freeradius-server-utils-3.0.16-lp151.4.3.1 4>$  Ap^/=„~Y5^N%ז%Dus~L}n5f&c!n+aʀXP)yƶvYnjQNOmWHT;=ZB7=l<q~" oʎ6s~)2Ǔ>$ Ee֦:b!1RVƇe9uCK- }WXW}op,8a;~ٞ[C+q`r^]ˆ:`ow:ڿY#-'nmA^Z31918f4bd5db911f3a1e1760f5a04cfd793a3f04a1ef1dc775709fc6c157a448cbd8fed07db941fbb776eeda823da0cc0fc98ddd8p^/=„$y XN\?&ЪÍ [A ;?$`eI:xkCޱ%#U~I.]0j1̢[;㯋ޢӒ!:=%xS'h吱P=^)p.WFMTo卥ztU[e 5p9O5=Dvr\d(zdp>4?$d! - @dhpt  x   8 P h @   H   (8$9:FGHHIXY\]P^jbc2defluvL whxy(gz Cfreeradius-server-utils3.0.16lp151.4.3.1FreeRADIUS ClientsCollection of FreeRADIUS utilities.^{build71openSUSE Leap 15.1openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Clientshttp://www.freeradius.org/linuxx86_64x [h~q`| J(IX8 O6*w큤^s^s^c^s^s^d^s^d^s^d^d^s^d^s^s^a^a^a^a^a^a^a^a^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-server-3.0.16-lp151.4.3.1.src.rpmfreeradius-server-utilsfreeradius-server-utils(x86-64)@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/perlfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.163.0.4-14.6.0-14.0-15.2-14.14.1\[adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682build71 1587118203 3.0.16-lp151.4.3.13.0.16-lp151.4.3.1dhcpclientmap_unitrad_counterradattrradclientradcryptradeapclientradlastradsniffradsqlrelayradtestradwhoradzaprlm_ippool_toolsmbencryptdhcpclient.1.gzrad_counter.1.gzradclient.1.gzradeapclient.1.gzradlast.1.gzradtest.1.gzradwho.1.gzradzap.1.gzsmbencrypt.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12343/openSUSE_Leap_15.1_Update/e8f90a28b4901262c4800c63ee7b9dd3-freeradius-server.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=0258a93c8f33202aa1c091fdc1881098e7b85454, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=ac61c7a08ee6383ba724a365fee308875345c50d, for GNU/Linux 3.2.0, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=c823ea0b9511bf85ba71551872e8fbd2405f2575, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=70dfbfef31c3103293b04d0ca62212c46ddccf11, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=dfa6668b09a81352bc10a5fe63e41c332a8a92ab, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=4ba60383403ec2537dfe4c2b70349f2894ffe08f, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=a472064d4890d3d6fc43a90db69db6e896f3ba76, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=71cb481d6f5b319c4c67abc4bd5235e6a3196c48, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=87589a2d9e8512ac2997ebff148af04ce681e62f, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) #./@ALMNXYa    RRRR RRRRRRRRRRR RRRRRRRRRR RRRRRRR RRRRRRR RRRRRRRRRR RRR RRRRRRR R RRRRRRRRR RRRRRRRRRRRR RRRRRRRRR R RRRR RRR RRRRR,!.P&Tutf-85c80694329e64ce70dab78205207c7a4023682b336a32312c41e5c2db70c0d95? 7zXZ !t/<] crv9u-]vI$[hnq+]C ElB|'sGz)akyj1I1[a}q!pʷJ:~@Sƛ:Q=P꒥!!?KWO{;i~6 Clsy|6``Բ}#:bBb{_@ Q\^# ]d:R#|X^$Gt s klA<ڠ:Ϡ&1f?ng@4!j/?|A=f+t'1|of}6C!3$JݏuI_^I(!ms,;fr|:41Y4]Oa2`Lb+= ή"QZ)]`r3Ҹ]Iٵ\h.'J-Ȓx>أY܊X2{ՑTӑ )D1kl=1nMPBv6[eAxnAE -tm=@$t Dj!}Pl* !wly/'ocĜ[gq' F'K|t3O'f,%GZin̰ y'/Cg:q@~ SX$e%YL>Ր Nv.&d29j %dWc?7cZ. u"+C_x,2SJ5wYf_O =ir@%hYgE:Q-lxT* 7MpghZMEx(Y> >-˹YMy,yJe)ZmCTO(&6Lvu1G$qh4 ~\$lq$x@ rQ/wt0xY 6K/C6{BI#$h Nzc+:KCdoهy5d*}?"v8ÎD|*"om̋e NK38-dyM&G>Z0*KO%_Rܼ~sj: ZI? {(Cڮ]7 1ްv7Bm̛)()WwJgO6*IͿ"H]>rSGY2?^ho4ag8F̭ٚ4 cTJ?n͢&, =Lic wlkS04NʏF5v;-WerUsK75uwDnR'5heNC=EỦJK{:ί_e0y?c^e\J={K(&N;2Rjk0`Q:}84 2u~02Ww/Y?U ,W:KdI)efQ)Dێ_v.|q{#WsA?C'VZpMMYǧXAS՘FMu([IB.ni]dj 7cIMTO-E.nb%Nov1}$Y9T0>~q?WQOJ ӈ iWրVt7g$U*TwzA~'nW՗,17auF#QvFoaÌflLEU2q+k#FK, Mt:vCT?[Ӱث ij!Û| Z<_`1|w*Uޓ\CCa8(U{Lڙ-)Cu퍴Kt3W,X%̼/n2>aU$ݍn*Ch:f;6x ##%9N&S}-0Vo(V mA$2 [iCE|YM0͓7yJi9Rر\]O)K4/IgĞyJr}RLh\++*tqLlQӦUK:Tn8a->8ƾKb5A?FĞUx1Ч#(_ /h+ƀPJ1y3dB Rum \A V2mп^Gl-FSe xE׺ſ6c Qc„|1kQӋi/ɷbzW;'go.[Qh0].mQd0Ϗ%fmvꐏ|w+isFoH! :euD Lm-WJT ԥ!a @T뷘;mn'|Hpehxiq+􎚨o#W\3`0fbjŸ$2ݖ6ϻ0Wha&S&B _7]bB9~4\eC^kCmeW Wd$CBrWS ]Ν'E(ᮿ+/bP ʫKB5 O-m!"@dPm=c:+?g~z4V(0 ]ǒFɁY$$4d^ߧ4rS[PHj-Y:)`@?њ`\2 &N}hpWemb#{U1ņ‰rQT2 '`*3cFGKFobCpA!T1^~>)^7AV7ǎ &< [(BjY@ڊz%-Flh AQ{-8 K  TI0Ѕa1 x?T^~aYIRɰ_-n7o~+ͯTt)! TGQ҃U-YC >(CpD99S/.M.ЎB } 7碋/s([8(9kK#IMErIfB&cBcjX {6<%Ρm(sK ؇ٮzE槃V8rB 7]qlCnm3[;ycd9.DaiXg01BFL6RH*5H9J:-@0[%Qo%*$a|+j)ѲV:Z+?Cs^D1qu-5r3";Bn1T@MMw(Ih#ՕB -'WwÏ<Ё@q`Z ,gȶTj*D;6J-| $}8Ԇ{(c!tZ B Ƅ5_1s V\8qj3 Vx-߯{ yS`;}n0x9:&_>q߲{fO;a)cA@ѩ> ]"q_y-LNG8EiKlNpq-/01i^xYObQ|6d*zֵ"Юd SEO>-T:!*=&L-']}ݮH`Q3ebe) 0? ,YI6[3wHvH, t(,A;uƟo%LV@3 [ku)JD],DO1%nK||?و7g¡;9͖5(c\Blyr؛!Lwpf(b:EB.izYfO`Θgzy1a:Ǎ_XgKkڮ'{]1cVAhA`Ӡ[-(o2C1`+%Ⱦ+ܸŃ Q*rC bAa߾6tRЛk8Yȓ*R)H5р bdS {Ոɽ"bLjV =sc qĩt+G]1:'JxX|e59qbT dk΁U43)w/8=p#Ъť,z'xWV67UZϳG;>]Mw)TTlu:7JαcgGX{ZzB'4Hrz iD9b19b*EY@v(t%mF@+`( O 홈@(N_SL/[q\ 2Զup7lO4q1|#a-Z/ &^h}=qx_h/W2H4Q2U11`NgI&bkEo=j8-5oC;J Pxʫ)`ySHA`SudhAct)K7i 8JX ]bruΏ,ɽOM eGlW&O]@q @ (q -۞jf٘:3K4x+*ɸ"hHgI+A=Aq7el@]_nڪpҒ-܌'i fXjC tN~ꍟ;J.Ͽ)LV_Cg z Q~8;ܯÛZX=rӾIQ!e]&L1ջn#E y`ȊMk\vSRW~:sQA\#G}s,S=j=(+ݦ<<:%eڦ-6sIRh:2'`>9\f{WgG3\F^ː4-=d̊-pєYjG  <ݨ; J?c!д1ãj ^,)S-W7{t]/mbX (sۡ_rvQje[D yڄ TO H`hɾu. c㥖 hp1O@U8cq.gJJ^.PIY2ὅ $Ii皴J(MXwNXVl3w3D[z~ha,hps1ob 1+akS)ic0Z6gP>*J">bvwu:Ӭ9pىn=n!Tei`08+< (s~`~X.n=;~ةupo=Hq\iQMXPDtF||'12qܧ !26+isw;ӿ^$1OpSDL_G"iuEtԒZT{곪؀a?/ I)]rЧxkҍl6Z*;6"hE@ qQ$<1WrM.Bq?Pm}ا9{ ̕BE]Iy&|2R-O+^#&>} 5Iq] r@ʒOZ4 @ C~OfA?ԟFKdB:H4&M1<vMiTR$UYN=(`~k_-At~AH2K֌Ђ ÇDG-Űx!IsҪz_>=L^)uZM`&L+ڶ7t ū<)B1 :F>uIG +Q bR*Zol; {J}'5@dV!Q$qq2)ۇt+3jXEjNK&Ghk=h*5׭!q|Y8ׅ >WաoU uypsfUX3v9bʘI&j1OVvhxʆ\|҉;~QuyvjP᢬0Uf- ”% iK:\==V g[h%@A kBې`{?