vsftpd-3.0.3-lp152.8.3.1<>,x`v/=„u[LiGaմVe7wL0Y3J8$tsi}{z1#$5[Qd:~蟉+uBw͙jk=2P}o$g,/0SA[cOGM`栢}5DX!+I1[©wI 4b%)izAaU'gϔ.gb3e֌٘q2 `$&e|g(ښ'">fXL{.J>FX?Xxd   I #,P ik  +8h8 8 H8 (8 8  888 0 T8!4!d!!!$s!($8$&9%\&:(&=J?>JG?JO@JWFJ_GJt8HKT8IL48XLlYL|\L8]M8^ObRcS(dSeSfSlSuS8vTwV8xV8yWzXX(X,X2XtCvsftpd3.0.3lp152.8.3.1Very Secure FTP Daemon - Written from ScratchVsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but the entire codebase was written with security in mind, and carefully designed to be resilient to attack. Recent evidence suggests that vsftpd is also extremely fast (and this is before any explicit performance tuning!). In tests against wu-ftpd, vsftpd was always faster, supporting over twice as many users in some tests.`vcloud104openSUSE Leap 15.2openSUSESUSE-GPL-2.0-with-openssl-exceptionhttp://bugs.opensuse.orgProductivity/Networking/Ftp/Servershttps://security.appspot.com/vsftpd.htmllinuxx86_64getent passwd ftpsecure >/dev/null || useradd -r -g nobody -s /bin/false -c "Secure FTP User" -d /var/lib/empty ftpsecure if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in vsftpd.service vsftpd.socket ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in vsftpd.service vsftpd.socket ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -f /usr/bin/firewall-cmd && firewall-cmd --reload --quiet || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable vsftpd.service vsftpd.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop vsftpd.service vsftpd.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in vsftpd.service vsftpd.socket ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart vsftpd.service vsftpd.socket ) || : fi fimJ>hq0p6 5/pe2Q$p}6)Gp8+AA큤A큤AA큤A큤A큤A큤A큤A큤A큤AA큤`v`v`v`v`v`v`v`v`v`v`v`vGǿOrUSGGGGGGGGGGGGGG`vGGG`vGGNUp`vGGǿJ`iJ`hGGGGGǿO|G`v`vGG`v`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-3.0.3-lp152.8.3.1.src.rpmconfig(vsftpd)ftp-servervsftpdvsftpd(x86-64) @@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(vsftpd)group(nobody)group(nobody)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcap.so.2()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)logrotaterpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemduser(ftp)3.0.3-lp152.8.3.13.0.4-14.6.0-14.0-15.2-14.14.1_@_u@_=@]@]@]@[ @[4[+@Z@ZmZlZ1@Y4YA%@Y>@Y.@YtW@WWV@V3V@VaU@U@UUJ@U0U!