rkhunter-1.4.6-lp150.2.3.1<>,8[ /=„&jwHyZ,\,̭<#cHq{.]fzu`>D罺*H9I/8c  Ii~Kg0F6a ҮkeAWy^+ҧ ئ,dwǂD/T  `SSVCO?Od   S  -3:7d7 7 @7  7 7 77778(68@9:>BFBGB7HC7IDx7XDYD\D7]E7^H_bIcJ|dK eKfKlKuK,7vL wM|7xNX7yO4zOLO\O`OvO|OOOCrkhunter1.4.6lp150.2.3.1A scanner for Rootkits, Backdoors, and Local ExploitsRootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. This tool scans for rootkits, backdoors, and local exploits by running tests like: * Comparing MD5 hashes * Looking for default files used by rootkits * Checking for wrong file permissions for binaries * Looking for suspected strings in LKM and KLD modules * Looking for hidden files * Optionally scanning within plain text and binary files * Checking software versions * Testing applications[ lamb07yopenSUSE Leap 15.0openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttp://rkhunter.sourceforge.net/linuxx86_64 PNAME=rkhunter SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fiqrf +gFZv Zp?8K.^oa5?26Hwp聠AAAA큤AA큠A큠A큠A큠[ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ 6269e585a349c75306fe3ae45c839cd81f81698388dcfe15acd655174826104a118f79fbbf546a5391006665204d42f1334c1ab6f36f5ea3aa29023ee7dfbe569be9ebeed37f4bc3d7eb1e7c3c4485a8926533b54ebcee63fb0d61db5b132e596fe344bcf52108a81590d222fa6fff7527bb7ead042dfb99f328598bb8fcdeeb7c0d0aaf9dedf1516ba0aadae41cf7bba17d90b3c7695148c5662c9bd96b3d12f38a0f8f37aa93b608aa5b10957dce64c2136b41c9628f78ba6cc04c29c678050b048410ad9de800c7718bedd636891fb73eb032f01b4231b3165476f65ceb7cbab8a76103567c78d86affbe3f153a0102ea881624cf6391f6c8eb5be602711861ecd525680c6674f4d19c51c38afcb6c1f6367d146fb3ea72ec09b1a756b7bbc9ae491f58ebddb4c8e3e6500105fe5e0f07455fefe7f0d8bf57293b30dc9853bf656a403e63a462e878d06db3f603548e53bb8c895b6dc9d711852ece44bcb466f95c7302728ce0259a6e562e5271d41b4c5318f07339dfe007a28737404c3995c19cdb42f59f3e7be8fbb5d74b53c6721b334cac922df7205245df49aa9bef282d8c86aa2d92e6ccb255db4b4ef1473c017547e46b73d48251cbd16932207fa39a16b5a1862f6eeff80081f530aeb45c1f0802d77e5f1d7bcce923eeffdfbf1c3c81d0b74604b1fcdab12a6ed0c15b69f09eda99c5177cd93799d06236f0eb59e82f4829c2659b0326131c9bc86b351c785527f0fa620568bbf3f6f433b2235b12b8b0b3d9bae840b3ffa77d5ab6c0db90596bd2d15f3d456e875b924279f499110e557370d55e3b309bc3b9bcbc2d091bfd11954cb80c1dd1028d9b4254818d6cdd8f09c5ec23464666001e227d4db5deae2bac2710861b33ec1a38b291cf7b644e464ab80c294e33fde8f02c12a4ecc4b5cb1ccefbe498ab3b5fb390777be938d91a10c34a00c11ea88765d681fa1cd31f64558c86b11a236faa190ebdf677dd578d23cbd929036fa17a88e6d38abfc938c8e708364157951af8aae645716ca21487fb52070e0e2818a6802726da33464e66ef3c5610c83d2eab3e17300d00e7919229875c75db7932016611a49948a3f114be29364c50770270525fcba2f2a951d751a879d90154c30e9b01a9c12c630fc9d3b2b537a9ab372560327264a3e6dde866413069c3b88c26d58502df896c51edd874648d78944f8bd8462a9b4a6b83bd308c559f2e37758ded700a7ec11758682701c9cef71dbf65b128b1dcbd04640fe23ec224ffc9b929b6d65c5c73c0af133184047d8b1429fccfe41a3dbe2da970e926247972b137e4cff5cbe1c16f68ff772582cf998bd60b4838fc9667ce0b2ad14266dbd12