@h0s:6xֻ%]gS,yzXI]@70uND~DQŌ ]:)B7+Ӯx).=yB\^^ u@>V sM^WcБ+5\+o2rlacrfJ݋b@ ƱirJbTlJoewي^ BT5_Bsuy[~+V_T.dO)4܌#9"#s2K%D; ho#E!k%UGez(Ne :k< vP{hs?Ԁ:v%xd6ۥ,e5*^f"u_ #2ͮ+VSVbعkX8CwPdwnB A9tx˯x%D?R"%FlC?biNfj֚0h17KkP#'ϟf_GC?b]T#|Z۔YY™@|ϯ0'Mm#@]Mr4b$߷ŶaRوP`ƧW&Nlۘ_ @_rMPW֞yd3yJ=k_ F\5R4QlZ6 HnTIY88e, <@ ǧI5*j<eW|-*ܿ('$2hOhϡןGa(RV%f߫LM ߖ$V(?YR!ˈzZu7[JM!Neݿʕ_ZL7?hZüD+Њ m>Z\ؔTQ]+'<;A\ d1ԧyAYR"L{;^jdxL 8܀|CELKX3pnǞODmN."Ol-KU҄@grh~֒} EXirlR7S7i pɤBpT_%Ǟ-%"Lv109uq҅7oMÖߧbR;/>tcy,n S\:ϕQSa0Ɇ1&y-/ j_YHV -tL8_uq2&Kv4A@4֥Si* D%!zSh0TN*N?FQ" zʸKrrTA^!\Tk]=Y::| jVSYGoֿ!^7Nʽ+HL%c[v!lI>ԎUp_p(\H @u4X+\k;o3sfkEfӣL.oWP@] :|B|py癱 yYȳg鋫yo*9E@nn<Dc݌w1M>*M 7[l#a,B.nM?nZ훚ҟ77DIx l`6g]۲bb>^7=n,ǡ(=TB|y_M´hE=tT`{Y@C[u]sfA&Ne,K:w-߈]`v C0.E?rhkMM27Y@'MF]Ycc? ,={ **<ҧI 8! ;:ks̩%tϏFsir{؊ނl0gఔo)^ݕSD.+$O$wTK׿`R9{or S/x'3~xK,)8!KTBQEu2ȧoBnSDʠɹNS.uj闍gNJ&muk~vr.&Ba4̎M[HORM ~#7:Zl V l+'C>x}fuOCRcw E¦x?+ Ć}˿My)ٙuぺgjCzp{~2fGDN,.Mf^kk0$]E%AHkG&l` [s# X;a-@Ba^%JHbp F/krI ¾\H/b)5 qfqD5$e 9LN'ƻt"//^}( i𽗟I^Doe= lQl`+=D뼺s2iv9:M?UkZ w?7MÌ]Kӧ. Yr&qv=PB߂*iFkb+B1%Hj=*`YRM.QX̪b&kf" VϖUm r^f',~1}"p퓌^ɌDXj Z_c3W0ҭ MٮÍĿ$G7.~m%O6_5^w.la7rwSW3(JC`Ab7.I;f*3|R! ݝsnPUX(WR~C f吨rj};OA(Vn=Kk8o[]պݠ*r|XVrS;"619a r ](dUslYx&̙,)C(gݓzqh4ir w4Pv f ]; ,pqPnH?KTɾP .olVt0b03Ȅ;_jf:`ooC튱?2qp-'ڮT4opz&?X4TWB5N m(2bk B\Uɨ ]1)[-j^FZƫEp廴(l rr9Gb?Pi:g1|0nD5{}K0*{blhM?:2r4G7C0 %J0n?7f*]u/].oiɍEJ/ij I+9t{O;sAh:.8ȘBPI`Na] I5qUsZXpm#k9| ΆކvWl} 3_rPrUtK (R~tWw+=66͵ D?(#D~<9C<*=JM~͞Si]zC*՟cP`| JP\ Jh^@hU#5p_Ǵg>Pm֨_8('9XFvmlq¨LZ߄jw~"Z$'J$=v[| 8c}˻wJ5,p523Bbp1cu rɫd :7[nQ±Rd%mTÕ'KӾnkE\AƱu/HVG"o #`P&9^UEjm蟧׃hO[ EamO";X YL(}#;|xLIAF 'a*jhY-:em& ^@XObAdDk.#~k6.ď=ͬ{q/Ef͖Q}|7i.5m1U>?BR NjH.R=ԡNЀܯtNkR =?%ϿӔJ"FoLjsQQ`C@θO5 K^śQ|lG,{fCm@XIa*x}s 1sG9kkyhɮ1ln|[qy3!鹻>I2܏lWʹwqe~PQQ9Tgyrs6~j8JC-TN깆l۹5>9-*c>It6cDW"`!P4&M38XU|ذN69 y<} {.4A5,Ǘ5_%mj{WE~泴V^cJwZ|PtGz)T\ ps:d\洭@әA !EF]#J I`ӴGg9/~|sblng L hxɀ.y@w Hf Dv${l:cЃnBb~ XU=cbRhb-q+,}~OY5(ƀ <,MiVtn#I5z&`Me%)E řH"UwDO?fn9:kxtYfWpYG)t&2"J8]΢ZuwƠԔ9&28̐j=yLv(2C}[.