krb5-plugin-preauth-pkinit-1.7-6.1>t  DH`pJܹ츋/=„xg:IriLH2dCѶ!(b I>ϭs+KIkHPx6lkq7 @KV$ F_Mv hRyH&4u-.bܿ1l(hc3AKӐ, ~sv#=aꖭKS)(3 VN4}J=6x^s vk"Bef5fc84abe556525273781a59824180bf4314416d02~Jܹ츋/=„XxL{H~BM}V>NӨtorD+/TFX݌vj$m$72+M'`)nOG9#`ȶm?y]h!-[X>5,?,d! % Y 6W]dt |      (8797: 87F+G+H+(I+8X+<Y+T\+h]+x^+b+c,ad,e,f,l,z,Ckrb5-plugin-preauth-pkinit1.76.1MIT Kerberos5 Implementation--PKINIT preauth PluginKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. This package includes a PKINIT plugin. Authors: -------- The MIT Kerberos Team Sam Hartman Ken Raeburn Tom Yu Jܹbuild20openSUSE 11.2openSUSEMIT License (or similar)http://bugs.opensuse.orgProductivity/Networking/Securityhttp://web.mit.edu/kerberos/www/linuxx86_64AAAJܹJܹJܹJܹedc508ab485dd214ce26ae3b765746a4rootrootrootrootrootrootrootrootkrb5-1.7-6.1.src.rpmpkinit.so.0()(64bit)pkinit.so.0(HIDDEN)(64bit)pkinit.so.0(pkinit.so.0)(64bit)pkinit.so.0(pkinit_0_MIT)(64bit)krb5-plugin-preauth-pkinitkrb5-plugin-preauth-pkinit(x86-64)  @@@@@@@@@@@@@ rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libcrypto.so.0.9.8()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.7.1JY@J&eJ @IU@ImIAI?@I HHH@HXH*@G@GGhGbp@GUA@G0W@G@FwF@FFޚ@F^FF@FFq-Fm9@FAF9F,F&@F#e@FF @E@E݅Eّ@Eb@EEE@E@E@EI@EO#EAEDDq@D+@DĶ@Dcoolo@novell.commc@suse.demc@suse.demc@suse.deolh@suse.demc@suse.deolh@suse.deolh@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.dero@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.desschober@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.de- readd lost baselibs.conf- update to final 1.7 release- update to version 1.7 Beta2 * Incremental propagation support for the KDC database. * Flexible Authentication Secure Tunneling (FAST), a preauthentiation framework that can protect the AS exchange from dictionary attack. * Implement client and KDC support for GSS_C_DELEG_POLICY_FLAG, which allows a GSS application to request credential delegation only if permitted by KDC policy. * Fix CVE-2009-0844, CVE-2009-0845, CVE-2009-0846, CVE-2009-0847 -- various vulnerabilities in SPNEGO and ASN.1 code.- update to pre 1.7 version * Remove support for version 4 of the Kerberos protocol (krb4). * New libdefaults configuration variable "allow_weak_crypto". * Client library now follows client principal referrals, for compatibility with Windows. * KDC can issue realm referrals for service principals based on domain names. * Encryption algorithm negotiation (RFC 4537). * In the replay cache, use a hash over the complete ciphertext to avoid false-positive replay indications. * Microsoft GSS_WrapEX, implemented using the gss_iov API, which is similar to the equivalent SSPI functionality. * DCE RPC, including three-leg GSS context setup and unencapsulated GSS tokens. * NTLM recognition support in GSS-API, to facilitate dropping in an NTLM implementation. * KDC support for principal aliases, if the back end supports them. * Microsoft set/change password (RFC 3244) protocol in kadmind. * Master key rollover support.