nss-3.19.1-19.el7_2$> psY:U2[kuA>>?մd   0hl k\         G   S;;c;(8090:W0>m@uGŀHIX,SYxS\]D^"bid8e=f@lBtXuʤv wxxyէհCnss3.19.119.el7_2Network Security ServicesNetwork Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.Vworker1.bsys.centos.org%,CentOSMPLv2.0CentOS BuildSystem System Environment/Librarieshttp://www.mozilla.org/projects/security/pki/nss/linuxi686# If we upgrade, and the shared filename is a regular file, then we must # remove it, before we can install the alternatives symbolic link. if [ $1 -gt 1 ] ; then # when upgrading or downgrading if ! test -L /usr/lib/libnssckbi.so; then rm -f /usr/lib/libnssckbi.so fi fi # Install the symbolic link # FYI: Certain other packages use alternatives --set to enforce that the first # installed package is preferred. We don't do that. Highest priority wins. /usr/sbin/update-alternatives --install /usr/lib/libnssckbi.so \ libnssckbi.so /usr/lib/nss/libnssckbi.so 10 /sbin/ldconfigif [ $1 -eq 0 ] ; then # package removal /usr/sbin/update-alternatives --remove libnssckbi.so /usr/lib/nss/libnssckbi.so else # upgrade or downgrade # If the new installed package uses a regular file (not a symblic link), # then cleanup the alternatives link. if ! test -L /usr/lib/libnssckbi.so; then /usr/sbin/update-alternatives --remove libnssckbi.so /usr/lib/nss/libnssckbi.so fi fi /sbin/ldconfig$@,@ih`TR=A큤큤큤VVrVrVsVtV^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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnss-3.19.1-19.el7_2.src.rpmconfig(nss)libnss3.solibnss3.so(NSS_3.10)libnss3.so(NSS_3.10.2)libnss3.so(NSS_3.11)libnss3.so(NSS_3.11.1)libnss3.so(NSS_3.11.2)libnss3.so(NSS_3.11.7)libnss3.so(NSS_3.11.9)libnss3.so(NSS_3.12)libnss3.so(NSS_3.12.1)libnss3.so(NSS_3.12.10)libnss3.so(NSS_3.12.3)libnss3.so(NSS_3.12.4)libnss3.so(NSS_3.12.5)libnss3.so(NSS_3.12.6)libnss3.so(NSS_3.12.7)libnss3.so(NSS_3.12.9)libnss3.so(NSS_3.13)libnss3.so(NSS_3.13.2)libnss3.so(NSS_3.14)libnss3.so(NSS_3.14.1)libnss3.so(NSS_3.14.3)libnss3.so(NSS_3.15)libnss3.so(NSS_3.15.4)libnss3.so(NSS_3.16.1)libnss3.so(NSS_3.16.2)libnss3.so(NSS_3.18)libnss3.so(NSS_3.19)libnss3.so(NSS_3.19.1)libnss3.so(NSS_3.2)libnss3.so(NSS_3.2.1)libnss3.so(NSS_3.3)libnss3.so(NSS_3.3.1)libnss3.so(NSS_3.4)libnss3.so(NSS_3.5)libnss3.so(NSS_3.6)libnss3.so(NSS_3.7)libnss3.so(NSS_3.7.1)libnss3.so(NSS_3.8)libnss3.so(NSS_3.9)libnss3.so(NSS_3.9.2)libnss3.so(NSS_3.9.3)libnssckbi.solibnssckbi.so(NSS_3.1)libnsspem.solibnsspem.so(NSS_3.1)libsmime3.solibsmime3.so(NSS_3.10)libsmime3.so(NSS_3.12.10)libsmime3.so(NSS_3.12.2)libsmime3.so(NSS_3.13)libsmime3.so(NSS_3.15)libsmime3.so(NSS_3.16)libsmime3.so(NSS_3.18)libsmime3.so(NSS_3.2)libsmime3.so(NSS_3.2.1)libsmime3.so(NSS_3.3)libsmime3.so(NSS_3.4)libsmime3.so(NSS_3.4.1)libsmime3.so(NSS_3.6)libsmime3.so(NSS_3.7)libsmime3.so(NSS_3.7.2)libsmime3.so(NSS_3.8)libsmime3.so(NSS_3.9)libsmime3.so(NSS_3.9.3)libssl3.solibssl3.so(NSS_3.11.4)libssl3.so(NSS_3.11.8)libssl3.so(NSS_3.12.10)libssl3.so(NSS_3.12.6)libssl3.so(NSS_3.13)libssl3.so(NSS_3.13.2)libssl3.so(NSS_3.14)libssl3.so(NSS_3.15)libssl3.so(NSS_3.15.4)libssl3.so(NSS_3.2)libssl3.so(NSS_3.2.1)libssl3.so(NSS_3.20)libssl3.so(NSS_3.4)libssl3.so(NSS_3.7.4)nssnss(x86-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/sh/bin/sh/bin/sh/usr/sbin/update-alternatives/usr/sbin/update-alternativesconfig(nss)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libdl.so.2libfreebl3.solibnspr4.solibnss3.solibnss3.so(NSS_3.10)libnss3.so(NSS_3.11)libnss3.so(NSS_3.11.1)libnss3.so(NSS_3.11.2)libnss3.so(NSS_3.12)libnss3.so(NSS_3.12.6)libnss3.so(NSS_3.14)libnss3.so(NSS_3.14.3)libnss3.so(NSS_3.15)libnss3.so(NSS_3.19.1)libnss3.so(NSS_3.2)libnss3.so(NSS_3.3)libnss3.so(NSS_3.3.1)libnss3.so(NSS_3.4)libnss3.so(NSS_3.6)libnss3.so(NSS_3.7)libnss3.so(NSS_3.8)libnss3.so(NSS_3.9)libnssdbm3.solibnssutil3.solibnssutil3.so(NSSUTIL_3.12)libnssutil3.so(NSSUTIL_3.12.3)libnssutil3.so(NSSUTIL_3.12.5)libnssutil3.so(NSSUTIL_3.13)libnssutil3.so(NSSUTIL_3.14)libnssutil3.so(NSSUTIL_3.15)libnssutil3.so(NSSUTIL_3.17.1)libplc4.solibplds4.solibpthread.so.0libpthread.so.0(GLIBC_2.0)libsoftokn3.solibz.so.1nsprnss-softokn(x86-32)nss-system-initnss-utilrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.19.1-19.el7_24.10.83.16.2.3-133.19.13.0.4-14.6.0-14.0-15.2-14.11.3VpV'~@U6@U6@UAU@UUUݪ@UUȒ@UU@U'U3@UUx&Ux&Uq@U?v@U8U0U-@U'@U:TTq@TTto@Td@T)IS@S@Sہ@S@SnS@RJ@RRUR۾@R۾@R@R@Rx@RΏ@RkR@R;RiR@Rz/@Rv:Rt@RrF@Ro@Ro@RnQRe@RW@RSR@QQQ@QKQ@QQW@Q'@Qq1QNQ9Q7/Q#@QQ @P!@PՠP @PqP@P@PAPXPd@Pd@PPP@PP5@PPnP;a@P(@P H@O;O;O@OiO@O@O}O~OiOYOX@OOdO&@O!@@OO@O@N>@N>@NNܲ@N`NؽNN@NuN;@Np@Nf @NA!@N*NpM@MWMc@MM@M@MMfH@M^_@MZjMS@MQ0@MQ0@MQ0@MQ0@MK@MGMF@M6@M-MM@Ls@LOLLZ@L6LdL@L*@L@LA@LL@L4Lx@Lx@Li(@Lf@L_L_LT@L0L0L K @KsKsKKCKCKCK]KMKLd@KD{@K<@K5K4@K,@K+nK*@K K@K@K@KJݦ@J - 3.19.1-19Kai Engert - 3.19.1-18Elio Maldonado - 3.19.1-17Elio Maldonado - 3.19.1-16Elio Maldonado - 3.19.1-15Elio Maldonado - 3.19.1-14Elio Maldonado - 3.19.1-13Elio Maldonado - 3.19.1-12Elio Maldonado - 3.19.1-11Elio Maldonado - 3.19.1-10Elio Maldonado - 3.19.1-9Elio Maldonado - 3.19.1-8Elio Maldonado - 3.19.1-7Elio Maldonado - 3.19.1-6Kai Engert - 3.19.1-5Elio Maldonado - 3.19.1-4Elio Maldonado - 3.19.1-3Elio Maldonado - 3.19.1-2Elio Maldonado - 3.19.1-1Kai Engert - 3.18.0-6Kai Engert - 3.18.0-5Elio Maldonado - 3.18.0-4Elio Maldonado - 3.18.0-3Elio Maldonado - 3.18.0-2Elio Maldonado - 3.18.0-1Elio Maldonado - 3.16.2.3-5Elio Maldonado - 3.16.2.3-4Elio Maldonado - 3.16.2.3-3Elio Maldonado - 3.16.2.3-2Elio Maldonado - 3.16.2-10Elio Maldonado - 3.16.2-9Elio Maldonado - 3.16.2-4Elio Maldonado 3.16.2-3Elio Maldonado - 3.16.2-2Elio Maldonado - 3.16.2-1Elio Maldonado - 3.15.4-6Elio Maldonado - 3.15.4-5Elio Maldonado - 3.15.4-4Elio Maldonado - 3.15.4-3Daniel Mach - 3.15.4-2Elio Maldonado - 3.15.3-9Elio Maldonado - 3.15.3-8Elio Maldonado - 3.15.3-7Elio Maldonado - 3.15.3-6Elio Maldonado - 3.15.3-5Elio Maldonado - 3.15.3-4Daniel Mach - 3.15.3-3Elio Maldonado - 3.15.3-2Elio Maldonado - 3.15.3-1Elio Maldonado - 3.15.2-10Elio Maldonado - 3.15.2-9Elio Maldonado - 3.15.2-8Elio Maldonado - 3.15.2-7Elio Maldonado - 3.15.2-6Elio Maldonado - 3.15.2-5Elio Maldonado - 3.15.2-4Elio Maldonado - 3.15.2-3Elio Maldonado - 3.15.2-2Elio Maldonado - 3.15.2-1Elio Maldonado - 3.15.1-4Elio Maldonado - 3.15.1-3Elio Maldonado - 3.15.1-2Elio Maldonado - 3.15.1-2Elio Maldonado - 3.15-6Elio Maldonado - 3.15-5emaldona - 3.15-4emaldona - 3.15-3Elio Maldonado - 3.15-2Elio Maldonado - 3.15-1Elio Maldonado - 3.14.3-13.0Kai Engert - 3.14.3-12.0Kai Engert - 3.14.3-11Kai Engert - 3.14.3-10Kai Engert - 3.14.3-9Elio Maldonado - 3.14.3-1Elio Maldonado - 3.14.2-2Elio Maldonado - 3.14.2-1Kai Engert - 3.14.1-3Elio Maldonado - 3.14.1-2Elio Maldonado - 3.14.1-1Elio Maldonado - 3.14-12Elio Maldonado - 3.14-11Elio Maldonado - 3.14-10Elio Maldonado - 3.14-9Elio Maldonado - 3.14-8Elio Maldonado - 3.14-7Elio Maldonado - 3.14-6Elio Maldonado - 3.14-5Elio Maldonado - 3.14-4Elio Maldonado - 3.14-3Elio Maldonado - 3.14-2Elio Maldonado - 3.14-1Elio Maldonado - 3.14-0.1.rc.1Kai Engert - 3.13.6-1Elio Maldonado - 3.13.5-8Elio Maldonado - 3.13.5-7Fedora Release Engineering - 3.13.5-6Elio Maldonado - 3.13.5-5Elio Maldonado - 3.13.5-4Elio Maldonado - 3.13.5-3Elio Maldonado - 3.13.5-2Elio Maldonado - 3.13.5-1Elio Maldonado - 3.13.4-3Elio Maldonado - 3.13.4-2Elio Maldonado - 3.13.4-1Elio Maldonado - 3.13.3-4Elio Maldonado - 3.13.3-3Elio Maldonado - 3.13.3-2Elio Maldonado - 3.13.3-1Tom Callaway - 3.13.1-13Elio Maldonado - 3.13.1-12Fedora Release Engineering - 3.13.1-11Elio Maldonado - 3.13.1-11Elio Maldonado - 3.13.1-10elio maldonado - 3.13.1-9Elio Maldonado - 3.13.1-8Elio Maldonado - 3.13.1-7Elio Maldonado - 3.13.1-6Elio Maldonado - 3.13.1-5Elio Maldonado Batiz - 3.13.1-4Elio Maldonado - 3.13.1-2Elio Maldonado - 3.13.1-1Elio Maldonado - 3.13-1Elio Maldonado - 3.13-0.1.rc0.1Elio Maldonado - 3.12.11-3Kai Engert - 3.12.11-2Elio Maldonado - 3.12.11-1Elio Maldonado - 3.12.10-6Michael Schwendt - 3.12.10-5Elio