libtiff5-32bit-4.0.9-lp150.4.9.1 4>$  Ap\/=„^ "l !T$f+#D$!_^`w oyF2!漆^&dc%ٺwߍŧg= 8WwGc(EMڄy8T UT^ m4k>mvE{ YpUDR8aXwh;}`Zs0#KI߹&MGZqZ }9J{-iJ9ǁ,[4b7039e6596728a95f1fd03b2ebf05f89db9d71798b03ae36c19c4b4e2564bf66987464bafca54f8c483eb70420cf42c0686d82eo(\/=„ ߡ=?q_p lj2ѠǁSaYyxcMGo.Kt?S/u?Cu ,&s&=N5Iw[ۂcu7fl._3칓,X1)5+hNdі%;~(E5#vIvCDͤo/`U݈,/ )AZHE" 2e%׃鸺 ~˨4 R߶gIF'~@>pAL?<d # X /8= Vg    ` @(8=9=: 6=>BGHIXY(ZT[X\`]p^bcxde f lu$v4w\xly|8Clibtiff5-32bit4.0.9lp150.4.9.1The Tiff Library (with JPEG and compression support)This package includes the tiff libraries. To link a program with libtiff, you will have to add -ljpeg and -lz to include the necessary libjpeg and libz in the linking process.[Ccloud117openSUSE Leap 15.0openSUSEHPNDhttp://bugs.opensuse.orgSystem/Librarieshttp://www.simplesystems.org/libtiff/linuxx86_64/sbin/ldconfig%[C[C[C[C678de798201c4925a1b15f3e12d3c146b3cd45651254b0ee31b3c8cebd6c9015986814c3095ba7232cc1ebd24e07aec19710a4fdd3a7d908e5e6a6276b82251clibtiff.so.5.3.0libtiffxx.so.5.3.0rootrootrootrootrootrootrootroottiff-4.0.9-lp150.4.9.1.src.rpmlibtiff-32bitlibtiff.so.5libtiff5-32bitlibtiff5-32bit(x86-32)libtiffxx.so.5@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libjbig.so.2libjpeg.so.8libjpeg.so.8(LIBJPEG_8.0)liblzma.so.5liblzma.so.5(XZ_5.0)libm.so.6libm.so.6(GLIBC_2.0)libstdc++.so.6libstdc++.so.6(CXXABI_1.3.9)libstdc++.so.6(GLIBCXX_3.4)libstdc++.so.6(GLIBCXX_3.4.9)libtiff.so.5libz.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1[k@[k@[$@[t[{@[)[)Z@ZZ ZZ;@Z@YI@XۡX@Xx@XWXWX=mWPetr Gajdos Petr Gajdos pgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.commvetter@suse.commvetter@suse.comdimstar@opensuse.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comjengelh@inai.deidonmez@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comkstreitova@suse.comp.drouand@gmail.comkstreitova@suse.compgajdos@suse.compgajdos@suse.commeissner@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comidonmez@suse.compgajdos@suse.compgajdos@suse.commeissner@suse.compgajdos@suse.combrian@aljex.comidonmez@suse.comi@marguerite.sui@marguerite.sucfarrell@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcoolo@suse.comcrrodriguez@opensuse.orgpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czpgajdos@suse.czjengelh@medozas.depgajdos@suse.cznadvornik@suse.cz- security update * CVE-2018-18661 [bsc#1113672] + tiff-CVE-2018-18661.patch * CVE-2018-18557 [bsc#1113094] + tiff-CVE-2018-18557.patch * CVE-2018-12900 [bsc#1099257] + tiff-CVE-2018-12900.patch- asan_build: build ASAN included - debug_build: build more suitable for debugging- security update * CVE-2018-17100 [bsc#1108637] + tiff-CVE-2018-17100.patch * CVE-2018-17101 [bsc#1108627] + tiff-CVE-2018-17101.patch * CVE-2018-17795 [bsc#1110358] % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to tiff-CVE-2017-9935,CVE-2018-17795.patch * CVE-2018-16335 [bsc#1106853] % tiff-CVE-2017-11613.patch renamed to tiff-CVE-2017-11613,CVE-2018-16335,15209.patch - add a possibility to build with ASAN- security update * CVE-2018-10779 [bsc#1092480] + tiff-CVE-2018-10779.patch- security update * CVE-2018-8905 [bsc#1086408] + tiff-CVE-2018-8905.patch- security update * CVE-2017-11613 [bsc#1082332] + tiff-CVE-2017-11613.patch- security update * CVE-2018-7456 [bsc#1082825] + tiff-CVE-2018-7456.patch- security update * CVE-2017-18013 [bsc#1074317] + tiff-CVE-2017-18013.patch- security update * CVE-2018-10963 [bsc#1092949] + tiff-CVE-2018-10963.patch- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch Fix uncontrolled resource consumption in TIFFSetDirectory- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch Fix Heap-based buffer overflow in t2p_write_pdf- Fix check section: + Make sure to get back to the right directory after chdir to 'tools', or we can't run the 2nd test suite. + Fix typo: the tests are located in a directory called 'test', not 'tests'.- Upgrade to upstream release 4.0.9 * Changes in the software configuration: + test/Makefile.am: Add some tests for tiff2bw. + .appveyor.yml, .travis.yml, build/travis-ci: apply patches 0001-ci-Travis-script-improvements.patch and 0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh + .travis.yml, build/travis-ci: new files from 0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch by Roger Leigh. This patch adds support for the Travis-CI service. + .appveyor.yml: new file from 0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to mailing list on 2017-06-08) This patch adds a .appveyor.yml file to the top-level. This allows one to opt in to having a branch built on Windows with Cygwin, MinGW and MSVC automatically when a branch is pushed to GitHub, GitLab, BitBucket or any other supported git hosting service. + CMakeLists.txt, test/CMakeLists.txt, test/TiffTestCommon.cmake: apply patch 0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from Roger Leigh. This patch makes the CMake build system support running the tests with MinGW or Cygwin. + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff: new files to test old-style LZW decompression + test/common.sh, Makefile.am, CMakeList.txt: updated with above + test/Makefile.am: add missing reference to images/quad-lzw-compat.tiff to fix "make distcheck". Patch by Roger Leigh + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS and use /MDd runtime in debug mode. * Changes in libtiff: + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844 + libtiff/tif_getimage.c: initYCbCrConversion(): stricter validation for refBlackWhite coefficients values. To avoid invalid float->int32 conversion (when refBlackWhite[0] == 2147483648.f) Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907 + libtiff/tif_dirinfo.c, tif_dirread.c: add _TIFFCheckFieldIsValidForCodec(), and use it in TIFFReadDirectory() so as to ignore fields whose tag is a codec-specified tag but this codec is not enabled. This avoids TIFFGetField() to behave differently depending on whether the codec is enabled or not, and thus can avoid stack based buffer overflows in a number of TIFF utilities such as tiffsplit, tiffcmp, thumbnail, etc. Patch derived from 0063-Handle-properly-CODEC-specific-tags.patch (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël Hertzog. Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580 http://bugzilla.maptools.org/show_bug.cgi?id=2693 http://bugzilla.maptools.org/show_bug.cgi?id=2625 (CVE-2016-10095, bsc#1017690) http://bugzilla.maptools.org/show_bug.cgi?id=2564 (CVE-2015-7554, bsc#960341) http://bugzilla.maptools.org/show_bug.cgi?id=2561 (CVE-2016-5318, bsc#983436) http://bugzilla.maptools.org/show_bug.cgi?id=2499 (CVE-2014-8128, bsc#969783) http://bugzilla.maptools.org/show_bug.cgi?id=2441 http://bugzilla.maptools.org/show_bug.cgi?id=2433 + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is defined, do not do the #ifdef TIFFSwabXXX checks. Make it easier for GDAL to rename the symbols of its internal libtiff copy. + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in ChopUpSingleUncompressedStrip() regarding update of newly single-strip uncompressed files whose bytecount is 0. Before the change of 2016-12-03, the condition bytecount==0 used to trigger an early exit/disabling of strip chop. Re-introduce that in update mode. Otherwise this cause later incorrect setting for the value of StripByCounts/StripOffsets. (https://trac.osgeo.org/gdal/ticket/6924) + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the number of items read in StripOffsets/StripByteCounts tags to the number of strips to avoid excessive memory allocation. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215 + libtiff/tif_getimage.c: avoid many (harmless) unsigned int overflows. + libtiff/tif_fax3.c: avoid unsigned int overflow in Fax3Encode2DRow(). Could potentially be a bug with huge rows. + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on tiled images. + libtiff/tif_dirread.c: avoid unsigned int overflow in EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is too short. + libtiff/tif_predict.c: decorate legitimate functions where unsigned int overflow occur with TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW + libtiff/tif_dirread.c: avoid unsigned int overflow in EstimateStripByteCounts() + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW macro to disable CLang warnings raised by - fsanitize=undefined,unsigned-integer-overflow + libtiff/tif_jpeg.c: add anti-denial of service measure to avoid excessive CPU consumption on progressive JPEGs with a huge number of scans. See http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf Note: only affects libtiff since 2014-12-29 where support of non-baseline JPEG was added. + libtiff/tif_jpeg.c: error out at decoding time if anticipated libjpeg memory allocation is above 100 MB. libjpeg in case of multiple scans, which is allowed even in baseline JPEG, if components are spread over several scans and not interleavedin a single one, needs to allocate memory (or backing store) for the whole strip/tile. See http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf This limitation may be overriden by setting the LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or recompiling libtiff with a custom value of TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro. + libtiff/tif_jbig.c: fix memory leak in error code path of JBIGDecode() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706 (CVE-2017-9936, bsc#1046073) + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that a double value can fit in a float before casting. + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c, libtiff/tif_read.c: make TIFFReadScanline() works in CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple scans. Also make configurable through a LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the maximum number of scans allowed. Defaults to 100. + libtiff/tif_read.c: TIFFFillTile(): add limitation to the number of bytes read in case td_stripbytecount[strip] is bigger than reasonable, so as to avoid excessive memory allocation (similarly to what was done for TIFFFileStrip() on 2017-05-10) + libtiff/tif_getimage.c: use _TIFFReadEncodedStripAndAllocBuffer(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2708 and https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433 + libtiff/tif_read.c, tiffiop.h: add a _TIFFReadEncodedStripAndAllocBuffer() function, variant of TIFFReadEncodedStrip() that allocates the decoded buffer only after a first successful TIFFFillStrip(). This avoids excessive memory allocation on corrupted files. + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX() functions associated with LONG8/SLONG8 data type, replace assertion that the file is BigTIFF, by a non-fatal error. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712 + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to tif_rawdataloaded when it is set. Similarly to TIFFStartStrip(). This issue was revealed by the change of 2017-06-30 in TIFFFileTile(), limiting the number of bytes read. But it could probably have been hit too in CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454 + libtiff/tif_error.c, tif_warning.c: correctly use va_list when both an old-style and new-style warning/error handlers are installed. Patch by Paavo Helde (sent on the mailing list) + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470 + libtiff/tif_read.c, tiffiop.h: add a _TIFFReadEncodedTileAndAllocBuffer() and _TIFFReadTileAndAllocBuffer() variants of TIFFReadEncodedTile() and TIFFReadTile() that allocates the decoded buffer only after a first successful TIFFFillTile(). This avoids excessive memory allocation on corrupted files. + libtiff/tif_pixarlog.c: avoid excessive memory allocation on decoding when RowsPerStrip tag is not defined (and thus td_rowsperstrip == UINT_MAX) Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554 + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of old-style LZW compressed files. + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte LZW strips. Crashing issue only on memory mapped files, where the strip offset is the last byte of the file, and the file size is a multiple of one page size on the CPU architecture (typically 4096) + libtiff/tif_dir.c: avoid potential null pointer dereference in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag instance. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713 + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw" mode on PlanarConfig=Contig input images. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2715 + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile(). Complementary fix for http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the isMapped() case, so as to avoid excessive memory allocation when we need a temporary buffer but the file is truncated. + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the arrays that hold StripOffsets/StripByteCounts, when they are smaller than the expected number of striles, up to 1 million striles, and error out beyond. Can be tweaked by setting the environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT. This partially goes against a change added on 2002-12-17 to accept those arrays of wrong sizes, but is needed to avoid denial of services. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350 + libtiff/tif_read.c: add protection against excessive memory allocation attempts in TIFFReadDirEntryArray() on short files. Effective for mmap'ed case. And non-mmap'ed case, but restricted to 64bit builds. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2675 + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory allocation when RowsPerStrip tag is missing. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683 + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate(): properly break from loops on error when stoponerr is set, instead of going on iterating on row based loop. + libtiff/tif_getimage.c: fix fromskew computation when to-be-skipped pixel number is not a multiple of the horizontal subsampling, and also in some other cases. Impact putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile, putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and putcontig8bitYCbCr12tile Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2637 and https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691 + libtiff/tif_luv.c: further reduce memory requirements for temporary buffer when RowsPerStrip >= image_length in LogLuvInitState() and LogL16InitState(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700 + libtiff/tif_dirwrite.c: replace assertion related to not finding the SubIFD tag by runtime check (in TIFFWriteDirectorySec()) Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2727 + libtiff/tif_dirwrite.c: replace assertion to tag value not fitting on uint32 when selecting the value of SubIFD tag by runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2728 + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG compressed file if the codestream height is larger than the truncated height of the strip. Emit a warning in this situation since this is non compliant. + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a _TIFFSeekoK() function that checks if the offset is not bigger than INT64_MAX, so as to avoid a -1 error return code of TIFFSeekFile() to match a required seek to UINT64_MAX/-1. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726 + libtiff/tif_dirread.c: add NULL check to avoid likely false positive null-pointer dereference warning by CLang Static Analyzer. + libtiff/libtiff.def: add TIFFReadRGBAStripExt and TIFFReadRGBATileExt Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2735 + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo 1.5.2 that honours max_memory_to_use > 0. Cf https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162 + libtiff/tif_getimage.c: avoid floating point division by zero in initCIELabConversion() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733 * Changes in the tools: + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw" mode on PlanarConfig=Contig input images. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2715 + tools/tiffset.c: fix setting a single value for the ExtraSamples tag (and other tags with variable number of values). So 'tiffset -s ExtraSamples 1 X'. This only worked when setting 2 or more values, but not just one. + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as the client data. This client data is not used at all at the moment, but it makes the most sense. Issue that the value of client_data.fd was passed where a pointer is expected. + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible arithmetic overflow in bounds checking code and eliminate comparison between signed and unsigned type. + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw program. This is in response to the report associated with CVE-2017-16232, bsc#1069213 but does not solve the extremely high memory usage with the associated POC file.- Upgrade to upstream release 4.0.8 * libtiff/tif_getimage.c, libtiff/tif_open.c + add parenthesis to fix cppcheck clarifyCalculation warnings * libtiff/tif_predict.c, libtiff/tif_print.c + fix printf unsigned vs signed formatting (cppcheck invalidPrintfArgType_uint warnings) * libtiff/tif_read.c, libtiff/tiffiop.h + fix uint32 overflow in TIFFReadEncodedStrip() that caused an integer division by zero. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596 * libtiff/tif_pixarlog.c, libtiff/tif_luv.c + fix heap-based buffer overflow on generation of PixarLog / LUV compressed files, with ColorMap, TransferFunction attached and nasty plays with bitspersample. The fix for LUV has not been tested, but suffers from the same kind of issue of PixarLog. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604 * libtiff/tif_strip.c + revert the change in TIFFNumberOfStrips() done for http://bugzilla.maptools.org/show_bug.cgi?id=2587 / CVE-2016-9273 since the above change is a better fix that makes it unnecessary. * libtiff/tif_dirread.c + modify ChopUpSingleUncompressedStrip() to instanciate compute ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip), instead of a logic based on the total size of data. Which is faulty is the total size of data is not sufficient to fill the whole image, and thus results in reading outside of the StripByCounts/StripOffsets arrays when using TIFFReadScanline(). Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608. * libtiff/tif_ojpeg.c + make OJPEGDecode() early exit in case of failure in OJPEGPreDecode(). This will avoid a divide by zero, and potential other issues. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611 * libtiff/tif_write.c + fix misleading indentation as warned by GCC. * libtiff/tif_fax3.h + revert change done on 2016-01-09 that made Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. It happens that the Hylafax software uses the tables that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable, TIFFFaxBlackTable), although they are not in a public libtiff header. Raised by Lee Howard. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636 * libtiff/tiffio.h, libtiff/tif_getimage.c + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants of the functions without ext, with an extra argument to control the stop_on_error behaviour. * libtiff/tif_getimage.c + fix potential memory leaks in error code path of TIFFRGBAImageBegin(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627 * libtiff/tif_jpeg.c + increase libjpeg max memory usable to 10 MB instead of libjpeg 1MB default. This helps when creating files with "big" tile, without using libjpeg temporary files. Related to https://trac.osgeo.org/gdal/ticket/6757 * libtiff/tif_jpeg.c + avoid integer division by zero in JPEGSetupEncode() when horizontal or vertical sampling is set to 0. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653, bsc#1033127, CVE-2017-7595 * libtiff/tif_dirwrite.c + in TIFFWriteDirectoryTagCheckedRational, replace assertion by runtime check to error out if passed value is strictly negative. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535, bsc#1038438, CVE-2016-10371 * libtiff/tif_dirread.c + avoid division by floating point 0 in TIFFReadDirEntryCheckedRational() and TIFFReadDirEntryCheckedSrational(), and return 0 in that case (instead of infinity as before presumably) Apparently some sanitizers do not like those divisions by zero. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644, bsc#1033118, CVE-2017-7598 * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c + implement various clampings of double to other data types to avoid undefined behaviour if the output range isn't big enough to hold the input value. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643 http://bugzilla.maptools.org/show_bug.cgi?id=2642 http://bugzilla.maptools.org/show_bug.cgi?id=2646 http://bugzilla.maptools.org/show_bug.cgi?id=2647, bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597, bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600, * libtiff/tif_jpeg.c + validate BitsPerSample in JPEGSetupEncode() to avoid undefined behaviour caused by invalid shift exponent. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648, bsc#1033111, CVE-2017-7601 * libtiff/tif_read.c + avoid potential undefined behaviour on signed integer addition in TIFFReadRawStrip1() in isMapped() case. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650, bsc#1033109, CVE-2017-7602 * libtiff/tif_getimage.c + add explicit uint32 cast in putagreytile to avoid UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658, bsc#1033131, CVE-2017-7592 * libtiff/tif_read.c + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize tif_rawdata. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651, bsc#1033129, CVE-2017-7593 * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c + add _TIFFcalloc() * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c + return 0 in Encode functions instead of -1 when TIFFFlushData1() fails. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130 * libtiff/tif_ojpeg.c + fix leak in OJPEGReadHeaderInfoSecTablesQTable, OJPEGReadHeaderInfoSecTablesDcTable and OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659, bsc#1033128, CVE-2017-7594 * libtiff/tif_jpeg.c + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling tag is not explicitly present. This helps a bit to reduce the I/O amount when the tag is present (especially on cloud hosted files). * libtiff/tif_lzw.c + in LZWPostEncode(), increase, if necessary, the code bit-width after flushing the remaining code and before emitting the EOI code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982 * libtiff/tif_pixarlog.c + fix memory leak in error code path of PixarLogSetupDecode(). Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665 * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c + fix GCC 7 -Wimplicit-fallthrough warnings. * libtiff/tif_dirread.c + fix memory leak in non DEFER_STRILE_LOAD mode (ie default) when there is both a StripOffsets and TileOffsets tag, or a StripByteCounts and TileByteCounts Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689, bsc#1042805, CVE-2017-9403) * libtiff/tif_ojpeg.c + fix potential memory leak in OJPEGReadHeaderInfoSecTablesQTable, OJPEGReadHeaderInfoSecTablesDcTable and OJPEGReadHeaderInfoSecTablesAcTable Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670 * libtiff/tif_fax3.c + avoid crash in Fax3Close() on empty file. Patch by Alan Coopersmith + complement by myself. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673 * libtiff/tif_read.c + TIFFFillStrip(): add limitation to the number of bytes read in case td_stripbytecount[strip] is bigger than reasonable, so as to avoid excessive memory allocation. * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c + fix memory leak when the underlying codec (ZIP, PixarLog) succeeds its setupdecode() method, but PredictorSetup fails. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds and non-mapped cases. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode. Should especially occur on 32 bit platforms. * libtiff/tif_read.c + TIFFFillStripPartial() + avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with tif_rawdataloaded when calling TIFFStartStrip() or TIFFFillStripPartial(). This avoids reading beyond tif_rawdata when bytecount > tif_rawdatasize. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545. Credit to OSS-Fuzz * libtiff/tif_color.c + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533 Credit to OSS-Fuzz * libtiff/tif_pixarlog.c, tif_luv.c + avoid potential int32 overflows in multiply_ms() and add_ms(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558 Credit to OSS-Fuzz * libtiff/tif_packbits.c + fix out-of-buffer read in PackBitsDecode() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563 Credit to OSS-Fuzz * libtiff/tif_luv.c + LogL16InitState(): avoid excessive memory allocation when RowsPerStrip tag is missing. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_lzw.c + update dec_bitsleft at beginning of LZWDecode(), and update tif_rawcc at end of LZWDecode(). This is needed to properly work with the latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. * libtiff/tif_pixarlog.c + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc with avail_in at beginning and end of function, similarly to what is done in LZWDecode(). Likely needed so that it works properly with latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. But untested... * libtiff/tif_getimage.c + initYCbCrConversion(): add basic validation of luma and refBlackWhite coefficients (just check they are not NaN for now), to avoid potential float to int overflows. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663 Credit to OSS Fuzz * libtiff/tif_read.c + _TIFFVSetField(): fix outside range cast of double to float. Credit to Google Autofuzz project * libtiff/tif_getimage.c + initYCbCrConversion(): check luma[1] is not zero to avoid division by zero. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665 Credit to OSS Fuzz * libtiff/tif_read.c + _TIFFVSetField(): fix outside range cast of double to float. Credit to Google Autofuzz project * libtiff/tif_getimage.c + initYCbCrConversion(): check luma[1] is not zero to avoid division by zero. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665 Credit to OSS Fuzz * libtiff/tif_getimage.c + initYCbCrConversion(): stricter validation for refBlackWhite coefficients values. To avoid invalid float->int32 conversion. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718 Credit to OSS Fuzz * tools/fax2tiff.c (main) + Applied patch by Joerg Ahrens to fix passing client data for Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for file I/O. Patch was provided via email on November 20, 2016. * tools/tiffcp.c + avoid uint32 underflow in cpDecodedStrips that can cause various issues, such as buffer overflows in the library. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598 * tools/tiffcrop.c + fix readContigStripsIntoBuffer() in -i (ignore) mode so that the output buffer is correctly incremented to avoid write outside bounds. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620 * tools/tiffcrop.c + add 3 extra bytes at end of strip buffer in readSeparateStripsIntoBuffer() to avoid read outside of heap allocated buffer. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621 * tools/tiffcrop.c + fix integer division by zero when BitsPerSample is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619 * tools/tiffinfo.c + fix null pointer dereference in -r mode when the image has no StripByteCount tag. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594 * tools/tiffcp.c + avoid potential division by zero is BitsPerSamples tag is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597 * tools/tif_dir.c + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit the return number of inks to SamplesPerPixel, so that code that parses ink names doesn't go past the end of the buffer. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599 * tools/tiffcp.c + avoid potential division by zero is BitsPerSamples tag is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607 * tools/tiffcp.c + fix uint32 underflow/overflow that can cause heap-based buffer overflow. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610 * tools/tiffcp.c + replace assert( (bps % 8) == 0 ) by a non assert check. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605 * tools/tiff2ps.c + fix 2 heap-based buffer overflows (in PSDataBW and PSDataColorContig). Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and http://bugzilla.maptools.org/show_bug.cgi?id=2634. * tools/tiff2pdf.c + prevent heap-based buffer overflow in -j mode on a paletted image. Note: this fix errors out before the overflow happens. There could probably be a better fix. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635 * tools/tiff2pdf.c + fix wrong usage of memcpy() that can trigger unspecified behaviour. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638 * tools/tiff2pdf.c + avoid potential invalid memory read in t2p_writeproc. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639 * tools/tiff2pdf.c + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640 * tools/tiffcrop.c + remove extraneous TIFFClose() in error code path, that caused double free. Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535 * tools/tiffcp.c + error out cleanly in cpContig2SeparateByRow and cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap based overflow. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and http://bugzilla.maptools.org/show_bug.cgi?id=2657 * tools/raw2tiff.c + avoid integer division by zero. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631 * tools/tiff2ps.c + call TIFFClose() in error code paths. * tools/fax2tiff.c + emit appropriate message if the input file is empty. Patch by Alan Coopersmith. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672 * tools/tiff2bw.c + close TIFF handle in error code path. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677 * Other issues fixed: + bsc#1042804, CVE-2017-9404 - Removed patches: * tiff-4.0.7-CVE-2015-7554.patch * tiff-4.0.7-CVE-2017-5225.patch * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch * tiff-CVE-2016-10266.patch * tiff-CVE-2016-10267.patch * tiff-CVE-2016-10268.patch * tiff-CVE-2016-10269.patch * tiff-CVE-2016-10270.patch * tiff-CVE-2016-10271.patch * tiff-CVE-2016-10272.patch + Fixed upstream- Added patches: * tiff-CVE-2016-10266.patch + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031263) * tiff-CVE-2016-10267.patch + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031262) * tiff-CVE-2016-10268.patch + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031255) * tiff-CVE-2016-10269.patch + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031254) * tiff-CVE-2016-10270.patch + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031250) * tiff-CVE-2016-10271.patch + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031249) * tiff-CVE-2016-10272.patch + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031247)- Added patch: * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch - Fix a regression introduced in 4.0.7 (bsc#1022103) - http://bugzilla.maptools.org/show_bug.cgi?id=2636- Added patch: * tiff-4.0.7-CVE-2017-5225.patch - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer overflow in tools/tiffcp via a crafted BitsPerSample value- Drop --with-pic, this is only for static libs (which are not built) - Update descriptions- Update homepage- Upgrade to upstream release 4.0.7 * libtiff/tif_aux.c + Fix crash in TIFFVGetFieldDefaulted() when requesting Predictor tag and that the zip/lzw codec is not configured. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591 * libtiff/tif_compress.c + Make TIFFNoDecode() return 0 to indicate an error and make upper level read routines treat it accordingly. (linked to the test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517) * libtiff/tif_dir.c + Discard values of SMinSampleValue and SMaxSampleValue when they have been read and the value of SamplesPerPixel is changed afterwards (like when reading a OJPEG compressed image with a missing SamplesPerPixel tag, and whose photometric is RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when rewriting the directory (for example with tiffset, we will expect 3 values whereas the array had been allocated with just one), thus causing a out of bound read access. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) * libtiff/tif_dirread.c + In TIFFFetchNormalTag(), do not dereference NULL pointer when values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are 0-byte arrays. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression introduced by previous fix done on 2016-11-11 for CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448, bsc#1011103 + In TIFFFetchNormalTag(), make sure that values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null terminated, to avoid potential read outside buffer in _TIFFPrintField(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2590 (CVE-2016-9297, bsc#1010161) + Initialize doubledata at line 3693 to NULL to please MSVC 2013 + Prevent reading ColorMap or TransferFunction if BitsPerPixel > 24, so as to avoid huge memory allocation and file read attempts + Reject images with OJPEG compression that have no TileOffsets/StripOffsets tag, when OJPEG compression is disabled. Prevent null pointer dereference in TIFFReadRawStrip1() and other functions that expect td_stripbytecount to be non NULL. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2585 + When compiled with DEFER_STRILE_LOAD, fix regression, when reading a one-strip file without a StripByteCounts tag. + Workaround false positive warning of Clang Static Analyzer about null pointer dereference in TIFFCheckDirOffset(). * libtiff/tif_dirwrite.c + Avoid null pointer dereference on td_stripoffset when writing directory, if FIELD_STRIPOFFSETS was artificially set for a hack case in OJPEG case. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory() and TIFFWriteDirectorySec() when aligning directory offsets on an even offset (affects BigTIFF). * libtiff/tif_dumpmode.c + DumpModeEncode() should return 0 in case of failure so that the above mentionned functions detect the error. * libtiff/tif_fax3.c + remove dead assignment in Fax3PutEOLgdal(). * libtiff/tif_fax3.h + make Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. * libtiff/tif_getimage.c + Fix out-of-bound reads in TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683. + Fix some benign warnings which appear in 64-bit compilation under Microsoft Visual Studio of the form "Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value." + TIFFRGBAImageOK: Reject attempts to read floating point images. * libtiff/tif_luv.c + Fix potential out-of-bound writes in decode functions in non debug builds by replacing assert()s by regular if checks (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix potential out-of-bound reads in case of short input data. + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL, there is only one sample per pixel. Avoid potential invalid memory write on corrupted/unexpected images when using the TIFFRGBAImageBegin() interface * libtiff/tif_next.c + Fix potential out-of-bound write in NeXTDecode() (http://bugzilla.maptools.org/show_bug.cgi?id=2508) * libtiff/tif_pixarlog.c + Avoid zlib error messages to pass a NULL string to %s formatter, which is undefined behaviour in sprintf(). + Fix out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094. + Fix potential buffer write overrun in PixarLogDecode() on corrupted/unexpected images (CVE-2016-5875, bsc#987351) + Fix write buffer overflow in PixarLogEncode if more input samples are provided than expected by PixarLogSetupEncode. Idea based on libtiff-CVE-2016-3990.patch from libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544, bsc#975069) * libtiff/tif_predict.c + PredictorSetup: Enforce bits-per-sample requirements of floating point predictor (3). Fixes CVE-2016-3622 "Divide By Zero in the tiff2rgba tool." (bsc#974449) * libtiff/tif_predict.h, libtiff/tif_predict.c + Replace assertions by runtime checks to avoid assertions in debug mode, or buffer overflows in release mode. Can happen when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105. * libtiff/tif_read.c + Fix out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset is beyond tmsize_t max value + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly use user provided buffer when no compression (and other conditions) to save a memcpy(). * libtiff/tif_strip.c + Make TIFFNumberOfStrips() return the td->td_nstrips value when it is non-zero, instead of recomputing it. This is needed in TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read outsize of array in tiffsplit (or other utilities using TIFFNumberOfStrips()). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2587 (CVE-2016-9273, bsc#1010163) * libtiff/tif_write.c + Fix issue in error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. I'm not completely sure if that could happen in practice outside of the odd behaviour of t2p_seekproc() of tiff2pdf). The report points that a better fix could be to check the return value of TIFFFlushData1() in places where it isn't done currently, but it seems this patch is enough. Reported as MSVR 35095. + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() directly use user provided buffer when no compression to save a memcpy(). + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should return -1 in case of failure of tif_encodestrip() as documented * tools/fax2tiff.D c + Fix segfault when specifying -r without argument. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2572 * tools/Makefile.am + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff, sgisv, and ycbcr are completely removed from the distribution. The libtiff tools rgb2ycbcr and thumbnail are only built in the build tree for testing. Old files are put in new 'archive' subdirectory of the source repository, but not in distribution archives. These changes are made in order to lessen the maintenance burden. * tools/rgb2ycbcr.c + Validate values of -v and -h parameters to avoid potential divide by zero. Fixes CVE-2016-3623, bsc#974618 (http://bugzilla.maptools.org/show_bug.cgi?id=2569) * tools/tiff2bw.c + Fix weight computation that could result of color value overflow (no security implication). Fix http://bugzilla.maptools.org/show_bug.cgi?id=2550. * tools/tiff2pdf.c + Avoid undefined behaviour related to overlapping of source and destination buffer in memcpy() call in t2p_sample_rgbaa_to_rgb() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2577 + Fix out-of-bounds write vulnerabilities in heap allocate buffer in t2p_process_jpeg_strip(). Reported as MSVR 35098. + Fix potential integer overflows on 32 bit builds in t2p_read_tiff_size() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2576 + Fix read -largely- outsize of buffer in t2p_readwrite_pdf_image_tile(), causing crash, when reading a JPEG compressed image with TIFFTAG_JPEGTABLES length being one. Reported as MSVR 35101. CVE-2016-9453, bsc#1011107 + Fix write buffer overflow of 2 bytes on JPEG compressed images. Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also prevents writing 2 extra uninitialized bytes to the file stream. * tools/tiff2rgba.c + Fix integer overflow in size of allocated buffer, when -b mode is enabled, that could result in out-of-bounds write. Based initially on patch tiff-CVE-2016-3945.patch from libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid tests that rejected valid files. (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614) * tools/tiffcp.c + Fix out-of-bounds write on tiled images with odd tile width vs image width. Reported as MSVR 35103. (bsc#1011841, CVE-2016-9538) + Fix read of undefined variable in case of missing required tags. Found on test case of MSVR 35100. * tools/tiffcrop.c + Avoid access outside of stack allocated array on a tiled separate TIFF with more than 8 samples per pixel. (CVE-2016-5321, CVE-2016-5323, http://bugzilla.maptools.org/show_bug.cgi?id=2558, http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813, bsc#984815) + Fix memory leak in (recent) error code path. Fixes Coverity 1394415. + Fix multiple uint32 overflows in writeBufferToSeparateStrips(), writeBufferToContigTiles() and writeBufferToSeparateTiles() that could cause heap buffer overflows. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592 + Fix out-of-bound read of up to 3 bytes in readContigTilesIntoBuffer(). Reported as MSVR 35092. + Fix out-of-bounds write in loadImage(). From patch libtiff-CVE-2016-3991.patch from libtiff-4.0.3-25.el7_2.src.rpm (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070) + Fix read of undefined buffer in readContigStripsIntoBuffer() due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841, CVE-2016-9538) + Fix various out-of-bounds write vulnerabilities in heap or stack allocated buffers. Reported as MSVR 35093, MSVR 35096 and MSVR 35097. + readContigTilesIntoBuffer: Fix signed/unsigned comparison warning. * tools/tiffdump.c + Fix a few misaligned 64-bit reads warned by -fsanitize + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument which resulted in Coverity report. Added more mutiplication overflow checks * tools/tiffinfo.c + Fix out-of-bound read on some tiled images. (http://bugzilla.maptools.org/show_bug.cgi?id=2517) + TIFFReadContigTileData: Fix signed/unsigned comparison warning. + TIFFReadSeparateTileData: Fix signed/unsigned comparison warning. - Removed patches: * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch * tiff-4.0.6-CVE-2015-8782.patch * tiff-4.0.6-CVE-2016-3186.patch * tiff-4.0.6-CVE-2016-3623.patch * tiff-4.0.6-CVE-2016-3945.patch * tiff-4.0.6-CVE-2016-3990.patch * tiff-4.0.6-CVE-2016-3991.patch * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch - Fixed in the upsteam release - Changed patch: * tiff-4.0.6-CVE-2015-7554.patch -> tiff-4.0.7-CVE-2015-7554.patch - Rediffed to the changed context- Added patches: * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098. * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch - Enforce bits-per-sample requirements of floating point predictor. Fixes CVE-2016-3622 [bsc#974449]- Added patches: * tiff-4.0.6-CVE-2016-3623.patch * tiff-4.0.6-CVE-2016-3945.patch * tiff-4.0.6-CVE-2016-3990.patch * tiff-4.0.6-CVE-2016-3991.patch - Upstream commits to fix CVE-2016-3623 [bsc#974618], CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069], CVE-2016-3991 [bsc#975070]- Added patches: * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch - Upstream commits to fix CVE-2016-5314 [bsc#984831], CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842], CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]- Added patch: * tiff-4.0.6-CVE-2016-3186.patch - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]- Added patch: * tiff-4.0.6-CVE-2015-8782.patch - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (upstream bug #2522) [bsc#964225]- Added patch: * tiff-4.0.6-CVE-2015-7554.patch - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and tiffcmp tools (upsteam bug #2499) [bsc#960341]- Added patch: * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch - fix uninitialized memory in NeXTDecode (upstream bug #2508) [bsc#942690]- Update to version 4.0.6 * Supports CMake 2.8.9 and later. * Add missing file which wasn't being distributed, causing unit tests to fail. * Make shared/static library building configurable. * CMake reads all version information directly from configure.ac to avoid duplication of values. * CMake builds are now included in 'distcheck' target. * Autotools 'make distcheck' now tests the CMake-based build if CMake is available. * Fixes to avoid undefined behaviour of signed types (C standard compliance). * Fixes to avoid possible isses when casting to unsigned char. * Fixes to avoid undefined behaviour with shifts. * Fix generation of output with 16 bit or 32 bit integer, when byte swapping is needed, in horizontal predictor (#2521). * Fix decoding when there is a single pixel to decode (unlikely case...) and byte swapping is involved. * Add add explicit masking with 0xff before casting to uchar in floating-point horizontal differencing and accumulation routines. * Eliminate requirement for and use of 64-bit constant values. * tiffgt : Silence glut API deprecation warnings on MacOS X. * fax2ps : Detect failure to write to temporary file. - Changes from version 4.0.5 * Support for configure/build using CMake. * Support for large (> 2GB) files under Microsoft Windows. * Configuration and building using CMake is now supported under Microsoft Windows and on Unix-type systems. * Test for and use fseeko() if it is available. This allows supporting large files on Unix-type systems with a 32-bit 'long' type and a 64-bit 'off_t' type. * tiffiop.h: Macros added to use 64-bit equivalents for all standard I/O and POSIX APIs used by libtiff and its tools which are limited to 2GB in Windows builds. Note that these 64-bit equivalents were introduced by the CRT provided with Visual Studio 2005 and if the necessary CRT is not installed on the target computer, the program will not run. The wrapper macros will not be activated unless the definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at least 0x800. * tif_unix.c: Updated to support large files under Microsoft Windows. This makes tif_unix.c a completely viable candidate for use under Windows (in spite of its name) if the CRT is modern enough. Please note that tif_win32.c already supported large files, but only 'tiffinfo' and 'tiffdump' made any provision to support large files under Windows. * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a maximum size of 2GB for extremely large I/O requests. This surmounts limitations in the Microsoft Windows read() and write() APIs (which are limited to the range of a 32-bit 'int'), and may avoid poor behavior with extremely large I/O requests on other systems. * Updated to use I/O wrapper macros from tiffiop.h in order to support large files under Microsoft Windows.- use spec-cleaner- update to 4.0.4 D tiff-4.0.3-double-free.patch D tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch D tiff-4.0.3-CVE-2013-1961.patch D erouault.2862.patch D bfriesen.2805.patch D tiff-4.0.3-CVE-2013-4232.patch D tiff-4.0.3-CVE-2013-4244.patch D erouault.2861.patch D erouault.2857.patch D erouault.2856.patch D erouault.2859.patch D tiff-4.0.3-CVE-2012-4564.patch D tiff-4.0.3-tiff2pdf-colors.patch D erouault.2876.patch D erouault.2860.patch D tiff-dither-malloc-check.patch D tiff-4.0.3-CVE-2013-1960.patch D erouault.2858.patch D tiff-handle-TIFFTAG_PREDICTOR.patch D tiff-4.0.3-CVE-2013-4231.patch D tiff-4.0.3-CVE-2013-4243.patch D erouault.2863.patch D tiff-4.0.3-test-jpeg-turbo.patch- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128, CVE-2014-8129, CVE-2014-8130, CVE-2015-1547 bnc#914890, bnc#916925, bnc#916927 + erouault.2856.patch + erouault.2857.patch + erouault.2858.patch + erouault.2859.patch + erouault.2860.patch + erouault.2861.patch + erouault.2862.patch + erouault.2863.patch + erouault.2876.patch + bfriesen.2805.patch + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch + tiff-handle-TIFFTAG_PREDICTOR.patch + tiff-dither-malloc-check.patch- build with PIE- security update * CVE-2013-4232.patch [bnc#834477] * CVE-2013-4231.patch [bnc#834477] * CVE-2013-4244.patch [bnc#834788] * CVE-2013-4243.patch [bnc#834779]- tiff2pdf: introduced warning when the compression isn't lzw or none [bnc#819142] - tiff2pdf: fixed crash [bnc#821872]- security update * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573]- Add Source URL, see https://en.opensuse.org/SourceUrls- updated to 4.0.3: * Add some TIFF/FX support in libtiff. * Fix bug rewriting image tiles in a compressed file. * Fix read past end of data buffer. * etc., see ChangeLog - removed upstreamed patches: * bigendian.patch * dont-fancy-upsampling.patch * CVE-2012-3401.patch - new patch: * test-jpeg-turbo.patch * CVE-2012-4564.patch [bnc#787892]- fixed CVE-2012-3401 [bnc#770816]- RGBA is packed in host order, use the right macros to unpack and verify in raw_decode test.- updated to 4.0.2: [bnc#767852] [bnc#767854] tif_getimage.c: added support for _SEPARATED CMYK images. tif_getimage.c: Added support for greyscale + alpha. Added TIFFCreateCustomDirectory() and TIFFCreateEXIFDirectory() functions. tif_print.c: Lots of fixes around printing corrupt or hostile input. Improve handling of corrupt ycbcrsubsampling values. tif_unix.c: use strerror to get meaningful error messages. tif_jpeg.c: fix serious bugs in JPEGDecodeRaw(). tif_jpeg.c: Fix size overflow (zdi-can-1221,CVE-2012-1173). tiff2pdf: Defend against integer overflows while calculating required buffer sizes (CVE-2012-2113).