polkit-0.116-150200.3.12.1 < > , 8 erp9|Ls7lT{Z)Wz
Z:G;Hf\5qՔ,f5"3W?!k?EZ!TX͎g=% _Iye3Pg$ajߠ
=] Gş '
dnl &Vk2H po^ "6e
!
ֻE/\R>ESI[{EMwx3Cod ŝV@[D ^qՖ$\x eg`JR > N L ? L d ? " 4 J [ . . .
` . . .
. . . . \ % % !o % ( ! 7 ! 8 "x 9 " : $| = 8 > 8 ? 8 @ 8 C 8 F 8 G 8 . H 9 . I :8 . X : Y : \ : . ] ; . ^ = # b AA c A d Bk e Bp f Bs l Bu u B . v C@ w I . x J . y Kh ; z LT Ld Lh Lp Lt Lx L L L L L C polkit 0.116 150200.3.12.1 PolicyKit Authorization Framework PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes. ernebbiolo
SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux ppc64le getent group polkitd > /dev/null || groupadd -r polkitd
getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in polkit.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
exit 0
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/bin/pkexec
fi
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in polkit.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable polkit.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop polkit.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in polkit.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart polkit.service
) || :
fi
fi ~ A
x
P c+ ) V J i h P B AA큤AA聠A큤AA큤A큤AA큤AA erererererererererererererererererererZ.erererererererererererererererererererererererererer 28067ad27702251ba38d9794738cb81e18ce2151d26b3d103a33b4107c2f9877 af4292db23ff017727a86c35067121354c63911f32caa09e0b9e42d6b4252133 aea3041de2c15db8683620de8533206e50241c309eb27893605d5ead17e5e75f 74f4a01c22f72873d22754cc1c25b584783cb981de0ff0bab49d49ee0f7d139e 6ccfa01ab526be1ab05be7cd2764b21037299294cec74679f624c71d662cb9a6 e38a9bfb7c2f7a52352782a4d4ee84cc02cbc3fa91a38f3987c15194b333aeba 067c867f8e91a18e5534bd4a2dc68037c84732d506e3ecd130b517c67d10021b ef09daab31a8c7c023371ee9ab6fac273400c7c9be58d36912967fb298f77a85 217393fef1b2e7b6a7dd94969218faa050d781a0495892e3f5568a5780ac75a7 6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff baed12288339ed4b1df90f017beb8af07b56eba1b2edc4a60914880c13617af1 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 561b4b59f36d6e34af024d07ef8a80457559736138ec9e9e4d14f8e926c17512 725f7541bf0703006687192fa4eab464b4e91797794e0fec5e705d2c66808a1a 1d862c3977460da9e096a5267d4989d977f9e4eeff7781639b80a138fcb7ddbb 86a99df215a09ec829e81f8b6d99e8d88950630a3fb319cf837c3d0506b17ba6 a632e2e392c367b48cbc844b0ed41cc2287126dbac51fb7d1a64f40211ca0589 c888d46402d2bf113d5859a57569c53ab68a179bc2fc084b36c13fb45020eecd 73c95abb890de9cb72fbee8947befb6f489bac6f50dd7325a553b1c3cfda9e0c 77ec4e0353f78877f22fa4575ae21fe371584a041b3e0f3b3c96042e030352e8 2735b902d88a25d4a74135d82696c544658237ecc659cd90560b88103eab1393 d5c9b88e431a17804f869b4320fd642bd6c40230c4085c0b6949820a20e9a3c7 dfdb5e050f3a7140479dfe7636813c4fd071b20d5034e8c7a83ed65e4fb1977a c6d17b84ef6c4a9e966850ec833c4bfc17e15da6131723f22fc0d38902082503 a21c5947e9731f3558bbb979b7bfb65422961ef2b6108ad6177f29c6e8deb628 99a0a2a2e36dca2a54c89ea06d695156b518e02b52883e93b70ba63e3768298a 19529a141086b5d46de37fc95895360c379d49563d5b513323e73f0f5750436a 885304c3e892e3e6e167676ecc691c6736c7116bd1157a1201495e0556f31381 669a20fdc713af31cedf7272d21db31b5aa85423df8a845e4b7c8034ad697d40 76a8600153d9159a0c37901560f168f01b5cac61e19dac08186a5f5e5238c1f8 16f452baa3077f54a5b66861913d097eb2b094e3da19f8af2426f951b4c22701 d3fbc5b432d9fdf0de1499e9b29504f8f6e9d313b519d64c43af35a906bddfe0 