subversion-server-1.10.6-150300.10.8.1 < > , bNp9|TfI@6D͔6 \<BiR.?$< G<(2AzF
ve6 =cOkyXaSP4Z$SDh70
0{ϑ:'&Pk*k E~R0f576Q/4:SD]yuLoa]HSkLb.51J*L <O +APAR ,**= NO9I]f=jDP܁ B > > Y ? Y d ) T ! 7 Y w }
0 X p ( 8 . 9 . : . F T G T H T8 I TP X TX Y Td \ T ] T ^ U
b UP c U d V~ e V f V l V u V v V w X x X y X z Y< YL YP YV Y C subversion-server 1.10.6 150300.10.8.1 Apache server module for Subversion server The subversion-server package adds the Subversion server Apache module
to the Apache directories and configuration. bNsangiovese &|SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ Development/Tools/Version Control https://subversion.apache.org linux ppc64le p A큤A bNU jbNbNbNbN 69e6b833726dbd27031cc106dc2f97eea641f632776356025ab89e5d7527e574 26950eda7872583b631c46b3b996f4a71a67af0b479397ce3d8047d57442b90f 484315052889602778ce9b54c64bdd5a52ce7c67d73e389eb76d759162b2d381 793cf5367a8b2508c2c84e40da902910af2b12b7ecf35441ca43e8a470e962ab root root root root root root root root root root root root subversion-1.10.6-150300.10.8.1.src.rpm config(subversion-server) subversion-server subversion-server(ppc-64) @ @ @ @ @ @ @ @ @
apache2 apache_mmn_20120211 config(subversion-server) libapr-1.so.0()(64bit) libaprutil-1.so.0()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libpthread.so.0()(64bit) libsvn_delta-1.so.0()(64bit) libsvn_fs-1.so.0()(64bit) libsvn_repos-1.so.0()(64bit) libsvn_subr-1.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) subversion 1.10.6-150300.10.8.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 1.10.6 4.14.3 bL/@a@`@`!'__R,@]9\HW@Z>Z8@Z@Y@YdY@Y@YJY{'@Y_wYBvXƉX>@Ws@W!@VVp V0V@U6@U@U@UUL@UL@UL@UW1@U&iU@U TTTPT!Tq@TTmTT@danilo.spinella@suse.com meissner@suse.com mmachova@suse.com mmachova@suse.com tchvatal@suse.com alarrosa@suse.com tchvatal@suse.com kbabioch@suse.de astieger@suse.com fstrba@suse.com rbrown@suse.com mpluskal@suse.com vcizek@suse.com tchvatal@suse.com tchvatal@suse.com astieger@suse.com astieger@suse.com astieger@suse.com nmoudra@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com tchvatal@suse.com tchvatal@suse.com astieger@suse.com stsp@elego.de stsp@elego.de stsp@elego.de astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com astieger@suse.com bwiedemann@suse.com andreas.stieger@gmx.de ledest@gmail.com andreas.stieger@gmx.de - Fix CVE-2022-24070 mod_dav_svn is vulnerable to memory corruption
(CVE-2022-24070, bsc#1197940)
* subversion-CVE-2022-24070.patch
- Fix CVE-2021-28544 SVN authz protected copyfrom paths regression
(CVE-2021-28544, bsc#1197939)
* subversion-CVE-2021-28544.patch - remove kde conditional, we build the svn kwallet integration
(bsc#1191282) - /var/run in /usr/lib/tmpfiles.d/svnserve.conf is deprecated (bsc#1185052) - Add subversion-CVE-2020-17525.patch (bsc#1181687, CVE-2020-17525)
* A null-pointer-dereference has been found in mod_authz_svn that results in
a remote unauthenticated Denial-of-Service in some server configurations. - Enable kde integration from 15-SP3 and newer releases jsc#SLE-11654 - Add patch to remove dependency on kdelibs4support just to run
kf5-config to find out that headers are in /usr/include and
libraries are in /usr/lib(64) (jsc#SLE-11901):
* remove-kdelibs4support-dependency.patch - Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
CVE-2019-0203:
* Allow the use of empty groups in authz rules. (r1854883)
* Fix conflict resolver case with move vs move conflicts. (r1863297)
* Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
* Fix #4793: authz rights from inverted access selectors. (r1854882)
* Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
* Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
* Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
* No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
* Remove a useless common ancestor search from conflict resolver. (r1863294)
* Conflict resolver support for added vs unversioned file (r1845577)
* Conflict resolver support for unversioned directories (r1846299)
* Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
* Fix: foreign repo copy with peg/operative revisions (#4785)
* Fix: foreign repo copy of file adding mergeinfo (#4792)
* Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
* Fix: tree conflict message ends a sentence with a colon (#4717)
* Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
* Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
* Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
* Fix crash in mod_http2 (#4782)
* Store the HTTPS client cert password (r1842578)
* Fix shelving when custom diff command is configured (issue #4758)
* Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
* Fix conflict resolver endless scan in some cases (r1842586)
* Fix "Accept incoming deletion" on locally deleted file (issue #4739)
* Fix "resolver adds unrelated moves to move target list" (issue #4766)
* Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
* Fix segfault using Gnome Keyring with libsecret (r1835782)
* Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
* Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
* Prune externals after 'update --set-depth=exclude' (r1835702)
* Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch - Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
path from a recursive directory listing request (CVE-2018-11803 bsc#1122842) - Apache Subversion 1.10.0:
* new conflict resolver
* Many bug fixes and enhancements
* lz4 compression for the repositories
* https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
* Convert dependencies to pkgconfig counterparts
* Add dependency on liblz4 and utf8proc
* Use %license (boo#1082318)
* build with KDE5 KWallet support
- Refresh patches:
* subversion-1.8.0-rpath.patch
* subversion-no-build-date.patch
* subversion-fix-parallel-build-support-for-perl-bindings.patch