- Fix building on older targets from SUSE 10.0 to current. - Add jbig support- Add lzma support - Implement %check - Drop visibility patch because it breaks compilation- change package name libtiff4 to libtiff5. library number is 5 actually.- Update to 4.0.1 * configure.ac - Add libtiff private dependency on -llzma for pkg-config - Add support for using library symbol versioning on ELF systems with the GNU linker. * libtiff/tif_win32.c: Eliminate some minor 64-bit warnings in tif_win32.c * libtiff/tif_jpeg.c: Extra caution for case where sp is NULL. * libtiff/tif_dir.c, libtiff/tif_dirread.c: Extra caution around assumption tag fetching is always successful. * libtiff/tiffio.h: Use double-underbar syntax in GCC printf attribute specification to lessen the risk of accidental macro substitution. * Update automake used to 1.11.3.- license update: HPND tiff license most akin to spdx recognised http://www.spdx.org/licenses/HPND- remove libjpeg-devel and zlib-devel from libtiff-devel requires as they are _not_ required to use the library. Now, this _will_ break packages with wrong buildrequires for good.- Hide private symbols using gcc visibility, this has been applied only to functions that the source code clearly states that are internal to the library. - Run spec cleaner- add libtool as buildrequire to avoid implicit dependency- Do not use -fno-strict-aliasing, no longer needed and will probably slow down the code. - Fix self-obsoletion warning- updated to 3.9.5: * fixed integer overflow CVE-2010-4665 * fixed buffer overflow in ojpeg decoder * upstreamed: - oob-read.patch - CVE-2011-0192.patch - getimage-64bit.patch - CVE-2011-1167.patch - scanlinesize.patch- fixed regression caused by previous update [bnc#682871] * modified CVE-2011-0192.patch - fixed buffer overflow in thunder decoder [bnc#683337] * added CVE-2011-1167.patch- fixed buffer overflow [bnc#672510] * CVE-2011-0192.patch- fixed "Possibly exploitable memory corruption issue in libtiff" (see http://bugzilla.maptools.org/show_bug.cgi?id=2228) [bnc#624215] * scanlinesize.patch - fixed crash while using libjpeg7 and higher * dont-fancy-upsampling.patch- updated to 3.9.4: fixes CVE-2010-2065 -- obsoletes * integer-overflow.patch * NULL-deref.patch - fixes CVE-2010-2067- fixed CVE-2010-2065 * integer-overflow.patch * NULL-deref.patch - fixed out of bounds read * oob-read.patch - fixed CVE-2010-2233 * getimage-64bit.patch - [bnc#612879]- fixed tiff2pdf output [bnc#599475]- fixed typo- updated to 3.9.2: fixed many CVE's and obsoletes almost all our patches (see ChangeLog for details)- add baselibs.conf as a source - enable parallel building- fixed integer overflows [bnc#519796] * CVE-2009-2347.patch- fixed lzw overflow CVE-2009-2285 [bnc#518698]/bin/shlibtiff-32bit4.0.94.0.9-lp150.4.9.14.0.9-lp150.4.9.1 4.0.9libtiff.so.5libtiff.so.5.3.0libtiffxx.so.5libtiffxx.so.5.3.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9228/openSUSE_Leap_15.0_Update/814ba7df30339d58cbaaa074f070bc06-tiff.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0694761dc791f481969fcafef4dedf6d1a079a6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=90b67d4ceaad2790f726f1caf7465a1f8e2c86fc, stripped PRRR RRRRR RRRR R R RRRPRRRR RRRRRutf-81fe17ddb7e4b4ce53e6c830c98567037d08e6cc02423b3bc91047b09f756500f?7zXZ !t/<] cr$x#$.VW\M=ά'.[:=LbA>E좓Ǜ_zJ}4g,cZ)xذk8UGBT$=*qUһXq0TLV 4Y (GwD̷]om4|2\Zg)_-2!X#18nw,yÖfFe<,d{2d£9r9e]e(Ժ@nWgtMZA<˓Z67g7˙*ms aF?fQR UMgn.PiwzBKKb /*\=iHq>uۋ. T{zB/yX-!}6y~:ɗPp"X,V/kۅ~xm!gR#5[6uْ}CƔhfU? }˳pn(8$U /{ꙷ}.$cY54֚ "Ku6jTl"y+nx;{ܼJC 𔧀v7KzuX)yjL [iNI{teҡR_C/ Ti |[>O"LU47 6K}u7<:gpGS5VʨrW?򃚎՟=ZRSmmc0agIUIJ\.NNp %x$hp07ſ ݮ iWI6As8" ok H`EWJe>'G脵R ʒ3=ean3hyr;ysZ{+ҟ Yc%/s 6h`i p7 fJϩZ-Ik2w۹#qTM$"GhZvLJb M~Dr&;ޛ4eR|&T1__H=fZ8nl>i={ 4DJA3]⩋ 4ۊ$zUf4cXl2Yi?q#k{xhd|V %^m > >G`IyKhThӪ uylHk2F~4KEJGkIZ[Ui5] == '/wҪLMQe9ޕj6FC-7>u-bYV"qT`d&F2a%FoG͒J^0HBg|Ѱ~=骿1vG2nd$U]1羽"a ;^*@mQR~[ohR \A#Q`>C&q¸F+ @rУVe㻆-pΔuSe3;u$ pPdA)eUL·,f%_$ ȚH/1zSx5H= 1; O8z(K y1ǘE,x&+OL-M*)zAv)Xb9CC 7[6xDoip&#OA-9itIE+@ϟ(hQNV5(iNj/'?/Wҏ}x<Gt8o ?;y_#W n"Tg!%L$_ B錋v>#亡&[y6?Q pi<71 PV 3D@~@=J@_2~"ƚ~$՚mM(cO@6EP *k ]a8N*;Uqu"]w:6Nj՛<c7 |Z;aOƤU 'E}2) ̺dyw7O OׅkV>Fl%KW{B0QaZPpp6}p\Y_ [iem16o2lo?[o;Ģ?fՊg"{;zjBƌnG~Kila+GΔ uGЗM95ow؞3eKr54|΃J4_,00+썛aSti8mB+cq%EPإ:,* {- p>%jB™R7%+"keߩZ3&o5r $ ֒O1Y.KXҶLy4<[z̍%Qgd=l7&ـuZz87 g.h>N iw$?s_YAnw1.&7fG6n*CMZ0C[, %٨\I+djjRp:jݡ8 +FH4s̋2ę &ƝS^J㻆2~!? $B2aOusO)!LJ0qwCC$?w3hIy+H'g*Gկˣ]2J\r)T Auj[UwI,OKk' mZ`nuHܽq"D íG׋l,?M"0υӵF]U pGn.7AŁp$ؔq؎&i y_yfkH,DM$d%O]2ZI ^*'+_AW8Нcx3b: W)1C)B1Ule}2_Jm}X6 Ps=:cdfc•PfLP񣣁$ I/m ٷ#v.۔o[w?3vT@߳Tn5,6fOAfc[6=xl \I]?/DW3ĽDn32~~-(Y ;~ R @/. bJVkND8x;'EDFPYӘb5ٕc S2yU{My%tF_KRV]m6#8~Oѧ\!_)u:\*Bmu&yA}Sᢙw6` lu wԖmsu.0 ms~Jʓ^';_>WBǵD,-T$} !M4t[DH2Cg֝b<yh>}s" \l_{#w4 _aS>ap';Tݐ7r]5`܊X YH!Rcc6T.h[A;;1"W6v6%֡oM 4eO0go(D6g]YOеU?,?m[cz(ke C?+,#L?/g9~%9g֤i{=W.4nj8>9l^CcGy;YnPʼn )w) o)eLte1I[omʰ\ ]Q!s@%3G=btM6!~8[[?C:ϭl'a^c.\ n߉zr~bڛ۬Pg {tg 4y>Y G ĎeNbC5j?m;'Na*/ |!{0Ofߠ/X3.#+Ȑ΍(!p,g~yUh0{T9k +,Lfe 7x%@FGa%nFj&K\;&zB֜ۯg2a'V3^+P6sKA嚥+´i;hAJ}%~.i8F(WθL$ &BkRr nMH-r^7^Edߕ~yU]"Ⴥ5{֑Ý '?]q KŃHm3^@E,;L5oh@<4f~ hm5ч6 1,Ap=dlhgNo2ӇWG.~p.z;u'8#<+m*OgO /ex"|$y0JMMZ,hd[(rgA2%<<ӥW5nhd81i!Z!F bcbRvDz7r&V]}8r/spR8,15XN5W㕕a-jgMv,c$liEa*¾Vփ'*YW 6y,_^dpـ[? V웖/ w -V̊kOWT$/ay~ @-xS1%<)pkg?z c '@R)̀]r.7!gфk9G+|#{%v u K 3[^Q"' 5\MC!pd]nZ79B=EWNWjuK-'y2ef輽yJ*br;ҽ3Z2D+ />K"nhmƣ=7i>z<;;}~]ϡKko[f>uj}:>V#=Kl1Efk-i[+ڎku4<0`T- %B~v42WDf.O'<(06إV#+cYLqp[JM+>3&i.eo1KeɜpMZ,,aSW摤i&QD|2Ҵñݓp t:Z;(]!wKg!u Z4[yTG_vIX 'bа'F {Ir^V7,d妞Ւm@oM5ɘygE;UIE,&ג/>mS/џFGlF#\Qhx5?%4"hDeթMJRw0ELH8p WOlj@~ J מyJ|vE85dRn_ &:&g`_5g ?MrFx¸7.YYNjMZ u'nhdLh袳 ؑ9ʠnn&E\t~kF;Tw֡ERCsF<'9(y<$|n{f=ӁĠ>U2TFbBT#|]"d,efVu9( ixzIA_vXt^%WDޕ&̯t]!W+D-!2x)| 㕿>9 Ix4Vҫ42r #zzv]Ě`k1x"(傋̟ٛD h*Ehfu95(.i iqm"H& H1@ u#K~kث  %XX=cNFUaՙHH﹜u~!M8xCGvi.tM%eE'G:Alcުy{nUC* ~ %S {PΟf󠢛϶ {ܜS.ی%wb֟M o^u,Cۀ@sGw: c֔:5bu 0[s)\߇ 5S)^)^p'\98w ",$"FHoPWW/8u6u޴c^AP+Q㓡^ ~ pi` J ScQ2+_'H7gMOF7݁+5ت[6WӅV-YޘJƓ/v+XIL#ĵ9RKVx9LCdAr{A<*$ 0!`$ ВizL_~6vůHJ=MSvBN7gF܄](]3fzU|:.{l"1]#C>/G$R`Ӷi)|#:?<*87VX2N%/Çw~r3C[.#9gRք԰Ժ,{&w*CbsTt)136I|"eT>=2\WOQDUKĐa 0&r.ؕbt?< s@0Tq -lDYvbWuÈ1aK[4xV2w7 gڗzPSJ\QόL!I:c^ϑ^[13Ojv#ڪe ~(W6A ܪ4)8|~Q~-GRxa!?Q9bO Q2-ը]*^҈@ 8xرنl\w&+eR R8_BF.=şA>1 ,46͜{ҽW6\o@>|fV406 nEv*Tfvrˮ_jPe*TdkrI߶9@=z@w'tv.4sor M{-Et~n-*"_b҂$R`YE<0V%5}~*mVd+`V^C4 ~56mn 7Foir.Cɣ39P9 KFvAQNbtْN+wxtd2`k~_SUAe"E^ kb ? 5\-Zhf ;تu߈q/dcM̨Xy͟ו\+<-5Nxngr) )-&ef,kǜр bk yjdu4!xe?HG݁{,`uG '>8-X1/GlZf"09 +scY0Eۇ)w*63sBeJGHv$^+r<0n7dCO\37)]seD{i9Os;~>VqSgJLlSB7*rtPQ1~i hp">.y x/fJCjtYܲ#zpoM~bXyE&Thz`.I{f\ChuwSfhe p)dxl_ݫB)=㇋we[?k܊`Y=@TzO6ɍoA6)Y] 2Y`5•.%G>0g15 c joĤ{0&腎 |]~膸-^&oR=*,TL`-$9)AD;\ dʛW1>VF|?c-OjmXF}mxsⱴ1&hcmLuO @.k] ;DhjR+cKH pl]ːh±Z]`W H9>VH#0]/:,rmbn B.?k佣2,slE=i)+|J :+T WUr '#a5"IK/? $FNs(0̅8hR{z[ߨLz]Xde1xP;)_Uoֿ9v8DSTF$=eLN2\&sTSQ>-bvI5Hʢ( wq<֩r,$tfRl^_"*ƠL$jmnifG fYw].E^sڈ/bk}(D-ev@=M L cʶQ[Wnid6NjWd@ĥv"8!^Z [_Yt(>. g4rq-m-i-I}tFUf :!Ф<3f,p₀`t]ڒZİPa4Y21gw{"=O>Vgok+5"嶮R:mx'd`͇%TP Ey W|7P1ˍ=: O1}dnհX vDZϺv?Y{nG*D)`aZdz<j@w'NgE"vв/z~L/ט Hd93qL8zLFCg *G] 2CDD&RE[UV5Zۂ OIT!- iGd.]P bYn% ~l5:*YN2Jʭʔ=8A=ٙ}mt࢞Giw%COr2_6:^eRA>z䢂yD7Rm!W!J/ 2WQR}~C%WkAm|11FX5fw<;P4r6č3VgڕB-O#>yMd6qgq/5|lc&fB woF뙐\,Jj#?&S1t]R V νDf%DB$YmtMdJ&Q`Yp Vj0r ̊xeg#oH[af2בԙ+.ѻN׫lt"w1 7MœrԊu.>@XD7hs~ʳ8"叶-.oʣ*i/'Q+Z7B2c'J_2 6񸮰Z]C mԇmUAnZp-9~6 |082^mwP@[t{m\͇6H :a˫$ʈZgKiI{["Jt5oi2ms;)?'~R,-dﾀ]y*Qƃ H(#JذA_dKMmlv2k{v]nKU?4޺pҍֈ=\3%)+h9S h柸>ʿ6:^IX=kDA+ND$nX:KɌsڒ%36 Pͫ\Q@֮ԔX|Hdv+00I)=McScƭ?ڤSPq]Z|LncS9;21CHZ"c*ϔ~$,FKqt:Y(ˊT' ĻH;q|F'Y Ny `:#6l2=)W'&5AƏMiY*͛1}$Cޓ7[C Yk9(;aAZ 2">Zճ&ʈՕ*|V7R%2< CsW,zҨETXS*!;u["T,Sya3\.7fv)eF$5 s]/ǐH9KyP߄b\['۹,M]c@[d}y᳦ s]䘫vv皆B bմC:lyC2C1%oΤ? y^΅oS(u}i]u+% Is9ʶ}6]6YOyMTM_WmWRV[`GMaZFDܺ^1\4 aŷxh EԐBgnJc] +fwZ2})SHWT u@bEJk\yܬ5ܸD͵:Zfr<]Ȫʣ؂GS}2|>h`oR1ZB%N]7=a̸}RXk|gH@K|eX|n%8m5_F\Ԇ{cu*U9 ٫Z X1S2.P< 0?:iP/NknC,h/afXN+b̜dȭC?pт~9l®0緛ɖ5ur%K>.cKtNto( I\'`d%AIziI;B^O/sEЈE]XDE'w:;Jc? tSX~ 7wk+2UEWtLH=EfR񯝩Xx /AiE.J|մo.[]d\ E}D`{AWa@S/OTTWi?vRZ["܅&6azbڕoygdvXl>q-:Cɠ޽Bp'L/?S L*P]> br/}$Ip!;.{ bl,=2x,ݵ9.em }¤-Ր%!bWqճ ^icbaŎډp Zk6Q/vݬU{n7,ldEl=B#D 0EF&ms/j .X薥[|J&[J!{[-2CRE}.8rU3醟>VU\-OWeQK)Sd4~ۚp?y)uՓtROq<3Þ8͐ryDm ҚX̮3vPmd"ob{pe[X8e荜cʘ4C 1 f$N݇M'gx׏&:Qy`VˤIz{%B*`SAr=T h/TxY~ \ PBB=Q)Ʌ&!mms(]̴ GznkG|yy.i yni|k K:g8b-%B>d(drTNq.;X ௃9WEl`q*ycYw\xmNfTK'Dl!n_!+07 ᷌íl  o뻊З #j$9kV;u>1Jlk)E2L[Chʙ?w%w>|Q/y5nji>[xXe?mTt$P''u2 -,\̖/Lק+8k(X) !8[^uƌ5ۖx*:7AD80Ma_2FyL$-Pr_S|u*l2zᏫNAs`$UCy4i%X?a s,˾_]7_i]Pc" <~)2.Cl%M]A/Ogv-zݚD P%,++cTwVo\Fc'KVJ $K2o])\9O0r|ȻZg #0VǯK1ej8ux@%xA_0q=$hL:G BLv˶lRP q*;hU, dWK*\ iػ79Q[Jw͵B]_UlEe|W&[W/kW+x.G̓: 橸¸*CP`vmX]G18k ta? Гa2ːrŰauߺ,v.$&!7N׵ m<*ڢώn(u;lg IM_x[  Dx0k?tn/ V#vܡ"jt GZ y6JLvZ+F/I,ޅXCSkŭaϤN2¿9G&M+#Fc V/WNRl;lo}؏o J5>NBtem4UV4X7G \j]*Vg<)m./ĺ] pEe\BJw<6*Y’b5㞸,4exrwv}= KlowQZӥ#n8bJe϶νf$N"Hkp)Uw7_aGaaj昔&x~lrT%P&acEC6ł"Y۵u3d\ Z&v'Ղ;r{_O05H|]S?ױ?"faב.L^㿜.IˋMd(Xs)TD s dqB;ρv>n|'g9GEou٨h5Aok7Uh}ﴓE9^]txJ G5aI 7XDtHi:srL[F^w=#MZ?ljg&A/ͫҠ)Jcz@wGto :M,7Mf e<Ѹ"zT}UFszXꢂ#@a÷XY44F<|8YI0z 5S2]kғjb>?nNdsl<תzVhGՆ>1A ï@;@;%}_[yă%S|,*W0M\Kb5WAu L5p믴Z0w(VvάÝC`I;ܱM{ 2jлPeM<ѵ()F%5xmUw$–/M7Su ),,nkD NmI ,CHwi[]$H":}W8NXi1 odS'9G˕lO^GC@d|%؝!ֻADӢC4m,YE%G &F-$enr|YKaTeOqh|ܐ"5@2Xq,TBӱ`ZPN8 ;7Fc bN}y\ޱ091DMl8ōKd̙1{bҺ6E֮@o/d=?:vU&6M@BlW)5IfAF$hyILz[pw%L,E#k޵uW;7־“(a7@>ɶY%UNvn{熑dtHR;= )K.z6 {$kx ۉrt@ޙXðvpaj#IzDR{~d_s7jdFW >K*|D XqzML9, SEtM>0Q% >\07%g)j'w]Uc׌BͤH!ӫ)OX=x 2a:S1%H(GM*|'Ld e ?^w!`"u>kprU)gJb(7 ri-KCXJ}`ryi0֓7Vl*s)_Bf{Z='[~GC{|wQN/SLGό( ̡AͰ&o`ƐBDZVtTripOˁijK9d^F L!%_}G"׷HeQݍ7[fܥI*4@plǭmy0js [t`kb)s&w0 o 5G=*4&<#ow& xpdr՟"wwR622fٌ/ДaW&@g;$ m؆n=3Hȏj7,g,+^DȶrKDW] x ژiX;2IԘ{j" 9uC5zY3Yj~K sO@ޞ[y]Kvy)|\%^J{0`ů0$l;J"{OĀ?"[H]~l^ψN9:c1>65mw!^^ }|%q{<[Nة'fGG 1["_UU Rq ]7b'c-ci8)g36υΆc>қ"c4ߗ!V7Z`4-YXx8ervCUx^lUqlUb/#}X?򨕒I y=jr#CW,?Ȩa+c_O c"q:{pjpx;X5Br2 %c"e;,r5C=ngˌ,ኃ)0Ԏ:$ͽmҘTcCei ,[ ZGʫ#6i|OY.rc{0ѣkwT?şSEɠ(dUzs`QdSb~ 깂Ρh4UuVGeRF-^k9q$d ! /Fj2x>QGin9В]j9œtr pL8SN U~0j%Re<&!s.PR EnlU~Z |VK#F?76  U0 V4^v8-4]AHiQcM]e\'jCY\Nq^P Vܡq1\%?9̴ys"#IJtJsPƗDzG2G9CNYx!g^_9C꧈5 z$5PW =y$G9_ć#D~Ϥ'_ ջ6~^=BVgg|?Vd)mMcGi_/e90n.|GMAgy/1(^BOkuגv uwz_oѼsv.5 J46qdڪkN@;A K~MBJNmb1g;hw?M#.ΤO`=2?Վ{M魐qS?poFZ:n&!:PHSw;3W/'1+ w=|LkNhdTpaHp ϔMJJ {EwuJ@7|z jkHfJ~ɰ#mcb#h.J4)p~K)EvISnH&$j&vlU/w :`Y *XsI RiGYȰiOGargM BߤteB!y0kW0pm!V*gtEqND,5ȹER.1s+y~4:2QMWlL2ݬ+$> »]mU|H>zlvhbӅuY "߹meY0#9j!'g|M֫C.ă/mzN8#ʽ%d%3I`-%瀩ZݥjU'TO})0^.md!#15H?7r46  642\+5#Zzɛ_0q'  B  9d/jLyҵn$n#Jkd Yps 6E2DT:?n9`B'䩺eC$[> gZ5E S3Ubn@BG#^Q O"ca[UN}EVPZOIA(h4+G;;,A1JYP,ƯQ}G +9TDKhA}_Cet m8bZoƇGq^p>|3ٰaZBKc'ޖ| K*wA.["F3`W,rGBY)ˡVeB :+ A\#ȓ '#V@J"ۭ!hOmͥբl}*TG:`8 WNۻa!>" Uo h}qo>UW1}T7bGE ̯[\Ϻ[(mؕ2!8@'oxX;^:0iXcHI~a]GBnͦn]`U6 -.D?+*S1a@ߚ)jn΀Nߵ!T}gs Hn h.S:wI`7DgwC@ -+7h@Q/ z`)tS /9E9RF8_S ͥxUe /7yqBNDΧ]q:WJؤ|uW3HaW>-:_uđs8!S@!DIPUPS-/3 聆!oTg6ǝAÄKŵI ڈiK覟ڨĺO܈!׏# ØR|RvZ(S%n+|L\wM˶7D!5\ۛ, "TRF̋mA % ̵d2ssIja-Ɂ kȷYڬ9.y1VfHLQ RF-S!@PSFyuu"L. ym d8=N&A4=7hc5!~#trX&LJmA?Ӣ6ٌG@y+y)؃Jxw ʯHE,x̅:h(A5m>תٱsJkwlb l$}],}={ P ]]uNe V䆺/o&lf֜oi v0"$}#q0+Xg W/F)yAgGOwuH#57C86oNa Jr18'"6+1pK-HL&<ۚ# È}>:jҫű6afEm{$ " ǯ@Wi EE7{*/`2(tmk5d&|ȖMbØ^e)@m3% sӾ[NAoO<O#Ao9Џ+ur;,"'gw ]p7hnUkB+ YA;HS7I(8^嵩5%Qnhcps ,];^9SM}#X$>k:2V4v(`}e-`fFo= JQqNsY|.Q.=vuZ#чn/Vү7wywK),)_W2R Rm $I1R9AĊm%…V~8T^Vd\nVGZ`:K l2&Xť.|-3w<ԝz6x-+TØNnPnAw:UOJSdC3y$v!hDc((te0B†m< n7L:IY2:Tӧܭ `\Ec )PCWWCDo" Le+OM}wہ5NILY&jdל7'd;gt  <\# [^N܃8թGl3C P])J֤A;F>RB\3 #hM͆ota<8屙E1VMxEw|]d&e-ϣ77}f<1;A5E*Ѓޘm<*qվtf ,fq'?|( ' C-o0RAKT SMʟ"5\͍ >NVulD\(&Bٍaos.k&0 n^s?E#yL_E]4&sEm:Nـ&~ {ɼM|Oqa{*{ 4\hX,+A!YgdQeG2Y@qx?'gx{kf,\YeyL ~ӏؤ 9k*ZgZR핢7π A%8cuPA0DꋓeSYFpIRKk:g"$YU"LiHYQ r#^t7TxwL+ʮ{"$-n]vU/R ŝ%3%{k؅erk\Bgqx^Rᅨ-{-tvWDF5:Yd'Js2[lFIppC-^PUZd;;1ffݗûtYewWN#| @lkQ'@o޴#0N |~7"[!M{OlմNɧC.Pq;m7 w.sBT߉'r7!6ïz,  SZڍ,\:>߀8Bvq9Z\=0(zV`W.ӫe=.8X k\@ EWp &ߖXTNKX[uvg8u غߧj%)O\[鱐-{+ ڣ9 DuY6F<]&?pWNXT&F8; }4tJ4X\t_*§uWYY2j`ap)M+@K"tbHR m.oBSk\P/pvU5p{'Ͱ%j,R3'8P%0'W;n"Ahfp@FUOb]h>Ɵt~y|Y'/} 6[D9!!CXU%4 aBb;X/{4ae|K\'~[ä,]? 2]3",!{\o^XH|!&˝v؊`_BĪ1_EXaڵY+`ѫ?P5T V;qh(W=vN6f"fDnXL8mȇ~+T{@΂ȇ?b][*9PN3cU\+~__υƖ],_:T-}V!gbv=e׷mTG?zX&QzB67.ʜ+k=yA\ÙgQn vR[)"} r ٲ=)ۃ$|Γ?wdk8>I J:ꃧ2"c){_Lo_[=O#9=>]D?Kp!KBpn:|EnP WԬqPK~W~#׹Yӊf4VNpqMru'L7$z\[ 'ߋGNd)ہ2veH2xwdFHfB>™@^Ԏt3Y6,W`wG]0=d˪ &z(}k:t7f3=eD5ţ0u-Y'\of O>9Q%Wx0*R;mXJcKs .#+x[UPI}D); )g8q(;́ԌetR>$^mdwh\A#vߟEpwA3# |bp2d,F Gx2̘ë:5̘c5ȿhsZyY"O&b_^̌3 i4H:6څ@iS 2뻀~,[gc:ܡߜ%e5f M@^߿7s:\u(GXgـ(g'8]ps`@yT4vO(ቿ} 0ebu.ӌK1j7~9{q٪(eHZrF r ``Uqiju+*tk&_}/?k!LJSw+0!