shibboleth-sp-2.6.1-lp151.3.3.1<>, ^Ӹ/=„tﰘ)uQ`P>XFu U)RDbBBxs>(bfM@Ldp1PIIBL95Wh{'x7^?݈=*WG [>.}{6 )[o66_?OqP8ϹĦI <0Znc cRElޗe'j3E-BfKX\?XLd " Q %5 \DlD D |D D (PD (D)D+D,[,D--3.33[3(383 93 :4 =>>>??@? B?F? G?4DH@DDIATDXAYAZA[A\AD]BD^GKbHcI-dIeIfIlIuIDvJwQDxSDyTzVVWWXXXHCshibboleth-sp2.6.1lp151.3.3.1Open source system for attribute-based Web SSOShibboleth is a Web Single Sign-On implementations based on OpenSAML that supports multiple protocols, federated identity, and the extensible exchange of rich attributes subject to privacy controls. This package contains the Shibboleth Service Provider runtime libraries, daemon, default plugins, and Apache module.^lamb63openSUSE Leap 15.1openSUSEApache-2.0http://bugs.opensuse.orgProductivity/Networking/Securityhttp://shibboleth.net/linuxx86_64getent group shibd >/dev/null || groupadd -r shibd getent passwd shibd >/dev/null || useradd -r -g shibd \ -d /var/run/shibboleth -s /sbin/nologin -c "Shibboleth SP daemon" shibd test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in shibd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in shibd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-shibboleth-sp-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-shibboleth-sp-update-$service-new-in-upgrade" fi done for service in shibd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi exit 0# Key generation cd /etc/shibboleth if [ ! -f sp-key.pem ] ; then /bin/sh ./keygen.sh -b -u shibd -g shibd fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset shibd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in shibd.service ; do if [ ! -e "/run/rpm-shibboleth-sp-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-shibboleth-sp-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in shibd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/shibboleth.conf || :# On final removal, stop shibd and remove service, restart Apache if running. test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable shibd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop shibd.service ) || : fi if [ $1 -eq 0 ] ; then /sbin/service apache2 status 1>/dev/null && /sbin/service apache2 restart 1>/dev/null fi exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart shibd.service ) || : fi else # package uninstall for service in shibd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart apache2 ) || : fi else # package uninstall for service in apache2 ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fimam" g':ftm  Jb${M۠RX[@(9,]g}A(4;&37-A큤큤큤A큤$AA큤A큤A큤AAA^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshibdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshibdshibdwwwrunrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshibdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshibdshibdwwwshibboleth-sp-2.6.1-lp151.3.3.1.src.rpmconfig(shibboleth-sp)shibboleth-spshibboleth-sp(x86-64)  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@      /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envconfig(shibboleth-sp)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)liblog4shib.so.1()(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsaml.so.9()(64bit)libshibsp-lite.so.7()(64bit)libshibsp.so.7()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.5)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libxerces-c-3.1.so()(64bit)libxmltooling-lite.so.7()(64bit)libxmltooling.so.7()(64bit)opensaml-schemasopensslpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemdxmltooling-schemas2.6.1-lp151.3.3.12.6.03.0.4-14.6.0-14.0-15.2-11.6.04.14.1]Z ,@YéX~@X@W@W3W@UUU@U(Kristyna Streitova kstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comdimstar@opensuse.orgkstreitova@suse.comkstreitova@suse.commpluskal@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.com- remove fixing of the ownership of log files and the key as this allows shibd to escalate to root [bsc#1157471] [CVE-2019-19191]- update to 2.6.1 * list of fixes and enhancements https://issues.shibboleth.net/jira/browse/SSPCPP-760?filter=12270 * fixes [bsc#1068689] [CVE-2017-16852]- update to 2.6.0 * list of fixes and enhancements https://issues.shibboleth.net/jira/browse/SSPCPP-716?filter=11475 - update soname for libshibsp from 6 to 7 - adjust BuildRequires of boost * libboost_headers-devel for openSUSE:Factory * boost-devel for older distros - update versions of BuildRequires for opensaml (>= 2.6.0) and libxmltooling (>= 1.6.0) - shibd.service: increase TimeoutStartSec to 150s (as upstream did) - remove %{_sysconfdir}/%{realname}/*.xsl from filelist (it is no longer present) - run spec-cleaner- fix build for openSUSE:Leap:42.1 by adding %define for tmpfiles_create as this macro doesn't exist there- add shibboleth-sp-2.5.6-libsystemd-daemon.patch to fix configure to use libsystemd instead of obsolete libsystemd-daemon. Regenerate configure via autoreconf and add autoconf and automake BuildRequires.