dbus-1-1.12.2-150400.18.8.1<>,ȉd~p9|/ QO[2^}+r'E1oZHEzS^>)rxlzbz/:7G1OmA?p7wӿgEzhqz0Θ?1'VfY%LfC@/vlp`*\ %W>J?d   7 #@FML ]== *= = = = = =!=#,#P=$D$x'%'('((7(8)<.9).:,.=>?@CFG=H=I=XY \L=]@=^bcdef"l$u8=v,wt=xh=y\pz,^hlrCdbus-11.12.2150400.18.8.1D-Bus Message Bus SystemD-Bus is a message bus system, a simple way for applications to talk to one another. D-Bus supplies both a system daemon and a per-user-login-session daemon. Also, the message bus is built on top of a general one-to-one message passing framework, which can be used by any two apps to communicate directly (without going through the message bus daemon).d~sheep15 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-later OR AFL-2.1https://www.suse.com/System/Daemonshttp://dbus.freedesktop.org/linuxx86_64getent group messagebus >/dev/null || \ /usr/sbin/groupadd -r messagebus getent passwd messagebus >/dev/null || \ /usr/sbin/useradd -r -s /usr/bin/false -c "User for D-Bus" -d /run/dbus -g messagebus messagebus if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in dbus.service dbus.socket ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fiif [ -e /var/lib/dbus/machine-id -a -e /etc/machine-id ]; then cmp -s /var/lib/dbus/machine-id /etc/machine-id > /dev/null if [ $? ]; then rm -f /var/lib/dbus/machine-id fi fi if [ ! -L /var/lib/dbus/machine-id ]; then mkdir -p /var/lib/dbus/ ln -s /etc/machine-id /var/lib/dbus/machine-id fi /sbin/ldconfig if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /usr/lib/dbus-1/dbus-daemon-launch-helper fi /usr/sbin/update-alternatives --install /usr/bin/dbus-launch dbus-launch /usr/bin/dbus-launch.nox11 10 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in dbus.service dbus.socket ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/dbus.conf || :if [ "$1" = 0 ] ; then /usr/sbin/update-alternatives --remove dbus-launch /usr/bin/dbus-launch.nox11 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable dbus.service dbus.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop dbus.service dbus.socket ) || : fi# immediately restarting the dbus service causes issues, As such wait for the next reboot to restart export DISABLE_RESTART_ON_UPDATE=yes test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in dbus.service dbus.socket ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart dbus.service dbus.socket ) || : fi fi+|FA)JHZ)kZ9)X`fh FW5@:q1 ]AAAAAA聤AAAA큤A큤Ad~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~YjYjZ Yjd~Yjd~d~d~d~d~d~d~d~d~d~d~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-cleanup-sockets/usr/bin/dbus-daemon/usr/bin/dbus-monitor/usr/bin/dbus-send/usr/bin/dbus-test-tool/usr/bin/dbus-update-activation-environment/usr/bin/dbus-uuidgen/etc/alternatives/dbus-launch../dbus.service../dbus.socket../dbus.socketservice@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootmessagebusrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootdbus-1-1.12.2-150400.18.8.1.src.rpmconfig(dbus-1)dbus-1dbus-1(x86-64)dbus-launch@  !@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(dbus-1)libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap-ng.so.0()(64bit)libdbus-1-3libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdbus-1.so.3(LIBDBUS_PRIVATE_1.12.2)(64bit)libexpat.so.1()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)permissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowupdate-alternativesupdate-alternatives1.12.2-150400.18.8.11.12.23.0.4-14.6.0-14.0-15.2-14.14.3 /usr/bin/chkstat -n --warn --system -e /usr/lib/dbus-1/dbus-daemon-launch-helper 1>&2dC@cGaՈ@`#@`.`@]:\=@\ and rules in dbus-daemon configuration can now include send_broadcast="true", send_broadcast="false", max_unix_fds="N", min_unix_fds="N" (for some integer N). See the release notes for 1.11.18. • dbus_try_get_local_machine_id() is like dbus_get_local_machine_id(), but returns a DBusError. • New APIs around DBusMessageIter to simplify cleanup. See the release notes for 1.11.16. • The message bus daemon now implements the standard Introspectable, Peer and Properties interfaces. See the release notes for dbus 1.11.14 and spec version 0.31. • DTDs for introspection XML and bus configuration are installed. • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but never uses Linux abstract sockets, which is advantageous for containers. On non-Linux it is equivalent to unix:tmpdir=…. See the release notes for dbus 1.11.14 and spec version 0.31. • [Unix] New option "dbus-launch --exit-with-x11". • [Unix] Session managers can create transient .service files in $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12. • [Unix] A sysusers.d snippet can create the messagebus user on-demand. Miscellaneous behaviour changes: • [Unix] The session bus now logs to syslog if it was started by dbus-launch. • [Unix] Internal warnings are logged to syslog if configured. • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured, or to stderr. - Enabled "make check test suite" - Patches removed, fixed upstream * fix-upstream-drop-install-sections-from-user-services.patch * fix-upstream-increase-backlog.patch * fix-upstream-timeout-reset-1.patch * fix-upstream-timeout-reset-2.patch- boo#1027201 dbus-daemon not found - boo#978477 systemd reseting under heavy load * fix-upstream-timeout-reset-1.patch * fix-upstream-timeout-reset-2.patch- boo#1027200 don't generate machine-id in %post systemd will do it on first boot. - swap usage of /bin/false to /usr/bin/false - Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1- No need to set --libdir anymore now that prefix is /usr/bin, * fixes boo#1047532 - No need to set --bindir, bindir in dbus-1-x11 was incorrect - Other fixes required to properly change prefix - Don't pass --with-initscripts we don't use them anymore.