polkit-0.116-3.9.1 < > , ȉ b{p9| E?(:70x92}Oú㲱? uMӃʴIeәN5Gtb32_Q<\(ka.|˞ & r2=%~'[ LuuQpte8kP\-8]N0JR=?0#$W6RC2Y mm"nx v-<8Zy0wR{ c vO3XGE*"
> N L0 ? L d 7 , B S x . . .
P . . .
. . . n . D l ' ' ! ' ( ! 7 ! 8 " 9 " : $ = 8X > 8` ? 8h @ 8p C 8x F 8 G 8 . H 9L . I : . X :P Y :\ \ : . ] ;8 . ^ =z # b @ c A d B e B$ f B' l B) u B< . v B w I( . x I . y J B z K K K K K K K K K K L C polkit 0.116 3.9.1 PolicyKit Authorization Framework PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes. b{s390zp3a SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux s390x getent group polkitd > /dev/null || groupadd -r polkitd
getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in polkit.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
exit 0
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/bin/pkexec
fi
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in polkit.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable polkit.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop polkit.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in polkit.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart polkit.service
) || :
fi
fi ~ A 9` ZP hh I G 6 c+ ) V J i h P B AA큤AAA큤AA큤A큤AA큤AA b{~b{~b{~b{~b{~b{~b{~b{b{b{b{b{b{b{b{~b{~b{~b{~b{Z.b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{~b{b{~b{~b{ 28067ad27702251ba38d9794738cb81e18ce2151d26b3d103a33b4107c2f9877 af4292db23ff017727a86c35067121354c63911f32caa09e0b9e42d6b4252133 aea3041de2c15db8683620de8533206e50241c309eb27893605d5ead17e5e75f e5446e165292e1d3f13c8ba636d04380510f8e89a201e51987dd1a58f8b39044 7ac4bac95b6f41af96f0dba9d9bc565f5cf4220a35bf9c5e0d6b09a58e10ceab b7cccb9901185cb85ed422b0fd073125c7061febbcfbd41759a8e362b813a614 3286e6d8f1b2bb3095c1a5bac464637634f3f680edea14c1a0e1427fd88c325e 2279888d3b546eed83373f72b09a8e3d34462d2d5df1ea2319ec0b952f240bd5 d67eeada22def00957a045b0fa479606b93951f58ae47d2d255598d1b23d6066 6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff baed12288339ed4b1df90f017beb8af07b56eba1b2edc4a60914880c13617af1 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 561b4b59f36d6e34af024d07ef8a80457559736138ec9e9e4d14f8e926c17512 725f7541bf0703006687192fa4eab464b4e91797794e0fec5e705d2c66808a1a 1d862c3977460da9e096a5267d4989d977f9e4eeff7781639b80a138fcb7ddbb 86a99df215a09ec829e81f8b6d99e8d88950630a3fb319cf837c3d0506b17ba6 a632e2e392c367b48cbc844b0ed41cc2287126dbac51fb7d1a64f40211ca0589 c888d46402d2bf113d5859a57569c53ab68a179bc2fc084b36c13fb45020eecd 73c95abb890de9cb72fbee8947befb6f489bac6f50dd7325a553b1c3cfda9e0c 77ec4e0353f78877f22fa4575ae21fe371584a041b3e0f3b3c96042e030352e8 2735b902d88a25d4a74135d82696c544658237ecc659cd90560b88103eab1393 d5c9b88e431a17804f869b4320fd642bd6c40230c4085c0b6949820a20e9a3c7 dfdb5e050f3a7140479dfe7636813c4fd071b20d5034e8c7a83ed65e4fb1977a c6d17b84ef6c4a9e966850ec833c4bfc17e15da6131723f22fc0d38902082503 a21c5947e9731f3558bbb979b7bfb65422961ef2b6108ad6177f29c6e8deb628 99a0a2a2e36dca2a54c89ea06d695156b518e02b52883e93b70ba63e3768298a 19529a141086b5d46de37fc95895360c379d49563d5b513323e73f0f5750436a 885304c3e892e3e6e167676ecc691c6736c7116bd1157a1201495e0556f31381 669a20fdc713af31cedf7272d21db31b5aa85423df8a845e4b7c8034ad697d40 