krb5-devel-1.16.3-lp152.4.6 >  A ^θ/=„~6dǓ]7MjVG > e@>`;H"U>qYc!C6욘Z|ahUTgJ**E}=? t,+rUL C >'e4WѸafǀ[埦@fe :]qGx#<O2kU{d"6"[BF~ ۍU 1 k\d4712e6e4ed8b016076e7ffc3d260baf537f41b90e537e147d9aba3888697fa7a5adf749ec84d7b86d455a3ff24c60c692292806Bp^θ/=„L/ֆ$oZJ6038iqAPKrFqIlnM!`:wk$ޅIrzQ%:h)$ Z@WljCz5 e8 .k~,q>-CV6GANn1K:3><&xbnY#2:CzKmޥ/)F4:K=iRܮA=D\ic92n]Hܳ"sWs= >pA?d   B(,48KTX rJJ J J <J FJ HJpJJTtJ `(8,9,:,FtIGt\JHuJIvJXv Yw \w|J]xJ^| b}c}d~e~f~l~!u~4Jv\wlJxJyz0@DJCkrb5-devel1.16.3lp152.4.6Development files for MIT Kerberos5Kerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes Libraries and Include Files for Development^build81 БopenSUSE Leap 15.2openSUSEMIThttps://bugs.opensuse.orgDevelopment/Libraries/C and C++https://web.mit.edu/kerberos/www/linuxx86_64tK(-3t P% e*I-K.Q  _"ud:CT0Ap8u @*J/z[ -YA큤A큤A큤A큤AAAAA큤^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^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.so.4.2libk5crypto.so.3.1libkadm5clnt_mit.solibkadm5clnt_mit.so.11.0libkadm5srv_mit.solibkadm5srv_mit.so.11.0libkdb5.so.9.0libkrad.so.0.0libkrb5.so.3.3libkrb5support.so.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-lp152.4.6.src.rpmkrb5-develkrb5-devel(x86-64)pkgconfig(gssrpc)pkgconfig(kadm-client)pkgconfig(kadm-server)pkgconfig(kdb)pkgconfig(krb5)pkgconfig(krb5-gssapi)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)@@ @@@@    /bin/sh/usr/bin/pkg-configkeyutils-develkrb5libcom_err-devellibverto-develpkgconfig(gssrpc)pkgconfig(kdb)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.16.33.0.4-14.6.0-14.0-15.2-1krb5-mini-devel4.14.1]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@Samuel Cabrero Samuel Cabrero Samuel Cabrero James McDonough mcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patchbuild81 1589639351  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJ1.16.3-lp152.4.61.16.3-lp152.4.61.16.31.16.31.16.31.16.31.16.31.16.31.16.31.16.3 gssapigssapi.hgssapi.hgssapi_ext.hgssapi_generic.hgssapi_krb5.hmechglue.hgssrpcauth.hauth_gss.hauth_gssapi.hauth_unix.hclnt.hnetdb.hpmap_clnt.hpmap_prot.hpmap_rmt.hrename.hrpc.hrpc_msg.hsvc.hsvc_auth.htypes.hxdr.hkadm5admin.hchpass_util_strings.hkadm_err.hkdb.hkrad.hkrb5krb5.hccselect_plugin.hcertauth_plugin.hclpreauth_plugin.hhostrealm_plugin.hkadm5_auth_plugin.hkadm5_hook_plugin.hkdcpolicy_plugin.hkdcpreauth_plugin.hkrb5.hlocalauth_plugin.hlocate_plugin.hplugin.hpreauth_plugin.hpwqual_plugin.hprofile.hmitbinkrb5-configsbinkrb5-send-prsharelibgssrpc.solibk5crypto.solibkadm5clnt.solibkadm5clnt_mit.solibkadm5srv.solibkadm5srv_mit.solibkdb5.solibkrad.solibkrb5.solibkrb5support.sogssrpc.pckadm-client.pckadm-server.pckdb.pckrb5-gssapi.pckrb5.pcmit-krb5-gssapi.pcmit-krb5.pcaclocalac_check_krb5.m4krb5-config.1.gz/usr/include//usr/include/gssapi//usr/include/gssrpc//usr/include/kadm5//usr/include/krb5//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/lib/mit/sbin//usr/lib64//usr/lib64/pkgconfig//usr/share//usr/share/aclocal//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/520e9a67c8cdc88547b2de686b1b76b2-krb5cpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textPOSIX shell script, ASCII text executablepkgconfig fileM4 macro processor script, ASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRPRR PRR RPRRR PRR RRPRR PRRP RRPR*x0bZ"4p7Cutf-8aaaad7eda2dc72b894a0e330ce7097d24188007ddeeb6f58a5586d34857d5b50?7zXZ !t/sP] crt:bLL 43D gQ4eROB@2paK+dB"֥@\HQ"?mடL8*dqpvy[O}ws z.\BF,2:9S&~1i22 [5~˻b[Ƒ.e5 gPYk.Rcܬ݊29)ӆrՅ])ڰ?=1eg̡+s Q=[qLqucũ |bFpM DGrzcހΊJPoATGra:ݺN j_X1mp2q"<6ZԱrYkInK[fK`4G:ON{Zܻ"qCM~9ջH›ܦUfmms>9u2g+o kQ5dYo-b\AY(Mbo%׹0DZV|Yzn:=Ѝ+{z)P732Dэ<ΰO\s$8vOhf8*C.m]AY~?SE / /jmhI9)L8Y{?=n8֕~t<H~%X @c떩Mюxǵyë3 7zf޺,#WRUFĩ:Hʫk~_eZ["փsl7 p<`Jie#\o~#K>\0~SIP5̷jNYYc3f23ܶE$L;ڧèTaΛ C<SB 6xi7 Nۧ ?ä|VTeCT^iVRRj Xtt76hs"pχ$عc4nz,&ߋbx3cv"#IwOŢTYZ;a U_M9 p+014TwC Y'1Z3lR~n')RQ2ՎY,XPv*(x1Tjv9o& ]LDEUU&w/To6>^fxNpg-gakpgg%ZĥH׫4 |_h[nlO"qB,\Jw7]7]h\qQ~VЦ̠ f 7˄i3OYQ0i* ٳM7 6HX(=C.)f6ހ)hR0&9޺E4#p[ NQd{&2ChLo}c? &¹S\HlaiP`)趨ⰁdTY^j 3?O+b$:(eG% e*>0~[r+QF8)F oJ'bDj׊Jl\[+n}y{xA+hb:{X=L ^]!7 BA9%t(@8zX4&FUˌ.@toKyp̴8 >ˀEG@fupاXT`9iu @dc1 '*q4If " J3Iن?(q;y tY4w8e,x)rvq^6sΓQhgGSM憑3.cZmO´'cŴKpMl(f"x<9zs1h;#q jaKW^ ۉWbȲ;e= xfAy(|Uvb.o/ &* T1@UDe"kn0㏶X0bUb]GlG're[U<)uÕ lfAׇs DƧ8Bn+ךqG!'FŞnRsfEuH&FFgiG']-˛ mVËȰ2[ό,&ELƪ~=ܺr_Їw5WFء1RФ9SnxԶG<---Ȼx뒺K`׆1*|tb0,zV 5xD WE=Me*ODO/'Ez3mlG iwkJ/E0Eo~j!zgZ1rkV^ ,0SݳM|Z jC/d0~ZBR%;7ۋ4NmE^3GྉsLhv"]+دYNt,Hw}_|ToY eM PѐVʤ৬PjFJ}zfPrDg_̿Hs9'T[p=U#SZP vl[+@]!xx,[<_hsSNhd[mdocd<φIӃDvIb鶃'Y_zZ"΄Z0~)m̄+id^Ĭ\3rv>c&{>/ 0QN1/3_e3>WŤ& 2kn LhER}Z`%x.|UYcXDMdfo]ZԱ:=tae*9?