#U@U@U@U@T!T@TeIsmail Dönmez psimons@suse.comDominique Leuenberger Josef Möllers Peter Simons Dominique Leuenberger Christian Boltz psimons@suse.compsimons@suse.compsimons@suse.compsimons@suse.comvcizek@suse.comtchvatal@suse.compsimons@suse.comtchvatal@suse.comdaniel.molkentin@suse.compsimons@suse.comkukuk@suse.depsimons@suse.comdimstar@opensuse.orgtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comjcejka@suse.comtchvatal@suse.comjoop.boonen@opensuse.orgtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comdimstar@opensuse.org- Add seccomp-fixes.patch to allow getdents64 syscall in seccomp sandbox, fixes bsc#1179553 Also in the same patch, fix the architecture offset from 4 to 5, this change was documented in https://lore.kernel.org/patchwork/patch/554803/- Apply "0001-Introduce-TLSv1.1-and-TLSv1.2-options.patch" and "0001-When-handling-FEAT-command-check-ssl_tlsv1_1-and-ssl.patch", which add the "ssl_tlsv1_1" and "ssl_tlsv1_2" options to the configuration file. Both options default to true. [SLE-4182]- Use %{_prefix}/lib instead of misused %{_libexecdir}.- Add pam_keyinit.so to PAM config file. [vsftpd.pam, bsc#1144062]- Apply "vsftpd-avoid-bogus-ssl-write.patch" to fix a segmentation fault that occurred while trying to write to an invalid TLS context. [bsc#1125951]- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini- firewall-macros should be BuildRequires, not Requires(post) (the macro gets expanded during package build)- Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the new 'address_space_limit' option in the installed vsftpd.conf(5) man page. [bsc#1075060]- Apply "vsftpd-support-dsa-only-setups.patch" to disable the problematic default setting for rsa_cert_file. Upstream initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and vsftpd won't start up if that file does not exist (or if it does not contain an RSA certificate). Therefore, users who copy a DSA certificate into that location or properly configure a DSA certificate via dsa_cert_file without explicitly disabling the RSA certificate won't be able to start vsftpd. [bsc#975538]- Don't start/stop parameterized systemd units in pre/post actions. These units cannot be used without an explicit parameter and attempts to do so lead to a confusing "failed to try-restart" error