vsftpd-3.0.2-28.1<>,5[d~/=„;{J#$ft!Pt_^!j.2d|]:&< 28E"#<]zbؿ# GqD ~-14ZjGT]jfH],<9'^ۯ)[ ar0u|zَFJKBl?ld   B$H a 77 R7 7 7 S7 7p777(!?(!w8!89"`8:&8=^>_?_ @_F_G_07H` 7I`7Xa Ya0\aT7]b07^dMbfcgdh&eh+fh0lh2uhD7vi wj7xkd7yl@ zltCvsftpd3.0.228.1Very Secure FTP Daemon - Written from ScratchVsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but the entire codebase was written with security in mind, and carefully designed to be resilient to attack. Recent evidence suggests that vsftpd is also extremely fast (and this is before any explicit performance tuning!). In tests against wu-ftpd, vsftpd was always faster, supporting over twice as many users in some tests.[d~wildcard3openSUSE Leap 42.3openSUSESUSE-GPL-2.0-with-openssl-exceptionhttp://bugs.opensuse.orgProductivity/Networking/Ftp/Servershttps://security.appspot.com/vsftpd.htmllinuxx86_64getent passwd ftpsecure >/dev/null || useradd -r -g nogroup -s /bin/false -c "Secure FTP User" -d /var/lib/empty ftpsecure 2> /dev/null test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in vsftpd.service vsftpd.socket ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in vsftpd.service vsftpd.socket ; do # The tag file might have been left by a preceding # update (see bsc#1059627) rm -f "/run/rpm-vsftpd-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-vsftpd-update-$service-new-in-upgrade" fi done for service in vsftpd.service vsftpd.socket ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset vsftpd.service vsftpd.socket || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in vsftpd.service vsftpd.socket ; do if [ ! -e "/run/rpm-vsftpd-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-vsftpd-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in vsftpd.service vsftpd.socket ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable vsftpd.service vsftpd.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop vsftpd.service vsftpd.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart vsftpd.service vsftpd.socket ) || : fi else # package uninstall for service in vsftpd.service vsftpd.socket ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi9nJhq@p6Gp5/pe28Q$p}6)+ 񁤁A큤AA큤A큤A큤A큤A큤A큤A큤A큤[d~[d~[d~[d~[d~[d~[d~[d~[d~[d~[d~GǿOrGPXFGGGGGGGGGGGGGG[d~GGG[d~GGNGPXF[d~GGǿJ`iJ`hGGGGGǿO|G[d~[d~[d~[d~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-3.0.2-28.1.src.rpmconfig(vsftpd)ftp-servervsftpdvsftpd(x86-64) @@@@@@@@@@@@@   /bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/useraddconfig(vsftpd)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcap.so.2()(64bit)libcrypto.so.1.0.0()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libssl.so.1.0.0()(64bit)logrotaterpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)systemdsystemdsystemdsystemdrpmlib(PayloadIsLzma)3.0.2-28.13.0.4-14.0-14.4.6-14.11.2[4[+@Z@Y4X-X~@X @V3V3V@VaUJ@U0U!#U@U@U@U@T!T@TeS@S,S,S,SFSFS;S;S:@RJ@Ra@Q{Q]k@QU@Q/FQ/FPpPpP5@P7lOD@O OC@O;@Nm@NNσ@N{#@MgL@La?@KK @Ka|@KV@psimons@suse.compsimons@suse.compsimons@suse.compsimons@suse.compsimons@suse.compsimons@suse.compsimons@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comjcejka@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comdimstar@opensuse.orgjmatejek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.commvyskocil@suse.commvyskocil@suse.comcrrodriguez@opensuse.orgmvyskocil@suse.commvyskocil@suse.comlnussel@suse.demvyskocil@suse.comsbrabec@suse.czdimstar@opensuse.orgmvyskocil@suse.commvyskocil@suse.czbrian@aljex.commvyskocil@suse.czmvyskocil@suse.czmvyskocil@suse.czandreas.stieger@gmx.