libzebra1-1.1.1-150400.12.8.1;>+8fL0p9|_#?f8'nC(˖iU7)!xo"s9plz`5 ,HJ )n\qstp`ƟNes|f='|P]FwHcXPA'.:/= 8AR0!j@7+pd Gp̕wg1}.#,*%?u˃bjd8IvJ4 qO11E5 R2Vk2 Ec }\}?:wҟGD>@X?Xd   7 '=CLT X \ d  8 l  (89 :\>UX@UgFUvGUHUIUXUYU\U]U^VbVcVdW:eW?fWBlWDuWXvW`wXxX yXzX4XDXHXNXClibzebra11.1.1150400.12.8.1Quagga utility libraryThis library contains various utility functions to Quagga, such as data types, buffers and socket handling.fL0ibs-power9-10 S(SUSE Linux Enterprise 15SUSE LLC LGPL-2.1+https://www.suse.com/System/Librarieshttp://www.quagga.netlinuxppc64le S(fL&fL,b3f716d0ac03e23b8ad0834f3eb3561f7e33019a63eddc7d596fa14d86071449libzebra.so.1.0.0rootrootrootrootquagga-1.1.1-150400.12.8.1.src.rpmlibzebra.so.1()(64bit)libzebra1libzebra1(ppc-64)@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libnetsnmp.so.40()(64bit)libnetsnmpagent.so.40()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3fe Z}@Z@X@X9@X@X TXW{@W)@WKVbVbV@V"8@U ]@U"mt@suse.commt@suse.commt@suse.derbrown@suse.commt@suse.detchvatal@suse.commt@suse.dejengelh@inai.demt@suse.detoddrme2178@gmail.compwieczorkiewicz@suse.commeissner@suse.compwieczorkiewicz@suse.compwieczorkiewicz@suse.compwieczorkiewicz@suse.commrueckert@suse.dep.drouand@gmail.comp.drouand@gmail.com- Applied backported fix for mishandled attribute length used to send a NOTIFY with data and an overflow fix to use rewind to not pass a negative argument as size_t (CVE-2017-15865, bsc#1230866). [+ quagga-13-CVE-2017-15865_rewind-fix.patch] - Applied backported fix for crash in bgp_attr_encap that were missing a check of the actual remaining stream length before taking the TLV value (CVE-2024-44070,bsc#1229438) [+ quagga-12-CVE-2024-44070_bsc1229438.patch] - Applied backported fix for out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of service (CVE-2022-37032,bsc#1202023) [+ quagga-11-CVE-2022-37032_bsc1202023.patch]- Applied backport fix for bgpd: Use treat-as-withdraw for tunnel encapsulation and also other malformed attributes instead of a session reset (CVE-2023-38802,bsc#1213284) [+ Quagga-CVE-2023-38802-bgpd-withdraw.bsc1213284.patch] - Applied backport fix for bgpd: Do not process NLRIs if the attribute length is zero (CVE-2023-41358,bsc#1214735, https://github.com/FRRouting/frr/pull/14260) [+ Quagga-CVE-2023-41358-bgpd-NLRIs.bsc1214735.patch]- Applied security fix for bgpd DoS via specially crafted BGP UPDATE messages (CVE-2017-16227,bsc#1065641) [+ quagga-CVE-2017-16227-bgpd-Fix-AS_PATH-size-calculation.patch] - Applied security fix for bgpd bounds check issue via attribute length (CVE-2018-5378,Quagga-2018-0543,bsc#1079798) [+ Quagga-2018-0543-bgpd.bsc1079798.patch] - Applied security fix for bgpd double free when processing UPDATE message (CVE-2018-5379,Quagga-2018-1114,bsc#1079799) [+ Quagga-2018-1114-bgpd.bsc1079799.patch] - Applied security fix for bgpd code-to-string conversion tables overrun (CVE-2018-5380,Quagga-2018-1550,bsc#1079800) [+ Quagga-2018-1550-bgpd-bsc1079800.patch] - Applied security fix for bgpd infinite loop on certain invalid OPEN messages (CVE-2018-5381,Quagga-2018-1975,bsc#1079801) [+ Quagga-2018-1975-bdpd.bsc1079801.patch]- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Disabled passwords in default zebra.conf config file, causing to disable vty telnet interface by default. The vty interface is available via "vtysh" utility using pam authentication to permit management access for root without password (bsc#1021669). - Changed owner of /etc/quagga to quagga:quagga to permit to manage quagga via vty interface.