postfix-devel-3.3.0-lp150.3.2 >  A Z⸋/=„vNՑJꑤB{= ph7a8+I5zj;3ɿ>G w\682W<~uVz;Tz #:wTlKJ4(~S3|Gȁ<Z6hZl`Vϙ4_Gz #8jM ! ô`]u<zKPYPn!iJmvS^5<ɻhծZfdfe6952ab1bdec216f913e7a31d086f837bf02974283c1054ccdd542195b3e21dc672d4bdd38e182020c3185a26c9696d71d461#Z⸋/=„dcɩ]g7k CYC9̢ <?|* @$Tv$5\=GBpw|sRh ?P {vwͷKͦľWɐ\j0o-tЉ@;P;W']WfOFff˧O Zq,& Dغo`o"z 1o-]*f+Փ>EKl=a-{ETw| `>p;?d  L (.8 h          Q  R V \  aHah eeef;(f]8fd9h:tFkeGk| Ho Is XtYt\u ]y@ ^|bcIdeflu vz04:|Cpostfix-devel3.3.0lp150.3.2Development headers for the postfix packagePostfix aims to be an alternative to the widely-used sendmail program.Zҕcloud114 openSUSE Leap 15.0openSUSEIPL-1.0 OR EPL-2.0https://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.postfix.orglinuxx86_64YH @& w4/zN 9aBTEL/+BgdK_`epJgw]jPxYbcR0"Wn   +z%Wd6e:V `[c'C{^3C,j$.)2S,B\4;  " Jyb! f^N 3Y-w%h  O7V1c we -MeH^XCg?t Wid uW3)dU[ 8`GdF*'/A큤ZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀZҀ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.3.0-lp150.3.2.src.rpmpostfix-develpostfix-devel(x86-64)    postfixrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.3.03.0.4-14.6.0-14.0-15.2-14.14.1ZZUZZkZ@Z)-@Z@ZY@Y@YMY@Y@YY@YyYC@XQ@Xh@XX@XO@XO@X7@XM@Xv@Xk@X9y@X)@X lW1@W WPWJWDB@WDB@WVVVV@VhVU5@U@U@UUlI@UXU6;U3Tء@TOT@TTT@To)@TeTN3TD@T@T1Tk@S/S\SSS@SS,Rb@RW@RM\@R<8QQ@QQQu&@Qr@Q(@QEPP@P@Pf@PPP$POO\@Os@OO@OyO_6OWMOKp@OObO@O yN>@NNؽNk@N@N$@NNf @NRDNLNENA!@N-ZNNN@N N e@MM۝Mc@M@Mz@M(MM@MS@M4/@M# MgL!Lc@L3LLK$@KsKKZKs@KhKC)K0K(K K?K>J@J@J@J0@J@I)@Iblnussel@suse.deadam.majer@suse.devarkoly@suse.comilya@ilya.pp.uavarkoly@suse.comdimstar@opensuse.orgrbrown@suse.comkukuk@suse.demichael@stroeder.comvarkoly@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.commichael@stroeder.comkukuk@suse.devarkoly@suse.commichael@stroeder.comchris@computersalat.dewerner@suse.dechris@computersalat.dekukuk@suse.demrueckert@suse.dewr@rosenauer.orgkukuk@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.comchris@computersalat.dechris@computersalat.dechris@computersalat.demichael@stroeder.commichael@stroeder.comschwab@suse.dechris@computersalat.devarkoly@suse.comvarkoly@suse.comopensuse@dstoecker.demrueckert@suse.demrueckert@suse.demrueckert@suse.devarkoly@suse.comvarkoly@suse.commichael@stroeder.comjkeil@suse.demeissner@suse.commeissner@suse.commichael@stroeder.comcrrodriguez@opensuse.orgmpluskal@suse.commrueckert@suse.demrueckert@suse.demichael@stroeder.comvarkoly@suse.comvarkoly@suse.commpluskal@suse.comvarkoly@suse.comvarkoly@suse.comtchvatal@suse.comdimstar@opensuse.orgdmueller@suse.commichael@stroeder.comandreas.stieger@gmx.deandreas.stieger@gmx.derusjako@rus.uni-stuttgart.dedimstar@opensuse.orgchris@computersalat.dejamesp@vicidial.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.commatz@suse.decrrodriguez@opensuse.orgvarkoly@suse.comschwab@suse.dechris@computersalat.dejengelh@inai.dejengelh@inai.deidonmez@suse.comcrrodriguez@opensuse.orgrmilasan@suse.comvarkoly@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.combruno@ioda-net.chdmueller@suse.devarkoly@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.commhrusecky@suse.czcrrodriguez@opensuse.orgchris@computersalat.devarkoly@novell.comvarkoly@novell.comwerner@suse.dechris@computersalat.dechris@computersalat.dechris@computersalat.devarkoly@novell.comchris@computersalat.dechris@computersalat.devarkoly@novell.comvarkoly@novell.comchris@computersalat.dechris@computersalat.devarkoly@novell.comvarkoly@novell.comvarkoly@novell.comvarkoly@novell.comvarkoly@novell.comchris@computersalat.dechris@computersalat.dechris@computersalat.decoolo@novell.comvarkoly@novell.comchris@computersalat.dechris@computersalat.devarkoly@novell.comchris@computersalat.devarkoly@novell.comvarkoly@novell.comvarkoly@novell.comcoolo@novell.comvarkoly@novell.comchris@computersalat.defreespacer@gmx.dejengelh@medozas.devarkoly@suse.devarkoly@suse.devarkoly@suse.devarkoly@suse.devarkoly@suse.devarkoly@suse.dechris@computersalat.dechris@computersalat.dechris@computersalat.devarkoly@suse.de- remove pre-requirements on sysvinit(network) and sysvinit(syslog). There seems to be no good reason for that other than blowing up the dependencies (bsc#1092408).- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix if the actual service is running. This prevents spurious and irrelevant error messages in system logs.- bsc#1082514 autoyast: postfix gets not set myhostname properly - set to localhost- Refresh spec-file via spec-cleaner and manual optinizations. * Add %license macro. * Set license to IPL-1.0 OR EPL-2.0. - Update to 3.3.0 * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES * Dual license: in addition to the historical IBM Public License 1.0, Postfix is now also distributed with the more recent Eclipse Public License 2.0. Recipients can choose to take the software under the license of their choice. Those who are more comfortable with the IPL can continue with that license. * The postconf command now warns about unknown parameter names in a Postfix database configuration file. As with other unknown parameter names, these warnings can help to find typos early. * Container support: Postfix 3.3 will run in the foreground with "postfix start-fg". This requires that Postfix multi-instance support is disabled (the default). To collect Postfix syslog information on the container's host, mount the host's /dev/log socket into the container, for example with "docker run -v /dev/log:/dev/log ...other options...", and specify a distinct Postfix syslog_name setting in the container (for example with "postconf syslog_name=the-name-here"). * Milter support: applications can now send RET and ENVID parameters in SMFIR_CHGFROM (change envelope sender) requests. * Postfix-generated From: headers with 'full name' information are now formatted as "From: name
" by default. Specify "header_from_format = obsolete" to get the earlier form "From: address (name)". * Interoperability: when Postfix IPv6 and IPv4 support are both enabled, the Postfix SMTP client will now relax MX preferences and attempt to schedule similar numbers of IPv4 and IPv6 addresses. This works around mail delivery problems when a destination announces lots of primary MX addresses on IPv6, but is reachable only over IPv4 (or vice versa). The new behavior is controlled with the smtp_balance_mx_inet_protocols parameter. * Compatibility safety net: with compatibility_level < 1, the Postfix SMTP server now warns for mail that would be blocked by the Postfix 2.10 smtpd_relay_restrictions feature, without blocking that mail. There still is a steady trickle of sites that upgrade from an earlier Postfix version.- bsc#1065411 Package postfix should require package system-user-nobody - bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth was configured- Fix usage of fillup_only:-y is not a valid option to this macro.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Don't mark postfix.service as config file, this is no config file. - Some of the Requires(pre) are needed for post-install and at runtime, fix the requires.- update to 3.2.4 * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or 1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS records associated with an intermediate CA certificate. Problem report and initial fix by Erwan Legrand. * Missing dynamicmaps support in the Postfix sendmail command. This broke authorized_submit_users settings that use a dynamically-loaded map type. Problem reported by Ulrich Zehl.- bnc#1059512 L3: Postfix Problem The applied changes breaks existing postfix configurations because daemon_directory was not adapted to the new value.- fix build for SLE * nothing provides libnsl-devel * add bcond_with libnsl- bnc#1059512 L3: Postfix Problem To manage multiple Postfix instances on a single host requires that daemon_directory and shlib_directory is different to avoid use of the shared directories also as per-instance directories. For this reason daemon_directory was set to /usr/lib/postfix/bin/. shlib_directory stands /usr/lib/postfix/.- bnc#1016491 postfix raported to log "warning: group or other writable:" on each symlink in config. * Add fix-postfix-script.patch- update to 3.2.3 * Extension propagation was broken with "recipient_delimiter = .". This change reverts a change that was trying to be too clever. * The postqueue command would abort with a panic message after it experienced an output write error while listing the mail queue. This change restores a write error check that was lost with the Postfix 3.2 rewrite of the vbuf_print formatter. * Restored sanity checks for dynamically-specified width and precision in format strings (%*, %.*, and %*.*). These checks were lost with the Postfix 3.2 rewrite of the vbuf_print formatter.- Add libnsl-devel build requires for glibc obsoleting libnsl- bnc#1045264 L3: postmap problem * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811- update to 3.2.2 * Security: Berkeley DB versions 2 and later try to read settings from a file DB_CONFIG in the current directory. This undocumented feature may introduce undisclosed vulnerabilities resulting in privilege escalation with Postfix set-gid programs (postdrop, postqueue) before they chdir to the Postfix queue directory, and with the postmap and postalias commands depending on whether the user's current directory is writable by other users. This fix does not change Postfix behavior for Berkeley DB versions < 3, but it does reduce postmap and postalias 'create' performance with Berkeley DB versions 3.0 .. 4.6. * The SMTP server receive_override_options were not restored at the end of an SMTP session, after the options were modified by an smtpd_milter_maps setting of "DISABLE". Milter support remained disabled for the life time of the smtpd process. * After the Postfix 3.2 address/domain table lookup overhaul, the check_sender_access and check_recipient_access features ignored a non-default parent_domain_matches_subdomains setting.- revert changes of postfix-main.cf.patch from rev=261 * config.postfix will not 'enable' (remove #) var, but place modified (enabled) var at end of file, far away from place where it should be * keep vars enabled but empty- Some cleanups * Fix SUSE postfix-files to avoid chown errors (anyway this file seems to be obsolete) * Avoid installing shared libraries twice * Refresh patch postfix-linux45.patch- update postfix-master.cf.patch * recover lost (with 3.2.0 update) submission, smtps sections * merge with upstream update - update config.postfix * update master.cf generation for submission - rebase patches against 3.2.0 * pointer_to_literals.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch * postfix-vda-v14-3.0.3.patch- Require system group mail - Use mail group name instead of GID- update to 3.2.0 - [Feature 20170128] Postfix 3.2 fixes the handling of address extensions with email addresses that contain spaces. For example, the virtual_alias_maps, canonical_maps, and smtp_generic_maps features now correctly propagate an address extension from "aa bb+ext"@example.com to "cc dd+ext"@other.example, instead of producing broken output. - [Feature 20161008] "PASS" and "STRIP" actions in header/body_checks. "STRIP" is similar to "IGNORE" but also logs the action, and "PASS" disables header, body, and Milter inspection for the remainder of the message content. Contributed by Hobbit. - [Feature 20160330] The collate.pl script by Viktor Dukhovni for grouping Postfix logfile records into "sessions" based on queue ID and process ID information. It's in the auxiliary/collate directory of the Postfix source tree. - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and negation (by prepending ! to a pattern), just like regexp and pcre tables. The primarily purpose is to improve readability of complex tables. See the cidr_table(5) manpage for syntax details. - [Incompat 20160925] In the Postfix MySQL database client, the default option_group value has changed to "client", to enable reading of "client" option group settings in the MySQL options file. This fixes a "not found" problem with Postfix queries that contain UTF8-encoded non-ASCII text. Specify an empty option_group value (option_group =) to get backwards-compatible behavior. - [Feature 20161217] Stored-procedure support for MySQL databases. Contributed by John Fawcett. See mysql_table(5) for instructions. - [Feature 20170128] The postmap command, and the inline: and texthash: maps now support spaces in left-hand field of the lookup table "source text". Use double quotes (") around a left-hand field that contains spaces, and use backslash (\) to protect embedded quotes in a left-hand field. There is no change in the processing of the right-hand field. