rsyslog-8.2406.0-150600.12.8.1<>,Thbfp9|Ͼۤa3SouZc^VTC]S0q|Ø;w d&p1LެLT_ɏ[6c 3n[M?sߺĔf ^օq#sQ_e߿Bծ _~=4F~s„E z&^UhB-5T+ V[~Wz?Jq߾8%ĥ7 }0|uG&c1dQ 4MXO>T_`?_Pd  ! I  9Zz 3sNN tN N  HN 0N 1@N2xN3N55N67(2724Q:DdQ=0->05?0=@0EB0MF0fG0|NH1NI2NX3<Y3PZ3[3\3N]4N^8b:gc;d;e;f;l;u;Nv<8wX|NxYNyZz^|^^^^^^^^^__ _LCrsyslog8.2406.0150600.12.8.1The enhanced syslogd for Linux and UnixRsyslog is an enhanced multi-threaded syslogd supporting, among others, MySQL, syslog/tcp, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is quite compatible to stock sysklogd and can be used as a drop-in replacement. Its advanced features make it suitable for enterprise-class, encryption protected syslog relay chains while at the same time being very easy to setup for the novice user.hbfs390zl38*7SUSE Linux Enterprise 15SUSE LLC Apache-2.0 AND GPL-3.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.rsyslog.com/linuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in rsyslog.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi# # update linker caches # /sbin/ldconfig # # remove obsolete variables # PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in SYSLOG_DAEMON SYSLOG_REQUIRES_NETWORK ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in RSYSLOGD_COMPAT_VERSION RSYSLOGD_NATIVE_VERSION ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done # # add RSYSLOGD_* variables # PNAME=syslog SUBPNAME=-rsyslog SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # # Do not use multiple facilities with the same priority pattern. # It causes start failure since rsyslog-6.4.x (bnc#780607). # # FIXME: it seems to be a valid syntax -> rsyslog bug? # if grep -qs '^local[0246],' etc/rsyslog.conf ; then sed -i -e 's/^local\([0246]\),/local\1.*;/g' etc/rsyslog.conf fi # # create dirs, touch log default files # if [ "$1" = "1" ] ; then # first install mkdir -p var/log touch var/log/messages; chmod 640 var/log/messages touch var/log/mail; chmod 640 var/log/mail touch var/log/mail.info; chmod 640 var/log/mail.info touch var/log/mail.warn; chmod 640 var/log/mail.warn touch var/log/mail.err; chmod 640 var/log/mail.err # # touch the additional log files we are using # touch var/log/acpid; chmod 640 var/log/acpid touch var/log/firewall; chmod 640 var/log/firewall touch var/log/NetworkManager; chmod 640 var/log/NetworkManager # # touch the additional log sockets config file # mkdir -p -m750 "./run/rsyslog" touch "./run/rsyslog/additional-log-sockets.conf" chmod 640 "./run/rsyslog/additional-log-sockets.conf" fi # first install # # Enable the rsyslogservice to be started by systemd # # This macro enables based on a systemctl preset config file only if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in rsyslog.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # But we want to enable a syslog-daemon regardless of the preset; # force the creation of a syslog.service alias link (bnc#790805). # We do not check the obsolete SYSLOG_DAEMON variable as we want # to switch when installing it and there is a provider conflict. /usr/bin/systemctl -f enable rsyslog.service >/dev/null 2>&1 || : #restart daemon at the end of the transaction /usr/bin/systemctl set-property "rsyslog.service" Markers=+needs-restart ||:# # stop the rsyslogd daemon when it is running # test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable syslog.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop syslog.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable rsyslog.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop rsyslog.service ) || : fi# # update linker caches # /sbin/ldconfigr((((8\PKh;Kp}jpQ7''X8H0888 '8P87Jx(`879*:**:**; 8p?J#-]A큀A큤A큤AAAA큠A큤A큤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@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrsyslog-8.2406.0-150600.12.8.1.src.rpmconfig(rsyslog)rsyslogrsyslog(s390-64)syslogsysvinit(syslog)@  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(rsyslog)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.12)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libcurl.so.4()(64bit)libestr.so.0()(64bit)libfastjson.so.4()(64bit)liblogging-rfc3195.so.0()(64bit)liblognorm.so.5()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.29)(64bit)librdkafka1libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libsystemd.so.0(LIBSYSTEMD_246)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)syslog-service8.2406.0-150600.12.8.13.0.4-14.6.0-14.0-15.2-12.0otherproviders(syslog)4.14.3fLfͿeoeye#@d@d8cEc@bb@bu b a@`Ȗ@`~@`8`+_j__/@_]@_@_JC@_ ^@^;^]9\~d\o@[H[[[[P}@[3|@[2*Z=Z@Z@Zk@ZaZ)-@Z@Z@Z YY}@Y5GYX-XO@XX@X{d@XN@XD@W@WRWVV@VHVVVV=VUݪ@U@U[%UB@U>$U4@U+U#T@T@TLTG@TBV@thomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comlnussel@suse.dethomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comkukuk@suse.comrjschwei@suse.comrtyler@brokenco.dethomas.blume@suse.commatthias.gerstner@suse.comdimstar@opensuse.orgThomas.Blume@suse.comegotthold@suse.comThomas.Blume@suse.comkukuk@suse.demichael@stroeder.comThomas.Blume@suse.comastieger@suse.comThomas.Blume@suse.comastieger@suse.comkukuk@suse.deThomas.Blume@suse.comastieger@suse.comrgerhards@adiscon.comkukuk@suse.derbrown@suse.comastieger@suse.comastieger@suse.comastieger@suse.commichael@stroeder.comtchvatal@suse.comdziolkowski@suse.comastieger@suse.comastieger@suse.comastieger@suse.comndas@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.commrueckert@suse.deastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comjengelh@inai.dejsegitz@novell.comjsegitz@novell.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comandreas.stieger@gmx.deheinemannj66@gmail.comledest@gmail.com- restart daemon after update at the end of the transaction (bsc#1230984)- Upgrade to rsyslog 8.2406.0 -patches replaced by upgrade (see details in upgrade logs below) 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch * 2023-11-29: Revert "Update omlibdbi.c" * 2023-11-21: imkmsg: add params "readMode" and "expectedBootCompleteSeconds" * 2023-11-10: testbench: fix "typo" in test case * 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures * 2023-10-31: imkmsg: add module param parseKernelTimestamp * 2023-11-03: imfile: remove state file on file delete fix * 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work * 2023-10-30: Netstreamdriver: deallocate certificate related resources * 2023-10-20: TLS subsystem: add remote hostname to error reporting * 2023-10-21: Fix forking issue do to close_range call * 2023-10-23: replace debian sample systemd service file by readme * 2023-10-20: testbench: bump zookeeper version to match current offering * 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie * 2023-10-20: Only keep a single rsyslog.service for Debian * 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch * 2023-10-18: use logind instead of utmp for wall messages with systemd * 2023-10-11: Typo fixes * 2023-10-11: Drop CAP_IPC_LOCK capability * 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module * 2023-10-03: Add new global config option "libcapng.enable" * 2023-10-02: tcp net subsystem: handle data race gracefully * 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler - replaces 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch * 2023-09-26: fix startup issue on modern systemd systems * 2023-09-14: Fix misspeling in message. * 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported * 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set * 2023-08-02: testbench: cleanup and improve some more imfile tests * 2023-08-02: lookup tables: fix static analyzer issue * 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded * 2023-07-28: CI: fix and cleaup github workflow * 2023-03-07: imjournal: Support input module * 2023-07-28: testbench: make test more reliable * 2023-07-28: tcpflood: add -A option to NOT abort when sending fails * 2023-07-28: tcpflood: fix today's programming error * 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method * 2023-07-27: testbench improvement: define state file directories for imfile tests * 2023-07-28: testbench: cleanup a test and some nitfixes to it * 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly * 2023-07-26: testbench: make waiting for HUP processing more reliable * 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured * 2023-07-25: CI: update zookeper download to newer version * 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions * 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years. * 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+ * 2022-05-13: omazureeventhubs: Initial implementation of new output module * 2023-07-03: TLS CRL Support Issue 5081 * 2023-06-29: action.resumeintervalmax: the parameter was not respected * 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0 * 2023-05-15: Add the 'batchsize' parameter to imhiredis * 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167) * 2023-06-22: Do not try to drop capabilities when we don't have any * 2023-06-22: testbench: use newer zookeeper version in tests * 2023-06-22: build system: more precise error message on too-old lib * 2023-05-17: Fix quoting for omprog, improg, mmexternal- suppress installation errors when systemd is not running (bsc#1218799)- restart daemon after modules packages have been updated (bsc#1217292)- fix rsyslog crash in imrelp (bsc#1210286) * add: 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch-patches replaced by upgrade (see details in upgrade logs below) 0001-fixing-the-deleteStateOnFileDelete-option.patch 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch CVE-2022-24903.patch - Upgrade to rsyslog 8.2306.0 (jsc#PED-4883) * 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped * 2023-06-08: Add new global config option "libcapng.default" * 2023-06-08: imjournal: Add FileCreateMode module parameter * 2023-04-17: core bugfix: potential segfault on busy systems * 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred * 2023-05-24: CI: update base ubuntu image for github actions * 2023-05-16: OMHIREDIS::ADDED:: New support for 'stream' mode * 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities * 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure * 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate * 2023-04-25: IMHIREDIS::ADDED:: New support for 'stream' mode * 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module * 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set 'key' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode's value in logs when set incorrectly * 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo * 2023-03-21: modify testbench test to detect wrong imptcp truncation * 2023-03-21: imptcp bugfix: spam log on oversize message * 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown * 2023-03-13: Remove halted LGTM badges on README * 2023-02-16: Do not preserve capabilities when changing credentials * 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset * 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well * 2023-01-18: core/template: implement negative position.to * 2023-01-18: CI: fix github CodeQL settings * 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped * 2023-01-17: Adjust the capability set * 2023-01-13: substring function: enhancement and hardening * 2023-01-11: omfile: add action parameters "rotation.