varnish-devel-7.2.1-bp154.2.9.1<>,̉cl̻!M@eee0T[w DG̅ػбMDxkhĦI xQ2|Kthj_%/>HJ~s ם,~&kþ|jshm\jiȼcp^aNTDJƴ$`/fHU.քR7]HI n}=>u?ud " @$(AJW p_4_ _ _ ,_ K_ _<_ _!"_###$c($8$ 9% :( FdGd_HfX_Ig_Xh4Yh@\hl_]i_^n bncodpEepJfpMlpOupd_vqwr`_xs_yuXzu`uputuzuCvarnish-devel7.2.1bp154.2.9.1Development files for VarnishVarnish is an HTTP accelerator. Often called Reverse Proxy, it is an application that stores (caches) documents that have been requested over the HTTP protocol. This package holds the development files for varnish.cl̻lamb03SUSE Linux Enterprise 15openSUSEBSD-2-Clausehttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://varnish-cache.org/linuxx86_64\ .FtF, wIi/C bm  Id}Bd  uyI "U*UX f @b9vC?3 ! 9H M d\:h  +'qr w Q;PAA큤A큤A큤A큤A큤A큤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.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootvarnish-7.2.1-bp154.2.9.1.src.rpmpkgconfig(varnishapi)varnish-develvarnish-devel(x86-64)@    /usr/bin/pkg-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)varnish3.0.4-14.6.0-14.0-15.2-17.2.14.14.3ck@c]c*c(Yc'@b@bDirk Müller Bernhard Wiedemann Bernhard Wiedemann Bernhard Wiedemann Jan Engelhardt Jan Engelhardt Johannes Segitz Jan Engelhardt Dirk Müller Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Samu Voutilainen jengelh@inai.dejengelh@inai.derbrown@suse.comantoine.belvire@opensuse.orgdimstar@opensuse.orgjengelh@inai.dedimstar@opensuse.orgjengelh@inai.dejengelh@inai.deeshmarnev@suse.comeshmarnev@suse.comjengelh@inai.de- Update to release 7.2.1 * Attempts to mark well-known headers like Content-Length and Host hop-by-hop through a Connection-header will now cause a 400 "Bad request" response. (VSV00010, CVE-2022-45059, boo#1205243) * Apply the same character set rules to HTTP/2 pseudo-headers as is done on the corresponding HTTP/1 request-line field parsing. (VSV00011, CVE-2022-45060, boo#1205242)- update to 7.2.0: * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``, ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated. * Cookie headers generated by vmod_cookie no longer have a spurious trailing semicolon at the end of the string. This could break VCL relying on the previous incorrect behavior. * The ``SessClose`` and ``BackendClose`` reason ``rx_body``, which previously output ``Failure receiving req.body``, has been rewritten to ``Failure receiving body``. * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a VEXT is loaded by the cache process. Unlike VMODs that have the combined lifetime of all the VCLs that reference them, a VEXT has the lifetime of the cache process itself. There are no built-in extensions so far. * Duration parameters can optionally take a unit, with the same syntax as duration units in VCL. * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body`` from outside client vcl subs now fail properly instead of triggering an assertion failure. * New "B" string for the package branch in ``VCS_String()``. For the 7.2.0 version, it would yield the 7.2 branch. * The new ``vcc_feature`` bits parameter replaces previous ``vcc_*`` boolean parameters. The latter still exist as deprecated aliases. * The ``-k`` option from ``varnishlog`` is now supported by ``varnishncsa``. * New functions ``std.now()`` and ``std.timed_call()`` in vmod_std. * New ``MAIN.shm_bytes`` counter. * A ``req.http.via`` header is set before entering ``vcl_recv``. Via headers are generated using the ``server.identity`` value. It defaults to the host name and can be turned into a pseudonym with the ``varnishd -i`` option. Via headers are