polkit-0.116-3.9.1 < > , bzp9| iNQbV4+ ZѕLק/zV`shA@R&>jc/c/ {F/a&z7sMf% $n1 㜜vVChu ês\xK(] O.2
G)6y^ԢIv*CUV$} PT
/ Q;fԻA
`2t=[4B Q%F 9q@f\yx QzZgEf36GG^\*Z > N Lp ? L` d 7 ( > O u . . .
P . . .
. . . n . D l ' ' ! ' ( ! 7 ! 8 " 9 " : $ = 8\ > 8d ? 8l @ 8t C 8| F 8 G 8 . H 9P . I : . X :T Y :` \ : . ] ;< . ^ =~ # b @ c A d B# e B( f B+ l B- u B@ . v B w Ih . x J . y J B z K K K K L L L L L L L\ C polkit 0.116 3.9.1 PolicyKit Authorization Framework PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes. bzsheep24 QSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux x86_64 getent group polkitd > /dev/null || groupadd -r polkitd
getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in polkit.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
exit 0
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/bin/pkexec
fi
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in polkit.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable polkit.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop polkit.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in polkit.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart polkit.service
) || :
fi
fi ~ A 9 Z h( :( 88 c+ ) V J i h P B AA큤AAA큤AA큤A큤AA큤AA bzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzZ.bzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbzbz 28067ad27702251ba38d9794738cb81e18ce2151d26b3d103a33b4107c2f9877 af4292db23ff017727a86c35067121354c63911f32caa09e0b9e42d6b4252133 aea3041de2c15db8683620de8533206e50241c309eb27893605d5ead17e5e75f 49dbba632545a472dcb38013f3717554f6deff3967ca67f002c6fa2e573a99f0 ffb22d9ec712cefc9c1ba80696723fb75f15809143793b9a7dfca1256746be33 909ee39373fb872dbc9a7a844b230cef86b07b2c6b7ab3a0288a9e5a604ad82a 39603f22017b826e3fbc652db29da20d2ae228dd5ee9a9f77f6bc64b19aa65a2 db64d00a67ab46dc282a63d5ea25e63ff9c52da85652a62326afd46f518a9d31 41afcc9d27cb0265cab3575df58bbd65da23a85633575546b2cac0ada23fa1ef 6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff baed12288339ed4b1df90f017beb8af07b56eba1b2edc4a60914880c13617af1 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 561b4b59f36d6e34af024d07ef8a80457559736138ec9e9e4d14f8e926c17512 725f7541bf0703006687192fa4eab464b4e91797794e0fec5e705d2c66808a1a 1d862c3977460da9e096a5267d4989d977f9e4eeff7781639b80a138fcb7ddbb 86a99df215a09ec829e81f8b6d99e8d88950630a3fb319cf837c3d0506b17ba6 a632e2e392c367b48cbc844b0ed41cc2287126dbac51fb7d1a64f40211ca0589 c888d46402d2bf113d5859a57569c53ab68a179bc2fc084b36c13fb45020eecd 73c95abb890de9cb72fbee8947befb6f489bac6f50dd7325a553b1c3cfda9e0c 77ec4e0353f78877f22fa4575ae21fe371584a041b3e0f3b3c96042e030352e8 