bubblewrap-0.7.0-150500.1.1 >  A cHp9| ":"\ܧ-\/s-߮)Y>yJKy!C+|Eu = ^`)P>$>+LBIEqc)筵ppZ]T&ѐgNGZ51MJIuO.remVɤ;D=L(˸ }*SWr[K;B@8i6\?y&'&-<8* &P@I/2?Ip0~ ]:`V68b3fe4e6e3db98f38951fe8535c7c3905d2140a4edd0ced111736007737129aeecd9dad6b1c664f0e94d8f4c9079a9c496c9762\cHp9|I1p?dڿ([Vs㮌Q&E~eO"OrԕKAIs|eAཀྵ8bR>&EXiyMe>AI)B?)x[u,uŋ҆`T]1ׯl8dd--oC]}E 4 WuF^GLyS}Jh>Vh H ڗBM-a ͰL.RMҍ&^4߾wuIRqܲJ;GZ0ܿ<>p>Q?Pd   N .@ Vl   L  &l,("8,9: _FJ"GJ8HJpIJXJYJ\J]K^K bLcMsdMeMfMlMuMvN$wOxP(yP` zPPPPPCbubblewrap0.7.0150500.1.1Core execution tool for unprivileged containersBubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.csheep65RSUSE Linux Enterprise 15SUSE LLC LGPL-2.0-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/containers/bubblewraplinuxx86_647"= Rc'AA큤A큤A큤A큤c c c ccb6ccaWΞrccWYc 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-0.7.0-150500.1.1.src.rpmbubblewrapbubblewrap(x86-64)@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c@bb!@aHw^@]\Q\h[;@[IZVYdY@Y_wY&@X @XS@XW֘WWdmueller@suse.comdimstar@opensuse.orgsebix+novell.com@sebix.atbjorn.lie@gmail.comsebix+novell.com@sebix.atbjorn.lie@gmail.comalarrosa@suse.comsebix+novell.com@sebix.atalarrosa@suse.comsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atsebix+novell.com@sebix.atwalters@verbum.orgklember@redhat.comignatenko@redhat.comwalters@verbum.org- update to v0.7.0: * --size option controls the size of a subsequent --tmpfs (#509) * Better error messages if a mount operation fails (#472) * Better error message if creating the new user namespace fails with ENOSPC (#487) * When building as a Meson subproject, a RUNPATH can be set on the executable to make it easier to bundle its libcap dependency * Fix test failures when running as uid 0 but with limited capabilities (#510) * Use POSIX command -v in preference to non-standard which (#527) * Fix a copy/paste error in --help (#531)- Update to version 0.6.2: + New features in Meson build: - Auto-detect whether the man page can be generated. - -Dbwrapdir=... changes the installation directory (useful when being used as a subproject). - -Dtests=false disables unit tests. + Bug fixes: - Add --add-seccomp-fd to shell completions - Document --add-seccomp-fd, --json-status-fd and --share-net in the man page - Add attributes to silence various compiler warnings - Allow compilation of tests with musl on mips architectures - Allow compilation with older glibc - Disable sanitizers for a test helper whose seccomp profile breaks the instrumentation - Disable AddressSanitizer leak detection where it interferes with unit testing- Update to 0.6.1: - Add a release checklist - completions: Make zsh completion non-executable The Autotools build system installed it with 0644 permissions because it's listed as DATA, but the Meson build system installs executable files as executable by default. zsh completions don't need to be executable to work, and this one doesn't have the `#!` marker that should start an executable script. - update to 0.6.0: - meson: Improve compatibility with Meson 0.49 That version doesn't allow more than two arguments for define_variable. - Disable test-specifying-pidns.sh under 'meson dist' while I investigate This test is hanging when run under 'meson dist' for some reason, but not when run under 'meson test', and not locally, only in the Github Workflow-based CI. Disable it for now. - meson: Actually build and run the tests - tests: Fix compiler warnings for unused arguments - meson: Run test scripts from $srcdir - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools - meson: Run the Python test script with Python, not bash The python build option can be used to swap to a different interpreter, for environments like the Steam Runtime where the python3 executable in the PATH is extremely old but there is a better interpreter available. This is treated as non-optional, because Meson is written in Python, so the situation where there is no Python interpreter at build-time shouldn't arise. - meson: Build the try-syscall helper - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir) - meson.build: Remove unnecessary check for sh - Add a Meson build system This allows bwrap to be built as a subproject in larger Meson projects. When built as a subproject, we install into the --libexecdir and require a program prefix to be specified: for example, Flatpak would use program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports). Loosely based on previous work by Jussi Pakkanen (see #133). Differences between the Autotools and Meson builds: The Meson build requires a version of libcap that has pkg-config metadata (introduced in libcap 2.23, in 2013). The Meson build has no equivalent of --with-priv-mode=setuid. On distributions like Debian <= 10 and RHEL <= 7 that require a setuid bwrap executable, the sysadmin or distribution packaging will need to set the correct permissions on the bwrap executable; Debian already did this via packaging rather than the upstream build system. The Meson build supports being used as a subproject, and there is CI for this. It automatically disables shell completions and man pages, moves the bubblewrap executable to ${libexecdir}, and renames the bubblewrap executable according to a program_prefix option that the caller must specify (for example, Flatpak would use - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the tests/use-as-subproject/ directory for an example. - Use HEAD to refer to other projects' default branches in documentation This makes the URL independent of the name they have chosen for their default branches. - workflows: Update for rename of default branch to main - tests: Exercise seccomp filters - Allow loading more than one seccomp program This will allow Flatpak to combine an allow-list (default-deny) of known system calls with a deny-list (default-allow) of system calls that are undesired. Resolves: https://github.com/containers/bubblewrap/issues/453 - Generalize linked lists of LockFile and SetupOp I'm about to add a third linked list, for seccomp programs, which would seem like too much duplication. - Handle argc == 0 better Unfortunately it's possible for argc to be 0, so error out pretty early on in that case. I don't think this is a security issue in this case. - Fix typo - Remove trailing whitespace - Fix spelling - bash: Fix shellcheck warnings - bash: Invoke bash using /usr/bin/env - bubblewrap: Avoid a -Wjump-misses-init false-positive When building with -Wjump-misses-init as part of a larger project, gcc reports that we jump past initialization of cover_proc_dirs. This is technically true, but we only use this variable in the case where it's initialized, so that's harmless. However, we can avoid this altogether by making the array static and constant, which allows it to be moved from initialized data to read-only data. - bind-mount: Be more const-correct When compiled with -Wwrite-strings as part of a larger project, gcc and clang both warn that we're assigning a string constant to a mutable struct member. There's actually no reason why it should be mutable, so make it const. - die_with_error: Save errno sooner We need to save errno immediately, otherwise it could be overwritten by a failing library call somewhere in the implementation of fprintf. - main: Warn when non-repeatable options are repeated A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...` would load seccomp programs from both fds 3 and 4, but in fact it only loads the program from fd 4. Helps: https://github.com/containers/bubblewrap/issues/453 Resolves: https://github.com/containers/bubblewrap/issues/454 - utils: Add warn() - Add SPDX-License-Identifier for files that already specify license This is a step towards REUSE compliance. Third-party files that we do not otherwise edit (git.mk, m4/attributes.m4) are excluded here. - tests: Use preferred spelling for SPDX license identifiers - Remove obsolete .travis.yml We no longer use Travis-CI. - Remove obsolete papr CI We no longer use this.