asterisk-voicemail-plain-debuginfo-18.12.1-1.el8.2 > 6 6_6 3!y덏%!E/֡c !E/֡ʞN 2RC"9@7Ҝ{n$~l1j.CcS]|R\1<ٗ&/{)x$F4!ʿg"nH)V^{B5O1oW/!zV)h8s,;TrCu^^""F h^<=nL : QMAuTi<>EE)6'v$ӛHh>f":i/4NZdzI hAVbpU B %yT}H䢮=ˆXă}.'Mn4osD¼#ڮ;okH &6dA9?+M]m<K{ћ|iD\,`о3,}LwC9ΊC&LA[aӀrtu$Tc]VĠ,Q+6 BSKUS+P0`@[`(bNȺhM_%].!k83צfɳXzfOu=IPxM ozdU/AO#wiW"f)c֊6E☓M",_L w'gR)2x`XdXS^rM AWcXj S ){Hf<~n϶v\ew/ t:.&2222'{tVs >p<?#+ 3 j(,TXgv|      $  T    @ p   < (L8T9 :[Gو Hٸ I XY\ ]L ^ۑbadeflt u vP(,Tsasterisk-voicemail-plain-debuginfo18.12.11.el8.2Debug information for package asterisk-voicemail-plainThis package provides debug information for package asterisk-voicemail-plain. Debug information is useful when developing applications that use this package or when debugging this package.cbuildvm-a64-28.iad2.fedoraproject.org 8Fedora ProjectFedora ProjectGPLv2Fedora ProjectDevelopment/Debughttp://www.asterisk.org/linuxaarch64>l>lq TAAAAAA큤cccccccccccc2836310f7eb400a0b25332738271744cf8673eecc90a3015412a827201478c1925ac7f97301604fb8986624f92c69156ee4c1b2ebb6fe830e5a16a8eeb1b9eae../../../.build-id/1e/1966929f4e36d7eb06d9813e12d1623d2b7490.2../../../../../usr/lib/debug/usr/lib64/asterisk/modules/app_voicemail_plain.so-18.12.1-1.el8.2.aarch64.debug../../../.build-id/3f/ab3daf3cf39989ae11aaa101f364b0033ad46a.2../../../../../usr/lib/debug/usr/lib64/asterisk/modules/app_directory_plain.so-18.12.1-1.el8.2.aarch64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootasterisk-18.12.1-1.el8.2.src.rpmasterisk-voicemail-plain-debuginfoasterisk-voicemail-plain-debuginfo(aarch-64)    asterisk-debuginfo(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)18.12.1-1.el8.23.0.4-14.6.0-14.0-15.2-14.14.3cױ@b@bbbbbbbbbbTa@a@` @`C` @`t6@`.V`!'`@` l_^@_/@_@_@_P_P_G@_^^ϧ^I^^^&@^j$@^B@^0"@^r^@]+]]Γ@]@]@]]rJ@]9]8H@],j\h\@\y\f\R@\]I>]I-I-I-I-IH,HCH@HWH@H@H@HkmHQHO@H1kH @Gu@GGG@G@G@G߮G΋@G@G@G@GG{|Gt@Gl@GiGiGg@GcGcG_@G_@G^{G]*@GO@GB@GAzG=@G9G G m@F%@FS@F^F^F @F@FF;@F;@FF@FtF#@F@FEF@F@Fzh@FvsFvsFvsFvsFvsFu"@Fu"@Fr@FAF1F@EWE@E@E8@E7hE6@E6@E6@E2"DDD(@DWIDLDGwDGwDF&@D - 18.12.1-1.2Fedora Release Engineering - 18.12.1-1.1Michal Josef Špaček - 18.12.1-1Michal Josef Špaček - 18.11.2-1Michal Josef Špaček - 18.10.1-1Michal Josef Špaček - 18.9.0-1Michal Josef Špaček - 18.8.0-1Michal Josef Špaček - 18.7.1-1Michal Josef Špaček - 18.6.0-1Michal Josef Špaček - 18.5.1-1Michal Josef Špaček - 18.4.0-1.6Jitka Plesnikova - 18.4.0-1.5Fedora Release Engineering - 18.4.0-1.4Sahana Prasad - 18.4.0-1.3Fedora Release Engineering - 18.4.0-1.2Jitka Plesnikova - 18.4.0-1.1Jared K. Smith - 18.4.0-1Jared K Smith - 18.3.0-1Jared K. Smith - 18.2.1-1Pavel Raiskup - 18.2.0-1.2Fedora Release Engineering - 18.2.0-1.1Jared K. Smith - 18.2.0-1Jared K. Smith - 18.1.0-1Jared K. Smith - 18.0.1-2Jared K. Smith - 18.0.1-1Jared K. Smith - 18.0.0-1Josef Řídký - 17.7.0-2Jared K. Smith - 17.7.0-1Josef Řídký - 17.5.0-2.3Fedora Release Engineering - 17.5.0-2.2Jitka Plesnikova - 17.5.0-2.1Jared K. Smith - 17.5.0-0.rc1.1Jared K. Smith - 17.4.0-2Jared K. Smith - 17.4.0-1Jared K. Smith - 17.4.0-0.rc2.1Jared K. Smith - 17.4.0-0.rc1.1Jared K. Smith - 17.3.0-1Jared K. Smith - 17.2.0-1Fedora Release Engineering - 17.2.0-0.rc1.2.1Tom Callaway - 17.1.0-2Jared K. Smith - 17.1.0-1Jared K. Smith - 17.1.0-0.rc1.1Jared K. Smith - 17.0.1-1Jared K. Smith - 17.0.0-2Jared K. Smith - 17.0.0-1Jared K. Smith - 16.6.1-1Jared K. Smith - 16.6.0-1Jared K. Smith - 16.5.1-1Jared K. Smith - 16.5.0-1Fedora Release Engineering - 16.4.1-2Jared K. Smith - 16.4.1-1Jitka Plesnikova - 16.4.0-2Jared K. Smith - 16.4.0-1Jared K. Smith - 16.2.1-1Jared K. Smith - 16.2.0-1Fedora Release Engineering - 16.1.0-4Björn Esser - 16.1.0-3Björn Esser - 16.1.0-2Jared Smith - 16.1.0-1Jared Smith - 16.0.1-1Jared Smith - 16.0.0-1Jared K. Smith - 15.5.0-1Jitka Plesnikova - 15.4.1-2Jared K. Smith - 15.4.1-1Jared K. Smith - 15.4.0-1jsmith - 15.3.0-1Jared Smith - 15.2.2-2Jared Smith - 15.2.2-1Jared Smith - 15.2.1-3Jared Smith - 15.2.1-2Jared Smith - 15.2.1-1Igor Gnatenko - 15.2.0-5Fedora Release Engineering - 15.2.0-4Jared Smith - 15.2.0-3Björn Esser - 15.2.0-2Jared Smith - 15.2.0-1Jared Smith - 15.1.5-1Jared Smith - 15.1.4-2Jared Smith - 15.1.4-1Jared Smith - 15.1.3-1Jared Smith - 15.1.2-1Jared Smith - 15.1.1-1Jared Smith - 15.1.0-1Jared Smith - 15.0.0-1Jared Smith - 14.6.2-1Jared Smith - 14.6.1-6Jared Smith - 14.6.1-5Jared Smith - 14.6.1-4Jared Smith - 14.6.1-3Jared Smith - 14.6.1-1Jared Smith - 14.6.0-2Jared Smith - 14.6.0-1Fedora Release Engineering - 14.5.0-4Fedora Release Engineering - 14.5.0-3Till Maas - 14.5.0-2Jared Smith - 14.5.0-1Jitka Plesnikova - 13.11.2-1.2Fedora Release Engineering - 13.11.2-1.1Jared Smith - 13.11.2-1Jared Smith - 13.11.1-1Jitka Plesnikova - 13.9.1-1.1Jared Smith - 13.9.1-1Jared Smith - 13.7.2-2.1Michal Toman - 13.7.2-2Jared Smith - 13.7.2-1Jared Smith - 13.7.1-2Jared Smith - 13.7.1-1Fedora Release Engineering - 13.3.2-3.1Jared Smith - 13.3.2-3Robert Scheck - 13.3.2-2Fedora Release Engineering - 13.3.2-1.2Jitka Plesnikova - 13.3.2-1.1Jeffrey C. Ollie - 13.3.2-1:Jeffrey C. Ollie - 13.3.1-1:Jeffrey C. Ollie - 13.3.0-1:Jeffrey C. Ollie - 13.2.0-1:Jeffrey C. Ollie - 13.1.1-1:Jeffrey C. Ollie - 13.1.0-1Peter Robinson 13.0.2-3Tom Callaway - 13.0.2-2Jeffrey C. Ollie - 13.0.2-1Jeffrey C. Ollie - 13.0.1-1Jeffrey C. Ollie - 13.0.0-1Tom Callaway - 11.13.1-2Jeffrey C. Ollie - 11.13.1-1Jeffrey C. Ollie - 11.13.0-1Jeffrey C. Ollie - 11.12.1-1Jeffrey C. Ollie - 11.12.0-1Jeffrey C. Ollie - 11.11.0-1Jitka Plesnikova - 11.10.2-2.2Fedora Release Engineering - 11.10.2-2.1Jeffrey Ollie - 11.10.2-2:Jeffrey Ollie - 11.10.2-1:Jeffrey Ollie - 11.10.1-1:Jeffrey Ollie - 11.10.0-1:Fedora Release Engineering - 11.9.0-2.1Dennis Gilmore - 11.9.0-2Jeffrey Ollie - 11.9.0-1:Jeffrey Ollie - 11.8.1-1:Jeffrey Ollie - 11.8.0-1:Jeffrey Ollie - 11.7.0-1:Jeffrey Ollie - 11.6.1-1:Jeffrey Ollie - 11.6.0-1:Jeffrey Ollie - 11.5.1-3:Jeffrey Ollie - 11.5.1-2:Jeffrey Ollie - 11.5.1-1:Fedora Release Engineering - 11.4.0-2.2Petr Pisar - 11.4.0-2.1Rex Dieter 11.4.0-2Jeffrey Ollie - 11.4.0-1:Tom Callaway - 11.3.0-2:Jeffrey Ollie - 11.3.0-1:Jeffrey Ollie - 11.2.2-1:Jeffrey Ollie - 11.2.1-1:Jeffrey Ollie - 11.2.0-1:Jeffrey Ollie - 11.1.2-1:Jeffrey Ollie - 11.1.1-1:Jeffrey Ollie - 11.1.0-1:Jeffrey Ollie - 11.0.2-1:Dan Horák - 11.0.1-3Dennis Gilmore - 11.0.1-2Jeffrey Ollie - 11.0.1-1Jeffrey Ollie - 11.0.0-1:Jeffrey Ollie - 11.0.0-0.7.rc2:Jeffrey Ollie - 11.0.0-0.6.rc1Jeffrey Ollie - 11.0.0-0.5.beta2Jeffrey Ollie - 11.0.0-0.4.beta2Jeffrey Ollie - 10.8.0-1Dan Horák - 11.0.0-0.3.beta1Dan Horák - 10.7.1-2Jeffrey Ollie - 10.7.1-1Jeffrey Ollie - 10.7.0-1Jeffrey Ollie - 10.6.1-1Jeffrey Ollie - 10.6.0-1Jeffrey Ollie - 11.0.0-0.2.beta1Fedora Release Engineering - 10.5.2-1.2Petr Pisar - 10.5.2-1.1Jeffrey Ollie - 10.5.2-1:Petr Pisar - 10.5.1-1.1Jeffrey Ollie - 10.5.1-1Jeffrey Ollie - 10.5.0-1Petr Pisar - 10.4.2-1.1Jeffrey Ollie - 10.4.2-1Jeffrey Ollie - 10.4.1-1Jeffrey Ollie - 10.4.0-1Jeffrey Ollie - 10.3.1-1Russell Bryant - 10.3.0-1Russell Bryant - 10.2.1-1Jeffrey C. Ollie - 10.1.2-2Jeffrey C. Ollie - 10.1.2-1Jeffrey C. Ollie - 10.1.1-1Jeffrey C. Ollie - 10.1.0-1Russell Bryant - 10.0.0-2Fedora Release Engineering - 10.0.0-1.1Jeffrey C. Ollie - 10.0.0-1Jeffrey C. Ollie - 10.0.0-1Jeffrey C. Ollie - 10.0.0-0.7.rc3Jeffrey C. Ollie - 10.0.0-0.6.rc2Jeffrey C. Ollie - 10.0.0-0.5.rc1Jeffrey C. Ollie - 10.0.0-0.4.beta2Jeffrey C. Ollie - 10.0.0-0.3.beta2Jeffrey C. Ollie - 10.0.0-0.2.beta2Jeffrey C. Ollie - 10.0.0-0.1.beta1Petr Sabata - 1.8.5.0-1.2Petr Sabata - 1.8.5.0-1.1Jeffrey C. Ollie - 1.8.5.0-1Jeffrey C. Ollie - 1.8.5-0.2Jeffrey C. Ollie - 1.8.5-0.1.rc1Jeffrey C. Ollie - 1.8.5-0.1.rc1Jeffrey C. Ollie - 1.8.4.4-2Jeffrey C. Ollie - 1.8.4.4-1Jeffrey C. Ollie - 1.8.4.3-3Jeffrey C. Ollie - 1.8.4.3-2Jeffrey C. Ollie - 1.8.4.3-1Jeffrey C. Ollie - 1.8.4.2-2Marcela Mašláňová - 1.8.4.2-1.2Marcela Mašláňová - 1.8.4.2-1.1Jeffrey C. Ollie - 1.8.4.2-1:Jeffrey C. Ollie - 1.8.3.3-1Jeffrey C. Ollie - 1.8.3.2-2Jeffrey C. Ollie - 1.8.3.2-1Jeffrey C. Ollie - 1.8.3.1-1 - 1.8.3-1 - 1.8.3-0.7.rc3Jeffrey C. Ollie - 1.8.3-0.6.rc2Jeffrey C. Ollie - 1.8.3-0.5.rc2Jeffrey C. Ollie - 1.8.3-0.4.rc2Fedora Release Engineering - 1.8.3-0.3.rc2Jeffrey C. Ollie - 1.8.3-0.2.rc2Jeffrey C. Ollie - 1.8.3-0.1.rc1Jeffrey C. Ollie - 1.8.2.3-1Jeffrey C. Ollie - 1.8.2.2-2Jeffrey C. Ollie - 1.8.2.2-1Jeffrey C. Ollie - 1.8.2.1-1Jeffrey C. Ollie - 1.8.2-1Jeffrey C. Ollie - 1.8.1.1-1Jeffrey C. Ollie - 1.8.1-1Dennis Gilmore - 1.8.0-6Dennis Gilmore - 1.8.0-5Dennis Gilmore - 1.8.0-4Jeffrey C. Ollie - 1.8.0-3Jeffrey C. Ollie - 1.8.0-2Jeffrey C. Ollie - 1.8.0-1Jeffrey C. Ollie - 1.8.0-0.8.rc5:Jeffrey C. Ollie - 1.8.0-0.7.rc3Jeffrey C. Ollie - 1.8.0-0.6.rc2Jeffrey C. Ollie - 1.8.0-0.5.beta5Jeffrey C. Ollie - 1.8.0-0.4.beta4Jeffrey C. Ollie - 1.8.0-0.3.beta3Jeffrey C. Ollie - 1.8.0-0.2.beta2Jeffrey C. Ollie - 1.8.0-0.1.beta2Jeffrey C. Ollie - 1.6.2.10-1Jeffrey C. Ollie - 1.6.2.8-0.3.rc1Marcela Maslanova - 1.6.2.8-0.2.rc1Jeffrey C. Ollie - 1.6.2.7-1Jeffrey C. Ollie - 1.6.2.7-0.2.rc3Jeffrey C. Ollie - 1.6.2.7-0.1.rc2Jeffrey C. Ollie - 1.6.2.6-1Jeffrey C. Ollie - 1.6.2.6-0.1.rc2Jeffrey C. Ollie - 1.6.2.5-2Jeffrey C. Ollie - 1.6.2.5-1Jeffrey C. Ollie - 1.6.2.4-1Jeffrey C. Ollie - 1.6.2.2-1Jeffrey C. Ollie - 1.6.2.1-1Jeffrey C. Ollie - 1.6.2.1-0.1.rc1Jeffrey C. Ollie - 1.6.2.0-1Jeffrey C. Ollie - 1.6.2.0-0.16.rc8Jeffrey C. Ollie - 1.6.2.0-0.15.rc7Jeffrey C. Ollie - 1.6.2.0-0.14.rc6Jeffrey C. Ollie - 1.6.2.0-0.13.rc6Jeffrey C. Ollie - 1.6.2.0-0.12.rc6Jeffrey C. Ollie - 1.6.2.0-0.11.rc5Jeffrey C. Ollie - 1.6.2.0-0.10.rc4Jeffrey C. Ollie - 1.6.2.0-0.9.rc3Jeffrey C. Ollie - 1.6.2.0-0.8.rc3Jeffrey C. Ollie - 1.6.2.0-0.7.rc3Jeffrey C. Ollie - 1.6.2.0-0.6.rc3Jeffrey C. Ollie - 1.6.2.0-0.5.rc3Jeffrey C. Ollie - 1.6.2.0-0.4.rc3Jeffrey C. Ollie - 1.6.2.0-0.3.rc2Jeffrey C. Ollie - 1.6.2.0-0.2.rc2Jeffrey C. Ollie - 1.6.2.0-0.1.rc2Jeffrey C. Ollie - 1.6.1.6-2Jeffrey C. Ollie - 1.6.1.6-1Jeffrey C. Ollie - 1.6.1-0.26.rc1Tomas Mraz - 1.6.1-0.25.rc1Fedora Release Engineering - 1.6.1-0.24.rc1Jeffrey C. Ollie - 1.6.1-0.23.rc1Fedora Release Engineering - 1.6.1-0.22.rc1Jeffrey C. Ollie - 1.6.1-0.21.rc1Tomas Mraz - 1.6.1-0.13.beta4Jeffrey C. Ollie - 1.6.1-0.12.beta4Jeffrey C. Ollie - 1.6.1-0.10.beta4Jeffrey C. Ollie - 1.6.1-0.9.beta4Jeffrey C. Ollie - 1.6.1-0.8.beta4Jeffrey C. Ollie - 1.6.1-0.7.beta3Alex Lancaster - 1.6.1-0.6.beta2Jeffrey C. Ollie - 1.6.1-0.5.beta2Jeffrey C. Ollie - 1.6.1-0.4.beta2Jeffrey C. Ollie - 1.6.1-0.3.beta2Jeffrey C. Ollie - 1.6.1-0.2.beta2Jeffrey C. Ollie - 1.6.0.1-3Jeffrey C. Ollie - 1.6.0.1-2Jeffrey C. Ollie - 1.6.0-1- Bastien Nocera - 1.6.0-0.22.beta9Jeffrey C. Ollie - 1.6.0-0.21.beta9Jeffrey C. Ollie - 1.6.0-0.20.beta9Jeffrey C. Ollie - 1.6.0-0.19.beta9Jeffrey C. Ollie - 1.6.0-0.18.beta9Jeffrey C. Ollie - 1.6.0-0.17.beta9Jeffrey C. Ollie - 1.6.0-0.16.beta9Jeffrey C. Ollie - 1.6.0-0.15.beta9Jeffrey C. Ollie - 1.6.0-0.14.beta9Jeffrey C. Ollie - 1.6.0-0.13.beta8Jeffrey C. Ollie - 1.6.0-0.12.beta7.1Jeffrey C. Ollie - 1.6.0-0.11.beta7.1Jeffrey C. Ollie - 1.6.0-0.10.beta7Jeffrey C. Ollie - 1.6.0-0.9.beta6Jeffrey C. Ollie - 1.6.0-0.8.beta6Jeffrey C. Ollie - 1.6.0-0.6.beta6Tom "spot" Callaway - 1.6.0-0.5.beta5Jeffrey C. Ollie - 1.6.0-0.4.beta5Jeffrey C. Ollie - 1.6.0-0.3.beta4Jeffrey C. Ollie - 1.6.0-0.2.beta4Jeffrey C. Ollie - 1.6.0-0.1.beta4Jeffrey C. Ollie - 1.4.18-1Jeffrey C. Ollie - 1.4.17-1Jeffrey C. Ollie - 1.4.16.2-1Jeffrey C. Ollie - 1.4.16.1-2Jeffrey C. Ollie - 1.4.16.1-1Jeffrey C. Ollie - 1.4.16-2Jeffrey C. Ollie - 1.4.16-1Jeffrey C. Ollie - 1.4.15-7Jeffrey C. Ollie - 1.4.15-6Jeffrey C. Ollie - 1.4.15-5Jeffrey C. Ollie - 1.4.15-4Jeffrey C. Ollie - 1.4.15-3Jeffrey C. Ollie - 1.4.15-2Jeffrey C. Ollie - 1.4.15-1Jeffrey C. Ollie - 1.4.14-2Jeffrey C. Ollie - 1.4.14-1Jeffrey C. Ollie - 1.4.13-7Jeffrey C. Ollie - 1.4.13-6Jeffrey C. Ollie - 1.4.13-1Jeffrey C. Ollie - 1.4.12.1-1Jeffrey C. Ollie - 1.4.11-1Jeffrey C. Ollie - 1.4.10.1-1Jeffrey C. Ollie - 1.4.10-1Jeffrey C. Ollie - 1.4.9-7Jeffrey C. Ollie - 1.4.9-6Jeffrey C. Ollie - 1.4.9-5Jeffrey C. Ollie - 1.4.9-4Jeffrey C. Ollie - 1.4.9-3Jeffrey C. Ollie - 1.4.9-2Jeffrey C. Ollie - 1.4.9-1Jeffrey C. Ollie - 1.4.8-1Jeffrey C. Ollie - 1.4.7.1-1Jeffrey C. Ollie - 1.4.7-1Jeffrey C. Ollie - 1.4.6-4Jeffrey C. Ollie - 1.4.6-3Jeffrey C. Ollie - 1.4.6-2Jeffrey C. Ollie - 1.4.6-1Jeffrey C. Ollie - 1.4.5-10Jeffrey C. Ollie - 1.4.5-9Jeffrey C. Ollie - 1.4.5-8Jeffrey C. Ollie - 1.4.5-7Jeffrey C. Ollie - 1.4.5-6Jeffrey C. Ollie - 1.4.5-5Jeffrey C. Ollie - 1.4.5-4Jeffrey C. Ollie - 1.4.5-3Jeffrey C. Ollie - 1.4.5-1Jeffrey C. Ollie - 1.4.4-2Jeffrey C. Ollie - 1.4.4-1Jeffrey C. Ollie - 1.4.2-1Jeffrey C. Ollie - 1.4.1-2Jeffrey C. Ollie - 1.4.1-1Jeffrey C. Ollie - 1.4.0-6.beta4Jeffrey C. Ollie - 1.4.0-5.beta3Jeffrey C. Ollie - 1.4.0-4.beta3Jeffrey C. Ollie - 1.4.0-3.beta3Jeffrey C. Ollie - 1.4.0-2.beta3Jeffrey C. Ollie - 1.4.0-1.beta3Jeffrey C. Ollie - 1.4.0-0.beta2Jeffrey C. Ollie - 1.2.10-1Jeffrey C. Ollie - 1.2.9.1Jeffrey C. Ollie - 1.2.8Jeffrey C. Ollie - 1.2.7.1-6Jeffrey C. Ollie - 1.2.7.1-5Jeffrey C. Ollie - 1.2.7.1-4Jeffrey C. Ollie - 1.2.7.1-3Jeffrey C. Ollie - 1.2.7.1-2Jeffrey C. Ollie - 1.2.7-1Jeffrey C. Ollie - 1.2.6-3Jeffrey C. Ollie - 1.2.6-2Jeffrey C. Ollie - 1.2.6-1Jeffrey C. Ollie - 1.2.5-1Jeffrey C. Ollie - 1.2.4-4Jeffrey C. Ollie - 1.2.4-3Jeffrey C. Ollie - 1.2.4-2Jeffrey C. Ollie - 1.2.4-1Jeffrey C. Ollie - 1.2.3-4Jeffrey C. Ollie - 1.2.3-3Jeffrey C. Ollie - 1.2.3-2Jeffrey C. Ollie - 1.2.3-1- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild- Update to upstream 18.12.1 release.- Update to upstream 18.11.2 release.- Update to upstream 18.10.1 release.- Update to upstream 18.9.0 release.- Update to upstream 18.8.0 release.- Update to upstream 18.7.1 release.- Update to upstream 18.6.0 release.- Update to upstream 18.5.1 release.- Fix build (#1977579)- Perl 5.36 rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild- Rebuilt with OpenSSL 3.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild- Perl 5.34 rebuild- Update to upstream 18.4.0 release for bug fixes- Update to upstream 18.3.0 release for security updates and bug fixes- Update to upstream 18.2.1 release for security updates, related to: - AST-2021-001/CVE-2020-35776: Remote crash in res_pjsip_diversion - AST-2021-002/CVE-2021-26717: Remote crash possible when negotiating T.38 - AST-2021-003/CVE-2021-26712: Remote attacker could prematurely tear down SRTP calls - AST-2021-004/CVE-2021-26714: An unsuspecting user could crash Asterisk with multiple hold/unhold requests - AST-2021-005/CVE-2021-26906: Remote Crash Vulnerability in PJSIP channel driver- rebuild for libpq ABI fix rhbz#1908268- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild- Update to upstream 18.2.0 release for security fixes, bug fixes, and features- Update to upstream 18.1.0 release for bug fixes and features- Add dependency on sox- Update to 18.0.1 release for AST-2020-001 and AST-2020-002 security fixes- Update to upstream 18.0.0 release for new features- Rebuilt for new net-snmp release- Update to upstream 17.7.0 release- Rebuilt for new net-snmp release- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild- Perl 5.32 rebuild - Add missing source files- Update to upststream 7.5.0-rc1 release for testing- app_page no longer depends on app_meetme- Update to upstream 7.4.0 release for bug fixes- Update to upstream 7.4.0-rc2- Update to upstream 7.4.0 RC 1- Update to upstream 7.3.0 release for bug fixes- Update to upstream 7.2.0 release for bug fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild- rebuild for libsrtp2- Update to upstream 17.1.0 release for security and bug fixes- Update to upstream 17.1.0 pre-release for security and bug fixes- Update to upstream 17.0.1 release for AST-2019-006, AST-2019-007, AST-2019-008 security updates- Move from python2 to python3- Update to upstream 17.0.0 release for new features- Update to upstream 16.6.1 for bug fixes - Work on building in EPEL-7 and EPEL-8- Update to upstream 16.6.0 for security and bug fixes - Update to using bundled pjproject release 2.9- Update for upstream security release 16.5.1, with AST-2019-004 and AST-2019-005- Update to upstream 16.5.0 release for security and bug fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild- Update to upstream 16.4.1 release for security updates AST-2019-002 and AST-2019-003 related to remote crash vulnerabilities- Perl 5.30 rebuild- Update to upstream 16.4.0 release for bug fixes- Update to upstream 16.2.1 release for security / CVE-2019-7251 / AST-2019-001- Update to upstream 16.2.0 release for bug fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild- Rebuilt for libcrypt.so.2 (#1666033)- Add patch to explicitly use python2 shebangs- Update to upstream 16.1.0 security release- Update to upstream 16.0.1 security release- Update to upstream 16.0.0 release- Update to upstream 15.5.0 release for security and bug fixes- Perl 5.28 rebuild- Update to upstream 15.4.1 release for AST-2018-007 and AST-2018-008 security issues- Update to upstream 15.4.0 release- Update to upstream 15.3.0 release- Update asterisk.service to wait for the network to come up- Update to upstream 15.2.2 release for security updates - This update addresses security alerts AST-2018-001 through AST-2018-006 - Upstream changelog at https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.2.2- Verify GPG signatures on source packages- Add missing BuildRequires on gcc/gcc-c++- Update to upstream 15.2.1 release- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Update requirements for systemd- Rebuilt for switch to libxcrypt- Update to upstream 15.2.0 release - Upstream changelog at http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-15.2.0- Update to upstream 15.1.5 release for AST-2017-014/CVE-2017-17850 security issue- Require mariadb-connector-c-devel, see RHBZ#1488483- Update to upstream 15.1.4 release for AST-2017-012 security issue- Update to upstream 15.1.3 release for security issue AST-2017-013- Update to upstream 15.1.2 release- Update to upstream 15.1.1 release for AST-2017-09, AST-2017-010, and AST-2017-011 security updates- Update to upstream 15.1.0 release- Update to upstream 15.0.0 release- Update to upstream 14.6.2 release- Re-enable corosync, see RHBZ#1478089- Add dependency on unbound-devel for res_resolver_unbound- Disable corosync modules until corosync works in ppc64le again- Fix MySQL header path (due to change in mariadb-devel patckage)- Update to upstream 14.6.1 release - Solves AST-2017-005, AST-2017-006, and AST-2017-007 security issues- Add perl to BuildRequires- Update to upstream 14.6.0 release - Re-enable radius sub-packages- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Excludearch s390x- Update to upstream 14.5.0 release- Perl 5.26 rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Update to upstream 13.11.2 bug-fix release- Stop building the -radius subpackage, due to orphaned freeradius-client dependency - Update to upstream 13.11.1 security release for AST-2016-006 and AST-2016-007- Perl 5.24 rebuild- Update to upstream 13.9.1 release - Use bootstrap.sh instead of calling autoconf tools manually - Fix up shifting pjproject submodules - Fix up requires on speexdsp-devel for EPEL7 (RHBZ#1310444)- Fix alembic requirement- Do not use -m32/-m64 on MIPS- Update to upstream release 13.7.2 to fix ASTERISK-25702- Create sub-package for alembic scripts- Update to upstream 13.7.1 release for security fixes - Resolves AST-2016-001: BEAST vulnerability in HTTP server - Resolves AST-2016-002: File descriptor exhaustion in chan_sip - Resolves AST-2016-003: Remote crash vulnerability receiving UDPTL FAX data - Full changelog at http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.7.1 - Also build the 'radius' sub-package against freeradius-client-devel, as the radiusclient-ng project is dead- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Remove %defattr macro invocations, as they are no longer needed- Rebuild for libical 2.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Perl 5.22 rebuild- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28, 11.6, and 13.1 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28.cert-5, 1.8.32.3, 11.6-cert11, - 11.17.1, 12.8.2, 13.1-cert2, and 13.3.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerability: - - * AST-2015-003: TLS Certificate Common name NULL byte exploit - - When Asterisk registers to a SIP TLS device and and verifies the server, - Asterisk will accept signed certificates that match a common name other than - the one Asterisk is expecting if the signed certificate has a common name - containing a null byte after the portion of the common name that Asterisk - expected. This potentially allows for a man in the middle attack. - - For more information about the details of this vulnerability, please read - security advisory AST-2015-003, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert5 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.3 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert11 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.17.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.8.2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-13.1-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.3.2 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2015-003.pdf- The Asterisk Development Team has announced the release of Asterisk 13.3.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 13.3.1 resolves an issue reported by the - community and would have not been possible without your participation. - Thank you! - - The following is the issue resolved in this release: - - * --- pjsip: resolve compatibility problem with ast_sip_session - (Closes issue ASTERISK-24941. Reported by Matt Jordan) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-13.3.1- The Asterisk Development Team has announced the release of Asterisk 13.3.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 13.3.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - New Features made in this release: - ----------------------------------- - * ASTERISK-24703 - ARI: Add the ability to "transfer" (redirect) a - channel (Reported by Matt Jordan) - * ASTERISK-17899 - Handle crypto lifetime in SDES-SRTP negotiation - (Reported by Dwayne Hubbard) - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24616 - Crash in res_format_attr_h264 due to invalid - string copy (Reported by Yura Kocyuba) - * ASTERISK-24748 - res_pjsip: If wizards explicitly configured in - sorcery.conf false ERROR messages may occur (Reported by Joshua - Colp) - * ASTERISK-24769 - res_pjsip_sdp_rtp: Local ICE candidates leaked - (Reported by Matt Jordan) - * ASTERISK-24742 - [patch] Fix ast_odbc_find_table function in - res_odbc (Reported by ibercom) - * ASTERISK-24479 - Enable REF_DEBUG for module references - (Reported by Corey Farrell) - * ASTERISK-24701 - Stasis: Write timeout on WebSocket fails to - fully disconnect underlying socket, leading to events being - dropped with no additional information (Reported by Matt Jordan) - * ASTERISK-24772 - ODBC error in realtime sippeers when device - unregisters under MariaDB (Reported by Richard Miller) - * ASTERISK-24752 - Crash in bridge_manager_service_req when bridge - is destroyed by ARI during shutdown (Reported by Richard - Mudgett) - * ASTERISK-24741 - dtls_handler causes Asterisk to crash (Reported - by Zane Conkle) - * ASTERISK-24015 - app_transfer fails with PJSIP channels - (Reported by Private Name) - * ASTERISK-24727 - PJSIP: Crash experienced during multi-Asterisk - transfer scenario. (Reported by Mark Michelson) - * ASTERISK-24771 - ${CHANNEL(pjsip)} - segfault (Reported by - Niklas Larsson) - * ASTERISK-24716 - Improve pjsip log messages for presence - subscription failure (Reported by Rusty Newton) - * ASTERISK-24612 - res_pjsip: No information if a required sorcery - wizard is not loaded (Reported by Joshua Colp) - * ASTERISK-24768 - res_timing_pthread: file descriptor leak - (Reported by Matthias Urlichs) - * ASTERISK-24685 - "pjsip show version" CLI command (Reported by - Joshua Colp) - * ASTERISK-24632 - install_prereq script installs pjproject - without IPv6 support (Reported by Rusty Newton) - * ASTERISK-24085 - Documentation - We should remove or further - document the 'contact' section in pjsip.conf (Reported by Rusty - Newton) - * ASTERISK-24791 - Crash in ast_rtcp_write_report (Reported by - JoshE) - * ASTERISK-24700 - CRASH: NULL channel is being passed to - ast_bridge_transfer_attended() (Reported by Zane Conkle) - * ASTERISK-24451 - chan_iax2: reference leak in sched_delay_remove - (Reported by Corey Farrell) - * ASTERISK-24799 - [patch] make fails with undefined reference to - SSLv3_client_method (Reported by Alexander Traud) - * ASTERISK-22670 - Asterisk crashes when processing ISDN AoC - Events (Reported by klaus3000) - * ASTERISK-24689 - Segfault on hangup after outgoing PRI-Euroisdn - call (Reported by Marcel Manz) - * ASTERISK-24740 - [patch]Segmentation fault on aoc-e event - (Reported by Panos Gkikakis) - * ASTERISK-24787 - [patch] - Microsoft exchange incompatibility - for playing back messages stored in IMAP - play_message: No - origtime (Reported by Graham Barnett) - * ASTERISK-24814 - asterisk/lock.h: Fix syntax errors for non-gcc - OSX with 64 bit integers (Reported by Corey Farrell) - * ASTERISK-24796 - Codecs and bucket schema's prevent module - unload (Reported by Corey Farrell) - * ASTERISK-24724 - 'httpstatus' Web Page Produces Incomplete HTML - (Reported by Ashley Sanders) - * ASTERISK-24499 - Need more explicit debug when PJSIP dialstring - is invalid (Reported by Rusty Newton) - * ASTERISK-24785 - 'Expires' header missing from 200 OK on - REGISTER (Reported by Ross Beer) - * ASTERISK-24677 - ARI GET variable on channel provides unhelpful - response on non-existent variable (Reported by Joshua Colp) - * ASTERISK-24797 - bridge_softmix: G.729 codec license held - (Reported by Kevin Harwell) - * ASTERISK-24812 - ARI: Creating channels through /channels - resource always uses SLIN, which results in unneeded transcoding - (Reported by Matt Jordan) - * ASTERISK-24800 - Crash in __sip_reliable_xmit due to invalid - thread ID being passed to pthread_kill (Reported by JoshE) - * ASTERISK-17721 - Incoming SRTP calls that specify a key lifetime - fail (Reported by Terry Wilson) - * ASTERISK-23214 - chan_sip WARNING message 'We are requesting - SRTP for audio, but they responded without it' is ambiguous and - wrong in some cases (Reported by Rusty Newton) - * ASTERISK-15434 - [patch] When ast_pbx_start failed, both an - error response and BYE are sent to the caller (Reported by - Makoto Dei) - * ASTERISK-18105 - most of asterisk modules are unbuildable in - cygwin environment (Reported by feyfre) - * ASTERISK-24828 - Fix Frame Leaks (Reported by Kevin Harwell) - * ASTERISK-24751 - Integer values in json payload to ARI cause - asterisk to crash (Reported by jeffrey putnam) - * ASTERISK-24838 - chan_sip: Locking inversion occurs when - building a peer causes a peer poke during request handling - (Reported by Richard Mudgett) - * ASTERISK-24825 - Caller ID not recognized using - Centrex/Distinctive dialing (Reported by Richard Mudgett) - * ASTERISK-24830 - res_rtp_asterisk.c checks USE_PJPROJECT not - HAVE_PJPROJECT (Reported by Stefan Engström) - * ASTERISK-24840 - res_pjsip: conflicting endpoint identifiers - (Reported by Kevin Harwell) - * ASTERISK-24755 - Asterisk sends unexpected early BYE to - transferrer during attended transfer when using a Stasis bridge - (Reported by John Bigelow) - * ASTERISK-24739 - [patch] - Out of files -- call fails -- - numerous files with inodes from under /usr/share/zoneinfo, - mostly posixrules (Reported by Ed Hynan) - * ASTERISK-23390 - NewExten Event with application AGI shows up - before and after AGI runs (Reported by Benjamin Keith Ford) - * ASTERISK-24786 - [patch] - Asterisk terminates when playing a - voicemail stored in LDAP (Reported by Graham Barnett) - * ASTERISK-24808 - res_config_odbc: Improper escaping of - backslashes occurs with MySQL (Reported by Javier Acosta) - * ASTERISK-24807 - Missing mandatory field Max-Forwards (Reported - by Anatoli) - * ASTERISK-20850 - [patch]Nested functions aren't portable. - Adapting RAII_VAR to use clang/llvm blocks to get the - same/similar functionality. (Reported by Diederik de Groot) - * ASTERISK-24872 - [patch] AMI PJSIPShowEndpoint closes AMI - connection on error (Reported by Dmitriy Serov) - * ASTERISK-19470 - Documentation on app_amd is incorrect (Reported - by Frank DiGennaro) - * ASTERISK-21038 - Bad command completion of "core set debug - channel" (Reported by Richard Kenner) - * ASTERISK-18708 - func_curl hangs channel under load (Reported by - Dave Cabot) - * ASTERISK-16779 - Cannot disallow unknown format '' (Reported by - Atis Lezdins) - * ASTERISK-24876 - Investigate reference leaks from - tests/channels/local/local_optimize_away (Reported by Corey - Farrell) - * ASTERISK-24882 - chan_sip: Improve usage of REF_DEBUG (Reported - by Corey Farrell) - * ASTERISK-24817 - init_logger_chain: unreachable code block - (Reported by Corey Farrell) - * ASTERISK-24880 - [patch]Compilation under OpenBSD (Reported by - snuffy) - * ASTERISK-24879 - [patch]Compilation fails due to 64bit time - under OpenBSD (Reported by snuffy) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24745 - [patch]Add no_answer to ARI hangup causes - (Reported by Ben Merrills) - * ASTERISK-24811 - asterisk-publication sorcery object does not - use realtime (Reported by Matt Hoskins) - * ASTERISK-24790 - Reduce spurious noise in logs from voicemail - - Couldn't find mailbox %s in context (Reported by Graham Barnett) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-13.3.0- The Asterisk Development Team has announced the release of Asterisk 13.2.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 13.2.