- Remove FIXME's added by spec-cleaner by using proper phases for the prereq deps - Remove code checking for the proc mounting (build scripts do that for us anyway) + remove the commented out autoconf - Use content of %tmpfiles_create macro rather than 2 lines of checks - Use version in zebra provides/obsoletes to avoid rpmlint warning- Update to quagga-1.1.1, a security and bug fix release (fate#323168): See http://mirror.easyname.at/nongnu/quagga/quagga-1.1.1.changelog.txt for complete changelog, a digest of the changes: - Telnet 'vty' interface DoS fix due to unbounded memory allocation (CVE-2017-5495,bsc#1021669) - revert opsf6d: Update router-LSA when nbr's interface-ID changes See http://mirror.easyname.at/nongnu/quagga/quagga-1.0.20161017.changelog.txt for complete changelog, a digest of the changes: - isisd: Fix size of malloc - isisd: check for the existance of the correct list - ospf6d: fix off-by-one on display of spf reasons - ospf6d: don't access nexthops out of bounds - bgpd: fix off-by-one in attribute flags handling - zebra: stack overrun in IPv6 RA receive code (CVE-2016-1245) - bgpd: Fix buffer overflow error in bgp_dump_routes_func - Added libfpm_pb0 and libquagga_pb0 shared library sub-packages, adjusted libzebra0 sub-package name to libzebra1. - Use tmpfiles_create RPM macro to create quagga rundir and adjust tmpfiles config to contain proper rundir at install time. - Removed obsolete patches: quagga-CVE-2016-1245-stack-overrun-in-IPv6-RA-receive.patch quagga-CVE-2016-4049-fix-buf-ovflow-bgp-dump-routes.patch quagga-autoconf-detect-AM_SILENT_RULES.patch - Do not enable zebra's tcp interface (port 2600) to use default unix socket for communication between the daemons (fate#323170). - Added quagga.log and create and su statemets to logrotate config, changed default zebra log file name from quagga.log to zebra.log. - Cleaned up the spec file using spec-cleaner.- Implement shared library policy - Check for user/group before adding them to the system - Trim description- Add quagga-CVE-2016-1245-stack-overrun-in-IPv6-RA-receive.patch: Fix for a zebra stack overrun in IPv6 RA receive code. (CVE-2016-1245, bsc#1005258)- Fix Group tag.- Add quagga-CVE-2016-4049-fix-buf-ovflow-bgp-dump-routes.patch Fix for a buffer overflow error in bgp_dump_routes_func. (CVE-2016-4049, bsc#977012)- replace quagga.keyring with the newer upstream keyring.- Add the %{_rundir} macro handling to spec in order to distinguish /run/ vs /var/run distro versions.- Add quagga-autoconf-detect-AM_SILENT_RULES.patch: Fix autoconf issue of missing AM_SILENT_RULES macro. - Add build requirement for xz- Disallow unprivileged users to enter config directory /etc/quagga (group: quagga, mode: 750) and read configuration files installed there (group: quagga, mode: 640). (boo#770619) - Add sysconfig.quagga: Fillup template for /etc/sysconfig/quagga - Update to version 1.0.20160315: See http://savannah.spinellicreations.com//quagga/quagga-1.0.20160315.changelog.txt Remove double read of stream - Update to version 1.0.20160309: See http://savannah.spinellicreations.com//quagga/quagga-1.0.20160309.changelog.txt