libjasper4-2.0.14-150000.3.28.1 < > , c( yp9|IR ' Z.CZr鄱-9T) ?U") t&D]XRadmNBtHEf#!gН+E&rZ`][y wR_4
oR*+q^vV1e:naRj [w{Pk k蕦RI;__X4 t`}>'oΠx➄V=#j!Գ<ꌿ-B?%˻VVӤ > C RT ? RD d
" 4 8 ` f p x |
( l ( * 8 4 " 9 " : " > N @ N B N F O G O H O$ I O, X O0 Y O@ Z O [ O \ O ] O ^ O b O c P{ d P e P f P l P u Q v Q w Q x Q y Q z Q Q Q Q R@ C libjasper4 2.0.14 150000.3.28.1 JPEG-2000 library This package contains libjasper, a library implementing the JPEG-2000
image compression standard Part 1. c( yibs-arm-3 80SUSE Linux Enterprise 15 SUSE LLC SUSE-Public-Domain https://www.suse.com/ Productivity/Graphics/Convertors http://www.ece.uvic.ca/~mdadams/jasper/ linux aarch64 80 c( vc( v bb8dbb1a8d475efcd1fe90227cc115ffb3199adfeabf67c612f476dabd41b638 libjasper.so.4.0.0 root root root root jasper-2.0.14-150000.3.28.1.src.rpm libjasper libjasper.so.4()(64bit) libjasper4 libjasper4(aarch-64) @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libjpeg.so.8()(64bit) libjpeg.so.8(LIBJPEG_8.0)(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.17)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 c$e@baG@ar@`!'_FN_:q@_5+@^p]@\ @\\@Z@Z@Yf@YdYdX@Xg@XX~@XO@XZnXOX=XX
V@VVUVT7T@T@mvetter@suse.com mvetter@suse.com mvetter@suse.com mvetter@suse.com mvetter@suse.com mvetter@suse.com mvetter@suse.com mvetter@suse.com adam.majer@suse.de mvetter@suse.com mvetter@suse.com mvetter@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com sbrabec@suse.com fstrba@suse.com fstrba@suse.com jengelh@inai.de fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com badshah400@gmail.com nadvornik@suse.com nadvornik@suse.com nadvornik@suse.com - security update:
* CVE-2022-2963 [bsc#1202642]
+ jasper-CVE-2022-2963.patch - bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
Add jasper-CVE-2021-26926-CVE-2021-26927.patch - bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
Add jasper-CVE-2021-27845.patch - bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
of channels matches image components
Add jasper-CVE-2021-3272.patch - bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
actually check for allowed value range instead of just negating
Add jasper-CVE-2016-9398-upstream.patch - bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
Add jasper-CVE-2017-14132.patch - bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
Check bounds in jas_seq2d_bindsub()
Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch - bsc#1092115 CVE-2018-9154: Fix possible denial of service
Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot() - jasper-CVE-2018-19541.patch: verify color palette information
in j2 files when it's read from the file as per specifications
of JPEG2000. (bsc#1117507) - bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
Add jasper-CVE-2018-19541.patch: Check number of lutents - bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
* Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
to jasper-CVE-2016-9396.patch - bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
* Add jasper-CVE-2018-19539.patch - Added patch:
* jasper-CVE-2018-9055.patch
+ fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
a reachable assertion in the function jpc_firstone in
libjasper/jpc/jpc_math.c. - Upgrade to 2.0.14
* Soname and package name change libjasper1 to libjasper4
* Security fixes:
+ CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
* jasper-1.900.1-uninitialized.patch
+ not needed any more
* jasper-CVE-2016-10251.patch
* jasper-CVE-2016-8654.patch
* jasper-CVE-2016-9262.patch
* jasper-CVE-2016-9395.patch
* jasper-CVE-2016-9560.patch
* jasper-CVE-2016-9583.patch
* jasper-CVE-2016-9591.patch
* jasper-CVE-2016-9600.patch
* jasper-CVE-2017-1000050.patch
* jasper-CVE-2017-5498.patch
* jasper-CVE-2017-6850.patch
+ Fixed upstream
- Added patches:
* 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
+ fix assertion failure JPC_NOMINALGAIN() which can be caused
by a crafted JP2 file.
* 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
+ allow JasPer to be build with CMake 2.x as well as CMake 3.x. - Other bugs fixed by existing patches:
* jasper-CVE-2016-9395.patch
- bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
* jas_seq2d_create(int, int, int, int): Assertion
`xstart <= xend && ystart <= yend'
- bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
((bandno > 0) ? ((bandno + 2) / 3) : (0)))) & (~0x1f))'
failed.
- bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
jpc_pi_nextrpcl(jpc_pi_t *): Assertion
`pi->prcno pirlvl->numprcs' failed.
- bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
* jas_seq2d_create(int, int, int, int): Assertion `xstart
<= xend && ystart <= yend' failed.
- Other bugs fixed in current version:
* bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
* jas_seq2d_create(int, int, int, int): Assertion `xstart <=
xend && ystart <= yend' failed.
* bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
`n >= 0 && n < 32' failed.
* bsc#1010968, CVE-2016-9389: Assertion `((c1)->numcols_) ==
numcols && ((c2)->numcols_) == numcols' failed.
* bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
Assertion `numcolors <= 256' failed.
* bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix<= yend'
failed. - Added patch:
* jasper-CVE-2016-9262.patch
+ Fix for Multiple overflow vulnerabilities leading to use
after free (bsc#1009994, CVE-2016-9262) - Added patch:
* jasper-CVE-2017-1000050.patch
+ Upstream fix for NULL Pointer Dereference jp2_encode
(bsc#1047958, CVE-2017-1000050) - Modified patch:
* jasper-CVE-2016-9583.patch
+ integrate upstream change
99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
pointer dereferencing crash. - Added patches:
* jasper-CVE-2016-9583.patch
- Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
CVE-2016-9583)
* jasper-CVE-2017-6850.patch
- NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
(bsc#1021868, CVE-2017-6850) - Added patches:
* jasper-CVE-2017-5498.patch
- Upstream changes putting braces and belts around
CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
* jasper-CVE-2016-9600.patch
- Upstream fix for "Null Pointer Dereference due to missing
check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
bsc#1018088) - Added patch:
* jasper-CVE-2016-10251.patch
- Upstream fix for bsc#1029497, CVE-2016-10251: Use of
uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) - Add -D_BSD_SOURCE to fix redefinition of system types in
jas_config.h and breakage in ppc64le, s390 and s390x
(bsc#1028070). - Added patch:
* jasper-CVE-2016-9591.patch
- Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
jas_matrix_destroy - Added patches:
* jasper-CVE-2016-8654.patch
- Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
buffer overflow in QMFB code in JPC codec
* jasper-CVE-2016-9395.patch
- Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
'xstart <= xend && ystart <= yend' failed
* jasper-CVE-2016-9398.patch
- Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
jpc_floorlog2(int): Assertion 'x > 0' failed
* jasper-CVE-2016-9560.patch
- Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) - Update summaries. Use %_smp_mflags for parallel build. - Updated to bugfix release 1.900.14
* Security fixes
+ bsc#941919, CVE-2015-5203
+ bsc#1006591, CVE-2016-8880
+ bsc#1006593, CVE-2016-8881
+ bsc#1006597, CVE-2016-8882
+ bsc#1006598, CVE-2016-8883
+ bsc#1007009, CVE-2016-8884, CVE-2016-8885
+ bsc#1006599, CVE-2016-8886
+ bsc#1006836, bsc#1006839, CVE-2016-8887
* Changes
+ Add another data file for testing (Michael Adams)
+ Ensure that not all tiles lie outside the image area (Michael
Adams)
+ Added a note on sanitizer options (Michael Adams)
+ Added a simple test script (Michael Adams)
+ Added an --enable-memory-limit configure option (Michael
Adams)
+ Manually merged and edited a few changes from Bob Friesenhahn
(GraphicsMagick Maintainer) for Windows (Michael Adams)
+ Added some new mostly small image files (many of which are
corrupt/invalid) that are useful for testing purposes
(Michael Adams)
+ The debugging function jpc_dec_dump did not consider the case
that a band can have a null data pointer (when a band
contains no samples). This caused a null pointer to be
dereferenced (Michael Adams)
+ Changed the JPC bitstream code to more gracefully handle a
request for a larger sized integer than what can be handled
(i.e., return with an error instead of failing an assert).
(Michael Adams)
+ The component domains must be the same for the ICT/RCT in the
JPC codec. This was previously enforced with an assertion.
Now, it is handled in a more graceful manner (Michael Adams)
+ Fixed a few bugs in the RAS encoder and decoder where errors
were tested with assertions instead of being gracefully
handled (Michael Adams) - Updated to bugfix release 1.900.13
* Changes
+ Fixed another problem with incorrect cleanup of JP2 box data
upon error. (Michael Adams)
+ Fixed another integer overflow problem. (Michael Adams)
+ Replaced the remaining left and right shifts in the QMFB/MCT
code that can result in undefined behavior (due to shifting
negative values) with call to inline functions.
These functions collect all of the undefined behavior in one
place and also allow code sanitizers to ignore this ugliness
(via function attributes). (Michael Adams)
+ Fixed a bug in the row/column split operations for QMFBs.
(Michael Adams)
+ Made the PNM decoder more gracefully handle the not-fully-
supported feature of signed sample data. (Michael Adams)
+ The PNM decoder did not gracefully handle an invalid magic
number in the PNM header. (Michael Adams)
+ Fixed a MIF decoder bug. (Michael Adams)
+ The imginfo command did not correctly handle an image with
zero components. (Michael Adams)
+ Fixed an integer overflow problem. (Michael Adams)
+ A new experimental memory allocator has been introduced. The
allocator is experimental in the sense that its API is not
considered stable and the allocator may change or disappear
entirely in future versions of the code. This new allocator
tracks how much memory is being used by jas_malloc and friends.
A maximum upper bound on the memory usage can be set via the
experimental API provided and a default value can be set at
build time as well. Such functionality may be useful in
run-time environments where the user wants to be able to limit
the amount of memory used by JasPer. This allocator is not
used by default. (Michael Adams)
+ Changed the configure setup so that if GCC is used warnings
and pedantic errors are enabled. (Michael Adams)
+ Fixed a bug that resulted in the destruction of JP2 box data
that had never been constructed in the first place. (Michael
Adams)
+ The memory stream interface allows for a buffer size of zero.