- Update to version 0.5.0: + New features: - --chmod changes permissions - --clearenv unsets every environment variable (except PWD) - --perms sets permissions for one subsequent --bind-data, - -dir, --file, --ro-bind-data or --tmpfs + Other enhancements: - Better diagnostics when a --bind or other bind-mount fails - zsh tab-completion - Better test coverage + Bug fixes: - Use Python 3 for tests and examples - Mount points for non-directories are created with permissions - r--r--r-- instead of -rw-rw-rw- - Don't remount items in /proc read-only if already EROFS, required to run under Docker - Allow mounting an non-directory over an existing non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket" /dev/log - Silence kernel messages for our bind-mounts - Make sure pkg-config is checked for, regardless of build options - Improve ability to bind-mount directories on case-insensitive filesystems - Fix -Wshadow warnings - Fix deprecation warnings with newer SELinux - Add new subpackage bubblewrap-zsh-completion- Update to version 0.4.1: * retcode: fix return code with syncfd and no event_fd * Ensure we're always clearing the cap bounding set * tests: Update output patterns for libcap >= 2.29 * Don't rely on geteuid() to know when to switch back from setuid root * Don't support --userns2 in setuid mode * fixes CVE-2020-5291 * fixes bsc#1168291- Update to version 0.4.0: + The biggest feature in this release is the support for joining existing user and pid namespaces. This doesn't work in the setuid mode (at the moment). + Other changes: - Stores namespace info in status json. - In setuid mode pid 1 is now marked dumpable. - Now builds with musl libc.- Use /bin/bash instead of /usr/bin/bash in SLE12- Update to version 0.3.3: - This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers.- update to version 0.3.1: * New feature in this release is --bind-try (as well as --dev-bind-try and --ro-bind-try) which works like the regular versions if the source exists, but does nothing if it doesn't exist. * The mount type for the root tmpfs was also changed to "tmpfs" instead of being empty, as the later could cause problems with some programs when parsing the mountinfo files in /proc.- update to version 0.3.0: * The biggest feature from this release is that bwrap now supports being invoked recursively (from other container runtimes such as Docker/podman/runc as well as bwrap itself) when user namespaces are enabled, and the outer container manager allows it (Docker's default seccomp policy doesn't). * This is useful for testing scenarios; for example a project uses Kubernetes for its CI, but inside build the project wants to run each unit test in their own pid namespace, without going out and creating a new pod for every single unit test. * Similarly, rpm-ostree compose tree uses bwrap internally for scripts, and we want to support running rpm-ostree inside a container as well. * Another feature is bwrap now supports -- to terminate argument parsing. To detect availablity of this, you could parse bwrap --version.- update to version 0.2.1: * All the demos are included * bugfixes for the demo files * There was an issue with mkdir when running bubblewrap on an NFS filesystem that has been fixed, so flatpak now works on NFS shares. * Some leaks have been fixed, including a file descriptor leak.- update to version 0.2.0 - bwrap now automatically detects the new user namespace restrictions in Red Hat Enterprise Linux 7.4: bubblewrap: check for max_user_namespaces == 0. - The most notable features are new arguments --as-pid1, and - -cap-add/--cap-drop. These were added for running systemd (or in general a "full" init system) inside bubblewrap. But the capability options are also useful for unprivileged callers to potentially retain capbilities inside the sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. Conversely, privileged callers (uid 0) can conversely drop capabilities (without user namespaces). Contributed by Giuseppe Scrivano. - With --dev, add /dev/fd and /dev/core symlinks which should improve compatibility with older software.