e2f98c349f604274d1f9e6f0a45a3a68362b3cbc3924e5fa76479c2da857cb79a231532b56b03f1b6a0e4090b4f0276f12f35960dec59566b88379828a39da504add2addee24a91c510d79a16b326a7fe38705d7961ac0cc3308fe367d0d170d2a239c83fda89ae7fc2c897c9ee08964a0b45d5abee8603bfd41216b492ff07c4d79260b7b688d14873f091abac1c2b16872405adaf504b2a3399eee2571182a6b33955364327d15d036100f745ecde5d072e1cdb42255a8d89a7e4a7a12a236d2bc997ccfc8ddf2efed08a6d11fb500d1c82abb35ba1fec1ab9e085e51879e98eb729c76b39527fd2f25ec98efad2b39e7c1979c18a42531358e0cdf977cb3db8ddd5765abd96cae684cb062cd469bcd40016b803cc2ce62a99be46a40f184c784557714ca07d55a5176192b9da9adb9df9c67d159b961a27c9ebb642fa0602b48412f260246c83b5524d1eaceb922758ed22b3a64877a992bf61bd0b89fcc5a8dbff759d82a55479afae75f296c4a816b36d8abdae3eb8533d113722029a9daf07efe326e7108d11948f54b28227572690569df62fc618469c3ed016a42cd1925553497d92ca59b89ad547e488e68b6bc1638c8a1e5d885b0238d55990b97a8ba9a69cda4cce2c8c95d932c7aea82e85c51e3c70eb2Qrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrkhunter-1.4.6-lp150.2.3.1.src.rpmconfig(rkhunter)rkhunterrkhunter(x86-64)@@     /bin/sh/bin/sh/usr/bin/perlbashconfig(rkhunter)coreutilscrondiffutilsfillupfindutilsgreprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.4.6-lp150.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1[#@[Z@YZ1X@XI@V@V}/UOH@UOH@U!#TJ?@T=@R2@QzQzQP<@QGPO@N{#@N:M۝LKKJan Engelhardt Mathias Homann rbrown@suse.comsven@uebelacker.netsaigkill@opensuse.orgmeissner@suse.combwiedemann@suse.commpluskal@suse.comVolkerKuhlmann@gmx.deVolkerKuhlmann@gmx.dearun@gmx.deGreg.Freemyer@gmail.comjengelh@inai.demeissner@suse.comSascha Manns Sascha Manns schwab@suse.deSascha Manns bjoern@cs.tu-berlin.deSascha.Manns@open-slx.deSascha.Manns@open-slx.deSascha.Manns@open-slx.desaigkill@opensuse.orgsaigkill@opensuse.orgsaigkill@opensuse.orgsaigkill@opensuse.org- Replace %__-type macro indirections. - Avoid repeating name in summary.- upgrade to version 1.4.6 * 1.4.6 (20/02/2018) * New: - Added support for Alpine Linux (busybox). - Added the 'Diamorphine LKM' test. - Added the ALLOWIPCPID configuration file option. This will allow specific PIDs to be whitelisted from the shared memory check. - Added the ALLOWIPCUSER configuration file option. This will allow specific usernames to be whitelisted from the shared memory check. - Added the IPC_SEG_SIZE configuration file option. This can be used to set the minimum shared memory segment size to check. The default value is 1048576 bytes (1MB). - Added the SKIP_INODE_CHECK configuration file option. Setting this option will disable the reporting of any changed inode numbers. The default is to report inode changes. (This option may be useful for filesystems such as Btrfs.) - Added Ebury sshd backdoor test. - Added a new SSH configuration test to check for various suspicious configuration options. Currently there is only one check which relates to the Ebury backdoor. - Added basic test for Jynx2 rootkit. - Added Komplex trojan test. - Added basic