tomcat-servlet-4_0-api-9.0.82-150200.46.1<>,qȉe,9p9|udl1d)zwߛ82:@̹eI3WD!6+oY]޺q)ѾZh 7Zn1gwNuKx7naSujau}r5@oG{V#t MS38g+Y~e 8l?m? yWF8لg Р(*h 2Ȇn']pjÕ^L )ퟶHp,hl3 Ik>E ?d  , ]  /IOV/ 4  F  X  |      1 ^     ( 8 e9 `e:e>@BF>GT Hx I X Y Z [,\4 ]X ^bcBdeflu vw8 x\ yzCtomcat-servlet-4_0-api9.0.82150200.46.1Apache Tomcat Servlet API implementation classesApache Tomcat Servlet API implementation classes version 3.1e,9h04-ch1bFSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://tomcat.apache.orglinuxnoarchupdate-alternatives --install /usr/share/java/servlet.jar servlet \ /usr/share/java/tomcat-servlet-4.0-api.jar 30000 # Fix for bsc#1092163. # Keep the /usr/share/java/tomcat-servlet.jar symlink for compatibility. # In case of update from an older version where /usr/share/java/tomcat-servlet.jar is an alternatives symlink # the update-alternatives in the new version will cause a rename tomcat-servlet.jar -> servlet.jar. # This makes sure the tomcat-servlet.jar is recreated if it's missing because of the rename. if [ ! -f /usr/share/java/tomcat-servlet.jar ]; then echo "Recreating symlink /usr/share/java/tomcat-servlet.jar" ln -s /usr/share/java/tomcat-servlet-4.0-api.jar /usr/share/java/tomcat-servlet.jar fiif [ $1 -eq 0 ] ; then if [ ! -f /etc/alternatives/servlet ]; then # /etc/alternatives/servlet was removed on uninstall. # Create a broken symlink to make sure update-alternatives works correctly and falls back # to servletapi5 or servletapi4 if they're installed. ln -s /usr/share/java/tomcat-servlet-4.0-api.jar /etc/alternatives/servlet fi update-alternatives --remove servlet \ /usr/share/java/tomcat-servlet-4.0-api.jar fiY A큤e,7e,)e,(e,'e,'e,7e&e,(e,'59a034359a329fd4243286bffe63eb15f6d767a0fef2be203f634f3e196996ba6f939fc48667e2ddb1ed62e9902ff4e6780b1c4d72543b9175d22609484a88addd39330a0e8372cd8d826a838bb5539fed7b523bcb665bff7eb2a838799dfa0c74b03fe1ce0e54a9dff187e44239468c071be7a5f43629f6a8b3f495c0d05f59/etc/alternatives/servlet.jartomcat-servlet-4.0-api.jartomcat-servlet-4.0-api.jar@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottomcat-9.0.82-150200.46.1.src.rpmmvn(org.apache.tomcat:tomcat-servlet-api)mvn(org.apache.tomcat:tomcat-servlet-api:pom:)mvn(org.mortbay.jetty:servlet-api)mvn(org.mortbay.jetty:servlet-api:pom:)osgi(org.apache.tomcat-servlet-api)servletservlet31servlet7tomcat-servlet-4.0-apitomcat-servlet-4_0-api@@    /bin/sh/bin/shjava-headlessjavapackages-filesystemrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.1e)1@e 0@e 0@e;eRdld0d?@cc@c@c{h@cQ8@bγbbN@b!b@aaaA@a@a{@azamaamaama`X`Q@`OL@`OL@`3__F@_@___FN_!d^@^^_^@^Y^U @^1s^%@^!^@]҇]Γ@]4@]?]V]@\\\r@\k\j@\Yz\X)@\LK\?\8@\'a\[v[u[@[@[ug@ZZ_:Z!D@Z@YYYY:Y@Y@XZnW@WiW|W'A@WWKV@V2V`VA@UlI@UlI@UlI@UQU hU hTTи@fstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.commichele.bussolotto@suse.comolaf@aepfle.demichele.bussolotto@suse.comfstrba@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comwittemar@googlemail.comwittemar@googlemail.comwittemar@googlemail.comamehmood@suse.comamehmood@suse.comwittemar@googlemail.comwittemar@googlemail.comwittemar@googlemail.comamehmood@suse.commalbu@suse.commalbu@suse.commalbu@suse.comjengelh@inai.defstrba@suse.commalbu@suse.comfstrba@suse.commalbu@suse.comjavier@opensuse.orgmalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comdimstar@opensuse.orgmalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.commalbu@suse.commalbu@suse.comfstrba@suse.commalbu@suse.commalbu@suse.comecsos@opensuse.orgfstrba@suse.comsean@suspend.netmalbu@suse.comecsos@opensuse.orgmalbu@suse.commalbu@suse.commalbu@suse.defstrba@suse.commalbu@suse.comrbrown@suse.commalbu@suse.comecsos@opensuse.orgfstrba@suse.comecsos@opensuse.orgdziolkowski@suse.commalbu@suse.comastieger@suse.comtchvatal@suse.commalbu@suse.commalbu@suse.comdmacvicar@suse.dejcnengel@gmail.comtchvatal@suse.comdmacvicar@suse.dedmacvicar@suse.detchvatal@suse.comdmacvicar@suse.detchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comwittemar@googlemail.combmaryniuk@suse.com- Update to Tomcat 9.0.82 * Catalina + Add: 65770: Provide a lifecycle listener that will automatically reload TLS configurations a set time before the certificate is due to expire. This is intended to be used with third-party tools that regularly renew TLS certificates. + Fix: Fix handling of an error reading a context descriptor on deployment. + Fix: Fix rewrite rule qsd (query string discard) being ignored if qsa was also use, while it should instead take precedence. + Fix: 67472: Send fewer CORS-related headers when CORS is not actually being engaged. + Add: Improve handling of failures within recycle() methods. * Coyote + Fix: 67670: Fix regression with HTTP compression after code refactoring. + Fix: 67198: Ensure that the AJP connector attribute tomcatAuthorization takes precedence over the tomcatAuthentication attribute when processing an auth_type attribute received from a proxy server. + Fix: 67235: Fix a NullPointerException when an AsyncListener handles an error with a dispatch rather than a complete. + Fix: When an error occurs during asynchronous processing, ensure that the error handling process is only triggered once per asynchronous cycle. + Fix: Fix logic issue trying to match no argument method in IntropectionUtil. + Fix: Improve thread safety around readNotify and writeNotify in the NIO2 endpoint. + Fix: Avoid rare thread safety issue accessing message digest map. + Fix: Improve statistics collection for upgraded connections under load. + Fix: Align validation of HTTP trailer fields with standard fields. + Fix: Improvements to HTTP/2 overhead protection (bsc#1216182, CVE-2023-44487) * jdbc-pool + Fix: 67664: Correct a regression in the clean-up of unnecessary use of fully qualified class names in 9.0.81 that broke the jdbc-pool. * Jasper + Fix: 67080: Improve performance of EL expressions in JSPs that use implicit objects- Update to Tomcat 9.0.80 * Catalina + Add RateLimitFilter which can be used to mitigate DoS and Brute Force attacks + Move the management of the utility executor from the init()/destroy() methods