76a8600153d9159a0c37901560f168f01b5cac61e19dac08186a5f5e5238c1f8 16f452baa3077f54a5b66861913d097eb2b094e3da19f8af2426f951b4c22701 d3fbc5b432d9fdf0de1499e9b29504f8f6e9d313b519d64c43af35a906bddfe0 9035f887c526aacec04bc44b5376dabf82c4a0f6c955ea3650eb4c416b3d7a66 c3bef7b57d54d7c9cdf02ccacd53a5d630d1ffa76114cfe0bbc5889fdad5dd6d root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkit-0.116-3.9.1.src.rpm config(polkit) polkit polkit(s390-64) ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(polkit) dbus-1 libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.2.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libmozjs-60.so()(64bit) libmozjs-60.so(js)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpolkit0 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow 0.116-3.9.1 0.116-3.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1
/usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2
/usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2 b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh s390zp3a 1644329860
! " # $ % & ' ( ) * + , - . cs da de hr hu id it pl pt sk sv tr uk zh zh 0.116-3.9.1 0.116-3.9.1 0.116-3.9.1
! "dbus-1 system.d org.freedesktop.PolicyKit1.conf polkit-1 polkit-1 rules.d 50-default.rules pkaction pkcheck pkexec pkttyagent polkit-1 polkit-agent-helper-1 polkitd polkit.service dbus-1 system-services org.freedesktop.PolicyKit1.service polkit COPYING polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo pkaction.1.gz pkcheck.1.gz pkexec.1.gz pkttyagent.1.gz polkit.8.gz polkitd.8.gz polkit-1 actions org.freedesktop.policykit.policy rules.d polkit /etc/ /etc/dbus-1/ /etc/dbus-1/system.d/ /etc/pam.d/ /etc/polkit-1/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/polkit-1/ /usr/lib/systemd/system/ /usr/share/ /usr/share/dbus-1/ /usr/share/dbus-1/system-services/ /usr/share/licenses/ /usr/share/licenses/polkit/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ /usr/share/polkit-1/ /usr/share/polkit-1/actions/ /var/lib/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22716/SUSE_SLE-15-SP2_Update/ec91c1ce954d2da72110deaed7a67a5e-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 s390x-suse-linux
directory XML 1.0 document, ASCII text ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=3ebc241375dc0825dac14ad43061770258b5b437, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d542c7aa2278200d4cbf88d1118d480b3f7d133f, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=1615eb85813718c0abdcb618213c69945e90c7e2, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=cbe27239067473f15c9c5ee77fc008f65fd645f2, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=f15bd381ae068b762004dd247424a2417914419a, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=488a867f247ac6c1fc4b15f40f0022e9ee2ede0d, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) XML 1.0 document, UTF-8 Unicode text # , R
R R R R R R R
R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R
R R R R R R R R R
R R R R R R R R
R R R R R R R R R R R R R 6g5&UaG. systemd systemd utf-8 818234e11381d72dbed17e97990aa746833e8494617cd70f50a1e8dd81cc1bf4 ? 7zXZ
! t/cN] "k%Y:0wD8iNmr8聁a_V"CPn((ѯuV á@;[Ӵ"~0R^P*mA% G][mRy*7lH-¸GtO [ wL7nZ/R{%pq;bnwhudn dcڕ>jڜ-|}jɜYҍx5k*#[>VL)z) IBm8noABm#?
