firewall-config-0.9.3-150400.8.9.1 >
A cp9|qk9\n'ȫwFL^bBx3
'AIHDfd~
U "Q @Sy꫞vx_gQvx՞
pJ[)B6=Xncii|cIĮG#3Y٠ PxvȓF2¹R*@J
? `-qe;Fgف^#P3szMd
e逍ER_V{M:Imcb0e4825dbfa161a0a2c7efff42f56461e662fc2 0787f04cdac23ca79572cdedbbc85e81375036bce1738ae888b59f9f9001262f cp9|ʍ bۮxM1O=^P.uV6jd˭t-&H =&/,/{Y¿{;Oi )
fcdXO?2;M:Q {IdAFG ihk7{hqfQ) BCpLt_bKf']F
<09} }Vkl{|m`|" 7TSN0rPY8f^ 3 !:[CЧhJmڔ" > p D 0 ? d % H 6 O U \
T
4 <
(
D 8
L L 9 | L : ! L > @ F G H I P X ` Y t \ ] ^ b c @ d e f l u v w p x y z 0 C firewall-config 0.9.3 150400.8.9.1 Firewall configuration application The firewall configuration application provides an configuration interface for
firewalld. c{goat12 SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Productivity/Networking/Security http://www.firewalld.org linux noarch /bin/touch --no-create /usr/share/icons/hicolor &>/dev/null || : if [ $1 -eq 0 ] ; then
/bin/touch --no-create /usr/share/icons/hicolor &>/dev/null
/usr/bin/gtk-update-icon-cache /usr/share/icons/hicolor &>/dev/null || :
/usr/bin/glib-compile-schemas /usr/share/glib-2.0/schemas &> /dev/null || :
fi
m ́큤A큤큤A큤 ckclclckcGcGckckckckckckckckckcka0aa220fcea2698f725eb3bb2259f0c59f09db69e78d55916a5a5f42137ecb50 de3d20f6da2db5f8d6eac0967a4cf8760a12e18ba96c8f7de427cd40359e4d6d 92654f2a9bbb1f82ae2dacae50dd540ef05c6be4894bab0e7e1588ac1bb42f23 6d5b33efad002f15b318e63482706e01a2b1df6ed9b902970374b51a7234dfe7 f06bca8b424798b7eab76800bbd9c9b6d8e31cc2615c0055f2e49d221c470eeb 7f76ffea9100006823452188c954696a7c9dd92d6801937a23ecbcea2ca03233 18536ed118fe42b6a27c94891454fdc709a79d4e34171048154b26c3fb2c9fe4 4ecf3ba61c8daac7e13a258c9bc490dd6692b0494a7f83b9ef655084146dec15 2732f3501a2b9262bb1458713f5f5a980655f7ef5d48cde66902643f6134bb47 42de1cff244f46065694258388751f164866b9a8faaa6ae2494f2cbc5aceef51 1af9a194fca0292ebb1458274d5d874e4ca86aaf437a1a051ef6cf721ea70e54 6b9c7b22d21db4f44072f92bf8b71ed68df0dc8ea48a071e15d6d9298c0cc8ed bfd0a863f55c88e29b59fa5c750832c235c1bc2d1f18ffc6804bd9aed783b681 da605e96218fccdb19a26bc8d1e4cd09f6c8e5b53c4759377dd149538f01753b root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root firewalld-0.9.3-150400.8.9.1.src.rpm application() application(firewall-config.desktop) firewall-config metainfo() metainfo(firewall-config.appdata.xml) @
@ @ @ @ @ @ /bin/sh /bin/sh /bin/sh /usr/bin/python3 firewalld hicolor-icon-theme python3-gobject-Gdk rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) typelib(GLib) typelib(GObject) typelib(Gdk) typelib(Gio) typelib(Gtk) typelib(Pango) 0.9.3-150400.8.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 3.0 4.14.3 cGby@bA@b1@b!@`m`@`` 2@_/@_[f_X_R,@_9 _3^%@^d@^9\]p] @]4@]4@]v>\\\@\s\Z@\73[ā@[[@[[@[[qr[m~@[h8@[?YZz@Z3@ZZ@Zs@Zp^@Zk@Z;@Z @Z OZ@Zr@Z
}Z ,@ZY6@XXXEVX)@X2@WiW @W{@WrfWj}WXWM|W,@W#LWVVՄ@V2V@V@VHmohd.saquib@suse.com sflees@suse.de witold.bedyk@suse.com mrostecki@suse.com mwilck@suse.com mrostecki@suse.com mrostecki@suse.com mrostecki@suse.com rfrohl@suse.com mrostecki@suse.com fbui@suse.com mrostecki@suse.com callumjfarmer13@gmail.com dmueller@suse.com mrostecki@suse.com Mathias.Homann@opensuse.org hpj@urpla.net bjorn.lie@gmail.com ngompa13@gmail.com Mathias.Homann@opensuse.org Mathias.Homann@opensuse.org Mathias.Homann@opensuse.org mrostecki@opensuse.org mrostecki@opensuse.org dimstar@opensuse.org dimstar@opensuse.org mrostecki@opensuse.org mrostecki@opensuse.org mrostecki@suse.de mchandras@suse.de mchandras@suse.de luizluca@gmail.com mchandras@suse.de mchandras@suse.de luc14n0@linuxmail.org mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de sbrabec@suse.com mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de dimstar@opensuse.org mchandras@suse.de rbrown@suse.com mpluskal@suse.com mchandras@suse.de mchandras@suse.de mpluskal@suse.com mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de jengelh@inai.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de mchandras@suse.de jslaby@suse.com mchandras@suse.de - Fix firewall-offline-cmd fails with ERROR: Calling pre func
Added following patch (bsc#1206928)
[+ 0003-firewall-offline-cmd-fail-fix.patch] - Fix regression introduced in previous patch (an api change to a
function also needed backporting) (bsc#1198814)
* feature-upstream-new-check-config-1.patch
* feature-upstream-new-check-config-2.patch - Provide dummy firewalld-prometheus-config package (bsc#1197042) - Add patch which fixes the zone configuration (bsc#1191837)
* 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch - Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639) - Remove dependency on firewalld from firewall-macros (bsc#1183404) - Disable FlushAllOnReload option to not retain interface to zone
assignments and direct rules when using --reload option.
* 0002-Disable-FlushAllOnReload-option.patch - Update to 0.9.3 (jsc#SLE-17336):
* docs(dbus): fix invalid method names
* fix(forward): iptables: ipset used as zone source
* fix(rich): non-printable characters removed from rich rules
* docs(firewall-cmd): small description grammar fix
* fix(rich): limit table to strip non-printables to C0 and C1
* fix(zone): add source with mac address - Add dependency for firewall-offline-cmd (bsc#1180883) - Remove the patch which enforces usage of iptables instead of
nftables (jsc#SLE-16300):
* 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
workaround for lack of nftables support in docker. Without that
additional zone, containers have no Internet connectivity.
(rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
* Bugfixes:
* docs(firewall-cmd): clarify lockdown whitelist command paths
* fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
* fix(policy): zone interface/source changes should affect all using zone - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - Add python3-nftables as a requirement. - update to 0.9.0:
* New major features
* prevention of Zone Drifting
* Intra Zone Forwarding
* Policy Objects
* For a full list of changes, see
https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0 - update to 0.8.3:
* nftables: convert to libnftables JSON interface
* service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
* allow custom helpers using standard helper modules (rhbz 1733066)
* testsuite is now shipped in the dist tarball
* Typo in firewall-config(1)
* Fix typo in TFTP service description
* doc: README: add note about language translations
* fix: rich: source/dest only matching with mark action
* feat: AllowZoneDrifting config option
* feat: nftables: support AllowZoneDrifting=yes
* feat: ipXtables: support AllowZoneDrifting=yes
* fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
* fix: add logrotate policy
* doc: direct: add CAVEATS section
* fix: checkIP6: strip leading/trailing square brackets
* fix: nftables: remove square brackets from IPv6 addresses
* fix: ipXtables: remove square brackets from IPv6 addresses
* fix: nftables: ipset types using “port”
* fix: nftables: zone dispatch with multidimensional ipsets
* fix: ipset: destroy runtime sets on reload/stop
* fix: port: support querying sub ranges
* fix: source_port: support querying sub ranges
* doc: specify accepted characters for object names
* fix: doc: address copy/paste mistakes in short/description
* fix: configure: atlocal: quote variable values
* fix: nftables: allow set intervals with concatenations
* doc: clarify –set-target values “default” vs “reject”
* fix: update dynamic DCE RPC ports in freeipa-trust service
* fix: nftables: ipset: port ranges for non-default protocols
* fix(systemd): Conflict with nftables.service
* fix(direct): rule in a zone chain
* fix(client): addService needs to reduce tuple size
* fix(doc): dbus: signatures for zone tuple based APIs
* fix(config): bool values in dict based import/export
* fix(dbus): service: don’t cleanup config for old set APIs
* fix(ipset): flush the set if IndividiualCalls=yes
* fix(firewall-offline-cmd): remove instances of “[P]” in help text
* fix(rich): source mac with nftables backend
* docs: replace occurrences of the term blacklist with denylist
* fix: core: rich: Catch ValueError on non-numeric priority values
* docs(README): add libxslt for doc generation
* fix(cli): add –zone is an invalid option with –direct
* fix(cli): add ipset type hash:mac is incompatible with the family parameter - Update to version 0.7.5 (jsc#SLE-12281):
* release: v0.7.5
* chore(translation): merge from master
* fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
* test(rhbz1483921): better test name
* fix(cli): add --zone is an invalid option with --direct
* fix: core: rich: Catch ValueError on non-numeric priority values
* fix: update dynamic DCE RPC ports in freeipa-trust service
* docs: replace occurrences of the term blacklist with denylist
* docs(README): add libxslt for doc generation
* test(rich): source mac with nftables backend
* fix(firewall-offline-cmd): remove instances of "[P]" in help text
* test(check-container): add support for centos8 stream
* test(functions): use IndividualCalls if host doesn't support nft rule index
* test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
* test(dbus): better way to check IPv6_rpfilter expected value
* fix(ipset): flush the set if IndividiualCalls=yes
* test(ipv6): skip square bracket address tests if ipv6 not available
* test(gh509): only run test for nftables backend
* fix(dbus): service: don't cleanup config for old set APIs
* fix(config): bool values in dict based import/export
* fix(doc): dbus: signatures for zone tuple based APIs
* test(dbus): zone: fix zone runtime functional test title
* test(dbus): zone: fix false failure due to list order
* fix(client): addService needs to reduce tuple size
* test(direct): rule in a zone chain
* fix(direct): rule in a zone chain
* test(dbus): zone: verify runtime config APIs
* test(dbus): zone: verify permanent config APIs
* fix(systemd): Conflict with nftables.service
* fix: test/regression/gh599: use expr to be more portable
* test: dbus: zone: verify runtime config API signatures
* test: dbus: zone: verify permanent config API signatures
* fix: test/regression/gh599: fix if not using debug output
* test: log: verify logging still works after truncate
* test: ipset: verify port ranges for non-default protocol - Update to 0.7.4
This is a bug fix only release.
However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
* improvement: build: add an option to disable building documentation
* Typo in firewall-config(1)
* Fix typo in TFTP service description
* doc: README: add note about language translations
* fix: rich: source/dest only matching with mark action
* feat: AllowZoneDrifting config option
* feat: nftables: support AllowZoneDrifting=yes
* feat: ipXtables: support AllowZoneDrifting=yes
* fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
* fix: add logrotate policy
* fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
* doc: direct: add CAVEATS section
* fix: checkIP6: strip leading/trailing square brackets
* fix: nftables: remove square brackets from IPv6 addresses
* fix: ipXtables: remove square brackets from IPv6 addresses
* fix: nftables: zone dispatch with multidimensional ipsets
* fix: ipset: destroy runtime sets on reload/stop
* fix: port: support querying sub ranges
* fix: source_port: support querying sub ranges
* doc: specify accepted characters for object names
* fix: doc: address copy/paste mistakes in short/description
* fix: configure: atlocal: quote variable values
* fix: nftables: allow set intervals with concatenations
* doc: clarify --set-target values "default" vs "reject" - Update to version 0.7.3:
* release: v0.7.3
* chore: update translations
* doc: README: add note about integration tests
* test: check-container: also run check-integration
* test: integration: NM zone overrides interface on reload
* test: build: support integration tests
* test: functions: add macro NMCLI_CHECK
* test: functions: new macros for starting/stopping NetworkManager
* fix: test: leave "cleanup" for tests cases
* test: check-container: add support for fedora rawhide
* test: check-container: add support for debian sid
* test: build: add support for running in containers
* fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
* fix: test: direct passthrough: no need to check for dummy module
* fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
* fix: reload: let NM interface assignments override permanent config
* chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
* fix: tests: convert host ipv6 checks to runtime
* fix: tests: convert ip6tables checks to runtime
* fix: tests: convert probe of nft numeric args to runtime
* fix: tests: convert nftables fib checks to runtime
* fix: build: distribute testsuite
* fix: don't probe for available kernel modules
* fix: failure to load modules no longer fatal
* fix: tests/functions: canonicalize XML output
* chore: doc: update authors
* fix: test: use debug output based on autotest variable
* fix: src/tests/Makefile: distclean should clean atconfig - No longer recommend -lang: supplements are in use. - Replace incorrect usage of %_libexecdir with %_prefix/lib - rebased the original patch from revision 19 - Added a patch to make iptables the default again on openSUSE - Update to version 0.7.2:
This is a bug fix only release.
