From 495f643cccfb65a3bf37b9f724805e4fa03aea28 Mon Sep 17 00:00:00 2001 From: lxpzlm Date: Wed, 25 May 2022 10:14:56 +0800 Subject: [PATCH] update to subversion-1.10.2-5.module+el8.6.0+15157+188c9801 Signed-off-by: lxpzlm --- download | 1 + subversion-1.10.2-CVE-2022-24070.patch | 41 +++++++++++++++++++++++++ subversion-1.10.2.tar.bz2 | Bin 8369762 -> 0 bytes subversion.spec | 8 ++++- 4 files changed, 49 insertions(+), 1 deletion(-) create mode 100644 download create mode 100644 subversion-1.10.2-CVE-2022-24070.patch delete mode 100644 subversion-1.10.2.tar.bz2 diff --git a/download b/download new file mode 100644 index 0000000..44642fb --- /dev/null +++ b/download @@ -0,0 +1 @@ +e05fb3b25b1599b395ecc36d5ef1a145 subversion-1.10.2.tar.bz2 diff --git a/subversion-1.10.2-CVE-2022-24070.patch b/subversion-1.10.2-CVE-2022-24070.patch new file mode 100644 index 0000000..0d29883 --- /dev/null +++ b/subversion-1.10.2-CVE-2022-24070.patch @@ -0,0 +1,41 @@ +--- subversion-1.10.2/subversion/libsvn_repos/authz.c ++++ subversion-1.10.2/subversion/libsvn_repos/authz.c +@@ -130,6 +130,30 @@ + static svn_object_pool__t *filtered_pool = NULL; + static svn_atomic_t authz_pool_initialized = FALSE; + ++/* ++ * Ensure that we will initialize authz again if the pool which ++ * our authz caches depend on is cleared. ++ * ++ * HTTPD may run pre/post config hooks multiple times and clear ++ * its global configuration pool which our authz pools depend on. ++ * This happens in a non-threaded context during HTTPD's intialization ++ * and HTTPD's main loop, so it is safe to reset static variables here. ++ * (And any applications which cleared this pool while SVN threads ++ * were running would crash no matter what.) ++ * ++ * See issue #4880, "Use-after-free