message. [bsc#1093179, bsc#1010177]- vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088]- Add firewalld service file (bsc#1083705)- Make sure to also require group nobody and user ftp bsc#1070653- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292] - Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961] - Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427] - Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137] - Don't rely on the vsf_findlibs.sh script to figure out the list of libraries the build needs to link. The script is wildly unreliable and it's hard to predict what results it will produce. Also, the results it *does* produce are invisble in the build log. We stumbled across this issue when vsftpd suddendly had build failures on i586 platforms because the script decided to try and link "-lnsl" even though the library was neither installed nor required. - Drop the explicit specification of the LDFLAGS and LINK variables from the call to make. The value of LDFLAGS we passed is the default anyway and giving LINK has no effect since it's not used anywhere in the Makefile.- Conditionally install xinetd service only on older releases * On current distributions we support the same functionality via systemd socket activation- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs adds vsftpd-3.0.3-build-with-openssl-1.1.patch (bsc#1042673)- Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't compile against the API provided by newer versions.- Adjust to new system user/group RPMs- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd where files uploaded by an anonymous user could not be chown()ed to the desired UID as specified in the daemon's configuration file. [bnc#996370]- Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in /usr/lib64.- Do not bother with omc xml configs, useless nowdays- Require shadow and do not output the error out of useradd- Fix user creation to not report error when user alredy exist bnc#972169- Fix bnc#970982 hanging on pam_exec in pam.d * Add patch vsftpd-3.0.2-wnohang.patch- Fix memory leaks in ls.c bnc#968138 * Add patch vsftpd-ls-memleak.patch * Update patch vsftpd-path-normalize.patch - Fix wildcard ? matching bnc#969411 * Update patch vsftpd-2.3.4-sqb.patch- Clean-up the init.d support to be bit more readable and add missing dep- Brought back additional systemv support