- obsolete also old heimdal-lib-XXbit and heimdal-devel-XXbit- do not query IPv6 addresses if no IPv6 address exists on this host [bnc#449143]- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293)- obsolete old -XXbit packages (bnc#437293)- in case we use ldap as database backend, ldap should be started before krb5kdc- add new fixes to post 1.6.3 patch * fix mem leak in krb5_gss_accept_sec_context() * keep minor_status * kadm5_decrypt_key: A ktype of -1 is documented as meaning "to be ignored" * Reject socket fds > FD_SETSIZE- add patches from SVN post 1.6.3 * krb5_string_to_keysalts: Fix an infinite loop * fix some mutex issues * better recovery from corrupt rcache files * some more small fixes- add case-insensitive.dif (FATE#300771) - minor fixes for ktutil man page - reduce rpmlint warnings- Fall back to TCP on kdc-unresolvable/unreachable errors. - restore valid sequence number before generating requests (fix changing passwords in mixed ipv4/ipv6 enviroments)- added baselibs.conf file to build xxbit packages for multilib support- modify krb5-config to not output rpath and cflags in --libs (bnc#378270)- fix two security bugs: * MITKRB5-SA-2008-001(CVE-2008-0062, CVE-2008-0063) fix double free [bnc#361373] * MITKRB5-SA-2008-002(CVE-2008-0947, CVE-2008-0948) Memory corruption while too many open file descriptors [bnc#363151] - change default config file. Comment out the examples.- fix several security bugs: * CVE-2007-5894 apparent uninit length * CVE-2007-5902 integer overflow * CVE-2007-5971 free of non-heap pointer and double-free * CVE-2007-5972 double fclose() [#346745, #346748, #346746, #346749, #346747]- improve GSSAPI error messages- add coreutils to PreReq- update to krb5 version 1.6.3 * fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow * fix CVE-2007-4000 modify_policy vulnerability * Add PKINIT support - remove patches which are upstream now - enhance init scripts and xinetd profiles- update krb5-1.6.2-post.dif * If a KDC returns KDC_ERR_SVC_UNAVAILABLE, it appears that that the client library will not failover to the next KDC. [#310540]- update krb5-1.6.2-post.dif * new -S sname option for kvno * read_entropy_from_device on partial read will not fill buffer * Bail out if encoded "ticket" doesn't decode correctly. * patch for referrals loop- fix a problem with the originally published patch for MITKRB5-SA-2007-006 - CVE-2007-3999 [#302377]- fix