libssh2-1-1.11.0-150000.4.22.1<>,,e@p9|V~a߀a_6*>W(a_+֪{ Q†q>@I?Id  ! J ,0Ijw     . @HR\w(89:C>F@FFFGFHFIFXFYF\G]G ^G>bGJcGdHqeHvfHylH{uHvHwI(xI0yI8 zI`IpItIzIClibssh2-11.11.0150000.4.22.1A library implementing the SSH2 protocollibssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION, SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and SECSH-PUBLICKEY.e@s390zl34.SUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Development/Libraries/C and C++https://www.libssh2.org/linuxs390x.e:e:200a8cb0f66294b1be50caa869b7f55527406e1cb2b2a0490f50fc5cb61b97f9libssh2.so.1.0.1rootrootrootrootlibssh2_org-1.11.0-150000.4.22.1.src.rpmlibssh2-1libssh2-1(s390-64)libssh2.so.1()(64bit)@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1ee;d@daA@_@_G@]@\\@\MZ]@YTYA%@VIUzU.@otto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdavid.anes@suse.compmonreal@suse.comdimstar@opensuse.orgpmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comdimstar@opensuse.orgjengelh@inai.detchvatal@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.com- Security fix: [bsc#1218127, CVE-2023-48795] * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack" * Add libssh2_org-CVE-2023-48795.patch- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040] * Add the keyring file: libssh2_org.keyring * Rebase libssh2-ocloexec.patch * Remove libssh2_org-CVE-2020-22218.patch- Security fix: [bsc#1214527, CVE-2020-22218] * The function _libssh2_packet_add() allows to access out of bounds memory. * Add libssh2_org-CVE-2020-22218.patch- Update to 1.11.0: * Enhancements and bugfixes - Adds support for encrypt-then-mac (ETM) MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys - Adds support for RSA certificate authentication - Adds FIDO support with *_sk() functions - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends - Adds Agent Forwarding and libssh2_agent_sign() - Adds support for Channel Signal message libssh2_channel_signal_ex() - Adds support to get the user auth banner message libssh2_userauth_banner() - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex() - Adds wolfSSL support to CMake file - Adds mbedTLS 3.x support - Adds LibreSSL 3.5 support - Adds support for CMake "unity" builds - Adds CMake support for building shared and static libs in a single pass - Adds symbol hiding support to CMake - Adds support for libssh2.rc for all build tools - Adds .zip, .tar.xz and .tar.bz2 release tarballs - Enables ed25519 key support for LibreSSL 3.7.0 or higher - Improves OpenSSL 1.1 and 3 compatibility - Now requires OpenSSL 1.0.2 or newer - Now requires CMake 3.1 or newer - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs - SFTP: No longer has a packet limit when reading a directory - SFTP: now parses attribute extensions if they exist - SFTP: no longer will busy loop if SFTP fails to initialize - SFTP: now clear various errors as expected - SFTP: no longer skips files if the line buffer is too small - SCP: add option to not quote paths - SCP: Enables 64-bit offset support unconditionally - Now skips leading \r and \n characters in banner_receive() - Enables secure memory zeroing with all build tools on all platforms - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive - Speed up base64 encoding by 7x - Assert if there is an attempt to write a value that is too large - WinCNG: fix memory leak in _libssh2_dh_secret() - Added