grafana-selinux-9.2.10-18.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`fc ]mtZ` (T "Xȴ)VV,ºhm\q,z R]6N_g|"PUM˟/>"ɸ5a\ZkHϕsvSqZ5X97!w9~0C`P^Z?kݎɖlnq.ޛj,x>En9tXdYc8XWo;#&aLٰtr0_2`ș6 `tt]V!bLɕmr [fyjeq2]ihVUxiҦdN[9ܨȊ(Ga(7^rw=K(fǒHgl&{q:@JњŚ~JLcc_ >&).5\ѭ ضj".!s+mj*#;y94R63lY@u^Rm,zw5ٓ!(9qՁnjG#P}ż,#r$F_s65b᩸OuvAE FlA h tpr)ޫ0\⸈M ̻tب×0` bxAf n6)+ X"-^7t[FO](}k El\>p=>|?>ld # Lx|  8 H X x @ Hh$t ( 8 ?9 ?:"?>:@:G:H:I:X:Y;\;(];H^;b<d=ge=lf=ol=qt=u=v=>> >&>hCgrafana-selinux9.2.1018.el8_10SELinux policy module supporting grafanaSELinux policy module supporting grafanafb:ord1-prod-x86build002.svc.aws.rockylinux.orggKojiRockyAGPLv3infrastructure@rockylinux.orgUnspecifiedhttps://grafana.orglinuxx86_64for selinuxvariant in mls targeted do /usr/sbin/semodule -s ${selinuxvariant} -i \ /usr/share/selinux/${selinuxvariant}/grafana.pp &> /dev/null || : done /sbin/restorecon -RvF /usr/sbin/grafana-* &> /dev/null || : /sbin/restorecon -RvF /etc/grafana &> /dev/null || : /sbin/restorecon -RvF /var/log/grafana &> /dev/null || : /sbin/restorecon -RvF /var/lib/grafana &> /dev/null || : /sbin/restorecon -RvF /usr/libexec/grafana-pcp &> /dev/null || : /usr/sbin/semanage port -a -t grafana_port_t -p tcp 3000 &> /dev/null || :if [ $1 -eq 0 ] ; then /usr/sbin/semanage port -d -p tcp 3000 &> /dev/null || : for selinuxvariant in mls targeted do /usr/sbin/semodule -s ${selinuxvariant} -r grafana &> /dev/null || : done /sbin/restorecon -RvF /usr/sbin/grafana-* &> /dev/null || : /sbin/restorecon -RvF /etc/grafana &> /dev/null || : /sbin/restorecon -RvF /var/log/grafana &> /dev/null || : /sbin/restorecon -RvF /var/lib/grafana &> /dev/null || : /sbin/restorecon -RvF /usr/libexec/grafana-pcp &> /dev/null || : fi mш"шA큤fbf`f`fafaf`fafa81f6452a794812b0896d8739344807795efe02637af50f3e69af76719c3b5d05075e9073f5af0c65487ab74702fcc38b0ab09f5f4e78f30ef3f6a511cd09bed788d20a64e49f88ab43fca5bf4a548a6a70b44c1192250cc24c799c89808683e58114f4b336b7a7896b94466b3d5c0a0f703260071f2fb737e965d744f90d8071fa6bef9582d2a6088ad6dfd474204beafccfb47994a1dc797d3695c3060016e388d20a64e49f88ab43fca5bf4a548a6a70b44c1192250cc24c799c89808683e58114f4b336b7a7896b94466b3d5c0a0f703260071f2fb737e965d744f90d8071rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootgrafana-9.2.10-18.el8_10.src.rpmgrafana-selinuxgrafana-selinux(x86-64)    /bin/sh/bin/sh/sbin/fixfiles/sbin/fixfiles/sbin/restorecon/sbin/restorecon/sbin/service/usr/sbin/semanage/usr/sbin/semanage/usr/sbin/semodule/usr/sbin/semodulegrafanagrafanagrafanarpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)selinux-policyselinux-policy-targeted9.2.10-18.el8_103.0.4-14.6.0-14.0-15.2-13.14.34.14.3fIf|fe6@e4@eids@d!ddoMdldS@c_bb@bba*@ad'@aUaS@``@`@`P@`` @_@_G@_>e_=@^3^^V]]*]p]i]A]9\Q\\\\8\O\\\|\\B@\\\o@\mA@\f\\\Z@\Yz\T4\R@\Q\5@[u[]Lauren