Maldonado - 3.12.10-4Dennis Gilmore - 3.12.10-3Elio Maldonado - 3.12.10-2Elio Maldonado - 3.12.10-1Elio Maldonado - 3.12.10-0.1.beta1Elio Maldonado - 3.12.9-15Elio Maldonado - 3.12.9-14Elio Maldonado - 3.12.9-13Elio Maldonado - 3.12.9-12Elio Maldonado - 3.12.9-11Elio Maldonado - 3.12.9-10Elio Maldonado - 3.12.9-9Fedora Release Engineering - 3.12.9-8Elio Maldonado - 3.12.9-7Christopher Aillon - 3.12.9-6Elio Maldonado - 3.12.9-5Elio Maldonado - 3.12.9-4Elio Maldonado - 3.12.9-3Elio Maldonado - 3.12.9-2Elio Maldonado - 3.12.9-1Elio Maldonado - 3.12.9-0.1.beta2Elio Maldonado - 3.12.8.99.2-1Elio Maldonado - 3.12.8.99.1-1Elio Maldonado - 3.12.8-9Elio Maldonado - 3.12.8-8Elio Maldonado - 3.12.8-7Elio Maldonado - 3.12.8-6Elio Maldonado - 3.12.8-5Elio Maldonado - 3.12.8-4Elio Maldonado - 3.12.8-3Elio Maldonado - 3.12.8-2Elio Maldonado - 3.12.8-1Elio Maldonado - 3.12.7.99.4-1Elio Maldonado - 3.12.7.99.3-2Elio Maldonado - 3.12.7.99.3-1Elio Maldonado - 3.12.7-3Elio Maldonado - 3.12.7-2Elio Maldonado - 3.12.7-1Elio Maldonado - 3.12.6-12Elio Maldonado - 3.12.6-11Elio Maldonado - 3.12.6-10Elio Maldonado - 3.12.6-9Dennis Gilmore - 3.12.6-8Elio Maldonado - 3.12.6-7Elio Maldonado - 3.12.6-6Elio Maldonado - 3.12.6-5Elio Maldonado - 3.12.6-4Elio Maldonado - 3.12.6-3Elio Maldonado - 3.12.6-2Elio Maldonado - 3.12.6-1.2Elio Maldonado - 3.12.6-1.1Elio Maldonado - 3.12.6-1Elio Maldonado - 3.12.5-8Elio Maldonado - 3.12.5-5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.13.2Elio Maldonado - 3.12.5-1.13.1Elio Maldonado - 3.12.5-1.13Elio Maldonado - 3.12.5-1.11Elio maldonado - 3.12.5-1.9Elio Maldonado - 3.12.5-2.7Elio Maldonado - 3.12.5-1.6Elio Maldonado - 3.12.5-1.5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1Elio Maldonado - 3.12.4-14.1Elio Maldonado - 3.12.4-13.1Elio Maldonado - 3.12.4-13Elio Maldonado - 3.12.4-12Elio Maldonado - 3.12.4-11Elio Maldonado - 3.12.4-10Elio Maldonado - 3.12.4-8Elio Maldonado - 3.12.4-6Elio Maldonado - 3.12.4-5Elio Maldonado - 3.12.4-4Elio Maldonado - 3.12.4-3Elio Maldonado - 3.12.4-2Elio Maldonado - 3.12.4-1Elio Maldonado - 3.12.3.99.3-30Elio Maldonado - 3.12.3.99.3-29Elio Maldonado - 3.12.3.99.3-28Elio Maldonado - 3.12.3.99.3-27Elio Maldonado - 3.12.3.99.3-26Elio Maldonado - 3.12.3.99.3-25Warren Togami - 3.12.3.99.3-24Elio Maldonado - 3.12.3.99.3-23Elio Maldonado - 3.12.3.99.3-22Elio Maldonado - 3.12.3.99.3-21Elio Maldonado - 3.12.3.99.3-20Elio Maldonado - 3.12.3.99.3-19Elio Maldonado - 3.12.3.99.3-18Elio Maldonado - 3.12.3.99.3-16Dennis Gilmore - 3.12.3.99.3-15Dennis Gilmore - 3.12.3.99.3-14Dennis Gilmore - 3.12.3.99.3-13Dennis Gilmore - 3.12.3.99.3-12Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11Elio Maldonado - 3.12.3.99.3-10Dennis Gilmore - 3.12.3.99.3-9Elio Maldonado - 3.12.3.99.3-7.1Fedora Release Engineering - 3.12.3.99.3-7Elio Maldonado - 3.12.3.99.3-6Elio Maldonado - 3.12.3.99.3-5Elio Maldonado - 3.12.3.99.3-4Kai Engert - 3.12.3.99.3-3Kai Engert - 3.12.3.99.3-2Kai Engert - 3.12.3-7Kai Engert - 3.12.3-4Kai Engert - 3.12.3-3Kai Engert - 3.12.3-2Kai Engert - 3.12.2.99.3-7Kai Engert - 3.12.2.99.3-6Kai Engert - 3.12.2.99.3-5Kai Engert - 3.12.2.99.3-4Kai Engert - 3.12.2.99.3-3Kai Engert - 3.12.2.99.3-2Kai Engert - 3.12.2.99.3-1Fedora Release Engineering - 3.12.2.0-4Kai Engert - 3.12.2.0-3Dennis Gilmore - 3.12.1.1-4Kai Engert - 3.12.1.1-3Kai Engert - 3.12.1.1-2Kai Engert - 3.12.1.0-2Kai Engert - 3.12.0.3-7Kai Engert - 3.12.0.3-6Kai Engert - 3.12.0.3-3Kai Engert - 3.12.0.3-2Kai Engert - 3.12.0.1-1Jesse Keating - 3.11.99.5-2Kai Engert - 3.11.99.5-1Kai Engert - 3.11.99.4-1Kai Engert - 3.11.99.3-6Kai Engert - 3.11.99.3-5Kai Engert - 3.11.99.3-4Kai Engert - 3.11.99.3-3Kai Engert - 3.11.99.3-2Kai Engert - 3.11.99.3-1Kai Engert - 3.11.99.2b-3Kai Engert - 3.11.99.2b-2Kai Engert - 3.11.99.2-2Kai Engert - 3.11.99.2-1Kai Engert - 3.11.7-10Rob Crittenden - 3.11.7-9Kai Engert - 3.11.7-8Bob Relyea - 3.11.7-7Kai Engert - 3.11.7-6Kai Engert - 3.11.7-5Kai Engert - 3.11.7-4Kai Engert - 3.11.7-3Kai Engert - 3.11.7-2Kai Engert - 3.11.5-2Kai Engert - 3.11.5-1Bob Relyea - 3.11.4-4Kai Engert - 3.11.4-1Kai Engert - 3.11.3-2Kai Engert - 3.11.3-1Kai Engert - 3.11.2-2Jesse Keating - 3.11.2-1.1Kai Engert - 3.11.2-1Kai Engert - 3.11.1-2Kai Engert - 3.11.1-1Kai Engert - 3.11-4Jesse Keating - 3.11-3.2Jesse Keating - 3.11-3.1Ray Strode 3.11-3Christopher Aillon 3.11-2Christopher Aillon 3.11-1Christopher Aillon 3.11-0.cvs.2Christopher Aillon 3.11-0.cvsKai Engert Rob Crittenden 3.10-1- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol - Resolves: Bug 1289883- Rebuild against updated NSPR- Change the required_softokn_build_version back to -13 - Ensure we use nss-softokn-3.16.2.3-13.el7_1- Fix check for public key size of DSA certificates - Use size of prime P not the size of dsa.publicValue- Reorder the cipher suites and enable two more by default- Update the required_softokn_build_version to -14 - Add references to bugs filed upstream for new patches - Merge ocsp stapling and sslauth sni tests patches into one- Reorder the cipher suites and enable two more by default - Fix some of the ssauth sni and ocsp stapling tests- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers - Enable ECDSA cipher suites by default, a subset of the ones requested- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers- Fix to correctly report integrity mechanism for TLS_RSA_WITH_AES_256_GCM_SHA384- Fix checks to skip ssl2/export cipher suites tests to not skip needed tests - Fix libssl ssl2/export disabling patch to handle NULL cipher cases - Enable additional cipher suites by default- Add links to filed upstream bugs to better track patches in spec file- Package listsuites as part of the unsupported tools- Bump the release tag- Incremental patches to fix SSL/TLS test suite execution, fix the earlier SHA384 patch, and inform clients to use SHA384 with certificate_verify if required by NSS.- Add support for sha384 tls cipher suites - Add support for server-side hde key exchange - Add support for DSS+SHA256 ciphersuites- Reenable a patch that had been mistakenly disabled- Build against nss-softokn-3.16.2.3-9- Rebase to nss-3.19.1 - Resolves: Bug 1228913 - Rebase to nss-3.19.1 for CVE-2015-4000 [RHEL-7.1]- Backport mozbz#1155922 to support SHA512 signatures with TLS 1.2- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)- Update and reeneable nss-646045.patch on account of the rebase - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Fix shell syntax error on nss/tests/all.sh - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Replace expired PayPal test certificate that breaks the build - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]- Reverse the sense of a test in patch to fix pk12util segfault - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files- Fix race condition - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate - under the replication replay failure condition- Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files- Restore patch for certutil man page - supply missing options descriptions - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3 - Support TLS_FALLBACK_SCSV in tstclnt and ssltap- Resolves: Bug 1145434 - CVE-2014-1568 - Using a release number higher than on rhel-7.0 branch- Fix crash in stan_GetCERTCertificate - Resolves: Bug 1094468- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies) - Fix contributed by Peter Robinson - Fix libssl and test patches that disable ssl2 support - Resolves: Bug 1123435 - Replace expired PayPal test certificate with current one- Rebase to nss-3.16.2 - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31) - Fix test failure detection in the %check section - Move removal of unwanted source directories to the end of the %prep section - Update various patches on account of the rebase - Remove unused patches rendered obsolete by the rebase- Disallow disabling the internal module - Resolves: Bug 1056036 - nss