* subversion-perl-underlinking.patch
- dropped patches:
* subversion-1.8.11-autocheck-time.patch, upstream
* subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
GNOME keyring support in svn --version when using libsecret - BuildConflict with jdk10 or higher. The build uses extensively
the javah tool which is removed in jdk10. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Explicitly require python2 - Disable kwallet support on openSUSE built with openssl 1.1, because
otherwise the libopenssl pulled in by libserf and libqt4 create
a conflict (boo#1042629) - Switch the KDE condition to match sle15 too - Remove user changing option inherited from sysconfig from README
* Was removed as it does not work on systemd, new section is there
describing current approach - Apache Subversion 1.9.7:
* CVE-2017-9800: A remote attacker could have caused svn clients
to execute arbitrary code via specially crafted URLs in
svn:externals and svn:sync-from-url properties. (bsc#1051362) - Add instructions for running svnserve as a user different from
"svn", and remove sysconfig variables that are no longer
effective with the systemd unit. bsc#1049448 - Apache Subversion 1.9.6 (bsc#1026936):
This change makes Subversion resilient to collision attacks,
including SHA-1 collision attacks such as .
https://subversion.apache.org/faq#shattered-sha1
* fsfs: never attempt to share directory representations
* fsfs: make consistency independent of hash algorithms
* cp/mv: improve error message when target is an unversioned dir
* merge: reduce memory usage with large amounts of mergeinfo
* 'svnadmin freeze': document the purpose more clearly
* dump: fix segfault when a revision has no revprops
* fsfs: improve error message upon failure to open rep-cache
* work around an APR bug related to file truncation
* javahl: follow redirects when opening a connection - Deleted all xinetd related entries as it is not desired anymore
* its obsolete due to socket based service
* socket based service is not needed at this pkg - Update to build with new RPM in Factory
- Provide the kwallet auth in main pkg in case kde integration is
disabled
- Use apache2-rpm-macros to get the apache variables - Version update to 1.9.5:
* bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in
mod_dontdothat and Subversion clients using http(s)://
- Client-side bugfixes:
* fix accessing non-existent paths during reintegrate merge (r1766699 et al)
* fix handling of newly secured subdirectories in working copy (r1724448)
* info: remove trailing whitespace in --show-item=revision (issue #4660)
* fix recording wrong revisions for tree conflicts (r1734106)
* gpg-agent: improve discovery of gpg-agent sockets (r1766327)
* gpg-agent: fix file descriptor leak (r1766323)
* resolve: fix --accept=mine-full for binary files (issue #4647)
* merge: fix possible crash (issue #4652)
* resolve: fix possible crash (r1748514)
* fix potential crash in Win32 crash reporter (r1663253 et al)
- Server-side bugfixes:
* fsfs: fix "offset too large" error during pack (issue #4657)
* svnserve: enable hook script environments (r1769152)
* fsfs: fix possible data reconstruction error (issue #4658)
* fix source of spurious 'incoming edit' tree conflicts (r1770108)
* fsfs: improve caching for large directories (r1721285)
* fsfs: fix crash when encountering all-zero checksums (r1759686)
* fsfs: fix potential source of repository corruptions (r1756266)
* mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
(issue #3084)
* mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
* fsfs: fix unexpected "database is locked" errors (r1741096 et al)
* fsfs: fix opening old repositories without db/format files (r1720015)
- Client-side and server-side bugfixes:
* fix possible crash when reading invalid configuration files (r1715777)
- Bindings bugfixes:
* swig-pl: do not corrupt "{DATE}" revision variable (r1767768)
* javahl: fix temporary accepting SSL server certificates (r1764851)
* swig-pl: fix possible stack corruption (r1683266, r1683267)
- Drop no longer needed patch:
* subversion-1.8.11-swig-py-comment-3.patch - Drop syslog.target from After wrt bnc#983938 - Apache Subversion 1.9.4, fixing two server-side vulnerabilities:
* CVE-2016-2167: svnserve/sasl may authenticate users using the
wrong realm (boo#976849)
* CVE-2016-2168: Remotely triggerable DoS vulnerability in
mod_authz_svn during COPY/MOVE authorization check (boo#976850)
- Client-side bugfixes:
* diff: support '--summarize --ignore-properties'
* checkout: fix performance regression on NFS
* gpg-agent: properly handle passwords with percent characters
* svn-graph.pl: fix assertion about a non-canonical path
* hot-backup.py: better input validation
* commit: abort on Ctrl-C in plaintext password prompt
* diff: produce proper forward binary diffs with --git
* ra_serf: fix deleting directories with many files
- Server-side bugfixes:
* improve documentation for AuthzSVNGroupsFile and groups-db
* fsfs: reduce peak memory usage when listing large directories
* fsfs: fix a rare source of incomplete dump files and reports
- Client-side and server-side bugfixes:
* update INSTALL documentation file
* fix potential memory access bugs
* fix potential out of bounds read in svn_repos_get_logs5()
- Bindings bugfixes:
* ignore absent nodes in javahl version of svn status -u
- API changes:
* properly interpret parameters in svn_wc_get_diff_editor6() - make the subversion package conflict with KWallet and Gnome
Keyring packages with do not require matching subversion versions
in SLE 12 and openSUSE Leap 42.1 and thus break the main package
upon partial upgrade. Fix/workaround for boo#969159 - Apache Subversion 1.9.3
This release fixes two security issues:
* Remotely triggerable heap overflow and out-of-bounds read
caused by integer overflow in the svn:// protocol parser.