- add group- fix build macro with rpm < 4.12 (non-Factory currently)- update to version 0.1.8 - New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API. - smaller bugfixes- upgrade to upstream version 0.1.7 - note that this package was *never* affected by CVE-2017-5226 as it was introduced in version 0.1.6 - upstream changelog of version 0.1.7: This release backs out the change in 0.1.6 which unconditionally called setsid() in order to fix a security issue with TIOCSTI, aka CVE-2017-522. That change caused some behavioural issues that are hard to work with in some cases. For instance, it makes shell job control not work for the bwrap command. Instead there is now a new option --new-session which works like 0.1.6. It is recommended that you use this if possible, but if not we recommended that you neutralize this some other way, for instance using SECCOMP, which is what flatpak does: https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4 In order to make it easy to create maximally safe sandboxes we have also added a new commandline switch called --unshare-all. It unshares all possible namespaces and is currently equivalent with: - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net - -unshare-uts --unshare-cgroup-try However, the intent is that as new namespaces are added to the kernel they will be added to this list. Additionally, if --share-net is specified the network namespace is not unshared. This release also has some bugfixes: bwrap reaps (unexpected) children that are inherited from the parent, something which can happen if bwrap is part of a shell pipeline. bwrap clears the capability bounding set. The permitted capabilities was already empty, and use of PR_NO_NEW_PRIVS should make it impossible to increase the capabilities, but more layers of protection is better. The seccomp filter is now installed at the very end of bwrap, which means the requirement of the filter is minimal. Any bwrap seccomp filter must at least allow: execve, waitpid and write Alexander Larsson (7): Handle inherited children dying Clear capability bounding set Make the call to setsid() optional, with --new-session demos/bubblewrap-shell.sh: Unshare all namespaces Call setsid() and setexeccon() befor forking the init monitor Install seccomp filter at the very end Bump version to 0.1.7 Colin Walters (6): Release 0.1.6 man: Correct namespace user -> mount demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs Release 0.1.6 ci: Combine ASAN and UBSAN Add --unshare-all and --share-net - upstream changelog for 0.1.6: This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is far from the only program that has this issue, and I think the best fix is probably in the kernel to support disabling this ioctl. Programs can also work around this by calling setsid() on their own in an exec handler before doing an exevp("bwrap"). - upstream changelog for 0.1.5: This is a bugfix release, here are the major changes: Running bubblewrap as root now works again Various fixes for the testsuite Use same default compiler warnings as ostree Handle errors resolving symlinks during bind mounts Alexander Larsson (2): bind-mount: Check for errors in realpath() Bump version to 0.1.5 Colin Walters (6): Don't call capset() unless we need to Only --unshare-user automatically if we're not root ci: Modernize a bit, add f25-ubsan README.md: Update with better one liner and more information utils: Add __attribute__((printf)) to die() build: Sync default warning -> error set from ostree Simon McVittie (4): test-run: be a bash script test-run: don't assume we are uid 1000 Adapt tests so they can be run against installed binaries Fix incorrect nesting of backticks when finding a FUSE mount- upgrade to upstream version 0.1.4 - Build also for Leap 42.2- New upstream version- Update