polkit-0.116-3.9.1 < > , L b{p9|* q`#5pviDͬ^ 6 BY3POqW`@#lɡ紮+j[\`6x8<%G1H(tJ B
]=f rƳB"&C,Ғ
h }u%n2oG7]
.IZzXt ,F:n}g@S;Y=_MW/ͫ{y|^kI;.dC@ a0$ ̅*r(0- > N L ? L d 7 , B S z . . .
T . . .
. . . r . H p ' ' ! ' ( " 7 " 8 " 9 " : $ = 8l > 8t ? 8| @ 8 C 8 F 8 G 8 . H 9d . I : . X :h Y :t \ : . ] ;P . ^ = # b A
c A d B7 e B< f B? l BA u BT . v C w I . x JL . y K G z L L0 L4 L< L@ LD LL LP LT LZ L C polkit 0.116 3.9.1 PolicyKit Authorization Framework PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes. b{ibs-arm-2 OSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux aarch64 getent group polkitd > /dev/null || groupadd -r polkitd
getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in polkit.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
exit 0
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/bin/pkexec
fi
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in polkit.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable polkit.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop polkit.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in polkit.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart polkit.service
) || :
fi
fi ~ A p
h h H c+ ) V J i h P B AA큤AAA큤AA큤A큤AA큤AA b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{Z.b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{b{ 28067ad27702251ba38d9794738cb81e18ce2151d26b3d103a33b4107c2f9877 af4292db23ff017727a86c35067121354c63911f32caa09e0b9e42d6b4252133 aea3041de2c15db8683620de8533206e50241c309eb27893605d5ead17e5e75f ac9cd65271d1948cf637cdcded0fdc50f24dc992bf028d7ea1f6c6a730cdc32a 4e89d12a58604e633aeadda0383b382e9832ed6e8156f9ee144ada388dbab398 2b8a5c69de5f574af9497cd64e663f2629ce30de7e7cadf3784d57c75ac00523 dffee3d08cfe4a28c9cbd1f1386fb7813fd35b1c7ecc8c5cdc0cab62ef387d46 bc8152aa5e132a6dc882ac50ed5a758d3cc8a9a9bf71173d2b606fbb29b14fa5 79169f4693c6661e4931eaac5cb56dbea9948bc5d4b4e122be91abe9f66878ff 6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff baed12288339ed4b1df90f017beb8af07b56eba1b2edc4a60914880c13617af1 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 561b4b59f36d6e34af024d07ef8a80457559736138ec9e9e4d14f8e926c17512 725f7541bf0703006687192fa4eab464b4e91797794e0fec5e705d2c66808a1a 1d862c3977460da9e096a5267d4989d977f9e4eeff7781639b80a138fcb7ddbb 86a99df215a09ec829e81f8b6d99e8d88950630a3fb319cf837c3d0506b17ba6 a632e2e392c367b48cbc844b0ed41cc2287126dbac51fb7d1a64f40211ca0589 c888d46402d2bf113d5859a57569c53ab68a179bc2fc084b36c13fb45020eecd 73c95abb890de9cb72fbee8947befb6f489bac6f50dd7325a553b1c3cfda9e0c 77ec4e0353f78877f22fa4575ae21fe371584a041b3e0f3b3c96042e030352e8 2735b902d88a25d4a74135d82696c544658237ecc659cd90560b88103eab1393 d5c9b88e431a17804f869b4320fd642bd6c40230c4085c0b6949820a20e9a3c7 dfdb5e050f3a7140479dfe7636813c4fd071b20d5034e8c7a83ed65e4fb1977a c6d17b84ef6c4a9e966850ec833c4bfc17e15da6131723f22fc0d38902082503 a21c5947e9731f3558bbb979b7bfb65422961ef2b6108ad6177f29c6e8deb628 99a0a2a2e36dca2a54c89ea06d695156b518e02b52883e93b70ba63e3768298a 19529a141086b5d46de37fc95895360c379d49563d5b513323e73f0f5750436a 885304c3e892e3e6e167676ecc691c6736c7116bd1157a1201495e0556f31381 669a20fdc713af31cedf7272d21db31b5aa85423df8a845e4b7c8034ad697d40 76a8600153d9159a0c37901560f168f01b5cac61e19dac08186a5f5e5238c1f8 16f452baa3077f54a5b66861913d097eb2b094e3da19f8af2426f951b4c22701 d3fbc5b432d9fdf0de1499e9b29504f8f6e9d313b519d64c43af35a906bddfe0 9035f887c526aacec04bc44b5376dabf82c4a0f6c955ea3650eb4c416b3d7a66 c3bef7b57d54d7c9cdf02ccacd53a5d630d1ffa76114cfe0bbc5889fdad5dd6d root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkit-0.116-3.9.1.src.rpm config(polkit) polkit polkit(aarch-64) ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(polkit) dbus-1 ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libmozjs-60.so()(64bit) libmozjs-60.so(js)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpolkit0 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow 0.116-3.9.1 0.116-3.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1
/usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2
/usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2 b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh ibs-arm-2 1644329908
! " # $ % & ' ( ) * + , - . cs da de hr hu id it pl pt sk sv tr uk zh zh 0.116-3.9.1 0.116-3.9.1 0.116-3.9.1
! "dbus-1 system.d org.freedesktop.PolicyKit1.conf polkit-1 polkit-1 rules.d 50-default.rules pkaction pkcheck pkexec pkttyagent polkit-1 polkit-agent-helper-1 polkitd polkit.service dbus-1 system-services org.freedesktop.PolicyKit1.service polkit COPYING polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo pkaction.1.gz pkcheck.1.gz pkexec.1.gz pkttyagent.1.gz polkit.8.gz polkitd.8.gz polkit-1 actions org.freedesktop.policykit.policy rules.d polkit /etc/ /etc/dbus-1/ /etc/dbus-1/system.d/ /etc/pam.d/ /etc/polkit-1/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/polkit-1/ /usr/lib/systemd/system/ /usr/share/ /usr/share/dbus-1/ /usr/share/dbus-1/system-services/ /usr/share/licenses/ /usr/share/licenses/polkit/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ /usr/share/polkit-1/ /usr/share/polkit-1/actions/ /var/lib/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22716/SUSE_SLE-15-SP2_Update/ec91c1ce954d2da72110deaed7a67a5e-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 aarch64-suse-linux
directory XML 1.0 document, ASCII text ASCII text ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=2edf0678210bef49ef8f6e7e3009b2f849919ba8, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=3dbb07480149163872ec9568c1a06a799f6a8491, for GNU/Linux 3.7.0, stripped setuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5aac2f5c8671531f8163d26663301971b031fcfc, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=a334531c921e362375e527807dec868dd65787c6, for GNU/Linux 3.7.0, stripped setuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=045f7315cae5971406d50acf45827dc2e04ebdd6, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=e26324610b6fc20bc6b8e387751941112d61c743, for GNU/Linux 3.7.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) XML 1.0 document, UTF-8 Unicode text ' 1
R R
R R R R R R R R
R R R R R R R R R R
R R R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R > systemd systemd utf-8 436cccf4635129611abababd1b13a86de07c0ab48a1c11db8284a3c8e9b7da64 ? 7zXZ
! t/Q] "k%Q0wD8iN9QC TE+3 Z0Za>wv"b߯3k7 c oۊD1 T^q鯱t"1z:C@"ҶdzhU WX.hz'Lts+`:y WjRNBK4{tݣF,b"i96ٓ{(OP{~ e
>n[n2
98B7m*#Յ2Ig(W(p#XM#شAIl'_gcXv i;:7Y7źi ⌊zʻ?nxs=zkx+ܶsW5< /ЌӠ}A@1'`p)۶ ߗ]+=I [ rb8+T'-PU"psF=ݕy;)|۪0M3r+ѾY ˕7+;ʤOt).龜ٻA1:8i-I6aIc~2N㜙"${/SڌUI BөiEp<5i 59+ąak@ 6wE+݊D}Xx 9vY˓N;yڬSqx cܦ 4#\^\樰q.0MپЏKKEu K@/qϹ}4W+hblHUӞh-aE(J"N\PDT#O[[^TUHSAP]b$'o 6@֙=Sr4Tf "ba.U4I}F9-{
@ %}mc_($z*/w#^rJ Abh6v`tA~e'uI _X)°p8M{4X Xv-ὒMnKӢ deۘ$4ͩ{kY%zr p|6 D4F ݓ r#+x90S=îܘ 7 SD@;Fkj> [߆E G]h%?\Siy
*ZTGb)S+z`B`ef"OOh E.!Y*;lU <}!:_\m6c)NZ~ N6uȡ=azB AFL 0epBdj^VqS)^Ւ-1 \AŢx!ʮLQ@L ;bwYFz.z$2Oe˪ ;#54{$"ܟ,3ג 6gt# 0쬓4/Ύ"6f*M8 , dδ͕۩ D H" m2xF(?PX\SgIoD5Jl6
W-Σ N7 RѽB(=7ZOhI&s|&7˩{->v|xtRu\[fled.
