trafficserver-selinux-9.1.4-1.el8 > 6 6_6 3!y덏%!E/֡c !E/֡cm(nx8Dm D0EZ;EcMXLYg8d"mF7>$ۘ`u~шmv|>\?Bk5m&^F~.2D8RW?iPee1N,fxe~AQ덧w0jN~D]+]¢!o0ƀoZަ1༊; 0kk:nNd=/ͤn>;T \5Zp,6$oR+Cvc`8e2l.+No韬f9}mvS_U6מoy8%?ȫفTٓP$Akjl.(.>Y(@:Oa"bV@rt9~FN.5%^rau!)m=/S#7:?V^n^cs C4)~Q ЎB%};AQVx]"0s_7g9d93d167c442d1ac558e2ce673c06d97db6b994a09b5cea6aab4c98c5b9139d79784abf031c892257c5a1d669e345db1e5949e26y3!y덏%!E/֡c !E/֡H<fNWW Ko09JWt$wәo|jx5R!2YIqnHm.q>VBQ;9ɺq`NN7s+ȓ+@;_Q8$02>9\ibp<&h[/)se)g3 ز؂i^\ps}t&ÜEg*P͹֨M ʯ4- d|KS:\Eb=Ċ;%ڳk>9}=0Ҹv~1\ȝ+ʟ/HK5.&S$уkK@}V]$X֐bJB˾WH QÒ /uMZ-ݢWx ZƫڨßuVɬVJPΚ4=ץ+>-%;$txiqXwLH6 g']i^\yy15Rw-\+TŰaƯ:>p@H,?Hd $ Ahl ]14@ F L X    , 8 P  ( 8 e9 te:e=D>D@DGDHDIDXDYD\D]D^EbEdFeFfFlFtFuFvFGGGGHCtrafficserver-selinux9.1.41.el8trafficserver SELinux policyTrafficserver SELinux policy modulecjbuildvm-a64-22.iad2.fedoraproject.org8Fedora ProjectFedora ProjectASL 2.0Fedora ProjectUnspecifiedhttps://trafficserver.apache.org/linuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/trafficserver.pp.bz2 /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fiif [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r trafficserver &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi fi .rcܷcfcgaf9ca27482c005c42ce6de7033f0d4063321e0e5f2ec9348af8904f9ceb08df8db7f9cb52aa72b7d413adb948920290ca3a828326c125a51166bdb535ba76fff@rootrootrootrootrootroottrafficserver-9.1.4-1.el8.src.rpmtrafficserver-selinux     /bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.2-13.14.3-108.el83.14.3-108.el84.14.3cR@cc*b@bb&b=b|bs@bobf@b]RbN@aya8` @` @]{]{\sZ@ZY+@Y@X,J@X,J@WSW@W>@W3W1@W WX@V@Vm@Vl@Vl@VVV<@Vj@Vj@Vj@U@U@UD@T,@SSϣSi@SP@S}S|@S`S[SFR 9.1.4-1Jered Floyd 9.1.3-2Jered Floyd 9.1.3-2Jered Floyd 9.1.3-1Jered Floyd 9.1.2-9Jered Floyd 9.1.2-8Jered Floyd 9.1.2-7Jered Floyd 9.1.2-6Jered Floyd 9.1.2-5Jered Floyd 9.1.2-4Jered Floyd 9.1.2-3Jered Floyd 9.1.2-2Jered Floyd 9.1.2-1Hiroaki Nakamura 9.1.1-1Hiroaki Nakamura 9.1.0-1Hiroaki Nakamura 9.0.2-1Hiroaki Nakamura 8.1.2-1Hiroaki Nakamura 8.0.5-1Hiroaki Nakamura 7.1.8-1Hiroaki Nakamura 7.1.6-1Hiroaki Nakamura 7.1.3-1Hiroaki Nakamura 7.1.2-1Hiroaki Nakamura 7.1.1-1Hiroaki Nakamura 7.1.0-1Hiroaki Nakamura 7.0.0-2Hiroaki Nakamura 7.0.0-1Hiroaki Nakamura 6.2.0-2Hiroaki Nakamura 6.2.0-1Hiroaki Nakamura 6.1.1-10Hiroaki Nakamura 6.1.1-9Hiroaki Nakamura 6.1.1-8Hiroaki Nakamura 6.1.1-7Hiroaki Nakamura 6.1.1-6Hiroaki Nakamura 6.1.1-5Hiroaki Nakamura 6.1.1-4Hiroaki Nakamura 6.1.1-3Hiroaki Nakamura 6.1.1-2Hiroaki Nakamura 6.1.1-1Hiroaki Nakamura 6.1.0-1Hiroaki Nakamura 6.0.0-3Hiroaki Nakamura 6.0.0-2Hiroaki Nakamura 6.0.0-1Hiroaki Nakamura 5.3.0-2Peter Robinson 5.3.0-1Fedora Release Engineering - 5.0.1-4Kalev Lember - 5.0.1-3Petr Machata - 5.0.1-2Fedora Release Engineering - 5.0.1-1Jan-Frode Myklebust - 5.0.1-0Jan-Frode Myklebust - 5.0.0-0Fedora Release Engineering - 4.2.1-5Petr Machata - 4.2.1-4Jaroslav Škarvada - 4.2.1-3Jan-Frode Myklebust - 4.2.1-2Jan-Frode Myklebust - 4.2.1-rc1Jan-Frode Myklebust - 4.2.0-0Jan-Frode Myklebust - 4.1.2-0Jan-Frode Myklebust - 4.1.2-rc0Jan-Frode Myklebust - 4.0.2-5Jan-Frode Myklebust - 4.0.2-3Ralf Corsépius - 4.0.2-3Jan-Frode Myklebust - 4.0.2-2Jan-Frode Myklebust - 4.0.1-1Jan-Frode Myklebust - 3.2.5-3Jan-Frode Myklebust - 3.2.5-2Jan-Frode Myklebust - 3.2.5-1Jan-Frode Myklebust - 3.2.4-3Jan-Frode Myklebust - 3.2.4-1Jan-Frode Myklebust - 3.2.3-1Václav Pavlín - 3.2.0-6Jan-Frode Myklebust - 3.2.0-5Fedora Release Engineering - 3.2.0-3Jan-Frode Myklebust - 3.2.0-2Jan-Frode Myklebust - 3.2.0-1Jan-Frode Myklebust - 3.0.5-1Jan-Frode Myklebust - 3.0.4-5 - 3.0.4-4Dan Horák - 3.0.4-3 - 3.0.4-2 - 3.0.4-1 - 3.0.3-6 - 3.0.3-5 - 3.0.3-3 - 3.0.3-2 - 3.0.3-1 - 3.0.3-0 - 3.0.2-0 - 3.0.1-0 - 3.0.0-6 - 3.0.0-5 - 3.0.0-4 - 3.0.0-3 - 3.0.0-2 - 2.1.8-2 - 2.1.8-1 - 2.1.7-3 - 2.1.7-2 - 2.1.7-1 - 2.1.6-2 - 2.1.6-1 - 2.1.4- Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743- FTI on EL8 due to lack of libbrotli pkg; use RPM autodeps instead- Update dependencies to enable brotli compression (RHBZ#2125520)- Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150, CVE-2022-28129, CVE-2022-31780 - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282- Don't try to use Crypto Policies on RHEL 7- Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires- Exclude s390x architecture -- not supported upstream- Further changes based on package review; perl dependencies, paths- Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion- Changes based on spec review- Allow self:process setsched, requested on EL8- Set SELinux policy to be more restrictive on privileged UDP ports- Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura , based on long-ophaned package. ChangeLog included below for reference.- Update to 9.1.1- Update to 9.1.0 - Disable mime-sanity-check which is usable only in debug build- Update to 9.0.2 - Use yaml-cpp vendored in lib/yamlcpp- Update to 8.1.2- Update to 8.0.5 LTS release- Update to 7.1.8 LTS release- Update to 7.1.6 LTS release - Return stale cache with s-maxage only if cache_required_headers is 99- Update to 7.1.3 LTS release- Update to 7.1.2 LTS release- Update to 7.1.1 LTS release- Update to 7.1.0 LTS release- Remove expat-devel from build dependencies- Update to 7.0.0 LTS release- Return stale cache even if the origin server response has "Cache-Control: s-maxage" header.- Update to 6.2.0 LTS release- Add patch to add new value to proxy.config.http.cache.required_headers to require s-maxage for contents to be cached. - Remove patch to concatenate multiple header values of the same name in TSLua.- Fix bug in patch to concatenate multiple header values of the same name in TSLua.