7l7Zζa ]WeAKGIڵhup yiGzWOv7 %4a2U$r3y6l]! qjH+9:rUͺݧtG)r/oB͜bH Q\[ M hAgUUAds
5< k֞ƦaO,*LBi]ǁ.M5$8`-^1Ԋ!T:VT@mU؎
ؗq:'\zTFێU)\M'^cKQOuH*ɺRXl8.B8cʾ eϛ7D|(PdY[7npT'b y@TWd$qoc L 0Ċ aj`}o} rBNf;9h~&uswZֵUC=4[)r3,a\^d;fZ 6^!~F2t}4'r80oGO Eۖ"rV&#]77[G3O˦[lZwfkTz8__E>gjD 3PI;~ʝCKesꩩy!-! N~ «:[pns`eМIfgb@sS C6|7Ma +Je !"oS VpJ -k id9&
j PaP"PS b7\6dm
aŎF.P=70
к3:`Bj\lWd9hja(m9WސrԖpp,C` +O-_>vj n@9ո+1#'VkRRY=CŊHZx3 k$1
Y)i) ½z}č˃I kQ
3-յ
= xU Nz
سCRQt&Q@k[P+:CFI 5|sӦ J3 rR;r9x<8h,rfKIR#%<\jzT JB8!l=Ka67..*l7V=~I nߋ)"C x]PПi[61}#2PW!D Nv.v:"aDQkF__͆L+d6͔[oy=N(U Ezsm}TN ?0x TM Fөq9; +@ :l_CFg9}~ h!Kb!J1RMk [1`j9?Wu66C~e+zO 5FK:עP *)( _i`ں#HTf-4{)&ϕfZ߅ GuNG@O}uSo .a!+ ͻh(rXU$ĮuW0c_'r燅l@BZ'I̒Q(Ǧ?ÞwsJSm
yx; YȳN,{Gj|/̥2;A`l%wȟ5/ a䕏!#Ts7x1օv)( H((`(B 4ɠh{Ƒ"`p؎Q'ۭ\=BQHNF6$7I:>?ms-1aD[Nk S^/[J6 2ց!vj=eɌ>5 ܕ7VaFp%=µӫF2q_XȍO*+FE% fopov#'1!'-Z$Ev7ʺ_>Bk؞-qƫBl/v̶̔7Rb?f~ׁr.3j1~8HXܔ۲vEp6J$+LPBp˱h1F|Ca5CzrOmRT(
zK
(0 \(
H"Mþ 'PD;+k$U(Y i5u+*)4yH"cVo9 㹚A xA)"FIfQf8
|@}LMX
L$',&'j ,K4>\sr ~*(\Jm&͜cHQFnT S=SQ= \5%&aʹc: O
lP{p+F# ՖNz Ղ
o#ň]5uW@ri7X]ȪgƉƣL
f_#Wƹ2땱
2dR)ciMbF'9WK/)8B1 ~#q+& E14]UU܀l?db"WV6׀cqMi> %|O(+A'8{hI^-H- s Gg\ sjߢ aIP",=#ؽfA4"r69/`^lb%6~ I >.]y;@OxaQ`D*hNrq6 ԁM8VC}L H{| oxZm\hSM1L7Q %"Uc61 ɰª^ h le̊$<f
Rq@s
VTw8BT]iYv;,Zo0aYo3''? P8/p1&#(F_M*?In24^eemO& "9!
