libvarnishapi3-7.2.1-bp154.2.9.1<>,vcl6!M@eee:<*DpكZbW6y]cQiRk2 q2ZwK=5JJ%gZBf&niv>r~+Gn"QR2" 0oЭW5zqJhe*$PN'[~Mnn憚6v0FT,[Y|Ҙ~SiA22,eەԺs#4=Bgdr| g++:H kkQ-EIP5a}T>@J?Jpd # @@DLPir     : T\fp`e(8 9 : >F@FFFGGHGIGXGYG,\GT]G\^GbGcHKdHeHfHlHuI vIwIxIyIzJJ J$J*JlClibvarnishapi37.2.1bp154.2.9.1Shared libraries for VarnishVarnish is an HTTP accelerator. Often called Reverse Proxy, it is an application that stores (caches) documents that have been requested over the HTTP protocol. Based on certain criteria, the next client requesting the document is either given the cached document, or a "fresh" document requested from a backend server. The purpose of this is to minimize the requests going to the backend server(s) by serving the same document to potentially many users. This package holds the shared libraries for varnish.cl6lamb024 SUSE Linux Enterprise 15openSUSEBSD-2-Clausehttp://bugs.opensuse.orgProductivity/Networking/Web/Proxyhttps://varnish-cache.org/linuxi5864 clFclF7d7da6bfee6756e8e3771cfea7ed76579115a4565c478cd0b1b4c70e688796c2libvarnishapi.so.3.0.0rootrootrootrootvarnish-7.2.1-bp154.2.9.1.src.rpmlibvarnishapi.so.3libvarnishapi.so.3(LIBVARNISHAPI_3.0)libvarnishapi3libvarnishapi3(x86-32)@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.17)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.28)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libm.so.6libm.so.6(GLIBC_2.0)libpcre2-8.so.0libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.2)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ck@c]c*c(Yc'@b@bDirk Müller Bernhard Wiedemann Bernhard Wiedemann Bernhard Wiedemann Jan Engelhardt Jan Engelhardt Johannes Segitz Jan Engelhardt Dirk Müller Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Samu Voutilainen jengelh@inai.dejengelh@inai.derbrown@suse.comantoine.belvire@opensuse.orgdimstar@opensuse.orgjengelh@inai.dedimstar@opensuse.orgjengelh@inai.dejengelh@inai.deeshmarnev@suse.comeshmarnev@suse.comjengelh@inai.de- Update to release 7.2.1 * Attempts to mark well-known headers like Content-Length and Host hop-by-hop through a Connection-header will now cause a 400 "Bad request" response. (VSV00010, CVE-2022-45059, boo#1205243) * Apply the same character set rules to HTTP/2 pseudo-headers as is done on the corresponding HTTP/1 request-line field parsing. (VSV00011, CVE-2022-45060, boo#1205242)- update to 7.2.0: * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``, ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated. * Cookie headers generated by vmod_cookie no longer have a spurious trailing semicolon at the end of the string. This could break VCL relying on the previous incorrect behavior. * The ``SessClose`` and ``BackendClose`` reason ``rx_body``, which previously output ``Failure receiving req.body``, has been rewritten to ``Failure receiving body``. * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a VEXT is loaded by the cache process. Unlike VMODs that have the combined lifetime of all the VCLs that reference them, a VEXT has the lifetime of the cache process itself. There are no built-in extensions so far. * Duration parameters can optionally take a unit, with the same syntax as duration units in VCL. * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body`` from outside client vcl subs now fail properly instead of triggering an assertion failure. * New "B" string for the package branch in ``VCS_String()``. For the 7.2.0 version, it would