2735b902d88a25d4a74135d82696c544658237ecc659cd90560b88103eab1393 d5c9b88e431a17804f869b4320fd642bd6c40230c4085c0b6949820a20e9a3c7 dfdb5e050f3a7140479dfe7636813c4fd071b20d5034e8c7a83ed65e4fb1977a c6d17b84ef6c4a9e966850ec833c4bfc17e15da6131723f22fc0d38902082503 a21c5947e9731f3558bbb979b7bfb65422961ef2b6108ad6177f29c6e8deb628 99a0a2a2e36dca2a54c89ea06d695156b518e02b52883e93b70ba63e3768298a 19529a141086b5d46de37fc95895360c379d49563d5b513323e73f0f5750436a 885304c3e892e3e6e167676ecc691c6736c7116bd1157a1201495e0556f31381 669a20fdc713af31cedf7272d21db31b5aa85423df8a845e4b7c8034ad697d40 76a8600153d9159a0c37901560f168f01b5cac61e19dac08186a5f5e5238c1f8 16f452baa3077f54a5b66861913d097eb2b094e3da19f8af2426f951b4c22701 d3fbc5b432d9fdf0de1499e9b29504f8f6e9d313b519d64c43af35a906bddfe0 9035f887c526aacec04bc44b5376dabf82c4a0f6c955ea3650eb4c416b3d7a66 c3bef7b57d54d7c9cdf02ccacd53a5d630d1ffa76114cfe0bbc5889fdad5dd6d root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkit-0.116-3.9.1.src.rpm config(polkit) polkit polkit(x86-64) ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(polkit) dbus-1 libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libmozjs-60.so()(64bit) libmozjs-60.so(js)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpolkit0 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow 0.116-3.9.1 0.116-3.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1
/usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2
/usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2 b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh sheep24 1644329651
! " # $ % & ' ( ) * + , - . cs da de hr hu id it pl pt sk sv tr uk zh zh 0.116-3.9.1 0.116-3.9.1 0.116-3.9.1
! "dbus-1 system.d org.freedesktop.PolicyKit1.conf polkit-1 polkit-1 rules.d 50-default.rules pkaction pkcheck pkexec pkttyagent polkit-1 polkit-agent-helper-1 polkitd polkit.service dbus-1 system-services org.freedesktop.PolicyKit1.service polkit COPYING polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo pkaction.1.gz pkcheck.1.gz pkexec.1.gz pkttyagent.1.gz polkit.8.gz polkitd.8.gz polkit-1 actions org.freedesktop.policykit.policy rules.d polkit /etc/ /etc/dbus-1/ /etc/dbus-1/system.d/ /etc/pam.d/ /etc/polkit-1/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/polkit-1/ /usr/lib/systemd/system/ /usr/share/ /usr/share/dbus-1/ /usr/share/dbus-1/system-services/ /usr/share/licenses/ /usr/share/licenses/polkit/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ /usr/share/polkit-1/ /usr/share/polkit-1/actions/ /var/lib/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22716/SUSE_SLE-15-SP2_Update/ec91c1ce954d2da72110deaed7a67a5e-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 x86_64-suse-linux