to 0.1.2- Trivial fixes in packaging- Initial packagesheep65 1674764558 0.7.0-150500.1.10.7.0-150500.1.1 bwrapbash-completioncompletionsbwrapbubblewrapREADME.mddemosbubblewrap-shell.shflatpak-run.shflatpak.bpfuserns-block-fd.pybubblewrapCOPYINGbwrap.1.gz/usr/bin//usr/share//usr/share/bash-completion//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/bubblewrap//usr/share/doc/packages/bubblewrap/demos//usr/share/licenses//usr/share/licenses/bubblewrap//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/cec62e13d095ee152e473a00b5338661-bubblewrapcpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=84913b15598f952cbaf62eec3c3213009e900cd2, for GNU/Linux 3.2.0, strippeddirectoryASCII textASCII text, with very long linesBourne-Again shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R RRRRRRRRR R R,尼hEϳq8utf-86f1b530ea34fe9779e9003a1a477563d4d2ae0ae3d81f3505687912c05a0ee31? 7zXZ !t/;] crv9w_%udTqti,6U] g""Ǵ\kRuWL&чmyiY9.b{r=cUhq4A5һ&RZ$S>tqe|a-4 0 Q=ˡx/˃G&eHn8p!&]afTVJ݂Uax0]2}3.Os6ԏGfEWP:a4U0 6A@`nk}zn(xE+Vҭuǎ(1rߟ{4]3z0FѴ[be?I_\c$Fsަ& WȨ{E0̟O2O>\5OqwщA/kI8aG=ND, $clnB;0M|X?=HyZf~: ^^R9unõ\ X:n!^B15NTS`ӧMT7؆ 5‰K" F"oHtL1la'h^Yt@>7&zQ^na6a~y=-ttXsw W zbQvgbC*__/EF,C]M z> Mv%9'K`\i嵥W\OVN #+@;wJa>JEfشkZȳ|hx5ZԔmoJ2fF {UʬҠͿ_w]b84 TvV)U}7_0HC9枝߲1Wɝv{go>N]=n_.v1V>'[؜m#=Vaf;X!Xܦ:fО8* OhGc;Unh8-?^IIjE jTIx܃.dEH3i{7Em:\4uƳDMEy )n;XwⳖSv݅0QaEuU}Y;i :J >,j^a$fkXڢ7дB0lx*U5{O !5Aʴk\}-:r`v ȵXdڛ%u㻼ۣ`ܵ9+r&J'} 5NzFj,q%RtO5JRm&4)tBy%hRN;d_Jx׆[}ˑ**# V}"^nNLHkz֠Q'S=jk< j1Wt\6O\ %D?׬RyTUo?P3ef1&IpeTYGON&'-URk\% FPgL]w>F~`kGDŜv`F|+oGR `ZVTG}NI bedànApWEj-(9n.cxV`C~# 4Dɇ[Ph7U {P\b[hz=] 4v+RnoY@o8"cԚy`1[&II #>߇;"\rtU5UScz,9SW+q5aF(ϩσ^kx~}zk5ϢdFxOy ])}~FSQQT"N,n)TH=%u[}OAoW߬䩁"8GJ+^9g%TE*1@*Ijt e.Ug<VA2 =698R6=p6ۤ,0ڈ2Vl)0X2Uxr5p, "Mjc-I]}rO&FJf֠92'q-pUvԀ6Kte|ы} snoX;tITyn0Eأ]o-琶4|C"|!L >w] M/ VcrǝG~I& !ՋE|w6-4hĪ =sEssC/ j(]EC.a2+kfxeWSgibϘ@Ϭn@zm新;]N;Y՞Z5@%6!{'sMb?Zl3?,85 -fmUd3i099c;>'ǿhHa)L×`+wV ZE,dEy=pu22EQ ۖOԖo¼sQ'"<<{^&ĊOi CJ,yaPZ2I5.:L W 7a*QW'Hk䙐3 ;W[#5;!_4B/R'(iu6%I+&aj]Ay|:+G2ڇYHPzhI 2aΣTqw ZH 9#3v:a9'>Bq0M ~hhMЂb֚펥f`\DXyj)N}F>w-Vd5ŐObV n^Yv{j!{8wlӴH|goZ}~E6 mB-BEp도֬6tLY1+tU"Q.%[T"kLMB\Y-BocƉoWm}e˵0 rD-,u}ܣS  @"]VμZɝ,l[y$0:5O&Xj&sX@ԆW47LlXvݦMźJ @W D| WX=ݿKUЬD>!+[+[qiOGdhAdA6S!aCGUk|"b jX`8v7+ۣuC.k^jg(L(Q_\)P^D5 |e0SaHwaÎJfTEc21Lߗe3ݝ6[)[ns_jy@w5/ҷ*YEr1~{ 4gʅoFbM,j E`QIxjQZ ʜ/@ @(R E;;eMjvA ؼ}ÿkCPyްYK8,W?Pea:FbDH &9(d2<~#L,np1q*6|ZRDKJK0pKLBz: A r9tD5ںѨxi>']u]>{g4z>$E}ċsaSB퓑;=/OgDԇj ;ALjKĺa2b_ˎmF]C{VhMekkXC+e^0 Yi ӌ1iU3pe{ඊ`^H7PSn<J`Ea∾ř!#zoO"B4a돼bk#Ç,lXy l'sX|QLMj$P÷3)g ҽFd0+$`o0-V:P1.0٬>F7_ h>\\qՃj>N0p1e*#ݼզct@XZaYV} @0p]99WWD?`Rp[_9d=oԨP"ԿþZ>mid܀3Pp\Jl2{Hz:DB!&\ӟ@MS$nndD`_#F  `+YHYċp_| o$CMX/ұQY~7 dk2㞌*ޭC_VCWLnX2CصF37g ,\/3;†S5EŏZW/9 #^8ޣ {,d ?REՃ^yWiICfWZu~u5Ϝs_@u WvK$ xs }X-X(>Ol9lJVךhnm_U uL᭔sFF&_ǝYY[ )8htŎe >kd7$x@vva p]ԟ,S4%/2  5)EɦlJf3CfZwM^ P D#$!qpkT&mhq~IB j*Yƚ=>a2gRp؂\ffѲwYl <.@T=-> ^EdlCZIRުE/0#F.Bj d" Μ]GvLAAꉌ =)DfACl [!PhO448%`pd 9:d՝ـqxqлb\ȮIUhnymBwQJ=rg\DHAR*b>e8"`s\E&DKg 0~ܣ!l)CpSMQGdfx\I7Z hя8j(+/p|M"N?n &&_%˝ϖ /2bBkw tgsuY QߐFΉ*UIK EZ< O팬Vhwz6eW쓰?o"r'wпJq|O%' ͝9d5k-+Nn}9~[*rY&ꞏq|el4&GJ^j~+uAc9~GbV4|uwUB4(9 S\ c5ϡzD_Z76Psh$Y 40J`lp$ k+?p^*g!9Ei^_}Ѕ,wD=2 J76v555 IqdGȘU {swk;-YAmnH@ob5ZCmf(+dB1ݡ ]tGl溰a C³7Sh,ŷXeR& Cepz&}J-P̀K(2=jXz ȄFfJTw|w|&`e$E$P:D69̾p:t5«& ~;*clwЮͥYՓ@9$c`߂w36ax-~H N859E9!R (ʃ?hGSr-X\9NDle Њ:AUۢkmC] 'vN "d0- ;qPUuJ[[0f%KmsHlEbޢ4X~Dž7dc@C' $D]j-/eS_dv~ Xx&}9 cE؃}2*:o*m¦ ZQf^([/%Bc1k/IG78oN qvX/xp=׉R~a :?ԐFRbXEyfeg 4:ӡeZohzJ_ɚiz#QvqG K݉2= RU3Dګv'Ak\{;Wҷo{>!\̈{ d 꽢R*M;a8B`'$YJN@{.偸[a2Z1Q-Rۄ SA! -ae7;SՃ>DMN4jET=O7 e ) ϛve$z1]B<ݸt .p])S1҄7(i}c5D\[Lєj!ocoRzL!H2]:[~xlF0׍ڔ/aiX24+r;t|d=*~+B[<`p:*TAbGmLJ: Bw ?K8Q48G Ic3*mCZlKu$Ƞfp*A jjb[s))d2%rv9Zzf>>M48 (ժ-}-ar|)EoñcJMTbws.X8ҏ^c2lVx +^~ EuZYET"2x:~ZVZ ^+2ԄON^'}0P0UY9%H) "|i횀R L'$آzWX%HYY1u׈~74JĻ5)⧍@, rvph G<@Bw79R=c#c;o`Ux٤71S\sMtklDKzypO?#c2M,,3W%1+b@qn&Y ~ldm(xAx82 Oa ?%|4O:5ef*Qtv([!xdc6edP[;eD0JV8Hs?Kn\62 7Ř15"!Fuj |v0~g9obx?G`;SŹv꓄QK}a]'e( d}Q(= YT29vjI)0 H!c,q;{\ޤ6GԙZ ʎK_rG?