- Update to 1.10.20 * Fixes: + Fix a reference leak when blocking on a pending call on a connection that has been disconnected (fdo#101481, Shin-ichi MORITA) + Don't put timestamps in the Doxygen-generated documentation, for closer-to-reproducible builds (fdo#100692, Simon McVittie) + Avoid an assertion failure when connecting to a semicolon-separated series of addresses, one of which fails (fdo#101257, Simon McVittie) * Documentation: + Update git URIs in HACKING document to sync up with cgit.freedesktop.org (fdo#100715, Simon McVittie)- swap to /usr/bin bsc#1029968 - Add the following fixes from SLE12 * bsc#980928 increase listen() backlog of AF_UNIX sockets to SOMAXCONN fix-upstream-increase-backlog.patch - The following bugs were already fixed but are missing changelog entries * bsc#867256 (No longer applicable) * bsc#916785 (No longer applicable) * bsc#1012564 (Not applicable) * fdo#90004 (Fixed Upstream) - Rename the following patches as a tidy up * dbus-log-deny.patch to feature-suse-log-deny.patch * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch * 0001-Add-RefuseManualStartStop.patch to feature-suse-refuse-manual-start-stop.patch * 0001-Drop-Install-sections-from-user-services.patch to fix-upstream-drop-install-sections-from-user-services.patch- Update to 1.10.18 * Fixes + Re-order dbus-daemon startup so that on SELinux systems, the thread that reads AVC notifications retains the ability to write to the audit log (fdo#92832, Debian #857660; Laurent Bigonville) + Fix a harmless read overflow and some memory leaks in a unit test (fdo#100568, Philip Withnall)- Update to 1.10.16 Fixes: * Prevent symlink attacks in the nonce-tcp transport on Unix that could allow an attacker to overwrite a file named "nonce", in a directory that the user running dbus-daemon can write, with a random value known only to the user running dbus-daemon. This is unlikely to be exploitable in practice, particularly since the nonce-tcp transport is really only useful on Windows. (fd.o #99828, Simon McVittie) (bsc#1025950) * Avoid symlink attacks in the "embedded tests", which are not enabled by default and should never be enabled in production builds of dbus. (fd.o #99828, Simon McVittie) (bsc#1025951) * Work around an undesired effect of the fix for CVE-2014-3637 (fd.o #80559), in which processes that frequently send fds, such as logind during a flood of new PAM sessions, can get disconnected for continuously having at least one fd "in flight" for too long; dbus-daemon interprets that as a potential denial of service attack. The workaround is to disable that check for uid 0 process such as logind, with a message in the system log. The bug remains open while we look for a more general solution. (fd.o #95263, LP#1591411; Simon McVittie) * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching was disabled at compile time. That test is not expected to work in that configuration. (fd.o #98665, Simon McVittie) Enhancements: * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian stable and Debian testing in addition to the older Ubuntu that is the default (fd.o #98889, Simon McVittie)- A note for scripts bsc#974092 (remove sysvinit script) is already fixed here.- Don't restart dbus on upgrade - Includes temporary work around for last version boo#1020301 - Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually start or stop dbus.- Add systemd unit files to start session bus via systemd - Added patch: * 0001-Drop-Install-sections-from-user-services.patch + remove install section from socket unit because it does not need to be enabled explicitly (see fdo#92402)- Requires systemd >= 209 and drop the compatibility pkg-config names that don't exist in newer systemd- Drop useless --with-pic which is only for static libs - Abort installation when user/group creation fails - Avoid calling %service_* more than once- Build the dbus-1 package without X in the dbus-1.spec - Move the dbus-launch.nox11 to the dbus-1 package and install it by default - Build devel-doc package in dbus-1.spec and don't build any documentation in dbus-1-x11 - Make dbus-1-x11 package contains only the X11-enabled dbus-launch - Fix some rpmlint warnings - Delete the dbus-1-x11.spec.in file, since maintaining it is more complicated then keeping in sync a dbus-1-x11.spec file of less then 120 lines- Create new subpackage: dbus-1-nox11 - contains dbus-launch without x11 support - Rename dbus-launch to dbus-launch.x11 - use update-alternatives to switch between dbus-launch with and without X11 - Solves [bnc#934214]- Update to 1.10.12 * Security fixes: + Do not treat ActivationFailure message received from root-owned systemd name as a format string. In principle this is a security vulnerability, but we do not believe it is exploitable in practice, because only privileged processes can own the org.freedesktop.systemd1 bus name, and systemd does not appear to send activation failures that contain "%". Please note that this probably *was* exploitable in dbus versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing check which at the time was only thought to be a denial of service vulnerability (CVE-2015-0245). If you are still running one of those versions, patch or upgrade immediately. (fdo#98157, bsc#1003898, Simon McVittie) * Other fixes: + Harden dbus-daemon against malicious or incorrect ActivationFailure messages by rejecting them if they do not come from a privileged process, or if systemd activation is not enabled (fdo#98157, Simon McVittie) + Avoid undefined behaviour when setting reply serial number without going via union DBusBasicValue (fdo#98035, Marc Mutz) + autogen.sh: fail cleanly if autoconf fails (Simon McVittie)- Moved dbus-run-session from dbus-1-x11 to dbus-1 (bdo#836296)- Update to 1.10.10 * Fixes: + On Linux, when dbus-daemon is run with reduced susceptibility to the OOM killer (typically via systemd), do not let child processes inherit that setting (fdo#32851; Kimmo Hämäläinen, WaLyong Cho) + Output valid shell syntax in ~/.dbus/session-bus/ if the bus address contains a semicolon (fdo#94746, Thiago Macieira) + Fix memory leaks and thread safety in subprocess starting on Windows (fdo#95191, Ralf Habacker) + Do not require systemd to have a service file if using it for activation (fdo#93194; Simon McVittie; backport from 1.11.0) + Stop test-dbus-daemon incorrectly failing on platforms that cannot discover the process ID of clients (fdo#96653, Руслан Ижбулатов) + In tests that exercise correct handling of crashing D-Bus services, suppress Windows crash handler (fdo#95155; Yiyang Fei, Ralf Habacker) + Explicitly check for stdint.h (Ioan-Adrian Ratiu) + update-activation-environment: produce better diagnostics on error (fdo#96653, Simon McVittie) + Don't fail the build with an unused const variable warning under gcc 6 (fdo#97282; Thomas Zimmermann, Simon McVittie) + Merge dbus-1.10-ci branch, containing backports from 1.11.0 in build/test code to support continuous integration (fdo#93194, Simon