freeradius-server-utils-3.0.16-lp150.2.3.1 4>$  Ap\@/=„3h~˵bh?<˫#/yg>J;݈I}l ޠ BxD;'{??pk3EK;!'+0$iYw$hv2A{҆T-;,Quti[4wMk"dD.YK h5o{<V]C'0(0_&֑_ =>*~]iJz.)e3ea373a7d14928aebe09cd2955c3bc33b9263478171889be7997da2cdcf79074a0d30e56a45b8d7d448e9638442d285ffb197d4ʔ\@/=„᧕H88u NBYu,.h.ٶkRv(d+*= z( MȁiG멛{{ҧ6/G_>2'EH:,_;kE#!٨ p|s1sPP;^KQ\@Iط"j4&-U{ [VVBJk;A>T ʣw Jvi%GIvH@)S~$ۺW~bgH?wݯ͘\>p>8?(d! - @dhtx |   < T l D   L   (8(9:FGHLIXY\]T^nbc6defluvP wlxy,gz$Cfreeradius-server-utils3.0.16lp150.2.3.1FreeRADIUS ClientsCollection of FreeRADIUS utilities.\cloud114openSUSE Leap 15.0openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Clientshttp://www.freeradius.org/linuxx86_64x [h~q`| J(IX8 O6*w큤\ \ \\ \ \\ \\ \\\ \\ \ \\\\\\\\\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-server-3.0.16-lp150.2.3.1.src.rpmfreeradius-server-utilsfreeradius-server-utils(x86-64)@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/perlfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.163.0.4-14.6.0-14.0-15.2-14.14.1\[adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682cloud114 1556533020 3.0.16-lp150.2.3.13.0.16-lp150.2.3.1dhcpclientmap_unitrad_counterradattrradclientradcryptradeapclientradlastradsniffradsqlrelayradtestradwhoradzaprlm_ippool_toolsmbencryptdhcpclient.1.gzrad_counter.1.gzradclient.1.gzradeapclient.1.gzradlast.1.gzradtest.1.gzradwho.1.gzradzap.1.gzsmbencrypt.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10119/openSUSE_Leap_15.0_Update/7d12d089ca16c50549451f082502bda0-freeradius-server.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=7f430b3cb7390384746ac61ba79a08309ff85829, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=2fc88fe56c62a4d1aec9543f7cefd5deca63bb18, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=630cba5c46eb57ee9fe3de4510321e3049bbe96f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=15694ff67988c14339542990d734f10f580ae303, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=90d240f597665e93c9b1a823f411004e6f0e9a3b, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=ae3189a3c7fea1580c29d2af4f9fbcd36181ad41, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=c5afd528147127e68254ba345b3fc8c7fdc58792, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=3898b0347828bfad50039ceb5acebeea7dd046f2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=403d3de789c958b11dfedab9ebf3319118d38a99, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) #./@ALMNXYa    RRRR RRRRRRRRRRR RRRRRRRRRR RRRRRRR RRRRRRR RRRRRRRRRR RRR RRRRRRR R RRRRRRRRR RRRRRRRRRRRR RRRRRRRRR R RRRR RRR RRRRRՆUh.i\utf-826cd559806ec37c31a4af747e8fa350368dfd8028e24dbeb3e6a6e727c512f8d? 7zXZ !t/<4] crv9u*YeFʋR3lLԻᛩK%PeR}ɍR)Psg% 2e`-bquT/ 1;YB}r?Οv 7w̹4n)OI*hqleo2C8X}.h cE GwWMY'073I$`s&-"Nh_So9Z/DZ&B ߫" B~FOD8tџDd&ꍥA{7,=Av,m y#~m`bkI"m/Z83q9բ_ RvθdZ8yM1*p^f(wrvJ #.c@_=Y\;FQG!NqdPJ\2 &K/tP9vav[>7-h\XkmrY2C u~eݾ#kLF@a2PXĩghN>(Fd%>6T[Z^fCy|ٜ'Anϓ[%Y)Ø_ J6  E6ys#c_6\x~>n ~i&)爈&xm!9-i+3rL"7h (>+UnYsb5w5n) rUJ(T%([3i}A3 ȱM ytUW8\.R 7 5n!op`Pvy1ԩfaO/yꨃE@+u&6U_w?,'F @ѐB4xsE@wM*Ɗ2aw]Ե5IJמ[&v@#>r=Pjx4IrQ Kvs7-FaVp j µWL s8TR&DSgE0\dӹt[W~b꺨LuuO2*/s~NSJ*񌧴pI_uil0RrBi4рƨAnxMwti侵c"4.D] VVdǺY ogj5j%`8cGT Ç|(@R{uO}XVYA&eR'ū(_z#zn':"9zVgS^ ϾQ 3ե|>ބJ R4SB%1LSREp)xj;9nI^ Ăn ˋ VֆBhF^ nׯz8W#S~'S(|(7z8cJqdHd.5o _Qt(a3&GծCʋTRo^\@/Ѭ𱔙k Ͻc;X47|IZWqwڭjkujV}.zۅ)Mâ᡻( 7oGgp=d' 1|cv lA-j'(-jY{آtnZL$^}UV%f]VQ`@8ߌ NH1Ze5J]w.5D(p!wz81IÄ>JTTIrƅ_<8j-W/8=azP B5'4" ֞‡d:BuTđNr|@+SQ!dCHw ʂVh{aa]TCIY42Sp gJ/D]@sO5< =3m[3i]л+\18gGGLkߴѮT]^BzJڈrԫ#A9,(Nw :8A~~]`&+nmG99Qtm`+򐏁_E  xdi^鱘?J je>$'zl& vK]"޽f!m|Ba{:ET 2I3\Ѝ/ҚzX_ܣ$GVBpW(횭+ra~ NX;=~yjOf+"1T;kd#2 .MOtfG?ǨQ7W֌3wfk% #'Ts_okgI)nq~ٜgݦU Z6T{=2ru,hC/,wuJ  "4/EtT~hrXf]FS13\q <%X[9(Xnh]I c*Z+b԰*7޽=G;:'jȼFkmG b"$*A]fĐ#4p$Y)ў,*ħ}b;IOJ`19{x_}t;f_oiÙ |un]ϡzS16;l`يB戾(U)"* #9rL%MԆqW ']*49ȉOKN.A ݵ*d1GrHG/х߼YݿIΐX. rsj?pv}+gd 9ַ,)jV3O\KZp6RۯBb2H1_4u*fpDaڤ35 ΉwМ_^ikB/-fg$k<JD'O VlsK󆵻o`HM7w pD%UU67V\O@by=R(\8dw&Mws1b@i=e3/C~z j!}VUeZdhVd;r"tUh-WHFv ) &Ӛh% LSiM47ZɧkqlZTm5|~1ED{^;mKn.fxݩ_$/h5Ds^fC5aE rˑ6OvI+d}0i00"z{U}u/ aw[lDʄɢ< YGuҸdj~j~PQ>8%b%> 31cA8oךOQH$#~HɖW0!go\(B1Ý!ԓv_ʈ-Vy1i/f $]5]ĢY:䚏v 0j^JPkiF>[F`㌗`̢޷% V.o5hbiq[SDވ a,CHrcA6j,r!V޵̣_vτ$sbMrxpz. (Pi%Y "(ھ2/jw(Z|$lj1Czo`~lp QW0`9;f:TooPl5vI"hI{F Eo豛%Y|C" F^*:8=#qǁ|O>~ A#-B %?6 pagDV}+ٍ 4]wWXA9bWyD&й8M>0B8, 8Was!FdK\V_=?zN0M酕mC&X^) ,b=eKF%k^ ]hPʖkBSD:%\lzS_1S9 Q5:$OL[j:؟|+Pn@\`jl7c:+Z=j; [sq  EP{h'ϱw 3a8o>Fy_j'$mbݯQ#kd*Q\(=߾Xc g7f%evI( [Yv3L|d8'wH/Yu_ =Fb'}}yD0m84bg\/7Q6._ú1B| 87Mu{?;* I䧾^2cɑQ[ 4}ݨߪkoy7YOw`[CP0` 0_ևYǮq`K^R,AsSѣkiyk0 X Tˈ-/S-6 vK3K 9P~ҳkyp黚#PP_ c@낕1ZVҴ*J'.,?&mA+`vn[HbH?2FH8ytC$-.ض~f0X{!A؇YVS!mN^ZW׹, ~6Zr)WH.9PLz$'1 6V "(l4őxGSB4r|Pxʱ!;žD)!|Ãi+oaEr-F<ێ␡u1$Dq#ep@kOW98te<cMiJ㻿D3 oRaF[9YM7fЖ)U# eQiWpI=%bCzon7~rNhҨƹ-aqO+ 9BElk4kEG7FgQrہ>.{oh"@ЄZ  LZcxt"UhwPu.iG!%=XP|->$ڭrrgy۫< +w5zoXSP-=#AwIjoI43icd7ʒ&X yo [jH('4Ӌ^uS`CBF +c/ M7%(QorH(Yl,uPe%c+trKvAe־h't͡ 3 rHUm Q\uAS}<չL?7CL[[l`gMClқ-D;Z |`;!^qfs/7E_V$n@yF];J yNIiԺ˗Rm(ֵ2 "̆*EP/U%*HIE$lB<ȇU$`X,ϢTdmγP¦eͣF33Dl# _/S6h}3GW_/cJ'+D+Bܸ,GLBCo%2yw!/NB/)nmvڀʀ?X4w6^4iEu4 bW/̟oXS“~*8s~3$l|w>Y& CP< 33#Rj/9H=o @y)[C](eV\GRY/enR\oyv3wg򩔆Z.UJ?vnB,BKY]FU,+\'5|5-|  hI:7ca\ۺey[gBz oUx`y2EWm6zߩ rDP!l1a6Yrx߃A /5xa&J;w > nf+zƈg@ey(6f,QKE/?0$YرP7U-wKTׁLG|PY-`mm'd4 4ZYǚoFt}6D:f}@W~1_d t>CYun 9Q,>SyP, @ ͩ^\׽]~UfDL꿽s0!bF4{ zz)o$u@.?TIpn/UA<9QeEhr|yLF.