krb5-plugin-preauth-pkinit-1.7-6.2.1>t  DH`pKM踋/=„s"b3Q>îOېv{Դ[tQxa`n:oLqd xVZwq%CF'umņ쎤1U>sG阇4HWWZ4u.^̮B\8-/DĖw}g,Q*.,))ļ⑕UG"2D-]n`˺`T| 㾛47)N+A1n 2Edh7J[ g!K}0(kޭied4544bbc206d976868f2d5ff7c9d33eac06ab51ىKM踋/=„0LSj&ޠFqDr(iouW/P8r/d;d#nJ~28 !qJ\w uWUgz+9 Sлzg8xc/|@(wFӖA}0^0Dq tՈ]6-7pv°ϿT,}*!z$͍Ffxkc3%:^469K|d5-?-d! ' [ 6W]dt |     (8898: 8F+G+H+I+X+Y,\,],(^,Gb,c-d-e-f-l-z-Ckrb5-plugin-preauth-pkinit1.76.2.1MIT Kerberos5 Implementation--PKINIT preauth PluginKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. This package includes a PKINIT plugin. Authors: -------- The MIT Kerberos Team Sam Hartman Ken Raeburn Tom Yu KMbuild31~XopenSUSE 11.2openSUSEMIT License (or similar)http://bugs.opensuse.orgProductivity/Networking/Securityhttp://web.mit.edu/kerberos/www/linuxi586~XAAAKMKMKMKM3a5edc0a54aec6f336d64f853ccff681rootrootrootrootrootrootrootrootkrb5-1.7-6.2.1.src.rpmpkinit.so.0pkinit.so.0(HIDDEN)pkinit.so.0(pkinit.so.0)pkinit.so.0(pkinit_0_MIT)krb5-plugin-preauth-pkinitkrb5-plugin-preauth-pkinit(x86-32)  @@@@@@@@@@@@@@@@ rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libcom_err.so.2libcrypto.so.0.9.8libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.7.1K?JY@J&eJ @IU@ImIAI?@I HHH@HXH*@G@GGhGbp@GUA@G0W@G@FwF@FFޚ@F^FF@FFq-Fm9@FAF9F,F&@F#e@FF @E@E݅Eّ@Eb@EEE@E@E@EI@EO#EAEDDq@D+@DĶ@Dmc@suse.decoolo@novell.commc@suse.demc@suse.demc@suse.deolh@suse.demc@suse.deolh@suse.deolh@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.dero@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.desschober@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.de- fix KDC denial of service in cross-realm referral processing CVE-2009-3295, MITKRB5-SA-2009-003 (bnc#561347) - fix integer underflow in AES and RC4 decryption CVE-2009-4212, MITKRB5-SA-2009-004 (bnc#561351)- readd lost baselibs.conf- update to final 1.7 release- update to version 1.7 Beta2 * Incremental propagation support for the KDC database. * Flexible Authentication Secure Tunneling (FAST), a preauthentiation framework that can protect the AS exchange from dictionary attack. * Implement client and KDC support for GSS_C_DELEG_POLICY_FLAG, which allows a GSS application to request credential delegation only if permitted by KDC policy. * Fix CVE-2009-0844, CVE-2009-0845, CVE-2009-0846, CVE-2009-0847 -- various vulnerabilities in SPNEGO and ASN.1 code.- update to pre 1.7 version * Remove support for version 4 of the Kerberos protocol (krb4). * New libdefaults configuration variable "allow_weak_crypto". * Client library now follows client principal referrals, for compatibility with Windows. * KDC can issue realm referrals for service principals based on domain names. * Encryption algorithm negotiation (RFC 4537). * In the replay cache, use a hash over the complete ciphertext to avoid false-positive replay indications. * Microsoft GSS_WrapEX, implemented using the gss_iov API, which is similar to the equivalent SSPI functionality. * DCE RPC, including three-leg GSS context setup and unencapsulated GSS tokens. * NTLM recognition support in GSS-API, to facilitate dropping in an NTLM implementation. * KDC support for principal aliases, if the back end supports them. * Microsoft set/change password (RFC 3244) protocol in kadmind. * Master key rollover support.