ӑjYZOFr[[-lf oZQZ|Jy AR nuOE|,_*'vt|.mLE$gb=g旰W]n+~$6yE)[W `&xH5_u]\}愐Ά&{ OV+e$ e"2G8_~^5,a|4*jB1ZK!bh16s71#B_m2Iem+Kӵ/[ |mO [pR)1Kp^-Dc4!b}&$|q "? ʓmX[|\bg209P<&_UKI^x|k:kYkj }`f%U{y9OyI4E;~T-unGvŦ#hzJ AmuĮ0%9Q[4SuNԌr'[UuMPr۹`=}0x0=$4Tؕ(ڛĘT8?QE|5<6x7r*l>]`wޗK;B'H2nf-kpTiR@,}.po@kIF;P4 5 hxIM$.;,:&/1^*"fߖ}L_M[a' Jo0ҶH( gXz} N/B<\xiLFw h96 Dt5`μv$Sj7N kRv^]GhGܙ?PVN^ }DH&!*24pn' \%} )m#X;m|5o` qe1 KC䣵[` vm]:㝸I&px(Y'wIVctA7gd7B)n7v@z )qj\Bhݝ3(#L vGxrV^ &u& ]!B@+Mhᚚk.ȝ0xLvj&`]eh0NL ?4F#HmwlJER,EftM3je"w܊Im@`09]UOIur.5=acHdc(U``f5[y\RzI}ۺh*''ut׾*"7 aAGWQ1.5f!he u2duCdT̓w9hˍ_[1n?p3M%G`gHaN_R, *&M&bn|&|kGUL X5N Np+pA`U!_q_pwRn]xF];Sͷ|hH X1a &pΑpIvz)fߖ ȶrќߢzX[MKq@٥p7QZ"ȭ=OK̪dxbnmb(;QfCGyE; /jHG*掑I{U'\)T$ɱ%%/9|IQ=ExDDTmK'wxI qHNзt_aRb(k N0Bi,تC7( *tZcfGTF,q/q÷W-Z. 7]u/~ \LϓcVm&~/ZߝȂ,tfE8C˛1s% wW)tQ Mݼ͑O ;JyfOvr oPGOIVkxbY$ӂBt _]5r6,p_qrά$nj’*AjKk&s j3okXm"j@0s39W{+QK!;EYP3JBFmn.8y$ R97F9jTW!KȯήJqzSXU }>KwZt똃hП6 ê~Si}!޳T_'E0r9]Ŭc?lԤ}eS{ET5bde_ xp +gnDM"g7J7+-߲&"*6maH:f| (ERe= pD6{\oict5U(`9p+G͎lChkr;U1~tUw)ejJ/&j8XuR0Zm(Z{o!9 xS. gZL+断y&nB ꐢFڅ6ť k߷qh'Ģ]U T(59k24Z,ײW0gLJr` ti[HsMHָX8b5YǨ %޵n$Dx " 15e(>@4[}wǻ@f?R5sIFR*c&eK `h4jE<Qz`[KYĖ\o=/_K?*^?w8kiad\\g!EO1UzK׿IP6*mE:-a-kݒ[xpd%LzahqQ1$ݪ.DOtU܀ ׸_њOz{agR SHm,X`aܽeW(6 cjY. +droz%W u*fLC>ñH{1r Vw4g :7.nZ1sJCބ$(\o2=XDyxc4Θ.<6*&]Хꀞ|5,\2Q+s ySfI`xt_f i(vBs\Ƶ) )2ඖǖfiX[ʛf-( cgZr}  'jVB7)|"8dy2Cr3, Yd|t!7odp$S},-|?fNM(( %<ٷhɠ-ofVYΛHԪHOJbF̯ZօsuoXMv9j[V6֢E(xf#a\1#ŧ(F=yskwQ γl?%SY5a LPȧIU 85_4Yh 9g/;fySMv";N\c {]E UЩxE~zds)uXq'g$JQrb|*6WmtDV^z25C,x}x"-(l?l' ثEdԌϽdnޡ!R r2*NQ s^4ބX?; wN[Rk܎6v'-.죮kɤL7ht֖4]yuplם~\;L::K];y\ y(QH!(T);L %ʠw4J |XW[x oa⑴$g86ZS97h ,},sµhA1XXFWۦ.ypCLA'g5Y:˯6FΰGߌ].suzsWm$%Wg^ r 5-@HvwvHvgoic r ֟zj$ Kp/;/*m|s⣰^rE5 ށ23*0S ͿZwځ/ OeSYKYnF4֊<u{HW+lůGEź a_I;]ʏ,<⡞s #GN ޻7k?Tpxe(()Q+\q#4JXgj+-z>҈~-PQkT\q6"^ ! {33Ls©-Ƈb0^QzP45" ]|H_h3?Lk:F* *z/T3)g*@P BldPLܘjJB{Ba+>Qn2_p)i ;~DJj-{v5 ljbBTCixvӵ-f#//N{ŗ]XGD\+v;s&/?K@i$t4zVD"˨K|1%{ &q5ԯ Z8fR (!p:)R[ gE~dlQ1A|M?AM>(9Y5TC?5pmj#s&Gpqߢ5{K$F:4V]tPZyߤ"?I̯!mլ~=E<lZ% JI_L͘!vNyӴhmۭ|ׂR:r{58!~w҂GiJ XeDA|իJv=2g";{}j)u:aq7ėjR6Ol+|71)NUEES,xSvP% ]c*paXLrg Iڴ;P7u)DH4YD`HGH ^!UxcW߼+3dR 1D_MLk v0LȓT-YD\xM|vUt/]0 7xX&k&e6`1JQY0و'{E't֋Tە|-S^ ɩ.N}j8k{AƠ`a [9a@ֻ5a3pnU/w=ryVk4`P,IR,ˤU&R Tks -] BDe3\:L5O+q?O).L=0UO+~!IԸt ü ZB/a4JyږŤN^$CM{g]Ubǝ{mb,'LMOKc:OI "rwQA`fRr0mK}@)b{I؉476-0,ť4@5Pd5*!6uxP R% z0A8r/_ʺfH("dgah=:iZt% V\U/;qt97 cZDzg6@|G)Pl3C8qjo-J_p mŵ!<'UiÜ=*Reicr8UHQ&:[YʡbqyBAhJȥa'PiWԗ>a*~GpH2=K&)p#X)&yeѯqjKܬ2+ %m|19$#DžPONw4ƃ=M[>`kDGr;@=R|4[od 9.RFO5\,K{L;P)Xx|E`0P!C&ZmJ‡jCw5թ]a^*$tp(B#", NJr}yT OY|-՜UMXY}ӭiT(IwLKPKR +9=64Ʊ uy,5,V^O N uy9y6p&QQif6 kI[{Fp_Os0N&1n$$ xG!H -S{!J_L,c$_Ҡ&E! `-AyD15N` L#.[-Y!._4v2 N/!MR1J\Wx~)'mLi\#'ƤU&)m vVhGZuNAIޜ,q>]Rӷfd9q;|\*āhE5H=0MO3lsoŗs̜'iTgw7 #P3LY a\!&:[9qa<{+)>;ʸ]rʱm -@;Szb4Nv 8x?tc^ )&ȡRʭLMdWL b:gL*kЦƘӺ7sI֟=zG'#BǞoRWwu[ҲZRCD7y-C"(+{QBH+~ȃ:brE/M͆ 0-+eNǪ@Q1 (7j~ĢU 6 sEg)x>mmE8 ;(6c tfI5+NjkdJo;En^kZ!}XwbAz=@d2%1Qؼx90<3^<)$ool1uIER$jFo[fxcK`'([Qy72ͷWjk>qI8pabg"cAqPE{YNf)@g&5?9OK =Euȣ}Uf\+NCUґ Ȇwc)A&BjZKpZVB@I]w#7~+T|7p`2( y%T9`WZ& џkbī+ҮdWfY1˾%Kn{">^RSFo}Ig2e^V ^Գ6*v$(>09Yu7;WvV:% !ˬ-rMϖHAgwq;Q_VQչěVӽ5i6\. #NՒp?=Lyxm_,y5lw(}Xrwb%{A]=, F`.Pg|g⯆؜}} &kzx #uIf(R?VF0RMY{ǐ97ۚͅ $hu"R+'M@7~bQu%|U?gx U @4i-Ȧ\F;\`i^QHзEƏB h_Olc:DIbrR>(Л4'4=n$ln`t*zF/ Qq_<V]g#qA:xP<Al}P4+h0쮶Dw‰کZ։6*MWoAG{0GP:MaQS_5!1&CJ Dm[_fi?gے')eWHI_Fj]K-~=,Y~ k*帰m{K,5&i VQuR)t_ex 0 9D3  *2  z܀>ɀK0fS͔,sp~zHof;1S Z R` sbX v.M^336jps)PLO7|O` Ls/L Dx{ˣ)YH4¯wu)HO:0z@.L<ײF"`׭Ԯ"aQ{iSY̅Jo(ȃs3V8KbKh 'bސ%xLRBfaUL ('iFlTV(qC3rL l]do6pw`ʼn42muM;X5F4ό4jѣs|X@`4$0+s0^elpqְUVqQC< R ?=Hj3SĤf[4Ɂ3N)*u/ zASj2Ϛm:*+u3^+/>+s̰TOE"viX!ȵVM-ཹUʽV'5b~`'kV H"Lz,)ԅ_bg5 h$*'3 nW[`W#2 aߛ s;$e (ό#^1]im\͢d{[ CCH{E9 b'}kpY)-jNF|\\Lkwb5GRˉ&3Qg'2(X&E=BWk@)kW>K@p~"a&SQ͒t#DEhepL_}Pr?>/ .VX-NK](Лj+xJz@gc2L>Tu ]aqⱫk^kaHE<V\XFU _ݼAyF4sΟ*fҿj[Qc[}pvtLyOnX#@נ~)(8635$f)#WAR tRMc: \FA#σ;VoGk-H͘>Nr QVn]ȭLB;!]&n0qi2 A`qnmP~ 68jX]& IG C߅ BYZ4Ȧ4]z>meLasX_E!td&=r&Ԓ!_gL8notxhuWȝ[Eڔ_M.HjԷS8邫E^#:Xg j:Qb:(o9Ct)̭ĩ2DWѭW჈W8@1D6k`åF#u~((S|YILд5a$1F\r篠TG;[ :N7ã{;8.e[޸}3I/0ɨTޅ-H0 7JFl1.9zzO JhܧOk[24G/cd'//MzJzA#n(ߝT-n[K%P\^;ԣr"eT8JpΜ~>r5-L޳ǒ/RV6 ׁnڨsx{ Bfr=I᭐HIL_R>\{'+/q?0eb~Tpry]xeMwaӸl Ŝee;o#TLSjPӳÅ"[ӈ< '}?R'{^'pBa BlI>klY^2"Wk%YzB fLf F}6bh7 _:Ji %IU!ŏ 0> p6¸;^T;[jQ$};cG[%S"!UNDoqLz)"t ;3R"<'"ҋ͟$8 =?9-f6 )SKP!/[CΥiT=u#!FA]')HJd\|a@4;G!&f7\y~'`,A%^#:tlF>6C詜EN`vNx.B<#*%Le0Ҟw=j1 ^'xhpFZRӇ"vS AaMxG@ t2cZ÷cKc!lZݤIf^ jOSv㛻h-ڴjLHXH>>lc8;\݆=FB3iyIm~p>NN-Ih,˚>q%jd d\}c,Zv"@HwϹa^JmuuYV=p]#+m67Vazʻ&AF?$n$r Ol<%z2F* wu= ~k5([Ak,k} p;\mۉn\.@~!)O[ V {tDդShoIpnR*[Z^EwX,+n@N`HI NP}LHdyIU8 xZ {%7y,3NgzÎhC(GӳMEM`5]QblܴP\yqxB ٬&A;u,Z8ִx wRSg^G1D*49t` N5Ab^SvUkƖ^Bn4jK%ʅÀ#A!Mj.κ-1 +4#wt41I' C2Œ.*3^@.N3\Gaa\w"@#e1?^^/2Y ) ^>HVNyc[yJHѡ}5 hLIN޼B0]=FM.{٭ \7(vUJu⽳2]s@}7~-->x K !