dbus-1-1.12.2-150400.18.8.1 < > , ĉ d~p9|J3,,yuܗt/ =~S=\'Syނ)ؑ &8,C8
"&iA&$=Y+l)NZ1ޥѸAA$U?w|ڐg3aLc]^@c4e$AR
Th|d);lڇ؈& 0yM0enWRSEw'{, $}y,i k-Қ8)?8C;9cL\vJL > J ? d 7 ' D J R Q b = = 2 =
= = =
= = ! = #4 #X = $L $ % ' ( ' 7 ' 8 (T . 9 ) . : + . = > ? @ C F G = H = I = X Y $ \ d = ] X = ^ b c d 2 e 7 f : l < u P = v D w = x = y Q z 0 @ r | C dbus-1 1.12.2 150400.18.8.1 D-Bus Message Bus System D-Bus is a message bus system, a simple way for applications to talk to
one another. D-Bus supplies both a system daemon and a
per-user-login-session daemon. Also, the message bus is built on top of
a general one-to-one message passing framework, which can be used by
any two apps to communicate directly (without going through the message
bus daemon). d~cabernet SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later OR AFL-2.1 https://www.suse.com/ System/Daemons http://dbus.freedesktop.org/ linux ppc64le getent group messagebus >/dev/null || \
/usr/sbin/groupadd -r messagebus
getent passwd messagebus >/dev/null || \
/usr/sbin/useradd -r -s /usr/bin/false -c "User for D-Bus" -d /run/dbus -g messagebus messagebus
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in dbus.service dbus.socket ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi if [ -e /var/lib/dbus/machine-id -a -e /etc/machine-id ]; then
cmp -s /var/lib/dbus/machine-id /etc/machine-id > /dev/null
if [ $? ]; then
rm -f /var/lib/dbus/machine-id
fi
fi
if [ ! -L /var/lib/dbus/machine-id ]; then
mkdir -p /var/lib/dbus/
ln -s /etc/machine-id /var/lib/dbus/machine-id
fi
/sbin/ldconfig
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/dbus-1/dbus-daemon-launch-helper
fi
/usr/sbin/update-alternatives --install /usr/bin/dbus-launch dbus-launch /usr/bin/dbus-launch.nox11 10
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in dbus.service dbus.socket ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
[ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] &&
/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/dbus.conf || : if [ "$1" = 0 ] ; then
/usr/sbin/update-alternatives --remove dbus-launch /usr/bin/dbus-launch.nox11
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable dbus.service dbus.socket || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop dbus.service dbus.socket
) || :
fi # immediately restarting the dbus service causes issues, As such wait for the next reboot to restart
export DISABLE_RESTART_ON_UPDATE=yes
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in dbus.service dbus.socket ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart dbus.service dbus.socket
) || :
fi
fi + | F A H P
`
f h
F W 5@ : q 1 ] AA AAAA聤AAAA큤A큤A d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~d~YjYjZ Yjd~Yjd~d~d~d~d~d~d~d~d~d~d~ 9e984094dfb1060dd844d32e216d47929afa37e752daad68f31b006d4ee1b11b 2218b9313dc6d2e07d85751f318124cc5138787358ae1039703321cf6b35602a a6f50dc70ef082a110dcdb164579cd2af221b90226c5e0aca237edcad98a1c26 f6e37e41d99869cab312830c787e780a783b396d111d5de7384bb496b6cf4672 cc42c22f86a1f86c7dbadc24afab29ac84db61f5c84c9b6b72cf8b798ed24ae5 b84a8dd271c3f6dadbbdcdd6198f3cd41a18f29d43103b38634c92c0ea55a921 43a0e931006546bc3730bca4de530051247714947fbb5b1fccbbe55b0c0641b0 a78139626e0a70195427e5c8a5a48bdf83e07478e263ea7aaba8459204d43da5 ef93f35b3a493c4b5af62017c3f702b34d58f09c6cdf385f535baa8d896e952f 76bfa271002ff71e22998a6e4296dca82623b1ac0b5bc3e6b4819d175f5672c4 403e6bb57875824bd1440c6543909f504df0226317839f84e5573792e78017a9 7d91ee170b9339efc5f688121414517d0f45aa2b3e58bb00ff4cb40900f15647 6d638915b6c4f4eab926fd144b344834afa27caaa69032362fef4623629d1049 0f2e827b4c146d8fc7c0cfb5348056916e6c2b057ef40d77d55320472bbaccca e05359bbdc083b8db2b49542b26429166b5e13367a63668a4e8ff8a1b496f7ae 19d7b51e1e6da255346ac6acbf95627baf14c324e84ee841d90fab98bcc0e994 2b7ac7357065180d1c2f3f00c11d17dadd31cdc3d7e59c623eb733beb3e50cef 8d6c76ba6b7eaba0c987ab294f3534f3603dc5717349271cef7f46e7c530727a bc7f3e09dfbd851b91b2b70d62730ce4e46323718ad35d635011689940ef6f6c 206f009ddcf909422f3651c687b4623a5780fb7486c6d650e5332f57c00d6be1 18938a267987dee9ef442cdb9a5cba6d1e7303be93b0013b0948f20831921e52 22ad2317b7040e0aca41b5c9a04141aaf20143e15072eb19394248eb5f5e5a19 e2584de5acbe9ef4a792e39d9141c3a2b60fb592bf4d7c27cedd7bf8d201f4c2 484db3de366500912c63d834154173c7886e7ded484d4fe1dde4b62f6d30b59b 02757b6a8cba77f6273f07848aa1a81cdd02d0aaa0f86d3c73f2ecf548853176 0e46f54efb12d04ab5c33713bacd0e140c9a35b57ae29e03c853203266e8f3a1 886b4aff32810800181d5df4d8e84708fac6871d66bc1c5bfbc972aec9e4cf75 69612f882f3a3c635c46b14ab92560297cdfc27b06ca0c5df5033cef69991434 fd7a26327a299e6e4627ca4ca125492d38ca000b3f93056e94df3705761491c8 9807fafcce2045d75d28fe4668dc30eb542319142ee8ea594cd451130823905a 21fadc81993816f411a2cb953b6ea54b045ac9dda5dc1fb236c8de2eb966378c 2add6b863fa08cf65cf3306baac6baf4e363e4d8ff00d102d0b803c742c546bb c9f2504835cdcc4e33aca704fb48076e027daf346a9516be474117f4f32a6a2c e6c4e32e10ef56eeb286f35d07fd69d8b5c154895c6ff8774d63b0bea6cea855 732ba652c74cdd501d7b459fbd55e8d663710221f4d4f02c37534b20c6d18d79 /usr/bin/dbus-cleanup-sockets /usr/bin/dbus-daemon /usr/bin/dbus-monitor /usr/bin/dbus-send /usr/bin/dbus-test-tool /usr/bin/dbus-update-activation-environment /usr/bin/dbus-uuidgen /etc/alternatives/dbus-launch ../dbus.service ../dbus.socket ../dbus.socket service @ @ @root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root messagebus root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root dbus-1-1.12.2-150400.18.8.1.src.rpm config(dbus-1) dbus-1 dbus-1(ppc-64) dbus-launch @ ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(dbus-1) libaudit.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcap-ng.so.0()(64bit) libdbus-1-3 libdbus-1.so.3()(64bit) libdbus-1.so.3(LIBDBUS_1_3)(64bit) libdbus-1.so.3(LIBDBUS_PRIVATE_1.12.2)(64bit) libexpat.so.1()(64bit) libm.so.6()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libselinux.so.1()(64bit) libselinux.so.1(LIBSELINUX_1.0)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow update-alternatives update-alternatives 1.12.2-150400.18.8.1 1.12.2 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3
/usr/bin/chkstat -n --warn --system -e /usr/lib/dbus-1/dbus-daemon-launch-helper 1>&2 dC@cGaՈ@`#@`.`@]:\=@\ and rules in dbus-daemon configuration can now
include send_broadcast="true", send_broadcast="false",
max_unix_fds="N", min_unix_fds="N" (for some integer N).
See the release notes for 1.11.18.
• dbus_try_get_local_machine_id() is like
dbus_get_local_machine_id(), but returns a DBusError.
• New APIs around DBusMessageIter to simplify cleanup.
See the release notes for 1.11.16.
• The message bus daemon now implements the standard Introspectable,
Peer and Properties interfaces. See the release notes for
dbus 1.11.14 and spec version 0.31.
• DTDs for introspection XML and bus configuration are installed.
• [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
never uses Linux abstract sockets, which is advantageous for
containers. On non-Linux it is equivalent to unix:tmpdir=….
See the release notes for dbus 1.11.14 and spec version 0.31.
• [Unix] New option "dbus-launch --exit-with-x11".
• [Unix] Session managers can create transient .service files in
$XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
• [Unix] A sysusers.d snippet can create the messagebus user on-demand.
Miscellaneous behaviour changes:
• [Unix] The session bus now logs to syslog if it was started by
dbus-launch.
• [Unix] Internal warnings are logged to syslog if configured.
• [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
* fix-upstream-drop-install-sections-from-user-services.patch
* fix-upstream-increase-backlog.patch
* fix-upstream-timeout-reset-1.patch
* fix-upstream-timeout-reset-2.patch - boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
* fix-upstream-timeout-reset-1.patch
* fix-upstream-timeout-reset-2.patch - boo#1027200 don't generate machine-id in %post systemd will do it
on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1 - No need to set --libdir anymore now that prefix is /usr/bin,
* fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore. - Update to 1.10.20
* Fixes:
+ Fix a reference leak when blocking on a pending call on a
connection that has been disconnected (fdo#101481, Shin-ichi
MORITA)
+ Don't put timestamps in the Doxygen-generated documentation,
for closer-to-reproducible builds (fdo#100692, Simon
McVittie)
+ Avoid an assertion failure when connecting to a
semicolon-separated series of addresses, one of which fails
(fdo#101257, Simon McVittie)
* Documentation:
+ Update git URIs in HACKING document to sync up with
cgit.freedesktop.org (fdo#100715, Simon McVittie) - swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
* bsc#980928 increase listen() backlog of AF_UNIX sockets to
SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
entries
* bsc#867256 (No longer applicable)
* bsc#916785 (No longer applicable)
* bsc#1012564 (Not applicable)
* fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
* dbus-log-deny.patch to feature-suse-log-deny.patch
* dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
* 0001-Add-RefuseManualStartStop.patch to
feature-suse-refuse-manual-start-stop.patch
* 0001-Drop-Install-sections-from-user-services.patch to
fix-upstream-drop-install-sections-from-user-services.patch - Update to 1.10.18
* Fixes
+ Re-order dbus-daemon startup so that on SELinux systems, the
thread that reads AVC notifications retains the ability to
write to the audit log (fdo#92832, Debian #857660; Laurent
Bigonville)
+ Fix a harmless read overflow and some memory leaks in a unit
test (fdo#100568, Philip Withnall) - Update to 1.10.16
Fixes:
* Prevent symlink attacks in the nonce-tcp transport on Unix that could
allow an attacker to overwrite a file named "nonce", in a directory
that the user running dbus-daemon can write, with a random value
known only to the user running dbus-daemon. This is unlikely to be
exploitable in practice, particularly since the nonce-tcp transport
is really only useful on Windows.