of components to the start()/stop() methods. + Add org.apache.catalina.core.StandardVirtualThreadExecutor, a virtual thread based executor that may be used with one or more Connectors to process requests received by those Connectors using virtual threads. This Executor requires a minimum Java version of Java 21. + 66513: Add a per session Semaphore to the PersistentValve that ensures that, within a single Tomcat instance, there is no more than one concurrent request per session. Also expand the debug logging to include whether a request bypasses the Valve and the reason if a request fails to obtain the per session Semaphore. + 66609: Ensure that the default servlet correctly escapes file names in directory listings when using XML output. + 66618: Add a numeric last modified field to the XML directory listings produced by the default servlet to enable sorting in the XSLT. + 66621: Attempts to lock a collection with WebDAV may incorrectly fail if a child collection has an expired lock. + 66622: Deprecate the xssProtectionEnabled setting from the HttpHeaderSecurityFilter and change the default value to false as support for the associated HTTP header has been removed from all major browsers. + 59232: Add org.apache.catalina.core.ContextNamingInfoListener, a listener which creates context naming information environment entries. + 66665: Add org.apache.catalina.core.PropertiesRoleMappingListener, a listener which populates the context's role mapping from a properties file. + Fix an edge case where intra-web application symlinks would be followed if the web applications were deliberately crafted to allow it even when allowLinking was set to false. + Add utility config file resource lookup on Context to allow looking up resources from the webapp (prefixed with webapp:) and make the resource lookup API more visible. + Fix potential database connection leaks in DataSourceUserDatabase identified by Coverity Scan. + Make parsing of ExtendedAccessLogValve patterns more robust. + Fix failure trying to persist configuration for an internal credential handler. + 66680: When serializing a session during the session presistence process, do not log a warning that null Principals are not serializable. + Catch NamingException in JNDIRealm#getPrincipal. It is used in Java up to 17 to signal closed connections. + 66822: Use the same naming format in log messages for Connector instances as the associated ProtocolHandler instance. + The parts count should also lower the actual maxParameterCount used for parsing parameters if parts are parsed first. + If an application or library sets both a non-500 error code and the javax.servlet.error.exception request attribute, use the provided error code during error page processing rather than assuming an error code of 500. + Update code comments and Tomcat output to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. + Avoid protocol relative redirects in FORM authentication (CVE-2023-41080, bsc#1214666). * Coyote + Update the HTTP/2 implementation to use the prioritization scheme defined in RFC 9218 rather than the one defined in RFC 7540. + 66602: not sending WINDOW_UPDATE when dataLength is ZERO on call SwallowedDataFramePayload. + 66627: Restore the documented behaviour of MessageBytes.getType() that it returns the type of the original content rather than reflecting the most recent conversion. + 66635: Correct certificate logging on start-up so it differentiates between keystore based keys/certificates and PEM file based keys/certificates and logs the relevant information for each. + Refactor blocking reads and writes for the NIO connector to remove code paths that could allow a notification from the Poller to be missed resuting in a timeout rather than the expected read or write. + Refactor waiting for an HTTP/2 stream or connection window update to handle spurious wake-ups during the wait. + Correct a regression introduced in 9.0.78 and use the correct constant when constructing the default value for the certificateKeystoreFile attribute of an SSLHostConfigCertificate instance. + Refactor HTTP/2 implementation to reduce pinning when using virtual threads. + Pass through ciphers referring to an OpenSSL profile, such as PROFILE=SYSTEM instead of producing an error trying to parse it. + 66841: Ensure that AsyncListener.onError() is called after an error during asynchronous processing with HTTP/2. + 66842: When using asynchronous I/O (the default for NIO and NIO2), include DATA frames when calculating the HTTP/2 overhead count to ensure that connections are not prematurely terminated. + Correct a race condition that could cause spurious RST messages to be sent after the response had been written to an HTTP/2 stream. * WebSocket + 66548: Expand the validation of the value of the Sec-Websocket-Key header in the HTTP upgrade request that initiates a WebSocket connection. The value is not decoded but it is checked for the correct length and that only valid characters from the base64 alphabet are used. + Improve handling of error conditions for the WebSocket server, particularly during Tomcat shutdown. + Correct a regression in the fix for 66574 that meant the WebSocket session could return false for onOpen() before the onClose() event had been completed. + 66681: Fix a NullPointerException when flushing batched messages with compression enabled using permessage-deflate. * Web applications + Documentation. Expand the security guidance to cover the embedded use case and add notes on the uses made of the java.io.tmpdir system property. + 66662: Documentation. Fix a typo in the name of the algorithms attribute in the configuration section for the Digest authentication value. + Documentation. Update documentation to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. * jdbc-pool + Fix the releaseIdleCounter does not increment when testAllIdle releases them. + Fix the ConnectionState state will be inconsistent with actual state on the connection when an exception occurs while writing. * Other + Update to Commons Daemon 1.3.4. + Improvements