protection against possible null pointer dereferences - Agent now handles overly large comment lengths - Now ensure KEX replies don't include extra bytes - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER - Fixed possible buffer overflow in keyboard interactive code path - Fixed overlapping memcpy() - Fixed Windows UWP builds - Fixed DLL import name - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows - Support for building with gcc versions older than 8 - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files - Restores ANSI C89 compliance - Enabled new compiler warnings and fixed/silenced them - Improved error messages - Now uses CIFuzz - Numerous minor code improvements - Improvements to CI builds - Improvements to unit tests - Improvements to doc files - Improvements to example files - Removed "old gex" build option - Removed no-encryption/no-mac builds - Removed support for NetWare and Watcom wmake build files * Rebase libssh2-ocloexec.patch- Bump to version 1.10.0 Enhancements and bugfixes: * support ECDSA certificate authentication * fix detailed _libssh2_error being overwritten by generic errors * unified error handling * fix _libssh2_random() silently discarding errors * don't error if using keys without RSA * avoid OpenSSL latent error in FIPS mode * fix EVP_Cipher interface change in openssl 3 * fix potential overwrite of buffer when reading stdout of command * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data * correct a typo which may lead to stack overflow * fix random big number generation to match openssl * added key exchange group16-sha512 and group18-sha512. * add support for an OSS Fuzzer fuzzing target * adds support for ECDSA for both key exchange and host key algorithms * clean up curve25519 code * update the min, preferred and max DH group values based on RFC 8270. * changed type of LIBSSH2_FX_* constants to unsigned long * added diffie-hellman-group14-sha256 kex * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x. * fixes crash with delayed compression option using Bitvise server. * adds support for PKIX key reading * use new API to parse data in packet_x11_open() for better bounds checking. * double the static buffer size when reading and writing known hosts * improved bounds checking in packet_queue_listener * improve message parsing (CVE-2019-17498) * improve bounds checking in kex_agree_methods() * adding SSH agent forwarding. * fix agent forwarding message, updated example. * added integration test code and cmake target. Added example to cmake list. * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero. * add an EWOULDBLOCK check for better portability * fix off by one error when loading public keys with no id * fix use-after-free crash on reinitialization of openssl backend * preserve error info from agent_list_identities() * make sure the error code is set in _libssh2_channel_open() * fixed misspellings * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type` * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type - Rebased patch libssh2-ocloexec.path - Removed patch libssh2_org-CVE-2019-17498.patch: the security fix is already included in the latest version.- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes: * adds ECDSA keys and host key support when using OpenSSL * adds ED25519 key and host key support when using OpenSSL 1.1.1 * adds OpenSSH style key file reading * adds AES CTR mode support when using WinCNG * adds PEM passphrase protected file support for Libgcrypt and WinCNG * adds SHA256 hostkey fingerprint * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path() * adds explicit zeroing of sensitive data in memory * adds additional bounds checks to network buffer reads * adds the ability to use the server default permissions when creating sftp directories * adds support for building with OpenSSL no engine flag * adds support for building with LibreSSL * increased sftp packet size to 256k * fixed oversized packet handling in sftp * fixed building with OpenSSL 1.1 * fixed a possible crash if sftp stat gets an unexpected response * fixed incorrect parsing of the KEX preference string value * fixed conditional RSA and AES-CTR support * fixed a small memory leak during the key exchange process * fixed a possible memory leak of the ssh banner string * fixed various small memory leaks in the backends * fixed possible out of bounds read when parsing public keys from the server * fixed possible out of bounds read when parsing invalid PEM files * no longer null terminates the scp remote exec command * now handle errors when diffie hellman key pair generation fails * improved building instructions * improved unit tests - Rebased patches: * libssh2-ocloexec.patch * libssh2_org-CVE-2019-17498.patch - Remove patches fixed in this version: libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch- Drop man and groff BuildRequires: both are no longer used in current versions.- Security fix: [bsc#1154862, CVE-2019-17498] * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in a bounds check that might lead to disclose sensitive information or cause a denial of service * Add patch libssh2_org-CVE-2019-17498.patch- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103] - Added libssh2_org-CVE-2019-3859-fix.patch- Version update to 1.8.2: [bsc#1130103] Bug fixes: * Fixed the misapplied userauth patch that broke 1.8.1 * moved the MAX size declarations from the public header- Security fixes: * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport read allows out-of-bounds write with specially crafted payload - libssh2_org-CVE-2019-3855.patch * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard interactive handling allows out-of-bounds write with specially crafted payload - libssh2_org-CVE-2019-3856.patch * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to zero-byte allocation and out-of-bounds with specially crafted message channel request SSH packet - libssh2_org-CVE-2019-3857.patch * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading to an out-of-bounds read with a specially crafted SFTP packet - libssh2_org-CVE-2019-3858.patch * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require and _libssh2_packet_requirev - libssh2_org-CVE-2019-3859.patch * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially crafted SFTP packets - libssh2_org-CVE-2019-3860.patch * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially crafted SSH packets - libssh2_org-CVE-2019-3861.patch * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with specially crafted message channel request SSH packet - libssh2_org-CVE-2019-3862.patch * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes with specially crafted keyboard responses - libssh2_org-CVE-2019-3863.patch- Drop openssh BuildRequires: this is only used for one of the minor self-tests.