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgmvyskocil@suse.czcrrodriguez@opensuse.orgcristian.rodriguez@opensuse.orgcristian.rodriguez@opensuse.orgcristian.rodriguez@opensuse.orgmseben@novell.commseben@novell.comcoolo@novell.com- Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the new 'address_space_limit' option in the installed vsftpd.conf(5) man page. [bsc#1075060]- Apply "vsftpd-support-dsa-only-setups.patch" to disable the problematic default setting for rsa_cert_file. Upstream initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and vsftpd won't start up if that file does not exist (or if it does not contain an RSA certificate). Therefore, users who copy a DSA certificate into that location or properly configure a DSA certificate via dsa_cert_file without explicitly disabling the RSA certificate won't be able to start vsftpd. [bsc#975538]- Don't start/stop parameterized systemd units in pre/post actions. These units cannot be used without an explicit parameter and attempts to do so lead to a confusing "failed to try-restart" error message. [bsc#1093179, bsc#1010177]- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292] - Add "vsftpd-seccomp-getrandom.patch" to fix a seccomp failure that used to occur in FIPS mode when SSL is enabled. [bsc#1052900] - Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427] - Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137]- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961]- Fix several issues related to SSL/TLS support [bsc#1021387]: * vsftpd-enable-sendto-for-prelogin-syslog.patch allows sendto() to be called from check_limits(), which is necessary for vsftpd to write to the system log. * vsftpd-openlog-force.patch fixes a logic error in the way the force option for syslog's openlog() call was handled. * vsftpd-seccomp-ssl.patch allows stat() to be called, which is required during SSL initialization by RAND_load_file(). * vsftpd-seccomp-wait4.patch allows wait4() to be called so that the broker can wait for its child processes.- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd where files uploaded by an anonymous user could not be chown()ed to the desired UID as specified in the daemon's configuration file. [bnc#996370]- Fix hang when using seccomp and syslog bnc#971784: * vsftpd-seccomp-syslog.patch- Fix user creation to not report error when user alredy exist bnc#972169- Fix bnc#970982 hanging on pam_exec in pam.d * Add patch vsftpd-3.0.2-wnohang.patch- Fix memory leaks in ls.c bnc#968138 * Add patch vsftpd-ls-memleak.patch * Update patch vsftpd-path-normalize.patch - Fix wildcard ? matching bnc#969411 * Update patch vsftpd-2.3.4-sqb.patch- Fix logrotate script to not fail when vsftpd is not running, bnc#935279- Fix hide_file option wrt bnc#927612: * vsftpd-path-normalize.patch- bnc#925963 stat is sometimes run on wrong path and results with ENOENT, ensure we sent both dir+file to filter verification: * vsftpd-path-normalize.patch- Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch- Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch- Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch- Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch- Add service calls for other unit files too - Udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch- Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 bnc#915522 CVE-2015-1419 * vsftpd-2.1.0-filter.patch- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- force using fork() instead of clone() on s390 - fixes bnc#890469 * vsftpd-3.0.2-s390.patch- Cleanup with spec-cleaner - Remove conditions about init files as we do not build for < 12.1 anyway. - Update the README.SUSE file to describe more the listen option.