libcyrus0-3.8.7-bp157.2.6.1<>,@j;nI%z iR0y|)':=F9'8ŵ?͘6L48_MM8ş4\hlh<Ť&HՍLg 8C ﲳ^tpM33\:M6pr@~a.j\T,@o~X|Wa=4$gV4a|k :2RXK׺ӣ%ĖS5 037RPQ>C޾f 0$ha:x0Mas3l,c9 . %櫓am 2&-2~I+WF#a'色zf+sFLji&=1Moo\R5׸3_@^EP9АUZ“!⨬?>C:Ԓ_̻,pb"D+[:C=ӛ0few&@?d   :lp|  $  8  L  t    4 \   33 3( 68 @/9 /:/>[@jFyG H I XY\4 ]\ ^*b6cdeflu vw x yUzXhlrClibcyrus03.8.7bp157.2.6.1Cyrus IMAP Shared LibrariesShared libraries used by the Cyrus IMAP server.j;ns390zp2159SUSE Linux Enterprise 15openSUSECMU-Machhttp://bugs.opensuse.orgSystem/Librarieshttp://www.cyrusimap.orglinuxs390x<0PBhj;Lj;Lj;Lj;Lj;Mj;Mj;Lj;Lj;Mj;M5a0e3632785b84c0311cc727dbe55603a580fe8727486af59c41c6ed9df0ca3923f79044ffba01540cdcf9a26bd612ddf76ed453fddd8c23289562ed62b96cae24a051ef0a2dbc0d6900c0104a685acf9e29798ccfa10817edd15f483090926a2efdc5d61ec66190dc436b73936ae64eb45669ec0401d8127316874616643cfb86d1afbbba3743cdce177c95ba5b80783ac40979acc638ed033ba59912fbbea3libcyrus.so.0.0.0libcyrus_com_err.so.0.0.0libcyrus_imap.so.0.0.0libcyrus_min.so.0.0.0libcyrus_sieve.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcyrus-imapd-3.8.7-bp157.2.6.1.src.rpmlibcyrus.so.0()(64bit)libcyrus0libcyrus0(s390-64)libcyrus_com_err.so.0()(64bit)libcyrus_imap.so.0()(64bit)libcyrus_min.so.0()(64bit)libcyrus_sieve.so.0()(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libcyrus.so.0()(64bit)libcyrus_com_err.so.0()(64bit)libcyrus_min.so.0()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libical.so.3()(64bit)libicui18n.so.73()(64bit)libicuuc.so.73()(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.29)(64bit)libpcre2-posix.so.3()(64bit)libsasl2.so.3()(64bit)libsqlite3.so.0()(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3jZ@j)Qi hhz7@hvBh5@hmgg@f(@f(@f"@f@f@f@cߚ@c^cjDb@a@a~@`f@`Gc@__]1\HW@\?\l@\[@[@Z@Y|Ycl@YOYJ_YA%@WH6VwVHsUٵTTo)@TeTBV@Peter Varkoly Peter Varkoly Peter Varkoly Bernhard Wiedemann Matthias Gerstner Peter Varkoly Aeneas Jaißle Peter Varkoly Nathan Cutler Peter Varkoly Aeneas Jaißle Aeneas Jaißle Georg Pfuetzenreuter Georg Pfuetzenreuter Georg Pfuetzenreuter Georg Pfuetzenreuter Aeneas Jaißle Aeneas Jaißle Peter Varkoly Matthias Fehring Peter Varkoly Marcus Meissner Jan Engelhardt Matthias Fehring Matthias Fehring Matthias Fehring matthias.gerstner@suse.comliedke@rz.uni-mannheim.dePeter Varkoly Jan Engelhardt Matthias Fehring Peter Varkoly Peter Varkoly rbrown@suse.comrhafer@suse.dejengelh@inai.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.detchvatal@suse.comaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.detchvatal@suse.comrhafer@suse.comjohannes@lst.de- Update to 3.8.7 (bugfix release) - bsc#1271617 CVE-2026-47081 XAPPLEPUSHSERVICE folder existence oracle and push hijack - bsc#1271619 CVE-2026-47083 ESEARCH cross-user content oracle - bsc#1271618 CVE-2026-47082 Vacation "fcc" skips destination-mailbox ACL - bsc#1271620 CVE-2026-47084 LOCALDELETE bypassed ACL checks - bsc#1271621 CVE-2026-47085 URLAUTH token forgery via missing mboxkey - bsc#1271622 CVE-2026-47086 GENURLAUTH issued tokens bypassing ACLs - bsc#1271623 CVE-2026-47087 URLAUTH does not honor revoked authorizer access - bsc#1271624 CVE-2026-47088 Heap exposure in nested MIME comment parsing - bsc#1271625 CVE-2026-47089 LISTRIGHTS not limited to users with admin access- Adapt license- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd (bsc#1251788) Remove var-run.mount from Requires and After- Only BuildRequire systemd-rpm-macros instead of systemd to reduce unneeded OBS rebuilds- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8 release line occuring with newer compilers.- update to version 3.8.6 (bugfix release) VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer Desynchronization using Opportunistic TLS (bsc#1246165) The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of implicit TLS over a dedicated port. STARTTLS is now disabled by default. * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543) VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd) * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge) * Fixed issue #5424: recognise service-specific SASL options in ``cyr_info conf-lint`` * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha) * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang Breyha) * Fixed issue #5454: httpd fails to parse OpenSSL version for status string- update to version 3.8.5 (bugfix release) * Fixed Issue #5029: check for unexpected extra tiny-tests directories * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов) * Fixed Issue #5009: various portability warnings and nits * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов) * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов) * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов) * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me" * Fixed Issue #5047: proxying UID SEARCH - rebased patches: - cyrus-imapd-3.8.2_syslog-facility-doc.patch + cyrus-imapd-3.8.5_syslog-facility-doc.patch- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from cyrus to root (bsc#1241536) Adapt backup-cyrus.service to run as user cyrus:mail- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd ship a file called /usr/sbin/fetchnews (bsc#1237293)- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project) Add Conflicts to be able to build on SLES- enable httpd for caldav/carddav support- update to version 3.8.4 (bugfix release) * Fixed Issue #4932: LITERAL+ broken in mupdate * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica - update to version 3.8.3 (security fix