The case of a zero-sized buffer was not handled correctly, as
it could lead to a double free (bsc#1005242, CVE-2016-8693).
(Michael Adams)
+ Fixed a small memory leak for CRG marker segments. (Michael
Adams)
+ Fixed a problem with a null pointer dereference in the BMP
decoder. (Michael Adams)
+ Introduced jas_fast32_asl, jas_fast32_asr, and friends in
order to pull all undefined behavior for left and right shift
of (negative) integers into a small number of places and
provide a means to have UBSAN ignore this ugliness. (Michael
Adams)
+ Fixed an integral type promotion problem by adding a JAS_CAST.
Modified the jpc_tsfb_synthesize function so that it will be a
noop for an empty sequence (in order to avoid dereferencing a
null pointer). (Michael Adams)
+ Added some extra debugging log messages for memory
allocation/deallocation. (Michael Adams)
+ The RCT and ICT require at least three components. Previously,
this was enforced with an assertion. Now, the assertion has
been replaced with a proper error check. (Michael Adams)
+ The member (pi) in tiles was not properly initialized. This is
now corrected. Also, each tile is now only cleaned up once.
(Michael Adams)
+ Initialize uninitialized variable. (Michael Adams)
+ Added some options to configure for enabling various code
sanitizers. (Michael Adams)
+ Added some range checks on parameters in some JPC marker
segments. (Michael Adams)
+ Fixed potential integer overflow problem. (Michael Adams)
+ Added some functions for safe integer arithmetic (for size_t)
in jas_math.h. (Michael Adams)
+ Fixed some indentation issues. (Michael Adams)
+ Converted a few raw mallocs to use jas_alloc2. Added code in
the jas_* memory allocation/deallocation functions to generate
debugging log messages. Only disable JAS_DBGLOG message if
NDEBUG is defined. (Michael Adams)
+ Added more error/log messages for debugging in the JPEG
decoder. (Michael Adams)
+ Added some extra log messages for debugging. Added check of
value returned by jas_matrix_create. (Michael Adams)
+ Applied fix for VPATH builds (Michael Adams)
+ Did some configure.ac cleanup (Michael Adams)
+ Fixed 'inline' for older version of Visual Studio. (dirk)
+ Fix a potential double fclose of a FILE* in the JPEG decoder.
(Michael Adams)
+ Changed jas_types.h to assume that header files required by
the C99 standard are present. (Michael Adams)
+ Incorporated changes from patch
jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
Adams)
+ Incorporated changes from patch
jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
(Michael Adams)
+ Incorporated changes from patch
jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
+ Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
(Michael Adams)
+ Fixed memory leak in jiv. (Michael Adams)
+ Fixed a sanitizer failure in the BMP codec (bsc#1005084,
CVE-2016-8690). Also, added a --debug-level command line
option to the imginfo command for debugging purposes.
(Michael Adams)
+ Added some missing type casts to ensure promotion to the
correct unsigned type to avoid undefined behavior (and stop
warnings from USAN). (Michael Adams)
+ Fixed a linking problem with newer versions of GCC. (Michael
Adams)
+ Changed --enable-debug configure option to enable some GCC
sanitizers. (Michael Adams)
+ Added range check on XRsiz and YRsiz fields of SIZ marker
segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
Adams)
+ At many places in the code, jas_malloc or jas_recalloc was
being invoked with the size argument being computed in a
manner that would not allow integer overflow to be detected.
Now, these places in the code have been modified to use
special-purpose memory allocation functions (e.g., jas_alloc2,
jas_alloc3, jas_realloc2) that check for overflow.
(Michael Adams)
+ Add fixes for CVE-2014-8137. (Michael Adams)
+ Added fix for CVE-2016-2089. (Michael Adams)
+ Moved abort into default case of switch statement. (Michael
Adams)
+ Remove auto-generated file aclocal.m4 from repository.