ċ >#}mpdDԇ O !SlaϪ-EcnM3DLa`l  }²#\x]_!VhOY-La(DHm'(fkJ5 %J T{m4s^wZ7w̌5l|8XÈGFiuAHܛfkifO-=ZC6uI oo9zʀ4,g$r7tW} +2S-Kڇ6^81h-:vo_IjM1gx8hmr eZS]P+>R l7sIg\k^>b&J(mK{Xsc!TUE5G趂)t,8ehqvqU~C,%%u[X1l A"G{yw~r%dGV7qMȐȂu=]Bsu},8MN{X-se hd=IK7aIia+1jVU47̪`7QC +Pjǻ旸9TH19]}So b^K-Q0(HKaȮIvF O9$:P3|1=3Vt A,{R +Qr`)zh}KR#Q+4V+8ntgO0` 3;ĮH "醔X bJL*IO>ae1ۅUQip'}C8C@({HJ_~W&yKcN'Yt os/̀K*>b צN好#t~Bboڦ1 ox+$шa}4S2%e*~"5_\}D"8͊Udav->IBq,`PC̸k{Bd@NOx2V* tbkߌfZ!YΥ%qCl"09hќX m)5yJrkVMg1w#eAڿow MŪ2Bݒ:Kp D֥ z@&[eza ayr%21UmH+&C7(!Pڝ)5Mܿ"^&~;홹i @(Ֆ>a A1']InM{?+ˌ[xW]5t 9_Xծ^?B}4{Ef-f}zlLB nnWe:vd}7bB`]Ø z Dmu 4WGPs0z4y`zvM @E K[VThņK!9zl2FuTѼ>W>ރ4λFdZ,v =ma Z O vJK~2UH$g1  dr_֥t|PXG6a.oCɟZILYΊvhF뾾uVP9tN>}'6]lS &B/s #c xʨ໧棬o //W؎qE4*,m1Ftls/ju>!Y3]C]7)py|զ2bV堟Mc]k%[0ǫUi`Q?r^y*ڲLܢ~dwdֳ:uwsTm̀*MT)*t'~nsJifLPG!rzkާm,b`+ 8N~mo7pJ@sJxOϗ͝mfOVHC4IEv>J/L8w0!nͽ(\@C!i֢ȷ CRp:'akHMlc #\uM6m -HjMUUy}HLfryE):nTN>B Cyt ȼtBVx6?+ srPo Lpx5"-j)G^1[vm2 5b4^4;uw;Oob&@Ԧ($bMnzv'<̰m.8lJ@HNREd\t d_&_I~pvO#N~AiFu 9߳/"<Y6B &y7rs Ϡ: y}T (kޥ1GiHMP۞Acj&V^V@utƸEuo156۰m wn!3 Ȃbj s F5d<)=oUvQKհmo9]Mfwx{r= 0|[ 0ZB 3Wjd 8Ś֞LIWvTiLxIh2Z^ݎ񝁖-/pI?~Dbp_CۭALs"Q]b-MƟYʻ7z4@|i燬!̇C- !+ksz{erLp +[*km2<\YSU3l$2nA 3`ÎTGWE;8N[f<]QGB;2_SH>\DolPyt_>銲f )4bX 5yj݅8چbt ~[_L- A ts’QN-Ś#_(/y#e"뒪/RNf)$YJ9Ѵ 1?gT!ko~)6%b;bHg/\KlbE*K-Pe [_Ľޭ#qio;`I_ (`M @k oH &hZ`E'2CH**2-E!jO O mDP NS_Ae຃"[jZ{  _+oH1gL(‡S[UFIAH:qPK}1StL-G\unzPp3 ww¬"&)}s!MG^awXEEDOix#|/e[gy6_#T1W3oGJPȲ*H1Iц?"R=:Ut=Z‘)Zck$y$>]'_5o1B MaN* $/1<ͣG eZKe"Ptκףtkry[Uz=3#UT%pә?x4V8+>;W+fu ܠl5CCN WGGN,!Tj9yA)qf#n=rIi %U4y~R:Cr&Nb.ɛ ,} T8 7sO*?Ck98%M4<OHz!҆aZM8uu񆩉'T)ЩO5ϜoOcΠtIAVJfv0)ԝ|,P-6[?l*2uߝi +YT~$q0bMpA-٠^FXQO``bt]ޝBzJ}t4qETo'ǂIP~X!| ~B*7N:93dIۈ pK€b< iI2)j\7zյЭQ | V peFqB)Q,j0TOYn,A!R0^$ώ6.)s;fsiSKzR#g -U^w1Vt҅ԮYk,b n,Hjdwl0T&<< kSo&:e>薘13\Ŀt8! P\u;CS?jUB$k<(}Ӄ.1{bbJh:3~kBccgrN{ #=1&?TSMEkE$rbka"Rq1I .IDOy%W9*ljlٝŕyNA0L+7aL~v1՗;|ux7`c@FuH0zjXY% d1EYl~/716Ml>V\*YV娻ohɰ44x\41v/ ,TC$4: kZE#;沝d]T1s)tM۬΋Ld󲦭@s`?jY,|fن/MrQH,+sm?s"faґg%CyR)Nݗ YZ