- Add socket service for vsftpd to avoid the need for xinetd here.- Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Updated patch: * vsftpd-2.0.4-xinetd.diff- Move the enabling of timeofday and alarm one level deeper to be sure it is whitelisted everytime. Also should possibly fix bnc#872215. - Updated patch: * vsftpd-enable-gettimeofday-sec.patch- Remove forking from service type as it hangs in endless loop.- Fix warning about dangling symlink on rcvsftpd from rpmlint and remove also clean section while at it.- Add patch to allow gettimeofday and alarm calls with seccomp enabled. bnc#870122 - Added patch: * vsftpd-enable-gettimeofday-sec.patch- Specify that the service type is forking- changed license to SUSE-GPL-2.0-with-openssl-exception * suggested by legal team- add allow_root_squashed_chroot option to enable chroot on nsf mounted with squash_root option (fate#311051) * vsftpd-root-squashed-chroot.patch- build with OPENSSL_NO_SSL_INTERN this hides internal struct members or functions that if changed in future openssl versions will break the ABI of the calling applications.- add vsftpd-enable-dev-log-sendto.patch (bnc#812406#c1) * this enabled a sendto on /dev/log socket when syslog is enabled - provide more verbose explanation about isolate_network and seccomp_sanbox in config file template - don't install init file on openSUSE 13.1+ - drop a build support for SL 10 and older- add vsftpd-drop-newpid-from-clone.patch (bnc#786024#c38) * drop CLONE_NEWPID from clone to enable audit system - add vsftpd-enable-fcntl-f_setfl.patch (bnc#812406) * unconditionally enable F_SETFL patch - might be safe to do- add isolate_network and seccomp_sandbox options to template to make them easier to find (bnc#786024)- add vsftpd-allow-dev-log-socket.patch (bnc#786024) * whitelist /dev/log related socket syscall- Verify GPG signature.- Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.- update to 3.0.2 (bnc#786024) * Fix some seccomp related build errors on certain CentOS and Debian versions. * Seccomp filter sandbox: missing munmap() -- oops. Did you know that qsort() opens and maps /proc/meminfo but only for larger item counts? * Seccomp filter sandbox: deny socket() gracefully for text_userdb_names. * Fix various NULL crashes with nonsensical config settings. Noted by Tianyin Xu . * Force cast to unsigned char in is* char functions. * Fix harmless integer issues in strlist.c. * Started on a (possibly ill-advised?) crusade to compile cleanly with Wconversion. Decided to suspend the effort half-way through. * One more seccomp policy fix: mremap (denied). * Support STOU with no filename, uses a STOU. prefix.