execute arbitrary code (MITKRB5-SA-2007-006 - CVE-2007-3999,2007-4000) [#302377]- add krb5-1.6.2-post.dif * during the referrals loop, check to see if the session key enctype of a returned credential for the final service is among the enctypes explicitly selected by the application, and retry with old_use_conf_ktypes if it is not. * If mkstemp() is available, the new ccache file gets created but the subsequent open(O_CREAT|O_EXCL) call fails because the file was already created by mkstemp(). Apply patch from Apple to keep the file descriptor open.- update to version 1.6.2 - remove krb5-1.6.1-post.dif all fixes are included in this release- change requires to libcom_err-devel- update krb5-1.6.1-post.dif * fix leak in krb5_walk_realm_tree * rd_req_decoded needs to deal with referral realms * fix buffer overflow in kadmind (MITKRB5-SA-2007-005 - CVE-2007-2798) [#278689] * fix kadmind code execution bug (MITKRB5-SA-2007-004 - CVE-2007-2442 - CVE-2007-2443) [#271191]- fix unstripped-binary-or-object rpmlint warning- fixing rpmlint warnings and errors: * merged logrotate scripts kadmin and krb5kdc into a single file krb5-server. * moved heimdal2mit-DumpConvert.pl and simple_convert_krb5conf.pl from /usr/share/doc/packages/krb5 to /usr/lib/mit/helper. adapted krb5.spec and README.ConvertHeimdalMIT accordingly. * added surpression filter for "devel-file-in-non-devel-package /usr/lib/libgssapi_krb5.so" (see [#147912]). * set default runlevel of init scripts in chkconfig line to 3 and 5- fix uninitialized salt length - add extra check for keytab file- adding krb5-1.6.1-post.dif * fix segfault in krb5_get_init_creds_password * remove debug output in ftp client * profile stores empty string values without double quotes- update to final 1.6.1 version- add plugin directories to main package- update to version 1.6.1 Beta1 - remove obsolete patches (krb5-1.6-post.dif, krb5-1.6-patchlevel.dif) - rework compile_pie patch- update krb5-1.6-post.dif * fix kadmind stack overflow in krb5_klog_syslog (MITKRB5-SA-2007-002 - CVE-2007-0957) [#253548] * fix double free attack in the RPC library (MITKRB5-SA-2007-003 - CVE-2007-1216) [#252487] * fix krb5 telnetd login injection (MIT-SA-2007-001 - CVE-2007-0956) [#247765]- add ncurses-devel and bison to BuildRequires - rework some patches- move SuSEFirewall service definitions to /etc/sysconfig/SuSEfirewall2.d/services- add firewall definition to krb5-server, FATE #300687- update krb5-1.6-post.dif - move some applications into the right package- update krb5-1.6-post.dif- krb5-1.6-fix-passwd-tcp.dif and krb5-1.6-fix-sendto_kdc-memset.dif are now upstream. Remove patches. - fix leak in krb5_kt_resolve and krb5_kt_wresolve- fix "local variable used before set" in ftp.c [#237684]- krb5-devel should require keyutils-devel- update to version 1.6 * Major changes in 1.6 include * Partial client implementation to handle server name referrals. * Pre-authentication plug-in framework, donated by Red Hat. * LDAP KDB plug-in, donated by Novell. - remove obsolete patches- fix for kadmind (via RPC library) calls uninitialized function pointer (CVE-2006-6143)(Bug #225990) krb5-1.5-MITKRB5-SA-2006-002-fix-code-exec.dif - fix for kadmind (via GSS-API mechglue) frees uninitialized pointers (CVE-2006-6144)(Bug #225992) krb5-1.5-MITKRB5-SA-2006-003-fix-free-of-uninitialized-pointer.dif- Fix Requires in krb5-devel [Bug #231008]- fix "local variable used before set" [#217692] - fix strncat warning- add a default kadm5.dict file - require $network on daemon start- fix function call with too few arguments [#203837]- update to version 1.5.1 - remove obsolete patches which are now included upstream * krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif * trunk-fix-uninitialized-vars.dif- krb5 setuid return check fixes krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif [#182351]- remove update-messages- add check for krb5_prop in services to kpropd init script. [#192446]- update to version 1.5 * KDB abstraction layer, donated by Novell. * plug-in architecture, allowing for extension modules to be loaded at run-time. * multi-mechanism GSS-API implementation ("mechglue"), donated by Sun Microsystems * Simple and Protected GSS-API negotiation mechanism ("SPNEGO") implementation, donated by Sun Microsystems - remove obsolete patches and add some newbuild20 1255979457]^`1.7-6.11.7-6.1krb5pluginspreauthpkinit.so/usr/lib64//usr/lib64/krb5//usr/lib64/krb5/plugins//usr/lib64/krb5/plugins/preauth/-fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.2/standard/f7dec96a8df63ea371db4a40afe71570-krb5cpiolzma2x86_64-suse-linuxd68&p o?] b2tQfx3#: \+K^ŹaNPO XL-SWhF16"zq֏QEp^)jDja"il؁ ǠS`к>35EqگG%ۡ[as-acre,Hel@Ɵd.1)WuxHɴ:<hkvuQj]hޭ&`6'kCәEL̾dV}_Sny\mXd*$?E^ۧ JS\NnMA,cm{YncMMJ1&0H=q\Ls#ւzVˆ6&r4̟h1vkwqao3hu'yzd:8:e$QpTBm$vem2~ B:"̫#^);ȗQw-LأYfgNt0y fS߾o"D r}+Ed֘5F9X}&& MquyJ6EҴ\q܂KOwtGtWȿ`Wșu2 B5 q.a Ż.xSVqt[Mρ^ UWAtp ^hy+Β7SAW5;Aۇm:[hE:AElŻh,f (l_Le ":_4(*o v6\pn4{ K٠^nˡF֧Z>bδDn %1rtqjVQoz|)(a} #}qܠ @jH1l$ #a ("ŀStW>RK%#Z,ͥXw/KqL`Oƴm_zkQp(uK;*MFݦ~}]-jvarq~dGúrqJiBlT/V~cޝ KG`8(#.m * Ė%2(6bBkKrXܷc윌,N0I9fHȭ,O=KQw}g-md6iH_ks2dw3Irl`HP;N#) iΕ j'}ؐq^غLh[d.G=$?vⲝ%X֪((5ʣ2T=5n f4wQ8+H2,PybB",+!f{X@IeU8zQ[(8Uz.xhڇ#|L1ugR50ȶ_ E Үa8sԠm& Im|ùo%d` ryqA\J S,&g"v p<3 BUx( t!=':^HRikR2zt9 ;f-9>t=bCo,@R=GFzE8F;7}'o-?`<"x YzfZ۱/13!S KFRt.FkMu" Ѻ/ 2 z48H&|cT҃`Zx' J&8숲bb9 ɶ=4oN(@n ^߀|(@"4R;*YYČA.)+&`/CKih511S|%FT^gFf ?