libvarnishapi3-7.2.1-bp154.2.9.1<>,v܉cl̻!M@eeeP-E?慼cSۅ6H1-#3bd(3sI- aޥo*ح|].!]ʷ͸6V}c^3H͙qm͠xN'ڈf0wv(N9*#fRi4~ڦV("}`D"!с>iAUx}HgxW4EpAM0lgy7'a(v>@JP?J@d # @@DLPir     > X`jt`b(8 9 : >F@FFFGGHGIGXGYG$\GL]GT^G~bGcH0dHeHfHlHuHvHwIxIyIzIIIIJ<Clibvarnishapi37.2.1bp154.2.9.1Shared libraries for VarnishVarnish is an HTTP accelerator. Often called Reverse Proxy, it is an application that stores (caches) documents that have been requested over the HTTP protocol. Based on certain criteria, the next client requesting the document is either given the cached document, or a "fresh" document requested from a backend server. The purpose of this is to minimize the requests going to the backend server(s) by serving the same document to potentially many users. This package holds the shared libraries for varnish.cl̻lamb03SUSE Linux Enterprise 15openSUSEBSD-2-Clausehttp://bugs.opensuse.orgProductivity/Networking/Web/Proxyhttps://varnish-cache.org/linuxx86_64clDclDdbab5a4df38ad3ae142ab115f1f7af2d11b141a4e5b5d1efed1df9f67c704e6dlibvarnishapi.so.3.0.0rootrootrootrootvarnish-7.2.1-bp154.2.9.1.src.rpmlibvarnishapi.so.3()(64bit)libvarnishapi.so.3(LIBVARNISHAPI_3.0)(64bit)libvarnishapi3libvarnishapi3(x86-64)@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libpcre2-8.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ck@c]c*c(Yc'@b@bDirk Müller Bernhard Wiedemann Bernhard Wiedemann Bernhard Wiedemann Jan Engelhardt Jan Engelhardt Johannes Segitz Jan Engelhardt Dirk Müller Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Jan Engelhardt Samu Voutilainen jengelh@inai.dejengelh@inai.derbrown@suse.comantoine.belvire@opensuse.orgdimstar@opensuse.orgjengelh@inai.dedimstar@opensuse.orgjengelh@inai.dejengelh@inai.deeshmarnev@suse.comeshmarnev@suse.comjengelh@inai.de- Update to release 7.2.1 * Attempts to mark well-known headers like Content-Length and Host hop-by-hop through a Connection-header will now cause a 400 "Bad request" response. (VSV00010, CVE-2022-45059, boo#1205243) * Apply the same character set rules to HTTP/2 pseudo-headers as is done on the corresponding HTTP/1 request-line field parsing. (VSV00011, CVE-2022-45060, boo#1205242)- update to 7.2.0: * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``, ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated. * Cookie headers generated by vmod_cookie no longer have a spurious trailing semicolon at the end of the string. This could break VCL relying on the previous incorrect behavior. * The ``SessClose`` and ``BackendClose`` reason ``rx_body``, which previously output ``Failure receiving req.body``, has been rewritten to ``Failure receiving body``. * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a VEXT is loaded by the cache process. Unlike VMODs that have the combined lifetime of all the VCLs that reference them, a VEXT has the lifetime of the cache process itself. There are no built-in extensions so far. * Duration parameters can optionally take a unit, with the same syntax as duration units in VCL. * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body`` from outside client vcl subs now fail properly instead of triggering an assertion failure. * New "B" string for the package branch in ``VCS_String()``. For the 7.2.0 version, it would yield the 7.2 branch. * The new ``vcc_feature`` bits parameter replaces previous ``vcc_*`` boolean parameters. The latter still exist as deprecated aliases. * The ``-k`` option from ``varnishlog`` is now supported by ``varnishncsa``. * New functions ``std.now()`` and ``std.timed_call()`` in vmod_std. * New ``MAIN.shm_bytes`` counter. * A ``req.http.via`` header is set before entering ``vcl_recv``. Via headers are generated using the ``server.identity`` value. It defaults to the host name and can be turned into a pseudonym with the ``varnishd -i`` option. Via headers are appended in both directions, to work with other hops that may advertise themselves. * A ``resp.http.via`` header is no longer overwritten by varnish, but rather appended to. * The ``server.identity`` syntax is now limited to a "token" as defined in the HTTP grammar to be suitable for Via headers. * In ``varnishtest`` a Varnish instance will use its VTC instance name as its instance name (``varnishd -i``) by default for predictable Via headers in test cases. * VMOD and VEXT authors can use functions from ``vnum.h``. * Do not filter pseudo-headers as regular headers. * The termination rules for ``WRK_BgThread()`` were relaxed to allow VMODs to use it. * ``(struct worker).handling`` has been moved to the newly introduced ``struct wrk_vpi`` and replaced by a pointer to it, as well as ``(struct vrt_ctx).handling`` has been replaced by that pointer. ``struct wrk_vpi`` is for state at the interface between VRT and VGC and, in particular, is not const as ``struct vrt_ctx`` aka ``VRT_CTX``. * Panics now contain information about VCL source files and lines. * The ``Begin`` log record has a 4th field for subtasks like ESI sub-requests. * The ``-E`` option for log utilities now works as documented, with any type of sub-task based on the ``Begin[4]`` field. This covers ESI like before, and sub-tasks spawned by VMODs (provided that they log the new field). * No more ``req.http.transfer-encoding`` for ESI sub-requests. * The thread pool reserve is now limited to tasks that can be queued. A backend background fetch is no longer eligible for queueing. It would otherwise slow a grace hit down significantly when thread pools are saturated. * The unused ``fetch_no_thread`` counter was renamed to ``bgfetch_no_thread`` because regular backend fetch tasks are always scheduled. * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``, ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()`` and ``MGT_VCC_FEATURE()`` now return a boolean value (``0`` or ``1``) instead of the (private) flag value. * A regression in the transport code led MAIN.client_req to be incremented for requests coming back from the waiting list, it was fixed. - Delete varnish-5.1.2-add-fallthrough-comments.patch- Make reload fail nicely on vcl syntax error - Set TasksMax=16384 because default thread_pool_max is 5000- Fix varnish.service stop- Fix logrotate - Add service reload- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150] * Resolve a denial of service attack involving reason phrases.- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959] * VCL: It is now possible to assign a BLOB value to a BODY variable, in addition to STRING as before. * VMOD: New STRING strftime(TIME time, STRING format) function for UTC formatting.