- make seccomp sandbox enabled by default * dropped vsftpd-3.0.0-turn-seccomp-sandbox-off.patch- fix building on 11.4 x86_64 and lower * fix where, when, & how __USE_GNU gets #defined * make seccomp optional and disable it on 10.3 and lower- update to upstream 3.0.0: * Make listen mode the default. * Fix missing "const" in ssl.c * Add seccompsandbox.c to support a seccomp filter sandbox; works against Ubuntu 12.04 ABI. * Rearrange ftppolicy.c a bit so the syscall list is easily comparable with seccompsandbox.c * Rename deprecated "sandbox" to "ptrace_sandbox". * Add a few more state checks to the privileged helper processes. * Add tunable "seccomp_sandbox", default on. * Use hardened build flags. * Retry creating a PASV socket upon port reuse race between bind() and listen(), patch from Ralph Wuerthner . * Don't die() if recv() indicates a closed remote connection. Problem report on a Windows client from Herbert van den Bergh, . * Add new config setting "allow_writeable_chroot" to help people in a bit of a spot with the v2.3.5 defensive change. Only applies to non-anonymous. * Remove a couple of fixed things from BUGS. * strlen() trunction fix -- no particular impact. * Apply some tidyups from mmoufid@yorku.ca. * Fix delete_failed_uploads if there is a timeout. Report from Alejandro Hernández Hdez . * Fix other data channel bugs such as failure to log failure upon timeout. * Use exit codes a bit more consistently. * Fix bad interaction between SSL and trans_chunk_size. * Redo data timeout to fire properly for SSL sessions. * Redo idle timeout to fire properly for SSL sessions. * Make sure PROT_EXEC isn't allowed, thanks to Will Drewry for noticing. * Use 10 minutes as a max linger time just in case an alarm gets lost. * Change PR_SET_NO_NEW_PRIVS define, from Kees Cook. * Add AES128-SHA to default SSL cipher suites for FileZilla compatibility. Unfortunately the default vsftpd SSL confiuration still doesn't fully work with FileZilla, because FileZilla has a data connection security problem: no client certificate presentation and no session reuse. At least the error message is now very clear. * Add restart_syscall to seccomp policy. Triggers reliably if you strace whilst a data transfer is in progress. * Fix delete_failed_uploads for anonymous sessions. * Don't listen for urgent data if the control connection is SSL, due to possible protocol synchronization issues. - SUSE specific changes: * turn off the listen mode (listen=NO) by default and change README.SUSE * merge new hardended flags for build and linking * fix the wrong Type=forking from systemd service file * turn off the seccomp_sandbox off by default as SUSE kernel does not support it (yet)- follow Systemd Packaging guidelines http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines - add $local_fs and $remote_fs to init script- use the original tarball, because the bz2 repacking madness disables gpg --verify - revert a part oc changes utf converting- update to upstream 2.3.5: * Try and force glibc to cache zoneinfo files in an attempt to work around glibc parsing vulnerability. Thanks to Kingcope. * Only report CHMOD in SITE HELP if it's enabled. Thanks to Martin Schwenke . * Some simple fixes and cleanups from Thorsten Brehm . * Only advertise "AUTH SSL" if one of SSLv2, SSLv3 is enabled. Thanks to steve willing . * Handle connect() failures properly. Thanks to Takayuki Nagata . * Add stronger checks for the configuration error of running with a writeable root directory inside a chroot(). This may bite people who carelessly turned on chroot_local_user but such is life. - convert .changes file to unicode - refresh vsftpd-2.0.4-conf.diff to vsftpd-2.3.5-conf.patch - name patches explicitly without macro as per recommendations - remove INSTALL file from binary package - update license to GPL-2.0+ - mark /etc/sysconfig/SuSEfirewall2/services/vsftpd as config file- fis copy/paste error in previous change- Add systemd unit- fix bnc#713588 - bogus logrotate config for vsftpd call /sbin/killproc -HUP /usr/sbin/vsftpd like init script - change the url and service file to the new location at security.appspot.com/vsftpd- Update to 2.3.4 - Avoid consuming excessive CPU when matching filenames to patterns. Thanks to Maksymilian Arciemowicz . - Some bugfixes from Raphaël Rigo -- good bugs but no apparent security impact.