- Remove --with-pic which is only for static libs- Version update to 1.8.0: * support openssl-1.1 * many bugfixes - Fixes bsc#1042660 - Remove obsolete conditionals that are no longer needed- update to 1.7.0 * Fixes CVE-2016-0787 (boo#967026) * Changes: libssh2_session_set_last_error: Add function mac: Add support for HMAC-SHA-256 and HMAC-SHA-512 WinCNG: support for SHA256/512 HMAC kex: Added diffie-hellman-group-exchange-sha256 support OS/400 crypto library QC3 support * and many bugfixes- update to 1.6.0 Changes: Added CMake build system Added libssh2_userauth_publickey_frommemory() Bug fixes: wait_socket: wrong use of difftime() userauth: Fixed prompt text no longer being copied to the prompts struct mingw build: allow to pass custom CFLAGS Let mansyntax.sh work regardless of where it is called from Init HMAC_CTX before using it direct_tcpip: Fixed channel write WinCNG: fixed backend breakage OpenSSL: caused by introducing libssh2_hmac_ctx_init userauth.c: fix possible dereferences of a null pointer wincng: Added explicit clear memory feature to WinCNG backend openssl.c: fix possible segfault in case EVP_DigestInit fails wincng: fix return code of libssh2_md5_init() kex: do not ignore failure of libssh2_sha1_init() scp: fix that scp_send may transmit not initialised memory scp.c: improved command length calculation nonblocking examples: fix warning about unused tvdiff on Mac OS X configure: make clear-memory default but WARN if backend unsupported OpenSSL: Enable use of OpenSSL that doesn't have DSA OpenSSL: Use correct no-blowfish #define kex: fix libgcrypt memory leaks of bignum libssh2_channel_open: more detailed error message wincng: fixed memleak in (block) cipher destructor- update to 1.5.0 * fixes CVE-2015-1782 (bnc#921070) - tarball verification * added libssh2_org.keyring * added libssh2-1.5.0.tar.gz.asc Changes in 1.5.0: Added Windows Cryptography API: Next Generation based backend Bug fixes: Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782 missing _libssh2_error in _libssh2_channel_write knownhost: Fix DSS keys being detected as unknown. knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer. libssh2.h: on Windows, a socket is of type SOCKET, not int libssh2_priv.h: a 1 bit bit-field should be unsigned windows build: do not export externals from static library Fixed two potential use-after-frees of the payload buffer Fixed a few memory leaks in error paths userauth: Fixed an attempt to free from stack on error agent_list_identities: Fixed memory leak on OOM knownhosts: Abort if the hosts buffer is too small sftp_close_handle: ensure the handle is always closed channel_close: Close the channel even in the case of errors docs: added missing libssh2_session_handshake.3 file docs: fixed a bunch of typos userauth_password: pass on the underlying error code _libssh2_channel_forward_cancel: accessed struct after free _libssh2_packet_add: avoid using uninitialized memory _libssh2_channel_forward_cancel: avoid memory leaks on error _libssh2_channel_write: client spins on write when window full windows build: fix build errors publickey_packet_receive: avoid junk in returned pointers channel_receive_window_adjust: store windows size always userauth_hostbased_fromfile: zero assign to avoid uninitialized use configure: change LIBS not