+HϞw9h-̟ll_cx)BI!p'0e&*c_=Gq>̲DlYFi;8׾Bo4Cڟw|&H]WT,_Nf_Z5S^U*XcFNbcdwֆfx2TÍGyq=TްWk`^0zwn1:ӒP~G]]@zzUAw [MȷZ(oWcADpH΀Νj$HL }hY,`Eǽ ˫R(:v? 8ˤ".ʭe&XH=Eyw̥S jSF|W`?M԰G({~WqeJ2#Xo0~5ݖZ֤fǟ( g"wֵ8a7jHeqܢI-&Xk3V/.hYው4xIx2܂0t3V1M#_\3O}rZ}l]5F5!pniЩW j[6N\WfjK]=Y~I3Jj4xfjO~jKg.9n%.ʭ_.Zݖs\6% oJW'ziG^ؒ{Y1>0d&6An2E=2Fڏ+L8i &{q6%QJsPM{/hy9|OeX'tE` cQ^9gD'͡<8iPEtuTwt2u!X+U/@+R&^.*t޾ܼr_Wj_M#b9݉lFevӎ1^(W,r{onilK#,ք.(jRթ=%qRB <،c ڴ%7@pS6@pu )[0gJ=(TfXW~z⭺[RqЩ .qC[% @6 s7\D:k=mR/y|RmJ-'=u+\L/;L{'%92zENWk_rN 5X1cg:~D_kT8NkDY,7,reH`ߪ` UMSB 9"Œς`t?NFh|kqIA=,1M!ifS)l!-a8YVG6h#N+*ը_;܋?y}YLVLp]*/%dkOڲruU3t駮qr1zYoTas9mͻc6u<ɦFǩh 1H~A_p5ŎZoq=+_~!Sx2n>ܸB'3Lg.xǡ7+ni5ux[( r`0ձBzd[ƴw~T7ܚx`Ŋ"|g+'v"Li{Y'r<0iH $Y1Zpidh:OIrZ&!G@c/ Q pF\i _Y!Q<~L..䌚w` ro:HXz /ȾjS` \ZfXl|ԙ 1_&Mc4cʕ* މql7;8 HkNlجI;XdXEx%f.Mڒ/Ql;Чmyo,N hM4묆 o$$3}ޙD@< ާڤnw3jTKFH2_j% C][x:A犽KF韶Ln)SFoD6k%s`.lG=29jk)dYQz5-sF_Vł{܋ٙBzHYw+ź/ŷwnaM-*dY$L/{#_Ýp] Q&J^:µa4BSÙQ]$֛~3A|7] C{PnG=+#^dm) 'c|SyE>$?]HO⇞5TC[۩ZRtd zF'֧H5[侏.<;_ղBVMNȄdD%FGFQC@1@`j IÕ."bb' A9tO7xXMaJV ώlh /X>3:o:EIƎPUlais.a5BQkt1lJ jBҁ ̱h|%U<75`!;I,7}@K'z5<įuLa !qw6vG^i),Y؃Q }r*.fHځYN-p+jeMq'dq":H +K\C:}اAU/0DZ6#)1ڃՁ@lJ4粡P_hB7e2]rVBN5T52 Jj+~Km#g̝ klį, V'БeB1^[>]&&No#BmUc=0X]JTE["]q?])SXlS}.OL_n-~A3)%APAsP/DzVJ{&GfxOYWH2x1IO}˷ݘ33k}>E +_H,4ڼD9AAF^ {p|a"Hk9w[DŰOzj"7S׀6J]&H b^ˍVaJSH 1!%2Q&U/v;a ΀`@)/aiр-'k:[iT}{^wr;ʽ԰l "\׌iWDb=kO\f<1gTcUVbr;[HJcJ[lE4L9bBȿ+Oyo-*ZL)Gf%[YymUAdJ"_o(L ';qJŚ?xlarB :Ir( nB_x*]zp?R8%Fcge'IcX'@hG(n؆E冑BÑr U1Ui)v-h\7an?Քsc&6:yfW :Mį*=(1̍ ub&Y;˂+ vf.1{jY/&6]{e0V¼MJ@:m&s 2 LxGKPRȶ Mq}8*M&;4` LP*} Fmc'"nVn[yO^=YLrnX Wupͤqn%ݣcZJdX"F^T1lޟ:^ޑ2VN.jܯ3*.a>_E9qVz t-05۝h1MCykTc.ќOb#9S7b$$앍P3 C;]k0RefoB4ȝE7k=\Y?&ssP jF9h[Kfd qSϙ3Z9ms95āop_ʓɢ̢;SahQcej/yN BZ4)Uqߞʭ^\5+!G˽%%AZ$Gq鬭ؤ=RE b5ALzSljH )PrSg+{.Hz^P,Zh >:}q5o+ {}^5T/OɁܙ_ko#(^@g*> ~|ؼr˕Uh& HN(&π_3.o sll'٣ ;d]!qj,c$tqΉ(ɑ K7xRC zHTFRmT),S 51AΰzE%E)xXZڿ/rк?0/ #xYO+8Ёp c)b7M@ sx0.ё28\'q0${1tO3+6mw)*'Y L.ra<4$4]j/rFtBwWX59M+0rD~up 뽪@*V`WoS)oJ]TV0xqRRR y+ғWD2FaO@cRքKEvFk-/D<Ͳn4c=ެM2Wy_] cySM9.njpn:yXX¡L-Z 0c?iG@WxUEJ_ՅkTr^\iBXbfN~l]U'$~jumN"Kp?QEd >@ UN,բ ـP0}Ķ/o.HBQFUcP$Qy1< .M7nX, e?w_I+NktOqA%frkE1a|k6L/ѯ $v5 ~Rq5C4fUkھyj`v´Y|[-N1zUA t>Z<<|+oz񍎘HjY?lf'Cͨ]+F Q9KNQ~<*Se/J0 t -E'+.)iiD:ύ^y K_@ze(kϴ"$Pu#](' 𮏙m))>j쳽RsF1*5!'cqjbR" ?3w{^Z,9=h^1]]H\KI5'a67RXuIE d;^H\\(E٭+A\~*d>zu#vI;v֯kZ>nmZ',XSx[h^aE%u>0ů[ M2t@#>0Әw%e>[驳5aW@"ﺷKb?Afug\nMYԣ&+%e'pSofGK@euߑԳxto0]ZȻˆ4N[ ѽ9 T㏷3{򯺘4=ٖgQ>C<+ f-=ܶ0."H٘Ͳ.|_ e1?>8k1p:„\&̮Ϲ8MLϭY钂tB0L_8z:'E.+3ρ8vªqPhmQ ON c& u@rQ&nHv0U;`'.J*l?l&$tӎ Sd47ix XX,KphE^~_tc?}G*XOyv >8AEG a .xP 4QO]=ǹ֖X@]kFc؀XCaȌbô @-OI_ÝJ2]U*AYCV꼳3R7sW^S$'c;k+纾~Do ? /zV ]f"Cׅom|Sj΀MRwBXFIE8f|paxG\o+u7Z!P=fk U5(eTLEg)&wk*o7ԍseg9!Hg>Yv 7 :PMy0i3ia遂2#x\NB}`d1"-W3tw;3vǣ,7큚I b ,Z'hRνxyoEHc8,}_yWUcR5 2įt$kU>l9+LJ0aҊ?NK@X]#|QXZ{!Z3^"(0iw ywhe|8ȂɔUm8D8v!Reeǹ '}k/]^ pLLI~z*v0sV{i^ޕgoL&(f OBJBlFBsY;y.]3Ӻ#zוC?ؐUUY_ɈE®7ʱ5,{՛cwIN~W27MT2jəv ְXz9|~hgqpp6}>4b1tv>I'wIhoE8yRS^4𳝰Ж܏I)Zמоo/QATԷb8l~b-lPLF0!j6#e0UR/( /-O\ZDGH)shwx’{gۿ/^~AnwRjysBf ʷK)C*MwݛBsmpr"v91aj5?3>ﲈ]נQ]OL@# NFzTv=(x VIxݢohP_%~Օ0iJUDS@p)@>+jΜ6ŠiKɣ}2%t#"FLqq H9JVtyJҤDDᾱ D0ש)9ǫ WTz+$CFMǹOcXVG4]]m-SR!N%%Ty_ZI] \MFK@uVʑYwN0څ?ZuMxhžϣp L/s͌ۖITvGW 5fSCbq3]@Jh&$%SRITJ)1U.,<[Ac<: JztqjP"*9#爸 z@U.ypŨZbJH%XG1/m`c C զ贁P0<["kL H-PW\.5et )Hz^?ei>G`'[(.W1, i<"Cގش1D`[#ƺy6 Px78E?`f &dڬ 9/DӸp\Y{J a8k-P,@Z OI=rq˅GJxMY V˃4Ҧo tIHSI P˛EHibDZINcḝX9k13¦}n 5re<5 #1!1`x Q~d/@vybeBp!?h. [ͪip5M0 ONn1cvH^.CIYb%;SPY暍 ]y}C) q>~asޥ@ؤ/)*ijo, uZ]oqWpFL(Uzm٫N*\35œ9Æ8ՙ.L 2tן%@DG86}SYB2/Sp#=Af:'l{ vK^9TΏ? ƪ$[IRH]>#q/ J9tbZUU~>%ױ|:Y1@43E|iX 3ٌ0n>qf6z7v/V]@k{C 'i#N7jMN5luJ3/]@f˥xNp(hcR?^FqJ40ĺ̴qZ4 #EWً^2 E }CV8ZZ1UX+3N`[Q'+hsݒ LdXVi0l;C!%& "¶joj%/7H(s r?  h/QDE݂v]Eny ~ sfLeC4&PQ!\w]`]\|C:3g|v\$)&_xʈ~k0SIጭ)eT)(^}s-hn o "]k ">y DiEf/–"9/8|i%myZN ØZ|h &ڝh&$LaAV8PQDU[q[Blu-ݟ|qP .(UQ =_8ӕ&ꣵΐcMGHƙn, *0x7=J (E!E_]{] .)jk,Y3h˒4Dq[q<^'\t[J uTʅz$gaS=YvfE]g&)rOSHIiq0ej%R> @d2ښY9Afg"t4k50? ǭL4]B#T|!64)鞆GV˞3]o/6>EǤ+:s/MšmWl'1D꒩.D=tߪOԘ$a!(FL`qyzK[O+`;R>[sL10H?٭ qRO}{Զ 9ݎx2o$, wր:gPk&4O+ۺaa}G&t>ݤA5  $*APf;PoXFB r(cQŴ"ۼ sB-p ##A4u >hYt#yfE6ӡVeu.Ub-`_*LX̶WӯΧ"L\b2h $ϒO>U? m0{)9h%2P]䊖 = tGqsi5׆` 0a`g]TOA+u sو 0B)T}f$n%%rqKb R&Hi'Y N"^WvCBJYã Ƞ0wD!L ~uy;\GclnPxf] B#)2tJ3?' Zd٭z\A^ 4&L5צ^|])~LY rLCȄpboOmꩁyiXVx~a` nu ۹7ҕ#V 6-UE/hdZcP;=fG` INE2,׍jiH-zb>孌6@l1zksaG(8g\E.^s`^};[ D՟`ŞC/IZKUo9^pYo4 &A[F$O00Sx!oR g`ń^+ͺLb]’'Ch0EƠu\ {F`ACMݺgH.nqm:_>=[p\ODe&nwg:WQQxQK+=F<6~K0lzPw{lRfNc2zj{ŶU:d<}Rpr}av@Fд-@]Y5y%YHR^Y W`,@~6su3Nr,ӧ}ec㢁{D4fh~W%,J;pkyX*2:nI < 3e ),~TXA`qc(0Yso'oQsrh/YNVpa1]ZVL'6yaIRoANʍs&@rEt}X~ӧϜ,{d /=@+"ԢGg Q }3z#iWjE3B&Ң=Pni|+ W+6V|$d>6ҩAL6JX&*O1>i!F?p5A ol欵N$|Y_Ysh4T RY)^>e/e}%]́JAXmy +7@y/BaB$:]_ E_r6< 9,䞴,ٙ(Z.@0VAWG6#SQQMALT7mS󪋾c97:5$y $ݴ.퀨 yg^P%+<`aL.h9@}:#3H+t'HS[\p h.'[$ NI'k^ɣwVn3)g"BiM^huf}հc_'c׳եw]wy% ǺNxІP/Ĵ~w)aR/eˠA}7gߋزM:Oz0=̗]oFuLk kː9zJi*]@Rx n.jYV 'FD+Lr}mYYQL\!r3+OHu9''=/TŁ{P \)bnNYŤ%aVItBSП UVFK9DAR( έZ+p77aV`` rz= . JpN$L_\ p@iT*w"[k2JfdWGmSQc7e pifTzF=:3}G2Ƚ06޾yօis4w']c]O*6'|[P 6d|*g@Y8 {-QO;ewȤ﯂)oô:)g"`&)xEbI tA0T=عzgbIbMPZsjЗ4PD_"V#ȠˌgwҒ1@Nbz~3)`ZN騭69c9ƔޢѠ>2sπqTNnөOJ +{'own=~'fbLM,rA=RcKQMY2ɼ>uO7$3q(e7*YHD搴 vS}xiPc# (Y8eK?)oVLeMfU+9#UOeP|NJe`dXd% ىre8퓉k cte@9O`J:X(TjblT1m"a֋7gKNa)/QA|C؟ix -^o^?Bq2WśZ /WB5̐n\^vt=Dq^ޙE!+QL]_:b4| \vW+gǒ f[ 4!^wu W>&yk5- rJ>D|=)l`^`DM³žDP)U!.