pdns-backend-geoip-4.7.3-bp155.1.6 >  A dkPI%z 'HYzʫi?mUpŠUX|)o5cTrjdvٹNkq8'Mm z7fLJiڝ\~e+!]/ 榝XzCE#̀J ,P B\1,SVj/4ܜS0bdQ+`hf~^RXoJ8X眎`,6"Fn;q&zl9\fJGq:l 0.Fs%(l.>a%nO"ad KCFU+H5?eǔcZ+̃ohL7禩["k*w9t"+^?{ΐj.\A)=U(*<_u@A{j-qw W`qb\q_e8|Vg%[,rV͖&H ΀afS,̓r;]d;ɺnxgZq2-Vxlʏ}2s1/׆Wfo{ddgDZSFa)O&~V1B\EsDH S6u=BukC^a=-4 1ջ, XJ}y&=Fg5"9 >p>?d % <+ Ei     `(8$L9TL:LF|G|H|I}X}Y}\}4]}8^}Kb}\c~d~ke~pf~sl~uu~v~w0x4y8zxCpdns-backend-geoip4.7.3bp155.1.6GeoIP backend for pdnsThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. This package holds the GeoIP backend for pdns.dkOobs-power8-04SUSE Linux Enterprise 15 SP5openSUSEGPL-2.0-onlyhttps://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.powerdns.com/linuxppc64ledkO2782a6f9be3875865c19eb3144f8f466ad208846387a0f402e64fd228af469d1rootrootpdns-4.7.3-bp155.1.6.src.rpmlibgeoipbackend.so()(64bit)pdns-backend-geoippdns-backend-geoip(ppc-64)@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libmaxminddb.so.0()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libyaml-cpp.so.0.6()(64bit)pdnsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.7.33.0.4-14.6.0-14.0-15.2-14.14.3c#@ca @c_cQ8@bbγbUibA@b=a@a@a@``@`!'_ܙ_@_i@__[@^k@^@^@^@^`]]i]L]B@] ]@\@\@\@\[[[@ZZZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@Michael Ströder Michael Ströder Michael Ströder Michael Ströder Adam Majer Michael Ströder Michael Ströder Adam Majer Adam Majer Michael Ströder Michael Ströder Michael Ströder Adam Majer Michael Ströder Michael Ströder Michael Ströder Adam Majer Michael Ströder Adam Majer Marcus Rueckert Marcus Rueckert Marcus Rueckert Marcus Rueckert Vítězslav Čížek Adam Majer Michael Ströder Michael Ströder Adam Majer Michael Ströder Michael Ströder Michael Ströder Michael Ströder Michael Ströder Dirk Mueller Michael Ströder amajer@suse.commichael@stroeder.comkbabioch@suse.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.de- Update to 4.7.3 * Improvements - API: slightly clearer message when a backend cannot create domains PR#12296 * Bug Fixes - lmdb: make outgoing notifications work PR#12299 - lmdb: implement alsoNotifies PR#12266 - API: do not create SOA and NS records for consumer zones PR#12291 - API: fix newly created zone not rectified PR#12273 - fix invalid catalog zone sql query for gpgsqlbackend PR#12272 - fix pdns_control list-zones PR#12181- Update to 4.7.2 * Un-reverse xfr freshness check PR#12130- Update to 4.7.1 * include auth 4.7 schema upgrade files in tarballs and packages PR#12110 * catalog zones: avoid bulk zone reset while migrating to a catalog PR#12124 * catalog zones: stop wasting options update queries PR#12124- Update to 4.7.0 * LUA records, when queried over TCP, can now re-use a Lua state, giving a serious performance boost. * lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced * lmdbbackend databases now optionally use random IDs for objects * a new LUA function called ifurlextup, and improvements in other LUA record functions * autoprimary management in pdnsutil and the HTTP API * in beta, a key roller daemon, currently not packaged * pdnsutil check-zone, skip metadata check for backends without getAllDomainMetadata() PR#12085 * Fix compilation of the event ports multiplexer PR#12069- Use systemd_ordering macro so we can use pdns inside containers- Update to 4.6.3 * fix deleteDomain() in lmdb backend (Kees Monshouwer) PR#11765 * RFC2136: match autosplit TXT correctly PR#11746- Update to 4.6.2 * New Features - API: fetch individual rrsets References: pull request 11409 - LUA: add ifurlextup function References: pull request 11408 * Improvements - LMDB backports: + each LMDB database now gets a UUID + lmdbbackend can now (optionally: lmdb-random-ids) use random IDs instead of incremental IDs for objects + LMDB map size is now configurable (lmdb-map-size) + one uninitialised memory issue that was fixed References: pull request 11406 * Bug Fixes - fix proxy protocol query statistics and add more detailed latency metrics References: pull request 11407- Fix build for SLE12 - Remove dependency on protobuf since pdns now includes protozero - Add bundled provides to spec file- Update to 4.6.1 * fixes incomplete validation of incoming IXFR transfer for secondary zones for which IXFR transfers have been enabled and the network path to the primary server is not trusted. Note that IXFR transfers are not enabled by default. (CVE-2022-27227, bsc#1197525)- Removed random from --with-dynmodules= because randombackend was removed - Update to 4.6.0 * New Features - support for incoming PROXY headers - support for EDNS cookies - autoprimary management via pdnsutil and the API * Improvements - add zone removal to the zone cache (Kees Monshouwer) - docker images: Remove capability requirements * Bug Fixes - pdnsutil edit-zone: fix n and e behaviour on increase-serial prompt - lmdb: check if the lookup name is part of the zone (Kees Monshouwer) - lmdb: fix records removal in deleteDomain(); improve tcp exception handling- Update to 4.5.3 * Improvements - 2136: improve some log messages * Bug Fixes - lmdb, check if the lookup name is part of the zone - pdnsutil edit-zone: fix n and e behaviour on increase-serial prompt - improve tcp exception handling - lmdb: fix records removal in deleteDomain() - 2136: apply new TTL to whole RRset, not only to the added record- Update to 4.5.2 with bug fixes: * bindbackend: skip rejected zones during list and search PR#10968 * make the zone cache more robust for bad data and save some SOA queries for DNSSEC zones PR#10964 * api, check SOA location PR#10962 * improve dnsname exception handling for SOA records PR#10952 * improve SOA parse exception handling PR#10792 * try to reload rejected zones in bind-backend once every bind-check-interval PR#10778- Update to 4.5.1 * Fixes a remote DoS when server receives query with QTYPE 65535 (bsc#1188495, CVE-2021-36754) - update keyring file - no longer builds on 32-bit arches (since 4.5.0 release)- Update to 4.5.0 * With version 4.5.0, support for platforms with a time_t type smaller than 64 bits is dropped. * The ‘zone cache’, which allows PowerDNS to keep a list of zones in memory, updated periodically. * Priority ordering in the AXFR queue in PowerDNS running as a secondary. * Small improvements and fixes.