to French translations. + Update Checkstyle to 10.12.0. + Update the packaged version of the Apache Tomcat Native Library to 1.2.37 to pick up the Windows binaries built with with OpenSSL 1.1.1u. + Include the Windows specific binary distributions in the files uploaded to Maven Central. + Improvements to French translations. + Improvements to Japanese translations. + Update UnboundID to 6.0.9. + Update Checkstyle to 10.12.1. + Update BND to 6.4.1. + Update JSign to 5.0. + Correct properties for JSign dependency. + Align documentation for maxParameterCount to match hard-coded defaults. + Update NSIS to 3.0.9. + Update Checkstyle to 10.12.2. + Improvements to French translations. + Improvements to Japanese translations. + 66829: Fix quoting so users can use the _RUNJAVA environment variable as intended on Windows when the path to the Java executable contains spaces. + Update Tomcat Native to 1.2.38 to pick up Windows binaries built with OpenSSL 1.1.1v. + Improvements to Chinese translations. + Improvements to French translations. + Improvements to Japanese translations - Removed patch: * tomcat-9.0.75-CVE-2023-41080.patch + integrated in this version- Fixed CVEs: * CVE-2023-41080: Avoid protocol relative redirects in FORM authentication. (bsc#1214666) - Added patches: * tomcat-9.0.75-CVE-2023-41080.patch- Modified patch: * tomcat-9.0-osgi-build.patch + make it more robust to change in number of artifacts in bnd + do not enumerate jars, just take all jars from the aqute-bnd directory into the classpath- Require(pre) shadow because groupadd is needed early- Update to Tomcat 9.0.75. * See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(markt) * Fixes: + bsc#1211608, CVE-2023-28709 + bsc#1208513, CVE-2023-24998 (previous incomplete fix) - Remove patches: * tomcat-9.0-CVE-2021-30640.patch * tomcat-9.0-CVE-2021-33037.patch * tomcat-9.0-CVE-2021-41079.patch * tomcat-9.0-CVE-2022-23181.patch * tomcat-9.0-NPE-JNDIRealm.patch * tomcat-9.0-hardening_getResources.patch * tomcat-9.0.43-CVE-2021-43980.patch * tomcat-9.0.43-CVE-2022-42252.patch * tomcat-9.0.43-CVE-2022-45143.patch * tomcat-9.0.43-CVE-2023-24998.patch * tomcat-9.0.43-CVE-2023-28708.patch + integrated in this version * tomcat-9.0.43-java8compat.patch + problem with Java 8 compatibility solved in this version - Modified patch: * tomcat-9.0.31-secretRequired-default.patch - > tomcat-9.0.75-secretRequired-default.patch + rediffed to changed context * tomcat-9.0-javadoc.patch + drop integrated hunks * tomcat-9.0-osgi-build.patch + fix to work with current version - Added patch: * tomcat-9.0-jdt.patch + fix build against our ecj- Fixed CVEs: * CVE-2022-45143: JsonErrorReportValve: add escape for type, message or description (bsc#1206840) - Added patches: * tomcat-9.0.43-CVE-2022-45143.patch- Fixed CVEs: * CVE-2023-28708: tomcat: not including the secure attribute causes information disclosure (bsc#1209622) - Added patches: * tomcat-9.0.43-CVE-2023-28708.patch- Fixed CVEs: * CVE-2023-24998: tomcat,tomcat6: FileUpload DoS with excessive parts (bsc#1208513) - Added patches: * tomcat-9.0.43-CVE-2023-24998.patch- set logrotate for localhost.log, manager.log, host-manager.log and localhost_access_log.txt - use logrotate for catalina.out * update tomcat-serverxml-tool and spec to configure server.xml - Added patch: * tomcat-9.0-logrotate_everything.patch * tomcat-serverxml-tool.tar.gz - Removed: * tomcat-serverxml-tool-1.0.tar.gz- Use catalina.out for logging (bsc#1205647) - Added patches: * tomcat-9.0-fix_catalina.patch- Fixed CVEs: * CVE-2022-42252: reject invalid content-length requests. (bsc#1204918) - Added patches: * tomcat-9.0.43-CVE-2022-42252.patch- Fixed CVEs: * CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868) - Added patches: * tomcat-9.0.43-CVE-2021-43980.patch- Do not hardcode /usr/libexec but use %%_libexecdir during the build * Fixes for platforms, where /usr/libexec and %%_libexecdir are different- Fix bsc#1201081 by building with release=8 all files that can be built this way. The one file remaining, build it with source=8 and target=8 - Modified patch: * tomcat-9.0.43-java8compat.patch + Do not cast ByteBuffer to Buffer to call the Java 8 compatible methods. Build with release=8 instead- Security hardening. Deprecate getResources() and always return null. (bsc#1198136) - Added patch: tomcat-9.0-hardening_getResources.patch- Remove dependency on log4j/reload4j completely (bsc#1196137)- Do not build against the log4j12 packages, use the new reload4j- Fixed CVEs: * CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255) - Added patches: * tomcat-9.0-CVE-2022-23181.patch- remove instance units from post scripts, they can not be reloaded- Fix NPE in JNDIRealm, when userRoleAttribute is not set (bsc#1193569) - Added patch: * tomcat-9.0-NPE-JNDIRealm.patch- Modified patch: * tomcat-9.0-osgi-build.patch + account for biz.aQute.bnd.ant artifact in aqute-bnd >= 5.2.0- Fixed CVEs: * CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279) * CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278) - Added patches: * tomcat-9.0-CVE-2021-30640.patch * tomcat-9.0-CVE-2021-33037.patch- Fixed CVEs: * CVE-2021-41079: Validate incoming TLS packet (bsc#1190558) - Added patches: * tomcat-9.0-CVE-2021-41079.patch- Update to Tomcat 9.0.43. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.43_(markt) - Removed Patches because fixed upstream now: * tomcat-9.0-CVE-2021-25122.patch * tomcat-9.0-CVE-2021-25329.patch - Rebased patch: tomcat-9.0.39-java8compat.patch -> tomcat-9.0.43-java8compat.patch- Update to Tomcat 9.0.41. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.41_(markt)- Update to Tomcat 9.0.40. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.40_(markt) - Removed Patches because fixed upstream now: * tomcat-9.0-CVE-2020-17527.patch * tomcat-9.0-CVE-2021-24122.patch- Fixed CVEs: * CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) * CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909) - Added patches: * tomcat-9.0-CVE-2021-25122.patch * tomcat-9.0-CVE-2021-25329.patch- Log if file access is blocked due to symlinks: CVE-2021-24122 (bsc#1180947) - Added patch: * tomcat-9.0-CVE-2021-24122.patch- Update to Tomcat 9.0.39. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.39_(markt) - Rebased patches: * tomcat-9.0.38-java8compat.patch -> tomcat-9.0.39-java8compat.patch- Update to Tomcat 9.0.38. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.38_(markt) - Rebased patches: * tomcat-9.0.37-java8compat.patch -> tomcat-9.0.38-java8compat.patch - Removed tomcat-9.0-CVE-2020-13943.patch because that fix is upstream now- Update to Tomcat 9.0.37. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.37_(markt) - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) - Rebased patches: * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch -> tomcat-9.0.37-java8compat.patch- Fix HTTP/2 request header mix-up: CVE-2020-17527 (bsc#1179602) - Added patch: * tomcat-9.0-CVE-2020-17527.patch- Add source url for tomcat-serverxml-tool - Fix typo in tomcat-webapps %postun that caused /examples context to remain in server.xml when package was removed - Remove tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from package. They're not used anymore becuse of systemd (bsc#1178396)- Fix tomcat-servlet-4_0-api package alternatives to use /usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar. Keep /usr/share/java/tomcat-servlet.jar symlink for compatibility. (bsc#1092163) - Change default file ownership in tomcat-webapps from tomcat:tomcat to root:tomcat- Fix CVE-2020-13943 (bsc#1177582) - Added patch: * tomcat-9.0-CVE-2020-13943.patch - Change /usr/lib/tomcat to /usr/libexec/tomcat in startup scripts (bsc#1177601)- Replace old specfile constructs. Remove support for SUSE 11.x. - Drop %systemd_requires, which is considered a no-op. - Trim redundant license mention from description. - Make documentation noarch. - Do not suppress errors from useradd.- Avoid hardcoding /usr/lib as libexecdir- Don't give write permissions for the tomcat group on files and directories where it's not needed (bsc#1172562) - Change tomcat.pid location from /var/run to /run (bsc#1173103) - Use the /sbin/nologin shell when creating the tomcat user - Use %tmpfiles_create macro in %post instead of calling systemd-tmpfiles directly- Update to Tomcat 9.0.36. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.36_(markt) - Fixed CVEs: CVE-2020-11996 (bsc#1173389)- Update to Tomcat 9.0.35. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) - Fixed CVEs: - CVE-2020-9484 (bsc#1171928) - Rebased patches: * tomcat-9.0-javadoc.patch * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch- Update to Tomcat 9.0.34. See changelog at https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.34_(markt) - Notable changes: * Add support for default values when using ${...} property replacement in configuration files. Based on a pull request provided by Bernd Bohmann. * When configuring an HTTP Connector, warn if the encoding specified for URIEncoding is not a superset of US-ASCII as required by RFC 7230. * Replace the system property org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the Connector attribute encodedSolidusHandling that adds an additional option to pass the %2f sequence through to the application without decoding it in addition to rejecting such sequences and decoding such sequences.- Update to Tomcat 9.0.33. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.33_(markt) - Notable fix: corrected a regression in the improvements to HTTP header parsing (bsc#1167438) - Rebased patches: * tomcat-9.0-javadoc.patch * tomcat-9.0-osgi-build.patch * tomcat-9.0.31-java8compat.patch- Change default value of AJP connector secretRequired to false - Added patch: * tomcat-9.0.31-secretRequired-default.patch- Update to Tomcat 9.0.31. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt) - Fixed CVEs: * CVE-2019-17569 (bsc#1164825) * CVE-2020-1935 (bsc#1164860) * CVE-2020-1938 (bsc#1164692) - Modified patch * tomcat-9.0.30-java8compat.patch - > tomcat-9.0.31-java8compat.patch + Adapt to changed context- Modified patch: * tomcat-9.0.30-java8compat.patch + add missing casts (bsc#1162081)- Change back the build to build with any Java >= 1.8 - Added patch: * tomcat-9.0.30-java8compat.patch + Cast java.nio.ByteBuffer and java.nio.CharBuffer to java.nio.Buffer in order to avoid calling Java 9+ APIs (functions with co-variant return types) - Renamed patch: * tomcat-9.0-disable-osgi-build.patch - > tomcat-9.0-osgi-build.patch + Do not disable, but fix OSGi build since we have now aqute-bnd- Change build to always use Java 1.8 (bsc#1161025).- Update to Tomcat 9.0.30. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt) - Fixed CVEs: - CVE-2019-0221 (bsc#1136085) - CVE-2019-10072 (bsc#1139924) - CVE-2019-12418 (bsc#1159723) - CVE-2019-17563 (bsc#1159729) - Removed patch: * tomcat-9.0-JDTCompiler-java.patch + It was not applied- Update to Tomcat 9.0.27. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.27_(markt) - Uset aqute-bnd to generate OSGi manifest, since we have that package now in openSUSE:Factory - Removed patch: * tomcat-9.0-disable-osgi-build.patch + not needed- Add maven pom files for tomcat-jni and tomcat-jaspic-api- Distribute the pom file also for tomcat-util-scan artifact- Build against compatibility log4j12 package- Adapt to the new ecj directory layout- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini- Update to Tomcat 9.0.20. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt) - increase maximum number of threads and open files for tomcat (bsc#1111966)- Update to Tomcat 9.0.19. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.19_(markt) Notable packaging changes: - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed. The classes contained in this jar were merged into /usr/share/java/tomcat/catalina.jar. - Fixed CVEs: - CVE-2019-0199 (bsc#1131055) - Rebased patch: - tomcat-9.0-JDTCompiler-java.patch - tomcat-9.0-javadoc.patch- Build classpath directly with the geronimo jars instead of with symlinks to them- Don't overwrite changes made to server.xml contexts when updating bundled webapps.