apache2-mod_auth_openidc-2.3.8-150100.3.28.1<>,{0eOp9|zT xL N>?d! / p>I _     $.8px(8 9< :_ FGHIXY\(]0^Lblcdefluvwhxpyx zCapache2-mod_auth_openidc2.3.8150100.3.28.1Apache2.x module for an OpenID Connect enabled Identity ProviderThis module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.eOs390zl31]SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://github.com/zmartzone/mod_auth_openidc/linuxs390x]AeNeN80f720ba3f72ed02e7767510a49d47f7727ac03552f1fad613f9366033084bf7rootrootrootrootapache2-mod_auth_openidc-2.3.8-150100.3.28.1.src.rpmapache2-mod_auth_openidcapache2-mod_auth_openidc(s390-64)@@@@@@@@@@@@    apache_mmn_20120211libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcjose.so.0()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcurl.so.4()(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libpcre.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse_maintenance_mmn_03.0.4-14.6.0-14.0-15.2-14.14.1eN@d,@c@bV@aF`@`e^_@]{@[v[GZZ1@danilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.compgajdos@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comvcizek@suse.comchristof.hanke@mpcdf.mpg.de- Fix CVE-2024-24814, DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied, bsc#1219911 * fix-CVE-2024-24814.patch- Fix CVE-2023-28625, NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied, bsc#1210073 * fix-CVE-2023-28625.patch- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527, bsc#1206441) * fix-CVE-2022-23527-0.patch * fix-CVE-2022-23527-1.patch * fix-CVE-2022-23527-3.patch * fix-CVE-2022-23527-2.patch - Harden oidc_handle_refresh_token_request function * harden-refresh-token-request.patch - Fixes bsc#1199868, mod_auth_openidc not loading- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter (CVE-2021-39191, bsc#1190223) * fix-CVE-2021-39191.patch- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption (CVE-2021-32791, bsc#1188849) * fix-CVE-2021-32791.patch - Fix CVE-2021-32792 XSS when using OIDCPreservePost On (CVE-2021-32792, bsc#1188848) * fix-CVE-2021-32792-1.patch * fix-CVE-2021-32792-2.patch- Fix