9035f887c526aacec04bc44b5376dabf82c4a0f6c955ea3650eb4c416b3d7a66 c3bef7b57d54d7c9cdf02ccacd53a5d630d1ffa76114cfe0bbc5889fdad5dd6d root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root polkit-0.116-150200.3.12.1.src.rpm config(polkit) polkit polkit(ppc-64) ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(polkit) dbus-1 libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libmozjs-60.so()(64bit) libmozjs-60.so(js)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpolkit0 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow 0.116-150200.3.12.1 0.116-150200.3.12.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1
/usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2
/usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2 d$(@b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@jsegitz@suse.com rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - Change permissions for rules folders (bsc#1209282) - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh nebbiolo 1702022619
! " # $ % & ' ( ) * + , - . cs da de hr hu id it pl pt sk sv tr uk zh zh 0.116-150200.3.12.1 0.116-150200.3.12.1 0.116-150200.3.12.1
! "dbus-1 system.d org.freedesktop.PolicyKit1.conf polkit-1 polkit-1 rules.d 50-default.rules pkaction pkcheck pkexec pkttyagent polkit-1 polkit-agent-helper-1 polkitd polkit.service dbus-1 system-services org.freedesktop.PolicyKit1.service polkit COPYING polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo pkaction.1.gz pkcheck.1.gz pkexec.1.gz pkttyagent.1.gz polkit.8.gz polkitd.8.gz polkit-1 actions org.freedesktop.policykit.policy rules.d polkit /etc/ /etc/dbus-1/ /etc/dbus-1/system.d/ /etc/pam.d/ /etc/polkit-1/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/polkit-1/ /usr/lib/systemd/system/ /usr/share/ /usr/share/dbus-1/ /usr/share/dbus-1/system-services/ /usr/share/licenses/ /usr/share/licenses/polkit/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ /usr/share/polkit-1/ /usr/share/polkit-1/actions/ /var/lib/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31767/SUSE_SLE-15-SP2_Update/2e03c4d362f8d370476985f1f4c3e35f-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 ppc64le-suse-linux
directory XML 1.0 document, ASCII text ASCII text ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=7233f360ffff16203916a95dd708acfe35f016a6, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=3bc9c256bc3ab5df0ae36cd37ae4738bd973f73c, for GNU/Linux 3.10.0, stripped setuid ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=0ed082e6f0e0fc81a116ee66a71ec7c135031c64, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=d516bb0ee706e21f963cf1fc1b55b4f8d72f6add, for GNU/Linux 3.10.0, stripped setuid ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=1737b9878bd2581226fe49ba081f32ca875f4866, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=46d0680b9fd8c10a09ca4a61c0f86d16b0a68cfd, for GNU/Linux 3.10.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) XML 1.0 document, UTF-8 Unicode text
'
R R R R
R R R R R R R
R R R R R R R R R R
R R R R R R R R
R R R R R R R R
R R R R R R R R R R R R R R R
R R R R R
R R vI? rZ#=\ systemd systemd utf-8 49cf0b75e20bc851bf220b49a3946ac0bdb5178bfd492732e650b757b3cfe90e ? 7zXZ
! t/}j ] "k%Y:0wD8iNmrDp)h!ozB"AcB |0ͳ w-R"evnvnXuCԾL= KoSݷ#֎OEwXSwu!vq;֏"5WM2 _IpXstHx2gC8;K`X?Wg$-uOzIqt~^V.z|Qrq8㇓fi݉{2z`%OVE
M#mUĉ5m4}-c?
