apache2-prefork-2.4.43-lp152.2.3.1 4>$  Ap_E"/=„GQC_k h.n3^i#c6~@یf9:W-bb9G,wDtnb^C@hpi!0mfe#`<۽%VlŲ4150745abaa9d3a8266dcbae227d446d8a6ac2aa929b057736bfba06c589a2b2c7abb776dd847fd35a2904a819d0b653ddb8efa68_E"/=„2* \P1S 8 Ѐq%g5g0; 21MCo4٣$r*0y$@>E~_qhϳh$VtGmzYʜ<ΟUBq2o !<4!tbl$o!.j?7nW~Ϥtorq|Gt< yC[ QjɈٝo)*[OR'hpeE0Ƹı-λzx ts#Y|]Q_^ 5bWi |>pDSx?Shd % V8<HL_hs  ly Py  By  4y y y ,yy!my##y%& &(8((t8(|9*:6>7A@7KF7UG7lyH9PyI;4yX;Y;\;y]=y^FbF3cFdGeGfGlGuGyvIwJyxLyyNzNOSSSS"SdCapache2-prefork2.4.43lp152.2.3.1Apache 2 "prefork" MPM (Multi-Processing Module)"prefork" MPM (Multi-Processing Module) This MPM is basically the one that Apache 1.3.x used. It warrants the maximum stability because each server runs in its own process. If a process dies it will not affect other servers._Ecloud113 openSUSE Leap 15.2openSUSEApache-2.0http://bugs.opensuse.orgProductivity/Networking/Web/Servershttp://httpd.apache.org/linuxi586 ( # it might happen that apache2 including # /usr/share/apache2/script-helpers is not installed # yet even if apache2- has Requires(post): apache2 # because of circular dependency between apache2 # and apache2-MPM if [ -f /usr/share/apache2/script-helpers ]; then . /usr/share/apache2/script-helpers find_mpm # when this is run in %post(apache2), it may happen # no MPM is installed so far if [ -n "$HTTPD_MPM" ]; then ln -sf $HTTPD_SBIN_BASE-$HTTPD_MPM $HTTPD_SBIN_BASE fi fi ) exit 0if [ "$1" = 1 ]; then if [ -x /usr/bin/systemctl ]; then MODULE= if [ -z "$MODULE" ]; then # restart all instances touch /var/run/httpd.restart.flag echo 'Requesting apache restart (all instances)' else running_units=$(systemctl list-units | grep 'apache2\(@.*\)\?.service' | sed 's:\(\.service\).*:\1:') for unit in $running_units; do instance_name=$(echo $unit | sed 's:apache2@\?\(.*\).service:\1:') if HTTPD_INSTANCE="$instance_name" a2enmod -q $MODULE; then # restart only specified instance, %{apache_restart_flag}@ # means _only_ apache2.service echo "$instance_name" > /var/run/httpd.restart.flag@$instance_name echo "Requesting apache restart ($instance_name instance)" fi done fi fi fi ( # it might happen that apache2 including # /usr/share/apache2/script-helpers is not installed # yet even if apache2- has Requires(post): apache2 # because of circular dependency between apache2 # and apache2-MPM if [ -f /usr/share/apache2/script-helpers ]; then . /usr/share/apache2/script-helpers find_mpm # when this is run in %post(apache2), it may happen # no MPM is installed so far if [ -n "$HTTPD_MPM" ]; then ln -sf $HTTPD_SBIN_BASE-$HTTPD_MPM $HTTPD_SBIN_BASE fi fi ) exit 0! g %%$$$$&&   " V A_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_E_Ee91f40368574ef8eb296b36be491fabb77383f80d307313d002efe13d6c96d85de9a97c3bf04f22dfe4860b197373bd66e3172f08d0ba07b1efc9567aa424227../apache2/mod_access_compat.so../apache2/mod_actions.so../apache2/mod_alias.so../apache2/mod_allowmethods.so../apache2/mod_asis.so../apache2/mod_auth_basic.so../apache2/mod_auth_digest.so../apache2/mod_auth_form.so../apache2/mod_authn_anon.so../apache2/mod_authn_core.so../apache2/mod_authn_dbd.so../apache2/mod_authn_dbm.so../apache2/mod_authn_file.so../apache2/mod_authn_socache.so../apache2/mod_authnz_fcgi.so../apache2/mod_authnz_ldap.so../apache2/mod_authz_core.so../apache2/mod_authz_dbd.so../apache2/mod_authz_dbm.so../apache2/mod_authz_groupfile.so../apache2/mod_authz_host.so../apache2/mod_authz_owner.so../apache2/mod_authz_user.so../apache2/mod_autoindex.so../apache2/mod_brotli.so../apache2/mod_bucketeer.so../apache2/mod_buffer.so../apache2/mod_cache.so../apache2/mod_cache_disk.so../apache2/mod_cache_socache.so../apache2/mod_case_filter.so../apache2/mod_case_filter_in.so../apache2/mod_charset_lite.so../apache2/mod_data.so../apache2/mod_dav.so../apache2/mod_dav_fs.so../apache2/mod_dav_lock.so../apache2/mod_dbd.so../apache2/mod_deflate.so../apache2/mod_dialup.so../apache2/mod_dir.so../apache2/mod_dumpio.so../apache2/mod_echo.so../apache2/mod_env.so../apache2/mod_expires.so../apache2/mod_ext_filter.so../apache2/mod_file_cache.so../apache2/mod_filter.so../apache2/mod_headers.so../apache2/mod_heartmonitor.so../apache2/mod_http2.so../apache2/mod_imagemap.so../apache2/mod_include.so../apache2/mod_info.so../apache2/mod_lbmethod_bybusyness.so../apache2/mod_lbmethod_byrequests.so../apache2/mod_lbmethod_bytraffic.so../apache2/mod_lbmethod_heartbeat.so../apache2/mod_ldap.so../apache2/mod_log_config.so../apache2/mod_log_debug.so../apache2/mod_log_forensic.so../apache2/mod_logio.so../apache2/mod_lua.so../apache2/mod_macro.so../apache2/mod_mime.so../apache2/mod_mime_magic.so../apache2/mod_negotiation.so../apache2/mod_optional_fn_export.so../apache2/mod_optional_fn_import.so../apache2/mod_optional_hook_export.so../apache2/mod_optional_hook_import.so../apache2/mod_proxy.so../apache2/mod_proxy_ajp.so../apache2/mod_proxy_balancer.so../apache2/mod_proxy_connect.so../apache2/mod_proxy_express.so../apache2/mod_proxy_fcgi.so../apache2/mod_proxy_fdpass.so../apache2/mod_proxy_ftp.so../apache2/mod_proxy_hcheck.so../apache2/mod_proxy_html.so../apache2/mod_proxy_http.so../apache2/mod_proxy_http2.so../apache2/mod_proxy_scgi.so../apache2/mod_proxy_uwsgi.so../apache2/mod_proxy_wstunnel.so../apache2/mod_ratelimit.so../apache2/mod_reflector.so../apache2/mod_remoteip.so../apache2/mod_reqtimeout.so../apache2/mod_request.so../apache2/mod_rewrite.so../apache2/mod_sed.so../apache2/mod_session.so../apache2/mod_session_cookie.so../apache2/mod_session_crypto.so../apache2/mod_session_dbd.so../apache2/mod_setenvif.so../apache2/mod_slotmem_plain.so../apache2/mod_slotmem_shm.so../apache2/mod_socache_dbm.so../apache2/mod_socache_memcache.so../apache2/mod_socache_redis.so../apache2/mod_socache_shmcb.so../apache2/mod_speling.so../apache2/mod_ssl.so../apache2/mod_status.so../apache2/mod_substitute.so../apache2/mod_suexec.so../apache2/mod_unique_id.so../apache2/mod_userdir.so../apache2/mod_usertrack.so../apache2/mod_version.so../apache2/mod_vhost_alias.so../apache2/mod_watchdog.so../apache2/mod_xml2enc.sohttpd-preforkrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapache2-2.4.43-lp152.2.3.1.src.rpmapache2-MPMapache2-preforkapache2-prefork(x86-32)apache:/usr/sbin/httpd @@@@@@@@@@@@@@@    /bin/bash/bin/bash/bin/shapache2apache2libapr-1.so.0libaprutil-1.so.0libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libpcre.so.1libpthread.so.0libpthread.so.0(GLIBC_2.0)libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.432.4.433.0.4-14.6.0-14.0-15.2-14.14.1_2@_^%@^^V]^K^E:@^C^4^%@]]X]@]]_@]UI@]^@\\@\N\@\v{\]o@\A\?\5@\1[Ѱ@[u[ @[@[[LZ2@Z2@ZZ@Z@ZxG@ZtRZp^@Zo Z:PZ:PZ8@Z3@ZZ@ZYB@YYp@YY{Yu@YlYf@YI@YGY1S@Y@X~@XXX+X7@XtXj@XJXAb@W@WWWW|W|WF@Wpgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comYunhe Guo Jan Engelhardt Michael Ströder pgajdos@suse.compgajdos@suse.compgajdos@suse.comJan Engelhardt pgajdos@suse.comJan Engelhardt Manu Maier Arjen de Korte Petr Gajdos Dirk Mueller Arjen de Korte Manu Maier Petr Gajdos Petr Gajdos Michael Ströder pgajdos@suse.commikhail.kasimov@gmail.commikhail.kasimov@gmail.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comknut.anderssen@suse.compgajdos@suse.comfcrozat@suse.compgajdos@suse.compgajdos@suse.comsergiolindo.empresa@gmail.comrbrown@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comschneemann@b1-systems.depgajdos@suse.commpluskal@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comkukuk@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comkukuk@suse.comjweberhofer@weberhofer.atpgajdos@suse.compgajdos@suse.comjimmy@boombatower.compgajdos@suse.comtchvatal@suse.compgajdos@suse.comkstreitova@suse.comcrrodriguez@opensuse.orgfbui@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comcrrodriguez@opensuse.orgpgajdos@suse.compgajdos@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgpgajdos@suse.compgajdos@suse.compgajdos@suse.comcrrodriguez@opensuse.orgpgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comcrrodriguez@opensuse.orgpgajdos@suse.comschwab@suse.dekstreitova@suse.compgajdos@suse.comkstreitova@suse.comi@marguerite.supgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.compgajdos@suse.comkstreitova@suse.comcrrodriguez@opensuse.orgpgajdos@suse.compgajdos@suse.comcrrodriguez@opensuse.orgpgajdos@suse.compgajdos@suse.comhguo@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.compgajdos@suse.compgajdos@suse.comdimstar@opensuse.orgjsegitz@novell.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comkstreitova@suse.compgajdos@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgbruno@ioda-net.chschwab@linux-m68k.orgpgajdos@suse.comkstreitova@suse.comkstreitova@suse.compgajdos@suse.comLed pgajdos@suse.comLed kstreitova@suse.comcrrodriguez@opensuse.orgLed pgajdos@suse.compgajdos@suse.com- security update - added patches fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE + apache2-CVE-2020-11984.patch fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071] + apache2-mod_http2-1.15.14.patch- fix crash in mod_proxy_uwsgi for empty values of environment variables [bsc#1174052] - added patches fix https://svn.apache.org/viewvc?view=revision + apache2-mod_proxy_uwsgi-fix-crash.patch- declare ap_sock_disable_nagle to fix loading mod_proxy_http2 (thanks to mliska@suse.com) - modified patches % httpd-visibility.patch (refreshed)- version update to 2.4.43 * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic] * ) mod_proxy_http: Fix the forwarding of requests with content body when a balancer member is unavailable; the retry on the next member was issued with an empty body (regression introduced in 2.4.41). PR63891. [Yann Ylavic] * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request identifier under load, see . [Michael Kaufmann, Stefan Eissing] * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}. PR64140. [Renier Velazco ] * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info". PR64172. * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure to allow customization of the usertrack cookie. PR64077. [Prashant Keshvani , Eric Covener] * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication. PR 53098. [Dmitry A. Bakshaev ] * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms. [Eric Covener, Yann Ylavic] * ) Add a config layout for OpenWRT. [Graham Leggett] * ) Add support for cross compiling to apxs. If apxs is being executed from somewhere other than its target location, add that prefix to includes and library directories. Without this, apxs would fail to find config_vars.mk and exit. [Graham Leggett] * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github issue mod_md#172 (https://github.com/icing/mod_md/issues/172). [Michael Kaufmann , Stefan Eissing] * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+. [Graham Leggett] * ) mod_ssl: Support use of private keys and certificates from an OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile. [Anderson Sasaki , Joe Orton] * ) mod_md: - Prefer MDContactEmail directive to ServerAdmin for registration. New directive thanks to Timothe Litt (@tlhackque). - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now check all matching virtual hosts for protocol support. Thanks to @mkauf. - Corrected a check when OCSP stapling was configured for hosts where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm). - Softening the restrictions where mod_md configuration directives may appear. This should allow for use in and sections. If all possible variations lead to the configuration you wanted in the first place, is another matter. [Michael Kaufmann , Timothe Litt (@tlhackque), Michal Karm Babacek (@Karm), Stefan Eissing (@icing)] * ) test: Added continuous testing with Travis CI. This tests various scenarios on Ubuntu with the full test suite. Architectures tested: amd64, s390x, ppc64le, arm64 The tests pass successfully. [Luca Toscano, Joe Orton, Mike Rumph, and others] * ) core: Be stricter in parsing of Transfer-Encoding headers. [ZeddYu , Eric Covener] * ) mod_ssl: negotiate the TLS protocol version per name based vhost configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's SSLProtocol (from the first vhost declared on the IP:port) is now only relevant if no SSLProtocol is declared for the vhost or globally, otherwise the vhost or global value apply. [Yann Ylavic] * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script output. PR 64096. [Joe Orton] * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066. [Giovanni Bechis , Jim Jagielski] * ) mod_systemd: New module providing integration with systemd. [Jan Kaluza] * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table, r:notes_table, r:subprocess_env_table as read-only native table alternatives that can be iterated over. [Eric Covener] * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection. [Yann Ylavic, Stefan Eissing] * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env, r.headers_out, etc) to remove the key from the table. PR63971. [Eric Covener] * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct` always `on`, regardless of configuration. Found and reported by and . [Stefan Eissing] * ) mod_http2: Multiple field length violations in the same request no longer cause several log entries to be written. [@mkauf] * ) mod_ssl: OCSP does not apply to proxy mode. PR 63679. [Lubos Uhliarik , Yann Ylavic] * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469 [Jim Jagielski] * ) mod_authn_socache: Increase the maximum length of strings that can be cached by the module from 100 to 256. PR 62149 [] * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503 [Ruediger Pluem, Eric Covener] * ) core: On Windows, fix a start-up crash if is used with a path that is not valid (For example, testing for a file on a flash drive that is not mounted) [Christophe Jaillet] * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which means 'foo' is "not acceptable". PR 58158 [Chistophe Jaillet] * ) mod_md v2.2.3: - Configuring MDCAChallenges replaces any previous existing challenge configuration. It had been additive before which was not the intended behaviour. [@mkauf] - Fixing order of ACME challenges used when nothing else configured. Code now behaves as documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this. - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik]. - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted "transfer-encoding" to POST requests. This failed in directy communication with Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing] * ) mod_md: Adding the several new features. The module offers an implementation of OCSP Stapling that can replace fully or for a limited set of domains the existing one from mod_ssl. OCSP handling is part of mod_md's monitoring and message notifications. If can be used for sites that do not have ACME certificates. The url for a CTLog Monitor can be configured. It is used in the server-status to link to the external status page of a certicate. The MDMessageCmd is called with argument "installed" when a new certificate has been activated on server restart/reload. This allows for processing of the new certificate, for example to applications that require it in different locations or formats. [Stefan Eissing] * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS protection. PR 63688. [Armin Abfalterer ] - deleted patches - apache2-load-private-keys-from-pkcs11.patch (upstreamed) - httpd-2.4.3-mod_systemd.patch (upstreamed)- use r1874196 [SLE-7472] [bsc#1164820c#6] - modified patches % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port) - deleted patches - apache2-load-certificates-from-pkcs11.patch (merged to above)- require just libbrotli-devel- build mod_proxy_http2 extension- fix build for older distributions- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache to honour net.core.somaxconn sysctl as the mandatory limit. the old value of 511 was never used as until v5.4-rc6 it was clamped to 128, in current kernels the default limit is 4096. Cannot use the apr_socket_listen(.., -1) idiom because the function expects a positive integer argument.- apache2-devel now provides httpd-devel [bsc#1160100]- add openssl call to DEFAULT_SUSE comment [bsc#1159480] - modified sources % apache2-ssl-global.conf- use %license [bsc#1156171]- load private keys and certificates from pkcs11 token [SLE-7653] - added patches load certificates from openssl engine + apache2-load-certificates-from-pkcs11.patch load private keys from openssl engine + apache2-load-private-keys-from-pkcs11.patch- Add custom log files to logrotate according to apache2-vhost.template- Remove redundant metadata from summary.