- obsolete also old heimdal-lib-XXbit and heimdal-devel-XXbit- do not query IPv6 addresses if no IPv6 address exists on this host [bnc#449143]- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293)- obsolete old -XXbit packages (bnc#437293)- in case we use ldap as database backend, ldap should be started before krb5kdc- add new fixes to post 1.6.3 patch * fix mem leak in krb5_gss_accept_sec_context() * keep minor_status * kadm5_decrypt_key: A ktype of -1 is documented as meaning "to be ignored" * Reject socket fds > FD_SETSIZE- add patches from SVN post 1.6.3 * krb5_string_to_keysalts: Fix an infinite loop * fix some mutex issues * better recovery from corrupt rcache files * some more small fixes- add case-insensitive.dif (FATE#300771) - minor fixes for ktutil man page - reduce rpmlint warnings- Fall back to TCP on kdc-unresolvable/unreachable errors. - restore valid sequence number before generating requests (fix changing passwords in mixed ipv4/ipv6 enviroments)- added baselibs.conf file to build xxbit packages for multilib support- modify krb5-config to not output rpath and cflags in --libs (bnc#378270)- fix two security bugs: * MITKRB5-SA-2008-001(CVE-2008-0062, CVE-2008-0063) fix double free [bnc#361373] * MITKRB5-SA-2008-002(CVE-2008-0947, CVE-2008-0948) Memory corruption while too many open file descriptors [bnc#363151] - change default config file. Comment out the examples.- fix several security bugs: * CVE-2007-5894 apparent uninit length * CVE-2007-5902 integer overflow * CVE-2007-5971 free of non-heap pointer and double-free * CVE-2007-5972 double fclose() [#346745, #346748, #346746, #346749, #346747]- improve GSSAPI error messages- add coreutils to PreReq- update to krb5 version 1.6.3 * fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow * fix CVE-2007-4000 modify_policy vulnerability * Add PKINIT support - remove patches which are upstream now - enhance init scripts and xinetd profiles- update krb5-1.6.2-post.dif * If a KDC returns KDC_ERR_SVC_UNAVAILABLE, it appears that that the client library will not failover to the next KDC. [#310540]- update krb5-1.6.2-post.dif * new -S sname option for kvno * read_entropy_from_device on partial read will not fill buffer * Bail out if encoded "ticket" doesn't decode correctly. * patch for referrals loop- fix a problem with the originally published patch for MITKRB5-SA-2007-006 - CVE-2007-3999 [#302377]- fix execute arbitrary code (MITKRB5-SA-2007-006 - CVE-2007-3999,2007-4000) [#302377]- add krb5-1.6.2-post.dif * during the referrals loop, check to see if the session key enctype of a returned credential for the final service is among the enctypes explicitly selected by the application, and retry with old_use_conf_ktypes if it is not. * If mkstemp() is available, the new ccache file gets created but the subsequent open(O_CREAT|O_EXCL) call fails because the file was already created by mkstemp(). Apply patch from Apple to keep the file descriptor open.- update to version 1.6.2 - remove krb5-1.6.1-post.dif all fixes are included in this release- change requires to libcom_err-devel- update krb5-1.6.1-post.dif * fix leak in krb5_walk_realm_tree * rd_req_decoded needs to deal with referral realms * fix buffer overflow in kadmind (MITKRB5-SA-2007-005 - CVE-2007-2798) [#278689] * fix kadmind code execution bug (MITKRB5-SA-2007-004 - CVE-2007-2442 - CVE-2007-2443) [#271191]- fix unstripped-binary-or-object rpmlint warning- fixing rpmlint warnings and errors: * merged logrotate scripts kadmin and krb5kdc into a single file krb5-server. * moved heimdal2mit-DumpConvert.pl and simple_convert_krb5conf.pl from /usr/share/doc/packages/krb5 to /usr/lib/mit/helper. adapted krb5.spec and README.ConvertHeimdalMIT accordingly. * added surpression filter for "devel-file-in-non-devel-package /usr/lib/libgssapi_krb5.so" (see [#147912]). * set default runlevel of init scripts in chkconfig line to 3 and 5- fix uninitialized salt length - add extra check for keytab file- adding krb5-1.6.1-post.dif * fix segfault in krb5_get_init_creds_password * remove debug output in ftp client * profile stores empty string values without double quotes- update to final 1.6.1 version- add plugin directories to main package- update to version 1.6.1 Beta1 - remove obsolete patches (krb5-1.6-post.dif, krb5-1.6-patchlevel.dif) - rework compile_pie patch- update krb5-1.6-post.dif * fix kadmind stack overflow in krb5_klog_syslog (MITKRB5-SA-2007-002 - CVE-2007-0957) [#253548] * fix double free attack in the RPC library (MITKRB5-SA-2007-003 - CVE-2007-1216) [#252487] * fix krb5 telnetd login injection (MIT-SA-2007-001 - CVE-2007-0956) [#247765]- add ncurses-devel and bison to BuildRequires - rework some patches- move SuSEFirewall service definitions to /etc/sysconfig/SuSEfirewall2.d/services- add firewall definition to krb5-server, FATE #300687- update krb5-1.6-post.dif - move some applications into the right package- update krb5-1.6-post.dif- krb5-1.6-fix-passwd-tcp.dif and krb5-1.6-fix-sendto_kdc-memset.dif are now upstream. Remove patches. - fix leak in krb5_kt_resolve and krb5_kt_wresolve- fix "local variable used before set" in ftp.c [#237684]- krb5-devel should require keyutils-devel- update to version 1.6 * Major changes in 1.6 include * Partial client implementation to handle server name referrals. * Pre-authentication