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - [Feature 20161024] smtpd_milter_maps support for per-client Milter configuration that overrides smtpd_milters, and that has the same syntax. A lookup result of "DISABLE" turns off Milter support. See MILTER_README.html for details. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - [Incompat 20170129] The postqueue command no longer forces all message arrival times to be reported in UTC. To get the old behavior, set TZ=UTC in main.cf:import_environment (this override is not recommended, as it affects all Postfix utities and daemons). - [Incompat 20161227] For safety reasons, the sendmail -C option must specify an authorized directory: the default configuration directory, a directory that is listed in the default main.cf file with alternate_config_directories or multi_instance_directories, or the command must be invoked with root privileges (UID 0 and EUID 0). This mitigates a recurring problem with the PHP mail() function. - [Feature 20160625] The Postfix SMTP server now passes remote client and local server network address and port information to the Cyrus SASL library. Build with ``make makefiles "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards compatibility. - [Feature 20161103] Postfix 3.2 disables the 'transitional' compatibility between the IDNA2003 and IDNA2008 standards for internationalized domain names (domain names beyond the limits of US-ASCII). This change makes Postfix behavior consistent with contemporary web browsers. It affects the handling of some corner cases such as German sz and Greek zeta. See http://unicode.org/cldr/utility/idna.jsp for more examples. Specify "enable_idna2003_compatibility = yes" to restore historical behavior (but keep in mind that the rest of the world may not make that same choice). - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API features, so that Postfix will build without depending on backwards-compatibility support. [Incompat 20161204] Postfix 3.2 removes tentative features that were implemented before the DANE spec was finalized: - Support for certificate usage PKIX-EE(1), - The ability to disable digest agility (Postfix now behaves as if "tls_dane_digest_agility = on"), and - The ability to disable support for "TLSA 2 [01] [12]" records that specify the digest of a trust anchor (Postfix now behaves as if "tls_dane_trust_anchor_digest_enable = yes). - [Feature 20161217] Postfix 3.2 enables elliptic curve negotiation with OpenSSL >= 1.0.2. This changes the default smtpd_tls_eecdh_grade setting to "auto", and introduces a new parameter tls_eecdh_auto_curves with the names of curves that may be negotiated. The default tls_eecdh_auto_curves setting is determined at compile time, and depends on the Postfix and OpenSSL versions. At runtime, Postfix will skip curve names that aren't supported by the OpenSSL library. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - refresh postfix-master.cf.patch- make sure that system users can be created in %pre- Fix requires: - shadow is needed for postfix-mysql pre-install section - insserv is not needed if systemd is used- update postfix-mysql * update mysql_*.cf files * update postfix-mysql.sql (INNODB, utf8) - update postfix-main.cf.patch * uncomment smtpd_sasl_path, smtpd_sasl_type can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot) * add option for smtp_tls_policy_maps (commented) - update postfix-master.cf.patch * fix indentation of submission, smtps options for correct enabling via config.postfix - update config.postfix * fix sync of CA certificates * fix master.cf generation for submission, smtps - rebase postfix-vda-v14-3.0.3.patch- FATE#322322 Update postfix to version 3.X Merging changes with SLES12-SP2 Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch postfix-post-install.patch These are included in the new version of postfix - Remove references to SuSEconfig.postfix from sysconfig docs. (bsc#871575) - bnc#947519 SuSEconfig.postfix should enforce umask 022 - bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual - bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong - postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64) (bsc#940289)- update to 3.1.4 * The postscreen daemon did not merge the client test status information for concurrent sessions from the same IP address. * The Postfix SMTP server falsely rejected a sender address when validating a sender address with "smtpd_reject_unlisted_recipient = yes" or with "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps. * The virtual delivery agent did not detect failure to skip to the end of a mailbox file, so that mail would be delivered to the beginning of the file. This could happen when a mailbox file was already larger than the virtual mailbox size limit. * The postsuper logged an incorrect rename operation count after creating a missing directory. * The Postfix SMTP server falsely rejected mail when a sender-dependent "error" transport was configured. Cause: the SMTP server address validation code was not updated when the sender_dependent_default_transport_maps feature was introduced. * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no". * The "postfix tls deploy-server-cert" command used the wrong certificate and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.- improve config.postfix * improve SASL stuff * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)- improve config.postfix * improve with MySQL stuff- update vda patch to latest available * remove postfix-vda-v13-3.10.0.patch * add postfix-vda-v14-3.0.3.patch - rebase patches (and to be p0) * pointer_to_literals.patch * postfix-main.cf.patch * postfix-master.cf.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch - add /etc/postfix/ssl as default DIR for SSL stuff * cacerts -> ../../ssl/certs/ * certs/ - revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl' - improve config.postfix * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a symlink to /etc/ssl/certs Without reverting, 'gen_CA' would create files which would then be on the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath) Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem' which is not a good idea. * mkchroot: sync '/etc/postfix/ssl' to chroot * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from main.cf, show warning if enabled and file is missing- update to 3.1.3: * The Postfix SMTP server did not reset a previous session's failed/total command counts before rejecting a client that exceeds request or concurrency rates. This resulted in incorrect failed/total command counts being logged at the end of the rejected session. * The unionmap multi-table interface did not propagate table lookup errors, resulting in false "user unknown" responses. * The documentation was updated with a workaround for false "not found" errors with MySQL map queries that contain UTF8-encoded text. The workaround is to specify "option_group = client" in Postfix MySQL configuration files. This will be the default setting with Postfix 3.2 and later.- update to 3.1.2: * Changes to make Postfix build with OpenSSL 1.1.0. * The makedefs script ignored readme_directory=pathname overrides. Fix by Todd C. Olson. * The tls_session_ticket_cipher documentation says that the default cipher for TLS session tickets is aes-256-cbc, but the implemented default was aes-128-cbc. Note that TLS session ticket keys are rotated after 1/2 hour, to limit the impact of attacks on session ticket keys.- postfix-post-install.patch: remove empty patch- fix Changelog cause of Factory decline- Fix typo in config.postfix- bnc#981097 config.postfix creates broken main.cf for tls client configuration - bnc#981099 /etc/sysconfig/postfix: POSTFIX_SMTP_TLS_CLIENT incomplete - update to 3.1.1: - The new address_verify_pending_request_limit parameter introduces a safety limit for the number of address verification probes in the active queue. The default limit is 1/4 of the active queue maximum size. The queue manager enforces the limit by tempfailing probe messages that exceed the limit. This design avoids dependencies on global counters that get out of sync after a process or system crash. - Machine-readable, JSON-formatted queue listing with "postqueue -j" (no "mailq" equivalent). - The milter_macro_defaults feature provides an optional list of macro name=value pairs. These specify default values for Milter macros when no value is available from the SMTP session context. - Support to enforce a destination-independent delay between email deliveries. The following example inserts 20 seconds of delay between all deliveries with the SMTP transport, limiting the delivery rate to at most three messages per minute. smtp_transport_rate_delay = 20s - Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes that a "not found" result from a DNSBL server will be valid for one hour. This may have been adequate five years ago when postscreen was first implemented, but nowadays, that one hour can result in missed opportunities to block new spambots. To address this, postscreen now respects the TTL of DNSBL "not found" replies, as well as the TTL of DNSWL replies (both "found" and "not found"). The TTL for a "not found" reply is determined according to RFC 2308 (the TTL of an SOA record in the reply). Support for DNSBL or DNSWL reply TTL values is controlled by two configuration parameters: postscreen_dnsbl_min_ttl (default: 60 seconds). postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour) The postscreen_dnsbl_ttl parameter is now obsolete, and has become the default value for the new postscreen_dnsbl_max_ttl parameter. - New "smtpd_client_auth_rate_limit" feature, to enforce an optional rate limit on AUTH commands per SMTP client IP address. Similar to other smtpd_client_*_rate_limit features, this enforces a limit on the number of requests per $anvil_rate_time_unit. - New SMTPD policy service attribute "policy_context", with a corresponding "smtpd_policy_service_policy_context" configuration parameter. Originally, this was implemented to share the same SMTPD policy service endpoint among multiple check_policy_service clients. - A new "postfix tls" command to quickly enable opportunistic TLS in the Postfix SMTP client or server, and to manage SMTP server keys and certificates, including certificate signing requests and TLSA DNS records for DANE.- build with working support for SMTPUTF8- fix build on sle11 by pointing _libexecdir to /usr/lib all the time.- some distros did not pull pkgconfig indirectly. pull it directly.