- Set javac target to 1.8 when building docs samples and serverxmltool- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps (bsc#1092341). Affected packages: - tomcat-webapps - tomcat-admin-webapps - tomcat-docs-webapp - Remove %doc directive from tomcat-docs-webapps files section so that zypper installs files even if rpm.install.excludedocs is set to yes.- Require Java 1.8 or later (bsc#1123407)- Clean up OSGi manifest injection - Put embed maven metadata into embed subpackage - Use the .mfiles* lists generated by %%add_maven_depmap macro- Fix tomcat-tool-wrapper classpath error (bsc#1120745)- Fix tomcat-digest classpath error (bsc#1120745)- Update to Tomcat 9.0.14. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)- Add pom files for tomcat-jdbc and tomcat-dbcp - Add org.eclipse.jetty.orbit* aliases to correspondant artifacts- Update to Tomcat 9.0.13. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)- Update to Tomcat 9.0.12. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt) - Fixed CVEs: - CVE-2018-11784 (bsc#1110850) - Rebased patches: - tomcat-9.0-disable-osgi-build.patch - tomcat-9.0-javadoc.patch - tomcat-9.0-sle.catalina.policy.patch - tomcat-9.0-tomcat-users-webapp.patch- Declare following files to config(noreplace) to prevent override access rights: - host-manager/META-INF/context.xml - manager/META-INF/context.xml- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's configuration during update (bsc#1067720)- Update to Tomcat 9.0.10. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt) - Fixed CVEs: - CVE-2018-1336 (bsc#1102400) - CVE-2018-8014 (bsc#1093697) - CVE-2018-8034 (bsc#1102379) - CVE-2018-8037 (bsc#1102410) - Rebased patch tomcat-9.0-JDTCompiler-java.patch - Added patch tomcat-9.0-disable-osgi-build.patch to disable adding OSGi metadata to JAR files- Update to Tomcat 9.0.5. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)- Modified patch: * tomcat-9.0-javadoc.patch + Don't append to javadoc --add-modules since we are building with source=8 + Avoid accessing Internet URLs from build environment- Update to Tomcat 9.0.2: * Major update for tomcat8 from tomcat9 * For full changelog please read upstream changes at: + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html * Rename all tomcat-8.0-* files to tomcat-9.0-* - Changed patches: * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch * Deleted: tomcat-8.0-sle.catalina.policy.patch * Deleted: tomcat-8.0-tomcat-users-webapp.patch * Deleted: tomcat-8.0.33-JDTCompiler-java.patch * Deleted: tomcat-8.0.44-javadoc.patch * Deleted: tomcat-8.0.9-property-build.windows.patch * Added: tomcat-9.0-JDTCompiler-java.patch * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch * Added: tomcat-9.0-javadoc.patch * Added: tomcat-9.0-sle.catalina.policy.patch * Added: tomcat-9.0-tomcat-users-webapp.patch - Renamed subpackage tomcat-3_1-api to tomcat-4_0-api to reflect the new Servlet API version. - Commented out JAVA_HOME in /etc/tomcat/tomcat.conf - Added "tomcat-" prefix to lib symlinks under /usr/share/java to avoid file conflicts with servletapi5 and geronimo-specs - Fixed wrong %ghost file paths for alternatives symlinks- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Build with JDK 8 to fix runtime errors when running with JDK 7 and 8 - Fix tomcat-digest classpath error (bsc#977410) - Fix packaged /etc/alternatives symlinks for api libs that caused rpm -V to report link mismatch (bsc#1019016)- update to 8.0.47 http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVE: - CVE-2017-12617 - rebase tomcat-8.0-sle.catalina.policy.patch- Added patch: * tomcat-8.0.44-javadoc.patch - generate documentation with the same source level as class files - fixes build with jdk9- Version update to 8.0.44: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVE: - CVE-2017-5664 (bsc#1042910)- New build dependency: javapackages-local- Version update to 8.0.43: * Another bugfix release, for full details see: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Fixed CVEs: - CVE-2017-5647 (bnc#1033448) - CVE-2017-5648 (bnc#1033447) - CVE-2016-8745 - Renamed and rebased patches: * tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch - Enable optional setenv.sh script. See section "(3.4) Using the "setenv" script (optional, recommended)" in http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt (bnc#1002662) - Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412). Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api, tomcat-servlet-3_0-api- update to 8.0.39: (boo#1003911) * Improve handling of I/O errors with async processing * Fail earlier on invalid HTTP request - includes changes from 8.0.38: * Refactoring the non-container thread Async complete()/dispatch() handling to remove the possibility of deadlock * Improved UTF-8 handling for the RewriteValve - includes changes from 8.0.37: * Treat paths used to obtain a request dispatcher as encoded (configurable) * Various jdbc-pool fixes - drop tomcat-8.0.36-jar-scanner-loop.patch, upstream- Switch to commons-dbcp2 fate#321029- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862) Added: tomcat-8.0.36-jar-scanner-loop.patch- Version update to 8.0.36: * Another bugfix release for the 8.0 series. Full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt) - CVE fixed by the version update: - CVE-2016-3092 (bnc#986359) - Fixed a deployment error in the examples webapp by changing the context.xml format to the new one introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources- fix maven fragments paths to build in multiple distribution versions- Version update to 8.0.33: * Another bugfix release for 8.0 series, full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt) - Rebase tomcat-8.0-tomcat-users-webapp.patch - Rebase tomcat-7.0.53-JDTCompiler-java.patch to tomcat-8.0.33-JDTCompiler-java.patch- Fix fixme for the prereq preamble value - It seems systemd prints error on adding the @ services to macros so do not do that- package was partly merged with