libavahi-core7-0.8-150600.15.3.1<>,vfygp9|U/ߦz<~bwMgȥl2rQY)J글P'jйZ/ d>S 89v4H vDaH낋PD,A_9? %n|IwW%$cg W!5!ٱՉ{ @b@%;jyXv$HiRJR6O[0G_~srq7?I eZ~$'b_\Qy1Z2nv)ׁT ܬ-RWm׀7<>@V?Vd # J  2CZ`hp t x    d("8,E9@E: 3E>SS@SbFSqGSHSISXSYS\S]S^TbTcTdU7eU<fU?lUAuUTvU\wUxUyU zV V0V4V:V|Clibavahi-core70.8150600.15.3.1D-Bus Service for Zeroconf and BonjourAvahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zeroconf Computing.fygh04-ch1cwSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttps://www.avahi.org/linuxx86_64wfyafyee1f588b5bb0400ddbee71a10a68e5963f8ac79f45c7a80e218e29be532a4702dlibavahi-core.so.7.1.0rootrootrootrootavahi-0.8-150600.15.3.1.src.rpmlibavahi-core.so.7()(64bit)libavahi-core7libavahi-core7(x86-64)@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ftehy@ede_>e]@eReB=e:Te d5Kd5KcR@cc@c@bmbY^@b!b8b @a@aZ@aav@an@aC1a@``r`~@`+`#`_O@_L@_+_$_"@_^^6^,-^@]^]QT];\@\6\/JZZZZZ@Z@Z@Y0Y-^XBW@Wk@Wk@W>@W@V@V$@VZUoT@mgorse@suse.comalynx.zhou@suse.comdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgalynx.zhou@suse.comxiaoguang.wang@suse.comlnussel@suse.combjorn.lie@gmail.commgorse@suse.comdimstar@opensuse.orgkukuk@suse.comjsegitz@suse.comandreas.stieger@gmx.degmbr3@opensuse.orgjengelh@inai.dedmueller@suse.comdmueller@suse.commgorse@suse.comgmbr3@opensuse.orgmgorse@suse.commgorse@suse.comyfjiang@suse.comdimstar@opensuse.orgsbrabec@suse.comyfjiang@suse.commgorse@suse.comchristophe@krop.frmgorse@suse.commgorse@suse.comjengelh@inai.decode@bnavigator.dealarrosa@suse.comalarrosa@suse.comjengelh@inai.demgorse@suse.comdimstar@opensuse.orgmgorse@suse.comtchvatal@suse.comkukuk@suse.comdimstar@opensuse.orgmliska@suse.czjengelh@inai.debjorn.lie@gmail.commatthias.gerstner@suse.comdimstar@opensuse.orgjengelh@inai.demgorse@suse.comtchvatal@suse.commgorse@suse.comjengelh@inai.dedimstar@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgrbrown@suse.comjengelh@inai.dedimstar@opensuse.orgdimstar@opensuse.orgmgorse@suse.comdimstar@opensuse.orgmgorse@suse.comalarrosa@suse.commgorse@suse.comdimstar@opensuse.orgzaitor@opensuse.orgmgorse@suse.comdimstar@opensuse.orgdimstar@opensuse.org- Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). - Add avahi-filter-bogus-services.patch: no longer supply bogus services to callbacks (bsc#1226586).- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in avahi_rdata_parse (bsc#1216853, CVE-2023-38472).- Reformat avahi-gacdir.patch to apply as patch -p1. - Use %autopatch instead of deprecated %patchN format.- avahi-autoipd: drop the post script part migrating the user owning files in /var/lib/avahi-autoipd: the code was aiding migrations from SLE<=11/openSUSE<=12.3, which are no longer in scope for upgrades nowadays.- avahi-autoipd: guard %post chown with -h, to not follow symlinks (boo#1217398).- avahi-autoipd: only migrate files owned by avahi user if said user exists: if the user does not exist (fresh installs), then there is no chance any file is owned by the user (boo#1216730).- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470).- Add avahi-CVE-2023-38473.patch: derive alternative host name from its unescaped version (bsc#1216419 CVE-2023-38473).- Don't require sudo. There is no indication it's actually used for anything.- Use ldconfig_scriptlets macro.- Add avahi-CVE-2023-1981.patch: emit error if requested service is not found (boo#1210328 CVE-2023-1981).- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts: they are not used, or supported, in a while already.- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch and avahi-daemon.if-up Doesn't work since about 9 years and will not be executed on a fresh default installation anymore- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_avahi-daemon.service.patch * harden_avahi-dnsconfd.service.patch- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E (boo#1203092)- Move the dbus-1 system.d file to /usr (bsc#1201345)- Stop requiring "avahi" from "libavahi-devel". The devel package ought to facilitate building programs with avahi, not run the whole deamon.- switch to use _multibuild - delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete - use https urls- remove avahi-mono* subspecfiles, they are no longer required by anything. this makes the spec file slightly more readable.- Replace avahi-0.6.31-systemd-order.patch with avahi-add-resolv-conf-to-inotify.patch: re-read configuration when resolv.conf changes, per discussion on the bug (boo#1194561).- Change to systemd-sysusers- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561). This can probably go away if/when gh#lathiat/avahi#118 is fixed. - Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should no longer need this given the above patch. - Add several patches from git: 0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch 0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch 0006-man-add-missing-bshell.1-symlink.patch 0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch 0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch - Build manpages with xmltoman. Currently needed for bssh. - Minor spec file clean-up. - Require python-rpm-macros for all builds (boo#1194744 boo#1194745).- Move sftp-ssh and ssh services to the doc directory. They allow a host's up/down status to be easily discovered and should not be enabled by default (boo#1179060).- Change %python38_version_nodots to %suse_version which is compatible with Leap and SLE. See also: https://github.com/openSUSE/python-rpm-macros/issues/107- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd (boo#1191750).- Remove obsolete translation-update-upstream support (jsc#SLE-21105).- Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec.- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes (boo#1184846 CVE-2021-3502).- Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn't require the library it's pointing to.- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling HUP event in client_work (boo#1184521 CVE-2021-3468). https://github.com/lathiat/avahi/pull/330- Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on ifconfig, route, and init.d. - Rebase avahi-daemon-check-dns-suse.patch, and drop privileges when invoking avahi-daemon-check-dns.sh (boo#1180827 CVE-2021-26720). - Add sudo to requires: used to drop privileges.- Drop configure --libexecdir variable as it does not appear to be used by the source archive.- Build python bindings subpackages for all flavors * use the python-rpm-macros singlespec system: The macro %python_subpackages together with %python_subpackage_only creates the pythonXY-avahi bindings package for all python flavors on Tumbleweed (currently python36, python38) * Put the avahi-bookmarks command under updates-alternatives control to avoid package conflicts between flavors * outside of build_core, the build continues to use but not install everything in the primary python3 flavor. * For distros without multiple python3 flavors and/or older python-rpm-macros, the status quo is unchanged.