%v '{Sgmk0̤KG];m3
z
Y({r`GUו=ˑCN S~(s]:
)T!\`#
bՈEɗZί,u5^?9r=w՛# _j96 1PI{ ;{ *} G Ƣ>N\K#iB
^60\+/\
K| Ĭ|-l []ڸ*c0`s>BdGcv<]s"fZmeB=818S>#EW@^ 풚rsu/fӄP7hXBi*dDmRg>m
}gҸ9Ā{й]p|َO[3 =t@ɾPp?:)Go UMP䆩"b& / ,7$>UkKg&sBP *m.9DIWmd]*I$ $\&HE%5sPwOWΑ zC-w; g
ֻ8
kc1 0;F=/ jI](+DK 9N@gTI/״//TRT6caS/'~ X Y(9Y5+}"@ʍ!1}* ut IŲeV0s~$ 9POdԄ#u/ʯRщoqGuN:|JEˍmڑ~J&Ex"n=b tR>]+[ EԬs^U ORo76 0xF6ϭۜP oyՐa+ɺ-̨D 8xza=y4\>E5]_9CS6[I o8#0eR6Eݤv4_aleUas;Քf`իc ;IBCkҋ,BUA"cQ̭<ė\9Na-S~
tAP\M4j& >OJ le j
"8צJd#{Sqp&u9InbW
hBZxG5*:}Q͗Z *$Ba4ODsZ ^VV`+cz]wK Z;ֶGzZnq% DAޥQEIeTҺΥQWlif>-$( ,&ڢVHLFqr Ch-]?]9.?8-yهB'PI{ gB.ɽ%ϞѷOIiޛ˧
s
$m&ǒ$ o)/R8ZP[ʄptj4!eC _=sDi&"FAGjGn_eu uSw74&9A72#9}s@J9DAw?8b>o[}Jy43۞o-y휙iS87yδ<^#t X1wZHIYespf e \7BԙU=sjumR"[|RI00g+J;+KZJ|(
UR!@ŨIhXAkQ=o Tab:uyp ц}Scc81d ![Zސ3Mv`Wwr.fP®jGyI Yש~;GRu91ei?G}- Z+S`_5GFf1O d35 }ۮ n"P-{).iyDE:_oVbkA> [4 U?Eo~x4~w2$ZDhvrjdPCȉ47S7 Nb#lV (+SKG H^
_\ jQ3Cd} YqoeC7}|m(uZyO9.WOV_dz>,dS|]K$BU 2e_
$N^
-гK#"^\d\*EE2¬tfk5Ejp-+_\߁]c)=0D/b-M{]%
F>-j(R 6}! V
y>qW>v:ƌ8) _ ɗV?$c5ݵaқ7\K)!K2: s ?B"m9e ÿѳ̓# jٯR)0c" /} :Wm|7'c"ԗ;+W̜,kRgìĴ
]
% #-Vηwr( ^R)>$Rq>*sD!aX 4G[/1Ոy zKtTj?DJciz\0xp~r =@PW[e@9{l8Nj܄lftz ӠD/p;p+#r |1T.1ctrUtAT~m9- нBŗ LՌAt'W*% @jf-`D6Qڹ"Ԁ 4VZ9{5l:
Rl G$ ".e]Bwȧ~-j ghXRJoΫ/~ynn,>1R&O | :pb_
Bcgcw 3(ώi ZDvⱧg UN@ab/PH\zպJ &(R -Fz#O?Y4v 滋=LrNkMP^jM
gsISrJ\vaOf|(uS,_;á JRU/}֤NGRI2UJl𤱸|bC WP0N/0 !1w[*+P 7ZB+Np =O
jo l 6 o0!yWJ&x]yzb|
[/q t!4u$
Xcc?/DRKpPXtdΈt?ŔpԀsq;0S{r{YCb=P9-\
"gc`zFc)wL{XƶK pV;a,@ fnm&:&_ \6p (td1mrI,.5ZX]h+}2!q'%żиR<8_T*z6lpҁ<_
YlH584jW776Y$c Gd$s=F9,=?N\+.d N$nT.r ER,WfOuk_oPR$CL5L'k8 4 kKՎNuĦAV){C i4FO'Y(@Rqz do{$=PYm!5aP!IwX%樭kio M[L*UnG_r H'4.D7Kz(>Mw?tw:r\33Nbh@7c= ( |A@9?Ц KHfAkBA칥zƯWCȯc_cЅCXV VD¼Z){g1o}.