of object-pools in ++ * subversion/libsvn_repos/authz.c when used as httpd module" ++ */ ++static apr_status_t ++deinit_authz(void *data) ++{ ++ /* The two object pools run their own cleanup handlers. */ ++ authz_pool = NULL; ++ filtered_pool = NULL; ++ authz_pool_initialized = FALSE; ++ return APR_SUCCESS; ++} ++ + /* Implements svn_atomic__err_init_func_t. */ + static svn_error_t * + synchronized_authz_initialize(void *baton, apr_pool_t *pool) +@@ -143,6 +167,7 @@ + SVN_ERR(svn_object_pool__create(&authz_pool, multi_threaded, pool)); + SVN_ERR(svn_object_pool__create(&filtered_pool, multi_threaded, pool)); + ++ apr_pool_cleanup_register(pool, NULL, deinit_authz, apr_pool_cleanup_null); + return SVN_NO_ERROR; + } + diff --git a/subversion-1.10.2.tar.bz2 b/subversion-1.10.2.tar.bz2 deleted file mode 100644 index 276e5541928882864d5351edf45d7ff3ce14dbd1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8369762 zcmaHSMOYkM&-M)NR;;*N(c(V1yF+n`OL2FnxVt+Pceg@ucXt`wVUYiM7vJ{JA~~Cr z>(0r^Cb=W3Yst$dqC=ym^M_A27>?%j^ZzUUpZ=c*WbN*M=dL&J73$b8^qRL>^6Vj- z`Q9;47Up#5N_L&Gu1_uHBu_oJd3IXfzQ;8y3;G0|sNT(90D!XKJm%xcUeN_OchKq{ zV87yW7yCeA;J!}m<-J1OsJmM43Z`0$`E_!Qdrf~{j@&! zr-wfp3EEA)8 z;cYLdtd!II%L`tC^K$-ju={Bnc1y^i=c#*>1*8et0q{XZBqHE|=sL1kx~HfBr34k_ zl_k8JZC)qwCCbtWrFAF1kLYAcTO+b^rJ+D1)#?~N0N^`NRtVB6bdJeTQ5sMfRTv4& z0Z{&`4FBhx`0wUiaRmo}0B(f>`&@&+F&-5mxttEVr+v{7G~cs3Mpq!#0w~}r%L$N{ ze(JDONxKwgwfee@b08EwEwg_H^Z}qttYOT09cx^jyncTvi-oN^Ua0?-CxVt^& zTqO}RWLmcxU3s?{&(ph4yU%O*Y+JOicU^Q_Ggm$?DvwHFzDNEkgUFE4k{s`RGszvHI5Y_-G(L?Ra=)*XcdKb%Ene zP^3i&zrNXoYSlgBtY@w{G1X1jEi)Hd4ZrSl*C|4+R#WLK20wmMR@K^_=2?(+-*OF6)oO>99>pOno=3qe#i#7^t4`l< z+rD@1%lcDpd;n4q0I2I;V|Pj2I$!3X`1)u)yN=$;;b04~duS$Gx=M1l>#zeGOg0Oy zwF)}Udh1#%f;&6f9WNK`wpI-PG*SuL)4zJ(I>l^j=fCpmZa6McXgeIwvfVCgw30DhgWW&&Du24EKe)X+7O zpaZIa0rZ{3Pr-xzhc%u0W9zjH9O;P`>Q{M!Frh#)U^Qeqbupa*%-nZAX`G^B?