*" * 2023-01-11: CI: use newer version of zookeeper * 2023-01-09: ffaup fix : memory corruption with concurrent workers * 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback * 2022-12-30: testbench: add test for invalid json template generation * 2022-12-30: core bugfix: template system may generate invalid json * 2022-12-28: Fixed wrong type conversion in cstrLen() * 2022-12-08: Add CodeQL workflow for GitHub code scanning - Upgrade to rsyslog 8.2212.0 * 2022-12-05: testbench: make python http server based tests more reliable * 2022-12-05: omprog bugfix: invalid status handling at called program startup * 2022-11-29: testbench bugfix: wrong message injection object of instance 1 * 2022-11-21: rsyslog.conf man page bugfix: description of selectors * 2022-11-18: imtcp bugfix: legacy config directives did no longer work - replaces 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch * 2022-11-16: ksi bugfix: sending of too many signing requests fixed. * 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode * 2022-11-02: imjournal: add second fallback to _COMM * 2022-10-25: core bugfix: local hostname invalid if no global() config object given * 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure - Upgrade to rsyslog 8.2208.0 * 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed. * 2022-08-09: imjournal bugfix: segmentation fault in close journal * 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode="x509/fingerprint" * 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated * 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays. * 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened. * 2022-08-04: openssl: add support to split tls commands by semicolon * 2022-08-04: openssl subsystem bugfix: build issue on Solaris * 2022-08-04: openssl: add more details to error messages * 2022-08-04: omclickhouse: capture additional exceptions * 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection. * 2022-07-21: imptcp: slight tuning * 2022-07-20: template procesing/json: performance optimization * 2022-07-19: core bugfix: memory leak when free action worker data table * 2022-07-13: omfile: support for zstd compression * 2022-07-07: stream cleanup: move error message to debug log, only * 2022-07-04: mmdblookup bugfix: Don't crash Rsyslog on mmdb file errors * 2022-06-28: build error fix: libbson requires out-of-date language constructs * 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x - Upgrade to rsyslog 8.2206.0 * 2022-05-25: omelastisearch: allow omitting _type field * 2022-05-18: tcpsrv/imtcp: slight performance improvements * 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic * 2022-05-11: omelasticsearch: several support option for ElasticSearch 8 - config params searchIndex and documentType can be empty - support for Data Stream API - new config param esVersion.major * 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions * 2022-05-05: net bugfix: potential buffer overrun - replaces CVE-2022-24903.patch Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243 * 2022-05-05: imptcp: set OS worker thread name * 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized * 2022-04-22: mmdblookup fix: wrong copy of buffer * 2022-04-22: mmdblookup: several enhancements - support arrays in MMDB entry - support escaped quotes '"' in MMDB entry - support '<' characters in MMDB entry, when in a field - support '}' characters in MMDB entry, when in a field - Upgrade to rsyslog 8.2204.0 * 2022-04-18: gnutls bugfix: possibility of infinite loop * 2022-04-17: core/bugfix: errorfile could grow over max configures size * 2022-04-17: omkafka bugfix: potential misadressing * 2022-04-06: added new "FullJSONFmt" standard template (with addtl fields) * 2022-04-04: imfile: potential processing delay * 2022-04-04: bugfix: cosmetic data races * 2022-04-01: add property options to support ISO week/year number * 2022-04-01: core bugfix: "action suspended" message was emitted even when turned off * 2022-03-31: testbench: add more tests for rscript comparison operations * 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker * 2022-03-20: refactor: Move the parser directive to the main config * 2022-03-16: refactor: ake the main message queue part of the config * regression bugfix: rsyslog may segfault during startup * regression fix: script string comparison did not work correctly - Upgrade to rsyslog 8.2202.0 * 2022-02-11: Make action counter part of the config * 2022-02-09: imfile: Remove inotify watch descriptor on inode change detected - replaces 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch * 2022-02-03: omelasticsearch: Fix indexSuccess impstats counter in bulkmode * 2022-01-28: rscript: literal numbers were not compared correctly * 2022-01-17: ompgsql: PGsslInUse not supported on old distros * 2021-12-31: ompgsql: allow connection params via connection string * 2022-01-17: CI: remove fedora 33 based testing * 2022-01-14: Terminate all tcpsrv threads properly * 2022-01-04: Move timezone specific variables to rsconf * 2022-01-13: Fixes #4395 by correctly checking for EPIPE. * 2022-01-12: Move rsyslog global parameters to rsconf_t struct * 2022-01-12: cleanup: remove unused variable * 2022-01-07: CI: cleanup journal test environment * 2022-01-06: CI: remove unnecessary dependency * 2022-01-05: Update omlibdbi.c * 2022-01-05: omhttp: Fix memory leak in lokirest batchmode * 2021-12-15: Clarify meaning of loadConf and RunConf - Upgrade to rsyslog 8.2112.0 * 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor * 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime * 2021-11-22: new contribtion: URL parser module function using libfa * 2021-11-18: mmanon: relax IPv6 detection - improve anonymization * 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named * 2021-11-10: omsnmp: update module to current IP best practices * 2021-10-27: ommysql: fix threading bug * 2021-10-25: testbench: false positive when impstats was not built * 2021-10-25: imtcp: add support for permittedPeers setting at input() level * 2021-10-25: testbench: add test for legacy permittedPeer statement - replaces 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch - Upgrade to rsyslog 8.2110.0: * 2021-10-13: PrivDropToUser: fix abortOnIDResolutionFail handling #2 * 2021-10-12: PrivDropToUser: fix abortOnIDResolutionFail handling * 2021-09-17: rscript fix: ruleset called async when ruleset had queue.type="direct" * 2021-10-07: tcpsrv: fix compilation without exceptions * 2021-09-29: build issue: handle undefined MAXPATHLEN, PATH_MAX * 2021-10-06: Fix typo in error message. * 2021-09-21: mmkubernetes bugfix: no connection retry to kubernetes APP * 2021-09-13: use correct api for es 6 and later * 2021-09-20: openssl: Correct gnutlsPriorityString (custom ciphers) behaviour * 2021-09-20: ksi bugfix: locking bug fixed in rsksiCtxOpenFile * 2021-09-13: Fix ElasticSearch Test broken by ES incompatibility * 2020-11-21: imhttp updates - query parameter ingestion & basic auth support * 2021-09-08: openssl: extended output information on connection failure * 2021-09-02: queue: Add NULL check in qDeqLinkedList - replaces 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch * 2021-09-06: core bugfix: use of property $wday terminates string * 2021-09-02: gnutls: Propagate PrioritizeSAN when accepting a new connection * 2021-08-24: ratelimit: fix rate limiting for already parsed messages * 2021-08-23: config: implement script-equavalent for $PrivDrop* statements - Upgrade to rsyslog 8.2108.0: * 2021-08-16: openssl tls: Improved error message output on tls failures. * 2021-07-01: imfile add `ignoreolderthanoption` * 2021-08-10: imklog: fix invalid memory adressing, could cause abort * 2021-08-09: omelasticsearch: fix incorrect mutex error handling regression * 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 * 2021-08-08: imudp: add socket type (IPv4 vs. 6) to input name * 2021-07-13: fixing the deleteStateOnFileDelete option - replaces 0001-fixing-the-deleteStateOnFileDelete-option.patch * 2021-07-07: CI: add test for imtcp not correctly starting up and a Solaris fix * 2021-08-05: omfwd: add capability for action-specific TLS certificate settings * 2021-07-01: imtcp: permit to use different certificate files per input/action * 2021-08-04: debug support: add indication of "being HUPed" to debug log * 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set * 2021-07-22: Close file descriptor when freshStartTail is turned on * 2021-07-22: [omelasticsearch] Improve errorFile mutex handling * 2021-07-08: openssl network driver bugfix: small memory leak * 2021-07-07: tcpsrv bugfix: abort if no listener could be started * 2021-07-01: tcp subsystem: fix cosmetic memory leak on shutdown * 2021-07-01: fix typo in error message * 2021-06-30: OMMONGODB :: Fixes * 2021-06-29: mmkubernetes fix for apiserver error handling * 2021-06-21: omkafka updates * 2021-06-22: percentile module to track percentile metrics via impstats * 2021-06-17: CI: disable Travis CI for the time being * 2021-04-15: omhttp: Fix dynrestpath param in batch mode * 2021-06-14: add predefined template RSYSLOG_SyslogRFC5424Format * 2021-06-10: bugfix: _sender_stats reports integer counter as string- fix removal of imfile state files (bsc#1213212) * add 0001-fixing-the-deleteStateOnFileDelete-option.patch- fix parsing of legacy config syntax (bsc#1205275) * add: 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833) * this legacy setting from pre-systemd times is obsolete and can block important systemd messages- fix segfault in qDeqLinkedList during shutdown (bsc#1199283) * add 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch- Remove inotify watch descriptor in imfile on inode change detected (bsc#1198939) * add 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch- (CVE-2022-24903) fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) * add CVE-2022-24903.patch- add service dependencies for remote logging (bsc#1194669) - update config example in remote.conf to match upstream documentation- fix config parameters in specfile (bsc#1194593)- Upgrade to rsyslog 8.2106.0: * NOTE: the prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step. * 2021-06-14: new global option "parser.supportCompressionExtension" This permits to turn off rsyslog's single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598 * 2021-05-12: imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification. * 2021-05-06: imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. closes https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-29: imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. see also: https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules. * 2021-04-22: refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future. * 2021-04-22: config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. closes https://github.com/rsyslog/rsyslog/issues/4429- Upgrade to rsyslog 8.2104.0: * rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490) * new contributed module imhiredis * new built-in function get_property() to access property vars * mmdblookup: add support for mmdb DB reload on HUP * script bugfix: empty array in foreach() improperly handled * imjournal bugfixes (handle leak, empty file) * new contributed function module fmunflatten * test bugfix: some tests did not work with newer TLS library versions * some improvements to project CI- update remote.conf example file to new 'Address' and 'Port' notation (bsc#1182653)- HTTPS URLs used for source - Upgrade to rsyslog 8.2102.0: * omfwd: add stats counter for sent bytes * omfwd: add error reporting configuration option * action stats counter bugfix: failure count was not properly incremented * action stats counter bugfix: resume count was not incremented * omfwd bugfix: segfault or error if port not given * lookup table bugfix: data race on lookup table reload * testbench modernization * testbench: fix invalid sequence of kafka tests runs * testbench: fix kafkacat issues * testbench: fix year-dependendt clickhouse test- Upgrade to rsyslog 8.2012.0: * testbench bugfix: some tests did not work in make distcheck * immark: rewrite with many improvements * usability: re-phrase error message to help users better understand cause * add new system property $now-unixtimestamp * omfwd: add new rate limit option * omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default- prepare usrmerge (boo#1029961)- fix location and naming of journald dropin (bsc#1178288)- remove legacy stuff from specfile * sysvinit is not supported anymore, so remove all tests related to systemv in the specfile- Upgrade to rsyslog 8.2010.0: * gnutls TLS subsystem bugfix: handshake error handling * core/msg bugfix: memory leak * core/msg bugfix: segfault in jsonPathFindNext() when not an object * openssl TLS subsystem: improvments of error and status messages * add 'exists()' script function to check if variable exists * core bugfix: do not create empty JSON objects on non-existent key access * gnutls subsysem bugfix: potential hang on session closure * core/network bugfix: obey net.enableDNS=off when querying local hostname * core bugfix: potential segfault on query of PROGRAMNAME property * imtcp bugfix: broken connection not necessariy detected * new module: imhttp - http input * mmdarwin bugfix: potential zero uuid when reusing existing one * imdocker bugfix: build issue on some platforms * omudpspoof bugfix: make compatbile with Solaris build * testbench fix: python 3 incompatibility * core bugfix: segfault if disk-queue file cannot be created * cosmetic: fix dummy module name in debug output * config bugfix: intended warning emitted as error- Upgrade to rsyslog 8.2008.0 Way too many changes since 8.39.0 to be listed here. - Added custom unit file rsyslog.service because systemd service file was removed from upstream project - Removed obsolete patches: * 0001-satisfy-gcc-flag-fno-common.patch * rsyslog-pgsql-pkg-config.patch * rsyslog-unit.patch- Use systemd_ordering instead of requiring to make rsyslog useable in containers.