- Update to 4.4.1 * Improvements - debian packaging update #9965 - dockerfiles: do not claim equivs-dummy is built from the pdns source package #9953 - Fix missing #include for gcc-11#9952 - lmdb: Do a mdb_readers_check to clean up stale readers on database load #9946 * Bug Fixes - fix TCP answer counters #10008 - run deleteDomain() inside a transaction #10039 - lmdb: do not reuse backend that has seen corrupted data #9985 - lmdb: serialise LMDBBackend construction to ensure only a single schema upgrade is attempted #9949 - backport some asan/ubsan fixes #9923 - pdnsutil edit-zone: do not exit on ZoneParser exception #9912- Update to 4.4.0 * the LMDB backend now supports long record content, making it production ready for everybody * the SVCB and HTTPS record types are supported, with limited additional processing * transaction handling in the 2136 handler and the HTTP API was again improved a lot, avoiding various spurious issues users may have noticed if they do a lot of changes * a new setting (consistent-backends) offers a roughly 30% speedup, subject to conditions * we finally emit Prometheus metrics! - 9070.patch: upstreamed and removed- Drop GSS-TSIG support in the spec file as it's a removed from the upcoming 4.4.0 version due to security issues and lack of testing https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html- Update to 4.3.1 especially a security fix for PowerDNS Security Advisory 2020-05 (CVE-2020-17482, bsc#1176535) Other improvements and bug fixes include, * gpgsql: Reintroduce prepared statements * Handle the extra single-row result set of MySQL stored procedures * Raise an exception on invalid hex content in unknown records For details, see https://doc.powerdns.com/authoritative/changelog/4.3.html#change-4.3.1- 9070.patch: backport compilation fix vs. latest Boost 1.74 based on https://github.com/PowerDNS/pdns/pull/9070 (bsc#1176312)- Update to 4.3.0: A lot of internals have been reworked, with some visible changes for users. If you read the upgrade notes for a beta or RC, please read them again! A notable new feature in 4.3 is support for hiding DNSSEC keys, which makes it possible to do algorithm rollovers. This feature was contributed by Robin Geuze of TransIP, thanks! Another interesting new feature is support for automatically publishing CDS/CDNSKEY records with a single pdns.conf setting. Please note that 4.3.0 comes with a mandatory database schema upgrade. https://doc.powerdns.com/authoritative/upgrading.html#x-to-4-3-0 - refreshed patch pdns-4.0.3_allow_dacoverride_in_capset.patch - dropped subpackages for mydns and opendbx - change run directory from /var/run/ to /run/ - pdns-backend-lua now has the lua2 backend- guard ixfrdist support so it is only enabled on the distros that have the dependencies- add ixfrdist to the systemd macros - add instantiated services to the systemd macros- enable ixfrdist - enable lmdb support on Tumbleweed - new BR for libboost_serialization-devel and lmdb-devel - fix configure option for libsodium- Build with libmaxminddb instead of the obsolete GeoIP (bsc#1156196)- Update to 4.2.1: New features * Add SLAVE-RENOTIFY zone metadata support * Add configurable timeout for inbound * for gmysql backend, add an option to send the SSL capability flag Improvements * Register a few known RR types * bindbackend: use metadata for also-notifies as well * pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH, bump as if it is EPOCH * API: optionally do not return dnssec info in domain list Bug Fixes * LUA view: do not crash on empty IP list * API: Accept headers without spaces * Avoid database state-related SERVFAILs after a LUA error * Fix broken edit-zone and other features with the LMDB backend * rfc2136, pdnsutil: somewhat improve duplicate record handling- Update to 4.2.0: - New features: * Lua records * ixfrdist * a new LMDB backend - Important functional changes: * the default UDP response size limit has been changed from 1680 to 1232 * the autoserial feature has been removed - pdns-4.0.3_allow_dacoverride_in_capset.patch: refreshed- Update to 4.1.13: * #8157: gpgsqlbackend: add missing schema file to Makefile * #8162: stop using select() in places where FDs can be >1023- Update to 4.1.11: * update postgresql schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (bsc#1142810, CVE-2019-10203) To fix the issue, run the following command against your PostgreSQL pdns database: ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END; - spec file simplifications and cleanup- Update to 4.1.10 with security fixes: * fixes a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (bsc#1138582, CVE-2019-10162) * fixes a denial of service of slave server when an authorized master server sends large number of NOTIFY messages (bsc#1138582, CVE-2019-10163)- Update to 4.1.9 * #7922: by popular demand, the option to disable superslave support has been backported from 4.2.0 to 4.1.9 * #7921: `pdnsutil b2b-migrate` would lose NSEC3 settings. This has been corrected now.