~VN5ʭJ-Ȱhq],QU LNkylo8X<G[)ieQ2u%y?fmdlܝk#Ӣ/]赤A*5IΚk?nrq6ڻ{~Wm2 #o+e&ռʮ+`gw;\B * ;I 88GL)P$}i7'|*(;O8 l lg N`6Y'*yc=Kv/Z ۭ U ,RdS|`U 6 ҂%cN9'ʈ0($Wj-' tq,lj`B>ؾk7fe;hnh?"^A2~Y3D]h~!'}wP+&nhANkt*dr)qkǶfxdGQNjM}|=a>ғ]<+KxҒ穰`.C]f"5d-|w)H*nF~4õ;cp HDcH뇜,r\u6R'{ĒM=#~ɋh1p#4N䰂sYŧ62 rj#m2y9O͒^_ $x =-X NosML2<[Q0_O>s~Lxܹ;[N},bB/ Gh.?݈=0̴*n8xoc`WurM悼P=R~QгK&OklL< gԨD 4 &_}"JZ^#Β@9(!OvXư#D !cUg&3!gQxD!yhx1bZ7 jndl4'b+@HƻY{L UڛF\y DDF?ZY7(2ץV bZE?~ptQ.Ӎ%@͕C"P72]M `6rp]}BE]{/U_F']4R80D&)G7(. U%L G I0~3*O_[T,xwI8 خ/q2Q"S'}3ʝ/ua5MDKxe^Soq%0@* bƕhѨu9ӻ9UwJғK+}TR)<9EOX)ðp+%Hlལ4…,}j20;b|E%^U 晁6 @Nj?~`? FP0NnS^`&P^' >JGҫ*"0x5/MNܤ}(OUr`!{4ddG)/K=ޡ~WPrlr5&K輄U0~܄w)MA#;r)j|6{\¬>&M=R"B=c֟5[= q=2rdN[dv--!Pk8Mκngjzo?(JpuOAk#KkWW<AAՎV[)(^m+DܕّDB12ֳf}Bfa*&q5iT+(fUa]otGh;w_gm#̄i<^JMw\=%|_6 d$JIInŐ okG ރ wK*jբ"n(w eTP㙢6 2#Cy*YRcgX5jOؚ ܏'/'38qjQ'ٸi|M3<4D/pk)-(U$=oru^]5T+M:WC9a1XY`|n۱f@㮤c暈BqCV2wd\R` Q"v3C2M5lF.ʟ˗=2opX]5k:ZPp|䋚$m-j.P S!Uz/,qNhcV@ .XEN)VMg9dJjʷTb=@ui7E(Wr/3 ]ya}Hvn@Xt} 2#uztlR}_Tc1o 8$\f#|T5'QQW҃ŗI's/"œ8ԹqH(=Rw)vŸnR>@'R:>})mj/w׆O.d5h}Q8s䮚NZŴsbGdƒۙp)7B  m[D" XpL$Ӓr(rgJCuwYV|hccj K1lJat6Fì8 F Gn;׬(Y9U, g4/lywX61IxDwJ[}9Z#܃nIQwӲ=+(ۧJV} bHjMQK b`uVn;.⢇_( oj.ȉ4w'/=.G @(BW>@XMU;bxU0\~!YH~v3[b+*l؂p&NR;7564iIixg y(D!{K昝 3Hm9]Mcigi_;1(-Eӈ{9wd.L nd1 }Rc}D r0$#<]ev4!X,XM>ɕVꒁxu< *T-dKљ=yԀ=@y(멋],7@+j9HR1U`Mg4ڝ@粟U^vRRqRr3s kF 9qC#gtv{&wo\V-/%vnN/}㊯{DcX3B`9[s(hx63d|f }  /`}91 g{p2&z{)ۚA!CF JZt=g l,KE!P[.Yn|؈, E33zdz'_"/D`.?W6!7 r~'G\sX/+(:S>$K/aGJU" 78ĵ&$=H4w~e)CC-JȞS[]e^qZ3S l¯ӎyIz׏8Łk::v,vemD5ТI]:ܘP>lmJ KUL; ;G<'ϱ:׽&~&(ߠޔ}IJ+!p̾gJSÑ-q!Ů"P'̋c9;_)Zel來41ww+/hq4{$7Y:W=ܖsck%^PAeֈxNFV_ffn(PNnspt_X¨7zrv_7-}h[&7bTSʽrKM٬I;1 <Nx GN,ߠv 1ÿ@N#ݳ/MXNZUmvf .rF~cPc Jfu [%KjԚ$j> /tĜ`h Iбg+ 9 S#^3,@SMO]sɾ!OP#CTL* j0@Ӹ,V>@0fǥLfOwkpF:mC=XF gToHLBOb(qV1sY#ߐRP) hmsޠ Q¿Ts&L]s 0d=~dЛr>4U>O`&2޿MUASsM@5b28s^R}doxO Yk+r]0µjY({:>|:Ӡ)6O03Ub+/&_J*T=t}'#Q:NHԨWY.Uo`ËG m ǸwfRL<5lcY+{xE,v2~Q͈\ rՖ\T(oc/,L_$ABNS k xޘ_x&ye6z?<cT@nk)j;?*Gj } s`~l#qn>5 #?%4n:Y^NԜA[y J4Dvr,EhY5D!qE!MVpk$Q")EUl& &Q!g R;h[Jj!z~?L1#)'g68Av^yC6-?'iex ޹v!n LB&*F&Szz{4tNJk %GXLljH. fĥJ?{&R@h2T80%ԴuבCZ{!h/tc|d N&Z\4E uF(sNKm.T {j=}ws.y6l!8wrWbל_DM,,3$%ryns(z 4 (Rhb N-<0g9@+ݮޤ o L \xᜰ)8JZW|eFAFp3A4.ڙJ0$WuoMq&*wiԏN?s 1/s>햖wE)|BdSl*(5G֡+2x/جrwiPPutNSV8VѦi8߀+~ɵ54aւ-wRO5= `f+@zcќ(ɹV^vJJi4MEOKM'vEʖo3s>?{nՈʏX _LS&h8K7SO wh.dc*{YI) Ssx_*^ Ic(p{ d%Q Zi tȉr/!7'a[ӊOH:E4*D} 4ۇu 2-"c "v3S8rޙ tz \k jt6[ < ,:Kn Ov^֨TwբojPEq𦎞L3fSW]vȠ:/dEe@z0yh 6ǸL:ѧLvB$CU=P07"Pr9YI3_urcx6 ]Uܖ2#خHNULNb1C _; 5}/ĉ8Kϒ&L{a] j6YoGaO{;f<0v&>6zw,o4--' A9$P^}H+- ^2M}c| G?Qsj9 B%&AG Р2G~p<*,n wS H.ץ[v-7E/`ȑ]c֮NڕtJ ' a x)Tu9[6@;/0_p"η1J{WKyl"!ӈ\^K /Lk$4F,eOuhR~oij\H)2,!MAJ8G&zp"%BaRLIǦS{JR(Ҵ'%b*erB\8̋U2`}vOt :9:=Re5ՋEb-G/v*P%U^YUcou&BX|}IeTR.s(=|yA{[KFP;ͽ6׌c5Pq*{]lWyy Ӱ먯c;XdarakAig8g BF nOki [Wb$G٠-4tiB.>}51(=tz܋34F)+(9KgM%8>BsW^-wHm#R-[{PTmëXzbOj5%T.Nk6kn?ɯy)RS՛U vmuv__&jj='ʼF8%F-qc0Ӷ{4b, 8Ϝt |-gݠ&UJ߇Aa%Cqu/&f duʽ [٨¾BO@KBOjem6ϷdK{d (E?Q%bGI)d_?* ]u x1=Z .`YdQk-d 0́ZXJd&sl9TAGǾ$)xV-WZο3 U!gOUvt 0%Y0cw!.@Yfb.&F>/@!VQ r@As7_$I"J$*LG$MYU a篫Nl_р^^ſӫ 'V59nLL UD/j{UkhGj*r YkX' N+O[ZUd9@"CTGV_Y=WەB:_xpLw061_zВ՝j3sy Գˠ"0sM=77KAK$'Pq97?݊hC9%򴲦s@}ˀegī%3%i|&2r:8ij.d1tND Knd:'Фa ]/D4DI}e?x_yۆc*O5"/Oo(0չ)&hDW0R BTU)<2?(_hۼ,alLeSVuzil<_ NE7;^AKFjk0ΥOv&ސ>|>umt9$#yc͆N2'V ]pXcAq3BM:Aku9 HGKCՍ_,~% Alh|_d;N6-fy_ɭ &:'Gͩ 72HZWR8ْҔ|!Lg.{os8 aU1l,Ś)Ma:7.{``U_Delv#Sg7ʮ5F3Y %m0#(BNU/p`h3lq2 &ԟ +x4d/&+/xNE&_'1L0O%ëS⁅ u过*_D$?lG ]*gVg5C%0|6!fd6 Kdc!/fo!a}ܘr;(QYrXe[[@Η-tQ|}Mjztc kQƶTNmZQXݒhlani~mRm褲'ô+?lJt5] nY.1Vup.~_ɚMuܺé*URN"Nt5:hL$ּqR(b<9ljծ&T/n N>hO5&bq8:}An|ei`%͈-O'DޣqWb}pxGoZxoEB~<'g W6\<:N-;H|ݛe%镛W džϴ~e#?'UFMR&XJn: sAAu&@1)4n*VEFqlڦ2_yF"~BL VRFҩӬD=mX✾- X<|Tm+xSV{OKCnݍ"PTuN ~7XC߅va01q+߫KxFOܖBZy#^ʤ~k^:c(j]q/<~diBBnSbUr_ ( 30jt_kz-2`uMKUB^-YS߰\/ EtXِiau;b~犕mIC OCgt;}eC1szOM'V9h!Lwٳ'͋jl<+9E? ,jEN5{F?5ZI5+'`!3PMʃHr5+uq+Yo`l2 <́h!J9OZRj`œ@[B@ `6zah_DIq0>`i5\mj0w7ZK!bn30Vxi5Yv'd.jX8r0 Νzne>Mt3N7! %Jskž6$:{IGҲzY"ߋEx,ǧ!c"ío.2?N 5 j yd7AxT|m`Zjrѧ:~gg.SBHjHi[l6mLU*kkIF[X8;̞d5/5/u"FLByU@f*i/x]ʃ] V0$̆)F6u!XioR_cqZNC~E:_85[0$1;?e 86&ɋgA(VfKNR2/ռ&Zds|ܫdC4)bb wE` 6sHg$MxDϛg/q!T ֱx0ϡD )?;uz{kj&oO!DݠOT65֮ׄݙԯm鎇fb;k>BҲu8t%x fR*c,Ɖ4H9y֋\:j+ QpXsI}W)4VдgM/1t|(6y%5yq&w J#I׎ơ_ܭ^"I+S9x8S%лuY$G?x(i<9_d5eA-\?gr{3M=0o&b?>2i7h>V 8Ѝ M/&(Uݪv =oJô29>gOR'?>FM_E nW1Cnq$?g$?e/%OFy)%CAKHSbDZY1}e鍈R8s VLwDEaܫ+RLJ0j2˫VkT͓ބT$J Y6)Kr?]aR{B87Дd?&';{;r%=,ĕB G$ oaE`[R\W\[=s^-̈́Fuo0cn-DJRflDO`DF!_G*$p6 [ލ-#L)PVe -ذkȅ{*/9N?hPh_zSdM!ъ5塗+9Z`c Аy[xf#»KXG6f'I(5 =S_5krXĝB#}^3"Q:F4z4vNAiGCgH0=Sh#8DaBIf.ᾚ]ՅW%*)z5|e5p$P\ɗxɭ"JOg&6JFkQSM*|}ꨈi!欀 "&-NtV ^gƮ89/ڤwo@ -m׵&ru*_$, g%Cg&?ft` 'g3AɶwhW2tTS>%?yFlM>tzQlz:R~C_[]$m TR3c1⡐Z=į%J"$C'\cOY++ p Kf\FoҙjWk:S`=$i=O\w`/\< Iv3YtHޚ$ 杢) [ȩeRi{aԈ#cWy':x=z4;)r2^Ā|8ch2^LڢJPy:6$R:YA>$=RI'ڽł޼w"#Ҩqw$ڎM`ԕV@[0^8,HmWmf*PH: viUV)jܗS:VFYe*J)Dw+#PWp&1seX UR0fC@z]iڛX~?*$ApJ~bZ`#לg_ *Q[01 qzMb3~xTI tNZO ,`B/~,A:)G1}Y0c>zuZY>i_wڇۺ~7$]TuԡҽREDI|p,knA®_xk>ueBE4 yLŽV&Ь_'S\4'UZʚ0?E)=ZyuZK(0O`!# ۂ4`7,IQ뢾5[C K((m/u`?5PL9F"̰$] Y%̃J(.nr= _ eX;7pQ.I"h#LQ1qMXZ)f>c,g\iReZ^b:;ęBH }"L?$ӿlvw? .\G,B0 j6f5nZBU"ğzT],gCfo61@Bq&C0SKNM\L^?i(g K:`]jȬ!?9VaB 6- dW!aHL>s&1˚: Tc{\x]2{r~ (h&cdH˻Z(`ϻ8=fdz~- 7ZW+#P+ ܦ9Rg@ŽXue9Z;K{\JrN< ~$ï& m k Y$ DאEQF{>^a(;(l^'ieSʮrd{.FKYG`>t݌d F_~OihUs%?͐.4:;H ;0:X*[R"oAɎG;ރ_4d!6XL-8fٞ?.Q=u8!->f{?"jܯu~gJzdE%xޢF+ȭ(鎔^/KswI2 9ٴ~ib+0zw  D]mZH_Rlk51Xk},iY4Vo:MC=|,>˫͜, s"qjL1ثB Mҿ6D3j &Q5yϞyc8sp$w [H3XR>DunBid` Vá0JRBkƱS4%&N'U5`$L/pXT~N}^Ř'X|B@nNA|ukop,ODj#k䘭J,uR=Ņ-B7 H~VR^9Э#OO?&ܜ5wQcLp0,f`D_? lH¬`1qk =ch %~!f.fw-VdO+"Q4fbVD)ozJ3>R4#Mhا"(=&6 2DMoeџʺ iЁtv]ثy#jXsTy`w'ϫ 9ޜy0Ѹs)^Ʀg3uڙo~_#'=<r'V Mhb y^5V.'x?EiRvOUME`V?(> ,a"\d/~S+fԈHU)=C5>GH1NviTdYu儒g̳ѪDf3nI}uwͫB -8`]K0!1 +nL>e"{MKɲȍPipLʑG#:$HVBrEĿN?K1bpŢK 94 *fpI_ *Np_Cሼ h Z36Qi޷s H$܉LyH>=jJ|'f >TM®T-pL{67e m7M6{YQJT3w@J`ߜBafPS`ԇD+~ ws5x-h?re9/05l?#Vx=)r5  c ŜU O_-S1V/^ZFgxyv().ՐOfCEiYG!qwSQ۲4k+C[&8w&J-,F4/N_E*5:L1H(tQܗ 3`)db-}SS8Nh|7zS6Zsڭ]uZY5ߥ̊} v$s UW%:d.qoI=K %jν2D;zb=¡7 ȼ&4!;6H]o;kwTmӯNX> ؆)T83 *\uGj':gY:g;'1ZMKܾW#Q:| jLnqAOa4wQ#ܴ~aVCS? F*fcjq^m d0 ] T)x*N犾 Wu2Jb{ gxM^kfJqs9Ju;oc>Ф'7/Br 9VK즵-_;z\M1pMt Ϡ'tڿ"_@pn)& 8jϰNӛ2^i yd\&jva5ğNƛݡ'z:SUGB_6N@׊ :M.6 .7u@{B?&'$lLxH'&U 6/_o?ldQI-AiM2luVTͼImq84¶LJ}7P UH2c$ xj=wPzfwx(Nj+ #lmJ7b?YC .`)x)^t?\sdCʳdh:ud%_˚ǦoR.rΩz}GAQ ɻӁE_ΕJdhgb&η'?)ivvV_ I.(X^BSlp=j<"&5KnX_2ǛJ3UpdGt() PĦ8ugc3Msfi0ujF _" n=`dhnr;6~2ľ~6+kL󟿻a69ʕz{č3ac{dϞgא.+|H Б$ vfutU&ڇX4=TUkX!+;>CK\ kl^/;oI*dT9O -K3f{(|n@uhUD ,1lfN)DskμY3dѼꢈ@j ?4v>z!H`~[a`ghM*N3&J*т6]4ؘ֞jsƋw"+V̬_ko0)\/"\]OF6<#4nING9svND;WzSQېh, \ 0_, 0[Ą/;7z$SP~D?10Ϛ_j40["9BHWeonx;TKzݵpx㲜.f&}=Pt>N u>ϯX# 8KW!-#+^rs9@/./ `3>Q2O-_uH M\˔k^G> b\qt?_U o'qݿq +&@~4V1PEv+&8kc>ڒ(1meR(\/QlVhnVss\˶KO y"/}'}z3a$$<=F²ՄGd9:`Z[`']$P44 Ҋ<-*~| +W*$aPW| ]leK` 38K HTjD09jA{'YF3z/WtQ4Lf3ɜϙ#,GdA̯WD*e Խձc=Pc<*c!>bd~avӍezRkU81`t !MuHmoBNS[{G-!݌ cF6f@ۺϰn/+T=_)Q`K47K2K"Uhs¾-+,i;VsdhxA#ߊ-ڠvCgZXwdEFVW ZnvwYA>ܬIǡndF c$e"D'Цy?l^L%zE]3-e1,x}5Me̫@ y O1%nD(19>p6R8A#%MV3W׳ uoejZoor!wbOb˃kJ!=y|5Sh w̜w@`Jm&D_'$#Pq'XNy8k.%] 1h饗]lz_VF8Lc-PPhef |zEn[Jޠܢ,by8HzZ2_%:iE.Q^m&1/1Kf(I{д!=*ް*[%tK(.&f\d/G7 :E'+d׿Ǥ4=} ԩE;Cw%J`3Ko ˀè&e~S`gC.=dġ7sHeq5AF;oi aTpnH/7`%W챡89,TN.Yݮz9$v;蠹S%&l3!4ʼ(r諊U\~ݠaCa_%Хl"-J_* 24vAG/S;b_P)`m7. .'€>qѩ)YsuMDC;ރҴrՎ_Th]=4U!Y=w=9^i 4;뺭NyPzƞ !tydToWd)tSqV$!V[ow] s zTְ\쏨Cfi]@G(Hl#``L*tiX: lV;Vz׌)`_Y`A/C+ʂvԅ#[X'pKB2VeyyMF:7DHrʬO[%dIՓv,$I>G㏈:*~%]b0oԀD^Tm=O4^ͯΆlAl/kV4 B;7Vݱ!ixUx+O>Ui2t5%q!j:^T<XNx@ZG?gMK6[Nl[Cb4EEGhsҝ $&,2@씏$R!"n[KMd ZZP^ʪJ ]aΔ0-a5י/:n:ß|qᣬZ3!@NэEìdF`}؃`D𼛦u*m|{ ̞'M /l""Fصm4vY~q>+ L[DMJ+`lDȖJ+N)Ww.TS2H?V5Zx25 o8gisEPp=ڬ9,z?UjC47ޒ%++\_^J5S>-YpP%ΣFp~K(a?*媵%6gX#.?f+,C1UJN!b泖(# yӭݺ?:]JYՒN2PdlD$Tt dhց>)[T%~oO'*3M|,*TK LE>/[s>D ˜P '?qu+~7F8T#ODX7m 4' ²hV [߹a/*Ûѥd' :AaDɤMy}z}4|I3+ B=\(Oa ,D&Wj+qB"hmg8S=#0cg~xTF_Ȼ"̊Jk:,% \1[pYӍ0ĂY#(Qȭ6E)!h%a$B_`}uáFzRBwTCJk"_琍10wkuQO[_\` ]ᗣڊx3~8UW"9TrU/SB'gd?U|>]y:qQe4BP!u'$^Pk 'OC#|z/n1u/x-ivQ/ 6%J'X.N _*>ط% Pd`~{DP٦*LySv[Ҝ!fe|NU{Q?ԛ  xjd>g (mpQ;1oS- MYJmV6n2K-21YWId:4a ^ { B]|Z`@9ǹỰOCE䲄)@Xva}CSŏ Ǯf; ajާ@-r0B^o `ʕ|nghzN'.G<d]ۅs6k_κ(:T"TjyƟ㶚3ӊ{sep8 ih^r Kq5mN :W ,Zl"Ր˅cK_Zޟ)쉔ۂX8:5s d gt [ޛ/99PRJ/^ uʹH'Sj,.çbٗ}v}z*m*:.ף-P4mC}?Xb`} 5pEm<搘N(f<հHW݅]S 3y}t!WDyaN@xOg{q0'ρ4{&J0f@]Q NCl*,_ W 6 ;Tftp E' Ł׎\;es!U-RAreXA@2)R5O2.(Y?6\uC]KΧ W99Vu$dɗHh-$#ġIYDݟfB?i ž~W2/iqAq`9qݦꐧlMj! 2ViYWۛ)΋QxB; ^r F`W*dOf}S#5j{jhmQn\]{S1OzlshkQ.b6QX#PGv0+o644@ަ ﶳRTƥU9h$2=s8']8Uѭ3l!'(Ax <~[:[P3$C-X̷`PXmMC&,%j_8 lg)Ji$y"J Y3& tuS=n3u2!JvAy<:bݺ:9qIޓnSS `*ISm,Kd>]6ʩ <[ M&+ M @0,ww?inQ(=06nՌ9Ta WqD{`c-qh܏ĺ=wu'uH脵nE  p+E>2b:ۏcpysG >}rjJdzZ(T35 0=߱+P ŠB#꾶;Tcb'$\ %xʩEgKæ4n 5 +&ލr ؑh)mQ6…;X V zjD<| MG  ^ c1 ;`yv˶3Qt͜u]ޔVgvMG$sB-08O ,<ȢJO'#M+QNOE_ng4gMHOu!9jQM2`Yxgi3"ʮ7椗ἌQ!&`nֈm놼zeL ӏI!b؛86ς'8?;p%|H3RW/-JCNCk%4d"_93e'Na])Eec / LȨ ;6>e) >rWGnT>e:Za+{%K e%mw=jx{m666[]쳼h(HBsB_<{Ʀ!{4Wbu_xBaؘJ`#8qNuO|u7KO7< ߮Qι+ {?ݮ~?++{FLbSj @}jY{ d3{duآip|i=WY?83\7+C)Mt!dzyK(5]ƁDą9y<ʗg?aj#ڠH(J/ r\} wulDl.wc^Mbltp ' +LGWdz*f r+dW^l(CAmE~ΐ/DIAzd˘P9a맯y&*~ 9w7lP˕]Nl~BvyW\''~E*}s6M,k޷ ˼>eKD^㮾GA.9ZZj%lT\: j8hg*Hv/,B=pd|sC}ؙp.hc%,٣kp;8qHRaC w#{4lE!8OhRTQ vuq0y.nōy0J$U71tVםjG< +cKh 9=%־TR{ʓY !qC[2n@ B* ~ ŪSLM݆4L_5;zpS袞q-V:G:.weT_2]P0zH(!өHteSIpiͥ4ݖ+ݾ@]ޫI 6s\yfccq'! 6Gi<Dq[o̅]aMvQTpU['k̳.,;ܧ-IY|-~mN(NcL!̨yf#δYIn:y\tgC,MΥQr>1`K~|!q3Ez`@vA}s nm(!kRt2wzQ]~ѕ[?AӗSltR`@ϿkR0 AO&Y@E +D8Q@[(I:\l{^ ZSJ!r2 ΝZ#,H7=!ÏN298>e\C08(F_5}2nV`濇Ǯ\׷68ߍc:r| )kYcdEge%?0(1A R*gS3+շCy^#("*%Ó|l aq(4irt3O<+xM+}zC5 uLt6YA ssz1JHZ۴KBQoOg\`R'ϟM$$|rȾ<$#Anِ/2`j8 ?v,q—͟@lVΉGLu)"L9½̰"w*5"e:Ro>ɚ]@'68ne ~u2ٯMSP%w=wĪbXl5d4^$ND5eZc&5W3TZTUcm^Ъ6ju"o|sMĐuݓ 7&;ocmq 䫧Rw¤Q,sNk|yJYhI;D 3 St E?}70=U3I>Ry"ӚS38Y "'!pY+T80g|( ӽ=70SЂ*^qu-1D78{C(kzTM6W Eo1Ǣ+ 1a/I*Dj-s ЙDO\zR<7@fkW D"J/aCXiVt%o^ |E=w]"[ @6ŗK6l nOR.xvH zyeiViS bZ}ߋ WNM,eۋzSVr"0v0\2 YNM63?tkEyX]K]RZ dVc-W-A=i19k,zŵģ?7 ~T쮰(NpeNV+rm/Q]ZF `8y)UDhZm!櫀D`8rչyh'یc} wIpVBQ5> vQj&N/=P;$NU Airʚ@ #P݈ioZq0S_zuYg\LcRS&/yn$ܘєMVc' p|Ml4x@{aY\ƌ0ʁLo,NN?4GJK w7Ft̘~ڷJp45׃Z=d ԏW{bDfVFϿ^#핓S[^GI*ī`ؑLB!A-L"}!WFÂGٿٞɜu)iQKn{=jjRnlW19,Qi/ûRԅ>LJ)&W0C[JfM?*\7.]ڗkR6fSP%QkPg㟩KXfM"w2 o6ϠJ$ܕENWcm#(h-$W2Og2ϭ)"zkc m(i|yA.̀&|.ގG$k Ao1X\&a%eت">j(!?+钐/t]Oʬ8 Xeh$E-H'nn}}U%Aٓ[lf[1cTmTcKi>S.ٻfy4[MEq#FvmKMOqlj "謢`D oLɑO%J_P5+|B RrS9>N$t)h?ZsqFŵFC+k "ڠ_09-yjL!ÐbJ*x=je 1E;O[e4,^,㱊%E&Xf1jBGH9.h7`/HidqfpMRJـfv|oHҎ&(fUn: # ,?MDY|x!PK I!%豈-0tT ]?D' h?w;YZQQH_>ѧyw| f0G܋졳qr~MuGjϹ6?xTŅ)ou}Wi^5^ {U/k6J|^W)P~rqxjX$ B8z4NmO6_sӸOgI/KXFTͶ<%Υн%wB\((NSXa/[>Qŭ]źz ) ;B 6Q(m=ѡ^-s|tza1ZB(qXWLIW[zPu;4fM6nRcׄ r@+Ә0eOD_{s JMmqRyOQAa>Yr C~lr% b>Q3駫R]&?'_1"cQg2Uhkn#+|SVe)`d\Ut-k E2?/y uC&ꋒ8VCs{+iChjkg flɿJ]%hfJ83@Z[ Cw80mhGl=&L[MK,T͆VUbD' (m[C~;WT7uHO| f%Tmz(_! pPoKǶsYHm4}O҄mLDF3[H-b $Wyx i ҠCAWoT5 Ϩ)2ZY@DFdvxdAU~Url! o ˎ9fEAWQX+j?,ǔJ[G 8纜bzsu/SH|cn c#>߀d=R09Y,jOrwI*ֿlv֧[֤[ 4_/o!F8P5V@SL9ܭ;^G>1w,URĖe14]aJXT[.YR#"Jtz*$*9+e9GBӓ[UϱK_|,9ˬ`VXA,3fZPQpSgW6pp#J:"s`Za֔ܤ9% /ciBIM3+?²K0dnx9Mܝcљ=\j.+q٭*DN~"pvێ"ҷD:5晬%cM<{~ P5{-aet'0U_hN8{BhlDH*.S{basLlP=<sp"hmTq&np,'AndM$dZ1l/Gk?H=o]ls.CV"NUi;i/K>0oڱB!ZCPYpsTRue =к{J3agR>x9AӊIWGv9QD%V,.@ʇ+pF !@DLхNGwG>ydTn/]0A!)b]k>_hi}=4D/p H(+:9Gjx$V-](z. ų;V&{$=;R *DlHdžemEI.Ji[ AulYq;$^{oo-۪Z!<<=O"km9]ƀ Ӄї a~1,ጬ2R-sλ? GΥmpToa,Ns#>SH"vxi"IC[0`TMBUCUHK%3O VT"yLf6N:O#}irps`͞zz\"auq/?eij' iG.0~S8))ᛶ[45n&{+)G ᱞZp̣֓mHui`;SÏ )I|NQ˪0g !Υ.<ۉTM4 dVIA%:e/??ѮF5R m9vCz­:ݞ48)X"+{eG;Dq. >gmU܌9l`oywɷ\W{:CHo5Pk s8%Rg)7R,VU8ű]Tm)%"瞼WQN꘠DN >LR՗:2w4wT85f#ȩH?(qӇE8/a7)H_ n]n# 3ОVB'Ȭu%dܝՎn'Q: %'SGoZ|H}P] CQkYyi n{_*Uk1 *w 3!@Yoˡ F8U\o6WXQ!) d%a.j)khYZs2%Rp|USMq(`C0,{\BRɐʏc aVtn9Xhej COSd- (=5/!Ftbw[nLVml82~]D㣐4^,:vJ~K<̚{rC܌j؞`Ov l=0p\Du ~r!hc}d[ѝĢK=(#LӯL <60YX0 Oմ*&!˟x[mkrhǧ}PZ4kN srcbG{4d˺$.9&{pT[)s-[$2 fp]+NjyonW2KHBV5ݥ7e*2r:3㍚2zeK1RVma1v%ۊ7dW `(T>څ$CB/ +=`X-6%ޠghEu I.OLxr,&v ]?7S xX!fT>,Z`5Ef_.!)-T4rVY=]>c$ bkac!e3ybN2ozOaϐwF-+5fcU 8R9Ja,ZzVχ K$s@)N)1TCU[HJn 9־G172G:8Uv"b+ !ی+ &X`EY`0^~֥|8 cfWs߃Prŧ$H"W>LAg'SwIa<4HreJ>u@bU6?=}=c"?aUv wqc*ϩ{ǜ|G]{a~ӳjfSz;x SFK~W{˻=Bרּ2A8^ !֯C4%ؐ~L.)Kg^b/-YV9*lmRUkeljKrvt4ς弗dop׮'c :p!܎}?-3\VЦڲHbA-*VY5_{s3dLEq8̣kJ _g>P-kU fPh48\?,kI_Ґ/;(d6ǃ+4A8%կbE1< ]P0jVnq`VrybV sLHer(;A{7e[6鶂;$_ho{DX$TogW,Z1cyg$:87da])ֻn72ٖ*;VsJ!kEsp̝*b{D/gFL>0!v&lơdTQcZyB[# t;a=8mP&:|Q-q Yff+Ҡ{eua଑L-Yt-.v”čƜ67º@̈\(@_/ `HS .qzeqF&XMq_sϨ#V8̬-DhMzciݞ(nvBZ5I-ǚ']nEj>/NҚbZ|F}QR_ |15xVSn dGF$^{/, @b)9N&cv~;q?Xj0g^u&o\afjGRuBg lAG2(K:FIdNA-Uۧ6-x8~ZC@n5B؉ g!2%lў%T5ͥFnoݛߴeGtC?+Fb9)['Hlu D^dfq5u )=c>,-IX {r׮v#}Q+PZ$ngX یg]&2x7gŐS!Jiyʭ,zIWZty,U6jK3 oAb,ymȒ%>ETqH>M83)|_d~^ JQ7>Rɞ\ib-C yc}`HmsU)ONlxF! ":,WNЎ㹾Φ ܄B Z2e7>$*OO"3,KO8@wbV#ksr!jd O,?>0 ewTh9G|8c' S@Ti#PX$FpSVՓguqU IxU)%.0ڈ݇fQq+R.}Eٵ w_#E7DY +\13S#V"JVj'&PBa^/;W/LpWϑ߮3'ra` / T.0QK;ƒjnc?mj-\LYE!aI pCFJ*j Y!mQ#`T0=mэ|3ief+nch'!]O 6F3^pꂅUjސp/1N+sWГfp,Qy24f}fٰfW.dMuv9A9޺%}Nu,s/(G}vX>&Sx, 2+LډVnN/G֡1в D*ܴ=-؜5Rˡ#1 mngzzyx|, FWw 4Gh3}6n,еX(GYM'uLKIUf)jjX;ˋ\dwԜhGii)]M$\S|K;ovf`GW#:gNvʪm}m2ķ2Ut%-g/t"ϡ[_@vgVdc,zFv)M! ӿe\Z1wU}]2֤=3;U+YԵ)\0N堌`Lo'E}юԣ} )"Fw TX*n1."2 X8|8{&ʔ"%F\@D?