#t4? zt+TBR&p)-pZQO9h5Q;?&QX*--{L=z18s6$A>;nLZ>8QP{20?c2_MKZyS0t(FRl4n~ z23>o|S3M9PK!GR-S?D3a+fKcrWr<@Rd^zi>YdmVVw3yY#-yMemD6G)%JvP(?WcCr- zGwRhtl69WLSa3W&O8UGa+s*Al54jE3fL}qPg*7;Lu){ZIperLBCF>iwxDzd>N zoQ+-b433StadSv`_tZVZlA7KXR8Iilq4>3@@Q*p**YwHg6LTky6Xyx7y;-PX3%(#$t@&X-S5wd}6Y z?96Sa%CI>F)*R<$;qTb5KR0gezVhsJhYL!HvdscE0-&0GH}3(!ZES=`4x#XWNiDv_ z#Dc`YR@b8$^ezikOTbkth#?X-{b4R!a{bEr%9m@awSDP@Z~T0~1K?%GBCy`fSzefc zY9Bel-`1#Y-}7?(Up8m&^|)*dEdc14vc+8&rCS$j$**4}gnE2qGtM^}t{NK_yEfFM zY#{-BumE@k0DvTLhR@Ra+qosswK4#}dyd4v^2(j%T}j-q-+1b_G%*kdQr_B06Fl#M zlx!1TbegwvLd`CmH6s($H#LH%lMVuqsGR=P`&Rtq0uka#o`F+u0X2@|703KP?1I)y z+*i9MIhNMexunepR-3OnM_RhqlL42@vXD66r)kNXelqWL{!Q;m$I1cQM|T|9`banT zj*F=)w?8>&XR>O#MuDkCCdEvwcLQfuuIpQZN41^NumFHnAs~PZ27my70U#!U0AxT` z1;i6;tAtERKoLQPk|j+kSExX4Cf&VN`DjCKkqJr>fmdl3)xA`5-)s@p{VZ30@(fuB z1}K0gvNZDxW<`2gVJ<<^qOiPZu9CV(W`>}W+JaxXpx78YeLgC{68OJl|DOQ!rKzYe zLI5!|>6sZ7ryPrdA+wcsN$L;6>Ypk~sA|@p3W5sd|K3&32&v{5ZsXJz2$i8h08|1? zO8|i5|GXe_Bwz&o2b_bz5{L?Ai64U>LmQzs<`<&2mYGHQRf$s7su`MW60tNaSS0`d zF8yc46Mz5^49si+t9-NwE6kX2p;bXCL3+g@X=$d}zoa>jko$S@H3ix;);Vi0#0aY* z%7xK0j(@ZHmh+S#I7yC7wu*xo0<#$k@gTLK8N_&)dzg8U6)R1|1IIiRTqceBJCc`Q zX@;7$SBzlsgVI>0S8j%6n3%{JT)_WO5C8!G#qyt0d)@w2X+3yP2IS(ze2llhZJ*e@ zsIkB9g?;AWJzc(67+yESjZGhJF2B3nq}GBNY!z4&x~O0hG8kJ4{D7Q3W!b1g9}FDLPn&s* z*6kaghuF`!Z^GvAHp1Ed0pZUcr=DcRGbDj0H__b`B6%gSGqzd7QUG}s%J$|+H~tzhc; z#3J_WewM7_dTdRcje##inuz5(M#Oe8NqmW_cIFqe)e<=6Q%i~VQ|IL0%`el9S1}Sa zp6x_=LDcG>TTB70(#S9g5d%ng^v|CKc0=+&^$Ic^U_!iT`ai1hNASriT&OC-Ke{ct zh0k{Y4g*5qeo+1ofabpdECi}NH@aq6RS5tTNQ6oU`zsFCH%F&{U`Y3?vY#Q*y(hE0 zR-*yu>_hE^8|m}iUhn|zZE-*tKwLMFf{+0{hap1d3TsR4YO(^7aBl_(jp(rqTr|7a;d^H zXNc$X=gOeSo8?Yg74aD<0VT;9=7^jQboG=r{qVwoMye>>OL{?m+JPcuC~ByvwdyLL zz=iHeYFzCfJ!