directory XML 1.0 document, ASCII text ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bd29a3819ddd247bac4d490128ff37ad46708023, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3c1eac9bc1731f371dc2486b01c4636ad2785c02, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=87fa65c6bfba7b442569dc1b5265496b2e1a7edc, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d8ab438cb5ff7d6455a9a433c33e5997098bf4ff, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=08eab560973cf53bcaae429c93b5c61ea11483db, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d9382e33b52ac5709650f66d8c68e50f4d944293, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) XML 1.0 document, UTF-8 Unicode text # -
R
R R R R R R R
R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R R
R R R R R R R R R
R R R R
R R R R R R R R R R R R R R R R Uiyg>Z systemd systemd utf-8 8a473cf105afb4c10676dee98c3ad099f5ca4bbeccf2127c519eb10b70fb1f50 ? 7zXZ
! t/fO] "k%Y:0wD8iNmrW-V5b) }D0(pt{ &5H?vNӺ]әܨM)C$jk1rb%{0Oj : 4.hCP@f!BM߁ x>36}Fe5y kKiLAPR`~#[MaB.^i a_hr1*$uqQRr dy [(~B íQ>[o3{Ƕ+q8 n?ueR=O[> E[`HQ2{9R!R>]ZEɲF܋vFk[-4v$DZ'"l[q܇Y|Q
p )2vM5-Mm͋Y\4f,U!~c :oz ήJJx85 ^e j_ /`? g$BR4- .ri{ URnBIR=nEm|O㴃ײpk&>|ݟ!#HϥZV0*V$:SMS[.v7:ml e .gF"C/ڈXݡ O
_N3 ?dSՃr}n$2}i"g?y@5vb߽nxl^+&ϰ+ ǝ?Hzh~brU±4 .P`ҜEAkvAפ䲏y&k d}D\DJSR
_b2v5z fԕ'wXͯnj2746P\r|_ Hl0PTGp;$f)(G=41E}ޗ Mi]nnݨJՋdۍM/ alF
B?,JBuJ&vO+] xAW Qlך[}U !A5Ke0R:qWSA h>HiU4
|j̑:6_h{4ܢ٘5?v+r5 }#MOS@<'f^/+3 qs3 >V @ßrC)xRcL'G-rOw*yOWDȶ`V4Bi"*xO7RMz H,
a ֏ /Kvfl58RO"Uva$B;g
Xo:M&[L!T>sF!{4PjMQ'T`vD7WS̗i9KI#=_P1xS`nJ}ѻ^p-P:&6'*"ʺ nxwG(L}, $M{xcqeb=QթpBTFֈ[eh 8MDr5ykjVmv{+cq2:]>@zXMցj>bs 7W=ejA$L& /Ff(]U{Mv0[ao.4$8NXɻ,IhV= S6OC`%\9 Uɏ]4O'?V En H^Dry+;ŕ!VW3m?ͮz!T Ii9Py#V$D0biW(bfkk;ꂏgӥ%h8%v1n!ÀCaɎi BTUN;=ojd)1D
Od am9s
fC ŲEϵq}Αl
{xf_, zH۰Mݓ(f[ߘW3a md?" B]rZsc k?-ԯ |֯ntf ϒ"j%8 6 7^ۑ-A WVpҽt&S䪣ˀ5ϣb$cۚ8Y,I6NxL/33 8%,gA! hݩ^gHXz+P=mC{h%{s$W/Qg=aFlQ[-z^BEwDe{g'OOE?y.dǔxHߐTM c9؋ݞ5x6.
ú&A :3$Bt))Gd|i6DPH{7,%8>Ê ͩ R}ضo\R 3d)S0^ڃ_ λ _v]]BM)!bYDe0vDC.rZ͔1X9+H`>]>[Pf`^tI>46FMq
4&db)ې#^Iҍy _HW^;#Z 7SZdIƍL 柸aRHbz1逸cŴ^ NQj 8CNco > .? dG1ݐAL }Usߘ"lu;T\ jVKUܦ4%[ Da x֤$+LRi8b/8m
zՎ⛱7% wQF)7 (V𬗡
7*Ɂ
ͧ RTek< $J8E'+r'mo|XOn q*,CBS"K-Y\M ڵwDoA RKG sIӅn3[_x P o:=Mg ]qHk"ю&/55y#2'6-"[j" WuN}<6cUIϭG; $t!?89 Tosn<9&GM# -:s"Ueٞ
T$m69!9Z2%U o'
74fC ~4p3կƣ zGn~"+E"& c,)FU {ـ >kK#Tx
̒ yn }r홃VibCs,,ԽB]sTw9:W/[xi=&O[;pՄmA.]$TXn6PH Nmoe?n 8}U[Jwyt V {݇6&V*.pU;FƮ)gPy*Cd*FS dP5|]?Qzh覸dE9~1c{z[:+WˀWMW! "0%3KSh&܀c CilE#/2[8&E&?,.
