libssh2-1-1.11.0-150000.4.25.1 < > , k eOp9|&ne ծ]
<6JlN!?+^S Cb?cB1 iHUJ21! "T_],;_\V).Fs]qOق(. [=`x.RΜ~ \'ZWJ9#1֟RwmPY:壧*jtA`$Z%mzwr<UJxaC}11_RByÆwRgdzˏ^/X!t=*IxH$Z> > @ K ? K d ! J , 0 I j w
.
@ H R \ ( 8 9 : } > Hb @ Hq F H G H H H I H X H Y H \ H ] H ^ I b I c I d J9 e J> f JA l JC u JX v J` w J x J y K z K, K< K@ KF K C libssh2-1 1.11.0 150000.4.25.1 A library implementing the SSH2 protocol libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION,
SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and
SECSH-PUBLICKEY. eOh01-ch3d pSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Development/Libraries/C and C++ https://www.libssh2.org/ linux x86_64 p eOeO c1c136e3e1943860bae688b8efe42c1566829031c080f485d18f1e7e4a2d8652 libssh2.so.1.0.1 root root root root libssh2_org-1.11.0-150000.4.25.1.src.rpm libssh2-1 libssh2-1(x86-64) libssh2.so.1()(64bit) @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libz.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 eee;d@daA@_@_G@]@\\@\MZ]@YTYA%@VIUzU .@pmonreal@suse.com otto.hollmann@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com david.anes@suse.com pmonreal@suse.com dimstar@opensuse.org pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com dimstar@opensuse.org jengelh@inai.de tchvatal@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com - Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
when configuring custom method list. [bsc#1218971, CVE-2023-48795]
* The strict-kex extension is announced in the list of available
KEX methods. However, when the default KEX method list is modified
or replaced, the extension is not added back automatically.
* Add libssh2_org-CVE-2023-48795-ext.patch - Security fix: [bsc#1218127, CVE-2023-48795]
* Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
* Add libssh2_org-CVE-2023-48795.patch - Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
* Add the keyring file: libssh2_org.keyring
* Rebase libssh2-ocloexec.patch
* Remove libssh2_org-CVE-2020-22218.patch - Security fix: [bsc#1214527, CVE-2020-22218]
* The function _libssh2_packet_add() allows to access out of
bounds memory.
* Add libssh2_org-CVE-2020-22218.patch - Update to 1.11.0:
* Enhancements and bugfixes
- Adds support for encrypt-then-mac (ETM) MACs
- Adds support for AES-GCM crypto protocols
- Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
- Adds support for RSA certificate authentication
- Adds FIDO support with *_sk() functions
- Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
- Adds Agent Forwarding and libssh2_agent_sign()
- Adds support for Channel Signal message libssh2_channel_signal_ex()
- Adds support to get the user auth banner message libssh2_userauth_banner()
- Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
- Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
- Adds wolfSSL support to CMake file
- Adds mbedTLS 3.x support
- Adds LibreSSL 3.5 support
- Adds support for CMake "unity" builds
- Adds CMake support for building shared and static libs in a single pass
- Adds symbol hiding support to CMake
- Adds support for libssh2.rc for all build tools
- Adds .zip, .tar.xz and .tar.bz2 release tarballs
- Enables ed25519 key support for LibreSSL 3.7.0 or higher
- Improves OpenSSL 1.1 and 3 compatibility
- Now requires OpenSSL 1.0.2 or newer
- Now requires CMake 3.1 or newer
- SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
- SFTP: No longer has a packet limit when reading a directory
- SFTP: now parses attribute extensions if they exist
- SFTP: no longer will busy loop if SFTP fails to initialize
- SFTP: now clear various errors as expected
- SFTP: no longer skips files if the line buffer is too small
- SCP: add option to not quote paths
- SCP: Enables 64-bit offset support unconditionally
- Now skips leading \r and \n characters in banner_receive()
- Enables secure memory zeroing with all build tools on all platforms
- No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
- Speed up base64 encoding by 7x
- Assert if there is an attempt to write a value that is too large
- WinCNG: fix memory leak in _libssh2_dh_secret()
- Added protection against possible null pointer dereferences
- Agent now handles overly large comment lengths
- Now ensure KEX replies don't include extra bytes
- Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
- Fixed possible buffer overflow in keyboard interactive code path
- Fixed overlapping memcpy()
- Fixed Windows UWP builds
- Fixed DLL import name
- Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
- Support for building with gcc versions older than 8
- Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
- Restores ANSI C89 compliance
- Enabled new compiler warnings and fixed/silenced them
- Improved error messages
- Now uses CIFuzz
- Numerous minor code improvements
- Improvements to CI builds
- Improvements to unit tests
- Improvements to doc files
- Improvements to example files
- Removed "old gex" build option
- Removed no-encryption/no-mac builds
- Removed support for NetWare and Watcom wmake build files
* Rebase libssh2-ocloexec.patch - Bump to version 1.10.0
Enhancements and bugfixes:
* support ECDSA certificate authentication
* fix detailed _libssh2_error being overwritten by generic errors
* unified error handling
* fix _libssh2_random() silently discarding errors
* don't error if using keys without RSA
* avoid OpenSSL latent error in FIPS mode
* fix EVP_Cipher interface change in openssl 3
* fix potential overwrite of buffer when reading stdout of command
* use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
* correct a typo which may lead to stack overflow
* fix random big number generation to match openssl
* added key exchange group16-sha512 and group18-sha512.
