freeradius-server-libs-3.0.16-lp150.1.5 >  A Z!/=„>-2ߥN=ͼ^%)8"a5f%R.ALߌ?.I=nCfjt33+zA:4-d;m(]]PU[+W|[̩ۡ[hkȖP0nIs%;bPV Jv?G9F+wz4dEPvT2b冧?B+XBqv:Emyf%L:180fb1a62ab14c09e534ad76d11bedf0931b225396febfaf11df7711423810da148e44ecc8a183502919c6228000d7cb0b8a1cd7`Z!/=„6g'o2k2A(drUԼ3aTnF H N< A4h=2T cLX AI*/o&#~fEt0idJ ~j Bnowڊ5|hḓ6"'uUfR%Wb[0:oN@^^%$\]iT ӐNwjevZ-1={wc"y o͵ h{Յ z@>p>?d  * Dhltx   $ 8 = DXq-(Z8d:9L:: A:FGHIX Y8\`]t^bcdeflu,v@wxy(zHX\bCfreeradius-server-libs3.0.16lp150.1.5FreeRADIUS shared libraryThe FreeRADIUS shared libraries.Z!lamb55=popenSUSE Leap 15.0openSUSEGPL-2.0 and LGPL-2.1https://bugs.opensuse.orgSystem/Librarieshttp://www.freeradius.org/linuxx86_64z(#8AZ!Z!Z!Z!Z!26d2fa595add56845f594daa714779393e62cba1d6f19c608666e03d9263afaa42fec676586f6ecfd541010fcd59e9362824f533170c1e4e9a8eb19f164e1fb7f4bff5810d880670db9f2117bd2233f96c67b5a141494c9c0115521e8d72bb08a187f8629b34e60713879434c07a5b82867a4f4031dbe9e0dc2d2eb407fde18drootrootrootrootrootrootrootrootrootrootfreeradius-server-3.0.16-lp150.1.5.src.rpmfreeradius-server-libsfreeradius-server-libs(x86-64)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)@@@@@@@@@@@@@@@@@    ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1ZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@S$@S;@SR@SuSz@R@R@Re@R].@R(r@QAPiPM@OhONNN|@M۝LLLT@K޺K @K@K8@K*@JI@JJ;}J%@In@michael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.comsfalken@opensuse.orgvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.commardnh@gmx.devcizek@suse.comvcizek@suse.commls@suse.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comjoop.boonen@opensuse.orgvcizek@suse.comvcizek@suse.compuzel@novell.comcrrodriguez@opensuse.orgpuzel@novell.compgajdos@suse.czpuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.comcoolo@novell.compuzel@suse.czcrrodriguez@suse.de- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682- added patch to changelog to fix factory-auto failure (Req #242825) added: freeradius-server-var_run.patch- fixed SUSE spelling in a filename (bnc#889034) * don't install suse/README.SuSE - remove old tarball and signature file- spec run through spec-cleaner - don't install files to /var/run- update to 3.0.3 Many bugfixes Feature improvements * Everything now builds with no warnings from the C compiler, clang static analyzer, or cppcheck. * rlm_ldap now supports defining the LDAP attribute name via backticked expansion (i.e. shell command) in RADIUS <-> LDAP mappings. * rlm_ldap now supports older style generic attributes. * dynamic expansions (e.g. "%{expr:1 + 2}" are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * Static regular expressions (e.g. /a*b/) are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * dynamic expansions are cached after being parsed. They are no longer re-parsed at run-time for every request. * regular expressions are now parsed and cached when the server starts. * Added the %{rest:} expansion to rlm_rest, which will send a GET request to the URL passed as the format string. Any body text will be written to the expansion buffer. * rlm_rest now available as a debian package. * When an 'if' condition statically evaluates to true/false, unlang does more static optimization. For examples, see src/tests/keywords/if-skip * All modules are marked as safe for '-C', which lets the dynamic expansion checks work in more situations. * Added 'none' and 'custom' rlm_rest body types. 'custom' allows sending of arbitrary expanded text and content-type headers. * Added "config" section to Perl. See mods-available/perl * Added '%v' which expands to the server version - Patch from Alan Buxey. * more mis-matched casts are caught in "if" conditions, and descriptive errors are printed. * Support basic response validation in radclient. This allows administrators to write local test cases for their site-specific configurations. * Removed radconf2xml and radmin "show client config" and "show home_server config". * Forbid running with vulnerable versions of OpenSSL. See "allow_vulnerable_openssl" in the "security" subsection of "radiusd.conf" * Catch underlying "heartbleed" problem, so that nothing bad happens even when using a vulnerable version of OpenSSL. * Add locking API for sql_null, linelog, and detail modules, which should improve performance and work around issues on platforms with bad file locking. * Allow DHCP NAKs to be delayed, via setting reply:FreeRADIUS-Response-Delay = 1 * Allow tag and array references anywhere attributes are allowed in "unlang". * many enhancements to radsniff, including output to collectd, ipv6 support and packet loss statistics. * Many dictionary updates (ZTE, Brocade, Motorola). * rlm_yubikey now automatically splits passwords from OTP strings. * The detail file reader is now threaded by default. This should improve performance reading the files. - dropped freeradius-server-CVE-2014-2015.patch (upstream)- fix for CVE-2014-2015 (bnc#864576) * denial of service in rlm_pap hash processing * added freeradius-server-CVE-2014-2015.patch- remove the old 3.0.0 sources- update to 3.0.1 Feature improvements * Add "timeout" to exec, and "ntlm_auth_timeout" to mschap. So that run-away child processes are caught earlier. * Allow TLS clients to use "proto = tls", in which case TLS is required. The shared secret is then set to "radsec". * More documentation in the tls virtual server. * Add "date" module for date formatting. See raddb/mods-available/date. * Added unit test suite for internal server functionality * When loading "update" sections, check if the RHS is a literal value. If so, syntax check it immediately. * Update LDAP module documentation and functionality. The generic attribute can now update lists. * Updated dictionary.extreme. * Update sqlippool to do clears as a separate transaction, and at most once per second. This should help MySQL. * Respect control:Response-Packet-Type for all types of requests. * Add support for SSL encryption to the MySQL driver. * Allow arbitrary connection parameters to be used with the PostgreSQL driver. * Changes to the OpenLDAP schema to fully expose functionality of the new LDAP module. * Update debian packaging to include a freeradius-config package. This package may be provided as a site local package to avoid fighting with the preinstalled config files. Bug fixes * Use correct field for ARP setting in DHCP. * Fix crash on debug condition (#454). * Fix a number of minor issues caught by the clang analyzer. * Set WARNING messages to yellow instead of normal text. * Correct debug colorise logic. Patch from Phil Mayers. * Encode attributes of type "ethernet". No one uses them, but it makes sense. * Work around regex initialization issues. * Fix build when linking against OpenSSL. * Print IDs as positive numbers, which helps for large DHCP XIDs. * Fix issue with sql_ippool. * sqlcounter now uses 64-bit counters, to deal with 4G overflow. * Fix issues with DHCP subsystem. * Don't build / install disabled modules, or their config files. * Fix build for OSX Mavericks, which hid the header files in a magical place. * Fix LEAP buffer issue. You should still avoid LEAP. * Mark "unknown" WiMAX attributes as being WiMAX. * Fix typo in packet decoder for fragmented extended attrs * RPM spec fixes. * Fix rlm_perl build issues when not using threads. * Enable %{Response-Packet-Type} again. * Update configuration file parser to handle "bool" consistently. * Update declarations of global boolean variables to use "bool" consistently. This fixes an issue where some modules were instantiated in "config check" mode and did not work correctly. * Make more messages debug instead of info, to avoid polluting the logs with messages that can't be fixed. * Set operator in internal unlang code to suppress spurious warning messages. * Fix debian packaging. * Added "status" to Debian init script. * Fix "update outer.request" to update the outer request. * Don't print TLS debugging messages when not in debug mode. * Correctly manage counters for "limit" sections of TCP / TLS "listen" sockets. * Fix libldap debug output. * Fix rlm_ldap tls functionality. * Initialise OpenSSL globals early to avoid issues with the PostgreSQL library. * Fix typo in sqlcounter expansion code. Fixes #463 * Overwrite previous instances of SQL-User-Name when adding it to the request. * Work around bugs in both MIT and heimdal versions of krb5_copy_context(), which caused segfaults in multithreaded mode. * Provide meaningful error messages if Heimdal krb5 is used. * Fix attribute supression in rlm_detail. * Exit with error code if child fails to complete server initialisation after forking. This allows init scripts to correctly report whether the server started ok.