trafficserver-selinux-9.2.1-1.el8 > 6 6_6 3!y덏%!E/֡d !E/֡(' " Sᴈ#S#4xKf8C6bO) n*qA[^/}FCL;pDPgI`T\4ޅTě+mc}kj/D7C;TRe?4u@W'$CAiLOz3 _AX߮Od0hngw^D ;%UK=]DQG=)`<gpD ,, )m Y=Z]^pj%T4~A.G"P 2u%4_@l i>R? bzhkaL.֛{AbPYRHK[~kKW%xu2C8h`FN/}QWp# Vx/^&C?ÿw*eoa5/ԥrp wr~E nKHŏ6#;!)%c##T{?jND[h~I:'fQFU Iݥ Ua9428040b19a469379ac36b8f85e83775c55d8e142c0c43513289bec9a5c033985ebe2e8c1f0090038efeae81f1722e173a2548bz83!y덏%!E/֡d !E/֡~D"L <8 uG7wZ|lѕ/Zvۦ.{r_=8*np#b=dX[ԣ+tT3J #OiZb+EDCˆ"`{ؓ˚DhKmrXH":5Is)lU$Tά(^*.vwS|@<ޛ,618.Ğ ƈv(9AE[l(9|zUAdR4&>l?5)QGq~tiչ([2+BcJը13_Z^% 7{Y]y5gRٸyTFmv8Fg6WBhe[Q:>p@H?Hd $ Ahl ]14@ F L X    , 8 P  ( 8 g9 |g: g=E>E@EGE(HE4IE@XEDYEH\ET]E`^EbFdGBeGGfGJlGLtGhuGtvGH,H0H]HcHCtrafficserver-selinux9.2.11.el8trafficserver SELinux policyTrafficserver SELinux policy moduledbuildvm-a64-10.iad2.fedoraproject.org8Fedora ProjectFedora ProjectASL 2.0Fedora ProjectUnspecifiedhttps://trafficserver.apache.org/linuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/trafficserver.pp.bz2 /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fiif [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r trafficserver &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi fi .dMddaf9ca27482c005c42ce6de7033f0d4063321e0e5f2ec9348af8904f9ceb08df8c0560d9651deece675b174115bd124350066e932957b7aae53add24420e4362c@rootrootrootrootrootroottrafficserver-9.2.1-1.el8.src.rpmtrafficserver-selinux     /bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.2-13.14.3-117.el83.14.3-117.el84.14.3dZ@cʂ@cR@cc*b@bb&b=b|bs@bobf@b]RbN@aya8` @` @]{]{\sZ@ZY+@Y@X,J@X,J@WSW@W>@W3W1@W WX@V@Vm@Vl@Vl@VVV<@Vj@Vj@Vj@U@U@UD@T,@SSϣSi@SP@S}S|@S`S[SFR 9.2.1-1Jered Floyd 9.2.0-1Jered Floyd 9.1.4-1Jered Floyd 9.1.3-2Jered Floyd 9.1.3-2Jered Floyd 9.1.3-1Jered Floyd 9.1.2-9Jered Floyd 9.1.2-8Jered Floyd 9.1.2-7Jered Floyd 9.1.2-6Jered Floyd 9.1.2-5Jered Floyd 9.1.2-4Jered Floyd 9.1.2-3Jered Floyd 9.1.2-2Jered Floyd 9.1.2-1Hiroaki Nakamura 9.1.1-1Hiroaki Nakamura 9.1.0-1Hiroaki Nakamura 9.0.2-1Hiroaki Nakamura 8.1.2-1Hiroaki Nakamura 8.0.5-1Hiroaki Nakamura 7.1.8-1Hiroaki Nakamura 7.1.6-1Hiroaki Nakamura 7.1.3-1Hiroaki Nakamura 7.1.2-1Hiroaki Nakamura 7.1.1-1Hiroaki Nakamura 7.1.0-1Hiroaki Nakamura 7.0.0-2Hiroaki Nakamura 7.0.0-1Hiroaki Nakamura 6.2.0-2Hiroaki Nakamura 6.2.0-1Hiroaki Nakamura 6.1.1-10Hiroaki Nakamura 6.1.1-9Hiroaki Nakamura 6.1.1-8Hiroaki Nakamura 6.1.1-7Hiroaki Nakamura 6.1.1-6Hiroaki Nakamura 6.1.1-5Hiroaki Nakamura 6.1.1-4Hiroaki Nakamura 6.1.1-3Hiroaki Nakamura 6.1.1-2Hiroaki Nakamura 6.1.1-1Hiroaki Nakamura 6.1.0-1Hiroaki Nakamura 6.0.0-3Hiroaki Nakamura 6.0.0-2Hiroaki Nakamura 6.0.0-1Hiroaki Nakamura 5.3.0-2Peter Robinson 5.3.0-1Fedora Release Engineering - 5.0.1-4Kalev Lember - 5.0.1-3Petr Machata - 5.0.1-2Fedora Release Engineering - 5.0.1-1Jan-Frode Myklebust - 5.0.1-0Jan-Frode Myklebust - 5.0.0-0Fedora