%q6)^(gK1d:{O/)ψ$;P/_䲚(#5\@i<<\"GWsbg{vNҩqEJ?Sa#Y -"dU:Ua1SolzSVt=O=4 )Mx@P)tmF8/_@ڰizXi} Y>`J&E*2D-5|iU-s^nw' HpLf% QT,NoZoۣhѦ\C!{џ#Qҁ uާLPQU=䅰?GR &_|P=rH-V?= G_J[czA1-}[w/p |w Hۼ 2}F CP'ݸ4Z;ez^eǞ(C)04ܗrTb$1u Of?LU1FR󧥀+Dg}aG1M,䅾ͼk0F~]GD(*l;۩h26\ޘ(> :=ʀ^ƴ:cY{xaRP[fof^żмM|^XБ 콦NH Fل>zs.PؘwRFKQ<[L\ HZ X#5oI7m58"xb V3--Yoyn&KX^^tEҮ>[lFScLj2QVw8<=~a(?9XqFo͸R3;mL{=o8~:+ɻ2aq񷓟X6ȭy'!\sd2* 63k?!}EńVo$% Lx?2\yć3Fe҇ZJjyOB C\.g9gUgigG$4H MFaAEwԈ#~ׅܟvT }q#h`?*[Q,Gگ"Zƙࢵ[Q)gJw.t}q"/_: `͊ N᤭z$x[&i9 /l{ T% @(aEikՠy62-G|=سdԨ:/w[B4ÏȀ?W -Wb'_/Ӎ<87\w鈷}n^X#?緀7%4n=+{z"/4g5GX{` Z@iK3)j:V،o)!E_98dƳ_ȉQa֛;?w&])oʇ"@>C o)]xʤ"[Afc^GW+yN/rٶ AEކ.<"~@.` 8Z f,yi<22V䭒Ӭ[UmSM^wdi4$A(Z7tq.=o$lN!ٯp2ns'朇r}}ޟ |՗P5[JE|JBixa(ro\ ל">:i`xk'mo^?>w8] .BGogAXOqU3FOj:$ajM C3B=L;9BŶsHD%SN:PSez-rh3dY&tx>R⃦Pv%*ά'hy0ec-{JgiӴUU?jOfn/ ;k ֜ =:ۺS <氥`jSC, cz켒ev g`XDRXn(&@=TiW'ٽ_OÙLI_Q@% "¥g![U nBD""H<}MEx 'J_5#fRm:v(åK=|dz lI@Ѧ nmG9cL9#Gl':yvX`kYlA-(zwd;mz\>FB&>y -بïGיD`̕% mݬ >[^` <'{*3`q,$jmz'Ah3_>r<`<$kaZӞ9pc{ل=83^([@PQEfogP#ޥkt{Er]\w˳rPKG;S5+;hwZW*D drG }6>X$BϹ|j;ӔtBD:!*r2lwN *pg8 1**0#’EGWm3Vٵ-ȭx:ZkQy,ձÛd_oo|Tq42&"p67SW^_Em@s!ŽE#Dr,ӂЂ8)L[-y0ç{$^/P: _o*YZq }r+t}PwD]c0uG 2y ob,X.W_,-n|@K 'Dc&ח_j E9wA+jN/V*׽Yy]ɒCnx˴bsD azClJs`u#UP8zy%v+Muy$J\4uU{v_0,PänCl]:5L<-qc+Tuo壳Nb<b`ZτZ9 N7] tMhq+e㽌*2F0 Mەf}ox죤cEі"xxSMIvXF\V+`pVCjIHڡ_C5I@ĸIխ|s&<)\Х'] }bsD>D0zmEW:NZ4}m9 0'>y'"l *XꎨAZjȒ6̅R?r6|#MɭSĄ#bCFC'J hD9twK(h"m'd~CjXVef5ޓ0/Ʀkunl/]IQz,JXL0m$)8sy0^- &ax~aY!iܽ&57~w}c#:A`W vrIbk}z!FVkY_ᩎ$GV=gbVݠ]ASb=R3y^)DK޷D&nF *ƁYʎ5: =RY{+eU3veNrNe)(=aAg̬ғN3ߙ_a 0cQOq'I4&|:S19cpXAMYYWƥݑ9( ߛ>7Z.NDZ'`2=S@|V4*7 xD[ 4iK[`ݣ]_Lg[}u }%j 2l[-!Q~тݑVr .eZ _jShMM*{KbzG £—*Yp2?i~ m\Q! [s+=mh_iaGvAa6j'ݕ7NKjx/D lؽ-QB>% sRgOd.ы'awSʯXxuT`<ߤU;H5WE_†8CDwzgDZ;O`s&_XF=\s#P'dU$]iJUyHriz̿bT73^Spt+Sn.6)25Ã)%?fNfFEGtFnhex?z[iuz @yNc>l0tIBߘ~္xqCƈ.v5p8ck@zD?#( I1@sA?~N{]*c.9)'ÕM~Vf U3- L MA2ᖢG f-`{p]BiNٺUOn{7k|\H vB4c퍭8uoJiӼL]Ek&LkD@&$Nw؟7'sGbr "-;lfK=.nʬV]S+['qf;R^1윆ꨓ"UW ?-:8IԦ5J"˙gG'UݤW e@݃=|;؇yv0`c9S2W;ŅYO'SZQB] Iuw*;Ӿ{3D:)l`^՞4zNE~c'xoTdi+ttjauu#vZ!dK.p>~KdsTksĭjKIAvز?n3Ǫ8"К1*!>y%PpQAoWN`2;%Z\jS|Vf[LpI瞁[$ؐ;~Wױ :|p[=f,Kq 鱟?QMŁA# Qۮ>kؼz6O`x{mO]YzDOȋ%zNnk-P`{- @-}GK-ڋhD7vCLJ45 'י .RئJiNpұ\>Z7l\78w̓MdϵVœWK1V3 70ȝP p?J WS'B =P7Rx"PJLV'Z [mTQLE\;BD?oc5+-EҖF*gK?9YQ S % x({ =?[\&7I0v#60\9mV9 )aӞEm|T>PfgSÎ;9 փav@\02U//bFp-VnqfgC g7'?U>Es"y-;%>t(rq|}Nȶ* {݁> 'Z7`nwt^76L;vP<$ށ.pcBh"Ԭ p#YQc@BᎢ2zĮ&P$UfS8ƅϊSJ'37N5X{8+ zi=a?Iyp>c4jSІT^>C~+l(پ2n[Gt^tyeRD8L.0UG΢ۉ5Rj;[(L }*{DCEF3\Я֑~'n ̕D :ˑXvÆ݉_dqO,W+T}qr¥f:_NQW^{Nx.?%^b(;GM97yoXbmJCL}2TdzT>&r~!a0cu}BI7Xn7ST^|rK*"a׹bMBٝqEH D&mFe, 0 x۱e )5~=E1e5 2^y&XD J8Y'.v#Υ qQ%iePwMx*7 OYaJ;/MWsnҫ!dO ۮuW86n-(UH3w0+4_~?crA:Á f8MߌtEGo%zǯ23F3Gs]iX($gXb!$z8*տI%35C(Tx76_ \?A5LPh|lFER,ʏ6dY?L!@a@ڦ-Ƞ!mW7KrU@R @sєhֵB2vsh˖ qJ)V-VTЇ 9jw{x}M*)("o12yx^U> qsiw2CCZkQ| P5ab@ 0^<3?YYJ߭Ut R#]rMbx_aOcGdIKRt#Ow[j %N$ r= @c5k)–m[2lu-}6=z9}.6gM9 BiIA:φϸIS{RЪ X>7Ε\P[q ?#s}UvOi{M`K^D~,jz#ʖ +[]?KcFasd{ +wkܗ!R g+A 09M 8 gQ& xk"B_ݑ*Nśb/)5KsYOOb^/Nic8zFЗ%>h]}6] Ek!]}|?emH4E.^kd.꜐g+.\ :zMԳgu>6x|JzgGRʂJBV[t4B$ZX:'b&[4*zЇ ) $*gX[! ٯ&s[.Jl,!斁6ϟ*C?9_OIfEUuJ]p;:35uӴ(wfe<⸸V$6Hu\~V}YvJgMn]|C8ۣKؤz=$!MxqYcXc'wӶ?O8gcW*@3"єpΒr^Ђ - >sD)'M箧t5m>Eq9{3Jj%wZeܡsPXͬ;a\&ZE'@1jػAXmߎ78{0wQr]M:@ j:4yDO=_cqŒUg?6ݯ oA0 \}ΖܑmgPsۮ!&;A?~;< \))ca"A&*/ꚶM%F{9PmhiYI>TdjQӉ=)HɂIK:ݟ큈 欥$ЊaTeAqm 9Z-TDo3hh4^Uifå% 'L%{:1T/7yȗlv爂аNW2t?mF3ZqEˎdI']h~).nJ1_2 ٔk ݵmImv˸r1:xŨ]2dn:@@Y0x{D15#f'zb_# qCReE_pIbiRmiz AB)17 ɘ;!Qza]@^.~C-L T 6TՐ{!2>ѢF:Y?MX;dP2nRW*^ۙӀ u%SugM̷(I#Ub쵹orD쑻5L- 'b7aVe7xL$\-jc;7VZZh(8^k韴82l6uZۚ#Ԃ"~W9 F:Ϙx눨WW’OA>ЙvB#"(jBstYΆ&m># hؓR]1V{ aA+6+dy|pUjw?Whʙ2x_?BpWh [)1ECޅ aB@,'d#JK-lPNCk_VA3bLH }qC5vws':VAƎk\n%)9oG:oh(.)y 1]6!F>8 *PTI[Xgؔ3kYCyQfꏎI@e\%=W(%/K8_Di}#Ʉo-:8cg  R1݌Yk@G.Ʈ\ օt7Q]Oe!#Y>VTahmhM+ PoSmӱ΅fNVW}AZXONjww-"s0'miDx{kVf*%ՏSI%GFD~ZP1eJPTVoL ^8)ϝ_ 5o#3 %c0BUjw^-ŨJ<}j8Wp~WdF!&$wKyjCMf AC`TjAh)Qc;,&ZZ6^?bH˸0|&3m!SBe9i 9J"!-V `H|t,&/R#4y.W[fXvoOvLոĀT:Mu!c|4TYd3PXUv_k[/Lio7;#y-SVa1&ZBoRkn68 {EecYj9z1ӝiV3G20*$}qEijf$K1gkpCɮJz&eR)!YB Rw6u Y#,M՜oQu!㟟ҡIZ#SR3J\0'`m~ZtS"eIןDsja 4BQfT]>2 cʷFńM4m(y@b*j#8JGw>Am8bsmq UK[E@}>gY%TzqáB%`a2vz,iKߢ5*J2JC9]*:ACZbs#,j5pR]]˳6$de?gׂٖBi$knCy;cᜉ` )< )qk1u}(dH4`)_gC[5ɦ+ladMM]\FwyXM\esüB_FYC_,'/ta`ڋS.݇='ɟ* IҲjZGɔ&6ejm_ys%@r7*)$mjݡ=z:݊kS,D"c HmO'ܔIQ`91㚾#R-0ǡt8? N @2Ml1;ѱ{P7t))oJ*|vO8F+K6EU-vIjf.XT#W_m#_$L,f.edQ˜ݟH8t`^.R/):JJޘK.Qm!n*l=qVgAn0vӀ*wMFm+6\ )|˒޴^zmh9H"Iq[$R{剱,0 P8وǥ]|b rJ= _2Gv{.{ yN60Y#Mj{4TjM̔G]%ull!7J#+T͹)ϗeb19XU~X*caC!\N-K&!IB|n䇸ۅ.̄iU$&Us6J!goO4F!ڿ|ܽrZ yzG$"9U!ry 9QTm@$L>=&??R嚦XH:}W qV~+P$^}+ DȪ(&ejaZF*f&TwoکƆٕ@)?C1xIa ncE/B|UlMS6VK3kXJ+TOӲaXǁ? dT5d8>u>if6/AjǾn O.+Ǐs: { hAdNd[Ou/SSjȨlM_|~9" NspUnߵ1_M`k0w&i눷],eGcd}\#޸Q(}1q cG|lTd{K~d.3ftaQ c7%vǥm*tһ6Vb:v=4xaqⅴ0'׺r's:*-S]cl,M!u3~;2M@r ̜WB\!\U-!PAtgp]Ǖ%J]p*w qgBgjT6&[1aO1q&)/ pӳ;92=qmyUZ,`mn X`^VSF]PLu|R &wBR7{chxb{F2>6~y^pɊQY\*アSf}?J!}]$]U*APq.Td|b0R'p1nN@[Ti-ѵ e"噅\6|Omejb܅j{iGu݃13'qדEFF4u~kHng"UH8 WJ=0zеR/D;#P_S`n*.R+6H?3IR&݆SdebiW>2(7ַ A`dD+oanaGfl@@=hO5:鞮CoEK*[}ZΩ \fhwPnfjuTFpo:n8ᭆq p,@Vw\vE}8lZR$%v6̙ \(|ϱ -kfr"@WHٜ..zR.èxlVYzQiX`&J,7e "bP⁺ 5 \3u>ɵU)zEl+(wWEEDBX8`[~=5|c#\QO=džHՠ*d1fNfJݩ0ip4,`coi-0[N %:.wC]u婭.<`c宼kHhB1,x[h5ǽͪ. RTͥL:>ÌdW׎ty -~ 5\KVJ E[]}p`L-T}WӨK- ARٿXtpzÛќH v( qV+6̉ftzYZ:n;,THgvEd و 4ΨO Zh6\S4|S^X\&95\׊* ILj&xAL{{(]Mo搖f*5XKT>jm][PSͽ"f3Å ң'Wi rDXeMR̭WQLP3f\pΦ[r& $;)-ީc<;bT, w {1W*6h-r K+Zz#eSy;sRZt}̙äw6칈0{4i;&k K0@غz#pu Dušu8Ω %ZJȊ#4j@RPY,nV(/t-e)&;䫁_ϛ {(j*HM%^/DzڲF yDX|} N)cb-}tKj癬z~}),/i;K*ZXG$~v0_5Y0-({{lF7 XklX;|X͕# w<=e͟"DSɐE&,+(BA"q{r>~.YU)h{ss #7qQ1l"baw&U{k/ffПnk-7P7s8C#|s~AT8e;H]uqF*|K( 5T8)M‰y`) 4ɰ ?LwN1oX-A<9;-"O+cȥϭ&a<.N;~PAʫ)p YmBO'&}DQ7olC<!s7I.s-O w {+ygBG^m܅rC.