* fix: direct: removeRules() was mistakenly removing all rules
* fix: guarantee zone source dispatch is sorted by zone name
* fix: nftables: fix zone dispatch using ipset sources in nat chains
* doc: add --default-config and --system-config
* fix: --add-masquerade should only affect ipv4
* fix: nftables: --forward-ports should only affect IPv4
* fix: direct: removeRules() not removing all rules in chain
* dbus: service: fix service includes individual APIs
* fix: allow custom helpers using standard helper modules
* fix: service: usage of helpers with '-' in name
* fix: Revert "ebtables: drop support for broute table"
* fix: ebtables: don't use tables that aren't available
* fix: fw: initialize _rfc3964_ipv4 - Update to version 0.7.1:
* Rich Rule Priorities
* Service Definition Includes - Service definitions can now
include lines like: which will
include all the ports, etc from the https service.
* RFC3964 IPv4 filtering - A new option RFC3964_IPv4 in
firewalld.conf is available. It does filtering based on RFC3964
in regards to IPv4 addresses. This functionality was
traditionally in network-scripts.
* FlushAllOnReload - A new option FlushAllOnReload in
firewalld.conf is available. Older release retained some
settings (direct rules, interface to zone assignments) during a
- -reload. With the introduction of this configuration option
that is no longer the case. Old behavior can be restored by
setting FlushAllOnReload=no.
* 15 new service definitions
* fix: firewall-offline-cmd: service: use dict based APIs
* fix: client: service: use dict based dbus APIs
* test: dbus: coverage for new service APIs
* fix: dbus: new dict based APIs for services
* test: dbus: service API coverage
* test: functions: add macro DBUS_INTROSPECT
* test: functions: add CHOMP macro for shell output
* fix: tests/functions: use gdbus instead of dbus-send
* fix: dbus: add missing APIs for service includes
- Remove patch for using iptables instead of nftables - we should
finally switch to nftables and fix its issues properly if they
occur again:
* 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Remove patch which was released upstream:
* 0002-Add-FlushAllOnReload-config-option.patch - Update to version 0.6.4:
* chore: update translations
* treewide: fix over indentation (flake8 E117)
* test: travis: add another test matrix for omitting ip6tables
* chore: travis: split test matrix by keywords
* chore: tests: add AT_KEYWORDS for firewall-offline-cmd
* improvement: tests: Use AT_KEYWORDS for backends
* fix: tests: guard occurrences of IPv6
* fix: tests/functions: ignore warnings about missing ip6tables
* test: add macro IF_IPV6_SUPPORTED - Move RPM macros to %_rpmmacrodir. - Revert last change: the macros DO reference firewall-cmd, but as
they are expanded during build time of the package, not at
runtime, the point in time is wrong to require firewalld. The
consumer of the macro is responsible to ask for the right
commands to be present at runtime of the scripts
(boo#1125775#c9). - Add dependency between firewall-macros and firewalld.
(boo#1125775) - Fix --with-ifcfgdir configure parameter. (boo#1124212) - Add upstream patch to make --reload/--complete-reload forget the
runtime configuration and always load the permanent one
(bsc#1121277)
* 0002-Add-FlushAllOnReload-config-option.patch - Update to 0.6.3. Some of the changes are:
* update translations
* nftables: fix reject statement in "block" zone
* shell-completion: bash: don't check firewalld state
* firewalld: fix --runtime-to-permanent if NM not in use.
* firewall-cmd: sort --list-protocols output
* firewall-cmd: sort --list-services output
* command: sort services/protocols in --list-all output
* services: add audit
* nftables: fix rich rule log/audit being added to wrong chain
* nftables: fix destination checks not allowing masks
* firewall/core/io/*.py: Let SAX handle the encoding of XML files (gh#firewalld/firewalld#395)(bsc#1083361)
* fw_zone: expose _ipset_match_flags()
* tests/firewall-cmd: exercise multiple interfaces and zones
* fw_transaction: On clear zone transaction, must clear fw and other zones
* Fix translating labels (gh#firewalld/firewalld#392)
- Remove patches which have made it upstream:
* 0001-Fix-translating-labels-392.patch
* 0002-firewalld-0.6.x-rich-rule-with-ipset-regression.patch - Add upstream patch to mark more strings as translatable which is
required by firewall UI when creating rich rules (bsc#1096542)
* 0001-Fix-translating-labels-392.patch - Add upstream patch to fix rich rules that uses ipset (bsc#1104990)
* 00002-firewalld-0.6.x-rich-rule-with-ipset-regression.patch - Update to 0.6.2. Some of the changes are:
* update translations
* nftables: fix log-denied with values other than "all" or "off"
* fw_ipset: raise FirewallError if backend command fails
* ipset: only use "-exist" on restore
* fw_ipset: fix duplicate add of ipset entries
* *tables: For opened ports/protocols/etc match ct state new,untracked (bsc#1105821)
* ipXtables: increase wait lock to 10s
* nftables: fix rich rules ports/protocols/source ports not considering ct state
* ports: allow querying a single added by range
* fw_zone: do not change rich rule errors into warnings
* fw_zone: fix services with multiple destination IP versions (bsc#1105899)
* fw_zone: consider destination for protocols
* firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False (boo#1106319)
* fw: If direct rules fail to apply add a "Direct" label to error msg
* fw: if startup fails on reload, reapply non-perm config that survives reload
* nftables: fix rich rule audit log
* ebtables: replace RETURN policy with explicit RETURN at end of chain
* direct backends: allow build_chain() to build multiple rules
* fw: if failure occurs during startup set state to FAILED
* fw: on restart set policy from same function
* ebtables: drop support for broute table
- Remove upstream patches
* 0001-nftables-fix-rich-rules-ports-protocols-source-ports.patch
* 0001-fw_zone-consider-destination-for-protocols.patch
* 0002-fw_zone-fix-services-with-multiple-destination-IP-ve.patch
* firewalld-fix-firewalld-config-crash.patch - Add upstream patch to fix Neighbor Discovery filtering for IPv6 (bsc#1105821)
* 0001-nftables-fix-rich-rules-ports-protocols-source-ports.patch
- Add upstream patch to fix building rules for multiple IP families (bsc#1105899)
* 0001-fw_zone-consider-destination-for-protocols.patch
* 0002-fw_zone-fix-services-with-multiple-destination-IP-ve.patch - Add firewalld-fix-firewalld-config-crash.patch: set
nm_get_zone_of_connection to return 'None' instead of 'False' for
automatically generated connections to avoid firewall-config
crashes. Patch provided by upstream (boo#1106319,
gh#firewalld/firewalld#370). - Also switch firewall backend fallback to 'iptables' (bsc#1102761)
This ensures that existing configuration files will keep working
even if FirewallBackend option is missing.
* 0001-firewall-backend-Switch-default-backend-to-iptables.patch - Update to 0.6.1. Some of the changes are:
* Correct source/destination in rich rule masquerade
* Only modify ifcfg files for permanent configuration changes
* Fix a backtrace when calling common_reverse_rule()
* man firewalld.conf: Show nftables is the default FirewallBackend
* firewall-config: fix some untranslated strings that caused a UI
bug causing rich rules to not be modify-able (bsc#1096542)
* fw_direct: avoid log for untracked passthrough queries
* fixed many issues if iptables is actually iptables-nft
* Use preferred location for AppData files
* ipXtables: fix ICMP block inversion with set-log-denied
* fixes ICMP block inversion with set-log-denied with
IndividualCalls=yes
* nftables: fix set-log-denied if target is not ACCEPT
* fw_direct: strip _direct chain suffix if using nftables
* NetworkManager integration bugfixes. - Switch back to 'iptables' backend as default (bsc#1102761) - Update to 0.6.0. Some of the changes are:
* update translations
* firewall-config: Add ipv6-icmp to the protocol dropdown box (#348, bsc#1099698)
* core: logger: Remove world-readable bit from logfile (#349, bsc#1098986)
* IPv6 rpfilter: explicitly allow neighbor solicitation
* nftables backend (default)
* Added loads of new services
* firewall-cmd: add --check-config option
* firewall-offline-cmd: add --check-config option
* firewallctl: completely remove all code and references
* dbus: expose FirewallBackend
* dbus: fix erroneous fallback for AutomaticHelpers
- Remove patches which have made it upstream
* firewalld-add-additional-services.patch
- spec-cleaner fixes - Update to 0.5.3 (bsc#1093120)
* tests/regression: add test for ipset with timeout
* ipset: allow adding entries to ipsets with timeout
* translations: update
* helpers: load helper module explicitly if no port given
* helpers: nf_conntrack_proto-* helpers needs name cropped
* config/Makefile: correct name of proto-gre helper
* tests/regression: test helper nf_conntrack_proto_gre (#263)
* functions: get_nf_nat_helpers() should look in other directories too
* functions: Allow nf_conntrack_proto_* helpers
* services: Add GRE
* helpers: Add proto-gre
* tests/regression: add test to verify ICMP block in forward chain
* ipXtables: fix ICMP block not being present in FORWARD chain - Translations update (bsc#1081623). - Backport upstream patches to add additional services (bsc#1082033)
* firewalld-add-additional-services.patch - Update to 0.5.2
* fix rule deduplication causing accidental removal of rules
* log failure to parse direct rules xml as an error
* firewall-config: Break infinite loop when firewalld is not running
* fix set-log-denied not taking effect
* po: update translations - Remove high-availability service. SUSE HA uses the cluster service
provided by the yast2-cluster package (bsc#1078223) - Update to 0.5.1
* ipXtables: fix iptables-restore wait option detection
* python3: use "foo in dict" not dict.has_key(foo)
* Fix potential python3 keys() incompatibility in watcher
* Fixed python3 compatibility
* ebtables: fix missing default value to set_rule()
* fw_zone: fix invalid reference to __icmp_block_inversion
* zones: Correct and defer check_name for combined zones - Update to 0.5.0
* firewallctl: mark deprecated (gh#firewalld/firewalld##261)
* Add nmea-0183 service
* Add sycthing-gui service
* Add syncthing service
* Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
* services/high-availability: Add port 9929
* Fix and improve firewalld-sysctls.conf
* firewalld: also reload dbus config interface for global options
* Add MongoDB service definition
* src: firewall: Add support for SUSE ifcfg scripts
* Add UPnP client service
* firewalld: Allow specifying log file location
* firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
* 0001-suse-ifcfg-files.patch
- Drop tests installation - Introduce new python3-firewall and firewall-macros subpackages.
The first one contains the firewalld python3 bindings and the second
one contains the RPM macros for firewalld. - Replace dbus-1-python requires with dbus-1-python3: since
firewalld was migrated to python3, we also have to require the
python3 dependencies (boo#1070310). - Add missing python3-gobject-Gdk dependency (boo#1069952) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Make sure to use python3 everywhere (boo#1068778) - Add combined upstream patch to support SUSE ifcfg network files.
* 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460) - Update to version 0.4.4.6
* firewall.core.fw_config: Fix check for icmp builtin name
* config.services: docker-swarm: fix incorrect attribute
* xmlschema/service.xsd: Fix protocol looking for name instead of value
* Add docker swarm service (gh#firewalld/firewalld#230)
* Adding FirewallD redis service (gh#firewalld/firewalld#248)
* Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
* firewall-offline-cmd: Don't require root for help output
* doc: firewall-cmd: Document --query-* options return codes
* firewall-cmd: Use colors only if output is a TTY
* core: Log unsupported ICMP types as informational only
* add bgp service to predefined services edit to config/Makefile.am
* Add git service
* Add kprop service
* minidlna definitions (gh#firewalld/firewalld#236)
* SpiderOak ONE listens on port 21327 and 21328
* autogen.sh: Allow skipping configure via NOCONFIGURE env var
* Add missing ports to RH-Satellite-6 service
* Reload nf_conntrack sysctls after the module is loaded
* Add NFSv3 service.
* config/Makefile.am: Add murmur service (a95eed1)
* add new service IRC
* firewall.core.prog: Simplify runProg output: Combine stderr and stdout
* firewall.core.fw: Fix possible dict size change in for loop
* firewall.core.fw: Use new firewalld git repo in firewalld organization
* config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
* firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
* firewall.core.rich: Add checks for Rich_Source validation
* Handle also IPv6 with the zone masquerade flag
* Add IPv6 support for forward-ports in zones
* firewall.command: Enable parse_forward_port to work with IPv6 adresses
* firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
* add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files. - Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements - Update to version 0.4.4.5
* firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
* Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
* firewall-cmd: Fix --{set,get}-{short,description} for zone
* firewall.core.ipXtables: Use new wait option for restore commands if available
* Adding ovirt-vmconsole service file
* Adding oVirt storage-console service.
* Adding ctdb service file.
* Adding service file for nrpe.
* Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
* D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
* firewall.core.fw_config: Fix wrong variable use in repr output
* firewall.core.fw_icmptype: Add missing import for copy
* firewall.core.fw_test: Fix wrong format string in repr
* firewall.core.io.zone: Fix getattr use on super(Zone)
* firewall.functions: New function get_nf_nat_helpers
* firewall.core.fw: Get NAT helpers and store them internally.