ێ PъW"Qɇ 2E t:-^~`cL.<>Ɠ?D BYE2 [DwyN1 Y-J@SB$ TT-' 0^it89~$J'HP#> Ah`u: Gbb«fl^2AaΏu NMTa3NѶf0DjB2 tb*Y =! )qƜ۾ܦ:Y yxN\x
'#a'oCq\gpRl) \^Is6b![Bj,D6EY>
tbs)vKN6}qDx_o LY`IK|ϑÎصY %&#ѓRJA0N ,X5`/u$zR56 "Fu^2Õ "(x`; GP~\')
a<r"yEzdwO(/ ǵ \qQqѥK;(n )VwmK4N-A6:lBj=%,O&aXQĵg {k$8V_LdSE{gvďRpn6< qsf~ z1 Tfn9Jڎ-_G{մo=
MWC).A7Y^Lo[2j N kG>?S9"Ub8>1]Ȅ
uUq*J6b6h {
e5P MՁӨӳZ{t0 %U)rDqcB+
I@J ;.vՙFR! oh&-%%zGuhia-/
DҔ ?~NZ8Q=!\*Ќ`b~L9 T&HDQLzkU0*
*+BB ܙʙU\& ۦ`mj7=NFw'V SM <!R;Y]F7dQL`5iO!A5_7 JK/Nju%O" ( 1sXk7z P[ E-0EUl~PzOVxZx =c1=. ᶒW =e@VFС_ ́*ސh%xWˊTmGnp茏ΒZ-*nܶW_P"R9/ :jq0˿E (5&u&p'HCU_/RD5j6p!$BrjmF/96qKc>Sp $\jwTЌ}V@A iofMS+p(RLR σ- ʜ|759 )tvirW
1h`TG[N' 4J i7PRSD{..sYj,9 pę)~B#\ S#
a W85 N\$+r0&wHgMIhds`j*x ^s 7,n!j.tዻzr~sBu
ʝ7sй .d?
X+)rGh׀k(`ѦKTof)gz17ӉAWB&a&Kq+ H Z [ZA|_)<~ c !
D,{2V>TJcԗ",]q1rxk1 %4f}3Ǻ^4%&JgV#n|wHDAM[ޯ#n!Euq2rX[%?Obz^z\^eq(V~<%@̬"^MJ w]@
>5ngܯt7p3s 5'LJ{W'}M unW> kod2#| J2, Ԕ#uQp&Um~Яv>9Yۤ?U ;n
CF㪯^;ZllWֲ㭥x }w8pu?OkE{|oe~r˙ rc
E>6?,z|1P\@OQ9b+bno|6TkO,عuk< JcL[-7O2$ #<@`[Y}W&'FMeec*0}\{O#r¸ ?p$[;K2KV ?U/Kp4R"`߳XKeH9rLL\RXY3>'^NAsk2Fhۦ) EuvJ\Io͟!_Uu48)6?.kF*A2]oB3A 1JuacHA"*@\:֊㌷k tMԲ]sQuN*FLc ١-uW[2N@ZXX1n@")䅑wi! AWLͬɸIϑuCѤK 'b:m9voQ0,km "$ B1Q
E/d#\d)T@Z1gȃ.EQvT8,V`uCfXp^I&ewfl ܡ9Mz =Ki]gis.)H mUW{SrKyVhFiтB 4r.b_*&KHXBL!w#LXLُeL#*"TQ_tTC@W/)ea}m
6#yoP]QWs
*d )Qj:ewόNxe fx(1d⭟qZ?XXιfܲwIP·b6ӛ]ܥODu)A(rh !is3C[kb2 #I+U@#v-ysq
릭W 8H?leM}pV'8_b_·?@J³o{帬d"~uȴtE)zz(/{&ƠsBd ;o5t:Gpę05,/XW:n|X\: G5KovKВ^,oͫ* 6s "Rd+?ҁ?