CVE-2021-32785 format string bug via hiredis (CVE-2021-32785, bsc#1188638) * fix-CVE-2021-32785.patch - Fix CVE-2021-32786 open redirect in logout functionality (CVE-2021-32786, bsc#1188639) * fix-CVE-2021-32786.patch - Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix open redirect issue that exists in URLs with a slash and backslash at the beginning [bsc#1164459], [CVE-2019-20479]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix open redirect issue that exists in URLs with trailing slashes [bsc#1153666], [CVE-2019-14857]- submission to SLE15SP1 because of fate#324447 - build with hiredis only for openSUSE where hiredis is available - add a version for jansson BuildRequires- update to 2.3.8 - changes in 2.3.8 * fix return result FALSE when JWT payload parsing fails * add LGTM code quality badges * fix 3 LGTM alerts * improve auto-detection of XMLHttpRequests via Accept header * initialize test_proto_authorization_request properly * add sanity check on provider->auth_request_method * allow usage with LibreSSL * don't return content with 503 since it will turn the HTTP status code into a 200 * add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies * make the default maximum number of parallel state cookies 7 instead of unlimited * fix using access token as endpoint auth method in introspection calls * fix reading access_token form POST parameters when combined with `AuthType auth-openidc` - changes in 2.3.7 * abort when string length for remote user name substitution is larger than 255 characters * fix Redis concurrency issue when used with multiple vhosts * add support for authorization server metadata with OIDCOAuthServerMetadataURL as in RFC 8414 * refactor session object creation * clear session cookie and contents if cache corruption is detected * use apr_pstrdup when setting r->user * reserve 255 characters in remote username substition instead of 50 - changes in 2.3.6 * add check to detect session cache corruption for server-based caches and cached static metadata * avoid using pipelining for Redis * send Basic header in OAuth www-authenticate response if that's the only accepted method; thanks @puiterwijk * refactor Redis cache backend to solve issues on AUTH errors: a) memory leak and b) redisGetReply lagging behind * adjust copyright year/org * fix buffer overflow in shm cache key set strcpy * turn missing session_state from warning into a debug statement * fix missing "return" on error return from the OP * explicitly set encryption kid so we're compatible with cjose >= 0.6.0 - changes in 2.3.5 * fix encoding of preserved POST data * avoid buffer overflow in shm cache key construction * compile with with Libressl- update to 2.3.4 - requested in fate#323817- initial packagings390zl31 17083331352.3.8-150100.3.28.12.3.8-150100.3.28.1apache2mod_auth_openidc.so/usr/lib64//usr/lib64/apache2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32631/SUSE_SLE-15-SP1_Update/be4dca38861509a81f7af97b7d79d0ff-apache2-mod_auth_openidc.SUSE_SLE-15-SP1_Updatedrpmxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d2bd1a4af8f2e677881f2457eb877d12f98f740, stripped RRRRRR R RR RR R7^Rϧ~utf-83e571b76424f8da8b35bda1ee3ee731c364e4076ad914120a58dd1bf3c3e0173? 7zXZ !t/{\]"k%$6"5okw@_/.PS8;otyRŲ|"YT~uDWC7>K˳bR# ^@7? IWP)vn]OZ?[QW-!pSЎI?I_$w5:F> b3 Ccѐ T1N UE#b8p~ɇ%*1q|I(y+O#pIО `9ٿGR>BO;j>Sp,6n\iyDuU|/˸v྆E6dGƅ'yZxg=v ]2+:5xi'ufܑ)-"q"í䩄)f SPZf.j]xgJ̤\GWNA7^XZ 6<`:RjcLBURkϊg%OHgR [U W[ <,)즪:6Yi@gYgCsTg P 3g]mI@On[[c0=zi\+#_Հ׿P좰֖=,P+B3&0gB- [zH*3`h0,>x?S=!'&ֱ*}A/KűFc<;NhoT/%ŸVgrMw^s#?jLmvo>]޼9ĕ*9T w6Cp#M?1%.LX.L௽'C\9!r0*\Qպo Y1滞d)z/NZ8_^ >gsXDT+WbuqU|v.T=?n,sKIIXYX ] a$joMA⎪eE@ȬQ6[2V.JH,7kx]xk'^d䣎%8!yijP\p@>Qy<$ ع˕i`QR;,~y~8_?j֚^C$Z2' ʗan/ S).{R4k!7vX<7*6zW jGc﯒E9`_>=I;}X:Jkh4Q;&?^iqk[WMy1LSj@wbV|;7"SZu LZ]}c' v23cۧ7 ~ꚑϧXp:P ˺_3@pRaX%{QX,^9$Fj`a=P?TQ{\9?>.yL5saC1BjQ|A:MO:1IRE1J,RR7χ.0n{g X%do 'xBpAj}5ʔݳYL%q )*rl^^07Tb "X5[&o(c]QA}/-%7e50 b#>y}X}*]7)M8m2M|Mj]Ƀ[Hٯ 0x7[waA"gNɨz ȋ9@atx*ԗ=Ӱ1:Uc$hvO)@¼)=2IUdóU ˉﵾܻ$V&w7/ٵMd`0e{JM.H{ ہO@U5VfVǩ7`O_[U/ yҢ8Kݮ0J8 O mY) WxiʧR7@F;XoDH<"C`?(lڑk>҆-^(GbsfOk .bٗrЬ3c/6" t3ZcIv+ڠAiP m1F4ՕˋҫL#=dWNJ&$zR[:2 T=[`0\x*x)WƟ82;?