_OV]f|/:-^!xWs*=?p^}##
mNG
L_2R31lfy9aTfoHt/2w%U ?C T6>";YH5eH%{ވX-Ljl!tvVN\eɶ\8ɶ [sfuuHqZ ¿a̷ nܐ&'B\U>4BL@34Hp|Z+
g A2Pؕzzũm1 :S_>Ci-WF\jVnzd1s d2NIC;r, hey}y)-ŵ3B?p[wZ;jWg_
]I-"X.Q&֊& ÏϦEGn[y a\
IӃ] $p?hTDČ~5\
ZG|K綍qxMҔa7v*-^8}&|5\jo
[tv`ʗS29uE fmz8+>3Lal;aK_InU*ғ {琙@ LS=Kz}'=!3˽ e C t1mMHz6^x (Sfu4}OWGU&kK kWxO[$1^̽F."Gs#M)@+ :6/ceUΣ"Ya@Tɢԅ)i^w!T '|h+>Ds,>rTOѽ)b"O:#Qw2V)Uj ydd@vT1ht3M!IL! dm7]-^uG{Pӓ))!>aejuEZ #ciI&k$C)8#C$b !RHWnw
-MuR}[4Ĥ)
vc' b!Uo: t#
so5 ܴcHC#&čg]'E if^@d
v(U J<:aَ~-@Yn,6`&$B=u*KVxێ?9L
~6.wkkԺd%r~N.N;8 @ b64y欕Ԧ !y"VB{4(A!익E +"G
Fy_e9S?Y7%R˙L 1 q15"u -TzQ|3#fz\ ʊ?C}Pj_w'B# ͠[0R[Nz`xNi`y;9 VI2&=sznnC B'F~d%t7&u3uzAB%Q+ԚRJhIʈ>&`(@HڂB!z;R 8Me:, B CKOSddH'(!< t aQG)
썚0#c6T]mJh/- F'OnE;Y2MϑxHwa;7{d!݁#
e~^>>Ճ7Wzǰ;.8{L=C3q9 gKۯ 9M]&{o
3-+2'Jv'5 gB5B/cUaj[˰ jFQb 0I@gGCq?" ㌉5Hq[;Hj)haQi[̻!O߈.urS0
wC S!.7) $opj!)^^ iD'O2zws曯2. omZ vcU)lOJ9K4\:'s0FԷLN !$.V[^_A<BLHN?"Q6G GnR% k
鋍 s+,? x@"a1=/&Cs%3fӮ/0[h?m=,
~4ڿYqu"ş-^vSDۙvo*Ҝ
3c:ylYq\ v~-M"{l 0-g {x9g3=a&W;kJ㉕ѿW(qI*PraR֙9:
ܰ+[䇸>5kC(h/'֏<¿M3`kVɝԦ/ (:sy1eඵ.kN=rSQ V\H+mn\.^' bSd9h,&
*!R+A7XU=*IZxE
-< ).ջ D Fs╰Oâ0c z +f"fڇsػr zLl>$_q F_=GK>ՙN"ť\!V FQ;1|߽9- Q+3]igz~E{ݟLdnȪT4#JQ]F126CgΏaf:y:~pZ,+2
)8d L ݮDWP
oWs*ASgFX5P
!m nЂN*YkbZm6)~p@&ͻs}l:h"Nֻ;|:
$ԕ;. z aOL)+˳־pC kq[qE BHmPKdw43C`3x
/;:Fk܂cbf/Y@ ƴ\- '_.'?d0ƒx&Z[k"pωVT6^O1OMsF/,%b1uCCL1V;vΙldk-Ӳ!rGGQN @~Mʡl
#fqK3vAg~OFWA'jRkMQ A^"9>D=TlG~0 䅾sք3ģ&v,`|A*j!9RĪg}먮E^ ĉtgHybbaDI A j
8C/3-Q Sp,C13k/gO gBޮ';Q3GwkߔMcW 5.!"&C[?a!Bkq_W
s)&Q+ ,3mY÷`8ܢЄv3#dIQ$;"[IqՎ ^aaYťos0"ɗιVhEwϲ䬁σ?=^3/" AѴ5y\|tr_[bSVzD kڜv0e`3WO`S 4r9+J1w܃|}D)SS;<ۖYq'zKM 4nsK%,t>AS$|ś7$=17721FC
>ޱeF j")~ Po1_Q7]# Du1 q/$+DBo FM8B
q1
O^ViMz!(T-<Կ1i?Jt11&
m|Q=D
8P~KCT+8LV"֚2Upo`T"2C-ȧfpit8)fd.NnHQnVr^I 69JIm]}[<4yP#6iד`LBק˄sbH6T[F^/\K.?10d8jA9
Oa#po,z+
-E7EFQjj$GQh']jkie)ݶ;Ҋ71(Q-1d?