Add code to extract.pl.in to prevent further cli function overwrites Fixed if_add_update possible null dereference Fix _netlink_route_debug message Check prefix length from zebra is sensible Fix privilege dropping to use system defined groups Additional centos 6 -enable-werror fixes Fix code to use srandom/random Removal of 'show ip mroute' * : add/cleanup initialisers, missing includes, VRF ID in the API message header, assorted warning call if_init()/if_terminate() from vrf_init()/vrf_terminate() fix "babeld: Remove babeld from Quagga" (336724d) fix in_addr initialisers and more initialisers (for BSD) fix signedness mix-ups use an ifindex_t type, defined in lib/if.h, for ifindex values use long long to print time_t use void * for printing pointers babeld: Remove babeld from Quagga bgpd: add back old forms of 'show ' for compatibility add "show ip bgp dampening" command tree add nexthop length to AF macro add some peer_lock/unlock debug code add support for timer commands with peer-group syntax allow using rtt in route-map's set metric bgp_scan shouldn't queue up route_nodes with no routes for processing check capability falls on right multiple of size, where possible. check rtt later after the real peer is known cleanup vty bgp_node_afi/safi utils compile fix for clearing-completion FSM fix, using workqueue helper. configured suppress value cannot be less than the reuse value in bgp dampening crash from not NULLing freed pointers display of configured dampening parameters do not allow a timers connect of 0 drop machineparse / random "show" improvements enable "bgp log-neighbor-changes" by default encap: add attribute handling, add encap SAFI (RFC5512), extend extcommunity handling, encap show commands fix: bgp_btoa to compile, crash reported by NetDEF CI, ecommunity_token initialiser, graceful restart capability minsize, memory leak in bgpd/bgp_route.c, Null pointer dereference in bgp_info_mpath_update, race in clearing completion, small memory leak in str2prefix_rd, SNMP write support 'struct peer' memory leaks useless call in bgpd/bgp_mplsvpn.c using of two pointers for struct thread_master * VU#270232, VPNv4 NLRI parser memcpys to stack on unchecked length (bsc#970952, CVE-2016-2342) general MP/SAFI improvements handle AS4 and EOI route distinguishers if route-map does not exist DENY for redistribute statements ignore stale entry candidates during bestpath selection. implicit updates in BGP may require a withdrawal from zebra RIB improve cleanup in bgp_delete() memory cleanups for valgrind, plus debug changes hook up bgp ENCAP and VPNv6 CLI node lower BGP's default keepalive/holdtime to 3s/9s lower the default 'timers connect' in BGP to 10 seconds make bgp_info_cmp and multiple-path decision logic more regular and robust to paths that do not have su_remote info make bgp_nlri_parse_encap conform with other nlri_parse funcs make _vpnv4 static handling SAFI-agnostic modify maxpaths cli's to use MULTIPATH_NUM for range only use routes from Established peers for best path selection OPEN parse errors should send OPEN_ERR and UNSPECIFIC subcode. peer_uptime overflows after 1 year fix zAPI parsing refactor route-map objects modifying integer values regularise BGP NLRI sanity checks a bit regularise bgp_update_receive, add