=g3|ɇ r)eg']Y^uӖ 7dWRZ@;h'ZiVbQًWH>ړQ=u">ъK`M,% Qm~!olMƯ8Tc>6 #cs!A6TN m:neDq37li~>]Z)vi@Nmӄ{>)J>˜Iyl5U/%VT[w1T_Z+[dž^~p'@ >O8owQ^9@X2*@ǶŪ1 ,w}qh (=6E 0DzָwuR2t*/xW7$Ӓ/| ȾGxPQ?b-ΰ_m-)*fd8Vvj8>AW,Kz&958& %}b8l+.zm}Enm83,R#Sh,s_19x5ۋgtnRmLXq wf4}e\hbKjom_p*i`{O)쐛Mj o7u,1/&^FE-Iu߉VOα Uw j#yB iӭDgeG5^TLC7r6wn(^G7!?F(;Peʣx #Q“G9xGOTL疨JR5rCL9o:Ԁ%=ƍqmOuOCd"-.jf/_=""jCzx:sjjI@_ vJYp~ 3}5Ղt_{3'#%(~!J7(A0 Fw և|[SkWd]Uݿf|-ȐuąWɮz +*$ cUIj+F<\e14;XF71Xw&h.;eӳ`|$ЗA OqoQ@A`QI!NU-M!*3>EG/z]]UNf0R`'yP2H|ƲnjB`Wh.ɭ@s^_ކ j+q:ni)#pu`?dR߳{QGeXHݰ[Qht\.x%57GEr'A5~V8&.|\S!ka#Ѓȝ% T.o0ށ Cf̯#NHZ1N,ޒ_LmNc">14!&00&0X{R@9q̳ղ5m]hz~ Ngѕχ/thK?;MDq͝bU/&e#G ȂA7SH&  sT]&D 3.3{mm$opv$BM 4VP<A,<]\n<Ӝ5ڜO &oMWq$h*Ȼ0`䞌 Pw}6WʈrDO8 J&ufkWp1 3]GwcHYC~P{a zm?* ^oͷnʴu- S(E-s7?^ hjn{ceWA%rLh#ٚ*kɫ`ϓD̞ HW?X0̃,fS*~JW P pVIWJG"`fݻﬡ`L ϋ {Y0H6 >H=xtn3> Z`#.fudVO )wVU;AFf7?g'p<aM]"#B׫8(^HIʧIgf`>?yꀹ75C aC+o%y+ 1!pI[ϴl?+)xn޹=ɈaVgiK2ƣW$ЃlxV2M`ha˦[(vI2 -}XwxJTdVBGͼl9SyZ"xje_T NA D{>b́~fXXnj{o{cUW~G̸uA-țA^^'HAH!VN4 iC/;5Ҭh.RN [Z;  wnjK-ʥҺXaRrH3p"4sӃG&G<1 jݒ[GS;F[&̍{K$C1栕"`JRP}x0-8- [`U^RU).M⬊$i橊@]1ୖmen2/mFsk)YBDt\čS@M9d\ x|Q/ voFUV?q>>cܨ:D?urWK3$&"Pm Ȑ*29%OL,@]x8n ]9`yBW pGrB:{ $9kgSXR ޏ^݃L;nwnlRUKpA7'vGu江*b Ah. Mf!VlxE=u?wl[xVI}80&6>u,Jת|KfCN"I?H+8A<42-D_%?JznX5_0jA/ 1kպ~J0 4Z)gmNki, 6PQuꄿ5 }Z&=9yEEh[w*pΤQİU=2ׄ9iqe+C-FO@> Jnvd7+0~HO73 aPIܗY]MW= $?#9Ϋ}ES̍ޤog/܆JPH>Ejnuc6=xil눫x%>9r3g6^բ)*ެ-%kLm Wk=/\XJ`W|a`YzR U$ A="X16ZE}Сv@f#}'ffj5G>h4\#o$BL8_'sTΎV>G7lW,HEUR.JvU|ʵ"̟q[ S=VP%@}#ct[\K.xez2Pc\⧈R|vxl$`o8"̺mqefc_o :{͗0f$h`LPֿي(kU2lYQ,h_Kk\qvmW:' 9*vV?"S7`p1*T#pr6P^f@t}vk zx{K? p",OeǷ6ceej:骑(R>r`*Z41G쓚O YNgkΊ94 VaˉzC5HDc=:>[%mE ɣEm(4Lo#.l2W7`1גhks.4@37#γ5{0c&"_uP!^cam/ߩ{UGi0젛3N"S|mFqڎ ܯEߕmW ̐+Tv@9ˏ{j3nS"_/U];Tu5F4מ̫wLsD-7 D+y+ l$hIz>Mq?ebjm&IdpxgHV76ڲf fK>IwF$ξ $aiBdbM?ʴ #CӲTb=Sb=+ft)[@J_O% Bfq)TR2tF~?TI\5r/2<>d Y)YVާˊ\l@Gj뢋-ӦlݯQ1I-Ɵ0mN&UP!6 >~@;<0޵no: 8m霖Niʝ Z$E }PxT|Q=˼#4*v2PQ|ktj.%=D-kfaSviAR~plY ibB:>**>wH2ByY R 9o`j}g.7?kA} $euub^dJm뛺=^WTg-/1(<[Sڌ՟EN)?J ]CcD=TU*i£cp+#^)trU5~ I%+e8FI5r @t/͊=k"Ƹo`o96Q5yY:2RNbsG]PcnVw5qmz \B}-K|`HйacNAQsb ɲC9C'Cƒv*~@jQ*>UsNv=zc'Fn<ϔCDAME|!