* firewall.core.fw_zone: Load NAT helpers with conntrack helpers
* firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
* firewall.server.firewalld: New property for NAT helpers supported by the kernel - Update to version 0.4.4.4
* Drop references to fedorahosted.org from spec file and Makefile.am
* firewall-config: Show invalid ipset type in the ipset dialog in the bad label
* firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
* firewall.server.firewalld: Provide information about the supported icmp types
* firewall.core.fw_icmptype: Add ICMP type only if the type is supported
* firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
* firewall.core.ipXtables: New method supported_icmp_types
* firewall-config: Deactivate edit buttons if there are no items
* firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
* firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
* firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch - Update to version 0.4.4.3
* New service freeipa-trust (rh#1411650)
* Complete icmp types for IPv4 and IPv6
* New h323 helper container
* Support helper container: h323
* firewall.server.decorators: ALREADY_ errors should be logged as warnings
* firewall.command: ALREADY_SET should also result in zero exit code
* tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
* Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
* New checks for ipset entry validation
* Use ipset dimension for match
* firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
* New firewall.core.icmp providing names and types for icmp and icmpv6 values
* firewall.core.fw_ipset: New methods to get ipset dimension and applied state
* firewall.errors: New error NOT_APPLIED
* firewall-cmd man page: Add missing --get-ipset-types
* firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
* firewall.core.prog: Fix addition of the error output in runProg
* Speed up ipset handling, (re)loading and import from file
* Support --family option for --new-ipset
* Handle FirewallError for query sequences in command line tools
* Fail to alter entries of ipsets with timeout
* Extended tests for ipset options
* Return empty list for ipsets using timeouts
* firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
* firewalld.conf man page: New section about AutomaticHelpers
* firewall-offline-cmd man page: Added -v and -q options, fixed section ids
* firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
* firewall.core.fw_zone: Limit masquerading forward rule to new connections
* firewall-config: Update active zones on reloaded signal
* firewall-applet: Update active zones and tooltip on reloaded signal
* firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
* Support icmp-type usage in rich rules (rh#1409544)
* firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
* firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
* Speed up start and restart for ipsets with lots of entries (rh#1416817)
* Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
* Code cleanup and minor bug fixes
* firewall.core.prog: Fix addition of the error output in runProg
* New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
* Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch - Update to version 0.4.4.2
* firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
* firewall.core.fw_nm: create NMClient lazily
* Do not use hard-coded path for modinfo, use autofoo to detect it
* firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
* firewall.core.io.ifcfg: Properly handle quoted ifcfg values
* firewall.core.fw_zone: Do not reset ZONE with ifdown
* Updated translations from zanata
* firewall-config: Extra grid at bottom to visualize firewalld settings - Update to version 0.4.4.1
* Translation updates form zanata
* firewallctl: New support for helpers
* firewallctl: Use sys.excepthook to force exception_handler usage always
* firewall-config: Use proper source check in sourceDialog - Update to version 0.4.4
* firewall-applet: Use PyQt5
* firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
D-Bus property
* New helpers Q.931 and RAS from nf_conntrack_h323
* firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
* firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
table
* New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
sane, sip, snmp and tftp
* firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
* firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
sequences
* Misc bug fixes.
* For the complete list of changes please see:
https://github.com/t-woerner/firewalld/releases/tag/v0.4.4 - Relax permissions for default installation files. The files in
/usr/lib/firewalld are the default ones as shipped by the package and
there is nothing secret in them. - Update to version 0.4.3.3
* Fixes CVE-2016-5410 (bsc#992772)
* Standard error is now used for errors and warnings
* Several fixes for use in change roots
* Systemd service file changes
* Fixed translations in firewall-config
* Command line clients
* Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082) - Update to version 0.4.3.2
* Fix regression with unavailable optional commands
* All missing backend messages should be warnings
* Individual calls for missing restore commands
* Only one authenticate call for add and remove options and also
sequences
* New service RH-Satellite-6 - Update to version 0.4.3.1
* firewall.command: Fix python3 DBusException message not interable error
* src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
* firewallctl: Do not trace back on list command without further arguments
* firewallctl (man1): Added remaining sections zone, service, ..
* firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
* firewall.server.config: Allow to set IndividualCalls property in config interface
* Fix missing icmp rules for some zones
* runProg: Fix issue with running programs
* firewall-offline-cmd: Fix issues with missing system-config-firewall
* firewall.core.ipXtables: Split up source and dest addresses for transaction
* firewall.server.config: Log error in case of loading malformed files in watcher
* Install and package the firewallctl man page
* Translation updates - Update to version 0.4.3
* New firewallctl utility (rh#1147959)
* doc.xml.seealso: Show firewalld.dbus in See Also sections
* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
* firewall-cmd: Dropped duplicate setType call in --new-ipset
* radius service: Support also tcp ports (RBZ#1219717)
* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
* config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
* firewall.command: Only print summary and description in print_X_info with verbose
* firewall.command: print_msg should be able to print empty lines
* firewall-config: No processing of runtime passthroughs signals in permanent
* Landspace.io fixes and pylint calm downs
* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
* firewall-config: Fixed titles of command and context dialogs, also entry lenths
* firewall-config: pylint calm downs
* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
* firewall-config: Use self.active_zoens in conf_zone_added_cb
* firewall.command: New parse_port, extended parse methods with more checks
* firewall.command: Fixed parse_port to use the separator in the split call
* firewall.command: New [de]activate_exception_handler, raise error in parse_X
* services ha: Allow corosync-qnetd port
* firewall-applet: Support for kde5-nm-connection-editor
* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
* firewall-cmd: Fixed set, remove and query destination options for services
* firewall.core.io.service: Source ports have not been checked in _check_config
* firewall.core.fw_zone: Method check_source_port is not used, removed
* firewall.core.base: Added default to ZONE_TARGETS
* firewall.client: Allow to remove ipv:address pair for service destinations
* tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
* firewall-cmd: Landscape.io fixes, pylint calm downs
* firewall-cmd: Use FirewallCommand for simplification and sequence options
* firewall.command: New FirewallCommand for command line client simplification
* New services: kshell, rsh, ganglia-master, ganglia-client
* firewalld: Cleanup of unused imports, do not translate some deamon messages
* firewalld: With fd close interation in runProg, it is not needed here anymore
* firewall.core.prog: Add fd close iteration to runProg
* firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
* firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
* firewall-config: New add/remove ipset entries from file, remove all entries
* firewall-applet: Fix tooltip after applet start with connection to firewalld
* firewall-config: Select new zone, service or icmptype if the view was empty
* firewalld.spec: Added build requires for iptables, ebtables and ipset
* Adding nf_conntrack_sip module to the service SIP
* firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
* Drop unneeded python shebangs
* Translation updates
- Remove obsolete patches:
* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
the installation phase as well as expose build system's problems
due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups. - Add upstream patch to prevent unconditional dependencies to the
NetworkManager typelib (gh#t-woerner/firewalld#119)
* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch - Update to version 0.4.2
* New module to search for and change ifcfg files for interfaces
not under control of NM
* firewall_config: Enhanced messages in status bar
* firewall-config: New message window as overlay if not connected
* firewall-config: Fix sentivity of option, view menus and main
paned if not connected
* firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
some cleanup
* firewall-[offline]cmd: Show target in zone information
* D-Bus: Completed masquerade methods in FirewallClientZoneSettings
* Fixed log-denied rules for icmp-blocks
* Keep sorting of interfaces, services, icmp-blocks and other
settings in zones
* Fixed runtime-to-permanent not to save interfaces under control
of NM
* New icmp-block-inversion flag in the zones
* ICMP type filtering in the zones
* New services: sip, sips, managesieve
* rich rules: Allow destination action (rh#1163428)
* firewall-offline-cmd: New option -q/--quiet
* firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
* firewall-[offline-]cmd: Fix option for setting the destination
address
* firewall-config: Fixed resizing behaviour
* New transaction model for speed ups in start, restart, stop and
other actions
* firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
* Fixed memory leak in dbus_introspection_add_properties
* Landscape.io fixes, pylint calm downs
* New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
* ebtables-restore: No support for COMMIT command
* Source port support in services, zones and rich rules
* firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
* firewall-config: New active bindings side bar for simple binding changes
* Reworked NetworkManager module
* Proper default zone handling for NM connections
* Try to set zone binding with NM if interface is under control of NM
* Code cleanup and bug fixes
* Include test suite in the release and install in /usr/share/firewalld/tests
* New Travis-CI configuration file
* Fixed more broken frensh translations
* Translation updates
- Add upstream patches
* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
unneeded python shebangs
* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
not try to access the network-scripts ifcfg directory.
- Drop rejected patch
* drop-standard-output-error-systemd.patch
- Minor spec file clean-up - Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Suggest the susefirewall2-to-firewalld package which could assist
in migrating the SuSEFirewall2 iptables rules to FirewallD. - Update to version 0.4.1.2
* Install fw_nm module
* firewalld: Do not fail if log file could not be opened
* Make ipsets visible per default in firewall-config
* Fixed translations with python3
[changes in 0.4.1.1]
* Fix for broken frensh translation
[changes in 0.4.1]
* Enhancements of ipset handling
* No cleanup of ipsets using timeouts while reloading
* Only destroy conflicting ipsets
* Only use ipset types supported by the system
* Add and remove several ipset entries in one call using a file
* Reduce time frame where builtin chains are on policy DROP while reloading
* Include descriptions in --info-X calls
* Command line interface support to get and alter descriptions of zones,
* services, ipsets and icmptypes with permanent option
* Properly watch changes in combined zones
* Fix logging in rich rule forward rules
* Transformed direct.passthrough errors into warnings
* Rework of import structures
* Reduced calls to get ids for port and protocol names (rh#1305434)
* Build and installation fixes by Markos Chandras
* Provide D-Bus properties in introspection data
* Fix for flaws found by landscape.io
* Fix for repeated SUGHUP
* New NetworkManager module to get and set zones of connections, used in
firewall-applet and firewall-config
* configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
* Code cleanups
* Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency - Do not recommend a specific version for the lang subpackage - Move translations to a new subpackage - Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
/etc/rpm/macros.systemd only check for the 'yes' value so fix it to
properly prevent the firewalld service from being restarted during
updates. - Drop typelib(NetworkManager), NetworkManager-glib, gtk3
and libnotify dependencies (see OBS SR#360792) - firewall-config needs typelib(NetworkManager) to run - Initial commit. Version 0.4.0
* drop-standard-output-error-systemd.patch (gh#t-woerner/firewalld/pull/67) /bin/sh /bin/sh goat12 1676870267
0.9.3-150400.8.9.1
firewall-config firewall-config.desktop firewalld firewall-config.glade gtk3_chooserbutton.py gtk3_niceexpander.py org.fedoraproject.FirewallConfig.gschema.xml firewall-config.png firewall-config.png firewall-config.png firewall-config.png firewall-config.png firewall-config.svg firewall-config.1.gz metainfo firewall-config.appdata.xml /usr/bin/ /usr/share/applications/ /usr/share/ /usr/share/firewalld/ /usr/share/glib-2.0/schemas/ /usr/share/icons/hicolor/16x16/apps/ /usr/share/icons/hicolor/22x22/apps/ /usr/share/icons/hicolor/24x24/apps/ /usr/share/icons/hicolor/32x32/apps/ /usr/share/icons/hicolor/48x48/apps/ /usr/share/icons/hicolor/scalable/apps/ /usr/share/man/man1/ /usr/share/ /usr/share/metainfo/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:27855/SUSE_SLE-15-SP4_Update/a468e8610c4bab33568da02771b1f307-firewalld.SUSE_SLE-15-SP4_Update cpio xz 5 noarch-suse-linux
Python script, ASCII text executable UTF-8 Unicode text directory XML 1.0 document, UTF-8 Unicode text, with very long lines XML 1.0 document, ASCII text PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced SVG Scalable Vector Graphics image troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)
R R R R
R R
R P P R P P MMLR
xȱ/usr/bin/gtk-update-icon-cache /usr/share/icons/hicolor &>/dev/null || :
/usr/bin/glib-compile-schemas /usr/share/glib-2.0/schemas &> /dev/null || : /bin/sh utf-8 cd841d0461962f87ebcdc0b4fd002d57df4725300390acdd987eaabefc712fae ? 7zXZ
! t/?]