zk%.Uc'ׁ w[i&(߹SF~r3Sr, `ס2R "rm&4;Daʹ^Hxr,Ǧ P!gV nSpi*|GGƜ SghihMKf ]uR) h>>uM%
>HSS9iy wqe?Xa#gUU"k 4'd^`q٫.=viIbGy0&)'{O[F#j{GF_}[t} ]!x/FR[80YVu
*LBrQM( ي.>TJ/uz&omNFԈ]BjXxrqYQm}JOX UFUO veDd2M 4U@9yO++ '~kܫȑ7ڳU;qvq|b} -gD62 !o)5&A-nsh[5P]irR#2/o:ooٍXw+qrДbnNV *mtglyJlG|&獁 @{R}7FÈT.Zjfܸ!_?μL$
!3P|֯>iHCX`A $]՜=)(v Y|l_k ӷ:O5 V0.F
"?u-$!D,/%|w
[>L7x&
L OԪ1q>5r{oj)jVHvz<6J.Mg?܋m[b[C^nɝ:^F;œT\
q5b*r_X`O9X}{Jc#;l3%R8$ zY ?g[÷UY/ FjAIW9y)@{"3q ~ĉ*HCrHұ0tohr̒3-JҞl&\s;1.%VBG0
1lhpO0. 687T|QõݬGG?'PBuy!W&)JZb i986g7YݨKdїB ک[=9+ɋ'H_ʴ`וX i>*ʱ&4)I2uu<)qrK! @Lj,!Zdy[D b|3J)[@6`\At֥
sPQlzWb,h-ڔL[NG !>SmiD9*bn&%Q*ѝHW5o0Y,-舢8 -S)DE)QWM@WdFn 5r/.ܗTM&zq
s?5(p}_u& VH"H;1 a+aQ#/MAclN(0oxnyF
! l3(J ͠a[u+ u4nP^CVy-'!Y*3lHdw3P,yT?Dlbwb\g"6{#h慈eWWJ1 -Yɽ9[5%xV*BFh̩ xuQz>Y!p{=m(*[/%&׀XH 1ÃohH#ǥlfiY^vNh2g>}& F aw)vIW' ^oP|"Iyd !c+**&̌I (ʖx7]d\ W OhKËz3: Sӿ>6w O\fV]DsJvx]-j į ñOP7YzՔl " #l?^diI=gf 7l ]|1;{o@ilGJ X?9-9u[o,AYУU:vQR3 Ǵ 3e,Gpj ~ϖ4S'䗷T- UÊ``x>zU-+Ò1b~iwh_Y}e
,UFo03m{ȲkoPCD ^7i6אԖВ7dN<'͎zV-$%"G,?<8$4G}u#ɦɤY$ b
q7
,M2"!V(ؼ 8% Cҏt# fvJYBe!y#gNPgu˙?; LbIG'T[ zZޅ&
d5YHA/q}6jek&zw0]%zԢR\m(x(aI;=9?iGOjK FӸВh/' 4;uƑd*4M%fA Th e3l0F/앢;b؋ h֤pxZD:u.O ߌ}ǁokp
kS{$- _r߰ͬqI* ކ.*i؆{meI~<
W l[Śm7 "T}~
#Q-NWF6 5pqXۏt5 yv3s+L\^z55Q,.+ l&N !^ R> (2]+"=eDu6Ingx"),)uc7 wE!z Lv2KXAGYml(G-@*d/gwC !ihp]" zhCjcةm2܂{NJ@YyzVyk''hWcC!R2ؓZRbQn%fOe|4;1>.YQ 5 MJ=s]?ת ;O/=Z)qw̚(
^m1K 1קM8X&,T<)-
hrpK/k<
&¹ ,xz ˢX{RrA0jsޒxz-3j:CW j+# ۠|hDG9dp; lKK '0{+Cܔ$ ѭ
S7tY ǿ a%v/9_WSBN9b ,@c?eo2C:T
FV[ҁvv =AB´ƀw9^#㞬*?:`=d#ٟ%d !]oxp D2 Mý.ŭAOyU]Jo-/_lzIh9ch :*ge$G\c^Aaif
+1ĵ^&E?s0qh<K9xB u yAEW
} Pe^Cbl etєLi3{5JzKU/^ۿaD'vQ0-lsw(CPqz:"
"[D12qV˟p!!TFz8
\*JYsߦ]bO~fԀVҕK]QY oS Sɔ Ḯ~#erxVFU2xsؿ,BQ
D"Z m*f7Q| c?I':rFGpnȡs^z@͢&}(U=xԇopt=:" P Bkrh^UxJt!O }f,.T5_vڄygh|R㞽nZI2&(BD~](3 +ߕ"G>EjF)|+(~@ە)%N͋I@4-ۦh UK %Vl §Á3㚜RDu[߳VۊKL99~J| "ouy| S8q*l[s4L:Jο+ 2k;f3~_/+IIF8a*sP>{GK`FKe3;_8:b
.nUՠ *[5 ⴣ+mT GB餐L0[G
w!7{_>Bb0 ~|{З\qbڧ+O{7Z31A(s< @"ovqGl52,IՕW*&_ꪊ|(O E#lXkiQ.GS>`LBO8BTmw\khq~#3 *SLVݪDvZlwlIo(4?I&;n,Ej^+#*29KUܧ+oof[""<n[$2%s)h|% _r
OX ~$E ~F.¥ge J1FR?N.bk ev 5ѲP/#_~sY 98\4zˠfEUa1j}ues!pJL+⾔C ~ w UA3穱g
,?0hSQCjw5Xވc}9.<ȯ)S!&}MLQNIWDLEZ
cqjmDž'qt!U I ``͗VqXdpTYg\v6Q;jT=o8!