CVE-2015-5259 [boo#958299]
* Remotely triggerable heap overflow and out-of-bounds read in
mod_dav_svn caused by integer overflow when parsing skel-
encoded request bodies.
CVE-2015-5343 [boo#958300]
Other changes:
* svn: fix possible crash in auth credentials cache
* cleanup: avoid unneeded memory growth during pristine cleanup
* diff: fix crash when repository is on server root
* fix translations for commit notifications
* ra_serf: fix crash in multistatus parser
* svn: report lock/unlock errors as failures
* svn: cleanup user deleted external registrations
* svn: allow simple resolving of binary file text conflicts
* svnlook: properly remove tempfiles on diff errors
* ra_serf: report built- and run-time versions of libserf
* ra_serf: set Content-Type header in outgoing requests
* svn: fix merging deletes of svn:eol-style CRLF/CR files
* ra_local: disable zero-copy code path
* mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm
* mod_dav_svn: fix display of process ID in cache statistics
* mod_dav_svn: use LimitXMLRequestBody for skel-encoded requests
* svnadmin dump: preserve no-op changes
* fsfs: avoid unneeded I/O when opening transactions
* javahl: fix ABI incompatibilty with 1.8
* javahl: allow non-absolute paths in SVNClient.vacuum
* fix patch filter invocation in svn_client_patch()
* add @since information to config defines
* fix running the tests in compatibility mode
* clarify documentation of svn_fs_node_created_rev()
* fix overflow detection in svn_stringbuf_remove and _replace
* don't ignore some of the parameters to svn_ra_svn_create_conn3 - Fix copy-and-paste error in Supplements for GNOME keyring
integration - Apache Subversion 1.9.2:
* fix a numer of client-side crashes and bugs
* checkout: remove unnecessary I/O operation
* svn: show utf8proc version in svn --version --verbose
* fix reporting for empty representations in svnfsfs stats
- upstream keyring updated - Apache Subversion 1.9.1:
* Fix crash with GPG-agent with non-canonical $HOME
* svn: expose expat and zlib versions in svn --version --verbose
* svn: improve help text for 'svn info --show-item'
* svnserve: fixed minor typo in help text
* Fix an error leak in FSFS verification
* Fix incomplete membuffer cache initialization
* svnfsfs: fix some bugs and inconsistencies in load-index
* Fix memory corruption in copy source SWIG bindings
- drop subversion-1.8.14-httpd-version-number-detection.patch,
change is upstream
- adjust subversion-1.9.0-allow-httpd-2.4.6.patch for upstream
changes - Remove support for SLE11 from the spec file
- Use supplements instead of suggests on the other side for the
password store
- Fix kde integration conditional to work nicely on openSUSE Leap - Use suggests instead of recommends to avoid 180+ new pkgs on
minimal setup due subversion-password-store bnc#942819 - Apache Subversion 1.9.0:
* new FSFS format 7 with major overhaul for I/O reduction
* prospective blame
* FSX experimental repository back-end
* many enhangements and bug fixes
- subversion-devel now ships pkgconfig files
- dependency changes:
* serf 1.3.4
* apr, apr-utl 1.3.x
* httpd 2.2.x
* java 1.6
* Python 2.7
- To continue to allow building against blacklisted httpd 2.4.6
which has the required patches in openSUSE:13.1:Update, update
subversion-1.8.9-allow-httpd-2.4.6.patch to
subversion-1.9.0-allow-httpd-2.4.6.patch
- removed upstreamed patches:
* subversion-1.8.10-fix-bashisms.patch
* subversion-1.8.11-swig-py-comment.patch
* subversion-1.8.11-swig-py-comment-2.patch
- adjust subversion-no-build-date.patch
- drop subversion-1.8.14-unused-var-authnrequired.patch - Pass --enable-broken-httpd-auth to configure. Assumes all apache2
packages contain security patches regardless of their version number.