-[Ul.NeCr3UGA.kR:=/8`:<ҶkNLqPiWO  Ds( ǰE# ap#{Wi%C95 YVz0 HD@:6O'uHZe> % +RRmT+pqO6bNBPb5if s_$toO C5[YaHFbDqa ( VN{DXIݍp[ _cqm>;Y`H\i|l?zP3ʨ;r0T jZbyӒL v7N[Z!,]bUrT|bPb/@sƀ, $ :琎`us.Z -ߠ$7o:0 y4 ŦhӁCۙ6kw&numI ߾|6qxp"In阼8mY.+ɛbβ3M )4б[O1/ctxj^ZY~I{3\NCɩpFnŌ+0DY|D[? ,L!(Vt6^G85%BU*BJQ1gBw`@kDw[ j{IՕ8J;FsgTe$۹7 (b!@65 &$+|]fvNJ|a ۚUDx})IcJж!lW9DI0XLO zpt[7lO ~R|<:M& jO>И9tИ:UqC=I y.?!~X ]}Mpm{Lc. ߀,pV+W7}*Ͼb"FzٙM}h:{ژ^!$dqCFD؄)(=E }=0+h 씯푴{w2y%il)lzQS+]SF<{C5ۧqη4a2k8Ԩb jTY-vבMm^ > XB l֚A<F̏%Q)2^sb<$A냪]"jUl;OO uPQTpQ3tӷ 0|9"s,Z,VIuthU{nm(^Sj]LgL~` OkU ,@>f_z_౗jVojJT ļד?1o@j Ԍ{ =ny/@'PyH4>gBKڒrybLOϣCx.;tv4 [7G'C͊-`PF *p: #+ m{P7.ĩL^_┪qf٘?OSH¬nv AIţ,x~ 0٠2N,;b(zǟ3i+;ǭr%(+Dv|޲Cr`k @S>cS(䵂Ep#JdKV\_"NPnl$⩴){M6ZM` F؁*0zB[Z) !Nvav%H<ۮFla ICrq {R$!hn:: '+/~"!ZC9xZءqj[Jatz.KqJӻ .b'L؇ӺͮK/l$9ٔ-k?2 < ߵ~T2Yҷq5%1:acī'mt:1Xfʠ [b+8;9@}+1~T6x\Tjζs0TfK1eY=y :JrP 6)̓bSCicmh[an0k jCfta *ʰ<7_+] q_D;p;]iI hN 4]C{_P|E3 ypfQ7AWZ)Oo:f7V`_>;ee55Mҥ){V 0y:-6=!>LRdyqqFJU;uU'4MքS>Qz%i^i@ b*kPq[?e[:y-ME=屄{Mj v$:הL^uQلG:t*T5 qce#&zLQ X 'mޕj``}4ln[ҳ w`D˚N.y踊D/IVSa9)ww/B_ƝWX`}'K/{>I'_#s$uwm{ZwAC#~ Skq׍4L9yD͓\=w; GCUPJbS-w;8P縤8AyJ@M $*`%Y5%#j4j;y+4~@EZ^Iwz4o8MϮ;WIJTgw;uMg$•~+P$sz]}Py,:\~XKLL[0'xA2 )V9Fm5fjiJF.KMw*d6# kwҁanfE@1!;CQlEZ-Ƕ:NŵZPmT=lЭB^ҍ ,}Ak, 'fXY y#g ϖ2d݇Tz o&{\AG^7Ӝ1+"WT%ӘIpT͞_ ù˜iJ)$]dO~PZ#Qft| :YhyZ\}v?|T'\%' b6ѝM A.b]QՇ5g͖h )`\*#HP4| zxt _L&=_DXŤgRv65 ^1]w ~{2+{>Pׅ,oFC /,^ |*ٛwXuHbP>b fQݕ]|MC(1e\aْʼn$mM_ R:5}s`}ۖ_J2ܐٱDjx⚙ A4;twiǃb+m0K189xh1^3-V| ScNK˚!$-@z 1`c eyOR6P*5I/zZ~;'yV '.v6">K$OIM}c oqYK00&mg&t?QxbVNq\wk9^*pRX= ۱,>6s˵lsPI",}()aE)+?)wu8:wV'3,YnŒJrmP ҕ/<ˮv~:VXFl8E//yW68 4NJV T-maD`ƓChgBRUq碵d&@Ěapɴu6'j}Oy˰rU&!!+H@Y̘NZ+Y8lU*.X~2xIDp* W-   )N w*cYLΗY ѝ,փFmPs:ȹGnGR!YLM x-Mt_"罫T,;:ip= ➧k˃ Z|q4 %fQuō_ TO+@ϞMra@ed_%z7e78r[Us>R0ju8-h8pL}<[䛐DJ麕vǕ_{aR0znV(#ɭs UwϋN їraXs~d0@|!֧uj|EZEс0E2eL8Avk@gNepo䲐ē?@[ k#?}qVq1RK*S J%.]*BXBEo.aŚ3*y }GW{d:+Үؐm6څH`8wroĵ'YTjXnyWsR Zl,2v7m[Zc5';LNjgP@co$ \Au-.PliFzanXb\^o'_=W K7W-mb*Y̪d)w߸ `͝["wi$,5}Ґ lFHOcL8եI! c0c1hOa19?qro|'FGڔo]vP]H!WTߵ=bI-+%dH eYX;hYxʍԥBZ?c )nΟ2n[ ;9|En΍ĺQ@(OqY`V37f^AԔe,PF3bVAMCv?J3k(÷#Nh՜4eǶY(oqIJ&iWgHok֣0:7hQ܊vBKޝELTм>pj&-rc6HoΠGsAI=_>2B vmyYܓ$4oo'Y9Mxݸ7XSPϚpUUh լ>w'§ H3 Њڥ287K~D{R@+w/2n˧*Yɰli{0?/1MlG9rt7猪ۘ^xƆlLw+ӼLqZ0R0{/ jOU$hji茚+חhx: e@-KH;-1yA,^7ߒua:m;ĵSErY8Y 0l1~LdV]A/K0;Pɦd-ƎlK[͉Ԇ9hD5'w%R0GjBSL}>f쳔]op-F2Q,Ѧ~Ѣ^ב1deL1]-,l\h$9w}+6V/=$G MШ;ܞtC6"+T[sڻ09LǹRkTg-nFgxfp+c҉r[7ۥY܀b{-M&rL4}XGhG)KtbK"[3Z{Ӝ“=ĹM1O%_%F@h `N~lQskԀD/Z@%cW0ؽ*.,Wņˆ/W\?Û-)4wa=G9"^N9Bn 3G,+<o3%3>ں[tQHt|Wq0ƾV{P=tfq,ꛦ8~qho\ث=겁1կ+Q旿{G!3A?EPwyOL-=QCL6ž]xݵ>yL@ ~D~C!Dqfj; 7 qGB0J\匿ܚ/)ͪ?'6_{7eBv/B)%fmШCsO7Nw&l j+}*\`/ t~6XZ4.5KvDvAGUej#vnsHkSؒ cM̎ M墚IDiٙNv* >;*LW{@o^j1,iaOrKT{"Jm {`tS[$$ݜjIS=P,q9EHM 5[!`r0uŴ{<+ em3"G>;9)pu xPYqL/7U 24Rj8UX"hA(P>;CiݯDΤ=l-'!"}ԌrV2/[\ xd9-RUk.aK KLcQ~2 NV!5B9Vd &珊YJNǽQAdmQVRWtlNܖ":%V*` c6@Pd5 23qD2M:v/@tm"X\W_P~"` o }T[?=KՊ7=pB}.Ive3Lߍ$,l:m۾ Kbq݂q~G> S4α/o`ojw6C;QRۚÇ㞝E9rp'62Lc5 }9qPxTJ?ӥ4\oy]:P[ W5My-;sXm|l9zVc0^eu >ȱ~bP.zK#򓩕טU_ NHTD#ffr%i⳽c#(1OŚ6 Ṉ ??)FTޠ(n*QcqP@aSѩ8%D:zܘi9bѕqey;_'Gn┳Fj9(iDMu"+r/oVh2KJ@vnPTRɰ; V[ *< s 4އ㨳&; 5 72z FH`)Ev(c*;E;K/$@waRo_`Rex!@R-5o[A-={MH|_ݲ[I>uH$:1]ˆ\Д }醻sm63y}q{5GY3rߧy"DY+I؁ PYӸ/cPHhQc+cң{uPR ϑgUd~n5CI~-FJPO<KvW-l-ӝa˪b5≯J*;װrѫS|o-Z͈sI ;:Cyb#*>_QTvG~|g #,YuG"m"b_8%8,毑J~h.w3Y5RYkҔ$9 rVa1j0 Y0c +ckQ&|{R&R1fNƒmҰ r6™xGiFʏ{;UqadFvH,(?r6[í徎hNyc'N6ϭ+sG2qz禼{ٙTtӑ6#`̓yu-ɯC-ms+Z\ͨvP %K@/qtӋ8ՙvfwqx\7t+C;U=\  w:D@([5pnP6#Xm`3`,(`U)Nw6Xú 1 =f;i^08үJr;fxeDXص e|7Mm YIDϚ1XX\/+ku9j센[k.00isrNV2F?Q0|$r$s.F} )Sh 3S<_v\+%Х]6|Xvk&]'_ ~+1m]q&$`HK۠VH j\A `IoI+ygC=v@S=an@R/ЩTɋ=-U-fK։+!Ɔ^04wxI;GyrhQd4LB"0bŽg+fÎ 0gw2?"jm/ȤVUnXPУ?WYȨI+G Nռ1^%躰NϪ纸RD-C}G;3¯C\x $ai'DGpjp$aψ,Uit\Ԩi1?Wx>íocpuT;'d326،?"tnPƫ$NX uMKͩR*a\D˙A^#p1)wu~M+U25i# >kB Q -t4jDzĆ[RM".;ydTpyE6ǃh+?XX5 3m9u#OٴOh4/-@eY!޲o9|Wd0<66lk1waXj+|4fk"Fy24|ZQxr_U8mk3HB 22>Jl9)2X7=xCH.ʰ(S K%O(M䑏%fԄ : wOy4//$ŤBnIgil렱쯰,KYab=oҟe^VL(0d\@p9_rkgQ%zXmE ?o%YAHZܴ`H*uU&ѰbkmUwS='p s4dG9 P I_#r݄/[ґ|v"&R1(AhHEAcΑPmD{bD9X]v+V_P piW-;9VfA4i4!t!pNgqj *˜yzKc H~V H.^ W!0b̲JGcu_vG~ɃSB;ź{ SchuIA{p*9|%T?[uERbbJQ'c`R~\δwZ F.ʹ^ .Ue`8&*Œ̰q::QV>'}E#EFc\ehՌrS\gt#iĔK/ * Yg$u⟁J@rf1jo{?ؔ\}~UPx>D~ReK̢F!e˫֘3tmj'j(ey) b -bIwWE)3v̲X2@:=>/ٷ{NZT=Y.B=&4'Sփ2㙪nCwwrLAqֶ'$GZV }Bh6k߱"~<"qbMsj֡ep(ߪWݻ12 oضND-߰- [.nɨ0wcG6>G83L [~mj 3͇tS>Du@N W"(FFS w>%;Nuv hl.Xn'0#_U^l ZS$IĜDF!R>xa;a~0$,0psj {5Km2Ae2Q:Yzjbv{ n7 !-~NjWRWq{^ҽ6HʈXghRcz=M66"-u&(* # \L[l<+P9 WW'>kZ`%UV\IVS32c 0#í;0[8?t s._3#X~'y6y>MkuRYt 1 =\h,.flWKft"Nw[ %+vז77S&$f0< [Ο+՛JSJ#]E$[O³2;>reL.oILgjt3Ty wyiM+vHaQBߐ!Ә0?9E'Ĕ83YzJU85UV:%"cՏa<*)hny4ܱJD U T(-4-#[e6\~$_$:[GNr/!/K(fXB̟@r$e{LGE0f64j\؂)Q+hyyp)=?'=&u}e+Qp[Ga.yΡЃڒSAGYlJnf:@J+@pxi>xEE[}8 Ȳj:j6 ;$(SɕZ+ޞ튔W{<=``$Hkg?c09%+*Yri{b o/bE$3}: X(cuecz\]sר|f* v?»ח `l,PwS*_,GtY+#AjqեIU ba$F E4@ &!Y޺qS#F?GVX4B E;u>BaSSh|5|-Cx{6@6 y@bo-'œT}r lJo14Q$|ċkpX+y _vըSlO-Qo2l{ui^L/mpK ƔYbHɝ>lcXA^0{M 57UrP>KP34(lg:@X̙H{ ЬfeŹ"25tmoN^Dt_.#-.,I?)mOb7/fᙶ8%q)99K0\G:A-j1urr5aw 8 [Px&2BV?*Nvt$ ]scaMQфyU/&(uV >1Q1{xYQM3(C퇛g;~{*s1>eK o41qretJ@04b,9>2=m[we0~ph` !Yk"ȊQc1'ΝS9 hzDa0~8#КMaٱ5sU纽mpAk|.: zo`HdQK!1Y@з=1HDXO˹[f)rA֫m#XY3j;wMS1HI86xS* G @|O&FtdQ8]:\6"r}eVhdTg fAHJ΅4\e |Al*y\ĤYy3 oEf-8>x.HIRa{tyeȦə|/nke;cQ:4rB-ՄE4S iPҝS+m~|c] ɮ183Q΋'Hm,LAnQV>lO n o"BKEAߖ1WE'_{BP3FB>>ئ`82H'd+h yȽk+i@PՑߓ43JQ{GC~C$Ħu̐2L4eP wid+{ d& -^sQ*϶c@^T002䱀Ld$lM065[ IFPwߧq9QM ?KU/,7ɐ-|6q;s W)CWCY1۟͝mi1~gaLbFJ@Ur%׎Bː)VQ>(lJ7nNyNN 'd)rE^3XIȠF.y' o}GEٚH-k ſ:}Ԁ?PC+nl5UMld/2=-52<z1XJ.D$h QP 3}D S4Ժm4l$8YL螳J]yKi9m^>VzF9 xghzWW463J4{u hGЏLʥߓ^\K'wc3ZM H+t?