freeradius-server-libs-3.0.21-3.6.1 >  A `,(p9|MoFGCۗg0eR:sc3.pUi5S}YCYDz%d@u~ꘃ&"f-7kڲ KT`=ȲfmTe{2s2.g<(ˬVdwu舂u7pZ f=^$ J\ZB YN&_ \k? %ΞH'V]l`K9j2 K٦ph{!"ebkHaH;ny|Dأel-KHJ>p>?d  & @dhpt < L \ |   ,T||%(R8\&9&: &F GH<I\XdY|\]^KbcXdefluv wlxy(zL\`fCfreeradius-server-libs3.0.213.6.1FreeRADIUS shared libraryThe FreeRADIUS shared libraries.`,ڿsheep64JSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/System/Librarieshttp://www.freeradius.org/linuxx86_64z @#X 'F[AA큤`,ڱ`,ڳ`,ڳ`,ڳ`,ڳ`,ں^zM^zMc246ec110a34d19a05ce08b21cab964a4ae9a5146f47ec3458fc4eb6ada671e9b0ed9e4c32ed578d7bf237a675ff4afb458e0df2c7ff2b3c84b1853c3fe67b1af445c272886c087c5c336a53d995d08bbcaa2013da8af13195a59d1e6b1509ea958ba80194a2b33c43755d9eab6aa229fd58cab90630a8585c1a083ae11bef148b9cc1e5d41938be45a368f126a6d1fda03d60a3d622dc75e776be4e90c2d2c6e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfreeradius-server-3.0.21-3.6.1.src.rpmfreeradius-server-libsfreeradius-server-libs(x86-64)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)@@@@@@@@@@@@@@@@@    ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682sheep64 16135523193.0.21-3.6.13.0.21-3.6.1freeradiuslibfreeradius-dhcp.solibfreeradius-eap.solibfreeradius-radius.solibfreeradius-server.sofreeradius-server-libsCOPYRIGHTLICENSE/usr/lib64//usr/lib64/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server-libs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:18279/SUSE_SLE-15-SP2_Update/9c7f074efad29e98ec7d42bac29d6719-freeradius-server.SUSE_SLE-15-SP2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd67a8aa46f4ef8c69808489bbdc469ce8b27850, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc8cbc42a4b6b56b32627ae06df3749d3bd2bfee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65b52a3e347230fac131a547e90a20303490a32f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01ad4db9667b2437a8773f2a947a7c487e08bd22, strippedASCII text  PRRRRRPRRRRRPRRRRR RRRRRR R RR R RRPR RRRRRRR R1_-ԁʴ< !utf-8a5c889c5ee17299b5288ac0af717bdc6a4255b32a4f900a343ebda16022c403d? 7zXZ !t/⥙] crt:bLL bDyw[⾍߫`.=B*I'{ ;:ĪzO)ۥ6kh*e8l}|i?M#PE156سlhE48a>=5\⨎`d8JeaG 7E[H#k] (a4P8>31gI!@V LRU3Mj Y`T7V^xe?z]#C&sm7(YXjQ&Yt^C`'95mC-/aMS4x7K#n F}g [Z l Lu%~!-U ї~lם-H>+q\k jqS6|!&X{w/%) )&R5co Ct;jwb Fnˢ(ɨWw[-q-غ0O,8؁5C3{1#;zJBڎ֜u~QwU`almbieઊ7p$`v*(MZȹNE_`ҡ-EG0gKy#n\oGE¶ +[fmVs#u:hIɺ)wm*ŻN!}`9un&_AB5'n dP_M4+8321sGF#WZ3U["c3eDGpW?u+賴uؼ i-G{d$dhKlar0d6 Ʊ:%Keq'v] ~EsDǙWﴪ8Mw(q㯤I$P}ƾ=XTȥETY:K")+b?C`[P1!KlF ^ vv&hQRPYHmYpz$|=_^>='uA9H'*NB| p(.3mͭ;t]ߤ:#Hgz XwD%gp4 az h8DyDW=B$r/P?\ږh1| 8}[ףrkT'A×n/sm@┇IJsܤO$_JorÎzki@eqL1=Clh~u-s+.+ս"|F`dfݠ²oQ뇆WH陇^;:cjkݝQ_<¼Z33/2,Q J@, iGզSqyzuB'OB-%ִO!Jp:<(Uj7pL|#6Yo.-3ăl0c9Ix0[_F|64u W:*0jx˕_dXsֳGTCYr>nw{QYxQtZUk!w^Dt ,_!){jͨtu3ٷɢ|_uI cIgC)}˜!̓-A5:+6!mWYL-=E+Fc!d_Dl:6*ӱfHs_SM*VߛeTy~81M"AΕ0r5CJnn'Hl~'a:RR ;AW**^3Y9`t{m7=_&jzMpۧ}'!%JVf8{Ȟ+q$OJO!Rk*s =0.| ?~ Q 23!0^!;}xU6<[崊C,)lW}ɧ"8iL 3%ënxxor_H9m=x(kce~)7DUA7Z6kobW>Y'5jmarT-"ϐNyDj'|g)"QiǛ`NRC2#nR>`\ Hk3%3ka5ӆκ)6k)O(1;m:% Ĵ칙KL@W/pe/Ƃ/  C#O :.Ԉ#Gdy0Io#^({f-+E 8nG n\ՏtB9M?5kNT|w]_ϗoi^uLf`}z5 yd|2@ $//]Qa[W8vӠ12(.ǕZ!W]heϽZ6SQ/0nU $?FDH"'5݋w\^[ P?*$]~0hyF)JXs[Dzz1 /ZR~ƭ"{.3J(AXH!ҰZoMGh镆jGP*Ztwy`@뮨pjt00R"o($bxG3"j|JRBpGByh̴K% q OR5'"i,sTEgo9Иm ^~@A  1g Jƕ5#{iRDI&CB}/q_jT\4ƶg Fz=&^?g`"c?%(/"^CwWtr7ӡ[a}aDEVV<)S/j^ۗXעfR<в6 ʘs#9GJO 0\?CD!FoA?[fQWaõ}d*׍ 'f.d̥IscJ>UhXmZ˽&RbnQ`_b"X٘ϕKS?^8b1HwV`ኄrԪ3\X e%ޕu=ȅA׹M aV3NiW:EO}M* '-N.u g$\bśSN+IV,f'BVgJk`YqX,"al@1#W>/GW>5BW*PR =W/:ung% 8TˢwM‰ě޹*p48&eE7՜Ww7% ;\.;hE_<2̛;\6!i?{#T axݜH{Sn1m0O bؙ߸͉9oAb.Z;46SR|];CtsH"a5T^=dR$T^ESjY=/n:gmv2lՀZi?%wT}!K}$ֹ#Q洖yi2,]'+IN7= aRTC2/H~' Sm! m8f)ɞd2Y6q0XiA5e„dƣ8  j7Hh (@i}LCk#JG& =]Ug shPM$km'Hh-cC2| Nt cPT!6 "q?ڥI|}V~݆m+cɆh_Bpd({w<,Whv4qB{u68+z*A(%JȊ!h;$=73}Y}&9^& bg@[e=@z۳ش嬳ǪB$n&,n~S0ӰZiA_&|Y%rogUMM԰ܾ#1GW4Xak L3yVZMkI*/t("8xNz_ˮCRS_؛}'2h;u_zW `KWE3*Y1! {9&:+2;gpNhv>oP1|q6oeM2\Se)Zl„'%h' M$_9_Yg]~pN( zסvٳWg Db1OK))̡Uu;%Mgku_ )*=ƒ#  ~3.oz/L~EѾn~xMhNj&e(WB~ThP74d,O]ǬI#Jߺ| -K]sSq7tUs(F|,(?c u v̬Lv@- m/ JsYN6ۏ%2G'Úi*'@a9!@@vJЅW)hbH7@F|$>|0cļ))븩U`b`S r[m^n?_UK_8"sr,z<62r@vfXII^FoY-JՒ[_2r2XR*zq!L5jT7lF5IqrzHe#u\n(h_Þ[K/^ U/PݮwiޒK)+ l%{uNJk4jO)tA&O!R:(LM^PS (ai6F˹4LJ A2\HaW H)B1_ն+HjUE{>߃r=xS tze K!)]b' En~:xyJu jSŀ[6!+cl75oχ#_]2-)fKp N+ )%zdj$Ôa 79MaฝY@p(+sͩ•ļhhg͹0IGFNCN(Cj[uj%#: +>,$|?QI*%kG2U2dwc B"帺/xVHHv)סe[/PRY[9^8;I`cӔRuR#ےfW$ *O:h?c8o:'\*h::ēmmȲ@v\}% <*}Uط@] o 4YI `?>4M2!YqnpQOW4?:{lej4HBrLF5{p:W wesom P [mKO5bibAzbǧR7^r>ѳ0KҨ %ˣB[(\ZQS F&XD``Ǻ דp M9mT\nj'ZzAw):Y0^=p$ q (r޵9|!XsL  .\"+M p̠"fFEfngc/j# pOmmA tWp lgz kv{:x]u9sR?x$ .]sqK!l??9i eQ(K-Y;d)7xͥo]FW\KfI^M̉|:?V\>[p  ucU9sք%:a i+w{s1)*j&=FfopfwIc!zSЦR'@u3޼)@liҒ>'/hg[Q&8=QC߷c}S|a?#Vi:'xEE+*(.4#D\u<ɒ/GjZv0`!e%n`"bxra*СF6"QRWv\.jEq[s f3 w5g}.##&NhCȉا`:0; 2"q@q'"LR["E;f2v"$k5H޵Zi;g$U8/,Åib:3!Ѩl,|E͖\WRwH}xջki"S) ?Vy4TLҫ+y1fp_越Vԃ8`C ^9a w6}U.Z7~μZ`3Iěh,ʜ^K5NL4 5RD8n űDjƌv ҃~ ) dN+h֪*ӳW[*S}b!Ա4 ]L۠}v[$1iJA"#O6fGJ*|#5;K~Kz:ǭ|]+&F)u&PoeY^fe3^m3=teE/8Ws=aK]8| ڬv Yf7j6%_B"$WA!&WKYea7 >;PM?q#_>ud@>>rJs5rjkL@)_I8mx)@. V~&Q vF`oC alqAVሢez[=cd \C,$>;O燏@s<<`C_~nL +f6Q=jR&? SrԨuharl95BR [>ol|l6`\B S`%ɻ`) s/jŚEr2ӽi+ V#mﳙWZ{t-=ٚKFQԖ1ZbCl 4g:iW1>rO5%'gnrM)x>GU쓿~P%7zk)ZK[{#uKx.Ns8E^f{ \T} hKny$IbhE';Xz?٤6}.Mb%GKtޗӚfW_q һ\bS?33J|D) ;ƪ.6k<4[JtT7Hvnx Q೜٫5\s3Сr-eG83aCŀK] a#qQ<^K..sJZA¬eO7i'jaOZ/L;SmEC6o ҵ 0w{MB†WEG -.F 7I3j,T|&)'QcQ*&(={':;RN!E݆^n/^USQ٢`j-Q5PԜX\>V$ mD\AdIR3o=_!|S"hFp.j8EkX)74thQUFQ)67qXU׳$We?3E\H딞;mTZq x50͵^fP`OyCu_Zh'e0d7@$*P(W~]OuNDKy*|p=d;1.c&QEXP؛7u=n^&k]d"ÂemV"Gņ%Tk<TVw׈T܎IunM/"峦1;TP/ܛlzN?Ѱyv.dYIkXrN-ZYq6|%1-"vy kӁ-Ap,u*"/M*IN ے)O0?7Y>YCԷtKEr"mVׅ S8`&J b BmP ?Ym*¡!e<Ɛ柋W=9:k0>AU!wO##?$y "?9j_2m@ x=Ñ{3t R[z* f|m*Xvbbpi2f^fwn2q(o9@q$l}9?XWѰ?լ6%oc[I7W&nK^Kb]}I/?rr%fFTp/KÙɥqsi*c<#OzHAÜڪz#zӫ<bwz˕({6]>c#l4S k}qrŹ5-F:ҙh1®'& H Dcn 3n} +.q~cgOTғsR٘ups7`~sWY^2T'8 ƇL =f+9my-3HӪg']H{B+%W_?~zp>@zFsv;,Y''R#.,du&LĻ3C)뵊`zv֒q7>X:ZO-d~Oz@:\kkgȚZFug2!*_4= /u!;MЉ ˥ Mx ZWksJibޤ@ zhj^{<.^z y1v5LQ,LuQ2oGPqA]Te6"Bb$$Wρ1k=2K 鴵zZAɻ}fx&ز)H_dBN?}tu'7*qq#h8#CY\̆ m; L{`omWtXn.9}0`iùlLѫ+,{Bafz>m t=(uM\oE\3̼>p#0 UɝR˰Yt ###,NLz{]O7iʤ, `^,]tR)='qR$o2H{co~L#2$ʣ.G*ō_a'w2n6Ywy:8yZQX'}QgYVM$v+[xJk؍-B(?߷^+VP_'@>e W'?^3DU-=3E;7O^$d7./2A1KLf35PnQ$ͼ`e0#AVZ#D6o7~\ιTYaM5 [Lxę_&:rU{m<MdlEEq@ K~W_)Cfbן4U8fE܉%ev.[i$-(qLI\jS/f 5[8ܤ;Wi+̐a_'%}1YB-)78p/NՇMm=)6e=}$ݖTlzkJ%p]X I]4xZW\ Wo8.QH9@Oq7ӿ<4e;ĴsOpl]螻$ɶFBo8"n]~d|U\W/z_SKSTO@z8PUvtz%BEe4haNѤJ*XDI&,P߂\̾] ~@V h=ɼ5 QI[ycTX6')rjۨzS&0$_=8a1 H|akhk_º 2nPU›]ӆ:1ԶEQŸ/Z)R]; OziF@~{Le|7814ArQ!FJ'h|P;J6-d)G P|} 8~{;YR;\1)~+BӲ{R4 M{ 9*g# Cy|?ea C0gtϑ?{W"L Dl*Y(ZIsq%-VPn\9}K |9"3Lw8ok3ADL@ } I^&i{{P9)zYaMbGgPq82A|Oe7w,5l#?X Mhq=S{ w{ Q |#g! Nu 2`<+" }\.j@mP=aͱda/֜DWmI7"H2+vAAU+s*IpU'3y9S3Ґ17 MƯ< ]o@,LrΣ Z`7DO:o8kLֵMewR%oE,D*>1[S6fS*=~iF;#(0/Igc;1J#[񍎢D.e*ĮnJHxE+KWGPዬvY)s֏$ Tw;0_pH-u{,C$,^&`cXe̊ny+rK]1>k H(7p6ڽtW7//K7tRu EdPWXsKkLw.ȍ[߮ VլL/2QAMPDmZGv4bDT4$~qz@ԤE f&V"Ͻ*˷1"|?C AQ9B؀U8ғгKW5}wbR{ nLN:s2RVȦZӣu糀p|úr# SHK׎ln-0~ڜ]zԶ=T>RboMTaHF38q1KNnfiqmOv R.xAT4Ʊk۱Ejrr>QI@pxHN((BM2bXIgn|u&߲F,#is?&2ASdQjTο8l'}4k+*6 Jw T* ZgB?er-jxɖ(XI#Qq~MoţB-Z"GCJ5z &ڟY֢e$ F&雩ML) }~8Gu~rK.ȸ=l_?">4`pX&zb=>~lVM Ys^LB#2t+:Nl=u_ P틙p_͸]=O@p(iRVSSʌ7Kr()?(@w Ǣ0v$0 T=ATfl^neJ+ZCn)τSvץ#bdױD&5hHϭ`SW+s5Q˦&¿BqfoY :ˋ]PցQ?S+P͝r6e(W:qQT%ߘ¨pVyb9&Ny`ûVS#뤚nQ3YȜv|1"KйCTple\*^1Ov]a,sYAџ|"m.~MQ%~s[v*Tߊʘ`Fywk wId?,õ}TfRD+R3|AV]㌜d=䫄8B=Fy"fNh8D*,_; nxG,2jAcHbf~[ӆ[-c@#xNu:ENŪ+!&)bhD$dB"Je ~ }'![#pTo,{)b4L!z0(gE7)( o]W̉^: Q[WH< _m(t3XkpáWG 2-\CnaQ6L$vlл 8MO0 )qRy Fmu9k'e_#\5.YKVCtMlNwyL؉AeQU;6D_(DM {obxJ)_3^E#gxQ0V$3/o/O~ C^8޹CU(CEAiE^kx X핢LlE)1n-`ަ]}x&}.T@ޒ\T ށ_>`nȽB- ^QAkXfh,lX3iQfAU$E/jǵ c,=$_m/ݩ"a-VD>@%cg7 |_t-?>Oߥo __ܰeat1PnWώ/DbVi &>|tW deLaL>NΎY+;s#[> /#SEa3P|?K19"uck\hkL AA{ܩ j|< {4 *G?x6jV *r{:l*qb8;!t~JQ:DH˓m4MA_ Nڪ{a@>!C s{OC…zNmw܇x*b*P<K@FF2&[9fѰFPBu u<+ 3 h~$Cm>pJV#A`iaiVĠ1Op]̺Z@O'lo& ~q[ɾN5P!2osMA"P)O#xGVȑylJQ/luME::J2vA(O,jXSa!E28˻9/p}k0BNsWJZPHmN^Ð՟}vVqj#6ޜDtn6 LJT·AsӒ nr㯘u*M}ƅE51|F7kϏ4T0=-rv&zNB΀e #34GԡTjˡ;RsnMJ<Þf\o6Hv]_5Ю0=$ j"${3v"'T9BLjW摀R|v,4C\^33mE꠻[{ұ];l:ߵWêP PkHj1>S̼pmNcRN dT͟m@L$6F Sѝ1 Բ:89f|_3ɐcTF8fZRjVz-72E*$3-0 \r<;T/(VŰ3S[o;n5?