(Michael Adams)
+ Removed HAVE_VLA stuff from various configuration and build
files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
files (since INCLUDES is deprecated). (Michael Adams)
+ 1.701.0-GL (Richard Hughes)
+ pkgconfig (Richard Hughes)
+ Coverity-UNREACHABLE (Richard Hughes)
+ CVE-2016-1867 (Richard Hughes)
+ CVE-2014-9029 (Richard Hughes)
+ CVE-2014-8158 (Richard Hughes)
+ CVE-2014-8157 (Richard Hughes)
+ CVE-2014-8138 (Richard Hughes)
+ CVE-2015-5221 (Richard Hughes)
+ CVE-2016-2116 (Richard Hughes)
+ Coverity-FORWARD_NULL (Richard Hughes)
+ jpc_dec.c (Richard Hughes)
+ Coverity-CHECKED_RETURN (Richard Hughes)
+ CVE-2016-1577 (Richard Hughes)
+ Coverity-UNUSED_VALUE (Richard Hughes)
+ Coverity-BAD_SIZEOF (Richard Hughes)
+ CVE-2008-3522 (Richard Hughes)
- Removed patches:
* jasper-1.900.1-bug258253.patch
* jasper-1.900.1-bug392410.patch
* jasper-1.900.1-no-undef-true-false.patch
* jasper-1.900.1-bug725758.patch
* jasper-overflow-bnc906364.patch
* jasper-CVE-2014-8137.patch
* jasper-CVE-2014-8138.patch
* jasper-CVE-2014-8157.patch
* jasper-CVE-2014-8158.patch
* jasper-jpc_dec.patch
* jasper-CVE-2016-1867.patch
* jasper-CVE-2016-2089.patch
+ Fixed upstream
- Force -std=c99, since the upstream sources assume C99 - Modified patch
* jasper-CVE-2016-2089.patch
+ Use the new version of patch from
https://bugzilla.redhat.com/show_bug.cgi?id=1302636
with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
obsolete itself - Add jasper-CVE-2016-2089.patch
* CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
function (bsc#963983) - Add jasper-CVE-2016-1867.patch
* CVE-2016-1867: Out-of-bounds Read in the JasPer's
jpc_pi_nextcprl() function (bsc#961886) - Add jasper-jpc_dec.patch to fix failure when manipulating images
with 4 component color using reversible color translation
(deb#469786); patch taken from Fedora. - fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)
+ jasper-CVE-2014-8157.patch
+ jasper-CVE-2014-8158.patch - fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)
+ jasper-CVE-2014-8137.patch
+ jasper-CVE-2014-8138.patch - fixed possible overflow CVE-2014-9029 (bnc#906364)
+ jasper-overflow-bnc906364.patch /sbin/ldconfig /sbin/ldconfig libjasper ibs-arm-3 1663573113 2.0.14-150000.3.28.1 2.0.14-150000.3.28.1 2.0.14-150000.3.28.1 2.0.14-150000.3.28.1 libjasper.so.4 libjasper.so.4.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:25971/SUSE_SLE-15_Update/47e1b4d22800e351d0091d6f48934b68-jasper.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3766752545c16f774073fc44889939b3c759280, stripped P R R R R R R R R ]>?\s\E utf-8 16fac7f64c95b64eb37998f4a717b9ad810f65bd3d7d78da65826fcea1bdaa49 ? 7zXZ