{# jQ ˓{,OQ42'Y5kTkb^m&]e.n|-  r\ uUW drw.qKQeDMF(g1EK+rsbIfEq1^V?cɛfx;U&%97+S+Q?br!LY |Y/xQ6Ⱥ4ُ23O]j-vL0_? *Dts}vM0ˏ{@Uh]P ^yTGaM34{ՊU5lڧl=Ħ{bp>:K^yZ9z(h@:1[6*nƝVgP+jsGt1.BqJUbBiGPT,CcSsd6 j ylx}Ertdb`\£!BRX84{EHɩT.S!6,Vr=^BEEiȽ9(Z\{CB6祊#>BhS l9B0A}9LUv]JH'KWؖB:$8;rL$*<X>_OZ3% ^]UGe DMGئ#ΥHjnzS>\'F-:1Bb𜶋KUYgCD߾ߧ2]ڀ?e{é_ᔄP9c"rue;)%+b0n¯5~FkRLk}dH1*FB_̹*7e=8)1$;ZZrA'E ì'țYm0|{ p r89]6yT^qyt%I_2 ^k>ɃTGFZXC&,d=Tg0v{OUbHOr&biL7IOP`Вg@xDk8pIbD-c99-{5n5\^ra\{Й]*iEz'' I^OJze" V2q xT. tj'P%5Oh{IyXڜ`r@]rm/1xoϒ,j>,)+ ;"3Q:?5YmOo.Na"vIXv%)[W192%\rb]CAoBi-fo`L?ϑ qRVl{So^ʨoStq -E)2Ta09byN➯"6ZM4lnݷ[kyeL KS{|-$ D49ωP_܎;^P2#/e8Zlw]fң_Ǡj\vShe>^l-M5q<(Xg^eAG)ZQ$n;bVw JP\$Vb{IdUuX G)]ae*B 3 NxfgCiDJ4e'NHH%JS{=suw^q~P`M(=)33K5n̰v[HvOhĽ]@X䟽䛍&qWxy|=’/.ω<)L"Ow_P"HfY_l\{Qt< ﻖP16Im`U0QT^;&W-c~l$u"0F|9 'kg'e3W\:!u{^J3 ky !]O&GاoF!I:O*/&~Nڻe%QnuZp2(Pсѱv.bMd@ӟNq`흵pfw m|:7K&ƭEep9m1nሇIs53I;DX2]e_}"B%#{ 0|7t1^PaEn-xa`j?!OW$8鋩]1YiP3)c* H/yذ"1Xuܒ"7Z&/Aw]CBL_Ek0%~!GF{f l9C3^idtj$3Z Z#^m(&۵/Lt;Z?k^v^6oX5EDL@*&tn*w[(. gW׷ -vsoys!{Ѭ=Gra t䑮;~9Xv9& ^n</Q`yoN/ӍuD1lIO}-0̉J$Nt]$vkf$r_ FfbeN3ɧԜ0,tdC: gpu;t4:㕅f?#5`p]HN^T^ᎉ<i`zq-SʁzrktX s2W@S '> AHrJHRS W6c|e;}--23>^((rմJkw2$͠cseeYCՒ'mg}o78HYcg8'W'6&30 (t߫ }O4"yMc: IL 5K* ; FŸ>cB TD)* В0[c@! ؔxV5dt:POx^$)"iWI=@Gu-v>SzZ yԉfY}ԖZ) 6LqEsSJ`D=xsw7 1t= ;234hm?>u#nd&ͬ%S#7E.b?$\QY1syWu s69Ae!@i rcrtV.r)>vYAS]@Wl[ MX6[L]BA5d]k1hRąd D) bcu*Rk=ӵYB{ƅABN 7j[k܃$UWfzԣՄNIiIfmDp1$B@sWK-lNP#'R4&4a*pt)).@^ݜƦ :nƁω[ܼ5St=~U,N4٨ʹcyjwZKh6\ BU뢆Þ K7<3K)[@jte%b ,t+ש -V]P,Seo .Gh?lM !t8c0ğ;TDtWJ( *XMyz=.u3ʄy4v4 KV~]kè'jT#_ʐ/Ů+9H3*ǀqT,ñԑ?WduSJvTwmE?MŇCVм׮qՖp|e 7LQKpY5:uƘѣhXjF" >\r#94\W_{depONGm_UTO!3zEϑQNt@>1ynӾƎk$]0 JkܡQH\Zs'oa 7a::@j=N1 ye?gZ6{_CƔ&X.P b|'cKSp^!|HRoVo=ؓ6 A5!\N &%5PRReEj!Cj[÷y)ԃ]1e[`<;t% ySj̉Ԫj',fz"H>bCWP(nۡl&x.`Lر/|\ 7BjJzaQ !bL* ͮ Y5'jDɈ\")5 W0d:xy~LrbTqsPxǪ(iоֺ[q>Jh);Kg%\B-q?QʓnmKCL#S&G2Ndf N6 D|qzZ.nxOlCDn.]%3gHpqK ZǜIx_w9泞6sr D3|{] zM[k`~<+t2YGrdV6|Z L%g{JE`;8w=o[ەv y*̸SнZzw^t&HȸUH!¯T~Nރ]xS)Xa0ҵQe 5`E #硁FWi"rjЄ\^BZ_" [=;nQѩoD^ H #sFQ1-# R ʯh0oІ5W_KUy݄AsT5>IR:h{zմs~mUuwW hT#2EgiU,4)­6-(x8(|\Q !oU%{ ! qOmZ[Z)|T]!aʮy Z*>4/QDm>;FqK.E8ëm=(A GP]UxMh-[xقU:r ׳sGZvK_re?ln7yow˧m?6C=F%L_,Q) a0٪dZ_0.WA ᱳNeN, !pÊoS)[Jʏ$FhHnNA->WRX7A^Oܢ( ;,z;+C|_7XMA2S*^<MutwǟszcXi&3Y11'|h/<1c?,TMn5".Z8[HpHUeq}]6>e=l:@2s/+~N隍HWۼYϩp`sfb,xk1Y*%d83j] BnO3APsOg[u38m}ϜCB:BBugO8Em_u3[Ѩ4r1m?FEإߢg-JOs7Ԗyu'9kpzAUi|";A|++6Cq2 ͖qޔgʹEcԄFOZPHY7udeVHD7/ؤP$sUɅ]( }&鿅@. 6B $e=҇MOܑ'E8ͮ?hIlVaهO=KcQ⽍_DR+p׉hE1Vr`e/. %#ʹ8@cr!FӢ'R0#s^Dk2KP:\gx yHenS(ޓ̚r &d5(fXN-;r]wE5W=x*E̛5G^`!zشKVea7FY^9# ,?4R=~HGVcB 4L($@#ӭJ;sjޭi>M;m:"&0Nm~U>'RS&4z`7^VE.&WӮKEt/g5e^Sz eÌCA%Z~fm_-;NɊOt7Quh^3M$6ⱊq6cY5 eFxDgܖ7vJKJ;XQMs,k/RAGfMya ω# ]F e1 c p!$ETq:/@G&} /X?]ШQ*'!r{o!_2g`5 vP%GU@h9Zw>yky۪pv=Q_5.f=flڂx_KW}}'M cG?kPIFePQ6cX C2p-~VMת/eD95Nܮ)YDɝ,Z@ )$h xN Wo[r)y4xZG~w3c-aheaGPժ>)v<#+r|:Vi6ʂ֌TX3 sΉ!4aT'@rxحd&@I?6YSHzEdb!_Cp­GI 2*2-WNA,2cwV<=>UۡW5ÎJLŠȶ6\DNlX<Mdy\@C Pg OUu]3DZрP^oW;,+8i^ZNn[hi6\EW<&(Jd9v<ӱ EN6]M;W]¤ML`W MerH=ѓ}hr #LDÿTQnQOѳT[ɭ0yϧ J8kaUQVD+=E ^;WJ2UiWE#4u(gw0G!fyC.sey.xxJ5]g)xR|^3xzM::s8rC& jXZ,:$h[ӧ!x.@sn|\9kRPGF=Y@6 hƓhtU*w_1rtȄs<)m]oz%pGBQSwqbx|G?B*mF$wwu;PdO36z,vYn*^6v$NM9BT9LIY,VZ9;jse-0xF#QaÄk5:tdlW;>ʂlQ&NF2BO2L=)84đj&G*sxШP{;ѣؒvq/!m^iiܞM<->6HL|`&2W XoyφZAm&^C`J) Atr,r$s%5I\Rz=^bG5 ϑh!cvYK@հ) MPv,}qh՜z®hBJ^0[G \j<.s`ˍeHH'/?ۑ'yɰ}'Q֔QgXDWBWºr=RoMM mﲔ\L^#L0ᒱԥ]_KeeƃUA?e1+u}p>-OB/E}Ăߍ$&Ϣ8R2\{LבFFz&R!_G@֐|<:[WBqvez .nQh9zu(@RFG’6K?$NYYsz)¤xA9t@aH5Pc׋Czk tmPTBRe`4-]b Pub]Sd$ šBQJz$AIE1C&E$LڹnfGBDk qdgƮ&o"Q;J3a|鑘U}!0ˣ7RpA^?^a/>>΃QA1JG $&߻A>ITΎ8`;H!A:QV3m 3 tǝFeMK|?oE Vt69wNQГ1G>0`G"ccA.#ܿ~n*avIObx`;Ng.NbROQE'i}B(32Ϧhϛ*䊔ĮuJ/5y=e¶x8  K0Zs& e3r[Y=@ LD]46HQ\?5Ǝa}WgQ.vF}"_fn I p% 1qI2˲{9mexǨ2KRD0 dB+ Z\ Cd<,s×pmҚYJKrPT?g&$X4]3tHǣhb~?2;Y_!|OZ)sΥd<%֌RchGwI:B;6-u)a쵶7)!NrO8K(pUIz*xהqfKXM4*%סՠM֊[`oUBhn%a9EN,XY{|7)MYFߡa|)Q*wmb; o\](fΆ(#N"ew ߽ CJ0x2rk!'z&ݵy'Rj<1M1cKUbpvD]S,xLiKoeLG sB\~kyqxD=@.XyjÒ ~vB?2b҈e JE C.?i { owW `˸@s7,ˠ:4PHHeswz][ڎo;㸣' k`)> /R.Rp,26sZZs'PVt-ZRdi3kf)Xk\n$*oq&GUa;D~Czzl5o.#&ufp$ܴWA> +S@}`?U1\vd?t/^LRu˹Wx'fw UK)镓^PУ6^ ;nCۍ^L*ۥݗ1]Cad?^nk-*"j w2k~/ i 4n^#Eiu>~Md"7!ÞmC9VVP^M9:[CCf@z$OA%%IBߐA,ၞiUąp7@Y;Muw<0>lF]p̘ؠзwJ-źJFu2T}]A0f̿%L|96P7[X~_ljʔmH:m+]^JWBme+X4ElM%I0Xrr_qtWU9{ʶ*k눱#ڙK4 ?MoN& )mYt&]}s ^ Y#|J l%'H7;EMN2We#GݟaeC?I@  ShiLtCIacju%G bQׇ7"&5 !WlA\gqHk9K18h,m +Yxh/5l߿\8v)nh[6֗@|*GYiܔ[H Jrk:qh\ )fЂugDo{@p-&2i0SuЁ̞J2+ўTs1x@ADǭ(뽼هOųl(2hM[B$fS;4s끿WmmrڂOХIܡ2~aRB*ȶq?Yd'f306V瀞EkǮ{i Q *\1}˼~1I]#Ge/9I`-]r,o=$mً <$u)m%vUEn'Jy sԜEN{ed^Q[!"'hZ,0D7 ]-K;KKvV $FL6>UB:%IfcQ<64=+szɣEMi sr~0M{!@EfՌ3)["W W# ޘ(cz$TB -P2Z0UO7nD7 ~N =SOL]XIWT@fibm/JI=1(6߳S<|9Lɇ wOfMUA.hu]D.,L妈COp b'11J>`p%_|nq)4RCf2}/!测R,LT& ӳT)5`MPQ.?RXK&یb3hn<":2и:S5pp@>Ghi>ayc~Vzս4_Z4i0XIf4mG!< 1-FշD8մy%I"+ztV6{Zmyc@q9 d7 IHf%X([rF_"҆إyi_Q4&֐ՒesoQkمus4ߚB5acdVc&KV&o~Լm+HC]#DN6͒XI?n wgw2q26j8:!uoMh| fp͟M?WwhgRkbe}UЁ1< g%X=ܔq~";ʔK1 ;@B~fK*CƲwl*!Ir/ -݁]A \2iQYb˪^*".Tk~+|l^6pXaSe.p@v˾Bܸ r1ٻ[,9JBw=V,ofwe&D!