`~6'_lL}}&1"cnwlzCזt@cgOP*LKMZaxLtY t.[Yt %)9t5 * ǨӜ52j<6| }v [ړyy᳞>i%H$l_zZ ׭;Op#@<[! yށXQ5A؂bE[VTΝVBX;aJxp}ɁGu+$x{ʿbZ}a0%k~r6+j 5ďzbLԕ*. OK|fC-J[ DxGL fQ#mr4,YT \~vFMoqщ!>|Ňyblbz줐豼?S f i&@MM88Ls% AdYG c/8Poe<z0am2nxVn=8n'\*z<`q!}9U6oRfӡ]%YHV~Hlj&wA]ƪPvp~r(%p{#ZmmTN@PK :|R8WbqŠ#uN@D!eYy$uo/xO*~sOc {ow↧\#jcFUrWaҦs($_E.7T.^l=J/lx7hf5l˵@jZ~tx29R8ZZ ;Wi~ [3yކǜǛhJ1o?? F|ٔ;S(L݈N9Vgً2ݨX ,ѹ؋$g3R=lPٝ.LT$zD/>6aSY,MAW%BJH`~0GV -=ηEw2=LUd s1Ob3x_| ic@J;T+a??:jjzc*vLs0ZS: \zOྻoYXwTXX1!IU[|j`[3=1[v3F`x-|ݾ|Q_*('ٕSb;]*'"&e&¸tY`y\Ï} 8S hъ$`R4ظ0RnD(Ǜ3{`b;r‡[p^tx7x=Y w>$aYWqBso. n#1HzK!4p/Y~{||q*E3EyZ6#ajnŅ[?!qf9xՎ1wpQ퀕5=J-hR[a ]_d7'f9/irY  ~ DK+5|^MxƔq.Ap:S onYȮ{^Bџ(BHʜ͡/sݾN2Ͱ΃whä5ujpV`$ND{IM߮I:C* B̧LWƄ  փX#2aB. E-_q)Z""& L2vy(N"M4pt!o@TҋLo4W:]j6I؂̘;\`x#+V#Pi:gk{RW4H^h rCqL 5;H`ȡ8QhVU+9Bܨv750)fCf C/ڭ.[܎*< ^{:fZtKnWմu k/b2+NښGԋPVk4mrLj'"ZLƂ3؉F]ybX3CRmgeps驇>4 @=J1,@ԯOgnEw;)Rɸk9c\%xgHJr^۠tpVI* 2[=?Kro >Zz &Y0ΡeV_5 CʿT<\qi,c"A$3eDžK-DjPʝlvjNU2)ըcs |!Zr+6]r.| !O8MBc:wE(X dWF; 8TQz`?)c. 'jYX҇Ĵ >hw-oJx8);P `CEBx%Dg2 O2.D:-/"."ڟio)=6 m-/^H1!osm;>FBzRX1]D\<i'"y(In|/@]Ba)O7/i|M)k|xȪr|D:z5[mn_̓ K}f.`k%l|1#-`L8NuHQuBF 6j Ptp]ꛙGַȂJ̹a R.xM(\nug`!Ch17ev/'pey.%K)qHоWYuZ+2?9w0%#ӄF+YFMx}ߧK|:[= jxBzP>T+R"fk>495-r$\9n U-#nd"ڸC ٯoܿYV%?|&%0:>c)N|G`)w{Oj\9jķkVG o#p TSX1<.$?| @0n@͑! |J(Zm Z%fp_$W˅;j>ͱ}}e !S'6ăry* Bk]K` 4oA&l;sX}:!:4ԨƤ#'eSCΕ3`ZpGޞ݌q>I7 aIJ=PJȯ\N*  M.u6YcAQV)|ҐbIZbAxJӡP)H  L;'<6{XcV L!rSbua[]ޗTšYl]ٙ8peLЅhEP,bΖٓ}<NF 7t:⺬ A[#D*K%D/h[$ljڙUDm;K5e& IG9g7җB~{B`8TZ7h/pckG1S6ކL6 /q1ى"P{|pV<\ Nn7) &H<񪨚n~wI^[C 9K'^W]Aصa\'Iћ5+orfWqH-`mtޥrKawx,9HOmgS’}a~QÊy@n ;\wg[:$#y0~\Y; D0bRE-űTgL~diak J2Ѣt@exzUDV#rѣ':9!ᥧ'ae+a ldnY58 ciVU5 [n~ίmIjM]"*wlSAxI#8hashbum33}(fR6 2)QW:>}oŸҹmW{>^$A ~1>:LnN(c~=Zoh}[|]u?cǃo(X'Qd B| EGѽc&YaW,^小A¶$ 9$zƛ [cX3@$5Phn:Nz- eŕXft&k B< ^WL2cU}XFYLUHyWFY]8PdMO2S4T@\web6ݢ`6у2ė (4ӹD5l#{a Oev>U(;Q3lT2"bXh!YͅS+n|k"!G+zZLňJ6 ޺K sAD#.'~0]jɴEfHIyy qn&S\@ o|ʺ?IOМJoXum)#1̿ZM!weՙXlj C` !TB&9y0FYM1o2󦨲b{$G\j6sz`ˡ'Iˀգe^u+[}T]% Aլk$M\`>C4(S##(؞wA fE܃oGT2>k&"7xح[qeR;'zZ:◒i+zKy܈rAâ[ >uUoޘ81jg\ [w^6Tfó5AI~Z"Q>|1 *`"pi?Z=n&nV4?Z!6 u%6~׸Y=P?JǶ(A a gvwת|@eP-K>u J]PPɐCU{e介5+on+k} j?/ᔽx?793BD9c[Nr9Q MpdlK/ׁS0kj@|]X p v-9w -(|lU{MX6d%RFhXIک.48tj(‚#f936`e՛qV~ltynn9C SGE%CR(!nZh Hg'k n.k ~5k,,c.ְ71<ԥv -p`H3^IZw=)>&l=a趢C,[YXޏUZZg CTPRʆBf;髋 W('IX #q]/GA=ݧ,MG1aJCZN /2t ȚH> lGXwӹĎFg@ x͑P] c_{q˞e3tEa'- /2^83n*$y랑PYߩB6AFіt`ǗH :7d-b]%<t0rRBp윔^I U*]gǙ0qJRM ,@J~Fc*H9W+#-*J2@-sN!Xw66k+[245~`fΐop%Lk|)z?$D"ډѠRlچ (.e7@.edXC-dkr}'aRu :ƩJ>1ʐ5kC?NOvC흨 >U u)\:7_ڂ@d܀q$֠uuSc{ 4j/&X*lesu4yASdݵ1PdMa_@lਿCh@`ۚbb>4+CkGv0;ە\)r#i马u JLͮ;)lm)D󊺸j㸼$>}Z^'0\g',t5ޝazb?mRUslܷ؊V׼]"1\taD(ׂ*agvKj?jLrI04 xKZ7sooj[iEs58UfX4uJ@W$((6vePuw06G<1exW#!֥omq\ãGB=tv;B*ܗ]Z@deZZD3:7ڶȌ|7Ebob ;,S9mݘԃ5ܩwwf/ˀ>8 ǗB*5Q.] wz;*NNSMjw BhOiN%daf@<6ҽ$4Qף٬vFjtPsO^`bM[(,Ob]aQlŎ RdEiDk!\CC!T V-Gk풞%ߔN=M*U9pDNc3* [|aLth ͠KQ4s_ө WۭIi /nf&@ڎ)Txӻ+Z>jZ[-Jld3z/XaAf/2b F{B rr`etXwr9C't=+dӞY K\Q_GDr~fFqCč@*Eyf4aq}Hy%h+V9jOCR>y~mE.|#@&N%]a{mʫN5\eK@]qjET ld'|]OW> T@Ȑ`J)2 UyZGJ-Y3ˈ݄Sh֊h%GR?ARٸ%N8-e9*mzt4U+s_)n߿Rl!0ތ/HE2Ixbd)*2ĥQ&פ +XkOL|_":<ӋJK8NbL1t#(h8Sp|SQ1Q:;2/*(͖O p%g%U =:Ppcu}39AˢXpYum異uO7`qdm"8maD#$ Mԣl>?(cu{ O_b*u?9O9< h//ޖB9j {۩|KZum>*:*W>֜Ӎ3zWEVm)]~όz7b7P" \ߘk\)WH,Ңʃ8sJRd܃xUwdal;:wLr T5~ě&mjXC "T72yL Gg( UAp plNC:boz@QS(K[W%/{ޖC|A` =V&o>qy4g]M Pb}~kTyN琇ڏVymk0KǃaRx`]7nn0KH֕9꜐99^1n zI< }AJP2VJxc=ʖ-Dz%5.L_d9)FBZ+ic-(=h Xt0zhZ,G$6p`u~qj}%yޠ5±ecP< )设Y4*ґ, ~/ cd1x.ROdG~BGI;DƧp+-? uYP}"`؉@AA(;Bc8ZJ+3-zt4pzӭ黉0FupZ)o1V<[p}2,[E%SUHOUtLƧ!32Jݪ$op'!2>إ c5d am !_|LBxĹ2lKn7G%}V|ޥї_ l[ϿK[\gM7z1w ƶԞO8sK!)靵emiA?W 69DW_}k̄aZϦ*HԲLBp>6%MoZ(]4GVla^wܽ+FmT|U(saӽ%!ۖ>x`゙[Bi*ץa(j"MO[zD&lCF6#X>uEW}C2`AO0 4 #/uܣ o\2FPBllww'OBdk$>v~9>T=[ks7X/?xN-!j!> _?YydD!rxL`pO c+n\~2zbpĭ#;v}aޫRƲ)B=1l- - W= ?"Xֻ-fhY/I3^[h7wK!n h2Dcp%&ui>Djm'eD08=&v$ by?Zɨ\\}E =ۀQQw\ Hi{(jk NG_F 4ua9Mѧ80,7(Y̗֕9'n,cfMJ<|~ծ× UCF-ixRyjz7( :+HN9/ZA^@OPJ@ YBT);`"\;gP,}`^=*+L\;h19/ R5zt%ǒ4Ft39S9]@bl"V _ Oe_fw x Y7N_)vw?C+ ZޜyI/ Y2η]ZM^VjQt#LkUi 0P?f[4`A@Z$QxLxݡhR7E@li(^2"`b>s*{!+L#HM!^B:{u~v=8+Fi7x#yf ๾3|^^$ IN>{Q,$Ev30?pLi2{I_ȝa_pRsf3MQH , (!f LvocG}iWs-t%<_]C^gW ^ 鐱6Se1sMP_F}y"53!"aAWwIhЌ0 $(77N۠~ !|F$džA'.C *@>ΆWT.ItmD'tӥtI§R3t"Óy^gbPsd\ǐD!?*_1'JD8%7ՁL JHhxK_c[pӄQ|K#)Fal˸ϾEBF{ m_bc?oWXZ3XD'ۗKI]t`"N^Ezv]gMjH&Qz1dmz0,Sq $Yf%:W`RF2ZRDW&~9iP&圦}rܵɕ;-z68H& 8:'>e9He kK>V¦Iy{+?K̘96tf2i-~M޹G&d187.R&e\wCbn!^\c Zfhx"s)b%^9O>#FL93;rL%<R|;)NǴMnE+a6?سE/2[>`,Ve|3 (TolDՇZ z|[|F!mAwl,7hnn*'|zV0/b_5.}2\>SxC,Z"7}CrQi-}I*(8!')4tNwkoKX:KOn 24 /t>`3cLkka>)Tj# Zy4_,o(,H-JZz,'LnuVWd,7.vS'RjQ hxqYU*w6obB+i3M|<"͚踕W:ڇpLKJN&jf8P C赡PW*_a_6ս.d8X7 p<+yif?n\ҌNq{؝㝟:z^{J(SHp#30g[DղFtjSgeۆ:iK5s]3{rD6pJM=a"܅d(LB|x[o&:(@F >J' KuZD ( ) ZSs} i|K@=OGfZI:6(L8iaKN?)8-/8<ͣ?qW!2مѐ[)_p!TkXxֺu&T *j8Ь=+:șb ⵫%ga{N8cBbw7|p>{t\6d}1zT:WϕZ'P34r M -a{z\d8:;&sgHvKF]pYk+A:*.ڽEz]+iWUHXqR瑉i_J=s]WF]=tP*V-#aIz6-]j|_QrV䜧hÜB\#i9 i6E'3َAX{~FNrSMhQL |cK Z1JKuQ +oݐb*~PtUǗxѦ^&閶`nFp kx8Dz4ȸ_Ki1m\弧p7ۄ asǯ#!o!J vE=Kq/r_:ng[>7"'B]J6ỽ<钿?oϞ7ƶ'gJ4ЕSGnWw158KKmJ5b^Q1w! 7LŴSlH JA]rd%ͩ!Np m r&Ϣm<aҥ)OIa 3lW4>V&oo0(\7~0G-"z_h&LG;,'%'GQ(0պYQIl qB_HQ`괼mLj=o2\6"xf1 Q&!;[>0OCOlo㳇3%?AIӨ0كi0{)M8NR~XqSҐ%gPʤj;ǣ~j7/dX[8(<A֓'Kf%xSo !t: |ؕ_uQnB@s pN@ 1 ?.1goTsAA3{o 6 IV"˵C{ʪQW'Yjgb ѩ369-pm8x`ITN|UtY\&%-2zvǔG=M=OsB*I# N$97'j` -PsEKKYEJ:bxp. Ҕ1Nkuq;$jطhsΦ8;{sX!o!5F ygoɳ2t.u]JsW$*u5N`r.l,EDۈ'eсus_&4ذii 6!un/fjnsQA>(Q;ep$8 ~+ďΙ &]?$$64XPt$*CV/VY~ģ}ھ>?fbZOL.o*T(R A>7}='d,w;bԈeye c{{quO$: Xk Qcp'tl+lixg̻}_hyR} @f)c،[_S#13'=oJ*:+s1Q[y6l&ÅS;r針҈!(!s;cAF*ZA,P7ML7| Z.FiנּDgёTa`bKF9E*))az~`i7R`ΡdN+fa m A-Q8UbFg0YaUQTpx֠ZmeҶ J]+ؙ潲5 Cߒz;'e(HXLy}ɆmnV3\C X)p>'Rb̿SՑn!*p)RN|,Vw`+JE<#ԋ{*EdМ' e?۹nb? +Cmi(ist 0/{{Ja-t/XD1YJM3@qdw$̯3A4wy5y̋v [QKo:AV^ns #l^G:;=+bᩓ7-=E,9AkOܶlyd1SK0:I8]&u2qE @2fEXI$ `⩒'}JT\lg@jY2-1:{YEy5j{v:smXը[HFpH-ܹ/iq3 w/A{`x*$G K.XQ.4ZsU ^ 2ל;9ǭ\%>P4rh8CGc/$g@HjdN͔H?$:{(N3AfF\I\Dc]彺src-oxToI;џ Қ[XaΌYU@₯AE1b&96 ~F4=9- [V#J:"RC ՑόY˅ؖ*qcUޘ;$18͊u.- 5111k|OR"]e ,҆FSrt1ǒ\(`G$6qd#OK:5;Kf@u覱x03<"㉃˲)fmLk坮.EWyέz\7I'&j~i&A ;Xktrf]S%xW.%+<_a&'U[e-j~ ?La-z%8hWѲ-7M%Wt%XJ^qX[౫1jA'̻1;WbV mE3p1SQ#-IȚ3a>)I16rܦipWfI;䯟b=^MS6j6ItNijbPqԨ$l\ط'CW> :ޛz$J7g7Y, G,"qb%  |o 0\ S+Vc1 21SyiχN֪gT( U>~ߏQ~j=qL_{\L2&"6gg;`iS3&Y@*EEg(Ub3[fls6{%jp_PKYRJꠦ5$5ăcOSӳhNSZ{tkh<ѷ*i-)+[?yyu+ޘ 3Do6z=Bı6A|Ϋd"jPVϾ:Î}4Bۚy2bP/88dd͋mL|`Oحں߳{$>KJL'=Lf ғj"H5~(vӪWdjEֻՐH tnQ>DĐEl)8>mg¼,:POxOA:wZq 5ꄕ!fd45b?\1+= @D^;W`TlA>sg=%9XO3}x.@:|+3)<\8\|f@q6ecTwPD({P@B @FvG3aP["G Œam`WCUUȄ"[=5eQ3zR#ƫ琛T%8@yhI_"kAn *FΟ *e,ZzL( w#ffD1z^qoYZ|"{~Nv)ޥ5:Ʈ^ }ևdQEVJ[-˵o]=0ZpаuN6D]L|2{J3Bِ.5~]C7Hf7ێl juA!-څ_˙t[MX Hߑ͝- (ITscu(>I?i,(;yMr$/)o~@4 /ED"4Cah~cH2M;Rv\DbRǂeU)G?ŗ܇7:>ə: MNNpu Q# L'43`Ωj2%+oҶ!k}rZsT\"vZ ^Ees*bY/Zxv4zl9l9Tb @tz)b^ }^^D,wQU,MR (Z_;E'E#EoA;EL!XQWRDZao/xjdtIz уQU+G,`J _ _svҧXZhK _A%(05˘E!&|h4 Ys&򩼃Psxaj9_W철%`M#Dd n=b2EuzBU&-p Ⱥ3Z[S@/:`*54|;6y O*_|H?_0p1]3fΫ+w{һKg-fU.tUv=RJeo˚}+fx^n4-) I;gIGw@O 4t5ǒ0vTfmʊnp\qꯆr̀ɻu=T!*"ػi`XcHv {IQW"L>[k×b0-7chpZm[D\Ymx**G\} ,A91f05Ic{|8NDe p 8fiw%5V.8jY"oc0ZM|Ebb {$痈y=+T SɠS|<9ps4;8u@xM%\5fS;ϱhfgLP3KO#,ᥝfP% ?#(AgQHm!5hD#ԔMNh\YvV CԕN 6k˒X"‚e#Ƌk*G'R\'a1XRt*]E P\%>c**#pP5vɱvZ_b% $B *ǻEva{.E}dfώ<bnS4Z[nݡAըbx?/=|c[!}ZspfWvR-fڅ9F|;A6aߠpQE8@2ԔҵW>f_Ε/! ގ"afqy:A _Z%"ݩL@|&qc ;ீn87Ұ\l/BƈB1bz - S=iܑbHw[˶UnW:0}h vGx|eij`_ʖOp)f;ƮTŃDԃ|1sB1,AVb]# ~,=㪜<J1FzNR M7Jw w>`3t(0ɬ:*~Dl)TCuݣhK$Ȧ\1r#]^H/y?ʯxcfv_uA?P 1%빆OmV&>㲈ɣ[<9EdK'] kqЁo4.fdM)Wo cQD _F׺eC{,į%]`5/"Clp02F[>Viy.uAsvhm[x#I %<],YF5vN?v< Y* 8+;@}KEoqJ 9eu^IYpra Yu]]Vt4'w> KOK|CO^$eۋ=^%OLlkU/zgI9Nd&¥{y@G/%Hv ƀUbGG:Ȯ3[OPhtGHA̟e<*mv@0N15RSVҸK( #aS"Yc%uE\NW\: _(y#,}ה"ʪ\Jh!PfNh'uxbۉ{{ tH(??&5x NR%XR.ovKV\Q~sQ'p J3͹qM끣= I$^Lg`qk8]=h@$_l^<4l1vw((%?|?/մ:X{o#}Ӑ(i?fv>xnk;ƌvzRcX8S ݜWjqEr|`h|'b%3KPu g֙Y|$,ݥl`t)¨B$s*Uܒ+ 1z(?C )@@*<'X<~2z HP%,JLZ<{sv~WU׻J6X=$`9$yc2vS&ʼnl!Q>F9{gY$6 w~1@K ޭ(-!I/4%cDKa3@LգJ;Ke \A8[Ai7, ڥw {RZ0:ǎ36;O-qQ-,T)?[kci+ ɕ t?赈1ɿ2HrVkJ fef Îa;=cp7蕵9a[2 jBB6@I:/3>-YSV|r [ fnodk8~73ߺ0@7q$3&/Ӯw M v{m<ݺLhrz36=.e_1_r,9Lr[`!룃Rr-tpIM~;x35#y^fBhgI TGhM8oAo(ӑdx׭ǑctKq>Ta ]j.Sj2 *ũ> B+jķix}d˽)#}$\E!PI$q4eՑMdq6%/:H{%Ц֣֫7}OSPs%ߋpJC?;LN>fIoQ?z/hPZ Wb ‡@@B0Ƨ\l'Ba@;۫|8 +qdLioʥǰ  , IkCڞif~`вT`EZ|~S5'^>/џ3 / ϝ<_C>]!S̻2֌SE.VPs^xÕX}[!enJ'[="W\~VR`G!or0W fbI!