yield the 7.2 branch. * The new ``vcc_feature`` bits parameter replaces previous ``vcc_*`` boolean parameters. The latter still exist as deprecated aliases. * The ``-k`` option from ``varnishlog`` is now supported by ``varnishncsa``. * New functions ``std.now()`` and ``std.timed_call()`` in vmod_std. * New ``MAIN.shm_bytes`` counter. * A ``req.http.via`` header is set before entering ``vcl_recv``. Via headers are generated using the ``server.identity`` value. It defaults to the host name and can be turned into a pseudonym with the ``varnishd -i`` option. Via headers are appended in both directions, to work with other hops that may advertise themselves. * A ``resp.http.via`` header is no longer overwritten by varnish, but rather appended to. * The ``server.identity`` syntax is now limited to a "token" as defined in the HTTP grammar to be suitable for Via headers. * In ``varnishtest`` a Varnish instance will use its VTC instance name as its instance name (``varnishd -i``) by default for predictable Via headers in test cases. * VMOD and VEXT authors can use functions from ``vnum.h``. * Do not filter pseudo-headers as regular headers. * The termination rules for ``WRK_BgThread()`` were relaxed to allow VMODs to use it. * ``(struct worker).handling`` has been moved to the newly introduced ``struct wrk_vpi`` and replaced by a pointer to it, as well as ``(struct vrt_ctx).handling`` has been replaced by that pointer. ``struct wrk_vpi`` is for state at the interface between VRT and VGC and, in particular, is not const as ``struct vrt_ctx`` aka ``VRT_CTX``. * Panics now contain information about VCL source files and lines. * The ``Begin`` log record has a 4th field for subtasks like ESI sub-requests. * The ``-E`` option for log utilities now works as documented, with any type of sub-task based on the ``Begin[4]`` field. This covers ESI like before, and sub-tasks spawned by VMODs (provided that they log the new field). * No more ``req.http.transfer-encoding`` for ESI sub-requests. * The thread pool reserve is now limited to tasks that can be queued. A backend background fetch is no longer eligible for queueing. It would otherwise slow a grace hit down significantly when thread pools are saturated. * The unused ``fetch_no_thread`` counter was renamed to ``bgfetch_no_thread`` because regular backend fetch tasks are always scheduled. * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``, ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()`` and ``MGT_VCC_FEATURE()`` now return a boolean value (``0`` or ``1``) instead of the (private) flag value. * A regression in the transport code led MAIN.client_req to be incremented for requests coming back from the waiting list, it was fixed. - Delete varnish-5.1.2-add-fallthrough-comments.patch- Make reload fail nicely on vcl syntax error - Set TasksMax=16384 because default thread_pool_max is 5000- Fix varnish.service stop- Fix logrotate - Add service reload- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150] * Resolve a denial of service attack involving reason phrases.- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959] * VCL: It is now possible to assign a BLOB value to a BODY variable, in addition to STRING as before. * VMOD: New STRING strftime(TIME time, STRING format) function for UTC formatting.