polkit-0.116-150200.3.12.1 < > , er͚p9|HY ζDCuX?78 1Oѣ {p]"V%COq G6q|wZ) GZ%M_@<es ]xu O%SwPit Xj_Vgh5*
|+ k5<FmE @b,e?A+&NAdni5Fk@FvcExlҨz#g W2ôg2p-L `m > N L ? L d ? " 4 J [ . . .
\ . . .
. . . } . X ' ' ! ' ( " 7 " 8 " 9 # : $ = 8 > 8 ? 8 @ 8 C 8 F 8 G 9 . H 9 . I :x . X : Y : \ ; . ] ; . ^ > # b A c B* d B e B f B l B u B . v C w I . x J . y K` B z Lh Lx L| L L L L L L L L C polkit 0.116 150200.3.12.1 PolicyKit Authorization Framework PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes. er͚h03-ch2b QGSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux x86_64 getent group polkitd > /dev/null || groupadd -r polkitd
getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in polkit.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
exit 0
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/bin/pkexec
fi
if [ -x /usr/bin/chkstat ]; then
/usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in polkit.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable polkit.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop polkit.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in polkit.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart polkit.service
) || :
fi
fi ~ A 9 Z h0 : 8@ c+ ) V J i h P B AA큤AA聠A큤AA큤A큤AA큤AA er͕er͕er͕er͕er͕er͕er͕er͖er͖er͖er͖er͖er͖er͖er͕er͕er͕er͕er͗Z.er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͖er͕er͖er͕er͕er͖ 28067ad27702251ba38d9794738cb81e18ce2151d26b3d103a33b4107c2f9877 af4292db23ff017727a86c35067121354c63911f32caa09e0b9e42d6b4252133 aea3041de2c15db8683620de8533206e50241c309eb27893605d5ead17e5e75f 3cd7992b3b6a401b6885fd65bffe535c73f84c2f3593cc1479c1346ff3ed929e f6a8b25c248dc69e6793399d40a6632d3de964140f2095f6459c30cc833f1158 010565008ca3774e59e0d3be315bd62048f800156afbdaaac12e1b476c5b4f24 df16a6e1acc09b9ee56de79b58cfbb28d03b21e8995e806e7f35b5d76b1f2323 b17397906c7ae25a57d62487ba0e1e2197db9643c322b871fa014f46d3e5f8a0 0c4b961f1445ced8f6d4c7750e0415ad9719e52b5494f1dddc7855f731ce7c98 6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff baed12288339ed4b1df90f017beb8af07b56eba1b2edc4a60914880c13617af1 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 561b4b59f36d6e34af024d07ef8a80457559736138ec9e9e4d14f8e926c17512 725f7541bf0703006687192fa4eab464b4e91797794e0fec5e705d2c66808a1a 1d862c3977460da9e096a5267d4989d977f9e4eeff7781639b80a138fcb7ddbb 86a99df215a09ec829e81f8b6d99e8d88950630a3fb319cf837c3d0506b17ba6 a632e2e392c367b48cbc844b0ed41cc2287126dbac51fb7d1a64f40211ca0589 c888d46402d2bf113d5859a57569c53ab68a179bc2fc084b36c13fb45020eecd 73c95abb890de9cb72fbee8947befb6f489bac6f50dd7325a553b1c3cfda9e0c 77ec4e0353f78877f22fa4575ae21fe371584a041b3e0f3b3c96042e030352e8 2735b902d88a25d4a74135d82696c544658237ecc659cd90560b88103eab1393 d5c9b88e431a17804f869b4320fd642bd6c40230c4085c0b6949820a20e9a3c7 dfdb5e050f3a7140479dfe7636813c4fd071b20d5034e8c7a83ed65e4fb1977a c6d17b84ef6c4a9e966850ec833c4bfc17e15da6131723f22fc0d38902082503 