! t/c] "k%f0]d
y*QЯ}te;\_֛C&=>MDV
c0 - Cg.S ->̽kF
GX|2g^b8d.-LZ 1l*GLp==B'HN%[ӧ.dEFQ7iYbfvՂ daC %{Ա`І "Οn}կn g{/J&1 f{ڹPp2<$CHugԡ7 اM6lKa5mE[@/y^7N6p0xMAr:DǹStk|mvFd1uکRж2䱺` DMjw48 #psU _&^!FЛ6zG:|q 'h{-#1r닶"ٴtI`A F彸&%4YnOPUY~9S\ZI>TW(_7'>rͧi燂^XpolIc gv2c2cg: 'Qf* ^ƃXiB$۱;UaO\ts+K3t9t]elti BɧcwA 0伞(8K}7.mJUTŅ!!EX"CO K5 Ⴇ~aPg pMgC@9CAG7aRdl$9I};{nB Z^4to2KOiQpT_B,i DnCw>rs7 +L ]Q[ &f/_n]n#:zʜ.!n.]{W>w"ʢ>Ͷ(|y+wXJf#nopLRYݶ "5^W :PVcant K/-vk`Ok :5BcuduQ Qd*+*ހ6Q t&Ilm |FNY'
}ɵn oR& +?⋃Ɏ ^.hI|Lz]ܫJWHOeZKТ`GU 4kƝ]P\ B1zP
~P1tR<6
C[D8`WT&
+U~vvʞIDRòU*?> $CpWvyžx΄-BNbClULJaEtytبK
%@YX""=W۪MG|C^ơX'\.Xfۨ̓r:Ҥ51 qRʨ3x;2DnTn4c^^Ë2d& W,(g
vj85lGpNR#00,ZR¤ҍDsÆӀ0viB ;tct_ߊAR} mUڒ_Yl]Nb>-ٮ>8Sqp
s&yU9Ǵzy*{ oOpum}T* zXoo JgnU}N
A%*Kc]U%l[/p8;=% >"
%ÝC!XT >T >2Ä?:b_Z(E#_v\SHtyЅHuzvdnID"
\ 'jr}yoEy;~!b&(Vs(E{e˜8ixp$LNJjz&4nLu%F:N zwiEx(_xr9eMÌ AK[ޮwtՇتLNTzpbrep--_"uBqr1Y8 yg=4sb}ȍ |T:njejDaoP5Gܘ$*S25kL:;&J8)NaX̌XM CLq+GiDem넳mUv{!T'=h&iP=-$z
j> v)cF ʛ6bzcxR _ pFB=J[;Ӓ/ QQCMc nl7t)G9"X3 ؾ8 !@T.!jy<Ӽgb/ _E>\nlļ@
蛆aĩiZi tiŖKMh63U 8 Ꙅpf{?P8eƊ̧D'f`;)V ]RC5_/ C~zր`kD&8 3zHOezrzG^
`6c1(;4ZL?,|6sXt|V
h7svAMD+XJ@!2 -7qrc?i'<(sh@+*͞ n+J0m}m&*ڄAfBY+ } 8 8ɇFECB(O ^!'<{ 1@9@hI8-A eL 't>veRa mi|S@rR?b:qw%&;n4 "6ρ0`LN-Xύ \D{soUW .vKy
c@ Clջvss_
xtAm эΤަ
ufI%/ε mK]jPё8~8Rb͒cZԮ*_%ř]:Ћ,<`O|Njgm^ G77F
|b+|I!ĂN"7\hհpD.ͮܵS؈mR2 yn h*Z% XnDTaZE( $X kӨgVs2_:]g*?eqeOP7!hmwO⥃"Iͧ$~1e |_ !ྸ {~q*3*G䫕Jz v1L<
f"'_=;6 8h/Y+vÃ#J4&{,˫ Ч,\ 5ZƜk`z_dxK`e^@f O1f" 3\(l ' 4-ͫ/p'S!XlXpM`GS YvZ;r6-'4{XE
w*ݐR/6lfr*n}riS#M'wWs!3;9
E-&.)ZC$T\(E?~Q0x+()̪ ;} ~9ͭubK ޚTXw;75[" Y A Ϯ
Ukhp&2HNRqSطYjd?]r3 7 I!7m~6,ٵSjQ^U~\&pR>n}x+.z6':AږPeW~d&k B ضc]~Rl87s̔aYJ0|NP+K6Cd鸬_Iڰ*Aw%;i e~؞̇:QZ}AWIB {=Jgu)a(xYTU _W04Q3ݤ*
k-k5DtM1 %=T
R2y;?0?goUEkhCMf[K Te X6"{PXm?ec sſp7 at̶S2
md@;~L
e>X3h6LP3J)yGȹC"ՎIZyCTv]otZs Н Ucl]5۠!j nqyC]8"Z;T.,2/ Baj%i%>)'+1!^][P HHSy唑f=Ͼ 8gKbm#+n֑<&<
M}/}X_JT|c8:jS8h/#`zK, ڛ]m&~9h1ѲduHvN2/y@
\a@d(ȃ
/9=|~tw,z88rp| @ЅeE$ )H` IV*q~ PwC}) ENP K_/Ft3ee r%Mw hyyMskeK] NrGM8NÉ֫0 \,骶2y/
Ǖ7(547
Tb` t^Ɔbf?SK1xs<8o,L Nq9{)Ƈ {vwaP$phͫPjx_;EH
ZLsTAD{1A y?Qâ&x :vLQ
MfO6.dB=HAWD̬ܫ4z @tVl wlMȤmj#;wIz{
~[S*k-HO =
T5?Y92Pd?IVZTcF11O30V.48nNB+G{Q
fCQN=;JEۉ_rAgĐr_&0˝~]r? MN )NҰ>F_RWۜF"C*52&(jH]R Zqw8r\ NlFC%Xz:iE鈀,~5T> ݢIʬsqƛʏ( 9
S x=+iN ^,_aoOG
ݼ0RK 9 p68[il}nmn]Xm5ZpMg̾-7;nxlRϼ1Lz/z&P/Wۜx:ntl_ƨ^[z vi݁4zb _ϸ_?U)uR>kkοۀ H'c賂D R^ D"cT F OCXUE umy}SAF7 =JHxm,M<' MYz~->@TS}HI%b?nSGf?k\NOr`ՒT?'.%ºٜR
