nss-3.19.1-19.el7_2$>*АDsH?L>>?մd   0hl k\         G   S;;c;(8090:W0>m@uGŀHIX,SYxS\]D^"bid8e=f@lBtXuʤv wxxyէհCnss3.19.119.el7_2Network Security ServicesNetwork Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.Vworker1.bsys.centos.org%,CentOSMPLv2.0CentOS BuildSystem System Environment/Librarieshttp://www.mozilla.org/projects/security/pki/nss/linuxi686# If we upgrade, and the shared filename is a regular file, then we must # remove it, before we can install the alternatives symbolic link. if [ $1 -gt 1 ] ; then # when upgrading or downgrading if ! test -L /usr/lib/libnssckbi.so; then rm -f /usr/lib/libnssckbi.so fi fi # Install the symbolic link # FYI: Certain other packages use alternatives --set to enforce that the first # installed package is preferred. We don't do that. Highest priority wins. /usr/sbin/update-alternatives --install /usr/lib/libnssckbi.so \ libnssckbi.so /usr/lib/nss/libnssckbi.so 10 /sbin/ldconfigif [ $1 -eq 0 ] ; then # package removal /usr/sbin/update-alternatives --remove libnssckbi.so /usr/lib/nss/libnssckbi.so else # upgrade or downgrade # If the new installed package uses a regular file (not a symblic link), # then cleanup the alternatives link. if ! test -L /usr/lib/libnssckbi.so; then /usr/sbin/update-alternatives --remove libnssckbi.so /usr/lib/nss/libnssckbi.so fi fi /sbin/ldconfig$@,@ih`TR=A큤큤큤VVrVrVsVtV^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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnss-3.19.1-19.el7_2.src.rpmconfig(nss)libnss3.solibnss3.so(NSS_3.10)libnss3.so(NSS_3.10.2)libnss3.so(NSS_3.11)libnss3.so(NSS_3.11.1)libnss3.so(NSS_3.11.2)libnss3.so(NSS_3.11.7)libnss3.so(NSS_3.11.9)libnss3.so(NSS_3.12)libnss3.so(NSS_3.12.1)libnss3.so(NSS_3.12.10)libnss3.so(NSS_3.12.3)libnss3.so(NSS_3.12.4)libnss3.so(NSS_3.12.5)libnss3.so(NSS_3.12.6)libnss3.so(NSS_3.12.7)libnss3.so(NSS_3.12.9)libnss3.so(NSS_3.13)libnss3.so(NSS_3.13.2)libnss3.so(NSS_3.14)libnss3.so(NSS_3.14.1)libnss3.so(NSS_3.14.3)libnss3.so(NSS_3.15)libnss3.so(NSS_3.15.4)libnss3.so(NSS_3.16.1)libnss3.so(NSS_3.16.2)libnss3.so(NSS_3.18)libnss3.so(NSS_3.19)libnss3.so(NSS_3.19.1)libnss3.so(NSS_3.2)libnss3.so(NSS_3.2.1)libnss3.so(NSS_3.3)libnss3.so(NSS_3.3.1)libnss3.so(NSS_3.4)libnss3.so(NSS_3.5)libnss3.so(NSS_3.6)libnss3.so(NSS_3.7)libnss3.so(NSS_3.7.1)libnss3.so(NSS_3.8)libnss3.so(NSS_3.9)libnss3.so(NSS_3.9.2)libnss3.so(NSS_3.9.3)libnssckbi.solibnssckbi.so(NSS_3.1)libnsspem.solibnsspem.so(NSS_3.1)libsmime3.solibsmime3.so(NSS_3.10)libsmime3.so(NSS_3.12.10)libsmime3.so(NSS_3.12.2)libsmime3.so(NSS_3.13)libsmime3.so(NSS_3.15)libsmime3.so(NSS_3.16)libsmime3.so(NSS_3.18)libsmime3.so(NSS_3.2)libsmime3.so(NSS_3.2.1)libsmime3.so(NSS_3.3)libsmime3.so(NSS_3.4)libsmime3.so(NSS_3.4.1)libsmime3.so(NSS_3.6)libsmime3.so(NSS_3.7)libsmime3.so(NSS_3.7.2)libsmime3.so(NSS_3.8)libsmime3.so(NSS_3.9)libsmime3.so(NSS_3.9.3)libssl3.solibssl3.so(NSS_3.11.4)libssl3.so(NSS_3.11.8)libssl3.so(NSS_3.12.10)libssl3.so(NSS_3.12.6)libssl3.so(NSS_3.13)libssl3.so(NSS_3.13.2)libssl3.so(NSS_3.14)libssl3.so(NSS_3.15)libssl3.so(NSS_3.15.4)libssl3.so(NSS_3.2)libssl3.so(NSS_3.2.1)libssl3.so(NSS_3.20)libssl3.so(NSS_3.4)libssl3.so(NSS_3.7.4)nssnss(x86-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/sh/bin/sh/bin/sh/usr/sbin/update-alternatives/usr/sbin/update-alternativesconfig(nss)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libdl.so.2libfreebl3.solibnspr4.solibnss3.solibnss3.so(NSS_3.10)libnss3.so(NSS_3.11)libnss3.so(NSS_3.11.1)libnss3.so(NSS_3.11.2)libnss3.so(NSS_3.12)libnss3.so(NSS_3.12.6)libnss3.so(NSS_3.14)libnss3.so(NSS_3.14.3)libnss3.so(NSS_3.15)libnss3.so(NSS_3.19.1)libnss3.so(NSS_3.2)libnss3.so(NSS_3.3)libnss3.so(NSS_3.3.1)libnss3.so(NSS_3.4)libnss3.so(NSS_3.6)libnss3.so(NSS_3.7)libnss3.so(NSS_3.8)libnss3.so(NSS_3.9)libnssdbm3.solibnssutil3.solibnssutil3.so(NSSUTIL_3.12)libnssutil3.so(NSSUTIL_3.12.3)libnssutil3.so(NSSUTIL_3.12.5)libnssutil3.so(NSSUTIL_3.13)libnssutil3.so(NSSUTIL_3.14)libnssutil3.so(NSSUTIL_3.15)libnssutil3.so(NSSUTIL_3.17.1)libplc4.solibplds4.solibpthread.so.0libpthread.so.0(GLIBC_2.0)libsoftokn3.solibz.so.1nsprnss-softokn(x86-32)nss-system-initnss-utilrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.19.1-19.el7_24.10.83.16.2.3-133.19.13.0.4-14.6.0-14.0-15.2-14.11.3VpV'~@U6@U6@UAU@UUUݪ@UUȒ@UU@U'U3@UUx&Ux&Uq@U?v@U8U0U-@U'@U:TTq@TTto@Td@T)IS@S@Sہ@S@SnS@RJ@RRUR۾@R۾@R@R@Rx@RΏ@RkR@R;RiR@Rz/@Rv:Rt@RrF@Ro@Ro@RnQRe@RW@RSR@QQQ@QKQ@QQW@Q'@Qq1QNQ9Q7/Q#@QQ @P!@PՠP @PqP@P@PAPXPd@Pd@PPP@PP5@PPnP;a@P(@P H@O;O;O@OiO@O@O}O~OiOYOX@OOdO&@O!@@OO@O@N>@N>@NNܲ@N`NؽNN@NuN;@Np@Nf @NA!@N*NpM@MWMc@MM@M@MMfH@M^_@MZjMS@MQ0@MQ0@MQ0@MQ0@MK@MGMF@M6@M-MM@Ls@LOLLZ@L6LdL@L*@L@LA@LL@L4Lx@Lx@Li(@Lf@L_L_LT@L0L0L K @KsKsKKCKCKCK]KMKLd@KD{@K<@K5K4@K,@K+nK*@K K@K@K@KJݦ@J - 3.19.1-19Kai Engert - 3.19.1-18Elio Maldonado - 3.19.1-17Elio Maldonado - 3.19.1-16Elio Maldonado - 3.19.1-15Elio Maldonado - 3.19.1-14Elio Maldonado - 3.19.1-13Elio Maldonado - 3.19.1-12Elio Maldonado - 3.19.1-11Elio Maldonado - 3.19.1-10Elio Maldonado - 3.19.1-9Elio Maldonado - 3.19.1-8Elio Maldonado - 3.19.1-7Elio Maldonado - 3.19.1-6Kai Engert - 3.19.1-5Elio Maldonado - 3.19.1-4Elio Maldonado - 3.19.1-3Elio Maldonado - 3.19.1-2Elio Maldonado - 3.19.1-1Kai Engert - 3.18.0-6Kai Engert - 3.18.0-5Elio Maldonado - 3.18.0-4Elio Maldonado - 3.18.0-3Elio Maldonado - 3.18.0-2Elio Maldonado - 3.18.0-1Elio Maldonado - 3.16.2.3-5Elio Maldonado - 3.16.2.3-4Elio Maldonado - 3.16.2.3-3Elio Maldonado - 3.16.2.3-2Elio Maldonado - 3.16.2-10Elio Maldonado - 3.16.2-9Elio Maldonado - 3.16.2-4Elio Maldonado 3.16.2-3Elio Maldonado - 3.16.2-2Elio Maldonado - 3.16.2-1Elio Maldonado - 3.15.4-6Elio Maldonado - 3.15.4-5Elio Maldonado - 3.15.4-4Elio Maldonado - 3.15.4-3Daniel Mach - 3.15.4-2Elio Maldonado - 3.15.3-9Elio Maldonado - 3.15.3-8Elio Maldonado - 3.15.3-7Elio Maldonado - 3.15.3-6Elio Maldonado - 3.15.3-5Elio Maldonado - 3.15.3-4Daniel Mach - 3.15.3-3Elio Maldonado - 3.15.3-2Elio Maldonado - 3.15.3-1Elio Maldonado - 3.15.2-10Elio Maldonado - 3.15.2-9Elio Maldonado - 3.15.2-8Elio Maldonado - 3.15.2-7Elio Maldonado - 3.15.2-6Elio Maldonado - 3.15.2-5Elio Maldonado - 3.15.2-4Elio Maldonado - 3.15.2-3Elio Maldonado - 3.15.2-2Elio Maldonado - 3.15.2-1Elio Maldonado - 3.15.1-4Elio Maldonado - 3.15.1-3Elio Maldonado - 3.15.1-2Elio Maldonado - 3.15.1-2Elio Maldonado - 3.15-6Elio Maldonado - 3.15-5emaldona - 3.15-4emaldona - 3.15-3Elio Maldonado - 3.15-2Elio Maldonado - 3.15-1Elio Maldonado - 3.14.3-13.0Kai Engert - 3.14.3-12.0Kai Engert - 3.14.3-11Kai Engert - 3.14.3-10Kai Engert - 3.14.3-9Elio Maldonado - 3.14.3-1Elio Maldonado - 3.14.2-2Elio Maldonado - 3.14.2-1Kai Engert - 3.14.1-3Elio Maldonado - 3.14.1-2Elio Maldonado - 3.14.1-1Elio Maldonado - 3.14-12Elio Maldonado - 3.14-11Elio Maldonado - 3.14-10Elio Maldonado - 3.14-9Elio Maldonado - 3.14-8Elio Maldonado - 3.14-7Elio Maldonado - 3.14-6Elio Maldonado - 3.14-5Elio Maldonado - 3.14-4Elio Maldonado - 3.14-3Elio Maldonado - 3.14-2Elio Maldonado - 3.14-1Elio Maldonado - 3.14-0.1.rc.1Kai Engert - 3.13.6-1Elio Maldonado - 3.13.5-8Elio Maldonado - 3.13.5-7Fedora Release Engineering - 3.13.5-6Elio Maldonado - 3.13.5-5Elio Maldonado - 3.13.5-4Elio Maldonado - 3.13.5-3Elio Maldonado - 3.13.5-2Elio Maldonado - 3.13.5-1Elio Maldonado - 3.13.4-3Elio Maldonado - 3.13.4-2Elio Maldonado - 3.13.4-1Elio Maldonado - 3.13.3-4Elio Maldonado - 3.13.3-3Elio Maldonado - 3.13.3-2Elio Maldonado - 3.13.3-1Tom Callaway - 3.13.1-13Elio Maldonado - 3.13.1-12Fedora Release Engineering - 3.13.1-11Elio Maldonado - 3.13.1-11Elio Maldonado - 3.13.1-10elio maldonado - 3.13.1-9Elio Maldonado - 3.13.1-8Elio Maldonado - 3.13.1-7Elio Maldonado - 3.13.1-6Elio Maldonado - 3.13.1-5Elio Maldonado Batiz - 3.13.1-4Elio Maldonado - 3.13.1-2Elio Maldonado - 3.13.1-1Elio Maldonado - 3.13-1Elio Maldonado - 3.13-0.1.rc0.1Elio Maldonado - 3.12.11-3Kai Engert - 3.12.11-2Elio Maldonado - 3.12.11-1Elio Maldonado - 3.12.10-6Michael Schwendt - 3.12.10-5Elio Maldonado - 3.12.10-4Dennis Gilmore - 3.12.10-3Elio Maldonado - 3.12.10-2Elio Maldonado - 3.12.10-1Elio Maldonado - 3.12.10-0.1.beta1Elio Maldonado - 3.12.9-15Elio Maldonado - 3.12.9-14Elio Maldonado - 3.12.9-13Elio