appended in both directions, to work with other hops that may advertise themselves. * A ``resp.http.via`` header is no longer overwritten by varnish, but rather appended to. * The ``server.identity`` syntax is now limited to a "token" as defined in the HTTP grammar to be suitable for Via headers. * In ``varnishtest`` a Varnish instance will use its VTC instance name as its instance name (``varnishd -i``) by default for predictable Via headers in test cases. * VMOD and VEXT authors can use functions from ``vnum.h``. * Do not filter pseudo-headers as regular headers. * The termination rules for ``WRK_BgThread()`` were relaxed to allow VMODs to use it. * ``(struct worker).handling`` has been moved to the newly introduced ``struct wrk_vpi`` and replaced by a pointer to it, as well as ``(struct vrt_ctx).handling`` has been replaced by that pointer. ``struct wrk_vpi`` is for state at the interface between VRT and VGC and, in particular, is not const as ``struct vrt_ctx`` aka ``VRT_CTX``. * Panics now contain information about VCL source files and lines. * The ``Begin`` log record has a 4th field for subtasks like ESI sub-requests. * The ``-E`` option for log utilities now works as documented, with any type of sub-task based on the ``Begin[4]`` field. This covers ESI like before, and sub-tasks spawned by VMODs (provided that they log the new field). * No more ``req.http.transfer-encoding`` for ESI sub-requests. * The thread pool reserve is now limited to tasks that can be queued. A backend background fetch is no longer eligible for queueing. It would otherwise slow a grace hit down significantly when thread pools are saturated. * The unused ``fetch_no_thread`` counter was renamed to ``bgfetch_no_thread`` because regular backend fetch tasks are always scheduled. * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``, ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()`` and ``MGT_VCC_FEATURE()`` now return a boolean value (``0`` or ``1``) instead of the (private) flag value. * A regression in the transport code led MAIN.client_req to be incremented for requests coming back from the waiting list, it was fixed. - Delete varnish-5.1.2-add-fallthrough-comments.patch- Make reload fail nicely on vcl syntax error - Set TasksMax=16384 because default thread_pool_max is 5000- Fix varnish.service stop- Fix logrotate - Add service reload- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150] * Resolve a denial of service attack involving reason phrases.- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959] * VCL: It is now possible to assign a BLOB value to a BODY variable, in addition to STRING as before. * VMOD: New STRING strftime(TIME time, STRING format) function for UTC formatting.- Added hardening to systemd service(s) (bsc#1181400). Modified: * varnish.service * varnishlog.service- Update to release 6.6.1 * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]- update to 6.6.0: * The ban_cutoff parameter now refers to the overall length of the ban list, including completed bans, where before only non-completed (“active”) bans were counted towards ban_cutoff. * Body bytes accounting has been fixed to always represent the number of body bytes moved on the wire, exclusive of protocol-specific overhead like HTTP/1 chunked encoding or HTTP/2 framing. * The connection close reason has been fixed to properly report SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported. * Unless the new validate_headers feature is disabled, all newly set headers are now validated to contain only characters allowed by RFC7230. * The filter_re, keep_re and get_re functions from the bundled cookie vmod have been changed to take the VCL_REGEX type. This implies that their regular expression arguments now need to be literal, not e.g. string. * The interface for private pointers in VMODs has been changed, the VRT backend interface has been changed, many filter (VDP/VFP) related signatures have been changed, and the stevedore API has been changed. (Details thereto, see online changelog.)