xK% s؇L}a0Ǒ_Zɟ&@#uThsOmTgGU:'Ϟt]l˲ fۯRlv# Mp4-4CLJ )XVo^=(GUޫo]̄iizzy`9:
eINy 躨29vۙ([YʣeǑɄ 5b7ݐ ^R1N`#k?BH=I@\1tt3FuvkW4l%`VM m/98v6*O vVIRnxizL;_O?+[oxn܈JP!v>_Iub,%,J=UR_ գލx<%DbQ?Uaփ:_4 ɛ17UT b a!H{3c* I))џԐlV145Є p4RfE.`D0b?AOE
&/R >m [3RwV=zyAאA
Q*LcLKxWB>10ct036ed䙱\^6$XS'}#~BZ4J m!1# &v"Gc l
_!Dι<;3o01V3UXEօ]^y65`fo91"18JyP#V~!qۆ_Ęǵ\:u%;ڷcoy
'5Y;ݩ_:|=e#Q;\_54?1^N`
2{9-e\s\xmJY1,ЈN>4ψRb
oA |[F i*^2 3ԛ iARΉ#K5VYI* H1ztoB3cMHfHu}7Uj)zS^
2A>#6,"AV,IJci@iy*x6,3 f>LU_&J#2nd?ݧK7ҖĮ~ Q;nPzܴ{syT3 L >$ æFYq^;{R$KPknVtf-u-S%J/*ky Sh[O9~/)iI} E&?/kD"5dJ+\˙YV]< *K]?9GBieq
_g o:?7MZ86̿<|28ËvH& 'Y/$D4 $ (NNu!n&!pO qKk [v{!6[)гS"e@9b0SoUDQ~t%@I7 qh!WyF @l~F=C!rUdY|P@O@W`
R4@I7 Jzu t 34&rXL˰JSVL"l57Lm~ \UpNG[)Ctf Od#w)OH4s"DHw3ڞ9ؙ6g+u<"rtUD\S7w>bPRWꙑ3尫/!kPtGZMVx?&/ :yYaɵ %9\ӖH= MVigZa4SxKI?Q_fp@bpR>&d=) uo9ʉ G[J=gYN#z3">D!Ur\{NsXZ
qK̳7*]Z3.9ꅾix>j 뺬%ADH7 I+ ==9D' pV gy؝(4E5.`5HݻvPbN R)DZ3" |x"f7}*X0}8sU6
˳7:3۸@} <<&C8]#yɓ@'!P t$005W N%5\
@KKE75xoTS t߹nd79q=Dm0itїŌKCK+>#e'T"߫S/Hn|j?(v"ot !]e4ayFb9 @rZ;9xxa J"mP :a8;(t4 F$@dn 6+ L]cؿw EOo-.C /~(F5Oᩳ ceE֢FIU+u@;eFMk`
g
|ltnlA ޠ\u[K%!M܂w٣Wf{h D%.5ϵWm~jqyQ3wo7 s_c Mb%~iV:qޭ-E n: 2o&5SDhp5$Y42V9p2-.7 L5{&*^KW_(Od i[B&a)"FS|PùWQ tj6 .zZ/ک =9 ôrnSZNvM'G pkk(8k' C +JBax߃4=FM0&:yPCĥ9FYB2Leo7 d4U> z& k8X d6V d.>]# Pt8٪Ưa-ҫ"{&$
ҖݕU2$&2Ɏx }/Cg4M "j\fWŀ-ȋ+'$3uWmtI,OMVMI 2s9iD`h&DdGHܦx
: rhHZ֮{v)i-E^!>T7*TV/m ͋B^EM`ւS{x*j۸eY?˙/?⍐>0;!l\Os3t=[|>UjNj.WgU[=9x!`U0a2:;V?#F ğf;W~ D$UX gXq.$/uKl
g sۓ>#T-/Tԃ~%/#3T9&-ya QL