{w<8V^?6m_7EbWG-cQsO=Zd{RmA~U0%rdr1EDCZzz`jSlM#*PypkH zn$86vp!0V7RxON|CU9WqbY?L79?$kX953yoCO5NE6hQ1*c~ zlqKWbcJ48+_x5d58E___1#kq~TsZz72Xsrs>XE}q3#w96R>AddC{y;Nl2tczMtggx zLay)lB=^dhD#tl}pep3h3;Lz2EqK|m$PYzWN|=69OsS{{CAlw8o??VLuWN!+b17gHazOMYQ7B7Dal<$aofBRQT!y z0#S|LlaM%IZ`7X3)%%>*zueE;yb)#*h5OxrNJR+mR|aRBl%}jXFnexGQUXQQKcU6y z==<+A!L_&;jlLF`ZJG2qMP_9$!e#HnD8=jZXyUixt6UTb(sbB87pKDE*ZyH|2DJ8Z zn5aU%_AJC0YWMLx8ln)JElS4lUq;LvT;}A_g#*;2>+s3caeIcpGrSLk6VmmpgE;O) zvLmD=PA{3V^=txmS%P2THXZ|cl@>-%ZsR7xCiqz^+UHO47SpE~^v1dKu@g8ImSZhu;nid*Kt!{TW$A(h?CSadvQyd>SQI{M|> z*=#M)g^jCRruZq|DYB&bXFhc|dfTIK19eFBm`zIU&)>1bWAihOZwssK4irrDu!l%_4BhVhvVWd;*+U-idzKUR>i{@ok?-s`aW;f zRtgWTPcwuy5bRYZPAx3-8PSrlC^ZY_QGv@hr1BrB4?cuFE)Un`FXQk#!Or%Ap{sZ7 zt`agzRzr9AuhJ01DDtE}E~M9&F)aJz#b!}U`sTQ)&8QJ_v=Wa`2>dz+$?_ughRlV1ce))z0dXwWcNmbF-wQq!&(zfzgOkQHG@6pQOnQc{Q;!TiQ$)FXeQOeStq zkKPDWlt+$VCH1Fuu^|zQ+Dk`li>}C@PyihjWhN%s9=(X`ftMMf+ zOY3%3;l*$jtW7RzIw!|$D#sAQELJL0^5Eot?4f;SA;4#9u>x4`FD?;ntm~_Ni@kCP zYx+g=L8xsBW3ks=ELq67OKKXV=T&mJsqQxbzk~VU=PsA&)Hqd6$R}4J6B<1{ehwYE?Px`|4_=h) z^TMiW{AxemB2L-E)W(u4qJXV)~+w;l$QrYqiZr)X-5uvek0P z&fBA}X^4(vA)H_C{-`%aYoZ`hFx?5fTP%b2znF}|aglVZ=J3!AUXI@35!m6@VF-J# zsT-LN-r+kzT}yTOXWX{u`rbxaAEMqf7vcvAaYAhm7lI4!7SEk-J@Mo|b{}uH;J-`k zR~i^Bw$QO7&kI9eMgy9lki5@I_+o||h zpTB;59cqh1elj3Kd;uog2ZUz^zNr1>w%(#vvJaZ%J3fi6V!DWTgIhgY&4qBvK&tUmTbCO^veh+nQLq`S_^y-|a6cJ=PrkHK+m_ceE(liVT7h+zm1512@07dK^q- z32*FsoQx)H^4g+f_(-~Ad{;UzBki*rKy z3mG}Vhk@gtYg}?|%Qbv;fQSez5I)@810?oMoBA8N-i>LQw!}?cYQe(ywzA#gW52uI z8vf=j+QoDA1xPlTFzF72Ti0+}ztgg4cJv{MR>HWz^$~;)mC-fC#1=pWw;+(gqX~{l zq3h%E$o&2~2{j(h8ut%<@S^VY6Rj>D@#j|g@k%GVCniMsu8tMscXe<(XMZ+7dh%$@ zm66V-WAC4)!IKmsqD+S6@q4_-#qvyEV6Tp3`rb58S1) zyhi<+-!Wy#xAE2Z@RqTif}Y#ylhwZ zZe+g9nuH`YPz1MJQ~=+;rJB%oH)qRGE61d-beb5BEcp1_7Bu~3u?G(sU@W0zCjzi8FxE&F<4r`vm#Zd!