z!{%ʽ J 2.up 1`s&Ncǹ[eλӑ? 3 Sr|-3UX*dOD8 c_BY` SRA&ɽɧ-U "%9?Y ]հר
7I KC hlWs?il#|۴}S̫ +
R;K]eG& m$Q l@W_x#0\ $B@zY XGE|;EHo\3
q%t Gt&(-d\=[90 jTc7)
FOPϬ0r>NnG֨fk=!7q RQNJ mct[6<43{,oG[ywEtg1s >b ~`0C5݈8EОz> yPG9ܙ2vc6")-ȢY" C
"u+/V_wr#4n2${AI;lKmK2ئSn4C1pj ?_ 5!7@wa膐mSxFPPuM
0L8%ŎתT#|yt
<.
%87q p Cnlxb3G
z.opi7.f,&AI-1 +k%Z16>kqA]lCW[cBwS4SYmc&-:CFCXP>(<3ٵ8#,blL8@xRNQ'F@˟.,fE;`gm}vYA S*X݂%p*bWծH.7CsݘR>U;1aiL:qs!ƕNRJ5}cuLs7%y9#=!_Jy <o[>R B@ $Ƴ BPyD~v3 ߆ 0;͙>X>PK%JàxyqW: m$VG5Y.#X
^#"5l ;k
-P
30`$Q):ڿhz+@ 趔E Ϝz>vayord3?Vo/Bb6w"S6AFwFSB/JJ[-:~Rg]()tQo&n>ւmi@Y |D"2q7X1b^hP ؋1Zv (z% !c'* J1OP^U0yh6zEW+P 0/+) <.SUW%[:Z$(6:7;4x̮ aPz2ÜI_y?I vNHmb 9YQ}9vQ9ȴj1(Nr& zz4IE~vSލ)dGIOyPwtg B/>:` x֒4UA
'eV%^MyK.#@F;p4 dlhnqrm>3=o8ުa?#a
G5^wab09Ap3Wy|¹2h+c5#)0&dZEansftT~pchh9]]p|tV8)Bg*.bunpvG?+_Ưp$Y3f͑j̈*Jb@ ^BݒE&uaX&`G]]U!rNhДI-; no0Us " P4qRr2|^r^4q
9^pY/ř2Z)p7tMfy5uBKuOtL|&Zx^8>(YʤD)նVO'CSC_ 2ّ f .!h]ȖhXEggZlJ%in}16}u{{EfJ=
Ԇ$s.T
dĝ84'
*M4" f&XTݰBmAF ޛ|edЮ߆qi7{($=lSل
RԎĞ byUn IVN8Q>c{
;s D` >&^S!<4{a _=MgT;gs4 =UK9PU0g#{' w UX脥pҫ;xT !942x| z Πu˟Yk }.kd49I!h#Qt ZV) \dk 3
AI(ˎ7UP@ m쾚P|9JݪQ y1k?QBrJkiped/T}*RY,ݘ.8i xK/0ꝸ|`)t#]w/W*żzP q+IK)akD 0s}!ߥlU48Z;ak8qTn:֨
uk"ޯ(i ")%9eӅj:9;heKY%>*~7-?<:8 ыSow_i )騭2_C($iRlnPt.*BvZc 2_yvWDMU)Di&mtq pOFœ}1 -l0t߶ 1E[9y 1ԛc Rj)ھ6!T=}z=i'|6 .