missing notifies and checks remove the double-pass parsing of NLRIs 'set comm-list delete' stops as soon as it hits a community-list entry with a deny speed up "no-hit" withdraws for routeservers tests - add null pointer protection to fix bgp test failures update dump to allow Extended Time Format update rtt on soft clear VPNv6 show commands warn user that bgp is setting maximum-paths larger than MULTIPATH_NUM wire up VPNv6 protocol processing fix struct/pointer sizeof mixups fixup afi_t to be an enum and cleanup zebra.h remove 'struct fifo' from lib/zebra.h refactor FILTER_X in zebra.h bgp: reorg cleanup to align process and bgp instance init/destroy build: add --enable-werror ARM compilation warning fix determine CFLAGS more intelligently enable vtysh and pimd as part of default build list actual release procedure make libraries self-reliant remove the old PIC/PIE patch, let libtool sort it out rework how MULTIPATH_NUM is delivered to build distro: fix redhat/quagga.spec.in distro: redhat/rpm: remove with_ipv6, package pimd binary, remove pam stack redhat,CentOS: update to support CentOS/RHEL/Fedora, upstart/init/systemd doc: add AFI/SAFI show commands to manual add 'OSPF Fundamentals' section to OSPF docs distribute a modern version of texinfo.tex with the docs older versions of texinfo seem to be sensitive to location of unmacro update bgpd docs, inc. on decision process, and with a section on MED. fixup of history handling fix alignment assumptions on non-RT_ROUNDUP platforms. gdb: Add a directory of files with gdb macros git: add (generated) cscope files to .gitignore HACKING: Change format to MarkDown, fix spelling mistakes rename to HACKING.md in prep for conversion to MarkDown isisd: add a debug mode that traces LSP construction add a slight delay to lsp_regenerate_schedule add new adjacency to LSP neighbor list add support to import routes from other protocols allow to adjust lsp-mtu always print adj->sysid (clang 3.6 warning) annotate some function arguments with const assorted fixes (unused variables, static) Attached-bit in LSP header don't corrupt memory for long hostnames don't use POSIX reserved y1/yn names do remove ipv6 routes from Zebra drop packet received on multiple interfaces due to the time gap in binding socket to an interface fix: assertion in LSP refresh timer calculation a typo in a log message crash on processing own p2p hello IPv6 mask application LSPs not being regenerated after adjacency change minor & vs. && mix-up misleading wording in log size_t confusions handle lsp confusion (ISO/IEC 10589:2002 7.3.16.2) initialize circuit to match area is_type make send_lsp more robust provide more detailed log for failed address removal purge on correct level remove superfluous checks after XMALLOC etc. remove unused process_is_hello() show interface's ipv6 addreses lib: memory cleanups for valgrind, plus debug changes add: CMD_RANGE_STR macro to command.h facility to log all CLI commands function to get precise remaining time of timer thread getgrouplist() for Solaris SAFI_ENCAP type, safi2str prefix utility "show commandtree" CLI command zlog_hexdump() for debugging allow caller to provide prefix storage in sockunion2hostprefix reduce strcmp in CLI hot paths fix optional arguments with description interactions constify sockunion