(fd.o #99828, Simon McVittie) (bsc#1025950)
* Avoid symlink attacks in the "embedded tests", which are not enabled
by default and should never be enabled in production builds of dbus.
(fd.o #99828, Simon McVittie) (bsc#1025951)
* Work around an undesired effect of the fix for CVE-2014-3637
(fd.o #80559), in which processes that frequently send fds, such as
logind during a flood of new PAM sessions, can get disconnected for
continuously having at least one fd "in flight" for too long;
dbus-daemon interprets that as a potential denial of service attack.
The workaround is to disable that check for uid 0 process such as
logind, with a message in the system log. The bug remains open while
we look for a more general solution.
(fd.o #95263, LP#1591411; Simon McVittie)
* Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
was disabled at compile time. That test is not expected to work
in that configuration. (fd.o #98665, Simon McVittie)
Enhancements:
* Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
stable and Debian testing in addition to the older Ubuntu that is
the default (fd.o #98889, Simon McVittie) - A note for scripts bsc#974092 (remove sysvinit script) is already
fixed here. - Don't restart dbus on upgrade - Includes temporary work around
for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
start or stop dbus. - Add systemd unit files to start session bus via systemd
- Added patch:
* 0001-Drop-Install-sections-from-user-services.patch
+ remove install section from socket unit because it does not
need to be enabled explicitly (see fdo#92402) - Requires systemd >= 209 and drop the compatibility pkg-config
names that don't exist in newer systemd - Drop useless --with-pic which is only for static libs
- Abort installation when user/group creation fails
- Avoid calling %service_* more than once - Build the dbus-1 package without X in the dbus-1.spec
- Move the dbus-launch.nox11 to the dbus-1 package and install
it by default
- Build devel-doc package in dbus-1.spec and don't build any
documentation in dbus-1-x11
- Make dbus-1-x11 package contains only the X11-enabled dbus-launch
- Fix some rpmlint warnings
- Delete the dbus-1-x11.spec.in file, since maintaining it is
more complicated then keeping in sync a dbus-1-x11.spec file of
less then 120 lines - Create new subpackage: dbus-1-nox11
- contains dbus-launch without x11 support
- Rename dbus-launch to dbus-launch.x11
- use update-alternatives to switch between dbus-launch with and
without X11
- Solves [bnc#934214] - Update to 1.10.12
* Security fixes:
+ Do not treat ActivationFailure message received from
root-owned systemd name as a format string. In principle this
is a security vulnerability, but we do not believe it is
exploitable in practice, because only privileged processes can
own the org.freedesktop.systemd1 bus name, and systemd does
not appear to send activation failures that contain "%".
Please note that this probably *was* exploitable in dbus
versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing
check which at the time was only thought to be a denial of
service vulnerability (CVE-2015-0245). If you are still
running one of those versions, patch or upgrade immediately.
(fdo#98157, bsc#1003898, Simon McVittie)
* Other fixes:
+ Harden dbus-daemon against malicious or incorrect
ActivationFailure messages by rejecting them if they do not
come from a privileged process, or if systemd activation is
not enabled (fdo#98157, Simon McVittie)
+ Avoid undefined behaviour when setting reply serial number
without going via union DBusBasicValue (fdo#98035, Marc Mutz)
+ autogen.sh: fail cleanly if autoconf fails (Simon McVittie) - Moved dbus-run-session from dbus-1-x11 to dbus-1 (bdo#836296) - Update to 1.10.10
* Fixes:
+ On Linux, when dbus-daemon is run with reduced susceptibility
to the OOM killer (typically via systemd), do not let child
processes inherit that setting (fdo#32851;
Kimmo Hämäläinen, WaLyong Cho)
+ Output valid shell syntax in ~/.dbus/session-bus/ if the bus
address contains a semicolon (fdo#94746, Thiago Macieira)
+ Fix memory leaks and thread safety in subprocess starting on
Windows (fdo#95191, Ralf Habacker)
+ Do not require systemd to have a service file if using it for
activation (fdo#93194; Simon McVittie; backport from 1.11.0)
+ Stop test-dbus-daemon incorrectly failing on platforms that
cannot discover the process ID of clients (fdo#96653,
Руслан Ижбулатов)
+ In tests that exercise correct handling of crashing D-Bus
services, suppress Windows crash handler (fdo#95155;
Yiyang Fei, Ralf Habacker)
+ Explicitly check for stdint.h (Ioan-Adrian Ratiu)
+ update-activation-environment: produce better diagnostics on
error (fdo#96653, Simon McVittie)
+ Don't fail the build with an unused const variable warning
under gcc 6 (fdo#97282; Thomas Zimmermann, Simon McVittie)
+ Merge dbus-1.10-ci branch, containing backports from 1.11.0
in build/test code to support continuous integration
(fdo#93194, Simon McVittie)
- Avoid -Wunused-label when compiling with libselinux but no
libaudit
- In development builds, allow OOM tests to be disabled as
documented
- Accept and ignore the --tap argument in all "embedded
tests", and run all automated tests with that argument for
better diagnostics
- Fix the systemd activation test under CMake by installing
the required files
- In Automake, fix shell syntax for installcheck-local with
no DESTDIR
- In Automake, don't try to run manual tests in installcheck
- In CMake, don't run manual-tcp test as an automated test
- Add travis-ci.org build machinery - Update to 1.10.8
* Fixes:
+ Enable "large file support" on systems where it exists:
dbus-daemon is not expected to open large files, but it might
need to stat files that happen to have large inode numbers
(fdo#93545, Hongxu Jia)
+ Eliminate padding inside DBusMessageIter on 64-bit platforms,
which might result in a pedantic C compiler not copying the
entire contents of a DBusMessageIter; statically assert that
this is not an ABI change in practice (fdo#94136, Simon
McVittie)
+ Document dbus-test-tool echo --sleep-ms=N instead of
incorrect --sleep=N (fdo#94244, Dmitri Iouchtchenko)
+ Correctly report test failures in C tests from run-test.sh
(fdo#93379; amit tewari, Simon McVittie)
+ When tests are enabled, run all the marshal-validate tests,
not just the even-numbered ones (fdo#93908, Nick Lewycky)
+ Correct the expected error from one marshal-validate test,
which was previously not run due to the above bug(fdo#93908,
Simon McVittie) - Update to 1.10.6
* Fixes:
- On Unix when running tests as root, don't assert that root
and the dbus-daemon user can still call
UpdateActivationEnvironment; assert that those privileged
users can call BecomeMonitor instead (fdo#93036, Simon
McVittie)
- On Windows, fix a memory leak in the autolaunch transport
(fdo#92899, Simon McVittie)
- On Windows Autotools builds, don't run tests that rely on
dbus-run-session and other Unix-specifics (fdo#92899, Simon
McVittie) - Update to 1.10.4
* Changes between 1.10.2 and 1.10.4
- Enhancements:
+ GetConnectionCredentials, GetConnectionUnixUser and
GetConnectionUnixProcessID with argument
"org.freedesktop.DBus" will now return details of the
dbus-daemon itself. This is required to be able to call
SetEnvironment on systemd. (fdo#92857, Jan Alexander
Steffens)
- Fixes:
+ Make UpdateActivationEnvironment always fail with
AccessDenied on the system bus. Previously, it was
possible to configure it so root could call it, but the
environment variables were not actually used, because the
launch helper would discard them. (fdo#92857, Jan Alexander
Steffens)
+ On Unix with --systemd-activation on a user bus, make
UpdateActivationEnvironment pass on its arguments to
systemd's SetEnvironment method, solving inconsistency
between the environments used for traditional activation
and systemd user-service activation. (fdo#92857, Jan
Alexander Steffens)
+ On Windows, don't crash if or --syslog is used
(fdo#92538, Ralf Habacker)
+ On Windows, fix a memory leak when setting a DBusError from
a Windows error (fdo#92721, Ralf Habacker)
+ On Windows, don't go into infinite recursion if we abort the
process with backtraces enabled (fdo#92721, Ralf Habacker)
+ Fix various failing tests, variously on Windows and
cross-platform:
. don't test system.conf features (users, groups) that only
make sense on the system bus, which is not supported on
Windows
. don't call _dbus_warn() when we skip a test, since it is
fatal
. fix computation of expected
. when running TAP tests, translate newlines to Unix format,
fixing cross-compiled tests under Wine on Linux
. don't stress-test refcounting under Wine, where it's
really slow
. stop assuming that a message looped-back to the test will
be received immediately
. skip some system bus tests on Windows since they make no
sense there (fdo#92538, fdo#92721; Ralf Habacker, Simon
McVittie)
* Changes between 1.10.0 and 1.10.2
- Fixes:
+ Correct error handling for activation: if there are multiple
attempts to activate the same service and it fails
immediately, the first attempt would get the correct reply,
but the rest would time out. We now send the same error
reply to each attempt. (fdo#92200, Simon McVittie)
+ If BecomeMonitor is called with a syntactically invalid
match rule, don't crash with an assertion failure, fixing a
regression in 1.9.10. This was not exploitable as a denial
of service, because the check for a privileged user is done
first. (fdo#92298, Simon McVittie)
+ On Linux with --enable-user-session, add the bus address to
the environment of systemd services for better backwards
compatibility (fdo#92612, Jan Alexander Steffens)
+ On Windows, fix the logic for replacing the installation
prefix in service files' Exec lines (fdo#83539; Milan Crha,
Simon McVittie)
+ On Windows, if installed in the conventional layout with
${prefix}/etc and ${prefix}/share, use relative paths
between bus configuration files to allow the tree to be
relocated (fdo#92028, Simon McVittie)
+ Make more of the regression tests pass in Windows builds
(fdo#92538, Simon McVittie)
* Summary of major changes since 1.8.0:
- The basic setup for the well-known system and session buses is
now done in read-only files in ${datadir} (normally /usr/share).
- AppArmor integration has been merged, with features similar to
the pre-existing SELinux integration. It is mostly compatible
with the patches previously shipped by Ubuntu, with one
significant change: Ubuntu's GetConnectionAppArmorSecurityContext
method has been superseded by GetConnectionCredentials and was
not included.