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24342 - PJSIP: Qualifying endpoints attempts to do them - all at the same time. (Reported by Richard Mudgett) - * ASTERISK-24514 - res_pjsip_outbound_registration: stack overflow - when using non-default sorcery wizard (Reported by Kevin - Harwell) - * ASTERISK-24472 - Asterisk Crash in OpenSSL when calling over WSS - from JSSIP (Reported by Badalian Vyacheslav) - * ASTERISK-24607 - res_pjsip_session: re-INVITE with declined - media streams results in 488 (Reported by Matt Jordan) - * ASTERISK-24563 - Direct Media calls within private network - sometimes get one way audio (Reported by Kevin Harwell) - * ASTERISK-24604 - res_rtp_asterisk: Crash during restart due to - race condition in accessing codec in stored ast_frame and codec - core (Reported by Matt Jordan) - * ASTERISK-24614 - Deadlock when DEBUG_THREADS compiler flag - enabled (Reported by Richard Mudgett) - * ASTERISK-24449 - Reinvite for T.38 UDPTL fails if SRTP is - enabled (Reported by Andreas Steinmetz) - * ASTERISK-24619 - [patch]Gcc 4.10 fixes in r413589 (1.8) wrongly - casts char to unsigned int (Reported by Walter Doekes) - * ASTERISK-24536 - AMI redirect with PJSIP fails to move extra - channel (Reported by Niklas Larsson) - * ASTERISK-24459 - bridge_native_rtp: Native RTP bridging is - chosen for RTP compatible channels when the DTMF mode is not - compatible (Reported by Yaniv Simhi) - * ASTERISK-24337 - Spammy DEBUG message needs to be at a higher - level - 'Remote address is null, most likely RTP has been - stopped' (Reported by Rusty Newton) - * ASTERISK-24513 - Local channel apparently leaked in off-nominal - DTMF attended transfer (Reported by Mark Michelson) - * ASTERISK-23733 - 'reload acl' fails if acl.conf is not present - on startup (Reported by Richard Kenner) - * ASTERISK-24628 - [patch] chan_sip - CANCEL is sent to wrong - destination when 'sendrpid=yes' (in proxy environment) (Reported - by Karsten Wemheuer) - * ASTERISK-23841 - DTMF atxfer doesn't set CallerID for the recall - calls to the transferrer. (Reported by Richard Mudgett) - * ASTERISK-24376 - res_pjsip_refer: REFER request for remote - session attempts to direct channel to external_replaces - extension instead of context, without providing for the - Referred-To SIP URI (Reported by Matt Jordan) - * ASTERISK-24591 - Stasis() side of an ARI originated channel - cannot be Redirected (Reported by Kinsey Moore) - * ASTERISK-24049 - Asterisk Manager Interface: A number of list - type responses aren't using astman_send_listack (Reported by - Jonathan Rose) - * ASTERISK-24637 - Channel re-enters Stasis() when it should not - (Reported by John Bigelow) - * ASTERISK-24474 - sip_to_pjsip.py lacks documentation and does - not function (Reported by John Kiniston) - * ASTERISK-24672 - [PATCH] Memory leak in func_curl CURLOPT - (Reported by Kristian Høgh) - * ASTERISK-20744 - [patch] Security event logging does not work - over syslog (Reported by Michael Keuter) - * ASTERISK-24665 - Configure check required for - pjsip_get_dest_info() (Reported by Mark Michelson) - * ASTERISK-23850 - Park Application does not respect Return - Context Priority (Reported by Andrew Nagy) - * ASTERISK-23991 - [patch]asterisk.pc file contains a small error - in the CFlags returned (Reported by Diederik de Groot) - * ASTERISK-24655 - res_pjsip_outbound_publish: Hang on shutdown - while attempting to publish (Reported by Kevin Harwell) - * ASTERISK-24485 - res_pjsip cannot be unloaded or shutdown - (Reported by Corey Farrell) - * ASTERISK-24663 - [patch] Unnamed semaphore autoconf check fails - on cross compilation (Reported by abelbeck) - * ASTERISK-24624 - Transfer to invalid extension results in hung - channel. (Reported by Zane Conkle) - * ASTERISK-24615 - When Multiple Transports Exist in pjsip.conf, - Incorrect External Addresses is Used in SIP Packets When - Responding to INVITE (Reported by David Justl) - * ASTERISK-24288 - [patch] - ODBC usage with app_voicemail - - voicemail is not deleted after review, hangup (Reported by LEI - FU) - * ASTERISK-24048 - [patch] contrib/scripts/install_prereq selects - 32-bit packages on 64-bit hosts (Reported by Ben Klang) - * ASTERISK-24600 - Stuck IAX channels, Asterisk stops responding - to most traffic, potential deadlock (Reported by Jeff Collell) - * ASTERISK-24560 - Creating a named ARI bridge twice causes a - crash (Reported by Kinsey Moore) - * ASTERISK-24682 - app_dial: Multiple DialEnd events emitted when - MACRO_RESULT or GOSUB_RESULT are an unexpected value (Reported - by Matt Jordan) - * ASTERISK-24640 - Registration pending stays forever after sip - reload (Reported by Max Man) - * ASTERISK-24673 - outgoing sip registers cannot be removed or - modified without doing restart (or doing module unload - chan_sip.so) (Reported by Stefan Engström) - * ASTERISK-24709 - [patch] msg_create_from_file used by MixMonitor - m() option does not queue an MWI event (Reported by Gareth - Palmer) - * ASTERISK-24649 - Pushing of channel into bridge fails; Stasis - fails to get app name (Reported by John Bigelow) - * ASTERISK-24355 - [patch] chan_sip realtime uses case sensitive - column comparison for 'defaultuser' (Reported by - HZMI8gkCvPpom0tM) - * ASTERISK-24693 - Investigate and fix memory leaks in Asterisk - (Reported by Kevin Harwell) - * ASTERISK-24626 - Voicemail passwords not being stored in ARA - (Reported by Paddy Grice) - * ASTERISK-24539 - Compile fails on OSX because of sem_timedwait - in bridge_channel.c (Reported by George Joseph) - * ASTERISK-24544 - Compile fails on OSX Yosemite because of - incorrect detection of htonll and ntohll (Reported by George - Joseph) - * ASTERISK-24723 - confbridge: CLI command 'confbridge list XXXX' - no longer displays user menus (Reported by Matt Jordan) - * ASTERISK-24721 - manager: ModuleLoad action incorrectly reports - 'module not found' during a Reload operation (Reported by Matt - Jordan) - * ASTERISK-24719 - ConfBridge recording channels get stuck when - recording started/stopped more than once (Reported by Richard - Mudgett) - * ASTERISK-24715 - chan_sip: stale nonce causes failure (Reported - by Kevin Harwell) - * ASTERISK-24728 - tcptls: Bad file descriptor error when - reloading chan_sip (Reported by Kevin Harwell) - * ASTERISK-24729 - Outbound registration not occuring on new - registrations after reload. (Reported by Richard Mudgett) - * ASTERISK-24676 - Security Vulnerability: URL request injection - in libCURL (CVE-2014-8150) (Reported by Matt Jordan) - * ASTERISK-24666 - Security Vulnerability: RTP not closed after - sip call using unsupported codec (Reported by Y Ateya) - * ASTERISK-24711 - DTLS handshake broken with latest OpenSSL - versions (Reported by Jared Biel) - * ASTERISK-24646 - PJSIP changeset 4899 breaks TLS (Reported by - Stephan Eisvogel) - * ASTERISK-24736 - Memory Leak Fixes (Reported by Mark Michelson) - * ASTERISK-24635 - PJSIP outbound PUBLISH crashes when no response - is ever received (Reported by Marco Paland) - * ASTERISK-24737 - When agent not logged in, agent status shows - unavailable, queue status shows agent invalid (Reported by - Richard Mudgett) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24552 - ARI: Allow associating a channel as an - initiator of an Origination for record keeping purposes - (Reported by Matt Jordan) - * ASTERISK-24553 - ARI/AMI: Include language in standard channel - snapshot output (Reported by Matt Jordan) - * ASTERISK-24643 - res_pjsip: Add user=phone option (Reported by - Matt Jordan) - * ASTERISK-24644 - res_pjsip_keepalive: Add keepalive module for - connection-oriented transports. (Reported by Matt Jordan) - * ASTERISK-24412 - [patch]Incomplete channel originate/continue - handling with ARI (Reported by Nir Simionovich (GreenfieldTech - - Israel)) - * ASTERISK-24678 - [PATCH] Added atxfer* settings to - features.conf.sample (Reported by Niklas Larsson) - * ASTERISK-24575 - [patch]Make capath work for res_pjsip (Reported - by cloos) - * ASTERISK-24671 - Missing docs for the CDR AMI Event (Reported by - Dan Jenkins) - * ASTERISK-24316 - For httpd server, need option to define server - name for security purposes (Reported by Andrew Nagy) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-13.2.0- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28.cert-4, 1.8.32.2, 11.6-cert10, - 11.15.1, 12.8.1, and 13.1.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerabilities: - - * AST-2015-001: File descriptor leak when incompatible codecs are offered - - Asterisk may be configured to only allow specific audio or - video codecs to be used when communicating with a - particular endpoint. When an endpoint sends an SDP offer - that only lists codecs not allowed by Asterisk, the offer - is rejected. However, in this case, RTP ports that are - allocated in the process are not reclaimed. - - This issue only affects the PJSIP channel driver in - Asterisk. Users of the chan_sip channel driver are not - affected. - - * AST-2015-002: Mitigation for libcURL HTTP request injection vulnerability - - CVE-2014-8150 reported an HTTP request injection - vulnerability in libcURL. Asterisk uses libcURL in its - func_curl.so module (the CURL() dialplan function), as well - as its res_config_curl.so (cURL realtime backend) modules. - - Since Asterisk may be configured to allow for user-supplied - URLs to be passed to libcURL, it is possible that an - attacker could use Asterisk as an attack vector to inject - unauthorized HTTP requests if the version of libcURL - installed on the Asterisk server is affected by - CVE-2014-8150. - - For more information about the details of these vulnerabilities, please read - security advisory AST-2015-001 and AST-2015-002, which were released at the same - time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert4 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert10 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.15.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.8.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.1.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2015-001.pdf - * http://downloads.asterisk.org/pub/security/AST-2015-002.pdf- The Asterisk Development Team has announced the release of Asterisk 13.1.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 13.1.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - New Features made in this release: - ----------------------------------- - * ASTERISK-24554 - AMI/ARI: Generate events on connected line - changes (Reported by Matt Jordan) - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24436 - Missing header in res/res_srtp.c when compiling - against libsrtp-1.5.0 (Reported by Patrick Laimbock) - * ASTERISK-24455 - func_cdr: CDR_PROP leaks payload (Reported by - Corey Farrell) - * ASTERISK-24454 - app_queue: ao2_iterator not destroyed, causing - leak (Reported by Corey Farrell) - * ASTERISK-24430 - missing letter "p" in word response in - OriginateResponse event documentation (Reported by Dafi Ni) - * ASTERISK-24437 - Review implementation of ast_bridge_impart for - leaks and document proper usage (Reported by Scott Griepentrog) - * ASTERISK-24453 - manager: acl_change_sub leaks (Reported by - Corey Farrell) - * ASTERISK-24457 - res_fax: fax gateway frames leak (Reported by - Corey Farrell) - * ASTERISK-24458 - chan_phone fails to build on big endian systems - (Reported by Tzafrir Cohen) - * ASTERISK-21721 - SIP Failed to parse multiple Supported: headers - (Reported by Olle Johansson) - * ASTERISK-24304 - asterisk crashing randomly because of unistim - channel (Reported by dhanapathy sathya) - * ASTERISK-24190 - IMAP voicemail causes segfault (Reported by - Nick Adams) - * ASTERISK-24462 - res_pjsip: Stale qualify statistics after - disablementation (Reported by Kevin Harwell) - * ASTERISK-24465 - audiohooks list leaks reference to formats - (Reported by Corey Farrell) - * ASTERISK-24466 - app_queue: fix a couple leaks to struct - call_queue (Reported by Corey Farrell) - * ASTERISK-24432 - Install refcounter.py when REF_DEBUG is enabled - (Reported by Corey Farrell) - * ASTERISK-24411 - [patch] Status of outbound registration is not - changed upon unregistering. (Reported by John Bigelow) - * ASTERISK-24476 - main/app.c / app_voicemail: ast_writestream - leaks (Reported by Corey Farrell) - * ASTERISK-24480 - res_http_websockets: Module reference decrease - below zero (Reported by Corey Farrell) - * ASTERISK-24482 - func_talkdetect: Fix stasis message leak in - audiohook callback (Reported by Corey Farrell) - * ASTERISK-24487 - configuration: sections should be loadable as - template even when not marked (Reported by Scott Griepentrog) - * ASTERISK-20127 - [Regression] Config.c config_text_file_load() - unescapes semicolons ("\;" -> ";") turning them into comments - (corruption) on rewrite of a config file (Reported by George - Joseph) - * ASTERISK-24438 - res_pjsip_multihomed.so blocks Asterisk reload - when DNS settings invalid (Reported by Melissa Shepherd) - * ASTERISK-24307 - Unintentional memory retention in stringfields - (Reported by Etienne Lessard) - * ASTERISK-24491 - Memory leak in res_hep (Reported by Zane - Conkle) - * ASTERISK-24492 - main/file.c: ast_filestream sometimes causes - extra calls to ast_module_unref (Reported by Corey Farrell) - * ASTERISK-24447 - Bridge DTMF hooks: Audio doesn't pass when - waiting for more matching digits. (Reported by Richard Mudgett) - * ASTERISK-24257 - agent must dial acceptdtmf twice to bridge to - queue caller (Reported by Steve Pitts) - * ASTERISK-24504 - chan_console: Fix reference leaks to pvt - (Reported by Corey Farrell) - * ASTERISK-24250 - [patch] Voicemail with multi-recipients To: - header fix (Reported by abelbeck) - * ASTERISK-24468 - Incoming UCS2 encoded SMS truncated if SMS - length exceeds 50 (roughly) national symbols (Reported by - Dmitriy Bubnov) - * ASTERISK-24500 - Regression introduced in chan_mgcp by SVN - revision r227276 (Reported by Xavier Hienne) - * ASTERISK-24505 - manager: http connections leak references - (Reported by Corey Farrell) - * ASTERISK-24502 - Build fails when dev-mode, dont optimize and - coverage are enabled (Reported by Corey Farrell) - * ASTERISK-24444 - PBX: Crash when generating extension for - pattern matching hint (Reported by Leandro Dardini) - * ASTERISK-24489 - Crash: Asterisk crashes when converting RTCP - packet to JSON for res_hep_rtcp and report blocks are greater - than 1 (Reported by Gregory Malsack) - * ASTERISK-24498 - Segmentation fault in res_hep_rtcp on attended - transfer (Reported by Beppo Mazzucato) - * ASTERISK-24501 - ARI: Moving a channel between bridges followed - by a hangup can cause an ARI client to not receive an expected - ChannelLeftBridge event before StasisEnd (Reported by Matt - Jordan) - * ASTERISK-24336 - PJSIP timer_min_se value under 90 causes crash - (Reported by Leon Rowland) - * ASTERISK-23651 - Reloading some modules that are loaded already, - results in 'No such module' before a successful reload (Reported - by Rusty Newton) - * ASTERISK-24522 - ConfBridge: delay occurs between kicking all - endmarked users when last marked user leaves (Reported by Matt - Jordan) - * ASTERISK-15242 - transmit_refer leaks sip_refer structures - (Reported by David Woolley) - * ASTERISK-24508 - pjsip - REFER request from SNOM is rejected - with "400 bad request" - DEBUG shows "Received a REFER without a - parseable Refer-To" (Reported by Beppo Mazzucato) - * ASTERISK-24535 - stringfields: Fix regression from fix for - unintentional memory retention and another issue exposed by the - fix (Reported by Corey Farrell) - * ASTERISK-24471 - Crash - assert_fail in libc in - pjmedia_sdp_neg_negotiate from /usr/local/lib/libpjmedia.so.2 - (Reported by yaron nahum) - * ASTERISK-24528 - res_pjsip_refer: Sending INVITE with Replaces - in-dialog with invalid target causes crash (Reported by Joshua - Colp) - * ASTERISK-24531 - res_pjsip_acl: ACLs not applied on initial - module load (Reported by Matt Jordan) - * ASTERISK-24469 - Security Vulnerability: Mixed IPv4/IPv6 ACLs - allow blocked addresses through (Reported by Matt Jordan) - * ASTERISK-24542 - [patch]Failure showing codecs via 'core show - channeltype ' (Reported by snuffy) - * ASTERISK-24533 - 2 threads created per chan_sip entry (Reported - by xrobau) - * ASTERISK-24516 - [patch]Asterisk segfaults when playing back - voicemail under high concurrency with an IMAP backend (Reported - by David Duncan Ross Palmer) - * ASTERISK-24572 - [patch]App_meetme is loaded without its - defaults when the configuration file is missing (Reported by - Nuno Borges) - * ASTERISK-24573 - [patch]Out of sync conversation recording when - divided in multiple recordings (Reported by Nuno Borges) - * ASTERISK-24537 - Stasis: StasisStart/StasisEnd events are not - reliably transmitted during transfers (Reported by Matt Jordan) - * ASTERISK-24556 - Asterisk 13 core dumps when calling from pjsip - extension to another pjsip extension (Reported by Abhay Gupta) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24279 - Documentation: Clarify the behaviour of the CDR - property 'unanswered' (Reported by Matt Jordan) - * ASTERISK-24283 - [patch]Microseconds precision in the eventtime - column in the cel_odbc module (Reported by Etienne Lessard) - * ASTERISK-24530 - [patch] app_record stripping 1/4 second from - recordings (Reported by Ben Smithurst) - * ASTERISK-24577 - Speed up loopback switches by avoiding unneeded - lookups (Reported by Birger "WIMPy" Harzenetter) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-13.1.0- Add speexdsp as build dep as speex_echo.h has moved - rhbz 1181021- update for lua 5.3- The Asterisk Development Team has announced security releases for Certified - Asterisk 11.6 and Asterisk 11, 12, and 13. The available security releases are - released as versions 11.6-cert9, 11.14.2, 12.7.2, and 13.0.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerability: - - * AST-2014-019: Remote Crash Vulnerability in WebSocket Server - - When handling a WebSocket frame the res_http_websocket module dynamically - changes the size of the memory used to allow the provided payload to fit. If a - payload length of zero was received the code would incorrectly attempt to - resize to zero. This operation would succeed and end up freeing the memory but - be treated as a failure. When the session was subsequently torn down this - memory would get freed yet again causing a crash. - - For more information about the details of this vulnerability, please read - security advisory AST-2014-019, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert9 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.14.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.7.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.2 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-019.pdf- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert3, 11.6-cert8, 1.8.32.1, - 11.14.1, 12.7.1, and 13.0.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerabilities: - - * AST-2014-012: Unauthorized access in the presence of ACLs with mixed IP - address families - - Many modules in Asterisk that service incoming IP traffic have ACL options - ("permit" and "deny") that can be used to whitelist or blacklist address - ranges. A bug has been discovered where the address family of incoming - packets is only compared to the IP address family of the first entry in the - list of access control rules. If the source IP address for an incoming - packet is not of the same address as the first ACL entry, that packet - bypasses all ACL rules. - - * AST-2014-018: Permission Escalation through DB dialplan function - - The DB dialplan function when executed from an external protocol, such as AMI, - could result in a privilege escalation. Users with a lower class authorization - in AMI can access the internal Asterisk database without the required SYSTEM - class authorization. - - In addition, the release of 11.6-cert8 and 11.14.1 resolves the following - security vulnerability: - - * AST-2014-014: High call load with ConfBridge can result in resource exhaustion - - The ConfBridge application uses an internal bridging API to implement - conference bridges. This internal API uses a state model for channels within - the conference bridge and transitions between states as different things - occur. Unload load it is possible for some state transitions to be delayed - causing the channel to transition from being hung up to waiting for media. As - the channel has been hung up remotely no further media will arrive and the - channel will stay within ConfBridge indefinitely. - - In addition, the release of 11.6-cert8, 11.14.1, 12.7.1, and 13.0.1 resolves - the following security vulnerability: - - * AST-2014-017: Permission Escalation via ConfBridge dialplan function and - AMI ConfbridgeStartRecord Action - - The CONFBRIDGE dialplan function when executed from an external protocol (such - as AMI) can result in a privilege escalation as certain options within that - function can affect the underlying system. Additionally, the AMI - ConfbridgeStartRecord action has options that would allow modification of the - underlying system, and does not require SYSTEM class authorization in AMI. - - Finally, the release of 12.7.1 and 13.0.1 resolves the following security - vulnerabilities: - - * AST-2014-013: Unauthorized access in the presence of ACLs in the PJSIP stack - - The Asterisk module res_pjsip provides the ability to configure ACLs that may - be used to reject SIP requests from various hosts. However, the module - currently fails to create and apply the ACLs defined in its configuration - file on initial module load. - - * AST-2014-015: Remote crash vulnerability in PJSIP channel driver - - The chan_pjsip channel driver uses a queue approach for relating to SIP - sessions. There exists a race condition where actions may be queued to answer - a session or send ringing after a SIP session has been terminated using a - CANCEL request. The code will incorrectly assume that the SIP session is still - active and attempt to send the SIP response. The PJSIP library does not - expect the SIP session to be in the disconnected state when sending the - response and asserts. - - * AST-2014-016: Remote crash vulnerability in PJSIP channel driver - - When handling an INVITE with Replaces message the res_pjsip_refer module - incorrectly assumes that it will be operating on a channel that has just been - created. If the INVITE with Replaces message is sent in-dialog after a session - has been established this assumption will be incorrect. The res_pjsip_refer - module will then hang up a channel that is actually owned by another thread. - When this other thread attempts to use the just hung up channel it will end up - using a freed channel which will likely result in a crash. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-012, AST-2014-013, AST-2014-014, AST-2014-015, - AST-2014-016, AST-2014-017, and AST-2014-018, which were released at the same - time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert3 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert8 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.14.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.7.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-012.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-013.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-014.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-015.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-016.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-017.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-018.pdf- The Asterisk Development Team is pleased to announce the release of - Asterisk 13.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - Asterisk 13 is the next major release series of Asterisk. It is a Long Term - Support (LTS) release, similar to Asterisk 11. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 13, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+13 - - A short list of new features includes: - - * Asterisk security events are now provided via AMI, allowing end users to - monitor their Asterisk system in real time for security related issues. - - * Both AMI and ARI now allow external systems to control the state of a mailbox. - Using AMI actions or ARI resources, external systems can programmatically - trigger Message Waiting Indicators (MWI) on subscribed phones. This is of - particular use to those who want to build their own VoiceMail application - using ARI. - - * ARI now supports the reception/transmission of out of call text messages using - any supported channel driver/protocol stack through ARI. Users receive out of - call text messages as JSON events over the ARI websocket connection, and can - send out of call text messages using HTTP requests. - - * The PJSIP stack now supports RFC 4662 Resource Lists, allowing Asterisk to act - as a Resource List Server. This includes defining lists of presence state, - mailbox state, or lists of presence state/mailbox state; managing - subscriptions to lists; and batched delivery of NOTIFY requests to - subscribers. - - * The PJSIP stack can now be used as a means of distributing device state or - mailbox state via PUBLISH requests to other Asterisk instances. This is - analogous to Asterisk's clustering support using XMPP or Corosync; unlike - existing clustering mechanisms, using the PJSIP stack to perform the - distribution of state does not rely on another daemon or server to perform the - work. - - And much more! - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+13+Documentation - - A full list of all new features can also be found in the CHANGES file: - - http://svnview.digium.com/svn/asterisk/branches/13/CHANGES - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.0- rebuild for new libsrtp- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert2, 11.6-cert7, 1.8.31.1, - 11.13.1, 12.6.1, and 13.0.0-beta3. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerability: - - * AST-2014-011: Asterisk Susceptibility to POODLE Vulnerability - - Asterisk is susceptible to the POODLE vulnerability in two ways: - 1) The res_jabber and res_xmpp module both use SSLv3 exclusively for their - encrypted connections. - 2) The core TLS handling in Asterisk, which is used by the chan_sip channel - driver, Asterisk Manager Interface (AMI), and Asterisk HTTP Server, by - default allow a TLS connection to fallback to SSLv3. This allows for a - MITM to potentially force a connection to fallback to SSLv3, exposing it - to the POODLE vulnerability. - - These issues have been resolved in the versions released in conjunction with - this security advisory. - - For more information about the details of this vulnerability, please read - security advisory AST-2014-011, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.31.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.13.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.6.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.0-beta3 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-011.pdf- The Asterisk Development Team has announced the release of Asterisk 11.13.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.13.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24032 - Gentoo compilation emits warning: - "_FORTIFY_SOURCE" redefined (Reported by Kilburn) - * ASTERISK-24225 - Dial option z is broken (Reported by - dimitripietro) - * ASTERISK-24178 - [patch]fromdomainport used even if not set - (Reported by Elazar Broad) - * ASTERISK-22252 - res_musiconhold cleanup - REF_DEBUG reload - warnings and ref leaks (Reported by Walter Doekes) - * ASTERISK-23997 - chan_sip: port incorrectly incremented for RTCP - ICE candidates in SDP answer (Reported by Badalian Vyacheslav) - * ASTERISK-24019 - When a Music On Hold stream starts it restarts - at beginning of file. (Reported by Jason Richards) - * ASTERISK-23767 - [patch] Dynamic IAX2 registration stops trying - if ever not able to resolve (Reported by David Herselman) - * ASTERISK-24211 - testsuite: Fix the dial_LS_options test - (Reported by Matt Jordan) - * ASTERISK-24249 - SIP debugs do not stop (Reported by Avinash - Mohod) - * ASTERISK-23577 - res_rtp_asterisk: Crash in - ast_rtp_on_turn_rtp_state when RTP instance is NULL (Reported by - Jay Jideliov) - * ASTERISK-23634 - With TURN Asterisk crashes on multiple (7-10) - concurrent WebRTC (avpg/encryption/icesupport) calls (Reported - by Roman Skvirsky) - * ASTERISK-24301 - Security: Out of call MESSAGE requests - processed via Message channel driver can crash Asterisk - (Reported by Matt Jordan) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24171 - [patch] Provide a manpage for the aelparse - utility (Reported by Jeremy Lainé) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.13.0- The Asterisk Development Team has announced security releases for Certified - Asterisk 11.6 and Asterisk 11 and 12. The available security releases are - released as versions 11.6-cert6, 11.12.1, and 12.5.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - Please note that the release of these versions resolves the following security - vulnerability: - - * AST-2014-010: Remote Crash when Handling Out of Call Message in Certain - Dialplan Configurations - - Additionally, the release of Asterisk 12.5.1 resolves the following security - vulnerability: - - * AST-2014-009: Remote Crash Based on Malformed SIP Subscription Requests - - Note that the crash described in AST-2014-010 can be worked around through - dialplan configuration. Given the likelihood of the issue, an advisory was - deemed to be warranted. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-009 and AST-2014-010, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert6 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.12.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.5.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-009.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-010.pdf- The Asterisk Development Team has announced the release of Asterisk 11.12.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.12.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-23911 - URIENCODE/URIDECODE: WARNING about passing an - empty string is a bit over zealous (Reported by Matt Jordan) - * ASTERISK-23985 - PresenceState Action response does not contain - ActionID; duplicates Message Header (Reported by Matt Jordan) - * ASTERISK-23814 - No call started after peer dialed (Reported by - Igor Goncharovsky) - * ASTERISK-24087 - [patch]chan_sip: sip_subscribe_mwi_destroy - should not call sip_destroy (Reported by Corey Farrell) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-18345 - [patch] sips connection dropped by asterisk - with a large INVITE (Reported by Stephane Chazelas) - * ASTERISK-23508 - Memory Corruption in - __ast_string_field_ptr_build_va (Reported by Arnd Schmitter) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-21178 - Improve documentation for manager command - Getvar, Setvar (Reported by Rusty Newton) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.12.0- The Asterisk Development Team has announced the release of Asterisk 11.11.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.11.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-22551 - Session timer : UAS (Asterisk) starts counting - at Invite, UAC starts counting at 200 OK. (Reported by i2045) - * ASTERISK-23792 - Mutex left locked in chan_unistim.c (Reported - by Peter Whisker) - * ASTERISK-23582 - [patch]Inconsistent column length in *odbc - (Reported by Walter Doekes) - * ASTERISK-23803 - AMI action UpdateConfig EmptyCat clears all - categories but the requested one (Reported by zvision) - * ASTERISK-23035 - ConfBridge with name longer than max (32 chars) - results in several bridges with same conf_name (Reported by - Iñaki Cívico) - * ASTERISK-23824 - ConfBridge: Users cannot be muted via CLI or - AMI when waiting to enter a conference (Reported by Matt Jordan) - * ASTERISK-23683 - #includes - wildcard character in a path more - than one directory deep - results in no config parsing on module - reload (Reported by tootai) - * ASTERISK-23827 - autoservice thread doesn't exit at shutdown - (Reported by Corey Farrell) - * ASTERISK-23609 - Security: AMI action MixMonitor allows - arbitrary programs to be run (Reported by Corey Farrell) - * ASTERISK-23673 - Security: DOS by consuming the number of - allowed HTTP connections. (Reported by Richard Mudgett) - * ASTERISK-23246 - DEBUG messages in sdp_crypto.c display despite - a DEBUG level of zero (Reported by Rusty Newton) - * ASTERISK-23766 - [patch] Specify timeout for database write in - SQLite (Reported by Igor Goncharovsky) - * ASTERISK-23844 - Load of pbx_lua fails on sample extensions.lua - with Lua 5.2 or greater due to addition of goto statement - (Reported by Rusty Newton) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-23834 - res_rtp_asterisk debug message gives wrong - length if ICE (Reported by Richard Kenner) - * ASTERISK-23790 - [patch] - SIP From headers longer than 256 - characters result in dropped call and 'No closing bracket' - warnings. (Reported by uniken1) - * ASTERISK-23917 - res_http_websocket: Delay in client processing - large streams of data causes disconnect and stuck socket - (Reported by Matt Jordan) - * ASTERISK-23908 - [patch]When using FEC error correction, - asterisk tries considers negative sequence numbers as missing - (Reported by Torrey Searle) - * ASTERISK-23921 - refcounter.py uses excessive ram for large refs - files (Reported by Corey Farrell) - * ASTERISK-23948 - REF_DEBUG fails to record ao2_ref against - objects that were already freed (Reported by Corey Farrell) - * ASTERISK-23916 - [patch]SIP/SDP fmtp line may include whitespace - between attributes (Reported by Alexander Traud) - * ASTERISK-23984 - Infinite loop possible in ast_careful_fwrite() - (Reported by Steve Davies) - * ASTERISK-23897 - [patch]Change in SETUP ACK handling (checking - PI) in revision 413765 breaks working environments (Reported by - Pavel Troller) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-23492 - Add option to safe_asterisk to disable - backgrounding (Reported by Walter Doekes) - * ASTERISK-22961 - [patch] DTLS-SRTP not working with SHA-256 - (Reported by Jay Jideliov) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.11.0- Perl 5.20 rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Drop the 389 directory server schema (1061414)- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.6, and Asterisk 1.8, 11, and 12. The available security - releases are released as versions 1.8.15-cert7, 11.6-cert4, 1.8.28.2, 11.10.2, - and 12.3.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - These releases resolve security vulnerabilities that were previously fixed in - 1.8.15-cert6, 11.6-cert3, 1.8.28.1, 11.10.1, and 12.3.1. Unfortunately, the fix - for AST-2014-007 inadvertently introduced a regression in Asterisk's TCP and TLS - handling that prevented Asterisk from sending data over these transports. This - regression and the security vulnerabilities have been fixed in the versions - specified in this release announcement. - - The security patches for AST-2014-007 have been updated with the fix for the - regression, and are available at http://downloads.asterisk.org/pub/security - - Please note that the release of these versions resolves the following security - vulnerabilities: - - * AST-2014-005: Remote Crash in PJSIP Channel Driver's Publish/Subscribe - Framework - - * AST-2014-006: Permission Escalation via Asterisk Manager User Unauthorized - Shell Access - - * AST-2014-007: Denial of Service via Exhaustion of Allowed Concurrent HTTP - Connections - - * AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-005, AST-2014-006, AST-2014-007, and AST-2014-008, - which were released with the previous versions that addressed these - vulnerabilities. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.28.2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert4 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.10.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.3.2 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-005.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-006.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-007.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-008.pdf- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.6, and Asterisk 1.8, 11, and 12. The available security - releases are released as versions 1.8.15-cert6, 11.6-cert3, 1.8.28.1, 11.10.1, - and 12.3.