=v&x\IzZ*4Q:MF\1a#FT=nj|.mf.hԛ(Ζ+]d>Qs :D8y [6c x['N%k|޳|)G' , O$ɵEJVikP(S͊&|m:6]k@S\: Y *ʟKCi<\4fuc hw-HGV.L ʼn3D 䅨&1O;Mb1Е~:^nMxʄ@ 9L bV(#Lqз7f-:n׷Bl#mڼPE65n؈ bGf^J.:˜TsG{`B Np2|Thp׻ۛɀ- l潘6s]2H= ԙV5 P0AP.D/VREϳYKx'' ; zY;]ئ=*RBLU d{HxB>8Ŀqd#F%dUnQ!MCPk!=]4|X Ct+>)WzC51$]\q,O`nH^r/g@sqlc gHE>h3I[K2 y7wdB,c[Pٴ_WW*?Х 0B JIPԄ|jd`5-@>k@-.yّۼxJl~SZNz"s gSi$è؂@[ sb`cMK ˜QaZp7ۉ=Q9Kt^6.FoDh?VU dM:Q ӹ}9VPCQ찯\)@ϳ@ew쇧 g9g:l6f˿j@{0׺F!s.,\Jk&螗B/``V*dsg @g;bk&Zצw6\#惃Fa}lJ_B11"әjjvn؈gܛ5܆ʰ.;r4p#Zj%Uȶ2)~%L0g^V΃oT nsҌ ^FD(96P6qL;L=I[r?tQ?-FS`>m.u[IulQ7Oz\ǯXj2h+[pNR=A)Ű4m \0MbXGe~ׇ_h;f-BטN<*$^Ҿ痑Ml:7C4Pu fCK/<>^Y[Òm1ЃE꧎>lY#޿O ?c]ӿаJ5*2ZMuɱɟ^LhuC|8AP%sn^ʲ81, *b*M2^c~"ލ5 1,pyRT_[σьM:S1:t\?NZF& R9֒܎0^{%JնdKY$7sbFL6"F&`}}IƠ8Twp?[ |nv_ b9NC-|0q3wxAsdylK{0\3jk[*x& j&fK3y*%, dw"QN 쭭 O~;opNRFɵKNGr6j:2 C*/zanR\Ua`5s7Ni:B(VI`V3N[L_3V29N[.yn|Ŋ]WXgC🉧xމ3afg'Ϝ:KӵFngα+( j]" 3d?C?p׆&'}q;DFLaWUr=mw,,a+؅:M,¾S6 j 5"Mbul޲rz>zcE6۱p3 wey< L$.y(hD8Ȝ[bBnYfBy"@1m .a :Ge1vyjLq}n;*B%K {|i~v½/ȲqAۉB;+ۥo.\ =H#20qV*ȊI?Z{6b %Y`܅ZtPrŤPt)Wgy*V (F!X00&q;mZbfwګqŋ[b_?#{5 T=UȬ%HLm:(/ʙeK>hPf%0#{j!ws'1BEe)yq{ frkzre=pzrU*\ڠW~dbVl|;;Δ w#;9X`7xq`HϤ^Gn(AбG*HX(hQz&Apu$ȉ6eVBTuO4q1cR$B^ :~A f2ٿ?ZֈbjOs\ /1{hu F%Uz3w%Or&vL){ceU`1P2"eAUPļ A"_(:*y;HAdވ4$?J|=ULH*w[Uj`{+`޼duHR_1N5fks½Y@Fz ޠG4;?pMPS>CP[\dv=cr\gQaٙ .(5 j^IvDlKgyjs |"&6:# Ԍ 3 2/ f7ޠ5_Dl7ՏE+$[ϱ2"tudB3:oxeR7$*iN'-@y|6ifțc475{ Sh>RmRYj,YڊE,82P"ZY.\Q Qm\q"EņYENħ/c}$Yի礅y55[Rj_]/B9bKL@";J=#`j %4vݪ4Ecq 2OcmڼZ$bu'-df9BM?^RC3X_8L>e|>p6i>ZP2J[:xuص n:Ӓs;> (^j'r :\92;o ꢻŭ"*`_[4"$^C;xZwxnmw)J@<ںK PX[^ RL$syFs&Cػ|s LZous@wx۹#DžP2 Ἴzand%q(W6%< C\W]~>sdQ|xT|ɬZF>c>o4HC['#9qLvk$jb'1F@,!b"TCgqF0^z▂|k~Ů"- '|.۴s|Cۑy@H1Dwv'Ft<Îc v Ewd}Uh}):3&35ݽϪ6ϐ)mcRd O5E6^16dG u}ieְRBDŽX+͛;E>ŚC =T63|0ѾUz%#T4mo41%%tg:.=ZG(7}wNCы'Ӟi۸ Y < H4x"dBDž)mƯ9`ʱk5d'cR3_/MQ=7XaUct]u9gRYeIU27~v?_rZna/ߝ2EM8x$#;pB ! 8z>ֹ:K?o引m oE2^((b,9gӊ+֊l `_7L䓶[/Ə$zjFשϚ.$zSctzy/ROOS,r/uMW8ls?TViZ.W`: i1.J}"o);iQ@?ug=*iFPB+J@\@t4K̩۫NdȢʆ"/2y &?+a ? dueKY3@Six݈H!ӢzK@en^/N8=rrN#<$ _wB Ͳ)YMm !TXi wCyƪ|tYYԈKloR[FpCN* x)D>'(kLdj*4kNkh!f@c3N-ؑn(|}"vʎZ#,.A1捥Z*}WMܑCVn4z8P>4&7+LI/T3ϩwpMلCF!Hgk=*Ka%+aMk!4HD*Ap%@ԢḱwJ$׋0t},Te(wbXv;GHj2f3 KN yLI`Aѹ}} T:O8b^}d^RYB{}t·)3TVbI.Pn̜H3G{YEī*4Ի:G^C,dM&6A]kSrNOq脌9VAUR[{T۩n>};ݬJnoȟ?<[TH,E 9X\ʭvrk35SAf67nld0 GU` )ר,f(664 /[KkT NuzecN?Ljԣ6wSJ6O }T` ם%ۓt,Ďd?Z!*ۘpDab"4XgQ~_|["g򔆤Qb=@Hḩɩ磾еNx޾\?U4Shsm5X/S'gRkrkPU2Ӄ0&p,F^ ֍=(.=YBwUANR-_36mP̺8@ u8~=P7 b_VRflㅟr>ކ-7ZuD1ł{8\8hwG$= 6p|!B623r@p8ɂ2.c>{4eDITx~l^WTۏԞZybvE/K}zqa[W7/b[T?xi:yP]P1Mg ZH}:RV-+](>k+K*F8% VÕc@oq3 >"ǡ$Kʶ..-J$xq\tJLuQ|t/l]5ۦ@pjvedE?y CC\5&S=D4s^IF. q!1nNjtX/` pϕQd2_J %9/ Zh (E'kɮIݓɰp6En҄ vYABltU(^2[T>ZȟzWՒ]9[mҿd,U㽄D?w鰭=ܵ.˲un+g9Iu 9 SHҌyVX0\')A6<ۉ^@[,9AE^9dSR=;(fZ.Ԁ+_WRڬ &@,M .cV(XPw֘zޙIq95gqB1^+n.y.L{fR)X`M2՛&>VILok+OU1^ۼ3ۛט!)"hwY$ Rnr')oyF䑡gp2'9WK=hĠf4B Mh>% kKPu,8Ņ8N@Q 9v:=I]NnR V:i?JJQFƷcxJ~#2UqM7cNU6Fd?386q,ULSU?[}C/2k[bvb rZfSVx&Ysa0+-"8`R*QalElb;ԴI/7rWjJmd)nS~ٷm_1Ūއ"ly ҀZYÆ`nd]p" }ds'ʫBhna_{ 0JD< ∬FIS{}R[}^0 ף$m[/̲`춫K3 3mVvK5[OOm^6Mf5xX i~B!]oʙSU(8Maj*@ycpF}%z,5]pgIyo-Qv_fq6lSþxi☇~~d&LcbEb>2Tw'*|ŧ o؍u h,\3ɿ󛋠K,1yGG<޽S@t7Udƈw7|_epCfVf@]y.0nLfc G|a(WRPDGpg1gY0p鹼 mMvԯ?4;k9c2OO4R1i=Y}8= $HfHq~nf;gss{QYV6A-O b^1u& ;tN6 56 $7h )d̓{0EqD-2+ ;sHDPs蝉Ū{wr@.z|=C7'03eyun`#u\SaB(=pA#RIe{ /?XL3 EH+1֐q^0Yl'|01?DGǢc(fEq.{%et>LɁqx=21FB:E}qNȝ 4td%RWylgLh?u'/~]+M;zf52lW/L@|/fZԟ߳fmC`ذSEϿ-i2ԚG bBaw(C pwp;Z& '5/)ilњ oՍ8HdKG5=6A%IE:i 10 ЌK;RgI `wtߙ'rTӥ,yV9q|XQԢ=eMxD*O U4zoe9`bCM[c@TgC]HR/%8zm3)vZjL'Q=8Cbqt(s_j6 /S\7D#:pPjUsv\}cgߩHwP[:EDn4 ]$=dYRvоobue= lfO>$E_6l (]qj]p{ 2N.BoBoxnM6g.]A9RE}7W3`OL 5^L !?K5qA@H5n|LfPL$<,R-]3NXJ#$eBO> V ~zM~=2Y,.s.ؚFOPl p||Wo fz gmg~yCVw^c[VoVзAC`sD}! el()]v&c &Y`S vx<`t@sy6tRI à)t) Q'uJv_Sn|3Tpƿ4ު(/)+UY@N"1e`GȌEVϒT{ P䴦ᎫyBq5.潉Gݳ|Jc,VG}N (PskD3$r3ldDE"Ǒ#/*4*83:m0VQ_+尫sHtiwz8N2d\BKѢz9{xSX3wR*܂Z.>ׯ0 9o\3j=vUf+^v:0m`r)5ŧ8s˻i!^C!,fkeˊ0)NbϞ^Dçrߐ&g92Hťoɶm|V}fbl(b̗@ܕdpd&cоVpZ}qp&߼?)7%ܽp .5{t.!H ϥ$/M1DP(oF@c"_ѧQt ؃t1 z%Mi[$ڎ4 vii&*EJ* /*&>nlI?/j$>Cy3@?qv!Ti+C$Oo- d˨igJijuSnat wr*5re Ցo$4r~D,F ׼F'"@R1C)ftB5~KWQB{>~kM€t9UJ Lt nA@xD"8I?`o5ƗTKїH:noyPns֬٪|kk}$w|1`7DȦbO(h ];yO5h0ji6KueAk}4H]!w:iTĄF+–V3V[y3KȖ_pB{JZڙ. n[^ 'fLzQ$'jvmi@I) '{{3|- Ce4?P--K9{"Iwɢ;IsQyJ4;+\Np]"ʨy((uIЯ^G%iCQ O;~b:FEs浍7v<\f2Zb`ϒZpVE"|Q$V2XB&`q. 4)1'^,ހ=DǢ:u397݈Z̶#2<*ĉe&;tCUsI{IRtA\3q~Ŷ4LNYKk 3ϜO^.w.vhMb:r>Bt˲-zM>mĴIqiE+R r@ftD8'~V[lU\(cGY_/I#E|r!jӶS9}Z q'= ]Ja חe+߂1M@b&KhZnIG a.G&"l!^診kA(>j cB<'Fiv,;{y㩐E+<N ZU,aIf{8ԮF@&; :MN-Z#c (yJ;׶Td+ZSzP8vT5ӐlEP7*.꘬yhJH%9 ěIDqoXml6L;ct Efw$ϚɻQ] m LL0 긤LCMR3'%3vae拊Z[} 9_ơ30$ NsqeݔO nV|JV V}nUwYz0+y֔%8/a;iﾢt;dF5b\P)SwEb$ciD啥`"Mk؉Bk?E4PO|n:B3d e!ex-"BRS\!~,RZtEh2%bE,Vj4%Xpu.nS+\-80.pB,j<83 TWDVmnmゞFX~D1ߧӕvQEH+—T##&)^lVwK_ѿEd,oN?aLJ+%`ˁR~G9OgS3g "!8ɛWTϥ 6? 0/SyN>RD31nژ8x2W| B(Z[Z2ɷ-xzj8%t')ev}tm $’iWF[zU߲QZ] /,Lo/eo\JgE~ eoЛ`΁^a޿e= 2%\jcfXS9Y *L~whab3P y']%P]Th#֟A{8#%2e,0F<7i0z˚9/U15,ũ0 X-`1ʍfEngY%I<%I 䚈(Es'L8^S>T+3;TZlLIKnw fP`j-$4zLl\1ds'y!IaϤ1ٲ"Tc*7pfމ_X1 /_\ ]!N X; {Y ݂r%3SrVsoHJlI'ώD҃e{TLa2[J=&h)ƋO_4OsbOι^4A^); ;cmR[QCxRrl\ʻh#Q vwC .QN>Csh#FwHTrhmsf+~?k1::t d( C!P1r%H \Ī`%~<~X~wLZ:2X1IcUE͵8<"DĺbpqaҾP! >e8oΑԘBҐ[ftf5 * =/K[ yk GC%[mILEWGucQLvіjK9^I"l4\X|52yx&*t%_G.T@^@y`[gہ6,4I*R-^OvI:ehr<\EZܭ,Vs qĹ+&CIp9s.H! ^zT&;() if OP ] L[G%=E=-_ј2rP62i!Fr݃}+,ɝΞy-X)pITH=BÌoa U @ "Sa3:L>eפ>8 2@4iρKDXf#xԻ|f+^Pj''j~?"?