nj2py]z8 W! GZt]=j}h%% $5MM.TL䑁 -ĕ?=J`ʕ
%爧^zg0 hALDf½OJh&(:ώ.Vȡj1ɶثn1 E ie:5T~ElA\gSs ਮx)AV؈VsoEm趍 gs3V:%;dBRH{ٯKmb%
*%-mqLa.' I2 P2P= _!>%4H#%Ĉ rQu(wYJsqӊ
1A.Z-N#ۺ,q1^(
o5_ 'mn<%0doO凴_*PdJ?ʗI;CLLdb8R6g:s07DL]eyMdQzRBqFD<#F6r`"Cv^ TA/"7 ̃HT!]IU@(2z54BQz<[&4=3^C5Ӹ&/R!8\anv h«W9wvjsKծ)[͟[A>] K#Q4I
*Q|R?]7u pxEx`;`01譯1>R)Kծ!XQZCSbtƵ;I(.hB^ #`M=a'^ 10NL1$ܰC4=sm|S,:I[ T 6`Ӥg3/`|({f<-"9 vй Odl8J`u T4`9P f16}axV%! {uucGs;ܣN%*&mDҎfI8UdȲnک. 1#XQ"bH⛈Fv)>-cxC>)=z'T ynHêlcltx;3 G6fX!`W 4OQp"P'R>O,`w`"v>6eIHrsL"Q">a |x:wz9 :sK͚ *jH= %EW%G642h>q*\``:lW-bWrjE)M1Ά6bN麿І"Yh2ys+dch/^V/uXqC
S
/X&$
V:87ZMY/j\ab![eG`*\AzNi.i dB3N~FaOFc}Ey'K .2%d\h/"[V
P%h,_pD@Rɺ#U50CR'` DGğon\ ~,9ljW> r<- Ň7(D4Iž+Y`hL@s4
hhRVsuKY-Cv-Ibk,?Yul lK5RSٵRr+Eo+f/A&h Z陀SpLW MM$/;qX Q췂K ߌ!{c-'wwŶ lN1&O02Ю\P!ܚ e}n˫s$ 3eˊ]VƄ%j:r hV*69a[Fp DLR[.nK~+#u9@! : Po
W7wNh[%h rRDo88 P6o'H=]wLb1ֆ{8_r/#K?~vēAoe ˧yH__"FkY贏?ҢiU;sR
c
mqMK7ǨP9DB|WGFXa:aeT.@W&)8Q"?yZ MjQ{
,eVX+d D$=X rkV|h~.aE%>/zЌ0"aVRT%tu X NHj cz'F9 Rt27֫5C K<_08PkwmXU`̾W^vTj:C>UNПڷ:䐟-; LZOɡ)Ԃ (!:skm&=
TՇ P,Sb+&w|fhf\<&Xwgҽ2g?e(:w= 7C~lB4NZrԝ@DV8ʼM]I$HOډ*oMmcC(1icnJf-̝]ED,xV@1aB=M4ݕ$A XԲhSeJYun jbΥo$o`%ljMm|̢HvukLzGÖoS1zlK vbIL/ vD-Prm8oЌ3#XP5VO{Okl_^9²@Qٶ04ZHf
TRjb#sK* o$G vƷ( JqR§A=Rw~}j31S$JLSlz?~RP+[_jO1\4;K< Y;
^YeԪeΚ2^6wJKF U Wnt@d
`5N̺e"lhIî'[3TyGY}RV逍W CLoa1#ãz59 '۫G+uaD^kX `gj W_, ^CPw9^͚|dmcɯVa2g47m7p><ҜwB7 Qi?aj?ycֶk-H)Zvu[DD(fR4.X/^
HcˡI[;]{_eԜ` *C9pGoJB̾n}@I*64#+ K{0>48#o! VaӠkn][ 5L{On*:*;Nv CX1L;}!