a21c5947e9731f3558bbb979b7bfb65422961ef2b6108ad6177f29c6e8deb628 99a0a2a2e36dca2a54c89ea06d695156b518e02b52883e93b70ba63e3768298a 19529a141086b5d46de37fc95895360c379d49563d5b513323e73f0f5750436a 885304c3e892e3e6e167676ecc691c6736c7116bd1157a1201495e0556f31381 669a20fdc713af31cedf7272d21db31b5aa85423df8a845e4b7c8034ad697d40 76a8600153d9159a0c37901560f168f01b5cac61e19dac08186a5f5e5238c1f8 16f452baa3077f54a5b66861913d097eb2b094e3da19f8af2426f951b4c22701 d3fbc5b432d9fdf0de1499e9b29504f8f6e9d313b519d64c43af35a906bddfe0 9035f887c526aacec04bc44b5376dabf82c4a0f6c955ea3650eb4c416b3d7a66 c3bef7b57d54d7c9cdf02ccacd53a5d630d1ffa76114cfe0bbc5889fdad5dd6d root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd polkitd root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root polkit-0.116-150200.3.12.1.src.rpm config(polkit) polkit polkit(x86-64) ! @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(polkit) dbus-1 libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libmozjs-60.so()(64bit) libmozjs-60.so(js)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpolkit0 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) permissions rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow 0.116-150200.3.12.1 0.116-150200.3.12.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1
/usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2
/usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2 d$(@b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@jsegitz@suse.com rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - Change permissions for rules folders (bsc#1209282) - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh h03-ch2b 1702022554
! " # $ % & ' ( ) * + , - . cs da de hr hu id it pl pt sk sv tr uk zh zh 0.116-150200.3.12.1 0.116-150200.3.12.1 0.116-150200.3.12.1
! "dbus-1 system.d org.freedesktop.PolicyKit1.conf polkit-1 polkit-1 rules.d 50-default.rules pkaction pkcheck pkexec pkttyagent polkit-1 polkit-agent-helper-1 polkitd polkit.service dbus-1 system-services org.freedesktop.PolicyKit1.service polkit COPYING polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo polkit-1.mo pkaction.1.gz pkcheck.1.gz pkexec.1.gz pkttyagent.1.gz polkit.8.gz polkitd.8.gz polkit-1 actions org.freedesktop.policykit.policy rules.d polkit /etc/ /etc/dbus-1/ /etc/dbus-1/system.d/ /etc/pam.d/ /etc/polkit-1/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/polkit-1/ /usr/lib/systemd/system/ /usr/share/ /usr/share/dbus-1/ /usr/share/dbus-1/system-services/ /usr/share/licenses/ /usr/share/licenses/polkit/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ /usr/share/polkit-1/ /usr/share/polkit-1/actions/ /var/lib/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31767/SUSE_SLE-15-SP2_Update/2e03c4d362f8d370476985f1f4c3e35f-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 x86_64-suse-linux