release) * Fixed CVE-2024-34055- Build with PCRE2, resolve segfault when querying mailboxes- Use upstream configuration files- Use correct libexecdir- Update to version 3.8.2: * Major version jump, reference upstream changelog: https://www.cyrusimap.org/dev/imap/download/release-notes/index.html - Drop no longer applicable patches: * cyrus-imapd-2.4.22-perl-5.36.patch * cyrus-imapd-2.4.22-recognize-new-backends.patch * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch * cyrus-imapd-2.5.13_db6.patch * cyrus-imapd-2.5.13_implicit-definitions.patch * cyrus-imapd-2.5.13_syslog-facility-doc.patch * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch - Add refreshed patch: * cyrus-imapd-3.8.2_syslog-facility-doc.patch- update to version 2.5.17 * Fixed: tools/git-version.sh did not need bash specifically (gh#cyrusimap/cyrus-imapd#3143) * Fixed: saved session reuse crash when TLS enabled for backend connections (gh#cyrusimap/cyrus-imapd#3191) * Fixed: XFER now recognises 3.4 and 3.5 backends * Fixed: memory leak during backend auth state cleanup (gh#cyrusimap/cyrus-imapd#3320) * Fixed: use-after-free segfault in mupdate-client (gh#cyrusimap/cyrus-imapd#3312) - incorperating a lot of work from buschmann23@opensuse.org! - added new packages libcyrus0 and perl-Cyrus-Annotator - enabled mailbox event notification - enabled clamav support - enabled SQLite support - enablee and run unit tests - prepared http support (using bcond; requires libical < 3) - deprecate BDB support: upstream drops it with 3.0 - deprecate SNMP support: upstream drops it with 3.4 - removed OpenSLP support - configuration changes * add some resource control settings to cyrus-imapd.service file + TasksMax=2048 + LimitNOFILE=10000 + Restart=on-failure + RestartSec=5 - create runtime directory structure under /run/cyrus-imapd with systemd-tempfiles instead of unit RuntimeDirectory. This makes it possible to store some files and folders on ephemeral storage - update default shipped config files to use /run/cyrus-imapd - dropped package conflicts for *cyrus-*-kolab; those packages weren't build in a really, really long time, since they were obsoleted with cyrus-imapd 2.4. - removed patches now included upstream: - cyrus-imapd-2.4.19_autocreate-0.10-0.patch - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch - other dropped patches / unsupported, obsolete, out of maintenance: - cyrus-imapd-2.4.17_openslp.patch - cyrus-imapd-2.4.17_pie.patch - rebased patches: * cyrus-imapd-2.3.16_syslog-facility-doc.patch as cyrus-imapd-2.5.13_syslog-facility-doc.patch * cyrus-imapd-2.4.17_db6.patch as cyrus-imapd-2.5.13_db6.patch * cyrus-imapd-2.4.19-implicit_definitions.patch as cyrus-imapd-2.5.13_implicit-definitions.patch * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as cyrus-imapd-2.5.17-fix-cve-2021-33582.patch - various spec cleanups * use conditional builds with bcond * remove SysV init scripts * remove conditionals for old openSUSE releases * remove unnecessary dependencies - Changelog of prior 2.5.x releases: * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html - update to version 2.5.16 * Fixed: XFER now correctly distinguishes between 2.3.x releases * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends * Fixed: XFER now syslogs a warning when it doesn’t recognise the backend Cyrus version - update to version 2.5.15 * Fixed CVE-2019-19783: When creating a missing mailbox as part of a sieve ‘fileinto’ directive, lmtpd would create it as administrator, bypassing ACL checks. lmtpd creates missing mailboxes as part of a sieve ‘fileinto’ directive if: * (2.5+) the anysievefolder option is enabled (default: not), or * (3.0+) the sieve_extensions option has the ‘mailbox’ extension enabled (default: enabled) and the ‘fileinto’ directive contains the ”:create” argument Under these conditions, a user with the ability to upload a custom sieve script to their account could use it to create any valid mailbox on the server (with ACL inherited from the parent mailbox as usual). lmtpd no longer creates these mailboxes as administrator, so users may no longer use a ‘fileinto’ directive to create a mailbox they couldn’t create otherwise. * Fixed Issue #2913: errors are now logged when maxlogins_per_host, maxlogins_per_user, and popminpoll limits are reached (thanks Sergey) - update to version 2.5.14 * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer inherit authentication from the previous request on the same connection * Can now build against ClamAV >= 0.101 (thanks Christoph Moench-Tegeder) * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating - update to version 2.5.13 * Fixed CVE-2019-11356: buffer overrun in httpd * Fixed: ptloader, ptexpire and ptdump now honour the ptscache_db_path setting - update to version 2.5.12 * Fixed: cyr_virusscan now integrates with event notifications properly * Fixed: mailbox expunge event notifications no longer cause a crash * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db * Fixed Issue #2253: master now rejects unix domain listen paths that are too long * Fixed: smilint warnings for CYRUS-MASTER.mib fixed (thanks Fabrice Bacchella) * Fixed Issue #2177: backend connections no longer ignore STARTTLS failures (thanks Wolfgang Breyha) * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged entries * Fixed Issue #2221: dav_reconstruct no longer crashes given bad user id (thanks Wolfgang Breyha) * Fixed: tls_prune memory leak * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing * Fixed