- Use %tmpfiles_create macro: gracefully fails in case of missing binaries (e.g. container setups).- build libmemcached support- update to shibboleth-sp 2.5.6 * Update solution file after loading into VS2015 * SSPCPP-669 - cached samlds.json files prematurely removed w/ multiple * applicationIds * SSPCPP-671 - Handling of partial success in LogoutResponse needs work * Fix line feeds again, VS is also broken * SSPCPP-670 - Session Cleanup for Database Session Storage can cause performance issues * Re-convert linefeeds to undo Eclipse's handiwork * SSPCPP-675 - configuration sample cites "federation.org" * Clean up ignores * Apply typo fixes provided by Debian packagers * Update library/software version * Update MSI names to carry patch version * SSPCPP-665 - Use of systemd breaks on reboot- Add gpg signature- fix some warnings - add service as a separate file - remove command line switches for conditional package builds - remove *.dist files and unused *.config files - remove unused conditionals - move libraries to the subpackages- use spec-cleaner - package cleaning - add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove timestamps in a documentation generated by Doxygen and avoid RPMLINT warnings (file-contains-date-and-time). - add the macro %{realname} and change a name to "shibboleth-sp" - fix Source address- initial revision/bin/sh/bin/sh/bin/sh/bin/shshibboleth-splamb63 1577120979  "#$%&'()*+,-./012342.6.1-lp151.3.3.12.6.1-lp151.3.3.12.6.1-lp151.3.3.12.5.0 shib.confshibbolethaccessError.htmlapache24.configattrChecker.htmlattribute-map.xmlattribute-policy.xmlbindingTemplate.htmlconsole.loggerdiscoveryTemplate.htmlexample-metadata.xmlexample-shibboleth2.xmlglobalLogout.htmlkeygen.shlocalLogout.htmlmetadataError.htmlmetagen.shnative.loggerpartialLogout.htmlpostTemplate.htmlprotocols.xmlsecurity-policy.xmlsessionError.htmlshibboleth2.xmlshibd.loggersslError.htmlsyslog.loggershibbolethmdqueryresolvertestshibd.serviceshibboleth.confshibbolethadfs-lite.soadfs.somemcache-store.somod_shib_24.soodbc-store.soplugins-lite.soplugins.sorcshibdshibdshibbolethCREDITS.txtFASTCGI.LICENSELICENSE.txtLOG4CPP.LICENSENOTICE.txtOPENSSL.LICENSEREADME.txtRELEASE.txtshibbolethmain.cssshibbolethWS-Trust.xsdcatalog.xmlshibboleth-2.0-afp-mf-basic.xsdshibboleth-2.0-afp-mf-saml.xsdshibboleth-2.0-afp.xsdshibboleth-2.0-attribute-map.xsdshibboleth-2.0-native-sp-config.xsdshibboleth-2.0-native-sp-protocols.xsdshibboleth-2.0-sp-notify.xsdshibboleth-metadata-1.0.xsdshibboleth.xsdshibbolethshibbolethshibboleth-www/etc/apache2/conf.d//etc//etc/shibboleth//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/shibboleth//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/shibboleth//usr/share//usr/share/shibboleth//usr/share/xml//usr/share/xml/shibboleth//var/cache//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11720/openSUSE_Leap_15.1_Update/8879d77a4c1f458e7261e35bfd6385d9-shibboleth-sp.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux  ASCII textdirectoryXML 1.0 document, ASCII textXML 1.0 document, UTF-8 Unicode (with BOM) textexported SGML document, ASCII textHTML document, ASCII textPOSIX shell script, ASCII text executableBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=bf353f7920d0bce5ecc0b5174fc9534bd372b890, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=6c63254e1f7d3d27afbbdb59b6c24781ee62e3a9, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f083f68ddb0e1c89ca056f664e77fe05c7af26d6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3a16293fd09d2a53e54107b3fa157533d17eba0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3466fec80156dd914ca2927025dc6efdfb1806c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=422edc49d70a9082f3b54d93a710d6f204335ead, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b767bfbced281103e6bbb9371b200ff7f4470305, strippedELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=2cd312d1f659cacd0536c8c6ab3f7d513b144eed, strippedELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=60ddae5089c80a6ed7f5478bf730390882555b52, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=2f6ca5945bbfaa8281796e7d0a4d6a948c3ca926, for GNU/Linux 3.2.0, stripped#1ASbp~ RRRR!RRRRR R RRR&R$RRR RRR R R R!RRRRRRR&R$RRR RRR R R RRRRR%R$RRRR RR R R RRRRRRR&R$RRRR RR R R RR!RRRR RR&RR$RRRR RR R R RRRRRR%R$RRRR RR R R RRRR&RR$RRRR RR R R RRRRR%R$RRRR RRR R R R!RRRRRRRR&R$RRRRR R#RRRR R R RR"R$RRRn/dev/null 2>&1 || : /usr/bin/systemctl try-restart apache2 >/dev/null 2>&1 || : exit 0/bin/shutf-8c8250669a3483ff1e728611e58c218e607d76cfc6b301621afd8618ae84ca243?P7zXZ !t/BY]"k%^t%;%?n[7muipP[քxQ:L?ND~1mqnRq%j""0v26ԎgeQ h&L /~*bK1V=e4vU婙 3AD,Ɖ:S X@9ko4pfO<ʢ&yqDŸlbwyZ4w!