[Zd/o2AP ÷qxIwpM*!z#i`J4~g3CM<Y1ߣ/ ;}S8bg𴣊y FGE{PfՑLz35=]Ox?Du;oJ.E[s0"֤TkayR*V] I +9azsAn.Z1{_3䠴|XH_We,߮4F l򩲞J3rK*ݗt+nvxcN Qydͱ@SoJYaU*=w1{_&XH͚,Rž.:+8qQ9 &Я\4)S~jұS|ϑ%™3N%Q96mbN䎙P:Te#)kI^p8ޅf2RiUL%v1 Yޯa1mBO8 w&̋^ҀX}2#ڋLr{޹h[cvA(!f:£2+3g6Пx*T*WcfG5TϏXTp id' hXP|u _Yi?` |x|ot\`)q;S\[nn7^1E/֧b烩I (ЫUŢH;H ~C)SÍwZ-ITDs] qQA?m|pQ #_{M?Vw {gO4OUO:aq3Gv+#B!xvё,%[H0TmWŦ?_@zk%¶RuUkh )Ѳro^Z(eV4$8\L=eS3 -䝉E{d~Väَ? *2 Ā6ŌT9o 41(v}ja+d),tB1ԅ7QÕ8n:EFnIF=WV w#%7y1ZRWyO}R݈#5DBN#-xe1 yX=ׯ/J ,`uk{6B K%L9-fgM;VVw%ڤ$aP\v9dQlp.XV{ k%q+a C k{gC?0P++Mi֡L;@*Ͽc/ܤ}j5IݪKʿ]V죍=l25i^|)RGuR`?Quy] s3d׿g݇^sz_1䴝4rW FjZ _okN8@͔_Hf!gN8W@&%y5)_pmDLڨ= (yt` /:c6o(Wgo9mtٻ={ )[pY3>v+*QcpUZk Hl:3eḢ?\Yi`;&x,)"$S$7Ihhe`?o<;[8v/Y^ 7: k\Z'; :cu;oѷ:=?!%37zT~Kߦ_ol3yۼtݾU - IW4]XÜW7tmGAi8.yPo=}/_2 d<65ow蓀ɓ|q~ܒw$%jeVSe63?6t:+5Ijlqs/ի|id~{THUQ_ė{m#LG v>88lQAɪ/A85$KR $GVR%`"U Ŭxĩ+%A&Xl$loL =+iw>҆ߘuTUDÖลܵZsJSs%6t/`\20W(1w%ZQnOi=CjjNԮ ST?hNwm0G;.UN ˻bZ)հHc3T;j}͖2e;*g R`ڈZ<DȽ? Atnބ?|"$]J%Pwdl=޺)If2[s/MEv[28ZwP 9ph^I17;:4,%}hҝ:5,0͂MdҔLS:GWTA d1`#;5 ;24f2FV :.1qI(8Dќa3tKN_ə%gob@f5E_(:95M>d&u{I[(z wqU٪֯14~2g>e{E:y+먴> [lqz*ۘW|Dmme1cEpEG^ܘHXwkzzL̏Q]H4 mO [TT@6G?w "N,.U&QjғjZG U ASw%ΕY*|]QJihBƓ.'L&Xe[ M>w D&?~ްGZFi t%vb7`vMxx]FT G,Z 1yTv]/A;o-1t"e Ɍw| rF @{8 Ie>V]U"js9ݫdŜX&@})jC~N ojvx\ԭJ]7cRko&TAu"P 9Ԯ?TĜ ]ɨlq](R9oe;Xm5wjoX~W7k^hIK#Mbȍ m 7 ? mX]_.}gTdi85ov8Z:tƮ]EZ4{_#bp%nuL'Rͦ'$S7,-xH vƆLE)138-*Hg2ĉ<H:2HWtt~%ի[@eƶ=ig)5oD Qe(v΅Hb>Ja-Y΁)z[<7eY~=xM uSCY֛Ȁޞ,@"|7&4OiESG;7,N$hb+'y{%@<Ўc6tqx## NI~bF̏X5eoq!ƓK;Ë-ӻ^%v#,\vW(?uvsĈt}Dc籣1 'ƁdZdjIiqi^Bq' K iSX-˓T,)3r^mR_ Î#zV&t?|:54oR:~N])?g+h3Ǟ} =hC0ï^)uQLV2p u=%*1eIaTݵ&5V|o}u!W2+ $RMۘAp8*GkvZCS_T{5~ fHN|TT|lxrҺװ/1ˢ {"Z\>+N)x`-[HSepfow @3$DL~9wጨׇK L<>N^7ѯ+.fu]7=F>}ѯ7{5yifؖ0X|'ǎpPa&JJ+,Q\,CWZ+uQ,p ۊ*{Xy%1k~5'qSHeKJW:~]{1IΦ%[!d5?YۊJ!L T-'k( p=%ͧ/R9nqޔd*ܘ<A8Mڍ;DQ,y%\t 2'Q$[A#,nEjٗflN}Kבua"U|#:=yߞ*KRbMհqb-`Xs lz.D_Hhk J f$夥M )TŖj?vFRrDlHmfTQ 9#Nmw2uԁnyyfK(l=[?8_Ca{X$rnh\*X8-:߬ ^Rqh RM,Y0& _S 'Y*߭j;0>~ 6zWDQnRwhL!d _~}TX&RVl~R3;{}`6E-`ڪTm!mrx'm˪A1'Y" ?-m%qYmjdboʫ/.fTqq&\LgϺ%l%KVb4mx'.2.wW]gh$![Xz.e;:ԟBA\ա:> Ss 8{tdzyu|lP{^+LvD;U`릆rʣDMMYiP#_ag yrp|x虹sJ |"t;-y7ib5$em]f>l$Fx9Ο6uN>*%׸ž`Zu42nf ak j&$V;)uD#wL 'x{;٧%=hM! 9D%Smmrܙ( N9REtr ̏Q8j fXY<,[2ۘnkH}!Id6`D?(Pg!se4nr&.ztB" !4Ji@聣;#Z <" Sz~coa1 =2B/y*lY>w+_e?!|/yc͓E bQwZ} ({XY !8ibze=wH Yjy) ev`Z/2!NH4_ |?YI$v?#=7mRܾ+>ߑ*kK[+zzY=r?cҪ\o{8G:_/cѣz xR,βy_ӿ*xz.P6aV6G󏁠N^Lk9|Ќc=nrpHӝ @e[QoءDǙSDǞ{HDNImKF,kS߈1n5=8d&YaXg:4a4}dx2l_ib:lJwrƚ5R4F iG(3܇~c勬@0M( 'v\x!53)?oCO Ǟl@/^Iz]pzmEԦ1c 6^kѽlF fLqDƥuH_x,Z(/n][B1]]^m_Xdsc`-Se~U|uY*I8Mod8f3 k k9pT]/`%`\~Is\R:dZ3>);ĬϫYcsW*#"JĬ5?擗^cUzIEɜB\Zg =L~i=G6,9-qTR f4^b´1 }c(WfުZ{@먌[h*i1sϪ"F#>x䉩=&xJr@F 1a{>ޘ3d[Ҹ뒭[gw<=iDh6IYk{۾d&wYտ#k gaFoh hi YgQڴv vPȌLn[mÅwoGP(5fIWW&鈏W03 YwHd5Tl;in~MrGT? 11MtQ_M r,1fB)OXE?ȗ3U8@disl)5cU~m`6p-N2cA2a̰ZpqfsPjakkfAʃx%~]9I< $w$Œ $jĕ|=|5:7}=Nza7,nva' _D}0l O'N\{drY<.,ɉVԛF{c4,nG5_ w2ʫ9 ȶPz# $H(:z 4OXtSq% tEcʲY"B5w碹nKT[t.2\8q3^ΣCbgclEV[]2R;t3su&N DTUKQ&~*IrK_q^@}%~UYjrհx6iR >po+'^!"0Yo Us&?'4>xsn<4NS?*̟ƍs:&s"2oL!'>6P(]_EAݡG\eEnKQDW)#1R_5Αm=yນ@zO [Nή vH9ߓd9yY|MR/ǽ ,0aOŨe ܬlqJBQm?$l?~gXH-vתnXLTʶulbd•nOOOFxu795$fջ==j< okT˿[ܷrs%.\G/{Ybw7}nPyqW.D%?i䫱W}͝)':/MdZ5O<<)ue3o3 aX0NhR#RU}[^?c;!,Yam1E7 )H?aMrόN}a3GnZJ(#_hB[-"2MjQ]ySa&gp }^? nGE4zxh0Ͱ:Rp\6X~G[`SN+tW6$c=<#%| $ FWj睎[\%fQ|Y@V_ɡ몾3?iig=J!!K !(#bM} Y)qHnO}mϙ(×췞{C?))z0ʃ _` 8eH'g`CR`|vpԬcPL{QK\&_ cW@ Աu ՜{Oɧ$̟|#5i7u}Y.W7pȔm;(^ 픺`e7 p,Χ|bV|4wl ĦnH͗z^d3F~xH(3u[mot?[#.~% 7F_b'@E-B1]חw%'h8W#J7bʽx!m<$D "u{a` }oT^N/2U9g1V-3lUT٭⥩Rd"~&"=ĩ!e޲̕tv>u&XsbT(PC$ǡ-bcHXxL~%, `y)Gg-rEuʟīaTa lSj }"@[Ont-Pk! oso#ųf |Ɖ;r^ɐ* aP#ÏӨ 5:7֥ lHo O,`̌rއ.= !':<ygv`-ʚ< L&UC_;|L VN(dUi@th*vy#iuYQ ، eH%~ôĠh<]4ZdXCj/3XկQ9.Ov~ |VS,Ȼ%xe9 v ݄PY8e _6F:ȟH(x tK?}BU=95Ԟs q#s6t){Q"%Ǎm-,p2pL6})OP7H [&uK%ID]Ld|tB\z7͹I+[[?/"c>+3v8wjUulωW&9M+}l:i]~;R{NK3ʎIC>暶z>B5Bϗ!:Q7ai ߀[ZVw7M@kӊΪֆB :Ui$'..rX37ÜO]A}.`aB(Q&d AmWu\·HLH] j]#(Z $QÛ%mջߨm> 8P2˲FJ^. }AInӵAFtSW~[0S5x\L2|:7Rݘ:{&+2O:LcH6=,7M {?\}-<Io||߹J;oA '8m MhԠ4vct@'/ԛ4sǷhMz-掁-c2= o4ڈ鬳bN{WkYyqQUZ2Gպ!٬׍e|g"B)l!5ϰ1^z=<~"Պv]?cJg'fe,T#l T`y584u_'mpW)$(KƟ[|vjG#sل%vȆ~\՗cOY!_ Ŭsݸ w[:48ޓHR죗1 b|0di(K,s6Hr!Ǧ0B& zyQe-^h K<79%s!qHLwmv m RD%9Z_ T+yBoGIO_d<3J70Y?aLiٜrˊE ״-BE͙Wp?GPv%SuW N:OHBXlRK=<}w߃,fE8MVCo7҄t^zz0R/|͏rQheEi2XiW|=&{ƨ{c+Z҅xpAkK&J׀߫ӦXׁzp3)"Fmd+ar2گ%n _ހaG6'b#nyp}\r+TD$h9*oW+=Yp#bxTdu܉lAZNY/lhgq$ow? 9|-l*n#R<`i0L39-\-W]'+{@G1K%mNߏP-́8;he75—Z&Ionظdt_5VURyG8{m2 k/gTX'i-jXo;K c%ӃJ-.-N7[URMn&pR}^Uh\1 bjW"sEfN}"V?8=Kkzd-by ~WhPmkX)'c߿_ :DPA.Zݘ&vԇ%L`v=*ƺ_Uڧ1Cg> ?[{)4M/Fv c,9i*Mpm }vxWᗦ: j aséA($kƔ=6f];c|%GGdr#AǩĔ+d-/%HeI0YjH&dzIT̯u<3% 6pIIrfʌ5z ET!ѳۮ؋6JH'~]sT#{e@1ih=*ҕmφhkzr "LnDژ;yrQc%G6ct2je~~M9R4OBՇ\'YBcK+O] <9OY}rs[XeIk`DyWrw.bŪԔCTݦ@4|*#ͬ Y!a@ K{q5Hx3ǜzժgZn,{c0`UPwfSuR6B1`[y*WfClEGju-֋)!7!Җ&K/tDk^$A @:­~iUN?Ox9oʊAcm[s[j\7w'BFMGDLp pIc3ΈV߅(7֊hWt]1眬!'ҭ+^Sł׈EifAW6gLno:U#Eue@LzDoB,첐9UU+;q" "]"=6Mf<ij.dGق+5J%4F _6g`rV<ҟ6 K=wEE_y:ON1ѨX/bo[Rac&|'EO.M+W9z`#xA:mf۠$8P3]度DHyNk6OXü )j?u``X&1{GvTg)D9.3G'=?5)etέOmPla(~ 0)9ɰ|W3PyQk ߍ #zg +u֞+sm@gx{mJwp$`r4Ϻ'DzEտ6.#㈘bp5oWS@}L@^89|Tf2?Z{s(["_Po ^p99^5ĕZqWݒ%L$ .d%3)}w?=k+Qnk-ݥw٤0T41Y(?(tt&V9~}D?