- Update to version 2.3.2 - Fix silly regression re: log files being overwritten from the start. - Rename a few file-open functions to make it clearer what they do- Update to 2.3.0 - Add extremely simply HTTP support. It's very experimental, ignorant of HTTP protocol and headers, and likely has all sorts of other issues. The use case it might satisfy is if you need to serve simple static unathenticated content with large levels of paranoia. - Fix port_promiscuous breakage. - Minor FAQ update. - Use a larger address space limit if using text_userdb_names=YES - Always use CLONE_NEWNET if possible when in HTTP mode. - Change REST + STOR so that it's possible to overwrite part of file without truncating it. - Boot the session if we see a USER where encryption was required. May prevent the transmission of plaintext passwords by buggy clients. - Fix failure to transmit a large ASCII file over SSL, if it contains \n -> \r\n fixups.- $remote_fs --> network-remotefs- updated to version 2.2.2 * Change "File receive OK." to "Transfer complete." to placate some broken clients. Thanks Holger Kiehl . * Fix erroneous "child died" upon FTP client connect, when under load. Awesome thanks to Holger Kiehl for running diagnostic tests on his live server. * Boot the session if an overly long line is encountered. - see Changelog file for changes in 2.1.0, 2.1.1, 2.1.2 and 2.2.0 releases - deprecated use-ipv6-scope-id.patch,libcap2-fix.diff,write_race.patch nowarn.patch- added use-ipv6-scope-id.patch to fix connection issues with ipv6-link local address (bnc#574366)- fix typo in the package description - and remove authors/bin/sh/bin/sh/bin/sh/bin/shwildcard3 1533312542  !"#$%&'()*+,-./012345673.0.2-28.13.0.2-28.13.0.2-28.1  vsftpdvsftpdvsftpdvsftpd.confvsftpdvsftpd.servicevsftpd.socketvsftpd@.servicercvsftpdvsftpdvsftpdAUDITBUGSCOPYINGChangelogEXAMPLEINTERNET_SITEREADMEvsftpd.confvsftpd.xinetdINTERNET_SITE_NOINETDREADMEvsftpd.confPER_IP_CONFIGREADMEhosts.allowREADMEVIRTUAL_HOSTSREADMEVIRTUAL_USERSREADMElogins.txtvsftpd.confvsftpd.pamVIRTUAL_USERS_2READMEFAQLICENSEREADMEREADME.SUSEREADME.securityREWARDSECURITYDESIGNIMPLEMENTATIONOVERVIEWTRUSTSIZESPEEDTODOTUNINGemptyvsftpd.conf.5.gzvsftpd.8.gzvsftpd.xml/etc/logrotate.d//etc/pam.d//etc/sysconfig/SuSEfirewall2.d/services//etc//etc/xinetd.d//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/vsftpd//usr/share/doc/packages/vsftpd/EXAMPLE//usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE//usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE_NOINETD//usr/share/doc/packages/vsftpd/EXAMPLE/PER_IP_CONFIG//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_HOSTS//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS//usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS_2//usr/share/doc/packages/vsftpd/SECURITY//usr/share//usr/share/man/man5//usr/share/man/man8//usr/share/omc/svcinfo.d/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8540/openSUSE_Leap_42.3_Update/8ebdbf0b6c8eec693e6afc5f9a7be07f-vsftpd.