`i AH[oS_u"1 ^?άZ a,M?UjPoɣSKy {SHz6fjSyT&m)=HvWqR Z#0h Ƃl{3~NtrzM|gM7.*u&``U%$۝ F;oG"o /s0 9l 1]咛Sew>E<{+o>:Ɣ} f9kAL!j~LИ_|:= baO{qo+]Hj*9 :/x#׶lPNќIe^1f28؍F${OVX2?27\Vn+i%]P4#SyDNW$3'ȧ#Iisgu]`6@0kPK Tt dçf8͆<̤pJVw|`-g(`^cafeqACukšK]F_W;Z2mZOu}ywsRy|,T2M)hm\IWv, (-83f;b(m)(C) 缼a|(Oq(M^a@~e@`͏N|82SʏKs"r|%)Xp >PM'J1䳁c>3VP~_Kil?:V3kps{*_q:T߼F](<09WjAi,S6pH2VeՓK|=\{ ɼ)/bg( E^QHNo$K%[=w( Xۚhz[Ȩn(kCSD[d;Ϭ8=(}#ko݁P!M1~ٖ8Ź#!d^L˯yo5qjS;ДfZ ͙6f& OjRY~Q+SSM1my S370W;8̝qT)6MUVZpE{[/i2}FG<>ږ/uQ7ώ'G5#)lUJF<"Q]~i!o吪HtdB"UvT.ESTY,O7"zg@geXdCŮUh (>-4_{._EP)\]|ALz'4툴jA4C7Kys!dIo;>0LMz4Ώ7hzs;l8' @*RC@IfB7\ 1K4%pJp8SYn>{BbiRO~ZSuX)=+C'E"GOgEAc/&|u[ _XcvGQY&d|GH؂2f2)̵m:{Dw 1屗0[I/t3CKF IfNћ'!"\Ů۰MV'Iӥ?]ˁzl1%Dn8\SSo.bנqK>&1љ|8stj`aqvr*@C2L̽O2vUPi9ԣ+r?)RpVU4<}94[udG9i1#1in(1] ɥh1 Sw}c aM] T]CC2.iQ,VT x! "L9s^g 44P2]ZCjz1\6żكIS̼  hkao8j?"Z5"YMY{8;ߨNЀa393SAۿPOEAr_Təve;95z=m۱ vph  b04Ѓ402n 84G(C[Q VdO,Ki=6@)^j%!*Ke )WV ]]+ z8dk aYGh]#6lA_YB5:_+Nn3j9M=lhi7W^`ȉŰU-%.1vd >5 Vbw4?[DDOy?寴lYrOn1_Vf zLl[QXOy)0O#FE0R >`o``mǔNs‹978.Zg76\8ko UUmx2L:o!MWMmUb;TieCxE#.ЎSUxu[{W#'U =LkzFL! tjBƒG$mxY?z?bFZVn9cM'tpL6D<%}Ni##HiۃM+ϡeg2S7Tp-k}Dy T,Wi fYJ;E#A0Y&,VuaD]Zb{2 ݚW*#r}Qjo1ʑ@Iae9IX?}\ 0D/&y9X坱BŗVj͕b#Zd"@;JIaoYD̥c dAYnK(v-o O ͸Kv afSq`g|?xYX7q֭<>5؟eU$َh;ĺ!qP"AIQV'{9B8tT/y*$Eb\*KpbAy@Vmh4sJqG!U]3ļݬ=k+o$] Ɋz$q-7VR}̍r,F8ES&Fޛ-Gn\Q/VD]Π4G1Q]0*E\u\ B_3!ީFs` cO~ϲĝQ#.a`$؝H kHm`ȭzj} =1ZQ!Sɲ:ek'M֭hٌڮy_g'pFxrJML q컲O?c:{7 A¯翹1RwbxNTiMS/Cb߄h֚_z#޽Keڞy=PЍekai.^IL4L9=e[*Ixٔ"Pg, Ȱƍ}pZ$|ZɾFdK; VtR^, <>?R^M5Iԫ(Wd*Ѝ=_6XOncXD?#!jРTx#q;r[I#"tiۇ+wE٥>uK7ER^]"KR\3zr Rj7H+ܻ({ B1Q%Z)C,nS?>ىUjz9sܱ.5hk-8VϾ!̈́lX];$zĐ<ى1_aː?R%ˋP=>`f\a6rGX%vt] mQ- wƿ(/gf.*1 {_K*v~o`]J]2bp>,3U%ӎ9Oe%7].n=!Jou #E+߇2eNw! W赇TK|؊R4䓾/utXcf&ͬV$h Th09;mW6O$CyAC]W!8AD?5w1wug,v^M1Ƃ(4+cπuaq 5Z lȈb4tl"iY-k$f lfl+g,_|?u>\g9nFa1'N{Sr\kIY(㚎z4mf1` %{68ݯ3\)wϸ|V{X@3u:ÑU㿜&?`+IG;?Mf /$pilG[1E8Fjx"'iV0Gx̒ԙT;ёPws2AiV $X)sA|k>%Z.梈yhd#lY 9AF^9S̮D̂!Rd,Lq kS&U^- <~IA?ȿ1 eknWb{5x&O G:sa~䮧% e>-Éf" w+(1 řſu0B c1#0ؓ_j=ˋ:tWl*[%R('! BcXEhڈ#gK~ 9`0euJ әJI*5RwIJޖ6Tgh/ 6HRH#t4l04:Т',MwdCNQ@`Q2 ݫ:U ?hזtC(J]KǗ1D ¯f6qO:&$)/)3x5ox$EB ^mm5JjԹGWpA/^ktofl;;Lb(Ӽ)b}sRqqPS9;gh1z@5hMϗfa\PO6~;N߹%gp)|5/gS/ ܃)&"4CTfc ŜYXGXsƯLiC&-P&s%Ӷk??xw<0S|8? @/$P`)hs=#+T8ML\3}]e&l_@ %P$8c3sN\E/]ٮRo;ru"[֚ؓv_w[Z83Pkd=JS}$Ae=Ec'U os/"TH݈[KX?3>A‡N-L)D ;Zff(ߊr ,Ó&̂/Mʫ0HMUN 4c>l}7tSUpܽ ^R>+ic0 ǧ )MkTSy5]hAQ\ LV{2i8GC-CU#TiP+;,2+cO^{^O=tlׄzXw20iIrɔ>%-n>~S"vSe? >eZGU\ZϣlbkJ,=o/n}ܶ}JinXI>F/%zLG]մ\J/'TC-z ZNjr)Iُljy$Kvd;RK0 3J0 r]bMb矩g xfKFᤡ %X@sԾ =# 8nLBDwѴvpu(-y,֓vKJLּD֥U@0`\𭒕nN{ݹMp{4LxcH\re\pnk32fkҮh0e( ^Le}cM,Y5LM*׷TV^`{?c~ن{'Vܻa (VpqdK"ߺvEU9pnre~p !6՛(Bel\c )ḧa؃L|+>6w- :$g'`k^Z٤~z</P}p3%kxU5IdM.lrPϣH" 됍$R9um< fdsz|lQH!2++@t{,H_g'ˍJ*6;0.>3l] +nJT$mwO0vY̶K! h˦zKp[2bV^mWg>,e$teJ=h.LQ]R{tC=0%d靻0hf3W, Cv &#!m_u}S !}52ֻ6iEg! KlNXGe_Y oP )oGNbn0s:[hN{*Ox3WQb ܶTW9G,7 }Yn#VQLJÿU>k"0A#pa:\ 5fIH+Cw8(Yƕ\8o`CU&PjӍ)PF*_3AՊ22;"G݋l\G&NS=ÝT:JXLj~$ԥA ԕlx{w+ TrbvPY#vMՔ"nĮe{i j zXl,zȴE: ܳ $xztQL~jkdW~}>iҒ{xmdbt%mVT]+lE5 7U6WOL6(X(hQ \1y?JTIЖ}SkUɞU\ozzd^Ցx/,fq,c"%df!ky2ϜϐB-_/>%W!:ZtAQ|[!#6f!c.:fR/U=4c ʱrMINxBg< \nI^aimhAzE4L?'%U )uÇZ09i3R\F}d(̛ 盭 - D_*ٻ> io2PfDx5sp=@1)=Z2r3ϴ2 9G}$>ä/ j`!w{[RQ1cg;Pj>kcZN1,fДLMhF)@4oQ" 4isC"Ҹ؄YqmGbqC+2X H4&>D-}V<!3GY2su3{#ķDRw#1㍩t6Q(#S 2zpT;)Lw*v7LTōlsaKatlq = kA"x+"ŮH a-~$ $=#{08/>pH˒'r8H+!ϲ' ;SފT &1PmeB]z0JY,eEL7f7y?;{P 7$=~Z^yFRd- =~ L+&Ʉ-NN[<K7:)溸("bPOh=b`5 ,wOˊ&)$YIy-3Kv3omϼ,^`j/i]ۡũvOzD麓 ;xE.r;`G=8#MiJ:;84ipVG/v?7]w\kǤV_PONt&~ f&B=9RNIf?xgT׷þ9TqqQd*;]WO`m[ Ȼl|/CGƏ ;Q8{F9jπ_:x=Vff|.;m9]1iѿ3zqBjeaqcOŨS䦥\ ? 0^, XZx<'Fˇd5m :Imq)k~de3tf:3@v-N:/v$4ϾOFa/‚ U0®f qp, MN.U\h7SEhf#䪻k탶uuߒ.:YcФIti <NkE }Uk>h)S&4.I:"|ULHS|\YFzLKxw]My9:$'l_g_WƲSu=m zr?D(x(0t\PB4/B0f8)ix74 }5VuP3 ՝ ;?[4 [I`1Ylzbz#!=qjD $Xf6[ɰߡH2&J+pZ̀h&*4 8FGE" Xu6h<Ϟlu=/>fb"nO XlvG#Y,+dEoa8іĨU^cbZF!a `` F /~d1X]i+Bȕeʂ!(ןfp xFuW;Lկ5(ݭ7M JQFk n#h+Tby)^Wrl*f` EX>aHE:PxMkՀvI;q9n E1.[<"V /WgyuS )# KQ1""\,:Vext:i4˗8Őkt;c[pd#lk!zܷ)6{+[@?S ЀWbQw 0Y^TIU\\[ߍ)6 }ݲ#1+E!Kaxn\Sl!8t1k{mw[QfwRab9 )!gd^vcf`<]؆J~arIVK%r`^^/]{'ЖY폾WS|`1Z*?jW꧄Iw?;9,n EUC{̐3 -VD vIQ׹#6ko1el35ƀp<ջ kɔVō.SEޙ OXfϕ3ۗ P8f"VS?FjsiߵÍkc7ϥ"u|KDEBr v*"/ r n)JJ!$ bIzߛJm$Q8scP34f_ʸ.:PZX{Z2i (KϟQj٭hV.O*[ $@޽5ky*x'R8]`%QS/3Eh/ft $ wl)H qO1*]B?k%/*:-y;{m+$T C~'MASq &kIZXWx%{M^vʵP\}td0`@7 6ՌUʺkPVeґ)ڿ>>rl5{zq+΅rx@/asp:k/[(\G|l䧞Yu݈Hbd54ĦȒ)@.5;Q*-;hzaR٘tv |Fz0sA S+wŽ,keJ+c76rlYb#s%ty.7HI>b,c;{_xt\n=,r/~5KDY"Nfӗo/өP JJzçܻ[=Z*EY4=S'I]鸼/*-(}ZXGOhET0-\ U? b;GmɅEw 3$llSA\zWIBLr+s&^WIAډ̕^H -fEg]&ڣzŪV=1`h.0;܀y6Ĕ3849߻=>B hQ@O)st~o'X3[m&v{v dj>]bW)n8OUuڧg7=&Da3e]D3 ^h WM24z']?sd8p '{TwMsWŦ=iBgNJ52Hemg.\׺:SbWoyz쐊 GԳ"•E/%M+~~_"ȪˑfjV32? Y8h.\WZԞ C2RUr@]I~շ$([J,1_̄'jձvhϚ~1Y[,-^|I.qvvc@u?t{Q&@*D?$\>6D arV l3:7a$G6l9^Rr$ g"@ h jf+ț9?=P2<1a۔