#;,0)<5~mL14!8bQ1G,i7g +X=%V'YNC K r/7ǖ5h':s.t$hlR4MۭqXz͟FhYzwYp)tMI-}{ܘVH`;RpJߊ' ml86N8JmzeR-IgƴOZ'b.7x$~fνJ]% nh2뚲)E_-5-u1RJ$]t&/l 4*yNAĉ:|DDVD(9*3JPUQ==_٨z iFˍ<vuV 4!?3Et֌E/7NvOhIOOJsѺ޼FNmye%NG;ݭpw_xBb5E[ B _46my8@4;CR=.9Z'6'¨JPllmYr&݌͚AX)Fsɂs6aNOL| rdBƭ{sq+)< !PJ|V&=ghF|NtM n ϟ>.RyEԵ]ߥkvI?ІgNzm/ +3˩Us3(QG]%0sOo/S; XX^@}a!ٷ*萖Pn\P󉺗em-Dj}NΫ@e9ZM>yr6;, #PC l|J9y-MGb$^ʱܨYVX?Q?Isq1 &n 3G;bdQ G^vDbhtMa^N%YpQjCtuq.4?F&X]335#x" B+\qy\$U5o+eUƕ-sNV /gf/[hX!+'nv tC-I]@ƹ.r5k-!B97ʙ+R$'[1?GB3(Vk#8!`/Vzܵ4۵ r>"Vu]kKC| @ \.) ☔>S-?NEGچ@կl~⒑EG<FU(UbOȟN T`O;}>"X/WVSjT…𞰫5"ck6)~ ]G2p 7r0Ct\,8>}Ղ"S/&;N{ 2u؈:g!\|vht\Z[;2#`!vdk }&"NpiǬgE17bh  t tst)ַb +:$e&t%gFI{ C<Ǒ7ζ08(Adw'Ŕ0fP8W*Z/N.?-Ka ^*5F2q iNdGb.j$?3 }fitw#n!"H۶ՐS+Ipd!Jf;/ķ*zcMJ;טOdkîjQ"p #L4 ;1Р}h4[>BBH g"M lpoeJIs EisH FxW)"ɩmU.qG8sfH2[y6 uh $)`'H@N,^V1! &%%nvDX)iIص$z?w|gf\\2SiMrn]n=X^"r#1S.0|wFAbѭۿ%TASTD|Gw,zsw06b|ŕZey~JAv;!QoN' (ݖQ0YSDWQ`nOf:"3b-YF-~vg&nV&A#<$'N-VPI^;x9=bpHSٚj IJ݈$xU= [MBSۦ{gme›*;֏&너F>+ѸXϬqWAHsvJڳ1^3'>_ z"@XVɬ NT?ZV)׌n2,a[+^ "%}1OFIHF9rؼ9\=Vω0Vv #IP]q !oB|$4%1k%VtƭW4*_6,JCY]Ul`,;M=Юrw X<+ɞWB`,0 A ѽ=ƈau~1)ư]¡?y|AQY^S v:Y]Sh>z봸kwFM9~h %KE532E![&ܱ! B@זAJ;ˀ aubZش}45{$])vHɱ +\nM5rF290L )YDc<rʐ(مK1l顰aEݬPrxa AN:HZ[U X2]&~/ڏ(ܩpmg- 3x/陰}UnýY Od#Wgv511#3iOu8ԯ½QqRߗ8.4ϼVRb诪~hnC!/SdG* ձ!16jFjS1MQj>4yxB)UI6!. 8СwQ:(>Xŋ`hT_"؟y1I\)x lۈfШDS$}a ^\ Uc{S*P% N! V釀iyH1;I%P1FGcë8e,sZ&.e} ou\"$T2b r~'t+zaT_Q>y%u:#c)">I'٤_ F)D%)t\o8o]3焄)1)@D5?%/sIM4IiX!V@,NFLړ'[mz4MUֱ/ J֒mF&#?m6g?Ty11 _b8z{5q= /FS~2?53DUو]7O-ޔ<2JGE:*uvʖS6hfpBv3*a0RJ2&!(Ji<+Bnڭ$[:C5?m1%~0vMMWNLF7|blO, Pݫ5Rc("O-uٵtVؿy2"roԭtֱԌ ;[>6XC1w!:ߌ"C-tFr8c.`ki= FO0+ޕLf$HKV!a>iLHwpGTԼa+5DZB+f{]j=9;4OB/i' bHxTX?n^&-cƾcFmhILÊUtJBkPrt#ekQRiCx д>4QB?[{dIo^ff,Y07Bqm7\ u9ŁX&\ 4NT@^brFO¶|ܱJ_.s3RFlbjr6 C 3JKb{?6>T?4 åMRsDd06NwZb)D$F%Rsѩ3u?|Wj5mu+V2q`G Wx裙SmvY40U˘{^;Z:o; {y`.۬NJ*;(>` %)yɤrLg&EV5rtۉVеb 4x]^PÚk1,ŵö;r;=;J|v3<(d3HƄHmzᑲԸeg?XXLq|ߛE 0yAl ZF$ F!5`V A ;›9MB\o |,N9th D¶nSmQHv!T;87X&ԡy3D"/2BD<'&?sE3˶*=ߘcịp(FZUFÅhb!lOuGxƩgZP[>S E[zZ}dhE.Ss#gߤfj@bH+>~Ƌ |B!j U"EIςP1 ޶NK ruoc@/;FnHM<\6_8ҏ[Yy~@qܑ5p9[sGh|qio3fEecռZKڱ(@]l^TӻSg6Y;mᎮeWy\?j4/1z_!ET: m`uOϱabe=YUU]ł{QpA+F5woƉaB ))j)9*r"PO ؘi٧jo4nI81ӊu|4OD#,!lc ɒH0g@E\*z<6m!_`Mϯ"\4C*p0 !qxR),Ka?A˩ ٻH@0)$bu ů M۞FLaVȦ-4LyŃϦӲZiPn;S[$>6~ɼ~Y+7_IE6HoIC 4.?N^{+|t4`&%_3'7ء]g9u&?&MiP b=}jVLuê_)UJ Ty72'u/tF%CqC}Y[2N+Oe FT՛ńC)Do:qCvFvS5'g[faU J{NNLeQYA.xC].0?@4 f()Jw5׸}s/6zm0GƬn_o?;D;2L/b@^򑘪@^eۏG,-tDyW6f 1G^eCO$+]H Ç)jT_y=/]W9Zѓ5AΩB4"NG6I>ܧg`5 .D:f,'[-RUrFO<%-Q e6}f` aa Ē@ț`Lq{9 lceW邾!S*SI8scpg?!}*P X6],ؒW Ck|[Mk/'e$&S~BWO j P*rT!'5e,_U,8/Yw +C6M̾zN]tOx13C?o ވpwl`Da 6>pҜh3K9 ,Y;@IQT (`h\{9*‚661R"wi YxUnp[l#U@WWTya_0> K-ջh2'dB/tɧNX۴A/KEׁ bD ZŎrr"ZYn}2|4C3D(#6ҋcR"a?XzVg]@JN +y2Va9|J&K WA4[_:W` MЛFk.DQ^)Z0"(RXv֤s*Y/:oh!]%wSRg=8 Ԛs }K@Q'> cm$Nf8?s>y[AP0d$)XUhLu (aw-@u\6L2ӤT֔O!ᗗR,)i<~qJG/X}z皝fg\ ۞uAL B<+HʫOj d@@>+cpC1;6|D[lvn`n+J9Vr:pml9?V=oC=BrzF$\9¨lH?*<;4ʒIM8M" %96}1R{g+}FZ<2,["<*w̺#WmXԓ-(ᯒs IKpB{' /ė3d0Àk}-fE]ʶB)̚%ΎJ }u8)P Z>&Xp>ico034GxpЕRRȐ pBki׮(јU',e.ą͈a\QrC V 4#+Wl><4VFi] ~f C'[F~6 VWRhvЯϚU–d<ſ)G ,+[J_g`/q'&W׋51FVlQZÑ=ʞ%pv׌dcvlLG|l/ԷSLTacL(ͬ4@umj׈1tŪ˚*jT6L841 ُE9Hhͳ7y+a'Y6} oO4eU/Iz2>ITl?kՄ p53*5)B4(匶OPm'h.^F K$<U5yVNQE~H ,bHpоa va xm1$G_`P\^stW=C Fnz_S[tZNHfnq񂹄q=j_ExkfS a(G;VF- `JUY̽ }~H$󽨅RD͋-WNxڎ\Ԧ.+E;?xW 0tW,ܳ1.xS^lDK!shPN[/@Ѹ9HZ,LQxuS0-U}a4ΉKqM| [>ׅ4 RݻjNPgCrw zܔX"?ǥ:;R_f?2XϽ/Z]ovZ{D d/Pv'ZoJXo Ì)"iJNOo@ϛ_ȨG3 UQhCFVa p/ >Q3Z1k3)b\K*XH^u媰~}p^^vÉ؆5(SծU0J=S"fA&]1G4hDhbi%/K% 's7'M %q$ &;nY^PosL8iQc,um@ P"7gXb jRƯ޴l׺ j!cפݰY*v\JJ.[ L;{~B504=j wp2o&6hZQ2PK]B:^t$2i9?vC ̇y%-M[p $"n6;lE1HQ~K>C ] >_e.Y9R[upc0Ub{7B+yXmaȫ}]? pG^t ' iO $mb*@LIQSuy3UR3ˡaDS.nTwK?qo8)8bIUs\S1?=FL Xn_ёp4 xŅwP'}|isBKL4>MTn>Mie[ZԹOr4}9._" LLQIC|E)̘5˔ӳrDiH `M/"d9?~{ކ byI .Yhoplɡ9gBz^sK\jY3^| jSTD/u?jb{OE2x񧡅&q %=]qWWjrC d *4҇,̗I\4ˠ{0=U&9TPC.V{\W&@Oϝ+25.s כObp:eEn_:J .2 BY.dfCU˃Tt,՟TϰN;[?q&⭮d;LfU|ͧ: % {Vq=Rv0J<{"ZN/閡1\}ֆ[4Vi@t;ѧ͢Lo2b9Ksa\czkV:ğ莡v $p34xӊyvgYzG7JkYNJ7/oɆj.Er 'ե/V#@AWu&0.MzG]h.҄SPApO/ WKmuJC)-ԦWK.QOK~+ΠRjV5 r <ʧ=b12,h x'Ueͽ;=HaLP~ <+dl3%ȩW?Me+<^ rm܇'hCHgEF]5\.E1nYAX1: ,f ÅS[ilvu|Z\mۑ3b 6OǮT{O*|kƯe-⶯UȯaV-kTnQWAK*q>TW ҂#路Pu뷂g08If/tdAH@b2RUdU|y顔ukU](*#Iޔ61pBDC!f V3b~fT*(e7Cb*LJT=e\)>6hz-ZXR r[0I$RLѥO!#Lx"> z .~oEYk-ߜ~uM_d5Ĺքm#wt(7G/]m1A?F#e<"Pyrka?ۄSvgCDfeh蓼H(Dh]8] B&5 j}{mxfc.uR2_iISq9ק|\R,RpV(oդ;I#^ ?Қ9(JEƎ@K7incœӔ4QXP\e"Q j-dY# @i\ɤY _*֜49 }QN过K/w7;>LS˺wC@`3=/\|OgƧ+ւ\]g̉ۑ_0[$\謠1S=S6lmnd߄)zw7Z}n`' sZon!=WfNTf6ȆD %~މ#3}>ꅤ6vFŞ6;wU7t..ee"Y-Mv@ѫ4mvi^pdPe;ݭᄾa(R_, J@JS_0fL(Ifc^j.5y :OKo,J.!օ߫F)dkc.zD(llS+Fz ܸVPLY"bHIK@rAL~N+8e?2+F17JSG#FCZǶKrt3)\=Dze 7!9F#,Ǎ){qawNT |fF nٖQi[ǖI}Ur҅b{x13="`=4㑶T_B&J cOyJ߄67s }FX{GϰNx٩Yo7ŕyz-汔A̸/Ii9~~m;p"Hm@i/YVüփ?`J5X7·#k1A%ewmSlW7L[_,Q쿻^4p~y JS-mu~mO+$Z^x0\ݕyU!)xBh3t2~^[GII;dvY%4-/\$WM~O 7מznǯFFN|"47 j>:k oFVm \ZɑӘrm:DV /6ivS"z5^f ܋u&KshjuTj^ ӻF?[i7 YZlFUi"<:a LtOq):32~WbϫO4"]?yLsAS|5!bc-K^2<ij0_WkOfgE;eErLcxg} ?ѕ{;e*2,ٙ,!s$R)dd{V`6;b,b:d֫Yp}=|[ᫍ;Ľ-Hd 8 y1VDۀ#}JwLQ*ojߍ2E9Xҽ}8#8MNCHamO.)c`Rl$o~ٗ[}Z$kv|ihFkG/ץumM9"N9@''qEɘOKeLp{v i fmmhgUݏՀ 1hIY/,3c+H-K\Q*S&Z5DDJ#'v\բ'\6CKs?At-^JnkT/b4][WA/}ן +یriާ_ӑ+(oJm|a%wP֑K IJ*;,);x_ AGkC= Dո i"&^6%BE.+/҇*cy#9]cEH k 7,5m36SPo_1;F?#knr_ItU}zj0s?ߔ%SFclPC%q+h*`% #s@}/Y`~.Qul.X"vX<qsTa =Q+)S^8;ѤFڸ\0MXElsc{7_M}$T)tm9UR5}%!*!zt[|H~ĞZeK759hu`i(j6VʿD*t4+V ED`)IGXf=>z0~k'#UT;7Ġ09>n9qђ*;o&HQ_/wfEwJ7n=*j^'+!zs9Z\Ȅm݌Z6m;8A=V~[ۃCѢT}=c,) $s\vJ2IeQha4(Ne2Y umU19X鉖eUSWV})k(LoX|Skpd2ϩw:k_ӥҕ9 !0`ŻwIԱeU!G6ȺD5(DDV^kBoO!t宝7nРFz8j GwaL"jli|\wZ|)<4KɢNvbY:Yhh&wX.