- don't build with experimental modules - fix packaging bugs: * install init scripts only on <= 11.4 * install systemd unit * add %defattr for submodules- update to 3.0.0 * new feature release * see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release * documentation for upgrading from 2.x is in /etc/raddb/README.rst - drop oracle support (wasn't built anyway) - dropped patches (obsolete): * freeradius-server-2.1.6-codecleanup.patch * freeradius-server-2.1.6-dialup_admin.patch * freeradius-server-2.1.1-edirectory.patch - added systemd service unit * radiusd.service - added systemd-tmpfile for /var/run/radiusd * freeradius-tmpfiles.conf - added gpg-offline verification * freeradius-server.keyring- add libperl_requires, as we link against libperl and thus need a specific version of perl- fixed a bug in the logrotate script (bnc#797292)- files in sites-available/ are now %config(noreplace) [bnc#781756]- update to 2.2.0 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - fixes CVE-2012-3547 (bnc#777834) - dropped freeradius-server-2.1.6-overflow.patch (upstream) - dropped freeradius-server-sha1-default.patch (upstream) - refreshed freeradius-server-fix-cert-bootstrap.patch- Use the new 'su' logrotate option (bnc#677335)- Enable the same CFLAGS as for other hardware- update to 2.1.12 Feature improvements * Updates to dictionary.erx, dictionary.siemens, dictionary.starent, dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol * Added support for PCRE from Phil Mayers * Configurable file permission in rlm_linelog * Added "relaxed" option to rlm_attr_filter. This copies attributes if at least one match occurred. * Added documentation on dynamic clients. See raddb/modules/dynamic_clients. * Added support for elliptical curve cryptography. See ecdh_curve in raddb/eap.conf. * Added support for 802.1X MIBs in checkrad * Added support for %{rand:...}, which generates a uniformly distributed number between 0 and the number you specify. * Created "man" pages for all installed commands, and documented options for all commands. Patch from John Dennis. * Allow radsniff to decode encrypted VSAs and CoA packets. Patch from Bjorn Mork. * Always send Message-Authenticator in radtest. Patch from John Dennis. radclient continues to be more flexible. * Updated Oracle schema and queries * Added SecurID module. See src/modules/rlm_securid/README Bug fixes * Fix memory leak in rlm_detail * Fix "failed to insert event" * Allow virtual servers to be reloaded on HUP. It no longer complains about duplicate virtual servers. * Fix %{string:...} expansion * Fix "server closed socket" loop in radmin * Set ownership of control socket when starting up * Always allow root to connect to control socket, even if "uid" is set. They're root. They can already do anything. * Save all attributes in Access-Accept when proxying inner-tunnel EAP-MSCHAPv2 * Fixes for DHCP relaying. * Check certificate validity when using OCSP. * Updated Oracle "configure" script * Fixed typos in dictionary.alvarion * WARNING on potential proxy loop. * Be more aggressive about clearing old requests from the internal queue * Don't open network sockets when using -C - freeradius-server-snprintf-overflow.patch merged in upstream- fixed interaction with eDirectory (bnc#720620)- update to 2.1.11 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - add freeradius-server-snprintf-overflow.patch - use spec-cleaner- Supress timestamps in binaries, breaks build-compare.- update to 2.1.10 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)- radiusd reload after logrotate [bnc#634445]- update to 2.1.9 (bnc#615699) - bugfix release, for list of changes please see /usr/share/doc/packages/freeradius-server/ChangeLog- add freeradius-server-initscript-pidfile.patch - handle /var/run on tmpfs- specfile cleanup- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore - clean up specfile - remove bind-libs, zlib-devel from BuildRequires - not needed- update to 2.1.8 - for full list of changes, please see /usr/share/doc/packages/freeradius-server/ChangeLog - drop freeradius-server-no-default-case.patch: fixed upstream- update to 2.1.7 - for full list of changes, please see /usr/share/doc/packages/freeradius-server/ChangeLog- freeradius-server-no-default-case.patch (bnc#527742)- freeradius-server-sha1-default.patch (bnc#546042) - freeradius-server-fix-cert-bootstrap.patch (bnc#546041)- disable as-needed for this package as it fails to build with it- updated to 2.1.6 o Feature improvements * radclient exits with 0 on successful (accept / ack), and 1 otherwise (no response / reject) * Added support for %{sql:UPDATE ..}, and insert/delete Patch from Arran Cudbard-Bell * Added sample "do not respond" policy. See raddb/policy.conf and raddb/sites-available/do_not_respond * Cleanups to Suse spec file from Norbert Wegener * New VSAs for Juniper from Bjorn Mork * Include more RFC dictionaries in the default install * More documentation for the WiMAX module * Added "chase_referrals" and "rebind" configuration to rlm_ldap. This helps with Active Directory. See raddb/modules/ldap * Don't load pre/post-proxy if proxying is disabled. * Added %{md5:...}, which returns MD5 hash in hex. * Added configurable "retry_interval" and "poll_interval" for "detail" listeners. * Added "delete_mppe_keys" configuration option to rlm_wimax. Apparently some WiMAX clients misbehave when they see those keys. * Added experimental rlm_ruby from http://github.com/Antti/freeradius-server/tree/master * Add Tunnel attributes to ldap.attrmap * Enable virtual servers to be reloaded on HUP. For now, only the "authorize", "authenticate", etc. processing sections are reloaded. Clients and "listen" sections are NOT reloaded. * Updated "radwatch" script to be more robust. See scripts/radwatch * Added certificate compatibility notes in raddb/certs/README, for compatibility with different operating systems. (i.e. Windows) o Bug fixes * Minor changes to allow building without VQP. * Minor fixes from John Center * Fixed raddebug example * Don't crash when deleting attributes via unlang * Be friendlier to very fast clients * Updated the "detail" listener so that it only polls once, and not many times in a row, leaking memory each time... * Update comparison for Packet-Src-IP-Address (etc.) so that the operators other than '==' work. * Did autoconf magic to work around weird libtool bug * Make rlm_perl keep tags for tagged attributes in more situations * Update UID checking for radmin * Added "include_length" field for TTLS. It's needed for RFC compliance, but not (apparently) for interoperability. - FreeRADIUS 2.1.5 * Release number skipped due to procedural issues. - FreeRADIUS 2.1.4 o Feature improvements * Permit multiple "-e" in radmin. * Add support for originating CoA-Request and Disconnect-Request. See raddb/sites-available/originate-coa. * Added "lifetime" and "max_queries" to raddb/sql.conf. This helps address the problem of hung SQL sockets. * Allow packets to be injected via radmin. See "inject help" in radmin. * Answer VMPS reconfirmation request. Patch from Hermann Lauer. * Sample logrotate script in scripts/logrotate.freeradius * Add configurable poll interval for "detail" listeners * New "raddebug" command. This prints debugging information from a running server. See "man raddebug. * Add "require_message_authenticator" configuration to home_server configuration. This makes the server add Message-Authenticator to all outgoing Access-Request packets. * Added smsotp module, as contributed by Siemens. * Enabled the administration socket in the default install. See raddb/sites-available/control-socket, and "man radmin" * Handle duplicate clients, such as with replicated or load-balanced SQL servers and "readclients = yes" o Bug fixes * Clean up control sockets when they are closed, so that we don't leak memory. * Define SUN_LEN for systems that don't have it. * Correct some boundary conditions in the conditional checker ("if") in "unlang". Bug noted by Arran Cudbard-Bell. * Work around minor building issues in gmake. This should only have affected developers. * Change how we manage unprivileged user/group, so that we do not create control sockets owned by root. * Fixed more minor issues found by Coverity. * Allow raddb/certs/bootstrap to run when there is no "make" command installed. * In radiusd.conf, run_dir depends on the name of the program, and isn't hard-coded to "..../radiusd" * Check for EOF in more places in the "detail" file reader. * Added Freeswitch dictionary. * Chop ethernet frames in VMPS, rather than droppping packets. * Fix EAP-TLS bug. Patch from Arnaud Ebalard * Don't lose string for regex-compares in the "users" file. * Expose more functions in rlm_sql to rlm_sqlippool, which helps on systems where RTLD_GLOBAL is off. * Fix typos in MySQL schemas for ippools. * Remove macro that was causing build issues on some platforms. * Fixed issues with dead home servers. Bug noted by Chris Moules. * Fixed "access after free" with some dynamic clients.- do not ship static moduleslamb55 15241793783.0.16-lp150.1.53.0.16-lp150.1.5freeradiuslibfreeradius-dhcp.solibfreeradius-eap.solibfreeradius-radius.solibfreeradius-server.so/usr/lib64//usr/lib64/freeradius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/1fc44c90a92fb0dc32eac19139b321e5-freeradius-servercpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a40fbaa4c3a4ad7913c071a9dfcb0cc9c12009c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef578f48588cbd8334a4acc6b04686ed3c6121e3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=43b756780a997d64c789bd27dbe9c2836e938fca, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=96635dc84054814e5a8df6cbbb439860b1e89bc1, stripped  PRRRRRPRRRRRPRRRRR RRRRRR R RR R RRPR RRRRRRR RK!g&utf-804938591a56974085ddf8ba23289aa8a7c0f0e1ca1e6cb73cef8174ce5396b60? 7zXZ !t/] crt:bLL ~ƫuz9x%umZD"/Aö&B_lFRcqz/y\sv] um.O.bPDXA T-# Ķ>4QPP{&OhQ|SScEA'VnWnȻјEWwP"uּJ(5xvBIEXČ|#<^ip+V⠹.K~^gٱ!6DmIU z_ Ȏ|[9DX|]1zbO6*5Dx〵釖wc /Om9e~EG;ӘZfCe wDZk99FfRL*Pźu!xJs)#~Q-/h\A n pl9TTW6O͛Bzchl6\"Kv-!%{ kY`*]z?ǭFiN)ڝ+# W 4\9xQg'ʮݤntv%2ǁ -HPqKolƢՅv 1IEd #9l(TR_9̅A2jL`r0>.xZ]B\KzsyM@Ɩ€K?_G^-xD~UML^  _g^eAތ~i+L 0SzpN#t$ؔyag^2-)2$ijdDڏ"cRF/҇} t.߉  1t˜嵒B 5*|A-AV- 8ApQR2Q_{ʯrVv{ߕZ8{Ko*/Hmnji5"d'"𺧄eKs@g(/pY~6Q|Yax-]ӁIGv8 ')dˊ`h# J hه{(c)d#RJv vL72oQλj6~18~S OILLJʘwUBK5_*paBO3}H caeK8v٬ \߆ Ov?