- Use sover variables all over the spec file- Update to version 0.8: + The Avahi 0.8 release brings a number of new features and bug fix changes including a backward-compatible addition to the D-Bus API and the avahi-core API. + The existing API is still fully supported however clients using the new API will not work with older Avahi releases. The avahi-client library is not affected. See the "API Changes" section for further details. + New Features: - New options for filtering reflected queries between networks (reflect-filter) - New mainloop integration for Qt5 and libevent - docs/THREADS: Information for multi-threaded avahi-client apps - Listen on loopback interfaces by default, allowing local-only services to be consumed by the local machine - New D-Bus V2 API and additions to the avahi-core API for splitting "New" calls into "Prepare" and "Start". See "API Changes" for more details. + Notable Changes: - avahi-autoipd: Initial IP selection based on MAC previously ignored first octet - this will cause all hosts to select a different link-local IP than previous versions based on the same MAC address - avahi-daemon: Delay sending results on an object for 10ms in an attempt to give clients enough time to subscribe to signals from the new object after receiving it's path in response so the New call. See "API Changes" for more info + Bug Fixes: - avahi-python: Various Python 3 enhancements including encoding unicode strings as UTF-8 - avahi-common: avahi_string_list_to_string will now escape embedded quotes, backslashes and control characters. - avahi-daemon: Fix a crash when txt records have an empty value in .xml service files - avahi-daemon: reflector: do not incorrectly cache responses on outgoing interfaces. Previously we would incorrectly cache responses reflected from one interface on the outgoing interface. These responses were later sent to clients on that network even if the original client had disappeared and could cause those clients to have a hostname conflict with themselves on restart. We no longer incorrectly cache such traffic. + Security Fixes: - Drop legacy unicast queries from address not on local link which can lead to UDP traffic amplification attacks (CVE-2017-6519) + API Changes: The avahi-core API and D-Bus API have implemented a new API where a call to the "New" method can now be split into a "Prepare" and then "Start" method for some objects. The previous "New" API is still fully supported and there is no intention to deprecate it. This change affects the the following objects: AsyncAddressResolver, AsyncHostNameResolver, AsyncServiceResolver, DomainBrowser, RecordBrowser, ServiceBrowser, ServiceTypeBrowser This is because the D-Bus implementation in some languages would only bind to signals of an object after it was created and had received the new object's path. This led to such languages missing the initial results sent between the time the object was created and it had setup a filter to receive it's signals. This primarily occured in languages that create dynamic bindings for D-Bus objects using introspection such as Python. The avahi-client C api was not affected as it globally binds to all avahi signals without specifying individual object paths and still makes use of the V1 API. The v2 Prepare/Start API is available under the new org.freedesktop.Avahi.Server2 D-Bus interface and also has corresponding avahi_s_* calls for users of the embedded avahi-core library. The old org.freedesktop.Avahi.Server interface is still supported and there is no intention to remove this API. Additionally this problem has also been solved for old clients by adding a very small 10ms delay before we start sending results to give the client time to bind to the signals which should silently fix the issue