segfaults with opencryptoki module- Pick up a fix from rhel-6 and fix an rpm conflict - Don't hold issuer cert handles in crl cache - Resolves: Bug 1034409 - deadlock in trust domain and object lock - Move nss shared db files to the main package - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Update pem sources to latest from nss-pem upstream - Pick up pem module fixes verified on RHEL and applied upstream - Remove no loger needed pem patches on acccount on this update - Add comments documenting the iquote.patch - Resolves: Bug 1054457 - CVE-2013-1740- Remove spurious man5 wildcard entry as all manpages are listed by name - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Mass rebuild 2014-01-24- Rebase to nss-3.15.4 - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue - Remove no longer needed patches for manpages that were applied upstream - Remove no longer needed patch to disable ocsp stapling tests - Update iquote.patch on account of upstream changes - Update and rename patch to pem/rsawrapr.c on account of upstream changes - Use the pristine upstream sources for nss without repackaging - Avoid unneeded manual step which may introduce errors- Fix the spec file to apply the nss ecc list patch for bug 752980 - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc- Move several nss-sysinit manpages tar archives to the %files - Resolves: Bug 1050163 - Same files in two packages create rpm conflict- Fix a coverity scan compile time warning for the pem module - Resolves: Bug 1002271 - NSS pem module should not require unique base file names- Resolves: Bug 1002271 - NSS pem module should not require unique base file names- Improve pluggable ECC support for ECDSA - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package- Mass rebuild 2013-12-27- Revoke trust in one mis-issued anssi certificate - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]- Update to NSS_3_15_3_RTM - Resolves: Bug 1031463 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741- Fix path to script and remove -- from some options in nss-sysinit man page - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws- Fix certutil man page options names to be consistent with help - Resolves: rhbz#948495 - man page scan results for nss - Remove incorrect count argument in status description in nss-sysinit man page - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions- Fix patch for disabling ssl2 in ssl to correctly set error code - Fix syntax error reported in the build.log even tough it succeeds - Add patch top ignore setpolicy result - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails- Fix bash syntax error in patch for disabling ssl2 tests - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Fix errors in ssl disabling patches for both library and tests - Add s390x to the multilib_arches definition used for alt_ckbi - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Fix errors in nss-sysinit manpage options descriptions - Resolves: rhbz#982723- Enable fips when system is in fips mode - Resolves: rhbz#852023 - FIPS mode detection does not work- Remove unused and obsoleted patches - Related: rhbz#1012656- Add description of the certutil's --email option to it's manpage - Resolves: rhbz#Bug 948495 - Man page scan results for nss- Rebase to nss-3.15.2 - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL- Install symlink to nss-sysinit.sh without the .sh suffix - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites- Add upstream bug URL for a patch subitted upstream and remove obsolete script- Update to NSS_3_15_1_RTM - Apply various fixes to the man pages and add new ones - Enable the iquote.patch to access newly introduced types - Add man page for pkcs11.txt configuration file and cert and key databases - Add missing option descriptions for {cert|cms|crl}util - Resolves: rhbz#948495 - Man page scan results for nss - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit- Use the unstripped source tar ball- Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts - Resolves: rhbz#606020 - nss security tools lack man pages- Build nss without softoken or util sources in the tree - Resolves: rhbz#689918- Update ssl-cbc-random-iv-by-default.patch- Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config- Update to NSS_3_15_RTM- Reactivate nss-ssl-cbc-random-iv-off-by-default.patch- Add upstream patch to fix rhbz#872761- Update expired test certificates (fixed in upstream bug 852781)- Fix incorrect post/postun scripts. Fix broken links in posttrans.- Configure libnssckbi.so to use the alternatives system in order to prepare for a drop in replacement.- Update to NSS_3_14_3_RTM - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3 - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack - Resolves: rhbz#896651 - PEM module trashes private keys if login fails - Resolves: rhbz#909775 - specfile support for AArch64 - Resolves: rhbz#910584 - certutil -a does not produce ASCII output- Allow building nss against older system sqlite- Update to NSS_3_14_2_RTM- Update to NSS_3_14_1_WITH_CKBI_1_93_RTM- Require nspr >= 4.9.4 - Fix changelog invalid dates- Update to NSS_3_14_1_RTM- Bug 879978 - Install the nssck.api header template where mod_revocator can access it - Install nssck.api in /usr/includes/nss3/templates- Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it - Install nssck.api in /usr/includes/nss3- Bug 870864 - Add support in NSS for Secure Boot- Disable bypass code at build time and return failure on attempts to enable at runtime - Bug 806588 - Disable SSL PKCS #11 bypass at build time- Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs - Bug 872124 - nss-3.14 breaks fedpkg new-sources - Fix should be considered preliminary since the patch may change upon upstream approval- Add a dummy source file for testing /preventing fedpkg breakage - Helps test the fedpkg new-sources and upload commands for breakage by nss updates - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources- Fix a previous unwanted merge from f18 - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while - Keeping the patch disabled while we are still in rawhide and - State in comment that patch is needed for both stable and beta branches - Update .gitignore to download only the new sources- Fix the spec file so sechash.h gets installed - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14- Update the license to MPLv2.0- Use only -f when removing unwanted headers- Add secmodt.h to the headers installed by nss-devel - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14- Update to NSS_3_14_RTM- Update to NSS_3_14_RC1 - update nss-589636.patch to apply to httpdserv - turn off ocsp tests for now - remove no longer needed patches - remove headers shipped by nss-util- Update to NSS_3_13_6_RTM- Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3 - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix- Fix pluggable ecc support- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Fix checkin comment to prevent unwanted expansions of percents- Resolves: Bug 830410 - Missing Requires %{?