ف0D f PCٗ4*ьճˉ<`*5Ӛ~<0 Сr65t 9D5P9' g0 JQPq)׏+APd28&UGf|kvذB^:5alۑrFpn 4?Av:!HkV?p>pSXMMҳ^V7?RvY@h9E}-iu< k?ekl)d%K{5k<D1_&gG_R)W8҈ W`-Mv>g1'xV2i+aG0 ցH(ްo>ͶFwryIG hPa@:T ʼnBG}`cVo> q~ܰ%wxn׺Y*{kjyǏKWp.zZf;AY!d[+ s}Ǽj gT=f׾Sv ?L/Pp8Qڶ컃;o6zU?Bẉ 3%Q3g0e ({OL׋#c iO uS#80/8tN* g|1KƎ&Mj)dxTLSt39^ie5ӽ@btelRa[,D~Q/:)} --kK'wb20#zvFA<;m@Fj͐z{W+urdX#HuUIs@;ЉwQ BzjyvDRr/0pκIS}c/tqbűe]*1Iռ_e >CJό2HW(@yߵY+ \ϟ8A9>~{VDݱŲiWD`5>enqZi \ 5Hf2be*um/ut==hSz20 S.yzk4w2dfj&-oȳ%=a`ܕ Dq~g!*4Yt' E& E^B 84g QHgXqU4/Fn 9c@{x8|g qsG$a~&[ {DIR[nqY?Wܺ^t8c_2k18Dc)Ǫ0?R6Hq_"uif6m1r_LJUn9w4&>uhH26O^Y$Lje +`?6bY Uo1=Aэ^*pva|,ǢTZ-l$ ?x`dJ 1V_íoSG/6ϋ*vJx&1qXɦĉu YB!,TythϜ):MhE1(n[ss.թ#dwi䖧ĺmpb`d4Jz! 5\+_=E$u_sx{JfU+(/!n^g'ޔzD2n<71WodK+`IjY<. E* n->-(9袹1?"#;aLFjpeI1եOpqfi*Ve9 L dzhxŧ2j8wnꂴ7BN /`G:yo$$=OY{AwlUt^/t 7*SY3@j! nOW~!ry1S1? FkIa۰B{r^_N"ϯ8DrQY}E A;FvBH ޥqp&q\"=:0I :rR1mgsJjaB$`1:N=}S3fXCis2ôzOk~c3߀n-vڌ~0]ЅDIlAӢE6M0?πZix`hh la/c$HՓ "#ڦpVVݪ z؟Wjc u8SkLKXAV +rJ}פQX%inMPgRXzYXA =WfTh@:ee0$>~ r"[t0وZ{ lQUN7re_9\vmn@~NgEIBHӁawوEz[W v+WN:CCx7gl$2oO6W?YF{=ɠUl.gC=cԲ=9)zzT^Ȟ{#N};BuTS9bw!s]>~`/FBadUTCWdw° "PqD )_ЪU,[󁇇۞=n(): ![jSk#.X{ñagyy&w.߹*(B %q3$b< Zds9ѫb.Ss} }H@}QZ4UGvzVkΝۙ!6VBjg/mńubEB_UBqu8gœ1\NXxt|l7hUχ(celj6G, p61R%قbxt/ e,VmĩVi,կu*#dFЩdSPRPT&?|6â"{z~fg7enN9k/W TZhOK)&u͝-ܒf2S+]A;=1QXS.U깻Gf׾eQFTŚFO]&7 P$Sovө>[Q˦ѳǚ.!?ϳ\|ɚm'%9ĭQK\q^.Ľ^BM]n&?sD%/gpKeiQ$ -cDuydGw}Rz>۳ [y%pX S7>6N=yV+ZXp@ǦwLS;NyTfŬWcmK$'aARd^{q=oX?Y g>g!&N -IO8-@nmuL]]|r9G)n*A97?CNAEV@߉?sf!%m6 憡޵ ݽa:7o>q5va%C(B\ӫ."?dž-6O&H.uG5iIZA Ark(&b5^t,uZUyQ(;0oL,=AS<̐LUԍ@&eWvU g8,]!Xv5h<vBGKXGD!IwC{.l)+=g̥4`n 'L1@ܮP'Y%n%Q@,{UKl~e9<"%wcW^WcMXekjb_L]`m ǒ6'rOp0_~\,|F<p&o&ʙ-6kd2 hu?CzR;\/0,2i(e4LNZW: A0K}Ȋ0]RPNJwV_~y 0P|3N$I=Xn邭o0|?Lֱ8M}{Ai"\.'EGuȔCZ7t)ēnrw3G0Xv1D܈Q'ď/S Z٪j3DgW+,$H{BI^^yG"T&29ulzBGe~X|C4 ;/{mPgtAeh7o!syM wI) .Vk$~N8dNF?ʃj .D61}1w2^p. -HR e ɷn"e摌yAk?@/Pa~?xvLϵidD%a`M5Z˿#qs2iyBۀL^:S!jE¸ׇO*xL:dvC s;J;ާu$":HA ƔBqC:|pmјjY\F7ͺb|Qd] U`4r`lhDJK s,Ӓ#xQ6,ڊ(T!`x8GaLT Psa{i$]8()@bഈq$"iuھ0T轰f losaJ$FeC$e?t0럦eAGDɃbi4dsh<.z%e Rۮ ,fʠԩM+8o]z>y:\ORb$)OhTYmr5Ui7SF S,?lvu=i}L3zi|]?Lof"ny4*2TqA_5\kco6_,9#/'wqOZ,I2?uX?v%&TѶw\}1"sAKO5i߱ڔTnʪIQq`ŵSoX4 Pɠ"n6S;R(k4?H3i%~Zj;񈿿j& VDm?2eoǰWXD߁}\̢[ [7jiKөgdT_y کH=ttS&@5>{˕=L!Coc3+@-5-7/W,jw9lq5ؙoCs^`*"9I| ScASٳEحnl(.1՚PD_;\pAFP\f:E=!4y-4iNq㕖H1ߛ3Q+5~I֜t?6124d>Vlx|\':$?v"Y}לU3XHf9̤s۝NFT%"#3|w⽂q° crnS|SlĕpdE|byۘN2iBB`9)l넓\Y2 "ğZ O ,G0}PT;9#X'Kا$!=pC)E3%.ljҖR{0:W1ӗ i+$&̏xHvmǦ'1]xNd\ &sj@1;Mw&hgn@7_Ww䆥zJ :EK' .7,2 ?=$'j&{~Pk̖94(9YOh#Bď$hcDA @E>;rl a1>7: M,5ibS Tb p$Ab)e;\I+[vB[). M9Q@[q@L6\Ntg,5NhzLNE4,N;Σ,@eN!)]:=ٳҽBd|36iiFcmEO\)k@ιQƏ= :4^{ 󒛞dEث5.qĶϑR.Ib42UGkW/Gi=ci.~|!T#Ж,>|\j=r#9`?]MGLA.hy9Gy@}"mS0G;z'8R^Pl8* O7;rfL.i~5F3\b’:&3@_4ٔ\2ue݇4w_z'p6Mtw(.vs.C*X^]v-C)ήN|[$IAxQK0/b,WWNjk g^0}t&}IWˑ~!٧8S;|ANJXFR[(O@R"2514>sK. ,^Jœ\[D%ѡ2Z'Fv7+#*' 5 ?]+%SvZGȊXF=lROH[zY JT {=ھ\5*_"}!~̈0j~FRP,#Xc0.ΈlD6&oujˎfx&[Lx*yAS|]'3ޭ_Ν,sQֱ݂Y_4ޒU0_^n>3φsZVJB籢~uW,h=d!&B]$,HGCᘟPɖh8*~)“.ScCi[9nN7lsJ92Ш':UyvTghwlN)i0a>XJejn> a{ >scO eZ ,Ï6L!ȍeb ^9D2&tLHxP(IJ 3Y.^Y.ٵ+*S".~B32Qq1 />K j*Beȗ% i~]Cmg#q|{4}>^?V e!F#4,^0 x 3(1.(Z 3ו4[ KX̭\GXƻkc{8v m#拓Tn_}0k 1eNP-Uj<ޫ9jS~*f;yֈ@Z OUzJ6P/qrSL 9< HRː3(eu WvBDN~Ne "+0>J-5x[#@Z&J19=!>2a>Ƨr#@kC#=aCɱFa]"zGqHu:?c=& =yY9~zN)A|m%qXagltj\WfddhP BW4B&E5( OXv[EWoYn暎RR :9e1YZ7 M/FḠ4!;BF(1OXbN\־D=bqki#Fln.v1U#*Hwǂ+^e +%J `*jӟEEW4,Ys\@ >q.svX6D!iM8urqXըCv0a &:ocY.~p zI}N>",73lV*u4^7K}X]_GI:,:*gjr)S~B ?vZ.iL"W#Sx9M.?_>vvQPȞ{Gu}D\bX[ѯ0&R (ulҮrO&Z'M.q$Z2L-Y [9a,3P7@iRε0*˾Cy/ͱ8?jvrSCjϫ23_Xşx)^F'X;eL ι' %ژ!PtPo3Yq[mN5aV9!N+B@R Pr 7GݱBy^t' I:bJ2$QUy-[%<1 4unRU Q64c#ELl,Ҿ)p/=jPҡ# TU{5{u+ͷ*GRt*x7c`)H \6 ԟNӽk]w(uS`<!YIK!?"TyPr)<'ϒÕk05(K׉jĆ2̙ҰH#/[J|\ȧdT`>͹ ɏß{lRNCaPGU")iP>,B^Mڮfwn@#!kҞ.o.~VD72} W,B+g^C٬)W CJ&-Pܫ PHL)D~bO>9cp9Xs Vl吩߇*f*ul$ \%Ԣ򄴗.^я oΒX<_'gU³Fiėj7e/~<:9Lu4#⿿4{塑Sg? tpfE!w%gê\#`BH9[BƸSq>y7E*s =ARдаP<6s M*[~hSOyv4Ý^ۋ(hѹJs`Pq<1*KnJvl}((Kr8Mxr\rKՕ GT)f Zzab)%GADF)Uq[| , ﳲ5,^4~[(X@X#X Y$Jau_6Ck/֓S=*sk1F=l!ܹpV6Tq1;{j߲93RMAPk1`>g.:δZ-;!mK w9ZD/^@ h95{8T}CO.Y>}L3=F:PzL1ӬC } ?}H=&BSI! yƎ]wɱZTɢ66tݒ?CD66(*MSh ks"#+YdZ #@{Y dkؘt $31K:i~}{pRIe P$ˠħة[u,rX3 :o󍼙FlQiX^ĭCPҖr*ߌlq.5b6Ca;ʜ/hmumxPޱg FΓ bsSWe 6B5$ŭ8Q 0se+X^:cαt9g=LM=} shE2ەY(ցKUY/AҶ|-ؼ^m3v$]]m"}`21m7`tn|`` 5jM>9]l$ePoq{ DXdtM[  {G):5'"Ѣ|Y߼|X?ϛƁd ixδ6$1 ȑNf񳕽@5z3(鉒/tYd>lf.wG4|mDQ8U=1~.~EQ~M=T8)19AXtɳMSDEL KqH9%K>zƺ% Px"VQAqb*t\X,p@7_M!YEL5oi^y(ÈXr8mh;wɻv0Tz;Y\CӋ*E/6$*C(P -%AL 7ƲY/B-i|hǜ>~U~~8 lHgji (-I s?'XiCfЕ8OW3iӦ^f5ɩU[<Aj,bxİ٫u8k#cw*,)ѽ-'|fA`5`t1~Z-r#֘U$.P/L ދʎhLbhN3"lkJDo X#A'jl'4& Pp?ӝMƑuܞl MgVEGI>L&i B=*f*xgEQE[7Jh;bJ!WT煰S;357=6Hĩ<ӤD1|y7.݄9vn3 kd~6D 7fjИRJ4 }Q'D~Hn e${MaI1cyDK96la;qzT.&(J$Dr)JF9%dT.7K%D4\51K٦w7ɱvJEo;)r@[6Jy_!yh"F(ٻ#3QX^!hax_^|p7^y錇$t;\||mE6[(=o7)WP¹, ԎN2xW2eI~a6/d7ݰB=ы;5yO!B"}׫IpL,Z# ߊל]@,]^8;/LĶ\6٘wG~L f^@qfi [Mhװ뷇rkkf+1qbg^.Sr9A9xJ,%N![bߜza! ̄Bgn~Xܱ"_ z-mAqy^Z$Xfʐ8\h-S. e=& 0+D!$Z.PefOb-HDmz3.T8P #Z:2pU[ (6.S;Z?(Ue5,EF֪$,53xA|ʾiN)`ֈ) wa_Ci?uza2*Q[HN$̭> ȝv xB SXӌ=5 >׍]GNaq0n{r_-YwA4< sR?7A)0}$lU j"L[%l"o%ϓ0#KՉd89E1EEZF@hEy {~2$n3a!>900(yTQ0RX7LfH~Fg%C*sa闅(iH1O*hZpdW{ğ6#^ o]| &,H22xiqs>RD@j9_*VҞ&`^/=RVуKjVI=aTm{5i\w&cmiLPHf;U-Jٮomb*۟l Z[o<,>l$:VGd#訂,j7R}X LD;l8%ȍF7EZ4Эq5ƣLX\('L vhZվWmV,(3`_?wmWRsqAȅc]JO_$X~5q =d"H<$/,QP+Iq`(Df̏B[SGuh]oo[]T,DUߕ{;תº)e]ZhOrG:_ZZ,Y`#_^Z ܀:r} qNJ;I="vbs}~Ɲ-/eS%pAiZS~&{|pjv{%(*PZ8qř -=gL**?~. p&zvNş \Jao_ Q;Ik*@G?^GmUS8,mR1I^(P| m2I~X\ȟH?j&6[ħ)䤅e6*Z C}ShY F58t`!rJe*OYuy/ILjД$oI)`8̣ έ3}Eœo5iTuP4a`]]zU{Gys*ѲEwX.qt9>ρrD{g~,mwU6MBN"K.@#e~l6t*l9PԪݲQgJ"HV,#R ?(V!F(Q>}QtR & MCϦz=e7_CPy-њv`LzZ0/>T&8g>gq2?y{mݎ,qE!:TwZVga֏rc o2e%˺!&'@l9}z>"-+z܌B5؟\/_vV+'jRDT؂ݗ;z^3qK,W;t9/rjʴ]Pr8vYT:h }0!:< LP| `ȰlR&s?%O#$o#ʼU^I޹KNxYix+|n:MaG'N!,>7tȲzX AfA ;Q*&C>ꎆS9xz䡸!k%ǥբStUY^meD1ZV0AkM*!&TeoJ|K_lesM~$@Wx>(U9>捐I ܕQEȐwˤ 3,Ԋ+@nޘmJ{u6_8+1s_zDdB"Mvt#(p1yEzߠ^~J̟#P͟ ze¥!6~iኒRxu? 1`?Ogǘ0Z'a)Ǡew@wW)'ΡN+t5tv<_9ŧmg½CȺta'2Ozp p2JCM-PO [D䡷uPo wfe3ư>bF@ܒq5|ZUjWrL5XD9(J'k)Rvw`b5{d$egh{HY~qdHhx M$T'@Ar&l{4\u 7ڻ0mvGc}mA"SϰBCJT -+Eg&i;vLI#3hJk[*銒_qA0̒1n8&V9exa!5:;ҟFs\bF&]ʶ.aevԉJ+-6+m)ǡ-{t3Ӽar}/)Q]6z0IbpWOq8G6T|jnc?o#Ș { v8-`/)'܎ֻi):mцi"-d&d;"|J,xk'aBxf#E#@8g s;%EDPTPqOˠx[K|k{КZֱO-X >ƲNNec߾GpB'II*1 tVTlmS-z 1(V7X~D  2i+o#NJ1 4\^CckoH n}[ȫr^? <_1lE:E36WDy.6tPIH`-FPC=Гwُ| ^H*'w9"f&*? 5PJ!hh_7_& a ~Ɖ@1aAL=3>3SC2^cACA_Rּtx6%yaUW#6=Y`tÔp^=eUbpH`_(kiǑԹ#mmj|8דffGLTtsaWr d˂ܽ9\K,|H2OǞ欺Y}=x2NT=†?.e9Ic+L7QJw!a꠰lo.[&~Kxswu̦Se e^'#>+^z%ƪjG\#嶱Y-<+6>tYB3Q Eږ@h}YR)$RQ$5,}uNcYȎW[xhKZXK .4ffG2>6iY>OXY(*Y8¡~30e*K%y?;j3oQ: '52UASQ9h#B[j$~3뿹x\@|^ ⾾^.)b;̢G*E ~40deƵnf,/hJz9-QSN&E&JfMוIRiOHc#r`qq4m5FLi Gtϝ!%B7å;ɘ qB 0ҩe^?nqO "Pɣ3MX"KBzl5.|#@Ɵf2:=y4)*gN7hfN8]F8DGeRn)r7A%X? DNNPY[N 澪!ŸwU.W2N6|0WVInEMp@4vg#T*x#|q"f#I 6}mWP3ńQC}0o'1 %qj!]iW:zz֋7uAS1 ;m]t}o=W{ nRݘSB =8m9 ivD5l];cfPPh= Q4ɴ ' P` TɆ'jԅtA]_Jp0ڛgN_ dF3H^_Ceغ!pqg.2c+SF/+w/6YihFWsO-ɲ"[Οf~:cJ ]:_O~e#3jG| 0,S)$Er>$_"8\_ms=BYDZv]U&$).1̉Vo5$k 6gYJq{o^l6u:S~Yruj >D =:=~R.mTr9g2yO?eRJ [ dB #fn ԢzWA+`dV*v 5KL" ${w aNcy"`VG|z:{m4+s_G}X,G6]^~?%^%. BiQ(@-?&b;AkI1𺓐H{-}|TZc:3Mnٸ FʾMM Q2~};@U*cW;}ZN5\Dx2;45yѻSVt$]'&Zw&{R7 ~d}b[tr a٢`a?y J|J?{tM(Of4˼S?!3]WS/j@7f.=w+X,ڜJ4OFkT9p帨z?-nװiLmB5EKM= vp<*|ŔpNp.cJVQ!WS_z=w{n:3n2 9UWW+@f3MڙSj'ɢ.YUDRQYC&1Sm`Yz*>w }C>wtFt Պ8-h^х㣇;o _^݌SS#lc)2 7s&OKK-Z+kYH$~+:st4V *+ ꋧxnvg)4/Ln/#|Ǣ}b9o؝ 9t(qOm(Eq\V׿* v Қ7aZ`T7NF^ N.:mȯ\Ev{j]#*ڴفǜ6;W-L n͸f/by3S0mJ4RDю1C۱Qic:Ftmr\9sT8W`бCTUsmR<x0Ґ_~؆YhskR^'1Den:h=-+qҪ,Tm]ڄ(B'f͢.A(\J扜 +f'Y#߬>ЍQjWoIi+}([}[Re;7G:sRYu/Av_R][L`#QAi`|zdsЭx&4] >MdTس"M7 ׽=@D:OBg k7 U}H/CJytC$E ިZT48]"hk^{3/Ums\܌0)VAM\aHs7<9͔tflrii1guSeC`SJśt8\[@7P;.B 7[XSLJ'3 UI?T?cM+yC;o1* πeOpv_9^=ztWn9)cn†pQsJ OU.GDGA0B&fX9\yae$ %w6%>- yl6 ;j kȤR^aMÅÝQ|T+Lk/p6R-<8sIqBGg$aEWx_P,0+<0\ҝtͶJ59ލpppmDr* MHӌT{= l+}iuzS:c2xi5JM/ꆻ5Vp epv11#)]G/FcKvKmJPZ;Wt.mA`1"q:QJo85'o:GbNwqYxXG1_&.O@i⚞?R @9=e{}/~l 7{5*@zM+sk[DmrKV2[յx[e[l1t-U1wXZ2w=Ԟnt&WɀӖV1y&@ažai;ھZKL}tht"i9GnK2A3񌈧iIۧ h3G< ,k^%6(mJ|vy=#(4~z[S.i-6%W${X҈7J%>y{ cO3,gp.lTUi/yf/mL/ ySI0K_ڶ7Rr|uIUđ طe\H[<[q)RcsMx", Q+R8]|͚G4uXHzO4Yk$]~@!bpoqp@CN#Z_3Pu}du,$5T63L#Ly\x:"4]B4a" s- ~pj4hZqOTiDƒ,9ju aPld(6nQо a5ĥnş^XBC9B,LŲQ :?lɩPx]™Ӄ~f)_fkusȺCgGvt+< *uZA1O:43{t# Wpu$@݆%Bw$4#>_FO_ 0L%8#yqCj0}o]ڳ3 k& o57k%shs`޲Uiz}]@b]jNUYoV kyY*D3bo$?Vߔ:{=KB4f10k1fR9|̢T6fC8$>;;g2&%IؽNJ&cv쮓j憯&y \H(o`z=o#XxA866'=7f*UaZ3]o*^$RLpV|VJGՉ<$lW/(g0isHd]~Rl 躥O6e~lw2"l3)yc2n`K,,ѣwܓ9E]d*^hGa2L1YƠߏ`b 7>%ײ.Q٤ "Ubm@9%@l3QrUPD8,ĻM6qeך9iK+ܮӓI38S2TX#F}Ytav ID-Cg Έa46<̹>]˨4z&;{Հr^4K?ϔSh#3P=\i isc}f,%>Ӡ6 yv!`-\ MKh<6 𗲾1GZviU/)X ˫ s%i Vp MH:O.Y)4 7vHPEP?@AWڬjw\aḘl_9n`XI? Wnp=#K:d#Gj *F\gS_ 4.F:{Φ]8dzOvzܝ,&K J@fр3=Snw~p 춡=bڏ)<<sfgG+7}|SV| x.$[K ,;- ^.S\n[$sV'* m gC齄-IS]Lqܤfwd{ޭ dx#Gh\y1'屐u7iLR穀50+eRi5m1P7+tӓAN/[\$ڪÂlL|n8I6૴ZҰdM!KP$[ V6 @YA _[H?tɍˌΔ|Bnʉ., EQD9E+&Tz$McʵoJ%\Rk9_GC)Qq QTSmĈDؘ(U> #=PܷyDrwuú^4wjKc~4d ^y,`)v<%WAm:K9Q|v+B&Xk&q*'7~c587 smCpS6Ga>9/ |籈4йBׇyi[T-/"kQ^1נYY&a^a*v4BW9He̕)6`w݇f+}RKG](B X^HuGϻU= &= E`n,}(8Y&ہrL)YJΡLB\3l}*` YƠsw:J9*ue;#̿, ̇uA>`vܭ*o z@/t0g]Ip4FEd(E0rMK=<CGFq_WM~W2@gH#uD)^dcehۗc][lt4bhUbc㔜~2׿.A# - >>^fefoh0 FiJ:]J3oXV#R]HԱB|"ڳXe5<^}!RL2M@UlbG![Z[?/w'V0/`%Gcd=|_$ AZzz nz߬?|#r}ɷiI8ґ_-xb3c2Ϣz^(ȄІA HY0f5_eNl&e5[x"b}p7h9ql+--P:>s-6 LsM/ zD0-JgZh|]wE|ufWn$xxmAkDk/ Aб5q*(48Y_m{xzErѝՂ픪NJ_ ]cϼ-tJDv 3NS.Lm6cbёnH(؏嗐 &D"*zVШwbeb*K_(n -&j=N"χ.en׆w{yR Zz8#d1(XLd)H7vbx. tt5$do؍S7lEp!:ŢTT?D#i[vc&]Eͳz6#ݕ ]y5)lo ;Iǹ, VW1M>8a28%5*"6I4YX2zDBOkv{x.sDzsus;3i/jy$ %"i` \*֧FW2 #˱,wLʼnA*mX^lX=Fkg/[Xtև2#'`q} jc Q)$`"/[ ײ3{oDKmL" maU3_u֫~uZ{_dfCҚOz>% )Izn0bJ=Xm)ͯ)l'6IWM4dl݃'z]FW,08ERtzX}w2 ?QO/ɵfq& L>nQqq5f}2G*5a/Z9_0/k\5VyK?,r!M[G&f5'$# Y?~3\Ǔԝ0"Ԙ4,ǝChU`_2 uV\8isXC#¨Bq琇Gnoˆd.0Vo( ^recw6#{I2S՚Q f;ޭLGӘ 't4r+,\ͮ{u %e:G&3,ve֭ !&p x_DL'ThP G*sY\tjI4voџ>Bsw29]9Sґxr`܇OZLDxKamo:`ݙ ,eNEH9>Fgu^Z$'r6zm6Gv/X*%AKl$=,ܪ=U6O|Q7æ~gXWUڤGN j*ɢd^ r̵̎ 5r[p7$#l/&zl4LDQ"ȉѾ "=7Tn\4J{YҸ>PI! m\S)EAdl :̧K%ۖT,c%f♎̻2c0mHEW?T]g=zP) bַİ7hь)Q7^ZH+-=Ji|LsK[$/<bY&uZ2rO o:Ջ5m3ХQn?4uf>r)ϩ.