Should fix the build on SLES12 and perhaps elsewhere. - fix mod_authz_svn build with -Wunused-variable
* subversion-1.8.14-unused-var-authnrequired.patch - Apache Subversion 1.8.14
This release fixes two vulnerabilities:
* mod_authz_svn: do not leak information in mixed anonymous/authenticated
httpd (dav) configurations (CVE-2015-3184) bnc#939514
* do not leak paths that were hidden by path-based authz (CVE-2015-3187)
bnc#939517
Non-security fixes:
* document svn:autoprops
* fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
* improve conflict prompts for binary files
* improve performance of 'ls -v'
* improved Sqlite 3.8.9 query performance
* fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
* mod_dav_svn: do not ignore skel parsing errors
* detect invalid svndiff data earlier
* prevent possible repository corruption on power/disk failures
* fixed issue #4577: Read error with some repository nodes
* fixed issue #4531: server-side copy (over dav) is slow
* swig-pl: fix some stack memory problems
- Refreshed patch subversion-no-build-date.patch
- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch
- Add patch subversion-1.8.14-httpd-version-number-detection.patch - disable failing check-swig-rb - fix tests with SQLite 3.8.9, adding
subversion-1.8.13-fix-sqlite-3.8.9-tests.patch - Apache Subversion 1.8.13
This release fixes three vulerabilities:
* Subversion HTTP servers with FSFS repositories were vulnerable
to a remotely triggerable excessive memory use with certain
REPORT requests.
(bsc#923793 CVE-2015-0202)
* Subversion mod_dav_svn and svnserve were vulnerable to a
remotely triggerable assertion DoS vulnerability for certain
requests with dynamically evaluated revision numbers.
(bsc#923794 CVE-2015-0248)
* Subversion HTTP servers allow spoofing svn:author property
values for new revisions
(bsc#923795 CVE-2015-0251)
- Non-security updates:
* fixes number of client and server side non-security bugs
* improved working copy performanc
* reduction of resource use
* stability improvements
* usability improvements
- 1.8.12 was not released - Improve installation of secure password storage plugins for
KWallet and GNOME Keyring
- Recommend installation of bash completion - Fix running all regression tests with davautocheck.sh and
svnserveautocheck.sh when time is a shell built-in but not
a command: add subversion-1.8.11-autocheck-time.patch - fix sample configuration comments in subversion.conf [boo#916286] - SLE 11 SP3 build with all regression tests
- run swig-py tests where they pass - fix build with swig 3.0.3 and later:
* upstream subversion-1.8.11-swig-py-comment.patch
* upstream subversion-1.8.11-swig-py-comment-2.patch
* partial subversion-1.8.11-swig-py-comment-3.patch
There remains a regression in swig 3.0.3 and later which causes
check-swig-py to fail - disable these checks. - fix sysconfig file generation (bnc#911620) - Apache Subversion 1.8.11
- This release addresses two security issues: [boo#909935]
* CVE-2014-3580: mod_dav_svn DoS from invalid REPORT requests.
* CVE-2014-8108: mod_dav_svn DoS from use of invalid transaction
names.
- Client-side bugfixes:
* checkout/update: fix file externals failing to follow history
and subsequently silently failing
* patch: don't skip targets in valid --git difs
* diff: make property output in diffs stable
* diff: fix diff of local copied directory with props
* diff: fix changelist filter for repos-WC and WC-WC
* remove broken conflict resolver menu options that always error
out
* improve gpg-agent support
* fix crash in eclipse IDE with GNOME Keyring
* fix externals shadowing a versioned directory
* fix problems working on unix file systems that don't support
permissions
* upgrade: keep external registrations
* cleanup: iprove performance of recorded timestamp fixups
* translation updates for German
- Server-side bugfixes:
* disable revprop caching feature due to cache invalidation
problems
* skip generating uniquifiers if rep-sharing is not supported
* mod_dav_svn: reject requests with missing repository paths
* mod_dav_svn: reject requests with invalid virtual transaction
names
* mod_dav_svn: avoid unneeded memory growth in resource walking - fix bashisms in mailer-init.sh script
- add patches:
* subversion-1.8.10-fix-bashisms.patch - Add a versioned runtime requirement for sqlite and pass it to
configure via --enable-sqlite-compatibility-version to allow
running with sqlite older than at build time but compatible.