-u ?E
ds%ƺcɉTp-=-k_ot?ԧv_V{`xU6[
K6Q0'`Gz=eda^)!&_#vyvaI_}*#eFڑNv&џ+Eۖ Mh2tS´UJ7H^ׄiMͻ;ǾaϜ5c\xGтK!<٤u>cHLX)҉:8Ex0Vs*lT3HH2-% ,X6ԩ
oc e[K DM dz zMH,/sPiI嗎 ǂ!=*:k#_2&̺QN7ing/ 3a͞6Ƚo; /M79Ij_lBŽ" FNI3!a"$G7& Yz7Qc@bZk ~MDe"DU<=OOVc}ҧBg˒n>.<6 ϣzװ)7/ڤՅ ZVho.ٓa}辳usN}dw}IPGܤ^ ,u.)cԿs ^%qx_yu {ֱGզ힚t }yQ$O%tvS%Q<w)
/HRzdDwT٪ߔC \g E9烞EgJ~#-m"# u]Oc@ 5Ui , [er`CTV()'s8Rwd#w#xBo}jGyv>Ph[|4 ~y;wX@ssX 2ػ`
!&̭W[}WC:&!=LIc6tloO`#Sgy8 mQ @4!+;-hfR,6MvY[3u /s펶YIt?)4,
$%YU CaNf]ߐ0zFva(z ʳbr#9<_
u&.~Tٰ@&7IZ&<{E*(ߪB1y1* J!|`tެ/tPC#:!N &Cܚs/
e R 'RT0.%;X:ǻՖOH<[n@FW\ B
o3[Y@cR/OW?I-υrCouPOF"BD3b|-EЂnsژ6w5q ,Ei hp 7IzhY
|. 拓7岙 Aq^f,?]
zz b@ޞg=_U T 1a,'#W<ٛ7?ԋ[p-d`ETg0 ڗZ(G /3y@Ȁ& 0dh6 ,D?zEnof]nPt(AiCA?mT tv[-1/$2PKٟY#39ҟ
%Gg v.bCZU +Pn9~ }o0)8 ^*`T^1Eڌv^VW/ PSv='*zwŮ T|s*!/ :
ȭFYFR9 ؉%U6c,I4~:``P"jzt'Sq1R-OhORoos}w s6*Mo>Y\!WˆF>\ F Jb+cCGp_"M&qkw2q(i]D%Ȭ;(\1%MPZ֧@PWQƻ u cjj)`c5F.,"
W@H棽< %wXY:לSvR7Bz+ߦʨlO4( Zsf,q\"X7hR"/^FéXs E'vm:\HՁnNqގB;њ݆xI s%хEWbvw{$Y9 p)vV,G塾Jb
𑚢4 5
aO'ri":&@E,x^X_ zoC;7i!̡k Oqw$Qu8C#[`tMKk2GV. ^ ==%}kI+[ \˭# ZTS93MXYI`?rr5X;r
y(U5ّgմ%g?䰐il -|O3:D as[Dt1u?t+k 2
%DB3tyB+!Uʷ=*ec$3{Q1gffn&Ă(7 ەv {1EV/hKk|`=ڧY
;WI'иl?|
w DQrʶWdiyنcroswFW!|(W!" GRU~i95(Ngkg O:?TNXsaH=oBhȎT.<4]w.̪Лdل -2 orAgp oV?@4˵P lɹzl[&#ӧZr} $S)Ba7 22܈d+:xl;Zhu3IR: $DKʐïb JE|7g33UisiP&Du@~gI,2YF<.nVs Qi֏!W23)Ɠ? <
^БY
חhC4/:% a/n -m1]OݱpJ5O ~jN)t/=ZV} cElIz {ձ)_"
~]5 x,@xj,$fcG+SU'g#0HYMnH&w1g*~mM , 36edUMFP o2*ё~Q{ԛwPF*mZ| QGRP`| HRh0_^
JĢȦkYݤ*&Ma"籋Po%p 8M#Me9Dr
d 6Ȍ!= |Iҝ *|H!" N8euMQ(q O pA
/eJ&~Ͱ:^gZ_uj+Ybze8,2H,E|k 7ZƒG< 9фv
B#t(\5¤]&M*
Ksix.*<#^(yQh^{
Io>aCs7,b@b0c`@5j+Bq|SCU␖dk&j1ƀ(,բ>h#,lʹ8"g4w_1aE鵿ӹ{lhC{זE G
;HKXY tòAOXEJT1큭In[A ˪zi|;^ j
-ca,]jjpgy3ZUqEǛ\1mtۇ 5_PkmS 4 /JFHr ~i&CѦ}>oK
bJ