$gC&ޅw#5bDEh`ڶ8}n#,KdV*<csȔ i`gt$fڲ^ߔ$L(2y^K|=3nO'$+MPb7Ev7%|qc$Kh -$?d8nj nlgX2:l,>̻S 8jyu|`4Syw ,81^AѺ#8zZ KM]]FQamkR1evrl+7Xey5vN֪Þd>LկH4XR ,;?c`n=sB?TU5m)_yFc"''첯(KJZoV(fn*,>v3rjF$GWzטQFO{G\OtKaexjyS>$o<cXrS]y? 20qVoyy7c̰XH / ]qJH_yg-:yB0rVýkyGҭ@U ;`46\#C-" 0xfv5*ʗlܢN\|*,DԉViy~'3^k3-n%YM e^"Tg>,aby ۜD^oVXFO~P rM"$T,9ATwưaptR01nK@\ri<ƙ8MErz{z*jYparCgDw2ZHiz?BR9_pHÚ#3 `:'o5XGTt!YUDf ?lQecv^>%; J;*_gN(N e:NsLGd_>醃afTZL!q>̺PZz[E-՚TAũ)?dUQCHnJJ?|dNBFضQm9m\tF=e/sʔ=G_a| gjb-'K?54.Zy,Q-NC@Ha#cx8Pu.y+=qt:z_jX$vf T13v-4&JNN\"ėNTJ13^,RXsԺHB85S:I{ |'V50+P}qvӪlxPAa+417,aedX kVu{mƽ*Rl1d$D쌳Ѳlj9pU0&H 5d4*όb*{B؈*FqI#LOtTZ.g-E `Ǩ&\nߔ|NEz4lck-VD [>ٱ#EM_Þ+GQAy W&HG6x \ɵXٓKx ]9Djq1%% Xh=W6Ǐ+k"lsX)I=\ }M|X7Uş9֮GA?_;1Ї3,lз nwޔfq?6`AἮTJvW[Isc5 l'v9`?T6~}gjU ! wz-RGf%zQɣPjg37"o&QOPtklo_ÅDrK, O\(S݅W|#U#h&#hܬi&t}Ɣ Ruyqsŧ%5Gta< uv纏dU;I*oQ"y1쀉`ۈHyz= NK O>kWtOծy{ >P!ISxmJ?gkOQ lDEj"/uZ=IrUӏ}Ĭ%C۲$J#TY)UrO7p͝fDńG# 9oL= ?[W IlwWL.Z^!*0ϤwQY4EjUF^ެM܈jtE>~I -q}#.&p[0K(^#ye/ \4xJC ^#AJxW A%6~ky5U  Ԕ YL֗kz-H7e9zJs*QJI<@Uu}fcxϋ^ެ୳Ǩ_;{ "u87I ׵iA"Ƭz#dg `%,.P&c!r4^2mՈXD?p NL8%ݰg;kn |z\To4$9V!dC ,qH_X#X?FNq}ZD=R*lسHEP^v-8剫2/0[hsȖPu{0t|/2k%_Dd~zc >D'u:QSyWb˔28fa?KI3PVvʸ[d9sBiN_$J=xϮw!a֞X/}!&lf5:%p@MIBi YY=t\wH.}1޸4#ñlU ZiTvKp<u)=h308Ϳc]-l&عp@mRg򯩿2xL|hqܔ=++\2\lŔE9v9PTvK?ֿ(s~Y\NsvݞDsuW7M"kM+|EJϏ 0,_W]́;bnO ==d4#MJ +V>0++A=sh=?БX.뒺JB9Ԁ* {% +Ԧ͎e#iy2]T4:Ҹ*KD4m9X^qހ^ivFD=T!A51Ti6{E}_ '!'"砡[&4+=sߘ`hYZ~!06Vr˅ƛ!zU ubODdQ5}k!lDv'Ž`]'w{S]iRP_$ŃٙT?v_G&^*U;֌\kׁ5P\?;`=+OS޴M-wmvF>qf*v|If;Aj0Qk2ϾH{T_+7L8eC,{[7Gd ~W+佈1WR!g3SA!?XFUs %X87)|,/_bƓfE Gʣob̡d[u:k*dOʔD=560ӯu$]C-Q. Q YF싍|9ASKT$y{]R[|x/XY=6m@M.y{O90WEU@[7~l_:Z[ N(mٷ!u<C{Ik9˦LV2uz>N4=h#*k^n̑Ƃ7<`!2kl_C#L藙)͎@}-c1d\U5dz*"51n,KĽhBp . :n(4<4BDzt#$| SxmGm-> Pi 4O?!ߒ֐ِޢkuxϖVTl;mÁ,A_st) >>~U)ٶ?o[jz ~OQŨ֞H9^/v V˓u [aOwk$"SJ3^6k+oE{h}Z ^NRk {{V6ՙs#{aZ\«'CVV+15R mޛ>,S , &Vq̔`x`1vQ2F4@\ʏ B3ߧ~`dO!tZ0eV`p6r|فmrU[ͤy$N$xqk׃;: ]ÅƖdFr~ ĩ86eoptQƹOrp٦|}vjht /(QqL3swgO$ :d!5 15Ow"ᚥwa!m["F׌NohH'felG$ /Ḡ.3'DwGܒ7(1aH듬%F_'0~˭2S- ~P@ۓߘ[>Vu=CEv/s5 Ps1=:d)|RtA&xkU_wo=J8k?Tj8`/}Ρԓq_(e>!nryZt+5$ ی044 %{\Ys^ns:uUѹꕝЙ,)E|7m wSUFɓwt M$% K<)9cTFdlO݇]\#HuJiަatRngyg06 )6NBs*O}Ʒ>7;8 ÉN{LgV@UH4:-r+.JNGA\FM./ hUb\V@l`7-%ښ+˃JU`zl]hsLjJIlsnqutIc.IC.8klڃ5x ][bc3RHv>c||a\Iy{DNn 姬}^a+A2x3hwtLA<̞*t3q[{pģaM5bB$2[e"]˿9a?sZpb,lo&c U&I`!˹V!0 (|J; Y$N_>~5g} ';WŽޮ:4Oց+đ>A;!ُ*+#yWG+uP e$yZH+kqKeZ4saRxȈf' 5߽h+,Cij(VXIp@1uuI g5xZ7M"Z9ne mtp~sc CTA9C!'4ā') A> Z>UIo׆?oݣHiJ:6- @\/WxJXZ7s79̐@]g=18h8QeTx`23F0xزH6!NԦ2Ih\-K&R:.Z[&6K^`rMd 0A3LY!LkdÝ3OrfuGw) p#MrN@5LU`oR?ӂW`eb }ibZcu3KM>2Z ~yAZi==bwt}X vhu0${e}=2/)V[{I.<^ C1@`l_ 2/%SZs'55xL wR\-',33͑;^NŎ,1r08z֦bpBFw IME,Jhbv́q gNg;Yzv[ -\D +~g{'N)1>%x{^+a;q«@"3aX6K5wjQlNo*5@FAY> Ҭ5J_:oOZ71<\ bu6vbLoUpki*\лN&׃y)K_ҿobe+%z&ۻZKO?3)B}Q| K!q@YV%Ca"_F pƪb|2qM#TddO7qemXV&\{;;3u#qN9޻$ LݸMd ]3M0&v:CinYR*L_=#JWi欃S*~W28*8n^CRwky︒y & W5Oa]dS"-2wCbT`ofT& ]RpPbO׉uPĶ("҈.W㩎,jRoMy(+Jʪ\"p@c2׃ 8 )COBU9 ×NCb.EZcibox(Bl'us{yǀY=im;l '2f*1}RDud"4XCmr~8R6d=*12e58N9Ś~C2&!# dDYR\m F4L"jCt'2n:y]쀁TQVyn}t#ejZX_AxLS"vd$_GVgx1-! CfBD44Ev6Η4u>jh4 /D DA^f TL~\;ׂ/ |Vi'jԟ:)vf_g(Wp,ca`<WdvթzzLI^3ܻ*vo% R 6Q)2:!zS3d(Mg$(|ըמY4[6eprQoB#)/Ɯ$b-Nʗ~ ށ=afkrTO ۴d!3R RX8MsЄPtZ jQ LafHg!E5f]nZRDHgZ4qำ3؂`QRArSj Hs}:^Qijr}~5V.0 |2p 4]bMlBunl}CU^NFt9 FN7KqRwV+( 7g/w:l6(>2R2W i~Yb: _kk*5+ϝhI) d=]%8[\i^LjH+\-!BBO8s\|- ]J#`.ܰ/BXQ!'ap*1R0!AV;fsՍȹW 3JH`.y7]ū|5*0OA#[З F~j6śG}c[Jtv^ â.Zf~N~V읟3FсW0^m49JbeϨq]ouYA v gM#ڥXi{^^$==;YnOѤks^hMT)YRs+ӦHWWJHFA˞V*ΐ͞5|@%4w&I;4u|+x]?= }!OޔdfA<~`[%Gr~FCd#P]]DI4 H?l֔2YXq&$c8Up%[*ȾC9d [V*ոw_nh?>xr dꝮ.6Lql 4+U-i2e!d/qNսp ?uFl0Ջ̔"4n`c Y2z;`䧊@!^^VRb%VwĚ w`Cl`Fu7M~$ú jn4(P38jS5lR 'q7)"DPh,Ŗ8QAS-oS@IW^ Dd vptV?SKo" W™Ƅ5 I7D\`*x\&XuwZe`O@q}tt(pi^1ۀtӐ ,l{lΚ<-#G=&fn]%>Z#kd1~dH;T|$%"ֶ˅ PsPN-gk3wxtgԠPz`?%QQn0D-W>I 0{lG^= Z6\duй 72R-x:y1]]Gf%\˞,Ԭ.Hllhfl!x܊[GM.w|M 1kϬ9 u1J4|bR24]-8nE݀0>ka5^Hu)_9mVB;t8T*i0}= E 0v41[?y Oy;!Spق5' yEo!z[*5O Zc1x 4ՈZ8<[GC|cs+2h\&IBcZV]#c7G46,VYq<Œ0dJ_1"lOKUqYl~lK<&™e?v^ k>#ᙀ%ʠ0q=g3s\ ?Ku5}Ҿ i}qPmVEis. Vվm.KCA1\.DaU=/9!Бح+4vA>k~X7n{ѺDJ,vPt,L֤-M`)iˍѵ AGΠͯ1epO@t[w_ ue feo#\I'rϮ}`<׽=w=9~dҐIZ16Ʈ\(+˄:,:"FS^uw@A{ ߮~+hL%9#`)!O>OƨǑӤyu11Gt͖=. ܈tJ}:˻Oc4<AItGWgy+q+QINA-NZAEE8hYJuA e'=zI;WGWpF(@u_݆Fg0-Fav,ٻQ!6F`^hmX;c@]fO8*-[89-kw4Zוeu!5YRm# Sel4P`~E1 1 J[YoIUr6`m(5gKa%:O?uiҸ~u%Q<_;,:gF2Э?=~yOʍɚ]!_O%s:+;:[K7gr4;r5;9ad0G9nIf;HH .yr0|"?ӭ)04k O7 f[.N 2#6-ߣ,:X[L1D Y`Zg$QM7qc"p{k"|:Q(ADŕŜZU v2)]ՋLjB,*]1!\buA9 gMIkE )B l|[ϋKZRl 6TSqcNQ!ͲU!~?xix[יqA`֔qqU2l>t1n '+^LV4{P&wG; *ʼnx&2.hµe`,ߢ^e^YY4@:8WedVS0 Yom(fUɇxa"jÖ-qLrd@9ī%qoĢƟʵsFo(#l`% VbM2"|b\R=ڧ^F(7\A),T',*ua-2)Uq,aҼNVd&!wC VȹD\X)ACAoG=cXjh9\'ĄnN ִp q05/۶%wjD?&Ϙ>C > /n"XĭkZ4AOYҊ)(E:mO9a>U;1@ފ9@< k+s+RT?Y r|,+K[$55M:MIQ#%Rqyb\.Rm#|DMowY[@{c05% p|ވ/_y{)OVOE`Pk@ & c;5mjϵ~-;}_rRk!,Di} L^2CE"+AsAJ&v:HZc6|hx`1,I9 <1ܬ!YdB8 +qZAѝd=m-"E->Rjr9@MB )RP }Dbzk94 TaNۙk|G8DŽ;FB \\[CUL6ݛm ajP|jNR]_@!,0^(]EawUvJY3uRbh=ra60`q_cQ(k/ߒ5Sȓ2:xѣXl?r3tl`Z4ޗ&.׋T0ɣ&Z; w<ϛoBlBˮk(nV%e) (Oٲ1CuE+ eMg/JmlI:FI|(XIa/ia[jYRK cצ`ZËp'$(wsWvu;Xެ4~ vmW=k IQL<8@ULkl:kbsc=>{'O+c8WxE1 e|Zhdϰ0\EZh ٓ:*AL \p@<>BOɳq5S<q 'Pa*E(aԇ}Z3!&HS fZ'8oiOQ:UŦО¿4W6{A "'.#Hg/f\bi_)aY{j&и5,?$HNXJ~AKc7,m`0VZ(;4lgQ hpE\ } #Aؒo*hUQZUJzZkgh]b^s|$An{YY,CrR|Msh?$EZSs\",[;lΖ{JYXvCeZ)Ł#%D`bK6"3ަ=*Ѿ U@!e׽[0T φ5 J@:l[8sFyd YFŝ"9e H·^tH6w;(-/t5kDz]4 -r+I|QWSoFMVl›E#='SHiF`v{%ڮԓ `1E)*:}C>XANvwSpͰ灌&2:a3iC½VVlˀ5*ܪyΉ:+S4_H"tnG_X_Az& UgnZq_±@pb}^/p/8j'2dvbczp8(Ĭ5VŴHC) wf$${Yx1gNcp֧XL9q滘mP9C R"e?l)Z {o(g\J(N7oZw0{'cU~%TEGG"7!cxm UmjJ2fսW/xX + 6>3cSX?2+/U^b$U|pe- 8[9쒺d ~V_:N*Қ5Q҅7["x0PCAf8rUpMe"UA9+H+"3*W3(v. <~%@KyWSaVvstי^3w= 4ޅ3j"-\zQJ0-Цqx :v{zv4Dvu׶⿿4F(ފ| \FZqgݢb.K Ӈ.$d3<(`I9O^xQ`{sMěYsP>Z|7 Ȳ kN4Z,ngK=$9m3I gG¦dY^/o8NI<v/jiѕq?&Vdfɜ7^CwLnՇjn֖餯 +R k'e\ 5ڟν_ Eμ;#`"𛮲v% l>Z=`BQkRnk#qO[N?哧FNIͮup,lH>DDDZ$`n V/)e09J4|^0#+ ՗KG/[pѰP孅Bm'ˮBC~`uӳg@u)8-Ro ist kF\e'ͷ?lK&pa2,$|f̃YF(  @71r  c2 MR٣Ӵ-џ+1)T/)..^L~d8]OC֌3_8QB*t6 ac|} /r֙A8v<hIb@P^T[ =8:|sN,RV)H; g栦( }w>{|r"(BA̐>zy]OTꝣ76-¾ڕ-eh@+s)?崙pMܸiV rқ;uG'y1B MY[TZkMmx>(1|ޢ Mf;xe/4kR'U`hB3RTkү\xkO\[<|10ĦIW4R-?z=_ :Kfrѫwz[_ DO5gm{=H߸;n 6o~ Km&^ȀaKK頶3N;-;`*!UIub4˟{|<h<1OR5W=;xyKiIV? 'M-woֆܑe Λ MBJ+7 e?xQ4xqҮ]"3[_/cFpS!8^gHXxz(Բ,^DǽjuܬА%NfƘ¼":,]* Q1rm\O~n4 {2J8]6v1co.uUˊq3&݈Fgz8OIMvN eD\YdL_g`KΕ~%%.PE!U5`* G۔:"Q\|.2}쎑)G0{]8Ҽ덭|_@XG;t>\0)zfŒhN9x}p+3lm#Qk+ɐʥreNO$Q q ! E1B !.LcsanH1>o6Jv1Zq54YUL%؆Dtƴ5~ r%mp?9̅]#C.:lh`̚LJRKXr$2SDhI7~}S3τnT7|clmS@TS[c;JzmLW,SԚ<;G͗w[!Y(~RĽ(AczW#@'{Eg٬Pwٙy9 9a9F\{7b٪ BQu煞f/ $h I!w=76JtpS8oVfе x/59:)S6|Ǔ&_@*Ho 3+I5N ebP ꎰX҂puB4"Z5rAAqx f u~)p))ƤaL|8PPpר&-7M @O ȝitM?lhϝ 8cƻR`R\!EyDh,>J!3[^>OA22BZ_ At聜JSy#Iuo c[m7,n#'O#S~*8;?uҧ+K{0M1'.k|'Y:0ܓF/WE%q"O!Ő]@p.} µ+cHī ͍뙳 WʲW& fzQ U7maA L,\*B:Ef&FW-@BPaDku[/nS"ӑX2b3o TA|T+汹Ga\l3yh84<,&{߫Hx44i.ǕjceEmV-egT(7{ | pf}jf񴯓 ?[oI!:RȨ&se5g9e0;poԈ|J_H'7'@ؤw )<6yfu> &v/<)6XA|v zB2=^=y|L:Rת^m`5 ^-c碬N1ֵ䦋~ppxj!~cE-|E'ٱ6/of:Fm&GV.z49~jNf 7iμb?-CTo>T}to7/23? a;l!!x: fyilh%9%t M H! 6A3O6ڇ,ky<Q`,~X}q2F쾏6SY/yϧ~$Ԙ$%hIb=לC MWjUss>?TMﭭq(ꏠi$)@190Zdʌ/ɏ +9ޮvUna&m {;Mi"m`UtSޟj "1,# 0Ķ w.Ӥĝl}S$fհ~ʰWfI$<^XwiKo^*`j,3`/0b&.\WZ)[v^AfWr ? 3uЦ!O8ut: 3Q]\FNJvZe?}Ѩ5Yea6Ӡ>}gF`RbLN*Y,0TkQs ӽ Y7[rP}Q "84hVż&qwB=.':~M_g)Dֳ=&7Yr^9{r~SZv!Gd<ׂ3sz.`ٶHBNUh W'5StSaTZ . WʓHu񙹟mSXz<$.1r0YOLaN,ſL'\ GMiɉk|c<"W*+3q; 1dK1[Fr#xDw5)'Xqj_tG ܹcb$9\F)7E# qdupC(, %L"S#C i Nkl~uhD:[=; nY+i X0H{eF@/&˒r2c}@&3JJY"gɨɥ0~ sA ྗrg9ly sT!Zso?X?0ɫ N A;{މf_,e& ]sY/vϳ6奛 B@NlGCh. )Boj:l.GZqBhp#Pt<z<7CmQ;8U)ؕgm)U3󒛡̭} rV d%pjd5A3wG0ӹ{Ѣ5 g8ŵre&~H. 7kTle!g,Ve& _#?Zl؃6tC q]U,whjv~g<1Q458(GpZH lIQ\30#:R\Ck1ItN 5u]Țmbw^~bAGh%cl=1GoAsVM4@ٕ.΋A?׀8 bS{b4J,q<2g9Y)fhǾɪ\ a5GC:璍"Sµye@0@ MB+]U24JPD"BWGH uYP ^ < X +݈!kҽu>VC RhT禍JvXF׶qwcԣ]LNNJ-^&, t:y4^tr{& !&CcKp}:lĥDC{lYTJo}biiUs-.2u_{ ׽w$>y1pmLĔ:C)h64:\qY(϶{#oppuȳ6p# uŤ8tE I}c+k$bãD:S =ŋK\xҕ&Խa=ޜ?~Ϯ*LrP S_5k-df1H":;YP1st 6d4`t|V}3 pAe#zTKmeM.;I7d$}Q9<ehb˧ViZPilp%ҝNKxȏBVqagQJox0vdz,S3nw]7`_ixb保~W0 × |5"+ؼ05d^ʡ& =[HH'mc0D䣴b#4\È!ϭ%M9VtH0} _Yh?z%2=IbX x&R  VqE=L0\G)IQSy>p]eC7t40Lp/3,9(M rŔ Ҍ::bP+b8۔Kc + ƻySFw +6Öhs^ G`TG0T-x^(I(Ui$}ED"܍mCi(-ho8uHVYMJ/;ګrZCeTIcZ2Z2-QkM5 }XU1ecP{{}~GD9d~rbe=9 ۃ_ Wb.Ȕ2ՆesdίucCk_/$C[tfkWKK92g!;kb^hjy)Z #iCH&AMEV|(2JSՄ0y27S\ko ^sR^3^GO31@آds8X`J17_Y,s"àÌQZnC ~rZ dvT~P߇Zƶjmzw\*i Wo 8u %[wRk:*]G|cQyDJSQL}C_ݔBN'"\m"q\8x]4ę"Bn ^)CJ1JauhPܴgb@6yᙽ@v dx,`PGutSl:N+pJ3"Vh#|~?xf_?j@d! Vgb*RUezl^$Fͱ/ika=M`ch D8]9k:N$6FW9#cnocV}T¯+c`._ qRYNw*娅^C?khiEiЌ0oͺۨPkdZդELQtyYG)3o<;Xĉ˥뉡.@ ?yl1PV:8nΏ]&cq;橷MaH1|Wf1_H 2e?^-&F`, <  * ?+jpM=)DlC~<0xWA< &#v/dj_"X\r[~U5ٔ%$~0yicO9F^#GЮ^#gc9@rZQWy ,4h4٠ִGa8pt~v(8wkf$LL$Lk#L?+//[D2G2Gjv(os͖Lkhd:eB`%[sD/*1G~A 0{C1v |zXQ+Jk(K*ϽT}MHr8ƇSyrK2RxE?i8h12{n<_Tט{) /J,Q˫PJ{ΚϷ]HӶN#CoRjQ ko{Rc-/J9HV 1톯ۤk) 4#,="Ho^"aTz:;h+F]T ,bR,lt&HpSiYg@M3oq32РAP.N!A칰=MrEbA֫#N":1k>K19jYejO2F ; ŕ\ֶPN?m>.e>nz')@W27W晻s?0-"+{ {ӦftuT)X:[ b5BACd&K/+#dZzb-]z`~ #K]zC'l ,̓{iq!n=hJ*:Nk65钠OCpy"Ў4D+o$rPY |02^2nO 3Wi'۠1vf0[yq2,\ -Ӗ?ϛ:m%Z Uc '{%"n-Wԩ7]20Ev'kf\U|ruUV6EPLك 4<_L]ڛuLx~|TY*B4\ezՃy1Ч (x m\ ?]C -Z9ޭIj K6@`k,y8[ wSǿ}#Nahv?#RiSS[Usuī912GA9. 3􈉘^pWrj.X1hl:wD~열(3{pSZ+xu;R61#<0otg|3wj_a˔IVc 9}N3}aD1#>4# %mU~#.W^nUVz geΜ^`p*P_ӗ~(ETmCtUfe$ywZʭ`~Qx4툫 n1nx=k6 |6: а[txpNrYWu"Z|R*RI\ӽI&iS>:Z|6}~xpB \AH#X|~V1++8ȴyEg%\A&IJ;ǬaN2Ps,Nf.oHpJ_. HStm qPGmEL㎃pVl Q>jnkm N|UİSVKx䬗7iDٛ1ZN3vE'hA yrM=fUB849GmG[_?ciry4TR[FQ ;vթin=Kp2qOj4- A$LOabdjafsZ>8t .\ǂi5`.Űu("Tܚc(fodgkrm7kh?FأS"?N/BOm5{³bXџQxwW4'uc"g[8tYĊb}TǢL!^_Yqcs<(`XV~#kYPXV(̱I&GD8iۦu*͂2}JhxUDJk/daBSwO~0#=o}Y!+9yohMIґr[0?3jQRɷ&N<42$U{ڤX "vS[1\Z|T^J򂾪ALb)B#xHT"vZ@i.Sb]V_:etĶ5H- $~z}z5HZY׼g3Q@c]s4|~ 'eVk9 mAVY=h&AT5h7$=@{8OFx%2Vb ]& jBw \@ ۣha݌ \Tgn<t+XRzO1G]gw*V/VDKJ:v3]L_4sBp ʺi"DMPĎ'ۭ ͫުA#UD-n%ICBa&Fx+O(i0[< ‡4WQG!έ.P\9Ǯhpo}:~Rdbl'p|b'Kx9$Y~\c/u"kTٯ 907lۻ5b*g. 2ck/#{S]s`D=H2vK5H@Uޫ&;6dS|AG x Qj% t5+μgOnPޘed%t m1F"%RӧA߀v&7Zy9%1o$ M~O %h xC&@X.\*o0ewO,TVDm)(ˡlu9vfΛVoKi<6gX'F <r mwĽG inTxb83l&BPmaRy<;\'/-/ڎ *;>K[M5;ٛ/3oͅaj ܿA89<<~PX;](J. vyDƊbSdXO(ñu4;x.ha!:;2.9ugȵ ֽ׫GZӹ)Y){6VmƏ1Q4hS/zS{7yh׮Vy!ڙJ.)3" >J3 2ƛ${m<Q9.Ajn8QShh)S0X&"l.SWh1>qIedA-Xu"gG&hPG=ҐBng"fdǢnky**+&^aK|X) [Q8ML~s <;lMk}f+`CDGN]odWBO@KT#DŽq%:YjCSV=tU|5z>c ||'1!wn@/+osFO- pYXSj1tw[6F9k@J^D\{M}ZNol*Dh8PFf(yw$hlP|"ZFAU1XibAGk,dr'l'?