so it also builds for SLES 10 and 11- Version bump to 3.0.3: * Increase VSFTP_AS_LIMIT to 200MB; various reports. * Make the PWD response more RFC compliant; report from Barry Kelly . * Remove the trailing period from EPSV response to work around BT Internet issues; report from Tim Bishop . * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil . At least, syslogging seems to work on my Fedora now. * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I probably have a different distro / libc / etc. and there are multiple reports. * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle this case gracefully. Report from Vasily Averin . * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default. * Make some compile-time SSL defaults (such as correct client shutdown handling) stricter. * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms delays. From Tim Kosse . * Kill the FTP session if we see HTTP protocol commands, to avoid cross-protocol attacks. A report from Jann Horn . * Kill the FTP session if we see session re-use failure. A report from Tim Kosse . * Enable ECDHE, Tim Kosse . * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384. * Minor SSL logging improvements. * Un-default tunable_strict_ssl_write_shutdown again. We still have tunable_strict_ssl_read_eof defaulted now, which is the important one to prove upload integrity. - Drop patch vsftpd-allow-dev-log-socket.patch should be included upstream, se above bullet with mvyskocil's email- Fix logrotate script to not fail when vsftpd is not running, bnc#935279- Fix hide_file option wrt bnc#927612: * vsftpd-path-normalize.patch- bnc#925963 stat is sometimes run on wrong path and results with ENOENT, ensure we sent both dir+file to filter verification: * vsftpd-path-normalize.patch- Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch- Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch- Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch- Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch- Add service calls for other unit files too - Udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch- Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 bnc#915522 CVE-2015-1419 * vsftpd-2.1.0-filter.patch- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify./bin/sh/bin/sh/bin/sh/bin/shcloud104 1618402288  !"