* add support for an OSS Fuzzer fuzzing target
* adds support for ECDSA for both key exchange and host key algorithms
* clean up curve25519 code
* update the min, preferred and max DH group values based on RFC 8270.
* changed type of LIBSSH2_FX_* constants to unsigned long
* added diffie-hellman-group14-sha256 kex
* fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
* fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
* fixes crash with delayed compression option using Bitvise server.
* adds support for PKIX key reading
* use new API to parse data in packet_x11_open() for better bounds checking.
* double the static buffer size when reading and writing known hosts
* improved bounds checking in packet_queue_listener
* improve message parsing (CVE-2019-17498)
* improve bounds checking in kex_agree_methods()
* adding SSH agent forwarding.
* fix agent forwarding message, updated example.
* added integration test code and cmake target. Added example to cmake list.
* don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
* add an EWOULDBLOCK check for better portability
* fix off by one error when loading public keys with no id
* fix use-after-free crash on reinitialization of openssl backend
* preserve error info from agent_list_identities()
* make sure the error code is set in _libssh2_channel_open()
* fixed misspellings
* fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
* rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
is already included in the latest version. - Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
Enhancements and bugfixes:
* adds ECDSA keys and host key support when using OpenSSL
* adds ED25519 key and host key support when using OpenSSL 1.1.1
* adds OpenSSH style key file reading
* adds AES CTR mode support when using WinCNG
* adds PEM passphrase protected file support for Libgcrypt and WinCNG
* adds SHA256 hostkey fingerprint
* adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
* adds explicit zeroing of sensitive data in memory
* adds additional bounds checks to network buffer reads
* adds the ability to use the server default permissions when creating sftp directories
* adds support for building with OpenSSL no engine flag
* adds support for building with LibreSSL
* increased sftp packet size to 256k
* fixed oversized packet handling in sftp
* fixed building with OpenSSL 1.1
* fixed a possible crash if sftp stat gets an unexpected response
* fixed incorrect parsing of the KEX preference string value
* fixed conditional RSA and AES-CTR support
* fixed a small memory leak during the key exchange process
* fixed a possible memory leak of the ssh banner string
* fixed various small memory leaks in the backends
* fixed possible out of bounds read when parsing public keys from the server
* fixed possible out of bounds read when parsing invalid PEM files
* no longer null terminates the scp remote exec command
* now handle errors when diffie hellman key pair generation fails
* improved building instructions
* improved unit tests
- Rebased patches:
* libssh2-ocloexec.patch
* libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch - Drop man and groff BuildRequires: both are no longer used in
current versions. - Security fix: [bsc#1154862, CVE-2019-17498]
* The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
a bounds check that might lead to disclose sensitive information
or cause a denial of service
* Add patch libssh2_org-CVE-2019-17498.patch - Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
- Added libssh2_org-CVE-2019-3859-fix.patch - Version update to 1.8.2: [bsc#1130103]
Bug fixes:
* Fixed the misapplied userauth patch that broke 1.8.1
* moved the MAX size declarations from the public header - Security fixes:
* [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
read allows out-of-bounds write with specially crafted payload
- libssh2_org-CVE-2019-3855.patch
* [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
interactive handling allows out-of-bounds write with specially
crafted payload
- libssh2_org-CVE-2019-3856.patch
* [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
zero-byte allocation and out-of-bounds with specially crafted
message channel request SSH packet
- libssh2_org-CVE-2019-3857.patch
* [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