api don't have log functions change errno fix: bookkeeping for libreadline malloc()s duplicate variable name in smux.c and vty.c Free Pointer dereference in lib/filter.c POSIX capabilities on SunOS platforms "reduce strcmp in CLI" fallout "sockunion: add hash function" for BSD vrf_bitmap leak in zclient_free() hide internal prefix list structures make prefix2str simpler to use, and use it in zclient make sockunion2str safer to use memory reporting fails over 2GB move the interface list into "struct vrf" display more info if cap_set_proc fails. don't use CAP_NET_BROADCAST remove unused 'show memory XXX' functionality silence type range warning in macro straighten out ORF prefix list support stream: fix stream sanity checks treat realloc of null pointer as alloc Now use zalloc rather than alloc with null. Fixes issue seen in bgp check tests. use const consistently for zserv path vrf: enable / disable a VRF vty: add separate output fd support to VTYs add vty_stdio() add vty_stdio at-close hook don't clear output buffer on input EOF put stdin in raw mode for vty reduce unneccessary C extension usage support multiple VRFs by using linux netns add trivial work_queue_is_scheduled helper wrong #define used for IPV6_MINHOPCOUNT zclient: can overflow (struct interface) hw_addr if zebra is evil consolidate error reporting for zclient_read_header add "vrf_id" into the "struct interface" move "struct vrf" to be a lib module unify link layer type and hardware address handling configure an interface in non-default VRF ospf6d: fix for fast OSPF convergence fix pointer arithmetic warning fix uninitialized warning in SNMP oi->cost is uint32, not short use existing union, avoid strict-aliasing ospfd: add missing unlock for ospf_interface_address_delete() extend 'ip ospf area' to take address argument + rationalise ospf enable fast OSPF convergence fix bug in 94266fa822ba, nbr_self rebuild didn't add valid nbr_self fix for 'no' + 'debug command' does not disable 'debug command' fix unused warning in ospf_write impl. per interface 'ip ospf area' command lower the default OSPF spf timers to '0 50 5000' make ospf_passive_interface_update calls friendly to static analysis move route_unlock_node() in ospf_ase_incremental_update() ospf_ase.c, external_lsa locking fixes. ospf_ls_upd_send() add missing unlock. ospf_nbr_nbma_set()/ospf_snmp_vl_add() add unlock PointToPoint neighbors are identified by router ID remove another odd flooding hack in opaque LSA code remove HAVE_OPAQUE_LSA and HAVE_OSPF_TE remove the blocking of opaque LSAs origination and flooding 'optimisation' self nbrs needs to be rebuilt when router ID changes. split up network interface enable a bit, for per-interface area cmd trap on state change seems to send incorrect value for ospfNbrState use route_node_lookup() instaed of route_node_get() pimd: add ability to set DR Priority for an interface add knowledge of different packet types add support for configuring multicast static routes assert when no route to source from a new igmp join cast ioctl values when printing them cast to sockaddr_in to sockaddr change ioctl call failure from vty_out to zlog_warn cleanup interface startup cleanup zebra debugs to be protected by debug commands create ability to modify hell and hold timers per interface do not display some