directory XML 1.0 document, ASCII text ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d015e2031d038121d3648c258fe206ab435475bf, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=63795263b069f31f26cb878bb565a7e5c8559724, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=836b2e63e7d552466ab17e7a2e9f13bf38eff753, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=03363a1f3d14a4277ea174d4301a400085690163, for GNU/Linux 3.2.0, stripped setuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=fd2137641a468214c9128759b5ebacf7d17a276b, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=983b2af3e0edf49aaeee21473583f5df52d3cd33, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) XML 1.0 document, UTF-8 Unicode text # -
R
R R R R R R R
R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R R
R R R R R R R R R
R R R R
R R R R R R R R R R R R R R R R &7Yԉ x%A systemd systemd utf-8 bc9a0865473a5b289d9168f8f15a771659354b14d963eea642c3575ae94c68af ? 7zXZ
! t/]=] "k%Q0wD8j-;+N4L"Za(oӛat3$S)jgfٺs, (sjFEn: 9dOeb{p%v88ײDysAyg4T߮ ǁ*@jVZrrЌ| / 1 L?' 8bEbth*D}67[ E ㆕P=pHc
{=hFo6f*4^w /)5/TKWxj"Q&[)fyPN%~
[iY4Y_3G E,^}Tgd(@u;J̎ !^\Ƨ%au L |;vʁkB2D haª4ܼ]N0}Q 9$, aKF"ƞ ,kRZq67n _| 4.1>{| [G[Y RБ})2@c>HmAwHxH JNl+6n" Y OAN$ 9[x"m7d@Po[8
s]Ы %4%[= |j|y-Y-KJSǘnfǽlhӌbE!z0T|m3ɑm0nmO1
H,\;vέk4t(Ö
XzUTQͧ(O>V%|Qm
r!!)`q&gڮ #z@P' \T 8H$Aݐ/ H@Jx=nV3' vExo+]]7aę4oYopە_*I)>g Ѯ w7$
S/<$ 3%%ᄧ{ޛj -?jFZܕftQ[U R餶fmbVK:%y9LK[}A9#rE°O+ :&m-3>]]X
;SгCYM}kKȘ'Yv_Wyg{qߩ 0vH( GHT+F6/U},x*fwf0N9
5La0iAe8 AT($Cd[zbCRp3(f vK z6Hȭsg2Ań8y盓 G|sj Ζ];+LY3~.4#(SkPM)(KBmυ|h`
`?_F<&$7K5v| Tˬ7 5$=7ɸPQn}aqF
LLga/V 7SIi_v/-Tm2aZQN vTn|_2rKȑ䬕 q!SUАޓ m)J x zb4~Ä/)"vt`=#Ҡ,& rhdK؈) z;&OD?Ӛ܈q7]P"i5q
~Ěcڜnۆ"^idM%Ȁ _ %da\hqXOoy& MK* lJ,LZܨuxG_N>^ٸgjLo,ZVb=_7a [[owX|wY-oѳ#sy3t9 c|l͝;6Uev,S6vD@A50)Jxۀ0N6y|] {w(\{_Mb/6n h܍;hCTrL)ҶB&nN7\D$%oVs?{pTws-́ʵ a1|shs
s 2B;_4]i2D)OՆ
s@,/^:(/i XJ;/l^VydDkVy icF9TkA&5x&+SuΗ)sRb̲Lֳm"hE_a fzW l϶k2}6 `7f̭T|GN
۲kTrİit|S%un'+-`}^dOy*
9VvRjw$Ӑ]hIIJO Sމ}z sqZP:"F (!8106 g$A@®x#9?b(GD9tae^g'r^%اOPJnW~u0-Q kTNc'.r, dnI' ]c/Nax=Z| N[=7Z5/Q8'cIľG
V DR'Z(ERPbb+Y ){v- ESPG$Hci[ $."NNb\- E̿+jte2OT! |mC$X r7Zm )|?9ejj\ A$I%\QB.L0SljlJL'P9~J.~2 `wtWx:JyX v47Co> @Ӥc fm[5[[y %ѴO%ה'Xr =~tW ǧ
tb@{\5[ڀS>5r̷86cs<'ڄSP\QX.{R]NQvRF *Ӑ TNPe WGI6J S7SW5`9t4ރP@~ _wmP0<'~J[klQ/bYpW%7L.{W#\P:|_ OiLVZI
O.Y2fP0$v}tC'swaw.~5V|t\Bq;>5[=pKFL<,X: PQjVF& @鳮g`alj ~O{? x*7\fuå33؊j2[ý`4kL7~iy|wz ^:^B_Ap"g
MP7aĨObI7ĝm,¿#ꚻɷ(f,{m5' ;~(Fۅ ͭ'@;y[!ss$kMNxĖт"b+- 0\qlfhCp3w.O()V'̫!>|#yX O7Vq6A e]y3 `Tv1x
c9Yݯ:5*-ґ. eߍ< vtBτ+-r5?
uL9HU##a,dž (sES h(HMiaZЇ3pAqIwςUn,Mw
UkY}j*#quj#kS%"e+br4ݳZlDnO7||]sY$Zhφ"]4B
, [20r K#AH눲}ć/9Hc>=UPМ`_Y=9+pܜ aE`4;MapZumox Ȕ6Y0cR@=1C50cH䮤h2s2wfVd[_<kޏV_MGs 0W !e)%_1yV6ǝ 9?6{*xtD~tbMgA$C g0Qgq'Rq#SVɼ}atk""Jϙz!
'~I**Qy(s!쌰Ջbδ]A& 1&SF1KXYjT\9X1NR7$/ Q S`^~.nKT9x]P U>D^lRoaPJҀr5
\!DqHDP0I7߽4^ z
c=qcOҩ!~-KW!*|.v, ) cdR
CSg ;S\3}=x'oIޘc{T՟(`] A ĚnKOG
F*#ڞѶ2Qzw uQܳp9jl 8u%MD4nTftiD6D,O
6j m\PEe
Wd1K=u+sR Z:}ر+w9ZNW ?G# pȭ?Kuv@K2j8#ĜBiyQu` ;Cr
BXhU#ϰeoR(Co JHX߮]$O*"Hgznť!*bOHCSF<Sq>A2^wP?