Issue #2199: recovery from mupdate failure now in correct order (thanks Michael Menge) * Fixed: backend connections no longer crash if no banner found * Fixed: backend connections no longer return success on certain types of failure * Fixed Issue #2185: squatter no longer tries to index non-IMAP mailboxes (thanks Wolfgang Breyha) * Fixed: special-use proxying in murder (thanks Wolfgang Breyha) * Fixed Issue #1090: send OK NIL to subsequent ID commands * Fixed Issue #1434: auth_pts will now error when given a too-long socket file name * Fixed Issue #1964: correctly detect when librt is needed * Fixed Issue #1967: tell EXISTS count earlier when needed * Fixed: memory leak in httpd DAV support - update to 2.5.11 * Better integration with updated documentation/website infrastructure * The “timeout” option is now also used as an upper limit in minutes for IDLE connections. A new option “imapidletimeout” can be used to set an idle-specific timeout instead. (Thanks Philipp Gesang.) * Fixed: invalid free and memory leak in httpd * Fixed: services no longer exit when client disconnects before accept() * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported * Fixed Issue #67: better support for dots in localparts (thanks Jeroen van Meeuwen) * Fixed: don’t assume LIST section options when proxying * Fixed: SEARCH crash on some platforms * Fixed: ensure directory hierarchy created when renaming empty mailboxes * Fixed Issue #1742: reconstruct no longer crashes when cache records are too short * Fixed Issue #11: LIST RETURN options now work properly with virtdomains * Fixed Issue #44: http proxy no longer crashes on starttls (thanks Wolfgang Breyha) * Fixed Issue #1752: no longer crash on notifyd mailto method * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER (thanks Дилян Палаузов) * Fixed Issue #368: SETACL with invalid rights characters now returns BAD * Fixed Issue #46: renames to remote destinations now work correctly * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations * Fixed Issue #1872: no longer crash on bad SSL session ids * Fixed Issue #1931: missing mysql/mariadb dependencies now reported by configure * Fixed: various memory and resource leaks (thanks Дилян Палаузов) - update to 2.5.10 * master(8) now supports a “-V” (print version and exit) option * Fixed Issue #34: imapd in murder no longer crashes on MOVE to nonexistent folder (thanks Wolfgang Breyha) * Fixed Issue #15: replication no longer crashes on mailboxes that are too old to be replicated. Instead, it fails with an error and logs a warning that they need to be reconstructed * Fixed Issue #45: extended LIST doesn’t lose options when proxied to backend * Fixed task 142: extended LIST response no longer missing \HasNoChildren flag on last mailbox * Fixed Issue #49: httpd no longer crashes with assertion failure on shutdown after CardDAV has been used * Fixed Issue #31: the ldap_timeout setting is now used correctly * Fixed bugzilla #3909: idled(8) no longer runs as root (thanks Carlos Velasco) * Fixed Issue #5: renaming folder with annotations no longer increases annotation quota usage * Fixed: URLFETCH crash when section is NULL * various build system improvements - update to 2.5.9 * ipurge(8) now supports a “-n” (dry run) option (thanks Valentin Vidic) * Fixed: imapd now proxies LIST (special-use) to backend (thanks John Capo) * Fixed: sync_client handles its shutdown file more reliably (thanks John Capo) * Fixed: httpd no longer crashes with assertion failure on shutdown after CalDAV has been used * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data * Fixed Issue #5: twoskip database I/O performance in unlocked foreach * various build system improvements - udpate to 2.5.8 * Allow replicated backends in a discrete Murder to both actively participate in the Murder. * When choosing between ANNOTATEMORE and METADATA, favour what the client used. * cyr_dbtool(8) now supports improved_mboxlist_sort (-M) * Fixed: master on pselect systems no longer chokes on repeated interrupts (thanks Jens Erat and team) * Fixed: better iOS CalDAV support (don’t announce VPOLL) * Fixed: backported version detection code to detect future versions * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations (thanks Wolfgang Breyha) * Fixed: replication/XFER of mailbox names containing ‘@’ * Fixed: METADATA and GETMETADATA pattern/list recognition * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate fails during mailbox rename * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee) * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf (thanks Simon Matter) * Fixed task 227: service processes no longer crash with ‘-T 0’ argument (thanks Ian Batten and Jens Erat) * various build system fixes - update to 2.5.7 * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch range checks * Support for legacy SSLv2 and SSLv3 protocols has been removed * Support for TLS compression has been removed (thanks Ondřej Surý) * Fixed bug #3908: crash in ctl_mboxlist -m * Fixed: setrlimit error on startup * Fixed task 216: don’t break quotas when transferring mailboxes between backends * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch) * Fixed: autocreate_sieve now uses sievedir setting correctly * Fixed bug #3907: cyradm --cadir option is now called --capath, and works (thanks Leena Heino) * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE * Fixed: pop3d no longer applies plaintextloginpause to TLS connections * Fixed bug #3866: lmtpd now