crv9w"-TW??mZ|YޞYф pHeE-zy_:Wc]`7[2*}
8J0^_n\NUm%E*ڽ01@}D1eB
kP5mey5'zӅ|< M2Tjm(DgJG^h˪ꁊ;sg<~r >,(x 8>ӒpQsr&;>D̆6
~4o7v-
SB"DԌs }Hn T#)i]8\"co[ g^G~鐦 ]NLfv S NmPְ7I|Rw/s&#!>W[OQe/\Ym?Q
J{
V|_..=4
j.j`~u
[zXBr \aGm('QVAB|](uʮ @Hm8|Cr
rөglP d`>69x`!"(ґ
3mOw "m %{"Іf@yStHst(z|[K+FKЇe%hIiKǵKl>xM7SqL:k(/"I
AEoH,2GȀp,U|=_OǥT7=XmޢYB \SR<= M&d+?';H5P/MH $Ns_+7NЋ/16MR#έb^=Ka4%ZuYFymvvT
Crk t_N3"(CFHb:ϗv&`5({zpDbYy+2s;f4Q?71 LdqM(-aon^tTw,U"=bv#|N4,1[m"
s ,cǑ ڼD=&HΦje$AS h{ zDB1o
帝!PfB8;cyTH(/Z{B^{"}Y jTy0eژL淊3eKj$}p1a" jCKޏVSd S8?%""Kq eoTJOjo XH{ ,f<,&e+ۍEx@ S1|v\Uʹg\̹F]KjeU,43ұ@tT^@Q,^HQۻ_
`Y6p4 PdS tt'oQ,-q"=!GHj|6k~t[&UHuEUfVu HH$\gC!((ILk4nJl&e=N7L!gj]]Z»Ed6iB F#2 OK#Z~u~:&PGBqFJ]Z0rAZ@p kwQ0w k_ꅝ J-×,HBP{u
ٯBM'Y"Y価8bʤ"/uཆ z#wFNNrKlds,6I\ I }@2)XT3XW h#6Jx,JA9E$82
T=ҍt@C T Jw
-o ?gkwA agIc}*2yB2^|UDt8[V*RݖS_ȥ%+}rXjU#(|w* s#ZzphشHgӤnP3 20 D,%dv}DʄbGD:IP,_)1oAٯgOABnW?IL{gcZ`gÏ/d9Qt\{)f%K2 T9R4b\ou/?9aqvg\fWA ċ d4_~P%* $%R3k$
= wΟQ_Lfe𭯊݆~*G\X3U.J ;$j
9v^ZkZ kiʔ6g>_|dOIyeF[vlIZ4്=C;E+9P[@Cs; ݺV{gG1iBߕV)d1Ł,Pd0ۿ Vzau`5'&|{
RLS2Gz
hs@"fg{r KJ4,ҰteLS:<Y =ۥ=/GWO0/{H T JeA $~q3qZUBhqp
t@EU4. XICp>Ӄ2 /;Udx]/nmJH](
CYىp{Z8>gF@OGF$u5uBD 6 sMBK JxP8SYo3pd` oeL Pܦ~x\"ScӐx cG>cx:G+E ;S&_nmwLv|sBO ҆$曫:K | `taqN8mRg5is6[ǪRD;>T18kic\;-zpg3QH|ڤH$$z#Yۍ"3 `
'~'82 Bh1#r甈|A\%dt ^-ণ` 쇇e/Um Zn8g~Ӡ0[LV`,$?K1 &[wUn'څɵ(V s8>8 (T Fu!C<Ζ 2h+t ;tTHT>
Ԓqv˜!]m:JUsH1+a V(:lvH;uF
{g@qiG/0Tkdh&%iJڑ7 lڪtoH l OM$
(ւKed־l
OX[fk)354oEe !ZŒ6fո;(R5`fj),f Nv~fBl)jGУdM :8$]&Ji9RWkNXӎms*CGֿ{z!hH|H'֬>E:& J &('C-`T3O`G "xSit ?(%wCDctCهSz8> ?4&Bm f_x6 `
=Ɉ& ȭi< hx XL6Yu S D97HYFu W2zq OnHЛ@NU*B.l@m N4[u&8^yhl\
[|:̣Hl` X S܀j_ⱙe,o!ӞMA
9 npg7G
N8A Jd[0xh Ea`WI#͝ZK1ޥA|( ;\E@ڜ;> K,k]R-tL,I"' ҽ餂Nj5! ªct(eQDOÑ4˰69#E;h'8%
=ޭd@2mgD&qM 2I{TemIEگ$ohDD|GyMܸ|e(yz92{
u*iJNak5ۿ3KU rK^ACJ~ :*-Zݢb/72ƱȬ"x\QI+3Q1f
S[Qo l 8)7y\$O_z|v8? 05 hR LSm
a H A *m;&bR &?z6ZߋAʮ N
UԛeB7_W.<wF !tߜBba
A~0/ԏ}?DÑߔ:FI)kt^n?}aBdC;A
-3VV'e$gp,PM# vcR |WE\t-<**HZ҅ !V
, fL"\:U}l6 zI{l4up.Łwo+!2`bp" M1l v l Fqіʳ [>[Z΅V8Xx (A~$1md;h T %V6y)BBz_{{5۴
q̶ı(wf?lL6r2V S>ju߬:ʦ *Ƿxy>t.raUQ;iїU]E-M@1Pِ%s" xu!otn*?vӻ $JE~QO58)K:z.ᅀYCFJbH'[d]jc`8IP+0?kLhQE(Gg4eAT |eg> 8ݥ Ӻ0 ug Li4Lc+:lڬ`tl7s'eːD<vLI XՑFV-Ytwp@> I|=dLЁ9DyMD' &x9߃E յ NK L zD*
-ʕNNhZѤu#I}8eir4WG
89k4^<`^04GUώ\©UE?:(tDu[[M'n6"Ge6˙B⩀%Yf}FiRF5 ~Bֈg:P[ |/:R)LG3~m51d6hAIPXCɊabÓ wKCT9Zi'bǣ90 :+Ǖ\bUm], \(}RLTzyaVH8K2=fnuf{'~..GbL"#p6 p7 nvb_^8r; )=iӘ}
PmeIP>pu~ͧ6ObF Y+=!~$c)ղGztǼh:䄜S9=L-h͵]V/` 6*9iK)/
ච=df
(|DOE72
NG[Jݲ ̳Wj$LnV.$ԌvɎ4!~擃6:)>.g7U_ ?ؑ%
U4(-=VW[t崭H2Ɂ
W>p;})u%t-.~\TMȲ %l.艿's̮ŚAMq.
V88~ (2W HӒ*EtXZd
Z33D5k
uh7QLy
&0r'iǯtH 4LJ L
Yo"ܠ[0?nX sB'mIK4V /IV j{ز!K.UO!(H ^LHk#9 ,GuD5+$IM;ftXgci
O=K14/QB@NnzGvpu qьu.TRdqmӔbs7F{Kx̱JosAdW:_d1mNaB:~'[i烤Cߥ)8%:CroLkXq9 ?-acm<.S z#ys@X_ jRu`~:&qy dફ_c''A~|ROl: K+e]~@Uf!0AUo?\Ũ'nJښO a:_ 4Yf@Y \ILobd(^ n Դ4O!
p3p,6&>]ϫ(6 (smVjNo w%dRX>=n;Q>@UIΜ`AEho.Lj?LGm>/ aƔJWBM (ZWjJL{Mg yEj$6 i)3F{אeæ =y+:/OY,zBThr]ћ1R%W)AwwZ鐽 ZV ƺvɹ8w5k ?b{J( ۬Klet }7:&_jg`}K ۃQO zQRȱyGvE5ahV:Cv7+
6OƗlz(%ڒTk\nB}:ҫ@{Qӊ#l~DZ5kJp}1bJ _ L0 DLP y1vi,\OHuαwWhՎFȀ0ژ4_Uj Nv5#C54}'4HapKQ 'XugF:B8Va32{ՙ0v`<<Lq]UX"̮LtaƚyXH* !:>rS~>1 Ź2Ex0OaFtJ֨Zsᶸuҕ|9 1>ߘիC]OzQuв`_* ]w²4$\2SO@
z\_"- ǘxM.;ڋ" q⨬qHhlT xq[
d-[<b~CݶRaZǠXhp26{νPE\J&u.m
eN!i4P6R Nhs*y*SW?8_M ]43 J--ħbhr{Ctn! ,;gqT88WvJZNQr#%yִߵ8ڔeIk4x{G nჰG9g~A ]QD4o'm!Yfv4s VPbdfoj]ǺL21RPKwZ~<((eTƠ E6=]dULJ,/8N=:*>6w+&C4#a0~ZI}x* VNɣwӈ2"1ۘ{M%5@[V ݝ%_
`9R; 7"S>jXDm)B\v -
Q0 b6>7}JF>c|T)0 p$1v䔮x|WV?R
XHXQ/
3 Ȏ&55Ȭ8EZϏ+>4d 2M;z&NF~UT8cL{ؤ]
_gOhN Wwza?da2~+ݏw}A,c3.|kb%〵VE <"y"4)sKл-S,64_`2-{@l3~^źo
FL:=X64G%0foQm/]I Qh%Q C.+KuN (=5*
om7 Ƈ)3sI*z,[6[ jyʻDDiPdvZ%L{v# gj O\Ҟp` Wh^zgrT'{xq8 /pUO )Gh?ⓚngsS1@ƀ{`CeiH`E P6I e#6" B7,|7"a\L. m+HWUn^1ܢSo<Lc?GxqZGclC
;~f'IaDD!\(rj|۾$b_=Xv zJ=z\/C%;LU-VM`!]6яӵ[*ɂ*αww:o7CoGgYq}Qh ] j++ ud {+`K6ԽFY*~~X5X(ΏBR7i xH.>`ͿAP4Qsƺzw VOԠ^ ATR]1S̮ F3hrw0 {z7D>U;V>WKLCyD eeJu f0s,h'")?zP
Lԉ>SM rEqAs#H
dߏ'o!{$VW XE{wbq
["8^g>Gs`,I|_<- #'S0U w"&NAM
Ke|,Hq{(9 j-)^QwbaWsԼpJVz|c#in+ÎOz7eG$1
f8zdהJ66ˢ Uxz0>d2Jzp>cϺy- v AXEBVj9|2:x"% $i79A/$7 e> A
^rӣ2ؤ+Ы(X~}K ܜ
F\jJY!E !$(a]? :ƯaGGOHܑ!LΒM{
4 u t Ԙe)"2PGoD=@Oc,|.
9rm@Q( H N`hilA9mv! $];n)C fRyl+k qy JԢPL4vB}`qs|mKeFBVAf..jB΅|ShT F,m)&|337yjaG eǶnSoK"ӊmbtĵ[t"<Y|"Bzk c607@Y|xh>C4Vn/ƒ]ڳI>.)˲J')k.݃+aTO/GBVӝc0JT~1֛7 H6O=:-U¥}`98Ғ/Yn\]x"d;3V跘[ kR9sŴmyYmĺ!Y0jo$윻8i𢑠Ǫq$x: 4),}kHKAg(s@TzBuuQ/7 fKrn جN2.xj1{ g{~j hIyl]D1nt(O, :uw\v0ֽDE ? ɤ'&9q^ԓ*;?TshIٚStA־RUz1] K
?TZpܒ ݻv4ǦHGb`_Tٽɷx%.4+rSfWCH5[cr3-{Ǥ&3 2.>sڒw}G x/q>b=2ؼc
tL|=k9>v{(v}?}v6M
{z\l7W|f>l$?Fshx)kð2m$qo Esу8 'h@|bCopQr1>
r䊵dņ=&]p@7J3ا ü\V㑶ETuTH ĩ=ՃGQv<Ͼ2͇ $_".%:
EmI8R@*MpK+k@)p` PaF;&gx#&o|Qz'И
K,mb= ̼_jy'ɩ]ŕ L\qv<8EprxT A<9h/'j{!`Y9g NZ@V_]ˬz`|I4,=p\~zV?ZP~NRV#ez@@Y } gEk ]lx K= z|"|y=Bg:>%#4QG _Ue~<~U:$hɭO@caꮾJO/o _'-Ӌ?}Ζ2s˔^tJu