- Concatenate multiple header values of the same name in TSLua.- Remove patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Apply patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Disable patch to enable unix domain socket.- Apply patch to enable unix domain socket.- Enable luajit- Set prefix to /opt/trafficserver and use relative directories- Update to 6.1.1 LTS release- Update to 6.1.0 LTS release- Build experimental plugins- Just use configure --disable-luajit without a patch or deleting files- Update to 6.0.0 LTS release- Add patch to cache_insepector to split multiline URLs correctly- Update to 5.3.0 LTS release - Build on aarch64 and power64 - Split perl bindings to sub package - Cleanup and modernise spec- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for GCC 5 C++11 ABI change- Rebuild for boost 1.57.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix CVE-2014-3525- New major version.- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuild for boost 1.55.0- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86- Bump release tag. RC1 became final.- Update to 4.2.1-RC1- Update to 4.2.0- Bump to final. No change from rc0. - What's new: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.1.x- Update to 4.1.2-rc0.- Buildrequire hwloc-devel, since it supposedly gives tremendous positive performance impact to use hwlock to optimize scaling and number of threads and alignment for actual hardware we're running on.- Rebuild for picking up ECC/ECDHE/EC/ECDSA/elliptic curves which are now enabled in OpenSSL.- Add BR: systemd for systemd.macros (RHBZ #1018080).- Update to 4.0.2, which fixes the following bugs: [TS-2144] - traffic_server crashes when clearing cache [TS-2173] - cache total hit/miss stats broken in version 4.0.1 [TS-2174] - traffic_shell/traffic_line miss some stats value [TS-2191] - when http_info enabled, the http_sm may be deleted but a event associated it not cancelled. [TS-2207] - Centos5 out of tree perl build fails [TS-2217] - remove the option to turn off body factory - setting it to 0 will result in empty responses - Automatically verify GPG signature during RPM prep. - Build requires boost-devel.- Update to 4.0.1. What's new in v4.0.0: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.0.0 - Upgrade instructions from earlier versions: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v4.0 Important notes: proxy.config.remap.use_remap_processor has been removed, use the proxy.config.remap.num_remap_threads instead. Default proxy.config.cache.ram_cache.size has been increased by a magnitude. Support for pre v3.2 port configuration directives has been removed. The following records.config parameters should be removed: CONFIG proxy.config.bandwidth_mgmt.filename STRING "" CONFIG proxy.config.admin.autoconf.wpad_filename STRING "" CONFIG