뎳nRuhlЂA T\nH2.6+Ѓ JHǚfOU\̝ P櫹xFI涜dugazlw]Nj?[%a'~-kn_ѯ'},d^-,V0fKxeyuNr+寭4 Bj4aG^ \8=NM4}43L1'ND MY8aXh:J[3ҜvF86SYqZiMiNJaJ<&z\뫋p9AM)/,1:LЋh&±/KS`x&b<@Ri%BFM[P>JEH\=bշ(f7G4ZAgCtR䤝R2MKe9N%x7"}(M)Yoۭ孬 `-J7cWԭZ=t#4hWzwk/Pеka.Q? lҦBl:`L>wT-inTDr~znyZ1 ͏xU EL ["ڇ)gP:h ii_ B EʻQn9FM\}ƋR,]=i ̞/ NG/ef0)`'alCW f[(f3P(!ӟI,y|U̚OB|[3kFʍ=Lه I0hejf̞\ܽ{} $ L>E4gMy j0DG$|  69B1XqR,)}^y=];jҬ#y}km[k %P znXVnvKfPa2cr̍+gj1F^{aB|W,r*#eskLAW-m`𚽥t_(Ξ)BgEM:Ttס|I[ 5q7},e QzB'Qշx2e2n7x䮻&= zJV ($IeYW`Er ] +u M` 2hs36c)|mG1-JܒVZgeiΈg>tn6DMZ[uO*7/Z5#X`Zy"Ľzi֘h鋍SCξÒ2O2!3Fw<ڇdl( y>錚P-un$ r}ߟL_H0ŽjM0}0O]X p*]3``CH־D(|802T% :kjm҂{ 0ΩG^)wZ8Pv=t0@3O˦i7&‘)wy`ǡ/2z.P',4T,텇r` <|2Ó GO&}>I!6ULnb$vCdeVNU 6/KP[3N"]UƘyl֨$"s(u8a`YWY3G o NuD4r26CdDRe-2SodjKN@ A^bBgC6ZVKҋދ } 7A>(+@zリV@C}Cu pR?tHSg6>l֒)j@; @ y-PwTURRB?j687y* ~cFki #qL~iƒTVjfI,Ui0XyFi?(W~lKE/ēZ8g/n)PެYi"%! Uq3#ָ;֠L߬Q,VAm06[Bk]at9N%TKԵ`Z9nNoW2XJ>.!^Xػ\Ӈa1aI;b꣢ yb- Z@u33TzO@ck`PhRtӵar[ނKL6t bUx\1ѧ `L@3T'HTSɚ<'%iu*)=$vNI\#d&A^YvCj5PKJ`QpuG.V*eQ|4mdΫH1awdŚ7,8ɮޥ?98E#*55+P r#-xu^^wcd&1`9tkqbG@)amL%zy ESNXIմr1 У}y3oh(8׀=DeX{)2,; YŽCU 'YUZ47 &wSx|!!CΦݿ^H+@VMꀕ6v=2{8ǜkר7{'|whB_J@TyHӴM,M" SE]IvWt UC4d-jiAJ}^1WY Qcb./]Ɇħ%@n!_dOXwǪ>(\Ć;!6*sXr֪yD w chANwq!w0hG5ힾ|EO: ɄhKPR6v1zStn!hŮpNB(0D 6(B{wk9R f[#vYKVjQEZ % Iu=OjPղPu}kk2K5yqhz hwZؿ ? k4)M!~mRP*BC S ]d~C*:%t &N`ڧCd"C@Yl@p•cYB<+UV%K`0 ݽR~-(͚&?f S?52WŲz~볺Gq`7oO ~ 閲9گOV4pE,^Erg7 7w{Ih/͞DfТA mDp{-kShRuwsxYV8=R@2 O" 6[ *,C3il?莚]վ^D'FɲԘnIoک? m 5Xntc-y8tXh" k1\[F90VpEي <_j'Hz+$t~Ә`K5 ApΔ[Ոa461)Ҏ:m8>8SgG /xd [Jpa}9[zѕO|Qj7e嶠aqVl /uhF\sJe4$ BUKS`!lZc,%ӾkJHbf1o0" &H|"0B' :6e.Ei(L:ʵq-&GkSjv|InO]`RfgFLyP!6G}N}@KRT쥸>QH%` a,aCD/KU^h_/ݷ-rF-Wf`vaXGV/LNӪHfzZ pf. ;,l7sIy# >*㤜d"9z#"*o+_ Cw(t g<1,:K܊=Q0T ՘  Ϫ/pgJ-gxt{^]ɾK=C=;WpM=Hƶ~}'VȮc~73.J \Nle,P~ҡU;k5úo:/\_KmgӺId(Db ׶ ~}N{HR/!j 7i* M۪ 0)ϸ&&V ߉ +K#Z~g7O=x 7Ck`>Ʌe #(L[[fAZls` 9vo,T=V+o'(y.`)A su|]?a0Z>=3:cbcDBbxs q'L|3p.YG2T/J&H@SR礨Udc?ї1G[)3lL0q#A9{/E6Ju>W n\ ]zDE&Rňr$S+eVza k 1_ïI6ݵ4'GTw[9dQu$ZY3QmZ=Uf,IO*kG[*C8O O)G$Y9M5!XKH}>r(~)L VnCoQ!>~jI=RGhCv>66Iy\r{0YpPWVWv.x1:}bFB1+' R}BW9ʣܫ?1N1"V,'0}ԉZa]L5ɠD" g$ѱԩd`@+%} #.Yf: cƸUoh,u\xHFwaH΂*4Kc1ۜ8Ar0KxVeUЪ8B!y'\"aBdYgf|-+wզ׬g3D_oj,3(e kn0"G~DbHx: Z8Y46߯;R{>'+IIn6By Ĉ\Y]S/bϴU\,"5" 'R ,µng^J P;?fv=QP"k|7A, iofku㯰X7S:Y RuKʉ<&z ;voK'lT;E.|[v/nOaHܐ!zCCm}h^lݰl!)[r))\b.F{!~6 QOd{ v~*=% MT}SA@mSA{V]5c *dM"} :\0B@zm;9ew BC/Xe=uAݜWmMe7?/]{ORH1}\6t͓G}]X̂چ̘%no9cYb<؊,(U4 m pI^C Z؆i=,#8K sj1jW\tvg}gjzrvSqJfMKLZD8`ޠo߅k3uKPfNnR`&^}lnx Wʫp)#Lfc[[xhィN![&jlh"}d NҊL] ƟH|CζM .3ߎV:0U_6L@ϏRD׋e5?w_ݐCA 霒v\zVI>^@DV]Kդ'`);(;/g_3L2Ɠ`Jl_Cp3kw|,-vU bFF+ .k>&k_=a@7OԶƢ\*dJJ5j@ОLuTP tpg:o:: R]s wl p2eaMPp.TMK*(G,)1/P$pdT5tѴK=m*%l~mH|-o+鱯7zN*|@)e/#kiGN J:6~QsZ]OAdbCpt1VSC6A|*ޱʵ;O2*6phhV}oy3AoYe FfsAB>>*uw 6M*Ԑ 1VPM?UJTWu@a"!u kVk,dϦP$_ECÚpk.