Ǎ|g\ >9KT+q7'ZɸEzmHzL4AbLiG}!ʂ}7 \A C+/k~:W % g7x'N@a%uJ-q-k9~;Ŀo1񦯈zc`3(le-ƞшTO ާt0Y%~ͩ7Cn\o_Ӕ5 ^3cU$X A;M# .)*9aM#4@vV:_WoɈI} 5+F(BCA 0Jp:1* UvfI+TyG6uzh10׀Nz۱s#WwㅺF"/dI9.laNҶtQ$[,Ná֞k*]pa9бM^6mBA?SDZ44 y:㪶B uwE/` u|["w^7r+ *RY,t2vbCq:M썸J E< !A (җI,uSG&x@|QڪA LD[A(Fu&&m^&p!)sHQ jjάV[TR" l4eΠE溪e9Bё *4U?Hr"/1"X1@Guh$T,ЧX`Yx5[^pxscypxYѶ)Pf!ngx\41sL6L*{YЯe}(oM,kX^YƲ9:C6cbjhf |xCR 13Svg&>uv rlZcT^ªs#ϋVnf"?ջP|X8kBS GQʁJEhfRرf_hu`g4-`Il F/KPIMw߷P6bKd""q<:yK)߈ 'd_=rYsQX\K,B;DOҠ/yCD tJI[p@JL#譅}[W^F}xm>;Zٳ0@6?jhO x$%U9g1e~YH딺ҝkh>XN@*zW0tKor?6}\'e͢1 X.0r{v|AѪ::}6 sN0dnڷ5jđdfްShp O6sUxt9>Kh S& dALJ{%y!8bJBllxj?./ȅS,.1Ľm>:eU&K1bL#B^Y `P"ŵ 9o~n塖o__;P:!yXݷ!͙qi-4p:)Q Trb5 Wc TVu/cY;їM(H֯Y}Vk+_qP!&c7Ȝ$:#δy $?eSZ+|3#}5HV ᱩ."zצ>C\v:2xh`ub,ۻxZ@MfC^SaBߛ "'ׯY<$Mr4F46ɜp?{K\Een%Ec }l^]yjdu:?)}uҊ0vRrQp*'n4 jr㑃m57 /m '/qF!Tk v xR0 jUd1"=q\ꉁL=ܻqp>|ea")7<9`hSn0[WUaò]Fe)tmBjVŘ92XTa= q*i[Uwr喪)6Lg`I 1GNFak\:wRwr:KU%VfYwJQj u|l񉮅e$ ,(!:6Zlvőż/d1kn w,s{f=Kyа|a(bch`PNy X"·prqYEJ2rN,6jGNRLβ,f].Κ,v<غݏq7(I9>nn k#x`>llyQϹ'<p,yvwխ&|/TE݋ wT54<0p$QV n1Ij"v6ٌ Z/`P%'keϖnbOx/fG\nZ)|O9tMBmz'ۯsGi M<ʛg~$C:%"l 9Dx)F= ȏl=΀߹ӤwZH-Hȍ.aM>@`[h11͖z~YnZ<'(ҼܗO"'QE|nqS6 v*S[r ЂW,œa)|5K괺Shf6SwG'b`ch |݊ -oB0 WԼ 80N{(@en! ["!S1viST YJ9Թ"mŸl!`1ɗ*co @`v3/MטFS!fXN 'VA?EޙW Ⱥ}.ry SCJg̴nU9l@zcJZ[Qko;KchRԔ`9!E[=^Q1TvCddFwqe[GƩhRםp]d#gOph-\3Kx L TѶ,U4`[DSm ;O܀W)Bu&,L a^fSO8*~ UO{)9DS=hJ^7LrD_a酪QJrS$Gžŕ@glHE1Ң_ʤQ^}n'@| 3S;,;L  uq,6EdMWCR?)cB\Egx{ fC+ u CJeE8R kM%A0? !ß16>!\PJ+6ڽi,nccs: 1GIa#Ќ&|@kV|H" Er zE#:(;Go::zECE󽄒Qz|&OY]Vfb96G~VmձZ^!j13R1CǠűIbgCOƤ=p職K xTٜ-c6nBYĀ tJ ҁcM&]S)]?pCf4Z))JAB͸Rx| Nu~o#-+R gųTU)j ;~;nӏt/(_WNu]%s8X%1(ۏk[){-ԥpgEߠcߖ^c!"y~Ed&ӀEb?콜(cG7(9i#m,K$ٳkZv#H\ٗcoS6g" IuGӃQ`_Ⱦ]O FW=|E7:sdYMJg3}e,N \ʳ q'~qdsQ[%E3~zu>4|i6r(lԷrPi9fI@dhPLoiM@wϬ1C9($)DhiBF L D Y'Ȅ>!5N"c E̽BE]";IZK?S7y[)FjE_p<ĉ=-!aP5EdhyUZ]0- \e\dib*Xׇt'R?@;k1g^ɞСި Q[-xG]0V"JԠr %ִѓICH,E5's. N/p)ƹFhp{1 T¶#ˎj}6*=uٌJ󧐠؁D0LlYyy;f";fM,꜍ٴyGj_x}(La@ \)RXxR>d,88gy8[a9Ebe;M|qw"X؟5c̠OBT8=8}a\<(MX[!?}s[ |g!aXl(`wG? PŸ?̳/@pm\T<-ny{cG]wmA q3e.Ȃo )9)!^*f7F#qop!;F3l 抛f\)T'9^)Ez_OРb 2Ԟ|7'{v#˓;H 7E_(RG/.N.}1&ЅRo33|(@SؽF7Oǒ&-1a0<1Z$/d_**`EnwDT[D*#F;qj/޸I؀ zT[ 6u}]Ri||`|@XoPώB§R PLg9F]/X> S)=\* 9Sī]BDYAl~?~=ȦDRjgVqzOw]KTf39ڄ<үDq~DMFN@8Kmzc)),$-mG*_UIӞ4'~ 9v BCヺ6ꇌyѐvg<ޕ>Y|UaYM^Z )L};+ל]/@U}q E&tѿ;ucug۝fk_3P}ZRTv7 (Ō [5F؍?3 \D$ΗvC8hۤYN |1wr_#] Q[ j#Oo(T. VŽ~ > J*ZjJ%(0WK+L$¾I܉&Ĩ a3T7. R8rhy >Qy1{{ K|X@Uk7}@OTd`duP9lTq.”}bWku+E`@wDup5%$`Yfr c*i"]LU(.F.!I#T L_WC^2 뽡%4f:1QoJȟjlEGIWC)4M=R5i6ِP,-ȒYz,2D}}c*tg%4iG#2ʒJ :S%4>9LM>f/z׷qmTkTM>=ifTg\,tmcx&=ϲotw$NDX|=Ȏq" ċJNT|(q}E͎,uoR8gZ+fa]N  t:K84}-.fs<4jqs&= ͷs8:h.}/V/éJj2lC*#$ (X;Ɔ,*G*ז cj62⥆Ў% iJL$_2$E~O.Љaa/˜TO/I]VD&Zv&_yk&8&$(UY9a]>S S^4ǘJ31>G,,[ʄYe߭_b79ɒmM2*RgGNP(U}V D^T`\#8W.k$UIq`[.ȍqa̫zd;rՓ-n6]U sg-QS<{"-Їp25+j`R?z@Y}!f^z㄃BBO< 3>:)jA]{od߬fh1,:|׼Kїpf7VC<=fN51ϵ'ю4}v0{Oa(Eʉ= gcep$!h?(oC;WP*8t ˩ܿlQ.;=$&hG$gB~/isMXDY%0v\)a#$-j6u4]ߗ~ es;P"{nJ]]CDiu]$ Ps&n65C(q$Y4[bh2 /D<@U6D nI>2kALh'EķZJrE b&?(DmIԙ #3YVe呪b'jP6MV>}@Ѷ=ONр˶E9oD(8z8Jn|Ѐo^#)\vP47x[twA4ě {#D%DHJxӁdd=:j4?n+W$# b^v`]caR{60%84|4vܹvK[h+台AvoJxzż5l1YM(Vlѩ=/N-q1xG5ܝ 1X[.:.a4?+s$X4E j{MkEgIbr`;KYvH'#\ sެ0+kBG})% ~],I!GY 2.NjÏN[=1]p+H& iWϐ]UP\Y}I+( =PQ?aQ̀uDY!Ua(ڸVBj̈0%Xo]"tx SuQIT銉31iR;H.=5/Q"j[*G ډY 'v \ԾJ'l+'%L2j`vJ5 Mefm-7nT ^yZru S5mz `z{ m+*1f|-8%0ra0dY?@vR.븩cK ,肒t ]6"aAJi*$,l1w}*"Z?cJmWV; 3٭ IHJ=yGjM1D p pQk\[׼7b0}d3Lnߝ(-aOB4?_ZLxogO X7 *N\ k _DVK ;hɏ4Cd̲m_5AH$e6 0!MƎMXPp_CB_o|FA :b4ĸ x}ȕSӱP[[4᝭j ϛ#دPuiq׈t6J-q3lgL>aIU(,\A#\%Cܯ`d!c!~j xRx[Y1̆*3-0}Rc F6wi;5PM Y9)gNcq T 8Zhw4.EÝ9۽BҰ?f%$,+PO3-@{ƚ\_4.o/ѯIF&R奎>4{$mf-a !-Vm-eBOHO G*5M*\t_Ϸ*H%aIS/O Oҙ,֔*!v=!A "U'?|׾[1;* [0$@.ާkٖ'AN-cW=p0O%A@]4e(HO@iiy5csji_Kf4eNQ&& /cApF}jQ'SW)2@GqIbbq@1o- bx^mѥcP}ylcҥo)TE&=\e^LڌvrwekHαQI7퓕hJ 9&tNcoݺEt-מ,˪ɰG90Rk#nW`(C(XI^gS%QSl\m^^l?<6̽9I۱Ytg)9L*v'itxS1h[u^L 9X4x"y gcʅ1͞[M.;{s^)kvFT[!UӐN6Ch@A];AUj ϧI x]/.n,gM8mkh,MYg7`g%7ehΥP~0cnRDu-{1.j:_A ` ˸Uz`.i!S3 I26fR{&vh%: "kOC%%‘θ.Q4!'"U  ;ppYlǵ zc5H@z*^/x)mo@QO!SԌD|hoW`uП"6:f~ngB'e0)xw5'?Ur%LCc"R0zwu#\?Ùw%{|#pXO f$ 85'uH/H" y.36)=uk4iQV?}T =`;,TMU܀hhʃ‡{͸ߓL\Sl"T5%WޓbciK9m6s4 !=⇡5p`0W)Q0Ōm03(.*xyo@x/4X31Ѷ}4; O&d_6CB׆~BקGe~kTNjLŗsxhmgf; ܀ǍrC= 44ȣIQWMJyT`k $>ņzY$K@\.>MQ'@Z4?|soZA jlΆYE3^>qX3attc«,n#>ndJ6,Ŷ7{O!`YݾO*1#KnNz TUnTBKz)I;3;b@:$z+a*!My-JԾ4Z2yqL?A%bAɶn_i!DX6;>εl=C+pY ~W$,ӪHMoci~NVsJ\D^^璟==ޝ,ɒ>RE ,r^80IG׀-[s|a*.alvp4 +m:CN }| )P,p}0 ^"V_| 0seSJl`M#K*D67/i|'EJk0jsV x< !oI5E;`>oKzsb6n_`blYy+apEr5擙z yV8IW !>6Fxq%w~p81bvVkjF+TGwę/+^k BTJ+ߥk IKEKd)S8 ֪{ L\EiD8ay1E&W{{NEG7e|Qw/ %N0+C2iѽڭ($is>շPȐU}Ђ Bg2!߯VOHk"Ѷ8MzfFTtyQWC PeՔ{zxޅ62ezFsY2)} /_|fX4I^I2b"\ lZΓJoՍmyC;] A帴Eɚtd8Ǘ׾ #`"N.Gbm x|Џ&F1y2a(+Qt]SY\A!¯'jWSI_UCe;z=7`XȶlBI싶>jx}c#݋\i4~ټ1c;=q'eIhRJ,iNG9|/,t9&v:jsm# уpAi()B~YW/H4] /EB@mxjԿZ}h~ЍgRvJgyMgE!R`&w܌PuLQNSNӚN=oaݑJWUޥ,S\Ip }+gaG|G*JABܬ_|A8kgOc%^+q:U(yKM`N o@: 3sFshOTqKx%5 i$c˛Zb=؇(NQh+rOvhAɼܼD:D=r7 Z|h ½ՃUd^cso+ ^%ps$MC&J)?x;7t|sJl@N\c,kIwLg] 6=%]5߆a!zweYKYkHZZc"ËGSCv‰JWi#J먙ň[`Dz9w9iQW>43Y08StӍEZR:V `h9*hIg0z8/f$̐UY޳ƽ6?KᓆaVT%U&+dOl;}/A]_ޮq[2!c/n"*{B?:)ut*9Kdjw<6&Vf<k6*N&F;eÐ7ȡҠ>D,oY}3 niOJKm<PAq ,gQĐVvaQei9Xa"ĵ=ơb{5jy'(Cb^+v;/޺bp{$Y*:-@'.`}_35A 1NSnbDaN }:ЙnUwY3@ #c(64ߗx(VT(5ׁ1{U)J}SKnq<8%vuL!bJ 9p>eR1#&OEGqPO=M5Nu%'Oa߹}Z /zy>)m!UۻZ֦1$'Mc$E[Э[)^ np&x9 i'o1F])P{K[) Z-Q]ջ$7}zGJCkx2>`v=>>@zK&|&[0ʨL!<c:#ldphTUz'bLIx&)5A!eSG{RhӫiD=fd1΋rAH uRhv*U Y>XnaJpe;tI`EKL \\(WrP) cwtV; \rݯ^$:*9h}7 |S? :K珑0Oc i(OK'L.餸^hʈY)dcq\wc >X*2_ ^s) K|nmv $_ҙZO L0r|F"tHA%ē{@j>9^gsAேb?<1Wދ&f% 6*b]{e#Y҄IS8 ׯ@OZ y \zøxex W2-4xS#c% "'4!+RA)e HCQ|yJ,p_ӫ:@x6p-u_ rLx)/ҬqY-N1*=Ny}W1<&tgTN({;P]u:u.werp,N <# o=Ko &߮Wz5GWX]`oz7}ʹFVY7ewz%~/~);xs*qD.*ZCW\%74Y!(] ۄHhXjP+JvOҿٴM@]3cȗ}쩿ի87NCyР>5$vp7i2eL| gcz 7V` 긧'Clb^([k mj2;?7J4AЗ2]'Qܾʤ_ dn3"J`/Wο 5+3m#;cZߩw{J _nne{.~NT?_?iu>+>hu:N5Aa$JkrW49{o _6HMcb.hPG&;eJy\%LU6)5H\?jƪ#Ga_Z[*pѬgR?HJMA@U.}RiWpvH,(j]WNRn}u่6z1Nf<遺L6␝g&gU"9}mKem:G@Vw[}J).M~($BSSf[KMAV1 qD//v괰GN+l%U*ˆ77r`aI2OH> 6Ol9馯eDWly)&0ο4| }4lp s;>[&Pѫ{l(bQ ,%ђ+3z L'|)5\.vLlbdeqI,i_[F)bHA׶&0d@ kPPy\D`G+Z t)]*PZdJ [ZlZagrQ$ۿ i-𑺘 ꑈ#sa Ζ8!='yq T_AV* k;CǭLʌ:Lzs ѷ:3\=E?M%a5+{.kg!rC躗>v7ƌljJ?䨀Ey] 1A(?ĭK2!u3FqiQ#`l*\=9R(O@3LhvId$>(`(*KU-DLW,JmS$~̰;%A ٞ xf>b0+NEZ>1|1<;Iի4Z6,0So'ӊA|h,>Mxt 5}a WșlSj49U*ϽL]:xĚ.J l]!h덝>gO`0m-V21^q]KZ:ew9

aR,KU$?8GO}G3ћ /il,F=B Յ`nTȹkG A.ĖB)G ; o}=Z&SHąv&O< D?:NHI4@MLo>*-\4xqaZã45&%+m gEiQeBNs4-Y"J:n>.i!w@~R)QOBi E%҆OK:~{>n@sR5lЎeCM+ikWb3rhkpۯꆆTŭqiʮpfɌ#No8v0&l~T%#Ux&u$xq7>>7cWqvy^%$8"]=s%S7z e9/ 3 eN S$>f'`kJ,,9 /R>HF']ظy¶_8֫*t^$M}/UL54U+j&[Y)dthL`P-IdUSъZM@nќ (4?RNܸ=Jh&e z NYLK)P4p<&F@I/[nөXMgI @'V"huYm_vNW푃{YTߔ`Dh} -("\V[:4S럨c` 5Mzm(.W=NbgW~`xܯyU*ҩ=#d$CM5ɘgmG!MQ]p!?`\JIOkCg1Zwn1`I$nkAZT8ׄO/0JB,CëCCx2hhy3pc|r>l{y(xD̑t6xj&&V]k|%;LʯUg4:ݫ'pٌ%IOtuǛo eloA^D0eٱd 5.`nδ{F!>#8'Ԛ8h~e+lکib F8zWtTvU~x' I(:_DҙẢjKN%"@?]_VZLCOq6ŁdITtU'@"w3hAO|*}akDžC0$Ue~*qAj<΢Lm~i}EhE/>g_na@25M'd0Pb#7o]*>/$8?!_O4]>aq pu!${*m RʏQuY2o,3g=*0l[x}%3& *8/XGf>A&Ay}{NMFco"^6Ԑ]j<9G?o+eHcy`Rc)!I\&>t0 ;l`+,+?/6#<[t9{/ù_f${~v*xFc5XǎLU߈uۊA-l CЭt}ުyb` .ɕEͅJ'ߙW5@f/ & ) ̯lXClR_A؁H7qS$Y#/MjHN])Ү[(,z!>94@;9DZ]NSx^ Dn5HGې*>o)A:ZE_nȩy xCND IKCTըknSIZ;F.|u~+uv\m(H=.ylbAWย˨_bY).xm%x( V*92#MV ۂiVX0ƶҿ6Q]mL:u s4Vێk2\gX /Q􎗘ۛT>cr U9O;$h6KIb0J 0ʊ7]-_:ͦ=@^ Q@/m6Wߋ]^++:AYO f0,nPbO"O^^+YF*? +91ln6Џr=%pwo\!|Y{}rTUu\F^'L/?:!}̋i LQD8|pn k9*F8|cv ݻG ɘx3Y:Xhm97 wdylQi1V-tV|'3*Qf{:cS0|P.E4՗9IY)ڵǘ1nh7:TQaoQ#|{]"Wڟ_eUW[08WbhKw}: t}0nx@bGŌn_6;m4ˌ>d? ȲDx ν}VO=؏pwVeKHʛڴ=z@끗GD=πqxRP݇{f'+iQǢv&,m[&aZ `gV@9hӒ-|^JGגAFxwHciK]"$Ɇru+eAJPN7Fu .5:FǨ7hyr%()2^o4iwwđ<\X(iXOw>/hɐB]81rB aDW!.Q}ˬ K%c\ZRY@v$o3K}\@XRoؒvEVhG6r)I@Jӣ0G4 ㄹ ?` r׶q 2%SD s-)Âdƕ_d*No0 6m1'Z 9A=L,a\*#“>h5-[~:0t% m{o:zKvfiH FBWaШ2|Z\/ 4rLovboa |KVYK4.^wUNUܥǎ|U޵P5LX/ zqVM>1:Yᗱ!<<Y;Phoy<LqZxxMcVn {wp+eе&~_W>?/bN|5vCU.q]6cUG}E|j1wmx!1hj 9`޶> nfoe[@':x/h`Z6_w /u %4qNC?PQp=cHHߜ8pBh0SI0x^˜<(3P=c,M'^`:`a,6pR%64? !6Cuo>+C:ٜ aL@??7$%Ym~c%&B!F?`4o۹GPҀ :[oOTHU0\]$T}NwQz?{>XST6H؄X>` IL|PH?IK~Z-0'vu;N,MrEdFI@ )+ 1q P]4̚WQsy.t_C_|<-ς%=+4u"!2SFntU(ck?"MO̐סXh0-y V7WWƻr;5 ,KNije" ?':@\3iTrF?WlSk)t_RH"n ` /BBjkr]:CR"|t_^ ԅX6Eq. EpNu3z(48T׽`9ضPTIzg/{ Y=Ҍk:DӲd,i>1cu?{Uc1V+!`*?~e__ mw3%^tWJix*%TUSU͇/fvb B[޹p:AiLykR$m&]HU4_BٺdJPdT l@wYAPHk >Z]^F1a9{&ݖ}Q4 sPauZtH&DE5|i ~xF[Q-N  U|PE|ro!&i.(S|yi\pCZ0K. R.ō%j&Kpc!}BQ GU0b2WLBq u?heuxE`T}z8\4D Ԭ (ߑ܀@jCKŻ>/?P Ei#Bx:d5 F)WTԩ;֎=Oj,S}QQT]`>;&OcRym4cZ_؁ p4@\\otWd[6;{̏,ue< :A:D4ȖP-"K ʗ dQXH[@٬'%(:NhD Z*t@L Maho/m5G uLF@g@=B߼,|02Z/p$FngCya9AJ\P=Պ}7rEBzS>W6\$UhA-F)WP[װJ]cH fD>/EDs>hFzN8T7] >w9faC4΄$GyM{*n7:#L'ᓭn+|ؗUIڝ>\*k"CٷWrӯ:#A}&-6kم5t%~7?5gN3土sQ'wo7Z"lr%X %VbW*KmG. AQ!*K߇ &T m#ꏜof@vHQr,*݀B06dzOѮErQu'w%0%*5mJml%Bw X'#f ]g[>g+_kGodR75v.5Y>aRta)$يdJcd$jQBpƿ{4x*HBЛ*fչ g_uyTJ/%O -3'̛ Ȯ 6XqĻ cLa!+`)P,!BªjF*+J IBX-;d)woWy XYEoSd[A[d\.<qp,?*m6Hb_t̄'pCk\L "~={ sZ>$3AWUGK72bS =sQu"6c$83㡽6~)d%fXvElk60ƭ^xH[~)){tLxt/|{tN%'D"8m5kchM?5ȫM.Zss(?J^]f^+F\Pĭ]l)xIM#{ £~-|RJWlc4sNZTScfh6w޼u .q>7:-rtJI)\>jh??HNMZdY)#Tj_m ڍxB0{MCߣD AFj҅ƬOeA wZ8Ui728rG8승V%v- $2뜰Zb| ׏X 9 +oVao@D s Ŋ"Lf'~IȚ[D g7]*ǹNeg'ށ}ՇQ:F M-E'[X*2\u{W,,/ю]mVh/ [?=.vPeB&5$٤R(^q޾K70tf8tjl`E;Q5N^7X4qJmr\7w#N;P9SWsޕXj5f~qnFC/jp tiX 2B ϗS5= D e ͻ+_h!2g@{ ozTjē4\XB`Jn5gp"ѧ g 1B6f}H٣@_l(Xr)UE ?"m >aj/XlE %֠*5u]dQ/b)&E$ &+K~E= C#S)T«\zXb?J = jK"TT"㰮ScuIO {(F⮿*qN<$ 8a~J\ [X"ݴN$)Oz@&7,ʜnd;N5-e/IY i)%Q>^,AҦ^0R6T%RД{.8-`kfRuZfyuY?ҠB $r<5.i?3 0 `cԂ[ c 5.o?z}{=m rB^S0#YoL܎hAB̷_NP맹-tbmm8CJq ? vvsoQDfF#mw_\_>F4Uȩ" ? #q\Z6D}s'LɶֹU&ϳL՗\LvjηJf!5wQcN>d^H5$.rIyuֆ сߢgQw*b 8+;?wu8J%W'aC~n;p0xdq d*FVƺWFu}vЍ] 0]wo||OWF2e1^C/wE9֙M`_;LCgR0)>AZ Jƴw4R\J"`V<#,I{waekMp/nj Jy\R=IJ0ֿ;шO%W] $:bs@4]z<\3hDXN~# e=?_6/mӝn% [yNBSkSLn 'iS Cqq?iBd_<澏jir4=L:T,C fm8dObR_gi2E3*#uI%, ubĸI\[QUN"szWPZ{ݚZ#L(2<6RJMmJj.V IBeL!h0>Fw_Gnp4 Yg/=/X&R'Lrio PGZ2r<{eR:3.$Si…&)<65*0ĝ`+2U 4?p8Uxv1Uct~u;mK1`~z Фr]#9^cVڣ:$%wT*v"\pcxu--@2gh7/4{D[=--|c&H^eJx:>d\['RAori'0`bk(_ZDDWxCZ{Agi<$|W%q7 kj14j*5aH̅^¹ӻ;? T 25b-?NL)*{ E([5NN 0+eKpQG.