McVittie) - Avoid -Wunused-label when compiling with libselinux but no libaudit - In development builds, allow OOM tests to be disabled as documented - Accept and ignore the --tap argument in all "embedded tests", and run all automated tests with that argument for better diagnostics - Fix the systemd activation test under CMake by installing the required files - In Automake, fix shell syntax for installcheck-local with no DESTDIR - In Automake, don't try to run manual tests in installcheck - In CMake, don't run manual-tcp test as an automated test - Add travis-ci.org build machinery- Update to 1.10.8 * Fixes: + Enable "large file support" on systems where it exists: dbus-daemon is not expected to open large files, but it might need to stat files that happen to have large inode numbers (fdo#93545, Hongxu Jia) + Eliminate padding inside DBusMessageIter on 64-bit platforms, which might result in a pedantic C compiler not copying the entire contents of a DBusMessageIter; statically assert that this is not an ABI change in practice (fdo#94136, Simon McVittie) + Document dbus-test-tool echo --sleep-ms=N instead of incorrect --sleep=N (fdo#94244, Dmitri Iouchtchenko) + Correctly report test failures in C tests from run-test.sh (fdo#93379; amit tewari, Simon McVittie) + When tests are enabled, run all the marshal-validate tests, not just the even-numbered ones (fdo#93908, Nick Lewycky) + Correct the expected error from one marshal-validate test, which was previously not run due to the above bug(fdo#93908, Simon McVittie)- Update to 1.10.6 * Fixes: - On Unix when running tests as root, don't assert that root and the dbus-daemon user can still call UpdateActivationEnvironment; assert that those privileged users can call BecomeMonitor instead (fdo#93036, Simon McVittie) - On Windows, fix a memory leak in the autolaunch transport (fdo#92899, Simon McVittie) - On Windows Autotools builds, don't run tests that rely on dbus-run-session and other Unix-specifics (fdo#92899, Simon McVittie)- Update to 1.10.4 * Changes between 1.10.2 and 1.10.4 - Enhancements: + GetConnectionCredentials, GetConnectionUnixUser and GetConnectionUnixProcessID with argument "org.freedesktop.DBus" will now return details of the dbus-daemon itself. This is required to be able to call SetEnvironment on systemd. (fdo#92857, Jan Alexander Steffens) - Fixes: + Make UpdateActivationEnvironment always fail with AccessDenied on the system bus. Previously, it was possible to configure it so root could call it, but the environment variables were not actually used, because the launch helper would discard them. (fdo#92857, Jan Alexander Steffens) + On Unix with --systemd-activation on a user bus, make UpdateActivationEnvironment pass on its arguments to systemd's SetEnvironment method, solving inconsistency between the environments used for traditional activation and systemd user-service activation. (fdo#92857, Jan Alexander Steffens) + On Windows, don't crash if or --syslog is used (fdo#92538, Ralf Habacker) + On Windows, fix a memory leak when setting a DBusError from a Windows error (fdo#92721, Ralf Habacker) + On Windows, don't go into infinite recursion if we abort the process with backtraces enabled (fdo#92721, Ralf Habacker) + Fix various failing tests, variously on Windows and cross-platform: . don't test system.conf features (users, groups) that only make sense on the system bus, which is not supported on Windows . don't call _dbus_warn() when we skip a test, since it is fatal . fix computation of expected . when running TAP tests, translate newlines to Unix format, fixing cross-compiled tests under Wine on Linux . don't stress-test refcounting under Wine, where it's really slow . stop assuming that a message looped-back to the test will be received immediately . skip some system bus tests on Windows since they make no sense there (fdo#92538, fdo#92721; Ralf Habacker, Simon McVittie) * Changes between 1.10.0 and 1.10.2 - Fixes: + Correct error handling for activation: if there are multiple attempts to activate the same service and it fails immediately, the first attempt would get the correct reply, but the rest would time out. We now send the same error reply to each attempt. (fdo#92200, Simon McVittie) + If BecomeMonitor is called with a syntactically invalid match rule, don't crash with an assertion failure, fixing a regression in 1.9.10. This was not exploitable as a denial of service, because the check for a privileged user is done first. (fdo#92298, Simon McVittie) + On Linux with --enable-user-session, add the bus address to the environment of systemd services for better backwards compatibility (fdo#92612, Jan Alexander Steffens) + On Windows, fix the logic for replacing the installation prefix in service files' Exec lines (fdo#83539; Milan Crha, Simon McVittie) + On Windows, if installed in the conventional layout with ${prefix}/etc and ${prefix}/share, use relative paths between bus configuration files to allow the tree to be relocated (fdo#92028, Simon McVittie) + Make more of the regression tests pass in Windows builds (fdo#92538, Simon McVittie) * Summary of major changes since 1.8.0: - The basic setup for the well-known system and session buses is now done in read-only files in ${datadir} (normally /usr/share). - AppArmor integration has been merged, with features similar to the pre-existing SELinux integration. It is mostly compatible with the patches previously shipped by Ubuntu, with one significant change: Ubuntu's GetConnectionAppArmorSecurityContext method has been superseded by GetConnectionCredentials and was not included. - The --enable-user-session configure option can be enabled by OS integrators intending to use systemd to provide a session bus per user (in effect, treating all concurrent graphical and non-graphical login sessions as one large session). - The new listenable address mode "unix:runtime=yes" listens on $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the systemd user session. libdbus and "dbus-launch --autolaunch" will connect to this address by default. GLib >= 2.45.3 and sd-bus >= 209 have a matching default. - All executables are now dynamically linked to libdbus-1. Previously, some executables, most notably dbus-daemon, were statically linked to a specially-compiled variant of libdbus. This results in various private functions in the _dbus