- Added hardening to systemd service(s) (bsc#1181400). Modified: * varnish.service * varnishlog.service- Update to release 6.6.1 * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]- update to 6.6.0: * The ban_cutoff parameter now refers to the overall length of the ban list, including completed bans, where before only non-completed (“active”) bans were counted towards ban_cutoff. * Body bytes accounting has been fixed to always represent the number of body bytes moved on the wire, exclusive of protocol-specific overhead like HTTP/1 chunked encoding or HTTP/2 framing. * The connection close reason has been fixed to properly report SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported. * Unless the new validate_headers feature is disabled, all newly set headers are now validated to contain only characters allowed by RFC7230. * The filter_re, keep_re and get_re functions from the bundled cookie vmod have been changed to take the VCL_REGEX type. This implies that their regular expression arguments now need to be literal, not e.g. string. * The interface for private pointers in VMODs has been changed, the VRT backend interface has been changed, many filter (VDP/VFP) related signatures have been changed, and the stevedore API has been changed. (Details thereto, see online changelog.)- Update to release 6.5.1 * Bump the VRT_MAJOR_VERSION number defined in the vrt.h- Update to release 6.5.0 * `PRIV_TOP` is now thread-safe to support parallel ESI implementations. * varnishstat's JSON output format (-j option) has been changed. * Behavior for 304-type responses was changed not to update the Content-Encoding response header of the stored object.- Disable LTO, this randomly fails during link stage.- Update Git-Web repository link - Set CFLAGS+=-fcommon.- Update to release 6.4.0 * The MAIN.sess_drop counter is gone. * backend "none" was added for "no backend". * The hash algorithm of the hash director was changed, so backend selection will change once only when upgrading. * It is now possible for VMOD authors to customize the connection pooling of a dynamic backend. * For more, see changes.rst.- Update to release 6.3.2 * Fix a denial of service vulnerability when using the proxy protocol version 2.- Update to release 6.3.0 * The Host: header is folded to lower-case in the builtin_vcl. * Improved performance of shared memory statistics counters. * Synthetic objects created from vcl_backend_error {} now replace existing stale objects as ordinary backend fetches would (for details see changes.rst)- Update to release 6.2.1 * Bugfix for CVE-2019-15892 [boo#1149382]- Add uninit.patch.- Updated to 6.2.0 * Added a thread pool watchdog which will restart the worker process if scheduling tasks onto worker threads appears stuck. The new parameter "thread_pool_watchdog" configures it. - Disabled error for clobbering, which caused bogus error in varnishtest- Put %fillup back into %post- Update to new upstream release 6.0.0 * Added support for Unix Domain Sockets, both for clients and for backend servers. This brings a new level of the VCL language, version 4.1. * Always use HTTP/1.1 on backend connections for pass fetch.