RTMk| iC{`DEڼD6|]
_hðW(k}H4^ٺD)J)G8]x
^vrk
W8 K}Y
TLte
D^鮝/JTQeP2y>ɖm 7wëq$bHzR +%aŝZָn6-R /Q 3@̧ˡȡDe z~VvtG?}7R
d傆A0EĺȺĠ._]d ͣUk/9U49cn ^N/X{FݷF/Ăr4ZQyx3kviw ʁL6)7+m|bݤZfPe]4V' 2T{8
RE8LKj1ńc((:5=exh];GX
Zː'MH*~ΐG2N#Q;W| %&Iy}4BtW.2Ωj3-4xWg C z[U5&
vHupD+S kd, eX`jv)<2]u9XnfHxmp+SbH4 )}CLeVk4[<^^Ky99̝I
ԁcγ?'+P C;_ d
c4l(ƶ厊eO`e!`1mj\#0A,/- _d\vjp jvKu&-9KdJ6*Z
3m!K/k_$GݗM^
4 U+mDsEZsV_wɖ_
/x3IiZ)PUzEh (/6d笐D&=kdƭDz»R+:'Y/ ʄۯ-]vu{2$.u!k0{ċdbd^&-y0aNa8E/L#&K)O(d7k|2Y.
&-_&6
ic2k}ݭŵrR9HZ#(LdK d!(>`,`πȷêΩ O?G>h]S / ~xU.X+>j w
ր[HՏV 1?BF'M<Ɔwp r i;pkz7荫v33T˹0 /_3RYǎʱyA3y9yx8 ȣ\&7h+h/t%a8#ͲA1uԼ \4>-J'tzĘ?CdCC{(O6V"
쵕EyeĮ^0iobu'i/E$h5H"-g])arљ38@'SO?.I(%f !+tT1-Y4o
x O.?ƃDM hb)nE NM^j|CwhvOF0w5W6%aG!x R Ӛ6Ck1xJ2y#ɰB`
d4pWfϿ
:*=T.\"'ǼH(^te,h63kO+2 E l'C&˜(wOuVMj1t}&/tspe 8-|ef^p]LvEux?Ji!:Vb74TǠp?5>%T8jYSy89[p~Q@6@/vuTfUd 4d߄hR 70 5
OmiRH=!_lZa>ԧI#wzɕK>LԞ拷MquuW=IC#풇n ^:ު6J ]9 vyXg4>:CJAmk7 GI5z^UI;x#r
.E8'}kL( C:<V 0bQRɦchd%-i|ws>6 5*0EPXsp2UkmayJ2,
JZ! /nd)hO9Mv=y 9xҋR}ΫlVF|ᩍo
^
P{l%EKwDAw)+1~.'3E}R,,- i`2PR%a۩}:=?
zFߖD ،b6{7jNOS_zi5F-֝/LTA2[4njF4JMk o* V2.ie?wseeI}; 2]#HN> `vF?;ݺe aA@ lĶ"=}Bt}VXcdOC[0, =G;/yŬ`T!});SQ{M'+bÝ<-T WО9Q@_#~82r ! @}im ::_F.ƭw?/
% X<ґ#iG>5MIiGr22NH$|4רf c5bp BTS{ lź{ K<έ$g1fYd @H"rC, lF_:@Ӂ'S`nqųE0o^(Cѫ &2 : ~{
D^嬻^wW*%,
* w/}g킴
92oΘ <.IVE۵ͅGk )(%L#P@k-5w| <=xN 5d[ѿNLJfV G#!Pg[ނj]Xs#b/ ?_~ Z9D
~(ysrb]{
3=Ax -ʪ\mdA L1`pKlH7e܄؊/+J]#_. (
]F\X% FėUc@MN[v% s[Rnj£
@}*- rFo⯟*
ni3-F?크ugr
}@8|TGf+j=J?ZVNCJqG7~C8Ԭa}
] *KDzxj+6y{Ocf:
=nt'd ?,ЃΌ;a7nS[7-%NGW)U-'^( CܹS^\}OtNK˵,$dUQwk G xi ľ>262w]p˥_\Tm[t{e KruEpP)FUSFP% jx@Ob(,u˳u&E I.eE͆ i}ϖh>`cU[r£hҠa5}(TCw,!umv< čC9"AM*1Qʺb6N$d0tJi2ެ)Qa.L,zP'0^7d8XQJܡzn ^ך]zTJy?xy(zrUƲ\UO6RZըC*m ګ fX ̑Z)j_
R钥hi
n?*άYxS>XSڥR43thy,~$Jw_Let]h
V%?3Op/2z)~WTZc0Ogq0>FZL[SO*9EuSx>x4u3*W?YE{"G y'tT"w5mS ¶-˫ a+PV!'"cA2oDtj٤U {9|hߜzH*7 9*2xlV ٕkүcD,P&ư g0Y_'wqV wyQ^_ddmzC{.m hP|
ɭr;̃2
4+5 Z6 LeZU
_Bx Bo(zJg =k6 ?,g;Meuש(ِ0 ~{j'U` el Aad '}fUmklu {#K ә)~zdָdy~ձ36gQ1Pŀ7)`1)+')C,!&O~8CGXi-6
C]g \caqj3pm6G^Jg*xadtY~? S ?/|EzBBq~ &c_͕7 ]6o //'~ Bij|b;5L%݁Zu6ۓ
XYa#LiI\>F]zIJ 7h4u!
_@؎:J@ߥZ X(>B<] p:O
1-TǁVlVTQL"{)}n'KKxh .;Aò Y lw6m M*̔\7iNrS+Z4
i`ސfq-]fۖ\I ZDSIKYƸEbc;+nff@G>} m/氊v>V>[d+Bv :!#&ġl 9S܂dH.VDk0_+Je_V
Oj]GPXKNȶibF
yKyMTͮ
qc8X?p 89ē/zޖ,LQ(|mZCFM,_Hæ; f8<)-W`6!Z=;obf/sퟖo@ʯ/S5 `nwY:SMnWe1"Phei#;L[HpzLU״c%v՜RK_ ?J gj_" &պjGӑݲfTJ 7^H{
{OFy`qgaYRXKPB:yx=%OH
8f%״L9%z[=!<]i[qJ[N%rlpCFlni =
n}e@W躇 2{rk;C㵤Ox il
,/YOaA'QmXkf*-s$fLdܮ T$3:BYn1ɉ:{exћ]_ C!z5~trăs1s hWr}R;j37+gS
,JO㴪~9ꎗu}?+,)M9
WϏO6q?L`8fe IYI!QLى< Ӹ##)w3>{n#{S[傾 ,#`^ZŒ:t>`0wn-ٶ tQ["bhQU1^p~`5 36zqkVN66b:R]N¼EI"͏*-UL}3e uKU%+`vmp( o` M`:+Gr(AAu rDTHv8f9Coy[2'5f3\~e ~L[xBU{BV?'ʊ:%0Ncc(>$WNwKwU) g N_~枆`KA J
ʮ:&S 7e^C7gtFY;Yko"8&yE@r2
'
y6"WSBaٖ$~Jm3H![hK7s5B;& *_^'\xwZ|)Q\dHX T &IqȲkӇuN ҿ`3M1ڊ+ I1§ke h2:zBMx xNEI5V#w19${UE8.A.bnb&1` .EZ>\78VXēGn&t%/AsxS9[&gTDݫ> 5{Qnbl dP_}xyfCu@ApI>m&I͙x%e15 Hʾ1B{I
, (Us4^{߂w2Ng>nGA?ѓ5Q (u4%>{wlMUC'@hzv+k!՟<3),cbW'Xd">Jb0:SѴ:@ P9 cQ ]$;H*mhbʍn'aEځTo2 tLPs4 sq [#T9 'NKOlčww{JQHVǻtnqIBtە_|bm"$0 .7ëxn9>̈́/Gb5^?kR/l@\DnT E!-lNl5 ޮ> J ¨ " U@u4}#wU'lo}?h[#H%\M`N?DnvyR!\hBVf$@*z j!ZodUj0mٕo}AC #\hQ!te]zK<0!Sx{G8#rw.35W2ʽ@>R'?p߳?ĨR