_f;XP;M_oRk z9$(CA-rk@S+w!{QGgVrhNeMS5O)vd7B2a4Ug^}^8+ZHa zTkoOZg}F~vYC<7Z?!`9I9bJMrzB6f2dJYs)fkH^Iu*OYT-H!BwV)A~G#BAlpuoa9P zt9SwqYXn8Rp%Q7S)#=IqA&hv1FZ5a3;R|A(0z}7uAyWP;JGy_DMFA^~ccdJQNw+#7 z*`Fl4cTBuKJEd)LVY_H~1t!SdSI2~56>a?G;u}_0i#Yrna-S9=uAlhB+U-)b)1#=e z;+MuUP(uBdkn-xQQL`(qI^J&>d^KulsNMXh<6uE@ll;c}qY5Y(*-OY8ZMYlvHpW?C zbNlXU9*Lm)DD(qGwoCP%Y|&sV3M)qdN^~a@^UT3$_DJZZiwQ6BIS+;vexnLexo8pB z&Q#W~l+F z{n*%0T!$_n=MZr`5m}hXey^FC71Eam{OpHaORV6#C?l~lxP@^~9gtw|cXc#8{oN7e zAXK6px|=^#EV>_?nbQ?zS>Q0oD^79*=}W3G9f}d*PZN{cjD44(${So2ZxB~IlG2gnXR~n)jDQJu33I9#IiOQ-L4^o`mJ<%7-yWH05WTd<#`obN&w6G%s zlc+>wA_n+^>Ma^4S@sBsyB@`WionoD1PYN5HBNbUt$U&y3e%v+wOW`hmd*tkrwOr; z>ZFJ1kM>K@C=r_{XhJ0y zEqT8rAew*5S|C0@2&v>8PEq3ghX(hzo%W-R*x5=PihQ2GZF;lm?>05*>7_p(SIB{( zt34+Og0lCT=eC%U@{8^TqmSxj zUTlsmR2WyQzNpCX0j;+-G_Z8aRWTc5mZV%vBh;ZL)&(F1A)%edBK&qbrG+%0C$#7= zrddBtg(t%Bu%LKC5$Hsul(i;TYnu1y{KOV^a;mPX7eW;@_B^X49_I2UhT~MdxSy=K zRcmPLC5PB)BEG5-uxC*b62@~srU^9MjIJ*(_xx?m-A$nzbVDe9N-c~}5;DXUvv!P9 zriCWh@eK_c1~q2ZsPzhb?=rE!Tt+H9n!`J0|4|#u+?sfz+rTKw5t6#gzL;8-oswFv z+=c@$Fy4IGRWd|I&41vSiHfz~Fm)YqEbf|%dHUcaJXxC;9)^GC{B2l*_~rz~)A?yt z1g2K2b0H`~oRsrV>2y)eWW?^Jvi-gRiL%epKLL~16o%rQ;X@ON&>h-bnRaznMI%;o z(EvTnI}E ziUCpeW~CqSQZPd+hs|24Ydh>7K{A|piGvuN#W;o|GaPsM0TWmO43!{k`N*28Z63;V z^hVWvY&_?8Y9T!7XsZ`+UWDH-5m-|F*C-gQEX0tI%NYYzD~2207RIdH?ckVgUOuq_ z+qc17u1yG|=}T8G-IVw|n&Bq(6)r2_oGLWH1jSDOcqaoi@ir$r+BSf6{pQ zv48&R69Oh{sH5_*9Vu?}XvN?c7xCjTVX7Ol2%~gWs$Qq2 zIw@HZqHk|qSO48|#+PUk63pX>rY%1I)_<88!a52)zJYnK4RU_eI|G|p(u+MovU-1y zwz31?^ zWa4?iLE%5@$PoRXc_ZCskRf}$?l?Lvk)D7q{-J5kcFM-Mv4|yxh6DQ8;wwvq zXjd*pS5m$s(KXfg5B&r{E!(a*9@WBFnVV%EvNpZ*t`Ri<;#4%w7s=_CTC&05=~Xnj zDc-hrS)f_Uz5md=@6VJJUAFX)P>sMAcb{<9>=eSTh`ZbIW$C)KBJ~3k;84s`w)F-H z39r^LMdv7ne!KcHJ$J3>oRIFl7PFEZCpcbqsL@nr6e3$hUFX&V;_ zN=FYefi?