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following issue: - - * AST-2014-007: Denial of Service via Exhaustion of Allowed Concurrent HTTP - Connections - - Establishing a TCP or TLS connection to the configured HTTP or HTTPS port - respectively in http.conf and then not sending or completing a HTTP request - will tie up a HTTP session. By doing this repeatedly until the maximum number - of open HTTP sessions is reached, legitimate requests are blocked. - - Additionally, the release of 11.6-cert3, 11.10.1, and 12.3.1 resolves the - following issue: - - * AST-2014-006: Permission Escalation via Asterisk Manager User Unauthorized - Shell Access - - Manager users can execute arbitrary shell commands with the MixMonitor manager - action. Asterisk does not require system class authorization for a manager - user to use the MixMonitor action, so any manager user who is permitted to use - manager commands can potentially execute shell commands as the user executing - the Asterisk process. - - Additionally, the release of 12.3.1 resolves the following issues: - - * AST-2014-005: Remote Crash in PJSIP Channel Driver's Publish/Subscribe - Framework - - A remotely exploitable crash vulnerability exists in the PJSIP channel - driver's pub/sub framework. If an attempt is made to unsubscribe when not - currently subscribed and the endpoint's “sub_min_expiry” is set to zero, - Asterisk tries to create an expiration timer with zero seconds, which is not - allowed, so an assertion raised. - - * AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions - - When a SIP transaction timeout caused a subscription to be terminated, the - action taken by Asterisk was guaranteed to deadlock the thread on which SIP - requests are serviced. Note that this behavior could only happen on - established subscriptions, meaning that this could only be exploited if an - attacker bypassed authentication and successfully subscribed to a real - resource on the Asterisk server. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-005, AST-2014-006, AST-2014-007, and AST-2014-008, - which were released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert6 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.28.1 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert3 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.10.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.3.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-005.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-006.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-007.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-008.pdf- The Asterisk Development Team has announced the release of Asterisk 11.10.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.10.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-23547 - [patch] app_queue removing callers from queue - when reloading (Reported by Italo Rossi) - * ASTERISK-23559 - app_voicemail fails to load after fix to - dialplan functions (Reported by Corey Farrell) - * ASTERISK-22846 - testsuite: masquerade super test fails on all - branches (still) (Reported by Matt Jordan) - * ASTERISK-23545 - Confbridge talker detection settings - configuration load bug (Reported by John Knott) - * ASTERISK-23546 - CB_ADD_LEN does not do what you'd think - (Reported by Walter Doekes) - * ASTERISK-23620 - Code path in app_stack fails to unlock list - (Reported by Bradley Watkins) - * ASTERISK-23616 - Big memory leak in logger.c (Reported by - ibercom) - * ASTERISK-23576 - Build failure on SmartOS / Illumos / SunOS - (Reported by Sebastian Wiedenroth) - * ASTERISK-23550 - Newer sound sets don't show up in menuselect - (Reported by Rusty Newton) - * ASTERISK-18331 - app_sms failure (Reported by David Woodhouse) - * ASTERISK-19465 - P-Asserted-Identity Privacy (Reported by - Krzysztof Chmielewski) - * ASTERISK-23605 - res_http_websocket: Race condition in shutting - down websocket causes crash (Reported by Matt Jordan) - * ASTERISK-23707 - Realtime Contacts: Apparent mismatch between - PGSQL database state and Asterisk state (Reported by Mark - Michelson) - * ASTERISK-23381 - [patch]ChanSpy- Barge only works on the initial - 'spy', if the spied-on channel makes a new call, unable to - barge. (Reported by Robert Moss) - * ASTERISK-23665 - Wrong mime type for codec H263-1998 (h263+) - (Reported by Guillaume Maudoux) - * ASTERISK-23664 - Incorrect H264 specification in SDP. (Reported - by Guillaume Maudoux) - * ASTERISK-22977 - chan_sip+CEL: missing ANSWER and PICKUP event - for INVITE/w/replaces pickup (Reported by Walter Doekes) - * ASTERISK-23709 - Regression in Dahdi/Analog/waitfordialtone - (Reported by Steve Davies) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-23649 - [patch]Support for DTLS retransmission - (Reported by NITESH BANSAL) - * ASTERISK-23564 - [patch]TLS/SRTP status of channel not currently - available in a CLI command (Reported by Patrick Laimbock) - * ASTERISK-23754 - [patch] Use var/lib directory for log file - configured in asterisk.conf (Reported by Igor Goncharovsky) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.10.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- build against gmime-devel not gmime22-devel - do not use -m64 on aarch64- The Asterisk Development Team has announced the release of Asterisk 11.9.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.9.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-22790 - check_modem_rate() may return incorrect rate - for V.27 (Reported by Paolo Compagnini) - * ASTERISK-23034 - [patch] manager Originate doesn't abort on - failed format_cap allocation (Reported by Corey Farrell) - * ASTERISK-23061 - [Patch] 'textsupport' setting not mentioned in - sip.conf.sample (Reported by Eugene) - * ASTERISK-23028 - [patch] Asterisk man pages contains unquoted - minus signs (Reported by Jeremy Lainé) - * ASTERISK-23046 - Custom CDR fields set during a GoSUB called - from app_queue are not inserted (Reported by Denis Pantsyrev) - * ASTERISK-23027 - [patch] Spelling typo "transfered" instead of - "transferred" (Reported by Jeremy Lainé) - * ASTERISK-23008 - Local channels loose CALLERID name when DAHDI - channel connects (Reported by Michael Cargile) - * ASTERISK-23100 - [patch] In chan_mgcp the ident in transmitted - request and request queue may differ - fix for locking (Reported - by adomjan) - * ASTERISK-22988 - [patch]T38 , SIP 488 after Rejecting image - media offer due to invalid or unsupported syntax (Reported by - adomjan) - * ASTERISK-22861 - [patch]Specifying a null time as parameter to - GotoIfTime or ExecIfTime causes segmentation fault (Reported by - Sebastian Murray-Roberts) - * ASTERISK-17837 - extconfig.conf - Maximum Include level (1) - exceeded (Reported by pz) - * ASTERISK-22662 - Documentation fix? - queues.conf says - persistentmembers defaults to yes, it appears to lie (Reported - by Rusty Newton) - * ASTERISK-23134 - [patch] res_rtp_asterisk port selection cannot - handle selinux port restrictions (Reported by Corey Farrell) - * ASTERISK-23220 - STACK_PEEK function with no arguments causes - crash/core dump (Reported by James Sharp) - * ASTERISK-19773 - Asterisk crash on issuing Asterisk-CLI 'reload' - command multiple times on cli_aliases (Reported by Joel Vandal) - * ASTERISK-22757 - segfault in res_clialiases.so on reload when - mapping "module reload" command (Reported by Gareth Blades) - * ASTERISK-17727 - [patch] TLS doesn't get all certificate chain - (Reported by LN) - * ASTERISK-23178 - devicestate.h: device state setting functions - are documented with the wrong return values (Reported by - Jonathan Rose) - * ASTERISK-23232 - LocalBridge AMI Event LocalOptimization value - is opposite to what's expected (Reported by Leon Roy) - * ASTERISK-23098 - [patch]possible null pointer dereference in - format.c (Reported by Marcello Ceschia) - * ASTERISK-23297 - Asterisk 12, pbx_config.so segfaults if - res_parking.so is not loaded, or if res_parking.conf has no - configuration (Reported by CJ Oster) - * ASTERISK-23069 - Custom CDR variable not recorded when set in - macro called from app_queue (Reported by Bryan Anderson) - * ASTERISK-19499 - ConfBridge MOH is not working for transferee - after attended transfer (Reported by Timo Teräs) - * ASTERISK-23261 - [patch]Output mixup in - ${CHANNEL(rtpqos,audio,all)} (Reported by rsw686) - * ASTERISK-23279 - [patch]Asterisk doesn't support the dynamic - payload change in rtp mapping in the 200 OK response (Reported - by NITESH BANSAL) - * ASTERISK-23255 - UUID included for Redhat, but missing for - Debian distros in install_prereq script (Reported by Rusty - Newton) - * ASTERISK-23260 - [patch]ForkCDR v option does not keep CDR - variables for subsequent records (Reported by zvision) - * ASTERISK-23141 - Asterisk crashes on Dial(), in - pbx_find_extension at pbx.c (Reported by Maxim) - * ASTERISK-23336 - Asterisk warning "Don't know how to indicate - condition 33 on ooh323c" on outgoing calls from H323 to SIP peer - (Reported by Alexander Semych) - * ASTERISK-23231 - Since 405693 If we have res_fax.conf file set - to minrate=2400, then res_fax refuse to load (Reported by David - Brillert) - * ASTERISK-23135 - Crash - segfault in ast_channel_hangupcause_set - - probably introduced in 11.7.0 (Reported by OK) - * ASTERISK-23323 - [patch]chan_sip: missing p->owner checks in - handle_response_invite (Reported by Walter Doekes) - * ASTERISK-23406 - [patch]Fix typo in "sip show peer" (Reported by - ibercom) - * ASTERISK-23310 - bridged channel crashes in bridge_p2p_rtp_write - (Reported by Jeremy Lainé) - * ASTERISK-22911 - [patch]Asterisk fails to resume WebRTC call - from hold (Reported by Vytis Valentinavičius) - * ASTERISK-23104 - Specifying the SetVar AMI without a Channel - cause Asterisk to crash (Reported by Joel Vandal) - * ASTERISK-21930 - [patch]WebRTC over WSS is not working. - (Reported by John) - * ASTERISK-23383 - Wrong sense test on stat return code causes - unchanged config check to break with include files. (Reported by - David Woolley) - * ASTERISK-20149 - Crash when faxing SIP to SIP with strictrtp set - to yes (Reported by Alexandr Gordeev) - * ASTERISK-17523 - Qualify for static realtime peers does not work - (Reported by Maciej Krajewski) - * ASTERISK-21406 - [patch] chan_sip deadlock on monlock between - unload_module and do_monitor (Reported by Corey Farrell) - * ASTERISK-23373 - [patch]Security: Open FD exhaustion with - chan_sip Session-Timers (Reported by Corey Farrell) - * ASTERISK-23340 - Security Vulnerability: stack allocation of - cookie headers in loop allows for unauthenticated remote denial - of service attack (Reported by Matt Jordan) - * ASTERISK-23311 - Manager - MoH Stop Event fails to show up when - leaving Conference (Reported by Benjamin Keith Ford) - * ASTERISK-23420 - [patch]Memory leak in manager_add_filter - function in manager.c (Reported by Etienne Lessard) - * ASTERISK-23488 - Logic error in callerid checksum processing - (Reported by Russ Meyerriecks) - * ASTERISK-23461 - Only first user is muted when joining - confbridge with 'startmuted=yes' (Reported by Chico Manobela) - * ASTERISK-20841 - fromdomain not honored on outbound INVITE - request (Reported by Kelly Goedert) - * ASTERISK-22079 - Segfault: INTERNAL_OBJ (user_data=0x6374652f) - at astobj2.c:120 (Reported by Jamuel Starkey) - * ASTERISK-23509 - [patch]SayNumber for Polish language tries to - play empty files for numbers divisible by 100 (Reported by - zvision) - * ASTERISK-23103 - [patch]Crash in ast_format_cmp, in ao2_find - (Reported by JoshE) - * ASTERISK-23391 - Audit dialplan function usage of channel - variable (Reported by Corey Farrell) - * ASTERISK-23548 - POST to ARI sometimes returns no body on - success (Reported by Scott Griepentrog) - * ASTERISK-23460 - ooh323 channel stuck if call is placed directly - and gatekeeper is not available (Reported by Dmitry Melekhov) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-22980 - [patch]Allow building cdr_radius and cel_radius - against libfreeradius-client (Reported by Jeremy Lainé) - * ASTERISK-22661 - Unable to exit ChanSpy if spied channel does - not have a call in progress (Reported by Chris Hillman) - * ASTERISK-23099 - [patch] WSS: enable ast_websocket_read() - function to read the whole available data at first and then wait - for any fragmented packets (Reported by Thava Iyer)- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.6, and Asterisk 1.8, 11, and 12. The available security - releases are released as versions 1.8.15-cert5, 11.6-cert2, 1.8.26.1, 11.8.1, - and 12.1.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following issues: - - * AST-2014-001: Stack overflow in HTTP processing of Cookie headers. - - Sending a HTTP request that is handled by Asterisk with a large number of - Cookie headers could overflow the stack. - - Another vulnerability along similar lines is any HTTP request with a - ridiculous number of headers in the request could exhaust system memory. - - * AST-2014-002: chan_sip: Exit early on bad session timers request - - This change allows chan_sip to avoid creation of the channel and - consumption of associated file descriptors altogether if the inbound - request is going to be rejected anyway. - - Additionally, the release of 12.1.1 resolves the following issue: - - * AST-2014-003: res_pjsip: When handling 401/407 responses don't assume a - request will have an endpoint. - - This change removes the assumption that an outgoing request will always - have an endpoint and makes the authenticate_qualify option work once again. - - Finally, a security advisory, AST-2014-004, was released for a vulnerability - fixed in Asterisk 12.1.0. Users of Asterisk 12.0.0 are encouraged to upgrade to - 12.1.1 to resolve both vulnerabilities. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-001, AST-2014-002, AST-2014-003, and AST-2014-004, - which were released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert5 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.26.1 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.8.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.1.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-001.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-002.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-003.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-004.pdf- The Asterisk Development Team has announced the release of Asterisk 11.8.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.8.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-22544 - Italian prompt vm-options has advertisement in - it (Reported by Rusty Newton) - * ASTERISK-21383 - STUN Binding Requests Not Being Sent Back from - Asterisk to Chrome (Reported by Shaun Clark) - * ASTERISK-22478 - [patch]Can't use pound(hash) symbol for custom - DTMF menus in ConfBridge (processed as directive) (Reported by - Nicolas Tanski) - * ASTERISK-12117 - chan_sip creates a new local tag (from-tag) for - every register message (Reported by Pawel Pierscionek) - * ASTERISK-20862 - Asterisk min and max member penalties not - honored when set with 0 (Reported by Schmooze Com) - * ASTERISK-22746 - [patch]Crash in chan_dahdi during caller id - read (Reported by Michael Walton) - * ASTERISK-22788 - [patch] main/translate.c: access to variable f - after free in ast_translate() (Reported by Corey Farrell) - * ASTERISK-21242 - Segfault when T.38 re-invite retransmission - receives 200 OK (Reported by Ashley Winters) - * ASTERISK-22590 - BufferOverflow in unpacksms16() when receiving - 16 bit multipart SMS with app_sms (Reported by Jan Juergens) - * ASTERISK-22905 - Prevent Asterisk functions that are 'dangerous' - from being executed from external interfaces (Reported by Matt - Jordan) - * ASTERISK-23021 - Typos in code : "avaliable" instead of - "available" (Reported by Jeremy Lainé) - * ASTERISK-22970 - [patch]Documentation fix for QUOTE() (Reported - by Gareth Palmer) - * ASTERISK-21960 - ooh323 channels stuck (Reported by Dmitry - Melekhov) - * ASTERISK-22350 - DUNDI - core dump on shutdown - segfault in - sqlite3_reset from /usr/lib/libsqlite3.so.0 (Reported by Birger - "WIMPy" Harzenetter) - * ASTERISK-22942 - [patch] - Asterisk crashed after - Set(FAXOPT(faxdetect)=t38) (Reported by adomjan) - * ASTERISK-22856 - [patch]SayUnixTime in polish reads minutes - instead of seconds (Reported by Robert Mordec) - * ASTERISK-22854 - [patch] - Deadlock between cel_pgsql unload and - core_event_dispatcher taskprocessor thread (Reported by Etienne - Lessard) - * ASTERISK-22910 - [patch] - REPLACE() calls strcpy on overlapping - memory when is empty (Reported by Gareth Palmer) - * ASTERISK-22871 - cel_pgsql module not loading after "reload" or - "reload cel_pgsql.so" command (Reported by Matteo) - * ASTERISK-23084 - [patch]rasterisk needlessly prints the - AST-2013-007 warning (Reported by Tzafrir Cohen) - * ASTERISK-17138 - [patch] Asterisk not re-registering after it - receives "Forbidden - wrong password on authentication" - (Reported by Rudi) - * ASTERISK-23011 - [patch]configure.ac and pbx_lua don't support - lua 5.2 (Reported by George Joseph) - * ASTERISK-22834 - Parking by blind transfer when lot full orphans - channels (Reported by rsw686) - * ASTERISK-23047 - Orphaned (stuck) channel occurs during a failed - SIP transfer to parking space (Reported by Tommy Thompson) - * ASTERISK-22946 - Local From tag regression with sipgate.de - (Reported by Stephan Eisvogel) - * ASTERISK-23010 - No BYE message sent when sip INVITE is received - (Reported by Ryan Tilton) - * ASTERISK-23135 - Crash - segfault in ast_channel_hangupcause_set - - probably introduced in 11.7.0 (Reported by OK) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-22728 - [patch] Improve Understanding Of 'Forcerport' - When Running "sip show peers" (Reported by Michael L. Young) - * ASTERISK-22659 - Make a new core and extra sounds release - (Reported by Rusty Newton) - * ASTERISK-22919 - core show channeltypes slicing (Reported by - outtolunc) - * ASTERISK-22918 - dahdi show channels slices PRI channel dnid on - output (Reported by outtolunc) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.8.0- The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.7.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- app_confbridge: Can now set the language used for announcements - to the conference. - (Closes issue ASTERISK-19983. Reported by Jonathan White) - - * --- app_queue: Fix CLI "queue remove member" queue_log entry. - (Closes issue ASTERISK-21826. Reported by Oscar Esteve) - - * --- chan_sip: Do not increment the SDP version between 183 and 200 - responses. - (Closes issue ASTERISK-21204. Reported by NITESH BANSAL) - - * --- chan_sip: Allow a sip peer to accept both AVP and AVPF calls - (Closes issue ASTERISK-22005. Reported by Torrey Searle) - - * --- chan_sip: Fix Realtime Peer Update Problem When Un-registering - And Expires Header In 200ok - (Closes issue ASTERISK-22428. Reported by Ben Smithurst) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.7.0- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available security - releases are released as versions 1.8.15-cert4, 11.2-cert3, 1.8.24.1, 10.12.4, - 10.12.4-digiumphones, and 11.6.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following issues: - - * A buffer overflow when receiving odd length 16 bit messages in app_sms. An - infinite loop could occur which would overwrite memory when a message is - received into the unpacksms16() function and the length of the message is an - odd number of bytes. - - * Prevent permissions escalation in the Asterisk Manager Interface. Asterisk - now marks certain individual dialplan functions as 'dangerous', which will - inhibit their execution from external sources. - - A 'dangerous' function is one which results in a privilege escalation. For - example, if one were to read the channel variable SHELL(rm -rf /) Bad - Things(TM) could happen; even if the external source has only read - permissions. - - Execution from external sources may be enabled by setting 'live_dangerously' - to 'yes' in the [options] section of asterisk.conf. Although doing so is not - recommended. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2013-006 and AST-2013-007, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert4 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.2-cert3 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.24.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.4 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.4-digiumphones - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.6.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2013-006.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-007.pdf- The Asterisk Development Team has announced the release of Asterisk 11.6.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.6.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Confbridge: empty conference not being torn down - (Closes issue ASTERISK-21859. Reported by Chris Gentle) - - * --- Let Queue wrap up time influence member availability - (Closes issue ASTERISK-22189. Reported by Tony Lewis) - - * --- Fix a longstanding issue with MFC-R2 configuration that - prevented users - (Closes issue ASTERISK-21117. Reported by Rafael Angulo) - - * --- chan_iax2: Fix saving the wrong expiry time in astdb. - (Closes issue ASTERISK-22504. Reported by Stefan Wachtler) - - * --- Fix segfault for certain invalid WebSocket input. - (Closes issue ASTERISK-21825. Reported by Alfred Farrugia) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.6.0- Disable hardened build, as it's apparently causing problems loading modules.- Enable hardened build BZ#954338 - Significant clean ups- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available security releases - are released as versions 1.8.15-cert2, 11.2-cert2, 1.8.23.1, 10.12.3, 10.12.3-digiumphones, - and 11.5.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following issues: - - * A remotely exploitable crash vulnerability exists in the SIP channel driver if - an ACK with SDP is received after the channel has been terminated. The - handling code incorrectly assumes that the channel will always be present. - - * A remotely exploitable crash vulnerability exists in the SIP channel driver if - an invalid SDP is sent in a SIP request that defines media descriptions before - connection information. The handling code incorrectly attempts to reference - the socket address information even though that information has not yet been - set. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2013-004 and AST-2013-005, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert3 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.2-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.23.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.3 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.3-digiumphones - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.5.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2013-004.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-005.pdf - - The Asterisk Development Team has announced the release of Asterisk 11.5.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.5.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix Segfault In app_queue When "persistentmembers" Is Enabled - And Using Realtime - (Closes issue ASTERISK-21738. Reported by JoshE) - - * --- IAX2: fix race condition with nativebridge transfers. - (Closes issue ASTERISK-21409. Reported by alecdavis) - - * --- Fix The Payload Being Set On CN Packets And Do Not Set Marker - Bit - (Closes issue ASTERISK-21246. Reported by Peter Katzmann) - - * --- Fix One-Way Audio With auto_* NAT Settings When SIP Calls - Initiated By PBX - (Closes issue ASTERISK-21374. Reported by Michael L. Young) - - * --- chan_sip: NOTIFYs for BLF start queuing up and fail to be sent - out after retries fail - (Closes issue ASTERISK-21677. Reported by Dan Martens) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.5.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Perl 5.18 rebuild- rebuild (libical)- The Asterisk Development Team has announced the release of Asterisk 11.4.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.4.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix Sorting Order For Parking Lots Stored In Static Realtime - (Closes issue ASTERISK-21035. Reported by Alex Epshteyn) - - * --- Fix StopMixMonitor Hanging Up When Unable To Stop MixMonitor On - A Channel - (Closes issue ASTERISK-21294. Reported by daroz) - - * --- When a session timer expires during a T.38 call, re-invite with - correct SDP - (Closes issue ASTERISK-21232. Reported by Nitesh Bansal) - - * --- Fix white noise on SRTP decryption - (Closes issue ASTERISK-21323. Reported by andrea) - - * --- Fix reload skinny with active devices. - (Closes issue ASTERISK-16610. Reported by wedhorn) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.4.0- fix build with lua 5.2- The Asterisk Development Team has announced the release of Asterisk 11.3.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.3.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix issue where chan_mobile fails to bind to first available - port - (Closes issue ASTERISK-16357. Reported by challado) - - * --- Fix Queue Log Reporting Every Call COMPLETECALLER With "h" - Extension Present - (Closes issue ASTERISK-20743. Reported by call) - - * --- Retain XMPP filters across reconnections so external modules - continue to function as expected. - (Closes issue ASTERISK-20916. Reported by kuj) - - * --- Ensure that a declined media stream is terminated with a '\r\n' - (Closes issue ASTERISK-20908. Reported by Dennis DeDonatis) - - * --- Fix pjproject compilation in certain circumstances - (Closes issue ASTERISK-20681. Reported by Dinesh Ramjuttun) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.3.0- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases - are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones, - and 11.2.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following issues: - - * A possible buffer overflow during H.264 format negotiation. The format - attribute resource for H.264 video performs an unsafe read against a media - attribute when parsing the SDP. - - This vulnerability only affected Asterisk 11. - - * A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed - in January of this year, contained a fix for Asterisk's HTTP server for a - remotely-triggered crash. While the fix prevented the crash from being - triggered, a denial of service vector still exists with that solution if an - attacker sends one or more HTTP POST requests with very large Content-Length - values. - - This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 - - * A potential username disclosure exists in the SIP channel driver. When - authenticating a SIP request with alwaysauthreject enabled, allowguest - disabled, and autocreatepeer disabled, Asterisk discloses whether a user - exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways. - - This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2-digiumphones - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf- The Asterisk Development Team has announced the release of Asterisk 11.2.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.2.1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - * --- Fix astcanary startup problem due to wrong pid value from before - daemon call - (Closes issue ASTERISK-20947. Reported by Jakob Hirsch) - - * --- Update init.d scripts to handle stderr; readd splash screen for - remote consoles - (Closes issue ASTERISK-20945. Reported by Warren Selby) - - * --- Reset RTP timestamp; sequence number on SSRC change - (Closes issue ASTERISK-20906. Reported by Eelco Brolman) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.1- The Asterisk Development Team has announced the release of Asterisk 11.2.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.2.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- app_meetme: Fix channels lingering when hung up under certain - conditions - (Closes issue ASTERISK-20486. Reported by Michael Cargile) - - * --- Fix stuck DTMF when bridge is broken. - (Closes issue ASTERISK-20492. Reported by Jeremiah Gowdy) - - * --- Add missing support for "who hung up" to chan_motif. - (Closes issue ASTERISK-20671. Reported by Matt Jordan) - - * --- Remove a fixed size limitation for producing SDP and change how - ICE support is disabled by default. - (Closes issue ASTERISK-20643. Reported by coopvr) - - * --- Fix chan_sip websocket payload handling - (Closes issue ASTERISK-20745. Reported by Iñaki Baz Castillo) - - * --- Fix pjproject compilation in certain circumstances - (Closes issue ASTERISK-20681. Reported by Dinesh Ramjuttun) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.0- The Asterisk Development Team has announced a security release for Asterisk 11, - Asterisk 11.1.2. This release addresses the security vulnerabilities reported in - AST-2012-014 and AST-2012-015, and replaces the previous version of Asterisk 11 - released for these security vulnerabilities. The prior release left open a - vulnerability in res_xmpp that exists only in Asterisk 11; as such, other - versions of Asterisk were resolved correctly by the previous releases. - - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following two issues: - - * Stack overflows that occur in some portions of Asterisk that manage a TCP - connection. In SIP, this is exploitable via a remote unauthenticated session; - in XMPP and HTTP connections, this is exploitable via remote authenticated - sessions. The vulnerabilities in SIP and HTTP were corrected in a prior - release of Asterisk; the vulnerability in XMPP is resolved in this release. - - * A denial of service vulnerability through exploitation of the device state - cache. Anonymous calls had the capability to create devices in Asterisk that - would never be disposed of. Handling the cachability of device states - aggregated via XMPP is handled in this release. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-014 and AST-2012-015. - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.2 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf - - Thank you for your continued support of Asterisk - and we apologize for having - to do this twice!- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.11 and Asterisk 1.8, 10, and 11. The available security releases - are released as versions 1.8.11-cert10, 1.8.19.1, 10.11.1, 10.11.1-digiumphones, - and 11.1.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following two issues: - - * Stack overflows that occur in some portions of Asterisk that manage a TCP - connection. In SIP, this is exploitable via a remote unauthenticated session; - in XMPP and HTTP connections, this is exploitable via remote authenticated - sessions. - - * A denial of service vulnerability through exploitation of the device state - cache. Anonymous calls had the capability to create devices in Asterisk that - would never be disposed of. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-014 and AST-2012-015, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert10 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.19.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.11.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.11.1-digiumphones - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf- The Asterisk Development Team has announced the release of Asterisk 11.1.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.1.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix execution of 'i' extension due to uninitialized variable. - (Closes issue ASTERISK-20455. Reported by Richard Miller) - - * --- Prevent resetting of NATted realtime peer address on reload. - (Closes issue ASTERISK-18203. Reported by daren ferreira) - - * --- Fix ConfBridge crash if no timing module loaded. - (Closes issue ASTERISK-19448. Reported by feyfre) - - * --- Fix the Park 'r' option when a channel parks itself. - (Closes issue ASTERISK-19382. Reported by James Stocks) - - * --- Fix an issue where outgoing calls would fail to establish audio - due to ICE negotiation failures. - (Closes issue ASTERISK-20554. Reported by mmichelson) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.1.0- The Asterisk Development Team has announced the release of Asterisk 11.0.2. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.0.2 resolves an issue reported by the - community and would have not been possible without your participation. - Thank you! - - The following is the issue resolved in this release: - - * --- chan_local: Fix local_pvt ref leak in local_devicestate(). - (Closes issue ASTERISK-20769. Reported by rmudgett) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.2- simplify LDFLAGS setting- clean up things to allow building on arm arches- The Asterisk Development Team has announced the release of Asterisk 11.0.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.0.1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - * --- chan_sip: Fix a bug causing SIP reloads to remove all entries - from the registry - (Closes issue ASTERISK-20611. Reported by Alisher) - - * --- confbridge: Fix a bug which made conferences not record with - AMI/CLI commands - (Closes issue ASTERISK-20601. Reported by Vilius) - - * --- Fix an issue with res_http_websocket where the chan_sip - WebSocket handler could not be registered. - (Closes issue ASTERISK-20631. Reported by danjenkins) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.1- The Asterisk Development Team is pleased to announce the release of - Asterisk 11.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - Asterisk 11 is the next major release series of Asterisk. It is a Long Term - Support (LTS) release, similar to Asterisk 1.8. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 11, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 - - A short list of new features includes: - - * A new channel driver named chan_motif has been added which provides support - for Google Talk and Jingle in a single channel driver. This new channel - driver includes support for both audio and video, RFC2833 DTMF, all codecs - supported by Asterisk, hold, unhold, and ringing notification. It is also - compliant with the current Jingle specification, current Google Jingle - specification, and the original Google Talk protocol. - - * Support for the WebSocket transport for chan_sip. - - * SIP peers can now be configured to support negotiation of ICE candidates. - - * The app_page application now no longer depends on DAHDI or app_meetme. It - has been re-architected to use app_confbridge internally. - - * Hangup handlers can be attached to channels using the CHANNEL() function. - Hangup handlers will run when the channel is hung up similar to the h - extension; however, unlike an h extension, a hangup handler is associated with - the actual channel and will execute anytime that channel is hung up, - regardless of where it is in the dialplan. - - * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial - allows you to execute a dialplan subroutine on a channel before a call is - placed but after the application performing a dial action is invoked. This - means that the handlers are executed after the creation of the callee - channels, but before any actions have been taken to actually dial the callee - channels. - - * Log messages can now be easily associated with a certain call by looking at - a new unique identifier, "Call Id". Call ids are attached to log messages for - just about any case where it can be determined that the message is related - to a particular call. - - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in - Asterisk. Unlike traditional ACLs defined in specific module configuration - files, Named ACLs can be shared across multiple modules. - - * The Hangup Cause family of functions and dialplan applications allow for - inspection of the hangup cause codes for each channel involved in a call. - This allows a dialplan writer to determine, for each channel, who hung up and - for what reason(s). - - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() - lets you set some of the configuration options from the general section - of features.conf on a per-channel basis. FEATUREMAP() lets you customize - the key sequence used to activate built-in features, such as blindxfer, - and automon. - - * Support for DTLS-SRTP in chan_sip. - - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups - and callgroups to be defined for several channel drivers. - - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation - - A full list of all new features can also be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES - - For a full list of changes in the current release, please see the ChangeLog. - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0- The Asterisk Development Team has announced the second release candidate of - Asterisk 11.0.0. This release candidate is available for immediate - download at http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.0.0-rc2 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release candidate: - - * --- Fix an issue where outgoing calls would fail to establish audio - due to ICE negotiation failures. - (Closes issue ASTERISK-20554. Reported by mmichelson) - - * --- Ensure Asterisk fails TCP/TLS SIP calls when certificate - checking fails - (Closes issue ASTERISK-20559. Reported by kmoore) - - * --- Don't make chan_sip export global symbols. - (Closes issue ASTERISK-20545. Reported by kmoore) - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.0-rc2- The Asterisk Development Team is pleased to announce the first release candidate - of Asterisk 11.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - All interested users of Asterisk are encouraged to participate in the - Asterisk 11 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - All Asterisk users are invited to participate in the #asterisk-testing channel - on IRC to work together in testing the many parts of Asterisk. - - Asterisk 11 is the next major release series of Asterisk. It will be a Long - Term Support (LTS) release, similar to Asterisk 1.8. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 11, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 - - A short list of new features includes: - - * A new channel driver named chan_motif has been added which provides support - for Google Talk and Jingle in a single channel driver. This new channel - driver includes support for both audio and video, RFC2833 DTMF, all codecs - supported by Asterisk, hold, unhold, and ringing notification. It is also - compliant with the current Jingle specification, current Google Jingle - specification, and the original Google Talk protocol. - - * Support for the WebSocket transport for chan_sip. - - * SIP peers can now be configured to support negotiation of ICE candidates. - - * The app_page application now no longer depends on DAHDI or app_meetme. It - has been re-architected to use app_confbridge internally. - - * Hangup handlers can be attached to channels using the CHANNEL() function. - Hangup handlers will run when the channel is hung up similar to the h - extension; however, unlike an h extension, a hangup handler is associated with - the actual channel and will execute anytime that channel is hung up, - regardless of where it is in the dialplan. - - * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial - allows you to execute a dialplan subroutine on a channel before a call is - placed but after the application performing a dial action is invoked. This - means that the handlers are executed after the creation of the callee - channels, but before any actions have been taken to actually dial the callee - channels. - - * Log messages can now be easily associated with a certain call by looking at - a new unique identifier, "Call Id". Call ids are attached to log messages for - just about any case where it can be determined that the message is related - to a particular call. - - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in - Asterisk. Unlike traditional ACLs defined in specific module configuration - files, Named ACLs can be shared across multiple modules. - - * The Hangup Cause family of functions and dialplan applications allow for - inspection of the hangup cause codes for each channel involved in a call. - This allows a dialplan writer to determine, for each channel, who hung up and - for what reason(s). - - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() - lets you set some of the configuration options from the general section - of features.conf on a per-channel basis. FEATUREMAP() lets you customize - the key sequence used to activate built-in features, such as blindxfer, - and automon. - - * Support for DTLS-SRTP in chan_sip. - - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups - and callgroups to be defined for several channel drivers. - - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation - - A full list of all new features can also be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES - - For a full list of changes in the current release, please see the ChangeLog. - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-rc1- Don't forget format_ilbc module- The Asterisk Development Team is pleased to announce the second beta release of - Asterisk 11.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - All interested users of Asterisk are encouraged to participate in the - Asterisk 11 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - All Asterisk users are invited to participate in the #asterisk-testing channel - on IRC to work together in testing the many parts of Asterisk. - - Asterisk 11 is the next major release series of Asterisk. It will be a Long - Term Support (LTS) release, similar to Asterisk 1.8. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 11, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 - - A short list of new features includes: - - * A new channel driver named chan_motif has been added which provides support - for Google Talk and Jingle in a single channel driver. This new channel - driver includes support for both audio and video, RFC2833 DTMF, all codecs - supported by Asterisk, hold, unhold, and ringing notification. It is also - compliant with the current Jingle specification, current Google Jingle - specification, and the original Google Talk protocol. - - * Support for the WebSocket transport for chan_sip. - - * SIP peers can now be configured to support negotiation of ICE candidates. - - * The app_page application now no longer depends on DAHDI or app_meetme. It - has been re-architected to use app_confbridge internally. - - * Hangup handlers can be attached to channels using the CHANNEL() function. - Hangup handlers will run when the channel is hung up similar to the h - extension; however, unlike an h extension, a hangup handler is associated with - the actual channel and will execute anytime that channel is hung up, - regardless of where it is in the dialplan. - - * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial - allows you to execute a dialplan subroutine on a channel before a call is - placed but after the application performing a dial action is invoked. This - means that the handlers are executed after the creation of the callee - channels, but before any actions have been taken to actually dial the callee - channels. - - * Log messages can now be easily associated with a certain call by looking at - a new unique identifier, "Call Id". Call ids are attached to log messages for - just about any case where it can be determined that the message is related - to a particular call. - - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in - Asterisk. Unlike traditional ACLs defined in specific module configuration - files, Named ACLs can be shared across multiple modules. - - * The Hangup Cause family of functions and dialplan applications allow for - inspection of the hangup cause codes for each channel involved in a call. - This allows a dialplan writer to determine, for each channel, who hung up and - for what reason(s). - - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() - lets you set some of the configuration options from the general section - of features.conf on a per-channel basis. FEATUREMAP() lets you customize - the key sequence used to activate built-in features, such as blindxfer, - and automon. - - * Support for DTLS-SRTP in chan_sip. - - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups - and callgroups to be defined for several channel drivers. - - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation - - A full list of all new features can also be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES - - For a full list of changes in the current release, please see the ChangeLog. - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-beta2- The Asterisk Development Team has announced the release of Asterisk 10.8.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.8.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- AST-2012-012: Resolve AMI User Unauthorized Shell Access through - ExternalIVR - (Closes issue ASTERISK-20132. Reported by Zubair Ashraf of IBM X-Force Research) - - * --- AST-2012-013: Resolve ACL rules being ignored during calls by - some IAX2 peers - (Closes issue ASTERISK-20186. Reported by Alan Frisch) - - * --- Handle extremely out of order RFC 2833 DTMF - (Closes issue ASTERISK-18404. Reported by Stephane Chazelas) - - * --- Resolve severe memory leak in CEL logging modules. - (Closes issue AST-916. Reported by Thomas Arimont) - - * --- Only re-create an SRTP session when needed - (Issue ASTERISK-20194. Reported by Nicolo Mazzon) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.8.0- fix build on s390- fix build on s390- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are - released as versions 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones - resolve the following two issues: - - * A permission escalation vulnerability in Asterisk Manager Interface. This - would potentially allow remote authenticated users the ability to execute - commands on the system shell with the privileges of the user running the - Asterisk application. Please note that the README-SERIOUSLY.bestpractices.txt - file delivered with Asterisk has been updated due to this and other related - vulnerabilities fixed in previous versions of Asterisk. - - * When an IAX2 call is made using the credentials of a peer defined in a - dynamic Asterisk Realtime Architecture (ARA) backend, the ACL rules for that - peer are not applied to the call attempt. This allows for a remote attacker - who is aware of a peer's credentials to bypass the ACL rules set for that - peer. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-012 and AST-2012-013, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.15.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1-digiumphones - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-012.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-013.pdf- The Asterisk Development Team has announced the release of Asterisk 10.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.7.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix deadlock potential with ast_set_hangupsource() calls. - (Closes issue ASTERISK-19801. Reported by Alec Davis) - - * --- Fix request routing issue when outboundproxy is used. - (Closes issue ASTERISK-20008. Reported by Marcus Hunger) - - * --- Set the Caller ID "tag" on peers even if remote party - information is present. - (Closes issue ASTERISK-19859. Reported by Thomas Arimont) - - * --- Fix NULL pointer segfault in ast_sockaddr_parse() - (Closes issue ASTERISK-20006. Reported by Michael L. Young) - - * --- Do not perform install on existing directories - (Closes issue ASTERISK-19492. Reported by Karl Fife) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.7.0- The Asterisk Development Team has announced the release of Asterisk 10.6.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.6.1 resolves an issue reported by the - community and would have not been possible without your participation. - Thank you! - - The following is the issue resolved in this release: - - * --- Remove a superfluous and dangerous freeing of an SSL_CTX. - (Closes issue ASTERISK-20074. Reported by Trevor Helmsley) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.1- The Asterisk Development Team has announced the release of Asterisk 10.6.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.6.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- format_mp3: Fix a possible crash in mp3_read(). - (Closes issue ASTERISK-19761. Reported by Chris Maciejewsk) - - * --- Fix local channel chains optimizing themselves out of a call. - (Closes issue ASTERISK-16711. Reported by Alec Davis) - - * --- Re-add LastMsgsSent value for SIP peers - (Closes issue ASTERISK-17866. Reported by Steve Davies) - - * --- Prevent sip_pvt refleak when an ast_channel outlasts its - corresponding sip_pvt. - (Closes issue ASTERISK-19425. Reported by David Cunningham) - - * --- Send more accurate identification information in dialog-info SIP - NOTIFYs. - (Closes issue ASTERISK-16735. Reported by Maciej Krajewski) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.0- The Asterisk Development Team is pleased to announce the first beta release of - Asterisk 11.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - All interested users of Asterisk are encouraged to participate in the - Asterisk 11 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - All Asterisk users are invited to participate in the #asterisk-testing channel - on IRC to work together in testing the many parts of Asterisk. - - Asterisk 11 is the next major release series of Asterisk. It will be a Long - Term Support (LTS) release, similar to Asterisk 1.8. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 11, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 - - A short list of new features includes: - - * A new channel driver named chan_motif has been added which provides support - for Google Talk and Jingle in a single channel driver. This new channel - driver includes support for both audio and video, RFC2833 DTMF, all codecs - supported by Asterisk, hold, unhold, and ringing notification. It is also - compliant with the current Jingle specification, current Google Jingle - specification, and the original Google Talk protocol. - - * Support for the WebSocket transport for chan_sip. - - * SIP peers can now be configured to support negotiation of ICE candidates. - - * The app_page application now no longer depends on DAHDI or app_meetme. It - has been re-architected to use app_confbridge internally. - - * Hangup handlers can be attached to channels using the CHANNEL() function. - Hangup handlers will run when the channel is hung up similar to the h - extension; however, unlike an h extension, a hangup handler is associated with - the actual channel and will execute anytime that channel is hung up, - regardless of where it is in the dialplan. - - * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial - allows you to execute a dialplan subroutine on a channel before a call is - placed but after the application performing a dial action is invoked. This - means that the handlers are executed after the creation of the caller/callee - channels, but before any actions have been taken to actually dial the callee - channels. - - * Log messages can now be easily associated with a certain call by looking at - a new unique identifier, "Call Id". Call ids are attached to log messages for - just about any case where it can be determined that the message is related - to a particular call. - - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in - Asterisk. Unlike traditional ACLs defined in specific module configuration - files, Named ACLs can be shared across multiple modules. - - * The Hangup Cause family of functions and dialplan applications allow for - inspection of the hangup cause codes for each channel involved in a call. - This allows a dialplan writer to determine, for each channel, who hung up and - for what reason(s). - - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() - lets you set some of the configuration options from the general section - of features.conf on a per-channel basis. FEATUREMAP() lets you customize - the key sequence used to activate built-in features, such as blindxfer, - and automon. - - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups - and callgroups to be defined for several channel drivers. - - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation - - A full list of all new features can also be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES - - For a full list of changes in the current release, please see the ChangeLog. - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-beta1- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are - released as versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones - resolve the following two issues: - - * If Asterisk sends a re-invite and an endpoint responds to the re-invite with - a provisional response but never sends a final response, then the SIP dialog - structure is never freed and the RTP ports for the call are never released. If - an attacker has the ability to place a call, they could create a denial of - service by using all available RTP ports. - - * If a single voicemail account is manipulated by two parties simultaneously, - a condition can occur where memory is freed twice causing a crash. - - These issues and their resolution are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-010 and AST-2012-011, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert4 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.13.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.2-digiumphones - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-010.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-011.pdf- Perl 5.16 rebuild- The Asterisk Development Team has announced a security release for Asterisk 10. - This security release is released as version 10.5.1. - - The release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 10.5.1 resolves the following issue: - - * A remotely exploitable crash vulnerability was found in the Skinny (SCCP) - Channel driver. When an SCCP client sends an Off Hook message, followed by - a Key Pad Button Message, a structure that was previously set to NULL is - dereferenced. This allows remote authenticated connections the ability to - cause a crash in the server, denying services to legitimate users. - - This issue and its resolution is described in the security advisory. - - For more information about the details of this vulnerability, please read - security advisory AST-2012-009, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.1 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-009.pdf- The Asterisk Development Team has announced the release of Asterisk 10.5.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.5.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Turn off warning message when bind address is set to any. - (Closes issue ASTERISK-19456. Reported by Michael L. Young) - - * --- Prevent overflow in calculation in ast_tvdiff_ms on 32-bit - machines - (Closes issue ASTERISK-19727. Reported by Ben Klang) - - * --- Make DAHDISendCallreroutingFacility wait 5 seconds for a reply - before disconnecting the call. - (Closes issue ASTERISK-19708. Reported by mehdi Shirazi) - - * --- Fix recalled party B feature flags for a failed DTMF atxfer. - (Closes issue ASTERISK-19383. Reported by lgfsantos) - - * --- Fix DTMF atxfer running h exten after the wrong bridge ends. - (Closes issue ASTERISK-19717. Reported by Mario) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.5.0- Perl 5.16 rebuild- The Asterisk Development Team has announced the release of Asterisk 10.4.2. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.4.2 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - * --- Resolve crash in subscribing for MWI notifications - (Closes issue ASTERISK-19827. Reported by B. R) - - * --- Fix crash in ConfBridge when user announcement is played for - more than 2 users - (Closes issue ASTERISK-19899. Reported by Florian Gilcher) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.2- The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are - released as versions 1.8.11-cert2, 1.8.12.1, and 10.4.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.8.11-cert2, 1.8.12.1, and 10.4.1 resolve the following - two issues: - - * A remotely exploitable crash vulnerability exists in the IAX2 channel - driver if an established call is placed on hold without a suggested music - class. Asterisk will attempt to use an invalid pointer to the music - on hold class name, potentially causing a crash. - - * A remotely exploitable crash vulnerability was found in the Skinny (SCCP) - Channel driver. When an SCCP client closes its connection to the server, - a pointer in a structure is set to NULL. If the client was not in the - on-hook state at the time the connection was closed, this pointer is later - dereferenced. This allows remote authenticated connections the ability to - cause a crash in the server, denying services to legitimate users. - - These issues and their resolution are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-007 and AST-2012-008, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.12.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.4.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-007.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-008.pdf- The Asterisk Development Team has announced the release of Asterisk 10.4.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.4.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - * --- Prevent chanspy from binding to zombie channels - (Closes issue ASTERISK-19493. Reported by lvl) - - * --- Fix Dial m and r options and forked calls generating warnings - for voice frames. - (Closes issue ASTERISK-16901. Reported by Chris Gentle) - - * --- Remove ISDN hold restriction for non-bridged calls. - (Closes issue ASTERISK-19388. Reported by Birger Harzenetter) - - * --- Fix copying of CDR(accountcode) to local channels. - (Closes issue ASTERISK-19384. Reported by jamicque) - - * --- Ensure Asterisk acknowledges ACKs to 4xx on Replaces errors - (Closes issue ASTERISK-19303. Reported by Jon Tsiros) - - * --- Eliminate double close of file descriptor in manager.c - (Closes issue ASTERISK-18453. Reported by Jaco Kroon) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.0- The Asterisk Development Team has announced security releases for Asterisk 1.6.2, - 1.8, and 10. The available security releases are released as versions 1.6.2.24, - 1.8.11.1, and 10.3.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.6.2.24, 1.8.11.1, and 10.3.1 resolve the following two - issues: - - * A permission escalation vulnerability in Asterisk Manager Interface. This - would potentially allow remote authenticated users the ability to execute - commands on the system shell with the privileges of the user running the - Asterisk application. - - * A heap overflow vulnerability in the Skinny Channel driver. The keypad - button message event failed to check the length of a fixed length buffer - before appending a received digit to the end of that buffer. A remote - authenticated user could send sufficient keypad button message events that the - buffer would be overrun. - - In addition, the release of Asterisk 1.8.11.1 and 10.3.1 resolve the following - issue: - - * A remote crash vulnerability in the SIP channel driver when processing UPDATE - requests. If a SIP UPDATE request was received indicating a connected line - update after a channel was terminated but before the final destruction of the - associated SIP dialog, Asterisk would attempt a connected line update on a - non-existing channel, causing a crash. - - These issues and their resolution are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-004, AST-2012-005, and AST-2012-006, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.24 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.11.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.3.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-004.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-005.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-006.pdf- Update to 10.3.0- Update to 10.2.1 from upstream. - Fix remote stack overflow in app_milliwatt. - Fix remote stack overflow, including possible code injection, in HTTP digest authentication handling. - Disable asterisk-corosync package, as it doesn't build right now. - Resolves: rhbz#804045, rhbz#804038, rhbz#804042- * Add patch extracted from upstream to build with Corosync since - OpenAIS is no longer available. - * Add PrivateTmp=true to systemd service file (#782478) - * Add some macros to make it easier to build with fewer dependencies - (with corresponding less functionality) (#787389) - * Add isa macros in a few places plus a few other changes to make it - easier to cross-compile. (#787779)- The Asterisk Development Team has announced the release of Asterisk 10.1.2. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 10.1.2 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - * --- Fix SIP INFO DTMF handling for non-numeric codes --- - (Closes issue ASTERISK-19290. Reported by: Ira Emus) - - * --- Fix crash in ParkAndAnnounce --- - (Closes issue ASTERISK-19311. Reported-by: tootai) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.2- The Asterisk Development Team has announced the release of Asterisk 10.1.1. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 10.1.1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fixes deadlocks occuring in chan_agent --- - (Closes issue ASTERISK-19285. Reported by: Alex Villacis Lasso) - - * --- Ensure entering T.38 passthrough does not cause an infinite loop --- - (Closes issue ASTERISK-18951. Reported-by: Kristijan Vrban) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.1- The Asterisk Development Team is pleased to announce the release of - Asterisk 10.1.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 10.1.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * AST-2012-001: prevent crash when an SDP offer - is received with an encrypted video stream when support for video - is disabled and res_srtp is loaded. (closes issue ASTERISK-19202) - Reported by: Catalin Sanda - - * Allow playback of formats that don't support seeking. ast_streamfile - previously did unconditional seeking on files that broke playback of - formats that don't support that functionality. This patch avoids the - seek that was causing the problem. - (closes issue ASTERISK-18994) Patched by: Timo Teras - - * Add pjmedia probation concepts to res_rtp_asterisk's learning mode. In - order to better handle RTP sources with strictrtp enabled (which is the - default setting in 10) using the learning mode to figure out new sources - when they change is handled by checking for a number of consecutive (by - sequence number) packets received to an rtp struct based on a new - configurable value called 'probation'. Also, during learning mode instead - of liberally accepting all packets received, we now reject packets until a - clear source has been determined. - - * Handle AST_CONTROL_UPDATE_RTP_PEER frames in local bridge loop. Failing - to handle AST_CONTROL_UPDATE_RTP_PEER frames in the local bridge loop - causes the loop to exit prematurely. This causes a variety of negative side - effects, depending on when the loop exits. This patch handles the frame by - essentially swallowing the frame in the local loop, as the current channel - drivers expect the RTP bridge to handle the frame, and, in the case of the - local bridge loop, no additional action is necessary. - (closes issue ASTERISK-19095) Reported by: Stefan Schmidt Tested - by: Matt Jordan - - * Fix timing source dependency issues with MOH. Prior to this patch, - res_musiconhold existed at the same module priority level as the timing - sources that it depends on. This would cause a problem when music on - hold was reloaded, as the timing source could be changed after - res_musiconhold was processed. This patch adds a new module priority - level, AST_MODPRI_TIMING, that the various timing modules are now loaded - at. This now occurs before loading other resource modules, such - that the timing source is guaranteed to be set prior to resolving - the timing source dependencies. - (closes issue ASTERISK-17474) Reporter: Luke H Tested by: Luke H, - Vladimir Mikhelson, zzsurf, Wes Van Tlghem, elguero, Thomas Arimont - Patched by elguero - - * Fix RTP reference leak. If a blind transfer were initiated using a - REFER without a prior reINVITE to place the call on hold, AND if Asterisk - were sending RTCP reports, then there was a reference leak for the - RTP instance of the transferrer. - (closes issue ASTERISK-19192) Reported by: Tyuta Vitali - - * Fix blind transfers from failing if an 'h' extension - is present. This prevents the 'h' extension from being run on the - transferee channel when it is transferred via a native transfer - mechanism such as SIP REFER. (closes issue ASTERISK-19173) Reported - by: Ross Beer Tested by: Kristjan Vrban Patches: ASTERISK-19173 by - Mark Michelson (license 5049) - - * Restore call progress code for analog ports. Extracting sig_analog - from chan_dahdi lost call progress detection functionality. Fix - analog ports from considering a call answered immediately after - dialing has completed if the callprogress option is enabled. - (closes issue ASTERISK-18841) - Reported by: Richard Miller Patched by Richard Miller - - * Fix regression that 'rtp/rtcp set debup ip' only works when a port - was also specified. - (closes issue ASTERISK-18693) Reported by: Davide Dal Reviewed by: - Walter Doekes - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.0- Remove asterisk-ais. OpenAIS was removed from Fedora.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Don't build API docs as the build never finishes- The Asterisk Development Team is proud to announce the release of - Asterisk 10.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - Asterisk 10 is the next major release series of Asterisk. It will be a - Standard support release, similar to Asterisk 1.6.2. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - With the release of the Asterisk 10 branch, the preceding '1.' has been removed - from the version number per the blog post available at - - - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ - - The release of Asterisk 10 would not have been possible without the support and - contributions of the community. - - You can find an overview of the work involved with the 10.0.0 release in the - summary: - - http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt - - A short list of available features includes: - - * T.38 gateway functionality has been added to res_fax. - * Protocol independent out-of-call messaging support. Text messages not - associated with an active call can now be routed through the Asterisk - dialplan. SIP and XMPP are supported so far. - * New highly optimized and customizable ConfBridge application capable of mixing - audio at sample rates ranging from 8kHz-192kHz - * Addition of video_mode option in confbridge.conf to provide basic video - conferencing in the ConfBridge() dialplan application. - * Support for defining hints has been added to pbx_lua. - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES - - Also, when upgrading a system between major versions, it is imperative that you - read and understand the contents of the UPGRADE.txt file, which is located at: - - http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt- The Asterisk Development Team has announced the third release candidate of - Asterisk 10.0.0. This release candidate is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 10.0.0-rc3 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release candidate: - - * Add ASTSBINDIR to the list of configurable paths - - This patch also makes astdb2sqlite3 and astcanary use the configured - directory instead of relying on $PATH. - - * Don't crash on INFO automon request with no channel - - AST-2011-014. When automon was enabled in features.conf, it was possible - to crash Asterisk by sending an INFO request if no channel had been - created yet. - - * Fixed crash from orphaned MWI subscriptions in chan_sip - - This patch resolves the issue where MWI subscriptions are orphaned - by subsequent SIP SUBSCRIBE messages. - - * Fix a change in behavior in 'database show' from 1.8. - - In 1.8 and previous versions, one could use any fullword portion of - the key name, including the full key, to obtain the record. Until this - patch, this did not work for the full key. - - * Default to nat=yes; warn when nat in general and peer differ - - AST-2011-013. It is possible to enumerate SIP usernames when the general and - user/peer nat settings differ in whether to respond to the port a request is - sent from or the port listed for responses in the Via header. In 1.4 and - 1.6.2, this would mean if one setting was nat=yes or nat=route and the other - was either nat=no or nat=never. In 1.8 and 10, this would mean when one - was nat=force_rport and the other was nat=no. - - In order to address this problem, it was decided to switch the default - behavior to nat=yes/force_rport as it is the most commonly used option - and to strongly discourage setting nat per-peer/user when at all - possible. - - * Fixed SendMessage stripping extension from To: header in SIP MESSAGE - - When using the MessageSend application to send a SIP MESSAGE to a - non-peer, chan_sip stripped off the extension and failed to add it back - to the sip_pvt structure before transmitting. This patch adds the full - URI passed in from the message core to the sip_pvt structure. - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.0.0-rc3- The Asterisk Development Team has announced the second release candidate of - Asterisk 10.0.0. This release candidate is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 10.0.0-rc2 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release candidate: - - * Ensure that a null vmexten does not cause a segfault - - * Fix issue with ConfBridge participants hanging up during DTMF feature - menu usage getting stuck in conference forever - (closes issue ASTERISK-18829) - Reported by: zvision - - * Fix app_macro.c MODULEINFO section termination - (closes issue ASTERISK-18848) - Reported by: Tony Mountifield - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.0.0-rc2- The Asterisk Development Team is pleased to announce the first release candidate - of Asterisk 10.0.0. This release candidate is available for immediate download - at http://downloads.asterisk.org/pub/telephony/asterisk/ - - All Asterisk users are encouraged to participate in the Asterisk 10 testing - process. Please report any issues found to the issue tracker, - https://issues.asterisk.org/jira. It is also very useful to see successful test - reports. Please post those to the asterisk-dev mailing list. - - All Asterisk users are invited to participate in the #asterisk-testing - channel on IRC to work together in testing the many parts of Asterisk. - - Asterisk 10 is the next major release series of Asterisk. It will be a - Standard support release, similar to Asterisk 1.6.2. For more - information about support time lines for Asterisk releases, see the Asterisk - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - A short list of features includes: - - * T.38 gateway functionality has been added to res_fax. - * Protocol independent out-of-call messaging support. Text messages not - associated with an active call can now be routed through the Asterisk - dialplan. SIP and XMPP are supported so far. - * New highly optimized and customizable ConfBridge application capable of mixing - audio at sample rates ranging from 8kHz-192kHz - (More information available at - https://wiki.asterisk.org/wiki/display/AST/ConfBridge+10 ) - * Addition of video_mode option in confbridge.conf to provide basic video - conferencing in the ConfBridge() dialplan application. - * Support for defining hints has been added to pbx_lua. - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/10/CHANGES - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-rc1- Add patch from upstream SVN to fix AST-2011-012- Patch cleanup day- The Asterisk Development Team is pleased to announce the second beta release of - Asterisk 10.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - With the release of the Asterisk 10 branch, the preceding '1.' has been removed - from the version number per the blog post available at - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ - - All interested users of Asterisk are encouraged to participate in the - Asterisk 10 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - - All Asterisk users are invited to participate in the #asterisk-testing - channel on IRC to work together in testing the many parts of Asterisk. - - Asterisk 10 is the next major release series of Asterisk. It will be a - Standard support release, similar to Asterisk 1.6.2. For more - information about support time lines for Asterisk releases, see the Asterisk - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - A short list of features includes: - - * T.38 gateway functionality has been added to res_fax. - - * Protocol independent out-of-call messaging support. Text messages not - associated with an active call can now be routed through the Asterisk - dialplan. SIP and XMPP are supported so far. - - * New highly optimized and customizable ConfBridge application capable of mixing - audio at sample rates ranging from 8kHz-192kHz - - * Addition of video_mode option in confbridge.conf to provide basic video - conferencing in the ConfBridge() dialplan application. - - * Support for defining hints has been added to pbx_lua. - - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). - - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/10/CHANGES - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-beta2- - The Asterisk Development Team is pleased to announce the first beta release of - Asterisk 10.0.0-beta1. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - With the release of the Asterisk 10 branch, the preceding '1.' has been removed - from the version number per the blog post available at - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ - - All interested users of Asterisk are encouraged to participate in the - Asterisk 10 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - - All Asterisk users are invited to participate in the #asterisk-testing - channel on IRC to work together in testing the many parts of Asterisk. - Additionally users can make use of the RPM and DEB packages now being built for - all Asterisk releases. More information available at - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Packages - - Asterisk 10 is the next major release series of Asterisk. It will be a - Standard support release, similar to Asterisk 1.6.2. For more - information about support time lines for Asterisk releases, see the Asterisk - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - A short list of included features includes: - - * T.38 gateway functionality has been added to res_fax. - * Protocol independent out-of-call messaging support. Text messages not - associated with an active call can now be routed through the Asterisk - dialplan. SIP and XMPP are supported so far. - * New highly optimized and customizable ConfBridge application capable of mixing - audio at sample rates ranging from 8kHz-192kHz - * Addition of video_mode option in confbridge.conf to provide basic video - conferencing in the ConfBridge() dialplan application. - * Support for defining hints has been added to pbx_lua. - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/10/CHANGES?view=checkout - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-beta1- Perl mass rebuild- Perl mass rebuild- The Asterisk Development Team announces the release of Asterisk 1.8.5.0. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.5.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * Fix Deadlock with attended transfer of SIP call - (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81, - cmaj) - - * Fixes thread blocking issue in the sip TCP/TLS implementation. - (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois, - rossbeer, kowalma, Freddi_Fonet) - - * Be more tolerant of what URI we accept for call completion PUBLISH requests. - (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson) - - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on - channel made a call. - (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose) - - * This patch fixes a bug with MeetMe behavior where the 'P' option for always - prompting for a pin is ignored for the first caller. - (Closes issue #18070. Reported by mav3rick. Patched by bbryant) - - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If - the call that the dialplan started an AGI script for is hungup while the AGI - script is in the middle of a command then the AGI script is not notified of - the hangup. - (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett) - - * Resolve issue where leaving a voicemail, the MWI message is never sent. The - same thing happens when checking a voicemail and marking it as read. - (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard - Mudgett) - - * Resolve issue where wait for leader with Music On Hold allows crosstalk - between participants. Parenthesis in the wrong position. Regression from issue - #14365 when expanding conference flags to use 64 bits. - (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5.0- Rebuild for net-snmp 5.7- Fix systemd dependencies in EL6 and F15- The Asterisk Development Team has announced the first release candidate of - Asterisk 1.8.5. This release candidate is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.5-rc1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release candidate: - - * Fix Deadlock with attended transfer of SIP call - (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81, - cmaj) - - * Fixes thread blocking issue in the sip TCP/TLS implementation. - (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois, - rossbeer, kowalma, Freddi_Fonet) - - * Be more tolerant of what URI we accept for call completion PUBLISH requests. - (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson) - - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on - channel made a call. - (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose) - - * This patch fixes a bug with MeetMe behavior where the 'P' option for always - prompting for a pin is ignored for the first caller. - (Closes issue #18070. Reported by mav3rick. Patched by bbryant) - - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If - the call that the dialplan started an AGI script for is hungup while the AGI - script is in the middle of a command then the AGI script is not notified of - the hangup. - (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett) - - * Resolve issue where leaving a voicemail, the MWI message is never sent. The - same thing happens when checking a voicemail and marking it as read. - (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard - Mudgett) - - * Resolve issue where wait for leader with Music On Hold allows crosstalk - between participants. Parenthesis in the wrong position. Regression from issue - #14365 when expanding conference flags to use 64 bits. - (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett) - - * Fix timerfd locking issue. - (Closes ASTERISK-17867, ASTERISK-17415. Patched by kobaz) - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5-rc1- Fedora Directory Server -> 389 Directory Server- The Asterisk Development Team has announced the release of Asterisk - versions 1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security - releases. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 resolves the - following issue: - - AST-2011-011: Asterisk may respond differently to SIP requests from an - invalid SIP user than it does to a user configured on the system, even - when the alwaysauthreject option is set in the configuration. This can - leak information about what SIP users are valid on the Asterisk - system. - - For more information about the details of this vulnerability, please - read the security advisory AST-2011-011, which was released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.4 - - Security advisory AST-2011-011 is available at: - - http://downloads.asterisk.org/pub/security/AST-2011-011.pdf- Don't forget stereorize- Move /var/run/asterisk to /run/asterisk - Add comments to systemd service file on how to mimic safe_asterisk functionality - Build more of the optional binaries - Install the tmpfiles.d configuration on Fedora 15- The Asterisk Development Team has announced the release of Asterisk versions - 1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues - as outlined below: - - * AST-2011-008: If a remote user sends a SIP packet containing a null, - Asterisk assumes available data extends past the null to the - end of the packet when the buffer is actually truncated when - copied. This causes SIP header parsing to modify data past - the end of the buffer altering unrelated memory structures. - This vulnerability does not affect TCP/TLS connections. - -- Resolved in 1.6.2.18.1 and 1.8.4.3 - - * AST-2011-009: A remote user sending a SIP packet containing a Contact header - with a missing left angle bracket (<) causes Asterisk to - access a null pointer. - -- Resolved in 1.8.4.3 - - * AST-2011-010: A memory address was inadvertently transmitted over the - network via IAX2 via an option control frame and the remote party would try - to access it. - -- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3 - - The issues and resolutions are described in the AST-2011-008, AST-2011-009, and - AST-2011-010 security advisories. - - For more information about the details of these vulnerabilities, please read - the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3 - - Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available - at: - - http://downloads.asterisk.org/pub/security/AST-2011-008.pdf - http://downloads.asterisk.org/pub/security/AST-2011-009.pdf - http://downloads.asterisk.org/pub/security/AST-2011-010.pdf- Convert to systemd- Perl mass rebuild- Perl 5.14 mass rebuild- - The Asterisk Development Team has announced the release of Asterisk - version 1.8.4.2, which is a security release for Asterisk 1.8. - - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.8.4.2 resolves an issue with SIP URI - parsing which can lead to a remotely exploitable crash: - - Remote Crash Vulnerability in SIP channel driver (AST-2011-007) - - The issue and resolution is described in the AST-2011-007 security - advisory. - - For more information about the details of this vulnerability, please - read the security advisory AST-2011-007, which was released at the - same time as this announcement. - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.2 - - Security advisory AST-2011-007 is available at: - - http://downloads.asterisk.org/pub/security/AST-2011-007.pdf - - The Asterisk Development Team has announced the release of Asterisk 1.8.4.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.4.1 resolves several issues reported by the - community. Without your help this release would not have been possible. - Thank you! - - Below is a list of issues resolved in this release: - - * Fix our compliance with RFC 3261 section 18.2.2. (aka Cisco phone fix) - (Closes issue #18951. Reported by jmls. Patched by wdoekes) - - * Resolve a change in IPv6 header parsing due to the Cisco phone fix issue. - This issue was found and reported by the Asterisk test suite. - (Closes issue #18951. Patched by mnicholson) - - * Resolve potential crash when using SIP TLS support. - (Closes issue #19192. Reported by stknob. Patched by Chainsaw. Tested by - vois, Chainsaw) - - * Improve reliability when using SIP TLS. - (Closes issue #19182. Reported by st. Patched by mnicholson) - - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4.1 - The Asterisk Development Team has announced the release of Asterisk 1.8.4. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.4 resolves several issues reported by the community. - Without your help this release would not have been possible. Thank you! - - Below is a sample of the issues resolved in this release: - - * Use SSLv23_client_method instead of old SSLv2 only. - (Closes issue #19095, #19138. Reported, patched by tzafrir. Tested by russell - and chazzam. - - * Resolve crash in ast_mutex_init() - (Patched by twilson) - - * Resolution of several DTMF based attended transfer issues. - (Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo, - shihchuan, grecco. Patched by rmudgett) - - NOTE: Be sure to read the ChangeLog for more information about these changes. - - * Resolve deadlocks related to device states in chan_sip - (Closes issue #18310. Reported, patched by one47. Patched by jpeeler) - - * Resolve an issue with the Asterisk manager interface leaking memory when - disabled. - (Reported internally by kmorgan. Patched by russellb) - - * Support greetingsfolder as documented in voicemail.conf.sample. - (Closes issue #17870. Reported by edhorton. Patched by seanbright) - - * Fix channel redirect out of MeetMe() and other issues with channel softhangup - (Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb. - Patched by russellb) - - * Fix voicemail sequencing for file based storage. - (Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by - jpeeler) - - * Set hangup cause in local_hangup so the proper return code of 486 instead of - 503 when using Local channels when the far sides returns a busy. Also affects - CCSS in Asterisk 1.8+. - (Patched by twilson) - - * Fix issues with verbose messages not being output to the console. - (Closes issue #18580. Reported by pabelanger. Patched by qwell) - - * Fix Deadlock with attended transfer of SIP call - (Closes issue #18837. Reported, patched by alecdavis. Tested by - alecdavid, Irontec, ZX81, cmaj) - - Includes changes per AST-2011-005 and AST-2011-006 - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4 - - Information about the security releases are available at: - - http://downloads.asterisk.org/pub/security/AST-2011-005.pdf - http://downloads.asterisk.org/pub/security/AST-2011-006.pdf- The Asterisk Development Team has announced security releases for Asterisk - branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are - released as versions 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The releases of Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3 resolve two - issues: - - * File Descriptor Resource Exhaustion (AST-2011-005) - * Asterisk Manager User Shell Access (AST-2011-006) - - The issues and resolutions are described in the AST-2011-005 and AST-2011-006 - security advisories. - - For more information about the details of these vulnerabilities, please read the - security advisories AST-2011-005 and AST-2011-006, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.40.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.25 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.3 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.3 - - Security advisory AST-2011-005 and AST-2011-006 are available at: - - http://downloads.asterisk.org/pub/security/AST-2011-005.pdf - http://downloads.asterisk.org/pub/security/AST-2011-006.pdf- Bump release and rebuild for mysql 5.5.10 soname change.- The Asterisk Development Team has announced security releases for Asterisk - branches 1.6.1, 1.6.2, and 1.8. The available security releases are - released as versions 1.6.1.24, 1.6.2.17.2, and 1.8.3.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - ** This is a re-release of Asterisk 1.6.1.23, 1.6.2.17.1 and 1.8.3.1 which - contained a bug which caused duplicate manager entries (issue #18987). - - The releases of Asterisk 1.6.1.24, 1.6.2.17.2, and 1.8.3.2 resolve two issues: - - * Resource exhaustion in Asterisk Manager Interface (AST-2011-003) - * Remote crash vulnerability in TCP/TLS server (AST-2011-004) - - The issues and resolutions are described in the AST-2011-003 and AST-2011-004 - security advisories. - - For more information about the details of these vulnerabilities, please read the - security advisories AST-2011-003 and AST-2011-004, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.24 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.2 - - Security advisory AST-2011-003 and AST-2011-004 are available at: - - http://downloads.asterisk.org/pub/security/AST-2011-003.pdf - http://downloads.asterisk.org/pub/security/AST-2011-004.pdf- The Asterisk Development Team has announced security releases for Asterisk - branches 1.6.1, 1.6.2, and 1.8. The available security releases are - released as versions 1.6.1.23, 1.6.2.17.1, and 1.8.3.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The releases of Asterisk 1.6.1.23, 1.6.2.17.1, and 1.8.3.1 resolve two issues: - - * Resource exhaustion in Asterisk Manager Interface (AST-2011-003) - * Remote crash vulnerability in TCP/TLS server (AST-2011-004) - - The issues and resolutions are described in the AST-2011-003 and AST-2011-004 - security advisories. - - For more information about the details of these vulnerabilities, please read the - security advisories AST-2011-003 and AST-2011-004, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.23 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.1 - - Security advisory AST-2011-003 and AST-2011-004 are available at: - - http://downloads.asterisk.org/pub/security/AST-2011-003.pdf - http://downloads.asterisk.org/pub/security/AST-2011-004.pdf- The Asterisk Development Team has announced the release of Asterisk 1.8.3. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.3 resolves several issues reported by the community - and would have not been possible without your participation. Thank you! - - The following is a sample of the issues resolved in this release: - - * Resolve duplicated data in the AstDB when using DIALGROUP() - (Closes issue #18091. Reported by bunny. Patched by tilghman) - - * Ensure the ipaddr field in realtime is large enough to handle IPv6 addresses. - (Closes issue #18464. Reported, patched by IgorG) - - * Reworking parsing of mwi => lines to resolve a segfault. Also add a set of - unit tests for the function that does the parsing. - (Closes issue #18350. Reported by gbour. Patched by Marquis) - - * When using cdr_pgsql the billsec field was not populated correctly on - unanswered calls. - (Closes issue #18406. Reported by joscas. Patched by tilghman) - - * Resolve memory leak in iCalendar and Exchange calendaring modules. - (Closes issue #18521. Reported, patched by pitel. Tested by cervajs) - - * This version of Asterisk includes the new Compiler Flags option - BETTER_BACKTRACES which uses libbfd to search for better symbol information - within both the Asterisk binary, as well as loaded modules, to assist when - using inline backtraces to track down problems. - (Patched by tilghman) - - * Resolve issue where no Music On Hold may be triggered when using - res_timing_dahdi. - (Closes issues #18262. Reported by francesco_r. Patched by cjacobson. Tested - by francesco_r, rfrantik, one47) - - * Resolve a memory leak when the Asterisk Manager Interface is disabled. - (Reported internally by kmorgan. Patched by russellb) - - * Reimplemented fax session reservation to reverse the ABI breakage introduced - in r297486. - (Reported internally. Patched by mnicholson) - - * Fix regression that changed behavior of queues when ringing a queue member. - (Closes issue #18747, #18733. Reported by vrban. Patched by qwell.) - - * Resolve deadlock involving REFER. - (Closes issue #18403. Reported, tested by jthurman. Patched by jpeeler.) - - Additionally, this release has the changes related to security bulletin - AST-2011-002 which can be found at - http://downloads.asterisk.org/pub/security/AST-2011-002.pdf - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3- - The Asterisk Development Team has announced the third release candidate of - Asterisk 1.8.3. This release candidate is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.3-rc3 resolves the following issues in addition to - those included in 1.8.3-rc1 and 1.8.3-rc2: - - * Fix regression that changed behavior of queues when ringing a queue member. - (Closes issue #18747, #18733. Reported by vrban. Patched by qwell.) - - * Resolve deadlock involving REFER. - (Closes issue #18403. Reported, tested by jthurman. Patched by jpeeler.) - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3-rc3- Bump release to build for F15- Remove isa macros- Make library dependencies architecture specific- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildThe Asterisk Development Team has announced the second release candidate of Asterisk 1.8.3. This release candidate is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ The release of Asterisk 1.8.3-rc2 resolves the following issues in addition to those included in 1.8.3-rc1: * Resolve issue where no Music On Hold may be triggered when using res_timing_dahdi. (Closes issues #18262. Reported by francesco_r. Patched by cjacobson. Tested by francesco_r, rfrantik, one47) * Resolve a memory leak when the Asterisk Manager Interface is disabled. (Reported internally by kmorgan. Patched by russellb) * Reimplemented fax session reservation to reverse the ABI breakage introduced in r297486. (Reported internally. Patched by mnicholson) For a full list of changes in this release candidate, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3-rc2- - The Asterisk Development Team has announced the first release candidate of - Asterisk 1.8.3. This release candidate is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.3-rc1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release candidate: - - * Resolve duplicated data in the AstDB when using DIALGROUP() - (Closes issue #18091. Reported by bunny. Patched by tilghman) - - * Ensure the ipaddr field in realtime is large enough to handle IPv6 addresses. - (Closes issue #18464. Reported, patched by IgorG) - - * Reworking parsing of mwi => lines to resolve a segfault. Also add a set of - unit tests for the function that does the parsing. - (Closes issue #18350. Reported by gbour. Patched by Marquis) - - * When using cdr_pgsql the billsec field was not populated correctly on - unanswered calls. - (Closes issue #18406. Reported by joscas. Patched by tilghman) - - * Resolve memory leak in iCalendar and Exchange calendaring modules. - (Closes issue #18521. Reported, patched by pitel. Tested by cervajs) - - * This version of Asterisk includes the new Compiler Flags option - BETTER_BACKTRACES which uses libbfd to search for better symbol information - within both the Asterisk binary, as well as loaded modules, to assist when - using inline backtraces to track down problems. - (Patched by tilghman)- - The Asterisk Development Team has announced the release of Asterisk 1.8.2.3. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.2.3 resolves the following issue: - - * Reimplemented fax session reservation to reverse the ABI breakage introduced - in r297486. - (Reported by Jeremy Kister on the asterisk-users mailing list. Patched by - mnicholson) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2.3- Build with SRTP support- - The Asterisk Development Team has announced a release for the security issue - described in AST-2011-001. - - Due to a failed merge, Asterisk 1.8.2.1 which should have included the security - fix did not. Asterisk 1.8.2.2 contains the the changes which should have been - included in Asterisk 1.8.2.1. - - This releases is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, - 1.8.1.2, and 1.8.2.2 resolve an issue when forming an outgoing SIP request while - in pedantic mode, which can cause a stack buffer to be made to overflow if - supplied with carefully crafted caller ID information. The issue and resolution - are described in the AST-2011-001 security advisory. - - For more information about the details of this vulnerability, please read the - security advisory AST-2011-001, which was released at the same time as this - announcement. - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.2.2 - - Security advisory AST-2011-001 is available at: - - http://downloads.asterisk.org/pub/security/AST-2011-001.pdf- - The Asterisk Development Team has announced security releases for the following - versions of Asterisk: - - * 1.4.38.1 - * 1.4.39.1 - * 1.6.1.21 - * 1.6.2.15.1 - * 1.6.2.16.1 - * 1.8.1.2 - * 1.8.2.1 - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, - 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while - in pedantic mode, which can cause a stack buffer to be made to overflow if - supplied with carefully crafted caller ID information. The issue and resolution - are described in the AST-2011-001 security advisory. - - For more information about the details of this vulnerability, please read the - security advisory AST-2011-001, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.38.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.39.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.21 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.15.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.16.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.1.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.2.1 - - Security advisory AST-2011-001 is available at: - - http://downloads.asterisk.org/pub/security/AST-2011-001.pdf- - The Asterisk Development Team has announced the release of Asterisk 1.8.2. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.2 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * 'sip notify clear-mwi' needs terminating CRLF. - (Closes issue #18275. Reported, patched by klaus3000) - - * Patch for deadlock from ordering issue between channel/queue locks in - app_queue (set_queue_variables). - (Closes issue #18031. Reported by rain. Patched by bbryant) - - * Fix cache of device state changes for multiple servers. - (Closes issue #18284, #18280. Reported, tested by klaus3000. Patched, tested - by russellb) - - * Resolve issue where channel redirect function (CLI or AMI) hangs up the call - instead of redirecting the call. - (Closes issue #18171. Reported by: SantaFox) - (Closes issue #18185. Reported by: kwemheuer) - (Closes issue #18211. Reported by: zahir_koradia) - (Closes issue #18230. Reported by: vmarrone) - (Closes issue #18299. Reported by: mbrevda) - (Closes issue #18322. Reported by: nerbos) - - * Fix reloading of peer when a user is requested. Prevent peer reloading from - causing multiple MWI subscriptions to be created when using realtime. - (Closes issue #18342. Reported, patched by nivek.) - - * Fix XMPP PubSub-based distributed device state. Initialize pubsubflags to 0 - so res_jabber doesn't think there is already an XMPP connection sending - device state. Also clean up CLI commands a bit. - (Closes issue #18272. Reported by klaus3000. Patched by Marquis42) - - * Don't crash after Set(CDR(userfield)=...) in ast_bridge_call. Instead of - setting peer->cdr = NULL, set it to not post. - (Closes issue #18415. Reported by macbrody. Patched, tested by jsolares) - - * Fixes issue with outbound google voice calls not working. Thanks to az1234 - and nevermind_quack for their input in helping debug the issue. - (Closes issue #18412. Reported by nevermind_quack. Patched by dvossel) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2- - The Asterisk Development Team has announced the release of Asterisk 1.8.1.