namespace being exposed by the shared library. These are not API, and must not be used outside the dbus source tree. - On platforms with ELF symbol versioning, all public symbols are versioned LIBDBUS_1_3. * New bus APIs: - org.freedesktop.DBus.GetConnectionCredentials returns LinuxSecurityLabel where supported - org.freedesktop.DBus.Monitoring interface (privileged) . BecomeMonitor method supersedes match rules with eavesdrop=true, which are now deprecated - org.freedesktop.DBus.Stats interface (semi-privileged) . now enabled by default . new GetAllMatchRules method - org.freedesktop.DBus.Verbose interface (not normally compiled) . toggles the effect of DBUS_VERBOSE * New executables: - dbus-test-tool - dbus-update-activation-environment * New optional dependencies: - The systemd: pseudo-transport requires libsystemd or libsd-daemon - Complete documentation requires Ducktype and yelp-tools - Full test coverage requires GLib 2.36 and PyGI - AppArmor integration requires libapparmor and optionally libaudit * Dependencies removed: - dbus-glib- Update to 1.8.20: * Fixes: - Fix a memory leak when GetConnectionCredentials() succeeds (fdo#91008, Jacek Bukarewicz) - Ensure that dbus-monitor does not reply to messages intended for others (fdo#90952, Simon McVittie)- Account for openSUSE:Leap in the conditional for chosing right local state directories (boo#941352)- Move common-begin sections around to make pre_checkin work again - Unconditionally build with systemd features, there are no cycles now, systemd no longer buildrequires dbus-1-devel- Update to 1.8.18: * Security hardening: - On Unix platforms, change the default configuration for the session bus to only allow EXTERNAL authentication (secure kernel-mediated credentials-passing), as was already done for the system bus. This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly unpredictable pseudo-random numbers; under certain circumstances (/dev/urandom unreadable or malloc() returns NULL), dbus could fall back to using rand(), which does not have the desired unpredictability. The fallback to rand() has not been changed in this stable-branch since the necessary code changes for correct error-handling are rather intrusive. If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using NFS or similar, you will need to reconfigure the session bus to accept DBUS_COOKIE_SHA1 by commenting out the element. This configuration is not recommended. (bsc#931066, fdo#90414, Simon McVittie) * Other fixes: - Add locking to DBusCounter's reference count and notify function (fdo#89297, Adrian Szyndela) - Ensure that DBusTransport's reference count is protected by the corresponding DBusConnection's lock (fdo#90312, Adrian Szyndela) - On Windows, listen on the same port for IPv4 and IPv6 (previously broken by an endianness mistake), and fix a failure to bind TCP sockets on approximately 1 attempt in 256 (fdo#87999, Ralf Habacker) - Correctly release DBusServer mutex before early-return if we run out of memory while copying authentication mechanisms (fdo#90021, Ralf Habacker) - Correctly initialize all fields of DBusTypeReader (fdo#90021, Ralf Habacker, Simon McVittie) - Fix some missing \n in verbose (debug log) messages (fdo#90021, Ralf Habacker) - Clean up some memory leaks in test code (fdo#90021, Ralf Habacker)- Sync changes from SLE12 conditionalized for suse_version <= 1315- Update to 1.8.16: * Security fixes: - Do not allow non-uid-0 processes to send forged ActivationFailure messages. On Linux systems with systemd activation, this would allow a local denial of service: unprivileged processes could flood the bus with these forged messages, winning the race with the actual service activation and causing an error reply to be sent back when service auto-activation was requested. This does not prevent the real service from being started, so it only works while the real service is not running. (CVE-2015-0245, fdo#88811, bnc#916343; Simon McVittie) * Other fixes: - fix a Windows build failure (fdo#88009, Ralf Habacker) - on Windows, allow up to 8K connections to the dbus-daemon instead of the previous 64, completing a previous fix which only worked under Autotools (fdo#71297, Ralf Habacker)- Update to 1.8.14 * Security hardening: - Do not allow calls to UpdateActivationEnvironment from uids other than the uid of the dbus-daemon. If a system service installs unsafe security policy rules that allow arbitrary method calls (such as CVE-2014-8148) then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment. We believe that in practice, privilege escalation here is avoided by dbus-daemon-launch-helper sanitizing its environment; but it seems better to be safe. - Do not allow calls to UpdateActivationEnvironment or the Stats interface on object paths other than /org/freedesktop/DBus. Some system services install unsafe security policy rules that allow arbitrary method calls to any destination, method and interface with a specified object path; while less bad than allowing arbitrary method calls, these security policies are still harmful, since dbus-daemon normally offers the same API on all object paths and other system services might behave similarly. * Other fixes: - Add missing initialization so GetExtendedTcpTable doesn't crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)- Update to 1.8.12: * Fixes: - Partially revert the CVE-2014-3639 patch by increasing the default authentication timeout on the system bus from 5 seconds back to 30 seconds, since this has been reported to cause boot regressions for some users, mostly with parallel boot (systemd) on slower hardware. On fast systems where local users are considered particularly hostile, administrators can return to the 5 second timeout (or any other value in milliseconds) by saving this as /etc/dbus-1/system-local.conf: 5000 (fdo#86431, Simon McVittie) - Add a message in syslog/the Journal when the auth_timeout is exceeded (fdo#86431, Simon McVittie) - Send back an AccessDenied error if the addressed recipient is not allowed to receive a message (and in builds with assertions enabled, don't assert under the same conditions). (fdo#86194, Jacek Bukarewicz)- Update to 1.8.10: * Security fixes: - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536 so that CVE-2014-3636 part A cannot exhaust the system bus' file descriptors, completing the incomplete fix in 1.8.8. (CVE-2014-7824, fdo#85105; Simon McVittie, Alban Crequy)/bin/sh/bin/sh/bin/sh/bin/sh/bin/shsheep15 1687256818  !"