/SN{Kf΅7aF:~@Uo=i::kKMXW`P^t9{ L=2V}d.8-&kUqӣK,܅r|(hڍJ?Y-Kɧ' wMEr``d~,;j#R/J4״tT1PomY$4wQ@8rՎu 0֝)_p)`E)9# /=e1ނ,JZDZdK8Vdրq;Sdq7#MzZKQxjn~k]c\I0ĿFd&skU]1uA"ʛ,G|)ȍOm|o|Cs[4͓>i-4AzUGP^3He)![Ru +ihkLVlMdϭ-iqQlϱfJ@aDFgrfNcRUy_2,C0E8>v'&.y!VX]PTBY{J[|}HhdoZ` ?Q gڤ':e+曆pƂR8oG`ňܮje p I9KٱmëY0)Dxq;q l|hT@р?)ӂA8 j*_O މ޾%d[J&vw{71V_[,#֜ḝGiC MᏑ3c 0g 8Ii!nK #^R\XVh e";;>]ڊn3i(\ö#btɥPDshfn/dU*6~[-"}` kEЎpm15&D vkg0(PS3ɣ=Ps1U$m|3 ((Tcg[nbʕ ` .!-RR*Tj0|٢ o5Kwaa8kb4$7"ߌgCyALV$ 5ݢ-2өm;TVԉEp,5U) 5jXa^Z@i~ k˅ђ5YaãaMF~EF(䴩:q.k?*j^kΚ[9…EN'U0srbF-^gjm<4E [S-eNQ~ k!QG&ܹUBe a_\.m\TmdgS |34ש`(sK^م1rUwBBJ}]v6ڋii56QPà/_>GWӋke!ʹIO"_s0«^CH)59\h  e'>+;MiY:6"H5T5;p)*ocs cfR=CJKks94)1Iw,k]Uu_H.,uzx| y9sbK3YS7 AFw" Ն<ߓnQPAWw HP)}&yDoU b'[.ܛ%)hƛl/ac{ it Y~!@=}J䓄oᷗ@08Ȅ ϺĩmA(4sUii P4D-[x"߶ )n~/ۨ=͛Yp[3%m׏1 OV?*c802T@YD Too::a #wpω"ql>oLCj^HSS~qdfMGYxު z2mDğ/'iJlmqUw-ľ@+qN5qU‚=)R^!d0r o Ν2 N4LxZ<{ .05v7A_|u3ƌK1#'<"cto]9䰸BA{Us3AƍMR;ѫ1AAt*'倥:ARUgXm{hnyftJ,_ >~C!cMx&&c#Y̑\\f2tÎBAl̘Ӕq9 ig2 3j.{#SrJ#h*@yJ=0qSG[w8Ti"=imB0[ nq.r72 41Bk<&;CZH墽/Ż`iEݪn~^0zi.~Ԅn tvaciHxr%U\ZXQ_ZGQ OZ:{ҩbyP?#qmTvjǑZH5FV#eqɜk2qkrA`_"Τϱ Q|Q[qpu+^uV @}͢cdkCC(퀦cS^֣ %Nmh]K2r+_KkDwUzq5+S deaёt~!G ᣯ=J* g" CtuN˴V5+mbĒ-d0lXxjC] 'C8dU n?\γis\ ͸t*ւԁ`}PX@=N4(x0K :# (r9RN*5H> JCFRDNj/ۊva;5 ER  Sb*B+*vPBz~/aZ"^ꯝmb rDzae@h ZľR.U(0ka^>h#8"gJ}ּyP25Ew'=q~tb&GZX+8=3< $tޤ~_FG${f[%F7\/ Q5P{NzSAO޹rr0c{1XB8.1p>T)1H M;& `ǀGA ͽU3P!кH^x)"#ܷu9֘F0ϡg[F~Y;CAqpjYoP:B#Б`˜M Pz\OVD9RƔK?n=gN dɈ`` zrh/0 y #(@)sqwUw@Yܕ[dl({ 5]ޤ;cb*Ff$xG⋞>G[Uި_je/o,1-~X$y6r= 'sgo|;ʕg Ҏ@Bf/mB"cRtB )#-ס8tв11:(ojТDpH(}aAlɎlXh?7N!껯8.SU.m,SY>R\vDt@|kD>? ^'~?f-LUvo`sY4GAr7/bvŽ!H΅@xOyIj1imG.AZ i펥& >w&{5 ٨I"=l,M(LQSS>h.V-t({2wIFjωjʾMddf4hocu~)z*Y U %3j)])Pߙ|Kyi!Ypl#=p4aXjNRzuGMnAk X]UPml365lkp (kwXݢ\uD շ۫Cc UzD4Z{& O=SdEuK7K=(e8Dɾ &0X"yx)+/)g[ɴk⢔L:kݝ 5rZZ:H$(ؘȏ=C7;Cڜ!\ j-l̒bu{БbT} HaScaO?+L6XR,O_{pb Wtr O~pb@3\[@ŧM|j[Uc­\ H FD˪aUNB =/ gn4~mOd&<%p[a#б {9-- PfZm:YosA>a Ubd62s4)q_K:򆆏Y_dTJ##._*CLPH׮v# >AYhW`25Y^6;(>ME4m-*0(W@-)62(D,3b_rg~FiH_d;bgfNؿՂM*wאg>Vw1)ܗm1jĶw'v*ߋpcZM.gOLkc!3"if6&5-|koIM\2i'M{ii\*#߈=.OAM%]7 s?ZSHvl>`=C*]zB%&y~V0u=/RÑ$ >_2x"JSB`l36nSck/TaXWr2M[бL?4?!