- fix building the dynamic maps: the old build had postgresql e.g. with missing symbols. - convert to AUXLIBS_* instead of plain AUXLIBS which is needed for proper dynamic maps. - reordered the CCARGS and AUXLIBS* lines to group by feature - use pkgconfig or *_config tools where possible - picked up signed char from fedora spec file - enable lmdb support: new BR lmdb-devel, new subpackage postfix-lmdb. - don't delete vmail user/groups- update to 3.1.0 - Since version 3.0 postfix supports dynamic loading of cdb:, ldap:, lmdb:, mysql:, pcre:, pgsql:, sdbm:, and sqlite: database clients. Thats why the patches dynamic_maps.patch and dynamic_maps_pie.patch could be removed. - Adapting all the patches to postfix 3.1.0 - remove obsolete patches * add_missed_library.patch * postfix-opensslconfig.patch - update vda patch * remove postfix-vda-v13-2.10.0.patch * add postfix-vda-v13-3.10.0.patch - The patch postfix-db6.diff is not more neccessary - Backwards-compatibility safety net. With NEW Postfix installs, you MUST install a main.cf file with the setting "compatibility_level = 2". See conf/main.cf for an example. With UPGRADES of existing Postfix systems, you MUST NOT change the main.cf compatibility_level setting, nor add this setting if it does not exist. Several Postfix default settings have changed with Postfix 3.0. To avoid massive frustration with existing Postfix installations, Postfix 3.0 comes with a safety net that forces Postfix to keep running with backwards-compatible main.cf and master.cf default settings. This safety net depends on the main.cf compatibility_level setting (default: 0). Details are in COMPATIBILITY_README. - Major changes - tls * [Feature 20160207] A new "postfix tls" command to quickly enable opportunistic TLS in the Postfix SMTP client or server, and to manage SMTP server keys and certificates, including certificate signing requests and TLSA DNS records for DANE. * As of the middle of 2015, all supported Postfix releases no longer nable "export" grade ciphers for opportunistic TLS, and no longer use the deprecated SSLv2 and SSLv3 protocols for mandatory or opportunistic TLS. * [Incompat 20150719] The default Diffie-Hellman non-export prime was updated from 1024 to 2048 bits, because SMTP clients are starting to reject TLS handshakes with primes smaller than 2048 bits. * [Feature 20160103] The Postfix SMTP client by default enables DANE policies when an MX host has a (DNSSEC) secure TLSA DNS record, even if the MX DNS record was obtained with insecure lookups. The existence of a secure TLSA record implies that the host wants to talk TLS and not plaintext. For details see the smtp_tls_dane_insecure_mx_policy configuration parameter. - Major changes - default settings [Incompat 20141009] The default settings have changed for relay_domains (new: empty, old: $mydestination) and mynetworks_style (new: host, old: subnet). However the backwards-compatibility safety net will prevent these changes from taking effect, giving the system administrator the option to make an old default setting permanent in main.cf or to adopt the new default setting, before turning off backwards compatibility. See COMPATIBILITY_README for details. [Incompat 20141001] A new backwards-compatibility safety net forces Postfix to run with backwards-compatible main.cf and master.cf default settings after an upgrade to a newer but incompatible Postfix version. See COMPATIBILITY_README for details. While the backwards-compatible default settings are in effect, Postfix logs what services or what email would be affected by the incompatible change. Based on this the administrator can make some backwards-compatibility settings permanent in main.cf or master.cf, before turning off backwards compatibility. - Major changes - address verification safety [Feature 20151227] The new address_verify_pending_request_limit parameter introduces a safety limit for the number of address verification probes in the active queue. The default limit is 1/4 of the active queue maximum size. The queue manager enforces the limit by tempfailing probe messages that exceed the limit. This design avoids dependencies on global counters that get out of sync after a process or system crash. Tempfailing verify requests is not as bad as one might think. The Postfix verify cache proactively updates active addresses weeks before they expire. The address_verify_pending_request_limit affects only unknown addresses, and inactive addresses that have expired from the address verify cache (by default, after 31 days). - Major changes - json support [Feature 20151129] Machine-readable, JSON-formatted queue listing with "postqueue -j" (no "mailq" equivalent). The output is a stream of JSON objects, one per queue file. To simplify parsing, each JSON object is formatted as one text line followed by one newline character. See the postqueue(1) manpage for a detailed description of the output format. - Major changes - milter support [Feature 20150523] The milter_macro_defaults feature provides an optional list of macro name=value pairs. These specify default values for Milter macros when no value is available from the SMTP session context. For example, with "milter_macro_defaults = auth_type=TLS", the Postfix SMTP server will send an auth_type of "TLS" to a Milter, unless the remote client authenticates with SASL. This feature was originally implemented for a submission service that may authenticate clients with a TLS certificate, without having to make changes to the code that implements TLS support. - Major changes - output rate control [Feature 20150710] Destination-independent delivery rate delay Support to enforce a destination-independent delay between email deliveries. The following example inserts 20 seconds of delay between all deliveries with the SMTP transport, limiting the delivery rate to at most three messages per minute. /etc/postfix/main.cf: smtp_transport_rate_delay = 20s For details, see the description of default_transport_rate_delay and transport_transport_rate_delay in the postconf(5) manpage. - Major changes - postscreen dnsbl [Feature 20150710] postscreen support for the TTL of DNSBL and DNSWL lookup results Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes that a "not found" result from a DNSBL server will be valid for one hour. This may have been adequate five years ago when postscreen was first implemented, but nowadays, that one hour can result in missed opportunities to block new spambots. To address this, postscreen now respects the TTL of DNSBL "not found" replies, as well as the TTL of DNSWL replies (both "found" and "not found"). The TTL for a "not found" reply is determined according to RFC 2308 (the TTL of an SOA record in the reply). Support for DNSBL or DNSWL reply TTL values is controlled by two configuration parameters: postscreen_dnsbl_min_ttl (default: 60 seconds). This parameter specifies a minimum for the amount of time that a DNSBL or DNSWL result will be cached in the postscreen_cache_map. This prevents an excessive number of postscreen cache updates when a DNSBL or DNSWL server specifies a very small reply TTL. postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour) This parameter specifies a maximum for the amount of time that a DNSBL or DNSWL result will be cached in the postscreen_cache_map. This prevents cache pollution when a DNSBL or DNSWL server specifies a very large reply TTL. The postscreen_dnsbl_ttl parameter is now obsolete, and has become the default value for the new postscreen_dnsbl_max_ttl parameter. - Major changes - sasl auth safety [Feature 20151031] New "smtpd_client_auth_rate_limit" feature, to enforce an optional rate limit on AUTH commands per SMTP client IP address. Similar to other smtpd_client_*_rate_limit features, this enforces a limit on the number of requests per $anvil_rate_time_unit. - Major changes - smtpd policy [Feature 20150913] New SMTPD policy service attribute "policy_context", with a corresponding "smtpd_policy_service_policy_context" configuration parameter. Originally, this was implemented to share the same SMTPD policy service endpoint among multiple check_policy_service clients.- bnc#958329 postfix fails to start when openslp is not installed- upstream update postfix 2.11.7: * The Postfix Milter client aborted with a panic while adding a message header, after adding a short message header with the header_checks PREPEND action. Fixed by invoking the header output function while PREPENDing a message header. * False alarms while scanning the Postfix queue. Fixed by resetting errno before calling readdir(). This defect was introduced 19970309. * The postmulti command produced an incorrect error message. * The postmulti command now refuses to create a new MTA instance when the template main.cf or master.cf file are missing. This is a common problem on Debian-like systems. * Turning on Postfix SMTP server HAProxy support broke TLS wrappermode. Fixed by temporarily using a 1-byte VSTREAM buffer to read the HAProxy connection hand-off information. * The xtext_unquote() function did not propagate error reports from xtext_unquote_append(), causing the decoder to return partial output, instead of rejecting malformed input. The Postfix SMTP server uses this function to parse input for the ENVID and ORCPT parameters, and for XFORWARD and XCLIENT command parameters.- boo#934060: Remove quirky hostname logic from config.postfix * /etc/hostname doesn't contain anything useful * linux.local is no good either * postfix will use `hostname`.localdomain as fallback- postfix-no-md5.patch: replace fingerprint defaults by sha1. bsc#928885- %verifyscript is a new section, move it out of the %ifdef so the fillups are run afterwards.- upstream update postfix 2.11.6: Default settings have been updated so that they no longer enable export-grade ciphers, and no longer enable the SSLv2 and SSLv3 protocols. - removed postfix-2.11.5_linux4.patch because it's obsolete - Bugfix (introduced: Postfix 2.11): with connection caching enabled (the default), recipients could be given to the wrong mail server. (bsc#944722)- postfix-SuSE.tar.gz/postfix.service: None of nss-lookup.target network.target local-fs.target time-sync.target should be Wanted or Required except by the services the implement the relevant functionality i.e network.target is wanted/required by networkmanager, wicked, systemd-network. other software must be ordered After them, see systemd.special(7)- Fix library symlink generation (boo#928662)- added postfix-2.11.5_linux4.patch: Allow building on kernel 4. Patch taken from: https://groups.google.com/forum/#!topic/mailing.postfix.users/fufS22sMGWY- update to postfix 2.11.5 - Bugfix (introduced: Postfix 2.6): sender_dependent_relayhost_maps ignored the relayhost setting in the case of a DUNNO lookup result. It would use the recipient domain instead. Viktor Dukhovni. Wietse took the pieces of code that enforce the precedence of a sender-dependent relayhost, the global relayhost, and the recipient domain, and put that code together in once place so that it is easier to maintain. File: trivial-rewrite/resolve.c. - Bitrot: prepare for future changes in OpenSSL API. Viktor Dukhovni. File: tls_dane.c. - Incompatibility: specifying "make makefiles" with "CC=command" will no longer override the default WARN setting.- upstream update postfix 2.11.4: Postfix 2.11.4 only: * Fix a core dump when smtp_policy_maps specifies an invalid TLS level. * Fix a missing " in \%s\", in postconf(1) fatal error messages, which violated the C language spec. Reported by Iain Hibbert. All supported releases: * Stop excessive recursion in the cleanup server while recovering from a virtual alias expansion loop. Problem found at Two Sigma. * Stop exponential memory allocation with virtual alias expansion loops. This came to light after fixing the previous problem.- correct pf_daemon_directory in spec. This must be /usr/lib/- bnc#914086 syntax error in config.postfix - Adapt config.postfix to be able to run on SLE11 too.- Don't install sysvinit script when systemd is used - Make explicit PreReq dependencies conditional only for older systems - Don't try to set explicit attributes to symlinks - Cleanup spec file vith spec-cleaner- bnc#912594 config.postfix creates config based on old options- bnc#911806 config.postfix does not set up correct saslauthd socket directory for chroot - bnc#910265 config.postfix does not upgrade the chroot - bnc#908003 wrong access rights on /usr/sbin/postdrop causes permission denied when trying to send a mail as non root user - bnc#729154 wrong permissions for some postfix components- Remove keyring and things as it is md5 based one no longer accepted by gpg 2.1- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- restore previously lost fix: Fri Oct 11 13:32:32 UTC 2013 - matz@suse.de - Ignore errors in %pre/%post.