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=2215a7755c03c02afa7743279aae0ba81fcb62f5, strippeddirectoryC source, ISO-8859 texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)XML document text RR RRR R R R RRRRRh4mŇfnGojB)Qy;sϑ1U{HZrJu?eYcO_ɿ~ L1Zn oVO8+Fp&(B&3T}W!ìhպ*:c(dE%^4>4|$ 2Yk0A:Ikej܂jar4O8Xu=MCw7wHʽ4W(zQiU+L'S`xTwΚ/)g qߝu ߖ’F[,&JYѹ oV9}8bW}ՇXonEYrq*!oOkٝhg$H^,_LGOaa=^z-$sIP]l[kp0w稼yҮ*,69O$C[4u9*tìLpb M, ˚$Fv|nnTm/"|[5˟q@Ǝv씺IǐK+9ɿ7fn=@JOqIa$vkOeHI HWוFtV}J=t`NMߵ@s7yaHNU pƭO AB! 0Sr.j S2i=VyG/ ^Ο:oΏZ\-LOG;f&/LSUMrcT%NNQ9h?@= m 5e ;Kg)=FPa;1/wbZNέ /;9ͩw+, z&RE[d0˱eGEV0<߬9~ qw3*$;m2v.j6޼.nJ;PNK5-8tz1WtR-{_VS.Gv&b˯6e],b`PܯU\QғjDXx|Q 0=}M(:'ԑDV1B^ $fR_q?z.4 #q tvdX/2ŠW>4v I`&;ۥVET||;o,JUUDh#j9̾J=K G)Yv.d ςaH`>iۢ;D1 Y\MjS4@.2czT"].Bqٽ|:#-dҳ2*X#Vޘš,/NhY;EA'+}rQz[O)~ZLs&LYmnJBugڰ3) '~0 E T.5{OUO˱QO-s&s@ 0;TuI(tz !Ϝ*.*Ŋ3u?0ZȡUi'X' 0ݵC뾓f.,+*Q㴧!p/qCK℥[Z ]g ٞM]K`P7iͣJ P.q49ۙOwrs"WG@`=QIeF :A^Qunk+sw(6sf֙J 5`#0;NԺa*&/nS3ζuk@E+A^q9 M}HVJFQ,I\2 w~6~9I%\:Rܱ$ω3.i鸞,&ޞ`NBda RzS9"AU i/ff؏⯳;5;iXf֨m3ˋ6&=,`*Zt 9)!Xni&sw]+KxW?ui&aVGhA|"i{?Q uXj]™Q^2a^c$G4`? O;vU !kjp2o|eѪ+}}iIONn)c͝Hϥ^B \~+1_q Q`.;3A0\sKѽ+g-kxy~dT`M_Yt,=SM,)J*cҽ3C@Ҕ,{\ANД - P==sVpS#ߎQn1GdW5H2UɶY^ྱQc'E\&aq-eY9 "?{G \~Y|AIM{\0ks%%8. ?-FjNjV%m~ ܨAJ5 Co Nph~H3aVC\" M1 ~dv]EyH֫~-0n3#T.3if;%C's8.nJIԵGR '3?z1nWxRA?qCڹod8x3jf(v\0F@9Q1QuuTZѬFwXjrEL/ ȜYbΉyE[]r hVZx:?ff?,>0{;Az?&OkXf=UMEzyIs:Klpd}\QNdSR]a8vg- i9Q ^;EĭUqzB;qƚtlFB]PԁeD(ls3iQߠy YC| s r%U%LC` jޜoY-D^#]6Fԍ?7}>j!й*ʐ#rMcB ӟq;% RnR&R`PFԻPmdٮ~wO0|a`瘞rxNRt ke .64to \ճ D ?q!m $h`XV?bsAddAyC/C9!w)hLp |@}| iiAHqZtjE֧c4EPQ>3}+6|/ʄІ?lmp1'Q7gRu?\I jq.qy<9!aCu(CD3\Z/g>w-ظo}ك L9FPІ_h{3`^=j{/WR;kHoaΧмVxU3F00xl wzL> >@Blܬ4xīR6Ɏj9 ,zu\;'|le XO3zx*Sz_g&%UO1)vRma5|rx'WL2$1qxfK fog7+$)\DNO7*/D~Zqi\f`$KE ˕S6m'm"'hdZpPq4;5]_,2N|\c+کtw)bqRy#6ؠ8x.WCVyEf*[/&ۀWL뿉;F4e мK X:=f;ߥe|0J-h,ˎK4B?,.S?ǻ :9؆A>ܛ`)/TF-Z?_Vsuf 7xc@wu])zo|fcY:=> &i#pn@9eV@bL6j{YrvU`1]gko2Sz+vn'AT(>ʞ+ĕ&{o7uq`h Kc(jѪi j\0P>cHjЏb;V&-DR(̚O0QSPMz\d"UKB9m{xSٹXw"z%\˼vݨ r579gE>1W:w;PW`W$T.Eăa9U2t^BNfl4C;;NX>IIBmI^z=?E+:'(5SW@7y(4./I0wC&͘Deܖ4[=PJڼ#WC_ e; sHNoeꪎpF|Nh e`bK 57M=2?閑#?1zRUNcE6>.U!} ],슁, -áf00OYbd3G8M%`_cžjy߬VGx8egie C0R%=w`wC赊/P%*rt l nU'quz ^IowI3W%YwKlk|b#C. 'rx5Mi4 =lOhѐcՊVRaPK^$WjVܒt`%@`r)woD4td#h&vЮ(ciԕ,}&ڕ )Fh@m_GE]a[UkϪ ^cl]ք bEx_zN*LWAo*i_ &3({{Fu#hf[ը% ggEDY4I8̨&<jc^ߒT4鲣yito{n.et?#A K+0F֮1^dAEhA@V!|v-H.5 }⁉ːtD y$hrc\ 2y.Z8N4^68pj r||dvkg@'}뵟6{nF =U=Wi 7D⸢'w iG gnPwTcrt Á _~GaJ`<`%(?yB< Tp6g.迊 ]▮ C滍U0Ixط3|V&ȟ@DKy˒&NF[{] 0Kd>0.^~Cl4fraB\*g3Q:ᄍ+ a{B_&'Y詈*VMۢÀ647ؗk^ :&o\{[iʡ3T(B{Kr0Z6$10UjbR?_'zy[ƽRN;IgBƙ҂Mb@|o.~,eaM'>oQ 1> OG- n=G!fLJY^6V<tN#vJ-L3mRNl›Nmp@A_,ePz&c {>rW5HZukt ؕe Z{tkq̒X߾ܺ`+ziUoz0Ests|_~]EdDcѻWU"s< ӽ73COhD3Ŗ\nuOsEhhL ęMwmc8jJehkPϾ}vB5r07df;Im/Ŀe*t-½ť1Uh%8*OIj]rAӸ;lrBCqp j2||dZn cJIlVK!*ZY"/W\d'eDG0-ʯo[P!\@% 2x o)dFeXڛq{D@MHq> h3/)OGSnS$6/Egw!âNvͰpQ)A=51(\q+Vh =Oղqqc?UB iY LMtl ґGdhL]%pOdxo F+\}>vG$GoԽhы̧Kvf:-Z`z @gYpr>TVϖYܨ')f_{aUl`ƛ6ABnL?X>}V?`|qc> \wY bp2D_x1w4`[ï{E~#+Y 8%/LNQ Z\g5%UEBKJNz -3d̦s{żbji|><$͛/ΤëK WeCc{J 'nNjgIo/4˵k3 d {eSl Y M%24i>؈I~/B@BH9fkF"|:D|>n#n\Ya/Iw!zcr$,緌JlN6t!:+Ca>f?I&xm91.x3vRe c*q=}>"lCH2[GQd%Z5G"xVzr_ɀ|!4?`\ ѱaAeF8[Բy&Ûӵ{u *K;YMh 'yBqJɣG:A+qe%_^S:}}'n6 }G:en5Wo{$Lnc, v!G U kSbއ/ !z74yO H %]wcƓ"يI?XǀX&\Bqj/{Z@JJ~P]:4Q(,wmcjD0$hj(J*7XL %Ś0?n>eTZ^gRr B{ e9:9.:^ @f5!$Fm1\ &~X Cġ'\Ro?!UU˰_k=`|'~;' &{YDKlUl/AEy>~ uH- ̽g>$ 0z}YX,>שּׂGAaIϒT4Qn)fIWY*bw"xn&%R6 V \YIJZd/ѸOX)? nvs#`QaPs5_/3Y2ef"}8Jҧ^[!m(7:Tn`<+lPEL a}QP>Z,'|ldb)4'MMQ.8K< u -7pҧ|{C,5Bc}׭fme3N~ ܗn[Pqi^IQŋ#[v2XxU0ut_s:_69Sui$0Ѓwe3:fBeBEӖM~t=L)Z](`tc}!i=MdS-Ql\=fĬ^ͅ\D)f9Nt="V=@8G>MgݺSH"9eIꠔc2DbSLP.ezJ=k&K^0*@|` 0'|BW}6,QL܌өϳC K]0ʇl5Щtu5̯e?