- The --enable-user-session configure option can be enabled
by OS integrators intending to use systemd to provide a
session bus per user (in effect, treating all concurrent
graphical and non-graphical login sessions as one large session).
- The new listenable address mode "unix:runtime=yes" listens on
$XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the
systemd user session. libdbus and "dbus-launch --autolaunch"
will connect to this address by default. GLib >= 2.45.3 and
sd-bus >= 209 have a matching default.
- All executables are now dynamically linked to libdbus-1.
Previously, some executables, most notably dbus-daemon, were
statically linked to a specially-compiled variant of libdbus.
This results in various private functions in the _dbus
namespace being exposed by the shared library. These are not
API, and must not be used outside the dbus source tree.
- On platforms with ELF symbol versioning, all public symbols
are versioned LIBDBUS_1_3.
* New bus APIs:
- org.freedesktop.DBus.GetConnectionCredentials returns
LinuxSecurityLabel where supported
- org.freedesktop.DBus.Monitoring interface (privileged)
. BecomeMonitor method supersedes match rules with eavesdrop=true,
which are now deprecated
- org.freedesktop.DBus.Stats interface (semi-privileged)
. now enabled by default
. new GetAllMatchRules method
- org.freedesktop.DBus.Verbose interface (not normally compiled)
. toggles the effect of DBUS_VERBOSE
* New executables:
- dbus-test-tool
- dbus-update-activation-environment
* New optional dependencies:
- The systemd: pseudo-transport requires libsystemd or libsd-daemon
- Complete documentation requires Ducktype and yelp-tools
- Full test coverage requires GLib 2.36 and PyGI
- AppArmor integration requires libapparmor and optionally libaudit
* Dependencies removed:
- dbus-glib - Update to 1.8.20:
* Fixes:
- Fix a memory leak when GetConnectionCredentials() succeeds
(fdo#91008, Jacek Bukarewicz)
- Ensure that dbus-monitor does not reply to messages intended
for others (fdo#90952, Simon McVittie) - Account for openSUSE:Leap in the conditional for chosing right
local state directories (boo#941352) - Move common-begin sections around to make pre_checkin work again
- Unconditionally build with systemd features, there are no cycles
now, systemd no longer buildrequires dbus-1-devel - Update to 1.8.18:
* Security hardening:
- On Unix platforms, change the default configuration for the
session bus to only allow EXTERNAL authentication (secure
kernel-mediated credentials-passing), as was already done for
the system bus.
This avoids falling back to DBUS_COOKIE_SHA1, which relies on
strongly unpredictable pseudo-random numbers; under certain
circumstances (/dev/urandom unreadable or malloc() returns
NULL), dbus could fall back to using rand(), which does not
have the desired unpredictability. The fallback to rand() has
not been changed in this stable-branch since the necessary
code changes for correct error-handling are rather intrusive.
If you are using D-Bus over the (unencrypted!) tcp: or
nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1
and a shared home directory using NFS or similar, you will
need to reconfigure the session bus to accept DBUS_COOKIE_SHA1
by commenting out the element. This configuration is
not recommended. (bsc#931066, fdo#90414, Simon McVittie)
* Other fixes:
- Add locking to DBusCounter's reference count and notify
function (fdo#89297, Adrian Szyndela)
- Ensure that DBusTransport's reference count is protected by
the corresponding DBusConnection's lock (fdo#90312,
Adrian Szyndela)
- On Windows, listen on the same port for IPv4 and IPv6
(previously broken by an endianness mistake), and fix a
failure to bind TCP sockets on approximately 1 attempt in 256
(fdo#87999, Ralf Habacker)
- Correctly release DBusServer mutex before early-return if we
run out of memory while copying authentication mechanisms
(fdo#90021, Ralf Habacker)
- Correctly initialize all fields of DBusTypeReader (fdo#90021,
Ralf Habacker, Simon McVittie)
- Fix some missing \n in verbose (debug log) messages
(fdo#90021, Ralf Habacker)
- Clean up some memory leaks in test code (fdo#90021,
Ralf Habacker) - Sync changes from SLE12 conditionalized for suse_version <= 1315 - Update to 1.8.16:
* Security fixes:
- Do not allow non-uid-0 processes to send forged
ActivationFailure messages. On Linux systems with systemd
activation, this would allow a local denial of service:
unprivileged processes could flood the bus with these forged
messages, winning the race with the actual service activation
and causing an error reply to be sent back when service
auto-activation was requested. This does not prevent the real
service from being started, so it only works while the real
service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
Simon McVittie)
* Other fixes:
- fix a Windows build failure (fdo#88009, Ralf Habacker)
- on Windows, allow up to 8K connections to the dbus-daemon
instead of the previous 64, completing a previous fix which
only worked under Autotools (fdo#71297, Ralf Habacker) - Update to 1.8.14
* Security hardening:
- Do not allow calls to UpdateActivationEnvironment from uids
other than the uid of the dbus-daemon. If a system service
installs unsafe security policy rules that allow arbitrary
method calls (such as CVE-2014-8148) then this prevents
memory consumption and possible privilege escalation via
UpdateActivationEnvironment.
We believe that in practice, privilege escalation here is
avoided by dbus-daemon-launch-helper sanitizing its
environment; but it seems better to be safe.
- Do not allow calls to UpdateActivationEnvironment or the
Stats interface on object paths other than
/org/freedesktop/DBus. Some system services install unsafe
security policy rules that allow arbitrary method calls to
any destination, method and interface with a specified object
path; while less bad than allowing arbitrary method calls,
these security policies are still harmful, since dbus-daemon
normally offers the same API on all object paths and other
system services might behave similarly.
* Other fixes:
- Add missing initialization so GetExtendedTcpTable doesn't
crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko) - Update to 1.8.12:
* Fixes:
- Partially revert the CVE-2014-3639 patch by increasing the
default authentication timeout on the system bus from 5
seconds back to 30 seconds, since this has been reported to
cause boot regressions for some users, mostly with parallel
boot (systemd) on slower hardware.
On fast systems where local users are considered particularly
hostile, administrators can return to the 5 second timeout
(or any other value in milliseconds) by saving this as
/etc/dbus-1/system-local.conf:
5000
(fdo#86431, Simon McVittie)
- Add a message in syslog/the Journal when the auth_timeout is
exceeded (fdo#86431, Simon McVittie)
- Send back an AccessDenied error if the addressed recipient is
not allowed to receive a message (and in builds with
assertions enabled, don't assert under the same conditions).
(fdo#86194, Jacek Bukarewicz) - Update to 1.8.10:
* Security fixes:
- Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
so that CVE-2014-3636 part A cannot exhaust the system bus'
file descriptors, completing the incomplete fix in 1.8.8.
(CVE-2014-7824, fdo#85105; Simon McVittie, Alban Crequy) /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh cabernet 1687256719
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = 1.12.2-150400.18.8.1 1.12.2-150400.18.8.1 1.12.2-150400.18.8.1
dbus-cleanup-sockets dbus-daemon dbus-monitor dbus-send dbus-test-tool dbus-update-activation-environment dbus-uuidgen ConsoleKit run-session.d dbus_at_console.ck dbus-launch session.conf system.conf dbus-1 system-services dbus dbus-cleanup-sockets dbus-daemon dbus-launch dbus-launch.nox11 dbus-monitor dbus-run-session dbus-send dbus-test-tool dbus-update-activation-environment dbus-uuidgen dbus-1 dbus-daemon-launch-helper dbus.service dbus.socket multi-user.target.wants dbus.service sockets.target.wants dbus.socket dbus.service dbus.socket sockets.target.wants dbus.socket dbus.conf dbus.conf rcdbus session.conf system.conf dbus-1 AUTHORS HACKING NEWS README dbus-1 COPYING dbus-cleanup-sockets.1.gz dbus-daemon.1.gz dbus-launch.1.gz dbus-monitor.1.gz dbus-run-session.1.gz dbus-send.1.gz dbus-test-tool.1.gz dbus-update-activation-environment.1.gz dbus-uuidgen.1.gz dbus machine-id /bin/ /etc/ /etc/ConsoleKit/ /etc/ConsoleKit/run-session.d/ /etc/alternatives/ /etc/dbus-1/ /lib/ /lib/dbus-1/ /run/ /usr/bin/ /usr/lib/ /usr/lib/dbus-1/ /usr/lib/systemd/system/ /usr/lib/systemd/system/multi-user.target.wants/ /usr/lib/systemd/system/sockets.target.wants/ /usr/lib/systemd/user/ /usr/lib/systemd/user/sockets.target.wants/ /usr/lib/sysusers.d/ /usr/lib/tmpfiles.d/ /usr/sbin/ /usr/share/dbus-1/ /usr/share/doc/packages/ /usr/share/doc/packages/dbus-1/ /usr/share/licenses/ /usr/share/licenses/dbus-1/ /usr/share/man/man1/ /var/lib/ /var/lib/dbus/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:29498/SUSE_SLE-15-SP4_Update/f503f36d987b4ab1fd1a492788e3ba3f-dbus-1.SUSE_SLE-15-SP4_Update drpm xz 5 ppc64le-suse-linux
directory Bourne-Again shell script, ASCII text executable cannot open `/home/abuild/rpmbuild/BUILDROOT/dbus-1-1.12.2-150400.18.8.1.ppc64le/etc/alternatives/dbus-launch' (No such file or directory) exported SGML document, ASCII text ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=60948447489d298cddeb99dbc9e45737351389d4, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9e1bcbfaa77d936c575f11568edaf126410296bf, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=1f09f45470e7d0928e1f68525360f22cb6172562, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b9e462db6bb0a0e4ef8ad462254d131257ac50a5, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=1a80a5ae28e8b3cc7a9f962e97fdab94bc0d7418, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b93f72d1561081794396006d209ab3a5aebf2cfa, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f39d0e33236a12de4b285401b10ca4122b8b9354, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9d080a9e1f52e7558c23c39e0e36d51f6f8cb035, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=3f32743933303d8829bf7a346598233cfcc95a43, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f3c5453517a0908e1a60a609042d3129ae338a9f, for GNU/Linux 3.10.0, stripped ASCII text UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) cannot open `/home/abuild/rpmbuild/BUILDROOT/dbus-1-1.12.2-150400.18.8.1.ppc64le/var/lib/dbus/machine-id' (No such file or directory) ! ( 0 8 ? F R R
R R R R R
R R R
R R R R R R R R R R R
R
R R R R R R R
R
R R R R R R
R
R R R R R R R
R
R R R R R
R R R
R R R R R
R R
R R R R R R
R
R R R R R R
R R R
R R R R R ȅ0:oIq# See comments in pre
if [ -s "/etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1" ]; then
mv -f /etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1 /etc/sysconfig/services
elif [ -e "/etc/sysconfig/services.rpmbak.dbus-1-1.12.2-150400.18.8.1" ]; then
rm -f /etc/sysconfig/services
fi /bin/sh utf-8 4cafef3f9a03d8f20c04fa3969933d0ba85a68b12a30f5068e19330f6f9179d1 ? ` 7zXZ
! t/] "k%U4h/_b63"{Wm1ռ y*W"ҀzE}2bMpq Hr T$tѕJ}_LQX(H#rϰOW? ͒ߦ3, ӒkqldUVMDUl sl`yYWg$S#76k
tNB &$" UfsͰzw~uFkxo1~!\T UlήQIƫ+aɸ U1,7e@76u-Eײ!ۅ˭8ߕϫmG8 ^nu4ɑ2/%cF yI% r89_Oڸﳣ wǤ2 SӈN}Ctk'X j1,"bbBx"M0tYh վgeyR}t^L{`OUZN|
D {Aya C^m
HPLX?zˣDkr"w> iA & &C`3q}`yr\ b2bY)R Ԗ̺" Q>VfcnC?| ,$MբgE }uۻv_yF7-v0ჶ%3߇cbp^C(a SdG1[Hqؠ o [ۀHV:Ru>\ JN@0vCp+tJ\Q ԗsO$ceUfR(||vS_?<^Α:(%9܇҈ZՒ
4h]f~}K.'u>*4` (j5 uQS[mS\sb1x;^k}_/BFTq8Q\*18sL4$BUԙeanLj r3Md
ކ91;P'*Xn< 4>L=٢GCK=uHě<:^TkǑ!Uu '6R6-W~ pU/Barm( nuπ)Yv]zv85V;lc"@RsK-QWm#}+qlmqHBPԞGܩ.