sEj̚BYEwΚ; !a?'晨opmgj7HXt#6
ܭO꠫oP5-O8$^d7O GA76ZtPew\lÅ$gCc_ȭ 2/* kC"+w%X>⃦G 9D5|H}3!B},U/ _ߴq/,rB;*%;]
Ԩb,"W,ԷfȥSbA],i; ~] My$Fj#ߪٿhgGL>LGdJTǥu (BQԸ& 1n#& h0^`tHK13ӷY!m*:8 $c,'w5L*¬åGІ˪Np*gWo(ST$>}ZYt7z'O̪òhޒo ǰAΥ,5ߗ1dS+TOЧN
r鞴_}PAʾM\a(. sJ*Wk~4"fLS:id~ WNP[\Cn&&NK>J#pػ"S 0.fu#'Ol?NgY-K-
*MvI/G6Q짜òC
.ڐvnpOܾuK.~.gB* s"w2 =~m~ tu G/ hyg #>h%;XBsR*aө ƈ쌿
ΨM%$Kw { T*A 6jV4*dE {Bug9ج+>a3H̀ 9 yȅwlL봱
~u+ +2^0 xm`Y6o pW}4=Cd;¶RMbH<&ҁ&PT=E
ካd7Woec=; &p/7}歯X Jʆ4M T-{B]i?×,Y@h仼}wlAt B&&ڨ5Vgү D(;Z_0օl!>0/W@Mx-<3YQIaI b}EZd @:*YpQeq٬AK1\cKu2 숸¯Gt:'+k7YFuY)mڻU.PhH%Ao ņ()6,lE#aQj+lqGT_4"
!Y"l}&ju?W>̄ѕ-7Px1\ғ31;$& ֖?]K( p}BS H^) 3*ߦ
`X,8 &"gO`G8
ȤnJՕ'GNJKb*nXZZ{3*ݮh櫍&8@ OLÆ+,ط+RqR d>`$q .YWX'phS^(?K#A{Akr 5`6`6;iЍ\lտEegX5\lg41d~E:t}Gu18GY*k$]:"!|bV1#'jh(|٥F+V y+R_Ng>q^{F }M`g[%e_ǯ|1f"Sf!sb)~bHiϺFW%v쀙
Ib۪i,~Na + \ 6㿃=K7 Ddd
< -Rq} }BcV+M:՟nb :u75f9< ~]{>T xׅ XJӧ_j{jqOF0aOw ٛXg5DPwmX؍/6T 'lȟAItCRahOϽ|OċZpj;Bk
4C! ImⲺ)_zDInta2I.0Ê"IiD= xt)
q $'Vg`(=*ͽ_bo}6urJ^Ucޒ0e>FIGz3/Ɇ=UTUN8ܬFiZ vU'=LFJK$kaY?