to an out-of-bounds read with a specially crafted SFTP packet
- libssh2_org-CVE-2019-3858.patch
* [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
crafted payloads due to unchecked use of _libssh2_packet_require
and _libssh2_packet_requirev
- libssh2_org-CVE-2019-3859.patch
* [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
crafted SFTP packets
- libssh2_org-CVE-2019-3860.patch
* [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
crafted SSH packets
- libssh2_org-CVE-2019-3861.patch
* [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
specially crafted message channel request SSH packet
- libssh2_org-CVE-2019-3862.patch
* [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
keyboard interactive allows out-of-bounds writes with specially
crafted keyboard responses
- libssh2_org-CVE-2019-3863.patch - Drop openssh BuildRequires: this is only used for one of the
minor self-tests. - Remove --with-pic which is only for static libs - Version update to 1.8.0:
* support openssl-1.1
* many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed - update to 1.7.0
* Fixes CVE-2016-0787 (boo#967026)
* Changes:
libssh2_session_set_last_error: Add function
mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
WinCNG: support for SHA256/512 HMAC
kex: Added diffie-hellman-group-exchange-sha256 support
OS/400 crypto library QC3 support
* and many bugfixes - update to 1.6.0
Changes:
Added CMake build system
Added libssh2_userauth_publickey_frommemory()
Bug fixes:
wait_socket: wrong use of difftime()
userauth: Fixed prompt text no longer being copied to the prompts struct
mingw build: allow to pass custom CFLAGS
Let mansyntax.sh work regardless of where it is called from
Init HMAC_CTX before using it
direct_tcpip: Fixed channel write
WinCNG: fixed backend breakage
OpenSSL: caused by introducing libssh2_hmac_ctx_init
userauth.c: fix possible dereferences of a null pointer
wincng: Added explicit clear memory feature to WinCNG backend
openssl.c: fix possible segfault in case EVP_DigestInit fails
wincng: fix return code of libssh2_md5_init()
kex: do not ignore failure of libssh2_sha1_init()
scp: fix that scp_send may transmit not initialised memory
scp.c: improved command length calculation
nonblocking examples: fix warning about unused tvdiff on Mac OS X
configure: make clear-memory default but WARN if backend unsupported
OpenSSL: Enable use of OpenSSL that doesn't have DSA
OpenSSL: Use correct no-blowfish #define
kex: fix libgcrypt memory leaks of bignum
libssh2_channel_open: more detailed error message
wincng: fixed memleak in (block) cipher destructor - update to 1.5.0
* fixes CVE-2015-1782 (bnc#921070)
- tarball verification
* added libssh2_org.keyring
* added libssh2-1.5.0.tar.gz.asc
Changes in 1.5.0:
Added Windows Cryptography API: Next Generation based backend
Bug fixes:
Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
missing _libssh2_error in _libssh2_channel_write
knownhost: Fix DSS keys being detected as unknown.
knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
libssh2.h: on Windows, a socket is of type SOCKET, not int
libssh2_priv.h: a 1 bit bit-field should be unsigned
windows build: do not export externals from static library
Fixed two potential use-after-frees of the payload buffer
Fixed a few memory leaks in error paths
userauth: Fixed an attempt to free from stack on error
agent_list_identities: Fixed memory leak on OOM
knownhosts: Abort if the hosts buffer is too small
sftp_close_handle: ensure the handle is always closed
channel_close: Close the channel even in the case of errors
docs: added missing libssh2_session_handshake.3 file
docs: fixed a bunch of typos
userauth_password: pass on the underlying error code
_libssh2_channel_forward_cancel: accessed struct after free
_libssh2_packet_add: avoid using uninitialized memory
_libssh2_channel_forward_cancel: avoid memory leaks on error
_libssh2_channel_write: client spins on write when window full
windows build: fix build errors
publickey_packet_receive: avoid junk in returned pointers
channel_receive_window_adjust: store windows size always
userauth_hostbased_fromfile: zero assign to avoid uninitialized use
configure: change LIBS not LDFLAGS when checking for libs
agent_connect_unix: make sure there's a trailing zero
MinGW build: Fixed redefine warnings.
sftpdir.c: added authentication method detection.