D 9)*j3r fZ?CqDي#+.ċ7iR89@3C a\sS k3uA sqOt,`Uc) Q(?q<6rݐV'XzLUsžYJu0S\9jDB כWCUY =9Sʟh9 U9b,c# f- >'M8GK6MD3(;zɓ-Q(<d,Dz&@"mҗ53O-Hg? jnC16C?]gPRߠ wT9 F_m4<W 7" 5B. R`F}!qM 'Q1n S =Y
z#
KO `g_}kS=1rď3J I|/ #7 7[1ǗBxjj Ti%}HX"sJ?[?H0ǖC{fcA .M#KFg8Uy#v:;Ԡ 6hi7eV1kdj?h!;3NT*[B< u (f% F U .> Т5`Z\ 5ݼHJ ؍P>[0 %4z Jt&\kG*z-YhCx.,)J^93j1a
[D5vLSeWwAfǑaP]MjȲ5=㍯zu6h*,B>01aC͖fn۰gzWC5A[7W? &^~^Fhu )|
˴E
ӄQ{ eN;WYmDSF
;`Nrpd*YxЋ@?Q?SЌu
ዢ1V:ץچn rȁn/'#j:MnϱE;q~&O㱪B:tiPͳq.4VmY1hd 5U}uCd ,) ƚzH Sv@F8!Vh1L(e6A?k{[}} 4w]:߿av~@+<@;F[v$!StbmZJQnOy"8#%$IMԛ_rɡ-
N/~L?ނ䩩KGK ÊT5/1O|uyl.}hek! 5*|ۇ?1[O(M ١OPpE)qOZV #"{XDb\T_:Q"bx$4@6s])6Hd[E%-i)GYY4u
|:N/2oP3>mi b *IAL
OLKc9YE;Hg OۡO@].E $$JE"\!2R~ZX_0H:ë Vn ;nF *K'8Իk,4dCvL[嗌pkCȤֲ]nJ#qJ_A*']Ս4^>@$c5D^]I퉼eF+M _7) U92^U xd0-e=5~8jE{ȉ9B0 nqW̓YExf#O |}>N_ 0;ٱJC^px+RhWz@HXkYDk76Y?<:3ǯv@6(Ƕ+rqF7>\)ǙsYt%q4
( "ݞ9٦"V=ź8xEwZ
t5k!ٳ \+hA>17,UǕz ^XSdJS(==*[~&SN8uRW(qptFCE>LͷIö!-xVI3mt jf(m,=CTOðNvyſվ?2< PfѥKg=풽 i*
ţf m(kc̻o47^'4Ԕbu:$i}y]٬Xz|ɳb{77vXeRCA(]QFUL%F
9h pBb3i O(oέV.H26e@5oOEl 60/ڪVg ayYs0C *Mbv(z7WN|rM xF}O]p | W,a O:Mѷ"56e|;DC|SEms,?6tD2bZ9pLU$Εp K(T .Oi?Xsҟ I 0u29&L)lK90$\ NiGӃ'y.n} m>v#[8J3r}J/i9bV9;q"7q+pKۧuJv<@dA=|} Ļ YSX` \#d\]xP_+ h_?Cz>g0r6I+(Z %ΏI;([Q#R ?qFB s콙QխAC"
oQŧxhlvQ0_QLsaN &pt)0
-+?
A^V/;gRZn]ə2+%y7'Tx֣!5nXPoº#\%i9 ^Т3
)Y\oꑽ Yfx{^Agľ~m(lLz ] c+K"Hd !L 7p` 1
]>V_b ۍ)m 3Ϟ xB
t*1; è.2k:-LP VF#|\Z%lZ'{'B'SΞscI=Ezu8 R?m[́ ZpKRg4Z<
.+ ޒC[v2STH -ۆQ,`
CL+S]Hę2*~?otyyiAL)59-:FTJ
Qv,kl/'{+hL]Cy?
2yIBk {QmPǬ $^OO@'F&Ʌd[8DDVEz? /劣Q]r?x?7SCyPĔd`QojI"k& J(T
@v0ސ^=}Ł*x d4J 1jT;(I] 0 wQcQNop@bfN=\ ֍=)&7]d9P O .`22e`*^<6@n
|e)";vA vE_U~ݙ dEmi U {b D)0Uc9یo"7e L
ScQ.Fi[Z, +/bO`;#M-
p8IRn3PH騘*kW(Ĭc]BPs ,4 N?!Yq#$˵Sgߓ笺LZͳnt7TcGZ1k gOu9m0-ָNbH:j_5سdQSh7 ?H1Ұ??CTvO9VgIѼIb"v
c| Yj^SO-֩<1+n~P X18^1cG-ΒdW[] es`nRy抹BoͿh@AX'Xc G
n@Ի ի9t{}bhX_4wHe;S9k kmm ]3+.)w̖{f'>JJ1 j>{~r_" JX;sxI \ȇ'a!vc^+.y?a10~Ӌ7J9|l ֳYP1.hb8fضG>:
~c Hb@_mS`mReLF{.@=:"ؕqd6*z
ڱwv %
K07}k)xhFpA!p)b3uzՒL opi eBZ֦cƆ{3=`,)[hj.\UFB
&Y4~iM^1 u@v4~apIsG TPڈP*GvB>m0& #k
`Q,`*=:0
Wdפ2Pr>7
@?rsm.3_Nk 9橍6~X W)uX%2`8 5#`Έ?:
ONh!VM ۯuaZdWVl
=`y)%چ>GEAs% oޚhfդ-4iORsռhe?lU
m[Zк+نUst %'\C#5? 5:G 5?p kot
k c4K1=?Pdu^p+Cm
_Ջ/2Tp,rD H^7D#̣9+[R˥{'Ŋ^(7BMLj劢d(N
`wYZ E11漩+,)sFI1M\ ݊MP<*E- i!K Dܳ?Ă20[d? ^;~pw+Gl쑀] 0 Z*KM+qHscAK@|?ͪ'L){ 3zя &@f@y&&QVv 523z:/ĚԼTXVJ5z]Nn0]0NϾ2g퐌
?vp~!b |OC(I ^+hr]p4$G5B瑫%k-`y=#7t+kl -agJLV1rWʑV66P1kaR[Z0oOp%%Uq Ǹ^hBhۚ .5\ 3nJ- Uhq|chx[ 8+ wwI쪹5QtP.kMuI ޗK]`9nmaU!*Yb a*&ǍBV * 6_F1ͧi *Pp2 LˮJh ĚV'd;bSe5T2D9R BrlC9RΧbVv ?Rw7: Is8Tȵ
U50(qTYdPۀ^0'4RV j`(xGM6\o;n6چbY)w]-P1
Ή҈
`yW~XPSIboXO^>gOP.k$k`T@(Җ+JN٩ָJAGV^N/6'BeŇ9_^FmVQ£Y0X_f~7>6n'!J4QY/(nO ~Ig4Dי:>ooT9ahjDj27aHo ?]Aa{ <Լr i"X-{lN&LQSsv6ˠTi`"
UJ`0 ܌OC3V6On!}e Sv4;M~R[v< B3_¨oMH ,d~ Mk2BEełY=-f/ uF}x|4D% Pۏ7ğLO^Y!"tt 6wy>'bתvgӚGe#}
usH Ɋ5(fM˷ZRGYl
I_u+; {`zb+ZPG\9L}g;Ô4 -EYA\U[EՆ?˼Lz L/&\DjġkuSEDZя t69
q ̜O$Q̠?;.;1i\('$Cr<0|K<$L=
]oĔw-V:f-gɁ\&bupi"s' ]/ Z0qQo'>g@1. :;2X`+=#+dGW V 9ҽ(Û|hLęQؿ1n_.b4wj?ce*y9jo 1wdM׀Xu$jhٴKiSF M%W-dY ŹB!H` qb(Co-&Ldg0 (vLC$@zr?"ߵȚDs lZJ\A@v83mXi`ɳM<~{5Jm݆"$k}H\0 〭dt~s D*3H|\% RVOvT4 &\xsE0y btM_+zW h -e; v]Z9; Y [@ \="29Nvh
@Vh>{ UjrA۶~ XA*-`װ .6+FlԳ ]y4R`ȓ8BtػIYi2^HfH7 0]!43 V?0u!]efhR6n!l'V| 9Za+d #OxdnRjny) bTĺ ^M >~v[#@}ͧ,5j Fk&udVkXC:MJږE0Q=qK彴rjg?\ ÜĔ՛ ^
N|,
j}Sg k챲GϚAjRwiyrx}*enb+r2WK~c!ԎR*ME {wae5
c[PH:KT( XyyShpW-YL7}K`GܕQ _OV Ul h5{Dy,[͝oWC?} pŬ ͰC\\Ny#hʀ0ŢIoێ?hrqt `&d&K_?oN
B$J w_Y,d7,p9 'sߓ'jo Y{-:XJs`_ U=l/G L}Zm =-)Œ hIp"AQ$ޙrmH JA;(8 v=5I"/2o
. v qE.YN_ SYZ*Udt4M|UH3t m!hhV20T'cdI82% ɖο"
o)7袺$ _F>-z ~OQ&Ž |KivWQeyKH [6@wGbK`WMX-BTx];)jNYg$2~{aV}@~Z@A)ZA s.D_/ޥ2K.in|(;f3G
$ >5Vud~qK|g)ƞ2yD 5ʈ:GԻ=V^qF3V}61Ԙ98&IԺ4a /Ye:]⦜㋻w. ՞iԫbfI!Rg_4`!.'ڠ]gOn$:/YA?'zb4˶ FxrZ صkB?N`(eWaZSߕU W[v3|3Z&I3;I#ez ~(̧s/S76WuM[