- Fix the URL for bug reporting, should not point to novell.com (bsc#1173433)- Add support for omkafka which is now in Factory, and 15.x repos- avoid build error with gcc flag -fno-common (bsc#1160414) * add 0001-satisfy-gcc-flag-fno-common.patch- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the right libraries/directories for postgresql. According to pgsql upstream, pg_config must only be used to buildpgsql modules.- set default permissions before include directives (bsc#1126233) * Logfile open modes depend on position in the config file, see https://www.rsyslog.com/doc/rsconf1_filecreatemode.html- Upgrade to rsyslog 8.39.0 * imfile: improve truncation detection * imjournal: work around journald excessive reloading behavior * errmsg: remove no longer needed code * queue bugfix: invalid error message on queue startup * bugfix imrelp: regression with legacy configuration startup fail * bugfix imudp: stall of connection and/or potential segfault * bugfix gcry crypto driver: small memleak * fix potential misadressing in encryption subsystem * ksi subsystem changes * bugfix core: regex compile error messages could be incorrect * bugfix core: potential hang on rsyslog termination * bugfix imkafka: system hang when backgrounded * bugfix imfile: file change was not reliably detected * bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr * bugfix queue subsystem: DA queue did ignore encryption settings * bugfix KSI: lmsig-ksils12 module skips signing the last block * bugfix fmhash: function hash64mod sometimes returned wrong result * bugfix core/debug: data written to random fd 2 under some debug settings- rsyslog configuration cleanup by filter rules in separate files (bug#1102720) * add parsing of additional filter rules in /etc/rsyslog.d/*.frule * add acpid.frule, firewall.frule, NetworkManager.frule- Enable ForwardToSyslog for journald to get syslog messages [bsc#1110456]- Update to rsyslog 8.38.0: * imfile: support for endmsg.regex * omhttp: new contribued module * imrelp: add support for seting address to bind to (#894) * ommysql: support mysql unix domain socket * omusrmsg: do not fall back to max username length of 8 * various bug fixes and minor updates to other modules and core * various fixes for memory leaks- remove references to obsolete SYSLOG_REQUIRES_NETWORK variable (bsc#1101642)- rsyslog 8.36.0: * Liblogging-stdlog deprecated * OpenSSL based TLS driver added in addition to GnuTLS * GnuTLS TLS driver: support intermediate certificates * imptcp: add ability to configure socket backlog * fmhash: new hash function module * updates and fixes to various modules * omfwd: add support for bind-to-address for UDP * mmkubernetes: new module - updates and fixes to various modules- fix CVE-2015-3243 rsyslog: some log files are created world-readable (bsc#935393)- rsyslog 8.33.1: * devcontainer: use some more sensible defaults * auto-detect if running inside a container (as pid 1) * config: add include() script object * template: add option to generate json "container" * core/template: add format jsonf to constant template entries * config: add ability to disable config parameter ("config.enable") * script: permit to use environment variables during configuration * new global config parameter "shutdown.enable.ctlc" * config optimizer: detect totally empty "if" statements and optimize them out * template: constant entry can now also be formatted as json field * omstdout: support for new-style configuration parameters added * core: set TZ on startup if not already set * imjournal bugfix: file handle leak during journal rotation * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected * script bugfix: replace() function worked incorrectly in some cases * core bugfix: misadressing in external command parser * core bugfix: small memory leak in external command parser * core bugfix: string not properly terminated when RFC5424 MSGID is used * bugfix: strndup() compatibility layer func copies too much - the upstream systemd unit file was changed to no longer write the rsyslog pid, as it is no longer required for tracking under systemd (-iNONE). Adjust rsyslog-unit.patch to match.- Use %license instead of %doc [bsc#1082318]- fix includes for apparmor profile (bsc#1080238)- rsyslog 8.32.0 * libfastjson 0.99.8 required * libczmq >= 3.0.2 is now required for omczmq * libcurl is now needed for rsyslog core * rsyslogd: add capability to specify that no pid file shall be written * core improvements and bug fixes * RainerScript improvements and bug fixes * build fixes, including gcc7 fixes drop 0001-imgssapi-fix-compiler-warnings.patch * various bug fixes in multiple modules- remove build dependency on libee- Disable news by default, we don't need to clobber all systems with this for the very few remaining news servers- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Ensure user "news" exists - bsc#1068678- rsyslog 8.30.0 * changed behaviour: all variables are now case-insensitive by default * core: handle (JSON) variables in case-insensitive way * imjournal: made switching to persistent journal in runtime possible * mmanon: complete refactor and enhancements * imfile: add "fileoffset" metadata * RainerScript: add ltrim and rtrim functions * core: report module name when suspending action * core: add ability to limit number of error messages going to stderr * tcpsrv subsystem: improvate clarity of some error messages * imptcp: include module name in error msg * imtcp: include module name in error msg * tls improvement: better error message if certificate file cannot be read * omfwd: slightly improved error messages during config parsing * ommysql improvements * ommysql bugfix: do not duplicate entries on failed transaction * imtcp bugfix: parameter priorityString was ignored * template/bugfix: invalid template option conflict detection * core/actions: fix handling of data-induced errors * core/action bugfix: no "action suspended" message during retry processing * core/ratelimit bugfix: race can lead to segfault * core bugfix: rsyslog aborts if errmsg is generated in early startup * core bugfix: informational messages was logged with error severity * core bugfix: --enable-debugless build was broken * queue bugfix: file write error message was incorrect * omrelp bugfix: segfault when rebindinterval parameter is used * omkafka bugfix: invalid load of failedmsg file on startup if disabled * kafka bugfix: problem on invalid kafka configuration values * imudp bugfix: UDP oversize message not properly handled * core bugfix: memory corruption during configuration parsing * core bugfix: race on worker thread termination during shutdown * omelasticsearch: avoid ES5 warnings while sending json in bulkmode * omelasticsearch bugfix: incompatibility with newer ElasticSearch version * imptcp bugfix: invalid mutex addressing on some platforms * imptcp bugfix: do not accept missing port in legacy listener definition - build requirements: * libfastjson 0.99.7 is now mandatory * libsystemd-journal >= 234 is now recommended - packaging: * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch- rsyslog 8.29.0: * imptcp: add experimental parameter "multiline" * imptcp: framing-related error messages now also indicate remote peer * imtcp: framing-related error messages now also indicate remote peer * imptcp: add session statistics conunter * imtcp: add ability to specify GnuTLS priority string * impstats: add new ressoure counter "openfiles" * pmnormalize: new parser module * core/queue: provide informational messages on thread startup and shutdown * omfwd/udp: improve error reporting, depricate maxerrormessages parameter * core: add parameters debug.file and debug.whitelist * core/net.c: improve UDP socket creation error messages * omfwd/udp: add "udp.sendbuf" parameter * core: make rsyslog internal message rate-limiter configurable * omelasticsearch bugfixes and changed ES5 API support + avoid 404 during health check + avoid ES5 warnings while sending json + bugfix for memomry leak while writing error file * imfile bugfix: wildcard detection issue on path wildcards * omfwd bugfix: always give reason for suspension * omfwd bugfix: configured compression level was not properly used * imptcp bugfix: potential socket leak on session shutdown * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode * imklog: fix permitnonkernelfacility not working * impstats bugfix: impstats does not handle HUP * core bugfix: segfault after configuration errors * core/queue bugfixes * lmsig_ksi: removed pre-KSI_LS12 componentsVersion 8.28.0 [v8-stable] 2017-06-27 * omfwd: add parameter "tcp_frameDelimiter" * omkafka: large refactor of kafka subsystem * imfile: improved handling of atomically renamed file (w/ wildcards) * imfile: add capability to truncate oversize messages or split into multiple * mmdblookup fixes and extensions * bugfix: fixed multiple memory leaks * imptcp: add new parameter "flowControl" * imrelp: add "maxDataSize" config parameter * multiple modules: gtls: improve error if certificate file can't be opened * omsnare: allow different tab escapes * omelasticsearch: converted to use libfastjson instead of json-c * imjournal: _PID fallback * added fallback for _PID proprety when SYSLOG_PID is not available * introduced new option "usepid" which sets which property should rsyslog use, it has 3 states system|syslog|both, default is both * deprecated "usepidfromsystem" option, still can be used and override the "usepid" * it is possible to revert previous default with usepid="syslog" * multiple modules: add better error messages when regcomp is failing * omhiredis: fix build warnings * imfile bugfix: files mv-ed in into directory were not handled * omprog bugfix: execve() incorrectly called * imfile bugfix: multiline timeout did not work if state file exists * lmsig_ksi-ls12 bugfix: build problems on some platforms * core bugfix: invalid object type assertion * regression fix: local hostname was not always detected properly... * bugfix: format security issues in zmq3 modules (bsc#1051798) * bugfix build system: add libksi only to those binaries that need it * bugfix KSI ls12 components: invalid tree height calculation- Drop module-guardtime package * Upstream libgt died and it does not work with new opensslVersion 8.27.0 [v8-stable] 2017-05-16 - imkafka: add module - imptcp enhancements: * optionally emit an error message if incoming messages are truncated * optionally emit connection tracking message (on connection create and close) * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * improve octect-counted mode detection: if the octet count is larger then the set frame size (or overly large in general), it is now assumed that octet-stuffing mode is used. This probably solves a number of issues seen in real deployments. - imtcp enhancements: * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode - imfile bugfix: "file not found error" repeatedly being reported for configured non-existing file. In polling mode, this message appeared once in each polling cycle, causing a potentially very large amout of error messages. Note that they were usually emitted too infrequently to trigger the error message rate limiter, albeit often enough to be a major annoance. - imfile: in inotify mode, add error message if configured file cannot be found - imfile: add parameter "fileNotFoundError" to optinally disable "file not found" error messages - core: replaced gethostbyname() with getaddrinfo() call Gethostbyname() is generally considered obsolete, is not reentrant and cannot really work with IPv6. Changed the only place in rsyslog where this call remained. Thanks to github user jvymazal for the patch - omkafka: add "origin" field to stats output See also https://github.com/rsyslog/rsyslog/issues/1508 Thanks to Yury Bushmelev for providing the patch. - imuxsock: rate-limiting also uses process name both for the actual limit procesing as well as warning messages emitted see also https://github.com/rsyslog/rsyslog/pull/1520 Thanks to github user jvymazal for the patch - Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12) - rsylsog base functionality now builds on osx (Mac) Thanks to github user hdatma for his help in getting this done. - build now works on solaris again - imfile: fix cross-platform build issue see also https://github.com/rsyslog/rsyslog/issues/1494 Thanks to Felix Janda for bug report and solution suggestion. - bugfix core: segfault when no parser could parse message- rsyslog 8.26.0: * liblognorm 2.0.3 is required for mmnormalize * enable internal error messages at all times * core: added logging name of source of rate-limited messages * omfwd: omfwd: add support for network namespaces * imrelp: honor input name if provided when submitting to impstats * imptcp: add ability to set owner/group/access perms for uds * mmnormalize: add ability to load a rulebase from action() parameter * pmrfc3164 improvements + permit to ignore leading space in MSG + permit to use at-sign in host names + permit to require tag to end in colon * add new global parameter "umask" * core: make use of -T command line option more secure * omfile: add error if both file and dynafile are set * bugfix: build problem on MacOS (not a supported platform) * regression fix: in 8.25, str2num() returned error on empty string * bugfix omsnmp: improper handling of new-style configuration parameters * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages * bugfix imfile: wrong files were monitored when using multiple imfile inputs * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults * bugfix: immark emitted error messages with text "imuxsock" * bugfix tcpflood: build failed if RELP was disabled * fix gcc6 compiler warnings * the output module array passing interface has been removed- use 8.25.0 documentation tarball- rsyslog 8.25.0: * imfile: add support for wildcards in directory names * add new global option "parser.PermitSlashInProgramname" * mmdblookup: fix build issues, code cleanup * improved debug output for queue corruption cases * an error message is now displayed when a directory owner cannot be set * rainerscript: add new function ipv42num * rainerscript: add new function num2ipv4 * bugfix: ratelimiter does not work correctly is time is set back * core: fix potential message loss in old-style transactional interface * bugfix queue subsystem: queue corrupted if certain msg props are used * bugfix imjournal: fixed situation when time goes backwards * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer * bugfix core: str2num mishandling empty strings * bugfix rainerscript: set/unset statement do not check variable name validity * bugfix mmrm1stspace: last character of rawmsg property was doubled * bugfix imtcp: fix very small (cosmetic) memory leak * However, the leak breaks memleak checks in the testbench.- sync bug and fate numbers from IBS changes.- rsyslog 8.24.0(fate#320546): * mmrm1stspace: new module; removes first space in MSG if present * KSI signature provider: file permissions can now be specified * omzmq: new features * when the hostname is empty, we now use "localhost-empty-hostname" * omelasticsearch: remove "asyncrepl" config parameter * omfwd: Add support for bind-to-device (see below on same for imudp) * imudp: Add support for bind-to-device * imudp: limit rcvbufsize parameter to max 1GiB * rainerscript: implement new "call_indirect" statement * bugfix imjournal: make state file handling more robust * bugfix core: lookup table reload was not properly integrated * bugfix core: potential dealock on shutdown * bugfix ommongodb: did not work in v8 due to invalid indirection * bugfix ommongodb: fix tryResume handling * bugfix omfwd: retry processing was not done correctly, could stall * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on - contributed modules not enabled due to build issues: * mmdblookup: new maxminddb lookup message modify plugin- Replace pkgconfig(libsystemd-journal) BuildRequires with pkgconfig(libsystemd): the sub-libraries have been merged into libsystemd since 209 and have ultimately been removed since 230.- rsyslog 8.23.0: * requiring libfastjson 0.99.3 * KSI signatures: removed SHA2-224 hash algorithm * imfile: new timeout feature for multi-line reads * omfile: improve robustness against network file system failures * pmaixforwardedfrom: support for AIX syslogd -s option * omelasticsearch: add ability to specify max http request size * omelasticsearch: high availability addressing of ElasticSearch cluster * omelasticsearch: make compatible with ElasticSearch 2.x and 5.x * omhiredis: add dynakey attribute. * omtcl: new contributed module * RainerScript: provide a capability to set environment variables * lookup tables: improved error checking * queue subsystem: add configuration parameter "queue.samplinginterval" * various bug fixes * rsgtutil: option to specify KSI publications file certificate constraints - includes changes from 8.22.0: * ompgsql: add template support * generate somewhat better error message on config file syntax error - includes changes from 8.21.0: * CHANGE OF BEHAVIOUR: by default, internal messages are no longer logged via the internal bridge to rsyslog but via the syslog() API call [either directly or via liblogging). For the typical single-rsyslogd-instance installation this is mostly unnoticable (except for some additional latency). If multiple instances are run, only the "main" (the one processing system log messages) will see all messages. To return to the old behaviour, do either of those two: 1) add in rsyslog.conf: global(processInternalMessages="on") 2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1 This will set a new default - the value can still be overwritten via rsyslog.conf (method 1). Note that the environment variable must be set in your **startup script**. For more information, please visit http://www.rsyslog.com/rsyslog-error-reporting-improved/ * slightly improved TLS syslog error messages * queue subsystem: improved robustness- rsyslog 8.20.0: * omrelp: add configurable connection timeout * pmrfc3164: add support for slashes in hostname * bugfix omfile: handle chown() failure correctly * omfile now better conveys status of unwritable files back to core * config files recursively including themselfes are now detected * refactored code to not emit compiler warnings in "strict mode" * bugfix: fix some issues with action CommitTransaction() handling * bugfix omqmqp1: connecting to the message bus fails on nonstandard port * testbench/CI enhancements - Build requirements: * librelp 1.2.12- rsyslog 8.19.0: * omelasticsearch: add option to permit unsigned certs * imrelp: better error codes on unvailablity of TLS options * default stack size for inputs has been explicitely set to 4MiB * performance improvements * miscellaneous minor cleanup * fix: potential misadressing in template config processing * bugfix omfile: async output file writing does not respect flushing * bugfix imfile: corrupted multi-line message when state data was persisted * bugfix imfile: missing newline after first line of multiline message * bugfix: dynstats unusedMetricTtl bug * bugfix build system: build was broken on SunOS * bugfix: afterRun entry point not correctly called * bugfix dynstats: do not leak file handles * bugfix omelasticsearch: disable libCURL signal handling * bugfix omelasticsearc: some regressions were fixed * improved wording: gnutls error message points to potential cause- rsyslog 8.18.0(bnc#958728): * templates: add option to convert timestamps to UTC * omjournal: fix segfault (regression in 8.17.0) * imptcp: added AF_UNIX support * new template options * compressSpace * date-utc * redis: support for authentication * omkafka: makes kafka-producer on-HUP restart optional * imfile: new "FreshStartTail" input parameter * omjournal: fix libfastjson API issues * ommongodb: fix json API issues * dynamic stats subsystem: a couple of smaller changes * foreach loop: now also iterates over objects (not just arrays) * enhancement: queue subsystem is more robst in regard to some corruptions * enhancement: Allow rsyslog to bind UDP ports even w/out specific interface being up at the moment. * new External plugin for sending metrics to SPM Monitoring SaaS * bugfix imfile: fix memory corruption bug when appending @cee * bugfix: memory misallocation if position.from and position.to is used a negative amount of memory is tried to be allocated if position.from is smaller than the buffer size (at least with json variables). This usually leads to a segfault. * bugfix: fix potential memleak in TCP allowed sender definition * bugfix: $PrivDropToGroupID actually did a name lookup * bugfix: small memory leak in imfile * bugfix: double free in jsonmesg template * bugfix: incorrect formatting of stats when CEE/Json format is used * bugfix omfwd: new-style keepalive action parameters did not work due to being inconsistently spelled inside the code. Note that legacy parameters $keepalive... always worked * bugfix: memory leaks in logctl utility * bugfix omrelp: fix segfault if no port action parameter was given * bugfix imtcp: Messages not terminated by a NL were discarded- rsyslog 8.17.0: * improve json variable performance * new experimental feature: lookup table suport * new feature: dynamic statistics counters * new contributed plugin: omampq1 for AMQP 1.0-compliant brokers * new set of UTC-based $now family of variables ($now-utc, $year-utc, ...) * simplified locking when accessing message and local variables * new global parameter "debug.unloadModules" * timestamp handling: guard against invalid dates * imfile: add "trimlineoverbytes" input paramter * ommongodb: add support for extended json format for dates * omjournal: add support for templates * imuxsock: add "ruleset" input parameter(fate#320667) * imptcp: performance improvements * improve interface definition in some modules, e.g. mmanon, mmsequence * rsgtutil: dump mode improvements + auto-detect signature file type + ability to dump hash chains for log extraction files * bugfix: unixtimestamp date format was incorrectly computed (leap year) * bugfix: date-ordinal date format was incorrectly computed (leap year) * bugfix: some race when shutting down input module threads * bugfix tcpflood: did not handle connection drops correct in TLS case * bugfix: abort if global parameter value was wrong * bugfix omkafka: fix potential NULL pointer addressing * bugfix impstats: @cee cookie was prefixed to wrong fromat (json vs. cee) * bugfix imfile: fix race during startup that could lead to some duplication * bugfix: potential loss of single message at queue shutdown * bugfix: potential deadlock with heavy variable access * bugfix ommysql: on some platforms, serverport parameter had no effect * bugfix omelasticsearch: invalid pointer dereference * bugfix omhiredis: serverport config parameter did not reliably work * bugfix rsgtutil: -h command line option did not work * bugfix lexer: hex numbers were not properly represented * bugfix TLS syslog: intermittent errors while sending data * bugfix imfile: abort on startup if no slash was present in file name param * bugfix rsgtutil: fixed abort when using short command line options * bugfix rsgtutil: invalid computation of log record extraction file * bugfix build system: KSI components could only be build if in default path- rsyslog 8.16.0: * rsgtutil: Added extraction support including loglines and hash chains. * new system properties for $NOW properties based on UTC * various bug fixes and improvements- fix build on sle11: use package name buildrequires instead of pkgconfig- build with libfastjson (mandatory from 8.16.0)- rsyslog 8.15.0: * KSI (incompatible changes): + KSI utilities: Added option to set publication url via - -publications-server. Required for signature verification. + UserID and UserKey can be set by parameter + Fixed wrong TLV container for KSI signatures from 0905 to 0906. + somewhat improved error messages + Update for and use libksi 3.4.0.x * New contributed