- make build with KDE / WKallet optional to fix build with SLE 12 sangiovese 1649328866 1.10.6-150300.10.8.1 1.10.6-150300.10.8.1 1.10.6-150300.10.8.1 conf.d subversion.conf apache2 mod_authz_svn.so mod_dav_svn.so mod_dontdothat.so /etc/apache2/ /etc/apache2/conf.d/ /usr/lib64/ /usr/lib64/apache2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:23578/SUSE_SLE-15-SP3_Update/d87a6aeec8ce8a8d656ca5ad460d7d41-subversion.SUSE_SLE-15-SP3_Update drpm xz 5 ppc64le-suse-linux directory ASCII text ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2906da6282abf536bf6d8d9e6388c182abcc42f, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=76fe14d47827a05aeca5b9521f2a525289f83eb6, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5dfcddd64b362219cab7322013d865a29ade571c, stripped R R
R R R R R R R
R R R R R R R R R R R R R Y #eK N utf-8 2a5ce19ba7c754b15eda0381c84638ae50d41bd4f903ef74252b7e6445531e40 ? 7zXZ
! t/8a] "k%
OCjhx.VEIiî[iҺ n, ƮSF%WX }>6a8#|In38?EM~0}õLp]%7<` Tf^T\.t{b٨NYoH&/Yv[Dhu3.d wFjDoXJx_ڋk/qldjJ>+&K,"g WW{
ruq=" jO?M]S.pHNps*xN qWL5(n鵊 8|ǻu~t0-CCJ$h**L맧Q:WBu`<V Ռ\ֺfj(8
D.+,xi;֑LۛqW2@ p^(}iG
jSc f<kQ.BD Tqf ѲmBV_TwZ6
;qnhog@HXhh ax
<αo< j旊QlN ٔC3 '9fǭ*HX0;96c^ LQfp^B9&jAlv/@х3-f<r`m/Bه<å# Ik!7'_UW<
vp1@ۙ,בW2GOE2(z%T)d 6Y@VWGq$][>Kؾ^p77{UP:*U>
FGc7UsD}XP ȹ;"p5p
пw @+5 \Q |>O:Œ'n1".0 oR_9،.7"rUGc| ) n c(ˌXGRH7h`kW"_fUY O
|{5ȡ90' >@N4ε !fS X$D/ε/>hlZ(T+LHȤdONyO!rHtf jj 2 Nsa|_ic(*~ﰅׇlZ.c}](; Qi Yo kDZk:N]ӕ{$nįz?GZJL Q Ԓ*|;}tLub1M,@V*,F,b0^ 8'2Uaƣ0>[8R4٨
& bW6G`e鞝IR 9mj Q D Z93ߟeGx2+ IؐeQfm9# LC,2u&CY8GqxM,|W>~TTw#`羪Sĝ] ά(Ͱ1u[|OE
ޫHI{B4;sAӼ3'ے=XX. A"^~f0ڐjJP ^*vjK eYQ4?w !ŤŊt c7av°ۍdReJx P!Iހ:0QЄNb A{XH)eFRK1:CA`5mFDfl(ҖFBaOج
,(p WO,"yywJ.`
'79˱K-ԕHGwmhD|.ieD8䲠[?KlZrzw%b tXד"ߌqԣr-WUڤ@%pʼnC+<:IR=={W * e?LT F|.:|;C ҤEyܥF 1Ȑ !@+<6Sin˜\a8%!OO5~RS-|Eט,RʇxullS/ nؙMƿM|)sw"T p
AݸEgȉ.): Vf툳&zHe %#R#+y^ȁJW`!BĈL,-+;kq I68i̝, =:pŻ&ۅl EF>4:=2BY|SƳ{L5Df=L1sQ4ᘪ1
5 ?ֱ/;;;5tWi%kñYTfZ_
8 yŹZ+! /j1&,dk4uaw4,ȋW xMOS~x*^ta_x`Df|aZ:2O_4 KoYz8[sbr)l! #;ک79x}Xq'o G/tLmC f$mWIm+:isA[NH]<(f3-Sr-D%V-1
>̌✘nb?wj o-|(f
p %uLJ0'i?٥C CM]3mhuq.ץ-BǶ{^!#dn 0ٙ5}-
B_wX8&Gc
h/Ur~o;{O?PzJj68AZ{mTdzGB*\<*?1;~шw S-