`1Edt=A4rS}?Xk KRWS( \}ԙyPp@9|)bR8 &"1h0 &U8vX@vf䟴jG0=?mcfWN$)jYa_+:6;\JoyPh]sv`R"0,E]W/pÞΡdrZ{h̶ѧU|f}4"f0[_qJw`觚 i~ٓOx4E6#V@QBa\_-]H'vh X|JƄI~Ng041AR2R|u'[lc-nB)p֫qJp(ͩ%mFڕҿAt@+ɰw~ RƬy:"MxJ릵Ųφ BI 3ݧGdpYm*]/Y\UXJ_hd^T,gl+l/t-{( $WF}st ^"㵗e?S|EAPUjnr J]Y7㹿wj\c8"V%8GNJ ވN@Y(X?A#vD.c]h~|FPC9OVV #e7d*4Tܔ1\lԗB7FsA(#w힦_q}3ⶡQiZ%z[Dyow-$[! E()\6MZX~9`p *][^GʞH24 1BVSh-6DM\,2HpNnApm_UﻄWǼQB+ȒhxCxʭd"^%pvR=E9rSG 6 /  E\ۤ(FJX'Gޡ(uo-p*1k`i_=aj9 Ėi][-5N>/L>1 Ho]fLH"~ }֊؂ÆL4P8!)y`RVM6ns)҄p ϱK0%:aY)0 2eh7YdO"\ĉIhb]f ?Uorgf^FM*>YC:3fs*Iwj4O_A˸ 0+=yh DK/ujzzȆI΂){Υm|䛋 DzpQmo$\у T6"i `l^*ER#I ՛'ѩXM0NFu+YգԦ}h-IٞXx"VGjLi%-s,Q20Ic\.C`_?)i[ښ4p 4Nyj*[K@Xt}!cW5$N.<P򘆠Τidt>LW^.jOJE#X  , Kd7W~mM |ޏjiٽ)E9k&9@qq̼Lv!c؀O,?07ch&AWN7RtZ}ܟIdHgf2Eh- hjW`L)[[IL:Xl=~(M-M844ue2(HSl?PzDZK'I $]4МcVFs"o+ccd)nʨբQPO&WucNS#Y&u6uI8bWiكƒ";,56| ,~q@Tt+w.ÄwX Y:4nVy5rm ¬SY# >;7`QEH&A{kjJ8vX'E"ƫOS^ׯ}5(= v_p(\;JJ}E20:bzkX¢Eea!8zl01c!Z)ɒ6`TPY|z7Qp5)uNe;],ʫUtg}k׎lw'?L)[-FWvlKdˢY)gfD!'\"ѓ7Y`)=gWhu݆KfۃNkAAPR ,ץw#$Q$pU>\CZOި&]Zqq.LQѥwe8oo|OWGEQAxM-(LOp"?N5dA:36-bZm$%$c#jXc4*_eX*|q$c'㥓|"4sU.VEI))F)@q Ih~'gK) {I1,yu,'\8}a.?C6̭g23&aϐB$VhI!UP EhVx(:mʗ,ׅ~_ LB"_ø7U"0pA(E]iߞ:LS/lRIYn&suWY[j7O˙NH @]>*2EHӯPȔ" [ %tpYO͵g&w:^b) H9ɧQ;g!Tv: ,x)Ժ%6al0E(8UuIdFc#e3.;<=^۰1w}^ϼi~ #g鯿(@C;wܝ4 Dnq$qND1̐t95 `8G?V=C [}{$z'¡ơ[t?~-hALbU%oFFT fp#Bm+]80, 7 g=lC}G B.:rux *V٬~ t9mO6f!B Hɠ$ټ5к.zf}閡Q7Q<672EhUuL񴮏aM~Im _WT#ld@ځjm4@Bv/B3PC976N^Sdy{+hd!C(<0CV\W(kΡ'IsGRV;kE+QZonQ=py3壇tP~io֧$f&͉;>1׊%˖A 2wkNvw:xP!p*";ׁFL8+MY/Q+ >iJ1uBEfViF!}[|XYh`o2<7sV`;N;}o|'MQ7R=[ \[Dۘm?Wa#^ŬO-Y MqM|;_|KNmj}B3\-lPd_FTj)wj,C=ؑf}$YO }D 39FOH_YG/I<q\` !X r0 㡅F+E}ILβ%XL-SQ ӫ)D8|;,NB$xNctrRWHC~]GuՆo{ )0JZ*罎] LqիaxqwO$adU8@lXMM#tˎ3aĉ/ >ú`y딊0 zRq(=J\Ea_!)yY=7H3ix$u2Sc^ijv>tp[T1}lf>}ꄞ\whte]7OO̻Ce٬SiI$#?~H?xPe)b5t_zaLFuEN WfAΊc٨h}-_'n&?f]pD " MmL)}h `Kfmh_GKXHH-̮Wϣeˎ CmQBWZ%'^-hoZ=aS;SR}l 8,;^], 1/8۴LhK*Șꀕ7uۚ{\9,h;GnQ3;VV=rih 8غ^ɖliKPˠ"tOUWuM_)7ہs\ԅ˾kg&͏PԪ#XM.&k 7WZd*d /+11MDD OX_dzN0H6v`2OLYg-VZ^s)B=D یvsef6[#j]*]ѳWfb fS衹Ңj"rDMct% )h ߠ8X9̫9B-8Pibj26poO-o.)>nN1Q5|$o`#¶줎BX≐EX+q쎗0Ub/| jg= qaE5gԒt ~^^aUx 򓝯R5h? `jlװ%nCN;gyK)ՂOiF+'lưWm 0H-T.Uʓm(< hJ [r [;xrVLcDv:5xdPa¬l YZ