#$%&'()*+,-./0123456783.0.3-lp152.8.3.13.0.3-lp152.8.3.13.0.3-lp152.8.3.1     vsftpdvsftpdvsftpd.conffirewalldservicesvsftpd.xmlvsftpd.servicevsftpd.socketvsftpd@.servicercvsftpdvsftpdvsftpdAUDITBUGSChangelogEXAMPLEINTERNET_SITEREADMEvsftpd.confvsftpd.xinetdINTERNET_SITE_NOINETDREADMEvsftpd.confPER_IP_CONFIGREADMEhosts.allowREADMEVIRTUAL_HOSTSREADMEVIRTUAL_USERSREADMElogins.txtvsftpd.confvsftpd.pamVIRTUAL_USERS_2READMEFAQREADMEREADME.SUSEREADME.securityREWARDSECURITYDESIGNIMPLEMENTATIONOVERVIEWTRUSTSIZESPEEDTODOTUNINGemptyvsftpdCOPYINGLICENSEvsftpd.conf.5.gzvsftpd.8.gz/etc/logrotate.d//etc/pam.d//etc//usr/lib//usr/lib/firewalld//usr/lib/firewalld/services//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/vsftpd//usr/share/doc/packages/vsftpd/EXAMPLE//usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE//usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE_NOINETD//usr/share/doc/packages/vsftpd/EXAMPLE/PER_IP_CONFIG//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_HOSTS//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS_2//usr/share/doc/packages/vsftpd/SECURITY//usr/share//usr/share/licenses//usr/share/licenses/vsftpd//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16080/openSUSE_Leap_15.2_Update/054de2f7e2c034ab522d7969881c500d-vsftpd.openSUSE_Leap_15.2_Updatedrpmxz5x86_64-suse-linuxASCII textdirectoryXML 1.0 document, ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=8e81ba52fab675ad62de6d43843e807d0d2fbbea, for GNU/Linux 3.2.0, strippedISO-8859 texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRR RR RR R R RRRRR1 8nOjutf-8ed47bf6871ae564808e97699c48c022321c2a684ee8defe95ae8238407328aee?7zXZ !t/Tj&]"k%fF1j(}̛.oxz:h"h-DyJ޶3 †-@؝A¶[kq}vBeyy bŞh=]啇2 { >Gbqkap-uķcrSfYGD KS`AG'=ɖV(s.yDb)ZI JU̕ 18A?bUl F[X=rDdmdS=?{7ebr<\O0\˝~$B%UbVǨ@DҼDL&h6Â&tm@IsE6mwY\o^hMAفAAR_B\:c5/¬ܜ6',(5PsMsNme'G9C5I¿O?ek"bŅ0.H\^ 8@ oy\/rdL[o{V:Հo>OקB-CB%9#{K/ҞP^p{*@_0TT#p*=tB)ENG2KJ`1^%670sj _ ׀&TM{[~c#DjV>Ylݱa~V_AtΟ5ٖXR9N_GY/DLjH9fU/<@ofӈ(\ ^cECEtz+%(.MX~ Xq`VU(ez0Y )7`Xc!/jyr{S\yVJ'/3p։*i\4yaP m?\4b+VڶNIxO$s=\%ׂ+Nn*;{ \^C3>٘!1Zcibp wI lIf}BDܔF;X?ݻC6 o7Kl?d.L%f Ē P:kţ82Կe lc;|jQnQZSý1Kٍ't-G] 9Τ1?k4%{UHFaGf| ;?^~Z#Fl+  WJox7cxɳ-jvo!^xҿms='4?י#0BVc7ΕHP) kmN|8[Iڽ BB⁧bl1C(Sګ;lWcHYbwv&*#{R:+Vcs/ִ}"-;TZ=\=4O+) ]_f WV$i-6pC#;X)uw$ʫOe/V+Ag8$PiSTdW W3nE%=1s@08e9k{vʤ ej]!fǹ ھb5?