~Wb2 m1j6Q+ &$uf.lqwT d
͘u+C^G?/qcS.vh|J J(5=~W|[(#a=)eyzr{g$3θRXb\d'`-ğ_x@*y&n΅SqS S3M Onޟ'`S["'ue!7D'??fnq-4Μwo m hen_!mI~;~GcO /?=_{|]):i
TA IC{Qga Ԧ-:(= mhIOú35=mnD0`ygi#rX݊`. "
}h< ][2Զ)}c{7:A= /K5 YgDc>4\bUȵ~?&J29S$,( w2h͎3/osw(x, #{"*oL,]G
srvny%$??Cg L َQ\ݝ.i<fbۛ ~ Lp$Ve088_ zjyfippv q(K)'zN\ڍYV>;U -w4Pb̘U7E<0Ie
5ǺP GGTV d!78=n7=;,}di x£PNlz䮐ySһ^40*\Kh73Ef2Fc.PuO$&ob f㘌mD:mFhAP,af;NF
ԂImǏH3vWYz2j 1 7a[Gx TGd]`-d5 k-X((侊n6f4b<Hx9c(%ZmfPD(fB)2dze¶z?ZGEҽħw
3@}v?1 =ʉuQNQj~qԔ&a)
?xvvfg)Z`|FxY
z ~#%FAp? PFkHYe &QFObݸ*iakyBFNB(B&&qѰ4:QLJ`t* >3pi[%U2ñx*T)rמT&J"bcI4) !٧6bٚR~9{0H> njBv748Fؑ=cރUr%d}8xaRnA*w V . |Lj_Bjw<Ҹ (Οh-h(u1{P?U|cd
.< r~ɲӪj'rs_&ad6`ps-Gm$^E@fa/3Do[t\Az4Vx1D.qn ˾.fNm
~!:_ uGA J̑E> D9Ӆը$EYE@{VaɽvE< ~2m͝w]mOq|QNّxTItd"K ^Yu\*JZ)wXaMPQ ѝha;ONkR> mMWc+ 7]uTj-rSLj@aOLQ{ {!$ ^,?MjQYø#6byD);F1 n:iA'@&Wq yΒm
6㡤c:dО]P? =yrwr¹*'X8TRJ/DI+> ;M ` Al9郛'V+
R|Um`V؝U1o^{gT o*}r!2Y{dA{mx 8 =ZTz Rrfk<k+ͻ~zń bf]{DMl6A#3 \E AIYJGGpVpkЂgId=S>*}ׯO7~+I DƄۦy%ZƈRTlP啪 }Q;Q_Z"EI d'
(p6e`V#*2(
xaW :ȽbMkE _,ϳOQDp]ʣz2!b}:BC~ފܴmS QmHoDh*u!;[5E~T]Kx:Nd BՃsٯf9oTRta.EK%~t-13r+B֎u[/ZyNyeZrR9ךY}4dQ13̛`i+m3'x$$þ_
20ϗ`)Dzb0NC
O uXP ˌNV TP9@c(|v~)SՊ /nf=|Ee@izF Y^pV2oϝ}\l:
e)iz ኅukeHnAnĔ_R^@,f | ćH1 np<cwP,r-Sq'Fy͙ Ms9H KvbYSaSCSK1ٝ8J?Bn s+_@}# CNs(06vkh jUzJҷ +.%;%-9ִp<jc6H¶=G8 2i홊91x5y[|Id _ϸ.Uiyi//HvZ b$uNс n`YhPn77qKU's a+fD SÈ-'+<3CD/nT"5q1Ddgm}.w5; ;1^3g,Sgrq()V7>lzHrE_gL?Y`֗ԇ"Hzܱ }nV|4j@j7E^Vt O6{SHauP]Za\MHؠ>;$@9;sF{p(5u/\D@e vxʳh mӑjXikKiD8&~n}Q=HiQ~ŠG-$GۭO]t"/1zw7]"Q,D^}piGZv/
@z52VAntnQ{? a&xVK e-vΟ*'RYs'C% cV!w'*eu
0`gx6ܵ ߤY,ӥTǎQDumJ]D&o;DFR
MBJokr4q@=ݳQs-\N^b'
;?s%hE-@ /w@YB!ܖO
2 5j =;Ij3Z!ＥcloѓUG!i}M,;]n1!CCQTDr> 1Re$-G>EdC agϧ8o!je{ -|w?VlLzGA*3< *5Jg~yF h] ] U$eևdRlq1 5+[) UFnQ( "<5ֈ Hdžئv⣬ uw"BRR,U92La_gJ'G[}iom g "B>} GgK =\(b:Ȫڦ*ȃMo8mh6ömE=IH F<7rC!%K:$f=)Ln7x^3TIp5ieF Q}
ӣapu:1 v8`nz592 3/!D/*hEoyCDK<8*V1h'?jٔWsUSNIo{{,݉EsY zO)r>ut_'SLYˮqqi?a* ͚sF'Rk}(
022X l3p1@}Y]O [t.G9<]cyQv KaKz-%@ך|f_ƨ I`
uNV$%?0 ͷEX!
f/zmEH1l
yA$$B;E[WDk?H6`og%)hi.8(oH`鷋#1B2tǘT! ar@]F ow
8wÒ
jhB ̢":/=+ `gaL5h%hlK3w<)-uZcnM}o';L[cS$n/G-@4hkpY䉘/ ~ J $ݭ̺
\7