Chilton 9.2.10-18Sam Feifer 9.2.10-17Sam Feifer 9.2.10-16Sam Feifer 9.2.10-15Sam Feifer 9.2.10-14Sam Feifer 9.2.10-12Stan Cox 9.2.10-6Stan Cox 9.2.10-5Stan Cox 9.2.10-4Stan Cox 9.2.10-3Jan Kurik 9.2.10-2Stan Cox 9.2.10-1Andreas Gerstmayr 7.5.15-4Andreas Gerstmayr 7.5.15-3Andreas Gerstmayr 7.5.15-2Andreas Gerstmayr 7.5.15-1Andreas Gerstmayr 7.5.11-2Andreas Gerstmayr 7.5.11-1Andreas Gerstmayr 7.5.10-1Andreas Gerstmayr 7.5.9-3Andreas Gerstmayr 7.5.9-2Andreas Gerstmayr 7.5.9-1Andreas Gerstmayr 7.5.8-1Andreas Gerstmayr 7.5.7-2Andreas Gerstmayr 7.5.7-1Andreas Gerstmayr 7.3.6-2Andreas Gerstmayr 7.3.6-1Andreas Gerstmayr 7.3.4-1Andreas Gerstmayr 6.7.4-3Andreas Gerstmayr 6.7.4-2Andreas Gerstmayr 6.7.4-1Andreas Gerstmayr 6.7.3-1Mark Goodwin 6.6.2-1Mark Goodwin 6.3.6-1Mark Goodwin 6.3.5-1Mark Goodwin 6.3.4-1Mark Goodwin 6.2.5-1Fedora Release Engineering - 6.2.2-2Mark Goodwin 6.2.2-1Mark Goodwin 6.2.1-1Mark Goodwin 6.2.0-1Mark Goodwin 6.1.6-2Mark Goodwin 6.1.6-1Mark Goodwin 6.1.4-1Mark Goodwin 6.1.3-1Mark Goodwin 6.1.0-1Mark Goodwin 6.0.2-1Mark Goodwin 6.0.1-3Mark Goodwin 6.0.1-2Mark Goodwin 6.0.1-1Mark Goodwin 5.4.3-11Mark Goodwin 5.4.3-10Xavier Bachelot 5.4.3-9Mark Goodwin 5.4.3-8Mark Goodwin 5.4.3-7Mark Goodwin 5.4.3-6Mark Goodwin 5.4.3-5Mark Goodwin 5.4.3-4Mark Goodwin 5.4.3-3Mark Goodwin 5.4.3-2Mark Goodwin 5.4.2-1Mark Goodwin 5.3.1-1Mark Goodwin 5.2.5-1- Resolves RHEL-47191- Allow for mssql datasource in selinux policy - Resolves RHEL-43435- Check OrdID is correct before deleting snapshot - fix CVE-2024-1313 - fix CVE-2024-1394- Resolves RHEL-23466 - Resolves RHEL-21027 - Allows for gid to be 0 - Allows for postgreSQL datasource in selinux policy- Resolves RHEL-19596 - Fixes coredump issue introduced by selinux - Patches out call to panic when trying to walk "/" directory - Fixes postgresql AVC denial- Resolves RHEL-7503 - Adds a selinux policy for grafana - Resolves RHEL-12650 - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work- Add /usr/share/grafana to systemd-sysusers --replace- resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth- bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests.- Use systemd-sysusers --replace- Use systemd-sysusers instead of sysusers_create_compat, which is not available in RHEL-8- Update to 9.2.10- resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters - run integration tests in check phase - update FIPS patch with latest changes in Go packaging- resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal- resolve CVE-2022-31107 grafana: OAuth account takeover- update to 7.5.15 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure - resolve CVE-2021-23648 sanitize-url: XSS - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter - declare Node.js dependencies of subpackages - make vendor and webpack tarballs reproducible- resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files- update to 7.5.11 tagged upstream community sources, see CHANGELOG - resolve CVE-2021-39226- update to 7.5.10 tagged upstream community sources, see CHANGELOG- rebuild to resolve CVE-2021-34558- remove unused dependency property-information - always include FIPS patch in SRPM- update to 7.5.9 tagged upstream community sources, see CHANGELOG- update to 7.5.8 tagged upstream community sources, see CHANGELOG - remove unused dependencies selfsigned, http-signature and gofpdf- remove unused cryptographic implementations - use cryptographic functions from OpenSSL if FIPS mode is enabled- update to 7.5.7 tagged upstream community sources, see CHANGELOG- change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083) - add pcp-redis-datasource to allow_loading_unsigned_plugins config option- update to 7.3.6 tagged upstream community sources, see CHANGELOG - remove dependency on SAML (not supported in the open source version of Grafana)- update to 7.3.4 tagged upstream community sources, see CHANGELOG - bundle golang dependencies - optionally bundle node.js dependencies and build and test frontend as part of the specfile - merge all datasources into main grafana package - change default provisioning path to /etc/grafana/provisioning - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170- apply patch for CVE-2020-13430 also to sources, not only to compiled webpack- security fix for CVE-2020-13430- update to 6.7.4 tagged upstream community sources, see CHANGELOG - security fix for CVE-2020-13379- update to 6.7.3 tagged upstream community sources, see CHANGELOG - add scripts to list Go dependencies and bundled npmjs dependencies - set Grafana version in Grafana UI and grafana-cli --version - declare README.md as documentation of datasource plugins - create grafana.db on first installation (fixes RH BZ #1805472) - change permissions of /var/lib/grafana to 750 (CVE-2020-12458) - change permissions of /var/lib/grafana/grafana.db to 640 and user/group grafana:grafana (CVE-2020-12458) - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)- added patch0 to set the version string correctly - removed patch 004-xerrors.patch, it's now upstream - added several patches for golang vendored vrs build dep differences - added patch to move grafana-cli binary to libexec dir - update to 6.6.2 tagged upstream community sources, see CHANGELOG- add weak depenency on grafana-pcp - add patch to mute shellcheck SC1090 for grafana-cli - update to 6.3.6 upstream community sources, see CHANGELOG- drop uaparser patch now it's upstream - add xerrors patch, see https://github.com/golang/go/issues/32246 - use vendor sources on rawhide until modules are fully supported - update to latest upstream community sources, see CHANGELOG- include fix for CVE-2019-15043 - add patch for uaparser on 32bit systems - update to latest upstream community sources, see CHANGELOG- update to latest upstream community sources, see CHANGELOG- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild- split out some datasource plugins to sub-packages - update to latest upstream community sources, see CHANGELOG- update to latest upstream community sources, see CHANGELOG- update to latest upstream community sources - drop a couple of patches- add conditional unbundle_vendor_sources macro- update to latest upstream stable release 6.1.6, see CHANGELOG - includes jQuery 3.4.0 security update- update to latest upstream stable release 6.1.4, see CHANGELOG - use gobuild and gochecks macros, eliminate arch symlinks - re-enable grafana-debugsource package - fix GRAFANA_GROUP typo - fix more modes for brp-mangle-shebangs - vendor source unbundling now done in prep after patches - remove all rhel and fedora conditional guff- update to latest upstream stable release 6.1.3, see CHANGELOG - unbundle all vendor sources, replace with BuildRequires, see the long list of blocker BZs linked to BZ#1670656 - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo) - tweak make_webpack to no longer use grunt, switch to prod build - add ExclusiveArch lua script (thanks quantum.analyst) - move db directory and plugins to /var/lib/grafana - split out into 6 patches, ready for upstream PRs - add check to run go tests for gating checks- update to latest upstream stable release 6.1.0, see CHANGELOG- bump to latest upstream stable release 6.0.2-1 - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656- bump to latest upstream stable release 6.0.1-1- unbundle and add BuildRequires for golang-github-rainycape-unidecode-devel- update to v6.0.1 upstream sources, tweak distro config, re-do patch - simplify make_webpack.sh script (Elliott Sales de Andrade) - vendor/github.com/go-ldap is now gone, so don't unbundle it- tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656) - build debuginfo package again - unbundle BuildRequires for golang-github-hashicorp-version-devel - remove some unneeded development files - remove macros from changelog and other rpmlint tweaks- tweak spec for available and unavailable (bundled) golang packages- Remove extraneous slash (cosmetic) - Create directories just before moving stuff in them - Truncate long lines - Group all golang stuff - Simplify BuildRequires/bundled Provides - Sort BuildRequires/bundled Provides - Fix bundled go packages Provides- add BuildRequires (and unbundle) vendor sources available in Fedora - declare