- Update to 4.1.8 * #7604: Correctly interpret an empty AXFR response to an IXFR query, * #7610: Fix replying from ANY address for non-standard port, * #7609: Fix rectify for ENT records in narrow zones, * #7607: Do not compress the root, * #7608: Fix dot stripping in `setcontent()`, * #7605: Fix invalid SOA record in MySQL which prevented the authoritative server from starting, * #7603: Prevent leak of file descriptor if running out of ports for incoming AXFR, * #7602: Fix API search failed with “Commands out of sync; you can’t run this command now”, * #7509: Plug `mysql_thread_init` memory leak, * #7567: EL6: fix `CXXFLAGS` to build with compiler optimizations.- Update to 4.1.7 with a security fix: * Insufficient validation in the HTTP remote backend (bsc#1129734, CVE-2019-3871)- Update to 4.1.6 * Prevent more than one CNAME/SOA record in the same RRset- adjust buildrequires for mariadb 10.2.x on SLES- Update to 4.1.5 * Improvements - Apply alias scopemask after chasing - Release memory in case of error in the openssl ecdsa constructor - Switch to devtoolset 7 for el6 * Bug Fixes - Crafted zone record can cause a denial of service (bsc#1114157, CVE-2018-10851) - Packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626) - Fix compilation with libressl 2.7.0+ - Actually truncate truncated responses- Update to 4.1.4 - Improvements * #6590: Fix warnings reported by gcc 8.1.0. * #6632, #6844, #6842, #6848: Make the gmysql backend future-proof * #6685, #6686: Initialize some missed qtypes. - Bug Fixes * #6780: Avoid concurrent records/comments iteration from running out of sync. * #6816: Fix a crash in the API when adding records. * #4457, #6691: pdns_control notify: handle slave without renotify properly. * #6736, #6738: Reset the TSIG state between queries. * #6857: Remove SOA-check backoff on incoming notify and fix lock handling. * #6858: Fix an issue where updating a record via DNS-UPDATE in a child zone that also exists in the parent zone, we would incorrectly apply the update to the parent zone. * #6676, #6677: Geoipbackend: check geoip_id_by_addr_gl and geoip_id_by_addr_v6_gl return value. (Aki Tuomi)- Use HTTPS links in .spec file like mentioned in PowerDNS announcements - removed obsolete 6370.patch - Update to 4.1.3 - Improvements * #6239, #6559: pdnsutil: use new domain in b2bmigrate (Aki Tuomi) * #6130: Update copyright years to 2018 (Matt Nordhoff) * #6312, #6545: Lower ‘packet too short’ loglevel - Bug Fixes * #6441, #6614: Restrict creation of OPT and TSIG RRsets * #6228, #6370: Fix handling of user-defined axfr filters return values * #6584, #6585, #6608: Prevent the GeoIP backend from copying NetMaskTrees around, fixes slow-downs in certain configurations (Aki Tuomi) * #6654, #6659: Ensure alias answers over TCP have correct name- Update to 4.1.2 - Improvements * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias - Bug Fixes * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate - misc * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)- add patch for upstream issue #6228 https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-develobs-power8-04 16847541974.7.3-bp155.1.64.7.3-bp155.1.6libgeoipbackend.so/usr/lib64/pdns/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP5/standard/5bbabc2491b6edd6b81e41db6bce5441-pdnscpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ca164590055e2178bf3ca1f44c17eb18e6c32c8, strippedPRR RR R RR R RRRRRRRdDϸo!Bzutf-8850bb9cfd7198b657f1e8134f9e852b2cbb0cfd5e2d29811f8d1cbed07ae0a03? 7zXZ !t/+] crv9wPhV qeon$VW@4~MRg=&5Y~rm):-M*\P^0؛u@+ymiWw?ܼ{:O=@f#P$1B9!u^7JvnuT=_S C(vG0̤mq2v6ՈH!Ǟ@[xe uxT!)bk1*l*u#w"[DĻh-t7fIwbk}`FF"0'r.wYg3r{8p|۬-AѾ Xc~붴!@M%51d{XgMX&'{22Lpݙ&As+i)hRAˌX'Boߥ;~բh4i+/D,.7?g^ 푶6t N(ۉW̓:$^ygQrPEђ\[sRߧn~-rE(Ā嗗ۈluirga*Eg{:'C/~ݭRv"P7Tˡ%X?bӘ~Jdne*zbH+5V0yP~Qfwܩ%ϒs{uɖo' !B:%lX& !DCu68Wp]5x~*6Ҏ3EEɤRU9[̟YVuM0td99P7(KӦXv=}~Jk9JB (g:~_TUIxzF~ٻ.%P\VĺJ7:D嫇mO@9BI7'KQ"yȾ\5*Ȃ43Go1 wŨ)p 7K 2rvsiOEXzOP88VRs2KirN 1y?*æ0FaיF9XݮL> 9GD0E\vn26_c`(ck3t=@8:іDCtL$QA@zE @^r8mwNAqUhKG99>2ǩ z%4MMfܒɢ(ϟlnrɏ"nbU[<ƅ 5Y-?cl\ =LiPIׇؑIp6jRm3ogqѯ9! r~ݐ¦ԅ8lkZkbɞ.m-x=T-܉W@5~:] nisEp7'@ͷgW2f~XK1^x}4lZAoZ,ܯ=_~uLW{(,j7nL31w0g`[ o^8)$=gc|9co%r6g$LX]-ڷAt\( XCay Ƈh,^08&ckzrp ϡs0eJGV~X8 NH`gr{<жP*5-h~76mOJ\Nblm"{Hk{q#oUcLP~)qv729Edt³K[ۄ&`@K/( D ?Š"4&0 vqbkm,F™iyuGJ8jH0::VvT,h% bxvLv[Q'1Βa~5V ď+YJ0rZxsiucxkr=\&p-gt/qnTMdB`Grӷɶ"UDĠu$7ͮɢ3AoSO{GWXÔEQd4c╭;.cd?.X3%ОrR候cdN[>5}:{>濳ΨQ=mZՑߧ[' _> $-@Nڴ~B3&b &x0_Mo8 w A!K[|=Ѐ^n)Y+&6QC& L>yvXێ'|/3V~#I@6:vRepEzӜ$y8JD=^pT%X@X]:mЭXμf ^tz3IlH .^k,'eE]= >d6(ҟ&B#:̟x6j Y´{ًߤ\-H sĭR=Y|"]tJ_-D-'rrR SJX?5QUcᇄ)Vo.sbhz^srj$G&FʶQ_Vw Lc4ajle92ɉr5o^2 <6&,;~OVHŚZʐU:7V]΅Q륤oft_ DcmXBq5VC”[v4ieOUQf^#Rƿ3rԂgRo [NQim 9RRuO6?2t6j%Ɖ5Jeۨh |p:v%?w MmA& O%??d]R#v+V"#(~Q˹ϧ +N&g( /H>Q^E+}C?-`TOQ]K,T_h[b "@VrI1\t/z& w(`Ǥ1շK!MT(wV%mb+EW$%_HiaJWrB$cR t*V)sDVQ,c`dCqk<$:h-=ehъdv Iw?ܗ sAx6C{R0oRc.% 궖?{r="wע Q,;c8m2ć_"U=! rv-gPs/ɯj7N6FC:B{wd'}aCXHOnLvvm X6'NbEt_ܢTr::GX`NPV 1uDZC7{Q\g3V!sP0A 6 I d~mH<>W 7bIYw#k͕YA貮Po΂AWK'\Y-[*uJF$3VqP7&K؄ZF^k=õg`OZg7#{rBOu:AHmN7MUa9IfRݑG)}H|F͊GU#9wia]A Ŋb J-e͋IƢYAmV}uj(D0poP`X>HyFFTg1OX Υ6<!h\I E@ tIr2UqHa& GqY%<jza`Ro_fBv׽D?Oik\>xwd1#i*}8ªpu4y7ve֮%sUp^n !`l` j5v?is]9#x' &1nTΚ,D!dSa *KT:Jyc fV!AC}V&ҝ;!ޙXȷ&+Z'C^~gvT<9)4TZ%|.t{>,؇FѰ$nz<*7)=X0B;~&LɒH1\S)f~oJͳ#, E`zʑrڜPpĩ͝Q"y[ókB'LU3kà@) ~ShdˬGƪe<'oUZɤ7hU ET(=jmZ1l3y_;+s)ߝaj`ӞLx=Ig+=fJs y-74:֎j+/ߏ# ݚEM5XX ޵,iC-g]0>e=%g jܜ@6?|CzS*$m-i~͠aP齬Kr 0ɖ9Us p4!>T{6i[*fo;|摅g }X΀;A=']Ñxouo{%z֧< 9&]Ȟ44(hYkbթT , hTBShkO P5@;sd}Pnl XI8$U%e贞jI~A9OL,7A#UxoG+68zdA>P8zQ)7Xk5ASql򦠩ŋ5 AS@``Ų3EڍtyNl$=iC~5&0u'@S2 xO=b/~;߷ ~IprliWEqdDe( Eㅙ `^Dh|YJ6r]l.O.