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to version 5.1.2: * Fix an endless loop in Backend Polling (#2295) * Fix a Chunked bug in tight workspaces (#2207, #2275) * Fix a bug relating to req.body when on waitinglist (#2266) * Handle EPIPE on broken TCP connections (#2267) * Work around the x86 arch's turbo-double FP format in parameter setup code. (#1875) * Fix race related to backend probe with proxy header (#2278) * Keep VCL temperature consistent between mgt/worker also when worker protests. * A lot of HTTP/2 fixes. - Changes introduced by version 5.1.1: * Fix bug introduced by stubborn old bugger right before release 5.1.0 was cut. - Changes introduced by version 5.1.0: * Added varnishd command-line options -I, -x and -?, and tightened restrictions on permitted combinations of options. * More progress on support for HTTP/2. * Add ``return(fail)`` to almost all VCL subroutines. * Restored the old hit-for-pass, invoked with ``return(pass(DURATION))`` from ``vcl_backend_response``. hit-for-miss remains the default. Added the cache_hitmiss stat, and cache_hitpass only counts the new/old hit-for-pass cases. Restored HitPass to the Varnish log, and added HitMiss. Added the HFP prefix to TTL log entries to log a hit-for-pass duration. * Rolled back the fix for #1206. Client delivery decides solely whether to send a 304 client response, based on client request and response headers. * Added vtest.sh. * Added vxid as a lefthand side for VSL queries. * Added the setenv and write_body commands for Varnish test cases (VTCs). err_shell is deprecated. Also added the operators - cliexpect, -match and -hdrlen, and -reason replaces -msg. Added the ${bad_backend} macro. * varnishtest can be stopped with the TERM, INT and KILL signals, but not with HUP. * The fallback director has now an extra, optional parameter to keep using the current backend until it falls sick. * VMOD shared libraries are now copied to the workdir, to avoid problems when VMODs are updated via packaging systems. * Bump the VRT version to 6.0. * Export more symbols from libvarnishapi.so. * The size of the VSL log is limited to 4G-1b, placing upper bounds on the -l option and the vsl_space and vsm_space parameters. * Added parameters clock_step, thread_pool_reserve and ban_cutoff. * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path and vmod_path instead. * All parameters are defined, even on platforms that don't support them. An unsupported parameter is documented as such in param.show. Setting such a parameter is not an error, but has no effect. * Clarified the interpretations of the + and - operators in VCL with operands of the various data types. * DURATION types may be used in boolean contexts. * INT, DURATION and REAL values can now be negative. * Response codes 1000 or greater may now be set in VCL internally. resp.status is delivered modulo 1000 in client responses. * IP addresses can be compared for equality in VCL. * Introduce the STEVEDORE data type, and the objects storage.SNAME in VCL. Added req.storage and beresp.storage; beresp.storage_hint is deprecated. * Retired the umem stevedore. * req.ttl is deprecated. * Added std.getenv() and std.late_100_continue(). * The fetch_failed stat is incremented for any kind of fetch failure. * Added the stats n_test_gunzip and bans_lurker_obj_killed_cutoff. * Clarified the meanings of the %r, %{X}i and %{X}o formatters in varnishncsa. - Add varnish-5.1.2-add-fallthrough-comments.patch to fix build with GCC 7 (boo#1041259).