Provides for remaining (bundled) vendor go sources - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28- further refinement for spec doc section from Xavier Bachelot - disable debug_package to avoid empty debugsourcefiles.list- further refinement following review by Xavier Bachelot- further refinement following review by Xavier Bachelot- further spec updates after packaging review - reworked post-install scriplets- tweak FHS patch, update spec after packaging review- add patch to be standard FHS compliant, remove phantomjs - update to v5.4.3 upstream community sources- update to v5.4.2 upstream community sources- update to v5.3.1 upstream community sources- native RPM spec build with current tagged v5.2.5 sources/bin/sh/bin/sh9.2.10-18.el8_109.2.10-18.el8_10grafana-selinuxgrafana.fcgrafana.ifgrafana.pp.mlsgrafana.pp.targetedgrafana.tegrafana.ppgrafana.pp/usr/share/doc//usr/share/doc/grafana-selinux//usr/share/selinux/mls//usr/share/selinux/targeted/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryASCII textSE Linux policy interface sourceC++ source, ASCII textutf-8851a0d3fe0690326da571b76018c889d41716cb5cba8a8f47d3db2c68d6c7177?07zXZ !#,l[4] b2u jӫ`(y0nªub-Z@ Zjsݣ8 Qs~Dyji;\AwdVnuQx*Fʱ+Ÿ`eS4u/ "'IƐ"Q +z<õ*:#6ton 9J *Zj{ d*F/~&M$&rO[ |%̄Յ_IQ#٢ ڷ,8¨:9OUV' Uly`' 4I^J>|@ނL&R>t] .<ҕCn5>=gd*2rYa p@JL6:+QruTfEqԩ+V,ֳv^p~5<؁M\Tuh+~J" ?."@&P:x ͝MHu\yD) IJ~ČZ4{N%,'Yor2kTH7mn uqZTҰF lbƊ=]i $QbzWk~' ]̈́4 i XB쾗KX!q-Vv 7ś hu~lỀo[ $JD$Mwz YFprs{$.]}@vdi1PRD9:/Z!C^| k4/!)"\7xbBpm YЌ!;,bm3 z+Zb54DޘG++F~uz-({454ܛ!YYܦc* +Lw,7"f|(l0U g-hknQ9ί3yiz%H[+4Du>wVu&r$sSPm!)_IʰlPeA|Și#Yafsj?ۀ!'AcUFH'~>-rF<1jAeN1*G0G#u,@L.QU1O:}$+e(Yt=Y\E?axFZ+.w >e* D+HB y{|{ &Oِ[ i$ LnĚ]羅o4Kzx~pH囇|,BaQXwoPCl+J}is݌K,R'״7 %ZW[<]CԠr B8#K^H%N[ç~|6!aN'1˟ٱH0bz"\^.Qn!VE V¡ϟNalb5b=4+:`:Ҍ]0< 3EK 4$N.ƘFQ͒رQ&;"JsPK_R|%,$~gZ2?r7`i y hPDBUzxI &*٤ss/386[!XLn &wK^_m|<t" -S4Dr*dXEӖMq`G7}R* =גa3X(FK R˶[,?DkCPVZtt[kp_>(kL 'ZEC NnVjJ`[!G`AdPs ơY_Kԗ {:ϼNㅍl.UD&][U[cG҉?K K@!`CK۹m+_v_0YCC %bI۝8b9xYE 6%c8O鑻M&8-Vx#Z3 0ΦAFs=,_jۺ* Zܓ9w_lvŭs~R. J 'R1m1hvez=͂ɐ$5s|V7x9;c&4-IoXVOtZ<'-{qf Tc#\6!y.aCH6x 8ZiϴSwL]J_8m&t؆wgyGT];QDcCH GaXo4(e{"!T" vl;~wK6Yc'rJ<~/帛ޢo?[NUq-3RJ" l_ ^՛(BB7xW_ڸ[1)yl!)n\хS,b6/M!%WҒ4 rGxc%IۋD`,TI^cTV0Y./?Wziu:UWA2lJ͹ *jui#RV!"~Ac`LPhlxLq' C$o݃B"H\Dy&2b,%{p-s~}dV:|k>'Rڶ z LIʨ!K&{2 DƌI> xe ,3-+ز=WQOnR^^e{ lx}aa%3vO;# dDY;T)W' reH|Y-FhhGgHH&LAڸE NgZ=_=x;G}xpxÔKT?P MfrJUݝm $➻CkCW*g=.~L![. qύ!Sa0tC ME1Q1XW}jrءwƷtK3aAK\ Bt:?YZ}F:(޸c6T~F(K.TkU%2YMP=QbfxgZ S"-=ckCH9ђlw8xGrʸHo _ӝ(X>[2Ab 5Rt/2p!}?~\ZFB kGe7%  V(tdIi_S="?~ ?ΥMJX.ivg9<򟄇IT0.3H&^CpɊ`*>d 5y?k:$6 +E Xc~wr tbYSVghI/Yi&]GPV9|7eP;gKDNL>_G sE>~LY1;ZPeb2U dєڜC)8=3Pc rf㟍Oo,bp#ayW Z`tѹU?hD6JI2=ƿ\jU$@ 66_1(iU/vt!I~|]ANeC_{P}eh'w؀hO2@4Q*"B_ɾ/'ra!&uLx kMnDsoTq@e [8}Q%qh~ZD)mr?