plug-in framework, donated by Red Hat. * LDAP KDB plug-in, donated by Novell. - remove obsolete patches- fix for kadmind (via RPC library) calls uninitialized function pointer (CVE-2006-6143)(Bug #225990) krb5-1.5-MITKRB5-SA-2006-002-fix-code-exec.dif - fix for kadmind (via GSS-API mechglue) frees uninitialized pointers (CVE-2006-6144)(Bug #225992) krb5-1.5-MITKRB5-SA-2006-003-fix-free-of-uninitialized-pointer.dif- Fix Requires in krb5-devel [Bug #231008]- fix "local variable used before set" [#217692] - fix strncat warning- add a default kadm5.dict file - require $network on daemon start- fix function call with too few arguments [#203837]- update to version 1.5.1 - remove obsolete patches which are now included upstream * krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif * trunk-fix-uninitialized-vars.dif- krb5 setuid return check fixes krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif [#182351]- remove update-messages- add check for krb5_prop in services to kpropd init script. [#192446]- update to version 1.5 * KDB abstraction layer, donated by Novell. * plug-in architecture, allowing for extension modules to be loaded at run-time. * multi-mechanism GSS-API implementation ("mechglue"), donated by Sun Microsystems * Simple and Protected GSS-API negotiation mechanism ("SPNEGO") implementation, donated by Sun Microsystems - remove obsolete patches and add some newbuild31 1263343552()+81.7-6.2.11.7-6.2.1krb5pluginspreauthpkinit.so/usr/lib//usr/lib/krb5//usr/lib/krb5/plugins//usr/lib/krb5/plugins/preauth/-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.2:Update:Test/standard/b82dbcd5f39ecee9eb4a99765d422921-krb5cpiolzma2i586-suse-linuxzjhxg?] b2"~N(=}$p׳uڧE!bYeT[7 ҋe)WtY *:[@Q-cIK~+~azᅦ`)z2 E=uL]fM2Nm+5|Aܶ*WsuQ^`k @Pup~aмC13L ԴfGzG]r^j=/kߡWu:{zE]X$-ī57_x+ڗ¹&.}zw&͠5^W<䔱@̓X¹Ɉ$(MoM1?0VA&}:̮5L֒ġ2tRm[f4w@]~Cs/uF:%Z0@Ia\{}~^\Tc^z) 0Y`8Q䰆`UHQ=!i^9|@ 䝹cKUMC[4FEO}t @Zrhܙϲٛu O)-]}>Ce݇w$C;zNKgGp6 SGܟeD$)/B8LӠJhq,*.J b( ~ra"kC/?֭=#h/S}D&=-[&1)JۏCV#~Id/\g :s(v6[ {I úE!4ΐً@~aP*& WsJbӬ3$Q(~ŤW+e6< ռ*&VX\7w}!+TVca6@G_2~T >tD< FE跧Ǯ+^}LL+i(93O p=*Q^diCܟܵz6;|?Z.Q ,;ܪn=J>ǖZOKI4~xB< k9`o8.8,\ .ćLۋw\d,u|~i`uwD\&LK,N<=e Q{&Ѧxhm{;;'&Tό [h]_Gݱ×:5{[$s͠+'N;1vxaQ4f kn}:mOt+;l4C7~M<3tu].{k`>ȁC t5E^jk)(>kP.#@EdR ᔉ PlXuf1#\ :w,~`;]6GG:BD.[_Ւ^Q;0vOҿ^b6Pcn'LK"R|$ICFߣ 湅ǼOWN_tg#Y Y4Nӿgڣ gi=>EiOfq+ozێ<bw5B.,c˪SIYO5+?PBsQ~{_=aHʄ?SIs\[Bc钒7GUO=sd {bt[c [d3aAS^ϩkpFq8ʛ4q%Tu?3ؐ<_sV\~Tȋm'Aީ@φ74X8Zs/>ugXPJܩwyMU7Cc ’>'jjdF$iͶ?-_e]êx1d~gL>܊L^eأ+FUpM]{q w2ݕÈ#BzEwVf)k Ne T_1yM,7N%W$0VJ7rPtn\q+c Q5+!.-JĻ9/IvT|V{sCD7_$+ayH8FXBf gZ]x vڛ1PUyqJ C "%JmaDH;- lG=^wVCchz٠7a7/w)G|Ge{ o,Rs={+ze!rs̰N %&4uB3pn3nɉt J4 ͢]SMGu.^c#VnP9w &NS݉iõVVd-oMܦqD/kAa 憎{E 4rV룅B'JE\+%` RH4ඍpzho-؅`9p$CMqjT.QDn7TKF5`(]7x`OAϨpVi#g!'AGۏͪ9N&e"2}hZ.-c1lR̪۬nN e2'r [)x] ~Iڋmo]#´QN8&q!P?