- Update to release 6.5.1 * Bump the VRT_MAJOR_VERSION number defined in the vrt.h- Update to release 6.5.0 * `PRIV_TOP` is now thread-safe to support parallel ESI implementations. * varnishstat's JSON output format (-j option) has been changed. * Behavior for 304-type responses was changed not to update the Content-Encoding response header of the stored object.- Disable LTO, this randomly fails during link stage.- Update Git-Web repository link - Set CFLAGS+=-fcommon.- Update to release 6.4.0 * The MAIN.sess_drop counter is gone. * backend "none" was added for "no backend". * The hash algorithm of the hash director was changed, so backend selection will change once only when upgrading. * It is now possible for VMOD authors to customize the connection pooling of a dynamic backend. * For more, see changes.rst.- Update to release 6.3.2 * Fix a denial of service vulnerability when using the proxy protocol version 2.- Update to release 6.3.0 * The Host: header is folded to lower-case in the builtin_vcl. * Improved performance of shared memory statistics counters. * Synthetic objects created from vcl_backend_error {} now replace existing stale objects as ordinary backend fetches would (for details see changes.rst)- Update to release 6.2.1 * Bugfix for CVE-2019-15892 [boo#1149382]- Add uninit.patch.- Updated to 6.2.0 * Added a thread pool watchdog which will restart the worker process if scheduling tasks onto worker threads appears stuck. The new parameter "thread_pool_watchdog" configures it. - Disabled error for clobbering, which caused bogus error in varnishtest- Put %fillup back into %post- Update to new upstream release 6.0.0 * Added support for Unix Domain Sockets, both for clients and for backend servers. This brings a new level of the VCL language, version 4.1. * Always use HTTP/1.1 on backend connections for pass fetch.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to version 5.1.2: * Fix an endless loop in Backend Polling (#2295) * Fix a Chunked bug in tight workspaces (#2207, #2275) * Fix a bug relating to req.body when on waitinglist (#2266) * Handle EPIPE on broken TCP connections (#2267) * Work around the x86 arch's turbo-double FP format in parameter setup code. (#1875) * Fix race related to backend probe with proxy header (#2278) * Keep VCL temperature consistent between mgt/worker also when worker protests. * A lot of HTTP/2 fixes. - Changes introduced by version 5.1.1: * Fix bug introduced by stubborn old bugger right before release 5.1.0 was cut. - Changes introduced by version 5.1.0: * Added varnishd command-line options -I, -x and -?, and tightened restrictions on permitted combinations of options. * More progress on support for HTTP/2. * Add ``return(fail)`` to almost all VCL subroutines. * Restored the old hit-for-pass, invoked with ``return(pass(DURATION))`` from ``vcl_backend_response``. hit-for-miss remains the default. Added the cache_hitmiss stat, and cache_hitpass only counts the new/old hit-for-pass cases. Restored HitPass to the Varnish log, and added HitMiss. Added the