v->#9yU@+X u`0#-&PN#*! k>}h*(D:#4W |]Bђj In$ҌEN)&|qdW~ cڦat(X3U] ̻]_8Vn6Lk304u(# ˝D mL4nFTP+b*I/z|Izek? P4HށTךn- ݒ?Q]M1b&Ʋ&3Fȹmt&".ZZX4S y?Ux}8a 4a_@#A ny,ѽ@e߳)ix@4}@,|άd1:J %5I!&p ~˃ &u_UKW. nM[kS+#i ~ #C);U,Z1ՃBl`1͎1w.v<
2K:4%*Ȇ -H yx Y7>B(RXPt狂ƈ5dsQs϶ùk4_E+&
6K LLf:!B(w UNi54IݒEo_60SNc{3]B", #9ƵE А;TO !9m@oW+&m'P4eZ2K}UY}P>Oh#rvfgQ|\$2XM :t85M%W W }ܟҘzPD \{J H71tLclY?2M!HۗL]]۴8e/"s!Jj;뾽&Ѐ_]^!0\찴\fʱpqz`?N A>3PC6Mac/Ŏ9WXb C M> ,L6U,?/vɠ(.}'}= Yȍ1cIÊ{לwM-1_]=R2:^=]|Ĵ: 5x5[5B;Ta}˧:L꽺WtCo,"ėp:
:[-˨'}.M9l.R>ChT 7~] ( ('EDEwl)DE:;t.a j#X;phg V>gGXZ QR_o%Iegnet1]ݙ(vVԈ0B[8[]pW zRd/SR1AOt q.8F,ECӶߌ PzQ ?*H+-&c 6på8+t?QfC; Yq/R Bj>]ȣ39C
Na sĞ pfTƘ'@ Heg1#˧/K yk> {Ic k 듍vWhNGb#xirUoSā C[8g '&ImW\4,"USp{)K{nET%*L#Cub]`v$e/`NS#Efl,z$_͌sj-bXR;,ӭ`D*1)S;|S-2C wYBLBNQ? `c=rDZEY.b\P/MD<
.Tau ՛Tqcb4\9? $ik\(r|,fw})Je[>oZ者(WA')6:GS3\4šENXY_<:BN)m뙞Yv7Ewl ߴB渤y>O?%w
ϧo?2!vd S()@Y͡+|X VoMB?Vte+f_1`Ś8./ڸU9́J
JH_/v)')?jUIp :ʊ B͜m;<+\(I!uP>mTd$RAKη Y̱*B @tjTn_Xq]t3/AG%,:B*h8 y '^8EoxBf94˒@w&[PUD9.ϣ>
Ϩ*6@X B*[FR&Y;,?tDq/5h ysSZGp)c 90]D( @1)b}=hwSEQӎٱA)Y8
zxr~Pp2?!tZ?ZE5Xc/]1@]spaSDvh/xnBP+8O
&p}IyKW/@yu@RDHߊlxƲbYo(
#I6B\J* (# LI&<22лT$l'!4D
ѿ.Z )ʅGKЭxTg:j`b x٧%NJ-Q,]Z" KUϡ$oQX fM@ֶ8El/ 'Q7N> \jԹ9 A#Pg:ϢT\P%E "T П 3EST}e7*,h3>It=W<"ُn䗳dxa1I:[ 52t: oZHE:+yϳ?6qD$>iIz"J\\J[" A h5!NB"KVM.fvM?dgH r"%vMmc=tc#$ l
BQS /חBm]h@ʿjŀDB m{VϺ4+gF`VSf +݃G=ǮƆl`= Kι/w
do9!v %rlՉLh >
I|gu ~.>2b`rV C
CiBbˣEcK 싺NP#:e/4bzY6M|Hj.z_!2(@t0't?%754 .#hyrb&h'\Fz>AO\Z~+X
VppFU 6l~t*yQ-m%DъdpƸXsX <(" wREÌ! y+X%s`@B|E@- S-HI S T2|aE ~Ot "f RZeV'"gT=DE峋.[=W/Si\CYx.Ε]hʠQ'f Ҹ^"KUAzef)È;_~Mmc6|We9=% eWIpҊ@+ yvd3mcfKӌ%n &sҥT9 J
TǑi ~{C 2zaж'BY[
ĹSD*$8C| M)^I%f =9 #7k ZYG1}yPjD _
Xa}+5vR IiYi'Dpkid*:[Er+/ cgp_>\ 4`]%ٗi'dVPeO d䘧" m2tg`=pq߉d;1ʯ#w o
6? T ơ
͌Hde5P_mdz%Ϸz>:? H ebmomۍ3u.Xgȑ6"8P2U8#<[3R 6ɩiAo B8p+fY&2j(coa@R՞oݬ؋J-Rhw2<)C35|C|={۱56
D Uxb*8D6LW 7m E;A} tcNPhF
`5C?-h?mr\{r+
:ix=w@;RU8 TV=f$j͓"?!Xy}1}&$Էsr-bZx3k-<#dzTR\ ux_ o i ɶ+FJ PTŸU^F )IV]ЧvF 8J(NđUc hB/,weg (-$H Oܟ/_'kjG̫.ct)^{.~V70,ݻ4؝~3HTKe\ Sp٫vR:j+|\VC# C{tZ _|ՄqrI1ûث&M@*(@Q 4O:|Y6K 9P2-@d0G:yޒ=66q2D 4P_T.a Ōvza lJ7JO0/ >Zk'mF 3?\,XB,F7eP0Vq^d5
6w1ϊII ?/S(6ݖZkZJ&X1P8(mU7Ems 3~vEhM
Gd$ Gn p$_m
ϗw`m3&p]㵎T!