Release Engineering - 4.2.1-5Petr Machata - 4.2.1-4Jaroslav Škarvada - 4.2.1-3Jan-Frode Myklebust - 4.2.1-2Jan-Frode Myklebust - 4.2.1-rc1Jan-Frode Myklebust - 4.2.0-0Jan-Frode Myklebust - 4.1.2-0Jan-Frode Myklebust - 4.1.2-rc0Jan-Frode Myklebust - 4.0.2-5Jan-Frode Myklebust - 4.0.2-3Ralf Corsépius - 4.0.2-3Jan-Frode Myklebust - 4.0.2-2Jan-Frode Myklebust - 4.0.1-1Jan-Frode Myklebust - 3.2.5-3Jan-Frode Myklebust - 3.2.5-2Jan-Frode Myklebust - 3.2.5-1Jan-Frode Myklebust - 3.2.4-3Jan-Frode Myklebust - 3.2.4-1Jan-Frode Myklebust - 3.2.3-1Václav Pavlín - 3.2.0-6Jan-Frode Myklebust - 3.2.0-5Fedora Release Engineering - 3.2.0-3Jan-Frode Myklebust - 3.2.0-2Jan-Frode Myklebust - 3.2.0-1Jan-Frode Myklebust - 3.0.5-1Jan-Frode Myklebust - 3.0.4-5 - 3.0.4-4Dan Horák - 3.0.4-3 - 3.0.4-2 - 3.0.4-1 - 3.0.3-6 - 3.0.3-5 - 3.0.3-3 - 3.0.3-2 - 3.0.3-1 - 3.0.3-0 - 3.0.2-0 - 3.0.1-0 - 3.0.0-6 - 3.0.0-5 - 3.0.0-4 - 3.0.0-3 - 3.0.0-2 - 2.1.8-2 - 2.1.8-1 - 2.1.7-3 - 2.1.7-2 - 2.1.7-1 - 2.1.6-2 - 2.1.6-1 - 2.1.4- Update to upstream 9.2.1- Update to upstream 9.2.0- Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743- FTI on EL8 due to lack of libbrotli pkg; use RPM autodeps instead- Update dependencies to enable brotli compression (RHBZ#2125520)- Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150, CVE-2022-28129, CVE-2022-31780 - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282- Don't try to use Crypto Policies on RHEL 7- Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires- Exclude s390x architecture -- not supported upstream- Further changes based on package review; perl dependencies, paths- Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion- Changes based on spec review- Allow self:process setsched, requested on EL8- Set SELinux policy to be more restrictive on privileged UDP ports- Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura , based on long-ophaned package. ChangeLog included below for reference.- Update to 9.1.1- Update to 9.1.0 - Disable mime-sanity-check which is usable only in debug build- Update to 9.0.2 - Use yaml-cpp vendored in lib/yamlcpp- Update to 8.1.2- Update to 8.0.5 LTS release- Update to 7.1.8 LTS release- Update to 7.1.6 LTS release - Return stale cache with s-maxage only if cache_required_headers is 99- Update to 7.1.3 LTS release- Update to 7.1.2 LTS release- Update to 7.1.1 LTS release- Update to 7.1.0 LTS release- Remove expat-devel from build dependencies- Update to 7.0.0 LTS release- Return stale cache even if the origin server response has "Cache-Control: s-maxage" header.- Update to 6.2.0 LTS release- Add patch to add new value to proxy.config.http.cache.required_headers to require s-maxage for contents to be cached. - Remove patch to concatenate multiple header values of the same name in TSLua.