@}7N1]Qڳ{&x~v|6 }g&c#lEBtd; 6FE {⃀Z\ ZFr.OVN\> =]ŗpTe.W({߼C#~iuŝUN@* DBW@\&` g͌G-r?hgO=uvSl\eRwڃ-y(@Tb>Kx)&` KfBoeU“{q>*:;ƸkwU9,7m`'cf.rw@FH@SUBs'BA,=d$4Ow:k|:I`7'`}:Yꌩ jlԐD qC"Lr!8A_ z-+SGsuj7a _znt_BXԃ\9Ai\,nWOʚB +vDQXЛVEd_ q2 #S7%ҳ[\{xnPnjx%0~>%bh]_7YC5TGX;n˯]͵2L-bWL.kpqkQ5z-QzȂzG?bYR.okAꦶХHy*O6WnWZD]d8dL=#x@<#lv~Crby]EkX˾_09o rM?M&x۫o OmX*zZ@E C/ii9XyJǃy֭pw*KؗS ;=pY$d;m՘ɿBPT:&Ok F[uY2 %K';Z{96T;c9aDC:n)<`m ͵QYPWZ#tnx/i3\h  jOl"5f); olWFz2U T\C'cR.ucCDXn@' aqk'_Fn+r5^/@jpi p Ҷ~Ҋ9< 1R2V9Hyaa.cEv*Ns ,ٓz`8I-gj4,?hq[kunTkC5*6{"L̺ߣTD)O} ,~v<ᰋ]ρSobB]WKM{n{L}6#@X8%5>x*XdqgUj_"Ѩ_LPkƸ!2ŅK+85{qXobf1!&YNu4PVDFz@(+P%8V=JҾ]B R5砽ݤQ#ڔ,1m'r'v۩b|G<5y컺v1f4s e=V8?|HY&Vxr=sArƒcm12ni͂y6\&yV40钼4I Eq gUn,b2ܝ* $>V ĩ/@_*FzNa&W*U}%spcNs%ˀF9Cb70hE֪=H;_qA _fviˬvj=ᢑe=/Bܽ]e5|ދ(X~MAA0T2Z9q_;ܜlN_k6NۤVj]*3j@WobG/yC#):ɮ} 9[>C^ES8|S$6nCW J;Юx-TJײ2|jR.Mປ>]=nUV2d +hBqAĂ#zNU^7#Ѳ$=K{X ">e i%;*&zc2LpBtX_0qAJ;E/E+g|>-+AO/v?s{HSw 09EP\b |:v8f֨clt<\t*\*54pU Pwo؎ wnngL&t5ݍcb3TWFB]jhyf5]Q"=o0iqhWvV I^ zO|Bk __bfA!2WgiU7K(1F7x#QkSt KMw`3ْcϐWC a |AY?`R5:5:HٰCJP P˺PW+GMBLy)Kp $#t; (JSx/󙼓"_SdI2uu&:@_Rv]M&mwj+';Chsj;EϞ5;Ǫ DYJ s4x3#(j8$`qY p5',{W3LK=&`Rj/x${IdpM]<}ؘ͚ m݁.%7W JY#dOa' E$ hd%/:։Rq|T)٥lޭ V,=2@eG!wӗWS\\ۛ,v%Z@v-g]7~eWzɘ "mS5m|VESUH橫ņi *qlȨzEŜmLxH}|<ڂ4BN5ub*f͋mwq͒31ER<0;> FaZj1~>C[|ۖT%Dp1J^!k`ψldRjN'RϪVmqd9:'1@׵& g'#ͅJ<v\8~v_1KtA>`NHСag6NdN'5F2C;Oh9zZk#)jSx܏)p [p* Bqܠz4 |yK$:Xx[#hdվ穖A4X~ M z=Ⱦw;XP1M =4z 7Xݴ@V|ZrF(IJ4-ŘxTbB 6{7|Uʂ@!e(\t*M0=w֓:4i;MIᴎ&O%yynLVjzI[u\2CuB:L a@~`&iy6w̶C~J۬.">Xh|92zYGo?c]ٶM>rA 簂B (Shٿ½ҢyR^_L@xx;# @'1̂ofcina@=Z{ٗJGڐ@B* M;_5+4H^cXXe5RnnNT΂oMD-rE8ߚVZ@TՈG^$=A7zt]q \Q9SԹVpq~':S &R<*ͅW/SԮeՙwuHi<9֢AO 1~ڻ pjc}7˺`—݌Tȵ.S Rt(Ǫ &8Bp!:) ̆mJdO%Cb.MPx޿5K]y^:b2BҁXlN ]/-REpKdlx&V hз$ս)A?"q@urӪi2ym|$oq3ܵj&SΒcd';'QXB6GmW˰ N{+y>mӋo0%?O6{'88]O >Qv#teךҼڅvNs.0ύ+ϰr2Oy#JwqE3q:pեC9odzGKj4K8`cg\--tw]Z@IDtq'YOb-Y+h~Q} -ڸ$ Vr< lG^$UF}Ay!ZJ8y[Yp' ׈VQ4d_ضƄƁ6j6^fc1Ӷ`()}7, xQ(#=OA'#kqL=:},S6=!UXl\/zvtpr8 PC:8[Y#}_tu "Ĵ]pqqi:X[!EjLe٘˶L+PzPCߔ޻B+CAv7#3C{xnL 8$a2:s1GXjwi:*4#L?0,Ŝ#-%Z]l/Ѝrh L׎] Yʀf%G2$;!8ņ.,9ͽSy{3減#O*)2"*.2rLO!ok>k8WUl(i5q[r&W3q M$oh 6l+Fg&w7}Z?QahԚY*Y־K=ŲXaRbT۝j9 5Ȏxl&j1::do}IL{/:LN*\%DmgU"m#Q;Eu#ͮJg&tH)W@B7فzH9;vi Z vfh{CH~Q>mE >#VNGŀ r(rr&~>rNm!9ea$:("|)5CeG 5]@>M6NO!ģu\0)ZUp MAf8{/=o/3H!Iozp#$P]>0ר|ԋf OMp>|ERj*(=%h"9ӗWׯD8J8y+wP孏SEJ2#KT A$mj[*%嬌Nrbk{2؄ɑo@TITr_-ȥEj5ţV YWO`sSDQ;6ORIBvӟxYYv=o{.%XWLrxvDAe_y9ށԫDEba 2DJ_2~P Z'K6~rbh`9Nl3^dj:*c4۹=oA  rJvYahͬ 8{ͱ6oTdy~"‰UiPP '-yb[:\uRzUdv2epPpRK+8bv/C)~C۩U\S9Nf뱟U!f[EAݭ̶K8'dޅp6BF"AGب7^ۿȀ9e:9 yB?SUP8SYhn' ǡYd[1YX!}.?ՖÄcgLtMf*kޕ~eGEVNbz.ӦΚK_5e+DVo@ABH%|ld<8s{ҫZw.Xr_Yu@1Lrzp#rU(M=]Im/7LdA@'_%E EXh|هh(n{U4!ÌJ>c90Q{NBʁbK MܶU +X%2݅Z;CM(ۈv'}(/r]Ƅw t?:n%8=vAo kj.{bLf) ʉz}oVoůuMU;d#-MU ZԋЉRU8!Sbg^ڎ\~QD=o{(mUF)(ѣ_XN읔BgƒDTo}:y% 4q;+Ezĸb6OU>eb{̚32gzQq"i |sQ/L֜JxSl:YBSWݛR`"l L" ÖޝpQT`4zqi#qKi04~[4=ҝ'E  0ȼ?nv t^/E;x 1K`awM$bbOecBwẌDfzTUVJ_+k/,|>6㛙ow(Xť4~=~A6~##Q7xF+(3{曈w`. >S{%uwYDMH%K>U r=,˪\Ò1-qvt/ :H+m@=Y 1Ƕf RO7Bt_g,a;GHdr# +ŇʝC4ŅƉnzsy5H,H.xˊ#Bw{[6lZak;N<:(Du:u'&u1F8bV$a7TYVi+E٧JjԀ)n5 V#aŢ߶CnXXvUr+UtMh,"Ro4ճlDe~5[$m< [\"GB,-Tn£a`ay,ޭ8ŃcGv+"DKS?S3ODS̝ex5EK ycx(lTQZc"8g;i#9>ju=*vȏF؇Vl)ok\6;VՓ4_].;% NO!bker13/PIxXV3g5V}Du/;;g:JҬpm%"GS]Ze]05V=;0jnS?)Fp v9b9wHo1UwSM]p('9TL# (.x;_O9j 0=$ts0Ԁ1XB* Az맥-S_$.`~Ǟ%slZǖ DdxSAX 0>jщP&b+PBBͬ³.74hQ,td 2\uc!L'b2u֊-zQ&Zt%MypEȺmYmK[ËInu\2$Ć?,g2x3 w-".*@XZQ0/#UA`g|2l[MY\&h?uVB΍˂KXvEY|Xt~ɲeg|uf}OĬ^$/ֈ7$ ܏ VG..cqq e #CW=4ETgo*QΠ81 $7?4oVHHG@uD`Wq"|1%*[ʘŔt:\gd;?Dlzww\ PR0-h%ގ~YR$/~`ܑd沦qo9|߈}Ӌ{U(abOu 5Fӭx@B( ?޹bF䛨 _E`9?Ya9#oѣOX9O(:r/~N0&8 F㎻8"<Ay-f$=d(!=S/i +D)I}=cYPaD0gd9G: 2Z 46>g#f!ot^ϙý ;$T9=MnqcA^8 lm& ѫ;x\DBP' Yǵ2KYCewq "x\m?+Xj:ܬ}7ʂ$)S"q& wjD&գ+%G89Xc8aG!KK?l8&vkP@*E\,z͒@scY>QquGa!Rs+ tu@ް,{{#Ncv*gؖ'ܟvi`Vj1jCz̧>eZ6rB~tgr?vN[ݡ_nrh+~o55.W8兿چBuH8γ8}-nሆ`D>d꘼`*5#7ZtƵ#%4f.N@ Rjc^BF_EE䬳.S%(@;BkVaEh%>4Ntmv[DʣZN5O5qa*y1 l`}EB@4p{QGJ.ѱDE`]'^췱+ #tΙ>&СkTk!bHZ9Q Cnj |Xan dnax<34Tݾ2rr+uv pIL#Fl\A6FqФQ$\dZ\wXQh%?s76^Q9B:9ʕ O+@2S=6OzH'OPDS=8pO_V>֚dBޒyOK,_-&jn[՟ Ek=o-& Ho`)W'8=h> ib@SseNg4|hf~=@2kL׌tf~I}(E:4*t^W=6]3d}A$95X+Ťق_ Ooe3N%T9]^ˠ 5xb&rNb\JBLhQU (&\ZvA*#z:#9 %O*~$PC{νp^oV%Yi" ?X OWq ,i`EGT3-@)3cS;n㟥AeweʄVi2$Hzz┇HhXxC(A2'IF}z庴[Ci&2LB5\,<Ă7pUxg@dǢb=bg˺s{OQ;QdL6whL}_Ͽy,h1&k_!vOH[p=e,)J!B eFa:K']HeԤecp.lr"ohχdeΓ}7ΚbV܅%e\[5nW&ŕ2#OS˹~?LC Pki!wNNf'+e8 ܧ#\ Q{) 78yK{I[(Ab8ORqA @hU򘿜q:fêCw3B"a~Tj*zSf:ʒC"Fk"?Fk)oQPDāgQ_鑆XVP8!Mi>oƴ Qޒ3 T:g򴏚9rM+tv^Ly! |a:\q\KzZNEBu"·W9(|'RoN,ABުN .-;D΀U2޻ X ӂՂǏgWtuȇR]ok<0h'H,_ qBqԎG-\21{mel]6bp_^ Q!*ȩ'NY6>;aRrxL b9Lor._i;wg=ySNDjHڮfhsԼId!I[< PLL颻𪡾;Vdv6]6=s3S*tj~]hu2 *Q^my}[Ʀ؉Rg" Jyx~V߰BGqt".; &]$Y*8pTMcnዓdLy4WK,ˡ04/pC4"3Tfœ,,׭)ISԠqˉ/}B H%MoRf苠һ3] mlc9;WXmokz˚&(μ^( |L~ g:_91|~XG5,'ێVΉbnm0ɰ^f *8wLٝsߡ݉ؽ2O..hVإ* +8pd^*U!V0:os6dUpHrMdT)kt݅[vIȰ퓎[ Odݝ Q{%:a'ͿUL{5ީ@d^nĨ]"ԹAV lVH(N^iB4[ =|v ] |s(bj&B!gƯۇ0u %VڑLU$-'ӡಧvH^ ].d3,1:H#0X a &çpX=@`׸ig@%obI%諷dQуe-]1(o?$ $fPXA$kQS!6mac#F3Β|Mfp\'!%?껵 !1>#Aiz1<#> ʐXl$D+p>)c3NbH/UZ%Y$c`ʑᚊm!'*^ڄ f}/`b)fZٽ c]}Z ?8 e~6wl2'+Ȕ0Uw,/My}(8f|]nbHS"\#)g̱+'Q@ỉ).%Eq.O74CD GE |'k}az--`Ip! m[p %vɭO/a?vT[1xdDxet܏rd\ 7$;]3|T(- "fD{N&eHIKUj;)(5(@[w2wA[ Tr D_\\y_UD{*r)KW/ԚaF:*)-]2z} pO.ta|. +TZb&1so- n4uH0u·6gCRrZf%+A` Y*(BlKG5H-p)uwV6^[~bQbUQȴ6= ٻ[D \}JuEb!)6[BV/ ;X|vêY.z4bQU!>*c7sx+"Yt IRQC6 &`Oo9F/2bydӨlΩ$pͲ0$c}۶N}+M?)9t*c-(kM.K2ĸEwx4.;iSZD;UᴩA;c8%fP$T9E弪SfƼ~!$hqL"2M-V6>jNj6 }RjQ ?2%K't!{DGY'4xG7X).]% 6Zo-ؕ~ưyMX=Wj8q~+szf߇P} TwW%MNvJB!.q~FJI7 Z9&3g ~Tnz\Јp#*<%Gu[2u6{HEy3d{tnKANxAg'MGdmO'>T &ąYF"AYJ/r[ N7Sb#V.7$9snh9N&bWKkրpD)cAWuAFwn7Kc/²V J`޺(5'6j?cQ-H %4gK{5_zZ!clZq -X*Q59fA{8.+wdO ns65%\q kv hVD (uk#S(]9]2[?j>iCd-֭ ;{wGѱRb۷ *l~ m򯥐zX>)"}/dx~iR;'[cu '8=`=vvͣ9P?E푕=$2T΄c*4~&Qmbl~{QᜎKdђ gi/\IZ9 N_ț+0u-I7XHې][9LiZh,\ RE52TWҁ]6Ch1/C4(Xh6$辥Ώ^ bxEIm^aE–GjK[`fMvZIms*+4v(i'd~>3i47C:SʜQ]-X>p]3BK/ Cl- wÜky25*]tW09~"_$b#R} !_9wN1!~h7xٹm*YXԀr0> 2θEx8QWS>.tؕQM'8͉fD%^*Uo?u/nV<*IRFdNZA_G"{]Nv/&%/Mn}j~|0gm.,)u,rp*8IL*_i]Z KgVf)ۦf_57_gROvV{xqQ/B8.pvΨ.ug 7񕺫dhɋ&S"Ɲ#&TXك~6n$^V>vbv[]嘧9Ց;qaijqX;E_hf[)j}tio5bE/{ lUSo)7!m[m`'OOtK6(JWO]au)/γP9͛#᜙A:C-_R&ގ[Ɇ7O N ~cQgݪԀ15> Y2}s}G4 #¢9_D*6v,?