- postfix 2.11.3: * Fix for configurations that prepend message headers with Postfix access maps, policy servers or Milter applications. Postfix now hides its own Received: header from Milters and exposes prepended headers to Milters, regardless of the mechanism used to prepend a header. This fix reverts a partial solution that was released on October 13, 2014, and replaces it with a complete solution. * Portability fix for MacOS X 10.7.x (Darwin 11.x) build procedure. - postfix 2.11.2: * Fix for DMARC implementations based on SPF policy plus DKIM Milter. The PREPEND access/policy action added headers ABOVE Postfix's own Received: header, exposing Postfix's own Received: header to Milters (protocol violation) and hiding the PREPENDed header from Milters. PREPENDed headers are now added BELOW Postfix's own Received: header and remain visible to Milters. * The Postfix SMTP server logged an incorrect client name in reject messages for check_reverse_client_hostname_access and check_reverse_client_hostname_{mx,ns}_access. They replied with the verified client name, instead of the name that was rejected. * The qmqpd daemon crashed with null pointer bug when logging a lost connection while not in a mail transaction.- switch from md5 based signature to one using the SHA-512 digest algorithm supplied by maintainer on ML to pass source_validator- postfix 2.11.1: * With connection caching enabled (the default), recipients could be given to the wrong mail server. * Enforce TLS when TLSA records exist, but all are unusable. * Don't leak memory when TLSA records exist, but all are unusable. * Prepend "-I. -I../../include" to the compiler command-line options, to avoid name clashes with non-Postfix header files. * documentation fixes * logging fixes- fix dynamic_maps patch to enable memcache support, which does not need any libraries- Rename rpmlintrc to %{name}-rpmlintrc. Follow the packaging guidelines.- fix typo in postfix-SuSE/update_chroot.systemd - fix config.postfix * 'insserv amavis' -> 'chkconfig amavis on' - rework main.cf patch * fix virtual stuff * add some dovecot stuff - rework master.cf patch * add some dovecot stuff- The included postfix-mysql.tar.bz2 was using a MySQL 4.1 style of table engine specification. Modified so that the sql uses 'ENGINE=' instead of 'TYPE=' for creating tables.- bnc#816769 - config.postfix issues warnings about missing master.cf- bnc#882033 - Package postfix has changed files according to rpm - bnc#855688 - possible systemd bug: postfix & cifs dependency confict- bnc#863350 - SuSEconfig.postfix complains about modified /etc/postfix/main.cf after updating postfix- replace vda patch: * add postfix-vda-v13-2.10.0.patch * remove postfix-vda-v11-2.9.6.patch - rebase patches - config.postfix * add master.cf support for submission (587) * rework master.cf support for smtps- bnc#862662 - Unable to configure postfix SMTP with forced TLS using YaST2 - Update to 2.11.0 * TLS o Support for PKI-less TLS server certificate verification, where the CA public key or the server certificate is identified via DNSSEC lookup * LMDB database support * master o The master_service_disable parameter value syntax has changed: use "service/type" instead of "service.type". * postconf: o Support for advanced master.cf query and update operations. This was implemented primarily to support automated system management tools. o The postconf command produces more warnings * relay safety New smtpd_relay_restrictions parameter built-in default settings: smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination * postscreen whitelisting Allow a remote SMTP client to skip postscreen(8) tests based on its postscreen_dnsbl_sites score.- Ignore errors in %pre/%post.- two improvements for 13.1 and factory * postfix-opensslconfig.patch call openSSL_config so postfix respects the system's openssl configuration * postfix-SuSE/postfix.service since a few months there is no mail-transfer-agent.target, units must be ordered after a list of smtpd implementations instead.- Proc is not needed in chroot anymore- postfix-main.cf.patch: remove duplicate entry for inet_protocols- fix for warning * unused parameter: virtual_create_maildirsize=yes * unused parameter: virtual_mailbox_extended=yes * rework main.cf.patch - fix rcpostfix for sysvinit systems * /etc/postfix/system/update_postmaps: No such file or directory - rebase patches * vda-v11-2.9.5 -> vda-v11-2.9.6 - fix file postfix-SuSE.tar.gz * made a tar.gz- postfix.spec forces the use of SSL and SASL libraries, so make sure the BuildRequires are there- Add postfix-db6.diff to fix compile abort with libdb-6.0- Add Source URL, see https://en.opensuse.org/SourceUrls - Add GPG verification- postfix-SuSE/postfix.service do not Require or order after syslog.target as it no longer exists postfix will fail to start in the next systemd version.- Install postfix.service accordingly (/usr/lib/systemd for 12.3 and up or /lib/systemd for older versions).- update to 2,9.6 Bugfix: the local(8) delivery agent dereferenced a null pointer while delivering to null command (for example, "|" in a .forward file). Bugfix: memory leak in program initialization. tls/tls_misc.c. Bugfix: he undocumented OpenSSL X509_pubkey_digest() function is unsuitable for computing certificate PUBLIC KEY fingerprints. Postfix now provides a correct procedure that accounts for the algorithm and parameters in addition to the key data. Specify "tls_legacy_public_key_fingerprints = yes" if you need backwards compatibility.- bnc#796162 - script to assign path elements not working in postfix install Build-0284(iso)- rebase patches * vda-v10-2.8.12 -> vda-v11-2.9.5 (and to be a p0) * main, master, post-instal, ssl-release-buffers (remove version) * dynamic_maps, dynamic_maps_pie, pointer_to_literals- update to 2,9.5 * tls support: Support to turn off the TLSv1.1 and TLSv1.2 protocols: To temporarily turn off problematic protocols globally: /etc/postfix/main.cf: smtp_tls_protocols = !SSLv2, !TLSv1.1, !TLSv1.2 smtp_tls_mandatory_protocols = !SSLv2, !TLSv1.1, !TLSv1.2 However, it may be better to temporarily turn off problematic protocols for broken sites only: /etc/postfix/main.cf: smtp_tls_policy_maps = hash:/etc/postfix/tls_policy /etc/postfix/tls_policy: example.com may protocols=!SSLv2:!TLSv1.1:!TLSv1.2 * 20111012 To simplify integration with third-party applications, the Postfix sendmail command now always transforms all input lines ending in into UNIX format (lines ending in ). Specify "sendmail_fix_line_endings = strict" to restore historical Postfix behavior (i.e. convert all input lines ending in only if the first line ends in ). * 20120114 Logfile-based alerting systems may need to be updated to look for "error" messages in addition to "fatal" messages. Specify "daemon_table_open_error_is_fatal = yes" to get the historical behavior (immediate termination with "fatal" message). * enable_long_queue_ids Postfix 2.9 introduces support for non-repeating queue IDs (also used as queue file names). These names are encoded in a mix of upper case, lower case and decimal digit characters. Long queue IDs are disabled by default to avoid breaking tools that parse logfiles and that expect queue IDs with the smaller [A-F0-9] character set. * 20111209 memcache lookup and update support. This provides a way to share postscreen(8) or verify(8) caches between Postfix instances. See MEMCACHE_README and memcache_table(5) for details and limitations. * 20111218 To support external SASL authentication, e.g., in an NGINX proxy daemon, the Postfix SMTP server now always checks the smtpd_sender_login_maps table, even without having "smtpd_sasl_auth_enable = yes" in main.cf. * ipv6 o The default inet_protocols value is now "all" instead of "ipv4", meaning use both IPv4 and IPv6. o The default smtp_address_preference value is now "any" instead of "ipv6", meaning choose randomly between IPv6 and IPv4. With this the Postfix SMTP client will have more success delivering mail to sites that have problematic IPv6 configurations.- update to 2.8.13 * 20121029 Workaround: strip datalink suffix from IPv6 addresses returned by the system getaddrinfo() routine. Such suffixes mess up the default mynetworks value, host name/address verification and possibly more. This change obsoletes the 20101108 change that removes datalink suffixes in the SMTP and QMQP servers, but we leave that code alone. File: util/myaddrinfo.c. * 20121013 Cleanup: to compute the LDAP connection cache lookup key, join the numeric fields with null, just like string fields. Viktor Dukhovni. File: global/dict_ldap.c. * 20121010 Bugfix (introduced: Postfix 2.5): memory leak in program initialization. Reported by Coverity. File: tls/tls_misc.c. Bugfix (introduced: Postfix 2.3): memory leak in the unused oqmgr program. Reported by Coverity. File: oqmgr/qmgr_message.c. * 20121003 Bugfix: the postscreen_access_list feature was case-sensitive in the first character of permit, reject, etc. Reported by Feancis Picabia. File: global/server_acl.c. - rebase dynamic_maps_pie patch - rpmlint * invalid-suse-version-check 1140 * obsolete-suse-version-check 920 (changes file)- bnc#790141 - Command SuSEconfig.postfix reports ERROR - "can not find /lib/YaST/SuSEconfig.functions!!"- bnc#782048 - postfix uses /sbin/conf.d - bnc#784659 - remove SuSEconfig calls from yast2-mail- update to 2.8.12 * 20120730 Bugfix (introduced: 20000314): AUTH is not allowed after MAIL. Timo Sirainen. File: smtpd/smtpd_sasl_proto.c. * 20120702 Bugfix (introduced: 19990127): the BIFF client leaked an unprivileged UDP socket. Fix by Jaroslav Skarvada. File: local/biff_notify.c. * 20120621 Bugfix (introduced: Postfix 2.8): the unused "pass" trigger client could close the wrong file descriptors. File: util/unix_pass_trigger.c. - fix for bnc#771303 * add 'version = 3' to ldap_aliases.cf - rebase patches * main, master, post-install: 2.8.3 -> 2.8.12 * ssl-release-buffers: 2.8.5 -> 2.8.12 * vda-v10: 2.8.9 -> 2.8.12 * dynamic_maps, dynamic_maps_pie, ipv6_disabled, pointer_to_literals - fix changes file- bnc#771811 - postfix update does not regenerate the maps- update to 2.8.11 * 20120520 - Bugfix (introduced Postfix 2.4): the event_drain() function was comparing bitmasks incorrectly causing the program to always wait for the full time limit. This error affected the unused postkick command, but only after s/fifo/unix/ in master.cf. File: util/events.c. - Cleanup: laptop users have always been able to avoid unnecessary disk spin-up by doing s/fifo/unix/ in master.cf (this is currently not supported on Solaris systems). However, to make this work reliably, the "postqueue -f" command must wait until its requests have reached the pickup and qmgr servers before closing the UNIX-domain request sockets. Files: postqueue/postqueue.c, postqueue/Makefile.in.