ɟQIV[ƴLp8B {;[O|l" w 9J! :F& wW~3:+ZRЊK .yS45[,ZR txT lcNu~shPI \;'< vQ {zd P5}%qo-
X/гk
7{LnHSX8q6ק9>k_ ͦ/ AY\G^rG
8˗
F@Ix5
BjTc::l^moE
DjG#uSD\"cd" >P|K]5?U
6we:
RUHs|Y , X_,|_5Cm_VEd"Ҥ(Q W1;>&ΙEy#ߓ+: 2fkcs7&wy&i?{Vџ) M9jP⽓t$_ymˢ{ 76=q KH&E6`FJ!dˌêCp1Ds*V 5*h7Njqwe?Ms9!{*b}O"19ղ-3Tl:X516hI}FܶիE79 ;`@R5#㻈ca܅Cs*4V4(%zg${y
ЇpfK&uH,r eA#@>b֔ٯwEhKJY1M1w!PrbwP2% >b;rЅ. ܱUt~HAS !ڔk#<-_j M:K >=hҬ6S9J n:K&^MyCTxX1Ei.xrd:] XD a5C*_'*Nř^RLpi45en6LՈb%`^K鉘q+ Pg9BG uZUTsz& i
>k[I1v6aNSq$&qU Ĵi gF^ypPdˊ},,EI?? g"J#s-p-au#9 W(ÏIT126cѪk ;+KsWDۊd `W.>,' A_̵Qv{f9TDl G S9mb:"r0K$UüXkD _H^gZhEfEN@ Q+7&9๓S=֞?0ϓc]>Oc9̷jIKa{DZ2?*gl?~ yma& +;r1shO+^mo< |UlbJvY8;;kvyq2wK}5.:hXZFHyY '
F߀ɄiKZ娝\kRBoD o0Go_OV=f%ԬP_R 0S'Po" ?^k;bt+&)
IՒrX/&)+0ik%# ƗoxTϞc:9}qezf-݃91ɄLw]y3̩cd;pj|8Z=\tꂅbɱ;l OI?u-k<$;qX;[UгlR3Mvtp ?A fy)]jy˵
adM?Z,_!yVqek9[{s*lc(ˉY۬Ixް'?? T_! z@Z5kg@%.W_\CtFYW7/a] 3ꎶ)bQ7>bY8d2w&
nW G NFĔQ⪫dzσdՆ8^ ?X3\إANUT"G04o Pu?P$0%e8
Nk%(:Φ6eCةul#<"FDTO0xInOxꝛur%7xE! 삮*VEiy`PVc +Z<-@=o [Ih eAC3 s L7$ȋhjZ -n0-r0VK? &Fis>E%@Ux p"Wf_%'&&aEq &eTg7 4Ob $o+ ssY
` 9tGƯ^Kwk iRy#\FOv9
kX@k{<5l-RNJ㡚2\npByVVf I
&G<^Y&qyxϿ{6":E6O jשp9D'sEڹ
p6%/&)Pi_ŝ66,zb$tǖ> J0 #j3ە9̚[,rȓ4؇Plxg'E1 &])yVSLK 6u h /* #9cw瞧犇LH.p
2QW=cBH2܀c@#k?sרt^pVHVI s{vhna!m.ZtNP5."rx@( iuH^9ma4b#rx *u8ʹP(A 6uLl rԛpퟋJ
02reB`bTnT.e= 7џuKeÞ+t[`z=^tk@ Bu\rjVHi!Zڟ1'!8 h5߭3қֵ
J B ]?|i2|Eccq .t^px6;ՒTW{KajnթV/oWWo sD3woT
+s-gG9 Tdy )xNd;SWM
O!rz孺 aD7,2C ۥiJ}go,5:h%ͦ+^z6nUvxg fM(j`yYe5l3 B=s]O1h4DG ;Y%p4l%N&3J+9K ܔ0i_ld6E+ͩtCMc+v"dϊBH vp;2O[
a{8[Ն' ` O]|GV5W!-e}Ut,~gȔֵ;Kփկ~}#Dnچ6 ])GZ
En FA%7}Ӈ^Շ
a }
|(eF.y5 0Td<"֪!+a3xPj r.hK! 8{^t \݁Bo@"! YwJ H) 1r*dI7Nӊnyj< z;hw 2+ Kt Yh,d*l3mb'fH1!1x }i00W BW $%A
;*'8sGoHZ F {g!F`_E[mlZ r%5S\G1X;>Aca ",Lm*Q8GBdu-J{̌gC6 MGnB5u)PتDLX܃jG= r:iNŌ{.T
ĜGBrrn|:/ ]FsCΠC$ﱆ<ս
;s$sGYuNG;C6913ζ%>AԅuPǥd8\~yn\Y`JgD̷~ BV/v?Τ[damYj#P >rrD&w>> fVkJ+^CiDEewnaŗԔbl:y`gA[E+ͮZC(ZT:IL9y b? r@deYwvj
0t1Yﺤ[*8+!%B AL2'@Xi Kkj+13z3}:mhIVB@ڃk
܍xfuRɍ ? ؘ btYRM:oBiIjM0 Y!_~ y } o8 V,Sވ26M7Y^ΣCeپ 4 y>` dP
ű0,"W }`1;0i41e
kGOtJ7WZxqCk ML -N'(P"8@6rΝ*o\5B(}m9sW
SOO^ 'j
%y;nYǶp]ZWEf ~mc*&BJu!3Kf] xğsKYQ'X%:g5IA{4'_+/a!iU7nXO<ݒ ft8f0&#br0ӁJHW[lC Y*/`#5B k ϶0;}$_t-hD?Zv'=VAN=P HXfה 56)5C Z@`g=e~K
s1`ȸ q Ϣ>R'^go͝MT]%[>zTl~j ~_u -a0꿩uUv8hRRl=q8bO)AkM!Csk\* bdJl|pOT71݄Hx&<ۂW<E /C(6{QSn NKz]vJU4`|dY[zc/L[iOI8pmCVC
#xP/
:[<Ã v|.}z qlTJkKhJvC80
o2Ğ{]>$^JNlo0zE!)oʆ%j9@ip;^-}0z-w(R v1 %Fh6\ӉzЕ-I/V2
֕MܛcOg˟NS^{M;̬cp7Ól/ | yzY[` v6qvO̎ fy0Ui3Xm79YF#ZKQii'ƿm;۸M*_ İ3~bxkN:Kzj(jb SkAL@ʗhq:נR|DN9azр
PU!FGd,@~bA]KmV&0y ]
Fקٍbg]ES!4`.| z_G teď)Kf[bGďYk6je߷
Ѵ'+ qJB8rxNn) Ao8'^uj@X+&WG6qz(k$Ķ-᫅yԞF+X!{ Un8[Սj9HC}v\?u8J
kekǎq, OMޜo4طd@Al'"!qolֿu˵䨈~x= `H4& g#_Ȭ@NdΠ&~yɚZ4QCRo5 p_. b#x,2C3t^ |gE#{98A,h$bR 0}+66_`߲"cev < :
g YX9ց
A,bNr9dU_u!$!]qB$>=eAST>2o+5-_v c.Jdޏ'W;%qLVŲU} /H}ʡw!KBJ-ΰd B?Q߃F7zT¬.+[ }"< 1;0t7-YQ<+'\ I&TUHAQumI#Z,]RV^
3\ ''2? EE\:u:P] ?p+
Y37s۱GK9{vZc-`"R9k Oa,9{R8GO佻c^>΄b]K;͎+Na(V@Nvi6,TРH]; IM&hgH04ٰI%[a!!ۦE<"=[һ &3,> DӉkkc!rܸ8?&}~= w>
Ю>=PV-o0lfFadضZ"DEF7vWjm Z7dp~#1&zX <$E9:OK?L|df Q^Oy[i
:
HhtST"3ֱMܫo _zuRCD"Ց7&pq4A_7ļy3n}ih
*&'MMN:52{&u_a2CK 'O@׀VC ラ_ap:@$U % I$ƀUTMiR% E6kիMKi> !9+54ʦF$Xe2.
y-yܛ9$J U4Ozԫfn7 JA6I X;_j`\da X&V#x͟F iָB)ܭBy&ܗۮqrBPň5Rwyrvւh|e-*i.8mOWE3{fk? 70Gi+)C|vAJ7ls1@]ieOv]mQtk9m'Xcݙf YZ2y1c(xܮsqZ @ae8uY? bb{mfq[s@Z OUT13pyh Y:rz VI# SM҄f\ɲ}+(נ`8#OCC u~'0o$PB\Y 0|gdbg<7dB ZUMr O I[ !Rz GK\2alF2|ip";咩t) aH?Q? vbOu#L 徿gv,kxshr g>3JSW;} =S bgָgU4"
P8f=M#i k3i(C (y2%b6Y.UI'vH}5G,19kNyC!d U">E` ۵y隓MD Vo)(4x,ZzUu9l ~ qQ! ]L\Nz
jL
I Q@N.MkEOhI$$b(-[)[Bipo@~6K1łHv돶a;K- B1o>BྜྷM9v$+m5Ki, ?hv-q鱞_Ciw=d>E'9HW&9ԵDQ B p d{..9ɨF \v\VMh>GH`e a\{͡O.Eakf-;w;%
*r#e_^U/'I 3O_]#4fzp ˒aoYZ
iaȓB8-ULԽޚ!U4:xxb9Zrs@zb!E ^XL)TN,quR_σBI?7`otR؎ GtO]_ߕ: XO~r&PDWí&KQ\heitĽY VkT{KA[dņY:ūS90-/
;TOҬ_cp_ UDc2R-$#s[pvhډXka#C=Y&yCxޛUˁХZ6_1ُ{Axz }D(yPl'AZ.Ǐ^ J "X9C;YbށM" NxUR
\&2O X#⫯^W
$>2
匙/˟OqeMJX)L/_YQhk J~KDf};B_IP7(I-6xܕ·9^^Mqf =E 3aA[t247jqjcY 6 1% ,83y Tr&G`ZL%P. ·mi3qq 0Գ}y:ءhG z:~`>ƿ3r*^1cV @y9+CtAGkz'er lWC},X|,Mh]d䝉 $ A F=A*T0( [crgD4ٮ+ĚP~k} x&"/
kLK pw|Ds/
k ]v34 ]@ G%(~۞0LĢ|F$1-N^#S i WcOS@3@Ui|h{[xO/B5?HpӞ[Z%M nIiBKKeO2pN[i K߆OՃ( rhz9y^TUq9'719vS&KSY_\px"cܵ0=GSTO|42ks3DOL`:JpQ[C:>DZ. hVn6Ց0jnxa ެtydX@J}-o#-לR]9NC P uAB 4*eܹRO r: +T.!3?B (@ۊ';zE<=- I9 }wD(B |Fhw#hƎ 5B}
*{]^wp`a#=KaՐ>X N$eJ`,?Bd6Y.Иs 7x<)a̾no v(6C߽(sX1@yZFzi;߶+%mf_c
UXΟ6 ulq;z
4E Fy *OSO,& l+:3F"ֳU5 CIO@t^. =AŊW- f{+d ʭ&zAu_igOC X\xEE %x:Љ 8DG0-~H_jijEetn R.g: ItB"Ty
J4㧒ZuDZBd6=# LNS.μc=x(w qbL|Zj멺 s0~ p7 hV4:ǃ GDk $ձzʒ L4n2=Q &G
<`*A(2%
[VDdϥuimIΔ 3VLukd@
T9@p';]hۻ߆< /QMn! $< hRĵom TYW$ph}=
C !?zFp;4WrHN:O"Kpj,~&/v[mOp݂ul(~*}N\7^zI+ͧMm4xm.3H 漧xoj.j[T(>U pރ)P>e%|i2vD^݂ƙca"Pk<ɩ#zfZ_i1bY#fp ǭZz=2@(iP\|`ihqvFRj@ͳI
,ƘWYGR$X f_ zзx$NdB|Ү}+R5D4p[9G.8d1X)DM
b^6nN}.,8f r LL) `Jdt6 ȩʭ ETM]jSslr$: ۷IXJ` @+X6$.SM>vyycO8~"'Dy>ڕ{T-Ԝ%*c$jh5C!