default values as part of a show run ensure new generation_id is different from previous fix first DR Election, leaked fd, out of tree build, size_t zlog_err format string warning limit pim hello log messages mask unused zclient_broken() notice when we receive a packet type we can't handle yet stop DR election on every hello use IPPROTO_IP (not SOL_IP) for IP_PKTINFO 'show debugging' collision ripngd: add ECMP support allow to enable/disable the ECMP feature sockopt: add support for querying tcp round-trip-time sockunion: add accessors for sockunion address add hash function solaris: create ioctl_solaris.h drop duplicate __EXTENSION__ define more warnings fixed no ROUNDUP tests: add CLI dummy command-exec tool add more AS4 capability tests + little fixes for couple of GR test cases. add testcli reference in/out & do DejaGNU vrf: add a runtime check before playing with netns vtysh: add missing show thread/work-queues commands adjust bad_cli_stomps in extract.pl.in to reflect fixes & fix build allow display of individual daemons configs allow --with-libpam to build with --enable-werror don't use '\0' as NULL drop unused variables & RETSIGTYPE fix Quagga.conf file read in. fix the fix for babeld removal when the config file is close to the boundry of size of buffer vtysh hangs. hook up bgp ENCAP and VPNv6 CLI node fixup of history handling reduce unneccessary C extension usage support multiple VRFs by using linux netns configure an interface in non-default VRF zebra: fix struct/pointer sizeof mixups add "vrf_id" into the "struct interface" move "struct vrf" to be a lib module unify link layer type and hardware address handling configure an interface in non-default VRF add hooks upon enabling / disabling a VRF additional redistribute related logging atomic FIB updates clean up misc_null pragmas, RTADV define configure static routes in any VRF don't print uninitialized string fix: addr sent in ZEBRA_IPV6_NEXTHOP_LOOKUP build with rtadv disabled change of distance on ipv6 route creating duplicate routes leaked sockets in rtadv.c NetBSD interface stats printf non usage of VRF_DEFAULT route deletion on *BSD rtadv detection, check for non-glibc linux VRF code for *BSD implement per-route mtu handling let FIB stand for its respective VRF let the route-map rule "match interface" work for VRFs the netlink sockets work per VRF lookup the address in all VRFs when set the route-map rule "set src" maintain RTADV and router-id per VRF make RTF_LLINFO optional to fix FreeBSD make ZEBRA_FLAG_CHANGED internal status remove HAVE_IPV6 from rib.h and zebra_rib.c remove metric from kernel rib->nexthop_num is double incremented show interfaces in a specified VRF or all VRFs show routes in a specified VRF or all VRFs silence zebra_serv_un unused warning simplify redistribution code support FIB override routes use link scope for interface routes use prefix2str for logging where possible use SA_SIZE for RT_ROUNDUP on FreeBSD use prefix2str and unify show ip/ipv6 route code wire up "debug zebra packet detail"- run systemd-tmpfiles in %post to get the directory set up.