\@;p5z>JOZ@ix AY38nV`&8J{ID!pV tTpz^Η&o c,gn#2&Ǚksth*z#~
?3^R\
њ#Kh\R6ʹ 1Acb֑,{}:h/h@
fx\fl5'yZ JAȃeg e,Wrh xT ` 'd;R
N43(M ")>q{YedNu Z.9[
cb0@CMsYpxZ+:Z˨Lo$UрFվ >vb 1ނEĠC*%y &kl~7 Y j
}: Te
_ AMTL$t;Tfjo%t ~ݛq5bw57Ndm ʐd)v.Oe~\Q%QHZ)nͶ:UKj'MgzڌNmZT*sʾGzTj:y ?Yl͖su?N]h<^Hds
˽;E9z!P93-py'A00rYuk8lXgi+Y h` 6$0BlbV)eLn;˫ͳh q4@! {ZTw-<
YM;NOgjx72}n*k%] /l|f2X.!w ]Jx`Im&T2=I@Ecf;8ܓ, NÙ}Th4iw_S \NhE+s!2p>zVق%ջe$ms_a 2d;b& {x#- t\2ˡp-2)a5X3SXqI&#yd_ԥ]C 4CP@|N+"@wnAlggq(>HŬՀ@!$s@R --EthdVm*ͬ=%2O 2DA/)w]p(H
migu8Z)]N ? L4Nr="a)jhY@!kV܅(mT~T)5̀'q.Vh W({-`zyL Dw jZPamX-5K
%},Q`2݉#sǼq 1@db[n٪(G^~q+eDx"+#KblL͙M8?ڧ}Sz2Kv-Q!2abf76zB9}Fo55Ynh.xKŀFO繼|oUƉ
I:0J>y˘R,`x4=sSһLTVv)W1szl?0 S
ak)2/Lˢ-Zq& ->ȠJl)ba))Jۙ `.hr8i@'+m
t*"[hfcE`|88<
۪AZ.e?դ? mHW V.v8Ä|a;oc}5#?oJTb }_ȋ@}6&Cg3␈/N,ޟܷD[°s$ <RĔXP^楄tKY0,$a"IIPG}"vA f(MG@ xG$blb%T>:#T@Q|]e;?tṙ_mS)/5,I;kzbmvIA.F=8NW5 |\>S>֓Īoӄ!y Őu' YIMm6Cç yUrgIfbP7 oǜY`&Bqϐ(qC+<~IoM yyG6F3oaն;]|@WSz,N^ .e! !Q"܀~I zJ:n$u!Fm<ԵX?uʞX8t])/#%mow<a%
6J{`2 R:oxό8`J94c{ /WT3!k .S
[;p;AZ|9ۉGI JZyw ʲ^^|Kx'[in={$ Yܼ
ȶ]8 [jۃ mш}|5L`;N HJvc'c,ԨBܨNnl^S/-l`y!$.h6iV $ YZ ^& RW2~gٷ?-? o$#oq 9]:A3EqjW 02"Wj(Ά"5Oj~(X>bK'ɍc RZ&iP8Y} %NͲQQP4dG̵܋H@MK*ҿr͕;'ڗVJr_|Z Z"coKKCj!m?GjE=7NML
B`X5Dֿ 4wDJ4~V8l,;
Cxog roilA-P6be-YU|Wnȉ$x$eFu`$~,n{e33Mē@$ oG,5o+D"Z!U:pMed,Ɏ+)cH: ?T4(yV镩O>ͮbѲ1 H|BQaBX;aHer lz6~k q(Rxۛ-i^G R0j
lx6%u"SaD;Jo-]dgpOn"[zldJ3'G;kx>\vj29цEmNjV<_6Zc*I<~-vY6c3?Z0}7c;,~# QGfeƠxJ876s]ΥQضU6lq?Y_f5@-ˑ> 6Zܨ&R;Y6@"y3QE) ;J :E 7 $3DfKE? )b1rY:4Ckz"wq[ 1.(lpw+GwCR$.ntEE - zIJѕ-M> c
Ɩj- 8gRaSS?Wa,хDž0"o@I2e_m`%ODmxn$09 D/a9һq~OOm 0~. 9Uyb%'bֶdw랻TĴX8eE$6Mas-c= xJ M=hJ*̬cKsRzSE? )f})hLM w٥0`]T JlR`R
((u[TKŹ]("O/o".i'*6.(Uni.6[PZmlo
~y5x5`v348"6j$&w,)e%Y魯&תEgJݯ+$\uj& "NGijW0;"o6 &~hL+Y^/\Ev
*E8B|Z}u9LU}&u Is/p/*,{[ cCyT RLn|So
ڙ:z;%'[֍ Y1f܃w
ϲv6XyW2W& * GLk+pbdDT-:;9 Dn)nA$_?FZSߺ
0ewwYGWJ5Lz1VQ#!&RD3oωklۯ[&
1q$pwySNҧ1ȩ`ݫN۪M6ns_60ڃs]DXHFDTB-^fOal5řE
k=1 xkأ;$X`W#R5Ì/B; 6c%wO H摽qL(sI *1,:8ZI~n~
Ltd y".iGDdF3߶𣵸XǤMR ͡ǹqd[y!!S?ckQN{Ѩ+xc -6j!qa&뽮 o_oR){ 2Xq2v?Ѻݒ1\/``%/Q6в G K8VZ'Hl-n쓚H yv8e &ݜZVrR<<\[J~auJNX 3'_sT 5lU!pOq.|`Hq ddW_D/2:z0y/~n2>ېg8 29.G RY6][U;&yn^ #Q!/+OM+,y\@1Arfjt%mD W8# }ʎ:&9Ǩ|m'Cyғ,J9wVR.SٍuAڍ& Vp Ϥ0⎪O ʀȍ+Qu.S+Zi,O5 ~,]j9u3YiM *%T gknD ʎ Nk%˷N*})t2W # &ePWրp*mъ"cP%Թ10u$%ޒl m3z*., +%[Йx1ז9F^h8IDs#%Xjm= ~2G,_TQMy)sH)_y +<ߟ%j
tK4zS*K|>neXnD} h>^J@( Y O,w^R(v{/dM}xgcwki/+ͮIмD7Cma}tOϿJkgZʭ ˌM48RC=J * QК69H '1X@)'\H
˪j̺Vz?^SzkD=KdF=0=aX
.[%+ukuJ9M ^! 3U r2WeplZ?iP\+ti^"D])OROcCk#҇5'bXii;Ax33 U` [K6pU7ژ!S^^13c(ث?-ȺNm!.4 k DXX,?j)s? 6. ' TnDUڝtke A`ih8TBWx:y+F _Ze涋 b=mQy7O?_yh
p#A[XMbB %}0w24@Xְ`? pD>E"Gge)jOy,J$X]-s\.