consults local mailboxes.db first, before mupdate master (thanks Michael Menge) - update to 2.5.6 * tls_required (default: 0). Set this to 1 to require a TLS session for ALL authentications, not just plain ones (thanks Carlos Velasco) * new cyradm options + –tlskey keyfile: use certificate with keyfile to authenticate with server + –notls: disable StartTLS negotiation + –cafile cacertfile: Use CA certificate file to validate server certificate + –cadir cacertdirectory: Use CA certificate directory to validate server certificate * Fixed: cyr_synclog checks its arguments more strictly to avoid producing junk sync loc entries * Fixed: cyradm metadata implementation cleaned up and output made consistent (thanks Leena Heino) * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min (thanks Carlos Velasco) - update to 2.5.5 * Security fix: compiling with –enable-autocreate no longer allows arbitrary mailbox creation * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes (thanks Chris Stromsoe) * Fixed lock management over rename (thanks Thomas Jarosch) * Miscellaneous other fixes (thanks Thomas Jarosch) - update to 2.5.4 * Security fix: handle urlfetch range starting outside message range * Fixed bug: better error messages when reading corrupted twoskip databases * Fixed bug: treat autocreate_quota_messages:0 as unlimited * Fixed task 203: make autocreate_quota:0 work as documented - update to 2.5.3 * Fixed task 183: don’t crash on login when event notifications are enabled - update to 2.5.2 * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn * Improved consistency of event notification parameters * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak) * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests - update to 2.5.1 * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future * Fixed: XFER deletes source mailbox less aggressively, avoiding data loss under pathological conditions * Fixed task 163 : XFER no longer bails out on header CRC mismatch * Fixed task 117 : now error out silently on non-TLS connections to services with implicit TLS * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to shared folders (Thanks Norbert Warmuth) * Fixed task 165 : xfer no longer fails due to bad version comparison * Fixed xfer bug: version 2.5 is now detected properly * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013 (Thanks Leena Heino) * Fixed task 116 : LIST now correctly handles domains starting with “inbox.” * Fixed task 120 : admin users can now SETANNOTATION correctly * Fixed task 118 : imapd no longer crashes when selected mailbox is listed * Fixed task 156 : LMTP no longer incorrectly rejects messages delivered using ‘deliver’ * Fixed task 76 : lmtpd no longer crashes when delivering to a shared mailbox (Thanks Leena Heino) * Fixed quota bug: no longer crash when setting quotas on shared folder hierarchies * Fixed compilation problem on Solaris 10 (Thanks Leena Heino) * Fixed bug: QuotaChange event notification now always includes maxMessages parameter * Fixed bug: event notifications now include paths for shared folders * Fixed bug: GETMETADATA now handles mailbox patterns correctly * Various fixes to compiling and tool chains * changes to cyradm + createmailbox command now accepts –specialuse flag if server supports CREATE-SPECIAL-USE + listmailbox command now returns special-use attribute if server supports SPECIAL-USE + listmailbox command now accepts –specialuse flag to list only mailboxes with special-use attribute + cyradm now uses LIST and REMOTE rather than RLIST if server supports LIST-EXTENDED + mboxconfig now accepts –private flag to switch from default shared to private version of an annotation + getmetadata: new command + setmetadata: new command + Cyrus::IMAP::Admin::getinfo now returns a different data structure to support the above + Cyrus::IMAP::Admin new ACL flag for modifying annotations - update to version 2.5.0 * Underscores (the _ character) are no longer allowed in the START, SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with configuration options in imapd.conf(5) being prefixed by service names and an underscore (_) character. * Extended Quota Types: New ways to restrict resource usage: Number of Folders, Number of Messages, Number of Annotations * CalDAV and CardDAV Support * Support for RFC 5464: IMAP METADATA * Event Notifications * The database format for mailboxes.db has been upgraded, adding a new mailbox type for deleted mailboxes. A key-value storage format is used, allowing for faster and better parsing of mailboxes.db, more granular updates to runtime environments, and more sustainable future upgrades. * New database format twoskip * Allowing Undefined Annotations * Catchall Mailbox for LMTP * Option Name Changes for autocreate: The options related to automatic creation of user mailboxes and sub-folders (aka. autocreate) have been changed to hold a prefix of autocreate_. * The default for the imapd.conf(5) configuration option delete_mode has changed from immediate to delayed. * The default for the imapd.conf(5) configuration option expunge_mode has changed from default to delayed. * Configuration option names for LDAP SSL/TLS configuration in imapd.conf(5) have been changed. * Configuration option names for SSL/TLS configuration in imapd.conf(5) have been changed to better reflect how they are used, as enhancements would otherwise create great confusion. * New Options for tls_*- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro to ensure compatibility with the C standard one, which is expected by sub-components.