- Fix build for openSUSE 13.1/SLE12- Update to version 0.99.24.1 * zebra: don't print uninitialized string (3b02fe8) This crept in as part of the MRIB improvements and I missed the compiler warning between other noise. Unfortunately, printing an uninitialised variable can in fact make zebra crash, so this is not trivial. - Use systemd for openSUSE > 12.3 - Add patch from Fedora * 0001-systemd-change-the-WantedBy-target.patch/sbin/ldconfig/sbin/ldconfigibs-power9-10 17270897121.1.1-150400.12.8.11.1.1-150400.12.8.1libzebra.so.1libzebra.so.1.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35806/SUSE_SLE-15-SP4_Update/d6462ef4a881297be02d6375333ad899-quagga.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3cb790b3239bde92848ca07ed1b26eea5970c9f8, strippedPRRRRRRR!ꌶ^\NIutf-83da74810f2c4d205e96667513866164b3d12c6ab60d9826e74f4a650958d1e9c?7zXZ !t/`]R)]"k%d@qWHlYNt*73yqci>r'sRUkf<2[[vî$aWIk U}>Ҏ2M:ط##1b 8k^?&,C$4~Ԕa <Έ 4!Es%N Fa̠BdTr,C+bM %RdoTICes6,D`{^aTz.fC,A֒\ /Fwఖ+$Z:apR Dx.@TC&X;g3N=w/⏄J`.xҪ~Z0t?YHh~}rLQ _}A<? yaNk;`np 欢ZKyNęE[&Ty+d"LI` =wu~! !䢖Li/`t&4}Ơ4q \W"bhhaqP-4e6RDlK`1 %p 5*@6>^.]A^dTkdPmVųv΀_POX], EV [vAguf[+пW*$GɁf;h_91?#Lm!!YlN5d{-&Ѻjq|n:,!|<Vq K|kYw}mham( Ť9Bx5LIv8;U }OB8 Ys4xk0i /a˲} Уw #\)QFtDm}6us0`_4:ޢK&F8 +"e0V#H姒 ] c 1}'v wg ̶Ǣ NIM_6`@Ȳ߉<(+իTG(E KCW$c.fGkr\zwuMxB,X~bM&`(ٷtٙ#6v2ϞEk*YoPKYܝ<: 扲Z@8eE ԒT+IX9H ,j_ޓ'{)a,yddkGD8Vnkl.ghuEogx[]dkB +^Ώ>3ή G9n(;srݹê_Sڗn 2@XF` ߭ ]we8US{zeTbqڞ)I m L3ǰ؏o蚃P-=n~RWӐWej3yFuPyc8 eϺgf>* 'qi}g Ձ7YJP@&Ԭ$(L.B#<(/ieT y,%ҷVg\*kI]{z_'"1m\O:9T5x$x҉0̬-frEzJ4BC60YB"\л[05Y%& )fX\ۤX:\V>#6+ݠBL-C=j:UŎ]gaM/фHd[z4 |4c0%a8 懗XE=Ku!PkcL6 n.x[(~j yP!oҞa;>;iq< YD6=MRc~ ϷU xV/RKsz 9 }׈6 שA#9r=#L$HM3/%k3EFT6I7-yB~KO Qir[eYf >acEI 3*١y_3DSn`}x} c53+l\Qadq\v@ Or#Uq(ͧIYPG LiF3!ڈn,$naf^'p+Y}.c%[kG;[dmEl EAX8xbLHE6j )ÚJC7ofr5]5xd6h+$Q/0YJ+r^"il߾p+ marB _["+ԵkC%,DᠩrEGXXD\}S-@B6©"")t/%42b'3y()4H0o?HRzOtN3+cN:~wTIJXiƿPhfo(JCyCeѕ6,--`3/ ėTH}U S:eaalx*n1M>6_.۠sm+^&Ui s\2gjchN1i~lY'>z~rRvDG}-BҲ $XhbNqR6` J~&dED#{@o)^JMνK`ytIG_ #33Ir12>qoPhoT@ 2]kRjǿ_\ [8%BwpLd8mѲ 4kh" 7O_86FWT:0aWc40O*\<] a=j֬4ToDX^Yɹŧ(i kOyz_ m=d=/+M'<JKr؏\&v@:!xP5*G}ra|NܕWvRkҫ'v`V/[#+S"M 5AQ4WDwgbql]L:Tp|2vh47\hEHU@h_<͈4;[+/Q$akD&zGp|km佫^ ,IC6Jg$[SE̾BB9AcbD4:~ sղ '(Vj(GNt}X6uIc~qە]7Čā<7מ Y%#9jGm-r;$K5ZU0goᣖ˜z6l 3xpjj\qhS`WƷsNE;=jG%̩9ۖUpeAo+]>(dk2 MU:Wr,AP `ݚgdI3^ >P4dM W'w"'b#gθ>\BF;Ǔ@OM^8EGAeyexl%HB.J[],a/0?UI!\ PdV\M{6j$ p^''閱A- QfO*Y 1z-E:3 05ŗ+P0`dŅ? ٞ [2oVp.;<i>c/5+7@s,=V wu#g"ى,ui}_e u=r 3X.egVĉ u. LkvID.z𤋮T\ap'8 @^D=~Q%ϳbP^o).ZUןЌ%Gw!`>QsA@C%IQC%y b~XFCqD@`QFbV}?SA\8u [d&s$Sf(?kP/,Nӌ4Jgo)=lAvͅDn%xKEE(yRYќaN䰹aѓ?jqrENC$H2}?cמMYj(!T~B0KEb!.So k`Ϥ[+ u#:_~*)7)O,d]Sȍ"hXfI J.`ťl"[(,1KBT)Y u5\l(p_39Бjd[!xb%M5i3jV>*NE}@L+]no)!Lj1]PEl~Q5gb) ׿|n.motlT+WVQ#DVw&8L1BAAX/j7{yس #owFU OjWm+kOcAyP8WASGA/dQHɬHM$W]4.@WwwпnoAK2h 6d;1׷/k|cx/9I9G~1}7a*ILz[LOfU]l+ Pڍ83exL!Cq:/JWNE -3j 84Uw^S @%O On 2@'1Ϫ|(pR0U"0jJh,բ1ѻq]BPok::ξPJ|VE׸ Q x:j4YyP.&('k%x.>CA._ƁjNnVO^}k؎ry1a+25@ 2G i%-M4e'>u}RN/$h ڭg[(.[(3p[HV Fu0|ѶEzPxEMVwXU}NqDcQkIfz/jjw7֖X!~ؗ/ OM6eSh7\lB^Y~$c:x4Ay3o3X3Z 'ÿz}(u$uƑBhq6k 6$(,DIUf]4;iC5"77JE: ZՌ Ƥ]Ym~~ZZd[;0Ӗ?adD$ro~tK}|M@\ջ:m+ZUL4Fz gjf@Ex*N|3d\_ n0Ik,NT@Q4{@>p_#Z}3wftKS>BBuMîTHkQ>-(͢@S b +!_"]ɷCsYv r3I(4%#)-svΆCapFx[NJk2sƟh õ誩|607/*J!3Jqk,wt393f>g7$5̴BPC9ګ%%b1;{CFɶr;%#C+1{Q_g-Yt#擨i[ݴ^=nW㒄kp B~IF #ONEf>v0XWޘ`kl&hE)-.(L`vbfrjXOz| 5?8RQ`!m{˄wMGT]S$EL0Jk1fWBeS[oLgѷ;lc($B`#M )VPڋ@>a8zx|r.044ge2|uj}4-y\a_B̡m 4]cbQ ]7.Mj[͸{Gխ)0R\gJ'D$p>%М(-@8KnݳpЮHcI y(_F< 3Ís$%6+{q55_mJCg` 4mIoh9iJ~b޲tU CHdUv*W!ݷ%w9g6ֹfe6Zv0-}p<+-[:]t7p~k'0@kolKD F P _:^G^5SXyMOz2+a#PBuʫ/R^}nG|7;c9> tyf[fظApUp{)wE(ja 8G(\*gie5hnR.CwU{'m=ZuTh=qG[y&i,>c.oQg^hB=l%%푥B폧#]Q)q9|H\-ND2 r. vމr/Ŏ߱ MU )̹? 