_isa} - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib - Enable sha224 portion of powerup selftest when running test suites - Require nspr 4.9.1- Resolves: rhbz#833529 - revert unwanted change to nss.pc.in- Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in- Update to NSS_3_13_5_RTM- Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3- Resolves: Bug 805723 - Library needs partial RELRO support added - Patch coreconf/Linux.mk as done on RHEL 6.2- Update to NSS_3_13_4_RTM - Update the nss-pem source archive to the latest version - Remove no longer needed patches - Resolves: Bug 806043 - use pem files interchangeably in a single process - Resolves: Bug 806051 - PEM various flaws detected by Coverity - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name- Resolves: Bug 805723 - Library needs partial RELRO support added- Cleanup of the spec file - Add references to the upstream bugs - Fix typo in Summary for sysinit- Pick up fixes from RHEL - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections- Update to NSS_3_13_3_RTM- fix issue with gcc 4.7 in secmodt.h and C++11 user-defined literals- Resolves: Bug 784672 - nss should protect against being called before nss_Init- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Deactivate a patch currently meant for stable branches only- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request- Revert to using current nss_softokn_version - Patch to deal with lack of sha224 is no longer needed- Resolves: Bug 754771 - [PEM] an unregistered callback causes a SIGSEGV- Resolves: Bug 750376 - nss 3.13 breaks sssd TLS - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y - Only patch blapitest for the lack of sha224 on system freebl - Completed the patch to make pem link against system freebl- Removed unwanted /usr/include/nss3 in front of the normal cflags include path - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible- Statically link the pem module against system freebl found in buildroot - Disabling sha224-related powerup selftest until we update softokn - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support- Rebuild with nss-softokn from 3.12 in the buildroot - Allows the pem module to statically link against 3.12.x freebl - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo - Build will be temprarily placed on buildroot override but not pushed in bodhi- Fix broken dependencies by updating the nss-util and nss-softokn versions- Update to NSS_3_13_1_RTM - Update builtin certs to those from NSSCKBI_1_88_RTM- Update to NSS_3_13_RTM- Update to NSS_3_13_RC0- Fix attempt to free initilized pointer (#717338) - Fix leak on pem_CreateObject when given non-existing file name (#734760) - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)- Update builtins certs to those from NSSCKBI_1_87_RTM- Update to NSS_3_12_11_RTM- Indicate the provenance of stripped source tarball (#688015)- Provide virtual -static package to meet guidelines (#609612).- Enable pluggable ecc support (#712556) - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)- make the testsuite non fatal on arm arches- Fix crmf hard-coded maximum size for wrapped private keys (#703656)- Update to NSS_3_12_10_RTM- Update to NSS_3_12_10_BETA1- Implement PEM logging using NSPR's own (#695011)- Update to NSS_3.12.9_WITH_CKBI_1_82_RTM- Short-term fix for ssl test suites hangs on ipv6 type connections (#539183)- Add a missing requires for pkcs11-devel (#675196)- Run the test suites in the check section (#677809)- Fix cms headers to not use c++ reserved words (#676036) - Reenabling Bug 499444 patches - Fix to swap internal key slot on fips mode switches- Revert patches for 499444 until all c++ reserved words are found and extirpated- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix cms header to not use c++ reserved word (#676036) - Reenable patches for bug 499444- Revert patches for 499444 as they use a C++ reserved word and cause compilation of Firefox to fail- Fix the earlier infinite recursion patch (#499444) - Remove a header that now nss-softokn-freebl-devel ships- Fix infinite recursion when encoding NSS enveloped/digested data (#499444)- Update the cacert trust patch per upstream review requests (#633043)- Fix to honor the user's cert trust preferences (#633043) - Remove obsoleted patch- Update to 3.12.9- Rebuilt according to fedora pre-release package naming guidelines- Update to NSS_3_12_9_BETA2 - Fix libpnsspem crash when cacert dir contains other directories (#642433)- Update to NSS_3_12_9_BETA1- Update pem source tar with fixes for 614532 and 596674 - Remove no longer needed patches- Update PayPalEE.cert test certificate which had expired- Tell rpm not to verify md5, size, and modtime of configurations file- Fix certificates trust order (#643134) - Apply nss-sysinit-userdb-first.patch last- Move triggerpostun -n nss-sysinit script ahead of the other ones (#639248)- Fix invalid %postun scriptlet (#639248)- Replace posttrans sysinit scriptlet with a triggerpostun one (#636787) - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)- Add posttrans scriptlet (#636787)- Update to 3.12.8 - Prevent disabling of nss-sysinit on package upgrade (#636787) - Create pkcs11.txt with correct permissions regardless of umask (#636792) - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801) - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)- NSS 3.12.8 RC0- Fix nss-util_version and nss_softokn_version required to be 3.12.7.99.3- NSS 3.12.8 Beta3 - Fix unclosed comment in renegotiate-transitional.patch- Change BuildRequries to available version of nss-util-devel- Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch - Add comments regarding an unversioned provides which triggers rpmlint warning - Build requires nss-softokn-devel >= 3.12.7- Update to 3.12.7- Apply the patches to fix rhbz#614532- Removed pem sourecs as they are in the cache- Add support for PKCS#8 encoded PEM RSA private key files (#614532)- Fix nsssysinit to return userdb ahead of systemdb (#603313)- Require and BuildRequire >= the listed version not =- Require nss-softoken 3.12.6- Fix SIGSEGV within CreateObject (#596674)- Update pem source tar to pick up the following bug fixes: - PEM - Allow collect objects to search through all objects - PEM - Make CopyObject return a new shallow copy - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv- Update the test cert in the setup phase- Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071) - Update PayPalEE test cert with unexpired one (#580207)- Fix ns.spec to not require nss-softokn (#575001)- rebuilt with all tests enabled- Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period - Disabling ssl tests suites until bug 539183 is resolved- Update to 3.12.6 - Reactivate all tests - Patch tools to validate command line options arguments- Fix curl related regression and general patch code clean up- retagging- Fix SIGSEGV on call of NSS_Initialize (#553638)- New version of patch to allow root to modify ystem database (#547860)- Temporarily disabling the ssl tests- Fix nsssysinit to allow root to modify the nss system database (#547860)- Fix an error introduced when adapting the patch for rhbz #546211- Remove left over trace statements from nsssysinit patching- Fix a misconstructed patch- Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221) - Fix spec so sysinit requires coreutils for post install scriplet (#547067) - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)- Fix nsssysinit to set the default flags on the crypto module (#545779) - Remove redundant header from the pem module- Remove unneeded patch- Retagging to include missing patch- Update to 3.12.5 - Patch to allow ssl/tls clients to interoperate with servers that require renogiation- Retagging- Require nss-softoken of same architecture as nss (#527867) - Merge setup-nsssysinit.sh improvements from F-12 (#527051)- User no longer prompted for a password when listing keys an empty system db (#527048) - Fix setup-nsssysinit to handle more general formats (#527051)- Fix syntax error in setup-nsssysinit.sh- Fix sysinit to be under mozilla/security/nss/lib- Add nss-sysinit activation/deactivation script- Install blank databases and configuration file for system shared database - nsssysinit queries system for fips mode before relying on environment variable- Restoring nssutil and -rpath-link to nss-config for now - 522477- Add the nss-sysinit subpackage- Installing shared libraries to %{_libdir}- Retagging to pick up new sources- Update pem enabling source tar with latest fixes (509705, 51209)- PEM module implements memory management for internal objects - 509705 - PEM module doesn't crash when processing malformed key files - 512019- Remove symbolic links to