- Added hardening to systemd service(s) (bsc#1181400). Modified: * varnish.service * varnishlog.service- Update to release 6.6.1 * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]- update to 6.6.0: * The ban_cutoff parameter now refers to the overall length of the ban list, including completed bans, where before only non-completed (“active”) bans were counted towards ban_cutoff. * Body bytes accounting has been fixed to always represent the number of body bytes moved on the wire, exclusive of protocol-specific overhead like HTTP/1 chunked encoding or HTTP/2 framing. * The connection close reason has been fixed to properly report SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported. * Unless the new validate_headers feature is disabled, all newly set headers are now validated to contain only characters allowed by RFC7230. * The filter_re, keep_re and get_re functions from the bundled cookie vmod have been changed to take the VCL_REGEX type. This implies that their regular expression arguments now need to be literal, not e.g. string. * The interface for private pointers in VMODs has been changed, the VRT backend interface has been changed, many filter (VDP/VFP) related signatures have been changed, and the stevedore API has been changed. (Details thereto, see online changelog.)- Update to release 6.5.1 * Bump the VRT_MAJOR_VERSION number defined in the vrt.h- Update to release 6.5.0 * `PRIV_TOP` is now thread-safe to support parallel ESI implementations. * varnishstat's JSON output format (-j option) has been changed. * Behavior for 304-type responses was changed not to update the Content-Encoding response header of the stored object.- Disable LTO, this randomly fails during link stage.- Update Git-Web repository link - Set CFLAGS+=-fcommon.- Update to release 6.4.0 * The MAIN.sess_drop counter is gone. * backend "none" was added for "no backend". * The hash algorithm of the hash director was changed, so backend selection will change once only when upgrading. * It is now possible for VMOD authors to customize the connection pooling of a dynamic backend. * For more, see changes.rst.- Update to release 6.3.2 * Fix a denial of service vulnerability when using the proxy protocol version 2.- Update to release 6.3.0 * The Host: header is folded to lower-case in the builtin_vcl. * Improved performance of shared memory statistics counters. * Synthetic objects created from vcl_backend_error {} now replace existing stale objects as ordinary backend fetches would (for details see changes.rst)- Update to release 6.2.1 * Bugfix for CVE-2019-15892 [boo#1149382]- Add uninit.patch.- Updated to 6.2.0 * Added a thread pool watchdog which will restart the worker process if scheduling tasks onto worker threads appears stuck. The new parameter "thread_pool_watchdog" configures it. - Disabled error for clobbering, which caused bogus error in varnishtest- Put %fillup back into %post- Update to new upstream release 6.0.0 * Added support for Unix Domain Sockets, both for clients and for backend servers. This brings a new level of the VCL language, version 4.1. * Always use HTTP/1.1 on backend connections for pass fetch.