Aׅ/WˁÂ0eH٘s7 peoQpU_'A)Q!@"m5GėbcG'/ IGN5r1Nkܲ= GCҪUIwc0oxF).Ԟrn$h30
+3+lt8SҋJ* ĂP|0i0]g-н}'e`%ɶnFGkp] MNck{XS R'z:kArS3r@ ]e6}5hlRܬZ* u-K^ mO rLcץjO BAҚ+)`zmkڇe<Ù3 ~|I2jN{N!lz8 EcǵKR*e]1ۃu`qWU#^?݄# ͫOWdPT9xTl+7kM<وK Dg _@Y"EmwCOPNl!;xO}Ȩ8
ŭb->Q՞<M9ښm
+ `Sze/2?^Ӽ|0'G꺧2ajZjXXBۜV$G`ФsgP֞ƁX*3 ]}Q5vf
TzwdC&,c?, h$C"/wF@59ɯa TA$ê(0G1o)pUr9n 2@pӉP[WFΡvKsS%y'g{s.X
NK6I`;߾ωϳyzf/<lW{7tp״MP9M(U-sJT }E2m nokm ɓRB¥1RGT$Ch^KAª'Dw FSތi|oE=NG.Q^F$kdDy֞i_&6;T=6f `T}<,{3hFWg9[ '' 2Z28+[ 4ԙQ-HMpW{' Ѽ6u)^i4:; hY:g9_(+ {`ݸoOnSW q@)ȸbCЭY:Jfr3~'͵d@iP.) kua tb2m2r8y
wG 17Ч:ӳl셖x^H $ƎVp#4XW;coI[,0C#TW(
6eZ\dv]( xT-}7\Z-(z˷S`G3^dle[W ]$_ Ht,]& !Y.6g+!ziC }MPO/J%Q1X JQ|*.vilO~s )DgUMX? 5lhV)zir381*S_*(enX%ëUkqVhz!5Q+\Q/zHWSDCMU\c̓Z`^%wESW,^}zr9k@RȁOzlӞ˅ULzA_T8KҊSauY^ȵp> q9W{mNPU{
A_7,RW_:jی㚙bW:͝n'~])Snh nhԚ OWW3 5}V/p'Sk &..O&Ke%o !˾6aNF(tgA 0;~RFiFpm]%ES-YE³fa,FAwɳ:AsܵCn2ak;KTNV?g4Ubdb fV/x)5(cHKٙYM:
L,C 3l `eT"o 5+Upb:i7rPG\xis5 9dx _s;2G &KYnT7Mcqv{t2X1'^V` N>WsoǯjQE]^
+4k!q1ç։0 Y^/WOI R+̪F0KKP\1c1O О 44LAj *óq=oX ThVM a:
нܿ|/h~
-dD(kDf ( #e /-{LoQS ǒqkJo=?qw{3g7@KJGֳX ͏߶diLx}5WWAI*f˘a&Pmksd4-[w *jBbkI] ީv`&mPZ2y'O~ B.u)kҝ&MG$~THťX9X r>gSum釈gJG墋cɖRy &J=/$riq?J |*#w?Nrp qz zi_eE) BOQxo
@E8GzStu2Od|@ P"B1cGRKhl`<6 ZO& _ 9("lb<Ұ^%Lhߵ㬾H> ^?GW$.=`~SdaO~K% c' E@b.K~_^ hf/b?,أES=m Б_ -); R 98A0#9 u8ӓ-
e]Y
ݓ=AK*VmjbGMk9sL]R)@{W1. yBO*5JkYV 7h0l
BSR;5yl^l҉K|Lu
h-WqȪLnQ.^?xoY̸Tj;n3$ 3 6|
>E''5= lbh$|. ^YB-.A
>:H#~- Ϙ@F؋J"r"+ V碪ϳ|l'zF.b;mղKDsYTc'݇Izz o46,e `2+ӫ_?"// H*C\BM
t"}beU
I;CWr͉h#8W5Ss
pm;m
*IA3[r ?"+7(Bs g G ɅB8e jx{)#
T _NB6+J0yXTgq> .9Vr pe6 g?}D( #` 睕
%P sOJS)P\բbT]#0᪺]ȇ;kF f/Å갅%+gVf;3lj4s}~Buh3hxV dKk#+%( +Ig<M |L0 E5& pvVGuPǦݼ6O1 )zhPF6@~PV2V/\ WB"2WJ M5R Z}S?&ZO7Җ]6t0!kLRnP9)Ж'2-&EI?e)S@қDY@@B B8=
qB9lSP^B!4%asr6lC>~` Cd:햱JHL*r
oOO_ 1-liHW%WAwk
<>)3r;%N~qZwn 5* $FRlbPmǁv"K xNX
))$J[Pkjia-Hڢx
|.&cK]vyNõ5l;mB ,< =37 ڄĝ@AO-UuGw>bEUcИb^C % ja}!Ύ X:՟G V]Sxoi-k*Q M |m .P1* Z_1T< 7T|em *౯
Y}b, ȲpZɡ~f*rY{sG 2$ReCѰڂ֗nlަD2qIK@{P21w0/ܑI{ELl9QJtC"B! tFW^l&1
8m:[uT*3* u
g,\26B{U^}V h"+ zPtt{kw<sAWbG7smX)&ʌmqQA'f>QlIi0ۓԳp{y4aHA`0c GSy"ٳZJj7Y`7/>zHo?*ݽp7]i(
tr] sqY3aEqm V a -E82AG,ݩ4iR#
*9d/yht`e/wh. h'(h#46 Z2T{\F a
65L$hy)vթGE S3z.2>zV= tVʣ䞭-