[Y3W}bAXp _dul4f''ᝮ`?T!JAӽ1:az{o y|#JSi}m=3TCXG1qػA j*/.C?xQzNŞc>sd+'k^7zh^*TcQóສ 3@ȷq>%)b q^&:aCuu~fS^pb=l鯒n]11.p 9pm򌕔d;pWPL6gMoy4r"&bwy`m=HyGw2ˠ/wu~D^ 1+2^# $e3N#h9CJv#ir}' ),p2+I~+=K] ߠJS/j7 cwjop&`# $;ZZsvjMyO~B{k5ٔ0!1/DmܝC`(\#zr~lvmMò譨W.;֧*sDt[bt NmƸ^H%̠MtAl9ڡ' _g['V2eԦ[u1qϲ:H^Z;Rͤ /,Sn)k?@ɩaq2ğ.>RFMgO6*bK݉ko\#XLfFL*qk;qD70w_Ps }nϮCym}`f]KfݥzO Dw7#'ɉop/\F :Bb%'8Rm}=S::ęSȘ6m GwID-i:_?+scg6D~s[,ZCXswAlJ SyJ4b!ȅ!06+r1I;.ڣH"~aHTSB_19 o !Aw<|eBϹ08+3 'Lr*¬#>_RfIV5AmH&U_TŃػY{m2:uz%oG>:kD#v(ԍRVo\ PeJP"p< B`rj8 ]T|ydudtO~%dAzr"PqoInkƪ|L7^n5JtڻL=[DvMTl4gnӳN<F#̪3KWգM Zb9#%z=ł/u --qƞ5S/el4{h:';@FHB $^2V j) T63#K%KF*7$]`XJ%QჇ[T X!Um?/D%} \fS& /ntK+εru[8܈#!Ie>eY[0 vaGÜ <w<ψwz1&7C (5  ,':aeaI;n2mt5C퀟5ֿ+CL+x0jyEJXMd-nj%<h iAc՗iov"+~Ml'QJO)ygΫW+ZZHa3pK|$e4&Ŵ{]ڌUEq8Y;!w:ᨛ$$8ohPFa !Ѕ"ADlD>I#:)zE0KW+$zB# AΌ ɽ돠5s>096r J~vMGY(%E&DrH܂%#"" XfI8zVp?פ$9ըZz:3i㷀\a12 bM"Ye Y4,VRjԂǎqd63 m+i'&춯͟E0M8#1l..ZJÊ㡮$K8H#\sq,[,?=@c #-80%4 y5g/q8e+͜%QN0@T!(jiBʱ?ͺ=L? 䃽e/r9H:(p{hL/mZ;ڽj4jw'Du;cvȲ{  1Ҡevx?׌Ҡs'-Kq}/lݕ+ w$،7)LS3sٹX3Z*G@|1^엄 60'C~+9K+Z]?0)[+ % 'Ut?\PhsCϞbݼKąQ\u( U?poK7NE(OJΧ'PPg |4 x?(vx3Qj]G94@lcà8 oƐўқzTt2cE _klZ[w8կ'ky1@%}Ӱڳ #G:AomN za9ۓQƫ_HLm= 6ro ֍w\蓛s:R8f['v͛Tfk a{82  lQo‘sQuw G-Nip KD?3;tiT|5$;{DB7ʒ0aZtyTd[1~ajc¿\lM0|^䓚 e 1eEsVvWHF]zdMjy#Ku1Z7.=3DiAIB>zWɃvaLlYŵFp<"D9W ϸgmO޺},6zT *3g "L=f u-,]PNӠw:7ȧ9EX,_rݰ*ǻ T/{鞴Y{P!_bqw"&468;&~klQPvNŷP$ g? c=>&}kvrWF@u" ]xv v$q3SԽЂ*ݢw/A{\GX ;M(1 0iLV|wH<3ɇ>TD+"+o {BS^~kJD f 6¶,3gzCpN,- R&?@"d S1SDgax_~Krg߃%q]Au˦sl|*1W+X暮wvwLnS D!%๠2 F dV\aij ;eϣV鞦Bme""XUSQFdlsߤCRrƾFR!&qTjQSL&O\W ~* q W)u2ߓ%a!#(A#ڽvɢ/*1vJ>\^`y3H 6>svm(&˅xu {A(չ8?v/P}C9iF4߆?ECΈ@ @xOH=n'>aWB-rGaTy|bUˆ{bi5gs^LD*vf<`[!MEzZ~ЗB7jA&I(p(/ST+ƷNPuNH"'f5T0m 3*hIOF JuԹTU#6>o/=C0vsC BߗյiLy#VK W6l]2^sܑe2ZBF:k=ԩkgC]K10t|g_MQRgex3BL -> Hw}3.οaj`YQ xi 8AdlְT'TzFݝa+Q+G~ []81MKǂFn@n^k#yy|KF:yl Yg%Bʮ].kb!W3S~<[WW JSs,\oƺjFbNv@ KNr(mz#E f'%އ]~iF2Q5 q$c9D؏R2+[AP0z~z pj1v4#~WUsL^`OUI^ W 2ĮXEˑđ3ckP\K mXfuv`x.qba,*uIaB#he'Kj\iZ\JSIV%#Ƥrw9ђTH^[iz6IA `1z(J}XrA;-e3~*NDu/m`Qʵl~!' )T4V1]Q(N9ŤhdB.8k-Ma{7[{ٲT~~uOc^pw{#,A`G8z\ + wKmsи+ڏ}rƟw=,)?YKj! %Ms)<#&TrO48؈LR$%@&H"` ;]'n_`XZ5^NYJg'k{X2xo NcȃQ|6 tf1 E[}ys]W!Pf2EwLGDWmui*XvσwW(7j+ 55;ECuQSP~G4bɳJZDnzA͔C 4 Dsm1o~N.EDV$س`!a .6foËnx7"cG[VUD!y즗gJ5EjtQ$,U,1螚%~w$Ս >l *tHr1+sSl4Dm+5@ ebZKT?q=A~3n ؅,?:ZC@vpX-Fy+Mc6Mn*ZYZ%\:g heTL,l)q6lfBC\GW~"wNNL8$pN!HT$_x1(?ysT:?{mYņA+p}٬[ i ybŒSd-,EQ0z(e>u˄=( ѪW`.)0̐_^̡4G؛3US ?/׵='Xθ:-r0m4fH₡$VCTX"4pE₶C;QdkaxRt~v?ҩbVpW9>YSX"5H#!I$pq%4X'7@L}H6b1( xMx퉮^ȒUS`.jl`"ѕ-L T #'CjPqz2+0!m0y&8bF־Q8{|ǚ$ Ǽc6X9Sy#"|RC&gPKij<1lZؽ9ܱQ^(=Z-&<O@ȘMqj˕5H |g RYjʲ*%֯&8O@XL&l{65h?K1> ـ6nfin\+~2!Em,JjCfc@1Eoը5Vp\>i3yKtW:kXZ9=l!ZAۆ:;:쿪%>b`cHjp5Bbi2 gWAok[q:- a7DS/sf>OVr}Zriا⧺FSku,d| !`>K}.  d9%ej|yt!EQ^Јߧ/׋yr~25@Bٖg /q=5Ɗ<9fz+nn IuMw= @Ei$&>6Vf)@%?ߓox$Y1HDq;2? ][rjBݪHIZV5ꠄzRQ*48|G2޾]՗ 2vNq9j he5{XYQp }|!rX$¦ﻑ .[M^t-6s#=p߯N#v8 8J~G>ΚbYӭCbv8H tq/ձf0.d } _83 dXuʀOc 60 $ t4 jc G]Od =J0dLZ; JG2+MH4V[Ԛnś$wAM>hL.ebj@=ZY5 z@zeU΋M5;<=wZ\ʻo-w٘B?ie*KMM8|c(rAwj!ykOXfPH _ܿ.C!. }_! g٘CVX}\[ՌU," ?+%agnOXt״)q/gzJ68P+My#WHxMZ g ]vrV> A'Igu"W}QN :_S|)a'q텽e~P2NWS:56}S }Q6o B=GхħOXo/?h_F( mF0x]ƹxHoien)Uw#z"6_JÏ.0" H_w>i&^a~ZPEc!rxDɼuYƣ{CYɫ4Jh$6li~G'N6^t)$-bv5=!sc&j^!YPB8"VSnDWi=lPlꔚ?ѡ9 ƅL<%wO* xy&X'Vr'!(kz9ݡM5g`+O+t>%Lc-ȯU=ލGR: (/%jh)LPEFM^:6,Fu=X]?%`{˿ChWӻ@fX8nzUV uځuybWž"W3*(YF4~7Ћ؞vk6 fge8|k\HLhAlKP#S|cCpzTy,v찓"l5a*ͅe:3@]Xv~+m \*d"i˙NtpuQܤn";‡{cѬ}pO\ 2F̀cpR:ɏ y_U0O]d6HjaʍnsDjij劅Ya&9G2d֦5 \<g/>moaoc#{i䳞~~2&`c oikUqkN>FYI$%pxtU3=yéS֚j q59 OrąSߘ'ӂ 7eR'1C p ?sOϲ ~ë+lSa_\{İo߮9\eRt`3YH~G YdRo<ѻ4vo]CҺ~+!DE_xsŎ͓ՂsnՊZqTx6IGÌ2OVT-(vS@SwIdƹ@%*3(t^yАB5&¶btU>\C7tP4ƵvJ7imc#ILp#zqU/IdzNKɀʕ9z ΡY <;'wr.)ݫٌTj6РLrBr_c3e.;hwmɦ\~kĐ]J؇ ?NBp肸6!s d ۞OPuxxK"[J@+$/ەg ]n.Ɏ4(zuƃ*%UgcR<1绗~b|;yb Ik g3ZMA.{θdsIXsI-wi0@.l* 6N*/^HD":#ᡔ?X6>~O=AKrlaQypLzDs9mo.[h8̓KpId8fjYl>>GA!xoApt8v(j2X4BW2o Վ2qCF@Ry&ٯqJ#ifA/uIѠ\Dx$ /!]$|g XzS?wD8z^CuX[Ø9`P \gȮR6ԗYJPx̂5=eQAυ脝 sB>œۯҲB']Fp@"!U_~N$̈5ID10\ <.WªחRH 崷QjfGy-B;"zcegS_nC?/+O9=<riOS֬aHdt(NdRbmңt6 YT)C!\LMqQY#Nö=qܪPV6Yk W_^{/BBW~O030).Do(FT@PC! vE'ab='pS_5G;SR"שՕm*.