ǻoZ
'>Y [aC)bc˔ @INÆ=:2[t ;xĔܜ7Z̎qsAR<8[ O'KՃ@n[S`4*J́Y|)-}rRvhZ
۷9Do YuBPPq8F,XՊ9 t~Qdj^.9P1Sd?uē?}1 *бX)&"j5$.4=
Ӭp x՞=EMdh-{-gTZ6536KGy/靸<3&JKf!b@^=˃ylw6D|
y_ RѠ9M K.QHdY% d-˺>'wFM\l2E vE_W\>j4";"Otǵl;o^bнN)m]&5V)F- g;Uqs
8{uHkF ʬ۽ wk!:n @ՆiZ&s=jR/a6NS 3Dszq :N-h
%sP[lȰ@P $X)| &N ≛ D-{Uib p$IIkb[l=FQ{ޕWvآ^Գș`Öoq[l14#mh@A
vtet7Ĉ0b;ai3 m39u!N[YR
IϩV^J~tteVQIcƜĴs+c`G r½B#[ ʫ:1%r϶[flj F@ypYRz Y^J,"I3}+nXvXM* 8lɤgdžݧꐨ!a qAcRi F,fyX\ȔrZY9>ҸIn7[;I gSбaī%%<йfF l
hy##ĩU0Phip!vzp("W4b6qOwka/E<é@&~QQu8;Y1màa= NHPOKVĻ ^\ /]8H 2'| - ^ÞRa Cr+C|ʰB։Gݶg!J vx(Frq{c\ o.mm,q_&jB~9ǐ]z( S@,#&I- YKۨR~=hNxXoyCRu
Nz:Q"u52Mi.3^ۙH:-Ck5/ʹ_e
N5 I
L4,+,,Zf:T1]bos*
ڠ"1}ܳzFXq3T2H JH)C
31!:jF ;?wgN%]_/Eh Wb4i7
ShxikYU-2֛
ΚfENVҦd&6,ޛ3 FJƺKͭDkBti]cښ/rVTU>b,K `ZNBgyf`u z7FxY]؇)v$Vy5K"(yrgvZ|?mѮi q(7 '3$ K q<\@ǹfC,3^송ᗐqcsq_c}۽Z({ ;Rn{C3ۣ_2fE;γW觮to/M Clqyڋn xnXx T9oPgTz/kn,g :y.m,WQdoկOVȤǛ
":qߩ1$fXr^Z^ 2 T@i[ iëD+wB5v.#8AC S40Lgm%#I
A߬6R\{qĤe̒^l
cJtskyش Z"dΗun|X4*G1R?)k*Noi]o2HT vMi⫱|@*@ddZv#ǁ 1.W/>z
D2z- k F{ȓ
invw3`Sy}{#..|xtCN+*>wsŦl s kthr[n
# &ͫ
ٚ,˵lTU
ݧsʸhp}(fňW_8>Z$*3t1BBVnHQefVc qe9~ͳK^SMzhP
܍YzXIj^l
`]Xgglk[>ev:̃s*xΨAhҗ
FDϯ`Se
ܜrnͲqZ܅r.N2d>:d@l1-T, ( -Nd_Y=o7%$OD7y"0O|ڏ:(5kOKU&'N^;v`HHz ~Y G'ܓ/Vl#2;eהqJڽymaD/_զ9V`oNƹK NiFRXPE x!^#:Q/&pM{Y.-s. r'(6RJҴu/\NM$MnٔcF ~Dp"3rQ"L ΦUx !x x߭"0.(].s_p=)`1j g%pR"ذ,WL
Sp{?$t˦m9G=R]Fӂ] O15
\h1sQv7D
;(bٶκ?#vT19 [<Yde
xhq&#
b ?`(RPhǯ##hT[{V s{#zϔe E5U 8 %LlM xfo3Fz%2[ in'DMk7shW裉{tZnY#;9"MYU?W, MgP $ȼ4_32,FEl͕Sj}XG$fyٓW&˺PZu*dd>7A#18#eu_ʢɅD֩͢$Q
rAK].*}PbQ2Z<^JTyeͤ?VTА=Kݑ:v#TI$\{Ihgȿ_Ӄ1"Wvjpnʾf2=3R;T{qp_O`L(Ra7Ԗ'[7Ʈ8F_ ]ᒪf>ܼ ~. ۭCs(nlq>0+4QpWڒ!+rsݥ,)3'u:r6z={}VXU "- %PԱݯE`LdK^>PRJoZ/ h.İtg.Zثv)ߐW:f^VdD sKڙ^dn߂eJI8Ԕ$@ [I q; N-ߣuca/"|ckW5_ÜA|lnluu3.#]a ˤݡ7cm]QRw!=;s˒la %}Pc09Zs7L+X 3r EY5 sOv= Ncx( Zk2 HWcϒM #~F1.+Fi>&ύ k3SФEG8r)ec@$gDU9s'J#a22V{Gv{b:ƐVlG)vm,6InP_S6Ygp^QCھGxjpCd im8Stݾt`ƌG92!և@dsr1}&(e0 \xd2K
xOZ82S U٣n3 xp˱הt 3]qev͊8>}
OR>lhFĪc ynpGj["+ PU/ 5fԚ`yKmK !{G;"FΠN}ixa
x˰ ZbRhW9N+-z
N;g/s͇^ DiLavBtln4y
1 TiƤ~ [t,/a?GoG8
i HJf|;K Oو)Q\z77x23s5ܝM[oS n E+ v`h^Tz>XgCW!evI2v
h+
[|&5`Vϧ7 Cx!L*JWq}:
bgX3沮pr`-s,\ bH2xF,H_)'S@ƙ+XOW/ެ_R֓+&ceA3XZXᰥ5w;Cf[+⸴N+M
XR5#hpocQW#ml@I q[QR0ocKW7sR[yWi'BZ9ɖo3Csռs쬯6hijL( 8Wf= <צג0/0GY9Epj)>8Ѱ LЍ 2D)Fx"aàu[^)B°1!n
|l.?W7q] "nVPQ]Vw&ʌ*;&ok% 2Z|]1Wksau&^
B9
YZ