ʰHރ]؇仍v2Yr;6s"]VvKM}WE(#B1=$cmTɕ>_,w5mzr1uM_Ғ 2-/f(3ɭaNd}Q[}RxɂWS rm 1!v̴H16TbCJ1C+{Rqy{QRp&a"jZ@ -+ܠc w|^4OGUjESAX #I 2W]v; zƒ ~C ৓CXϭ~QǴTu*Am( Rh~KφH-ͤ ɠ0Ez-ɡ?PT:6~Af;*W lYDu Tlܡh}nA}3rݘL%Oq MW8y,)Kf]( lK7 :U !\ωL)MdB {:]3߉0Ԋ˥]ka9Gl;g!8ٛoRR܃q$$ƪ+~_'ȼߜ{d%lWwz0Hw<蟆/iEUԺvdS՛lPF$C zjn^LF.%Y{vE`_?zk bam5ۭoC@7-j(#pțamIV xOg[R1(8Loomwq27 sH%b(Sܲ88!:nN\??0S5 adNߡoN aVUHfw3'kW?>H&6`" T^pDn̚LoH+uL&hX`ۄ%>7sUue'2s(<8GSXZULk|O^4m"))@ %Z7EF:3tt}g}96sq[rݭxAoxc5/[mWnږ(c{ Zli`.ps B5uUIxj һ;̰rl1R@},h+17`7H}F! ƹ̷+`Gyᥘu^xv b6 f׆]3La LDɾa\L rcJK^F%HԉFG80RbpL5y;b0CH67aMˎ Z^ސ#LQ:A" &.//Rl5/CHH iGFOV%+F C' /0DzqSE/H9%nx7gZ;#qwMdc#vYOdvt'Ow8L*aQDFH˃GRbV"DM&$–`Qkf?2Oq DIaPCK#ZşrqU*.뚥XM{+`3ⴃ|TD/׺eم -x^쥴ς0jGd?l9c%Ҭ"8ekq[,H3r%fNjFCPJ 0M]]/2wEX1Rbki¸KK$Ʀ&-R qҌ-_uH5'=@[b*u#q. .(Mh9^,~z{TibMS4 ,U2z 8t&I&`'!dݸ"=DPdr\! 5\@HUYaTӷghTmֳl{; :/G.]~FD#iWzGiXY\6d"m*b6-jo5fvlXV$V!iz'7/}ӋR &LG9zO "VW(̳bB=WD̀)Fb@iF.CQqrk/Hy3J8uj ('P:3w^knr1R OUN?~6Ҏ+jve㭬֗ej0]@,TLhrgC:3Y:$}g*leB (1'm#ԅ?䓁V5W7P7}IY8ߴڢ=1a!/ࢦq!I;6IG"(DSO^oV6*o<ߪF:6D21x;.Z i&H,#abA }.wQ/T v {Ov}K$a U<Q# -]9f슱hR(z fȹC#2 豆ptTFz}T衙6O9ȴYe+4!2#oQnn%SpCDAy zzrO+LGKXUl]OJw3`tZyK2]g f D94?N,`]ig |MT@I5jZSYR$AGP.ӯᨛ";cژ;~ }qX]bbCLpiAd*mJBIUXXN ɍ>)jq,bܧmdtLk1XKL8 Q?RBE"R4:c1WD%|"XuBCV_M+6A~bI9= l?~˻aLETqŜ'R[o1[9Klr}1Ӝb("WU-ɞv"!f%~EOO\ktKl̗Sj1o9@ zEտ2zz-~ץ&  pmػUjMfEU_r\a P,_ۻB\e츥#A oa~MzO@\~lOl{| NN&_&,8Fds0$x0XP$jŏ?*1KkϮozT;g` xb56F|ضLF1$]-z6bT};b]sBWuКFGaV:4/\sA2UdzA*]1#qs|j𑬲=3~-cn^%ֹL -Fh"|0Xhv3QK{!t( /pzي \0oJFHX :a9r!II!bdR=&GLOU+re^rpK-r d-Y+x8YIt9PnԂٙcWt]O~ Xqጽr aOK @D4 `[tViP0)q:C)CCc pĖzDV~}f4ľ`'̚$(?j`uC횶[c-W/2" Zd뱎zame>[P%k?xB\:UTuq@!PA$]_Uw֦P.QhǙXP Ajm /JnLr.T 6C1S %K`Pr{H]EI7tK0 7Rp`?Z Ooay`lrysjgHx+kYpyX0z5*$Nv`㞣Lɠ8`t+ dʢ]Íarꢖ5Yܔ;u,hRq-_AQr ;0\1_ Rt>N= /+x=&G$h}vHv{jQQZ5X" |UU8;X2Qς!]xf rFD="A n w,,O串Ė5D?~`gG'-xSfOX0 yQL]Q> R~Sm;T;|$ȓAs8O\2`;\:GX:V)EfOJgmV40zyٚ f$/U&֜DO ODWmot_TsUExu'T.KBM+j693-r(/lWl#Œ2 J ;JME^B@ Tl::lE ƼTDž~eu). ̼ TgIB$!5N-"DH{p%e.8ɪ.v)3~/H^JaP:N&a?ʷ47XgAz :,@ ]8/q {2R[11R"$m^K(l7TWEBWdW7 YAw*ࢱ\wmOv;EHЉt PᾛK3A^;rV{.;^+se:ʛt889|]_{2<0R M8c2 y(X#ԥN=B/qk\ZZeF|L}]0'C,JX"&5߭vyj$BlN Zj~,h 0 (>Dy\&JEC=2T@$y*+dEy>[y,$&u~z@p:Kۿ2&L}qmURy"M*dNfq@Ú1oŦ4[L+ɓ4e`5W,Of@\-o2qV_x¯G%俲u1FCL,Ye=]S-i И[(0'윴{taQsƉp)U n Cj 3o$ kpM*@CQv4ChT hNǓS&E5nPÐn݈f]2G7Mƒ\R& 9Re@CC)8 %WayNjqv͖Fc%^2w9FoAqE=B -0h ^][xIh_.ke,.`:U^_?2B|ED('rtzżdUhx产AETxƿ {S%j|AI,Om.Vzg[oNl" F֡)%A)U]sost֠E&m8/"S"KkqRI3bK rIrmTkrtfon!erDIp(EuJ p{ȥʢ1PwO!j?vW1J> l?%LVD`H R.Z`رnCK0TIkw{ HNZ+(1k񝌂A` v1.!V>z&>;| 1%Vc drQ..{Av[y4]`Ve~tJ9Il,T(vD[zMh{9uQ4W/x3ew!id {#rF¼2!_uAsZ8sⓝ52YUːһ 8däL|L/8^^ WeK?SD8I&Cjt' ޖ9׉L mp@󇘿OT+M.69}laj}qSy0lcC{uN<}3o:W>ƳݭUWNHEFeg[6y)c9d=Oh"b\[ $`T.4Wz\5+1 Kqz:k=_nˆ)jOۭ.z !&?KcfgCGQ Ijmҭc,;e=>4ǏEb1)`u'oFVlS o{L4Y $ʾfVb]xWۖuW6 y>GCNHOMl`XO|WjX#6+P8oo1/%_廨٤/ C{oܘ(iDP&\6lTQ߯mΓ?S^GW4^޹ @_o2=;EO7.