Maldonado - 3.12.9-12Elio Maldonado - 3.12.9-11Elio Maldonado - 3.12.9-10Elio Maldonado - 3.12.9-9Fedora Release Engineering - 3.12.9-8Elio Maldonado - 3.12.9-7Christopher Aillon - 3.12.9-6Elio Maldonado - 3.12.9-5Elio Maldonado - 3.12.9-4Elio Maldonado - 3.12.9-3Elio Maldonado - 3.12.9-2Elio Maldonado - 3.12.9-1Elio Maldonado - 3.12.9-0.1.beta2Elio Maldonado - 3.12.8.99.2-1Elio Maldonado - 3.12.8.99.1-1Elio Maldonado - 3.12.8-9Elio Maldonado - 3.12.8-8Elio Maldonado - 3.12.8-7Elio Maldonado - 3.12.8-6Elio Maldonado - 3.12.8-5Elio Maldonado - 3.12.8-4Elio Maldonado - 3.12.8-3Elio Maldonado - 3.12.8-2Elio Maldonado - 3.12.8-1Elio Maldonado - 3.12.7.99.4-1Elio Maldonado - 3.12.7.99.3-2Elio Maldonado - 3.12.7.99.3-1Elio Maldonado - 3.12.7-3Elio Maldonado - 3.12.7-2Elio Maldonado - 3.12.7-1Elio Maldonado - 3.12.6-12Elio Maldonado - 3.12.6-11Elio Maldonado - 3.12.6-10Elio Maldonado - 3.12.6-9Dennis Gilmore - 3.12.6-8Elio Maldonado - 3.12.6-7Elio Maldonado - 3.12.6-6Elio Maldonado - 3.12.6-5Elio Maldonado - 3.12.6-4Elio Maldonado - 3.12.6-3Elio Maldonado - 3.12.6-2Elio Maldonado - 3.12.6-1.2Elio Maldonado - 3.12.6-1.1Elio Maldonado - 3.12.6-1Elio Maldonado - 3.12.5-8Elio Maldonado - 3.12.5-5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.13.2Elio Maldonado - 3.12.5-1.13.1Elio Maldonado - 3.12.5-1.13Elio Maldonado - 3.12.5-1.11Elio maldonado - 3.12.5-1.9Elio Maldonado - 3.12.5-2.7Elio Maldonado - 3.12.5-1.6Elio Maldonado - 3.12.5-1.5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1Elio Maldonado - 3.12.4-14.1Elio Maldonado - 3.12.4-13.1Elio Maldonado - 3.12.4-13Elio Maldonado - 3.12.4-12Elio Maldonado - 3.12.4-11Elio Maldonado - 3.12.4-10Elio Maldonado - 3.12.4-8Elio Maldonado - 3.12.4-6Elio Maldonado - 3.12.4-5Elio Maldonado - 3.12.4-4Elio Maldonado - 3.12.4-3Elio Maldonado - 3.12.4-2Elio Maldonado - 3.12.4-1Elio Maldonado - 3.12.3.99.3-30Elio Maldonado - 3.12.3.99.3-29Elio Maldonado - 3.12.3.99.3-28Elio Maldonado - 3.12.3.99.3-27Elio Maldonado - 3.12.3.99.3-26Elio Maldonado - 3.12.3.99.3-25Warren Togami - 3.12.3.99.3-24Elio Maldonado - 3.12.3.99.3-23Elio Maldonado - 3.12.3.99.3-22Elio Maldonado - 3.12.3.99.3-21Elio Maldonado - 3.12.3.99.3-20Elio Maldonado - 3.12.3.99.3-19Elio Maldonado - 3.12.3.99.3-18Elio Maldonado - 3.12.3.99.3-16Dennis Gilmore - 3.12.3.99.3-15Dennis Gilmore - 3.12.3.99.3-14Dennis Gilmore - 3.12.3.99.3-13Dennis Gilmore - 3.12.3.99.3-12Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11Elio Maldonado - 3.12.3.99.3-10Dennis Gilmore - 3.12.3.99.3-9Elio Maldonado - 3.12.3.99.3-7.1Fedora Release Engineering - 3.12.3.99.3-7Elio Maldonado - 3.12.3.99.3-6Elio Maldonado - 3.12.3.99.3-5Elio Maldonado - 3.12.3.99.3-4Kai Engert - 3.12.3.99.3-3Kai Engert - 3.12.3.99.3-2Kai Engert - 3.12.3-7Kai Engert - 3.12.3-4Kai Engert - 3.12.3-3Kai Engert - 3.12.3-2Kai Engert - 3.12.2.99.3-7Kai Engert - 3.12.2.99.3-6Kai Engert - 3.12.2.99.3-5Kai Engert - 3.12.2.99.3-4Kai Engert - 3.12.2.99.3-3Kai Engert - 3.12.2.99.3-2Kai Engert - 3.12.2.99.3-1Fedora Release Engineering - 3.12.2.0-4Kai Engert - 3.12.2.0-3Dennis Gilmore - 3.12.1.1-4Kai Engert - 3.12.1.1-3Kai Engert - 3.12.1.1-2Kai Engert - 3.12.1.0-2Kai Engert - 3.12.0.3-7Kai Engert - 3.12.0.3-6Kai Engert - 3.12.0.3-3Kai Engert - 3.12.0.3-2Kai Engert - 3.12.0.1-1Jesse Keating - 3.11.99.5-2Kai Engert - 3.11.99.5-1Kai Engert - 3.11.99.4-1Kai Engert - 3.11.99.3-6Kai Engert - 3.11.99.3-5Kai Engert - 3.11.99.3-4Kai Engert - 3.11.99.3-3Kai Engert - 3.11.99.3-2Kai Engert - 3.11.99.3-1Kai Engert - 3.11.99.2b-3Kai Engert - 3.11.99.2b-2Kai Engert - 3.11.99.2-2Kai Engert - 3.11.99.2-1Kai Engert - 3.11.7-10Rob Crittenden - 3.11.7-9Kai Engert - 3.11.7-8Bob Relyea - 3.11.7-7Kai Engert - 3.11.7-6Kai Engert - 3.11.7-5Kai Engert - 3.11.7-4Kai Engert - 3.11.7-3Kai Engert - 3.11.7-2Kai Engert - 3.11.5-2Kai Engert - 3.11.5-1Bob Relyea - 3.11.4-4Kai Engert - 3.11.4-1Kai Engert - 3.11.3-2Kai Engert - 3.11.3-1Kai Engert - 3.11.2-2Jesse Keating - 3.11.2-1.1Kai Engert - 3.11.2-1Kai Engert - 3.11.1-2Kai Engert - 3.11.1-1Kai Engert - 3.11-4Jesse Keating - 3.11-3.2Jesse Keating - 3.11-3.1Ray Strode 3.11-3Christopher Aillon 3.11-2Christopher Aillon 3.11-1Christopher Aillon 3.11-0.cvs.2Christopher Aillon 3.11-0.cvsKai Engert Rob Crittenden 3.10-1- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol - Resolves: Bug 1289883- Rebuild against updated NSPR- Change the required_softokn_build_version back to -13 - Ensure we use nss-softokn-3.16.2.3-13.el7_1- Fix check for public key size of DSA certificates - Use size of prime P not the size of dsa.publicValue- Reorder the cipher suites and enable two more by default- Update the required_softokn_build_version to -14 - Add references to bugs filed upstream for new patches - Merge ocsp stapling and sslauth sni tests patches into one- Reorder the cipher suites and enable two more by default - Fix some of the ssauth sni and ocsp stapling tests- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers - Enable ECDSA cipher suites by default, a subset of the ones requested- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers- Fix to correctly report integrity mechanism for TLS_RSA_WITH_AES_256_GCM_SHA384- Fix checks to skip ssl2/export cipher suites tests to not skip needed tests - Fix libssl ssl2/export disabling patch to handle NULL cipher cases - Enable additional cipher suites by default- Add links to filed upstream bugs to better track patches in spec file- Package listsuites as part of the unsupported tools- Bump the release tag- Incremental patches to fix SSL/TLS test suite execution, fix the earlier SHA384 patch, and inform clients to use SHA384 with certificate_verify if required by NSS.- Add support for sha384 tls cipher suites - Add support for server-side hde key exchange - Add support for DSS+SHA256 ciphersuites- Reenable a patch that had been mistakenly disabled- Build against nss-softokn-3.16.2.3-9- Rebase to nss-3.19.1 - Resolves: Bug 1228913 - Rebase to nss-3.19.1 for CVE-2015-4000 [RHEL-7.1]- Backport mozbz#1155922 to support SHA512 signatures with TLS 1.2- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)- Update and reeneable nss-646045.patch on account of the rebase - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Fix shell syntax error on nss/tests/all.sh - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Replace expired PayPal test certificate that breaks the build - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Reverse the sense of a test in patch to fix pk12util segfault - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files- Fix race condition - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate - under the replication replay failure condition- Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files- Restore patch for certutil man page - supply missing options descriptions - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3 - Support TLS_FALLBACK_SCSV in tstclnt and ssltap- Resolves: Bug 1145434 - CVE-2014-1568 - Using a release number higher than on rhel-7.0 branch- Fix crash in stan_GetCERTCertificate - Resolves: Bug 1094468- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies) - Fix contributed by Peter Robinson - Fix libssl and test patches that disable ssl2 support - Resolves: Bug 1123435 - Replace expired PayPal test certificate with current one- Rebase to nss-3.16.2 - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31) - Fix test failure detection in the %check section - Move removal of unwanted source directories to the end of the %prep section - Update various patches on account of the rebase - Remove unused patches rendered obsolete by the rebase- Disallow disabling the internal module - Resolves: Bug 1056036 - nss segfaults with opencryptoki module- Pick up a fix from rhel-6 and fix an rpm conflict - Don't hold issuer cert handles in crl cache - Resolves: Bug 1034409 - deadlock in trust domain and object lock - Move nss shared db files to the main package - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Update pem sources to latest from nss-pem upstream - Pick up pem module fixes verified on RHEL and applied upstream - Remove no loger needed