,']iNxI`Kmy@"ZvosA OHusWyz݉LD84Ȩ"\՞ 6sJsek*~(mA̢:>Ε^FD+ l}udw}  lyO ;HG;آ51hFcmZUe$74#v<5 ;|(=*u 2Jiz"A aOpKUc4A5tV7e/d9qst]"!\Z?@9u1&5^^06=*1NIɪ†ӈiMF3ݿ+33'(2bbvbdžE}R+W̄[𧌉wdUʕ*ru<|1 y1rs6.E=ǂVĥ T)5K _ mIahEaK/-w@g)3#YK3p!cz:SO`W,]R{~rx5ݠ|RxUXjo_B]AO.,/ΚU:CgJ<*}bOT̞AfloD c%䀷">qhLE?㓏s}0Sҧk/@A {|%kH9l[Kiv}W8 UY#pO\TJ SVߨe"<9mGõ?lMPqbSO]!Ch&FߊbgS3 3aTchR({ J"0Q)R2-0Kf&5yߩw/O?HD-M)K, +?*xQZ>i,7BQ! m`h<k'uClK.FcTyvpY,UU}J,Y o(wIԜTnNJc*V4o/H6Q)(i%wtZYu*a=^bf&}͢$\ְȔL HI "ng7aBJQpxKrfxU# S%j볫)+٩Ș*'je)DEaJ}Begx=]Ƞd[䌸bno¦gNɨv1_/0zPjvkA..jQr17U*H]TgTm:MLșR*wd#|WJN3r.RA{yJ:C? <ʎ(!J,uyGȢۡ$〚kNE>POC'w-*&-cX&{Nc~XHlhU8Hް+6.N~9䰴n3;# /_$~/(=Ţj=m:L I O"N|9ISogiPXAWfڎ+pQiC>y{j*ܣy:cb$A\!DdyCOx'OKwPjTU*m٠h̢_Nl wCwIÜDJgishnVzMBq$v]TJFRPpeG<H|Dx&~'#|ڼO'uJ9]~{eM%Ӓjw|X-ba|'ipyn']?YC!D)E{ {Nw*or6EU0&7۸3GKmd+v7t\Њ.=H_}s[9|7y-p+ޠt w:AVoclsDك,y9+-/"Ao]]Lb FvϓW[>*H Nd)DkZzdW92Q'(@3C.3M,߈V Su3cIW-.wy[ 课-Fe/ 4\G՚5y=u{ln+F>2\ot;W@~=`r 뛭A"J%^Q`&nw%+殭WLYHLi)0nܘm9pMS19/X+Lʘib썉Adp=7^KR ᣋЩik-m1G*%:&ߟHr{Ӧͳʠ^@6|2vKb5N_PŁfsnBAc/?h~5$5X񾉇}DBSCI }ݞlE:е3kUbGfG8СB{_wHݸTbf"=rtnN'Mr(~b7LGP, g\skWÎ\>n3C!pEeBY>%/Ug,Lb/:{ :Qmrp,t=(gT _$<=6/`MImhE4 'tej.MJ@UG\l$Ab.k* F~nsE7Yd FdҊCg֭vI֧\V6C&4mnD+SיڃFF%YDm]|h&Z ?}{{zKa~-bG'~es4Bom-E.(+V񅲾dP1ȌH&v[0e42)]?s1zQ@$bsD~[oҔG lJ81ګGߚFFkԗ9 Ue0G癃ϵ~@zJjU  8VY#e՜`ڏNtE.SY}u;l0#eHvݨЃ L?UWUwإuKjKz5-mFC-y X> | C`h՗r']n|?)xPr[]hMJڳoYPqzva$ GxF `DhAtξ1/WcLןhoEq'ޓeSLYs/i_\Y$b'V$ޱ0;mE _x翷fqghqt9vy5LTsuN+~{\x3LZٛF7j}_[tS3>cw2'&5{8X x(@ 0Mysݾ0?OK RbC V|>%4l/^.tg2~{(tP:!Yx'K'kR~3|b.Z Wv>n7s]i +rBFaByz7F˽ߌO3t$oEj.VuKs͐f|5&W9H)٪M $^K"F[ԏHNz| k+e)DTNp- A3{ r=~b:z] 917ހ2eL://lZѧbW'cûIHKXL^G{c12"o<m0I ᚹgfߛۿRt[ʫ9g=y;$#K羊R3~h&kF\@ƫz7Eꮪ} Ԏ/Ψܧ ipQi!ČgSk ;jS>?H qYUxFǃm[ mU j.{Q((8LBZ JPf=i-(~Ge5 {t/z/}&#cW\~eb4v1x>+Gd~Z uZi*cGZ S_sK~0ewj)GiIȜct𸂇QB=.{"~y}qS$5 xݝx@@SFvFƾAMUurm/g ~f(񗲓,X)xlq>+&>6K YL O /y1 t%Sc?_L{.9QoAw],NJpb @)BbF_0tt)KL5e$d iZ$ܖ=WvuɘIBEBFyt)Q8k*r:<ʝj*AR@Dj=75lMc?y(x؞a"ymrSĿ%c[QP6Lz4)tFDxؒ/Iԁ#k)bqr#nh|@Wo$uanzF_"qw[c?m ռZI ims)eK[*P 蹃2T W׃Z"Zw먀*`Hf IKCeĵõ(?PJp^+(NDT+%%ڿdV 2Rߥ!$Mcv牲|C14EN#^ ReR_QJUYOFئ';Y T$ @4fi1PDB)w` q9'·\R8D J~ $oY^M<>w<",;u+2<]vaF:cߘ狩[]'௱(܀^BzߌqS] o˱.S.>FGaZr;[^y8_>}X0`ah}/+jbp`w>22^'B g*AE5zw*"{C߾^"5 U2aX@U`N%Z2v_B5!nm8B^f6X%J3F;49&٧k<[j=b3|"+O}tٳv Hĵn8ưgyT<"CXݴRѢnlW @ӗm̥f"K`X,ͱ޻gXq.Y&}.`r;#~ 4'O#ꍣKK]k 9"´p+Zfw߳\5 T$7(DQ E5E_pQP`4"`4R,MS?m;f~ 1%=Y1Yc/>zI FJJmIM/0`^Q]juT)E|IWY|~SU:ݠ~o)};?zFFwmX>r+chA^qnC' ٻXIoOK/ͧWPE %̱%r6TfƓ*9/Cj *wZFbbZw \vEzNͨbTaN^H <މ}8gn/jU::*=vQb49'2bZ4 Fl|qIa6Q$^}lV z'H"p, eP|, C}?٧zoG-CKDSytGpur?Ec'-nK 2_=sfWJU"_rz?B3|o5Ӥ&֗⁠|5' ƴ/_T0$G5y0cw_5 p4#X o-2ƶwE_P18]e?ĽĀ>u@21bVq̻)crZdj/'Y zb|=c kb&}&cx@b]63|esu9jP7!sƔAx];HIx̅wW 䓛(w'qZ^>^?n!߆eBjxe, 1H]9p0ՒrkKyXVsPIT:Ĺ8*LtWb7ɣngC9~tEڞdRe)LP7 vt© }H.zΠ=1جBST0s[f_n !m ᴊL~.7:^PS#\ДteLqICD'NZd|5^EP!.|LDb2 25c+d.M;\߯(U3)>B FNlH)2356#;a`-E#)"fJ馳3O<: \E3u1yDv]lX?7J "*ӷUk=X)qLK`ȽU>=@-KzSɍ+MΛH!r"?}SQΡe zUl\/hryV]S0n |_ۑߑ#c Qû-$E] K 6X<jXeeQk&JC?̨8LΈ+,~T/Ep'v{Costǽ%˴.ƂWU8Weq_^^Ud *BL) `HI1ĮzwXQBeeWQrXP/|~k}7UQY -;sW2PuBgNK@O:ְtše[^*&PjKOmiEA{Ǯ$~@UtC5~)i*&8H pַtGU5PwvaʹɷŞWr:IǙr(wev5C$fy?oC(E;/PD@o<12]᫡-MUz<6siʸG#^F^̮eKCZׅ̒-B./l+Ki U<\"[[ٗ:UK?Ys`5(R8=?.0y <h["1On-$&2V~Y3/Bt6 暢ʾK޿3EaÕ_ ;SS-i9v^=4J7 ~AKM"d{FL+Xt[s9o1GU/Vӽ1랛!N,mkA eJ-D8 E̸d͡ 4Uiczp9Q#Gm $Ef= =>ΤVva1m[Mf%|lՀobQwۋ4G7@7 o{a~uD9hL[=wBkp5T-)&F$X4QxSDqEF߃{-U'$>6%\q2dN`]cM_gW=@HK5O ėޫ4_6n .G҆A_ؤ& ʬ ?Vg,ڪd,t0Vn@WէJ/Q.W@ڱ䅛9-M`ˁ V CNAŭ&L5<R_3'qqh ,9E51n!㪟XB'mq:$\mn@o,*w>qZܡquh͖PmϹk NԿCׇ͍9%f '#ۙ~]|^M\d,s<'0hb!5Qjm1QaJ/<}=e[T[sٰtdͷ=<ϘOS.AȻl2tcW'/L)D̆NB}z EScp2de-F0pU˨ !uϞxs{CE?{yQₙU7w??FKxWqj)hp8ֺ; DClX1TxѪPOOvsR a:Z9B0RjrKց*}Fbm%{q&!#*UmcsPf{ĩ*8C夻֭y$IFm\f{k5n_Dˏ6k5;wPsgHLu䴆NMKմDK^x>c6enn& 8.YZ%8ܐ 9%ÿ˝ER*6d]bd4=( ǟtG*<;͵yɈyu)Й{D6Y6F&Н FJ:DXAnI փy ,9]],H1]N4"-gHaTҁk8NX%@ VOEl݉U ZhV!K` #|䩤XXLdLq'%F!KLS 8<_{`iAu?BĐqEjH0}c7mO-.{]CВ]NJ3Qɣ"ѤE]Ëjwws:j6?/ xBAyDA]|XcJ[sOi҆1'q,!fԪɟX&? w'R֊JgsV1-3Tˉ i`L=R:;'Nbk y)j֖!_(Ӎp/ Y$O_2&CPыbӛ};#_;/SCN/[W!-3J!qe:Q[:zPҏ\W$uDHBjd__-Y*AoQ.Od:O+ 09DZT/~_*oj=.wa ~GAzLz{BQ\v5 w ֈުVeЎMfۗ2UˢɎGޓ h_CSj/< &B%Ha[ rB"psbȐ@ԢYqHH":|WޖD]{īNG'e&7HVHP͡4 93 •S$y= -GA= "ٶۊb=U;L@`e_[M+9Ԏ?Df,Ҧeڞ.4dnaAUbY?`نWewgttFhX5ڀf4i۰ LhM]'iH1P|S"{4اSD%EDqܨ2Q/h+w VdK0z5$dl҈CCt\frŃXq]#̹ooyʯ,'&Tي6+X3.\@((ў4mj/HMC^ NYI<C=הw* f2>ݡ_@_*/U>vDkEE烥A.ׅ}PIޡX}" o p+8%ԅC576?}09Y 4~jNBCdJFujwo}Zϙ(Зzg㤜j͏u߃O}]m8kj|ѕN1vo..M~Z} 9ND=3mǺ(`5@BEՅ6~BGMp FRS|l&V[_bMN~Th3{ċ] RJgz vkN}[7Y4[h@+nbl:@#U;"WvRPfic!reU Q7yPue-]2]f)mւ\H2GԜ<T{*),]&%e;~cQP9v !!*'cI5JE؋Nr,i!O{=gQҏACpWXht8,F.3fE^vB m31#Pmc"6PGkR&]boczg)^ !-בjѡeJӗ:a_vIs XL~rm q Yť[P%$c0q,gwՊR݉MeHx>jB0M4f=l-o:[_RlTy(R[c`nI`xh_iv.FUEAcM`9\!v89TQP߆*D+qVKO̠T"lJ!(G5S\yф;U7Y0 faNԜ&609菟 H{0γkvO`/j︁<ܔwrB=zьDTSW{ahr N~SZsſ Jܬ|^[[ '9ďb/}UH/ JGFhzՄw1sO7HZxBrZ|^:^?6y3θ/}͢dCsr+BӲGVZp}QF]ɞ)6dcJ/0 _R/8:A; ÈM1&4QD0b{2c3`%} Jrze<ƣ< L\hnsɦGS(i#RT c Rp`kM(X.^؎.w7z V;\mj%)Dz˲Wh'OaZK@* h7BԍJ`_VHUdXLzps}hS7$7RT!