- bnc#753910 - {name} instead of %{name} in postfix .spec - bnc#756452 - VUL-1: postfix: VRFY allows enumerating users- update to 2.8.10 * 20120401 Bitrot: shut up useless warnings about Cyrus SASL call-back function pointer type mis-matches. Files: xsasl/xsasl_cyrus.h, xsasl/xsasl_cyrus_server.c, xsasl/xsasl_client.c. * 20120422 Bit-rot: OpenSSL 1.0.1 introduces new protocols. Update the known TLS protocol list so that protocols can be turned off selectively to work around implementation bugs. Based on a patch by Victor Duchovni. Files: proto/TLS_README.html, proto/postconf.proto, tls/tls.h, tls/tls_misc.c, tls/tls_client.c, tls/tls_server.c. - update to 2.8.9 * 20120217 Cleanup: missing #include statement for bugfix code added 20111226. File: local/unknown.c. * 20120214 Bugfix (introduced: Postfix 2.4): extraneous null assignment caused core dump when postlog emitted the "usage" message. Reported by Kant (fnord.hammer). File: postlog/postlog.c. * 20120202 Bugfix (introduced: Postfix 2.3): the "change header" milter request could replace the wrong header. A long header name could match a shorter one, because a length check was done on the wrong string. Reported by Vladimir Vassiliev. File: cleanup/cleanup_milter.c. - use latest VDA patch (2.8.9)- bnc#756450 - postfix: remove version from banner- add port 587 smtp-auth submission to postfix-fw bnc#756289- set exit code explicitely in cond_slp, systemd checks for it- Documentation for bnc#751994 - SuSEconfig module postfix does not exist- rcpostfix now updates the aliases too- update to 2.8.8 Bugfixes: tlsproxy(8) stored TLS sessions with a serverID of "tlsproxy" instead of "smtpd", wasting an opportunity for session reuse. File: tlsproxy/tlsproxy.c. missing lookup table entry and terminator, causing proxymap server segfault when postscreen(8) or verify(8) attempted to access their cache via the proxymap server. This could never have worked anyway, because the Postfix 2.8 proxymap protocol does not support cache cleanup. File util/dict.c. the Postfix client sqlite quoting routine returned the unquoted result instead of the quoted text. The opportunities for misuse are limited, because Postfix sqlite files are usually owned by root, and Postfix daemons usually run with non-root privileges so they can't corrupt the database. Problem reported by Rob McGee (rob0). File: global/dict_sqlite.c. the trace service did not distinguish between notifications for a non-bounce or a bounce message. This code pre-dates DSN support and should have been updated when it was re-purposed to handle DSN SUCCESS notifications. Problem reported by Sabahattin Gucukoglu. File: bounce/bounce_trace_service.c. - use latest VDA patch (2.8.5)- bnc#743369 - yast2 mail module does not open the firewall - Set MD5DIR in SuSEconfig.postfix to avoid warnings- bnc738693 - upgrade from 11.4 enables mysql service for systemd- Add postmap rebuild script to systemv init script too- bnc#738900 - cyrus-imapd not receiving mail from postfix- Move the post map rebuild script into the start script- Fix the last change in %post- bnc#728308 - warning output after update the postfix package- update to 2.8.7 Bugfixes: smtpd(8) did not sanitize newline characters in cleanup(8) REJECT messages, causing them to be sent out via SMTP as bare newline characters. smtpd(8) sent multi-line responses from a before-queue content filter as text with bare instead of . Workaround: postscreen sent non-compliant SMTP responses (220- followed by 421) when it could not give a connection to a real smtpd process, causing some remote SMTP clients to bounce mail.- Use the systemd macros in the spec file- only fix files that exists in %post- Use SSL_MODE_RELEASE_BUFFERS if available, see SSL_CTX_set_mode man page and http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html for the full details.- update to 2.8.5 * Bugfix: allow for Milters that send an SMTP server reply without RFC 3463 enhanced status code. Reported by Vladimir Vassiliev. File: milter/milter8.c.- bnc#684304 - server:mail/postfix: Bugs in SuSEconfig chroot setup script - Aplly SASL_SOCKET_DIR patch- Move SuSEconfig.postfix into /usr/sbin/ (FATE#311272: Do not rewrite postfix.cf via SuSEconfig) SuSEconfig.postfix will be executed only once after installation automaticaly. Afterwards only you can start it manually or via yast2 mail module.- Just the first strep forward to systemd, please test out /etc/postfix/system/update_chroot /etc/postfix/system/wait_qmgr /etc/postfix/system/cond_slp and /lib/systemd/system/postfix.service and also fill out the missing description.- rework SuSE patch * add missing SASL stuff in rc.postfix- when chrooted and using SASL o mount -o bind SASL_SOCKET_DIR into postfix CHROOT- update to 2.8.4 o Linux kernel version 3 support. for more info see ChangeLog- bnc#686436 - postfix bounces messages with improper use of 8-bit data in message body - Apply patch- rework master.cf patch o fix receive_override_options line - rework SuSE patch o sysconfig: remove POSTFIX_WITH_POP_BEFORE_SMTP o SuSEconfig: fix receive_override_options line- replace vda patch o 2.8.1 -> 2.8.3 - fix files doc o remove 'doc auxiliary' instead cp to pf_docdir- fix spec for building on all repos- bnc#679187 - suseconfig/postfix: missing dependency- fix master.cf o fix missing - amavis unix - - n - 4 smtp - localhost:10025 inet n - n - - smtpd o add master.cf patch - rework patches o main.cf (add two missing sasl vars) o postfix-SuSE (SuSEconfig, cleanup those vars,...)- rework TLS stuff o reworked main.cf patch o added postfix-SuSE patch o added post-install patch Editing /etc/postfix/master.cf, adding missing entry for tlsmgr service add only if it really does not exist - removed Author from description - updated vda patch o vda-2.7.1 > vda-v10-2.8.1 - fix build for SLE_10 o no fdupes ;)- remove document paths from postfix-files to avoid error messages when postfix-doc is not installed- update to 2.8.3 - VUL-0: postfix memory corruption- bnc#641271 - postfix-2.7.1: init script cannot properly stop multi-instance configurations- update to 2.8.2 * DNSBL/DNSWL: o Support for address patterns in DNS blacklist and whitelist lookup results. o The Postfix SMTP server now supports DNS-based whitelisting with several safety features * Support for read-only sqlite database access. * Alias expansion: o Postfix now reports a temporary delivery error when the result of virtual alias expansion would exceed the virtual_alias_recursion_limit or virtual_alias_expansion_limit. o To avoid repeated delivery to mailing lists with pathological nested alias configurations, the local(8) delivery agent now keeps the owner-alias attribute of a parent alias, when delivering mail to a child alias that does not have its own owner alias. * The Postfix SMTP client no longer appends the local domain when looking up a DNS name without ".". * The SMTP server now supports contact information that is appended to "reject" responses: smtpd_reject_footer * Postfix by default no longer adds a "To: undisclosed-recipients:;" header when no recipient specified in the message header. * tls support: o The Postfix SMTP server now always re-computes the SASL mechanism list after successful completion of the STARTTLS command. o The smtpd_starttls_timeout default value is now stress-dependent. o Postfix no longer appends the system-supplied default CA certificates to the lists specified with *_tls_CAfile or with *_tls_CApath. * New feature: Prototype postscreen(8) server that runs a number of time-consuming checks in parallel for all incoming SMTP connections, before clients are allowed to talk to a real Postfix SMTP server. It detects clients that start talking too soon, or clients that appear on DNS blocklists, or clients that hang up without sending any command.- bnc#667299 - Postfix LICENSE not marked as documentation- add some min LDAP support for virtual LDAP-users o sysconfig "WITH_LDAP" o add ldap_aliases.cf o SuSEconfig.postfix virtual_alias_maps = ... ldap:/etc/postfix/ldap_aliases.cf- update to 2.7.2 * Bugfix (introduced Postfix 2.2): Postfix no longer appends the system default CA certificates to the lists specified with *_tls_CAfile or with *_tls_CApath. This prevents third-party certificates from getting mail relay permission with the permit_tls_all_clientcerts feature. Unfortunately this may cause compatibility problems with configurations that rely on certificate verification for other purposes. To get the old behavior, specify "tls_append_default_CA = yes". Files: tls/tls_certkey.c, tls/tls_misc.c, global/mail_params.h. proto/postconf.proto, mantools/postlink. * Compatibility with Postfix < 2.3: fix 20061207 was incomplete (undoing the change to bounce instead of defer after pipe-to-command delivery fails with a signal). Fix by Thomas Arnett. File: global/pipe_command.c. * Bugfix: the milter_header_checks parser provided only the actions that change the message flow (reject, filter, discard, redirect) but disabled the non-flow actions (warn, replace, prepend, ignore, dunno, ok). File: cleanup/cleanup_milter.c. * Performance: fix for poor smtpd_proxy_filter TCP performance over loopback (127.0.0.1) connections. Problem reported by Mark Martinec. Files: smtpd/smtpd_proxy.c. * Cleanup: don't apply reject_rhsbl_helo to non-domain forms such as network addresses. This would cause false positives with dbl.spamhaus.org. File: smtpd/smtpd_check.c. * Bugfix: the "421" reply after Milter error was overruled by Postfix 1.1 code that replied with "503" for RFC 2821 compliance. We now make an exception for "final" replies, as permitted by RFC. Solution by Victor Duchovni. File: smtpd/smtpd.c.- update vda patch o remove 2.6.1-vda-ng.patch o remove 2.6.1-vda-ng-64bit.patch o add vda-2.7.1.patch - rework main.cf.patch o remove 2.2.9-main.cf.patch o add 2.7.1-main.cf.patch- prereq init scripts network and syslog- Remove obsolate postscripts - bnc#625657 - SuSEconfig.postfix and smtp_use_tls - bnc#622873 - postfix doesn't start if ipv6 is disabled- reworked bnc#606251 stuff (not checked in to Factory) o used my_print_defaults command for parsing of /etc/my.cnf o using quotation marks: "$PF_CHROOT" o added sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp)- bnc#606251 - postfix chrooted mysql.sock lost on mysql restart o Now MYSQL_SOCK_DIR is mounted with '-o bind' to postfix CHROOT- update to 2.7.1 * Bugfix (introduced Postfix 2.6) in the XFORWARD implementation, which sends remote SMTP client attributes through SMTP-based content filters. The Postfix SMTP client did not skip "unknown" SMTP client attributes, causing a syntax error when sending an "unknown" client PORT attribute. * Robustness: skip LDAP queries with non-ASCII search strings, instead of failing with a database lookup error. * Safety: Postfix processes now log a warning when a matchlist has a #comment at the end of a line (for example mynetworks or relay_domains). * Portability: OpenSSL 1.0.0 changes the priority of anonymous cyphers. * Portability: Berkeley DB 5.x is now supported.- fix obviously lost POSTFIX_MYHOSTNAME in SuSEconfig.postfix- New file check_mail_queue. This script checks if there are some mails in the queue and starts postfix if necessary. After delivering the mails postfix will be stoped.- bnc#559145 - Changed Domain name not reflected when sending mail First /var/run/dhcp-hostname will be evaluated - Now POSTFIX_SMTP_TLS_CLIENT is ternary : no yes must- update to 2.7.0 * performance - Periodic cache cleanup for the verify(8) cache database. - Improved before-queue filter performance. * sender reputation - The FILTER action in access maps or header/body_checks now supports sender reputation schemes that dynamically choose the SMTP source IP address. * address verification - The verify(8) service now uses a persistent cache by default. * content filter - The meaning of an empty filter next-hop destination has changed. - The FILTER action in access maps or header/body_checks now supports sender reputation schemes that dynamically choose the SMTP source IP address. * milter - Support for header checks on Milter-generated message headers. Please read /usr/share/doc/packages/postfix/RELEASE_NOTES for details.- revert the change to PreReq openldap-devel, this increases the default installation several MBs- bnc#567569 - Postfix: move ldap support to a separate package - bnc#557239 - postfix delivers mail to user's home instead of /var/spool/mail- rpmlint fixes o init-script-undefined-dependency $network-remotefs - fix for SuSEconfig.postfix o if use_amavis eq "yes" then content_filter "amavis:[127.0.0.1]:10024]" is defined, so removed "-o content_filter=smtp:[127.0.0.1]:10024" for smtp - s#ldconfig#/sbin/ldconfig#- Add support for dovecot as MDA to SuSEconfig.- Package documentation as noarch- Remove postfixs update script. This does not work now.