벨Ub7r7ώ8=Uij[64:!b 0rceE\%f.5K/?áƍ zl0~o]2n*/ֽ[;x&5m3^p < zt?,PEnYr4xNVY+.wTfĤn{a7UZ )R8BGW,VFsBjݖ {JSNrYkS8Jq8>rwtMB e5iFANj.[ρ9HZ}C؎c!%6"`\Κ鍃32p~$ QMJwQ!-ci.I8?#bgYRt,2e(Zj;W{ ‡!;oxgٺo u:^t: ouBZ~:(%<ȻtOb0wIs FBi576ɱ Yk7/g4,8UEƍu"e&qt -D+ !VN NE",lޑ!5Ȅz%/؎VDScϷϷϗo?e4#zos [^f Z]eLvi6 ʵzJ+Ija %`XQ-E 2 0JѼ QbC&ቛ4Y9Xcg!]) /|DZSTϖxK]rWm|cmϋ?j9NcO2\/k)c@qKRۜfB;m"׉HnH!\Z e}Q&Mv}̨&e֛60w:p*͙e~O7'ȅ_<`Ļ!4wOCЯ^&O7 BZރ{3Ȣ]OAә= l& ʂ`8O;Y?)IR"{.vч,;Hds{4)=<SkSQ *9iX=od"|tja +=<ż,~m 4 +grJF&£A>R.r=m/O(^R>0IhBƧ#*2A'_KOg?? 5DRzŀgv#[bb)1?aS6 Z MU6?B'q{;&܆&Ly%xV\\)Jbs)Hj/Nd9}k9\iwge~%{6!kROI"jc1E_ )"|PRʊTM=^f .LbobCn+9(!L7Ϝt"@2j߇\5 ^),wL y EyEB/׏T-kf"wYUnBdEѢWj5U' ,&M`M[eRR|e_[vRFݑ_xR1I@&" T}IKSW; OZߪ[I搈-gA\5G?'c j+ ۅ׀A=}'kJJM0[Cp&ijπ57QCMqt`DDE/\ezꁧjo(s- *\  wffT { Mgc8?ΐeyƬ yKD/|?MD-mD5{Ž{U3κ~Uٯ:u!}%`  KGhȑN=fዖ3T N%6{ZY̒mtnK-#Wi"4h)=dؑgikJ_N<=+n/Jzg.d|U@~o`x6 }GˬХ>և |TQaxTfj 8T$  Os YK_i*'u*L ~`V>>3- B )}z{Ms_pmü GpU}^r>% +=.ڎd3nhjfF%t Hd?ASQ"f&rKP@I|\&ǽ7M>07=x˷''Ɇh _(WӢtNFK ͱBվuVhFT-Hõ7'uQq}h ql޹Ah)tK_/$k"-Əa]+XYqM;Z]ȠJaxe=jӽ9QuX롤>_NUP6EV 1iEG֙qhdX{ 3S+yZuXB7xEL56$ݜȖzg w([iRzىۡGqS>]15N΂[Pk6xmL){CwK̡ٝ|srnK7ȬRjAeKw#h .aێ=$\IM|o1X&ﰭ._2?|ZBRb2ѺÁ y>K:~33%CP`hrR1(dshiLL!We7֎.c;7hCgY!Pcm|c O?0AO?۠\ӻM:ISCH>˼ nM~O( Ɍ8; $Rv-ʨSѩ%c[)rҙʰSDg:AidUH_䤃]'͙hKXc c+w:500roD}OuM$w B-ƳHp8@+$&Y((r< u6MjC!c- r2ۄT/8%[q0\]+d l΍Opy5Yr<4Cz"u"}-@aI.)3]ี$/4r' cLJ(U̥1kq9YEu|8]"Va?!:6vJ|יf3 +;yIzmO0`7%H+]z ~$6UttP\RrΚ[2pm?Soʸ0eux0&%Hzc-k|,Y S?EǑFOm&9*\Iõv썝۳on/T/'76%fzLj%:`Sxt[l4K3e98T pr< tpl3hsIŔMƦ`VG_HjIΝ6SY)S N)%iz#A`lY 磌Mo+e<)*j) nקо>+M Yw%ϟg5QU2Mks/j|rs_𓤚hFo&ha F_/Nf8bt (E_/uS_EH !Qlkn|1˞$OGIxbgBy;!;pQZwlg Esn;mbWɿq8EP Yd8Zrҁ(26woC?4+9f謎BMQQ_I/+W/jL"vo~]z(džXQVS%UZ>-`Pب0Ԗ P HB][ߑ_8 VMc[o/Y"͸a@D2{ mlIs>br|Jb ,H +ZPs;o<0ONap( $n/a>j/pgj8XAZ[ŗp8XmVc&$؆L0),_ p/=YFw[9d ~iF`<߅kN2oL?7-|&6 ֯$&[bqG ( oe,9n])";#0[,@h%F5^9#YRs6`cYKUBJ%E]*&i.6gDѣ"ihd@̬.ZAE>L.0`ޟFSsvaHN-pL0 =b 1 ]UDh `A_?:0)HYT%z$vƂNG)a|o@J~t&W¾s1Ϫn݆ f U528k;'95@#}UKvya(^lӉ,KaO$eGe`sD! $SzJ|շ4*g[?[b* #jt Y:4}EIGYyU59 vR`F{B 8Fki"Pe^ģ"06o{98ٝ~ \TX~/S"wq.Vsv^g^moywӥ?u1 6Awgn!  +/F?i?}`XKNF?n&px [Isct7ޣ߷%[aCILf|kG{}}S`Ĵ.FkQ'Rtb.v':J]*8kĜsO }5e:o 8*zX~gH_BhRݱFcz"3++ 7v)0d}ȌXkv%(*,Xh'Qē-/ WC.93ʫ6dlĹ<=P#:4'`7 my 37InN==lSGӁcCu݆[m,U+Fr4;KĿ2~5ht$Bt]4:{5A!^N#PwW~YWWP^cȥGܛ"il߹ b"yQT j;Yܡ:LH~!