+XZ F6ʝC_J:") $| Q>O j;ĸf &$╾hv][4 Vح6m0 Hʄ) W)WnS(oѻ C M\; k̸F~a ՖQvE
^tXxk?=N1̙{hW&LU>zJ O@'^;+g;5Nj)V@vuJTzc+[Z[Jce
j{$>i|d+/ ՔGD i?#<*l=: =ݿ '%C̍µ'Kf|w~;z[#Z ~jd^ m!YL'F j)+O4 +ZX?Z/rKV[˹ttSGwɶvP־raFU %{_9Wð@*]!MCݬ'VW,-u9
HR h%I}Ʌ,Nxbj]y'* K͌Dqn+Py;m-6pJ">KkBM'/yZ^ ["twЇ l;퐁'h2rPq_~r~4*gܓ۲:=:'b`gc !&Gj+ӊ\IIV%PL) (E0
+V)Ui?s5=@.# 2Pb0 /^vt oI&$unG8 iG`~yM,W,X:"P#- qƌlS쑅@-fjH$4\0ȉ÷ D6jM%EU_J"Bm>NG[
Gr2!&f=㸣6 冨t#wP\̻v͈&m
V^ 3@rlKz^D 3`" j d&`$`q-FVI+$V _i[;m"O vM?aWFOƇv=2B ȾiRF-NBXsا8 #A;͇wH6f
#nA3m]u$
,M S4rɠ*CPķx6ы` 7qp+aͿ%IDZG*lߍf !cIYB9YЀ|'㝄tе> b_IzcبCTd<־}*vj̞=JJlTr,3* -܉>TGc&ԫkkO| LDJ~8=
eh\ʆJj/L=+\I1'
~k7() ZTU- &r
cE0#jA4{=QC ]Nm^2D~w~HXk0
ie+<ß6:WcgN dl>:͉GB Zj;p|
8` 0B) =7UԚD hd_z U=v3d oZ|k ^av}?Di> 3Rl >
# |C gDb,"9HBwoYnM_ {y:)ݪǍaŰMshndD5DL
g>^0
+~[rҶal*-nOrM4Q ^kgoYȜLuXkَoOlwbJ?NGYɺNA =@_OG"{*߽%ef*ی).J5.!@a8 ,W0]|8_e i漐b8#pJ NkdEpJQiu]T_;=' ºЇ? 62/"\PBO}
#L9n#uxTV[rܥV[b+dPU).R7Fjbo]ҠαD)hϔ3l2__ B^02g7Qi*M=.Q4 nUGQz&x\9qel5_6xPݺR`o)W)pk3 ~V |lAn/%qˊVq1zFYn$E]D1g E(Q)hgQK Y O`4ܻ6\vof=݈@UR# 0 b=O"> C,eȀM9dKvr ? Ǡf_~Sߔ&ࣃ>-moݘ [%Rr Z} 07REJDDz)$s聮Ѵ&qJ2m_~4I}dzGz1/"7ߧΦ\2Ā\ҘQs
oO mdJi^ Բ]@n +degT E w[Uݮ1ةixqtAʗb~O2m]"kYxUM4'd?Lʶ&)>&) NOgr˞'WhA1w WFzABh uBq֞'}3 %⾹hpї)JÈ.VqڮaR{RZѾ [ 7pw(' PԠ }6Uog"̥֒Oę1{{7?2E}`9E 'ڴIEY+jW( r>52=U
4lㄨW y.+R1ɾ
@§_
po!>aq*Q+-,]:sMo$lS4nMO'{c$ŹWQ @{u'}d<*^0G皴wwo!h6
85 r^\/wD:HrXEJZw'[-é =KdPqw >=r̪@*}fR8N@ $/}h36GML
﹉s8y)υK YIҤ &\RRaxD*MެÇmCxY`ؾeˌAnDQ> ^z!vyX{%Z.ڟ[
+ckP4gN{d
1C]/Zh.;pB(ny h~/K