- Fix bug in patch to concatenate multiple header values of the same name in TSLua.- Concatenate multiple header values of the same name in TSLua.- Remove patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Apply patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Disable patch to enable unix domain socket.- Apply patch to enable unix domain socket.- Enable luajit- Set prefix to /opt/trafficserver and use relative directories- Update to 6.1.1 LTS release- Update to 6.1.0 LTS release- Build experimental plugins- Just use configure --disable-luajit without a patch or deleting files- Update to 6.0.0 LTS release- Add patch to cache_insepector to split multiline URLs correctly- Update to 5.3.0 LTS release - Build on aarch64 and power64 - Split perl bindings to sub package - Cleanup and modernise spec- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for GCC 5 C++11 ABI change- Rebuild for boost 1.57.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix CVE-2014-3525- New major version.- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuild for boost 1.55.0- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86- Bump release tag. RC1 became final.- Update to 4.2.1-RC1- Update to 4.2.0- Bump to final. No change from rc0. - What's new: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.1.x- Update to 4.1.2-rc0.- Buildrequire hwloc-devel, since it supposedly gives tremendous positive performance impact to use hwlock to optimize scaling and number of threads and alignment for actual hardware we're running on.- Rebuild for picking up ECC/ECDHE/EC/ECDSA/elliptic curves which are now enabled in OpenSSL.- Add BR: systemd for systemd.macros (RHBZ #1018080).- Update to 4.0.2, which fixes the following bugs: [TS-2144] - traffic_server crashes when clearing cache [TS-2173] - cache total hit/miss stats broken in version 4.0.1 [TS-2174] - traffic_shell/traffic_line miss some stats value [TS-2191] - when http_info enabled, the http_sm may be deleted but a event associated it not cancelled. [TS-2207] - Centos5 out of tree perl build fails [TS-2217] - remove the option to turn off body factory - setting it to 0 will result in empty responses - Automatically verify GPG signature during RPM prep. - Build requires boost-devel.- Update to 4.0.1. What's new in v4.0.0: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.0.0 - Upgrade instructions from earlier versions: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v4.0 Important notes: proxy.config.remap.use_remap_processor has been removed, use the proxy.config.remap.num_remap_threads instead. Default proxy.config.cache.ram_cache.size has been increased by a magnitude. Support for pre v3.2 port configuration directives has been removed. The following records.config parameters should be removed: CONFIG proxy.config.bandwidth_mgmt.filename STRING "" CONFIG