D?h oi _gs7&ϋOAF > ї`&IV{S²fC,% dAKv@&h~dKq! *K d6)A˴h~'wlf%ܥJRc# 2dDM&IJ|$բ\&Mk4 koj>6 Ңq&{ s x~`hۄ5(d& m"2zr.1 2UNB%ܧ]
&Rwt-c>W'RFS"
]"k||VLTI䏻T!cTJP{~vɶ'+PZ.#Ma:V T/P eui\zj Uhj6`:Ԥ5a:0{ME F&Is|%MF2)zymol*ĔgTJ+&R f7oS$ɎP.wo$ȽI:al*RGkmGFkS EPOeX9}`#KXW, %>%e+
_˽
/%l+Eq@Ěa V\mL:5[2 #iH
S栻Uˍd EWe#~tȦJQX>)>
sQg!K3t Q'
TK'KH_y:ð2`:Qeltu %J(;`l;}Ӊp0א3K$pSV0yզe+|{7
PV!]ZI#{ҟ@f. ]mO_j2C:T܁53틇;3#5?D!^w{7^MgZx a^C hP{q 1s 3z(̛s~/ lX1T\كj.4{ng]E2x?{sl^'s 6g 5I RWXDT "BG*i tC'#hDŽl `]g4Q(Jxt гK pEb&Vw#/4zfLE|eF_ w Dln,xrb5d疩T([i{Vg ¼>Ԟ 6 rI
x/zGAYL 2V M&ꑘ0 E:Xx1dgZ{W 5eh}&g$s.F^9~[zG O l(LWJk(uϚ DGTÏͯDI͡?M{ZG2Tl)"c~PbbʹRͅJLJʜ'$^b@S>!g8zKt)|iF=WVTk~= ^QXZw#*h%j=,T
vrli? iB;?Db cY3W>&rz>!ȷ`@; 9n
OMh=$#2*. @IHީ 81o/i Mq8p$o> $Vl{評ׯ8LJ^w48'; L_MHNJ CzJoڀLWU˶~#D(!.[M +f. "sC|\&^#Ѡ|-|b& ʡHq3_SH (8lest%N*\o(m{_zp`zD.M=|` t
d\`iaP/%< | \<6Ug
y6^%EMJ>+`A4BeJ_%XH_ snSkCFrߑɫGHWbka>mP
Òs>?+j'
BX[t_'jJ'/u[F{)ayuĞg2T pD!
"@AG@7- dA{? \ 1=/OKѭ03xb*aylQ0PWָ@˧&Dг84G8*N 7c@ GU( hI3t9ak[S º,'I vqCa bW`-AqV5a8FH OiKW
%"/,z8Ob: ~9iVIׄ< obsUءUԖz! qN TK#G% fH̽OMnj?O
c\ yMp]
ƃ]V HIN,88jgzJ5 ZA tEݽDCHK ?gX 41п]?B+AHl\nL{&WDEP#tZhΡ]`cAxqPԡ4NF,Cgt( 8s [ӷЙ/,Gg- &AFzL47аQK!2H1g@LD
2(?pg(ϑhe1B X%>wEyRI44m6<+q 4T
&@|a\cj$huq}kMݸOggGc\C4{3wzMO!C8lhc;.Lk9T;dM Z]V!nP
,Z 82l֫L)tG^t ^?mv]id Ĭ)!ƶ NOIg/ t,F XHaB9)U A 9SS=.wx|yAR-!
' T
ŚS O\Ǜy~ƣ&}[)0̩κOzdjŭTz/ȶECŖ[>%.X".f6t;[b|ϰ}raܴ4P qdw>&(rVTFa=f:{.*(Y!I._n;U)0
߹:gQ1śX2 ^,^3 (Nv{\/ W~L
ۜeq5@YJ;;}N_+OF>^SvWxZh`]㒯낧P X
jѪsA a4y l4FXrˬq?Qݨp1M$f^hRkn]2;RDcZu^iTE݊>W`sFñsb%sGpBr|SUSp
3#jcƱ0^W<̥H -âqx-Yt Q[!f58kL3Pns3g47m/;9AlUς(#2#|鮢-Z$"\.Չ.>=
]禿yN烎yAr?D[&m&1WW=c@ɝLb:Hu
l֛--ئfۚ\𡵁9]m4it^)P_f"Dǣ{k8t|BXݍ ZaIh.3ȶk]4UyJm_'opch?Tğ{1'D}#f fjGOZ6dm3 fp0q; ^
C t 16eHm; q/pnw/"gK%`d֒Z8Z>
% "$hn&.