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.1.1 resolves two issues reported by the community - since the release of Asterisk 1.8.1. - - * Don't crash after Set(CDR(userfield)=...) in ast_bridge_call. Instead of - setting peer->cdr = NULL, set it to not post. - (Closes issue #18415. Reported by macbrody. Patched, tested by jsolares) - - * Fixes issue with outbound google voice calls not working. Thanks to az1234 - and nevermind_quack for their input in helping debug the issue. - (Closes issue #18412. Reported by nevermind_quack. Patched by dvossel) - - For a full list of changes in this release candidate, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.1.1- - The Asterisk Development Team has announced the release of Asterisk 1.8.1. This - release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - The release of Asterisk 1.8.1 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * Fix issue when using directmedia. Asterisk needs to limit the codecs offered - to just the ones that both sides recognize, otherwise they may end up sending - audio that the other side doesn't understand. - (Closes issue #17403. Reported, patched by one47. Tested by one47, falves11) - - * Resolve issue where Party A in an analog 3-way call would continue to hear - ringback after party C answers. - (Patched by rmudgett) - - * Fix playback failure when using IAX with the timerfd module. - (Closes issue #18110. Reported, tested by tpanton. Patched by jpeeler) - - * Fix problem with qualify option packets for realtime peers never stopping. - The option packets not only never stopped, but if a realtime peer was not in - the peer list multiple options dialogs could accumulate over time. - (Closes issue #16382. Reported by lftsy. Tested by zerohalo. Patched by - jpeeler) - - * Fix issue where it is possible to crash Asterisk by feeding the curl engine - invalid data. - (Closes issue #18161. Reported by wdoekes. Patched by tilghman) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.1- dont package up the ices bits on el the client doesnt exist for us- dont build the 389 directory server package its not available on rhel6- dont always build AIS modules we dont have the BuildRequires on epel- Rebuild for new net-snmp.- Always build AIS modules- The Asterisk Development Team is proud to announce the release of Asterisk - 1.8.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/ - - Asterisk 1.8 is the next major release series of Asterisk. It will be a Long - Term Support (LTS) release, similar to Asterisk 1.4. For more information about - support time lines for Asterisk releases, see the Asterisk versions page. - - http://www.asterisk.org/asterisk-versions - - The release of Asterisk 1.8.0 would not have been possible without the support - and contributions of the community. Since Asterisk 1.6.2, we've had over 500 - reporters, more than 300 testers and greater than 200 developers contributed to - this release. - - You can find a summary of the work involved with the 1.8.0 release in the - sumary: - - http://svn.asterisk.org/svn/asterisk/tags/1.8.0/asterisk-1.8.0-summary.txt - - A short list of available features includes: - - * Secure RTP - * IPv6 Support in the SIP channel driver - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup - - For a full list of changes in the current release candidate, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0 - - Thank you for your continued support of Asterisk!- - The release of Asterisk 1.8.0-rc5 was triggered by some last minute platform - compatibility IPv6 changes. In addition, the availability of the English sound - prompts with Australian accents has been added. - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup - - For a full list of changes in the current release candidate, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc5 - - This release candidate contains fixes since the last release candidate as - reported by the community. A sampling of the changes in this release candidate - include: - - * Additional fixups in chan_gtalk that allow outbound calls to both Google - Talk and Google Voice recipients. Adds new chan_gtalk enhancements externip - and stunaddr. - (Closes issue #13971. Patched by dvossel) - - * Resolve manager crash issue. - (Closes issue #17994. Reported by vrban. Patchd by dvossel) - - * Documentation updates for sample configuration files. - (Closes issues #18107, #18101. Reported, patched by lathama, lmadsen) - - * Resolve issue where faxdetect would only detect the first fax call in - chan_dahdi. - (Closes issue #18116. Reported by seandarcy. Patched by rmudgett) - - * Resolve issue where a channel that is setup and torn down *very* quickly may - not have the right call disposition or ${DIALSTATUS}. - (Closes issue #16946. Reported by davidw. Review - https://reviewboard.asterisk.org/r/740/) - - * Set TCLASS field of IPv6 header when SIP QoS options are set. - (Closes issue #18099. Reported by jamesnet. Patched by dvossel) - - * Resolve issue where Asterisk could crash on shutdown when using SRTP. - (Closes issue #18085. Reported by st. Patched by twilson) - - * Fix issue where peers host port would be lost on a SIP reload. - (Closes issue #18135. Reported, tested by lmadsen. Patched by dvossel) - - A short list of available features includes: - - * Secure RTP - * IPv6 Support in the SIP channel driver - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup - - For a full list of changes in the current release candidate, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc4- This release candidate contains fixes since the release candidate as reported by - the community. A sampling of the changes in this release candidate include: - - * Still build chan_sip even if res_crypto cannot be built (use, but not depend) - (Reported by a user on the mailing list. Patched by tilghman) - - * Get notifications for call files only when a file is closed, not when created - (Closes issue #17924. Reported by mkeuter. Patched by abeldeck) - - * Fixes to chan_gtalk to allow outbound DTMF support to work correctly. Gtalk - expects the DTMF to arrive on the RTP stream and not via jingle DTMF - signalling. - (Patched by dvossel. Tested by malcolmd) - - * Fixes to allow chan_gtalk to communicate with the Gmail web client. - (Patched by phsultan and dvossel) - - * Fix to GET DATA to allow audio to be streamed via an AGI. - (Closes issue #18001. Reported by jamicque. Patched by tilghman) - - * Resolve dnsmgr memory corruption in chan_iax2. - (Closes issue #17902. Reported by afried. Patched by russell, dvossel) - - A short list of available features includes: - - * Secure RTP - * IPv6 Support in the SIP channel driver - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout - - For a full list of changes in the current release candidate, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc3- This release candidate contains fixes since the last beta release as reported by - the community. A sampling of the changes in this release candidate include: - - * Add slin16 support for format_wav (new wav16 file extension) - (Closes issue #15029. Reported, patched by andrew. Tested by Qwell) - - * Fixes a bug in manager.c where the default configuration values weren't reset - when the manager configuration was reloaded. - (Closes issue #17917. Reported by lmadsen. Patched by bbryant) - - * Various fixes for the calendar modules. - (Patched by Jan Kalab. - Reviewboard: https://reviewboard.asterisk.org/r/880/ - Closes issue #17877. Review: https://reviewboard.asterisk.org/r/916/ - Closes issue #17776. Review: https://reviewboard.asterisk.org/r/921/) - - * Add CHANNEL(checkhangup) to check whether a channel is in the process of - being hung up. - (Closes issue #17652. Reported, patched by kobaz) - - * Fix a bug with MeetMe where after announcing the amount of time left in a - conference, if music on hold was playing, it doesn't restart. - (Closes issue #17408, Reported, patched by sysreq) - - * Fix interoperability problems with session timer behavior in Asterisk. - (Closes issue #17005. Reported by alexcarey. Patched by dvossel) - - * Rate limit calls to fsync() to 1 per second after astdb updates. Astdb was - determined to be one of the most significant bottlenecks in SIP registration - processing. This patch improved the speed of an astdb load test by 50000% - (yes, Fifty-Thousand Percent). On this particular load test setup, this - doubled the number of SIP registrations the server could handle. - (Review: https://reviewboard.asterisk.org/r/825/) - - * Don't clear the username from a realtime database when a registration - expires. Non-realtime chan_sip does not clear the username from memory when a - registration expiries so realtime probably shouldn't either. - (Closes issue #17551. Reported, patched by: ricardolandim. Patched by - mnicholson) - - * Don't hang up a call on an SRTP unprotect failure. Also make it more obvious - when there is an issue en/decrypting. - (Closes issue #17563. Reported by Alexcr. Patched by sfritsch. Tested by - twilson) - - * Many more issues. This is a significant upgrade over Asterisk 1.8.0 beta 5! - - A short list of available features includes: - - * Secure RTP - * IPv6 Support in the SIP channel driver - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout - - For a full list of changes in the current release candidate, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc2- This release contains fixes since the last beta release as reported by the - community. A sampling of the changes in this release include: - - * Fix issue where TOS is no longer set on RTP packets. - (Closes issue #17890. Reported, patched by elguero) - - * Change pedantic default value in chan_sip from 'no' to 'yes' - - * Asterisk now dynamically builds the "Supported" header depending on what is - enabled/disabled in sip.conf. Session timers used to always be advertised as - being supported even when they were disabled in the configuration. - (Related to issue #17005. Patched by dvossel) - - * Convert MOH to use generic timers. - (Closes issue #17726. Reported by lmadsen. Patched by tilghman) - - * Fix SRTP for changing SSRC and multiple a=crypto SDP lines. Adding code to - Asterisk that changed the SSRC during bridges and masquerades broke SRTP - functionality. Also broken was handling the situation where an incoming - INVITE had more than one crypto offer. - (Closes issue #17563. Reported by Alexcr. Patched by twilson) - - Asterisk 1.8 contains many new features over previous releases of Asterisk. - A short list of included features includes: - - * Secure RTP - * IPv6 Support in the SIP Channel - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta5- This release contains fixes since the last beta release as reported by the - community. A sampling of the changes in this release include: - - * Fix parsing of IPv6 address literals in outboundproxy - (Closes issue #17757. Reported by oej. Patched by sperreault) - - * Change the default value for alwaysauthreject in sip.conf to "yes". - (Closes issue #17756. Reported by oej) - - * Remove current STUN support from chan_sip.c. This change removes the current - broken/useless STUN support from chan_sip. - (Closes issue #17622. Reported by philipp2. - Review: https://reviewboard.asterisk.org/r/855/) - - * PRI CCSS may use a stale dial string for the recall dial string. If an - outgoing call negotiates a different B channel than initially requested, the - saved original dial string was not transferred to the new B channel. CCSS - uses that dial string to generate the recall dial string. - (Patched by rmudgett) - - * Split _all_ arguments before parsing them. This fixes multicast RTP paging - using linksys mode. - (Patched by russellb) - - * Expand cel_custom.conf.sample. Include the usage of CSV_QUOTE() to ensure - data has valid CSV formatting. Also list the special CEL variables that are - available for use in the mapping. There are also several other CEL fixes in - this release. - (Patched by russellb) - - Asterisk 1.8 contains many new features over previous releases of Asterisk. - A short list of included features includes: - - * Secure RTP - * IPv6 Support in the SIP Channel - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta4- - This release contains fixes since the last beta release as reported by the - community. A sampling of the changes in this release include: - - * Fix a regression where HTTP would always be enabled regardless of setting. - (Closes issue #17708. Reported, patched by pabelanger) - - * ACL errors displayed on screen when using dynamic_exclude_static in sip.conf - (Closes issue #17717. Reported by Dennis DeDonatis. Patched by mmichelson) - - * Support "channels" in addition to "channel" in chan_dahdi.conf. - (https://reviewboard.asterisk.org/r/804) - - * Fix parsing error in sip_sipredirect(). The code was written in a way that - did a bad job of parsing the port out of a URI. Specifically, it would do - badly when dealing with an IPv6 address. - (Closes issue #17661. Reported by oej. Patched by mmichelson) - - * Fix inband DTMF detection on outgoing ISDN calls. - (Patched by russellb and rmudgett) - - * Fixes issue with translator frame not getting freed. This issue prevented - g729 licenses from being freed up. - (Closes issue #17630. Reported by manvirr. Patched by dvossel) - - * Fixed IPv6-related SIP parsing bugs and updated documention. - (Reported by oej. Patched by sperreault) - - * Add new, self-contained feature FIELDNUM(). Returns a 1-based index into a - list of a specified item. Matches up with FIELDQTY() and CUT(). - (Closes #17713. Reported, patched by gareth. Tested by tilghman) - - Asterisk 1.8 contains many new features over previous releases of Asterisk. - A short list of included features includes: - - * Secure RTP - * IPv6 Support - * Connected Party Identification Support - * Calendaring Integration - * A new call logging system, Channel Event Logging (CEL) - * Distributed Device State using Jabber/XMPP PubSub - * Call Completion Supplementary Services support - * Advice of Charge support - * Much, much more! - - A full list of new features can be found in the CHANGES file. - - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout - - For a full list of changes in the current release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta3- Rebuild against libpri 1.4.12- Update to 1.8.0-beta2 - Disable building chan_misdn until compilation errors are figured out (https://issues.asterisk.org/view.php?id=14333) - Start stripping tarballs again because Digium added MP3 code :(- - The following are a few of the issues resolved by community developers: - - * Allow users to specify a port for DUNDI peers. - (Closes issue #17056. Reported, patched by klaus3000) - - * Decrease the module ref count in sip_hangup when SIP_DEFER_BYE_ON_TRANSFER is - set. - (Closes issue #16815. Reported, patched by rain) - - * If there is realtime configuration, it does not get re-read on reload unless - the config file also changes. - (Closes issue #16982. Reported, patched by dmitri) - - * Send AgentComplete manager event for attended transfers. - (Closes issue #16819. Reported, patched by elbriga) - - * Correct manager variable 'EventList' case. - (Closes issue #17520. Reported, patched by kobaz) - - In addition, changes to res_timing_pthread that should make it more stable have - also been implemented. - - For a full list of changes in the current release, please see the - ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.10- Add patch to remove requirement on latex2html- Mass rebuild with perl-5.12.0- * Fix building CDR and CEL SQLite3 modules. - (Closes issue #17017. Reported by alephlg. Patched by seanbright) - - * Resolve crash in SLAtrunk when the specified trunk doesn't exist. - (Reported in #asterisk-dev by philipp64. Patched by seanbright) - - * Include an extra newline after "Aliased CLI command" to get back the prompt. - (Issue #16978. Reported by jw-asterisk. Tested, patched by seanbright) - - * Prevent segfault if bad magic number is encountered. - (Issue #17037. Reported, patched by alecdavis) - - * Update code to reflect that handle_speechset has 4 arguments. - (Closes issue #17093. Reported, patched by gpatri. Tested by pabelanger, - mmichelson) - - * Resolve a deadlock in chan_local. - (Closes issue #16840. Reported, patched by bzing2, russell. Tested by bzing2)- Update to 1.6.2.7-rc3- Update to 1.6.2.7-rc2- Update to final 1.6.2.6 - - The following are a few of the issues resolved by community developers: - - * Make sure to clear red alarm after polarity reversal. - (Closes issue #14163. Reported, patched by jedi98. Tested by mattbrown, - Chainsaw, mikeeccleston) - - * Fix problem with duplicate TXREQ packets in chan_iax2 - (Closes issue #16904. Reported, patched by rain. Tested by rain, dvossel) - - * Fix crash in app_voicemail related to message counting. - (Closes issue #16921. Reported, tested by whardier. Patched by seanbright) - - * Overlap receiving: Automatically send CALL PROCEEDING when dialplan starts - (Reported, Patched, and Tested by alecdavis) - - * For T.38 reINVITEs treat a 606 the same as a 488. - (Closes issue #16792. Reported, patched by vrban) - - * Fix ConfBridge crash when no timing module is loaded. - (Closes issue #16471. Reported, tested by kjotte. Patched, tested by junky) - - For a full list of changes in this releases, please see the ChangeLog: - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.6- Update to 1.6.2.6-rc2- Add a patch that fixes CLI history when linking against external libedit.- Update to 1.6.2.5 - - * AST-2010-002: Invalid parsing of ACL rules can compromise security- Update to 1.6.2.4 - - * AST-2010-002: This security release is intended to raise awareness - of how it is possible to insert malicious strings into dialplans, - and to advise developers to read the best practices documents so - that they may easily avoid these dangers.- Update to 1.6.2.2 - - * AST-2010-001: An attacker attempting to negotiate T.38 over SIP can - remotely crash Asterisk by modifying the FaxMaxDatagram field of - the SDP to contain either a negative or exceptionally large value. - The same crash occurs when the FaxMaxDatagram field is omitted from - the SDP as well.- Update to 1.6.2.1 final: - - * CLI 'queue show' formatting fix. - (Closes issue #16078. Reported by RoadKill. Tested by dvossel. Patched by - ppyy.) - - * Fix misreverting from 177158. - (Closes issue #15725. Reported, Tested by shanermn. Patched by dimas.) - - * Fixes subscriptions being lost after 'module reload'. - (Closes issue #16093. Reported by jlaroff. Patched by dvossel.) - - * app_queue segfaults if realtime field uniqueid is NULL - (Closes issue #16385. Reported, Tested, Patched by haakon.) - - * Fix to Monitor which previously assumed the file to write to did not contain - pathing. - (Closes issue #16377, #16376. Reported by bcnit. Patched by dant.- Update to 1.6.2.1-rc1- Released version of 1.6.2.0- Update to 1.6.2.0-rc8- Update to 1.6.2.0-rc7- Change the logrotate and the init scripts so that Asterisk doesn't try and write to / or /root- Make dependency on uw-imap conditional and some other changes to make building on RHEL5 easier.- Update to 1.6.2.0-rc6- Update to 1.6.2.0-rc5- Update to 1.6.2.0-rc4- Add patch from upstream to fix how res_http_post forms paths.- Add an AST_EXTRA_ARGS option to the init script - have the init script to cd to /var/spool/asterisk to prevent annoying message- Compile against gmime 2.2 instead of gmime 2.4 because the patch to convert the API calls from 2.2 to 2.4 caused crashes.- Require latex2html used in static-http documents- Change ownership and permissions on config files to protect them.- Update to 1.6.2.0-rc3- Merge firmware subpackage back into the main package.- Package internal help. - Fix up some more paths in the configs so that everything ends up where we want them.- Update to 1.6.2.0-rc2 - We no longer need to strip the tarball as it no longer includes non-free items.- Enable building of API docs. - Depend on version 1.2 or newer of speex- Update to 1.6.1.6 - Drop patches that are too troublesome to maintain anymore or have been integrated upstream.- Add a patch from Quentin Armitage and rebuld.- rebuilt with new openssl- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Rebuild to pick up new AIS and ODBC deps. - Update script that strips out bad content from tarball to do the download and to check the GPG signature.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Update to 1.6.1-rc1 - Add backport of conference bridging that is slated for 1.6.2 - Add patches to conference bridging that implement CLI apps- rebuild with new openssl- Fedora Directory Server compatibility patch/subpackage.- Fix up paths. BZ#477238- Update patches- Update to 1.6.1-beta4- Update to 1.6.1-beta3- Rebuild for new gmime- Add patch to fix missing variable on PPC.- Update PPC systems don't have sys/io.h patch.- PPC systems don't have sys/io.h- Update to 1.6.1 beta 2- Fix issue with init script giving wrong path to config file.- Explicitly require dahdi-tools-libs to see if we can get this to build.- Update to final release.- Rebuild- Replace app_rxfax/app_txfax with app_fax taken from upstream SVN.- Bump release and rebuild with new libpri and zaptel.- Add patch pulled from upstream SVN that fixes AST-2008-010 and AST-2008-011.- Add patch for LDAP extracted from upstream SVN (#442011)- Add patch that unbreaks cdr_tds with FreeTDS 0.82. - Properly obsolete conference subpackage.- Disable building cdr_tds since new FreeTDS in rawhide no longer provides needed library.- Bump release and rebuild to fix libtds breakage.- Update to 1.6.0-beta9. - Update patches so that they apply cleanly. - Temporarily disable app_conference patch as it doesn't compile - config/scripts/postgres_cdr.sql has been merged into realtime_pgsql.sql - Re-add the asterisk-strip.sh script as a source file.- Update to 1.6.0-beta8 - Contains fixes for AST-2008-006 / CVE-2008-1897- Return to stripped tarballs since there's more non-free content in the Asterisk tarballs than I thought.- Update to 1.6.0-beta7.1 - Update patches - Back out some changes that were made because beta7 was tagged from the wrong branch.- Update to 1.6.0-beta7 - The Asterisk tarball no longer contains the iLBC code, so we can directly use the upstream tarball without having to modify it. - Get rid of the asterisk-strip.sh script since it's no longer needed. - Diable build of codec_ilbc and format_ilbc (these do not contain any legally suspect code so they can be included in the tarball but it's pointless building them). - Update chan_mobile patch to fix API breakages. - Add a patch to chan_usbradio to fix API breakages.- Add Postgresql schemas from contrib as documentation to the Postgresql subpackage.- Update patches. - Add patch to compile against external libedit rather than using the in-tree version. - Add -Werror-implicit-function-declaration to optflags. - Get rid of hashtest and hashtest2 binaries that link to unfortified versions of *printf functions. They are compiled with -O0 which somehow pulls in the wrong versions. These programs aren't necessary to the operation of the package anyway.- Update to 1.6.0-beta6 to fix some security issues. - - AST-2008-002 details two buffer overflows that were discovered in - RTP codec payload type handling. - * http://downloads.digium.com/pub/security/AST-2008-002.pdf - * All users of SIP in Asterisk 1.4 and 1.6 are affected. - - AST-2008-003 details a vulnerability which allows an attacker to - bypass SIP authentication and to make a call into the context - specified in the general section of sip.conf. - * http://downloads.digium.com/pub/security/AST-2008-003.pdf - * All users of SIP in Asterisk 1.0, 1.2, 1.4, or 1.6 are affected. - - AST-2008-004 Logging messages displayed using the ast_verbose - logging API call are not displayed as a character string, they are - displayed as a format string. - * http://downloads.digium.com/pub/security/AST-2008-004.pdf - - AST-2008-005 details a problem in the way manager IDs are caculated. - * http://downloads.digium.com/pub/security/AST-2008-005.pdf- add Requires for versioned perl (libperl.so)- Update to 1.6.0-beta5 - Remove upstreamed patches.- Package the directory used to store monitor recordings.- Add patch from David Woodhouse that fixes building on PPC64.- Update to 1.6.0 beta 4- Update to 1.4.18. - Use -march=i486 on i386 builds for atomic operations (GCC 4.3 compatibility). - Use "logger reload" instead of "logger rotate" in logrotate file (#432197). - Don't explicitly specify a group in in the init script to prevent Zaptel breakage (#426629). - Split app_ices out to a separate package so that the ices package can be required. - pbx_kdeconsole has been dropped, don't specifically exclude it from the build anymore. - Update app_conference patch. - Drop upstreamed libcap patch.- Update to 1.4.17 to fix AST-2008-001.- Update to 1.4.16.2- Bump release and rebuild to fix broken dep on uw-imap.- Update to the real 1.4.16.1.- Add patch to bring source up to version 1.4.16.1 which will be released shortly to fix some crasher bugs introduced by 1.4.16.- Update to 1.4.16 to fix security bug.- Really, really fix the build problems on devel.- Tweaks to get to build on x86_64- Exclude PPC64- Don't build apidocs by default since there's a problem building on x86_64.- Really get rid of zero length map files.- Get rid of zero length map files. - Shorten descriptions of voicemail subpackages- Update to 1.4.15- Fix license and other rpmlint warnings.- Update to 1.4.14- Add chan_mobile- Don't build cdr_sqlite because sqlite2 has been orphaned. - Rebase local patches to latest upstream SVN - Update app_conference patch to latest from upstream SVN - Apply post-1.4.13 patches from upstream SVN- Update to 1.4.13- Update to 1.4.12.1- Update to 1.4.11- Update to 1.4.10.1.- Update to 1.4.10 (security update).- Add a patch that allows alternate extensions to be defined in users.conf- Update app_conference patch. Enter/leave sounds are now possible.- Update patches so we don't need to run auto* tools, because autoconf 2.60 is required and FC-6 and RHEL5 only have autoconf 2.59.- Don't build app_mp3- Add app_conference- Use plain useradd/groupadd rather than the fedora-usermgmt - Clean up requirements - Clean up build requirements by moving them to package sections- Update to 1.4.9- Update to 1.4.8 - Drop ixjuser patch.- Update to 1.4.7.1- Update to 1.4.7 - RxFAX/TxFAX applications- It's "sbin", not "bin" silly.- Add patch that lets us change TOS bits even when running non-root- voicemail needs to require /usr/bin/sox and /usr/bin/sendmail- Update to 1.4.6 - Remove upstreamed patch.- Build the IMAP and ODBC storage options of voicemail and split voicemail out into subpackages. - Apply patch so that the system UW IMAP libray can be linked against. - Patch modules.conf.sample so that alternal voicemail modules don't get loaded simultaneously. - Link against system GSM library rather than internal copy. - Patch the Makefile so that it doesn't add redundant/wrong compiler options. - Force building with the standard RPM optimization flags. - Install the Asterisk MIB in a location that net-snmp can find it. - Only package docs in the main package that are relevant and that haven't been packaged by a subpackage. - Other minor cleanups.- Move sounds- Update some more ownership/permissions- Fix some permissions.- Update init script patch - Move pid file to subdir of /var/run- Update init script patch to run as non-root- Build modules that depend on FreeTDS. - Don't build voicemail with ODBC storage.- Have the build output the commands executing, rather than covering them up.- Update to 1.4.5 - Remove upstreamed patch.- Add a patch to fix CVE-2007-2488/ASA-2007-013- Update to 1.4.4- Update to 1.4.2- Package the IAXy firmware - Minor clean-ups in files- Update to 1.4.1 - Don't build/package codec_zap (zaptel 1.4.0 doesn't support it)- Update to 1.4.0-beta4 - Various cleanups.- Don't package IAXy firmware because of license - Don't build app_rpt - Don't BR lm_sensors on PPC - Better way to prevent download/installation of sound archives - Redo tarball to eliminate non-free items- Remove explicit dependency on glibc-kernheaders. - Build jabber modules on PPC- *Really* update to beta3 - chan_jingle has been taken out of 1.4 - Move misplaced binaries to where they should be- Remove requirement on asterisk-sounds-core until licensing can be figured out.- Update to 1.4.0-beta3- Update to 1.4.0-beta2- Update to 1.2.10.- Update to 1.2.9.1- Update to 1.2.8 - Add misdn.conf to list of configs. - Drop chan_bluetooth patch for now...- Zaptel subpackage shouldn't obsolete the sqlite subpackage. - Remove mISDN until build issues can be figured out.- Build mISDN channel drivers, modelled after spec file from David Woodhouse- Update chan_bluetooth patch with some additional information as to it's source and comment out more in the configuration file.- Add chan_bluetooth- Split off more stuff into subpackages.- Update to 1.2.7- Fix detection of libpri on 64 bit arches (taken from Matthias Saou's rpmforge package) - Change sqlite subpackage name to sqlite2 (there are sqlite3 modules in development).- Don't build GTK 1.X console since GTK 1.X is being moved out of core...- Update to 1.2.6- Update to 1.2.5. - Removed upstreamed MOH patch. - Add full urls to the app_(r|t)xfax.c sources. - Update spandsp patch.- Actually apply the patch.- Add patch to keep Asterisk from crashing when using MOH inside a MeetMe conference.- BR sqlite2-devel- Update to 1.2.4.- Took some tricks from Asterisk packages by Roy-Magne Mo. - Enable gtk console module. - BR gtk+-devel. - Add logrotate script. - BR sqlite2-devel and new sqlite subpackage. - BR doxygen and graphviz for building duxygen documentation. (But don't build it yet.)- Completely eliminate the "asterisk" user from the spec file. - Move more config files to subpackages. - Consolidate two patches that patch the init script. - BR curl-devel - BR alsa-lib-devel - alsa, curl, oss subpackages- Do not run as user "asterisk" as that prevents setting of IP TOS (which is bad for quality of service). - Add patch for setting TOS separately for SIP and RTP packets.- First version for Fedora Extras. 18.12.1-1.el8.218.12.1-1.el8.2debug.build-id1966929f4e36d7eb06d9813e12d1623d2b7490.21966929f4e36d7eb06d9813e12d1623d2b7490.2.debugab3daf3cf39989ae11aaa101f364b0033ad46a.2ab3daf3cf39989ae11aaa101f364b0033ad46a.2.debugusrlib64asteriskmodulesapp_directory_plain.so-18.12.1-1.el8.2.aarch64.debugapp_voicemail_plain.so-18.12.1-1.el8.2.aarch64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id/1e//usr/lib/debug/.build-id/3f//usr/lib/debug/usr//usr/lib/debug/usr/lib64//usr/lib/debug/usr/lib64/asterisk//usr/lib/debug/usr/lib64/asterisk/modules/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -Werror-implicit-function-declaration -DLUA_COMPAT_MODULE -fPICcpioxz2aarch64-redhat-linux-gnudirectorysymbolic link to ../../../../../usr/lib/debug/usr/lib64/asterisk/modules/app_directory_plain.so-18.12.1-1.el8.2.aarch64.debugELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3fab3daf3cf39989ae11aaa101f364b0033ad46a, with debug_info, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e1966929f4e36d7eb06d9813e12d1623d2b7490, with debug_info, not strippedhttps://bugz.fedoraproject.org/asteriskasterisk-debugsource(aarch-64)18.12.1-1.el8.2utf-84803ce783215e5d09fa715ba2b8a863d52e0ff0b54dbc25d3276b781a91f1937?@7zXZ !#,⷟] b2u jӫ`(y.r2b3J!0S!s#N G` H;jbL0"9 Zkۈ_/49na_[zE(CYGb5s.Sr[9$}$ӧqt}Z 34tC+,7kFb8N.h&i6uv+< uov᝟nvVVNp|acNh_mXmt/;zR>n1+HB1%wra%&Zg1nOL*`ߏ۾(^mm^c*llN K8Uy Oo%EPW;WU%1 E8v1AD]r!<N6K|ӘCs;MQ9#'6KSjl委ڠ$wIZc$'0pvUkm%+Gvvy&L}~u|=`p=ׁ**Z]li]DǓ1g7XIc0vr}ϛs׺U1M`F%[+>:0Je=Fgɔ!UŒOF1F~Z\INz|t)ٯ0+n(_dN+ҫWW11yI_ S#Sе*$IxA ]hj8Ҧw%S?ܓÒۘ˦U i>⼘)<ڌ:0CA\llR-9aݤ Qa "eEѠIexRXy ؾ0xH "U+lR|L +xyA\>v~uH6+|\5h+!?O؏Z)4ksl GXLj޾.F( { ЍF] ht44t{Iv/ic]PuRRZO7fWr7i218"}MzDeN{:Yhy_y*m/޿_#Mٸy~B,0Yu̹Gi[B~@~ޗ\D .]ѡNx' -I}r5 tlPкZB7 ³A?-헟gc{J+Շo' m;ImrIqp5:ttOl(~1qFyzT9'ZxrS?&|2}EG=hf,g 4p_b%=qC=>M"e^g6xqtE{ScQϔ8n#Э$CA'M7CkgcJmOGX}ٗk Ƀ@k&JhbZܛ2t`{VܜF0wZJ[/%q`Yk)O&=7rG:[:b(}QI~`՞Sd 6_(?]z,bL0&D" 14T9wx%5 4-5Y~z8ey! Lߥx"v& l Z&Ok/G~coIRXi6rMp3tٿFgd"X̱O,a+6AXɗvbzDn@HqYV  USvz晝%Fs^Un=Az%hЦ .-A D="kŃ2 ӤùvV ̣ԋFASnEYi:ue?>I޴=k /?k$1nhSb23ԅj;xJ蚼g[q:6c ݭ2G<鏶Np?b0,~Ǭi'Hkw:$Z q] g`%=3|UlBT*Dt":0F pr>ޜ%X} 0S_T>Tg30iZ&od{( ΝڒCDg\kH2 lVe{4\Y<P@i)&-c$4y$6HO*ߘ_nyȋFGWAh3_AQq~>K!+9}Gzu;beKE?ou裎F4<sJ#ԣ 9P䃹ȧNA *ܮB`~7PnhS|T o mFѸVW_"zPb5CZ`OȺ"so ynt QZ`lX_'<}8YvH#Uŀ6ӻ;W711,*NxĿK>DIh9crC<`"?1Kg1p ȣ.nkYl!%>ɥ(ʥUC 3Lpx B:]m)'͆!lHR=iۆA>Sn&aػ_RܭMUy>cj}Wo,erm)%I+=;*eKsx^@K}O3/ ƘyFb(ɭS`w@ӔiG-о"b%@ 2 Cxwp4 gw#?G[,+[ ; ɫ7M^5{8䶭c똋Yԯř "ȁ# 'Vic K#W d^AhLzMv&/GA2 $9V}[/][9c憵ڵWrk&r6ӻ<&,GiQ+7Ṵ̄NTw8:P>VGd8(ډ)ߵS0 |~E67}!AĽܫ w!T4=_:ջ;U!Ji/(P(-.f, 7z{?!M|5ދiח؁վ.ۇ)RL^ބ%N(Y>^nܼn+3A!qK{BQ W_sgas?AKgjo&L_zڂao>A\@lZvwUo0#$d- ]/0:IUYi0t?8v[wSEmŘj׵-~5NT01^5tb'h' LkeB h1~{[Rm GǾ\4{W.PI`@xX.~Owm&En ԬމL 8_>*#~glG@ꓲvbb?ke x`|N?ނ u~z)bpYg J6 E9M;8GppXIAxd6&g0i̓D~{&Lf{8OSiUΒ j5 ŝSIhpmxRW-6rjkـQ|_Vo(LǢ;#ɘ$ު Ϧ2E;w_"`U:ڀ%UvlזrTV 27\A}.rSQ] ȽftW ]l,N \=%3Q8\Q:znwBQHbu)=Ifq9G3L^oRJe|5S5 lYPsX6t d`bEN;RέC•_{{Nກ ]9-YKHMH LDQ,`;F]/ޑ[,ŕ֟/Fs5rPXNJ(HrN4y8uE^w?]:QxE?ɾ4jvC05M]< 92/8!yOg`iTGa$"[rՋ>*x=@u1lMjYMi$b?aDԒ-^6"GR= Sp`]S7]ݤ4 %zXt['1sb!"11C-jطbr]6NaN2 .Y<牂PO 2]We$KД{,;F>`:hb5^‹6Vo];4˸/Ǡӯ~VߞdD&JUGӁ{-KuGQ:3iڏ!UNR= )F:j!8n!:0!W-L̼Rۍs7dpޚ0zF?^:=hs _즜vyGi䒆<=>Hsp~_N}Xo;I^jhm2ZpN?(8I Y;:I΄p`muL@7CI D$P "kFM㬭1N[Kiӑ" \RafJ8FpJ a W|egSůs(~xlhӒW]G`>ꤛӝU: '(¬ BÓ~"Fd\eJ1X 2/(OzrgPla#ZDYk88Wkݛ8"!VwA8%2{(qo_U.  m0B]zDeQC`$N< 5G?{'Ԓ3I0YKmQ#BdMjR]P+КF;LVU47qvڧal{>Q7bP_vl{lpGy|] u/6XO}lCrw*C•f>;ɲrutF Ul<*s,\GZHƮ$;6m#ju UMf7tIdX2ݔLIEe 0/r(Kt2}g XNEb`7$ N aQR.Cz#9T#'!{^,E+ 5fH4u$Ƽ#Ce]Al[DԘRh),M`,kN- <!KSUܐ!5њSet&l}:IYRf[ף*)&STklk?Ё79:lyd;8&^?Jp9?eѾ05X9`AAN+'{5"my2y$C AaEʼ=*Mt‚S+G.ISwTj+X׫=7oT>v7TZY~o_jbUciYOH1ZYatvб6ʦW>WJV |"F tIťPG1bjld2,4žAxxJ@Y\| TӬHavb.M8l1epv ,8ڤ%%CLmXy)@'{z}*hcaXb`#&9oy(z tf>-+Yσ~v 0C`?vM:GT$Zy`:;ҜVUUpҊί k(-hUL}]W\ǁ <흧Zhx*'qB8좿ۆ[WlGerIc2)Q4@"?+tOMNvl,+f0e" 1=O{~j?#'z"{ωP_QKUYX7jPIIGUS fѮWxi_N]Kb\_'Lm$X,S]%MQ5@t՚f!BZ?),g-pyEv?'o6,x9cSs~IXΜc{؟< }r3\ڃK,᪉`34)e\*2X+.V;~PVi7g6993Q/h:{4 eP:^YN9{U1?CoO2Mݛ}; 4 mm8÷(pؒU͵[C;Sħ$QL/\az`Vuq&3eቭPt5u2i^\s7\*yl(mD&9E1T=5v"mșo|k LB1ET11ZOJuuX>#@~ǃ"'&-lf=}ca>3cFm ȱ#j$5cWT6 d9ĉ y K1T.Wu,Hb|45QCng+~Gk,]rAY]hwc9K{ȖXXҐn0K' Ipʪ e 6gfֳ\U5|M Z^ƓK4bSXK*Z8k{U3Ƭ>3` 0*#3Ȣ'#T{ՊW`8ff/*%R9LD%yrq~V 9q@jXZaJJX=t!I]2ԫ?U`2PS ;}止ƘcIz}~*{o\Q Cmա|Nc+ ޤq#kEƸbM,eF;IpH`HzNzmŎ8&=\é.MMߒ{ o`0ZzuBΉ2y1?