|Ni0̓ iǰfSmxlL~Ԇ`ZC wra] ))&yܴڕMa Ǧw0 E.'dD
ZԾQV
p1'x(Cb]۷RYI8 ROڏ$~H q@.]LwYH4g^8iV |/16Nu{AK
i2 MTVeOYOd{ds۞cj譽; FFE1.?#
"2#x =( v˷b ]c 3-%2/}ftQY'uqL'F 8tmbBcHuQo Bj=ga0)JW4#LcC,jl~ˁ!Hl٪Z e%+ЩT<}6j7{oTFi#` `mPcZ$UʪJ
!ZǺ,U(!w$]j5s_m%Ic풅H6,s^*=[Uh."\ \>iH*v3x(N ^6S BC<+zdMɻ<@C@^W_B%ud>8c cNw? <[I *
[8e /q\<Ȣ%#ⷯ2 =Yr州<ugM#C@`^RFSTz$L닦C!8 '`9Yb` 5m@ DY vhI=5t'qk 9 ) 0Չk-=SnB)@Mb;hY ԊЮ}FW(v0edJy bx76\Y^'d5lRCP]ExħE(nL h_u-ȍ^X;0҇CR x8@ Vh/U44rd7O|B V;릃T`Qj}yY exD\) ST]O7TƱ[%VFNxE$Jص,N^ ߒUX:%|I'ZA +ʡN{E 0㑘H
ԝ#Q$G@d͗ñbWʃ- D&i1Zׅ=
E7?%vx~>).)K <)T8c~8M5P}A;!|as@
x- '
veӄtMJ]Z[mfG-/ЕLn{rMd( F
Y\}^NlC
:ްV.|, zKGZi3ns=B5#aRDZs ]Pc>ĹJo
1(':D{2fAQq\o\ :(*V
{G_B~z9o?w ~xHi=tJՀBeͫ)[?R w(B
g}Lzl=\64VKbb$7QSq>:gn6@9Ii>Y+֊5]J,}%[%^ZJZ8ͥH.O\*NMyx^N|M#ܒ*'N"Hf{5oM
=H[ɇwC~p Q)dL&
&]P ?Wmg&
y>5t4ۘΨxpLvF=M!P]٘*dy$v4|qC{m. 1Pqt xqaa0/) gqٟj@ub$u,>8MҼQkC\ 39x G'JAd,N ߍL#ah6/Қ+5:/k}=܉JK}l|e,8}Q{HenNF9,s^uC~5rf Dmp x̂py%S`yif3]D _(`)祇vhWd#GT.\+>*ͳ |Y~4ϘIˈʈJ C\ttofbOFF@P?i681@2>+
gvP``Me`7+83 q:9xEG|JYA\FePbcWmќ8TS// ʈ$2?@m˾ഊ Krݹery;7mBP/ Rs
lKuKW$% wđKI|Fσӹ
w%b W}-@%g"[UL5
L㲐2EYK_o0$ m yΣ?6MӧL\&(=\ dy&"I9CDw`Mj8.CrLttCG֒#21; ѕra0 ѐKK0B:BQE&0`ӗLٲ9$:Hۖy2z
T@]TW<ߜk[}Hr
@F0ϡqxmEFվcF0#͆y-W)r_Ũ\gGOhpЬꋖc/.Ix9K&nl`û(ۚ.p9ZGNF98Ꝉ˨21æe[ v5a{W 9'iӔqtmU[Un%RaKoO 6MxAe &wp<[ ?; ie@GL:q s<_U+S t lOHw
~Һfz%p<6E )ܿ "g%n rqlaGS qe3e U-aM'W4vǷXy B$̖ՃѤpee^YWc[ڂ3Di2DvP,=̲ߍbUo8h"8Or3uÝѬRt$B"l(0_pS i+KЭa_-qTwEI r-v 5zzVpfȿ\"# SCtwoS^ D"xi2$`Z ȡy>] SYog@Oo )bEBiLS9'5H9=#+w(jVYi
݁ZmysNZEls%uO *,}=9.D_UNJ. ;SJלQ`^8 j!x/5t
m N'Äc' Xh]4 q - 盈1"XdE (ue5 5n$>>߈*[puMiH
m LwVB vЯB K;:;b SdY 9ʖ90W$d̿/W9@8e*rXT7
Rh).` n5
wsLH&b=,B%[I
S8E06pZ vzI 7 US |M
dw,R"TzV7}{ gƭpI ,.
(#=v\V|GIF^{|Cl˧uix 678\\
}F*zM$ltƉp]N#dDlI% ł(X .!wY[ezP7ƒō,b尾w Jzqpnv%p[_BJU6tE 7 >YٿZ H 3bUj3PAN]2WESN C.k7G\}] Jgr0^< y)I빡{Ï$ZEa<Q3CA@jc{Tb'=_ߪ%Hlo@ɜi
Ӟ 7C*zI!8ol=
,sR+zBQ =#fM&rm5o3,H1 %.t/;-2JYtR mE$lrZ;VJ` C~^)?k^1A0*R%kRhҽ'V]kP{Bچ
Poە(g~>pMA\j´ 4>lvO! 8;"-?_V]n--$h2Ӧb4 wxwhhޫ 0ns4V&BFMD,0+Q>@?>p2P7bF @!1l=53_:|+f
H%2~ L\1xn
q`ptHʐ62`tӬ7 t_SO*^Sn0QV.H C NO|Qof7MT% V6ƞEFI.C빹֓ubz^A#50(爼}XV&; +:dQB+E`cC$iv>x?
tF&Ӂ34T1x O'[-DB 44VPt}@zx A:CWJJ0BNIM' +{n_v*by9 ئRgt=pkAclC&`#P;$I-,$T?Ǧ+Gwa+{^qT 7 [,9ljeht)k#5Ky0Si' &%K?#D!>}ji5T֜܃ZfrѮ?h0= ڸOR>ح m'喓\ȩ* [ KvQrzׄȅH* WtL lvSX?bMr/pֻݟ /M%U +>%wDD#)l,2%+K$
5Q\?q)ya's=Dsi7B] $3 !/BqYU^]˨[i Gve
!c
AWc )`! mw@!4+~4p Yt.08 Xen PFQy_Inl P 0J5 |txbޤ%/CKzf{TnYca'KUa6y>Gl"r jĪO0b&]5n6`~1 }t(}jZ|~/?h\d8>g,z5fVK-<)ު |>N!ƃO`N]##I p1hFzw^\?F3e͛KSGP$ %hC4`FOY[@̳
FdLέ-^_
r+)la Hp+HkPoJk(-/Dp!ȶq}˃D:6hpHCs& iש\6R\Bb7\, Lu%W Q 2 | ?Lhѧx)eTy^ %=vz86<G4C&isT;=]kxUBߝ(fB.a)0H'%Q[{k5N/.F0zS of?ڿ5w\n^P_os ~%Cf)Ciї4I7YBڵ%*R^)Nr:MC6ќѱZBzu s5YrlGND8¾N tj6+YawW:%Ѹk)FKj+\8=q2FLJFxaku xC }odd2՞K
n~)=nZ;l8~Z/| scH(aoU)scy' XA| |QU88TOi1HqW7Jz:@"6K^$M);JāѩOڞcD~-DohXJzg!Hy.[lG?;ˎi+ `!#/ %\*S9|,
m#,,~m_ZzWM71V_^lig(&Lq5Oа#
;m)AhK59Gk\kO1dUy,ib\ +
8;B(nQbB߈oQXzl9"t cJ[sL?i8NLr&L'¬`pa ^P2xLy5Qw[~DM# QZ)4 ZtZacp
3e'VfTÑfJC9G e^oE\A鮡n>oOb yì4
h]c/@4c4mX풁C3A#?>P ) +b"Ӹvw.XLa6,8|A#مƊKÛdtP鈚cLۥ ^4Ʊ
_SȞ<ʆWַ5|j q=Lftﻚlz/1ij,T>]bTҗ < 2LWCf ސ T7M}-ZUwm:HieI{xP1^%Kt+VO o3RCBdX-_?ہ_
tNiDJi1M
E8͠t)5kj-kp X'87sq;5Y8B%MaY]to >W2IjD a
=̲$X}#4jK4`@$!JY^TN] ~*N1h"Em{_X3˂^o0Cw82id(|@7[
wLSa G N> VЂĴV~ag9K뻿aGQl':-HXekOjVL:so~ ;o5'W|X-@
% $X^Y/z1.v xd-l $d#M+)K%RS]/8({\/1=] ih J!Dryp
L;a|'+Nq唠CyM ANMq]?HɂrG|D"t
%;sFjY7)߸F:MD,A=|z*GJ.;?`TPV pʭi)C;`VHIVp אn"7ibt9VO0P h
X|3 _Gf]?#^Oz?t}VA y[[ \a \Yp]qaҖ'Qtbzŕxtu@u p{!)MX{|):j[B.Y};{ 9G/`\e eZ2`
45 /h
YeCU/b9Ra4't(\#RP9P*}`u d=}"P:w Y{ W=NÊ
3!~ɪqUCFɵI@! ^M6%nhV:f6-AuT┮*ʙdE*COw#P"E9q&WNQ
bE7[ZVM|N7atܮrM7
/B#!Ƣ6R[F ]|)+J