T X>$&U8DtQC,$yO];/F-79@FeRVlanNQ皿 е-`=+y$s6lѫ| :CZFwF5s6lQͭ:iw`rk\ OvIG'ۡ9ȿ^\} WN ~u5FK6hnZx<`߉zMH ,r"l]QB*~BX쥿*E'd 0F7>>3R< p_f:%i5\ ]$*㠤" [AW85qXPG\YN 5PJ$f #q J`n('XlU UR'# C\ZfGqR/Ӥ3]"k,Dc VЇ i֩{Y֖sszq?6Hs +|> < y@T+//E9T6y&ƅE"=P~e&>p? K )n(!/3>z=¶uHMVS`Y<\/"JCNܙB?(V|-OK㣴Mkz5c~(Ѐ3TF! wL4=|H`'΄pD}_Fm|If ID}LX^e+p+Hf( `}g
Avl@Pruԯ&w sqoJ7M(guM>GY2:((0v.S4SɯX5_tUPLv;^qUǶ{aó U0ր\'my'Xf UcƿfVA3l2 <tExb:*k x˫U 5) G2'Q c1 l^z+NM:>F{o܄躙IemɊS1طV
Bpi,O{79 ZdhY>͆5(~ysAǫnIP!ED}7fl"݂W&RZ|ݓHS?G^耎"yK"m _JE
|gY4:L](ދ&}];HSmtn8Yw ~T4 ~ 4 U.8DsJdtHXHJV?"P6!$Et_ȁlDhCԅto 髊V-Dх
dm .5"tݩ#t/ĭ!dwX!)D|$Kb3e-#p{OS P !Դ
oqurV2e9PV'G$ 6,T
OXz;c|tC I" ipnfಿhuv.U$p`|@6) n͞%D`/^Qy
eE.X3r
v7 JY+ c
ѡ;oE ~*s" 5!Z;>A7 , %R߈ɚHTş"=z:aI'!5Tⵢ=y(5lXEѡ>zAQ jĪdռ/ 3n &#nzmH\#zܲ> ~ezh|E!V l-- AT!xS(*ߠ@6ޢ'.;<ش~2W *08-=og*Uk,P>)3_l(Jj]ΤZvЭꦼ댵eP:ޜ@S 2؏ _a)@_!ˏ` '52*D ?/12݁mD ,{~1V tKщ4z@ꁳThч<,'|m PاL`JiBҤx~Ǻ(
"!I9Q5 ,t |ܡ! Dg9R#za,̲Jp?2d.״ܣ}D Ӳ%E] FS&z*X? 'bGޞ S\şu:?@:̏Np8OqLUʲ̂zis^.}^_z58]N&õxq"}[sW`"-s[Z{(x r#2gk>eϽWڗž[nt>Sg^oB .f ~$8B 2N'&T$+ahNZ_U1 Q\5qPԟ^+zL.FV_öcG*zğ[8_ ꍪm PdO O
>U B;öS\ 7?;:5-/IHM%% йu )~ Uo =zq ;~Ţ 6 15ne/ \5 kğϯxR-~W{{9$+,&pkӢO8(RX:-u
LE
QDFȷ
0a?9|҆5NoCXYd.EEܡTm 4$2]@͚AyurO҂5C n'+*j̀uPD>>',Knr^]M{ w5)Ȣ ( T0j+ĥ4| ~e᪑'{ |O}`;1ҝ+:<5u5Ƴd^l"PM=61)c\ί:m'P쳨ܛunLj' N34u[#@\W#X%Q8iz|{1S4e6~xwCk`ι9Vx. 7=k-f₣\j@-&W K_rJ^(2|z_2Na 7i"B.3kz}nu5-Oxi76T% WtC& !:6'|#QǠ- *EK6Lc5ucVlzmܡf2 /ŒOdM9Yp(P*l/kؽr҅LX9Pߗ2*8G#b{ ˰NT2SgW *L4,HBC^7ekx:+Q0vjsH,"y =ЩW|WR2!`=)2>V;ƅ@7A=+# Gʗ;蒼z'UrAq$sCArU:%_sfSɟjy q('VӒɱw8%U U UR#]>7[c Ne-mP}/Fils ;ɫ2s3 1Q]=ۓ/Rpbۑ%fyʞL`|?.oF"Ky$c,d D7pQNTP
pVfDR
(VX8̭ d{2{WIaU%yuM"X}%iRd]o^Ӳ*]"9 0 D#yu:P);F @5ff9POKDz2e q2 @Z_=|%BX+LhBU2^h 5H bfh dPHnu3h4T3ԙN.xsЗQbKN\AOM ge[ʕtu* 7ّ;We< T>gaQ ُuaH*[.7]|\|lT߹\0fpM