[QKx9pú(#6tpݔBJ1MVZI_ #x2]`lB{K7TS1ʱoqPH-:׆[;ߔZ@hjZ7ԛO\Z7+m^H2OyE<20xzI5'N7uBI`$Q[Vf>it%Ҡ8%9/llӱ{а[PEݱ̥sg`h/fyVmh3]R ˩(fymRحd,#k x``%t"tW`6i#C*jݽ7*e=Ӵhkd@ɹo k`1rMl σ`ޠV7d8?"sF޶uVy;"չ=.L9ICGp,f""s~9}ӑoT rչ+;fQJ.+euߤxy1 ۣ4.X  {B:CΙwC?Q" j(N㥦,@v=Roɂz]k!)e=` ~ +${F8}!o 0=5ݺHZ %OOg^O Eg^sefBo X"*Ͼ"-޶ϣm4Y"? / ˮ+ԄO?[^B/=`.vukq#}YNJ ύVHIo1Ny3|]fхDs7spI'oLO,.-Pc졷@D%WdoTJ/0wn+"9g #|,ZMw&3}*h 9DŐ#9ȶikV;ܟ;2P?̠KЯPYq :vrN=PeV|HV &SEl\S9LmnPI, I<ƚo)i!y CRז92 eP(,3 p$XPp gK*E/p4}A c5e:OWSdqqBzL;01U9FńNxwCnlʐdZHEM!kƒO"@.Ïb8 `Bto.B 5R7 چ-,zS:Zbe𶁹gD2S3=uy#ߗ@7 G< $s .ez.O1!w?I]V>L]%f,3 k]$7n܀qEVgh[XqQcL'F.I皽eΘ fK?1[)Ѯ9 | HHyEE[ PS\x J'! w[vY[b*iϓ-u8: fJ˻V;fӉ9,F X&[]izb.ؤ B< WHpa ;4T1&VFkh`o\3 ɵL*c1m^(|bM3[Ws`ܤ?Ϛ%㭘)`fe͑Mtԫba3O8٫b'G},6rI=dtJ%¬& p6-*FA}boJ0EjWK+h|"! oHUnF254J;*qt8c1}u0\t?vD=8FȬ'b(ǭC^{w4D$.x}]< 𚌿x;Re,1 v}fW0ǜ`+u+nBZx/T?K6"XS3"D_1@{ԯ;v_DN vE647<0 Ig&dHa ^倭-_IYP̑ B6))kr¡]n0"ޚT>*kYvTΝRCBOIz󶕻EԅѺ t!tD Ң'N-LF7y t ; ?hnڍk]x mT85uA\]\Di̗GphTiĩ<8\ ])e]&Bup*#+ f^ˮAt2 Qa+Gɍo(MߝC<:ZENaȣ c[]JGL7j" ȬJk/3bP۫쪦T(3\kT=yVSBe fI 49c/Dt %QoB8od.L_ߧ6wbū @f%bxX tpB5Γy/$tZ`N6mfJ/ =@c;nޛyPyZ&`9Zeyt3^A{"ֹ;G?}[YCN=ϗ= 0-]KX;bdDXUa3eo 1e fu5wj۫j!@"3[;^Z xx(X`|,XȀŋJA"vP|lb9#^1e}l+3/faKΊ Vѐ[[;tXcWZ\(Ԧ\f/0|Ud^ Di{~=  Hߊ{KK ^]x4Xn9̀ Yx =1[2iEþ.npiS otU&&G ,#SWg&gVp* # km#R/"fJkF7T9fGJag$A ZKIj8 &FTt#&a*<dž]6 %3c6/ž7l&^Rs#Γ;[ٚ =WA=!  )ҳu^5L8F6j xӀrAG:0SU>bM }'N;†x2g 'WNisZ㛿dWHshԻ ud0ұWz͗dt2YIjy'NӾL+2jԉ<մmE02c/r2N3m#bcXE} /7 eñoUEl;ҊxKA3r X#օ4 _xy"6/?f.AQǓ5M= {MJ"O/m? ;2ړԅC>;5l$>32>I]k;ϙb! ݒH9 ;Yw^wϤbo~f]\.F1R7wFHdCNKG -@ R-GՉplC/pVq7zS7b`,՘շԓ o~2wq% <\r /uӗE=]1tf1D%Gڿ^xTiKk^@%::Ԣc;Yޞs+2;}Z-ܖ)XΔY7JjŇ@/6yԒpoqn iBY`RY,n0sHx.O(Ve-]ccl\aizI .e3p}KExMlA*yfo|U]Az'*GLU~dķƒg\f#bLNìY6jd4]xp e,ץsn|%ۈl8 H`OQJ0\?]"*^ORےkv8VEtkNZPs[n7lk\ =).ҳh0H|_*מ XGr]Sڏh O+*>/)OգS"$*Q-eC~wME~/oU?C x=l|,ǽa '%hä,r|r/+LSYS%l۝@ s98k yXj,EKSnmҋa1J)beV+ﭵbV26u듯lk|@e"} iCT`UqFzʆ+g9]L0ݾ䲘%wa\~XQd]Z_~cp]w٧oq4ԇqccJIC6;,7+Ȑ]I_˟ l`/.Uyyj-qQыuK!HFYfA| [qQѣ7MRC(f^'&|6)ǻu>>J9Z 'W66$yZÎip9ߜ>"edF';M!F>i-s6Y^3^~rRJ7zU Cay'ޕ[j$E5ܬ쨵M!|!8HݠT'Ex9/"Bl]Kw.ZUY}ISw-P#BB+RB A`&aZex?~G z ^yDtB(!GfP䧻֢"$ʻޞVwD[Z8RpW%vVbrrܟ;4$ dQ3/Q} ЄZ'SX2&/*Y&BB g]u# px6Tiɼ:NDvEZhz*oQ^kGDIGFAyP { YA(yw4O\CT!>[z6sPWGTU*9fZh&I^~I Ez?Aݪ# z DƏB2$dD #bHJ c҇H}:o$xU_2CM4e!R(W $魔J Lr{ ;,_>_{f.)I,8Q ~H; (If;g=[-K.lPS;vRґ,AR#eF 2e|ζ[đ1F̐tVkF:nj!%-_X_VԬ{@q|JˎݚIA VY0&v|7>V?~=qo{r&-smaMTg'rw!zp9^JL2:-ĉ7?5B~m E]vsojY|j/qJ dKAe06حAKIF G6z6wݲfl>u B5hɨ؁mq sCx1Q^7Rr}^Ԣ H J7@=9sAU1,3Npgnq̯Ep}7@^#¿?U5Jÿdm\nI^hޭo lYT-~T@zxXLs9Ø7_\ $fEZ<³]\*X ѷ @Sa[w~ zuҭYG#gNO?D#+L"&PiS՞BLQCow i;ȫf9]M^^Vf`fy3 m%\M3-#!JX#<LJĴEmjnÁ,⨍`2Fm!_5Z֐6q6O L 3{4eټs[[>hA6J* LN{6/gJa!$كwcaCMM>!\zR|es5]E"D l'eNcz'Lt?,hY$^e,HDALzfjBfS{@uS(Kg#Ꙏr&_'4{HwHS4|Ip~^@PU"9,FGIp+Ի,uЯ*bD4XYnFP?ol%x%% itH[@ MGo' ՛,]d<"ASb$I{AGi&;yMqV=|}:>X_PIiƿ?: BjT5賀J i҄3O/P[3̕TuZ!zrb[yQ\(g5G/yP@ Aֆ>~"BHά_՟#FV_UZSgX{|(ros_ }"WBŌ` ;YWخM=G63Ц[fۊ+1Э˜B>h ۗ8SAz߅Xy' BQ`iYj(񊂓zXw{)E`T.3FzrXXoVްž`UQ`.Ͱ.Q6IMcWfy~iZ/6BG9EvLu㈀z˕%Gp'\҂D-(VJ) ?1 ?NUmeʱMǂ` 2gJ%5/: \S\RrW :k8u[![=ϴҾ;ўSNg#Y<%-8NjUSybw|ġ9d/_۟ {r .