^ERwST!t<9W0aF-\Ei*B!xIk7;䲳( %NaxS޴.[֎{t|y|\#c=,ͅ IzSXUgy)BDmoJ?U\JdssaGJk=4'\/ҘުA>uXN8.w)o7=#֬;cGU/۹^ο~d5JjX07Em=HzR(+vgO|KZ X݀]uy`&71A:{UXK9/hҸ(+I;xnkO@#C<[\RKu34A6zYW- l0^+3Ȗ j'~2%$_=(hj\q’S؃^6Z{ɳPm cnr׳DPKhUE-4փGG<(YzTúxe2<;*{;Dtޅ&)ܼ}c1ܭҩi^& OlDr* K,:g\㷊Smya8:'i%F탄Dbdp?Eqnn@[LG.cHV˱lj0|uݽ@%dxۈX$hkɵ¡Biƕ ?F $)k*1E z(Lw! bKTlyoT/d\`hh Ӄ26jFe vm e "4m9?/zӅȆYgrw#FPm,JQ1iux `9̤_I4řI[ ΑHM\S@x+ [։v;̨wyzisKJЅ 6A{d6洽)r ;9䉤ǻ<꣗on4ENtç_.crW&F%xgf]vxk}HJX29%e4C[Eؠ[zsD OK({CPt1Ì ?vi!,_6(;XjH~o*gP[e/1--|&(=P!TÿL:n\iIV^Xtߕ*~7z1 9jWy% wܕE<˯zd2k]f UZ+18")U֔V!Q\:]ECU̇gYLY0F)LmP*I_." S icH-$%W ~ s$CO24pӸ!)Tbl2KXW!<@uPMQY-H`.*JY"UY㒨S6x Rb8<)wH."зoVV.uZqtHj;[.A>|$j68Z a875%~)" oGoEe݀D>@ЌmZo4霱Kx ##P5:y=X^&-ls0<4cQM΃%clg>\DˎxGȍ(nU.Rex&akrSoC4܄ñm7  ͅI8ڱ2P}buoY#T0~|C<$x*^0SC{`>1,Ojk7ZZC3Y~GU{[Վ! dkvy+`/Ivڪa=Յa#=HC9<$0,d k pFU@?0X~BWE=7pc8}dwp}B87Re+)N.(HTRaVޣ:`6ZBʳxOMQX?:+*w"4)\ {k ڛ6rlV ֖?zT `jWlOH 7#@5G+1uظ;Jko{4I‡lQQ@Cyu3 B(&oWǶDoGT0*ʝ̕886YT\6y)[J=Zs "i5cO?KKvt T[cY$>r㣤fRzq_U6[5;u**L-h!H9zn _!{ Ņ|S'Q|,G,ji5%ӇĉQcH # -6@cNq\'@w<{cџ=%-eA-iw~E “T13&酔:ݎ<F3 )}"DT-< !1}2MNhK-޸zW5^5+&nL25x&qR}˸%K \V)H_.o y4gip#N)iKZ`-42WZ~w{h& *_oxɓ!uūL_+fH]#kƆO1%]uA*zL⨚F[e9pmYuRb8VE/9, (ߔ0&:KO=8>@El-{!4)( 8`nn}6:mPOeq "0[KL dXPس”g\ž;W1D>h}]wKw}[}:?C̻?3* Y2ӈ'6?_BO)2JdW驭f!^NمBQ4f=mq"?a*DVj4D@9Ik%ς-s`.4"#HDJqRZ*O@k.ldse4IM@ y k^=y|픕1deɎx̘_  ?&L1%_ڙOϵ6bC-BQ(Ǻ<'c$%!STH+#z!U3ͣI`2e ^Q V=,CD[.61k.M "05mjb97)bu*)% !:ՇQfӺ?::|;~2uBfя :%v;"a*,^IN,0js6c҇~">B>) L"^ )&pGNa48 C O"ѲzQUYL#__=y"4G4/P2f3lٲ ~_'Ġs$Gt 2܇M y;"^k`*d߰bY^$VB[Xڃ}ORp18ZlܽJr@F;[%)T$z7G "eua)+sLܔ{m]jE(0Q ƸRKcF'aq = ͐0yo8cV[r&ɧBW SF"jXO,"nQZ{>)k4D7:.{HVɘYerw螸[`Co am<`NFϗMɛNoCF^RV}bsl@ׁ ܮ⛨Cm*9f}U)]{8 pkPZ,o9]k N+Su(yFޢ8 ^1 1~=B^L<}ٛ[Y9?3f*y]h׫aߐ~=Į{T:¼N,qRj `v52;_rbиԐ=6:4T٣μ]7Hc xpq$K3ɋv8afÜ6 8C4mw ott ',w 4FU7*iԛ#7}ϕp^dt+`="qNȁ?/{!vGa`;.%h0̰}-:wOS;X'TXG9yih E*6$P% jC($cRv˥}j:8r~-98܁i:1KR(|?p.R `gM{h&?-,'13ĕ {vRu۬3Nk3EsDx'ʑ[~+KXc&7T0lmintMs*t=3LSkc*QQʨ.oшh on49CϖsgY?7kg:#6A3kG/*Um{'4t%~\4Ij'ˤ*$=!C’NwfH b Z! _{ Aϋ{~oeg{+N_6/r]д @ YM1s'MI>B?KPBڶ.[׵ j߼6R Wt=C%kA׮&5fsjڨ~fI^ԟf>q]Fh`G"RkK v8yA4/]QJ<_'%5˴qH؉]O)3x P=> (6}}A|SUY7~*q ZB>،h@bX4#'MHN8.vlpܟ)rSdG8ݍR b_^Hx0qi|N3 {9ܷjPzq!"![MzkںZZjι}zw*(ii.L_~L!#ڸ$9Q],ƩE,̮)CԂ*Ze]]$mԀnt:8.5Jl'LN?';?$e';oMadq(وܢf'ae{ώEH?R.22/R9sR@+OÕG箥!^fԀ X4vE )Wld?euK7g lR|GWZV:X<6e?U= XHp _)bֹ>zx;MKphz>}uM ɠ1 ,2ߗTݑBͮ}{%1=4%Db9̷YaG +);gmjj˃Q s>\[FS7ˎKPiNAŪ'SpAdpAcJ̒{sB{b@ޱHy97@򂫆g #F[&5s`[q02l |_xҘ xeCN.wz@G]OUv |1)k^K\FOt? JX uPlz"mz|-*LdtS/W|6Py m;9@H{;LtU؁܏ov2U 0A{1CХ'"o4[E|pSm>]obm0H*țJ%Z?ړH܈'쀄4a!%H^iWoItC 5/:_~[v^+/6 "=Hg0St8C0T@4^&҃я#2 d$7劸xUkn*d2yY= I>cje#mŒUZZb艰PQ*0rpުzl $S(Ȓ:uw6~dQZ4& JǕiBX`/ѫɅg?մ Y]=sӺT!p_Mi|^ѬJ\: [=hRNPUg=:1=rͰL'5͗_D;pL&xWS ONK^_SOF.)ů۳!-=>OJWnK?H93ծlO+bSć9O5[ K.,BÝsX`^.5˞7)Chº -';bFIKJJD29a5ڒaRS&V--\x"Fn* T7+Xf}?y# \UL /=jhvf#@vj*RsEOD5_FΎB7~[o޵Δ* ѵSy17٘1Ll))8'fnBFӇ9&ÌA!5(X{9^&$#rFKmu,d~ 4>T'ۉTW PT\=2VkN9v3$\m_ZE/â.R OF<2v?)i+K&yDVz p!3Wm8?zK3i ":^7) aalo0TW>e0,fp2y3q6Ż/7)2* []RTI6ˊi%͆S1ˋb܏q_Oo/)BzezIR^vU8ncCCNd\T Eg{S%[X+-븦}y]l >⪖^Xx]Ìr u-k$\E=d?G/F(Jk:*~v'}1d,,gU@r(Xaq-Ά*5 xkhr͂,__rCU mAc}Ro!OgJͦ\SmC3*&ql;׷sZ DtL`2J%~+zЁ;2֫sп idܔyhor#NdΙ^ogaplޡ~Nh@6cPrleӺت| 5/&W|q̽Kr ֠$^B 箽&7Lɰπ}%OP> f% ,Xnc^0l{5'2؋El%8>1-8%|nU=a0~\H:\svWѪnK*Ⰹqh˥UcxP6%²N%~6ݟ>}n e検s*>FIFs22,Uyw185{ꮁBAOWlpZE|S/5aU)Z!aquDݮ[$^ﯜExE'lBN|qB<˕L fYlVUM54f`#D3D/E pGik)C["ah ˗2VA[؎v@3uKyV,*$WbRЯE}$}w29/E,>~VPA$-<+Uz׈N K~yww9c OKb!' PFx E,Jf?0 tm}k%e~<,;bwO(Ӌ.Mf}v8|Š6#"K8><Ɨ^I7ŭݛDJFlo_ᠻzN :~mю:OxD~>y?N,Cvގ FziTua{};Θ hK:{L k Y[a&8MMG S$T($%Ѯa3<!D׷MNi‚K3^yKcTW2T96e[v|~iEc$͇3/ ԄRL@Ay"zbA6H&0fdypE4^/].ahXә KX˔[^wcr/G>M+uI91{Mc lXVFcIZh#E|{8.mzyfs7:aE!&$NBüȗz#} ;lYF̂ /'q{$e?ЧS|ghfK[RTn$Q2kj|#OL=]:V:98J-zv8X:*x~k搞w2&WܒQL Ȥw3ŝ( ~Aԁou.aĮO`SGlm7iE(&EF=\IAJs.7 #e`lJFBU+;}(J YFyty-)I9#~q~sXtaTF;짓iQQ5P7 41[kQz|8SsعlGy;5s?UgAYʬ]4x4x:d;noGQaJt13 wmw_\xm17*msZ B"a*)wk.SFXӠ1 Į"҄Qs a%{#GWj'Jf[Œ*=R@e`}u`AOO.jfY-֍rȁeD|U/5^ƒđ05H, |o 'S)S. M֟ b.>55e_7B]h /22Z,VyW VU44 p>6p,4},Z* ]'%/GLj# kĩ={Ipeҵ6ޫMOmC{ⶁ"]ahB"F-lf]7 ;{r*T>]*ۗ阿t / RBʋ~JTaqa=Z#&X~x}!O-д5sr]4i~M YBMݬ,Kb 0{;>":C50@P:R>@'Yݐ??JsH!|:ijhi8 BlP2r.^ϴ3N '+rMkgL`q;)*eE#>&֛u>Ʃ6:&ACP۞[p/rM0{AQ1JDϵ(6Gp'-$EĩwUȫ<: l䀥G^j\?xQje|ƹz1҃DD;bìwU=]Bu 8|{f[ O/do +{`@r4VLܡ2k[%{:!Erux'HI?Y3ȿ\o-H/2O,# "foOjP![R>zXiqHPxx 8XэcBI66h~ZT}v502bn[9:3-fYN{gx'Sq(A>j{EM|1D%NgT 2 }bj瓾`k#-FhuvľVSXXPkyR#_g #n5" M%b D3xBi.A R/0JLb'50,H6/LRqt#4Ά8m/0H7& L߽;% ys/ܬzSИ}-V'${;n!"W@ɴkz6;Hm "f5T>JU t m/uSJoŠ!LӯJǙl{E.ʺ͂-pV$WC!ꠔxp@|~KN%D9MrfU90GnsC,ikNo?PIz`\#oX)T.5_2E6̸^ "ꨩW8]zf5߁:B~R8^92߇)*3q,>$ fء%:Y!UGLEj@#E 4@̃ l+qk BV)@y%7J6f6I6}o3 u[V v6xg-Z؁VX!fR/e/'TM< Uw&1m5p>*2ڋe wPE^;kWw':GF Ik 0Pc0$RßQ{6uV]wjo=23fo#!B->oa =py's\ieG{B|׏Z%]?{Mƨ13i4J|z`Zx$F&lCLcP]eZLMf$s6 =87+\;ͤ_Ocd Ζ2ԥ7"t"2Fꟃ_&` l wF* [X/dpw糩IV,SI۴h{йp^4׳0NSV  اM+"PY̦ ڴvZo`6 lMc0KUNU#}N I>ҁܼX!Ԡs׫c/;28 "TNPe8:~KA[{ij qF>1,}O_.*$XqX1iC&5H9t xZ[{3*⚏jϷ^^3\@^H qBWE^S׫֥Äsl8튯i,wNsFTW^!K9) =2E3hxUkj!,g yӪ ^&ەqu_ _!nC Cڣ-O;$?e4Yc6.-#JbںKa&5jknSKLM9%4Pi2?8` Ff޸4:'U-@6-C_iʾVJO5q&v츈{闅/j TdntP"Ao&2J&q%Vjrb -Sa 6Q$n}K@ #Pn|g=]AUl,&>Ƭal/"vO@_sSț.Uf5sQ?粇7Q1>؏DUŻg횲!OQ?>NXtnaXCV W^(N6;6s,t[1"&LJqc*hd*KmS4kt^T;!<EU@(ds{&^HN`Dp8ݎ'b.Kĩ%w᷃慺bU3?@h{Y(&rA@=/W0]d 3堞G,!CǗ{W< f43P㫺pYIHv:*cDjԯ[о">N چrGCȼ tjRZ _YU zPJ,%Y1SC/VR!dDhck^昼ⷠ>쫧%ݨEiBS(UԭVOQ3p5HO:48{^,EǠ?B4%n]d*Qq(6-hLd\A#lS0OO9ޕ$ÁԶPrEy߰ة@#0]-+'OVުQ_4cL׮f?4g`G:{KQ-h)-∑ T:ƍ GJ:'.ND7PUV9qˆ,Z|$\O3 T,("ynfdHs78faCE LiQbN]$9`G |V5ɋKZ&Xtz,JhuDzZ[ZVTʾ]E~ rc :?Al!c"/lm uTj3=?L>x(d.kjr}YɈ7UB CpQ&_aXDVqZo)Le#1B%pQ&JM}9pS!%9nF5^⭶xʷHXx2B,D#6y 6 N>y>uZv/vٳAζNR~jp52%f{ë l8BvY|@8t75 ԧ ~'o^23jSlW&9 Sj)=gOP̘.F}fP h{x>^áyJdP3שe.Z.u;C 4-CӘ;Ԗ 6tXC(l'Y|tLC 'sF;?ڑpo~}U;!شNuQ<8|02T[<>]E{iD s Q9YGGF^QKDSC_0'2|? j<~VZ>C~S_N#QPjf!&ܬv;eeiI5"ɚa/a%N.2A 36 eÖȗ:s۵G ~8.׆Cj\.lFbz1>3aUᖈ;i,tf[ኴyX7Z-Ġ<鳓OT' ;XܷeP=om~`Us5띥#ts,Yܿ𑱲6<ÉngI3iI֮R83HBFL3 Im;PQDzq֌%zMeq%_,;&`?-]FWy64uBnAE=҂u -XS)/>R91@RIZ)H dIxf3"ِχLN\h~'{ EΣm4JNufI{L$0UjhHܕRKX!ZgۘE}%qF)MDb! cXH!{<_ DF*6!QQLٻLBbQ$2 >kUĄbFv*iLv^YiZʭoI/;$S兣m/MHÁQ2IW8ҏ%wJi1Gm%*b4O[&ɦ|Hh8W)lhyElg^wB#drkח A0mB#$0m~KS Sf*`28~JfO!0s<M95y"Ř( Fp-D!F潟nːY0/67b=,v9?OEo { QM`avvhi)`>?N7Kzho's0!om0jlhMR| Vs"c1fQD.“3lIy"h 2Yaa;]#ͷ=-a)i?,~X.$?BDjj{DhMM\(SAsu NCe~9œ7 YVzwL_qBXSaL"b6?k2CR>+bhF@|Jϙ O*z24r⬉VK&YH Flݜw-)dC,/Qby$ `*_{c.;y_eО:9 U鯞Lђ`V)V"93"GK%.(w?UR0#TQ%z# E&|հ +B ȳZ>1FkC5C}-XFv]/eג^@yr<4"ܮ݅0=RܻjO`3;\11Pi}0G;D'(89 ̾ux~KWƹ R]]ae#A6> ㅮ)M|+`?m0g2űdl_c=ѩ̄?|U:T-J.p~Mz("JxP]=%z(x6Ɂ؞PR.Xk>睚fҟ䎆seڜoCm1@Ʊ5S|EQDeP[Y[}AYƱ#65Z}6sr,Sl :#VdntUbLᄜ41AտZ3g*SsT& :ֻ¾m D0}0&ay7-v ߄bƛt{/p@-gőJyqW7HFH)Ĥz=C16cwH!cdCAiĽ,XONF`GeN+4t6x$ՆL)۞9_bސ1#K:L"31^fN|A1t2/ȄKiCMXsAXϽeq<_|BZ>Tڍ/,_JƄ+n!zJ @˖re5>FȱSwְ^b6D%CQqԥ0t4 G I࣌iK}e<ѳ8_K(5i&'";z51g%@\&[$4X pnBo"By$fWG&,@rE-^nw /+4x4 @2Bb{#VRɯ(r-{xXVDՕ_6u(-Mɻ{@$TcBVj,OKxVSZ +`/{^PYcԗ?K;79 Z 9*;_ e\baz+37[]o`Э~1+-&/T {&i/GH 菺lEvI2/߳kh'^E-"|LKLǖvcA,OuuY?neL/40T9O0KvD)\`$EZ"`HbGSO8PlqZePC=\-D;cWҴV}c/N۟Aa{جͫ>Ԥu'/Ydr_y1_V2u&Gn{5z<d6Diwڀ)u;Eс~x뻌4Guz?IE]gOČqIXxT31%x5)71XOS]y %.cRj1BV,.^~zl FGkɦ"hL~KF0 wsI𗱈{QVbl(xo@9(sZx 1-Q8)OO{q45oG =Sw g:s(h>dsu?)E~HOίrYc5Im!c[ op ̛asn;N@|#.t Ix(A\:OZܨ-{q#hrb>_-S<%$L1f5ɣtVLY(υzʎ b›dNt0M^gg]Lx;a#/ȃOJv±mlV91~w.0>aƢJ̠FF\bj\'IlI'4tPM_DZJjq}01 6asewW)x1eu׌[۽VKxu<˾?R`=N_ClLw"0Jתr\{"ЄLy>1$_zh\(̽&KpS-,X6Heg8IKBqhs~^q$tk f{wI\ZuU1q[ p؀?;Qc6p%Hگ;va BD'{\Sֆ *D$L %*lh& GjUqRR݉U-JTiJO~) *ȭC@YF[ $_K%YZ?Ks4F:uDv>H/]z cnQGTyɴf{wi-bLK*n%vC4H /+WILA>yYz]݀TQ>V5#LDk37I(2rkcp?(Q;zYΙX"e|1YْZNuͭi u9֧WR~=Z% όRÄ@kJjJ:QV:Pḟ!W?'by[m"Wb-=@1YGL$g L!w4r-fooA s$]}^1UϰVw`./hYM揭G8dʛYcY`(z8ۜfk] ;ֳ͍2F<7s %R]Fc9R㩵)[ݎz/ߖ :y<ê%Ae23q&)y( i;8]lt;_9΋QDvҥxXِa[(aiY4a"VR1#be0j:]xR|z= @B+填N!6aR?-7 Mѥ|7缉&N/ 52$eQLZHnBqoFt`,0?MD`P~}'B@G};u.m5̜~q-xo("@xR/8U?`N䟘iЮ0cwCbr8>}%P4Inc: 眒k3\âgmqZq-GM a V-nPH44k)X ,!u ~Txt/򂷽C<1B  i3˃!0{+bדuuT(`G(4)ᏽiy%Xda3~bM5dLhx uIW,? 9HS[,5Lj"i@\3FyЩϟ ڟEq˙٦!,.ﰎ2.tU׋8h[M,p/jǵ!NHA*7stjunşzܛag1k IMؼmC; T*İ&Djw8N^^&|=~?DL띜%>*Dq.QR}L2 + )o3xsWܱ.G`#D1-C;ע$Bc>Ni2hN ʅo`UmP:[Kp돗"\F9Y;AFSҊI`]K[evg@%gܰu>YJ8)]Dr}&r9\" m{@дhZWatj _Mr\ȅ ןNgchഎ."O_SSi狭ϟ*(Shp!3DlAݒ"@s~;Ƿ;+a,lDP"@ņY% 2hK] jj"mc@}`^*;JYf8v$ʅ_DAWo'oրrf_a _:{ h u 1{(qdU@Lh U{ 7fud>|W.ٔWw`a18Adk'\|5,;9RPm _Δե9.^\8m>wkJY-X, 7;dL#O+8Y bl֨*TѰ6E7 ,RV䝻$P[xܜ,f_GNJ<Ƥo:!m@kr2%ՙfL΁X P§^1 Kl?>+ș{Oœ]ou"!jk? z_khp2rHØ$툹 kL t]הjG[,㝢gVG8A!Z 00?cj6sۤlߓ "Ka9aM9weX?rDHL[! Įu(; XwlT4C`JkSfLCdj)MDJ#6e:7!eof&&3˶Ti߽. u XȨ ®ML-E:>zL쾾͑,IW9sV!Ymcx;itd, P?x|Q|~ e+uh[=#Y2@o.͊O0CM" AGtK0˜߄DOӏe<&obXLu<0L P՗gҶy(62nMR *M vu]{MY{ %h54]ƕWtQ98U}I%C ; ABoR90CZTCj:2f@CQatDQUaCZ?$n+2*~A9?QXu9 G# DmI<_vOWO ks0yKRUdy0FvoWH e,x(vBA0L^|`T}J7)/g!sGi\QIVKRC2H.QKH%{?V\ݯ]"R`N+4@h=[4Pua"=de")[YL{w`J75_NY H uU%)owEdyǠ~m.لY}?p&Z 昍u_>sd WEMwlsʃ,3Q:ԇW1NioHC8ytM^Ex/_Z(u2RI\).dxL.&Iɠ'Ն嵱)v>XoO-o.;;WPH8C=⨹wݍb|b-Nl280ZO5H1z1Qk5{.ݜƳvlA'KPD{,L)'p.*8(]4z _#-ܖ3I.Mgh-sX ~o/BJtnĤYb e6cll->|NrkuZۯ4;BIn]אlh\4gH!F `$d;Xtx&ђ\Û:dƿc"(Ͼ^N?td`gy]`(-!^R4[ٜ.R=#=CM$=]3-֦\Ĺ9HhB=Rq[}K3M] 5[g$Y?'uoM~5as0ʝ4,c\qyKT1.$tnC#Xi8hx4$ pwhd -UW>[cܠzϽoL<`%M*f^U~Odꦬ9`^Tvᛑ;8ļЍ>QqfUt~BsSTn1 ᩣHW;d$>IO+?hZnMԏ|T]±o ;܉h?-AٛxLWuD ƶ$mXJYv~-mY܌:d؁t#>]svA((0=ZOg N[&ist3*=Pwȴ"wMdWz͑J_ )x>EwCXF~C;cE-"l, Ԝ4 xw~(erOf{0i`/][{AWdk;#朑B8&w>Yo_pX2>JI EP&| ޔkoɰQv`Y}Kk9  @܎Np~5"ViB+tCّJ ^.6f;QGkDl# *0 sD:[JALJ[ܿX"宸mcK3X Fhlt 4<(k@ՌPo,(P=^ 9C!Jq¿qd~`i *O63/ .3wfXG#/ [̀x/C[7)7$$1'Ӗʔ0H- k}P~N4PSfa`^yr EY6ĦiS{R?dGv}BEg,ֱD EU N3ꬭb9J&Q$q9֜F{s_؞HC,M##GD;\`j'k7S0[ʗ7GQs cG} ց&|X0S_+QqZqE#D.˹>Jq{~vٟtbw-"eٌ[KD CfgVS0X]CsjscIe ;}`CWȓg,pt ie)zVp5huƴƮ{U$Y\Oe m-ʼL;٢(YtbQ1u\uew~ ˁYצ3}Jfr~boBǭn~]- :cGy!uIuI"I|# ?biL!t @l݅|TRwTS,"&+BO| ~Vqc! L b 9od{K`5w݇r廫ƋPqh}$=gy)W_w3H)!#3xWןC>Bcܷ?7Ѩ( ;Wbx'[B]ɓq|.Sv*B0T$!U/Nnoc<"~w (s,/Y3NoUͼTV O,3-s㡢bO:c 7j=630[)Kr>! rۗ{kaS6ë/ȝXR1~ %CE>v/tnj J>kE٭< b;2>0&I2P3U8O"+ASscE8n[yId2gGϜ3$ذR3~6 3Y48M6 FIɍne7y/xG)(}ӃTLVwjfԞF6ߡE(%.2Vך䓺tᡎgmB>fWc&9@r|GOLuq|C>@`],oUc`OL&>k3ֳ_U$_N&zb¾`"mV(T\9y!$c|_|jܣf '׻J孎 Pb}Wdn@i^uk c^\ y.&='.j\)׽h_`d{ˮUsK,/oUai+0Nz$Fƻ0w)niCŶp3r-T3)3l$ iaDa6RԸ^|A"{4sbgbmL+-gHS᩸$ƣɷ)l]>'9hkT:w2lDN L4.