_Gd6 A:DPػ2"38uO*IzS #MCy`se'^ug;+w{ 48?Ub _WJD>!Vh_Q⏲&ƏneN}xoגEN67$۠8G7[YS#ͻ)?Dyɋ| pz.z_)82%1= %_Ej;ʸc '߭ 4+$IذG:Ⱥ"@848>pNvjchj֌C/O Օܘ=TSq˒x>D#bGC8xKH  30krx+ 8ZؕŘWI°яY\AL9UEC]V^W?SN*wZL E4N+t>/HFfB0K̝H4+@>"E_FʵD]h3\,|9 ήAJw?FLIdr#Q%Wr$4F-pn7=]Em};*)[eI1 QJ_ѯ(#h0+jOb]r>)Թ>mCceIN ^瑢5oEFMVGGAq_0;Vcn?Bʾ*wLboNmgFx`*1jbۘ~ֶM@Qi痽vo(Z} Ѷx;GC'JGk#"gX5xp&5' *^z] cY-#H\DtÊD.R `5"ӈfẕj- QoH:̘Oz5X:sbE@0V1YN^ĕJT`zl5ufkcxV߆= 1W+"w0GR& |94rMҹ6Ď@p2&F}ڎ #ܤPaav7Zu.ng[^ﳡјh^yn=yyGfĶ1̃8q>}h,j[kҤw]ȑ`I MV+ih%k%~].0< YQ'nocFQU2ae֎Z`rXrBjJElhbHq^`cYuq:jzrM&`)DdGNi`ޖ?]̃&}!8ʲ)$F*HɾlN˳#uθhY"%~r*+۴VbX#saN{M谐e$P8A*0r7]I\[c}-i3(gQ<sDpP*xfWgÏAq ` ;Lr$xt.=w&<' =_{;30 b?bD4CDܿOTu6u9A!һt Q`έ C sPR()( ͠^(|1uJY(zК&K Ke 2~DFH9QUR34 IЙT&tfD[:Labz|i{B&+翪{D~[dù:d9tݐAci'WN{{t Af_RÝjZRLYu8> -0-iMY%Q/a#wuj8)Z~l*ȰͨVz&}+n#[ae~dSbC~7`1?wkNO! ;o݊3ы.wo6AL?/t) +r#"woMd-MTx/Xj2mB4G#g_`67эM]~ rڌ( D;^k†JHt~1YҐ(h10N.-~ k{u`W o"o H;q  ]iJPmX LzMF/I_l0o sꕎeDwQj9L 5m7-+>!Khw:s]ʾx0U8rWdڹZ ( h&6:@> Ҷ|oZhUAZ[Qu~@(>ܘ,O[xŎBRm׻""f<@g6Ι\F\̷5/RĆ%&bD{D~F/yOABjJ[xXV8,TyYD1|WU h >3v/d7^E{ˆϔ}opv_¥)ZvG`%PCڶ3N! <<,wDi)p?q ^/fOځ>˺ ?ZQS Ϡl^@$1aԎcd>Б?Qnv:D>KBC Wd" ?FufqEj2^ 8@_CU4\\'֮Bo~=|;ϱ\IH ZPS*z2Ap>>IRy%2&.|,0UѕW?zlJ{IO,!Tgqx0|59ڭPU.X1ء¯tiy{N\QYX0B >z]xO*YH7Pi5R(VltucKIXHl8p-foc?ޙ ȏN{a=W8lh,wfvO@C b\+6J K^>NjO~:Gh=&V/mG|ma @x1 pr^JUS_PX0dUHWJéGSei/&րQ>f+a!#-)^-e*giZ#2!DiR㱲l3iiц4.[R]Ktv'jcK]#~p`ka\aoaס埻l)LI/kC F%E!snsۇD!oJV0hO+NS}d]9 v҂5?dB_~GnqS2CpN30BR_ caP¦z1{Ōb= "?\mE͘y Je,kͅQ fnTFGIڸlvm>S2'ΒoɤM ᡂ4`E_|p4;Ⱥa u *zɥ)%|v_"*9W$&"v[ok6fQ*4a$9Uct~=?)]ODp% BiO'pE_8'+7r6hDk$h%*&n%Cf9}fvsnxOh?5B) !yO+٣e O$ ChD29d,.sRC<_q{ txoNw ӝ"2oSAJkOLF;p]T>[(WFy6T24$ǹO~Sz@zmHƯGe$:ReP&ѯJaiN";VD u׍ş͗"s%"5 ,jRr3A9C6W 6x)m\Q^ZAPeF +åaWV7Jo:>dnM쬘Zpߨ9G}7)I:D÷  ;nH%DQ]1 U++; :xCҼ VƸpez_@w W*W^܈X)U406!  /k*"^>o5 kF;}BAr==s%+9.& 8 вJ$ۆx_m =M-hB{gMs=ayKgjᑚ3>Bxgko-gVx>׿!_$_cBB;z魘THNvz&Kk cE{8/ eܾ߅S1یᲈ!_>DZ'HQi9!\P  }Qќ- licm$ ^xՂY.oȕB׺2w2[8MM~j/j|5;K* ⏜ƘcO |QrJE ٯHT"?)7zkUN٠,$}*٭2oRBC2'?m˴-qղ,b V=U]8v#m'hgN;al^y Irālc>:f*Y_nڶ89 |@LcH/&+2/~ 3b$V<0ˤ4056!BZ^g< ڄNv}K;/x-G7:@Eoņmmn٥3!{"6ew6@8o:qxTIo2i+[fjXhg4aʿINeynHg\}u`8y>^(U"6dQ 5 [&3\qkRP[g[0|Ie SM.rDqq) _|]`|Bu׎OmtFeЏ3Dan:7N*G.J2SRͨ|q$&]JKHݲoF6:^HLHjMG1GV#lu#@ypjd/,tf9k (083DzڃN“X .j*@7ď-%3Ýk&)P5:?U@;-GT|" /Vs+>Yw0^QkF.PN9߃R!]y7QրU `b>_yCr|=C@^aH? Hw;%F]hB :+|l^va =Sﭨ4(.YZ!$]/6Yf1 ,`P3(riqeN3zIlzcLߒ'walV/6(2-] hSXPsY1<uRr|aOmJ d*]68 iw8;LTO8ɡ8*BGG"rr{:\Y m!)$+ӭjYB: Uz rjXSMh^J6UlA#0o"A."M`9 -uOyܷI jr\uNȎYkah2ʧiET\ "-2[S1(9$R$Hv/?nbVtí?w@0j&9eqNCVҫ[XvpIMYxS{S^<9j֩$|J I] _-Dwί][L'@(jˁf{urh\MAUn16ۧ5B U2iVUh `I 틋#&hyE3FO&""a Y7/>TEs uBf'&}U9R0ynبk3]PNkA$TbbIebzŦV=S`uzULDv5smEg!lj'B4$r$~|qek x@Mu+Ly4O^"7R [>H&I/ WH2ifDEyjRPF-g :$Ǧ_EeF+:;45܋kQ\Ru-hڠQu޲:jaaW'> tPX#-Ρ4ֻ8jt4hMFSTWE ݤ<#jȼGe^^b'HkO3D&7\%GS s~Gm ~6d^>䕚؊|1ef=@l>ph7| ?9vLhVK&|D3Jdhrn GAd_$0,fޔii6L'gA?Q ;lE]|SH FZX9qQACvR ]O;ps+5flZ3/:os$eU@f_R g6]C `Α 'iax4)aYQ'42UAg?|#w~j-a9R'NIbʐX^CG辦ˬUʧQ!_Ar= g΂A&7`GZ WN$vhhUC7b%8y :*KˆQ>2:| Ѿ}Öu$?Hwenk48 fx&XZJ%V|T!%ÛH@>u- /;$gPy'(T}cאXXʝɧj0%_㽸, ~@X8%+\UMZa3Eir%OfjG/. d_W'TYC8?i*1s޻1^J.+Uϧ/4e xK$6W*{Z2X~o&=DpU\-4l(`\Õ:y+"\-{Syr-+CQuPΔ08T;-fmPV_+X,B4!zߥ2 } #@^84j] N-i&lܢI& ,vƨ /A[p*]smh:Nr{10 ÎOE볋C7f},4PTp}}L sL_ǘ4}e)/St*A^RGW)e, pٽzpgM:Xd.q9eשbվts@yK:/[ɱvAپAmB/?M,^`cuJ.fwp+'5I!=D#*Yq_J[J+R_" 1#ᮂ30J ,|&JfQ2&%f4c ̚J{!VVBH?L =3@=ȓ]e!aO-z" K櫬.̓rf GL ݖcPya$ iI^ts@X2\M٨LjL'z&^ߎS 5OQ} e"ěN)lQx8}"!COvgNkB?4D zl8g͝Y[L~]="B ~ UJ4o!s9I`nl}٥`_o/ V혃nݞ+ w*!\&dr1wƟA qh.h׻]D3W5+ʾkwW0 0nŜ̻>5&g:j.H/ O1@6"C{)QUŒ\#  ȋY[9WjGL a& ἒHi9ZC4%9|n,F!J341n*+$-ݍe0$@~2HFooD'HRK AЌtk>tdu:_̱(&^L')CFB꩹<64j760{@~.K3A*l~臚S}Jw.H@N&g +yU{Ϧ9Jm8qzVWu9:j_N&Ao^q4+te€m!Fj#DVyI&&ĮV8Nڢ.s-,86Mo0>v(R^JDM{{ OʦXo${vnXHP-[8`ߔ 3du80Q$("w2z=j;>\Yy#x6 %7]ryrAu{Ѐt/^?)ꈦϮ'gÕDžߔ#p S],inR gnV "-x4;u<$l$ hR +GAHz*0vR5|_涛 mE:L& %Z\ب(nLп*[n+p쯖:ڮj8JPq U !S]/޿OG=S/btRaUV|(aycH=l+Mt``IޱJ@o-]Ao .˹s]g>{4U4t+Uލςo؎^Ƞ~! ?ڂQ6CL&kRN>_>R0&B8vTX0.$:UcčCi` )͘Y1ʑΕ|g50jkh.!SM+bSFbƿf$Q\Rk2T*3w;C8x)ZRe>A?*]_˙I(XծW7g=_j6)C2%DܞTh _̗菻ѿ$ikIXC]QH9䰸TYh,N:Ƌg\bMTLi}J_ pO [د7kԳXc-MGt nY>5͌㷬/$q9Ow6t]6Zsr>O[z<ɵ &3ΰa\dp\6y &!ipmT$x6$9 %S!L *!@p,MLPò/-QZZn>|̭>^.w|i(1|g{wwb ?" A cm։O ~ET3Ly8>?RRZ0] ~r~x(a}{֠nX@):,/ Rv'\sr)n%[TRnt8"qGźf*LLd}NO<[kZ<8Af,XԂ{l|;]z\p]3Me[B>wmPB&\h"x8UAԴ7rQ)JJZo~(}JC˥..q4|ȵz#( 04݀ObQ[)*`x>|V&].w <T,w5tp^!*1uo}C O<x߱R'{gAmŴ!h9gD[{Qp]P6 NlPaT0;?"^9r,H<#q8fn]*`PZ*̃Y3ȚHԸ.A Cw"#ۤYʔQqdhXj4ZA)g/|X8k ŚKH"9 ESx|.)BHVat/% W rߧCIϞvYF @+;Wy#:fZ l]u O!j/+ʑ1o%?IMlA&~$t[]FN8UZ&;g gn$'o_t]˥Z5V:Vxck_x, kN;Gk$롓ZxpJ<F9SƸыMy)n62rk0VOއ3:\zݐ]o aa,:7٦\Λ:I\ng%C1ؐr*'QѸzZy2+fs*Q);1=U~eߞ)اx$ts̿RW gyJĶZ|6,_$f\Q%zirvKu,+ : c> 8p[c_` ?o <5C,t¡C+I|y 3, -QFZ+gO}|sd=Ыxd}w;mm"5gFLH,#u`~6쨅I&M %jo{ )fb޹PHѺ3*w'h#EaJ'[cˏM]]v?,F#-n(ۉI/ht  ~?4aWXDvФSWNNE 1]!&F%y_T2Qn񭠧zx)H#rp]z7/{ Lk{w Ri]r[h\ٹWߕ4CLk)%cW&kI Y^nƞ/u{I&wM2W n(R&Ed1Lü6 h>~ \ګ# o'܀L !+N+=qҹ&ffm[Vf+u c +u@]^αϔ5xdvxCr}?(wF7`N']9Z| j?'pFHT:9ic6t~??. Y=|!wz^V\|_x 3$!}x;kvM4^e~! CxI:;\jĮMߩJ߭T&RgQ̚pp0|[$~*V*J|^x[2 (͞qM*nCX&v,u\!j9#~,?ʮd``Jpb$ 7媓yLi10I6c_=y&Zu o )y{HyFۖkB+W5܊LщV*W]1_>iac?ө"h}Ok.|w$\7|6m=KMxXl;]x%->6x/R'ER_;K*X/hغN(y;LH ^0Ͼ+ID󍘹E$F->~SPmOQh^4W3" ιF%IƏ; Ssv̘ڊEm;/fyN8ʫϚѺkVd˗5 |SRPe`y/x̴![<"+ԓm>&~) %Tbo -7󜃷6xJr mYqlWB zp㢻 _QEe;.0TqN5;_[ъk.W#їY0&S;L9 %7;k:-k%\(J("n,u=Ho =/t6`Q.&PTn|]' o"'[Κ@AԺF0R +HRȶw.:[s9C˰`Vl9$Gw쫶RI, f@]óvYnh4(@!8OvݔEb Fs]7~=<._x-#'Uŕpbw ) 3>.s"'Po2v1zrO}$$f0 Pp$BudX[p8$\3zR/.jҤMvcޜ4$;K`A@zeިJ|[yM X(b;-B1˴R G$yMd$$ceN6|9cQw8V3{J&pfrIm~{ HÐ9 =cR(oH=ʗ?Ѽ,j/jwZ{ 14PG@22U&"-^aCRa8xg2ݩfp2ڶ+ #T9D-6j*:ok8M,ݠ7灬.szAWNj55GUkWz8>t68KB!^":挨s]I,Zac~43/2w1}x6⤭0}gV 魌%X,h|Cq#yX[|wzx1D^@HB1,xc]⋋A W#[Uw 5$C`ݞ]މ]΀OdzJ*vȣݜF)k}DBraV E?KaHL1}C?Q!ҕs/BE}J_@Reg>P` K+|,RZ?{'$T."> !y ?lЕa.] :M, k Tt6TzI}1wj.)c2g4ñG\qo#'b-_ͤY*m [-;!gau . _M!Y^!ji9>"LebZ" iorNb ݏPR4^ǣ̷;Pyn%)ԹXHX|!(ܓ6o * x@wLϸt<979fH(*ڊYk Y.5pO\ˬ AnhU0p/aYe%!Bu8L!,ctKcOmiᤗyۀI3C?k ]ᢟtFW9@oY/ib]J c L࿇.ÊUY2SfjYOMJYZ,Sn2"$dlj2hY챓. ӈS0s՛x$?GxüQ[^a2bL62jBiEQKߔ&NLsmē]0;<U(T1]u]9HC #d$K]e4UwCM} 0R KA7< J &:;]iPWd?zw,"('їES0xD;Qn~xʼn8'\lKoMsV0BS<[F$Q#hK`>I9IqA[B{^gPJB+/^gkDh?ŋi$ ԑ8EwKX2.%ЇܻxWC -~|T.qE"vOg2NV/C K@@;[O;657ArڇẌ́{Q3a ,f_Iso3%ﷇ-PXũ;Ʈ^@Cbνra :zmL4KWK5k:wx3l-g̸ajG4AUҡh dV˧%6Op$KqUl9nXsO=e6Ҥ ۦ0Nq}{gY˗ hN1{2t۔) Xد_->Z+q{6, +`prKjޙa4}+$p}[ɨZ{(4O9W9P2~=`3tێΆ4W~ c F ݬ}D,ŧ j9 ӚhDsbxO9O7jR;lMTOy/3U’m*nlcM0h[/箘ܠ\p>H#5±7J)ܲ=&͍e?x0@vu3fb5sde lT`wB3F\vCT  `JIഏ\}X Ы$,1΃זx+2\>,方e4bԪ+w~z2ve?xPs^ .4}6nWT%T W"2CHr'ΐ~(n!r?&KlW"1V-`ciRbԁNo>_?%w]!OefIّC1@ZYzlM Q02MqVM6ޮwɁT_ $#)`z<cqcA\+V:]w@yBZk T3p3m4gT9,!8͂RCƮ9`e0 gȞ8MGj+BF 2qV:}Ffo=$Ӧ!UE!EG:\SD0e~ɲiÏ/J.tCMlغǻYA|h=ssQA!YLvqiG39"QҳF~Qn:vsB/  EiWpe+B*x?&l^/>_}tyyd6Z FSm9'{~p3$3ю}י=u CgBU5w彄v -玝i᫡JHYu,vеǣs1ɵXZ{ݽry1Qv7kdt 2E#k5R6Q`pH* >U΢Ruay=4# G0zL|jBp\q9=,gtGQFMr T1^;F⫮:G4Ǘ~ LGXrmUXl_m9$_' abU<;<Rl? Ch lz" /O`^mXSTfr* j̗Oo<13O0w`}&[ 3?(Vav/9H9J̭$hTf:Z3a*ΜekJ 96b| #|Ye6-o ̽ZD6bbYJ / R'^sy̚L1t0ڿ lƸDiܢ#v5멞kY6#ꡢ)Q 𚶳K d4u+*fp-b}뼖al/>\ŏ~_m҇cl;nϽ "Dɲl&X8\pM$YyFz$S;AO! A/7UזX[ʭ1v6lT ,3O10+ձ)pCֽGB'aLUx-A},~v%2[n#@C0ru4JDpt{xu :RIC;nnb`Ct+ ’q)TdArc V>ûP{$tWHk"1gc&9u&!nJF{ N$:L\3fD?ow0mN/迀q׀ݫK20} EVGGZrV%$q; Әvr<xnI&}S] (tWkυ5$ĝx#]3U>v77h30[/EՆ"4Y8iڊ(_ktPr3J1L/<ʴfGu>̊5Z"L& ;!nc]S!=. C1 u8}%}/QqNG5s^bC10ǙE%6cM:x@ל Rr)ݖJH% 8_ɬK^f0 2ƁDScH#ee8(ESa}nҖ^ }4L𰃴?QAl~>B&>1v ʆ9GKϯJԋ-pX *=A:wRYì%".[' e^w}Cc̼LѦ$g|T%'yr%-"m2LGk13!>759'j~,ˀ9q|=+ I3B ,-!;.ٳArɜ ?v57u<ڂ|x.H"%푷3ıUO~"5KZ0m2z~~$L pl"` a ,3DODQ`p^֌۪8zRO^[G~Y,H Hb^0␓u5='&N1sth(]ә*W R _"PHvASmh"+Q鉯czvb2;nv [O6h}q"PycFܬ^/;LÎp@#?,@Ӡ38w\M!}=.>AXP }ǎhX͂{pL8Ũ/UW7߼uT6a!y8$/&$ڙF)(& O:B.~eccI3zw_dc7T3^X* r?y ,ʴ /;:/E :bD1]S|IW :Rmy&"(0oM2CQ]hk&kfdc]Y\G\!L;G+6L0?`*@tV98CmKؼYy % R,=$6$Ke V A@WI}ۈeeu0BwAQգ\< ϯG_3Iz}sp+m40I !CPJ&ī?o|s^ӣ~Cr<ςF`l/z:qI& 5+Ĕb2biDͅ 7mhxZ _K|֭n2l^RD+#kb"/`!Sؐs)[}#5;XljwҜF7qb_k Jd9H1PksKc#u@/ ;eMM rg`4b`vE)\dIo zhVG p\h;{/ߏ%*@{|Y$ӤN5烎,r[%_@]"O,s}/Yug`` CaJsF/C! ؄b}ʿ7fMCG/M ΟԷ"$68u8#gG9W_mWb_Jd B 776 hAs 7 tB78ZEfн(Bhad*5 "5kg \G 7i0ޟ‰f9|~/!le3,NEi-*7 &%K큰d(/G{PM8$[`Ӵjxd3U_O"W|_8d>ꄼ i]qiu)o.P| #H_S;IzpWF u+}~TKBn~fP6נž4)ա]e``w,5nѦOSoEh2*[ԅ[~uC)=-ceq  L f/EA|. X6Tn[*΃ T CBtjQѲx`H <ӧ` }pU#搆Q ==ҟ"C"ӠLƩ?6j,!%Xk W`ǿ7z:}w) { p%}#8b_t)2[Q*)R㩅hU=o}`-!Pz d,ɔMûVxB=#ot{4ژ̲)4@l'TPԝJ"QV! N@ԒE! 1(6b=U*oa>\T,AA;a}QҮdtulAE?@<1Ps)0+gm ()$Ý-f$k0&C='xQƘ?o:C-Lf*XUWjTBxIa;HXRa` < #;!^`.ܐFLxzG I?Y= +u՞12^;nF {Ai[&8`4,v.=#SkL#tBqc$-پx)aiYJfؖ}u‰,bkb1J(+~Ɂ2kc]MD襧_ۆ;C^|ZlPJq+99ج=1lbl/ٴi艙Dt]yvJY YiL+lbp_+\b\&s.tv y'pjB;46G(>#÷t2e;ο4oe>&MDfoRZ% 0$(.7)̝g;u"Ӿ_(l;F]gxQ7|DvN!N6$iMr~7XsZQ$pmҟ8%qvU avdB2 9N {ܾ L]_7#">GmYjdCI&nhFLVP\AUW)G/A ~`U!]\ʎ7T\_Sc~I"꽢eߵ̱r/c[9'(. (*U76Fm&tS>t",й-ݸ %Ĥݩّ0v?\v0T{uaP\%YbvlS>[ƾ,D}hpSKOsbfwaȑhlRk-Nx8ԧ-tY3mX+9;I~u=0['f!0 Srϙ]a'.u",66 muȞ˃^mw 8lgn'X7o0S@yk%h9%2?;tgǗiz7J"Թ)CȖf),r.YgD]b+qB $cA-h ubsLV1=pB @Rע+L3/!dM` gé!#~!LOoUN ?'qP=@WLSa rl7 cybf'oIĹRqA`*[d4:?V`Yp>>i}yl'2vh5*}u)5Y(5ZoW{NAA3wPPhR~A#z]#lIX2‚7-bH|dCNxD׮9gvʐiƞ`eCSإE{&<;K!c^J=.laY]/,(LfaںwvMZg`hF/I+4\;QkZ:\9˒!ٲ:®'l/5P/>9jom95[Ns Z F!?'+DUUġxs7Mc K);+hr# pt=I<"ΧYMcr2V,T^3PK ybAϿglky8Z;A-*?E6NV0-OzYLГ\},Bd 6 Ӈ< !opIT4J%;ˠ:-E+XbrRFB5M(it?7͞A~`XQkmP cdUhH0Fլ7hp^R+_E[*:|0"?fF #k?+{z 0K;~nv@QkNxR?-rM]2kQ6%-;)%f?N$6)XJC/ܖK̩s$ݬA@ Ryi[95nY~" Z`}! >) $PA. 穠Bڵjrrmj0L^g]@z_E6^o>FjQj^l*Ydc")F=^-k+yOG@EƪcMZrɁzD]ex|} nzOr[Q<ܧBƴ~ Q=iʯԋ&e.iɱMa&>cpq]B*U?]*4u7^H8t> m|[UnOxehnS$@*Hx303>2L.C[ J6sf=R:s꬚<3NQLb眛B{se Ek᜚%:=HWyپ^r,$n0a+Vvdwlw.`y`.kbB_͸<+$pN.?LqU"Ji?St:G*@_Ӧ;US?ЙV ~4{V }ӇPaq 4Cn&d6es'kuwɝxѱu3e30J`*8s=e W/97M'`)6)< ϶Cp 4`.YNkagj4z]+ i漿+co| jլ/Ta(;Gý bC/SVRRŘ}-V̫  \&0|fG|((_ѕx~CT$npVrb<_-U:O= -&!PqhNjBP׈V6\\1vj熥V J ً҃m ࡽ!AxÀ(P,MZE~(,8 ">Җ]`_3!z2j<- mskӳ)>c=#,\"Dk-YyTyR:4EYtY8`t;|6NF,2XaziiB'-9 ZÝ!M}Ɲm4n39Z3K0rux9WC3$uJtǙgwf1%EcTj.y tpV5^F!"Tv͙2gª|"ݟ-ǧ{ m {*T5~@X4-ש)݌0mJES@.0;IgMN,L|&q'珯Yk};C"J|%j!WN釺Q|lhG04L D#9 +cSQ} *W<~Adȟx}jƆe2 @]'@<:HU8Ns<d](*|D;r(nĒ#YrW [JmPT"o A[ykmx7 i4x |)D:?9s#]2u lh /beu1S:-S<Fg* UdVb %qO!g#y^Wg4h3 qJR`q˘hfVPY;{~ȳ+G_ oۊa: 0R-pPVʨl2?ty,ۣx ldh N`*Dl$4?95k dU^g8m9cB`pW,S[ֹ-d*eQ󺛵?` )ֽ{x2aDxhrI&?k_'ۘVD2~dBL q#93=ʛ5=cn__(f#n Ty(@PGZͥr6scA,wA3y+]G>LreB0&R(tBPJsP̝IO'~ɜ(w=RQw6(H|b K*ڦ~ n0u\e>"2'O.d2>8c>x(Nװ}?E5꯿!ڶ?[xGWKf:9*ЙPKn?i.ˏS+qJ7fX 9=esQqs|V>O|XS-@5RW 'HJ `som T5V-6tyr9tRl Iq :3߷`X3Ao0ʛl(dvZ19F}z.~x%&+ݡ(7`O) ndN@Ӿb2q]!+VüJj@&J9;<}10f!2Ra ,Wܞhyoumc\d?7בyR4$yGz 5\r ZRfC'4zI1AAu`قN~qY xv9!t'͹@y.H9r`$`g>V96DwUt{vxltkп'd',,/;XXx.K"$^w+~#xѓa7 %Ǣ@ڟćVΒh|zj,\R{"3`gfcAQg+!Y VXc;HJ;JUu2?}9(DL.x67]o,F%Yd_#Z|[߳b\RWwաi2@kjE-UyYއOLόPEgg 0&ww#)qK#r!HiIcY*è߳BkӊN2ce1➞kѕ!i 4|ХtzPViNz$-AUֳp8[ɡ֝]*eHT']+qf(95"k b̳~%1sky-l^=/)6A *U /cut墼x}i$EUbV"l?b-O6t94K*]Q8Y}\aЖ tk\~Hԏg*N$3D.eTy\خEq9nkLQ&YE1ACNΜu&76ճNC{e2nIx\4"jAꡒ¢ŕv稅 UL?釭ݲP3~-3MfTI4I#egC85=bnJgXTdOqO 6a8(U|f{ :uln(<Ky?#~a>hʶ{*HZfYLi҉|&-sw:S8FO@V:hWBCqoǍ%\ڵu {=o G G`@9pƌo}o5Ŏ.Wε4<*+ KI7qY( )3uvz3[-s (^(gk6ϱv;B-6"kN"E7WNqFaKaVS 2D*In5No=D]|5{frt75 '>0kS?& '@gT4u"E ȺѾ/GtYJfF{ռ""?cq,V]SwGjZ0v_ ۮM TrXVa;c~J6X5EJ?JLobd-{JPvi@sRς|K<ӑ{xשD{m&ba O{OvX獋څ%tlU$jatwsN:) C{jVlUCf5aǣDu`:tm[:Yq<A;Hь[lщS-eB$"oQ+E;(̍2SY68lW 4fYdXUem\|E#ZV% $]U kM+,R4_z1iz膛ueE29 j2~ ttXkȺ^jv@w'vŰa:nf_#{"&ʼlO*>;k'Yd^'WSǁUT?^XEmopI{j`$ | /.oZ9&y"qL:A)@u-T3O.$4ˡbJ%0$8 \Ö;f*a|dsߪFેWX%cgG^fW$k)(ot$Kh-֝CH 2 slN,^ 8QsT+퉧NX).5]Dr;NM4f} xtVb., Z{-'$dřŹP[q.ζ)gk]Q@\1.Q%=ߘ(rs <6N`;ZsD: YϨ;((9x4uZM;qs1U 3B8|ި"Ty_)VVٱyܴZ.5m_%E ڹ8 # <$MroD@I =Nh+$KN漕6kSlw BO(n$uYL?2k&~phs khGf3iX_ٖ/"&bN s6zIo6 [ 6l9eSzJ P޻'Ģb@F)PFxE 1:h4CלfpَQ"KΣ;Tr:=8>*kS|dսp(?w-pz;3!;S|}EAfꦺ .8(TP;˯B@ ls#Muv3|8y\j9y}dKW$KjkPɾǁvf^i[X Q pk]SV+]E~ݘ6&ߠ~G>CjY^uSJ:~%>̥ӡ)؊);o0h!WfZiÁhk8BxnOzByS{=y05,gM-+0ءPE}<֝$쫁Ҹs'>k܌^ZG\龄u(u .zO'<,t`r57IOz`UR՟vV\"#S:4GV${~ڙ *11EQci 9kGwyvءj%g2&-٣sKȸCVxלh9Jp>ߏ,A7<պkkdY[.ӚB ¸Ea9.GbyJ򸵐-yڠ'Y(kI@$Pigky,k_B9""`=w%h~x. d+w1vMe^~Db8GjR[wl@Bn;s@5[}S.L(Jbml*C؇`o]IHX{zS1բCΞ8_fU6V1ߢ`F=Kv05H8N>O΂uy=һjGy3owX<#{⼳*_Oc~f|wz?p^G \9%R ihOn_<;lm7FZ_i;^ ;M֓}oD(9J`Y'y)m,o4TFMooS:-epKL>"(J@c㹇x;*˞;:dRdbbǦ&-˹E'+3"}h1B;<ߐ'~h8O'N;~lJXNcɔ]c|NP+Sn}|eqj]5I9UgE庿K,azglֈ+2 `>~yXWT2תmEϤ[t<*O̲*0\⑜2U|LO4Bo6ַ$t7^z-=$(>O^51h_5HM\ h-lNό o 6qe.כ1X$Wg)͠6ŅPۼO/9Ԯ8_]LEY|NH,d`W v$PN8Z-ԡᕺ' IcO 0 jLV*KI&",  Ѿ-W #K=ejjǡA']wB-4gnP7&=UӒF_ʑG|ea+u8Bo٘}RoS7<И <=ᕤD!MdC SL\v,ݻ{rcl gB%&_72y?Nn]/'$N"S\ WQI2; f*GF&o}jq+ia*l&f[Eţa,n %7RG=@j "t|Trh[P՞`\# q47ӈ$e^ xr `g5*S#]uycPw^F5<1}rg{j龩K*)8(GӚ ki2iW(RKPEW+,0+ ^-$}V:~m|KepUgj1ZBኮn<>So|f;CN hajmGHl# cN=l[t#~5#Hpx64z2GVJTjmUMsv5 Hz?&ʻHu{A n.C:,,NRX] ݷ.[Wp;᜶VZ>} g,h*FPZ/R5-~5&'u4QzxM\5S2m"Hڜzjd3u/OA+D F%PmX%<>|&(4|U(TхZ5vɶO_9d~[h[9 f*ϵp8ECDck` KR_N`Oqi>htEMz&z(w]jqQϭ-&sP8E#Fs_>i/J$Z/qjZbȊQi^#e`8,%S"iIu1ME[PW.mn rG\'=z 8C]³O<³o>d-ynHXM8^ZS#39dU' Y:_{&!^ 'Yq wdFÇT^p<M?Цl:D Lρ/b!~9&anI]EPH'wmԍ,UEeWFeǣh9TJ!+-#,xp6eFW $KVoJl9 %801Rb=sk rOLTPI1sjpoFW{8OQ+Gmˁ(0:> 0"2x? QfN%&ɷW"1$D_>*OxZ.,gQ'0PL c {<|/Lp$ћEi%4?2)(ppϴ')+n9j< *FU{wڃ<˭ uz:oW'*@P.4N*KLC,T rv_/mSf0p򿒘E(s6Ty90 꾰76>Wl3Fn_GV\v֓;aq9|J*e+{CQMlhE=KEg] ߕɢWA/_H18'0*^ly"I2!+8|x3H,QB!߼w*>f'RXDzB2F<.ϴ 8o",Qo^WR,CX~ty.V5ϭ'R&fIY;0~W<*n= x;KzS1`͢E2V>!䁢9,QG 0}p֢8F}m@O&'Nf8Ža1e 'iPB[OXi$ Js8¬M( \Q+F+>DIWqNk|0׺=h9 I"jnܬx1'2Î]ڻ$ ?*YQNdS9\2,̙Ruax6%4|T:V85fcYҩ /l$57wàdƛ'i!A'V\ȷelx}!}4Fzڟm`V2k?N/uS]` >dj:(;`$ǀF~wۋ{=ʎ3Ga?jC!=RX "Q"1MKN4`P{L.Mr Êm[fWtDq:G Ƥ,{aS1*B ,(NUYβx¢x\}9!5ylabs6ԎZ/ 6ϙ+*pHq{_W\?=Að0qS,Xb"z `T*NM<9) }\Qd3*I1R ۇTnv3 gG$֥C9ڝ׉猽_I/PyʈY6h0^S\jVY0xVN:K 3(W{1,/!IicZ(0iԚRJ "xI7ݙhIlx#aP HԎ9Qc+M=^B0_ CȊB۫~/6 .9Q(.I}dnϽu@ q]78ljE$aܑLpn5g?8B|@, ˎlIWѺ9a ( 汇~j)Qj>~H~"f^Oh]2_̞*D# s5՘w6WZ6L!H{9Ȱ,!ݜi,k"*3/n7#O `P NIXH< lɦ }%|}:ZȚ^nNQ7bt z.k߹e^*NS^8ֱm`{lǭhqYF|X4i䖁}pc?n7EYKĽp<\ )HD"%+ۭ]܈ ԛ1g^8fE|>nKN+3'b7F ~S&'{$XpYlqQn} 쬘P__ ҒݶF^[آVlETY+<L*:BBa]o 7#/xp=y S?ZdJph;P^Sُ'iV7͌}ō~iI_7yb;TX|>[q.V.92_i}Yu>?Jޥi2S¿ u.PSfo+>vlQ'z4e<ƈؼjCO*YC D+0'0>>K;. YC?&:1I&`\la\q"/%Ӑ [}vR',l!{r/03qYRƪ@b J'EL{;һ͝@IdFv=]h"l~J\R bcy!:w}1(x֙1NF?lYcJ۔ރrOŜ}D5 ehYOUoB bPR Zzi(a'ؠzNi@1Euf.Ƅ}*ͫ7M$3v>]muZ)  bD<7Լ޻vOLn@:C G F53|+ą6wX"Gc#*m+ {S8>S*;>V7\m8 > 2,hA}=JwZ۠2V OԨxt1G~"aVg8Q|kK,ZE))l SэCcc*l-]噢͝ sVrc[1lG˅z*Lv"ܫsш mbGjdž+Ƒ/#ǽz@Z@6A2{Ov΋mLc Iqފ(MF$_MO 5HNfσKE/φ`ڟKR`p?#%A.а+Q-9Mġ39 W&LswLuʭN^E -4b<%?Uk*3|]Klq_bTl/I Eqzz*.J ؝sn. y쵤WP9PC& nma _I6>=&IzRKe=3 ; ө<]uR c0>7q :mNL3#"/g]Nxqv~i3[+65|v)?G|(㕲7+ejz)=z 3\ݢdI]-OǿY֘I11Vw&Yx6W`dE~ D8-0- M]di9cL$J~IٷFxԝE|.i39nMT9$my:|(4g2:dz'm—OE }GG`gdSL+)n?s,ۤ޹*򘬕ZGЈh`jZ0D9VP«fױ&AM^nn܎-;h>q'ãt{= ;x>(mr+r%dũ4ЏՐi%c 6A3߰ԾIb?p/5M*}H`<Pg>M˗5͂#va|YS޵єܳ6ܞ/A4{F[iC&$:9532ks]FNR] $h<Ã*BR7Es'?" ]ຉhuz4C 3|>1 '1oRqWjF@([]wg+[<ᘲ|p#elbω:-fzفǬoxKQ?K"Q7P"+25|dĮvk~2M#HaZ 3;-@Kʺ ^ߕbpPi3(`awPW_4H`!CV .*ٵ{[H|䴳r!hIbONR9yg}gl.#MzD.1!ۅMC`ADF;ڜn/ )YeZZ!DaZ+CW4JBpDtP}Oehk "Ӭ=tjM|6||cɈ4=kaO=. }Υ#QN{>ԐS75UTuf8"IU} SA;C1I"q`Vqt,R/ fr_⒴J0qv9eǵ@JBEGeWʁ=znɟNm.Fg\"Dy )$ҡK-hU̟HtD)VN߯2fݟd3 ,_כ"4_45>a!Gӆ@3x˩[Bn; ab8p?SmۘY t2T;d'cF4+fGCY-v2J( [ { c^   zD˶1 m7ZLla2{â?x2}mu]nQq/QGG¨6TU,-HdBm)8X[qӸB::NMRa:x\8L]W2a89<-v,hLMi_#ΜJbV30yPwsT<8$6tbk㦩pj]3_?'@^\A ~Q"/vpSl&Ryo7|Wt`{DfVyjbҷ(2F<ʆ|>OA_>` zI= gEҶSD5kz3)"+KiŹtd!EV >L4)P%[dg?/.TUyҷewj)ewJ6_(nK\0B+V0b3&XLd+PF7U3k,9KheJlވIm{ V,VfxL:bgG!Pv՝3^D<F=ZMYEv+Cyڱ85wdTBPO|ڐA^k e)Ly>(,Pm+.*ʼB/kWo+s 5MłZ;3e44F c[5>`7R^u-3 v?F|IY|M "DGaKBZܝ^]2c\,cc︑&P u:szm}nhX\ ؏'( ^/ШaoE"P{bs x-&%`ZxjoýfK w0J/qL$9O/?p`B6mQ*B:yO\MYbks84<)RBKm , TU̹7E<˱o_Uc5bVb.NBY\C RoE?/vcA"H_nsV"X10F}Fq7g9TӚ{ Ă`ӃOآ`X! a.2½%{NtOT[#U0譺X nr)z? ׼g24 n|jhlg_|oT3 ` , #NfBHrC\IO'zz! ˂\>c2IL@;5[]+ol=ĵ$g.R.xT60Gyg1F>g91 Z837ZHOrۇn8y/y1|.,?yr,\Zwu;G BXCfU`O*k%in/LD 5P_$:T9_ c\򴍝qjwB[ywe[hW_0-E,YQt4 DBf!C p M6NVPR-/G)Μ|v)(; /\ MFJ 5U]y9Te[8'ZlSFntgMP27tPPBRr 9Q"R =&Iqt^B>7v.WT0UUdP\D(lFT-kGLU ]r.2jI6SCϘʣh QbS o!b_Mh+m&_&S(a&'{ 4;Y:RhCF=a-Hs (3Rs53:Qcs%N"w[) ȰmVX0Nʙաv'̿sg.uXrSN kboek/y+[/mxnփLxm:u\ Yߒ]+v,L^ j(; iT-Ak)׸χ$&mPɭrрe>Gkȋ~6`$|p؋O)R{+!LHKfw+YG;$ a[<۹&%F܏B3WA^ bOEt:IbηZ۱wⷊmZVhjb5^m]~ &c`wzBtL?Z[zN%w5Țp HjN4Km">7cʙb F}ɾөbao3564 Y[1I="x)C&rOcK OYc3φtZG@}O*UԃqזJ/pe4*<'vO[Mxr̃GKM&Ͻَ1li&% wk p(Vdysb2շ}z"G$G-np}-"HL9&r:/O/\;%ZJ:̊)! ljϢL0r]MV{Z4DW 3ЬDg:ҋIj}2QSaɪN P#ļn+fDD ; !t+\=4K|k's,TY8},g\Ǻ)]}uYM ޹]_$z~W3s\"X59%_Hb00[jygg,!ݭ&'P8v`PQՇcq{@a֡74a,W<Ǭ(S&n/#ӗkAEԀjjQFauUTրm~Dm6r/d\0 LkWIvfK?zDv9^+ii!.B~ UZE,ST[9t wc,&%{h$PУ%0źNW.;@8desq! 9 jv0X}WJ > 96o? 9y.} h ҨuT\(!]%Z;*˖,s xAf`eݓ8| t~^J=[fV6'CN 8t e#`}WEjEu,5A)o~ +WKD0>C#lC~,T5e Bc61Ej+i2 Q7U'uԾ͎$HK|ʯTPε@s#(vfD0e__/,K3\]Cn_1j܄H[2Ԫ@4bnl5RE c@])%՝ jfkMFޛUWrƇ֊zkDiTqihսJm*GuT{CKxl 2!r,>[Mɷ-%}1\g,IjH}10v/AKӗ(s#4X__uaߜ%gnxn6WsCTPfɲ*ygt%V Tc[h96,˫3u\QnO&MQ1ғEzoӜIs$Ueַ("ȬGetpޞhznͱA;\abw |Vh <0/R.edӶQSc&V\b/6aipAI@e}0hiacw1•c^(B m+Β͌`5pVycUJ*cS~^Ɲirhks|1WJZ\SaBD Bh5; xOlZ؈i?ҙŌZt96aAf1 /$ji+5bζ)R*0't%\Y]@k}E04 N/Q)閨ٸM[@񞕷&t2lQR `2,0n.)¼fq%VoI 3d<QV)& Y2tU3ȼ3C9o'@23cp$[o~0 ]0kqJB q _\A T9W%&@^C(؊q#cQ1xIZ~g !LO԰ /T:;WAIMoQ]Q QŒ %5j+`+vr(af&Awu^&}\F;WLl~C܈ڂd,늊C]8[B19^_`|?j\a ?N dw'(Ԩ:Cl{nPv/Gs1bOTs.;M*;;ߋۮ5 xI+GSx>uLuT^ lkro9BOɵ V\Q$Jկe7Օ%nQ\ ŶVBOמӵ}\9e냀ϱ2E5Ց?5Q2*UhYC>=4*$MX{937~M=!Di)U [MyR؄$#8`x_L]Kt#C^3n|qÏ~ʼn)QGX֌׋u}KM|ڮRA/-9w(UxjheD\[9gjpEΡmxIb"N%!=x9 ӬA1Æ6-M 2x âT3?zabؗMu&}]@bzլ9Y1e2!SvH-*øm#fX@eR7KH`F? 6; r `$R}'JQ&@T*jpX[ٹT5{[ 5ud̲Wx)Ru I_ pw-bV$Z -brrk$-#GP;(mG% NYV<-<`rM3HqcS b*n;S Bp#nU@|c+ a*zhE5LK'{Ȋ]ڡoZ)nmX-R\E` *{*Є * \sljuG)EƶafPX=9 G*\p3Tm}cAzlpU8z-@PE2TƄJȘ-A'o91IUќhd[13w\ 8˿{Dl" 9a`FTG۩`SR 3[ {P`)$iXA1Ef qHԾ1egki-R1$fI< _ ػȀdrڋn`(bu+\P#r%C#ԉƣnF~`m3iՎӬij^z;8J|}-%ށ% X$qs[/w$Ht쇞v2GQm1! ? [zMM? W>g*@IJ2Rx;qIWgљTVh* 4y'y$D/:](N`aL6 +{/Gis)uPrS\cg*6ohsB,%:]z>MӮu xd$9{lT6T~O/6-$?{,?W9)"FGȄ7mwVeFj !Ȅ;N##ux>Xhۤ>B<˻sBV8'WрM %k>a_JZ*HLd33dGE~Vm2R ж'n#CONߠ y˯6Dfe}yP8nƥ|ΰR^"ͧzVIov>PI6N v2 .5<ՔUKys3lKN)KŸ6iTOx~1i.3EBndqcm0SDA*Eo=2as#p8s42Ert~9Ǟ u?hn8Aks7YD)8ts{{yb];Yųls|$ی8#s}kи @/xQCd4{9{4Z w??;ܕ?5tKHfϲi#)DB= iyg^S~D ?ޕbzBK6KYG䬥TShjP%؎cWy./ۂ0맊#lnX݁ rCR#erCS(aVߟ"3i)iFl[ L]|Na 4R1/5~ZILn <=rAg?B `.;—S\6%[QsU1pL)[fY[ g0x[OLǘ.Ԛ(hcV;_T9Q-@)jE043<@Wt@dM:>6Lcn7$¿ZJVV9C=8Y^6.@A>˱-b<Nsbq2Pdϭţg\!CIIkrO >5"XE=ܡnes?*0Ս{X*[1찀ە@r .]h#3řoV5XXZWblG г` )#ӑJǜ?N.a x yvXv?]]YET19Smm4x'g1Zpe˽ HOH1%!3S]onDqQb?\_yPL}oxwMrXa%d1Nn/;?0Dnߌ!8t5s6PIKԀ.x$Knrr ' o$* .^vxJyQxO  u2{wZ8+_ b"ۿ_& ľ[z]uC*bhG6:S{ Q&ڋC둢Ǫ3 Dw6#@:pCAs\.%9Ƣ d0=>Η&`(Y,WO95Tȿb)jsdTaW0JUOQ+kkΉ(݆zN !#?+>V6FmTH2b[iPUsH9{kg*?P~Y`8B&?p`5}w@&|TƔً)ǘX͏4?v  8>oƤA6&hW(;BJB~pe| SH/aǽD~j/|o7&`o[ԇbYq2͌GUȏwWPg!$/?X`놡hJaTq4 n2P(1'$FH_=9g4 mjoMFND>0^*ǔ(lYøK#H]ubv94awm%53KCn?lVՍ F/b8T~,B*$WJ9Yhb4}$\hqF3- z8':5Q$nC)nۑ@Nj8|w? = ϯJ窳Y v2D0^1Kq-Zj=ՏNoԪ>+߾J6ϮٙHvjUx$ќqaGZ:LWm_*v!- &w],GZ?dA3;T,U>Noi/.i3W99 Z?feP ,ّX.!Íyx.ĠK I7Db f? TsO6{;[J55uЀ۾k긣]Qd+',d\,YF9t~<' <3Zx 1yÔ#f9-%6E=Tȟah1Vx+bjc*=]yh쮪F]֏PA^ڗTsDyݵ;EŠ(>c+=31S_2sVW8v|)HR3} O\'bPHϢ Pt474ZB{LwP,*'E3E.4 ``cO]\]ZbpT8ryrÎdaym Ĩۤb*(J,O2@nmیrFW1<˖?zzģ`Ʃ6Fafaң{g~XOCDkĸ"_P]Y./m#-F"5:ObHd*!%﬌#Ous,'HJ^Au"%tbc2/b?\W.“w>jum]jQ[?ڇэC %jď;T0#YQ-!(eՅV)a,QyC[rg>{hO`l2N Ak O/tݽ. "#~$˝ݝ >ɻ R\P&Xdek )fQ-{z9p= uGaʔ5}7- ѽvdnK~,vlZt}EqbKdVtۚذ &~E2Em{~WY@ )74=(nACtLH%oK"VG^L0Z jhL i VՆc3"2A87ZO${iI@졎BKd􊚁®Pؼq6Gst働@s ,3 !WǍZ#ѕ$*M'=甮HYg ' R3TwKBi\vcvڰ9 "ԡ12UPr@y^s>LOM#[2yB_;=F]8f 7 얍eR:O:Uv+o]*V%X-6 Tk'nCc! KLFtuTvܮ~W9 fZ67d^ +:t[&s_\uyR_mvUPw#Y&ȱD%P>4n:1yoVWT/;~D [1ጎ'rv弫xɧ~R!W~5Ѣ8)lW@t}|IGF1GNx@J `CpER>BoVL$) ?,,#۴% Dt? T>wt8B>ɄU ]vN)z7]+ޛ!cnV>uQV4 +0k#$WgY A!Vqv-4,U}^: EN2iqBz7Z$E&Xaod~UNʬa3ֹj֟46B?"`;.3 Xf$ Bp4KI(9 vqpݭmjkKX^T|&!Tєg=.ܼR{B- ^!5;]Gj@6ETʭ49 Ok bl3^ۨ&f/“1Ճm bPY!nlJ,aj{ ,whFȁ(B ^޴.LHk 6 6d|xd43A*Ȃ6!)*Dl0p{םF8dR9l |\}Q@CJӆ-!~Iƒ]%Wjr Kԙy4#5Ǻ*`~z_G/ kGd_׺_c\f^DR(,p4G51w<_[ p"D{]=j59ϳ_]5Ժ.)$e/];niʃ"f5' yV[?4qL‫+#"4>ȕr*溴AWed!Sl{S<׿ :HV{/hQ.ߪ++Q~G ~hu͗ NQKBֳg2ɳ )'Nuάp 2˓h# .j/][3҈LU`Yʓ%ͼ/󇵈lGb]1Lw]c5rXڈ 8Fj([ 1̉vΞg9L68%D7x8O۠tza@00W&[OCk0RbY"X`3] Dշ #?tZL*.J=kiZD32z`Dʔf=Q4!1 #%1e$%ƛb}^BHǕdY-6kϐ:J^Ƶ*GiN:6h H{F@*[L=}<_9-nDOwց譭UKO&]ʮH`RLY6:Z_[6?XvۊM] VbtK&wnԴ|VW@nd`i Wo"Ձ>˸@IezXg|Bl0B 4.'w }(Ox *{+:/}ƃ қs1C -;as*ec˗|W}(~Qg++$&"ǭvN N~f/RG|.bC#YE#Qsz.F~̭lL}'!ƹ8OFۣZ:Lbk^\_ݤpO=Y`v&LǬ2v&FkնTc^gH9kn:eF 27;G6YܗZg:(leֿ{I"Gq#-sk|t`EBo$)HƓ/{ ^;r^ "=7lkD"8KDa:Iɛi* JodߒkJ~ #5fN}GF,SʔXl91Q".`xw c}\oV;W[' [P4AڦW??W>=SRbѭN^رuAY?tÏW)YϢϼER54;y5#x3rs!+3jxm 32;J$nia[O9[$rV>Cjuicj:@2㬧uݴRIpI#[A21OfUkfډI rdU۾7]4Dv@Za3wm>FY xw"5y}Gg ')&!dleOӥ("6bu4.;<8MdC ĝD{T׊Ȟaq7Bĉ눏Ce,{J`P16G/[[[s$*>*HW)1俌k8T̾ [.>g2;cRwn| N|e+D#qCg*6=`(/w(`W1jذi U%EU{Zʴgrm 𙬏k0tآh.j(S(`kyH )Ax$bh0# ;V֨jIhcD*Xo;͝Tw }&<4`ڏ^0gd'G ZR: 8iɖgYUbtaIn夯/A@"apD${$j#Q7Saziv]S`Av RvwskM޾{s+^xl TݙsnvgdϠkN[,X[5L6G (GOwAM:X m[%׻?!2~T\/T:d(J^[ō)kLv~jHK0F".U(?^Z bW[uOb3-Ϲ(s9/cBWY]&Y6_:Apޏ!F)cV;73w,:#I/8ƺ*U W&$2`dZyS8iiC5 _uYz2\SZyi|Q]DSSD;_,MJN%3ގ&j;Nw઺TN3/ ba$蓨^A{Hƍ !dZn eP"AmH;gA+fYg ;Nϸg~M K-J"%L]Iů80 {esyKkzCOO?Oݴnw+x{W-CQ%-4C |o6x3"]m*l' F6gt`?)Vi@j P.sFtF滒 `T[M/iO_^BZO =Q>k3UwZ̍ ̳.j;bϿVWxHˏc^ԋ=᪗޶c3DWZ!;%7Yr|0gV |=W"UYw ! K`%v;n mJR J] "#p5srcp%k`}>I,'U[?RZQFp4-7oͤgGnE`H6"@+1~TS%v]KWi=DCޏ~fƨחyV2ן*+L'flAL*,/Drt.H4rIMK@POX/h@^핥UV6'b|&6.ouI0ׂpsb1 c/<}Ӵrzos=$JO*3q_|L:I`6^me|p׊4RoeO:: f8;] & mvU*)OD&J$18[:|ùBhyj>Ep#_ <|zVMJOIl+h&D '^!!wG?s̭П-XfQouL]M2Pe39 jb,h``/.qZ!#S,wvhL$#wlh0†eqa~ _NۮAF5nj-|jWY ^SL=֫&3oBhkяy=z&d^%XZ@`8PAN*ЇwHO Uѱ!{So''k2$-b$L.6cPM rgp]X zj '&aXɧ[|/[GK) w23.8!rJȣAZjF]zqG*,eeiX]OA~gCܟd qsaG[LT!(V̦`PJy`K/Ejyc*+~~ !U"?ϐPwLēI(9ؤZ 垣6"X$yn;aD muB)Q5?SNaL㡵A!ѬiRt$7AcM.r*wJ21G,Hҵ0`T q>s8 Sƻ!wg!1}!90^ rCWz@+}Iʭ&(emilC@{]xTKkvwwaof'+gFٜ}b*jLzk*Zh Zx@6|X.iњ٭}&errӇ-sStOOҊJdw|7eqLLvST7R]4rH PG7K$dK7 ʣ0٪qf/ aFfUۨrclr^(LҌc_̊!Ć3|x>ijCfY3H Hږ& [0F)#T b?(b u9 MV$uV&new-&"%%NbIS!~Fb"|Pf#>PcxHdؿEY4}ux; vnY.X^)rY,L j8F.}Qm#~ 5|(,8_*[SC١[6l}fX1$P|&H_hm ʲ={QA~@Kq!U+LeϕK]#`DjS'qb3FrV46L=O0i]uAtXO_#qnjHFLkZ>5ɴ ՀmCVЀy'`\;_1CMz~(ljh(IB͠- 5NxrUNf5JzH oq0Y;']nm}2+frq eɣRQ^i`0\#.)g[>mu JYYSۂC W5) p/nH_ 6̈4 P>w Ȩ'ĺ--Jg9,!rQjˑo/ːNak_q~^9e'["R<&juE>k!rbab57K )XaXtaڈ SU@`mZ{lyE(m#@v3X/|IgM <E|v jcV4lN7Y=Z*}uo{)*^#ʖ: /89sbW_ ?Ɓb4F"ގeއ`Fc=)C=e6WF~Jl!XSi0^іBG:U+@QH$j =KXK} _ܙ-\߁pbЬZB˱p@ 4]U܆Ns]o2R"v<,2&4*ͨD}RϵpLk.3i0}_4vo+O$#@H^ᗷ'f 뾫+xLfu%H5r@C;3&bXʖZD{xےQU\6#RԅjȽϔ#&-8!X.4oea/nmu3++j΍Ǥ[a>)Si hOxQJD廭 A1O 'YTJ0͓I45Ϻ/_+%D+%'aO*[[!c`nN ѩd"]F27>J *_ec׍ 16r%/jwݼ}qs e؀d,do~ZRڢlv_ڍ  bVR:dz~fSK1['Uؿ]{IuD Wk ؟2ƶ*x YYC2QR~/9)C-)mWC4?@H(IlW $c߁*Lqן[8UhC4]wfPLaLӵ`69ENf.z kpLJn@lalD>߸#Sq_{5lx+p[+k浻 52J UnD0)A򙁿 4=RƜ%>Z!K$yWS¹pFb2&qڤm`b7$8(%z-3~d!itZ&fTiYV<vl``d)`j?\F|)4Ȫf N i=JKi Y -vۥ[$Un<܅}O'ҠN 7zp>m 7q&Ώ[눋ɧm A(݈;|?R;2Ĵ`|\4)~Rީ@zM67̕.l,Si-p@Q_f^7mZ7d0W1SPdڬP ݧEQ>21?{hĘ(ن^7g]9n(gIOW4Z:YNk:Z11|)G"lj!Vpyz!Рi+o&_2YRC$gOypR fRKpL6SB$?SJȥmᜐ]k̛(w{gtr>4/EoɮU"hR9bt-|۱aELL$ՀT<c=VԨ05crѐj*rۙV//~19 YCYfLj-틦c4LcKf"aa([ ',1!ƈús."TєxHa#=1cOzSA ^NH,Um[?SązX.x>'jlu` #DG3oFf7Ucr)toL@{T3YdxB̿Y[&gZ(UU &@8 /zRߟF0ۤe-G4F*-q  Z)!<^~6ҹ6Фy*߼ІZ*]'uv,d v88nx,uw̶ !KH_0#x)Cԓ!ԚI3ͭKLse'\TDwm-gaZYj~F$!73ŝ#YIv3la%BC;qGѺ?ЎFȓ͝3꯱3YQoZrZZ LuvTLτ.3^#sv {suMi. +cMRr#-$NDuxOe Ԧm#[c' GF oUMFn>|eWkʵ`&Z R3Q^Mz}(_6$i6s9-jEژ6\)ZS^v+m TaPaబoMwd+O:ݚ#{h+7]]1|f@ٿ`}}HN;r#6=mcWdSWz|N؟A{G8!aW{z'-*"c2 =tSDIrwA G>5h=͋ٵ T$L9IC!7Y!wI7Ľ<Ј ?ʾ|kbM z)^5ų5ԻVSdOzq,YU.cAG(5;MSu&=i8 !=`&y"><ۼW+xce ,2aY"+z`lFno3fs80|Bzuup.j}T6v~tjY@HH:co8ZM=5˽qw,kToA~_> 6##f"JxXp6d_љC)-/T7тA^/܈[R?Q#Y(J- MFHWMZ:l1p{"KsDh'y#h_U`>6%O;+|}72=<7HdAh-+ NGJx-3s󜻏ê%(mx༃M3RHU (r4z3umsZ9}l5xgWZC^mk%m%O7 yJŦI&I sf\Xݺ*gWe:կdkm>NfkK떚<v\rn샾]N:~eAp|t#T~Dφ2My 4tthsGXK/oM4n^89,1 L70W$86,=kQWձ(WI-4h]V Ayb8| Jkɧܗ9{s; 4NS~;<!ǶR y4+ۤ De̝<ч?y%K ӠǭOvՠ#r2NZԑw -ǙxJn xpϺ{ ºJ-VXr3MْxܥDjhfvńtU93vЈA0AP:te' 5aPޜ˪ѯNeYbVL4LU%[_a]^c"1Te]Ig`Z'1w{/! Ŋ̩1 յJvXp #&ؾv_*BXQs$G=X"쮯xjaU}LcH %tSTU^WO qoUxvJʛeJK&|Ib8UXlRuA EB O<ždG9-Ld1G=#b/EJ>j<^e2AYEߢk3НC>?%-.QnۘPb  +Q@ۅiP}Y& Ӈf+횼Á/%;%GyTmRdX#tvh!{,c8J]u~]ϤHL1? 1MU9 M<$7 27%[ːgw !'h2lu`fHlzaۉ&8~9V$MmD tU.BDhEwSHvA0 \&Ӽhij/c=Xڟt1e8rv6<#361fBQMn7t^2nhқ$٬=廫^c,H@IJ-7A (]΄o'K8x5g_}=^Pfr )/umy`)liz|9k@Xq% J%J*<7{(4S~ٚǗYZm`@H7jLbFF u.J{_X9ułLn>\ެr9L)ĞTه{Yo_溤 hW (䜺6?@l ۙd{ISV&Xp^w8vmw9Auy=qaNruhN ;أ^rnڕK7@(b&#j51g4LL@ڔnrwM< /8]gZi~/S7׈afUt#32yMR qNs3> IpҾC8@DSKm6;*1ga4yG/bG||-b@UtY:IGq$ȉ\>a2kbߊP&W, :㐩zCYd?~dRAjt`Y区"""Wj<ĞiG׆ ^e/6J˒]m[dTh¡>k}\W9RoLjq} W.qV`|*DmV"+ ~,_ qZyPT"vdrQ3)@/@ ǥ6du"ZB[uPA>d *vF"S{ Z%j8`Dd: }&.uJCJ$sHy<&Gd{(yt!"H? sR1S`!1n,tۘ!}%2֞k+Vou~/C!K[?Kx`rf_P^:fda"쌨#'?U` ӾSBV jCX''G\䒮wcb%N#'\~zNɥgDk{Yl4!p1Gd>&/U0̤KI-q]?1Qs=7_M^1Q~+Unm5ME~23c xqu. ӭ/ym@>"=4 Mp{xSdop-|(;kQsa l*ȃ-ȺMd8*zՇTkdzJ.I@uWSS%4ϼjsBY7n=_"a|؆SہO9,W]psW7Io$A16sqY!?;l,(Id3 *\ W2"=tAjLh\)^h/!b]%&=9@<9A{衮f2i%‹UST,76 5AJy{m,/ UW0i0?pU U ㆟hB*f(kC?58DkqX,KCCXz,z跱KJc5ShyUHg9M'-aZ(2+ᮋ G^eچ`vFC/ר'J:l=Ry;E\K*kON4NigUS,ӫE@_U26.x?:m֓trc~q] QfNp<m& ``LBӦHlJ>6Z}q~ܾa^x1}Op1ϧX׻g>A8N#-IMe%6+>1.lzu2ǂ.3@  OܨNP@WAR얊ZL;CLUʮ^ު\jhd:1e;/lK$:~(usUEn.P.s-m6ñoUD0 Vq0Q._ifd4{ e1ؿ]q$IwaKgM$2}zK(⣝C) od/7f4N3Wj$G9`O~6+3ڹe:Zu>W"Clsr(;:1ß(ɯ?};wRuux*mLV(nȦBq' K8L֭W \Tvi!?'H'vH3Yp#~lJHK#IĜRg\mR4&a؀n۹Nu1ŧ1lФUƛ9 J:H =r^s"%w&~v}2Ed>ܲPOJ1.347Y~eWHt^4NL\NPq8 ,ibl_mVh]b/Kaouyq3}}0rBt1z_v Ӄ1rɚU P:c@g/Qaq$k |x`I3Ϡw8O&Z غ'\JwQDgʖ:`͜cL+4Л 'x%Ɇצ /!j hڌnȰ ^\|TIub>bD)6S5=a8C.uUf^.' Lx.?5Ôآ <̓3Owu E&EGD8Ծ*i4ݴ}^ņFO6|f1{{xeMSÿiI*o%Ej$q* t` o% *: >J(c`e8԰VJ&:8_ls5XRI;yaԁ"bLzĦ+QT)Qkߙ$P:SW <8 8U C0vP҈fJ|\uOkWڦ9%(% F <ĺޖ>QSjDU XϠ#1s*쏩v¥ Ȃ6k|(6늄Q+cv{Q&+ƨZO5A8ML)t!OkpZYEktdI [Pdi%swx^I*^T>d5۽^>O'[XGچq;*+P9ѻb]΂w0RO,y4ɀ WDHj@5 [M:Kٮ\st\Dkߤ$Jqf XsU7݂mJD3WϒK;Sl= j;$)oH0X/Lg"fk׬^l.0(*~: VwhYl2 CHQZ'h@#Id l XB0ߢvt'67#[ڋt 4Cy`Pg?WXtrC,%z>5t'O(U'bJgSOPec f>I|$"%(l8&>Y|8(OmIvLgS{>[}R\0X'MqtE_JxZy@NTވs,>Ri2U%N9.wv,#̄`b%ĵzv6)+lʝW%d-B=Oο'++'XJ_^ɵή1(g:`.s/1dzoUwqzP:Li"bIyųt殟 M m-} HNaϡ~n SɕpV>س U8A,$I]t=dZzOU4@14eU4Aߋ%ݞﳰA i'C]Q/68Ճݞ WtFS߬<5bQ]U⨺s)4nVWM\+>#64 Hg1N(qUEһ H״\,ԃGC>ow"{]b:hQ-/!bb](L _bD HZr%ORdo?@h7/rrdK o[8"ST.u"WT3x>1%TeQpc<@Viycg|d=l #bm1\06BsuN溜b͔^V6NÂçH*)g1{RG"B4[ކsl~F<1>n6l`i?K1s.  \4#?##UО҉ةgd%-| / &3[Ch;2>9Snʼn*!xѸ.7 MRRr.#j ru%[.Hhid%As..-ʻQR`$UrsēXba:mh\K }F^u2ʶR/r,/C($)GoR#J*ѫD6 休MG6˥AIwq% KQ Aw:lSydf>Ipw2zC-)483UDH7И'4M ֣q4+^fr5RS"3>RQgGsx70W*' 韽wP&B'=-MHLU`l37UUWMmՌ:9!GhH$7/7u䟕"^DlE6唽C\>S3h yMB5| ̇"|-%*PגwrTʬD0TMz1w\UO@aTgGتYJ.esd}5kЪLՎrlթHFC Ulѹ^~pis651q=#++P<|b̟ 09̗p7#܁D(Ee'qGjPbBͅ p}r2Q(w.?o贗Tz[28pF%Y\7-(VMq"wjD tP+$0,蘎CA6Ց  ]fc"wdՊXQrIs%}5P^Q|_z`oVpu%/qITP,#+{xJ*] %˓*T$\N>#+j^]&g?UNc(øDx{VD|q-ws]zS/ suDف$cSۘ "ns=!{MFϙ)2saBQxXEP}6Χ0UDX{ `ܨIۍj17sLg+u:L@ϟ5H'e>HB֥;>ŗ@74ܮ} :Ѵ"dpRG&/Ux,>$UFb:E9:wZ2c֭/oq3Cv M,t T;!(P#PĈǷ$*:)KX49&Y; =|p]Cny- iEJ{ N;he$ 2ύϼ|9~er2_̴vCc]AIACքpFM=+ Y괟i e0ڵtwlN3:֩"Ǵ~լ/, B߄%Aai釨Wp{V..Z(٩Z!"&;NC庇Z¯W^XŅ9KC\ kM|0A^ydPIKlzI}/AW"S_+%4hG"cLIS4ip:Gne* LL!>݆n-b@r12P8(8yqH9N|wy͸U{VD8&e; LE:T#q Z{vhK7]uFV!1.@qp;IHkԙ*J O}Ϻ.r+ |)*+2Gnh7ZOl*%o2[kb*X3$=[}x,Y(q-|!-+؉y2qF_+Cc|pO)$\R$9Ӵ9J)Fxmʘ8#'cHW&j `yOOpsU0啐R1)`,Al U9Û/n?|L |1Npوw9'0T}߃';N_VwW w6E(u < f/kV& dxɔ*/Wo&wG,F  U(Ă8 ᕡ1 QXvMx|M]&;HA0gg*لpWqb\ߚhmF T 9 )#Xıֆ2N!7B2-u2喓{ϥ{MuT:' _>?Tm@ pp_}A(S5I$-_ 3 vqemLu#a? ^#)C4bY9&\eC5oѱl(We7CBZ W֨Y^*MA܎^8k]9+٦Gʣuɔ=ߤú5BRxZ iU{2&sQFo0'ӗ啬n/4lX@0yy[i@f;baMP߬ By)kCN}ݶhDត"ξ@f ZU F5}mmQJ{&&ƉsU700ˈA>\)T -t! +?'HwR#Eȯ«A#ҞO ˅Y?23 5i_RIg\%$x|\7sFTeBC1 \ĜѷqY(rR糂lAe'3~4dNޔ洗yW~3{ |Lخj:GNFk4@#DGz-E"n:Qi A IlyCz@-Jѻ7F{bVQ}fn uM@ԫ*I̫{kj1\p"A$/%0Hоa}~ B2j@ЇmieLW=^?T8\*B^hn|֜`rI9:"]I)!7pd krW&enٕ<޲f.{~-7|3}3hlj%2d뼏BqmX !miZzBq#V4/'UV_l6L.Fl 4PjCV.QQW:mF+kr),Df:0u~΁X>VR|o)#cBٽ W / tHri}߆dQvLm=c}w|ظ\" -= ^UTw:4,8L]wkdJ_2u4#́E,Bg.ZARg;e[xm<ك ֣HJKRA|,dstg]j盔%B))u~E;(y'6p2:}8ox]"rZ~*]ꗚMw8)%G=IUi0j_K١w6ن#aF)/VqنPϨo{VE&ӥK@0xED|6 Nq= |bSVNZL\iN]i!YGR0oC(SbvM Lh5]jߕ[MQgEm+.G۷^3_*L|jZ-k"&|0lyFIf~I > ҌnP!D2ތ+OZZc˧O:ž9ꓸKFX~v.c!?]ܴ\ 3pH?"r~.ՙC}4G>E d6S`5I<#rƲVCZ!c4 B[/7\Mbk8%v4- )"oJ) TfKte0̀P@ˉ*cgQ}\d~>C51sUZ n(f55 4#MUZ.t8&V"뀙FϛXzkc)3rvM{|VV;CZ0ⴒžLwBSEd2َ>DzSEon0.ewi bKM\wY7ғ` :TJu;Fʡs[ݎքk4)#%x^*Du1x~8֗̅*$#6Z%ł9cAk09& DȵN#ztɅ+ t~C>~jxyXmEvl dimxD=Y^YM/'֛VwB:Rs@A_<5Gi6 :ZPU2a 2ӭJs Ȋd`Wb'Ý'z~)N@Bz0G9ASd +'y*&+,CZ.e*Hwuɂ3`AX\'2F:93wdY"TImZDwfqQ)d.Vw^}`nR܌3K6+p] }Va;x8GۓiC|#ȑ`)BØ 1=S7IӖ`ZbZoe6FHM1\hN.L6xTRη>pP:i)B4Yt?bfYlZShb扞>VT=([ϱ(*qmDŽqFKzEy=g)P ?Ϡ} cQhc/Cs쁹CN*Zj9!RO3;?/ ﵤ:^`Q^k#D3˗}Hc݇j?zgi 2X@.`\~wY uf Q3ӨF8x,x[|D?b+ źE>@3Iz36 'UwUuan\9\g$߲Ac(+ ڳxT uj#Z4wbASk/btoέNd]̋7AׄGeJŝ I1 Pgo^ɚ 5LbRȚHἢIu.Z@=Đ6X)1Q>m|cjށTfDžUtX^^7Ťfezl % Δ c G[>IR]^@l?,gyHѸ g@iֳ˛"WbGj8>gφr ̗T(@P.L|z:Tgkz*,~* B ƾ j j_؋&i8;g2o:e o6u['leMȂVFp](Ø*+ߍ\]@<3KX N葙S!r~AGW-Lt]'-e W6"iG1Bq1=Mv q0?XY:­ y)jYaY-+:Tؘ&DL+~9B>gĶS;ɺz\>MDoU':l(/"y>ǻ϶x} b.Pt xOU6jSٔ_R2؜`Qk+v]p CwU܏_'sGq6Kװ4D6\+ޡmt)?%|ځ*`H5p1i&icQz{d-RLE>e"!NSy32RR~"8M;~}{)FY_XS8\ TQɑ>KIF1۰K6< EeߋHM|R:4XuJHXڅP{o&n0&|X}o7ԪTv)@ ;|z= dV pnC O~n 3Qţ/PSzΎ? `5yTV%gwUD-X X! FQl#b>)[<d"{5yib >a%H'L[M+ 6@rYO_Y/ƌL_HVvΕ,\ͺX`1b R B @:p[a=ʷ~P!rA{a(kh 16XE/6Iڑh3~lU^F9h pfPu\iR"GXӾf)rF8yЌ'YM٩AEtm;߹өWyƇԮ{3*Y .?[A?3d ĒtJ NEyH.6RT|(zRr'Cc 5UF2 j}ֶ1!ZS[/,vaXe"O< [[Y W%R ϬD 瞢_5tXŝ ,*U'U0R"0 Ƨ^bI܋Y̫vΰt >'NԕhymO-3z9 X.ers*,ہ #\% 8˿yÙA*.`q2(K$-}.xyʯhcȑ2yJf% :k$ֈVQbbiOEbz9hWcH~CiJnN c)_6Sv5oavl,s߄YF3 7'ն&_FC&/:mb"NRn0 |vJNaуzB-|ˆ4qv[HTUF|D􉍋32s1*>> v"]>ZWU:x_@NV c(ڣ K'fhuZE]ƹƇݚU"!O}s#ofi~X ؟KCCYBxfiKHĪIC&3w:@'I/@zwX}vlה UGp|q~{:TNV)UP.H^ϙDG*W`^ArN4uـx>ߞsI=y3dn(1/[lBl]cvRK5NMs&g"5PTCuU,\],\Y,5OfT2DPͳ"bhe,GwNڡwq\qz7U{35}yt*WsL>!fw? t{јj]S8<̏6~v=*zn9\[^5V3GP/;5v籞X+/)\hɸY%mt WRoyR.ƨK rZ ?b9܇ᛴff6*'pJZ7[qg:ZNS+*xA5i,G'k֘EU}XRPoH:*,+l݆0g+?R1=!~mJ2fPMzyW{ *u1)Wi 5{ o;-tD [*l f[.M0rVȒ0Bh"}㷵7{2+w\ g+{Y5y 琄*{ RX HGlY~Ms]*)b;CF!O"$,U2.٭=vnٯ6J1rwQ]ѥwb.3μ땤Oڒ qSFՑp*_9xuJ '\6]IYcos)"b LDu;єHx9;O,LÀG-tG&GY/︂K28i! RE~>-;uvV +}5ǜhM wG_ݟ!O=Ozl;K,wYdRFM,q-xU׊M ,2xnF3DԨMTv8hSmwhkB~m CF13 K̟Ӛd*S:{pq䴣%;:"-~}ƉI|4v>6!]ߋ'J^lhV1)މ@N9WG\Ec$YQxl$x+LT9Cyv+w"pե~]-Xlh1=Ee [lƖf}{J!q"=-~r0TįMǽ /fA{~q/a);UCdiMj/5hlnŮR`L-qTX \:@@+905 ,Y!z_n!xj[}gNYM_BSuLY XyZR -)}-+54M8;F iMdWϫ"m? RߙBm_[:I[e>N4U9P{ BE܄?I))c'"U[^@鄥R v࿧(א5c1IR1w0^9)-{&<\<h\*ZSܫ;_dvFk& .yL`9o[m%;qm`lu>S*z KLMfv294Fts- iQ0_?-"OkS^we`0$aUp^葾5 juuM ҝv;at^٥AIbh1ӂG^0sx=3AEYaP6:;Ưϧ%պxl,:vn?yWF*,) OST{Woh;bcEޕM 2q/Gu@ iG}vJ8.Q*~3{ݶ+e}]QV#$=1 %a\حpO'B4!½z|8Al86ꇧ>&%./S%-yUmE $AU?% {j응* V}UY ik,53q jSa-*y{X8|ᶍ\6fS5[}QQfc5 b`SOW}z1aMը R5Ukpywԃ~*$cjqlPQ 8!fY藧-,C:ON0Ȓ\Ti҇3:؍:,-p%q%ưk~G8E CFAY``* $Z_e&,O%OClS2xd*p*GKX4BfA2_5۶'8&UNk%c_ޤIP00<@fr͕f+1;5]9" uxsv,ruO2Q`/-U;ń"6(vFߓ KTfzC0K۶\I? mZ hj1> r8Fq_z":*ul&)?7T1?Kl6B!.&9[? .N!m6<4ěDdUVaF6]͝v}:m:k:-JpRF(|Nd"f|uP. ?ðDzHd}P霱>=4 $[a޼JԼBp|Z֋mkdƁFl,Kn_ۺ'`ݬcV|jM8ƥW+*zS`b0s۳o}np,E 潯ra\ +oE13uenUЕa4`lz\rdHUhXӓm=DrN=Ir1gl} J_YTWT'6,ؑ-ŒxA~Ǐ+>w> x[s ҞVS{đqaN[ƮEdP !&?OcAG_d4(,CA8 Y p¡#=HB!}壒Wc(I) 㙿[K>!1E<{",HN;M9'2f]9Km6^ bπV=K8ILxO%o A1824PE#{VyІ[aqb=9ՏwpW+1Rsl/TO&3Wu,RuGz+r_-i` Ǎ[?5|ojCav\ܛQ2jc0Jށu L$6W }Lp5}ΛB(ϐ1pttYH8 ¥L"KFo|tcHe]/:K?"~^Dww% [s/ޱIJ3厪IiZ ؄v?>Fp9?R DW|&NJͷj.j:Àu fc v^yOu=?]ReV`w`~= u&pcO~eAL61 |z7u#<ӽ9@G1xS[]&I9LvF[*.lq%qs H9+qr030{S6G终"PK1:W"a|it >+)l}c|Ϳ _;7y5Zsyb5.;$/ϭ:ejZ^2U !qFlTrAlULpB$n:DP-ž} Wa+yxӣanUl8eo2qY/QS}hX5 xWbe䎀])X g_X٧ZuЎxECd-9˪(|;#!*(`AP%i8sZ`'r3jtZ(G%$eU+nq(t&Z*qP/Ѧ%Nmv( ZR=AN fBvӇw6=hɜ})m-Cg܁fө"Rtne#cƛ;\*K{DѢO*-DMis(LoҼtѥK=%ylg+>qE5&9640*fza_kf?~ #mTޤ$f]uGO08u_މ[HQ+p>.:5LVLE}za:Ye>HH2dKO\.؊,+FBDVoۚ?vRݪYȷBue%v0#CFM3bPuEf;`Q@v y rܼMKT* !k3'JW_^%S+h3Khag:J 4~SI6)2|@ZA9Kfo9,/?|dg꒠1*~*{sŜ`9v\'sh+-5QmI 3/+"~#w !GTn1}bLr5 zpޏeͭGi%#^H|cbRWEt",9!Xƴ@9?esݟS73cgF+0ncHמQdƸ|A1̬^/x=@ȠhRaAEoRߒv3OK4zF @gO5?R5YI\[II[kYmd[t 3DbawRJК (I+FY=|Ĩ&Ѧl?$6R,-D.,IDh~E@u瑕sU9j1nmS6$jx9M(_[*4ԋ, чma:!]czE n. \Qa29$>Koc 4 5JڬŰLx(ܫn>֠_F']2V8~;%1M=78Tʝht 0ȚQp!C .Dg m|0=_i+opt0dGsB':B#旍-بE)CdH?nߚsqΖc8L8zܠ[OlF }0s]$1mVIemxXTwl5qu/mio ) WT|;UhYDW]O.͞y FNM"Z<fQW$;b%R۟>+aO )TR%;U`Z!{ݕ= c7k&厢$\qLOȉ$~|69*zLfymk|4\:@μjFóX1sۮ6׺!jM4ZftE\l`M?.`!6 ;v>n92L ~gGl ]s&X38茖3P!nNoD|f: 7^*m2i>:6mHI DeҋHZmW$w)'(xމn&A9Fs ' ne[? 壋{ݽߢ~+8Kﭾ=y\R 6yOec5)0Ʊnc{hLI9N-"TSRǭjÈ-JD%I7GB|} 3eRA ~H2h#6eӭ8E}^ /U2GGmcM>qua%- /l\9 ߲ʭg* bM 'Z4w/(:wl!ק~,G69Dz_gX-1ъc22rG`Pܰ8 FfL,4ڋtќhmac+ܜY=q֋:?-;:&jM+ ھdJ'A_*>8,009M"I8t/JrrnvHAܗf]9xzv믚sׄy>:Kś5v\aEIwELė`7IIY_FfVx6ccm2cz6A}eb Nkr7+fB$/}}^4D%)CwRf\a~E')oWhnyN Rmmä+@Hl!&BL+ho@~+WEбp9]Է@g$jIIjevfWKQu$4ۓ$S3G̘cԸ|UҔ|I[}IP4V2ju| KAX{y=n*k3@UqFOBS墖Cir%(eBoR7PҔ=%i`zh OWc gM=('a*mg#QlAq ?ΐ%+f? ~ܗv)I F*ɃU=tʞsуF5匟Q<3v/ģP>h(ϛyb*)@[d*<8NBfJoܿM̙B"Rj(.RFHzY 1y VGHvf |'B&ԽLK Nz@*f 3ayN^$:jI Uo'\/:g6v+'[p9Hzi%Q7];) ɬ:HLnɉڕFy7;%% y8BZ+}RTh/vz!GA]Ҁ[G[  {Und.B 1l71ٱs5@I}=G di $։zX$XVec:~ 93j~X4*> #\y` ݟu{WnHa+c"x_hIM9ƚ{FIi>Y-O>uJɈPKVzA5bnTA|NGnmY]DkǢOQVVȢEm>N?};_~~sw0h .BY:.?yÖe |Vf)*]1T{Jsp##:Kq,u8!!ش^IsU5@!ՌK/niFmW'2U%i~o R$>+dU f-Oݏ=bp㉧vvtS2L0 㭱*4&0 _|CKП%AԽSyBvEe  Գ"e Pr^No GJRc۔3EQU4`Z(h[`ڤç> '`-F~3E-~hҭ)H.v9@X xz򬩯pPTdEm/_59a:ز0ASBҗ<$ Y|;sk{ĭXݱW Te q+9^*H?jǙqǵ N!!::v*hت^th+;vt!M }AĹ&;r*sz@2@`uL>sR{eD'[]F 4',tL 0WeؕH<*(s*sRz7%*`n]9'Ѕ6uWDw圄Jn >; yN|OV4fJ+.;{)q~V^߿mfM؇nfQ;[)ϖMŘHz.+r'~Z^?Ӣgq?/hdQh+l<|.J9b-Za8p^1eut,\,CWfKi8E\4*U} luk>fSB/("z<@bdn:"CVƒE—[D8+erC_T0oOԟm}lgvaIpkc^J4rNZyBYwyej8#Z,3>|{\@˧wn/bik6/Z T3V;8,7k lOyq"ٚI)c;SppH0+>gv9MӅPF aT7r&X hrq)KeCj?r%bj#nx<*l뜔AZSaQ,n͊' 89P,Jt.aS;( E=6:06CC̷]9,AOaK|4jQ9_мXtͲEG7`A-|CNxpgIkQV C$% B8>>N:~VJzO&gwO-ǡIPk?G^oG- 3s(e o 74fT܆lHYI:mЙ0A:AM}axvNiaݍ,*@|Bxn*kنoڡ8 `Qq`n| eDE|lFa'HZ;`DX/%W\/>!=}MMi&ΎZ>ǭBqZZ- ,_&%;UcZFXVS=R(S(ӤMʛ5?B+G_ 5v u}ưQtԘnlPC{>72""PN꽹 i!fKfጫ7Aty=(ѕu;|qyQ Ѣ#(=Ϙ]Rgrkd6<ELA~b#<\`e"yEq@ v,?z9sԫ!I4 ݖ!]J~w)2bݑdI/`Bk}QT5*<^up7l&?k(>=wcO+޺x~AzDowVHt5x(#V7j77i*NX};}9kvj{g57aTݵٗ- cNE/oH^P5_ݯSvT8||mXؤށ}a"d٭M:S3&#K5/01[ P,Ń!KK UD+q;^RdF_ &5lj(m߆3B=hb5Jiȟ%0@}/;_AԮo~n ŷ@'T49&v}Xm E W3QeuUztYujFI肅u5f5g"m$@sÇ;F[<vb ;'H_y) Zj<YϢ/# ΛSow҃Y 聛GErx>?GBdff퀝ŖMV0mbRYQu}ؐrt$4qsXp{Ϣy 9bYٹQOK!*`V(=+$'{tY$*Ƒ-o}KUp5©Yލ@6Z]Ob.!|{w0BtM#&9eK]_$aq';e(1;У%;+FjYVSwY*X/ Tu做A _LA/m͏]!n)*B]e7^MWSڄB>xorf)\4ލ;oךA$ pBJ/2 Q2\ءrõ*FBӤWレL} C["4i|"[]:?>_oL)bG֭bkEMhi!_:Nu{eqIduo hW]PeԾ@Kc~^jf]7+)͙E=M}sX̦[Gw6yh;XaP~S.LF㾿DmimD-E yu`iŹ:x HZh,jR/r݄'X +CDF,WC V^PKMj {`^\ltӹ*;+F'\,;^0E"#y\dUhQ$WA`L [; ml77Bs:=gH_F74 xlP_|趶`mu>=Q^cӹ7=S1[,6Ю9>2oN϶{s[+1%SěQnk2!oRgk)#!gOS[!hax+g,\o3QiV#0i8MP`bsAP-S'/4`2r @MrLėG߯Wdky~xmZB?^m*N^1bwFu'5EB_m&5z@ov^Θ1G9k\7U<)n'."TXn GqRz: k ծ:oXK ₗel}+灀xb8<'g 93膵=bg 4ؠy__?7ګ\Ġ`˞IG/]$(\z1@ 4 y(4ww168oW S8 @nXS_5CǺ3fvݤlL}!{ lo+'-섁6usSVeV J%%+,ڿ}bUv _Gg(`e@+oWg,Bd[ϼ4 1ƻ[b>a!IA O6ÆcqxT -Sy؜xsl.i䃸4[w&YQZhx lJ{lb ̛n7)X׆vtmޣl] ,Hת udEd  .־q˯cb(8eo/pZEYO65SS*GRFNQ3d^P64E"2p^` jG9~7|3ԞÀCƺȁYԅEbHgU%QY IaʏA8z7+՘>UC(пw.'Lk HsB.$̜G]`WD򈸴xajwNMa~ۡa3ЭY+`X5nTk_lju_j["v +V܆URVЎG @/b"#~nAӿ,7 fއ*6eW踖ShCR&?N!קj %c;?♓bǤ߭ 2SaιOա&ef鬿SDobFY[lJQ ɮj[舏p ¿ګs]fwX? ^5N| Dk'ϒn`FGʯ DGb w.gk`[ݽ}/֖,F}( Wɳ6eR% 侌 b&'JKZN-K}S~4fE@RܓnS[_N%}Ep$Y]{Q}h0)Jjc&>88\{f?fE@u!Mi($G* 2a1jT;^oR _4!7~՚㸀HM32kr@|粲QV?c8hn~,o 3g! S|tZ> ,t:륶EN61iGk:  ݏMcUh, sGXb"Lt1z=&=!kixYE{,peQ[<0*̊'{jwVs4t. nz,rςP¹p:OAD`̫0e.^勗UulXIK^9uKW^\o Ai'd.AdO\~B܍tN=uzIgˆ> 3!TJy xqb5`s:I>GSUI[? pm\Ka)($JcEF۰~ܛ̧&r[!0#`)Xk{>a6Y9Q+wcڣX4φ,FN$o)O}\˿չiNmJLM-& \YE.M5ݽ1C>Nҝ ʦ5# u NB{/?WƧY7r` ;%mVU贛܁?9*iނCbT)xvU7U1M(iRuDtS܋tRlCcDG O1Tem.87Na&Te4{-q~ށXEkт-(ƀY3Vi@/E:iUKigϩ$6_ G-ۇ)YUiW} \\T? :N\ *"=Mֹ G,J}}@mnRqllyiҊǁH0Lvm)8 lԆΖD_yx7|cRwd\>ԥQ\ZML7!ԋgik+3KXsc7 ˯ʹP =P)ҼCΑ7!x Atf)zlB;ޙ0daYGGP*!nda W?AD}T5*x" 6G3((L/R>)N*D)֚Ð> =d>DZP="ö G3:\km;p" meQCRx A$BuM^,jj j{ځQdjx+Č?zl*Z R-K9.J 9!WQN'i˙ZY6A6,Jَ?}yFy듰#A`C7WՅ;?qjzyvwnP)"Zs5 3rL\4;;cV!Z{_L|g\Sn"lV'- xyklk2w~UxV&4W%9 OP<6!g ު$DQIOWo@[w,9. #Fʅwǝ^hkUzC|X(큆\rGR" w.*E!P9^'CtF6@Qsе`%Ar?ɭ 0?_N6[.cqGഡ쫑Dh+SkS[0!8hA ==>/űѯoZtaI \|ߦh-M 6# A4}3SW5-rv-*bՑ sNד-굧4Ws M wK8뿢[q%[[s|[8=B`ptOe%F"6e˪OAA8oH['wĊh%o #/rO+%\z) = dj6c x,? ^$[-DRDPXC,D mI kOzظbV!xUĢU~Ow`ۗfż=;0jI$0f5_}Dec摀hg (\lZIQ'5ѝF>QO_3Zr|\:(ǽhRh|hbйqn>lmfÏ%$/KסXRL8l}cCẍH8r?f) a+xq)h502v ,BݳM$rCڰOswIɦq7/>6$ТMhh{ F~u&g3J;z:V xi rP@'t۳Y64"7g FǛz0;/7CBGA}MTxK~g2SXKhĴo:?