in most cases without introducing a noticable or impactful delay. Clients implementing the new org.freedesktop.Avahi.Server2 D-Bus interface will not work with older Avahi daemons. It is suggested that clients may wish to either check for and fallback to the older API version, or continue to use the OLD API and rely on the 10ms timer to resolve the issue. - This release is backwards compatible with Avahi 0.6.x and 0.7. - Add qt5 bindings in a separate package - Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize can be used: * add-IT_PROG_INTLTOOL.patch - Add file missing from the tarball: * build-db - Rebase patch: * avahi-desktop.patch - Drop patches already included by upstream: * avahi-0.7-dbm.patch * avahi-0.7-encode-strings-as-utf8.patch * avahi-0.7-python3-bookmarks.patch * CVE-2018-1000845.patch- Skip the xargs dance and just use find directly.- Pass -print0 to find, to match -r0 being passed to xargs.- Call xargs -r0 instead of just xargs -r: guard against file names with whitespaces.- When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits (bsc#1154063).- Do not pull in dbus-1-python which is py2 variant but properly pull in the python3 package- Require shadow instead of pwdutils: pwdutils has been absorbed and replaced by shadow long ago.- No longer recommend -lang: supplements are in use.- Use %make_build.- Trim descriptions of secondary packages.- Drop gtk2-devel and python-gtk-devel BuildRequires: No longer build gtk2 support. Following this, pass --disable-gtk to configure. Drop sub-package libavahi-ui0, no longer built. - Drop long disabled sub-packages libavahi-qt4-1 and libavahi-qt4-devel.- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Drop -Qt4 variant: Qt4 is EOL.- Remove %if..%endif guards that do not affect the build result. - Write "D-BUS" per its own name, "D-Bus". - Replace FIXME PreReq with proper requires as needed. - Update boilerplate summaries, and remove em dash grammar.- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use what is upstream (boo#1110668). - Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as UTF-8 (boo#1110668). - Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3 compatible (boo#1110668). - Add CVE-2018-1000845.patch: drop legacy unicast queries from address not on local link (boo#1120281 CVE-2018-1000845). - Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.- Drop the qt3 parts- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402). - Build python bindings against python 3, rather than python 2; - Python-avahi is now python3-avahi, and python-avahi-gtk is now python3-avahi-gtk - Obsolete the python 2 packages - Replace python_sitelib with python3_sitelib in %files, and add __pycache__.- Rename %*soname to %*sover to better reflect its use.- Modernize spec file by calling spec-cleaner- Use SPDX3.0 license tags and package COPYING as %license.- Update to version 0.7: + The Avahi 0.7 release brings two new features, binary TXT records in XML service files and the ability to start the gobject client in a custom context. + New Features: - Add support for binary values in TXT records in XML service files by specifying value-format="text|binary-hex|binary-base64". If not specified, defaults to the normal value of "text" (thus backwards compatible). - avahi-gobject: Allow starting the client in a custom GMainContext by passing context to ga_client_start_in_context instead of ga_client_start (avahi-gobject minor version has been incremented). + Notable Changes: - avahi-daemon: Remove all default rlimits from avahi-daemon.conf, as two main problems