/uۣ^, (Ƶ1!FAך&/n+1f}{LA!\ur3S`FL~^u|Ez@-DTEBod@}Vaд9a* ez5ƫ!GomuRnwnL'q9ix,C= PnB0mg[c\ئH('!NZb[F?_BMo/xUy1A6rQKժu}Qr[iBӔɲR߁#25_.=+5).T7vfwgþʯC]9oTB.CW|ڈN"aan\Q&ʄ[lheTt( y;!=LK q ZߟG/^,%~KjPy!r˦Im>~ 8P$t+Ĝa;G'x\@X j| }_Q&QRR"/GL={hT.@dL/ԹiLgT (9 bp2ٵPlY\4 hJ 5Y? ꫮmbV cp] n{xm! 7g储ZQ ]z4ڀsmmt@vSJ%oTl-p=#ݘ332NC7^Rߎ~q=vE*3:۟͘uO8)wa:sPA2_ $$*+8vn8%JPpR k*e>4PVBS읍%Pm<.2&9cz8KGPJ`d+Ø3{CX 0Sp)lhΞRVcL7@mԹcT)q?66mn N`Gf7-/lbJ|qO@IGX;?k&J@|~Gz'WQLC|j]B._DziX2zqlw$[/dh`3&Б3}ObUz` COPRK'e{m~~kߣ)Mb{ j\a٧=X!y)Vo{ppC_A1Qsjg=R"pY#'ЕA;@XuS!?F?Q6ߢ=#/ د?k>0&,O2Uن,ޅI3K @=" pxaщkNMV\+d̻ }{/y}2D WDCcT>y+aAN̪NOTi]X)mgL& EKx:fS/p$WhvT7Elb4&FwxŽUV^<1dQ8N+G rcܻ4'%|P|,LPl*ϦP&aϏ*?X)oEv1sTngF֟Y`K! .T.'G]x~: f\; !zVfo̒k-^؁"j뇋ĢRA;,{ދ`o.kD2D ָ~]EFz@J\<aad )v}w.b@=WKkKTmY!2kC,V=zZ֊#f[Jo5I\Hm3w67iV.z+N,|աf B!eTNF@+}ddma+,Q(6tyfիvJto{`*M.Ds:lE}-Q53g{MSnk'V.#@=sB-[MSg&,s,N$h\#V5T٢xp3кJn}ؐ,+乳K:pHIXö# 5 {&u|25<\\ ʏ5z)@s[EMtvXτB99rj">l3X%bXmN?6z1 Ai+ b(m%l.c&RAt:[ w|mqؗUU="ZARf1ԅ=@UจCdG'66[S7-z/-9sQvDvʘ(G?$u(K{7N艕r<~ccm>7pTiWM :$5}pDZ5:WᛍkتURHOy-6%υ mcLoiA=-U!T BT3i@e$W,B[Zy?}9X*cwğB1Va 2Vv%d7ouN!U|83UUcL}`9Y!ڶ<Qkޭ\ Ƴ:y<2C#\-lmWb? AddL# c|Ap[jlW"=8b1xCy_o Xw,N\*%;_#2ݎZuㆤd%nc3j|.Ig~]_x2P6eVVU7ΰp N <3]ȥnKmw>ۃq0 ״5poonI(Jy͠(4w qۼ_2ZѬpPieGtʹ'@߆^ ]sjc$=\Z7<(g04A˯t$K/E^1qBTwJ(jo`΅'oy~{8`q R1Ho)0CJFl&ú,,cvӇ݁;r(ѵS~piT9a"xȉCE.p^@=/1vDX(#S+t'K&G@3% QZg{>"hqQ#v5M&nLP`o'o"ݴ29Q.8ZнˍOU$6A:.}3ք7 ^7۬x;Jp+b.*+y[s[6{޳.ۏ"}5& >.!4MئM%gnzofd 5q7bKPq(ϧ K=HFH_W>iˌL 9DDlQF{D _~{7!I~k@јԦOɌ+ $_YQkqt Cd` VS\j=V sVz|B"dj/V"? Yb^>_7R$ eTfS1al~Tf E5j8P &JXJM/&u IY!7ਜ."}tOr x:ʨ}{ MK8EX/0W($͹=oЫr=\W 7e|n(v̗\!|z&޵TZ{%^l?4O>JvSYjXU(5Jl?sյt@,J{.Ih-&J o"hgǝZRADLת0w1Fوu9LC<""YA9uD?"oiFD \=Of+MHsl` 3 W>+0 46NE`39ξު #N4ֹ׻ػݞRrkj_EsyK{뤆пʇ0=C0tF+.rh3 ]R 5r(tx<̰K&LLqc*8KqW:WFq֔ŨB[n=>._uc쳔 E ]-q.aޅW#w@ψߚ8qcrZHjN3FCF| ӿv18Vлy&q:pBiPh?iǬ*>f{L`WWܠ@<&5~cNum'^p&4<ښ/ASI>TL:w3%؉"3E8d IY Odi7-D2bnayqRf{r4`Sݩ> M3,kΉ E,+*}Srau#F)do(_BG=On!I340 STaO {\yy^vG>U|>[bhz5@w[K Ji@8kwHm^h̔$B`\oXiGEPMCB`?P;.F)?.F>2^P N(,M!l^oP|sD[unF*82{ + Ʋ9 L3h&Z ӕMH3|SVR)%}rUDЂNkX<ߓf v":ؾDNkZ778Y\']5:`M&.;ѡRYHҶCkǘP`45Se]QI/7}VVb LJ?^+ͅp&_JwJDu "t2Cݥڻe DK)o_`9*X"Q=wWd.ivqܢƾ*\5;uc.2~Iqº°Dywe{?g9I$jszE+j+dȑci:` Zך[iUȼMAD[M Pֿ{B9E4p=\&'O[GUl"iOd%#n)VÒ9/>@I}iIFy?E7Lv5_ TbZ&&,s4.9k땖F KkbSː]P9>tS'pҌZ^e<=8DP2#,8[m/ r#q/fif,k o/Hr 1!|gf|6LtThazjS@pYuK]U4pVEvu1-Njg_=Y ʰ0?*[pdtKPtd4e+;GáF NO#eQX~ q^u,|Wmh2 |_-0sڛ;KTqʼn#h` ֐uҐB}ʻ;䅷6I&:ϲG+4U/wP΍`̍kP9}QSXۓe%WEz; c:p+Erylg)N ۀ`ع؍$T'ʪ+nGXC>ߧV\'q=` ;#~8%.(Af%Z "UZ H/׭z $k}ma1cGzUS3Cu?dMlIɖ*sw{$ힼx7R%/a!b UX3>+:D~F7́7t=~# "#ؾ쑭"c摍w06VOI8~Xɖh*6: FPxM!'5\p*rq9Qt6^ǟɼb69Ey-4xi+zAam/G/Kc \ol hם\ջ 4#%X^SPhp(zѫ@c%gdqn= 37K _ќD$Zaď/[6IYpMW?*$(bD4> ^_E֕ri& ;H^W;V%n 6 x!?| ,B N߻JqL-Q^}rj-g1J cSg&&+ n3"D SNt|-\'iO˜ ( 3aX*x$B._ uDpu;F1 4 MgsWAfuL*@/*$~eϻ>:& R08ej!R"BWs)4D[dшYmUzq8n(V73nb7\ &i?>ק{p` l)'Xf4E/XcxR12306z "`Şmmg!!Dd"X>3 mS<$nXX=M h 7%nng?񘇶ߴXrbr;o hyN~P &,<'~!Rbaf8@^t`IOuh'wQ5tT.g"܏ [u&يhK*S1>-L E 䍘F*1v$0TrD6GlUW h1=wƌlA@" *QC/D)cAUڷxnRNE f#.tBI* qAuB`8\_(6p]|#ߐ$b{hD.=^`1 ~{0 _ ;ʔU0]J"m- iv6myȳz뇟ք"qvuib4a%~YVVof,j^9p)m|y[In[?9+ [~svHfJzTݬ_ d5XuB;5LkCHBO"v ,ZkDB-ȔW%Yӏ[ǎ0J7$ :nruw -o;^$ > ]MİJH,nOmAt$obipNpLw5ћ;V2p`t11ZGuM:Ag˞aXN34nB<+xjd: jV*i){;hoBHĞZc DBgT:V E7L%J<㵋\Y?M=CٰeM@8\`8Yo>"oaV,[\EZtC66*XAmzmC^͔3b :Re֛Ttqu9 aq1E ћ/uiS=v$o^AɵT_ A+$2xnqKҗ2LĮ!9D߿`2 UF ^zW?:Œ@] k|RlU>&n [)Ӽ/?OR@?`Evɮ Pzn̷rRK5:~ԽPTd)M,42ܚztLS3^ԫg4\9_Phq;{[-z.Jς]2VW/8 Qpz7\!{͹ŋX;)t/`Y'P\*"PCCjpgEȧ2İL 9'Q2Je0{{j0Ħb:tPE,jh|j_3>X? ٳ53SIa༾E4Wݹ5d<@, >@t]YM]Rj鹪$ 3Vsa[v1[OJ)Ҕ0댃g Oz[i" /RԪ{ cfrxI(#qÜ\:idysBSы)Σ7llH` /HVK6 W!pn,LIZ/ \,i,{GNkwAW$ ~I%<\ڷM>̳UĂ\ S&2W0ZS]mXb0j|Y*k $7 9E_߇7\F5mY}pK.NuMk }2(YzuzaUGV؆HaZ'<[La[ qn!u%CT:Fx;1Xm _/텤mѤYB[25#=f! ~ tWMτ ;֍4m؍1[SCB^ec̼* ֶ!k&oSe@ʃ _x3ڢRPc 5SMF7ew^?Cvq|6("PqS_+DY.Cl|YiEcArv f<3kF]i'87e@Ź(s -Ь=Ś$cM\>:]#URʭI<zoKyK5܈uPX %T:^W-!a3RyAGM]!JXub/ͅF/'f©{I|:WeyU  ,mizϳB#qʤZGO%|*7k{4cK EQނ\eS4Tc:܁NNp1[",Ql246+=6YpN jDiB0rD\XJmP/V$ru2+G_2wa%zij 0w6wM6G qcYdM 1_QkDC6ñ}EA!d 2oTeݸ_aR#A['e7hnua>fAaM-pD  `.S uJi+Kz|86O`L=M!#{n)v;V ?gʄXq.8eڵ!C|I`-p ׼&{g% 73Y̎xQ#r+!չMNi#RyVEsυ1T;sJހ%Fai1.~1fLݏ5B¨UOViyv*^3`GlA8);7w4E|gFOʴis]QrjjŸFy6TJO{dGgr!6!mN I7XSLzR!)f#g *˯!:i&ߨ\{^Z^LZyefbI.jWM;=vIC#~ Pz"/Of tZKqֹ3D'A%PO(Bj6pFُ >|F! kBdjW8ڗl1 ^a3b죮EH. %Lqj($;Rn};%D8A)E{^pD7q$OtV*`7 s .e. 4ucBTQa>bǚy=>U)Mnj}eivܔTA`H޻~0#r> jp㑮yAEʱ^1,<5a(Smrji "(;UD|ݪ7pASVz,Auaܞ4(aXN\HPRԣOB s4:~ h"LH1'm~ C`đv|Hk;_*2pN?QˊZS_ $sv®i wjdIg sU1K'km ˯A`XbTHT+viaTW=|CyΪVwQelA +|Rj/C^2P[Lhӗ:4*ʒ[x4`Aʛ/hAZ\RWhb\W'b %EDBkn\1x1#a3Qad*vY9-f`G3&-6KL6n1'o} H2Q>Yiݘ0 /P!&z#5^{KHIbo* 62\? L#`+Λ¶̳(wQOKay*[`e`i}7 шshv>獖0]{vq192馳^1$̲"K72N`LVY/!5D@ ^3+O}"C|h'q@+R MM+ hE Xp~q*iQS|GwcGCgf2mXX\dRʕrF҄CtMZz4vGp;jd6@(/xȎ:3]$'{]ͩ pĐ}H[V9 ^4Ǫ>^tݐF>~]Ly;W- ,~-׭V!(13 a/]yuJ)MFQ,\6\bti`v\ 75",tª`y ^I%z4~[aw_mI ~ReqM V]/'aUL$Om\-#ÕlA7 ED ;q>[V0?`R#K俟+uHF9Ȣ֍_ВdtMb.配2륹B V&:Tc="eF*uM‰$(d3:PHD-f+ ; bΖg rREM՞;i1KO ]u(ZEo<ʌCy-5Hs ל e]\zxS R l4㳬a~ae\/ R:t|gjq:qI0z!F8hpѕ \G5CRz ]k'[_V-6B5@sXaY*2.nqb)-]{Hp{@\rn zoNbG3qNfr9~+VK ^8TϜ4K8/!5/AϬ;9"+3RˮE*Ax%"-ݳƋ+V S u78+v*5ꦦ . F1#cHIqBxnS|1w|"BT=ZZ7=tG~]4VfVM\j Ѽ#xm|-Q`BY?2I%$/\֌85oHFY3tN/ϣs+@6vVhS+̀u`MDrı;x=CFyMm|GgJ.:`tfDO4훳iR`DtaxK4G6.lcc!k4Chc7Q')7mw`n#53(U+[~>d Vt<̟4 t*ЩV˘o2j}هz:xv)R(p`+ +"_&~wJn$ʕVMޔ u@' 3Ȟ\µ'DǓ-<<s4r{6h_0dnzg &6ö/H$Dg,"x4O8ol˄~VB-8,SeP@ކyd kV5#?`l}m/(^1acqPS }E no}}2zP$'ba 0yV18}YFI!-;9@0":nLƺljΨe,nuKHCߌ7=pߤ-^~EI]y~|Jyګ u*ng/#mO8 5Yȍ&j+ݖ|qEOU5 z <. җr^ocuS[H]G'3NKȋǣ_aHoPNwC_K^5g#E/=zPTSDx-|<ysB /i#hAxebY*^۸FU<S=݃T+k}$٘ܽU6ۂ;Z7ژ~h,&l#V:eپnKeI~ sbU4>^EuyLϛ/Bw<@dyX"sY=BU<>U}*|s_#2)zKԌ qIP!띯TI]V:rPOJuɵt M)6kQ^ GݴZ-X.x)ͽ-"چ^^\z="(}[yD#:)'Sl0ʴ+;PgשD|#DGyj sՌD >ko֍{VenܩMB;m%KuQ=mVb=PL5.cKO?bg egʥ8 (ህpFd&Syw,w#3 D/]?B<&Ti :]!3=SϞQte// JC ԓI__,⽳b S~S۳3f(oצqP`ZVЗJAk di)~b69zeXok(voұ.