- Fix the %post section add missed %{fillup_only -an mail}- bnc#555814 – VUL-0: SMTPD_LISTEN_REMOTE="yes" by default - bnc#555732 - Invalid $(hostname -i) usage SuSEconfig.postfix - bnc#547928 – Postfix does not start during boot process - Avoid append relay multiple times in POSTFIX_MAP_LIST- bnc#549612 – SuSEconfig.postfix- bnc#540538 – postfix-2.6.1-10.1 installs new files in /etc/postfix and does not generate .db - bnc#519438 - Postfix: Running chrooted lets qmgr loosing his syslog-socket - remove obsolate version tests from SuSEconfig.postfix- bnc#525825 - when using cyrus in a chroot environment Suseconfig does not create socket /var/lib/imap/socket/lmtp- spec o fdupes if >= 1100- update to 2.6.1 o merge home:varkoly:Factory and o:F - spec mods o use of getent - rpmlint o remove unneeded dists from examples/chroot-setup/ o postin-without-ldconfig o files-duplicate /usr/share/doc/packages/postfix-doc/html/ o files-duplicate /usr/share/man/man?- added VDA patch o Mailbox / Maildir size limit, known also as "soft quota", to avoid user take all you disk space o Customizable "limit" message when the soft quota limit is reached. NOTE: message is sent to senders, but NOT to the owner of the mailbox. o Limit only 'INBOX', because some people use IMAP and don't want the same limit in IMAP folder that are differents from INBOX. o Support for 'Courier' style Maildir, usefull for people that use courier as pop3/imap server and to get fast soft quota summary. Note that it is also compatible with qmail maildir per default. o Supports for Courier 'maildirsize' file in Maildir folder that is used to read quotas quickly. Note that this option is not actived per default and can be dangerous on some NFS client implementation (like for example Solaris that cache some filesystem operations). o Customisable suffix for Maildir support, when share same external dict between postfix and pop3/imap server sometime "Maildir/" suffix is needed to avoid extra database handling (eg LDAP, MySQL...). - some improvements of SuSEconfig.postfix o POSTFIX_LISTEN: Comma separated list of IP's o POSTFIX_INET_PROTO: ipv4, ipv6, all o POSTFIX_MYHOSTNAME: define SMTPs FQHOSTNAME o POSTFIX_WITH_MYSQL: when using MySQL as backend o POSTFIX_BASIC_SPAM_PREVENTION: "custom" you can now define your own rules - POSTFIX_SMTPD_CLIENT_RESTRICTIONS - POSTFIX_SMTPD_HELO_RESTRICTIONS - POSTFIX_SMTPD_SENDER_RESTRICTIONS - POSTFIX_SMTPD_RECIPIENT_RESTRICTIONS - added helo_access for helo checks - added relay for relaying domain - added MySQL stuff when using MySQL as backend (virtuser) o you should consider postfixAdmin as mgmnt interface o when runninng postfix chrooted: you have to run SUSEconfig each time when you have restarted MySQL because of linking mysql.sock- bnc#439287 - not all POSTFIX_ADD_* values are properly handled by SuSEconfig.postfix - bnc#483208 - Postfix configuration trashed after update - bnc#488268 - SuSEconfig.postfix chroot setup misses /etc/ssl/certscloud114 1526321813  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~    3.3.0-lp150.3.23.3.0-lp150.3.2postfixabounce.haddr_match_list.hanvil_clnt.hargv.hattr.hattr_clnt.hattr_override.hauto_clnt.hbase32_code.hbase64_code.hbeen_here.hbinhash.hbounce.hbounce_log.hcanon_addr.hcfg_parser.hcheck_arg.hchroot_uid.hcidr_match.hclean_env.hcleanup_user.hclnt_stream.hcompat_va_copy.hconfig.hconnect.hconv_time.hctable.hdata_redirect.hdb_common.hdebug_peer.hdebug_process.hdefer.hdeliver_completed.hdeliver_flock.hdeliver_pass.hdeliver_request.hdelivered_hdr.hdict.hdict_cache.hdict_cdb.hdict_cidr.hdict_db.hdict_dbm.hdict_env.hdict_fail.hdict_ht.hdict_inline.hdict_ldap.hdict_lmdb.hdict_memcache.hdict_mysql.hdict_ni.hdict_nis.hdict_nisplus.hdict_pcre.hdict_pgsql.hdict_pipe.hdict_proxy.hdict_random.hdict_regexp.hdict_sdbm.hdict_sockmap.hdict_sqlite.hdict_static.hdict_tcp.hdict_thash.hdict_union.hdict_unix.hdir_forest.hdns.hdomain_list.hdot_lockfile.hdot_lockfile_as.hdsb_scan.hdsn.hdsn_buf.hdsn_filter.hdsn_mask.hdsn_print.hdsn_util.hdynamicmaps.hedit_file.hehlo_mask.hevents.hexec_command.hext_prop.hfile_id.hfind_inet.hflush_clnt.hfold_addr.hformat_tv.hfsspace.hfullname.hget_domainname.hget_hostname.hhaproxy_srvr.hheader_body_checks.hheader_opts.hheader_token.hhex_code.hhex_quote.hhost_port.hhtable.hinet_addr_host.hinet_addr_list.hinet_addr_local.hinet_proto.hinput_transp.hint_filt.hiostuff.hip_match.his_header.hkillme_after.hlex_822.hline_number.hline_wrap.hlisten.hload_file.hload_lib.hlog_adhoc.hlstat_as.hmac_expand.hmac_parse.hmail_addr.hmail_addr_crunch.hmail_addr_find.hmail_addr_form.hmail_addr_map.hmail_conf.hmail_copy.hmail_date.hmail_dict.hmail_error.hmail_flow.hmail_flush.hmail_open_ok.hmail_params.hmail_parm_split.hmail_proto.hmail_queue.hmail_run.hmail_scan_dir.hmail_server.hmail_stream.hmail_task.hmail_version.hmake_dirs.hmaps.hmark_corrupt.hmask_addr.hmaster_proto.hmatch_list.hmatch_parent_style.hmatch_service.hmbox_conf.hmbox_open.hmemcache_proto.hmidna_adomain.hmidna_domain.hmilter.hmime_state.hmkmap.hmsg.hmsg_output.hmsg_stats.hmsg_syslog.hmsg_vstream.hmvect.hmyaddrinfo.hmyflock.hmymalloc.hmynetworks.hmypwd.hmyrand.hnamadr_list.hname_code.hname_mask.hnbbio.hnetstring.hnvtable.hoff_cvt.hopen_as.hopen_lock.hopened.hown_inet_addr.hpercentm.hpipe_command.hposix_signals.hpost_mail.hqmgr_user.hqmqp_proto.hquote_821_local.hquote_822_local.hquote_flags.hrcpt_buf.hrcpt_print.hreadlline.hrec_attr_map.hrec_streamlf.hrec_type.hrecipient_list.hrecord.hresolve_clnt.hresolve_local.hrewrite_clnt.hring.hsafe.hsafe_open.hsafe_ultostr.hsane_accept.hsane_connect.hsane_fsops.hsane_socketpair.hsane_time.hscache.hscan_dir.hsent.hserver_acl.hset_eugid.hset_ugid.hsigdelay.hslmdb.hsmtp_reply_footer.hsmtp_stream.hsmtputf8.hsock_addr.hspawn_command.hsplit_addr.hsplit_at.hstat_as.hstring_list.hstringops.hstrip_addr.hsys_defs.hsys_exits.htimecmp.htimed_connect.htimed_ipc.htimed_wait.htls.htls_mgr.htls_prng.htls_proxy.htls_scache.htok822.htrace.htrigger.huser_acl.husername.huxtext.hvalid_hostname.hvalid_mailhost_addr.hvalid_utf8_hostname.hvbuf.hvbuf_print.hverify.hverify_clnt.hverify_sender_addr.hverp_sender.hvstream.hvstring.hvstring_vstream.hwarn_stat.hwatchdog.hwildcard_inet_addr.hxsasl.hxtext.h/usr/include//usr/include/postfix/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/e375e9814d398bb093d204da8bbee3cb-postfixcpioxz5x86_64-suse-linuxdirectoryC source, ASCII textASCII text9D'FTyu-utf-851566cda455df3c66c574101f2d452bc51e6c0477f9d832a2a4744ff1aa2cf92?P7zXZ !t/w] crt:bLL ~ȑU1EI>T2Gq.R8͠xJ[]э͔7K`XzӇBQ폱Nb]5nEԠcNPNn5;6e9vLN>8$^y&\G:ՑDҏ}g_[k qtn&(d}<ߪD8p4T-^x]z@f8͠c-O1N7fot88ɩF|%+vYr7`/9 Wk5T\R4s0/E8|WL]d&;Z\ȳ'sYF|lzɡB/nuj&ad;Ĺze]-1r›?n.'smS5_#dk :h3;'Ao2hp{Tk͆*Ngz-zZ7qOA&-:=;|>:O]%U?qU?nХHdE"6 n[n9P.f6?'K XU?wjm" *Kuz|"Vp MBN\!J)15PS7gJI F) W&|X8d0KֻлFN`7Yls ܝJH5.U-:.="nZO$9-1V2$.[%VSm:Oum ֓j/b~5ԲlYE{/n(.rt3zK*vy 26iY$#^rtпIW̝hr\ uxDe&!TR0+h ޺* np)^hpM:at?2w_Uq(9A>{D7.JA^TΡhԞ yD-36\٘$>f >(=4EQ1~,,( NZioHӋ4yJs1߿4qK|%QU"& UrˆpLŅ)٣qlpގ֝2ϗ+/؈g  eE?8K ā$DkˁBlPԗ2O.:ΫHю{ъxJEq:gř#h]yȝOF$cΞ,Ep<o<;z( gJI ZP|z-`5~zt]d5L%#tv}q dW-G5:n.v/{J= (y&j8~AC{>>`2G uGHF[KWZ xx^e xsDn .=*_]ɂz6 ij2#Ly:X`$,"pˉxe mluI5cNYS=>q~Sܻ QA"mQgl++bO9S=e8]޶%f+]#I qugJfwU?5].vUlQ Y-K :K3תtFZ0qC3ݾy=ݘ#yQp:c)]2鋍´,J)Ӄz%;E`0#PT]Qj(y,aɉG*RKE5ƻT*;:$ʒӢ+(²L"m>BΝXc񻴚"tnDBo+Wz_Bz KquM0 t'eyuwjx:6p]'vJꧾE i'ZΥnY{Qc&A_e %'`ʯB=H":T֡gv \_\^"Aer4]D%av*>O"NoK`n*MT 0#'$q(`ל3.7̾6dUs&z/4P>\ܜ\Ips P}r,#ê9R`2=M"%~hV /NUֶ+HYxjgDUƻ(en0߆n}&_!8Y&Fב[HLs? .Ľmtt[ӧ K7 FgPBàư\-'qkۀsB{g@Y&ݵ@4XgQJ/ cn$G\\ `Xr2D0 ̲NrZلʕB)!x# !;JL_7K?81N5|ey9/pwowt W ڛ߿ qCa< $pՁ#%c1j1/I+Hi%EyO^v=F =fnh$4<A:g=EIW?O/?(X,:+_]-Ti j+/;b3{Q>oS8bǝo@W;q'űo{#%jS8jZFoG Ld1j<>{Ј'!n "foqL=<zDZTk٧I_$N 0$+!0r9š/g0n[I $g؉q+,eyrГ>ӰG%x!&>'"ΆZ?J11EoIwhfqҏ]LF(G둧#a+.] D  F X#Ǵ Jw[pOZM;L]g [8|hbo3Wυv_%ˆ54<|*pfN2Tu}iDqԗ@BD>_&҆RToq_I(hh/.&t|<| P!P۱ԅ\,5/uf"kNC8v0L׾ 7ũJǝ=x`*1qZRbS`)a8qn-b3i5" jkK#쇢8CxÔ:$1Ft{gq~P̆y3/$A Śƻ>J5"||~:nr׬7.G]"Fg vIs@wG]xƯ.[]Mk+@RvFF{&[9Z1/kK# q(8%ahW.cr<x 5xh{7O,㪅9 拰5{ aTk_4𲟃&l/NA!F(t'[oO |L7^.bd Y 0]VroBV cÝ/_f`O\n`#I箸m\Q"Bq/C/eoҔSF*;0=-s93b43a8 9̰u~DfBois?A,>_Qڲ1YU(@}h+tt7%=RGɻc4w5{R#ZAom `u?f m?dv1;Y*>s2e5r YG(QY(;izt"joF̸3(|0Lhl&5ӞvsWn0adu'1VQ;Gpn|Ч+ UăH` l f_ ~Sj+:[p bOv"8(dNMpU(ߊ͂(<7={.oIb+bIv[1mG3–xCbn.BI' 2٢0=T(-E>!btPQ"h3XO:o8g.@"{1ZH Y{1sA然1n..wr:0/MZ}/"9spaq92`} Z_·k <-> ^GtqSC_O)2]ݵ9MwqtYMk u-GK?DL ɗRr?j Z\爵x8]ie5bel/-p5/A!hgØ.M3dAhm ?)?n:C (7e1FH:oOWvF pfړzTh:U2M"9¾; blg}-Ňtbg`%iAuƂ۱/_ HQnb߮*5 a8(4* /n #!eId)v̞foI4z3~e{ D7tos| ?@I2&IXdv(`Q,Qvp/Vnp|Gwj|dv Bo2AG5.1^-I9XjN}T=f(>V;{suI |);E;O *[\eCC|+39r[/~Q^v^~28\ћ/34"S:9u576S,Dor5ʨ [ wC$sA+y ͅ2Em| Som+#jɢD@N`S fz &|!v]INto;M?;% u-![*~| Rm;sl9wX8 ȶf(7SHPߢJ-="3Aȱאz1럪lw턢vp(Xo;vL<3JBv-mQ/aCYń^2:Щl[Bi Z!30S\U>VN?TM<\yMaƹæ j)h]br'.osVt6m^ͽx:_y7O}4VsObxXV\b,x@Fj(x%DiG4t|M…\'ЃW7n8 ر֜1]ևrP$5d>Ӑo_bPei U@5Tƒ2=&'}$cXƕ(8SH `57su)mN35I>Pjdbh;FX!LRb٠5,alQM533@"[ҊZ,;,z2B/NxޒIA%'@WV 4PN&r2qXo*1`~dSؙspZLDW+N{!\H2 wu~xzu5bscNvl[yX1+z ?ilQsC(3md%IvA/rUaI \$o{^\R.htm_ g,v $9u GWk3(+w$n|[)$4+ZC1gD3sj,!hU=XC!a#\ }\Y8LLp(.l~9ڍ,_3Cw1?m),Wj.%o.|r!< BV8w:iY?/1ݨTmRS4;w;Ζd(uHukz4 }iW)u% "Α, DhPBQ #K`%N(GԽeLi_5 :`}gNvzؼ. G'{,ڻf'E.quMvcMDź͋o8ņ}Yl1'\x]EQsGxn$ dB*}_JI9u"5[-UG3S9+Jv6B iQ"'_Ո08G>v`p5bG8!LF>V `PP5r1 WO=Rq씧x¬jOcaڔڠF9tȺu*0|ȊPXk+kh-_g1Y+8ܦd9Ip<2j3`ZYS" rnk}wtzo/J?:Iu(eSYĉni <" ȇvD'S^v[x:yOdۯ8VĦ135ɪՁ{uYwfUs .霒HV*UѦ&&1u#Z1}md+!ZXٺyRo㍩ 3B/V̪ wy-kRKl[y Y4/Xl!{ƣhS>@Ze@q(\ɡqX294SϩZ^eO*l&ҥ.ŸQ5a/?n{3J@] &!iW)W=o25R՚-0vgBLs؀'FDP!U ꚛXdSw‹tBC) =7Ǫ9\fx(Xba]nyZQ'F=T`'shɣ2d,ۀ~v'@&hghs &ɲ>sa5ӳ/lp,~B>4nRN;?U'Jw+('@#s+\s8^5 P6SQOz=(ycHCxnKܠE@ ȝ˷Z6p|PeB,)<4#@`9=PFs0:3 AS5d:J՗%\Qy:^hyb4(A>5Ry(͵d,ygh lf;"g.mEG)"5i~=6k[ָѽm|8p!/A螣咘Y+ޞhU2xQ& unc{ NBǗq'|n0n0gHmg.N'-j*J:q Y/Tc\i_P:Gz `NΖFIHv/(;2"L7 [>3åFBIYsKze-VsSeuxqF;;*j}ݿ73|CIvҺ9(d [ &7<Ti8Qqvzd_W݁}2kB@k7%Yz{ 5.K]iOu1نe:zq59|Fe_/ߍi~ݷ'xˠ -X,0,#-~*0  /˒K?WY rs^JQ {%G# (_V&ecβ}$:rtTߏa5 9ӤR +@u9E< &׽KL"&m]3;kU It$`ҷnEUW9V#I@̅_4rU5HfQ ^I@5i (܍lV)F"@n7$rt",r>nU7 L|_BGkThc=h/>`;-k[^AEBTw2aIcsu6R$>_epbO0hl*).ԞLdh['1\G6Zb]0.I@t;Wh]w~F:ka=홎E U`( ArP^E4ų3tYQH_H`>R!8Q-+U^xq^r 91!冡w1% D8δY Bt:]g&/}̉%P~/ gBo5oгO6lnZkSZ$J[ϻŎ,I9zX?}!_z11KHe^@`|{v9wH;0R :Ș2 _)n_8 ?X fKxF Y5%C¹ XS.d4f%%1oC},f2Ùkbl#xޚ=ng?+v;@W[^40w2A"Z`7gd鵢lg[kf|xWj\m.:5CTS˯%jVH~v%n cPLv=[mv#OtVq9f[4/c "-jhK݁@u"S}>?:BrN[>x"1,ټ σ]¡ UTUxQe S8ՂfQSV'&Ֆ^DĎ P~d'04"R9kPSz>M?-ί(SFywҁg(_46s?PĊ.ܧ Q{pal2փb[s{8=dFtDiro  j^,/vo~O_==*iFxsLӬ0^+bE:SF r-Cg.(y6cfő-9T##Z(Z~[/=hJ/QB=Hhmݜi>D1heyu3Z f'Xa*E(.1t(w <?Ut+s.,%~' ^0Pi.2#%1olߝKUU,+Ct)8OT.|y 6U(߫rqY Tr].ACSi^LId7\ǃlW:!{~1>>uw+ H*xrw>QD9(ĵTݧ'dgu1(1]S0u-ïjU2958W蚑IiR%:i:QAgTS udZsA2jާ;_)!.2ެ++q2t# q2o㾲!ttE(=ƓM!JZCڄ@="d!2g7]洁_>^c%РL2T 65L"8&:aǒ#ynQ3Śm"xm$iUgP3py90jKpnS)/ 4%X䍰LfqFѺw ^.bvܲe!Oa{ +_jRxw99.Ru..Wm&۬8bK?~oЄ7b-7:q ׃uKm ő;01iTo@^WW#.v)$5ë$@_~:*#gAZ?D))(!j:~Ϊi,K<\/èU;⻀PPf0ɑ7Z\霥ʀ>m0T?@d1l6{YUE&bV> -S_n[,TE"low:d275tTulV|QP'yF'dFB;ApS7 DG&|Ӄrax@J}x2rwɃϥ4Wx|AME1 %冦דDS66*>sϷQ+ ٮN(֑Җ0_$ǗʭQ2}~o|g@gzv*ASQa(+6B"e0sK:Xd>B 2-yHBoKлEɉO' u ǣu_ÎZE1j<GI;XQ$ K|ڮ`;B>JٮBQ3p[P-`Fq/dJ] E}4kÌe봰|!ٚg$('1%^vsv$S1eI8hy{.9ž VP 3{S5=$LP ) d'HX~Dj8F׊wm MWt:XN"O?o[*nQQO08А'QC(*8$=ooځ BzR h f'KRQ#+_*t1k}`s⌼W+oy#82/F{_ƞg_Asͥ!PV EZu\(|{^̠ ">/ػ$2y uMߵ"TS5%1!-VH}h)V`;]+kLsė&hl2(XwjP(JBPߣvTv:ć.n4]P`PCP@"Ofmg$X,C#?g v:&M |BM/-!j },cpP W^6R@PYK򽇾bԌL1 %~$>\/tdrZ#,В҂]*#nDxLs')A]BǠ29mYd~JZƇ})c@ ''84>> d) aV@6>7bՍ ϔN#LLX~bH]5xf"\)4rnlLWy$>_:})r=YA8HH,P`7*κ 4qK0:I_{HV8zRj5pQzꬴL@ϙ<|zPlZ!oţɞB_iQxYo>Yr|g+ V 2幤WyX[&e_RTLxtL dp s[}؄0wK}r#W"o xG;q!ఖQpN\l}KC,$JHg 9Kc:2Q?ɶe`9Jg>X:M;)1X!\]+|=J%-[# FWfZAO䷽ *I8%dd{tmor9ϴ .+hY=E3K/lk qɪ^'Ub@,Þn.:sj@\.C.[t>3l'Tg \SD%:S`嵻j>j/+ D{=˄=^Ӑr (Pxmr[2zMcɽf1ܕ`2Fn[HjV|9ךFe>ƌ=T)iR0 [@K6/Dd3 ّӚÒUeaՒc.6ٵR&Om `a {CF7f UA?cqXudа$4k8aOuʙn^U9+Yfl>MU呆U0cwa$X>!ȴ [(y$)nGݝx-ςx#՟\sЦ^V ß~=^/vBߌx(=4A0lCV+<"85V&1k8)N|f U? a e5aSFDhWO5#2 =jH'lC*g)^ܾ¦ɾo }7΍PY3ǭؙ:N`FJ;Scgz_}>RGdԂJ! :3ӣ9_^p6؞epA^=U, nKqh.ufo>_02 XZW9 nZ70D?N{js)¥1D\'|CfD ݌2U* +I;>@Y҂Q M%Pڌ͏|SDƒXtq(TesҰ&IU7k].JoW{Ú΁Hߥ@0J `~ DK6 #HH¢L'{٪Z3HTu%z6ûWsZ)E乫PIrP bO]*{ߊO}z?g [ 7uܸDzadAA8&wЅ$nR9F~#⮀Jd4FΉ! yαp!SL܀݄rvȒ3%mZ}2Y.<)jZI*== 3zP_l.A"i96 kq&SƔGHkޢF"#tk$=PcHN}ذD<3Wr ^Ɗ8`ƯB_*K 7^ObOAr*3v??_գfB&6Z];`dR$ח?fZ>ك5 (-* +ߦ~'G"ȚÙoq*aԊL}[wGrw\K_^ !Ă2FI0zƞdgX Mp(ѹr(g!N{~D`dnPlo@T>I.xsQVf& 486^qk'&]0g#Cۻ'bSRTpdSxòmѷw-kW,+ek * QzX\׻zX$Wj.sA Eui` ~U}{׮ࠀpC':{]ؘ{:C7E#Vx>0vZxLO&y0Q"v}׎>}6p.u f!3Ť\f~b''4Yͦ|Y6g\oM}r8Lhp((0UʻzԷg-Aԯ, ^<97o)fYͪE~$U'kMY xw@# E!/ȱt 7dEca-@s8~ }}TzSej1W,NJUCK7A.6OEE0NxY.f+nR4 *_*֓8IC׭0{!9TgsCdyS ]NVR&fw{yZ¼ }% QN#p7$a{5;1**k>@bFK-q}ܺ_<$HPd=rzKRU9b_~on, + ~K5pƱWH?ajzV g ]IyݗD+-;٩nf,%֕KԆT7hcZ=<7#u%O{[@IZ_(ۏg|;-D%J5N-H)A-|)%c yKJμ3q!~@$V! 9HIwlQQ_Coއ !)G, 3*@z?VާPhA{ =Ѳg=#s !XmL6V6"Z tA;j)[^Scg}IWsADJzVCu[v)M1b:3yҜ‹1~[$ 'הleb,}0? !HR]JCMȜN E{:sΜUb:4 aI׋Do5L8a؉:rQW"/;yx%SBTx&Υ}-VԌ~BJ9utxPy ѧ)Jzs"[2(-j09m|' d O-].