the scripts used in the Fedora distribution - support running multiple tomcat instances on the same server (fate#317783) - add catalina-jmx-remote.jar (fate#318403) - remove sysvinit support: systemd is required- update changes file for CVE information - Fixed CVEs: - CVE-2015-5346 (bnc#967814) in 8.0.32 - CVE-2015-5351 (bnc#967812) in 8.0.32 - CVE-2016-0706 (bnc#967815) in 8.0.32 - CVE-2016-0714 (bnc#967964) in 8.0.32 - CVE-2016-0763 (bnc#967966) in 8.0.32 - CVE-2015-5345 (bnc#967965) in 8.0.30 - CVE-2015-5174 (bnc#967967) in 8.0.27- Version update to 8.0.32: * Another bugfix release for 8.0 series, full details: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt) - Rebase patch: * tomcat-8.0.9-property-build.windows.patch- update to Tomcat 8.0.28 * Multiple fixes, read upstream changelog at: https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)- Some whitespace cleanups- Remove pointless conflicts on provide/obsolete symbols- Version bump to 8.0.23 fate#318913: * Multiple testfixes all around, read upstream changelog at: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)- Fix previous commit. Fix one rpmlint warning- Drop gpg verification from spec, it is done by obs- Fix build with new jpackage-tools- update to Tomcat 8.0.18: * Major update for tomcat8 from tomcat7 * For full changelog please read upstream changes at: + http://tomcat.apache.org/tomcat-8.0-doc/changelog.html * Rename all tomcat-7.0-* files to tomcat-8.0-* * Update keyring file - Update windows patch to apply again: * Deleted: tomcat-7.0.52-property-build.windows.patch * Added: tomcat-8.0.9-property-build.windows.patch * Added:tomcat-8.0-tomcat-users-webapp.patch * Deleted: tomcat-7.0-tomcat-users-webapp.patch * Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch * Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch- Version 1.1.30 or higher is required for APR listener (bnc#914725)/bin/sh/bin/shservlettomcat-servlet-3_0-apitomcat-servlet-3_1-apih04-ch1b 1697445433 9.0.829.0.829.0.829.0.829.0.824.09.0.82-150200.46.19.0.82-150200.46.14.0servletservlet.jartomcat-servlet-4.0-api.jartomcat-servlet-api.jartomcat-servlet.jartomcat-servlet-4_0-apiLICENSEtomcat-servlet-api.xmlJPP-tomcat-servlet-api.pom/etc/alternatives//usr/share/java//usr/share/licenses//usr/share/licenses/tomcat-servlet-4_0-api//usr/share/maven-metadata//usr/share/maven-poms/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30729/SUSE_SLE-15-SP2_Update/1f5b6e9de4003dbcae3fc0bc675fba51-tomcat.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/tomcat-9.0.82-150200.46.1.x86_64/etc/alternatives/servlet' (No such file or directory)gzip ERROR: Stdin has more than one entry--rest ignored (Zip archive data, at least v2.0 to extract Java archive data (JAR))directoryASCII textXML 1.0 document, ASCII textPPPPPRR$WY,qN&Y?/a} a̒2ȃv鹰qVW[O,cֽH H֙an0kȠ1Q7ͮ4݁oR%rO;09#AQd?Ax,:oa ŞQ9یE%#iN#%DmXC#Tb)F%4_lvkH Z8S f B38㪧TNpFPS}VSXhsCs9_1)2 {)$v66F jq=Z$ݷ}G T8W`ވ#~ѩu@h$v#~lrS'oI4~U9Hn`ͬ B=: "&U#!,`IRFΣ'BnuOus/!yp{=S5I;: z{BʁF(HR eCp6if&nry_Ѧ8Hd# c1 ጚTHo3 H9<tCiZ;3=M\,:vU"f-*8*^{6an.~y]j7P}aWOJg6 ϯx{bP" 4 SfTX)d{DI&g:~0xq̓QӺD#"w'.DW&T$" Ӟ"X lAcy3h*B6$*DCvCDOkrRA' +]+ak}h Pq4˪z :?"t&)}|\<`r_'V3:,zo ɏc B}>+W= ԗYzڴ+#$CWj? ?Gdq?-`yGGw&#FdpidĦpo<IJl57iQjDz܀@yB-ci֚[%+*QϋVG⩆Xv!7#&">Btwzh7V( ݀?#h%ApĦ`}}&F%, 0”٬glɇM:/w<7o8濧|*\E]㊷C<c6BVA5wۈ(2Rh3MK\B0oJ5uqX0Z-A࿢JBhO}O繩A{ĞLkX:ƪxK~&ȼa Ϙ+*grf;J=O!9pmr5tr>L! X {^ҕFILpᖏW}Մf`k,"͵D,&JhE*D~τ>6Sn2B {_՚F̈'Pot>MA{,L3ְz%HgBJ__`Z b(Q`9+!϶Ѝ2%$D*B]3վ2jD:a3li8 /t*U{AWSQH+<#N,TMN ϪI C_/ dYw|HyR5ȤZxis7k t`o-oduk153|~ .0Ɠ0{٢/ J Al1Y z'_hcz\w=Flm;9=)=" ]"5d@^ǝV8p RRPuB,qEfsHͧQ #"G ;d3a5 Z^WfCٮ&l,lL/k O 7fu12{EֶGy˂rG/jwn%,u+spOuǶwVW4_&tx!>+.sWcd:ɒ[/TC}wl8|ld=͙؂M*c W㵌Ɉ >4J z^S)ŞIv1kr DN'Ed%oH#eȗ_O%x%y_da^;Y(I͵{ެ =z0?tpUj~#ud3L;bR>&Il?#ʴ!=~r.j3ux-QwRf8q{i6?[ɷkr^ zY)bwx " ]"2PRLۆ2Xv%n8ӭZ/$k0S낃)|^% 0^)QsS铬 ^}b:@"H&hD_:t̽lޚ΀ϼ&~B;>|`E[ M0Q}3+!e1JIzS5}#{N=OQv,G!\ A=s9sEoX(lbfYsK]lW&xp޴{kLR|(n4TCՑEuV+Mtқ/d;l%KO؀ΪaB+U<]"Jf/ӚGNQ,L,ׯeyw/L (e4!e;DBG(1zCQะ`?O &u=]5S,  ?DU~eZV-5]Ϗ=@PZQou&*%XWKe;r,Tn$*5_TRոZn5)& vt,&EVo3{gV퓍^Hh nSL19L܊@d[@Y6 ^Ӄ<9 f͙l uZ炜<4W$m <^Bs}1_-fQoBF^@{M6`?tPd+i3CM=C=%,:/akԠ= iT[Q/kH1W¼zV@=t?E#ITJSaJɡWI=N(hlMψ)U ^6ih<#z " _xڛͱ\~؆ṕXgpYbbMXwbeHKUb]y/ӥ2U.@ƟHD?nA[Mڂx5K8/I/٠32͸4IP?iA2/J7L,Sg]QDV/c;u}ģG= oMjAB!{ZN/tNJT:>i0h.ߧD%B> OS 6)#˒b ޹ؼ'3wsNXX8dnU] y%1߬[)Hc3N:Z;MDqIRQ/nNOV,T:hK/U$6t6|.ss?djF h_TeGU;j*񅅑a #]^O-GVGX)R]lhL UgL7e$n@/ f3uq_Ä́@ڿ{zP"cv!̶t ؜>YQ#b.j9h7ESBA'eaB8r~UΓ)Y9KKY@Ɖǃ,vJx+y&;1#hWVR1e.'gW$53&b\fMcc>dNK1X\vLcפ (ZhxڢkܯN<PfWAMfΫlHmWo0hw;-oU)?4UL.= u+T $,L&_+ýdIYa IU3]}wMVCSU`6)|UDB<~@!jT!Zﻶ+L_ѱ4F_t >FyhyL@2+k7+XSp'NJ'!-Pi]TQ❤((tGa#&\Eʈ}VX qxk\l4FiZ/NiM"\ y@"QCK/d-K: #ZgrCqDb3GN%sWy9ɊjKG]A΍V:bSR5Vfn0.Qrd5LTqЊ2\'j{ڊqS4Uvxg~0o >ݶ4'䫏]c Kĩ28 i51XlNYz$;6u8kZ6c];kʍb1/@1fy&Ҥx @;U >jsyL1(r8N,Dֿ b%֐[Zon}بCd",Y J'ۄbĬF(8<( R;[ B,αFf.WqTD:68 hEA-~ĺss}?f-V\»\2܆ 7Gt] S0ʹL?Tpʣ/C Vex&^ZPEÉ5bIT19~ "Fװjo[@W10W-A|o8fh!Q/vl6僗6}ߜAЭ:_y;VOD6-S*j7a%*#=P=pF}FAbY`krnUjL0 Rq{E̴Y3+{ZHoER*Ta5i11HuYݤ>p*cXgꕬ~G _o*l 9b5b}O~eݣK=~>DX5hzŦ/?37wGjwUap_(ߣd(u'9KY`hpwu4O=+'?Ekk&w#/z9K9t ݑd{pi!Qc}J7 1+,lX\ ~J*IN.ldfMr+M@{n<%( . \zbg$Bb '<3rd=2^Z 9lSy"QR"!G;hC}!P/öz\IJo>$ErBUXPwZ: v#)[1판яU TvaU/9F0D"1 W#aM#A8 eP˪O6Ԍ{PhjhoAϬEiwb'/N/ v14:4X`+^~l8ڔ|ׁJ9~Ba%n Aem+M LMhj<^#u ɧxx&pl_7|yIyZfu=[ q5q O4jSU6:$, ,{AU؝z% p`p}@R FR8)?odQDs ];c0x]\ghf/1n0q 87X Nm=o^LTH ,XIo H\!qDqe[+(߁K rM|"7ƽbjA@dM&*`f&`#\£>*x ]Fd`ᕋkuC0qD1Vn=uE?’"3q( `[1$:5CR٘AYۏ̀V]Jkm "DGy&Y9.(o{L 9YeJ>14hz gɕur{pU檆LߞvUI \|0W4JdKO_W/+3sw3+t6?Td|,.K:C}!  t㓣/2Vl"*%U5m%FS?'VG_=X5V?wd$H&hҾPm آ(i,łR "ϹƂ_āQQ*5XR.u2 jCx Y.~L Yܚ(&oPnTrEY\`LH7ڸ1ͽ|/*?a`A[Ji a?`&hD%Z˧eng*t;`l5qzc`'1<.\pb'L[ Z5¬*~z\Ju&d8Нs + ߭T@ Hvb9 Q~QOC!ј:}LDl.ioAX4ʰ*{ Ds0Q=JLZZ:bG?HS$|+ )% WDZ~Ka)C< 0a3͛}x$1FWi7\7!Gd@b~i`|ty-ݓb*z&(5KɝI\K7cCX~Ꮼޯhz][5޷.Th\b̷(.& F[;F8N բ J)71P1LG}]gXFnE@+P<]ujh.?I0넡pԒlF%@3sDX'{s9p% R*jrI3Ki1VߜlG0ɛ#zByDׄ9R5 c4gĈWs( J v9Ӽshuo7$T 5.kdSsqĪ%_tC 2at[_1'[4{8IAf=9h܎&)]w( @+% j5C3Lzf4uT*y F?ʐ"Csͯ.e̒.o@nA#$(y_6WG6?)zK-meD+F"P"ȊCw;1rrrMJ&Pi55\ s{x*LO#R՚+ %l'9rw1,BCx Nd[_3'p@4(#G&g!{UnvE08R۽:pK{y(RV 7>"qK{b==wM^-4$=Ulmv2}?Vs)gD6ܺm>O.gP s` /&mJO!{uP~yZyȠQF%Kve|Dʎ&C/jc2QetWV(|rI8ߣxeg(ZwSޭ΂"ߋ͑{Pluh$u(쏺(8u~]7*]zφ[T<2?