test for KeRanger running process. - Added test for Keydnap backdoor. - Added basic test for Eleanor backdoor running process. - Added basic tests for Mokes backdoor. - Added tests for Proton backdoor. - Added the SUSPSCAN_WHITELIST configuration file option. This option can be used to whitelist file pathnames from the 'suspscan' test. * Changes: - The 'ipc_shared_mem' test will now log the minimum segment size that will be checked. It will also log the size of any segments which appear suspicious (that is, larger than the configured allowed maximum size). - If verbose logging is disabled, then generally only the test name and the final result for the test will now be logged. - Kernel symbol checks will now use the 'System.map' file, if it exists, and no other kernel symbol file can be found. * Bugfixes: - For prelinked systems ensure that the default hash function is SHA1 and not SHA256. - The result from the 'hidden_procs' test was not being calculated correctly. - Checking the O/S version number could be missed in some cases. - Minor improvement to the *BSD immutable files check. - The 'OS_VERSION_FILE' configuration option pathname cannot be a link, but this was not checked. - Improved checks for the O/S name on Devuan systems. - Handling of the '/etc/issue' file during O/S detection has now improved. Escape sequences are either replaced or removed. - Not all the linux kernel module names were being checked. - The logging of detached memory segments tried to show the process pathname. This has now been corrected, and where no pathname is available, the segment owner and PID will be logged. - It was possible for the return code to be lost when running the 'ipc_shared_mem' test. This has now been corrected. - Some configuration options were still not being handled correctly when specified more than once. - The 'ipc_shared_mem' test did not correctly handle whitelisting when a segment pathname was flagged as deleted. This has now been corrected. - Commands disabled in the configuration file were being logged as not found. They are now logged as having been disabled. - Disabling verbose logging could hide some warning messages. - The 'shared_libs' test now caters for simple filenames, as well as pathnames which contain the '$LIB', '$ORIGIN' or '$PLATFORM' variables. - -- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- upgrade to version 1.4.4 (29/06/2017) - Added the GLOBSTAR configuration file option. This will set the shells globstar option to allow recursive checks of directories. By default this option is disabled. - Added a Japanese translation file. - Added support for the 'BSDng' package manager option. This can be used by those *BSD systems which have the 'pkg' command available (currently later FreeBSD systems). - The BSD package manager will now try the 'pkg_info' command '-W' option if the '-F' option fails. - Added the LOCKDIR configuration option. It is now possible to specify the directory rkhunter will use to store the lock file (if USE_LOCKING has been set). The default is unset, and this will cause rkhunter to look for a directory to use. Details are in the configuration file. - Added the ALLOWIPCPROC configuration file option. This can be used to whitelist suspicious processes using shared memory segments (found during the 'ipc_shared_mem' check).