/2oI o"*,> )XmH\nKQqM 'Q&ZsR☆hHU1۩B >~/p?FdIU{Wp{Av#6&>ɔxz1妡ǯn.p|>wZ`n^ଌyG28 O| Ju&tyPw]-ȉ48WIgip;ڛS^ G>Nױ35~m>|KJkQzwՙĭzAMKw:/9@VMl]CckEP"F # 4Xj`p1  /gf:*ʩ$&zˍ1NOdpB4"ѱO,Jx'΄%:~k^P~o˄IezH`yW3h)|!5hZEa_hl滑xV*i.5_"#J?CP!ömwyO+Wĝ] .i. pN煇1pA0CY>N/9QD*x~Z!.IY!nBUeԕSTU}vFhX)Bǚ17fn z$mj>4Vԍ'I{,P*3p*)V˪xrcx@qDB 8U>n t0SI!9siW0 T*5:F%Bbq9] tv?ʷXq s2¶9ٯ~>< 6Go-oZG+MڥѦ g(#9GLܱ!X/A"0qJ.!(|U{8Yc]O2{zwc<>T°/A/T~G}ikT}4pIжb Q^DYZV= N5RF@:p%c* ֞`p[qXb7~$w'7 YTs[&;ǝF*Qŵ1y7kMbmN\; h 8Fvw.ՉT`7VSD_6>r~J`r A`&1Kj:  Qj@2V$JD]_|B#HkUo- K>}Qk5kq]TXb-I9kRpPq,>9ޤGRP(!'$^I=4kuC'tg3犇D\$y}>g1su*P$gr4(ޣi#g"u 8LٰQHS c}%!#PWᗜ6] Zb| ~`ɝe-}|_)~x!5,gvcCp3n#4Sp,.73k5G6>KH`V37Egua,A/ ej, 52JS~•&KT 6Γ!C{ tֳ"M!M̧ziNGc+ktJK(a0O2 }j OT5 azN@L5mKX_kd,6=QVoKA yMp8%Wn$7ÝR_#eatLYUcO^$!@ςVGD)W~#݌.*cuX_'C&Ef7coÖh9kbO6_#\,?ȡwo$#:G+r&޵F)Tt%#•0JȳHlW;A>,Q&nõ+@syG-N;xc2yo~- (LRT> 1-=g^씥8%^_;SKB Sz"^pL@>4*T{ltOt8vZ.fۣwWm:͡!'_p䲒 O Dxưy[?!glDNlwrPՊ3J'[/>B1\ "-#Z1ynnO"#r]4@CQz%U "/@_ɲZwH&3^{̍*Fx<8ci5:z*G*eS⟵#RȤw7$JٗXy }U[h=h #&<³@g<2s\㺁ʚX2$)htB,GMJ=;gAE"nbH4౓gPf07M߫>؆8 erMCqbPN^^)qcVh{Ήkμ=hUg]4^EGg^OV;W'Qp0k_lr9h-H8(3j O0ȳGb3jjYֹ $/%} 7+z Jʆ+b1 2IXo>g06^z# RJ#npB^.m 9ZK%;n'򖑙A!<1@fǯ' B'26؎n2Q5Ҍ Yuoed!_Gi' S} THOoKkWJ'meNbEIm4/GK0G3ed' ]ѿ+\Og{M?Cy%IWe46p13&Bq4;h^-)NU}._E]H8@%{Vɥ UF#xS 2(Pj+!+M,^q,[fu8]t4 _$=WڤY9i!m#ZW@a}  w?vԑB/@#%SXW#K!([@{M 6 8;u~ĂeMl9(`~8XW,2 AY]{;_[L; ^ۯh 39̕#L hrhAU%*ƮUAՓAeܶ|Mp!]޿Mь_Oaޯh >!)1JxIzZlAQx`_\ht -M ##MᆛOO@x8-sYYr+JUƷAa]kO@q][]?. mk :5p@~VIMBG` $:|˄j1D^\cߪRTjYI\[Rn5&" }.Ӵ !eh^2EHRs'P^9E svktlӓEA쇮ٮFWUۂ#v}ʥϒF}Jz19u0^#obŧm!NtFd?` 65S`a3N褭YG˸^$"41Z/ZP{_pnTE ,ځESþ_+}{ɴUYcP بFץ'K[@$,J|SG(/VjFv7{%|J" p $i>Q$n,=]9pwl{%YTx4qň‚ďNQT^&z^7tK:8`,Ċ%)yRuz>IFq2#^3(gD(x)^Q/M1~̓bW7)3˵`~sgdܞA˄7P 3iy,G9 vVXZuDŀ))/z֝PZA(jSke|Y FvN* pML^'$XoHd?E'\ȿ[5VstD2}THg=Uθ_30_mի<~c֒^‹Sal!˸:5j͉(eM@-gŸV9ܡOyCŽ|Q"Hd%Aͣ UV'XpahY/Q>Df`k fq]\9ۯ&+CZļlYۋᄞ91G%a24K*yA^x3Z h'YRo|Vn:j:RBt>Uvu73"F&ď!TuGsA*Z/W[^ &,);b'%` A$ c"'Fc#vW ˼+g/ Nfȓ4~K[ !#~SF$Tif-l@ouIv677Mwh EEC`9kWJyy3i_ z]E-)ķyQ@A0]ҒrWD IDb3jD0! fEj#eVuC.o;F 83ԣ9Vr&QqN8ÔSR307{#\9Dp}S@!`Sg-jwpL9.XD"ٗ}vO1k *45v_WEkh]Xs[uN8-QvC-X{ h-W]?$Rb; P<>U8% [e{I?􀗝ʭj%MtI,gJ%?ƅYO(^ I& &4}xثM~(6jC_+ٖ xfw _t^T&Ku Uk wJ|u?jzX_RgExYHw<,mߛ_șLpVbc s.QIFƢx%g ^G~H)&dM&DBgW56BEiJHqW ~Nu l*w!Π3C4wO3h  ۑfJԍU-4+K5f'd3+FĐL5|/k<5q";lV{Lk bpӒG]iv[a𔫄hPk|ZҨ -cfyv-f*ɂ".C s*[a yMuWuǸζW} x/YqwyVzX;](k_ qIVo<{䣡w+k?z'ǷՈ UjBG>8*J x0.JnΝ (XWW)2}=|jIhoow.c~Fz h0`" [ֶdTO9yJ 7̮(:ژ}($׳%aЍ9ta>7w3j*4 I@PCQW~›\pYĠ?WH-킅%-/nw#:4Cuj}bL\LXq ?xC`F{X#(ߏ^IL콊RO}T)ʲWIwy) hyQ ;P!`+UHD B"m~}uk6ݿʶq/ nnxgG!ƪ 5;bRHg2IA<]DrzTl3Dmk"6(\>2Tx OQ1 {A VS ./BƢJYv>erio "GhM/Qp.F',Qnej_<~Ez&JefrH u}uM8B`~׹f3eҶҨ ξIqպ2. ۞UqU0{7@ӊU+xv+xl3~oHvQX^>`%/h']cks8ѝg&)^׆8kCj^UTyoK77!$ QiT%;"Wsx6IV5)]\k?+:bĄć;Ej0,e1Sh5WIj~0kݤ ShƤ.Ԛt+ᗰV ķcp g.?Sd7{v]@ ܬZtOLs-] 8 5PMT7hJ\Mœ]zyP3{g_Q]n4ퟹZ{eIX ,3WǼ*3&^EKlBwE95*&e?k:dMudL@ZL\6d:Kw=eAҕu 78fP61b`8q>i'':@.B0:#g/Sb0 at[iMՕL (,cStOM:G;;#{[*Ob4}C#\0ɠd]]n̓䦰x*V_!L]CP厽;@ˆKR{g4*t?e+B U+S)gcǽK&d,|IM.mdٶ:s0vAhS4[, ,@ѝ"IiL񰥻"^7̡0YEֱyXYJ#A&T,w%I[*f Ō l~{G4Uf{X?eL1CHDFަ\J>HK睱_F0ĸlv^= s]dUAa!!X+hS\PuqﰏI^i}}!VL$AXج0˓x f\asn Gje"c+/ʑL0Fl2Q6U+~`)ѕP)2_ UZLΗ$ 07ſq~9E_JȈ9W&fb^I{B-ڕ1 `cW OϿW_Vk79WuNrI=X,eWWpxSzO,eBۦo^{ \ *4E*!!I|K41uOD9Z:1ZN$)QRٹ񂵅H#@LAb}{l]߇L^lLc'1L,t!s'9%2?`h,\xD(4 U5ƽ"Mz^X؟K2Ó7e\Ukvh#g8hw> ީ;A?B,;#!£ˑљ>rETczT Ґ_!dm9,^#rUfLzHL+e1 t?`Jvpv87N%嫍9ٕ@'=HݥWMBt9j8XGAH)TG)BF]`H>E-gi^ 2 K[\RAcPuw OdJY}qGYY2650}k G@JFtCp[U?ALj2!t[ab H&/2%ȾkӅR-^ٻ0s*Ϙd@I=[Ҟ,7VRn3`I(R%'A ] J->W$¾'g)BRJ(geL^k7NNg[JH!)ysɧ_{LA'F&nd).ҎJDﬦ `?z ;5q=߶4b1Q5c0m{;׷m\Ngpan"؁=,qחޒ@tEuPS?ҏ'5)nU9>pnΓ%ݜצ\N| РT"8f[5s*>m|kvPfam({,Ʀ:Z65Y>GpwbE6С6M#򃋐Y,}~Y! й7~=E\-6q:,U._>s H(jd=Al ڮ"C9<L끤v^7gcjI2U;LMLCѧ i{Dvi#2M<:Tٖ{a؋tOߢ!JΛq 1D`9CZ7(dm@8қћi3ꄍYcZӼa4q1ۿtS[?e"9X6R~G.R0uޣR{UX-/p-lFtĆC^]7Y4>qKni5,ft J~ZaN7͡+j}1,$3AP:cfA`|a sc(4=)E`c[UȋAR1P\{Lk~+qb{"× ˂$ח-q, ?=B~-||P G 4o5GU,Ԧi+u(N).  iRDn\Djq[mUuX5Mq3{۷HʳS뷢2 Փʼnu=Y^zVMsN~I^$@Fʋ>?,}7 rDr10𚸒{ZqJp;2. ߡi 4%E,/I (UY4rM~\4NqD 6INHsGvGs,tN^U}5)%."sW^Gw/ &7r}HU70ez2U/H()Hljn}/U7ȀB#JR`Y\Wzp! c;frSdX-^Ip2Ur[T91@ͿU;Xcփ̗`Ką=_+@cg)nļƔbzPT]J+5&R[_3aeD] Il@ʼC_viGFnĥR^ġþx٦)j>P4x [ HΖ4s,^,# H8ho[,DF8P0@> iN:MN*FFlB6wRPtRGȠK7A9M#M>y: uKJClAhRi;b3.b2Y8(0V?GC=,%C8.%=L[= pĚcUA~'q^|ЎŷJ/ɴ.oDI;rh+!1Z h danɁJ /`uК:S6:~_Y/#zn&%ܝ¼Qsp"o=/YX H1{o+ce"a$i?><6N,> 7d{ -_Đ{5/>NH;JJ^Cf} HSodh$Mp}];5p͏8 2>g2V;&V`|>IeF@LMӰL|h8 #ŜTfĻmeF/k0gqa*bj'QKpsg6y%Qˑ~{YIS:Jv,'LTcCR'!}I*-xf6BƟO2^MVaiS&sX+m= w[e z 9V5 k84Lb 5UH6R֫=aM2E{ i7oD, N/˿wIl/7.uFO &'ㄗ99/%o7|2JB)L 4v8RtuS%P 6ր6oy1yIL^PƒS>WPx)hGdt<al[AIL=-Z,OgOg m7[ƭulmzDF:+XrǕƤ$]U݉ ؏%v3пPYzF Et8St} Ee{3 eФ^i$g 1< Hr%yiS^DpBS̰f&FHEIo:+1;,4bVP196:W0~1Vd\"&9&TY$R2вvxGe躎9R(~%R aׅr R=Puw+鮮}d4.:AiVW=bk; Od`Y<|Z$wb4_='ŖUkugHESq*Y[ ublOSn1Th{7_nLI& g\ο=8u1橱^1P-K{\*`Sr .UTqp&pJ͘JB^!TUu54Gpjx8i;T]_F},a*6p9S5аL)!ϓ& .Pw}>ccwّ-]Bwa(E=Wͥ/֦TZ7xr wnIӺv" 5J|),N]hx2_j\QP j%/EC޴ޥz4Z@zLmpwHSxVff/M ozEbR9[!FO1RibF![Ffn]/cjExB&fY[nx m릇L7ԧ@V~@o P_ iTC,l6@s.zy*9ؙsybӦ^=l> &]'1#![Rql!4\.*˓U'C%x)]5mXm"]mw"Phj 4vg; ki90RJ:&K2 i|m]<Ɵ_s[`$6>j rуL|pugRx&I7pwTnف l/kԮC$r7HDmMdMCEII5 0),[Җ3=)]ړ"O\ށ N^X1v>N?$j6B;;ّN%c _Yg,J"ߜ"y z4;jCFh!jC@K\Xj.ݾV HQ]tPYaHΘ9oP(!U}X`ƝS˴r{A/ j Q= @5D"OcIsmQ)RCKY蛧:`,):eLnIjd.r1ēqBq`M(H䕦Mƶ"wN̾s ^5s&YQ~Q– CJװݨ_BeY|$h qW7_$O4PȤ7ꚽk@mz=0,lUsdÓ5Y~3fټ=}]+=pYb\wQۉRyH\yʷ2}ʳ<2<hzKLJ3zWٗG$җ<_aΠDXyis^G~f1[{JzRjKbߗlJëNdO3=;/B٢#-ſhK&E)=[ b2Y:A@jgRG9(TvPT^gXJۭ3a'Yޫ,(yߪ K"Xت!e@! S㝧*|98`2{d82v :l3mش\m57y|?N9M K^TZo{aUH0#MKr+GreEh*ŃDVp1Jj>i)ӱx͒(L94k*8n7G"Ƅ^NSi-;HI.4pϒ~3lZ/x$6a;f*`bQt4:Ki(xk?yCU!NwopwBhtjJ$ X mJ~3C)i;9AR]wYNω6uP0[Q\L?d iT0RmT. 3|ETt,ڥeW%ڐD~%Lzr;gK-K'~lOGi"#ҡMQ&30.c_q`>S$MYZ9@د<Mo_lZ>F X1e M3Iru.