- version update to 2.4.41 with security fixes: * low: Limited cross-site scripting in mod_proxy error page (CVE-2019-10092) * low: mod_rewrite potential open redirect (CVE-2019-10098) * moderate: mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082) * moderate: mod_http2, memory corruption on early pushes (CVE-2019-10081) * moderate: mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517) * moderate: mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097)- fix typo - modified sources % apache2-README-instances.txt- revive apache-22-24-upgrade [bsc#1134294] (internal) - added sources + apache-22-24-upgrade- version update to 2.4.39 * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a backend connection is recycled/reused to avoid a possible crash with some SSLProxy configurations in or context. PR 63256. [Yann Ylavic] * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA failure. [Michael Kaufmann ] * mod_log_config: Support %{c}h for conn-hostname, %h for useragent_host PR 55348 * mod_socache_redis: Support for Redis as socache storage provider. * core: new configuration option 'MergeSlashes on|off' that controls handling of multiple, consecutive slash ('/') characters in the path component of the request URL. [Eric Covener] * mod_http2: when SSL renegotiation is inhibited and a 403 ErrorDocument is in play, the proper HTTP/2 stream reset did not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael Kaufmann] * mod_http2: new configuration directive: `H2Padding numbits` to control padding of HTTP/2 payload frames. 'numbits' is a number from 0-8, controlling the range of padding bytes added to a frame. The actual number added is chosen randomly per frame. This applies to HEADERS, DATA and PUSH_PROMISE frames equally. The default continues to be 0, e.g. no padding. [Stefan Eissing] * mod_http2: ripping out all the h2_req_engine internal features now that mod_proxy_http2 has no more need for it. Optional functions are still declared but no longer implemented. While previous mod_proxy_http2 will work with this, it is recommeneded to run the matching versions of both modules. [Stefan Eissing] * mod_proxy_http2: changed mod_proxy_http2 implementation and fixed several bugs which resolve PR63170. The proxy module does now a single h2 request on the (reused) connection and returns. [Stefan Eissing] * mod_http2/mod_proxy_http2: proxy_http2 checks correct master connection aborted status to trigger immediate shutdown of backend connections. This is now always signalled by mod_http2 when the the session is being released. proxy_http2 now only sends a PING frame to the backend when there is not already one in flight. [Stefan Eissing] * mod_proxy_http2: fixed an issue where a proxy_http2 handler entered an infinite loop when encountering certain errors on the backend connection. See . [Stefan Eissing] * mod_http2: Configuration directives H2Push and H2Upgrade can now be specified per Location/Directory, e.g. disabling PUSH for a specific set of resources. [Stefan Eissing] * mod_http2: HEAD requests to some module such as mod_cgid caused the stream to terminate improperly and cause a HTTP/2 PROTOCOL_ERROR. Fixes . [Michael Kaufmann] * http: Fix possible empty response with mod_ratelimit for HEAD requests. PR 63192. [Yann Ylavic] * mod_cache_socache: Avoid reallocations and be safe with outgoing data lifetime. [Yann Ylavic] * MPMs unix: bind the bucket number of each child to its slot number, for a more efficient per bucket maintenance. [Yann Ylavic] * mod_auth_digest: Fix a race condition. Authentication with valid credentials could be refused in case of concurrent accesses from different users. PR 63124. [Simon Kappel ] * mod_http2: enable re-use of slave connections again. Fixed slave connection keepalives counter. [Stefan Eissing] * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR 61310. [Yann Ylavic] * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932 * mod_ssl: Don't unset FIPS mode on restart unless it's forced by configuration (SSLFIPS on) and not active by default in OpenSSL. PR 63136. [Yann Ylavic] - deleted patches - apache2-mod_http2-issue-167.patch (upstreamed)- Reduce scriptlets' hard dependency on systemd.- added patches fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965] + apache2-mod_http2-issue-167.patch- Replace old $RPM_* shell vars. Avoid old tar syntax. - Tag scriptlets as explicitly requiring bash.- updated to 2.4.38 * mod_ssl: Clear retry flag before aborting client-initiated renegotiation. PR 63052 [Joe Orton] * mod_negotiation: Treat LanguagePriority as case-insensitive to match AddLanguage behavior and HTTP specification. PR 39730 [Christophe Jaillet] * mod_md: incorrect behaviour when synchronizing ongoing ACME challenges have been fixed. [Michael Kaufmann, Stefan Eissing] * mod_setenvif: We can have expressions that become true if a regex pattern in the expression does NOT match. In this case val is NULL and we should just set the value for the environment variable like in the pattern case. [Ruediger Pluem] * mod_session: Always decode session attributes early. [Hank Ibell] * core: Incorrect values for environment variables are substituted when multiple environment variables are specified in a directive. [Hank Ibell] * mod_rewrite: Only create the global mutex used by "RewriteMap prg:" when this type of map is present in the configuration. PR62311. [Hank Ibell ] * mod_dav: Fix invalid Location header when a resource is created by passing an absolute URI on the request line [Jim Jagielski] * mod_session_cookie: avoid duplicate Set-Cookie header in the response. [Emmanuel Dreyfus , Luca Toscano] * mod_ssl: clear *SSL errors before loading certificates and checking afterwards. Otherwise errors are reported when other SSL using modules are in play. Fixes PR 62880. [Michael Kaufmann] * mod_ssl: Fix the error code returned in an error path of 'ssl_io_filter_handshake()'. This messes-up error handling performed in 'ssl_io_filter_error()' [Yann Ylavic] * mod_ssl: Fix $HTTPS definition for "SSLEngine optional" case, and fix authz provider so "Require ssl" works correctly in HTTP/2. PR 61519, 62654. [Joe Orton, Stefan Eissing] * mod_proxy: If ProxyPassReverse is used for reverse mapping of relative redirects, subsequent ProxyPassReverse statements, whether they are relative or absolute, may fail. PR 60408. [Peter Haworth ] * mod_lua: Now marked as a stable module [https://s.apache.org/Xnh1]- SSLProtocol use TLSv1.2 or higher- do not create sysconfig.d when already exists [bsc#1121086]- use secure http sites by default in configs - Switch to DEFAULT_SUSE Cipher suite- the "event" MPM is fully supported since 2.4 - configure an OCSP stapling cache by default (still requires enabling SSLUseStapling in vhost)- updated to 2.4.37 * mod_ssl: Fix HTTP/2 failures when using OpenSSL 1.1.1. [Rainer Jung] * mod_ssl: Fix crash during SSL renegotiation with OptRenegotiate set, when client certificates are available from the original handshake but were originally not verified and should get verified now. This is a regression in 2.4.36 (unreleased). [Ruediger Pluem] * mod_ssl: Correctly merge configurations that have client certificates set by SSLProxyMachineCertificate{File|Path}. [Ruediger Pluem] - updated to 2.4.36 * mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified responses. Regression introduced in 2.4.35. * mod_proxy_scgi, mod_proxy_uwsgi: improve error handling when sending the body of the response. [Jim Jagielski] * mod_http2: adding defensive code for stream EOS handling, in case the request handler missed to signal it the normal way (eos buckets). Addresses github issues https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167 and https://github.com/icing/mod_h2/issues/170. [Stefan Eissing] * ab: Add client certificate support. [Graham Leggett] * ab: Disable printing temp key for OpenSSL before version 1.0.2. SSL_get_server_tmp_key is not available there. [Rainer Jung] * mod_ssl: Fix a regression that the configuration settings for verify mode and verify depth were taken from the frontend connection in case of connections by the proxy to the backend. PR 62769. [Ruediger Pluem] * MPMs: Initialize all runtime/asynchronous objects on a dedicated pool and before signals handling to avoid lifetime issues on restart or shutdown. PR 62658. [Yann Ylavic] * mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has behavioural changes compared to v1.2 and earlier; client and configuration changes should be expected. SSLCipherSuite is enhanced for TLSv1.3 ciphers, but applies at vhost level only. [Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton] * mod_auth_basic: Be less tolerant when parsing the credencial. Only spaces should be accepted after the authorization scheme. \t are also tolerated. [Christophe Jaillet] * mod_proxy_hcheck: Fix issues with interval determination. PR 62318 [Jim Jagielski] * mod_proxy_hcheck: Fix issues with TCP health checks. PR 61499 [Dominik Stillhard ] * mod_proxy_hcheck: take balancer's SSLProxy* directives into account. [Jim Jagielski] * mod_status, mod_echo: Fix the display of client addresses. They were truncated to 31 characters which is not enough for IPv6 addresses. This is done by deprecating the use of the 'client' field and using the new 'client64' field in worker_score. PR 54848 [Bernhard Schmidt , Jim Jagielski]- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation says (patch Juergen Gleiss)- relink /usr/sbin/httpd after apache2-MPM uninstall [bsc#1107930c#1] - simplify find_mpm function from script-helpers - /usr/sbin/httpd is now created depending on preference hardcoded in find_mpm (script-helpers), not depending on alphabetical order of MPMs - simplify spec file a bit- updated to 2.4.35: * http: Enforce consistently no response body with both 204 and 304 statuses. * mod_status: Cumulate CPU time of exited child processes in the "cu" and "cs" values. Add CPU time of the parent process to the "c" and "s" values. * mod_proxy: Improve the balancer member data shown in mod_status when "ProxyStatus" is "On": add "busy" count and show byte counts in auto mode always in units of kilobytes. * mod_status: Add cumulated response duration time in milliseconds. * mod_status: Complete the data shown for async MPMs in "auto" mode. Added number of processes, number of stopping processes and number of busy and idle workers. * mod_ratelimit: Don't interfere with "chunked" encoding, fixing regression introduced in 2.4.34. PR 62568. * mod_proxy: Remove load order and link dependency between mod_lbmethod_* modules and mod_proxy. PR 62557. * Allow the argument to , , , , and to be quoted. This is primarily for the benefit of . * mod_watchdog: Correct some log messages. * mod_md: When the last domain name from an MD is moved to another one, that now empty MD gets moved to the store archive. PR 62572. * mod_ssl: Fix merging of SSLOCSPOverrideResponder. * mod_proxy_balancer: Restore compatibility with APR 1.4.- updated to 2.4.34: * ) Introduce zh-cn and zh-tw (simplified and traditional Chinese) error document translations. [CodeingBoy, popcorner] * ) event: avoid possible race conditions with modules on the child pool. [Stefan Fritsch] * ) mod_proxy: Fix a corner case where the ProxyPassReverseCookieDomain or ProxyPassReverseCookiePath directive could fail to update correctly 'domain=' or 'path=' in the 'Set-Cookie' header. PR 61560. [Christophe Jaillet] * ) mod_ratelimit: fix behavior when proxing content. PR 62362. [Luca Toscano, Yann Ylavic] * ) core: Re-allow '_' (underscore) in hostnames. [Eric Covener] * ) mod_authz_core: If several parameters are used in a AuthzProviderAlias directive, if these parameters are not enclosed in quotation mark, only the first one is handled. The other ones are silently ignored. Add a message to warn about such a spurious configuration. PR 62469 [Hank Ibell , Christophe Jaillet] * ) mod_md: improvements and bugfixes - MDNotifyCmd now takes additional parameter that are passed on to the called command. - ACME challenges have better checks for interference with other modules - ACME challenges are only handled for domains managed by the module, allowing other ACME clients to operate for other domains in the server. - better libressl integration * ) mod_proxy_wstunnel: Add default schema ports for 'ws' and 'wss'. PR 62480. [Lubos Uhliarik } * ) logging: Some early logging-related startup messages could be lost when using syslog for the global ErrorLog. [Eric Covener] * ) mod_cache: Handle case of an invalid Expires header value RFC compliant like the case of an Expires time in the past: allow to overwrite the non-caching decision using CacheStoreExpired and respect Cache-Control "max-age" and "s-maxage". [Rainer Jung] * ) mod_xml2enc: Fix forwarding of error metadata/responses. PR 62180. [Micha Lenk , Yann Ylavic] * ) mod_proxy_http: Fix response header thrown away after the previous one was considered too large and truncated. PR 62196. [Yann Ylavic] * ) core: Add and handle AP_GETLINE_NOSPC_EOL flag for ap_getline() family of functions to consume the end of line when the buffer is exhausted. PR 62198. [Yann Ylavic] * ) mod_proxy_http: Add new worker parameter 'responsefieldsize' to allow maximum HTTP response header size to be increased past 8192 bytes. PR 62199. [Hank Ibell ] * ) mod_ssl: Extend SSLOCSPEnable with mode 'leaf' that only checks the leaf of a certificate chain. PR62112. [Ricardo Martin Camarero ] * ) http: Fix small memory leak per request when handling persistent connections. [Ruediger Pluem, Joe Orton] * ) mod_proxy_html: Fix variable interpolation and memory allocation failure in ProxyHTMLURLMap. [Ewald Dieterich ] * ) mod_remoteip: Fix RemoteIP{Trusted,Internal}ProxyList loading broken by 2.4.30. PR 62220. [Chritophe Jaillet, Yann Ylavic] * ) mod_remoteip: When overriding the useragent address from X-Forwarded-For, zero out what had been initialized as the connection-level port. PR59931. [Hank Ibell ] * ) core: In ONE_PROCESS/debug mode, cleanup everything when exiting. [Yann Ylavic] * ) mod_proxy_balancer: Add hot spare member type and corresponding flag (R). Hot spare members are used as drop-in replacements for unusable workers in the same load balancer set. This differs from hot standbys which are only used when all workers in a set are unusable. PR 61140. [Jim Riggs] * ) suexec: Add --enable-suexec-capabilites support on Linux, to use setuid/setgid capability bits rather than a setuid root binary. [Joe Orton] * ) suexec: Add support for logging to syslog as an alternative to logging to a file; use --without-suexec-logfile --with-suexec-syslog. [Joe Orton] * ) mod_ssl: Restore 2.4.29 behaviour in SSL vhost merging/enabling which broke some rare but previously-working configs. [Joe Orton] * ) core, log: improve sanity checks for the ErrorLog's syslog config, and explicitly allow only lowercase 'syslog' settings. PR 62102 [Luca Toscano, Jim Riggs, Christophe Jaillet] * ) mod_http2: accurate reporting of h2 data input/output per request via mod_logio. Fixes an issue where output sizes where counted n-times on reused slave connections. [Stefan Eissing] See github issue: https://github.com/icing/mod_h2/issues/158 * ) mod_http2: Fix unnecessary timeout waits in case streams are aborted. [Stefan Eissing] * ) mod_http2: restoring the v1.10.16 keepalive timeout behaviour of mod_http2. [Stefan Eissing] * ) mod_proxy: Do not restrict the maximum pool size for backend connections any longer by the maximum number of threads per process and use a better default if mod_http2 is loaded. [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Gregg Smith] * ) mod_slotmem_shm: Add generation number to shm filename to fix races with graceful restarts. PRs 62044 and 62308. [Jim Jagielski, Yann Ylavic] * ) core: Preserve the original HTTP request method in the '%] * ) mod_remoteip: make proxy-protocol work on slave connections, e.g. in HTTP/2 requests. [Stefan Eissing] See also https://github.com/roadrunner2/mod-proxy-protocol/issues/6 * ) mod_ssl: Fix merging of proxy SSL context outside sections, regression introduced in 2.4.30. PR 62232. [Rainer Jung, Yann Ylavic] * ) mod_md: Fix compilation with OpenSSL before version 1.0.2. [Rainer Jung] * ) mod_dumpio: do nothing below log level TRACE7. [Yann Ylavic] * ) mod_remoteip: Restore compatibility with APR 1.4 (apr_sockaddr_is_wildcard). [Eric Covener] * ) core: On ECBDIC