%f4?ZS/֔?V7 ꈟ$wHkGiq,? dШO@u=BnR%?wm6 @O7j`eEWޱ˚1DuŹVI*(HDѓ/҃PImq,/2~)5[bB c89ߕ`h"04E6%[z$C;9fڦYa#\E +*|lA1D,$oO^6AH]]wÈh6^:@.ȉ ׎k-_2exmJ$1Ն6my~``rYXb(M(3;] ,V=G=]JSLCR@oQ62-]{byZBVP&UpaG1AÛ/f<ґASA .Θ;^`vyF_ 9?qF^g/|u' ϝPdAUkU=Jw+ +4b䩣=Ÿ"tvbmcIa&鼌 &,8ɢbLC?M6MLFSu"㒜&vjNCXIa`[nzɀ׻@ڜnxe`39X]Y0'bO*K$m-S-F^s|;,,nv8}7nxe6A*uZXme*H ehUJ*"MLG7I\܂jijF\lp**hՔUC0jvtMb> o$S{? 22z3:][D(:90+~[ׅ̹ ŦN6 0/f A'?[@D\$6l* DYhs܃uC hw@J̢"He"㨹0$yVm'滠΁XӼi+*N[8{ݼױ Q430_ɿowBbk=ȫ`wAY Ha6B`& J]7K})yb"r!Tc )Qx#v ͬ5),ǝ$yv|-mnECiUF"%K̟h#C>&؟n_yezyo8f!Vn2t;)F'J1@5aBpm}+# bD"hxjo3fvzPrVWVb5;8 c ̏ 5tƩOqd/LCa]V/;R}\GDw ]vJ& '>zO-/ci0Q-hpQL|-5> dWf2;Ac5ݸ1F?&Ҕq]awFzHĭEaW ~%`HY>)L*kq݁\wLgj_310DJvvabw~nBiя/0k〝 n(\× #} V^=#hr#/,KPŠE>KH e˪,l 7/BĻJ :J7>p <UۅF|q?t[ fU*fnAA3Ap0?twUV5]&*Lg!g!z v^T 34Sb)L,{sSරM46uKmv$e̤(btv=7sLvCtwbdV>ߑ jPpȒ@RT;<q Ӵ1=DŽкo,[eщ4ϠޞxlU'bjO^$I0~i#wP~ Ral }h NK&GgԒ:gL#\ZATkDzG##VI=D(/M؁-3+[ uHHc~rj^8t( kg"13OƬʒܑ^Ȳ@2'[z(܄Bh*umwhZ$^װrè$ x7cS/Mӣ]#`"/=~dy8Y0&DkG4;P c^p%!9_ jzB 'Ukkhh2,NHqJ7гs ˭$CMWX[u+StSFL8uo6:rGf&@s:p ro'ʪ]JzQ~^A'6:o"OpMkv =R yro,,-[:ū k)H9*g {Tыxhi^Wے=W(m8s֝,rI~P]6 $;6Pļ oX#2é!8coTơaԮ23$cez`)1%1mdkaێ4%w}F[XraCpŃ ٹ]p& HNjGLbrD [ø H)h<]'~_QdM撤:>0-t(/W܋LՍ;kvr/e]T6$y4pGFz92P* ;޲v=.ɥEhQ&B Z;hǦ?j'd@}ccWWr8l<h]Fp*`t{ƕ1Pʄd6UhHty/$:$qj>=FCCt+c|wxlj.;!IFpfbEptyA^㡰B.d>.Sbxoig6ؚ1N'NNľ2><3ٳiĹMG1{x${x"Sr "Kgqxwݬ21jZE|cnaS\`c_ *I׍hϏC '>Z"KFeq,j3Hc= v)eIfigtIkM?}]Ўl[rZiEx~πJ X{ m”yY=WO+X1@%a̙z$31(_y23Xj&&yRIylBKb1f^PW.5k@:P3'Z5L"'8wmMc$TR/ۤHw.""FO6S\>گHګMŘtG_llFHdpI=qp,ʯZ4'M|&tǫ?j&3q ٟϡ<`i ۶m hPMCvUAcYYRxO\9܄}uv\?4C3kEMm8RGo2JrmlW]n`W줒ι2X^yϦ9?~VEuwzϚ-K[LD--mZN,vx#!5;o{#ǃ+Z_V$,{R|/$@`БlǚK-mb/)u %uI{,3eJ^oj+@c &z:]3h]x^62&!8qSrD-1"n˾PW{kuH M^kvtRNB|^!#Qi0Ԁ6ҐgZ]<5 gCmaɆ){E||^{1=|sRG܂4]'lz窻l~gjߌ{+Uv]G41jpNy16<%˵u/DԊ F$b ɨ"]`Ak_/#6ctKzo,` bO]B ӤnQ"Y[[%@0 \8WҨoV:軯7,"4`?$І ~nHj:`6yg3ieT*щi2T{ {oBCiA6+X `[]qq6!d2a1Yt\Gg2}/bleΰwI 7LK;wI\^@ Q:XKS`FT  gró?D! eL' a*#PJc >A"[ Rf; ~<(rA%K~yŒ<Py d8E%BD2RwZOeҚU~,Q 'm8۽Z *g αNX$01Qq&^,Nv7N4^5(&҇ ot"L'd): PF.{i e:4G,ԗ0#Oź}4U;ÑZM>u5k$R ( G{XͱY8$)AJae #shl auY\m oͰ3@Q/ʈ22}.qwرmKoOr W̖})Jopj`mS $/h;-S8]YxqVY0J:aNYUb~Ձh#M $(@Dg}%)$k' řA9Sɏ|:mu\]EhUSs1r]*'z0-Ѳdo] kYkk(^%.FUuVʰNJ\"̗)\b|GAa:Gt<^d}cik;N~֍F2 ǽ%䞄?