happened with firstly rlimit-nproc causing avahi to fail when started in a container without user namespaces and secondly because memory rlimits were causing avahi to crash in some cases. Leave it up to the init system to impose any modified limits instead. It is recommend to ship this change in distribution default config files. - avahi-common: Fix watch cleanup issue in watch_free - avahi-discover (python): Updated for Python3 & GTK3 - avahi-autoipd: . Clear previously set address before binding a new one. . Fix dhclient hooks to check for avahi-autoipd before running. - build: Move default rundir from /var/run to /run as per modern system setups. + Other Changes: - build: . Fix the printed value of "Building libavahi-client" in ./configure. . autogen.sh improved to work when called from another directory. . Fix warnings when compiling against musl libc. - avahi-compat-libdns_sd: Fix incorrect URL in warnings. - service-type-database: Add new service Types: _ipps._tcp, _xpra._tcp. - avahi-dnsconfd: Update manpage with the correct action script name. - avahi-gobject: . Use the correct shared library name in AvahiCore-0.6.gir . Fix build failing under some locales. - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon. - Update gentoo init scripts for newer openrc version. + Updated translations. - Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch, avahi-move-everything-to-run.patch and avahi-outdated-URL.patch: Fixed upstream. - Drop systemd_requires macro: on a machine managed by systemd, we don't have to require it. If the machine/container is not managed by systemd, we don't want to require it. - Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Do not suppress errors from avahi-autoipd user creation, but do suppress getent output. - Replace $RPM_* shell vars by macros.- Modify user generation (boo#1010384): + Use getent to check for existing users/groups, only creating them if not found. + Do not hide output of groupadd/useradd. + Do not mask failures: if a user can't be added, we have a problem.- Drop %insserv_cleanup scriptlets: it's been a while that avahi did not install any sysV init scripts anymore. - Simplify avahi_spec-prepare.sh: OBS is well able to handle macros in package names by now. - Drop conditions to only handle systemd services on openSUSE > 12.1; it's been long that we did not ship the sysv scripts anymore and openSUSE 12.1 is long EOL.- Replace avahi-0.6.31-systemd-order.patch with avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn on missing resolv.conf if the options that use it are enabled. https://github.com/lathiat/avahi/pull/63- Update to version 0.6.32: + Don't log warnings about invalid packets, commonly triggered by Windows 10 systems. + Fix issue with bad packet size estimation, causing probes to continuously be sent when hosting large numbers of services. + Fix build on Solaris/SmartOS (filio.h issue). + Fix build on FreeBSD (PCAP_D_IN issue). + Fix debug output with libdaemon >= 0.14. + avahi_server_set_browse_domains now correctly uses the provided list, instead of re-using the list from the configuration file. + Set nl_pid to 0, this will automatically assign the value and prevent conflicts per netlink(7). (Bug #334). + Check for netlink pid=0 (kernel) instead of uid=0, which works correctly with network & user namespaces. + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355). + Don't fail the build on deprecated GTK/GLIB usage. + Gracefully fail if SO_REUSEPORT is not available. + Minor Python 3 update for the python ServiceTypeDatabase test usage of print, should be backwards compatible. + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42). - Drop upstream fixed patches: + avahi-unicastdomains.patch + avahi-gtk_box_new.patch + avahi-fix-mkdir.diff + avahi-enable-ipv6.patch + avahi-reserve-space-for-record-data-when-size-e.patch - Rebase avahi-0.6.31-invalid-packet.patch.- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).- Update to GNOME 3.20.2 (Fate#318572) - Added License field in spec file.- Update to GNOME 3.20 Fate#318572- No longer install sysv services: the systemd services have been installed for a long time already and are masking the sysv scripts; those scripts existance only add confusion (boo#959908).- Temp disable 2 old Conflicts that are breaking staging. These can back in once there is a new release of avahi.- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for invalid packets (boo#947140 bsc#948277).- Sync up the multiple .spec files.- Add avahi-outdated-URL.patch: Do not redirect users to , which no longer exists, but bring them to the more generic blog entry http://0pointer.de/blog/projects/avahi-compat.html (boo#914298)./sbin/ldconfig/sbin/ldconfigh04-ch1c 17192065030.8-150600.15.3.10.8-150600.15.3.1libavahi-core.so.7libavahi-core.so.7.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34466/SUSE_SLE-15-SP6_Update/15082fe1f3a98575d225c590bfb65560-avahi.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=776e84d50d19b59f88da8703788af811c9961a60, stripped PRRR RRRRRӚJL>butf-8dce1ae10b6e907031636daa30f7a392aab17e39323b71b0d3c0cdde6e83c4d9e?7zXZ !t/,d]"k%]do4F)A'yۓgI=Cs9֟Z2i1$S^ _=5"2ջ t:w|7Be5b[ ¿+ R8Ei_/BYLW'^ ?;Q ۩qԤM%E>\^Ǹ4ipWymb36eL -WK,L 6֘ڋ풘A0 ~~VzbA\I>w~oufHH 'd`5s"{j:38ɾlTagZ*` O0 Si|unS{!;kpd# z{֔+16A|):jt`Я}ërٽGP[Z_(2xOMktR|s/9f=^O!eNx^[N55yi5zȇ~аOC1K!_wMG]llFT-^*mhd0}u[E5[2qQ!Jh"Om&|J0 xvx tcE"SVGѽ Uzwg,]{*!>yC2PGM\gT敥 +JIS/3׶ExR:lifΧu&Z7a}D"%A`wgD41Qm撑ʬeXA4AxSҪ4_ WHoR+p֪pg4 -@6E J$-AdJʣ*c1"o=/`t2=p̰9QsBKS pҖSBpHERrvaS~!;NbW'041 uq]wʯJ\'!*TL(aOd˞k=CiXQEI?5|̺q\&$kDOBӡ5I$=0dI^UKܓbL&b3k0>M"n@x;75mRAVtŤf˞[`+"uGw?H\w< шwOCxQPshYQ^BuL ՜>օ_ rB%>\*Qdc㌒d v߁bA6:YzNM 61rW VވFL=oVtGpcTٞdU{3mɾFn~e <:0mAj g?p3ۭƿy{]JFF'\ρmıѦg;w- +9"7cLW2_!u<àC("+[=&YWޛz7]z/ܤCS9(FD'׎QZPB?`"jb_w@O=q#=c'7{N`%Ҧ??0B;<4MN럫1N/[W"^_6G999rUA {ըaȅ7IM{.''f7K6a&+8FEzsBn$k ճ&jsHҵT8VjROr4 cfC`)hXX4z d-VW!iF1r l]}(Ae ݄*e!VG?-'^ /7)3G֧]/>LG06ys$v uWf7(j .%BZk6j  j>Fp2dchrf >dLF4+N>Rfj1w#i[F:.1EשȈ1NŚ(Nm+'eFSPxWll??߲e0{71r+}ZˢZQcGZ<|Ɵd_{خ-_gm&\:  II/y늩 v[@&HƟ>lGą?AU xuY-\O?cٵIQ=Gu& S!7bOԀIl e/Q*3L=Yg΂Յf@m^~cT.p]W $S,8:31"e>RAuV|G͒GƼy06>YzO4À3GvK'jjP/;[Sf*YPr/=.}Lv2P$ YEK.G6PZSl"\wEuK= fBi *:-rMq9߳7pڊxjwQ@B񈫁ʼnO97sM ai$fkd%h63o2jFۿr UyuTve^!j2F;y| A#R@gsvS]D^;]'JxǺ vl7ƐMCŮ[[!YUJ!=EϭrD9UcЖJ^JvH1[ kޔQ ]).g;)_W `o^={|& ʮAWGtbjv 2a&0.d]Pn\.ӱ"nZ{$jFWV&(γa~95XuZ־ҋV io hNW#}$r`><+V  H$׋]RDKq##FRIחUx3 9)Ybacư8|,9)uU-l&>ic)h> DW` ;1_:qMoUroڹ#.T/?g`rf(`xx_m3XWΏLK dIk mS'S%CJr,&ܧ$:VD"9F޳huwcuFQ/QDaS(@j+"^r0z >!s%Vwn^ X}TsYF ߫p7|oV!W7ȊB @CՊ3+]R7CK:IJ<lp%.*Gs֑WByWy֍U罐_2 & xO8;Q'W%dWۮ{w Z8UO@_avʳ=J*lk ~'3^a׼2\)Bh-Zy(Gʯq-'+A1CN`{ =NDOKt:X%p*442 ] ݔy3v"uQ9S' pKi,O]I-Vsxƙ˅VKXtII*'lH's_g+ ]Àa UQ~vz| v!06UIs Kp-j=6<`pQ / a*l[dچ'@M O.uE%q2}KϴR|Rp}DynrM=XS=EP_e7x".j!4u 1yZ#ї D-|W |ͮmVRF-;\^9ES'WlPCٶs}ʂHuMGף6; Q l0(LakJu.Tc qmEΞy60~]e@ɤW͂j6g ~|e۱2q2g/ixOL! ~jN9)0jJ`2=>9tI0gRͳM{Y-^<"1҄2C&G,rw(B⭠2p@zbZAIjU + e}IoHj-pvj6~ؔOuPs0AD 3~4'YǤ|sqI@baŕD&X5WzFż|CGEh,nץM㓚G&jqɱ6Lȍ'0Rzqgւ,ݞչ B`J}5L?x$()-6 3jls^,}W^J,P:<+bGx{!/—#xM ̀TOr 0| .̘b}2Gˈk1F ~SlTqA/gp;FG*i0r cw{CJ* 9'ثefZSس|Й ˁ8}ۚ_{mv\U܋Eq(E$co?UQfN#KRISuT &*2,W4̘SbXmmxWH=Wަ!ZF"<Vv7ޕT78XA$fLvHTZ*iWeԥT# ddF(9W!f9^8JgZ2\ďJ{O跙g,]$o$ft) 2V"гe#)}$I./?|}