pem patches on acccount on this update - Add comments documenting the iquote.patch - Resolves: Bug 1054457 - CVE-2013-1740- Remove spurious man5 wildcard entry as all manpages are listed by name - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Mass rebuild 2014-01-24- Rebase to nss-3.15.4 - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue - Remove no longer needed patches for manpages that were applied upstream - Remove no longer needed patch to disable ocsp stapling tests - Update iquote.patch on account of upstream changes - Update and rename patch to pem/rsawrapr.c on account of upstream changes - Use the pristine upstream sources for nss without repackaging - Avoid unneeded manual step which may introduce errors- Fix the spec file to apply the nss ecc list patch for bug 752980 - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc- Move several nss-sysinit manpages tar archives to the %files - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Fix a coverity scan compile time warning for the pem module - Resolves: Bug 1002271 - NSS pem module should not require unique base file names- Resolves: Bug 1002271 - NSS pem module should not require unique base file names- Improve pluggable ECC support for ECDSA - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package- Mass rebuild 2013-12-27- Revoke trust in one mis-issued anssi certificate - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]- Update to NSS_3_15_3_RTM - Resolves: Bug 1031463 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741- Fix path to script and remove -- from some options in nss-sysinit man page - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws- Fix certutil man page options names to be consistent with help - Resolves: rhbz#948495 - man page scan results for nss - Remove incorrect count argument in status description in nss-sysinit man page - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions- Fix patch for disabling ssl2 in ssl to correctly set error code - Fix syntax error reported in the build.log even tough it succeeds - Add patch top ignore setpolicy result - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails- Fix bash syntax error in patch for disabling ssl2 tests - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Fix errors in ssl disabling patches for both library and tests - Add s390x to the multilib_arches definition used for alt_ckbi - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Fix errors in nss-sysinit manpage options descriptions - Resolves: rhbz#982723- Enable fips when system is in fips mode - Resolves: rhbz#852023 - FIPS mode detection does not work- Remove unused and obsoleted patches - Related: rhbz#1012656- Add description of the certutil's --email option to it's manpage - Resolves: rhbz#Bug 948495 - Man page scan results for nss- Rebase to nss-3.15.2 - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL- Install symlink to nss-sysinit.sh without the .sh suffix - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Add upstream bug URL for a patch subitted upstream and remove obsolete script- Update to NSS_3_15_1_RTM - Apply various fixes to the man pages and add new ones - Enable the iquote.patch to access newly introduced types - Add man page for pkcs11.txt configuration file and cert and key databases - Add missing option descriptions for {cert|cms|crl}util - Resolves: rhbz#948495 - Man page scan results for nss - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit- Use the unstripped source tar ball- Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts - Resolves: rhbz#606020 - nss security tools lack man pages- Build nss without softoken or util sources in the tree - Resolves: rhbz#689918- Update ssl-cbc-random-iv-by-default.patch- Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config- Update to NSS_3_15_RTM- Reactivate nss-ssl-cbc-random-iv-off-by-default.patch- Add upstream patch to fix rhbz#872761- Update expired test certificates (fixed in upstream bug 852781)- Fix incorrect post/postun scripts. Fix broken links in posttrans.- Configure libnssckbi.so to use the alternatives system in order to prepare for a drop in replacement.- Update to NSS_3_14_3_RTM - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3 - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack - Resolves: rhbz#896651 - PEM module trashes private keys if login fails - Resolves: rhbz#909775 - specfile support for AArch64 - Resolves: rhbz#910584 - certutil -a does not produce ASCII output- Allow building nss against older system sqlite- Update to NSS_3_14_2_RTM- Update to NSS_3_14_1_WITH_CKBI_1_93_RTM- Require nspr >= 4.9.4 - Fix changelog invalid dates- Update to NSS_3_14_1_RTM- Bug 879978 - Install the nssck.api header template where mod_revocator can access it - Install nssck.api in /usr/includes/nss3/templates- Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it - Install nssck.api in /usr/includes/nss3- Bug 870864 - Add support in NSS for Secure Boot- Disable bypass code at build time and return failure on attempts to enable at runtime - Bug 806588 - Disable SSL PKCS #11 bypass at build time- Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs - Bug 872124 - nss-3.14 breaks fedpkg new-sources - Fix should be considered preliminary since the patch may change upon upstream approval- Add a dummy source file for testing /preventing fedpkg breakage - Helps test the fedpkg new-sources and upload commands for breakage by nss updates - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources- Fix a previous unwanted merge from f18 - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while - Keeping the patch disabled while we are still in rawhide and - State in comment that patch is needed for both stable and beta branches - Update .gitignore to download only the new sources- Fix the spec file so sechash.h gets installed - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14- Update the license to MPLv2.0- Use only -f when removing unwanted headers- Add secmodt.h to the headers installed by nss-devel - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14- Update to NSS_3_14_RTM- Update to NSS_3_14_RC1 - update nss-589636.patch to apply to httpdserv - turn off ocsp tests for now - remove no longer needed patches - remove headers shipped by nss-util- Update to NSS_3_13_6_RTM- Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3 - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix- Fix pluggable ecc support- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Fix checkin comment to prevent unwanted expansions of percents- Resolves: Bug 830410 - Missing Requires %{?_isa} - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib - Enable sha224 portion of powerup selftest when running test suites - Require nspr 4.9.1- Resolves: rhbz#833529 - revert unwanted change to nss.pc.in- Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in- Update to NSS_3_13_5_RTM- Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3- Resolves: Bug 805723 - Library needs partial RELRO support added - Patch coreconf/Linux.mk as done on RHEL 6.2- Update to NSS_3_13_4_RTM - Update the nss-pem source archive to the latest version - Remove no longer needed patches - Resolves: Bug 806043 - use pem files interchangeably in a single process - Resolves: Bug 806051 - PEM various flaws detected by Coverity - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name- Resolves: Bug 805723 - Library needs partial RELRO support added- Cleanup of the spec file - Add references to the upstream bugs - Fix typo in Summary for sysinit- Pick up fixes from RHEL - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections- Update to NSS_3_13_3_RTM- fix issue with gcc 4.7 in secmodt.h and C++11 user-defined literals- Resolves: Bug 784672 - nss should protect against being called before nss_Init- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Deactivate a patch currently meant for stable branches only- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request- Revert to using current nss_softokn_version - Patch to deal with lack of sha224 is no longer needed- Resolves: Bug 754771 - [PEM] an unregistered callback causes a SIGSEGV- Resolves: Bug 750376 - nss 3.13 breaks sssd TLS - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y - Only patch blapitest for the lack of sha224 on system freebl - Completed the patch to make pem link against system freebl- Removed unwanted /usr/include/nss3 in front of the normal cflags include path - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible- Statically link the pem module against system freebl found in buildroot - Disabling sha224-related powerup selftest until we update softokn - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support- Rebuild with nss-softokn from 3.12 in the buildroot - Allows the pem module to statically link against 3.12.x freebl - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo - Build will be temprarily placed on buildroot override but not pushed in bodhi- Fix broken dependencies by updating the nss-util and nss-softokn versions- Update to NSS_3_13_1_RTM - Update builtin certs to those from NSSCKBI_1_88_RTM- Update to NSS_3_13_RTM- Update to NSS_3_13_RC0- Fix attempt to free initilized pointer (#717338) - Fix leak on pem_CreateObject when given non-existing file name (#734760) - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)- Update builtins certs to those from NSSCKBI_1_87_RTM- Update to NSS_3_12_11_RTM- Indicate the provenance of stripped source tarball (#688015)- Provide virtual -static package to meet guidelines (#609612).- Enable pluggable ecc support (#712556) - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)- make the testsuite non fatal on arm arches- Fix crmf hard-coded maximum size for wrapped private keys (#703656)- Update to NSS_3_12_10_RTM- Update to NSS_3_12_10_BETA1- Implement PEM logging using NSPR's own (#695011)- Update to NSS_3.12.9_WITH_CKBI_1_82_RTM- Short-term fix for ssl test suites hangs on ipv6 type connections (#539183)- Add a missing requires for pkcs11-devel (#675196)- Run the test suites in the check section (#677809)- Fix cms headers to not use c++ reserved words (#676036) - Reenabling Bug 499444 patches - Fix to swap internal key slot on fips mode switches- Revert patches for 499444 until all c++ reserved words are found and extirpated- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix cms header to not use c++ reserved word (#676036) - Reenable patches for bug 499444- Revert patches for 499444 as they use a C++ reserved word and cause compilation of Firefox to fail- Fix the earlier infinite recursion patch (#499444) - Remove a header that now nss-softokn-freebl-devel ships- Fix infinite recursion when encoding NSS enveloped/digested data (#499444)- Update the cacert trust patch per upstream review requests (#633043)- Fix to honor the user's cert trust preferences (#633043) - Remove obsoleted patch- Update to 3.12.9- Rebuilt according to fedora pre-release package naming guidelines- Update to NSS_3_12_9_BETA2 - Fix libpnsspem crash when cacert dir contains other directories (#642433)- Update to NSS_3_12_9_BETA1- Update pem source tar with fixes for 614532 and 596674 - Remove no longer needed patches- Update PayPalEE.cert test certificate which had expired- Tell rpm not to verify md5, size, and modtime of configurations file- Fix certificates trust order (#643134) - Apply nss-sysinit-userdb-first.patch last- Move triggerpostun -n nss-sysinit script ahead of the other ones (#639248)- Fix invalid %postun scriptlet (#639248)- Replace posttrans sysinit scriptlet with a triggerpostun one (#636787) - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)- Add posttrans scriptlet (#636787)- Update to 3.12.8 - Prevent disabling of nss-sysinit on package upgrade (#636787) - Create pkcs11.txt with correct permissions regardless of umask (#636792) - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801) - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)- NSS 3.12.8 RC0- Fix nss-util_version and nss_softokn_version required to be 3.12.7.99.3- NSS 3.12.8 Beta3 - Fix unclosed comment in renegotiate-transitional.patch- Change BuildRequries to available version of nss-util-devel- Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch - Add comments regarding an unversioned provides which triggers rpmlint warning - Build requires nss-softokn-devel >= 3.12.7- Update to 3.12.7- Apply the patches to fix rhbz#614532- Removed pem sourecs as they are in the cache- Add support for PKCS#8 encoded PEM RSA private key files (#614532)- Fix nsssysinit to return userdb ahead of systemdb (#603313)- Require and BuildRequire >= the listed version not =- Require nss-softoken 3.12.6- Fix SIGSEGV within CreateObject (#596674)- Update pem source tar to pick up the following bug fixes: - PEM - Allow collect objects to search through all objects - PEM - Make CopyObject return a new shallow copy - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv- Update the test cert in the setup phase- Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071) - Update PayPalEE test cert with unexpired one (#580207)- Fix ns.spec to not require nss-softokn (#575001)- rebuilt with all tests enabled- Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period - Disabling ssl tests suites until bug 539183 is resolved- Update to 3.12.6 - Reactivate all tests - Patch tools to validate command line options arguments- Fix curl related regression and general patch code clean up- retagging- Fix SIGSEGV on call of NSS_Initialize (#553638)- New version of patch to allow root to modify ystem database (#547860)- Temporarily disabling the ssl tests- Fix nsssysinit to allow root to modify the nss system database (#547860)- Fix an error introduced when adapting the patch for rhbz #546211- Remove left over trace statements from nsssysinit patching- Fix a misconstructed patch- Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221) - Fix spec so sysinit requires coreutils for post install scriplet (#547067) - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)- Fix nsssysinit to set the default flags on the crypto module (#545779) - Remove redundant header from the pem module- Remove unneeded patch- Retagging to include missing patch- Update to 3.12.5 - Patch to allow ssl/tls clients to interoperate with servers that require renogiation- Retagging- Require nss-softoken of same architecture as nss (#527867) - Merge setup-nsssysinit.sh improvements from F-12 (#527051)- User no longer prompted for a password when listing keys an empty system db (#527048) - Fix setup-nsssysinit to handle more general formats (#527051)- Fix syntax error in setup-nsssysinit.sh- Fix sysinit to be under mozilla/security/nss/lib- Add nss-sysinit activation/deactivation script- Install blank databases and configuration file for system shared database - nsssysinit queries system for fips mode before relying on environment variable- Restoring nssutil and -rpath-link to nss-config for now - 522477- Add the nss-sysinit subpackage- Installing shared libraries to %{_libdir}- Retagging to pick up new sources- Update pem enabling source tar with latest fixes (509705, 51209)- PEM module implements memory management for internal objects - 509705 - PEM module doesn't crash when processing malformed key files - 512019- Remove symbolic links to shared libraries from devel - 521155 - No rpath-link in nss-softokn-config- Update to 3.12.4- Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766 - Fixed requires and buildrequires as per recommendations in spec file review- Restoring patches 2 and 7 as we still compile all sources - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems- restore require sqlite- Don't require sqlite for nss- Ensure versions in the requires match those used when creating nss.pc- Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn - Add a temprary hack to nss.pc.in to unblock builds- caolan's nss.pc patch- Bump the release number for a chained build of nss-util, nss-softokn and nss- Fix nss-config not to include nssutil - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite- disabling all tests while we investigate a buffer overflow bug- disabling some tests while we investigate a buffer overflow bug - 519766- remove patches that are now in nss-softokn and - remove spurious exec-permissions for nss.pc per rpmlint - single requires line in nss.pc.in- Fix BuildRequires: nss-softokn-devel release number- fix nss.pc.in to have one single requires line- cleanups for softokn- remove the softokn subpackages- don install the nss-util pkgconfig bits- remove from -devel the 3 headers that ship in nss-util-devel- kill off the nss-util nss-util-devel subpackages- split off nss-softokn and nss-util as subpackages with their own rpms - first phase of splitting nss-softokn and nss-util as their own packages- must install libnssutil3.since nss-util is untagged at the moment - preserve time stamps when installing various files- dont install libnssutil3.so since its now in nss-util- Fix spec file problems uncovered by Fedora_12_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- removed two patch files which are no longer needed and fixed previous change log number- updated pem module incorporates various patches - fix off-by-one error when computing size to reduce memory leak. (483855) - fix data type to work on x86_64 systems. (429175) - fix various memory leaks and free internal objects on module unload. (501080) - fix to not clone internal objects in collect_objects(). (501118) - fix to not bypass initialization if module arguments are omitted. (501058) - fix numerous gcc warnings. (500815) - fix to support arbitrarily long password while loading a private key. (500180) - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)- add patch for bug 502133 upstream bug 496997- rebuild with higher release number for upgrade sanity- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75- re-enable test suite - add patch for upstream bug 488646 and add newer paypal certs in order to make the test suite pass- add conflicts info in order to fix bug 499436- ship .chk files instead of running shlibsign at install time - include .chk file in softokn-freebl subpackage - add patch for upstream nss bug 488350- Update to NSS 3.12.3- temporarily disable the test suite because of bug 494266- fix softokn-freebl dependency for multilib (bug 494122)- introduce separate nss-softokn-freebl package- disable execstack when building freebl- add upstream patch to fix bug 483855- build nspr-less freebl library- Update to NSS_3_12_3_BETA4- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- update to NSS_3_12_2_RC1 - use system zlib- add sparc64 to the list of 64 bit arches- bug 456847, move pkgconfig requirement to devel package- Update to NSS_3_12_1_RC2- NSS 3.12.1 RC1- fix bug bug 429175 in libpem module- bug 456847, add Requires: pkgconfig- nss package should own /etc/prelink.conf.d folder, rhbz#452062 - use upstream patch to fix test suite abort- Update to NSS_3_12_RC4- Update to NSS_3_12_RC2- Zapping old Obsoletes/Provides. No longer needed, causes multilib headache.- Update to NSS_3_12_BETA3- NSS 3.12 Beta 2 - Use /usr/lib{64} as devel libdir, create symbolic links.- Apply upstream patch for bug 417664, enable test suite on pcc.- Support concurrent runs of the test suite on a single build host.- disable test suite on ppc- disable test suite on ppc64- Build against gcc 4.3.0, use workaround for bug 432146 - Run the test suite after the build and abort on failures.* NSS 3.12 Beta 1- move .so files to /lib- NSS 3.12 alpha 2b- upstream patches to avoid calling netstat for random data- NSS 3.12 alpha 2- Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist our signed libraries and protect them from modification.- Fix off-by-one error in the PEM module- fix a C++ mode compilation error- Add 3.12 ckfw and libnsspem- Updated license tag- Ensure the workaround for mozilla bug 51429 really get's built.- Better approach to ship freebl/softokn based on 3.11.5 - Remove link time dependency on softokn- Fix unowned directories, rhbz#233890- Update to 3.11.7, but freebl/softokn remain at 3.11.5. - Use a workaround to avoid mozilla bug 51429.- Fix rhbz#230545, failure to enable FIPS mode - Fix rhbz#220542, make NSS more tolerant of resets when in the middle of prompting for a user password.- Update to 3.11.5 - This update fixes two security vulnerabilities with SSL 2 - Do not use -rpath link option - Added several unsupported tools to tools package- disable ECC, cleanout dead code- Update to 3.11.4- Revert the attempt to require latest NSPR, as it is not yet available in the build infrastructure.- Update to 3.11.3- Add /etc/pki/nssdb- rebuild- Update to 3.11.2 - Enable executable bit on shared libs, also fixes debug info.- Enable Elliptic Curve Cryptography (ECC)- Update to 3.11.1 - Include upstream patch to limit curves- add --noexecstack when compiling assembler on x86_64- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- rebuild- Update file list for the devel packages- Update to 3.11- Add patch to allow building on ppc* - Update the pkgconfig file to Require nspr- Initial import into Fedora Core, based on a CVS snapshot of the NSS_3_11_RTM tag - Fix up the pkcs11-devel subpackage to contain the proper headers - Build with RPM_OPT_FLAGS - No need to have rpath of /usr/lib in the pc file- Adressed review comments by Wan-Teh Chang, Bob Relyea, Christopher Aillon.- Initial build/bin/sh/bin/sh 3.19.1-19.el7_23.19.1-19.el7_23.19.1-19.el7_2nssdbcert8.dbcert9.dbkey3.dbkey4.dbpkcs11.txtsecmod.dblibnss3.solibnssckbi.solibnsspem.solibsmime3.solibssl3.solibnssckbi.socert8.db.5.gzcert9.db.5.gzkey3.db.5.gzkey4.db.5.gzpkcs11.txt.5.gzsecmod.db.5.gz/etc/pki//etc/pki/nssdb//usr/lib//usr/lib/nss//usr/share/man/man5/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnu directoryBerkeley DB 1.85 (Hash, version 2, native byte-order)ASCII textELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f22e94652c9b5e6d53656f26bd73125916ab016d, strippedemptyELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=46751698342ac4b535a10bb9069713aa154455d6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e36a18fcbdeb5fcb4ee7d636258ab5101aafd4d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bedca426d0bf95a66ed61a854ab22c3b9c7ee7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=55136a597ee11ae4e446f506ce7539a6f3078a4f, strippedtroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)>Q}>,2 PPP P!P"P#P$P%P&P'P(P)P*PPPPPPPP P P P PPPPP PPPPPPPPPPPPPR R R R RRR'R&R(R+R)R%R$R,R-RR.R RR9P.P-R%R R R RR R,R-RR$RR0R.R RR#R9P7P8P9P:P;PP?P@PAP0P2P1P3P4P5P6P/R R RR%RRR RRRR!R"RRRRRR$R,R-RR.R RR9PLPMPOPPPCPDPFPEPGPHPIPJPKPNPBR/R'R*R%RR R R RRRRRRRR!RRR"RRRRRRRR$R,R-RR.R RR1R9P,P+R R RR,R-RR.R RR9# An earlier version of this package had an incorrect %postun script (3.14.3-9). # (The incorrect %postun always called "update-alternatives --remove", # because it incorrectly assumed that test -f returns false for symbolic links.) # The only possible remedy to fix the mistake that "always removes on upgrade" # made by the older %postun script, is to repair it in %posttrans of the new package. # Strategy: # %posttrans is never called when uninstalling. # %posttrans is only called when installing or upgrading a package. # Because %posttrans is the very last action of a package install, # %{_libdir}/libnssckbi.so must exist. # If it does not, it's the result of the incorrect removal from a broken %postun. # In this case, we repeat installation of the alternatives link. if ! test -e /usr/lib/libnssckbi.so; then /usr/sbin/update-alternatives --install /usr/lib/libnssckbi.so \ libnssckbi.so /usr/lib/nss/libnssckbi.so 10 fi/bin/sh? 7zXZ !PH6]"k%UJCÍv4t ~98ۿz?,x.Iw I ym3wSnXTwA#G&55/ӭTU Z @AA6i-ֱ?AQ%9s2_lrKt1z/~R~پHkQ*ksɛEޚL(ƟkA bZs|A io6r}iA 1DI sɖVlvdd<Ԣ 0҆s% >@-~:k8m-lH+Ni]TZZC9xYJ侵_8O2N$;:X#k2*Ị[i->sF} ٔER'%dpȨg2>`(xNObLJV4vqxZ`IOTy!V0 5';7 P w b+~WMBʘS-G>V lu=1 RKiOtuCTw(T-+QvwW{R֩t o|}v?4/ aX<u%>񒯈'JL (DeBҥXӈavڵJ]Z¦Nc[6~Hbg5dQW:nD;><.Je1e T HsѾZ)[x;͹:GυMPj ,e>03KJ.ƢuR8jJ\T/ Sɡl|«]?xAD,K~y ZonY zMמbM +Mq nS azC !~6U-dSa Nc^<8aٟE6qH1 kY|,Q5J[q"*ˤtm*H54A*2odmjd/|AXf΂%BLI-ּ/#;9J.=#U9GIKܖd(DiN/njq$В/W$ӏ&67Tfesaڨ"|{4/)pyn8 Ec%IXJu EM82v' ZHJӊ]Fsim~R &n7KQ[`㥹[ dsbc\ɏLdX9sYf墒n{(+=f@j QF&4qje^/ Ꝍݱ*;;JXeϙהL"+w>_avtO=/Z)R]L)f隽-g ${d9-"&R2YwO$c^Jf\<T+RUzwr;^_}{ EW(Z:nq/NϒU$"m jAW yv+yhҟ^ԁKm( J{wL' 9̇Qǂ7}4j4:Q>#48Wb1,xZف-ΈgZU,քw;}^ﳛ?