㸍ɱEKc}@5+(9mٍۙAV kz׿,r̷djkơWUaQOf QYyBf39"ϺI|?oJZf`-;A{l>t4\f!뗻u0z8!rOh~5ky7O;eox̾m1:hVd3|b7ỷcb_ fbl[coE!~&xw8c:@竔YAU1_vZ"#g͇l'61C[e">|"2%Ib=4; !ԃD}f.ۼQ*Jl i* P-}} QaNx0Es6)(xKDoGa+`6/Q1ZGqC͐U_/} ?7̺Jx̦ )Z0Tͱ;c-9mqXۧ7J(!C.294r~o{`Mm jmZl?%a4|E)Zv犤7B?@u.jCf/pTgnyQvx[&FxU C5E5*pLr G_AD™.eerONo|l:(Q_S @?w0| /::#m gC#t>bd,\LIx#-}÷izҤ3zF>?PiG;nK2)P2jڦY)+S+u`GqNCYF~s`~rKr3摠/cz>8VſǠȳQ a3$ߑ% OXǺ16-'tl`9%HMƟyxaS9nVz̛jwޠ v &hh "YŀN]Wke84KX.(0wNp&xnkxZ]B #j]|`X\ttd䇩pE;Rw{/q?z8~=N/(νٷ65ll6sEc;A)JSNhF"8!p _-~s7 ɫK}3dR̯cwTM-sҕ{ڴ$ 5d2,n-i 0?uQ#ؐ3EEsiX}xI9~JB-*W:fG4f_T]ʁ ѩ1"h?-*'ItogAg! D~@Fxmf^!5sCܳh LdD $Ҵ m07jX$@Ys318AL[j7lJޚg 7Hm. R yk+c`fbtRe"'eS:|*ThX@8+ BO.zap{uPL)4* nC+fl$jmWz\Q^xmҝۢLܮge3f xvi />>q[Q 5>@ jr-8ZsNd(#NP= c_)0PKxnUd߷\]Gtdx V v <$xH}Mغy7%ڷ̥e8Te7_"XN k %1sN1[ M \qbS ]Gkݪ"ixQrR|()pNVd9Ꮶ6ץ0zn1/"5;r`s3M]YW$n>$Ad&qww9\]_z&V(͜o)9ՐL7Ɉepv8$̽F}6Sr6`9A3דdz c s'ghAߩG.?EJ ^Z_ɭEm'oSثp- @KY>Db ;,,Yh["P!`$Q _F8I.F&"f kԆ6TS'j\iH 9 |S '%I(V%ѯwYahsЕ[ }wsN͝N0HQٲ@rpYw䖋ʯ$RwՌ LjY vW]C`^H\ţ-n*FDP,n=p(fA?g nk("(THn`koA"T1l@N aR%:$DuwFtKܖ7Y]Zq=owjO*=#]7MXqXJxH0JEPT 1gg^c%7^ucaCsM{9f^6!W2r#[1Pk!60;C, ;FG$=sicՇhK؏x8K1&jfohzeض7U^6ZUƦ%`x&μs3!JF#\?[5Yz!Rk6u?%貂dJ o"Oث&y?XEc/e88~U u!ZZ&T]zA5j? Kil}W!Ɓ <,O qسÐkZt]2ځ䏅<-&wL%"VITi-g9 H]It;k0wD2R|1,yѐJ@%3<.T "\S?ylT7EtY>:e$8i>?1CEo<N7fOh6( ɭ&=kvTũF)hsRo[VYW1ruƓ64 0uaÇ sx׷+h: J d l"eE":*ۥj Gd3t* g]-j(@ v$LĜkVHp% [SX4A!S+˵JO=OqR.Y~b8n`B2bA{0zI2 P#k،g:FjXۅP;RCad>2ir&}?Zl(K2p!Dam_:Ҩ~*0O嘪p("wU~]2LuMMU71"&4 f!e^<_0;cE Uԉz5{bmsK{C6irtj࿊_t9qEW1AP|}э]hY}w|C18Lأ?D dk| "=-Ok`.mXL|:XU_aQZ>PH!fbb!>U"X ry6UԭkgGx+y86QNUzK>VO2<3o&fعZ OLpl_>4`G=HZ繓IG޹p㳉9uh ăow\e}EkcQ3`Ԡ kǡH'ު<> b9; 2-lXK!6[G>HF.$?$nHj@GGB% 'afW;b3vcV-M/1ޖbJgUj81vk @J*#( 4UR 'i"BЏrӏ-=#n_' e)raE `.֮$f:|Q+#'VLRYjE=␧uA$W"3r|} e)0/KަUDUyF )mR`C O(=G bqTDD'EOi'm*NY=3˯'=&ĸelugtEb@8T_f̉c%_-i}22ߍ3$֋n HziKLH,߫ ኛ-Fu tkjlʦ\ar7Hl 2LMzfCҒnᜥ ȿ 2UVǚ߱_2nJV Ac QKCO8,ȠH5eUG4[Db (/1>LVz|oCmQ\跉[S>}gIsf2Np5ZTF8 ɗ,ipz'+ٺ|-/)=7u*JǑmrϡ/N_5J5Stb흂ܫ2T+I0!#A2웥k' US/"٭d)/QXA. nWWGy/F\)Y8-)qY p]YnXS :g(Y?07wDsZf3ŀkZ!ۼ`иߵue{Yj Gm/|B>XW} 1/PN9GCt+e, F<do7Q2V"vodia1n9 LS, } zP¦|A) [OK E,C7yB$D? 7E2b͸89Ъ5 x X )qu [$>_A1"T;P rX[qk*7i]zJXI͔Hㅜ}m Ș"YY:arj|~ 1b]`nN_;S\߽Y%{ 7NР{Ns@T}1IAF]ȕ:N D72kP7o8ۗЕ@pٰj> b t|{VB<;WgEe`iݥP#>doc[NZOQ1I9`i Wu~ZMVz4:D:s})PJTVq`Z0ڂ ڦ7'@oGA,TXZtRhqB96TEܼ+pw+y4WFk-ؽr[ey0E?$[?/gw_߲#%Cܺ#|dǴ֓w^ܐ>h~$2J~ gUw -DM`U*OkK\%HazK|o.3 (4,f!,,K8gd6ޓiVX]FGYUjf@ugLoVu&xR3*3븑yPf.u~2zK [2@{?^mMF>9˃Jd'9苭(q.jdǔlXϊlꓓtdxݦaz'DZ 8dX2aYZK7675:9>*A=cx-/ G39+'E;0>@k ?_hB$ ߃^*yhPgm3qxGЌܿ F`vH螂6R!\t 0a|w`M _z+!Um6?@Ճ, Z¨ w:|U ՎU Dgjmp`h* n`TY?},Aq/M؞ 7!6JwN @~r8zP l߈rŒD%;!&-U݉:Fn7 Agk y=2)Rf0A&8*IK/%6jgMl<զ5>4ʷh[/.i5ȃ%r3RO-G?zX}c`paҭ<\HJLE f~:#{\:H|/vb$ m8[Grj\ 2Aۢ1x+ c2xTPbŝ\ޖR($JBjtU2cŶ9:GD)liG$ q)'ڷkBdMsG\2;L=W©>ok5PoXJqmku_XDEa90t?ƅt"l!c,J\4'mT Cc46K[gxԌ[-@ǔrrvm/Y>,vx [nG">]RƟaIUޡ}ǘ%|#g dsov =Y,#@iG>9PHޭz1^>/m_޵~‡kAaXZ=mTa%HU^"^=C16@X@nY9]-k~x$U<<'^'UY;Fc!ҎΥ(zR1%p)f?-a(o_l ?p&l޹83A% kٽ?dg|ftC#ezʎj}(D5of?coU'gex I?RVB3D1IGL3A}7s 1iO;"XᚩbzI[L?&$MΔ: @ 7')5Q|S*'H$`.;:`(!6?9"Q!&-2ńۯadgpC{ ",rP/\̏[)d%8f8aa'N@ΑJEJ8ޓMtvH};]&1K5(}y6967D6slRnqU\Ֆe27 :6R&AĔ/7 nT,I&}P/@%vv{Y,!:0RFQM,;ݚ ;KlMtW,p8]d.+Boڊ #縀ޘ6nXx&N +*`I7G$կt|qG闉b iwS ֎h~Pdc]a7rI;`* }nl +LP nQGgͦ]b:l8U"5ֳ.PuB5ˬْ:eon?vC D˳[㴑Owff4N8,OADi.GO$խo@L-,Z+K.j>%A{oqڍ @'fЙ+A0)E-3chg ʚã4&:DlDAҨȜcL`m@S=!Ѹ :x!1u5iʲ_#A' Jٽi_յe.$at'ZioW:=_IqLuk ZLBUq!v,$p|୹` 6"q׼TN)Ŏ*"E81(|ކOBYXLCJppOsEH>a_eL(-v^i!w>lGLvZIR'>D:mfwz}ׇ䲆y{UIx,ә#> L2rMDeȿcϢϻLZfE}QeP8BMȦagkGr]ͪ*O_|"~#V>=#5gq5=zW.FTe Uv3T=@Wd_"/6{Lv*83GǒD!@*)8+M0Y5* y@i4ռFT 4|҅gsniyL?u{yspH~9Ak+Te*-i"mtUy]fK,4AkQTC#a:KVwՖ*9/ fv/__8vMf@(Sm~=K#YyԔGnEڱJNP˜ʻuWƂglpkHwV)‹\>*MΉxҗHMcש݋b(ёQ⮰<ĝ]˾E4R=VwT(;zG>s7d. 6U3.!w5,Hш`Sd#k\%kӯւ3 W=&K~ҭ>ޙ`S$iC%6Ta''ɉ Vb\^W.ʝNpH(Jй̎|̪wL@c.jKE:+dp(̓qF |M (O-1Gg`q#pPlT*a)UPo9츔`?梃Kx3|)v 5Ѕ0nPVʟg{؟ kC:Z/Z[{U4 Unr7]40(&uz~^Cdj87RGl9hw2n7P 57T(-bYQ4(RM\eI)?VUO|S9(*rk=gADi 9kRWpuV7'R[= <(*.1y4i>:*2=F]wL4lɩ鱭,Q8\g,E%J?su2rQ#4Z63ֶH; )"ېg$RRNNPtb aaņ9f>_`s_ҍ/|7J#4b[0$Xoi n: OG o_.0̭V%\{Dxl/\I]0$s &g17W{&#A|eԿU.亣 DVdhu=(h˝ Ac} 4Hϭ>ގPcdȹ^@ȓ(m×X|4B؁%|phk2J}^UhHA冏C#3jH~?DZ>?MF0i7~7z-'Cdnxcx3TKNxr/uU^"-?iȈ"`@_}8uGL,tf TKaU-CeL5ùxAy*@SSҪ+Q!j{SG&>ʺ=}`nRJ'%|A v·pѼ}s66|:4LVY$_Xy:{9 X-s%AIq#2guJ`0Uz :f۝ t>>c0αf|#QZoӖB"$Li#mO'$D;&fw%Ȭtho) 8?g"F:ui>o^A ղY飉>8$گ>V}2걡x)eA2G@~ f<`K&Rvڐhqr'O{Ryk( 2鯤KT1 _#HtTo'50z(0 gQy.^8iXȟSH8wQa״cYNC2{42himR+%}C>PflatWB(UZ iø~2hЏ$U"&0ShK_'xu/\,w,liNU! ךcVĒyۋU^%N&.*dJ`;8.KtEE`,ݑ&HƇ)FFz&ج?dXjóJkAz1jא!ӚÑ*AGx𮅙*aXY k[M'Z>6/`ɜTΊd&4g Q^fd(@Des<)4- bTEUJ}5 BAepjm^><:'C|Ԁp,DKFaN˰VJt g;o"]nǼ(So0aPKj\Za>E$bLaYwD-bW$DN@%&BS8+D\/Vmux#k2J Mp!iIҺ1K/83hZtAMqיMϣ>q-2q밽ky%Yн:[#Nx ӊWuAնM_oKbJݫAG^ޮw:P;66G?yM!9.*Mijwvhvk0wvn/-l!Rz45q[XKjR4q[FW=wHr:OVsOR =5wXZWErkHaG3"ܲ>`g-UMwfA_GZ֮ W]vh|ozF*&G\ǯQ|.[_0\Y+*@0f_ 7 FC)&^ ~x~خ,nط _D7>H/{Ƀ#f6[H9_䐋L{<E 0ۻ2ASeкHd؍4O_!1:l#DZ{lnjf Κ :|a [V0UiC`[cJ6A|9FRuw)%I>[&c6sm_ ۅZOrA}bѺhi\b;^ | #E (=CCY 毣-VQ*]~l״;Ze!T5smQl^ Ӿaot,pJwb~ϡ̒߹RĈP %m-Pm =w@~d A5u }I7"{+6QLB翭@OҎ 9%\ qj2u,6J.2ɠgL&cM0;'Z0U9/I vQѤB!~¦1⸇β]IQ4ﮮ~~cfPZz Lfv)iu_fMn2k#t6HF!oc|c  _&G iTss܋7Lv۸V%l/澣+{ѾNU@@^Iz-:.0w`!I:'6ʶ3{1#' h?vu Tv6Phiq B&XL <{[ϵB'U¶][!'rhאsJpL&V45VM~g3ZOebh.z8 IڜB |XH.&3ݯL7*AFY}~!ܷؿY$-`p½0ɥ#gyXoGXxNiɲxn>Ľ?7ywX4! ) EQ˅A3GTbAWWbb, .8"…eFJº~6k)poƄ^ѥ+Z8S]~4Ԅͭ},cC:<5O-0LQU3N>>%~ƣJɣw2הNc#,}cÇّҌ%G5$#TZRu :.2lsxGqy3[9l_HFS".3Ӆ񵍛"x]0Aߡ6MR)4F dAQk3aMy5#hu@G}B0iF4O_>7M&r6nyjIY"oG?LYжl>Lظ\ȩMlFV" TɏF,n=C CŠ.1.xrj0Rj") 9CeHg!aż9OP!QcܷR&$Fk OBXּч0FV%xFDlǡ;ՀTVowL~hs Yk߁n"a%F42ŖPXȰ{P52Kp\T5$d?oX>Юr@ ,怆LX1x19)֯[L[jɢs̸y%;f]IC%SV4icrk8\A\M"M,PwZUF\@0?YIן6CYFNUO oCJir!ӿ׏֌j벶|?jM8w!-J3P9,J {YdJu $t QCrCK03^zCg^l$'i :ֆ6y[U&L~ؠ7rz7"WUoN4n AQfusp9&y?5f/8FoKT2SMe[ڢk qbUT|-9E_h?/Q91EqjjDB4+&D&[xA~ןBrǗS}B#!&b8%yɤ?&+o0UcȊ[­"S]LpE&FvuA d˕,!cA틚NڰJI!aD2e$v%hӎJK\H ZC["u4B5Ҙbt9ųQ>4e.esBvnX[U=< pA7('ifc4gݪx$iՕ{:3L&C^ 6'ґ1\.BՇғWw3ESJ(V7N;5h-+>CY2f +|Ld | 'CD#ڢƏFX/bV?Tֽ. EDhysU֐a-5\OmeMqPs5ýĬĖ&ţݳD[ !ǗB"g=kfz{J?Ƀ?zjeA;kγS kcҽ #ݲl@I$E`- mݸ|ǂGh%L}d p:X4&NRbu-Gz+QI[g߉<׃%Z^=^vha[: ~(2_@9+xfm9,@x#P#'텖fA[j܋rY>-ƫV"Ek b UT,=4$>qqBD[XO^AJ~X8sO2yq DVv~vsJyn@*4IdFO7320yRG" eO_c|WЖ+UDr"qs=cg?}C4_] Z "P(OM#Ӷ)MaI ݺ{?2Otۖ &AcgPxoumFc%V $}תg%"F\$f{W61!#waGm\BB>?jm#+rVi"Bc}hP#ERCކ%ȴ*2 EAB>^LHysA~xَɑIXC@&f'f$YWլ7PDa LCJ.XQe.=߷@Aq H:&Z^ E6cWU [lF[ S 1%9#8cpA#lqg`Rmɺc )`"?iG?x҅E{kp-;WI9h:x6?&>3 Y =Q/LvS |mF"^ֶ'Oи;su"\`d+E9 HLJP8<&pY$>{!T{V>r+ys` ظDJG!^~Xfx'W}&V$f4@D!t 5i[>AK7fS?~nlOK6>J)3G~a1B$(rzԒSU-xwAq|Vc(EYDiyy&J ccs6n2\A0\`O*GPQ`m >/ZLpF .FgQE?JuцP7Dy 9> ^m3nvvas`Ɗt8Ư&@z)ۓn(]Y=CG -\Uֽ+h^U_|qZhEb}Wb|c;Pe1} L*1 x\>R~cSzb^Xe&敀x߄`0C>(0q RQ2'9AX)!B}%A$\A?m#|C/m|ǜzӡҳuZzЌI0 n+?dg: !>/`7vNK).̓IQ3k ;/*q9osq[߀ i%U[DK:j:.. <,K]{$-#ש!:)c Ƭ*Xlib(See! ly˒CIXzlznSof! \RJ_Ou!0x= o5ºd,/Hv8FLn-A?,`X柈SeTі,Hg4!s&[d 2) 5A DG wTLbڰbB%o@c&l ?;*@Vu5%L,q|dx8[GrCs~þc:۩EK71ez8o +[ "!<96~LpJ@z^QGǗM:z*a)ޱW ہ8|ZH\uϒnAQ-G(kkЩ/Z^ؐ>յ Y)m\3[[`?G5B+=`g]FOOaxyv뛵mPw⇧'4#x1.0#{aP3`ʥwekJՌ?;3nIt|NreoE.yk{@!D`=X+A$ 4X5P먕FRk~)?m1E:e4<ӈ֥G7$+_hp[9K;ȁ+'AV_ B-p`C=rm}2aZ*}>Jyj'ڬ];RcLhPT~Ǚ9Gn .9,iJui{O+bS8BҟK>ȩD}&@vJ7-S2ܸY/y3~(y:lV0"Z2~d qI҂.eZKJv5s/u(ڄMF97{1ޖ0RL `-c3U2`f9_*u{bXꝵa8cln(y8qW{^p)o 7&؃EQ+!AMtL@2 x9:oX:.p{Nox` *i>֕SJG(֙6׹ِlpH6C%pҔ1IyOSHht?L%,Ӥu/vnhpmjdxItΎ= \g9>@-54uCj41)t.+*e2+aѼ#V* D| 'EkT[e|>~Ů"hԳɈFةc\r"l#Ú_gy.(lXT*i@('s92:r=pDZw.ܧm_u2i-=oV4=3oJg&X[Q@Ά*wBX8 ͦ%qn>Ȗz"iGk])=ih}C,1xrG9~[=CNi = e$ Āi3s{Ʈʶl''G1i/2Q22ARhmsF|^Dtg]v}FxQ!衦ۈmţ݌k'c;(GK!uT(A8OLdgd~=c783F ;(ak H{HkZ#w/$ 0 %*?,5Xk˯=3%-aft_8KaDzء.aktR^t5{`ZCɈ~tW+9Pd4Xy-)\6:I-?I@?&p0czb0"Qj(VIc\;`187^-epSg3<ɞ|&Os"x 5Cx5:/0P 5rǖO[C3} !Uii̲0&N.4N4'2]0  '.} FlڟGppUCBji` |_O?L.ꑙH~xn XA[NRsXk6yAFSZoRDZ?V\(,L1(RUhj~*3֝af?sK!E@J0:K$:rx[E Ljb%/HOLi<Ʉ.p:n24g=3)cf-d$oY`sLgIsrvԖLAC.c* I- hԨy ~3G5:"ϒVrᅷptJۯe>"N1C߽?q.=`t*\jDM:k;6updΒ$ iA:Ҋ4@-b+ukYނKdR1Nu|Ft%RsEOn. eyR pX-F`Ooڼ!9n@@`זgg/ՐksO Gj}>t^^jm4F٘ʪm%MXD*۫7'[9ҍh V~EvC1#dt~p&Gr.QlG1RGi0ՠiJ #PB 9Z`S8a/ǔ0 +h+Cey' Mnը덒rKr SScu!ӹD1sp(u8Z%7EV6H]эCbHMf>r:?NNbLd+ׯbJ'\_ߑSPSa?hǾtPI΅PV1!3^ YO! >"Ohg5^ʤ"W|6 o8U+V%VLi<!ċW6T"PF"l/SF^T=VUTyiBFE`Ȳ=]_ s9ת ?