platforms, some errors related to oversized headers may be misreported or be logged as ASCII escapes. PR 62200 [Hank Ibell ] * ) mod_ssl: Fix cmake-based build. PR 62266. [Rainer Jung] * ) core: Add , and conditional section containers. [Eric Covener, Joe Orton] * %check: do not load all modules, just use default loadmodule.conf; some modules require to load another ones in advance * %install: parallel install is broken- Updated description for SSLProtocol option. [bsc#1086854]- Updated description (PCI DSS) for SSLProtocol option. [bsc#1086854]- SSLProtocol TLSv1.2 [bsc#1086854]- updated to 2.4.33: * ) core: Fix request timeout logging and possible crash for error_log hooks. [Yann Ylavic] * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM, where children processes need to attach them instead since they are owned by the parent process already. [Yann Ylavic] * ) ab: try all destination socket addresses returned by apr_sockaddr_info_get instead of failing on first one when not available. Needed for instance if localhost resolves to both ::1 and 127.0.0.1 e.g. if both are in /etc/hosts. [Jan Kaluza] * ) ab: Use only one connection to determine working destination socket address. [Jan Kaluza] * ) ab: LibreSSL doesn't have or require Windows applink.c. [Gregg L. Smith] * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms. apr-util's bcrypt implementation doesn't tolerate EBCDIC. [Eric Covener] * ) htpasswd/htdbm: report the right limit when get_password() overflows. [Yann Ylavic] * ) htpasswd: Don't fail in -v mode if password file is unwritable. PR 61631. [Joe Orton] * ) htpasswd: don't point to (unused) stack memory on output to make static analysers happy. PR 60634. [Yann Ylavic, reported by shqking and Zhenwei Zou] * ) mod_access_compat: Fail if a comment is found in an Allow or Deny directive. [Jan Kaluza] * ) mod_authz_host: Ignore comments after "Require host", logging a warning, or logging an error if the line is otherwise empty. [Jan Kaluza, Joe Orton] * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix Y2K38 bug. [Joe Orton] * ) mod_ssl: Support SSL DN raw variable extraction without conversion to UTF-8, using _RAW suffix on variable names. [Joe Orton] * ) ab: Fix https:// connection failures (regression in 2.4.30); fix crash generating CSV output for large -n. [Joe Orton, Jan Kaluza] * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic] * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to improper merging of the cache lock in vhost config. PR 43164 [Eric Covener] * ) mpm_event: Do lingering close in worker(s). [Yann Ylavic] * ) mpm_queue: Put fdqueue code in common for MPMs event and worker. [Yann Ylavic] * ) mod_session: Strip Session header when SessionEnv is on. [Yann Ylavic] * ) mod_cache_socache: Fix caching of empty headers up to carriage return. [Yann Ylavic] * ) core: For consistency, ensure that read lines are NUL terminated on any error, not only on buffer full. [Yann Ylavic] * ) mod_authnz_ldap: Fix language long names detection as short name. [Yann Ylavic] * ) mod_proxy: Worker schemes and hostnames which are too large are no longer fatal errors; it is logged and the truncated values are stored. [Jim Jagielski] * ) regex: Allow to configure global/default options for regexes, like caseless matching or extended format. [Yann Ylavic] * ) mod_auth_digest: Actually use the secret when generating nonces. This change may cause problems if used with round robin load balancers. PR 54637 [Stefan Fritsch] * ) mod_proxy: Allow setting options to globally defined balancer from ProxyPass used in VirtualHost. Balancers are now merged using the new merge_balancers method which merges the balancers options. [Jan Kaluza] * ) logresolve: Fix incorrect behavior or segfault if -c flag is used Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259 [Stefan Fritsch] * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla). Add ability for PROXY protocol processing to be optional to donated code. See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri] * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in sections, allowing per backend TLS configuration. [Yann Ylavic] * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris, Jim Jagielski] * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not depend on the number of restarts (non-Unix systems) and preserve shared names as much as possible on configuration changes for SHMs and persisted files. PR 62044. [Yann Ylavic, Jim Jagielski] * ) mod_http2: obsolete code removed, no more events on beam pool destruction, discourage content encoders on http2-status response (where they do not work). [Stefan Eissing] * ) mpm_event: Let the listener thread do its maintenance job on resources shortage. PR 61979. [Yann Ylavic] * ) mpm_event: Wakeup the listener to re-enable listening sockets. [Yann Ylavic] * ) mod_ssl: The SSLCompression directive will now give an error if used with an OpenSSL build which does not support any compression methods. [Joe Orton] * ) mpm_event,worker: Mask signals for threads created by modules in child init, so that they don't receive (implicitely) the ones meant for the MPM. PR 62009. [Armin Abfalterer , Yann Ylavic] * ) mod_md: new experimental, module for managing domains across virtual hosts, implementing the Let's Encrypt ACMEv1 protocol to signup and renew certificates. Please read the modules documentation for further instructions on how to use it. [Stefan Eissing] * ) mod_proxy_html: skip documents shorter than 4 bytes PR 56286 [Micha Lenk ] * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for the lifetime of the connection, each time it is processed by MPM event. [Yann Ylavic] * ) mpm_event: Update scoreboard status for KeepAlive state. [Yann Ylavic] * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to purge old entries and log AH01323. PR61891. [Hendrik Harms ] * ) mpm_event: close connections not reported as handled by any module to avoid losing track of them and leaking scoreboard entries. PR 61551. [Yann Ylavic] * ) core: A signal received while stopping could have crashed the main process. PR 61558. [Yann Ylavic] * ) mod_ssl: support for mod_md added. [Stefan Eissing] * ) mod_proxy_html: process parsed comments immediately. Fixes bug (seen in the wild when used with IBM's HTTPD bundle) where parsed comments may be lost. [Nick Kew] * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew] * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional" HTML/XHTML. PR 56457 [Nick Kew] * ) mpm_event: avoid a very unlikely race condition between the listener and the workers when the latter fails to add a connection to the pollset. [Yann Ylavic] * ) core: silently ignore a not existent file path when IncludeOptional is used. PR 57585. [Alberto Murillo Silva , Luca Toscano] * ) mod_macro: fix usability of globally defined macros in .htaccess files. PR 57525. [Jose Kahan , Yann Ylavic] * ) mod_rewrite, core: add the Vary header when a condition evaluates to true and the related RewriteRule is used in a Directory context (triggering an internal redirect). [Luca Toscano] * ) ab: Make the TLS layer aware that the underlying socket is nonblocking, and use/handle POLLOUT where needed to avoid busy IOs and recover write errors when appropriate. [Yann Ylavic] * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous read was incomplete (the SSL case can cause the next poll() to timeout since data are buffered already). PR 61301 [Luca Toscano, Yann Ylavic] * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain information retrievals on null bucket beams where it makes sense. [Stefan Eissing]- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]- build mod_http2 also for 42.3- remove NameVirtualHost from documentation [bsc#1078557]- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]- Replace SuSEFirewall2 by firewalld (fate#323460)- build brotli module- Do not requires w3m, only recommends it.- do not build with nghttp2 for SLE-12-SP3- which was split after SLE11- Add which and w3m as dependencies. poo#28406- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- APACHE_MODULES now contains authn_core in default configuration [bsc#1066661]- updated to 2.4.29: * ) mod_unique_id: Use output of the PRNG rather than IP address and pid, avoiding sleep() call and possible DNS issues at startup, plus improving randomness for IPv6-only hosts. [Jan Kaluza] * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST is used in a condition that evaluates to true. PR 58231 [Luca Toscano] * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket beams that could lead to assertion failure in edge cases. [Stefan Eissing] * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced in 2.4.28. [Jim Jagielski] * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set. PR 61546. [Lubos Uhliarik ] * ) mod_rewrite: Add support for starting External Rewriting Programs as non-root user on UNIX systems by specifying username and group name as third argument of RewriteMap directive. [Jan Kaluza] * ) core: Rewrite the Content-Length filter to avoid excessive memory consumption. Chunked responses will be generated in more cases than in previous releases. PR 61222. [Joe Orton, Ruediger Pluem] * ) mod_ssl: Fix SessionTicket callback return value, which does seem to matter with OpenSSL 1.1. [Yann Ylavic]- gensslcert: * set also SAN [bsc#1045159] * drop -C argument, it was not mapped to CN actually * consider also case when hostname does return empty string or does not exist [bsc#1057406] * do not consider environment ROOT variable- updated to 2.4.28: * ) SECURITY: CVE-2017-9798 (cve.mitre.org) Corrupted or freed memory access. must now be used in the main configuration file (httpd.conf) to register HTTP methods before the .htaccess files. [Yann Ylavic] * ) event: Avoid possible blocking in the listener thread when shutting down connections. PR 60956. [Yann Ylavic] * ) mod_speling: Don't embed referer data in a link in error page. PR 38923 [Nick Kew] * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max length in a password file. [Luca Toscano, Hanno Böck ] * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25). [Jim Jagielski] * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically. PR 61142. * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond), 's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski] * ) mod_http2: Fix for stalling when more than 32KB are written to a suspended stream. [Stefan Eissing] * ) build: allow configuration without APR sources. [Jacob Champion] * ) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184. [Bernard Spil , Michael Schlenker , Yann Ylavic] * ) core/log: Support use of optional "tag" in syslog entries. PR 60525. [Ben Rubson , Jim Jagielski] * ) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton] * ) core: Disallow multiple Listen on the same IP:port when listener buckets are configured (ListenCoresBucketsRatio > 0), consistently with the single bucket case (default), thus avoiding the leak of the corresponding socket descriptors on graceful restart. [Yann Ylavic] * ) event: Avoid listener periodic wake ups by using the pollset wake-ability when available. PR 57399. [Yann Ylavic, Luca Toscano] * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have led to spurious HTTP 502 error messages sent on upgrade connections. PR 61283. [Yann Ylavic]- suexec binary moved to main package [bsc#1054741]- do not call and do not ship apache-22-24-upgrade [bsc#1042037]- make the package runable on non systemd systems + deprecated-scripts-arch.patch- updated to 2.4.27: * ) COMPATIBILITY: mod_lua: Remove the undocumented exported 'apr_table' global variable when using Lua 5.2 or later. This was exported as a side effect from luaL_register, which is no longer supported as of Lua 5.2 which deprecates pollution of the global namespace. [Rainer Jung] * ) COMPATIBILITY: mod_http2: Disable and give warning when using Prefork. The server will continue to run, but HTTP/2 will no longer be negotiated. [Stefan Eissing] * ) COMPATIBILITY: mod_proxy_fcgi: Revert to 2.4.20 FCGI behavior for the default ProxyFCGIBackendType, fixing a regression with PHP-FPM. PR 61202. [Jacob Champion, Jim Jagielski] * ) mod_lua: Improve compatibility with Lua 5.1, 5.2 and 5.3. PR58188, PR60831, PR61245. [Rainer Jung] * ) mod_http2: Simplify ready queue, less memory and better performance. Update mod_http2 version to 1.10.7. [Stefan Eissing] * ) Allow single-char field names inadvertantly disallowed in 2.4.25. PR 61220. [Yann Ylavic] * ) htpasswd / htdigest: Do not apply the strict permissions of the temporary passwd file to a possibly existing passwd file. PR 61240. [Ruediger Pluem] * ) core: Avoid duplicate HEAD in Allow header. This is a regression in 2.4.24 (unreleased), 2.4.25 and 2.4.26. PR 61207. [Christophe Jaillet] - drop upstreamed patch: * httpd-2.4.12-lua-5.2.patch (see upstream's PR#58188 for details)- Adjust dependencies for rename apr/apr-util packages- remove /usr/bin/http2 symlink only during apache2 package uninstall, not upgrade [bsc#1041830]- updated to 2.4.26: This release of Apache is a security, feature, and bug fix release. For details, see http://httpd.apache.org/dev/dist/CHANGES_2.4.26 - refreshed patches: . httpd-2.4.12-lua-5.2.patch . httpd-2.4.x-fate317766-config-control-two-protocol-options.diff - removed patches (upstreamed) . httpd-cache-forward-http-proxy.patch . httpd-cache-revert-svn1773397.patch- server-tunning.conf: MaxClients was renamed to MaxRequestWorkers [bsc#1037731] - gensslcert: use hostname when fqdn is too long [bsc#1035829]- remove apache-doc and apache-example-pages obsoletes/provides- PreRequire user wwwrun and group www- start_apache2: include individual sysconfig.d files instead of sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf is processed [bsc#1023616]- revert an attempt to fix PR 60458 + httpd-cache-revert-svn1773397.patch- fix caching of forward proxy + httpd-cache-forward-http-proxy.patch- Don't require insserv if we don't need it.- Added new HTTP2 option to sysconfig to ease enabling http2 - Added new protocols.conf which is included globally - Enable http2 also for Leap 42.2+ and SLE12_SP2+- update to 2.4.25: fixed several security issues (CVE-2016-8740, CVE-2016-5387, CVE-2016-2161, CVE-2016-0736, CVE-2016-8743), many fixes and improvements of mod_http2 and other modules; see CHANGES for full change log - verify tarball: added httpd*.bz2.asc, apache2.keyring and remove 60C5442D.key- fix build with new systemd + amended httpd-2.4.3-mod_systemd.patch- Replace mixed indentation with predominant style.- add NotifyAccess=all to service file [bsc#980663]- Remove the omc xml config. It is useless nowdays- readd the support of multiple entries in APACHE_ACCESS_LOG [bsc#991032]- add httpd-2.4.x-fate317766-config-control-two-protocol-options.diff Introduces directives to control two protocol options: * HttpContentLengthHeadZero - allow Content-Length of 0 to be returned on HEAD * HttpExpectStrict - allow admin to control whether we must see "100-continue" [bsc#894225], [fate#317766]- version 2.4.23 * Fixes CVE-2016-4979 [bsc#987365] * mod_proxy_hcheck was missing due to upstream bug. * mod_proxy_fdpass needs explicit configure line now. * Full list of changes: http://www-eu.apache.org/dist//httpd/CHANGES_2.4.23- Remove pkgconfig(libsystemd-daemon). Nowadays pkgconfig(libsystemd) is enough and replaces all libsystemd-* libs which are obsolete.- remove Alias= from [Install] of the template service [bsc#981541c#10]- remove unneded httpd-2.4.17-debug-crash.patch- start apache services after remote-fs [bsc#978543]- removed note about ulimits in sysconfig file [bsc#976711]- do not build mod_http2 for 13.2- Update to version 2.4.20 (2.4.19 was never released) * Drop httpd-2.4.18-missing-semicolon.patch now upstream - Big changelog available, see: http://www.apache.org/dist/httpd/CHANGES_2.4.20 for details.- enable authnz_fcgi module- fix build for SLE_11_SP4: + httpd-2.4.18-missing-semicolon.patch- Update to version 2.4.18 * drop 2.4.17-protocols.patch in upstream. - Change list too long to mention here see: http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.- systemd: Set TasksMax=infinity for current systemd releases. The default limit of 512 is too small and prevents the creation of new server processes. Apache has its own runtime/harcoded limits.