proxy.config.admin.autoconf.wpad_filename STRING "" CONFIG proxy.config.username.cache.enabled INT 0 CONFIG proxy.config.username.cache.filename STRING "" CONFIG proxy.config.username.cache.size INT 0 CONFIG proxy.config.username.cache.storage_path STRING "" CONFIG proxy.config.username.cache.storage_size INT 0 CONFIG proxy.config.http.wuts_enabled INT 0 CONFIG proxy.config.http.log_spider_codes INT 0 CONFIG proxy.config.http.accept_encoding_filter_enabled INT 0 CONFIG proxy.config.http.accept_encoding_filter.filename STRING "" CONFIG proxy.config.net.throttle_enabled INT 0 CONFIG proxy.config.net.accept_throttle INT 0 CONFIG proxy.config.cluster.num_of_cluster_connections INT 0 CONFIG proxy.config.cache.url_hash_method INT 0 CONFIG proxy.config.plugin.extensions_dir STRING "" CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0 CONFIG proxy.config.remap.use_remap_processor INT 0- bz#994224 Use rpm configure macro, instead of calling configure directly.- bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure, instead of overriding on make commandline. Thanks Dimitry Andric!- Update to v3.2.5 which fixes the following bugs: [TS-1923] Fix memory issue caused by resolve_logfield_string() [TS-1918] SSL hangs after origin handshake. [TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server. [TS-1784] Fix FreeBSD block calculation (both RAW and directory) [TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests. [TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x. [TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated. [TS-1902] Remove iconv as dependency. [TS-1900] Detect and link libhwloc on Ubuntu. [TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart)- Harden build with PIE flags, ref bz#955127.- Update to 3.2.4 release candiate- Update to v3.2.3. Remove patches no longer needed.- Scriptlets replaced with new systemd macros (#851462)- Add patch for TS-1392, to fix problem with SNI fallback.- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Remove duplicate man-pages.- Update to v3.2.0- Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk.- Add hardened build.- Add patch for gcc-4.7 build issues.- switch to ExclusiveArch- Create /var/run/trafficserver using tmpfiles.d on f15+.- Update to new upstream release, v3.0.4. - remove trafficserver-cluster_interface_linux.patch since this was fixed upstream, TS-845.- Remove pidfile from systemd service file. This is a type=simple service, so pidfile shouldn't be needed.- Add systemd support. - Drop init.d-script on systemd-systems.- change default proxy.config.proxy_name to FIXME.example.com instead of the name of the buildhost - configure proxy.config.ssl.server.cert.path and proxy.config.ssl.server.private_key.path to point to the standard /etc/pki/ locations.- exclude ppc/ppc64 since build there fails, TS-1131.