%_( H=I#ՙR1V<]aUZd8nوA`!tRm|D7ռH|X&J,FI1p|&9br~j,!mS dE&Vp*EYU-/!R뒚ݘSDYPXQCi{.6Vѧgxu+6MJfz=~j?[NiS# fkL׀mـp|ڍ86±;\f-~~At, x{W枽<YgbNH[sd5R\q^=b::KREZ7a?{#짷JU4Iy,.Ò@.8zLJ %w* eI%L27ǼsihnNp(3Я7=/Tp!iܛzNf93,-$*sNb/&tp/H/of|vFVIk$ؾUqJ/Yi׭諪g9#h WCF9*[&$|}>/<^E&]?/ZQ2TD}/N vHЅXܴE" >Z19"ڇ^{p0b )3M2̯=mS|1LYQiJ6m@$*Go,)oӶG΍Aia+" xr`pl`KIi`,RpnT#'eyxR*R\i]'z})vFdXL4tr&:usga;Bi.8ɭ:+ϫ~(†u2y[W>cjoVZ_UH9up6ދ({NkP?~eu4l5(aE~[na6,mm#RB!zk_V]i4Ӣ2G_hOt=w4iM' ˘]cr^1Qo._7-qE3A3Su*qbFP(場OSυ{UޚRt#lcIAAq#RqހL~&?d>ݗYցd$*du"[]d#S :Ns]b,ZgYY@W9shˊ]wCũ5̊sSd2&;egYѿr'eRm<%s7bц?὎԰͸AU[CyQsFo{CtmnéQݚh֧5Hc9}a 5 =N݊f9H% l._z1V?i46A(OXm]9dZR#d.~Ş0_5ԐA"h֬`#R|]Me\F)8!.>wAʸ M9pk,ˉQR`~SS-*ZGNӖNy-,Z6p3k/F_蛅8rZ[;;lG XaÅLp64j\1 _7SHҗG1R4Ƒ2L5 [mJ?ʬ2DMC/ P?K3f+o bb뗍W2g)6,OJ.}נl^^I>{&_%㠩l>e/+ꗝEX7z""S64[gsNBZ K -7blk^*:x㿅,5] -I9U3iv_ KW@oSg\95Q sPBrU.00?h=3`֪螦gli\­kv"wUi:|MBtC R$Dž-.LM cz["dʚ5+y'n||-k4Z0nL=w<t")mukWOh&'mC)绚RԵL–g[/~vI3ݸ*`)T/9)DoSoJ ENjm`SJ"]`[Zд'S! )s)ւ+>#V-i !g;/ʉ} X IUX Scx) dtS⇁WkbDi ô[U|6fCizNC&@,GS O[Ȏ~AΡaE0"#ѣ/9ԃWybw_X0v\Tw@G"gjY0B1Y)'hX~iL]`> _+EX?tpU ɑC:GF4O D"G^Uc{|b^q&>!chF[WR*R6n}t#`Jm2^rx0[_̓t0%7SSGD8tjwwQkт U~LYG8m8>yokRj}G bNLײ17]Fjj`'],Bjp^^'.R8-fCd2PRKs}*Gk9~Qf\lPo`4QfQwclC4t= k,Ӑи禛(y9`ǻ(IiU4,#sI&a ?CUc{lԤC\0rXtaUZRmhT 'bs_2󡓈N=)!ߩeXRB%zGQ{ާ\8{BDt>c G@'!ߑbЪv+){GPosi{^mÚs_QVk wyvu6qõt_.i;G|D` kƅ1!z5i/V쳒du\x1_lKk9l!ԢbRP 3#|o-]> )c/ڑ]G.8Q`0B7Dc|=ѫrRIR9:ܤU0/1иj{|]͙6['_.%͖q響#"~p1PwE\qBy! EX2nq#RTtI*9,lC!CVaBfUU.`I@c`PRAV,)JE}Qh, T !'܁MGc+aW2Vq=4Œc#qC,a%VJaFc+~,_ЌxHfoZdf,|æB5d?wrߑSoWRĤΘ=)w$2~듸K!ࡈG9w%@"y>E~fk=zrhnD;zWKX<:Hap="wKpFj5M*zK12 N_'O? W(5ΙUzr/7># `aa0FnޭÐP Sgo q,_ꨕ3:|Am1 ŭsls| *r'^-j˔&4<{69}$,2D$Њ}1^\YFޫ |!44Z&mY G xF 8{~-4OdC] ۱?DȯxtZa0;F&' dJy0bsx_H~.yh?nqEfoeIċ/Ez %]T-g"T0|dQ{T 2+'f5vj]{&TΪ k,duH ڕ(kKJ,EX;kѵ6b1գW!Xj8Z4@r+cVcMU<7SEvMSR-"/x,?襨Re Jvd45M4sb8gI9YnZ[+ iI>z*+|*y@S[}L.U}M$Fi+%]Á猚P Kwp8ş+_Z #Fe} oQ>)̉@j2YGc)⇩I].yr#!~.}؃z%Q;Q x}-=>yȒ1e<$ 09F*րtؾI^P!jiS̟4H &싆mp\Zp?~ ‘i!H6M!8״:[ b3\a#;sǕ*{|%xv <S/WСMxSOg5k5ht]]}Sg)Uw "e|2+-p# L y]W ܋b3?@ձډOȬ |g{+Sٚ޴ӯMѴboE;3 EU8Oz=}|`VK[k ={gwr-c:՝HxB9 QbZόr&'@v7,5jI_柦Gp<}@.:,5طAIkoLl]&G= EL1c&VZWOY$MzY {`:7?_MT2y%{w*gوNJzz@Т^VlZg?L&v!ɑWA Sxuݪ"F}NwUc.F4v SQ_Ըs{k]zKǵ%a{R )Ƹf7B{'p$J܂tNknaD'sj{!8 OβEo=^)= Lt =([$}19Y3A0*߻U|6J#aCoTCy1spk撃"*3wtz_.yuIް^6mjrC ׆ MsFD`y12,1 TGJ$ j.z;Ǫlg1/\sǃnz[L:`.3iJl兲CQI7~Q }g*U 0ȣ/ 6zev|Qz8B(H*؍Wzo?i4hm>L")h79JY*}jGviotZ¼PJ*BU`xU`*YqS61 !XYbk6sV~r^Ѕ ? 9Oa \xV^anvQN--m~[#jaC~yjn;+yq]i(;@?_ihE8uwcm'+UiC%: AbosAHNPRtD mEfdƕIKA{/+:ЙS!=˽ !,dWo cIPzܻ"O{%1XNO-mX7 #y<΢ ~c yg{Xi/ @yU7|3<=m:D|_)15i$5y9g>BۆYfwqnρcmC7<5ye'sPګ.U;)z+ĺtJ/;6v\.w\a!*,'w8Auo2)L?`@1& ȅIwr{/muMA*Ħ/u[ 4r c+kHEYÄ4!Lx^c޶=N;jjgv:`vHW`!+ K':L3G{hHոIDndv%I?nNg44uP^Da n-3KĄUlx݉SgaAvԄīˏq+cJ0(v"wbIfܔ L~6;RN; W@:I׽<[IhMVlE0({G >0 ޱ͛/;SqƬ`w.ѠNj2*Fq@ϖ::+%W =  H἗߯;UJdr.q^`.^WpVW1ąQ+ ]%p27{?c5it'xUPUq/-yjxu}V~e c/wU(̗h\ P70K&I@~MF?A:]S46Hّt֨{RGie5d$|(eE땎rٔ1P]:$:jv@Dod]E_j whCO ULl`ٚLXWsuQ1P:݄ :Yo"6G>/EQ&k~+⅊4yѸܰyZT N4)oeAW!4T栥ypؙ! 14i@0 0^9S65j n )4RG#Wh{>Wj~dݣM3[WR|[yI[BJ=rmo?ESZo"EPp$&*bR kBްTyb ߃ǖ$߱˞鷾 (4*&LUԓ񍗁tvT6E%ܫsr_=a5Y_@J%iDJ}4ܲ:!e/zdRY&hw E̱RY;8j)ƙOdl?6c~v=,ߔ; Hw~+!CƲU&gMa 2K'nc"T2Yy-.<4Vw2G?RJRR|K6՛OxcGhsj-]`uZ [xD̳ kZ2dS닜.8q0TF#%{,PS}*A᫫o{KI_'z]^P7~!:I߸8 "E)/uᮺn\tA6j7WH4$3E*cWQ3n &#@ky?G/qVwH95,1f gX7.;;-Q4  q+S.@" M^ҜFqȾGr焞 ~n=@^Aw6u1sAcSKzJp+,PoG坾ěEZkjs'v?CĤpDMQm~A33*ےL#]=5D#Ŗc=ZlBqa!J|j i;x]ќSXN -}{6yEz[ek&0hrc7ж§QѨ!nj{.)0jm%F`en!s\1X^SL*[խ eUѺrvF9'o8c j j"Ab- ?,$D\鞰[݀&J"w(ֱ8251$}<(j"j3Qp!Aiƪ& M [E_;Nfp"*wu4².*I ͏m4MOԪCj?DU6dLTk" t%GfХk |?&Q7ZNG#?`0q-g&-"NaxՄ4'#!!{u(|%N&u D̛.Niͤ1n`1G#G([.vSԞ]n_sӯS 2ǽv2ڀECCP1~[>zHY,@³J\\keҝ8|l9Kω l]oڴ({bXn^UcyK,ա 4M[Eq*1x Thߴ-eqI^i.UWxJE " M>x^2+ =Uv ,#R\F [-{dQX7Y J>:}Jǜ;B OgZU H:H]$SKf^)|U2jr}d7r䄇㤐X>kרf(PE0o.mU)\Nq͸)[e :2TS \"Pr=g ֨8uyA$Lxp›F  UHWYPo^ÖFXdu)hZIqwBE6*IN2vz G_c֠]e 8h+|1dĥO+^ AĹm^ NLd4v^&96=ǖS,0PiN=iܲz͌- c.ŕT $? L=FhdVsBE83-K>ܸZdkZ@U}ƒh$Nbncgoj dLYtI+xs?~>yMЁmXiPeޫd^htj*oݱcOεrgBp(*LJ i5ӎD!S6F[, /#+SyɊB L͞c;UJ~6@U=(=\r, y 9zm  1UU oE|vF8EN㭼"!MՍA%vÉe7Դ>n~F"D[k8{ 턌1p3wՓ6 f./pG?s>et@1u"qA3Na>cgOZS޿\{}3.C|h[ y1FGBYcAwŇxRPͲ =~[s$qvG%bϹ e=N5Up.xkN cUZgw܄SAt~c lֿ#7`o-]@drө-E.# |?H]?[eyH''N5+C7~,Og-wȬCn3 BhC %YM~BH|E>NN*ɂ 9p6f TaY8zgJ7NW}ZVZ*PY6<첪}g%Y ,'XRTa(;TJv?;eDڅm+S:Dz|#O9^7ht"i;Z \_c1ASHP r+8ϒόQJVh;e\gt$p>>/6- #4YRpTw 4\?`Apd$5_G%7*+#?zolFwwwC[- g0R&u"A|5T ,@~Y'К,y/N|Ld_0>AeĴ PeJTg&,DLjPY8 C_sj/8,~TbS( Hbg2f3k ǹFb@ #͂ekK!b(ӟܶU.ݠm4'=}YjX`*)7DiB<^ )Ԥ*{GD8cǢڹ!5~IF|k/@iZXq#^+j9"kk#N_A' fM 'sTuQzs8THiNjcs7]D*k>Ӡ]Cu6f|#+'Cn' ilWnڤ\O#tm&`PCþjΐ 9 [z".-wEГ^Ysx^&Ј-D5:xX䅟YT߭7? y|yj-J}㿣 &·_fٌMyRb,%3#~t'wͪW0ԝ"0oSjې,5vt4r<FDAyY$txG52u8AGtoG,5ZPG݊ ˥yJL0x3Fu7ݵ:1soRr>_nqAi߳Pz*#d6іt]u t:>F}y⁒1Q%W' MOdt9sS,ø*Πu\3q(NڌEH` (jM>y:* Uc} c.aG₹!:o5Oc잟ǛQ&jeBay[cb7tHJ*ٛ4 ˵E)4=.=bjvCarn- j v:iE˞Kq\wk}n`?M2_2+UFj9B5Х,s|ӊ2f?g$J^7G1jN"lsdLeG:N&~ZM^ /g - ,"r_ aue1P@D{Y@tu/: XH Q4uNN?zH%%[tmk+k <@6ɛ-(;6vk ~ZJykGxBOLQF}y|M ,{cM'D<#8k3> Ϻ#]>>2坾ԉh#4mΊlORI@4#ߠjDHA9|jbcdРhtGdi :77Q Аss&GĹ*8s-g|Zc^DrZqᏧhBiaA,PhC ytb}"8yI!;M0J96~Q"H#UB5tVܲ 2h,Xx*{ v\̾ &Da6Xx+(Լ|pj{spg$Fg F\n1&z}Ku"2thѓ)O{ez"z`΄Ǡ 4~ju U:?Fe7N)׊Gt DΫ;wzs2hu1Ϊ "*kQv΁&ijCDS BѷC/O@P ^Eyk٬$z"vn]g}<|V u*3!֚/ [~P9sҿbveĎ,-Fz T qQl:I1^]~5.%~H XBۊ D!rG22ȉq?= RNaw4,/E.">4"ED9DJ)1E<dN+AGL>aNQ &L[1RReWZS8x.i(rVhb^ZkiNt vKu a`B$ |?sLJаHڱo^ꂮaA^bqx ~EAy^B%<z;1jhrMQGffjjPԩ txo9g=8 {tm!b8#6ʪ*yײC._+~2LIև8=;נ1X"dʧREl",L.iT|>4ܝt u]QJpK76[ݭVAоb2K5sh lw/kQoSJCkV#!H_sR_bW0 INrGNu'(DBo) T%!t~%ljb̢>Wr?@C[DZP YydRFAa^]PkjށZQh$QBk\%#Fn_<93Ŧiu/֣RPK%!t݁5|p%\,n2 m¼66-?9A0*!ר1z P?*{KYLLڟ6Ac(Y_! *l ^lLf3pQiՎ;S G96=-}5T$}(BL!JvJm("4 w[k ggϕui^WO9-<,6#·OfX}^x@_Ri!tԶ.7z6InQ6fmL4<|['Kq l>Uqu)L3fL_x 9C(m}:=`4`'KX+_cz񬖓) 39}Uв'8u)c-7,7@R>u%D $K1~3Y4Gۊ.*?UYut;p#ah{:g;8=mީuR f@G:#>WP\7!NK8IRZ[ǖO"Qt݉WunO^Y4<۪qQ-7G9UafvJ ӊ{&I])x"0"U,o}jR Q: 1'Γ}&4Ӽﴂi+(0GH]}iʱa2Bh/⶗J?L~z.!)ׯ mJ` IHVs6?Ɉf͋ig^HLD붳.4{횆ьҺDwispј^ӗ鄆GJ2dWi  $Hh{0nۉ"h%gòz_ ݖEI3%q1 >?z3&x/bbT+R⽾,- AGN\"'=i0=XijNoxUxP?8E[ ` VE E򈀯(Hؔ-y6UiKH^#PX7uU^(R77 . !'ʐUPVhg4 S?hKYi30JRg,៵蚇 e<5qRß[M߸=.lH-wc1 FPvd ?G{Nl/VeWز:WD"2Ȕ|xUKVDJ~}Tz{J`wA|F[R,qs/#&tDi)fr̻4^#Q!ܱa^HT$v)yn])f^YȣJ69eU* ϗVڧPn pHnz+ lN2 U'O\_1T9uN k y1ae0?P݁BiL ,9Byqq7*QrUeiw&(=kgJ7 QM}(deB=󭷘,H՘0ht\м]MvFGa  *k1Lt]~xh1uOpM}DY8Tg۝X hP_(yef'1$ Ji_%~I #~31M2'Z&ZLDe"` {@͗ R(f! ;B7ҜY{,UŽj; 9@qMT<"0Y ƭ y,x{s ]%2`64)cNH8dŘ1߃?3c$7(@UT)d+^@Naf21wNu1Za۸-Yς!DR#SZ%ٳK 5aN4j]dB$^i Mv*pdDq&dNEzg>p*o{kCi6vK#Œ{f_|*z*cO^`J t(6Ծ{,<0 v DOך3GPN|x CMaϟQ#E0~eO:V;oKJ4I|Ə֘ZHF%9$(,|T'< WV>|dXL(t_m\qn?P̜~AQțdCJl﯀q[ܔ.KxeQ6jhG{ ,uȚ 3HvrKx.Ml]7rFWǒ~ۻi nyb~2anH=wyq]p"NB!yp6 B}8yf#g+y :q?=Td@j%' xRTm\glg Jh@uޖn[T87q)VJg҈`r N7Ƕ-7[3D n..PQb2hx ZN n*elK6ע|(jJN ]bj}PNSRb3]RީѨnpE2y\!ڏ&htR YLO$ί(.]Y ɪRkHWٽ"NIjT)eJHPAݫ+ e.RPQe%M{}4Ɉbcno ^'oYPєHJ 3aH<6Z1hXW=Z|=)m"5yk6t> k?7!Ӣ3ּO*o nebv`(]TtA(En Q#juzoM1Z*?H}, z+x8I7uO< Q}tZr$jD; r1D"<ZUZ@oZy3O0e&#r"IyrBL$G@e$^  4PN 63O9 8R=KO7wȄBF7ڸ[*i|[aGa /<5/4zM*;tP9+z.\d#\A^ML9)>\]6fYRyI0>Cc$QK ͱoLbC5: tqtz0|愚391YrrdDavo,i~wmQoO`%)*2(X ]|vu`e^>awۗnv(3'՚`YK+tV>hX,R 懗 exy;G4VrzKzAE՟+lံ_o.v.!uFx!1jm<1Gg~.LkMFJݚ.ZQ RZ= p2Z8Rx,mO$ƋJ,RΑ$vJf =,gg|MK@0oc)nǣ.}5GSy>Թ>UB)x=p*/x^m, c;O"Qȳ׾q ';\+Z]5m# ui{po'k^j6%$6P eQMw"˛+<,כ؏q]>8]g {+![|u*=.w'q 8:(i.,rӫ/&4h;%,5ت AE2AD>qԗ>;Saoccm_-;A QnsVM¢yRQ",W1DFd*\d.sk1|m$C( NP^8m_L{*`K,7 !η'*I>Г!.!c6Qsejs@fl$ǹ7|51G0ys&9GJiu{T[A]DW] Sϧt$9- hV M5RX$ҧRZT7X. w57lI5fe#n&ņP|egOjܶn6W5mճ5qR7ӼA@Xc*lh>E-2~/֊JYb(wE@jܹ s(0GI?X]é_B}K&]<%$9Л^ݴTqId a;%TN ,Qܭb8њIXBVBe/^|ߖiy)+ Sn4gBAw,? n2OR;URPO,Ԫ%,? ҙj'uհL]]EzOo-α.=CON??cA * x4GU)ȲOڤ--1%A7Tb Oj1€"|4B| ✺ 5Vj8m hY}H5SuOB-%fz5='Bw.9P7iBhA`Y@ԁClD%tDžlURm3+Y2S7#!;NB`lR1}:[Zz&O8 Q4nݣ.#OeN??vh|y%h>3 J*V\C+ɛVcdͱ&@,k<:h'.feB\stZ0N"a2̆N{$JѹZ 0poׇWZ1:hn]8܍Wd<[d gh9R7hdu&:'v`S05qQkIIF¥E_p|<nI.`ۯ";X?[ɡ*[䈈^;A9YoΤ+'{`EQ$ʌ-;S^i-:\x>ӵ:əz-bZKiExp7 7?un:!NnLztЌc2:j_e\.+l%ER8Y&?aY+Wȇ-qk<Ã{ҋ _zՇME A=+0Fe"zds u8WT`tlesv֫8a5_׀Fͮ h;yR螊MEՐ^%;ww'hՅ,YgS5uo߈'G&>J4*emrU4+&$Z߰d#ߚÂ7f)Hp!F!*2o_ =yJqmO yy_oT3=2D|ƃr` Q{tf룫V#5^#;.ؾ0֨0>[ @MC3P.8^:b:Pv7oJ!0E0T$^' ުč_.G%vs)ؓNXgX~s"W)sa2 #ɨ7Q7&"TlE](ȅ2x=j? bJ@|Lu3GSxη(K0y_!T?36X)冹g^dӳi<3ś #7!xb&JS]ݴ536 `Wr6\rwe JR'P,ݓOڥ]+j58l~sAF5?6(r[P"ƫ]蜐7|8,KN,;d%X[ ;r_g$f#8Bu>GǻC8" 0a2J(KXh+c`X(45woV".q㱓? N'sOb,4KI]%8,L~b3nuBs7+.