- cyrus user uid outside allowed range (bsc#1198761) Configure cyrus user by using sysuser-tools- Add cyrus-imapd-2.4.22-fix-cve-2021-33582.patch: Fix CVE-2021-33582 - Add cyrus-imapd-2.4.22-recognize-new-backends.patch: Recognize backends of Cyrus versions 3.6 and 3.7- Add conflicts entry for mailutils-delivery- disable cmu.mib url, which no longer exists.- Fix Tumbleweed build: don't depend on insserv. In fact, just drop all sysvinit blocks.- Update to 2.4.22 * Fixed: use-after-free segfault in imapd and mupdate-client (gh#cyrusimap/cyrus-imapd#3312) * Fixed: XFER now recognises 3.4 and 3.5 backends - change source URLs to GitHub - set correct perl interpreter shebang in tools/rehash- fix build with glibc 2.30+ * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch - disable lto- Update to 2.4.21 * Fixed: timsieved segfault (gh#cyrusimap/cyrus-imapd#885) * Fixed: better recovery from mupdate failure (gh#cyrusimap/cyrus-imapd#2199) * Fixed: sync_client now replicates annotations in user/mailbox mode * Fixed: build failure with LibreSSL 2.7 * Fixed: XFER now correctly distinguishes between 2.3.x releases * Fixed: XFER now recognises 3.1, 3.2 and 3.3 backends (gh#cyrusimap/cyrus-imapd#885) * Fixed: XFER now syslogs a warning when it doesn't recognise the backend Cyrus version- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Update to 2.4.20 * Fixed: lmtpd crash * Fixed: auth_pts will now error if its configured socket path is too long for its buffer - Removed cyrus-imapd-2.4.19-lmtpd_crash.patch- bsc#1119629 cyrus-imapd.service contains bogus User and Groupi specification - bsc#1115999 Please convert SysV init scripts by cyrus-imapd into native systemd services - Removed User and Group from the service file- Avoid repeated emission of the %service_* boilerplate.- Fixed startup of cyrus-imapd when using native systemd service by setting RuntimeDirectory=cyrus-imapd in the service file- cyrus-imapd: migrate from cron to systemd timers (bsc#1115438) Created script service and timer replacing cron daily script- Please convert SysV init scripts by cyrus-imapd into native systemd services (bsc#1115999) Fixed using the with_systemd macro- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Removed "cyrus-imapd-2.4.19_drac_auth.patch" and dropped drac from the BuildRequires. DRAC's upstream is bascially dead nowadays, and the drac patch in cyrus-imapd is also largely unmaintained. Rebased cyrus-imapd-2.4.17_openslp.patch and cyrus-imapd-2.4.19_autocreate-0.10-0.patch as a result of the removal.- Remove filler wording from description. - Improve find commands.- Add cyrus-imapd-2.4.19-lmtpd_crash.patch: * lmtpd: fix uninitialised variable crash [boo#1045899]- Rebased patch: * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch Add fix for implicit-fortify-decl in ldap.c- Update to 2.4.19 * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation * New option “imapidletimeout” overrides “timeout” specifically for connections in IDLE state * OpenSSL 1.1.0 is now supported * Fixed: imap ENABLED doesn’t print * ENABLED when nothing new enabled * Fixed: mailbox lock management over rename (thanks Thomas Jarosh) * Fixed: added overflow protection to urlfetch range checks * Fixed: lmtpd can now deliver when mupdate server isn’t available (thanks Michael Menge) * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat) * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter) * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge) * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version * Fixed: nonsensical “TEXT.MIME” section now handled as “HEADER” * Fixed: added missing ‘auditlog: ‘ prefix to backend connections (thanks Wolfgang Breyha) * Fixed: IMAP SEARCH crash on some platforms * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set - Rebased patches: * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch - Removed patches: - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream) - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream) - Added cyrus-imapd-2.4.19.tar.gz.sig- Try to cleanup with spec-cleaner - Remove exit 0 in pre that stopped execution of the rest of the code - Update pre/post requires to be acutally correct - Disable stict-aliasing to avoid some problems- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add Outlook 2013-compatible XLIST behaviour.- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch: boo#954200, CVE-2015-8077: Integer overflow in range checks - Added cyrus-imapd-2.4.18-CVE-2015-8078.patch: boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch- Update to 2.4.18 [boo#945844] * Security fix: handle urlfetch range starting outside message range * A bunch of cleanups and fixes to compiling * A bunch of sieve cleanups * Enhanced SSL/TLS configuration options * Disable use of SSLv2/SSLv3 * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos) * Fixed Task #116: correct LIST response for domains starting with ‘inbox.’ * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino) * Fixed bug #3856: lmtpd now performs userdeny checks * Fixed bug #3848: support charset aliases in encoded headers * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha) * Fixed bug #3415: fixed nntpd LIST/GROUP bug * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves * Fixed bug #3757: don’t segfault on mailbox close with no user * New ssl/tls configuration options tls_compression: 0 Enable TLS compression. Disabled by default. tls_eccurve: prime256v1 Select the elliptic curve used for ECDHE. tls_prefer_server_ciphers: 0 Prefer the cipher order configured on the server-side. tls_versions: tls1_0 tls1_1 tls1_2 Disable SSL/TLS protocols not in this list. - Removed the following patches (included upstream): - cyrus-imapd-2.4.17_tls-session-leak.patch - cyrus-imapd.tls_options.patch - Added patch cyrus-imapd-2.4.18-implicit_definitions.patch: - Have the correct #include when using implicit definitions- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s /bin/bash - cyrus', as the default shell is now /sbin/nologin [boo#908014] - Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid) [boo#908006]- Drop unused patch: * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch- Replace the TLS/POODLE patch with what was merged into the upstream git repo: * cyrus-imapd.tls_options.patch * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and cyrus-imapd.tls_ec.patch - Add a default tls_versions settings to imapd.conf which disables POODLE affected SSL versions.- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html) * cyrus-imapd.tls_ec.patch - adding tls_ec for Perfect Forward Secrecy * cyrus-imapd.tls_tlsonly.patch - add tlsonly config option to fix POODLE vulnerability/sbin/ldconfig/sbin/ldconfigs390zp21 1787575150 3.8.7-bp157.2.6.13.8.7-bp157.2.6.1libcyrus.so.0libcyrus.so.0.0.0libcyrus_com_err.so.0libcyrus_com_err.so.0.0.0libcyrus_imap.so.0libcyrus_imap.so.0.0.0libcyrus_min.so.0libcyrus_min.so.0.0.0libcyrus_sieve.so.0libcyrus_sieve.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:19659/openSUSE_Backports_SLE-15-SP7_Update/5d816b34a2c1663e9fb5e626b674a5c3-cyrus-imapd.openSUSE_Backports_SLE-15-SP7_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dba1b11c04212af76d3beddc13800801bb93be3a, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ddca910802a9d791613454c886acf3f7b81d99c, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=27fea5ac5e69653c9044a669a7179a0291112601, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e032021e8b505ded5c89823a1ba636df3b59fe1f, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a7b10a3333cd87f8009cdeafb6cf7ef0cebadf8, not stripped;I PRRRRRR RR R R RRR$RR!R#RRRR R.R"RPR R RRPRR(R&R'R-R,RRR RR RR R RRRRRRRR R.R+RR"R%RRPR*RR R R R RRRR)R R.RPR R R RR RRRRR RfS}K1yWutf-8345eb6c575d1f564d755f287069815a3ba7f302b0f8a95b70f90dcfe72bcb52a?7zXZ !t/אָ]"k%{U}dI6eK,G_d%T 7j?rbu8ba9ubn%y+K&ԦĮ 7s >c˖^]CDKBOB8]AܳlA[H?0Uɍ^U?2q n]h1g1\W?&V[u%&DcZ~%N=L0@iW6TRc%y] wIx E*G䃡OK]QZtdW8̋>-\w.^w\Nkd-ԻڔyĪ7{.s=Og^O0@S4H e/|D"hwL= kI,Ul)ꩼtZ \SZ BѹIS} m lDe;`؄#]$7>_[Bv}5^o|\2ݖ`laU fҢBLn;;|P e 3.-Z$R*1O_6ku,=-2PFs V^M^yڝZs9TDw y=S4)8buGZmh.X`o.*N t>SlI>z>.)p9NEϦhdH:zt1UQ+F~6[O3UNb4rF2mB0?NU=W:̺k`1*-NxdcaPsKӃ?p:ɗ|6 u]&y2t3g=ܫyN<kUpU@2t0w g!HL᱇^INw.>2-eðy68wt+WZ6A]׉ |"դ~&r`h(rUhq ϮSc{cf[yȻxI3IKԺA#{S@U~~2VFc` ̃ruԌsQ"ldNo͔O)q,gNY0_G5 @ qF3=>yrnLiA,no@Ņh[_^2o TnЂa99{׽55 qI2X zݥ)+q~ ܢKmJ tPM i5T%&6̤5 eHV\ s >Zr$/e]{Pf2$nW5 p/m"F-տKfq>GHZX>:Jm\DDMDUL}"3Ta##lA+gA4Wo8;ռ1}@_R67u+'шc%S/׮~$Ye+ܓ ӷ\-,Q`@[SD@O,qg4P}Ec|Wk1s\\% ֻM^$rms|u;ϖ~&uo#e?q+c$ P!J@L\T=-YFhc @#= +e^Vx1ٍoV$E9N晃 yWӺ3FSKlu>v|؋\!7oz&@ʓc" I6-l:7q'wczqVrNl2{] d"Ay ܫ~>4tʞ@ވztf$1yo @Ub ⧦g G9ϲKaAEuY#\.7ݦ/D5pZ\\Z.b!"A /BmWp&Y%!9E2h)kx P 8:,07( `&Le]c%qLo0:Ys9cZJTI(I}sGb?A `h討U"(=s݂Yx/kׄ{γtsLiUq*#nl ҋLRTOmgľZfr [..rl*iOJ"(Ta LJH>Ӹss1i,on*x-̏5PIC%2c^c,!qihҾi >G'H^x\ G$oshv&_!#^kjMPpùN`<-)ݩ)_AE`-b_n}r^@&@(v"X 4UYhN8UfoE{S߇>&9('Գ|qǏX_,H>R1[~%'2@uN}gj-?`J$jr R}]Rk 5f#+j|̻޹ u2VH3x5FW25_icy.,dy] M0[F JgC0r%qrGԂs : s:8zWfpU)Fo8$2 :ٱ]n H@}ϪF&5hIy׿B sNTˏ6pW iKHz-MѲ,@9/}o1IdhDjOŢWt!@OP34:{sRi96€V#>;|E6Z4|m3!෰ю~TC.\ Mn%edU꡿豹-"HJET¤~;AÂ1L.s둝0I1(C0ҠOHA>U@pbXF,vͤX"-0^Jb> 7[=sVz@5u"^5grS6|hU{># d4Kf/'T={9.31.ku-%x2j%%OKP|7$'7c)c|Gi:j.zm8JKAЮk$lzꋡWAj4Jt7djLL3"B(ıM 飖SY t&>}o!ńw(0®NH͐WkK0䈯@A2(L(w2Y=hT&h2ɪ7<"79`JBS5«z/#Q1ݥ`Zk{4qK^ACtᮅ,~ PI4i"&sZGFKpyk 精W i3mM%M- <QP<񲓏~ԑؽz*#Y[jKqypL*\RSe\o1ӁsU98_yƛȖt+!@NoL)LuMB's ~?Dg2;H5v|H5_~NW%{Ph7H;J2Wo1L^U;;( ꂔz[U[ <0Alz&~At tAk]~ xdn7 E*Pn#Wajq&{0wPQZǁ=C1Pbu݈ k}.-OTU2F/[pR ITB^ m~!feo[{>U#7|YaN^MX}4̰۔CgP#[Y]֛j,VDZtBEr?Kn{-WÆ`O1aI5&(s8-Q="뙳J6Pb'1'3T =TyJ MZ̷wr,I'F؟>HG &=zX(.E<LWa _e-|Z8]|/Q,4?M> ce'+|u$NsV"%m`A$v*Y=l{!,<];^fpt⹍筞U%ɜƆoR ]M{ٟDN'**4+[j$3Ѭ457sW8@\Ce8)'&AS $ o172bK"Q3ы hpgH=N8]O X]+${葠ډS,9~ɞ&__o;yZ#lc4Foi:g\y]S4=믃lY6;Ϻ ;e|0"Gk2壾rљٍ&(޼;b0ߋ헄s)Y]{ z*j(QBAΤ}Q7CjD9B1 д={ָy$Ji`f9M'+NZ ̢7W/=8'&R9@<:(@ #ݟ?`]Z|o }=ze0lJns;OamemJq{Tl@¢⃺f>p6wz> ۽;gx'*&[13w 5o8@>T]a🅾4}b=AZ>՚bk̛.wmwg&COSk\F8k sYM&VyYzLEYFB`r c >7\v6@56729 #QIo'We GPfDXE*ֈY#<ȥBm%9@oi9)#)\A; @N%W2d{t/LdL3-g=˵YB^BxpQz,I6N?prRzCΆ~<trb:c͉":WnCݕgY] g(pge8ir#T:"Zd-MdYr d<ϼy2xܣvYzLIY.6ȱTbQ@8>,pJ)[HB܉qn;Ǣ|_zD]xX[-`j鎿[q6x0~"W| ~)fWy1v>Za-~ 1'V%@ke9n|'P XgbAڀGGeL]rfyfS,!E,;L x6椵h1`n A4=th &/T[*HZ|OI(pYqەj;=I!Mw?S|. sb {Ec8g1ּZ]XIzI'a]đZeq'WQ Q$湼b[KWf%Mi@\R}dbqԊDYnP֣ZEI/[<c/ 1L]=@vN7mDtFǰOx5/Ek݃nt&TԪ[?yEM 鶆БLǴi-~Hwz"}275@F pUG=6TXop O,SO%X͘1kFc;"{ .RYV > >zFZ+KokQJ9heȥhi!Ph&'79{[%aA}ZCDiͦ CMі%)~ERͼEIM-܃y%͔5b-c8X*5%'=BVs.-UD D%⍪Uj*%TvVhTQg-ԠXa]]oU; aYYlE@|/nнoaA*sXx B7'?ciتU qH4iFf'CkUh_ϟ.8-CK*K\ B-z@ 7a;~x{IQ'YOM^_ԁW>"]k%׾>m֗[A"TI7M57ČQU0j$Ѐ7rT<JwJ:^Jm լ_뒡K.y&:٢c+ST<!nsfdw\xZ`Pmd4 +烞mR P"^+:wcLb_`꥕rT-"ǷC3->T+cm"6>Pg']eukNJt.cӐSM[PYQ $;kh,I|[Av_{H~j-;n&p9T_dͼ=|%?6ac>ы (U 3ꍭ>U1#?zIϢol%jj&~Pi4cG7S z݁L4#Y??&r $7RV_vX!Z[u"}"U޼ֈGh 23]OAH*ܗ2m1viũ? ¦A վ#Ub%I& tq({=ˠ:+ŅK=t¬b<~ImLfT?6 < O)%|eF-p15f@jtPJַ qQ<&6UsFb$CG.x,=;4'|{SF'"m5n6k)ǘs!>Wq+H5~Y uc޸obn4esrp:Y,'  PҶAG@~j[Y!FE6lz'0n؉:sǯ PgGQB?=M"GeI-|>ʓBybI4{$W f*#VKd2$ )z||E>_IJ*`vl#Yiw9;"ͨ²1T2]}T%=ִ~Ւ]ϔwh)Jǐ3 !