HFP prefix to TTL log entries to log a hit-for-pass duration. * Rolled back the fix for #1206. Client delivery decides solely whether to send a 304 client response, based on client request and response headers. * Added vtest.sh. * Added vxid as a lefthand side for VSL queries. * Added the setenv and write_body commands for Varnish test cases (VTCs). err_shell is deprecated. Also added the operators - cliexpect, -match and -hdrlen, and -reason replaces -msg. Added the ${bad_backend} macro. * varnishtest can be stopped with the TERM, INT and KILL signals, but not with HUP. * The fallback director has now an extra, optional parameter to keep using the current backend until it falls sick. * VMOD shared libraries are now copied to the workdir, to avoid problems when VMODs are updated via packaging systems. * Bump the VRT version to 6.0. * Export more symbols from libvarnishapi.so. * The size of the VSL log is limited to 4G-1b, placing upper bounds on the -l option and the vsl_space and vsm_space parameters. * Added parameters clock_step, thread_pool_reserve and ban_cutoff. * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path and vmod_path instead. * All parameters are defined, even on platforms that don't support them. An unsupported parameter is documented as such in param.show. Setting such a parameter is not an error, but has no effect. * Clarified the interpretations of the + and - operators in VCL with operands of the various data types. * DURATION types may be used in boolean contexts. * INT, DURATION and REAL values can now be negative. * Response codes 1000 or greater may now be set in VCL internally. resp.status is delivered modulo 1000 in client responses. * IP addresses can be compared for equality in VCL. * Introduce the STEVEDORE data type, and the objects storage.SNAME in VCL. Added req.storage and beresp.storage; beresp.storage_hint is deprecated. * Retired the umem stevedore. * req.ttl is deprecated. * Added std.getenv() and std.late_100_continue(). * The fetch_failed stat is incremented for any kind of fetch failure. * Added the stats n_test_gunzip and bans_lurker_obj_killed_cutoff. * Clarified the meanings of the %r, %{X}i and %{X}o formatters in varnishncsa. - Add varnish-5.1.2-add-fallthrough-comments.patch to fix build with GCC 7 (boo#1041259).- BuildRequire python3-docutils instead of python-docutils.- Update to new upstream release 5.0.0 - The varnishd "-u NNN" option, which may be remaining in /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN". * Varnish 5.0 changes some (mostly) internal APIs and adds some major new features over Varnish 4.1. * 5.0 supports jumping from the active VCL's vcl_recv{} to another VCL via a VCL label. * Very Experimental HTTP/2 support * We have added to the "directors" VMOD — an overhauled version of a director which was available as an out-of-tree VMOD under the name VSLP for a couple of years. It is basically a better hash director which uses consistent hashing to provide improved stability of backend node selection when the configuration and/or health state of backends changes. * Hit-For-Pass is now actually Hit-For-Miss * We have made the ban lurker even more efficient by example of some real live situations with tens of thousands of bans using inefficient regular expressions. * The waitinglist logic for ESI subrequests now uses condition variables to trigger immediate continuation of ESI processing when an object being waited for becomes available. * Backend PROXY protocol requests are now supported through the .proxy_header attribute of the backend definition. * VCL files are now also being searched for in /usr/share/varnish/vcl if not found in /etc/varnish. * The basic device detection vcl is now bundled with varnish.