ٞ/>$4*g3A~7j& [ i3W'Vaֶ,y(z i3_F#]@ C7Ӕn'YIV-vFPOCQW/,Ͽ+C@͖dqQd H9R>䕴4mm>Ml>YD uunB1/TgSHȵ -xڡ5k!EDA~%.jdp_ZU5&јXo82';%nKV7V=oԩV#5Hje*{~3MFw禊zy\-D? aݠpHs}lޗ Ϙ=B?!ѓ$Z>g/$NVn!N 3 74*}Mzgv%pYkҭ rdґp)]),؄r{pқO+j-'r8*R*öcydxF&^upI*R׆B8|;^ڶ.YWA &Qٲ:o}ԕ|yL8H?I&!b v%B3"gC櫶>KF"[b2NnqгhQWŏlwdVITݺ{.T<aApkF-'n֠AEd&M;JaS4DH˞x@ > vyU `P<7Ϣx3*[a"\T:X{^6G,t#js%h5CERvS_l.3RSV-/Zp gSGm~Sqbgƈ/{4}(r Us #QwXHA\ҥRQs-@>E9 hRqщssvB2=.6֛E,\5 m"gr|p=\b WJ- l3ʻ-66Pm@Ŗ!8a{3b[kO:w:t`9 W4ڼ#jgjbu3x-䐚C~jD;ABz8{Ke#:LD?.y0N."!!Ng~I̚W!=ȹ:W}vfoӤۃ?$6/ʯ02E-s|2d \RfaY E~yRwjL#8[#l &P^.1.-/ -;LE9n-|( a#?#;x 1hA1IzgpYQ< b@tU^P=b91 gAĠoirtlUPFQsN Vj w8?sρL1r ħ#jbÆ<➔E\'thW\w'6JԿ6DVȧ6}Wa$mořKR IOS4.FZY 2r)$>UY`!AH5 U%8GŹ9`[X@8Vl5P^k#nt Bso4x+ݑ*ʰF"Й֒D&ui]!.x҇7ФSR cqlR噵b EtuGwWȩP ىNW-}4;؃UQr?4ӌ@l'j4,j"$Oyņ0wc~OR443ݺ )FHAB(]ߟFddT텯JBt'POߔ߫*[崢Ѿ682ďN P6EkG @?jNM%0rM|p&IuM)Ms#wɷؖ3LWs4r-ʡl5I ]~M5vW=U|(:d`ZFwRN1^)z;m pC,08FJJee/z؟x c|{m p@Z_!Z~5&W3E0]o].ԥ=`0ɗh*`V@2 LC*d'(fucL %mHZٗQ.^>_Wrsk_C"`4̓] #Ըiŧ8w'-{j1J;ю|5+WDPFEsjơZ[71xrB?&ߍgit}NVoi ϱ F]-wLT 3SQ=r0Z4̌Y:ӂmR ‹@)<-smܘ֦v}6'f=L%SB&Y#ZDa+A T6\WEˈRaҚ> mB) Cm 2@SE2$3w HJ%uft JM(}oޢ.KG?> y dխZavo]ojg5 w lb|q!!6#inwGGla1p" Wr硠v]Gy6`BDu%4Ld ؒϡĥ}d!埶xgaDBG7&fNܥK_G_($ ۔u\GL!V2_ıl,i_ D}=;-Ǐ*B&QI]I31g;OSH@QnAû%TS2,Oh`o%%jaaS+2 >;$R36TIT"!_-+d PiRRѝLSV ¹{|PCa3:R,Q榦;mpB$}>& p B',LF+j97)3z5J_濸x!{oQvJ0CohyDՌܑ_򢍌D鬠\Ǭs{$ݜL?GEşV1$?RFDm[+Bp! ^YC=e'%St`V$tj.w,h'H$҃C*N?ds,_%n½-`<j AE\!nc)a5KIHսPd^a=x7޼.("9/3-FV7Z55њG&0CYWTO|ۆ@[/6 ͂c/eJX,2-h B W`rGgIBGh'%!,:۶:}|e_9;z7@ulŤ ?)ll*AT~oXP\ xFGgGXG%` Vi魎2AZtQ%oGfK"B"Ny@<Bpu"mQեpɒ.$aW*,7E׀ڭg%aB{nS '\)̗kCj毘S1M"T_v$nLRVN;U}Y"o;'\>חsۓf/DCr!Nj8fv`GOg}!qƻ-m5*mx^k(Z 'Yh f\2^xI$KK)p mKe/>) "U߰}'Ḳ-'-^/Y,sh>ḄQ+s1'akpDAsX]Elt&ըki5%{A 'NknD[5df5*:8r(g52D'\͂Z gp:^Ԏ'47MsEv]`Q_=NsE*)|W(DV3.V >x$ ]KP95msqM1gSǃn+mGh'|Ug'ПKE)@ t1XZaSivUArve[wwCt=3\<=tN6\k`F5:*ЩTP_'!9s2'_ {ĠM*l0P`/(]w-7%rޒP@TwhǸy^QH#*O\ .UJOISa~TRёh錝&( MXizۛŒ]\ r^<"I9VO|9jk\@= Gؽcb\7m(NBlaSȆ(s9O~bcEnzHf w`ʁiq/>;6,Ñ Fƃ73^O}J8ܠї"m9X*(F-΢SdnP ڋي9j3cVAa1p=% d*/m=D6f8G0Q?GL"R"rO!SGz,DӋUyZ1H+S<^X(N1 ; d:|o)8#'?Qa#bMGyVC./$#ha+`,m6X+o3cݤx*)WuHt]Qv~y(BV&R/"M`*4漏˵eKpLXW.tDNJZ"\GXf]GQ䕧2Ab/ J@~G[̤8 -b&D(sMi1nxi /b1[cP251VXyr=1mjA]G8-ɡu&`ōa~O\m $d]t_ VFcǹa7ZzgA#eǥy0GwĔlj}[e0D=P2NCZy#t{ ]>m#]M+s2|~e0.zbNѮޕr-`#{ :diZXȫQ Xψ] JC,1H>uTzL:ߋ jnZi"d)44ap|Z:_>8Rpa 3m25`nMa_m|GB1zUvkMO TV4F3Dǁ%+[$z50oz"B} b !SΫbKm]A_NQudy133vߟE6-ClJϣ!K3 Mdt %/PŪbS=ٳ!ZzS*}nͶWD~td~ l4i_q"g118W=T}S=CJ wÐB<()OǥuI7Qxԯ0?!þ:;5g3?uM^?9!Ӝ#a[S4/#jlUekQ ȷlk`5ʶ|2Fr'|/` #*Q7e(6?S#VO՘"؎Oآ5kO7(sE,3wj{\`U8ZT1B1b߳h!'u{>hF?.Y׊nqM]io=4IFeq aY?p/SY f_j.-xE{kzxH2MC3A- ӎ`1c9:݆[~QC #6 꿪jTnq? Eh"(y(FE|hZZkG::'FLƬq t`x1oXfϐf|,_G9 |6kpnp^E]u`(pICm;7"'{rNq$"hK}dя&Mm~6n8aJ%IĜ3nZؠA lgt+lK,}틦c.$gpxYjqƦ5Bڼ+кSgG z2ƺǑ<"1J@iҔT`Ƣ{Ŗ?lHbW&w{>Ol$g843U[6oGzYfF=т}{ʱzBT#åx>#<9-jC+nmp7r#7\/QcU(!]/ʔWW!ZjJ 4ó{7nQjHED*Z^V+**})@AO0vv٨فC م#OmZNٝ6JϒT n "C޹ˆ>@t㥙?Þml",EDbD}t@Eo 0AE;G̅s;1RPIV /7xlxqn`Z)jRO` %;ZԥY+>F!UESw<Ѝ`t+8ѧq>"w<02#hrjM.>>V.2CGYIqnsO/^Lc-o@Q+X3f k1NH|[T EV1cDѺ1*SMgk!V̀fAv>9<;+Dȑ!?FJa.A%r1>lH{Y,ۇqysw쐹UJ^Ƶ="S/:+󵅺z62ԩ9D4#ܣT@]3Bχ'dɣ8 uJ]b|p>Y >SJ`ҮPew%$n lV>n{Bu4wa}<"z`6V# t?jᇡE‚VInLM'2@}{ۀ$\Z^VciQTC22V^ | ݾ(,(@2#$ȧIڣ*dgOoqD&:Fg#jlܰuG}/+doqs@kҤFըY+\ >H1#1KF}w٨,9PjtA}D.%sj12! ONϖ ؆B!œVmbBSHelWjĭ8f׉q[zRd+ ĴXΎ~J]3~x7(D7s:3&{21};ʇ*٢dR&]k= .Wlyl}ރfrC.́65zQRf%fX`ZWoԸ>*kH 2˧ooSڸ׊N(v)/"o K{:er_joZy"¦q'7#TR:q?V}L`X"-߂\s*˖J~ >Ϫ!ܰpd{Ss[ݚj̜V̐>A%&%wE!bm";0?>~y&nF!d~TGlPF&\JUfW2z%0d;ݲOE;mUox02(0<ߟiF+oHʣ3*V,?]RpPv*Ȉd(~N $yF .b\ F@u/X߳\6γP3̿|vfP /]u|eEFu,ocMw*lipϿ'G]|Om0lxVɍOu uzp=H=*8- ~Eu>AЉ$^乥#{♃*@_2Ƥ&̇e]mzc4B3b-) nbpȢP<m!Ѽ7 ,LUpVǙ|Lve"CDˍЯ3l ؙi5奁œcM_ rZs}ᯐ~{WPH~[_}u 6P>F9"7?d/DXK H+dJh٭(ߣwr4ѥi8›AEhӔeWu(^kq @pf YAD)Ϥ$>X_f朻) Z⺨~v4LjA0~^nV4GIF IWPIo[mňـ&K`6^%`GZb$}U #[@q\i2t=PKXe3,F \dy%'vfǵS41tv%CӇ~G̮_ #^~[w"YMw nw} gY&r @6qee~@ ]}dF_qI-,Z~|Xߝ bj)ƒU9)C){ sdO pFqf(fNK$xmX{Rr_ %XTu&1񂳍\fhj7r5I7;"'Y&Uь`֩}9y)GmtY54UP`(O:`MM d~O"'N*DJ-N^lRWaMĉE9+eayTiuyL[B՜∿S婗"(3"bp!|~z5Mj2[/ɃEvk O#A:wכ9hDkky T}&_qgeV}iXؐ+O{a䒪NU nO{,460>-b_LeqPb+]6hԕ}ǧlhgm>PWGW;v&y,0\B@3<IL"9'h(4c:L/;>3*A{!+x: E杧ϊu4'&%Eo#b544ODi~9,ύʨ}hsC0&5NtO' :BPv7_1áK%t}~aֳ~W _Rd1}̨47%x5t o-5NA3neTi٦#sWY?oe@x6rb6QvムRE&[(b;[Ѧug*󹺦HA-"{ c>Ba1+`]•$%& A_h, ^CI1H:0^:+M~CsӬf c07էv&|WH:-X.عx as`nQix* Z&Z0TI1n!1%gNm ЊKFA/ɨǗv젏h^b`1=aY̬@qf$3Ba .YW!5(_ Y&[23Jimsm_stT 瞿No4Go5= { X'sWĞ0J`lM?_.~;>X%ʩ0h.}Q0VoukJ wV RaSf!oZtB0ߚ{SPZp_o}:^=]k3ttغ_)E`ӊXUsc3&*Wpu>0 ).,5xI|#-C_hL? >%edtb%4YG$olO&ffF9r/ *Vv_5|KDo5[stLX!ؔyVN ݊XStee[ՏS(}v$>nJo@̷m.`q@zSEO%^f\ZиZ{yÒK3BE!wB"r*QcǯjZ|hD Gs܂bӎ $KjuNJB?wnv㸐4nci;}!gU. XVCB :;LЁ#%aH OFZT|o]4|]*`=qZ%p`\m͢ѿW!>v•^^ d] )OblY>g ׶C)keeiPX5{nujU6ߙAFϤ8bMC{xGc7V`!pH0=.ؤwW2mcۛXKkݿs h2KpU|f@O7הM@/Gv1wr#>Wm|Bt63HfRs*bAwX'eU쌄V 2"5|/¼o)2I-1ū ^Z("!Ramm+U@ _qF,%twyЅU3sUwdTZ񞧩(٤ vቋ@KUr2m!1 ם@fn^$S*1OC4[<:IAYXMy+@zY&'vd՝,뉯E ⠽6H&?() 4ꞇ XF"чq>K~\6{*P+Q%ųX8 kRp=bV G]PM۝yE7ro)>4?JYߖ>Ǿxeyb):bkwڲIաz׎n[\1bԕ[&H4^:͛&ױZ;Ryviz-q?$P̈́ƵV(*?P{9. b1TK!N'i ה яw p  B0P&>x۷/˛H,ҏ)BS'|]B2nbz=ըluπ7 '?x.-E"ZNq"}kH&TxNEĀLYU%tt操Zi5t3Ơw q: FfھN|JZ]z ?HmjGCTf*VG4sXApDIMH(5/v+bكӎeJ_YnqR,ϘD4p7P7קl+Xclu,Uÿ%,֯XN`s(lSs0(|Yݔkܯyx\"3v!o2.kPZ6kER*I댈TC_MD*&L΢gg?p#ÑP#?ld? |{c{ &kWTi!jߧ$7/M!1&QDLsâMP ŠǒZ%{' ).q537 ĽHdYDت12_7BgQ;TQһ#5YuśT @KrUv :.=K}|VZ9u&i݆"ȣa.#$Ihf@+uA# unsMj3&>V$Uчw4lU{6m/6#7ځ/S$^YCzZ3R5Ŏ48?<8W31c!|^\WE53_PyO۳7ТRRKDGưsCw4F3>pu,KN6P= wC=Bg6!J;x4B4g㷶aɶ??R'Ͷzt0 a[8ի!+GjwE}yУۯc05'P7ctoR@*^_&0B*,pt%Ƹ] f"Z#jDl@` @q[ PcT*b ZT)b>R@H$ E%XELϒ3Pԯy;#ܓKt 8=k`iȈۃ*w m*whΜ gM"$|jGİxG`mLRW_͡??ݹѹ *$skW gV^n9ǥhzh9*=7Yh;X|sSn~ w"JuT%f̎0iRg#꿷ipo(h+hcO*>%M 7 ڻLf1+r[%C ĎOuU*ug ,Tr\\1mc̥D +Nil=!1+M: a) dA\nε~#L,)$rvUB\2m-F  3`22ȷOUU>8So*Y HI?lxvY"m9=oV4+hlk|%r.wǜ70Ŵ+k _ W`tB>t8ߨ+cmR4Kh1kf}{gm`-X1Ø2եRL~ JǾFkgd, %@N0m/ jpae$OY˱xD/{HĴk2Ct6bQGyo"Ώ ~ LJTLh5J雯 "^ҴcBajT0:#Ϡ3Voڄ n@([I8!t:y %@`Gp>]E6H#;  T.I{U#:I'We -+ TbF-gBU&g&~Ґ]Sf|Hyp/_]U>P ULEpxu$owixY2!MfQ"UTg疏:! IX\nokl*X1:OG2iP*Ā%\ϛ0Wa.E?AoG+k@2 _64v~٘hvKg ꋥRaOx_)+n؄>o(BRZ{le~"%~z?s~2'7Z{>ゾo ?v۾2=6';wiᒏ^ŀퟍH߱t+9$[gQͿ-b@iҬ"=Ȍõ1C_eفSřjE2І#Þ !*tDc>6NܪUGD r[9h]R\zIL(}_+xiG$kce(JB e.En0+: FG[_Wx3r0 u]yHҕ i)2YK B%]@XSg ԯWѝ|0zIzv|?2Ki5H:RYWzOR't_3tXVV i>HK0 H#VT[O-ooLA޹u]DM$cUY=r Mqp&(ӽN+%'Q N2*pŬBB }?Qɞ`3)#6{ӎ6OVSBαLB Xzָcz*F~>C5h5\pit}q8R)\n${v\aFA=fYE>plo)0Fߙ3RJz̡Xqw 31-AG[:q}r+&q/5f"~aU.vy]<q=t[Jc0毁W"Hha`b*cN;&otaQ x 0ᶥ^-̀6?T2J*G)['g&)k~Bb#Qڸ|4/C:&𤃟]^dL*$#AlNDtjk(V1Xb&H¬=:l!ĘFpu]$&;Op'Ol{qt*50tiZP~07Fi!8'S_I)$9:KP™[.^ZdhIRa,^@~گ͸%(Bxβ?sGHExq4ɂ0"?b05AhlK)R1f)ErAi%ܓ~R9ln+uBH1F!E&rb:CY}#TT<1#ӉrC$>l;w'!rޖbRm޶nif^O ;x6Gإ$`pso@*a-շ政ۏzt(g٬JIWgUǒZ~e/zZ*}TK6XY2Y_Sf}oڤ RgjBpKr22*&0@oDIE&|' n2i*ݳzqd&]ns#:3 <3f:{IU3[!Qו{g Gq-.)PD x6aJ 3ajN]bWgqgJS׏8gPS՘zjs306|cKgHZaT;j+c3nboƣQa ʢPEJd R a%12U;A֏PB4k|6VҞ߮~%_' F)l|ǃK mC8 R KQ̈'o4$-"npyHPs:c duBi7J3A0 O\'hOEcī}"7-1ǭU%ejͫB>GxWekTScXJl A:iװ| (-*Z]`yFOH@ǖ#/ mpҾt^z)6׈H̃>OU4 T~![w'GZ-=5L&W5Lu3k1VZ\/[ߔŗt5ȕ2Q&93RbgKƜ.cBA=CzEڦ,Eh+UJz0vzbҘIh|Q8JPdz|8@2͆[VXE^H}f>6g9!yh|cj+R}#:GJǔے٠D/CwdND.kɝ\ @ieU/MGb}:00ؾyc Fe߮Z4i^+UR%]խ .VxjEWf_jpž/*X#|^%dUCr>wV_O- e3*cq`lv09eĪlJ,D-iZ~.ؙԠG4;SΦ2rPt?g棠<#^Å ipTy#YM}wLk`?`P+*)+(8D* CK:xh.p|fA$ֆdO 攱UQOI(;eᦖi~0s` <~NƝ2&;%Fנ];?hٟ|mfN0$ ewi5PtH1Ch& i/$>L(Èǀz)s Yɧ`zW=k<g)V#&މEy-UY t n f*gUАOɐ`pwH} :kr^P {bSU) l]|4 _4If)z9z@K Hw;"KSlwAl,A<pX827i/*~bA Fe V@kq#5|-4X^PCCuT5$>Լ/)ߏapìx:YRk1g6p#[D-[mr gU P3 g^i@.H_e-A&p&bJ@1cVǪn-8HhwU92U;k N`pof.z( E֍mՒյPBfW9k}Q%\W&5F wFAt17)Zz(+a^W=An:-sZڷ-l.$ui{14. |X&pS(Jڹ j`Cw蟏Hx9^Fu 2|-H=ߋsj ,g*9{™e{vJK o==z 4ϓJ?9P*٠/Tw3);qbrp%I%hA𚭓p9J88Eڋ\Ky-#9tCVHv!NxJ{}BؐBpc7נ1[=AQj><(FYk'Gjj1jFԔn/*Y Vbc0ku6Z,᱄tzh{>KZ-_$IaB.Rih!wtv [lVtxU軡_.`vh27_Žߦ7$X%ݭ!Y3YϷJ)7 AYtҌ dO @5 M]$?!hyu10s ̶~{ ,21LElی"b|v<@mAxG*wІ^Zc1 f3 W:fG&Ճ2Ո:MU-;?GBBv2A;)in :`;L-2] nnCl5ZhixuTP 5e:F-/ȼT?^kbVpҼ ~r_jϢPyr'2c9ՓO\6N d>Ȑ C ZJHioi/7M%*e} Zalq7+1wL#8A0ae3;@/;Ӱ GV#r~h Q$qan~?7XI ɸ44lL OPۻ/|rk)ɀ!r>Œ4~DБ} 925{0}O[d /&矻AXL& yfkgڈ*kؿj=&*[>4[`t}~pr33T`D2v%i7 &:B=UAI{##9~€7{Q;^Z+ަb42$ac;q2le yT+0j&&5JH['|[TN`FНmi祱Bgjעzb*-[^S!"`͹vͩ2ظ,O#g`w81<+۹J.; i04vzAQT#-vٗ Pw k =x¤D4 -t֪(qyv;e7uGLy,C m<^e~rbtːt]q'",fƾhڪ<;O1QoQoc60 /'eT2/6mr /s- /=i~ku5UmPamL0Ѻ"%>*դ/]Cl$+%ݜ-;$էN J OėI#g6Ø.uOõżO _[Ġ?'