\HLJd3%)t7 թNjM"km V?6Hۀ ϒΦH'W+)V. w!;qd0:/獟ӎ6!3o̷6!څ `1i"]o6OFHbVFsR'%0j4)e rhyC\fY_u-rb-|.~6(wyb !W!f|[ag=&N;ؤo-ʀXa~d UːI-a4 '"oW> \X*(7T9gɵehKKP} kqpXh*R!2l*?zPDfE7F -N$nɫu e@0=\ Lwn17ntK\SuPÂ#Mq1]͹ $#(6ʭN^\E/!uWU/|_{uiΕWۺpRAlVaC5D+%-dp$U/F_únBvn'=6qv 87̿ ;+X6iNł݊֙ eٚRt~kv>NU#=nUTˮaZ41/@L4b\TJ~Mط头Iw[S &؉>g䳺@c[Z\uꩼ%6q=MLNzjj&k,)-SՒTβ< ?GMrwJ7ꋉ|h}Ϙ_X}%b6BnHLDτЋ~,Ύw3UO,<& Kn~#໚KNkj]frHNkڠ"+gȏqR(`u3jzPdw[dAѿ'@Q>L[X$l!b;@x_"!^4n`%#w"xC#D&D@rzhQɉD& b_6依NT!JhH+(;{e's*?ޘ /ȗx}*,{~nk-Kdh6Ũ4uDKq\J P]5U@Lxe~7"궇(%=VIтKFN~I CōB"EULYhZ;r3p dT'G g3'mA/KWЦ~z1 eU;@/yP)=ݔMZw"68gq*\j<aHg Q%}bSz:6{<8qzz'E}/f5ӶRށI=8< 2437e27fM{c Jl r;К͗,{la~#W肠{ߚ/!նN y+CgE~1!QPZTdyudEQtf xe;<ѯGitF]-:H=Ŵh0+`Z43朦0TX}9Q)ۡTa6cb ;," "2C 5aEDG; 1N)+87lKK@`Z3_j~IJ;.H k$ >m;Wt|Q7U՛3T£⊕֓_Yĸx2+8`Y Lc͆j!^:vw-/u_xB4Nox hأ!*GXȘ>3RdlqN6p&a!L6=@60ow&A\gQ{>$)ɸN'39$e^d˒] ;7 1Vq)iD ˇ}ImŦ +?R^6o=Hp/rxGf `Vku^ 2k^P'jeisMbhgH{;f 7&қIFb&.űm®6AY&h]ءH}|Ti7fY囕jI@IJonkA^])SQL αݕ](rsB B*5bx ŭT8uXi ѿ3xJkm= (>BtN/(֎!EŽGr:?॑KGXpXsKlxq>DT KNjh]ܲ[]eP\"BR|0R?v8g}KV Hk$jQyoT} L1ᩧW2 Sۺn:ߤdosKfFN}z9'5&8l>fhZ~d*C1lXp$[ץAb~fqP@.1OK˩ږ@D'0=|+[;zCEնXAQAjnr }XM*v% M# Q})\5xkk= Oӆ4R GKb*w}a;|ԭ5Q61W\3y ~nY]5u_L(7%72ҽ,H\˰û"s@Xvl.f,#|Q_!6H) IauUi6b1%&~TDFs?V=uR*ݲTmDE6qK&vk9Lh릊{f~.!:0G5c&5& @xy?c65]U2zʴӸxjl>p^-wP%&J땎(_}hY+ĨA ϥE?ۋ2bsW6{Zo3GƾبU6dnZ<.YY {N۲jӔu*n1 qSjJ%{7% H T$- iuخ1dr Bq+/ƅx,yWl9hJ/&:~AR};< Ƀ؊zay)6M=|+ʂο&Opt֜ojSRjϟp60VTZXdMxX pwpOF̾ZuHD,m`q5~q,[㻊h'~dxk)]m88+ 9u?|➲P:5!f/)b_h _yZɣ5 c/'qy@R)O7đf ϐ'B3&X@8۸ɱ%T_:ZsHr6B[70* d]SɅcLUcW,Zc hJ'f;R7O+{;,s v2dFz&m5=1shsd EZZaIG>m0_1Cu w(HUAb#*.6e M"/Y-;P/1PxQK"*d;ңfF) &&bK6f{39%eo]ųE:(U3S뗑%X)C$U܊g/$POY()a\?Z} <7) ~#FzXG\@w♏%k瓸%ŲLiBm͡X[ F7 < M+(ohB57`ó+Dc[`ɆII-S[UO &xT L&u%?SKm @c\HHib}5迣 (gɋ? SZhrvf'oM"vG@5F15M$s N#)XR$oS' hΥO˹+"ȦN $jSK\5Ly΀bjKv6ݤbpRu g y> AXY6&?(djWXVL TfGl?am?i-aIG38Ojv6q|:!$Fi"'Bǭg_R|}_lͻ5JFѫ\ݷ:VFטӔmw$6Ũ%g U-DUcchn-Dr}Ti:" OB?%-]6zC:@?zn¡^"1eZ\>lVP)&wreUaٝ<΍3㏸ 8oHR%  !כlbӬ->>> 0A+ޚ?KihȠ.*<+8!i- æɟQaJg uiIWkiが+~u A0' b,^E l2j9Hăte*W; c%j(OC[P xү{`R*FHQ,T/ Oo7aQ٫(^6EW2KGUcUrlY-whņբ  1YAsޠ[W<Sl1J8p %ΊHR<)2!u4[Nk[X63gE'sTدA'PEʊUյ#X4)v,ӔۛuHG [_[bR{D. 6']dP|H%o9~ Ǔ * u| މlVCӼj|Yd^ҋ1V(~- xa'LP!YPըmY 5Qpiu}s/(Selҕl9T|t vRŸ ۱ Vmfb8 ȸ;_{!֘̊!eBtJw9O>h[̤`_7 ULP%;²߹S:RK#cBzia+ J4RSadmN]zDGv3b8GOfVmg&ǁz.NظŝZz5z*ȉNqp>-MΗhx;MVʇsX­jDI1n I `Ч:D0EN`n7T(/z?+*ra}y=0p/UmcYT>J$]9>Rr0R֙|ρ d %0(s5&FZ5GN/ #TTOc~'OemG-rE=kn#JA^^Vo4 ~ T*8d4 Lanr-"k3ڬ {le`^\dw]kzҷ]B)uD.pa{N !R" CkQ3ߠaT=Μ>YVu=؈p GUqJSgAmǀl2Rn6 Ըrauq%];DqCG9Zv-) XZlIcI> wGe*joJ% %EN*ZC|im_jbI Hy"-o;ťYy?$ (:,rI;$">n1cq[&ep$(ٜc 2(Ͻc"QOq1 ɨVSàRPb]Od믘|Yphu>-&8q SGh"pl]#OEۭK5|i.nFp(aQ-fi\gS*/ ]śFeʵ hB~3o(D6D}m#[l>l1i"۞0d+s uF`|_#W5cN2凐%! #\WȮ"#DJFx> 1 Iܮ`#B4%ns"F]ưte u1]L 86f9mr ^Dٜ ]Yu<<*w*O8?B.f0u|mmqmVhLRX6ǽ|}d0w*&Dn9@do)2z8/7/wjpՏMR|P>#L 6l :`M A$~+te3m%nVm&}70tON&嶅@$ĸJP]L9.VS|iI~NV"OTa#- <o*^I0pYNJAXR҈jǏҋ$-16[赭=1z9Sjo)fSM q@Qv+t$EJ^PyL]򉭶D8ot>0{/؉6u'cM'8O[J3<sdƪɐ\{+vGETC1[:aRլ%~*-J+8K!̠DK. :}b!8b P\6 HjNP265ꁥ%1Ls $IIT'2ukf,CP&5S{kt6d $bşFjX(% 2p&k]?-;ЫLC11 2 u/bʢkArQ)MދZ0O?6)[Q3^_\B""LXt ,Sw ^(x@|㡲>Yg Cٻړg vgD;G:/7HcǕ#t?3 slfزcx ŋLBB6$vh4x_vϲ%ε.8Ք?Qkh WئRY&q*1fi=# >UzfJ! nE<3,MA4׹ؓtZ,㴢+j؞x[s .xCͫOcTe*s3 ӧGNƑBB!ONpvH /.BacPϸΘA!EKXP#1p,LH@-Ӂޠ?wӑ'd a./[-Wz0\T=m]Ǚ" -e 68_JA2 _cGL@#BA!ڀ$5690x &߁s 罇lc\?BXʸwU_(!b iT4֔H#H } t5/!8V$gfN`ˣ+K7MJPK%K{YG-Qn4*X' JGD,,gӈY+CG)RPˬuՓs(߂DtL:Y lTM)55.$W>)q# 87:_fnx!΍3",-MͪO-pNlֹdﮃ+gN,vVrh=0Q81g 梒م~5mx[2L֑fcu4u=y-(FU\ eKӳ}+nzY[!\'>!~ #,&;v&6)~%۷Du}m^ӄ]rcH})Q-vDLO8șYxFlX ( hO$C݂I6޻jv!}J|ΆHgAbO׺[_"0,*&o6\* >TLi(E|&ˮ &&l cSן?q!:vΣڸ7R,djLՕ\_*DőXQSuۘM8ӈXuR 87^%o9(I;^F3@EqUZHZ13QtqF BQzZH6#䴼~-1+rMZK(c/Yސ(A?PhU"_5> t~ hI:{g3qC,/y -h? `Y9w<ͥ)sK?o(zV ęcv鉟 'u+>t?eXja`7smo ma'V7,c+{]`T׾/DR3Bӈӗy1)ߴ\߹A6U;Kjf3}Urό_+i1b$/[s3i+Ŧ遽K TqC"H|UQq+u>0r?e`uyb|fla\(2_5sa&Z1sIDEMȾ1*qj-zvh+$  óگp`=y^ӋmEAJ`Є/zٯu2-}bH, < $܀a iX]M*>bIW7`s@cgjmS&}|:W]b;e,\i@ȗ S`A#D}FM,F\7K䊶5bBW%3J/2?޺,w\v7w1Sj&KoΑ!w^US\kt+j0jM%F Ɖ2gە$bKڛ ;[{/ z:NJ=-{ɘh] =U[#*σ^ߣtxHmorI=0O7 b/ Sbǂ8+6qv2iӲDW>_/g5 \f"WO:bvr}Uc ID#O}I%wG Jolo6d? XCn'} Bd 2v1xpfbC|?ȳ f¼2LsEu\]sʼtoކ;(s:ʒa|Lݒ!~a(pNx9;}'Dq߮2] :@%Q#iI1ٕ*J0W<&h:gmNJ7Ǜ~_u}%3[f _oz~Gyjƒi𓣵A\ ]6K犅CՀcC p-z:aUZ(";ߛ`D$r;L$ 7$.lFk| G3!eҿ!:ξ imΦlo\ͩJyWЉ"8: F36"B3 gp+ @dRm Lm [Q6{,kc雋1 :&a˜P%Ia3Iy\.|^o:=#mSl $cVĖܤ-5*JFV{t[J)|D +h##=]{% Le 2iJ0]87B >0<=I=_wOYw aX' SMC%B[y;f .蹳5"7ٍ:C֢gpfx %DVe`1 /"Y4]>w2 G ;nqыx ex м;`g(zJ]jbާڂr;'W?^_XhJ\"S%Ee+dy %}( 3\ULc$Mu9:e+Nz.휝9G{>͏tZ((E M+e/0C z/s[MDGTg~8~?Wv7mo) F݉ LX7v_gr= Ec;}1K <\7(ߖ+ :oNRgO>:#@!;E=}gW|Om^ǯ-bܑHkA62؍dltӀ6e]ҝ# Qzr1Lg9bdU ܅`\!QzYH ֒U)^,Yw_͈v= _ CcK^a7]l( y@'$fv!9|/*>'\ ^]/2)Ul!n'g P-L|w^s\p*ۊcK"ӝ D B'0rl蔤aB #9]kyzϜǮd4kkyӧ 7?v*Oqr:9^jh3ud%og_N7Qi\w+R45!;q=R:y5ah-pBl 3˅)Ġ:D`#&u*!ݒMԭ-p*XJ| Kxhɘ/.xX1 ۓZggsr$X)7}FAۚ&쾠UnVr %Hե!+}fnr*[EI|AШ"jܨnG.,bټ}ƿ.!¨I`D+h,. oE $k8ANpU>)DU].