<=\ç /Yg@Tp~RP42G@UN#5ZhI Q:(]С=%IU8Y bxLvn SD{K.d 7D߼ift!5so^雝rB`{5**-$]@=e(9F6ߡ.z11n5#ڶ\ۧfe\O6k.|0Wj;r-ߑ _x:fNγ{riڨi֪YGU^3$ڤFrH.|q: qpܘ1N/UItv낧c \;3WrK)6,zx׽7ӟ1=;B \MHkT9Jd?+>]Z@;%& 1_~BΓnjl'"A\>o 3s2f`}P4d]Lwݱٲ;Δ8&CU>4w2amB' RaɋxI|xkTt-U.qZ!&nvV9S4b;'i~6Xؕ G,H =IFܙ )=񉼫O;4 /7{Q"]bƼGVmvݜBW 3)HT%;O+fw |=~[tJƩ>ni vC>lSzOWZH1> t&2ƧQ8buj3OskW'TzKmjy*s=DU X%qHٓzkoZjy%'X&rbfx5QH᭑^ąD3J?f$bOqʡ'Y3'<0WǒryLIfU]{oԪZuni0Mσ-VoM*.elK:>%(n#!""s} FTNl8MWw~MgL`eqᝉa('+D\ɇ$[nW*z o 1d.I+o{J}*pDe%-(7?iGki勺M۷*ɭ.>9|sF'Y; Rҟ1@x3`qkT<Ƭs *h1{4-:NIjf}-Qqhި~Jԃ]S1$)"g4wCF{Fݎ?|6U^7o4|FV赝H"Y=[]b0O G g=cO##3  ZJl'NK@ͣ;InkX)"igFEw1DvnNs }$F"Cy$T~LW%gGuo=C?Xo_Rf<^Ud%خXUM`\ƑҗM/"7c!yHE:h 6` ;]9 xj<%e X2gϡet {8K6܄"lu2[$,8>@V.67}7 ,V#;# rɳB&BHVx""ϋٿ:$\Bsθ7!jtyOkqjf&]Rfe&SPM&fJJ6 (9UHsfnQ}@kNP!3MAS|}  %͐?+j@Od@ot%Y!L8v,ha+IH0=z Q('X;*od 3 YmU1ׯd; |1ق 1?91>|3jrdOhJkP ؍ػldam"?HqPݍ_T2!awZ[̄gQ]ֵ`DGݸ'Y잤ɡHxgeR*cg@i:˂'cX` 'a ϫSuti#MޟkZ[,UvqHҐ$'4rMM ~Siȍ}:W)GNuV{_*!,-zu7OZ!&NRTk5ω|T3.`mp%ߕupjՌ)+)=M]VmkMw= "npәiT#bxu4_u<70YCX!E٬B -5CɥZVW<6E82^פWyYo8ᔍt5z&W𬮫6ijW'4!6ݹ 6[Rg+9Yx&B'N.dȄ>1)Ws0 ҏ\AN2*BoDMzO{RvsrYʎ-h]_zJcU'Q FbQ |.wq.=To .a@l:y Wh {R /+Cq|-C-5"Vo-᧳3GmD7f@]pXN;0PކY.f5Aꥉd4 /:U{Mx1ay%) +'բePbs3wE1G񋤜"(:Nu>+ٹC_z:Q[)5ϤGjX{9} *نʠ~# /) _jr$AU0%L̼!Ro7Ĕ:^) R= ~"L뺸I%O^ȫZ? ]BV٪jMiJVЮ7Q݃I~5hp6@66[:;H&&:},ɸ : A6o14`.+;:׿}q ӥ2 ?Lam ut_܄s7pt$Us1OI-_2;vZ%b ͼvֵhn}U;j̿*Yޤzne)Ώ 8پ+^4'}TS38B+=TKMb?E ˎo:IYNsR,?r(\/GShQFT v89POȝT J@+A^mPsxCZf+~LH-)bޝ:Od/!,_\w3@+:P/W%(yIa›}[]ˬyT  0J"\j/"tϘWm^Cy?Hru_7SϷuDc͋߸%P7'STipť^E/?^ؤ.~T6 aliq]o`7ՏY%ECyxz6Q_]N 5(Tt)]ٞ-ȓŪ>~'hP-JRtO sD*:*4+}N|yBd6+Y,LY>*ؗFvAd;FyfaTdaWCrrބ2/ّRh)BM<hJq2$߂`i͋,|ŴRͩ`aߚm2b⴫OJ9kh  Rq0jƾEgQC\a%džH_/]zf#v'6eIj3ߌJl M~Z"s0#ubWx($5hN,z% $"<[L!X|SLUSl񞂮{ڧWԞ3K;C3~fFT3n{TaXdsKTbΘK)?F+F61ѢS=LzNͼ@:/I-X=6;2A&Dq.@Nl-=(rv( [\ 6oIIɣ UiRM{ pv |5˵FA7JwJ/I\!blFD'JnKK+ d+_uo1 %c&D䬍1]!eKδ*3,Ncf_DYiKPA?@/6d`Nʬ3C*Ui3 3}'x \V"Tb| й<&MV L^?7o9 ?ω1@2Qy fSsyŀua"TXu HR"J_ uA|oS/ Of7$)s3H|˻FiI/f7"|pO)N\| TgeZ|촩kgbwZ],G8Ґ*3jA.'qI^DofQƅkܚ_r&Z\ҷNG`, #T+cq \[Bi;_Go/fEr܄r~Ml;-U4蜾9ڂ~:ɪ>)J|nh~<됤9WAeOzRp}aPMʲleSG^F96U,iUz-a(C!o?{M2O!<闧oy }~gY;{!o0Μ!-@kަ(JD@'x[QO)/$ v|I\ji0x(ɄD|I!{4aD슘MSVT? J(hd?l{Sݷ^#Gt\HsNE-?+ S3Ի+cZko֣ۏgq&iGǁak<Q y!0_|WB[BzKdqSk @擶DO@W(ޛw`+r63>u9tʻ.wI)eǠ 7d |RZy`wE2ꆑb"|v'9 ,F;%&|SbB2=y'r45nk Qxn+F}0.htth9%%q}+4Rx󫥟b䈝8VȲrܩˊV'.>F,R [Cd;gr%t,Pyܘxq be G%'9~j@`ϮdoX98|8 ˽]jE+>[=g4H L>C@3E#H'rW?dz;_!.m6j}ĘOݑMI@ dTg7vzl+@-BlSt9t6a/v CkXnZ8ʡ&kfuk&HV?].Ùx=A#8 ;lȁ M`~?ٵ'5PPZUM!ݍ (!vM9z댽' ƨ4\eLG⻋ j} J]JhF iֲbX_.Dc" \ʚS!<lJ}L툺 = 4) D(+/$UAgPe!Ro )$a). QSvbgIx 7]h1 5j )O9z8;Pg 7fRgɤ2$Ejs޾5,: $Y%!=.F9pPs R)AY 260Nom -):ʒbGB*S@S`X;Gا酳e+N+Z'uȥY+}t^?jM%mn #~v/Tv.*lFC⛑{/v䅫G~g[7:ϠTGUf״<icRthXU LGWǙK'ĬWWCAY_yBSCmTݫµ1@:`F5g|{4g ;O"]!hHt_9 haqBp~#K֭@&zپCn{Ra+wr?{%-̂mFy8? .jͅ yxf1"hO HHhtX!f%O9_6O{ŵeDr( s&&|4֠[(li[YV:st$>sJoVC4 %wf>^npm{U6P{J*%5 i?O01)ݐwz&^@35,uE=JA0 ng.7vkt6iO YZ