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to version 5.1.2: * Fix an endless loop in Backend Polling (#2295) * Fix a Chunked bug in tight workspaces (#2207, #2275) * Fix a bug relating to req.body when on waitinglist (#2266) * Handle EPIPE on broken TCP connections (#2267) * Work around the x86 arch's turbo-double FP format in parameter setup code. (#1875) * Fix race related to backend probe with proxy header (#2278) * Keep VCL temperature consistent between mgt/worker also when worker protests. * A lot of HTTP/2 fixes. - Changes introduced by version 5.1.1: * Fix bug introduced by stubborn old bugger right before release 5.1.0 was cut. - Changes introduced by version 5.1.0: * Added varnishd command-line options -I, -x and -?, and tightened restrictions on permitted combinations of options. * More progress on support for HTTP/2. * Add ``return(fail)`` to almost all VCL subroutines. * Restored the old hit-for-pass, invoked with ``return(pass(DURATION))`` from ``vcl_backend_response``. hit-for-miss remains the default. Added the cache_hitmiss stat, and cache_hitpass only counts the new/old hit-for-pass cases. Restored HitPass to the Varnish log, and added HitMiss. Added the HFP prefix to TTL log entries to log a hit-for-pass duration. * Rolled back the fix for #1206. Client delivery decides solely whether to send a 304 client response, based on client request and response headers. * Added vtest.sh. * Added vxid as a lefthand side for VSL queries. * Added the setenv and write_body commands for Varnish test cases (VTCs). err_shell is deprecated. Also added the operators - cliexpect, -match and -hdrlen, and -reason replaces -msg. Added the ${bad_backend} macro. * varnishtest can be stopped with the TERM, INT and KILL signals, but not with HUP. * The fallback director has now an extra, optional parameter to keep using the current backend until it falls sick. * VMOD shared libraries are now copied to the workdir, to avoid problems when VMODs are updated via packaging systems. * Bump the VRT version to 6.0. * Export more symbols from libvarnishapi.so. * The size of the VSL log is limited to 4G-1b, placing upper bounds on the -l option and the vsl_space and vsm_space parameters. * Added parameters clock_step, thread_pool_reserve and ban_cutoff. * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path and vmod_path instead. * All parameters are defined, even on platforms that don't support them. An unsupported parameter is documented as such in param.show. Setting such a parameter is not an error, but has no effect. * Clarified the interpretations of the + and - operators in VCL with operands of the various data types. * DURATION types may be used in boolean contexts. * INT, DURATION and REAL values can now be negative. * Response codes 1000 or greater may now be set in VCL internally. resp.status is delivered modulo 1000 in client responses. * IP addresses can be compared for equality in VCL. * Introduce the STEVEDORE data type, and the objects storage.SNAME in VCL. Added req.storage and beresp.storage; beresp.storage_hint is deprecated. * Retired the umem stevedore. * req.ttl is deprecated. * Added std.getenv() and std.late_100_continue(). * The fetch_failed stat is incremented for any kind of fetch failure. * Added the stats n_test_gunzip and bans_lurker_obj_killed_cutoff. * Clarified the meanings of the %r, %{X}i and %{X}o formatters in varnishncsa. - Add varnish-5.1.2-add-fallthrough-comments.patch to fix build with GCC 7 (boo#1041259).- BuildRequire python3-docutils instead of python-docutils.