shared libraries from devel - 521155 - No rpath-link in nss-softokn-config- Update to 3.12.4- Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766 - Fixed requires and buildrequires as per recommendations in spec file review- Restoring patches 2 and 7 as we still compile all sources - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems- restore require sqlite- Don't require sqlite for nss- Ensure versions in the requires match those used when creating nss.pc- Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn - Add a temprary hack to nss.pc.in to unblock builds- caolan's nss.pc patch- Bump the release number for a chained build of nss-util, nss-softokn and nss- Fix nss-config not to include nssutil - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite- disabling all tests while we investigate a buffer overflow bug- disabling some tests while we investigate a buffer overflow bug - 519766- remove patches that are now in nss-softokn and - remove spurious exec-permissions for nss.pc per rpmlint - single requires line in nss.pc.in- Fix BuildRequires: nss-softokn-devel release number- fix nss.pc.in to have one single requires line- cleanups for softokn- remove the softokn subpackages- don install the nss-util pkgconfig bits- remove from -devel the 3 headers that ship in nss-util-devel- kill off the nss-util nss-util-devel subpackages- split off nss-softokn and nss-util as subpackages with their own rpms - first phase of splitting nss-softokn and nss-util as their own packages- must install libnssutil3.since nss-util is untagged at the moment - preserve time stamps when installing various files- dont install libnssutil3.so since its now in nss-util- Fix spec file problems uncovered by Fedora_12_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- removed two patch files which are no longer needed and fixed previous change log number- updated pem module incorporates various patches - fix off-by-one error when computing size to reduce memory leak. (483855) - fix data type to work on x86_64 systems. (429175) - fix various memory leaks and free internal objects on module unload. (501080) - fix to not clone internal objects in collect_objects(). (501118) - fix to not bypass initialization if module arguments are omitted. (501058) - fix numerous gcc warnings. (500815) - fix to support arbitrarily long password while loading a private key. (500180) - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)- add patch for bug 502133 upstream bug 496997- rebuild with higher release number for upgrade sanity- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75- re-enable test suite - add patch for upstream bug 488646 and add newer paypal certs in order to make the test suite pass- add conflicts info in order to fix bug 499436- ship .chk files instead of running shlibsign at install time - include .chk file in softokn-freebl subpackage - add patch for upstream nss bug 488350- Update to NSS 3.12.3- temporarily disable the test suite because of bug 494266- fix softokn-freebl dependency for multilib (bug 494122)- introduce separate nss-softokn-freebl package- disable execstack when building freebl- add upstream patch to fix bug 483855- build nspr-less freebl library- Update to NSS_3_12_3_BETA4- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- update to NSS_3_12_2_RC1 - use system zlib- add sparc64 to the list of 64 bit arches- bug 456847, move pkgconfig requirement to devel package- Update to NSS_3_12_1_RC2- NSS 3.12.1 RC1- fix bug bug 429175 in libpem module- bug 456847, add Requires: pkgconfig- nss package should own /etc/prelink.conf.d folder, rhbz#452062 - use upstream patch to fix test suite abort- Update to NSS_3_12_RC4- Update to NSS_3_12_RC2- Zapping old Obsoletes/Provides. No longer needed, causes multilib headache.- Update to NSS_3_12_BETA3- NSS 3.12 Beta 2 - Use /usr/lib{64} as devel libdir, create symbolic links.- Apply upstream patch for bug 417664, enable test suite on pcc.- Support concurrent runs of the test suite on a single build host.- disable test suite on ppc- disable test suite on ppc64- Build against gcc 4.3.0, use workaround for bug 432146 - Run the test suite after the build and abort on failures.* NSS 3.12 Beta 1- move .so files to /lib- NSS 3.12 alpha 2b- upstream patches to avoid calling netstat for random data- NSS 3.12 alpha 2- Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist our signed libraries and protect them from modification.- Fix off-by-one error in the PEM module- fix a C++ mode compilation error- Add 3.12 ckfw and libnsspem- Updated license tag- Ensure the workaround for mozilla bug 51429 really get's built.- Better approach to ship freebl/softokn based on 3.11.5 - Remove link time dependency on softokn- Fix unowned directories, rhbz#233890- Update to 3.11.7, but freebl/softokn remain at 3.11.5. - Use a workaround to avoid mozilla bug 51429.- Fix rhbz#230545, failure to enable FIPS mode - Fix rhbz#220542, make NSS more tolerant of resets when in the middle of prompting for a user password.- Update to 3.11.5 - This update fixes two security vulnerabilities with SSL 2 - Do not use -rpath link option - Added several unsupported tools to tools package- disable ECC, cleanout dead code- Update to 3.11.4- Revert the attempt to require latest NSPR, as it is not yet available in the build infrastructure.- Update to 3.11.3- Add /etc/pki/nssdb- rebuild- Update to 3.11.2 - Enable executable bit on shared libs, also fixes debug info.- Enable Elliptic Curve Cryptography (ECC)- Update to 3.11.1 - Include upstream patch to limit curves- add --noexecstack when compiling assembler on x86_64- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- rebuild- Update file list for the devel packages- Update to 3.11- Add patch to allow building on ppc* - Update the pkgconfig file to Require nspr- Initial import into Fedora Core, based on a CVS snapshot of the NSS_3_11_RTM tag - Fix up the pkcs11-devel subpackage to contain the proper headers - Build with RPM_OPT_FLAGS - No need to have rpath of /usr/lib in the pc file- Adressed review comments by Wan-Teh Chang, Bob Relyea, Christopher Aillon.- Initial build/bin/sh/bin/sh 3.19.1-19.el7_23.19.1-19.el7_23.19.1-19.el7_2nssdbcert8.dbcert9.dbkey3.dbkey4.dbpkcs11.txtsecmod.dblibnss3.solibnssckbi.solibnsspem.solibsmime3.solibssl3.solibnssckbi.socert8.db.5.gzcert9.db.5.gzkey3.db.5.gzkey4.db.5.gzpkcs11.txt.5.gzsecmod.db.5.gz/etc/pki//etc/pki/nssdb//usr/lib//usr/lib/nss//usr/share/man/man5/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnu directoryBerkeley DB 1.85 (Hash, version 2, native byte-order)ASCII textELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f22e94652c9b5e6d53656f26bd73125916ab016d, strippedemptyELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=46751698342ac4b535a10bb9069713aa154455d6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e36a18fcbdeb5fcb4ee7d636258ab5101aafd4d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bedca426d0bf95a66ed61a854ab22c3b9c7ee7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=55136a597ee11ae4e446f506ce7539a6f3078a4f, strippedtroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)>Q}>,2 PPP P!P"P#P$P%P&P'P(P)P*PPPPPPPP P P P PPPPP PPPPPPPPPPPPPR R R R RRR'R&R(R+R)R%R$R,R-RR.R RR9P.P-R%R R R RR R,R-RR$RR0R.R RR#R9P7P8P9P:P;PP?P@PAP0P2P1P3P4P5P6P/R R RR%RRR RRRR!R"RRRRRR$R,R-RR.R RR9PLPMPOPPPCPDPFPEPGPHPIPJPKPNPBR/R'R*R%RR R R RRRRRRRR!RRR"RRRRRRRR$R,R-RR.R RR1R9P,P+R R RR,R-RR.R RR9# An earlier version of this package had an incorrect %postun script (3.14.3-9). # (The incorrect %postun always called "update-alternatives --remove", # because it incorrectly assumed that test -f returns false for symbolic links.) # The only possible remedy to fix the mistake that "always removes on upgrade" # made by the older %postun script, is to repair it in %posttrans of the new package. # Strategy: # %posttrans is never called when uninstalling. # %posttrans is only called when installing or upgrading a package. # Because %posttrans is the very last action of a package install, # %{_libdir}/libnssckbi.so must exist. # If it does not, it's the result of the incorrect removal from a broken %postun. # In this case, we repeat installation of the alternatives link. if ! test -e /usr/lib/libnssckbi.so; then /usr/sbin/update-alternatives --install /usr/lib/libnssckbi.so \ libnssckbi.so /usr/lib/nss/libnssckbi.so 10 fi/bin/sh? 7zXZ !PH6A]"k%]Ív4t # :Yˈ<ɫ!AЦ p0W-"cG/d[R[ke Fʑ2}3;3TpfaTofn=r5̶~}uRp酪!:8Uu5jK C/v8[0Q.