=p^quy5:h s*9}F*zRY5r*5BIRi#wM&f BS)* L , +p+&U}Nf?n%t$plIp&e"Y ADM?VH@7 4naf] [:xGBQfg:. a>A߼`p44:sPST[=ifwW=CN*r9X~E&~xmOJG߸)s]&p;-ƧZSj<*c F z 401ufjOO1l ?1Z6dzoȡY[טy^i8GTEb!pIh80G1W͉Yt/X|G{G1)!=n,ɶFw艙r-CAQ:Mbs8]uٙA=Ǡp8}cC!iu9s +E3+V+f4ƷiЅlOfuFt^͍L` Qbmc/Cj0_csbO`fPFR6=-3py}49 ¼]2z6W/_lfACbӠ%a/[O*U4YOang5l#8oh t˻n,;q*ݱ#MKԺFZѡ!6>Rff6,P|ڃ qUE[5!^$lNLBzFYS3 /!D=<|AmnrSj:neiE=l;DüF P!X#b9C-̀ ׿ 2:C4(K=D0ʈ*s*:JK9\&oJ/pz:#jGv_j!ŕy +m 1JJs\BAsi 2$E_& 7HC[i{뱤PB0ۇ2a؀TbV}o",R43[jl>ԡW9bv oq×Rr%5[몚/ AjոzyUCԐb1I!,fW @ e&t+`=iA^fl\dYtbKq ܃Oۑ"]eH1qZ2ܒhapJcJbbl@ n~Uq1L{tZ>:c֣IF#*A酦bze7 TZbFJF8§ʵ n_h-Ja+p0`JC2Th!ٟ'V-!BTW+ُ|*ѥtkHjUS)cw19i6⦴ &;`#E~~^cqkv*%zt?LU[Vhhdj&CSc ,YM3AP?E\γ/),-c9Aާ@_dܿ1Vͩ^,p\Fjҭe?e{"Y yA[?ŅoOȅ|HC"VVݡNh jO| 7Cq(Z L3ȅy0N[ _tg!\ab|T^Aۋ Y1 BmS?G;$.ܮF$|L5 Iu8&ke$ŌPg8W.RAu5P"P?ja).{o[w[%>f&VPNH T =0> 4ȏωs5 7+]EF!646DKrVpxx3a::>kd\U}Er!4|W^սTO*wfUsxs 39/:  [&2rvܕ΍ Lį[}2/+Aہ/P+7wT؃qș}uZBuDe@-VnLͯ@!f.2eEq'@3A3 E P{Ll~Dș9ţMHhǡSMl7d:rH6/Pmľiie΂ENl߬(k{Ǐ;",6"\oJ-ȞHI8-}Ihž^D]657UyX7Vbᅨ2Zh6w༞Ncbl6M}.,Ҩ RFaTa՚91*+89 g 9=ܛ Tk+ il8vefw`)[BWŽ;8\K4Q8c׊=FiL @:Buqgk?T @Au?ao>:xY)Jaಾ(4:(w՞D~4UcOcysӝivd =PR1xL2N{C"ILeoQf>N,:lNYm[$wJY NS56)KdIűxC 6jÙ4LZF80.IyeqiAs}}{؍7@^,a]yO^Z*Y(HXǥ1iZ laށz% ]' SL,,ɿy= 7#?PƮP$|ss`(4,Vu9h=C-8H; YقQ[0QEh,Rc[aB/\]ŀ~Cturzf9ڳβ&,Nb??Uary'$ctg"8 *>mrMG)LJ69G楟S>U Yqerhl;cbxWT륡{7VGMmEn`@TWYd@0ls2[@$O"~1F~Pu${R:836Iw=? M$>1n8ISy 0@B|Ow'EZԼ*!s9/xNDwsSZA|lnYύQ=. ockm77a(-!(lG 4nhC]֤rH4_,Q Ggc)OBz :X+c t_lC@s2=QzϳZQBZ(͠2á?bw. @5:pd;[ U#zt0vNUXC6 [4wc1okc_p̠ԩeSg m8yRJw2hÊpB" {tLc0Tq/MDq}:3/ 0&v_KդrW8>yDްd"] 9džϙD1A'q&vf0hTvUxj9)0Hf,nmck֔alK!|Qd1YH:c`Y2 u^7S Pݮ;˕! &ASk&R968YFH@/W0.^oȏ3.3v*cɀHs_9[[Ռݿ2Y*=߰/0h 7+ʲ (ɫC'Ea{nD|6#sfW :-S*mM̩RtdJ؟>Z)gGۄxl±Jz4\AR !YXHƳ/cx-"H'(3jh=W,µODy|99ST:`hk-^QT<ľWH ȻȇyKEvI-W"p5g6HK(`&@*l"m:ìdէzglD'p\S'X'B E9`1y~ nΆ"?t^LپW0C)< VKKy$Re` 'M5LP2ˣlL aS87+7 khT9lb=6.l5-pB[ⓘ2^π(LWMZI|THC eş!-$yr =k(}}!)鐒Mm}7TLh L.[X`J`,o-8Sl0K.]>ͮ3#aRs,tN"5XSaڌBZa& ZSCH#(9zmƯz9L-A=oڭ͆b{C3W}[@eD0ψ@\(ӊ:&Y;~+VS 9kvƠ);p/ SսX+.MI `$퍃FGdTvM۹'-yn9߯cv>Q<8 |=|"=Z rZ+Jqe@A-K>5}'{զIMdJQbx@zQɇq RTWYVFXFPRjx\R;$h*PL:;0x͝pFgPd(DsVx'QѴCG?bV[kd:,'˻nwi96c>.8ux>5P5Oh48)nMݯFptW]XΨ*;M >BuWY6:JEE;E-Δ [x}Sw= ~vodl6Safȑ1dW)֭tK>{i|Sg>V/u߫ Z(@:}q[!+v 2ƴua%uK&p$(=!XEKFUYLCV5XG'ָWA AѽTDN&-Y!"m63:/B-}EUfs^ dW/TPMybj)ٷDb.bn>B3lH\))hX#1 @%".#0ҜNl[uOBp \|w5\ |Lzttdk $Zcˆnn x y1.4pQ}}XFӕףR|WeWf"£w29# |Nf'T; 8baX]K4 1$J1j: wrjDV:1#0E""#:Px{<Ŏ1M~Uݔu뱞`IӵCIE8#7V1`𡑔6Fr5/ϻI{~MvԆ@G:0e cpn 4Ӣ1q{4Xt7-؎iFvNh3A"m\gj𹶖"\]+eO80"N+~]ZiS=ґĺ/ cHcC whףIx"җ.j UPdtF#7k>8whȞAp v]ZI$Z.wLלD9s)2w%v&&?٭ֿ/_/$쐜&/nTr*KMVsJ;,\}mn!1HdZNck+sR@<^YL;2|})% {j8` S':mwlJ@Eļ=@pZ5k.yr waZw!VF|HM'jVСwOv T9Vp&p+ ˘(8z%q;z>$J{|*P`ױ1+OPEeHnH$,fku8GF^WsQ]ER2._H].ӥ;KÞ Hvgg eYSZ 0̉IA6F $i<,=fGaʷ桤K;E}qqg?f`E<$ 樖8o[8w)U~<:" W!Ow+LW=Oo۔q1X,:PY72DGHXѣ(: +f1`؇yyG9;m&*m򨷩ӃWTz9,[~@0er){"N{M?ʎ#=a#?7H͊ ;RL=H_:,@#i0G=a2=ŬKti^!n=k[5ͽ7rʼ¨zc6߀)V!H׺&Sց2cۭ"+;3{O^ eO?jKdDSٜ[L ͪ )wD'T/wIa㦺eA1^831/cm*3`"zǫ^?lV/ &" (:PU%0`LL6= q3&f킷z೷h*FXf"޾HAyFxҶ.q43ߧD$[MXw:LNpC;,iO262y56"ht2̜ZC%wXXaKi'=DwX"=# OXd"/6@G%X@Z|Yk.Zjk[3x4e 9shCAXJ;rq!*j;g+% nVD ͛VwKM|q\XUPVr|6jdcLgW/| 4*: hȡO}UwF 3EĪPG'nV#FK?Ki8%Eu[Ցnvb,sЮ/iGlQDx ]1:` \y%lo4Ic~e^|.=!ƒDXl"I};mHIڑ~P%<^GlڂdjGTy$ezLDra(i?m0@0$e[P/{7J㮴_POOBRs Fi#ǘXTx"_*Ɩ#i0ѓ/BzA/1r'3*1Af- Hv(!4E'^%6@^\}`;fȨޔ:k)8Lt0dnDt[Rn`-v = eaPWC,+P\F]`I_d piqךEүa?X.~~uٸl8ёS'ޤB(95Z?C !TeɸFvş}GǑuם^Eq`cr$jcLɐz@Ҟ2oH>f.C=zB.=$!ّ̣3vF@f:jiO`*:DhE cMfޫ2<~>!"uzxS$fvVȤ" ~_Zk 2IqY9g{O%3^hj)k!rl㼩P0=MNgEiNt#Djx6x"0­d0umԚ_P-W$!{ZOQme%  03Fl מ60O Ўt< m30vTod3⊆t#*id?~ Ńf-1H'ed]8K&~'6{ʜ ~6YHDFzDcy\56L$MD$U0QL8̀%5jM=R 'ޟ6ӡ\)|)5/ gEsMAC@oioeE`ԣj1YZe؜9+;3g YL' oŤ$>>ZBT;z{ E(rZB5)eۉ\%6jۃ }͠w]D3()*lb'hs\O1R2oRGI?kn7A<j.{-zkMruGtUy0 \972GY(p so0cHhX<~tl 'pEu$`a_I23Yj5UN4:M׍yOi-4{{ H k;X.;mjHq_( voG+2_xB(;]yޕOٍ^L@FAaUNu! ߐ8όӛ|h8N2IA^5}& 3JbGqZ#*Z ;inRNǽW;{Jv}Wr~uKn5~W Q.*{O8kԈ5 Cay4UAAGdZ&NM럶muX/KǞhUV$30WLL⻕ WL(-< %Ȟԩ$WQܔ} '%# -q{<R̅3R- K>~j`UD߼/ÚnW}hJ7{%s|=(!?8}c割Vn;|>|( WXz7Iz!nqP"S3y5Cф:_=ib3 %̫_g-=)E*4bj |{T>iՌ3IK+IG% snhփ<(R֠ރ9etwO@aD vr;FT&bٵ"S9tkf%^aڽ@8 Fk=R u06t6/!vppjԫU-JeUFP%qr~ Y`%6XaW٢i ~#fSy%$Q~usFv)|hD&"r ~{$̖+oSmijxvӝ!tBA+Rܷdz`2wWl zt i;pO<+ݳcGɖU݋k<.`^oz6ӬpOU>É0NdTM"zϩzyi FTױa dk׺#COpm\2 2c~IאVbUN^G% ̶ Z ѕpvjavѝJՓT˴ 0vg8݄@~ֵ2+ Yf;w8W\ߥtXqǶ4aa&;?x<({8k Wx Pf#Қ\c,)`R-Ʃf_mZ3$Nhs\zm2*["j ˏfͪUV /\8ͩp+iDCkc(Mt]8ڥ- O88O)H[$䃩ZCq"`gT,SA34B1pdFcxp`|HثGi\G UbHo;/;0'AG)S> G[*;ՅR>i^x "ch~R0> 6$`3c.:gQ-LC%ppi<=U[y*Pųw s{mnayշVw ᐒױBsJ0Z|K"3+Gk.pEBo e2Im$FfҼjC\D(!;}g;KW@*+=U3L9V Z$ԤteFXёw/R33|$(7'dZi R bjһb"Gc%@ydfc>+_7p;m^HF6uX}O 476:k*Vi,Ρ^]wQƇѧ~ޛ"$crݢ?(+qd12Lu+֎+q(>ƗXnI <C~) nl裡N:OWb:. HwOh63v2&\{FE}/ ;4X FA`Q_~RܺOX/"nˮ^]82A7l )߰{Ō)tC: Ä+0hu;MnI'dOklFEix/q7&wX,JRKmriRrO'9(uv1,g?tPhW7Sӯm[)&I'p^z'ϖ.CF _&9K_Ln᳓4AQ%?fh=AB9ξrO|Sƭ ׿'Ȅ@-Núߩj#V7Mq9P|23Q/mSd\7 Hq@ '+P>~EeLC C]1:X X{F~B)5.qmuOF$$-*FĢ—՟LrF {ه'+Q7tH}Z<v;Ed]BVo;1,V@aEXTiU4ۊn:/V%K[hҼ,[,ǡ0O);@p'K[/,/C;LZ]+S[(%ڄL>Mh {pRSdJ}a%ҜԲk{h~.0yסs˗NL[ğS(X/&KRF=WO gю=4nT` G9Mɻ@`/Dl!ss*ц8'/aOEk'$] h[il񂲔o{>RV-U`O˷;qʰ9t]k3\ٌc@ z60aD,/2`vX2H^-u#t.'pfml UKPvC2fARwRbHN9~ꌩlCxpq_J Y DO)DӦw`z\ӖE}n\6pu׋|Xsqb@cg"r)]rLХȽ 2p4| 14II}*&:^LE+ȼ c=^*3Җ+7o)6 mv5" yRZ41Of̜="*v::*,.wk& miR6h"sG`C;m= 3O_N0YF  zWș4Qi\_Y5QP7pR}/ Vou9uV@8Ew; pcG;G]A| ?Zp^H"dƊudbZ|\gB cr.-—Jb۾L P,B#) oQ*NnE5aiMWŕJQI~! $UJ~}Z7ShU)V~S' Ə!*%GVa連߳`Di[,U%?O? ŝoe(<T3wMUeI:O͠I6v݋Ot}T)㴉@6#w]W9II !d,'k4,ҕZEƗIN5 XX}߇"AH!,N'|Uf3lRxoxTȔzq/XG?)iiSR#+"dQ kcC21clAiw#WkϧŃYw쁋&%1# oX4_Tko!O4Rΰq/~/FH&ACuc_FHs>ce-0Zm:E8I;2Z P#XHYÓҌ?iv3%KDZ2UL֠ښ(yKY$eA/+LA>yЁnO/8~#?$j7@!*Zs1r6hGRVW2cJ]iK{>s*iҶ˚,sKmMPЦkeSu#+Oe.Υv&c)&&ESG+=uH Nj'aF(Gܬ';o,hcCNu9Nư AR3&l8h!-Dͤ\'ievf-eB쇹2jIq+C ,jE&AM7E9ӔSމ}mpjyX+.`` xm=x愹C#Ѳ8N`y%@5NqDǑC-;\ s{}b(lIX2RgwS`r#]T(VsQa.t-' SJaZo_H)ȿj|U#qVR'_ֽ{ml}DAs}oҧ~o[Bt+om )%IhG|UcTC.)P}a`[Ӊ?D9ҝb$hcFw⅏Oa }zWG+N|?Ih'  ~dGq:ʪ 0zw֊:| *~Ei mkt$zb%Nj A_- f%|'EU$x?!