>^OX4=6>O%ۊ@/8FN7dXe Hmp6 xe}.P-Fǯ\Gt +a{M'+*I6Ŷ#^_D[fH|,)ع@<\L398 >n#mqSTC/l÷x$< j鞻c=&<~j?N<ɞbLO VZ2bY#oCB"˫g ;~,3b%BC?Bǜ ´M=0ӞC&% HΗ\%/=WS$jho LW "HxUNOh@>+s*r߲U"E '"|3trl5얋BQCzer][ݹjqzdY&ks>77BNp0j`$ò~k,K3ҺyuQR+HQY,G*ft˴oTjP\-VWv_te,6|7tMjgteU#''ɞ(~&lC^?HImׂ{0iu $چz(8׶WH<v@ŵɠ8((v<coM~;ΥdQI }WdHs_AäJxvg9sp6;6e,#K*>$ M+Gy{(0P'E)=PL(~9g+E* p6AL,X w9iٻr-N~YIz vo!q6SN_#T}l'Z8! R=t6ޚ%4 swf8Y+K'L:έs-ruFpJMɆTh|3mة gv:^nC -[]`5׬P:qz3:@r>a5Sƅy\B&}s3+&RhQpˡH@ropscQdx(޺%w/}n_Tv7qFRG8ċ f ِKaeJDFۼ[Kal%K/͂N1/aYFK؍\h1IO7j 9۸= jՆjK]B-]EوP>J#>^6^5h!\_'aHK 491mfs#I;2d0q_p;[AMG&tnYƭA>2lÝi@WS(:?jMa]n>ar h 怃GevlvpB _7i}*ʼv/m#֚yCI V[y\Yg/c UtU3RNxA>~Ja4]xL-ݝS;HMv64@}YEJH4.qHtsK?(ȱ+9r[F4HA%|HO u Ѱ{5~yT8<~.v5ކT#r-xQ"mń?i)`ǹ(h^pP^صHS'(U D" Yanٟk#8;X, ȃKhNB !E aMxr8 ˑklȔ`R-Xpj"Y2'L"-G#ɫ1T΂XaP`pf xcO^&GQRq:%.!^SOauѢPoԵIXbjK>W`?̠VKX Nn0V0 v8 u"P[a/.]3>[V@cm>x R9uU 2NGl+Ū܇6}G(erXr+?5JQ%wlf'j4]p| MM"vW;[9 __Fi;q@5<`e!SB@bntϻ 6 T3EWOKVO9@3gtNCFk)PR xG$ٲj8o1DAXy%yHN6 !JRh؃XE&u-,0[Xj1s,Hita8_ V"Z4wNjyL`[5!iCW% R6ة]$o;kǏ=C8 }upy5T-=qfb0S̾[N?muMk5hlI &`3A|yp!%sh|apL+-[m{uH>QTʂ' 9S J@5,bCUw UN<{;y@,/-ԄϢ]븳=3R:Yܙn`pv$b.]u"/ȷ] I f*0?XGܐ?;_C T\[ e;'Ѱ~Qyks|xx7Ck@Rb.$X9(}L|įtft_6j)'i sk?zm9K)<Q ?i i2L-jŹ`WC0yx$UfөshkX ߜ*ߏ?YjhDHaIjfT>RRT 52n{엢ڄ?WL|]"~砧qb{ GXK%_J\ Yf. Hat lnX~+'Dڳ$U,fM^dDca#V~~UG~5fD-rQ„rYiKpt0-`f6e䣻G٭d6(U'%P ܡQ%hut'tZev[ōu}g2~""ns %tp?P5#A>a!]u5t)AS-큵m6|]A8הC xiOPsYib&F}2$&W{fk(f{iyu< ⹙=(Nt8A]L{v[`f) Ϫo>i㵿KyGV F|g6[{9&& q)R%Eo)'D,zzԕ,s 7CMmj6?-Aq2y  Ȅt)'zDbmRMxI0 G)NH[ g0r zٚ-C%"Kd[bV%mp޵m:jlN`Yc)+uVu,fwn99* r4 T:6i5(،#ɇ[uX;sſJ x4w˟sVLoqaаnxE osuJ3CԨ(0XΏ]I|gz%LJ.qᭈ_PmWFm"c?c lJy{,+goFKցnzՂԗ*qSRTmJtŜĕ-9YHAYYvrh9MuÌA_Hxˬ}+cթq"ΑɯV3R,@#w[=GcY N;zs*F9S+eEQUKB0Qwxc}A;^= 77ʒy+O ,9qՑ;)j pDAR;&XW[bʺ ?)ZM+n1픁ٕg#& z7gR# h|rF_thNr~U;4r"cg㴵r7$8KlQYR}bA"YD:ƅ_ڽG/!)Aw'D;oBV NB6}>QΖh˳阰 Ν|Y7ICG}GPsH@@=Jne9/P!0 x_a ymㆫF(˔,9UUVKkJlMNmn]@(E9:fݹ"]C`*bmZ,$ѽ2;D:(si@ @ ]ECE'sK _( {8~粵p'Fc&/ m6AS&7'q8Z]E`q4/QXInʎ Tg6M)BnM B/{uP}d6!?b(>u{ڏ:yc{f~ 0qmNGȓ,mPi򼰉j&W XQmKez2^ 9SSJfPnh%JzZW۞|jT LmIiUy7[Y0w E|LrgGw,R?Sg%& B LvUoy ^~Ao5CڸMٵ$JLh5BsAUWIRDD&+N$޵Ik l+Y}WSmn@{-!6R!.?}/տqZD+ m\!ޛeW@:,PW zf{Ȓ2hkzVx:H' Y*Tˤ9 ed@"yK/ˆvz(`x>"u]8_/~J Vyʿ7*@q膺[ *I̐1U9>Ɓ}CBim1ax-[&mr)췠1g l&mû ",9%c^28=R4QQ1d4j^sٔK9puzZ$5me.sNAgNaH|eRT6rkJo3I\/ĉPڣ%l҇J -6Q]j9]"ƕrEŶ'e(UlrސӁV\ řr+s>e[38_txʼnXx/wk?D7+4|eW, y+ݑ+]/42d`Gs.(j5lQt#NtbݤJ#QFݎoLzԖ9\ =/|L}jUM嗣$.S-Epq`fIFXO( up AUKJOhx*UݛAbi+@L?ے\<հM!_,HZq+ ?AbJ3) ^8̖lL*͡6љls{3kQܯ\v[00eX&bx7!2LWi)U`[ Co5[aWY4A~`Q:/è]ygva0E|j]\i%ȷV"r#ᄫ̀*X!Ui;!22t hW\S5 dh>'_SyW! ive]R6ˍoo9N;gB" ol9o}עJeb >')&՝WCyGN`pSn)k&QTf /WaCppN(~ɨsiwl;J9[o;3QVgweڒD`rԊDr#"wZ21=>\#vVGY`({M]4 0xZގ;_' )gTmt Q?s$|X\Rw,;/(zZPb=FSdBAG6ME :.fbt'9|cc׃{Fd4.`zC[!H |0,eX[ԑ*lϚD9Fd>o׺h;1fr MM:}RQ!ι Y4d :@s*3)Nm#X'}68FO0ض7֋N,\H9KV:* OciW^nU)ˠdide3c4f@+;kbԚ>f1;h0?;R͞ ]f?5$򒺕  Ռ=^bUMX+|FMP"wA ;&b#k *]7f3ҫ=h\KQd2Y  jiq|u`N z21Uk;ˑ, '1צhVKhs Zmv# րnC؞j|wi[u7Rqq y0x\e˰D$wWm3Ԏ(go{<=5Q13/^(,G$y/8b@,?:MH~RS2h?85ucd䧗 2%jȼ 3~mFi9s ٹo@H5#ꗖ,>٭}.MF5]۳;ȕ#g|_"l/@i\CbhY' LĪli:YAC#q OW0xO 'IblMP8-})!^P/ɮ|Yذ,!Y&L8CEg+2Ab瘏Ԃ|և`7K {&9f+C45]z\׍R᨟\EasYB{֤+RAJe,!HGJ/g`h-n2VY)L $u.ǀC}H'(  ŸF^et軷BIXe"|ח9 i±VɂZJ<>1[ rm -YaЖ7SRE.y\Q)g蟎PO&,%P\݅"qu뤬،7> Z^(:X}>j' 3 /mvP.LU@i9Džy&3(r5 C%@? T8_AW"ɉ])h_>ֹ557+./smCN soAyy:Ddh-7F[?)_E3胭*Q. d^mKN(ͻ0%o XwE)eu(MﯪȜ;Z>I'Uo@? -ytMb~Nn Hw,( %:$Yu:ԓbИ7 +18|_8 b^;ga?S1@e p!uLbm*eM3Sc*Ph}Aa*;iވkv›fHwfͫ!y4oɡɨz;*sN_A)&3nzl{Vu)6Ű^A8 ij $^߳!_V>g$Ym1ȄƟ|JKȳÌ@)Tf hrn ^Kú15RMyD,n 1CDCXYAk:lUC.&pv6Ri)%vw f CO 3GȰ_Z 0)xs7I&٬Hȅשr60OI/8iF_<v6W3Zy}+),>.]OEFƴۑN]܁KTē>,*ܲxH@A.q0? Z[Q-ecѩVFlITP?B0נ/k|[̚4M<;ģ,1Eg1u/f23&Z.D׏ .bu&_[ɕTA;`e{G$yE? .V$^[e]EQc*<)xDWgҰ+Hvc#.eᒚ˺Tn`퍬!k&yGvu!upH"SEYENYV2\}QtZyeeK8_Nr4[OCqp]!u_ &N!W~wjel'ӵCAVRݢ~_e_^ %Q[~<'uf}ΉlYV(_"̻P5Ҍu:ES`,hҦR/vs^-ջ*04/SS|lQs\?Ntnl]>5.x>š֥,!G Ϣ3{6夃݆L}`4G{#Ger(bvUTr:uGt6( EFjg·Ce^4*YO8'XCqPB/DPml;aCqol=VCSUy 07]I*JΌzf2*8jn,;GhsKܶMbfU8},7v(Y1Mik̭"/bTXX\6nu0C|S@XtdvDÊߞ*bYOgj!H6 J6^BvS-q~X=H21rj)lE+=jsTH`Xx-^ m3` }k S_V~NCOK AJ'd.u"Hk-M]  b>™zN>JSniQ4bKۊpg4`7هVn:J08:?YZ'1o(M=ԄWldccίX z VF2catJeVTknݵfet) >ۀuf"կ.R.OzјRk`AFvBmjÆ#p ׺ơA?۶E1׷FZ&,y^$p<=)gaVÐ. y@ aFUIO,'_vn+[DY S$p#̱xdoQ6^c0;z: e("*߭cv*SX${uF gbdž\'V&1'w GH+jPBL+mi4 `B;CɁOnݙ ~of%gƁ0 Qvm 7G\CL|ۛh ~FNs<ǹ$۹C87 ]Gކn) 1-ֵe&̲ĬPU)LgvG.ӭMÅ Zuh`d_j+<à &F-'q=`ɔ+14lK|聵)l` fXnomt_`jl++_)׳,-k%aG2x éKČz!4BŊ%\ieU)ې8s+=`HDAħxؗ̕~Dɉq&Yw-ު,P|G?h6aO㜄!a$.79 ۵+-ˍ2cxne\!Hei 跷%v6 ТO( W=۟{Uƿb.gB~T5ľѯ 2DWne z|]#ԑxu i/Uغy+KBUGK9G6y"ЕHATCy ВNЉYg:#/ ;&8vQm_2!di,L1@|TzPH*͢l_R-@i;c^" >y]J"<|sqr6yVN K;!B|k;S)bDT{ϑiDL@pZh'vm0QP#^EڴL t|"LT#éjmWI)0Fx+ȇ'P(HOvn5+gF~81":ɓ f=FLYK8*y*Mh`tQ3 aWIs-Q,Y6LvK'n{mЙE亵ae̠gzlIaCY-)` _1縠o%o$BCXzL{Nu`4QQH~'$2ExA#C**U>D)I+VC8EKQLqZ#ݠco/kf[GZSP}]S_x3b=+V>?X-WNL8V۱]AQ@ujk+D!7\[.B{ % Foc7 M!A -8'P:5tvT# .j *12ӰkLIKl*U s"Frww{mN]%YM{>k$b9\Y7;a)mȸE? < J_]s~ec>3vmIDе2gD19N΄(,YkNͰ#&I'X(J˿Z9WnwL*LY7#VUR]7Րޤ=fwxIOZU/Ba#BYKK灖 j I dWJ+u\rvհ"p1<(oq:Yo_7iqܶI /)pv.[+G )t|I{ ˮ{ȁ!/ G)fOʡRA5sNڀPŲ"ʸFE/I?SC\e7LjX#f<Ɖn>bd]- ]Ց1#)o]G IG⺗Jme,L0ଶhFa4h>:QPª~x(NuD *DsxWBSe;3= mt2&j>Gy$|=&QCk\)u j;|%>[hzobsZ| O!J"Py^s/AfSYppTm l"i5$v;9ip276hǘWEҋ6<9h&_W̹Q^yHEH OE] ΧMBDAZpը6}42l(: M[7Θ{#*Pa,6AWwΙ9D9PbԐ6Šg΍k]K(\X:k T9Bʯ/X8\qPMg+v_)nHu@0ˬ=gSd oN;,KTʐNH܎4YxWv,#>#XɷCI/M#Sc%lxeuD61}QǾ7B_Z @>p(  ̥H|;o+b:t4aweds^8hAHsY ЁXj(*Z! J פ}}i]C;h"}4Px'AMp1 a51c`u- <'q9Y $&~rY7o$D7 EkhշBA쩦vhP򟳑VV0<^SnSRB +_HfΘ@n>5KCп؎T\x)dΛYw;hV)I#2P::9x #*a)?mK2 DŌ&!8S{Q!<*qJЦ3.c/} ӝ}09hd$dRQC~Cv3e1y-J,[(3G/xff&rK%4ygAKd((>!wMtOG,MOiJ'7?#66-.k8#'ODCM,:JH%BBDh_ A6E,jm;3r1U<.u`wu%&0|JFk[y?%'}|V f7Ugq ms~= '7'і=Օ' &C9o$mҊ^HD{Si;vWCĕfD=P=R4.TV2 U Q:F10CCL"%nx&*I&ZTo6xc\m0b}E"ԓxP/kNU "{co"M^x gV_zJs:JtB#NaI+ie.XVh6s|H*/{zXGͼG  YnD: *lgK j!"+sa\nTE7jY9'=5}20oj SvV%O.