؜Mo)a~{&@_sEg=Y,V5WmEt>5 `KaKR~7 -3|۽ۤ"on5Ȥ_~|1Uʸgoā=)+RkKYOBGl3^K _ n?'6K+|Qf8d&309vT&٦f8kiNI [k~\&c8KbT"nиBǒ UA2^b<0&NMZozN `hpD2,o&9JExt]ELͨi;ܚc2,C78pGIJ ;ÃepNx?_o N֨;7#\?>0D雖{Q s3짖?Wv<m41^ʵ@}U=#,hcC`sZ߾tssQr& ?a\"@3=tb m'K)'tzk/9|땥&ksY>h2[&AC7pB[w;;X a9H<. o?54|?#4oЁٓlnZ~O~1l*hx3=)/!? Z>].U7F M?oa׸Bnh; Ε]c،RàI{ cx )"м%71c"ǵ#oEW3`9Y>+HV([]=ȤܼA<A3 qa@WK]m_y}boFǬt˪o0򊳣T4~9\EuyRrֆVq>͉Ij_gaz^eKrشK$.q*>zXvV{{0d:HRzs4'/azl5`6kz')TFf7z*8B /yv;cgR_Pvm{핅_A|T'ZgEwfFrp3%{2AOL΍[;\@51{bK&/0!Z6䎐m+bK,"@$:w Pew ♘GJoAJm*p{ vsFgGA2E^r o:\թԆޯ,'cM, H#])Z&-+)%aB)UNTnj."^@SJg^BtsTۧvy; Qj3s[٦txPr2yn1&% -ʐGeզB4i5hWE_w:HVnI$ڏ[)ꯆlp,ʎX U6_LʝRo VȞd%P@^,=59PY3iv@ө*sGGu='L(Crg47:z7&T@L8s 3Mp\9w֔QO eQ?/1% vvsνGed?c16`0[Y!;۠_h1uX!I ?>7ntO /^UT5\r$>M%<},z/=HxfWIz{݁NO&3n7c!ybw(L]{ Ku.1N3ʩsO v عIt ZvP/v3'y*'u 2˺ʱ2Z5x88,⯣'㰪Vw]l_B!l'9zUsVX*7SJDt U_[BSqq8>.&`|L={mw >ݸ9o̺fot"ĤNHE?@ٷ' {%"B5/Rfu=@TO+nm6&/yhVC'tFFeݏj{ǖnkWf$5,>y'vH$P鑕|e"};/C>gc5"b\oȀtpX)o)9 )7Kk% e&#d^ 3h&LNb^ԔU7au)]n;H" ⧋}{Y_kc'Vpbn ;*bDRNzxe QD܇>@7/r\{I 4 J15ΐu)?ήDnĕgkgm[@-.Rң'"5@z94BKVUum.i8&Wii^O x6Q9Ժu]o@YW?.( dv! 6Gt2&E`]oq@% ;KeǥC2r_4փS=2REetsȎ 0"|83GL )2d_R+LΗI$1AyN9K7%;^CL}:3#LآuOVE 9xδ˽>Ĩpu]t3|f}!m@ޔf!:k0\Q]ZnUj~ctAJ.w}jڿPj';3S嫆gi5&@ QF'OE8dćUTvH8H")4ZfPr;z ŷ(~*1U.R3ଡ଼C] ̔ړOLπ30Y9<0E*o#~\JugT`*_[d< oӟC#sx~ld~U]yf,9̄EkEԘMu]. bʆn wRWr\:I>aq_[u濽fקݷr05c ]֓<}H Cn1rV͹!y41}nƵFRA GfҮ|+aG%lF%kU>Jn0ʴF1U䗗@ jv %-g i _%R;d&'X{)E?JgA=,w hCq?-hJ$>vD~+u/ JPl^ꋯb.ftmi!hE>jHM|; "pQ9_GF$E$a")]#~٬'eￛK.<⢲*?Xz3 .dEˍrQE3YT!:wAbi0& R yK3km9IPmجR~N,]bIeEֹ$ ~}&;TB..-Dӳm)^kՁ~ߚWFnmVMӫ~ S&p}n f1ES]r8pdbOx)b"*+a˹BX-'[L<ڗ08w"~ev>wNÉe9[~vk4jPрLH_{9D ܟR\ɀX~ϫ]6 +6w=D_QHYb!Rүo: bk$&O8pMyC6_JրQ]dy*7εb'n)h*_Kic` m7#\$fYPuZ_0-3|1KEB ^ӲR6cV]WG+s2у6HyEb|ېC#QN8sXYP7^| %T+M `PE#>TFr)棊`mtqsr8H0i n bCHBC bV2*lAlN{.[.f (1F18U%H.ƴAI$z sY~M)$d$ڭB\O*ֶޛ4iQk D;B 鏵;Nv.Rw"HހfB0L-mOȱ|Bw{i-'1&-9H#~Tv [o^MZҋY=ҽ@Mv,RDqN`*^S_v2;kdY"~'^ɩajeZcLϲK =E^{ADԨ 9^'No*Vss`chRɟ;nܖ-/'\9Ch6%pl(A\?|(PkɼJ[Wۆ>kg4 7vl ;kx){wAbvzg* FbkhYvhrlZ;gWFotepu|BsxюƅOOΘ鶳x_c^?'6f7CSVL0F^B&/Z;\w@AWCoWaI=1#e록oCvGRd m.K4ٌ[j2'T͚g P~O\S?fہqV}#)["ȈM5{-Pg}B?a@%[DNO=[1jH>C%MXs_:t3 ]~oqrQy='̵W@=һYQpO`L҃&qGΖz˘oZ&KvGcW+)ҿew ? Gm-bw;{` %CZVJ[0nA:͖kDR_6_'X_\FiᛳÙY:S $z 5N/QэSM ƣ¼E"QA dy5ODC*viR#p|u})ΒRZY3 ލ@-̀MJj02k *so/ӵXd{5/rNdr|zx\2?k0&<6/D^*`s=WPw<]3=oJTmlO&঄]K.s*}'hek Hj,P%9nAUe̥Bp\qF)9PYN&VF#o}CG{ͽfV!~ ϒKk$xcBx $_Wj +>(\T 7>$8٦)ՙ:tFPV2^V YړnF =FLmV" f\+ a(DOmBF8[F@(x(泤hHi*ȯHIU֢p#k5`K ND*L b͖+.Qc`nS[Xz- xob,&Ơh˳I pӰ%m鷯ZwP"+IØĹ`?1*R³Q~G<*?3Ij<]}s ; s(GRX /sB%OC񸳂ڗmM~h4]Za6_P&M eDZEW{`s04WcN8¿ɥ+;;0'͘kUiQ$omPIS4Tbc"'.]㶿 xŃ%M5f% w.WgW{AB,1d_29 N hٕcLfvR"$Vi/;0{ɡ~er!/Qu|~P0_yRdl;lsӕ\uEEa#q"UtxSB)c&,nu?`]X;E(v{cE˷M(mQz67_8+'yE2hI 46`{uKe=]]9 7ct ! c"do3g< p00.A"-7/|kPNj-i4L%.6;:.ҳ@G@ӗѕkH819Β r침}sX:?0$)cJ.ԕdVHh/'"./IO=e, *;k<^{$ Xw30$r2a7R`>wi^CfwGB[T9^k,*PG+]cEdT^s0gn0̀nx6aN1HDѵ"(\;# AQ?ҕ#W~] 񗷖v4'Fln+:t0|Z#YR_h>"V#Y6h5vB׃74jx[H7] @y4PYB2)n%Cn8s=};=x.1ye%c/ƙ._1:!Kqg4 '{>f2Y_(ps&T) IE)wQe<^ISf|uE\o+ge3 .)F?lf`pNW:PX; !&]<\/tr$\prg#dFoN`ErlhEIJ`5 ZagRn876HSލxS>\PUsa їUʌY 0;Z<ύB,;&?!i?9XJ9ms~R]cXrQYڸ)붨Gn[3ŕV%ސ~[8ֆ(}g;UX0'AZ.yQ'y\)]=Y'Vgִj{Kt0( )ё=oTl,O T:6|\0kᵘf;T]6<$|JNS^}[3y6}M=#7PHTFЁAEd a$"g5<Ы?EϞ0{l5oqo" $Fkn "x;m<}cH{|!<|5Jk8 )Cb3#H_]DÞ,47?Th%1~6E s?wׇ9ekoWH2ZDgIr3a2!`@ RO/\&(#΀79Ȯ-bݙ9m~2NƒA mU~i"fG;͕T[CZA,Bp7IƕTu rg6<ܳ6^?@txE(sH$RA 3\)ZdqnQlZUt'w> \[w91f?v 麍JDĢ:4ބ7Հl(ԯ F)L$xф&J\ːx ?~xa{TJ 7%xo?/4d')U(*@4~31nsB 01_i$=ӂ e8J2'b}OzuSu =zݝvO0.nPw JBIUE0Dlr)ћaI$7ӂ&'}N:u#w޿=shcp_ebx Ft xZLժk1 wxЌSa]G"Pg|5;Yb}On?\~pc&1Ѧj@M~$"WvhOKV1s Jf7hFl2ӟ=d-1pZ1 *ir-ߴpI~{È,n'\ }#:I_=B7ŇEIb1W1Qe)!4ޒ p|Mj!F)$WmؽDLUFM-z3=qs˽CW_ e3siL~@x2t;YսGM3Cd ?xZjH(UE{{[OVp{xvY눒tR{ lCm$#{{mrws۴Bڙ)uaXXGf{v  j1&ucOԽv%LRB-?_tWW}!ô[ˉ$%uX1tl,A0^9T`mk#VBKF`sJǗbA5Lv̸FDTAQ0}FC82m98 ~ѰpUgrx01C^df+߿R Z__u pz/*gs=ٝd8&ze%# g>ICa8]L%[&n vF}Ԣ((#A̯x2Y^ֹNkKhK*θ=w'C/,4J^;JpwيSzfm,,gcwN+':}J_UpɉA9̤bb|\|h09j-'-[s{X'eiWSk|4R9 6izdW{l#fЅ+1I.pDZZEdhĽVbB+;y@3E?LϮ-$Q/6axɌr-`0NY :XEw - {r50eS))fO-=5<ۘRX`Ji ggwUẚoSڱu T\lZB2HJ^.o0HQ)y@;;W{LHz34RFT6 i4"He$9~AA.:a+˛!Uaj?=`v*aUVS1L~\~}r,M%o)Ԇ&ȗ+޿,6 WiᝅPŸQlDc!"k Gc4Wa5R|.B;vj1Caٸ*5CU\e;I:"Zx]90huE$QߛګG*]tH]PrbalqNsGz7م-@~ã5O:t8M\ Eh\T&jRE;σMꅔrl\ yqc9 άV?SùTg y&.F7gM8²O]@f4Y7G~÷g`NfM[zB0w*~6M 1@2hZeG- ڴnH0O ?L([-#r?6?\i@l! 9 T\)-_2'rrkMSLT%O.zE#i 􊮰~HƚI{AT&rds' Z,Emڊ->ʜX<6SXM#ز+E5|zf[b1̃j /;IeL^w+>\rIf5vč!+.TR'"@ex}~Pbh>_rH؃Y׫ ]Yʭrrh7%HG[schJ'Gkx b6}٫Ç!1 O[Y jAQHKdZeoO!A7RB#.n.4i}֨7]_4Zrn~)O O>=t r{ @ٰEd{j+~im ӧ{Z}IV J*f3FRvlZ5 !`53%O`rXm@=W>z=[Կ5[#g* XlVS|AQ6 uW ;7=BA1(&7@`ekC]1 迕]k!M{Ӭ ];`4^~:8tht'}<1̹CXԐ YśK) `~/r(/v8@{dH3%G%b/fpI3"Ǔk/a_dKI5j~XLnQD鯽g ^!Vps/4}[DX̖EV@U;'T3kvL^XG BΔQ/i^˞QBd Q v&NA7C.p_K,0ǝV){'٭ E9k#p-޽3{U/KzqvKNojjP?U1V4 KYP+&!hgsq>g1r)0~rԻve0?SnpCT bGdu ^ qYA%·`vnwtB]k'=!#:,s^2?#uf ]@P^Fpw.$YLxnę]5-7J=r<@3sdS,nm2Df30fm@(7),0LbuHﺳw^а|>&߉, @ ܪzrur_'Ce@$QDh\#U2NƓzV6"h5|J6#w|Sv67 a3CN00A;ֵJFTf`pjtLў-fjDVqrb9.@'xm<19 1Tt%:D%d'FH肬E_`9% ą3 -Y?:Vj4}"ئҖ.\Xڲprzh. Єf|#]LBtJrh.B!ÁYsY@q,-5EZFg<&Ӌq &X^328/}H+\ 4}+XC=bɥWIDccA`QiSHZ)ݭ\KǙ.XMGӨ1g#x }Q5*k lha_Hc }ߪ*rŴ׻'V{oG|y.k።3F2alK&u#|)2y2^*pnL{@AƻLթ㶲gΘXEi,J1{#:re3RSN|Z3u>$簏Y@v-ΈU`R&]f:%6|p՝zFh幜|F2&VC:7 Y[_mY6sv)jGՌ.3Q+{wڅ%U(Hѭ%2X59Rf[τ ,l^}Le$N"pIDfыǎkBP#e\RP$Ck8~"-{\% efQʘ0+([F-O-)ҏo-HI. yyk9*{36 30:dpzAނ,Hq["jcүqD7jNvt!K,/VM1q-ʨ _x秭Ij t-7!kA4R/qiOu`d4a;a\aNr`) $*=<@=X:J UD և?xR>]etM=ؗ IW$QƕKVm*my;h= y..(dEV݂sbg>gU6{*ӪAx^Wc (3k `!m8%_OBfC9@s=)0t*Lb -qkRF.W6yhjBWD'$+>4trE3b~Ln+XM60J"7zMx9+H&̀caUAi5T7<=DRۣ/a$ga=L"[mr[jdnT \yU: PcHxFv:<%`aXzf@Qs./W5o:dA1|ڳv:s'KT0h|ǧR5C~ؿTh^M;'9czLB佝j%1a)KM@N>|s^xYGng_CkI iSz#J0ڵ-ULvFwv!TTVB mJ:W Nڙ!ccD'a9wٖ N+H26(^wг[dp&I2z41c&COn6yuiljh_2gy\E²Q)^7e܃z#@vm; cy w9}n+&*z!vze3n X6CNAch;?d'eǝ{ ;YF iL'c-gi5`tUwv Sn&EGwFC݄,y<`6|vV)A}30+*if/rτ) 3ˉx2XG|C!6 : / <gU<?4y65P70R]rk'АmL:T0{PcXH>\}N2XG Α"*7g{6 FgSNK]aseOOu ߃a.#F }ʝd˱@J\|򶊳Jv)X܍ -|hFWMvhMՍ!^LR&j'v >6_J54EZəOYM:N K/SfT̄J  7QWEPx:yչzBJ":'!@ʒqjh9lȗ 1Ut^ƨhHP*3S5&ј gŊjҹ~{rhLĢ  BPj +)ͽ#S %U\]j8[$qm9jIGK(D`I vjSl7!œq < D6?ž!hc8b<ҵBݹwtPYcgR6 FϽ|&iF^'7>.0eC!@2$srW+"WC~}qL n<nbuɝScԭw?M["\KTØ@oZq90$,+bK7܂q"JNL o:538n݋p+ t@ruezDŽFRj0#/c᳦ʈ]5; v <ه~jl}vP /+OΊ7G49auS@0)ɰ i9p9H7cj,Ac}?\b $ӝg۳Hiu6B7HӼ1ƤfwbgS{MZX%)1~@Mh:Fˡ Ӑ[< țJհ_L(8~\u6(J(kY AAD& O-t"0kMaËun9gͽL@E|;|1WT%V?\rZOޥuy)چ3RL#6>_ZU4 AI*,sՄ6 Z 緗ot :q+XfV v)xWyEMg%J 3tʒq8'ϵM$4ҁ>OU 6˛_| D$Z,H6 ԜڇQZ߻=Q~KؑptǤO/b0pl$muuѭM&-"!R#M_κx9* ŎH`앭<.$;l-K(S/כ" g_8AQ,d] t#C75sX"g"=LzΏvK M#+)%ɷE @T5%["ngs TPI/mceV9F(5L7\ǜ9]hViq_ ҥC?>+p'xtw=!lXx4ߏ9G i&؀ۇ'iL-)zi/Tj|}] +Ą$` sK=)%య6B | }j,eʟj=OExyP灂}J#?,|$(_s̡TQGڈ` *n,; ~ R[%vчnլŲ+P;uw0^@? v宯#?+A!)81Io X4d[.|oKz(AqܶHvb9$pՈS>(6 -9L%D6kP({$g7F^6ĤʊL7X^3ڄ(q֤YwHVIvqlj2|A8W@"7?So#}8eϙ =gdDmXx|Qi6Z婫pFX85nFbA^ %b;>H36$@I&JN[[IX$髑T湈 {C(R ز2{v-so$`AnľLBl59$:qC,eɬz{[`ʜ.t&OLi-iXDc) D ^Z1MiќQ|Q<t1Դ](#](O_TLՐ '(}I2.޾gAJ?ߊw'io!^CEg) )F; =[ʟqRykeΫ]Sg>!6Uµ㎈fc=Vk\?QviF{ƕn@Mp 0ӗYD Ϸܞ7H)-/M?^ 'kϳ6E;ưb0b,@YV|klV0 -ōFR++°y⋀H #΄_K7E@3Qơ=0:G-X&@lD.C };k"_oԑﲙR~P,:,Uز z&GHd9}.Ƚ;\K{)tK %:NDz/+qUb;~J>PegJ(21𕟆LO@TF-,N'*»W+zYUs-|@ZngEF7;[U;y- _r%b/9}ZIsf?W$6,:K5OoGܻ(!_!5d#fTx>Ϲ:aU|0ov0]k'ad&Ag+^ky+*fM^K&6iD_e %STȵ CEN 9_4R?W.YiI5L=?^ܙ,gc'vceD\x (0CRK(>ލyP{Q\$r#ۡ59X]?2=#/_ Rr޹#)BB$6w(w1Iq.8}.j!:|Ͼ5`'8c9#w'BE;J OM{d6 xjQn6`O} rMLӆկh?6bmRsa}(*y[=dyx!06DW`n -6-8:8=A |w vȚk{5`(yWrGyw˛NVoT(>RhW` ˞d'5{ fL|MHx6A8r˄A5R筛W͋ 5'{j[ t85$i$>qE@sOTzl#>`"wc8Ur2LP0"$*/YEǞsr[{21]ԣ2>ƭVJ)^',kO5(iȓi! k]h%h8 |V L7'5!̢?Ȁz.SyHjR}{78Ȗ&,( p\r,o5Bh..4wb^f|9i_(I0=/\ꀷT%Br8`)ՈkΨx㦖+5P| -պԢ]0J{$,#x! yʗaٮ /VΕIwW^у&0^wq40)Ý!ex>]qB_mh~遙6 (uqӏqDݦZ즛AM8!?k?HĹW{Bhkq=?{JO7} [vBUlUR 3Y,\$j9UoC_z;G G,;;4,+RSymL\]fA3xOZO;'+A4n'ɺ5"G^9g9JU"r))`q@vK%0.Y?mϭz4w^x@} nCaoT-Dix?'p7@|rFwVd =8߸s:a5kiyu>m/w(GvEI`BsA~[}lnSecϕ²84|':j[Br+ӝ(Yvʊ\= /g7΍ǹ6~ǜp E¸&&H!n^[7k ǒϧR-`WfM٤oS%?ОŒxi.oRoDړ'i.`vu 9rhM[1S-.៓l\]c<Xj;ERnMUpPMh[Onp2}(l__mT7 S'%N;,M_S4r8( jV+|.ʷTk gWY]jS ;I?^6Wf\;uesq]׸tYݝ&T)6Ê*WuYޓȂF@Sx`3OkL?up<BA9ܡ %+ v jOoÃ\^csƔi Ib& ]{+E-d,̼?q%tVhhj\@+@Fm ۑ_trY؎V%Spq~Q1>Ц hI oO@.?'M-u̧vd{9zEbUK@4F q F=YqMˌNOOʣ40rELW(:,D`RW\EB., p|d6ż'%"jtY֯JoȑE&}㲥I8bMp֡5Ѻܓ*:bɌGRpLF f,7*V[]^] s~A/ 'D{J;R(b~+dJG8ޔepf}ښ0H$sݏ[al} B#ΤM:3ZXdj%,Ҁy]y\]FydPzQ{SUc b4H"k*YT&oOMg Sl|? t\Lj& pRHnX*wz=ou5: Zgj=Rfm ,HԵ~v]vI4?i4IZP?<]!4% [[wkU4%[vba8phHaa)sK߬TRK"o_T^(;3XV>W"$`pBmFG^13U-*MG^g0NQ8U~x\0RIrJkbjud6IΌMcɵk^lc|m_.dYF[c;WeMb ҏ gEx`뀝k%ǰ8[r˚˚ZEa{RuB7w6c. w܇# < y;.(}' zX5Yd#,2sxnJi^CiRjj&A*&Ǭxcl'٫D=]M}$ JYH]$/v O/zfPo++7p#h"G^) xqp^C"knjZe(؞wIi\UI=P3Ӵ>JօzG4Oߨ z%OOXr0̯7j:%PMf *]8ClDKZQ2/-x ,k^wLg=ee6 (k]O{j R) 6-y Ln p@T2KA@ H>A_&Ԕ٫Os2Z$_!DxT Z:ӑW|N,۰I.J2,תM7HB==Tr9bc=/7!in|F9f!m'UʀfidGraV7~59 )coBMvn;07.qJ%6SPg|P VFB,jlk> KFP %/נ9T;AS.0tU"W[*C=K2;gԫP'M|eef:[!'H_ʐE;W0[S &U&'r+U]Z=3ף&~&'iFTcU絇Սb}:ɐ#$9f,J#ntև1L}=Ob˓QXIr3OwIl 䯷Z&bnuX|i l'+crqsG"\8噜]y90)&Fm 0N=d,[ߖhMfu7S,.%)El cs"Sԯ㾂 Re P}`p?z(S\wyRS}XJ綕[>^$oPYЧSm]b|*gWece9 DY0TY d' Oùſ;v<9hHRQ@?H7j|r TA{.m/J9ӒC%g,סu-{aZ$U/MX)tuaH#LH]qgTCщ sN-S V wn_IcMe ICANDU_}xNn^2Ƅs 0Өt^[D8rvP/-~C[6\ߗopn^р\$AX6ᖬf'Q:]FY ZLI.tU)uJcYY+ VC ]chx6-*Yif#NںՋrLG}ôYK:hB׹"&|M)fu#u:Qy[m=y Ռ4 'dڃ(5MZG }DC0ndoQQPx1dgx!(>5+;a߀X:AI  X+FXdhG^޲aHw&ËS .oр+zQ+ LN$cM`+F F!Xan48Z TM)ߍ;8V@^|ȡT2^w{r3٠Ff/ nhSL1vلӚ<+wv V<}kDDXd6Ǖ Wc~}o-22/hd_s]yJKc1Ÿ{ւ@FrBg%T 9YgUD99ާBNq#Q%V˓PNl0qKWI[Mj +uWN/ѕZA6 :;n|G/f ,EaTc@ҭ F;Y}+\4+jfng_Yf Xr%ں@Bݩ0q_>=ziU Kc%>e~yKѾ'IArT߈h|>҃\ LAe68_T Ϲ͏WZ{en5/d>$Ų)8,] G|:$;:kWZW^~aVݖʃ{^|O=M1qHu!g\ 'dt2!{c4I%y, w^= >'`M6/ڶк5qMxQ$BzrtP6mnXV[0lVW~Ae653ddV)zcЧ8y#sliSj!m _@Nσ&g wwQ'rI9ɑd0[a{a}Յ#u"I;{ $N/(d:Zߜ,r2'$If•˸dI8uow+}u{@>,u^{+Q"%M?Eꁵ4>JF ״.`68C~+^LSsŃSƐ䕇n\e9!ّvHCj`UEY;$#$і2pQ6Pd/qnCZo߂PǔͅbEVMI"˜~[ H!0nr*Ys]p@!c'.2.A(?e%V <'jAK}kޟ~6q~aN^wzQ pBWYVG-2X#seVH=*،]ʓӹN2j1#v9:76 -zⳚ,/4]x`&bAT/J`Q~ۢ u(nO{5Ʊy?UkoaiǶ-fQU1CnV %1vPOkI>JS,ǝ,^AfOxGـdwU^1DU7\l'hXwz)h- 7_oYQMջ:ذV9p l}/ƠPfYA!ﶎ3#rݮ\ke3EuWĹӌS餘ع:N+<f~7yJ)nN5!H^4=/K- Gf5b>W)&,Mސ}w1QWlBhlyoOٚyR]BKc Đtxy Tjʹ>=3 ,Ŵ=0*S|QP"puOB.uP,NnQAo n1p;y JwhBztWXT(G`]?qL=MC4U" oQA@z%l}EjvD{VdDiM`vJVM"mgaQy^g/ǮJb/+SO-ڭ '^87#khȩlp{AV?~okz {P ͥp [ nƧ+kVi/0JtؼR";wSZZ!HmaaBrgٱoul2Q;1t&iɸĩZ'y$LuBd<(={T1 Ԣ.-w3geͅzlz8]F%!*an&cz2B{`6)peܸ>H>Y}X}`[Aa\MW+b&ڝ݌eO/" 7I&شh]W9}y ~Ŷ.W֍m P(ܪZki?A 癩POROƷ2OBB~ߞ!9f%U.m7upB_~akK9Dfּ˽214l"b-b,p [INN牴؊_Ċ!#.&CŨp,#'ᙌ&pV}Z/XT=XMŹ}.2{eyzf>/9kor~VAuEyAHcV,A;XsbC#bUݎl.Qtx(ö\<_AToW?߀(b0xny~~svKPH(qj |ѵ}+&B粑s#?0/Ж Jc);mqLYܓM<7)̨ ܷ1#xL~?C9 CvU} qO_Pcs 8(ۡ;;?xa$ mSGD˝jHt' s- i)?j Ŷ_WCVBlWW] y #zTzU{ 1~ RmÎ@*cfa͕l6i}y8@ |ĽYc͎{~+?h x #' %*S\VE,x<|<:t('\@ew1*ʗiBZPi:P%4픳N*M;݅d&E 3\q՗cy,w9!Q֗rp9)^%W?(hMR%O$/wU% UtB8L'!(@ʴV,mmL^M+M׵. #hou6,A$Ǧ4HZS%ˊ#=hVb^ߓq Q}l-,L Z d-"&ƴMt|JVx}mO11>?Lmx(r 7)v$pL7V%b.Бe-@Fn_'jeW5ha}%W%KEch3Dw DK&`NWB};x :ԱR~A4==gӉ@>EJ(_ ^A#`o=|"9Bo.RAy@Kxɏ $Z%7AOlTZ>BcEƒOW{k#h@_1KYjw3<5W鷕0VΒV<*6Lm)2+n [qM/?٭xj:q}dQK$ VN#X=23kaQF[M;\ٺ -%&g"N훘K{ȚO-4Pm6= mtdTx-Ýv+Wwohq.u)"? a{J^W!G$ L if`MRwLyӮ ˮH%mopQg 4Ub.gǽc~Ȩ9ߍu8ӂK%B+B~xote^=8614 ZzlڋRm=`yTXI+B ̮BQWp#|ēnAE?j(/s1kݻYIS[X~?YĶz?W_L*; Y +aKy8uxt[X/M`Bk6d{*J1&y" E:HCu* 1 5RY~ !ŁS *kaU[dٓy~,uQ $tz8;ޫQZXw`gK>!ͥ |ojD>pu:BZGIA%mWiIx]vį~f[DW8Tp?Ӿu'w JIDe!يKx\.rU{C}m"6FHZnXf[/uMpx{̿,JqOr'(oJlK&xjڎ9tl$2CPC(Q(ddl>` T'BғVshSvrPEgvE"=ƪpu@95$/:`ݭrFת"JIը^WGҵ:*coRVvrw콃473D +Cx{ڽݳAp<]bMq~s祝Պ xUyTV2g gR(hkx%BF/jTX\\_+F;8r_ձsg"͙QVc(> 3k=ρ[i!ܙ}e9S{v`E 2&!Ji.:+(QnhjWVϞtSvqC1sByl[q9}Jw]&kpY 4$)? ub )?͏Q]s YI=,\brq/37k)d$f! yXP&Mؼl@7#2  mHx D(*z 6J[ ZUi`θzU}h}".R^"F鈷zJ3~}ǡo+<̅ ^ƈИw Y~v"W̏ d]ͤܺ'{:֓r\ 9tiU ;AH)q%|fE8kWzwkٴя=H!n R2ПC`@HsqtʬA;4˻_b.5!=: &e_!O:5TDY~nֶ_Y'Cw;!SE uxg̹6{9^҅3ga?HpjKz澶tKY~2Lҗ3 ]7P:Yk6Vf?Ԉf-eBKN*/$h±9 'X{1D^KxpomՏ q9.ZFρ8W^h!ayXk% )\Huqc72Ɉ{"F Nc}<]>zz%W\0vހY. ZC ~f엨I35z*M`1ۚv}h-c6h/nGq Fm̝02D'm Kc'1_-][jpb[5fzۍLOU.# .%%+L*8JZiWU&d "ڳ[cIc e>%ZQ@d k{LM÷B[Ac v:;m1NBD:x,o2gOH>HVl\RIr[k&$@UAN9Y։_Ėlq|_gI/G9b_rlI&c.O(3l.T D8*sTL_AZhx=S`|fGg[joX4=mgm^F>\;+Hu2N& Xhr*w"H@Qy)S*dB]0)n6g|a_)yL*TFct5 68$Tk 2hb/%vqxUqB4N;l~&-Q EHiGV3μ68L~8&EMGďĚ-AP2UM&%W phxdD)Z{h| !ype6u{qFFU2Y[d_m<@҃S *`GhX'3ctb 9t p4dQM]ϑimCJ2i*,Z8XO}@,6%Tl޾ H1kH4 :Lhܤo>\Gg'\}k0_~FWM|>^JNO>ZF/p5 Z&n ͗0pC. +MV+PI%D=qRyPSQ|z[/S?:3q(ߕ~}|[Zd_JO2 NEU R|[[kMVԇ@l6`"DXM-vmi)C*ׁ̟X*ԮWt@pWS<n(/^c7ݑ[5`q OioÍ][ۦ 4>ĦbZ508JO;0lBQϘB"=|p\hސΣ لBdI &4ɳ".7X{Cn|"7hpn#1z ^' 3Dc {s]~'03}TekJh9Z8 ؔl$/OgXT̈́QѰǍ7Bg3rP;42@>E.<;/w0b3Yh4Al]DAnL_PK(dVE>坥(Y49~&$ ,oaDU}-YLg^ykT$55`T\rh{JRI0Ak[hWF5")! ,4 6-gړMEqdrRbLz4zByTѕXݐ S(hSsCLw@_> m'hwe!Q.?CPyG8 n, ,\쯻Jl3I1T 1{kɡC5ZE srF)E(@8]bdi8&@ IҨӈ{4(}o"`IĜ| U%x\ddLl:A6sR!oE(2xiWȆ^Lt dBf|(F}P^lNf Ltw|[w@}j[NGµK5I{U+IdѼ :XyY\V2$#_*ʴeYdc\!a6?$?l -j^9kԑ pQSaP; zMM@jI^hu0o%m8r>ƥ;'bP}z٥qW nh~5g"/#$sOvO&pӺ Ъy&xI8f< sUA%YXI% ,<#\JjA!V?\MMqv '=|KNLB* yuPǻO\xeuo/BW3%3)MmP#V9.