̡?T ֦B aCR9jz;V`NG1I&/NxZF#;7z}VG8ca; $gG׎H:Ԋƕyyu9KPPMh<>zrD$Ǘ93lwZ4Z!G*`ePfRsBȔ uf~'`όe#qe "Ym,gʤҮXMۙ)Y4Ξ\0fh"x!SP] sH3^qrhnuMv^6VU׹'QH;͕ A( |j,=Vr[-$ޒM^a}rSf \z1 GY~,@!Сx %?h_:lgDZAu? !NG %Y$|TBw:YW5ֻLnPM}^f\FIH:ު 5\_06vUM7_QNQEa,gu eNbRؕF!Enwb"y@S ?$5K_R2wᴈ߈$(<e%"zВ={pSk"qP땁L1K*rb5v(IC)Wp=?y*%&812'X`P~ۜwB&+ewЅ$RHdhbq-׿)^NƤDS\ +7'ʓ4#m\cX߽/ yXt:k}tnLMhd?< -Y[F7lI`dD3gҍ:4+ ?fi\f!U׉A;e~֒w!ÉhI"")y%K| nmC䙔N?B@$Zd<۬x?T->Ҁ! +p!x ~{@]Cn,euv둴.E'i+ۆQSFqxʨ/4 ][%У=Z^m.uI 79 ΄U=I) 0^ɍkT]FJKְMMR \>u,rXk=ەIؑSv_$K@ha&0}q;R xjҍ*3݁l!KS4װZ%^7#ELKFo,Ne#B%@I )v]Ap 8z [!jBMi 28KcM]Ŕ;EzՔ<쎣+Oɖ]+ nD7kƮ<̎LDHZ{$̕qv|MDTEG٠t4z|Ts\ ؄_b>ePA#jsDan\iƋW]cCN4_⾤rz+ymTǭ V"rnJ4(MbJԉ6 ncAuduFF=DӀ"#&H8a- vt| m]΅RFFYwF} v &E?+˹F2%ƇXJ/A9ujw5U fu{F_qnjk*D;X۔EihG2; p.MauM1_L]ߝU%;m 6w}A#0xZM*D9`P`o2" VI 1M92  p3U\1՛$ bb![ydr5;HW=s}5 xi)|31͗#aKlsSZ"|H iCp>nw@H6B dXK0EOO'j"C% ;}rرI޲? r(g~8ѣB2[ҟDx g1ŏ뼼8㡡ckzlVץϙ͕}X,փ,$s:fő49LX3 Ho>AZo"0aa{-{:Js,hf^$ aKt N&sWch^@@ '! ~O^s溎bVK)q_daƑ?MHn"ْ$0)ia@'`!G96L΅/;oŶx2=<j>3˧XT&,{ ޯa;<=秹MAFR6R [L8w=k_MZDvW:b`096NZڞӫW 'C <)Y<^a4"߹ߨqۼ(-RMWz<yIW:`,B=PuGlHObz^ܘ+3RhX@a6EE ¢&o4¶G43?'9$?B}+q+eYyJ$g𤊸&Tto֙Ř>WgvQOq% LR40I ςNbNl:v("g;u1a?,E'_EOxSdH}=)=dk`7ߢ{A`X@-ZwK;t-ޕ9lDMZρ rmWl]`oƵlgiß]@h>h^"솅BĈeFFz:$Ě#M9\63TCxXZ4wT5c -ɯSC MXx(Y3 +,vܥӾ#ĹDOĮDF24P0В !jgXo՗ x(]no߯x Z=? pkУ  qZlcxT?|U ?8+taw:#=^#CW:$ȱ@̢ $ݘ9oo<߁MA@L eVV5colxHiufz%r,;<^~KB2v[lC}\jfSyV/u`}?frOR૲O_wQ8Z7KaӳQ.^i  uQД""}¶NDryg:猜MTـN[q8޾ ȷa&@7﫦z3Q?`Gߒl4'3 N7SzMp )W~P2,&S=ww >a+HڌE%z*^S(J-{T5=w#ST%Ʋ8bl@IbRnWBH}tрkƓ5pP|QkdГrR=~j{ݨhT7)b(koT,LID,, H=c!ၰxw;FaĶyی"E #ٟeMߣLGyk\7gӔ#<Fh> $V {TItOUG, g`$'Zg FRYIд[)`=?JKX8N `*V e_΂9}ƽ1>+%=66bi`M,kBv]OSKa~W#~} s+|wj+S,ǁ$!!Nr;,.+$^J0E wTR%әvw4iӅ+?׊jղ> XP$`/jRgY;\ƊmQZ%%7S_t_#~EXF1N8E511 vUv Q|B>{}&EL_(Y7;|muId[ 89 A1 (z+նTs2 (pq[>X1}M5q2c@\{RC?o6'+4TUB!D*^mx&͊nP0%; L$l2kh_'،x*!N\LS`1eévP%_5g*āfK~~/ B*/e&pf &F@Ц.^*,B[k৽c{"lPV_4HhNulʇ{ZKU!F]MKܵ.UPL o3օ^mj!3̤ƁB,DoZLT JHkR$d n@*;B?̐}i=7eBt>j-([2 ~-ur*+'K0rh㴍9~9OGWLNԑ`!ݫ88^M-ኃ*cZ܀ғ"'e˟~Qz"3 me4{f?qLۉb SDar|u.hU%)pDRxD@Ĕ)}_"%GSFlq4/ɇxp*>.Ajfd1Qd&Ϊfk쓜Uu=8^8AeDqlwa>xk~,yG'|%LAi⛅nK/k٨#L- @Mg\*m6ӊ K:_`K ^~9:$N:Ӓme4xj,U~#MiEVą g#f)J|DŽn}oEUW*b QN =+Qi$IC5/ST7h_QI;3L T"=n{{YܔԶљ6DoK"K@5FI'ؼ دETv!X".qs&3Fۍ\&nM3Hs8m4P ][qR* XRwW;0,g,-DA*&K7B/-8 f˞GKQ``rCgo}2]U'N8de}g 3gmJZZ_Aj Wƾ(D%Z<_F֔ ,;Z"BXS-XaW<ߢk@-$"+$W@߳mXs`iYKqddK,q Gϫ5jr,$-r 7@Q9Dvp*<EnOkRpo3:\٫ lTpaY@lR^eMgG\τ 5SyD]dhP25N. i,BA;RUV_<:5_qIVUBV WU9mCsׅ_@5Zd3$V3vp #K_>V 9S Ht3caύ%F$7kI+7|IS-ߝbIYP~Oa ͜r)JI9lrU ~tQWku "%pm~Y?nDY!0]h0\E?ݑC$2쮷 PXҬ0`6ϛ"b2TE(Уe}_KWUd䢲ѯCK1^jceVۘȮ1u܈5O+/!mMW9ׁPdˣY((XMx NjW0.'7j/v%i~-ވyОwzf|.b.4wmC?τI6VrB@DKeu> \GIHp ގd tcAH8]L-kٖ3*;>1̚I4f?)#iC҉\ET04^UX 9sv:2/+;f(a1c|ZZ}yv'*R9(zNj=y/=z, 4k'x-pc0ߵK Y7e'S).?HU/~78{Rpdc D~ e:K!ѯ]ή}\: Hfs<@Uv܆p6Q/S5+L_(z,g-ؿpWsܖYlcGZcQFdᾛzl|6𛺃QXѲC(Fz)x 3ZCuJWjvC`azHuVKcf蚎\ͫ?=F)c+W@Oqk&dSN_ǶK4shVCV)4#S! ju'G/pe8׻3p\q_҆3.~,=2@y_"d/fZ\Zyl=Bǿ˼ hʆӉǶfܠ!Nj!yXl>s֫d˞DzqOa Β K`&UJ;LJ%E Ĭ p M bGRe6} QQ6hޡʼ}J~VeZ̯S֧ (ٍs[/8[ QpҁH{]DN+j^8*Z'p j(Oh6Ѡ9ܤQ}֣&h i70`43-rmƂRO m@iv&v[Thgf}P#E$&+}xs!Y&ؤ(qm[{&tNnpNb&ށImt G3V%/w{lNǪO3Q8U<+k !2^,Aža@K@ TpPk.s~UBYe1ʡT#@Og-:M&f+KUyOgIi3 s80oxR~*wt0=&ljn3fl>:c _a/@ iEAm4>{&? +wF ?Gjɵ_r?|v1e KJ*?Nj1QٜHL~V!tGo_wi#Ed,3rcb Ĝ?$% a@7o2UL:jXPZ Y?$>uQ E8Zh݆pc0 (⴦v2ye Gx\M%^t` 1[5 {ȝ%B\u8`bF&ƌx#coS"UE&`M$'N.|\D"4YlCӖTPBsI?ٳIL;Σ$</Lw 7{"MKůE-W` i!>bʆQOD a`s'/Yz\bњMY@[z "9h o-<]zu{Y5_OAhՔ3 hx FLa ;]WT!B:%P/# JK?dtnފBe gd3Be@ksxPt7 suU3Mcv8H~;Vj={8u&B7^t=z\ rODzZQ<*uШTEXy75Tħd37O[D&_US.a#`wc|D{{Xx^l !%lŸSP)?&KohI!j+S4 Ieh{Қx_^&֡ᇈ-S4"*1K4[iO5qfcq=^Srxm6\e7 Nt󴉁MjdAӏu3zͽT:{{FwY(CG$=ͱ*(_>9ބNT` r T]Mx'G61!6Vw{F W_PC߫z 7^Wj–(x;PMx ̋8ln !#s T۬"f%tHjӣ#Wױ5,^K՚>&?7 &ާg3ٻcv^n |vSщGzɚ9M#MP" S*8 MPgZ 8xr{ED %L΢=urƶB^(LRх`8>DچSIq0Zܞ6]cJ٤e! .-k$.xO<{b)!nР߆&)wkw :T VL8 'v<$Y$ ~R# x(ڲlA%lǏuZVH`qm??|;S޿&o퓯b0W ~a&Nٚ'CſG8%?I1"F5#MpՂM>;N.O`d,-?DՌZ"GsiN٬-(-e\J7mN\q8xZNqbҁOJ8vVk;;7!V`ȿ7qp&"2/WaCBaw)A!ޒF b5/\hF:Fd$: 5%evL:A+E*S G4]깩܁ޣA㈁~T@ ۠Ss{F{BK 7}&2#튬$?Yն[<۠5HxN^wUFzTpf6372>F6ڦ0 24Im[ȉ Di`PQG2zl!Gu+ⓔ B֠Wef.t_ "pKlTMm/b2nn`@(d䇳wB0)>NG+_`Ȼ9=`j]}̢ R/ w$eo87ᕨy?}4.M3Lc [V<$n:7Twav*mE1)$<}Xë7ht >w _/(9_$xrN2ZT ΏIpduC"©le\}!.ѭM$' SZ8:Mr,vVеLJ GSM84,7'V0DI-}.$ڝa $tL,~&f :FĜfb_v\zQ{Gv8IGX#K(8ruO+3F>!0H?Y,]Ċ&R<룅m9~ !I}ت.0KƲcwbs'!DB4UkƢ/IiZCz;#d;(=j lim~.yg|޹"drc'ҳxƞȇ6{5~2z y6W˼;oYHmA뀐gs?*O6xx/d.+^ b}' 6]"&_`)c Yt%2u'8TïM\'h//\))Faakm/B! FJ}"D=~['q\-?92?KēAӑgRyƚ $bsy!#y~޺ԚA[$7!_∥t?pX1R`ԓ?%g"UX=R.$8Q"<^7DPsrMrbzu6 ]<(N<2QhQuQ$>Z%xw6:j.P>Yrھ* E_ bDb&r pӳn6pPmO/̐Ҕ24a)ݹܗ{]ʵ`\8M+dCZfh" K45ގu74%]8kG4BaιopHN[0|'%Fce6ÀY`h:VdPkMsجIB* !MJxw[2'8NYVPuB4e9Zy'P@Nu)Q<5xb ņa 3 ꜵ2?h`C|XHΑ@ kmc{ {ԗQUcVJn+YDw }Ӏ@Vle\v]v} C} u%yԓ#HyC~Zq DzS׶pyd5)ڧ1(4`͵3G@-5Nªe. E$r4+-jc$źY'#BY69I0M-3I6cp) Ppo,: Vȋv5{OxO ,}fnϵbE?*㺼H{3*|Howir_J~E9t ݔ&B.)X `hN{i"UH[kܱ}A3 oG F`fq_(=0:4TNT0w+J8$;[酒,RL6 ۣJ%M tfRccS񾋏eE'*ŇMÒƌ[SVf3nFuH%\V_ҨJU5խŎz#KgpoƏLP!jp@[ѹU8(86^." 'xnaF0$CQ/ Y`&D䧻䱔\%By:!]@d,?eCَqU]OoC"R wa\.KMib^.P(V> JlIZ^7Ϡd}5a )3I-Q a#aMo?z Qb߂焇eVkt/$i߼Xv1O'^mv"ѵ`v W36Uf1E/tak=4|30bȚi?Ę8>2^RseTum3mþ`֍?g*sp]RK= _&LMLD*Iz/_jCllYj"KY>Q{M .4fZ EQ:gݤ5Q=E*IAok/nJ0fQCyzGpl h<,S]ife`If2G'8* "MD"!8V%7 h/9SeY/ԣXGAi98/U6D? )'!ymlkmyxC>e@T m2qD}OəI0z.4!57.^wNFg.%w]`v"1J dʹu== y~͖L)C)WaRs述2 ڹuM4 ^\+GY>}F;B|5+P {#: A.g5߰}PrfӵAB]j."@Qd~3Hrnw|k U @9H%Wn ) BMJWr>`Fu}ϳuu}ldGKlޜ{6xIk誸|sǚk͸z.QjE<X9B#-F-El3[HrQ1n+I-E'ޤ2v_ex>Le#a1mx+_Z:hH<|j݁1'%8P@u?{Ft B1CI 5yZqވچc\*]5dXOlݙrBqÕDdSn&lPfD"v7ḿ}񉍛F#8o><ǶR͂׈ z&JuP/  _ b0G~'ֿ^=Ʒzh&wࣜ2Tߑ7 j/kfž$,IU\tl{jj=4GC~rJ㺨JWTg 0!ʑ[/ oҏoVdsۙzUɜp9ܑ6L_xw\M癐ΒB@̗'sb5`tۤPDf`{U((`hR3!neG iV & "Juܴ#\Ӕ2PT(sw76mp7v*ǘ[}1a^d ) Xy\l vgȳx]u PhXTA23$ohl+m7oW>7ehXiՕ~zՏ++ jAo}׶N5,ܡ@,z/6_D;5K9/Fp1 \CWu.uU k{ ^tTp̬)xO h%UvXY ((Wf3rmlrP=vm u4dO$hd^CV@fvgKby_oѾ;`"Ir]u^u#jw Duڒa~(h#Jmޥv6v8G0c' Ni5%֬'Xj8!L:;QPHtHNI|| /ZGsxoLg>յȝj+$RX+40kz!E(*S;O6xwkKW1P/l3NJ ꊱm!KQ~4N+Jy2<5tQJx?=nΧ-)04.1gMh6ܗ퉑$XWgc-,_v aV☈R4̄XGܸʲ/#s@Ɠ[  :A~qS]0o `9E/t;RW Ef$[7tcs,#Lv7zO;: b+.ߺ ̃$uGi|i?߬x-q9ҠqQ\+of 06ObK3bj7ֈU󔔾x EMy'(p[B'V/2Q_#_uJN@ aɚ>06Yئ &L7erd-ƿ-TTb%THZgZ]qa>'[x BdGn.*1dn;\6W =AW uEd_=w(\OQl&O`4ʃޅGIE0u(;2ɀ{sBBlσsKQYT`vHN:i=).Cbu<:w?qkKMۀ7X W)3P_&ҝJUn}I/ۍ5uqJaV.>+cS0Iژ̾!-uXIV6HS.xLt~`S,8 _I Եx%ۺe=`/U]#=we+ qW42fdRcy(S|/2ŀb6kfh^lSSUCTm:vrQ#Kߛ{{Ȥ2^q- QOiw+!}M8+jXrGlD7?R)x!+}[F%鰎[e?&)hWE=)R/D!:pLtі/eY`݀65&md:S a@ԪfYa /s-G*>ԃ:&r;* Ͷ&l8(4LtcY܉ZvЛlec%.~JJg%n-AlZǎɯ3PHq|aMvD(N'J3ڂqrFN+ۣ(Hܿ_9!8G4(qnuBp2@Lhfx.T3D),xV6u=(BStD]o7JN(ˏK3e8TgE`ʱws _Z2,"누( a:;{Lfn/ XJ"oe,pZCPqG!$YG%YzB9 .lsxk-9[w`؞7c3C0(ھqZ m3Sb iP|V]xX@Le*"⃉{o-5Vs|.(Ο&@|}"gΖt Pgw=l(pJD"WO5A ,:o#5r Njx ?WzV.Kv jy2r"TIf6jJ8B^zJBQj0uX]0kЧ+r!-Vrz̳Cs 58]p70jRPEdۋ3Mێe{,vcXsv"UE|_K^DѲA#ۼɎ/1F: J{ḃ4Ӛ֤ 7&^hJGpj0y1 YŒw=h21pX8wLr܉Kՙ ܼBlgOǑ6)|JSTđx^OoGpN{x^e=*Q9)Fazd7Q(ѡ G %B%0O:Mu88Xnm 8oI%$ز;b7=oӵczԭV f| ŝݵX,P~@1 bnA%WW~o,Uk Q*zzNUL /EbªƗ G$2S rXݓb_yZ69Vۥt9ˏ.}Yא@LQ"ڍ>q{A_ў-NK?bڹ8E@Q1.ZX; 8=Nst//N xzDR8 ۿxUciɜvUƖ5'X>? .a݆O ;]ޞXgU[' yӦysugCa\pgL +s&߃^\XG-\6p-vOUdd%[߮q%^pQP,?;լTS:.S+k _ix6y`~`o!f} խs ZjxlE9tM {;$AZr"}`t z$I VS[1 ٦KːQؼT:2@p.U׹"4IF̎mނBUuu{ʄ soZG]6Y+Bꈾ`0(\~3"S9ff/# <Eod`\mI3"'bJ[4/QfxZ< f:u1EUfm$erRFmw_YU,OezOf(<":=7TcJt\ťαT Y8%3ll\?锤Hɯ^H*H`o;,p5}KQ;n425 nOwe}lef줸_> sf?X2l- FOyD3քq{,3tlx4ptJljpoՖ9 Twuj30O]?:VZïiCA_[Ygt'1tƉ?$.q^,;"+hܧ5/8E˧[՜z]}Bo$G7.c`>fAǹ4j0$vX1KS@~A=y;U&>V7ܻEY+ta֍uAbzq=02REufn⵵_4QT Dд-Xeۅ, !kfaב!G_,{``;>76})8YTP"ږ:A-ڛ4$KfdPp=ZZƐJEI(O*m˜*-VrW;_UP!hPUO"qhqqaUD!Fm=~*7[|dmcWUlP͋٥Ͽ~zTU H݅3UY,r>XvZY(Lha`P0+} 뱮RQ >?oJ]"19rR, X.-]D C%^vVʼCM4[%Wmd`[ӞR٬hZ+ s/QJ?hc#&ܾ)&QLFK=Kǫ mdJ,c.asw˱D1 ]V'|BPrOC٨Q PYׁedQo 箒c8t95z=aа. jYV+&jZ @憠/tWhSeO`7p? Jz)3(EopNcZ;N_b@)foIYkx!9`h`"p?? >M!%Bb}7s4883ײkqj"k #J75eˀØ3oBJiC " K6\%0%R5OxC)K!~g }F?Nd)2Q n3"=MZgL=ln=KY4?hGQE "eO^&b }1&'=T.=S9u ]!3xc bPlc 3fN>*~B.mkS.no\앁 G+Ε<+l4ͪ>J*H+iW^YFq!\ҤIO71*V(fN3oyڡ8& %@CVm4M̅?<'D>|:K} O*ļ15l"=g#yhz6^^~`o,TsG0e mH鬜x ŗ{3Ye{GW/<kZM*) b+ Jg9 )3'/gv^lUq\mukcH;[vӻA$Hgh2>o.. +gE^藜GKS^e8p>Zn̛$a)$b?C fyO')K3£?~k;].vU-!ݷc=};RQEu8 9{3il8= )ףDT_BD8>z0Or3*6K_$` DTCucMN} ڊ`DИuNEI^o^;@E:D^a\5w}WNrb]WAt\ϐm$֐lDc(/4i pH3iOTس^ {g;88UY2iGMHK{qteZIe}:AYx ITXgbX̴(a⒮ SctοLLW*9>S &>MQ<$/k4' t<Ӆ 䙤i 8Ee^:]Zkulc+NPe?\Ѻ`48aD#VRUXL@ys8jD|B[@isGLD%@vb SyZF_71%O9wgԞ x5hRd}=0UH9Yn5 1oEb "fN Ysyi8( Sl<|1\,r=4؄r5iBh` ^o+7T wﭜŗˊFWq]Ķ )jya`_"_o\1x/*5f*@9@EMAf?q=܈Q\v&ro\_4q)4lC[֛=:(U;8f-[郭}?q fʆna%eI;]{_k T۾-zhBeI5ǍM,U!W@]z@ځF4h)YOL׌d?pWU/R!0 Pl<8ʰ;R~&hd'4cj\,++ #*95AOm,ef /3v+<'VY ?HD EFwȪ"T'K17%S%P!WE$L +H0 .Qv.A<@@[yBxhV٤׆ } lS]gVUɿy>? @b1'F}:4}}{g!0.0Pe@<4z0G6~/HߩDL!k@KMgt\6:=ѭeLqT JbD ~'+̘ kUfط<~ph5LCmYJFG ef udǜ෕9?-74TK6s*fk0Y֫ dĎE$J8! 弮K!mgp ?t/+5l8wA\bł>Lq |FE͖rsW/AX$/lxgy!'8qך+4vㄽ)}Ulkޅ:>]i*|iLΊ2Lb< $[ta{]XU9AK$n`o8Pcr>cp[mׅAoYf۶uL0g$m8뻣.rQc Î^[ E;ڄ ? _-FjT#A8:Gou +҆R}Fby'ҍҋ,I>,~["Zt>,ldhgX/ #Br4I;69~RĶ}s7yD-ÈP>kOO8549y9W"XXlRW4a9 :{)'>p>"<3?d|+OIxq-䵎Yˋֻ@n|;_&mkh%EhV9\2DIO6cIoйa67AB@ cI O]&LMgI7Xf aD]>uZqc#d[X¡9 +pJ!> t^ˆRJALXٖ'm>>1r)7hE/ա1M_yie`K:7ͅe}I.O@|&=+]2M1& \-x[Ӵް~pɭwG ]U| _x/79"sPIO E`1rc"4Gnwuݏt;vjvjt" 9mog$4arAKZyӡǹ ,鵳Sv:{;H/i2Ժ,ඁ6d8_tv݂R^zF2?"g]HqIܔHJzK~Y ;;jx}ͧUMtǷu&ڪl*b߶y 4Hu-1Ux3F(#OB4+ +R;ZSW-I!@+^F Hp#O}` lHϏGY;[zƜ\Czef&ZCso!m\oOL8ѿ==QǢJ1.Ȫp` Cl&`lQmPLѿK&W==|%<ASgmhRHi/x0Z9~uP ;,}Ee 0Z1չ"~諪FwL2zK p,s,Bh|vOT0/`HRanF!@¯R]bPE<1 BH_U cDx$c򩱒z-N PƣlMYQ k(U1Fv{=S9ޓ=ѻː3+TTh0<Ȯ 1ɲ{5#N) v7@dDpB,)=)斬@-{pa2tDHiWr Y fԡ?OS#Ce'!/~g]r*[o 6~L}9ys-{UwSҢ<[bUj _t*=,Gϭރ$4.1W?ة&(4Yx c `RXՈmPzH Rl,M<'Âb`H&0kFА0~4M)pj=PF_TN 8~ Ez)' @:Pc8$:#f|%B %N%F5_K$O8/AS'lKхIMRA_u۲;;CK-fs;kPL;\Svb])])gjTMtKp*'aaya= (q^C5 NIHTu~-K?:{a`%u _^U#^&{Il*g8网W;Qna5vYrȱ,Z(㊑n:97?(4w4^mUP ̒`o8ZX F5^S hD6J];n(\_p/FfOUTLl"NS?>q mQIZ1ڑ\ ƒZ)c#f6P%pH~B ǃvE'G)?̦;Z9}-=U9pusdjҷ"E(7:XWg8~l#eg~m ߝK#W1ρT9⸪/G#ߨ.|Z30629QY킍\FA-8}fDz˹jNMﱵc$=7Z{f8uvWTs@㥧qu0OMÁ,%X;h3. L4γ%4Vdhو;!$C<*e.%-77-0xVgtgH?1C״ltoeqdgFX"'?9@8q1:,JI"1Efy eJ9{/:?x{PKhF`$եrk;<AFqjμ,ܮ׽?1LkLHmFD | C#LC4aPw LcCyy SSBH . ^4D'$^ԏ֏I7Ɓo `'*ɫ|s'eRh&%"CY!=|\ K`d)w_a1 XҲ_6p5ejr yUڦOFv`7pP pdž mϒ#ۓ_Dt5?