`Wt66U2pikd;qCp&lOYnsCek~me?-|4*`be)N+%CtsafZX=l&HaLZvWE} zRg6dn6e}jeuapDLy&K%oPx!?Cux9dSCpT`4h2xr_OYm_tMC-A7=+jtuyB~*T`n!Lg^$BI8el>AKyTl+48hr_P9@b-e*UN_QkYYpg z%hiRC#1JfSeY5jRwQs?^$ zvfJZ=76$BDApuw8LD!hfr!xZ-%no%+ z`I-J!rXLAp7|O}%AE!V6n5MBBu}_nV)zA}atzVmF8U#4Q?m$z}gW$?ebN&)7vVane zoLZxP-ulv_2>oUY|JC4-iy?C2q?1(VemuXN++<+?Rf#jawX7(TYqFQ{ZpWwlJo60P zi1x-Ki~Vu=eM1ip59cQMc*=<9k#UP%xL}-`g@G%x?F-Gl1~$MlT-&IFOw3yFVuOMR zE_Csi@`2=IceBZ!^7Dz!7Q~=Ys>c55{{Bz`qicV2BcuL8v}SHnI3O^mv+lx%;N`o#1TOLUx||REk?$oKeK=3kSy1qOl?PLL z!G;e#7TCIMAkBgx&@w|XlI^Bc#l04|5;S#QITTK8Pl+Xj9aiI@E|F*=o2ziS-zgdU z>UiEW|5M0@p0@@{qE$>k1oJYSjhH#k8aWaQxH zg!%*`FFs4f5+oTygzbxC>45CPq-1MWo)YP(_;r?R60NJM3^*^iP@{DH;4UTmwG1+1 zoz@t2*S2n5J?5xGPaBV`5y>QWRFOqi9VRH-DC)W?pCg@JbusUc=)Eq7wt&UnXuuf! zim+4eCG>oZuKRyaW2ziOrff2pfXPot1pH46kM;;bH8rRbiSl|5!JV)4+hn?UL(Y z6X_lagd;zCimjdIx0R5%?U8lcK~i7sA;ehaDNi-%0&-S6_|Y$D|M7#a@8Ad1M>hY) zRQezYHuE#BLn%$a!U<~0lmLXJw-oJwgWAsH=AY(^Hx`s^{H~7@ZC`HEHFjAt$M&HL zxc$rWFi-9e02hO!Y-28axsRtpRIh(_*{^=R#^PGX@yC1rWNe~rK=*!5X6BC|2F`61 z!T`0H!h5+yXr`PNmUY!IwDA*4zg&P=V&lxbSNrkdhRT(O!l=+~MB)WnEw(^h$@U&- zx3Cmf?kA7zGBEH98zf9bzx(>3)cu}{)jY1mBG4ob$S!_l?ElUp5J(TGJBJm%h!2Rz z7Mibw{+lg~NM(DEAw#Z=t>rA?(P)VFnI`CkB}A%y@Z@gOx|4&I^+{t0=d~_e)-WBo z=X4K%NHM%BzwBL3(a}?PZ4Q!#**-j5!@^3Mj3-J8R_&{kaNXJXtXO!LnV|5 zpibxneY|*K<0>NIsY~yF>`%?+bragFT$^HGiAHo5#-387Pj8FAN<-}d@@N&ncMO3hGtbc&Kl-M6#$39M*q9Q zkd`8&LXpo3+o)z}dnkFd$nDH;%#&R?i$Z^Pjf6-u8*P$~c)e!RJ;9BUDN|1r+>mlE z`pye#1e~urvJ}$VPys#V?=W&RO_Fl<_8<^1k&e|-|+MOTIY?yKx zf@S)ceR&A^rCqV~0zQ%P*@bqiZA2-Wp}lpU{;IaWoa~{21Z(5Bez>H69OnI5d!5dB zx?1>qFX!b(FYLM(8I@`3bV>c+N#e<$tV@} zn-{&jGwFpP3@yKB?VJJ`na0tAjuf>MroVU@CM18j6c6zJEd{7bT{QJGN@Q1eo@5E) z=FpnY)@zQNb~85da$0X(Kyi4uvM!4>xCxFrM)+t%k|pqthU8a@5u$jFb#?0Q;FDz< z)FCn>s(gPwbx5PN?Ng*w^Lvsy8i85muq(R%aDUSMMYN9O;?BWiWCmFT_e2`f_^m$X zzOuCH>9ERHvQXJM4*-h`e;FsraCl!