- BuildRequire python3-docutils instead of python-docutils.- Update to new upstream release 5.0.0 - The varnishd "-u NNN" option, which may be remaining in /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN". * Varnish 5.0 changes some (mostly) internal APIs and adds some major new features over Varnish 4.1. * 5.0 supports jumping from the active VCL's vcl_recv{} to another VCL via a VCL label. * Very Experimental HTTP/2 support * We have added to the "directors" VMOD — an overhauled version of a director which was available as an out-of-tree VMOD under the name VSLP for a couple of years. It is basically a better hash director which uses consistent hashing to provide improved stability of backend node selection when the configuration and/or health state of backends changes. * Hit-For-Pass is now actually Hit-For-Miss * We have made the ban lurker even more efficient by example of some real live situations with tens of thousands of bans using inefficient regular expressions. * The waitinglist logic for ESI subrequests now uses condition variables to trigger immediate continuation of ESI processing when an object being waited for becomes available. * Backend PROXY protocol requests are now supported through the .proxy_header attribute of the backend definition. * VCL files are now also being searched for in /usr/share/varnish/vcl if not found in /etc/varnish. * The basic device detection vcl is now bundled with varnish.- Add "-ffloat-store -fexcess-precision=standard" to CFLAGS when building for ix86, working around bug gcc#323. See also gh#varnish/Varnish-Cache#88.- Update to new upstream release 4.1.2 * vmods: Passing VCL ACL to a vmod is now possible. * vmods: VRT_MINOR_VERSION increase due to new function: VRT_acl_match() * Be stricter when parsing a HTTP request to avoid potential HTTP smuggling attacks against vulnerable backends.- Report testsuite failure to build log and make testsuite nonfatal as there seems to be one swaying test, tests/r01478.vtc.- disable silent rules in spec file. - enable testsuite for varnish.- Update to new upstream release 4.1.1 * Improved security features (jails). * Support for PROXY protocol. * Warm and cold VCL states. * Backends defined through VMODs. * A lot of bugs were fixed. - Delete 0001-Fail-fetch-on-malformed-Content-Length-header.patch, this issue was fixed in upstream. - Add 'su varnish varnish' line to varnish.logrotate file. - Cleanup with spec-cleaner.- Update to new upstream release 4.0.3 * Full support for streaming objects through from the backend on a cache miss. Bytes will be sent to 1..n requesting clients as they come in from the backend server. * Background (re)fetch of expired objects. On a cache miss where a stale copy is available, serve the client the stale copy while fetching an updated copy from the backend in the background. * New varnishlog query language, allowing automatic grouping of requests when debugging ESI or a failed backend request. * Comprehensive request timestamp and byte counters. - Add 0001-Fail-fetch-on-malformed-Content-Length-header.patch [bnc#921316]/sbin/ldconfig/sbin/ldconfiglamb03 16680746837.2.1-bp154.2.9.17.2.1-bp154.2.9.1libvarnishapi.so.3libvarnishapi.so.3.