($Q#,}qDz9U.'AOq3D?dzs;>j`2zF`XS%gSv÷~tbp|X12Ѷzҡ =@lTw%x]OSo>!iP6ҳ`.!̟TH/Y٬#6O{5ΐy[;Ф`a 7oG!Ly7,kD#gy-rQ)EKʾMn]3!m]n7k EwDz&BkX ,- AaP; WiߕNl:u;+Rl(סu^ &!101 {._k՗7ok71eP׊#Iy"A0&W޳9,I_ ܇%Yu G>XO&|U%TTX>fPGc?aP/鮎hAn]% =$ ͲY'e)3&9vKZ,u䲫v<7w 0Er'2F^i 8Y.;U;ᰗ)8*ԅG-4XQA-,@]W_-)+O88͙c;mgNӌ(L!cҊĺA]e~X$;wg:5$gL$ɨ֋n.26QI gBqi& nAI1Ũc:;&)dv!h=1N%=]pRਙWV!x@G[c2<:9L6d~;7+R*2jT6 hZ᤾!:&#d H 1fwQ]b=,4dya|꣧\k8%z]dҁTpAS 4А҃y^l`0 ʐ i.9?̇!w7,p2,ѱyJc+΋;+&ZfDD5N@Ȯ>6z b Xo)= W/wR:>A2-;J_T·5hUMeLNnΉȜu':l̠j>QGXIE B>̓R%e⽏L{p)`q"?(,Ԕ/݇ӋF)pw(ź \IRH1{BpqIDbz4fK–LV@рܜQm |gPR=XCuતh&i.$DJq8؛#CǠ g wbtCc۟DD=xZn[˒D UUX&sEd:yw5ɖO6?2C~.E=a|A e8WCk'v~JXF^Wk˞Z5y'g5q>k{Hie/=tCpuq +ÿكm4&3]-E(t}~vI urv>P+U)L=6WuB6VD$;6&cM~$L PmOЅꔪ91~迋t _pto5}l4ض`Qr<ٜ;j~\G  ;$>eW`|%qBsi7FC$}Yk|;>IV);1SgM}k8}2f[Hcv$1USqX3 FY*dE|eZїx T<mn<璾29.-[gzۜƂtK.Q+tOZ4mzRWv9-ͪM K$zA2`칷cZ*2pK邡|5=\U4A% TMb G+^&]RXqd=`ZfvߤgڙHST"{M]J Pj FO:|_ժ Sy-#^~u 7E!K]CZXK$`Қ2{nFYh鉛/Ub[eQf[X JZ4G]yuwiNa۫&$*'yK(oSn+V3a 02Ẃv:/8zeh!4N.h&"+=64ϡBBdC|H;z\G@H(9 , cVr%G]kSkWWRYZN(kPՇx(֯nhr˸35p5ƜA$v7GM-(PHd;J.4uZ8d{N dPǾk" 蹈G]E.)#?s{k T_G@Z\ SJP>IvP r؆eJCڼ#b57j͚Ѷ%^L7+H6*1lp}^Ԑ`q_t0nTb:>gCf/{3yTQ̕X WI Fi`s6l`"Z{]*?n)ȯJeƎ|nZhx]DϬ>A،2O #78X4 Dcr2Ǫw< {n1C;H{ɑavI J'goJqO IPeO6 ~IAHH- w;:طWXbuaM sԗ+R9B0Pe-~]YȚbZE= W8}Qth22Mngl̓𝸹RJ&.r=]._K9V.]hkqֵU̇#}@0Qn>/>n/KA^Kn TlL 8+OdJGee9jEq1: (wt}"r@T\&_oujh%K Y#AzX#IpZ{Tz*"߉<*bC;`LN ²%4ikفMH;0HQVmckUEX/MъR8UY36ң/cVvk ?+2@JM9O!#h+ZRB٦N Zh4o$#Z Д hG7Y8 CE(HӺuvV r[M76'frGp&\%E jY402Uߢ|,Y֯A$Gt4>MZ /j !IFrՉGÌR#(mNAv/HO<; ,zbaC`[NN3g9IvrC xTR_ @7>FMu\CEdGטalz#~+'k/SIWk#y.ymV*1SB4pl( 0FVY^Hh"aW;rGpU|([QqJK+hțݙ,,-ղq1hS& !ND!g}qTMQ(:Lɖ.$#mq goB>5o:$^#=Y [Ǣ D$ஃ@y,f2_2(c%_RHyh!ʼnu)9-QPJGr@~BN L\;u:/ |Bh<1*~,ĽE*KMe;dG- o7<ڻ@L@ERkSo oW MŶi>.O]AKDlZIݖ:Nؙ=2e7bn}YG?tmQWxW6ɷlԳ9kU(^_SyqU[< X^Rx7;S9- ,51JiTv\$̵$p?2be X9.x||p`L8OfB L`x^N;ߤ,R4P-ݍӷg{?uO~2y5 ksݖL'hhD٭ cSqiw?ڻ Nm`LTkN,X'7_vIl1$Xd|.g۝{{GUhbفWصwcg1lDphgi7,4T/XӹOyfSdX#6iXv{z^8SGiPeE}Js3+4rY攤L* i Xj=&^GIAX$^H*R;G\k_EaX4q b8d쀆@': nN{o3/ށf xQYHia(Gk: keѰ.U!JeoCysg4YJNəzRf?}*&( R=3З]dp"FhZ=<1?;z.v,zJ&O,H|s(C.f]z^Ą-v !lG>FDdl64%@@o1Cѻ/{63Npj m|jC&k{?UFDž[9H!a^u~ ̒wVX6c;%.ֻ_T݀q/N΋MW9w= Ƌi4HJ_R&\%됿8xIwCuPU[ɳ;nb E:Z;֥z z"o}3 5+rw9<*AlAENu'K)lŸAo%BƧNBnXX -kUbBY5iU v՝V b|NSvCK2%7B1G/`(}H?bIO py })E Y3 ѝU8/ddãljTvXcgT`9؍{N7qvu[ ҚTx?Ά+08gYQk/Jg9f1r_*o~/%ZLG$0(XHzˎ3X?61u<̻{fU\v\L]H݊ 6FM3w.G^L߷D?yZj<̢H  Xor`jٶQqa?20R%)5ƽԢ):{ S%p1*KVh&j<~+)wwrE,`=2(FЧwRR|I3I %Ls,`B2S6mWn`8Y:)ncОgbYBÎ0k3ȕ>g6Q͋җ t"{$>.N>VX4U_:W/Iw0- 4Cj|*& 68B@Kw7`%E-=9p`v=i%js٬[l@|"Z2W6AF3*iѵM`ȧni:yQ3䟶5a>F`=O$.e~68kor@J;z{*'~9NG0,Z :#iQM`V,ȫe_ De;`^,=I" QZ|(rey6 I$X$IݐQLwp~`5Q/'.&jعl.n1tN];h6 +_grdq]fk`?bgkW#`cur8+ao w 8 ϣ.P]14>:3{ce'y"I (D]5P!X&Y6+Fա}Џ.=Qzo[>{BV#MRXd-o,A:G'-"i(cJ>| ;%j"vmF+-29$:+Ls`j`EbБԀY7Oj_HUe/(֫6ד;/רݬ1#˥ze&-tx!{HS^vudKl~f<䧨11P $a\QZ=n l8y`Nr0&)>v/iwCW+Cr'9NSh@s =:mTazgDJO{oiH퍋BtxĢ('"}W[\O3KӮ{LC.;DTJϛpVPqL+H4v<*:-|xǯCg~46i(wר9ͯ8ԃy܇7Um[h9HO-Poy';Љ\Anxrk>AhO 29R!d~b>O-OJ &QDlIFI;C7 £X)c /8LJ1~Q(S#. A6ŀ' dsc瞩~r?^ډX\ WuD )WK^K#${,iGG C Y-H{cRt詌Zf>X^o,\kRwӕ~`E}鏫L?Zm1DҾ>k$Às Kgc)d=y :=`i_lך,hcW#xEhM1J|Q .0I Pyar^{A>]\ɑ/x;&:t -L'[ x֩,mKcyPgsakL ugKM/ ԮZ}3dԙz tY;>U9_ J|/׶ yi=r|cvs4E;N[՛ @Estz iϩrWYzۈs!)Uk\@mTa{<.E'slU"Y"7X|Ozw>$er`[HqqӦVd*Lέh ϻ{=7Y1@k1w-~=]l'&Edb/s=ʹv?t4-W= {Ca*.73e\!$ ( }<%di|SFvַd%3 '9k\8&b_! x 騧PÍkowBaJb$:(nv8O9MA Ť*Od٩# xt6XN~*O܆ @1G}Mx^P#E%x|/$!ȅdy.~_OO _|Z-oo͞ukYݺN~oB)?LjOb0.2'T6äYZ󯜑Xe6ءzQ\/1|ܠ lWg($/ٺ`NP(Zlu%1Jv=>._.yRD:X&R&Ei mz>S$Dz~p~( eK|VcDN2Ketb@B)A;0mAy+٨  n*.6uqk}*D\Y`*AM- ^m FAyS<ψq R^{!?ߌE{g$]nh~ "Iu0{y!֢yxơ"J9a~s^tIFoqۨ&^U/1-|3ŏB}fp,ݨL6j`w"?xBM̺>Kኬ}dtj̒D;dPR:$.|/ lƵ3@ ʴeP܍^SHp~*6qArM A=rmՊ=ܴv<5&M~ߪ2w`XӤZNL=hOGAg. YiN{ef֜ Ӛ쏿FAT6fmOmGFnJksǰ }O|֛g$$PMN#8 b~KⰽM'Iw ;^kT!p9c kcYUPd =YĔ5޲߈!hR 2tm:jWyB7mfhL-|ˆdHB V6 ZHbwÀHq+$ ?j?Bt cUA> _K&; hVx"LdwDmn5'!תpRw+y,|޲'ZaFz"Ѩp{N#l_JOiznwU( C)8ėW5-z5G)Y+VAV~ۭJWʝ9yH*nu*jGQ5&a;Z%M~=yU/G{ EZQO>:\',tn:Ukrp=$=7D^t@|Xw$c򘊪*8-ɋ)Ldz3 ,Y~T&G?$طo||QX^d&}2<+k-C9H~Dx uokd!"m2q ۬yt A -CkG28+ٜvr < ޖ\6DhSIvTk, l!4ƛtڥfi2tyrε/hs)ݨhOfx+t?>c`s\RY+xG5jvU{jO W`P+6o#θd܉Q/sn4 t"3PrM.x+=c Vy~#zft)UxʛUsj+NZ&#CZJƺe*iVN|r.H9lx!}%…H"x:JĔwg^eo|aό]]_ec|gZ=Jq5]ḩMot/?@,ɧ<-~nas(m.*M'J347na>g+re.XhC͜lv[vI"͠!;u ߫Z <=64Eqə%ctn 0#H{> dS"{ IA(۷Mb-Xsc */rsp}s5i)TC}kAwW: ?觼խ7ew"w#jw)Vc K []x:Gˬ&f;}=1]$sH$ւ.,B~H(Èz FT?Y<pSn7F Yowy"yo=hW?]q]on^>cbPwu!> 70kV5+Cbo|x- HP0˷]gmtxm\}& RuStjM/&~M(ƨd^meaS&{nFwRe~n/֤ |%KX/9~T}?񭗐P] UF*_>qa;l4h+/[iWt˹z),$' &Fytq%loN6y'<,5j[z698sÚ[30Ÿ9d {ѫDk}oʓЍ~Wfs~m7K6M )V ?Vw֦~IeU׏=o9_sBqgm\|G 1cX y^NmU3_T޵3vrM kl59D^|%Ў5OI\P_P8q_. Q":s \-BR){6kbQ̖7b6+mm–DuR[%Anhc+AOCê3o{ -YԠR"𥃤?j}Cn6JG䏒uwMDKGI.By 蠀j^Q1!\ u:T`$;e =C{b6 2([!ޑZ(ƴB//Vz w,;q'bfTLnPyJ,g/4{%cYr ۨs071sn}e h'5A z]EbSD2qS^{挍PB߽:'rO{}aF5CJuj#KZ̛OCXǢV&%k9E{|nt`Tb"Fv8C-NPae !SIH/YK{ibi?TX' $ojS/RtI%9bd SGݰ('fg _b0k)m@%;^' PpGff/; Ks+۾!| b6ڥ#x B#-S/Ƨ#-) >mcE6e0/ƘcA;+a^sM2θҭ\"?% wtT q/0bY<ͭVĈ}L-S8K =gzDO]b:S6|O.^ uK bWbauG]hGmYIfyH2v!K6pb JJc=fmSaSS,R/ EHe9@Vǵ&KU W3+#:;I*yy#T. f 3"nmcGn{E>lqwݭ}3l!/*6lPev` HC!A*/h3i])_AOݾ6wn[(W qpc=IRg ?'gYg ٚLBIyt~G[iⲪ0hA]@N%t#8[ER&pG_ o47tFBpF/m`gC#3Xr~jb)rt^A55wͣ?X FvRH1,@: -M9yfwb>ir2W j?9T P2?oיmW2.I =IHhK|2x6_5]3=r> ;:ׯL%`ҖAZUJ[#LQ ܯ-?''us3$3|քfdpqI~#f3S![?] 6_e%Sc*E >tL8oفKiο.ӂr7]{9ԺcU wGCX1{C"p/tD }XVtr}0?P ]m/;ppn1n֔ЅnHMfJsOo3`ZQ4*-ku0 1v^W)OFXK N!/JAcj$Qű`w!rj? o:tP1 ٱ?Y)EmEr'ar$5%\uMUSo)Uua uNG~/FAwa*z#laš& x݆;U8T9Eqs-6g'i7.Lq_Srm=_"Zߢ X:vQۼ* m~/kIqQX{Ao C\ŮZN '?7>e*eݺ`F0JSiz7݄%@q"TZI{;IY^Hd_9f+iݙw`8rۿML J:2~@s} ,PZ}XrQ_ehʔI]Jk.,kZǯssˋ@ز?k Í xdžsIf'HTM Hu( *P!=w~4ˢ=س_Mw? βU<00?2Z۝$N!rI||ǹq?x}"h Ke.;P8Z?T=ϭ:Br 1'rY%Vm8bPH*׎?+qѴGjkU cO콊)clc % R]>D N[ 1 ޸)ǸjjO,ղ{ѸG"j#lR^)a ogؑNOD\ 1¼P]zBh60;ÿ=D)5̘iOZ ʼnd,e+nWf lq C8-PCڕ>` 92ό˼&C{J"COowms"a}$NVEQ?/(&帾 }"5'j)IyV1َLѮ3ۥ\+[vXl#w-{O$!Gm"Fߨhf;tɗ*<{h. pZU8*. x^ )8}VhtE/!A!}tf%?\JdS %reo9J%DCXekU<%qZ@`n}@"ek†J5nlL:K*A"UI代rFMBa790EKؠEG,|+Bzdob&  . ֺj캥rFhEӁV]"8\#:l"\qL5hFCM!R @tgB@a9h#y!J@.5b4T4 v N\f`Թ vMt<g~*\+aZ^v!FH HjY 'DҤn, gcHq=π蛇':?V,}$~S틘7 CRiD/6: AduXꚌMsrpI6f~*%ظLc%4/Ȅq)qcy܆ERP_ 'r'B!ÌΧ=և}RGyX0.LDS!Jc_n\&$]r2tm5]~$LO}{ZW)ʑl~92h[%dHP1e>* B! u}7Y(m1`e|"ReғK\8-]LIiSq,TmV%l׻x3NVZs֘ JU8TLhlKc ZH{a=G"ۆxRQ>h_Fc?re@._= !ёA0ْfX S[iqw5G2Ϝ+B(?5- K ^uQT\MNQ1㯮P5 DW?Җqeeʳsєx(;iReмwm\$$mfFv`t܊$m~ >J/I:-`u0uQ+(V[->&屐F6}ؽ>i DBEv/D@q@xuN%"gm]D:#-3E~N  Jh+?>E$OOǁcԑ_}ȋh;Iw|\CCJ|?㇖! k%~穕n 5kyiQP=($Lo ȁ3k f"K֛)˩APadysV7cp,BO)TLwp6[ Ct<8)M*XbCX1\WY"yn,.YpUO UVǡQOA]§hvԸGwRR^+8xB&~ME\PU'nL-_l󚸡?ge\I)#\8OAD$r9W`Rl_[Dx뤤ע]%u}5(z IGs8VeJM`\o.1Ө"s6 xÓ@ۨ2[ @V2oйfU1Y"*:Nh!0IOSLj WPb!u@ѝN?HT!߇bִZQ=AuY)tQTBe>'IK'jFw{XEFT t<,9N39X]H7PcbČff8ZO1砗hݣcnbIgXial xVCa{rs^@@=A(RϫB*rFvi >x%d\=r#S |1[B$g@5 =릷r/t3 ?{DMX4Xgl[IΉ#!+/g//C9nuRƚu/Wԧ=!Ļ%1\wI+|)ϾR( m=#mu6Pi׿"s KЫ rosW}P [xI(%B"rro34tG*a!2?Ys,mH2<bgZL[|6iWwkl%D}wϭR+:_7co{nq?ez8ʢ̞lgI_VK3 ^-4 x*q6n Vͥ؁j:m(MV$hbĤZt5cN u#d=;,G 1 ldqE@,B SvwFn{@$|0u. x)3а4NX(!l(/P'7!E7]lsOMq1f Ha| M@07cUVlD[-.U:&ݩXXV^eV 䞃lىL jŊYxsg!e] KکCjֆ+ڎ}z~BEF43{~ (.NtFt{[ZGTE,eJpboG#Zh=wpk(wQj˔-LC'n0ʼxmQr#5zé9i4Pd$<{~_gqMR̬D؏By>8=: yRi'|:,.5<`gA57j⯾msҀ s,@R)-6cRzO'b~q-*KZ`]LJ|/m.9y'&d"TՍzFv㾇Tuu1ew'0ͼ cs%su ܘ﬎[s0Z.tÖdcZhοr@qڄV,q.hN[/4lɊA\yo&,IbJ$WgZY!'2KriՠfF~Yq䭴Eɔ-_lhZ}6MIțcYܔck&U xhaGmthD hq'v 6PM&6?̢}GLGKи6(Ѩ4ya $?_qY)/ /ҌͺFwe[v 2@oٵQAD:]qms]Xr4^He!tZֹ9cƋO@Л~ =V;Xk%=Pk0AsDz. $-ȋB {>ܓ,ry"ɞ5јDY‡Um[3 [,UYvأ :6/eo.k`̻acXLW5\ :[oz}A\w7uf[h D /I»#NJv&S!W7zŮi?oFXPM1j%Rm~S/R1fFܸiK7,G r檝p_lⷩ.>+Qk<<RX7fRf_s[)x`}Y s5!9" 15Ne}dQ./Z9%֘#5öD*v"Q{{S*eu0:Ƨk}Et66,ebOǙَ'̟c뾽zu;V@rvKߌ!(/ؓ{ﮔ@Հ<>ƣd.=5x#K;Sm "ЩV.3.NL#¨ ?~@ٮ M\`"v^SJyañd{vf,|y a>m 8Q|/ ad`ekC}##u-pi7UÍz;B`)B\8~ ۵17*6+ӡzqo]>T:wpiVHA4<]F{m4md /̼D!