G4[(od1=lib23jSu~N
6q}U|!*(vVƗS{mїirrgu=w1Rl!aT$>rsQr0A]
8c-=d=K>~sMuͨM
A @T=:oBJàRɼk|\81]M(nFd<3>m VT
)WjQQT]m\M ǰ$Cף3'iq_2Zx* G~@h"x7ۥ9-r
Pk
^ 0:u]Qhșϻ'̬C7sըvwUN7MpMVGŮ asQRV̽6MAx&Am^W[;Y_3<=s
|>"VE \@ W2Si*(ʠ9>hw%ԳQqudµNR nomXF.N\Oj$ 58BeeO,mH&(}Y( 8N"/.Ÿ|cWn4%J4 P|
* 9 lՇ-g_: T5IM~4r "k6Dr8B Xq?I^8Ԕ֒-tCh`UUJ J}L1x0V2Hm垙>QR "K
±`)]OϵˬN"Zq4=K -7qh SÁQʝ:8|] U'[_Ȱ/~*"L> aF&7 ᏤO#Ҕ|xZZcq+ \bQQZ;90"xYӳd=0pL3j/rE9KZq)|S|tМ)}7O!xO=ݎ{+>{&R ܺnP̓MxENmں36bҲ2 ,%g2{J$.Rq:B+U` ˙jnMEsHO YB :={RV)P*EZ|W ^¹3Q4<å4R͡R"lpS6c,t`U46(2V}_]-㳘"Je)am 6|P/wWh9[ mh h% X5|N$3rD3] s8 .HE $ɗ]\_ ]i"7 ƀ#RRS0\FHF6
X~ۻfżSj5E0Op,RqOORŰV7Rӿ"4ČoÉY, Ze`+B y&LF V:x-Ac!#n_j~ܒ?)r ߺoSφgz4(As-͎dm} O /j_ )H<<
0iiN.jS`2mr d ۶@N/^Yjo9= SfciަD (
&j",\ .hĮS^ wkq[AҜ; \z~t y$a:|Gz$oߛ/|kGKAo/nB%K.`#_gwYP'&!
$nb@{"8ڥ< ue4tPI L[3(?d,Sn ,RqںC3`$]Ddc뿉_*>H &8_u Va1M[:ȩc
Km M.y/"e;Q|'u}!*诚yEWK}
O_
_^3Fa mԼ@7 $qѾ}Ә(ew X) #DjrՍ 7JMdxŶzȅ,
-lC NPBx8&,RR^.4! 6C یR33 sEo^'CWT]ja( ] 35n#v$.D֣Zb
CzOΫe^yzaRQ__(8TʢжBB尚. ab*AL%6[orN!$%m dC]i%N_:zB^*
ӪeS ]t$"=rO<6 5 azz<.Tpv +yA0Ⴖ-\DřdϽa+h2nذ>V!8᩺`h{N3^Tw\3܋l+84ge ҁGRU F
#DŠ"
Qs.d͐3 9M;5ڶmNKggŧ^6d/'~R`4( j2[2A W> 3yFZBJ8$}h5[kbbw$ctu?Sl9N4e X蓍FEoDn]f !KE k# DP1db5*d`4q)8 Zt fеɲ'ͷ!*K95 dUնUh/=-C@b7Ƅҥ(}Ƃͣ9p y2YA
UCp]x &;5Ǿ^3BCp6 8ct _mbRѶzdOLW8) ze|m*LuȈ꺶 5C mtUA]n)d
5d
k
g<>2%1*&i|ZU'U)#9LSuDV w qQGw #/3 ƺ? sm,D2N鐦O:/涏 `2
-(JH!!L=j>SXɖpd~g
Xat*l,6g}í;;-l|TQt!bz)X0fߍfĥȤP-\9 ϺQSN8.gԗI;9g7YƜ.a?-Oqea3U%eGT
}$7FDc~6G ̔e-b&$iELaz ʁUpݰm\--51WcN Ee/ ή \ l/FG< )Bff4tO2. /mH?>zߚ7 . ('r
C)*s*쐊j7-Ⱥÿp@/Fyy;-ݓX