<%fAG8{ DPUI ghȬ'm͒SwV%+T D9ґ\HXߋG^$^/:XnFB4RJS 4Qq_ q8"ٍ꼡[$`Xڰ Gc));])m_ f/<v#Y ֜[*J%?-,!nwQ低bi{Όj< i5Љz;P@ע[:SURBj Da(QlKb'4zcbڱQbjпbaW+a*O`JoٓP+Z}&P3!$_M" hKs"7p37Id3Qj4Jǀct@QTCIFϿ9޳ۓ& yDo<8LS!k?!A,ʟCcdp2uNm$~2e U>kuڇ:9ZPXJ:z=a&t>ܘIkޣ:pj[B nD#Y= lע̯7pesMȍ N;PUi-%!T'/hӂ2+y+VEm‹M"$ƥ܊' i>||t.I7/ pcR^ ]pn稔O "J}@ w:ER{OMNVSRК]M j wFM|54i`eR2TpzN;)@̟은1~^D?+̋7}R-T*{@"70;Lw9"li##;0e@t0MhBFU/j [X%WUX~S[m}iBz}rr !ya '2SzU澬q"sihdh, tuLAZy"8"_F>qZ~ʨtWLT %rvƥ]]"IG;qyU@Zmct+zX/ocOꈨak0yZ|QUz9\MpCR PHa` gh^vmy;]L!gWR/{ &4ΥLBMCkKPP yv kdM٨Pc8#-:SF]1_#(QkG\!{[7O,:-%# kʛP+4 ni=A^+LpWDF-񘄔N{ZV"в?K`d 3+͇`UpT`@ِgq[7ן-vW\WNR=rBYL Q85OO%7E {V]g Աyy hV/حݕ\/>@n MY*v$` -[v bG~\}(&<GFgY J {+k.'N ݦ(HV8! 2-Y8Õ0RY!_&lHi)Z~8}6QtR" i6K Nz%B !ki_io-l-"Sg yp>zdB}&/Q`p!S+R[H.5";36)c3즎nm9r&տE<56B6#ХG<('~ u5sH(@ paDHpKPBX z(Un ռϵr`մIƂ9s9~n8 !U g t<y@kI^ɤf?Wx uGt>yI@UwNou1@& ԚȜ=)cB$ó#uyI;/6/m:'dԟ%P۝N)N`MCqruQWO셓·,ֈ˄/982HֲתhRiJ㟍.SyM Oxg<O oq5ΓLvSt䒃!kV@ty߱fwxXP|{xV|[Zbf#*/DP'4wVniͲi945g,b*d'?߬tT"?+]c[ot9 \aE+5&Y(8$ryM)`3Da(A-!jП6p 3f]y9\!^l U-I~mLWe'MRq^";ABk}0ؗ#=-}R~^ } ͼ`0_epשmsh WJT/~cǓ#`d(sU6=sm]z6Hcʕq5deFC{5Ĥ]6j~i75>:H>VA["j {lOvtxRL1%C#T2gf\3!I@B".Q >>Dɥ>yo(`뛘܌ :C cY`} ߝgl)[u+!;iJtȓkovA nmFYgmab1D22Ȝ>~0+{=0וvWy'Ooo&Ua ߔc3#uaA^d)j)9GƊpNh%xWWG2o1*th,ǣ)Tg7Bw!?QYQ`}L6SzwVvJ'tB|; _hӝOߤLP=@11-nLe=w٣ A%L{VNt䞐GGŇN0hw;@rxVZ, V7csqwB Ia;5^LI\b;eVfF֯*)Ang(A+|dȱ !%>.W \bB(#HOų44/Z}4 kFF#{! 4s߾hg89 1S#gF8ytXGxe( hVG,nD7KaM|o#8#M}MlW7T{伽mF ^kpaɃd"۬jW4TwIfy4FSp#АsĢ~L2b{|SL}'0}la7S_5w)R,Tw Ms>L`W4㺜>w/.t\ 5>)ZXThKT,Bk)}@O,)l GKJz_`׌6n2b zS*\Cϻp[}*j|Ĝ`):=M,9Eԙ$|iPX]e o'3vZ4E ޭi.bP-Wz cȟns]?<[7mFNiݥaC(5Q+= iBV٦ڋxZK&MS10pA [n+y&>>KQ cFotr- {}dsk5Uv&|sDwU-(P"tiDCGnn22µw, &ΒkX\ +QՒťQIP2c\nԻ|+"^6\4U`0&&A?<3HAyg/Nݥ6͍|1[dX=WbDIBnV^HB vTPT/ F&Uak+Mꮸ%b"4osĴD-~4NݣvY_#iSuf}^>=Y&Z"10q$U`L~[L72`u }X b 2d)g⢑@ިtԠyM$Τ JCv-V'Kdh@! y} Mf$LE7M!5!\E&qDdSmPax%5G (mcF- rXva) !#+ X&ŞE&^N妚kqh %Bgé%X bW{;Y}zwא?-$o.{\:6"uSma౎~XV=F0j25m*Gg^D[G"G<|3SPx7+DAWmK9M Jp6X IR"g0f s'VtD6.Ff: -OX?SdjVȜ3b$q 9R3+eN99<^ fvTj,Vׅq*BjexbFUo8`NriQ[ֲ-oQ au5ZLܗbR4* !M]^Ѧ.HkOpޑJsU9">O#LWcs[ J\=E9ut$>)@]8`85ݣ́.WYNsmH&\vYbLJUÒ6TզdMgMQnp@CW묛2[lڨ7j,}W :_>R @~!KNПG)t t+/bKfY3WǤ?/=˫wE(s5w IAD:f26v|ےCV`\\dF0u`a3ER?ADВaX"wNl0]+3jg4u,夥Xc~*x_J7Xʖg#oWdFYTVvyoYEKE# d.kb*X1  y*9Tf6D6MN|edLѫ >9eJsKh)]~R[=!nB]sYH,rG L족E=B6D9JJNڗ_>°,iTTL_vXU"\pȱUST>7쪕Mw5:_8x0(k47rzg׽G> FgerW0%ЍV G.Â> %ue ~fDCIxK}CNioP{` lv  Yo,Iy&[ ɍlwiw2蜳dğ)\!`\1"uZɅF-n'kE/ȥW 4Qܴ(%v=GBkںt])1|UYډ4HFd4Ҹ{ {ㅣq2~K7b.}5&"w"Ao }ұP?'qPafѕ9&4 ,.?ZX}]L.-@[;y ӲƚiG2c骩2C5{OL[t'#G"\Y\ۀ ,_Ib) DL c 05tjG]?)q8 B!Wc𡫉wk>NGP><7L&J7 z궡7*IKZ@B~Ytw(w3o5^ 0Z^W DF_9o-{G1*w{7_ѳ40Pct:h(x6q|s*( iR/cnMۏ2t҇ %!vMt0P@G.7^=к+RBX|s;:ln/k{('9PtLV̪/^d"s&jOq*6!V_/JioquCkQ >X䗉Z3J=FZsQPwI_T*1Dbl +"B4~B#0<.љJ 8b7 C&^$%lى RcHݥ7'f[$\zinlci" UEc#[7{٫^ ?#'xDma2v,,6EwK siy)jDMUWIjf*5$rzЦYx1"kZ&<#ؓLoB 9rK} R&KMF A-lvkg#ε༨}?{#l`xK<njYҧ5u. z@0&cN;>'%?}\ՠgqz*Gs!7:zΞc?X%5M1ڞoS D,WnhlMBdg Re^VbaJqGB} /y葄ks_}(2'V˷:!-$V<`F#9$͂ =&simMmy|h29Y6.&ow =T),mbX#mSAsbV6'Uw8R.Wkt@ Qwr-I!d%sbb&(xd^OR$3> M(ψ'Z(?iX.R_LH拾9k ^DQ6~gװpc'HVS?"7owe ѣ@@X ָ@[;UKngdM&n$h9ښpMOO}<40*ZvЖDK-YGPh`[ WjoZ.y(I'e L@,b]H_ e)dL%{0>O=Ay-%Q`C,(.!|F*a֋م?2irGdtK2W +hTkY X`j<*mnCf͖Zz>7|oPW@s_VgaVLXQ7Zyƙ}tJp!:? u!ݩlmU?qP+h3"c+: ;vdww&d8 ''f&,MG-%_PA"Zΰw_7% $zyGԤQ Rt/Г)|(,޺Vbc$mejfd BTP e~M;1r,cL_ y'󨻎=B7otPbpuyϖsqfռ>FoUGSd{vGy#7U6ɐa0OLFt͐HS\XBCN~PħЕY_{gUD|@2H Hb-3t/Dׅ KW s!X+uvýgŒLiނY2[6:Jć,$tH}Tj)-B`CGr۲ַ\,W+R+}EV µvUvCj!-VE8Oͳ.,W+|搌w^CJ"A ,W_NNA8H .! $&W]`stPEtjYHIj):/u˲-|{0Ɲgos=t6԰KKKlC^w;Y.yVu *p$o\ڪ܂KX!|cwNh**Y'av4 uiף򹛟ĖQd;"̝&^ ;ĐўP eM\:5yW'nZL͏9X,+'4 W>;#0{31Fu>&fS@vnKsAFO".b\<CQv j@=~LRY>޴ o7>^ (Leq[;øL"9)ȸX(1/%L^h3gI1X r&4,7ֳ}V?E:jvX-u}2ODlىT ## z_\ 5De00$;ApϢbx~g`k ú{TZ8r=x^ϒ׍{u%TRMKg*n%5.HbA' 3.Ow鿻xa؆΄:484ViUߝ}V'Cu\[V"gq{|&vH 6*NҝmXRﳔxBTD^Df1#:)wEJ`*ciu| $gezir(E'l%Nc9uUB[{H_䴿a`09IfclIR}Qn4;'}#يq^;Fvg*,BŃS%{jLH.?U׿^؛Ϻ%y21 ZD4ٔi0.[2mQ#?tj=$7^GD$;@_"̖If X_0c\ԯ=Jr1뤠\2_'7\dBmyu׆;WBXPcxᛄ9PhUA?!\!k:W4PS%3|BJyei8;SlH|6ͻ|fDs!Љ<r 2@X:`+-B? NHalIBc0pl pޓ -;P!W]REhf)T_BbGU8 9@.3(@1^bΒ2yáGe_ò(0fsm{h@\vewAľu\ kSjꕖwgaҟ&Xv% jP6Y:>д[zi=;_m4)"v3F'>_ƴ+>>"$ +zX/Fٔms]ڋahkĶn/j$4s|W8NtO>5bq;;njJ#e7Ngw"L i[. 0 _= "@B ReXF,n?ֲ$\A#>5cwa7Eu+7܅8AK4 B*\}uWZV`BpiASX4^vjݴ$zz͔3)@H812]cR2 (]cTfRY EzXM K#S8H" BJn~bw<iGpW-OrB[rlg)vK8fOA;lJMc|s8MAN) }W==O} `b&"͙rJȩ1?IݶЊ+ߛ Pvm$WqCϨFPwi |z]vbxםoUzD?҅J_0hy,ߟ0Uj 'Jpi}K#7"$+8V xE+t1 ܨ`31=cY ǧ! r5(DsUR^<'\N)L"^2!UT Fg#֎ )y o(To>Cx/R+_*W8k֚h 7"tC#/?E'KFOpȋOʤ1y3&b )d!٢ ~@W}3k+du{ߩSQmVֳ1WWKj#e@]lV@1wQUuuےESX &2Ee `elU:DžP:uԄFU7\BUZl-Tw x GeKeV?K•' #0 fpBVPhGҀEcgGv3)uɓu56TdGgZ,HF?rGneWt=sa@rn=*H#{2zTj@g/R7ʐUF*a;҇XS| ׄ h1n'ɍJ)=OLҪ@)tc,/܅#/yQUX0g@O O5cGY9tu%Bؒw_iJ,φnAPKE0 X5oZx0@W\O7@FfS(G2Ғ'Ɉgwγ^bz*ʷ@[5?~25QhW`H`PQKEOod1ўweL/ơo*|S(K7fU(H mܰnVla& zuy(sy4גmV {kLPRO>حr+D h3) vFۂ(MxzܮXj2wv=]u Q{ _rjJ Zzib%~Uz]i fo e@\̜,cK(Pm옂3\{ji*tլ ~r2+Ǐ.f>E+u0"&h~u>cW7K~[(N-eHat4BKeW\6I38#4?ǕxT&`*3 gvޔۆ6toO-{oJ0OHK NAB͝@WN\ 45d*z? l1!&q킝&R`jŇSH-Z&6nԖS9 ̑Iwx)^b<K.¹PkAP&o=H0\Փ-Z=;"CϞN[KhgdwJ U{k U!vKZi-ϓ{ >&4Z$WŹPA:}&OkE5j}Ժv`1POy Al-I)%7E^rPS;6+*}𻐮2& l7ƺ{"B}7˹B,gK;2MDgksz&&^6S#.^kb 5_%қ~ ~F~'/0c?sWͤ|[@NUՉnw@cTx)e \NV&|ׁqaSL҂LC4bU}DwQ:l=k/1x1)n~ѹ 90 x1@ב6 &IZħ[uSCwQun)\ pEy =8k2L|1q ݽ7e GJͤx" ,T)\pQgQAtݒj&C +#S2LWר+ߜ C;R,1tr~;4A?NU'#%֨[HeM {u[~œmXR#wZ GԴt{-%[H4 M{D:!f1GE3B:<-#t|=PsT4/f95<_@S 2⹬/ ·a@&ڻCGK~gGcS# LФ¹iXf?צFV!{ .zi* BDތ mP0*2uR[mdZP3ٺ(Xh{;‘ȩ{ȀB^ Z"dn&PC_0?E1<1K*f9s1[򗦄qZdaJ? .􃄃[cY 'nZ!Fџ7`15;v"i{*a.b8M4Cs/IZx_PxQNV-RsCYVxfG|l)1g,!ϫ(Cb52p&u>dYMxC@+8Y+8']^& F!yҍia'phZ B6mI2%V&v$K{j`g;yR_l.^y.^jt@ܬJi7Ťؤ,ͩ`b%Zg-H;*-BS}9')*XQj u.Fxr.lA( XxNYVOP><.,Ž/oZ!&C{V oqal\)[nĐ|yljV8Xۡ[`%%r9%YEI3c*nrJ:[IXN"Lzm ݱ$UO EDZ.R/6sJF&9/01pk@7j!RsvW>qm9/gJ G:XnKkX{kr%z5a"e @ 5a#Hnj{] :_ޞ҉{h( xZanݳH7dZJަSQgѵjqMrXDa0Ӗ0[xnkkNr=OL i%5k/[ Ee]]Gzi%#51V Cl&BáD}gVHFV<'-|;5{_^u$J۴#(b%:/&G:Y"GJLr¥+M%`uBJ[/velv0_YU,>)[8G2C &2^ KjDhOv獘G?:_ԖIH;9՟ Y@:K%p7wRWvoc9\=@zLX3w,3Vȑ{ICYTOLb#I\t;L ςO3)\1Hoǁ-(3G t" ރ@+^d`#NRkIR>nl;TI 2-:7"BntH+Q9ܟf~B0V) $Tf.ٳ2 (jQFwЛ< L>#L*p(zpw42k~+p=W׋]+pV %/S`쐘tVNSu0שMZѾu!{ 3sd`4B>YIk6йżPHI2?q=w0@x#+7QP}^*i6Wp+]E/0WЪoth6d?TXzo-aƿg;Cgz#A/ KML@`uH|q5deuh]Zb|cpBnyr-c^,H؄Xkf *]^3ീ(23g\}V(=kbN/g͞] ΃ADmv7ӋunKoұv%)Ev=ӅT)C[$J3:Mo [R6~\:6]6Çr?Xԕ:w8]$YOc[?eKCN8'gfƫi@v<|^6@,@}ZyL񞮓`wwH:U4ϟ;]j@ľ˓mPW:\~~4?O{@آ@@yb\jDV?D.2{:Y┒?i? ͠(iԱFgVٓ+&v T\t:]~dnM8a,_͔tpYl miY'2M&ḚHuV\@z/gy^,X슲+ M;? (mX! ,LqH^zs#J>iD|c˽۞tk9gy!tols7|naD:K$@Y &g}1s&L?7~xY[99#d/2/ήi-;?M׎Q3֜ro(4 Zzi^AEn 64RtI52 \xT+]Dc0)-U Н,_ZR]D`أ(rtҤ  ?Zڪ[ 8; (K~naA7J*0JX3vLv+Uצv=sOc1<ÄgZ㟟Xb {u[r [y0L" t٫2-*S ,fˈ.RSdeݼ}o ?I H#՜@]kr<~,Y-U}X`b6@5 C J:#uKpub@GQt{64=βqJb `u=ʦl?W@gYpU# 6'ɹȴy%0lY>&#qTDqf-=\|W6ߪw>}1e@xGƴM0I EVZ.>D|핫Q&32i$p..錙=;]*.yZV:cfQS}7}Z i72{>-ZV٠~h)x.R+5>m' kM/9xu7r ΆW+n̠$ ygC֩|*2kP|o)v[@ߧ.ֶvVb|r˓ы@:JyCYc}douU¯7rTyFE1/if\ BʵV Z-V$Gu,P[d@wgB]?[^٢ WrܲaML2.<%ɑbѴw?* SƬxۀAAҢ$0V<蓕K/-2'a`Ag[X1"FV醼֍={'+y=rdS8>(k_B,5,OgØ3l?8+傶PEXK F9l~÷Tg,Y/]֫n@Uq+9f27O},xO8yрK9k>a8ɉa^6V cƜ>tB+a"9ʆv\wN4`q8Fɋ ]chB&GSQ+Щ hþc/RqJjVX-}0[w_uV%vRP\,\P9 {GR'iʹ'wǖM,!^ԑ^w,Xď?s֏쭵&$J}OiP>Ѧ/ʆ,A1LAƑ^l]g7RTyǗa?Jlm@Uؖ1&b"L5yePU$L|O cao,D o;n''iZ| ?|7v2@s塧yK7bW#XPK7MbHN2 "۶f<*9I5Pه",V1dwM]D7%ůҕ#/ Vq>G*]Q-+n x{ၣ"unL%\)?0)֑6:qN;J<-oϨH|l Kauq_/5ϲ9pb/Cpa,͒4==PX~z+``jxp֮zP{iw6zeA`Aܔdmƞ: eccPL &L}w6&WG#XuÝq:}QFGT­6\QAI5.uhvfl_Ĩ/YK )%GVݻ&EӡSC6ÃFV{^_ b][Rϸ5B+o効Ҥ,JUcE$Z%u[[_\JZ0Mvg~BʋWY^K-7368xAZBϺdN0_IuDZ涮\%ydSM&Dd`uUFԀOV1K[|VXbR6b‰(\Vfq:P5 ~3K,JKn!h ӑMz_Q%;k2[ӯƑ6_y3< i85e6gL &ùXZGS8!y*?[I0VzrFï?\8`]~]cn1RKqIo˥6)p| I|ܱdǟ6Y }exmX10 hKS;D" lJ:tqŷJ).fLCmm?_q ,1^8Ki2,ۥU [M-fWpUh DڄB}o m.-W 7X}atԍ(!r ١>ޒ[$ebJ9 I"&4@_Q1_E"HLXGQaaq;{?$ˀ,R]4 o5XݵW w">,BX @#i/F!A֟Rĩ pq.ߊ3DD`^1Wԝ O^6HYRk?Q8Z?!KP,*.w {υ-CRR֓}q57kݒ+e>#25|t*epP JI+ /j?4J'a`B0*غFcs]ގU:-ߜDԐS򱆏0ؓomc>^9s|6XV29i-%TV 1bj vE< WC/,T?Do-Avõ[HQ\T` cWLr!'2U:{e.s/DCC^v**P*X#v5i3$0`$յ:y3;v^G^jG3)f'$b (bȶ?K4rm`řc ;N x\QƁs |JXeV/3ut.-~:WX׮89Ɔ*/\/ (~~IM'! W[ 5Kދ(- OT lZ&(N+IC+W"l %^]:d3x>?/z-1(}]\u5p5⢩^k$۟VxgpE;aHJgld-u|Цf;Fxb@vM'R I mm/&HX`H*7B6}†\7F}Υ 7Ұgg[D`&Oq7ԼDȻ/+=|b[;ZhKX@Ȗ퓱|[|WlA[QTҒ~ԟD(Ff z*Y]G3HԦw\: r)bR !gWa]o?H#tمPѝOl.}HpZfZVcNI6Zg_oHP3 ™+EB Iҳ0klj&@;bϘE]HlVNqVjEVK1MnJLLB-1k1eF_Qi7rB%=*9vˬ݂/;$;g[2,ʤwyk`\ҵԹQH,],j SaXC;l7oe̍z~ԅTDWA`{Ī~H=c{'4[@5<@R/X !G]ЈfzE$S%jBZNmZ{3G,"9{1LSW\6 'Qѹp!76<Ě/R,"M$nz8Rl!