[@=C1?oSs=< =q%XbєIc} *qxeˣ[]V=ѤHea;}PX1"pOqtP&{4thw |1ȗkJgqCEYNR%QٝZYSNXEoܧy0vv uO{)6ii(] uP(sw|i=+C|ζ%B3܁!:-xk.I,]­؇Z}IEp$~"r~#anj%슀ί{,Po?v|^qu%O3q4#ټۿazu.cwuZ|TMKS;U᧻{LsEr,-.kELOGWexZ'yQISTu& 㐴 Xi^^x/+UnVmY>Y#`i-MuBZHV NZQltO!`ހ:$#WyxGE+ կ=\A I bWfp7Rfc.2G;?^x8?M'_0]wxm.yȁ6Q!' Bwww,BBdф+j9ЌhFʪ,Ӛ4v> ~Ɗrm/w!RPHOW|g!:)NVpRxj(㠜$ǃJ | s z'3} RZN܊@ 2`^7cSB^~hA MecBhDwIQҾ;I-a[aq66#t8?}FJ/͡@gf}I~:Dw}r@!-qi6{a8ƒM Ouy(i}*\B#I5M!N\Qu3fyq6P61_6 J{d m_2B`3NB|C~<5pmǩ+e.U b|;ʸ3t/ޠG$[m2J1J@oh)*;H6kuUP Y_n'vݕ](7RγhT)IH 1μxFl|л,pPI x?wG5 ?=-Ckfz2~ reI^ Ė{2:xMoE:;xgy#Q& 2v)h8[/p{Bh&'_L:*b+XPfqpTA7:? wߎ6q5y{5?Wh[϶35+Ş%%nf)3,( P_ؐ$nT1lɞv}!H9Y,]x)9ѤE}*lգ2Jp_5.|Ne( x&IS&pPX< =k, b`)uDc./>5)Ek<$y:9[7 ?0Z+w|~77L^uC{dױT*5[ u?ow=2FˮsiH acQ sv@ puNJc 8X8ٟ-H߻okR0=dscʼ>t6ߎw'AsVGdF*d@hmr"xLaG]?5t br&6' V9ӷ}:3So6Qz=ZejK0♄az4E& +viדW^=$@+ 1Ǟs>*žg?5KR {@:E v,[M.f`AT?kN0ʗ>…Ry5دALh|TEMC7 5w߄GmؘVmyNa>Wo~CL8 Ԗ\x-kFϴnYg20AܛoEj T^ r3p@t~]xd~"\ܰ22`~ y;oDL/:bp(_B~ϹtQ1G1 PVϴ5J- ρAtNlCԏsPEEU 7Ȱm)x{ LOka]ey^v$P\kFQ}f򗱑mFnu-<:z8[|"w\&C1:;fŰIY&882" "Q2e>w|` Tlt#j7-_Ą Y>z0mD,{qѻ?*+Žz(35VlsHk,;M<.mqx"&{jc|%tmS:?D9@+I: ʷ@Jy"PxATTHW]TFvk_1'}ʔE~O-zri-eeD_,Kh(1Zr\,6 =:~ѐ@2 o֤,I۪匷;2`< ᅬO%~+'|[|h.{^Ds蔧`d]c>,V RAGw^7Y̬`kU/ c6$z\#luvs-R{!8WPgWx[&n) kI#BJ}|\ zTJZ@saP .*PWSD?*ٯ\mb/{d&p'xvZ X5aG'B(>qsSHGҒʌk.rf1} O.G{^/皐>%\qVCEȚz:^̦ԫ.l {ڔrȅ ͓ks1w]fԝMɽhmiWE8ʬl'\FEerPϜ%q` 7L*e*64" Yz@D+x υP`_xQ2s|׋Q=2R1s/4.-CfܽX4K}Jkg:HRuCu$~)4)}>D n))Vl7lX脲~K-q6/ -3&4xS!;Ҷ%htC8RIʹRM;I!5R7K`@-Ktñ4Qg_HpC@6 KÍNATa^TVyӫIom&i|3Q((ozq"0#QQC;(?_@S>'NQ䞳I(k.aj. yr KBM_y)|?&; ;?n~و}ec,T;ڟs"6GXΕNR}Q㭰>ni;.w/i >'¨ū+ pOuba06D|<0-> :+2ZlJ`W,[vs_jIae{v #AK œxJL!gΥ_g'<'ir"#ܐ1犪E,{X#pgɀ,A:A:Q-k9pt; );V hjs5pht#6s(oKfz:mz,Nb@_*_?Fa@Y>؛]7 H=ʝ ~(!Ϋeqː{\e]cNt Y -/ METZJB9\8f!&MF"b?(S!]fIj%ܝj_É,[%1þL B{B7#_ƚq&klB1œ6(<w}Cot&׆.mʗH/;@V#ëk;M6{{LTRkqc\v<ziT!D-Dby8Sn(`rҊo̡Ѝ c߭fNB~ =Ej_/WSKޞs(O}jd؉?jlW <ĄA[*!0*K+" cgөXQi-oNM l2FMf!GR\{ˏ2|9aa+_9fLJ{!$^Jh5TlY"Jx5y֐1TRσp';IQ6&h[T )J(R 0w; Eb0h*rjm/&~S G}m5ddpn{ANPW'Jv?ձz v߻ gfqIRZ^#ݽ_wYMޣE$ ͩuŎUCցA+<"$33<I:? R:\ mX18@LK`T${گMd~s;(=asSH4}P/'屔 {@-fwڷbD%T"6dFùL7L%~qQOo9! ng[dsTXNԽ+f^ƥXؤZ$/qLbSEfTg00cԃdiG2öH/{L>L~2S7UZ 瀒<| ϭصL.`骉3Bcc١)O{ o}>W6Gv%^E=G b)&b5^E }0Sj-=Sۥ|4&A];Jzz΃ʉ=?Xy-#3G`ؠF=Fxx@ A lE) ]0="Ϲpag-2.`] |;-X1ln%_R+,=N&2Az 8,+) " ud /[i:ZWQn[)TeQ0nBz p{ `Za? qx5gYe&n={ Foʜi\vJ/%_2^.FB[~ LH{[{ ^Kyc5w|52!(؜NV$:$dސKE{c$d]);0lT 4٩p\#@ʏ[M 06QEdDYa  ,f!JqmZvtT8dz{Vb U|sR[~V>C3MEdæ W_&Ǻ8cD#B7K kך'hׇO_hخ4N}}YY#Ia:m c\ z,Skgni.a7C{FƟ: 6P%bKWt_5(3ZX^~D ߓkLs!!B8Wꅽ(YV驞]UlL NDF S||*oqC],)@a:)5Z[YyRf vfo Rìc2%&>2}mh_ wJe3'*a',*(9o:OG3_/kd6U!h:wiH^L B~LҝI?d6ԧQ :3nׅBrak}]!"t)J*Qʱer.Ljl:5%8ARaD<|*^!:T~lWv(KDZuŧ2,d|,`74&B>.Z*y4-|uo/|S6y8Dy1[kBnEIƖ/z٧\L9;RJZqn' WX$Aݫ@`l%ȇ; (ulLn*ѪvAT(+:-IX(x'(flemt]FPPsl3jC[Zq6kSi_-iMO8 7o, kjRa^\AkޘIa ˄vi.dfNt5'I5!NE9Tj잮NJU0 6nҴNF5CUL3jKFv03IA-G|0Q]:!\rTD(bMS@9^*r:HWrp9`vu(&WMvEwbݽgq+ZʄAB.svgt!bk ltQCgO[U@T ,sWlFGaMMoQA+Tmp;ؒ$( Qg;os"gf[fzO69݀sbe^@&?,;μ× ){Z?|m]C2GjԽEj8ALVtV夘7 [ !N"R% U+؝:[٘lzÒ v6#;>|5c $ɎJ5DOXAȎz@ z[L{3.c|$⇒]"D{R;&1\_-X-~z[h{5JF*cX 3gq!eŋ&8^Cc"LJb;yӕbUe!L[Li`\Ih-֛Ȟz'Bцy:i*w[`Pvc i>ߺ=Q5t"nEF,TXr _51d4-PefmA7sv̘@ gwlgTPmUgjslSK6:!e6[%0 Y߿K@qC%5AMKfGWEߞN=G_ɧ70*Q_@n?SPw̟ |ccB<R:;ͭzjOfś*ri}JUzˇYtq ;cî2`i.ր^,ʐ /(^4@֕-^O,|kZ!M#-֒A"U<\C<<XڈI=GʔgΞ8t: \oAljZ8L"/^ p>`=%yzQM^ q~4oĕm$Ub?=|V5HDLkQ z|#_3z,:}Si1!