B5EXQ%^F>5ed@i'Tm?dQ }v/d5gh_/!QSe44s},0siMlѐX'\VDx 1VTc$FB5}{c _B& kZ(8_ TjH:C5q|sy2YSd Q8-sъPE .J|?H0U^.kq\>fhĢPh1&qLH;ݙTc ?!c
y&
VE*yhDɼ`ɪ)i<[ =JiqzU]8 E]nIf%`&AK%a
)r%`U 6{"*.'j^ 9 [ ۱J
@6P̄V3nAxZL,0-gw@ h ș/5Pl?At|,Un? Q%porgђAqw>XM\ Al^СĤ![s AIJΐ 2~j
iq T_s 2BS l
JP 1jMIfjd80 =ur68s W"IRv (/
k_I;`vM쏑ºvE lڞL-[ G|e5_!p፵fXi=,
*~osڳ4WZ{T:gV.nyp1PA+~G{Qf`}A
y"E+7Z*sieXa0 bM@-l8N}ٱa# (:.#̧ 8qcћzz'{L$ l"
D/rni<5[CS3Ez2FoBݘJx:T́8v#T۫qא[ព`hE?9k,ߋ91-WV(@Lv)TxqYB̮!u)XWZ
nqD2Ʈ7 aV[.eץRdiC^a@~МF, ?5Y ݛ `^F{Lh})% YUF' m.bcQWi<uG\>P9*"<ΉoF TZ>i>ex2V&BzrPeĪy*džVCԐm|s+5WâdʘYbű(-mŐoUnV-f^ ףWClO~cqifyt[S.o~k7_MrNe;.T#cS'AjdBz"_2|kX)8U6ضQ, N%eAy:
'e0s?buo+.غؠs "4o~wOf5} U-ONe(0#+1§-ZyF'7G4$y܂= }Np>=0TQӹ -Bv+,CFĘ vցWJuoGTo? Jc#Se, %m< F$b)g, P id|%8L݀;)nkF #/} m#q4k{˱-cDtW#g80;r r?>qx:݊T8_hJM
X
J/.;n'Ϫy n0LIΜEա
y5詅 Iq.NJz
ILuUFk>gX X~ <'XU¤=f H c} Ƙטh6G1PsAN}OZ F˲єMM+`#z{Z}^ U(8
f^_?A :i5ny]%PIY& L+w;J *GZ" kG+˘:zC FHOͷ@*H d+% Ўv/L-F|*61 `#*'I$z2p*oR{0x| *lG`@mj 5,_r?w:wۿG۵s)]|tSIAoPZG_q 9rvY &pl! 7`"&ۣϘbP~I7+FC;ql34h& e]QqZ{j8d[r4U[
d4]`iZ/5'l_|ԗP )6t[DPWc);+
j $.@gFiZc ړlrF |-YA Lg;\ѪMdULt6/]炙rl&:(C|e´ϝ>1Td/L8VW
o mlY[9r ϾV36^b;p9%岚;i
Y,
9ّJ A#Zغd%ױϙ nSNA
sF.c+C2{}0Uy6d$L})N3MZR.+L2}RF@l:3a ?cW>ɋyg$LoJcDɪxgԨg3";Ax8NsP :"/'(R=muwjGȉ`w D4 A"X|
ª7{ @NV8:FRWZHLqtY:BB5UjuI:~T%Z %<y\,jQ?aZ V"Șo
]2A*xwKw& *s,,bդz\Ŵ-iJf/W{^uaZ%6h!wX _o}L|S0&i;^
v}v0O˶*\ 7uTU:1"xEBFs8GD>Jkk2b_S~M
Rvlvƪ3B) V٨jjEMNk8!txkQ%WgrH*طb46
ue
>h#<9 }Ex9g C
dϩk,J:jD. wMCO;[ Vdj#2N<V ֜Mc h݉