@l n$ )x[ڨvATYЪ Vؒ8IEs;!`4;;[oks/]*>Ҍ/vi|Z6U1t ^- /8萔wTeȱhJZH9Y\)8+A.-@ 3b(LuWqpbM'|erZXNyIĪٓoF'5@Dp !-dTqJ&Uģ) !rEEݽK8_ߧڙC vH\cHD6)'CcC-^]xrھ%wu$W.Œx͛ _j<ǹ~#/|T6pJtvlL$8Tw8$Z4REtL-KxS_4㥹0"yP@͒]SB(謍wZBuWDBˋ~\DBy j A0xQ' MR|',? mIU#0}鎩CTJBYD͞ K 6pn-o><# v1od<5t=lhG6y"bC3t4@@[Yzs!Ĉ!` XMFs);I#\n_x> ayAAJ3^}-K+@ ܅<.c[ᐗk tpDŽ'?ϻYWWcy Y{W iL#g}LdQՂ( ђ7}{mR3?̷`_KCH#uh9b6dL=*046cZ=.C4/+g28l:79W~vd!&7) xrE0vھ>9jzjxV{76 [$ZrxDFD r/u'/?ug{AY\#߂av!41L@7ߩ7j+0p=jZipr,UQTK}svcOb~S h',ε9"2#È߷dDppX/>u]]R|kb!Lx9A.1P9RS_芏ě ݁4)(2"-(>9SS witLQRjOzߥ_(l?ا0{=8M:F ^B'kw7_o)[P`B}iSFq8US2Uqخp%csf+ͷ`gDiM6,3/94@9ԍr,ܟT1TC6E]𢻷2uHrxzf|eY gľ˚` gi+;aIV[0p`O P4&Jop)[^=^rH"B3b&v(`lRTHahݠSv;@d}a-lfLǫNӅ#G'ׇK9LKבWQ ࠨZdF_zк'<f,‹S\vmVةFY< < <(Xu;u*)bx̂ {w Wt  ,]֢Yrnbѱ-L/bbT ^#Z4 BRHik4 Ds4!+ATs9&os0@e.MA6ZÍ L)< X&H~KbL3n 7l׾xfp+ 4<\\s܆o)Zvr1VL8_L%>S)cQ%x+߇a|gEh=;vԇ[OZL5J 9>F]4s Pda0Mɉ>d;v a[_-8AI6H48 i%5MkѺOL"+ hHYq[~&>h&齠ծ]Haסw fW) UnU͆d"v__WFjי̟ImI;O] JZRDC!q`U8zřM_6G52#hDPSHȇ#_Iv@4VQbEzrؖ>RrwGч?u?&˪a)x[ i##mp$Th`r{h'*J993Z6V~_f2ΰ3W j=V{?y@ ."ptqL{^qZ[3FC?0~yN;THPXom0_ 3fۻZ T|BC=\~T4u?=rbPۥs.WoD1)A$5fɓi<`˫,!ao1/O\005#|oBCY$#h8N;"?N~auotf2Ir 5nHZnd;o}MOO .\qrC4e_ٹTL6RvDsrg4>\S !àڑ!V>} y9CC-!?F{KBߖ9P> C8 7 R|h"~AƠ/VY~A7:WkyV뱨8'Z*h\SPvE:)8=qKqŐg2B(eYTpz)ua{Ak7h0`I\5R5nE{oVD>SֹHA^݆l<J*౽ ?? 6VT0;yDBC"Ѷޫ!ڞt1vπ?A9gu >G^D.`&T!Td ):[WFn}`~Yu@n e5+T3U rtۤSbgJ!ȹ^8${g77L&KO-.^}q=)sr<|hL~116iQ&Gx#WrD95p)]Daҡ)enZM~[E(su?;KdG$a0]'q!~PifH;t둟/ŬB5 ۶*VMP/~ V-n wx{# >xSm!s087RmX,#ooX  2&߶:#xFC앹j< HQC14 ^bOBso8ZA4OyM 7u@yAYͧ-kmakP_L@Wpdܛh[vĈќU{s9 Tj3NF"]yQ;[#Ӕ$ә?oנuStʋĉOGƒSK jC\3ڭcUŢE)x /~/NgR,]tUIwrNx*|ҍEwa~_jG;],D*5 rwv쿗}>8u:YF:*mڞ^b{VAlp –{6g}bb'vH*s\j0m$FY ?6ĵfj%7s;Yɕ58ͫ/j\t ^u:3QjE;xfxFUder Ү|s,t‘1o[}]dӑZ2&CF"ʭ3niGhLҋYPG *y꠲x^~ e5R *܋5ؤ®* \CwLfJ7Mx xS8͔'ƃ L9X,KP[;v@ؕ!%zBiMK]OBj|YZUUC4s!y7LdfϊȪ^ a8KL~b_JHpaQ-W9!b2GsM!ٴ^.i RBהWdC~ZaCs-LWp_/~wؒ~%۷c̠rj2Wet)zFTM4wzhv,)ٟzL4b9T=% EV`;B?qSa.PDŽnGXQ 5{c+b=#M#~ Т̮82lA/ܶv\r ~qRY|ISTIRѕ&bof)!V͂>IySg=r4 qXt mTx2ӓ蟐fA=gҫn;^? O_f3\%l+m6$;|_z|/,qAjuu*}D#ĠjS H +۫Q7s a]l3*XAVC1*fJ`e:WɎ4a>?_C3#F0[+K n\<*Bo.Ww4Jk+M@Zrϵ56.%eN>`E:O=[n tW.g\+olU^Xq3EÂSpz%"#ZeBYi6"P*cxVeWvUf)<!6tKA%#;QM G 2͡r }?igh4  R"͝@;6+q㦽wm؟jTt]^+Mf0zm n3igEzڝuJqaZ{py̩ͩtER+`v:G5'J,=-/KPjQ t\زL.=>(MA85_V_&X8<0ߩ]2|DfrVnR05&ݨI2j,4] xhns&NRm?] w<7+,`6DO͏as1/-gGLimbG~>YX̨B#4-E,>'K{‡8u /szjBOf{r]c:]Nw>r]>RDMA=1SrIȡTP9Ɇj6ǯ;̝q8 ѝ.$ŏG|!-7K2XMQBa<2٥N*SO0Q<%ּY 35zasX[.*-ù]laQd o_t)S @MnÑSQ:c ő<n?ͿXy8=Ѝ{#CcEg\7}'O5RjlB*ecgY´|%rsRr3KUVzݫlIX@O6/s(]ZC`ʭ՗Kҿ [N]NԸ@ vvS|X Ȑ4NOl)kKw>ޗHIH&YI5{S F1NxPd0&5pG]W"2jlښN>vd;az4:T3?: $0`8>|;:'MXo<‍ύaV_;~beR$gR4/FjDMC#0GXUڦ+m(Gw p誩3Zeo'ڳ \zX'PޓOa8ZMPTtxiI;ZXjɮ}QSw (/S> |j,K"[f](JK.4D@VN>^ <+ #\7epDR} ȃ.+jFGLRxjl CcPyer^{k[zHA_"Z{Vِb`Sj}RegއzCtwpxjщguXsO"fܵl`3kVNڅ]7HL#[}`u5 ݆*x+K31iP+.Jp`6MQWQ/gsbq?A4ޓG*u'v_pFK[Ar@B[c`ꃳDӷἧԙ3*7U\\3^w_+ьm%] G3=t cG\ݭdͨgETPi38 /5*HQy1bSbг#n4:)㌵5'g]<أ8"js?i`V 8{ 8)MT3@^uDp-/kO?EJپދ^3jZwcoy?