proxy.config.username.cache.enabled INT 0 CONFIG proxy.config.username.cache.filename STRING "" CONFIG proxy.config.username.cache.size INT 0 CONFIG proxy.config.username.cache.storage_path STRING "" CONFIG proxy.config.username.cache.storage_size INT 0 CONFIG proxy.config.http.wuts_enabled INT 0 CONFIG proxy.config.http.log_spider_codes INT 0 CONFIG proxy.config.http.accept_encoding_filter_enabled INT 0 CONFIG proxy.config.http.accept_encoding_filter.filename STRING "" CONFIG proxy.config.net.throttle_enabled INT 0 CONFIG proxy.config.net.accept_throttle INT 0 CONFIG proxy.config.cluster.num_of_cluster_connections INT 0 CONFIG proxy.config.cache.url_hash_method INT 0 CONFIG proxy.config.plugin.extensions_dir STRING "" CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0 CONFIG proxy.config.remap.use_remap_processor INT 0- bz#994224 Use rpm configure macro, instead of calling configure directly.- bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure, instead of overriding on make commandline. Thanks Dimitry Andric!- Update to v3.2.5 which fixes the following bugs: [TS-1923] Fix memory issue caused by resolve_logfield_string() [TS-1918] SSL hangs after origin handshake. [TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server. [TS-1784] Fix FreeBSD block calculation (both RAW and directory) [TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests. [TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x. [TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated. [TS-1902] Remove iconv as dependency. [TS-1900] Detect and link libhwloc on Ubuntu. [TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart)- Harden build with PIE flags, ref bz#955127.- Update to 3.2.4 release candiate- Update to v3.2.3. Remove patches no longer needed.- Scriptlets replaced with new systemd macros (#851462)- Add patch for TS-1392, to fix problem with SNI fallback.- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Remove duplicate man-pages.- Update to v3.2.0- Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk.- Add hardened build.- Add patch for gcc-4.7 build issues.- switch to ExclusiveArch- Create /var/run/trafficserver using tmpfiles.d on f15+.- Update to new upstream release, v3.0.4. - remove trafficserver-cluster_interface_linux.patch since this was fixed upstream, TS-845.- Remove pidfile from systemd service file. This is a type=simple service, so pidfile shouldn't be needed.- Add systemd support. - Drop init.d-script on systemd-systems.- change default proxy.config.proxy_name to FIXME.example.com instead of the name of the buildhost - configure proxy.config.ssl.server.cert.path and proxy.config.ssl.server.private_key.path to point to the standard /etc/pki/ locations.- exclude ppc/ppc64 since build there fails, TS-1131.- Removed mixed use of spaces and tabs in specfile.