LDFLAGS when checking for libs agent_connect_unix: make sure there's a trailing zero MinGW build: Fixed redefine warnings. sftpdir.c: added authentication method detection. Watcom build: added support for WinCNG build. configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS sftp_statvfs: fix for servers not supporting statfvs extension knownhost.c: use LIBSSH2_FREE macro instead of free Fixed compilation using mingw-w64 knownhost.c: fixed that 'key_type_len' may be used uninitialized configure: Display individual crypto backends on separate lines examples on Windows: check for WSAStartup return code examples on Windows: check for socket return code agent.c: check return code of MapViewOfFile kex.c: fix possible NULL pointer de-reference with session->kex packet.c: fix possible NULL pointer de-reference within listen_state tests on Windows: check for WSAStartup return code userauth.c: improve readability and clarity of for-loops examples on Windows: use native SOCKET-type instead of int packet.c: i < 256 was always true and i would overflow to 0 kex.c: make sure mlist is not set to NULL session.c: check return value of session_nonblock in debug mode session.c: check return value of session_nonblock during startup userauth.c: make sure that sp_len is positive and avoid overflows knownhost.c: fix use of uninitialized argument variable wrote openssl: initialise the digest context before calling EVP_DigestInit() libssh2_agent_init: init ->fd to LIBSSH2_INVALID_SOCKET configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib configure.ac: Rework crypto library detection configure.ac: Reorder --with-* options in --help output configure.ac: Call zlib zlib and not libz in text but keep option names Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro sftp: seek: Don't flush buffers on same offset sftp: statvfs: Along error path, reset the correct 'state' variable. sftp: Add support for fsync (OpenSSH extension). _libssh2_channel_read: fix data drop when out of window comp_method_zlib_decomp: Improve buffer growing algorithm _libssh2_channel_read: Honour window_size_initial window_size: redid window handling for flow control reasons knownhosts: handle unknown key types/sbin/ldconfig/sbin/ldconfigs390zl34 17030641281.11.0-150000.4.22.11.11.0-150000.4.22.1libssh2.so.1libssh2.so.1.0.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31955/SUSE_SLE-15_Update/4690c3e3ef3d5589f213a6b5fa521482-libssh2_org.SUSE_SLE-15_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0173c32c00631314c893d5f913b26b62d1e73b17, stripped PRRRRRR R RR>D/LUFpHutf-8e0f3d8fc265ad3df35e9c5401107e7820ac7894c6de32ede704daaa83c605c3c?7zXZ !t/R7]"k%]d涻eQQG^"*@8sXgH>R<;Fܘ*`,6'eR-7B 6pVEѴqλEuYqm[;dK*?hCS#ٷEerrLjaNEӑ|خ镥JZcT_.viDGqO F@\BEJߤon+!:H3|Cc;6>wX1,| 󵷡C+N}^ k[Gh+-[3TYg>@@edOl"LЁhRE7.D E<[lUuU/ `Sp]*bQx>uX&e3@<>Rr5pӣg,?ÍV xͪPnBw7 @xqؖFsb0I3w*7⤀OH}N;iz`%㮇NɲjX[`&~:3Q+LߙGñadpFήbq_fQa(jcCDCܨ0ծq<;sh.Bۇ6Qk֮}J=ɑlu#GOAUGsn;N^Ūs΅qh\C auP)Xʘ( \C})Y2i>>RZ,ȡQyY6zha Ҭx*™Ơpu%YO^@%y-_B܄C `C,.xV׮̎D:e̮vns`-~)!9 sBa͓Ye(A~<3 ¯fc7r AWؿw:(-椓yVe6elC囮OХdNU7h}9)D%$ ̎!Y:2Kڳ .GQC"yV:Tm^k# BMWm&IɏODPGȇL<#)@iPS20- Id%~&%AFRp`U01*1Sg3xۉ+8S 8e󂟁ÃJ,K⋟CȴΑz;q=>z;%0>[CSƁx" )JVypDv4?,SXmy2EAH .X'Um̺qh@zټj|8٦;a `n ɤC36M8, j']θA7,RnSMb Lcl~vJʦȕZu_]@ 15cCZs`:T\Xj'$DE^L?^ "}GuP31QbS2>ؾ6o8._fiY=J ZcGmȐ@9S>w `"zԅ`k­x뢀1a'f/%Tz}(5ӦIۺh=`*L)JחpZw ~@2Pg1 RUێ}"HOzڱT(ygUeWV$JWmg^pwȋl*5 bE1(ZY S.3kldO@1̯zEeD^PVoG!kRڅ‰z'#4XM-%sB{ڣytHƓQ)=- uty8;kz/2l(`LzKj`|bVJּv1<^f?