- Removed mixed use of spaces and tabs in specfile.- Update to v3.0.3- Update to v3.0.2 - Fix conderestart in initscript, TS-885.- Update to v3.0.1 - Remove uninstall-hook from trafficserver_make_install.patch, removed in v3.0.1.- Note FIXME's on top. - Remove .la and static libs. - mktemp'd buildroot. - include license- Rename patches to start with trafficserver-. - Remove odd version macro. - Clean up mixed-use-of-spaces-and-tabs.- Use dedicated user/group ats/ats. - Restart on upgrades.- update man pages, sugest from Jan-Frode Myklebust - patch records.config to fix the crashing with cluster iface is noexist - cleanup spec file- bump to version 3.0.0 stable release - cleanup the spec file and patches- fix tcl linking- bump to 2.1.8 - comment out wccp- enable wccp and fixed compile warning - never depends on sqlite and db4, add libz and xz-libs - fix libary permission, do post ldconfig updates- patch traffic_shell fix- bump to v2.1.7 - fix centos5 building - drop duplicated patches- fix gcc 4.6 building - split into -devel package for devel libs - fix init scripts for rpmlint requirement - fix install scripts to build in mock, without root privileges- bump to 2.1.6 unstable - replace config layout name as Fedora- initial release for public - original spec file is from neomanontheway@gmail.com/bin/sh/bin/sh/bin/sh9.2.1-1.el8trafficserver.iftrafficserver.pp.bz2trafficserver/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnuASCII textcannot open `/builddir/build/BUILDROOT/trafficserver-9.2.1-1.el8.aarch64/var/lib/selinux/targeted/active/modules/200/trafficserver' (No such file or directory)https://bugz.fedoraproject.org/trafficserverutf-87965d0f56f9b876927aab03f6c302c7e80863ce4428a3e78426de36c38c77b19?7zXZ !#,:-] b2u Q{LVTg`7ubEu &Qԁ[kt.=E\&R%kX=_c:Y1Pk5?V]iRT4mU5K#BZEe,e]ȸ ]җw5XKI"j <~$$ EHʻ F&uLvV"KF;X7oj?5sM!}Mq:4t):ce9>滄bE $iLww&OjKW(eC㵧ޛNco|>Zq! _w H=- suNUrEtODuND@Yk1TTXf@%kڡ :ґj, HƟZ!}رEBЗ1#O-m Fa/#uPS1vٌDLS͚s,/~dzkr03nR | eƓ}x3/7>||hQ-H;N= 9>1gj!> LI$6&I7Y2$U>BRU/nzˋU/ɗMF*$;Sh<- w-.9m%!Gc!̑2{BMM3x,jP^}5iF& _w3`ߥJUwjъ'QEJI fhDW>,]+(%tyFē9{hi׷E+LѽG "v;7"k5ePSK > kHq8A)(KH0T&Fȯݏs{Pˢ1g\셇0xqV- ]O=T<_{q o<+ץ%P+x(W'dS9"y5AqgǺ_":-eB1n=7@.Tz**al-mGW0ܤ$( U8I8v%۲EciC|Svn'A7cMe&jb(c0s/G2Vg KJJUzLV)Ky@NKj2e! >/-vLTȢ:_\|Ar [";}q-R :f/пxo<"l[(yC-FM$[mZ`G)!R—j릩qe;(fTY#⾶DJ&j}5a 6-l:'@yዶxz"Z`qL?1qjU4YØ$ }"-f E}A4"rg77˓q/~od2f5$E|`O,t$>E|ڦ -[5z0eTTR Z5u7ec,`?n!EdmcҪn ˋW؂<7jq#H+\ٗٽNtS- [(l URqϴ͉NN[gKl&']10sD %Ld0CAB2t9jPG N1Xcam}[kߟd)ҶB0M8\Ag{(9R$Q/JXBj@!0]yË0)CzfD*ZѴ&(D-i-taC¨ scݞ9uF}gp1~cI5|~WMەG_~=0LLR߰3)-jM pu-~ex7;B)͑܋u;:QE"XS=Cnc<6 ܑ)RP4Z9tVoFA#77WE+G|,X9uI.a&dj_3E ̃r=ʢq  t!Ϧ R쮚@ypX7~7 3nuۿw𞁓%1#!YY@\f*ӓX6.K >kǣ]$5E``%F/0wW(8ICPw8~ ddL׶z;u|8!aSq\"({}s~f"9IYnSjbqR-muPR\ bORy =BB$1@L4# A3\9)u^mD<? 0Gk1f@qOjjݒx1mZ&a`Έgm}oؿuO ]*seR%þd>VڽI^;Ne*ݒ"9YKc[FoDi<~N.