=?N2oB Zyq!e5dpQ58ME7X<vNrҍF-c;2ȩY+Sn 0p:[}@P GU/\4[7 4D#O쁜+?k =)ԅ!u$ E9k2O:-e ?i,5rٔj/)ꂹ}C! w[ .,V(V*dgXӪ1ݩ J s՜WVc^nf%|6e~BHvP@ kh͉zF'-F(!:%6$Aq錞XGy5fgH (B<6 :3S w( ez I^ͣGHR%Tw8\fJ١m4! e_^v_z7Ԋvt.هcRy-Cc<$X#=JqO괿:Onnv8*9Mb=K!q4AR:tУP@mT $lVR0r]%xa~ J]{6/0ƺ9tn8$;[mgr6;pr18J {G5nII2Ո!"[*iqhRߚ3+^5 Ű:zTmvs<7 W$U 1mw؎a3F8%ɇ=)ܨtw{d1tĵIcEN'ΟIO5)y,P"E|[#=( ${$n [V?h No3"IH/:.> +m.0:N/VU7%6] pG=9mMfִF7{*>ۧJ^6.&xn]{ؔn-,%AOx,Q^A0 &3@O{o/-t*HomdSL h<6H"Og38QW,P>!'O4 |"hi&cE{Ή7,p0Lvs궶櫻&7{+eJ4(z!'GO|z m\ mcpw2#Dmܭ➷Nc$R9B,4䕳oa ѿB$4K0$n] >wUؘ/ D,fQx.4qO=Eâ8Q"*4!ZY;jzAc>nճb t˻ta|ݱxz@8O4=KbPԯizo] /f("&ݻʼDX4tv(픐XvW9 EB6T8mjlZ D7m>9^c'ĭ\HPߒަ`hw'\dÎd#/hZhe/}R -]tNI=e-T FUl[ګM4"'zddŸW8r7!A̙MЌ,cfmm#gsјw-nqؿpbᕩ zS#3`lSz3![o[rmYfył?v# 玺 P^'!Brڝjz"DoyI5 ^ьf|F1()(?|~ȅ=͇޻ i2;܉Emʯ Li fߝtp)؀V%bc*GB*c:vMDFM~t:h)`4Pj_4GD޺7kf. Qm7ˉ|m[n0'FCZE!VN<+>D`b7A> \ LO„?j~`T}Frk U7~XheME%f#KZB&LSwO:5cwsk1kW9z;Vs]wH+z,6}ό&1z4EBtvJw)A㝇 ?f60ls Gj` VFyФUtJI"C1b 2aT":,m-RLmqcXX 5-fUb 7~2eߢ=<;Im4rȊ{̐^uc~ X}Md|3gr`ޤS~MlU! b#$z?3s;M?7i"{ wq9nˉ.i3ƨ%ʸ?)oECpgA/R`)8Tj|a1/AH+-l؆Ȭ\^LW0@LqN o+ X/eyex }|&=_V*EOPPcX^R85R]]+_(X=zhxG/w1ŵ#|ؘ6t̩L5w=nF-aL5|rޣ+%D1,O.͟`ΜX'?O RծM^ss"Rߟ3H/$oJgn]4ixb 'WA0E;o}U. oYvIvAHc5ENX}+Tosd9"R(Qwe#ϐ!Dh^Ӂ;i^pdX1 ءHZ7ڽ71@,6y|sD5s>לܟm9&Q֜ϿDdPT G7kt\וՆSFP${y=/f%lK=](p76aE!j9&?R5CaTD!-1*{~P,LҚ&<yN7ˤ,E'q k=KiqyB.,=\Vu=8jHf%ݐANh-κԿ"Z Z9r7Z \h(;_AѤIP LLB̖D8Ŭ~U;٦ jV|X?3:m#߿h;Ō-m3*)S9uiTDoUM t%YU?2N5eGMiG5Imd#fl(;Sʱ4q>.[eK@E>K˴O,B:$s-2m{E;\A2,.5xdUmϞ8JO즕 m')GDyw67 ܽptW74{6D3}8Y87v$c$Hr.P7q R6aд"l]ǎ96i )W-rI.t}+A" xZ]mߋeo8ӇpIڳSݑ}I䦐g@|LGÁfc6%*pԓR@(@6s%qM'QcBV[ c:pZiY}ٮzR+^ 8\& p)N 4d[?Lrϗ8ͮ#! j}o^+_A҅zxBhIP)\+R=p"+BiRQڧʔ<?9k M=7^WFauFŲ0n[UCLn$fL\١OSK,`ര ufI42y{oX4TIm$ (F,|>Sv_h[f^,A?Z+S,v!G=OWD<`o^g'e%߱%Yp916:pL@R?2V'&@wDŽ-1!|w8WRq#l"&y6A6?, e9&{qwdnAPE*6{8^6&GS75f4LffDN1!Iک(n=mf{J!RMx5W ?lj~@8g*$@}mdBud@!,>zxQ~$'42Nw|qWuN3PkbqT>u 2"hSɸ\e]^c];-s@|0:;{3rEFx'(&d V\; 3%Hltc*m56d8 O߈!Kj#x JӼsJ][ZVo͖~g?OH>\jy&a{_oyJРiK#TiOn8J'd 7F|P)/NmvpŌC2xּbAE !6&{C~@ߑZ >ʩcdPVOlj!l¼ԙJEC>WR^rt>|CIVt%K`HdQx w.r6,͉hyZ$2]5{a7H($ovSOpA`5]2zS=G+t.\*۰U{%B9."AfQ03is~Nju0vS։a:! _˹QnkC 6_Q KW_ *Ytn,dFK+H Kc՝] n9bHV )U+f6__Gܩj𳇐8'>1؃ӇS\Z`cZ]z\o1,srky$gWee 2ԩ޾2jC0s@ 6Z4X ;[+3' Q0|v|Z0*@CQ`ӈDuFw?-шarm3Ϊo,c?dk4.ٴ23vlL 82H>W2_Kg|<@-_Z "l"׬J_ɼZ,N:42וoͲdaAJydbBv8W[kE"?2[/(S>l~6sPP}lqGВOu\3X0b]>l9L^8bvixg&d°^Ic3)&'#[{@Z)R&c\o߯:T&UW\U(װ_rhJ|k+i5 `;{R='Aw+屮0zga#( I^ ;JF/ă[Ky,I,|/r÷+νի4k{H6lr;OJLI xݹ q9U[DAuu0)5ۖO6soX]Fii͑ 8'-G՗fʻ9oErl`n=2wYbig.DGgLm ^ aX:L~2V{ς"v|̥>EwųD ZETqx ( #A66T6Co P|[8w57DH:B8s'kfHܼ|he~JIZWVё.bv*\X /EBåƙYМSteGo6%*M K\#ͷ|ӂ>6D\~۝l"-i->RY r56par3 ͻ3wK9X6() eeq-@Q:d]L} 0ީ Rjކ4UH|ɯ'V16]Dԫ(٠"ʪDI݋?#D]%*sթl4^EE hn[M!a ү,_aYR!8@3T}9}nU6 s+NϮLC;HYE>ء۴`*F 3^JLa}?`sokU~}'0q3Jx:n{Z _+ា]Uw]hׇ֭+lS߈bpbY`Q9<ړve/|B7 L70 \|l@Ej^k \CTKL\`ߙWXn8mU/Bj˼8_#C?J @br'I$RYy⪬e/˭4#F'GE,TF+Tw=ꡦl˷Up;X[xyLt$`@aТ`a" S~fAm$7_\xud CBEI 6-`:j.2/0E!F%7,Ul왶 J蠻y]eX:&Pn&jxY@y"ܴ7\a%(%F.gi[>Nq)@_PCBlgTq}0A$ 0 ;q`xy@}S4$'%ZΏN8s_ ^.eWn W`U bH<8§:2<ƇHʡBVᯝxT,0?=VU%H$Z"+GܠeͿ~F/O >Lo <'вQҪҔ'DVuP\[Q-՗B\Ʉ#f\g<+j߿+UI_KLu3]qNQS5/vFu\ON\I.9C#Sn:8H3a3f\ά;*qI0|1 ||'T#76aX>6=~!,?ݖ aW ʜקZgYbfсY#zʃ>~Gjm@VV-/6`]n}`FR9+YG2r 8W oKW]rCo#>_*i]3jӝ0na]>e{4m%8D0GY_[Dbzm饂z~=Z4&;SݳC.ufac.B2GHh] N6e f!aE3ui<5Gța I-F+ ˽ۿ&(rG &*7@qw 7.aG<;{" 팭?CTBK:[ސ i56Lw.RS{Vq7Z9OtEZavoMmU;|a?8Ф|^%'MͿ5]`DF#U}9cYl N>%0/675Y4#;Sǟ砛ذ#ҥaӤ܍={U̓V\5wSoMPnm .:ڐ{7M69Ty;GTjcq4Aݲr. u42JԞ! ?S Tm 45☁ SsBE'6ӡrN*[wGo-GM7ϴNh=59yxى&!5"$.kGoRU:(mLp+JrӘMQᠺMcKWϫGK49EٻIu=Jߛcot$\ ҬI <OJÎcшO_e=W~vF}[=ƃm$GsmS9"gQƁiS~筦>ِPʚs}  d4({\=&9ZX&O|W!m Ow, s|9m7f 1{7KOYJ7<׻ ٜ`?e2h\ Iz) MDL}]kD.T|.eT;,RQѤhHrPG Փfԍf@z0.2O贿LhfpW{ |x9Q0΋`w׺ BR]NZ= aΫI;\_I%9-讫?@<-XqĂ W7lS[{}xM%1kx~_6*RKAM p0$(w ctNӊeOG:Z.8k1I7W^I|;Ղ*08-e_ci^$1:{IfEU*"/@祚T ~!>%F[l*.4}׼D1Xn+O()ԄKkL07S<!;P,lO*1:lS:,5 X޷}fTnVoHܑSƁ$* '<Lz`,1K?+*Ϳ<`1i_ Ջ-NZ_JYț:<ْ%B>'K:`Aֆ¹8<)P#z(!8)*n[7KVwWMȘY`i`v>v?]zY}շh)n(V{ LJcTP >.K ʩ{@`7Is4eP *a'5 k+AJG2L qQb3&G~a8=~F@T0ZV$64PHGK6tDC6/|4Kv)TH糺vwgj`nS)^KԌzZChmeQq ѵOL]`O"&cKuRX1U6D,8|TxuZ. "bsCC uise䂛 ͓T&-"oo^0'2|k Ry@>k6x/AUڭ!=%eš}Nn-;:q#?!*hnSJ=Q9'RZ[x'Í$0Gvo3 ꮯ>{w|1%0F'\FzMl "bs']90sF$,_}\|r6 v٧jGe(!>>Vpp駁@OpDIwR1ye ąȴuCIW v #âSSJJ>ot.