- fix crash when for -X + httpd-2.4.17-debug-crash.patch- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary for RewriteRule in given dir [bnc#955701]- restart apache once after the rpm or zypper transaction [bnc#893659] - drop some old compat code from %post- 2.4.17-protocols.patch from upstream http2 module: * master conn_rec* addition to conn_rec * improved ALPN and Upgrade handling * allowing requests for servers whose TLS configuration is compatible to the SNI server ones * disabling TLS renegotiation for slave connections- LogLevel directive into correct config file, thanks Michael Calmer for the fix [bsc#953329]- do not build mod_http2 for older distros than 13.2 for now (nghttp2 does not build there)- Include directives really into /etc/apache2/sysconfig.d/include.conf, fix from Erik Wegner [bsc#951901]- gensslcert: CN now defaults to `hostname -f` [bnc#949766] (internal), fix help [bnc#949771] (internal)- Update to 2.4.17 - Enable mod_http2/ BuildRequire nghttp2 - MPMs: Support SO_REUSEPORT to create multiple duplicated listener records for scalability - mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3 - For more changes see: http://www.apache.org/dist/httpd/CHANGES_2.4.17- start_apache2: reintroduce sysconfig.d, include it on command line (not in httpd.conf) instead of individual directives [bnc#949434] (internal), [bnc#941331]- Fixup libdir in installed files- fix Logjam vulnerability: change SSLCipherSuite cipherstring to disable export cipher suites and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE) ciphers. Adjust 'gensslcert' script to generate a strong and unique Diffie Hellman Group and append it to the server certificate file [bnc#931723], [CVE-2015-4000]- add reference upstream bug#58188 along httpd-2.4.12-lua-5.2.patch- update to 2.4.16 * changes http://www.apache.org/dist/httpd/CHANGES_2.4.16 * remove the following patches (fixed in 2.4.16) * httpd-2.4.x-mod_lua_websocket_DoS.patch * httpd-2.4.12-CVE-2015-0253.patch * update httpd-2.4.12-lua-5.2.patch- add patch: httpd-2.4.12-lua-5.2.patch * lua_dump introduced a new strip option in 5.3, set it to 0 to get the old behavior * luaL_register was deprecated in 5.2, use luaL_setfuncs and luaL_newlib instead * luaL_optint was deprecated in 5.3, use luaL_optinteger instead * lua_strlen and lua_objlen wad deprecated in 5.2, use lua_rawlen instead- change Provides: from suse_maintenance_mmn = # to suse_maintenance_mmn_#- apache2 Suggests:, not Recommends: apache2-prefork; that means for example, that `zypper in apache2-worker` will not pull apache2-prefork also - installing /usr/sbin/httpd link: * do not try to install it in '%post ' when apache2 (which includes /usr/share/apache2/script-helpers) is not installed yet (fixes installation on 11sp3) * install it in '%post' if apache2 is installed after apache2- to be sure it is there- access_compat shared also for 11sp3- apache2-implicit-pointer-decl.patch renamed to httpd-implicit-pointer-decl.patch to align with other patches names- apachectl is now wrapper to start_apache2; therefore, it honors HTTPD_INSTANCE variable, see README-instances.txt for details + httpd-apachectl.patch - httpd-2.4.10-apachectl.patch- a2enmod/a2dismod and a2enflag/a2disflag now respect HTTPD_INSTANCE= environment variable, which can be used to specify apache instance name; sysconfig file is expected at /etc/sysconfig/apache2@ (see README-instances.txt for details)- provides suse_maintenance_mmn symbol [bnc#915666] (internal)- credits to Roman Drahtmueller: * add reference to /etc/permissions.local to output of %post if setting the permissions of suexec2 fails * do not enable mod_php5 by default any longer * httpd-2.0.49-log_server_status.dif obsoleted * apache2-mod_ssl_npn.patch removed because not used * include mod_reqtimeout.conf in httpd.conf * added cgid-timeout.conf, include it in httpd.conf - fix default value APACHE_MODULES in sysconfig file - %service_* macros for apache2@.service- reenable 690734.patch, it should be upstreamed by the author (Adrian Schroeter) though + httpd-2.4.9-bnc690734.patch - httpd-2.2.x-bnc690734.patch- drop startssl from start_apache2- allow to run multiple instances of Apache on one system [fate#317786] (internal) * distributed httpd.conf no longer includes sysconfig.d, nor this directory is shipped. httpd.conf includes loadmodule.conf and global.conf which are former sysconfig.d/loadmodule.conf and sysconfig.d/global.conf for default /etc/sysconfig/apache2 global.conf and loadmodule.conf are not included when sysconfig variables could have been read by start_apache2 startup script (run with systemd services). Therefore, when starting server via /usr/sbin/httpd, sysconfig variables are not taken into account. * some not-maintained scripts are moved from /usr/share/apache2 to /usr/share/apache2/deprecated-scripts * all modules comment in sysconfig file is not generated anymore * added README-instances.txt * removed Sources: load_configuration find_mpm get_module_list get_includes find_httpd_includes apache-find-directives * added Sources: deprecated-scripts.tar.xz apache2-README-instances.txt apache2-loadmodule.conf apache2-global.conf apache2-find-directives apache2@.service apache2-script-helpers- add SSLHonorCipherOrder directive to apache2-ssl-global.conf - adopt SSLCipherSuite directive value from SLE12 - remove default-vhost-ssl.conf and default-vhost.conf from /etc/apache2. These two files are not (!) read by the configuration framework, but are named *.conf, which is misleading. The files are almost identical with the vhost templates in /etc/apache2/vhosts.d/. The two templates there do it right because they are not named *.conf and are not sourced either. apache's response with no explicit (eg. default, vanilla) configuration is contained in /etc/apache2/default-server.conf. * remove apache2-README.default-vhost as there are no default-vhost* files anymore.- apache2.service: We have to use KillMode=mixed for the graceful stop, restart to work properly.- dropped 2.0 -> 2.2 modules transition during upgrade * apache-20-22-upgrade renamed to apache-22-24-upgrade - apache-*-upgrade script is called in %posttrans now [bnc#927223]- fix find_mpm to echo mpm binary- apache2.service: Only order us after network.target and nss-lookup.target but not pull the units in. - apache2.service: SSL requires correct system time to work properly, order after time-sync.target- align filenames with upstream names (and add compat symlinks) - find_httpd2_includes renamed to find_httpd_includes- access_compat now built as shared and disabled by default - amend config to use also old syntax when access_compat is loaded - added apache2-README-access_compat.txt - added apache-find-directive script - see [bnc#896083] and its duplicates- add httpd-2.4.12-CVE-2015-0253.patch to fix SECURITY: CVE-2015-0253 (cve.mitre.org) core: Fix a crash introduced in with ErrorDocument 400 pointing to a local URL-path with the INCLUDES filter active, introduced in 2.4.11. PR 57531. [Yann Ylavic]- simplify apache2.logrotate, use sharedscripts [bnc#713581]- remove curly brackets around format sequence "%y" in `stat --format="%{y}" %{SOURCE1}` that caused an incorrect evaluation. Add escaping to proper spec-cleaner processing in the future- remove 'exit 0' from the %post section in the specfile that was placed here incorrectly and caused that the rest of the %post section couldn't be executed.- /etc/init.d/apache2 reload -> systemctl reload apache2.service in apache2.logrotate [bnc#926523]- authz_default -> authz_core in sysconfig.apache2/APACHE_MODULES [bnc#922236]- Add Requires(post) apache2 to the subpackage -worker, -event and - prefork: their respective post scriptlets execute /usr/share/apache2/get_module_list, which is shipped as part of the main package. This script has the side-effect to call find_mpm, which in turn creates the corresponding /usr/sbin/httpd2 symlink.- Patched get_module_list to ensure proper SELinux context for sysconfig.d/loadmodule.conf- Pname -> name variable reduction - Try to fix sle11 build- Version bumpt o 2.4.12: * ) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for internationalization. [William Rowe] * ) mpm_winnt: Normalize the error and status messages emitted by service.c, the service control interface for Windows. [William Rowe] * ) configure: Fix --enable-v4-mapped configuration on *BSD. PR 53824. [ olli hauer , Yann Ylavic ]- Exit cleanly on end of the post and cleanup the update detection - Remove Apache.xpm as it ain't used- Cleanup init/unit decision making and provide just systemd service on systemd systems- Deprecate realver define as it is equal to version. - Explicitely state MPM mods to ensure we don't lose some bnc#444878- Pass over spec-cleaner, there should be no actual technical change in this just reduction of lines in the spec- add httpd-2.4.x-mod_lua_websocket_DoS.patch to fix mod_lua bug where a maliciously crafted websockets PING after a script calls r:wsupgrade() can cause a child process crash [CVE-2015-0228], [bnc#918352].- httpd2.pid in rc.apache2 was wrong [bnc#898193]- httpd-2.4.3-mod_systemd.patch find libsystemd-daemon with pkg-config, this is the only correct way, in current versions sd_notify is in libsystemd and in old products in libsystemd-daemon.- remove obsolete patches * httpd-2.4.10-check_null_pointer_dereference.patch * httpd-event-deadlock.patch * httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch * httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch- Apache 2.4.11 * ) SECURITY: CVE-2014-3583 (cve.mitre.org) mod_proxy_fcgi: Fix a potential crash due to buffer over-read, with response headers' size above 8K. [Yann Ylavic, Jeff Trawick] * ) SECURITY: CVE-2014-3581 (cve.mitre.org) mod_cache: Avoid a crash when Content-Type has an empty value. PR 56924. [Mark Montague , Jan Kaluza] * ) SECURITY: CVE-2014-8109 (cve.mitre.org) mod_lua: Fix handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments. PR57204 [Edward Lu ] * ) SECURITY: CVE-2013-5704 (cve.mitre.org) core: HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. Adds "MergeTrailers" directive to restore legacy behavior. [Edward Lu, Yann Ylavic, Joe Orton, Eric Covener] * ) mod_ssl: New directive SSLSessionTickets (On|Off). The directive controls the use of TLS session tickets (RFC 5077), default value is "On" (unchanged behavior). Session ticket creation uses a random key created during web server startup and recreated during restarts. No other key recreation mechanism is available currently. Therefore using session tickets without restarting the web server with an appropriate frequency (e.g. daily) compromises perfect forward secrecy. [Rainer Jung] * ) mod_proxy_fcgi: Provide some basic alternate options for specifying how PATH_INFO is passed to FastCGI backends by adding significance to the value of proxy-fcgi-pathinfo. PR 55329. [Eric Covener] * ) mod_proxy_fcgi: Enable UDS backends configured with SetHandler/RewriteRule to opt-in to connection reuse and other Proxy options via explicitly declared "proxy workers" (] * ) mod_proxy_fcgi: Remove proxy:balancer:// prefix from SCRIPT_FILENAME passed to fastcgi backends. [Eric Covener] * ) core: Configuration files with long lines and continuation characters are not read properly. PR 55910. [Manuel Mausz ] * ) mod_include: the 'env' function was incorrectly handled as 'getenv' if the leading 'e' was written in upper case in statements. [Christophe Jaillet] * ) split-logfile: Fix perl error: 'Can't use string ("example.org:80") as a symbol ref while "strict refs"'. PR 56329. [Holger Mauermann ] * ) mod_proxy: Prevent ProxyPassReverse from doing a substitution when the URL parameter interpolates to an empty string. PR 56603. [] * ) core: Fix -D[efined] or [d] variables lifetime accross restarts. PR 57328. [Armin Abfalterer , Yann Ylavic]. * ) mod_proxy: Preserve original request headers even if they differ from the ones to be forwarded to the backend. PR 45387. [Yann Ylavic] * ) mod_ssl: dump SSL IO/state for the write side of the connection(s), like reads (level TRACE4). [Yann Ylavic] * ) mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198. [Jan Kaluza] * ) mod_ssl: Do not crash when looking up SSL related variables during expression evaluation on non SSL connections. PR 57070 [Ruediger Pluem] * ) mod_proxy_ajp: Fix handling of the default port (8009) in the ProxyPass and configurations. PR 57259. [Yann Ylavic] * ) mpm_event: Avoid a possible use after free when notifying the end of connection during lingering close. PR 57268. [Eric Covener, Yann Ylavic] * ) mod_ssl: Fix recognition of OCSP stapling responses that are encoded improperly or too large. [Jeff Trawick] * ) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers. [Jeff Trawick] * ) mod_proxy_fcgi, mod_authnz_fcgi: stop reading the response and issue an error when parsing or forwarding the response fails. [Yann Ylavic] * ) mod_ssl: Fix a memory leak in case of graceful restarts with OpenSSL >= 0.9.8e PR 53435 [tadanori , Sebastian Wiedenroth ] * ) mod_proxy_connect: Don't issue AH02447 on sockets hangups, let the read determine whether it is a normal close or a real error. PR 57168. [Yann Ylavic] * ) mod_proxy_wstunnel: abort backend connection on polling error to avoid further processing. [Yann Ylavic] * ) core: Support custom ErrorDocuments for HTTP 501 and 414 status codes. PR 57167 [Edward Lu ] * ) mod_proxy_connect: Fix ProxyRemote to https:// backends on EBCDIC systems. PR 57092 [Edward Lu ] * ) mod_cache: Avoid a 304 response to an unconditional requst when an AH00752 CacheLock error occurs during cache revalidation. [Eric Covener] * ) mod_ssl: Move OCSP stapling information from a per-certificate store to a per-server hash. PR 54357, PR 56919. [Alex Bligh , Yann Ylavic, Kaspar Brand] * ) mod_cache_socache: Change average object size hint from 32 bytes to 2048 bytes. [Rainer Jung] * ) mod_cache_socache: Add cache status to server-status. [Rainer Jung] * ) event: Fix worker-listener deadlock in graceful restart. PR 56960. * ) Concat strings at compile time when possible. PR 53741. * ) mod_substitute: Restrict configuration in .htaccess to FileInfo as documented. [Rainer Jung] * ) mod_substitute: Make maximum line length configurable. [Rainer Jung] * ) mod_substitute: Fix line length limitation in case of regexp plus flatten. [Rainer Jung] * ) mod_proxy: Truncated character worker names are no longer fatal errors. PR53218. [Jim Jagielski] * ) mod_dav: Set r->status_line in dav_error_response. PR 55426. * ) mod_proxy_http, mod_cache: Avoid (unlikely) accesses to freed memory. [Yann Ylavic, Christophe Jaillet] * ) http_protocol: fix logic in ap_method_list_(add|remove) in order: - to correctly reset bits - not to modify the 'method_mask' bitfield unnecessarily [Christophe Jaillet] * ) mod_slotmem_shm: Increase log level for some originally debug messages. [Jim Jagielski] * ) mod_ldap: In 2.4.10, some LDAP searches or comparisons might be done with the wrong credentials when a backend connection is reused. [Eric Covener] * ) mod_macro: Add missing APLOGNO for some Warning log messages. [Christophe Jaillet] * ) mod_cache: Avoid sending 304 responses during failed revalidations PR56881. [Eric Covener] * ) mod_status: Honor client IP address using mod_remoteip. PR 55886. [Jim Jagielski] * ) cmake-based build for Windows: Fix incompatibility with cmake 2.8.12 and later. PR 56615. [Chuck Liu , Jeff Trawick] * ) mod_ratelimit: Drop severity of AH01455 and AH01457 (ap_pass_brigade failed) messages from ERROR to TRACE1. Other filters do not bother re-reporting failures from lower level filters. PR56832. [Eric Covener] * ) core: Avoid useless warning message when parsing a section guarded by if $(foo) is used within the section. PR 56503 [Christophe Jaillet] * ) mod_proxy_fcgi: Fix faulty logging of large amounts of stderr from the application. PR 56858. [Manuel Mausz ] * ) mod_proxy_http: Proxy responses with error status and "ProxyErrorOverride On" hang until proxy timeout. PR53420 [Rainer Jung] * ) mod_log_config: Allow three character log formats to be registered. For backwards compatibility, the first character of a three-character format must be the '^' (caret) character. [Eric Covener] * ) mod_lua: Don't quote Expires and Path values. PR 56734. [Keith Mashinter, ] * ) mod_authz_core: Allow 'es to be seen from auth stanzas under virtual hosts. PR 56870. [Eric Covener]- Redone lost patch to fix boo#859439 + service reload can cause log data to be lost with logrotate under some circumstances: remove "-t" from service reload. [bnc#859439]- Fix URL syntax in various files- fix IfModule directive around SSLSessionCache [bnc#842377c#11]- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch to fix flaw in the way mod_headers handled chunked requests. Adds "MergeTrailers" directive to restore legacy behavior [bnc#871310], [CVE-2013-5704].- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch that fixes handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments [bnc#909715], [CVE-2014-8109].- fixed start at boot for ssl and encrypted key [bnc#792309]- fix shebang in start_apache2 script that contains bash-specific constructions- small improvement of ssl instructions [bnc#891813]- fix bashisms in post scripts- added httpd-2.4.10-check_null_pointer_dereference.patch to avoid a crash when Content-Type has an empty value [bnc#899836], CVE-2014-3581- httpd-event-deadlock.patch: Fix worker-listener deadlock in graceful restart.- httpd-2.1.9-apachectl.dif renamed to httpd-2.4.10-apachectl.patch and updated (fixed bashism).- drop (turned off) itk mpm spec file code as mpm-itk is now provided as a separate module, not via patch (see http://mpm-itk.sesse.net/ and [bnc#851229])- enable mod_imagemap [bnc#866366]/bin/bash/bin/bashcloud113 1598390504  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxy2.4.43-lp152.2.3.12.4.43-lp152.2.3.1apache2-preforkmod_access_compat.somod_actions.somod_alias.somod_allowmethods.somod_asis.somod_auth_basic.somod_auth_digest.somod_auth_form.somod_authn_anon.somod_authn_core.somod_authn_dbd.somod_authn_dbm.somod_authn_file.somod_authn_socache.somod_authnz_fcgi.somod_authnz_ldap.somod_authz_core.somod_authz_dbd.somod_authz_dbm.somod_authz_groupfile.somod_authz_host.somod_authz_owner.somod_authz_user.somod_autoindex.somod_brotli.somod_bucketeer.somod_buffer.somod_cache.somod_cache_disk.somod_cache_socache.somod_case_filter.somod_case_filter_in.somod_cgi.somod_charset_lite.somod_data.somod_dav.somod_dav_fs.somod_dav_lock.somod_dbd.somod_deflate.somod_dialup.somod_dir.somod_dumpio.somod_echo.somod_env.somod_expires.somod_ext_filter.somod_file_cache.somod_filter.somod_headers.somod_heartmonitor.somod_http2.somod_imagemap.somod_include.somod_info.somod_lbmethod_bybusyness.somod_lbmethod_byrequests.somod_lbmethod_bytraffic.somod_lbmethod_heartbeat.somod_ldap.somod_log_config.somod_log_debug.somod_log_forensic.somod_logio.somod_lua.somod_macro.somod_mime.somod_mime_magic.somod_negotiation.somod_optional_fn_export.somod_optional_fn_import.somod_optional_hook_export.somod_optional_hook_import.somod_proxy.somod_proxy_ajp.somod_proxy_balancer.somod_proxy_connect.somod_proxy_express.somod_proxy_fcgi.somod_proxy_fdpass.somod_proxy_ftp.somod_proxy_hcheck.somod_proxy_html.somod_proxy_http.somod_proxy_http2.somod_proxy_scgi.somod_proxy_uwsgi.somod_proxy_wstunnel.somod_ratelimit.somod_reflector.somod_remoteip.somod_reqtimeout.somod_request.somod_rewrite.somod_sed.somod_session.somod_session_cookie.somod_session_crypto.somod_session_dbd.somod_setenvif.somod_slotmem_plain.somod_slotmem_shm.somod_socache_dbm.somod_socache_memcache.somod_socache_redis.somod_socache_shmcb.somod_speling.somod_ssl.somod_status.somod_substitute.somod_suexec.somod_unique_id.somod_userdir.somod_usertrack.somod_version.somod_vhost_alias.somod_watchdog.somod_xml2enc.sohttpd-preforkhttpd2-prefork/usr/lib//usr/lib/apache2-prefork//usr/sbin/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13775/openSUSE_Leap_15.2_Update/302d3c8f56c7f9e29d2cad9215318b11-apache2.openSUSE_Leap_15.2_Updatecpioxz5i586-suse-linuxdirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa9390b83387a34678d3b512da4ed6ad48329bc7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib, BuildID[sha1]=1941f7d080be9dcc9950e3e57c2288414cae5ed6, for GNU/Linux 3.2.0, strippedR RRRRRRR R R RR R RRRRRRR^m@ELw if [ -x /usr/bin/systemctl ]; then if [ -e /var/run/httpd.restart.flag ]; then /usr/bin/systemctl daemon-reload > /dev/null 2>&1 || : /usr/bin/systemctl restart apache2.target > /dev/null 2>&1 || : echo 'Restarting apache (all instances)' # all instances was restarted, removing all flags rm /var/run/httpd.restart.flag* else /usr/bin/systemctl daemon-reload > /dev/null 2>&1 || : for flag in /var/run/httpd.restart.flag@*; do if [ ! -e $flag ]; then # %{apache_restart_flag}@* have not matched anything break fi instance_name=$(cat $flag) if [ -z "$instance_name" ]; then instance_suffix="" else instance_suffix="@$instance_name" fi echo "Restarting apache ($instance_name instance)" /usr/bin/systemctl restart apache2${instance_suffix}.service > /dev/null 2>&1 || : rm /var/run/httpd.restart.flag@$instance_name done fi fi exit 0/bin/shutf-8a1476d90341448beb31d90a78ed3fd75b65d2976b7728920fbd257ab0750a291?7zXZ !t/V] crt:bLL f.ޅ2տ Otmpϵ'KViFϮHh132bxmAMvb+gըdn\c͠w6JTҋ`1S=@t0/-<G.O C)ޮs p=ğu{meh t `])aԂIzF?їshf9@0oO%φ(o\k!zCR& ?`e(u#bU@|+v u D^rŜ7bx=Å c|Xxcuլ|/BC{y<,hv#@:j֐˳v)fYVYZ槹Qɡ3[9r/lځr Mpd\.{ۍ@<˞)v{V-&wx9<rLx}#*#d\_ ~A?L -P4p TnUa$PE*OD$ʙyՒu"áHƟ2JRR(,ِVBW<}'^m@o^ sJžU])؍<z%_v:2{Vj$jﱘh*ŞIae;?R.RE6d?Cq>\\d=nMFBqT]BX);~i,(6i6˩|%YO@[5 GR[,v=]  c$ E1pN'ѢB?bi] 0i dٖ!KMuZ,n8]Q^'r@ ^eq^#B^1~?aR3qٜB/S5pq8o>@ѫJYuO'\]bChl6Í(GYbAVFكKAc͇ 6h e<V,ZQ1 F>z'~Oa:G$Ebŭw?!`::h+!$bu${\'|%3, (ueOG4fyl'n>K-+[:`5$ly?:v#a̓Պw6bv!NQT/P}9OzJy@'eqdvN ɼW %6)&=gɪ*yK4zxS7 T/ U{@F;؟A)#h11Pm0`ã?ϥ*ퟔyfϾ˜fZ *rE-ay66(O ύՁ*m`,/8f_c>KMu[yU+@c[]Q~|.Cs_ XXf*$aۋ90lU; ,E&q4(YMO@&0ӟ,Ҝ,GE6ƞOEUCDŌ*[YlT[ӟq+f 'bLj\|ܪj9qSE89DEznI>YFpJ΀gԜjYcs}RM=YKIH83"|keܠPg {jP O^d3tjT:&"6w^Bf)z*ԾQUX×^>_  ! {Xu^4d >CIrF3)'7G|Tŧl,5[wu>%e]D\"ha jg:[yu+ 31 g9 b\+d(Yk/RNOMfDɛKDh6ԱܤdI `1ĎmCPj䶊+Vk:R;}ʕp:@pƩb)MjZ2̅SB.'=3ϋ2ے~9yi aR^B#:XU$7}5O; cnSJJ~͐T16쏴`rCG1kCRա$ۑ:Hb9FF{m3}'uSx9ɸub"-s])Ty~^9XPQɺ9-&L ?ʾwY5Q|֙R@tVaiY@2.Y]ZUgb2ֻt0\Pr[Q(75U5Rעdik`6Pʐ2/9Cw]>"*&"+ f^@JxgOHx՘Ui' UV;Wnؘ-kkxh$`::UB/, Um0}YBJ#d4iGNp01A480O\)r8:A=m_+Gez5s`3tu;<{kyIm1N?DNolf S^eqdoúnYfQe.wXj$*oU/޺9:GJa~z06Mq*rRnW i7nl{9y>_gԺንtu{1SВ7}|'>PY&fY/#}ou#A$ 3ze7 Lߡ2ŕ!bs3WUQϒ@+a3A]|>P@1@ߠkDm`'l~.0`ШF_KßAR0QP#HX34uktK?W^fg"d3̢l) 9IQW1[dV1$.;B c1qz@9%n[6u2Bs"qWT߁Glz *U9ڰEz_aGrӛ@b<ݷND2 BdFZ:ϩi'{MVo4qT46Z,ּҭK <Իއ02_<&i89%fF/5d{¡(٥_t\G%p_2-1\mڏy~UGhhU/ISq ر{4֮9zT0$z[TLJWf=M | UG;S慪`$)^4Cg }sD탹O~=X *ZA\UvE_psdpY KÎ;mO3G`cs/ NV+KQIWϠs_}hj6ـဗMZku;~8/k|2z@ISÙk{I,G· ݒhk)T!rPN5TSH.R31W(8!%7K/c@1Cp]E$a^'*e 0gw "إ4^U531ޭ&,INllg]X0 `3CB'}FTW;h:5Bۉ7ck+*8[M&#gը->G&Qzdݓ ?fּ . ݐiISK*j}1 3F6ߓBwu&q}M޼ E Kw4L9VHTF _H\|J9d|N$Pg#pvBU;}GI2XH,W/v1Л1u}Ućf]SczBj,:m?q.zGf:L&J־_}߯UǖUrRwʇLTҬ1)!a^7aQy.ֆ복x0×4/)VX[iR\ @AI]R>8NCڑp ' ౢZ:VÑ;X]4hͯj#cU!Qf% 84/rYg$A^ Znh5P rvm0w-tb`}w&۪>l vpk6/a%Mǃj)Z28:9<`9d6dcIFRѾ8| ק4ҜzDYd0d ڏ_@UZX 2[_?:*)r)sV!ڊˢ'q7}ā1ES\iNT,"v^r|u@G=Pnh5_d`y9`[V;B"756Ffu"VTjlj> P]EEk/OӼ%̭NFV~=)׎9[#2Rw? G*-^vʹ,.wQW{H(Y9 9;]b=N42|l^_$䥐b҆ )Eɢ)]j9݋Ƙ=i||mwby杩#5dhVM昴7 C^-+^SD5qi*5DRgU)u@ HTkpvZMp+ʎdnGÅR;yԡc1N7Ds/HS*rxs١x1]kktFc:eqNcD ԁI`]̠FB^ՙ(Cg#/Sy; \*TG49k3FF53n+tUfȩp]_y1km7]J@:|aq &=Pds1) 5Y&JSO`!d@ure{hkZY>V9r[dI9Wv-٨Kd*Ɩ:>=þ!S(b|GGl`a׏]$wSU=+N*yc3SJfcO!U? a9N2'dYK.&)"0Kj`6Q. +bf]0>|:A+V)׋$h*oƗr,jjb3R=H%#4l^+DG-]'@[ղdfkRt@KI--@I *^Ђ>: \Sd7譗N"],8 M-{˿H:,;%/߼9Ѹ Tg@ leA.Eb'ae7dHd糡vբ FPl+2=V2r U^xva$YѐyM`=y`$:d+>G['}}9rC16[?9h 絁 ]9@ -u9^_4mпIeZ`}?`BwS2t~Kmv]{K1[OLMmIG*M7,x9]U4Æ^md lR7<2WГՠ6̼oa1t;a"4ƘD` ޝk~ve:$ؒ6Sfόr+"B,G03fmL+Qʙrd sS{$#%0%l9*Ht`Jߗ|v`cL| e)٢~0.2ӉE>xTaZu(]}6Ivg~аPU} [ (7;==}G x[1uk/0'Y/1U=F"ڥ;9D;\fp4*ũd!rmzӕҡl|T >+I;J/rVǿT/vyk-t\s_IS"--g{xׄÉ1K"3!}M:[(7."V1#2}pׇf\qj ௉HVaCM{&YDƯR^{&o[dC7d!-SV!;n U?!=w[ɤP'5(VZ凞e[ޤ$׎~L.]1 rg:pW@1u8kJvZU`qmˤ88wZa/[ &<eBԜ&X ;.Yy5"L~{ $tҶ.R|kJ^b+B s0SQː:._dlqEǙJ݊ujɯ*Q_uUhCԴͪь}kݙ=57w K-SӹiD#D{Js/-D@RhK*8S>@|dCE )qhÆƚ]jXm5o8/, [&DD".&ㅵ5&0u13zs(g0.ayL{}/϶7־L9xf;~\poAZpM|"'xhCTVW=}w)㫾*E H$ "N"Ed>!dśI^--v*lU|{̷B=j.D_<~T5dr~ LVV^|2<*xTqCx@z&7.c J c%u-$̊7K[k a}~.Qd>{OlG;Bvnr*~bKwzkvX!Xɷs)-A>,fϗB0zc+MQ*vhx9YIH9X`c:7fFRȅ$O4 V̍ E)C5Cg?w:O񭂯ʣTaIiL'0SʠG6 Lnb UFժM EYoI}ڵ/t3Irg~07O& KDڙ L[ɦ̇[~*'8U|T_E·GI3V)k?~-[1od`I+r`ѓK3u8qx>G9goIjބdF'qQ]~LzTxR~)wzK4gY-^0?sUpß-}W w)VZS/ k@AR>g]9PVrԷDkTd%TDg#Z7Y4;OqnK_̓tzxUuuAP659K[^tbq1dI`C1a+kT;@D'ǹsϱ Y5`p1lO.4kjk ^fG'`1^ZmgwI&Ă0qX v\7vIu'Md*7}5]܉lÓ7*8DAɈYczfF:Gp䗃;xƿNrjs6Nس(-hda}L,0ACz9ۋtfzܸn 7@T6^p+lʦhԝXw wA3x$H]z)^VlSl_9,lwJQ\uU2*@.r6Ñ-x 4LRط\_b(*iWv[APPYY'0&̯eA&o5QoW C:gx m%%TPܙ,֫P?`:ō>b>KŰeyR*Iz!CwàmQQ_;( @,AfJ%/蟂 ߐ!n}&8EaOP$\>̱UMiNOa>._mЩVxN|Z1b y-<0[;ĄFxLZ'?p$Ael_JkBHnSo|B@,Y ,|=/ȝ $kI Ё m6`)cY`b̑.>=4Z@:GkQ`8:\q%Rի2[k@s F$CrK߈Ik ^Ve$2== jfBlޓ6che7Ejy2Bw1 4wP/V;?>=bk ]~UM$fB!aڟ2߈U~XB.ɊsWƬG9>DZԏ֘A4x}7(eJ eʄ>gMAΰOc4cwf"T~5ϐE(4A(9H;0F uxfbK[N.$#_=ˆ0;pvk`dvh'kM!W%;e`T$ۃ 0qu/RI=Vk|c"&AD./5cg(p9qjWlMl3 `ёo,~yb-T#A7,Egg˷X9ֶP^AgUx︻ęLrY+u,WҶ{*b}(}W%X˕T3 }?yy06q *ŊE&[ UU2ݺ=!ZB\GC%1&׸##GTe+Tjf u74Θo{8kB7OG:{׏(dgrZ?agP rIqʂ`Nf*;RLÍqC@&;Ry^th.~>QRULF[˗4y2 ?5߂٫Ǵl!mC:TOjuIx233zLakqiMO5ZQ!s1%-'@Nt9)Ml$mi> Hekl;|z&' _m7З/O"h{~6VA[U/x ,$RR?@9츧[LW6/a?Jmn߾Ѕ]!͟~ޝ_<[LGW_͜2M`FE{7,v1 ΀ZbMR`y,"XVq1f;pY8`y,gʣYj$&C'hIKV>:SVh2.0jDz& >Y=O  %F6,y|![┺m_i>N}DJ v~sx!/%Bv5? tI]~Zu\&צɲa(yٙҼzHonj|Edxb{y<ۨQjv"Mާ1y轊9ܴCv'0- E<.g9Xl/1, _J%w /jBč¸ $%tD逳vč,j B^OAP{l˨z0yF,uu=3/zh<`¹Ђ.YB-e*.=I䁵<:)IJ:=jS&{ A-; ԇJ\LrW=k 0In3~3c|\uctN`QR/woD3/cR6S mQV9!`kU:%4fg "ƴE)x,dx3-KƄ`lGb7P*tQ*MQqqv.71gV*7+SO1iuJAC Ne&g΋TQn( =kqjmUeK_@ 4x,%ӷ _kͥy: ?s2XfuDIߟƱ;Hd} v(T 䘷6,/:r5F֬S㆐/C4byVjxדtQTj31 ^GtlV /aAm4v ޫ! ( Ĩl|waSIhEѩϼb NrUuOE@E!+ޟ;ΥowΜrI*g; 2+Fz/Ԛ9H*IGYJZ`7M` aH%Z@u3T[0uqY'Ͱzb12zar<@gaKbQ00ה|$iuj#x`ͱ{l͢[h*C3i~XEy_1+$AK{?2HO""E e70Jjn@Ez`V 髜Jrn^EZJFɹ6J.^_,==5l"C1L\ũ#d3mezIߜi0ҞsFgQ҉ρ hFJbòƔ(%|1 Jg"߫-Pa ?z9bnj8/ M%O蜑Qo)N򁆓dL\HgX"m"7)#/gUE@vƋ?ls0ϼ#DxHza:!2aVMq-.xuL`ED6+il(mЬeU>2($]=ꣾM'"|, Џ"]g\h*^ѭ'ϛಭ0k>sxcuB3nXG lU Qm謳 B?e?S0HNF*\U0upC:tbZGp^K{eRTM_}a#̆z ho+#h">]0kz}5Nn9Q~4Qc&r__g]ӓ&u/ bnZ G_}TCdo1{^颀$.m//U ۳PNh+QQ/wԩ"@H7#@jr[6NWلS|ԤPBvԌw L&gyZi'7] ◈PPGc=%|{Vzh˗Mf(_u8l,nES@wTlqS;**Y(j83lGiwSoVdоhj\Q;68W{=1;+ʾ Q<ǙCUH?!IZXtY )m_D?UizUE3F<gv[NbdEu;M?θe" J7ѳf^qt)c5iwӶcLJf.m>azq.ᇝMVD:f;]K#-@/@R('T߆Q\̱|_#>^R&"6NZN;!v5n (]a*֣?+9"ԃ] sD͊>%Fgq&Nn ?۾G!F)Vq펩bxa틝@?Brm+ǂ 4jZaITԀgW&g#aBQŁ2k%Dڰ5|[jEL&zYytD5-\wN.<?fȩ'qRJMFT䳷-e\ pyqa1tSB"hWGv+if<ުj?Ըқs wW6r2黎CB ,ŜSFMQi뛉!ow{7kSXy^HI8!%I5TZZ+@;Ok=޶0̷_pZxN1ːQf+[&/ykAXFV7BTX<5DL~ۉb V2W0m.u)+h?p7nuܯrOdZS6Un,#&`Upi=jZ9v=_"eܳа ?3}y*)S~ߩct؆?\ʁY?Z8碗MTK'zL](X-]<By8LF+P `lj;•Mq>4^8cT0cxT`y e* V=pb8qM #w|ic)f6B{EIy_.!,2$4 lZ*b$Sijh#~Y\k'}*S|\5\J'%37I+ё|Z5)ԥvQTϨW8FѰ΀l+QQS=d?2Rtj]j~0 ϵ8sB0#b@Ch>W]V 5[nrďPjw%]Ŧ˅%EupYJFY@u:5>tn!lrvόtAWs/#ˎ? Hۿ-8gwJ)Uuғ⌿Vн`5`T&{KX^&vѪHtH+qR'p<3tjj_qQ9o{AlψK==ǒ ‡) ʄ-.ivi"'-#0{iU^5JZ>rC6W yc-%RYW3|Ǵ+f or+a?zJt'q'e(-y} gu)c\5@y۸w{i$@Y] 9f+U{G_AL1X=`J7ѩ&/ lHBEkEƁ 9r70)co]@<9=ZQn};ymj'Q)S/3=x)JNC<]*l HF}Y!RtQzM Jn,:w3=VRBȓOkWo]G bs~> `p|2ycoNz,w/D SY*2׭ұ-=$Sefj{A.3 YxDd3b@)40t)<ɿ%zB\]@yEEqFG&V!8<_ :ht[6 ϗN8FT>_9T!e+}I'RQ$ e?^ls#vOP!fpL,7Gc¦#sp ~7HPZ  9G J9̴t*sUj;I"8v \fGJ@Xb* 'Gق#n c*9I7}:oC/Q]p[i85rɊ치L^9-=Kwf0Wwٮ.~FMH3m=!_ 9} rb`D>)>MRd[$kó(9VVӄ2}I eD9&?/k{\ZkОBgd`0MsF;&Z(?:~cJȊ6~avv% SD(#gQxܺﲧi '"с _j_|RFfm80÷w#|lky s:4@7y[WM}U5DΛ. Jn{cE6"u^q p22=A5\OCw;<1]Rq{/-qv4| tɞ㼞Q6%BO< L,O PiU3:6>7 -Vr|Y3N+5DoR 4EL]ѣ¥w*8A0jb܇+g ;,D L<~X%c8qgѨ%s yfO'ArC( M@<0Ue42nŋ4c$wH݅;/swG kjC<('!mͧJ{ś_SvfK*{( J&:I&NbTȪ0HuL{C|1"D;z1\D,1pQ&B?6!nlXXɻJ񙝖X)4@ϒo|Zh:}cl-P݀_5]bpj A#Q̊6ś5JwbIYx FDO:+!.B.)_ln-;K u?ZuT޼g`K1Nomz`!##ׂ00,8ͯϽ=(lkȍϣ$* ?'M匚Uŕϕ9-<[gʸ%73(tHlI:Jl#jd~wze( #!a".9Ba)FZ"$ 1">{}5nLpsn 1N(@ņHGq@͍q˹$ˬKn ҹ7@l+5^7r1>BmzcvlS!?n,Rpzc+qE!sdärtNQB$#S=H=K͗4S2Ozdo|}t?>kG`sP!_1+a b!?^ثq(+4EKt3Van>9 Q?CuK)+,F[tm݈9oO~Ck^6~v*z$h7m-qūU EsO#L4ǡ۳`=`--I^{l/,#@7źxЈ{q!.R[;!P4inf~&b>ǚf$=(tb_%+[q3X+Cyw3ƓWbW/@* Ш K҈ p#{T"I6(k؈E_g$ath~L)C-P&aG"IQ-@j6yD*pK}e;DA-%$&RmOv#>8.K/@7 ySP1?պɘ22B>N'v޲^gK*%\%2GB bfL j9\UvkR%:$[d>읦YA;WȰ5;GYT+P̝؋aqm[E~쌺 V"Sqb_o2uJO"`8x+W )a{Zۢ$(R]r1lq$pWfhH&s ;@\2rEZ~`Xro`'<4?+jUTW0ϴtcoF]0" 2UEƠ.ί@kIo!u^,' `՞C 5༇?H,>F0rU='<|æW7NX+у^H̀Y_\r VdF=`J@26yDݠT `eࠬasps:Jk^:J!HϘhp+vND>lL:^DIU,4h7xjݺ-^%鎯euk"!;7ZQcŲQe(t3p aD%=0F'Yk=Lk2䂔F픡0/2&6ffu瓄[yPkzWFx |DFYJ3p &/'HB,aJ F+A&b*uѴfpe$SzV\qwesk m!2P>iYR bAbb@ê!x %{ X=N/.,vQ in4"G6?p>HᙱlKZgwpZIJPZd{yn®&QrczanFAK 7 S)|PP*`.!5.xp+ YGC0a22(XV|U*n*jٸCk4@Ye_l4TC/[{LR_tHi!1G>LeTpyqz߯mB M v=hgI*-өJ/즠^uOY+=xeߴvU_szf*5j9RV]$#ʲ$9NŠ?^!saDgp}-ɇ.jM0j6#<;vLŠ'݈㰮7K| /ԌI2r1V4|e(Շ u gd$XwiUzW +}b@}T˺E豕6U/DcMpHRQ cawCاoDKe/1mdE`}r Yz: O˹XNa׆ϭxщbiqAvr}^ .P4}m?X֛PO#ҞSW`DD3CߺRK]ѳ6a(IE8S Pt^!t g7ӟ&]3(Pϡî֪@Csldel Sʛyve&; ӊzԤ #k*>liae^iPډo/'A/_\EGE,xh (-[sjڐ:[]BdNn O暏'jQjm {O FX-0Gvl4P*M[ AYNm@br5\9 рIW9qyX5C(()1͎5ٞɞ #,5rϝa`9+$ Zi 'qVIeKv0 7݋9F"35X,yKtVa~5/r<#v@urU&rxf?C[m?Gq&bw9tрI)+P&grJY_rK襴2EЧN;OeO ^u}N$H8a:pӅA=q%#TUAp3v lL{o+[7R2cղu8`pkv #\cQc%\ixV~ǫ!'ē0zE(2˿hGn+.theC3857 @ãn}xU gpEvI۪ /Tkf&Z980쒘ܜ7 |؎"RO1Q)s䥇SP穋<* $)Xi qP0&̣*(U|ePBȈ|I^kqÚV)X`?w: Ys{qeq8 4 ;~td؜Ь&ȇֱ@_Lf['i3[Ў&#A5PceC 2vDN}iKDM_~M<}[r``l}H1M=d>;b M5hUL֩n;$ @'~OU&sa}dֱTvͯR?JԼbYj[ ~ 51I#y` i wq2'1zEWKtw&ry8nh#ޞ-:M˒(R`pU&bpZLi4TpG/Vl0#s6:?6 HѨ/$ xvO'(l`^T +ôJZiAlwxSk%Nmp4sF/ЃV?{%RobO?'׽h z(Dn ߊ"R%'A=5V[ig5j}5Z7BF JA~wrf,$ncKFsoԿOp+dB5!t^os>BKmoSީgPVZ2]{n[Z7v:L9<(䟗@u":6QvUIaU2%Pziy fMhd[S,Nbiωߊg2K^oI0!oLSl'> T$&NjU~" ~x- M cdEcgMAc~H MTSHKS^3"d+~0:;`•ْfvQFN=Z#h~z_Jkkڗ T#%(ՉI8ky֎mˇXT\z[8$IffXIi+fZ];gÊzP岋"B|VEN{B4#!SҼJv]r(qS}kj&D"&H(oU Nː[߆#YtFR9/*7Nv'N I5@<mR"4Tv쒂Dxn^j0C5B=^LK+ Ռ% |'N+%uEڑpsc2z4W{Vpei< %-/$N,Ewj.֐4fMfWhH3 0wtž d`L\# +S~dUN{@tn9&C$PK.v 7˵G1EOf<)]isد.kQG Du}QGd(Gc\dUvtߧU55b2UӶ dqrGC>v4B2I rX(̤/Tkȵ^dMp@8;( qc~:~T}k1'`jf1Q>+BGhf. bnӕ~+bʃ(PUX`/=Sep9H`I -*;hH1EŢ4}ysLCn0Fo U'gIOcnY-{GM -B}s|_טxJhH)x!?  g#F_v\X<:xƗT':ղ H.{&$L;r?Rn_`44VD+IK$kG3$WVˊCm۽[Ql=β}< ͙#`-%2؝#i #ΫQNCy:2Vǽ'lL7$fE=X"d_˦'n]}9 ;;y٦(!2a+)@ AO;U f^IqQB+5X%uUP(2,t|m@cNIVj++qO#3 tJ=ZuǛdӢ;%N;ç̾Y=Nbnmd4rNԀޝ׷ϲh "/HC4"-_-A (F̣+k$ b[#dhAnxuTQ'zb{N{ek;يv((\CGwp5M/ғW#Zs!~|,kW kFnӜ/|8\ ^""o40=Dهfw3ӸJd".skr7h U-qdAI%`_BY+oX" hDq [pu8N rx|lӠiQ(> DYx~&}]vw4g9!ym^twڱuiJE [xS#YAwʨ! [goaVx0 q_`<66$v*T00f^;֔ 0!q3g>=w.kJ |I 8dFiMS"}\[RA=&ƾ5iImn!L#J[TzJeP;PNf r~C> 727ke^,?6ty=o~(8[T#$tކQ2]=$J!_s[-n G6BZGcgjwP͙a"ѥ@Pr =y`<Ϸ\ L ssuxJkݢ좯]_х(XH0>XZ?5##,հ_& ZоL٧0t[ +B̚ںKDo& (^> J7kp~+F>툋RJ('mgRie?SE9u%հ=-w8m{}bc Qe>w ܏J/ S7`)g .!_E^\#3hCwaDQGaucG+=T!TnezP/dMEwy-O `x`''&{9Bs%˜UwBYVa᠟?r9 zKJpOMOˈHVǛ 2"련 =dh330~dS %TWgl:IٽKȀ* qe' 4:jDnf+.wVDaC r|a N@5ɦBL붷#g>"1kRЋp^kd~2Ihl%dv[AWmGR7JO8khzdw ꙟ^ep(KfD$\CHT\2^mzW/OUMUYOxrBڟCsm𽖿C)"e6xnG#H/演y\GD {qC0"٣.Geit{í.]BQb:?B$H% $!ĝ[E茒vᄱh01I2W$J+˕;gzIzC1{Z_#d&4r~ 'I]XCZWZG@BNՆ; ČF:#|8ζSTp68+&R5>t-$6.YX"z-bf,aڒѦV'T/ޱ.DKGo"D*~J]QW,M%NbFIf66 ۽-ZYwJ5pBX!^@%;ABF0\QIda E%RpC\;m\r9ˡzfvUS#j,=z@zbw_R6{n }Yhu r G#Bxog=a/ s YOf+3B@wT/ڌ?-u&k]"֫Cun$VvsKDTo[OL~|R tH(PfngR7$ J^ws0/#C•9rtB5YR>Cn{eۃ2WδN+s!1"7{0˜\׬[~<-|G瘵S"F"j:wh3؎7<Љȋ6]DŽkfvp\o>2YYT@k9VT- U_~[tq~PŘS/QNpP{!@ ;hbWi?͖[6*H,qpFoРض8tzX;TrO=(X>bclv]P~uuz,QW2@Pj1h@D$Y7t}3N[ЍO뻇N[;|EFrCULy>2ӱMqИ㨘x;]I O=!wT &^&N(G{טq6KYq< RCb~"q3oheh]^Cז;쩺Ĭ\Fm*{1e␅R6#ׁsƠ64+GcH _ clĚ )2(yZ z?rURm EuVATgHV5fݘ$)Hrj)o3zuH;r##BPzEIx+,E]8FB zB40O-0\~e DI 6WcNJPABNQ~(ț XT"4u+⁓t2M$cG|۸^C|f n4Yhs0 BH/L8P0Qqiksbr Xxö%EgߡR>ARH][P x1y8.ˎR>(FRfZ_ԳƮ.zH%,t]eJڒ ws51w\0پS_!\J sj|2b]"@zyZ=>j_6CNT>KB ? ~4@,)j޳V,G{\(%(@ئlZ'1$\D.ʼΈWEDyP:Tk4嫙Y鰙Zf)"Ñ.Qaff /q *V""SB*7e^t>oI5a׶ jz?,Ӑŷxu7O}Tm۶;[j"~Ô*D|\uLGU9}Lb?k>Lƌ-d>z\lͶb箝&2r&~i2ndG^wȤmk|>O;@Eޘ9b,ݖ2ƌo@s s_&:j*UKN9#1}7 ( hVӡz~pa MkWiЌh M˜ȉnm-Cd?eˑJH`kUtf҆v8PV#WnD qX/SeAOfRo$\ y#$ D9 \FYdW0f d _u̅˰8e1y6ƅbIN0D`N'\Na7%:^;P`=ipUMu@ɝ͢}V=ZݰvD]l8nmڟt]Pi;#؎lnVtdt[V`5s_8Ѫp^El!%hQ}QNJsXhمDmO&}Z'WSB^Ės>28` Zf#vjξ0: WrVܛTEL9Lrmܓ]G7zE} ;2F)\^}`pQe ~JQ[ CJQ;V:n_@k =tҭ2 +m׈*~׌mN4~{ H>V")1;Bn"/TozqⲾ2#S=Vg'ɒunLU(M mػYh'aWj}%( U >beo Ml@nvwƵZUG/lZ /VvzpU)l3l.[+Yxɵ2M:_=i[O J御P)B V/ϸ)"ٶA6j8%&-'JɻL o$'Mq ;Ǜ!f7 6쪑L cZ *+}8hdnbqW?G})?ήЂR&^"vcSB@N'@l6[l8rCCDjji40DhXzb-bO[ ]k"<>`:fa8" W 3ӞĹu]9)6W$ &ھͪA5e.lt!3;=78VڟtbSH>9) ֟P$#tlߨְffT.wCiY /d^"umg!AWDy1=tpFq/z}3~:s;?X>![Y1oַWjԅKpo @nigt:)Bn/B+ds?|=CX@q3T|}*Gj[<*oC,:LEr.;JfyN%u t y |ENQie,4wa]SGI7N?V0{e ?Q&'~ҵj[&hVc!Dj`΀ËGӛlR)MHõox+1lw2 6 `|h!ӢR::"9'' 0)ȡW ,nb4?p3"X)`Ye{%lRNμiixdrS3ـ c ͓s]Jy 'd3P n89 q!l=bDg.gɚSfi)}PJܢoQfeVAg!X0y L(KT_S},\˖_">!"hpUigJ0XB2.GI Rl@;sZ}zC3$Ez+9OXbaE\R[4^yL +dD}S$qWUgf5$‹ծq| 57yJpaU+;漵?1bl't%f#^&UМ Ý\X]KܢS1 5v*$%>U9 !EDF=lF WcӒR뎓sK[ #2&d^ %dIx[?++tDN$~a֨È-/>4Q֑n[|;<tf3A.uDAI .׋{k^XGjP5}ӱe6"?lmWђ :KWN$eiinJl~XN*lO&WE]^JaPqijw^:9V7;!zDo[?' pbOo'`ozM:Zk]I7Yvhw=,YJ`#i'ԟC )@Ԕ>^`:6 &6 tQU-_ӈ2+FTZeKOGBXj-S6S.#bϞK5ʮ^".}/# YqX]jʀcyج?<@έy6m pjDK%Jo g\2FrOܗocj+L&YX!c&f|?ڧ?rg:Eˈc;Gt/ug .jBn׫z&t#(ҹ\NJL!v7ǤoF|MK6@b#?Z񱼠ք * sk]}Wʢ1qmIvG+h?kx6Rtk7<~da_LJwlj/;Dwf9kdІjxRoM zŻɻ7dޞ5E+>dV-F Wkkr= ~-:@pвxr9ahZoPXU'Uש}GBAYLNϊ$kv3-} P.ӹU.FM,t5G|.v EJdA?xpxe%oPʾc"O[߆bGލNjsfFmN'p/#4Zt+T^Cr72'GdlGR07Cʾ~@?ZjSBÀ@:oQb)#/ysE~Bb}'>1v["$0dY`n2Kht]FgR{-13 r_v?S6e{i-?+Gz0҄C7T^!k!U'(ۆʩ EbrJM"|bXLu5-) ݙƄD )'^4{ 2g[+ cc\6?lpˈs/ x0t7( _72|,?_((jK3({tsgVLbdG1ѤD̃3ǫ\@͋0k?JaӜ%ws:I*HfJ.) ftw!tI%4}݁ad Ԑ-#ielA"3Cl9e|9¨S qԯ&GʐbEiq ,T ~a;L 4pLb{+n ./z5|̱yx-"LI:ӻjdxu'"<5E}FQ6x@ 4 l*:>lt!6ɻԁ nC5f_aaꋀP*Vx`?0" mN3ؐFTl/jP^#v94">*@6O %D7$!*qf,7b3"LJ_3d6>wOVYc-ԇwNmX_GEp/ܫ@BsI͓VOcp*'ҥk)Q $) Fl5W/*-R=:psb՜1NYՎ;jܠ8^;v*@]f/#ZI?HtFθ4Лa9pc@`&r~,i|:%wI^z#̆2B]UUwE<+ nNrGl4iXԕePš 2&qRו=8PX1 r5ㅓ>TWS(]ݶ&mD7$o13G` /ɼߝ@"9f#9SbH%';S)1a&x4=NQhmwK.JoA6^q9oƫ*U mtvQY`7X2>=U-_T YF_jY6w+p:P,Mx `@Vc<[/~n+,~bv)hi m}Od.