#ZO~\y>rkAl5Ky 88F%]E&<{qk1"o%炾Z_{]|o9O%|i 2Ϳa`_#({SMÈ&\2qK2#'"ey'k9[۪qdvX2էAĖ{xt2dN*o4ӳbS\QV*G80j+w`K2Ŏۨ'$<*]e~l;Jx?Pfj1_s*y0+ϋC Fr2>sLT"Ѓifc"#bzuw->am(w.MvO.4::vůy2s2.{~f؂P2N;Z+!ڣXļIo39aPp\G) ӖޖO^Oz"45#cÛ΅&ͅ<}VTzX`>(,AC=Qh/7[S֍E$/E"lIv1~~E=ڕax,Z?5J^@~P#}78i&Z*㰱O ^TeFn?l;n^&6iI:Ԟ=/JspU/ \ B͸YClgCOtZc&PG&s pZ=uG#wDr\_̶}[Sȃws@c%--Sx eHb|)B(YMU! kArئT\rg:cZ6//e )v6; YV>pL .V"?[ҀӨK#.=rH)DkK $Ȉ-Y(aT Ihu&?U*0t_ւ*p~ {G Aplèұ*) \;p9ҳdBY@JN0<#&TCz`&M"9)1#R !*78-i>Q䕻~NKNA"2 +-1pbw+{ؘ[C.,;ჰGjcUizTC)uǽbR(w d<eTЯbu? KXGK0m <1L\'#ե2}U)KblWYD[pb?gi4uo\.}ۙ[yʄ#g8`-yh"t٥K -?dr|(\3QhJ3/:QF;'By9󻓬PtQ3c} ʓ-6I霹 p2sY uwmkfKJTbB'zL1n<@ M"˵'zE*: uFZTIl5-jpRHtϫ~poidǪO"+VJ3 Ν-xiA]QǔRJψ"/REg/Wթ'xRg[ &;ssh- +sA*6* KT}xYS4w*-rW㾷Lu\~/=o+{uȳ^t͵Qͧ@[-Tk0*Vz'|W8օ,hn |?d\$6Nݞ0JԃEXNܻ(#7|_5wKxH1ބxR65D Im dcy%Q|ƱJڎ|˶y!|*W db%1 <tr4TDY A.""jNr|+6OjX \M (;6fh+Ɩzo@[w=;A?ca$ )do"DꡋAqv=]x'0ox[M:$Fc3;g}GqK_. GPhjt%Ҕ9,9z33d3QnDhkz/` jdA &|4-hoB^3m gHSLd.G .fHsVT2lu0):^UHP~wO2&S Qz:Y@#;v葐6^U<7mjw*>mC1[EfV?RªdтEEObz._@R&r#a &L ˱oFdgɭfLݐӱ$8bzցI1LR7 <`aeF~0"-0f$g)TGLk#'b7љ1 6<ߗ޽(Fɟ&9Q?=q ޭ|N+l6R4 f/r I+Y*N4]9f*9;吷#P)᯿kjz?̹`ԳcFg+'XIleyBfb{Tv&y~m>08TlpLuM:=Bqn/2a΅^qí\TҷqHkP+lԿf0jBbU[I0ZD!1vŊ즗@/3MNo@t? cM~WL{!:-ȽMBDhI(L8P_d^0jO+R"-K K+bgPC|C\^ VXMb8n{髳F_ s8HaWQ2#pM`Gza](C({nhO9DU}7"M!z` Kp YQ ʯLKKLS|IqKň&6_ܡ4 Uxp:λ*t j%볈UײM+ 5;?~ΆsZocә H%qֵy _=_a 74CB%TE9 Pch"sJ1SИ4C4.zt-MF%\ӺUHgrP/$끫RΕikX\ 9 "ZOLCBpf\0ʒ^]înWsyGezZ؋n~ dtMeX|YFf'b}t_u=!-%%oȀ)O~8! ԎIP]iQZ+[ѶJ*Re hNViu#~{9mZ)ýb'uY+3Wd.=|]lbD! m]_p$B)B`a$7L _+ħʉ(\$lR8Vu 8$P3*9xys۳5jLLw Ioڤ&S1*iߐ.TҌ uDZm=m|g F$QAJIc-FylkNEanE1s%Ը9Xd8pvPX C(%PB 'E7&(FF'n5c/uѥ^Us2@TOE.L ُP=8^5F㢾ANɵF0qAfW>y8Gx%&ī0h8 dFA[˕l"F@_-V& s λ%3VEϛ [JO}6ɡ&k )hU*KzvZ|tx>`y BM V(=hvy.q̠O$ȧQ%J0,;<R ?ʙq= &>ƶdF}wpą sqچ~1]tՆHQ@b%;dI2C>6ΏaW B *1QXD$g|(]_̴[c{;H|?궩3n]IAX oto;Rȝ~׿2\z& .[R'(AobH- [hydl{xbQY͟4|b퍞 FMu 8Ml/)OxK2~n@+^نM3W7H> yņjui9 B& Xॢ!I@!MHgMXY@~26^1L+1ӈ HP{`tMGؔu 1j;q/6~ aUMasƳu 'AgH++Q#g M's>1}@S cu\Kʼ($dɅ,m'pl[iַ)V2x{;@aRq`u#85:?7LkOG cBxCbMeNTʱBT:͟ɈUo!~{{DLqaۢDUAۯ\T:蔏|":ς*'>ʼnfNϔRs $ZM$gYt5 bծX FXʤO<7 ouK UV8;=H&4LUp6_60㷌Iwo`iI_wkg~do`]y3yBFf j5P&#t{$/nY*J'"QU`bٝVGQߢ |y 3m\4-Ou2.qVt@wL71,_xGU^,dž}-fW68Q yk rMZi;;!m"+`[TNXozj3qp, Rr^iJĩ53׹sw.;yj@|u M6)tR/Qb$ {/E[$N[ Ljh0AHS ;GwZȈ2* e.mI-ܷn2 kU U!6Tea'VzC!.]1~_QTB@!)NեׯRP2\+IsبNhq/v&CZu}g wb]fv\ j>r \Ty\{[7!d%8LOVUu:Qo`ޛfq KB1 [#f`Z!Aq=Q!8.EJś{cKzmRu/u"o`;?\,A)Ŷ$kX>Z:  ?&ȄjsB> TM&+e:]; cbgd6xrLސH\tk~;ד u UdmJsnܷ]GpBھ1737PޱⰹhzV|q2R" zF|aEVxo;Ӂ vW6`~D zŞ^Є@dp7xS~~Y:;=C-i:aG`%ļg_`jYZDZN.P6*t6H8z؞&REѴLQ|h7@Z T/*Vw.HqGײlb(\]Rg5XEK0i/ػ:eoqBmg<Yf `MbA1C|0-3$hI^&dt(>.17sZP#K)H}KmK8.kA5A]1Vqfp,eJ :j'*_jVѶF˨<~K`D8'#RnMd*.D̢2^~H QmEuޤ7G6xh6:u#KӴz<'YУ-rЉ[N= e&I*l#5Z1'u'fg}EO\MǭA 4~<* ﭔ1-pT}[u{u0 j?k28+{I0s45E'ݘ%<<ǚf# .;!zS=Af1%ZMxbkf keiRۗ%JL~*l.VW tX dZG* lөD,i-[L!Y8P^(>(U5,zr!_ihg>] 0ಌO&3<h19K|rkGtWMI)RH%1ۋ O ;<:i҉-mzx5DͪKc$cOf0xAL65co^Dobȃ@7hgCX+xܪIUrsx̨HV QCIYr:+"{ns\rc }sZMW*/!x_THk-~"MZuh YZ