- Add "-ffloat-store -fexcess-precision=standard" to CFLAGS when building for ix86, working around bug gcc#323. See also gh#varnish/Varnish-Cache#88.- Update to new upstream release 4.1.2 * vmods: Passing VCL ACL to a vmod is now possible. * vmods: VRT_MINOR_VERSION increase due to new function: VRT_acl_match() * Be stricter when parsing a HTTP request to avoid potential HTTP smuggling attacks against vulnerable backends.- Report testsuite failure to build log and make testsuite nonfatal as there seems to be one swaying test, tests/r01478.vtc.- disable silent rules in spec file. - enable testsuite for varnish.- Update to new upstream release 4.1.1 * Improved security features (jails). * Support for PROXY protocol. * Warm and cold VCL states. * Backends defined through VMODs. * A lot of bugs were fixed. - Delete 0001-Fail-fetch-on-malformed-Content-Length-header.patch, this issue was fixed in upstream. - Add 'su varnish varnish' line to varnish.logrotate file. - Cleanup with spec-cleaner.- Update to new upstream release 4.0.3 * Full support for streaming objects through from the backend on a cache miss. Bytes will be sent to 1..n requesting clients as they come in from the backend server. * Background (re)fetch of expired objects. On a cache miss where a stale copy is available, serve the client the stale copy while fetching an updated copy from the backend in the background. * New varnishlog query language, allowing automatic grouping of requests when debugging ESI or a failed backend request. * Comprehensive request timestamp and byte counters. - Add 0001-Fail-fetch-on-malformed-Content-Length-header.patch [bnc#921316]lamb03 1668074683  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_7.2.17.2.1-bp154.2.9.17.2.1-bp154.2.9.1 varnishcachecache.hcache_backend.hcache_director.hcache_filter.hcache_varnishd.hcommoncommon_param.hminiobj.htblacct_fields_bereq.hacct_fields_req.hbackend_poll.hban_arg_oper.hban_oper.hban_vars.hbereq_flags.hberesp_flags.hboc_state.hbody_status.hcli_cmds.hdebug_bits.hexperimental_bits.hfeature_bits.hh2_error.hh2_frames.hh2_settings.hh2_stream.hhtc.hhttp_headers.hhttp_response.hlocks.hobj_attr.hoc_exp_flags.hoc_flags.hparams.hreq_bereq_flags.hreq_flags.hsess_attr.hsess_close.hsymbol_kind.hvcc_feature_bits.hvcl_returns.hvcl_states.hvhd_fsm.hvhd_fsm_funcs.hvhd_return.hvhp_huffman.hvhp_static.hvrt_stv_var.hvsc_levels.hvsig_list.hvsl_tags.hvsl_tags_http.hwaiters.hvapivapi_options.hvoptget.hvsc.hvsig.hvsl.hvsl_int.hvsm.hvas.hvav.hvbh.hvbm.hvcl.hvcli.hvcs.hvdef.hvmod_abi.hvnum.hvqueue.hvre.hvre_pcre2.hvrnd.hvrt.hvrt_obj.hvsa.hvsb.hvsha256.hvtcp.hvtim.hvtree.hvut.hvut_options.hwaiterwaiter.hlibvarnishapi.sovarnishapi.pcaclocalvarnish-legacy.m4varnish.m4/usr/include//usr/include/varnish//usr/include/varnish/cache//usr/include/varnish/common//usr/include/varnish/tbl//usr/include/varnish/vapi//usr/include/varnish/waiter//usr/lib64//usr/lib64/pkgconfig//usr/share//usr/share/aclocal/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17738/openSUSE_Backports_SLE-15-SP4_Update/6e59398c1b7934f3b51ad5bbaf97f421-varnish.openSUSE_Backports_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryC source, ASCII textASCII textC source, UTF-8 Unicode textpkgconfig fileM4 macro processor script, ASCII textPRf uۍ3utf-8bf1ade26019b0869320af68fbb68e2293a4da27dca6be51459c05bf8cb95f6bc? 7zXZ !t/b5]"k%Cxc9CVKN ϵ&c]4ϛ~V \k_(}6ol i"N-܇,@<|Qm7-.