|ogoDUfVq;15WG{Wa}p!W8mJQajUT@kq4FNY zwNI2koeenP_kDYmn4R@e3B*gVacuCHPYl`>Md~U`l;jZ`3*k@qVdKQ!);Vq1x(sKS zgbwev-50yvE9`?_Ks65)I*178&;L3hAk=#8)D=qbTie z$-T24(k3orlWvB ztl#FxLuCXV31^tiR{kVcd7uM;QJe^7Eq&Ma?QtqtT9r2NnMMHjF92_zNB%PMICfgx zjSYGKJ^jO1q<}9kN?;{9Lm8CS_cEwu-Sl#_cR$onNtR)|& z(R346CqZpkRn<*58&ee93!QWN4X@{-XS7-!Ngs!ii#j6mX{H`xJrQ@{l8OH?n(Lso zdn;`D-{2kT*Qa5v8f0^|F)?)&yie9%G_#EU+l|2F&KIUfplY@zm&h-bp6s$xV5Ynd zha8Zwgb|3KzRon`%f1P^etsuxBw8eU9{iHx%v!nsgudW<|I#kv@s>Ndnzc47H+351 z;F|+KeogE??D8~a>uJ0ggwsJg$*m|hDKcyVviu5tot?SD%PY65>& zL532so9LM?Kdd!xgGrv%imW-!P9I-za^?ghiS}g^zEubzuvMJ;$at)>OV!-bpv!G? zFs}*^Wt%fLx&Y(U3y#g=*j9=qQK@+5PETyF-uz_vpKU;-5wegZ>#+(qN||NcyaeX0 z=!T67Dpohh*;LSPlfF_$3*zdUf-#99&!ZPC4pT=|;b9y|mN0|Rki(xw?|B221`Eok z;CtvJ1s0fa^`PNS8)LE%Piz0JOgcR7Rj}gC7VVjxoX*-P{qmdg1muj^@9|t~yB!^_5L-nNVLIzA<*Y@42Ru%!E$uDbhZUC}oOu4qiyiJUZnjib!9 zzyAQE**@F&MuNz*d+yc=YX;7CK8{J1wo@6iX#pW=Pa7+k+Pna`Rrb8ymUY3u<=h4= zmU9Z|!-e?~G;5gGC*!$QEx{P*`Ig?FzyVtE!cFW^HH(qUv!4Sk2?6+!x@hE_(_VR! z3>Zpa*vop^_$%=RS0vd)5U7@Z?xJ?4wjGMP>9`}@etF--2R?G#zLFVMVnOSBxN8fn zEL8vr!a+X~Y`^z_vOlf+a32=JwEUwHi6M8{tm7sW=4-6X_{B%@S&ZX?lM^HCeox ze{d9TI?5m`%{BK`SRs2!)t{_OH$g23A_*mu^B&S zpDa>a*zeNe?a#rB75{B7tOio=>Kx}Zj2{o3PBNRsFBpcBn}sIEV3E8hS!IfUm!E`^ zl(P#E)lAZ8)P{qaA#@pj{4N(*H)=yq&hs_1M(%)*1|f&-HhV0uK-y675is!IO!$hR zgI_bGW=*;5$1{h|l}a9A*~I9xHZe*;+=jUE;t(pEVUgN%jV-ZZ+atX;2%;@N#2g}$ zkYjq?O2lxR59RAhYC<+3!tdAt=18qqiyT`9b>p@$2z!wiAa0ZK-B$Ek5QSqBK2Ny( zerNKcvHS~+qK6HLvwFdJS(dm@@VF5eU!zQ%&PGLQc$0frzG7K3?C2$UKfGrSZ(v!| zA8!ku>HR5q0I@oim6c9|VN{WbB9|D)R$hY@$)|@ZBH&+C7TEIJS?