+.PNWaTPqBMwsfuD(%2 HL#3l*IY[[>kAR?Y+SNt$i55Q'9q- 87#fge\͆V$KzˡE2)E_}'l崂dRqKEHՐb6ְVPENB ~d.A+On[[3nvxACiӱٸ#5_CK$eT@Bx:sqᎢ eFL;/W\JkYZu oJכF 'i"'y@&r|tmC\OTNq>Bj#n ( -?zI|mWTHALSXo @wh*,vRj ow<?W༠Fdꄾ¥c_)_lٵBA7J{]lmgΫdlW!8r$a^ Yቒ%qjf[ʉGmmU#6fABRm} x{ӹYzE!H E!cv🱸s%n@,H-בAi>SVawy,r"H^MJ?^Ĥ<}=W?) |bPW=-AӜ'@ͼ'M7iu@n v"TĎ |S,G4y*nS#3,vp+YRp01M60If+L:%~J_ <.hTG}˦3Kz9"]Z X6{)Tmp% ޺E[_%:X%ub|˻wT ꙅNjeHd#T16)?zpLN8kDD \U=xsBKةK.j٩]/vQ1q͓O|%(A}XUV$4,z 1 mM Jpqw$jj0%rQxWA3b@ݚhI!&E\M;4SQ>īG3cnSΓȶ}!}YULVⵟy/9ZTd=D_dȷ`5Ua߅Z[ 7QPiI˿`2^.ݹo_0E6~,@ hc+pQBB:tlagZX:ެAq/1,Xe x { N`yTL %V7VB1v {ye^0qD/6f(,[4D&Z&/J5w^Lf.9rSZwvt/ce]]^Q+hGQ90^DZ!9[U򊧦+It󠤍db. ItJh[?px?. r̳s&`<}ѨW7wCU}$@fܦ/32U\y d };5]#N@H^ rn>*wJ8%ن*$.^ r< Re-"dEN~5&45:JYĤ쨟OH+J->7}#Qw7s6pO .RVǢ06}SgfHB2*.E!ޏ9)D֡9gA [ @VyB3hfƒOٷ۸P]T` |й^ŷ^ F0݈PXkd [=}Q0.RQd1k#D*<P>n*XV͢ntxar D"9ϖS(͓8i4;۝fB4DUF^_q3 ]l"D5.,[@vra1jp,Ͻ=gXgVՃۥ Y>0GCc2ӅNknweQhٖ%+S0mb0<_#FKkzok =&۷]F ݋.32Ou_SbSxIل BYeQMs\*x˹p,0{S&5_xi-|AdoJ J+:f~PݤFnO/;o3Z_#WR ۆayVK2З)p }“rՙ>Wai4ONpԓ3LYw4 to Fgw/ړVu{^-+l"X VoV@BTsPzj[9_f-xd,F5oP^*OfA˺:xc'O`ai3<~Ro- 6 Sƣצ]{060*6rǭji ne۷-anᣬ5 VA,>iLC22̸^ugBkE5eIGp,/$s%`0F.,xi:~UL,Ee 0A_ځ{:BO Wlc*l_b͓cK a|bX 2Rxs@1D0lmG;C<_Iၜw,LU3K17g-~kLeZ7lE? #PN^zL1~Mq>B,) R?;kڅ"{s~&gٟp1LYJ;t3> yWx\YPxyBz8?[+ 4_,_ͱ樿Dܷs% :u'L0eʠE&ߗɃN\9aYp2 ۠Wny ^Tݚgŵ)ܱpgV%|ƅ(y 6?fp[G86MjޔK{ ,,ʑܥVTIm2H]%3vՖ6Z'KpE@b tILq䢀d$$L,}1έQţS U:4U5`FUe(mU-Pꞹrg|`Űpnc1/`8UJl!}>ۗtڭFZgM3G]`ԇhmM4{ ,։az9. "+pƓFgX#+ƒ!=&jHƻ j>0Dˉ%*IAk@0,=@@PsmҿD`T 2j+HxPq5AmQâ맬p |*/CZ|[;v QִQ2Nc2**Ym\՗YSP.ϞfgCj|EeAgP[nBC" w[,e$%2rul"$XbH؁X}vƐ>0Ps@D "#+z؄O_l?aƅb *O>KLƭ*Fmʆoq?s}Ks4/O0 bn^>Y5l:]3惿>̲7ɭ;?[F\&7\տ u4**gdW۰W^MiefȴHWmM_~% &;-l[94 k*'rgS_M Flm;ư Ge$OwjEą3lg_N87c"x!#lk7;fN&qQFC# Gmg#CQ På2ȉ^A=2ĢV'q+D69vUslG#\?ai.]]OaP& h*B:<ؑQx胠śSW0fA'sr˭YYsvox6CJwf1;bLm%>CQv=Z-$|oVJ l0ŕ+ԞpCjU'컴s>VO9uRs%a.='dtlxvtc`VXςf; ?%,mt߸bJ62ֲjb/Vvk{ l_Ǩ /sG\*~~rMP;tW[Be3Y |:)N`r7+O$B] 3d_uCZI;0j -wҐ nek2iج% wbZ #}:!)9Ong>WqcrhϜF)Qa |dq,\4:?@V(} 6)mvģҔ}$|w& ]UgKr:[2T}?;:Ɖ,L2GYMU 3MϖXɵ'pʈkqF*E&tv˗N(N_[m?: B2*(P4o%|8# ϒ!% |ᩙ%VW7wFfn-\Lr;yap&Γo%lTQ%ex@ez)$ 1|x{p7(x/4Pa'Pj\I·RxydvUcj!!|y(_=Sk n\lWOYv\ԕ6u4*rC=G,xrxSh? 黆8N݃u@>Qx Kb<_ʔ/iԐqc[=A~0XO+SqWv/;yI?MX EP&>X}S\aG;ɕ?)Z`@<{;;1RbhI>jZRCr"$zdpvCByp롎E< S`t;f[xƊmBj3Ida8sax,[F&4gGkc6(]4k5C|nDt& ܚ!ΡR N2 9q6#NԑHl6TؑvPQˉ8T : O|=BZ*XL>hN#f2=8b݃u%B1PEz~Fag2G@."j4D F CR7W^5٣`\7 H^\ QMȊ,_>MogͬCDhg.'V4I#h?}b>]Hz)X.NQZ9hP6@Nha < pA9@Pj3qU; w^'t k/&ͮΦpQgKh>rv]yk;u'0Men~_ :_|^uD0NI\.Jͧ=q1h1kXQ~}PBX8~bXu(5x n@ 'S A=S,#p۸l8 ?ou2E*Y ,EP4\)VB/^|qPkbTB2zbPb;jjvzos31${y eb!ڴka֪rxqt)xmHEk)BlPG؈҅[sH<w9Kݣ+Y;0OeO 2 qfd8=lZU J@1`";9Uu0oOЀ&3dv1T;:| 30ޞK!^,l;S%p֦IGkDgpmco- -֤c8ů4;*~ |aWC*6F|| UG2 PȖY]wp`{z:`F|a`w!? {"с)IpmQtg%^;^G\Oe UCxVwa#0 x+& )Zh%ҌɩTŬڥd@3>g ˳a_1a#MLEL#H"W`TWRAތ-fNsfx^$h7掵jD==")U)2)ymKTWёчXHߑZ<ۻrϥ@\ufg(A KKx-9'XyFx3+V0.(GmmM`5i3h'zv^vMjL/YyZunDn6=Z&a 㡞g*EcƹfAX,#le B,cBn~GFp[4x u`^}9 -ی]܍Eg vRIpfĢ,eS?pz7 56=L'y_ap4R_0=or$q/U fk:W.'(%l԰=[pT&uRDBW=%-?R0̽dR'qפ)=C7'mMTSzmBE)2Ia5$yөD g" Q^pxhO<#H07 RQ옴; Oͷ`!έUpp!)ۉpiQñ?Uu}IçY>wR|&"qgaS o0/y8}tE#6n ;VGY74,iqA3Oqu7ԀV'WڞVӮ=(`j5uFB6 +`\ӦpeqfJ^SmN@Q72oB"}.[eC+-b) M=ɑ@_@ 0*1X*xP3(*f۷>Ϭ8M'8w&9ew(.&x34rDe{Z:] :Ye=zV1wbifDJdԤS0ʥ?C%? %݈/ ^&~X8%,?TR ,֠N]Px 3n s#*jF ff(/Δa{ޘPLO0EM_0oJk{z;?M9Gƨ/2 2X2D$%_&{_``F11AF$%Tz,E~UKoZ/| $wut}aMr&3%\GUs`z91pCH;|*0\Wѽ:qϹ*/ǡf.mhW6<ߠٚswG͊ыS'c|-z`D#R̯֋g#]RCoEIGb# K*0/p-97ѪcRrgYq7=H<% B>g f _T>ڟ<:]P-hnv GY3Q]49%h?Cy9 w2 khk:9vf\}LHoؼ|zhn{w^QSvT-K( .;nv2K/uWQ4,Fhz>n.M?ndfPHdwmO@OџRN0Ѽwp]C 7Oo. d$ǛfXe2(ic<->{`{vL$(."z%ùI+iw9R/"e~ۓ`q7s mN= k@O WE\<@+^mE<[\м? ]bRnSUOr#7@0ǤxFn|gb~ rUH6DXzB( k+~_ t)KE|6:ԯH#-嶎C\p91)*{:؝5@wgkkWLQL&ֲU)vWQIƆГe)ܙS*^ጣGO0.oOAYA=@6t1&?R8O?O#W-O~%R)\EBrx+°<lr@K_}j&VhU¥ ~쳗%,P135[5[2'D @-eU54У&g"\&):򣸫c\ndm{YU#ͦ u7֧'.-BtDWj6FbVg˜e-gG f_ML@``?^ 5Wr>\XfeR\,`ȣMP:"C@QN>>EL^%7 ݹཔ9 @njnє8XG-D5#z e׭\ۑ)V~(ٜS_b^~aSv>tO;?a2C11[m~_+Iqyx?!ȅmgC?e^(j1%Kt>OXtm4ҨG!>kݟզV[qbc&+UgB&`ƨƆN#)K&B{pnRHrVڇ(O'T4BW'VSFF5 )S=?kjiGe:*MS#UH׾":nɖ'hbhޡ&շ9%s= ]]*8 !PkV X$U?Fי0G*_g|9GRm5,.`O4S(y1܎;0.F8ʉ$Z@]5+i*{FRVM㪾}Q x)/,j }pU+UʫY1Ha.0?Gn<ȺxSsJA?` V]y[fø %. ޡ/}+;NQhw#aadFoK_!M,^kE AKF&QJmi.sW. (zMT_/<Y6@a}Ls#EFi*m ĸn+ٙqx p/ٶ\贫fhOZݡnEJ|?֤]&©l\Pm'Foag sc%{qQr4T{me.}<ոj[ՕygH8No\&/K&;-ŀJBBŹEknr S<󄌶q=sEr$]tңh'_qiSTϲ)S|Vc;XK~lp˶af^qf>=Q%?фNs˳._#rǀU~`hZ`d[A]rtb$^bP=17S34w)-eM}()S3kj@ q#N}MDܫ^t^SL;e bg9$ ;ʋZ0 2 7RGk^Q꼷edɥy9?Sv&ڣa`翎CRoH}AQzR|NFAEr aNnBȂ:X%L 1oiX^:ZSJ iV/>N\NFEhxE]=KSEpUiHGCedo;}9v"JU,MQ]-hvO3&w=Fȁ6ݝ%ByREv/YKTn㷆s6ld܂xO8` TM<>>0G})eaA%,pU]J;hQ㋩A羏pG\=k׍zŸl{F:|Ò0АբW!1h* $ks |OA+M-o;54$2p^3uEJY vlin~EY߽L 12{xΨdB$P:Gؚ͹k~Pi! f/2JV$ˊDJj?`oW0Up Mz h2Fqj;k 6iOM_!{DŽs[&T7tޫאB=|dkQV^='& RoFCUH 8Oֿ@dkn= ?VT״35 jւ B[T7L4!8oH! pB ;GޘY0.ӻwx u 0AP-Z+T]c{Lw cTɦ$~}ZKh 3(t"HmR#qRMTUoŇckD>[=6J'AA/1FI\8ºRmR_H$ )T[8\ܟc@C%Bx?^uеo_EҦS; ;=4 CW|hЦֽQYȼuڬfN} 9#+r3df!c0y dCtpS%w͐gSHxLKNnػC8 ί,8 pht w }p%OѢ YSlbG8ڹI=TbA545`cE3% =TeqoL½)hO6F]D*];V͛ҍ_5sW!;ֵ (YbB9iwsp|wܠŚ[^9[G4_^.TAIJy wv2=5hr;||wEqv:oBɋ=3G0FqiRK>#>ZXaNC蓉.Љ|D98@.jJAYM^嫩F!0x#*XML}h"'hnnεa_aK]"Fɰ8k:Iհ}'p%WS _\)-zkU(p6 'b~%KT,jvkAk.$} +t b;a%buSU/{ћ}G<,4jdjKQ ui84-y%KYq@'O2ocL@L1µ:+C6^O̜o#i]2,Pm-JJ̺7DB7H3hypkdo=5C9FBd7Ekt8ILa FCbG\վmjɃ֖= aSخ"X=0fTPm3MlpREC7`jVX&KOp }^nFA4oIr@BVHr.E3U5B7E),!~m7hj7RC-%f.Ά& ?Jok }i\mZH- /o؜9a#nۃ[jH\F0+'#xS+ &iF.H7?Ȕ&PUG8ZD~?FB\UW'T6:Z/S"mR؛M) ~RSPiELq eW4s7hԩGZZm/,>Bo;753CLFbm*K+derj't`²D7Ke^@yc~6BHa,`-I1b T㬿ʋi<(\0z!o1K7TQRMߜ4^We)s%9T˞)׏4w [a._x33VJ2 3Df'u㨣>Y OJf xnz.