mcI`K=W~]E3R5bTDx8/qiaYɨwz9+[_HXr9z^õIJ8 nfBI8wťqeڼFφ~$sUD5Nnp R+Ii!ezV/ƋǤo"/9ifF DGu|\?ڴY̗xd,CNw6B "*>6;$nّn?F^9l| (Uy2[^iWqU%קǔ/q_R!6fx d^ d* (1^cpwZPnޱFUt_G/娪oUO2bNPgM rhqPk݀_E*z]̷S[[dip;;6os{BҚ"BA]ژzJU7e $hsI(%.hJPl"`b4j-D}~ƁG~;gcԶt Kׇ^bNm#}H>Il7Db,nu9s$`n)ZDHLku]I_p+'Y BA C ;,(Pر ԉihKweЫpdoi]m U.Lcx ҿ& xЀ4UcBi~Iq:D^E-h'7`I7 nޝ F6z dON^sl,@̊=V
<ƫo/ƣ'K4 ^9?>s]yL#R{[\%0=~ܶ: 1>rIzVwd75L Ye?&p:!G(8i.sXϸ畜0C `8< X 3H@~g0]Rܕnkm61lTUhvy`坂s\eC ?xpa2=5ϳE*9O
"UGNDwI \v~
Y˼++ vё> rò>×ܾ{xqX)e慥X>D-#v]r`$
ɘTπ61nB,
"uitb̗EGWMFTfV:O/WuK@ ''%+3$Ŝ%SփޥwBR` ~pUҸc=7s|S KNߔQ灌xXmglK豙pvux? ~XM9찇*S !ME*[& p靾lu, 3=*Yyc9hC U#4}\| ]BAOVN RO[/ٷN,fd+ $4): |wX(Z1=ʻF_6K3Li+
o-=f$ Έ9
L 2~Ƽu>ي}rT- 'kli%SkUE^` eJuM Π,
$V^4|L3ՋF';eqFy [gT a~fuVa NbYd)-?#mQ]wB# Y$
;|Y0 dߴv&F6İX^3\,E=ݛav+5@ք`7A`<;['֒yM)TX4ܕ n-DQzOG6b #ռn_M6m6#bh=]K t%Ὃ.*Z"AgXbɊu1 +:YDjK8z\`%РN'/wn2ѹgkH
!1kƲ-Р40U{a* ;5\rE*ǩ]:;kVuņ';Nj ħp Y2 .#~42}OxʐqzE%9Cw?O@4,{'J^F4M+"iʗWwsGp=pW2ϦèT&r:G6pٮUNꝐ+LRA$F´j6v {8E^Vw8\m
gSF*2(OxB2bwu?陮&։vPu$`pE ۜO Xސ5~VMEI|2&%r[jؔAC/
$=7 s 3tĠΩ(5UGM#PB+Rܪ)D;&-%|-LSx^fR}]iztEx`B@1翂QnRM-d(vp[TK52$ z$(;/6]yu-+@{r9XQnP*5 ҍ3ӤŤ=;\["C
25 0ߙ͵ǹ er)sh (oAd6. P^</u@ѽanh,"4S - vir
'qNY-8& w
Y&2WH`
v
|0kԽ*d
% @/IVBN7? /Chqo1+WL
ME>H*,p7苇ܥJqo,הѠ֯g)Ҥ?Ij;]V$PjO'n˙nO
v&,nѳd?KW#[p_ہ Ѧ_,8b
htfqMw28V I02CmekQRvr"6J|T±ӶL
@%S3lU_\~oomb 1ܶݭ`P7J8Ԉ'?16}Iwkt2/_Zg^eTG/؈!LdԱSzzgWBLm +r^[$io?-d`J8#_90^0XA"3fyd%u
rk3" 3&J_xT5zi }ba}*aQ?Q_e)ZTcm `fA^aU3h+<[_"qzSޗ
-ىOb)7{tnPJg!(V9R]|g:p.Z 8\ZOp&=P V"vM|íqgo覑sfEGe*Ja~Ԥn]G|*7y3KH<ĉ/ݶ0>ʬ 2WϡB6_ &,V*Dhf 2kt}dwv@̇=lc
r+x2Tv@if_jET1?f# g[7Ap Fwto3RQmYw(tӝ:3xU; & IN07g ӟvW\zCDv0/d}y9'~o, ύ5
OrGF<Γ O5T@.Y>C|q)65r5 "k\jwIW;\n#a/FkDEtfFU5ZLr;c"E׀AE\;NA3 N(4ŗ7T n) cmwe2
^ @3smY
CE}H ie2f} g/
\iu'~VZF!?GD
FLodRq˼L
[T>ps`ɉ;m @ emز2 e2ēpV R}]?(9.uG(ܭ/M 3no*犖E2f82z ` y!ևngq}9 C*ꕜxjFo yf6{YoJWDk=ae5 xEPx?pXd;$b
,
s7?pLQ}F `<>d W3NCG hrX$/^ K1o>u8τynx {0148IK: P Tl5;&7NeRi豶3, ~k60Di0@K/
Ṃa ==yZ `8 }C.Ikc A`#ѫ| W{-Qpe\τr+R < \u?-gDUuIY^V
sXbc 볮 a3@{ fόCcKl'z; C qWNԾ`[,){o Iq [cl'kc8 V |6ϣ"ʁ'`j' Q) F[{ι^̭ҙ?'@4 :,.k8+>N Z v#$7niQUUO?cZh2ڼ4XXlAVXbïg½ H[{3W 9 =6Z@f; o o1BvfózT3(}49QY}Bo )[{h*E9!wkUNR7kck>x?vn Xk˩;$cXD 0)JӺqK00L
+cRBo߽{.9R ϡ蒰[5RxnTN1
=J
y:^`K b0 b!$matJO01O E)>nd|@XL;-3H\{.KBI FM3@=6Z^q5L}+U"ga:l?˝ޞ؍3IKj bCjc>x0wDXDkY0.m \ku9
~Ã=nB8eX6~uUd,rّԶCl)y1$0 0 DFh)ʏ4pzY!p-fS/~:7@f0 ̟do oܐPX y( :Ȩ\jӝp5
LcX<K |D 2@c
rw}v 4rw5 (
]a{P9[sIAfzely:A^)yv/uAa_T寮pG>wR_bsҨWÈ^f>1ot#,<y;UqgZf7[
&:=2@Ӑ vΩxG}直<_3sJ4 ݦ"?mip#/(xUt LxO+d{zͫYo>\spvoj-Ϫ-@OHa q n".z^($Bgsa;nk
v@^v)\P`Ig +|؎=E·({)d~&ZO,? mE/
CŹ
q1 zڋ .LD+<eO?gS J V2'7)81u[_kUuCej~J*H֨ (YbA{SVpE
:6 brzv*z Ő^I,:C='O TfhҠw Ez8}Ƨ i4ԃO Y{*՜y6-a A E )
kBC\?S^vZ;7xi-C
P߇wK ~*Hh6@8CH;w0=8.wBԍӼT-~`p}EǽpbfT˜j5_I =;xz=kVďVz~էRgE^61J6֏v7
-~Ln~$P$HKkU]
Wue3/DE<茽Gex3C2!_֮TpY,U2@ؔaAһH˱[n]Xjx D, R(kGZ3nzT
2B-vLuR=/8~t~cְLN]c3(ȃcI㳎{% IE wJȱn'$SW 2yӓ`I&˽We
Kc#( ƿtZD:$s-ڊ?{h6^T@f wӵJE TCJJue:SME}4& J3]y $Lbti[b!BGwkF[j@UҬC;~ ` }I0 '
VM5J'3 W
D@K5U!" (nj/D
L=8 @91(^$ ~|,%#]8GTMU>%H{OsK]Pi9@֚7˔8U .U)g!xk˔yM+O1(nNʃ3rcboKඖ2G<8 lΉk_-4m uLv J ~ C3G >-YTNɚ6L Ͷ"D8̪uIn: "y@{CU&/H""<
eR"F͞3P6a.@RV u_>3I@=A~xU8ٝ~wkOrwb#ԘP5cA $b9STAg:,uЮ)rz?_U\2piGSam(3_"oFY'duo 3#1'>\t R9A"v݉,+ԯd
h&F!͋ cLo%V]H$t).y&/N}fL e@PKhs
H8iy\ O}X ?uCMHpZypcinr-:t91wnVzyxby]X+|vzo܉JsICD|9_k+ ~-U,bjJG9y"@>5+Y;) Ηv=xʄCYLC>R ]>H<Ļ6F~ZO'4;:L*&ά^ g +7o-[k>D2Mq5cF"TS ڵ ƯɊ|a$eTpKSxx3|h3HkhoZҪ tET@Or[zHo)'}\'N\pY8C*IY )`&[7W|Zx od'" Y ԣ7I 6UIFFtK¯¦2/MS_KX8Ec
H_5Pdd)j2DorU o;M8w{~ /O>@ x-ugy`u*z&MNjs YZU]|(noo=9r_*}ϒ ײ)~ з _GUkF/%u :ArcEZ47ʍ9]df1'3';K3@}ulR ƙ`蹻lya" `,Inkn%k\ffOqcL
`FdH3Kdҹz#\дMu T xio2(Bg<~KӒW8/cb(ג|êQOJXw1A ( }$0w/L|AO?)#oW UpM!gDSsEIzXl3< ?O8q^ 2:L?F4 =˒3%Ia
95=j3_?Ȱh\H:iww Q@=}ZwI7V_!+p"mO0nhWX$gmޮ>
}1o< 6˂HĎQVlɣ۟[r*>c~eJ*wc_f
ЩzT Fe77j ŧ
45؇][S8m#e@k ؾc֮
Z`(F
m3%) {J =1kRZ
ml6< p>-sr{JՂ w$=[~nsz_Zy c0Vړ֑as<0U!xiM2]qIReLblQiՖv1}w)[iӅ<GXTѴ#qv ;a03GSX R?WKggw
O
2<%zr>L&+J6·*Cs!tR-
eqt*K9imk.