kus za~YBX/EkC<1<# ߧm{چZ^iCw r#`CZ I'%dl$["QUJD-t
x#A.u-$^Fk,Nu6mXg9~xdtms+|_̡$c\} $>wTU5 vqN%iBf2P BJ
wsD]~m=ׇw6,9};=ezI%FwZ)ӽ ]hFC (o/-v|,Z3}_ w.4L"ĭ(Sg4^p&Dh<S2_,P i'ZI ءG 2T\Zȶ&3!z);N ":@>v?l,#1 ڻI{`Njbt Ku_S:Vl[
D݂[f<2;UR̬n-xT/@2с8Sb eB̶,fڶ~
'1u 4 K)hCa `"? H2T
#آL4<\hB=g &Ԍ촡 ex;ˏ:[v,(= BUڽ}-E?]#x)$dI3}9w>i
ʟ`B&01;uolb[ :Zb
aR ) ,ڻVZ6 c$kD۳ghKX~pN)߃, e(:W63 Gec n_]&Ak9u/|e0IaN(ܺ!!"oAҬĬƆ Vߢ(Iٟ.hq
-z`%|G4\#YFZ0lGqm")g c7Ddey ![? ,æݒa͆I5eXSJ 9 }ZB-ڧ&0i! UUYRLJYJIHy {;S
FOMVȿ Ye"^BG7Jdm
t!:" "v!}OSs deN _#mNw1;V[yf?0,g%.
%rO?uX* Ө4-6&b¸zB+ gIM[ˉ-=N]>?4T\Pv'((Rn~"|)S2M(O)gD"{ZHU@O D 9:/G&i5~Fdb (gs\,uD3ʸ*<B?7"IgJ.KqNG¢2D4YX;PN`\-BIxHS+t zI"3,(ާ즘Tk ÉHVN1% 1HcWyb` 9vآfLC
I* t
SY:͓MH Զ;LF 7o$nߡi5ԞZֺOVՌs)=+ўb*kZ H`@w9R/ R:m]G+u?_V\Eq,hYwO`M%G; 6 cB2|d-D9jQz)o;kr gh?^ OZ@D͐ \qj9t"q.y} =sR"U) }˩0cK6Fni OodXc]gn_fNGݱc;&k;k
\F$Jkpkk)a2E* YY[ @|4
[ fU31qa+, zi1'kn89< kI죸j5;il I%(T{o5tJ L n} |?IeoΓo' }H\anI`]o֧ǬvJ]_>;l*5M n 8G$Թuݪ}5ԖcPV>⺋L]FW\OH
ԍz0^s 9\W֎Esg
vE
9]VTүL\
/`Jj]jq
5E#LP$O;,DkYcgv2 g;AmY
aSuv7?<aUst̴K 3';k-qR9h] jKḅRc蘻L ^Grxj#/uej>P[|SXF( @ ޫӡ;!N(xXZ)}xs+ȞyՅ' Oс
Ӕ(bCcDhBcr$`$MSDn3 92!4ޓ/2i^2DRy eh CϋM$
wz $jrnҽxOm3JTRԵܺ {n 79I ~ą_?\qOaW . 嬹nyMjjv9!R N8Nq8@R_>c+/:* 7EYᶭQ6nC7aXy錾*F~jJ !,Mg ?=A(0ةD42Qk~
vЗ2
[ _+-bc<$S Dg v2nhTzܕ[ 6 J"D7mcq'
x/뫾^gy/,t_
?`z6[6GiЕTo]_|pjѭS-R
zm E(Fi"74Cld1cU(Ѵ} 9 "*MO&FIt@s&8i r<b7^}(D&w dΉױ`Ayh4.M.q+w [B0۴ׇ VdŅ줓=6B&##.lb|eX|ՅJWud2Y$фRڏjqmVhE6R1FA/Ύ}z
ONzܶ\M∓ҩ^10sm?q4-M L:e~?wd;"ު!:wHV@@\Tm