ݧsw܅MC|%`hق_*q;V-($LÎQXI,!J-]'"/xqyNɷ6Y:޿'i82̰3<:VR-)ma2t*d9pA"1ҙ] ƌMF3dU]ף۱G<4@"NVCPYS+ҥ]FTrUrkyid1fkwppbR1̭ғca2]mU鈤Qo=v}&NZ4)闈Z B& tp6=aTf8BJ \K,cib$5-#Pl}pbs{1`yrcG;Gcr {,z^.vMиL`7M1IM YPٲ>4<Ұ?N&sCٞ,DCu "ٷ$Y k#9Aҕ%هq2_k-+h_MZB:2F gxD3:.{ixZbtIjdr,v`jk=W"#x9~QqViY0+B.ء1YK1Sc޹>p:㠣a Qp2 6٩)}.{=sGs-&wJ6]옔nM^ivB!b;6qBf>%F@rPI<&ccN< +f+?J9ǔA^nn&Bl5t=Cx{~3AzIȕMmBV\ͤ;3Q7cDBz )yOM?3$^wv~knƟc2L.[_˜к>83Y=EQ PvPgdŖlU {VE"NY6Y|N aP h"z?88$Qh$^i49c!nX;wiPGH.KAAƥ`L#UELӐ/~ ȶWX #ugLJ]2dqA- *2UA'ʗdZuQpp4M\BBP΅L՞Th ASX"}y mWezj;\\'ihQm@;8l%І,U$^z J{;IAw^eTzY^Hw!l3HhJ;Nb&8+VV˰T n! EsCB,Ql8tM@rZX'o i}|*T8z!kBS͡ASNDFOiJv+"(veMEfo {>Z> m^w )F^Upem>JD+!=| w15'Dʓzi/S?S922Ze$U zN[? ##t_}:A{C`ỌMBg#@k=8(ﭤRKƵdC?6 Zxz wc6Tc-Fl2{aeR4G%bK,}є A xԤ.!4cRݺ 4p72xGWvs0a5n M'KMDC(FţnR`^)9SuAR[r+ւʆI0h"18@Qb )Q$\Fa v3tQq܆ ,<-74_eZUՐ+o%![!r,6hQ glT-7Bn7Gk?9#aDV *G"y2XRt9ѭ>[fNClDb +x yG/ҶKfAQk>(\1ʖ+fHc(I0!Ž/UuGjx 9.{L H ʅTǩa~i3Gy#Q[SoonΌƠl`o~*T%|mT|!+>iٴlʸ\bBm̔ʢ!bB$L6}td'])@fta%/"T" H]F%n&!tҖGȠjӤm-$i*}nvGg2򝟐pGGCl``b?tLҖXw':˅cc W/d1,<8/seMf` RjR!`,w[o M U N*C-х MJƣ \M|pI)т'6^x聮icby2k7>DK%(TP_ezFR-Þ& P񊛼(^UK">eҭ+kXϪe$-q2R_昬ڧ$b2~?Bfw=\Uhh]o昻 RC o(ݯ7Ļ҈O|ˣ'M*}O>V~^KyRR$}yBp6Չ&ryhmMVTS;Q oA%S?(y}a'J|N=_8Ll%:CSK>V%G)Ir@f/q1, OPSpi͠Ea#"Ǫ]laN|?((AY]}1t Hބ՜18i~Ornm@;tdzzw"T* 9DW )7$Ҕ J\Ob^H?t/m-5f}4 E4բy.L%8WK}'UIJWEGY1IQxxIfG7ӺV) z^Di8=:aTHScnSb[c r3~:=N??njo)1.B:̀˙&lAyu8(D,!$fm`Mph,/F[9b-ӝ: W(zukke52kw ^SW7DW&%w-1u֢? j-?aѾ?Yߗ=nhY t*TY=W+1ULE/Z?=ۏ-M&䪼ΦsZmc51ucx^:'; ύݺ+]F_k;·up]:Nθ,! ۪=6;C} 2'?mzC8UUk LB٬眳,9ܱƋ>\ſ%$`W?j=!/x]ygMIB|96G+I(J6_'7 f6JLI\ҖVocQܠנ/ RҵC[+L3*4B&hOJAFf(u ) U5QчbǮ< ;I^*10?i|U^ $(9&1RmhJ=j>A#(0O_&p}# է]3Vc%Hal!`Q7!)zv"J#w#mE#:iє1/c=pg>>}9B `fsƩs^qU%%=+FfM|fO2NSu8}L̾EX̲Jy8KhѸI_ yK&Qx,ĭUL'&Y,;CeVބ q Evfd8kBDz?g?ma eƲε~nB!醢W+'F*_ܽƓ+$vh3sMh7KS]V^#\ '$2{iOm{Ɇe#5<|{5`1ܛ`{%bPP}<:{ǻsFpv1=:j٧g>3P)AUgZbDz\x!w@2N4) fn) Дh/GPSxwjx|ƥ[䫈t`n ϧ&O*TԥB cS\[rp_N@40#xLЁ84܆K~㿁w0/TFJZc;? 暕9Rq5uhUr6.:L#K&WDe)Irsaw;{KJ.,i0L9L>M|p@p hK -2_lPYe28b0ύJ y1p&Ĵr"e3 Q^Tm݀,H0Dp7?ئ~#;$&..&qAo9 ` 2l]`-&?% ,d=[=r xwR5 .""/W6m;-Υ<eJ6⹎q 9TV'L@X `{ʕO> m2fBG8ߦXYِЇ O'>y* 䚑j :.R.Vdbͩw ZzU b C]uiFW >.lO-(y(iW|,F:!L;))$=Z6']ouK [QÂF"H!sֺ̳GZ=CD:fv1 fOfSMVlYⅈI'bu߫ͮlM֭ IF٬T׀@u_Ez&_VNPpA3Tdž?+lt&䩫7^J;1lb4FvJԑi)<4 .Ig7PS8k|oxQRLpwT*)bk6 kյdAMQh@/"!) @PWH+…z{#A^ULM?}:]&rFhV`Xrki-hp#? |5@sNZ+ k;&98_d5 {{}&T3tf*b;RiheeۼjLO| Cc? 4ocUX{?uH'c5Z-㨟jǧ:~mvw j w :`-R95WN yAIl2{_{Dat,1 . ڶ!8•+\0ARf~)Br FZ zi9D4\Y+fK,@XYЬ;_EE-#9WߣmRӺjN:}8)2 Z٨wGm3x.$,c'P[11aّKTiUqd~J06T<'Į=8|w2cDFۗJͶqSK"KBwWYjP¼ik=)ԋ'qwR&4Ɋsz>s* ^b50$PPiȯo~8(y~l9X%n'gJ[7\ȵLHHT[~$o =LָfmOZ G/yA~'gw,0h=!r#M[ZTzQOx`/.k3P+nփIpB^ c+ n#*oW_&3D*>WXN,<"ܒE0H0 V'4&_- HJ8jɸbG .Ω|* %L!v;ÀX|bbuA7uht̨aDY睈H:Vċ#KĖp&Ə-aC}ΒϋFG#G0wXBFV<>_Ͻ5~i\Y<}5͖ +N` t=.՝:XEʋ( z\x5 9>p d٠W;NzJ Y3E[Rty6u گběm q\0WvhoW#B5>Nѱa'<r0ޡo}#ϛx-r0TQV(̕isg>A {nw#L>t\Y)a:ī%*T ٩r& Yky}/z$yljEN7)%vn5Jh2+ HZN'V#^P~J˼c%(7Z{<@"?Jʢe.&,e_#ʘGJIn/}*:d\jl{ЃDt ^3Fk`F1?J>'dO*եpZʿZޠ̮)@76d"Y+MUr)>"'(rɑ@_Njܛ.9d0Qq%v!N`%𫩀i]) V_]K6|a>ɖh9=pwXOMْX*e6Ѫ-e@!+xUڲ \xbuU) 1fĊA3O5Ú*V-K ZoL #>zM#Xnr Q?Offo]w`ʑo *:!d S; ~.Zz\bQs..SV D4CRR6VdZ$ZLLAc-<eRYv Mʈ@g86nQfP,Cq,*I&dK*kf)Y-X9 %FVqKlMy6 ?4a?ʷˑdvޥG>01 OfK(ݒ3P Z~ArW 4C]pD񉋛~D'Ȱ@Ԛ7e:!M=evϸ&?egxJzMa.x$Odŏ-2|4dnM;sMZ(P%R@h^m6Q8C<'p00hKr|0 fyQaIF ;n6Ru>J;_>v1QWcA%)Y_wNN +/ Z] vʔf3m~cbK^ǏX <mL?dރOF2]"?3v6ʖ*B*$bS~kn25 Go %q#fđK6%uhZ?wZIǼy>nMT&B- {kb(xq.)hUgy]/AP6\i0p;p9ϥ*XxB"OOȆ2c"n7=~fjheku!?bD#sr9/Zk ͅ%0E} Z8[%]'n]?V p؇f ` XhQ5|-݅bJEKR3:pc=x7.SE.S5ta(*hBjDGmˡJ?iBtE:tVD=PfE+mVc$= wcf9#$1 Ls̞a8y6oQȱmp'-dfB#ʔ XtRSDP3^> eT(v I2-wYk5 .w@Pa :1|cy| am@l<F MC3f@B'ChflpPi^-;y] <⩅N()FF\Hp~IrhLi,Ko&!GL*9n$i6; DCm%loc IU"=Vh=B9wN'D4P6)tA\1j60u P^q^ wU& ˧H4-+ɤF%$&:s^5\z^c3\*fF|Q[)޷P{5H4Įvbq D*nҥ'{{ C81u>\3qpbNٟbĢ]EJ<λ\?6;+$n%p^o~c8 ӵWr%ſ0v=)\fSsӞz7yHa7lAiĭ_ $zA+M1mIAR FCCU'V;j[ mUHBb\O(@[/ l3 y`ݶq%~ŏ.H?zc53̟Q ocn"lWcD!d6m59ŤmYgq_m8AŜ)g뺪NzME~^Q PmԊGzAFfVU *ȝynmgAlu *{>abpDF5 {/xLtbg$E}>Z h0k|'Vn0 ~՝U}SA 0yX*F ,a$enaU9SAP gCj+jM,C_P?Fw #^+Qc-&qگ~UqήsOErN%k?mD(5t|&eXKۨV#:}m E^-1%37I%{KrݣȂ4xLov=A!dc{"܀P6+rcfMt3 [!]TiGa OHׇ{m:n)tÏ1UwX{yyD$$ZbaBkKa¼X"׀ fɔ<$BuL$[ p. $0Nt{,s;{?1ΦR6R{*zEъdvJjxplO"`܃m&ە5416kvWvGe.3\uZ:.ۥVpg`h9|PmFki#(+$ T4 ÒLUGjMr 8fVkt? X?7qYp _ ̋n+z0Ht!"nAt-qC>xm F *JÜGq2wh#2Z4% .F[=F}7[;t3[?##4fFU#8*4i5@dlrk}n695Vj'2`t$+mmw09Nja"7 {63jbÉM)OMhr1j*aDeQ7<I׹9EmhC4O?SGTwocsh ܘEQ\X;pSD푇o|@l'%]B|ٖ\u|$ƹe{?3&k艼{;aWhFkҢQݾꫴ`;"րB JڎVӺNe?{57#wt)ݳy|"z UhG jWbjb 0\Q(_ wN@Cq6l(?C3s6Nuz8zdY!kc12 I?(8뼽l]HMv1o6 X\n%Ib촕|DJdi Rj`kV7-"_bu0$ܩtF-r$ƤGd $@Dzܼ:]5ʃ70NwRuWw4,Ќk"RdᨣƼ ?UB5JjR.TcGK|MP;RVX威"h'3+u"5:=0`=s@:,ڠYor/7'#3QuN̎ג߂'fC ok+6' [Ju*:nN^*f(՗i۩FLKm*Fr$5nU!H]ztJD7Jɖ~bBv#o"HQlܘWpܢvl0ppC%.Ls:=T׋vLw^Bu&fN4pW7*#ݲC$ ok9.#`:}dM|3hR~YNUn P$e&}Ԩwр䙇w%H{?N1Qڐq y *q a1ջZ~8-8kоaQ8Ga0}1}PHƀ_Us_U |csۗoSW éM)8Y]=ҍeK I3wJ̣qóez_Wy.LmP :Z9A,Pi3flAu1`MI\pFq9@$6dtsnվ6En|.w%akR8d2HHו&t1D^ڳ)QڸlPb+"Ή)K%ǂ9~;JosK/qdN( Հ#H-\Sq ')EtŊYGK%j~n|王rnhϤe$~~֝aҮ& /kb4Jf њAO4t]k5 |ެݪ\$biɆP<օ5Pj5.ջC8+:TxJ *iiWeJ: D]OiǗ?5FXpxRKN(:7J2FuKtQJ&n=(vFbg=w"L ]+*pl!qm*rmg3//΃.Ik{FKtc<8P.;iQ8wιa`D.*Et84 u9I=0հ&4B=CT#R_v~%2R4B{{7`ƽ*`VzԚA(+dpyt]g[W_ZsNp\$WH[Oo s"Zff'T-yݳNоTGD{a)W)u3Tq[Ttݥ?ߙ0ഊtxkNg 1ܗn>j|^q婑[w,S ݑn8.U\#~?Y9ɼ/Ht Ť`Cn2QŒM¦dC LN@mr)g# ^ a"v GX k5<iGsج*elASD3([mk` a3?"bK*@aw$@ns hM%y^sP 6jb.T@vW 99cȎs<P܀vt2G\bfKɅĚAN̏[)xKgE6\ҍ~HiayV V,;_߹\AJ%_ݭ r .3#K Hហ^.G>|8C^cVeͯ:{\)9/:r@KYԲBjlwt d L eʽW Q _P"n sG&#/ytC=&]ۨhdjf[B{~@,;RҶI84d5JQl*ɵV"YFr)^8Eg7\5@Suh?H5ny :fs<ރ(䡜C -é~wOiEur|jSsKIe i50O2OqPMȇx"UYJ iA-eudIVPKUBDXdX\|~AH Ku*Yi2b\>\ u~´~7mV*&$" R =G(%0eSzgDz [0ʹӹE_M6/Ө_yG k l"9P4 ^F7K0@9hzҮW7-µγۄ'gp嬨.,9ጞեxI[adu^`OӹT#&NH;b/Gۨ"X͊BD{؟ꚬGF'q})npx?@gz٩?P 0|\W\Ao˂MYX݂UQrf~\5 |**x3VN Qql7V>f%,&Qkv^mG`VwO O(ۊ3XHGM}uIŭzgN'CV>#ȄMF;dišBW}q8vQIdrG:?n* ])@)2LUVaJ4^,1f1|D9gVl~8%5OɀaQM4S$K \8϶Ԑ bh`:A."z} ԝ254zMT#!BpWS?S4Gz#b }\FO Ŕj< ᅍ&?d' vOEaH!$}&Qk$, &WGw 9 -%-n%B)r- Hb3qHca^@̀g*ԁj*5L:ج17 mHwu3>:6B4ŠX;Vd6 2X3{OD4 p#5C 2Trov^Ng# Hu,hԞ}!LyP"ڬ֐M֒]3Lekh6璎DNpK!