- whitelist /dev/shm/CAPI20* and /dev/shm/sem.CAPI20* (boo#1030378) - whitelist /usr/bin/.fipscheck.hmac (boo#1030378)- do not use /etc/SuSE-release anymore, fallback to generic /etc/os-release (bsc#1006382)- Add rkhunter-grep-fix.patch to fix a bogus warning (boo#968578)- Add gpg signature- Default config file changed so APPEND_LOG was no longer activated. Add to /etc/rkhunter.d/00-opensuse.conf- Fix spec obliterating PKGMGR_NO_VRFY. This fixes bnc#926624 - Create /etc/rkhunter.d and put config added by rpm in a file in it. - Fix hideous way of spec adding config variables to a file.- specfile: * added ALLOWHIDENFILE /dev/.blkid.tab, /dev/.blkid.tab.old, and /etc/.updated- update to v1.4.2 * See CHANGELOG at http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/CHANGELOG - change Source: field to full URL - change the spelling of README.SuSE to README.SUSE - delete patch rkhunter-1.4.0-crontab.patch, now upstream - add +%{_var}/lib/%{name}/db/signatures to %files section- Remove bogus AutoReqProv: off - Remove ancient specfile tags and sections- handle current lib64 platforms, added ppc64le and s390x.- added some more strings to fix the issue.- fixed bnc#826276 (added string /dev/.sysconfig/network to ALLOWEDDEVFILE)- Add aarch64 to the list of lib64 platforms- fixed bnc#776687 (changed OS_VERSION_FILE in rkhunter.con to /etc/SuSE-release)Changes: - do not report a false positive on /etc/crontab - see http://sourceforge.net/tracker/?func=detail&atid=794187&aid=3591302&group_id=155034- updated to 1.4.0 * 1.4.0 (01/05/2012) New: - Added the '--list propfiles' command-line option. This will dump out the list of filenames that will be searched for when building the fileproperties database. By default the list is not shown if just '--list' is used. - Added Jynx rootkit check. - Added Turtle/Turtle2 rootkit check. - Added KBeast rootkit check. - The installer now supports the Slackware TXZ package layout option. Changes: - Avoid checking exclamation points in ALLOWDEVFILE checks (this was caught on 01/05/2012 causing a reissue of the 1.4.0 release). - Allow the ALLOWDEVFILE, ALLOWHIDDENFILE and ALLOWHIDDENDIR options to use '%' as the space character. (Note: This is a temporary fix). - The ALLOWPROCDELFILE option can now use wildcards in the file names. - The '--list perl' command-line option now shows whether the perl command itself is installed or not. - The 'shared_libs' test now allows whitelisting of the preloading environment variables. - The '-r/--rootdir' command-line options, and the ROOTDIR configuration option are now deprecated. If they are used then an error