ޣgXSe-6 KkLoL JmFsNTMoɞ JHC,h5EDn7I0KsVlP.m/A¶ׅvB.|WjZ6XݰE.1[VA^ l<):!҉KƟ)68-eĂno,jJCyr˛JiYp?ԇzS}4yaذrSxlvæ@^$Y|)˄b?^ZRW4CAZ[^X<9'y Frdल濃ˌ9Qb?{@&cm؝Y]G@=1g1'"to=)Nۛ /j1h0\m>^ @LkOPr k^lnrºVW q?yN&O\oOtE u4쫍ǎ[M` %K2H`mZX S4A`=&C2z r% A0YvyCe`tĥonQk<q2|kF^&5= D:TBrbU1@BK)⼽*nR&ZIYAGR,}'htH80b21+$%lE }A!yjW~a퍶 1S 9 )Pg~'៼3c7(!޻-H\SLl} *Y0,j2{^%| :B~;gۗ{^I{"KCl~5Kqģ?^.5h2PfP`no]GQG=jJ2]wկ<lՇ ˿SU4uSk$w7L r1,j `LPDGm/;%D"L;B{&=a\MJN҈*x@M fMC˩uomIw, N0,pk,j/pQ4CR'9G>bE1|MSC/=hρ{ٛipo9p-{N5UWb M'DHZVTf&B3vt{pEJCg`O!/H@}PnN̞j}W  Y/$:^K&?WQ2Q_%hk y7TaQV p4ىJnHO&KvBHTgh X%WB[OV:[~![ʾ@Q& hşQ<헼_IDdwυ+r8:{YY2Tuiv){2.-@ ^ЎV u..+t.Pu D V p],ٴAsƊn^{rr\sՊs7*bU&kEJl'}11˭3U.˞Tz28xBcݙÈ ʰXȗzbЦzḎ SUʼnMKt{ߦmV?]vmr䮨]sqc?߭etl!O9\CI5О42>\g茕ϑCx2/1$44DNuQʣ8= nW)/oQ>'ޢgۋ ~PVb~>ҒH|-s1W\~05\:MgRaʬ CH:߬Cׁo-O ul6Vk, e!W uTfxsV.^f32a#HN_l_sNP,&}|g{ll;D bH\BUjA/crqnszF8}hW@XfkGjIRd}D 3`Sjl-2}\zy)uvZ45#Wy浲mNUV4'cfgY"p=k3NюV{; 0d.5 xF]F`CYN%QFx^@U)U%_*9QĝFHKKN\%,q—H+8<;&[mi1jМj2.MF?.`G#^@v~F?`fX(o)'#O"uszmK;Tj^wg"ZJ^'"R޿ Oa&WNIX1At.ft{J,,p]&+ؽCED!\,WѪ"ӟ`(AjQJhFOh9BWZ6|#tlBv.0Me[z4 @~y;_X^53Auc:vpM\kByi(6E?D u]._U {(:t 1iˠ£AƁ.F$^Dě6َZ }>NMCb]{[d`wFk T[̌!PL%6fb#fЍkѫ(^jƷ҆R8DOML/˗"CC.I%+jiΧ]% (MHڜx'NkĂ0Iy}7F{ԂsXhQ@C%RQ.9oEz@E2^`غbXvI֨~ cX#Ù7:5V2 z1o;v>@ywT@9ug2mБ*J#3pfn %2 +ȵ#䀫γW"C aFeԕs}SeS]<,aUώϥ2#fo#Lx1=KIWZK/8jI3?1ÁZ\y qQ9+) ꒕ëM\I? /7m۬YiS]zvJNN5HJp= +2M*iAy%P  hs7e? !)V|laeuW}P6 gj?^K?Rv.;64d$߲nw}l*Fϴt3`TݰY T;M>&s4rA)Kwc^+%cf}gO (GCڥkSXwyɋbmZtXY(bolj.w@Gdο5,ff*)/>ϑM& KR.r^aϴiP>OT#{ qUZsQ2xpgf*z5ZώIt^j_XpeB#VJՖwP+z0!Wɴz8&,BĈxSWfaq'e(DR^^oX#+@EAVIwLI%5RH1~>]E߄Y -*5M': )MOu{NB-RgF.O)>3Fw]T4Vd:CYߌ,u?y_PJO4, NLىEQ\wR9xG0&V+U]ajn &裿Ƥ@?T% ql Jm}r>ɳ6G i#@ˤ. w@LNfsd{uIBҗ[Y[8<ۈJUo 0k Zb 2";Z .a'xL̺|:^ډ710  ƶym*GV(q㳾vG<&Qdof*gԽr9_hheŲˤ**F\R{z $8?`ipC{Ej1vԃ"VP.k&h3_MO{=ݴ@SkJg=[/#W8vJwiNnQ0=pC;Y!!M;"o-M4EߖJINĶ{OiPa"KR##jQ΁@!k7]р+7to+K!cVgƣjd՚7NJ,6^bw9N޲ƒDfu20gƳMZ7pMc1;WcThT|PzT W[գ8=ňT6kU"Vxt=a`&]#M/ ҩ`&kWP? ^lBtқ@G l>9_M'7 OſJq3xq+MPڄg.ݝ[u)ʠ, Xq&0@hP\Ŕ£qSO)qaɴ ?C;=\Uw`cO,@Cg W%avCY |i\UdsBJd Z>Y籇6P ^ۡɥPCEnsl5~a?Q#@ q {QaI nWE^\\]![tpQޒ|I8 i.h¸%2dעgL5mC N`l9?oAx5|s9HoTxh.gij1M.b /RU&e(Ї`" '{7D.~ Lf7).*[ӉbNjt,~sH RICʑI>vx^ˡz Jrq>2,vx6u֨Ev>.ˁU|Vݯ"w.59,HBD=gYK4dfC?Qs}7lNR I HE eK:=e5>P"m;MĚ28K?*߲DsHF7ONVl9z}TLr]5@xvDA6 ї_7rFYjnouU=MD,/PO6iò _mKgo(T?nσɊb:l ΣZx޵zC2 Yb& ܷ]Qkq*l*?uKd|*ݝ \Gmں QӼ=ǽo6DvIi\E5 BB E_X{E|pZxܶuH9a0"9}ƈep0Zp+o~f`2 /$~w8+ !Ehk^بILtFu%+Hj&[vDz |tޗ'[|&+>v 4kUܻ.