̿C.[L WJgd0ЩydK82xv/}A!dBۀ-P3Nj=ߋs0x[*8"oMӄ 11uGr7U@(#ڀ GnU 4 CQHMȧoK\ t Q ԰kڅ"[%L=: ^{x <=:Y珟S!߭NMV> ;]eߗgz/=Nd;W,3ͮ_!2<e4۟Pxc$;HXX- ~RkEA"ɖ Vk8g3o4-'VؘEf i& jJ G]{M51^u.c@S[{G&c&'ҧK"niov {U_o Ha7ZfS5T74ꮸr:v~FXf^xԢ=#6~r5$ؓN[dDL0~ 'Y)-4xx}X ņ \ߗBOɒ\־RͦB{!8`n%!vE %MjiQ7pƔڿQz'dn_CYcLD $R pz?QOSC#r&dDZ+4(Agubwm ǝ"-(| $tUF A y/2AFHlwH2M6W7Wpl/LfrŴC w؉~m*3-fZr F)o2` X "ab^ɇ|rV6 6 )Y2 .w ɣ[n XE_Sׂsz_]o9W V$﫼C`Uf }Hgi-ZEU#W틟aט2̯iJ"pG~߁^Ca@ " 7$P@&l@֐ 2{k Hd>k1B"A̟G>_( hG"WQƃQ4+T▍NS!%?Ki0ѧ|OChjȅM* 8B$v$T(8^Q&.!U!56sao59R}A/эG!+ e2l cVJcNd=xsv-hk)Z6Hahb~wOHJv1M6o?d=iYMӕ~ۜs0 3K^M=5]SD{Pvgؘ ^*M-Bɓ)pЩ h }wvI&zb+CP% tD:fWP]ՐHdsYP1 I-_m7ʏ Jxz_Uq3j44R+4uI6xIge[_pc 1iˀ64LYIe[]]btUi#4a%ŭkL^R4BП|:Bn>:4] 鹩02Z2Bex7ؑv\BM],Q@̬tлa;ݨictp]\_d7`e%_Az XzO;_PTN/|N\eS+EDLrl7(Az^豞.}$ ؼZu Gs-c뵺Sp 89cqF_mey.|F,tڪIHVQ+wz>BqQ]kN=F U䮼y_޶1pЫڴ%yYp`j}&IKtdrZե ӶWدH)T]) Ew6\;Eawch>| iuui1.Dȱ,e% M/LT.i,8]O^^z,%9c֯ھNkSv pZfV )NFV_-.keY0%;NbØV ? ڥW6YϤLmS؞^ g^L~ٽ@'վDo{% iqK <<L{(6hv~qhKH2x rc_}ݬ'⭚S9~;:U\uJ1d Y/Y9wTSl|"NÕfKBDp5Ӳr掍6{.R8%. ܋0)z ǭ&I*K~ T_.j0}~v8NSƒlX"?ӺTQDp}P⫄ܵk/6:ofx.;Ema9=q ƣJ aRϪWf٩&%`5M64\`xE!o'/< ߋG.Ցh1^𐺪ǴS(s'!?l䃏5sgT2X?%m('Ԓ߲ -[mbXgU٥ H>H~#(r g$ۢ\3w5RG' ſzfE#:lj qx.`@E%LA##W#[1^,/pzo9j[=>sy4Y Rqܠ S9)3O,K|̕J\|4ͧ3d<":#Nw8xf  $fB4 -\Wm,~DQܽ JC4еڰ]t"ƧWex1Npbi&E{9!B_ϱ݃+E8?,w#}-ٶ#凼Xֺ͘Yz,/4HsGuKl]9b.M5%3j+V )7Xd*dg*ϧ)#=~5hJ5 4ouպq4ZPTsh{7VeHh=+ :ȣY`]W15O*~ uݾsR,ˡNYl)‹t*CIOA>j @?pեJM ÒeyCB;}߲odƱQ\8CDK ~AZy<N|%ֈ(gr>Me\›T`QkTy:5F~PF1_6ԑJagd|/WBa4k{ְ5 `>,cu8Qur9֔L)XmzfLjy{2#l8R4$Km2j㚍@ o'@'Ò4Q~o0T&X ˔2T#E(<o sa& aAlarV0LwĈ~u:5Ko>W'IU2]"Ko_R[>S~rr.cu ~SBfq@+Hlj/G9\TR4GNCqdak| fдCGM&SjR^t1uvg.6)XըLN'aJΐlc(u|ZKo ׍Qş4fr] :xy|s3ޚY|Vլ> :U.ӳBgj>6{0 D_#p,e$BY0uh`ڸ1>ont)5a m#w npKw)]}#uCuϦdOb[̌%+2 &血/ʽjDvNٿ >߂3]mrfibݬ]㱃*#40u 7Y]qx zz˜acOFOLUz<~UO?kb"d|w}.sJYd-~pʞIUv|݁B|38&::)h_Q&V>g>aK.D<d*IldҊc0BO31_kWn@jH`ZY;:VUs"*@) R -{@hN 9o؜(#f?Dsdtg#^̆y26.i?Q"ޚ[lGӌ2W" A[uI*x6StPYbT{'Q ʃȋe$ak*PUᗯGy); s)hNmQ% ~;:F>v*rل XI^HZ3b 4 |8G?qw5TKb]T:\\0G&lzV_1E___(RGWCm'^q%fv8C ."(lqVCH蠟у1] On |]u> Mޛ,X;Fa>K".WLA"3:(ʛDÍddZGղ+I!by(j<?vkeO 4B4ŲKonMYemk"FZ?^^~_cnj}|u m=@@&e`$ kdR3N?񉳧{]^xX}@MeBo]$< Z 7 Qh7!ɗkYHnNҼ Qtv ,c^gpEZϒ7NX7̾S*2J^;>AÜM;<'PD̗"j!A:R,$Gi!G lCcez>r4RNꔯ/srKtr e/W9ՙ`=+2dz뀚7U+_xeA nըK-qjǽp`;et&{`vIb0B\JO/XI8ߝzÅIqF;L`1<Ԣ-bHD7.F} @uYRO[cze:;[;TO^/b|J^;+GZD0OqP{p:aQbzaf7 ;A6<5- G:>3{ۏ'oz%Ί-5xc=j̆ d΄KQ fu$#+wńEtI[E)lou5if&$Z˫xb,-U ~$$Սd5a!~:9CbjJQĄ`>p3b!?%8+2t!ao. "\yx"fy+ɚ7 Kn,׳HcH,F4z& >T&G%=&Z+2rH{ gb2e-h-|)A2~iC:^Q4o<5/E-Ջ RHw@d34^(U}XޮGw!HKtF*ZUl0zI 4q: WBf9ƲI0E <0.a%K X6iv7rl8R2Y$nvz)*IUɢK-^ 7J.|SO[ n9~fUhN ]9tUx틕|.⼇`Rֻs7$=$u.QLQc0o?bg >捣2B> ݖhmTtRLCDYZ&]tL:44S k'oP-M3"d8 ,;dQBAXVɅK!J%&L}qVW|}W;?*@`˰TȨ *aX .Ck S1oiX4 /{gX,L(Hwc?7oA(Jt6ʚ4q<g(AR୨B+i%%HJTbB% CWAY\"͂ 2rGUY!!iJ%i "`ە^OlOwCE; 9,g:"H DERd2M~`5ѵ"=؊sغd ^eGP},٭>sPSP=Y 77uv5Z 9HE Tp] FL98#r*rtn믉 8ҝ~`8B{v[WR<eb"NҐ4&{D6T݂џe>N+X^_4\n?¤:|F^򎈧0В,:3zǐQj9xPb3E)]A=6`l ?9Z翐 ١yęԧ$C͂SȀ>&QW dýO/^%CA?pkI|Z/vކ8*]X~<6.I7V*p\PTQBl$ST8&:‚|p#a "4a{ԘV+a Δ\ҊB\Y8{݌\pg$+s~:JPь],GBBu\zHzbzK!Q7$$3W&Sf|gk80sn܀ߓKQ :0.˰ [7U7.a1s4c,rizO% \GhfR!~\B'zǤO]Z3>m|3sUm~ߧ Ü˂ӛ3:Hhԇ=v2v־;4I컸C%!&DF4[\(xp"%u۱kZz? xzH.TdhN<9߈]F`kvVJ;im!}oQ}2FoS rL_盘:X,_yF4 3'7nHL>DdS32ߔ1 o}>^rZp2Q;w=,~T'_/{ac-Pjd(T7~˂-?; -*!)8& wn:$ {Vhr'?XPǀ7zU뷢TXv},AҴ~9=%ZoA)E1-)כFh4QwS(c^ik&T* h[OTc׽5.6}'?c_DT/]>R:<\B,w l{]~vu$w7Ϧ$g|xotG:[([c !} ՠnLUs~sȵEò kO56]稐Jysi|ԭ0X*e26!~TCbĉ~8⳵^p5Ht,mނCa6mFnj#jBVgF[{)gqz*a8PQàksT8M_kkW7_M_ߞ^MB<KZid-"VЪOK̹ch J\B|'?fC]f9& %,qQZOZh^60Ye Jʵ#F.@8Fh=ePRhвRB F0{1O,ߑ\%aò(=(5۾x98 p3f«,q|#2*f z7䇭 `aB*|-\O+_6$I=x^@7C)z`x,͛ctR.8;lh,lWToRC6Zu{*[tU-Û\WGoe9 Qק\zaCs|Z>3T ;$u' }4^2h75Sauά4ח/44agSHx| ɾ1Jaw9mckJJQnP2mtNȵ܎]Nu d;v /7k  /N},kZd^'$'/`_ۃE 63NJyD:bDՒ @; ە^ !g}STUѐSU''zdbQt"N(5npEYÏ* ? LЀ旟"y"5 :<_e>)c?x,wV!17ȭ7Ⴭ7Q$*Iim1\uȤa2dTײ$zb{F wXd|i̊Qi(n@Oh^ :T;:IU $xNIț}ȬUa~}<"ŵh q`zl;eM21U Tvuՠ6Wn0c sv5*^VoV#k6FVVM'4b Фݞ /ť6ϐ޾Oܾ@w1e "g(M*VE5 4v*g9>S6EyЦ1Xȥx uX1 `OFӾNƉ[%KoFe,+n|rlYiu, T7sd҅jiƕ9u9ośu u2I Ֆ/ߏzI:q ꠕ>V-iּ0QW`:YNۅw?߿&K~hM;;g{xn[{x-J˜ ƞ?Dۍ_şC}<)tb&6`9UB|Z0w9~Jd QV%fPбo.k.&<6|bְ9E@^ce/Q,#Z`}}d+ `F 3!(rz&FlySՌS2|3 uJ͠yf[8@T,f2{zAR4< 7ApC$֘o/EeKsY.E-L+k~^7M)1* _vmĞs߾3U0Iy}ZR6nztţPUn0OR=m#tj&k'ahg'šH(B1tZYӸ2ig-z̓uՁ7k1lJ餰{YnnMu [5L#2 3tkxh{p ДAOOvĮlW$EbuE~=g6&3W[UG!zG3 ҆Lམ򋂦jhKkz+h4P)>FPϼ;}鉀&'[bɞ֟ނiF<$1ڃ6:oB.ʤ͞rj9FYYvq>c6UAܶJDv #sꔁ;H/LrJ=On3 "B[v&˄%GՍcT Q>0"(SF cfxPv'npZ9bZ:[VS6B:;eY-0SHS^[5%-wOW'#@z+QfzT#S]̞0Nm7b  KZJա/`xs9y,< Y{BbDK(d;={ x:\J_݆9qLП* 0#ZqB0iPHֻv1-X3IU-i *('D49NGm./3FeI Mc :ר*!\߼cv$m6EX&n,!kE ÈdMy<']bRDe/ְ#bt&/y3=-JR^L`h'!5w/t,9%$f6rڠFOOJlTN{c}MXPoFs@8g& ~>sqz0΅I"Wر$FH:XՕ Tz*G=O&"bѶδ1=vEQ{k |}-66?g{$|g|7~{ X\ިV1L InK0@~T;vEdz0i5^b 8DcC =骣^nsmRFP\%.G%Uj:j``)ٵE"/nψmۖLhÖI_8'-THHUej QC3`xԒoio+ߚx˹ٗrl̵kcA CޙIm̳G:s4eþ~p6m:0Y+~gEഁ]ypG V+c)*eU1UOmE{)uӉoMTIBl7(.ҙgg\Of@%/ -B*N) CQ&bLH3G_]0oE?{ F&~Q 'lx"PAiV\k?>r'Oɴ4t'\j:"$g?tļ;YG9o66tE7F}.itJ]rڹnWdAS:""NLgòр4RښNȋ-i4Sa>9El@gCwŨsJ)'<WI1 Y[FFum8 έTUbn*%+% T}}a%f]Wah:z # Kj򘝢-OAc~2G";iQ滻sAK Wɴ6x{Ά; eI662yly!I#<5/QWtDR?ЏX[ֳ.MWIXWSkKӄI搤-bA4[#k.1肐DUSt2ax7<=c7sS7 V촥fݫJ, Vy^R4IrJ,vD mĨQfBRQq}n鬮v:&G`cKr1,M$UzdHZ*l9\ꍑ|htW_xl6ڐm=)f Y /k ^5EԹQ.K#!B4r~dtcz&%\)Yy:il#7W:MGk^di0CJBIxt8_ĩc 6\5#iAA(+0{ea =@WW}ƛeV(w$DNkr DE~1o"bi4t^ÆC3GݲBbo')vg)@fI.^f̅t-сUMIL>nE&3Q; zϻYK(}@Y]/o=D<ȣ5Z%醥u?