modules: + pmpanngfw: for translating Palo Alto Networks logs * pmciscoios: support for asterisk before timestamp added * solr external output plugin much enhanced * omrabbitmq: improvements * add support for libfastjson (as a replacement for json-c) * pmciscoios: support for some format variations * improvments for 0mq modules: + omczmq - suspend / Retry handling + omczmq - improved efficiency + omczmq - added ability to set a timeout for sends + omczmq - set topics can be in separate frame (default) or part of message frame (configurable) + imczmq - ZMQ_ROUTER support * Note the upstream supported modules not enabled in SUSE package: + grok (mmgrok) + omkafka * add support for building with libfastjson * bugfix: invalid mutex handling in omfile async write mode could lead to segfault, even though highly unlikely (caught by testbench on a single platform) (bsc#1000488)- rsyslog 8.14.0: * add property "rawmsg-after-pri" * bugfix: potential misadresseing in imfile * bugfix: re_extract RainerScript function did not work- rsyslog 8.13.0: * ZeroMQ enhancements * Redis enhancements * mmnormalize: liblognorm error messages are now emitted via regular rsyslog error reporting mechanism (aka "are now logged") * networking improvements - drop rsyslog-8.12.0-parallel-build.patch, is upstream - drop rsyslog-8.12.0-gnutls.patch, same- rsyslog 8.12.0: * Harmonize resetConfigVariables values and defaults * GT/KSI: fix some issues in signature file format and add conversion tool * bugfix: ommysql did not work when gnutls was enabled * bugfix omfile: potential memory leak on file close * bugfix omfile: potential race in dynafile detection/creation * bugfix omfile: Fix race-condition detection in path-creation code * bugfix parser subsystem: potential misadressing in SanitizeMsg() * imfile: files moved outside of directory are now (properly) handled * bugfix: imfile: segfault when using startmsg.regex * bugfix imfile: file table was corrupted when on file deletion * bugfix ompgsql: transaction were improperly handled * bugfix mmjsonparse: memory leak if non-cee-json message is processed * testbench: remove raciness from UDP based tests * testbench: added bash into all scripts makign it mandatory * bugfix testbench: Fixed problem building syslog_caller util when liblogging-stdlog is not available. - add upstream patches: * rsyslog-8.12.0-gnutls.patch to fix build with gnutls * rsyslog-8.12.0-parallel-build.patch to fix parallel build- rsyslog 8.11.0 - new features: * signature provider for Keyless Signature Infrastructure (KSI) - bug fixes: * imfile: regex multiline mode ignored escapeLF option * omkafka: fixed several concurrency issues, most of them related to dynamic topics. * execonlywhenpreviousissuspended did not work correctly * core engine: ensured global variable atomicity * imfile: segfault when using startmsg.regex because of empty log line- rsyslog 8.10.0: * imfile: add capability to process multi-line messages based on regex * pmrfc3164: add new parameter "detect.yearAfterTimestamp" * pmrfc3164: add new parameter "permit.squareBracesInHostname" * supplementary groups are now set when dropping privileges * imfile: added brace glob expansion to wildcard * zmq: add the ability for zeromq input and outputs to advertise their presence on UDP via the zbeacon API. * added omhttpfs: contributed module for writing to HDFS via HTTP * bug fixes - packaging changes: * build with GnuTLS support again as 3.4.0 is now supported- Documentation does not depend on the presence of anything- Adjusted apparmor profile based on the suggestions by Christian Boltz * Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls * Moved profiles to /usr/share/apparmor/extra-profiles/ * Blocked capability block_suspend plus some other small fixes- Adjusted apparmor profile to prevent aa-genprof failures (bnc#925512)- disable GnuTLS support, does not build with GnuTLS 3.4.0- rsyslog 8.9.0: - omprog: add option "hup.forward" to forwards HUP to external plugins - imuxsock: added capability to use regular parser chain - new sysSock.useSpecialParser module parameter - new sysSock.parseHostname module parameter - new useSpecialParser input parameter - new parseHostname input parameter - 0mq: improvements in input and output modules - imtcp: add support for ip based bind for imtcp -> param "address" - bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData - bugfix imfile: partial data loss, especially in readMode != 0 - bugfix: potential large memory consumption with failed actions - bugfix: omudpspoof: invalid default send template in RainerScript format - bugfix: size-based legacy config statements did not work properly on some platforms, they were incorrectly handled, resulting in all sorts of "interesting" effects (up to segfault on startup) - build system: added option --without-valgrind-testbench ... which provides the capability to either enforce or turn off valgrind use inside the testbench. Thanks to whissi for the patch. - rsyslogd: fix misleading typos in error messa - remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch- rsyslog 8.8.0: - omkafka: add support for dynamic topics and auto partitioning - imtcp/imptcp: support for broken Cisco ASA TCP syslog framing - omfwd: more detailled error messages in case of UDP send error - TLS syslog: enable capability to turn on GnuTLS debug logging - bugfix: $AbortOnUncleanConfig did not work - improve rsyslogd -v output and error message with meta information - bugfix imtcp: octet-counted framing cannot be turned off - bugfix: build problems on Illuminos - bugfix: invalid data size for iMaxLine global property - bugfix: negative values for maxMessageSize global parameter were permitted - add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch to fix compiler warnings/errors- rsyslog 8.7.0: - add message metadata "system" to msg object this permits to store metadata alongside the message - imfile: add support for "filename" metadata this is useful in cases where wildcards are used - imptcp: make stats counter names consistent with what imudp, imtcp uses - added new module "omkafka" to support writing to Apache Kafka - omfwd: add new "udp.senddelay" parameter - mmnormalize enhancements - RainerScript "foreach" iterator and array reading support Thanks to Janmejay Singh for the patch. - now requires liblognorm >= 1.0.2 - add support for systemd >= 209 library names - BSD "ntp" facility (value 12) is now also supported in filter Note: this patch was released under ASL 2.0 (see email-conversation). - bugfix: global(localHostName="xxx") was not respected in all modules - bugfix: emit correct error message on config-file-not-found - bugfix: impstats emitted invalid JSON format (if JSON was selected) - bugfix: (small) memory leak in omfile's outchannel code - bugfix: imuxsock did not deactivate some code not supported by platform - includes changes from 8.6.0: - configuration-setting rsyslogd command line options deprecated - new and enhanced plugins for 0mq. These are currently experimantal. - empty rulesets have been permitted. They no longer raise a syntax error. - add parameter -N3 to enable config check of partial config file Use for config include files. Disables checking if any action exists at all. - rsyslogd -e option has finally been removed It is deprectated since many years. - testbench improvements - testbench is now by default disabled - add new RainerScript functions warp() and replace() - mmnormalize can now also work on a variable - new property date options for day ordinal and week number - remove --enable-zlib configure option, we always require it - slight source-tree restructuring: contributed modules are now in their own ./contrib directory. The idea is to make it clearer to the end user which plugins are supported by the rsyslog project (those in ./plugins). - bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used - bugfix: not all files closed on auto-backgrounding startup - bugfix: typo in queue configuration parameter - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imuxsock: possible segfault when SysSock.Use="off" - bugfix: RainerScript: invalid ruleset names were accepted - bugfix: some module entry points were not called for all modules - bugfix omlibdbi: connection was taken down in wrong thread - imttcp was removed because it was an incompleted experimental module - pmrfc3164sd because it was a custom module nobody used - omoracle was removed because it was orphaned and did not build/work for quite some years and nobody was interested in fixing it - includes changes from 8.5.0: - imfile greatly refactored and support for wildcards added - PRI-handling code refactored for more clarity and robustness - ommail: add support for RainerScript config system [action() object] - refactored the auto-backgrounding method - make gntls tcp syslog driver emit more error messages - bugfix: imfile did not complain if configured file did not exist - bugfix: build failure on systems which don't have json_tokener_errors - imgssapi: log remote peer address in some error messages - includes changes from 8.4.3: - ommail: minor bugfixes & improvements - bugfix imkmsg: infinite loop on OpenVZ VMs - bugfix: typo in queue configuration parameter made parameter unusable - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imfile: segfault on startup in "inotify" mode - bugfix imfile: could make rsyslog exit in inotify mode - bugfix: rsgtutil sometimes crashed in verify mode if file did not exist - bugfix imklog: pri was miscalculated - bugfix: imjournal did not build properly - bugfix: mmcount did no longer build - bugfix imuxsock: possible segfault when SysSock.Use="off" - rsyslog Version 8.5.0 fixed bsc#992146- set file permissions only on first install [boo#899316]- Changed BuildRequires dependencies for SLES11SP3 - BuildRequires: libjson-c-devel - BuildRequires: libestr-devel - BuildRequires: liblogging-devel - BuildRequires: librelp-devel - BuildRequires: libee-devel - BuildRequires: liblognorm-devel - BuildRequires: libuuid-devel- fix shebang of rsyslog-service-prepare script/bin/sh/bin/sh/bin/sh/bin/shrsyslog-module-guardtimes390zl38 1751279129  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNO8.2406.0-150600.12.8.18.2406.0-150600.12.8.18.2406.0-150600.12.8.1 8.38.0 rsyslog.confrsyslog.dNetworkManager.fruleacpid.frulefirewall.fruleremote.confrsyslogadditional-log-sockets.confrsyslogdjournald.conf.d30-rsyslog.confrsyslog.servicersyslogfmhash.sofmhttp.soim3195.soimfile.soimjournal.soimklog.soimkmsg.soimmark.soimpstats.soimptcp.soimtcp.soimudp.soimuxsock.solmnet.solmnetstrms.solmnsd_ptcp.solmregexp.solmtcpclt.solmtcpsrv.solmzlibw.sommanon.sommcount.sommexternal.sommfields.sommkubernetes.sommpstrucdata.sommrfc5424addhmac.sommrm1stspace.sommsequence.sommutf8fix.soomhttp.soomjournal.soommail.soomprog.soomruleset.soomstdout.soomtesting.soomuxsock.sopmaixforwardedfrom.sopmciscoios.sopmcisconames.sopmlastmsg.sopmnormalize.sopmnull.sopmpanngfw.sopmsnare.sorcrsyslogrsyslog-service-preparersyslogdapparmorextra-profilesrsyslog.dusr.sbin.rsyslogdrsyslogAUTHORSChangeLogREADMEsysconfig.syslog-rsyslogrsyslogCOPYINGCOPYING.ASL20COPYING.LESSERrsyslog.conf.5.gzrsyslogd.8.gzrsyslog/etc//etc/rsyslog.d//run//run/rsyslog//sbin//usr/lib/systemd//usr/lib/systemd/journald.conf.d//usr/lib/systemd/system//usr/lib64//usr/lib64/rsyslog//usr/sbin//usr/share//usr/share/apparmor//usr/share/apparmor/extra-profiles//usr/share/doc/packages//usr/share/doc/packages/rsyslog//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/rsyslog//usr/share/man/man5//usr/share/man/man8//var/spool/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:39483/SUSE_SLE-15-SP6_Update/9467cc0396d096161333f73f0643714d-rsyslog.