~/bьO+ípu"3EUXVT,fO}HނLp}IP pe0>H=:,)×$[UẄ6㎍9K7y/fL7VGdGOc6OdcMF 9=ʡ94\0`;!\V+a<fvd QL]0"R!KwӆŅd܄<<TY* Ú9rrˤf4Jt],y dmR0j\:^ n)pi^T@R [ǂS|u%ZHhz `rZ泞H@fIe@Gj5~eB<؝4xH(a}{vNT=0MnǏgKƎb* :DT駞?O~J?3qꁋdR |-783CSE/AAuQ!Ho&G~A'\gCoyAa/0ܴKMF{Vg>O=CLjeύA'6Eƈ; R]y k4K]:Rq#'rhuźP%sVN+[ -&o'+6<̢$3J݇, " .UX UmKN=AVp3 ,]YezqbD#9Xb r͟3Ujj-)rLvP+ ZF+@«;#I0~'O'`TڛUb>{].mh1rFjʾB\DkRv+MZA-vRJnh~ ^u9-s9sasY죞Z=_g^7`I-c"*tu>I - ǿ݉jW;@3Py6FҐ̾Ϫ = uw&mV.P!pWg63Իj~+>: 1>U0[L+8uAϊrIw=^:ۅ6сGɛW9BWzPû6pήRI%ԫG謞Bt룢fY Rqڲ(L5W7Sf8%o?5HNcem[ẍ́G˂:JITWkzmֹS)pm鯮~?h9Ԕ1&`m e۱l.h,k^5mPx;NjIg#j4 [)N8_t6xf=%D̻3PhVj9ĻHևҧX0Laюs>Y!å %XV%7V+s< ^m 0 J OZ膓ZRm[5Uɮ ^\.:f<0E 2EIuoC{ۆLwԏv|j$6=3~q@߀UDޜ8T#jK! mwRfÀEn쭹8?E)*^} K0]85RޤאHTOBbҙP('rh mzuӭ|h`cz|m]Vs}חJά/9`=aH';@r nc+yeEw)ퟢ/۱w`-=23_.0.[^Ld{6@m $i͍]"5F |*)aw%=BB+#,c#+ m(\jkҊF#0HcY1n4>wT Kf3 }K'켂k(\P֎vU>oE ݡZwm0S/1psۿS`ǹ[fF65E{F2[z.?A~W\K-t!$K&U4o[=̍IQdP53Dž}Zwfxo9*{CG%_Ja҇BmLo! ~ .+i +[KnԮ\/h;"GI䕃-"zH`o@9|,m iE#FB 㿸nZoU7joĥsL%XwА(Kfd6q,*KҬ%di'=л)o',nAyKkdC LHH[wjh!QDO}ѫ;Sɢb%+R{ϖvV? \Q1`ElS&bN(+mcP+X]*as cilܦ Hl|wEr-p}CƫP\R&܄ [dC?.V)ɳˬ?{wqxY3/(ctj膒.qʻe-~v@Y 52ie1~ Cfq>/]`Eَ]thaw''t;2;S/*sk漣B '$'XHf1 Nu\)HPjuֺǎќt^L_}LvO_otuWk(Qyh.GZWLIFWm|m@j_w ^MgXQM9LԜYak5wkѶ 7kѩ`~̰]손g9L, nK[Tr룆V`v,1g4 [qtN=ёo@q'2e> )ADz2Š|V4#QIQ|7#˴|};GC_Όod]fv[~9{K u+O`} sˈ t4nj,Z ܮGjymX2#Y%{RSӯ3poyfm)' JvNMt/'tcCPܷU]'I!F Ȋ.\F|B-N3]F3f@HW)91iS?"V+u.?Spkr ų8N]]\ŝ([f;[$\O^":0>7M6D_WkzV T4 ƀ֍k1lMN}_&LI_k"Y%&K@>_GՖ+K0T~©YLimr),i>̂NR ֜yze=V=Dž 03-`h]+k]>ې_0Ng˽w4e€k]-gب 7V1YQ=;!6F-pG}Э܌yڔ+B(\4L?h7b|sjfIjldMru=Kߟ } *Q7_0a^ܵ^`7 vdPT_`6oeGϹ/׮{^mТ"ZׅN һI3\RC)*%YpɢEՁ &j]@Y7)\s+ݦ[ $@sabNa3wU YB f"t'rPnvF}"2|}ygeI[y Gvyg jl9mL5 oD_<(xk3yXBk&iDen <ԥ*ڀT߁ckɧa˕mo ^Oi_5cc>-(>QBgKHt<+>tA#VKi/w{0þSk\6=ۼ#ɛgSq6s$vmrº,:Ī/̓:1B6.fq2"nUЏp!S@ ݲ )5*۾i*9 eSߘnTAgJI#F(tE{) 6Mtm$7{0~NJ HP рapLigA^YbZڤ޶JaAסy'H8}\IɁŃH6ݩ|iNPb=Ƿ/Hm6k^|#Cd4cw?Cɺeym(y9݋' }4` H4U »1FPzXp=Ef(Ov!Ay(H ;-ms"fd&?|d;7(QʒLCg[.`\'(a4ڐq_#+Cñ;q I J!G- 1fp 04Pw^WH <0J #p:AR՝Q1Z vl/E 0Ҡ0dHiG93`y/-w'1]6vDkFl7o\}<_K션;MF1P㟃]Igd$w׹`RqBΟ@BtNYNho62I`6jk27r3h/ wpEߡ5WzMP DĴU3?8'`_T=8g~yJ~40qx'2^@赳5 iuHy2q5TAO/'PKP٧>ţ˧n̎h$VBj Q9cN\~9}"ciFgQF[S#8L-ejAe}>H}#(u PW^ `,Uk:~8Ւn//C< eFf3.h+4h"Bb _sMR&8sT2_pGJ֋AG!+9u$W4;|7ٛ=s#h9t}S?=M@X 8^%*>" tcF*Q7KGܺF I-z]ƀNjY F }՘v^]S*1F`oz6 O9ivjr!U5 'Tl)҇ R@iTcr3؈KTXXL_o:3,\ޑ 4/B똊B Ʌ~䜷>}Cߣ7` Gă2Sl:}bo'Uof}) oXIKZhVÝ⛖'HWC{ a/!!ĹZUdq}c zzlW5\+eD_I!nZLiCoTKWhNGYEp$cs=T"~іk: r*}tBPjU[k6qRuK9" pC5EfW ' *X@-/ǭʶhg] ->YU-ӥ!~1ySeVmq7t nrS9w7@SKIIgCߧ1L+6o8=M O3TCT{RfE'z|΂ N0K5F.uAv ^IEJ}@1l3m͂iB*#\$WԢI]$T4H FVs^ndk'u@\V&4lfh|q5PTlǤ5YGՔ'i0O#S۳qO8.ז6/ݙ!A$MMv?KYt>PHePr\_,=5'MpK|90/{( : 4_*_IE(MD[,D9Ab Q.cH~Ul3ɵHAa5,h#b`z᪘˗E\Z%_w؛|PO^a@=9U~X*z^]m2g?-sB_5NJIVx[y m(A65rQCu_#e, GI2J (kCVF<jn)*/H]aghtFUb8FNMI?==kuO2[}Tu ,TnG#} ֵXVq~hҽ{"|vlN6oKř>tyG%F)&qgbM!$Tgr|H j7o9} X*oq}J6uQCa)8Եc@DRsi-Fڊ_Au~,U6#wǗ>Љ17dU(ES>D_|~GKRQtKκvC7U,{ȭmA`H(ⲙPZfJ>p9Q|R37L]tUv )m,2pA피ڼ'Ql=^ca\ߡ@]F1qrwziӷSKztUA"1Y5I{Ƀx*ڳmmN& uMM'+8")>CҠ4n#H?-K.ޏƋMf-㢗RV#IAY<*JVXdd ^s8U}Cd[vJ`Z@4F@ ].ʔKlۃD뾍gs4[Iq=V2pe#lz# CCp;BgE˨! "< C~a. <*0yn_^ܱo`?"êw81OEaN+nLk /4 ?IKy\xE&foYU dCC'Ӏ}ˍ ^-}J h nWjmz8s14G3["6(ma;.I(S9rH1t\z#۴8*w!%#"-Ȃc(D)[&~3Sj}WҊ+J>piBb}o|0H9^H#=: lv0fKM7m6"S'hr4fM1?{D]ဖ//"?4B<,A2$cxA|qy*W?&SxheSdZB٦Χ5@8#bWb8'"\Gzx?֔ictRJjڑn {GMDm'{|jx a7\F 8jA5-;)yOЅҷbroɢW۴"dk+QXyCHYA4Rfn[XҞ L28lZҘLM05߆0nƆGs\-ówWiPsm,&D`_$Vzd8亍X?2AJی)$fv^k:`h~x^ n5ή* }x l&iY,Md`6P_R ϯC]vD[(K/^QNmnNۼDQjvO' RR*1keJ[˙l߹'z~d}{5nGȓ~8>%#1k w:q#fcQs}SOQ4ђ=Apw~v=SBiKeئ/:zJv6ᔾ"n0X#jp" i U4W()|8gvnq @ᮕtI˛tOX) >vQ\6a!2s ѥ)ȕCPj1- nUEF-=ΜzZ XX}_,Q)U0M}mqګvk ,?L5g[LPnr JE[6=/(=$ 9; j`Ӷ;ոZ2c¢x'+ !&7yv#`Of#GFA쎸ksu-V"G7$>QG7Xc2QFG>[׈m ~WbN;!ay;V`f鉶`"R%ghprf+;6R1lz::%Ux\}o_0ȘP676Pԕ!k_mL#c}+ K} U" 9=OXepI[vW>[L!^t&xn͋It6VSqa2rT w0XB~zbPfD&ɏ$HtN%Rqr`F"mvp%)IQ/%G .Mw8SvK)H+mv5ŎtP`8c2dqXoScZEM{{1$,܀)ed[6}b%Pf ŭsTz}1gF RZx{"6< ݭxO{M ;BD iְEUt];-O"&d:EHɕ> &SN]\8q$<n+h"K*v/Hm(J kTωHK!h%T-NtO2gQ07x{p6|mUvӵ|)၀{4b^81!t뙧uErE&[-J!8.dwn. =;@F@O9s$v9R=DC, nhu~ti"~K2um_wT;IJٿpn1|#Y>2A5~kSHvp|"t'ZB⻟6jq93W@cgz _|e(9K7-ͼ|,"drkĻX} Uap_q]VA:zK&#R}_Z(ErwX)V"QsPM%H 0,}H d7|rYj(bMևuR>01'W}5_N;cGxKzC&eߪT/G%6$2jc/ɃۋģFlɑ"'YA\PuF\CwY`XiO7]EBux{ 4Yy^ glhV(pg1sg6(Jt}3,C`#QoD|5Ve]ܞ]gjrz̗ xX+ ܦUd}&2ʕ 6!ҍ;c0Cji$[݌+-e9ۋq(po3;^`>^±c~_! Ԟ2OR :XH~Q%[D, Ƙwz<7$fin8+A~b넥Q1H-,xD`NA[69YQšĉM73wSd /E|~G) XvqI^:)k? R^qIKjYu,7T0z)_~Qjx骦$UJ$9 7rI%92Z3 Ѝ* {gtY^xjr <6wP2?!x7bWNX`>`攀[VlYh<j!yFM4ZAX07?C@3ɾoo/~l`[0  ,VCɚ@p#p硌m6r[D~WM'i̭͹ZHwBhܗc`jlJW qPd4s503Aum4=5.sm{PU{Y@2:  G5+t8,R`tRhJG]rD1AiK OCx,%EeS|9fq>Qr꾲j[cǚ'N2ϫHEMA/^ HKtyzkCVi X)0g<X/wdWb*vUkw_*U,a̬aN"G x0u]Wu&ښŘ+C@i.OR#>s~*9Bo>u@t$Ä9OawoaPʕ3('1!h##61ݩ<)1}I[[}1(Ѧ TYK4b2%j/kb>vV]A:81"J=Ezo- tJ?22BxNp75P { ڦF}?)& ]coNO<gY 3cT{VičQO>j|/] ng*$gp |U7gɑ}b" ayNO2ѯ_ 4/uջ)_V v7םrCH_o|[ͯY[AM4;8DO2%b? &c&( הX}:{ M5GXwbMꥇ[/#L1*U~ld O4=lwo"bK@†UiwemcPT#+= hmG#-gϼ0 1du90P+_ww\Mb;zﶌ%C,A?SatN9u%rmL)P>f[.EcyӁAl{sQiMF:$T{F4$rk~% ϑTGyU!1(C)AZ60XQ=le:PEg~9 n2JΘ~g%Fm5;|j}+ro"MC“YBAԘf0檎JKOz<_B.!ZH#; Q;}I,:phv4@n1 *b?rH7) bnz܎yv=C^Qb f֐ui*]%hiGWBs74wŝ.Ljt.Pjw"]=qNi; ?=,D$X9,Y]:qtU`R9̵w%.SsnҺ5ʓ^)Oh)M ;35_ ^KME`FLC0c $OGy׷6PT1pdZڷ@HCa)> ~:IUB콋 t/^'ohؽ O$`[}p9nZiiD-W;+i(nd>TeyHbb1 .B7K)'sjاlTdm }q{ut:P̍`_rN`6+^f>H=ZGm1W>?@X_=},;M`}NAv![N]t` 7QTUb#Fdi1/ݏ#KIsΉaHЯkLF?˜LɞJ:OcIƅG Cc;AR? Ɨ%rt3m*b^ ]qpM?ي(=΂V /YI:賕XlBvb0IC 8(@@^@OQ /-ǴH!ff m171DcSswX {W׿վe u$V4EGa?1Mqs1%7 {} P^]k:ӡmϛk9wrn-(ɺnA$sm)/O?O򛯡rk܂7ۮoU>3P /$(/"/xyV#m"j-u^+Xy١{\ ܜoVryNmhx(RC~.Ϣ8%@Omuģ.nYO[n[)"I+}4Y&ٺ9 G uX*MFmwlm a{ 6Vzw쬪3<bՏ~;f)+A/|): CnY 3;2! `*ذFj$u2tP1 yO1_wӭFTXr( ԍIA\g*oT]yD "͙cZ< - /(ނ{! "Q4::&_%+kPKbrvOt'LHFUkd@q34IGAI^"{ Hb_Z"YJB8%z)^T1dھX WG7t5V'12dzqf0d140iN#/lMkC:i7xܜh(ϣw| lĞhA&F!軚Ϳf* Ig6]D%*EVXX1l`}|6[rk%OB N:8nW.ⷐi6C;PݎQ|.pC(6'fmt|5"N~\$_m^\XadZ#?[1m,;Ikc\ݓt\ 1DR4,8T.wtf1r!GRM+JeВ)*-vbDY0}orQ=ODSwĴcnX{- ^Y3)5qlb37ޤRcMn%ruwhDR9-2Dj<ՔuX?!ͼ͒Ri)lImcfqPQ 5`H r6iJJW^ Ԗ ;wĻL A;\^lM9Á>b!@L4150y52\Wi[HS"XӖT'uC241ϬIށeL.]~ڣOÊa@GA[c iIHZ~/{eB*pm#5΄fM@"HTN_ܼK[qsJbY}{P>=Vm#-]qJWrky7=޺3eF8΀q΂Mj X!C"{sߐ2 [ )@mո4JHdBMx3}۷R1#bOj"cjˍiKf&:3JjabNN+fz06 qa˩0B=maMf$k ?yh`Bȣw"<']]6YxtN[zp!v-T]p\u{\qxou"qT*pG4UEׯn;.Mo)1Lu-\ѩ$\#V,QO!:ڰcxhP Ο/OPqeFOwv"6%̑XU]T_xuM5:/ܟq9ޖ6FoVDȈ髎?vcF[Jyg>SE=B9oO(͌}H7qOxCrP!9@6zo,Ck WPy.r-./ [E8S)Ԩ# *Aj`g$s6:ʥ}W:Ga[AwO>^ (e>b. PoM/aћk 6lӈR4֯詫!5=@ORJZ?ie7<_*F8/e_paV J¿mlw\ωFFf:v%싛;EΒM aax]'o_d2==dV_'-!$>pd&לu^Ӣ[œe*Kx"?٠&>Z"+&TWks@)ڻ_w.~)(JQH]ZD+7 ,xBOU#oK 3Z'8jgp߉#^ȫBFc @$bo~֎DԇP p! r>*]uU؅b:KT@c鄸48 fdx0fe)q ^At{޳h jn8E(޼F+ՊäMR[ӧugfpFN1qerBFU`wd46{yjo)Ut;$!I؎))wR>щ~E*aXj0Q'J6*1?N ٣N%l'1W&c,e t6aM6=im_v3jI{:^{ԗFR"K}.,]DK%j>W*}Zb9`Q Z/4P(bzt1z\/Dh?{&3(H/"Al».v@tWךn;tY;K솲 ҫ._1C Š?IBUcHbt^2K ؾ"TD 2~^A]1]~&z˃pw.P&3wԝgW^sJ$tTgg't7+wew3pYSfέ$e`;[yvПVHy9ƔV`.o~4OuBE[ֹvy,h6`>ܸ `FHV=:mJq!?L^qr,\QuI:U7\,4:j @1EfO5jGЦ^ȸ _ܳ`f J\y>e(?|Sv#f,uWcS c:'"G@= >qO6~h(x+O'C1ާuVKmϒiu6ֿ9bH*K/ ^ # _8if,kFv9kM[; sGvri2Q!1\owvy2Sw꼡LlPsF3l?FIB!,x)F~tss_;,6n<]krNJW}}蒼R~jZi|aԌS 2u I{IGQ2UQjaGB6^paISv2R ͋ܦDŽ}m>u\Y$Skڔ5R/o)ϦVo倦S͉[Y{WF%p3h=f:%΃Oq(S1UoX,)c!rJQo ο1!5of^tѲm y^|e" ]/g>0U:b1q6(K/BZZT@m#ctByir4 J}lt>jhtn9W}mٹ1Bb6fD cH1|ʴ:at[3cH^75C]8շbrY卉`}fQ7I4hJƖO$uy_@g@3ɏq7zM#}" U9plbRO .쫆cy^jb& #& ,cJwsKP$JFVwm̖0|[ޏQѺ1>@a#@\;&ҵ)O=dГ)ڇXDp#ks+d:$V{6c#Ԧz^5\~g$wT .2@#nENTR/R J-S^l_A ^ڏCBd?$VۛVAM<6K?(cY- Hp8ɣcf mZߵep%ITh]`c&J5.efWdGP_d締@Oz lƺZ>Gϒ,|f@$ޯպ- Q +E(;\8{|,<1DXwHKyr˛XYELh4זFtް4quxlg=T`@n 0 d__R3J]LZ|:XkyB"B|Cs X.=gm( y/CukeGtwckX\^O I/3E!ّbRz?p!C [ L&L=KKG[3nDŽ)\Pj6(Ml^,F"{pE\vUd6'aZן~&p:PDg1O_[Aq>K?TU#xMt<XmhߣI$4|]b]9>Ή`Ii˪s_NaQa"7qCDꥄb1}Sc$CWܫ!E{͸q5zn6.lm94񹓬뮚Wx`{M~' 4" "4ʡم suGµO:(kM1@mR@އPeZgNetuTՒ樎t>B&& x"7qGDEv_!DloNlu-M2]i{}A9[K.[kR3 {WR;jU[˜hlo0c9ChVqдgfؿ}½Q/.Zi7`NPa1wު;ȋck Xm?{ѳƦAMmvی@@ҋD ֿ.nib 1(t3|к)Y*v\ VkMh$v 2 ̅v!ӈHBiƹ?lAXqWʬPS H06G$V7pk1ǧz X+dVW`$y ؼ8 (9 _/o[aJI_Wlqa-mkr-hnq7jEq >dHZbF v?v4Ċb6J ,/#gעdXl%s&Ŏ]Aq[A[ } 1^c\e>P56`s.8`ʜ=cU3Hٶ^䑕-n1W7=,7[hBaGڹ/c`TUW~}?,ü&m,6qO:$|ga@zDIGURޞ|7E2fuXL>p" D3NiݰipZ"xׯг!fVE"k{fB %9Y쭖)(Wlh3JI{q_X` UՄؙ<9.y/>܉Zf ޼D渨%':˦ei>P^K60ClDf9cQ_glw ֘O\>6.t_RY?e8:J][ggvGt>@l=,ԼʖW*K2x)mC2t?