/Iq`e ]eZLƨ+W>`=hg=@F{TR}SeLi0 G@ --jvZ}ۺLh0s70]UXCDAkez݆[ا_ڵVqFy1h֬}Kev(brt92UXp=ҠLiJu8X4|iQvL*H.Z.:ʏeۭyCA֗QLiEkg%Do/ZL~As\o*2mzv}#v'ANk 諚(apPfMJ(J:W r*#bF ] \C& kW|bŔ [O Qo\@S;QҦEer g${寲g #\knσIZEpt,^T8Z?j{bT'Zld X<צ5R4dԍTm 34']O-[<_]%ұt95\+hu{T g7azo?&6R̐xG}Ҭz S}.>Tpw*\uGgt\R g80e}}.,0bROَ5#\2)0%6_PM:׋>QplqtcvLBJxEVzkoK]F%M<;M.綘!0z"W=2 xB+?XEb7+~tož+Ma>G,Z%3>dp-yK&#@'fS6y@wyG-UNH 6gآIx 32X]!8۝OAA$ dzQ#/b͆!Oڵ*@jAY@KeKJ5?jOxQ%!mGc]ʜ_{ش8+f(a)@uwUäLz,<]BTzE-PHe+,Q$A $bD"Q;*:,|kA %鷑 I-J4;>N8iX/l] kR=xöthi.r?Ķx,nn.}E?HD#IVQrT#DyjRa ]Jcy,^g!i+PV~D49LvиXL T BPY>猉ˆdMM#6kVN,Zw قhkF62UD~yWpk:ҵp-|l-moㅟXZ2F;d n=y=>LwwMa#E:ɭALCf2|Gǣ4;cM5!֩@'ޢJZ߆˷CR[%Tvşt%JCl0ƪ=lgm9ɞbni'n?FlWlq޸k ).b9A恁U]vr.SN7ߤK>~RANuMp ~Dܚ8zf ^Lsp̋)Jh pJ5< WO~0e7eoAӳ5myI6:58(GhnO"0 SqႥ(En%'Lm)<@Ls ;gHE|}Z}q5; )1*i T  's<B0wl⿙WW"f}rG#N17,Jc/[hhZ}֨)Xzíiܺh \;Ƒ7_2[6zى56%, 0.'dzP pDEs3KK_])3xz,gC+E$E0+q<@DRR^;qGޯ_vOHWMԷ\7a_ \+)Lj+m iL§1#Ѫ~%và.쁍D#|/2ѪNXKS޴261)>rqHaa~U 6mcZ0bqj u =I23eZ 奯 "#2cNF!H_'W-?^ҩ e5\-^?H$`"$[X[ʎ:55#i#F/(:kXfVh EmPP碴/9ĀK_8%SÌHo ͺ3_siGW1BPAG㘉H4$(ENU`Cnl߄# 4z+#Rq!x0JT 4d&ױb BD:XQjcRz *d9%/#7!ʖUDZ:- =,;W/vM|m$f džU3lh*?$@  ^0'wi$MInY-Sfl񙾅 Hk6b*e8&86>|-юx轴;#iA9Eu L2/ &~^VpF \DD7S:&~T Vv6]b,L)ΥKnXϤ(^T*G\ʾ(mrlYs#[- FE#| P"@9{&͘dZ1ɯǩa'/{ 9QU\IU Q[$*Cg9ZaY;UĀ)DЏ,HҷrT+/l @hWΩ<=v@Cc/o+ =u;a; /Ӵir/A/ ZZ_mP~š{Ap0m@^|Uߊ:1UPҕg-r.'y<3τ1-3 10b>ihZ"V:ZHRiX@p.b)Uy0o.1Io (JVo|HsV0~a?%pRi\?J\^U*eW SBAR@ү$]D)' A΅̤uz@e <1$}쏝 J)R8_)<1\HDx~8y`ƨU~{:zC.e^wgPZ|5wK[)bdTSE*;*\+?oH4,(6}N{jfk1¼;ޗoO,B$XEҲ" OV=jog/?2sE:ᘓR"䛋؟ `he`Jx*'ͷ Υ* !G6ۡe4H6am M1o?p3r.2?:RsX.<`@p< ͭYY h\!q gT o|0 dAĂĮm 1 N̾l:Q1{k͙EKM+e N}1.?d|Ŏ ^8jvm ;(JK/aZ:1} npy#伸 ; ufۇݶ$jz˲ntlKaYD *c/V*厧+ܧsLS;׸E,J~_h"۔-.o ⫳ܢ:AtǖciRÅ]4j;2Uqu:tcfW@ffۋ&ѿ}OAsʆTI]þb"l>!MO,ߴΞD=Qw,p`1I⩣4i8sQ;^[%? v0LM!媃yǷFQaSv%ѫ`P3ueL#AxZ ̆V \ÿG2T|gԍS(.Vh9л-}C5/ DaIU< %iЦeYOu2X0m,{֊K %@RJNmE賨p5/%ij > c2FT깃c qhHg83$p?W]A rI= .@2qy'WI&`k,||tIʯXL_dA4(;cL 1q Jtd{ oظ/VfVR#4Cbŧ4߂iMb͵c-EfuHbQV8Ii֙+` YuIt yD6_`7 ꒨ڔfa0tR~ {.:7#3;z"ӮԸ&v׊tI,i@.-HFUDTX8#,̌'Db?qr=RaN-=Z8͂z^@&Q&0gw,,b%:put_\3kۻO"-ؤ WVmP5 |hw4HW iky[%^0m}x8>@(1?elWyN̵S{R+u Y6AɠmdrBOOa!iU0^RqpZ F} _.~h.UծEK,ճ4փDr9 D#0b~fh9JXl\*m;\I`q;/E+e]R t<>+K@G +bZ%.)x D+'e0!a$ ^f̆”8qQvܲ8RK}/4|9U By{y۳vN-eՍkh`}k׀ =[Q!PqJ'QՁ|▖T׺U_F*+ *vw O!y#{OCʭX+O!|c+`''.^$t Nil'*)T7ju뗁] |x\ǣ x{I]x;-ALJ5 \(CU[DH=fv-y 8R;|LU'JQb&l^+ @8w ƽ70.>]"C|6 ҫSj(Q4S0U$9{P>)=i3\>qm#oFd鳒&e:g^/(6.gnY=Rl,ObXZz6svШ94p[ajqpQLlU#ppKVˎuIl%J\=V \#F}OK\4Q&,?IB0GobCbwRY:5ysqoAS6o/nI]-ދNH@_w@E4@r:+zcUP7vvaM~gʩ$Rˤ|J?"5vV?8`_GeWI| R|}4̸t>:=| 0NXC1[w Kb]O%=2L"5A|:/T ;)tfw|iv vwA;6,s֒*)uѽJzE+ȝ"%@f{fC"'ՖE$ S~s՞޽*^,JÐp[ "&uLҙ[3>`)F>rSoQMusYcj]Bzv~aC 3 szG,ҿlv$:kog؅}Ь+ً)”Tyz'g۪h:{6eMhGl r^<Ư2#i"E#Y*?b΋Uqo>Yɡy$Dӌ~6Ty)lfvHЕ~>8yi~,J7?b d/VXخ5 yk@WB5,g Z Ւ6!D3Y>T>eUHxp3 {'D.?oB)-qjEOr]'tGto줅 V>+1dEr@zu#="5!-kn +>FfN"nhbؑ*xsߦҕ|K\ˇ!>Ӳ BxyBbS l&(Cg>#ŵb)0G)5+rhl2z!)%~Fdxvv_| _tir ko^m` ߑtj亏I0ⓖ J6HCvq?[:9B;fcq_W472,|!ӵvHz J8L3XqCV]~^ҁjPZbc$hLEJ"ԏ?PB>9ض)gNIIQA;B͋n)dr+ٖ+|; .e "SKOtPh{lAS;cMUJ=Ce ;V!2c!#_dU~)U'S ՑSp&$[?F  ^#1xK2Ji6 ]TD6 >#f;ʜM얏UEBKM^OZb[l&uXf{p&p:^֝g-^"X̩MKL',& 64{Ӵeњ:v A,MBqolSBp_{/_ܹy"Iqq ˛ uÄy3U&15pޣ&bk%o{o@\! &9>2׋6]HEU-qِ +gb IؾrTlva3sd7Uc%DYc[- X"vw]L:GQY/PRF:MPw{銭#jVۇ\Xz=2uL}|;5[m=<^%ItDPEˎRݠxlEG:\Δ#8a_H Y+j/# &W=O]'Dl8|VLCr jId  Oo'(ZAkbUX%5akٳA96ns6x̐3p,kC']yVjGpKGalƧ> 2Ū7 $a4 K^l38)MGڒs?eמ2}б?'7g)'xXRA^>s YU>ccQ}_ֿ9[O6;Kŵjie,bGlF.@4t`)*ֿokQXG\!R0!K4^܅o͌Vkr$u"jĺp.oѶ YZ