>0#[ÚW*k[N,]JOytz9 6C#'ޤp>Pq Nk#eu-p@ ]jzS7hx`vsyDx{՝!VMKU6챧w m@Vh95\U WuUhBEuu&mt7xB#׍ J^GthA9b?R1QmX=\#a*ة$y+ ,u|elez.vM_l" ϭ;F1؂v  EGK2udboj]szE'7f$K3o;0r1CX 9Qw: fNS`!g -  ;h {AXPضpnvHK(䤑?Mca#첢EcǠ^WՀ_+~ E 繌͌ XS<W'R0]#O=Yt o@qƷbbƾڒtUCM]v;"ͲV?0jlZPo$,rws\oBT~n0m4ϱyvtr%&\INvؓ`&MTׅ @f5|@ "YA"B,dkU ֱ vpR$ˀQ 74UcooA0c%in͎ D)XL[=)aj_RD^]z=@c+ZFi`:i Y0 yoõ(VIl/OdžR cWjn{L*se:_+ fF wm=Ѻ[0H׾ҹ[4vi5AW;dI.8v/>Y Y ZyƗ*'Y H|^.ܫKGwvc S?}j$aZi& օ[c\滂MD@)ӦaFLc3O>CSLmw4hfױk nM) p*>H C3F5[뿾[L0 wUW8+\QJ0ւ}B߱YqiӮ˥hfR2S00, Yh;ӿL^HڦqMU>rw&6N8Hn5US~;*68q}ȐYX ʼnz'~a1HrNp=ᵭu_c]0 ~p2S0CE"QڥM־ak0@z #ٞ=>%O@a_X$]^!{'=έWŭ"y60No?MCF{׳R:Zn9ãHڶӄ5DyB|a6*M(&*N*iUî|% BGr ݶW/<XSq~CPf0٦c)~=vvTU:@1˿eLu+J󏋌5X SI eo\]n/22%^ǣq/-ȮBt7>B[(<>2~X4E7}!x0#^4@Dw۬g< ) ܦZBC]:3LsOQo4,Ws$rrj3g eшߚEP\56uCtt4C(4[D9 n>5δ'ZC" 5pҮ,"Q|z%k:#JBJ7 Dէܠ)"U NL_w ;+S_؟u1]n0(@X !m7Va,t_WoU~<GNtqXI9`q;N%9w5 iDFͤXؚ_|=ͤ|C*hrWoҚ0/W{y|$%A>Ԉϔ:h~mR/89!r$*zK:%:$NM|0wn/O?h^EW" 4WБpWv yelW*T˨K9>];1vaKaC[`/\|T a13,k.Wc^jKR4'7<=>% opP?uB#mv`;|*H$cڷΣ=Xrñ^_I\LJ,vx6Ut!Ki0ܗd h9{'S5^683ႚ?}_G;@]bb Up&Me0}Ga8< DKv!/rV|([[O#f::U]YΆaTp)h|44&^MO2_md`fsP8GJYdeJ;t qX7#Q#d6m–8 j>|ԍY/7GɐZ,;wEAJgtb>-Q7_,F_5t5)E 1sX4 kI!4Ͱa8S#δތsF bsVz_xגiۚXS5ynQRe -% a>*!Ə1śd֓.!-ݐUaJۄ]388zg[uɏ]1Lbk!AR4%J.7qlAx<G9tߤyk*HO$[hǴ ƒi_tD\GRpi32e߼_6 |OelzO$ot+S[q:7W!x#^.ĭh=I0BH4OvvLv|!۴n` 'gkل~$s?7Y!S=ƍ(߻Ӱ{,xC ʭl&M7w#^,;(?/Qt)-HSf*i|QəA_uCotؽ!}QC3C%4keP;O4%{k AH[.HNgvK#Ar-n!'](o3Q >Dk^ϸ NKF#TOIm =C֌мd0͆MX>N䍎Ur\U?3ݳ,,ak,zU>)4:-^9H%d,$!3 l>G , .y4:GWf{Xot/S4F:`<0)-.99M~qz]z8KaxR(I 2RZx ځ#7 e, g1̷LWaO|* %_;sV$p~--CӇG q2)_f,)E83Fl(2^azKw\߯'`eΐXDwLL[g{Us njŵE3 Hk"9YlI#=hVv*Ia7]78=7jSju ܥ$qwi'!fuzCA M ;WNiѕNQ_r?>6ѫ򕦥?: 9U_KƷiDʡԕy;Y ^:C8b>aT~z+_,~$LNlz<`M+pMktyZygΧ[cjRw"ܦ2ItTe'6?qXGBືp-#°m æ -*pVٗfvEKDg;+T0٢:2HJWedb ԰ ~]T c#B=}woKz7A 'ŭqDZvW:+Z|]˺ȡ7DƢ`xѿc/̨af(z8G~T0Ra<{.u [' bAIt |Myq+MلӊK䫥Q^QF#YZ< ?i+ؓrx1rE/vb"uJ^Ժc|uƉmAV, V~Tj&I O{ )RITsAd~4l_hpRu E{80;|ŹE%O l//5 ;]@0MQ͊0N.% b";FM>"wҏZeHԆ({0z@L'o^2߭Bd_]x/Q9EAO}˲ytEoNQaY[E}g px6S&bL`'Nf\9#=/Ȥr)Peciç7m6vY:#"Ƶ Y'\eYQRtL%Ӏ9Ǚ2[łY8!Gꗵ)k09p뽾%q!Ae\VhŨm^ge *=.ʙX 9BאAj ٥&Tx?|]>jĕ[r޼]4nw5Fϗy>q)F1t$#@'v/̉@dz5T5X hPZ1+4pua6 3Bvvҁ+j$0[*^^v:#᝷>}zLCT@ץN sH +%^ý74B"¤OEY^*Y"(\\֝%a kg"hvnZ͍E|膭gźRRҗ\-J̮:ƒm] {; \>'P<9c:>0.z[ySK཮3Se8b.KIOŨ2u گW"ݣɖWHCQwއnz8_DI ?gKp ^k`p&(w{Zapd7`[Z:g$S9s<.08{ͩ'~<xAHv')u*\}^728Ջ| F5i0wV'_gBs߇51*TK4g"pQᚧP27jT.A8Mܸ>rqκ!طI~9kDZcԃK6'ނ 1AR7>w$Wo:xhFK r˜BW%К囵d=eG\UT:xFrzR{W@ݳ`G3P߅Aض7 ?Q;) KdvyMmYtFf5Ct QoRbjvjX)^ScSvoy]:Bm>l)*?B 5w+CΨ;P\/4Bnoc،ZiI)C@g<O%޲IشQc1 ]/| [C:n36AFr.~a 襴j[ g ɞMVePJ?=j&O*JUݿ: Ĩou~tDbY-lHJ>>u"ciΊ|m&o LgCS%T ivMEpN7]VJP|+!Ȥ/U7x tGe7?=DfD}x6Cm4Vi11WgFɾϕq9^'Itډ b6@y@(sSKo<5rl: +JI$ҤSD@"١ TpIWof<:&yt`ϟE*Aѝ48_~_;v;bh|<%X w_G ؿy_m_1agj\59weאlB>±cjC \@f\:өd1 xf 0acABl阃-ve&x"vgwi)#QRQg};[V*!wOs7|^ mq eý !%@saB57GC|]aw~++?8.Ep'!$$1x8A }XA (OL+9sydAy:8 Q2f:k}L2֣B]`(ߣ Q)ٖ(_lG? K}V(HѷY?R;ZU[,T.7kO3RКc[0|%C(U;솢D??x6!\Bm~^{WHƉnsM]]y/T -󌆴0H$Go`Ld_/k؀2iY 3c&H rSX48&s#` b {ۅsuMӘ6Hȱs6lëx䡱ҟNޭUuH =5=]5n%G{ЙTX(XC& oM4c܍w5nFn hui_%`롯z7hۼۄgQ]r875,O?jR'Br['gR70WI3D0T 1|{tCF\qKG9^\3 4pjq560$@y&P1x#O6x˕w6Xͯ%=vEGͰ܊͙paosDnMlyXĚw[r= zZK(fN2*T.ČK QO?OLK1 "B^. ݄"rc4XkRFXy5a`ԃ,"H#–M4U jQ~k k*, ?ֹCNLteΖP'X~`2%"u:78)(޷ +OĄݱf~`7Hźq*%&+;Rk"ƌǟNm5lA"$<0r`l&L"⁧P#:?nKY鿹w·a4(XP?٥yEu&tduIz`( W>.` A:!ס[E-.tV$2R_QhBբD-^t"o4rj2ZK>)$[4N9>u7x*-V>Xכ0c< 2؉8#:S Hm^C"vxF661O^,?->i8ѴVEUp{fL--&*a|iΞ,mH?;z7reu_OfJ~Çj6V8!Y2FQA(@UXv0fs}@jE9wjtghy1!+|fu(!YJgS 2Wd?8=o(+,G~n^UH4y ϣWk=Q(:|~1NgwRp *"/5üJ59Xy $!־1`%JKcgt)<9$^ ~ײ`VgQı( #=dD˫oѻӖ}~0q:Uu3˜Z)]#SssUQ{͵=B/ Y"F2}w]$-̖C 5aLsV;liR;ͺ"%v0ۼ$Z B%BϞIK{.,R"$zg! V (|5 [}?;|D zᏈAZ/a ߜFn0E4`X[h,<[H݉D[9WG=\jpq>(Τdn 1pJ/U}蓘K>m^˦IIXw6O7W㝈BU݂IS^N Dnre/tՂ"&4g?֞VMȶ3XVZ|Lқ8+4sK4FZ$LٌA?Qn?reVp`x}^]dMTO1nꆱv>d$JE?,zjY\g(c f&-15"} q6gx<ő@qUo.lK3rXμuv!uEtFCҪgؙO=+<%NϸPudWiW)1h+Zx[Ht&&zpy L%~H!'T"(m77B/F쾝7Fbd*uO(<;NfJ:uIX ['w̻<@9eG#/_t̋[hGYl `U[۹X=;y#7m.w%!Ò5]%6+*6u/|m\.²sk3ڿJ5탁q5 KVv;ٮ^U7異7~PV=frڸg)yAE'w1)_eק*:'ojd>}?p CE%|TӒ|N#DM/ but4Oh*K@OT2IzwӼp7vR/9EݕRmwVTwt9D !`CK[Zbl[doõ@g>ܿ2L}ak"!4G\vf1Oh/&0 : $.pde'Şd9G /gû4SEo ^)Tb/[Fʗk^idvߣ}wp] x/,% "dnTw@*~}`w>h 04 1P0Y~E18섂pՀ{W6w$q?̥Uj"Vt:uKsi}<+U !a_ϴe88!ʴJ*YfJmd6j] H4$_q['ː/aTJWu-u-6=F5MLטC*znXs 蒱XFƐg%7[t  [xrN j15?ڑ8fRlmeoqA+oĢ2%\h7\>( Q"qs0[1!<9Dm:"5!;>9['l~J}w[X}CEpo"ZNB2<\Ƒ GzYdM\ƚϢtP_{D ƝhGpk:[n>b(ZjnҮb0`A7Mb&W4tVJO;c8hȚ6K3*& 2wƹ9 z20g̝5 ZpGȭJBO-,Lr]>S9UD9=VID^aC,$ E4=ZB;ǰ/{`AЎW0"fzcEōWd8t[eոzhۑŧQ?_`g33s9qJ#7;} Lr@1_ i)aP|?feja.R{6yXjʠq?RI~fq> `WkZ^}MJy0 u%um64I Ra;3(]`֤0IE ~9Rn_WO[Ւ7Pwhs= YWegP8 $/EMnK;G{W"F3txSUk+l(7Wv<ĽD"jD#Nub#!s*m:y뫍 OohYV m vfvȢ@ R?^,@baXk2LgmiszN=ߐW\tqSxwZP_>H*iь5ݠIyI(s_#}캝SN8,~Zmo e/M(JY2Vg,XbIrV4mԶc$y'`$T*aE87?@RCRdH8M݉Jbdt-Z|7ZUʈh~HRVO;Ql*?I8&ccܲٱK6څ#63JpC{¦'_QTIq!Y$pI7<3}p}D]'&>-~jt:%TY$sOА+f + OϫW"n s3ObK0NJq:M16%isNúS}( On{izws>5_ݒV<Ю> ȏB)uä]d.Yd⬿) s x-]a`lt9#UJ9RkvqJufQ'mm1-D+IiD{H{7y|tt xB`Mdn;&ܭ@'ṕΚ3K`bڒdJ 5yt uEl0h@ozu=</p1Rn%a6u~G+u Jvb8CPFz,hܪѻ`dLxBKȒ=a.