#$%&'()*+,-./0123456789:;<=1.12.2-150400.18.8.11.12.2-150400.18.8.11.12.2-150400.18.8.1 dbus-cleanup-socketsdbus-daemondbus-monitordbus-senddbus-test-tooldbus-update-activation-environmentdbus-uuidgenConsoleKitrun-session.ddbus_at_console.ckdbus-launchsession.confsystem.confdbus-1system-servicesdbusdbus-cleanup-socketsdbus-daemondbus-launchdbus-launch.nox11dbus-monitordbus-run-sessiondbus-senddbus-test-tooldbus-update-activation-environmentdbus-uuidgendbus-1dbus-daemon-launch-helperdbus.servicedbus.socketmulti-user.target.wantsdbus.servicesockets.target.wantsdbus.socketdbus.servicedbus.socketsockets.target.wantsdbus.socketdbus.confdbus.confrcdbussession.confsystem.confdbus-1AUTHORSHACKINGNEWSREADMEdbus-1COPYINGdbus-cleanup-sockets.1.gzdbus-daemon.1.gzdbus-launch.1.gzdbus-monitor.1.gzdbus-run-session.1.gzdbus-send.1.gzdbus-test-tool.1.gzdbus-update-activation-environment.1.gzdbus-uuidgen.1.gzdbusmachine-id/bin//etc//etc/ConsoleKit//etc/ConsoleKit/run-session.d//etc/alternatives//etc/dbus-1//lib//lib/dbus-1//run//usr/bin//usr/lib//usr/lib/dbus-1//usr/lib/systemd/system//usr/lib/systemd/system/multi-user.target.wants//usr/lib/systemd/system/sockets.target.wants//usr/lib/systemd/user//usr/lib/systemd/user/sockets.target.wants//usr/lib/sysusers.d//usr/lib/tmpfiles.d//usr/sbin//usr/share/dbus-1//usr/share/doc/packages//usr/share/doc/packages/dbus-1//usr/share/licenses//usr/share/licenses/dbus-1//usr/share/man/man1//var/lib//var/lib/dbus/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:29498/SUSE_SLE-15-SP4_Update/f503f36d987b4ab1fd1a492788e3ba3f-dbus-1.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linux directoryBourne-Again shell script, ASCII text executablecannot open `/home/abuild/rpmbuild/BUILDROOT/dbus-1-1.12.2-150400.18.8.1.x86_64/etc/alternatives/dbus-launch' (No such file or directory)exported SGML document, ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3472400ec5e1bcf1a5c4ec59d4ed04446b8e67a6, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2747fdd06e9ecb893c3ca81c2335725ff93eaafa, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=747524a1e66bdbb19a71059be039f4ed4f753b46, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e6ad660a4f444c98cf10ee5c8a3318917e650dbb, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ac9b0d1aab49c8ab44499af6d1695b7e42205756, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=95743d9ac0f4ed4505a832696ff761648eb63bb5, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=443e36d66bcfc24d982f015ac9f9b9863e611604, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=551aa9a90228aebec4dd76ce3e675cb2ed31f29b, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=304b820888db6116d8d23746f96142e34e080168, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=13f1169485b402c4b96311d39f2752fd2342a156, for GNU/Linux 3.2.0, strippedASCII textUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)cannot open `/home/abuild/rpmbuild/BUILDROOT/dbus-1-1.12.2-150400.18.8.1.x86_64/var/lib/dbus/machine-id' (No such file or directory)$/8CNX` RR R RR R RRRR RR R R RRRRRRRRRRRR RRR R RR RRRR RRRR RR R RRRR RR R RRRRRR RRRR R RR RRRR R RRR RRRRRRR RRRRR R RRRR RRR R RRRR RRR RRR R R RRRRRRRR R3=hl^&2]# See comments in pre if [ -s "/etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1" ]; then mv -f /etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1 /etc/sysconfig/services elif [ -e "/etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1" ]; then rm -f /etc/sysconfig/services fi/bin/shutf-8023564bbae554dedcfa2ecd7715517c5aa37a73f55e294d1bdfbee435caf5212?`7zXZ !t/]"k%U4h/_b63"{*LH&/5lxWQ< LмT 2?DO: tN!t0MQ ٹKEV c+fnm]iD]JJ]SA:kM߸s94k#K"mEkUnWj $8Нe8[+ 8ЇݭFK h4$c@d/N]9K\{N./:rH ˦4<3uKZl[>O_F:Hhf e'0CQY7`aotR_. Xڽ4󆖘xiyCDARЭO:񉈔s[{k6yUeP_*Ȥ^0ΟH?KJo!ĚzaSt`Cx*_WZb~QVNr uK<80v~-+AKNX:( E1XӱhO,F$= Ma4?R] 亥9BL5*.G涃Jn sI>Qn4,zNʸcm:yŠ]\}yF"+apx^.kK`:wrF;s^ߨ¥0~8qTNR#3-d-02/dҍq&*d@v;$X;{Uo`M(4tyl 7pVc~ hkJlLH/n;1bd}xHN822`IyQɩsj7V@"omLllKM-z0r8ih&ȥދL\ ~HW07}ճ jo^Tλ쀒zU3jꅭ6JEgYI'n-oS iӒފEa)IŽCTz\%oe2l)A b.ՠ\VqeiCT=ΉGTgBLO.F,q/ٮɻv]g|ųr}x; 3y$jY{c<X5C|Y:]ʼn)w+`uttT{gA->tҾer^H&F^E);&1ɠw.}anZY⿷Pv> # DBDF9Щ~(K{ƨ=.zpC,9zv-0wd lX'U*oɎD#ˍtX}}]1Gr(ܱGM!$d! ;k=!R3sh/R͌k勉zNIIDzZCv%?Ir%瑼/RQ3rJE< ׉C&ڨHk7嚰*PbD}$,J::Hd'cN ""a23eΆݧпS"~ѿ4j C nm~ޜiQeu[RDp J FQ4x*ѵ-vjtJ_ |AcjѐZyE)xU%1s[\]1z@{#ʃ0,%>N0bks$xE45HC)?lEF]ViGIT4-"h).QI3M?1Ot8yGr>?̴0)GڟXJ XePoOhJq?i[K;r?0wH3=oֿ@Ti8ʞjzݻ;i=$BJ2R0.s|h3aSbv`W$a+|z]]$/һl]V\K4Oc`tdF'+P׵B v@|&mjǩ2.\z42'[P>E{k R\fmWSJgD PK Է0Q4J8{Yf0SqTrAY2-4 -E;`v/`D!%$?j-r&: j~P~,:28{g7;|.q@}g 8y7N3uFrͧ'd\X~P..D}utҐ]5M=+4{sL Z`Wn§ok%5ػ_mDٿnH3̒K p>PhL;EN[uҥ~i,wʌ^mx(kg/dxa.M;CX 3|#+Ac?Vm: (OE٥M[,A)? @Ag1Sd$m-{'B[EggcHWc_}?l݆FN”=-rʨh%8ԿYvuSb<Άu%rDس{Qghce(^9uW&Q| L5 6YڭKS|<`vn..uxFU&3 #H-EU_\p}QEq,/"|dSdQX=Xx2VNT4vw?"\m!63aږ;PZРxLKqkJsR*okyHo7O{ekmRC"c1a\sfx4FHAmL gep}pFOA4L!E.~)܂ o*i@` rӪ88jpwf<(\5dMj{Gmr @$, R^?(@F,| ^A>0ge BjfqIF[fWH t'L .)@9*Ur#(|RԒj!Y{U@7R59>Q[~gYЎzzgx.rh>o97fZ҇j nU5{ؗ=HA| `NH [%E?@UZT;WőצwSаUGa[3.+YXyNߚU{4pdK,/)#Ch!/cZI8՘[;ZK@J]gR8J s(}#2J{Vn r/ [&l7VRX!әRK\ A%z>oMl;.g%k#vJ xP}WeQo?WJ*Ej 3JSx0P}aЛ= WyR|y'6)e.~h^rQ;antkսǀ4.N6Qjdg"*`idS?YlfЇ׷R= I^_֌5ښޮCed St|@\`,SEdEwceZ 0YC`VH89 dg*v:~c|=y\3f5P"ƞ>p8)ދ*Sri54a->*095z(m4Ӝ_ksUhz<@|Jr?*h^s.2hA=> VrC *j%9/>ПQO4];SH`DBF?S?a/6e+X1muAw(m'{,h@Uku>8uyߥTq9÷ȈFd_EkD2HD6Or\@{>Q`s(ww3+X}1o ~^UKGY~FWikaTe!drAewP!:%_EA$q6-@Vu3L?ĕ֮(gOݸdshȔ ;C6CBΏXWd}y@!Fɹ;vV3/1a41ޮ"Ɣ-5BRhi&gغ=ܶK9ͫN*)LJ+ևx)S"k֛{k Wt7V _lZz XK'j !6#OJ골J]esw1B/ -#QQ QQA鲲gڀbƮTo1A{70ix-M0@ܛx9iK7!ØqVSKeA %o`v.'jJDUnbURVM>2}f u6P~ʀURNv$[x.l fjG\}gfXڎU%h{TX>ԄP-97DbCla*"}&mh _룤9JL#B~Y?!њ٥͞[ [Cv)µlO2#q ?+Oc"kAM&>~5MR kF"6to,p݄>$W9s{68=.>!*/[_Vs&Xx܍Z%w{uR:BLLȫγ@)X|-IkI/&hҫa}NUF`*$9f|(|w2% 6yCӀI'Ҟ,_BmèݰXT]F`%)5RUuֶ(6*pb&~ob({N-`n%zaPVU$KHw7(<~F:5D $nO#odbJ&EL]y2gc\RᠱD8_%cit@q76;s2 9Y ?u k3ArX".zv Msaiqg(;Ժ2WU*~W%լen&jNQ|/25{aA0.ԯlzw)8|׾1V1bᗠC3D!x%w(ٱ0dG>`^~U y*є%>78-pQ`/X3?GUh$5fx睼 7_F,MO *I{ S{?w<`rCyr Pxy5 l``vX"щ-1tVY$LYJZEsҒ,"At$!?|NtI8RAyKlBy+pY/I 3s("+>*6O?զ0D9,EhgK*9f YGj-E-c{!3*ݔpȉef%n(.=Оtb:#ؼul~d`Pdz2D@QE?D`}()%ky(/}cFE(a]@Ʀp&q~ӪN%KG3vz&6.Bn_l+Qag֙Ew4br-I|y$=P?V4zX sv15H$vBb-Q+*>5bSy\ ӓ:p/19@4-L‘Y<D1峟LQDUprkL 7W8 LR_1IB_7ﳃL?PA,R H3`s') a|%݂i@ZYSWp_#B{G#2X˜œe)^LZir*ٞu=i<8 NEd6V;w;d:~o)!HKOSUi׬YbRiTZB2s O7J[^ ADdnjkW[a&(9ٔ.\ŻS+SƇHhPvL yK焝pLjX_: ZGOw,NЗ1B׮(nÍE ,ZNC4[PTҬP*wlĬ* :d8H- eP+ ;+e8~E GCjQ!]U,t5,nH\.