׋@&$C~c܄Kr]{g;Z%г;O N5[,NKSN5f|*z_ }kVf}}8zfEux=29S=kx#"4Mp7JʍF(.܅_?Ԩ8nʜ;7T.Čϔw=ڂ/V%%-"Մ%T%I~TPE8ڎ'Ёd9of^(KY^Uteנ,3Y_ĮEzU#ʫ.`^:N0,ZַkbLT H\B^R.u°Թ{- ..P'뀋27p͡YRLpL݌w K2F36$|Dk.WMq6VS~f%hɯd(XEmZK+fb<-N3`4Z;tafeq6  {Z#cIHRi-;p=C^←fi[Vkly Iby-=j+VL?::ګԇ609> 0*3x9liISSu5~j,jd*҃ƚX^EWvzKTYHnoqS"q[ UF7>%s̳=Z.XCrk>SWXģ<@U/n tpj7HL^͗}bCJvZ0B DUfo KQ` 71)hV6B_ю~ w"$Or^ u.[q%Z̛^NZ45fYƨp6Y* h(\\Z0 .2Zo-")KcVˢM&QKoɪO>gSLJFu1 *NRZ܍DK$VkA~z.N;lI>Kq ZA^Z`wKkBd]ۙIhs5HhmA z)\1B_ uWkf#0j5oŭeIW핞9#4D{?G%.:=rQ*ט"!h9Sm;%-lAc$/v-UioQ.%@ P~~wtσ8u@!W,"N֔ `3I9~뒒&ly[4,)[?@*X%|7o?C@h!Ӏ|f&I b|@I9-GILM S>O-pQ44rӯLWr51/HCf~)ytѣn䦥Q>$$7Wr6GY=˺o\ ;\c{0xG2-JnD]e$߆~6@EB!98? )z̩z+3o ̱ԌjRK4U4DPZDp#X"`6[u F sN"kfNgQÁ|9 a[UIORݷ\&$PFd\iřZ-O)ɦAsp UR GA! ,Mw~bPnCSo\p݈7~A ,ѦB7bp 9QUܚrH&D ˆ2f dmᚡDs\ZJІyLA)WKۆum?I.bP§ȞWTwQƥ̪`?Bfh{o3Ũ/WV\5$TG{ Xi-GBZp}Q ^.Z*]ⓖ06ed+@^{JzBun;|)x΋MrLKf7ea'Co =~#k׶Axں3|>l<4 3D7B#S;N4wpÿNM5` 1p5th#=րYrKk4lȡy;QI#11-e-TdoF4S\*a|M&pM۔U 'sdƁ9b++a#j0f)<*I6RUlVGvS~Q dq6jn4Kb##F7/%v9gUDF%1nZ`| '?07{!p|$x3nlQ,9([P;/+ Q,Xđӗߣe~V^t|-b^5z3\,n(&,;CqYΫ`hN#ckcTͥ rgT C^3t`I,v\A%3ՎJSONⴛfx ͟:=Bu.uK u=LYh晐s*$ub}$/xd]UG.Jg)sCL*2:eO+F.Itޒ@z$LU. w-`~Uq o1]k7LzîJ2Hm? M.W4=Z}< `ȿ :4I͒0V7qw3) N}2Qp*<\B_CGGiҿ@}yN 2كgv{SaPZXQ!&6!,N/B`JCgPS|;Ln`f}ƔQjC䌒A7nCDOTW.QdMw-jV([Gk. RHpH#L:DDBe “V,dmZpƠDSa "a:ybגԽөukgC8~S;TIQE/?ׇcP!I@yHsY}g8&=r@!A=+Ȉ.ItѬY*z?1rJ@l1ݲ>lYUAԷEBhI p!s/%̀y1Vc-(_crHNLv,lu3< 2sDCYrD [.>7z@ENt|7z$)ENQOO38WQ&Iu.IZ=#&b:'e^!R h #W1(S+צA:t8TܿەK.U6W)Rky>.)hj%yJ^r9%2n9UyPzSoc;LC9(+L790WsG)\Hj'nJhΤ};$D )X~`;6$hy܃# -(;+0l\ÿ'Ò9՞-~?4qwţ*=ă3LTdu~hp2Wv-ű=wNY(/_3ZL(ow9aqbMkH(76{ TWEx&C uOQĴCurVi@ v? trY<]3˂ty?,E/$b!P<(Yȓb܂(W<+u/$(DY-ݞQC"m^ m@5 |dP#=iV|LI4LX`);Ft0:iDžf\ K2%85\.xz‹hT6ALGUjtqi̞֕m0+I,>X䈸Q@bd-eQ/j7|6}vJ~9,]9"lb5 Ehȏ$xpulps7Mz`K./kso3U8cp ,ۺC4~RȣaW*t2FT7Q ;* 'CXV+)Kpy>pS)D6!ʭ~ PW}+ !mv1< J?񑢱Wy8+ݍؘL9{7}f+NhAtbw}ҥlA8*y_2Wʯn]>ں^cD(gR$YTIJYK&pL.חeBf؞ͱt\f[v2Pc?9nm-LOx.M[>gcE->-V |}S6D8=Bݭ_(cps dG_? Ut`yb)≯n3%)1Rvd6$o?b}oRuU|5Lip@<Ϊr حi:mJ+K!~6&:#F䙄WP!k=#a5ܼהC]L"F!mV4_6~Ե5A_#%$0rjPj`L. gp^hz!jHREIG8dnG-!t2ȉ9y D=ޘ݈k7{;`(<57JWw]X<!QAQ1AY+T F&:A!KPRgKE&S2#[O( }{*kH#;_Qs@43" h? *Y[ՄL}M옞T3 18`cD&\dA'X~?U "yJHdX9{ճ.nXEfـES7$x*,p6lrLwr[n=usÑ} 8׶п ď^.0ZK\2h C6a$>cu,ԗ?vQYB~_Ke*X}ft̲؊\?=RrKLI5Ƅ=R !Mfm4z'oZ@%+EG7Bj-R 4o ;~ٖɨ@oT {3%<>SV"MsU'b 0CvNyT53z[$H cxBZ8 ?~ .w]A/e[tqu[]Tojacpf$PCXLpu$CGTy2U$m{o(5ET=6̺=o%⮮33|H$))@U}WCY (WwF-˖P@ I>:,5cX&9oo',?6T(lmWM9JpGI^:ii,PTIm;,]ݗ^T #\P9p"S9vFǢA2%䪫o G{7Š\|?aC<,lH(:h "SH,Xh.\dAKKbQozL N/ 'ZmL|\#b,<أGy6+ӭWb:A[ K/rc⽴7]|4ilF͆)#w;N=1Oܣ\ST4)ejcGe Z;ɓXJ_ gt=N|l.eelj#$ǷeCڙPU^|$8X%cxgb{RBAM|fzA(Abƞ=6]pWqiօY\^uʯZފaj;=&9j6DVJ `?wG5- Gt# -OJ(AǗi:췔ؙb⨎ &8ǯ`Od r5Z*R~d:_.T&t!䇚ވI]ib k|b3#64AuO XN 9bOfqu]</JQ z ʝ VQ _%ږى R˃f\BHZǀ4:@'”-COK24JTnx> =8᫟_giWzB`7϶#D/Ba7:i]o` 8*\)JȑPTa6P19_I-#o*@C5_oAiVkap*sw|Z\l;Vzl8ɘ‚-xSb"t5k|^eRv6 aQbfէ|(D1A~%=$ƊuS)6bKZOAv9ǵfQU^!}}[)z_wnIC4mZ|2xsR1f:CK}FJ .[ bZ;OB:d7hr0/ "<_z%W~/%ssh~QRF{FC҃cG%龧nrg_t3]@zQ {LȖ Gzb-0I9Bʏ-F28Jo4Kv8zRg;D;8},ij'ήڣa O(BS-Uxշaqb()]l3Fn¿˧)/Y(Ǝf; >y9W}wӟ:[>=Z6kmnK$2zLpЍ4WZ^G'2c/ů˹ :Nj|K{hm ,bJTW5-|WʾcCۇ_BUtq"о% -hkOO9AװDiܫ4D*{ Iy=Sd<<ʤ-Y^NQN.O*anZ ʣ0x8a-8I8 Mx o?Z"*`A91mz'9?I xm9x Y:) /}׺z( ŦD٭nm6q(B2|xvE.y! pU*(W.] vC`1$ 'u0B|U7^Ʋʘ*SNǜ9B{Z=#kżdry gKyL:ķ)3K!y_ L?^Ov"M"l'[nR-n/=cMtsklZ>t1(.2 + Ȧ2oY]ANVk`6.xtŢM[ UqTJ.vEV/IB{Bl~zϜp\,bgv䔪tGpNX6$GjߐAOI Y{5R|7JIv*-3RUQ|R/2XŅ3e* eoJ@LocܪJYmnT7MW>Km U5/YWHkS2FԊ>#AIg?z^YpȬ3Peor/?P'9+w+S@@F+ISx@AS!;Պ=>=YldګIO'֧ 0k'yQ*hn(_C&:Lj2.KDH̢Q;թhlPϵ2YeR7pZ|H ןz$ЬYٹ&}_cLBjaښ 6P%Jv|Z*26<{TxV`~ݏۺ{/+[MsA-B PמGl[nyx֝Cy^wBx;B#fg;nOGFuc;$]ZJ[&&64X&99]5nPqF6Nte?HdPhwh0T~DӞ?)D^ ~1hЯ.4Z Z-1֡Fzx `9"i8y=VYzW}(Ow9Go7b3 CfJtHA-eJ)JL,8` 97FmUY|XW?ieJk߮"w;߆uk8X2)U)uC4gZN LLcV@&oU+LXͰXq;Pub Md2SPCOz:/؆mj>HrsSbI^&ITjJ޻=;ēX>5Go\rB.X)$xq>=\̔=}j^zTt2NKũq}ON!!@#u> zˢt^0Xp !'"-đr4r0Q,r3t aVWWlH¿d`CK ~4HMXX aS1֫J\- CyɃ},\:U@Zvr8 ::ѯb ѦT2x}pFt$QbAb%uK!bFȥTqD]Sz.h-W!A AH$@8vgt`֬D;aQx\]2!PG7& GeA3P)mY92L,KO8^CȀk@z!yKȁM\a0 S;&{j j|Dl>䛀V7gDڦy..DپťUQL${dni8S婜e@vvY nx2"y/_[lRT;y_ 23BT{gx~X=}Wپ d+^uIZqfFmKCp) $yVg*}7) ǥGӡg4,}$ǧX%~9l VNVMS7KH!zbnziX0T+\|@ˆu[r2NkK>5 \4"bھT&q݆ 8ź1/'T1ϟى5K:GU\Le@Ŷ%fosƧ-~H. g̈́Jqt8,SΟV[͖'tDU:$y斲 G@2D }V/vd1N 9@J!*& &{m$xi H^r롗 [e+E D[q5P^Y, cyV<Ҕ2Ʃ;5o)XɣMl/E>]#_[q֪}5GHczJ2γ~xp#8#`1fG%?(TO懏=Bz.j</RORߙCh4tx8iN熛g,>mMghZ_؈e{B)wNH)/gxP.jcPs\/NUo(ީRDRE n%G'ݟo$l%JCw ">|=ZJ@5`,IMGd\ )7O*x!y깗Ru\i3\]s`6樍{◎ O*FOwHY6Z䧀%%#=w69h1FzChև1f&+զ'$T@yFG i%AK/>  zAG!aUwtbsIdvׁ-pE}&e9N>(?sb^pv1ѵ񎠱:NiA #eBRkQlMj6ex:hUY#1Kv'tvzFstS+;I3tq"eQo{68i/'LS%~ed0Pdyg_ڔpg:a#OԌV&u$] -|G,e;Q?rDIll \b c;lq:%%ժg5^50_Bߣ@eQ!ɑhNjz(V<1B=G?js)d_R|NT풯osx )75Ge9s%rtL) _E`]WQ9X QL{)^Gm7qܰ~5GY DdA X2vD@JCJWE>ArIq@{Z(:ͪEӀK]{]3s<(>D ?K^W[ "j6 'CѸ!QRKzUBkKnFv^,eQD-i±gfST檫Sj]MG_HTP$Ôy,HHSD'[2zFuo31Ă@IВdo1;|0 _CԐ|N= ц̊j3BDˬ4䘽0gWU3!)YLNǖW'@8Y-%f{ eJS 94-p72J*#ɓ&`[nǗ2 ͽ@8߈t=p 1>X1ŅQ^&q:BZ X-blD%$sQ(_? c뜐Z j#:){0 QTzBttIn\~h> :aPTp6(B~a_fSv9=vꔀ{uϺ!yM~Y.`%OG6ᤦ'wġU4r_YқK6Ap.^]<N0:18X[1p-3n&|SjDx3NQp0 H|%|nNNQ+!_bYX7 ձ"@/Ľo>^"5ЙOl}ZVyz]Fs^OO!j{7EDsbջ]k^*yV4Dۧ(?; $穃ۻ.Io! (#Q}%Ւ21)tuNPF{kFkh'`ea`UHՐ2? }H\Zp4ҟS!|B풞uYPKCz3~3m:E/A_ww 'xq@X$ je; *_H'%B3z7r2{ѯ+N=)Q5|Ipv% ԰:Ů+'scIv% 9{"Bx8!Xp"EGFE5TsT(0t55TE%Jo;48)6] QCFΨ`B"2^ }Ӥ-fQŔtg^=V솼ÄرR{e CD#n&ğ(9O76BUzQ -"2[˃oFy)CqKy:o%[ʟF <@eFW嗔 =ݑŪ7/訝?J `#۲0Q,iŭ3|]gq^d/5d)ez7Ⅹ閹pT#l"AEo\3}zlɠ.nMf/~6IvREkE/lPTJ<,Zf4:Ȳ=Ktd#3>O 4~!]s&Pvo1$W 0(T^_jS2nnt[GOQGhk, h<[*E"2IHS#'dݣՠܬifEHv^Xb-Ip-_L-(3HR(Jn'S 14j=m6b,C{Vlk թIiybF^!䦃xAIí ͱE1ŊF-qcoLB:od\yo`7h B uD0/YF`Ɵ.v8,as%'[/#2xSo6.=5mh|gOnu\ 1*TXF;`y7jXzIU3i䰿ۨe~[7*F%nVE K^~.႓AsKnJJP$&Wʉ9_{Db @G0(B~02r^cmdR*dű"TF?<ɜͯqd&LԎhcT$SsNJ,kgCWNW F`S|+9]):)v+o^`/B E:1uFRfNxº#k~@Scʯ=81ӮϧzJiUЏ9ao`3EpC(EbHdq=c芳L2XDcyh{f_ylZ`0kϐ熬 2qI !fkԭls",u3d)_:>*af5 -\TC8sc5~/u XHA9yLEȲ9!ëlǛ'B^Pc*z q$Wi9GJ&!F?HXnR@m"- `7%<}6uRXa~i~Q@G?BSۓ,C吅A94(59ѠzXQxv!p.-Wt dLZ5]̑AsY~b5 &3hШEńhVJg_`a*UMU!x|dtA2W7MBr޶.>eNaQa1gZ>]əilU>/&ɺUGlByh!A^oXe@(?Jmat^OwG[Ϲ{l X([ ~!7kZp`!;+P3 IǤ 5! kQEI /dט[K4oUIΙC7;9㿧[\odz VJ&5}d79'q{lQJ֍y鮓ęVf:MZnAY, uB]^oJjL1E]c}kp(?M2q^4k<),A \0-7FgهtH jud0>a>1{nc0 _yf?RH&p477J#\QYލ-C+I?i‰Qgkzi$WKrLYIa7QjRPW}U)hB2l>ewxl1ډ;I㗢b!+N;NaEgz,@Y$$/g%GPJ5ՕI1uߵɣ6.AGa^'=kx!i0ecJ/z%P2]3n<{7 ^,}0ډ1"hk45߇y:vk:,QUO:X\hrVV DX3q2uCT$d-'a(X!m;{:yULpdޖ/Mޅt7v31׸ aaFٲܫж b1HpYh߶'ݕ %8lpn9mg%CڴNA~_^)`%O99I0SV`*P">:n݂Oۙ-*VK BIϪ2VHX>Kus+;j8@އ Ƀ o뽳eI :<11]=4\ʙ9wwc!gh.tZxҹW9`5Vc?$'Erx fL|ƭ[&>{d991:qxP_? ? $4|N;Y ֦DVvG$LK GK!hFkLc(ն>e\'pjTQ܊hՉ|%kc "+;<{HUn D~C [jn8+74BfpBIyU 6զOͯvE8CE&g˓n1~K_?~;#bZ^]Cby0n~+p-8MLkl (Ug,2wfW!Z~״_>ߠAA&F&ʬȰ!kDe+a>CTLܧ~/I4_|My ?EObycvv]5PƗ-93Ѓ =Væ4/ G7wnQ TrΚhq7z bs7OB$ ^Jn_(GI/ysp{98PJƐ|W-C,itKH-ixq,Ĵs0~XCыrF?vDix iv0b3#rWo|a2Xٴc3O1q9A-v:"a t۳;pH2'2?H$G)뛑3'Cg,y+ `-`,ch#&#j㴈/]2כv Cm/Uᅢn c(p ߤF Uc:+!1F#%,.Υv3ۭ׎ⷜ7buU盨My,4u 넪h)HI4 h6֊\@XΘc(>V </`93TR8p8DdO5P:뱴\΋M}J涒WPHF1$LGr_ F`EEճA[yHQgz!Lgi̧Gz}8כ>)}RB++< b4{S 'p;eyEP)B{^`XXS^>|)|iƼw P : D Fu 9a93+_N,FK(?\BJ( 59e$mPƭㄢk4e$$ӧ~ 4wjѽ$/& eyG ½ko8+)=}Bg~,np}~5\ʘjT:%J C/@-"*lh9Щ]\l C3je8;M+)}V߭c`gWG_ 0"1vjJ'7 '=$>qMRê ;k;TJEU{RfdKtKZhSP4_kJ^C%D#B`+9t;(H]h;ԦS'Wr@K62{ٿ_1͍E?RYƿa5E$swDk?Eѭg^L: @MKyǬ=7s;˨pO~8C;qqu&mlmX U2pWSJXG)(Y0P"OS68E@[׬-Ր|^6m[6`P ~ pq"R'R }s<(rkb'3Va? Saz|اSh{k&k1)ڐ5?n"3l_ W1ͼͤ%Q_BK?M.f)T*/fپ ͈"1qaRz>LI>fɧisޖ-q #whG qEN덦׹&T'b:StrQN{F!`5bUXm7fE8҃UM3vO*,.DhdE8@3&D9+`r\X?d.| K5dW_YdFq⡵ xE_ _naLqÕEtԝ;~a 3A zt(e(x  ;43V:u!.CF߆O 3R8.kMՅF/"#GTT(W ̄`3`2ҷ]j d8R0@^mx;)SLGѯ;4hF+AY'fڼ5ưNNIٍSz} (UZh %8|-mq&,O%?Zo2s]B})aQq$4Q-W"EUͺἾ'}GLMKjuo1Z kPh CZo+SY8NG|p-߲9:ʑ;Ig7`Yݨi<^<8U%nD@VyqA]^.aC֛iAEBOl$9v $JsCuҭDt4UedaB4y}s3Nh8Æe#=+ND 6HxP._FkR$tz.:UJ&i;@'f"gL -}q(2GݎʨJP=$˪͘2]SKTb~[BÀX y.Pz^d𛳢U'TR/gNkqrS!D:t;COCv)Il5Քy'YS 0H[*SseS..sPw6ex-M few "Lu̒j WLfny2ǛOȞDcJRkPƑצL(Y?{ȱIM^uif>b4\}2v'g 8~ab p78`|$]e5T OP2mq,6Mfu ;dAHԧHc wab&2*#>";in43 jVi8h0Va\'rSh=žS8eVsz *rŽ1VZ̵Mji*kPJ sAV&@*w.u BC /xJD&1)K ]mF% NXk`< QWtQQQ\hڟD歮YI_]s,&9JZ!0s'%!8dC \/G-fњSoL}vuIk_): ^ O#u\jSOBo./M y߱ ~}ÛeۥWʿܛ' yO߅;C:4U5z>g1b3lfll-e?Hli:T~Ѭ2,JL(?q_%3ݫW)& N.00+%M'"g#gReWl%b/\p\7oe]QY=_>QϹ„4`-bř:+0D(];gm3̦ pK)k|QpwBCKްA-f%U!4A'HmPI!8 T- 習Q ڨک-)I͓FB^}Gڞsk"ī2 -UU:=p(?/ʨe |_9kie읐u,'*)?R6`  ec,`ncv 蓘#;|J@'*Ⱦ5Þq\Qd6=(QhRּqVT3OC{3];t2Ϻln ThQξ>OY|vJZSJH[v.2Q~gN.(?