~̗cr:f1D4Sx}ns:#I[Vէml[}8sm;AITsd/PD:1#TV^R[R`=ƾ!Y(}/U)dV"V3kN[K:Yqi+Z.QQPu;%:NѭTG j#j_m((~”|&g}V "6_PT=/=@h)fr|=XĄkC0m7I/I[U[7]Ƙ2%j ,Lz>' =5t('MLAC!o/NC/)q;7WjSH'$Sigݰ.FRy4b0֜(_;@\ҷ>Z{{(ZA񆵁[\./_]d/VUsfLp'Tzǔ2wА`Hu+ 9 *0ݟB5q RBTrbTB3dT| }/fSQ)2[<ӡtʟ0MPbdk<dΛ`8dy$XK.+c)VwZLOh_vxn^ ' e/+" $'NZ>r?U=dU@rV6bj(&2+!.3$ 4t3E,^rЕCPO ř+X\63KWMsx we9‘ ܱS [Ņ\M[$9;v<)1VHGG0L#RRqVش=#QkۇK[ `tSLWn&70U|4J6&}='iv /[LL?2X#Ttg-bR{ *>TK+:ثl ⠓;@L1a9_֘os"tҩCnRXnE~5:6u_R8qi~G n+x\Te4P\Oh.) A9N(.ttugg( Ao#Q e.QϤ`FZ.O`q/'ݶ!!ko@$_P&Ei^B>K{$i"V'E(#왖^qd"Mټgҡc,/Mwq8 B5*{?h CbB9dDrs?=8G!7("+t@_Fi'`)4+l[%N]Ǖ }|a4igozYP0ÛxmW[zj%17BHT#Lo(Rvja<]cE8Cj$M}_ ҝЫ i-H, gMTQ ~8$)d@WHa<~uXFBG"-Ku4~# 'P0&ZӇo_Ԟ@bZ2akNܿ¨WK*p^| kAv 2e^9:ש'm ޳ 6@iw'0q/.78Yư$g*oKekQ 4tHGAB`8Hq54"'Y{nDE 6/cTHXFaRV +-5#0⯐ Z ΄kDVY"U@_T`nE'}VU]saI+rܪqj=s-oIp,va/OgFsoq -Zm -_I f4ŗwf< U a=HC\\?@f_жIcpmRiJ^Ǭ av簯]-p)lpѢ`ͷ7` 6$9eUZͬN5T)ᤜNXJ"%2`HLy Kw^u z&[ߦϹP³>ϴJ_/"+ #vY/ܿ d4)8~&SLTKiǠ"YF;\U>TxN8lFt~\+ъ.pW5Nn(C|`KD7t 朾quߛ8yM"C0:fgtJͩbyT 6s2y5s6jT R#Z!sa`=}:ѣ|ycv ;2L; V{Y2#FG#OON:i |JuX9M*Nϭ.|\,Ջl1 d7xŴ.X<'W|| 6 nnhaMB}҆qxA[8Uh-<ˮ Eroɹ LFsj.2-T,;'"iҘ~gSBtc0-/gA0Xem]Ƈ<aQAđbY[eCM`N;#$[}El.?O"z.btp3T8U V O5Y03Dkd#޳8ZY"z#~/7 +rD$¨˿!•bh!'хPL 9hHyIIDѱyƮBC7"I0@ݒ9P͢s7cD;??B5wHw.;/jE@:1 q4:`%k5 "mj^y .8q棳{CxΣ#Gd0ڒ?HW#r+9DʽNlSw& ƏBYqύU2Cx1@+*--&ЀNx:(@;BH4fbX"L0OU|p#w }F&d`j#ڋbM-JeAʏ}VY"[yIyP‡]' ,+9ѾXoo+HA ۂZucA9Ux5~GR݋CcY¹x0VU8UA^ f\ԁ+r(aZ k$O#M)U*H-Tǩ*bZ? [$Iq79YB]>tD) &g #Z;]%E AT3hS}*2YGL+ѤDD@Tا80m-HkbDB#O)(o+Р~)q6 T gq]YθN:l| (14T 6E8$juOudo$Sa,\~Qނ _H _[a{)y@~D5龤z.Q4a9Kn^tp*贚WϻoKSW:hw{At- a5W{P27-ҷ]1!Vu?m%2=-dFr[E!,;víٳ.B4N`o7: ꧖T.̵j9ЂF4[P9\PzZ̨N@s:zÇ;Klq"J{ae06. %(}{vW -,[̑Ōa8qP(y‚:bR.)6urԶ1w:O ewLV\st:JJph1 /0q9н-Üb5L[|IJb{XKV(㙣%g+:(FNHuԺzчyδS^GY/: 0M3e+\J%6x^i"aA]&/XmKpY։хi~彏Pu4&%Dܳ>P3cg=#XW[#Br]M?+E, cǻ=59u<>vcd-'uļ$֎M:hu %(4#n reAwZcM5S@n8d g./~:dBt&^ Kq YFv[q"Hp*I4 81ak3P"h K=SS N(d<($褗stΰֆP¢ޫT x,E  mOW_JHpeӘ}e 5Bsf&yC2pjVbU0qu& g6p*#8}g>'R>G!m9LQ]>㣴Ϻ3K?Wt( gD^I]PT\K5$T+L,r`R =Lm6ԩF.!C"Ct걨YXV=h {g7'Li琹ԮFuD޺y+Dqp{Ehz) s(d"(߼眨@GӐZd6ikQ XL,=GRQ0ZA-  g #@cY^йi MZNVÎfLpbyq8jc̪%2,X|'PkW3= M " XzDz$ >/mD&lװfD֭+@ |8p WHkK9y7Ēef yƞWg)Ȏ%\ nuWCnHN祠!!(mOf7 %N*E 4MYyGe2[Z42fZªPSP )#b֛Y"e>P=^n] 5AfO y6@&idb֏@ttl=a?aga ԰? zaI ^4=~ÈI}|o+g[P7kreC?nv32õw(3|}}OwG؈,b%..w)@.uY:(܌F{zkpPXݞyWnP 1.gh40rGI׻!_Bه6hs &=طM5yF"=뼄87 'cIz$ۚ g5ىgd;+ N*_F1_Wve!oDiugjOBCmuB֦DO!Yjej*f\EQJPCѧjj}cqF+Y 8BqjUyxJ)0maonB |dmMb&74u|mUd4݈R]2O'2cޝͽD%}"33; F(Rt1~Agidm1Hg J;#xHQ 7F߽k:,qLė~~Z"}̏#+[;`)iAj#>oLG\=!Z ǀϹ(9;HٕΜO)Q)msU۾gNe' I#Y9ܞEËF]y߬q ec$v $?p+\f:8S^0)pE$d+89Phcɒ:_Ԡ)%nP}뛿Lb,hPܰϚaϓV_Se UDQT^!@ܗmpKGYU|?n<^ LtXu o[ O ~|yLF`yPֺL 4^T2OugxbܡsKe\)Loa/gqO_KO.J 9wY~sĵj,b z5C@4qxKLݲ6ŀ q A@0ףp+0(<9%r'` CNa(CNr>8Hr\ޒe v`i[ ?u ڦkWqJAF3l _dz:7ꫲz5M3͟?&wܟfo2P -uEcDz,Q>yr2=Za}mT|/؇蕗4;;᧯s*=Ku, Ivbǂ,+fpȁ !H"p[j@S)$H4h7"CNN'>(gH e胥z$E(BgHq8d4 څ4U5nTI7P'@8R+BE=:p05 zc@,t|=1qiD%iof՟­m'Y >*Qr ІiDN0 ؀=& 8d/WF%~+~挦 t vO#aIzfj(#>l 2Ⱥ(+8 'LLj ]L_0h@R'!Ĉ(9}_Ȇ:/Y'>؃wZzEQDJ5q`HhҘ%GzƒqƮbe~<|^3l쭲!bpsatXwz8&3vpl1k8T܂LoیjʅPeA,q 5OȔDČL #iRuXJVd>I,㺿ҳfFr%_Jndq3⽝ƒ=&%1QIkP>j`k?B't`qY]ޟ:^x"csfI}tv(~FWD:QCJ[wrU ZQ@+a޽ؑyztr/l ycrhmfXiSyei')J?ڐvy?)AvM ᐊ6奢,*޹z&fE%`ƭ 5k m2%^ns抣N4/۵jd.x[ʒP!=p \&&dƳY!$&By^Ǟ*@cMp_HWȅ̲p.R cp'ГqIR7;ϑinv6bu.H5ՅW. MUqL2R:]+^8uLhqsٺY0>ٛTWzFI][Rq6Xf #$ScZ*+%iw9;̷>e#q/}ɂэK\NthXI+{d̗"ezGubzTADr+~-Z%MTZ)OPĉlb ViC E‰ ]=7bBM?!#dLM)Mv|D c~OU5l'MaVC`\kkIP|o ^I/춏ʓ7fG/C(JtU9ԳYQ[N`. p`?| E .Z>F¨ru[H!,J*JuV"qD}!M~1STJ< C$/~Np ECh4kh1 rYh_b%*IXw Ua6}hEs˽T/7֭Z~j뗙eG<D_*]+@٤MgINe BM|jȝGXa2cM( r 4ea{Q\(}-݀&m]@>J3ƥ)VSk;U#r6e5W\L{I[G!?Ttb3]ۜԭyehBGrW0fMW3<}c3xWxNP;+_R(f$H&ӋzbP \0|W$/~8Մv6kHT47_Uf]-,Mm "59C%UjYö֡Ӹ]ֲ.3-saBa($UlP"2-KTzʕƿ nÌ?:BOPX9pW I1 )VSƑ<<>"c{c(yױO[UgP%mIG;x]nI {}A:u˅LZH6 #mi4j011AdoPdS1JφgNv=gJ^iVe*<|o[o@8kΪ'I!y,֦ eR¤F[D W OS--}Z-Ǡ9.$ ;o.:Y]"pIՙ~@m/v=šo--:eq=;^< VMZa AS]싪wFp ieo/6*B?;8y&%NI[g4$v8ב!C#JJ6(j\J'KdɌ5p|a "lsj|cgY$%ՠ(rAaq&a5Dݒ"|MUJX%ѶJ W8T]&ёe٤M'e&A5X6re0Ym0N|p 把a͊C[+c4` B5S%X 'Aq}0G%:~k<ui\8|5-^,FEEG!沏N5oSythcT+d =2@푣v. vV%e8\{̾`:bosdnӆ2nE .xa@U!{>MRŎ8 %jv-y1[<<$s?Jw@rd1E*@OH[Q~-CGE̅>ܑÇyj&Ei>SM)joY=:Pc~Q?K(="L#%״K𹴻h|FN[ Cwl%e0{S."STSpF74SrZ:Z}XIQX";vwF93`7η^^Lڨ3' Ph+hjcmZn,eɺE* $rE(xB$cDG2-<}}UPS.+-8)`0a#d>h2SՕpo#sUxnk~2wE?c i~soέF4 `fN|m}?gQQ~VυF?s煩n!5 oEg' 5. @;4,H؀L`훆Ϻ  w tCOeqsZ +wt0 . 4/WK'S>E 2#{ 89RB9Vv?t\lmdS࠸NY[ɽTZb*k;4tZ(43@lb:@d|7_|@%Ö ٥,0s$_ؓyC sEY ;.pTkUXϭ"5ZFT>RMlh!zI̙tG-/K:zبJ)8 X3k;7 1'\eQ~s\@C+ZUbg.*7%SQ Uoqbp-G0,,e}FDm[F{qؿwgHFߛw"߷~d]d5CHEޕF{ݹޚvQkݎ&rB?^@ zX4I\H@T CqiQr-2$>_Scq/6.L!1SL_;Xf= >~ c;FbR\Њ/Ƈ0|UZH"ى9I6 9ήF'HpӇٞwt}sx.QL)KjϱpfVI~4Z8ed]O=,)E`QA96Gh̳E&to6>DGS:Kr&}$;@Ira,ɵ_E3\P⤸hp`6T-ݬ ḞoR CCD%ka=:h$ V-GѦsW䠽 H rt,D.BZLΦV=\[΢,_@+c00pVp-ӂC,S1Ffc|`⻷pJ1)?[ҪEAhN|iQ8adž < QQhzkԍkEL!r{'A) i_ &|? \;y ?)8whfߥ{[j7&痃d- {+~5qkLQr\U̓_S"A$k8U1IN9Ϗny-+Dv^|xy-)i}z"_8d|P6Zvjauy5Ar 2޺;G]9u֨VCim9G;5LMxt񘣅ZoFNSlTFɭU!DZ"Rjd 3.:շ=u40PSdMu ./Fbܭdt1󜁸S(7||Gs| ~6H3KcNrNU;*aZN:O`ʠ%şj 'q26r[ *g6VGnQVqPa,- "Z?n\+@]5c5  !ˮ+io{T8.gEu/ۇGaoS Ci)&_"\IIPYz6Ӎe+ܲcI8PBm%rq>1-Ԟ6*֔hx,gN*+vܩc3 1oƇ=XCbk9JҗL?T[Ick -}5*`h΃BeSt`9@ W>tΨRӟy6spˉk}N@Ln-<%H%"<5]dܢƱKM[DP :d 2)|MR&?+y}z΀\\)X&I}6'rדմ];q3I43#U" ­$h7iW; NB !VC"B^elULTDO>7! <-x!a6* _XEle*eϋ04$̱mq}/2Fe% .e'Ck*v>8jxWtg>e: HV,As]JoEboیG{"-K$E`]+ޢ _Di{ вs>~lZ5뜃x&zd!q>vQ,y~GZ[[z7$Q mYB@>9TS  Rg|ڞ/T6&ǐ2yMS5Bpd$czři6{]REy=!?P" HׄgsH?.Vo9N$˻7N] u"-Oِ9&aⷮ7/*OhvnLQuk܌O.AԿa[׻1-bA]_M@1?QW臐Ŏa+)VšC<<uYzqH}a04S F{:-Jhyct/LAʛ]Pbiڟlmcc%bd ǮmZhS9W :n?11G>iLB܂ߤi ~G;+IX!3)P9AHSF<;7Zu,:n/Mo@"V\i$.W% e'([ Nik\s 'j팏WlN;U~( *!XhITqX2˿3Bݾq+ R)C"e lm眲᧟noUBIT?JmWyO}_?7[LOG?DQ᪤Z}riM.4X\cЋ Itg WϧQ' jɶ.FlݓˏNtrO ! M_TD'l T"ep8= ߢ"gqp%R/dq_pؼkREsKWn7~5ȅ]Ā>l;_eVO4㙎yJpJh/O&;3G)<ɚ*oqUefpD!ZnrO@i5"o?