(6vADë(S:{ro@°,$0 Hbf^t^px y3ͤ!19]JeTOٳrl#ɹ5AwH;b(pY%EX:#]JX-Wn=]drwx}"'ԓrx-[ R+)YwmPEܛ69HJ/D0(Sa(2ڀ< $GrRoCW&cPiz {25sH9uF6[|p)Gb_*2Ȱfmۄze(RTt̀XK#-!?T#9xIQMrn)|R0A 0?u4h[daH9h\A޼AP#P i kL=rHVlxUf9op|v] mvC:M&0Kw#*=Ɯ=-a-GdƑ7aq)SD>0H$P~j&au0[Ijzn.53Kuú~Kn7lDs#7ZIR&O 1}LSkҶqzb\|Ձ0\rB`<[ )9څ;w>ܹeWjOеloA۬%p]Wo_. ٽ[3!$kx(L{)`P lWu뱒 }܈/RSZÕ嵀ٝ<'g'qwI`7Ar `$4",z(]QTQS>Q);ogm:MGf`1/~WfFip4<ڍ/I1^J|se ?_< #9p[%맗DB g >_JxAs  nbu1FoՕqV:ٽlHW:!5eS/4yy b5`R8xH0ؕIk1hLҥH\ TTv9m<`Ku;:]%e6K機M61%jMV:^7Aېg>^h^ԅx[F=mO)Z+ʡfCY)c@Jk)&ws2| 9S<#ff"8PH@  ?y}DʓuڵZ#$DU㗡Z3r֍8hQ#'ur֎|w~ST3GCaYSP817V# ޳)4K20--+6,4P*G|'\>> a1n]1c;#6 cF0qjs'|B#F+s5y,#?|L9T]X.8,‘q<ޜ|3wΆ*~='^~f#[Hs+6BծKB:{=@mhfX»!\bF3TvHmu%.V5WFl}pmS4,B2 Dȶfpɚ8`*ٻpe˲A[D} Wgf:(ڳXoRF r!%_]/fZVRı$-@Xmf71@DZ{d8. =P '2D<Ɛm\Dy:@66{1FB`Ankj#al|6L=ЮU(Ӯie%Hh9< V %K@Yf87' $ey@ 55} +t~3": 1<6lZo oOUZZm`wtʷz}Y7 Qe1'_0i\zj>Fq,y`y̌#rfC/Ҡ EaH 9[!v6D]gō6ǩy.D=ÝϑYA6, %!Jˣgg1=z!/bglճưH}Bl '].^;g) (֝j#B(/Bۈ/ eAP6 kIګ$ [>O)n*ֹD#? -I0Hؑ>E{םƭW5yٶa&?iڳz{BX1Xxg|1X!℔Loh;|YSdn5ܕjPzSi<Dؗ=1I.K:'/Noh/Rj{USn߰QV3Y\C9?}p-3;4LY_%,!M[:]v.8b{ٙ;M!29wpM>ѻ/=xݕ>zFwԄ̛~REa‘ R/pQ`R3=T"-RGq9w+ $H.M\-elLGsPNuwr=N6M&f;_hZ!" ?.g,FpV'9а0ڴ o`b8/n )ZIf7Σ7F)eկ6h^R me0h<9S%0$;d\#7:tXJ8u$K貨>(a-oPiD+ UE]zqwT+PKs 4 me^y%tX-PI:sg85 nF6G(o4 52l{/$}`ǟpxҌNYSY(!W #k[dOG@ κsQ17BᇐK[XtёK.LxBЅCNm^{0͇6 ?a#M[C?X_Ђ:U.g*!KQ;ELQzaR. ]y  hFQF#qLl!Zk6 *)/f͌$FQ;ҁ3 k:z#kﭢ4")r)K{ƍB&S)&xء._ {y~?;sRP],ۼr?2U7^?Q8 RvWTU/2ypHp;7]6w1^Yh(P.ۋsH7Ol!9νl~I](V_.){ĶOKV6FSrW+0~;puASXJ =!_N/L$صs=|NјP6ӮrY)ښ:;\Qr剴=̷CS zjcKA62 |%@^x7Kє\%] #ezR:g' %ft @,.Tb\@ Mcg'^x;6{JPjpLVP笵6{=kI X*py:BO +|ĕ UcfyWDatXv,3ځ5a3_f3ۡ!𤡀O큫w;y]9O59Eh?Z= 8hߛ3eu#ix%5m7;(u7.2g +Y/ e.h fNWnt/ ENfc), ua^lpdM9:y$Yj>:iz):s/ jDm/Fg\ O7{ ~){21voqvwrDD{ʷ?rK@o%? |&= R2fd;/e78+c?BDB<RwKr6 w|.+BJ[TzF=xv( x(bHCe'?'֊>Ի١'{m P >Iz,\=7Q+HY~~.fV9μZp"✋K6cg&sF)=EmԆ>m\m9x$K ̱ Y9}ʬ$} p_XµCA_ ٌ*y,uA 1 ɾ x_:|#W3q>O&ɂP'n?;6%5pO P0:knjay&|ȩq?67cq*e9/|I?܏}_mb^,Qt, ([=eP^|,0Al q#@2 ӅH9grҠ Y92-6Uc> H XJ{:s5?sHpHk:&%~ޡ-DB/ĺ^TgGW2nT|/A/]ZK+◩x?*$D5/]k5CV0so.GaK%*߻$ { fp2]6AYŃ%HK~<7\{:|֒%u{p[+EJ'M$޺)^(Š6jz SWO,ck#6\S\@.|ݏ+K&,}b̡ۨ$@Vyj&!5{rp8?),ePTF8Ӧ ɚg9~J]CǞ;fϑ2xis|"Ύ?sqM)| >{c'/h0S$jodX귋',ՄxE:M07\>N~mc7oerA)X #T@-׃)ѹ+kU?}|qv2Αy' W'2][3w8Lk V&k< yKz7_xDG#a0g rQv+-"{f?_ne_wEZlYD+J9m{T[|gAn_b,];-5+~hKMdW6IPPpXݣw>'hoă-;$;o4r4gýgX0 Nbae#VI{h9JXHjmF)T ͼH|F4h?Q [-q}0_=R!J1.QoR\uWt6@"sk7 فo{dkPR͗8ihe\kGǙo,|dI>>1FoAp~aG9GF~r%{by'@LC4&Y rv _ ^\zTQ}N?[ftk0%Jk=gyݵP Hj"yZc-,'s2ಚ r8[ѽYLMDgK"{9HzVI4S::ցaF:>S2Ķ YwB,-;ui{Yjr,-5QV!r Kq}M u Dj鎩ͳnFm.O=WHYLEUp+Eoid}eZo(ئ EckK0Mne>GPNtKz?uI2DDZA߽Fq/ԡ6m.Vdȑ Yaxs*'5KNuJF_XQ`J6w>8x6N$"t|]k+{COxJ` C`K! g>S,W]L;}^@C4|I@:ݝ Ә y 87+1)Ȱ6bMq`6pWg UaVE%}1%-R+ Co'EI>dfHS,LM?HE)Bӵ+\8yD%OjH8,p!ou Rb{wćy{$ '"F+slUzH o6lՋs>9]~~$u7(k c)@͇$#Nk1Y$/O Q Ϛ7݆[\dG" \xLWCXIMSLiκ˓)z릾C=^3|a?@evU}KyVNl@._:A7˜e~ Uj[JE7[&V儕kvb5t0FFD{j6e'P ʠzs- wBwƴs:Bx uȨ*M*&+]?V>Tt[*f[h_{M eX,HE[gmY`WU1%~Nb)L{V[2\Cl$0׺y@+ҷ_~$(<b1X,٪9J|TՐ[ΩSyXz!  J"_x">Av|`+C۱8rȦG[^so΂):2%Eo wԯ3Y|bSHWm'S.a/Yvn)Ѵxy\G.*F;z< ;ȳYu!Q|>&A$v]I6#?K =u4=2`Q,j#_FKŚ64w'F;Hf07~nOCU7\F?~9g&t`TZ Z?|h˶9wO? &%t)ca6N` i7>RêU.,f i_[NbzI=t j y0#,SS^?6!g1s3؛!U-JzKDeewi)hPW]{Jl7$X6VNή[t9AYcX|k&lsna|?ljKlf2K}.w.bHf83rM <3i;M:(՝"1gZ¦zz'>,F :#X:j^-iN7mw`ߊUm(1̙H! #I%H_dsH!ҁ Nk(ǃ|0BM3Yأ ?0b|zXʪ@g h@D$hGxJf:̯rk!CkCibhb5nyث>n穔}RG'MWA#gd[^!DM|9FVn1љ5>z" m-mϊDl!`?tk}Ϩ$ף8,k4",kKh3[mk&F,p?;d;d/7*CĔih>D9XL YXmMƳqGz]jb (3! 2UwjrFU65D^O,g~kֵ[R\nb,IөHL0w݀?1+p֜4d@atF'5kñ!+ehQ0=Qb|d"z ,/_ 'P~k&O0G Ȋ'uQyEhZlj)bYVg=3 ze?݊>|J8>/߰`֠gl2;)kyo6/ϺVV-?4w)3uEϜv+0GM/)cΜS8\&-DƇ>dK mq0`Y>촲!j}iXuv5j0E''~.*'O&x*oյ}D.K Hjmp@JieBwu=rJi &Xgk[C.]eP Wx0d28X2s9 <&|񑁻\SJ Jwk~bM%9 Zًԕ1 %06a/c9ݳ =Ӌ{jr$Sf'\a?ۊLc2TW\4:.Gg_#n2+q`n#G&%Ц>2R\$@KrzsXFs v|Fzz.](45]/Y%bجwb)+V17FJEu0neDE>c4q ?A!Fk?;0~SuA{FlIp$VUXcqLix Z[5mRd>Q.o;NҭVVޮLP>fryu-n O{/{`_C// _I&q|I*>d)NϗjA{eqLf vS@>ixϬl8$Lu\{W6<95)dT-GG|h!d~uO1E;d,g>!I|`s]½D? oMzB@׷,Nb|fK_IϜ>*U"N!Ӗk_lwPZALS֙Xp2xR[rJ]+2BF~%oc~_^0:\:sCjrq_2Kt4T,q܂`˶Hg@nH6!GWks+I6E31֬1Wvו;~a""ч_Rj68v2%'Ch朐>`Ps#BBEdUSjv),Mu ^1Oqf鿸{6J,cv.CĻD6ܼe|OalyD?yX3Q|CFF0P6s0b um\ջ {~ʁoY>9a 9+g*E;ē 8bkU b,oAuۭ~ѶA :uxF˂8">KD75'`nʠYTnHD< =$L2[8>QyWq)hR%:I|xPp? " hc\}pFsإNQ! ~w.:-h*iLSbu|Sy]=O} y*&$Es%DX;o16n0q9 7G KϾ+#)yʱj)@!Ѿ[g$Y&Y?WtsLf_ )t]m-3*i,{gc1]-GNhbFT pt{tҏlUG dW>mK|UEl,+cO'n 97ZDoEd Pn%^ v*-oI s7 bu#UYml>DN)R!:ݤÛjg6.^eYҺl2?5_O1'U꾠&$48wFbZ'#R-o6ې.eg\P7%o- !A@za#:c]q1) ?}gfwUAL+jd0CRξPUpk?3|Z VNMJX |">uƶ(h؁kW[},R-iEMG.{ X hfnGY1ǟf*!EK2O}W,9 b٫0!Td=vS% e'*nQ«:Q( xץ6Fء+x*ń xnI阍dUn]OU,T'1Yj`qJLeHCHc r:/CRjm:D_6j~D42Afh9QFG/ct" We\b!jvHe[ba:ZVw\CN v ce1kѯ!`΂Y_.o=oqYsT~G "-?}pVebvȚ=a"66k2[L,4&siC,1oQ)AC6v{P1Wchj$p.&%Ig}ZkfLwA౟ry3:2'q?aispq^uy9>pڣ!޵x6>mu r}}ޞH$>#𗃥Vbd! odX1uC_* ǥsɩڍ5z@3a.3MO]d_gCjR8SaMW~snL{ٺi?~e>l%{GGʲ |Cqd8ljOOASLೠUmQ?Ğ8ӱBfՎ续lAs,sty0BklEƎ}\-.EB3|| ,ϨXpξXA*dq#փ&],gV$py'Ӝ&4|gS ̶> =C<X5z/>gtk?C!Ib95+wr^Ey)tst 5^"e*]9bz?oX9`HvQrJCMbl0P]D9yb,)4.:,r11|-C AQa#~[\O/U>mQ4F̂ߩ΀| ѿăiHPe !g9{W^j{nD>\Mv\)M !P,'Wi[f$IMQ?X=Ͼ MԘl "a77N*̠s6]܉tv |"G6r擌0}YSTGPO[F)+6NpyP.'qo{ګ1Wx:#"[# ו[='"߽2!d _ >^f+;P]2pJ< z\i4,RĀ` LM.; |6=x}U8#YHMzD5{c"$R)q`\FV[CR" p'7NY{p.BElY>\kw=3d#@-y|vԛ&~p{b1i燈hpPȀa (ZߙAX&THsFҤf\z61iƤ#ZEffk^]Kyη\xx vˇlCջҳ yއьʻ*tCªd'0/iU|4XW?aWxϝ)OEofd 9uP[ޕ3CQWkèAa+xf5zMnc+XwUx9Zg᠀?q,u -o.w P;㝱:|q:`+&H߾뫯` Mxa]Ļ9SCj,JwGU \9gqḾunܑ䥇Ỹmdsp3tIId8JpsZF !GHNPFm+Z9^_j6J)HƖ:p3jȑ ;א15":(IB?6LNW S\yXz 2wV7qN'sޙ" ;T/^@2HxA5tRs^+׎e0|-2BظO3PWI~QS'A T.<|+v^ Ě-ް ~DoQ wUSa;gL8aQ` B⳱ X'>K}Bk]\~WFe0k X;PjU/p4= BAvn&PF k!K^yE|2XurbO[VLI'$)=vQ/座$sVX\?kvCFHCx?OyKG [V6CluJ'vV(CLEXn/Ҕ.b=?c4֖p/T*1I I4b28юu2oALEFҕLkX3ӢA Lʡ,(tck/ !K.MA?Q A0wɇXqc G(Ї6&.:=4̆k)$\MCq5b 9N1mHn۫ ب_Io[2D6|aO}ʠwu 0!W 5JP>nMX@(`֤_[#6Jo1Mx[d2Xwh t~B20N%YDt㫯]Xs4jlM>0e7*eQAt7wzQkJ$/.ºS$Ek@- q g«Tu`92 ٲ}K6Y y4N/m/lNUը_ 2>48G=] 85~baC䋊hЫρ["k(lR*ٶ/ 9ګmyp΂PT(iJo~up=sHEDp貯47X#i(ٔ 5QĩMP0ZEyS6?ArL4L2IĴCÇޝey0$DXef=n8"Dv-<GMmiY,|rC)R'iQdDyT7oRe6G:@wd Z 0 оdyNuX^\6Q'?KpVtk[id0lnc*1lOEX?9 lwz;jbKg͍p݋3Ǒm~od0ǹ6OO_#o#?-6^y?&O.ÌK4HFbŏkr;XLKr+dto.?V.?Y*pn+Yڑʩ_<&dk>/tkaؿ)*Q RF3_E;/ WأX_Dh}|o(SjGبi8-84 JWRGES@n̲c"TAq2 ]* ]B}q/#ٗmrxL%͢s.J{d0ޮodMC}å㓃 QYVDKb'rOt=SQNi1#st,&+yXa EHNl<\h}-&Ʉ }m,i<W> fN\l.6?qemu/sU.?d=_ڈ&J_< Wr$pjK~\"d(>zEm/6p$r[gfeJOW]~j:F'{)j%nTK&ʌ +`>)pt[3N"WBdw$xjf*R?Y$9bvĢt8wYN|ȘETȫ{0-БEr7xIO_RxmJHhg^q ,VpO/K[+ؖ%[4.%x1`׵j)=~C)f?X;3$t5z``t?N=8b=՝^:1=.bNqUhF)8U E\Z|/` Vnz3yVi<\Cڪ]Pծľ슳4b 22G]lm#6KMIyF v#G;\T$9{о>rEQ5=V=)<u e2CMB;Sͱd95,Y;\ SB!1!J;e$iX*+&:ff`˨_2(ҧ4 .Zl.1 v8۸hd&Z %IÓa7|8^[+5\:ʨbvuyM?r (۫N9sɉPEvϯ OZY/֘j -O6\Z1` uo-1bry"m)'Lju\ҋZ{<Lwt,p` t<,c)\U-H3R%(M$șzoiP[?Խ|K(~0ix.з*i3V OH\'hvpd(ioMKlfr. tE@՞&|vl&FlA7&!VQ=[9*")#ܶ*G6.8TӉ@p(Z e`y˙N \/RwI˃nC=CCD<{%vg)j[zձd \KaJ|JQb4+\ Q~PR. bgW}RØ#(r a=ԴS=2de},¨;'2y]:%^kb-aӿR;"KpZKy wPxp[DWk_<J]:rzO@(}P|C|KIlND^?(~L(UFU˶Ҋm;󅋭vLx4FX6+[\6@d]փ/JHh~'\'hX4w(D+E8疍X9$#G,u$ew3X5QY}tlD^8錷=MM| `0RhO#hd?X8QXpiIoﵣx܇_RA?|r_LHcn`xk ,BUK0y8e)! -7i}ӆJ8rsrǼ+Ik x8.XdNqĹ^JޔZu>rĎxcQNYmKđ`bNɹ V\YޝCiY\P'FZ, %*lM(om Ɵi&Ok}F6E;6=ZD ݐH9MЪ}߯yZ;CDqL(`WPhr==XLb3BNʢD[oI `n+KSs۷4⩍fEl gIjzKcqKzN#fVԧR 0[Y9l}gWʘ: !NCi39./gP2%.iG/AqᦰO޾1_`~OvWzpɄi$q;5—l}ZX&6:UN429.6p8Es#P1s1 h#ZH ;Dm?.dYD%T'f44ǸLdr3~*p/`IV@ۼag.*7c(hMRba's7ȶgoUvMv΄%X(NmOxo`rp[R1J'65`~G5};uo?.9UrƜ%T@^svplDJ1F$(1:`PFR FmSWa׊@HhǓJ<$LOQ3w;LYJŨJnc9:|3>;Dvͽ .+H 3 *2Y/cnwX0MN%%q9 -~^Â+GW6BS@+2 ZC&چt"W=}iCu"FDN@FG˴@E6@3[`HjwuHoG؍0P -(By }眳sw`>g[WK_@(,sv,5V=7Fnwhk_MSt };C#|Hʁ_`h,- %J /?Cڲ$_2{'Pn,dIN Y>1 >mi,5˸+|fQѶL c1vCa=2L;"E ;oF=(DHsZRAI& $@y7N9KaGMW`C&2롮JNq^)Փ~VG}\%EX2!%+bsS) iۇOfhJ*:}+{)mK#CUFn|ײKy Ub &?o).ݛ#@Ę#Du,D1nrP;T#%9$"n,?Bnmm̺!'6L2@Bs3 ;o[* [џ /ѦDu6ʊC{QBr1ud삿xr|쫞 V25n-H,@V710Ѩ 0X˱ylظF $ )xn˗RX/@/>{|r}1x.%'K?#R~ _4LE"<(qF0VZ^MNŐ/A˚e3 L6?Rmh ^1'C` W%$UN#+hZ~ȫr[a^YrX$"R 0s(VOՀ=Vc?mh$1@xlʑ,,IAk_5aF?祍R5~z]m6Wb(xSăNޡ,EAJP쟞hM0\>os~|p9}Pnt^ׁzIea?bQ7ӺO_Cq,=)cd8k,pQqW{4g+>þީ׏aC)O1 8"͞G`j+ܤs;Dc^\b"DU05O=ww|/T75J`>>$`v8$!ߣJ`jNaAxo/Obg6ϧ_x:UQ iw$nAkwt$]&4mH7f^XZV᧧9pM\3[&U ?rٖk_a%$P ׉p@)gέfӏg4{*r0\Aii,5TZ H>lRdcGF '݀nNr~7rcX[/x$`gA)~f0Nm*:cHI7bilfOc`Լj }vŐLxy_~v0ºj|źaɡ`= YCzSu]Kנt.{#}J{2:N?,o9l G~"<ǃLMcr˭C  T׷ :+qJs['ܐUŞ/,x|N\t0Ț_Ijb/^/Z̓XzvDez(a}u3|Tzm`K[yb"둩 cp 7([R0S5h2 U5稜fƈ,++񁥱69SrZ5)+Pvbs˩F\+ڥ\z梧sTԝnϤތtQuy)ImX3aT䯪h,a9 c鐀0Sz+| 3J!f9x]fg9[ס7' f2Sj"<4.͵+=UZV[D'#QWg֨ (`]![]hO0yeB>rsѷ' m?P{F/w&֥* w6m{uOSB}/wu8Q0QBFGdTKY=akq>$mI0E`~޵a{Kw@GM,[M}1TMNq?%FP}B??:3*>uPRXbEP tI{!viyʦcYkr 6}? W$STh2Z=Mpf~YR6はՍN2$>nBWLG(N{M~cP#\|&+-7Qn/ƊjW@O!;j\y${{I\YHTBLs*f^aAXWRȡTmTWec04MpES%߲.S@و9SUYÚB?8|vQZnd18b0@IXAês'%{< gҌ;Q<(YE{-dx6x[Ivp b&kThj}Omֈtt;0k}8kСIi.'E>렐I8ix q6/FP΄?] O)KcխQ nDvԢh q>buq<`w?Ec^\̹B8Q R>># vD+Q偤9jof]Šި`>N*La yK&X=>rRE"{* Ԟ&W˓&{@MF^U\p,xӬ/s#{£T CtqCXca}2|ڳ)Z"7mRM+Y%?dgpƳ8%;)G)F{ J=3ĺ͍@V.?F OzDwmc{e{TY/vx3Nߘ lW>i+[>[v>,tr g=%!Qo$.Reh}A4!.