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./012345677ASCII textdirectoryemptyELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=be6af1424f81c4b551d848ae77d5bb99f6f57972, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef1be7b638650ae3abd16ec76ad6496b2c7aeacf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e506c3e57e4c71f306c52cecd7a20b09bd50f551, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0c69daaf5b1bc183be244cae68ac9e86902b0c4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e9637676a5a00da8cb7f890c6609aecffc9dd5c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=24b3bdeda09b5ad63f58457ade3b0c695e691d91, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7b9a1ae64a97bf6deac4f979d3486a7adb93ae6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=23decbfcd8ff87b796a2478ffe40516fc3220f52, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=18d1d9f33a145a65b9effdd87aad934bf08b879b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dcd4453ecc92657356ab86717b6c54ed5650ceb4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d12378928f7ee9609b1d13ea2339a14b26074750, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e35d1beb9b91817abeac8c71ab7d3f0c73b56e04, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a89bfb2d4da56c62b2c4f436630cd0c4a2b8963, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4326d51ed2ab8695d8d77709ca0b0d13403d50d9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f049148c72c512bd6d3f87c1c6e71a53dc8fbb44, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6efe6324a02a9a83d6baa2dacec302f7cfb75330, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=14be6fe3fa4facbf0497db5149b2b11af736047d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=331b9cfcb1359344f53764d407b76352dc03bd35, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c575bdf65ca7eb3de8575648688a418cbc551c34, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d00bc4dce83ae06c0fe98a2828a4239debe4b2c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae46eebd1e9fa23fb9329d4af031cc9bb3423d23, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0cc13c2465711ce1427ea055c5d9e8fd7b2b69d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dafef4434ead9dd1943880e426c9aa4aa70e4d09, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=42718a7656ae2356909c768ed6db4c943966b742, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4443aebf7118ba8c5b0f922a9eed9ec7a4ce4cd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=caa75ef9d0060bde73dc17223a3eba404f06390c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=601287b2506c465b1e9c2cc0469f53a2c5892923, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a5fb066f7de6098068d2b858b293d86b14397d1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c62c049075b0a8b127fb7c1a8b657b37ccb0bbd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=35aebf47590192330937a2778590bc43f20fbe3e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6e8dc8f601bdc4495c027a4bc55f443e989a2b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f099c1009078b5a0c94ef5f3744842e33e7dbaf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc93f03b39484f42c17d10e98962fb62997549d1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=459ef42918546ddfcb2db220a445033a07359b48, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ddd0e47119c4007a78c6dc98aeee960f1cf8dbb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddb12e13f3dc0f0a6b367fb1ae0beec667d45c6f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ff54eafa9d45881de336a79792ae0692dd240c2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a389d93d21c9dcffae9d2aba0e3c936d5ad262a6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6f4d2d029d906281cc64c8c1b8cd233acb47f1a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab23778882c2346782052714d59b8dc7c591b2aa, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=47e6a6a030500a58a3b3cc53eecd673e3703a241, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bcc815fd2e0c4097b0b83d1d47f0a367e1e90ee, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4c805bf0d88a17b6e205f9bfa366d2634db7a97, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d626d0b88fff7f0874cbb541689f73380180abe, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=bbb55b5bf18eaa532c06081398e11e6be1edd36e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=00a5ac5c91c98d5b1a45d6e0a15328410f17f7ee, strippedBourne-Again shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=b8c2d4c392360e5d908758676a040ee2f6429b5c, strippedC source, ASCII textUTF-8 Unicode textASCII text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)  %),/7<CHNQVZ]dhmpsv~ RRR RRRR RRR"R RRRRRRRRR!R RRRRRRRR)R(R'R RRRRR RRRR RRR RRR RRRRRRRR RRRRR RR RRRRR RRRRR RRRRRR RRR RRRRR RRRR RRR RRRRRRR RRR,R RRRRR RRR RRR RRR RRRRRR#R!R RRRR RRRRR RRR RRR RRR RRRR R(RRR'R RRR RRRRRR RRR RRR RRRRR RRR RRR RRR RRR RRRR RRR#R!R RRR RRR RRR RR%R+R(RR RRRRRRRRRRRRR,R$R R!R'R*R 5ĭ !g. -/usr/bin/systemctl --marked reload-or-restart ||:/bin/shsystemdsystemdsystemd-sysvcompatutf-8bd20980203169ab1f1ba7819d5b5c1a742c91a6d2b8c871f2d7753653c90d6d4?7zXZ !t/]"k%:.kgWE ljTHœsi1t0 4yedӆj]ˉ9iН2wQTf4ۿ`婤QH@5':ybVgʞ@K48?UN VĵJx}hHQ+e ns6-׳*=2y40q%=x/&\ob:@[RgFMvF͠g%@h0_iLJ м*MK#+ ?߫Uy&WY1ImCݨ,cMl4XYDoIB <#E' -+qI<PΑ@!ʧJ#otN(@_;;`[OYb *a!,{EQ&&4Hnq ksҬ`R/9N>C_h^Ax]Ut.1.0x}Z,N[I7v[EX`@( = S hb3_Oe¬:n=d`҃8%infA$_S& ]Ls=y!em` ;H4%$GdnSs~p43$޵mg`#0'qONQopq\Jvs.İ90Ydpjms8tVyM^g;Rsܡn)؂dm٩}=\=l;饷[/^tq0b S7(j!Q0Al:(ξh6(UhG܅7ܘ]  k9Vٸ0n 0fn(t5ir[{H l( CT$jk:&0*2mIJ~[V\uؒ33q>fL H:Z>vҢ(WXXBTu'V[o`چ0t*,k["m.q-K_H**V фĨEZ2ѡgơo62;2CV3]"{Lʀ8AO0ɸnF7 gq6^nȴ'bwcni}å\.(iJu?~^fsT֦ yl*J]'R Jk2.6&0CPSób>DDo/Ȣ^׫uӇn Lrwg{D50VaMN 3^*W|n24R ȼ9 [Ӑr݅E%4ӝĴ*+VtW$r`뙻SMIQ}$YD >gGr#4BNu0+c;b_Sqe !t`{O-x;ݣ=max`]^ZK6j%RQy ѿYE/E-P24$`dgEScPDI1TEL; #%L_<4y.D_R"0'%2/YIjO{%l ꋐ="fJOU8?"; e%5[ ѳ|r@1ӷݕI4NBK;pH>f,dwVy݃&bnD%ۯ4VZ)P 9Yk_I8zq/P]ᪧ [o5U4 w;ğntLѷET\5)q &ݴ&y(*ե9vp7i:vX`t"6[D9/,*W=!f00T5€4{@{PsG¨o% F̴*w(]{Sº>y$#eKĴ#Z[#MMx5.Inoca N~%"+IQ zPH‚їNƠ黀sog'PoxtGn/ZnYEZg7EܻOO4I-(&`>ݜ211U#4LFo+O^&y#(nh$ s-S7!J. &V" <=(0| d 7JҮg.w/^ͺLY  ==Z?$ craGb<揜,N0##P_[Oݟx|l8jE;Ω'lb4EQ ѐE+j G#'iaQ2esЊfA"6]C=&k T aI~aCݩlG|`V+IZ}~4_vE1$]哏8"LzĊ\~(=8ׁ\OK80¡tQ@v{*.KzcNʋ{6Vv/OIwn3l4WL>yG1ʆ’^c)^껩z!^%iG*p\""ќt>֎00= MLh9ԥl>DY!b'SeӁ2L;o_NԎ^q N4{6 )ǜtYtɹ~]?\p)\,1tul?}prGC03""3ύy%K~9ǿuNcY*׃fKUdbm>8[A9Pv0Tҳ-Ǥ'ppRAW{? 6w fn='N2Q8"IBAg4@??R ]CHfv;9xΪ{C&#dU Wj>V@ʖKPrS\"GǴإQp`ex-8N,B< ̹sg%c M㳳yѧ&>kAG ʼuL|ߎg̽љ5Ԅ:}7X}/Ið 6|mR)$>ng8thO<]9#`d{v[(,'~nhۼs-Q|;Vd^@͚R5ziYzoiB|nʍS(V9nԎ8Hjĩ ̂A]A]0iG}Hs 8{yL7.rLYBfE$d!t="8`U.n t2e ށ%jΜx:rI1{.N狶}Z%d)lKhyThӤ V/޵ }9rS=|XgO`? i%g/Cؚ֣ٞ 55`:SYKr/քXk>\-W#ǃ0:JRpxGD4unntmCmBW hAc=: P-!*ЕBl%y.=AOA鉔P|m.Q./ k6I%Mv7k:kL3[L;/]׃G_[(t.6y4[NSI=&Sea*(ʓO ˰!1![`Dc2˂D}cA{["G9H>צ<,qlmqd2 eF@%fH 6}JP'Wx]C)jٵ'aaMSح| F0].Q/^-KK+1S빪}@6^5GbF)^8X{3{kщ'g1C{9\hBWGgiܷ8h{ԶN)}ds%D~lɮsqJ޷T')F9tJY ;*\oVǺf(-ᩉ5⏭e.~C3N,̻kRN&tÈ7@UB<>be'dE3Geҽ'bf+X t02|ȗ̏7FZjxVQ*_2.qp0pG /!PL}̳m:S%)DTRでMj/-+?6U!WN=軦u ojV&7:KcVDξ.(n+v m6/CpTpE \\^qDĞ9-L6f)j@KdpP^t,kzҴsՇ=hiPD RLzh+dlJ@˾ѠAky8EN/{ȹ#ĨE\݌H;*Ѫȧ{C=݋J<i2_WBq< M- jRӡr!8#cU3B` iӺ07rDj=wtMM ,2T"M~AHӧ~CC2xG 1Sy Zrű0ڏbHXxǰ\_8o]G ZYu٥slDMFŚ"54ahz 3aZZ} dXq*+h𳅸[a>RXtHcadJ Fr{Jo}wzp> b`фPv"`?mNh5fAw֯u֠&.wQz˓lSYФz#(gdܮqHKᨩqB+kckc+?㢷c])8Íw E E gNHdiyK9dbG_W-f5bE#F,=DUT/R:9[-Y4[ ]1dƩC{Ʌ(6`RY˳o 5,E=(څdWPUn}7A"8{ɐpC4}y&NyLcGa C7-X;tIA< N#V]ʴIxg`%hQ{v;ⴼ50},vW @YocɅ0>zp9k7zKҽ'Fx_ΙhyrSqTjWAݖH`Hn( {n' :lL*8aXJy#X*72u<7Lѣ?clwswd ~h|Il 5_œ J @*b̚n7GNwi56ഌ=ՒJh(I#&i݋^YEg3Zz-L*F?#X:-ap֚1VF?t}Ei^OI8Å`|`97|ITX[d8¢gqKET@B#v56pQ|X zWe$mk"SHOߒoٺPKM՘w7h̉!n ':L!A\ާhb,䰸  \vo*XMzplNؤgj[fHX_FF9H(%O|]XUPUjW'ҷJxu f?"^?S+ [JoR/Y~( !5x-i3wu/p7 5qCސc9? !.Oh4(*z]u|#R"%,P|PP*4H!.I_ ZI’I!r9gp i0Gzv{iюD}sD sswJ3VKe<(߸b>*m< 2~>}^_u~]2zN+ujx71+ v[r'qiذ5]d鹲x,7B,ж ]P8vRЗ(Mo6'`)ETӧ9㑊La-,md(!6΄&)5} *\idd֥Ȕa%::1'' ڬҎ%K!`ܢ?L%0j 89?IתF4Z .DQe+M-7gHb`x=X5ePu e;n.k[sL$HEZU3ʒ8=}A|亐H~hWOe?j{#gœU?4xJcb:WH5Y|&숱 (Vf<@@_k"msIp+#2 A盉OwgN>Ј,ԭ뾢@6E q[Â,0`iV}&(Ң.L٘*h#N =w[K"F]l& #khD6FlZâ#"NMez

xI>%w2lQX{> >v -GZvvL;#P[5 X1sg9o:50daFᐉ IcA@k+Krfwa04R̬aOWj wIݘ)a>A6^"}#&b~ǹrIR nG-pHU+&HYq`6pϦ); tBtX.YB\puV ՝V<[ kse w?-5T)J9*RZ+UQ=X)XB5ữaO=EW;=yLD ײ乕I rhZ8uƂ3:EkP2R:+R!v1p A) %V@ȑ&#JrjZmTD|%*lՀgx L5[R( *\4\%lԪUګjZ}b ؅({)ekHci b%ű?BDS /[?O8Ǡt1|7tLƦO).H9](`|]mlgxs񻚲'>H!ݝ)"9IeDGPMdv$};ZcTcgp_B!WI(q8=O 5)P MET-9hvnu2&:6YkT ">#s͆47Oܥ#(qyu(/.gg;}-ksk; Cq:> )i7?bG#6E͛-'{m7;Y!:]lWk[J?x\,\ &%bO\*ض͖|~}@AxKݪŞ1D>_ viK>+A`c٬LFϊL?$'ѼƩJ@KZ MvK禼Z&!3b1d3aa3H~*Heu炱L%;]&[9j;{VPՙci({&rG;:90B-Od6:%v Y H_ɛXk( 6/ۖƍXƿfJ˗L}(B][ JmGr51~|Oٳ#` eKq,`RSnp RiI?IDU6 Kp gmHu}Mv^q4+X}V*(׃<2Em0pE亜k?!A\H0=FYRBG.Bz=7ε[O/MP=;3T6"IwsYdsV gf`;”ZS#mG"y7VV@ZQxöi'D[27",UG=d(2NLOAFٷ @PRs[܊yWŸ;MT:0ߞcy\i|͜$]c! v KA~\W5dUr m<|u1" ?#ap: o>H:gEi v}Scu$i좾*l Ы39t ^<e1qWl1vzFjE6XȘԶ @T*){!ƺM<93ׯ"MT ЂHL=HR rpux/n 3gR}E_?5+^|MZ ^ +36ѿ1'X.J""8|#IMUҰuGnZn麮GEѺDl_{-T^rsب `Bf9/F>k* ~KG[2kS]6-EK64ɠK}&I#Nðu?Ϧr])I!V#{)_B[vۋ(W0ȡHQW5C١x+T`YdUq`^ hd}ޱeVk5D.NVS(g!͙I\_,^&PhlvML:w 4}MfLja@mfqˣD黑n9{ڔ}vv݌+mA/xDI5C *|@)J"^sF 7eCGg؏E|Z~0Hz/cgLO wC vퟺ_(ڤc,vCH= >fus 5> ZcDlV|Q')? #OU Ip-ʤWqqtQLK8G7۔tc&闡ͧBm$7H9t Z+u"ZJNnЗeV՟ !dgf)Ȭ}rKO]n3$ 꿏NyKԄ`;r޻MAZ"ʭ#M0e33-(cg8=wT&Vˀob68Ւm JWS &Kpѳ@Ϊ'k0g"u/_H="&փP$8gQVD uijNʝ `r?T>kBa.CQbkQ{ѷ ?0*CMBX2|,z-gQ2Jڡ.d76SnnC&O`]:е|k焏Յ^2j\]r.Fc+#(-,d&$'>O:WuQȐTpYu09/.+;uQ+$aF8Ŋ3V#AYԐH :4im_qȑS*zT կzѨiK3iP5SLw\qhqrt; ,IyOsm^7@ "?)/UL_5i!4ID^'Y,77t;;y8:_;kD)dӔvYx~FPvGA~͔0,¥:!o_(lA*?({wgp"x$mBƂ?L*WMpsA. _ǂ ޑLXy7ݚ|ʡE["*;V>A!ߟÈ"aҭ*+e e$tE8UE tz$ZY-H&Kůw ⥛@iXJ1uv*XNY.G) 8]nd8dn4c1N% \R?S5-98.Ai̙ᜡ~OkWt'I-qתPF7Ii%ʩmiRV>LJmtteW.D3JQ ! nia #$M8-k(+5)2 ΝzK̜ٔeS@g)DiwGMuѽio1Ly;TpZ<4, ~LOe{P3*6ظ,M.w'1vG^T 7*_hFI"n&ו,p?NAQI(ɂl Q>Fr OA#y}]pB afeIJo2AUmj*z%IDF}dD1-ijn q X_=ev8{۩# gfE J%o.ZKqjLU^yG]D?9Qv(;ȀLX$_ףC7dpnㄯ!Ќ#g9}"w#9'-K,8_9³|LL7(Pd>{uMoϰHTMPJ :;9Ge)c̭@dz>]a_-N.ѾP"W=:Pm2ϺAjbkƆ';4)nݲecqCO4%e:5n=R1srQ3)A~|$v(‰<73x+jFZiAgCeC=wELƋByw& bӌl 죔8p W KKq5[{ɓ`0w$[H( c7SPmƛF\"gҦhg<<۩]}Fb]PfV9]xF%%ҝC3N`+D`TRBx#?{}1@ye^ey[@R_)$"]AAƵ Rʹ:U%k:lA0oMpz6h<9L #"o}e눚XPⰪiN+a{Y8nI}ޟ \dGIoF>„w;\5xVNToS7ꮵO  /y›(PAjW4ug_ 3j k8+$jy@ x'tfy yz _.}m1F*̩ iC"Y%wn1 %sGm c``d ،Czk2մhBq dA`I0nEЦm&)?T,-B-pbu\L"`O k&%[]#=`w3r0POz'Fd>o{r受'Q)JѬdlG:bM 3Z_Jr'wiJ=Եoc6PA)&aUc*ɌA29vaY]`<ހn[ ۓAw'V[>'KP*OϔSe”AKtkvdt9gsIk<!c輾aޠdl1\aMt UB4?M#hQMc tBwCoY ʩBJ ,Q'Dzya4tTi?昖y "ՙH`YwU&7GԂd+ b`&''e+.t[$t?cfSA^Jo)~Rd"zCl%$ݷH>~y#!hu&#tq+`eWbP~>pC~Xѥؔq"V#ha>:cojs/ ꧀pmW~ނ޷K&r뀚Z[H&& }(`Vm y'&nw%s i~!^vH!a_\<ٱY<5WGSd㧣 }q\p<_Ux/A9W /]I [rG Bo( {dž=ku]SpVafUKDjZqm܋cS]<cf parP%uG볦꽦m?rMp^weQI*,oEnAfKXkNPQ˜àð'>/ +E:ӥ˖vah;8$(r1X.ɦhm Qj)23.;mOE!RIMۂ=51xB9ΐ,ӯfgtxˈ@;$ LOG˿Ly!/L#E w.t_`D$GDvD˜U݇i;$Fr >-]{MZA#)E>91:mR0(T%Bܙ{V/#2ŊD:N-QOa6S"!OP*:ur>u ۛ2/u웍|K-P:9|G?dmB뀳@׻-0*݉ю((S?Yղ"!~p9#JGw5F2QcªٗȉUE|_# -z'n¬R fF/)UWG!wo05YЍ|Ŵ]_QC:朇xֳRYX zS2p-6.Xf8b6-BrMc\9"OCx(N[ `qBc`B:JnfQ'q~jA6հmHDb\e۳h^2&h u+3ƾ^顋8=,:^"لJboF%%]p ,Ku;3R[[ ,IqK"NZI-%D+KV#Xtvt0 ]pgҿd_H*6U脵DSh 1cP5[i4ozCtXⓘ iRq΍?Y@qm\pQ){ Gv0RΫ]5I1۷kGzګ!cmeIcj;/ MUAmYn,N?lqղtPRj~3'"zo;OH{{Dod 1"Se[h}g[w}S%i_k7(njY[.iPdW= ~ǯ}οwo{CBkJ+rxtDr3Fq$M%":'Gzdv`tĿŸ9= ZoŤJ8m\}&D7D,??Gb jJ3Y]{Խ#'-Il~Xj֯(>|R&3 0w,s7K! v-GVdΡyQ(C~-o՝HF }E=ky(>PN>~ w2tht/[m&W]А,wEbjKS߅hsTf4 HbPq%EV$8dpl+E~4auFiX\*㘤- Ovb~e45]:Xݙ,jTR:Uk|;SL0ZXFrVo;㟎1AڭYMö~`qJ{d́`#x0ۧ5ɻ*ep9DnHv;"ZxFg@BUe|F+ GY)d…gJ^mNЫEaKb{V| JM"}p\Ɋ?* Cl0n4W0{V+yȔ2=8RzcP3ث5& ^M9dx(& BMT.k),+"&HW~$$,G9jCS):_6Yzs" 7ѓzmr@RS5MU3Z"3Mv@oY?5̨5Jr/Wb`xPh_k-|7KĞ2^o^m "ٽ7,!FñԓķT`uExbQr8e%6iAx:0)J2^Gl 1>Ƿ;A] OTF&42{{t("-8 9z7}Qp0 rM5(w})}۱MC8^؟JMݷ|S #ڌڇs=&{`n'l,a"h,[aM?$䍇5f Y٢qC]N [ڋ5K`T%i#Gl/c҄Ka=bƸC@s8=5̏{GɊ<7Y ]Ki,fk ݈9^hNBŵ{W_Y! QTl wk(WZ,F <]K0?u nrk[( j KJ=3`WQ/Zm'S0*q5 !sjN fɝ'c &-kC:n"T 1nĚk?3frjٻ heplDZ,_cr:84GFu @f$kpxZ8:g\ώ&_>Z9nuY7]\$t>̜8rd;u8'&>/ /7JiE(홖 ɔosNw_ђ)}OOR& O9 5\1? YDC#bKj5ljboy<5u2,@ ۃseBU ;t3!,)gmWݙў/]j%0Yт귥QkA|)m.if&B PZԸsvӻY/:B BJi&3]yX.vW#X>̓8_JEqYt0d8'&Pg_6Ÿ4i)9O3k p F8u17rYnɂW~!D"MPҐ{%T/dJeH+^Ź\8X&Iq4gփ!bY ea٬T ,L#I#d,+. :3caf^9`KXy ->jeXq!`$Pb2{|0|LC7kyq $ JYI:"t dUCy%٤ .gU~4-MS&@tR:4³ėODRPc0hVO?lk(6n;,AB! Wx{A'q0ă|TJi~e/uȓ 5w͹lԂ4Aii6|O7ȼ1UHkbXVD%ǧ[CimR_TuBobQn7 dd! ,]gϳylRK:je)1[ξf$tUi>P|DFy%9r ve5U"JgXjdb!3ɓ%D:t#33p 1GQmj挢 >_5A2mWy ᭰֋紞8W3#{=5oYDe+z;iI(ê% *)2f+̧W/F VUlpe'iy@ŲeF_ YVL 6<39Ymߥ!jTNu#lqs ċ`IȰ;d}‡sBӆ`OB2YN-i?(:80  [{ЕFt{4B''sV̈́Ȥk͞5*9H}ͨL ;OsR)<ťPM)}x~_r5E$RJs!%M\C7BN0(!m(3[TaLU"~]l/Z(a=4 l|nTwFr@ESl=":\N|@z+lSlDjrk&hWs#p=Iyuled P惷&ae ;縣@@/y8)WHגxZPQL w|44 9e]0 iA/hd)k Ky-%dma3h92FvxGQ_}<†.ӷB.|f*~92:y9ыBC $~sb%߳;rs%[8oGXv׼~,Q5pp6.rgR&aԳWaI.$;3S#G<췃7NHj4K7QIHLE39`"ő q]) (֐2̗Z.L{ =v:Ky7|&Pɠ82Ʒ\OQ`X<\%#縆g ^ w~x7Ve7 :Ylo²U4#jQ,]oT[NdA!Ms Oϧ~0f%^SWʣ.VܖF2ܛ7 e93#{rgn(u͔4.\d`( `^?w`8o[Vuh ~@ߗ^KNшhlHwyDqvlC].%ێ9M:/\cYxzu̺ Lj Y#SlGu]qhQ-sJkmp8R_gjAY`.|f 16˽j h̫%\z YoOA.Ydp 5 W6淛4IW`{ɐu]y]m,/d_ɕmdtV6!~O (6K{x3MLjN;a S^avKA%AXH\zAxh+rp̟V.<لT0&k鞜i϶K9"sG_7 `P}*/?K?.zK8-Y*(W-vX[EY~}Ϩ!#Q2k{zvg:_eU} y1ݒjgc<֤3*![c|R?0&mG%l\D e%-s$1.@t}lnciWJswyh)ydJw _VfdmXR!IK3q ^n:9rc\~8.P(<Ļ Eگ"!ϰ ?2!p-4J d`K-f|@ 6n#$g#l\'aIfn\VR;Щ7*%'E8khKS `\X՘.4FBn;H62Rcz+S A$|NZ=t{y5oL#hHqʈFʞ!eT5/}j=){ԫ${TVo{@1NpR1o۾pDƳJPw{(7mvW"".2q `(xUc)4:P.P_F"6 ;F\&.&w%|ɮt"N7(brC2FfX/Dymg^fg\tĻo|ӈR,``uri4CL$ĆՄ^n.HYJN>HaSnPuJVu>YP jٹDHsQo픑s@ǭ۩z;ͪbĬ3}.b?84~%bjV#YiG0H4acƪj1\(.%h8yS*HC)3+DIQ-ԙF+|sgn~k5͛$m+ C6mwď@G{I p ,KEt_ (=]2iUM8灧?