&k'duovzfjae/';{ Hu ^Zx3|B'N}mu wG"oIUK++:u [ƪvީ . U@( "~LA"r1y3(a(qme- {+Zx?SNw97˿1Gja^dF3QգKK"0yBh$ ]c$ss*CN ShZ_5d8H؛%6J}֭đ~mAj4avj[VS0e `R U("7jI.k> kB\x( Je&G5x9Cq@HW;/rt-9xdDkZpTp|5mFT>ڠȿ6H jk!y$.8Z{au 7/ Z]ndl%f紀Vٍ֔]&_]Q8D[k͢%͐aZ7+@3`'@/ԉ┋<ց{^-oAI nrLwtݐ< 繁pK sul_ŕHCniKԦjjVq'~9jFw޺#mJ'BǹՐ"5MnOMlNF4ct+whGѩ#/6 OHIt~Zy /'ϽA{ARr$%`>]VJVTT5Eb蝔IDg2Q@}?=A{+6tjm[2OƮ;R9-'pdz$^y}X9zba~\.lfŤ ?|-.*U..Oё*9`& 'Gs@!T`@@$GqY 4h\I3A 5EFc߼KbDnj׌E[z*:'G-rB ]M7YV#0'̭/F9ζk&띡$6wyKܿL~U:\K}4WvWCD*.j@1ДK[|s`H栖0]=!>?|V9H~q( Xuu<-Ġ7:qhg|i gؒZh)^FYN^䮩(:HWKLC^!?^? K@NLf}=-u: qcCM]T=9:4TPPa$Gțy ӟBi'dOܹ|O禦z7vmKu+[;°z*е UvH$5k! UnGJ5 e&q#O7bDb)ksxX39<'8x+zh+g``Zqisvnyг}=~W4SM5yvPk $! !԰'"Y͚ qeP0 o9'#,JU]]̝hsdh\ l؛9#d@;WI綺4|!y鴺Dpv?NІsH* _ e,o(XQQmU`FBBXD-k lx3rʎGXx1T!(1૫MnJ7ܲi(<.i`%5'rPj/#w %<)4 K'N;G@g Ձe"wy0CHBwS`eSRchvp9J]V:VJ熊.pXDzW"@'F(INپ%?vծ!L;Inw7ӂU>TMZhdP`焆l$׍IlEϘ㼴FW~^ZR*~kl|`});ɞCK!@?^'.GP@^1A 0`7e$Y&=/ȹvhnӮ( vh gVEk7G62t,(~%/c/Пqbx$> YgQ`-lе/Z Z>'|ZH"'͸ y᪅fQv ;u7Ln=G|sYt%k :71VZ76sP rU>coi 0̲Loܥ) 5:ya[Z} (83킣ZÃQ6kJ= ģ[PKB IHMDlRyF#ǣbC?˸VBZAD${y|lRn}:^E+Hݼ1}B :вb[kKLjsac-^pLW2ۉ=,#nj^rE _L4YfN)DNZ$Jf!QكC00Du+EvSޕW?e *XѺeQؚ`Vd!>f/9Ux|c8KuNY6 ^ C` vu8l3 >RJ_Cުi!@GcyozZę9_ *'JUU`[^))*&XJNF篭ᇞnn^DHio1ВlI,'IS_z ML8 \1_[+F>bc!0];0T3|$\ 0I6}aV (LB,x,9>Ιjr2)F! !QtAH <]j [d;2F)n+,l|b!ZXuԹPggڣV.`[*D(]l}wѮ'u~GDBe:ݺApSͧce#BFZ@|gym0u7PDz )l6Wu2Qk ʼLH$4̟́^ߟS4VB@(9>uRQVwȥ΁bJ |nmSzD [lڟgr?Wygg3bSvTo8DܴܳH~A+-tQO ϛYzϘ!Mlg9  "Jv2ooUZYϙ :TpsX3Co8NU%޺:pl{Zi 7_k>S~ zցzЄRRY p6}D{l=Q Y~.zoDc7,ށtVB~dBǭtm ( m+M2@2X2! *ϿK!qܚοw/ ; aqڝ;,! R'9̄Lmk_.H2-7d UG4ζƦ[*N~8Vh*pD;8VPpL'rD m܊ O6_n8޹v೩)<Ҳp8\X8-WwQ{'ě 1C'"ȓ8IAAHuN @R n ܷ_Y6h$d@7}7CW|JTkT[ʮ9F'S![[NS+ksV.8(!rŽ'Bٹts s ' FMVܽZɲ(@}+^FJowVc]6аCJ#p3G WߣY֖"СݏfcǺ=./vBK]bsYM-2#<TDŽZ ?t!;" 1-x !@DIDϐ%z.`Ƞ;]/wrbq4&3:N LJ|?nr؂Wf95ΩRlaZ?.7.UWXLǺJ5u2(|gCܺK Qo 'HRF<4@$']onnE2 *}lc:]V=ٚ'XTE4 {² Т]!BdhV7>&2z• (y($蚾 >c 86a齣*,KB [Qx")w$; 5`ٱDc] pKe}͒T鐓]¯7ԬF=W3EvɎW>}6an>gZ$B`D|gFjX;aNYsQiN7T: f.@&IR[G+tRTSnjϜ1 a)*d@2u,wAlBoe *haoJ$A)3;Q}(Ys}? P3|BvB#Ӆu|u`eZ9g{J"SkʰH @Cb8kGႋƨެIh @GF\wyH+p_;4, S7dՄ:73FJ}(QgWq☳Rf;T}.7/)S)::Ռ.ژI]U% WVxg!ٟ-Ep Ĺ(@c=JƔ1h.|e'/XAkPg{bV 1n:;mb0>C#b}+#Ւ0ƊCujY9Y,vj !ŽWt~ ¦1Rӟ떘{ӑX5"z2B'$^78%dI7rP+ВaqyD ~m/#07qT8Z0FEԣzlIF4Wd:֖*b0`Ba8MkSܛ5祈r|XA%o^vcMi[f}<^9ZZ4S<vTШK@n!G4zkRDɶ*La*Y6IӹŹcQfjk\MYoo$F'r XJ1+|V,Uf*i*P#6()\ J|og8& d*BƜX guߛB^mh4mwjם: #N\_ dY%O V?A8Fxe~CC%iKJ7&d* тyN۲g0T).n 7lӫY[ V<h ;iÂY-tR=VP*b-QΈDPPK$'Oܮ`A&C(^h'/kF<h-t af=mN?qU96WV =&B&4`p诀Q#ӣZpb_N -v) LJ "mPt' J7YlJU8a 6DX*:'.>6*qUG;SdV(X зTF+j sLoʬSׁ(0Ror9ih DimVo ;.laaY}\԰[/!i3`y|=q߹6%ϏG6̇3_׉F]g7i5w3@]{ECjLUz1XG#$(o90Jd X@5*949ؘہG rmc!70g1 E!KUs`V@:'d9ޭG/'bX3?5Dymsӡ vI9N\#v:VtC-XY=-}3E܇,r6i ϹUS8Kjh臵U6P_W3ۗ\>:bH3q>w-CNŃ6"#SN& 8m?Cs`5~Ї Bޖf:eIsUUb88͇,0|̍*ιE=z>%@l!r"sn"l[鮍/n+"gwhޭ'hҴ8 QzoB?H#Ɣ*^/*趞a9A24b'4'r)7/W}gbq2(Mg m7RXn?*mSzH3PɒEuqXV[?X#3ȿ1X/c,xqb$>cv%0{]tYݞа2pT"9#׫ ~‹%;CtL%{xA&T]tü)ZxQwpL|\[ӹ{DPVIjtQՏc͑|߫ΥRGCs]cKE>s}/(OM;Kq{"H!Z 7*(}Xq[w|ڧLVߍuV!o<~eo}~M 'o-ð$&;iBƒ9)pC)tkMJ'| En471[3liE=0_dΎ 40Ӊ(EƓ˿a#urQ pk h0'@>0kRc.+~cB>p"3Q}e~hއiBnb٭Y eao$'nƄ$"SL_dm\|&#!:t[[% /E[Tsi0ը&BD$8hf>|h nHRG#K%5@?(sZIbĐЁ<]]$ 2&*#JQê7r!9.)&' oOmytY1qPcz 6XZT꟥-'`Clz"fj[cIR)@Ka>F՛WPbmcNn)o+ttr<B碂,|XY6LŖ~Wn.l?]'i\XuG:5^@ <p?I抄㢈#؈P@ fQ-t9GhN 36i5hR(ݤ yo?r`)^MJ Ʒ g gާk/У?5Azd7!3_]*tTd &͊!'u`3s {侘i~峠m T4${*mI"9taϤuK5`tp[ou.rŞQ쪸m^Ӱ*ߤ߬6cDۺtN>7"/woŘ&̀+bC6Q)$K-ܾ._ζ7lSc ~,dþ؟1N>N锎E5+tw&'ySil8oz<ܶ8]gAKS?ui]UE9r݉%@N+*lwlQA{ ^0xJ7/LNs2h3TkE0l }a~\f^m'C*juv0 +pTKȊי_Pf[eƅBc 0E%#p~/hc$hGi0HJK:1X{Y~""P: 5E 6ᚯ7͆s a/k?>-ex~ֲ"DYdV;)Qz2ߩFd+ۺ&W"tgbNjQ`X><+2QsL.jBqr$6+NsF:1?ߦ=Rh(-M!J?jYxX@}ܾ9)>t"Fa,ߨbmf( uV>\Ršqc#:o S