˩!du@Ux|M}9}b  ,&KaDZ/GЙ1ll RSy512 SкEt[<ы+2]_p3SG2N EpޛB^Bqa^bLi5t ߩ$0^n3sTOES֠:1hǗr0,)>(먊$zb˹kcdN Qh9XAoXV*Aqhx:Oq'*̲0h+])GĥNӎ᷍.m2(j\ UkD_;9$u`7%'-S k>z4WOSӳs+#=l;Z\\:IO6fBVrU yʹ9wO0Nu'wE&bcVAc4u.XU!j弮d`p3o2Jn :р%0(BToi㓡Q,ǭy-Fr}X(d.F9%ϬJ5"'mI7x4tHv} /US⢎Xt i!/P!g!%yDj757}s1qs!9iCQ6qe/e3w6IOrͪ VO D\?ٔ l^@K e!g}!1:ZqTB#:ypHf];kz5Dڠ:. #ěPEPn<$LmDd}333\"m m0~}:<u3v-.ٌ0BGM8cF|չ=.SoUB-<pnOLf/uȘ_~ A}!$fmHX2XL'MeE 8`^Q PLC:xqtusYVcQg Y; 2NL)>*4fh֙&3b  ˉ0IZ6 XjCV(M=z]5l7u] k!|lhEԽjXy3A'kp>koִJ87*4nDF gk֩RT7s 2P&\3˶N"kv6<}0hʲ{5 ±#ǦqL:O6Ί},2{I :O>MfƏC.yAqu/{yfXT!EvEY(6,AeIwai;"(8'^)GN-Ӌf9kJ]!]:tFP%q&Y%S (HI-.. ge,DM>F[Kq~ٍJHmEr(A9 P.Nvtm4֥;]!;~U`afPPbW2- IADo]N3=hJ7W9+R.Aml wȝ.F4pKN1eExgsd6WsD)f,Xy?eɥ{uLϼ#@3xr|jI<"Ͽ-ʮ͈+gې+)NJ0rpLOXJJ4Y#+"*X{W v|}[ @ˉel3Cە>A+bGɉ ;̆*c\\L]Fب~fVfGu9VV#>N~jHηxbh_W흶Rcs7ԙ֬DګOEc/ 19oE35#$nTgb5[ VZ03R옩m> i̦s?wQ ^aw&#Oc:6I{%֖JMu1JIby~pz\YݬCR~I vNEс\$_ ͎|^( %swm2pruS YV/]bz&׶|yD]~tMi0K½4/ߜV0FZPn!aO1pڍZ-k!`zx%&W>b֧]dd*ha8-B*n{8XV!J Uy`| |9L-2S &B8?*jRˠgi#wfbv)1Ղg'?Б1Qs1Bb=_YLFX'`sD;Fr[+ZrU睼d,eV};853W`؎pi2 CVhZ6{{9MCo]GͩR83t~H7tod ;)BR%|SU2k`A?HM̲džIesCT,TZQC\1L&"ɸ]k4ظGKoyoj,`@cI4hXEuHt*={>E?HiGAH mq$oNTz: u䢾߾4:;^?N2C L^ 4%OS& vg3hen$=iU?Wx!*Cf̯:$߸.( -}V*J,zxlT94rwa$b/Dr]7ywdՇGB-T1rе]eqdh"~oĩޝvo3HҜ!$eT \&7[ư0zT@Huu1,Ľ9=fFBD,Hp7QҊX݅\kbe6F!OzD-,w{Tʦ=i8wˣ)tݠDȮN  ISkZ:1a:?M<Xok99~MFJF݌Ŝ?(%ԉhS&fnGgB[aIM4BdKpW;#{O~LXs?L6P3V 9f_ժn "\,3祷Y;<CUt֤VduXE] W< ["K]7 mDasTm9&N@Ye-a`芼nVʆy&cti۬NjRKQԱu=ItTˀ:\ga^7R}K xIt<賟=Ч4唹-@b( %*KSS.iG<6|L` Э(xZbk]!9~W$y4G#rۙ!0)Ш?v)A Z8F:ImUDNz*pGoBG lGeor}-.㬁g49m*@uk8QCekfFEb!ߔC3pjxĺ\ gyqfڥOGa޴ EI{,hCݤiK&~t$$47DVqy}_Ãmַ@92$;x7_~2U:ƓK2:ѻUy$#Ͽˇ.wnSf&IȥR(褽у$}:x5I ͦY5.fٷ|riIb{ws>06)N^@d NOJ2`F7կ:ׁdBK;q7jLvN!s@8;wh7 Bh羢{N#̉ez+7aλ8=cI$o}޸t١ǥ-s1s\}5BIODd[?GE8ҾiF|YyIϻB%c -:#4WT^:MDDnsv7f YMѧ:*gz_eTa37!mS7x ;:S;:UKy9>ݝoߛ*vi`k}6*V@-G~iSw|׶{wkEKDVfևV$!ؚ/G"7uCodHhv8.SL^"TpoBm{$@8)4U j=GtML@ۅ}jVۯ'c 7Ibyp$|pu1ky3cT&Ķ`~΅lEKHߛ|KW0%_DAy k=6b*$&K u% dE7 #-72<ᝠ2L®ftNѯ–7a꾮aW\#kMLE%L1@㴐T ]u18lvOn O* 0`pp$'fl @B4"`TMl?t2,BP*3ugp' 䩈y&J,s L0Ħ?dVx|2ۚ $sH1orϝLЊٶ0CQWhH{nVks3COðyե$˥2x)];0/UPQgPM dע9 ns{汦|i'Oc r4$k'*W9 ^&qH< 2s0{c\x?&Pc*HĄ!QTݩ80`}Y'oac5\ܤ_yyBt! $,:~]Hvh| ZĜ;U)~fu cj5V a@wFY'%]*ϾY2"W8p囋_Pٷ"a{7AyKܵhW¿ڠҁB@]9Z gb#(t`.+i#sn.m(r. M=N;Nk:8 [G#ؔ-0Q+c(9mN,ՠúq5bf~J[ G7r%%%y,FUR\h}H`'4~c2 U^PD:ݨޣa':hˏz^7kMc]]*AG j_\kC *J<27i RC4 .e1I G9,W"cX8]+ƋҸIA,"m:z"PE&5 z@5/")Bx&? VLSԉnq-]fbo*Z"D')$S`XI'ѯ>LUg/;ԟ 䙾;N}ϐ;মf5 к9WS m&\'3IrO;' N{;MJ#w[ڌ\,!M̧DuTdFE("v Z62Lu\2U"8& Fsr@Eh id^Cy8³5&U[A<_/5)TET';;&NU{Q&Q'7}ovKCIے}8-OA3h.tMI% T~1;Dbxu ܟ2*iA$8{S[1:(0upkw\N09f 8+eCGJu4ԛ@G(~ٙߧjWQ!d1->M۴)j=on恚,l٤J%OLEC,, 'FWS'.