̔p`5Aɴ7ps2{- ;^i|ԉŀueT VbJ'2'. i@*(][/yDZ>7Gx%zRдobtY
#0N˴I3WrlxfKm?-%gxARmJ}`` GΏ+FMԯ'v̈́h.Y_2g -m[r
ؐle |k
.,Xyp{zif1;֜<* B+NQ#s _tb3L r8q5x/E,7 H@v,DM #j~CLxڒ`+Ez+?^.+ ?O]ڧu89N <mܷS xNOUzu~RQ$ [/K@k6DŒMu(pQʺwKgEwٷl:LR3pvEWk>n-QtN&n>xÎbsZk -b^ EA}'wꈽ7J i>qN3I;1 Х*.ؙؖn( (1 lZiu3=kߛZN"8u-nc g ք/VI%v N˧Ǜ q*w8pGHXT+*4zc-k5HLZΊ"i" =ߑh! E}# w3fkH ͉/)k˜q˃M~`#|2=]F&1w}{eK{"EnQ46" Emx?Xk+0l )S!bpc;bR~9P{Bw|
/*(_l |8r)4#SeRF4_ӤCa.PU&]@Wd7p며G v5} AF+; RXkgv njn@h):pM@$罹WM uwIRZvEuy^@ tԇ+4Os0 N t
`"~ob |eĞ&T7 *j \G
v7) ⦓dF?/e zIpOcu\YzEthe`| ZXHKZv$%XRP ڊ"k=
qv `oe^| #GYzO\ GI/f_
HG!e-}V*Y}?c$k./2
nSzΡjȫs-ݛaZ"YbۈG?F ҳ " ^63}AA %"\+('&UD]~69wߏH~
KBL
z, ~#c\+\Ňl8QMHU q$BV#
20vILVk
}WWR~sE(;?c@tM]$Cty,wΣTQh罕R7B 3eLD ;Z RX]NT:Co.0d(,/~cQVP _GA۽2 rڤߵCEHa߱XkFD&XD7iʕ`>v䎎؞ѥg$1kC`zQC }d NHO9ԡt`.U&A+oPr3`EQQ hGL R;5NW.>= OT3O;aKt3@ࢋecѢMP+a֕mAoU<[JM);U"?ϋ Dk& "X 8e pnȁ_ XU
4ij-*㞔gN^T/Qΐ>dp
u
2½Jgۜes4 <- 2v0 !Vլt)As=pk[. ķbܓP@g8i8]C\7AL ,r'S(wPo5i s;+6 :nB-E/4vu>aVzEa RgPZ?K>p
Q~py7-*`ۥՅhZ
`>+_FD[MGN&8+:!"Sxd}`hK
Rz_ oAS*9m
^xBW*Zb"u&":K}%GuZӼ'u ,{fve5/ ZC`ȿCR[ Y Iy #ڌkY'j+x(}û"/]zNbaK%$@:!JVdEX Gv!"sĬ 1{ֺw5Q~^'@f;ҝ](Rff(HJ|LߐT>:YpC*2;:$pgYVKQhq l#
vj]MLa ^z2j
ok{.Nksܒvl|zu9FIlMk(=0Mp:
(~5r^DߩQduի%ә .& LrqAҺ;hMhs3y=& X6QkIRALuޞ Ǫ %57X|*ߏ,¸3A.ۄWϴ:B*# _-jJ 3 ٴ{ $ٛr.̰
B wݿxƷ5Ar7_ř%H~ 70Bn>
T4M =<\'p a9MB=9 /~!Py}{ZBz؇;v̎z(B( 7"{}V Ipa&xP4Iw)]J-@;N&Wr <2;H!Xi\\H*;ZH5v8 D_cGJ ()^lʁ%O"8?'.A ]U i?1Gxw 6P¬e)gG~a΄iƵ١T R) Cʩժ*sVk^J t:-a'Ys@Չz;r_k|R*5 y-8[ sOߕ^}?\_`n,ʎ2c8QRT>h ܭa;P $꤅B('.T`<l&XÃVQ rV$H8mNInjWOUS;5w$#w 5;w"]߅7!|m˲3Ӫ`ˢܟ.wu$x_j $+ٶbĂ
s>-Tt.<5| ?D/\N~
q0IC$*_Z"
ސ 6SxjUvuἣTR2 {;؝%C?-iՙhV،˝k