ש0}F: ΅3,#QT@r%\lDLv"SUQ*`>u?(иpEz+ c#)(GG+VL?! aVղλ"_\(߄W"&$HqK V;VFb4=.PvL PLY`rtǔdb& [bUt `1sO^7yf-bb'U@ίgƐOHbDȘ葙 +c#(b-z7Z+wie!:AcR)Gۇ!d0[6LIֽnHEjEALIP\Q }NjYk$5m<\n#Ȥ^[c!WoWřՖ@{ĻvN2:34r; 0ǻ'wx=t_h1nER\)k_- ?A6zB3 UY,iWG;ϥ֋ BVv!I8ˇ"Hɱ+E%&Z?tށ+8+,2 Y0Qk):UYnNΜ})p/aߘy;Gx+z-L;$1;7&TeyA)G;TM8͵ݧ';OPb2*'[-`ns. gv BG}vGno]AX;m\bu'>4WLm=j6(_{5@]Phra5TCܹW@o0{*ٯ='Ю 9F`<>)ܟ19mPb7YŕBB# #GZ ]u1_EVK»q~vAt @L t c>G W:@au:Jp `{iݜx*.MrVpζdX=x^S]Y]N*ACp'_ `M^JlN=kƌK䫤@l5VV[0N2Bh(CSz ,|@Yhy &c*Z.bVn_1儭Pgƚb1pSJTD__#^,^$w:w(}5KVxm?-1Oojxn/Jh\~<; dGc}Vndž.] 6֠t#a1\0T6öıϡ9>N42kJ9Mp+*d0s0RE>Hy#j{XKZ[wĚ6FI켔=&Y [QS [|anWt Ė#,#5ʀ dlQrꫥ_Ĵ{8Uti:ɒy;g21#]-BVcHs~WU vYk&(s9QbL7zǤ\tHZ#VH}g J}H.عIҙtW%>Aum,OQ(;G?{v[W;9Ż14$uc~K0"`ZW]DG2fl*3IXFmk#`ŜQPQH[nlЕ| ~#Mk F=K SLkW{xc#)H_p+7ԇR^C}c]neӘ?E˂#S7O,Hdk yW@^4B,sWdKĹIW+?eSyܙsO_mYf9%L&>(9=N/i焍!(/+ܥ?oE6S`'"ٓ :|c=a)_V2ҏ3n9](dBRͅ^ԗY٫0|8*2)f>M.EvYLwta5jx9߽H ؑIޫbmӺc^m'u,Ozś=SQ{8z⡝(^ï3-K ΪoL|RXW_4+)\!YG~ET²i"5}5oYu!Pn ĥ{XhR]Y.O;oYt"WSmG׶_c+:A{f)~T[<1|\]{R 2>b_h|H~9`B:tഈ׽F"tqyS-bXGQZN 8օQmڰtG UZ)R׆<['F~aq&E(21vؒڤμM3y0Ԡ#?er2diMQYU2XuұB)09FgވnhAco [=lqQU}7 "e usYLwsLۛ4P @]c)`S#}^)mﱯuF%L!-[^Y[y➹bNM<9؈{Kp@ ɐ~Mh?)iU)E^%!߰}Oi.j5*mˉ{}JTO OӒQ}us}N͑Ѭk" jFoM_ms"8C<,.ג3߼͏?M []lqpgFccB߿n皂/Eg~1VTڼ.%!bqN3lٚDl(˚oc滔VlЀF& qM8-vB6$rM9܈3}E(968<;0m,1cq [g9kvｐLȞy= ;Jex⻨"ȫd"5M˜zRnfJ30+CX$D+!ݦb݋C:W7E~]A qgX,zi4f~z($_9 Q<+}Fȃ^J 8zjȗ$9S8 Ƨ< Ưo9 1r:)LHB &a3䊜U.[5 6,'QGV5"VHlOX- 6@uOxeTk eZ7ޫu?&ɮ:ø(Se냄Q[p1TWlya%ɚ* Ԩ#-OdYdtqs˟tgᬤR*JMͮ>7qFigS|(`~5Eq9Qx?_6ڡM9 _{ds+)4;:8 wLO|ӑɑ' |#:7G0I$>uD2഑_6ڗxEA l"|F$ ;׺<4h\k싌[p\Dv-6bLdrϢ>j,si*HWirjUF]gZ%5T%M\rX!$*=qCV5 .1itu^청ރ>JO.X_Qc/\@kV;I*jҊ_Y 7tu%I*tJ(ڝK\^GxAmr[Ì৵i>B|f;Sd6d+6m*OLte-r)8R VŶy5])}9@/·}i~o(y7=mJIou:_8 y5Gp0{Q|9yČEvB9|`2sX䟻wTiBfaiΈBu/Q-Ii507.ZcqN瘜Y#ͳBeWwl^l ~86 1pΉRJ`?;)FŸ %TTbGeضƬX3mW"8yR@cBlB쓒i)ǗQ@$o" @6/Htꍲ0ȝO[l+t5W80&KwK|֞c"8lYbX[|%tgEUQZ mDg~g`XG46R\2"ݰv5&1a)1Nrʣ) Ż.zHcHarG@?ϧI`Ȁ~DltCR|Q8C;Z1ܤXúav^11Wc1;Q~X6\8r/mr˧Ouх'Rڒ풮@A."W|7!iw7aS*@ em9Ujc;i95/V&סE o9:[CF[~ 0UT|MiCj<&fi Ƴ7+4p̰QO ŠxFcO-Bt7wX3@=pmAL*6G=¿uT CQmg^xs DvUk :"2}~S3d@4و.smvBj?6֫Z̖| gw\>Z:ALO"zAOǟR=CzoXJYYRZ5V# 4Db/ 6\Dʤ)E 0#"$eOLYawp2a 1iZ(s[4O߷9퇒0dgS_*[n*M8RbuאHxZl<".א8Q*/ZVp$~}YJЍz+nqռ)t^S`Ȝ 1WKݑb TaYPwZ;lkvB0M>WsA>Oq"` ZǢ?䤎'K*R,y.5e|]j `f1(:PQ  ol$1_8N= ]%M,ٴA"x;I` w5lBpztиcxɪS;7E7UV0\ _m򪅤^Ko>qdon3-/g%6!FzEydyLs Ч; _ S'o݂T4Yd]5, ٲ# u sx9leQ ےn& Q$CjH:osqJFBޒ*ᛠ+A4ՠ=2Q^y}+tPŲ}GU9Z]Yxq Ŝ]i'I|ӋyTτFDU\^uM1nnCsX.YM48Gbfq9#7>d5Cg`FB`#Є6vkșv{.-LXO13gXm{45v=fZp_@>YH0@SТ%5q07 o9Z{~z-)Ux|*9 $בbIVmP̍kթԔ@;q0@gךϑ6,`/%ARgk Hȉ׳Qlgyl{tуDS BޖWs_S+9j#@/n"s&My&!PquNG`QSs,K 'Y ^<֥p*3_ܧ|L)B٣c M& k_(0r.YU믖Duz7z.+fӪw~O_n䘗E;1[PX94oO̐#U8IؤJswT%]DJ hs`[MNJ1^%rDZW"}x8 slyK*&Yn>gBmgh*zdT ve)*vY@ER>@L,пA~!K_! I)f5 &$DgHNjո;{K-M 1&S@o<͹r>&wD\ɚś6N?ȸe_ COn2@66ɋ`8ybGCpl2{:磬Q!g7s q`1T% Ӝ.ֵ ,z:lhIĂ E<S/[~Y#5gP;j#UAws5' ٙm%|0hܵB|N qW@J"fc }WA7+((۔P<_'Xm٣qo]?qqhwOrqb`570k=dP?shHHA*Nh_$[ԲլL]H\ $u\%ܞ={5K,t:V#l2gv;3Yaz}i TY\U}v_ȟoJ1h0th*k%CW62~مBbG :5 +l~vwJDQһq2f$ϿH_`݄W1*$MB;d`Rwީ&q_-K&p}b cۄz39U73)T|aYѻ,&͜^٫:nn H,}]9!z҈BܑNx)Ex2=zO9gӠDf٢{,v xe3O;pE#)-+n'zVv̦ۭO_c<sU-#[AHR'r?wxU]). nЧJ |VtwUqgv%;#G+HDRsJJ=F㝍klf})ަ(-}5pPs1 HEw WM ᄬ 5|.z޵pV$SK{XtajY.oV]SsǨ6I5ߩ~Еδ=Mʴ壟I۽@68moj=ڽ a#=aT{N\1rjB sGX x eVkuڝr,K1Ïp \$[̊1y֥#WI_'ux>@ Kkgh:{$%hڅml>Nqғp!=Gu&<܃q>Ǩ"y)}@^os*D _' [UPJ|T-+Zm"ݰ>IΫ,sҒF`CȞ$hG{ 0?MDo$*" Y#Owol51h=M79z:Z;3#5gsqk:nYvQj78M,UFj V*WL=j:E=I>㷀E854:xwG3WiwI甬FN򽾔̒mJz KH)t2wΙ*Bqژ\M)Z$`+@. "`~1UWͤ䃱nO$$!`_* Q)XV1ȟ$* PP.Z8;EfBT 1Y2 k7mȊ.p$mE k!q*赢^Ɠm~?z Iz)OQ cV>8[gU#iES{G-vT.^u\ G9YZp!A\@.>d}RS֭a7mLO S$$zR%RHme$]5ڞ#fm`H:F"b҃ݟ6<'|Q$w{R"p2C 3-ȥS6S.pvㄗGmS.1j#ш E>GC $(VJ8H(6/ky͙^c,J?IsEx{A_*%a:8H0=Փ54k"7w &:M}"MJq%9e L|5BԎѭpN[zʂy {`$evU q\#?$>j q]]eAD1. `O!rΆDM\+vQ-v5#93rpZiS`3 GHų.g4!夼cokmhV\biW^EUHi4qX#$=B)`V1=)gYjc<@fj 엹(4 NK̽şi>-z6&`\ ngmN_5s=4u|eiR!H5W.y7݀}!0S Ճ{ nP]8D["KOfQN9;TJq]34+ c V)q0% Z. AZ/֢dooZ[ D'3'Nx %Wr)@]GxaM>~.zބPZ1Lk@yS)>WA XS ,b80`E󗡌v ܰL8X 8s>ZOݫhXgO`|^&ԮбAkf0Ҟxš _bf5b{HQ/WPO÷].|k2a?}yoрk+(6[vPmm& _C[vh<KQm=&$X;% SucLS>\R/tDd'==oE7T +ecO ڿ>j3'xCVɗϊ  5!{ށn7Km5ALQZ2ziyWIY :A:"l.Q]1E+Cv#p/mP0aeNbtvD*`s&5݊D+?:-7Ği,D[󫯁|E\-f (v?ݷ D,8-RkZE}31KNJ)J RA_/{|xי(+Loԧ/SD}4fo(-WSĿMww<һeΗgmn2-^ۊOWNrq~;:AmH|JD%G*>Uk/+R@{b}OV#v/GYE^Ae)%%I*) 1po\lО#nUx^#ۮmCGM+ENzQf}k-?N &ݑ"^ja; v}^gl<2o􂺋mƷhΗSTE i݃̄~1hZzС(-IbXẮW$W+BgV7qic }udUs,^u[ /wD9Fq8qM:M ܐ@_D=&{,{.vdBr~-uS }. eg_B0^WƦO (˷>v8O'_dF\|R1)VPXKrnUcP8!N:]~=]{#ige]*tF̀dHEqxXk!+lx*Rxm8yfX#!-GZ5A1*2{ *twPE٤GTE#S˶~ x2ȮSDȯFǀ>1#^-Y$=$` L*v3u1%;KxC _ حB8Wu^H"ΆBe VZh#,RUu)đ?k 9v*,EЄC9NL@pﻎc7-kE25LH~a*Tf/' " i]Yre ^l"HWGB3 0 FB]"t9%:@.{U51QFSz e8G*VhJ <]ՆGp">sUZփ@Z0+6vGy1U/UJCзfyȍtSGzf$(_z QV2 Nz/Bu:(NtpXW1sc_>[z8/2;c5+pٜ5U Q{Ǽcjk̨^66Q:cDaD$/0keYcDZ_=bqCLDr $BJzH虃ʰ%:LUW}@w? P/CbZb3jg4Yx`8BzPgtG2GSk%!U7HQԩGz շEbYs nB{<+cEW7䵐 T|%ZS>.8e &3p씐4pV~ `5 ࢕I] Kɗ%x9FJ`gt6)<b2mJo~cUc"!Se :Ƃ>a<_Z3>0TX@ST< <E7E"z 5  u+-}{6[qJ?CᛝD)N&4}];F֚.fu$1rwe(]5)/=hВ{ y$e<9 R+M7nDkX>ejJX 1LA R c0FΆ4'O7)X(uXJuTx 15=X:n_Uc5+t4&|9*OEwL W;B`j$Oۇ;̏PHW"Tck~xPq^<_Ќ'4u<$r_Te_ѬcGt#㇉;{ wNۤ?ra ?sr^ʍp`-iX%-eHSݟ&ySP(2l-F֩k'"x+h( 0s9Ą"K3B; |y{Jy }q*FLuEFJ^[;mp''?AqobFVԂvs:~1*g ,8tMDCe52% ?tfˆA,yQThxϤ1VڙoEDAKX/8x6QO. TK=dѺoBeM_ 5N:v(bgIH{+c=zǃHg tSL-*e$w|_^v\M:}17,'~GCM:+xqX[.7:K ~S=;Ὅs)KtJ$Ҿvci{ <єOʜ^ hFMhit.S: +(/cfOލd3Bb%A y%Aj{"|-SyHL=dlD80rƊ+K 5|YS6gXU0W/ӇsOϭV 8-uxN"4v/^c+6n/՟$C|LY]QRη&0TaV,UrC[t#3'Hl(mz}rqNki7}Y7%q wL6 ]%XMΑP2OBN}5嬋z%K,M*F6*{J wbܜQ;#<+ӡ:2|!ɩ<{H4mjiP$_6nj,`Y25^X23pcD#cud 6j$|6Wl#ڬjM.Kؚ31l{$Y~gWQ`;߂m'T)> h<=竀j{#zw!䤽,@ɫH =HgW{I6FW; 衉T"4E`jޛO/8NBG"oB^^֦7E\+w@&QIaˀ4ӘO~bNDnv%-<.KJ :ǰj 풐l^TU .f_Knn"beQgP?>4_0A|bhwct3E{_Pg<'m{Q yt=Naڜ}xқ2kAU+4׏X;_96D뻦 @CQ6:ZrdovHCxMaUnϦm@Ap#bpI)܏4cujճPo̮4?S#^"*n1ZB*K+yygF?ƃ>GB&kXB' ޢ/#{]O2;J>X0~ GuW4 {=o祺My G2۴eT Gx CF#1X{UiJGBD6NQO!omwhआ˜^E菐Jl^Qp; VzK"4Լ,(T]^esL[Za T7 6` WE$6q\HB$Śs99bHL wALlqTG_H9my L։ }WeOa[68ًڡ8drW-(<6[Jci?ohQd?G"a3Ҁؓx>>v¬Ym!yԏڶM*"82r.E᧷[%:TbX_HkWM/}rT &: FZ#g,Hb$AE 7$F~A^M5qSb onh%q=m2Bj jm BYJQ P.!έֳwEuK\-K3^F4r~AxƸ@W;2t!G>f vW^l ̢db{5F]%U\D`qȠr #]^b;75b"mS &'h6lD11nk[/#Sp]>}]IZ:xCʌl"^[ܭfQz} p&YRN…SQzݱUy)xO@&+нTGeD Sf* c ѡHRZ! }ȃ7U/'^t4Lme,,ah nD觖躄zlu# p(fVX{_p %ȇx )\s>I XRſ} ' FDm/lzhZ\QOobѫ$(UԡOd[ ҁ\}}touVW7W@Ggyga0HJMʹD*={5(-QfQvZpkKJwqb_}Z`9N}Gl؍Uo] ,M{o3sN=*е?Ylz\ek.[: bKR7wQX _(i`_go>4D kFkiƠ6Za6Ns2DN>gxLq.qz Ўw_|t0ֵqpG4MIO2{ l>@G#7*%o1@u;7dB :zȲ1Yԁ4 PsT,J .zO_p$lg?ElǽJ!'D><+QVP(bԚFH⚢m9cxd˥D&sJQ*^Z/Jyę+wE+/R̨OHd(Bp^(qcӲ5ld56\;YKxMyq.wat$|*-4q, [,Hl7XY +Hc q^(+$U>[rz޲)+!TKa W")T:bZXuyr{yH1[nDb''BKLJx HT\e K)f}xrj0T$=mOQ9/J]@<:nCteXYw[R8g#9 "Ö>T>ɡлAڤxxؑXZsOl"}|KU ljE;EŔy*TP-F\0 %&hCCHZƒ|5!W ֪b m}*C|NGZ̶^3!3+0@cل#{JrJyۉg}1%mgv(юVGI#. )UdD re09>d1q('&מ _) q" 924t ?{2c,U)V ~{5G"Ec̍f'|h=ꪍT1u獲(sv?×I1m`?vW쌂L9KIq^(|w6K&V&iJ[!y]kƎ |J+4g"6O Hy/N~>,:hኀ~g e"GUf=ut?$!f]=G# =|a"cVV֭ vF vfx)8-$ I>N{Wzy0[c"GwTշ0̉3Ix蛲_υ v@ܵL3sIń Y Tަ6d N]i~>Y{{MxCա++>O*vIKq˽C{h-&8E&}t pN$eT &3 ۔2rGͦP+J_ݩ W4y%j($%ɗvuzNPcקmRJ_ $ gF#je*eN+6n|nF{Q%[]k8<&5FTXKv#~6RۣJ.8МJݨǧо{Bi HuY!]%v&N4" U0DT+g=+yQL+e SCEq*Yy`V/HjWDᢥ.}=Lsw?u[T'h ?ʻΧ?Ƈ.N<9t_$Z+ds5 _c@ZXK^1&SJvV B9h 6*afN˫:#WO/"ӌ} ^N<ơcM ||Ԛ6JwV9\(rGz֕gӅwRqZ]- #՚C1 P-R&P-I`̂)yi9Sx&Vwߒ;h-|s~[PKGL@r܃}`1~ʾ*  huBy3ܕ|"cTI,$6*v&=(Q2=u86a/hG)'hcUH_{9`9=}_$fG)r[rA¯M3c|fĎ;|ôd:Ye"NH46[7s)y'InQTqi (GoBHf+6RDhBo2%!2}-4k 2$]ڏgث६h}"[PL)+l_Jy jHvzF\ ٩MVŵwxż0onY85BgcFj[ʎ|HKVvb68A~{7:YSnmuE$UԮ0߹e2k "ؼ~FϿ נʊf0A@z 6UT+N:Q~ *Zu_Ҟ򤁑@)q+t6^;yFX I&d{7>n~X+׮l:2ݍ~+VIAswA-jYεTd*Vn})ƊudCN$Qt4Jhߡhz)I /` UЁ)j377DT;L8K"՜?^Hu_(CʓTI(gTH@'RNoMy|X]avT)hR4 kPEMÐXǜbb!"a$(wq 6L~ڵ,+-XN,a^"J5@ɻf;)PC-CP3pxE5֢8n` Xu[>Y!-@{SG=>wv%mݹ=%(wAGdmReAgŋj.Ijʋ[\Dk"hAkS@ eZlE]/j%wEl샘&G.Te #=+#Tu.%ڵyW["!Y@@D?V͂@}:ݣZB.B׬ͽI`MKKTHn厱Cd\Đgg~[ u*KLKpUzo 42dXυBb<5hǰ]б) KHV ) ᧿U>7yf}m8k1,KI1GsyS'oFL(csFUEm֡G5aZQ4k)5]DŽz"ߓp5 :g T}cq?ܬPcS[s*M"0¾=xQqw7tMU,$B7trj!^ p/"vϽyb,٩V1GT饾IطnX,HWL8ګa]_e J59iL:3w}V|,|c\$P/ Έx2 xCd_ejP8x_ 8`TpAg3vAe =Su^)^0 A%<<#1ږ$_tvz::^rjRpjBHTndi DLؓZDCK1D7jic鶀 ^k崋Q!PM%$K;t`cAPp\X C?SP`tɆ ut_-vȚ.р>Y;=kT唑V{GhDu}%b ~zYP%߄iOPp^4.g3Aleʳī^yQo2Ý5=2L/=*bkYdfPDϬRda ,0rJC%c [L>].XХabu1LHV3{bo1ϗ¾CEk9Ŗ5^*& )jb"olr(}sξHC5*WyVg[ULͽ㉌->'D6iz&Ǟ>d ^$j$;+_fê"_9]P9fu]ɇ_5/Tx_o<44*lua.VQsf #ggs0wYSҨ:9D6ԡpS 2,jlK-@U-4K5rǬQ\#V̒fhUTX۷lq gq&^Km+.wLH?q@o yC(7.cܨ29jqVA*"U !@<]'~6b^d#j v{֘_Bt}_yS9V,yo9z'j78chJSJ;+2`|Ԁ4HZP=mͼLS2-j -)*2F{m(S[^YaM" L/}lXs7/X`*!5 Hm&@_q'12k5lj j]2.8'v '+b9~gg%LAVc[Fg;%2 . raeTlSKl M1}_Aϗa7_T'RZhBW`IH0%bSKq&ЭIʲ:R")}4m]ؑ2)Օ<,V зVH#rB xphCgdVo;Ibpy[!\u>R!.hMsٳ)]pB;}%M2} qU(gCt]ϩǥ)CO'` 197X (8#Qy#ݣBdd|۫҅X g=P o(߶Y/eޯf*8ujƄF^*z`m/[ W\"6 6)ɴZk gueQNZZ`NBunWkthSx,=fz1t6ZhR\<:!h S@ D3}[^=Fh5Ql?b[4,*"bق7L'_{CUbH4*{HKa'TvLfi^.!:J[?e/mә#-21k"!5.f܇mpn$]vv8Lǽ6-.5" UYtͅ?xuВwh#yC_%K RT8) )ΟzR5In 8j Ap^էp+G3Oݹ19f:Q> c')T[fdtbH:A$ y4ezc0w^{Z*ִ*KE'y,R+S;64E1k~ ?& X@uӛvơ}&p돘"zǶ#cm_$(]hgϯ\^r"X`k:gK%7-Wo'8zTz %@/p`tUqf~%=WQKaϽ1'lxճ`zl *#F~$e#kWP##ԃ#R=C/^{44]k܁ٚ'O 7VNl5cڲ –Wzh1j{GhѠ22D礩u=ܸ%-$-Ccaf(l9e)!dvӮY/+"{8LݩK<E3i?2=œ}4u5,̍Fȥ()Հ󌈿U V~+P^B >20[''zʎRʫ%HGĈ"#E4Hx%[Ip_W\9@yu~)y2ÿg%T ZUSKP6IR(#ƒ(xʦ\Y 9泇46|H~ݺ͛^ -֔V8:9lhT_W!7|AxKOȼ n"45ap˧Ǐy(ba`z"L>CC#`yBǡ|cXjW<ҷ kA/uJc0[ |`-$~+ [ +'jݢr SnN$a?^Ub1[JRL;`݆մ{ʝ?rv!o-UYd{aa.|e7H ",BU>ZX#O!dgT]Wo3¬G #6jЈ:+d‡1 JybL8lP4"ݡk\+*{vgw\H3˥8sl/iMZ̋?dLH  )spMoF?l_5 ΍Y~̌=Q DuGkKIulZpQUK_,F Ioi አsr^\t4Y9}E!XK@l0EfܤIucxyF{.g+q^է,> $잣*qyiKTVdfP#Mb^ .`z&B3.NyA 2\TcXqN!kv&gAC5I9"kb[eR׿t–aKqEePw( T6M\J0Zo9} 誣 {IMrN|?w̟})/OqmOvP9|,s\^6>cgru;Bd7꨿tb]zRԆ)6URf.6ҕHi "0hry;zu3eIUFzh![ޒhe!nڰ ys#tigp8ccsdY;!cup7P"{ߓGWh8pM{uHg[!6vm貸Biލdq g\"AY=LY(M3@Xb8\x՝ybJE!m@Y7op %! W]YfR(nd|x8j60d zBL>y:- U.u9ٴdBnie,'#}Zw+e9XQWS=?BXWWo?%?$=23Y{"#3^nkcO܊pn7y߹\B+$ e UR'8pMn`K*1-jW(51~Ʉ$qg 5dee^-M`aΓ02CL$eq~F{:aX!mT7SJ34'Z= ǧQΙ' 3B_PGp{WjUpNFE9VH~1YވW03aĤkfXEAa?)4˔5l:Ϋdկ=x Jy z:M WAdVAh?!%V7d;YHHG5ؕώKicOD_s}x/)L/Nz-J$UK >DP^grpX%5-7HVa9(0!4-  Թ@e[Դ1'α:tF܈uEw VתbETW68޸kScij2uX{EäL߉ωn֣/Dif#~vH564j6Wv*Z\8ڊ|k,wj^U9rsU`Y m_Jb!P?o>-՟ѽi$ ~#ф&`9Œ΁ }PgqE y984z+Jj;*9X=@eCa}m}ͰD Cu;:qL; ~ۉ> A(*äa\fK?Lp}#QO /uݱ|cgz㛕Yu?t OW~}_h/`GYC.@J)Hco)A& ϱRm.0)fʱTaKe_I==tRnxΡ Z&Ƒ۱CI o/Z]+VqCQ0CpmVI8!jbjR5aeaw@~7 CNVeb"2QbAD@'i4 óEX][wNTڭ|1*q"м9(k I7C舩ħtziغOJ"2{nG&EB tИ᝵rݺw?>O!d<Kxc,% +9g []gP&E/tV yOTjj~Fޞ*qh:Hsڄ w O'!^U* +1fo1kp_Sd!f祈`-*϶9%Ϯb'q}D88-8=q5{g@֪Qx6($;s眷7LB8,؈c>}$޳N`1~]ZDuID*+Jg?X6VYMb"Z ]Wǀ5zSnVޣǜ u88:}QҰE{\;`6)%ULXb_o`T0š^(Eg54d#^x;UϲW3֋[ģ|7(p6&f"mBP`>/Yf\U^܏_0J@ije-$ v}z$.;[`ApO6M%TSbwQ7,Ƶ+gA|#6Yܱ3 ~V:{ah`c%nAH][R`/cU@Q@.FB2hvՑ#=`\dq@66hj4 q3Z ?2|i^Mx ُEejvY~';!൯'<]bT9ɴS:"U;Ró7jQ`~m4 `DL A%}T)0?-bP4Fuj$VgVATuoNf$IGdX[0>(xQ[#T}aն,4& 5ХvT+R{q?` :Ч'u%)|$mPjJY<}^Z1k;Qڵ|06fljwlq'EB؉EV `tpA_ w~ xqqxZ:+ФcL$s`9O!/L"=bp>.7Gk>LONVWo2$nWjS) `@ &a[JMI_廏\v׿Vdh\Q>͐DYgoH&ޣ>إK?k_9p }]r+lQFF% Ɵ`uv 잧]+g3>khy,)[;lvu:ʭ]wwcǗ FKØMWchv3uxWL<w{b}f#Xx@ZbRNݖx K)_y*RBT4kŭlxT,Ʀ {f4?Y!䆻0Y:=Y'FF_=(s]qɓ`.+WyPI]2W<:cPOsRh0[(,p" K:'=29UV-H}E.t xJA.t8\6Q6v Kb ef^:4R26𚬞TJ=Kz±q#.O?Q\uAC\Fz \X[7t+ L-'Grc|vmzLH4r2xNTyEE(/ n[e2%M9zYO#F7M2sVAU4|Vktig0 Ώpya|{Tw@'u-TaFABCc8Kk2\LZ.8Q ^Ww$†QhsX&8_ZΘAssjeKVLѱi: 3oQ9 }9+ݹNR`c^k tQsK^.gc DC1=LBXZbOlI4J*<ʊz/D1M}dN'j!ήOȌ,[ˣsi *pj'M !캺B4̓:J$ jZM㠜n-Wik_pqv'QM`U:k7 B\W.Dq̮-{ ,W"-elwƺH#gwH r;*Uay^n:RVO<֡hho._ ֏]|{"A46DpPkv<" =B^A* qPKx_@cP}鞍s%ehgīOm%!™XA.+'G=RyS8a;%+Ƭ}戵w`s!UOK۬$ =,9PF8RZxq+yrm@mxA~1;ޠ+EmslcEo VܣK+QaէЄ? \9m/Un2p+r4`YŽXAn@]_D^Yz;0c<0UT^t="[Ԍa?v,֕cg.h۶O@dXJYEװ@xtPJ_bb.0[j6+)_D*w[`6sv&BF3xWqg֣/xK e{m^1ЃNDn-p= 0ޔnI)]X ;蹼֬Anj>@㟹vW/y!nQ7u`GMi2!Ha!ˋ3GMNXӎ0IOs`7;tVՓ: ù/m:$-gy-!bfaI&Y`CW:504z/ 7Cz]7&/5r;\Ч»{-@E^\]M57SSj} O0ζ΄^,$Upw~~2t_'_"F0uc' Ld,Cnb.6]I 8SPCL͆V)EqgѴ2hY?"檬 n`N.Ox=@"HGhh_22ƳXEu(Eز]kId0["*<1˝nՍUʣh6ZRB^d3^<09 K\k0[FejLL(hZq?hbubVN)I4.lu|AZ05Ϝ2F51T;>/2e&t&_QOfrU6p2g<xD!ܟ+"cUHc_zRT^u%(+~VL]ǰ2TK8mx_)dw_iCJsj/!q`4INr8z3 xRwMv&5Ӄj|nR@cO\3RQa~ohQ !{bJDXX![4I/ V!9xr3?Q65Z]>hj9 EL*pЇxM' Io?H7Y Q@= e9đֲ=6y "k(g g0Pnsآ@X߾;3MU3Jđmzpw_i'/@O}`4"5^cQBZK(hH6 f%5J\KSR!,F>4l6!}K;x05(`fZJ)}!aąx0m9سZ V˰&9|;M)eh\FHՊZ唪ّեM Q) ް`I@|bgi޺ˏS?Ӓ]}ȐʎoOa.逭 `$}aUiN;ˡ7 {4|WMVr XFT0ߧCrC[n?^_yGuR-K*5sCҋpa j/ I~w/>ܔ^՝D>? z}dlbF3469C%&$8Aw1kdM!-VhsDJX_.FM6?zc>y'iY"H0]J'Ȣ琗?z#m:FR)ۤXY47~וlq7fE4kT%~`dG# * Uo.f/haUPjt6R5f0Մy;w+KT9Zb批!t 0 Ʀm[WW%-+mn#`3٪w"R*mH? (Ch@r7k2< X_:* EMfنPَ`bYiL`*LORxa쒗b:2 ]grw:u5kbSQ[ >j@8'͹9\]Q`Ȇ Я8!mI,g|ҹz)gk;Ufv թjd{Z9*A 3ǟb"xe*yhTĜY/: _ 戆#{@e I>^sZ + 95J]d!{vO nb E( PRC*i}F"z'[Q\d8h_WoΚ PF\)J}hk!r4FR\7ۼP.c] aQ@b.iL{qc mPE:X }mͷ. |μsӹw sѯ; 6z3 ŒMM]+1ԣ2:=Jq觼A8ے},)4 KJ(Y~dcg^)g*N?L+M. KU_=(V.eɐM|BjwYRY@~IpYD\]$6Ru/ 1?u("ϰɩsAIB,~ccIh,=^3>O[J4ayqa&pa Q>RŃ@]6[F$RDJ#t4͞:1\1@7OZ&`]rc}rysDҫ,|R~ 2dJQM4J04ûAxɒ(+ͅ $Iu"&?צu5֧KoUjAv Tl/)z4UVl ;6=`AB0Ij!@G>|?Ֆ a}1$;'gtVl9F(Oo1N8h0\<PSEbV$TFj{@!^U~0ZAU ;ҳ__ϫ e29Z/M%[_#z%˅Bx5 ;8 x(Wj#<D^GejA:Xzb3"zq>}'CUEIi2BLL ~k% {n]>Ď?4zKZ!1]@қ)J0:H)ցE|`!>ί'F2ym?0/J'C*pf[Ř k "cĨ:; *P&eM2Ȱ$nm-]\N=iHhc ȶ YZ