}sE8bאopRt6s ; dx3#λ U^xgvh[m}(v6XK j_I>-եzVZN 54}k0~q;ȅXŰJл?Wjlb[Er}0ޘv߼wbX#Ez}#m1pj[elPcITvY^O]N6ZyҺpȽ!tY$)VP=.nZReܺoTfD..n8Gd|/tczv7楝hI3LBFj@`'ʗ?գ5V?l?6ja |V.4EQ V[rw¿r"! *XNK]KHNZmk&ҤR =kiA)n>_uKKq[FkG!Na:^s0'leЬ8ȱN߭@>+D9̅U> )iih+Zq0wo>6#_xcfQ;fY5un_\;! қJϿ>("89W4)AH9$k;7Xl_~K&dLyLh7F9a[:ۖvS%Pᩪj{&\yIc"#3|KUBV [ZCy%ٙ 8pt9=8;²h{ՑK&2D4 aژF֔6B̦6lR9hrr s `!`H67@hS-⇫(l Hr+A$!*a_=ZC$uEs^"N*auV)CymoNϭDηߧ_SC8 >wQ7xLbK32 $w[q'1=r>MN$mjfpA\ slQUU[JA>A~NۅXͻKlke0elb4nz|_?o\!Q&Q寃F r}oID*+w>,䬂%IلL3w0hd!T`MB΄ŹjO,.ކYg L.Q 5~@!=DW 4m?F YƟ)I7P.d fn|)"8/>v'ːDdo*=EoX(x ʱTS0#H[kRt!Ȍ߳'W@󗽱O 5X] R@Hy`usZ<*on礕wr%*1v(+ 5KŃx*k/mS,M9 .{cŭKi MZ3/O,g}TgxRPsN9R26 5XO] 5aSeoI]]3'1CT QtRG;JzctkHܐ"%0y둷6[~o!}3|e}-L&ߥ2 'ʠȨVSFzyt. [KVyR2 AOXq_yxL?xgu}[k m:i;{qQ|%'(Ƅn )}bbEݾ~3FG]22 yI}&P`Ɏ}˲f0h[T17HJE4W #? ˖Y{T7$v^ڨ0[֙0ؤzV 4lg `9k.ƺ){D_Ea9$_ ]NUcokgM/~ex mk|GgXU~-Ǔ,vu" k{>q Nj% 7W-FCk:lqQ#\݌ӆ.XCmTݲ3h#cpɍBFBo̔AX`m3X5ɼyGRE5f#Or?n Y|ԊZcLr{=4v~y,tƥp[o:H)]ngaQ;NBNYtmxEEEHCqq2}aMI0]0))ظ*]W+vYֵ}MK➎]x@DL$]T/^ќjŹͧJòX^O^%-MQwŏJ5-_ڼ+L KtD0 nxI0İ)9uehIx~τ*%$LTgrdVraamq Hhlн2?5S4><\.*6::u,Rx?t 5꒬/(.;*X4Vqԧ4|vo3/XԛJ]1eL#GY*9aCΨS FUK}L4TZz(i\7?0Z+lax2-DQoa7adZ!4lMٞ5TD)?1FIt)KUyPѮ4"rYah H.׿cn}(p@op=f_ʿ4q݆)Ebnr|M?)S9RmD%;FKlH&- <Pt^^oڼi]cog uCQTh3l(-mfB~ kwBm5&qc!`Q~J _K&0hcgjC=/˻hHS60iϜ>ureDE Xhia蠟vƢ.-'/`dT+y,`{ztF5|ЙXD ѩO$r@Q#Lr0_$oxuAIl HK21''S OPTC '{H1,mg&j{Ʌubt$j!ފ~h|ac/E]3>qwjPCw%/&1Ɗn7J z{Z|.dE J/T}^\*+, 4mnXHʭQOVqx]#)L{:2T v\l l ]=wi(&rن&啎qáFPmCUY8]'D74ޡ_ߞҪ*S2]a'ĜOY^K^ܲ;/Y;]1byԝwL3)4<- َ G o:ZKoס$K=!'n𬡍f% 5ImkM^k8lpt qjse16-%_lC,%*?x YwiW\Rxy<~_hbp'sIrGd6Y*칽D(PH?tcyqW۟޳k){ӌ.]"+f= bQr^45uv&:y-F )/-KsZk0!A"]yT]6R7#o7RKJ[ 0<1m[0`,U\B\B ƎZp>̟* t7Y1THE49 HuqԼNt-)ӡ)zŒX7> uâ37A>wP]ox:$B;mxe7znT <4^)kmPm1MPy3=.oRb{ *F^*!*~RcrLҟF/ws$> wɘqY0O{Omr+vVFnЌ f#8 <"45G]ӄ_(l$xlȷ]Dɰo}->.UO9AȻNn{ڮ&svuF H Eu_rƐGu`P 9MgE" tHuA=ħM$k~;D2bt~#z \;"CRrhKoK~)t[BbwxyX>v#BwGHM TWVŴڝv"Fj>PUEPFtbS;kRdT'%9_ZE!i›Mr G;CηM߅m;e3AJ$?,ayi۷*P1R?R4hhn 2ė]㲠8Kۋu~30lmy_ON$| <"98y|?rmGWa_eEl wM^IL2ݤؗ ۚ~h.0W [S%Ն{ K[GtF\7!_Fq: >A3%Sd!uV6o[cJ/^Mmh-}7r{WAy}#{yl 3'BAVA-im)rl:un"Lz'twvE3uC02+]ި6"/5AHvVXHCbm\1 v5W |]8E^J5-D#q:鏰^兾R qZcLGZ b;J_ Sm_}j-Fe^/-M͖[e*'듀pU{Kţ4k;+"咸/]O>QM~Eu 7[E_!CSoZ`?/eƎ+mJ,tƫ?_iq;\x*;׶aI˭Jŏ~P)/, @˥ʜڹ/#D QG I.:M v93ϥ;p;N#WV=x*{mt/YxP0r"{aⴱ*ʹ.`3EnMtvHؗNZu22TT;}"B_14-8J?fkrA`=*[~F0c JKxCgI;@*E&DiMzsQ'31=μR-8a@q,V$̟E[NRo'`jijA +|ӵTܵY1qyƋ@~ns$ 8N'o=pAXQꇟ'-gD{rg`Z . z݉Xb5* $ J!}0#)R=;}f:w↠a ?̣vLΰ}(͆1`׶ ӺYB拾JGNs6*2U8&(`D-b'x 'l0kyM ߽UjMJk)doQ>_k R BU3QKeYL^ gjIzF.M+j{TIQ;iH8`ޗ 06Uzg-oU/]B0 ʥ85qh=8Usؙ4qqbtCwl]ekva;e7jp}^(j(/E:`:S2G!=C+@hH\LzR?./ӊ¦iQ#Q{F4Cn $qhQJuκPcs1Qp y gD?[ S>C zAޚ` !=[BXXɷ X/ U)Qh{Uni M7̒2k;$Kp[ZpMVXӖKlNFe5Û]T > xd5 km$gᅨl]}sMGB/x_&Wx?rkv§T*eE^vZ>c3ñn#} *$dZ?0e+fYUX7貌` ~T0i hݞynʘf\)vj x;[Z$cH>o_y6חݼrT Dkl4LjoIl\%xpmeR\ǁ5SߓBb^`hPUIoHK.+qVH6}"cd-fށPcyb0 լLda~OcRUO1/?Z`H˲Nob[2̼Hu=aRE)EqM,Z"ك9$=E{\q"I0-&B9RkRQ ໜDCƚ]^;j߭>)N/K6``cM0]h,IVޱmMsi >UXtj •VRn+~dVفxEM6\xCOY wGvbÒp U/2s^xن[ֽ-$L5m="}lȕ | q/ĈwBEl&j.H)nTRCoyF3朠*h!PZ54>Z&Sw%fjc'DF Kbn6,},MT_\ӡ?:ǙₚB_d9/aERG~B hqoߺN5g^;aW}TYχxcnZbդ/x+!%(x֫?)Bn+h(/1_͈4Z =ӻStPv9^4=biTj m_>f\]M2+`U Ĵ+s͝AxV"\YϺUz4ACX^DK>8!Tw y>L=>DΧ)+m['PW֭a-RکFPr_$f Ơ1e^#BY# ҘMLqQ^Add>Gn/sa}dT ǻtO@%)!~BEuS3P)}E'Q]_yIq @ϢH@ʰ&GyK~JJYwW"5pPIKX':5<.g\T ]YtZpE+EK&)N4y rӕUXi6XCh8ܐdym13ဿ D8yoϽcfgLqp녧?NGę`0Nʇt8e"<5bCӑIGM_|ʀIxa±$qTn>Ds'HY">cEQnquk69D&GabRdM&.oi@tM| eF y7h558sQ@.5?(|Z ]Z8*r+W/A77Ip{dr> U0@RyRV5 D-ޘ GdIXC4&$w[}J=$n{m5GIpT4>Ȅ;`B{ɓ *S"I2((\`jtӌ >NW5v,]MPZa;SoOzno /_]y3)ȴ-OC1bp"->IB(0Dt;JrA2qm/]|Զ81h,qpFOUEwCw;7wRӟ/޸=l**'(ҝ sqm}X:.T k"+̆Џyl:+͸k!9N j,MAx -:.|/Sca[XFl͢_قpB)AqD*!'-xj#>|;q>mR^*=$[[`P yq[i;_x\\ey^K=5Wc8]tpzԗEftyU!J2qW(pZ(گesGD^ٞYM2rؘ^JRQHDod'nJ]$K<[2gXc E-8+}y] Ճ" Z%˘>Y?eY,< ^Z#EYnv|Nꡫ i"ËGE X"X&@-Bc*!ECCv~+:P*p QWuO[ sBs{xK.t-QoU%:#ح@K\Q.>’$(*?7ؓ 5D['cy 뙮wC=q [u}|` s)uyճ5*lmi$}ZkSn$H6HqѬHG@t*1V];P]UǁdZw+)p)wJY@3A pͲ~1V,*J Z-"`>ȒJ ?F;o]4si.\(%0]rW#)cG~7}C1'vw[2m@XNbUoSl4!0C9"16]\oz -3G'GHV?^-ӛ8 ,&zt=G<ɔEZYeV:bK]0cd1W|0c6BdSr`ʘ2R {k7 O4N]"~$x` M{kHS|CR. HK(RAA4* *}P]bt0Vs*}kJ=?DWsvQNϡ4XrSP#Rt5C|w5Jr \*X vabˤH/O@]sHRͪe࿅VQc(?_m0>k~ZKwb"Q+)%I83yW_ha"~+'5rL/t"5U!ߐr]Z+q`Tas|A#X6wr[thM}@w;8p~K~HQ ?FL.C'gsg9w6S.%'eXmQȨs(EֻnnMCJ% }r~? ${$=?{uۢK*i)cTT3 W'dBvOEz= oj%h_GȲZi0]VjQ[JkՕDMhg\!:d2~ҒX&`j aS٨}2JJM796QWEPW=bVY ޸nHs:G&Bz[ ÈFw(5t5p5Ke5^ n=e6 9tnŋ6xGA>BGgvRvOooԼEY@.6+w Hoj:bsUh@<_\+ovvU]ĠZW ~ x$, k&Mb,j-laa#͏Ym .9>xxV-%8(!ePt&tJw̙><1d^y%1k0__s藪_ϰcɵ+jo"ʐFU|"ۣ zyd{ʥ|XTNxLߘe{Aho #Y )vZgkI,wzjdg( ru} 5D ?L,2H.gp_BZH|'qe;W ;b8j 䶸Q 䡒S27v+Dj*N`BOy.*QYD~S.ĝ_wҌ=. @?\?zxK(2QZK?iWρZD&%,CnwLo E!)nL >ܼ4)(ݹBI9Q/֨Zŀ`˶'; 7f)opnTj 迾*ȸc!ٔT(\xy/fhHB4fj_H QwA>h̛-v]TDX1w!{-xgDtя+9v7pzC89'*R(!qX@2:ocnj4;3QXFV$M_3g1DUf@Ţq$/oiX{ρu4S Prƒbzm%+Vǻ!|Q2 ]zq* ~>F } myY\wY҃j(K{N33tMն6 ROJ+]!|*cyGy )XS=7\є$ E,~A6 \ $umH!hom$wzV+Y$k KsZQd')Zۖ~0Ee1k `!aLqc l5Wy5%Gq(On.nZ7!7[ rީ`֌!Bpp c5JS%Mff<8a`x+a𔇝V&WSMr4^԰&ArlwK,t{;|F M'WKPRrUwgYaڛb)Guٿ9vw;P tK"_ nye|X>?#Q sᕘ0C)BЭ<6]دwObTR^ڲPVNK8ŷw X̂8X(NeФ"r(!]+PXTR]|UjIv%msݱťp7. nzzíWeawlޘxkH\cZv:LBa݁`toB\܈7[Y>>/ -m.F,Ds,z S<;)NUM# 0%[orjĸf+Gx)ӿg^.QZT\S9l #ݒ5{JUO#7vNU37e8Q)& ebv\M/TT3tstx#vb Nfr|hf%nE-Ɛhǵ j0좽f؎8L?7տ[KG~:5F#em ~$):=W \$pG5fK!Fzaz;2e-}FޘLJ]UI1JB=L DDF_B2s[yabxjDqc?Vt*־3 Š?THLo=ܒoe joB.ӦJQࡗ!`Yh.{NeDDEה LI$=״|`guπ=ѳLʛtL5ȑ=Z{)!R΄EmYo8,'P#ۑ]|  +?u DBBOe̵K=A {:)!**/üH* L{~V.82[epBp$i"D}ٷE {O)84Q}6 595&yf/1 F[#U!3cL ;a/[/Lf+Ka2wLi)?62)Oheu~ƙ[rb -mwgDA?}\ȒӋ-U0g$phzV6)ԫLI`^0n *:Y̒aΧ|y-*wЄ9n4槊ظw?k;jx~`3l$_e}Uk&IxCbW~nAmPi]r@0@y_T!2r`}aas!Cbs)x+&@AaD43nW\ ghH笇Ll95"c>%: z9+bs(2*T} Vhv42w1V3M ӌĕuXo!uH:;n6n@2uE@DV/[t#*{a+yF/xo֎QOL/h4wq;C8|{$gPBq!@6yԕe?ryKM/:s\!yϰE?9b5li,Q̭%qk$n1Kߛ9݁%{ͻ%'O='d]UF+*[8]TЀ3ʊ!-\Y 41|yaק0`."'u^'3 хޠa_OH]Ѝm^UE+ͪ S,ĩ*/7 !cnhd'_A&L0.gl;~hي,2*뜞ggkϮY!ړRYq&tK]k"ɮ5  um`_L"㼼mwH穮>@#ش{zo0Ta%'~WḌ$NB~yVo. RqmT9A7s}7Y)խ~Qnҙ%p_>a!AXr+ZuDD[SqT'ȝs#,NImZgNY*: %Qm}}SMip^"0d=O^_ʖqxӡ~pjyJfADųV I4߻/Bxp1#L~]W,S1 y_^km]gԷ&z˃] ̑מx֔Z7 AMdI&ID{dM78\@$qKȉt?b]<.POݔ)W!mj2/WaE/;;NXGlԺP~ְ@Iy 68ɜ;7m(;@YxGOR4_f /8 W]X 0aM]aJ*y,1ޝqsc}rٸsa89ՙ3eKVXh P_3,;w5$#ࣞ}U; ._o$]@d~ v1Q3fuX! 05:.ŷH\a/N!:jJ ZzD jEoi[$) -2Jx&? 44/x'*w^0bڗ>l`82d#-Lc|GݓAj&G<@SxU#z{N b t/r\';9wޛquz9۝oklbm3vʆ]D*G۽b(Y݋{< 4KUbW:(DIOs{ IP`s";1fp/)bMZ/d݅HP|xalOɲ޿ t[™Pjio\,GC=l25Ve-yv"aġbpXuHNYc;RKnvp)S4Iȧ:Y_˿y^)@N\/7 C,ʞO9-^%!k|~[N7 +h'xyjdJTv2T7Q^b"n==NJKRS >x$Ө |WSBI=P{GYtMڐA;R zy0e|< EPhumܮQ4cnU.W`0rh͆zҮS]?vU]%\8HQo0=r; ~U~D?=Ah]e{4H=P`էqLUɀƣ,mIsl y Y֖{b,Lެ t/C3 j4>NV}Q*.eHy#Pl$[ y"+LN4j0/)b9Եm7ۄCAܸ]+sϼݘ6VHpCy?etmbGR#ę"?|}|yN+-T+>nYަkp1 Cwh04s 9SҬt#p|rk]&F;=8"!Q4ҪFW]vRg6>4iI Jʠ̯ck(V .g*Z@ϧ$ AefͻYWܤ{)95ZƝ6٭e(q|A~gݐO4J6!썑1[y 2F?n8Jp["s8ǔn $t+zq{$S#+" 29yK$-4\]q3K j7Om}K1?p:$瑔wAoVllٗ4(n/fEmx8a\&ĕxCX!E.vA5 asn ͓Km-k NPTsQy'`'^>V+BUVOmjUV] W(fdҁ/SfK,d?/8>؞ʗiPW%K  Ɉ:bg%/j© G =Z \c=2fV㭝Ytҍj[8:$T!;M cN1^GR72CQy;[&.!CEC67YUERbE_hӅLDjRN%O8Ea-C5tدFK )<-0ujta+;mW~Yz>|ϰvpQS_W-b:I>20Ć8xF9G:F`5M\e+eHĭf:p]cd=P޽Q_AK2-it{ӎ3>wұD`זod6ht7{<51t* 7 Dyf_K ;2_5?(Z;59y;k׮}1L@<(h<ۺY`Q,4eĢ?B.է/9Gu+5kl Kj$B3 &@hm%4P>v`ۆ1K* /1.&} |@on^McyY(CW9|/= ׿hyx)1ef"Q!P8Gaێq\hס`/B!}92ұK,]gnR`:IZ'6/xUz2?H\ԅA,YX}dZAoQF|ӡEn}5{y?e7I\5@yVW琚xwW֦~k" Jčg4eR,g,VPMiPժP(LBDԂJQlx7Y"R7HLy~k3/bHxi4_``2Ad)aB7fvs4 UuW˒7$+ i ٓ]{GSL.bH֒Iɿp$jtq?^9(OhG;{LR5%TF`1urZޱ7G&tgzZIvdvg<ȼ|h,E9RG,G?L{T}g_|#աYKFRL!% һt׿‚Ыxk 9kKܨw_?9T (2]ׄ\Tg)z/P|$TȮȹ%hWMzugyrFnS@!Kv=uvks6(<@):.IH`M,67=(e-K5Nۀ s!' pIk ОK;yYƮJ/ 3Y\ /LDp}1Qd2iʌBUd =uf,p:[x`h~]e!\-F'R#Kha7IŰrՏ/v^Hj{YT #NsNmkqj}6{>2ʗ~2Li;&ɒ Y{wwc;nDE<ތ›L`חRb^};D7sM0e~⼅ 8%|opjxBY⊖|!Oèal*V$XVbՇ>˯KSVVyttf4L'.LM"cOMjCڏ| h*'V7qgO9Fb̊|˂l :ܬxW4lQJ H/t5:?Dþ|nSpTX2B1>;Si,+TL$c#n[[2AWo{X[6`4ZS>61W,[k๖@4 q8nT"{Wʼn,̶_|7-d7bu 8x2~R۞\]]Vvk4Z$I \IFOs LS]OLx->wksIA~MrqO-K[K[< ugӑ/`tej⩘#T k)i٥c>T,){Jٻ5$B9s_9š"46 j֎6ůa0(1"`F(XS!үMlMFA݈Ipt返nӹE;It J2pEz>$QeNjX_u-Vka)Fj+e5JבC*xunA='hIR[& vxzpqp9j;a(˝7Ai2*7xxe ˶i!"^( 2 IN27Zyŭ߁3~JG,!T3`Ԙݾ?\i#$-n=nD\mTܶbϣ2Єb7wخf_7`9Uu=L=z6I?q P`:R %.^ %@fV>&nr3|ƞOpƻTGpzt3K>`A_*l2jjJg n!XLx>BS9NMʫRѬ=_ϻG7׺˜8/۫5QhCf}k%WhuAM!qTQNKj$´Y-k鞷&Rr,7~'GjanѾd{KWdi/N<Qu70~M\Ms"YK9ēs ;q &E!dIK$m-Y-׵.J2]hm'fpLf;_ZeOJ  D´1Έ)( dY:l1rUt߁ ӵÕy w,ɿƨK T N^7U QVM/[/( m2[f̐&@ηb^vn/;#bToxx?di~4*Q:3 yEW"M|2v`Z4TԘrGUR%vA?QQG1[_-A᧼)F}Mˋ6_QP89֦:Ev+%m L*,z>KLOdGFZ"{{Im1*|li Vj*J NJ{G3jBs$=׺ʻzZ1)h"WZapid C SEUZڠQHGA*%/{o!U:$8ﯩVItEV4a;$Ywxs[:,p^cl!ٚ\LFM|:de5dWg 2UE$jbc&&pX: Z滺K~mScC\Q%S I)K\PoWZ̮'d"Tac^u#Imy`}1aTrsvĪu=V_n(Ne&1sIi[`e+H aioWby%j:0mZ 04Xevdu_gؤ4xآ[}d=EaM3١F<7n^U IœNߍ?`oEHX]!C+5vmBnE |TLy98(&w/j1D]1*C%&.T?R.9[T!aŬKl ׾'_3Tj Цع?n)m:qXFxX{K= ({ "ݐt$^0/"ƝCln,lU TkJWa.H;bu@&'z%"5GÝV7x`h՛Ly><̟H[cLI,BԖиL@-ָR.3AОYlrGy#;8wjS!ф~@7 4+j0 zF A0'AI0mz)$1x$-'z구$y' 򛲵d1촻&hp[TӣS6?*~դQ:7p?KsB6e@/SڎM6S08G 'pw>'aIbL=r:nvǪa1Yv?%j 3$w5z(N! bGJ ve? xRK#L@ḥͪN-FmR96ꁴX ]SHw~I@&`ޭpR]%Rk/<?NnꄡCv k0F=6ދ ՀOfiͮ/90N"ix˗ϲ݌lʳw G Ehm3BWfbjH0 ('իCb(֚J^xq7}M@18`ښ$#A]RIo Җy40PxG!$6Ih:µ=)^EF0L|[rc?5ӗ4;@H4[0솘ƢD&X 棧#;ŇUu>D8bD,38݇ o,F)Ǥ~_2(5_wS!4/4@6ySv)c?>Z"Lr7Q \߀J_AĮL81A lIe}DG5SܰI;.#Bo6|ouiGQ=NYV got9#J"WpC}os迂g]O]OuA)l]|?_AndCɣ|zx{k©@$2]"`-z%S:\z?M `VrIඬ֌m|2bzG&L<6 :ʫFqx#zKL6~T "k3iG΍ pț }2m> "-_t7O~Uy*IChOy$mLaޜgQJb e/]j._9ԥް^l9R2ge^VzpS#鉜 qRUkHyNŦMYQ)]!Ek.P žP%E>RYl&Y_5UIq+ʤLa~Gzam Ra ժDML֒g*>0" ϴ $Y͸y[ ,a\H@$$xGՃ$ii*[j(XB{/XcNHy$v"8V ٟ:a]2ZL&>To#ŧ .WW*חG_#/s6PԤAl_زjLo]NSA P>_Qezp'i#Gz( E` &?<5́®@n i4 uHJFP(׶9D2O rRJ.Wk5ch Q_dJ-#B^xxIdK| `ؕ+-20֠*7#HQ0)[&Q,K`'^d0k@~"bGCKg4+NȈ;(*#05$f0~GAsuS|{\1Pc!~B1&0*fa?rVg9{>ezg`X 7|4kU+c&q&s b5O]1c4|%TWz _`ky R*ƉIT[i= Jq'ĘĘ7p-O+.Oܦi2j~µF9]Zv´rj.weM>M W}OXyWHSZzd/ǃmAϞ| 2y $`Dj4c^צތ# n*؞reݩ"oT\CL=ܗER XHPHe:@0 2#r AQ~-pW} [{=a. 7$)Mt/N&'t媦yK.Q+)--f߇ ˭$<۽Ll`5cXVQקϣI: ~˕ۈw? o1MI'۳jEYJXܤ˲4C5^* ),E Ы!j#uisW`˫/$^6]i]l͕n@sò,+ۭ<=t)C.8I'DDDMxϼuFb`?cX)iYUUo+C1kf>Oq0\'Vj <LNHn㴬#OQSˤM2D ':yݜNWU,e$b_ Njb=n1ne oe'B[/kQidyT5qf %lN tv_p1(NpN@"`~i~j7*JW:ZŠ%î-^VcUlڬf :.էZcT1G`'50O *aIlwh@x6mBjͽbKom\F='S~5Zv@º5ԪzI ";b,qRwB嘺6!6gQ b"v*S_+aF9`Ixv?0?) yvGxcA Y9g56jFΰ#Tz