\9{֩0w
"$ !
wU+}{.@KIj;'j?3<S$̡dXL'aa onnL_BүLtՋd| (x
"'`P
8n:/v7g#ˀ#*\g[N)b=`<_/Cen@
0fXtˏ&Oz o͠Z 9 }ْHSkW[͔}
Q.zD[x$21yLeUUAd6 D7 Ѣ dRU 襖H sԼq8H5 +R2WyH#89K[.&~d
ROCkfOudiŅx^V$V nh Q0
WL
YI4aY =s|V<:_
n6HX:c郤(fBUqq1x>,?8 -S|Cl*d77{{Ml 5B!?AG "s~[ ]/bm#5 8G Pѣ7SI|F$&~x+-@?Y>_&b|!*B K#ڙ|gQ{-2Mt쀠NMe/ IriEcݨ\J@ ⲇB!93Jp*r̸ri3
xDRSesA JN\CvJ'GI(zVGI=8]%3B
gyr N\"KKQȥ|Kzm:jg ۖ;RIUR~]e(Gpsc/x;6N] +*bP˩t!rW #@ˆ.g^h~.ϻTq\q>=E?:<1?|քv>lAU%ݬ'`/~ˆ3D8Su9F1o '12Y5aioIXlCaW5Ot?N6,Ū KYAOPXp<̇NUʣ7dֵ[43k'}_ *`F/Wb;lկd2)Xve7W?\K l0 nAl-N Q IWG @ tHJ<)3̋L|}&W_3Md
v60? &EYv"FѢa ʻ<~Eq
&Ԁ8 /L,˼=T_,eƴ@FKs<ֹN0boǶix/T\iV ŅQuzpvN%Y;Ca> B9%l߸g|-5[ fVI3" &+ng# > pU)3[$HQ }~xN KP
Ll2c? ! @_ ^Wю0i7w مGY*e]&(ly Ik8J5甅VAfTl̞%c7
ug!~
t^Gw-=2T1 DY
uUMTCgX&}v&'dU~>JS M崔S3| /Ύoĉ˗TLgՔQedQ^y&vv:[2ER)Yp;{J(|IrIðRA19odqDcLݶ-o+(9Տ! SE k B)lWP/ R!qgk"Rry_k#|iOeU;]+tc/bL3\X7H.|R@ ,E~e/1kuT3C 9g"
(i}͢rƒDTSsOain;
˷MU v"؛ΑI=!LQtG #q~dhM`e>0ʼb b쳧-KJ2נkL
o>u>pZ b hWTi!CiIGoanj4(&R:'X5r }mCWJUɾF ˲pӤ`XMHCbY z5;ɤݲ<,6 & *iBhVl- e qԕB
鲤Js:(Lwcx!Pw3tH7ODG:\pZ}˿|+d4E0;֭A!bܳFvA8 xZ=AYhvЈDyWKwowF0 R FqԎUH3)hQ(O\%l Q's[p-~ukHyjgc6xLnر+yCU\bo;_hݔ*b.k>, XHȁT!r]gic,|V^"G!|냦-Μ\H3n,i*N_>熳v` 2|фT*)tAio-'_j{ 5/.+HiwcRvma_[rаtgoD' \ >B1WD)HԖj5%T 'yk%$5Vo5-:HٜaJH >"fs. (7h]Tw:U
2h9<'q8n LO%A+ɐ vyܜ WשRU.;Q/zܤ{4 8@ _{I4檔~^4Erb)j88E
DN~Jo
?OŜGT=+mɯ?q
G35ip"t, X>E2@|~}KJ >.%sNDes|+qp^|:Y=V ݣMee켭XZݍx`,M/ K.~l ]ܬ4P@'Ft[9n>:ӾxqU4Jv'CEB=g9G%*_<7.NgX6&6J o?2
R!\_nY<"V/ sA^|!qRT"9 , z.νC :+Ӹ{-Y`
? RO?%GWL tg.$%L