Y7q |, R.Cj! B? &c&]|?أ&LqՎ2I KiRZ;-DBł@d׆]Vn:\cCƔ(\ nӫ7JXhKB5ExWg1Ӆe./"(/sOM}H`{3mD꒩je&m"!՞"YHfhv6dsVE!!&W"Y3J7B }Hp? Ll?U1wwdF[ J gM~囶oɆ}kK w*V@tD2
\b IINLyʓGKGb yZ l'ޙu`&,Z,%$K5@H~p#%}Hʵ3tގ?$.8֜HX~nӪUe
ϒJHyjw7D&N7K~W&,~*, ёj:~mr5$^Dbgp3b`A14<OQq}`3lZ<$6MnRcb9'mm ^c+TK
GcN4Y< x^; LI8)qmgxʱ7XW,2 c>na`3'iˠڴ{&姂 1
OZGufU˘>x&N*3FkǢ%xd3\" B!J^`6KC xLTt=!Y{u:$)'
41Wd=7u s.87iz6ܑ ۅ$Xы&rM:rםmuAz_ Q8+L nMf7 eԦ;=+ bm;CgS)R]g2ChI\HQ);.k@ߴYw"{
b-^A. ٚJQ?@'D "-s pFQg 0lJ,xc'
F
@̘?s&ZJdH
3q(r a-PI"eT
-/ Os*aMF5 S`fm}4W[;W
Knjy=W=CH$X1Ȱ}yg˔1 Bb)FS"{k ᏧO/_Θ5ui'0hkQ 4u9Eʁza@ b4-vC>ډ8bx&A)~z^ӻo)_&i 5t.>;e@uwx@%0/Ⓘ֞P뙭8dW?ކ6h
bە~*b#H Gutl xS+ $-i5={
Iu[ j#.@zلҢҊr͘EMىSmo~6 r@ы1x=SĔ )~@7tb! jr%92%'>,[/g[b mR #WtlA$[ S{*Mv
K]2^ fM[7 \jzs)PZiSGVxc;9Q#i X4W)]O q ڇUve ) Ãp*(3kK}JH&7$dxx
Q;:^S[Mn4A9WX_G{NeYnB Ӽ%St"@ b L^) Z3DuX $s ~qRW 7wv9W*t`c _m_,< )NaD9Z;ciW 2
esZ'F|)2`W2 ^ϻ¸]έL@&GIllu,g.y \ξTFD<نP 7k)UYO3_ijI\"bݳ'Dndr+ tо݆ \hr)S>.z DO5}> B|0;ʘq CRd|~0끩t}j8T_!pc0A{Hc404
9 *coFAvRJUn ᱈|{b*m"CW,; J
*bS8 ÎLG!v#*,hR;HH&+E lῲU:XwbZ0:㏈UC
+" *[gUY< H!Z& N&f":\'x P$Tط<'S݊Ypѩ$ "'
DlF.}otpS**hIez3Dn?y*ܣd~;<Ҹ(uXlN\nop)T,<0ߒ
kE۷\
4(Tm x,SN6|t+~GzRlx7GsSӎTG 4p4jW=2?2Uu4 8g`PTލQHGd,ڣ4#IEm)vs
Ԙ{zNuXp?#L{`N~H{ҧ-`ୂ]-i*&ѬûT#.aG~/gxoZ8J,v-ȋ~J_ A*#M""b-ۊzxkgJϪΓfњIGl뒶䓵 [W1(whQnW >#0}aeiX '>"/GV
.qd 2LxO
% kNwvD&_F*ierAzU WEڗju
3|'hP$0-grF( aǒ mPq/kY$m&:%+ J6ǹyODǗ,fCͩ*/ghΪUlc A( $"0[
]3b 9A 3MwB
/7/ `}
O{DbJg k?b$*r @fU9