/Ʉudu%hmGɗOd<{3#ڕ|i,7B7֙߷Y '=v1hWB3@~ #c']T1q 0ƔgV0[y+g7Z=Ra Y4%?B U W2 |4C(~uf d4s#V qPYp>G.55 \vҌqeisz$Bse{``cT\OM[7i?Zt>[iBD(бiv οEkke:T5zF~|_V8b 8hBI7%:n}+A+/w±x緷cb"ɿ}OK7Uo+c U gWcfКrAc{Sn)BPbC]re!z0L, liLKyjh4vbL1rR9~N?R[c=G&8^꿡+I K() qW,[N' N幩Rx0 oXڜ;տ 'H=S“FP+v. 宼-ףXy ҟv$%zG cAqq܄A\/A?4s&\|,VnBou7%L1:7_9: ^wanQ1" yYR'krU,`Ox&r$(,4FTDxo$rL|#M+dS9q\5#J8M`g|7GPo * ZR Nb.'JR$QX||ֳOHlj~*2Uk"J(䄰h+h^t-G; 65 ~_3+\:GK 1"ͯdW9\EaP)y!#׹PSQl&H5(r&uP ^w\Αd^q"9^W!<hn%znGmɴmz<{Qvܴ+gh3^%*l_ُZ,'1K|kU+0q4WŵGL:x&7ZFE1IVv)S&@] }НBحVH]*Nߪ4<Հ zA|֔M_'xya:$C\[#Obt(ƍ9mBC٦&.Vm~Ȗls'ha5^|aʩ>N7JjJ\'8§*fDrj{5Tݚ$gs#@"eWxwG iab.R/6?x5UxŸ&1)e5#K6ݩ@-u|j~֟mOY] 1*Pp0|hO'+}PcWb!.'rppEg^h^ Bжk%/@Qltև3G̶6aE<}6R<^b*pȁH `!%pA2btlKaFрY,{ Ϯu1lhsH(G & o%Ȋ Ok+Bp2OøӓIϭl0 0ߣ0%riFٰ6aCC tٙ3sbbc^x /ZYM?nYM2LْJL12ש@j:`Y_+!Z_|Ņox:=c@W5 rag>5d 9GekK~H7=zH?LHv__ܣ}trh{Df, o+;z/{wҤKVZ7XjkA؃-[ apXp#Z0VٛEoET36Z&z3o>3MXDP`'MPH-x)^E{ZPЋ('R}FuMz6 JYr*mZEF>oavRS5mjk4G)Kqې#:CVw܉LuN|zq/ ox+4IS˦C{U^k~b?!:N􎭠RåB ~zqnG6 ~Hsu-]{|f40K'x:SkCmj]1^$J?sH[P }CAnEC@MfIO1L3hپs +Ս_b' >Lذ7ytldmH nz 2:˛l+K )F(zƃkۣv"$l/2R@C{ڇfOMtUDYbB? HlIFch4%hPi|J/W,3D+WHJoUqʌF.l7BN׏\ =,Jp᝛xN*tm~}Tz ά$,6X a ^+eT2ŕH<~~!kˠj8PR-Jڸ[nt!Rd\!kWiBj] nnJR>oN(}$ٓ\jBZwMjy#!\1xӜ`ٟZbDX3bDٗ=3i.Iz?vFD֭A Jgx&8 ZwdBq-tȷ'ǫm;f,J?SpawgM~*lLx2l 3d'Ecs#XGHd9`m#2` &Ngdԫ>GM拌OP3 tA+/vCR-o[لbVhjq#"49W9h#_¦ W/8P3Qu5Vio 6e'|_m0 coд+[X<Q益Pw0AROm3ϏwwD7}%Y6`]RP"sT-U!úoJTOTUyh;q=i*z"+^1.笄ֳ@lbuJ"+ ^xH"\͎W߹dHxJ#0r5df\4%d$0vR;]|s9:P5;{ۉۘ?E)_=AhuKFa7\ lN-$fj&g<;ր`-]FLޮ )xZ0CyB5r):m2M78Dx6ԁ EÖ UI qtW-ˠaa-5P̮1pf!4(8[usrxj )1C0 .\ 3+չZVlWFggg_en ek yL@lta޽%$|uQ{׏DM7^lrv?ʝ0CI;^B7ʍt{z-i`YB6Mq]<Dr HLAsTut7k˵ W%'uY7 ,.{ H,8Lz1{[|_y}2e4:no dK(9\j?$R$fRP?™28^>B/r6ej 8m0/䶪{!U) 'aF9~ kvdm~t;ʻc%>yh_de>Qw /zZv1Z'".}dZi C_h+5,M߮_l)(RU%L7JgR>(1F ]DUѧ~"˸H>3t\qf`'̸r"77؏ؼrc!\YD"-FxH`Q69K}'اiݰ!jQ xo<f:מK-V}.Մ{EvcD7>$7<.XYW Aѯ>(/|SKܤWQa%{cա#(,H:$Ӱ \υzru}5س=qi9+\1?qh+WjKl8#wJ,jQp79c½UqwЪ=sxè ?\a?dףl=͚ ZEc"X_R1:!.b%i${Ku f0S5eح, sߕ)7ڔ!bLid 9ˆ<{uy͜hO R~w 酓bؕgܶ0Y^ASHj%B$LṵYnq72.(s0hJ85rJmxBP_܏o4)4TEfaL8Op(қuK)^ov'N2 4Yɡ+ٌC9OEVh)hw'ܟc%T@9S`ʹ~?MiC H\˸6F=wd"x6: pVSi{i%Sa:-#n!֚i8ˉ9(Fa#I$RI" ;JF&8b,:{^0AD"uQc{oW+{> tvNBDVYHuCIl{$q@G L$^ 1qە^lZ>24aWh aҎhDywkx&~ 8dZG/pl7 = 6>P3E̎_P%ʁ+E2;\a0D|.!"P&@#闛ѶΈ$9>U4oֺ.2F]_܇H&"> 2,Ih|~_U;tKيzѴ5r =\g gop`^8c/I`D( YI; C ޮ@efz1/“|%h2'1I:ok TW0_ˡLY5 zITfaMW49aVӂ-ikiRdlQN-)锇B 1`s"{`hNHJVL/V6Eq#ENalTKKy.cA6e^({fLퟒN2us"6$M'59߁ f[,orJ6 "=%LzHا `tn(uwIqE __sb% ],s}2bas"˕>z[5V+?>nxuzlz__Ȕ,3_?.vQ>aX- hݠ3;zuXQ(uOT7yfzs#|2"$a}$M~j޲A\{%M BE6a܌l.f,W߅Om&kD%voJ}9PMߔ^7Գ{oEnA5i? *Emvaj (n QETF=%ʡ6z}8Xn6{d!o{z5!>Q\ldfMZI*HLVJxm@}ŧ]T>IɅ~*gcLdwu hໆ=2 |V2U,_ ,urS; "l|Qcs3#b9vBFǚSdb}yʃNN"umɂt]I*kڔ9Pi춒BcF`,.=r@xf8GEGcM&ra>n߃e!7Nnn(7X}qxNܟu_8ɘp=xD,+cnߙiMXp26: ~>dQemUy*N »IxR)h%܏$sT39w]T̠;53~\}ԍ Խ.=g[A}\85gqX.xδ s;{,2i6K :*BE1D"&VP]褖[#j9U6/eQDF/S'$mYMKޟR SGXAAJ"bc[珅 UVƥwU8=n2r^|I% 9$pu(*jԽDMI"al|^5پETnvΤz mv;Yb.I.N7ixw=oez>:]&j80o. lQ焯(ǿVk)ztPq*?E3k7C]Xi=t'Ӏ(`z/Uƶ)fK8hUK!سnrˉ}IA H n\.5GSRݝ]q gN}o"I12f6L$6B\4g? 65bddQhy9JB.(}8o$V;3 (e51YWD9^R e,eZ^B(啪yPLlP !ϝ S^P]+i % z߭sCTS2*EdOrN8SLm&tY\{dtmQIbxɴV]qj':VUdgl~T Џ7 #_U׬ྎ {M6(#GVB~˘\l>ns$D7QC0}*c9^bBAKeVrPg^yaȘ~w>_;(C 0u{0Qi)J`*IIdJ\WLcj7f)V4f ם D GC; y/MCacUb*bߟP&l'Հzo[-"?;a1sۼl<_gt qw4ͥHitb^Ța}ʧGRDE^]w =`~wL:1W}݅]9s@F,yL9)4WVb@  ;X~#RþHj]TlMejnPΰm6=0^k٧7*{)~Nc+AO{&@l^]wbUu$0c.r֬5}yrN(Fx[Gǵ$9D0#o BZ8OTmgP!,ТkcR$Y1$'B:itr]\MMĔ%:X>ںE1q mȚXIT1 2`?ӓ" +(ṋd@A4Wb6z^7е)1<GLq(y9rX2wzL(N0 ԤC!-g'O院;;eAz9=h+gxG}.9ڟG1<`˃ $s6YSZ>@^"㟗vU>}!x?@?1CM;;Y\i'+4 Viۋu,}Q7~9sIŮڧ FcN,T7Nurװ\H_P0,As 񴘖=L~Rq cQ/Ws=N%^Kz5qϔ14@Z<b9nY!aE >R%RSY=G,8m/PE ]O6ìse*d13T9<$`zA;uɸ>GOz̹ A |;e:$wA96n>_39;5*68hUW7 c7/rFBS?fx.*6M4F//| 𞷛g@7*p}w^=,Ȩ`=ZSFc0.cŐD!-:؂1tKCEg8xRy܄m%oW  ,Ȕh%1Wj'TRpto+G0r,K#41æI+7Ѫ`/b<}HZV@&Rٌ# GDpq2yf?0ۃdsGNjVdYX#whd|r[g44L)ap#+ 82Q<>hB ?oEȖ´ҡzӛ CvxEFA9w H#1p:nPYx2ёEɴԑ.xsylμQŊ(}2AmsKhǦZ%=MOе۟)Sa.H3\r~E_K늞C g`L @4WBTԥBYartrl(jLYے5 ӄ2Xa H8qRGr#E0?9.-"/sCnY I}NҪ8,b,{LA~̼Nx÷n##~%p*!00qAe;@hyP k:<Pvi{ɂ:Ŝe$4ep6GN L\?Q"y,u[R0xdUKOxV0Vd~h.wM4*Ro3hSI1oT6q 3F "+'#ס̔Uzѣl~,J24߿KLHݭ娅K׌K)l@ᯔ-< =1;`"E 8*(;`aƎVANYxX |z}9 ۇ.`,ؙHD@ILߋ^͆4=I&0aAS"Տ5[(K-ś7&#hj͖j.HMkCRAt@@_K^.C\Wz8Wsv8 [),6Ob;}Z2(SIzUj6LmW2Jf Y,]0 qbV#Ib"sz%`bج%MI(Ij{dhC2F *Yi7h?:85<Z)4ŵeV1J"JptQܞtV?28ji e>#ޔxa#@MՏҋ-/@ 0HNxH{,p޲3mbGz lxtۭZuڿ5["3TK$mOMDT$B'値Vfݯ&{#FSN֡ vz}7y"X^Q^&DPEEB^M(zFM#̆XŇ@WlIPiկzԖ'tۮm2npɅ,V1W=B5un.ɇ=?ʻxnXvxӇx+\<%ӊX7Żt"c *@tZ 6ʯ0[vA4n풯Fy5!,m'(2^li"ϴ7dLk#M”?JAp/%9@d6 & h3Ϲ @^$Rёwꦅ+ұLM|XRz$فYmtR7h֞ٱY?Ϗ$)繏btun4"9 ^ѐo[8۰DU?'StqrqDGL2cXmև?@Ew5xa>}mK dż*}u6?yUbU2pH']+u(PV09dtY ?\c0ʆUlX;W^v6dN)Q@ASb囦(caˡX {%٬γAiErEDvAEkҢc:]aHVQZsz]<<Եy܉0c揎"͞Ww rޯA_X34F^QuUu9VDfw[~)'og CzFZRNw$ {[ M˙4{(0M'5K, 4;?Xݧv I$FI#'jٙE7.W0l6۽W OܠuMCe XlבD(`oc\C?`@Bh}W%Ip|6R =8(Y(~FSU#}vyDmFA{^!>1 3tUR%b]"6x߉ ?,0J駀Xy#Pܾy++X v@2uM,FFw_"xĐt΂& TS1+Qe"bI&56O^QK`c>7JҶYZ)\fC>:"PSY2 cZEq<({p! PiQ+S@wlr0zAB}Ysy_oJA.UNRmV*k"|[ T㯧6p~ .7{ubr+i!{~Xa$otȢ¹]y(?Q2"gy KQ:\aTѰ%,6rҿ|duKP }=K;zN@B,9@~S.r טbW]>,a{/oLRO\DE3"%CEx`5SHת Ns #"R1@2W`p-R0-cW39eQE1 +P{;CoȻHޯ : 7/W0*C3 E`+.  F8ۻo| aq{ RTc{>tv'SfXy&ȭW9j_ cI h-#a gH.%j'b,y4l{7i~S>>B>wh B?^eDvZmUWj'-…-_^Qv煚5}vɭ_4{>q']cRbNӕ/ fç (kHEÌ%hܒ y,r(b_HN9<d \HȐ%\!2f]g`32UfgNAF( ˫B>u4 m^IT 1Fa̪YޘD&sFHJIVeD#J8T;<[ ;?"h)z c= ~GKWɓL 1ï©4j]xB|%^< JVot}6SzHluqcqo/YJOcTNo]5+K.2ҧћ:GΉG2vZSg+WeɄNڍs7ԁI|3JYLK7E쳅DP z6'JI .A ,ˑ UW:@a0\dBUTzpآJerQЪL$Fupy,*;^\yy3y I NqJM锉-@lKӬqchSOhۇ5}E,QG#jeXdV7|CI~dKSĆ 4FF V:D0&@9m2KԖ|͍Er.XDaLY5K,enNj9.OD짷I̍VԊ!ڔ'-FԬ?\G[&<,xY=zzNኝa$Tij[&O˦d! ^UtY^k<{(b5$ T1:?^Qle:"=0+1ʁ5cQpxiL}$Q.$F61SD!b_tzOMSh%!b R[zP.-țJJ2.yXd外Ibߺk})E<7CѨ>o[iIZAOذVQS1"۞zoeQ综]9tǖ[FE ϙ88 <6v;#y;A)ƸňE75jG L<h5b{ILIC}WGy[B=x b5M.h?lFU^ArL Y-7>ƛ[ 6Fycr-5qIރ!߲ȑܳQ/I~,>=LNTJ:Lssb,F3'&ީ T=/BSEEP=%`+pZTo@4F %H*r@Q y7򼦈S #x-Khf'1x0RX=ߨ"'gQsfRY{y-撮xJ{bJd 5KvG1GQ4֨Џi)OtK 9±g,ٍl.$I/ϲ5@˺pXҏp@Wc;: ʡteگuR$Rw9vC%fdzv"Gx%DJc1>v[G0p9-e6?ԕzʧۢ;8ՎLڇ+c'ِ=ɴ=śKU}XJD j5-,8Yߔz{dNH˹֚X]WYcc 8oৎRs9BոtP6K$q#[X+Im3U9w`nRH݅baL$x[F-C>b> tg>?Fƀy0a *Z8JQo nƆb>e]?!11^8# ãt=ƭGl1Ar t[R!Q2x<؝" A}y+;Q )%^Sz1:_3x+H}<*[5GZb*{4zny?sP)vhYebo:J -A:yY.~w:~AP+Zwdc 2%vNu5A94o m"g 7w1r@EBB(SY-JB*NL@^/B4 ~ xc5uKZUGuG}hǨn3uC IZ^oZV>AŃP]Ht%ICQN^*27N_JyQjI5pLM_-;gî'N+0:lGiZg#.Uό1GSslât?i);S=_Nx=[[_ lݿzKEjuљ!H$jz~GxGQVl|&r8; ho3/lH=ڔr1Gl'js(k\@qU"OC.t'oҾ)g22UR?Btvˎ7TJ7 <#輱;sc,nl(`7.ZJ-:pV0Y6g"<|ITZ3.e>> \&465ڨeC4廬P۷ʙkP/惆H5PO\U%>rt/N$4_bu)B;u 5%kyaKrݝa,7B=80ǯc7iᠢHto#kHhC ֒+9~ԸziatTn3j oy7,\,oR N#N2Cչrpu#kN-^i\ %m\vw|=*nN+Z~)Bg? To5P#[w ])lW!솸`U,@P]EW~\(`W:_FN?e :K{ /U#u??J68^ `$e$;L4a>a*-G%RssilkČNbMٜ$4p4jcĵj 穥n%V4ewsro`YR0[ j[YɎb2 . vأrE\_mАsgpqBF4 4}+ϩhٜ߰ȏH27Eϰ[}iOH7Hj ){(I9( %N>[z AMn(5|"4} wjZ3ljVwE5L̿0v\D%H k."tCs9zKEb8'$SE.ZcWRSlZ6'4SQ}o3J `KhÁ0s, , .X3>Jn뭈Jt…4 !"x3<NͷF5Jo^ɚq4|W3X#gY$&M+bbAŊ4 Də%oa%)=׭QOe0XWdpI!*uS 7V~O6ߓ0ڊ9|}؛rRW<-Z({䅆#O%LMnM4Wp`_ .svA"ۜu ųtfF&O}ZCSƀir(2B=NojDA5$؄}Mur:":.& ; ٕ&J^: yJ!a&u"3STKET%^A"$^e7tj*uozMLE~ ~jS_-ř+%3ΚuhW1W%yjzߩͬ7iju žʭ,/|+r1c{WHEQ-Fel 5O͏Sʲ[}?2ukڣs83߬s`7 (0MMaw-lY ҽ9Q@x4D7 Bh6 շlgU¡S_|x=uJlF,v^8IӺq; dϟ·PъM f, hTl_\QCʫ; θ)DI#NS~wt4$V@N Z^LeZCOY'Y3Xe4ۣI( ;m(O=HaK 7D"`#? ?`SeÃkƱM7bMa ^ZBJ7!ATɔ<:rRިtS(.:o&?]G0mnf%qK# NYZ#oE[#chzKkX1>,-˶],vŒ;zRwWB:sVrQKN`#_9[/wi|<x/6QL[xNJҫ$HcB@|DT͉-e9::4VgD7gU][s g}@ksjO^dώDs|ޕ=rt/XnqfDtǮcv{3sA. XS۫q\m5T+yN Ο[_M姟衱rҘfP|* ߗƯ"m}x".7D?30(Wt5ßÖ?!Goj{_i~yQsÉgb2wv6deIiHv@}ӴC hK*$M:]HKGֈˬņ!VoMљaJ,Xͷf(O@&q膏bgQI Ή'==ԉldG?Z|=< e#VU:{"ytm 0PbVl?u,`^؊ [PB\"0`pYxPL4bxcC` { R {ox٨޺]|5EPi AEu.- }ΈwQd #f_WDB I: }jo0yA7!>$uVX%﵂z $hKe>A JM-!iO6Emgw}y֗3RTqƕm^))s )h y3 O9Z;Jur++L`֚OuyEڼQ~#x PGx,F'ﰌww2˩>#Ư1/_EH4֮trhṐqڞxvi2j[WvFp6p|.M>167l{!U벀iR 86TAU$J ] S bA9o]LSglD9wk!ִ>',&^,L/`ɞwET҆ Dl)m C/ڄnU^Juz<\ PbikԸmZpuĽdd7A:!!8 t*\r5;-$QuEw~x[kLCuCD?ԛeDջ'ҤU>˫Ͻs[]3x4E|~6.-h@D<ح9U#{w ؽ%hu|+<ڸJL󿱽9IZv4ro[D %*? FLf[!Rf𽥀eGAbv,#݋I{?vQ38 <]_G1S/!oC%x*L$sf sm5^ƒLɌ5>%b,ۙ\A9hp09ї߄:<{HkgDT٫jJWs;Љ+KzKWl qV26H{AѯH\YQ/J >) %dXTF_lcź`wuԶh-Ӵfu\dC3vjSK ˇRo gn<⡏+3͒* CfJ vc+g ˈ33j- uҿEϋ[1ք=@tL;wG"ɍu%=T#` Fǧ5hs2Qat=.݋i:ɩxJ'Z[{k =F`e4n6m.}x8?Ƀ-cD s8 `C/? !TіY7,C7Y-^ed;#)^3)7j׭z^-ZG%fd1z+>S.["݇J ^Upw(K>ãB IgzzEp4_*܋lq2Y'~T-T m2G$@;0GR챤G}HZ@g%ҁN%Wt4Ά'`C>@z20|]g3ݥ]UVύp HN[*PrVZmaz'ջH9xS'BuŖFHy|(`5Tc}h}ŗ:icF\L9&%~j\+b؇\@0)iF=gG f`Qc$F%|:(k9HHpBc/3~4ߨZ^D̛b8tth9\ۮMeU]µݔ٫Y1k|V(hS^Y!Bnxm!)]{X9_@+v&A:U]|^m]jJ[tw4e˚0N:oX#?ﴩ#ԙ@#jKӌM,:2X͝K]K$߰ ;wRUe wO{׶:zke^1C r^Wi5d!;0>8H&^!.ΡmZ1srT# Ђ`LkA6GfքIw։@'6EN<juc1 Z%;PK2iMP1@ [Ni<!"Ux?'N/$.=B+?(5fKĢ^ɉksy 9Y$@uZdza2'ߕrY\).#~dR\J`W׹%YծU̇VىWZ 6s6: i񏲂BCJ9l%%>؛#Sַl:"=N}yxMFJ#g/C7fH#~M6Pf-b{MzZ#ﳇPBY,'tk`'ljv+,K~4KRU 4SI:$ Yũhݕ_i 2|QZ(jֈNlݙ=_h_zrrNe|E# Hu@<~3hڋ3 \q㬀R:\aU>."V(78KJ\x }VЗ6`4.؈iqo;2JMȳ,5[D8ʹoE={~OEzMHw5g{P?M鎛yʴp' EZƢ r}2Qa\=twVP 8IY0@R74l =˼]n|#4y-hl,.Agp; {y#ު 1`^p@o'"r*vqVF6j7Q78uUmQĿhJ; ;jmQYPV]3ܔ &ՙοAκQ<}kٛWL~##h|*@F !r~Ey]g`HC٨Ąζ,$ꁳ@J ۡ>q]'{#ԳxYnǥ^vXuF_[ξWE: 6+"Y~g_N1xt z`9=W tǴ4v,r} pSk3t_1hѝ$ݔ# >I?o|QGh!ƪ#y#nxG̷3vdd)Q8H J3Γ/>ϳNFTGmc&aLHSP|\*4@9A `= SilM{޲5|w593K3th݁{ȷG3q YpJLMHh}YIm^OJ8#vgG+.4FHhg3bw!HvV:B8?Cx E22=Ns(<=9NRB h:Ƈ,~c GP J<'nhM>9U|B?ΣCl$ʹk`¹o&I1`/JDGJ߂)q ;UJߤEˊ\/k΁C-,&t*l>A9)|^ݲ a^5:;M@^:GqJ& ĢhXՒs}ڧ.?QOYt?CnN!u+j"خ&AK6C{$8 M7b3625C8^{6+ X/uE751y8u m? 6Ql$5&[i_*mt,ck>e! AﮒKd_2Ex&Qk|kksw]Gz%ʷ/BGe71\8e$.sIȏz)-_ Q`>sXzr OKKG L;9֭5u~ .>m`|'*4lt 6Exг0lg?U@TU@'pk9^} ڰ_Ҥ]߈1tSW?GцRDCdonދ^saEh'tic~}Q̆Z7ģXd(M0'$_"_=7rOЙGMG<.`ipdqe.L~y Hx4;Is/'"s]YG=jgk zqRCWKKpI><޽P+c}ڣSD-;}} gA ɭގ~-~5!%n ]!srSDOuۄ8[*:{h2K'6 a_^ ^뀣.Y*fwbc/ߋ ,7 iA\Flp*i`|^:"OC!}sD=S$n۹~*Y{/+9NAD 6BXkFo1Eu۽Ie_J,SK? wYڔ ta"yDt6P/ák7>bzFX|wAN"#R&׈߮WgS, gyx)e?k'fMMU;,A}xz=:gHrAYc(rK-KkiziY U5e˨GG7[ A?&]oF|9a԰~pȤ'|q!HΒ7YX`L7$Fh'<_*M1dx> ;tQq!(7\2Iūsq '#~E@\L yDnT"ztg\ɞ=#}w>=THwe%Z% V(-<a6fŵ5-(U>bxUH 0HrY{& Hb.&6IAJTՊv.ATc"mzXo?_0?ɐ13nOP4U{RE\E{_vU01:uy4_(7q?1IUে+%+9'Sfh=?HSol9zLOVVnbt88`G&U +/WK K]r*E꾟V.NE^ϤN-^'TPAׁsqTPh_,34|2RLܯEsFc2O 䉵al[+Cg13ǥ"֥${z]8c;!~Dvh[a3-WUhWF41Z73Ie}71 qDzgO+ փ$ي{SpNI5zSdM-]ݣ翵`UڍA N+=v]Љ >P/h^aIZ0vy;~,+EGCj"~(c{GwjmZ̺$-{upfi2#ȦW,͵0@Ɲ:/h%HX[y]PݤQ]<;Bӊ(J+k&U`HC/KVUU=Z7)q-PToO<*933hׁl~ }:A#þnTeٗ7ɤ \]'FrhZIV+qczA,Br)ZlWBrDmCJz MA6މ#t2W1F4\ˢv(U8bD3]aL3D#'R q WY]qRTܭxc4F_eΒjKlXݭ̦CC&9rnsC`GS1_ e)Ǣo2 RzzazR-9ʠ\hwo2mbԀP@{ 0>/wK%3?(E^E? Fy\S0xpq1ZÝ(1%uga fU.hp#cL\mmj@r^j⽑/ !HcY!QOg9Khg+DrczBCŰČoI%Lk8UMyd ]G*kq(|&<=Ȍz҈SQ @gqV. Jg Y/]Uz5 OMa6׾lsH<˔Akʙ"(,1I_(goIpy0ms2l`=P^̙&$\#o=Z gMg|r=LH9$:_IeDݼd|9:H^!+ #> KOIZ"Xs: G*鱈aGX,=0ɅYk8o.6W*[>ccD5` 55ɍc78+}V<ׁ vrr".{!B[b+dYN5#Aiwƥﵪ~O> _D=`<3+&A ?)_-i6XK>_pϩ^d%x% }dZ7U .aEw'#Mp^1`o;pzCQB6l6xtH!,LĚ>`cK1L3]om 5}¥Nqia-:OSlb\g1꠩"0Nk7j.$@Vl9nFKF><>zB{3>e1*?÷쳐D vQuZCfqZ1]KQ~0>!GN0ebmM^}wfGv9gM4#vLiBgfIkD/@[{o \ ~ 4o59T._U}TSs;8Q<~5FT*Xj;d|hpG^Wܳm<غOĆƶNHf!ffZbʐv4ͣ-EVY5%IS=[[{Cf0c);!vLȯV:'?I,sSάX~hl> U*GeVpՃfZ3Vl밂ˏ:hkߏoxh~0װ5:?8aS 9 UWqzjY?m),h?HP!$$by7<2:savved_ݱ)NLE2iV_4@C( xIl'24H.<~y s> \ZzUK\p*t-%5qO:Tu6\Q )Sh|1TbN )ūDD 'Ż<1|`1ؐBT ZcAtvP1>2[~RFPhX5+8\ib0K`SK ,1k4ø BnHA1"XYtg^9&1vjC0B'+M4Ҿ女=M۲"yg9w(<>oDu9.6+o\ܱ]b#-Se2Q1 XbhEܛ-mr?Xjp!r[k@DNL6W Ը7<C.q9{-v/p ^%$ש%dSBA5f])5?*&=p>1d}"3A$`;lBK\Bݑ}T|Rsr WP;Ү: coPq+1f[m2kӇr-pK\wðM.Rs/pQptbq ^CF'Gș Σ>NHv[q-GD VC.l:؛Ť6Ƹ!hvT/dy2v J(W5B|2mA:}F63"GI|i0{RtF}Q[h&y 'J\{ŞsX=tNJqƋX#2HzvJlMbx:#yR ZWm{>tԞ|f fe=·]!elp/H([\׎k:,RK* XI:pNߊ+~ |Xⴥs&TooJ~s虤xNܞ$|{~ Qm}=̤uڴvMRe_B5s:8mllWY4YQjc*l[qױx"TJBc4N-P.VP_̠Hl?-~7{*ґMXJGb#[q=&O8>'H0ٽ>D&m,W^I5NS~rWMu+D.˅&j*2K-Pb'|Xwۯ;m)+473pxXs sGvGʫ%V {kF%uxZwԼ6M!䎱G~)2 Ar2=JL !R_ɛ̽g01<'9(KlCg)1-B4R[HS $-f#ըEkp~2.Pdzm:`@(~mC/B2O#hF܀c:D겭UW˽A݆q :yYYdٗ"[f/^%Pi+׽VBU|pª<[{^ _&lJe!mb(4Δ2-$IYEgL m\w ցx] @?@{fjH`mAO=;|+P.r b%8/"f?: x%ˉҊrvӋLJk)C4Fk-FgBDhѩ2=IpI"d:wTVh'st9b9Xu{6x$;Z":L<L`9]Ƌ򚎏Ö7ǽ*,pa4`G_WGCDQV":;\ܕ%E<}Sbן1Bƺ.(qGQ uR-TZ0RP#Ո/乎[(aх},+Ô;!8,DVj`JngV;P˗h;Ecm ۹lk2;Hݘ3A(6G=ۂ/eS]j"oNq/Vbs?ah8',Z(޵3GÃ! ĸQ Ks_ /mtY& ˸5nyQu𨷘-')鲣UלQGD:AgU ,3 ɉcOg%֊;7QX ?)KWG! U*G6K=f2]@t:Yw*+'G[ogH[} 0'gp- ܨTX2:[}g:@N,RCI O1\܄iEٖ[(ۭ=v ,#2^hք1E=3)"hl:bmfH {;MI@j՚թ,r쉆/UW8"5$̆7(+`QQo \ܺqt DH P fwhK6EZ8={5!ܓ0>!elWO?!~E-wi3<dr~ iTq[iThE4΍ʌRRJQY)Md2'GE \%8Q 6&uX@ѳ5F3H`E!$xբI ;BO6o\-T!H٘ZA(}Dlsl9ÓMuC$/{ZL_}֔Ό,b߮.ĻC?咠2. ȹ"j_Jb喚Ĝ+3-C>&@h6P;UA$h}D/_. /e:)“% ^(=&H>W."\"h *LFVARK`Yh_=P3~'^YSSՒP)bvB,`wV츶[{?M7* Ɍd5rN51i g۞X%nT@&7WHq#iوؤRLOF18 c=P9 ңП~i(]57|lkk>8+.Jdʄ[#3FYaes <9rhw]Qy @$>jv@oۏShXeMՊ@ ބ6$J a6pk^<.ZMOԮ+&eEq7&ԥ~mſՎ,VL,p*ڄO QJ:tuY}1 TniB7^yʗ̰"jkWq)j\ծ؁_#0_ĵ?o;7aZenm>B,%{f,JgKՓŜb%AZFEMGݛpU YUX bVv1 C\>_3^TFY5NK k[ORj(Lv:$ %i?n*!+NBl(L7?sƄ_ߑXƮ9,[uFkAϺ_&L"pͲ2ksӖ.w=:؍068tޛ~C> @I*ji0[TU^t&YK0LC:t%5 {-flbKeG?) x阵vU0ԛʍz|59qu&(aBc8[{ƱR,HDf{{CDsc{&hM*IҘsc˩:wkx+k-oO?f3+UQ]>F[D] $q,E ,l=Xu8;5_tݝ y=5ZF*]bd+EL{L2nâ@I T9 W).&|! }424NQ|K_-:#%n=(OQ?Ϳ 6J\ órjXj,Bi;!U )hY~lO4=Z#0c'1De뺄ǀYkTBlˬo!m7=_*'aoYkcBj$+Lysd+cfqXx "jUH8>#@s &ZӀ\`ot>'IbrEf+#ޑߢ$e(}p}p]N0XHBCtg/Js0CZ»\0YmQcay .桓eç>-.MWQ)aZY[Mį=&Ӑ!*B*$9ԫ$ W#7Tc7ޒs. ^irt{SE2yKXe  5vlqooֻ4t3AqS ,˂Gȅ O$aHmANd!/ .'͢iBW%"@@ggBanzcVĔp}Sa 3ΜӉ!@Mle4/f`f?6"͢]U9Ay2dS-@ץz~0S~ \됂uyYD [&M|!}oj8 Sy8y~'PɆޔ oglw!qr>l"/'y5Wq%}$ VIdA5n)**d+v 8 8ӂS9*B)7Q^>g΃*beKH d$l({L ޻,IAIU\6!