ɩ<ROwE@OgNݷ=_)|m<]I>?T1RK@',g8oP }ڈPGG=xZI*Ty,]M #"QF@cv}. .4+@>)|Αxϕ>0v©Hp6wq?KIyANgռI/1)%YO^v%h)wyɹWplJLyBŠdk "uT NQHA(t DK&pBk~Υ}֐gV򇛇~6O bsBQo Ia. WamyTL'csr}scAa̝Nf8.ۺstH|ڳ[EBi~EZpiWX›m\Be9f1 '\UNqdՅ:VS?G)a&t@I*O0$)7t#Tdc~y/01xw$a,A#\Ck!ݜ3=*k$!K3ؙM&Ots9R%d!sU;3M=UChLAUS7w"jN60e W}ං:LmYwʏL0{B͙%L nR{?u&}%)a" tS%!hr`yUӀuh"gy*bdx fH=jhGj{r?FD),"ڂadǢBSu7 :Px$r&v9񓌷U靚oCMUB^ZۤJswϽGP:p<3MK'z C0GXjuCO>OF2Ce1lexXZ ) gbiF#Kmp&bPe|錣"}hZ9,zg(S|> ̙僗kƺ%nw "H4 o4"!ROZՋKej >cL g0uYajCJlASI xJS>شy-̚\ۃq)eɁ198O%~aso!IM0 Z5əWp[D+0Gm1T=)gTK2JE}~F _PpS+ykN'XV"W=2@ ~L1dBh j/_3nNڲihe/=%HmGb6FCFR&Oj,D{ cȚBGDltc8A!0PiBbQ5fXv5hOI 4D"WH~Sߥ]kLi:&I6ldcw߷#JLUeG P %c\oe]x-/pAg3ѱ<űt%aV^4n{Kqk "}^ٹ-5|W*b WȬƖʜMw  -I}";G ^X1'H-&?'tJ0L? yЎ lVG4xo {]6@>gˬP_;eu$?N0t4H4Ta&&H*=f9#ƍ)BCAS+85T`[ƣ/~UW5*+ݒ;3Z5i!b:u(1IJ۪g_Uם6T XE % ˞;>4^,t0901,GݼZl6J@{Xj8؟Y{[v!8gl)[Dٻj[T giK^i-C&U1F-;kVdݣ|qTxA\ygЏFom,1xF?a}(3B3!۝,=B3AyoEp/̑ h uc:ʹ,;F⯸c5?P }vXH 8Vs3uظ0Zr׌8zv4ɉnفtz5HKrV^i$AiT[]>1Yݑ&̐).:BDȕ:(jD @ _1Y+/Ba Z6.3n}8!J5*ywm_Yu{hU"#$N$R#Sq诡>#x`n`4f|9:-Yq= л̙ jЎt,2^J7hw~r[nvBM/&Ќ͟9j +pySTy wՒQ=-W JG"P"=Kijw޶f1ǬeȈ uөZqv:WR䪾^yų=3eNa$9YH : ڦ wð3r]ez Ӟi6$Izڭ*}i|N\SwDZ%\TX~s2WͱuMES;:ǐ‰9<_ҊIFޔp ѡhO~Yu 6J2)OPIVCR`<(.k" Ʉj`C=qh>^u_Oa4Gv+ŀƞ-Q\~ j(q["GpkϾ@Bzw w2]$/L(zO\Mes:vZP^= Y(qQμ6\g||+ߛn1"qbzyRKѾn۾ۋMcNx:Oq;#5_v;F_)R6ӮcxLΝ_@v%EobCwƏ?yRϓ ?|Kb"CgajTX:INvP2>E@'e 'oqk uzD@tLޝ#)D'U-P=>QeYŠr\0eYB(uk , +GvQ/`gCiD*h(ç-~+1cv]bH{*diA>p7u+0Nj(~ܖܿh^vEM$iB?ij 㒧"! 51|.'民^h̟ug賹E#S-(q #ݏ ?#g^3CmgؒQ`^hk\>. gz$L?WxIN,rY=lyO=2iYYB](*iސݪx‰hw(zlO/#̬zt+;2f]Cc_9 dlXd_?HØK<ʜ?G8=p{IBHS'm1'O'XdV:soajYz**|XBVo|\~ĔZD]*v~TܺtYx@ƒz}\xNqBУk-i1FۛWn&~A#cpmx`>qͰ;` d*0mr! M-ĩE WlNy5&Խ4L$ss X\I 4N2A^7tw ly}rH{ܑX+ZEi6[D l^s{!E)ܤ?p"_X[6іxg]*mCQ7n'  |nZ+LDVAvP$?ezxQv* .y 8VϕU tb]1F;^? XbZ,#=j)D_EJ\%AE_?7 \=RU* O{.[_6U$ L# f,1^ )W!t q, mz;/Dq˳mK-/ˊ5ĬCBz3tG(R G,Xò4ll&0?]o2r&#ʗclT:"LdIץ(}|[eL H) C<(h6fA0`)SyK|!., F/s:XQ.\nfKnJĪ++l~uќE3H[<<߽D/$f|}ӗb~@.U}Yͮ}c^ƻեBͽy>@Ab?E[ҕVD4$f5;-R9FM5S\lOgFc y3S{BiWgȠ21@iLS`Oy4?(X*OF4p.g .L5vs/gNʝ Ԯ1" δ-sszaȚgVex fO &;!P"ZOq;=B @:!uSqʧoIJW1t: Y,L7H U؊Τ}َAD tAL'YUz^Cq$:a؟W@Fds%nz |+BÅ Mxi7fZV'8t,h񜋿sU'^LA.EB;N]L b rkу+7Wlo$B'=c({c`*^R^ƫ\|WsӝZg*8򗑝T^7FeEmGXdz{pNF6*T`"RSNb(f@SsAJP`WkIf k7q+"z4wg#K\A?# Ʌv _= gNH? "FMZ#D'73=((4 0ѫimnm5:;1ȏ}!ɒLȲw):Ș_b, 7z NbP\^\Ƽ[g!QJG˔[Md-t!G/ԟđM37+S^ ڐ fy%zz 9KcƑK-cǩ;~fLF f5fBJ6~-!@W[0?^g 7(p#~ucϋx(GV;I3'sFe u^k;MM}Ȭ"K[) ]73FM{(J~.Ϙ8d+-t ۝'Zb+ K-!<,|n>椵8^[Iho]u6bQ{⺖S uL"ikzF6tb# p#A|HuVVbZ! XfsCq'uDr4ч!YQhC Bdꖿ :@JObQԵfKbaTqꋸf*ֵ#/t$]7QHgztWԩ;֥"{!Ȳl*xc 2cn5ו1Oٔ!0^L8 =| am>nfei~<- l3ȧA .ej# FC%<ۘ{kn+-NYI5ǸTQ?$AB- d\7]e"RA 'jp>YF.tkYPɕ% :>U>hi^x J88 *pߌc+5 22{1tRzqlӘȍ^TסlV#x-ck*\q͂4t"yz %VCE'gC}cEZ*wE2Q")#k̳(Ase ɒAb9,אXDy2kXz QR6_#}/s.K+S[U?Ob,M+S[ĸYU[AC@)1PYn`%}8Š`Y7!8 'jWL:DQU=aAitYجlS:ASQJI´02nؿ&7%32mp}j-C]IWTЫo+4xe ;34=Et^";^:>~]uz~q04k7;K&>ʎ`p!6Gqj? $Ll~0P#g 7 $Ⱥ=h3mD@^f*>E*[XS?Kh ٪M"]=!^/y G` T0da'VX_ok#0L?icv]R~j=+n11<=en4!͈4}tƈJWD y,3yn:k۴2[nھͭZ)6n0L.t#hJu:`z+[Ï>eIeh+@(*W$St\}s4JnH,tJZudb0)4oVV:걡 !Gyݷ?,̓қz@diS=g+٧mdk(jt.|ԬP{bC~=r+0pj"aD̪e1t(NH -ݶ޶S*᣸?8 Yt՞I&,.Ѓ}@>/l38l֒|žߠBo Fʘłceu"VHwl?BNir_81h2U{A:pG`PT_ǀq5}&YY8(g<'|k\)!vaHr< 屮D&ֵ:+ @~PГ(1R|G Ee{k9YY_cTU8rO989 E$1.MtT?GP}|UXBY9YH}&о.sT G/5/BoFzYhu XpqFfv7Sl|b%b"(:'SMREK\D۪~ԑWjZ7$rNõ3bߪ|{x;*6-6Q7n']{5;U2?jSd3WG> P9l׃ŎMF{=/y}@}F&Vڅ``]|{ŬQ42Ey0LlOH 9ĠkUY:}p]2ty9ulD'2E aKJS%I zK /WgT-#B7=OVmvc$) g+a&%Wk#S!D̩}q@lT9GəJ߶7d4*e"H"4GN/!(sûHkϚ6ABHۋX]4J~W`pM+k Hx6f*]dOx{6|bA3ڋ t6|.'{Vo Ewz`?p)cDk]v7XwH[j* @GEoVDYK_]]P#Zl)K±CJFú H'g3u ׺YЎ /cWobG}>WJ&.6u]Qٽuv^ B/ʹfVY%5oWcY *Ʈ,GrptJ/̴/}v&cL0W `fZť?rѻꄔ&Y ɖb'_(wM.5䢕BUnTP 7-g|̇ڎӽO$}3lE5= czRT5j< =WfQ-gamU܎DʳtN8=:iV=k͖f>*r~zDy8av#s,"Q`U -dH)hcM燦;4i8iRc$:,;z'zM8(_ȨN lVnO5k{hB ":m#q06qL^uc -1I'PsݹVV{afSudJ8ItJ16>gңbln;zW7 %zIC+QR_p[IHr,U0cB}MO[ZxPԢ' <|BH aox]еQVKMq  \dM%`| -=稀353="wHHu,P?-qW1-&m{Y,_"3ӳ/͒_p ̽;m/dW0*+{zg }ǾW^vUPhGıUu"Uq3t9mKx0w5Kqݧ leHTRцLH*_ }n{?I!,X%VdMoiRYPDwC^1]jQ2ǒQ]&>TJwxRvu,I)ֲB y†7Ĩ-rٍ7n-!nq内}Q(s?\eA0vM!)_e+})O7j}ʨ 7[qy¡p)XʫsT3p)їTZT!5"jEL0!}>[Xyn5]>~faVvfPO,m&E[%Ϝm祥"*F 6.VAkcs5@i\X+0 yHջ'pzLŞ5da4b󁖺3] qk ״3[[Fz4jɪsδ&˓Xqx>r_ <x (,. +H>G ;OΉ#&p!ELP}`U5h9y`hww5k<8[+m0OɃmʹæpF0}U]PP?HHykl=b6ߴol7x@NRm.rF{_Ch\T`8|4FCvHUY/YTz- Fn{0ȔwfWcs-bvw.¸)I94#jM)~ tK g˜p^a3]\ne X:9 W,hwH]!DL51&<4*F44ƶbHKBF$&_݊G_w d6xiS(2O-ցg߰#ZYLz:i(L6X`thn1LvZ3' ee2U$!_p2rcX`KSƆ*#|kw5򉘨 @^}}rJ9Uqȹn1,%3=>vSZ$N/?s(Yk}ZK@KYYƸ}Ͱt2/(*+]ϑN)R@ʯȕxRfpߊDOSOr.>^a5: `}2x n>>/"s%cؤI&I7tڏWj>6v ' ݤpy7Ql[ĝobr7РE&\Yvi~ʕ1MEuXk!]1Xq\Z!sR>vޢ+$:ŠkhlU'iq HC&3#wV)g:" Խ; XGjTVg:17!׏Sg+^3`h,ِZItK-"g:BgIz=M;zK(Bx.Fw~>pDuy"XSktOXϗCZjbI&\>OP0Uu$}4L/&JpHGdpCx+lܒa=m> d,"9*gx[`ya`Et^VY{&5 t_/}6QTV1}PRWB±QlmIcp<]]8 ;w!R훲jz ,#lrq-6^q'a97'{xL kTGBD2u==%X5u`> X/+i75{QGRd1vY\mZ|GA/aS_/;U ٞ:gsz)b ϫm)E]Azm!a0qOځ[HyT>xUjb < q?IY#u92n ~8Gab8c BPzIAd}ф)7)M T-Ԛܳ*a48Xz0PN* 6Mi,{^(3/c m]u] xY7bsUUX[,Piܱ~B(7x>jN0,naa$=0&@ٕ%D8Wep$hQx4lMt+`F#b: q FI\B9e'p-]_74#J`۳x[ Txj]CvװWdC:Jh]=pD6+-7Ė7I.!Z g@ tV0m2+d6TbJ5_-8{"0I#[Eue OLX9gQlM)AK ;3\UÈ@莉wQ7&1-Sh|1 |8]#V,x1[J#ixV\ 5N-:.íaDW;tQl|eLEK`qӭErua==ЙܖW[t- (W~zJy`8d5M:\~+b  xrI2!;>1wΆo%)-.nMjryqHf0d3O9l#xyX)lߐz'Y ʝ9Mf OǰO W7!RgM8xuqr^RPSr&+;&Y_fo>M^U&|mK4x tgra(FpTjkZǷ NNܖWyVl}mMgZszm68Mlւ4\X 0Et|#-tK? WO)l俢FGk2:Hfb gj+Hp\:2 \̽q0y,] g8`EDOjyAc zzDr޻6qK6hS]iZKjxPztG3Y--lCBxcPK@%.G!:zѴվF#Wߐ*\Txg8:b;I0 _N3]v'9u0h;> 0+P.W@ n%R%UIk cGMj#\*JФjj=: ]-޿A AR^@-p}m[ߺxl@O:4vm8x~AV@?(cr^#֪}Y9.{|YxWlm^ʊbmHH6c<}Pu >2.a[ ]l,cXftpOn1wNE|b.Bd'dݡ="b=y†"*PI`Qoi6gB:zc Ls5-f$o \..B|T'DI ~&@{r#EHCu$xKn*HéeP]aP~b %,Qo薧>[ʸ~bp&U";$R,Jcwi-φ mɃ%l tZGn] . 0P;6aw0AmB; n nnvOrco 3ϥUa떒7>W<VDaI gI)SJE"=+#& Xj%*FJ*iu+$}&<3e)@IGu2dtB:Rx8EqCƄ',U3YP`h>}2ǚ`\6L<ɢuU2qÏG!0hy[An5F{̌JBwVΔ U1pmyMaCuH蔒˕?j' TxL6J b4$kAOtm&4^6'1-HGsr,(I4e V/@ hMQd)DB\L]bsBn"BE`2p\=Oym54V걯b@Sx}e68ƴUj:ZQՂ!,yt,Pd7cH!wS{d|{*8-]Dw7p!YEF/a*n(8NRt^Öe=WWl )ԖR%I`+o8 RӊllZ`3c-YﺾHLX)MvB$˵ rprvnO]S\ fiqI?`j-I^*bC9q75Om=K=G]`o;j3 ;T|e(q2l=F͆|{i嬳*'@\˨I&;ٱ躋`Y+hlVmi΢S$ܨY重"4HIV6ĈSXu6lGMC %P-̯>v(ǙSSI-ȌڶMN= $hbbX-k.C<T6ɠ+4xnZD̲k~9>vr^J3$ȹ&fLtXB౻ÖIiD}=xuc!V"[|3"q.1{q^<0Xf:hJD8kB`f=d`TxG5/ݡ-u ƐE-hN'zo;oJ| :\(Yƃl%8&q[X&r}s؉{n+JXw {mx-۪Tй[`D:v)o؟)[}3Z$3~\.:$%6ۙWoM̘6ob(;݋I)('Q\5C> `; &̬A$]oY5`ڽ`!D# THK%,q2Q wHʺXwFԮkjt6h[7F.UZhci!lw|hE1ЧԿOX x`K :N2 7R^}3Өp1vM?|YGm$!lp~\ ~WlvK^i7\)uK䤊2\z'ZI8AZ .A\0?9@$q#Ux2 eIcGdc1Gws9G&!@`z< dD^kmɚܧh}׉K2 yڢ΀뽨d!YuJ[FMDG)he"s MkOW0&(rui NOJ[3~ (xN#(O3W9> ^¿w2grQDHvQZՖᜱ&y6T8,'NIۤP#HG MR+$%xS+3@`'O#!=%Mgum~%,.EtR|h_'Iܷi5x`9ĵ&:qE,1Z(l<՝:WvuIeg3Z{ b’6[:!C#|~[sOlnIy*˒njj`ɑ\jfs'"9%3$QjQ{eStmzUDtw6NUJ yj*,TL6Irꋻ#O`2X: DG'ۜB穴O;^j^:W+X {쿔8$me-T47;?'UF3O9WF'}} C'd7vMΔA+OУq34jae;<`)ίLK\mrQ[TX)q2<'Yfv/<5zGXۺj7`ߦUAtE*`)O95VF/&ƓMʳhNei_Z&%݌»5Dl,6`5`|*eS7* 1ی ( \ݏijM̥nHl6jPA7 ^`Lk1(|)N"Wy7IVx : F;mA{*XY hJÍ]aƌI;U"qK/g l(au3 {)+>6T"VWŚw;ʴ|u"U-pA^|DLbո;m-}|u|{l{^ncźǏ"ꋬ-%7a*βXهAիѭ&.P/,9&K 90OdQmbK>Иיfi.5UT’AFVMEFzMŔI釬X_݆y5nՈ A7"R} DiރM1 :iT:&v"&#T/0 DmOxމ%_/$8[Yt 4Fipw^w1*$׻uf*l~I_,|)] $!=} G5 :PhGIw!5"9}yI k}x?k4{=}%v9~\ݖ ck^# ]$I iV'B-yPy+]BUD )܈Hn6ke7>t֍uuX`',va*MfPkdLտ& Az6[h ڮ4ч·ՒKط}*(縻wFe m%ӧV:pCIOް7]r=7>w\Wi#5az#[u3G82[Td_X>+n]+~fג|}n1K4@N۬?t54C馎nx<l geKeo}uF:b'"VZ`̷zĕjͣ@~8W]ghR,c@\Xy ٪vG}mRe6BR Ivl.Ĭd$BsжY 5bf+.[Ril)>?TZg/=3>=ܰbqx[,Ff^m'fFUzn@Y@?8 e)Ƀl#'JkV_}2d.=9@o8Us/XY@M^oiVPln!Ilsz_: +ە^V^@{"}S;̍KH d絭3g"{'x݅fKչa|RYS:U<S9i`i X8~s[$xܒCuUw(zM0#8ON;pr_ȁq~2[("2C^BFmlJyvB*ѱH OcY< O C3D|R貑θduKs0O vTs&/l||뺖NA-SoUg򌔠۲eIȆQ?UN?`-w?P!wsP3}LZǫ"S􌦥fX>VWQ2S+񬜠5YvIφHn`2L53)ߋg+E9%.,) {oN<'jJSʝ=3fiELMVj8x> Yˀ O{¥7czXWs{?.ymhTZf'+<Z ԮFϋT-ŠʉTXKJ2l]{MEQ x@h~nhsO1xE͢(wivXjzX#3_(yv cxj:lp>^T14{KoW0CޏuAD]2ص 9-b8ctʅoP_!@Ps&ͼiѢ󳐼8Yi tS{;VWp)d@OuJGi{ZKD𳄱< gSb<M<*C-Dz>ut3֖ 9\DonKMu eO؅|+vܱ?At7˒>G/;0Q#҅Kwd/~B]U][Qcߣ!B52%Voa?x9J7Zus,H8+=NN~{WĕI~gc@A^Zcw6KpşT%-C㣙tm+a`["&N! ihvIR5@[)WɍeBA{g*|:ؒRS2} {s,+7*W{Dm;mS9H?'Ėm4n*Cǽ4Vɉ7Y5{¶fj@ݲĵGB-dcY9 `}7G6A>/gވlRVǤ\I5MŦjz#(dX[FuÏ@ !Jt{'k@i;RQ?8jٻ+llofB̵jUz>hcJJm#RGCfq HŠN7vouOeB1Ȕw p}-at#3G2g9+rꍚ*SPa Qα>3;\ sO)\:e_9ְq^ϦU;DhPQN"R䚊N'#@Ekh-X9zrcj;6C2֏rwT sCFCQ iڨ Gf~P "Mݳmt qdf]VQ5ʋ;pb0p54iXړ-wQ>q;ӽpn Y`>}DxE{qLw3*_"'"׽n)qhP(|G߿Il. _p~+_aŰoa(\`#̫'7j jmpF;͉\@A%rJUIS@.,E2usL,E;cD@q6M׈kf}17O桎u? %=5#]c18:h0ba/rCg`F)3F:aJCP.