message will be displayed. The options will have no effect, but rkhunter will continue. The options will be completely removed at the next release. - The 'hidden_ports' test will now show if a found port is TCP or UDP. - It is now possible to whitelist ports in the 'hidden_ports' test using the PORT_WHITELIST configuration option. Bugfixes: - Allow the ALLOWPROCDELFILE option to work again. - Correct the check of the ProFTPD version number. - Fix the FreeBSD 'sockstat' command check to ensure that the correct fields are used. - Fix for newer version of the 'file' command when reporting scripts. - Fix the ALLOWHIDDENFILE option to allow hidden symbolic links. - The 'filesystem' check now handles files and directories with spaces in their names correctly. - The 'startup_files' test was displaying file names with spaces in them incorrectly. Also the test was not checking files which were in hidden directories. - Ensure that the ALLOWDEVFILE, ALLOWHIDDENFILE and ALLOWHIDDENDIR options re-evaluate their whitelisting lists to ensure that any wildcard entries are the most recent. (A time window previously existed which meant that the list was processed, but new files could be created before the test was run. As such they were reported as false-positive warnings, when they should have been whitelisted.) - Allow the EXISTWHITELIST option to work with symbolic links. - The test of whether prelinking is being used or not was sometimes causing the file properties hash test to be skipped, without the real reason being stated. Now the hash test will proceed but the user will still get a warning (because it detects that prelinking was used and is not now, or vice-versa). - Rkhunter will now check to see if the 'head' and 'tail' commands understand the '-n' option. If they do, then it will be used. If they do not, then the older 'head -1' and 'tail -1' commands will be used.- fixed bnc#717773 rkhunter sends email without To-Header - added 'echo "To: $REPORT_EMAIL" into rkhunter.cron- fixed License to GPLv2 or later has misunderstood a message- fixed bnc#695317 based on Volker Kuhlmann THX- Updated to version 1.3.8- updated to Version 1.3.6- cleanup :/bin/shlamb07 1540295945  !"#$%&'()*+,-./012345671.4.6-lp150.2.3.11.4.6-lp150.2.3.11.4.6-lp150.2.3.1 suse.de-rkhunterrkhunterrkhunter.confrkhunter.d00-opensuse.confrkhunterrkhunterscriptscheck_modules.plfilehashsha.plreadlink.shstat.plrkhunter-1.4.6ACKNOWLEDGMENTSCHANGELOGFAQLICENSEREADMEREADME.SUSEsysconfig.rkhunterrkhunter.8.gzrkhunterdbbackdoorports.dati18ncndeenjatrtr.utf8zhzh.utf8mirrors.datprograms_bad.datsignaturesRKH_BillGates.ldbRKH_Glubteba.ldbRKH_MMD-0028-2014.ldbRKH_dso.ldbRKH_iptablex.ldbRKH_jynx.ldbRKH_kbeast.ldbRKH_libkeyutils.ldbRKH_libkeyutils1.ldbRKH_libncom.ldbRKH_pamunixtrojan.ldbRKH_shv.ldbRKH_sniffer.ldbRKH_sshd.ldbRKH_turtle.ldbRKH_xsyslog.ldbsuspscan.dattmprkhunter.log/etc/cron.daily//etc/logrotate.d//etc//etc//etc/rkhunter.d//usr/bin//usr/lib64//usr/lib64/rkhunter//usr/lib64/rkhunter/scripts//usr/share/doc/packages//usr/share/doc/packages/rkhunter-1.4.6//usr/share/fillup-templates//usr/share/man/man8//var/lib//var/lib/rkhunter//var/lib/rkhunter/db//var/lib/rkhunter/db/i18n//var/lib/rkhunter/db/signatures//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9013/openSUSE_Leap_15.0_Update/cde9baf02a31076351e7b956fec9b961-rkhunter.