=7S=b2a;6$]X}L*咹$ 㯃j$h W"jߩAن1#ps|IX8I*9@H@r>S#J0hA/coG~.' +8 Ykt.K妍X_V!q UeJ<2NA54* T D970^\Sl9ۓUS5Z{5ގ?07ʧi wOumT&wþ,ԑ[E}b%vddufpQG)C$D`&@KUvWǀ Ʒs9_ Ӕ*N,ϱj}(99 Lրќ qB.`l8*| +v4ף̳9PIIrn=O~:_bUt-5thP L"&}-cr,"Kn~;xor_b92ϚVTJFw+c^S 5R+? I.#6% IYz}ʵ&&ٶ74\JUmMTGCCG%k < SM3~|6ܫ%g܀'R/1~8ֱ?)G)㼥_ND3+/vvzǜpibW L&nYb,Bpbے}犣H^ Yg C}灜=:"n9Ղ)C\q+/;mqաJJ> ^J&UNn>Wwߢb)_U-}EzG/ՐX|ʖj19N37Pt< oUi\(ݵ+<ên6HɯΰX'0rNƴD& YkCɠŋ޹5J( E*:edIGA2@_H`m R|+|XnpT8XmϠ<-Y` `FΩ5f"; F+\D5(ofdNp ʚq7P''Oߊ+ph I0=*A-϶VTKQ Y׵WHR!p(9%K|nB#ΌCMǢDi,%Dz֋\P>6F MܩBː l0"؜`kjnޒPhux}мck1N8X3 ٧EFt$ZxVז0Ʊ__ c9aMn%6*jXa3/\;>X9?[64*"" .YORw4{y_$8u Xw- ~ΗK7|x) e'sAL% $W8y^hg;Z3a KsჇ~!SaR3J]-m't|7(PABVm_/9\zLC{KL]Aמ˙}Ȱ!h :R,F)eKRce4.Op7 zѣV$ϕ6 eGYol\RC>X6wISYaa( )3c!!x'ҲDQaE*'Ǡ{"co, f*@\-G%,ǂfjAp /=*{e7tp.:\\|}hs qZKŢAKt@Zzΰ~x.^Mn)ʖg"U <=\g60sWDINN)q?rW@fAآ.zm!VxN~UZ&n@՛Ghᛔ|A" sú)m]؃S7fjvaUJ!_e" 6_9\|]W/IS` ÚW]@M3DK-mh  o@y+#3qܚਉ0ΈrT)^qg^q;N$'|mv1]d&Tׄ&^h'm;L(UȺAU$R.ᣅ#ƵIGT1y)e@ }7`n V;)m{75."(Xc:z~;V~ :`ֱhEok=8w&ռ.XK($QdFkbD}>L 2_ YӊMd#I$.z»qU@Gb)".Z|DvÜF9\O7ዺ^ Y"Du#;,Mm.=կQnZށ&5J3Gˡ雭`@P-7io jD`ɱ (ͺW1m^P~ozYh:YsI0r|@j%{E9m&{>HY7'.#M8]1J`K`hPh-fPB d'>,y>x0VCvy=I9)M _^X'I*d+n5۳T`^7Neր:c ;cM덭WZ6KŃ3}FvV?D{1W%Hӽ±i ՒWpMDI/SӤ d`v [YojZÁl~$i"vK5w3Ph3Ͼ5긴ɟՑ4iЍF-`ߩ]Vy;,ʿ:{}]>0QW_=KQn ܻ [4Vqi[wewлj~NnrFqҏԣ7mB}l:r~m4FA|G)?_[+z,Z;6j ;$clmnX[7gEb2O,9^Q=zvh%۫bƵH>"H7vgkx(dCK%wa:i{qS":flqa` s~[lYyo\`x>6qPT2쇐"ﾻAUYNnDLwhl8b)Ĵ@ɒ<&O8oP}2!6!TvnBMvZ$`H![0'ۉyPH$]W}(kӦQ^O7'`&۝뼚ZGWg9*E 5e[K\t9_C tW6u9F .Tve-PRDԣ~OA"l -k?CbNDz]JYGi7=7&-@Fၠ6dZPYi`Z> gI~tuA`rWXůMޣMF'>pfF ur YP o\+7z @~;< }[D;'hB噭R;2qX4"BPA: ]gI2F.ed?R׹h?6x~rA ry~ű*NPՈ'{ϲm"~S lLAw r{Z=]JWJfS =!1q] 8,(OɅeٮ -JBv46u,/v>__d QBT̑FoonoWg9=_q^B 4 ȐTs``f yk1(Poɓ$>6_IB;G\\gq/Z&LU3{-$D ÅO"|:;~4.9?V绕yQ[C|b$[ 48/㵻bI"Ӄ(7}ہhX#A-nCܬLsQxr>U}AhJU0(vg( V) !,7 U)/Y<Rp|SoJxNA1&kn~v ,Xڂ?eu?F63R`(7Kޓu6.Z9__3dҴ\gszV e’ SxJ&zZbD`pfsQDyR32|!j *eFvL؜Q`Ү춛f)JUʛ+*̗43+*xbJDMs*\ ݝ{Na.z7([c4@WT4$'K.1{@hK=(rHʚӤ\ړ9Ur?P{D^[ZSxtpir5 EQˌ%gly#;ZO{\֊mh}gQ?N+y`>KRr x0 '45Mn0Ze\tz|R+{ ͫ*vF$2zi2fXϷݽ,w:\p]wӾ1OSy6qD ҊS$g/4?tƀjcKېGi{ E"9|Pd%Gnwfm}>n40 79T= qjP7P$rwv1xկ;:`YmRC"^+x#'.}:Lg%u5p665|~c1hՁD Dȩ uZ_f;oG $mSMBqBzwXbP1W*E_Cob%* "Y^pn~l)Slǀ2*ͧ`Sy=߾O&'  /~s@ҕ ߶~hUp7tD RðM~w@E)uA#:hPi-t".hPc8J2`ï$9!t2qe,p8~dE@Fpz(BXiLW {&N5a ͙;F]ek2m-5PZ͘',̈́!nz,*+/89{ AzŸ `\O{7]뫗.ko|Mv;P2@Mz^7o[Xv;MJ%G.NL]v 38M&%QF#Xx ys8H[/>f}XJ!ԙN"pZywly7]=͢AJYA=PD!խ9ejGMMݑ~3TiO2*V8)c y?dd$SQ91ǵ) >u!l!2]ۙuh[Pl޺|V8rB@sZ=tK˜rvy7̬p[TtzxrR[2j uЛ&e:JU#\B̧Bݖ/Z_8$1|2"m0FzDUBN9CNYV<P?A܈"9\?a7!\6F = Z;xJ!1'Z/wsF3-ِ|_8YZ\R嚍gBuFm_м̦ޤ~`Qk{ly%fo>(O|'%~E!A&@uхK1W<5A |G ׏{9KO:)Q#'V8YK{1rJ ûefHKccZRm0DOH)k(KJ#FRUoJe~*3lԒ%ͧۡ)1M7#`[cE$yڑo@US{.DGGi&ВFK~>ƳedQL]7bV!NQ5&]M ]OtBκpo=RUͤw ZkcgYmȬZѹKZQL-L`/c?bHa*RFV~P/I֧# f&t6vc.&NtD|+i@-z#5&f:{]#tÌ\>or&! ~D^+~iC7/qv{f6 l vTEOѣ?PՊCNy~fG&q`FrJ_ N9VWyrX3~s*5&fo(Oy 0/E[>PʯOX]DGܒX5.mWTp1ȀL9$)ݿGa]3;xt:g~Ɇ>+QAz~,hD!M90)׳+L Є}s;ֻ& ݞO cu+NesFP޸0HL@:J}Tx50.?wv@oMU^_δ4|>>4 '27 6lTҿI4+ WߛHn+лTf]nZEκrc4uI8;YXVT(K!e``}D}DuӕH|X@.oxS.y%Vujڬ޷dTD!Rg=4Û[Sp2N:D<| }ax$^\b@<{“53nHu+A12Nˌ9JCLGM lOobz jbX'$ȾUˤV\oxfmfr:ܛ ybq[0]-EA_`+<<(Gru5Q*8Pk uI-1.GOApM2QxA8[Y"]* ÷4&SI$-R;H"zbԹ }*'PX9@3 ZJC8LoBJ٤2yń޹m:&&Fȳ@:Eɺp`2 ?B7BlogΊx/HVY)ƈwOفlrmnͬ'&$ o~5QFi(ϟ_. L}r j!5W<"-> #0p>|39֤tU4';Zu~L^$pIp ܩ?L slt2Ef5S=сU/AJJ/z5x)[][zPJG'ynueP_"HY@ %La7!.wH.+ƚ +$ݥֲb?ªF%nLp~=@D[6pNJ *K}p -:wZۃ"|=0+@V@zQ2]3:as `DzPywu mH+h{ۜ I HG+WaM;@*.LPC((6 Sft:񉡍2hY[x4q_JڔB`b pnPvOuPcMR͊CJ0uӃ.m>K1QeU49xEUq5~n휇@w[cVL-X?Y 'gg+[̎$;pO0r6\ZfTS4~}9?bQSC>~+d^f~^=ch04[3+wC:)wR`8}ĉVB!ݹH[e"b/[McU#8bg#s̕TCmO㟅I'R 񨐲Aߘ.'sx{l҉^a՛IFm/Ҋf 9 B@2qMPq FpN#/4|hx) ̝![=G/:l 腀p<&%[|/H>h0R;[Dh*<`>y*Y/ƛT~@[vA4hઠtlMAӁI2N1G*I~LzĽpc+avR<+h`M uIt#a aM m*ĩ5OJ7u69Je6kU}*5"EwZ|4hy\zP˼nM4 a8؂ZЉagc/de[F~s\ cΞk#t A BʐˡSk[t=>_̢"B,[2+I[GAGǺLס^R(G;:s 'ϒyaٔ܅4SA8ye0sd^B?>Or+xjLɍ?|<&iէ2`"2]{'NG@'O-Ygץf`Ŷ' :?JYi8hzmxuR)g4k";nWo^!Zp<Ѯ%O8'OH䩦ܫt' mKY?wrJt xQƬhIO]3zb=m8V5*;@vzy:^El̼V~?)Hiy`qV7J!f*{ H پ3l< Ix%JGc8| 5 `آ?]J}d&yr"t(?/i bgf{s!oLӜ5o0{O]x_1IFO:2 ZZ7 ~g#QC}z-@S0Q-=deuڭHC=gV(\s;slp~jŞLmµ{1In.f5$\d݌?r@YH{Xa ް 0bJ07Ե}աם<>gSDdvNF+7 Fc0AM y6b[` 2l`uD1ctY {cf6lqܟ)^lF!DV)ˉ( ^Ff;F=l΢ Kkчm]LbTw'H~|(Z{q xY^%߰⽉`gpԜc|Ij?꧟LRGjm'Ǿ:~[ ֚  aDXf؇sB+4~@r)m1 .d)V,pgz{64gtqaJI"aœ5Io#yx30%OMfE)LO>YZ"0I8<5!ʋgGU yZxfײ-T{6&̮^!Zey ۱V1XD%cZoKO7fg6nI8YZ|thdAc VzwXNʮ;d8a Ώt BevzHû` 'p.oBE$$&P(F˵6PC(T59j'I+F x||*uQe-J(O;mgLIC2GنyaACUb[ls8#]9wpOZxZ7X |{.}>Q} Aru)*,N^sD^͚g6?tڛՀEQ5C8lw9ޔs^8g}.b@\PPxkt£ce{3r(ӜiOAFmm=uϐiuj ]vkvbWN{J4kƧǘ§5)wQJNzM0hen5- &Pc!Lj͌j;7D^ eޫ EXqs<=f?;7z[~s/#q٘23Kxbxwi ӻձEQ{'A}BZit[-IfoA,ਾc3+G PY6![=DtgޤnС(u;t53LWYkx'0gل /&cW)Ơ6h~ъowq|&vOvK :[8`ӷ!c`z~Dm {'LDn|FoRKXªJa$r ( -T%? ؇մK3\z7ⲉpٷBzH42";nO!~{DQH ptW4p 6i6K5n݇>gY02d*Yˢ>}x:;1Q 辎/Ӟ"DVRKt7,fqͽ &#fcOת zUHK4"1P$_-;CV08W5;pmʣn>e *SʨLo{b{ !ڧckIXWDb-;F>h&`*e\.68L.̜লp$dlŮR]:~m/WaBӍ"ǎnY0yXO!T:DU<4kOx<eQ#%5^C}@ K_,*|)/vuG[?׎=v/gБydS3i̱ޓ*g 2l$]0g])e_ 01v? |T.B[ c)JJ@fΰŁLN Sp yYW d %DƅdD$lhVHn@ G4ƚ)05[&@bL1uDގ|!7W5!+dwG`KZ"^ #}FhLv>],r 3pt)e@O#ay 3#{mKeK{b3b5;U cS?ae%Ͻ٥핿}`$6W< oFːfB@Y*I2 <| %wKq*eμS7+O삒K}1]5YO[]O"1ܞ> NR6 8,APq2 ٫gH9~m28P0 S[ $ö9,u$sY#O+kil?_ˣA '[P=YXi?C5In 4^" Ʈ7e'` aH;nV@:'AKʠE v[PUZ-beG>f~;pG@\_|njא(e՘9a@ wT-2d!88$j Ɖ5 -ɐJ52\neyw6CTfM20%EgN95F$Ē~`LF7i5O Y@Hx|%xSpKakUf)@mK}"/SA!G~R=|ݩgs7g6|žc52m'ЃΥXZ#U{7ǒZac'5֠eGԸDi_@ՈԨ9KT=ev ƜKע館"ЬMhx+j\j!y&1 YA (HSDaz/h߇7pLLʏGuU?wȒ-!S߮K23yi+a qQw!FCq'i>E 㮕x]6QZ_!