q'Ϝ|qY~:1a觟M< LY4~.PfNyĥuGFw& ɲ|qo_s8E;# Gԁg1 K,GbTY(N}- })_NG6$2[W.wU&CZ5 x}IݟA&/CU ,zyŸ́'ELIfնgp>b |MeK &ws#ڗϨr]I`Xgi2AdM>0 `^/K( \ɍY T>Hν>C8|Ұ5N:Ktd R|NCUezm<(#~{](:H<
q$/,)9+ε-ַB(Kz<l[n =VnAϻpS/Dv㠟ĚZB{ӌc -· CLU )g[*q|O:LkM|450'hg:XpR$Y
mPf6NtSh- U^+FlԐySiIЇ3iM:tqcx
hk@{3$ 6Go̔
s_l 3x ),?Ջ qx98.0qp#}$DOw=ml4Eʈ/* fB&TP w8
BB-B;Y\5yĊ$?}`Ƌ!q =f!/kLZ ɞgp![s ^ޑa6 }}5ǀ`+tdzrNУAiM&|GaWƭqj!ZSr=`
kH鍚2{G\|
#^hsؓKA84ElS;[;2Ұ#xEs* }Ä lġ t#&o*9
lq{>Oiuݟ$s{s;^=+C'֒H{ޝhm,\w^L XGt-j\-|ALh+m52kͪ:p ; p 5z!ÎB s2.`_aհa CU>1aB+H_n/bB.Aq Eo\jt[iFo"Pr<ѣ$8֨RR? m1i2g e\OϜ\)ǴfX)|'
ؑTHBp4P>@ 8lC75 ZޝӨ1KM4b;]j}y_'D(I{NR{|uL]٘`W7/Dbư2 rkx /[':|ge;*]C*K:E
ᢄ /WLbax(Nٓ|ki6K%-ې/SZ2}?6`r-q\E# E
Z}u YдqدiV [8Z Hv|D{<6gX_u*r9E/"Q_%
¾߇} 5vicY..p9][\g_m @%
ǪIh_g#OU
.v@$o.f۴1[.s+ް/_-K
8cřQhZ9V"Efo%)O:=x|iWV9}(yzlmPvMCKhQ ѐ "
er$ 0߷Ag+$,Ɓ};d[g
rqnR6R@ @^IEUy3w3فB 4yoW%$IĨT]TSEqqTcC1zKN iG6T7 #~$ $N
?Yѵ2]羊 [ , Z:%LpI{C/8ʂv `ʄ ']ag9/۶ AFI
Ml`8#% 1:%SB')9@lCm~(^+{Xy2&랅-Va4lqΦՅO9=1mF<^یf[J) E$Y˼Y\2gn|8
3?ҩii `}_KoT̆KVTR 9JVjmӶ2+>̗&c6_pC#LVEp]ǜ7߃}ƿ [(QNV+0II UR45\tZ6"4Yt0=5P 6JU6|[ 撜pP'umGn٫֮;ɛ5To <%@ŸKW %G,x5jH[Yv f6S-O13\CH*&>pHOxlMb!l0|6p ;J}HG ӳXJv.o"h|DKmAcpnz z" ]o#ΠTo?ch3$kp+w"QP{O_%5W{Roouv `k:]:`h}T Mal.d9l
[S> g U1*Yzyrg fk II?HOS>7ij:>:P֩ZvxJfc P Q 4 abرk 96Ld2O A)xԀBOAg%7Qjom@9 =DBkQ1JF0{1 `\l2TY
%Hwb^ VҸ^lm7G^@e@HE_S}a<4fM1RJfu)Ut :6@-rWA/vyy!BY-Kqː5'S84IkBIq U(GIqYfy862@? 3]*` X8x+Bddrb98vT2PxpU=D9W[dz'+ `auCq,R;eڽ-ܧ#$9, H&
6¸0 D"+5auu>qbJ~ mu
+QN t 0]rMR4+q }uwg%ϙɼɏ.*Bok24&-3R*|&Y}ʧHSZ3sօ#5CTf|sWA1/ǰBQ6٨'oIK ,PQ[.KkF* D gP)'&^n67RKI7Biܢ@D S
ycFe9L0msh4Y٨l,O?04*Tgü@ P&7_G (W'_muh1PY#z n$xrB1AuΦJ~*[gk?KK2*Ĵh#Z/fjE5=4 ȪX6&SQVH:'h3NCYwj"KN,+%67mӾXQM4W q+S6z
> wAE6As`ZIߨ-9A-dZ9oy ~Ejrj ^vNtهɇQ GNXefVg(]g}192ci GUmg3@riPZu$J
85|%,x/ Lg\B: ram|<ۉ#\q&hhtD|i5' b{9ur*ƍt gK͋ kV؛ӆ'^ yb'ғxTˉL֚1O}Pq\Q: _*@:бz[80~SxpۨC'b [c &oTYԹJhmGlɃ6Τ b|K',FBM -S } kK1Y`Pyw0sAӀʎ S\:~ތ0~0 f7e#$( ,$2nVb6#Ng:ޯa!88"8S[Fzx`<[%BxzSk^¤ e!#ڙ''@,=c]H*EĽndrJA
Y=eP-k<ԍ"kV(YF2o A n?eRh[s7g茎t
{POu 7*0p*=jG%3#q}MW
O\}:7-%H) و < #1њU5fb5Sg\* ڲi|8 tB o9Hu@Ŝ6J^pкaEx?3])`RB
lW k)X0d~f*QGkܫKnS9>ޚin [6r
#8F&?Lh؍U>GhܾG6=Y
")3~E O9W\Casc٤~tdLguO
-5 @# BV ݧ!Cp+ɹ\;=*3>\T$j^ʈV܁@^ulL&T k& /MGaE##ہod! ev /hy@yHP#S $.F0o*UQ. 2c037z _bUTAx]UT@ rp V M{J1Ք a;D)V %Z~MƆ kF#g٘QLjܠ2=Nre|),ncg$C
\Xf)e=q#9ς[c~٧"$*M]iAR3Un5+}Vf~_Qg7EF/3Tv;
윂kvu# bL뫮M^#OEy/w ۈ8_/XgL%skڥegЌ߈Ne TffhS pe9pᅁ[ # [Lěi
1{"OAtXcvݸݻui'WPPbbsjuvy͉sQ]>Ahk`PcsdqLAtUwm:ӷ'XK>W~i{!ڽ !V,>D
d`
^.sv Nd" & wG)x\'
~ʐ+bq|ʞޞ$6zujP@~dl9ʿ֠*+EBoF V%9u>ҒVvV =Rx)H!C ] 3q%zeN-颗I6=]:
E v j? V1 o ܛ
~$1H. Wn>+'eZ{Kf o.%f SrG[3'ߪ/ ?UwW묯#4"H$.ḥ|Ll@T=$AH V/
Ctvdqe
^mZ}
,eO m8ܥ% WXDDlPk_~NHt{!ަ~t:@H1\d({LDdY}kȝk՚=`I|ܮbgEEm~LѠ;i@{'|*P\Rsj.va%nR
NBsk"> DRm^GprU2yً6TP=˫ \m Ǿ {obC0%"ZKkzLY6_Y?+تd ҋ>wx/v!Gn9п [BjOUs6<&E\O @ qnQ{Eq`!A O0>}Eyӧ_KAL'qPO)]oK u펽=Qo ;;Gf$7\bxcf.{'AJ#1⩟\
C!#$-o]Z-
5IKr_FrΑرv._#$'U6$MSζQ V~wva"r>-oRr3?ʚ E
9 RD5;I Hu&s½IKHuř r77VljB5 kؖɦPa rSQ1!DOP =XiJ%ؔBL
+=eL: %F |"%i 2ؾy }g
ѭ9X%!H~.\oeH4pshT"
m<ul%TRKF N#1>v*-B5\8pse~Ս pK\r4!B}/.[P-oթJN>CW1 R ikZ遭 ~zQ_H9
,5;0bRpZsT.3 CftnըjsoM6F~:nUD> aJTG#u ˝Cm0h )ןGL<nrTmA5]CQM c"=F a@\__0t%zmN7q6HWWDʆhpD|-~"vMKCѣ rq^PrX x?H[ ؐ}rD
uV\Ӵ1J:4Q/Dg p]FJr(R$35Ocbb0g{|k_2fjFנKHP)WRr-+L-ˤ ;͇,.pѼqaL#=Q>#gr/;c~YZqJ |$(p
O#U V(W՜Y~n3sdˎcg$I>JnGPߘ@k+/ьN&Qxf7E ǔzc|BYXxDK Hyf[wh.OY_5G ] r>y7A?5gBjժN [N5[)r|^)BҺe%'zլjwj}r?] Γ̠J7 -"<` m V (3$m0zOLVjdCHzNd 4-*Q|jγK -ppZNHNl Xx nhR=9 8pgz| )ffŪ;D·6 $?z*Bz;b669c Lh\t! [(J n$r{l"i$yT+z PX0]i:!T&5dOGJ8_#th|;ǐMA+%'&>K Y?hVzTI'DA/S&G|Da.փ-L&vL=$-y\y*G&s5$ |n0ݣ c
2Z=}O5Mor1W/QLW@ C,[9 9 Z|6[ PJ`%m};h2KU:eecӶ:rCR#.c<[ sx*/MW5Uj]řuލZ خdPFSϰH.u6'
u?-1m
!m4Ӧ1qV3tL$Foꪂn3@-\ a1~G:$QSoHlq# b}( jz|^H1"7՜oE?. {E |f(V<s@uX >1{`Q&^(Gᝓ~ژ'm/WB("bTypi§&etO@JW+uݣlzz?|s?QA1D=Ɠm̉3W
nod>ɱ +6. E*hE<32 OdyNQwߕATr;ϝV%唓L}-G~hԫ,]:~k$e2{l5 gu61zκZު0l #.{s nQfyYLD$5^OXU~B{ĭ sǭ V/\]T=?tMZ3.Yf 4WkP4گ}1
; SvX$è2>0<
ה S"~}
_ BKa *BxQ!зɂpY"-A ({>v{=Pi'\t*о8ү!;wQ$KOZ}~,9eh* 6Պ7J&,;;2c!nÅru4@ wwR[T{k%φdfGcl +>5-G&Pv*+ǰ&mZ ANHg8*&v;Ğnb_c| dL-v4~j"`qa\ѝfƎ+2%[},x"43U!p :yس_*ɴRE1
J i!:V1̈\pJbmȻN$(wԿ $β0Fִh|P Y(zoDx6H!
` PLʡԂ %mYrmO#jAZOpFk1 B ,$NҖ9 L Q!AҩbwIz SjoJzJ3b/DA< w݂P1 pCpɔ'r%7f&y1?VQ5rg \1Uɼ߿ƦK
_RPDgMc( "!*~D,/,۩XS\9E},O[r{stp gHoFah/Gun"3HdyɊ6M^x /N|8O]|=l+ɅSmkT6)cBz*L>$K$9DsЌVU-ZLW&
)jka蜌íwmW ;٢[ԣLl.Je]=\@:? ,"䒪%?BԚFu:zm4`.ǘb0@4ϥ`43D1{2 \gj{M*ÿvR!|?>'"l =a6]Nm
ݴ*b:e ;syY2`ۃڟ/Vw[.'d֤rACND{Xn+Mu#jf-\(c%$#b ɺQWTKH.6AiX>q
P{X vWYeYUv
q ָV\4b([Y zN
^XN.PJ ]+
ޔ=T4f@Ɲ- u[֨ajxJ}>ҭTbic CT
vk"pDX3 2V m~fwqA3S
) ҋ+D V%U,&ծ6ZERU$Wo
6r~^9Lb* ;GHzz
p $\.1{'3k:aa;@?r-mT7yh1$lKw F7b
tt g#ϒ-a}},'(hF0Znաu:덅i QRJWd"X07ކb[ʾPmxEE+Ͳpdp
P o t \J7hA*&T,jzTTqks(p PCŖQFǃQf&\s_6GX
@0]jF&l @bk-DO\LKDgQk7DYS)ir!cK H8
±Vӥo;cWsd(7JA d߀AA0\3w5Y`QmEX S1PsWPۼxJ#)Ż` ګU^s0:L&<\/ғ4XqJ`//\lPVHݡ1t J-ĀӺM$п*B@^Ji~nX'hT_Rk[l]NgXﵿrtb7E
sx&MyƜF_NH4:f UEO^'#N-pS
.o"( 4r j`kIjP_.u[8ԴUmwmV}Ƚ?U T Rln ]>ݜȀCQqx :mc-Ins2QN:ľt{]Y
JDYi}o
wbыMO!