}%0?1p=FYU%0'HwbI]"P|ݥ|i냶p7Ŵ 3|9QG.m+i)ghݤL;ւuKUӶG'LUmNZt2!0{&"0"̚xd@+Z>YPn) R旉}C{-%HBVsg6z=`:cock/8aOx"E]\rLvzjS\x^A'XRkII{{ Xɫo+ý/i){lsGoZBFz8ayvu_~?$,㳩kqB!Zkx04證)ײ`ڷ'dzAD_$3ZjOShfx4vUMd1w?XZlTdSr+jA=&sYer{[+O U}-M~aˮZ:[qǞ&DTH@Ӡ +DG0k}]B z>pu ӧ&=ҳWlR0" 7heNȖw&cLG.Sm_qΫ ݀BՐOXV=4:Z ;uZ!T8j1?q?d?^MŜdrǜ-1,ܨfY 38,!Cy3~^!1ƗvsTvE_v_gM0'w:#.ϗXJ&R4(ŷ*cW7#Dgm[cz}K[TĬ UWm\ 9þ!pd~ׁ5\Xe;o23/裈I!ǚi]ږ9<>5?B+w=I?cɀg;N:aռ;Ky: ,<Q ![eۖ04B6PɥErVs9|S78 2G`RFjXcX-y'C *ȁv :ivjpngљ՛HټL)Ipuc qh=Er'yA<>sDkY :pz);)"^u#dUI}\d6OrҮd=2?HS=-b=! XYsg O:zWx"5JǦ3;KhO9+%DWcMR8 ff<7Ƅ xEd3Oòy?9J nsx'}+jԁV 'eìٔ2eύc^ۊVogX]&,e- %yF;ߗ&SrZw:`x$:<;gp#)PKC7+ ܆~JJ9ʮt !ߋ"װa]kZ&Z_֣fS>%YF'5vH"T~#Dom;mي֑^$ A.' ǥc]ڴ&GTj{9aua-ivkyf8m^be dm_i?O@E~w8wۊ?)p;)!Z}v&ɇ'MC@C|6qXcs>hgSGM6|]g$CO#1s$y<Hs|4#G(Fk."[r@}nj,$6=tfTGj%'ԧ4ڕer$7̦eg%!xeEj_ `y>B΅ق`,tKcBk`(l`mU'_;*}tGW,B&z҂N?b&kJoաݒv~oRACT|I)V-soxDzW#ew8TR)O6Vg`,fu{Y` *,crevCBʯ #xHJ}ųۖoz-<;:Q ZiAĒGl^w~?nP1ńҚo 62G˾6{Kruc{F0 # [j8ŀKH@}{-f?N0HeB9\&:^ AXk@/xU&y[1?5&EZ=ITs6.C矜J *A,WOeBk-g~Kx~zTϛ)NR(S/J}k)l=YfHӗVzͰ;نʔQr>rCVE( I(S%rѿrn:31E-E` Fl`eTdWf~C"FЬ_bQ¶fsOKX"um%#,qy>'ń"e.lɜr:t `**qd9PJ3sʨ ̻n?f8pTF ѫ?;^ʼƎOb k括OP#fy67j$֌^K _&|K^,Y 1{Ovei۶ bs)SUSr;ޢ< TUviϖfnвǒsTӝƳ[ll>9-/keWI#2~N'ݧ{$D=;n_32fmz_HP/Dok)XeGE쿍{Y.1p %xKX=_6)/D*M &?ChS`\U@jetIn[tͳ3>s}t2,~P_.vEU(H@EJFE GbÛjlXu0NC l K ].#ېL>a CIb<<@zch빜 %`I,jBǃNk*F @]ه49)f DV&4Z{C"\ }3L]#_UTV)˹GABOjKpX|՞uk@"z_פe",9?SsEmA sMZ=DR34[>s7F4qkɊϬ':-𳛫q-g7k`co~ڙܢ6: ?WAlܵu+oZ=*_=-Q=4A$\k{nZ³77$!F$BEn|N(RɟBާThmil4BgK?w|1pA!to>V̨G+:PdګFK>_mV[Te^IZ85ow9 ef GuEC#-LFk1JOxRsc 1>&s3s6+)}a07|u.f\uZ4ߗAk< ׹_nkvc-> L\$|vE+ku+!{|t#Gjk;Ul^j!l< (Khݧu6>O N hOCY_8%b+9hΐ.~3|'^ egãe7o;ʜbcw@莻w0nvxfoYӍg|X '_w@s#q9='>nOO ڼV'f>8XlVMvC8lBrOb~RsQ:Tz̮{:!\>z! Xb6Ki V.;`mF>Rx@:ʻУ%;KIT¾rVj;Ïam'QrY2_[r1S%iEQ& -sV\dUVw䖇|C>. 'HIMt^vEyN%o8 a@rOTDw_r2T*V L3q,dX.u[ͱAM3G(˶@³kї"W4k}r7=uEGM5EYgz@Ohf{ Vͻd1xGkw/)ԢrX3ͩKk@DUU[tcs8g #+~6m"=M v$.3SUsq-V3{| qӁ|d@%zX2P,SCJlʶRJ't&$Uج> ta$+HeB4Ձdk 8V`C< uuބ=z%&蠬U=ywz8U &0.DF(G#8[T %z ;apL)TL$#^B>007nh KG$I6|1ZɷhrŁ^+|e~sxmM᧦rD7&ՠ%N2aѝ砠,Sr7NE-CdbB>S<˒^X+as/s|z!-ā)($ưF0POiodZ!s1>;%WQah)*o3Ku;V^d@fJ@w:x|_jnį?4 | uRº|,/]j H/;,bG( uͪ3?>rBwaEpƵnqV~[F}J2l*L :W7E$ J6'w }hwc7|%Ёyp^ ;wKu/0i;}a O|J?~f3\$l8i̵:Te^F}^iQ )qPOpb1-96Ѩbϐ5hhLᖗ=U*6u\\`&z t\3Shk-,JLeX@ =n6{/ʞ`ZRmŀNlN΢c2 [|J[Ln/r-Clnso̪;CUj0.z{G:vql to=dS]VRajP/tGLwv0;jJhPrDiP_q j*S[{8ϰccBt ?qB)Z4Qɸ@r'Pld(yߓ[q 9k^h9['WR-P&f_KZ\WK"[sMZ,Khi>xz_f;uw =|d1["n9ƿ)`P~ EGAm^vm8$$ˣT J`EAdwFU 'oeu׉krwljb\DLJA' e&&40Z Ta,!G_%?2 +FUvin9=+>8|.cz#UZ*>ϵАV}/!n y΃ƻ,}Uj& 4g=7 ,(n E]m^u R&X*fgqŪP[7(P+iǕ0mB.MBߌ1rU|r"dVēd ay:#&L\Tpy>:<ā4n{J1/D[^iW%@8ZOyJ&iR-ѕhy4Օ=0iYPfE6^b!54__QE^4p=*ѷ؅Cf}EƦj4q ˁȄȬW k]xwEZAKW۞*`ybVZU?M_0iJ17 9 %.q|ATeRCý0vA4K;$Ki5yR31=ʜ˝CURM|pW,5,\+.^ 8NpԻU"${aUy,cᢇϮUP(D 8f: ^(~RXGy5YY,}J/1z1N z~l|@µw_PD,q\qDs=ZכZ( e䖿m5f V%U,8wM&MAejoHe-[,&Ä\c梟s0\ցoЬhu* HJ[IZs|4HڏwUYk"J5[5B Iv#diʸAjX) Lho6~5v9SDDucfv ̿вŭj9nΆ)+&6=#|4zI/o)^MhYJ ~Wv1FnG؈{3x#4`¯ ܞ@aJK~N?U=R!XSr6}ŏTbb+XqVC^o;jQQ]. sMHqǢ%-o([GL9.&iIlM=hpHJh_Ǿv ?9 ?Hmxvšwҕ>vZ k.,\D+* /s/zlb '0` rS{Ҹm]C1%mCaqj1h$$sF(9IArn[Ϩ^T@ Ӷ%毹 G!K V2ȭ;F؄!I