#iS8$}dC*-pMc32{'dXT8OҘTjI:֯(O㦯'+8䣶kDhx{HBqee m\oyVyXV1^l.'谘B2yhhtwj CG#5M6ѓjFﯖk =/&f[ Vy ;Z)3S8CL Њm!K4'1̻0UW&خQ*S1d:$G9\e<hZ7YT~ j?$Ad)[kW}21Q-DX%M76L Z]nm7hwirI+f(f#H>d@Y3,=Z`"܀79w?3{ ,7u0&$| 4Nq!gI6gm2߾Rk9D}7\8,# t9)'lSwi/Q#5@n. 5 V0Cb ܻWQy)fxɢa ] bsYbI_+,[?ZÊPD)t)+w^TǽܳʹH s(t]ޏ;iʦ׼8/[!TgbCbӟhԏ!3n,ǻdȆ1.D #~h1}V%6%7hRWl0O邎;IYM(VqIK6XF䈽EA2Ќl8Fu0W7o[%$-?wOmfG_pK>v1ds^\6O;w ?lԹIN8vnuRH-vs;*8P،@2/eŽQHƁHMDכ.OJ{@͋QjRQ7 O*M-$,VOl W񵆲 ߌ9=D 07dAN?w#$$ewJrA'{]K!ܢLvA>EjH>fkM!#Pҷ2KE9D^1RF{O;쿾nz2}qÂyvQ/mH4N(DoNNji'a@A&w@,#hȰ(Y7A6EnD_=&躍"l"t<>g]ZT'8yoŷS2K[|=O(;욂 *YŸOq|Yޚ'ÎYݒqZ[jCĞ2:[ mFd-v6;-ɼf+.OÉCܩf eiPF#gֱm\:VAO}wxb2G{/ cKkAJNɩ|%@㿉>Ywf ߔ1xEGE2FVAӏiw7-yC2/bt"޼q;" $MpiƄR/7]A_j!rL+AHYvЀ7[5GQeލpDL :џ>:%ڳ[jZ뢭[vg8MQ0r93S%P8}{_@*#>N+pzˬo&#;VE5w8e^zR -3j݀Д)_1D 4؎KrbT_4Dr# hXG iWz)` gľiHdV"Pp='5'k˒f4gpMY3b|jLDc Hʇ>55 J,]yYHv CrE=h7.96*l?.lSm4pzܸ7%>^4Tx9A"2.Im&g96 fK*-ˮm!U ʬnť0Nkl|)?hR˻"FwQ"G8l!:x ᜕o?BI65密f#w`l>vgD^ݽ}KN\czB=eR bS]>'ɡI':](NaX>f7gPgmK:(кf4#&)$ <M@y!`Hj?:IXx'"V}T44⸃>j ToNzB4`{$'Ns |d3w`uKDHc M_zU=Uv%;ң&,A}.PNBECiO/ZȔg/1q,}ͳMVOiĨ*lLHK#ebS޽Ik>] }4X$@=9F㬤\ׅsq6ޓq &-~ 4!900 ;z^^u. <1ٵՂNUv`#eȅ u'm\oIL-U an_zp9Rp2Ra/7ӛ;(4 R!/Qpy[A@m^^[7rĭTJcu: 8+每d;A>ՅQ-xpIΎi"}˗vNL2KOM<=Id i[YSRz$R2yc$zR]N `WJX3ؙ.v]T,qoLi2p;/""(`ѽZM<ȶqVy@ܭRtlCỲƻX1~B9N,T+5v5j]Pc!/z&m1<{f=w0RbILH$$RPϦ9&ߓZI!ה7U FQg[H 2{+hDL 8T-`l')GCH袚4>z@ 2!5sC3 2Ӑٕ?܋x!_;&C@%R,r>u,n7 5~q5}D7y74Dt*qpBx4)ʂdߤ%,n#N8*P, T}z&ܐ4 Qϝ<4L0@+rvnTi~&UUM*85MF$EgXpemrK:{:0f*1W 4F 8ջ-ңrKFS <fvmvedx*`|k{zT,h p*26k*`5p,˜:i0aAT٧Oz>Iݱ=ru ȣ*T]b.TPX'?7=rژxzL;@ \ı*?xʖ#㢮,Qk쫋B'J8<_URyEݦRPeE.CE/-#;ryFerlۊE%p΅-ԗDpTk|Մk TI"a $l o1s^,D鱸V%M upKӳyṣjkWSn\>a*!h' 1xb- e8p쪐G98p'aekّcNIW==ep"#1Uko>;Y3ަq&-&# ^f*R718~Es_B"VY$KWW6yf82'7tk\WЂ b:kF_s({2[&L̒R} \hf(r`ڷ\{ [.Gnq&Ⱦ̰)ڥ3,diueXTheHFk]5 4mvڞڌx6@iCO '*~\\zٺ<2KX"ܘrp.q\ 1R{0ã AlĞeb.g]X"&0 ¼}b uL00cvtG% ̠@0᫚0O*~Ӛzh%6VYE;֏*{ClD0cW3_J.DaG;MHi1 hN6IUiԗ ėґOF>xn9UUpS{ZJ[́w }»I1 0nb$o` nܴjQtxXfԳfP)m9'1W䲖g삃n8Q#ES%W r8K$p唖THyJ|%M`n'bʳYk@%PꙤ,ϷVYy,FyĴI%Wf:鳠1-bjCi#AYrNw;qFZ)v;8VN7Jo$9a%\ue 6C*%Epj1)9ꏖHUzkr򷠠|f hs/6[nvSo#Qsf,H?ь'q,L;ɕ rKAvpvzт7✅DfغtOv;Wܖ LH{%YA[F$`|vzͯ2d7ZR6?N^;2$D5A$"f:k3TR $=i˛ &1[OG; Q؍$U,dl"ŋ Qy$ "Ͳq,'=78R ܷd;U4!ukt$vgRv XwCVEٙB+&-Bٸj#8 WG%'ELD𓢓2}TڀPX* ?i 3jDVY$t":=U#;Wj&um*3t Tcs& q4nNp3$ր[P/wU|cYP ䷐i]-Ky?&VΧ }u]mnGGH @c`+˴XT&īt-^s# P2ق\uOMА[u\^U,4a.t\*WV0 h/1ITzr0RO[Jq{d(񣼄 *3ʟ#$ESBќ[ih*w L* )_#xof`B r?1ӨwaW%WvPK-i~uR!={Q"'oP&jsxR*B){W~&5l2'(2 x)K'Q@7QKURh =l=7m|Fv৮ȟB^**pJx_B+fAebjZYhA/0LKiAkuFYn垳+`vl]ا%K7%Sx-.מNhu}kO2k >Ӹ)'m× Fk5 cOT@  gC0ex9K$dt شJi{O7"Zi0\?i.:?yF!;]|D&fh%Z5 -e{ 8 ķ5.9ʪ]ی6VH !U`@aW\65j{/|FGM6Gg(.+mBʶjC%_}=P" g4 Hzܶ͑Ȓaқ}z;G0T,6*x̻h \IJ 4#0%})M%l)n6fk4vIC0m,1B@ȳMLL,0o/*Zj+bhiV0% k3E;Dp4:#ȦzCb=G F:C.\zzjpu%[9ȺrB &_H3D{c>0.@d>D?yQ0{=3S\Z%(kԳD[ܼ7qU}e]8aOtG=QYwYa3.u0biPF72Y"?bZ.晦k"’Tb7vaLxaiʇ9tQ"; 4*Ԃw,敧Xs}$47o~k2dƙ88L+E6 cIyڎy " ;x1: Ew+ܥNؕǝ| {w&.%93Qdӛ4cK}-:QkbF+@%˩6^ @*M"P|z%`#̢*tlHd,R/X hAW*pr5m7?%Rqe 4*~\60R"I fqsasO ]׬CI:(.nT(`,feW{9qyYsFW1-ţv"d*? 3rQ6;&E=cP%Rl4aC\u ;wѥUQhg  XM;rGpUg^[\]eAƤ5)u/"40%c(x6sQPgSѐֹwz7!o=Ǚ,*q){>mVg*OVBidC\b_ ._Ho2N'쁒q=buVpeS^"Ż?wbALSEB}mgu>{*i|@\~o&Gm~-_lhOɳ#KFHJI\$o U7c"^ ܐvϯ:F?޳d/(ORNnq糒ZiN礼AQ9KvǞ0S(om'+MɩT5'bֽ52ECTG8XKW8l$8۾#fI ?ԣ p;n~թ }.\*;~Œ?IfB4d5HmAHHuG:okHw4n/jYr%R;YoG}J?CԀ.k.@vwaN3\b,mJ, V=k? G[ڋ\J<hTE!a۸!Q'ɟmuTQH0\l6"%8}ZF d\rIt)m+_QARߔ%TseD C/LB JkJomWW*}o0ȥ;騽$:qzjsYwo-\/#p]T%k/J|$2|&Rk%GN\yziejLgZ~m)HXޘI+1węOԱg0O0eAg9# +joIP|lu 7A26ekw䰙Pi>kVD\c@TќjvR}Ws;WPY8｢9 A〕תQbiA^pI_byuښqBch<#;BFta~XԳdku2#r"Pm[\ڿkň $֧.>@sp5shK2 Tm Ml%-@ehk {FaeY~f`O~aXPwv8ћ%x)p4c$|r{Ah*?R2]Jhz؍t0}v݉:|eC{Q١BX\kiQyX\ {\KǛ +n|ĸCN=P-ΞUL 붴[KBd\cUD'~$Wbu>ð%$`l^*v<\B1ފjnk%ݞ!%(nvvV28>6ȊxEKo҅SG޾H+bi|gdgKG=3nLjL+r%ia};0*aomoݠs-גuB +4 kzDInw *֙jɕALznͫ /d>V>nڀH *ǰOc.yBQl1sSvA lasX&BY"-8Q3sI`[я}* `QJ Yab|>7 ؤG3ܟD/o97a)qT_IamzR_$b )niZa~d21HbJdH?5dk} uIGtf|'dG:@aI1!܅>w?m#|/)љe@J][MߡGlXL8!W=)Vs,߫{.}B^$bK 8t>Ldꂟҷr9 *1"B˴/˖z Ť?^øVk H^Az#l#6~B"&iBmwk$W雸Ai&eE/;X;9"FL7,bosµطM=n"DYSrBhRS-7M L򄗇<>dtC3,0L@,PƈFU{8gpu4 is?*z78Gg&gF;SfojS! 3xqcWYdhn5PUɲMPȆҠ!}Bđager5P\l4Q` S/cg+2$e07@0zl+ҿ&FԢY潲}B敍c"9Zo`A xp.!>xvOpH3 ~Y8h`; p|MMB$0<יb!GIuzF^n,޸+3ތU +Q @z=i.;-Ǚ}Z(ԃgDh޲J¼hH|bݼ+SVc0<-xU ϙX5 W I'cVZ}g?vy.>JM0MqڿAKmmK.:Ԇd@}ZúY~l]~7G7j`͠8p/C@753yx^:p~궀״]~ lhrvg,'rz\kc%TF|~­)p(EMFҥÌ0եNkn|(0 D2Ɨ>6pJZ¸ A$BC@1z,+B>-e,r{Ic*D|s,wA<̗@8n{Gok8-1MɠA%T~oU%lܧc " n5caQl5HᎺ|Whi. WzZήO `Y1yC,+nJ\pjZtM_ 4 -:R㩍ŤL^ Xq#I"DY-#i1ts/EqhAX )D1y$RXu]{Ò ۜ6/&AWg1ޗ/aj4˕g)](\zX )yN=#.@yc!OwmnBrMÞ@]@C]/CFvR>Os| si/n$$?N`P)i/($R«4|1-H[WFָ \B&xc1kͯdՙo&H/HRvU svnlܛP]8Dl`XRpx\L|9oЛ/8~5.Xȶ6aK':HT5"Xnb-nR3r6ʞPy3ɴk{u;1}rݬ}٘W ?Z`{$eei+L g4TIuԡ4#fZjo@sz^6A0O"YxUЅl!'Wxn.̘QL/-5k,Km``pTv'O ./ݬ:?cۜ3q?)#iLih5M 4L%Щ9TZ_`X(H'[nZ263fClpI7Lqȓv p,[V"{ކ y7J  il7IR@@o錀5U`7ibYU:R5-fpkuzc g؃KeDL+ݲݺgvky!t7*W\\)Ț|jwN?AATҺWCc:Xg*O<,& ڕ0`=Xhs-s87 +uB 4Q!_58q`<)Fe#jCFz1{~r4~cJDI4JQHv۟)ap9K><4̿.2 ǡ.}HQ:7.KS!acELXΰҶ`Pty?5H;rΩvR]RMmO𯝀-%uǻ,d ]}Q7EuA>F3^3b/%i楩HJx @UڹOЇ(GFDȷbQoxM idx "wl-;&St)eqʴg[Ep(?Llҫ<@xG)W%hF9l89a8qrjo)3LZvkY%Qbe܉VwF٢|;vcKĝH(jAa:U |9r/e!5Zx7H6kTAUr]BPd!:T$g>^CDENdl)X,9˴OD3wϬ,9I23輈e)_  RG"v~r׽cVUٜ A@W,f`Œ"L`6YeVJJzbՙC#7d|W2@Zcuαb0eL[05I sM%=ǖ|Z176n|G1U-^3 2T^V*z:Y\x*r`<뛉]FaU??4{GKmhPmdz=Ch B S)놲l[eNys7 = t4!-!St'}j9=`R]`./1i'`w<; c\OV7eNU6{62>/gNwkPP0(.йSQuއmQY0+ <6S"pЭAR/Pj2TG?QRߦ 5aRYn+h82\H>q`rr) i|s[!.[6y4EbuZĝފ=ߪR*#R BW߄0lhjḘޤC^-][+T?G3hҙ^F%%8SҪ-~ 1}Hō'T*c 30D>q (Ҭ9o@/G\ ZߧJ%Wr雺S <  cee|H[h̡]Uv4ApCiZ^?ڊrKQ}DS |Qp'^bw>{ (E=s/ 2k(c@W6Z6T;czX!