- Update to v3.0.3- Update to v3.0.2 - Fix conderestart in initscript, TS-885.- Update to v3.0.1 - Remove uninstall-hook from trafficserver_make_install.patch, removed in v3.0.1.- Note FIXME's on top. - Remove .la and static libs. - mktemp'd buildroot. - include license- Rename patches to start with trafficserver-. - Remove odd version macro. - Clean up mixed-use-of-spaces-and-tabs.- Use dedicated user/group ats/ats. - Restart on upgrades.- update man pages, sugest from Jan-Frode Myklebust - patch records.config to fix the crashing with cluster iface is noexist - cleanup spec file- bump to version 3.0.0 stable release - cleanup the spec file and patches- fix tcl linking- bump to 2.1.8 - comment out wccp- enable wccp and fixed compile warning - never depends on sqlite and db4, add libz and xz-libs - fix libary permission, do post ldconfig updates- patch traffic_shell fix- bump to v2.1.7 - fix centos5 building - drop duplicated patches- fix gcc 4.6 building - split into -devel package for devel libs - fix init scripts for rpmlint requirement - fix install scripts to build in mock, without root privileges- bump to 2.1.6 unstable - replace config layout name as Fedora- initial release for public - original spec file is from neomanontheway@gmail.com/bin/sh/bin/sh/bin/sh9.1.4-1.el8trafficserver.iftrafficserver.pp.bz2trafficserver/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnuASCII textcannot open `/builddir/build/BUILDROOT/trafficserver-9.1.4-1.el8.aarch64/var/lib/selinux/targeted/active/modules/200/trafficserver' (No such file or directory)https://bugz.fedoraproject.org/trafficserverutf-83d119872ff02ba12958df0cb53f2f6e2080384fad7a7a300de66c3a345265604?7zXZ !#,:,] b2u Q{LUua j8nM:<VȦ:O{= 8-B^(ds/n~$}Yڤr83d-yy9К6`4dHDC^H`EGw)hfzShW+m$mʸ7Wktq^_߻j"}sL4˚]K2^^ m i\4?2W=T?haB#3r P\+*8$Wu樓lΨVϳXR ^cqynW|vQP+u*ݷ}_-yv)%'a:A͓Ar6k=k.l,~Ķ`7 3eb6|ég rWz+ w6<6uѢEkCf{K<8$OPAm  ;4/5hJvs)Ó^3&s&s2<[VeσS% 9c$ ـp|9(1;!Jj;& `1פTv}:8̐_x\_~eT3gZLu #4ukMb5BO;쓹 Z ),2/xEJKmix Fz%}4?XUdoZj 1x6 -u*8%ɋyNxY@Ru A'pZ>%o* Xo~ WͭpJejtjPN_چI,"£尡@ddo22gՃ/!Q[+tjK";(RKdƙHn4*T06JgTĔT5f_\yL!2hWlD}]Ub?-Q,U4 {yΗ- #W\":0Xh%N 5B[#` 2s9p#-bZ`1ûʌtMKsU<,!MC]~E ؊}h7dX'8?VfU#A-  y+2%| ԑFT*rv( jmt2Vwm=>D |xZ'E,5 Ī|2lrc+GˍGweukG0Ȭt袧kl^i^}M?!NU$`KY?C4 +z]]iǎA``Kn7m=3rPa7Y>^BG,ősΖ V,΋ǥ k;n9uTႭwx+LՄ@AWf?%ԩwTl_rsrx{X5nüLӅwW7ҜZ+=u*7}DZ8q[yx#l$~ƺ/6,pq': ]1|1Vj^fŃ>ˈT=l'oCTsQ]^;7gLEy'Zp2m ~1Kp$&:gyUss"zkUYD$1x|PYu~be'y)`$s1 R}n۝$!*V]t-nzNLWJ@ A=Bۀؘ;?8qv]6l܏jrGvfȂN!mK-.A'ͯ%[g*9rÔPr}?)N51C"6cf i 0k٧)kpPo3eV:;qM ҬEZgE.+zj+<1chCfz rWJqh|i}4۶?i ѴDO(-pV  & #Ċ 1<$T`iiЂQG|騝fD[WX=o_H蕲X&_ 03fR5+8I;l=תg<8%gT*@`7I &ʲVƤP()-VH˜b&3<䋈 ru1YQ#vMV~_z "F,k^hr+'u !f =G|Gȱ€Lzr>zfSz<˞X M*gF% >Wf֬'ЄU3sJجB#s38bm?!W\M:f|7áM5mdchEOL;\Չxz^$04c[n)$͡~GWYZ#ؙa/RU}^=9#{*I9!i֋ZH һܹF Ӌd8 t}m)Pt!qY3gm9V m|ӛÿ L1+ȨP_27Dccszc7(\X*2U;¸9Dn3͒.vB/s1n^H;ořEQ-ڴN/wN_wccF|#=mm=5\]oϙ=4!GWite@TíYPe*|&nHcޚp G<!kl`FrDaU(m߬Sg_WW4'ZUԿԌm`0*=p^M˕$UyGEH0.Ii1B8[ظH 61Z9%8OE%˟DWg G :e9F` [ [^խ#+w$ p8zzQ'43T\"jПta%4/u-=g/m@kǎ,4mILRbByυ^N/vo~=Uh?7!!