Watcom build: added support for WinCNG build.
configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
sftp_statvfs: fix for servers not supporting statfvs extension
knownhost.c: use LIBSSH2_FREE macro instead of free
Fixed compilation using mingw-w64
knownhost.c: fixed that 'key_type_len' may be used uninitialized
configure: Display individual crypto backends on separate lines
examples on Windows: check for WSAStartup return code
examples on Windows: check for socket return code
agent.c: check return code of MapViewOfFile
kex.c: fix possible NULL pointer de-reference with session->kex
packet.c: fix possible NULL pointer de-reference within listen_state
tests on Windows: check for WSAStartup return code
userauth.c: improve readability and clarity of for-loops
examples on Windows: use native SOCKET-type instead of int
packet.c: i < 256 was always true and i would overflow to 0
kex.c: make sure mlist is not set to NULL
session.c: check return value of session_nonblock in debug mode
session.c: check return value of session_nonblock during startup
userauth.c: make sure that sp_len is positive and avoid overflows
knownhost.c: fix use of uninitialized argument variable wrote
openssl: initialise the digest context before calling EVP_DigestInit()
libssh2_agent_init: init ->fd to LIBSSH2_INVALID_SOCKET
configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
configure.ac: Rework crypto library detection
configure.ac: Reorder --with-* options in --help output
configure.ac: Call zlib zlib and not libz in text but keep option names
Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
sftp: seek: Don't flush buffers on same offset
sftp: statvfs: Along error path, reset the correct 'state' variable.
sftp: Add support for fsync (OpenSSH extension).
_libssh2_channel_read: fix data drop when out of window
comp_method_zlib_decomp: Improve buffer growing algorithm
_libssh2_channel_read: Honour window_size_initial
window_size: redid window handling for flow control reasons
knownhosts: handle unknown key types /sbin/ldconfig /sbin/ldconfig h01-ch3d 1707495373 1.11.0-150000.4.25.1 1.11.0-150000.4.25.1 libssh2.so.1 libssh2.so.1.0.1 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32547/SUSE_SLE-15_Update/5b5a419ea32031241bddc955023e4cdb-libssh2_org.SUSE_SLE-15_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e38711e232a2a5f0b8825e1da34e68938304a0f, stripped P R R R R R R R
R R R $XoE/
Rm# utf-8 48a331db17c750059e2902ced36a484fbfdf82560f523aae1726370286bb1ecb ? 7zXZ
! t/5] "k%]d涻e QQG^"*$??9P]Zv t])KR%h6q~y5*^;!Z)K#`C1A (%zXMK2mj5zS ye~s Sf6gIaPτ+-koGJ
.C\k(jXm$JVmwE1]=ԴC`o 3Yx":UơuT:Gz= \ 8u{ n9^/7cKI{M,ޢ bp\?EUm?(gTyŏ`JJ ml6"C5͘Q1N9<mQVjJGUմ-'nf "zF ZJ4wE,~ uR_aW! B)I(ȡn=G- MT(PjWW'guϲ,5ܱf簒YH5%UV BaUM[S$rto :?!nAuL{29bp
Li(W;k ضW]ٽ0bw,Չ
Jc $-! ,CgҷާcX&NT#8 !1vc#tƻ%):{0muzk7B=e-7; Njv0pkDtj;nv #w%XՀT\
E8 gU) 5UtBfG\iHA eM:*5R S5{3nN'tqaU5{RWZWxPEMsp难[N8e>XkTi|D]M ]xtHz(
ܑ>> 7KWH#] W0F"6E]xm&36;2:(FmԏP" 1 '8=F1j2.zZ*DH/ngiZsKK&9<_+'VEϫ\PgX Ȼk1%" 9>׃4)YtE7 H5%*3vRHJ85y s)EpV0Hk}Rl ;\,-ҿɎ.BPz$][煅ŃX hb!Y y
04Qb{(YZ)t!o6-Eoy -Y ӋpK/ԧИ1N5Uf Y[Z3
N/X˱u2J( nJ6YOID_҉ΰ'Ų\ >X\!g95übG?I˶N\[W2\)VPb cK2I>
ve><']\<*d,NJ
aE xM+95Q~5:#ꇣPg,w]2C ~:kS15XK=Շ=Ht);r0Lvf' H}[ TD ^y2ү}WO-ֳ!l~Q8yץ=ǐ,9U#UJRkZL#ôB49v9.m JnL'Pef6s>z
ulQW )CW
Dz$"KU
K LCȯ F, $h b ?