Ȃ[>> E y><ixZ~MXQL&oı׷4^xv'Hbƅ6G&L25 A ;B2*C (r}?匲9}%'K̷'0@@3` ;~;j9 h!O(K3Ŧ0.Æ3ñ󸾇 J%]4贊yX Ig=+%ڻA.jLhlŢ;>Quh 8JdzӐDO#ߐ h}Ma/vssi iNwQO%e(iu@H |cǰK/{$6 f>hPcܲPkHiI}d>@eba}Lr"UHI-oQ;g.3up])"חЮL.sC%_LMs4.UAX2IZd?gԘQY_cY-qs~>4,Af^|(V=A$V89*A%WC"oZnM) _L% M⸻Rpv52oT!U|c.a8SG۩#mG~J%? #LiˠG(bJП ),k_ #&N]1Bi,aQ yIL] {- K>޲FxrIkA@rm2TGor=5muGh-ў|c8u B/I;ЧEOfGZ#.C`kcwei9k1sPKa CW%^|7>; 0 6F4/iUIk0\-Âg8:- OހJ+E,\f"EnC->KurO"Jڱ.= & b[Lgv!@hl._Pjʻb.~7 a[*#wx$Ϯ/;(*⏠ԧbLtimle&7XOt͕%1'ck-!ђlAvȅUH|-O ժ7%{'ߏlz_9VQʾZkH\\_ϓg҄raML۠1'(u?V=L{3cuyYA+s-rAF&׍ ;k'r$)r/oK6tFB5 X@ٓ 6BK:$,ACjC_Lou]bHO %ѩDlͅ-XGV71*yj.ɧΑr*nꕂ(1޶m~ySJJᰖ Baע=ubWN`sɏ01+tffPfqκ/` PfD…/ oF8NURF?-y/==B 0K5ŝv'd$~ŋ,*EG; uX`|çGuQTB~aI E~Ն]ݓ-p,J Q6{ɄtDhحQQ,LFW3h&|9Zsr>vb7L7z F|4Qj;PdL'H|䣧gc !.(lދzI5Ms0VKDR.m!]KL(=}&)օBCxTs5v' r8_(GS-5CWU*@ `~2 !SDBT>CяƣW ȷ"j$Lo!D|}$BdZS8n/>۶u6ԹizqÇ$b3\ Cx3Nuq$cPzYy+vneKjk(Gxw̢%.چ_?n@UNfD rő&.Uoח99ܑhx]bא#xȯP뇷-SȀf\rtSh `ؠhy@!Ōދf+*)"^Ɒi[lCdjBtsă8OOWWQ_%'SxUe#`)5٥b |EBHg.ˁb4UM@qT( 8~VF1[:*x^2Yp*~;MR+k*VFqP7UOg*:Nf;"\$ܕ_/Gl4 p%u *Hғ̗Oo#~76/Ѯ`;Lb[O,C_R>"G. ؔ)4X6T# w\WFrIAek+jujy@2b7u~V$bN,.S]OM)-\.mZ/B)S6K.<|p$y0W+xo~S}͐P詩a4fUj姉f J'5VOZ0lDS6pC-U" ][PSZZ zFcok{4"'?ow1|~뷱(O{c2J|rgW?)-duu_63tߞ~(t)h,\#O/ S$:)vA ٢S>kATA~WC6Ա[|Cw/Vrh/ҥ_w pph64zlfh9C}eb|~F`tfr)x&r9xDPY=AMG,vs,ɔ`ն1Z̈ewد/9oFF'dLۖ *w a0u^?_ QCwȑ[FC#a0h}v@ d[wy1XG MN@wFd~Z@`c LtP{E <[Q+}gw6X=tkݮ"ۼ_ lT )Ծ!9vv4gL+zHVAko!ƅ&Ҏ.2u$jz䥼wF- kZ($Ų? {8, !%h!USKxV(HrE+:e3t0ȿz{ 0dF=.ʭWv)ĄaMmC ri,`;xL$lN끑}nW$1ؑ@y1%>qʪ+hy*M,oϪ~ h]G3 ,GUs  i%LJ oqq'[k[IAXJt3vSiQ͂(7?i)Aķ5k,'LO̚@9srw=."{nx5!ȋVjތec.&xp }t!meѩ:9E&Za60o{ k?~ vD+U~i'F- VcE.98aުEY: 2M3g"bf>(K\4 _j?-erCN`_, U*bݐܬR,o"?@Ocv˕4ɓ'R=YܯX%\CJ1:z= fL}}_RA@nE3m x}bѬG)Ҥ{;y ;(a#gV'^Spm>Q\S56 5.{5F˭ `3<_ (g/pWdhj' ,F L3MT4Y)*-IG;3~4}?VR(^KDm!$D'w_؂N`- =S*FFqH3M6{f"QEk Ǖe!O/{LV nNHleB`6*_ˍ! $Y(^BZc]>9RbZ:O7*~Gbu*`Q[%wv"}^ޡ]qh-p'UEQtוϒۢËL#'/Zx̼ !.9ؐbc(vt{jz ;W"Ef%w@$yH7Of1QХ?b"+-챤\WY7B/ dF+MhzRM.dRPXX C}?ڃ9:H=rEJ: ;{faG&s 86}>X>~YƏ J1W`r1&t ((3kؗ-[Dx%.E ybE'_Se>.=y ϧR0diCEis_(7'7=0z~e[N5박9u jż-2!Yg'OF8W ax,F Z,ύ bb 2\Tv$[gV F? tsE;b6{NKƿ\2PzZ8X1ީ.44J9`썈rm~?CLקW:>0d\4/_q);I yAQaEN R-AySZJ0?+k~IJ o864G@oE¼'S0˚70*˾g0_ŻwkL7询h)eL"^~h{H͗W.@LpUGJT9}5ϭYzc$݁8@8?_CυrO$,RO$LIFNb΄s½U82;vk԰i .%C.yRdN!#[D#xTTP Bq_F,b|A0"/Ce <2MqΣ 20++&wxٝup:܌<Қx:=NûIx:b \ʚ jKjDzS_Wr6 KqQܦ֢^ػz C\lmTKU~"Ԋ?bX!Yjkf¸g4*iwt62I#վ*ǭ9 jKjGm+Hy_/m"ܢAno wS|v` #HfDq+#u}UMm,?;P3(+AW3-u'fm|yA8>%X:^zۄ-c IVoue+O7w~~ y,Lڢ̮:/}2L3N~F/70#㇥*~hhTm;0̂@`=0{ԗc«BkK-ܮGB*c(/%I]'Bhhsx cn2{.0RN]!UK9wܟ@>‚XjÓXewY0P<~.Ӑ}p/up%[#A #\[wrRc^G|ٯuַ ܒ;S r mG;υM}R4S olnjӰ|-;D j[O:YeBms;E8 ?|-*!ȱ:,nvCIR:8bv}9|,lO6XsK~I̘ yZ.Vc} 8uK[! KQfg FKL#@UF 1XƁ[q4 YDr ; S[aH_q]'b̚v`[^j.:e5-֨9vDh4%w˔A.XdC]BD9; &d[gXtz@t;ݠ E6nqP0T_rLCjP92/4s=mp-YU :AU 翈j5Ϲdᨱ~,#J\J-z]ڝn<ARE tک FȌJ:yhx!8F _-1E:~ס7b!ϳ1j9Q70 u |hiZpP>"-JA?=^"GH6_08eԠз<ݫe!.(g+Dn2^1G|)VSg!SƮ Ւox4 s DRqyinŰBuivG[YS? `.Fd$\Xrf"eU0aY\ShOiݮgT60?R _S< cÐjoGv5I-DըjYz3 FEz!\irᓐp!>c (0Xe(UȮ.3^#~R`tbssH`L@ a($2l txDg&D7)7gBtOJ훧qCmod\<" _R[nn|Enxkc;;Noc {nA؞,zePSk]@HDl ikTޔ? vПS63}Ss(tqƧ!Ʉ ET4]/eӸM eѸbm ujpճ:.Qξg]գv o^r;].7YQkJBE4wd @cܠ‡kfe;(avm D.2nd<O'_*[X=)&N~>*2Wu~^fك#_IY_Ftcg&.g˕HbXG{z=\i/=kαLcn+/JMN%ZQHg}Q$]QU\[C?e`D9B;?F S%e"D]8nq9i-C!9BoN7PbamN%wlANYaRG! T$ z&&wPA+O=e˝ȧ{oOLǯ+So sc7sJ>7;!5yx o5tqyDlsE|>7-o[f!$NC J'{=Zĭ$6"C賧RFs5ѥXnoSCcP 䩐v{|{f@De Aύ0ϗZ* wϡXlTL8 #V^>5u@ dw׼q?uI1*֋E{PqlPZG7/(`yrһ+N~&k tN0=^$W ӿpReb#m ن/W.foeӼT0VLEzsٺSAK-g e[ +6,؎vr~mV E };A reu[t*0@:`xkA;s9mze{Sw8WQQa"tN)쒇 eRvny 6tK2߱>m'~']hi$i}"مe: YL;O{-}sxUV ^LAcp#?~ZmGSlTR#98 g =d13XߤQoP\* Oǿo`N{+&gٰf^\g8Qizcr& j^>=YCMʉHߕz8Kԝ$^E8W2|-1Fa;2Jd~LΓ~X\`/q%ۀO"/ѳ.܂T5$os!; cdMtǶ4X(EiYt,'T l]΅lM}'Vy3~ÎW~]Qt ZjLwv0X0YT|E)g 坁%qGJQYGϰ5]"TjL0):B tv|9 }*7RZClwMZ}IU4m|Rė^;k!#OT@qyy+ ܋O6qgc|Kʶ3'̿bs1}~BA"1_"({]Pf&W>D,/v{|KցOݍ\ +Gf)SLGϧ8S\j74fKXfA DfH0>LOnKu4m").8#Ճt9:xxzH_D-Ut $;tDW$.3rCuA+ScoT5ǯwŦ5G@E,URp̸z &2Hfk ~T-\c0aopuD 1Ψ`tR!?QT֗ej#ؗug/ 3* K M we▷ʯ"T\+@ǯ`v' >ǥ @}8yԤߣs-Q8hLp}b,ʌN4(s&#; Q%1T{v[VZ>hnJHxz%lx[az{nSR7IG׫\>W+TO=mehgKXZ(VTĄ e5@m2մf/1#)T@ඌ*IrZ7d255p>I?a‡ʶ>>Uf#t?OY0% M]*,F0f9oHtP\A}tp : ڛP<݀P ԠYkY'tjS,xl~sDu{(35mq՛`3aX/ŷnOuL_3-՚'pW ru˩IF: <]8K8T'o!3ė*n09AD%uA_;Hj`fS[BHkGhJ++==;SRn !Zyg! *Q{9ζg qXvnHS!#VqlQs K +bO?9]y# )u~(AĢ y.ÍgDр)V~DdjU=&N׫ $ uw[Vux qP% psǜ^;uhǜ3Cj s|wSr!.Md-%I$>0Pp~> }7tM ;DsMUũnw2ż䗬;b4ՠ9-L 8ǻ=^PluֽOY%Qx3%]=鷹)W&:6!eyzkMd$SӐH#5o`,xنEP }-(۝#IyZ&6]5Hv] t`M~QN >,> ֝;zSxP8ugxG_Y9֑ӽ9٩~xA xg( i\W+dگu색 zDre Z8adןƨ .J9dQA _3 M@si|S^#9,`m e5U KHKf&VJta䷡Cq\]Ny?NFGQ$A؁DS_NJ\k8P?yJr!ZDnJV% "dܱVV4'G/RLd7Yt(^&DD"-QHF+_2mTH[~gcC%[lSJm^8`oErTtO7C~s*5bt#5|?vzdwFV8开OJ1Ez}&Kf2%iwZW%KSVF]=[Ƽ]b䌡~YB]&m.!GR레}Njj0O1Z&ۺn@GJ9vKNRt ;z}vTN:j}ZDz  ſX N\GcϟH+;Ӱ980AWouSq~3Dw,fxD'4=?BmpCك4H2o!K/S%,dm*GОe=174\%l)9~`m4IQȵEIC1)7ujQeѮ ygQAyUלr7ϻМԣnyJ xip#׬6촗w51ͻxA!8)\u){0S~*|0W$TFٗC1 :.ֳLЅᵠwan92 MvM*v<KobA?^ 6(Iz꧸ 9wӡ([J'}PW]J6~9v]VBᴹ ~eHb10&}Vz!;"ΉpC~seHֺmQ^1>[3CXt$tOUԹR>*wꮚ&8VwuYWzPtmxPV9&u?$[h[F$H+nEBKq>95vP_|wn|.V:Y, 2D %w\6볫:v0KS,?ws r'v9? r(~߭oɭK 130Dzh8aƷ.?g h6'IS=ZVMj0bXVJŌ_Y2E WՓY7C.:ՇӉ;Zs<{0=g֦2jfg cM^J> AY?XOdraMhu?WS%kh)jvO>c58Ymyoe?J &($!mɡ GS,7N:9w^4(#^OM Z!-X(P&wBe \KWBgG^wqg7ljs}u_Obé΀+/ ?>ߋSyc, bp2 3^4Jd/9p&tj㽬xmU[Ъ 0`ݦ5x(X]͐4y: wB|7\*GϾg6%6QpM\"{ŗ) ּ csSSPiRv*0+և}"D83jmw@%`HHc4fՙII`@:*p۩>A- aEĭЏ["CM8U;z܋gCћE %TUXM<عUrs95k <*Fk\d boJEDʁHusx(jį* SA{wO]v@~tK(]Cm%>>k'"Y mA>677e2ۏ{9oRWv !gB}Vz%WYy9J^tS%xOU!A ӣj}3G*\}l3]LHd22u6+tEZ7S9JThf+sHa3$U?M4lS' P=Jj{"^8Dxi 92{0v%uָjW6أmiVv]t~SOQ#a`&5^s+v;s؎glgD,?wz=|uEvsEz,۔Mʹ UP0}=% ɞ7:$5Scݺ2 UFNhg #+f6#32R4vve joy}uă@rKG"#U6m &-XvfZvB '7P{~B;- G3S&&wSٕZuJlͱwiYTm+7 z7w"?NLخ)́FmnMoK}jj]\L xYf[bW}L/v1+,Z)Ή{mH t m^dTZm8ƴudN k5 8 Nqpe&0:6H -<@<0hY9uԥH,LĩxZM ܔcM(q}Ԑ/a0UtOo)9F8S"a[~6R'Ql,Arͺ%ѯ`mjSCM's їP"ps^#-6VNw5JloXxppDJHZz.JMޒ#$%NU3me]"-ڳRmɐ*5_Ɋ9wQB{0]w} pe݆,#Z+R L\aks bpFphǻ #\Z=jf3X`<` >0#/F߅"/5i)1ɢ&z^  *o1`oWn9v8{&f5 C"C?Ed%úu@6rN y@lq<"F}V )>TrLo-v|>HDB`Zo; ʝu{XrOcKb>)ēѺYU}%j2{7! Jt?}Ǎy߂V!LWEϵʞ|Z*B ſdeP~:@q+ʋ+97Qln)ۊĚDQvj\JQǷ-Xl9"2W=ÿ g (j6W=^P@-5 1T̔ܪP˪k we@`l*{]t$;i>n5sʚWºLxU8wݮztY~2]du4M[L!  rwflCMx8~QZӱ޲`(4H٭YJP{ */V,* $Cck;kպ_J!Ļxck*jƻނ08+s4w02%ɿXQC )/G %w4AYTs"^K ԓUTPiԹg4.I4c 7 U Rpc'4K-Sd$˜4d#AH&nֺ騭v~ à]q-n *xˣIl*7rS2ݝ}G;DŽS48n:Cރ4*؟Y 8Vw8A)J%m%mQz^;h 7AHwaC׳]r=.xe T؟İb5,/AOlХo$LCId]GU;c'Dc=Y&M'`,WKLEzCJk#hmʚeW=)YdHeZ+(\NTkDfZ(.*3?E_K.`S'#[,+N&tTu$2qAeddn.(#RB|\L=~rTF]yM[s2r\$LXnde3+ 3~ dsO+Ae%8?ZBvwj^+)0xjD~忐Nb8 l.l=HV "f/QVGI8L`6n)&9#qAB:J}${ 6 1-"8~P6LFP'IbGF}bLBn_8SϤ`V9MOIʱ!!$OBӊ aZ@tp0{a?3#[$|hɔW0ouR*..& x{墂3tE-VyByG\tɜBn_ϮqY9Gfz!iG5}S c?Gw[?6c f̦$Z"ts*+-3_hW i9*BZF!R<尘vaXIn@.Ǻ`0z=YakG;Q='@2 n;]vaR/}Wp%L|Y\DP4v=ʩg#B3N]2bw/vU<.q_ `Lxtv$Ob,?ǖ2~I/wc4au[-c%Dhu7)j( 76hVJs"h{֑\T#2,h1}KF/ Z.R-d8:o -oJ}PMBpD κ0q `) XR;ǾJ><@(HVTa33jKB+*52yY~W酻8vSH"AL23l8k|rA 1o*Xv=o3X? Wc/1b Btj@>ҩe;bį}L>FxNohBClcK=w͹ůDe["kX p!ADe@E9V)=\k,?A/;BK$P1ȱe_Z/+.hH,-V XhH%o 8Y4D D#%`-! !& lUgjYtw,4^eݩ곾 ÕT6M ܨ Sz:_s b00WCJJ%9J5r),oj(ׁl吗S &mym"HZg#&Qgܟ*l~{b>5P/f\+е̫`W,%bLCl -gɭGVXrvu H)G9xPxz[14;(nN:_YQ4Nsy4A҉ȇ26ަ1΂ SQ`fV) QQͦj]=HxcJw;dd"57$ L40<Pbg }Z?Ø2Vc%tHKXpW׫6Yu>O֎m"$>hl#6pbvpo)]gS;gpnNdmÞ؃u52fu6CO)ޮQ&zC商<'> ͕IAiΑa;]## I}E=,u,2qFYyveW>tdkiз՟aB [S""(X &fe AЯ&U."6`c(*u<@*:,=YӌjE!Bbٿ[A6mh9U 1bu2)Bt3ț ,,9Nw#Ҹ> "u[hJk|?h"<ۂ-$ Osz >smOP|/Nlmxv&3lo k #T=eO6Ԯ=H6 $bbE Ebn<2~- |"ϿI1ekj@D)DHB "cȏkTDr8ŤFVJs%?XRnZWQmY~#AU23sdZ<s7j* nyyn>Yts^Mi>K;4 XǤ=)tf\A+[qcЭg% ߪ( #ЀEnu);%pw/Ȇ*f\> *G('o p>eF}lZCa &?qL'G7"eo/QqֆQOF h+e_l,:iQu_͕ xY.T`M5uw֧Œ&KTU@F,Tt-o?~/8|/uX_Eˤ<76kqJ 6.<ԲЋ3Q 2G ?ZY>BfZ8e=x'~ޫ/óY-l`Ohtn/72N#Eh@+ji'PQK:9kJߪ0 0+o]4Rk91'"Ro2ss:[(YQɃgXݯeT'ퟀ2{I2 +ƿLlCpo"Vw?Æ(@rluk7fm5e?Բؼ,gnZĊCѕBhKHXi3`Dt/[,fMq!c&?X]MAG`V26O-dc ӝoc *>&T$]cGtǤDGRZ8")e@C5s'AyRYh/ 14ܷ\õ{6$(l f'xQoښx 'vutzdϾRAjz/h\ͣ$nEnkWto͐3f9l>Eƒr΄DH8W?&O8C= 3u'3 ܚbfͤ-C.oRq(|_kKKŎ*\"4۠PB/%D<Ř[{26}ꗶJ!ۡw_*coɐ-^|Lӄ{Ujl-`zmH`B]`f:&g{,c}`OkC[1::; }#}4g8s _f(;3\߷ Ze O/@YL2F=w?LBPbx}|n΂[E6m20h Lܹ,O.D^I@y^AzIGf{Z#a-R7#Kj=,=za_ "oxǢ#C#-iWIK[W+):9@ \_"}t>tj꧃n[%G8p~gLwN؛zϳ )Blы {#TҁHy%H\1"xVK))2t7KJ$wY uU" 4g-;쎈7&t 0ƻ:ڑ9*4*C, " fsVf37pr4N ':)۳M׃T$ ȑbJ#>a >Q VT2Bt^&)h=꫍qdF9ux.(otӔ$M )g.}v|ibۃIFs#4.]p3틯 AeFwQ&qC>5Mno?UJ-!We/?AZ@eOGm47E_ ѵ9ŴDhݧiJ)LeX3 }`Ei~NF5b7)a $f}XA;~#p4a7*P=WqRg_RY`#^-.ȿ}KLcwg֢ɘSˉy,ChlÊ$cDbO(6+S1G3ۯ ؉A*v vDJ-BS~Uċ2-XxGȌƊH% Q2C C7-|do@|Hi kGafn.d(z?ɲuC⠈E*/}3v^w߲KCOr|6 Fij&u6tp|ٝjP5"d 7o̤\@;J+| ^IC_ `#= ]A3P,R2rYO>!Y#:ik:>z*_!2~!aJs5 z=9sJ8&]`#%a^M$}ڴIHy^ϛtĎxkH,l!4kVPg&?(Ž6OFt%"q%T|. }lGOO1K(J4y$IR"l! 8}0J4q5vml,BUqS|/kElҋuhbfjQNO e!}$&f#͜͞]F5U1ϡ͞v:ʠq)n3Gf;HAzFC߶.jqTV稱hPH8OgwrDlNH\jbz%%>l"?~ Sxq0H\)>!G*v;x,`F{>J{)Xq i550I6ceWG/)fEmNMeZLk/iW{.`H'}ᇤ JW·m?UkszV2.k#1RG""D{Nߌ]L=1>m 5:SKëHҍ ~ 0d\m f:)\^pZ\|qF̘-gHśߏ:`BW8%$=Ј:7u9KL $ x|b11U7^]\rm:>Wqn 3QBBVˠ{&m(z`ioB' A^eGEb dpsIQEd.3aMLD69( 1H5 17*Cͯj>5rjwxa\C@R _wuhTֵ|]MqZ/[+ݲ~%!C緫s dl4K" Ł`_ޙO:]\`Sa:;fJ>{+K^|\6_qV:|8Ռ*Sh]Ƨy 3IO#~:cgRD܌j6nu5{@+:^#mY'ME=4^JC\gz}݀fV.ٽr\Ѡ77LdLJVUōikX]G:eymwSȲ i\y44H(iyn䲓 -lRނ>2'.i35`k{x|h@9mE+h Y&R4ݳpTdD{h uVUz-J-~RpTFl@ibYfc' `\^'YJ0_Bhօy(/d[ȑ z=71'<] p1?L J{j)-|v sYeeD >֐ҙ ,\9U~YIVt<(G[@>bt_*8̺y_%9YF-ُ x"n?g/;p7ݏAXO\Uh?t]#@9H0^Vn^ Q*,EJ7k7K>"˻9շO>gBCoybOO~YMP=ʉXOe%OR3LiLR5Hʆ;̧݊%ujHٞK_!CZ4Cfz!:^yG2nK:ńr){o/CV/O_pӫ}']h} %(UKa0CMyt2~f5󉥱 1VO =c+;o0ahgPƜ}OpƐ<52Lx1MW=R`*LB7~&LpKan-YQ͐Kf8/hccx0#L6SY S ;OU$X' j}}XS"9R@ R)[ |En7'AX'hV\r?8)wS ɏ}$&Oz6& Ů#0JAC"J`K'o$7ԎhglT ?@FpI6nn_ԍ c`ˎ=Qi4BXkC@_s2^mƬN` FCޫ ms g*{ exb#2up;vBvm;@\,ߟЂP>3br >h< Wj=u cͯdJeY>kp|z)5J" 6\dydդSCJD;q|A=v" )x;ۚ_cS@k_&Gr<ğ9%34.6U2{.)NTg[l) bh-\(ȓ0xg[!in A6{3Z| Ȗr3wyl[wr`oXBĆX]2BW>:o@m;|'r[ 9:O/B||>ʊ;\럭l""J6).9x)z/:WK֚)=rc`8/9ShG. QvZ]hjʖTѕ`/bEթ t,uƺ"x{[A\T0ZDmu+UFb#VbWlg-@@`%Sk&A$f^H6#YO?y4Ca+Rșq0eѹ%sW>U Lwoץ6>>D4gf 2ߏ,FtܯT)x6ΏY*%N`?|{= }JyԔ(~qX.|Ͽvv*YH n|ٛPR :|_W魉e~^ugFWau-Dw0rqd$.BNoCu%S4{ h|#DG}[ Læ+CO| ?~/uZv&lToV\qfp!HYsIlNfsakҾ0|Hb⎱| ?(UMŨ NeT";x9' )&WuFT+ 1;NъyL6!+orvq{fS>_7ͬ>#HYr 5Lu{ľ]Gv:47)=16G.VGq7w< м^p ެߦ~%g^ N(˻SuIÈxPΒ/ƼMT"4tד s]8w+z瘋 - ۃ(7B3<嘦sxT"lṅ lcb o 6Ls{K!`oai>m5ZJI!Aa 89؇).H#VmnW,7>=2X~C/ @vMF[Cvk?rDE|Cs0ܠ]_PCw8r5ߪ5%0-:@(=0CXC9X 'B }$UhĒ`!a$4.n8])j1 42>vpn,dW:u ,=H4Nؓۉ|31q~8Whj/]mTIcb<-nLH8sZA]ǃ9~Vj(HCmcvR?u]lLPCj>.s7مO9#!Re]o}%6}FHoW3u+,´\CIT0YSccbgg=-0ֽkpЈM_rh'fK[͙')vj\eqoXL^=n'@꽧V͘}fYe@R q*B*LXCHES H+?&s M) "m&9[gmL ]FsAG9nGyM8lׅllU*8Va \rBT[? s+״6 .^.Sqr]_oԯ"PxdÇK$Na`ƹ{4+D@ÆiblsݨQywY'Q#?l@2 ŰLe<28J zjT2LqX1ݔxyZzt~k$A !c&蛣ncXg`VAHԈbgnlQXŎSO 3"O5d#âj<ƴwvejׇbqkbTrrcji{ rO{4[Jlty|^ۍ.<2W22͙Q_|zbaZ 4y+/M7M&S&iY6<)G"I48fdp1#ސ0zxe*3o< X]oUP:L`Lf GqddM,w f^ X9ZΥwyG,<ńd:( | uBwe4g{啪3bO{XjҤbo36!5hmU7 ;.1I&p@Ԍ:j μ$Dw<qUE1z*^Ō釼݄139%NPQ3<ص ypr Wy8hን7XxsDl'#URP+ߤ9^Sf WNZaϭ{eWKɡPDXn w)$<,P0K-Bh*~X ^dpIi WZ&{1K}OJTcѼ37D3.N^ Ϳ^det u,=JNl2wo&a* r8)1G[b7(΋FP8C0L<3d"r @1Oa.9I~@~_z?c-=Z^ao:&.#뚓F?b=]B;N8;e!JkS--V&lhޜPDe3-ñ.߇-@UX;5][(,? ]W/V."@hŭxwmCL:BDe 8yhxx4'޾<絓Es+QTvBSgL55db5:h೸co(ĨVd;R!,YY鷆z%%v?1%}f5 ў1<IHhn{eۖB$_)-aXޜG™"\V[ D;Q,-"O][{Ac=ݝvD=<+ޡXm\ bzG5ɷ8N.AG^ #[Ͳ'`-x-lhmKmegdha* 3,dv󄫸Lj|ױYI5S-~4zs"#J>yP%{|#7Df_ ܮӣ8;s6їWi_U1\l//I%`y9gBQ;fd&p ?0C,Ecx=ḿ aTic]_Pys5sfPQ76D_,{:jWm QN[wx#%.Y4a/lR)qA>%Ti "w64?֨ 䮹:+=I+ħOz,F{fp k\pBnf(\Pd=s(JNz_cҵo+Ew"[tr@2?~O#Yd$ 䈟 c-/ \SL,^)sGqX${c >xؓ|~Ҡݘ-? 2 $jNb~f؉.)+}vOGtB/&}2eo`$ڂtW/v׮pDa_S lPPŰtE4.Is&ԟ52<K+ 12{N^u@Ouɛ-0d.<7(Fv >[p3AN6XIy>F8:YzJ a<1-8;)p9lg tؾp Dte>|ߪ#3ɂ[%Y)}AWmV9U|Z W'Ц|Fdy][<&bowq>.+zwy ́/Rݪ+?ߕնmҜrVFlo4C&+:@1qfeOSHHӅIC9e#L%%5QY+pӕ$!DgI6CiT, AeutKE!Xr9+ 衡1 +jg=}0zGѬe^{fj1B1[8Jd ;.Z(1-}@6=T* HAD~*TVFU^_Y,+H9*qgJ}[ƓhiS ¬]@fP;D#Os~t8X9(i'[EP L4wrz@O̺&%2}Du Ht2bx1o_ͩ?&Ks{AeXޮSPHS }vtڧyOקw.Ur~ gn)f?bG3Q#QӚ;"xlՉF"Rפk_xaAʅ7Bڹ|1Ayl_yR|BVRBO'f!*f.]]\ũ-K e'HzHv$n߉DQƓ0~tVkɔz/< `zkU7-R iM *!p0•?ܢ9hvS OL^ |jl˔!֌ёer0yL >Ջ 򙾳 }%/ª/Vciwy ,0Ϊi OSLë9O04"g i]Bfϕ*Έ (z?blӡLyvox zM& ᐗZo.v0н o4qs;X~,nQǍEqhuEy3i&JC&6_ì)hz/4J0=}l 8?_QGgFYd&-9Ian!_A(ȝGιl*&pMɐ i^YqU"wVjٿOל\~M$H#狗H;6_g}ey}xmuσ%!%mN{oBf2ln'%μYK_ E†@sa3}Ő&>+(NKY9@ʞ^eNBQkt:{@\J-%r%xS5ذ?# ݬY$ ᜠ#˭7TQնVbr}u~ g5J̶Kzc:y鐊o҉O5Gm[Z<%>vmG|WSW[KzeVQbcpS6IhJ:.[ޱJy#Zvcs=y4.&­s_/gX%X\$>nL7[Bmh*:șt4,QT/O5 kB{O)0Y~'CS%awCXi&񒈇 F 5e''0,p7\s@Y 9R6n?4* ,S ,Cz.H~V^(p PnKo8iN!W%|AT$z-]-h4HWv릑ȻR1@ӽP.PEr"z4 W;r/_2xbP1݄S/ݎk9UR~S,`}-@_-+ +ѭU57iO(z68Fp}>PXbvxŞIHmqeJDh D^*K&)މK Hܡ( yF,aRіˇHiK@˃c7 ڴDtʤ+v4/՞K.n-.C #U"]H.kv '~WAG do6LƬNՆMU&1=rj]\Ẍ́f`EL~ùo2԰mIA’.6gȾb8zh5UW4@JIIczOu]t]ƪH蟓1a*@lѭytPeRڅR(Z )6B/0~2=%.yW7&Ƥo0OugR(`[p~/FOHxv俥%rY%8CzU?^2paw[v;hLpНPѿ"6q;:o|)fV8x5[2u#UNڶZQ>c#ݪب(ʀd`6"3|]i, 냿pwl\%LhiIϑW Cspw_ %dϤ p^ڥb}G7hs©Qӯa{XrW$lbu_~9nAZky*Ax`,( ,uR0Lt#^Gy|³+B"qWDGa!KAjBkpP`n(ef'%d,C{+vnE6(% @ @$[+SQA.pͮ"Bu{3rn!:$(DWn?