*W#Iݿv31|+̒P(1uaAHƹ`C81w& ض=M۳aQGKqbܡl-؁+H ;yNaY O9dhU׍>i8ˆ*-+'v0a|3.hu5݊1']Á UmUOd1W㹋ee)Ej(HǙLτ8_ۤW ?o_ PK}bG.LO2yv @$)ڝw?'Oˡy9be+dֆRzCHӘN3j`*tԆÂsda/Y! ,*Ҡˇno뢑gnJ ZL߬UA.=!77#\r`o7D|ٟGJUzqNaȊ;n.Z0X=qCl8^ER\CC::càL>bL2;<\|NOKe^nR~ /(喰M{3i=xdX{d(xv }`9 ,_z5rxC2S)Yv^ :2 m^rhvj/d3iLx";c1U> mzP:kRJk_7H8>,M▲{ NuN`B5#5#^$ܪ;tgk8>v앆 4쀯>qԾݷP.Eϥg?͒3 ,l-m,u@oi.iD}hUvTtĄ!074\iB@BP>*˸VJI~[;uZ,<3p*}+%Y^]nbX1SKjk+X'4d?29mdMq㨂u~ai/ `E^  v7KUHbeX;[+&V>*hӛGYM6{F ΆRÇƮL f+;DuWݿOsȫp3'{+ZF-BOaRQb?D*4qڍO|oV򀾁aѤH烐;ܹ%;uQWf( >L{(*m̺̌sD8|1Jv7,y"z';?⎃5 @՚Iov95':q9pQF1 |R?#~8 3UEeEd CKsn|Σ$3.[ ) -;Ɓ>]"MPu 0sߟ1EEj uMZ ")8n)՗#%xpkζǷ.:+F:}zº )aE@,M Ȟӫ{M9^Հ;@u| 1:-zI @-Zck`*x])꧶f.||:)[GۤSLbhMߪth2N6dX6,/1<)@[Ilyo.`ΚRT& J<0'鉕^p@t5> 21{5B5# ƒ` xA0?k"Dt<(Fyt]f ?d HxȈvL^@/P5|x3۰XqG;67 bI~߲GWtd5kg\H)k{ EV4:}& !ߕ'^ bHIPY`JhaJ v(j@ q2?}* r1i0ufKv]qׇЕɛ)Nu񯰙C +7~ط͐]V{CO YX?ia Lw3+$1  PX3Ƽ&ԕ #.+΢}2ԺY ͩJ.JAN_яC͓tÆ}}mxP F=Š=5k# UTNM.E0J*C?T u -YvUR1yeҌUiv+#œ_Z3BĎX͡=z\@ ;W(xKW "FNȪГ((eZ܃5D*~n-СzMy]3Pwe#ǢK_YH " (љ2HC3c$.`Gф7?pR#t?\9@8{ 1aThغ& ZqIAC=0yqc,22,7MU00S)!Sr~{qEBυnOL}7~'%Lc"|e^7_|e jzfe\wPKuy<-g.1?aS'o\z+=U""Jrb3+O laytDJVa`f"c_o%v0?]:$DL=N\QWQjnlӏ.J 8O|eg f"c)Mh(AVnƛS^x t99õۚ Ȥ"r&yf -ŽG?ț(<`دͬ€3e/*^Bqɤ,kY%cb )S:,6\=r9g>SznZ[LJ)e,@e4̖L~^~,^;A0 wsw _r>XVSbgZ۬u+W6STj).PG0%6qn.bF"A/BL# 8P {֢ Cq3cCmR`-ܔ4J`O![k' | cDgThe? ;$)?m7f-X?ܛ ¯wX? Qa{=qsE\QE"5֞+q2;@gs7'w\|&Q܀ϲlUxdlb5#iPM |.oZޫM* )7'YhM8$-ࣔâE{+EL-kL(4>OFqwö %Axy3[\6} L^h;Ec )V:Zͥ;m2i6.SOL,Q.Syy bٗ s)\!o[OnVb\{|UYѥ/ٌ`Z(䡭H D|{R~4KOL(YV y$X 0Ny1`TtR11SٖPX7\zdrIfh Ce?F{aL?)>c,-wd'(w=$^:t6_oʁ9+p QǤp_5\quGfi4]h9zƒKФٸ1SIU\Wsy?nK;+d)=D! /9g"u.}h`{N-U!ߝϴS ș;_k9u+Lq&%@\etPN!uآa^ѐ2ZacaPYAݘ`G5Z;TTh 7.hZ;(C^肜a׎)oJcȩoLjJtJ'h*lf tEeklrZf\]`D;ڏ =Ľ&}U_'}mfg((gPX=LT $7ZKy6 V$]s_3pSD1sNA'43dYЎ”>>#Fc@.VV@;b޲sy3. T?rQe0GH)} H_8} u\@MFaAK"c`s:݂e5uTS[;B'*T;Wl;ၡk&ǷGZT&g_ jƢXmVӺW݃QJ=W4MGɴD|Cn`Jk\ ]<_Z %͆#o l 7-`Z냽 cG]Z튇F;#!!:Jd7[&~f0ͣE0j&&A,*A~k.iCWH6\*em"{k''kT5Qނߡ 0Ol 6)T{5jd ]LM{ ¸DqVtW bj &IIr⅗8*C[:K"Z}>U_Po[gwqc+1E3M$ee 1 y/ڰV&"Ɲ`LL]x :YDWr`Hqb&/Ϭe^r޳a_<{WϞztG>M)sgX6qd7.A+ɪ_O-9T@6jT_MkTTdca`FNT j_`{'ЎSͱ>=N8Uvn0dzwlF<X%@m#T 4K,忢ٯaepe3k$؆@Cظo\6'YZ>S*kDzy7%b-BpN杸5>D&Q{YA9Z=)%/+t^Hʢ3\jaAZc@rro#&jOHOY[x΍[) > eܣUuq V:VV;ItE t"_m3Qo<`3*8kzܴR-UKo^ = b46$\X.hzgr36Рr ~f4m!P7|vRg8Ps e?ELė~ .KzYe>"E j-›֭[o4lq|;}w"[]]GˠhXw+IӨT M,[,u# iXq!M-&?&^/Y0NDڧcߥ+.- ~4w$==љ!M:_Za@o#s޼jm awC8O#U^X!܊4ߚw8*mYʄ'>. î|nf@2Xr_TMx (XnC:߼7خXvb ;lJ:8YΡ0F~-_#Bx@4 'f]ΝcBQT/ jgb dHH@Ἷ̀n=8O'vmyOAESVJQ~fep|a(JuyYslY2+"&TZ3(`dQCĽ-sE#\t.}h-suPd^2'b>_Ţ"|rVȼG1Η pq"`/CbqwTv4g:/0Y?f"0*ly܅Y^%/s0A*bnQ,>9ܥj4aB꘲T/Zw(ɦ 9Rsh~W3]>KfI)E(  x_@:)~,B7k:P0~H=C+C |9M=}LZY6C!ݩ KyjӋ(}@lq.x:QmsԄ,o]fr3g\&LA/_!T(Ћs w;iry߈޼ُoe{`t%x ;R\mEOwjpL/ FT"w?\+eiZ"I_]ò#6x-+I~i(,1pBT]ݿ:yq!ҙԩ4J3z RZFe\JhD!RS;HԈLcs+w39ov:Yr*Y 5/x!04PJ:L6Su231Q[$fw^4=oVú]mT۷Ո32NTjJ&X(kZuuag5fKuXjJJwV%"(7 ZV5<&\@gOhr 2 [IjjT R H?n|h v ?l ^twhm/>XXE Pb.NcW!o^Vh;22l~lVW)Q왽?2rI(y 4;Sa3w~{̛ͥ$P=u,:h(/}7emޟX"B|: c-B/S-2 RXR 'V-hIyB3:Ǎ5TEEww*@;):|R+n( E|8$/(γRk9%mz^kȰ.kC׈ʬ:lEџߠx='Y:t< >[KbID@sA:˟%He]+*.j=|B6q[ W洎bX0<"/^鲊QĎhh%IZtPW>m߫2!ժӄBM[^,n$;hUNû&tY r-]bG65 ||ITG7N.H*}mPڷVp>5ܺhP:`<43YR6= v£vQƌHWfΗOԞ^xV(tQcdymFIm|qx؅?p/}"D_J͟eQgfZ|K2zy χ~q).!|ٸ[96(7ٻ= i|,D-byе}oDK h"Q**%"&qK'l'Nh蛝mob֫ ~x{ 1i99 w&YS~"8V~+H./F'RXiq;C5 ͧHSA =X?ކs<8HVɪ+j&>px kMȯGH 5Kw\Efz2!)H)[, +g.[\ly9$0VHDEK sb?p~IܙSفhǢJhLӴO1]ڒEdA6o5wUIli'oX 'a)VqkW|@W֏9PGc*&V[?ir8{s"ջWJfb (ҽeStӄ΁ZPj՞+LFnnQlL;Ą1̾T+l(އLiO3S8EGDݦ>SJk'T^v:RAXֻcěm3V+^;:01SwE]FӦGhdžJC2k|A9t *1V+J%0|\Jb*w%;F=߫Fd*W%G!2aMcd9W -(.Uۭn ^,.2x>]5^ 5怨`Y!0\|5~r!AZ,XCL`O 'v%._j_Jh+ѿ"Y$S233"-w[.q]X1gW:JMoV%Ң ƺwCM J(mRXMP`*oAu,n"}xn3JJj׵TxCc?H,oDJ*oɻfKc9LGW}PX6 [H$qslLb8fb"Kӷ,̘ӭV2?6Ի|}''aS1 9ndʓ3A1!H08fK*:nw B{T%y4 *@iyVjfg !^m\HZM㷒ލpQuZP0ٲ=SbLer2?MB @wٴxƓF_R{*5Ԡ.RBza&}.нѫB&!W ֙ c c8n‹V#]~;t2kQQ}녂ׅJUX~B$ ˩Ltpb!:\cʒn\# luY!jìP_mDr^!JڏƩ# VUF8%0kbR,Q YuzƉvzӭ%=\w ( s'i/IbM<~S7[@a}%@'z.tB/[^n ]AvЛp{Z#1-_Z0HƧFV3.]XyJjq;Xs#^ .\]<6^ FAH_#.'&Pʫx"=]噰zkySoj4QOٳ=U1tC2CH,*״s w| 4C`Evr{Q8g>9O frVqCmy|XN[Kn ?RյWBBW,mqӆKJaAYk FswI,%sCl=tmG$+/>.62jO$a*+Y ڲK<])Hc?)hҴb3Z%t,o='#g)L":@d6|'bD!>٤{Qk[VmHKĊ`Z+8Z{)s)$&B^ͥ $̨Ex;g=->Z#G+U1HSc\ŮCv)=s㍻=@~;f+hwb2?Qh?E'75:Z@z!gow]׭Wj>l@یlҘ.Y>m0.ŒCoDS,3JDŊU lIʍv򭺟)J+=ݝ)DU q0_GF[/\@06rGmFXH5;k?(6 w3VjR%d"Of}\ׂ2m3F"DWb]ﰛ%gLƝve_=*?Y_^/3Lt2>[?ݱ.uSG3ZOiyx dǫ/~ۘK1=W3GMg4Elހ#7ڥX e%H z\ms b@?5Hں{@KĚV jҒbM1Ԯ'~7KHUbRNSqx6!/!}>Q 4%J=G\&M]K y|wʼ(9!<#8 I 0+>TjLȰR5d-Yԟt&ϸ y%%?6PԨ;vȹz7fi3*{ޖ=KFͧ P U{NlQeJP,2r c2۳`/[X.2h޴F)8rm3*j8&xb颕EaX ZR΀Tqpibʹ _>G1i+ޘ:Y9 aj ėiV:4 u:3Q ONtb Ǣl;Oqnu-peJ^Wh*Q;LAJWXv/bX*s ? kDNĐXJ\n#). wEß3n}J4Qmupg]? %M"9_˭% Eg^IqiO=(DmBZ.AvPF"+K#\(U ehh =ȍ' Q|(i)PZq6iZzе^Ȋ*T p}ZCBf{*?/@/I" e~ƺ$:e5&./S@II(熿H^ڊEUx8"G_z,F.tm>4rqjl HL^zcc_;q3ḇDFbThwrNie<LeK [X2VWtXV(m,Ny}14br6OD 5U*`W冔&ɆZEq.O.atߴ*ٻmad(q#IZsjQW@Ԑ [zEȪK& Iv/'t^=Hq}EnY}g yrkrU$(ψNp;=7n>8X}휗 #㐩dl!^4I8Hz(;klbԹ{m>jO&jN=H z_5ʜ}VytJ%]#f|RSyn~$n)g~j{xmC e;r m{B/􋲝Cxk8Mtg?'ͥ-!&U8H4E0@_j76PdG#ﻯXDvrO٫!}_9%|aG:&9MIG9O7J=nDZٷ:M 3ر5Sѱt!`pei%$FC t gvFG4`Wct ^Fl OiDZ<XC 3\m!%Dfj5 6UcWE2y& #xFsۃ:["ZOKemq*M {oҐͣZ iartqg(Lj͐׃" ; !) (=P` / ~˳,u..偖dkBpx[Jb}TnAzifC Z-jܠT*?jOV; Bd~Lc,D"5@ת^/7v+x*W)3 9%RJKYI\ӿ?yX-#@d%6 =X XPWĵ:B6xD3~3WygztKH?GGH?\fS$P5t#ˆX}#t5٫ށ* [Ky)~$y# ]+&l>&b"'ȝ%6:sX8<-K g3C95K9H#iF V9PH{ƕ'G4.-@u/0P4FpA=JD>{̡\%RN<EhҹkUu}'?#}-~Qg)7Ufzđ3շly8<wIU5J1Vus!sR˦]Rѕo.V:wgo=;ȁ^tɚ8~wK 9$|sˢ$q&tV*8Gr")>F:wP\M/! @1]Fߥj+_g)cxN]1=BM=Cy1Q,(ҳ0O(wz8+6;)( \]Nӻx]ҖQ)~YV l^By7]XG4|MW_IjU f|5h^`S6N뭵/zSD&ó2`CYRG˹dOoԝpq .VH gdPPP|WÝva[<-PSM?AdS3<O_컴`7^#]goECh:o><֝;l܎$r͘W>7jc§ۧHBg-Or$\4n90xPvy4rTXHr^TcP FB$#(Ss ,wb)=`*Nz3#{]cEsA&nXGrw¨n`\Iݿ-\Mpz , ;@1Sn/㌵aE8b5 EHy:EPD#Zz'ǦH|XcQ{uL@c\\,A;f b 9;Q@9*z(*}N>te$u3<>GJg7ڨi:--!{cSdhF{ \(7{m+b,I)]^ Є:+n7)Nl/qg2SbCƩX*{jIb] ZƏUmaq!R3Fn(:wCh/Jq-F-eCIke*]SDV>)p|.6rBz:{ZM+`9yd#}X`qՁB^z,.bPLK6N*@R:޻ FB>'f}&OK_^ ķY?{#E&f"BeA_%*\& T?b;D([ѩ SV<3ZA";rNՐj;qk0WAmU6M>]+~֒% ~T,I%QUY6z؄^7|^~[Z/_5_GO ߑ(r}*asrȩYw{l%ՏF%Ch_U\Xja3Z}!X/^4]w}23VV*cH$n:iv/,r؄wBc̳k(J_H4`irV0^VlgZEU܎kT. @,6d<oUan0m1+}+ƭp|2sw# *iM7cQMOVʉ;,TCĊɸ^ d0G398zRGx>e~HOĂY~Tc1f|d XJE⟙ S*Gj&lLb@09 &Hq{Q?NNxg'E0`Hp򻼬rE.fxh_pPco,>N}ӥye_ns@"4Eӆ+~r|kT|V$B]iE?k ¥ڀv*=|>sp-Yr 䛆 (!sj9b0Z^xx֟PK/0p;M9G#*Q:!2ItXq:eXޕyf=4eR8BꚭonyNqod|B&zl&+ 0>yB]vu ž<& 6URoSp!,ɼ أǨvF |~2 wہ~ؕMhlL\W&fAý::1U$6l fYYV`>gi*8l>oԻ&LZZC-s\ ='{NځAaNi)fШؚ`_Uw*V* |.)G`W2j thvQJ7X̮1rVG1ewC$*k7ȴVsԘ(ÙQڶ6tvro{ "K(|+'hKa.ߵbF!V5|>Pj0N1eq9mzim $OruHS>w -H? O l19)|b< }YWMLG<8PLc5emܿւ1"׌`f\)4X,N?|53lO\0v(,1wg' qv }{dQ bYC(Ut[}45}=ft{僋U3gJx$ ڎ+@^),Ng(J N||URDCU-fHfR7Ny45 (rͲɔۍݪB!ZNOH܄/$݄.aSG x3b֦k宇 VWO U(XڠEԯ o4V2t5  \ZUYN\p@Xer> =r\U.Q46¦| N@ 5e6b=\+SOq^D@2N-gLu vX^5isotl(X4 @cQz3rdmR/kV tV BC.Q: n}E 9NǐSd(:~W02_i4@|L'3(MG^/f{(C,y8̴c(uh0uVfv̫_!w±%]^ 1m4QDhFzk_ Q%5-=9N%WG%[C?5|&X? !E0P88gVgoYQA="䧊`4ކpխՔZ{s1*!F{RT #@QCs:ڮOBø!S|HK,io%Eq"oAdz*3gb\~b="@YT'vNpU6O|/6ziV I) 'Ǻ;:Ns!;&ҿt+2IMUc2yhh)ar̈́<'t2P[L=IQ^yƏH|6=܇12Du*%%ï*(,ZD+c1^Ix8iD:Q֎d.ԜqE8zHXt^|,^.$`x++2$Y!H")ݜZEWK̵V}ΗeG԰7c]}v[KBA2:KKDŌ78b6heXtKѨ&@S++'47ٙF.9O JVj f*w U:{^Rʤ%Chqf΂P\G_mY6I8I6ۄx^nǖ ϫ]:Gt?#*p};`*1,r|[8Cs*: AAL.ȱ"E Zɺ4Z/{ze-}VCֱK3T;Dí9<}U翶%*ԖYh~66|fduzA6]>#U񻹅Ze5)'(vF\<t `/w7I.Q6"oq> 6x$1;'I vm}w1%=#J_~ 'GVua;9N[?8[G}_EK/0ZO9s}#Khѳ2~fNVZxn)Ei'4. 6!AW#r7A{:tCj, XYΣ"Z+sd>@0nSeB{2OΜ>IeJ?2nCp5q3D~XؑJvxdxl S~D~\alRX;h\[x;2r;[Wn&+é#Duz`sQш&'gX?EO$fȞUYEC̨`7<|ږHI-'ALx}MS3q Mpiw(󽎞m9jP2?۹-P6l^ӗg$e5J+Ь!&ě֓7AFKH3^܈rۼlZ>(74<˃^~O.DYa=SՐa[TQPrɊˊJ/w8U[Z&a{y7P=w+й)`- .*}9N_;!(u+lTTNj}8QMt|4_= Qi+'V8|2}4oJVPT`(Ǣ,ɬ(id=(wxz[Hd )R ɏ@ m5,ㅋx9̔uE@i._0PYWKM]gmZ $ ǐ#}yO] 5Op{ryޭ|&Й$j/"*^/œ@ B+Ks-k-<wW/rFBJۖZq("-ν׌ݫ(9_^H1Eqc,l~`zCyB2[B