<,nSIRb=RulBE4 D7'v(i8O_os:'-mhm[2`ƠP?ITlYZ0p!V B `xMhMW@.&,a~1Z "b?w! {9ؼъֳ(˽Mw ١i2[;vɚR+fH;;)=jvsbYV R-1h 凣Чdƻ5ҚC@!KW8x3Mu54y>oe{8U^Mzqڝj0Rb<3C/y/@~ؘ3m_m%kV4yzT3Z 'gX1z=Gk߰[s|A`eU#B SS_rq;T?&RlRnyyÈ{zbLu+sb_6t\Jؑқ35.p%Cbm$ ;Ȝ> % (8꿺Z0jTpPζ D=g.h{TtQ "IV 3>" _6O$,%8 %jfBY^rNTTIa\n00&[|d*(>R;Lox[<÷=oB}&$-Qb1etwPQK$4K ݍhZ`̾RA2=r@uz1~jeۛ4xnK?%%p>IYQ&EqG)5;GnmTVԛ22V'`RuWErBjsu>; q'Z)H<9(F/ ܢw5G|_r£R:C%S8NJ=H3vy_R/nSo6IXEA7LS(`CDr M]L򧟎s".tTOCRH/hVe VXZPI䶆Т|L7hFf0/b.*/-nI *^nJY';aF J=,ic&rgp Tt1&`Ig7h {Oˇht&q1'A$T{_rD$1Q'y˒HsOwDt怓b)!8hoT `|‚tĻs{niMX2aHፂ7 `8A II lZ[.K\~&KEoE\msFl^d|C rMI9Lqяκϳ Q'pG>ˣ^).eRjT"%u*G2fYXGP‘BKhוn06=ζ1`I *a1%WY3st= $pwrMgOHZ{Vh63[0lFMy ʉbk~c&DBZ'*ԗτ҆5 ZwSe O ~ ɺf<`5LXH%DB6xScˤ0(JjCP[?N#&yG%J7]09+ۊq `̃ dc BVx`?FX"M^EE~'pUm?WBb6 F7R5u\_7'OzBKz1*HҜu m`KO\E{!ׅrHn4(z(*6ů.s‡mo&6J_N@ qO1Y;#AGYԞ3:0geSV*{Pfjz_˅lPɱ,VE 2]i%-QFvxb}Ih_Z(7<z.Z^$2][3,bfѿAAt|17[ehhmm6X+tsh.RFYsUNcLk%ƞv?}6uNJc(CvaT^ lW]:W>3I> }_g)KIGp& ~mu#:4nH3u54Ow'㢜w\>L(1AiVz`>:&_8VMb3:'"8oǤGd} W[ŷUP5YiINޘtmzˎ0UMҾ0d-kIffYSkþT㮝rh9M]JΨ%F,45X /cb,ێ O?m /hWs!kΨRZUf)x[X(`>mhdKΕ`3G|OYe=JbM0jSnQ<% |6R|0m`YgEd1I ߟqPYihJ<REb{Ϸjx*Փc?2[7(BҿO8 +ՐO.?nH[&!Q])\f*Q2A&,7ŅADqD]n}:9kyM%VT`,@SNl?1PJ>#\t f^{L9s5v  ˖;dasߑ.L?l7Gvy78QBt 2nZ<'Xm| vN2HGgcBD @Oz NIK?,Sz&͢=ڀ@c8&D{Œ+hZ! /4m;'64e21 U+Cr˵4Y?:A;aAaX ݋)fEI |~fy%yN[]t/&_A+lkXHZ#?; r> TChaqnRlbmo*dƟ\ >/Yu7g( 'xf%;H ="LVQADpJUwPw >і<{<59v:cbթP eNeyuѨڽ 4j^n"{Boز7#[X my|]04o O`Fg+8qH;+L)%c0B%i_w{5) po4;cX.E8k˩{23l?D)aLrrEYw°^.i.Ͽ93Ttέv-[ot٣G}R3u5𩪱p=Bc2B 1Vkׯ`&D\y6JCC 1g7TkȜ2``y0f |X 'GC!tjV5u(az/m=V}0է~IaFr,To?닂AZM\PNCBfު,(`?!`ZUA݁8H @]vN]%م,⛕j5MqeŠsgO5SsulҢ^ 0"Hť0%9[+_qblo/Q7M!6{7ڤglL.W ËfOGN.>Pw),S:rgƞziGgz ǃQG F+czS>aNIj4bƀ{e\)~h" Oarx.N#pxpCNݿџRZ/FmE3|9;3] ,sr?h(GC6+}VZ!cu"tu٥~U 4l9sM9.Uwxqx-j[ LH:<'dWThEN SF ![hSdy"vuWc2&jEtsD|> 6#q#b2ɗ/r Ԩ8;Kw z$C"ȩGzu渮:&G :m IME%R!W\nSxQqr~wzsNn5/fġT;9-N5mqQnݣ.$(7.WXI7=!mFlQOａTWgq}w(F]44㌦D *.LA)BGtdmz6N2מv08aO v{?$b)ArOf+ <@\luJII7t/\@e_ZD| ^ÝtI_Fcq}bH.qH1-{jLP8?p ?~vtagМP;`@~_W(]TyPA+1f1= Ll <}}2 H2<+0} vͼ2)ص\`[zH6,bɑU<3jE2/%ٺ2%=keHɲKTL+"~:_ٳw 7}CfB n^z#;BT-澭hɯC Ѩ"#;* <%bՎG6 5iS6xgF|J&e5"OQ~SA `c ;AE:Y׷͜Wd3Yq~5Վ0INu$3鰀AW7ڝx^ˬ4I-EL$yҡ_> ~n-+ݦrU4%Z;uć@dA$QmR#RO/j.v&}Hпm}Yw\t7௿ ɱ;WGlߏ:#π=\د% V%{v8(+͉VSZ AQ:R6`EE" @`na'%h)Mϝ'PePvߧي׭ rjݒc|8II}>%eގ1 P*5Η@3u}kJ<ѷ֥ʜPy;5J*t^5?-y8Oa0yG5MU%˄ &B4kznVj Vu*3OrƎ^¶lJ jћ܇x'$*wc7@I?M/+/ډ,1e#m C3}imf󚶊W%)ܹ)?ggcDz16]1ln`0׈\f5ƞtS!}GoVп晥ʬ-_s'd>S(UFsƙWhsE3;cm,;^!GUd"k&%cw>쳕ݐB(Tvf:[/xկxێUy 4B3׏cQxHv4Ւ$U21 ES֎"!dWjHF#%?@E$-cHa E,&B#iƹ#lJvQ\s$ƞQ xkmvX[լ69 D*vjMȌ&Hf򗪲'; ̑!&I=rt ݞؒ,~EKx,|YX=3]1Vd^kg)-Q{ʫ5T7q[l;w6*hmd[CVLtNo9t҇m_Aj`eN,v6Zud!k61&k0ltnfl Sy. ۀs sl~ 3Uڱ*u{NU#pJtTh>wdd>vmFً@^`_u˼|mE J [$HPQs6RUOviyfOmsgZu$ YZ