-\S~徴B]~\uT X>|Uvz~3<)Z/Rs7}uf} IާXi3$J[2sk[u$V{VEO2<qBF(wv铭v0hl~0psjOZs58V r_!`Wn?Pw7[9+kתB朖)Cm{ %CFD' /c+ uA>CD!}Hx5㦀^!(`ں٥p TjҒx.dzOt3Y3p²` y8v~eh/л5]9"G|qmyҲ`sw`mĚ&¼$p,1܁!DSk ȨmhJIBy:^b) YfHty=3oD](#QFsdgP8AGֿÝZRq7Uۄ7u"fGLѶ%֚A}c!8>F.USp `H"ٹ.`.p.U[,moD10YfYt$I<6ИBLI.J>My_@I>8Po{UCZ}Sna ڄE$'[M|g* nPAyGADҫ+ ˲#$ A[ jNP -}]_\&6 l^N3" X}I>]1$qo=Eн{ْ~,c8DUkGtp~+UB{mcDz-_T^ ~mYh$Wt+v+O;ҭI KL 95b~U޼rKG}qeBɁ;H{:r\ٖpO~DBN}/ǎ ,+h㇬ሙtr^M:z`YnurU2f !Ns3~m?' )kg3z&u]E;{q,2kϘdQme,B^ڌ+4Hb'x3hWZ ӎVEQI?6RNhv']uO[CAO@-G譠 }=Q7Z\EYbQHcmS~&+LF M8~m r O3lR޶#@ ,kK70߫CW?>`4'S`1Nk=JןfD4uQD2RevͲx-P]=``&6zާE+zyplø@EuRډ$ZюB&馹*nUÙB"^rΥ%9QPoVծn=vZj.T2Jhv^wÎ~RfOcK(g@ J6ga@@ 4" 8+4r3p%$h rc>4*@b!9pvg9b|J^t+X}|H#el؀,P KPu&@~8IM @0{i4 ,;W5a/%U=Pn),C{R.z|p]Fy [rI)dN㜨]ؼ7qi[Jjϼ޲v`~;Lg3n ʦ".784ODu֔$Ra7g%vnog79/7ur &$pPR:2 +];n|$5nkmүk„R)UiV%,䦩CЈR D^(3J^)hiȠ3]W cWSjxwZM8e37z ]~N 3T`ii]2&T*o#}$&UZGϔ1Zirn\H hޓU5l(M)f,e:06*kjTJb;do ˢR 6+b.,zO N͓իYqdӜ)7bPUeg<کE(ۆ8]LCuoÁ)^~}#)Y[gmAK?,i,J?9*kCABvEeXr"X~1j [5F%@sMq!.^ Wa$ ^TF5AtLٮު.#΁v-w-ybhcu}eS&Dy:w̢ome}VUǽ\ܗ>@ovWy--".^xhmCF|^]q5wC6H@әEk|lA Blb/Z^{td,E܋KWM K] VJ?W|'& g x. 4b*.^qEw7{?z)u X'Sia-h>OԘkWRAԎgSw,t.jFC5;tx-2.ew-> 5R h7?*Rk%8!VzTZ]]Ԟk;1MJF"Vo,u]M 馷abY(|X?UXEJ͘j+ԕepvl0K1Ju`tԘ[ǩ&ͤ '[fm]rװRRS.nᯞalPuaj?Y@~6TlX5o؁d*NU<2j 8QSUd|ܙzϙ60aTlG8 }A*2n)3Ш Oi \;ƹ(JVN:D8`_~dcU_6IN? xx>r`xR@2R(X0L5OByMv;$|q.YK/;~@ys7w  |6SSM ٷ%VsέUl0#Qk$y \?ޏ@{oˎFV<&)*0FgPo"L6䘯_Ҷ˗/ _5qLdv }4h&J -`1ȞժV34j1 m8uCGߏADLH5H 6Jg~`Bp2bߞz yۧ8Uh`E/PͿ==<韐lۻZ7@zalSf:N|ɩ46{]Fs5C$?{۾3}2Qe"+ٵD__BZ4ܚlbÈRӂuC!2[N҃q>?yPQc\L:;ⳙ 2tuS0h#kzCPF1\M?܈*a[?~Btn B&D*K!iDv=TIJa: u?.QSӠuPn ZӡmEbl#n'ՐxDsȎn w3GL&53aة(3UP{I`+.{R2 DR=B}kiGգ$x[Hpla,e8NdtJ 9Ɋ9OODl9E2X,5 nOy_h{h;{+_B)eǕ_p$YNZ;]laa.loieӧCt4fOQbx9xi"~i(ňO1e;I~B}PtMZNo'v!ځVt.tY;)~qJ 3?0'v&Y{4_9+ϮmS6_1ۙfs`ܽ|6_]mӰ=;؆|S#08$IxW)ۢxϭsj/ט/y3&3'| h IxXX<1^k+ʅDTQ=XȔĽT;0޽{q\ꇼ&G{bBTWq=|dþnΌO D| 'C*?a[dhT6mMpq!5=ǛP@*Ho8`J@(2{)OrEu#Yp1)23yXeM9Kۓ"Y7meKXww}/9zU:KQ&R0>c~}T׷=c+u2#uf]>LQLdӷ9)jH Ż75 . 6B) q|/$h-GYc-ᢳ? ~a9UջzĐzT9 /2LϹ 1]Mu11>'!p~EiǛi}I]GUыLQXI!+^9LX]9D2ɩdy@}W.[Q]~ӭ\6u9'm屇ܹI] S5^6~[Yh7٪ras &qu80C7%-^)ĚP7bԽ6zs= ϕгڊz%_!s59a|zt ?ewt>v4|a GC&D ~oda2S3\z̽xPXFX-2M>MD%>G˨R7v_ܪ/.5 &!Ђ\o+if ?2J 4ha ?߿N_M$e$̑4ա݃xHGJ*X5Z<#9:XRk8:e[MߛW$UفB/h.$.YbIR|؎7L. Y<\IQg\0DtdىB$أhs2jvR(YmS%i"KQ2jE$Y6En$hX=Hڂm@dQC .\lnag{qEF0TC*0NWMjl٪7v9P2EqBhl?ABi\0a:C(vJ\Yv]@Dp%}"QT \֖[TR6xqʵ# %bBVdM+ffOX7Uk%aD{IH0= *Bi7TWuhjk`Zr9O m5Os.|.:HM..Jz ?6XH[gk/5 A)fl<:`!Ljr\$ϞWKskS_4TYduGO;Cޭsghx``5u jC 1Ȧ~0đ* +)P9-Cq"zaQGC{ QMD;.o*Ed:EVRf+X'v b &NV ӄ Ώ++l>xV4Sd]3vp , $ON^*l5vpQ#[ncHP"BXl9 /h($!`ŋ5lhM<'weH:4 {" p}.iO~ί^Ch1_!6֊ 54m׆}MXooFjB]Ό(B; h0u7W9ܦtsp,BfPMtD4M)K J?dHޟ=vA%ul Fhz9+ "@s?akaZ,IM \dTD&R\)7~+_=yW(6n3B3ҡ};Tw0 JHQCC2eCfl˿vzGȦVשBQmn Ֆ()qMHM1˲ӽl'+%[z n!yWmY#c߲[1D=(s!br,w+%! iz٠-Q ^kcֿIOMX'.[ r5*VjҒnqP[dK~cګ%3090SV"}FO.a+}l Zj2X֣8ݩs”ؾr}kȾ3ѼmK4Pf7w R匭:Q+I咆zn6fBdt5Պi! 0 llx㺒E $}8M?[c!ķK:Hk)ȵ`Qca# wŋ ZW%]>TchY8.1#pmf)lzQ,~k&GS.`MSTx!pץ&@|;qn<~O\vi̶TOAb J2[P\kyo*%Far TKz K3叒iɩ:\@0|Zg浨kIk6$:ϼԜA$7$n;\@|j]݉Ww['2fn`r*O3#[aƷ273mYPU/o`YWPhWVy6hyh)A[f[Ag{ 'as ~/ v}Q;T=B*G_N;\L 2 P+lNS綇^h$v^]t r 9^342 {h?S3Em}~]*? mX!Wm&r*K`cR]9d{~ZA"9/GJ`l+{!\NrDUo󑿁Q K~jf6Sᎉg脫nL4's̓=OhfdPmȿ-kV b?~0zf%>ְƙƁ;=iډA|<2hUm(Ko>2oN[Jߘ-=@}p%4­(9Lp<omϔp -|ꃦg^DhK" GC|=`O`L):%G'vd#Nl!zk m {4gGP%-{'ǡlnFls ݻ 7>u6|{bi 8wGMhaܓӾ 3gi':e%Dsez9'|uS<ߙnЪzJ ?5hmb֩_guPٺ*BgC9Ǻ2E 6A %7fZ!`g39+_qr }U d&}YCL[ -N| ={l<9SnSug,\~ervLv-PJ4zJ)Ա-%!Mb;GM[ӴLD+շ.!OwvH aΛDKXTĨ0uٓA/7 Wih|Pp5-aTkd)BVQWU*?5.>p~p p4: #Sai] p2q2 E~]EJ4oș<,]e0s' :YGm"G2.),{4 N.sZ}63^ig) OSΊ.࿦x=_)b&n;e{QASȘ7.ݐSv;BL-y]wȘ>BSa=J\V`[Q 2lI (ͭ܋IBʷ_zꦻ[KIu¢GBSN2 x:R N]/sMePՂqs01rFW W\ Fd%RՃ3'sHc:8XrĖGiwqbOxhZn}rm7hǻ pDo'ZJl ?c ن(Q`|u7q W>&rwt"cs\`]Npxh"gfC*YI\p)Bg/1ldK7x^Ϩ'{.H8t[8_2u[tOk:WA߰N=MO=un?U4”Hg}cDžc ¾ͭ2Lȶ֘㌷HX^DTnh؇yޭGETzTRHFZ1it[}vĚ!rp9]|(|1)Ũ+drL~yf3`F}\-eذе=/(Wۆ{JDg*njн fE?ii >]Kߦ)=S;PedDDB&Rz IHB[!fn:R4 -Qèvʼݖv69ѹFtSjs2Ow;Km'&engUX"*@gz`PEӅ?*G?#s d}6ow^o[(&9V@Wu~e^4m r!F ,EX\d铍"<y4Npn}Jc)i! }2vY);sRwZo>sȅޗ_AnU#EHbn~@bVXr@6?.x8!q wbah[:zNoH;j8@ ld;MhfTb6KPKA -]6|sR%2DD51Nq}]@+5FGޯp%r3EیG0P9y,Wg;">~xdA\6+O!xTt{!-rJ x,p8?׼)TuDos zggG;Q9Y?S도[`zjvO"A\-#J:N5:g3N1T[!I=/nfϟ:;h[ o,ӻ\|7te 1N+R4 WqYH>|]^5q[$9` A]e4ِ[ E,kIvD(Wv*. ^ݎɶ>2~I PԠOO2ݸI;Jqw+Jq d7h "ک+-a?U[Mv9;1~~+aޡrA7V3zmOۑܥviUb'OAvȀҙJÖI: 4|!?IuJ2Fi}eK9S;3?lJgIֹr,?1 0ECw$W*]=)e r9L|Uh( !Y>rV":5w+ vHͽy kLVlnrxT{c:_eBYV$.P?Qlf,=7lDTЉWl|}|Wq{kJtGTkpk5P,WZs{jv_+1B+;G>MV$]D2wcAS),pcҮݥY{KɈ|% T1v QYH6 Gc0rG  *L4M ~24\frݏՒR3`)OUX]|h]Ҭ:ک":/ĵ?sˡ4Mm40W$.*©Wo RʥZ @t\BqȤLLC~ޠ懭%>w y Y<0 #=z`p' -Lb#~cAq /\D"r^!$`D)]A7ud0F8&Vw!!_Mk6HK{v!۸qTq@6$݆~EE"ptm 伯e3BYB8CR0KG87re!R/2-+ %r2agjǀ$e0Rar K.b׸e_"&$ޏ26pզ#\AAeꎌa-]@l' qH,+F q& qB1[\>;ϏG2h!gՅA