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linux       POSIX shell script, ASCII text executableASCII textAlgol 68 source, ASCII textdirectoryPOSIX shell script, ASCII text executable, with very long lines, with escape sequencesPerl script text executableUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)ISO-8859 textASCII text, with very long linesemptyRRRRRRKAlogrotatenetcfgwgetutf-86a38d1474717694039b5883315641a10e36fe36df2fd59afc3147539a8d008b7?7zXZ !t/ r]"k%nJMOxrPv$MK,4Uje ?\\+'^ElQ!Ju/ rg!&WF$DXd_@1:5@ ̭ծŋwlَ1ڭM}=pD/x]*RhVQ6!ZInfcHfΩX38>̒`1NZVqG,(@CgX,BMPYs̬/ˢ!~] :# uX(M+2\IK'e\~*- /P3U 9`8uh .f'P3H^lɽFXJۅF__4+ ˚[i q|eRk)%H4:`Q7Pi\^o*I#VBۈqpmğbeD8i=&,g>4Tz]UJ=?=W 6_=d?@@&9՞;`~IBÃŞʐք", $X'aҐے)}RUc|IXrg 6{qgU}:1Tomǂ tScwͿx$ AV/EN& 07|CƛLMOju2BQ^+3!B#U1P~)ijx "> Ir1 I$ }E?X+/ǝ_`O+ճ6ԛ9u'xi,e4*c7vQs*LB |#h+S;\CHbt79Fō$:ėG#o6w"MЊL]7ގ ;լLm^~UڞhYS.bo~^xl֋tUsfl>֣7A-[Dz"E)`*~H/ @y8W<7,zIApq~Y~,7N"mwy]V?؆~0.7(K;n_L3HvҡeO Nq֍+B/XL˗ #i vz{M*UQ>42$DKQ^]F>2 ط0쒌ɴ=atHٜ(,ѯf&-b}G> ,&NGi8z΅ty2@Y@cnRF;. j *!KѵXt$ ;g\L9t/bR²]搻j-xd07i<~]1Hz(9#l;)P)/ хDn3/*vsQ#E_:Vy '*\ր $EZYlkVUҊ3M"se\$}*lx"~ W1+X,b%8"H-t;=n@(م4$.S;uP*f2 qYPiwsP| F֍a֬>%!F,Vvdՙ~x9`-TM]ClENhb,a? 9Ȫ)]mA98'W vgibor8⣕t wvyt'. ?ۘSuaM.xs\:lGu,䕡ːoճ.Kvt\Lc<9s\&i"[q`%9QIO)DA'(̢Üi;5[%{8wTSWΣX] qcdȥ, {a^ߥ@@&/ ͵xjp-&8SI6T# U%yi*ȑd5İ"7)l'=fc+0Jx)fdsmRXcQYon۸աR>qCұ5I{4m:( *m@.GN+F4_wYi쨎qk6> bK O"^KmA7 jLq|X0|Χ.64awq5<H~䕲[RN^sX~ {r 2obגPT1CutpșdgWv0| uˆƬFLC׷0¥lm%)Bn *RJ2y@>m~|Eoi WS?@%:6@UN4܉9(5DP-!IOj+(x[Ô D[@r#9X(ރ#!:{Oa(ʘJpv lMZi9bx늤#NL&ҹaaK'DUȨoD" (cޅYE1QmlEͿ7\PC59WgΧYo}nfRI,ʤ#t/P\3n9u-Q(|V7ޅI$&W?ܟ򊯦uXs=ͷk2P4rns*hwZnltB|]+BX.k6݋`ҹJ?%?ݥizhAAXjV ѰM%"BsO ^(Giga _<"!f{D 7x \8EF aD"čP`2+97maXIĉ(tJ6m:5}W+.">˝ڧxnVo1OK5fDd)c#Fȸ‡Z_^P6%~`jy9eÖw/mĀܫ[M1G`xDQ= zwAo_"ٞ>QE,C[EwAUf?P f xPW\r)KfiCl bu C[Qyd.*PXݙL DۜdKzS;C4\S D˓;+z6[?ߣ[>h4pWշ0VL#ǤhqQwTF'+pJvwL2NDW72Ո7f0EcҥØaJpZvBK*Еd`s(ƻ+ 8uJ{+O IOv Sy]=f\]l'4f^ Ӭ❡@z?Ѻr4=Z_F&xEΝ4SĴMgp%29Oxl´sFLM[|Q' 6 P&_q @y/ݘvwme7Lcz1w_3y1ӕl 9_lO8DFЋ>JN4uajE'dڦo!AOU9a:UANj, ?JB:#{[U>-bKnr2KtyLvu.ttf:%$w[apR^| kD]~VreD I:9DHn1ɝ". ϶[&bm{2%K^(zò3[3=FQb}eAQ.<-"Y#Ȧ̓*N!*&.osԊѱcb\Du{'4*Q |Nlڕ4L٤N mOC79v*rЪ^fH3lX; ($XTd\# d@N-H+^QM/)] 鸉|&ɜQevaZ+hoUz{"uOKL@hH]"'- X8f-=WA6KY{b?a@ˊAz/]y[RQ WYFQMm%-Ifk*O;p!oRe=S0p\X"u(l.i-bBMAQ"8[zlCLԝVsV״m᛹te5 ҡ' ݅P :U!Obi7f*'wa2[fXA5Qs6J 6ShwR' L!8ؿAah9+ncRx@uSiw4?cN=H]ߠ)Ki},zAj) Үݱl DÁS= kr씩dm~8(`>DxTܠwQ^+{551j%ב;Rz )*eHnXض˔& xo(q}Kc lpD^ʇ~Vok.&ŒZg1;\4'Ex4y}oՓ)bK,ԏ31$-RN xʐЪ}ٲlA# 4<4k)SӺz#м>_+*n~yuhBwY<}℥1zJ S*|QO$slR=־r&;齨SPZfQ0X0hL{c o x.W0׳Jc~nXg1}A&- 'tKoВkTV"ܜ\%b[atU, Q*5vtlC8쬧L_ z_!v`Ahq?l,BYܰkI?m0>D x3!{^mOF{y52?ԕY·QjcWO貊 ֟dv?8&!52<wஏ`t Uh`8`FAw i\>5 mB=]#zoO]E*?