+@jW ލk 3I{UHثm<ߺ~=)ݔN=ش`e't-S߷'' A2N)Bӯbnyڽӯ\ 0^މS'`"MlI&oB~ 5E|8oIBW57 g &{1sQ~FrA,x-7fYU֞iz"C DRm1$ܻ2&Ű|2y趉9)@@ 9pah9-DŽY ;zWUDo}pv*^z3R@H%z&CE ZN;v=[qW@DKq~xo o#=A0hg{=)$ffB;5QZ~L?{d^R-ќՄ+?q>7*< I(kߑZ WЅA3bRTEWCbkQq0$~io1 E -kaǭSh੩Ddx5/ .jL&aiF޵gxf'ԱysI$);_kI0[ xpƵt i^I+jZ@ w3Q95W:'ehv|6,>RGtcz*9V? DLWK[uLs94Tdvc+ZvaB n%,ZQv&bh D3<`Hː!c zD.vF]0"E^VwozԖS%s1y#w)9=p@xiZC(P3UW/`׾r2ɬ]CzXyzYw K'9݆bd}BZ ۛP(xP|PL@d-صᴸV~Q;s:'`ɠXD!VM|.O^/ $z> a#16Dգ|FQڣ9VfCeMbHBq>` WV.UscݻW'ě4m-\S{(',rt~f!d񾗵2#C$h}>̂!5 /p`N]{6%'1V&5Uf&w yoy D}* 3$(ce`xI `RJpu%oMtiԸ gP~f)\F/e:6 Ss~Vh&:Zm{@s4Pz X?Ұ@N-T/x*s40@fF12V䘕4P{.SvS4*ib(tg#>R R9HiD D^$cBAHCF nO{q*]G=T$߰لvEȮe|ğB&Q\ץ-i8?L!MvO.ٹ —LvoSQݩ{k&KSqnP Yh{ݔ}V4$ڪvGMhg`njIJ]@%qCz9?̹sY0 % 05#iߚ` nO2LR-S#K꟧JvN(j9w?ӧJ3FHͭ $ïd[ $vضC"a|(=r|se}/d3SVG'gCX#f E*u1NwI}9$8jV|N77>{G*}FMSyύ"$s/s.B|s"2I HnVe$<"O <Ā o&?l;Џz튎TYߦ^cW=uv,& W3b6cb #|9qUVG}Hb.8P!.\_/*;&*[|g\0>N1c-14kܘ9$07=Dp-荍ŪI?hqׯ1ز?%D@^c "Avj4EWq^w yZre(<`3J\f-0N7EC 󷏅J=;Bi U/XJFuPP>}[3AT]I&2BatO8e{bJy%3 u+%c_NVqX 5UNE Q<HR ~}-)2@\fKyyB Nc X''&-y%]"suƅ8;~yvJN+3;NF +.*zۑ@2[%A_N%=q8P'?"l1Ƀ]O +nׇہh-z2b,H Yz) sWY#hNa/;vR#-~p]0V²w>Z|83it0sU]R8L~H=fe)ք/Zm&j~Ao`*+h?AeGhEC<#¡} jw]@AZ7$U9 R'4veL9ӳ,+<gH֛z=G3 UI# pmn}/yވyn< {e٨ۡId6[`I(1yUB ·h>7g9Mv83('Z9}T/_oP<HpKɷ[IGaSpS@LBX9cz it{ZiכY;QNJ 5Khsa9¾Ԓch 2zMzNaՉ@錹If`]9fJ?>/.CY)'ׯTӒ>1R%tTo }2SRafm J~B( /2g=Ahg}7;4%׻PTo+a\3AvgWLDxYLk&ma.9q X棨mym/M#SL/ |jք~Kwc2+/ N9Q(mgVét#y4bw5ۏAW9UoQY[5N}*_xp֢JL7uz}|Ω\GHxR)wL1%As<k R}eQBT!Ex'@L;Ϳ+jGTm^ǘjEסt՗w\(Z~\e~I׿[:SGĤ#_?l TtҾhyÿ)+$Zh Uq'(We{G[2ochLUT)͌aD[u~pե+e&A]?t* Zaˡ-g3< amx.n)4lZ#BRQC<3n\%`+E dh0ߪ>y>?̻b3KwJt/ ٙY#ΕUg/O%-S^X$c\\^e1S}dP4VF10m0q)1=N2h[{{_61"K"-T1pU$ 5dw }ܘqRMkB;\[ެv׏| ]n=%Xn~Ӱn-t7ϡT=D1BV$ RP/ (#b ڵD0HccQSol$p|r 좃;-AuL U OȀ&ogNu=HwzMWy~*ٛTρ'IZ>߄:J[<\JXl"8u@D;/\p{c%NC? :-APC ̪D5B>6bd)Uipil9ovo5UZxZ1o/XzY-&M4BG!~Bs{@ռoj^*Mg%T?&w 5W>6!/4Il%= tgv>Ʌ\ SVl:҆i+y`!̋ݲbZ`%7bYT *=DFOsZnre)Y@*+co:k3F4R7e‡ÖڳB]|?'jj{TJq_W˻tЋ}#d+DZFC40GYKj> y(C=B,r9"j}@hy~D^Q,)'(>8.V-v=bĮw_y>Xy8Ov~NuԊ *o%rpw!I1Bbh COh0 Y'0hmT6,R>/A~=1rYJ껥ۡΊKwOeW撴)ՂX 7qNY$_\ekO20S*g+Ea@[ ^t.xRmӜ#:c /H9y[`+`*uŕ&R;"Ri܎zuwϓv+XFtXFrUG&5dnt#KUWJHTV2CHCYV"kZI[")ԝzwQQz uFNge-xTu-e'}!`~29<4纤 ?oW4VQY~f$.|0("RTB*@γYE<( Hrcp%C' L|^x(As$wҩMqKu8O("a+^~TzfڦiwVg`L]E[0=%axQ#ES~ YZ