*/XGq(@s|U_YRڹ5p$i piE+لZ0_Ҁ?|Irnҋߔ&m|]+DעBX ]U`jp x,gFKñz^ Lo2r?.z{4m<(w_t_HqKU,4ɢJc\$$@ #s/D)t|\>SW~B% B/LpBZ4zݹ/ 2ڍ5OSͩ"DzfG⍥˼V&%=$ܶk}d(WE+SGI&<OZK KIFAo’cͪ29M, Nrnlߧ%ju\C,Ԇ=4T7 &'n1y< oL[Swwec꿗8Ɲ-t 5)XMzc)ܡG~RK2\*,QI*Z8.edi6ҋ`A[B4o];ͣO*.q ʨG8a^L̎e_3'Iՠ0B"CK=ӄocdx:ܦ٠,i:bA`[j,Ym|QS)ױMA5mNj B1GAr*g׌ϋڙZJ#u^wOWOGa%lLݍqԨ47ݲ=`IA1*Afa^|JCb:ox D|}ֿ[h0 ;S,Q!#9xlՓ!oON*ne'Y i)\K1 HJ7u/{~2]!t8Z:`gsEWij`9f:yyB߫Nd9"stdawE,iQv?_XuQe%>ۿPOd^_{Xboxx $P쏵q1{֓\ 6Wr܌nms״^[e}iPWb;k,>kTگ +:zJ:"RLHrbcxe& uԂIJ|f x?xMxJwZ}_T0G|0o9=.s Z"uz[JcddH;0r`tBK\f.bwxb\<^06?3Њ_VqvP7&M`O`ì,5Mu%dsou|M3̄W]%tnLfPTY/RꩃO$c&.j@s{Od- SCޕU=pgn ]|$ -HH-%p@&3\.UcwtvFFovqoz6Й0=TQYzOAo;QqJB 9TZd &fFBn`/Q_fmK\~rQ ;!Qx2oԠ.[_͛(f|L[쫞r9X2_; K ӊ>1~D^еu"Sv|X^ RGPq$M^p̴5d.}SLlSr\~'Vn}#P m @0n*.zqTq"j^?`͎xΥ |dA;D6Ś[O8O|6µ0KV,̡Q2Ǒ2QLc /FJ[1 d~2o8k8]El%(3>$ ]rQCi|[uVqv HEG>Yc%ZQGƳ#9q3uמ"= zܔ?h/JAeX+ HxAp(n5+L<+q]jI/㑫 y*ID53YwghhԿ0JYЍWi5Z{(ةkަ&Eӄn-tYͽIy\u׏z^tN@ilcꀅ-nKCX4v[6[%hzmHB^l6 x[=\p@B(:͏a5M M&>d1^:Ph;f Vwg^ĸD[+Wo&j}vyU6⁙c ! h:Vi{.]< 2DmUu4eKxe7shhP)&~APT1DESQ?Y_O U[ pAZi'p6g`<\OCY)E] k -%LbFK4<X@ [zpEax`㕥 le1i9lrN@DeBKwͰAe\I5jK%m$ /C62a3Ԝ!DӸ E,TV9⫂.k<- C7`0*c9U פzg@FvGa߯Zz¹SWHрFo{nK<+R@=/7G"d{jd;L7_cjE/Dt+Y2QR( f+B3ݨ!1"v:*M{0rRB6 \ G*AUk(A@|EKi6<=ӯ(ŕ Bo2W~di֙Uk(Y\dlA:>;Rd@7zJ'}j3˵U4@8@NHZD:+窆r{2hPVv, kׁ& \3UP1?:"b|Uô~O"@6_2w'q.,n]ho#MϦ (me>OœqI]h)bE(/wFF?`n]\ZTnHxmsʁ=C+Ǐ%[(}G/(& q6w r桦-n!V=@R*i)X3Ma7E]2~F)тRi/y M5C]^ ]eۊ&!p #\LX4B f67iYSnX|2Um͛/ V"G_+r/\+z` L?ݺ};+o< ʆFm{lE7 | 4S50?(nSEG~]oa!r:@# dZ(a*}p$k.H 3֝.~kj:]!L{;FGXn+69ϓt[/OH{Wo[>GD O2rɷdgbv!Oh\H}U:N@ۃ}a)hjlk#UsH4?QP#ᵽ+k|3a.Q=^ &_fCx S̙uAV=PyR*/E^_S~[ R-=uXoj9Ez[O,-B֨ G r9A%VEv_Ό;1fKOs]ϧz>gؾ T<{J7 ^/hST 7.U9g'69oOlt0fqyeKCniAfD0ыJKdWAЬ7 ~q=z 0 Jokwo EHku1MV^AsR)2!Mѵ|6߿KbJ7ZFh^Z|OԄY~IEt{6kpFs?Qe# }"3OLӪ4"1Wac f. a("+\%id gHP[ yy--r%C!Fͤ}Vj %P rdQ/t3W}=OmM Z%p]s Ӗ#2p2R hgvbuҩ$ݏGcg0F:=MBMktrd"^JHI٬BǙdX۾2& sqj*RCט}-m'd[4cͱȂ$3tz +-baL)@E7] ^J*ow<8ϖk '(Wx?MYvbZx9=LpJbw-eǿE&&enC@Jeߕ5!:& @z-eaaX*ltض3Ugfl=_|*]/<ɊZ/<ȵ$$b|yCi/K1CR3>?Zu-.N!B_ b(SquCX{ vxV 71%'H zK>TE~m7_N)v m2&U> xnFPKIi$]f SM9<,IۢCgG!Rd83K$œAAԳzA@JG[ar ĤgPHn(#\ y a<$;Y+W0}Ug!6`g \JM0y׍~R_J@OY0$u΂`vI$,]?``!)q .vy {Xmz JBzZ@aG?NON:.٧/vV,x; w'헿mlUttEjND\|_k6P@K{̱2bڢokιT0//zrJ>P M.&r#=:9DG4%G{yi$.t<xyqNt |BA5rbnO2旊$,|^C; 0^}=\y|٪T(Smkc5ybדfD0UT.$V9dz2?ҤF^c/!mu8FcD9 1fIiy]W&YϾ᩵6e"y2~p^ o;pzA ƾ@S{!GH㋌)\GJ%_1ڣ̆Lٴ@]=[4Ea/eNx(]1H풲S"ę'N߈k:VśF;հJB:zb]&F@-UzX㞞67  ߜ)_&C) -{<2-?.6뎬dW#Ϥ+[K9ERsr4=F3=I~J꬛<>N fc=Jx'ԑtź"Sب^-*Ic8L'/&(8J$ޣFP_ ٪z׵'){ (m:;uwD1pM9PV8TLU>79*:͇gII\4yđ:*7ͅ>k pTheA4ŝ^YhyX37xT0hRZU锭[>Fix'&BDNpkCRrr{kGr(EoP1=GA@c{u*`Q; j3Vx1ۨbU u£rx\Q@i/j6ָ݊H/-{r{(3(/+oJ XAPP5W*^Τ%z6]]gndj$)$0i|R5u'w510gԁ||c(.V/}y5i'%  =Y"bV3͉P}6= V^~j6Ӛn&P8Cʝv466;[Hڹ'TD4Tʹ*V2WCS9R 4ݽ2^4-@taC=/Bߪ۹'o'_SjYW`Փ̢wy o+GB? Fm'8 FDM0"G҈fM\vtS%(Oʂ4h7좈>`.0^Z@lQ:R Y0\uM\=}{FG%w a2/~ql0t~v\kڗqW5Rphܤ(  lStUDcW\4чt$߾%Fe>7iݦ#*YLQ /}! {r* |4.,?c65s.:ymH5YܡF5si7.篰fxTz>DJAr?ik'iSqgC0T>)i翪 ; KO~A$;H~M^1m* Pk97ELc׿8|őmbXYU D}b r;eF LO}_2mZ_&J+EYcq,\aҸ/#_>jo0HE(\&.>Ȫ IdX‘n؀e,;.>BHP?&m5*CwEp Ƚ})(Zb /(s,p}l `єFƶ_F tzdwf]/ތG]TK$aZ At}'m7˩r') p!ٝ65x S?#%+_[ę9&.&6ë߾1#VĽ+x?/rݭi^R 7s\у[]M8X\1`R"2Yt(w56g5d%|٨0>M,jz=<мG L Ϟ/!Q"rWNiW3z(\0g?M V|w Q3ڸO|opVzEH{3dl+NcQԋ>O i:IEN@jk="H t|[%PPqteǏwp >zIj45G#Rɫ;~jᏳ#89_ԟ!?E᫡lxhrDɥVsnǙCD Z2dTՄ-o݈CK; K#8IXT1,~amO жjw.1];癍k$2x9L2 frń4t/pSwɔ8h_d2hgixpJB7tkA?)*Ks+YEFVpn RMMTKp ( ċ2溲"L>ĝ!V<*BOn= UylK'D%6{Os)[7Ǣ.Sz̉l9H9:i6tJs(~^`Ge(N@p$: Mt RgWob6q+Z> L*+WՋG35lskS.r!r' 70C&yPDKtm})2HIXi-sw\_[ @('{WaLV A#VT讂*Nÿkj CkR# d]-M$(ߢHXr><LJ n(BwTI9XU|7S@jvsoFǥVb6ۢ!d,GkS<EzI^fL6` ቮȧ\?4Q$<513>R~ՎN\Q6b:; }Ķ_ 喾-OBڧN ; r7>kY/jЧ퐐(m '-&b>1\d ,e Q:#;'ڽ r g,\8~+ qu/0M, 2 oA-vL#asܹrjLON /h!߹qEWnO5¤ag*՝M[i{aE;)sc#2> IW5NʵXaH7#|2O6{L̪e\/>d㖉F-yq4D|f;ņJ뺵͝5~VUz4+?CnALk "-Y 7n!է"G[<&8/Ul+Ht;1^ bZ?vL3^'5Dht/CMbѯ#T7myi_,,GBt\!LnpzvT89=eI. @ BS1͜C5G:`x +qCb3? )vqMks'i!a"OxEdfkjmGUس+`s8r[Զ$v<e-KWɪSi}0fsMn H5c 疥B?N }Yx ],?ڠM,U[SO,J*7F_Pd`=Xe5ۗXA㓼ijncG ZQ` D*>H&v%0zs)J] m]הKgS,ω5@$ X&=lYYqEdE=gN5RRqBʔZۺ@D@so9g}u'~oƗ7u%CcU5=.7,FgnzS//KA5#b<uU @(Y1d_OY|RAJm݄?w7v843Huz7};Rc9 _jEv:%Iև"2_LSm%;B,3M@uhtHd3)މY'lEtDJpk8Xn)XFwj*5`KԾͩ9?B*f]Ī/T '(hټuO\z2j8\>Php(@(YӊÊY(/fM?z~(I&8L۫' $./I$dhM h`ZDokUap[:HV`n^6'B'} (697Ir*␌f+Y>쉩J5W!3 _6f >bX Ӥ(F28,Ry,gP&qe,U,= ``I0ƙ*`*3kܮ;kz sTe+fnPsaP}\ -fF^F5'oRNEx]u?-(aGFdz(eLu&K/RX8pe"{T34E\狎$J,Q?4l*0WWqzE\I:\b-ƛ̡siېP'Cx` !ְ̮<;dͽ|l -~U9fuxPDp6?w~>IO^1Jr=څ)H\5=NIZѥeXޒѴfety꜊X]bfثQ~w 3H8ߑ`HpH䅲e`Ch#֎$}0wۺẹ# IBKILkOidm|8 j1T /)_>:](c |$ NBxԭ *I76oo eRJ|]C劮6M9|LyWvtxRo{é 7(3=5N~$!1^9 y~P4D#Qk'eRNU)[M'sqp?k!NZ|TeGOGπsO0(8p~= 5ӔY4$`'$?JX34+,Gz|߅TOr=UNCY#:O%0"lZ\G _5ӳO[d04ߘХkݐ)ܔ$+3%JҎ>V},=g ƿJ(ɩ`>į7 wFgt- *^v8 Ԙoš_.~ C++08DKqBYuա$uNEIX#j 2l: $m]<{s !/AQE0h浥}.*Dj=_|^AI0dT LfiߘhVRI m!n l/9Q ]_O#A`nڠ^~C˖'IYbQZAe\3 Q" `xoj)@+c(,4 D#\.m mΏ.`8xUC  Nd^az1){2-xK׊eש@h.-oHL7ΨJz ӣ]9T8r#$CaZ!fbX8?:Ag2WfK1%˽-rۡyЋ[Q Gvae7ُe{w㊃rbZڥi6}\?M҆nE[luiQD~硭4?+mpJHR68E(3y! :: u7o \,Qa_|BZOnKďKg>sP hKCsRwpIOOr]I B+ NHpѻo|@*j}DYrs9YI忺:5?tw{V2T5r6D -3ʌ[^ #Q!l3K,( wbϡ?eK+:KwJ* HEc ;Tޗu>EK&Uos]K}Կe!GǔJeD3%=y^ }oNwwT_= A=v+~@zw^6#wt_e7$@^ &De=Ԙ%JdQ~DŽA4Yxe],2vY_Ay I<ح-tscnk)j*i[n kS h[)ko$C<뺻Djо +7_Wc`}&5PwDg}g}Вy.<xa,BI[CfpѠ?yrl[ۇϣeU_a~m盉ۨ<48Ď76KYݹIdjm+ qr EV)aDT+Mq-0f ^/]5:wG{a  ZANp0 Lvm=N?}>oMUN}R"][It JeÞ}dolo 4+~1Se{Z^z!-2k1HR)E~dcOٱXEXt Ֆ͡ȍUٌ;C3g[L^]f\ĜYA4ZǛ!E7 _I1hG!L񩙤l5Ylr}uy͆Pj1Zp GʜtٲLL>IvH;<.mHTK8{863Źi~3UR 7KW[e 00Uq(zdC]Mk1T8,P^)(NX/W(~ X!xHh`'*O)W612d $W~R L@~>9Eyu:Skż޿I"Đ=w}'EJ}nBŀ[r{Q:rI=ذQaQqB=b"j`/ޭe.2D0ja]>{Ce 6S:p:0gsyro}y}e>j|xr9p!x@t Q8*99@Vg6Jn5E2Kei8, lI i''pʬ3 '4^ |##x`,w#oKNH 4h)FE^fu$PIpQ}|q߅Cd3@5ϱ}},'-3NGPL㪆]=cg}P/ߥo4qMs&bzbDZW$k t"L v %ފx aE(%rP[6*˺һ6 7KtA"LV~+F,}Ifmr`bcXJi'D,E/G]8aO7H^t BLhLa)@BZ,dy -0u=5DTSþ$2<Ϳd'oG@wb/C fH -J#0J;S헙+ZaAH̍AmI-qz$;4kkN u*t -P9|_ܐc:WEllxZ0^^4n[< ݏ/:bYEZNzP G p.Y2% ,xҋq4gy&p+ $2B_Vo m9_Xh@;1$T(0,Z A,bv֖<%Z"10-̧꾔|71dشÁ|ON9e a^(i=FȳO0 >@%ڎ`Hٓy.Y X_rܞ`n?Kdٷ [s§ 4;6[`KsA@T "vW@@-aQ!8:<,iMהa(D2<;&q?w>**&Yn҇{/7<|I2ZcvzE\:2Y AVn}CS4`qGBvaq_0I>L;,;I[e9!y?6x aB= c'grYuQ񺟮3,/&N&#޻!6FC%s}@y"JI3gtrrz(6ܽ8N8EdBtZəEQO o.F.SdQlMRm5ԞXI)ٝОDC5Swn_'iJ5dF-23gw2ͩg0'LGiH,eDsgՅ1N$"d@iۣQg݅huKpgs7we"Y>EHþוAE+.4??QGl,5)c 6ҋK~_Ĝ90g L?8FQ8N(ߦ@]ז_}S,8.`2b7.}R6*PY﹧ƕ"V2-oxNɚ[vWn&oj̇G薙ӿ?vN.peqT57"匦b @g ;Ddm`tX3#F, \7N J}.)l Is49ƀx2+Qr*(X!dfb˅˙kMz6\0ՆlP{nl9sPtomGq!-`&Y)-4bvйSi<}jUCX3 -Pe.]Nkw vF'"!v w҂J77;x$@Q5J%#dQrz`ThJ y0ݫd73:(t^p}L\!M#fPɇN/SIōѡlnQ<˨E'^AU0!8"`3/P[0uf_ofGm;!y^4ľ<ՅNMQ40nRZ$?TR]B^KވOzD$lNN?/MڋR^M%8Gٱ>Mie\̋:L2Nwj8,} \{b\dCvBfbZRxI +;8|[q/-Рk 1>bKJDZ_#z; ?e|uweQ?LҹQ:GV:ҌvQA2|h_Lv[XʅjÆiXv lg.` Y_4` @~=gSARO 譼ȡMtL4&A2Ⱥ`^|cu( `y"ҌO񹲳9 YєnXD@CixƩiT$1CeE -k=]?#xg5QIW0#PHqɑv{Mfrj[Fo"ą0MDSuFlgn1GX爐D .hezzٻ϶r;kaiS= . ;!!c:i$f=-dдVC<—6_{%(AsȔT q!>w7e{Yh! @^eza$֍J|؞âڿ_ms2?c0w!oO@U[iV͡sTB:(ڮq\,O;~;LxMBaW&LSe+ZQ P3ca_HOf/ $!ڷZֳm%2,֐dո Ѱ@`O.]MS6+a%1ȠX7f]'ʈ5oTÀr]6X>d+ g ɱ-;$p^MAiyA|gؕʭ#a/R4t.s'c07$$5u q'?Dl4!6 RLyFzR$8^\~X|A[G2BN M? A/J3il:e  *#U*Jn sm,~en}VX$Quru9%,ǯi>}i\N!xmBIr&gHB(%LE_+r5U΅ޭ\OT=c .׋m=KX,B<1us){W¹ks]S/_ U#Nj Y=Y&h.Nh)Morò(q@/'lO;!mXlR8|gm2C$?ϏӯPh3 A"lAԩͰ。UnjP"/xRSOnO͛yW3A-|eYTƝmvp W-;}rtjbU:8U˂-ԎAB:1Aogp5NEVŇҗYUk$krH 4wC.7σ|M}m84Cǔ *? dPm1צxYz:CDxu Aq}H+@/}!~r-B:uCl5J:R6D!nRwbz:]%%ޤ]v mk`'ucnKD'C&Mp_bm!Y Ziw_tFvs4 tm6 AxI֔䘓2;6˘]9R@@3qE"\ɘj̗$ҙXݷ ϳ4f Hg+C14҂TO98i=9VpА+L"?ڝNk7Xw"(#9 wOY[ y9Sk9m,GDܿ04F8kt1ǾwEߏK$v^ ;13au@c=1 ؿ[7_JS뉖)PM/fmE4T,Dr~@7>6S&/Mg𝟞1[]]wq8y0ElW>c0W9퇈f7CɳΧAAd f:&~֚2#M7 -੫.}Z=Bx.XԚZjJ+gҹw+_N5Ҕ`/U*>QI+tv. h=+lA,#hr.I+˪>Dt S ["Z@)_jyGX1Q&bF~+֯x6{#HIVؽm#U/=QAJ]nVfM*?JβZ5Uan#Ia8Q~Wgl.֫_ڙk+TCսq Fޠw y2/)ܵt:c!gm-PrR&u Ϭ?occġ~MRۦl?V=Z Nn]S \o9ΘDĩϫV)~JO](ҿkv<S Oݛ`N*T2jenȔO.|f/UMnNC;Qz)~c+䜖E:.~f?tZ&`qIȇB\OvRG$s#T /fљu iZUsreÝt7X,Rlb\.(U 4N${+=S$!,ɟb}}ܮr(E[̈7 RNg%d_͘iH֓UQm5vXS \i$5FmѠl9͕a~0VnSMe:79|u#'3,m3iJXEaյevcTiʣ]nq|:,zoʺI f|)O0 mi@В{uEژQؾ>zYG~@P*D%_-a}L17`(c,Uchꨋ)\]RZS9VE k&KP.9a{Jh3$]ߔIp n@ 9ߜap޺;󼄗D6]agTV%W%e/A"ް\̵,沞=PA0JM='{p~pbm^ux_,?b?iyVFr.'8-m׻XoN=2wn)IL+&f ;seF@f>4)w7>(5F] M_ -U*TBu\2$b#-3"Hω>q+Ҡ6V%o=NM$S`/~޽c|$^7 H0^ 2 #Zc\H}?_v:|P8j:Q٦yzx߳/N>A+F.-HAAףl}Dk. Aj!zOS˛j)w} "!h YZ