>}KFkf1I)0mC8tJS^>Kz+G\q.*Y8yEB|-%*: 3F%~"Pf@L@%w$*s<<%2;/2DFyEG#O-iyMf͡}^"J)f営72_ ߿СaN 7oU9sQ8͹BzFe/xll)y  5x%1΋·!V ;,ò9 +֢^X(Vk? H!4l>̶#{sSٰ׃$LZqBz2 );ɡW8j-.#![K{λ "f̾' {M@խK 1#k!];: 7["!~N5ҽ2mvgCi0?okȮ0XSKd^Xb0evw*?eE͔9aISKigzjԶ&>72p"1%/ܕlZØ\TDSNSdDp^:I>kx&Wr۪ձ,Ȏ cG!"&~s(:\I}FR :$/P覞ivIt4oBi(*5`.`*W Z܂OM3FPX#ndCqg, ]I3tK6V粳rh/gPFPo7hrIQR2ͼpg˜dц` D c،=Fk0cPB??f ‚f%-A*ZQĀeh8j 3AU(!V,9;d@&&Cs5hBp_r،W?b3Pr%mJd5SV.bIz,N$~o'EϢ;cL2}r~:*斫߂EOP xU|8b}WCkFIx5kO, ER4^Q=*[{ Kܸ⣕KL8s}=+}8@7C^q1N q^"M ]-Hd̩*E=,MYq[PWW%~ꥺ7+Ϗ5RKM3x sCΡYT]d(؏i)'vc0U,Bʖ@ߩ8έZsTz %:Rm'|FZs3D MM$ɖOCϖEoTAB$0N1ysN9{sV<TseZO? gE).elvDŽY )9m2OJ!i(4I$&5uW?G뢷zdCw6,~f F5/HMʘ*A#[_hqu#|_L"i+?HtHtw;S jݍmQZ*x]h7 ]m'#g,ÞVv`MV{ǍY&wHf67;p鍁 DP.a[^2UA4 Q2As'-(2|ʧ,&;f5"m8:FJF9\TL1O,? ,{f\7 sUC@vG3.$J5q?~U.Kd?A#yh3)ǝ٪Yׁ1_Y*|c(S.qU\'9I sN&*ζL'C=,GR9^ncTh,2WK:{Mxecs Ͱ0r&&Cc,ȹrKn%0BhO>ۈ{Pu![Q^RTx-eN^ffϭfMP!`d Ŏ>SG7PsU"8>aƸ3t?`<3{VLaMЧǹd hy ~_ZR'n{t n"׆#w|f1YaѺŵ_:cm %!A=(Is/Ѿ3 Du=xϺ}Kd<="~wieGIIؠ7x212'Pɖc3Ff>cE+;9pfq '2'qT_-,) ErmlƢ”Џ--t8B٢ovm%k$4?7Rnt+z+v1ݦ~{}JJ_^7\%IDjɨATN%k,p+Mܰ8 LWŪ*׵fѬy*IUt]s698IHbGZS\WQ=q_ yOh^&*r9Bky3W4#dƄ fQckk~UFph-p~|b8kS>V=Ac?(&lxw@t5҃NXyI qze}eJȥD.p],izE)k^]cvm8mJڿk5Uch"m--Ѓ9۠3=q熸&5m4V?$O?- f%[7.phn'y 7l#ɿyTόa,1ق>5A(&,T ;2,ȱL5lT| s*Aw߰JJ3yӓk'h'T *pk`?OǼm@~@bA3fEdL`Cr lv]UY- %&PT `٣&]-m~A"\KU޹q !_\ErOohGOYvX(bTӴ(aķ]U*C(UU9[`-EV9%K2VaHATDfzFJ`I%UI"6˛Js[΂<9wZcFWVrQoͱXUd1άYw NHe->ş\\D9Nno!Y0O-.R،Vva 2#5twǎ=DdE/k}Ǒ΋Xi VplS̳S n4{SEzQIKᤌ oo9$w5oRà)Bs]%2%;"=Xf4=S?ԶߜͣF(Dw 2֓EG>B?pJ{YWL\B!#һ[Dx6ܧ4mXaC8|<_~jFΗ ZˎenvyM '^Ix,~bx8yX](3|Lt&@koPֳ((tJ¹o`Sdi9dK79_Q15@g?)ƄMBqh?wOqİ}[/fJ߼jl1rzγ<m}]Sif!A4kihB]Ѡ#7"YC] YU]"x3X |J1 eOΊ%% n [fE.ӿo؈O5 b:v[%k. =ұuzy 1ko/bֱtF\ɵ\x|}zo] ݞ؛PM&;pS|h:]"etr68i6[؋hxhcKl00s5M>N(7T2S5 JL ͥ.7#.)&jDxX? 9Kmi,ݏ \@eQ`/ 4NlK5_ [FiHpMvR)사G֣xw1x n\ҋDs/]Z-4 ۍ' p 4fgҙE-6-(snoLH=QqqŦ,u}Ӈx 6Pr@@&b(+::d ('hϛuBcnfzb/{Iscs4kgcTg kHm0, DWMdoU TkSGEc@o&IOYSJYMkKS(hJ?t DŃh&]`#{x4#eK%xMsDӫrp ;y .3;VlMϦFuSɋ9V !7rϒ=,0<ދ17`7|!ЃM;&NX'iQ0o1.kDz@4$s̵tyw:']dsaw nSk&;GgȺo곓YGdy_z`j']CУ~0N3߸(+mmE.Gm\! ۸g< (h0r$SubȡpAp!ʳXcyu vP /o{9fo,ֶGGQ2٭j ;F'6B: nhe^Sp/ۄ`oj Kp\0jU+=vD'p\158ɻXw )h׸T2yHlft >PΘ[l./"y`E)Eb5 Z62xWrVIU ;{u~7n8hC4ӱPʹ;{mY;',_e.lf.RI\UoZo?$<P.nU85X ^{4M޻Tu֍ǹ= 6+2omt(sKAt/wBZSn*l+I>?v;&" j3 wǩM _@)u\(>h tu6@+**R?ScP$FJ;oe%5k} r^TEzD qNckAfoxӨMF#EyJԂ Q40țc/2I;>% f|KubA`Qhe/6FsT5xnoQ* rժ$<&j~ @9\bY5nj -w$@LH\:|L R[RsԲ]?̫dC XJT%KͪQ[O8n \[ , s;4%G4潊1GDj DJdQW2WY)XiyfA_ۿī4PvcB}&2b2) _GNih&eV9D43a>Z|o0|nC@Y0&@ S,?0S<g+&vv:h[lV៉6}n\\,HվGˇxuAp➲z`8_ $Q\9@|U3fsX["ie0Is}hvKqN$_MЭzJ`nۃ &]e%<>f kFgX`ɇM.R O>3ԏQ?{ߤM!dzl$-EP/1 ɍ+@q7;i =RW)-\_~ήl'`UhGRug`rqJ0ބCq{8иh0h!17^)$ŘȤ3!,75t~De'K[ 3) q5bDѪ_ >IjX8:!=B,Hl\ !M Uٹ6K11!gJ" _42hJ9,lK>:DzL{|6;0׆'Zz:y]heH 43Sa hW:?6^RKL%_Cl]),g7s8q]XxĦkݻJRK Rm_~r,īX.q3 Hnכn{'#Y2vJQ *%\)Fm( :ݙ_"T@ _f3$RCT.:!]yIG7F?껇.ٛ<l{ ®V@l4/봉B0!EHWf =tEz<ʠo|~a ߳UsuyKfg4:XIza^ D}ϘtTz =]f??-g˓`m[_ cU/ɃY-#y'.P"͊. o|0E 6XoM;d-=T1BEQEҼ%SO4#_ #cga/̢w]@\3nG,{]e޷̛{aW fFe z& h(Y5FbMPGO,?np_!_ԫTu.S#s |6VG:Spp* Z*n7@{iuJ7 345>Cu@P im/E|`S?FEq'?\+sv2qj\}U ~ \4[rNfc7p%1/W^̣ͅ|qJ9uzR@lRk6*CyYt=]'}oǖFo7Өb顣 铆[lGCTjm̮}V~x^n>%%;d]irbLP_B50tjHTҚ̔-uXp+L:TGhVN`G#P`xe\~>y({? /@;g *>^ tOQ`̧. d2򤺃e߲Zo+!vM4P G̃Drb]M!;knNU%I1XIFx}>@jv^'Nn%Ngg7b}}OKm&uN6[^4e5ezÙP n=|LM4#djb^X=׻vO8ǔ~vbXO1.}eV2:Wwb.4R/MCPJz=Sa͋+ғcƥlJl* ]QPMۊ6n z[|@^uuprko(%ȶ+D05&k͎jp;)VYWyy*ˣp6RU[P S1s6p_hc}fL |)]zGY 'ОvC懫q4՟88-8Ar_ړB5Aİ |vwNܧc$KNxZl:(mOkKOVT'*V"% >ꭂF0: ݉ ֩Kj.m-ZdJ"L+n4?**803'BΧ~S̳ -Xe0?uå2& 3)ey=qo(E]n\*1кղ(d]._gem7S17s+ϽҒ}w(Vlqd:yV 7C#$&9nm\? f}ȱ;O]c ȍ6zbRK*y2hVy-ORSJP@:=;iviFaXws_e>+Akp5Kـ^*$3ED(/1l\2A;ShC Ŀ$f窇nyD꩒t/) 6T?+2.>6'EװՁkS6n-|nqMiLLϐ"aQQMy tWsQLĸhJВYKsѴMu .ؠtkQ40%L5{qS&qaQ\ u^2j01q=wmr^|~ײ ygƖؐTY*9 T:gn6 x JX.udzN=H+ B{$lj 2 nۡYJ/y.o}/7_E UrNah.y)͸#,SRߜ1s/4+(QH n)93G9 )cg.48l88jF@px: go@wyv! [&*J qtE1|{7`~KS⬤{cxp;8`C5 bz_"I bYӂMxKхc93_[O䚁'NF(F#:w3'E:`?wȨY=p)0ODw'ŠFv~XDm:-eJe+|Ջ+8XߟO]awCap_ !1JM_4i"M b(Bs. 3=_wGj%بC%ÈR7v|&;L"OG\]n0?0s4*/~bo5Зuu)ڀ#{23J.I#Г,#6YT~[ÊPA)gJwA$ِʳ?[v GYkĂ(V.\éf@JDMPD钰35עnoEݸs K*TT#jtę> U_<6pUF`};3@]- C/)-lYPe&e:\iCX| PUtSLhT)lR:F:3ü[+͔YB[;VOMLP>zYʬڑpWˣnYu*1U0nU 1邽[S%V~T}Η\lܬ#=ݴ/E 94T|,Sp(C#@s-(@Kqzti:KO>Z?+FJB}8Vj6b m,( #'H=ξ"8@45Z){KR[eu43G(cqXvാD僠]lF%gvEui,O!52trRf1J:9}]QT s *+-" w^JqVYVBlWo DŽfU evty dM2x;IqgVK|lF3h2Afm:bmUz0q3l珇 y߬.eH(+^J͉vAXcUXvݩ9/wItkt&hYw[phk<gzsXO>Su1;xzh+1Jb!Bw0INMUN4h3ٶVHM[e<]T5kSf o @%Oa)e'㜿T  sYM 4 [6IdΞ{1%wȓOXMOug6)8;))ħNcuf赌v[{థK?fg '?}k!}HxJR؞XptWE=ֽ EpIȋtgMci'\Lc#^ U6TڢB:l1v׸XUnӳ7"oa@_ CltimJgsRjd'8vESqW8u4?QSOx'&[ue|MƤ*j^R/$|4И੬_,1ǩ5]΀>Y\xTA]#w+5p(<V3Y1ŹeqE ] @ݔ26GWQ(ecF،M9gy+4РѣUWӱ*VS0Yb +Bκ~"q? _?vf776bd"f;>" _0MЗUyk)n|OQbK9'p f7i'5 yT͚^ĬǑ.mfن|"+rh0hObb!J|G ; QvZ!^?{PE0R/E 7~]:[s)qCȘ}WrQ |U+s ;}i+4vKATvdGt7j3 qnliK1.;Z'4PҳYPTm?z]uC4t2sq*2"foh8f}/ d{'Mkd[bhۻ6C\"?,c#p6]:,;#^1H| iZq*(W L>XDDA!mto.7*C`.ӭoNB4%w|1}%%dɾ[O3 LlD>oR] LlCPl4̴ ܽl{']'P p9u (G5q3̃׶9m\]=)k>dNLZ}%(#i?.^o`Ȉ6P 8j#tx7 zfЬ +3;{xbe^ I@dg[1Vf(2trI2 lٕDA!x`u|ȑ;eT \ ukԁ{]1jr{JtAj)+{ Bvcev<\Nq6w٠v5M}+fPE~׷tC:m1&?2Gۨ..I~2NC$kʸvLuUo 5YʄUo8Z?0v1gG@y PdABF˙\Sl&1o #5FҊ# [e `uorKC;]n܁zBSڭJpt5mqO?i0 >cQ\ʾ84Uc)  /&[e֒*ar英bZ5S%#>*VgN=Fw`7 uj[M8e0GӈJ.5d?ģxcVC+06+5(s-x1z_%*c/~#_Ψov6q}6m=ͧQnRv@Y&@ϺR)Q3l'yК9B^ͩ]dh֩+W*`8p g>24wyWJP/`FP iy_AOom=d)%&znLiV- Lj0Xہ 3[=Ȃ!xn#[AofVc 3.SW n ƽ{oirE~\JCc?P[Y%> C$"(Sն+n nȽ#seY(/5 4?7L7ב+U5yK4}ӠexXu{>}$+a7#J Us;.Pggࣞt[0L(|i ~ka"B=/S8z{g}g\} wM z͙FQ_L_yz9u(&xW3 P[xhEZTg;`"b ^gϐ27q NMtIs5M-r9E?I7:m7e F%2bCu]-W',V{fZ]݂}-PzmEG\Lֱs-`# Oz>}fzڧz &:[r a#V2e v"1E#tC~NzgC t:0P7t}t O<3aK$2v7̽Ltf+:ʋY ,?|75yoss%";ohj]ל#on $ ÑP :w>d11TbX7͕ NHtlڻ4?DURB7cD]!m7fBē!F #yolʪc{qC8{2d鰖n@7|XI`I r6Lgv2BJ kc[S?s3{FgB}PTٵ ۶`=zQê6YfjňKܧ^[MB{_\xdEƸޢ'2Gll? ښ(+^| HZ{̨}z Ӓ.Ӧ2p2 [pYyqrH@D5= .{5ĮnO<+E[xIw>b;ɤzmOk|}hj @ꪢs/rMI}^%5K_wɫwOz(":&`ZvgdYoI:.FUb9up|9To ~ϸ׶F2s 7LOE)Q2`.=$70JR(/.P[Y/9?BU+h[7Sk@#a2BRvq8z; ?5I4[>7ޘm=S{5ZEИBz-|N\}b_9 U2^7Ыq˛\gSH&{o|8lZ8\(L4ʅsA0oӳE~酦sr8m/4b9[Cg7^'g+nl%aq4Escۻ̄ГձQU/gN3hz.^- WCѫ&|A2z˵LDq O 2PTƬ<>`ڍvCȿ)M^pe #kwg`V|Bx)Pjq dX\ݻDݙV\Aפ.Y"fWn,F{JVuxa 6M{$eQ-+oak#p 713ѳp~닢bmRjҴk "|e:Ų@Gf7Ū$߉xȎqU   qUË+ydp7lq0#R9j p a*+6htyW-023elcp@Ef݀K2u QAlԩM (k+K=JhM' 4]XfBB\DV_r2JG>Da[%bJZl?RLmJO,R7n]4Rgh&{ m,>(HKN,9, .PMċ=@ԠlɃ3.';_{+O \h\R&A0N1)0 ;F[ZkƇpBԒ6BRRͧWSEΣ6sAf nq0'zӖq"-cBӕkDz>uofX[*=}OFv1{,v#Knucb'h2u]`T6c06ȫo#.e( YYQjoU`bšJrWMh ɬo$k>00ڔ5@":JBOW]B IYn/%m&設?