@9IaBwYTFw.9~?AK`k7 X94UIDRW< nk!W39n_=f33_6\iPT(N{YmQ6H,]A0MU]4F !cAHb7#=ΪFr5&S7,5x.V,Z~Ys2J'8%#؆$NrT悬# v}+#rpq`GqZDiaY0\xz||;8O9a Rǘ*Rjʅ0nE2?Ous)D˶vXpIxD g!y%O}ҋh0۝"y?߳X Yo(R6h#x~:TQculL (#w}+fc,x_* kr@vƣ7!+|jw;yj3g$g|8rnȪ]]AR{dNZWra!H"lGnrOmkⳅKxfYPři%xR@mmUA-:k%?24_;ث7u Xk`j(lJ.>b րA]N^,Jv=o -7SdT6m'#% ɤz\Og8cu`0EJ\o~vd>&cj_Gg[k]Ԡ/{B9IGq|_SP2#g*c;/kw"\D 1omDS%Cy~ZĉtRW+A۱Ƹ }gmZ(ʅsA30leiaD/j V^YE_W0Fb#Xϻ͹c9KW[Vk.bz@VZ[2ux1cȩ ?~X]Օʎ|f貍_[2˪,gyt½g5rZи7"h;T a< Gtu{oF=}k9 !t9O,/ 3w:З{9yǐ`m Iz+֝l"2.w`x`VjZ d;ZiŮ0#vnGJ2M{)=0Z{C v N4wade.!V#^1k,^PQsKMp,l3.aDɇhTXI@>Wp=$,դ0bŚ*9R9_=ؙ@]ڷKܿd0xW?t~H0ck_pHϖn2b1U4+VB#Sd5T_D&joxÕ uK?#cG\W5+Qpͤf A/ޕ,[uF/g K㦄L[y y[lwb_vLd)۽P-^Ol^AT97zk54/wG5afӁa4*COHFOhY+j mE>HO0H e@)ͥ ^]yʾ 7j,UYs ޣJQ܉fK\P !NsJ 8>MGkDPr$`LyTz]Tt;@QйglF̨h c2pWYl l? +KeLq}4`h0#bתV[uW]5Ο?lwUxW|6Zl~TcƣuSc>t!V-B<.2@Գ+Ρe 70RѢ zY IBP@A/8a[%,^k =yb %-R麜ήi]1Yl˥V̄Qb)԰'>ft2k1Lxg-@ch0u> 4 AG /  4/ d`LX<#mm`LaΖ,ͲBI ҩG'kYOjJ ٚh7~'ԮND(`Gk~-NgPD;K@|'O$lbH4p9)Gy/bBuqg#دgLM[1R滪ZRx,q" ė>rt[H-k1À^>˹^E~K֦OENLЕuIm&g- ~PxGS/JRz ->vaAwĊ: !{ڍOLc:~()DfAY3`4ۛORL1!F\`ciBԧW9&e3% gVZ<"ط":'Sf06_AH O csÕ7ar1*Zl hЇZS㕂Q30p,: ^\Q2v vp8U/=(Y5m G:kuT(~juZ x`riS]{Z`*cn9sM~ĥ'4š-6RᢕӾB=L!3$lC"z2@Dzf[nO/G4^HK ()V8͙{ e u_hiwu7[MJAFCK{5]W] ?mWT8D~,ybA ; R4bXռȽm9x$*uK=s2F OO.Qr`AL|E-„R{u%Ajʜ8=+}{:-B~'9燞I7O6o?35뺋1#qӤo6r`K΋v,֋|x3LZD9DQchm"t}n R Ḡ՘r 'JL grr?|ɨ? [mO4lR _z[!}!G@O*)Xߕq3% 5+'qLuRwuPش5ϠKRub~'DsaVm @WAgn ])⏴?EQcXuɷ _I^=m9_07/-O'E^%N?xU!~wo+G8<\/ގ:My]ZE""N",%; %o>Oɣ)t uG5Upm6aa{x$,",?3=> RG!Ž݄8لOp`5j'o) " (Mu9JPl83>-8"FP],(A͚Cd@07!5O&ҁ &rYFZ .VD-mN^zsښf@Йӈ\v8׿QõrDoGV-:7ʆl6d+ԫ+7f_ػj+^q>I~k?qpVJH02tTp4SIʯ{.K3x|Ok`L!s|/$7?]R5Gs dьeؤg+lBN3Ma'43 D eu͑!\uhRp#k7 ʰdxWkkGa,4/Fj`G7i G霠[%&ؠ JR}N!>=6Uh\ţ[2#zMa' &KzX:wB>|댔 =4) <cT-+B6꿸tSwxr[Y8D99A(xk+F^`>"ӶZ6l>xVd݄ 3U$H7{\P FI%_"c?[Q/:E\,beIlƗCW ")\ x%~Sk8u6`o4M-$b@5)bۙŞwc4".$&aArGn+0|xzSY{vfVd4q}>=g;\C8gNR ffD|SwİyۗE{{`L{28Ĩvgݍ&7Lגhq:qbaW^`O#VQ%a6NNo-l5^όIYɈ{Lhvvg5d^ԃ1W+WC@H~9ywZCղKQf"] -vG)ߜB >1#קA(mij%Â]`k50NFW]S'yF-pGG֠A5Ž{[Vuq3ڼg CmֹLbztv?(bBiOyZQ{?Y z57Gw=UǾ3nSԈQTΛvZ5Vy0 NcTPj dqJYa:v;^ Y9p@J2MlKl]󺆮ҮpYBOUh> %;1G^IqV+\*HuRr]d#dg#V`̐S\-U | c{=*x♏a&n)lBn~KH.pX&@Ҷ=Gg`|`-*P4[`bߐrdYA-u~^fyb@7&5ƹ: H_@f4RL\{wkD݉lJbi}B6YP̟U7*\eҮxT|I+mB&؆v[n& 67woPL%Kj:x)Y3 V|91 BzD_O'\u$UEȼ1?YD''s-d (̭d,I,d*򏻬! kv ώszOa ņpȔnvJ,ƀޫ!G6B wBK֟PDTOv'5ϵ)=f|n_A*\"/b`SԳa'y#xv؂GH%& |ʖ D5ɳݢPG-4>ؑp+m?uG;D9,cj}A!ҵ W&!Qj_|&V)e TH(Nv]Ӷ\)4n+15`~k19Y}3 cx<~_X=4%̹ 14 W nQ̜2kz }xG=Ʌ7}ec[zęx}W715-&}HIOy ./>: 6u4p)Nz,i/ޮ>e=%n|㪉)x|7=]:v X‡Ġ낄~ZxT> 'ߖ-AzmD5WݦoI_TzAZ'^`K:ΥLhZ.H]wr}cs@c J{ {6z$ _n@rf:z{KnU11ig?`LE{贵$.q#.gC$d * XſUzȒڧ?֘>pgFJGF{*LA~QCny_8S[pk\00Lz]%m9\T؟88Kݟ.\tzݟ&uR4D3(Yg޲K ,H3b-.?`gF@ #r!%FAV2c-Ws (2k%QMyŨ .g gb 'Mi \:TxU':b@I.ݏ++k~፬| Dm|%b1 P7iyűu\cDhה3HkáIdm'u' / cר+*ume:9O;ČKrHa<(OJJ5I u4*E?[j&Q_kE.&lF"e?Y汆_K9}TG?σ|QtDPw3k+"G*ͩ;M2]YK֞ (⨍ Ctȴ̛DaNɔM<2zmZ\/!^1[ HswOg@zA hclm=f/dpY~Lr_EES+9yE>iݏ/96k[D?I"F5ٸ*/yY4q l@ #S`^U&kba(͓ɂQ7E@\O&*]0`() Br?I 2riWdrO_MZFZ W`qOR!C;qAҌ Wrpk*,<$ôtq 2@KS LͶ[urhY#씏YqבE4}/X3h% z?oic2v&O>wu.FM~m|TcU:0hl{ a܂ˠD 5[*[˽uKQ_ƭ${ٕ g咙xRsO=j0exZYV eZǢRLWwH218$@+y|Ɣ#/BR "ߊBߛt&L%R3? (3K{j. lJFg-u*ZTn+CN4&/!>NuCʜ L"QXbiqf6sZP!UK&lBί< $S$|A.}kۑZ^kR?B!GPw{oƏ_Sݨ60mu&6^)VƎ2z 76~=pTl 1f1d8l]FѼ$ZG3KP#xTm~ 'G.rOȦZ([r󨦇GtOJ#Km6r(R)ks㜒6\ϲ>RpRs- #6DX\+( 3'Y 4 @bWqdkB,u!U~ LeN^5{j2ke\6B7Wށ$_pAG\T2U\Գz-HX#.L"#U]!DԈܜq3%|E1.t_{Gae!'XZ5,ܵCK,/G*>0-Kdf랅rYu"`f\.1IWW~L Л?(brL IQRԃvLb{sV>J婒ovO`YTxZ=!c TEV: /5Ϗj'Ʃ $kh{džި5Uvu)mcqsH$P Uc'[̫odSiJH,<ސ3 1.?pDsQ>iGy΀=QP~B9U=cc)J-i42nXjd]rR[lhŖn'ཱི(E)ܷG'ѻi'ÍoLz=o-ܥ8A7\<ڌQ0jMaa881MNMf ĪqQYpp.S#X`R?XL+Xz&jXd} m@[S$kKzc/kčd@L)ù碙Z xd° AEz^A~yFX KTd;z8⼥[r+UoMBsx\x_Eft&}=xm 4E(FAm(!6$ IEe%baqunӁ C:BoQ2Sei[H [(+Ht[!N/I#> 2Mg[꫚Z*;4'LAFq5ǥ,했,Jm]fJ2* "6gbq*̀2RS?Ha-%df?I!.D6^M]˅Lмiamb. AO-dNe^>3:{~.7gbYE߉6S$o|g0ViQE##U߉b7D %O\n̞O"Gbr -`e!ƠRIʁKbs\g8kQFRz͟>;Gh; m*F6ԨBj.GFAP&%($BU* FÀ8bfֹ߾ĎY%_,Q*_=\j,K}Ch3d|iYtZ R|5E(+LFWsaۿq~@-EXQ4С O{'sK߹fjA]W qvmv=.,'ӓUamWl@ &r)Hy iT&`#n@Dd؍:J"ΖW mXZ"mD]gi<W_CՕ5w/n-nLO9Tf\=q*1l#w+R ("oK፯/Lk,~=X@(V{s"'SKgRM3M7k+$tQ ]Z3 m^N b@+݇}U:; nCHjW:K4RJ[zٰ'ˇIw,/MR\(Pl ~}1k>&!7ϰ?eXߴ:>, IFkMRWݻ-@T󶉯YWj^[xM\ߡīK\Y?lTL%Q@ ҇,=ի.E#۹h704.w%SgZQ&yŭZ˸Z Ȯ!=Y{%#P rE"G5LN@2X$nOŽVwhӞ6_^S7:/#z7l~#EKDízǘo\di/wnC87t-ro  `~'kTR;|gLٺŞwr9ԥDeԑ``@ƵN]x xJ[ ՇC]{WCuu [('hצwy{)3N= qxPI&ǔ«`OZgW8wSFM08!|K_ΆMOձx@ ގ,Iku0کK%:,26' khۨ_#|=>Rd?Y/B;5Eo[Ț*e |Pf W/y@UH±=L5Um3%ȭ:_DP]FvTtd*ܶ[ߗo;p!Po |v1?a )gF .*"_xռb6W,.n~dsY[vܵ,SnrT$p0f nM^OXJ,+FX] ˧ɖGBǢi +읩Ǹt/vľpio)jxJXSeNFPM`ekz7 R,n?VȢrY<(jn/aYS!ٲv2 g~ʹx~&.C2c;~b:19![]D7J-zs Y/_}Jݫ|n9.ި%YF8l$L[$k+w9n|>N5>ulMr\xTUuJ}0:~52ԘlNƦRX\| 3o̘@ ċz&4NܧH[3XZK$dZܬȳnkiD#p$l}$ ]4aNs\qSpz]T0I)ѬfdÅgɕMà]ח nlS5aQ-B_߈SKr@"fӭ޺`B8`Pﶛx[}ZmxI)%pܨ.erU qtX& 1iVEFN"|?M}3 0ceP3#X=. t;~m9X$3hmCL%QTO>v8B+}t%QTtvlDJk_DF)HǜPP %KFbF݋ )q- >&loYq BLҶk|$mxҐ8"€m61VPceF\IApf4V/-fuc韯n=h%_?$4QA{}I. Sqo}!lc5zXQT0iP5xP 3s;[&鄰]瓣2k ڮȼCr5NWoXQ}]uFz_L1-sxcш{85=^$sߴa8UF|Cq(eL%Wbop$Hw7Uեqs@+x 4`cx}DN,tcLf(۪^zHq%lrijPkMsia $N\LYeƌCԓ~ Vb+ ʋ~u:끛{00iw[]ſe@^ 6-~sޡ#=㰏(fM(hdʡ=^3b$LS Mi'ZP斋&(S74v(ylQK\M.Eɛx?2eF֜0 M2tr~y-W $7bYqbhzLG^zc#pe-+f|a/L+cʙVD2b%=s7E>53U@ծȒ9oz@#2AD7 _ύň }3l±%&N7/+ɝ2NH.Y2޳vIh &\0-N]rERG22XqЁM'?f_bNCr5KjB3!yIr{NVג08}Lc$OW`cij||uj?Zy |(oЗP$TaSS6Q\,g4RfU~Óp߃qs%J PFl'T+?}=5_Wu,ɰM 5|Xfk .5ơzh^O*:'>6L$V'<\[3Od% V:IPU,r$v 7^>Jl@L5@ˤ )⽈v&buk9tSM F md*E6@m-A1c"G?FRLĬ >)֐ :p(?*/B].y/Cn"0z$ M-VD<}Ѓ!'äPнhв`?:yaG1=pA٢PFA(UERAՀ^j6MۑZ] dȮx=y*wl.E"nN5he !^/dy?R4ڃE^m}2+WX`+^JswI ؔ\;|#i_31#c)LJ̟;{AVUm&w4 ًqT+fL JBr %=ڄ-=pmߧ9lEilHwaqs1[2瀷ݙ;jФC XOz-jN Vf|k,gFW6иRTl^ۥ"F{/SLB2sJdk:6EP_i%f|eT֤ҴuM.bZnϰ aoصjYSda;;w ,FT1)Vl%LPx7QMq7wdQϯsߌla^JV1I֎ƙ/aʽ+07&fLzگIhU'Y͙!ɦi_,ۙIыfY7;IjQ-dXӯ֎v蛁B O7v&.EJ/ Pܦy- ;W3~#h݉{b{<2pLPzR*bi8EyƜ2b [L05U+_|ķĀ%d!n:lml = CVR{ͶYp;$Or<޽w~%%<e{(~>JsS+6JXD}UU'1+av\ަ/֟Oh$dF$baJ!fESa@hh*NC"~XK-`y ":79:MLb yoc>əITޯ,NoPZ_dUFXxbwLjeؖ3@/Bf\A;uYn `|^rW-Z4'Dt.B@}Xrs ,_+:_7tb{/)-Ia wy.O)GD7j$"c]i53^ϳŀPS`C'mPT%墿B[X !dOS\= c%̣I(m1#Mosw%Ubn֪˃,::!6cH4t~f/Fwx@K.#B*Lv= }kH< \g(rT'mu MzNH)֎OSMT|W6$x0@7,^zY;An>,@|@FL9OyOR"0]N!wm߄]Bs޳V<;c@^f|[v+c>ormq yH#Xבߘ " J[avrVv}Ѻ|hx)Pz_Y_EY>vZ͉j/%;VQퟩxc$H2NQKn%ue+.oG:hcZ]#8|d KsK[ܝQ<|1,`\cSV)C?Y7V/ MjFĶ#8yv5eZ\UHwN)|o бHpj|Ry zPHd~FF8 rn3;?qojYC&׹d$Z2Y{6aO S| z+SG7WQg[4{ڸ^+Nb2_E1U'OGmЁli.#)+Έ?!ȭVt_Ryٽ]GB=r!>?!mZI3MNk^Tߖv_F_wi"Y L6(x@,|i=^fdbultQ MɴcGU\Fg"GH}a)3NLqȽK$T#.@(5E٫NJ?R7k?e#e?D~:_71P*NU$|e) 4܏S~@S1 3Iϙx!(b W_*tx3(%C}G%%3}F=H@DP2df[L-ٰb4, Ǝ  ƌSluĽ o1<;z6(fNl{1 xE4F|dn=|rsPbJ[;Pf!f'=QKE=00 _j"=\=Ia}gS)丵<*Ftv.#X5R뙩/j,S;W{xHoA 9KbGG< Xs3}M4+DrZ"Yqe 獤~gKElw'<s'c(h?4R? ´ܽn،U^aǬ*ʳ#ݽvDYzM њn-8ބ1yγz~<~s2K'l׮ɃsTm*M?;trI e {ommû^ >H7'yc\:x$*1xbM 9-iPhŻ@};؊#'|'YKzE-:%GdSg"]PJY mV_q#uss:!xrY;1Q(;)pꅪ 2W1R}T?{oÖ)wC*ؿ`(7@i(w=@]OH bf?-ny{x”lo@d-2 @}*?g? fy[32dVXJOU۫cvڤn_qs~ \6Muk (d؆3UyvU_#;[/3+(_X\34~Nl?)|qnb^K!¥дbٍ)r`(2}9w()|P]v Xx*>#x)򷜕q(w R~ w?v ax)crD%|Yj5V lTZx(s.UM `_ |8%y>Q*ֱńX{OƈUjcuu57ujk۹W/"OHi"R ´yЈ˫ήlY]*J~!"/nZ}.>EdJQܢU Z;uUMX!2Ʈ?^F[x掰hұbe'5[ D0s43g|avK@6 >Ng31 դt͂.,C$imkG̮~tJ "Zlv|67yt\ΘI1'o|.%wbd4Gf^ݬi%9)^}}ZFp:{u6,TXɣbcWauRd:>K9lcu;-iV]nFr#B=[\0=ϧ7= #Ggӕ ĶbIztopSɞ:6kEQ)6gjA^AzƸ*"EU>DM]q4c =mxuxol#jS^cd-„XMv.s7鹖~^s"(mV> =15 SuUhKeȴ|%UV+}5;6%G4w`-#Q!==h3Yh))̎u5J!؋'PtZ}luj!Gl667*읛nZP *uQXvNAB6@R%&$ ¦w*qhq!Ǵ6 gc68eoDv mXN:ZÏ(Z\,Cr2;Ho51uoN)| -'ε|?|$@]/~PhZIS.`O-'!S)K$#=BO$6-ƛ6R#ϛP*lRݫaC2+h`nTTdy;$5ٯG/p]6՘<%! PW@B&b! ,BBx5fC؞dm& `d!%?vȠ^ρžg`UHqLYL=A4bPeO{9)&w<L?$D@v`2*ΟM2dnCXz|hys)B^L.&jrfӯFBmBPpQWgNl1 ?mY-jkV= l9r7t07 C24FZ-^;iࢆ3`~lhyvqx1 3Q+]&E4>oa󒫈ӯo>݈vr#}H\G#"[)mFB]'@JX_ HݯSojF}<4¹]};IY?-CjX6; )j4[%S9h[+a"ar!OGM7u\jӸ->` XhCv'U(i X6(k95^3 | q6E@~Gf V=-J_%&W8\4J1ld3[YfD9q`̱QϽt:] ZJ|D@܁b2g =_V*HOK(EEZ˴$r56,t\QwAXx+$#,^ m4mu#bbu8h˨mX|v4r.h3\Pߝn1,7Q9TcĆf;ϣ+Hd.$.#mFHiW-&\ XhU&j'z&fy~kn). 5c< bEV IHP6EwMPaOl͌U:A@ksegψXbM:+~ 3uOiA!Y-cb|o4p5 `fu[s$_>uK{(cOi@A5& b4Lyi^W$+7TT9#:~cI:[SXj0O`5v% "\ºDogÊ:E#(i5Ռnq %F1~I.xr=C!b;F|OF皧!k\HЁQl$TP90K6D#>eObXG2e3T kDV/%5t3|P5Nwf*}Bb; +<(,衸ig ecb^^8TjQ[i3WH\`69]Dh4]g d@ @Gޗ8*6-.\q=nF矹h HqTdߧwhOPl1-{Lx#qg4W +tQ鏏ԙ\meOM8Š75\6(Ś7@[h"޶lR3 m =&O2 w~B>G*\vЦ@w5O~?qzsF(:C(˩cr6-RrvlsfV>bߘ?=B| ܡg! =z+o8x('=\J%@4JOiUF~`u!.JQ6g=]֤8}vxvU,2IGҁ`JolCt ed //c9j/Du:3nED}BK]#ۙe:3K>Q:z5vhq/r c[m )U XP?Oir85V?!)] 8_#0[D~WS v6xG[7(wU{I͑hؚot&MZe0H."Kg0yϫB:‚a!$:'O\Z)!s0bUE!`SS2Tĩj/ʭ z(bMmxvC&p6Ϳ:4{kz[i,]lW