{[ ÎiFCݰ)(e@x7*Iנ1& D?fҏUA1puRrob;q(W=kD GnOQ/z?nR#q)I'F~y$2jVuOO,rpށxVܒ%f5`j DS|3Z> T{s40B(f'jsbm{'u*A}Fxp2Vösn+wȝ]Cx Քٶn ַQ ;4RTsX{ʹjS_ 7 sͫ>eAK^ G5i-䠁p5B<4Wգ1'a/=b`L^N\^!)@|(,@+,Ƅ6 ]f'V5oE}{xE-lUܽC+$y?p}bhMyWo {%ZR&LoRaG$(|v8TNk탒0sqe|L3Pe3/Er IM(نP9IKM~.ba)QĴΫ[M|CJ"BR~z)C߉WpXۼJGnZLD""gNh׹\u4÷`ކv HGf^4(LI(|9)';r,K`tչ͓}H5ۊdXwXNƫ[ _unQ!dm81>rK@p GY$a<#8V!; Igz>,q-4!IIL2i O0V0*q͑~.;.N, тgnߚJH/D$A!}%49TqCrIٿ߭V:?  ɷfm鴗@h(uPbWw۲^Fm{xWg\XAVEwECn ਤc(V}ѥA`XHJu2?ܽS])AG_`K}y<" BFAQ M4w0E.g(ʳc7EWJvzyq Z%BaO$w)t€<]Zwȯ +'og- IڮſzDHh>rXi4_@>j"gdQm3İF{+vp' C!]u4SiO|\:>zбq߯ rLU'YMilg?8~Nv2 -O^``yB}Y\r1~>{I/̊"BJy k)W3 _T9uQyH-'NFE[([n NI+yV$C$gAחd@IC$8 D;>|PNH2sGp)a [1?f. l hl0%8>!Ls؅H5x3UOإ09rXű>@AO$G4 eRN 1Ja.kU,"Rq~̧2Kj;]v݈T;F( {r|"MLϬCCo"TC}hݿ@N:hJJ1a%JnO@U rjhDߝ7N_Ru&‰abF0V]o2 q7(Kt+ 9UIZ.eS}Xss f&:MX>{+έLSEwDGѩEhU` Y4 nsol 0J&8df0mwrr67Z1iQN' BwWÞqmeFsꃄ2gql,訢G$5%ƿo1XsLH=Ź77f@zF\RX: O/ZUQ{0?]9jr 1#$;"Pp^x(rKkIpuYY>YG6 jIqqH`W% +S!q~S'⸴skԞr?meb9!=2?e&^zf;QVض)P92ɺi+L=C,kmpZ.|?62ss4"߬BN#a4( 1ueR5 ,臨<}²4 $<Ϩt O$<SBb$ykMʐ/mWţn^]aC+|< -Mu&+0[ CizJѦbcʠm)凧je`d0S쉢Y9`Yn*ݤ{WUViR'G{n{ f߼,L ܛf}GdOmmJ#`Bu $Yh!v'ɂNrs4@(!Hs&`* 2^S"Vq<|giPu %:OW[ }:o8\ri 7-&TJP62SŒb_C&QB?ZP^Qw) AB!%S.}` cs 6k=IKM$EMGOjsEiiX+ O`2F#]GnҥBZ߹!Ujs5q:`aMt솊goB$6LhlIfqV._}Td?ahp0chHDv4mIP2xfI˲:hMut8hPD?~:M2ZKs*Z? !*0sH0!^0$1c: n7aEAJ-h^;<{rF˞ZV^;+p „^CQ&z^@輱qDԛgYqsȠ#J,6#* N/X `"v ˽4!sMdᇘL4R&T|%. u6`G0t!٭;9/U};b i'K@:p!a ʐMۜ9lhmE#D J94QYi- f-sy뢰O;&fHzW{*9Ѻz AFkAPVRfOU:f3W0WYv%gHڴXI@w^#M8OJA./^q<+}D(\ZL)*#J9͎B3 *֕͜U8_r]L*:x_#AQ`UO b)y44rnd]6V~1A A~|bI^'Z(w( q:#ZQt3ơLjOy©oC(.B{e1 N. 9B76/Ξ[T)LWt}~G^|Kz1qt;Jm"kyɀ$V$g6 _5xQP#Xh,;mL/&fxK22*z&&E?^U_$([nĎA~Y{R [ la&AhޑLׂQ &"_d"2pA\\ *s/~స<`T׉CgP{ )&#<~2]1 eLܿkB3JHӪbvV\v4lI#GAa$xİ0 f9D\5%~Y~{*ֆ0i.f4NB "uȋ@1,iON&xGچHCJt-ʵ.8mrCZtH*L+# OLsBj/q}9!JAjcll2 ߺ$Dh|rDY,Gŏ }=eY T$YY{cLEr0QQzdvh;$%lbzg35'{̟4x> ;o^tU{mFt~K5+WC"a J-dSB.|f<;'吞\L3Toi"љO[R۲dO\6Jl:k_Aj-Vp\Bi:@`5>sL 0z?+ 21 rv,̼;<[Jvf6}R:t*?JUɥOHk * CAB=MZOR`f#3]vسbGXTNDnn;ڧK$_a^g*P԰"zh05 bP9&Fo!oqsS b,Ew2 :F4r[돡E]m G&Q"E8@vx4?n4IK6tM B )'tvzt"/h{@$v2r԰Y"C<@8(1#f q%5ZˊR~nSgj;VW.syU }PnA( י{t+31)6ۊF?AO,!\5Hԍ&`w|h`~Gu.ԓu!*'4?]fȤx!j8s'MUҧ\2b]Mx`J$|y;>-XH1@^c.6FSk%fYѼy<0ב3H~_$0+"FJ亙B&zܨ]R(|3:x^S]>-F C_MnB8E2 ȩ3!G,6N>xMVfР c);$nMupvRr Vܚteլhzqk8myׄ T"q l>T–oG߃Dv !sK&j\qP<G 4[%,Q01\* (uw/gblׁ_r7@3@[{`Q|ہjn'|懌`-b6:``hGS Q vʼ[))/l2pIdhծ!T{ =X$(wJP Mb_m #<*aيДQ\3QJrn<芨Bj Ct d$SˣZ"WYΊ%]A=H4ڎm{@y|g$'AkRwJ^ɫh8fWNU6j Dए=^Ȓ|oEOQ*xhfrl86$A͋Š꒲fc3M7곪 l8 alQEՁeB% GL/a(#ol52wŁ9[0⚙nP " .i9jMw]"+ء8C$ lrP#ޖjן`@B.0+ƏALQ ΏB˄Kӆ糿6CAVs %{![%=a ]ߡ1>:Na/ЊJ{fRNȎֿD*]%?Ն\v.|p={ۈŢ?'=Bշ79f0,.d052RdpV×mo(^ѭ#=ɉ 8s8BK@=BR?9H Q?@zуEST/{߻LʹEPz[. q@+@ Z\ L"!}[/yxZCu:XwsNGp zmf%Ű2diyu4oXpيjH)`4 G|ⓋۧJO~T~Q޶](03㺲syeά~L .4G~flvɗ9J>=V~L:]QWTYmkxLpS +QrFoIknχӇAgGVY:O"L [&L|JopΦ(Mr㱤S'g0+ޚ.T9AS#^:~tEg-`t!8Նovʺ}?33ා'~GnmG^XR ;t*橏"4WF|턭+YEDS KhsrU~1O8އ!r)i *y z'T)Ƌf 9R\ :%쏗tigrresR"[]+Z\x^6 >0ٳ˩5MyxY#+g)]`X)^pB.!n6dꀤmIS5$`?