^U*5md"DA LsKmqU4H52"׾ *coYL10_5c˹vQ@ڦ(BTT.l7Os֍s Oi=Dž0LWe/3(.d'YU&'0!ZLS'qO<oc`4$GXX\zDohsK`NY!"4;m[KR ,)C$W un;-2~ؓq0Qכ@>ҭJFȚј_v1)E5p[KlϓXa4wx7PJZT^sĮky,5ݚ ALA҄CLj 2TC!AjlMRAL2ytp-KOa=}yXZ&Sa;otEMiY7FReI 6Jx;/^X*DSL$:K?Rz*ɜHTL"[<@bok,P2Y].cd8zjd8Jܹ{&{Twڬ~, gV+KF~zĭCӜ 0?+$/ʡS,s~\P)MMϖp;)>*!C"O$4Z0-\0c槉YXj2׎TkcJc8{MuX1&xsƞD`)Kk>[t31RN?`^cEpD5ؕ1r)'YuSJG,MQRi_gf |hy;|g2 J;| *}b tPxY^ &wǃn2h5ő_f_,=;ZꟊE6P?ri lecPƓE scwՐXi_(⎴gY f,P7j eIճ$xݶ)Pk9`X6w9MՎh(n3g}8N;3q"0RK%ZĄ],ꍳ qi^Kb'PT?]]; >mV+-G<|Xܔ TXR+Jg^ؐ)D6fa1ߞ !WKWȟ"@MKN$fHVZ^E볆ҡ e}zP5+5-Ϭ}QcGx`XQmŃ*U= vU)Ş@^F%k^yR bw.9gVM_NIC/|[G|x8\,OQB !Ĉ )0c -x W-Hz}mMZ?ɕb}.klP"EH^H+ƓŇK Hl |z 9zm 0g!;%αIfYh 1T/_-p"ڜg$cr5\&KJ=|^ߜ(t3ƅ (aV!w [yd/ uk<:_{V8YN!H fਭ- {SDE=<$=HJx *'r vS5K.))n|3!gZ%hnn~?!Ͼf[ 2*=F#RTi)OLtN!JjXUG\ǘsY0&6n9an`xN)q7J$V5;AP|?u mαTHM dR{'j0ء ϣp0'K fLuz-R{"nbX=Z;t񈋇F8ؒ;0~獡pSS@';FqadAc7KҘ"-œe!@qC`C'-qd 5Yro1a Il]|a@L.X{?MxIQ>b+}` $.MG&Ԟkj& Oy TO~&rm\R WL@ieH(hws0T2"m3HJop\ JPоRUVXׯ!vb|g@x(Dh~Fk.$W[C.ýS寶Q 9C@!|?(JA|tI7؁}-J6c⦹aD"ϳ;xIko1LM@ˑpyݜ'A77&N@|l2`j/>N*.IpSMWItQ46s0TRZKf }+5*a8Yk9avbaXϚdk\m-7$X:lpI^Itb3NN%{G8!؞n *he'Q^xOy,3UXӍeֈ=wA/aAV^{t92g:HCYUx5`tAU9·;tQgDtcF9]5T/gҨ\f\#S{wrZWOr޾2*=cI>\+zj[\x$lM+nh Ƽ@eHp-W@8CMi~#,d[G_t9R~?!լKVK9S5K*XH7#O˞]FXuf l"S7ry]0Oo|)?uvc]A1) ~SH.VxaH6+&̉JDC+1vsjs`ZBU&{χw bO670Gp=^Ӣ|UV?ElE{0b7VU'pծy?=,,qD+ 9!E)^Ac|(־%@54QZ: Wab^G]<e,Xj4 x@&9uҢv–h11l1-L#MQkID]Q'kz+ #dwx"} HnL$='UYE=1ʲ|$Z8ߖUڼY> &^^?}]~5p +G42q elAzqw?1r N 95β!ŶʌDY,qCTZ|w戬N6!|(VYQB*1P ?Ն`"誈CD# >$Lꊥ@RryijS.MJ%/tܴUuEϬzԊU;86s+úz8*%Μ̅7ບc`kUxhJɬx O^ńthÕ~2Cd=u]o૜"=dcGذzcE.{:PXVTSeVKo 9aȲZj"p^O Ix\RI cnp%&I?-)ØAsx?u= s\Lr| (am/MAf?z#cgaRR;`:OX'2, IALVZ /7.>)cMH#%=C o>`dPE|<XNs~8_tلCls_s>_8GHL^si췄=Ӊ5>k|PE3Z^v 墆>%<قߡ>\DYZ=+7 w$HŘUD1Z.qn N1[W<\HFޑz`.킠-B%? z:Kf*NȹR2 Mx|?uFɛ:ALYw$ܒsYW0$:pC^2uveEV BÔ M[Ө7"#_ܛTG@滸b#$r#V>ԯB1zEO۫m iIU7Opu{C;Лu*<O D4W~C-'꥞O )U|_K4ny,gNp̗nSRԠ%+HԠIIvXtg kfag+D8FܝZK][|3L CpY.Ω7A] ɚIߎf84E0]aV3P*XjlZ&!rheVH塒 7薲:XCIcA ^x1Q:.?pqOEMc||Gf[kfWi@嬚dEh^Bkinn57$(Sy/?E2TY>RD+[f=Y-1毄iȢ8#MIn) rt+рFV^Qb * A*l% HǭNN*j!#PȌԅz/lr"tM :Tǀktn]RZ^! QA$J^ϟxcqh],z㽶aC Cad4sY< + \ѭtɫ! _өWaZGr8,ř .R\ePyAU)gжh2\BrdorIw 4F 8sk8@_Kz_H2@C!,+HDDAWXAp?vɅ 4ܲhT7mgDa||Ks?^."n#sO ,j gX|DØɍ?5[GK^mJr0zK3sgT%!S *EFlgK X@5 E(;r@f 2QZJ~S.~~ʂh%#pybbaG*VeGƦ{ل̃6$A lMMpwRVf4sS&Vr,oW+:~wW$;3ip,g0I3SD'VLõc<÷6ۑ@z-~%45lw~Gg]3焎:$g(;= WStȱłL(2Lщ;ltȬBi17ipTHK.:z &LxV(ZW,*A=0|Fzv3fAy(A&\9]݃;;w9%?Ak0˦!(=0Їbچ/ ؁낃'dAI>)[5u5Չ6a,L7W~y{@ռlSg&P mpe=P?e\Hmuǝڍ"g -u0ПGdd;qvug `03^=3*p0,D!|x ,!}+%3cqRuJ'i;ٗ&~ =<'k HHBhUǑsXBWwT/WܕsIHvmct\뺖.Gd UPoa 0T,ĸִ 5rfs`IOOə:-$ F;(3}x,l3lɣY6*3vsub:[Px !pk\W^,Upz3['>P~Y-D kn |׈h,4Ԭݻ&0[`!ŧBÞ Hg#Tx5"o""6x!=]ᜱkV{+j^ewg>5j:bjw.~| (`7:(7<(>c <Dj>벴$_ֶ=} ^rH¿B d {v p=23^Z08FLEg;קD>eT ZE#i}Vyu &LXG— ΏJj@*k+ h%35^cVmC_fN5K9ycUI +㨌0d!.;j0j!#[x(8😄b+y őxVRہvCr*uIBҤ yH8 8ɖ9w=).Z$W$q˧%d@qһ٥D(afwCȪThDk9 k,<"fؕ%NW`;$U4)~ʍ<:U luǀ^&FdNvD•?wr`Lp^cfF, Q4,د-hKft*^EϢ/$}#v*﫣+K}TD[1WjeYSf= ;9|oZ5etNM+ޣJJwM䑛9rń'μ"x1:ݘ_K 怣^Z!@weDk9S쏖6 G=Y_}Bv,(-yA 2X)|MJbѪG[6 Û 8~F%Y<׀RxH~Qoz )%t_ΏEhZyɨ_xY"9xh76Kf9#&B,Nfiٜ}9M(N.\3ʟJOQ\Sdl}z#cH:\_rm~A%e Qa@f:NŐ [ݳV!Ύo\ڕ0R9J7_F9%_puS 4!#@TB$RO|d<^KJoTc|T]hjMz430(#rc;:'lVl+˅my;{ b,j&m }y[2N-7lF^anCDbu48G:zvY+#Æ>}-'1!ɉv$"\xR2/Afmc]S]CJFi]DR}eUةX<-2ua3"xf7~9)uUFi[]1ܢhQB4,$ #̌*A^wT︠͐ӳ ~,*2FlyܱIe3D-0)g<ZG_uQlr ce.ufC?6/6F/T+/emVo=.?prn0ny||t[h /WV=ǫ艜Z6z>Se3gNR16wJN|5 Slyfl֋Bi$]$ܯc4$*~ЛKʺp匶fc^HKzakK{9AQHyb/Rğ/idKCoUzZQ0"l.3IC;](yY@XGmq܇^S|_70,OFӰ dpyy®gvO^ * ~-,_Q[ 23l#0a$m^#͵\ Q iic+B O dLzJ[OSzDYgš#*Lbk=x>BEHzDi>"8^im1*Rs'5WK2^?s+1F^MTDشu`Tn1-a"ݎ/[eȍ9:e"4B+vypSyw4o؄hcS6nYʻwD) @ʀ@z,Uq|=siR"fJ\zʃnp@\A~(.KG3gE K2v8D Rm;)+^"#5{sY8 ,QAnjt=?|/#.Fg0 $Հ"UIXv=O黅5!w5lyq1փo{`QEV /Ѿ5pD13y`y]twJ%5LvP N?tw@ma.su _NdOD4KԃЮ=aaYB*%=Z*BĐ5 !G2:~PUDqrBr q"+@f%1/'i"$@d_ ]Z^$n qֵ1, )=/0 V*qb,A0^5\v2=n3:j>So>b%: b=Ě^z#a=N"蟕3 #U_܃ARd4lQ4}$TFJ@f•̆zsa}!9Yd8Y  G= іyj_ Զ}:x>n?bC{'nOvg|^vgqhuцF? 8Shddt0RgQK`רHJ 4g<"^OJNY>* n^~C<*TVEZ 48QҪ&Jub-ۡt|c6&˙bӪiX]>q=\crd^nw:t3"PyTQ;Y5k&muF'tIg.~0Pb \HEx.xJ{yA|;W\ʲweuQ MjJ"6k>);2|&]#ʮg2- "7N牛Lb+Z jDͶ,!M?<Ș!D"P_;p&qj| R3 {m>{)/ޖ+5Eb\ن_+Y[#E}zgA}YS۷L$k?hPבfiL!!+( 0qIm # jY q8w%j}wޜ]υ䍓 o)Ldr~ kP{M R]qϼVfIB[Xaӣh SIcb7 3T}MCAT9o6$C.r`QY. iMC__97B@T\jL^Z2zmoYh.H6ީ~Ba^6ծ\T;̚ӥ D( GW0p(g?@Mdʄ':D7{y_3ZBiE D Q˱*[3qqicNL} ! 4Csng `bԫ%l`5ܸ|t'w C#|-_Xӂ+SMShWTx- ;jp&(7q\TuzZ]TeCÅ.i/s8x>-NER .pRΪ$2ӝ4">|h52b}UCigr(\G:> )?E>91r2:Xwc>֗;.Q%F8)01H]n/ozL÷Owv7$m g4\')Ɨ@Aats+PXYUhj.g;z}] ^ &׳L_xVh*3-CXU+ Dd;$bǼd1*8LF Χ ÑzlRFC1[+z/51l8,5_^{tyf1==FަD#qP$˼]a{sɜ/,pE$xs_((炻jڸhT2}!mcTY6I|,?Y+NnJJ˃[G` cWǖ^r{gx;԰֦lSZxy ivc(C9㫺Af`|Z 8[!(G➉goOxOHR;DGfrTAk긷4*y5)F8yark zcW\zYO[:Ki%` P- Ln)p$[Q%GK81σ1:~@ᜨaI z7xa֬zI)"±VHT /[t{ld7.!9]ӎk M6$ J ?xew:䮧wYS{gbĜ;JCoދz^wDph| y y-v+V܀Uya8S'IlujM#Ty-/2ςψr䇵 7} |[n(ҕAOϦ@pKW*^HͿ{], q:*8 |`zu$%iTX)C׀y7-k8vv! 1ItÆ9ӿqCpޯ6F?"+vFAI`l %"df>3Uw HdɈّύa ac ̗K4Qn(ءX(~fv_a|y%KR}LacXYR91C͎] ~JpI6$tD%GoCJq>Geza 6L|waS5 Um Di;!/`>_&ղ'v;q6,UT2R~*XNhh/|0gxj19 ;P0+K6d;ox<9)RmE31WP7%<_^ (XNmţF;@ RoIH"_%fضDx0m?,KuRBkNkd__4:{R&D>1Aq3ɑ]sM寉қTK] *)`vCE*#L{娔(dͬwt2̜G)>*m pDnm. Gڹj oY_ .bo{.-żcLˉ&2)E{@/Ʀg9"W[:R5ҊsQWJX~*TYH\ΐГBXX|XnkY؊G4` ]%]}Į`.Q/ cR|@t6H\4{oUH90 ${kJ@m  G/!>|Djڲ$2JČ]*ڸ3 %3%CnDZdr/G^`<Pkxܒ, IMԚ:RFM C~rS0`R%(Sj)kQؓ;Px$uހ(u} InA1da6dϿXIۀ: ? ͍iـ{Δ7xPpf5%:<V+6yL6m<tXڧݏx VP[f7N߼XJi|rT$M7E%Ǫ[6kxH=D<7^Ԧ܍{[^Iџl7ezvm@hGO G^85ꇳ]/e3p5|b6l>Q1 A` Z{=Rɉj[ n}2|yYXͷtiܯj>ZxO44a7|7kQ\9qnWyfB =X]Ԑ<hL+X/2(m_WƢ䬍ضU}(O)rn&dMm  _="fWiXv_$;!)c;J5Z%Z+A~}a>Bi)AZ >6GH-p x  AոJ ?5z}|Ü錞18f{O5 :Ƽr_R'C  C[CŶѵCLg߲v?(FbgU"4m@B/J_u `P&Q n@Hs s0эk ֍`_*JU PxqU;hcGh|-?E}Wd L l'ޏyyڞ1^q}O-kOey]l“?z Wb|8c>"gM Jҭ=ҏM*P0*\er;,d^*ePElK4;k_kwv ta{v183G @%+I[Fva*ms.󅽴E (W=Y@^߻!Lv PxzfCP LKTtr]O,;nj8lʅ-|  zߜ;}^y$:, +l/UdtM!`FYhi;WkA&*D =wS7E- @PKRR䜔=ULF_ިŸ<}ZvTB?4JGw|SQ#!* +tA憎HFY=5NcR^.k7ը*_YO$Tr?񍚼S']HNFOnV6AgA[d.}.?-pJM"ⅵUTKYORsTvGnwh(lƫۜLK^kMЏMay (fqj> .Mk]D+V a^}^ (@EKP!lXb ڨa$CZV~Y6z'm@R:i$ O$]LOu^TnR-t`aǟ ǯy2!/BG&>^:q?@^{ND>*Xrl l0qW2wUO#fY'&μh+Ey;xs4HkGT8 H#N?|wcb4<AHG xP8ཉX߶W @ ["b l׶7}@)j33 BK7SI`~o+~>6|?4( w=>t>M{KE)^,Гi8L8 :IL.;w_Р}IGi}a1ke^*4NԢL-ְEj^xU/̍jބk2-k_Mi=##K$_u# w`tcoV +TA/=8d_u-2^~(I޵ &5=d PPHto9@JI*my.[l Ă'dĹ l+s)j1$ÀVpoZHb$Q ĕ Mq|EkA8D4lk=I,ʲdqEb+dw4aGqϛ14@]X-XN6Vv![4K"?{HuT[60gEXB۫ rU W)"j4s$kDkӮ].2;pY\A@x4Hts|dRy1!K<7&D|+9X?YN&iS{kx^I*^yDl;۬I 2;*!8Ѝ>N ~!KE@+5nݿk?X1сG$JH02-l#:B!п܉ IVsdm1'3V`ĥPr x^%T;9U\xg\ TNmGO4q;4|Ă0cn5 =$]a gR;t.]g=C}2aM!# 9)gTI䔮zQ1YF@ ِECɲ m`%<Ոtxypд1rNB9_o qbC~1N'HR`S:ip'xi^_1scm=B>/65z'DZ81-bJFx}&~2+-sͥcM mp.\WD0@(ȉh7tb:09?`THi¸j8)ۤ;{Ri=4`_LјZsFR-(rT$qCUSa5LٞB@7CA,F{PѳR t}?}6g}>`52ZN̈Fh4ƓN(1{X#Cʒ voy*Ȅk @kMtVX'uRm ZiX(L7Nl4 qCS] UAj&hhA/90 O`v}~0s[$ʤ8D:oXf[3; (p7 4IoC}l(sY䳄 7،•5I=sxs8˕qR0EGz.5ef25aw#r*+|*S<[W+nJ T]0"LwfNʔe>2e₉``L-^O^!Ph'T?&vw b! 0tI.NѴ񘕥:F)j5Hߋr=i!ZՑNh.2;.C;& #KNN| X^EO ۥqȠρ1D. ߉0C7βL]|e.,6i$- OHkdD)y1^ +)8,Z%/sx7˚5ʔMֿC\yR8:<}X\Z}`pKtb4A<e{ #(ǜ θZYB#˟.Nsi ֢~u#OI<=E$L_>KW(au%ܧXr$98YtE gzj$PCW{*ڷpc˯aD*!3̛1=xWκYF]-dU uÆUȡ\?e3B]#n*{03ʚ4RcNj$H}>'$'vJ¶y-MuO8"02 YX '@K~A:q7O&ѿi+s|z 5/dt,^pM{J%߁99SpBrSq"V)stɃT!d{ G;7#ȁ6E`0KX, 5 ьY1H|~)HF/d:=I{϶3[λIXȁ*.n*`L7\ITLbu$Pu?(N*O6/X Eи5=CYdo>On|8}Of9v`&'d+>:d⠉!A[+'Hf#Se|ay<}5@V{'#/Yߝ;YZ4H]^w }sC4)RF%#a?`$2I.p@HEXl4Ϫo˒6hZAᓾcׂxkp;)eRWҏz3-^S^~Ja?'N @{vTJSs4ZalIcПlDͮ4oE]0+$<\[+4Y܉SpCOHW9m5GqjʋM5VZvT)CyRz0)TG:SHMA=YnтmkJ+UoGUh0Z4nqC05N,ޱT|_ 8>0j U]9#}7SEn55E1f eYmRQn9'颜+a]FⶎRj=48 43θѶbDs'|5lç2ж#(YB: | HM_aFJgE%+\cl#㭢XUSa4|MZV0{٢X-1W$>'O0ɽ'{H<ޱrVr"%D0iDjS&F[P-FtC%3V&?"fEwz4{Zg)B&ںIpV{pyx .A=#=HUq6,R dZH` ƖDզ3^(|MnOO:rG826zn 5Aq˝ČSG(c(]53׫yn6zPRFb+Nv%KϮ \He6'i3rxcZ7e"$>\ěQJqmzݢ{!ɡl$7 ĦEvo#1W#|eCLn_#cq>Ĺ7 豆3 vQtR̫z%&,"ښD'G⏃ ԶPO12Mw343UZEʼn2"XƓeXrI_ObrKo$UEUe䓞0vi]h8)r\W -tYnGN,( WnBO T*t/&Sư'&„]HY-[< rv@@t#z*ly2,pG6}(9>G[1ZIV1O$MVZ0ǎ(&TTʼž.Lk(gus'o  ojVPV˳q[[-=<3MiSGE`\Z%o9Oyif>r ~+jITU 52!1r&u[~ME=+_J~-ե[@ՌiPn|F= ' ="L5K7?,x/кp|N ymѡ^ K+xD;{& x9@pkR]_-LQD6Gr!L=`H;b_p?("Gȅ3rhNmíorεR{t/fQB}0aV̒S@5\z'˕mδǭv k0+,RYI$#n-ۍdQr-MxLR͙V[w&dD-xDX`@Df?"C[9lAĄ} шk,Y[~wk* M7)aVZlj>BLXS>kL.'O11%9 1A&9Ե&|r46Q.$:W‡ѰP3HD9z"Q( f[xSHqKX0xat)[)ۆՆKLdiFM;wyre`f' ,N%9 iEMFb[p@e[!e|m$-rQA8N/DXm!W[e'//#(%iH&Ɠdzt`# w*1Oy9$Ui3xkA t)3E?mḾ"D0 }kg8tFqͥoYјĬ5?-SHK8EӁU' <g<㢝VkیPBZ0>3:nPlFAqj.R.Rj~}O h-:?M|h">(y@ʂfE ?ϲe 4rQ׋hxN}5Lu q$ 0~NcE@-!ܡ| I!IQCLr|c-sz xd?^-mB^X ;lvοN806>ȶe]xe1|+Vj_8PRh2UNzgmF\-Rw7̹Nf2>esQ>71ʹ'+0E5x9A @^1Mp kj*D+SC@6D]mԁcSU+0B{[Xu<)H)}i2x&5 VES0nA 8UG o6gv;#D!t9TCC6;y_weIyAm 1(ya;)xJp ;IU)D<yt߆8qxcKb/7w"XqhieɲM 8Z>/TVt,J:%Obx3+#ܗ怬 ?L!Rß7Hn~z7 ۮCᩘ.1S(\| |8M3(ƺVJJ\Td +Zz3-k4qI)SY" %3_ Tŝ*G#NFptҜ%!e>drr[%,Qu̻㦴|t}Zpk=q``}r۞a:1Ŵj@.YnÕ\j5HFNrR9~@ɘPh"#ap4#ϚY?߄`.:la3 J>|Ra0+;hGQ Z;l,Q/C0A24$um=| \7@L+򑩫?~ڠgN4XhoZWW"qv9x?SQJo\X@-:=<ً1+ "`{_/5"vᚚ.1wSR3hؒi*1Λ6~%+S.9[#|פ&H+A%P}C µ }!RLu z|+g_UNqb;[eYlwF෿ 8lb٫mU_oڄBK_ a/N%fz o_q I&M~(}Ÿ{#D Eiy9J }۟833݆iJlz)! Vu(ɩ]§Gʠ<;0EZ@ +@ f/YL[tIsC.{]'RﰤC5TzLs5CE4*YĻxXoT~BUQRYRZ&h,G-PFU̠p[n2w\555heQ {`A i/{Wq{,=..}yDۉrEw`=h?v#+ r$ݹBvI3cgPIS_ !{C耍Ein">ftbX>~9fJTCpc.Uyעǩ+W#c`x!zFv`pUV[E/|4xT~^.(ۛ-P_eh_Gz#4>UFpD6%C0D8ȱ<* |3Bm&]bbíku\x$mLėM*غyzմPAוfW{vHM} 잾4 *AjM*+7aDb58cqr.,#& dP RNY˞`cպņ935hsl=3Q CCp.9/mgc[Sun+h!KxHOfІk',_KuZxhFaO];ŘNiޘ:֮2r Gug! 蚃- ɅD eɫvη/F9u[ع:k+&Qj-DD83Od;5bA&;1YxC 04xoqii溢l"=s*Uc&D82 FrM)p z۱ݾw"ԕtQ+g@v_%nEKo Ei)DWSm:[zU(YA76ݡO6?gWq-Ya )[!k4 $/́t % = KڛW'Gyɺ+m4L]-K*#_5Ʌ kW{-Zs'NE[b!qEUq7R&a^'`{;{)o{5 Jyq1}* FnnwU qDhsA$o+Ư!Ȅ kj%=Gՙ&ӉN\ᶘ Aqf_Mq0MĤZ8AUjAR –J#pcU:YE,dӡ?TYuDM\2Kzdm 2_!zfp@Β|ե("幜fY~O0` u˝frCG I?4ߍʕ-w7Ƌ/@ kY'wuNE6n fpE;y7߈W8@8x@Zcߠݾ9#G\KrKdv}˼!zZΚ1/LuKd0.vv2Mx'8=+Q-=ó_Y)>aJV5Msw͕ˡu&^NJnO#)uTWg?5~!aOxbja >[t |/t(.gB\ea(8 UNC\gxq^AC @16A$A #ɫ({,k;dNa_$3ۯ7Aoq^ƹWoCszє A8.Wòʛ=JѴUd1+lnp/, h@F6U8r)zkU<@&P"(sNfWok 11kM݇bV }JOL(0S"R.Â[6,S|CiLbR|rɎ^in g5J%?CRLM1RF}lqf|5P'j*?$Gr0Zr1Z7.6y]S1Vt?}4>~0O!`b5%(* 3 h[ܠX=,M{d%!& tnI$e?,-,Bl)$CsEc (5>c-T$VD}jT@r!AjNx*Z-bpȗ2;4~X\v2>|+gQ[!އ*|Ez<'Y-Z-k:~l3lPmVaUTTG !L *!Bg0N֦я&螅4}r3IcqrX"WO4*"t,"@cW9F{h~~9:$4i2;WNFVQw].5,WU[~:`0æ:5$h~ ~SS!7X P\wuȝ;儉[;SgP[bMX67B{:~ߢJVG'}wOeW,4lBS='` apIpIsB+oy;imrZ^}dCwf`%1j?ބD6Ѡ'B1 _;29gU2/L2y{.|kl+7{ktQ

{(jƻWзR^"OgE"Jo*_ ])#h@dzkxuaS~CL=XY<%=BMwb}RN QDpѨSWIp'4L~ͭ'},`Mҵ`n#4b[3]&Q:{wwoX{\j7U`S:M z$@pW0hvN(M LnU92(KS@o3fI' 3&}SkVKQܡ Rbqctx}P$TOanau(ÄwebMgSgRz/ slF1JX [p\O'Q} g*y9QLN_/1yJajZ:7cd. _ }9A;4ΙL!WKČ%Qavt=ϣ 3Cb 11viY5=GiVgS8\[sQGE hB߭K5=z@}gzpuW[ 'w[#I96M*+__ W' u ]_AyTE$Jٛ{'|)4 xzMJ5Z'KiF[T#$eEܭ m[9PRkxk4HesSɊiiҼEZu !qYF;л2Y*-UR'ԘLXрG1KK s {(E2_h~1|.:ÎF/caV9l7OTaϔ?Ȳ, UN}\1R٢-f0in>@G NP,֠:fR (߮+ H td.ړXZ?z\J?0L [=2nKŊ=䱷BlȱCeVAʨ..z;ftLHw Ħ$p"2f fPVZkO*љED`m`]] ?O#uHWgM:6̳H`$E…`F5&xֈ%i;]HG7u'Bc}Z\\׮Gd~/@-?lT)g-.l/0xw$ּ\F`В^zt/g3oR'ut̎fIuT{EKw6OUK>ud1|w\tOz&?GsqCPF}*<Q{)=-Vؠ_d{sT*3߮w܏ծ>sN AΧB\7gcҺ=so~&E@qHv%N<P o3Aa Q$UMP'dKm-yXhV$:NH~L5_c o(;d\so{T |\iNKo7/OdruU*} -z{cHO࠲/Oi =|qt"vP:s4\CV\gɎ8a5*|gw0rR@Kڛfmz!x%PY,&KspOQ20紏MqdhU_KD/˫٫[q~޿l*߸meʟ~`Jh^HamHU~\lZ\ i}2 WQD $'@\{#Dt2gu"eT? Ti*u.K؞ Sx9i:Jfo-{/$G@iT\(pƖ3?V^|Sqg QL=8l]4a Ep4Dc{>~=|qis>FK32}#^dT4djCk`?[2`nJۆIT7'?ZףRҘp2O3a |{S_@3[FRf::D8?زhbl6I2,l!xf5 Q^?Żumا#!>b"u3 :u6t,9)zw 0 eLfQmd?NT.ĽDT9є\7%r@f]Sd=so_O0M!Zg?E͡1D{&Yv L W2 IHy_ķL4_{*-n xH=(^dZ>r$:}XF>*װ:!|V@EM y=^g)mR [,X}!aDAh(ƶ (xX[G&BޠXLC<œ `l3Udnź(=˛yZ67l}>R,1 ;3V.mvRj q\sgdLoiB<j͚UTC9HLFö1d^J~َIc(b1R~. *>nɳno}R MQ"`Pa||׶W$ |ێHFxkurG'K oyǞo|}U-~z%:k~.-VF<0 *FhkTPC[4?kvӐey'J0 &BhH߮9.mg<'j7+M:%V=Š+.< )~.fߛb5b&%Ob0z׉]ϐQwIes};׆S|I,/Hwz!A`wAצFn鯘 \J!X!7{wm>S=i{CcⱣh:L*{h N&G/+v#E˗z!]$S3Qs=`*3bL>0.u,"E#xCO9 gt+.|]SDvf@3/GՇ|蓋f0k")wfۺ;43] w}bO6t$۹HCޮcrإ(Y9Ʃ˙y`DI7u s~՟3izO`q QJ6Cr*`@Kd Q* V9Mu.?9pQ&t h,;OZ(Sl졙oD6:+$!S,HNu^̨BiVU+\Oߧcc.R` nomX<6Ҵ*8Ǐ"mkIsYP7Nd]閻o` bQ5+ʼF'!@[Og7H!@oaK86V9 w-lM ED\7.q~nxRgPh@%<cd^!Y!el>H"Ah>W?olȔl7nM f[Sz ]tJɪ- CjV(wQ"Bݜ$bq ݇4Cv^SBuB-ς鄤,Zc^ p0mdjeɋO"dKQdseWQnjNozaҐgTRǭjmQؘR]JL OK,|7gq YJ,aʁ;` 癵2jUҳ m"=`Lo!E(tMqS9\L~9rW4%GB 4/24NG+~,]EVh=h4'DW+Y8tJOTnOζl9wxC;춄 Ml4gXMl{Me\䐳>r+c V f*HaE E^.v]¸^yUƂ*#2]kO9QiTT&#ʭx?׈^ֲ#TI1yD"Srq)tڤ2 ;o.5d-mHga-BQ=tvŠ-b: ͩA4" Q$0{c6N<~1V*PPm,  Ƨ!2Üm\#/)l&.1FSjˇH̪Ч'ZFʴ_ȴ+of8az⢥g+* b>=g5hV?q2進NT < `5<@@-~Ԗz}UpѺJ36:VZƄJxxS eԦuΔd_ԥfw)i{yv-Dbܾ'#@~IGMm'"DabW ?TC} 7cٍ߰1,lO">JRCx ̔B!5PքiG`8j^ք"Pl\C`Ǩzx}Z:oG@hE$GƷR:?hUz2H Dn؍ᚒwZ6`]7{e/oF[ŇN8 pl~(Ȍk 1Ў]o`Hvs|+ A|ڴ”Èժd]uCDmR.d<_K9ASUnX0o nDq(aKc a{qIn;{_dvr}@|!{Ѽ>#l6t.PI*DkRP&WVTKcf˳S7H󝻟O^.8v&|૘{CiٔbybT2<ҫK_|XWJZ Ez'⫙#K %eXY(|P0>6dވw4-yfUxU}W9(iWf3R#qhZ2, Wdy,%.wU;'#*Io1P7"v:í&[OW%LSZ/+aaNx.._ͥ&Ew0Qo*0+\_!$9Uْ\BAHljD**Mg#tŪ+d _~I౟R}Ht)ׂ]aJ4F?V(; < V'uӝ}/>Ėt>/erV&IZ`,c#f1Y x{e_{eՖ^ hs[l h;u< WlSxΥ;%6Ge7iSY;<7S(!#IRv/.=A1P]"^HߎL4#Ka{8LLq_&4PV RӄpEon`:a%&DP?r!HʘwgDs5HK{G(JvG@JC$LYX*MIyJ40.(LhMLJt[]tg[c:Uw2 s++lT)b1ڨ‹eTu\t}PjBE/!wh$vf<@VoIoӏSz<b5u# CŋMf7I \ۅj93$EmU9>T{2 5x0'OWX* Ǧk5\ЇMT+ gAͬ:5YЍ`KR~d?S!4wWs\"b;c׏2%2eM^o56~NbPw͘kLҎyAYk2wB2(wZ gL[C:1ԣ_w1;dנT DŽOS{S[jp%L>YQƃA;\15b}X݀hx d3_Li8P- /doR8E߈` qa^ٴAo-e]CesS0LаAhut={EBJZ!v&:tߥ=Gbw׊:8%$r~P>><*qע i YZ