dsR<] X>V XpZ'6-=QØh+u?5h
`_ DHgL]_\$RŽ ,ӑK+QkrtWK̟,'4 Cuyt L)a :(<]۵~uk@ 8X ' ҹdk{Q@*3[Ϡ.G_n+J1|Ñv%3OJ
!7ġ<>iL3AWx4#C8 flCG{V>嬣sv.xE6`O d.U1H%,xf/T#Ν7+[Qp]{H bk JkBRC] 6pׯ
2PJGZP0Ap ԹO!BTRf^.h7qlq˄|+. U˹0{N C6Os3WúSSM? ׀N
qVuD/$522U4+}kUG>#.:^G8杵l О1 T1dpvOŹmE"$ꑆbe?&o[J.`(e1q$)9 XCI0in
?=V1kS·P'S&.ɊJ>DCT/|o܀]SZK>_\Gċ 6 yE \{Z$ "< :tLz(2[ΰ3*TMQHYK)ିf FG 4|o.?|kWiQbk 6ơE`}%>2m= v bZgimP#@JXMU kN:v}ș'9DXb` tZ5'D7k
*l'硙3ܿʸS HWmوD[hy)!ZB x4cK5]Zߢ avɀP f8pg[ VN(nydW'i$'m37"`#EiՅda*]E(D>U ˈ{"]LbIT'9h \aRwY]= 3*uo*crf+S~ Sٜչ(K|(φy/EqGXU<
Edc.YԶ}eQ UCMDX. bD*h Eu<* KE8Իŧ6L2
{S zRS~e<쾣 ?2'Z7Iڐ5[I. . eC@iԆo}zܖ *գ?wn/S.)-Ǎ!:X^wt{N5l/F nX4pXv}TKV%v!' \fUR9yX)r~0f 67m E7Js@i@i {K !FK=f R@$).:*`0HQ8H:c 338U'Q4:"hODX\ysioq,E
Rh O$ ;d hb-G@~< h9 Ǵ4U: '( D%{8/H}_ٹQL!Y%5c| P*R9 oD99 ײnZKμ=cy`}PbI<1D_0dLA7S&F[QFd?3#(Q<9.&u@|saTGl PEB .b^ 402(\㻸oljZe ^~zw KNZ̼jGdVUdlDф OϞDBazPXf)(5W Ba:Sxr _3o 0dQFD0 (9tk _)nբcP{H+u$VkǜkMib)GtDXE?Wv x&A^Cn|G[6a"KlfnRk qwdT'`{
婘t#<[]%j} t|5w7>(cJ&vu^Qˎ# ]ph$Z(Lyև ]S'&Btiޝ))|k5 jA{]+~d C-` ,gj#Vxk4FBhou`TijTV8Q23 f:.j1`48(<-z71Nty݃W~2"/45|ٺF2}BgRR5{q]ߨހ
X7 C{׳9`S
1n|u.r7z.Qcq|շ^~Oǖ={ ЪDܕDF9D d*̑/1; >8 Hx.9c01Bb` gـʍ *tQ߯j;R/vNψ xg
O3!$uŞXAxG=-WảyR81 9>BWwTisMVXeÔE-i:T Oc)@D e`H0mP$#ї bԔ4X!@sWԥc쓎m O Z҆. ή\ g J? F|K
^%P2\;^@^3 gzX,!8oi>
;>LUHr.InڍI.S-N_%0Dx:4bΞT9նjGV? pη8o^
6Bd 'cE| \ROE jڇpo9tՉu7 OK;#M"RT62^Dow Rdv~z',ƶAǺHlCD ~^%v+ԄX(Vn˿Q&^|6B${&]y,ҟj>tG4y1}nI߁JL%x9a 6ָZ4>p^H ,v_vGiXmp!tZR\Zwm#K1#Ř*4o=ϺF)alvx T8_E;(Yw7
L[ĞSskc+C ,S-ANrev>9=9) @yU2 ,䲀JbM[,A
{ Ғ
YZ