Ҷ߄Bl ڕ 5xi֒vi *ښ7٭k3B]fOdu<$NZO24LCʮ9!3>M1o_]E4I0(tRDl2p]X=igȀۊ(2vd5cg-"Gp%uFO 7wIwGy6K"n-T\/V2HaH8]sa &gSG/({ gjqz!^(#/LJ.>QDTĒe]_\Swo˦ΊyN 1%:*$eK'>Lż]0ᦒVqoq~ RwM#1#q8 `ml|1,*:3M6kұ69Stza8mZ4w+;FHG30kXڠ 6IH7*Xswג4W3$cNir]$.yb4Dž-疵1ZLt37Ib  TP26DXtg8o&jv-]Smmf8ޭxؒ&1NLd:ݧb+폆LX2 A;R0_6d'F`M}91'Ȼ𖳈:j~kuaV# ڦZv9-LD'_"] Dq66VDU{/Nc5;hQ{gh.̛d-lY"Vƽ< IqmKN#x_BzJ@<ޕupUIt{$klB'myjI23˥*ԇ Ⱦ/4ih!FZ>͢F͔߳yZkxS>AvcYmKLBF-*`"5qrcTxXMpAy4acqF:=YvEǮ!Pqu9Ta)9f5د?羴UE^2N)[O1_@u\Bb#7Mzep1v K&əO}sA~{^+;w<ܢYeT$ <۴# }X6d`%x}7ViF5NqgH겋3T-CdVZHg\ &kl--I絎sJClo\&+ĸwVF-b ɱ4Ki\׹_T_AXk[71(z5r`YhT\O h 7-yhH[1sesn?xMB+diȕB#r ʽQ6T͊hd^3Srm)&Q%q!~^|_ǞyLx^Y;^z7 T!i mu`ٸaܸDPA`ޑTd;k!ס)tud=7LybhlҗV=0v}Գ4HVBԵ$_!sÅ$rGV\Eyl#4.d.U` ӏ79^J[e4{utN1.)}*X"8Q{ ca@PH <_L2>|~ꎸIV-uz)r))5I90ϵ5A&i165XAF8>1m'^橌 2*5S, $!}yfrQ'm5>F.ldJ: Yo0bq!Z@BV=Fn.qmƹY>.tTu$KE4o7I~'*7hP!G!:漣ӏהT8z!6Y3Uk^G P^xEƴz.1/!-<))lg!BsdBLpPI[J׍v Mp[fm0]aN4[?J)EJl4nmZrQM_g~Ų.bz#*`U"(k5"`dT,.ǚ(;Ī˹ +f JX 7# xVmRI5V:ǭKDefwU1ь9Ѹq,Ht/} {l!!XoݘWAs O-gJ?u)υ-8ظE8ERxʍشW9gQ92ˤ@}m(hb2$梴"#E* C#sEhP1[L |]E}P7)tB3@wUu =xf?a>S?`{Mp*Kq?} 4jaԃ{-^u)LJ#٠?} YHZhf"x"75hڐ6p߮X ժgAurE:>N  <QiG=<[|jo-;:E ׇ&Du[U/UoUN.g} suJPb?CSjbMO%;8\,Mgk_'bnֵ<ܥЕWPYʝVAD2C2:#qW6>"a$`s>&T &-, UN71 v ?oAjSFTci9RCa}֋=}F2qI1VPqGjbnxHڷ19?hB߫k.i60/}1o~k/U =ںUԼuy4n˽Or)"K._w\O_|ܷ{hu$~#>oZW`sQ( vF|<g2p 5Eڻ[_9AenC^#/:,AT/HߡpYF]qKPCmeԯDdH[:82iOǖ<,8 ZtS6D˞WV Τ֪:ݩ\M6CӨ3m1ٱ e?h}.UXQ9Ǐq8H{aTq$F_@Wgz@ ;Kd rzfC7n؃3_eO@Jwr ܲXh1P98#1UFP}Q}C',Zf6:.H.o|cJUJt _<Kʽp7Lt. n"I,i*<"+Г t01@Ԏ`GVsx2VqL٤px%xÜrLʧXZ'ōGюiOQڋa|!{Z̤1$QN%`B-e3i^t30᷂7z+tӎA%惦%=Sb~S nXIEvKOWS.b!e v=K-ZtvuM!^L$R -stHkhG~tM*R J(EXv`LVO^t(F̖"0/#w>)WM0 ssguq9P_l3i;$Ó fE(fJwg (6(/ # dP]҆ } U .{<{6gJjfʯϝZxj29#ݸ0s)Ad^CDe T\}}U&= u_Qh*Q %%`]Xэ1h]Tz9ɢ߸Mʃ? 9ڂҹw! 2a*|I|M^>Յ#2\ˋ¶gm9dܢ7930t:;-ut.$2Q횏w$Ã0ZY'Q&hJ#B["m]-yߒѸxAOk,@Qkc JкwOO,f"! 7`;WQ$d7 ݒخLeXUpi=t3+d{ ; =aAI-$1@_fB,nfXeS̀+0qw%) Rgk#^`i)4U@`z_\,nRxtі60ԱtB]NO# ދՁٕ/Cea IKQ[>'~qhSO֤ z勜" 2grRjys+1Bu!wdjuά`} aKL`RK%? Z]@mo߶&F|p "({0 zCߚRP[e-D ΂R^ӘVd`۽5aKu:kSp2Ġ+ M{_OUCOmM7C>0`Վ%B5ɴz1f:|%3{.e KB!YQOJVۏxqc걌UَWk7E*EatcQcoKÊpfR>T #HӬ5SȸD?# >d%!.`5FNJ%}2XLa 7H7%V>&aA8Fe1v72J]SokT&UPϣ-84ryHpv BQqqߐTXѦ,t+OUJA;Y~9G-֏l|}! (b/7GmmߘOUT L4pn~io6Tk бh,M~E̍)R?2sem`"L˺v/hY;bK<(bЬ& = #!Xa Sg+'|5nGo;"~[\^_.:*Vs^b6cWٿF0C0r 2Suh%ɛǮIB,ĵrU:aT\76`E2-Xj ̎uZ]I&Sۍ*fWh-E} O]Dܰ+LvWߙ(IRJ˖ X yQm ɳLz 7)+{M\ ^ŷQjG%sx>AgO uEKS8PDBRıFbյ#ERx%O3|eB=ԹJ:\wzp8oggD ܦئlC8ltPhGE(ƴʽ0Y1=~zt`V1q d3ϯ!jqN=B"'8B`{fK%W![:NEyz>E>) ۰C%x,n^Iw\$A9 GrU{{0X~dߙT jt>'`뷸H s4Oݢ* UL5%ra*jS KvX-Bجp2::T 0y5D/=e[yCaH*~WfPeV|Lg~?Q DKBvv W$AV z<,}:Xߔ8Eg7 9!,ogHE@UPU!<a;Hx񿚄)Pr(3Xjb=6h GQS[t^TTdy1njZI&%rD(T"`Wo6Lt*1"&t֊(umNy9/AYLR )mڳM\{Ԁt 2i{'r5f֙"zY|PhlҸ%M.YHzؽg U$.픨 8wDV+Ixp Ctx1uD\DY%lҞ3csoT_;ZTU-Pj\ QvsŻ%ߖEE⹒vR`tS2)e?]!(~DŽiM 쥼 4YTCx^.Ү:5Jkd:%LF%]P=p>4H~ WZ&`sfo.)kQg nTHN~69~_][SgQ'5W SxC*YS S5r,JlOq-gYw.QeL}%cSScCncB!q$*GUc9'h?WPNsGj]ʫ[9hkSZsj*G+Si> u*ma3 /=>VG-4g]dp=&?G 1V?u&4vJ)LH)iƨ`߭$lYG)d6\}`iă)܌]+B2gG*Q>=31@J?u,c-.IIhJ+|T3ol˪jL[D~M*liN'n Pn3Wi~pŀ{cP 3۝P[D{%p3@\\"z%$tRۻwhO!h1sH2)sUtp'1xpY=ls1mp(&;3gr6DY[?6`%A!n6lXLP꿰/tĘ?t)n Z ѝ&!Gg,6@׺Kk/E`׺הjf^tBO}7՞ ܠ" ptdKXx*?V!;KPC!.