n;)m*|Ͱi{>o=X~e`bПmgOX]~u˛-˿`@铕B|Y4[ נ0sruwF<$ub_N6 NJmH+_o:P7QsJbcd. -օY&UҌ "M%vjА:kE28eÐ_`bhSR(RM1v-SfGCo|v:ڈkƉZ1>G& xYӄRN̛ۯ?ª8:sslӦW;@dO֯5(Rf.,/؜~O&NA15S ĈT(<]]}sOY>.O6ك&*JԐK SW>yJ濝ynwJY퉈8@L+JnƯߝS_C,nƣZO {iJnjID{Sx@O%j߄ڈ4ϞG-g}=n"z N8mi"͂줬9wz@;y0ӕ^aP2fLui0'쳯WxC]\Zq(g.3'h ݐY]GaҸYd/p;ۜir$-\;89JFd]K js̡gϜCN\Rb{zwdWʏ8tNǓLv_ W HCAё= hi6Ɵ[OۆofgM3ϸK%n fp,Ol8J7GҘǩGqhoiP i|vi{cUd(7.{ ܒf#AK8)+&*C75 㤊7*[Y=c#j3\ CO ӬQ9*m̑Édlyȓ:>y VK:FUM.8Hyކ,BL}₸PPyӿp+-tōw28ҿ߇-u#]MjKNTV;=G_H0MUET"ԙ?%!2j}R:vǘE٠QX@`lRE/"^,vG(= MT-D|qkn#Ts$mNF3Tz>7;^3ܺڣG\IaK On6r2{~8Jӓt~?6/TvUfgÝ'r =_S^k.O[^6CQsӘ1EޏZ9byO7Lf8zHaX ?9X2+vq˚/`vDY!.srR1¦>H eAqKhⲇX3\Ja՗qK еV:`Geyw3΂!gy7HoZ6]xMKOG هxPnغ>MntS@,yޚdRA/o^@&P@>ڍŸ=#"#`[%,~sIe˒ԗsXlveC/)b.BHcԻ_\S:>u4*$yH9vZ9[1XE۩*'n;$@+oiub5m =G"Z&~!;ʐ\OT-[fm>bZ2gs̪?n {`lg|hC%C,G [b:c` !Sq՘ tV2OFM;bj1\DŘ1C^VSl<;O[jjƃg09Nw-5H5ػؚ@OkΗ[dzD7Lvg@l1Ӛ}aӜIA`v+zH;yȂ%su~ '20 U'dzsxS:Hjä'onN%tK%MyԬq)߸MV8ZL~^1`[9xiܥj"5 Ϣ5hqbSB.P G( (vmY`N_xAD()0GhaQ`_v^ |#)2:~B}JkcoYf7O\(R+5c(lFt;Rx}eU4֏W,ǷS) _g2ll0Z@d8<6T E\o,8֎hLfZlN86PmWo\Ԑf$gIP/$[&f'f5?bDJؐqF]59'a16x$w,3_:D~/MxR`&s2lě`"dCxIqz;DԞQs&5sݲ̛N?9z?<:MXl.bδ/HtkfVV9}~H4C`1%HAS# DΤQDn0NFkGܚx|C( рk;h1Uw͹H5YՐq ٥e;]Kˡ#;>y[ dm֝wg̴ !Ј8^ALb'VvBOw+c)i,\aЅzHVʈ}M&b sm,2Bgץ$r(\#>lrCBf&~).ة ~d'K}Gߟj@\o""/2fi?<9mڋ躎=;8 !צhWB*an) i|oR/H{B/{wٌ?pZSoj2/.<߆`K#rАTR6TWhl|*%XݣsGspRߔw9-MtM }c<#C .!a0`j 5KG03_jpEx P>:Zq# oo 8r!w2*td=E/M[y];y!^0.F*Ј~02¢N%W_޺dLf4[K<&¢9H\ n';^djBЖnFn.^por_\QtdkVx>`ư+'\k2ճ_3*3>HO˪dQJ@9rpT} )ΩQ~Pm.s9-Kzl ^[gQB7nQvsè{T2~(w̺&wՒO_~Xy&-dgw0N9tԷ,OVEñ[|IP b;Zk,~GC_j d{I& H2]HXP6gJIpソ<^߈qODZތCpj(QV-PvЁ0"+['Aڦk<2t9>0֐Dj#|zKưOBG_#. l&u?¼lr$5. 𢅠KkD~;nhsȓҦV:BV0pbYOkڞl"Vjv!1hqDdۜ&b"Sޔ%PqD= ZU%{ڜȟ'[d(wVc;'ç) |gUw k2>ޙְz[e (Xښ*/VLB ),볈V\9yz\rM 3 lr3A h (q pr)*٭f NJIQ.ds2ޭ&QeWp~+0T 5c Z!)"Ј;Y:@ehX[/ @O3:"JsG_ s6Nzg* ,m<|n- ^%5험fS.O7/Ոa*K}".g͙wYbϥ'.Hy9VT.Hv~Xi`\JCMT"3>f񾵟FqG `n+׉$a֬7^9yؘK5x60ss$׾>V~jY&2ޭ]R4ͺh ]' bNL[Z/wq2ˋP%p,EкHt% ­fQ50 Q:y搥WqH\1]3Ċ_q N"AG[bꂰ6Ų`ę{Jt.%-Mxy#f(|H::GWNKWyu4znŠ,]NnB8`F^rh5l4uD-u=dn\){3Ha~b#VC&^D\zsN`3cn6Ҋ4Űԏ e\zSfOnXʖuh (9•T$A]e]iT}V'9I 56dTM\ykmˮQȢ_;fo*ӻ@KqPքS )#:Uv^.풘s< y)4pܵ%U7JuCKe{,E}Zm;֌ZycC 8lqJOO X4?oo 6ա{}TftӁm8xuU@sE;FKR`./T٘Ee:1l$ͼĸ~[C 0g5,E7*CWJ 23d#93: o^_+h 5d_jMbKm F#Ґ}H;M:Xٿ8q=O_dotLt,B׿6$bG+L9D@x*ʽly+9*y^*q"A8.xJsd~ZUs@#ƸaL aҫhw ga*tt= ]G'XW=UÆG/Y\iB:Ǎ>9LZHP#m: y-Y>$" x:W.%=kהMkhFd]t{]HW'3 XirU{9 g6,>"ue|`ǂdGpPĮf_$8P6fzQd&UJ aƦh0B+0.V ҹ>wMn~FrU l*GI\P82D$Rs $-˜t^=8 ynZ/ֶa ]j.HG^Ģ<"$=g 9\̹-a i ݆BET$ȽBi"_z s)P=2gɷڥc=wɑ^i|AßYؤuwQ㍻|&*UQQBJ0[UIϊ׈ 7zP葖2@k昙aHbaqw&uy81A wOGY0670~.; t͵%}8_H&H-V(SN'*" TM ?vG[p}byeV(sJu@[Ύdp$5dC(N@<(rE$^5eTfDcRI\ͨ);`?;ZA#^q\a^+t?Yu=%uZqr .>6ގׂ=x%z=3^wto\)ak"n2phO7$7ƴ@6:rIi}$zʪ[Մ9g!GՕriFa63fLKfZCCc65& %ji7}'2E@%o7jiԈt {/xrM;gwߓgEE e!d ަI(%2©,;.-uAhpE#SdFU-M#П=HiY%!̂ΚLx9,ktMM)M胭9 "k7j^j ~CKd/qF GvY7bv_0bꝦUwHc99~ܧm\i;iVqO7r nKwt|X)us5`]vsqa?lUthh9![F!^A!|GVXc']u]f}@8,iFPݖ85NoUv ctS`\7fS}Xܠ*a1bluCzJ#fc <Y|o8l%Q!Z- JMhۯZs% G`/ĪNB- #єp),&u58~e|hdNEYqQ~Y. ke_D ߍ(?+pt)Sz& ?LU,[fr-":x:Jm iwCc"%FJM,sgw@YZ4vsZog#,qEl!OҺt+:|K7feݫ1JaLRW%YeEO=x8# V KX٭)ƇndjX(zE9@c =%.46mQF'9 xݡyV'f_ d$Ȁ6j:tba]'/Tz;GuyFC3}2sK{,7F0v C0mESz;CԳW:1. G7x< /?$mi}sƜCˈ|!@d@y0{x&#|HM}i%Q247Y-ypu@w F-@QcqDKt:ҝd'ǥfOISz #t:6,zH4I90K CǜCZfjbVl,'w n9aGd<0MǥG)+gG @OAC.\OV0:=X@sb޾|Rb:$@|L,ڛeCKnM}ğ-AM7-Z\i|z,b DAHmJ5^N{`+23f!G E" K"atʘdB]|ߋ.@_3a;7 6Y&O#,{nEzpI#Mձ [qMۦ ! gd#a"Xd ]OzmFF~jf7S`kZ *.7,lhƴDd6c6c{z|.Jw:q_inwL8-Pgm2ӃrNOU0폍:TA{;58 /ETp86T0<-q} ~؂K}#(a7]ohT"7(VGA3d#yFیuOz( Mb.\0̀=7R2iΛ[B3&zo?w}.[# OŐx2 6 H@7M'ۛY3ؙւlXOwac{"M2=D*\<׋\SZ+R ͣj-% )c.k"\lK,˝'][Qi׈ h[I='29Oj6!Xa/^d5NjbC#C1]Ox ~p"<6{Zޞvv%q0GGRQ?UAQ1L?K *4QSM2 ""v{ybjbwYyuss*c1kMTͮ9,F'3 8¶]VMSIqnj%.KqYl2m$-W4K.$U l鎬#$!L8>2V5;[cb(z۬-H|67@@^8a@[hu-8s޹0sgN׎2a`)[QȺߦ 6!X^GAε"Gj4L8Di56!?7a"N{Ƿjge?,K5vHPH U\9yȯ.lSUPіIKMP[e? &7]pE{} m O4*h.{`SHuf_wIÝ}>kC^k09jv&y5^I}R+'.uq*2RZIl0ڻl$@4 , Ȯݰ'1˭V%_2ePn RH._Q0"0 <$%ˌ\l]tJ9 > }؀3B<6..1^=*Wrg̔TYlӶDrpNEf:sQx!_lMXI'/lG.wV1_Y` l&I'hKr5HW4io=#T @P1#U ,c!T(uM >iR ,zw)Neqsֽ6rtBK>Sa=ΰ܀AL*;AWHлy18ÄMR*$Jz&g460[#1Y3tҫIW7nS"q2 =feMsj][#]uB*' ܣ\DGkYZ`ڂüSN)rVyfI%fT$T yYc7]/IiP+Kސe sW2m3{nZeΫK+~(H3 6TD& Uxŋ|ؘm\ܚCUIz:}Mo L;œ7v@ :l5pS?Og*jϭ6},.)k` >3>7܉ U5W+mu@7\X.mCEC1\f~r$t.pmu94v1Z,XgEyz"cz !Fy2| -cdB2deYK|oIA(~hccVW$:EUAHi3.b|g~=b [~C3sCbWUOB>L%$" q1zĎ~A`K?4b"pזpa2j  .kVt㦪x6<)7s>35g.Y6֛;ŰaNmmh|Rǹ ّ|fUEk; .eԾ0BEx<#Y4솳?gf/=ԟ Y>]@) +rbErZ;;HFe7̕,q|"XJZyZOd~.n4cs( +{0]RE~Vg-6=  QXܖ @_1bCV0&y&ʪc&?,.HIn/_aYI:z-|udd5i#,7-d/_܅˔LjYxZaoQG |[n,f(Ia]:[|(0"{@o{&>E; >f 6.0ߛ&jp%Z󫴢;&պj|<8RcX-o?J[%IVbY3EJvrn>SPb ?Z]G=,yx3$.q7Q]&cf,0GD> M 8jK\L%hs@tfp3_^"SU ECV7d 8"#A Ǥ}=-֪ӜFv +`H9z%"P ^`XXNH l9)2<=?μ[OBISvplFe>u` QMVV^͋^V FWm* φBdž4"8b|gy[ŵ+|3YX/A4g_9Z=@a^qJ(nuuD{M kc%~MaYIWըϸ Ug犗x?zfhO :Z JXNo{i.3Ej |>45(y…;*,˻'V~@-BE*=x@UkzʿP}m0:9 u!ճ0k;[GN_>z+Ζ]^ZrX̑C.8}>ϞqD |hwqվJTcJAV,x$t7aRTpu͖pn%Evk5|7]۷C=<)xB%JU[hh ?c gDE}3'h q"m_J%!ߍ6H%u`[Oya2zfX7W|NiljO K14NC %>! :Q$%O~U&1ro02# ֛\8/7bgw;& 2|X^~6pE(P7w̖Yƙ6F^2,lB)hQ`'mh"(ݑ/Wop4$W 6?~!Yt9;6?H#nRjم^!ooB,c̼%j{CT/8h턪)vY<W-} ":4?V4OUHq?CÞ2df]rF(QЌDWֱyd'u}. e0cϪ&7 Y^Q~'=C-e.8\[Kt%${ &'T-]y ,[F EmIyh!UY.D.];mmeKݶۤ‘ -Ɵe]>'È;f;:ԮiXFSU8%){Y_Scb}w[2y쳜Tkt{doT;A{$opؙDCWiG`RX@[޳2fQSl2%7<\0?ӴKQo%smUvxڭpW9@ZKSvֶHX#p18bY>MbQ]Uni{ Њog|d+9 8`=,]KNR~⽩q߄w}K?k酦m1}EN]:!? N䌒oQo&$ kC5_2Nn࣡Y_x"@c͍av0vtz~ieBX]*\m4''05A `lxw)n=Q+.7cƅb;dMl&>JcjaY/y60bOYh"?ęU`I;C#w='e<Ư!=߭H:X-gwfiF" 2~›i[$Vg=P~s2ylLTcX^:s޴t{?F6Kh|Rтu6hf!7q+cY.!XU)x hmo![ G/`ag3cҖ=sP991ټK i|ۮzPZȜ,?j5?`ߞkl_=̳Bgm}V &o$CKa#nZHPj4(#3'L;2xDk di26q]"P^_D VeEe45FHTrA [GDJ;YПӄoO P8䈝=rg+M+pfwP fu5Pi|O>KzWVoSGs-86bEp>l^05oD61Ake~~)\ _źbO2K#"3m̶ĒRsK6 *JO[.1}^Ǫ$aۙ`㵫S0TD#PB fsS2s貱03' 0E5BX"9Q/!MGRܛ`iRZ'?