-133fw+V_M-4A zAcKhG_$r2}FxEx2)fW7uw+<1+89md>kt$9}Z?7yJ;G$fE+G04@52Y1pE8vFz{x^^h zT}D&|65ft7X<|zK5p5GSP@@y$%u;IGXqsxLNeTn!Q9ZM0SL5qFG(K3{m=WOO?NSP( zz99+%t#gGh1sYl_n6xO(_=)pL7;&|4g-YJ-33~&tZ zzJ*%Q2I5KtNkBnIJW-Je(dkD$izku|&XHl$P9`h^1uzuI%VsrF$SpBpz}!BM@VW5I z#C3j6P(AWUn@)2iwSQ%9A9t+q?)MODduNT-%@a5R-W>k*_ZiyoV@Y3hM0lxQwdFEc`bUvc zuUTTa8V{21L)?MZs{y?3PY;hW>qXNqxGeb@7iF3 z@X}}|DdBHbHu&EP6O3oP#`7Ebp%&Y%wu7j0S#I+cjK!bcWnrK}cbF`kG`tM)TvB%u zUi-=LA=nMP@;l*pZ9uXH#w2MqT6tx3l5Z@`>{rd>n?8a9#PmhXyStE(8~^3E&2-0J$-IF~hevoPb?S`aV4(B5|NIUBOq zWW{6M>iscVI&&Wrdke3_m+iAfPF}izyDKoEubJ>1meDfJjWMjHsUd^R{e6N|YJW|t zOX5_3U!3jjp9x|1{;Tj$gL$-4q=$DsBN23EH7KacRj<=&~?~qYNDa^A%JlE`DVUIt7x8xG>;WY7OTw&HPyyEfu3l z2`ZG?K6mEa-Y%3~5 zmWc23+$$A;z(JXt=Ph~=i8(Z7YWlq<6n0Dr_P7mM>c^UpaOc`LPSskG;r}cpe008= z&UdI;%hluVE%>mrM~y@QE=62Lt{W$LJ{T-RWsB#Q>E-bqmfWOeyRZv&X75BRql{s} zQ=VM~dPMGztGImSmA2#w<)nLp?D4?2wPCZpU9D_#s)5mdvR|!qSDL#fw*k3~1QIR> zK7?0ZJG%|ZeEgmdAD#EJX07H%(1_WGvX@A~ zS4b?b8YC1S;QeoX?A9+g^UYvEbm)v*%?X2tFkI_fJQvuR+@*bQcd~z@b+EmWDhN$K z!Ku!*Ge_}_@44pU#5I~&4dg&}qbED@&7Doh=uSRsWrN=G&0)m>AHLe|;4FB>4hk{D)#5ztphn%_bjP^59)iJw=tcTQ+WhK(h7eNdlee7Qbp`!^B8?CsOkZ&2w|$ZHHfA0O zD@;2-|K5^!pmcWog(obY^wPh--9_4V8CxJvG1adGPDSZ;28|9HJN{Gb^KSgp*&VX| z{7$-mvWutoEWGro_8yHvMB6X?JMaFpvlA}A9fP$xiv}}1^mo_e4hIUzC{DL zzI+Tpzq6Rs3ZMB0zX;cVxNrO&jrffGq{w>^W``I&bq2IY3vcv&ZhcxE3eViWSqy$c zKe@0p#D84f`_+s_??xObz2-fic$t0>!75`5XJJWLbl$FVK^7O^&V!$h!6*LB{{FA= z-@_kcl$ue6ogzuk{;Jt3D{cSop^T8m#1{_ z0BX*za*ypEY1e>-#78J>vuA z;}ZYH2eqS;HbNY2)C6&64!dcND5MbsyPO^Y-wKHmQ=Fj65< z4<9EXgsd7S1l?vlNTLQ_GJ|*2Uwblky}M#91dpbt7jLCd0pAYbNOeW zM)P2ABEpn&?)Hok<+mA2QIxmUm8Ym1c=W-Lq(^#0_S%9Euyx*k_>S)r#Y>F?p{pbO zd^iITdypc4vDgee;v1k|znoOxFC%DRyGexv=ot}%e^FVAYdH5q)7cx>ADZhX^lO-g z6Q>W?_5tXTK=dd&+s%26o~4a-h}-tr_?*-9_r=2%c#BY1r^0KAyI~PYanv^j4z7#! zUY1)Qr$zMqf07{78k>V{HC=vTnjMPW8Z&DwUr z