~ v8(GK)K#ո՜,J-|#9^2GP~:_4ol)&蹨<q̆H,<ߥgoy#kJ0KK:MOz %y]{1Ҫ3ڊw/QMQy:?:#jE\< Odl.IS=LG ~=I"Zaۄa)fh}b#-[Q@9QD2%zӐ+hXbK35z5:)H$JDyoa 8{ حLPPd4TlL*G%₻ SyR $85\3ȝ O5a3ꑺrI:#vo2m̙r#Կ?7ctp.wrB /Tm٤(x,o7j2Utc4zAB2rH4OɇS71$EXUkۺ+qfϟ3j{r0)#=SbϼF_%7/Eiw`J2AW_jtPتq U`}X.'n|؍؉Yo;舐Ɔh?)J=tF葊v&#OagaylIiUguT1=vXZ#os gF%I+fР ]-63j`7w{[V}xY{x9fG>Ghmy;Z=-YZ~H޵F=sg[T\NuvVsvFyE'BX}{q9{DDQs妝$HTrStVZoDY2e'+]h ===pG@rx=?H l-DF }eglFbMm Ŏ Ckd+mf8Y,ɘ)+3[%bW5 9XC o6,`Mz( }* +,@"h` /ƭ`L486ŕߑE1 _W:PĔ4y6 ]jJll01dd~(#Б7[Ar-ͭĵ ^t@ #XԈjSe ETY[,4zɅ!h._K|kյN)goI_701КU!+K⽩#0:>DddrR.W'Fx1;NZJ\<,,Yn!T0mor(ucd&ௌy8=LY1H5iಚ7ސ6sz+D=likˏH |M< !mFP`!Ț/T3A)Ύ z7V)oqWV"HPzBCE b{%O$a2pdKˏ gR{!+ߗ$Z݃X< ~p+/uB~$Cy^舎ش`ۿa}/G;6 H·}JP? j4V4zy6E pIH1ر-Ĭ-N0 r*19?.J8^#Sr*|KM7S=oک6{ḲbSYeen'QzuiO =3đo1J"V_5AL4/ A[ %&υs=9FaR|F V]L"ul7O}P(]fUo}Yg_mC,G{A:|. y˴B8,w 2b_{ t{4O9~I>n%몱ZB:\ cŽ3%b㖙t U=L@LwZƣ@T`X/m ]rX~`ٕM]uNaבrU?㷌̯8p*`[H*O8ZT$5ح_[DCZF(i­q^.6WF<7 Z$;Z#\QxGT7tZGR㲡ur7mؙ kBCcE(S$Z!o*RoRke_@;vZ [j @7`gTdkr#V۔CA?CQm9w#pSJA@P) (xtMFPA|X|Ы͏.8US~4e3FCq .7NWĴYU%\юZNCă`TWjbוL^x< 4F^(6;*{I:pLqJY&yL"X܄ %H5~D9ڪY-`]b DԃF(4q0ƣ븤5CMիόC8X<_uVžX;!AzO8JXբ̩U0F,.ex(7M[i˘*rWojYGuW ؏܇~>FcpְwƷ<(lU{r2R~nPe0-tY WA& '}//ϡa:4#J 1R=n HӼ7*Vt#7bA !R<;Vte*wbp%Q0ƽG!εsqi8^vÁR)\篓*0ރ妁#fWuG'obN +סGߗ%%Qzj QHiq~2BGnC|.i4IHqG5#ԍ1]͌0ficl$\Jʃf5S Z32Vj1yqB7n'F_RMgjI4B #͆"x9a E tYLng 9uwkNۿAT,u񥪗8# HN.d<=8J RuDX)P3Pc0a8LjRvSs/wS%hهmkGFtfWӫ N'y唛]-ϪᒄF}>aD @2s,?KZ8!Bd=:\ F[e );#<_aB:+zj1p}"9K;I!X{C{$huWv.avF { jEH1pC_]k>DͶmPkʗ8S=)V&5g+F]w#c/mgZh7~2iUPc;Ww2>)]fGn1{].?5(oOuzr*WjKH3=$6Ds$R8W᪓! krG\Urj4J(نڧP֍DYĞkauh0{RchhFEOXipwypIl,߰W0}`.v<vZtR#ܐ0&=nn`[؞b,hgۥ0NBѐj粰Zǯc6g9uㅅ",!<ա+ 7V_J%ޙ]qRcy&ͣ3 iq tXGM5:>멷SޯEPvhcaYPA~㶉utPcrr,yw3] )a;y:8P!ؔuu_)`OeDi>bIh}0"\e? y1Tg;oRjaʪM /_Ä%@rMdI΀20^SW)?^.)0G(JːiⱧM3/Ar ciT̘c+e8|CV~J48zz'ő/PnaRӁḡdoL(fԈջ8iQi gJv8 ѩ2]*?&[Eo4jո~S1SpfR8gh0'V547wF&mM(#h\m5pGSB UwCuF!v- |ùhnGc!ѱqae\0F=qPSJku샎P <UXdVh@-2WIpW7]\1A6x 3dDS}gNNT[ˣ9x 8 '` "?ourBZLв@ZzUkUu,uỎRޚ,: CS/ $OתgReegCȈJOLQEBSHt>j*ɁS[5,RS9P"Y[փ#uR<0Uf?o<`*>a4^~DJvOМP:'BMU׹r{_ZzY .`Y6>BՀsnW_7ET] _fX|ݲV:?s쪢₶?1UegǙ`< F䨚Z^D#TVc5 J 0('I;gGes- K@L5T󘰉f]-h9Zbչ1[ѭS=W:Y߭%\Qd"I<x\i[: :ǖ=hvֈ|Sx5uxًI #=p6+:Y.+#D! ]>vʤa]`ƞ mf% )   e,uT|?6q75o>_*#'hȤo/_ӱ<(H@;J[?\Mx-;5* _'}SyL'_r|͌<]$VL7MWk(Tq;V[J&Ȟw94<%)$:-+Qt:RAsSp~} U&tK52eL/)iB5J4A`xȩZO)EAUSsj`ù<$KdGAH*}]Μ}:xqh哶_X> TQlts-,ݟdQ=]H]#]"?;4$d m{Q)7 Fg5BKѮCqpsrZNA qq䱰z 5ç> }9b;IT2[b9hm}AHuTDLC^V=7` hHqKɇFD h-@.HIAm9,{@mYT_Œe3 a'.#8,}.AicAU< ߤ&e(ݯS$M5R'621V0k=!UmLf5Rl q6)kxu~IG8Cn~Ol7( pp/ O]q٦_پǽvF "DJj%"eS3$Лѯl^F^B7VTh7UިmKs2-6qaLf=*i6ô · b!tx}DbRUyҀ؞Cr8Am红ce amjGi7G~)@~e6O9`}0٬K}-ם>tWYwsȁ?Eèu,1Ɠ-iTʿҝRu0ԃ2{)V΄TKg `7n2چ]Ҹ kg 2B%Y´֍A<Q!F3fM6R?b^LmDRo}XNoѻ\@Uum<:4:Tgy CԞKm@d')xK Ԃ2m6B!z.`챦ЏYZK~6hs|&]b6 OhIZoQ&m5a=Ga@Kn]l.!`Q]c J?M4%uxCOG),Ņ]&+RҎQTb|WY2VZ*K}qS=4Ps 2֌9Ȱ3HO>2X~N݌76;ܱ"XTV}pim,-$H.1ںN&iܽݱI+1${+@-*0+ǟV [:#IWަ>i9;-CpL 4o#ahWVYK;z?hYK S(jE#`7B)%2Dߤ](}83V )XY"$y.S vOud=r4x{9UwtB~,Šb h~ܖgRZG~2 okN /XI)SC}07lo1[ up~ID/ۮ~rxQu?yBb*UՕj>-@Pm4%EҀ'gNq}WXm\;3{g{ 0d-v}- 4Wu+F 3r%8~r` ;FD|άOF/eF(mˈbMZk7 g[c 4l9d6anXpI%USaSkAo!D*퇧7]'[%yĒ\.(#%MnT5 M|݀y:elA#ڎ,,gU?Z?mcUR;~eGt93uy#v mxM,뚈7#L$Ԕٿv pƫlȀT|)$PmT Dd! ۰/U%ܨ%伟IF 8لmޅnO,mlYx*!A% t ._ȁ1?&'J7Ylel~ǐ ͷC~qWq^pR4]Vz2hG 7wk(;nr\,p5c$mqasi_2qձ`k ^ń/P{%NhN[[Az"~Bfr%`WBYO E n33X?d̖ JV8R"?,4EM  [qtTsfNakTahF->aev(Mv-L;tdA?mH@1q|>Bf|;Iq7?b0-uчd\EUT G3PyY,b sEAJ߭$WJCz!,Qj90YN\mv\ʸ4 xL'(ˌK у‡ RQ{sMop^Y>yOWCɻ//GhT!'.d@=% Mqʠڇ >겉$ nwkpV,S7'K N:? 4'%2j*ޖHaYjY-DL>q5,qZ6= ϟR"=0s\'cg'ޞ@^=Z cxls?z7lpEğ9k35Ae1ԑ4tCP{Z8ӒhX\_6֏/AhQS5N}hN4 a. z e醖g^/ca2<th돋pU2ͻ yQ[e;Su6! ~V~T7y8*f;w XQ=u>e&WuϚE)Wbt)u4gvQ]'apg*/Mr3 8$lIeϖwT_In%.'Fu䠄 cuX=u ,VJK4e}̑zXz˓WXs6}4&r}˯jv ?؏[$\i<z4\Z_@50Eax5ܣ?dtbl SJЧcM<>_(_3BΗ+JVk4 k9 W\6B1Uk2nJi*F#Ͽus{gF";+ 360ཟ!;s tSxշ tۏ 5rKB>:!o8y QwI+WOaPY}w,]ة_4!D.b#l2%=0>.;Eb^8"\;n}PV }]OZ-~To8AA%u(0%oIjkJ:9ݛSNæq@Mp{KF)Ydx2H )Ɛ$WhGOGvTV6 xLUZ YBA𺁴Cƿdr"thz Ȋ8mHlq;(jXVz J~I z'd #Eļk1|=Z[çO%ʽ'vm<rm@l˨ݦyPɩWlXsڸ%gϸ.'FSUv,E.LFz.Οѧ/g#{6eYdA DmӊGd[}?{Yr.bj?Էe! Om>꽓XkB- (xu É&,Z{bՐ=OIƀ2{E,J@J[#)GYx ǃ Fe|U$,؆woK8V`idA }M,T{?ESc/Ia~Ue2&7De<Ŗ*W3m5As3EUrnNbMKKԱ1Y,ƿ E3~C/0jݕIzMgt™ƅ]ކ-QӃMs)[~ ^ӕWrG?KTCGQ譙n*m:ZfG6:%">J8bHT!/RH>2 I'ٸL9|M3~}OR=-$SR陼*ks9tVXSs)4` Cŝ TY; J A#+Zk$_)b<6&qOoT+3 >vLDSґW3xJgE"tT/SlYVX;| [j#'3I,Y%'q q)[8va3퐃hox$Q =g_Ւ5Fl;Pʮܖ:댹 ΦI$dAIOU.XſWķ>==w8nO{p9(/z182$XJR >hg P%]BA |3qTvD) [@M ֟nԗvT8٠oNN™﷉h &ݞ4e/Z8e/@A&ih\ּF?)#2(\x5%ŶRD nBUUz-'\$%6w^8j{F&Ir@l+nG{m: NǃH۽YFNtdP 0]/)맓dK'UUC"4:~0E?Pq "̡;?)D)c`MAY3xU "~ )*BUM5N0<E\łMOc PvLUH8/F G?꭯! f^96Q[ƒ_^݆ 9)w+JC`4 LBq_W"wo}b0XeCM5P"rzkÿ# ״&nS[}K9ىjƜ^k)%MK .vh0}P0=֚4> 8m5o*LZs%k{D,B"-ﲗE:HUc߫z Z9Z~?>E0SNSX|KUj.tġ¶ Ypy0;i--M`'FRgM2*|8{3ãag7e@M(U (muȺĥag)4tp|YYm 8Z^#Mx(3:GDǨ^(il]Rɒ~R,u Nq=I˥м=Bzӗ"&Wa#|R'ƹ4R`E k|0"LGpCƱIJɒW(3Dʑvz26V4rdPlʪ9@ie RbAҥk$@TBRڒ]U`BR稯֪{>BX&<\@,x/.==Hf=$DQܩad䨔YWHDWEWGcd !(*Q3ܺ ,gN">(I835{Tp6݊6qcb, rU(qy4~$EI f v6$wF#|\lECJpn?a/Y22g4dƄZ%q#0K_̕W<5))Kֿ.:/ŭӋmhsZ(5.8Z`&혖h`+bULڵ?rz@M]8 p!s/,8~ټ:DԀQhZgh~HDԚCmeDĒ4E99wςM7hY~ JTA~hJC-H;e6{(}([V۪{ߊ)Vw"Z=+WSr5J tOԙKd:rBó_AD7l!BltI| yRk!}skibq4鐹(TwawpuCjl}Aeh.8L L"ȇиLфn(93QI͕QҦg|MYm~-J&kgJaSr4]6TVP6OvdsN@r9\f0_<'4|d 6(I qF8k_YM˔ubXng4SCUn?ʡOMѳt-Y{Q0jF@@eXxZgU rĵ]