錃2m-nh0}&W!U |o〄dk;4 C|i}AJl "SAW""qq E-bpϽR֗ǎg@ܾ" /yW\jX2,LtaMjZKi`BPe.6 X&VMu_\,&Jt͡4f:ڢȝh ^Ph &ىAo"qBN cXZa*wz%-/҄ w!mG0TGQ݄Z1†[X<>5͎s v=8DC8 ugԷw!HEާY+{a5=TYnFr ,LqK*t(fWT8M cl#>*)Sad.FٲeƸJ~ȄUoLvJA'F=%dLFG'=ƞ"P۴=b !pK0HcZd;ˆ%Z{Yچu.YA& "5+=+ *Ѡ0ҟ`$PY ۪SV>漟s%SŦ92&b(KMV^剎KjHWG^ps>c0C3p޾FU~smfa2\,J 4ADG:/$ ^{=8blMrڭ׀MXdۀd+zuC:ţqSN0|`ث$ DQ^Eܔ%AȣQ ޴薁7.݇;J)B,6>1`J|WچwbTة>ejXHkINdKFJ" :9Z]grtP걥WOmP.tjCpD_BRiD*!a$wKa0F1N/[bzbb콖"1K|_$WسҪX|$WS VLb=rH {͸9s>$DۉMd/y]n4iSzdQt^vn;pl'ȭ0 [p3F˔Gː(XPT!}>Œ'4y\j"Z!i3C8D+0Vmb|E@IT3K9}/I>@,)w4 cn Chk*Zjq-&-}cq5YN!ÿ%i`( /ȩ_LGH!@CR~ߩ {j77"5- +#絰¼%$cv2GQ? Ƀ_v@gL$1u4"{7ӫg-e=Q/ePC,Ϻ4oX;v){[G fʁ2.8V sETxT} T}ZV@P. Y|&wLMyJGZނdZ@{" ua*p 6jՕXƊPMv9j{MKQlPogE%AiRrv4q>$bR_'UTēF,z¶ m QeՀ@zes Z):gW>A`l䢞!R%^."CSd/p@.z 9( a1'IQIpN-M\prSC$ Rɜvk$1]vܧl*gʀ_< { J{1XL(`6&.8J,d3Vm[uiuIe6ojƝ֑!hlAZK((’%ru>>gjqeAO e $-& H0v#ԣe$k*^ fw4F}l*v:iahQa2Gele~y݂BNh 4Gm=QP,t aG R(7冘u\ VwWSdpÐ1lHm- Mtuݟm@ajƿS׈|Jnuj)OeSyMt# |VYوaUن*!5(6 gQ}5jBrun =^)JȩquCC ]+XOVef7c-tYʧ zHIr[é4K&#ц<kF}٦npYb3K~i8;ߍ. 0M,..Dg\ ]^mI[ KD#Zmlyb2&m%GW}T9F=&+ul$pQ\Cr_dWD.Ɛ4\iB2:-QM쒒ssXMRt•`4i>|1hj23VMt2nߠ7+nvßre#ycGc#Yࠐg=^!52inlr˹2u.wu0F& n'Vzq ;9aUr_z/oUbG!z,AޱgԵG J1=!(B}vem2.[ U4 ,n/CVqTܠ"3x,6EȪ[Ftv@&8<ۚI `~ǰʶyDY t%ʟ]oo V+=Mt%B=ȿU=Bޗ $M~A> ˆ64I3۠)13R"n=ϖu=@} &}ɢ<0w2_7.vN4^$= coj'4/*5H.lx\x kRni(_DzsMnr7LպMFpr !ZBsJ ,Sbž|K,hR23^8ȶ6=2r0/D%%fsv{69ŒI:,ް?EXlU ;Hחߙ2: ˵Rn١9j0x'PǁTqWTF)O8 Z<\A,x2 {+?gDzjFΥܧdЮ vZrOr;KQ,m*K>0^XM#nuD(> ߐ*7Ѓ 0(pmJy"ޔ>%9X<[m~YR?X[W!iLQ3(!*|jyu^ \`Dg$3YU!91}"^XzU] XHAZB :܀D:WBR$[E`05]vCА\41Q1EQd%K\龝Y[?9br *we@ZUK}O$,H.#TI)Dv}.z"xD'dӎ5 qW~X@"IѪ8|kPZ#@JPM!h9I}^Wn2+as3׌㫆$ !R=TAĜXrY.}'h,?sA: ?c H*c:/68s{an-)x UJDV~Z54hփ<#w-HٺB93Ed@;*2'{bD`f5lw[+6bP>&'E{?60Ɓ"NeI밊a{wDu\xPz7-uclTFdoZ˲y\']Y6E?V7ϙE#Iw2aR mTU6^70ݺ ΃i;(WX9I2ݔ{l8;tzmXՒV23MDk%QɅID0?1"e-1CZyVo8yX; 4uBTeMd5FH(^Kl4м ξo3((4VFԳW|%5rwa]i#1(:d6?N2)E"kՑ3x)"+1f!G *"}>QP\(X9;(4܎*n9WP9+" gxy.sR.WF"6M<]׆,r`Z٢F{LQgjAFRvx@d` |3ehvNYcq9|>"Jw~_R.>ΘJk'rgs_џMMt!J`ıiwzBK_y Ds@O~ k썍صX r?K͛s*!<]K mrƉ͗E5ICQX_@͟~UZEO+͙b@Y H=6ھH)kn[l_ ` ө'/̾Ê ukԮuЛMZ0slj<%,F#&6򇱥mjr/I M΋1۷,FJ!ՏPQ{$U)bց9ɊCxw; {Gj*dg u&.ۆm7bɃTBA!ԁRN 8.ו؆L=ix*r?= y0ӷo6-HUge‚_&CVܾ@Hȿ_,ڤ=;^E_N@z%3-R,ߒe}6h,@ԴE}9T{L%`!8i+Şٺ~rd,cԓ\C_\$R3}\5xJ}~AvZ, !\={Eɚ^0&,TGO- V/@HwXA(alPAuCyvZ.se:\NsEt;-9RB20f_3̅"#FBV(FO+h)6 śt~1XS4U1oA|K&Nx 'Pf=P E3f\Ȳ56〖K٥0xASZǏFڒߝ(Q͐3h Bm0٤nRlv&k׸Vx??Px3zL /ЁnЙ_3~$_޶l[L>6(\4?Ɵ-ttKOFI/)`/SrXDx$^tt.֫T4F3-'=>T+Q\Tā@zv/P(OGz/ ~޿Xԥvl?:E'ZhD"Zoӂ^{L-I[kΐ4OJBKɋ;mDcm_fmގBA"# ]P>T)X\/z"uMGzl0 w 2\i>ZA_s/,D0#WeMBE:Y/3v*X]kέGf\|\őif5T:!wک^ۀZc(YaiV[)Gξa$䔁\/aYJ ѐ_mlϼ;aW/xΩK֭oFz=kM%!'Ww&M;Jr2Vhȇۨo)]~-2&A)^wwAv~:vaOB}:",psJ`za#?:~ 1@@n.4?Ɨ3|cwHNt뺟3X/ռ+߷&v5*x%"O}:5l*9LmA|9b;GA8]nQUM\=VZ#Y1*:Zݚ8a>a 3%y<q`)T6Im5Fd(|3ｼ8ZR^D-& jNYLV6`_KHRlHE]0ICjE;>2#FCF\.VJPډ4%IQHXN^@AU/>䃠O=)nleCiR! 13y1 &rE 3(;uT݌Nɬqҝ|cX>s+$l+uEI20 _KrPe: I UV8?ӗ%mǰC}3 Z.ڍ)T&҃)P;}8kOh**T]er5TehY$_m.eWVmɬ n^D.)6T Q+=J|5f60F rjN ׯx3YGW)=flhT.BP ("~_-Av+ht`NH2]Ne<beP& xqo.qKVf\, BMjö!ad-2 6 L$}`Mc8ybS| {c]ܻbsSY F,^6lsEe!(S0o.E@~Xaߏ.󘱭ʦx4)e{6PG*)㷶,Q8HRiZ/k02d,1Wh$h AIY;r1 hCu8_1t'"`",DAa6ejbkkayjc]aWJ0\%$ԓrmΓăeDj+ܞRZ)Pmΰܳ/,W /Ri;Em8oB7\]J#6Af 32Ȣ_2]*> Hk٨J88 'V [5yYn~`D% Nؠ  3CM˦&b[pG kgv_X̴CZFLβ6Gh5Ld(4[DLplR<"sӿ腻u)v=O婂_mgVG+ܝEj*,E8򶷙ؒ0R;nXjpm zHu `Rb ' P {9Y NϏXQdoE+t`.se0M7jgI( 1RT].}bjpUxjˁ!+8 BLyϴbd( fӮ-g\}Ԇ%Nmw]hIh*֫'TؿʭL)LBK(ҥ"oWƤBԗ])6Z X]m597b $akώ 3ME|$%젧L"$kCG9+>a b$<ƽ@mimB"@ imtDiR L֖^8UqRKtDʥ=~kNCC.8.=B%(gk+md.0{땝bcjQzIzZ!U;ʹ@=_Ns΅Ձ}+p)=Z5VHdOF &0FY.+4EԄ&v;FnQhODAvEM-Q ҍ+ S2BL QN)xRt}2xgP6 .:ѷI+#KI2} T=)5r$_er.nl}J|^Z6+-ZCp z㈀d(v䌸G> a? ˤ>u8X*TA!-{X rk&6[(b1g MɦW$!D l+Ml~ʁ摮o4H^+bNerI{)L?uH*<0k4;y"}͎R]mdxχ`!IB?8Ef|Do& C;@[, R丝ch'V#O0O._&^X*- %G!twvbhR )\59AU0Mm@@i] iXu+{ N !.ts\HqJ-6r碃x~*1C,利!#c+{Kl/sHld[OGR_KSҏU&(QͿf}]2Dd8 .^ #LHăʞej,ڃWTu*LWXӹlMl#*лԬE/7L~̫1TF=>^:ԶY?R>%=ޞLuza˓,|b;~=l.FJZ@}iӘQω|u3UQ7s|ữr6J А{l3W/Dbgf4W옄LTԉ{>dtHNUP6N'ئ 70o g:LB"#QND@ R*>k)y>pMH q1]ĵS#.-XjbF#pUql d%oUi(FU%ht 1ylo1#pLڇ\ܜ@4u 25`X[p;uYozgoc}08[g@Z:^>+3F&`kKܬcGQ~7)#:<&lŵ!|/>٫䋺&iX W 08{S+Y٢K_} ?eU_!U|yg nC? +hBI(rt.2A38[!!%}y!7b56x5~EB3G##5M:$fXyWoLZ&t5")~\)+)|zei6ڵ*pp)8SldB& ʹ8z[oƘ&?i S{'l ɶAu0G!hwWb*H~p$:5[csizbG)] y.=J@-zt"!YϝlTX#TAi\,Ɠl;4wGՖX8NLnCea^!Vg. t-zi KK1]ؘR]bVo -]Vp]Ox6o8<[kQX2‚vw۱.ZBcP4 )b% YXͰqq#}ѓ KdYB:v5͆ף g>Z[--"yJC eXg0s? Rnxr1~z2uT1*z Irυ G] W+M;Vz­-J߉h{¹MIE!?y ^˨HV7۟W.̓i*0MB˩c<4l5NDvƂ Ŏef{،OҼQtFu,~h.<5xnڝ}P[Z+ ebI+|`M Jmp]%?$~NTЎѰ=VLn)U<ʓYbCwj7pqwK(ٶcwsv""HtLj+opޒH6kqTIsSWPY7PqDͥJbDu`6O)p< -KubޙALOݯH=r+â%v(>8  SW6 >\$I@6z3 3evIE}[d7W ]$FCY5 Xpy`DrrE]Xd7OL$[_=$/&B*d0ȼ3 ;ڈIlnTư()˻pA.B&zd?BvpmL!`8lXWA )o"liF2JUטp1N=IiRcm)إ3GgbAqeʇ*U|"/ɧujqφhwp6>(@i>{@8?Cے o:)jY _,lIIi(X\5?a*pg+=uw`4RK`ֶ}Kh y691?Je35 ErtJd٦*匩e1U msqrR߿xo໐DE<ȔYMtC}v { {uhaoPOZ+ )I~.[lqJ X=|\Fx9fi|ƾ{܍$r(T'>Aq ַH[Q^akԻydp֧DY4O,JCmX#c#6o2 $EHR_/6Y1s/MNʠ-9枝 |(Kšą4uɽ>J`agz в ]= kuq,,gZNl vIEGZb~ʳZ}B 5 Ť$TE%ϏwHkv#ol,Rԣq]/_NL<*/U!YgEgr nxN˅#uX҂8̆Z6EuQB1/u[5 d?1ۍls\a%,HHFAig]+Ѵ8f*JyW䒴X($3~t)wzb "#ު8j nK)h /sxqڎ@I,ML 9nѨo !n[4dߒuLh#ưW3,sd|?ҟwb:l[c!<%Wk(\՞0Z3E 2_I/[@ȹ*e)?JNі ̱Yk92w<41 .C*fM՜'dԃ?N_#]nҭ1o  "_BWCr[5n-ZNDt )#58ZqE'JR?4[ͫ^0/e_.i&~l96yӪ}MV;X^E1/B dLCő5Q<{la!`^N+q>ݵc*Ԧ>jMtLc-d&qv2c?zښ <)^j;|dv}.gf/`F"x?APfOxy>zZ){w0W ao-Q՗ ǀYh(`L16'L4g9K<6"w([̼13'Fo-G8A6[]LB#V%b֘)^2$݅wܙ'abj1,(l)!Jw;1k)9kuMRu~62xZqm1Z%HyBA'457D)nm\m@4teJ*ӊ21N|)ܞ?䶃yjG0"yBBQD YDr ķKJwHaUޔBpw!ӧUz"BH+e MvV8:~ p(a_lD-$@0ѸXŹhz%b.bGB-C` @gsa%&.֚ N%nԑ:(x^KjW#{WyBM@]UpF[%cti,BQ$[)kB@iGBFL+c\1i}mNM6W ;b !/};͖ˡ@<^6uW^:RѓD@`/h}h1Kڣ8DQԝh{($c2:XF$?=s,8@x1z|^wϥf򋏏, *J~t޻+e.''e kvoeoӳDC'͌ WDJI ;?U}j -ٵ Ro00.o)毊*=iat"U-"ԗ¨~IU4 9\ +y_tV8Dž(&e)dP',2Va!㔙z5vT mMM澇&ʏ xqÍd,` 'C}%ȟ埣~ARuJQtx,76+0XYdo73i 7'ZוIuZ}aRJX'@X$j)A<IgS4Mɼ°V%G}C7K/f[bWFg1qlYABg<^҂Y=tl'9X~l"kR5?%P!dls -z#\1H!5:?ih egaOQn{^,ZGcxk% J cL"xt%X:غ<=Y#GCx}ԍx :զ"V;Wg3X·//cg>@\V#[ [P( #;mhM%vK}.@3UH%M3?⍫*;+1i}ܑ2DB?ɠd~.f jq]q&' [SVz, m Y X5l=eg,{K!,#e]JJrPA9r 3Q35ޣ%ڝ%^jo{>SG[! >W=3Iki][2qseN)EzI^mcX 7؛R8JDe[ φ"rtDn $r 9>\̆xM#.K1^kZ]O_,h1tܵhSy;w,f/zvQmx#SX7HgbӲC$ iEL9sTbH,=迩?sG4MtCW09ZqJ ./V %ߍPk[sn~HjN /jwѣIqzkZkH7^~G(3ʸ$̸7s5@ݛVC)ug3ˊ4Ї2f.F`WVD 2-a`>>$ԟQx TGYE& ԮneX08*x 75 y[C~Kh.ul?Ti"@?w}"hD8D&k^pr`01jCTA,ȣn1ȁ^ nW[/;: Fkƫ!O׮Kpt ,^nbSo>ȳ7*Ry,u?(0F:5atLU |@ P-\P|Hڎ 5bŹep.en{a؄秃e`zs](fUH*ZH1=IQi]~LyCF<  H'}Vlώl+誶x t<|%yieɊ R:?xȏ-|QQUK8aiy@eTu\Qx,{,4!2%(^I Njϡݚ#q U?,w&X݋'TVtC'@1=ƹY]L3Pm&ӊzJ^)[ ,R%d̟(ny><aرQ%"]B>'‡Ҏb$\ E4.LH  `C2:D)c<XӚ49>v:\}3 qQ 5y ?n>@#*lgL©pqkUh1@ &Enַ43"'Au|kکb"ڴlzqo9=N44+c5렪$80' qS*Ǐ@s冑TVyT|m~SB^ %2f6fn:MGḟ-q5QqMY%:ZXY[č<>N)jVo;yllZ}o&Q3=Qvؑ*D7='ES}0ԈEg|*Hүa'̎~ +7az6$?Zl Rkڟ*1Iu/ j8ϭK| wqw$ &B?Q6ԓs<׫2SI04T+6 (@x|fi UѠ05}4~ aobL^x#zaiciJY2;9JKkyCbo"cG"ۡ)٭dW>z C7:=tw{R@Pnj;=xG3Do ATdQoysG |e2*:i*"l_n5tJ̻0)NЏ);5ɹ S$pN_UK('`?KS,p{̥ashr`|vĭRܰn)&?LG1F""^L;_Ѩ\qX&Dh:n>uL2rhG'JEHMo4x}8Y ˖*cDrKӾuK !X`y[J>I gzcɀ5uL?Kϥo7pȨڰogLWqx].߯˹5nm>gbul cE2|LVJ]~36ovQ :WTYt)V;g H.Afƭ>{^c[7-L=eJSLtz. ^d띹>U I 2.rhyPQJGXM\I4]L@W*;iˌg|f\Vp6s:gc δ29 ?~IK*>ay90!c{cR"SW0VAr k]i#cϰN<Ҟʦ ^W۽WOg)&`j@ }%GBVTe{ңڈ}FI_KD2,t^rC5B`)fN]r^O ÆJ}]Ğ =5F< J{< |oei,[p$Xl`@9O X/oMo?Y;Q~Qa ҉f,pX uegY] P)YF^g$HI}_k|8: ewvVTTsࢸJ1 8eouGٌ) |{6Qw}v!_7c2ByՈS&=C=Kݎ)X\AI aܜc!$!Afn-vĽO+i'2x3r2XM|ċ kD{8C+ |z w~$ZLX& 2.|zmװ_p=lE :'QnJh]W`>/rk*@͐y(lxz@=ʖVBeOls'(Y^+rB F'F/gEf9l[@y ۘU*H{`]hՔ8*f_iKQ{&(~ N6_x̿4tO &PоqW]ñQJ!*e98}=3c<0}Kc*itk/u r '%o,D%M_70걤ӂ ᅪ<; zs$r0F=MZ23Wn#UxlS[Z ZBS$;ƒ{PCr˄C,noH}^6ƒAR2C2dE)GÏ;T^ؙU /:K]S%Lc#΍ȀHv&3IeOⰶ .;0K4CfцP`hSUu-"?M1]T3KGQ;yY2U[dSֵBU`G8Mң : !\J: N0+ZiO5p@ËNi͙#+yfcjʈ7"&eKswJh%pܣRO܅u|aϢhedcKrs0j營Qv]HVަUѢG2 4)2c^8mvv7ץWȏ@fGC}b22n>sިAm2#֕4SZc*<%\Nq5.w{:Nr[ jߚP=Je~3 H+j`0%R #-^qw*H[k7e5nֳ)]}yEN`wC ;qy(ljuJ`냒5NWN!S GQ-W8Bzb;C'Wucu>1[ % mݢ V4Φ:2՜Fj#ͣcG }bt5490_q$zmO6z>&ayvd"d&;C7k6, _yp; 0 B)@v!CQ"#psm;IZ=:MM)=wt17 n%9!|x#žTNV^j_bvGy_DWyD(UL9\oUM )!+j'*@fb @ErX>D-m%>^_eHs12]^VսPD\^7!")#vҷ|3APO)Q#/u7@m8G6OR`ȲPq~EwGGCl :]JogcW,U SUJU4MYvI 7 hz!9讍YD 8\e ۻm&( Ϸ%8Q"łmTܑڬ(4ϩ|_3sI4 OV' N=Y\$sԹޯ|rzl6-W~Db/zIA%A$A*,SO Ek\ 8=G('v~O/*.6| L%#! ah(C{nZ)W#IMQEZ=;5NE&08fFn9n$޵] r jw (6EQ{W1@rDr U% tvD4M0T]KN Ecl}ضBg+M.\ ;B8 U`K ~B*"+]5b 0Kl-;&(XOm54:dfUr2@T @<#pwֻyBiy1)9d6R^WZwM5Q k =G7`ϐCC|ɽY@A˛9ӟx{0%p*poŠy@/0NW\3 45)I4ҮNd[L|K8R?h k0K ?5tIW/cb85w-.ǵ[-i9GT9 4m UHwҢ/].|2<ɜ0XL>62SG0ܠdd O Ȯeϋ`)sI=K\(|uZl(Jd5fpKWDq dX7 "н*`7ƩȘ;@I@ّ(>`٤JQ_:AK~׵ԖyAqܲ W#l,@&:`ǺҺ UR-4<~^Y[n'-[Y$, >vƜW8Mԉ^EA8-8/}*CTvZqO R!]p?N;9w([ʱ\0RYs+$yS p;}ڬteSQ$ubZg; mE}LtC~o ^y#i5,#73v 5lfЂB/nB] 4Wd74[GRՒRCٞOcsДFi1V ϴXv9H1`ۢmwUKVb+F [w#nM * &YP)yubJzMhpT$*Q؀Od[mhyض4Yy~,Osi 2L$O<$FA!FK fZlU:mg>dg)h* 5䠽S$UZq~hs }+❸ՒKXBO6Z\H{P (P#.QMD+w90]ڟRLR1IȫP󭛍@ YDX}І9QdjNd]zۀ؂~0 03S QN6a"4h~e3s`Y3nSKD h @/jɭ.no c ˶2};P)檄&{8.3@b$;x!< `Ž }4Erߴ{c \I=Z"Ҝy"=7q&y٫@ts5ڥ+xpr@u6 .PmOBk 5r? ,yu&zᙟi8Ι."0YBoݥs,>IPL|:KFqLuƞ" ,Ecdi}2()mnak* +3`pQE5m!}+,5~7uT6Zխ7IZy n<\Jt}֘vФ@4~Sf)BB<櫍d&^Hм\O`Ò3<=-9%HhgYUyI+9tӽ~L݇ "rw9ſt~Z:`tissOOwp+=E'%hAarIvD3/35t;=鯹<ѧ=CտfktoOR;YQ/\K wL^_+8)u1{5@&G`2O-ľEy euNOPj[em PdM+mmqFT8[bƎMM&b訉 6JO` 3@ٜeO* 1pAG|Ǧk5r屶`Q^n^1ɞyGB9@uDEȮk8h6_ZFdm@A+jQ0#wY(p JٔCכjcouP4[W@$h3n'%BR)k{AݐLn4E:6Uo*I-"8MP#Sqr;r~eꚧ8X(L @` ,_6%YbJ i,)'[rK]"&G)h*ye(N0  ^#d)24*Pa+ҝОDӧWLR'3uR;4iN7,ZSl^W~yۥ gu`NXwUp4C"ݿP^L2>UNK2/4?)fxr'*ZESΦ>]} aIaꡯKO2,PѲ [x%ZĮ Fv24=\&vAxQ*mmJh0=2]z!Ap^ĶXXD{Bo*0IڄMa q5 8, %9v.\/ I`/1Nl= Nގf1QE_$2d;$Cr |f$A:Swa;EzՕ60R/`@MdDjëPޮs?_J[ª-9^Ap*PU@AtڸO h`O2sSn";tW0E͘OfVB{U/Uq }AvkfHcb-E&o=k=SL[4)2_g~cBuLr &A{u4hZ{:X+_\`V٣t`2FqC`044ac<4O21SAde"u4>txDOynōF76@hi%O.7:gF$GFZHRɟ#%U^i(CaC7~dv٩mGmt6#MY?޺9G% 2иU+ 5)q_W&Tdx4>SoØyTo|YOQz{( XZGW[Yc|*5FE:(0Iba{ 5ܰ=CDh=UF5@9:58 BOnO7A8(s0K5?KDM׿!hr:YDHF>zu#a4|Ŏ*[|̠q\OdʄdtcZBkaRY٢^E?kz+DDe_sPF]18O`.{+1b޳5A=! rƙ7E&`?+y_|ibZaoE.(&Yt8=Ӗ'R8\f]`wȖa͹c~cKeYȳף"'Pql_>3cUTC7G1/u^Ƚ@TTL A|]?"'lt:CAWA(‰!qUn5 SU-#u#("Frx?8KVhͥ -'ſ˕CvYlO館Zd z>pL 9N $*:6 2+5o0As抁o/N*8w@/ٞ#qp,~G27WEoR]0C 31}+Tl\e.%; ALn ;вib"Ivv(C\2,8xwFU`߼"2D%Glr8߷tDXmqk䈲n袍[ V*!(H̙KE ͩPd%N^iRt 83k mb춒(s+lu] ]JV_g?+Fx}0|i̹0ܸɆVT(Qfu~}%/izjM7:)0C6}u{+_sҡEYQ䴾L$G!:kU Ccٗ#]) <YL2R_Ph8Hv)j&b X[Pzk晵B)2B*"4y.˫:Ts .WҟoTtjciCe-$۪kSa _Bts5 BG&qڧ j[Se /ϖ\9#\@a%Pq{WvJUp MF}g>E8Kfr;T!(`V k3 ȍ-J'{u6mjJ̀r)/|^-v,$ &q+=b3YHN"bK YTL\gIJ'@gs=T1LڗPfl%@Iw]iw-98)ZʞŒl3Diznz^$et Fi3F;7ǧm~{󮌭*yK[k}+bu۟Z0Ox ˽1D؛Νk5fo%`j%CTAJu1AwG۸}NJzC8n0yz䋔I#W 檕Ռ6SDd3!{WF,~i0sJƶ YkM1#ڄXL82`?7q(>fz+CN *5`^W96H1^i븑 -ggPo.&?bkkc͈fy"p;g&IM;}Ya%ŷ T'ƜϠE5 -?ۇ:~-Fa0^*ɪq'?Yę)+}Usˎ-9agŘz6,@>S(eRŽv|4{X,M+PߙjMҞ EΤIW j?gb*j`ﾛȒq<&h/`ȭ1~ m{/0Q x[h re۞bg5Af!ж" W$q&|^ A,!%gqr1.j1iҕxa0!.AZ .Qq/fz;}>]AmmDQIaQu`zWoM5 WEa=ovɀs">õbnwV]k%Z.;;~6~n"òw#ڳ_饗&#`#u=Y/ jiHb ICN<ʂi mrٮB:+ЕY.%Bt]ʡ4:E%~[7rP+ikG-Ɛ^JA 7#%)k.Շ )M>uF@_99FL1(r5HMqǩs>1M0rEx.m aTq19 ՝/oZ%g*g.ʑ)V+ђ=4;]u  F$m%tߢW(ӎ -34x=Eږ&h>QS'({B(-H;#3 ^V\w^1-WL+_N:J"}lݺb75ֳ5,"B -kΉc1vhG\@~e&跳F:` p+9EGp]q`Uc nαiiK/bSbP`[zk>+7luG`23QLcNb2ñ.>*)0A 7.'&߱ WT5B7cxi6 h>O(5 Hk#um~w0>LUC L"2$ڮ[%[,&-rN()*.(U>S1L)b$qq܃o6 x9ӡ.:U-ȼ9M&djR=2ĩq)i>Cz kX[6<\9R=BMӂ hV(%bkJ{3^\H똹S7X~ {'WJ^w#4mNZq1;t4^,)ܤHG3w*:bЉn[.oZ 3S{Q=`@DfdLx /DaIJ;Y bnfof̌Tš"7E3{~7gx8ıT| Ie' wt Lf nE[j4Ylqɇ%EĥjE(ٓW?Uxƶ%|8L8Y4k+!bdrgqrH;x {L'&GiΨH9XBd! 9@SONz&R~]_^Hpg`;͍ `5bՇ7*NeH#yM7 M$,59 ada@s^6֥4&B8} #v9ik2Ki c%$HlzWV<)Xef_Mu5﷬{?z2CG|U܆]0}6$-r<< #wQqsY Zܡ5jzBl1[<8rhD 3?3jErӐDP1Y-R~! C9Dmuq^D㨾د)6]Z}ƖFW"(#4J`1o1g4t:o)4!Z}"J۱,Ƶ/r)ITG^Z>gXH &K|WHق"ofv[  cMKsiS儦PpӷQ@=K%2'=UݲUIץK c=C<[-(FboN[+[K{=,]YM~k|zCŬN}6yf\tk ǹ6ib[+d}P 6l_O HH_v3s[tKp69w GLw6+c2 .b&^(6!7b1w۸xQK\t+5nԳ2WkׯWE`Re^|} 8͋2Y TnfwGgT(%QbK~:,ҾGR-ClYH 7k-CH&\V _ u2ϚZY|HiҪ(<6f8$|V)k:" –@?YR9sQ*_@s}AE2 ,LYԨyS ua^ܤr5l;;$ܐQ!,B5?FCeG+Kps_Z Q2zsRo| \Dt*_Z|§BP^ mF6!s#Rӌ¤Oҕh^+` j~ɸ!<2 o+gVbgL~%H sqdg 32ҿbǞm?m^8gQ҉L:nݛy(+S(ⷼoU.p>W2 hC})|%Hz\8#U^G9OcH}=LAW<6\ٮ}ٝӐZ5EÑ |ap=BiH XR^"b#M;n)jfƓjE%oSlC"GImm8pj1ɉI'j_1{J+'۰7(6I1msmʙu# /M01J(S+QId CaZqɯ?QN܂@l2ެpنkP}?Y3>1f8͚9Aru;)%/MO .ȓiv.+n=h @,bjYЏyL% 'ɨ$ |N좞EYioAESld 7rzb9?YW$*qX{+D 9E[:eO(=،$ rP #K=3I *7<+ѤJʱ>2B{aKSthtSFŷ&2%v`>TEE4R dHٽ/bL3f.G1Ɲ1t=>W9]ܢ'4]4q9g&iwh^/ *Sܤ H; s T KP=R{obr2O]<ŧӽVXUͷfE%P6_ޕU6A%(p28 Wk\#[/G#576̯`9R[CSTZ4ƪǒjdL?^dCٕUEE?7V%f5lN0V4׷`OBi3IS- ;̆]JkgehlC7Ƨ$FTڟ-\p8MKQw.6b`ǵP7+s}*~+h%J!ENYGC -W:HmE#ȕIH R#%+/]`}{YQS&HiL+EI4Ado;uU%xNHGM<%Q#25ȿ#STH2o|Tbh1ި^A),Fpߐ̔_aa(hk"# cavVX!z( 76QY^NG$ ~srSo^0 ae I+S%Nu`XpXwaq׾8ci|NcO KN !uOXbFOఈFcV ) Vk$Y^E_AId$jȖ#ď%&o߲3ƫBP|3'k{|uz@!~7 H7P`boܡFYAӿuee0cTpSk)iIAr6:0|0A \f$-*}Y1ҏ)A8 !e7f?s0|U9嘏`X=\Xx*{&Z$u>qj9#916tNG1,A-?}cL¬%niD-io頀bٖٞ| I2Gq~'MeruE\BuWX<9N_x_F!ѹ/'[_6N6 p7u*"(EӨѼQ˭(7 q&'qWոNGUx2o7˸}3_ca D'Hz#|occIc@-i=!OςSsfKZ\\; E4˕lp\j_)(t޸d_Im5 ӡS%}py W0Cc%+qN9~#QNBກۍu!-: sXUÏq̟