Т<]7]r"aD1aTu7h >PT7vIgG!/b⨝=l~_!fC,>Ri+FNQy~o2?%\dDMNw76l9*p@m 4q7.;GÖ61^59< /*Jfcg#(9Fl$%"}9mYlΣTNGKEsYC[ИDoF灎5Xdl8F_0s/5 !Lኡz$b0C). SR|Maa!yņb"fQs#Ti5 agl&ђz$]>N=9N⽅,x?TCYg 5Pio]5i(Db18Rk4;>tc*`0;#^INCDCx/x򏔒̪ڨDSIgGP: íX Ce)3ϣ 2H>,60g g)?"(nZ#qltPyqO`S) ]M2=|XK8HR/7h(#; bQ'ϘMM7Ӑ'״/.A,b:Fս6]%3k 7O\6sq: OqViPn[͋n-Xm.FIan=%^1O"Ώ>nG]܋0ոgC:5=Iψ5$s R0tK헢6atcC?4mX!M,۽CˈU838A=G^-rfknר|xh`UXaƳսP75Mh{qk7M듖1 Ԭms#2U P4_d:Nbv9_uR: I+ 廘NOc @`?֬|w,;?RftHvCjzk )8(ޙا6,D8z -፾TyEENbNsCez›;6m8=k-azkue[ mSfeLЧWD?WWmTiG\m9oB&L!89#6ShIM[qO0@cY첹GS{Ð^ϖH[x5kðJ^'rxӨHW$iHWGq3+ r @M2WRskd6P \D;<%Gb#?DfEsoq<-tnϬ8 m] yvx*h*b8B78T>,ؐb|)q$ݍZ7RIS? fvDSmB6 ά|I q#H#CepWYi{ߋ@0M#)j-$K4\sF^?'Y֊KݼD%xD@gS w$mAm(MߛhGbJX/QO%wv^͛.Ǒێԣ-–[$4^^։wA?>TboP䒳k‡.bN5ᅅs\hl#[TR)MnL.ى/1 e)D݀Hu[ss*YlBM3ҷĴGYKAMA)]S'{;ʆ0'iU\.ljYv7S=^+"97/(ͺ'.f'y:|3b< Ֆ{: l7? ӂ\)\̈́tg0($A+lgEE]_se*75<6N{bV9Ѭ;AwW:\)n5a681@zE OmD7ahSp1l%,!:ZEm~3cD ǐƒP[a -V:lͺt)wr{>v&It3;|yWᕄqvD~:4Җ碋 ZX+ RLBR!p嗏(?Rp﫦8ޚ!3XgMS TAf?O*3 ֽGgn&3.{к-'t_!4W]3#Rm-OE#<'HW5qhpcLDTre=7hWD'l dw:%}~vWqBx_>mJ %D\An3|, x_c{L@83pa:x}B Sͥ)9W'aeW۷uTQKJvG؝P@+7! H?F,BE-("n:EMNp0.#6@#KB ;>.MKYԵ^ Ȏi5 {H]yaBA0;=IPy{xt\=>DE^Q1OF@[|OaZӧ5937H|Z.EK];rkdI#';m=_bmRȧ=M e/נq}fQ!ğC{؂x5!Yo+:_QH 7 7o݃nE :B'o\DS#X~Jm(*U]&01[8StmZuzN%\e„x][M!$0.TQ(h oLo(Eg`UGH;lnb<ؾrHPeY"f4~l%T8b* ybCP2AĶX'[^tՂFm6iϜ-րMA,&|) c ժ>[)@JDE~LS5NOө~*Vh4f`$[!Z9%腙A@_$F-"UоdP9Tb?!=}3>h;H湪̴~&\+30'XAAҋN7@."\jM9?rsN#KDH[ڼ@doK }1rgo98JTkՌe+o" QI.Kx]4g0?fêW5N  ͬ"oO'/1PhMv|>gc}^,,L> ◲utѻ8TQ-nN+{I\<4vxVU ov\ , 9s>'@͉W}F$S!#96u7 Mߥ{{5WTQ_!"-ے_דCccFh7O*VeVKEmH;ߑ"p=6S;+BRƒ~$R1al0IE 3KA(E,U?VS;xФøtƃxHFONxXzX߲Dr%NCmTS€ظ24%;s~ " Jܛ%Z ӎpoTKn( Zչ-1iv>wH1қ`h7bnԉxD{G",lQD9i6?J"5{mbS2Yf[b{3āvISa.+ޖXy g` #XPAv3юT1::"& *\%FcMq6 %-4e]@% R@R<]UKKU9] lt:yTmM/q.H aM2q)q?ݭݢNֆQLlM(~wQ.@2o-T%DM'g[L|uCǜ}^ildks,-?ʨͥT|Ǣv_M7ipR U̞[ "&+_rF6+,FBGjK &t`R;!yE0;gs k,~_û$1)\(ka;R@Gͨe;/ƀ㣚\gގɗ鼨z 4q*m?p*,24~e=,ɽd [Z*j θ#4g콦VK|s2?3d‚cy5V/QA+0bfx)7Bqstlt5|D7:de8mA?ح.|eZ"a7Cu0 cD-:_x}iꯞuā;C=OQѧ#hVJIj$vSc]Kj n1vԆ30&gU0Vs 1_1Cd߮ dnp J.R5tb'4;YuǠ~f> }T 2x~Eʞ\i%lKy&Y]g+pէQ!'OapDtKP8Sm~J"J,gxG(ʢ1`/hd,FF{2ԧ^M/]MzڐIu:%QYaOtCX)9-*a_8[[;5hcT"cXDg\Lt" 9<}p+> yM^{hX9q87d?_47r+ <@d)'vlEgyC:TbJ"·:w]pT.Dڥ)%$y'FX `ɗO"9g(pS54b2uvU<}gMf{cRG`@Ig+YsC tFlʈ2#;9q 4lDdqORn\$.^j"Z .w7p]} utv@ @CRC!ʮ\gt‡n( շcr'~[3k'\U?3.)k O+I p{-;1 q9i%eL`37xN/ȿ6D!ƜkjjuHÞBUMKiu!D*f7E oȆkRb0g~SŸtS W>Ne#?"i]6[8Oij0dXϽ%Hߴ($+ 'Y&ς*@7ÆQc nj$>* {Dٌp9uK,rbFD;o`XH|Q #qm+Vݳ"W!}Mh FWEA5o  -4>IZ ZXmv'KO5Z"C b_z'\X4G$WBqq|'Qz,m[)X3g2~n٢]Yt}9WV)`H5r p.Z8<߄]O+tgS+Oҋ wG߰-9Q`sfUojؤL]{6|!G*Sy3w ݩgիgA20ӗgMH *0cDhd [ ^=C8gyCAMI@t^4)ApFHl.UQHSTxbr zSp1~4Ȃ:s}Srƻ*t,b'*5,+Z$XQW*޴M=B $tXb°CH,5`pW1sde5\g۪\ޞ-QFAZ`jz= d 9D#y9q6A#~D=OHoME e_Ojt%leˉ?ʹao堪ܤXD\<5пϢ+b-/F7WR(Sdsv' QOw3ef!>bezK(V97{/oP~^ZWIr͗Jz` (h˝t ҺĘfp:pԛ3-=c);brH9w@Hx^AwW$_:Eg[m+Agp FAEJPs[Y9|N3[U2 E#qe uWڹza=8}BsRnj@KQ8SFy \#o|"UԃNδ;U;Sx#}f KJ|\sV|{ͩ>dK'S{D]֏nOāBY , kmx'_[?hv!p oX8t+SϺH< H'_!;&az},Ԛ]W.XQFW{N=+9~wcD2v]~>nD-c`A5AKz璘4CKd ^)$;L~e\=XM@H]Lm=0ƏRxż5јbYF5 -XBŠq0[uviD< ^p]WFg}(/|LK0!/esL,s]R1#m& \ȗ4ZhYA7;3KH9"{]7zͽdhܥf=IAolMrЖm[P$ گpKN5«,TRa &Gٽ =!GBd:QSdd5Mه8_*" h˴S3u7߶E4NCtp VH]Lɨj/ MvSOm3IO@w:٦>̞2>۫>лYSΰñ\6viUk0_0+.<}9~F Cܽљ >KA}LPM<$S m23UyKH^*.*VܢF`cULHw9Ll3$@iЖqfd)A<ؔWa54{b.dGqm UJ,eO'o(nF^:=SnșK`tfSN%faqT﹝䊼Ey+p9-v5^}\ }s3OIJJ̬r?~eaB&֜Y#p8ѕTo,:<ljO 7$jJ0V!3jÌuW@iuⷑtG*簘zM` .?l17/ >ogiKŽ}r_K.D=̂3%H=ee9 ~4 kD6\:h N,'BYnfx@.|yW۩H%bWʅ1tpNSG ޮĤ1-`4%kv0(aK!J@bF(AF@j@Y1 FDl}9{{>m"/Edi} JCPAiXp K8-vEg!=_BH\[kN^cmQ6}{B'7eh.]\RDbXGhCc (@k\m ̽/@ԯM]{ӏn@R j/۠r:9k~ ]ݦU?vX4`lzy &#Lԭ|P1n/?ҤDLY7.&Cͮ/YF ?mכؕT`e Tkd׫hnoM*{Êq:Np{d0|/m IHC>z$;{eAdE?;? t xt^"wշ/~Wa2E1.燿A94!ILq3%s Rb]4‰edD,[̌&Ʃ:$pi[lkU.jmvsg-;VڿUkbǒh<}鈛dkcb7zቃkS ^`sy4 r٫СѝN3]:,lˁK1Ё5;5,~`[0Q7 ε\ۆv~&4c]rlaL-b BE9oVR 7;?!]yp@ntMK=~wɸ˩oyHV[$tBͺn=Zϗs h,YRT Bgӗ(EZ8RG{l 81)u{ 6n&%_tcrUE*.b|VǤ8^5#r-f^+_<$l\hUbH茦jgZ/ݤqiNe;`P 1)L+h -tQ,>o "EN& ZGW34u6TzϰPie!{z.MC9jC|֧?>7Fp{k@dq _SD*+faĝKEY`3W*b[(QI.кLL0L<6+w<{?)W566ʑ=ND*-7{x0Q@y}?!%VLnZTmYzغG ?xxHxd&qql\9ꛇ^Ӟ}Jj̴ġfw ƚo%U*^@{yƠ{+{BW~"?RP@M756r$I >x:?Xo :EmOhw7[AiխBtyk cIOj:d!^oR{UvR!XF15272akRfxӟ34WrcV2j^2H8A`oxbe*K;'ІVtA9;Q$ǰ=+']ҐaZ'`m$.#)OVz-,6&F aQ{.jնtkjs1h ]UZٝQAL6{xVKlIADQ؛rRhƖ8`Fk?ϲv"Gn,缭!(kQS*c72?@nNڮ*""_&GQU).֝RBGrD{5&*Ba-()|ƫݞ:MaQvb]:wflT Q= soC,~ʔFbTjPf cf[O DgN.2( ~ ~vsS^Qi9#l7=A6?)́!h)Hƭ4&&Pq߀Ty(.z MS̷\{ْaI ioɓh⼵KdKOӫ*HLw4Tw3lEpۣUlUHK쫮`CqjM@nJ%YxH)@I?9ED4^•&zW9?+$̋y27}"Ŋ縼'4җ[Fu츭xh 4AO45 `}r͑Zl7:rt?3͏mҏ.ܠ1ZZj̅eU|&:5!R+:#8*P<'ev˛T(+#BDg4ylZ:AUP$25,11jj:.o.EL6NI95`J&bgs 0VE&Lk!LGWm עȪKoA!OV]a>v`F; ƩQ :g1/87dwP ¦ ~sCf${k_ "R|z~ʅ(~eɑU7_o$:y#;צU<6IoPģ4wZIm.KjI%-EZZugrCw@=ÂM)2rlYz>SWn%&=*{؞#{ZvTe}KY_4?cT Y:ѕy F3?gվ!Ȏ&(\`!ct;GFX.fۡU^bem*Px0 mi5OTQOgznkVE/CKZJDL)_2NU&g J}a,fBq,K eP XbG1,FJ8w69]ilt̷q5p좓1uä30T50< 2Tc#/I")[͞Jp< 4gVe*PL GMpd=>Y4tH.ovoQ?{GD j7:aC'jtG˛BD߮jѡqQ-M>ra%f_61+C:ϵ{RpM r&9#OI^B']h+} C8 (FɜS/ u1C@MEt寤85evTO5$\̣t$0(+cEEkAH5^n1r„xۄ~Ťn8wjW=uaً`nT:HVe &?\B_SdE2,gH%5YPSĹ |/>lbudBz| `L}QCJn.W,|yV7KN07h1ç٫Tԇ$XPC9 ;HetӧxM+;[׻|N+/eWFȼB>(/Gjn@[o5 wAB/4vٚeC&@Ί,Fgh8eBW#sqF5&8 ol/_~)0K%iɝ)Ƈ^k6w}WI,&J7V 鴋1{wBFh 19(|)N !g~QWLBK S4wzN "w58ñrŒjXȞ {S`X4T5u\¢D W . 0zNfঔ]\GPz\hW;ߛGHdٮ6!*-I*MIU9đ~Q3>+z_$S-g!nbAM(B̴ې8]%D>ExfRKfC.ض%5vaTiֺuv9/pWGUy*^5Es L^y]`,IeTtm7 W0;nrOVQ`qp`xe٫E᧢5hk LIZ :Q4;ch P9gzšP\e`ӚwkӒPВCcML8W=D^s/kqj< k j/ƣhqA˯HNOpGtEK(ws5"-KzLteÒ#Qu1 b}ՉrL_]+q; }tkӁc=Ga4;\Rs@Pgp^"?⍷3Z+H]ZpLYwXkȠj&m/F UD;fF|׬婅Ňz@݃c +ɺBsoÃPyV/`IJw_F6洍-ܾY-Gqqy]~h0R*(oCd=5ooJ#J3u7d1`}ZЕ!8oQM`41zy}ʦW=E|dƓeN&e,F4thKy!ı=cA.[BZQ}6I9J(Ag.y?)vqaBcq`6#ѫV55g;uc\;#{855|/k`M F.u`s(_ffSBLޛu-Ca.h Ybxlc6U6o1FS~)Hu nAzl< `{C(3 ;pr RhT=9ayM'͂ՙvDA3e{xLاR[U0V_sVg9E>{ZK9@"013x|(*lG H<`vw'@X80K h1dB [^IE&LS/iMw*6k|~y(̙ݚQX̲ QPbӢYQIV&|l'42"'Ucx\"@~o'p$N<';Z"/)흒HQj/dvOM9D\;K6{yp$ОVn7+l^!|a\jY[33 Ӫyf^Â[(p O0F}tsc:ll8n"766#p/4Zz7Slq>wG(bpրN1L2 H;D(mr\vz}{'4VV@`"OGlRfr'6Qo Ъ4G\ }43$l@*Ztk;FA2~j9.\\EeCa)!W.#O2}r"X嘧@vq4[& M0RgzfCX?d$jSyNЬ1_ 0Haw۹1]IἌI6`[ϻ1=i X;q_6`&v~*ֵi{֔dWDr4ke.rW.%u$6Ȅ f8bU SxlW0!}IpuŭX0诽oY|ӋQHTkqNK`=_f2R OJǸX|k녢7ďx2JU&®8Vx +BSﵡ1Ti?|M_] a%pN3Mυqc( sߊ~).a|BZ*sʟ 2A0/bWKw,eF$_[%—̏ަǙ x}V5)'62A&wt&N׀یe9g4##MRgѽ"gI' q$s1V(Vf('n&ƷOgZ~@pbi ?0qg - p _\c2=Ra P0ؚ"iƪrMXb /:0*HqSLJX!Bv~_72Ţ@{ 514iO8?͒}q lXa1:XPJm*mދN0n{p 1_i}^uhL 1fh0VV 4/̎$ȱWDut%Tn9 VW;ޫIyE-FAF[t?m;*sӞm1,fٍN<\!FFYt~G3TL zKx% CyztxD[i{xmr:*YXIw!(ʍpu[_v~#IAw"0yRDR!kں-̷,;hUz)c$%C!MBӻ.vGRCDY POkv|4~N=g= ?JW:/?.xB@ 38ϴЛHr.zR_Ǔ[1Ms7|ULcS~٧*h¦z" Jm=kkk4 *3:.jm;%I$ dȗi J.Je_JGbYNc¾u ˔Z:L`ZogoJ< !YvݠOho!V}Nq1y=elvRb1̧Teahmуr p]^Yz#S't6Ɛ nՊvxs`8n3k]U3OI2VK"(Co)u¾4FZA[dB,Z (4|QfղrS^fqhY`2ˠ܂_=֛Hc֟~r!rPdemuzoO8=%$ȫ}X #*! c,M3$wkv87~dy^n#7u;u6tQ?79K/ewKS 9HjGdimm ߫V\$?H(V4%Ji햘[C˛l+1ϽU5$.7٭C<+`t6UʎO:OM0gO|~ۣqv>ʜK.ʏL_7XPBO/ϙ]&\ ќߐ`~PXf:#:s O2Xo\v;zzG Zǃ`.U_u9yA- ҲWQx.72q|s$IR}!hISp_lۃM+~ ާmd#XS,LGr=D"XJC"#~ tgm."~KZ덍܆Ӓ'4 ?߭ 0Z8 ׉lZ'F1NYKC[n5h7:-vQJZg^碏(wgdNq.NH`c̽JV> !pnh!,j9$zI+՞YpHSoiW/R7\e{}DoFG6J":25`*?;F>]@z#e],n%jQ~/4kbc-0[TZb;b %b&?E Ҹkn Ҫ(G{̽Oq傖L/z Y*&CLɴGG}c[& 2x)LrNq2:a{XoNz!gSQ[hk|ZC ]=0Ri^.brSAT$v%+2V8~ӀUq:7E, s'  hzS u%}x|vBۛ+#76pZFUr܊j2aB=´j.(ڣw(tAf+b|08'_R !_b:z ƝoP( Y+x p{Pvwxo$zkWBx^}8;3ͧ: i{d}U[4h/x 4LβEqD%p3Y~H Dx% 5R|(z/(Z.t.>Xy< z/B<!N>`ֽ˝pɆ n2h:yb(Ojh(Fef{ΐɺ޶OL!r_S5Ws9dU0*ʿekN}s+9 \f>U^oZI!Wd_7n!?D\z-e<`xLy-NeO9M('b[m&z{n9ǚf^U؎3k ƀ=hcrY:;'<^t)W```N';!A]}"0/a6X@n7T-U:>ꐗ㷹`%WdQ֊-R>-R0f$>"F$ycbÎpő9O2\SXSY {X| {١:IYkֽص|-]\GʚJ:Q˻?8M'#9 YO7b|D&ɹQc̟<⽡,O>#/O"h!>GСq]况D$n1jz={CYKaV@=,מ?9! T[.xi$@brQrW[ST?L&8.s@?]K, 5 `) Gd/ k8GSיyͮS,ҡ-@h7gMrv!M_F҄Ag]4+9js zBϭCVmi n/X2rudt#$ő~hȲfq\boOKv3%߉&#/zH vY)_G//[۴5년v؏ "3-q}u?>6VI4+WQQ=%AҘz- PG_ɹjB?^"d*y^^/eI&AȐrA8WHxX48;\ >Yv=DALB>:u b&C38{i/fd*aXp0>¶Š<+9kLS?Lu-;:Ha/¨;!3S}0pd=>dE0T)\sȓV$cBDVJEu!L$%DF!Z8f{|" 0z@ Y {٨\Areԭ(2`,XFܚ<."tBd쐥]wXQJ56TR0K)MeK"+)l0 t ,H|@[XP0[^eڱbVRn~Y]Kpfw?QR z{xENH;E@[oh'$P$ì/G?tó;ۂQʗ;$3pBЎNxƛhg 8Xc1YsZ/FN~nqUһe _SěiG &vZh=fƳOܺUgoͥώM}9568Ѓ[7{,\gm=֢&+$ǂ'ًO{S!{E#XZYpOtO@ '-1@luw2߅k ϨA&@&eo_broK}vT'>ؔHj8/T{޶w 4j6O3,ȇ*iM'Pl fU' m)0n׉#w]c)ްO=]OjPFH;JM\xK1l`7'\-M#(U?Njf]K$ΫccY-$e-VhRz -""(0 Zp3l >Q\Ni+ 0VL~Q̮^EM6l@˻2>wK/jC׮:^sc059b6ᖅVQ+CyBvFxsJ0j2'RVɮ' >>וhirTPeffd_Q؍5D^ Z`h1fFI~,\%XTGFy֖$E@WImeVNA=(;:+xwQ{&3 -BTP/4[Op舥ρB=xIB.ͼ5d3X!tg:/f^kUݙTqVte+XZUg ]+wsS^)<"V4+VX=EZc$M2rEʿ2gp.MqD=Go[*fR?zI2W{i94ݡ.o;&`vt0HZZ,ȫ|@@wY0;2)Rx=GQxzT vMc㠠#bިnw`:ŸNwC<WnUj?ɶ]A!߿-|4I5S/\3-ɃhfH0YrQҼ=~e-A7sB,Rv5.ҿ Tloդ;cҏ>GŔ5ghMM?#!y똞qh6t9ǮX(Ĝ F8@66DP,\pƬ(䳃w; CGv!mSM[2cdoB(fې~)?\gS_|gobH̃֒㪪~:ko觸Ay7rMcVp tRZrq@=(Oǁ6VF_gB< )+e&vW6yPZOx H@݌?-NZ- ,~U}7덈iME#!}bt8fƭ7/Dtv$$zl= kپ7ĴMF=k4\dHgYc**Ój`Xy mܰଆ(bªOɓW[5ӓM_F8QwD 4ɱε[ Tz.C"DF.MH;&߫pd>?/f[)n]V: '8$H.c2>,QWVALP^>.yvJ';#|FIGSp,>j9i}fwYk29yiey5ֱ.:C*w0³14iGەq<@<2Y(cl1ΌsB[pm'͹'X"PE,u,ib&5ͨ*u4S; ,汤'N\X[֬1Tܞ*EJ(|*O$ho2w]L-u Az3`V˥كt AL< YleI;-C6l^&>D$_A}É'rU ^[zWmB}fx%rDd _=3z-n3x81"ĝݜ4cderrP u{NL#I,M4ԺAkQ.CGW`we,: P>ޭ.8Z~Oypn7JMB^HmKtefۭKиV'di6~Z_4$Qw@f;0 JQ+k\{.|? irmxTCxlJҦi&.A؟%dضHoJu9,_K 9~^a>7vz_MHЛZOMBaNFDo)*DDG.5wQ.cv\}Lw]?kt Dru[cUt \yn39XoIMk^6   %6-!R=9NF ( +l?,7 I ST]A-e/I$vL yS<4sjkT,sb k&ÑYl ga& uBm; ݬ@i[-`.4mgFq!WIT_ST7t F-mo @E]NGnD&%L8?HF:8) ԵXc :4F'[0\,BWN}O C8a2UY54\Hl[O"! {SJ7п%2v ,i]N(dfl,DtY#$e}wqcd#i~p(6b"9D5Xʊi-ga]iM/56yjFs$ze*K 9/#0HeQY6P9lW))[a=]rzG*^^Y赵 a-LP ]f~tk|(Z Ȟ>0()hhk)aϥܑ[-v;'Axor`:}NBԬwA:QV%niXK{^6S.RPhgVe"# j3qNYyW_nJZCSqm'{gw'aam55:g񈰨 @bbu[qx4Fadt.bdsI{q-q+LRJE>N#ĬJ YI:w5YA)6C(#Vk(ePg$4- \.!An%ɽQ&K Jd JՏfڝ$oƈ׊p#HQFEbsoQ6:(778&_0 GR/5YCˏQ ,b =m_'&Wz"Gl73o (b4uf] Hoc&g_mz+ oJдu›\ \r|<3Pb# `+ MoB EzVoܫ\F ji\8\5WFi $4PL#B^$aQ;}ߵIT =~`C˜A OِҪ#Wu]~0fwf6R5d(39L6VIt;~>`/?2܏70x|kB`ܗL1K]x#I6nSОw(e*9EmE^O] GoV<~mbr/:M]{D#҆~Ct.Z|s@ہbtJn;B7\9^z90ׇ&: hyq.Usc6RUZi6ʓ"#V-;pT{AXs6D8 .FK!m Aaa\ȒDnȐV9 ̌P ζsS=7 ʐ8b&:xTtX-קiBZGIv&6 9I0iߊ1 BРPK U /դtp- ṽڕŏ{>})0QUs T گQw=BImQϦQhe?y'GDRUZqhf08 8^`s~bAH]'A#و+1WJUPd@OWW'AȻ4mOd} 6AHfR4q>mgͮ6y&p|cRc_)YҔ5Y[J*k*G ¶7AM1hp0fv_L!ܮ*@["Kхi\V}7cUX),N >|i[!@dn"8GB q}QnIcp '*qr PNb?ĔG6BKE+6T2#΂zUr.$2ƵLF,B[`{u먜֗KǠP]5qgL[ӕase4,s-[D8=z-qAdO;\?"@qbː45[/ LqBnqC1Dż+d_~̵Nc@Dqcn21ބZsL([!M%~+(+,f%/ Ikfx֘o C>lݥBr= ~`TU0]E'&R`!-4cCds Szsε h&@lȑt_F 46K+;E¾dYdY06θ#WE)⛎0ɀe򄿝rD )k 4VmWݹö9W[ICN%ӎH>kV% "{ubo^iI/N% ,Vdo3!īj#F Fx{X"FE%cX;Ң/(uf`=I`U"r TpT )FJWvFZ+G %Ql=gZQLq ~܎DH8 cCZf9$h$6"~X\1볺]ANyƂfwI7U61#CǸՎ}3 BTjP~rտ[c5㡊G=~ILjӣ2ރo&Iդp?g-S>lĻoa ɸLRV3I.y(\.^JUcDEtݾFlvw1ԑdz q]8PXODQK$AAh]ob,!ht{]ka֎F~dѽ' M) \*IyS:XCVeF]A?-_'GvXx56r9uG]?xupX B$W=$+^Pɥjܶr[tUar _8юw5Q,,$!,sλ SsX"'o̟,%S݋a-fP׀5u dbא/>1 {?}2oIL.kZ%Twa>_yRPpP`^hqaf |T^AeK%݇U#"E%6E9gǕ!CO</B^h<mWL8}5 %+撵0ZW0P6"/7e`aqB\ /q)PsYf)u%za:l0ΧA1ʊ O{"aX4h@m֊;u FNhr}6vL쉱o򰛸R͆o(-\zgIڄ1Y$$|Vў^/2Y \G 1]<7A 48 LjA,4R|ܱH0a ,H=Vı瘄n&{uܓ G9vEB=8[[ mQa][`–^ٰ/*?\lӃv:páD6f-VRû9sF^Ҫhcm`F1W9 2Nwn%pkE0ߋ]1=hjBm;w&@gfB)rCAxF;SP< p*g]˞ktSL3MI H|젇 vqP*Dԣ@@a&D4fSѠ!mK $?A2@/#ӽrEM54f-eHpO]ޣ:yMx"N8؉77Z+Gpħ냠d{o{CJXTa9`gŴ@1Rb%bbQA2ʻv(>]>jEAUGZ@4xfl\9[+3KśyApC :m=t~?C4lbdCJD&.BI&~g "WΆԈޮ5"Aqa[7|0 zqe)| '{"h\8PkhIg57: r3 lnS_Il+~0Rt 40! $P’+W}sFa\Ѓx%΅v+IR7 /F@G,&]Ch[{!aw,OOoA †)IWc(ٓfCWFAƄA9!QvE*óff@_D@k6L.E v卆/ĥ|$=fTFP蝌)Kdsoղ'շ w0g5u(]쎼DY0\{#-h&i%+t[Gۭ/K!{{#9^xHfv53TdiՇڴ^ 2!.gZ ?W8ʣ_Y"Af$+[)2YR+ŷ3deצ)dYkiI, fKJS&w#6 S\=^&7`@vً!DȾMCnʒxQt:wj:0_d>.z(%#U;>yW{Zڸ&y-@J #c|FUZ& =fO ~z:yd>N[Ltm鼏4;u6[u$4Oy刂G=eMIqh4uJrE AHB/F<"-mNq]^׎ jNA#^9F[@ Wc 9;t)9ciW1}ۈ)[QDLN\.Oڒs8辭Q^)X`V_p^Bw;p#u()f$*ؙYAE-0*єgr75T:}XjO/C ҄r#5a+Qpe+”;Zf*U5m3+fxa]k6sL)g/iۗ4SOs^T9B0 :MC7hwNz.-6툙9AbU !M,ԔbX3㬥 Xo'Cmc+u"M 3qF(cھ'|e]E9ϡpR[rue2/H<5h<֋HC*Da:yv 5u&W+(侰~%n2< iD.X+< ;L~D?ɘQk#E!ǵ%(iM90̌ͥ^vx:(U/-:aYUX8)*b]IО" gH-`ʖrH TxޚRxI^ՓT62'"SM vV 55읈=J>IAk`0Kd|< Y TcJ;o|:ɵ|I35lY?@ٛڐmW,Hn/J/S=iqÚm.]6zNxY#k8 Rۚ_FY BK)4 U0g%%5h wȜ"*7o{hjI|t iiF!bStGe9 ܕs]Ll,FS?ANlQ|~o|ߊNe^>>W^f5ݰT%ukel&b m̚՝DRB‘~u'ND@rΧ%F5@ Lz0^4Lڤ2!l`iHΙSfJ,aƉ7RiqL!ZP H8D&iHzJ2+Sxu2{魻)Aat0Iukq5ت4qS-]R56Ly]$blvsa#[zHK80 vv=76E*)0S̠e- Eܦ"\zk1;a\T~9P(|Ё]bzio:'j B# S涺}O"u`X00 ",Afvb#ay>ӗ[T y]Gi\An'tQO锕mbv 6BĂu9'N^a5,@Ƭu;/C= -ơX,w+OO: aQ)ͬy oJ_M1^HGzKЃ()l]{e|xbkxz!9Md Gqy*8uȃ ڜ;DsiF#j [Aw|9IL|A$i5ѝn9H;4]l-a30(R܍jMj $d7z˭'xM=rz* DאַL9Y5\O݁I_\BR4'ly?vpD}lPZ4P)Cu eALY#Tc6L/ɣFc":Ɏ)w r/=Cx _yd+WÅ7ȞAid۹퇷IDD5\qUPNqڿ#y~8=,ɠ{gͩid6 tMnFUդ縛+hqFqaaT޲#K?4wǞ>J09o:M/}0KQe4k6މB[}A 5h>`.E{ eX5AlŀD[『a3H{s>wab7bH@a.ێgc̯J~|"P2MC6zFG ƓkzXo{1-ew3kv̽Dз?}a0pITH."v᪷)R9MaO rA%`-N;йF^NO<)aWZi3jfiZ˘Bl=|M9HbZ4KAPDymHG!EMM;>CqethȁL.1N7- H'KPjG3:'ȴ-Nn(\j`q@tؙ"D2hH.0N'Pţ|Wob6h0|'vK~B(Ty%E) N^C•؅nQێD Y ISlHI|C7F;ӈ p^Q \ {Ԛe6""޳$ڂ\xXgRsڷk&Ɡ.0Kً?j}xX n{%A$ +b4,D]"~9pCYu$2Gʀ~ca"__5eM"SǤ b悤sᰙg8O&uwBd;A?XT`a 1eCֿ yN?@,wUC(QJMڢ8X ^Lhj@k`l%U!Ѻei+J{˾F;[h[x~[!&{RR9#F\CAg>zk)ouF 1=7/jS"AO'[aܽ& :rA A 6`kY9 (Դ|ɍq #ٻYזcjYeOY:YPVCk]8h0N2䝢6Ob*{v[w-G/&UO]: w19:QaY3L 0R0%ۘ,ؑ`VC6gSX20uJhl'}seIBym7n!aV&Dm@Suh*T@O O( Uqxj@eTe7I]:Y''$=k5QS28W1m+y0+ɥg'Q>,b\AǙf꧱Jqw;.y Dj zJ02/ux-TAd1s>h!d^avPhd#8l? Edu{NFSvZvq3tm si57LcEL,$c 'oG 5Vob#hM]Þ/ֳA>h(l.I=Zqu_ЩAΆ0Z,JIoBAI0H%sh $Jgk|idk~;p/-M\ ;kqp * i*"ٸXg{g-2oQPS^*s~}5|*¦NΙA/2:q{-*(CEl=Sh*."3> {o; w@9˯2w:h+7+sP&ٰaE`u&VB}wӆq. l[aܝ5k5+" ;47khU:9fV|<{^-r,13k-!gzT.hC\OKXcCB]SPӊd>ʊR4=n wssޢ{l_ڽRSbk"A8o H:==.63(l&.f8mI+߱J6dn""Z+`%"ޠۦ2׭HrajyܷQb(:R\KW9 /]j ,I^[ i$*D~Ȟ0r2J*(k}颋^ld~( ?[3-E6Gڒko 1Z}e荠Ub{bej쑕]^]>Q4EcIJ{Z #œ=*F{a_{d'*`0/lp4mf Wx?ŭ+5Aa۴\" ɔ`Fߌ.45>wjDΣ)-^Y p-VN-w2Soaظ$Z9K}f 1trm>+4uWB5n)kξbhg !meWp jߨd=2V+-k\b35AC"%߼nPLyBz\ߡ'cnp¶e_giB3_Oj c >Qߠrf]#>)FĕZYbڢn}$Wsq$/@^g y@r;^̆M3C^8˚;`² M8N0|UFeSfh{DQ?T0"^ ;z̮#NЄHjㄷJ y&Eml$zSRO`݈`G_(c_U,jW: G?+YX>7HE0y6+ =3@eizgBvٛtEg@(]7EvvBߐi (ݢ Z2,CYPj>됕ZM* < W+YqK9LLHf\6KE"bX$jER A=}m{<%@X;A: YĬ>/;+S}o{xth-hzɴjړ*_ S"HAT^ܗQj{`oHj8Zѯ#~o1mL fn+meU:gN>/ &p_J48w$@]sC4nɜV~i*2GYzTZoʆ%ϯ"Ze-{`d\;؁񫋄"v#*`!}VϾ.˷?j~JldfRP1 'm;g))KCXҶ@-`5q kZߨmQf>5m1~i}1Gf13'KB-[Ř\Byi*zd/>zھ ʚ{Ք$ؽճa^'SS%ч2g!o- #&(lE VnjL776=cbK${Zww[1qD;Hdia[ڭqd#`Tos2#M +^*Iсzќּ,/ r]4r[B*L3j=A.o ik*tx2j s/E׌}3Y[<٬:j޽&jw+th\7qIDٷB.| Ά}lCTZ%rY#hNpw?,"ߧ t.Tی6C9gkA)1eФײ/ W/JhZ[{m-e,y;BZ 4 "[V 6>8P9??>jtp 8o:3Y?,`ǣ悽5/7ڲV$C wC[*?_9FdVm r+A_#Tu^w"Tgfɴ*&QAe v2PlG:gL9y74QWJ9k d]R| ^JTĜD)>>קդRh>GQKuRݺ+SJ( MCT~bNd^1U ۞~0!I=HjUkzۥ`DBBTs, l&0hM2oէbIQEMV`P7ACPcpȷn2<#g~\Hk>MUtm)񌛿W0A?i]2bЇ&ڎ'o~"BW-TyO. @é.W3wIl y֯>ՑlFԑ|<5 E@4 dKK֮&kb|DX㢛'U(SiTgLCXW;݇J&}@T^gdMH vIJ"wMJz&e&Ď(X4\D$x |3 Z7 _dYYa|i(͗Kidmms2>箼JJ&ܔl{قxd qv'c9j ! fL<y3"`F{qwmt2 jЭ<^7{HC@؁I7&M| .'\pP,Uq_H#1XPahTin&}\t|& ZMҩD;h97{m\âhC_%@4|\kN7T:( ,dRf ;`"*Dkp+ygv"ToE={.|Ӑ~.P`)򤠒Pv: F~9ókg%-]mbк)#:?A\0 'h䆞>\:tHL5&-'+™?!A6w֩F:n:1Nٵ|o˨$*~]q6؂S0meQږ&2c_R&;:zEkK_Ņ VԶ xJNP̶>X1cڃPO|ױN:N\\J x|gxa>y>VҒ"zDTlrMs]NnTGQQ?MlXn &?ĕbuUL~Nl -@'^lSJɗ{XSBEFG`5_69QZwҭT$B`P v?DS nbS."Q"1-߉rr[wEfEy)ȋI(yƽ_ یI·pr![q^ uʁ%&u͹R'4 i? WLm7HjyKÒ fiyRs_vT'5lĶz Y]y8Cmexyꭶ9 c\e}suK/#l %ӀP}Еhˇk nwCOyߒovrmZmp@cwR' سCZҫg=wrةiM=pϸ֌\Po9r/:n.ӺH"F7ͪ"w>/)i|Z9}FssLHOcTjl8) |9b':h|bWB'rjp[Jwdxb=ϸneA kwͶ>'IE@!9s|P%ػOҷS&)qc8o`?lsryT{@-c (EU^7_%7 !*4wtkADŲn© -֙޸OT^!?-Gp!tvLy^)氜7.X4UVoYv;cjzDzŕ؅R04~ϟ!Ƚoߓ&[Pbsb9 Yw#w$w"pv,/sw(b;#{H d&ɲ>W"0Mƅ{mA^9rp ň*l1B;! jtB \a?4_6 PdMH*Q}dpb/%\5?F2 ;lPl.v[QݕX9l#)%xߔ_Qj)>H.uZb)R=ʧߛ('oد})A e庘z/[ĹU?ŏg {Є}У'a*PfnW.(@sP,ZMBd|~#;*|1 PMkH R()XƢew>LH`GkȪșr;pNw-yxLn4;_iU֠Hp^F35e4@XMb41F4_ۇfCI{x0c훩\{xK;AA~=*A]2',wn Y6<1$0zeG,wݓ̿YOy1MRF{(1o{K7|3PT6DR,AXnqQ6{,f?)HZ)pBe%r$p(XU}m%X67`+yov*dAro0$[8!@'unּ0Okn];0 ұ%GPr,_ Ufx(ˡQ~) 1=`֐$R)035*ɱ1J["cm .X)^S؎"Gy7H PVURUsv=%ȩOA4fιeDf5 կ)؁H<!k|,)By\q6)ҥʐŬ>i ` -jZ|iJzjδSfq?IAjKU/ |<+5{bӢp?f2%F0lpwHQSc3޳dkn5u UV#ăΙ~`P욻ϿYelQ¸M6"/qw0}Uݑ"Ҹ]ȳz v<N^D.nMܿV(W4Nmn*y5.LͩCUN:(}!vݭqvC tdv1ɾXG }tD~Q _ёw^5N=T%20YƽgY7Ь6eqZʤ>ڀ _>HCv/B\jb`iX.׭CDJ-z=q~]h|ὖL25#?(ZB$n[ zT/7yT^ؿTWIĦVP'ʺ/isxbjÅ= a7 Ər{>%S;zàKtlHM4GqOsvpVuҤX{GZ0(tZ xO .zn8;PP".Aepx8Y$Wq2M!XБ]buHYe%U.L$ "SΔ?G0T37ҢBQ-dĶ#X]+]UoO@J].{~J KVL*u'LlX:# zySCL;>soj~ipq3XtD>mur=Asz$I">j3v%T.Ok5+0(d!f*a?>ƽLNVge/d3<]zqfi.Q7t ]>VB!LeupC%1{R6Įw]g: $o̙q-,ڏИ;0WYL+^%9]o1q!9FU.wںBZ ]3mbO-x}߉:;tg<[Ұן0*L~.ӶW|zN4u9qrQfj@8]ädBe[^5(+QCsjg-nJŷLRĨYHm(a˰HwTjgy߂/ȀcTVP+=ج} `t5@king#P^Ī%c 95WQuT>[yvN!HpYŲkHj Ê5|){âTZW>\ĬcP"mKCKXV^S?u4#w֣DBABr9~cU-aDoN][t6<"/i!e / kX0 g,'<Ì9ȿ忀H5xwGa/)bKILqeY?򍺉.҆-@ qCx  H 's(.}\Y'u sX54u9Y x}GtZ^glc}E`^t锵!q#]Ps3A/EF3WjU ;z*?AGdkVIU-E sYL+?VeLis \i<;V}ꌙ*ߠF>8O!.x$li1i(fHϾO8l\D.g|9g;F[=_U1R nʐ򴺌9&Xc4+,hy8X*ѥ'sl-CY2x {w4a`},0}NPn̻2Y A5; )H9><HZ+X,|Dg5OƱNnV9޳Q =`EݵZNYv L/D] \ý:4&h2},WyP&+U %r)5KݏpAmРrȣ)vjE]<;YVO3e5 = 31k>^ JKjm+%Aq{ -yR'^B1{sQ[ 6>ɂ/inhMyh%H<ld~ \Rp%k~ՕXW{ZRxɫR. yXLnn &8:A^IX9 כj4dlݫ}Lw6R0Ό'@t.:\o 7~fsp"u=xzu\M4, @ gJu1-;G% 6"[`E"XH4dvޠI—3g4k9DP:`B3 \O>~~V2r`L9Ec8zH[5KTz)|zI~jf_R>D:}ފ;߷ۚ wM.lsUV\ٔ՜Ou*(2Dğ`yC~"qAlz zmIڬN.93:AUjwF(y]fФWnk<9GXKEࡹKmϬmJy@hDR(5`B(la1 ByN1&z|.002il/ 'yyR='A.#h2*|zB,82H ' }?Vir)ia5^ woJgUՇ8-3j"\=e$Wi;Y7@C/"R|(x^^s^Ɗ``θ[Q?s;+ƻ C@ .EqC?{&dH JC%Zp eܖuy+y7"&_vАJI0cCr~Kb KZj b?8/Ϗⴊ8& P חChWuB ѷ?O/Z%p.&pΟNdžJWbCxnc{m{9,Q/.Z䮈?ʁoňċvkFPjQ/D|} i[Hg^7=l \i:'{-p r4xZݮ|е1 L#B|$Pu¶E},svoa)Yk3M֟x`ySEd GJjb,c =q3x: y\9Hkc蘼|1|M4X,g2x :-Z4p${NS8ZZ9-Tˍ>2؄M7E=ȴC?bv1@C&|T'kAW^ސg͓Ge   ܡrrg%?y͈e:_uAw4~g"vگӕaՍ.q]W0;ޫy-9Qv&/kX[c>xBް}<NE{$ׂA3 =@i]7AOyƾH ڏd_j+su!\DFXGr-TԄ;ǪôuI}CUQTYqv>*C%e"~~":qcI mcn<]f2t:bMofl&V͇wzȎ >NVQ3n.4(K44M?èDsddzPy#D ]9&kÇM-a >P97ZX?Vi?70G!R56aє2XݞY2` k+KT>U5_L9G31:b=+ (:]NX䐓8?o0D/) $'ZuH Ǡ9;F6o#{&yJ]sջ)up:O5p#OD :\z!MsdZ- ڀeO@`oOؿFS߃)qXg/ ؊o=z6BrBϭS͌B5ݧ{8fog2qf⥏'X/[Ԋjo+I L;Ż&fߕa4[x\; }pދSͰ =d=SN0VGKսPJFN0~a8 n0A}3N12s)q`.Pf˝}˦3Tݮ.I7a wErLRp3c]Li͈D A:Ve`8_U\M|9`b+ήlTZ ?n½靂_r02{4WL<5.%ҭ l 0Iպ^P ψwL 4Ck~X.>v>Y"ҧX͕ϸj~1=l/JHQ6@㘩F"B./b-#=""+_ˏaQ G :  l)>$RE_Wp?`dnCFA~/) ,b3É3iJ P?0D'ٷ looDgvx#o6KJUR&xU߯̉/$W_><=5BsgJ֒ck VBT| D"w(7=Ɍ[XG6NFI&ޛ6`e [!ܘh2 b)3pyۏA/UэFqۛPTk{m ˵7Hי ACy-Pπ)L8p@:io%gwԍޥ萩v_Vt^}j ?݈=;V(;qb+ 뿓Nm{GZcd~n@霑J^?_;.GIsKؤJMM@*Ahd- $_Ҙ 3.48gS?օ^,,ċZ0[˖ bNj^VU)X" H^x2͋@UEz-4gSef~zWWĿVLjV`TAi14/xFTlc| -jZ0oB-nkI@lm6$,d.f_gXV%]TtaGI\w@ G|J9>sxֲY/!vd5RI,1YloLS(0m61iA TD)^ [?I@QkVz{wVêҢRs  0KkS-55!`8ZT!Lw[䩶~숂CMVDN_E l pD˧1q!Noy w@L:,e0Mfhj>q)n" z$UΪ]w1Y:ju)zk&CkY` Q `DWG B-h7axD,&8C5/꥟hT}GQZ:x#J!B Cś,l SWUX=3vS,z f>XTe@eG  $>QEtO+(4!IzTdz -E梅0칡FC4ｺzTf5zvjW>$A0毹Wm8̪r4axKH p#աϞ}X0dL3J3c=Ce.~\[=c>E͒ww@ilO rqo߃Xvr:k24ZG~G}86Ʊg鼀9Dћz}ɄQRꐑ5`G$W:R&()#s5!{vr[ݼ B4U~~oG6B&0RMMo+CA[&dEq| EpD¡InTq߅F&F*= bI2VRzE"k" +c̈́Ff\Y :QA9+Ho&J*W it( E,՛g+$,#\vz.:0*jS1?} c$Im%*Ҵ!bێS.oR_t ^ΊH@GtmKЙUuFL)3 MOptN 3̮N<骉L6 Y#Ѣo**毅R?+YE A7͋hT T+64/ŜU'F_R|ŗ˻go[rgڻQln D1y71Ƈٺ.OYݺ f.왯i7f+*H);FwC]1O%cPWu*oa8i:=;HUq& }j#d#/j4naH0E߅дq VފrI-1/ m&%ΐp$1w?|W,̰?šFĺaaBq5s7+f:B UuKI59wdZ:u2w BQel}0Ddq MyG"ƳՅ*#\w|k^ [Q~_2ɟ*rt I2:&<Ԉ;S$[k㘾)6QrpQBWZCиn#Zo?ԭ/֜(On&XOnK1^5 d?&fnPG"tӞKXOB"ZBypz+-̲ !"ץ&`9A.S3=Sh & 8zFnBOj>TϸM`YUq-m_3SHxs2eiR@ .hPy]4݉|TGּ=:O4np$QG9' 볫"q{B)j{fxVUPOb{WN kL&W3eFHSpL=,'/Fizi0坋=u?85P 2q/ԽY԰r?mlԹA;썞+Ȭk;0h%A_Tc!ѝڍ:nUU%tܛ{4֮*膱 ez6IݑQ(4kCb}xM(Zj;:]тFM) < VU|8ሏUA xReK`b.EL*ij]ឲƘЖOcU cڻ[߮EdX|n+AE^!͋M5c8c#U]y1Y!22򥳸0 M/\zccba\3O9nH{ܽ)+rDRū:?|;ތb3Hy"uMn"H]aqlML,1n&MY?i{=4rZFgH=2IG6 %;Ws1ROW uO :5tLa8 m[I.8lK⨝jF?w+nQHuB ?"R 釷ɴoުT1Sr4-DB:drh߃gyA u MoxTUqk4mQh?<6_#KB<b e,0!m>p02K li?Q {=4e+6za Y5^GAu$4qF5[) ]#"DF륂eB TîedjǟS^TZ x҄@/<,lz,օIE> MBv||?*^TfCKN &𱺅33Ȫ#S#p V9\K!}twgp{}6yߤDclUdf;w_VDdqf#q2v{~]qpNC˒9N簟 57 ]QO;z]Ähw'~E)n9",ľsrbah0u֊ņ09ԝLO9:GyܳC8&яpqԌ&IS jɆn>4&!.1RV2OJ%YYMX8N悝4zv-r 2;hh;fpWZ:m@Iw%8։nv'řt [Cva8`&APG&+it.vwN72U֌ _ѱЍ߷:!T0GGtN0RsE1A.3(!6rSB{jty<v>ތkly`Ss\/?XaxfY'Bۼ.?TO?0iGȝ`d1HJ]ৡVvAU)8QC)-oNg FN0!h3x7vUۦ т ae[FS{#Sv>-(*.i$E'F X*N^8q8!]hoOjTQ=9!KVfћ`n.(5 Tu<ƾU.ON., g =_44/lTRSz$2O ɲ!bGa71y8]j6~`+J_*,PYy+W97/aeL|SmnfD/[EQjD>o-#7ȣ7Ǡ)P!FHvCJ* ^~+%j$~.=,3++R~%@b%O|I8C9p C|kj}Gyr^VeL/7S{-_\71 ?o\+kڣp 8HB =dhe6]d|ײ9c>`N\)n]!z(MUv$1רEHTewRdw@/݆Sah nq@, ?lIiB/[}+\!`є1}ZFS6Z.$xz0u#: .Oy&,w*AK?RU-)R ꙱ϥR&Lj-Jbw5?K, HʾZzhs{B("*EC}a`RDIݝFOwOn<%t]\W^-2"7@j>SKz،b+%\l?9CsReA MPYхqC\}_9A[#;=Dԏ;7pM|h>B~$F\Xקy#!+a}9f rL;DV6Vf4=Lw=Fd D^1S=Fua=C)ey oP[i|C8tg߉lƅy{mX R34U"1%hjxrgcH9"ҏ̌ō^gqbC׵NU>a =9&_m)ơ].[sZ{-0"O )z҆lT!/!D(OTXsV/>Qt'+uGw%o?*O=%֫1{]%n284ܶVAй9Q+|Lr|WP8TN3D盈ŀW8YsG2&>95,>oTҍ,B7 x2^%8|*s[nd7u,-a3ӦTM˘E9t#+` 1Ln)'v{5=a02jA@,:w]2BjgP~ o|wZ1wFg7ƉO 2 ͊{-Hr-: @8_Ʈ=`2d|2Ox/pW"]$cJQԯI4!]`+'5V<^PuyawK:R~﨩82sAFTQEO<6GL]մq>9(p U4 HT}W}uk;Xࠏ|NJLkC!v?v0.?%GϿHy\N}9ACf]*LTL?tnriguGt2U˞N%OCaKU; -KM7Dd$y^]@Vpa"%Ij)EQg'nЪu& ЋA _d$5e2:yxZpgYr6}0jcSJP\HD֥!iI@n[RW}2s>.f'sok8_,Q1k$z4 .!d'Me9ffx7g̕᥁U -8PBUrZ{^t[pų&,L @8z F2t 黌MRz 0,EDQ ĨzBMQl|c>3~삢:bU<Wp*N-p {8R+.+c]rit@]q-/XH48Q^xJ5MQp-$u=&m.>uNn.a4^E2SW6%f˳`YpFx Ay6@;kE͖4b>?}JioNȡ%$lBbґR)0ԸOp

buZXDoweMV8v,MHW*De+'<Ĥ;fY-+*)1-sm~i୔EI {x*x0?{^g  9m6qʜOh;w&Qd{;uT?O>FvIӳN[fFd"iåʗb&a@eo1K`3 1@VbVA&,HZeȪt~S?:|鵻W~>Sjnm_ȼh`tB%,;h~(b7(:F@roUr.g" gO$6 ${E`Ói:D(KU :> lj|)ҟk|`fR+Lx BD`stwz &KxtE*_v, ꍗlݥnI6_ʢ_VqrW OшL?EӢJF^_ Y>}>AgyUk D%q(wn1-e:? *Qlj%ND2w 3a6KQ n2d|kݿC=\8U)}=fҏt[ۖwPWp.24(bzilW>}L1} Tj1 !84^F;fX OÔpc3<-h+ Ym8 $'Be£;O j(o;`M1#|7sɗI < IoOrthdja#ѽP聗Yұ#|\Ǚ [jRI>wi>ÀEa\^:z~5);DZxRY9+bJC5nďD Cw7YCw}HH(< aj^JU%ieqS~쐰 XKoMs$iʮxQKmSTUMںg95alB~i0ms؋r'q16m|ZB\ yYfm$<5@sz? V) 1G%<)IQ_p*DS '.k1~g.v_#!Y$M|+mY)K.ھuhhgup1S[s&(+tu]U9$s2_Eܼ (*CBcj Oi]Y1\N-H+,&PR y8׺J{7!?SDEؾHMjckF[]~xad&_U*^٘mvHPp65R#蠧& k= йzZ/ǮBukKfD[uj hc?uv&+H{-$;hERw%DXUuJ36NRω@-7uθWzЃ/pW@ʬDtj-3X̞:m_jKM-fA2kHf%L[G~ 0眎 j% {8qJFtxIPAEED ~myVO`ea^-#a5eKoݕI,nu*4"%}X%mw7xr!PM.`z~t/~'a2arqoбp.%=,sEI \ 0sG*= kU?Q߫cEU}.[gvU6ZĜp)Xhn(kBb>sj@MFRvcш a˹ <{eΐ]9g$۔ыn'Fv En3ᰨ$TXB?Vt^ǑVMdKF5Գ91bM7_wdmy|ůQXY*PL&Hm3AK;^Mt'٠ 6宜kSW37sr_鶾|M?$c^pmUP5t0,z=ɔus`L c`\ՠ ΜYdt I>dqubB r!A  <̘u R^qxXYP|:xU% X 7 gdwF.H< ()x 6 iOO`ex ^: U`!׏0N\JxOW$X e^ F}}wFmkibٗ_McKC4ŷA N`x-ZC8A?@Ty[U+Xq*ʃ&ÍMg)%ApMkBUd5Y3%鮮M7"erſidfsV]YB/\[5ٜ!̭8|;R/|:/O}]eӸR?;'L俈ar.gDK/g7:{6c`rq$F mt-`.]hTxeA4' ＿ _$mYpPPv9.ԩlfl?Od]_goI]Kr{i,G+,Q *}9, ɞ)izm~ I%@mEBRj:wG-VP4Ui>{e:mJa$ha;0{Q|ۈr\Jy `C^^Q-aS=mQ0);ظX[N-`JLkH|=D!@lW9>S>5b}zdz|xf[n3M`_9NdQ-kX T1vh'QGT$tFC]c:(Go\P/ev[W&ixM0yIRPo}ru:2#OdBf*j(xޔ_]POeoo#\A IdUd"YL@})#WOV]f"P5TȞugc߲){7N}*P\ҝr*y X(qmV- 78P"#HWG^GIiY%5x{ҦXd CQeIpXf3QnKF]O )Fz,I Låb0n]&tQ#|iXВX?pH)` / 6^"ߴװ(gb͏BBwU0>g#.]7w#][\gKD!n y#ɽyG!CND\Hӽrd4 8 '1cjj\ ·|˽84~&9!^?26IÅ:zXj/#Te =aϺ =Ak tUR)-Ras.4{)2TOD|TM)JNmc]$YNC.+D3>e;Εݳ@" 82@0#FoRX(ɥl1 p;mV5x}z^~,=~H*% Ru'DpcvK*-́,N.y_ȗ6^h 6Y섩b;%j::}ƞ"jzdsO2϶"R}Ii8F6$+q\BmV:Qkz`|?fee@&ehK)hH3e#m~iJy @ƒw~7kQd\^eh@9#_{m:ԘeW{XVfqg g~6K)hc kW ѤFp%9=/dSrNm@vpmgL;G[#]%RFNƑ2˭+&U-),[զAFT-&O=27&88#pO>/ ]u^󚢯 :|MS3I7tOUy)>zFr`{QFۗO d^hTli̱O)ه&myh_J5ַJXfY1u?HXtf ^zcFzt*h\gp<9p+u|SM$͵3;,eV3!L^y ܪ7T2i0^!.qΗT&ncOs /IK>H`.|B&2ɂk Dh:,'o!$ ?D 4Hwr9h{+0I6ŕ㧊IIe`頣 Cii~ҝ[s Z#ܢ@ֿ$K1iu#ۗKt~ 66-+9]}$:ﾗ uS#o~<ʟq~&}!&)"l=WVrȂ53^s˶+]= ]:vOڀ9hTbcCꩲ=`nʗ-Rcx{ʩϘ+-剪P2 5BG2"JC2q)i^9dO3;k )6Illu= P0^ }HQFXpj/=rc}|F|zu1Ͱ2A؛Kq:WYa,<.+_C WG 1~2 W ,.3I\*cUl h?[HS3m|ly#p>Kwf-ewXi߷ɋQK1%%Ԣ $YGq;b&V wސ/[du6oĮUm4W꺥dșW#7ukd0RzGh3T,XQ*lſ {t 8i2`*$_f2.8|!K853C)tC5 Ʋq?, gLLr\fEURI7=w$"B =v]Ii^ N))Os3OF&蓛6- bP>"nm$ %#][ g^0V_:yV$*O$[N ۲ozS^.Q5za=Y,a?9d4?t|AlvＴ[TTvcs3`` aAqX_ӃxefƘzp7*h.qmȜ]أ ;^rn8x'/ݎcpX -̓ʂRBx{xpb[cc݃ʨGݯo _V 2 0,P4BX2zL|2H%sllm6 2})+ ZoHS(fN/d1ᏌKRd$~^ܞ( }Xhs=ϡ`lPlYa|FƶGx%[PGdcQk%;s5ml)'g zK tTv8=pV9~ƶĩj(Af]sK,xk)1>b!O(_g3?Z58. k(؎5 Je}h$-˕ƭKai[؅=6ՃR`e_#AGR)YxC-,( Y|8+TCy k})GFR*ėd~0pdo Cd73q^a ib#smjc:@*]& T ϼ4T8xHT$QB\5Wij}q|)DsLl2&9kOgo4&T;Pz.SUNk>{E+|\\ғ"ڞr4oŤM>^8/c~a m%CR!^Cέul:׮]Vɮ NetHpp^=Q3 BEq8J.dv"Ggd_މ[p4"O<\oY"5V}H:=hZ4:OBmXgek,-:qD-P]SRD QnaF@'M~#QD& ,;O2-kC2 Co6%\i?<+S%!NrF8큀 &6Nu/ȂMRx1 @2,I}9 AK  A[KaҨebԮxBEܭY'0֎q6K|Р2RW;VNt#(*! \FS~ʩaNZ G R(|̐\r,/C]/?h_,93 u$ Db病YdJ?峝l-Ҕ"l^ <:Nng$io8hx8O}zajo\rj#ÑO~>Ht*?̝rl"e1JZ?)(L |P%U+d% Hȼ?F4p<7$\ Ӑ) SP˔y ֭U,ЫŒ|HNttg? 0}?:qs'Õt0F8b؟BlArw^wr!ʺ!נ#*N!JvoHe5V.7e ı"ϤGcԕ|ʼn*8Z?St7QW*6"*@$©ZRmѥ`gˡ|hxc ؾgnA3p(EQ+Ru"Ğifkoo1A $ML ~q4ɻ:./W2cZakՅ豭;6YApQ!]ƚRqxepsHZT("G@ :{ŧ,*H@kߗJ7c[@΍1o~&3+?6] ||MalY:S?%ȷsg'XMYz,׃v}hAxϞ賂swKgc\)QO,6/s &"8,ڹz33XԵF:l+ٶd-[+@%([;4ݲ!\w u(&~xBkY +xʶ?V'BQSO秸_Y̲?n"f]TIkwq%^3NV})vcgnc;eep gYBACՋ̱ak\MSæҁl 0bIHa ,3 W;WbeOɄ7 v@1]IփLVAu|?‰طW٬T/k>zU:C 6k>rC1k[iL(nD>4 a!xt yab8r[j=͊ J5U&Oj:<9-wW \piЅBIui̧w7,p[~vF@3Y&,0LbRdU=Z: zjQo~h+\3w1RJJGx2?2a'U? Tޮ5 E]nܲ'} 4V8/)hp;. K ۓ p">XXpn2Ite(O`?t?EEAOMΌ 0[ӼvFNX^9x I6&_֢D` =`蠼1εއv] ~/p5w4ٞP3G4uI5 מɰ <5%Qi.7[ơ?ǀUmIѵO=nն[q,=GK!ΔpJl5i/"Ŧ8h(KqnB써&#PGd)/Ah8E 9=å^s"M\%oTbX8ˉpC/EBDXļFn'쒽b0hFWk#-u֠/MH7pV+<LsMc[>X@_j1Tp;HH}qʍ47w 7VÃEiDܞsjIEEU]o`xYScyU1j a}`E$~҂OxM(ީמfaBBB!lIt*v57@3}wyZ hϒ:(C$dɡcr%?pQ3f LDx"rɍjr ANy(DXM61r֯KT\&}j_H@[g ]rrÐ͗eS' yĬڴ&ˊާ!X486? aySȘ ARެ&7*W2P#SwƎ鞩 ٺD%MY]kI9`[b,h,?ҨA5#&&peV^Vnɫ"ɟ% cNVwc .zFb!52񍔇ӷmA KbǸ=%unчςi/O-r4 b QC՝gj/E\5k(tc,)_k=Gxx=yK?4~ pNy."ƹ#J1 UAoL闫Χ2ɫݷaSr_"FGٸ;{ :f,vTFKe} 7#zpgYApv=7x^h GPt#M|>JнHB˕+r2X"V^+5F$1rKP.a/G0w]&zo;Ƿ?D y_bDy' eFd_7}sfs4=-Yiw]xW;r˥b_FݒaY6 晐8mP3L thҮ.}!5c9oV~{{rS©+ls| o80U̸ֲZƆ"HGØ4A-`O[4k q)}Y"+Ze57ejhi*v8HAN[zdTz:4d͠C$_qڤSnG)ˑmGz@{2Uj(ysI >okm` v Zxr{M@oi֘ fx9dZ 3cĵ:0mKP傈fw0zel}^YyoI73MHjYGuvF>2PtphEeu@~~SBPl=`i9ˍI!yѽ=80L䦈*r~0vmTΠH3yJ >de E.1A3({o?Ŭw11+qy93 ~r0G6oԟp|EyCkÀسT[dF괿R5] -DPzx׼燐p N2kX9rtcؓȳ\3>I鳂 L*Yˇ$9Ea2(ߛ)')9(_Ss|˾) iC{(8!)!azݝCXR@Y%MB IV[2^[0s8^dG~i$(J// <& W#%5|Q#sF_&a1q~-Mezi͖\ y,GS{|֝#̨x//jK4^YT=*}- BEwgVOVVhC1ISo  )6byaN 71niővo:wP=3q++Slk*f=S?!Q(aJLx7#@u%Wb38fs [Ps+t)KV%/Ĉ ?!7_e+(̡3Y.Am!TB/=֣u|mH7{bM $|*Zfb=\J|+#fu/ɺ?&-p*Lmz^X_tյ,q%%!qi+J3Ӎv)b/hn+Q(e/ B#N߾eI};Y;eF-QR*8|I8nvLQT7e̢0 7^%NjY:ڧ툫ʝ ٛxn~.@ q47~vN&& m%sZ'kԥN5gaJ 쮂I8(c!SFRm!HBcFHH2Elnh$ǾDۃp4FhX#Lg3޲Od(h^WO֜ޞs }΋b'dwaZT btyWM9= 15(egƉ@&no9;rA'$֘.= (KɁKcVA}@] /ƷgO,U61Ir9E X Fv?. 檙qUq_nok on`Ԃ%V3lc%4Xc0B28J>GDݏПWH.p+G•IyXP!Ἤ,2 Zhޭ׮ldM" EF<(ZE#A\ '{1KDGSYiYlyaMgd2@f\vrl^kK9K[T(];{1^ҩ#fl\o+ј &,P oRvW.نTsGOa:!L5F"e[f ӫZLa_3l@l$/$5UXO qw2^rGV\}>=vmߋpi"WĶUzGB{K~9[ǽ毒{Ü-!̓SA1bi>?}b |Es .\w 7u捎J{ޡnȹ; ޑ@Īy?8jII-]zy0CkW/# pF15_LO Ӿtp+TNtP(i`]wZB4 8¥3D+eKBT723g{+d=;9UJ@Ry=y.a/_p<ǡFqN~<:%dݥds_f#]{ HڐG'b9j ~HqNw*?e8fu5è4N-Y;h&uOHvR tO=&WJBA6>d;rQO@ȝ32LLY$zsSz&&<է$H <ץ\wm#F},j 4c9@e\ĈGAj'5WsxL.VBkmzy4:vW]/ƥCq#6`x'Ga=n>ު1SID"_Nk2ZI_fnvi AɃcL|<@&%1BbK[შ{RS_d4k#fə#|?r2n e ~?6uF@i_%Փm jh{y^Y}e|Hvh#=:qI;v [M[V';AL>t# &NHd*Lc9wATЏ6M+ =A0w L3D=~??`gt|,A0L N7^%\1 Y?ę#^AæYA>hA?ANiW0^.2^nt^$ltݔLS?bj,hF`51[)"uva xu]'+M)|Ԣ2uҤI/3Caywʉ|>=Gmj7qf&pj%"vLDJI~;Ap_q*tƀ5r| KR!Z}jApHZ$x,ŞcƧq^ }[H$]`Qs9{hEcj(PZtI|ZʙW71,eIc:rgOߺh:9\i/DEm?-d.i𤉥|,bsJyϰY G(%2ߖ Pg9 qה*<k*mCLKAzmD`i(C{Cr ĽP[Y B~>Y[]k|gN_%}B s~Q֨a5`HNpgcxmQp'xoAiFQ pОlUץbU|45%!txVFdcXk?cCTdMb;8Hs]*ä&xFawܒB{!c ϸ%sd6*v#Ov4F?+ w{*GC7e:a&~)$kE|cF6YjQZ@W&pv:e8MG0^cONBA})^Uan?CMU4 ښpḧynբ\izv_~\'tiZbhLMFkN@yS@gHP8Wi՜£o4 }-n%jj}xuW 25` 6S|#4ŰRFװ~Bo]K/TFNtE- lY`=R3_C9Mv7[>x sp^D:ߑ+D,F39#=;ah `z˿-8yGG3m.0xg%tdu.|#=yM FĕϺяDϻ#Ӎ-oȴPTvBGQNp>k'J@DuA[;mSs¾ZRGEvUqZ&3k"\5UVߥgN]W-\L墈i\޾UA}wYӒǃρiLQ[ҝ@G/G R! ~1a8hMUB6^6 %IKɯh;tqykY<i8o*|s.q-ueD" z<(2?ޑ^d;$[K/tEM vhr$劂:)XcEz@B i6 nՋhXU{g hgh4yE|sJdՇWl^%TZ5KISVg4`N1NLOBZ5[' x::×>$ gi2Tړy;Է(m68}&3~sRsy'"6k) UzWi ` <3@fJq8nVVr ڦ 2&:#oR빮wSu $+pǡ[y9"_8İ+J΀0dM2{%yH2) B렏wԗ1!Kt(dRX6!,{XyO0>2,Z){K=yMo'ԧ/*\f2_.uDS* ڡlb &ЛݛFYg|̍!m\/+/ Jgv"f́=ղ5֩8^V2(Sz&$d!?խ115Ȝ1+X`6m'x\EVO?`ZtF 7sUET`Y;ǩ"<&{[jKu,*бJy,(9BN$=BŸM6b0*Z1zODl2&8d="{ތ‘z5\8cq$-L$Fħ!s8*b4JW$YxTYTs3r.@EEFIHz<WmLpe> ˋ7E1 JBNU°"l5م gcIUIx<ɴdխ e96 ?@aL1 ޫVud t54J{Kdo4M"4T݃BF:#jk00~=  ^7Gs7 g@&%Eo͐2B b("ɘɛkIDD#C=c^;Xky6|wLgI7̂N@R`nRɦg%]r?`)D`_WsTQ2'( 8qyFF5qPrC`gń:F~ `2Klh+qFpBBX% _ȧMwѱ x[ gg9Qv}k0L79]b{n!.$6JqN?\ W[2~_3-]CIi1FN-,_^ yi) ʒ;y<뮸"kCN :huԁѾ cԭJ7e I3r0ezw׽O2gR((mWwZR^uRLH1Ý ARӊZ2:Cwdr]DU%.E\֫){xxqŪGBD7͕B3SF!wo翄xBzD,0O99teW^BkEiAp\ سh$ \N8MEƬ̪&T&g/Ԩע-!ZgT€Gќjoi-*U(B[q~irbh 2XI͡&S!BH.i9?r3Zo8hpMIjh0e$B̮Hb,^gb[{J:nyΐmϭ{m/ g"ZNAD7f$a_W}ʷt\Nܮ=Y)X:?:6 "HGAN J_ ~ ySF,dMspFי9ɥYw 8RUhx=`wz/VD؉7RA:Z]nAIre6.X֬la,/N`6=u=60鿻lڰ Hir+kdY66y~g нPR 6DH'3=~y/^xc Gq:Yqlۢ` 9ذzfZ3Pژ5$V].W(Ԥ.m.@R06zxn-~['v#_yZLOqa|$ܚp x%sDMJ+k-dNBy4ɒ 8U/ddw^ ͥ|p5o%SN+,abbsKoC,F;< r7% 4<:vR~RTB/Vp'eFig0slv}yg 4ly:B9!lEq֎N??l7QyvG;`0u ^$?`4s2 6\GEkPyDnw)r՘[ZXjn*b̂-ks?y6@ =WVŀ,uˑY'K쥠 cA]Uʪ&r.Щ?9[a H1)o ) 1UIi#>vpKs/f+ 5CRӴ ^ۑQXwȩ^0l"HLS=0yf*Vr'Lb_t8bbD) -VsŜmPbےJ "4~T#OzG?dQ`v$y /?;AF*xʑN ɜb(ڇ-I3&H鼌fUda3Ѫ"n0R·[n ;.8{L+ }.xaF(vAnO ^; 3M`ئ5)A1Urk께ٶ(8zJu.3>(޹"{8|Z&:8u\.=\ݱ( :{RwgKc-qC ڳ$;<aeB"qB?[M4xP_k!1fٯ V,dNB4ryet"a%&"cJ5k S(MkwtP40meAqÀy}>5t.Po> hK3@ӳR.O_ 1g%=\o('%I^|pv@F >=r*P[,JzF8HۄC4lkW-*I'EWͯ觛񈛟[#^yi WL4L2 ͞/JeN(?q @,NoR ACkn ӳRu>/($omJjԋ18tY^hsSߦ*>)-$#wܤoel#:z@ =ߑt\/OS@IjCJnoL6em}]ksELR&s~1-RxJiȂVG!T(4ǯ+{ƁBFRtpq~WJ MXǓjEҚx٢Q/o9vPe%Ұ'ҟq)AMbQ >(7n7$"tO% L2bBtIˌHX%XuҵY[ϛ_\7nMqqoiQTʀ>Q(wT΄D(6wi%= P?_j2Wz4g QKI~9M )|UIkvnD3S|ԧ'n zۺtZW{]juGJC#4 XQZ'b/!Dg hg}sGxj*pZok`1 eaLK|`Jz)eg;|LҦ`ё+,*X00ߎˈSg  ]Q;#Adnd kiU0VDpәţmFVlXDJ}Xsyrn~ޖXQ3uic=- p0u FwYN $eyOڗ!LTu;.G㪽/-~-\(>݊sd_BgLi\MǧQ XyZ%*)c.uI*‡#vvaߑn)@f68kZ.j{>qoNcBV2T5Uz3 ??@pp#7jO]bhin|SV!Ui}bL}f'AlSׁ d8E9=h:(uaa,D5$Pڼ Ӹ=1S}005tf{]7q81͔r8MGy M+% +WJ֪Gva׾ȹ[O$"q ΄md' AKo=C%o{ D!r )68M_k,@ѫe$л1Z6L\CpKH.T`C!!><ޡYhY$gЭUu/BeS9j -*9]p֒eq`@JZ"Qzw`x;ϫQzlOS(;{Ұ¼vpOs/շƚV{±4DxM{ܬbn،ur/*9 ¬]hQuqay {EXe u>r=\} 5l yO>k'5 k֮3LKm+68e-ɣ'Ѵ>ЀƜXpӣ72 3s #*ǍJ\*eK.ې MT5өA|n9ԔXXO5Vy]qn| ٜ_'R LjZR5ufd,?IUǭKY8`3UxU:<[|5= ̉̊.]2 \Nr&[9'wKvo\nB6$:L^Q; }y>a\]o0V03{FPq_^T#u^Lh\Owlq?s TKnxGXtW%߉y7$pi g&ɐWB^M 9ȜNUV4UU3.7z'?ou( z)OͿ˄ܡ $ό 7hQ5c:W, FUqpwq|HAr8||8%g}:\Qy1(*};[fՍ*0醔dW;_uPhsŻ 8CNUà AbqFg>̩e3+B'U$g*!;jRG~)Ns+}lh& SMD}$^&2ǚgx71`gU p"S\ٮSW|zR^s7^.T]$wr+D/RX!o(6 T N 6IavU^gQŹ3ŋb|@OM)fG"/Og\q č=\Iϐ;ռkQҦe@'Iy(mr>߈yaJk_UEδIaݲ\GHcVV^'ڳh=|a| e׈q/@_+,PIc2J'- ?2]ДN5Es"H8>=>O~f!ΜC9w)г#`2ކi,qOT#b wl7>'2RT^$1 eI)Ǡp-{k.9! -[J9Jj-V<5%coNKAÔsS,9{qgB s#DZ<ԐbN\ Fh>ej_K,_7\F cd!d G̿001"i~RؿNIR reül+? 3|E#0 5(F;:VEAao^@:ẆsdPi5m#6BK/)E{h^^lg`;'yv{$ BS#L(~엝'?_eR1\HdSPVb=#:_ 2{وJn3nT O:6!NGZgWgK n_a¬BE8 3~MŰ-E}Ͷ ^O7)lOFEOx!$x Q-- {i0I"Xʣ^կtgaIU>-bF=!|@?IOҰ0DE*#7Zzyr\\JW2o /U|T? پOKaK֠%& yMs@Uih?kl`_0|*2"x[8+)tFB y+e -0_Wmw^go/ ŁlcÙyf!vu%÷IZD1Shk&*xxPGV8amb7uhnx.oqb%ٗWx8듹);M6?9Ƙ)+יt"m5^jf~ bRFW T6fXÜ)V]j .?zwYb kw0yluSŪZAU]35~7%C52i /PC=@AqOu8o~r,UB_(SLS"H ?TeH^൉taH+:Hy7,\@>qo$6z>tIXF$ƸpĊf5ΡWi/ʄ9WXb~ZZ:nP(ûDJa͸6]l؎JSYЏ+h~nrD Ȉ/P~TkM07;TȦOT\7T\#[B9o]~GTQхwfHN9*iMƓo֢,¡To[O)t$/*_߃/ G /q(rK+6`mnf/S! :Ql$l?$@d#?z2j0fD*hozO$䘆ۑ@_'r"dAMlҹ _ 2$yv;6UG4 .Bk4VpoQo& |E^Kʰu `_x\&y{qaqJQ&v)i=+e,Իv3|LX3; gpz7Ѡ[=Axa0EO=nnh*⢻[kki}PQ>6 Gv| OF+ֵkYn%Y>ŬE huSrG $xh# o2pϗ 3q6IJ;x=pgDL)KWCOCe3Oz+"=:tHҚb|޳Ʀʑ=rQmt2))Maa, Ř/WP0,-ڀ5Ks+xFMn]]n5V;F=BDpBOVY꺳;im ,g,EXB< Ĭ$!9ml6Śp7 XG۴{ߞ7R3A}>pD~ `Xnz2eWQ_<'INiϟJv-!~2` EhŸ4m=B;`=eׯ#<]4es*)dA`2'rBt盓r<0ZXj+/nJ=^6̜7ч'V7->PL(j=\亃^^oMwL.wf^;.v8[4#%  un}2c}1WWev۷O+kFmlf^bHN'n[3tSgU~0Td#Uu×D #ʒ1Dry r? ̐do?P EsMBx惸v/QmEn-'!|W!-u¼UI*3c9NhC(,K~cQ&ZUPp76ef;+nY;P ,%F,K?\15cx?SV>l 8\ cca c#%ihۣ~u!zGrqH՜ ,Fa-z(벴sv4>W%K*L]T"%y7TN{ BCoFI ю6`*KMAmT+#3y(~e'L\>En,:Q2ǁZPDĮyp6ucDJL>49ǧ't[OerCL CXd a֡&Lҩu˼̰=)7xBR [P\sh[ ^eW>/鵘B&!I(4KWWUؗU@,KѐӒjw$ VBQ۟dxޭ_ X[o"RO%SZ2JH@MA(pN/I]4(۾]v,[vйVF.+S{dIjSEev,XcJP}ĥ=6݃DB9'vDZ}%*F,BCUJ'O5wݬ@f8(;,_f{t(}ikƗC.Jswa_Hi7\LwY|i`]uyI/ ƕo>kB ?ͯ<{:5f6o%c떵 =]ʥ7r<$ڝ(Dނ`qt󹜚 sCRs#N,]6C ݛ ,~GTv7^XNx 'eW;޸gc 䡷͢?m;BEOltixvM/@mAZu:J.BHwZ4.66;!ZጇmU֑v׃j*X.JF:DPh/N3.P,}| 0}@ tivu(I*ע_pp 4~w f4![ w:U`nعlvRǪWwgGA{u$b#o/TԀ)1Ӧ9͆'lo&tWH NhhL]I˽0 M-sN H [OX JrWDnp99+7$]Y ;s9-nwMM5 ;cZ7V0] BW a60!/5a9!PU\/4< $\P6AȈXXc9P}mjũ@{~K51>nI4ۊKyc hs_*{c&Ƥuu5O?-\a"'rui,gUL~eg% H< \Iz9SBxL6(8@g-锡Cyˎ-i@ !~fO.#(֤7̗!4Nۣ*+7jIw9K|v/eXP@lSPE,}-tJS]CIAo@3 dJrQzI`9+~%dYfhOе8RaުAE DYu&㷝 xg/HJ1Zz+Sw[B/]_n|K/˾s{~,S"f͂DyWmю/wiA XsOJ)HW;/;P}Bb;Q[lrfBR;k*rlIcj7~_ "vg4FV:vJZw۲Ŀ hs#cc CSӖꚌyIݧ9b.M =3#^dGΪ96+)"n![.`8ftf.Ch5X ;AINb9㌳+?h '! 7fwkRAo/DZȏeKbj[*&(n)Gῧ❈7BOn$u^jRTġfZm겚I8-aa^!4;T5Xeju9FהI,~# ҋvT,v l!1w],*됝G0yVS?@mvz~TI:x̕ ۛr~JYBk}ƚlh><%7PGEdޠ;3]H~[՛ Nx_Rɚ2j[^eny<44 5μxf%^zk[t:+>UKҴǤ2!cDs(: ¼v&Ʌ{K29$vf uU!]&\G qF'jSb߄q?!ԫǃ<#1wO8Pv /sKPc1\%o5[0W@^P#.R?SlUөL\<4_3EHv^MlaS:z,53=3Zy@=I nhӲސ~̉v 0igS^fc3?::G ]Aﰽ~,Q4n\Kn052(К"3Pw&l ]g؋(.֠uڞ9DCgS/6>]A/KcswԊRyi>㫟8Ε}NpOvXw$8EֆO6 ;M]XTE?`eP%bP´ 0sI [ɵ`EHhx W;T :) MZ"9~oOg_q;e} j焐@ޢYN2f5D-o3%_+^6 ArA=QjVKzD4$wI"Y<._)"%nq F w.^ǕrlPJ} K!tPO.5)Gg yσ?ߡ!c)Vs3pwa+–@p9Sޤn,V?i \؊ϡm(<;xc09 $1Op#jpcR=nɒ-{E=f1 Q$mw>\([I2^V_Z;GN kf;/C kht8 u@a"Gz">5BtY2VuB"K5=o7TKP4;Y?AOQ8KMZ=MEVD֙+ٙZ?c3 dtUkb $ƅl+:G1ݦ_N,nH b~"/?(.tW}g?Q L4 |2:I5t,H]r^h_aNLI9fֶ޳ڠ &!]VeUD\xqi0uĀui[NGUor(R}q SLR~LH <y5!vxtS='tXU.:h#?p!I >K mZNb6|Oc<ׁ~d}Ƣ P{ѹjm|`+-ߵ.lo'.u `Nǭt-\{cyp3_  Wd %f^;oz4XA̩-|6>8Gk>eT잗 -bs - ~c}y*Pi\ 񻦚q`U7* 5I/:cK`RxX\kOK"uf֖5,Wrp- ݍ˰ cmWg&51%B^¥"nfaj>Y)tDYπ@<_)Bt 9~|۲4a[X՛0ZU.XhY+RĪϧtÌЉI,>brZzeAN.c\8 \ p冷#mC月E}Kn5Rnh.I .T~J>5xt\nM1u C_|A7e1`D[[R&dW߮`}W$07Z|u)|xT܍]scћS[mπ mŻe]aCXTZML\c!x >Vڴ:CEoQ6~}3KlHƳ&rDb]nm6 (~jۦ TO!k%P;2U:wq䧏 l1l[c#Hr:2'xDQ-Xjk^JL"Íy֍ROE:VG1,|,ԆHo$3{F(>ɦZ@ֈO9<mpAx$5([5  ٦cgБ+(/-[a_~G Mg Zl[=8b;vSmS=81D-dR `\&D*1 42/h$Iy|ǖN],]qZ}IV;Q;>e{QqVţbDm6|!Gؓiz׵q@*fwlYZ2>eei$LC_" m-` @Aiq֤ *岞I54u-T\TSQ:-8s/cx8[L!B^Ÿ]4LB..&&,%U kϔ;ulT~x{n0NғTuv(09P)l+}b|j?2Sib뛘Jޤl1Ih! tJ<믠)\ZQlBQ76 +Ƚ"awZK+5Z(ݝ|VmQיId4"j% $>$cn9L^qoe81'6vCRXGf?Ή|^]LqRZ,SC*4^ [^ȇzYYhLuDhI{x=zO[.fX(Z$p+3ťk)A 9[$f'ڕe٪Yi}[>UZdѲ􉑺^JޮP\۔]p1;5i0I?SMߣA3\ <%XHfcI)yfH63Ue6JL}g` skM\iATbUK5h:ɋ#wʅr'ܯFEtyS"`dYX+Pu13nr%{x\,B7nTt sNqsXItx Z]Z7z;nicβ@$jS9&ЀXOInsʿRN~R\^9O r@ϴ>{qhX6] 1uTSgS1ɍԶxPM_Z$22A|eVEST,Y+4N<GZ-=aSysX57_)(y GTM0L`쎪ʻ`.e}sgy8z`yXg< DA+70N>vžp/ꌄ%pt13`-? mML赚aڞ4C1gz0@ Sʲݨw kV8lKґLfBr1H)}[BRj;2͢K.oB%t0H'}XD.s$d$b]RF$ѓBHf>PF!h|-˭Qmso&4Nin d[7HS| g( }6T$ܵmhX5Kx~=}xwL|265M0i*V(g3 Uɥπב+H25ylrnӈ~aOZ3BP$ǸM [aKl/ F~[= )úҥL.LI YMhBLGa۪2sIǥml@,˿W'*jE .m#/Wj$LH/vcCSQr_TZ8V+~ҙ:Sh!Hُ|ۉ}&Ip\Dg'a֍l~ WL|J#m5 @&~{ ۭ$=Ir{.pZ4&UsdkB;V)F M?^ɭuI(TԗwWvjfӿ0 }B?)~L+.t?F7"󬴽;SIނ=E{W܉HK=ʮ+TbJ-}"6ֵ~Q!_:@z{~۵&Sܙ/G cr I!)=~G>_iZ«6 nX$=螝?K^ՋB-Nx9?u8ӕ/| ]_aw5?(*mQ%b4 Q^XJּE&FQ teN4:*,SDi?NuuD1ts9sDe2"#n6<~0)w׌zVĹ"5[ͯzoK;PX&)hYFK݌웤h/ËPf(=Z\|"yDr҈pwg^tW<[b3kSL|a"đ$h]èrxAk~cOjIʪ\z5wlIM0bh]*REAԂWh~=V Džniɓw@fȑ^՛DϳrO3ka"k@Qvt~Mu:u*aOͪC^T^Esox_m7lZ靅P7+ل6|W^ XavcfV!ў \Ed 7)LlaHKS*٪i55:bem/(=-= $)%8+1+zd3j3frovsyy.P2* u[!l-ބMx "j\tvٞ׊J~϶`Sɖf8·FrcBʗhv*>-UOJ(.=- [+iäVLWMMlpJˎ#DkÄ/iL }:ϒ+XX<L*=I3D&0( , (ra#4Q19)6}:poW1/#J׳,?DpUo3-OJvk.'H[_lԐ;2r>RS;@ds3Zo:IoQazZQ'Ѯ[ŅMAꎋt/nFWDuJE^T2A ֹ}+? {-!lsV 338څܤX7n{*=6^;?d_2۞^d8%UHp۩1'H͝EEf30TN`wY`Y.fJ䂖Ԑ ݂Lo6ӊMSlrim-RΨ%NM"`"wakfRao35l;~{2u8a\ձ6f!b]EtqϨI*K70wc3Zcu1h>:/c-GSݨg  C}-Qd%@`)JJ(Bw(62bqa!ϤСd/ޱD̉L^w|I!:l^B$SG6aaкZ4$<JHFb1 *!BF.Hr@?] XG6i[bj9: zʍEDE=gTڏIɧCv+se|Lmɯ6Iռ&z`ZPc ?DФOgj0c3=DKKi698f kVW_GNJ4W N3{ Y&N`8E-Jꂋ;S梳+Gy$MMU ˲> 9g9[x dS )o଴ B Sgn$tye*+BF]ն0(P48K¤qanu "iߝ$lP'CG^|@ƛOꑨ[y'_aMT>Kܮl[rtM_@?"Xln񾱺-+g},AH5on ՌWs;oP|q1@T$FZ~R.sZ`x<ޛ{:"T-8]7 |wy"yiDdJC<7q?!+!Ī\J~Ő\t9&y)jԴoP AvIGsy\bQl?b{&4yٵnztqYf/Sg h> G ,mN,ƿd)bR)|Gie ?[i"'0Bep1!dRNigO* CQhbѦY0,o.)#uۢ! i ~m(uړװ81J)' t84e$qc;&)r)fdqr;EC7F-B?t~jtGP`|H6kur1q7JngOp~~ʇ<OߵR$ogҹ)GHT52+M#k~,[:AqlnKv̶&6t-T ɭݓC'ȔGڧ 뫰=buLKZ åоy5V{/KW%렌!>ܤ䭞6@vEOv\ bv_Q] NSu9@Q~\j|Ԕ]<ΠqH A񊈏 c4H xD)hˊl# y0JJHIp~?4VʃF/я|@Z8!MԮ>I֑lF3j].afcz$-~ϸ,@vw EB8b%>{Y B|R ƣ! ] =ft^ٰ*Tk*5=qrq`)1hqnd@.uI ?ɻI] vH'}^Y7)n;Xo9P`dg([ú ,"-F)^4iW㜸"j2^[K_1Tf71y<u}Mh,ՔY#5$ugEF깦twS  CXvjg2b>7f#:Kpv-/Xv'ǑV^h cO@kKC_ ~IjHm4/)ujDVRG56F Ff RGRΗs=&c$Ռ1-J~\ la i* /,1NTu8[0:n 7HsT)Yu 2ۆg6/5&zWm i.[@\M2p$qq&*'g&~F;yb9X/z‘WРԭaIވܭDwO_5% _S/+e+lϹk1Eo+['\"B4*:uNNI(խmڠ׷cʏDv"9r_FC|?l}@ƫEQj=/cama"kqtg=]1>uGxEVUOV{AI01Y%(V0PĎFEr45:of v~I[#> Z[ /1`-PNLPtj o(_ kd3?&^Ezv1m56x4Z_`sjI*6G