=" $3Y&,BFr](Li6|hjt\,[U狳a^3bi.*(?`hP3B|aG}eT¤r$ N:יO my_sLc,=_bg `g}:-}%&8R( k?&~βS Qux)0*S;Rjhj n0/;rRL=TIoe޻RWqe)ߊpUBB]68O1F=[`3:W|/ĠDks诐(D]r0T-Td| [z[37q'浶ڈ?6zI&C)(T;Qq͖:FAIL? <>#'dQI{@/gL{).}01FiC 4@?E+oy]wA^EbM?1k(90HDe Hۙ,-;ыw4≼) U=`3(@W{/ mWߕ)v a9Z0{Y1b{,qk?žLwħ?Pǜ;FCw#q\i\ zVdbSl:HuÊu):1wEG|!('Ν-GN[E `Y? f=DG] /\ k-VP8xkKwR*V~& ̄rH\2 iwd#|PNa]R=##XC@;ax,IgJ>A49r. eHr{vdq4wfPQ k$ (>|~Ħ͙Ñra`>^1 %,oR\V},EW,uQy)Y] xt+xZK[~FTY RŐ-T.T.߉iCgj rjޗ%e%:MScxA=$wAx_{._4"4'ATuX2k> "od խc{8.tݖ%S3R:&,^׆(ڮK{ #+v9(.8Y^73)ߵq z J3~hUN ~}tuNsyh2+ۣ]ϡ:ښB`G͵8JLSbjb%:Q40+㹲Y(v C+Z~ ].'@4Ӯylve` :D$n0YeQ ~xc"L/<#FGf?H#BGo!o}ԥYD`OPJAP¦3Ϻ% 3Tnk|sij̩x #ñ]FmR9^—{vY]]h[;#5li5k}K=4f-{4)^n?DE]!deS:*/;A*kK\)lIh}0QYk/"ߡ~?L K5?1P;\XxlB۴8<9O;s||EALںVBi`%Z'/u4fgku4`ݼ!JҐO. Ǎn/P6 z@s%qjf k b/kl}Ĥ#y߭c8T q~ Q-_$rq排"?B!1*9ـÑaMe[9WXvg)mL \3Qz`=\Kg;ιeAAD (:h8c}f%0Vڌq8:↨;؟ׁIX)z=tsH zQt! GxQ'O9d,;I"$@Tˡ4q)&& ˬZ'щjerc rz;`Y19^Um;6LZp#)-je)XM&`A:rO"yL$xŴALig).bBapqaSь[:l"[z^ Z~eIkI*x]ߠo zPya0 %^D r;g}lGm| 'Z h߼+Ǥ#ō6r/k}K9c| GZ^E*w\u 7͹樖fUn`e}+~c߿)<`A#I{X$L} a.bz-ֆ&y:ZOML|RD~%&IIPe XIi:? )qqC9(ЊoUn+t`X\q_K66)+n'rhHb_1tIɡ#m#CMgb x?k1KQ艮Yh®,H+A\I׬KR҇duJ&P 9*%CE7W-`{8>ɘj(( ʔ4ԁ=p=꥖A(Z5ѯ3UIzWpQo4%=/Al,wj5 *&ېWĔFp)(1(Bbu8nܜm\>&J)G2.D1<>v\ڱ^R=/}_iS2-#*Vke>Kb+O!aNqu V3l?p {8R2epJwB5zveqt5t5g%%\1YXe*x%ւ!"wˀ]E:XG qUfT7T>ZL55&v`llTg>F7U"W.IqCa` @s*/a%S>^>#S%L5 F7B%[WP?8a=DopG?@ӯ6)m1 ZA C #ue_|O.n,݉&?XѧeP8S--A1ېz]L3rhֳ }UT-Yo^\1'n|ݛnm=ҠfQۧvhZ^KAls嶪"IyRLwX;`Oގ!> fȽzJ{tزS Dz+Ma;#S+xzp*V#/RGe-tb-V~6_P2Sm΁Z{ojɓ3]Լ~B_HHe%lG.V5+9ܪ{^"^j%[ch. 8ވ*br75/ Rs1h(CM#Y`倲$ . =D8j"J&t_qo3N@-' B4Yz07;d'~bA/ScX>dEQ]Ck5 xf-;6*,ȼ-JÅ6uKG3uRmA;'o6Qo6T뮕5-UwOqOz Msԓn_Ĥ=f)NZj73Bgψ!GX,D`=jT@?I,\~nvWy sC H0|AsSҋ?`Xqg3m5u`3&p0v)t*8jOR@Z֍TeiPQ. ٠` Ď|{ćC{vJS0#M0mB 0|crja.d30Zw@הºQƾSSzE}qB,[xBB1&T! X"T'AzW[|((` 6(Bz5?ȑvT JlTEZjB~Nר]Λ겴UD8h|٪mkу0,/ ,R=:fē@j_ȃ._DюOB^ `DmNڠ 7"*oW 6GTlOڽ-5JB$Qyl{W#DOxZ8-֭xGhUx}!חG! f}݄ >SzS@U(d\+?[X:+_v ^Ho87*Ϲ{crwY/)F Y<ȍj;D^LFXc3PQETsTUڱFFڲ:trxdώ"ΤdAHη##mFQdT)V+wtU W=G+yBRCqe~ +.SKo<=ň ItkʹnvO_d3^I#0OY΋qg\$+{ߐd =8 rHMIZXCdd'&u8wM,-Ssp%&VNgDΪ?p5!id`xZaYѳVQBI a&0C+ٻܶ7Ŭb"^; 0fC5j3|տt< Z%JMaR=_%]`Nܟ/h6 ȜW>:Oqqk XI 23hLة)}2]^LelDG(BPu *ד?^'FSlP QsM7(us(ǑW/M*V +6\ͣjpL>IW& li*\S;EpV2'˪ifXQ<o`8sj##[ qDoQ'm# -}g}> =!ҤJ>y6:{ژ2fT*_NÀ<(H%2Q45RG ɩt)Qݳ lo.p_dJ`KŶ0 (!TSQq?%Y,)5C R޿J-$\#_PE8n5Cwkt?\aGIn)歋7 vO5 -5)QpG*Y6GIID_)rwI5qz'Igv(k8~vZzw_e]0>لޖ<7KBnJqU ]3i Lj6Xà@i&!dqK5Yb(u Ɯ͖EE$w-nU{ڋBCLs:BQTbcI@(Q# u8(’[ 7&$ٸx% moA @q[TĹ$߲2R5V.pGkc ¤.ʈx6w`ɒ_ۉT ǢՈ /WFل@h߄@”[/n+[*6G-Vgx)q=c kP :T/yOòd濐4t>JրT <&kijJI"29p~ TT1i{Fk1Fo?r .z^X$3A?ވNq,E}?3 agKQ98*E}~}5> _VLzЌn п mGfAJ@w(iWijuH%"[cBqZQEOoV'n 9@UOl u%E!qC3­1i_oz8|Lq^ڹ΃ c|e'QP Ue♵-#W=w092Y$$ r+PJ & |POfI)R k+*8CZ?aA`S. =1mޞEX^m&W`RG mR`ջl}ZS^T ~Nj[^AZg%ĠYyᖀ i J(6o'n Ғ75cGP>mRW\ &?_a8{,jBa<ۖĕi QjΌbtqTq= @N$B _pHh%Y]wf2 Q1ucnWsw]7'Qntp А '88xhNwAa/ ³ ;HQzr3^yx ֎V @\VXN nc2BOx}6ۤLدddѲ9(a_Q%dd{3hBՎ7P_b&dHP QyJA#~Xmׂ #vR+)@h۱/i^'ax ZA,}9"\xĤ8jbk$-h}_%:=Pq|dj ڹ3d+A%J{b37]-R},%<|dJ6^eKm| ic*b/K'Ӣ-!<6WgASu!|I~7G^!EO16ABV} ө?U"n^g*=#E:VNgn=Z/HM+,}^%tkJv0ּ{8tҺ[9uwɫ79J+ F{m[l!!|rGCV[ lV(>ql0/,8߫ӅJP#臷o{("!xڛw'Lo_0zΣ s08Qءu^.j1KKM^%)nG/o I7Ѩ\íV̟făw:;䉟W#.'JliU|/*;O>MsFLek,hqf zDqpq6 |/AE2sdGn"j)E`8iⲎث۞4m/wf4dspIGljR2wBw¸7 PwJj/vO. :N3 cMZY1 ^C  M9G|3SéOŕ_HLc;`h-6y4`S DٶalUzL3ئY#{~Rd]Sڔcώ'XV-# cff@<ѩASSfy<^mw/o$R-Z#^}ܩ"5$LNdP~=ˏPk-_6"yS4]X[^UmvȄ-mTIoJOQ * fo&8fY2iqJW-5KW)h2Ϳ&m@t}ʚn@a NݙQ9wCX) f}쬏j| Xz}[@322PP*!rڨӢaNǞf1uyYiV/ 0V&,<#s=I RN+!bϰjF8q+⅑7O-4YOgޢL3A~VJU@NU8b{kqAN!DTɬ^NKld[,ߔŠ5 .edΖ,f:*Ct@ }Rнk{1f7S0idP4a[Q)κζAx嵆HøMyhR9"T߇|&|X`. raVS ;,3@ Vr7UՁEwTuQ T5|XvIlh8żo|#/#4jb(%mI㘋 F^2.*e K(k@XBݶj^\٫D_ijgM% 6|փp6"zH Cd4Ѡ}2i;z G%TִtHȮ]]/2_xOqT 6Y {b]1>-z_p ѸZ!ɗy+w|eSZ#c\] c b Ƨ7אxGhSkfW.jǎtAw;,jk%y߽qOVcx~" '5 ;duښUA34QOy܃r2ˏg` c<h4HBw4 HpX9Y |HC+#&X(- d;+!UuHΪDA/ZcEH+@>WǜBow[B6vj;¯^:θ.lEYExK2$kCr5ĚpHS6Wkvq((Pq˜PϴbN.ۓ:5t\w[c$ 0@#zB8>? C/A hRg {o8IF ^wO?g!5#lhCc= 2d"J t>~ Dt֏ xKr}/m?^>Ct˜ t@׵F%6 &VQ̉I _NF³9dHy>{R3?WpExMTL8+W6 U_ee8X0bec_ˀ(zT}]N+2=ϱ$_ۋ ]f2qR 2Qb*1AX q\F"I$+V.҈)[38c8b:diSlW{i5zfTĻ(S!B+y| Wㆸ-twB4~K8[r]a{)kמĀ:`8m_DFV(̊\v7"Y$MGnU|>r*س;9 e@󨏸r?St S\*Y0e^Tt&p#pQgbruL!h-`ȾCYS Ǿ({ئ(j>#Y/gRdA=ʰOIj)/,,Mg_e&S/찲+s(0W0;!e7>y6GHrb/;I9r RNIV$=D\*3RGܬbO|Ŋ6&{a^yKI+86Xny},Pӵ@SZ ++_T*iC΢E%}8$(MRp/NMG?0J".rg6W/1B GO/Tط҈[^]~@ 1]hxB!Q0@?+]{AHl?-q‡vp7r$\{2WoV24$􊅍kbN>B%{@a,7ʹo. Cw3>F+Ngi01zn4b\]wZj?ލNR@Ȩ$;A#v=,+Lj۩k/%JG5SjOʘL`k3ZO$1cyNGYCx"S12ּ߆zAgdm=w nipztɩAJ5t}0s3DB@a}gq5G%ݿ>RE@tF'7 mXpzuO.(&$H},oan?6L g;GS79@1m63W1eEqtFI&"efMho=9b!W e{Q_DH,2KD]nׅ8Bu1uZPݢqwB( vS$ p1#Ɋ9 xO>P"B˔;~C]z3#RѦx7K <Ҧ‹C\KG>3V9D5*tcÂWo6|v{A;>tSo~4&6+ O &۲ M"TT[]=:p plI5nCܚ zVi)6O@8Q1y4Nvoݏ<7n&Ûg$m/4Ywgy*{粻;+P3f TS-wNO066Lt6~AzYJǢCc=#8rjەDeYӤ]痔66+ we:G[,$hT)ML/Np@WU$XLfT{̇q6Y5- ݼ߿B ZFyG޸_ӓv(a;';wó gg={<yuPIL^QX4ÓnrMn=~=g[\Tf-he, (Hp?]SiA-\/Chؗ/ i$ǛRT=r2۬jJ'w_kY[| 74KW?18ڕEk[m妓1Cc|Nc乳čbM ӣŴ-9UPFuvs~IYH87MQ+qgjJJWD cFj_kSnwY`p˰>o,MSw&ߗj;9tRwSmsJlDXD˞$ڶ3O3**8qvNzy9]朢%iZZ݃e92jz!{Eb=g[hbD)赲%#1D?]. xK L"o2\AWO/E#c߶H)3 ҟx%فTq .̝C3- k7|EPi^>Oe>N'p崁:Y<8q-#B$QtH$ѵav8-P,M^G<tGJ~PY+lhzJx複%=o/ds~xe;q޿sP]t$)SLMHR* '6ge4q:'&8UOUic$E"f^Yl6 -ɝ oī]<I>OW4,"+4l4*>pU/g5z ,'qG/[ R@mT7VT5M _zRwl&q8'mp-!po46~gc~#Zulu(^+# E"ŅD/<`(P.##8eݲ X;SBn\δ/ᵼ!y޾kď.ϡ]ӛےBzHRyãLcP+x>3(hTX}33Ċ) œ^Joy8?L#"M+!jΞs0 ],VQY&u{dI H0Rpu6.{VEddlV%SBީ럩qB$Qz Y_2#CXj[ 'k,ggUx*ϸzQ~UŠjzl}FKCVjJaĒd.A%l%A"x=McW!ӱKfe,̂Ơ(3EG x>'xZTÈhZ^0bOVU!8M >S8DxFV7; $|N?6>ӡ85i8 Tvx!/>hkj%,GjLMYjl|";۞eٖӬfBDZGvc!ѯe%"? J}-KyIV~ļ<-_4ق^߰sDj1e?-y.$WjDڟuH_,]aR)12+fޣm i9DfH/'=ڠw `g|`_rN: C3$pN1n'l4Ď#:U4 mkg=~Zl -fPEl,{;f (0OW:Hp=;,ݜt$˜;HOq?8E̟Jt'Iw؈qpʐh S5cL66L} i>}SGv/Guh~DP[M*ߜ{ʠE[!Ȋ+A,L\Ϯ4ohag0}2%GfaP ?7H131kge]Ʃ/ȕ^/t_)J*y%ۂIoz@'cVSQUkT0}OYD< rbi$T`*k%OP&`+;&y+ZvKiI{C>Uv P9 Լ ũXA 5IA=楜#Ң|qr钇uׇ{#4Zօbڶ tuXJU` ،.? )ͪ}u\:TQ iat #MA!B,& Nc);-df48W蟡IY- RIPbTŲ