&Gs' Tlc4%ÔL%,'
ΕBH%fv=@*Âxw!1/(+0S7 ӗh XIi!Ai SU L
4 /߯laB29a{ (%[^:F 6 @okͭ$kJW8\W1pì>sk{;]^CD#
oJe[ƝQ
E 0n$]dER L \Vv ΡF
QNimekS= F#)KA$˂9{lJ-?AVrt?%8{}(n@A9Ih@[hdEy^)d_[s@ݱ!,yPk
#bVؑV LKi=dEFاM⅑3 y Hա/
$
^Xf~L?&銨^ζWmX|l31KS √
d]٥bu LvFmtNTsIktrx@eܧmͱ-8'C 'P29
*
?tĿE=S9w/ akw`t!8k@9QF j+!cu=[_),j0"mV%iZ}#x Lr2zSCpUɁlE診m{v lXڥdBi-/UzCy!=; W\MIQ<ߚ{pr=u*!yҥx;4)9چw^SBQ9(48mH}U6#k`j$uQ-y8¾R_(k\ 1 7Fz;Ymm?^Rpljd#j'^ hRR
, yȜ|ޤM^1 `?MyjXpc~cq%ڼ4vx@˹JT֑Y
h` A< 2Il4s0 L:6➟ba.,6|Ǐ!G279.kg %u _ _l^^8fP:L?n /0vpCZ)e`3s+:9/&{:,w#zx[!Dp_eT,* ~" ; DW if.a+c}' y
m;U]ķa'?N
<۪6ӰMÔ'bӎSu I l S@/-\D) JMA1oREQ Hˇ2~4vcGKW ~%= Nhu4RTKی&u*]o_.4x TxL eYjzL^ "q#AC>«2s= 0faB`yL P|Z
M g+nh\ j8s+-9)q\(G6{.?5I.,m$T;KXsVI ܢ_qx2QuC舻9f*+e)|]\ʢhDoz5/mD$KcMܸJj rpCوVYۼsB2Nj f 3l 2)LaFc@Eڦ+P wI[?qcVNxYeBN
@涕Z?D~^CBXyC)="\ LM&&9Mux?ӋrN玦`k 0S)y/GA+\fbJ|2,3C
P;*ss[ɏ W#9kǐ+Zw i荆v0^ۋm>s(O H~xIc}]͓س^4fh5sq ع-eaYʱy&f
Y~rryiյ{673?:RJlT
8Po37SxC%L>ga;mFuy49?_ X9/ͲrO.H=1
42R'vCVŽ#K PG,Έ-^9*e&g.ulZ2PIo]e v 㬅ᚚ^2]+R/!x'~k
_fsx Kj[^lH[`ܣ]k`DvW)8vi]҇Hij Hp$Λua=шb?egmEMs$?"+nzr-ۏ\ `Yݹ Crr-YU8--cܠPZkKANJu]Tc ո}5¦c64U v^MTF$%b],].w) ؋sp0_ 'D Y $yݾ}d@Ķ[}%Q>jbG3@(,fh&iKDM0UnU/:_t<8^}R')C\ %N*g ۑXf(~'*d@~J |R?njGNf-OmA?o'
B?UΑS|zvzJ֥fWwcg'D;m`|b4U7 ZzvfPD.rdKQ̦2JlW`ZK0=MD>:?~g/˱WK\$ϒ{;ߦvhK
ZFv>MÁ-ao" q륋BwE)v9Uѡ)S|
5^vgS[OU
Ws"'=xuF4)A^ 7 rs:OYS@uCieY{ǛU[NN!"#I+`Gtv 3:Tk5n1}
R&X+Zduug;bv صQ,J~Kxwm07`@Uh 6䚞 PP71K:,jӥG=aK j'rg=}+LBV*}X@Boi@9l;I*'z"5SְKB{M\xxΙJ8ւ؋[M3#
kb7Q ]\bۮ8#szfѷ]R^ur"̧~~+g=;l& ȟ.dS?=Id3bZ
hw>a兗ZVtN,# 2 J\ג~ eI$[hGN,DZ
?_x%ކ{5XBe.z)&[ݍ kRq)nϿ8]4U/ڃ )] P .qBQ$6EV\J9M'o^Bp+
⠬,W9_FvSv[?V*
%?=8d@z=_5Y?p r4ѽ-P IȢ 4Чdž+Y~&~AU;p\xeQC}Pz{[}e-6hW,8SqmA˔nRгjK=X5c#y?uq`4m
6r!aٵ2{w}Pz V;
h`)Q^\AA!0dV)دbc> N`D3\wCy9>u
e.j2 m'q+f7ݢROy[gP*0>ҩ; P枀H!ݨw;W}2ne1 O0(=>Q*S炫tW
:L)AB=*(N<}y/^((ZuD@59% cOR}_:.eӳl,3i߇{%띗@2Ѿmu9!<0\ݗ
v~`]ך
S95DٽYv Acr(|&šOC
WʫrQ$TȮZ`,w V3~o~&DVfmyD$^9\ĩj*}uD3g.~ؾӨܴgω ދB|TV CpC4A؏
gy :[ř X[k '8e\TGP5/f chm#G<|Q^E3QL_UTa$wGs"?b_?l"} ,Npo DutqA@}^I 鐓eq:NìEa;RrA5`vxzI.h`iyr;2{X<$owx?y1) ,gomWxmˀ(f}MFJ AJU$-έ T 7(] '+}I*Ϥ'2})?`x݀}]hY>Q7yl*TJ\_'ZA wb-kAU
x]_gs{LS?/s$?؞ӵuãoE6z2^HxQv_ʈ1qq+ $Iz3bgjƮjwuP!spƤyV&(K[Lζӓ31ޔo'JTU {ASPXqW d8
?ĨiPx[ArN>9}:S0!HN^ ;@);BRm+`"T *v#'%Q * B %jS(xx>Prޔ_
p7} Ψu ;4$ 9[
C:>JiőIy*Ou<uۚs )ȹYQ(olrhV ^O8˗MR&,ҭǵւnočpJ3/ =.{w&[u^i#nvNE>?D^h+0z ȁ$+?H( >]i,F3ޝ" !P<ӗ0oWѩF]Afu AL>`ܵ\2sO- f cѯgfZ{̑%{ $5V2F *\ñIˏ$$
H93u8#/烷24zl
x1 1Dl-A2?j94 ,t=wJNS sGØUTuV,`iB=eR,i6]]>]LkLovT4;#Cr'KSEB D8OX d
zQoX7A16wq wdޑ?ydu{Iw~F~Vl^6Nn;q" ]c9%F 7۵3:sS9*y}$mSN Vv[
bU2I!86
WHgi# L#O\ ڙ,T{=EWdG4 ;>l;q՝Q^C$IуP e^SοNI~~L J\\IPEGsC=ht O-|j /QXM/QS9
eikȑR =MZh܉xe8˼XFEEh$v2kuixLO6J ]̱,!||q`Js貛KGv+}LDf1B -ff/1ds
I-:ȕAIC?a J\%Ӗ Qfۜb 0 miW( AR$-d"`s(ab2|^ECUn!FQOcNTik(v_&Tr`N75߲v%_75.49Nw, yp.Yemȓk pO2&8NӥDYiůDf ͙ VGuDyK*T
.Vr &,*"'!"sU eޛXUSDwt|OZ K|CHkP]= Āty&YdbcxJH Y|ISẗ́M)/Lˑ+,V.Z'h
*24}t:$O-%d0FL`
ەȡXs~(d s(5_!kㅬ&G𮨥6scb/rCc/) 0z9>3sj I 21q)ȕe07 b2ϵ`Ѓ#CEnJ3yAF>$% 7]c7 Q75p`)A=k
vU@-pf~ $x <ȕ+6CY
U[
N"3h
li%q^Z8sbŷ uFI9nj~3Rp=\+dj ?AC\
ޒiH0K^DAWmo} q"~s[
˴&z$R۲3M>'KfmUD2zN@n [CA{/y8k+Fǝlآvpڎ7tvEmqSJΉfz(Y
nhr t@EYpXUB%OxXNAAtܯxE7>/`AYBIWUBy6D"rmk =]_|D)Г43p# t"q ]
0;>4
92&Le6p7Pgaώ=WA~U:Ąbnn<6 d^&eVё
kx*S7qN{K#l1XZ*tPөgMס[o_+@/F j ȲUImX. M÷\[NEԜse\FEpY1*5% ?d>Qd6\"[|F=Kf}.r)B1zEB* 猰21BRgMs9~cu?H|sл\Թ-yJHަR
' w3Rƙ҃v{vbC딕Zj)T#b!)2Nh VfAq/~}4z r.f~l8Re&"/Qf<HHeл
@EK|Af(UX2Nj[{P؝} /w
]e&;E;n(
rm'iMZl d?Z6?flbȖnb.`?Wx0 &95U;¹jT + $<
^yƉp: u|nD斃_7]5Y\A'}ߖf vV-&tQ٧`/hiLGkNt}*&tmHz%G-#K61H>*5U:P@ÌVĜ;
{*:QGe5K6!7SHb`Χ/3B\q`Y.%B:,ibsQ*i #۲ҩӪi0B|GW)r6b 7UO_(
_㪈3& ht+R |ͳ}[st(MdR*'/[ KhYE松L I}7Hפ; *Bt
G&)xxr ϐ,^)3 Y^WMN./19ioP{NΖ>54f tWp{ns@ 'Ydp}20 4k]Eo𝆹TlF!>o]r
G=[{ 6qް<Τ6{\XT@欰a8Փ" S erP `D7*di4@LzN+{H>$8EobU(I VZ1>sNj]e s b\Hxu|&u3C;zZ}setƁ|j}M_F'k'AJ D? TT m` (jz3&_. r / i/h{FkE>siX r|"+ '5/R rB+FG40nGyV3e{p@2AlBdbaKX` D3*O_9h jaΑXp M)dx|lYbʚ
"o3la<_$ Z!- 3$PkT/iO+͈ \uD*[T
$j608zZЦ
l{ ټ_ ^Q_ WjShFگKxBH6y3ד)Į?ы8F}U=! L0X/l )> M-5 m">"~ YEh= ϗr6?|vwN G"lg$ٻH̷V42SksTY1|\;7b>p1O T3< E<
BM/HbMZԒ|:LV$V$ _~M{S"(|NY!jƑ-
V t+Rz7~Mn7ۅ.
"/#7wZ9S=yI
wT:hQ
r附sm\\
SIoLQ+δh@]s+1zbh,}-( Y>k)k9tbouՑذ
s b|SY HpuVK*F M|yhM%uSx)
F ĩda. Z+F6ci#_ zFϓ,@ v1tkN
u~(g`MŹgleTN7jo
'SXǚk qܠTXɲD,xi[Frpa]Fmj*҃]MWme$RǏv,0)h yi#S
[4T%{(6VRqxKGcqLP}\h פּOnxJ_PF6e kZT\U@eP tytTo$VC\Ċ[` P'2~uw ҘpSY= \ ;9!i( YDy?f /|]nq݆}B ^O<mJ/ :e
i
Z5EIf/Xj49]^@gUg/
NEd,WsRMxEY `-HI-%A8ٲ O;
14V$exFG5Kr ,>Y_ LR!_ހSP ?W@/L~ m/Ԥ X7 u+aǢ
S &SkYNN^JcYhaG&H4&z+ǎK覽9(6-
;cn]MX>8 W])hMF@N[C + =izk)'YM| DϛZ$rc xE☚gJv)tQ.
@H7F]z]@)|+fQ&*@Mq W" K:' P!Kw˝o"0eY
;l@6%z7emM jQ̻OΒ9Jz ňIS*] n,R!-D Qbuи2'½Q5 kUw5 f1Q76Whsa,O eݞtV 5TJwR- 4yJ\MTZB?dɉ`sNvfݹͤ)dl:S.u\qo, &MU5ٰ8y},q#"8OZHZ׆K&R>We$ gʐc౧Cth.d@۫srȱUoY0a<0mKhL%yNoƸ슈*)-Jƴ sy:~0)& B8"NV;ߊv
79d N7mikv i`:'9}Vh}
cvݱE bscJ[s'POip H#ޙp} ldq'_@>x b,
N;WHɯjuj
h;EHNWϖƳi I{ '[hPSoC`c=D3bJmG_8(}K9o`S瑫 ;S* [WQm6ˬ3 F4
'&,T&(BNҘVAS3!K!鿽dLV#7
ٖQ"cΈ- &;N);v#lkd;٤y ]iA {SvNW 533-`h#hXQ
H(焻$DE.ŕN>]5 qdzV cH.v?ew`oǗϓX@e \!Z[֩MDFGz|4̏ JgD=X^,7UpUd;Bף 1zJ`.MGi;>Cy[+s5fx^){wg}x^m 0/;(|H
7Vx?1X%VS@yJb.ŒS|wg$Ѽ |Fig$":&ҍBtsg_#GK Be6 'Ǚ*y۹%4`E(S~~pzO:'Ռm+XT8v.Q3Sђ4ul* lL"!2m/l4O B2_3"m'XM? *y4JT6goV/ǫG>wuZQr:z-۾?ĬL ۺ+ AwQHbj
`- < 1jʬJF)q(p Sc G_ &4T0\{_qmHUM41Wq s*0}y.k@SR&1,0UM,qםwMwj69jFZrֶ=*r6՚}xtҸktV?$_(}LHQH=. 屄ԃ2etD2/92,8S`b½\qF{o= dˊY68l"_Ӝ.Fd
W8I*xY@n}CS bZnٌRV$?`;*綂{) ai2kCnjAdW~s
ךNbza
I|3J5N_Up\1rXV?0el$F-Z}Q%y2}a֕'1?8c<9ȦK 0|!aZ ǟ#^ ~h. 8R
vgf2 P[.ȫr3d\D/Z?TbzQjW|P wQ +-OQƤRue!~ 7{ im\|Ȩb _Z%8'q^<q!ޯX]]TNE*$T`, D~xQr"yxd=E$zg2XE4)l:q
n[k Ck Yxۊ]H.Ri AwKf'U3G4Ҡ6
34<{{e5>f0P[A" ˝PMfY(rT?mra(U[xu1::#6vY 6+F!H*Qf
&Fn>P\'&v[ r /?B[d\ג`ro}iSEe.Fs$=#" sPa)ހB9W+N4R4e"&4ޭ@9/> ]Z@
s`; v.PV[yJbQ.B+Ly4shJX0`OslOIH2 TK݁ :P dB,lIDw?\SjS!~ fQsZ{MPǢ2c$<3[W0nCs< (3`"0 XB/l;0fKm<ڬ#acj6HÝ ie ߟr/ m:Bh"ծd`1{r㙚)kʗ9D_& _U,]8Q$?I`ujV+C*~d1 }v^fRV%!TU
^|6lQ>& ;2_䘅q$vVGS2 )l02$Mx\3,A<c7` qH[Q?0ΘD1u(
4Ċ{KSZظS pB T6WDj@.|* G :ꣾHF, p ʇz؈l\O
"QvEH J??9Kl SU"}]q/=,lQP}8!Ԁ
/L3)hJ0&=څY S,{)#N;_C,sEΕÏCO,=siqo]ZL\a:FT"ӋhpwEl
EK8pֽ$^*9mfN+b
&aL[U'iیu"Td?XFu0nqzVM6,iI[粆f QFD}a<Â%kjC7:7}f K$|#{asӔ$VpmQ1Ξ`¥ʘ 3QHV6Aƶ&ex;%gA歲H|u%QFRJ~ڸ5q?U3daUt_ (~9 ,$Ol}6ԛk)k\Q/4xS<#x$[s>>cp)*2ǣB&4CͰD ڨ?w\a: 9 !{6Rz л>K= hhuY2) YL
C0ڈftvlVJ- mrD͌'RtLp[Qlnv JUv6.dϣ=`eb@P9Ԕ\ ,^ܚmssװ"40'+*y<٥Z5JNFȵ:C@t:>t;kN3 FM;8Vt(@nʴ
_N**;3c}Dйfz.mqʛ ?0Inȏ?{3(N E."eAs A믧xcakBm 'lW#Y,8c$dDbUaigRQwL/ft` gۅJ jQ2v:փyi8oS~$%{9Fuo^ ")Vzdof `:o뵚C~Q 7fmZH͟B܃!k ?ezQ;Ak8K^yTܣ끙E54sg
0:wK3Med OIBUܼP~v ry3.`BNϵ1p 'ٍLIpw2DK L}%y+㵧K [{Dkk13)Ԟ3O˴B@D
hL~{w5v-2_e׀HLYJ^ m)%dܝ@}vG"r!&|n2Բ2 J$!;© 8 ˨g݊, `0lnK_Rͭ@ KЊy d:+t{g%oRy#{X*zk3.2 NNvA3aUhrsSS! \+kCNfc!-8_&!߁ E^@Ƙ d^*GB̈́LtC,SCnv'Hi=Dzd_l7ֺ!/J(IչR[}$ P~c
ahV:fĵJDk:;ZI{ )yˏ-"~ےE*R=عZq?7Cv%`H{i^;p&ᅆp*rM =+* Nč*$~ƨX +%!I Bml 4i(EX:A(3&gYxOsagEmc]
WT, ȱVn@6?[uQ&އw \XTќ64:(Co0yI(\SScS1N/pw֪5@ܣVgV^NZcoŐ՛+Ȕ'[ /.7Sj CJF+kMTeisM HAߟ6 S\Dzr!/.]!nKO[b1քktA'1lilyb(zQWR"=Q 4)(Ã/S;SHz>u(tE}
uX %T$ h;y!30!