2Z FGE9 -0E w03Y[
K6Pʨ ?[蕜5SU$3P|j:b5ǃ]!8xgWiu 6e
ZD[?*0,J ^9 DibB e%\"5 v4
|Kz<Q,x\hÁQv&RW
5b*1|Ó.X\} N^[y[aAkL>mQ}
XtY$-$_ {G1 (f#l ƕA&[rD-"IAͪi *oC9
hO 4V|/Ap/QMJ(ӫ7C*o(lS7ࡐ}i*ջHXxʞ*F7iojP+C(pj!! υC9"2{Y.R4˴ݠia `6<;7P:W"hs<Ǝ`4p}H! *{@Jʔy8Oﭟ.աEײp; TJU}Qg3оua4{ tfPu`4ٯuWbV::c> K~@~|m!Ũ'kiN/6rfyGJK}KYs`+[u\U5]*U[ppF1;?8شZKAǀ
Em4 ;; ̍a4('ڛ?:cK I 0,cU#g bs A$1kN䴲|d]Vus&JdE|7RvjY J :Ni Ge_djW݀#-H
#5:Њ+ZL#&br}n$k?NCme Ys 2INɪSXƅs!aHb
Ԑ8eϕLMqEE*Y*fyO.} cM%".p@۸{rx q~g Od,v"*qf AoK%d;/
G} <[y}Wς%2!aZ4aJ[Ofl#~zr8|g"[uC &?Pe'y}Dj74yF<";ܔqtZ$\7"^ЌyTyp,#%.cf#xC
Co;OۢΘ\X",j9tZ^#x)!5Ӆ1k$˯5DBp=2U:^1_=
y]L/˜6mu~ Lԭ !cɎw̾p3@ `ݨ Vk)6<{AKQPo2LČb f7w5"eC3-^ vW#!~ċwe?_pY> _2$1f˖H),Όp V\fx_()x ?dz`,g+dLnkG
S6:k;HKY cfX%jG\-3)Լ͇ &jGju*
T6+bhĽixmO⟲z 0\IFTo:wӪ˵oy3lhb +"A p[3" gXl:3s7
. .e6fʹЙH0¾qR `.eB ]* ![c !;[Z\)r#0[ I$LsŰes\$cw4- H[o< B5t$LVEL|=dM Wcbrle鵺Zfg&>P 49UG
k<>eWJ6 䇄tKgM:SBo فYjQ ` Vp_1ۑZ{?=U8w8)&
7 W lٙK!wY#VɁXevÄ.| )C[mE9`b8o+oE
rgB!ReMa&~:Q ApTf з뮻\&ey$e.<~ ҇%G;ajy;K (mMt(@r>ݽU \-. %%LM( "]5g/y`xiJ$>%n=Pinޕѹ`_97Tqur~KS4VL
GCk (bgӝ2uːg&6Ea[KAW+Jp XI·qS! ,n`o3[\$`Hb?B-IrzTڡ]v%7b['bCd(m"A
0xetCRAVPELՔIl?t1gy}FlQqbApy>H`
B2R2(3 y@(?zj"IS^Qu3 m ^nj֮wHBm-lv+coZtkoQR!ThA
+ӈ}^ZgHyU{1eͺC:dh~>$" sA+̟yf
B$ia&>uO:/毃noКc 6V[Bg~%
E|J}e!g'\bt'BM}݇$1dG|LHcxN>uz գ9n Ilsj 借)K/tӌh'ms ELh"K쯹3 ZG"tɐNCMJ҇II: v%X~5>+:ssS #l}mo !_d {}@6f < a ?_o6]醤=ߠ ~`/sK _kYkGH$U"$=Q7ӽZmpk!+<܆5Bɲwg/7H>
2}ҍ+s هБKhz(6k_eN>d ɬ:ܸӗ1Miniu['\(%`8`hBRȝ~ qdrM %4RSF50O4:[Ek VΰÈ>iٔ&QRLw~Qytp[ztuU֤9]}ԯ.I_g@oiSR8W # VZ ~h$B\3$jT3v:#b]
unMQJ^[Ooz =f+q&*T DRb9ON h#Cpd
a[g.)T;3_M! y0H~e3)Ko2;XDvH|X9lx /9_ m4Xsƍ6k+WS%]SqCu%^s"{|XZd־k5,ispDY8yt:g}eJpAO? @+NR5i^!m
Q$ s!ufۦD\:]p -|/ɕH!Iny˱ d'X`8ƍR
4 kH8
hb{@wֈu:1 nzcOn͟V)wˀ֒Xm\%̳O!U$ުÙJG(r ߋ.$=oyTgcC.l|[0TWT}!jtc$^
P@%[^'5V6>gΈV5WOlJ&s YE?owvͳ5 y.cܬoC}o
Z*:#$-Lnd6c$Ne92w8 BX.#D <\ Z~Y[6Ya7x`l
UMEoa'g؉G\ q8˂Ie^A[tA ,lKCb.C; kc_bɯ# &dJc=މܠs𒑅q~lTȵ[c#?-@y:Q>O)ۡbg>~Oi(آ
n) nIŭ%4FEm@z%O/Qi&^#Jv댹=m[q%=l}ݚ6g{;T
;0U<> L+Kz 3EWaxbJ}q>@T{iҨ2}ul[̕PD&YyO;n~Y;লe+j5$U&RƈܪG\y^|)M)RXRo=:W{V0j1'N'{o
.SL4 OPƗkH*Ml8oǎD`N,v|88$T$
}2C5[7
#GV\Hv:\G2aocWwX7SCae;INRZAA`~ d\P[.TtD~ŻglT
G.EO*)}nF>VL:@tÒk (+4 M ;?.MB*#i[(i;S\:J/hZL[:fUn2sD&q>|2jM?ƪIj=T5EӾg~&[2ߠe"3e'}0yݘ2J /ӊ$v\utx$'ؙLJ nEn SØtD"7Pj%FFbb ?}q*8A t8tҰzxxr&|QPgďS=iLF,=!a='/oٷ:(nBXthٯz
Tmdu5_i.״[>S|0߈tI5̟dnQCH 0 N?[.[z%\Y!: h0Ηa=Q$Ȅ MfNH1B6o_8 '~P D^ UjxMxOьJ8(`yHŘ Z.F4c3p"br_.~CE_Q kƟ>Gn|v1"ŷ7>>>"|سbW(%(Wߨ 3sa ڃIkWv ~
C
/N5o} \*,BUbv2Aü!Ezu8s7% Q 3 bc CuaL\F#v !LmrÀ %w ^AYf77 {(h !촣Bp$Zò_pVO`CU"҃!}'$'+r: P-"v2ϏDO-(߀k3$9p,
m0q;B9]u bD$ⱶ u(|0cD̮|Om 2"d!W'b>so;M}IodBL>0!H7i+Y@s*bm=1퍲0">"\}Ջ6SGs f.֙x|
AB ڊ;QiacT.Omaz
];ǻ & 8(oB؟V LeD:md43($Htp 1'JaAaIx0&%*{VaG.qVJVuڀS7 XދOIM5OX=9nx8@pQ&f]]HFǒG
|T~{^ FYy$Žpp] fE871#{Q FmV ؘ:
̥UҒk gQwX tɯ
;^ s@h`&w4CӘ :>+' & *x :k)?z%+ѽ4pv !l>k
`$YT+>| Mۺgθs&P^ƭ=f bRa T4)HBN1 qѼ0O,UGsz1}xcMཝ Vgc] $n?e uc{a^|9A" c]pgMrNSqd=uHϔƨZ
0S ACq9 ΣS*|Z/w IPURHˀm©hىNgeW'YfKr!,]&2RpD
ЧC K?z6{SNE(aG3;fr6WR:TJ}7W*S,3H[* ηPcn %HRyEwȷ+ڇPv݇ aOiM3i J<_r>:''0+tqq^M"fC kRFZFŵX 2z+e CUAp6EK툨$&K\d+w7( ފ}tؔ} 1a̓ ~ rކ 2S Nn\e65D+~ПJaX$SN.I~n M` d6) l8 c=z 7d s Dٌ+/GzB*. aZ:VӃw;uvTYsf>-"+Tܾ٪ವPYkd`hxQHG3'j*F*F6/hOnPm
MB̫\tOl2VWAZI,`h:84(I
bzJ{Ieyv&ɃK &4Q f\B]*2`EAɄ G ֿczڄy)t7ˮ;Ͼ 5ލ>!(fQ).5jXl贄 a[cz% mߛ`W]KV \
EfG+vE6J1DK*hY ;s z~ΪѤ9=S 87 VW8u&YLi
k8zaЉ 2/oִ./GY[ oP_wv7+]r.YB}vz`j 3~6$DGSBuZ2ՊbE_C/Ef -{ ʌ(OK_H|]7] ,\(jn{ρ-s=P8s@! 5x1EfFK-u5; 'Ri 6rJ"rv.:ӥ Jpj`#*: ]u䜖@gƋSX= MڳWjٙ)ר WltΈU&zF 2^KeqD~?og }-5Y%F UIrn%Аunmu xL>8۱!p2
["_Z
+'tDx &;kM^^>dE#*e#=K; p|0졒35U
.jd&$ 8iw gLv:.%ٴ.|0Nݱ;>Ќ=(w$cH9i`aH7ӌ @V5S tm+WV C1mk:\4]onW`mrwjn?_X[mtgoDZGȗw*f#O8f 6aa-6b3&F`?z˶ Ɨ1zJ[2 >'sѮEΚOnOb|-X;0I>htEկ[u*
<
]ŏ>(]ފ-vVph />Pl=uj
ub(& QU:- (Di ] f*fT+Eʆ2rcA
͒zyN^phC)?
miCS#R0*{Uޗn
Ti %2 1GƏ~
^ `rd:=i?hFMkՓq}B{(4t9OAO:;[.h6 ~n& &iݨSRZ65