^Rd 3L.^^_^x?UH8B2Lb}djrJ^!ð?U=0yrYQ]RO!fjQ9JzpBa֓ﱾi>IʋJ?`mR1bzqO U˯A/<%6_دښNKr2jBBV;*dX8m }?"-Rbe#zk~^WwuX෹HHEw(Ԩ ={bl0qCp֣:] g h +~ SmEJ"G+ ('$sP)SwnMӗӻy-E;}oIiU[Hh7o3D(ZH 95:?iꕽ‰도 ^5JayS8y=$V{Mjx7{3DK%F^ DDp^+8Rqz!2ѿ *$щwmww✯~|U}[%$D%NrzPns$ѲraBF9m] ShϪ$'Tz1y(_m,eL>!]e11򁸻[ RT#"^MynP[؄-oƟ[$oN4kY&f7 y][Vx]-jI|Z-p xkC@4/e5 Esұ g)i(AdLsE/~@P{wTK 0+c{O<"˼g\hl}.-vW? =_2Z2M(T&οJ*3҇~aD[wZR1#"r_h {iSxFSŕFz_=2 9I(&69/>ц,Wi@͙'d]:zƓ8aXNw :x̋}r5TQQ6Ȅo`Xg𵛗,k $k%f fs(b `?m=W@AQ&uoQ`}*'J#S#wI.b3HiFY x|"DZ_?j d ߱2ʖ'Me]I$k)rv4Й܉X*weNrv*& /2+m ?`cc_t(ܧO$t&,7;K!bE7V]1z)`*,nJ=veT G3(Ic$w%Cʌ!O5 !Y[h5I2I23bCNy;pR,hk|AhrS Vߎ̸ָ L6{Ltd#c*;_K\ucSzed,hi:S\^sAn?U3,u" 4XL!sٕ%(x>ӢzbOYS؞68I2VbhsHYq ~b啸]F}ם(*GeTGk\Yxhh>qC\4ڣkj<~X#ړEan>ݧCC?vn!:y-/T79Ej\ 80Ԣ"^*aQ;Ll~E$ڀmL3DZ*-.42m|gqҤh/O񜧜(j55I` $y FyݏF] =~Ө^!cR+\D!%J,W_x\n5M{ZRX>b%3JTEe3̗Cj7R4l0&#fݰh`/'V ڹrŭ(Kjf<>6EE8ˍ.Ȕ'55cɥ.2YYxu9pD8<]uC#gѽV,dbi'&] T=vcp`5NC6"_#AUET6dOq70&P'#e?~ذ1/dܹ~.LP=@Β̮$dJͨ '@ #Ė,{1_󝷔>X7Ao_W{Ҫr~Ųy]4Mޒm?³=D{ &xhPpOjV{ǓOzĮoܖ ^I1,lK@ ASi~mư` ƞ1(lfvEm봨5\H }hbǨz=WRCEԢ=N]pAnMf[@h 56hCTI+L`Rc+*XXaոnp8weT p*"*až\J 74'%'\D)3> 8 ׹Hho+Lj CIYZi-{~{֪W[s%| ?ߴ;LrZu[rAtN2&GGنJ5-3pRC^bs ~]䦪~p2,g]Ž1Iۯtt[W4K6(s_7wUcTgϰ$Zە F@ I2R忳 <4%OΕt] X4 w GJL=1ZB2l=Q9 93:nfC>Cd)kt!F!JΙh\sHQK{2e 2ƍ 1TI8l(=08(`*alY"[F!hB,\.dx=+QI`Sx59$NphG_鼓sYۼK:ڲ?2VmKz܌g֗`G<ʕaߞ8hni{$>GsVn#Q r+3n'*JZ m~A$-vv;@5Lˬ8dq]!y&^])'Am~Twa۫,b)ɲ\wBHJ&i䙨j`(#ŎPcjCy ªlm]Rdv70>2F50TILbS#QZ]j^؇u%_p%~}= *KHŷT&(Յ32BN<)&5xxY6ӂ'6' wɎI[GDm $}3:Hqy; %nuJ=SG?T,@v)JȩJ[/7ޣlԏ~dSP'CԺZHHj!C!n%E*`THC `IG˷7%zxd^O~`쿼ySƁƙ$#73FX|[to_ߡ>fLA/RLl LCzِi= :mOZ6K&$^+"t@zV[Gr^ UN D6 /i`^ J!3K:v4o[[ne +{TJ%YXÉNkx:U?WOE|4R "ȯ*k r9JJコ\-=c{/9c&Trf~D•*a'Q݋ TXJ&lrѮ;7nR"($-2 ?``ظOil ;_k(%sW{6p lg0u@ʂf8@e}ҭ]_{f6 x4gW1*Vp݀V T*;3@YK8S1@J 7M!݋Qg)GoU~&$J!d)fR/MtVmT; M H&}+7o0_wOd=lw=z>k GF;E3$םik@~ ~U,䂼(σ @fәR"q )1c嬂ZCyU黐0vP]/ :YgU*apẉ_-r/ol緸D#RSdL:C"!c3XT _v:#b؊+g(.ފ*Δʡ~8/^2zN9Y?{ʾeEd8ܾpr9@-eJ4%1 S[Y'K'%Td ?F\G~\뉽W yM'bXVś:ub'ϬYI$O| .FϧY8NJ Ō!c+'xod9ݥI@D{M~8IWT5q`ICW=4gl7`q5+Ф{:{։@beSACKWV4+OgFM!܇J ۦ ŚJ3BUEtV8n[X(ܩEtJ~şѸ_^{Z*lPq^Ѻ%+>;NԶY{䖹 +^߲ŜywqON l`!-sYd*ŗ .WZQHMeu{M :9c!&1ndŎKҠPnTlcudu33(Ě 2} S9GfD$ٻ/[Y4E|18AEbdqF4 ):W?'<}Ӡ=_S!'$uKџ\_!TupV}Ys|^q78F!g4ҽlNjڬ_ř 4HB Y~TgQ'v(ݠ#>!͙;`%Mz 9DDj=6]ӲTgq%2ɍs%@zW \#RaxWC8Mo -vuڼ8^ij/)tza6N[`J Khko5XZ6/t{P"E/oe=HUL)eOIᒮsFς;Xkn w,x,1E}eLv&vʽ0>$}8ևI\%&fN#,즷fWZɘrC&>;C.+->cS-gZob\p~t[ |pIYTt}uyJ[CŋFѺa*}*ڮW(GDE@ =c Du4RBXA8ꔭtQ eW(tIZ{.r2y銧%{:2h%j>mNlw)WrMZqLDMsZ1JٖVEDž4QA-__cYՃɄHALsE6&T~`EMiYWkV\6l{tj\>*8H~^C% g^<`r5=)sd$kEv&'*nbaghfXo=]Dd~s~6x3uVPPuxNdQꃯPIT 9PȟU #e2R60W%9EֽttAXJx<潏]--#:W욏[ҍӓ+D15&IΞ-5*_; K{:#ǕE/~hJ0V'GdnDmr,&Z\ȭ+0n%c4}H`ր1߶\n3VvzA&YQ|P| #Pg>AN!j`g\M̋`"%q ~y\)Zɵxl-pϒ%GS]?~3o"$qnhh\=Ow1&a a?8?7L lS6U3>^ãߩ0xiڊ>]L[G/GYBpъٸh%;șˌQmϯ$ s7Eb.(l8c\C/;hWںex2V %eE)].:KF4sP0Ė!S==:IKWuH| "yWl\ #%gOg݌iٕv)<X$!|"6BNH?%68T#}M}b]!x"X]W`NCm+C }Y)G4O"+_Z5~HMR< /eHkSzai4&ce{IAv,-XS_xL1:C@G3ďlF=RPvL I3z "mL*5`܁qp_ih01":cknI݇zQ{ H˦׎%0ج(Lλva$MkbF2xAt!Ld7m&TyԖgz[XZ }C.K:Q0CY-jiROZn1$VY}*bdin!j:B" (JÍQ@8p,ZrK.;hf3C+4nI9,ܕXW34N#N/VϿ (CQba:G%o͆/G L-*ߡnЭZlw\͹n;ŗ8[)ީP;hf)p[~I.$3Rϻ?!,#QƉR_m R?e =YԅK9o̧IRrØs+;HoѾ6=Uۯ%ݛۑW 93qbFjrƯ@|NSr8>("O@9deݐN9iu7{6];0J4 MKu@l6,o# U'!:1p5`bbIC2->O=7vF\(h~ȧZgMt@:o* A [l'Ke5Iˊ&9MZ ;<1Y51(+Qٓ##}u'}kNtkpFSYwº~t4 fN` RM:AF"zUlhڒ9LCH)G*{wf'z nޙx-`'o.B!owmò&K7\ۙo5;.m^[qBBݼΔC-7Nw.h<olWZvWMtpd dٝQ5>U+ql\cR(QpʓdDL>5Z_`\n>'Uu'NJ@$V57WX/jW"v:ZYM_UU}N A^5޳&Xο r :y1VKNωD)\ .^A=?n(VܬfBL vu⅘d&$!^f<{tH1m?]BZ;E1q$E:ͭ騨>0b߉_kGxΤx &iy6l@%EkE ]~tV_'Jnʢ3\/RstQN (.soJUp[w,o*vm?K,N@蜭Ά$9y}JW0ֳ,]iD| &Pg&fʫw\yUd2FϦ2_"zHq6*XZTRs[}fؘ ՀZ7'N\eq {#R w?Xϭ7zZKb1%J5]*~ tk/X]%W# wݡgwvr;@`fs  E[r6E\-йnȧ1LY1"sf:_R䓄L3c넖7;e8(VFfҾs%W<ӆLaT.DW P`ڪhomxFD=~S@;=5"~VN N -sK^`2Μ. } 7u?od>h5J)D Іpv3&4v %g^"" xI:I,bĺ''9uiGMR10(Pm0 9o5zuc'QJK ۺz,6~ޱ/v_!9/v1*9 ow9a cOs!POmoaj[ .(S@97(M)nBB/M[xkc}́Xt:=(YM\ǑJEݱ9KnVzr>9ٵ{P/)'$պjxIRUR½ #(zݪai 1e/0'$ pNT*grEft6nM-H57U6{? [NJ?ɬ%vضUQi*sne-Y=-;,?IfXppTp8l5Ѐ.c9SbVQP&|3 (i׹Nm"8cttQ؎5e>Hvu#})gB\g;3m 6YSG/O>vTViKܺpeuJȺ=ۣǰy_|o[6jv_$(#ꢁ\2O[lI"AΎBB>>U{qSvXOLW["k )oWd;,W8J7=ؚý=V&mS$nɯ9rN|Ծ gQ h&I&geVpI~Շ6>{ϾF%<&KHif>Zc]F$5jb3F1Ay=Բ~~kϸ> GE!dG=mc,"εpܣdW qw pwi+9)GGp ZM}&bae9>gP'ЏʄȤdm9TOX(`1s{:;u|%&1rY,X'ubaˁg[UwT^ǷC2v4%B-ʻi9߹+?[7yP^Q:F?h3ɜyIFY\#0_;F_^WJU(/УWDGC;SR #euq} B8gg5X"t9S߇eY%GḭY|{~0fkFu&,xK|m]%VߥreovmK$p׋&277ۇx~Ѻ%"֫ظ%g0h( *K'-7G#XS׉1tt&?GٞޜHǿ? (^ ;AWZvqS^l,;aϊ\ CTױ\ < C׊S9ﹱ`Jc7qen}ed66vt 7MOsE) PR`gGĆo[9B+Ӱg[`s?LLŭ|QQp Yk8{Q/(8h06f+Xiħ6PjO#bE% "tsKa b 'UT׉,}j0 罾QkkW} p1?&'A 7{o?[)7DKR>Cc+}as!ƳRA*oסgAY>`0=[JVX񃚒έy5N #?0Bz*瘊mDI%VE,-hyX1K"Jz?(143UHv4miɠ kICZ/iJ[ ,b3P(7mߙoOw0kl7i_?&~w:@h*ٴnéj1 'u?">ySHcT :|ߚ[%0K~GƟH^ʿ엤_[SM,ֹlm pAadkǀbMﻐ`FFQNf L6Et9 z}V:[̮\=;1jSߌIkG8gIkB߸Z`QTh Ys",`u\rƴ-J>YeagxN ,>AUw/1덫-Dz$dy?O]@h]0fƭبrG.8}:/,*w:ԟ(OnHP+Qt[?.~wЦ>x߇p)|H6Dex1]r!a,8dL`"VW0p׮K Ȧn+tOV'3i/!3] ~[p1nܧ}ѹ_~:k~6af(<$Kr Ce9&Wx{;Ru̇ǔƱZIsʄ~P-Tu6Q7 !A.e]EU&`gQ|xh5gfB[Tω<~찬E";|`TXx4^j^AY5G7iʷ1} J>GR}fO"5X[|S=գ"$)^` X1r|$ar~f^/BȯSRߊ7h=t *:g1%[? VQ{@G1ް]ebEd SScQ.T8na'Ly81ZG Rk)%uxR)θa&HTgH닐9 Ƀ(1;\q ?ݷ5wOw?@ӄJɏ Lt#"Up$N4_f~zue<.suߦx1PQ +GDF6<5 zO"j0/<: *ѧUPnz!g?>+F,}Z8*J҇[\; ejMR#j;@Hgˍԇxn/~PQ!.NtaP6;@C S:/&M}0A $Iv&w{T?GL֜]9EJcKD7*cH$ȆlBq`[ս~fn4g~J7Z?h2Ē&, 7r)@+#yR"oX +A8U #R^ԊDz#3ZٷLg ۶_';-3F:n}F]0 ,OjgB N b͆`<ހ}AK)I 1WHB\UOÂC2B}`k9dp{Ô:Fww6>X;Y nN;s4@WuGr}Dcfmٙa&8Imn*K}[:[|K?3h#/(SnT ַOmV%PX;Аߎ[=c֞dUG騝e%ob 9!Ȉ@bE~SƯ_!#ZƦ-'WJ\OkYr7~kqB2|^s5=XTt{_!CPͲC>ȸ14jeCBnՓ=(r2''[[xm'4;7XǴ7BJR! ZK&yKht4y.<҄U=-@-*N] }Tjm_Î1(6J郚Hj5BfbVN64p  +r&jԙ`+r~&ں/hη1w+539JvSehKT IV} ћ'y>CjjzTnpL2~9)aeMN6P7G貎c%Lc9 !5A͉.࿜X*3(_ ~L#CL 7~,#>CpؤH@xM%]'@6GbnGy_CSHlFf"|\?U3gaނy2$IOH4C~' kr~X cm}:`8\-|@WK i=<&z!tlyB(L]OjV`tS]BANQiK\NL*q" IVeFde5%|Z,1h@F!=e*&tVohO YZ