\a!fGnTʨF-E>kI|Ln*-@+zmzs #ɣQO(cP`aJc[/P1Lլk?F,u]֍=FZ|1yDk(ce )C^;syW'7;kJO7D [7\6}yGdNvU2+-6m)4̟RMbK,kD,Jzu5W?$lvxdNsOQ\v9r邡4@|<ȠwSF|Ki˰@(?v5ȚJYEG  0ւ'-!bYa!$Lvd?°5Dښnߊ׀b;z|A!$|a+ DLRLfF;⇥Z( >BWl<"a5pZRx_AӀ,a x>czb~Y釶 i4J:ճ_~nύ*kwǗGOX|yv֑whnĉES1W9, VKJw^´r&hB۽v8!k bAF֠}#&h!Fh1j>۴~ ;FɍH`]4X=| k$d5d,S[.?[W9x6#,Pp3!odWgk¢):N|9m *H3(1wF/,S\Ř.mPCh:ٚ[v8}@@+wێe_@.YDٰHV `;B-0LO4=زy]U r$9(O-֏˂D!ډDA.`wz%I *2%܄"I; v'{m9w<*p2 3l?nh,\A ,~M^|qQZm46])ziG4V 26RU0pcB"{&6T `vysZ.gR1{+*l.ҢG/n@Lĥl83#u-jQd:GdK4'B?fh{H:U3`΃8 Bo޲*z{:lxhԱ)7nIDf-7s3k" 63A#|uT:hB,-m ̀g92ο-jN:n ݡ_/f oM!Y%*,To ǖfэ1I.\3ȏ : gF=8-/ -@"L-nT_,&%E)41i>mg .I%i~kS԰N\`'javAݤa\ə Ad0/Rx^Wu 'E*3=។&||P6#?B O*ZqWZb8Q *8 a&>sS~B20ڰP)68so#r-B0vO\N%Y쿸ȴwWYO10""}T7E XP!M& ɖNK,Lm@l[d Cflxn]0IX՞40&t~##bOubGݪ{?d:hɢ1S\RNIWD<2_軸hOV҉*3sn!"+*,d=+3@̟H*Sbſx m/6$injr)8j}@2 rtHv:)r, eYuԾ@x"7䑻u+}id<W8w↊<+v >k؍?jhHg TóZf@E1a ]i,+Ul Wpz@% cյ3' Ċ Tb,a7_fkQkW 3G0 _gF'EPaGkڱLkIbFƟ,I*l(P=çǘ~3 pLe`*6IĥT\ k9u ݊r<$C8S<m%-sS%1݉AXB59\Tѐ,R)h?4yKN4}m{gZYKѡvEQ 񹏜YFsii 'd8!%w|W޵;EOa#x+7> y{j4E';7s<w{532Za^cN/gF(Ҥc:AN(Y`WKC+dxzA?P κYE"ɪ b&6UVr8nEcB U8j QꆨD {+y]$z[qK2d?ZG8ZQ$OGyxЕZ"UA, IDHY-'z ƞ@>1T@'0{W3- +8О=ؽ#S:?B:t|N :e<'Rro dkx%9!BЌYahWft' {7y8[tZk$ 8*qkf"ժ-z牽{]]Uȿt p{'Mwdv?'DPLb)(hg+"'V{C:(kYs~[=0em#z6d^35od9^xکwKvĐ,6$;B:j%B"&ųhfD@XLt%$l*vnլPY?˧>nԅQ+B~И [~t|M(yFnۉx&=D? 2/sHv G& 3 Ϋ#9)M>8b9c@Yfn C!-sp%#56q0>5}Vx3zreR4C;1*>BqW%ݞ:Iܺ^xN7N_am.t<.+J9Ҡi4@ƏR e[BoM FFYx_kFrNU'saT3d4~~K'pρaAy" ?%]&}V=:AvLr" aUW Gf>GVYDk^J[_Nr\ u<}G{xmpuYD<9gǵ0djD( ״ek6^EF#žR;j`;" ̇PR̫#g#8=iUOhȩ#'~/ "B_m96ۯM!7HMLFWO5EC]1ژmՁbuCzW}K9SL+[@P/\ wu"; |{tL% MB$Abz!)BskcEFUYVe h0'b (y[NTҖ.[Ma# /7uep02yxKFf6bXa:]K(鉼#IFsbowx} ڿ ~Y_Td*><Ž]ߎʹmR_(̊gU ضQI)|.g^wŤܞ0ד$ L \5΢aX3՜%`I݉!5<s6ȫ;)EU=ƼC̼݂%2 bamLl k}I6sA?4x*Dj'Ap!+pRvB(I]̦WLЛkf9_x"k۝g;d!QN?LN}Hh<;JrQv^Ib8T"G{T[Bn JIQ(KP곰&.=]V|^*ꗔq?YtC?EnlҴaI6"$ZժiupwnT^ )V-C'po$#͈";kMtX`H|:8u7$48.K%w_eAiݝ;:^(;)wG~d- Af^?|l1XQRJh7D Μ\Z;p.l`ioLnfL%,b'`|~<%2ꤤ;$9ҐE$:Jkm[[)61 C"X$7VcaԒR%}qwpMyŭ]ifV$r\ye;HE4Fli kh޺f~~P(yEI W AZ?;mB!ևWL4U$Ln-em-lvuP,hWT0:Yd#TgDU~J!Ґ!PpVٶ #?b);nZ 슝&tIVO)#35Rflxܞꙺy;[}`v#8{(E0O-qNR% X)0&y76an0޽ĠOE 5a hVP3hGdX-A/!\4 T(@!U%iWwxQH t"@M.20s+kSc#6E^c>ESBxjcyEp0)UT^&W7| "f䯰*ҩ,֜CeHHuP\Ww΅݃-/AGPoCeŗS2@lF#}_05ie?+%FkIB8ubVn%~4m$"[7yd^.AԤj65z?% G1 J5Gg9;W^|sdt^*#< Ӎb2_)!XsAgnO*cLi iuY!:iVxӻu} 1> WX>Mm9"TbldLl_FNGD zЦQ7>AsJ3zsM< &⇖ Zt 委5d>+(INzbt-/4AO-D[9!YvB Q(|n=Y ,"Z+Z×U duG8=?@ SRΣ@ӫB@3(ҙ\w4+ pchIi,Z_/k%HvU oYg&EZu)R-b O^+6id.sh9~~`:Jʄ2_JbxvF2ԳtحtAU)8rb ыR(P"}#+VQt-U_K)6p\P$1rcJV`s>T#xmkߓ'ɉ P#⏌F'uZ5D>_8}Ij[g;.wH;c6ӗ0Ζm%>ͼoq44 AVo{{M4%|aמk|_YR%jc9יb3kw>{ȍQzd2cZ},cIKjܫf#7%όa=q38ogs )`fzb)esьJY;^bEn i< wšM_>:q[72p:Le=jM>척J #(A"NaJQemnLd^F;Hh 'OAB3O3ܵ}&ڰTu2wm S}~KpӃyt㪫, W9;t8A{iqMEd9.θPwZa*1٩\J~EB @mdD׉}j!\IvԽu1t:2p@׎y@&@3V&|n>f5.8uk5;yk=ZOM+Iy_&  RYWx9c25/Daa<B'e/Du 3!!6y8JG̥S\M߷cx¾B¬\~~uea(* n]pEQD@I|%'}XtDg֕Rp,"OG!u(5vi8<=^݀q%f,F0|Vr_| zݴ/6҆s!l@Gɺtw`+˚I\Sk~:#ĸf`fyҪ*qyR¯aA4~PT9Jve;"GD㞡ͥ3V( _"/TʀIY9L~3Ue$Y`$z ')]cͼ4cPsW͙AԗЄM1Lxюfb .1 >3i#;ٺwBb_*+Sq x7~]i礨CrWdD: фԔr?8+ZzF*￱'\sOikr6U`jݹ떍t|.{hKVjuKdI I`]zL [u-==[L>癦 {N4Nݬ=n.kZS:f/t~plWO#4+_VOiC[ԽkpԤ,7~JD  *ю)~16i[ yzK.M魸ԙ(=38/St| 3>\.,D5XH Ux*K|[U<8 3wEA#V-O&'pHF"M֏(gz-Wy7ߚ7f/&l{7ܳrD_F哪mƥUZJ^!?T ]yu.~@ W2.#??:`~Ri#ay]ɯy7{5Yl͖t, n[l S!wF}Cq 2YHZ$1:ݛU!#YٗKf֜mB՘+Ald=@Mx8+u"T`Nyy?7 L4L(6g1eUk4PTEђyKU8;`}Q:C D7j FL-4CF;]Zw|֍1gp: +碈p ^-t,s=AR U*iG"r6a!QNCȭ5V2Qtnffks$UśFCzݔ?per]0Ԩl{d[LL)5XILJV3]~Ee(Ec ϐW_$׈1_aɛ1]YZ]chVia6fuuOǑtTX Q~(V̮‡Q\"V22Ta?EҀ@Ob|t ='x zhQIS~"b:7o毼<)r ieίRǴ DH= >R{G.ӃS\ol_CSBH,q'B{$ڭFPX Pf]s&b I+;ƒ R6ih8bK 2[]ME=OUX**gP^njg6eZQ.z?i5v'1-dZD{ zU#tIDLc&\֯:K/$Rg}( BS``t5i c@ :+D}S-F/PB_WІpf`lF[7jێ8ٓOvXyR9F EĽBw XW]>NڞE{1z\oXT-@B7\YKuRMo34c_׃Un1=82ClC\:yU7AЉPRHm5s>:@3 ˚s a,Hq.j|?W;Z'- N&RFX:wYQ&:;qI &Ay{U۫f!jFq h)ѷ oZe MQF;{7LٛvV5j>l`s #0hߟesXKfǎt5#JpvV`ghHbL :dbJxUuJ},|QfDn3P~f̉IF%p6+<7I~Eнu`ל.ؼlkﻗO4 Nt*R6}8Iyx,꒖9~«$#@sYnl.6+@R:: d+91:(02kmZ|,0S~{(<'oL<;Af*5k 2#`>!ܔ-yu҆G/uױEZJa.h2ȨCG=B*Z+,f"TI:$(>Im&(dfgԶp ZYx߬ښqp3ƻ]["O/^b-dE-&a-X*ɸ ?ovg d̴g^TlL$_Z" PN0v28]; nD(.}\jI R`\z@lqy& Ay衝+h|j?rbt 0ڴo[^#XY:RA9~ LԬ}E=ǞY P!p2&&GȀ HwCPǶnCuhP-0mKMy*#C;afIL_ӄYx2 [R+h}܈s&BI8PY.R9Tܚ!lHHCAfl58ƔRY\u:=ްZdG+W )% w3LG3/<ԫb XN{+& yd AsCڴ|12OX%fHcdxfBʚD,!N##ƖM{J[L-FDlK)WU:;-1V܋7}{a3 6Ȝ_e+9 ځM8W[t/5cШzTmVj]GI ׁq5q ,&4!RA$\YɌhnU*,?h&U\ZLkFcA*|;^P`Íq2&:%uǝAL=~~MtV.V/6w 4*ZhTf쑑8J"Nhsn};vd*cFϼiSn>_@88/dG2S۫" ]O=NBDᝐӬ 2+aA}?}_%;ƛo;sn°I3ScQQQLo X%]hs?ڶ>o_|uqb'"Oy(E߄>g1y X7FH!ݜ/џk;}{%4($1Yu3d^k lla.F>u4'TbNfz?KkXԝdˁ:1/> /z h"lR6D ,#0od0ĺlSmHúH{68^{DjhqȦ7f)])cM{Nu褆ɐkuA!؞׎+J-J6qM&mf5oN);ڧey7\zyMJU#k\ NҺ"r*7fiրNe -& 'J+ٔԑ O;@X\Bp+fDC2f}h7#1Q[ T2x~f7Ki14'eͺJ齎v1q|=L2^Pm4E9|zBSEt[HhEe ^bI> Mn4+L֖p]qi$#gx-Cϕmj+E䘁i4XF:֘GZ=OAgDĨTuvtxV/_V} ,Р[eܭpŖGqgWAQ2ױPZ)X`A;ߙ5fm^ x.-J25~Lf!G(7/`Rk38]g$w=%,00@nodMNZ7O W.Fۻgoz~Ҕv A?Ǣ'UQd"3UzBi#օǢ݆h.zL%%AdGKr l,K,p ~)~{9 ?$FBOTӧ/rE c0_I~j:{udƕv!WϗWQL' ,n<&mz#5\.}<\6UTь('& y Ӎv73j85]ۙofǂNIvn lcar5 ͉]6!x^$,EV( x,p7PWz<Rɽ/*g ˍY=: hLj u,Kʸ)a?ǎt_V"m [LrS4l5N$'T_ I+jLbtC[7ޠSL*'e|pU5ܩmRX cLBeč>S,Yᰄ2=# LDv txOS5NFրWita.mKןpg&RIVoIP̥䫰DP/B dinfeyߋ>xg&V8Bn]tn)E 뭠Xh* F\sʤ L*I<Rkb'U[cU^ɲibykO5#!E'ɥ[Y}i ;&!ءױN4xڰR @7IcjEQB5SS{SFRmڏk."y'j>;*uԨD:Mܧ{=r~L#oh*#D^vl`ýw%@^7̕ <$R#V\vLL HOMVP(Y{py1Ftu(f4NP?\@qA@CbBr '3 ~G/\y10k-$)=su"N[B+6#wuh ȗO{rjl AM' ^(d}0y{M ,*#4(@Ƕ3)To34,rv o3ʄˡqّդkbdCx!zyտbʱ8Bo=NRxr0^k=i ~U=7wѧ%(E=%s^!85΂pE[N /Oizд}I-y%:>g;2 B,^@tS,R HTߏ-Jɀem1xdVބ| D"8`!BhN:/͘:cfxMdt|!8~]-!otܔ\EČpR`{5sWp/E$r,mza.Ojp4qbfOT{US!L޲cR;-cY" ?:|gQ涐>V< & eP#'>|mǒ"59ԻHu&c>7Cq¼l[ԤZƂ{>H21| 5-D'{6бa_NkŤu{zeqr1x " #CU. E+RpPl(؁km4Xz,F@֫ @oH y7l[WU@_t6WIZp4ysSDfw@Gg'%e4ƋUU?ݜ|sܗL(k)Ұ͝]; O&9BuKJy2-m#Gڧ*Rnqxa"7ߪTMmPO3#GL*zm(a=̟dҗw97n v<?۟)[ٞd7{\O+B9,l^QuWڅϼA;wи$s,#u褩nPX`4gK&9Wt Owb~ (d:=/ 8Z24O-b@1?Bݵ iZ,% 0ֽӺhC=&zӃϗjT2aL >A^GGo=Kk-; z0n;5E̅mFl 1bgeE9ٯ]Ejj@1la|)vWqvSjZwBZn^KRh1EW6o'5 p?KgL3߻J:B:ۿJ܂fdZmk"(jfg[#Q]L᏾s,+vS9/Χ!j7Aܓeq^mݡa f.c:Nw>r+_VmB˙Lq۾AspEGC{ܕma۶ 3[$7.dE س b4J޼yhP0l9%D̲ IwmCz?Bl>)馱T8(\3)a=opck>L-1`VQq\`a$?b^;d[dS~d~f)vݣpoͶڒp6_=ZQwKwcL> ]YĈyj^$wyv0X\4aL8le+M4dIQī:hIdTP0\fqtG-$A{YPQ\Дκ@pM5$Y =,5Aq#ZeZF53?\ Z>a HjT11OA6t'=]ک̧?<>=gY_ :`j;|BE9qKr{Ŵ_o_F 4cˑc-k` p9q6瑣Wyϵ`C [XGS8)1zNDFswc@t9#5ӭ#OzQ gWK@[g+nte(MI %s>ʑ;eK. gfZvV= JFwfơ>5 hBg\h/.>?C',3B{! KtC&D%!n$c(ǖTM](ckwV`a+j;ۜR ιPUHtf3Բ XWrK3xHjUjr5(#r:ɠ럼`h{{pS/.yvog3 Is i)qG,IlOg"fC{[w,z力Pn !N#.ZV{|7ɏO+]n/u?,9?nI"Í#s$7lizAagv'u uy`O`o,W9ib!XP_mVת—.z$#64،;Ⱥ0dB)Ę(zwqN[u6;Pvߒ:fHȻOЪQUnYy1ђM?&.$<>y!@ЃX)8a9J㺮]f1]b>$314vUPv[0rwaf&k˽KeZHzܕMo7⩖vR?MI6o3T-oLΘNy }6Ld9++;㉣?X(j4W7AĉaJUD𓻲*3C뙟b=)LdVa<=VBFVKlnN7 p0Ku gW);f-BfsJfJYM ky @ei_m w{fK} H5ZL`o ]$mY[CRsp$i1ll'{OEZm_eO{O(3Bfd&mj .@`鲚G:e@3lS՛ jg t6v̀rQ3ܦGU mUM:SK1> uA]$llJ*R`Bs6v=pqBctܡ)t;koorj>~~>3WCP< 7VNm92M8_.}v0,J_w{7KhKY5сCc;#)jr31or!QaE}[\ם1ɪ͋,Geh](۫Ϩ^ xsKvcʇkjq5TkIG9R )`m"XK8U^1Jh`92Q/bq_ vR\?.lamyj17l[O A;hu"N\y$(.h{<DAךʓ3"LM2:gTs>>%a˯]"?B0E6# >B~s*ޙС*\LYy|Nq [CDW=&@OSClz|RUB*(rkuݍcH@*Ŷ>SOM'I`)e3fX=P1M۽F_Ƥde^q=ZBk@22Dq%G*iz53jjxvJW_n`l"+j_ 1䛈ٲP>55 :.tXOg=[ȏ ́ݩצNI.2'F2%jӯu q&t c +Uz JYIs)x S{klCG5+گo[y56PPj]4Kz!cӫj>X8u$3!o|3e[Kq^U0$ےsA ո#Ao1Ƹ0L~^XJʝ{T&UNji:u0q5&bbxq y ]ZnC9ފDuTƣ#O,Mh7"ۛ@d, F:d}وRb,0OAjamXXA mq*Z"#g6`2@p=Hngp_MqGC(}_/G G([1K3Ozϓ>R2Ul!lu4ݭ @ Ͻ)Ep "!',B -6WqTXgAv6ׁ )/GOB֫C.mm#]UBsw9 0?:Ϥk#Ôt0j-hfc&/nh9 PnvH=iڱ~ޛUx\!EEW6^}E 7a˾7ɖ%N듉 5У6z5m}.ValG^@m1h8V3v~唓aG`Cs&\8 53'!C:[c|%#K>#uYUNcl/G )|vhuo(`P[r=6ۤFB(6h KA7Cq8"qcg 30Buos.b+ރ$r(TeRkCxD=mY1/ʑNh]=e bqqԿYt/:K׷Ii wHd>.vOj6 *7EWFF4kZ!Mzw xJ 9wsBTcSkB0Ξ4Y2cye_OW gk5Ɔ<:BнQ;*2,WaT,Αk8ŶwzgΣ9C~wˏmbCv>gj[Iߋ"JILO:)>=w{5ni@Yۼ'pmULNL@p>4;; Ϻ5^ϾJPi07NtRl9U7똜!~`8x(A|݈ L(΀9GNuF(QR&\"D~!ZiϲOG!ؓF l &txf.'1P+Wjaa\1 B4pjlO3[lkQa\{٧6Lz'*J$m j A+%4,ʂ0>F8Ggث )qg{a(hL.ZE4E>C •`hT[GhDGѵ Du?h WriA)`Psv,КJ ;c o`hd~QiyŃ W9 275l8m5}nmے#yM@S{2{HXEa}% {eW~B\k]F @bH9e8)] ([#5[r=|kq?z36}5K̚E6DC#f͛~#-v65!w5 <> W-=47=Rn(}E9rKh|w1MJl^g2_Y1)_)upp(0:7p w$ +@)(o,z9$8h{vs<&|Zz0N/`Xxо%I7@\ XjxVi ՄUe؈ȩ8ÁoUQ )x/9'l\V#_`ɕoC Ś"Ç SC4ώ09̴9{oh Gs%j6Q5/*qՖvBp&5B YKEAbԗ(i"H)ˈju9 WmqUL,_ͽcӕoYeMjEVi3]`T{T%S g ?vrVOy$m :R@Hb%Ú{;3p^`i |%|hU DahmAԜlOm 8 ?Oj\UM+& y7d!Rȁ&4*TiQqB~mMC߬fi*/9W wM[Gy@r1 EP1 $&-QW4LDyWc=',^gr yC~aJ¡cv•3&C7m?{- Qu#տ@I)8lmgJ62?/2ꬁ/|s;*t){kXKz1-<7O1`=0"^UC0O 洟Gt,h#FUH'B-R ,?ھ70Pd3,+5Z 6k_3e6S%pvly<%^6ScA 1TZ $;7g8ֻX\q^Ƨ@_n8 WTQdOfĝEUV7@bxNkΰ1FQx$^h5&R`;E-YbC?,2a^(;;\W$[xnb}Wpwo+)Ee˱=t{{=P=>+h5,>%r _8kloݞA4G% fo%WJ"TVw$z͏ݏ5 Z|#(9^ɣ>{λ: PYfI٢5]dh=f!;38f䥭ŞϟyЅ\՘hG=(᢬|•竣#cJX=ʌߏR*Qu fY"Wh%&&Ӿam+YF Ӿ@h*y4f˴R1@DP;TDilVtΗQ˭Hky˥" 럇}2F2G]/ȏg+PGԭL0Z*8{ce8=@,`۠FrT6,,cdSibxTm+ x']uJ W!VsߎwRD͘_NUj,18f7ƝgO[&z@Sa>_"K)_X5!gʶnF]^Մ!+D-`YИ6U6$i5sNE# Zٻ0wۘ',ړu*6Es5N-[Ȇ:lMF) W~J\vwkUlfq!Wx4׶ݪ<"׾})ʃt_.mwB#G+3@\Æ[ fL4*njcu8LsE^ } gN1M>ms/ 63,##pl0aGTE&^^qxX3n4Y`ϗ{4!KRi^g6L9jNh2阡wbrR+vo PGOFחg!|BL7_A[;ۡp Q2c.!L~Vϻ"|j-PK⁨ͣ ͚6 S)UG2?2޺ȭ&I`ԖlzamR皇gL/&^r Y = +by"liVq FCՊGph dom\C|e )i.s;R^hL9#3^#af6D* ~{f=/vq)vǫ@btmw4.sJH1U?J[E'AηK1rv0˷ٱ}lU#)WZK}gHcrrOi,~~#3 $JM4tsǜ:`qzI6.Re״[z,+9hoLl¶dtגNC?Q`rbNg9_07U @ O8%BI/)hi9;[g$KγL+b x{ϏNմ[ԷL9;' ~RB긝!= v%lksk#*pmEpG#ci/yR{4sjoh(=/='\)Wg{7I מk|eaײvDӁ30qp;:y=DSPh7r?0ox8RVVZa}PbxdSX]}#j780UD#h@]TY" $iDZ6Ø fwkO$7/BWZ7y7_ɰJⶋ!,OHǷ4`1 LRc˻+ )^#*J@蘽aqJA2z"0]vxvPàȮ.[2Sj΂|;>s;ĊxE_n/l|K5$w o ؐ9smk8)aGT{@$1e `W-! b3"r}X7''}aVwdCUX6:,-"Q[ )}>Ni*]ez5N0 Uyfr'[w.A`{BȠ`g=ŷ &vèUJw9TFߎ1V884{^_\:yvL` 7 ֣pUyjkou2~oxj9 rR7JZZ.wxqSbZ;OB j–C|[Qv}^ P:2j?t 4kzW3Q<|\~ B\5E6S y (ޫa} @ t s8;dC5_)i,CK)N2mE&@.n yx=H \\.hn2;IDDXTm6f2dH<$%'Z{Au9fͨ ڲ[Q'֥Ug {MՇCyz"_BhPs7hg~=Jd/]AKp&¡yR2٨luO.嶙K,".6lUv=L|\&Uo &b_ce޷F穩/6ӥ$L~ $}R5Fkqgp$ݐ1匝^hl{ւjlr6ȳfs4x92 5=E`2i J0&D7]R#ˆSSlD1p~:4i^Zoy&d /R:i֮͢-ZdqTC⮝6gM xte= +ֶHr#nZݭXd 8\}]3|zo$jns$`"\7ܩi/x|)eF:Gz]$d%4F_ *'3]`~,R錨w.(-!a5G\9z(uWW~!Oϟ#>[sdNUZM* v! Y-d~Coy$)=p'yP0wHߡx9*WK8M>ۙY{y,tc-^x Gԣh0r;M%l cبkiFBM|c9 >X Z5< )o62GI3 ,S_ݐu  8}`:|y!\n ^.*Ɇ9*$<\Ko?Zng|5OKX#/fUƔy'͗m҅HԕstxuSWLsgPr R7e]ؙPIi ~Q@+AL0l(!Cb&kE)5^[:bga=z'mC#@\:~IRJpX1$^IY*IHZ@tv?k}zT9(%i_\T 8n39u+\ܡvlT,š1r`` #3jwFr"͠X? u8R\+sޥkDS\L5:ɊBU>QF01'?8le$8 kɯ̋me x~oR@Y-]Ų_7V(]`Ŕ΍ [:-4\DQ+}N+@߉׿mOLݫX C\M~RYXE=+2/V}9@JXf7*2t2״T~_VVMS h~άI~>\8EA r߳[G SPgrrp^[B*_30=!cm+h$J ]uzHIԾi}A1%A1Ǣ O0DkB߷>z8;SuOPəۖ&aO$Lc!߾@fjs~Z9 -딋QZ ,d|mpɇp|S HC̉o~nzU:> 6[E-/ˆ Geq*+#:&},é6dNMrn"aRq؟Ҿ[==͡odN79uQTdMsNBm;Bw*>4P}fK; 6sۙR{-GgFK5Ee6h9LJ“P -✮؉߽a67uZS#R:>#ϜJ'D,eޜ㕔Uf9oۯ~OS }s$M̹ 72nF~ T+FfIzck sArXw/ʒ֟Rt*"|?ߋ^mfPƅ 8Ag.]z|tXYEO#-JpY>}ڣlN, `nʭ^Er=],]|3dg|`u HBl3i UpEm _И ?l9)F]5[>ϣytFڪukS (hH(/I쐆K#g mqWһ}LJcT[p\~9"꛵4$T1e,22fr.͋ę1jRC]cmBXn{;/gK_ӣ Y<Z!D=7B;Ӳ5n߱pkzSs`cW!\Dy@avd{,T نTjAϘdȉnt$MQ5P ):)(ɮ=j8t}6P^2=1 z)d]U}+Py6 ¸J{;o^  [)lǪiձ습A4@c];jg=~EKcuۘ8S48G‘140pt)rFpP~V7nBZTAH~U%` R((PhxM{kȤ*xlM*4R%~DğC TqHȼGVz/qef-N1CI"Ȇǂ|1Eټ`x72˸:_:mD:92zc+e5;z mY$U֟r( [17q@Jj\yWbH5"_gِ_l %q^KZN5=-Yx xa*} RTL}O )A]lq1AR{XagH)AW:6qJ$gWjɷ&&]ңf:>K!xt3px'{iUC:WvZJc;75Y_XkIlr ț*+R(j id%9NE}H]Nšgcee% |T/^q*`OUaũG1`̘d&C9ɱt?yo{9uþcwcF5#bt9:bm]dc/5l`ooa/3[8~J 65bv-_$Ud݁,im\5=ꝷ!Z%~F*jk?7P]E+R\]j-4F%C~M\ATkZo9QVUQMdNL /5k-+fm8gޤ3 Z6rRtoEXaU;+, ]ϸ`ƨ%xu $/2>e < J&TJ,d/dtI~iY'# {DHTsOz۟wXi5= :Oč\Os9"5߀ ؜425?:#1 멮L%0_!+i~*˗EYn.0S;OޤfR+f5CQ|J lO^(כR?yc*G씇 5iJPkD\3F/r7pz 9[nb/p<`絵 0נּ#-b31W oL -Yy NǴbktZ>Ǧ{cwQ~"KBf:ʁ],( }Id=k綘"})hp4XRG)1i<-|\ۅS [|`"6Rd37vb"Ai=n!?]zFS6Ʋ~ USRCZ_8 f j"mj fAJeZ1 L<3&Fy6b!RH$bc:"UFdaIRR~U n(Ryc|.x$>g՘- !L!=0%BK8j_G=f;JK}nȓH9 {dEໝfHG*2{L_ŒO}5`^Ի098ޜOqmZ $`,DO+=@m_&j%S9'T$P5?q-{V"GL< غb$hJvaf@[j!1b5>$`F4 6sbL:tqqXxBM]52Rtw,?dm.{Nxfk4'ӊf=(w޵}ny`U1#{(?ZM~܄`b'֑شA̚7}>j|V 0^ˣk3d@Nx~ n+]i`hLD/:pv>ܥKZ8Gل;b,X(&b1NAzU`HQqjI?UO"(_@jI hJSS+Oo F;un>/BAZ #)?pn͸?SF>Wtq Y ,?)ۓd ~/dBGkˮuAPք"x#>J!j23 +R݆R/߭!r9Tlc2'ϲbx9"͟D8bk/4gs[Fa3UE7K w'D؝kz2bs 7 tr{RYGf 6`vJbi88_\dW7wcj i3Sv(@;t9L^BߜJx@XjQ 4N)Orυ0|t"tW0 X񏬭T>/m+la4@dcaF0KJ^Ϻy`xIN}^[ۅlK6ߋKZ:r-Tq4Yff Xa Tһ@hʹQm3?sЈ4`_~i']OP'H &yJP:nvWDt`͹L g (`XwF7w ʬ|H3 F.4iD`e(K@7]!{"). 0F98H)>qi w:E̵4kR֟q<;?>==2kBO{d]ֳAƀ:\| mōշ+ex o Gg@iscŧLu9]]1DP{̷y\~ %Ϩ JtdP\{N?TS Oj~C]"ٍjo l\eva_wP]@WU2j:5+j G^Ae:Gǿn,=G6յު;@Kp(6(RО 'r,n'K|;xx&D)J85v#T͡zzȫ+*C .Hr' I_[ZO3G [vve)~=T:ȂHAnNƼ'I9^c[ȋ$|;I|XJ T]ӵKG/xݍGwk_/=hX.X?beH\y@ivg  XNX􀵊 g!Ot)˪ uI\3~ᅼ/(otIG^_pztgy{ܢkL'H](efbN9jCu9Euzݬ2،x<ë pC|h}%b{I9"=Q:Cm C\xff\mo8ҲngV>iL4o֫Zx`O7%ӌjB8hVRS1l#=CEPwuuȠDT҄O\l1ҩCVHR[D#޸s 63 =x&w-ȿwiCU-0Il|G3%qF[+LTQ}y9NVta?5.'z%vMH`}1jVkcqMF1[b'B|^0=\FSh_kC:#^Lɨeͫ Lދ` w Q<x>'Or f2<QG2ʜsO+\$0=hTML=HJ |zy؆{tبf6s{g(5#g3I4uU9ǜᦏOD)ߙ>p:p7u8*>N)n2=b:k #EuE+={n5=KFԼ\ `Ћ'6Eh_A.*)C#k;4hP6V=HyW$J2dn⺛nRN(8~&, -3|nK/"y.89%޵a!qUe-/zkކز{FFձWl2xm!̤"0OFz~Ww*p; EfbezL;ƾgjcsx7hbO7zxlV(10"_6nrSag%cvˆVYյKl&D#.xY憪~N1{B0X@Vn~vV9 \ĚB/>O`h|}^*3LblY@XTSj@s?R~՗*(AS )ѥe.&Xނcn%^L}SK`>9#͢{> Ơ[aX}0ᨖߒNhF 5b8+[/EqMXMqN`囇)55&^5Жl"Ь7#xt}{b)Fw_,:/\{qrHZS%qk./WKmG6YCmh޷8kLj<=o-mbuww/ÐW3j_hl"ڑH1`9^X| ?l1 \EN[dkMCn<$'0 Fb г]b3$^aZ]LOR"iW` J'N'F{ d\CA6LO%SJP%sC3:ZX#`HN$-l9͎VN`9c{ #ILpȷ$"&k'_Vgສg^2S܄)yHأ@-Mi[ׇGuEּ 8 I 7, P!UR򄓆cpm3NccV5NV^ nrT؁Sa-bx4~!!o̘ q!F@$!o{;m:yЀ+OBgz,[Ffm 2,a_u\ZD"TG[Hw}۞[Njupr0ZJD?!}^K(1f o`,y;Mݡ كI7?eerѪS 7 jq6̿p00uXٗV|Ùp8(>KJ>/kd Xi, %bObūUXqc~ZTT˟٣@|HT0sїJ{ 雦G͹,VuV=1͎7kc.U;0rE^?PnboZ6`Pˁ '~rjlaT#]ݪe:W¬j%xa\ܸ>'nzl0"+bH_rDD,PpUMFnP0Э 4E 4 ,o@Q>Lu&;Û~Y5 |*,P9nM 8zZ#ns+aWzhpӏLk쉤]٫"Rd]9zrv37.b?EȵAM9jxM+pzl#!߰*&{0-0.3$:z %n5>tJWBO_)D4;zVXD噸m,~V<ґȃ= rFL6B8Z )q NsOj;pcS@ɭК4^7nЙ|:sM?֤,#P?>йT<9Byų&RHMzlz?*Q UA<@R7/ugC9cg#'*!|?m;ޖS!."bN}s;qi09(zyӎbhO"zN-2q&czri(Lt NV ;pﵔ=OI%|'iᳬN99-'7e"5R-)cu 0\1Hm[D#? ^'uG"Rf*(Ri<;K4 #(#p EL= "Z)L>I-d[C6dһD߉𥊵g&b^5)XCz?~AYHb gnv3aR EIMu_ ~3:3r+qsja.~WW81?=ࠣ~l[L )KZ!h{LM!CZYt;*t# 9GTz&⬽s9mv90C򀁈bJD'OLn"]+bvΧ2v")j.,=o`L|o&o vijX5gzLK)Tpؚgrˬ47 9oN:.Θ;q/֔; d# b2|($t.o +찱O:h*hR{'H 0[fA{4b 9FHrNx%XMn"GYeɮ@s࣫u~[Xi{xB51RM<Nμ>\@Hxq/,$3$ T<ڕ_˕b UThMEco>pPji g,/}bi6sWo='8,V5BnQP h5a'8S;? )UO 9`ox9K} $iNAN}CM Ѓ l .sBse3u0sIRL9>1p *\L-jzp3 xZqd\9f:S>˯Wl *eL9:V$~'s]ԩRbw>UD7ҠEm$ڑ=77Tφ(8D_RzuLt^ܻE 4~rۣyHrZp{6t!.<ϋ"~R'#-^uRaޚ ʼn1C~arP:ɓJvarIȶQb/H2I@y^sq=@,6dku1Fʊ҇E5*?jfS)BG{Fm=@:JQ9d__RI فR7Jk~|K66X|bE հY PfԪM0 W+~"yS krnBz$پ6ux> d+ѱ4]_zD$[+.c,gZW3۫Tz|'9-!LJ%6䍽^~>%%2 kiTD'з.v!p f--q"}ˢ=KU) 9#7H곳#.D!2TќtWl85֛+Briz$Q~ʂ,U- ,Oxy;P|R' #']\\)~ cŸHח/Mܰ]FkpZɼUi`ϵplVr2A$Jg:~dABI8ɼ16?"=qᥟxV'RE*BasQ\'SdebWuWM(N U'>$ .PVE,wOav@Tȅd/䤐֝_?ʥ}5T62ӞUsbYRrh(*Q="!KM.9#0jE45θ:;b/H{WUՖ#";SM֙NDBY7g \[*"."B*\.8c`]|Ԅ=Xm!89 #m.H,H])bD.106C듔1(c_i]Zh!X r/ztBeᙒ  gpi%yIJr9)9)g~z%^] ]lH ZQRWfsjllr &^7iMF_(zj0bv'Y ؄j2ֺwht0pXHy9 2Jn?obڕr,\MIxpW?D]3ϕX7M= KocjA+IBo]vs5C^۷ȚU8{ٙKmaMFق23zJj7͇}Tz'Q9y\m {w/0sAVѷηb{=jhyJ 2{ϥ8(DIADau8;W#mUhWt5hX#̤a 0ttWAz_^Woce ,\~'? F0/"8 \%ϻ" _Rj_NGT<$c퐱Ҧ'e7s*{Q=Wme,QAv7sVXilLX-WrSf'dg(4ϲKoCPrh}8a甒:5! Evۢ v.B7 V܁"p<Mr}_("Uqû>.+|0fv?JfT_ңIyJTf֙ ȳMb`!}Ȅ,7S'eM}A#_p#N p&pUU hNmcpőMY 2^g5fDxoBnю )v_\c Eck:ZQK  -{f%$I%x#_iS5>vuIb__QZ^`WG0?9uL\ ʱ= 曞sګI洒cGN5[KN=y|^_NK 1Hʼ7k( HWU@wʹ^eo#8 3;j |\L( S 7bc-$۳i[@rG"9ULm|rC47tW<ecJ[]^j!WZd$8!o:?VJW ! )?IٻE\8Y> 33-Si_VbhC2 m!#ᆦL8ЭߌQFGa]n3v)l#r>?GrVX>X%s-SYI%:zb; (Mv\o -̵P"WKw01~q7 qi$ѱYIvS^T΁(8!( bG8tm0ؽޗpuo8yN r' F´+͉L J@Y\{޿FM0\,  #=1\[*SԢj1Wc23Q̞A[k㗈8dgP^_<%#* /-A 0Rq4=Y2(xAԃSF,)腴]člt:lg [*5"pLJ%<: 6(xTVLoE0tޓ+S7/EĀc8MǓ#na>Qź°3췇-\b`a;{]Xg\nN.]M&j2B35I}L(-fk#JJ3n^ߩh^(!^ɠղhJ̽cFɖQ'[wԚpΆf5P6MO=vt>ullFw{gC摔+|Zo5`:yA8F&T4ѦS*}\_N-~`1&xTR$K.tHNMe52#K$LwQO,PNzaZCeXq+RF/af#fR­OkFIMWh1M4>)zArěFuoEAcgoOIa>{j'3>&reh"L# /kMF!wѷFH;'`,~ XG+l(õmUjF#Utl'״?R0QuO0['IqŎ a#]DUn_ =y_Y@/Bu~\|r./$w'۩i2| 9'E@"(sdŀ#* l-2p6#Y5}EXRźmv1F/R߀:xmϤ%狓q$/,9Ɔ/mȡ2xˢ^7{X_%kL=F94SEJ/Nڹʞ*ƕihZրR+Gd4ch%.tyr̸~(Pl;fQ:׳cwjnMM^nюo\b:9A,ﯾvݑ$1Oϧ9nz=~#0E,}{fBRB^>뢔Gcd4] b^/! M(%b*b<rGe^tKTdRaLxfH/t y'G O\Od)զ%FyEu#RMRo% &^ QyҰ'OZHFG`>8~)$S۱%2[d {qO̼˱*z}SXDZ G5r)/ZAfoP5KnF:NT%CujTL嘰*V7R-įwτtgn9W' 01!5q%el|m0lޜܓ_10í$ /[?]2"ARRCYb[\ÚE}ߜlN2./ GnGYs{j!q&jfgAN=ఋ 8+kȞѯ8]~ 'eV?8ssʽ_5. ,C83iyRv#AUKt4kg/at$4kYẐG1T5P#Z5 +cc. N*χi!}[Ի^|^d} u15UYp?bhx<ڭP~=@wuLM7f'P_#.Yj;ȔBwa=K^H/SXkacF c"wtJʰ$\^/dERIzS 8G@ )Hf_x6K\P%b*m' db᝭=N%ơ8#nd^8EɶnՋJ>4 طwU3xgZ eYVLT||EgXcEyf套gk.2\ljZCeI NMC[)ZBzt鱉k9fK{~K">a;1 T &8QYI#D}dd3mW@[1u/i'"Iln"AiU<+.&zRPQƗg==Cc/ϴ4ݏdqrӈ:AvqGRt.><᭡-k*OGZbNrbᵬiX1([XևzحACTdtQ4 "F o[?z\H%7rL|)Oi>JJaMݎ /z͟p 2e¯&*TfTl+L,o.J RC0N"ݎvЇ=VoX4򍿤BωDi(~$)U·k9ym xL JeL11Yѝ:bme_Q ,1fd`-  ZX ֺ_eaqnWI޼czFxF2~[o%.jGf{?WJ50f6ra4`ڛo Uԟ"Si3/)u>cц"oEMӜ/[7xsM(F PO2Hx ylvcآ[D _EH~r8 ?lm DI/M(<ΙtAG׼Er4ޅJW7ucYoyM5&:Ru e?}\I, S7 BNbAgjfѭtF%{а%=ĞkR. zH%.)q=e휫\)l+|:xަ57`!qi"#frimbgQ3IH}PϹ+.8g3{D]y τ L䁺K N7CoD%XAXSC-HpUo~V3l]U_QƂ tie O㡫жā7p/jkyo31Yᛇ&/J*j %`N313WbQA-rlWhb/کpwCWK;]F@&4["gKVZqzA8]?",x4sZQ٪@ikpUxLSc`E(ZvĒ*;Ģⴜ<8!pHqͤlPoh"R%\x d#~t U( ɳLz;{ˠk$6X2c} b"ucb2-Y"ȴDGW*3t1T1 oa5%15` Tiߏ *H#QMGBW3DQ 6-!cvZm{weVՠ^BD 8֯)3t/iOL">掆c&7xTI99Wnh96u]ڹ|1u?dmZLQHy*e/]!L]KgYF>W6l!NXT|"?h>"5 mEƵ2NSg`OR򪯙N"RgG.t/;Il`TQ }nA"4*]9`ٚ(Ed;^0(4wï-+:Jװrnb7#K:.'Ё &50'/Ca5)$8(2|d>h#rN:HN譔8ȩaSY]gC%@4ƀ!c[}TzHt^5J^iYeW_S o:{.-ټe"\Ğ-)p0EA"W\)fjf(?vƖh,.Zt0DCG0/j%uلy&Ex{%CahQL -A"!ͧ3K>޲.?× vGy`Rݹ+Y5O٤q-ҕN 3x\W"Ьwo̰-].p 8E[(!'Zz k/H!Tȓp%dG ޵2߳>A[>އHd#k<"k}?̸ %wG(UϪ2Xg f~(1ӔX& lpaPj)?(Drbd< Ջ'KDK g{CaWpIĿoy֊-\Hb(ّαsTV&DKH[g:qGG{ՙzéBxGC.^tu"*9G RQH]%w س3akdt7B: 3kW軍k:Pm⅐'=I]Ѩ|^@[XƥW LAB3؛<}4 s𘌋$Y냚{D_&Ҁ@&K@請 Ewb/g <`LsE !dڃcج9J9XvO2'QNL >z)THY P.5}OK\fjNFxj t`U |j!