p =X(9gEπ1x@R6 ^=^-1yfs< I]Nd.O7\ZJ" rqihR̓Zn*0k k
7C_D43rA1cG}Gk,W
*N:|QQ
>I A"Q/w~Vzkt#|D}?Q pǗ 弨d
/.ќ1n ]$~|&;#9$r@a ºZɃ_TCcr M ]p`E
Ƥ3Sv *WINIL/u0Gn{G]; V1?2CNBfrYD6}}2Tq"h!v($a?$]&ýos B
muކGdU/Ӈ(hP*Be9LCҎ댺_vF̌x% oZ
+}{*z*b1<ﭖY!k ,p`nkQ=6e[`N'EmSF?!=w2UF" Djm93n̻GOn37 "ٔ#n\uE3eA a7J(CKsI֕Xtn\a䈼ݭ}Ƭ/+ZY" vlU"5HYsF#HJ߃GQfٱR ܩp9׳`G GwF-1wԠr&Gw&V 5$\zH`l"tA6S{OA%''0rJa9B>vw<ጜQOҫDC ێT
sJZɀ@8=ŎMyBy*dX^DpO뀤4 PnVV;"Rj" vw9VXd=HODm Bl
&[*}TkO. !F_ l+ñ5B&rO=\`凿 d0
"0 x"t612vU>`TJ4 N3۱)J@mZkt ܺ[0kj= 3ݗTuޜ%ӑ/L|1D'NLu\Cv\
A{ϓL@m$..eó2J̡_ވ11#Tl9i[7vu
g6 \ 7ߙ꺊 =FIi(e@=a=j=럌 Cޚ~ʮE[ cdZiXCzꦞ줮䖫oW:n1*d[zuE<ެHʙɝ?j]WtcUpYHI"%+Xq)0]/>iHGf m7BX#?Kڎ+/" NLvBeBJ^Tp#H !E{Q˙%j cGa"BL[?mqʻ
mC CTGgy #Q'M
cvk[ Nq9Y_d ^fs{ mrUNʐ T'*t ܠ 2-|nH'ό4B sc{ H!oCš0A< `Isj4X }1V˚iVG݀b% z70/P/C[Zǘࢸ8TŴẮZOz_vT,gfۉ^A*#ˋȤ_/Oq={/)i_ p0p5_]5qbVZ$@Q/-@-/(3Vqc}FH-rSfwBZ"pMtnN TmR@D ߹J?n#W)˄PK~V~908w`i.e(2@8sؽ7rRMkؾ^ΰj iIJ@j5J5ͣg ;=+}CFc$0#W Lhɣ峇 DB"|.
aPpyVi*2Xl1;ⅺ? zgtTeVGr V7<`.=6!ɻ!2 1]A%=y?ax$+ey7x\̣F][u'.?i.{1 KP'GmŇ"A5>7{Ϩ2dqL-bvf;Tс@qЭSn?}CIǤju? j"
\XT$)9 |sgk_$gi/<+v Z3 /'B2)tjm{h F ;֭z#6ܻ@ɒh0lN}@Ft
Md N!I* VRynprJ2 XK*nB\>? V] m3;'wc >@`eQ `F8L66˸MHk$Tjzdþ
JVvnY> c0<_ 4SĀ30oلjaB:NkKR$fZS[ oVoũx0v4Zb} #=4 ,-G GxM^ڼ6,Fx?[GFOdڅ仱~`c>O'_ KLMk pͨk6 Ƈ:E4Uビ.#_$Hzb3k?t"1ĺrX-M5
I9~c҅KёYu\CL؟c&nd+FaS)>FD`ZJNs0HQ ^ 7KHn5{pC0hIH5|ÚIN j5 4- %d1L1AWG28:Vaoe y-(ܫ m@pkK4aNh 5!Gq;]moXTD,-^"k.|ˉnà/JlNX5tF ֣P9#;)ǃ#_ \^]b1?,Eu8K͢Kĸ"9TЍ= O/)u6Kݛ[7f\0S
b40b
è\l=Y ;T iP۬\ςXͿvG`S%
C|lp;7yapV,1Wr/?Ac(L^Ҕ̓: 3ÔIQhvHDZЬ.wᮥi1=/n*πh_Z]s4ҧ1'w~ s*bwI)С ώ(:2'v,0qٱr.uL$G"Y%rvv4 `םq14%n4DCj$lS2MYi & (sxR(i!Sa?\E@xdc6p@U ub>6}RkxLO IJ1N66<%?=G
aO R~X鴷dMyUҫz
YtB9l *cBp8P L⏕3|WOʬ &hk זa ٥?_} Ďu qB/=}&♓[馨 ,u`M'ڼ[?R
}%n"q=0 8k v
YZ