=t:|S1;DV<8 QRx|)'ytXCę eX!/l:x+Ь|K"ˠ7p [k-m%DP0|k(Q'΁Q~uJf'hI״zm`Df=n7,]h )^+to]fUYWLsi~LmL(PO釦u?pe`@/=` J1$vQej0Q=n#|&W*Z "7L zb#j݄ d1w ,xބ%EҶMPM2"fr¡y32z\1) J=M"}=BaeG>MNFƤģi)r!Kxo9-=[@`.K_ Yg[*>t-wʇ5Σ eC2tS-T$V]\߭m^>(?4a^6^tj׳q:YjIrU@?h5)[FDiS)D> *ϹbMÙ.@- v46Gm[C_ ~$ ȆSD=Mh94GT, WBa F 9P!PJ=#)JmRvܾ>M}3WUC$ErjʶZW %ػ"؁>2Rl#2e}iɩEN=:x6.H g*}*ZfƉtp_n0h%0kԮ뱳]}\폽eH-׊-1Rg3mUe4|ǃwb8ylusI*/Cj=ˢT ~NU-<.= ĕFTDj`<FW;kB5@pj[6Fp+MYNӂۜ@ 0cY*{_ɵ#fۋ+8T(Łlz;>޷vv$!#kdl8g?&\LZ7f0L4;MpvUTz)}WczwDm[sk,(qHnknB֝ȑi+,q!yWUg[sZb!|8$H|]u-FՔF\a{& b>4E>nﶜ{ꥒOK>\+A.Xygڕ:?r>lH Y[#^l0rvr;BOZTa;3}Z\b kc j %z9\K3z]v*܀-S 6,Y*_wնSjŭxPf+L7VXw P27{d{ӗ}f F @]n҄ zv$FW'N1J-c?"1ـLek|4>iY;|.z󚐐TKYjc-@Qݦ2r#}UH " b ^4.њ wȝa j/ 맙(Sgv6h$Z0[mvzԄBvfxCmx? "_>S{k$_˜xi0fT+qdWqVXKCXas+~Ԩ[c¦$USX">1BZ[&sۺK-`NigB꺤Bxga j K)=bf5*hVO~@/a"kܕ? ʝjް'M T! +׉xN}`$`X9=Q9^a:q+sWd8D{FJw ¾Т,F?TFvF6̊`P>OILH7X [S 'Ðw`s7.s>vfIfMޚIo+ &ަ<*dn[vۑEKl|*M1sD̞hzBzf,l&Lu$"+cq=vb2Ez͊#SmF095l.ۯ)6=f\nӏ\+naUkUOϡFL@  p1Dn4uȾֻG\֘9થߖ xRg\,~= QT?̈́Pمg)rwꌲJ`N__kCn)y_4Z=ufh9M GS{lS{Pz!Y G7iDGv5Cc(= x7Vl1DL!բ;(T7sUJvF'ަ‚ɇNƐ1+!zMtS;-xeWEnf=# #mek4Zpi0:2GBYWloz2I&":mƔ,$K1ɝƴ(ligHfܘfCZm N1[3񮂷)@p 1>L(4"֋]S9)<:[ nt71ЧQm*.tp]ݖ_AUf Bu! ז1˜푽$(8[:m|mL^ HZl,%z/72k@2 .O\ITLX ]mHdJ@I]q{2(grx뿮3]fki̘H@yw1{3JPE`鈒 UѤ_˩bj 6/KǼk"n;i~Ҿhomc_O$i;w939zβs H~)b mt?'$Ph1#P4ps5h5!p}Ȟ_lw&4(lZˈ)'grJQ LIKXpV8Kq'qw&(2>Q͕-t}md0f?RHa>qZ0X6i9zB{. 2M? ΆdX!5"//:f*H/ٱPgoaK$ #ÿ]e,i)#m7Chmx)ڠCJ-&̑et.G\ p;Va] "h 3; 5ZY8$N?3*x';S:{+m9™JcыZ&=:NٝwKzSɵ4?CND:`T#ֶ>hWZqlZ#$d :=6r'Lc_iL0%R4!CI/l{E Aأ[*6u@H]k5?]һma4σ.!tN$.{*5xnn ȇrE`ru^/E֨+zU,VGW e/]A?% _DrAxo 7l5&,&Z-ݞiJE3I[2*(X$55abOclPy_T-$Mpvze54m?ެC=5Iu]E`Ս5u'Vƫ` d :iE78UzLG¦N$mH<֍s Jx9!kuG.3اgz _Bax䬱N j8s|Z$aQ׶8t}D'{ʭ¡}c^E7r>KV/сv@r% UbUPi #.8uM7ͳ{;Dʡd4HpɥCxVNOs { n 5ǃ*)="3x69:ԏ2NA:t->Wa&UE=M`E3#^*aFi t=~=?:t.5JeqOdF˷2ټ~j5"bXNm2SA|HƢ>&9DsN16|SBڍe3dj2|pUѭt&sv:; 6@vef$wlELd4 gZ *Kc8ˌSw3_A mPyERN>s4A$6R]ulsrw].Ă:ky[Ƨcuܫw5X,nl\>N tCVƌ'BߪETSKBBkA"h Dtr`6~rEef Ʒϟ&_AlFd 4XeSkg+ZӬ.Jr?05$Y]XcO-ۨ[#R3qh{pF2;)%~[O1&g)]<7Q]@ZH}| +s+E&nOk䪶:51u1B_<\ȗ!haYv53M-9NyYiE:C-^t{H\I˔KLy|l ٪yX=AD }<Hʪ(l vz&| *jݕ?D`|`\Ȩ{{=R㳟Aq/ltr۔Tv HfH.^Ĭ^yhi],[ov%sDJ@A8Y(k"#;L ~H||JABtfy"Hez *8JՐ::E/$ܿx 19Tߍ }s cpc >jiZ($&tz -Te:IC3AC a1N )?irq~8_=f*u)Ha)z-s-^->[1H.6T]D^ͳbrq*'V9a?=DCNe koϚRxl4CsW61ڹPu=xki!_+uxk^ '+ׯ""i|"x lBnht(g hp2#xlq5=<Α2*ZMICS_(Mbm, T( T'D.V|j$u,AsFͷpܣ0l<=y!6xݛ2qSO3*D8*FjB!9ݫn2;cjܛ.KCÞw>6I΀M {n3G.EWA:X-x3֢ƇI{YL—mO3dSү$+&9uI)/8O!Sa>;c;*+ˇFQ2Mm`NV-%[=ãꉷFKtTGD>bhҔ7 Zߏi~ubakBS03(%1Oc6#7 } لz/%!.Y)"cjqG&,[_)F+0$Rf 0+Mj250&> p>S'.QgN$)0&H/b?,6P͟S,u^]Xf~m I8 ,tX,jwdv =5'N|}&w*EL #/r`ݜCز $nTWN Lva@WGLo9ӡПts;M2N{Mf D9З I\4=t^P\-NYr^7X<~ӌ7 eG:Sb:ޛTK٠s/wK1n;Kb|Z%+|t ix|-sQ.yZ:*Rؠt0Jך8<66,7h\$qW:`֦R:LW2I.vHfXsn;L=JaBxb,f*)AL}ľT0Q4mx&3ךIP 3E3gҕ4}J0Q3g2|{IB-j eϲt_%Tɚ]-Vb$RDQChE]n2 YC,P8f94_Qꞻ] kԿzd7JUtsހw>6 3`pq"jRiy6JQҟK1pa֗,@|^j|wNPmw;W1s>}sߛpKMv4&fZ>DOEap:D6B9aX!#sM@kBr5B&vd3[wH,hMj!70%?޴ YU )k’̷7Lc%g|9cOޔ9:qFbbV7U9][=*r'U_劙C&pj,r3PoeR/wԩzNO.M,?;pZ>*L`yۇ h s Yf'?鋘)\Nה pKߞ:l]ŒX?E ;je"GW\l;%n\!bw[ D'y3ܜ`+-XV.n&OD#VB_be KX4BwD+j5Ћ\h8yek@6JCow;ɺM2LC!C!Q kj2FlӰˋ5źSZ\SQWZ1 OsiAmhƅg}S!ؑ%ܑ+TׂX5i7? *KƈS 󌓟,W՘%0[OV&V;[&)b+H

*@YDN#~sEc2OpA1F8"(P>F_ȤI GtP,{1[Og W[F}oqU[wL@Mv uH RH)<<,MgA<;!bc\?FK$ץ>|(1^}='zvpf)`xeEB!:]q.-BhuWnB`aǬYVUU֠1a<xcbmөP$Pda' i陻7֩2N>#-Lfwa.|,Hޜ9/c4\,@5[|hwk"[5Dqax?b- +c<=twl5Znj\ EIB~Sq7tsC-#`j/];"gdM M%Ӆ(EG|׈3pW _q3V6V?-Y1kJU)6b斁h#_F6VMYٚ`6:VjaF7ai ,]d] C#fH O5w/UO{9ܨm{J{XwԿ mN#ji?M8pwI#)sF=#K} ]ʾ9yX?4;}LK0/9gvU2ց0H؋'o m P=vd&)`є2й yX3YzD?w%^AaĜ1Jd5uqesg9:z*`VuBy`R2զ@P7~_[j%ж&WU܆2i] qtF[ɩXz[>Q>p@0Ѡ) uT!?*S?'U7#IRZ5+3۩{!J}Dk%Lل|m NGĤ`L68/mdZzs\r VNh(FLEhTm , <Ӥ  k,$Hiг" H/Z}$j>Ο܉o: b.cbt|Ԉ4 @CS_I=ɿ*U&5(@P2r*kzD؍yYS#Q== 3ar_2v,-Z Չhm,J:"eƶr6o҆%WKT:DN]mEU*qJW9q )Ɲ" EwÑ}|Tq;!?VLB?"=H\) iX@G}0EM/{g5nRT(*.U )v 7t?]"]O+c:"Df]m8xQmFOHpKP\`zJLErHy*AJb:HC% h>kiEFLE, Œ&]עlfM ࣮v80n+=563F@I4ՅRFKc'P*0몁!V_< g-In,ueu<ljmF6.RALAQ@mah]O͊̾u)A\Z$Θx7II) ¶ogב(|4OgvVk;nc/E-`W]+HM ^ɄڝRhGYŕTiw{H| q=b]bVBN1=ZBĽS M?b=E.$wҷZNƝma/ p}5>h$ۇh 6{wG8cckB L]3^QwDW ^zvXt,Ibav=K5U+Ӊ-pɗFf)} K0]/̱FmkvJԂDWr7H$d|3bv`9nov MuOCii* iӎom*ʱ#_k+MҨ&8QtMuLj?} *9@1D%:kļ y]O屺+#ˈYG +s³=L^>7 ` 3$,+>(*ΙV5~t6gR~dJeN8$-FpЅm8_Yh u{`fc5ɢ_|235g!<ʠiJ6枭ATw7QA@iV 90L[KAQ RƑg&G۵ĻOy,ΦOZDp&ϋӯ/$PzLH/O^&ezpċR/.+i'U/CbA+WP><}44g[Ȩu@_xw~{>CTy; Y@ܕ1`MArLèDT7j  ܄y2|u@)'LP(ysC fđmrjf)5LuTb5K=ۓQ(Qrsqsx˖)1H0KΙhdG$=wz L?1̠ѴEmGv&yy޶A *`;#P$'j[%\&(Xb m!w O*3i%MZS;:r`<HM!(4]oRĀz}㧐64eIO.>o0,ԇp`P8Kw^ɱX,U:SMkn)I*瘡N$r0Zo`FfSu[}8cbv@czLt򰑏%s%AyݏbQKҺmD 8F_pܕjv~'BظVN]>^u깋m")ϐ)3ܦ֑4ec0+ xdzpS=KLؙ ƌ2Pq2C/j5iS3l&t~ѧ#-])dp4tXgH5& ~ET_O6ѐiIF;|4k:+PӅw(/PL\' r$mx6Hx90AH[> z@>^[ڔyp^-w ;TX؅JAhfc|jWPMݯNzJhg$D6_Dw%rV܍un.Ùf2ulY!'+3t4I}n!4yģ#i"aAL{_k*%;H#/匡:rj j լ p6] e5I,\8Fa6&0 b )Q+(\#@7}fN,S-0HtjtjG׃m|<[w$@0u*{gZ(wNU.[V*~o~ڂ+^3wnPx(~[A E?ڃa׹'G ifs>ONv%P͂יW=;AMe8IB"o:7A;M>f5OJ(Bǹblhk3oo! Ug0.i+'.)C&]R#(=~|Ӳd@5i Z2 \:xEn%a;k](2TgN:T 52&$Oăߙܜɯum(YHĢ sSHrJK|Nrԑk,6#.G(ڱRft8iyIL983j{eY_)3:-"Q!:d47VCRMe͂hr2nBFwq>õ:C)uBO(B#rtjtd|u5&4|2 쳇)Z Evz',UcvHkdMg#v#YF B39S\kA]ʆБ^7/\1:EhuMnl4dq޵PfB=֏+>} 縬W%lї!<\i_ Ez"YDw>K9,MM{zlN 9],o|":%P0kLe,›u@d 69R2j]TzHS-踝Zv~j 6FBO}nwNF~ ^PRx>ӕo/x pl0֨~"?So|s_LT†H]Xeb)ž:̖dy'&KӘ0:Q_:Ue} Ε qYPHEido\:۶K'f_(x̻usm//CPuXb_S'&(Vtp(K4﷞OTi}-?Ɏk_`lMQx=6Ԭ&Qa%^V^ .Pt1?NRq:>r4 \e{V ۗAGWY?z} u]H| +-a1r8^#ZqԡعŚ#uJ.E녭^@ z,3DF5olp )]9XTM9,(H:q~Z0NwbnԥF_賻:8}e:Gi1 iL*25w&LX =k]UrB ޕ(?fT~qoN&'򵥞U#Ԕ1}u}% fI Iq,T>>%GqS67ska'WƁ]?no_p0* j(|=rzݽbE._ܧiciJywzNp6V]ߛC.AymM66 2vӇ:gOh2rܾ^AZN+ֱdȽ2ij7*6=qCEԨXS3 \ٌU" b8l9_P"!'+4P/kbm?eX2HrV!7k簎Lȷc9* ]An|kZ/D'(?L)d"a?QN1#@qpzEWS&K V-4rV5u=pn%M `XO}k()sr=TC+mX nj:NCNtpz?@-3΄tS1כ1ּ)Z.g]Ngl)g+G(?mt\&M+>y#ɮ%b Q -s`:V ),+vt@_(WjZZ{)gE.)֘$~Z8W[CwUzIcdu1NF |N-P7_xd)Rr;4S,!5u]&Tk3T{8PSylɖݴb^Ҡ2Kv, Q(YZvkĊ+W~Nh͊$ՏIx{)ԵW^K[V3U]K{\6@:&)>F12YKP #$o0j>}dO]mLSǜ6reS1k{<| /ga 8`%B %N2--ʜ\Lb,}[#}Ur`7fjqO#d"հ+ /DsΔiqA^.aJ}![aC1䮤v{‘|֊Pgs[TU=a2S3@ &$^%)glv]\h|)˃Ĭœro@E sLf`pa3Ee KWi0ԝ~2]؀ ak W@Y b1 ס~6`BtDgf$K l gQ(a t=n\%l"U!]ai(P ҍ;-7t: %(&u|f4ը0!lӵP,OG=PaRDytQ ?.~SBim@!Ǘ0-{Vct<ӹCqlҲs4iA8x< A.\ @rVs/o6b*G =qHZU23 RKi668k*Ftch,t8N4S$!t^Q=8iMmT C fBc(X98^m6>Gwj8qbIhU.yd-:=ʎf'oKUayy)$)4]=Y1pd >wRwzc NeN-Y%0^1tI 9;ymA >jٜ|["lƱʗY 'N,#[+lR0>[ YZ