@ .bl.>0D3,#8AEGȦ,lNn{y 6mBw3:]3-@v(b̓ޖ|įs_: |Rc_o7?8FpYY0cX8D{;t
AӱH_g*2O `uQzNM@zWYkalι|5 F."՛@ M~DstOD@(I_w17YfI &
kMt M=14S{zus]NtVb+fWBEK
څt \e %vF_PD{!c~zT<GRFT aφ0B į,ޔ&3Yp!uGfR(?N
nt`$袟(>ʧΓ#L(l v t I} ep^Ew݃ z?1HNV
R
8 a yKH~2w- T(bl*Z63336J }'9Q>;c}I2p5u=eCT:PRkH
1cY VoG#o,`OPМމ WºϫZ5lM_@ ? 0 w;Kl*G_ MǓCJ\\O|{
* 4ߵ1 GUFg#{L,2Xu9gjZ h3 UV'3d
?C҆l8Oźj&Lܟ ig9Zq?3鴷Ek{G4;bJ~[(|n|d}I#'qb bluDd>ms_f' h Ic
b;NW+ ѐ:]7VG*L$(\
}"нU
z YM-',B6Gr"
{^n}P ۸-:r9rMQíjqv ӅY'FGmSsf9ө,p >H,Mj g"\^r:;(2 bi E}(>* ds ߙsPIDc>#ከVƧ FB\dg7 %:Hbe mDB6.˿ZE&> g*͜E;H@XsƷ!Lx_qX#TLqqg4R=zoh9!PbHH$8~Τ=a r%L'
RW!z&vօQQ0 ծ
" Ĭ>.ՌDdF"U =Ny}]
Й 9o b[W-`g{
D*FjW$)+XG2*ـdrʛa]RbKَ 2H>;Ji} dN㜥oV)uaC\
0UJzbLң
l?q[9/!Ni#gL1mT82X˳ӶmSԭ#~ 4G51Q9XҪ
B6;l?x^9 6ts6镽 tVт\y1#'@ۧ3wD$d[)x<A
*OJuK r
8(&KH JOX_(iN `ZƔCTWclٽ&;v PvomG#)[
k[3)*{-TF9UtgȚ,pL7~]dYgi-)Sݻt̒ )u"86pZ\; Jh-i
ъo* \^יsʅv f[ "\][Y
ⰾ3rI f3add Í.e-F' p *I΅*}ө ·g<`۱}vKՊ_b]RJV{TN ~dX;#!i^Ln͝^D/3F#PO
}YE5%ltq3
r'dsK3fn?g]19{jǤ " /%kB.b_f-Õ#zR2Yy (L^]&Q(q!OQˎ%]O+ F c-"?AߺM8~:$Y IZZ3 )ݝB
N̈H#DK`cjJ?)4CTC'K8W-)>Z5%5:F6U9Uzj =M7I.,=8
| =!4;Pwh.ieMպY.pvƽh O,AN\Uc&Q^}*s3}xTTC"g&:Ź
_:pҐ|x%!TסĖO~B* 3);kXI V?4"oAYQ<# j=iTHC1D&ۙހp<{H7Cj3++$A ?b |gٺ] )$pY`ΔT2F@N:\e)>5֝ $Kb
2)Bi(q}T:)dݵas nfk^
"@aw瞨(>wXR&%9P-jm9ӁrEBϐ* ?{kOP1~s; ˼R* ŎhEtA8JzZszoX1Xęgvm2ˎpO6:IԇGiĸx )h w\ Q>j[e?~qdž~Rpcƣe(S?jmt_V ZYF b`FXJf1i[}\ عкrץK^Mm%#o +ٽ 4# n5ij
?A wCz@6< GZ &4 p٭-]e l6(&gT6gy.9Ģs 9_ṿBezw~gX WL 8= DZ. ʻg6vdm+ M0v*+"K9;詣5:ji
i)#Aw)dp3xvcD9t %S}_AJq! ߙ/"Z{r6!+܊
? f<
YZ |