zVP" .%F3Ҧ xj~82fleeDq#z ݉a8H핧QDC|oD؋FW3CV~6I54#8 Z Wi}&&6h" 'On϶ E̓FbvOW uqΓ@\EcRqiNKߣ %u>B ζ0wW@VhVr'@hfؑ*M䓈!}3)8'A1L VjK猖AG$ 1.ǰ#u˩xG$%uMAS'oW GK,bN!G#:|]th P`l5-QJUٝ( OZz'9ϞUr(D#S)}C$m0PY 5!oYX'᳇93_2jG,;b܁PJKxh*͉ _} jSp9Niĕ>R7QBppת,]גd$0]((z!,,N3;I6o:1XD%k%XR2B3?EG;Cz]`trcY :ljX2ݲ#pL ..TZ$WK) TwZRּN+ᧀY0z2'wh l (srWoC+ʭuE ǭ[R$ENτ8*rCw3IYH~ӗ(kST;xt5pyB7 r9m X-iir50<ᔷa:OIEA^+u &w)hv? B
d߇
"{OrЈ, Λx| boM
u[ _Eڳ FsA TO:5!b3U
iJFɠZ cEI=Ry)(lY3Q`PΝicPUn1u}8an9.r]3 p` AcLY5KKn頥 WNy h"As>Vўc4 a<[)5XÿׅZ]gjݼnyhDD7
xl>N)Xf ?"I|̜@{txG]Q46k~U"mo0x
2qY
b\lDaBN©i|si)6vFe3kYl0FtuI뾃Ɯ#vA?1|c JYH<Ԩkd~5j!C`~*rݯ?G YƆbWfo<9:$cY8hXȨHAjo8ۀHQ/SFt[)Ba;);/R):7
q$ "hVcش.V. )#1gřSKo6kI/XڒYnY<ͨ7! 7{IOߓY$\yΟtzl&x?Sk&<}8UWN5qn4`WA//6d;k֝ z.DY e:r z# '`k
f]n:u
هD'0oEZ!-9
ePz
(9iQs ) d.ƶ?0.č +{# vz$H/ :8! -尵AvAH[2Lqd/qfo2zY*T)D-)~sMZ0E&ede^ (3
*[E BWwGc7N
ϧ
w)}n{|vkmx^
wTpQ JpΫVѭ@BVs WhWJ(/0ٻV oo'?JƦals5n,@4O|$v ';nxӖ| /WVUEZ<L ac+dl Ƕw|\8.eesdwa4v͎mmTs 6qpidt}of:RҊ BQMcP\x?
%2 1+F>QzZY`+%t9x lgy^pi~ӽԓN63í1IXfUK楍.L*v p}%!es Q7 q+փ gA_eu.ngZzRkݝbWG@A6,mx>WZ㒖E!|˯"F27δcmz$SzjP|G Нq7G2=8;! oZOI})N .x lC{ *5ʛ_AԒѰ¬12^b\bQg5Z[ȾW}*wRh8%&RĥZQ
MYkX]DI,K>/ aek,{Sq6pЎqDK1FggN7Nf Zؚ(4 /HX6nuucŷܴ[b2 HbtȔܶBx/o+!t?cOHm BIb{zQ)J~&_KտF;[ ~jz]7e5$rm2- өnvY#)~F2Z8CgvEèV43&uE("s9=t>W!.ŝ圵&' e4Zٰ
K c͑p"![\
&\uEL_O5Jw:|щk+
JrFI͓*+TpD$ 譥пw&^@ՏCI@e?m~ Hةl%&^`>*)e8V&5-6/%7,! تFb(ȝ25'Pq=J2;D#v^H a8\o:!SZYYQ2̊% 8Wu "{\[1A!@XKQOH!PXLRS49">:r ܵ_PT^-]Ҏf w"Ulg2UH¼
E#E_rEQ=Jۦ #j8{Xw:e FY}N= 2;Xզqo&=Q`Koֈ IAl&YDk:)]ke0A3O
|AԀN,69 n~ҥ#BmAkD/)c՝54|A luP9~1:ɿ:*#]`GJ`*p{1Pē8cnILnCRM벌Š`g&ͅg|HS
2VH9+p=<(~rr/,_U 2qN&r 6leҘǎtJ gB
W# /Y0mҝ::[_M$G:VN eY}
YZ