ˏe+^ЇQ:NIʃ 'k)f"cՑ[U+X(yui87xgO60Rs [_T5^~Ӷo?u k`Mj \.ZID݄>p*wNG̔h)dp]k,X CU0XF&CtuN\me28f!zG=:]] ۺ Z9xhJfNSˤqdb@ַ]I C+/48Hw./g)M' J"UMuxbY  XYp4 ݬl96\38|$HS_,Pyx8W:!ؽ-Nr cB<.e"6jg ֪Lј΅>HB,$, [NX(h6\V]h)׉GfW12S+V,}ڻk_Oz2s}r\r]nt(6B+)BxEC3֥[c1Md%1^9 ișݴAsܮG~T8aQʤ9,^`nk"ߡf 1fMZ) u 1,Xs  [4ƛmRP n?WrrB\shQӟjkr/et Z3RקوSJsR6~5TX@ G*]*:t7'8Ra[4Ɋ7T4*n "T܄'IaTϛ/SPqROƽOCqS2Uݞnb5[t !7%I?lnJ fO-ܕ*CKb7_UH, H"q=3m@Ѝ/L։fhb\ yrj' TѠ6G+ OJ{gQӬ7~hmqs~QG5 ^"Q[^LYgtk~௚j:ӭ6K&XmiV1D(˺j((y9 _K}4:8jOǚՁ*<$o N7/yM;_ˣmzraA5YJ{{XdU@sх-(]ԡ48[/3Ov9>C?s[aZؼYȥ4B1ٰŗٝt<>E:?%]# d;&_TE<Y+nHF5-1~Z40H l)n>}fC|LAaz#7UH@vw;f+C̀ $ CלbfP&lF%N'  ʹ+'w34c (\ł%ňe!怒Ք;vL/WH!Nu2Znס4i#½~Jͅ,vR|S?P+D|='pvȏ8G84B=[dlx84ly7g%zhOfT!̅”\$2SE.NX"L^Ҹ.ohA kr  D}&mYQg[`D_v;0fBGScC0*x(fVcЩitLg#$IkD״UJ3!`t0&Ş,f({{X,-@&B0~ܘےp Q 7 j,FBc|&莟cnS A| >U_,8S,F*f__'CG=p,H *9YE nT1Mh%cjd31M"(eXEnͭ,j\.jRb!i&(G1o)C2LmM:Ŷ"B>"&6<2^ĎG&Oꡮ;o(|Tѕ(w)`njeX\OE$N5VY¤8/O 5mDOK-=iikMϮ{1a5%_rq{o~P1?{s<)U$_'WI%@PRNN3|dl-r9)5XcQ; H՜k6_xtu5X9~#ѸI֊`%1s B3Ÿ*-qJKD[ܱv.4-o4Zwq8nKo6bzIrd7 LMpoOi,PA7t馗6bІ,c Q޽bGfώVОEYˀ7xVwu'U*L~ =Ѿ>,cr3Z%4I}Gjv60<7 ndQ_'Wt mhD &Tm_1\^^O4|rhh Wohq4[]q(_YYtZk>_BFiyEᒍD;YHU nI%4<7YAWfn$9!E#+&cշFۃJ]m{o1Å8l dW؆blXP[ rQf߸f X(EnHK>Ʋ~2 <63JP9*c^ʈ:˹ =ߓcE]'ayӞA~eX^RfPF$[0v.67^,\uhTʼV -ۨt>:*1ijX:7A22o?0*s5AYg៧_i{{jgƵpZ .DX 'oB](P'Tн8T4 Ҏ's'iLͪbzQzz%2`ƭk<.oGKYnO޿ڌm\\Z|w`eD-7f8s>a٘=Q0e0/Hh 2Fuhu"3pz_{y^L餸FVI\a[2_&иvR9{dO=QTc15=)%xׁm I(lt IKHʛ),dҟiXl}1bjPYOzcRĠEZˇ!C )届 fP9|b7'է*%U1Mf{CX'IӪ`ҮHiG8$&H.Z+v\ qhz=2Տ߭iy+n%5[hLboi]gLq99j6٘SΒj ް NOOF61H= HaIOHJQ+ ~`ݐuȱ.y(ur*:od. d~< `ʐgKjt|!IbD'|JE@s[.r_E(ϭ'^@5BfJ\%̡n=0]s8 G ~+ލ'l ,oŴk̯z|EzaZͨ P4jegEWVvlGRکf]4x\Ї84EuN1&I/n$Nj9.xywhN.t ͝c>٢omHd9*ǟv~8v\pVڧU/nR Yei'}7P.k|/!J:jL]bu5Zi kxO4,̣e $H_pPrD]*L"nssNߦpG`%A.R|F'Bީpo1 S#2ۛaإn-kW.ad}7+͚Q;QeʬG/SW13r1r X C%bxq␓B_n<+Ya ~G]D 2-pw 5ts3\ܪW:cʕ?ERGl 7w2 !4G5ikDfE_䲢Oع_*rp>0T@Hý汨B BE" fHhE"{+A:O2|u騸-A7O[&enX 1xߛz铠0uaԯaE#=PAjz7w% AYȷ~x>p[ǻxSWԓݻp$v/"-1;r-WáVo F 5[̞]W0Ln(f~Ý8_n?Ƽ/C#rk/8(B/lVC(f{ o~ !{ 7rXLV?Bq]Hf ~?qmj_5i=[qnZ"GT ti9]6e=lp@% ѤK)r#>+}Q6YɭmBoft;AD (y.cת7ו b 6Bi~AqᨾF&":bP#䃶ӛd[! 1z#3i3?CJX[|'1PP}"je>/<#dT ĊiƵ֏9V2j #g+I3nFp8ֵ"yaPg4ŗշ3 #t/#ES['kIVF!}nDMqO ̤YO z2dх^PkNj{XAd1.̒aaXGحu6(ޮxk1WK1 ׎H!\-څl-͞dzs:|4?o>oiZ|H0ZsGn%XQv{_q/ ܰJq"&a1 rld:d࿼ D)L-;|QPA\(U\" _rZW;k8xy)bZwOZu!n !9O~bxuFVgzBZ,tc:MŽsR;)Irx8GL/lIRԬJ#{#Y6;5"}t4=149ׁC.02y#xwBK-2?mJ8ha^|' ұnJh f~% 4 8tɭPGCEaw}!@ Jb /Hj1ݴn OODsx"^w٠J[HjH2|m`aɱ-cӧj)#GYpzk_ )a:)UbC[ߺKe hZܦG)*I}ۥd%'P>"wc$^@/)lԏ}i DiVMCz1ݛ+$@g6 Km5#y@z**%>gdXU>|ج J]n^7]Nb?9`@ 1%6i B=YlPCՔͼpz şz]#(-/:X0w"XRxk(S9sޚz-M RJΠ>. ^U?n#UGĸ3'Аy4Ήo4V ߫s]\3_Fwqw5 ̽3 /4k]ʙ;ugd|iI؜(Q }]xqX˓QTU-1X37\5" ^~`_ODzy&0.(޹eCcJLOFg͉ 'wᶞϏ&x,AM[듃1J]|@ZoR4c9yzʅPAׄ$/#%qϬFW 'm\m*3Zͼ)|\/B2̷o/%R?MjUA[e)%!B^pA|ǪG3H JaƺA4Yv>%`?.Àr \#_8 ,ўO-3ą)R{x |fg< 0Vlr@Se0J;5zm]t%jw,:K'= [_ /)UXzo:3!E0^ WjIێ8[(Guqx'- qfQ5"ezgٌ}~{}@HOvS駐>U'TU]4],Z9j.rBO:cπR_" p+! 6@yl[@Qxw[_la]@SGqQڒljjYʸp<фYmprz׿N %#<1pojL[Ǟf8.L_tgs\QR[@ya! {2͐)$EکP)q]BQSy\ ,VWqb`XG7 b{$KT6bTTܦ@o`a!7Zh y