63M>%ˢ:ȉJhnz כnt0iCeZDyL jRǩA[7gscMfB\{c.ni\ϚO_u#L7OYD&Rt 7E9x}ypi"C,K єQ7fi-QiO MyА!"<-Rx:u:pc<`<[j(;;s036#Zd1_۰ m\j.(3Ɠ Kiv5(M. +Aa0o"e1 盹xr1]M}a =ZJ0((تYE)%oa]>7rm#wL&zfS[֮ϧ$t<*> zjwۊLm2:.[§9Bc|0Gz)H_a׬.f;[qEt`\MJ*`78q7!SX-ЕÔB}L3l!sަ5 ^J= ~Υ " :~R?!OYBUS/xl@|2 k(c)6m[1{҄J{M'*>5:5s[.+Kf' @#G~,j"bĶLM)ݴ/?\|bz)H7/؎L ]DML0)M*qYʑ 9FN0 qH(ޥcc H^J%ͫ;LoddS2x"fz\e#B1ZZs)X@܂aU8tf+ ^5^*OEhioeZ[ELw/Xn>g}ً8Hk?V> EJ`njϤvLt(^;MzWOYf+3_wy7=H_J]Yhy*@3ž(P0j{Bꌤo f99#Nx/j*JX\fKP/45uyT56Umfw~2&Ck0mb'JHtȞ + bb9krOc4 .W)RlEق'`K&q%Gcۜ.6Z,.Kj%'ln'MhduWX YjAEYĖL/2IJ8R*0q*PVu}C溒 hp4J{78VC`]{ |%—(ϠQmJ. +S3)SEjK)5^RG ،9(+#0P4h2! k h)0nX (wĂHaaϯ|rY 1s9Bbe䝯kYK;ENtzOu;0;=í'E<'U-!PIQTӎжҀa{ (RAJ@/WjOsGB!7Z.jWQ|tu~Qf{CEe(SS\d>zTId OW&˘42EeV *:G)@ o},T  R-aV!\S7|չfS, yprPT|9m[ 9-$׵ɑ }|yB`u;:rHy-ּ$i WzmИ/x>SD,xnokXd3ZYPiAtIz+V4f&Ԝ[G iјܱ!4=)zA1y_պN%k?DaIԦw^nn@wҺd;<=n2u؟5觹 k`m:8ゅN rl<KPgiʻx%KB#\iZvIX{A P_?2FsREz%-a-p?>cQl&!EC7`0 sj(K=Ca?dM/ IruiJV{/"s &< pK4Iq.@ኊW)KuN5{BO;+é64r2HR.Øt"T)#iϮ֊5&f`Zs1q~J?9#L ^^GĊ A#Ұ@6AƗ{270`=\W'ppգI1&?,.EX94ԼlBVIP4~8pYf55C jR/g"#YoPmZjNNS2姳`3 ҢOܴ=zPq)c|<~G vz<%'wE}eRSt~PΞrkhy儧ȉl\VkcM)Vu@x|̓*7QwByAOcAgޭW\H>ubظ#:Z86A)BxƼ8w}_j-暽T4HB9 $Q :|M ˱ˠ$Xw2>|ҹ߭01%yyHT9tճ_ I &IzpFMXxYpdUE9>} ūTw -3`r`0 Wv$4T(>@e.HHAV Ktc?|yqNiǃ|KObnB- lD~f&FĆLeR-# Bގ\[*Ze9!#-[,G@(dJku--k-l%uObuZjyx|@}NP1̠脄,$s{P#(miG"*_oc2k!X`ʅݶԾ bUQOsCUUNO}цR=Ű8aCđOTaG<8͚1-"7ȖQ>ݏ@[9 MhbqL z.J` Bhb0# g"q]D!"`742Z/t(ݨ5xFPXГ<]D[,j+j4!N*N7"weoy!^7v1%%c8JSe;u*z!ĻvJg_MBXoo"q>xla_s1[xg`fVqG*@~M%y;+:>0Ƽ<-Glq 2R~Γ @6-ÊI5A@k]~Tb)*sSi6G0XY;X +6#hq*wIᅧ~xZ\_-gҾp8[D,aLh.#<*Ci Ժ5Wl_ ۳.-P_6^hd@ogAt>1 KML5M;/ Q^4`x uP#'a_frcC<=Kz*p Ht! uGYbK౷#osۗZ(!TZNkvq(`5ЁN+fUdyGClp^jkXw7[ b_uћ-1|i.>k3 jkQ:|u+揿>;Ҋ/\1@:nEEh--AJ5>氞Pb/| ,^ uZi0zxcNL.l*]pkF GƧƊ ]%"ӹ3}lހ?g66H lid0<^v+ڦ/XLFGp"~wO0i:*YrׂfzBF a kq|+qש}A= Uf|k 躔> ϹvuP C]|0+r\OX,tܪ12mb j{-VcٴE޺VdC7I%6JH+Ca{unA?dWcNzB?|+~kl[PߚWS?INMg}s%Wt纤j 9QO"@`"Yc]Z,]%_ egЃ̧7kTi =qO~x7v(d 5TE$9F{ $+tIsL0k{Nz˵сb+Vu;/_ۗH7+ <U+8Qo&7}K$DŽ{+{;z̓fspO7,rwUVGvo@H >|ĶY*^9JGU8_"GۄGO ˕NxOM EIy ͡{, k,{Kۿa]U88HcH0ŚVfMs7-!zjQ1C#:h솝ȳ ͻn'jNWdSYyZz{YW.8Yci}p٫qDMDߴy[5!ui.mﹾryyWE=I;M!f[z=K6me6)ܮfm`*a2w\+"E`@p2OԛʎEw'G XDM~ kؔՙˏ_=rZ2LvGIe8&\) jeG Y.m޻AfASFzG/)vX]?un+IEU4zR(a\ ^2ZW@Qؖ,fJ<Ϋ|xʦ3l;^bSM-I]W Uq T2@2t{@~<1(rc8zۀz*77 Vr\=밻4ʇ}ւo#J;PK]-lxW"d=>`/(O_g^/n[^{ւSekBP7@U~~NBw4aa,7 SYe|=%cE^.dF$(OeLsfX+Z5y.t $-K ړE8kz^iAcu@N|]f8 ;gF9T$U[/yEhȮn3g ><٫"PW![S7挮p 7S {l#xh޺efA]X)Zx3z