9M0;"TW,Q9͊v|eHOBHfg'iۑxR ,+x)%_+45L)(w[BTL~@WDsț'-zgh'Dg8f \&O'+zZ!eF ũ|MDG nMՁ(ۨU^SLRgAq-5InK +?@&\hWёTz!?bE Y.fZȋ!x)<`#4"agXRkBwYX0?ZFydؚ1opjkX?xV3H>O|1/!eoǛN s / J\+[cu.`fs`%&&+P(Kl=7@ĭ${BsSIx.GjQ(*2*bjm Z`Qmɩ@XTgxQS-)FrST`]Q9wS&6)]WABf|uy_r". >O4C+ٜ"F\DBBQ.ڪ3 EL' # $gsV `o tnT5 Tfh%TiS-z[~}_C )$yx/a'fz +E.T~]c@/|o'#3skr:0 PE=g4z$J8IM%SGm<"J8T࢙'+.RFVuoUëvwh?p@&=]l6 ^b}쌱Qv#hcZ-D L:)& pѲLӅǽ< =t*MD2;ĝZiږVmjsTIGwL^}\S]ަ6#J0%DkwWqTR撪M Dz= T6N_Bd}SNVoU77p M|}MQ\Q3tNX,TGZÅb4*C{Y~b`8xs9A!QBi'ݥm'(3N]~ցI/ 1{Ԥ!FQ苮/K"t?,֭Y`pj5ShH)|kp1Xwo07!csŽ@,*t|PޕFA]'TlJMQ"bګ`ӿC%+QOULHV,PʠGwV /Ak`!.>-S쨪p-JCƅ6?kASpNYOrH.,=y\syCQP rR4/UTVYca>| W(P7uך/붖ryo!\U!՝:TjL'kP :a#J OR+0~d<+MپT 'q~ž|RJ)Dڗ@fcаѽЄ#fR00RhbjmUAƏs.F=OMW*iђ8tM>XCv!\V&V?CWca19 %hI+I\gZu/gj (FzE:Yc=*#]?~S-_QMaz$9FNo}aaC+tS"Fҹ+'m%_@b B-\:|5HOܬN4@@b,ywQ0P o+6 bs6#V=23N3njLD$L5`X' !4xu)X y{qS'%{aKf8Vj!M$wV d_D)9b%.N >f!l_ޯoK,4ʎ0L^vgP-/rc3" Qo5r-Aⴸ/f/Vͧ)=QvY'm-ly[xL4+BZ;fgk+?lGCc(c߾.@>wѫkV[=5_FHto` jgZ#/71TÁٶ' ܨBS5e>S^(](Ջ2ˢ D p=4Íj 0iM(..y4ѭy>.\XP}dJ&=n_jp GD)Á\Ѭ<*D`$PJaH{AD+ǘTMwY*`g?%cQy=ݦ#U(. żϐSV LN # ,# b`2O1kYR6TNk/v@{Ѐ\G6i|6ECo$sK亇d'|"]^\6ّ:h@/vԴ[hݷ/cRXݪrT{̾„Z|\ ΪP$`xNd4oRHÞo)+?ps]bg#!D8SKV8%r ЋJ.OqWjω!67?7@0|z7x#ҷ?Dfw;DΑe#{T]™v?=dsO޼ǿَߧo5(K@ӧs 0ݯ'AuEM%. ?q@g|l4  •ZHoRiQ5w靣7P#)o!OmZnFb<ï,rߘd|l3J]pB/ ZgnW}̦t U_5X`Y9od{h7U޺zҳʼn/ 1@ !4i}R(pϲbd<1wlbKNvm ^3^%TwX>uBo.ׁ> yߩzuq\HB8_ÚbIwdj!!_P%֚Tc;*'N< TG58To+WckGt7˾|鼧}^5cBiYz, <{3GLm R1LM3VNNzف(OHd[{0ӵGV^Z1=醛>ȱ{%3$)oK2+B.&gT4ijf"\I ,b/ZLp^‘YCiNS_MCN騜9`Հb`>Bø[xM oEcrRUG?X&4MV&DߞwA MX64E&ݠ> _8Qx fgaI(?CyC8Pս ^x $NFCxQ DtM;ydh1L쑁;HG)=lEN$ޣCYi-tw0EnwVXW`0 c?~HFZ/2Ds)Qm 9ڪQymVNLL TEvO ut5/3qU-߿MB5n 41ꔂ|gbi%!4f.a!te'7OHwE4h7t*aU *f]/=P&*e?*Mԁ FyJ*.[!3B8XwoCT$ 8;z'/LBߡszln̬`V;rK,,߄W6SlCA_P}* ֻ>e0@z!((xrӗirZ?'ɑڴ;_Ptz1KIKG=qv=ǩbiZ6ydoCPFg=ajA/a!ire᭠6I?@oO9 &R̽2Oq]zdFJ,qӋǃCT!hTae{XLMקDA ! n)iu~"FX *P7.~"Eݣ Yc:9KSƉp7 ۭ]d4֣"4xĪ7U%%*hlf&zi&<YjJx^l-jdխgO6(bw_߹: =QơG-?=UGvi)1X$y^5] ঝ[\IJ4KQB8 "-eodĬ!~5iOr"DMyMIdDgc))^N\ 3p a_jmOOn쌝/RS08.\tR3gKo)Uc#0zR2j-C&w)x Sɞ KR I-3ELTz dI8)xS+L|Q@%'Ȥž[Y|{0ǓVkӐCJL [Ndƪ'fr_AXZu»=2Mښ{6[VhP^[K ,dv w4 cԉ!X55K#RWڨglpm^o橨נ$[IЏAG)$Py>| #שN)`TF4OCďY zP|j."Kvl%2XhjQ/8$1NiZU'UW ! WG6LApr ލRg̍}q1#Q *H')r/-=+1'R:ߍu(m?Fٜ)rgjF܁<~˚ r}oRB(;=6SEYF;tzgb+Wǝ!X:*M@֝yv^[YD3!Ay؝~'EsR(N3:>W5OQQ[ -nj{9@h`'v3ȔIl?"xʐk]ŵ3ѫo &(ލ:q%&=azh}sڅ2n> ]I׶6w*;*o0^R*Db)~1;o$C턘6|?q_8L,c}lfnA.`xWI"{RcS<@->d0<}×y֩K6f>#[7 +os#Ö#^tN oN* ~CvKj>HGKiD6V2j찲P)斺;6: nhMj/h e 5$>f(*7y)nD;ͫ|{!Q< _ M`o ?k=ːkHn}ǯr2:%=.]MC& n= ܭpySPȯW;-ӲE JY˥>+ܽ}F2g;z5*S)bYjpr( "a(Sg/KPX xHd.gX3S;U~N8J}U! P^WD.Iy,f΂aڃHEEXV,0&WB&Yv wa ]WE䏛&Sita GrmCO0?S `zI_h0Qm ;No(iU(ejYOc}dx&d@q̅ip 5lW$e;k OȶdLp} Q^]JѾe<Ʊ+ɔ¾ m<`B;PF+鼴A/}N8o*jÒIrl1CO3+*6 47wcSapDK"q9Gs.G| boi"GJ6e#HdZuYЌ@gweT @#һOVTxWƨD;t.Q)\u]o!⸧+,3~0QlȽ<u3U.W%ᘀt5o;4ie>4Mc8J '5.A66HHr>ihfW]ECf3) ߦ,LתwAl`#rE$ +W +68e|b!?<ľ hSI8?lrkiLr( AAl BHAy;vy,.b R7ѨRICd`-PԮa59Tq#Q6F/q3`4 ~w|{m\@FTӶnb<ڃ1Xתx@[,"VY l\ΠT#vIQbFZ=gHgCf$8B]XUVAp)6\kgJbu3&.rVʧ,+6d&,^Sc7/[WxͯX]G5^אNi#((>r8^z`sϛ?}.5̍F9n>GYG+u%{Œq{i2ш sOXy|9< &|vӜW6H˨s !U2)B6mcET FQoM3.e4<┾cH3oD>FX>T9CsewO;MG@EX|_j7ӘSK$tq􇽋rH!9A5: gZ#=$lv N QS_= UxZc\Qz4E0M=˙J;U =%@w#y}OHԵ-ictP^f*Md}eɐe퀪d`vٖD9^ =~+;4>R ?)?SsyΙPHH;OM٬86inF4ҡ0 %E3cCjRXM|iK;#"X$!d?n<@])7;vF:C,_h6^׳4S%c쏏`{%na2uծ-+kqOjOdD>`f8 ^gl%v 0**DVhb)mZ̓wrCXZZyH| gpT9X/mNd!#}ZUX$N6@5ĦD7]XfVXԁ6rOkDvЏE:w/A4G