- Update to new upstream release 5.0.0 - The varnishd "-u NNN" option, which may be remaining in /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN". * Varnish 5.0 changes some (mostly) internal APIs and adds some major new features over Varnish 4.1. * 5.0 supports jumping from the active VCL's vcl_recv{} to another VCL via a VCL label. * Very Experimental HTTP/2 support * We have added to the "directors" VMOD — an overhauled version of a director which was available as an out-of-tree VMOD under the name VSLP for a couple of years. It is basically a better hash director which uses consistent hashing to provide improved stability of backend node selection when the configuration and/or health state of backends changes. * Hit-For-Pass is now actually Hit-For-Miss * We have made the ban lurker even more efficient by example of some real live situations with tens of thousands of bans using inefficient regular expressions. * The waitinglist logic for ESI subrequests now uses condition variables to trigger immediate continuation of ESI processing when an object being waited for becomes available. * Backend PROXY protocol requests are now supported through the .proxy_header attribute of the backend definition. * VCL files are now also being searched for in /usr/share/varnish/vcl if not found in /etc/varnish. * The basic device detection vcl is now bundled with varnish.- Add "-ffloat-store -fexcess-precision=standard" to CFLAGS when building for ix86, working around bug gcc#323. See also gh#varnish/Varnish-Cache#88.- Update to new upstream release 4.1.2 * vmods: Passing VCL ACL to a vmod is now possible. * vmods: VRT_MINOR_VERSION increase due to new function: VRT_acl_match() * Be stricter when parsing a HTTP request to avoid potential HTTP smuggling attacks against vulnerable backends.- Report testsuite failure to build log and make testsuite nonfatal as there seems to be one swaying test, tests/r01478.vtc.- disable silent rules in spec file. - enable testsuite for varnish.- Update to new upstream release 4.1.1 * Improved security features (jails). * Support for PROXY protocol. * Warm and cold VCL states. * Backends defined through VMODs. * A lot of bugs were fixed. - Delete 0001-Fail-fetch-on-malformed-Content-Length-header.patch, this issue was fixed in upstream. - Add 'su varnish varnish' line to varnish.logrotate file. - Cleanup with spec-cleaner.- Update to new upstream release 4.0.3 * Full support for streaming objects through from the backend on a cache miss. Bytes will be sent to 1..n requesting clients as they come in from the backend server. * Background (re)fetch of expired objects. On a cache miss where a stale copy is available, serve the client the stale copy while fetching an updated copy from the backend in the background. * New varnishlog query language, allowing automatic grouping of requests when debugging ESI or a failed backend request. * Comprehensive request timestamp and byte counters. - Add 0001-Fail-fetch-on-malformed-Content-Length-header.patch [bnc#921316]/sbin/ldconfig/sbin/ldconfiglamb02 16680745507.2.1-bp154.2.9.17.2.1-bp154.2.9.1libvarnishapi.so.3libvarnishapi.so.3.0.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17738/openSUSE_Backports_SLE-15-SP4_Update/6e59398c1b7934f3b51ad5bbaf97f421-varnish.openSUSE_Backports_SLE-15-SP4_Updatedrpmxz5i586-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=254a28ab3346e2051bb67d96e7f28b47ff1ece9a, not strippedPPRRRR RR RRRR R RRR RRRRR@ߔ(Y Zutf-8647edc7378488e9034b300941fb7b1061598ad0adcd871361493b84a206b99b4?7zXZ !t/A']"k%{B|VNxЍWnVR|#<".O:8NuOނ.Ssfb|V/ 5rH؞^02H'|k%HNn +{%B0Uvs u.8bI)K؉S#l˲ʃ,aOQ [L@bOh5aV)MnpKf)*;l w2o֌O`8p/Nbcq$g{B2(1j5\16܎B7zLIa2ɞ`d[ӵ$ 55@y>zIt[ef٪3wT-ؽ4'ˬzcjmQg#PN䰰ْg])dٜs)2H]rogU\\&«$+B݉çDMvkIكuѯKI>py@paJ whA q2[kCϹhl&1IpR Fy:0z>IA~JgD9IZºQ`}{7–Rw,;>5c+%;˅ϼ'cjhvEmQN(/d=x-aCo/ur-7%@@E(fO{sQ!W3{ׂnl&%+ j5G~CA,ħr'R5/O/ :ؔ>4{YGOb!