~x G&`@ެm<sqah_E|֝ x16_}<]yvдM,&&.aT<˄=Km mHo{<Ǭ3%y洆'g;+; JF-`A+{X"XB^5Qux$4٥1A'0Al)@%Z(lt|*Hc%;kΛRV g84i4hIX[8fe%sb)ͩ8Z C <<32HGOQMva(d9Hig/k*Z~LlJf(.݆8ץDܿ(F(eKa7/kz@r"JQӜ51lf:NT nũsFYR,bt;bj⎐_b 5IyxY14Ύ/ l|ejL75&vdV굢48^8BqTtvATM<# l9f+.8J'BQ' w> >FD{[*5<#ZsǿNKyjOB4AlQ'DMvQ& NWeGD#4SEvMw#/cHTN1%A;!8oLRf!1)y|%PUѧ/+tAk^+qR[zm#W$^ip]=v)waX#TbgLޮU+llcmz J/eD\v{㞻| ~ݛ{XZFV؝?x7't0UW5/V/MFrd~{LA'` >y]Qv x.@| G a??#'%ʢL" &&_9 wocW.5ОxMLgk},י%95(}ȣEs==$ t#,ȝD[U6LWb!be˓x3UU!Q=PMY@]_2w.S =A'},~f iȐioDq.^ddLbhIAw&^W%;4oV¼ŋ stB!kFk.)tKeg%# V?EE8:1@TWg@{^D6~z@,ZW#Ls\t[%ۋ4piaoなy~':zVx'vSU/$6.kVʖex )y_# Ro\22&Gz ?X'"2_:Ζ-]3jʛ)l葿NE(K|z!_Y>>roCRUcQvs7]bSl׀SD 0F%a}^g.LE8np dk W 3gHEzlTGh ۊuOr2;$ @ד4EӃԞUdRmܣr( _p\Jn$K….5"Xi#`9v'$!DLM5-[# %s-ךzGqY:GI1S_S!Uer.={_˽ `#p 7cƭ᫅*wpCv|!k^.'fEN\>nnS\,X\ /P'TUQ"ȚG$vE2G5 $qb¼,o\آm}tZr+(v/:PZQS*"tdFbXq,ŇJ*r(9!`Mw qcs۞aIoML]޾ή(tHgX̞*&WN6%2'e$QF`|"vjSsrwN>Uş׉|z u8Lk c_qU|BH_֕=?rm5=&1A(c}|w^Cihtg΃Dw>Cw潑ɮRZ՚ o1Y5kZWB@fɖ *Uq8*G@tH1 ̋Nf_1ۂ,}i?ڄ  4AVi -sm>#/}n M'ZR'H_~{ykwW@:RȃO"ڱN<$v b%X|X5(f`gzTK۾XwAa$ w.2ϗ84_-7?! h퉽`&WlC5[́`D݋q/B#mKuX 5x$2QDBo.-QT:C%UzAis;RJ2=?)2i|hJ0{۟w^ЊE 0SY +20hRW&x oNў'd7.xexgLӎd$Rt '1=Naq=B&W46A{5Nʯ]·yYt;Y+0n#La[řίLǃK${s pMlEpĦm7YQ̝dFg48HWSRD 0T:*"PϮ|YR슢R~c>Cm"/o|* w)n"¤V-,Re>Jx96yhx {TL%ܩsT)Ձs 5UiRS[ wG}- OL}\gofLߞbH~`jP(F 躩%q$I6[Y(?r-OB6hrJ6 -4s p*P#Э asCH.-s 5 #q̺4KU 0 s>dk)Q ]9{ɜ <(&v46BJʽ+hW^W)b9.ED1gˋp=zhp ODAsx@G쨝vG7xCOԖ DžB0 g4ڷcbx44i5!L#Q6~ajz{2q, S=>;]& a LKxWoalovBlRPwiZel@<L˴V+͌jdD3D!#kz}kNV[hIM;CƵ?}!i"\-@%ؠ'(cՠtk!DO:(nT{xehYՒr' z߂Uq>pv7C' 1i&&wvu6i+1pu2A/U{H?Iu+ZQ]@a([DU˳2|3L:/`] m*=6

Ir; iAP6fwQSXRĶx S}(ƣ^n6(Nz!InzI s€34%,wۊߓ&0,,4**3_FK+]&'(%X}vbcքIm#(G^>1(faݠxt:D;f J x= ,~anN8QsքFk[]*W&~R91kT>=[<-Vo\ 60 nZ _fA:p 8!DJ*Y d1s">7&V $>p6w+Zo;!wDq@aF*:eV-(FR &S$!%]$Z-rHNjLiKQYU6-B΅.8 &C\QwGgm` \̄ra|$zeP6S7(;ުGǻk/VHqE>CG@B~N@:ղrU^CP6.9Ps]M1l Ν?JUPI M 2)ӑCڛtDkLK#E)X9ƙ(C=c=SK"Yzfu]*&;R@-_+`Mo)??^ $ڶr2^.=)1ZP95-OݭgNBQBQf=BoOI+/S'f/:N0+ֵO"U|L4)FI> 1)3U{dVkock }`K 43ѣ>hZSzv!LGy(RzsU%Trt=TTd?toKapZ(sUˢW&:I%Ϩ"ZM(̳k l4>0㟂9o No9şEIeYh;v% R%~T.GL>:RWY?K!$g%r}5.Rv6-b fH[X< ;d,l|́ηׯbL<3$=9){z3-IK]X ocU?%7. w7Y[3^Ō􄘗Kf,Kd׺Xbݟ'| |hUp.g\QW\dgk^b)c9JrD9, !i3GʅG>{Hł%SCZmt<'~՟gzW.}ؖTkFg#GXd]F:I,hy*<.sAgS%1T$4.|$%tX Ű*횬zX1ڴ/Xec9]k aK29ɴa9C`q,m\w;#E硁ZlE39UÂw_̙sy,c0#` 10_@B\0? cK2b: K08XA=UQ@p_%4AW3`lJ+&)OKq(vbx4͋q 8ȢdÓd ]\/M-.mL0@Mpj-lhT5DLqTEV6mKBf{Rhay脗L$Dk>{ Z/pш)@.F+,ޯέ^g"V "ќSG.3d΂.P.Hۉ/]lW2"[ >^f?X ac̡X tJ}u6f x.e_2XĶ=IJFw[DsuOs*gsd^& ]j[4]U(K;I z)}jd)MU4JY- A,ͨ)@gJLO:j3+=PYlaz A)&>M975QBGLJ>>Cxɸ:*Yʏەg<(`^t?pU" K8g+HG/^] oRbPzSA>oD9M*CSf罕{r@*Ľt+ià@ڣH+>fU{7Z$*]ƻ~̛41 [Z+.7;1ԭ1LoAttCʏd3Ҕ*7Ơ zo76@Ձ@:W\vBF Mю2EkP|lx9դ<iuWt6 K9p Ue}n[7RlBx tu@oA·ɸt:nPe7B^L$taU:u7-5r|F糁 BeRTc-Jվ .'~G#x.|-X 5 8s&]I ꐒK.6y'R'M6n4Of}˒ F#yrfx;b Mg-1լ}={KTF_ԤlJMdtjrr.o:72S> 62D6 $BXPieR]n5pPm + tk@\n|nXyI}$QY${܂ҴӐ(*߮U(x` Wg])C49]e.FwvM,J_3yh4+}}",,KV=D_s˭-Ho$>|^vK%p%La/bR>!Ӗ.v}NubFqgf5tk"b5fdr{_a4j@Do\j!¸ 6ՠ2LS]vK1~rС^LM$럚5kZ$lLR؜}'~sڻYm(Ѽ/ Qr7(2mz:U49 cK" 52bJ,(f-' @p`4g%QΩb[b%ɧ{|P(l S8r'~l ȼDU ^mq$mU/7< g&~Øv*&֐epDtιo&ۯqh/3nxٱu,;7cS]-6HŎ[ Pl#YE 3XþYEuRi$b12מ;L;\#kY+`qNh Nbv-7QW`Dt+ *jU%R8$vQy"բb,cQa*HkU [gi.b&2g|~ BIPbQ݋1wYHxDO@v'|>'|\951mf^^k0h *>fq EJSLq),hP K#=ܓLjcgr`^M3j2TsfbN{nm{wƾ|b٥Lmˁ$Zv/t-S/cyzqXH";z]aN $U2'4?0CS8K &ޥn{{FC$EGB)?IAm8y.(kVDloPH2\n@ixy(>l)nCrBkӻIZCA_:;7+o:ƃ)O}xY#uN:+JE |(lV(3Ixo9MQg/T^Ҩ`C7M![aE ᪞,Wy[Ъ/4b F牵(+8̡Jƃ8vۅ¼*FcQzEN"?L/>P'@>gO_VeษqeA9u2uhȅqjde/fqtBw xN3M~Z,Paq:nd\u7V!Խ ߺ[UnIcw)&)-ǷmiVh/ WX#[ 5Vc< 9rlNzRq&FH% G?ɀfO`b*8fnK]C: USo%Ďhke_@hRqL bXܹ'\ߋ}<'l/T,:dS8dZ,f "5Hq@F9աp٪sSzcfAR }8`xE1tG íꘈ' gFkUn4g8t91OSoC̖*M,5aI"_cT)TšޕE.T.Tݠe p YTG/*2я)$ږ`ìޑ4%D}KI. vQ+&1lk>MՔYt9m )7V ~x{Ap0㷇WiR[hrD0 h#~oK$\ !4;OϋLdĩE1:*}KL1Hf*:[Aȋ6ެe7rN$-!`@P[W!3;m@B`)^xfsjT S1QU᧊lD}q̇泜@qw-LIkL=DB[G0&I07y&~3R"NfJ؂lo}|Y#xC33 H/eN?"X{F*Mup$?7cF k8JgQ{kP@ rS ${>NL9Gt&,t,Iwz"ʉFk:FgyW6J"6f' ɸm4#IсW%GuHV<{qWDF 7,q]Sjb{d)O[Lğu;@OH_񨟴6hv%AL$=]Kbw_0GTe Ýg)u9Xl~즟ڠ%K1rjʶ/>[Sǧzb:Pq*gFH2yyRZ:+61uuP;V9hU®d(KV dYa7P֧UFάFwN[`BG+=Ҿa1.+WͨHAVe'jwQ A5{L0xcW/樤z] D/3b,8A\!ʉ r6zȤil8݀yoXzdPjcLJd0Nlp;U@#a$Co kBЃft{ż)CB 9۝?+F] e'*9 H7%b_@FowOq(E;Y:k2^'u5k@@sSEqH-xjz ɡ8#B]ỿL8F"ƛfCSD 3Ea 6m60~6//gVQޟ1ݟoc}PРc Ί.0AF2Wo~9cKgNL2'qZW] т݂ b$# $u-_Lt/ Pk38[MPnJ 9mk x~=9䔪}48Y^Zqr K%`ڣէdiVvvn3`{kv}4ICHv /$V g?Csjy]$jwc`vV y b[=a *vK9Դ\5M鿡4(U~كlN|%t+_TNI$#f<X&*O2-XW~:GX-1.ENCbnܗv,F$GKxR]!ߙ3?N#6s3=Cg,L Dqu/ %_kB(B3"TJ?鋿"__e(<q@)ж+15u㗁z:%+eˇKչbt)xd9 >1Om zcQ Ja]48|΀Ƙ}.d #f_)XySLb?"Қ62Zi"|YM-'>N'h@;#dZqAmT?*WT _<㉌ jk4U<qҚ{J\W –wɌp2mc{| dkB0%37ŦTqQ _[JZgP$O|P7ve͓Ӻ<$ELX3c 9I3,`# IF^$^mF%j[ ,@c33K2YfصiavlIpd#p Ud}f&_qu\;Q7bxS% rOwfu/cj%"l$4Xc`@mnոڅ<C/{5F}cP "W{WԚKgǚrfa6uSΨyAfIƛ/M>f$/\l@61  ass|71=I m.n\呻#='(=.KTas %5/x|旈z=j6lrE6YJI9b[2 ],FsLn:uTj)B̏d*Ӓ,~U=e cP&TG;ٲ@*H8Ǜs*HZ_JPo> U:ߣ/fy@$^-A)ަ}gP @JUoWiWfKFynN0lqj[3+_zGƳ) ,-bT/~VKjmثNCvWQ1`:ޏpvdiL1-5rv֪C2u˽aOIoS(R:AFM3%Lޝ@\6?ك~C*'ZϘi o:[!r=/iFpS̩.z,D/_]'Gho @کUCeh\ Q+x_P>qzVr=c娺 $9h"+w̉=]RzZp}W9ǂ6k~j"7 _biF6qEKE+ùy\?%!1OAsŒDisг-CN՜_sMG?Yw72,͵ڋai.$I2HS]0 ]ʀ:mjU6x?bѮ!t!̻H!M%Xt|% GZhlӓѪ&2U}576PJ @Ď_6țT6ѝԑ~(+$ck@w Ĩv8AQ%PJ1oGeܑݓk6GM<"M!6ƀK*&VDˋ8nVLuרc  YN Q;3čD;o}r2 /]G֑.aߋbEj$w!t_zӲ Çix;؜Gl/s|c򏜗?%E(:6A2pO)__w@ֿ Nh@10W"?G62ӣo/ؙ9dC꧗:m>_x2’ӮF7$%9,蔪BLZnUp,09E~w4A 6(m&ɄjxqjmQOf6\ '2/2W7鏤P?;+\tyOND3x! !/6ׯ^|<뻬 #! (C> <6w&((@qBs2=xFADlDV;jޟ> Wv*C9iԃ; {-C>x vxULL 5zp=*l\#ULP xY_U AXI]I%1ljQWߔ0 ]y̲xN4(( X3o.y•۰ݩG ):UaI?H n<݂Zo"0r`gbr=]mPMFLhV\ڻi^G_l(eB4ͤ{p9]Ob|.9 YZ