o(R|<ځsoƧ5 g%H7L0wӀ9^^[*ZN_f ԈSi0ci L
, 39]JJ mT8H隉,hUӓ j&ۦN3# p"5sQ['SXaWDp*B@fTgA [p 5πG >f` ҧL{:R쭑*C2+L~yab9ϩǒlGA%HP$p3 4 \סNXQTVN3IeuYX,|Ү /8h.ZXr}(G>2Smy7Du zwZDQM}E
Ϫ=VcQDX iL|m
ɻ po TZP] Ōl45:?nuGwݻxxJ2y0J0 A";0sğFu 6o{,b:N}xB.yy*A
>vN ^8~yU6`}?Q ě* %qI݁hTB ~|C+g×^&>D(N7WReOJAM"ARs@̵R_͂X`?}n}/`B}y ˷D)EKYڼ:|AiJP=BDm=87҈?'SqB:ȷ5fdD"YeNK4ŬZ3t QS}9Kl'8Qה ~WY PT|tD ۵؈`Q˖nO QTa
ޔ=JA_*!Xfw!dl1u3 }z%*>wdAcL ÕhqX?_g$V FP&cTEgQ 7/= KeL%Bp,
xD()&Ӈ+ @ JeevR-~J oʘWlAiɨ$J29TmK-\v;'PJNkaEC見>tC u[p땆55?- |3J'_R +u'FjR/fS>Nw>r>1s zqU.y/3[& $ڑ&:59~fH&DlHV$O7|HƇ-RV S
BO*3j_WtNKfẶcپs&?uG#b^L*+@~%Fh~v38|_u" t
w15)ЈqΒFM_u >3L @cQS0F Kɼ,q6]t:^i+.% ;(sr%wntiެJd yO$ǜrAԬbxJV RHOi5 z0,W]%̟%2CK +'[,Y"P3>* GRh]3Z頖>^}TGޖDyϚەQ.)Dφ\u
ᶣ9fȷpTsw!s6 l(Jy:JBwwy/ˬ%=~8S+y)!q
6R ym)KME-9',;xV .Da}ɒC 7ܲ,
'0 ]>W[U
"tK<"*(R,x +P=.OXiW`xMEMw6!w1Np ]*|R>8)0#B(R
Mjܛ}vP_l 5Іr6!)HH,m@%ܱ^&ݿ 5^,X1M<:Ze= ͼQVp_D D ʡD (p%Y*Q7X3|*#Il2ř%5_{#%ji3m sIzz];N'Ϟ"ɍU@/:}J4^j\
3,{*sW6oe}JNb7ܐh;ch#)8!k%' f .Xiys&VX-c-ڪ-MR=:TrNz7V@ sL4&P1L>UmiY=$=~w?C W +}83 :' enH^ֈf:V"1 ?ѐynZÍl tŅNp+'d>_L:NIRAξil.M tvf c A*AY4?L~
IH@
y( P%IBF99}jJly0R[n5 ?#!
?jkq/dTKEi>$Oe/r`q d*<d Y /68bZ '?z y ?+ : Kll-D\%46=֑|Z72˯zޫn!ͺJ4;,iN=B `Pɘ,Wm\
?[yh__e7 "@N6 ,[!}dqD/z_I/hjO31'@. /=0%yv]T! ST$p.GeqԫU\\ }et" s]56Q~Ƭe VOE=o jݏ[,mD57 |Wem8 Z T# \LýM:VI?q|= 3"՞hK6}T[
1~4Ye33@Dc)st~W
s }
fqP+CBkW3z-E8xZ^\%zޘִ¡Rmr[ԁF!*~Bpi@yB.8Y \ Q}cf}Wh#/ үE1xa
}8)~҇ÿɽ '# =G8' 7y&`^4`ڲ Dn9327>W) Ff rVvOOKڥ
(* {R) P'G3f;' <6ga
! X*ƽLiA|J l 6pGSkg
y]ψtUJPiaa jbDgZGz (9AIx
7(& ,Gd{}s ~I5N"ŗܜ7|s4}@B*J,qVd1u:Ɖӿ,P<䡄-D *Cv9ZQaV:\,%1 c^s(vOh&x*y.}?gj;n 4!,;+ Z ?A eO<,?5Um$,TqnJQ%2 # Dqv[y<2B hߛo<5b uK 3<hVCG@ "rXm=!Ю3g^8ikk:-x6pm͐-Jy&pSʖ
Actx4]ߩ .$݇HℴeWV82=O3,ng[թpsH2.A/ =mD)a;'{@^fN`D- c;:zj:KcdYMШAv'BPZA)t:";@ Hrm
ywE̷، R=mE牦<\{TL(ݨzEμ"·.'`f$X竞akޘF`M)!|GGdBn \!2|MqO Az$?(*eഺo6p7 *:giQns`Sϼ"x_G#
`n?[ c eƦnjq qy_ H$F⟒6 mq?Bef|r.Ǩ×{4bmK/ 5qA{
lGmi >7-7G@6uk
A{6֥BMISO [ d֜*`ʸbI>|$f}Zzm=WOl!
R59Cޗ%Z˺$}Cf8o0S}| gX KLޞR4.aٌّmm9WM Phw,g} X%XEjp'ү d䍂52/m>PvBGzI5Kt:QcFnD課M0+}xK9Wޛa*jf9L69wf]w2pk} ^U@=| R($OH0F 2U̗Eݭye"KXMDT F W> ?E&fTEZ0(G S0q> :^@sYGo% qw:3z\#'<>vt<Οhk)SI M#w]Z uS7 Ȯ=$?ء&? G/? U yDz3PeT3l"ؽoIbA\r%$ H)_CF4&,`P;&F,QBDax "JA(XXBx$ ْZ}wqW)tK*c}@#lެ
J?I{(][VT7:u* [<.&鷨q
)5x+! M*ttYB ή0&`gOU gV T\IXLpWz-3T!p,{yLQ)/rjJ](LW534WH 1{0,㰘o# 䔆UO0^)QuˬT=^+ =1*;E3@j
Sխ[APs l) ֝waRxei :
f8tD*&ij/t.sgǏvT頊ɷ N>3\E#Pe;m
'gPcQ ,zk/.(62Uv ZXn
|8pNk b a^%)jG-2OJ2͋{P;_u^}#?>՚7.n$pNz=P 8ڇ`[
p)bB0xz,>v+pJf aLX|fJzCd
9l!r/J_JI?e^KdiP8
iD8?\&Hwv,D/HL6 Bhc7=pws74E
$Ǐ9aԚ ~*RЋ*de"x3}e l^ 9Dc/ΈJ{8 W&v Us )
+h eƄuύ9E>Mf̈ dmNS}OijZmmu7w8*U |u]^[wc!e>8WE2-EBl&/x|xDBLS祓
A z. V hȫHM܂
lǻcl %w`o dUznP*~=pwU{+'2o×q)
}MKüXys7I|<
통lG[0I5l |8j x_X|'ESJ!fC{ZD)~r/ Up>Xhs3>lV
9rii:P(w W5 }/l`
Ը +qWnj2 2kniTr8~ 6G" V[ܘCڤ:A; \y8 ·Q_
FK fl?MZ!D#2"m*z$4s1?$}jDN?Ul˔mhEQhᣁ HO*GSA;=TkBӨ0Nq'@*`fspMK,]c6 ؐٚ7;, Afص,:nu_A-Q6r4c ,ME/ (\U6PIYشՐ2y:s;ОvHW;M?gX~r9b,1DMH7ǡY'ߣI~ ߰=: (sؒ;"\#˭dr 2tކ /A F/?PrK7n(@}˯@Ϻ}'Х'2KohiU(s$WuM0SYu7t1缡agbځ@:UobRdJl+ '/g}Nj/SNLgrӪK4lHʖQ0 b{!Ƥ* 2X& }9A.5͜5~Rv,w3ZjCr~$_yaDHh+[m 鉨H iTJW{$^e~PbCTw
F,/;m@ͦ{z߽wQf,IJ3OtO}9yK=EnoƓc GQbˉi Lf+sD[O]?Hp ߈gȻ6gi0?,Љ5x Igڙ@*d
:u/R<9'fy7"@ӄjIu𡽉0l1!f[1Bvj[ J'^WR2յ٫2kJ7"kȯD4kSt84?v QAdIn28ƨCe®5GϪNU/ӎ=EYxQ2"P|6CwYO#W|RFѯ ͕$J IL%-Vfp}[E"6A8q{C;%5[I}V! envFc" DC0;NhP7FU~͢>H书vӉ<
7^Zិ"|.}]@|.< vҌ_oq>@n`ie+9j+T5}n78OmϐO!x%$~T
ЫÒN XL/hGQ9<7n?8. r4J èfJ4ꃏ*MMd jL2|{@֟L:p-34o^ ƺ8 JPpU{rO|q_`\TFg?ß!,z4n(#I6Kt0,Y;x910^%#sOiՄo%즥4P: gD}ggKֳ?4 ?Љ"VJ6 \ѡ
,
mx^3'
J|
RYv \Й_JR /I,SS
Z )#?tM Ԝֵ 3: `<9`I l^/v;
C\
A?wp kU=y*CS&D9V$!|
j0EKp㤹ؽ̘ѝllG2D鎪lcܬEӳ%?`a?TjdǑ 0i@EiLmy-FW2@-lw6Hk .b;`~"oiy= BW
r< ZL ͏r ̤%
*D,[:T ۀca$d]H1Fi1jbW?Z :,4 (Įe&"~.
_$,6;.h$ 7GlvfòzAm\ Lbz' L<.$1y?lBh/a r.,hl] L_EI9
y7o5
*kL#$5yy^t uUCPHAYkD$5^- H*C0QmK, dFwڔaTocv9q >:FZړ;+副iA7n҇
v0wrq | $i-#VM"[a]Hޮ2Ao\8_rVT A} AjJ @
|0)?+ CL7ȇϹiz& ʨC+;uNAɻa5-[Ѣ&_A%e$ u[ TF⪨ Jjx
YP2dNQp9AU5%]y%?x7>hu%uQg#&1܉\=-VC@- P^'SڒpLoָD\.a_:
a(r]#QsKs?X(ffcW
)*sa^75^3tJ*+XC+܍Z] BT?qR
|E(įĀRЃI rg9ȝkbnJAeB9ݭ[#wS<
4vsL(yS@= "vL+Uy0ߪ ,TK$8%#T'b;nӦ~̫xО/ľ$ F쫾$,5kDxf9)u
.DP8 sT9 Oo7.wѿREQ1U*-vҧ0QB ͝Ho$j6r&F\㨳RJsf `rw*X
5cڼ50Kd T~AI'V6'
L+$C/Πۈ0x JG_;MZVhAm}V@Lh8gci܈2l!3؞ <*uH3xى8KފJN'j>
ܲ+duh˥VeG/-0~ !cpb(
ƢT Xkofc!hofϳ<
9_X^Ren%7Y.K
^a)TZ
Єe/߳l [Mt,G8\ 2
ķ SYppCT2X!SPtlD)@α^ߑߵB{A#P7U*ط쯭_+ 7V,n2tr̐aSuŞ ]FGaj2ڈ *wE, ^ |۪w4{KTтEWt7%Oou3V^ZOS76 Eyy:0MA\&C'HZ^dB>2%0sZ<+EAˌ0@)^ج<'Hz_ ɶჯa5Y$ec T5Q;zS>::"Bͅ{,^cRVd [IW-^=X $9r86ຈmڴnI̢ew%*=A<8k| ;e̘sy?{Dh9:35 |.홍_nY@jQ ֜yYY~hx}r D-l4jpLţTu}im2UJ{~E41J|S
.%[-Oz!?-/{S
\7}8mm'-**֛IENK
ʔ mS}C"kX#w{d:?ZQI U&6&Ďŋg.UV94h|*AF4B <&a^ 5%ˆtԉmsEnXY%Qڅ,\A,} @2`V:I1'$X
I[AP 3SisЀۙ))LM !Bk#)p@"\v8?8tZ lV9tF{? "[gA=&D aK]J/%5iѠ f[:"}'꒹7W$d) $́hP>z_Hv@~q yQRQ>VB>VE49U ."