`tEzcd;hPg'~ӧX*t${k& Lv 9}aVvc 3L:3QQީH|}˓` sBVk[omOt+TLq`&9V Z!*ߡe-PEݽ Fmxah_ l!cп:ҽ;:hT!"Xf$LM6B \O+Jۍ|=$u[ XI$N/]|?\#l|Ggϯ%ET@zB;M ߨ"a'zXhS?\fYǦujb[āPĿ@( m8wg M)nDuypj'4P} &%s_W{\ʦaoH: "Ċ1pP=@kV?Q2X<,$H HΑF&kc)^H,|Ae1_[>!0 7  41}[k~XP#xӮGrpM&盇?F wxPnj(׫y]K37\AE?%9\ʡU`Ӱ((># ohH7Ƒ]q֧165AbاoAJ~|TI2>k!(>12Tr-:2LڐӧDE|52Sa.D%rKSB\^k Z ]yE46*0KV!5F&s#K>TiXZ]k W#k޴lgx:Q)쑱SN+0uH/Mc.x;EЗ;])6KKJOh|( )\6cff7SGh'&=}-OWpTe0C3 p`0gZҩMtĉ$sR:/ܻ4;~Y |,Tk :LLҪ7eT\':r c|Z֞rqd$89 I+ui,X&k6T~o)(iuplAg ݩ |TRܕIR? b #ʇ U5*\kF HÿoUgE@4JǕ1,g5;oJx8{(G5ȜOM9wdtʿ9t5^U^91d {1oQ] Pvp8HWcx{%q{Qɘd"4`ER& a/cC/x7m}vXxz;hN?X^8L^/&΁VE)ֵMA0Qz"^ Ȉ7SE>YECf[Ր s-*O\B@F﯈9 \+F,%g >^O"-@CgƐleAPr -B^RW ed-@M+ieg>H @ZGW~H{` R ݊&-O -3)N+pzi#'ϛd*^t@ti媳4qtnd=r`VMJJqq,^ Ps?zF!z;i:MnGLQgEL@l|$AI-zԿڜL:.nnbʳ rWjx݁؞ۂ{YZj%w%u+(z)E|ds7TiG-?\#ܳ<IGdan_ c{D#z5u*}.^nѐ@3QRQA?''< N8ag=c;\0fJx4N>ٺvUhLCr>ÅXyz_0 SPo2V;гI `U ^~i} ?fB=+լf 4 *WьWꓕq陧oi=C:9g&w.fߞ k*4$˯r#e-CKKI61  ?%Vya8YΫVX4Rf?tBxA`[eĐj^ FuiqVF"P9([2Pq/;֡pcǎ`NֶX-JY#$z!A}D9޶uȽrgrAji(1}8@tVC! V c^i7'y^\RKY8g@><`鬣X\12,x>w?)D_73cMjM賌n^l+ɶWDM/̳UC 4FhuN}I#QNiL:! q| K9̠w~|X&ڱ1F([-N;ᑞ㤥(j ^75%!y:)r-,Lj4TӺ1xgvHͦ˙s'?[XKAKômEvV;=2$^Cwy FãڱL ˱%[ 80(>n}lkSoS4L_(FD7y(r!23$,30Fy>G+lHuX-ON>jy ӨlD5NvҀYe8F^Z_FTnFP#?q̫oj{BXW1c%&|vp6^c> Ж]:e洽 IYX"ƅ̫ G4a@lhL ڲVf1*jhc'Ѽ!`ݡlT\eU,h]#{rTSNԦ9pjc@^O Oޱ ʟ e3_!%`&/+~wNN0g!iMq҅)2 m13GMj0v ?=nBV0n0Z qiQsy |O&Ex2,F-C;]!^[ `0Yc1$ 7Kz7F' Znf.!:Ȫ?)@+rUcj옩zVg`aJ.\fIڽ,͛4.6e3@٫.ח 1La[p3щfׁJsgoǺWaS A}J4OkQ|KRVM  rzP鬗H`!t);:萔=mzO*w^ěa)wXV7r5_KϲQ2r.a.hРG5d/BgktAČ4 r#:]M&.h p"W1Gt9x~M.kBR|Bn`5Ǣw|4H|^Ph4y\hEmuGY*O<ʨşP1&YEehi)'X`&o-E=oM? \G#=|^.qT%0зZԬ4{#K鉴lf aak'S)W{qN%w]%0ܠ( \,FX`ŗ׼o!y9ٖ;ddxh}NzZ3aLZE=~4ZX/٫a\s#BA:T`>NhzỲ@+=Qz G!, SFt0:0@o He#' [nZ2]d`j{aI|6s[]F n4B'>QyK.445 kTbJOqGBm@QZG3Wj S@a: ͘7"ۇ Ǒ\BZl|,p#*n"8ihʢrgph\N£`u x.(3n&UnSpΗ4`zUb;CUjxfVY3ÇW)yLQ\y6Z5ѭ|D<XvM'GbUg'";~QO"8Fp"w#==yg,͕^dWo5,`0 )#&$ޮI^QM!az =.؆C _z0os0pH]gO))p<|Nam7{e@9̹r3u32 EE:;,sV1 X&6vddeAk#X+L^_ v[;6i\IE*YW˾-֟} gr"XL6uV7cZq?N#CuFA9;wβvo6Cw܏?x\K3NO n`d7?T}Nf&gE'5sF.R,r ,k Ⱥ)/3$)9\$&wV\qT(U30'!-rm޹B xHa:XO\"S\IlR8 CizQ# 6J bfS?wߵwh!LZd.ȹ}gdO6Le$b<@ZrtdIݛ V7֏\[d#ḨK!vFUFD̃n9RJLYWSOx V27B {X0[E#o4)2#cO KW=tA"D+pf4ыiO2zgS^f^*1m)h]DB񫪛[Z-xn*648>4ƞCŤs6 [)-xnO䛹Vx,[f9bBc P;J qCKo&5/t-.{8Gt_$ƗnGϣ֥|[Y&L`*!?.Eh/V_ձWIcypTt :uH{ ?w^p3!cH'-t']Ns#6c+ ^\}m>c3RO}17&3򊢦˫WՔ}k!BՖV&j)?zLQm[I+ 9 !d~[Uⴺ6 1kL}c9@!J0e9My4Q~ kF~\duS4 ,^u}S kZ>??7{jֺJJRtLB8{p]<\llA0QO,jƊ_ر8)os&b `* )xA .mQPp.rV3Q/=׽>I ez!rB59&~Zn8x sыnwbi}B_\T T񯁜xݟp 5AVyW.qju@SY9P}\r3F,Ш?hI+H2sv-Z. bj-"fhV-0zGR$ 7#8RMgV_혾L'ʧ* ńV;Kp-Br]%$,7u; )g1hx_Q> q$`6&ѬҦևdUZnMӰ(L7'[)yYG,*ْ 'Q6m:^>uw4c@L]53:p]'RtHG85'zUUh&Q}tx\(tp+ݼ@_ -~5̽c,$!Z#ꅎYbN G&)!lwHv(h&}E뿞  iz킱CƥBEnFi_BU¶&I-KW%W_6ܔo~Jt0JB kkWO sAam12 0Ԋ"1%gxMal;z4$lw=_3+AsNi6$fjlϏzy#0`3$nUD~ׁG7,&)9GDI>Lԟpӄ5 wG4y7plGxW':n/5e{`:[7iL:HshMDdQ~ZD 5L$:6%咳Tro0{.M9/1ms;m )]&`]u a 62|!,CxZc!B[U3W\kSoGүu9y&t|"cOy|162rf=Qxʔ"]%_#+,KAZDсf߰yUnm;!JIօ†R*kFFV`ώ)K̦éinG;ūNTDOlITnmWeܯEQXX00Z@'wligy&n:FY3k4ߊxBi3X%cg-?&%kv+A2׌ys|yq+zS"h.K"@EޑDK 8FemPwH_ރF28-Cfl>Cu0#@D-WOEP1SUuٚ"#=5F1~ֈNj^;PET@GU7TwmbzBxكƎ!@%ų RZN&HS=*QB!#'oYm 5yKۑ/0@C\pxuy1.8&PSXpo,{YSGR.|߳>HvĵӂD WT8sQŪ &ɅPR SQwMlߜsuԭ_f U܉D{TFۣo<4WCzG҅:gYvfs'>9;X-}dyG.~S'+*9ǝcra#zpw 9.u$4|m9!NMiHӮ҉b2)mG)3>kmmwpb3挆ڸ7@\TA ciZ:!Pof*=.^@m7^+9הۢi$ T "MXK[2Auu^ԉ&Guk^=I/ I$􂠺1wn YYuA+w^ѕ PE%3U( ٴ)Tf!!`OnibV`epCtKovܷԓ(M sйc)|!%mh3`WʿJ,q>3-tfЃO9_Hf} wjgJ v@Y7H˚7z a^NH!ߔq\}vDW| !PN"/:!٥02(KXF30yruRѴD`4f"Jp0k)Y/ot0tL4@64!.@Vt䇴Y'V~+#~Xc 0mwp_ݦº?y-;ZGc` !3K zW2%0f؊ł{lqHH祈YaȎLx7@ra(C:nHx9Abo]n QSXhB=t2۵?Mrn)T c}i}"H͂4nmd %]Ju*"}K2Mڝ ՂC_ȍ\ۧ?ƽV&o&SO.'7#`2\VVJTa?4ޥ8k\5\ttww݀z.5 @,teqk"`ː$'kYi* ֠I{M-W'^j|el9^6W kؽ{xADW0w^ƐI '[>1?]zP To|aPz':.Bl u۠Eoڄwn|geg5v#$W'y<+y-xa‘%`rbm ($@;Q?@bGײN,v%b"{I53\Du!:@}̬ĭ5Sqܘ>ۄdV^n^'W;D: ;TRik_)O~N oyޫTT2hUZ_TJ>v{jkJ %Y5;C-:U=!t(^q8V$-w39'qxW 8JF'>,`Tq|dErIo8# QlX{λGrb֙6cmDi[5#ed3~?#nδ&4-14 ڮ%'6_:\{H͜d6WmF)Y">^<1N;+Ϡ"x4ϲс %2Kgnx& $ n #ObR|r][f(,8U{TO z}e\B盜}`[ ;֋mt{KNm2DW{&<>)E%[M1l(NG3#Pi*+_&9S$xfo]R>XjcQl2gH6-7y~{L&﫾G;.ׯF_h\doul&֊ˢ'O1yEWOcËOՒ:zmIF_L,7Ԇ^n8 l/Tߡe[%LƀXˀ|(@.|3B;< #@3cC~u NgYɄ4ڋ8tԬ:=uE90PjF|$2׎ ot &fޖGl4 ٷ`>$:{ٮCd;!Bx"3k/[1.PXuHI pS(˅ɑ6ַ//U .i^3/zI!J} \7ܾ-[X#eK01c5 *7t;uQ(qnjc;Vߓ[{@oLU.G7 ĀK+` QZTfV=2.7{^QG #Ś5fKY%mW󾁄67V(ԍH=PQE۵-ȨÓwznT|mNrŸMvG-H7j#C>-Fߞ4 poxԪn:\Q|lGȺB7йY#- ըCk_QF};&gQ bS}+&kn]Ka}Ot>lj醗l%YmC1_~xGEhSBףԷbm,7P5E1@%|ѧ&eW:ӿui!u^u`ѶP@)su}k{ZN%w?75Cms){|ysnҁ1kQr(u8tNQmaXԤTet(SM>?mE1rt^XUE"i-© &_Np6-ЮnfvHqu'l1xG3xM4 ^g'U+x*%Gl`cZh#=-L蝫I6¹vi "v4&*bor"oTgCY94U; /Qwl8>0EA}u)#;sXc#QguJ 򻳢b JS0\@H`q>#Y:\Y XGqUNjXtJru9F4ex!Aвvs˻<'z';8]߷Y,.݋ƁmJt 5L*You6FD0"658'uF+|xk $f~Jsf%ޜ 4rL֙2bgֲTZ˥:⌦aز fȵK4eɑn;+w}J2nfL̍I|[[vp;!PxZ,LX*%N'"k2@jc_F ps pΘUܹzh8,sq='uęmD}f>zmX(gjwh..VUJ- Jn \Ʒ$ ~P]Ƕa98_,%c?UT7*wYp_\-HE:*xaV^OSd$$E!O*]]IΫDy%R6z7R;onQƀH,s6OQl(B&f9,:<ԖҒ>;;O72cksI_=Bi ƶchorduHYΈUJuM~AYgKR|9E-, K$48^DEoܑ0e?[&up1$T̾0 >*^}y4̀= MƫIG|k^4M(H)_'zX˻yaڻ)]mZM<51'f 2 %iޘ=;C1gR.n〚9dަ%w۝! [vDUV]W &R$exˉh$!{֟x.mR7#[DüA#]]XtXKz:zP*ܮiY-hcں]peFj/xDG5󟱂X@ U}\$N2M7\r0?9*Kfw.oDXroLM<Z,aIEUDL4qI-/,*d p:Z* Jn^$*[sMRv275SZ 덒p\A/`B2ϒiӷ|DEuypYg[[ !0j5/߉^LqoHl6h(#vkgH]|X}Py(ָi5mv( uv W;(ng젒_mgWzU3`Y0\;7:TnH&Ï AZNO!z ֠ӊϽW l=2MK*5AɁ; 5E`χjS9Ru_F@ҫs 9yGJ:w14ә*E{8ڴR#MVKHtrC8/DB v pt Xs%l]"|1N.:"AiHX9C\έ\wZͳaBvIL0 Pꩰ\6$ InU~WBN0+mZp$bo7-n3[YָT#4 rtvϜene3ɶ^knCup(1/)`JpJJ"dpCuLh TG/jml(tKܤxFoצ>cj/ 'hX\1mwӴj2flDM)L-cjhxyvq,q¼\\'Rژfɬhkx;rDҠ&=Ώ٤+k];w؈"rN䇇aNM*Yq| 0+~ЂD$BC%(KKi"w=?IeUYwR ⵤWFIԤqGt+]*f~lup}=rNM״^H԰ͭsϱ uLV'^ɃoDiݵ@. DRT9ı ~=V0֠gICU[8>qj8=oxX"=\\x5fBN#Fr2t{=`_*WwZƖpxu7n(M-(nHFHgI̓ 3bz@w_w zTyI}Y#ʿS >tDcҳ/(=UU?o$+jPcfK;~ћgWDLItoۅ,m'_I SCƤ tyHLNjc ]cqȚEӃ72EšaA.u[^mU Fs~ JjUwn:}\d"oߟ )6.tnHilb;F Xˍb=#|,tF}$ugV#Ue͍.78 r& Xtee$`*dĭf:yQ0Ađr23e^I3kd*erVWg<֢@gVͧՂK iǘtfJPY"Est6qWpC+-?⵳e`L]'ڃf.a. lLF^+PWDbŠs(5'O_tB AoiN X#v(6W,{h-TMml˦GX @E^, E4Au\@\.۳̺<~_w|7 3ȐgRXz¬m2κR2vIt{ 7`fƏ/QJ)DzC՛@t)Gd/!Cɘ AIX=CU=6Q Zh)i\B6H\: :' Kұe ܅4u̓j2gy?*ɿ( o,#+PZ",i%CK.؂ptx4l7r7X3䠒Tn\ڸ1LJb3 'ްgixG8eT?2QfsΔ|ỏwuE6DQT.4> $ J ձHpsFS#$l{.mMٚY;J7?JÛu:ĩ Lc,h5( ԅ9z %ÿ6RP00F2hWd刣Ҋ]fŹsCN=Q NZpTE09:"AJY3dwo͢F@-:3?AHRݔL0:(l;(B.Lb+WUdGbt PCUvg.8q~/S.$9K{d7_Z)M ;RPv`9 .75@1U=(= `m(]Y'fBz@T  4 -]!@-٫X*~C팤hYey lnoK4|w%Mռ/u1!^+K &W*M_)7=Aw++tp =i PJǝ3]B:Mkࣔn[b(VK@31p2>ʏN@Ǽ},ڄ|p~l^DCyjP1C@40Eh4׍ zA l6٬KՈg6lSV+@:GNj [h 5,ܥ B,.Y5NQ!/:hp|f5X"mE=Dg5o_cG˼`t6SYFǺ(IO61=J7[Y$7d8HpT==N᪑+J6lnb~΢@ZzV: }Ml)- p vȨ87DY@FXfU)[1O[95oم .$ťVVI,(-L&7Dي|5E5] bnHfc6m`kxz{%s92 伪&$5gG4`i#08ZCe{qHLO&]FU}F;%뒡&ߝU." 7[F vؠxM}:rÉ5,>- |Se ^qvff+ m0%7f_“ ż,zE0jQ/Z#ƒm}D$Z^/V+8Z(CG} OrUïe)|(5,8T[q9pդXD'LX{%Tvp.]׭&bE@??M8̓&QLzܨJ{% ,:ּ`?NƁH(_<(c rHbZ|#G|}dK8~ Tf@>0k ,x>E2D 4kޝH:߷&}ss޹ %rzQE<+ke?R*brC^OwϜ.]k}}# +Jدgg#ג:5a}%L42K Gn,k[وcx\-1Pt0]XnґADrߢ; nGŭ\tv3Z XK dSxD= ]04Yyy5c)6VNA +:YFK8Ս#({FJ+8fѢZʴ#ҍbxt0M!oQn)989nj FŒoe3Apdy舢!Kcwz6{@t>`te@ArU5U5>aa/ V,1:QomUu`_*بѓ"A0ۃ(y$Ki*SPH$NXf!/}j&3-gAhaUUG'L6vD3՛\*u1D'QXfcEGUǍiDTt>^=[^/Kǻ Em+p0W3%v$Ð>gF0bkڰkNZ[2e"AK1_㡏CKCE@kk0I&;Fgwg^G1NǶz j8lʯQFyA utdxvicEP%S4 {,(I+r y< ͇ꛡÞ:uUs*8 jQt>:VٺIJ+|y.5ljڏ1ʆ z6nxJKG <ΫS[vW70r"$/:QZG 1m҅m.=@QAۯ*& 1J7nza1AIJ5Eѓ e5I^4E$꺻G0UB,mxz޺SZn5]4WQ\awg0*bF2F)˻)x枵9&'*OsspζVkG/{g8宍ṱck~sO{h=0en6ObqݻLZ5<+:-8NqgS PVrUY`gU|hڤ OͶ_DËh/p. *3'Ǎ-9o2{)S6-wgG ـUHq jٍ C"1U2+ J'@Č8P^9Vi7v}q $o;e"7"S8XND&Y# 99$DqO@幱>o|ucR}ͼ|kLY[pgM}JVƔX2Obԫ"j#F9*VKm!#/؁F'e9k6zUU3\P ?CO{: ٝF&RY뫷ۗDEwd,^0rx[D'ھMY􎴆-2鰈Z\֣/^{كx_ss"j 6_% GNK3gq|yNW~ pO *r,y.L}R*ZzG1ԖB ҽ{"y~Hrxlm (VMS`m=.߶W"n4΃S%yTÀ 2b @Lλ1mE^L^S"n|L1VSK`C5`?5"X58@k9Z>·Mۆqvv&2FY*j pf|d1&昰^8(316T-:6궥jjӛY"Ց+Md0 !ߠ~O)m2M)$XwXܛDX)22Nc~L[3$z1p,:QCnD#uyZKx 9@hl틊^ QIs<тR~Ю(p]$nG ׍RbpgѾ=/fMv(;3Bf1,'9ª\\'t: m."OVFZ&6{7qd5l+` uNYQc'aJ䞆;;M,]6aaF}&1ʓC”$Wm)&) O,ƀ+ܽ.HBx`I ɭ|ekҬ.i YOhjX;GIsuTs7wmṗSTހx=Nؐ/-lBD,L͗Eh3OXp4o siĤxɄ0W)Gn$MB~\ԎDh'kY#g^_Y||h==_iRݥy7+vkJs̪b_@;\B=hci^t_ǧf<3u{0$'H;nBr+b\mE9识繀vE0<Ы pְR =+``JѯeJA5&nn"z Eʵ~IeD<;D/s`0rm[Ən3f>5b2~yhSxh{؇Wñz~$V(ve+b˖f ەRG3s1*!_:5+8TMGܡE,Uل~'m$t= ?jނeBBK,ntK֮i@(ۣuRl+'z"mLaػ.F|cc!Ke E,p,f- zʨ59X}Y +1Ut969M246lmD KW2~ή!|dK 1GQ?E2=l>Dʑ)Z7L<pV槀6g! S͕QUQiE ̝Hy|e>IC>뻊aԶF^Ih OoET+ve)vވ]XO!f?;K3'ҿ[jMѽ~E{/CeX"UvEyھׁ!/!{7.*dՃR<9 u[7mX(4[ie.!ꕀ1AZ64 zM~x.z_ZpXI xarJqu,f`^_nX JBʯr9_`1W% `N=+js*[bA+Dgi$}WBggOjU k*mOEu8@=ҶeLB]ƭgX]ghr qQc#d)l+ss\e`q+Pa?R~Tn USZÚZ:3֩טnbcޢo⬄a6 H&jZɊQ v{a>%vŠ9l7ף/^Li*|tf} n";>W$͵ Пc 9I)i۰ G#m\-4N >96YwC7L(ϋC!kkyyT|+ȉjVSnnoH8:2Bӝɭh<% $)n'IMsi]nl,@E͍ ]yޫ ޸yҩP$@K/O=Z:a$q[7@YZU?!^&Ym+|;9rn+,q, 60L=B-"m Ma)a'Қ1A˼Y}O SbTqVKH^څQ4}3\x H&kJi={xcH 9tnNđ94ig'44K}&?S3W ?<}|s:1C3a2#]$L#>V_?'ۇBkF(;bMR@ܜb/t,b^%Eb}Z|J("y|;֎gr(QLTc7@{=ɑ׷ER{]}wRЕ^|*,)Bcb6&[g׬hv<,pbSNY`wN~?"gNmfо357M$ȡeWV XON0\(z `˼w9XQ$>5 7]\΍\x̜dOlO$%EF'SEɵ"vSjS$0"of9xD!*^̟d[tuf4BV|in+0hQ"YgO(?co< ZDp,8Zr{63 $dD̮!ڟa !/YhBz%x4BR>5xArxɩ*2,kϪMoKo JH`_]od+Id 6̥mH lc%= vs\ 6!q;z+|( ͼGg2b%uT4@zYVKyoC ѻQ/p$d`9E5{X1b Cycvyȣo*P;P?:yɌr6`.rC! ' rG uGhHV *&_Qp$T6PE![ zmhēhq8qLwp/п b"$14֫R لOi[HPRǕpTZ:]ba9c_wiH|=KDfHQ>5$/Y7:NJ-!$!Ts {CvYK`;[k%&BHX=ZsHryq(Kq"?&f5;}q?*A(I(zK}}y")u;ztk(6¿8_<&}QqԲlQAtc7nJbf֑T.G7'fuF,!f{Zze\i\G۽u-mcU.7 Xy=eƲ<GXaY;7.lIӐ :4n*#SBCDAɐT\ m|F UtGWzA'eMɱe_cƹWcV(z,̥zR4.CP ,+AJ(] Uh HIՅzPO}5HXF4"]:rz}+>yZa^}j&Y[Zw:= qP \tO)EO`h 걂w1q!g>'G?W^~i)$_U3Fx6`= fXjwQKJg4lڭ͝& ZyVY>w'3]ښb1w'q$n(݋ߏҺ`,uIJ YU= D{|tcB?5B ɔhLdV&WͿ&br2VCJ&%:ޢĐ9zwAvLVh 6H~ fw\U}``0@ymԓyp4zogzz#"nxU*Əƚ Q, C<46#r/֗uBE^AQa 5@Zs}V8#mD>TcxҸ6l~}ҀU\ݚ!)%m0tp dX;pȫcZcK:ZR$Z߭ Na^2d|?^Dg, 4rwܣ)# :ʘ5EZY+J )B u`S(ë*jR#x׻E% dm&*|uFIXU FOG[l jae!tWoE>E>a?w;UQ+ͻc"{)6L \j_o?]R&#4gJ~h5]Yh>kK } Zqۤ:w{;,v5t}xzÄi<.Hp8 xKֳ\Pj!R; D%Bt 9Չl I.z^a@JD}krG+up.¤ Z=JpxwKǿ_͋X@@*IhqA@bgqᬁ<}U-\78ggsAŒ49Q&8| #cHmK?i'zԿ;Czż27F%%70ݒ7w{!u>5y e;b3 [@g# V⣡W#Qh,N%O;q'j!>`=矏曺JLU.Y#xϓjVd+h,N2'phj_Պ-,%ڸH $mr~uEΑF3$Q\:: dL4: h+I /€acPzS]U=xM0^ &:$N}'+KIXyǮ2|i3 vsziique@G'(md.˼h1Wm7Us 31_Esg`bX! A R}[Ms fc_Jo@>lɫd nu)$ OsWa偐&Y˾|z Sy_.?ݐRWClV˸Zmq154ݟmijJFkr{ɰ?QusSKd 53{oQE>숈fXb勍P>]s1ȇsE-$3MSs)*Ktd2ye &ims &94^Dc"Aeپ$nrVFMfTڜ=ȼ23?3A?ݬ+0t'Dyv'շOxy{DrLX1EMWsTǼ٦R8wQ^ B_@tj+[{ O|- c,U~ }H$n. lȏm8Ӯ2_#b,|I~CMHo2-Sײ?gS?j32(EqjusDEBMA8Fb{K)`I *U=wBDh8Yo"Y`y*6DùO0趘/}.*Ϯ( ia]x@ʉDDJVȢ4ZÕd9%4$WaYBЧ{:zXˀXͬm?sd%H'An,jo?,Y,]4+y(VTl^FN $c8H.J[D*+[P6ޘ2cqy¢+9 8Db(LZ޷]P +7vT!T)U QfD&^3sJ u9@Lם[$ 5IC((h^P<-'Qf\wg\hbz`qn)D-6ǞS(4\cL~Jhp>t1΂BN*cH~fu~P9S?\GҒ.#jOY 37K뒌I%Lѧ*RO]sq@h9Gyz,$kU~-<-!AzS}}ݤơ{8OBA b3x"83P)Hi\{9AJ8('$C:%b#.g"탸 b'Zç"kJu.R\ظX}O]Habуv\S#'lN%5r!Bu@@Um1_!=fvZVc ]*\w1^e.*zKdn'L✄An f? 0|zjx뉛YP((5(j[րʓ$S狀j UwB؄ *@wUZexl7D$QRrg&Hڪ4Ki:0 QZU!^~K9;kNtYC6ѕQŎǂyRee大o`XZSޓZLMk0~N"N( ]W<՛m 8F i~'_ evbcqzRڷq3?fƺ)ĄXF.}O0:#9ϑ. ? BrHJOh8ɛ*19wJC/Kjoz <  {5vGk83&O7N12jC)0-0j1ʕLx<[.pG[ҜPjm+?h8QyWǖSْa.A ֜#44^{fWq,{N꘻% FV~ףEQ'@n觩7;-ooIZ<ׅLUٛ?Q8Sw:߆I@VfytÞhiI(g1Pnp|ƍŪъ*0]А1'բ<:z>ļ liҵJJz_IkSN0G#w"=&/QsE`Ua!y).NA }qNdBnlDTN8iOW(Mê~_}ُz,ԅL9T9T)>?ļe:2)S?q .qTveI >yw@ TNIHQZ|-15z(J|Z݌Fl[ϭ۽s}{֍MRf:;$8N#/ s5'C-KvьϜCT=FqhV)ƉOVaq`)֡`RWIWCN>y })N<+5'$!_43Ln~7Gq7ߑ6-IGFCgG&bgwd>@ }ᘴ噂)qjpYPHkĤT=kI*y334 JчWY,Ǜ`G .S@}qG% TJ2?p,..+& ?S}3R~zk7?Ɖ@I]&t0AP%)FH/0KYQ R>p20Q4](E9??|"+x*[W9͓<[='SۉrͤLL 4k {i׎gdZ>%[!?߮DBNzCa2N*\zKTޔx.B\L?I,d+@` PMr|0Y7FmU $BMXSR1љ;2h)@Ԣ{Y)S1$Q%0!\iGkrT߃$QKnܨ<\19R:50Vu<.v}?D7Tt4LTk1m:>!E짡,3U\`*,h_ǩD~Lk&䖴l <nU|cq^ .[KRgy儜Q40]YD[8=ܲ6Bw !d#~R^DL= `笥6K`4qTW p}T (e88!+2pQs[r  :CL?Nd-'Gm`+*Qr%hLQ[^;!y+ElnjLxX1klЫĊ. 0MFc7BC|8\YSǙ'1*-_hH(Rd*Ey6"_dޑb^n'4D723()iMY97#x|M'73xtA=^7*&[&LiO4y:2a &nA-VO"nhTF ~j`+ sb 96kOe[`;uD`2S3!dhݏ$/3!刺yq&9֔Q[(@d\ee vۼKsv[j;+ 6<3L+/|ۥoE@ G[{}bi>Uk>7hê=]#McXoyteI[FAַySYXϓC_Cx>zVrip?/j-g]@2,9a`0Kw~hByEot'ǓۦrV٘>uW8`o>[/Ҫb(b܉%𯙊uo^l Lωv*<,ܲR"2$Ep4cIG%Ҥ?QbRae{_rbCe(|3uU[kxU"M d=-CN)|2,zG{[83TCjc9[O |yX*8/sN:m:;+ ntGϺ ՞JwܡR8]Z x}?ﵔE,E? "+-hx  9-1>BUwaB&UHž҉E"0˛!dHqidHn ة}`]Pb&>rF-qmL@υkm& G,)qK_ Pq֝3<4q&d Gn*8+Ik`2kZЩjE'`בkdF%z`^Z؎\DždT#C% }7B+D[aRNLT%ֽI9 oèIlan`h>G~VL+R ů]]An ތWv#UM~|"*_HʆhN"xQ>P.AJw`pwŊ$gmSP<1Ҧ3+6 Ӆ4ӈ0 O)5ҡJqM_%g:KL ;{0)NPaҵ ęs\,Ay07W?Zd4^tT|ZZ)՝b0Ꝫɠ~l!Ϻr([th؝7^rԺnnJWL]tV/-[j2'E饮awhR {PZ~.Jq l[W"\;+cRİvKEe:bxnZWCUm9]Zۣ-RHie^ lO;/*mcBuj8em37IZ`58,o?~B8*Ϡl*(|sZsܴ||$_Z%nbiPJ &"@3>Rw~5V,z]^ԭTx4㏧5aZ7OCʄ`;My?4.Adi޳Z2OE_emwLȫT0<8d^~ ,](+p7X(8 IRB&[8&p5ml?%j\|0 2M2IU1leպN0jEhrNhN Biu9h^6Up`ĘHV ͏D!)}P7 ,9QJq;9d̴ ؃{N,ڭž=qȠmu T(6f Y^G,{NYf^st!y…[ )E=sN[ 1:Lq9N4/BT k_.`LSP8nke`XeUFsSD(IoS~ Y$cD _}lep/}&]zY~K XRb8.B (hBTv[bEd+IM3,BLMZ+fFϽP$vZŠ~_\ 䩲xy3Nr!4"dlocH΅~?ZL*zi gKjn}H?6(m(]|.@g[ZcQ''/x`^6J,RЅ5|5436@ם QxX%ϋ7ڿ{\IV2'вʒIy$I{yEIa_F+ ,O,匚R `ׯ4\8mB,?@4FF]ܗlO~>ǿaf¤v[ᛈߖUOܗ6X5N߮ߡSxalzc$UY70N^ 1=2!5cA5hV:6/S [ ˜fb(v O9(޾P0yXbH Foӧ=%9vԸ'5)b*5񬊿蘘O%׵d hяTRS w鎥[aK"#k!6!A6>TҖ5y3Qd:LllX) ů.rr?4g}ۢX\Fyp?ӂ ̣A:gx,fׅXN&Ōs0j5v*ӅV>D*Ng09"#Q~S8(>`qHQΚ9TnvVryQ*fKoyDڮ,=Y2dO ~ < ?I*,(~S#+,3O/%1/vĐQ.тxo(öqr5ok eS(ǹg[S7h lt{P[p+0у)-r]U.t=бĎ -4t3R_q¥R(` %rXntʦ` D@sߟo!DHUokV週s-G*vaI@hSӷL2x8ҵDn26h5TJüFg5eǶǮ.it51ؚg!%VGP3t#S_s+H"67$*v5qD2X.7,^DE"dhؗIlz < }VbTMMw"9sߖEKŬCuI x:?xqrfLͫ 'ԒY :NBc_ ?pb|ט}& 76S#Mg6)Hg"O} %X3yY,8T)`ږ:Lo7gibú7U L0ЉF2D'cŖ-WV>uKs^ iBր:|(uh 2+$V&@T2eQ_qakC\q;dq#nwJ "x~˞*vN_ieeq/F]Gz3>,}-:ˉ4T40f]@ %vExreםd QL;r؍Gΰ #޹'\ۥ8{`  7>_TNw'\A}ғ(M{gxVЂ`sx <£&FB:#tR.T?[Sݛڑ~A PzK*>'q^t(Л',r!fCs:zP)ؾP>8Fga2PUDS8rZ\h:@c-fΤ7HP*u @e\HjV"jsOc*(B?%x7ӵ0G%{B ӠsZ9L,Y]8SiYG#zRJpzT YޡX0&˒LZۀaOT^ 5๎T'n6#'ݰ$.W7ZTL*ʵ)<7GzJ)Œ$q׶"` Ǧ;`/D΁_#-K߱R+$" ٮ )Pi]\|Ro - UA}.#ؚ ^ӯwS! Ǹ1`3T3`t-+̦1u8šMXҶ `脴-KmΦ}νtPw[ސqN^tJtGD;Va>EU ύa Gu!lJA-#t5<^Qf*^VJDک Œ&QʗF?YcdKt)jHs'*< X!J˖ '#-`zNjZnuj:s=7GY3έ)SN ?L,*.1HGx $̡.UԀf_e,6i bZ% -"+we1&#{A^E:z }s7ǴT$BoրW C p$2A ڞ=PLC0!r/VJ F?̇PzzRleZqܱ 􃧪\lzCk_hfȭ <8]7go{+@k0,ahr(+'{}K,z .$MoqOoJK8,~| Eka!o>4,UI9Եv6 rzȲ'VaPJ "190~z3TA 0 <?i2Qb$q2tC P#1AcyD!blc%y 7ky4~zs]j { av%:E# 4i3Q5d/.Qe(0ly]-3^6'aB!i]|rZ+xzF3T3HiV3tpBq&PKnr/ %Ω0;.Ħ#>u=ƪG * F ,{9]vG2xU tv$ZcaO^|JyC@.UqWaMb38E՛$i:$ Q;܃wG?nxYA͹s"߻eTXkt"*L`Qc<)`_,$ٹx֏@.SJPqC1҅ݘ=>PVMƋ~G!80O{sUR|$w]FfGT JL+(O+ q{qp܄e`p):n:j1K(_n|aYcH`|HTpu *F5`zQ5ʮP ~%} DmDIXP♩p+Uv@LJ!uqeQ^DEFHC}bP^6*H{lPUln#fv&"N 4TDK$Q_P7h5'-)^wb.8sȵ;sr?S0>|RÞDڵL֜'oێˤ/0̉t>)@^5{cC'TBEM+D:n\3oR/}7-q0;$!FXyirbájǠS= c掽)19h.]K1ltiъu^!"8@$vGv?^. m7 WG-,N;b]@/C*m_o wN1B QO]www!CtA%nT{Q "L0D`1!VlZo=S`I{"Q~x 1OE[IQ@.4HEcX Do7 a΃N59=T"pRZ1 ^ZS3xFn~{NZ9^2cߗܼшZSepdAMd D)u̕ZG,W5妣@x,iZIa"d]v!˶(2Z6_x ekV2'_k0c`|mK>%~{ͦУ6%㱀j-|"n+ dEv@?dSvgA'uRo!5w' ?fZA;,OcͰ/JT0HY9غh% j@JC's9]eSL}j;y9 RQ+lz~SYdWW] 2Ndjޛ'GNp7FƍSJǵ&*4:3 \(GFpNHSDDN?f/SKRah+r-,0]\;G,LFDsE3;p4'B| Ga8_v׳85, Kie\+t!.}Cد@-uVm`5\WgW^ G̖u̹sOD~}?D;*Zz# 40>^ t،30 ǭ1ֱ- Y^~dCY = 䚤qrrq <]Ƒ4Iy7pm\XjM&\`]GAȭ7Ia̍k&q͢\rqJeDNI'G%piT;fm2JU݇)҄^M&3M&?O e p5TaK5} 0 oPj6vҜAޜ5; )9jI/T ]I-aDʖ586 pV[-9+l:}' [S>?6"G~nE&}'ۍa͗EcGs:ᛗ`Z:+Ԗ.>i)5`LuKp![/) XY$O~6 l_[)̵_HP:^QP<)gl.\?U @]?|`6%x ,t`[z<™U+ZښFPo;r'% !lPGeS5Ns mq:uyxmUs|쏉H%|KqQQǯaɂsvzq,gWm $d\G$sbKۚ`-0m{.fxAӮ}PP pmb|=lZ9/M4x= RHhЎƜjoh<uԣ/] y㐖vvE#)_Q(=GO@z|4ۑkfWx҇C2wZ)k ԩm~.+ίgZ~./l_g0c@̎=]!kK'Z@܆VV I HҹPlfm i᠏齍5f7z4RF2rd:4ŨCa GXSa%9:ńH4cT;`H- j`7J|xJcvR *~IboM8xɊ,rJqhedf\ ?*dHZhbf0E.y~lnjy0M?"ۀ" `/з/~[fЍcWPLIXYH70.jbLJ'K}*ZW֏Eczp19g5oۥr\EN3p:cpԨ #C7AytG6κT ?m_ 5 0RVӜpIR_&oJ(`8*Qt}%I-TZw-NMXbFσr9ynIȽԙ; `Htd-߆"s zڔYc%̄#٥@0_!j6 ևAyVڌ8sz{E Qm{ |^dFG ;]sIuĎ(o#^+&`yZW"Dm@FUSƧpM=zPE9>$l9Aթ&n\s2U R;E}MJLs=WX~,$ZvDkM43>8ݧMԜhayZ*4˥Hz4.FX!b?j: z'dIo-˲L G>o?E ŏw&GAͰ-I"r-Ԧ*}Fqȏ0pPFB߸0igX,iy~Rj&{&TK˥]hP2(En#bǎhl"N2ZAOpk#ozp;U[s|%p_ZdY V!'DE3!ȑQŭ9wY# ON݆-hګ#0_$|Q:m6$Qrd{{(..㽞ͨ:J`.2fНr+.KẌ _[omScuTF6ʆ+ rVC~YssE%A}t[ΨJE`,Hm$LzU⁗m ϒC;ӥ,ih*u|Ɩ`Ο;Z5p{@G< g!YX6EmST2(Od"`(Ak;!YeoRbH# [ZR!X7PYكufm+ƨlK:ӓ<Dž'<MNvn'~,$]^"Ir}9::Q [[H[ڎbP| ;0"> PE1TvOgNWчI߁Ԉ&ʉC-YDxLk1WxT69,FˀJiD=3ǀTmA2I.Fzn'`S _|HS?Z՘UMy[h[^0pՈMF#j臕P)um@o{4c憪VDRktA3Fj)c:a}E if8ꨒq1 ڲ,`@5#a%[3ݙ$pm0n=Avsp2O^?uZ$rgnK]z|cthK3ga*эpʬ"נD|LSz@T`y,o2zum*;r2AQH5r/Fn2 WPE|0IsGo[-zPkjh<y{s!T`VSĻ#^d_)Br|H5+2BU &@(=IY3V/t(OJνO֧ճ>[ei"/Nňx~hfx@E"gvLOfV1]Jbe37r6cՇBٗ=̞6P>y{sl#ηnp)cCqdS 9+7u'71v ⩭Ŕ/ެpjGϻsQHD52DǏ7Fy-iB6N?̥on˽(%FKHD۔GJZTACOj@ʁ ٌ6Zz|)d$ Pw:?(b[}!ɭT4NJdJ؏wӁ1VǬS2 ILƆ;+~$U rv7gérR2(CƋ]MCZCbz]\Qc Otz59f|~?mfׁ%? 4({",0M{M&qOAG.; z l:h8\i \<`rW©GEBKp$KU歈Sg5`|hiTA?ECr>7D2N9&L̽ N;0YrQ`2#_f|ܯ6v-1@w1p'X8ȉ/m!QiupȖ(Au+DDl#vum/[cÒ4SuRLa>y5q|:H[4D%@/. /ל,Kh-VsN `@m1e/\{- J}qc.y!I*Ҽ| r%gb^K=K$r~,NDfc] ZRRQcH V^N)g?a`O줁ʉ_?cLg"4ط]SKpj:vyP}L2~)8H)xo`c!lWiDʒ g˚f?#UrA EE/-~uO%t;*ilݰ џ`*r'sG]d tA׻$h+=j$xbH)vL'9v#a$4 i% ؀}25½ y!tMY]\&e/NuF1.ՕM}D_pYP_xbJ( C4khrŰ pǒM crp=5:EZi+gYfu\=0+BQ?xL#D/tkhY|!X԰}T5]E-'͓SᐚFJTll}rT/S<.j4p'ٝ:#Dy7wD @gb1Ґzmayl/8D>Sܴ4[ ~n[m@\/}p7C豿]J@6$N`j$C~4[T(o5\&XNJ(3,3# Hy]oh"/#a-7tR6  $`ZO[~"@T4?AI[Jozé(@:8vyD-` V<6,a̚:}xHAG$[`""LJrAs\h쉗 n!۵2fe>|rd ̛3M*Ոx;z()=<}X6(BG#;2ˣ.KZo/(ʹ{zڞN$tnW\k5n՞fQ vٍUGiQ-\O>y0ً}JhP:Ay6V JIR9K`2"Kyg9A frvnuXo\K _vVƆ(=;WUK{i-z+V0!2"Yqgt٬5^4|P=E䑕҇I~J,BLv6 \M9YQL_Ti]%Njs&Jr޵0Xh7RB`J2n{.{e}( PeVۡa֭%3B%O`.M\:fL$<F[4d f,s55Ŕ] 1fy:{(kc<>o#qG9,/L1w9PEUWUwoOZZ aXn+-|력ZS6/DB<0wMH|kC"7@]q#tH`,b{1gQqۅê LTu?|˂;$uP ;jzfdà_yU^,hb؎6\SPvPn;!NQtL1/R<!e8~:Ҧ[utsrК{%S&xc(z\ j>G5t`YZ#PPY4> 䞒YWY6W-=^iγq %M[GwڵZXpg(J1Ya]4ʅa5gE9:7RYb屺vȴ53y?=~;ݲH;RƕPJ$v:;)<9.>ԝ G#ʾhOiٱqr_0XC\jBAv{WKm2b,.ݐ&Qr|px\5|P<ڜȍ*~B^`R13#_rb\dO&J)6ǦyY6kO,:`xS#doڶ!p:X 3*fyqy^{-Lf(/8>9E0OA3m͘2,JWaJYrM7]Ж{i{f-o~eW^DJltz JZd5`"md0-Fwjh<<_ᶱ;s8K6ΝmyK:tkrF :^O؛tj&f6),{g]-"\{'k&bA1 @MF2~Wㄔvٝ!