%UQi`ϬƟ!Ђm: +i:@ h=iFi*:J2vAșbZ(8&AV#rJqU@^|3]#(^@[tt$ 4SGz[jZ.)3)U:JrrK!3oZJ+.:dUSO-a9'qTaXE6F0NK^JA<$a-ѮHO?YWRSڵh_0*.ؑI+ 9,ҿHTSPõvA<Ƞ &#ez63>!k}4>/=>;\%ՕUn:Zܽ4>;C&hlVҪFNa:e|șCs&?gEQBrx']s"7+A3hY(d> W:?g ;],/􁂠n&O!#$qhOdf(QY\wg,#;58֖>#PߕQKo*85黆xIkџ΀X?M6-q7= 2$׏Ҋ&q҆{d{+mJ≎MRuH4rhS~6mJ$ZpSK4o>Bu # *h&2+VۙX2X&;=+em0oIE._|^z.K]@׿ Ǡ yQ3V blsL1L`7@٩dӯIQ:QH0b|y|X '#f *#[,b)_ڐf#~Ep4rt69Ds:vwB)Q"97ѬnV>鐝#{z\2oߣk Fri;ρz d[l VH޸6CAyGYk v:տ2I#sY$ARL[fdx IN˲dgi !@_ߙ4onl`N8:n^2tG}\LĪc Y~m[=C_ڪsYBOa##r'>Պ89b?yU+|2|hۮ9Q&M;z5x'*D7-^2|Cu5ol~|>9e~Ȑ H e|"8 @|h .'5 شrtqn~J#uEњiy}vORپDLok잃p8w߆HSjAOMxkjNȿB h5CwCꀔ~f-L)[sUb bO,ŧadJZ%qX=Zj>\7^\MTP0ղ8 \y,/\[N)6醣PRYmdҧo,dk M*:b]Q=U\-ęd}q}hICAj=_kAH{] ɤD3}궓/i SYJdI䭨5#7 2=AXGY&1KQ ߚPXuq/Cc{ayf(5r?r/ mMǮS+MwVG>_{~U{Ɓl&eN I|rX7?3Wg ,_q HS?g8ęCGRZ^NMDڧ]mbU#V77m6u4* }+ZɵD5˩>yE?qHu Nu뿅bAD5̈1LJ)\F:ih`}3ɐ0E>^zfv^ߢfՖ(fޝ)&O0팑d-e zg0$ҕU c&(~͕n:Y6JMlJgv5+c\o!KG@VA &)3T~s1N1jr9ُ96gefby24y{T:ͩhVob(-TJ0%¹E6kWi_f>"ybL)j%N. [w1 9ᄝ-C#u۩*`nW &JV ]ֳVaBg;Pm$%&ΈޠISFE8 /nŮ-  AޔX]*=bv<'nV"[V\0͠ƎPGM[Cv?EyJ"(Wvpx/gkc6Qk) z7sm~X?c]`Gw S@.>iarݩ) M<0rѮśq㍧ fЋRQ|gfj*9an_m{9eVz<;oāNHvD#"f<2GO8V^!&I* uC5iN%s[jC-"k.0!#bZp ? ftYSm!]ӤxZx >K-cl3nӥS}uqsfAzJ@ZA[fMl3{_$,NNrgAct:Ra Ź7\8bFG DSTWԎ]a񆯣YѵFȷ $?ИU<8xLd F"lADMB{Ȟ_I0= TI-xkkX(' s"1tvH ,wK3Ԟôz7#*5K0pVaZ<u v.= /$o1QE gtoX(\Jc+@a ׿j]}ud2~=SXZNo.Cmf/ՒO5x`GUgkÂr3#Fէ*aޝyVLb)'P2AOou{9-\8:$b'9:/s\a`!K s=q̮`w0NQ4->f([~.K c@#*V zcvFxYXMD W`[>wӳIpcJ;R$񸙯mlek{W1+"0'LZ†9REFDxD ^cze! $B |9rd^H+)8׾W0]Q qR_SPv~&AJf4]>6&+(tz8*5#},oB' Ȣbg}+IO <nTDee”<0[:'Tc"Y8Uu^+g^#!^ԴLt=w:|E<9 (ŸH& N E5W:Q&C[qU,C` OR-/ Ғ(y`Ioo/E&k%3.͠JAj0H ?s5ÃÛi&w.V(S?ݾ%#| ū`>/!=pz+a*rlj'#i.Gva %ςrVcܣC %ў`׹_]*:F-%sPg^ݝ"zG.PTvxw|aH'ۆ?oÀ}x,2}ulY!B `Udo,Ң'6FSq\l[o7]n~8̟ā~`H;gXMetS/J;í뉘g_lvRsy0& -SV87 OH4:y\g_q h8Ұ֔YؗT H >e#EO6r9Y [ jt8]SaQH ~ϱX.9-Zi*-oJ9P qfJg@](GB~ͼݫzg\1#F^-Z_EkI0JJ?1  S*j"y$ @4յlfu9ATRx\L)|l@g'@)D5Nf%{/hF CG& ]3@1kezK1ICY|?;gRP؛[Ie\oi"ЭFKe!Zo½Զ?y.0s%QWwUZA77JÉ|4(m`7,rpʙ3TC!*`Y[vR]n!On*;R<wltN#5Er -Qےy)8.P/!=ᵺg[G<[nܳr O>Z 4+hpA cȽ1,1!h{1D4'~@+ZԣP r){ɽ*v붇~S+ pXL*n|Lr22-rM(+'{6eS^r!(gG)7oxspnBѩg56yE9 ̣}룼;A c~'LdL:Fpc а*Lzx,*u^X#Qr;:UrL54v^|Gx}Zϔ4S5KCٹ-?M#(ksӌ7TOpB|5^Y$'9?ϰRB$l_y+lc7GU(1E?I\sDàcJЂHi]?x'v[ꝇ?ծ"EofOI|eZGHb=WϮESj):뭃$ OTڇ!V2%4= 9E'pK݈m@ W[6&(wκOPoDTu hY 6ǚK|?HVs<'+pNR}[9[^7weVwP"bG M4k0)s k`N7;iHy`Oj](=܍6v[{daW7:8r4΋C9Lg#l,>Ρ? dGQy'ӀoF?3.xR2cHuByQMH-^tJX]H**B7 yz1:ѭ%\ ;tOo- c?鶷4X8T z 566-[T`~l@ )߭yUGP2XN臧 ځqЕJN(5+{jT g;~̛T.O+ùPNyeL<+e6EDh %KMª1L^P-t|CQlT>Sxl!:+g\8v&;')LsPyTxP)jŋF5K|^ɛXGlNۚs6DzO{95 :˲,TX`v8yfř} ]&LXmuC6C *96-BSGo &G;D $4Tfߋ]7d"Lj\[Fcjb+3a0u8- Md2|',}2>>k}^1J\)g["`mͪ#npz1@i4[=` }9>AAX̞W,=_&CLɖ1X<եh`= T>&MpzA8s"ZU>֖&2ݨ:؈|^r>sѤhFw#ay ؇UVn2ֿmK26?^ JM #\P\6y7$F ;.~!;o/@rT.*Бg^pH/8-jc|^%tI"-dl‡&eg4Hn eh6*cBK/obDƏ&ob[.]t#*yBt 25>A屏!>ײ=+*{$YCJgDj7/4)"k&5˄ayr[N- ?v Lnu6J@R/`I2mI wIxd]>.ɳd@ #hJ{gj_AMn.P4u * 5]>UV SYB]nj\jZ%yx´AP9#:)ϩE<*&] Z !oO1dAy"0_*2 Wng.)=6(c Z?;-\}4p bApc&x;J(oJ"^'6k䛼CD*f{$hƪ86D+aP)*(~Y3aVth&%E v7fiҕ PjwC'}Ha=H bb 4*I9'7qY '~ρ·=#^]9lv& ~A_í}^477 ˱ |J%Mxt6_M^ @s< HO paqqȴZ&ǑfX o9w.g|wpkUXϬ{MLo< iIhg,l92~h%ZUYdmJmW 1;?~[2Te!MhpkD ~uLJvaL-#`=)HpmM7`R=E%W@> ^җPOEpQE|1/nZ֥!#&i/yOo.#}UBIq-n*˛}42Yn}u]wb]]= +-t;y垙,snoGRЙ3 V\+{ TN-֝*XjZ֗j@C1Se24|ɾG-pdOTj=a;̬}캧_##{H$[!J7D2*t%wc]>sB)Y.$)kN jm$;}I 1_wMk0OBc)!˾ߍAv%ԠͲLYп%UwpSt24εi,NH,\Y_8ت{sʼnC؄4c|ҁ@*Trltayh &y46 dڡ,.'-+e#~0GCz؎U51,UD98y>.*?/~~$xEՂƅm ʳsv"8\~MT IW+!}ʦRAEϹq*n=T !]l9_>z'dJ1V'#ZEqN{5:<)gH*(:G|o^T6DʩSLpU+8Uu9^<&\ߓrdp4q8c?4lBJpT!hbrU H0vln 3pq X{6Ld]?cNܙ\pw542Q"@55@B~*n|% aS} BhƌJfr#Zױ1 Qi@Sbz^}cbTz@> nRwX uuFETI cKN+Xxx/pZr ܂'Ic_wȶ&/H!'& H|A.޿W5q-;D)>$FU!gu ߇F%oWMtd!FPۥ),} wҎpPPθ{cU|W޷q+Ya&gq6P,iG<ZXiD+,Z鋣7Y띮=cTxg*tDM_g%PRk%hLi\e ΜNy|f3ID~n"k Ok"E-c9=Jbg43M"дo-i22 NԒeʻL]XxBS76| G_ֺ-?wL,MnFڸ"Cl gy Q5)".K>!ϴ6bc$ǍB@M(Lgev BhF0T={\'rZ'N` p)bgHn=ak`rF;E1ȆO2_ˉiĢMeϦH3eQcY\p4M{7^[Mr δ2noU*~U?P9,tY)Ա On h2a`2?K|P~L$P|{DjB.6˻SX17/ݵE47Mo"G1/fN Oa:Z2u|g" 4t|d{;+C) -l7sc)yĔtAϲm9qN?_8**4nȉerY"|cw3w #hǴy*!ZuM%ن뎍%ʷ7 }-,vz~-{[nEWrk," ? mS߶*/|GiVG"%y&;>[D D* ~/Xq`͍>dn!$ t{-7'z1W8os8V4d_1-A? Vxe:浵iɛY2ETbvengEF-y< EdhwgFNW$:.L/A<iy .Oҕ؍8׽.Y@>>IutNpO-Uv$x6ݓsZ@>,k̼~Jh-6bcz+Fp!1,{&xг :sJ2d#=P8sgzA˷r-ukK6lEܶ&tC#n'E/ 9^XǣLR[ʵs&ȭO<yܲ3X>H z&nqmig"5 GI_/8Ŭ>ȲV&4VuYD 2*(I{slr1'#o(޵g se,v5;q0ND8D)ȠΜ>ﰽIe#')͗#(&vk52#eMAGkXMFnsY::j;Q:ieahA䏩1]hwn2 ؊9N!vZ;\VH<;yHD&4iF4^Z=Z4v8N_{칄 ԇWY@{@_e Y s5ΤLomt7=H,qe.V>3wp$X)wy.4pFJR@)v2).^eÜH&Ʒ=D椰#[ c2ѸFyf"5U&6MtY"|V䴜5qʢp7Vf 2\nܵ~R##ݱ3H1P`z!0E6qJԼvSȄ^ΑAM*3Hi) `d*`-\0e& Wia8 9pM?#Fz/lـ'?ʭSJ6`2^``$  ѿhD{5^`/#֛$ "Pm} -υ 0ɆO'bk!ϥhW$cS)F^U bD?Z ;Pk .-W>gї ƻL*J[Ebr|OqK} oˤ0{0}s b ';@՛a$PuE}ny]l5ЯZ"#nfPtV/+Co* g7bmUg&tIo:`ԗ!0K6㟷1|N߆rY]β=T׸-1;hJKq͂V.lKdGY"0ۋ&8(1!O>[/#S0=K8(CrI 2&ΖpiH&F$+.6)M=i$ߧ [aX>xbԽ dU0dvD/{ KZV kEj 3VE탵sPo_?jfW詫Ǵ]Kr0=2]g 2#f{lX~9\6fi"Ji Mq^g^ä+}J<ؔX^ڄA5]N6Bu#׼;pvliBJ:HG:u-KDՔU;Z5: >< >cN#xW7^>1E6m6 +kQnj/93A`{y4BBZXz/*Ο {V`#g]Xg ^BL< jFS06n[v^"blƭ&zfd} o^4wm74c\#~&~oN“u9xJ(Qs%E3ߊ tIƄ[2!FRQ)f]ۆUpn^y<ݵxs NZn,'cv|u=I~ň0]W۵h/B|>yf]0Dtx)&cΑ>ZB ґgўh[oʥ_s 26x% /j~ yĸ5A dBt]mq _]V_WB*ΘċU'/uA [ҝ͘\$$pilvbH\Kx ke42'<2 q9R!L)[SkNù=qE@ctv"M߯c"Nfi3&Xڪ:?ox SӯíWnmhpD$ }Tw0I g~Pp#I*YL[rrRy ~%^\+ bF4u!"Ip B/^j4+Hs8"NGْc51M'–VXٷw7qXW 4Lq?%A4H13pV* V|o1zXz=Ԟ2製V76!%my䐜S)W~-F0؜!G);tJ rg7vJ fx\OQlJ[n#"a0 UlKΤch!>*>H[BC՝b 4Ȧ@o!88۷;AGZ)mGfu0k<:mqOOѠ`y֤'HW)}Q3z,lkv}QT,!k6y9 i˱e$8ŋ&A_7f\P$zC(\~[W< +Pu=?Y\0R QNHE(yrbV֒5(*tUD<1+ؖ u!Ɔ2@aXh u ˠP*[QwDš]m:D*?\PQS!^s/{JDZʿU O*qr_UxvR7FZEtl:Ԧ7p*UABAx!vFB͔)B%+/OwdX=7Wd>g3Ƒ ^Aq0E; 8(R.7(ߠAGn KMH\W ^0VWs74Vul߯7"uے)#L& ;wc|8ݭjy%9 ]W{ `}`BSx`rwAArv֝ Mz樹^kIKwcw Ë&=Y{sux8NN몴6/5 HcKˉYQKsHƔϠ ^YXW .8>fE`Ul2A$-&~OfLί.l$[=ncldܪz{;/P uF/NJx+oU_rgp{5CG޹d! G5vt2&a?@թ[P 2\x@{%f}KbB{4mIصD`PC'-*Yǫ{t\+ńҷu23i:=T2dg[~qjfʞ +3uzke޳<2K`]$ba5]+:%'߮ h֙nĈ;%. %XQ ˡƖՊIi/uo)ju,}BUL*g4ǩ;L.?i;Y_Jvg(zxEY` _SPZ O"'OD!bE |`J( z& W3SQ9oBq}첟DAujSg%Jw^\4+ͿO4 w:5&s.#Px!kt 4 uTm=y5*Oi`2Yfk Um/ rğ+U>gcaEؙ)Z9 ڕq$՟qΩ_UGck-xGOWG8sX \o:չZe8+ھfWZ=[@Ԕ`!?h 9SE;K>}^;shf1q1񂎬9C*f$q'%?)">':42'B^sn MpX.Fɾ2t(v.h[gfy>F4Ug\`V>wlקCx^n u!bVRx;ZM?Im½eT avdxm`9:!DHWCr뇋sS̭4lT@>vqAxwrHC^\{&A> A+ƌ3;y x5"P]X) .ӏv dIY3GnNe1_F~Kgw޼ܥNmss:>j y!݋;kNǽ c(Nv4 , i̇J?e%m[sAT߳ϐ!:tK9o#19k,iuMθt+'w,Ξq(Zv/eSigoƓKZ~] ɺ ۫E#4!KJ)]tbeZg`}6U.#)4T Z+T[Qe;'760aO KS"U8['fh~wԭ} "ugޠ%5F`qH%۾L]"z}:{,)yz]KHuL7x%6,ed kG`:jL$Q/8)fg`i.d'n;PSmٲe;,&Mh^oEHBbN3l0JN4\'cibrO/K9*y^K0y.=.9.Fsij|)G!XӒTN?GEZ'MQ Ҷڍ13Nuh#J3>d-}'$[JC1 g/ wo8%{y~6 \F{ )@7Mqw-9pYPdvV ԩ4(Ch!s~3tSFP|98n ʌD ZY%t5caqzhTC)A6f5EY@:flLwJFIYGBNÊvޟt1I۷=et**I^9+{pΦj(!I@`w+KTšAD€L{MVP\uG4q90crSr|Sz[:@GMg2ޗ߀_]^,5Ҙ(n9XC YZ