eiTeI`?t{e蚻b~%'SLVW"9&Q}~Օ7Iq/ Z\jFDdf UfwJ1u>-
<:'cӾtSY$+L1ipL@ U
od^T+BA +z,BE!9{Cf @o.mԘLVQ]RtIیՅj`5qc5\ j lq OVD`]Xp\*d 1V_ Q_.Di0? +S dO.-%S2w+pM|V.Z/ PKPG--5G4|gH>U0ŶZgx
ais U o8GOI="O;W^&Ts>:tG⿲N 7~\ɷǏ6kQ4Z5&4*`^mNe @/E¤&sFzUI=8pqJ Қ`!vSh'N˘bd} eiVqzI%-l"
H}aW ,YUU蔙Ҁb&"0o7JlOd"V",LY \ m )'G`W^|^z;<.7~ NH6gSv XLٱSB믮cC EPLtWo^p_@sDre<0d J~k$m8,\ee\ .&m6[n oFfVt{i
[*3*A+Z% 2O)..>TY!䫻U (}o}ch?!`>ȩ00{s_䶠 |gX,]3v;AO w9{83 ^/LC
hu]B. Os&-EYoz]Aڢ=& ~i*B<&Ӹ<-"%vnLر.M_ g@s (%+ fbknXFp p&4^#Ya
-K,g𬂪L )l=D
ϑ1tHr:S 9 4M]Ķsu]Gٷb<3W0aW"gˊΊ-9=h M|OW$Ĺ<8sZZBR"K>Y(o0JەGK {N
0qu':a}'9BCs۠":Oќ !G5V̰w
>HW,I
wJM 79)ͻYSD S~ (N;&S#ᣨ_Q34vtU((iϚ&"ñK og;bwHct~2eH!djm nğ$Fb
>l~Bdu@>99Fx5 Dh*_}-IZgXc9UƣC0NԉgOk.1^Ms= MKWFS}lIO2]?n;w: +Krڟ&&뻪R\2u|/!9:4,4GI*@ݭgw0KNUː;sZ ̘zȜwCq䵙ܬMegux\Ӗ$$=q`mM88 LB7k{3nd/^ ӑ%@?tY uvh?ٕ8R/]YlzZ[ cIm 2{.ޅ8R.܄O:/ G
xP#W؊пwX݀b4t8*P"| 9B;;(oIs$CXքؖ
, JQe0E}` Ej ԟ 6Y胯Uw9:2i%ef?r69Q1e<]X1ΠAG}.ebŭ}E6Z! 6\ .Es:- NQ} +9.a__dV
D bɔUcq (5oJT Ʌ@bnwYO>d⠷m"FwTGμ~X*ʛl
&K+ KF <>kPSP s!h nؤnǥf
I_o5n}? x%
bDB#f % if5|dzlV ahjM
)2u7ĥ"O9 ` ء>/(r o KKӶz:~6)씎}LVgVFZEo!>?t4@vvJi-i!_!쬨tu4b_ROGFq'>BDȰFD{T+&x;U$܇^*gZG>XXr2 t~hCx
)A+s+RtKM ?" #I`{Vtyۨd{NVTP}D]M&Dݤ(*gi>{NJkrTIn&c *F RjfQrG险2'V `? 4WBmz{]f5e~8e;'x9H[ 2,WMZD>
[ʩ[-YeN%yȖܡΉaMIοݖ~p\^a~||_NeO]<߀`w3ּqP_U3:}W U2 z@#=q hr(b.OuKLa\?ίQ V T 5L:5~UPKZ)ȷ#B 4߂:}8ZĸX-7IXd2L0ø~jx/J3 -kqooڊC.j0CdT9ֻ܊9 Db!N e`.俒ᶒ-YV됚c$o ǰf /| >bH8$U {hل(ZNjj͋ urf.]iW[ETa#`NcͨlEA-w46c,r ussFA|_LsĎ4O&߇7uOEcL`3' 0En0dLzp 0^kzU#:¬ண3=b+/|iogMG=&>9 qz$ j4lan3hL
3f+@yX*oҍSu|>N-,*8\E AP"ÌhfQ~~5\62MY"ޗdIЋXʩ{{L.}q*ȽeG1H6IW_HN"K.O2u _b7B&!k&J 06 ?%''n}&۸ƈ&l`aܯ&tY}~|B r&%郵 qj)N$Db8ovi?7e&HU}FA`j[)P xS{, )PI" p]P^ i͏V^汨tw5
I<u J&QV4'3'\pvAƋ$kLMUF}ϴ]fe7~7,iC GPyomv 5*72̝<h,؟@֭ጥNoK뎀cxq@@ dE2;ZYyC.V`R4ptKG | 4{qfl4 iR3(7hT塍?j Wε {p:ёi]t+d! nʙ (`~̛:lBY; ,^ gzI W (F(?m/ "m (b0y#HP] rz'&`jBZGUjz$L'0Y I9r;=;sf[/bo PUo;c1c^# tS-٬SEYkɟPgN iMo5m,x ; ":/O
%u
L}ء
2VuUek;g\R h+[ *
bE Ju RM 4]B[Ù͞j,ɖ7$"a7wLWϽ~w[+r6obuCV3NV{0]_K4:>9`V *>d96"'I@|JҨHi=T Ӗ\ٳ;2hP ihMO zM2`P o (q"^%r?oQSja^ LqG!` Z=m"WJmJ/AX<[a ݱɆz qXՐbK Ic BAn2KY -G"R*`MkoYƌs>鴡*ULl1wf+G&
yH
AG!¾u, etxdŹ5ZfAMSN0|c,@N|ޛu2Xu|3Gg&Iw%UB 5چ=$'mjnn_[gb
cFiV ?)[?D& Jg (7]~?Fdakmb 3*r e;܆ DDJ:B҈LpR#odڂ ^sP0= Q_dҼ&֡x \/z}9wJu #fWSJht[}w#| a>#R? 2Gζ^MNKm7-) D`,ZN!#7ŷ,GF&F1i #j 6,E5e2^&<&ERPur#|{ڥa2Qk<տ_J BZQȐgGn
TܼVxt|2?ՂO}Lu$M_=qbN;]EZ ɜFLրc-4Ns' )?E&-f7hwϛ$1q
HzKQ*l`?e\KV pݎe ; +>,P~ ٝP#5]]N
&C/S[ 4 1 b\r7^NΤ{]ª2T^6J7{Ѷ3+-{Agl6gs82s#R02Ppƈ25GZN=$C E9'\!RdmЗ*:po"TZ'OSaCw*tSfpI4C0Sx3"eCHnrZL0A) n]jƀ*c8*(P&՛4bU-y/@=ˍ+qu_{*1ٶk9*SRȖ TՋ uQ+Jg 0,|S&06{RHuY,ߗ6:Y2¯δk/o;hKL\@lHYV6
/eUr)0tn2KVI[Vilp=ADq"ӣ6E]`(3
WEC*ӕ4kQ@oP5S>ף, -dao3F=m};( 5k + k+}BZ*~xKyR"2N#F9SQ-7L!Bc'7u "dc:NMZ/.LȤ Og l)OK~-*oC$Ԃ5@%1do_+]ұuP A
sQ9ِ k/bާ^eےsyRngpX&vV iU +~P5!ØR'gb\#[1W6zd9Զ26/u ɪ @ᲝlX ^<υLY'ʗnHųϿH ]t\ k7,O`ۋ_' oT>[zs3Dd4j60!4y9Q8 4joiځ߬IJ?8o/-3]ͪuCoL {ÂXo$` ʆo^b;U)3:
451p@]"J`o"VBY6>f l*l5 tmr2 ̙Qbo'dhx罨6dw]AOߊK )r 'DF*GRTEA<zXzs:,BvS ֙22
t
,S}Eܜ7ĈG3M-,>r /L+b8OKpȳFd-}N#*!;ǡ6?Mڞ
GI 삃M5l
YDɆ -w짧A*fd:[|]>e!* B8L 4I*c\il#ý wE#eJҋ ZJjydJ /gB_`Go JUER1rb `4AQ-V!8µvL \;H,iV
/H 61p eѐ N *_IT }}WJ:̲)(v؛\F JE!*mھ5/y#* V_"%w=]N'%f'oC
Nj֬8
;m-ۥ*х쑏WDFصA]/9r~طfEA:{PhOHo G04&'xon^S Iش:Ú;C6BHF'%jĵ c|"2qT;<m~2WEmUf'-s ݒ"[g/, Eov#
Q5ƽh CI;():":)eWp&[m+jq ɡdJ*Wva. 2C"vY'i10\B/gPH1HQ}F:njւּ_BW7NXV V[C1Ƈ 59Y N+Ve$
hkEu%Iin鱰C hhD>T P[Yncin/Fk/Vy34
;g:\d+)%y"z95:KBo} dL,q"}Fކl! h9>M
[QC ;f
bmP+.;B60 ˊF-pY +M) PX%*Xn
`wع-asx~w_VvVc鱍P}Ma>K&κ(y6u+!(LPߢ2&C
]L ^F|./Hud7/eй«
Kz6`OhdJ?{JυlE o`۽E-`
DuФ{1' r՞(:(ŦQƌ hnѯN`%W#'n] m 퇧a(d0Nl ^o
"zxN Uύj .#;N}R5lSȄwrz9
N6lԸ4L=Kyԇ2B&rƱnx)p
PbFylp)i'D8h)X!yrR'%x^5ziXG] Kd XFE
v>;ԩG*q'j rYU ]q}[ 7Oj7h>ɢ~YaoAId*Y=odI_DDhxSӜFaUU|-^ #M&!qsDab#Ru7?zx.w% V*`X`qk yGLAQ&Va; H9 [8Qqp_,Ñ^ĸ="aQx4.kzқ=3ފ@>f@ JNp1NjX 1%0EٿQQ0+\$PMn'ԩH%NwTYo1|s};[`*J{(pȹ`
6ߡݠ, k(T&IWf艏]\ 롻*҈?r,$jPRZ?ġ ɧD2KlW@ivF=Rnh$2*ҍ) ]0y-<=>a]oc~Q%Vrլom93ܩG"ACa3`qHy XtH1?)v_ P"ޜ0rIy#&mQ AcܗN'EVeD&3oR@5
yk"AHF
HI )?MuZۘ:Đ-,kfhd 9TqOSz\at;qK*܃;>Ok:YE3wq13xU25El 4]X%d`r2b-6oDM _>K7^["ik(+y*LJk^]2 B%*|{3ˏ!{giTKm*\=H͗ZJ
# tɎ
)Y%d~VIݬH؋P
TOQF{Qza?QcgzYa痜 Dqx6_P]1Lqk"
D
9u#?๑נuKŕҩ,jR c9ȯ(g < /ܱ@~g`+[z/bp rWZ'6x_5isu ,ڜ=*Y}4U|G l+a7)-F'W8TNj1ܡm T r2İؑW/+`jO > e;fu)mr@ף
7A MP\@ T[?[E\J{N5%>aտdae^b ܙ6Yg & w?o'9YM.:X)Y} r3 G!iL1[Zx_CiSV$6LG 됩On]h6耟d V w}BX*G5:'qsC+ 2AӾ >| ]Փ }CtR'ytMx@Vy
2^<1D)-{|~.p7\0HQ:ᡦX"x)@_bIu|? ̠fUY`ęv/sR'6\PP I/X~
0X-abvئ< P+E`.!"|I%""ڳpBޓ^Tm7ϖͼed
C``/p\@s&BxR&odz?^GFSxj@*g 7ퟞlH)v >wcA;)e3>I5PYq^BKON=M+yPd!$P @2>Y 5, 3CH Bd^9N
WY)YP#? u2,\MDa!}mB}#ky;No渋gk)~ydjjLP0gGSSFIlЖfm+S35j iVMp㪊훸
+@QneSrej#B3 ҨdA-эW3uyNt/27Bp nDb TϿ8{vk
PH)?g)?l4|PCqſ Ř-!u=.(l*0WJM}X1lGX{ǔDnfѶ ]ɷw ց*{Lr&+(a/L5f#K ѯ=j˴EJ&0Ϩf2`ȯ'Ԛrb竏b>~1^{"(h Qf? E 6#gv +.DA|IvQʗg}7
WW)&қq؛1&$۲a~Ru
ԇc略i6s?ͣ"3#LN$ >BT1c- d\ (_ MfEɮz/ * R¾9θ[]OXNJ_* u{y˶ 0T8 ~'H jf;8x1p0J6'=T*)~/ъ f/ƕSoT6k=kҴ[Odv]St]_eM( X=cOS]`=BGAG۪dWy6v^oB<&WLre "M䚓2Sh i$mgv kd$٬.uW-g.7 EԈ>ԁX(d ]˧䲗=(Xl9ar|j3rZj2 ('\% pڲRD{@asuNש-I K73yڄ'& WO#xW;B!>+N5!hBF|@kb -UM 95iTr)Z(%pJ,m,)x,KqEuI5*5a4.E)e( E`r)Dk]BN`!ڬwgQ\ Qq^TYDQZm;55e
dʒ%-X6c Km
kT%ʀ"EH7lN
YD#ΐw+(3,d(n-Mǎa.!݊$>Iv~;{?❥fJ \CDrDN!lbM$Q^!lwUD4z)E3li$ I>GXN)@olG =%,IaQގ'ك,{>
ȗW"\ Ӱܬ\D,Tjޝ?mEٵx.\ _ !oᅗ4⽄ &}w2U}/ em'7[[Eȋ-Kkao٢ {1mo )(l&aK"ȱIO Z0%`7ru wg+/GV{ T~*ć)>%l./03ljp}685Љ.M)?v8 Tij܉K-bgaFn/$Tm\T戳_`;Gj@֮ˆ
ݵ;2Kj[%o,P4C7dϗ;艃ځ O,u;A XWTP.,P1 $V4
dž.ܸjsK{/& A~ރ\W {e\
;KB,Q/4FJM9avQ-K*aVV}uqrɮgADBZA&_N "YI:)K]ՓlY5 tghA+`u'aBxi,Y
[l˪}v͆_c&- IEMlU)d7DC&j^U2TgS/YzUf=a.K{߇* ?@P_ە▿؞}bb, 3Rsg}Ks;YDص [v1V)inlp'k5?G>bxHaHx
7:Z,H1:&bf yl0O"WBZTNkNB"*q, e'x
|w.IuDvo ^llkS^]%|ӶzJo )Gn֦ã>kUdL?;P#.m kOK_JZxd(*?9; 0Ke&.H4} @ 7ýްn e6 &\3w|/3 #x F t
YZ