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17738/openSUSE_Backports_SLE-15-SP4_Update/6e59398c1b7934f3b51ad5bbaf97f421-varnish.openSUSE_Backports_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=107ebc8ea232c424f559e1c3d29291e662bc3345, not strippedPPR RRRRR R RRRR R RRf uۍ3utf-88ef493a91c784865e457a7f8088c7a5a6ca74e955d523c3ec665c7801c2e82bf?7zXZ !t/C7($]"k%{B|VNxЍWnVR|#<"18]c)kP1r -`]k}'LJcn'm~ť¸#aF}~\J53|aGl2'plSsc?P>.OtϥxxV~&2xa="wL.= [ dYNJ,4Cј+ãouGl,p{5j_VOGp`jxZpIfv?аO^r'⡘K|h?M7RLzJt{_Iyl-('V(,48vP?Avr#Q|OXG`Jg&+:W'(_vԗVeX0ړt=*jcnJ-,WID tURM2O"4 3x36p(c3?&( 0LZLpuGEa  9o!NB-ҫ]D*]; `HrMzs3(D/;__i=;]ccMS@ZY+ǩ6mhhrH0&[djŘ>3"p΄@p`d6[G7,쾶-}s wH4ɰ KرY+j˫#U8(ڞ_A 1\ks߂ӔJu7y_,}HE)HS uc{49] ỈYVbK-ۇөj\ƅ%yNF1P l7z~rrN 8㳮%7%69N=wWوfѰJwXV> 2t) M\\\u>*^+=ttYNzcPJ'(faNR))21[V\x!\0%>apN?ZO4&D OHR` XF&< h3_43 ˃BVU7hK\lw^q{"gO[Z[Y}M@-4ق&NӜ.* 4kjʤy^CZ`t<J/3ǻkƞ~2~U$t kU-t\na+7.7 ;>)b- bls GT 'D}]yTMTU\eK{5sdxT]#ؔnd s%:! _-lGicIღ]" ):{↮wGb-a_7>YKP3pH9W6ZB&+ ODHy]swX57a!Q¹l_7/c6TCm™G㨈##>?#fsӈI=.Zۦr Gy_[9-7(U{4t+%4d.F<vJM%܎{ @SGL&3` G1 l>/ÅSfȨf esQx䟠CVxzY3D0ŀu*` m"Zx[9VaHfl7~nN=ưAou$ ٝN(s9J?$ Dȹ=\SZ0Rr؀:A!alǍyN[ sȬ0G(ZĽ>"s;|ԨكRg14&u Xp.zuHQ%s. "K.6dQ ɣ=U[Ch8-ҿKٚ&VR숎C>}&r\@JJ"dzMI7۬cwm!=~-̗@J)`$yApk ͍3=:ZdYVk0C*j93sU93!VmyY%v,ቭWڪ7 `V|e@SRj'tPE_^]pGĒql.T0v]BO qI?)4. ff&1x1YU@86`dQ[Lg^_6&!M0B@jxICƐq"ϊ7^3&@pvlbjp)7+iiwNuz4#SR\̾Ϡ gdz^tng%ZO])m,m&7 ~T Xm=*,fS;8>@2)Bxu&릌Nz?CjeS0Uoeܕ@NuXe}㟴h™JU%1UmHKߐx ~jP@+!@{xg*w1Ww[̅jCnGkr?_`LA@K~iCSb@R,Ju3T<c7 ސYDe!84Q MUK1u_,WҨaSݡ6M8 $) "ǃN,%jp!!#o8LK-5E'L^*5׍K:39^~{Gǜ}f36|X6_]7:@w@-\,zg2ܺ%P8,AtzklY>:vKP$į`ٶyW0QD S-.h;&lAc8_:f)5ċ5U@\[R0YuHK/$'1YŻxDv=Hv r"[;Wa?9U:&[>tOC`w7\jA% 'ƚim2((/ 䀳{A hgtQ%w_Is\|tCd2_ux1,mbd  3fW9*x_w+qy|d*r}R|Vlh:j_x0&$t[ymKN ~k _YǢ d%fL~o? 5@}yg_c!P"Zd gbm}ݚ֊}|!ϧ~ Xc/*C?й{l.\bq<5lð)-q~+؆4$yLtyT /8,.Б$lK1*V_Nd Cbv_t)7L|cIX'U\K ,7}eoF(16R }lԤm={iuA'^F,j4_,(mdv(pk`lh07&Ͻ]eݠWkSDagYp |xW&|<4 J`z}bN/ާҌ,j[ Z? WY؄UMN(׊WljIeJzߦ,SicԷүDPr)d!9" &C@* PVp2,m,굖<c*P#3'ɴ)\7A:tfWXɍyâ/ېٱMh+}U$#xȌ )#Bְ3E9ӷ=^+ZT:WicC_~j ;oiW!͍XAMM" as0ob3Smz\pPU1^,7=ȵTǮ'Fk ]˩iA Ib,?br_,y~R `B9tB*g 0W bޒt :%D54CTSgݿɘnn.1!x2(.4tfUquIV^:H6l q@IPP>H,·f0}{/]`= e`zґYϾlf(_BJnMdmٛgY\Gfl <%F7=jQYS8Uگaأ8 zG<%;)ǽw @T#N8u}BjZ[ H]v9U\}%h" 0:Xl?E>ORڪ@:&zaJx oŒL%9Ѡ Ι!<QwrJ^g\ҬxkfU^hƾ5W'wAU2 1ym^D'OhՓ 4$J!AhVc&=3oFYIgdo&ef  r J_-IC]pS0cUE}Igu:=@Bh̜BHݷIseݦ0eᲡyF|K۶̍(*#G~f,U!spM>hH:@%P-K6Ik[beD{T_bV󻲉FFQ4kOf/vqj6-uP<TcS)@ĸY-U7U?~I{A0:q9 avqWJ׾ g[ia+}Ikw&Ҵ^)ّ?zM~ݖ5;GæMyL΄x ABJ}eyNS5zZWqUVBN_٫5*QYQw:'FoJl=.˯%?dob̿O woPٰYh՘u M)DJ B ^ȳw硌&trھeTg2;_LҼ_ԖLU:6ИT8 ve{Lb\VTR9Gu{#5i1JbYkr/a8{ܣc5&~yVD&ߊGQRwdK)?.^ӺsEca75mR]OXz>6F20gu&sa:4bfThњ Ӡ>Q'cP4XTyWYNlJ 0h+h`|=K]wPá8N?ng(&SpDК}_t ¶5osѡRfxBJ5f{2(| R@_sXO۵P98זx_X_2t}۪#&@&4rWĤO= A'#(ӧF>W䆲[h[HyrNGw iãHŠ.sWxpxs, j_4)\p-7oF/LٳDh}y)ø=pWϽL tA?c6|9uyQU/b}~~_"&]vtۼsthV&EgWx\_e*֧tZ_kN*^Oz4*)pGUUVQ+Fq=XEz*ۂ w7E&bDD'i甑~*[*5/eQxDѩ+K3tgU!׸ӡq ՒP>G@;^Е.%A'mPm7T{ -;1 S^F#6 )=_W~"JuN5Y̼V# p!%VwNY1<#†!Ҩp}v3^s_h"dhlb:Uٸ=QN0rm\v )to"ٞcd1c0#xm" h$C'We),1 *o,5aVW(.QvV@ +oCpB jֳ?75?U+.nChF]vb'^-0wi%pR0)e4xzG@1X[T~eS݉v2j)Vţo-0"ѺD[0IC@D"2n#ߟ|EPwfqdfoxk F`&5:ʪ{mGt ܷyf8٤v7FkIyj!– wRE-#!ؤ._^;46Z1(NĄG F>#!jf΀  䤠|JMBO2CUR"^6͖ZY0YSRvz+JpLh! è+*ӝ/`=}@RsWēPN\# 3&z%x`ՋBʾW7rƙbsF_zo9~R.Eо"sbvoϛa[tX͊S1*0g=USAHJֶd>@rD~:u=K75U YΣY! UZ-yqL=֓c;`i<2A2fׅ2Bj|z 7hbeM.ߥ .2]DYRPRN! YZ