ҨIm5ۉ % 8Zv9J0=I^H6whKDץA>|9p<ܔ'sCgKa`$^qfk|twrlw  g؃oLZ`ko]DYsȏ M $لv&qK~a-=Ĉ]$w-촉|.hi^"T_'P;q =}ůb[(Ԁ{Q6k%8u  |O~LXA qцu X{:;Ha.UCl3Go.׺sEYoG-7eh aTN }:#;}/;4|hsWF GBb} ,9J{rmX[* &u`r/gnqW6EyKfMz-L,˄p+%B*o>Zűl˟3ڒ)opͫjYҰ՘. f7N ^ӗJoIP$VFN["刚&$rǶv MG-@~6-8\>e.-LHUߍ[2”.`ofM%s!HVs9GGC1ƑttP%odH+1,n=|`%rlsYxssҵɒ]iƨ1#0Ź$VqW=I?e 7HtK}:=G\ 6X˗)-ÇY]߫==uĮAVM">11eJ~؝}tPĂxX|Ch}td}xPr e9O͹LƝV~ D\%-ZO\n:$i^QY I8âsB6ia^B c2/8;-mx;l5D8}3j??uj !wwOZx7ϕj[L]HtwlC) (G #<#f JE&U Vs:6:c=ӷ7vőtc9lWECjOYq&Bw!bٸw<_iE5[mBE6I>]U3) 0\/{Z8X7m89d 4!H/݇DlV UCćۅuECPS$FxzzJ]:!?Ҵ7#1p|S}M[h pJb!&t v Zp✨?4__Oh=Q{Qoo*Y0o_Üy?ӯ<ɜxX.Kd Vr҃R^ T|[@:F|P Ƃ ?`94[ŏ5܇җwAiiY儈J)l vnf`^ y$ĵGɣ= JGXs:NC &b,Nq>z0k<"YԸ':B ~xh^@C_p& qUT<"e^ }MK7ćg@8=Q4vBh/.OdCd.؁ϏdК$@Y6s0, >J7HX1[r= /EjJoysEC dN1͂"^* %ls9 VKu;ۚ0Hrr̪wIqJ?OᛎxwB]_eI|q!0X,:8=x}ÞB0?qA5ٵ=HAQvs=PH-KB]ƥE5부2%ՐQP"(W\ZB @{k}i]c|pL XdʞحF p^d-}ehHQM_d1a3aG]uyB@]W<}?*ahG^bI;e90r^\|j/9mXN^P)^p ~m9/):nMI.tV_~py4g?W'eEh\;M)l_[۲܉24Z*̊rUC3ȪaGTomcr@IWM9M0Z(oCJ6ī^( 8Ҭ Cl *?ǻ-S`=o>W '^BK"lHL=KLuNjNa&IG^tƍSrW)OvHjN4\cAD5=ֻhd"GUS9vUÐ Ax_%mߛf@h@0o[@W-58f Τ^0XԽPXKWN=u8 a6 cH8A"2M2b Ao'{ D|T,4v7 M-t'J][ HݽQ=inOV:%ݗ2 QդE\4[f/-g}QrͺB.|y+[cM~";iDorgFv@*jVz #seqs{DY#@t4FdW֏k< 2Y(NP)q%rBkn/(yl×R%!TGcLjY!rmWfڔ= kђt:APk-i -!K2#=iVO8~5z3w x"[qiPd1F[٩SYA9xG?7b˕RT{P"P8 ; +*}LyFD-?1b)E=d 9ebRRƚT%Y!vSPo ʮ}q (ŶkY4'ZgN*ndkzhXNQ.~W' +wЂNB+T;.OlsIf>q?}yG7wIC]Q2%]395Us>SA\-; XssLضS缕6 Ƌ[WZaqBשz}SWw.Y V*ۭ鴤$MK-/.J@*Ɉ0V|n 'gDPQN1H7)!OByuoʝWM"=KP%2(fy4: > W J` _^0ݸdyYKo7FE;l+3]ohN'&.w~YuMR 62N#nsF ‚8!}D~&Q*Wb{ͮN룻cB\nLT ~m_NQfJPD)8yGF'3I SoV3X@b*Xw6Q?a zSJ Nm.#dD ňuweF+QI6-Q1u 6L?_xǸv(W &IzE` bA{| t KNʜΛ6>;HM+u9Q u5K Ty^Zu]5U?#X?OGe,T_d(y/Xg\zәi `m6+dP kNh) %I.C= ` L AVzfΦ.N&!5:\6^Щf}0+ 6}'lK+0r5g{ ؐ~%< :R)bvgΘEV?KAݭ4ot1 ^4/bq'oB)%Ͻ[ʗH?*dxeGؠ?B ê%T2')T*BߘJނd QOe0xL,A=o5rB4Op)+Z n'?kbwvwde v[p M|ˬLxYx)lD0!$㘥FOhu\4c Z@:!5{><%Eʟomu6rY g)=qc%5#%2Te2aLc^;>&D_67Ti b,=?neljFS2 @vI@ͷ$:ԑW;ʋIaUל[ rF/7b3 P5~94ڗ `#$s<"@]E/w?oD'ym-;#tdMRvAwSG@g/g2!m$VF#ʲ*qIn7fH%WdG0:2p'R*;?{R>O!*RYo2akucc gCLf@vb uBz Pv~#'XZ 쇲bv Hh=kΟ 'v`d(BrV8NYb@/~G`6XS Pf4&|97<ϡH{|y|[Ia2=#}8gCӹZ)^4Ţއ)>r&UrI\t+N0ȎT0t;7ȦYW]v5A0&U-(-÷P[mgSR{ y^*3Zr|m GCռV+Q >miL 됼5Yjn4{&[uŏ8M}8vK> H3DUGD\ŇqҜ4D5ǐ @vp=qDQf"Nqw౹t?y.VqD,\$&8 j|ћJoK]-3̗=_g׀~6$nsCUsKp,\?(9c([A. 4C? =b maUH8|kyy}(u%}_/(/ ҅ غp@)Wl)T3gim`Baf$.:.TųzL4iTP1Cw|\Sef03ӑDwʴ`BВ|.-|!f?Rᙘ-+wѹDq 2T4jԻqB:Έ/.M'.g#IY!CR_!Nj8& C(Hc&Sl D69Xwvɱ'&yluJ>oϬ^\Ma/N[Hat)"F5]gPpDiSưAy), ᢢh*KuCU7j7;u*D._rA1 4 1<79< 2.tK9a)S_',C̪*Hz8X^#B1a` $2F>&6*lw%%46ZYtŨ(I<(+?>fU\+-Ra#^ɗ GrËԳ RZ3VfZ% [ YP?b9*PJbZy ݽ}>yx_l%bSvY,sXMqɚj@fq^ՔZ"g%QE8j3+aᬛl/䡽Z7kEaK$ݰ^Q[ 5N:dDjZ{ jN^Z#0ñn*:p` 3191sw:?MJ|I<˔.U>yi^Eu9>8T&DQڑƢO% +R&esU R {}Gaxdg(P5(7ϥpv{(&'amGp5"yvcBqG =\Õf!Pz]YjJfV i&wg(koNRFG h?@4 d"~~rԝ y;:_hjTٷb߼0!0i3am:p_MT [9\̀Z6.leM (F)|,wU.NvD!Wbr1vLI:0۪ń u6ߖi ؽP.7"Z.3'NÓ$[|lHRhaq{L 2ϕrWy G(QA}ۘ xD _N r_[m"xڜݥ|3ѽB|SqFaL]:egAo"Eajh$\Vda]X]6P!%P.^XDVOhQ!ЗR?)qh*iCB@<uCG=үX-1Gi R!u-s`'ߦ-X)H"T ji25UD τhwꥧR2N}M v~fi)ӹ{V# "I@eR(:w;p2DRx>0}'.Z;QF&n#'@Wc?r)Gi',SedB!~DZJ'r',8 >#loQ 3J\nQjY/_t.$ WQ`+Ԩ{ a]SpF1p#c,jG;KN{f*4pozj_YphL=<ݏgra`U3$7 Nڥc\ewчRKb$ ] !xG%`4[/#9Z*ܭ)_k/6(t+i{D"pKٗΰ͌1ssA ixR! pgy֝zO% e_Sl9V cV #wBrx˛dmS hN_ A|\)۞wMx \-Ⱦ5 I%oq X &ĖQ ,`}1) zU},z$NR&KU#Ћ߉$h,f`X8ΰf%8zJB1(3%gbI;e-Y=yfkſwYz֭*fdN )]g3k+u DC_#Aט<;t'%ЉI4E=k#75ȣpիz6!p̏$җ ="UےWV-a>ϙ1y}qD-< ro8'4xi/'L> khE<ya,3ٍڤj}e^N5Cf ስ%=ce{ зgͷ嵯n -矻QNb`5y nsF- ȫȕ( x@cE³ʻy\wgJ;L$n1f2(sE|^51;^詪t%õKi$M MNN3h,ǽ,ԛD߫m ӔY1UB!}{KS`4^{|y5岟^@M$U}l#px-/AV; ;j.NRW+@yݦvCHOzΣo*, , oPݑVMe&'8 <;2w=FaZE>ႄfZʘ ꕓ/yk/6Dla02$-f-B :̄ݫ>w8]!98^4qDǨIɎ;Wy/ @vOyc†Z7r^V,[fV5jD\1QIP zk:~&隯lc)f\;<< +8,/lP`O3RS>1+`2M7'كhm[P.۾YhS08,JhOVlӭ"&&SG#(a y>* (3ߏܒCrBmG;)!WuB 3n#̼cGCśDޫ yTZNRO/x,3&G]6n|t ~d:&(>K`#ONBM<H]sBN4El/Zddb)3bFAԚ$IP̎9+KӅ*;᫢1Ao .Lp=A^ؓ1yyZ̈%*z_R ԁf;w2(B5QQ"",b}u.P&V֮əO-_41VP 6SZZ n%qN^Xu-~5UѰp34:$˨:^?Tt_4~m"_,¼7~?1 `ƞ򑔣]bgߥ^*LfPLyoQPNd۫)=^ha'Z`* CQbCED4xYwrSFutsoDdHY*$PVb@?ZC7&J+nΙz JBU۔¤=ryĥy<&+_hǿ$]\!{X[!`>4Ռ,=2i⬣A4nY( Y\}rRx C%*&f҂1C ONt!REMd6H*̿m',\[IC ;0wjٲ*uO:HM-{)a4r9{S-wywUP2$Yq'dm0z"tosV" I E|I'緆 š84o*g4<\xc]ᛋ;m?.xG#k7 ϛ#ofⰕCb}2`F[o^h4->xTh1]g2c YZ