0|K[\P}}Qqq#o 2BM!Co,rH%ʢ}[ LMAP-_e{6ӬZ E|n|q s Ut倨zԛXi "e<_VӜ"'1z.51
H | Bj 9#<5DRglז _gFf d9h&^8'\ iF +j+ڶt5-xa ϕz۟3QQg -Wi*om_l=y|ꑭ[~Փb$Ys
Ood2Dke .Z"2. O
#LF!Ԗ@&NNE o%uۼCVyA[0%͡Vr4 =ƝEXwKN5/X{շ1Ao߆|UXfcv`=TMTYjo*K'47Ӱq6 #T9>R!KGz\`VᴺLb1%m ]D+G
Z1dGo"L* ݞ:65r( }&On;]+Q ̡Ye6LXd
ԴRF4Kcj-YyYsy">
fuV_%#̒.RF %,m"c~EP=#r/Kȸq^,tTJv^iz##
rS[m~~nr#vOv5bsUY,рzBP >v У^ CwѴRArAD TV!J%s B$##{eT)/rIU! jPDN*i'Q"IOЙ5rvAeUiIשem 1g% E^awS2Ck.s"d!Av$D~D` ^\J.M |b!0]1@)en},+ ;N${m`a
HNj!&
Wĩ AiE[8z^Q,J:+,b#x?JD/B)&?v<
yfm]VY^Ȍ/JG!핅KR^z7v#
uE?"eC܈ '{i] h1yJicOY6k{FrlV2J;<0|xj\/mh0c_RC#,8/1 dIn 2ONb *e@uY/y2Y`""ۦ"Ju+r}\bLi w- V &v jyuIQ5k4 #Z!T8 _=0{n' HFhB&[ۏ *-[icsj$ l k^2[M /vHx _!P|Z dL š+ &!cMXlv K E^xL w.l 0)ĪDŞxr eqA
J* -t0,] >+<֟VB $y%RaӺԖAg k5U+ƛ/! Ӄ_hVok9G>Zuڐdx}F/UTB\j\%o`4#,f2wJxN,fV}ǩD)l~
"U1NU&t2%z2WE2b!gAŤoC]j3`2U~8mYwBbL +3u+W-*~1
]4 $/@~>$A'UtfF+A7D /߇̠*8J>
j *X`[]FG鶍_fP~Y lAxn֢fZ+L-o-N~/ GjAe1Z ֝U0|.@ \Z
52 ̗Hd!?RB - *dI)r]˺Q!\}H.XfdE҈ Ç-ݫ|3 Hu3+uVC@R O7h\_?0. I1~|[~$D]' R;^vծĸƲ >, @;e%5P+y.J*^tpxxHg.
Kz#Ÿt H ?2$f di8U`Pj|7n?6S|+dD,O9T}}JƹG[5i%sSRv#Yʝ O=pL81n l 2,@d0QRHVT5,i}t&vG;<Ѳ/5@P^dXQ!89ż8˕zj @o]3 !0rGǂ+n@GҜueNI .Ì˝^?}z3-W0D*9swqxwҴu "/h=z7uCeTЙ ?X@PdLr~5L(S"eٹ/f[3Qs < A$^3zM:ep)(e&A!DfYGJFkeSa2
{ucYڒ("Ӫ.2[|`NJ5^!Fv3|H蓼ibk
IabQV|g %CMO *Ƭ+oR9 ^qݺ.V Z=V$b
Q '^Ot W{!^%yz8Cp>AnͰӜHۢ r3bA }3mF]r9^)SG&%Gؘ\0Ad#:'&w +J)V<#M-[)Ϳ/oJmY~ XZZuF6arJ?u ~~XVU_8"Dz ,)("F _ZQbuddI+_l2+ a֩oymkxѢ*A$ˬ2X ,ґ}q҉y!R9sZ>:u8w5F/zFo {0 M#|_/bd= ) >!:@PdJY+>hiU1=ceߩ[ A.,Uk377h]eq(%,$Ɩp߃ G|8eFOmh(hkg
_vFW~TS0_bU_{`q8~FΞ5AG;n^( ^q[XJƋT oaـɯ8<=|r{ }duWr&!9G&oQ\ Qˍx"r/sAV̹@Ixi"bN gDs}GϽXLiEf8/)'~'dG3%0Ɍ+36{R }u&C;TkI0J lz IH/s
6ΟRp<&'d+rh,R<~Cle % R&FQg= m xS=>% >jĝR?(H'
!\}XcI JjTə^g#rf8ǀjj?Z²|&N0mjϊ{~ !, _?$%#(#՟$(
ŗqXv*?s0:ؚQrkwz+цQg*[)_`\zP (. `iJO-ҷ<6+{dué:.`wk)P*cTB]>gA?| #2j\9^>){EOӵ$px&MUi+[2)=AWU24E-L`.A#U =a?C83yC#ݖG Z1ءdTi D60R"tDe@$ITlՙxw=z8 E#5)dįX ii= 53G!fR.i'0Nl/C pF^X)>bR3% bb9@43YZo=~q; w82 ov4 .TWAK ~%a+Z'C7:x.%z
.<S<73G-
QjyDAQPlii'VN(JhJ W4Ma${g1,!{delLK5?X솥[Ch-G?I
.*%X;:
rBeI]1_es!pUw9}IP1;l%RLFJAέ70ۦ -Ҩ.zst/FD29n:>ivYFI!V}(
l[[w^'{ }&D, j|ƅxX:\9 L/ |@uԈ:1j#_I4JG0ZRϓ M9O=y& foYwyN06q395Dǔ81-軌 ? L26C&A/%^I꾦.WL4r@f9+`54;
xYt!ʀQ+U|7 ^]Qx]Z, ] rg !3M>j@!L1_
d
YZ