`QWZ)ISf/0c >rM4LU] BƛߛY :1ɸ lR2""Ҧ"^(π}WX޻:TY J4nȷceVJEm 8Ta=&{ν∥sӊPHnjJvD<@Me߱UƋd2} ',GlR2m Qhir}H{%F<ps.o"wR6uc'eA^s/:˩0ន JwS0'9smQXS닄. BukTHWJ_JC?]QNiLA.A9mVU(|`qI^i `Ov@?6o=NvrnyE}YFh|bx(n99Z 1C nT1RUrK`J,{]Pa:9g BtP 4:Xy_.jbk$0/ʾ? bL_C`87% ʼn4H))9Vvݘ d(RtڔvTTK/;rm:P5+649]bv=N{jn(Kȴ>J(nh+*TdDa gpX!Î_79:M_%2Jn; Ŭl1VZ-^ȉn$zGPp؁ӹU# ђ7!/5Rt>-A3}`/ӵ'/cilWUrh;ZKFVM nD\ib+:XoI^u=$#SKF* 4|ӉrOl"ݕQn?ytW?AN2m0Az**A$|ڲ rL`߫pS}tܬG^Uck80fU5@ #B-AmJcXP"?!搻6&8 fsg l)w:un\3kD2G$>Zq!t =ԓzc@3uܧ|AG_.z&yU3{IUsFJL>YRm찣( a*=|S-! LCK|H=x= R&j R6S/&{FAfᇞ&dzH鈦#]5\wIkV-~*~:GV^YH惆b1`^Nw~$6DhC,'8}3=m** =)qϴ РQVg*r A(\:P /ЃV=.7 #~ZJvb1A E%(r{:Ο ^U~^I:T.+Xи78Uf9Х'/v-x&L \5;w`(6.u$k|.f̺<׍shJ|5*cD,  d*M\OYih.$-ո!>/<61)ԃm'LAi13rc6ϳsi҉c'P?Fu2p_Z@P/7GY>F UF[֙0o +SIg ] (xj3&l 5,Ou5/=h6ߢm?7(#%L밹E 0vzzYc4m Riu@o@pU .X5Uy%16Gpwc@ =C1A|L:" TƬ3HO$e9X ,?i+0ڌώX֕؅4eAt=wKU]>ܙj%j9+͊k;qD?xai?*=Gy \w3 _FiGK.<ƫCq/;qҾ Q' *F=l3q]{. ֆu9pXt-?h\g5ݶِjA>hRuSA~ldKuCfFK6qY\ ib',Òm'OUp6hqxS2Z&KUQKuiuXF~_`ѥٜS୰`ohIQIТpVta(6Q@{OF E?#O'LfTRM#ZYo`,D#Wt &;g93 "\Bg*=] Ͻ "RaF}qI䱍38Ntr>T P72<L:x9Uϼ>K*ޠҵ}V"X-cS\0YF^qF\iHA*A| +~dv SA;H[0A&|:u޸,4[y [s&ͱ$._Չ $ph hqՉ2> (s־ 'R9{ˣG+AHq[dՓnZy|[Ug-vИ%dU/0M6nU OuwCtZ$X*zaV;yeM5NAл>"6};E N[딮:VLp`L:\554_ԯŁh#gxP.[ "a|S^>guwOWF8 q_S$gqQ5}Xy;”7e \Չ,8Q`Ck{2YxcuMs-B!f(_%/M/mqC);ޚBsd'pL-;.#")xrAp'ZڜQ Q[aC{/)n/ڭmv{al8U֙A(ڜHJY E6FOd,RZ=󃄹 34"٩N" ]:e` eJvlE }ȱ U 0Fq9}qdxrR(3ov3!% 63Nko+ a*Hq׃d3^uH9ϣ?\]Z.=M[Rr_J sV %Cψr!qU9N {eYu{G}B`<a ^ 8 z}m۠ݓw\1pA͌w:Mb0KWx700^G{c %8׌z|R"ɥwRM˖sUaҩ9Gv3qFlh 7Y"e0V~El4 mͩpU|h@z[aVA 6':&Q{O"w1' kQ!Lܤ}٨*]&P6Hϧ ⾜q'YN_'~r͠ Nݬ8q9g]v r4=8ebO!2$>_@^}. \n[;<l+̀~&A`d^dy=JӶ/1Fkj.L 1Ḧ́LǚLC~ IIɓM.Q-FMVOx>D[!4hm/ #=n2Hx}`f t4i0رf:2STrVMɈ!x,{r"AӍ7 $4 =W9N]D=^rWs:W/Be=2c(0UDܹT$/cp$KGTU.~Z]k7zd: 3s%J^>LY{u&-eJ n!Z v$[Aw943[e<0|Pck~VSf~j4/WQ.Ur<6M$3@mdİRQxQ`Z Tua/W Q'UOo~̋,z9b-;KbAXuзpӣod(zC5({ c}oM1Za9`-EU?<׵Tz$l)WtZ _jI]up4^$1#SXDM |_v}\aQ9$KcԅMB^$YE}?jtK-*dN$ U* CeC# 僫 [~m/@cNW30=&+{`0wmy„}Q5d:`ccV ƾ5NQ%f\) $"#vvo)`S[+y̮<=kTlWV@ i9ɧWLrZuQpXzַ-x=dRL)`ڎ6@h].fݦSK"&~r)[3ֻ\ŅZ|aw＀K9$`e)#}v7m ׇxix VrE 8H }7 *nYH֏-E46 2-p *N/Cաaue^bA+Bq|=25IN]*D1a>zфIҩItE jJX%zw|M O0-4jq\?8k.I ZFDF 0Y(O0&.J\HgH>p9cKm_["l yȧr][`s[ Hl4n`4Q7e4@ 1Gn7WӁ!]tŀZuwfי< >]"r) xb{ux),n$٤vF.piMCߑzҧ6XYh6~D| j\I_eQ=ZCxI[Բjw4yj{J)f,m9M}/g1}WBmsffͤ|x}zrL)#ר i)GyqcZ~>̷ȃy4P[\B{n1@:q:lS K;r`3U^m}^ݦ,:d RЩXNI(%K/pUgH/ !Y?|VSq1E*l¥NGغumo+.Du ?԰؛أ:XzN!GtlO/ed= i.! _3Tҳ_L((0tIzl̲kM8lXV!. j'™Te`u,%[6;PZq%-6~Zg*wM\T+Iz E.ҽ'sf9i^[ B&lK!Cx+H`_ Tm/aMQVhӗ ?0gq6#D|`S@EC]Bp*'̑JhC&BFv jʼn NјuehkKJ*wJcQ b͡e?rrxV譡(Í_vɕ#'z~@i6j P'j@~w|>ŒŻV.FCs>#ݒ~ AtWC,)#xCˏmi&E I"PG?11W*9qCmL:5қ(=S#(cbzs貿@S6|N/5TQȎ"LXh^L .v=Pd =O L(9I"pB!AnIEI,̎9ΠQP#.f˵ `pk1縚d)ͻ\_'" r)xϮ1o'tx Ԡ װ#Dd`[Ы%ZvT*p̝UlBLrԋ&$tUAY$:9/XuN{].>u e4A<2 i 58bShl"Zd fQ {Xzs\<;, T>yE<~(HV2%TL!˘,W]CO֭dqB[Q/nAPݚB_EuȬreOZN1~CRC%'$2e,j[oT*_ȅR35T^juWP? 9 *;9ן@δ*]{n2e9:9;2>ؑ8c^3$.bŁ *WU黵n|}gbFJueNߊ1-AP&v}1ya&h\[Ku&fEN l\zneʿt9̱CTfOҁ [K bz iHx`7;'mFl,JJ[3ǍLA}n\PL5#!1cRgHR3!rsywAmV ɾ#'XzZO0s% =ӟ́؃`D1+^C0pբ1k5A"y>mԱ80z'cZ˲^OP, Urce&ʬX#<);UaL:wzx3%n埛ب*:s%  Ele{V0W"gy_5vxt2-6_kh 7/P.\/؏I?tLd.#zi+/TEYv`]P;1#7W#vlSWr tb5_H 2(]˼q6e]Jz70 -~&腄M "/ T?Co?jcvBv?fqZwl6Mlr ^+p)?,p\2>ߟ`sW.Ypr!e==izORu@w %Xqjx??%o'M#_Et3 hIRD# -8Kt/։Wȁ;16`9* K]ۚ,1dVp+&iaƜh ;ְ׈GJ ;uZTrpO]>Äq2C7+q\ 'T9R|LGgirNkxxX~/C {quO'K'xg6 ژk1 |hP{/X$_0n eV!Q\3Ȁ)1\ۓ 'bئgZbP fԶVY5?PY5 Du%X C 1T NWэM{&jڥpt־P8)0h.}GDR?n+ ,(0j=$TG[0o9R aHmvUfsp~s(vy;eA)[_ZҾ8>VރbHC0OMbꂪGB%` t1l*@p4 7oR5oS-I1]6iudG,w&/uR`ZB# SdEBSm5gf{P]Sͭ .:Cɥ%&{ב4sL9dqCS< BHz#FâJ.G'2to-r>S̠;&.ť"Jg.廹÷#ˋNUmM7;Y{A+ Xebs*<r-A|̲NkDD 4 YZ