}߻JPNe?nv%1>cJ͗˼>k$#L\zFtK!PqD5j_}UY^ym1(\݊Ӎп LCzLNShЏyIT ގA Bh'<SAѩ㵿1~j49*fjܟءHCOHggX:11Wܾ*p0\O(:#@co> ~%*xl)/asQA>l9'hQ]r붩’Os5X@q#W`K'XLxߴ$,b^r5oG Ua$4UACs#``jV+gt\ >Gq EId :F[?j0NQ nb+]Uכ߅ڵBA_yӘR5]xo'9љU$SHKߘWCsRΊ=RrTU<˗u>qfzOc3Dt.S.+6WnN\fNk6LT+.d zDCyAg+GOeYvC~}\N'!W|qZ| x7J𕱺 ܗM) ׄ=+%*7Am>}(eIaΌB9B:9L-lh+$[R5gW昙k~^7|Ht%r G+E A!,. āO9xHn|̚t9x;f7ԤƮ } PFk-蹕\vO@;mPYPL['{t&n,5 }9q? G=)(6"vQsz\1DR@C Pys1M?5 45r6XnLXhǵ=$.t^[gϙ?kwdDHok/(AΧf1J&e4a~Fb#np VY^ORGsi-݁D`xmJ@d7Šm hNÇ(8/y~rLnf9t =.-o>CS|}doiwB_Ù:ܰ>㢏~˖Gϖ ~_76,i{,,<_*kgmYy] 5$:q't 5Z. Q;.>qE<zمlA9Km,8&=`Ę!ՙе$2NOS`kkH5}WΕ!(fPעAZڒ;o$VA [lcs >47Wu0?Q޸}Sp %Y hGMo0}\~cgZ>AP[2eb;k4Bx"^ݘ\DP)֑j\ Qr~U>H5E*ΗJf1Ј7(w6\ZF_[ܾ ^&!S5/u}&a|yL+㑚 *FyJɟ1I(==*?pL߶/b,RŨwh V^'gH|[tn Mbb#QCycw0E(23:Wd4 ݟGHI׏yl2rsvC[]KW4qA9Km t5e(RuNu| JV FK<TwC[\` [{3U&%ՔJ/LބAĉ'6¾ b)..ga_{&=bv7B,7_Nq|Ɛ11ce+##ʾ I9 *F:j,u J:*S.-/#K77Q>fa\?NO7pWux";x?Wr.VQ8LuJ:R$p*=;4Mʗzy ){2MaU,tBfR^Zپ$gHDgj:UR yb?0,l k[m~:c)$s+‚Q1{$H K,GsQ~ꈩ1 mjB5mW zSg;גtLZȬm'EO1sªO"bdQ^(6~kQ,s(N0f&I8@kIHr.iXGu"#2Œp R`3n\ƃZNGQV&d~RRVK.= 7")2Q՝QM&nN"o>Y#T N=-Y+R0s03?Is7l>LH} o､2XC`?Ak#礣mXZ5C*LDžbDȚ-R}MʫGQ7.v/if(r#ޱoK"/Cb~jHTM'מmmB&>Bk^v(d~1+hF#C6*qFE͆.iGN9m.&g:Det~zdN>NN=.ė'\OPhJ=Ldv`if ~ c& ~ 1$ʳER$KYٗpfUIzl`U=f5s[7i}o0pF:i71b72h,dA4?M}=RVfXu2=H2 獿3n(TdW]:Zc& k-ܓ$S̀y<5!x*ii.aU'`+ڤYBTt\Ƕ' A*_PZqaGT_nWt t [RnjH͈%{/WXdJR}C&EtB=%hjYjS&*8~:>ZK]QٞNa@}ƌsXjjTM 2sO`)4;բєoD#thJ##qb룳L?yԗ'@!8zQ~3pysP_hI+ii d8 xuF*VsgLIk]Al& M0@W 6OuliB} ([^.jr@2un6b(h{`]%XC䟕WvoI8 VlG{ǔo6<|̒D{p g-KwQ1G=ayA39p@_}ؑ+HrpQJ>*?綥\Rg]Ok_U;m=!\/BYjKjI+z:IPץ^=S*~\ C^Ip#a Kۮ/m5ΕIakz$؃[EJT0Hs?^6pql 7 - í۪v0W&Lм'8@L,EZ^ ` 扠7|^l} aԙ\>%i([ ?t=4눾σk]-QC ?-2<5D^Ru%VkfSY Qn^E+Mn>LlRtǣ=uQe6 ?x;$zH9{->\ Da i \tZ✗ul,ZWCf5@,Y¾|T]>0܄p6h5EZj5+Ja׷o6DsGDHdm:|w菗=;]k*,Q)$pޑW߼sexdkDR˙/P؋k.84p^lYtWjy0MU DU:ػd,zD:邎KL09Nw3h2Krs}HT:Vb >(r噙o=R)KL*xr(v7QG,s7z[,O{x\0C7jH@,7S*tވn#A؇!b4v옡x0w.ޜZCv_64ތתіX 0"'x)#)Q2U=ל"c Y3@(N{/zZ3?}F;46'Ḱ?">YJ/Tϵk7sǂ@()z qN{=#V4W9?Ḣ BB ҄D= 3c4f8mhNQ(y6tw)bP`pBùɲ-p:6Nw24*8`Ĕ3 sf-G$LF]ϒJvԠ8c"%nܬ>}<+Uh$FϫPf<.l^ qj8,d7F`Me/jjD8+[O?;KGmlwq 1_ͦcMc34\T|9T w7юi~ a@,˕$$0Uh{]]*<×֠:Djhcm׭7CdU0,KQxGvm~HG0¼9 (\T-lϢYS$azԣ_XM֜-j6-67[,E"@9 4LbYIp Me >,8(qd +`'jrK,$FG?hTo`Y-ƊE- NO-S<{.Ć /&i_nAOŃeT:7np. WAf~1wt`}E/M_\9!¨p9*Xq "EU:rDi~px= RT 4gtOԤÞ fI1"xT>Qi xnh*7!E^4 ` Fdwi}ގRbv}J#GN2[RT0/̥EG$!yQ q4f;,d`^;ǧ_3ɊhMP@[n^Aͭ1/n!uc?&CjՍ4 REpzv}. 4H\eSCӛFܦQ O^Fq(;}%˿+fK<Էej_8c휊ޑ(El3sSS}0{a둊`]ZcVf؊Ww` zhI՗EbυCPDgWٕ|8NbnW[T:ǐ1s֞(ȟ/2$VrFwj߅6N?8O}rؘ|_N]x ҍ)aHb…k|;HyivWy&sueRs{|ke~uy~W0Y(텃)at艖,^xa$g{S6Mՙ>L%XN6`Gʃisu%Ad=lP!,Cq fi^#h5h+BֵBw* jHM7(a.&/G]zfM@߽}aKΏX$ѵc|S~&3pHm>h_V!r5/Ŋfd[]elMrg$?UGsCaxʹ / A`t{qOA<z" p>hyfj "1 r TA>[OĤ3}"[Ѵg 7ӹ\io2d>pL$g90F7ꂫO *D1:@"'jYw"By3dCaW28E\KZUD~ R\MݸeQ!`tC~5/JE!lljB O3 Kn# !ndryu~0}DŽ24'fZhC#?F; պ|)Q+ A2տ{d 7s)Ov.`Ucb4iMOݘJ.Wmщ&<63#;d/YVr]rOǰQPi <ЄGL"~%NύӁ}VvOů* M6ue?+RM(\'l[ &E&˜ؿdKa惊;[*W햛4Ϸj^^<*39oɅ46+}' 6"4m `˵Qn?/lN A]jfc?w>RBoTr*ZA`q>ZU\!+WogEo)z^ӹ^; JgqI%W-)Ig{>4%$a Ju{!*&癐I<;r-{&S|x%D  Πs@E.2S{j sO5BORt9_Gm<7 YZ