\i&/)X\ Uf1#K#hM@zCg݊"xCѽ[)IBS>ScFB9pWlk۠4$Me4XC&K_ <Ղ&`Ԟm:<#qS7ċ`6kgPͺC׃Uc @nGTb[ppCQOfz5.zO`pwe?xaiZz_g[439V(em3}U[h҈L`~¸'C`Mw8BuQ jD{`K7y Y"l4@|dz)mWpvC~  %LCɊ\zu&-3gWX 7.[[ZX*#eA8+L28R;qogTj "7qrMy`'/R75%5[-:2p\nV$UTn$O|˜}HXnۄ)PPnk9EQ]EAe"uV#E{ K粉1[e8̩۟ߞF<RI!a'GP]j?~I -$eXmVX:.;dӦF|HkioS)E  tDbnlRD2Fzx<{1ja`I,+ ÏХ0&Te7\w+cڑъpm&IE#;]-𞜂 y3Ԑ+Ya幺j+OaH\6`ibXweS>jK>D BzYA9zQy0 M m?>L'?rܲ}Mr#(\9 ";3FEqTFGـGRNhgfb!}n:&_Ck"(S[,m)QhpW!t( _S]KYJӽ"6}p'?Ă1=s_onGR~lG^D*? k@tDͯctVJk`TFvg%߼a;Mu\&$v𹵩1|h覟N= {GCEb99VojA 9'Y,uuoE)֞cɁL&‹p:TdIZlEJl*dOnӜ>9d`NM 01~{'p2e$%GWDe4@)+w0*H2쭕!HRp73TP:X8>rOQ&hѹϥ|ad1d#~ -R6dR7TuA.0VfQ3JkvMC`<|i%Z.pt YQc,+nمn}Ro_V=[{oȚ)%۔xB `O&@F?x|#}wˬ}`،Ņ XNܨD*Z WrYRSG,j (\OHd2 #.C~ܟ򾠾 x+[J)3ۀiG7W:NtVp3Do[A_}1QN{,!?C.(d7'naK>NZ1U)YkpC2yG߾B#\lۿ!)*>uwBWP2tcrC&3g-ţHWͻ֣dV eKF /6ءR=VN:_T65RVi^a eTBYV3-7qY*/ bJ<,j,"tcVߊB1kgڽXT8d(R4$$:l6ԽTyղ9Gh ~sѧQ75KaW֪a2-7֘$طs-7O/DjĔe+Ѵȴ&%̢ԁxz:vI4װK=70j|^Y 2魁ad O 6j_N(P:Ί˷xۜd8J,Z[5zy&E$٤y QzF%s~$b$ !ĩ6UƺW9's)7dE\#q,p"hO+}D$sLw뽛Jg5[qA8i&5^ ev%VH^fVhux P LZ&wmĻ}rnp 6?J/hzz3ja>;6,c|cX L^L4CBʌg4،ȌVd`pPBi,q_Q5,kp@4u^ZXorJ=Z?(3+ kOB,EZJ5% Ƞh`{_h?t\ҕP1{[}&(hFzT`ZӕzZgTˮ{X@`{44$ :IO10Zw.OUH"32S25@A ldRNt t1Oe{j]||4iа͓{y0aA*AIRfi Q;-)_U*Oa }B:[ubΟE|ズ8%4YD?o5>H-za!]ħ8~윮g]Gq~*\Ƈm/8wN\T*I3x40~5:<j 9rqn.|t44|Bf/K9:w5qcF+1VUE؅}a M:olee)qC ]4xq95 9 ÏPVDFi0(&dڍ%1Śͫ~kMl'=u$T='Y\ ט^wNz[Z1"`Ƃ+g)e0}WYik9 ͯ< Gx p3=K}uQycka"' 1bv:ɇmke0$|,IPxt$- uXfݪv<2B~坹_wR3S{]z=RS{ۡg:scߡxx;#-yKdWIKXiܹgp<_綺Que,F.gv0cvH @t{]Y>S> 7hA`S({ U*b*md@v›(qdʡEq]i8Ԗկ<@C0O軎4Ya1[n|R\޵)$.M SsŶj!%C-jɿ'p4 am|vU$(.j*{7e`/X (Y–a?Q# 5⨃IKνm4V'4hUTǂ&A\.Xp?ӏY++bڞɽ{ZW6&Q%";?C_yî5.Ň2hEщn]9.Vf.`QSp`%9qr O_6J k^ܚAj@rpqE+gb]+.Gr|*[0 x W"ʄ_?pyG3mN;/챑`.!K_p*xJ^[b^N[X$f(^N##S?Z]EYrA^Jɖ5:o]-I̍_\A.C΂OaQRol$]" xR"uA٩/I{, ISX2ۢ~ yB&fַ:mN2P!Z=k Vkט~j]v@]xxFUMƖIgJ!w9/Y+%hc(KE&&M"1$hVX u 0U͇5%sS]sVm/ʥ/H+',)Z-d uÊO^)bNyY@Rw_]5KX/wj _g.֚5Jf5zu+)F`-fL`N0?# /s w0Q,T-\_cOCZVG -;?wWt<3GL~5)j377 y)}.㨲ώ7s,yET7<'RBڹ6̏?G=D8&01-._#}MfĨ Tqie~/މd&AZHÆ*"_^A^k(gahe+!7iWFQaꬺ('^H4Ρt^>;967*^cL]LAMvyDHK|*dxY}4@҈ҁՕ%_C+DTkfjQxAqQܾ4X/؈\^dX5%ٵi@N d;ޣ` 8(zvCݱr$}SFN g@S44 ^:A6ށT3 ߭+H;Уɩa1Z#N:EE) T}O-IiNHn|`eW}hw*6ŮM20a҅SdK}FGh4cn&Ϝ ],HN}E1Ow2Z_Q1UL"W^1S+-h?pfH :D %Qi&(M";BB!=ybct$#Mw777ҬVVwa-8l ks3@|s:Px;TPU \r5ZԆ+f2 }TnVm<6+m%+D~7q`x'!ێ*CvZ^L}ğt|>XQM?u|lP&深M m[kpswr&m”EnR%%5fG,M>_ͼiJ,}fS|FݠĢ)e]:AG}q*2q 9k [<#5VWIS. k9f&ȝϰ~7; ‰uNvmm7MMAL#p5 N!)_q.yЪHsԳLʦ薙G=Fe <=bŞ!G[yWZkS&pc4e|mq%qZ&ufzܨʦc"j$Xfg4aպ GcRYcIlJ3#j#2ڏ .6(ۿk35J.{a,1 -'Hwh) +L1eF҄ mdqM]֧,̝MvпgY5 &ȮO?֏!J[s{2KʭƞkO5xY(LvrCCzG{ZLZa:ìTJD6@h A*!6 6լmnp~s x@ Iz?..f 4# B;_x* M)޲o]O|L#cgB|@8MY89c\O7VegfEbQaye[ź }Cy18DgκSr.r2.[-30r' "%PKVv53|Pn#KXY]6?Asaֿ84tqo' y5rR;TB7c7-F gᧆsw1Ft.R\CL.0JIߊG^_:ŏС"MZ~^V=4l-Q7HjKl}ƴy_izF냚^YP^ 2~mE7ׇ6 VO./BǤw-mx{Y\Mu'uN.tN-sD|҅S}Y.\}Ŧ1~)M+`-Ƥ4RƪcՀG1-,"U ImBq$?0qW;LF8m^H.IFJ龌W̵G! B=Ɋoi>C f0v2=21Cs~ˠ F&,\qZ?~b$oP ѹT:뫴д{/JX a͠MD-+#k/83 G{UL #WCsXDY}oJf(-+񗁌 H9d@#ušhY !w'P*sK"RwĀM*whX[|2^`txĹ Q94^s TQrkNBYr+p{ShL:3myj2(&L)Hc8)߶CrN~J37PBgūNH0$}4:LǗ3wt ) C:y|S89& Y0QfA0,UC4m}oGpOc2o>)L7h6jn}吔e{ʪέ\pvmI2l+l>By/h?xq GU! x-+ƠԭyF4`Y-63SыjuV[Usohߣ!6d"O5Ɵ,zKiJD2LaO6<*A񮉮X4Zfd^x) g'̓ Ш\]|,DM1Cks1$LTrEBW}-f}뷙zϝ6Ahbނ>g٠ iBΥ AXy N0 TKAgȹN2J5q*组 Of=eW? HZt`T7>Cr-Dzg͙MhOiRN|nڢYɈoFLwąjMQ\ 71Qj4;pռkwF+_;-1vJzR_`ʣF |*7cl#k<hJA C]&_Ea=@`,l_ؕ`sֻA([8_/6W ;e~;/y|*vb*;iOK.SVAtqr{DxT7n3; c#Mz} [ kZu/BEەl]`b>'s&uHiO/ԤGJ=F/r$w?QgBof4FTWw0N­%ɌcʼnX:tnse劶X"is$T\-")Q &CP#ʻ?A ޏA%㈍˺dJ DvTMmoֶCt&oTTƷWҸ3} T^B:!0'D;vm9XWՃZ&a "%sqAI`h J7jF%׷:Ҋ=ϛt(*GcoM"rvF*r+9n*Ü(~CA)l|Q9Ш\r47u! Eai|f\^$ }NK s9̬ HEckӷ :.yɄU}118I7nj +ʦC٬' 'u! 'B6 ׳`8TCeЏ RP˦9ZPxڵܸq<ʾclR^f)qa/ON;qeF*3YT;=>kZ-}sxGL^R]O,Csd'-M|W|;A}{_䄺xw3hv\f2l}Re(7u~4gϫ`eqa94=oZ\kᏨr .+U|+4L6I#T)[lϝnV @ owґA1%9^Gy ~7bQbTBX N߱`*e<:+J502%2Ř{z[f ^2 Z*`\ c+ /-ry)hD nSM^j|5x`OEo[m~Fb!z qgdL&ܵv 蹐=M@V\kUB:fJǾB`5ZNLt؄F1S:tX_PvUORl_#9g9*T:q?L^WR#T Y5s"0g[ $g`K̇c;SWl#,*%+Թ?b3(r.d"4*a3V2p2^ +w9vQc#$ޱ"7E0?_=6LhOΩ]_Xg4}c9oW^\;6Njϝ%~ݓ076rNrj zV]wI]И9)Lg&iV,69 8ey$FVF&gԊ'๘_fv>^g3xit7x%- PiľTm#+}E b p.F=*kK evMoWٞ#9JOoc7WǵhyF;z5#v~)<_;3<(rqo2l,U[Px֊&=鼦Y<ToaLmkͫHهe -O #H&PG t$,0{5P 0_([Y?2:vړIq9>a }hN»Oa={ Nb-OT}_K6STF\%}Lr1fx ~s}rUIuy襦F.H̐H`pN)z=#0@ȋu?X{G J%tgRHArkX+夆Гdz{7>2g/xu-ׇ4^P>&.>hoiG睮)bj¿*#m<'SIF}J`@zu /4.ˇZg7 @7V468}v!T*@lO\Xa &O,$N 7 {Bӓe=澡gåL@ Y,/6c?rYz ~Z vN}Ħiʔ. 1m,(yOʭ^ƺ)J rg&ӳn׌-'8xY$W{7@Þ- ߝ0z.AzsS8ksbw+ȢB; ,?S<;߯zkӉPOm5B<9\o FvoL2VM+ÄeAFq6_2\kjq19yHrqSijx4=F;YWym})9['Iq`Xp5e;"@̔,NwbD@gɄ'ыi#H,/԰0F2 X=YXM26Ly$;z>ch9]Jy $˛2{~y3pk#Q|t40e!"O:7f-c"oE=Ay"alPaS*?Q2 cZbSh5?b/LNvÒS"҉l2;WU)Fo؆3du)'D\fle֕o]vF [YFw׈usSUsvx\1]#fOc̯2 v9wj lys4 zB -yR@Y԰jQolMq}esPށܺq绔J1LR^M|_Ԗ 鼿Y>H-ugzq)<4(mVB lE޳ P'9!`y#dLP.x0~&ٜC4Op,PCmt_lf$j󧸱)xsHأj JZ13#XL_嗲ZHϾBDUB7ts4M3In^O}o@p#] pKe|iw AK3~"XH"wLs* _y;)~R;9F.4S fϕ*RYgN!T7!HWY^Hu!uR>C;Dg+O#iyݤ_4= /=`&a\A콲.=q[)XPBfiڜ՘U`/Ph|$-=J9 –8NNny`PeA'L`$O>]r2)*4wâ޼x UE`y\ I-Z-{dt-T19Ycӊ6CMرvօeEO W5SmX}40Ʊ6޶9dַ? RE( .#,/eP p3״1#[l`GŅf$H/@cFRG#_˚J95 YA?Rn;MDf[ H?J5)?D]$=;ǼE쪃ٛXe'0ĄxJZ WQ. GLqt^.̴c9JrJfo}|D0oی;smYH&w.A…%m. wr Pnn՝纁w ~~V6f]ٮlk: cǗf[-F2ge8JXerhz`BTPA7-H 2ᬗe3d-} ;/xLϕZ٥nln `v%b Q)kz8 64tŒ#ӗVN{ %)Ӻl+ʰ:f&YJqùOHR>v+S0>C>Z/{KRT>%Q{sg]NzA<>iY*4g#_lf-٩/HjzKWΥygPP"J*> OKy*Z @+va*2ߡ{7〡B1 ,9hx^4&`۔)&);x:ٵbbl-?.j8nRb= ϑy77KULFэPdϒ`8S,dˆ1};~,X9|&9~\0xsO2HރT1dyK/b'U 9mDmhc0+z-DxÐPl#H:gp ~lHtsDD/K9rf*ゖ(F<;'7`(xlc|Ծ[gua1 g[ࢥUJ7]v++X͎4*}ܼh_@n=oQe>3e G;{ާW5Їf0P+b?6mkߞ:|K@A߈c:yRE,@ u3?(Gs'['>鷄-6J,Դ2X*!~r Z7MpWDۖb8$|Rw194%eަ4S=tB?ӶYrQY} q E`DZg@ybC7Qkb\E"[eyóRv ۅ,H, QT3h*T\h{ϣs5ҞLAay0.QFϺ'7A-gy3;64&on %A9OE7FQx*k7: 'Fsw)-o߄Rˡ& J{6g"nMO-ʼn:4U"G*t [% 7S-֊縏7iĬ @4i=lNbWqӒ}skx&O=zvJbV 5'7ֈV;L/T^XTA'h U늤-{ǺS8Xj {"| cȺ(=o᧪_<̺ncN92q)[&uCgQmD&rh]°B$MnDYtAlG)Q$֔fOH2c3B͌Q#tib v% #ǽf?yNᒧ]`"roXhp%b%r{9D ^y0{Mo{))لb j2nKJ)HUXXa`>BKs}`iUwSKq%F Q;.j%ͷtb:s=tgX]= 0LAE7`[gZN`Ryە\(t'@ r0ZşqIྕ|7NB*(ç|r'5!wxӻ>B焝4k> dKԅR} E%svRI}]," M/3*֠|B;iASsQp@17V9QHdŃqjsƙ0_^jȣ6'#Q9I, 0)|0Q% f݆"OJF< J,vbΰ)tNyǪV8~+x ߟ9 !`])SG +&Oi(B;U]qmu-@xY#Ŕ\ A]BJr}uJf3R4#@+)Gn$F{;9`{DgO &8[E 9;d"'#a4=x˗ =*yOG,[hmDž~ [Uq`dD;)}Ce?2aZ@9azӾ@iK{weVSvO?K2vZtLhbroï| >jʘHd@c[&vw#aDKux;üXZl$Oҭ+QJ pՒt#&r)e!()wR<_XezHMSXf&۞[rwHЄ쭪|ŹHٟq,EA`:DL2`EԶڹjt YP {C>tQcB9ͿT>*En:AE6(:`2j+2_f8<-x~W΁$ƛJlV7SR5OhkȻ-\kmk0Xsi m8HWOA(K4QZN5J5\qbxLiOOJ_Ol:,{{,I˹( hߨ(pl{0fqZUJ(s2E> eE5&pR|"kfgrJOCi%҃@7ZW,#8]Oi:qN*ӣ]C7 /*nT/*٥?Az} <+0mcs~(Eq:O8 ,*̷ikVw[HiFNDe4.Y&|ÀVH4iĊ Q,q2,&*kѵ".҇nSrrw{Q2:o5J*)]Vn]6&D={+ľ >i_87"]blG(_-z&qj-8-9 TD^ JޝP8>4_g:GLĒzў fy:F?ݩx<Kް|nro Z[zM/Òk&1[xZ.ީ`%?:t蘢HBV0)6DY-U,SB^9z0_ >Y&7^E!_$El;+oJ{؃H1Я4/:MD15zdacs}]R[3sgedki~&6|eyH/ x- xHc,ϣ 5'd'}ShdƴUЂ8FXcOf?~u#x0^} ftIJBÅzfVTf$ѱs\"꺚wg4.zꔴWjEY1*?+7%'@D>}_ԁxP9GRS`[#sAeո*\zO*ŒHr\fcSv-51EkSD EU4f[̯?h2Wa0T+<(/ؗ +(2~sѨ_{=woR ai< {/иMgq4*D,J1Z!~.*@ʁIZ`DIɏ8wsLR;p?F- 5MAdvΚH޹Io#A}ħ=(OY`¥uېlzڑEdhSdϯvn]}<>`<(plx f)R:Ր;Yg?lC–e].F#j{2OL|hAܚ#Iװ66|EZ~do꣉/ 挾=y"j6܋T[t?[SR⨱6`"ٌ-Wm|le񺴸$Uȶ!+8ǖ-?4$ Ft*R-ESo٫'>y9Jf3׏3mĸǪ\9WF|%3`'=;L>{~JV+/~9<4M?.&[Y{Rf,>n*F ~anV]|4EGّ/\ΏN|cޑj"\2ԗG"i%Ǿlr\bx7lll-U&}JJV{ XRSR).cVd.=&Tƿi%)>`[A>$.z%g8P9sP1W>oЙGvAGM g!M(=vn$Q(} Wf`j`}U ]ډ1OU:Qi nE6;%62:3*f2ɓ\+',EqЍI¥]4p? '0jVDaduiïqb-wڵp?#*^D +iWބc[I^(p<$wtU3 _s߸W_J1Q? 42BL&5F,pхU?DŽݔ(ec'.~雎bONf_DbHz/j#3@ 2+[Ԗe_4rG0IUwc1jAky۟JM&S_4Jw!#sfBǿ37LpO{fWB\ W&?yz; T/ &t ;+|EGl;} `͝!>$̴,ZC`ڂh>^iEN4,] M,%6uݚ=-p >Ri0ev3R1ʡ1 gX|h5@E c@&V !U$wq1ȪVFfdU-\DUᳰ} :5(#H?ko@l+m-~0^W&u&}O0UXEE =bȥ5c x`0rB0M)KͺH *ޓXıQd$н8PJp4=ԏdV}MD}s)ʒ l=Y]/i/Y TT0hC'r٘-b8I7FحOSX߹+¡Q9k^DQ>3lQ.j'5ՠ*jBC6[EH\Kj^ep5R WF 8oS'Iu-8i1IE)W3=hZoNK>d50At}J-1Փaݧs*8ʻTF̂R^eiGi u5$?y3;8$&?DBoko&M,bvINt+$eG8RKh]Z&BsȽ&6vr;څ'k^;~{m}7@% ĸSy] ;J ޾ʷ H5e k/ ai๕ u sY$'3B[r^m# 喞_-NK3ZD }A'BƄJ's9zV[$^8Ƚ'%ɷMhϋ̩"1p>EY$.N!"g+T{ #>>iU)B߀kLm]}\d"jh&{O5Rc~t TS(m3cYxcbDf92u|6a=;a9oQ"6kVsdѫŁ؁p0OYY7A@i|zh!7la˶Pe'$ҭ'[+(gc%R5['*/~)8ed,xޅb^BG.jpIܯ!@}Nɿ9L-Lr/~}A~a?:Tݿ /Quɫ7Cُ(^-~c; \BVciɼ|۽ wG%iΒɄ!eҀS',Զl 8W2@>r lz2[k]g ܖJOgN0Z_ٳ5 ; +U2o^ʾǢ]完b^:w^/?S޾uRD/E`/. _j4TfG)<9}8B|,SdŦ~]N-9ճ(+ds4Bu[Zsk.fW~r[ɋ3Ier/T*ևHI l =>A( 3Vvf;4Ss *$%w>ɬ;#6ʹѥFy*0r- ݳ*R{=.Y?IԁFYIRpH{$XxV9l:Z/P"\7)}"yJ&m2)\J 2*S,Kt8KIk븯bhj/#1jJAfU P*<hv ~@ق/ue z5?nx1o}qגIz *e_#@p ;*Fg\G`Ҕﰠg1To)@m%YbZ,g4ƒ|q|qd LK;:Y:ZJـ^'ekm0Uy/DJ,pM ]?s,hNu<>afWKS:?v n9wH15!VKEWh,,DV|Й޸YyA*,i&!,Ymu'L`&$NTl}18Ξ?}&D>Z#ˮ5r"B%m`(qfmAp4<2FCn&(Z24PGL򸣱PqA͹%F;KXLl썎!+) 8uOȗ~Z(kܥnɂ]~j*zՀfdu^/#r-;.|t Zu YZ