$p{bd| 98@8ek4kӯt;&?<P167b[`_>Q,xnBF7El4}(_sɃH}s׬!Tקc|v4G_#ɕILC:'Z/iS]idH1$DjbK%)#^N[YZ;GmaSjumiO`(+pxKlczgFhanDWR/6u=Ԧ^6t."B~9' $ǥ CMhBQfRgR$IiPð=I芜Rz y! g;QUrm_<~VX)ZwW6òMǩ'ŕ.,hqhKXƲ"<5 #;}W)jG uP2[ٞ!5WZae璏+g?|7d;#vtBO x-îNxz!C Ms D0o/)6k;Jd] }u&&,~SI#!|0PUeqN ̶j 6q6ᵭ5@ni;@YdzaC@fû]R \G%-8:MM Up~IR8áFY%3yOX"snտ/*2]m,-P<-ϟ>Z)eT/7UXYPxU\Q zOi[` 6!hjX(ˀ /@mbnG:QS~5LU>#QzrV{. nC3).Tե}랜^6ҩ\Se+zzTMDZe4(E-YQF}oթaP&2'&Xp3Gݪ"%h肁ЈL‡'d6GF6WS1c#ebS5z:$k]1h)w]⮽  iZI[`rHMuM>3m=u=_\ m`[ -BNAaEx}\3۔mUb>KP/IAgu;vy(jy7W6u@xLmmv7-ܗU"dƿY?ch!LEœυ0 C -@m' 6=e'%9B%/=EyA}2DK fXgda>^Zqk%T|T2)y6HXJr٫u*oKnQ J$FO C}Yg n|s"vе#h[&kqly)ow}hOa_Rh5ee_+yT+YdB*p]pDﳂ%Z L{pnnj(<,,ɇgYӪkɌ#>-^P4 `f$*ZJ0h>;DI*ȁp WśQG9:> ˏ8%C( ͻ>Yl3byEayv,+Y& ϝ!($p\zU͸NO~5k`K&U^ˋqW]bԺ]*#-Fi:&o!:p|ˍ]{4 e2Њ9 mzdu'|LԀg59vÓkߨFi2}=Bo}[ʌ}oL<%pIM]Z6@Kf( 3aGHo9'Ԉb88sXvRd,6:dg^ESS[uMyqs03+I]hwPw|_(>c cx:?yGVUL8 l+h|Pc33⣟תQUK6{/:ƒ %Z0KfA@5۾N͐4w fn~\&5/Mkw߮=+dW͡+'aAO6ԩŸ >;1ȯKgԁy8mdkCN]50KV~"8.0*^coiW\B۩5e-iޢUjyg*[sYb|2x'{KEuZ'a%f3LRS e-BƏu53B3q(%LgI_T-e~A%J1@6vlMW? 8f - A/&y)$ӓc=I_-}h7pd}dꅀP']ؔdϺ(nK7jFD?*EBr 8 -x+RZ@0Gmr5Ť  Ѵ1\!g 3If+DqK6V{Ii Ea`a_zM8ʀCnY-!;'͡.7LXJl)1ŕ < M]qZN{U:Ks&~,.]ƦDET>[){ y js)U1øf(vȚ*=B:~ۘDQf6 jI'k лV3Ֆʤ׵N?BoÃhg.R7=-LܗjxރtENhH+y{5+ط^x-a24Q,^ĺ' Q\*4^jpCU0&c,kOtEp`X%5Nxӆk?hĮ<8LJC_b H6?{n 2[Sİ>n> z[ *|HVH;w;*)sE$性B=%X?G #tFWקJ}/UWwFO_ Gw)}{~Tf I؀OKqRxWJhA DyʍH6YKh[^w8*u?`;z Y%IdxNbFxDNk I=f5'JljfjUFJAV!!h^v&pL Z<$ƁRtVJf`^Ht*#/cQzec,hy6N]Q58s[ղ^9zeޓ.h4|k&{ B2"EQ&=8:]h[$UƥboXO"T Eetli~A6m4z^ T/I+*@6R$`q~آIf`ȗ҆7~!AI.9I *M k6EV(ch_fT:?yV䋑A$j'$X˔.ӈGh"8 ٪53'華\)xn\|F8LH20AO6(-N/+(&f0dwОB:qiw_GoL$]]Ň5!xwLw>^hcgc*#wFi]B6_xP޼m<ۓ|kpU%oFUrsžoȨvIՖ^̠ ĭCʖe`nsG(jbof{RbpNm6Q).tD6[eKOt$*R^Q'M; aݠNOfH(,_1`7pp3"Cpo]Rt;Tس(A*1x8N NN> qyK2(MR uj4ixgkrxջ]1kXBNdg@r^~UΥF nLOcY;zsu9ſAX`gѹ D)\>\s˭h81+t}7hՒg\HJD^afV`R3T*7+-uءEf8TYrJ"qb.rUvHTV3`!m#JLSQ}Kx? n"+bwD+͚7wE,XFo5Lt+ & \\f>.Th_QRF^< ړBOT < MIRxs ^ 鳈gL8!LJF 5Ux9"*scB{^j[NP3?>2y!?\z*!҉ ғťie,iΫ*|k*Alzy6Ȝ<"I~؍Y(er"nE]QteHkJk|7]8Жߧ€Ndo5ԃ5A֥{T\<DxX"h:7FNd2#y9EB Zf-k1 >Qz"cW|n3cDn w5iWhI %xu]S<} r 3Ul~X5qMNJa @&: YVKy##Nu 0+O4Rgr؁Sm& 휁xo/A >svȦ %Fr~LxFUBJQ2+2 rw0*vd9l&,֥|^T@jYP/^ĞbnMN%xO_HDRACn&AP5ԢnZ"Dw_0%>Q&dE < ( h):XcB`V_Lx߄<S@;^FQZF~ΖhyVÕ ,\lV< tk) K>7\Y+"tN鑕CY3$ L{q2vy"CȊjAtԸ E+cbbTAX\O?n$(U-Ag$)JK(T8OӮ?!,8)`V޸@ѕ>Kb9[]tl:_"d.VQO'hP ~"bNg}"}7gl̽jLMx>jhAw]zmhLe&D3YIZ}6ذMtI}&0lnZUnЋk`ڃUP쫞 l9Gbyt78Dqz,21ftd#M4 !R;gΠ r{qC/4UU>I~R:_ql$wVldR|JF9GJ$\B@l@+Y*17g~`EAv; V0KV>\)N7ʽ)IW -J0;%7q+r%$֤e`u_:k-ql8 "# zsNƔY֋G>owUв?E0&dN|UC{h01ͷE"#ژvOBȅ%2tCb/W j/H^I8?g}"ۯ )[Tl\ 6'*J0C4\a/W:d=?uiCT;ǗR۸?96 c*߅pUb҆6TZ3jXO)HD?fbƣnOoÑ!Ay%8` qsy-DEjd=~l_-R 3h-'_ղt:B_UvZ*RKA$zw q,uߥ,hZ%CJ Bx rFv&>yFh\|);qtTT4 MچݝujFtn6z0#3F.)wJTeTK[g`qu^X3 u CұΒӉ "X Z9c}F+8qѤ#.ÔN}pH_mnGw јѽ3t=GY"oU-O GϺv$cieJ?:\fi8d2J8M^d>ҡ|'#-BRl)`b4}STSL$^uJ˶$c:>E/|%C?}7 guFΗ~V[7; L' Tӊ>_Md9)%w1~C6+ťHz`j ɀ0[^k9 S-<3*K*%  ΥVg_X?$ct 7Z-u}Cid YV=_"^Xeasl'3qG*ˀl浉55H'fduAzF5:5ènsKVPr&}9۲neG>¾[f$vwWZv">D&z<N u0@/\4J/tCd!Λ;z>9f3V6r\Sث7;Rc~\YE&T(㌝eH%:s^.|7Hd.Q3"ŸD]eķ2řj]@YB{9`vJD'L4aP9-B:l$-]qUFŸ5C>E5N-ΦV%|:؞T$3c\y ;Szymv}=On?GY_ꨔ< |awu_o={۶=GϐF3 n[Bk~a.6bd/&>S 2cMR! Y{Tm.JU$Igsύ2D~W>vs$>%jV(ܰtp$H:[{c]?k%uڿaFA af9~?s͇G&z-oX!&f ;4;ɛ0F@CY5wk>D(R^0OB?-z.x0W'fm۠1t@CSIـuJË<ЉsB6$4K#L̓?N(|]^hGqՈDHڑv #x=}h6Ӎ^τh,?7+9ό =H";:IU11dӇZ{Q.@Ο:OǴ$ qk9'[;KYIdV6G9ae*^nRo :/w_Vݓcʺn[bcff=}gKrӰ"|l+k =-DPMvais) n&'iͯSG3)CPI} YZ