|EIC/ +eץX42DA }Q}A v~Iߍ̙`h@WǻSzꄽeY [biDGM՝ _mo2j $e]dK?rƌͥU;nahFӟR|ay=H6k.Y&rTom P哊"X4g%̡ @.EO[3_E~5ʮM۞4&œF @_ 鶅>rW@ K&J‡b*z**1'dFE Ns;Cs:HxrVŏ&;#2N@&K6kCӦUfg= }/2#3c<@&-Z)C { 51@{oy 辞3#/4 oyM"qAWitpoI] fYWҗSU`LfF! b޿ qlB|Z~oA+ ۣa].ǚ$rKVdj XY$rmߎ8.=#ls'EMN/wBc50^jIn(wavvA˦RҸ[TE`ܗ{ˈ4׌B2"4{^' _,7K?!|eЂbb֊v\K*ݿvKٞ6FhUN/xff+ؾI҄]3Srp5|(P Ub-{*/wal;?DȲi5|o|KE 吖OX#[\>>=tjKBm ~E5y Mq0?Xvp%`$$5(%&;mG_s.&3Yd|@e 5KO/ E, Wtts&nOȶ+;\[U -Z 6<J){c&.M A)ȏ"nQ4k\d7'eaRٸ:ɬ\QآsB֤v. dR *-0ODͣa10dk7X{XOs$; cluP<7xʂاI/. #05y4Z,W9\ uXz%:k.8! yCJtMk% # KhT3n7 4t6BC5"FR,Qslp? ;z0l,Eefti_u[/?&4_,H 4#TVrU[iXdmc&նF)tI.NX`+gǽ7P|׉f98mR:o;pQ_VͨM5)H!$p1.<]V(: 34Dy9i5fB/ԑ6֡=^ˍq&/:^lRT9qmy,Oʐˏϻ-S;t(x$bBLf`V;0Xi#X"+ ߖ?EۧX9˾]MAYl~$q%.*69tgYN"u]p?BUķ4%09s:w=ʩC6xْ$`τ(^[QAՑke-rCiMWQ/x@XWG 3y̟puv' oc-ߏ</AÑy;8Ҋ wqRU$ OV On \bb]Uk"~%prKTivm ,u6܂9fy q`2":"ufT^)PزKYwoC9Y0 4XQ?˺<"_ozߤr i*!@Zg}ZFlz#,j>'IB.D$ SZJZ0Tʅ|3K38%C5sxztcd(5Cd8}mv{mmqhێ#RfXq$hhh-t2> cPLk0hq{D8ov0#^hA3J(u FO ,[(€j4A#hI#.-KejY2ޛl45I:xm2+n껓Bvxoqi\Sq);Bc8g MuS5|XӦev7`0:VD_H'%'JƁ +kv]4柧>DSbZQ!Y`pPEZxIQXtj^U uof ?w3 H_!ÐDq|ƹiaT`aSMTJsμ4*$lMz)cy֖[0#fU{>ޱeHY@6l7;39ÏU.[)t]t.~|L}Km;ҳv]PscQ; #͕HS<# R39ߥ| ^s> ߉}ϣ7[Z۲u*9JJ9̲)ʞE A/oRpPo/] >w_o?3bR aL߾֍*V1&hPN@ 5œ,"/u_܀7C),׮I+Ř7AU$a͒DB5=ȳTd~>ps KP|PWC0Mz\O}UP/a#͒eem>j$Aô_(ViLJ4?1/~hN"u U(A)U8B$U˝{g+o7=̏=gdfC.,`sp Le#B7|:$?:AXEhߥCKexQ8*L+nH V#ْ: * _!NPIazzi}3u<,T-vaɻWxTk:k %_ReTwg!O/]Y58,o>*N'p;)\SpLW Ct@fNj\hn8W';v?aZ.Xi=g:CbIW?`jyC1:,(i60z[RojVvd6Z*DO/-G )).'{ϐL ,O[p Çn i4YY@ Go_kmD]TзJXm0J(tK){2 9V&N40G [M=vwśG.LIuVf; ^%.h6&q xW),AϴRF8{`*`v$R|𢒚Dx[IY(ZuDUlmCoehW w:F` % \ E$˅6qz}Ο29bUn/nW~F"?"nZ|]Zs'Ë6 `XmO PMz=Rؤ3zr@Pay#SJ7$fAt<:@KgL\'1*6z8tg*Ph"uowLDŽޣݗx4Gqo0ۄld(4A^LX -u3"`'c{L'qVmhlWrő v'B=ɗ8 w=),Z=HrӅyh(B{W=`B|u!c֞q;p+bpq\b\{ qq::-[]_{i"a.pR2 ^xQ<+:Q-U.D1|"' H_ѐfѯ|%ncŜ*z_-ϸ%f1r*~cd7I ǩŧ"9Pd;D"fd)f;nuA$@))LkT3Ar5ou4e+ MW~گ9=NՀr4w9zsKބ:⣗L H ʠÿEa*..L  9)6<\;5v½IZPdy_,7im幏.کu3x-¤U7q¶ TWj*(\*7syfH9ټ}ۆz&w"<~llq|̵Y2.{vn:gottVh):{OD&By{m4% a##ܗ-@mm DF>J2h'Xb,-6'dk0=ʋoprb*j:}YD1Bn3qaY1kn%qD5z/bw6?'9H9aˆ.Xj!\vgxF!=I)$+ﵭͻ}5$(,כH}zkh7S?1 DSۺF _QPT: cScA@G {c'WzSsbеn}J+FY14][4T9ױŰèK zpeFUUfJZ̩C`Lβ`KYtc/dtJwߵ*+K=УG=_ph3~%a)aSk nloCkkL6hP Wo >/ ƪ ?o2]nYpadrcy}[-"{尷wsdwu-U쇅z-I*Sg]yQ8kx"7*ugtNJVQ CvMe̟¬.8I~@?R%yoM_s!>F,D4,h&(Ml9Xv' G?iO+pAS! UyzTm6&P0EbY(gxsUӕS83)B7ҬA mߎbU9*j6ցZnAPv'yA*ۥ4$chYa,dp^]ZT1@Pf7Ы3Ԩ@ %f+~1^Cq߳P! YZ