*$e~m.OlԂpg  )Ы28p%|SI0l렬ӎ-tڜRѵo0|@x[|˔Uٷ-qiؠ^߃ͱvQ٠IڽZn2'Y급wˑ+{d(NʇF\cӣUYDiЩ&˔yBGl|xШ}"Ey.en{/V06Үv;iduMf?r(nK<@!jdގp؜ISJ L$CώzDo0) 'q _\Leq8G--As)IF6׎Q HꗜyP#N㸕$s^\H]CLC#ck2uI-ɦ5~beId(۸L)(&pA^v薗>mK3Z{Vu&R2kw=ZW2ԺȸXI*NJ;v;wŏ+QWYoQd"|+kuM{dӗvJ SLwyH }O-M$ͦ]L8Z7l(Sa>Eݯ*4gLK=>Eg-WOb*5Uu7Y}!亗BQFUNx=H.(HM)k5/=/eۗ"6ӻrI657 Qm,_ED(Mh}y5w^?چ ֕gwS𽹃,B$vB_v |7&7_l[ O+Iݤ7AjIw"r!jZŨmH*@N4|Y<լX;-*j#$yE|əۍgA9oeMI[uROU0o_N2i85qǑys,ZAk#oWICY7[Ӕa ,m:hmg%? )!Oߘ0­0a]؜w=Fh1|6}Br\Du#E푫ƋWk/ѣ]g~4^VwÅ`׬x~ X+!] R. ۅ2;H*sjYIk%SO{U,vF_-3Uc pj{~58fHS70hS:'(7/`=n}(WYv@G3M'9Lx-gv 䯇 ƲI F6Wi\1]Du&$BBk[Y1TpSȓ \mn&Z7?~ )J AdFz1}r%"y4w"6!#<>-ge,ͬOU}`*v^w̽0xnDK}qD]"]'`$6fW[wwzsd_@AvQA޷' W\6R;܎υQkv *`Y%AP=.{1hƂ7+F.Ǩ|m)A_gԆZXOK8q.[ 8?12B]M=pq]# S+d^ Xl?:a3P+J)m/A;e\!v<,g9[!eu]ÅQozsJ\9xQz6Ob Q.mnr>9^*jo/3%%Қ{層2mFTekr]u21'c|n IK-˙kz{Kx-q6[7WqIUV( B^?S ݏ[ykmEk ۼ<Kѷ}C;\c") \%20Z6Ag!fDJ\maK(Rd%VP'|ffX.Zʘ#@vc`*LvK=Cuܡ[H4ck~K#hȋ|#́$Xr߈NfF }z8 h^wWQfQ|SpRo,X<ا-!LyvUH;D!&rM)Xɗd+m'ϊm7E_N&tW>ZpJG-DΊ LӧVĊ팍Ldl9uk2M05AAș߸~g!sEIr>$(_LuRz{ez5?1a|nފ1(lE*,K-$)Dnշ.5HGK;%>Fr1G~oN_^scdlQtG' Qtsjxe|Ls"}2g^'| H4^郡]]z6ap"_t$rh}7ਉq`n3u8wL+XR(W* "<:c!`vhm P ~Hw`rkvÜxFP ~LE(? ~_(ل֊< OmGFegMiY&RL,$sܯWuG`p_۟y"s{|[wy f7R\zVZ?Oϣ1Ӈ)tG+83-5F&i]oq9z~S3_5 "rplnGKAkjv4hqRY2MKm7xmlq聀zB@ZZDLjdO|6u\5S; h+qLDH!lQ]?v@7 pʇ[ZݰUNM;ܧܶ9lN^'MfEmp;VZUDC)BkA:"+uoxUjQv:bU$ OӪ,"[LTׅ(Y$l8H'5K$)G;ї#nkIX-O_ͽ,@TU 3O7K+MN mpBE^5GuQKL>1)Pvb Lbl u VUĎ1q kO*AW\y+]睨 }x\͚F*:uP0SC^eH,c>2XGVYoKg͛gԬZRMIBp<`;)#yaf FV$7\ azM:N8{f?]ik={ ج9%8$xK" WPF $o pe̓?;PH\&?_z߰U~c?5&>q A`s@f4 V)j!NniFw@]Mʼna"柟|bh܅'8P5-?/\º;S@tXA7#pߙRH ʨ#]W(U:+u\ӨMZ-]WSv'[_'1|! -ET2$py}I]gp81f\Dmҍ+˴-߮ GS2+IKQE\0oz`y3;܂jWxxckbvuiz¼ڹG>u46wK !AĀiǠ,e}0ƕQv|'`B2͞*`( !/a vT5{mF#y Zkзu~ +\zTg_rl>OXe2usº&礸 ZPV_bq- 8 c +HYrJ|@*>žfK/`A’L 9lNtS0Bi"n< `kf]$?) 'Аd|oz1u|D *[# DbfT ǔ9VeXql9S_[3 $YrJD6W@+שڟ7-HḽOr-UcBqQ L$pa0ofohixs NQ!ijظh͹%~Sp|&IZA{X VvԨ3)( Œ:2  QEzLyfuubϲ I_XB{ГyPg ѠgLI;*\M( (Z2 T 6ƀl#WKb{:EA._"+#v&lKX+bS`~m~T{Wₗ Ip^fkI]7hLvTެe51̟ ܇T"g^^@G] XI4I/ٵb$JӥO5p (DJz|{,-~0ae3_Uc6j*t>Wy;ojWH*kuȈ&7"!nK*` m_yB{}ۘugBϞo;IҌ0e|0;.Ro ~TسK`ɾfSt +뇤e2ơ^<\ N3UlT"YOq`=(0YU }mk#]>oXF7٬tzPπxnl!y/=ŕ|# x:QbuU34 q9,ɬ9='P[e gxw ު|:i$ yC?5oβs~%z1^H* Lї"$QN˱2Zy k.{y:nttxcS֛FsJG.{=Fa:/>w#PXG^- *p=F+U"WCDgt/FE IzͳkcgD<HC22MA6uOǭ#H X;\xOYzPH%cDgi@YuONqȈ6ȞdZl+}*^͠ ۳Q [GYTp>ӯ瞐Hfáchubv艶d|%F7?Ζ~N*v bT.%w-I.bNBpGdeq U@lcP0{}Ch+ĵ} bGxekOOVYK%At5\|@y D' X&Lg\sc)Poryl@- XCTx$ȭZK_Q"WCƛ?zƍv<_+hV֤m j{͕tុx̘V4_ ʹ[;) GP8ܿM n0pΣ䊺{羜^ݝc7NQ[z3N$3UmߩmU;v. r:߶z !qGQJ0 A_qa4&7ݏvVϳ_>X]yXY@ƉȜ+ CKeFxҍwDxlyu вby%QIg !CxYI^wUӟg <)cI~Jع;=*dxlp\sX#=q}idΎڥ]G\+(iiM/JܱZXGol 9lC-p%&C$tt|ы$`UROAG Dc $Ct*y[?etZ/CkA\g 1lZw-tꏄЛD]BETuS$239":z>!#tPÒ8BI^M߮f=,܊ nd|]+d*\YFOQw d&:6mHb$#VIqf~#& DuC:YL̕E-Ӻ.HjGhW$' g9"OA21WsecWM`=Ŕ^vTټ<3)<v<\w i9X¿[G㛡(ӯ1eUZ6nU;}*υ!hnӲvf{aay?>K)KF  72t6\`@HqY0(L?MS.k,!bY4g9DY/pp} sg0i1OM铷L%c]H2]Luދ_~2kY u:Ym +P6nFՔ~n%V ۑDh[9)q'g٬d0VX }RVr/Zc;{H>Ϗ$v.ALS-T[+noqr!2 q0VmORdl9z, Mz<)1 8O*^~*7L-4U8< MRzѽd3S d'Je\3 F"\$H/=6D[2Z \~q56tnC@6Au5_ 'Isags9FR+jFT@ޭh|N}O^] zg(jFp[h[994~g-{j`&wp1' -¡$QwTiˎ;=:S #8&4({Jgő(x¢&пvC_z5ޛ.>& +b43qW>8?J(Ag^uMGUtJW=3&{PokA ^㗭ԷJɟWQ׾2U$P ~trh[m@6s0[o6A~7)X%u#mN2xl5_R0fq$k,43NFtOlʋ9};@0>x@^$7u[j2C}B1*b3>-kр<0"1W-ɩ{FK`!n)NQ~4t {3轏Vpc+6鍷$6p1L `"W"o|0O/^pH,DeZ@\Y8.X BIt`]7&/T)nu D_qjyP(xs ? e]` F&=Q5=/@?e{6~Z " tK)Eu&%0f܃8V1RXsE͹[u*ms[E&9BqK֚v;`:=-!$d(I~?oNg.>51@jW6'4A[B ZeL^8C WEŊur!'f: q0ı8c::`kAm<{H1Y4˴.OB.a3Vͬ$i \c>?6 ~>rӨWAc!4~&Ax+\P+Ro5&D|W]J䡍\{D%uvE8.=wPFGlV\& `jK?v *,w! X7(X2O#9wg_%*U!u>c S ;N8EFI-b+aW`n45UǷhu%M¾)Pk4-kb44}n;D J:8 ֎S¾wf55V K~Ku,9em205Bo$)5Ćv7cn ڡ&ֲ{u3연V҃S9tEYJ]s ŠzǾ>25: 7tJ Ë3,JNndI=%b Пl^i/ա3=Zd3|m}"~d;S?}Uڒ2(c:&}2u`/iMVZ݆]K&KQׯ\.dM7!zk lWK&sm4 ZG(]~@|p(%G=ɠaQka$=& ٻArk̅Kce=&JwޜFn`+R^kvHI2ۻ05$п ΍a+} 7% ?qZBqm. zQ` w\}Y l&UWQr4p(1tRk"f'_Vc|'!JLTKU?hbG*7nZe+}}r&i-ԹZG6PMKFņhd YN qPac_vEPBoJD5乂߶-ˎDuY)tjs@92^ bhd G:hWù;ŮSFOu%=Pt L"ne2Yf# S[ZOgq/i-P@GXgm%LS |]Ni"xvlZW!!:KHˊB6X, @d5i=HH皯f-hm R`l*O+\fw|>'f4l),\-{曈qS)JS v}ffCXg3uJ^ɖ!EG#fano;OΞyqHm e]δhK_S6+KO4-50"v3]Zkv [ w}k1XPqXO V Qװ<׍VcӮyhru|.uKa o$.": 50hh@^;JN9VP')aQh5am~ZXqC4/ӞEK[{~<*,*m1lg-E;,;jHY&Mp DR{]$(G=:?XɧEsm?ʪ%OυQD𗥴Uy;35uxՙ"s-uY?l8(B"H4ӕ>rfWmjȒo ki% Ԯi+@3SpξueKohԫ&FOX NX . T.. >e $/)k0r !(g?>ŷ:B{o7C-Ԍ97\΂p?]~iI Ut0-;i8ͪF1}`]ltGL" nbvbY"ne.Id=c -|S !U@)k*wtnowm6RnQQ2ʒZ:a.ٮdkg! hߵ_r|m{=t6;Vrs/&itqc3 ʱ%j#3NZB($1bu$L<-uWc!\ "4 ?fNHΤ.()5xwiԻlAE ,+VAOE;)z=3hNUL hn#ʴ~WT7wiwWqPh!C.܈`5*\yJ_)b@K>4ZH]C_u;CfH~KRmL5V}kɒAUa9`4)f\A8V[' TWhpԣZa(Ld&KJnalPD!ek% }Vz< x;˗Ċź|o0SE]^K3JA2n Yc?YS ;`2h# H(4'rudfr**%AkzZ'FvwmG_[킥u IrqȬ ctthk yó6<eX6gO_hU*{)$M] @@qҤ~x2dwsngnI4( (G1$#d8}ZYs |3UutG&Vݧr[xge SoBp]ؖ;62?6{Nzanj2.3h^K[F\X"kBWfN=-$=]U*$ > 7H̊f`F=6!CL^SwUɯ( c`h4)2ttj!}P++:=]#OT J=CB! V}RM-f61^ힼ`1$K" Kn-Y+$tw] t5HJfzH+̤: |S i lb2ucW9ՌZ>qϻm+A#o+V TFWVߢ*LsSDﷰ寨c鞤!#pzvzP>\CνŒ#!Y\'PCpCct#nӗ݊c^xmzHS[q))vsɌ&$ACs@7 q;6v (0aj(F1.{rΩ(Lq5Bӛ8uBۄӅOc%YQxC-<(,uՕf j忟IVM(1E:| M<2cѝq~9? asKߏI! OMb::EHU8;:g(\i&M H O 4CKJc~ \S`;GVQ;#wQúv͒L#mCAPlXo|Sv?Ewib#hhȓvc Q^wj Nql!}h!Y;?ItKe @œ3je^iKMA<jΨ8Mq+ko#^EZyF|V=Z0' ob>T^[pP!A U4 -$[{[ +#Wia9|X+ 1m[hD5ֆ `,}߽?8ףX.Ƭj.uUX`JMn86M9y]4>ooN,}JiEay<ݝΘʓ4ľ0|aG/bZlu?)n]z 12_Ʉ͔ /Z[?< \GNS74|htb /]/TD(V TڽAUe+Q> Ļr+WJ%YcvbG3Nۆ j9^n4\ fU z,%0VY~|Z1(No9 Ӫ OI,ÕYTUo|Djm",-D O+E6rX/b"la.; ޫ4+AΡ1#Kyk8iq73F dSvy] 1лP4a)OP( Eb9e 6m12h4IMUЀmٴcwVHMzccdl` QFMaaf9j:3'QYs\ TIiݦy-h{EUB@NQ^S ,{jƫ,G# 3@$x5XZ".%s1[ |,q,%%9Ͽ*k1.xmhq=.>68@Z+)K)xT`v$kfl@#zXZ*!m|4;`򪱋r;|y_Chaݍ>'qʽXt׌oR]݈-8J>rڥgZ;cm>`m)mZRsoӫgؼc*ٕ\$:lL 3gW%Ҹ4Ȩ=S+Uz?i]c. s%vQ">8O'Xa;Hde&!ĸhjkjmihǴ'G]%Y$ GbKͤY:ŅIv,nQBL pdz?Iׂn`-);fTwkE,R-o0%A_l.Kp|ҽ}՘7N(B#aD%6XCb|rj/yźk*v7jI"xw4"f"Z!5iVbs{̨;W6|=lH?adh969KQ3B(ddv HgBM͒]GY!nm,H-U5)7sw+J4|P}~ ~NW5I҈mL'yK/ $x[y5ʿ:Vlc`؅"ADD~:c\H.ix w006w* BE(Q4ʱl#)_fs{M 1 M973\XU|ma"uʟ-eLrcz3V2:j1*;Zd"M'n)YMkX5r% QqލfvL^ |=xwn=IDmQ壐+e^\Gen1 e]e[ E0x K$aM:ݙJ G_p+,ƍ?Sԓ)09FMk{Zj BSl$gC|ʟf"3LNR|`t"Sk2]`P0,>H/'ܶf:*20NA_]@]zAc"ftWU_ǀ/Eeүt^:U;y5|H~NOv)J:҄- &V*s"}T8;kz: ]klB'S-l-6fOfJ5l.:t$]π9^kdz4bs.fiIŝ8=O6>Pxps!`#3m$Z!(tz-ª5HH4g2d4rd ,qIgjSw$@0_ ]IFo|Av@ !Y ؔşYNU>gǂxa]ǸkLpbǑgI-K{[}%t[bu`[ Y 0ce՟gSzmz[hGA,G/@"J)=B)Y`#̞H<,lҨu;s |<8k3=9яA$#zf߿n¿d~|qKǫD+v|Ghad \mҨVerV`+Eȷc=lߒgc)=|$+)p<rCm_@dR89L[ےseq*XO4ϥmXY'-p^%Qe9TK$6ZmW'qLzńT ‰KH{sCrYqWEyNerN.|DruާS;vr1Y;Hi#?|ǝ^o b>yUڠDUڶGDEEDړ01c5,{Xm6)+7v6R 6R5ON_':|%r UCU.up~J!qygo$D 3*af«Su/C-y,嬂VV;jP7ƕ㾜'hҪ:lb(#ן[ӎPBZ-kțaN>PXv\`TD˜BY1S%J.h^@34b=ƫ4 %_EώoY{TIXHhE%+~,vE_N1rAcDseg/] MaN/qqV3L5ALsya=ZmHE;!+/A:5_oLlP%Lwl?8/8~ɟaP~fK>Nyj͐C%v-̾Q(п0FH$mÜ-"5P4_.PY6tgZS༒vf'j:en8AȻ= +qS7; !"&{&jޭ)d,H-K[t`2h\,Eœ/{xjn &yHk#7(&ciPXF'm(rلK$>' ^1q\LQ[O; Cn2E:: 3)'}D0UJʑ14%{.K/&k rasd cxH ZN'电O[CaMjh0Y/ :>=_tP9Pd^RE1Y:(JNX.^$5kuN3 yNS7۳R-soI1 \;g\r<AuYwgD xH1>Zms8VHKKk1],UzdO ,GfV>bX5Ǽ@$AC%JSVȥt"Ge&FȐ2=L'xf5B|:ah_!KW{ L't\ߩ)eT"E{8-6|驒2k4DD 4;}E>LF}B*}RQ=-RLq`p;s]oh=γ0/qsi01azRBL eɓZ?v.[ Jk'珯e .5s%GULje|8FR{otYB&a)sL\5Lg %3H77^ `Be SzRG/xCEOr9%&q0`4-#5S؉Ri_`S(qe|cck?AVP;9]j`33CѰ8}?n!L/>sȐgA1xQ,QFY6Pu&,Q`0$"^vM`N$sQ+}xLNȒ0ej%: KLW }W\~2bhʦ-;V>IBOTch18Lspx^u O-}Y_4i8:c2r-ܮ;r;71U"Ta/&\]Ru؃%b~bŕ]P-/ɲ=[T.@ #WnOF0Bpd<& ĭ?H켬0.J͟ΰyceJdʝoBvN;Y5ʹkB34[> -8!s1쎈c/\euk8{RH'/mݾ$׆b:"4LŖԦ`y͇. ?L%JڮrqFAFà:̸[a_2ٞ@E{xlxwtvw `LE'N `^P̸7mEzn?PNQENrmeY HLQM% Fe4DiW:LXmJ;îG ta?^҈;fW-wPm+bfmV 9Zo0B P"e<³حRLk24bl*NKujmzg \OX'Ģ;' n!t1Ce%Z{^oD @mȞw=W$䍇_3]V %2Q 6DU$**$ #i }#6^xjHw1ם'+Q+l3 },ty Nߑ"+IGejewOogͱ-d|r(xUKsq@߃W=/tYb {nit]}7<2Y ɓWzYm{8U`]D/Yb6FZ\92H~ٔd)5tp+OT_HZWԣ}Ij{ *hO0xI+Ɂ\W-r29=)K3*?a2 beSҡ+;,1I`aE&z'=0SgV7v$bL{i~F>@&Cv0rdH!=xk,)gHf ^C(>L^0Ɍx 5F1WIv*79=zqў {0.rwn =+ڵFimc},q ;?q6`(ߖx)l8u~yS'dbkFW*TY qؐ< @ el֢4/;7+DΟ8v??#soMI\ن. I 4pFHId]MN`oq}QL(0)^VbT7WPnb]cU.\z͇J'1a̙V{;\M+7~wgj@Pnh@v"W>_Ű{e#O&3@S9Cq36(&"VTBե+0{F6F&)7Y(#@[TE=So9KOsTav)$nPLj?5KH(.dhuy2j P] e W7~/m(4j15{,_6CLmg& xܬ)<TIm ߸cϽͬeq=x_.!?=Vqp`0̷ Qh W430l ,?aV1^9 x5cҎ{*oOaKǭ*Si'Ҧ2|ac[t+cnAa{[pW*1'}z4g%rҘ^e.!&A*gY$y[8~BG7!;SlY2 5AiCkKqmrtu& kOFeJQs>nײ%%,0*khqΊ8/SD: >V ?e}. bяg ۀD?-&7p[̣WBed|q}@+d,uHO+^opxO|>i'{6m=-|(L ӳٱL7%NbML] c\Nd%dO&5,-76n'`"_PNEv'٪KR#۽4Y t[Or{E|/DUtdhj3rX“;Jj xI 2~%{X 5N[2Ïrhq7~n05j5@h xi06o06,&5M)Ų-S*y-^ u"[Uz5$~FkV?wɀľf_ցĪ˻!:~+S+l Z:NSO?M&GvIJ6ճIRk)r07&zqBـ9[ ?kUM0?;\!~wF}OQ o<''ɖ,x҇K/W{BܛHbod.}ݮ8`|WWb>k(˭%i+<ô锤Z8cw:TF6[TI 'Hn=g+{-&Dߔ!6~Hhī# si]l,64`2~܉g$r X }D'B,-= i1kO<)[p:%YHX!3уAp6#-+2E*08M&T.-} R1? hUel>܌w Hr`ޙVu}.)u+HU{{MQ:RjK𸊢gSd5oc]v9cM\/ DySRX?FKL2328;4ۤ(nU~2]nzكk1/jxO $cए?}cK( 1,eGeOZZ\Ic8iQE.Ak8(3Im@|'sӃbH#[);b1}>,žArο]Ϸف6V(ļ7:^ #\wH:0ԛW/ lwq.M!{7eΉ?gHX6a8B>(LX.6uU{E澐7i!?@ҟ Ӣ$1NzU?*z +.]6 .nww2V#yЊB6()Rn3W;g` tD>ك'5m(^wx6ۢ̾c7;\KJmGӂjjTQW QE4ʚJcx4(oĥu1v; ZSc2IL l{!EWf8Կ XRt2.1q"Zհ3`d}#]JCBN/ |G=>9n>V&۸`s$Lh}&y$;ː<*C(^b C{l%YvlԻ28?8K< c< F"YP2^/o{௽Oa%M6!XQi*9a 1WIM/ѻF2^UdV2 *K~A.Hc}$?(j fJ}4H#:Im v8yRVz0g`.5>u:/ ">)'?@(#~5DUlϙk16R q"Zz-h݂߉8}LGC?i(\$w<}JWɓxg~ 2TJ2đh݉d_#_hgS}v] mh$4Epr!~Ss”{A\]9[`JE'BuRE͏JQFI,eӂc˸aNPVYsK#T_ hk.qHXjRDo\B`0lLA$Vi/o`CˬߥBhEA.Xמ-k[ep7C#'\@JAΚ`brJT._2(ΞsZ_ȶyXɁZ@C 2 TnjB8av]︰D*l9X;փ_ j8ΖP֩r1ullHlO1rܶAjV7_Coڋ -X=Kw ͯjTve$݁Ԁ.pZ4yqk $'؈YW3!iIX8E9}!G8 ]R6IKip8մͷqYϔ,3|/xAAZC}[DjI71AUR`l1+ET"6|@Om4%u6JzHq&)ݾgE\6F\'qOږ)Y Qu8ϟJj*`M5lXPѩ |g5tWo;6O"}8ponN\`w6|g✪C"Cs2[)?Pp6HusΖkc1LqIO 041ݍwc{XtM#6Ol +73;߿=T&g)U}ldwJpNWY~Sи]cR@7pY1whSt?ELMӆढ़7eFkVX9G{d쁯oV⟁q)dR; 7 6X`bo3 ?1JCoL4Y4hhȃg@|*Zc %h>L@kMfLAjXe7;t PEor>Ku\MK$_x/^Fh+00oOacElHx[ 1sINa޿JW][bQ{!WƆKb@d,@ԔDJ6nĄ홨+ta@ ,"`8޻-V> oț({n@ ^$62jOp`Ą fg+#qLX>\1tr]ÞzDSu4AC째uplƭKI r4CYZ@* >j?Juq7Q"ۃltmF -ЕfO%Luܝ6X:(z?hX1FP)w(QK΋yD-pɏMe af~Y4uj+heSLN>+[BEQ嚅[bjjdFTy}"UPGFlPw5P$bD(|| ~ F&`v1r"w[O W/(IM^X?)޺{N($.tK`LxYk }¤RLh{ @ 3_l2?~=D6,ܸr`͐q8tVS^]ҠDG" RP2o4APdrhxmm !8mD(n<:8 .RCt @,0tѭ2oA M ?EV|06]a[Yf9-̾2*UD#Z\k#Zx[GoI{&S PW\*S8Q椿e?"[RE^C;v5]_|ⵚmWG`h9.6a_EvuV-+۝^ppꍢ tG ga~/%|yt Y]K]2&32;nk<:yof oϲ&|E~kD?WxRS8Q@jKE^p f/CΙժ^h<:09?yAֹTni*xcz0W$/aki8qckkda(EjJLeF+"#!Y:&gu_ k_DSc2hd٭`$.Z<mk6#tU頇yoJ}ju "4x:][f??I`/ (4yؠzڇR7ueDuׂ@g ӿzQwm 3Ӗ2h4 *L>¿9Q[.ȟUԴX/H;.Gf |v-Q=6oM{$`ltwJ|#ئN <!ǚ4K}#gN(aQcq֍T}ƃ&.&*c,]M`Q@ʟ PȚi;:A$nEpa_QvڰJ?T}dl!L~sٗooebELiڅ#ù_O:TmAۓOawSvZ` vb>}>d8^Ŋg=uDuDHR({j߱\h2&?>VvL.< Vp9ui-+ o=)=/FS}~DJs^rim;oI8oBڪ뭩Ԡvw&[5eaCGSMIiշso೛|sLd[ne A!6 Eo8x=W&5&aICr֥T{QU] ppilL=x:3N.Bvg)Smm^ K9O50n J__>_}m|34cB= x?s D9} V|<.;BR f9.vG9\Cd4bWãuX٤_1e*Xm%MgR&)iϵ *~Op&=Bi2zK1%#x9n[ʬn2@y`jǩY7{ZJj8O3r(;?Eiz:ag? 3&e^XͿ$ eѮ 0QBZ?14 b"%QR~1ݮ+jgÝk Os%vy皡b VF}k̖ W[1HXk #J`?By&$AD| l!U=zxܖFhEJ\wkaБ#rPiXEyA~DGB~$H)Sǝ='ihNYkJLHdq):MbC]:J3'lE\őǤt~RCO/I.i@ZqZ=_m[ۏVm݌pk9U\IG`00nکdf^# <#ߏ[,<}FCO~|CFs݀Tʟ:k;2fA?vjyG<0࡫bMiseNa}s qLr0 q?go rZ6^ Ev}ň2b֋h7gٴqMКkӜ!e̞͹ÏGnjFn?{:^gJr-3&/27ؾ؉KͥUE ݶ[=oHJ{; Asc{Ic+kD >b'"VK&QJuy,%Km_mZȴ?U,_7n(lW&'s/'aX+<6,`x-8* 97}Z#DPx^M%iH_!/ˠVC20#us?Y/w!$Ŧ,lZ{W>pt}ySs;Dq 1xh%8U"خs;)] SZ K&mZ"Z\yπJA V9 { ˹~S}MO4fy80qVQlJ2݉u%qg+<*AQd" zΫ ?{'$*=)a4t9Xxsu`JXi!l_ߐ_|9|:nq䞼ȍ1hF(^&FG;ی/;$dA;݋Fl (iy1õ,Ȱ3kKI>Np2#pjrZ!aNCVn;2'mnn׾L La5*=!^ZRS !A!ss[C|Zf.=1?7ogg0Lզa :,Y"d8& >Ē\@xJGBeALrR`++ZJesJ24Dffh|+%b=H<⃌߾׉aϴ@f.a@;OG'2U _L/b`檼DY XX56B`cC˖.p`b/U-3Jkht`'Rn)Blp cѱ"GMu r<.6tт䇉2 $Ξ.9yjpAy%6:'rhV%kUlo͏ُ4ZٲyN&4S-"k[ 1Ï`s)IL@uT 5c. cw^=0{Z`ortvKxOuĞ >!!pH#{{c L!( |B3hLY/S1ӫ,6G2t}|; n+:/ }h5\ңjk&~u8n#%ZȢ>L֓$nw %1?zjfzD9!E}P;X\"|0 \QVPc  Gs)!%n;[(Z0/&SD ٚ͛dc3(Z0?DtsSoG C^6NqKQsNЈhy oP`nu9ڬdjԃƆJh*:YlzwSQ[W83/TjyÆ1&E :6׸i7ǂ('r3 yޫkųNWY'>O>]K/ezY'F=č:#c&&D5~ [V{,VlL탅vYS Au{5:kr"96{]Q5|L1}J^*@b2'ښ:@À%*| E&VA{?cs'XV}`p9z}98L[ C8g`R-t.|*m$#mJ7ҴF=&&Z~)f$uNXfkݨ+=C f65̌ۮHMO,}9 E^~o%6ϰNwޅ2;XuMKOð^9l7==S_̃=ĺL?C=V36t1l b Ć(fHcV)=If=70x@W;̋V E&e_tLg ȭϟt|i5,~I9Uk+m>߳Ө- #hw\i`(?aՔ{}X(@DaT+ٱt^o)mn6"WGo#pofPb2/^1̇H*ƎM]zu&9pcEVq{# IJh < .)  n_oZvqO|8.00B͐Fʞ~q@5/gOz6K2١Q!8S .P0ӣHa;ȧl]['"/CCѳ #eBo{ q s[ ?{9mnD*#eSj>pdQ}1+2\["#@:N]Ngkxϗ=9 %,$nϠyہ48؄ \|l\]W88j  Em5վH+Tݯ^_Q;&$(sl-VD h=x^haik;)̣T=ۡ4?&Мod. qoڰα ڐ~[Xu&@j7ʧo3, ߄&X~җ)esϺ8o5aXw)Ka|] n&;ld_YI}HpR|0c"r!M9UJߩ,fJ: ucSGLV@Ol緎RSB2e VBU AI:,7lj+sbd+Rs-0.^^E"<<gBp>խʟm!4ˆj7*=?eh},_/9jw[ug&FM`'b迏fkI|p!1+wѱYN@Q% qFLy"I:E6p~qFj8C\ܪg591Uv0hA61D**`(Br4 'Aex/zVG? Rׅ9KL^uXg=tyC6N'm8VsLeSgDL0{.2%szaD4h̽᳌'ZCl!"Xy4(g\ogPǣ4zG;m 5{Вu$NsǣAʽk!sb; |[ %Hl*v{]Лg/£Ab_ Wk\~P\G!QUgQc@l23(JM}{|0Os}: 4PqQfs=ԏAA;/hzG? ~!z!ǠR)Fv8CT#2T,. F3B^cxb[șKx>ī&&9K)2rv ˱=8tb'h ` ([?jձ\{kM=. YETIc$P7C V%|EW9g` (FLܻpWO>6+ZԖÊu7g@tPbAqX޶̕=-J\?aѣJvXS\.oH%5\\OG0-iC 1](%EnM-f>zG|"ؾЊk]}],t{%RCvTD+rhbS.X(ȪOAe̴7+40MB;X|DUV\J5~H5w{fQVe4cCg(, $-w=$d)(82 7Rt f@AfQwF,^xHT g^- .< y'RoxkBmPǙ4C߷D> zv%[HMҿ4؂fq]`;~1q9cӌ0~gqmN7 Ku 4)X]Y4y v5z;n'9KSjnU3M.X鳭?3Xm"uӨ*+MY ޞGD>E\JwHxp/{щ9ijMs9=oʊ4"2 WG|qd3^+*x&׵@A].zkav$2[p{O 4yHd}>B]d4pvrO`՟wl!],W;u$-O@"KAN9S@ǝ_4rS5L[u&As at+ U9-eXǏD\[ gxY~(>e/bW+mHgJ'h}w)p?$Q5Vl6|).l+#ZTIZvuGmYkd/g+Ϝʻ4:k!JDy>m1S^pa95Q}~I `ہ6޲o )5q}UVzmxGNyÌإ^ݩ)v-zVXCQ=" WDsƙK-ycm:L0vF? bgOx79p+z=G?ݕbE>vuʨ2M+TNL|!T h+P5ԯ4Gv:JFSSK7&UMLc{{u<nǬ}7jp;w O RIM^G *͉XXG8\[6s%|Sm RT{}'MY. `' >MRV k\*E7"P$1b)R !2 f7*2U/ˎPh_>wkrLӨQnq'W֚T gR P ڶWEOӣB*Y7{|x 屣 J֣  Q{BƜE3$B6M `d{?[Q#LKprvҖFORQ|42w/դ)* k75yB1 O9~rkHJ(0=oUt=aq~oUC +l 4c8`,N\7.F-aԭ\f3st}ϖ4w_G_TI~_=:.` >ÊOrc֕5 L<熈R :Sw։kcOM:U(l4+%x_Sh$ {05ED)ߡw>)(BHNC,EN2$=nD^[-pjFiƭ~ka1ڕYy,h~X< mxPc4oi88<,9Ylj@cCuc(TF3|ihYҢgoϻdϻ7,M"iwQU*d`u=oÅ}ʿ,tPT}3wCLjk˽jtZvmWW7R@Vqz.Po(H.zځ͡.ˆ7b$6h"9EJXndyi{VRLTZ0klg%KUh`ČVoEPƖ?^H;^fnnyapto?7#/E/5 :a#=3Yx?3R5) @:i@5k(.a ҥT>+Ub'E%0^@x@C8/T*w#\h2E6oN,UJ^тͥ$} qlS3QQtV&UD ;<<}$!6ӽbYL]S}g _sg$gL;dhQ\ #MO~9)$&A@pLq|vplf5̫}Rz>\+!? y֩#'!]뷬Y$.{ɡo'&渇T3U^h=xrriUÅ(8Gt&ҐbtN}zݟFp\+XuITVS8~>ʧy' K_֩aطoZѠb¢ZUo k;>uer%rz}')R-p3cpq7sϚ7d +c˖FgyKEu6j7X0 LYȶCw, ҭg#@_bD[+̩]> :wY1XZރNBap]Xk.U CTl ˩Mno.pDkZ&fV2U5DTx5G;>  Dgw8qZHE,}s1z׵d&[q6?.rxCLM y;8j4d,IBO =WȰ=)^~>|dހ/xcu}eekʽy4M;8Y`}ҪNÃ&O% 'Jv[LXuu<7]3 >ebk*->w ^ozXDG¡o',fyQOjηx +Uڔq6Y+ mL K]֞? ›$ˢ_$g$0EFܻP ~3ӜYDt ] +?-Zvzc8HNxȰ244B7=Z0c('{u"uS "M]VǨ^퍌KK|o⤸m%-SZIU"4pи!,"_gv\ALՕbrUGR= NZ#=S9I,CR3ٝP#v~|\fwn=8pukuT*ϙ;ϲ"ʬVf_+o›6+r WfxmXc:žwagryp2[Bw4ƀc8 +Y`ؤ&,E{h κ G($̞snc>8XVtb$)HD|⮚s[ƪ\MܧAW5vG7C^Gk'Cr8s޳JrHA:R0E0Uߖ}M3ԫZdQ^f2MnA|Ii.b֍%1ZwOY.VV3/`Fo",zn!|vWEz6TB`JBQe %UC%oR#p9; oiM@i'hm$~+{yu$a:ѶG*8rߵ{ s=CֳDOݫɝzA~+U83#0/Zze6[?^,Euypt#,`m;6Y>_;bb]IS ՝gJ-Ѯ9 j0u.Hw(PKA+ʾӲ f̃v]`' vVywE>)R$07;W|J(ƿqtǒI#NɍUW5yQkdDo:vd 89P*66d [R-9^P; >B'8٢]<4 С jiR1'^pYh"noEF˄*MMD\?t{N#cJQɘ&x}=/aԂ 3yeܯ1H[q!߂hc,րTD] [ɞxJW> S*[L5 W;8p:C)M(.|0U^ +\;ىID:uM8 ?&~7IϟV„w7y|vYmE,`rX=(ymVm@_a !}4~/}/[_쥕aLFg HV=E͙Nf 4m7z{|2pUqH!ϹVNN[1U2Wޚ!9=6V*T|@LdǏzRef<_55?,y;)3j7+eB FE'THVq3Po\Єn)]zqVt8 "6[N׿Jgc(tm[ ^H#!ǭK|+±$^o_\vkq+jY%:[_k 3+Ld#} touZbODmtlO-jveͶ# RֹwDgՐиYoTIDU\n9A/fVhHJAp.!ȓ?g䳛>Nbu9]N.cWU]z5)3DrF­vz B79"Ѱke֮c.7-V7n^< { :a&)[/]^5^c?17:7TY0mĬ鶀Lɝ, /؇^|`Kwq \X #WbusE mU^FOY{q?+4j1<#B|O}")|;-r֑o8euּR#%0r{Zf༆=;B>TFuɤnd4Cb{'NdeЌeȎ+߾? z:*&'Y3鴇:9+T?^XG&V乛G.P~]cuR#ht&|2ٵ;/' \}q@EX) 3ᓷV]mfٔUC& n QH0Yt\40 9ɽx\AǛ7-{2l IV8YL~(yXNZKrtZq(Uo  %ض ~!"~'9 zj(u@ k%62)s b z*(4U㤍'=-h^ qJ (JmLiݤ\Db3si͓% A%&{S1qn 'Ǔ 1qW1S?#֌ G[1>Ks)̟8[8kޑڧŰh=GӾ>'mLCPx e-]XT{(&by#a}Ni\=c&B,ƃIZJQ[rA* ǻbk'I ~:ͫ}eUuЃY}/cJ 鷩~\K{(R?d '!#~GSW :Uȳ=fHLZgI5,yQ],rlZZ<ChqXְ -K̀{E;#Ii! [Oʚ?Zr1v{ʜQ*J1-fBI2mb&PYbR[KbjUTe*2=Մzy_ 1:C (l H;'jSUyoҷFZ?f8z#5[5C3B/;x?ۘIgLXVYpP&g ArYZF"wC-O-~,ZFre0-˷]z}>뼒е!He(WLes91ZC n=`0Ċ>,jP^>(%^#/a3si*sq~ӼEUzztqkN"7SP^,ircU"3\װU_7d5f(>erL@2C~\qMRМaNUY }! mP' B= aI/!WLhj5˪+/.|.o{UЕ^mf:׳"YƉ -Uz5,M*9珺ͶĢܴR.IV;ɨc* ^R>] =RU4eZhX2dF 7QnȢV= zf{rĈIJRߞZ鏴kʑoF+0>ޑqp+ͽ 7A7XFûxً6R,-ƻyІRbE+)B4͟)KuX2w7*2΄)6LuC}LܷZ^!<;R2뻦+)c$©g"aM>+;Χ\2rM.l{R V:bpu?aG'@[OW.n%y˛Ɛ[WAU--Q70d$]su@LR?A#ԣ3G!>` DQGqJ7z>b(m)]6=}+~91ҶmgW}5=򅝋HZg@&AIs!*I:2t{%S𨉔Nvze@ CwWm&:)tc7U ~ls|=\">ꛬPW5{g֮;Ҫo7ӥ?m|m u ҙ7e0M&j Z ^f[:C+^z+?H#U =$A rIR'hs)K[ 1wJ0#۞w$gC(ʥ,GfxWMǿƅ<f[B%?_/4vײK4ưg}&[l4 Nڻ(=|e:eRvho\}oԅW& XC|Կ(7ޯ}_\-(*Et'B !MR=fK4OCDuQӘ,Hb*X-%ܶ ' e+"(kK_7X6 *j uSZד^ab);#=[(!9t9U&m\":M0lQGX&LfmAdaf#ճYVP/H./cJr!Z aD@Wt"}֚Jf*b!|u8b! T^^EA voѠ,{,a_fCfS{k 㯢8O`7Y8gœ a >QxFc3CmyƆ5ҧAÜ`h}-#w&v:<{Z}Y#X]S5-X|iD2-a ߎ ܌H%v[t_F-)V@o ΎKs x/bП: Xn+Lc@b;R֏@(!}?!ds'p+c TS>"xR>ta 7*U $/̃Or|`rqN |M 7U h-!?u_Y^H :ןn9]g=iiHc:X)UFM|4;`LH=5cL-6?|/Y{x%*?ج v6oTHL-' `ŖOGRBKfF: S2Q٫GOךy;sE9Geh\S)"?ÇE?X,|#e~)dVσG#95YO$``n[-O }HBYƥƍa+L9PPkQ0;?@ E"RQCeuOOVe@$l*<֞ ղ&[,(a{y+Rx |ݷq躲|5<2F?&ܪ la^:HGEdT,6.¡ *5lE@/fTW h5[I˙]!$<dx45(aJ4b??9Ⱦ=Yo\Cݏ'$_3-nO"LBaZhmD -Jld`K(yߩK/#k'TP W J ꥹx+T澊c,wQ 8 9S}y9ZA9!zx?rH[C?2),z7L[LNlu%jiД7 blF} oIPSP> !,}I8M1{ s w; A|gDJ \DC0)Ґ]<vǷQC ,.F[rg?QՃ s0}3YVbVQu9eF֨]5;{X[P:<(y \`4JQ(7i"75Qm9ϝ4yxP`n|Jgxok F+yqں s;E\ؔEa@%? NVfߌH_ \hJi)7ĩ?SflpҾOj])veG  "`w o./O bw!u܅dJ:4׸њuke >Oτ(8y|["9b;uA#7Bl%ӯ1R GtزoQ 0G2bnLıNq{YɛH+>BgLz7`0jv4Q8(ދ{]p{D |dgLM:׷"66II\(Aj1_yEؑ{t6V)Y,=9.S[ג4z%վzoG5ZTӂyRns2?I3E  5n>ʟc$tr^;93T?4fAa|=q YyJ hK;{-/nOAms*Z)z-:Vo΂iv*d }^Նh?TC0>ʭhPG}ZY\Ys}1$8aצjEtd q?`&OZg*KY 0YhYM.B@͢xnuV7uBo>CTpd͆VJb7h}1=5I!!EdP!&$d 0jk8?Ex:Ϊs3,UiΎ375pAF)bkX2Ynog×7ϭc\vinC-m%c3k1|Kt 99"*{-9 [nm_7b K>u*q, !w?Cq%x09rnTz'ʭ78 nUMM)n+UREU}-9#fI 9ծ͌kyevjY:tISCIcB$ `ktXff*c\ǏITyY^6@AcH=,=^)'Jcyϐث ! Zf񹄨F檓4ժZrsWe\z?oTpDS$ W37 6jᳯ%/WS@@DCTZ;'r2Rfu.#Eiv6R6ut.G{y)z]s=&`i)h9x$dEʄG^Ɖ}-`\K l0XT_%aB,8#e˯-*oiHg`96In؟ z0 =( $7)eN 8Me{SWXSp}O#jOyG{ iCu.qc`j$ܕ<5nl !UeL1!'\s6}l)WwbKwƪB'N,"~Su&%m{4rcVIpNc8VeTӢHdlFT_YjҘN[IzL4~i ) 95`L8uA^jRإ ~5bLI *&6ck> fBʻמM5 R x@Xy|#ްTǒ!0F5 kIAsgjI5}e=kB [3G`u4SF݉CO X,tH]+yD)LwV#PE;ry+OcLyFYCJWi@טz,nVih#Om8eFr>]'X+4|)Q듛X%$j,nmT?fڷoR]Y_&GDMk*8@u[q~wݔC'l`Ϟ=K|=HxB)ЂpB/"GC,''| \N݂v(|N[Y|MijR,O(!dE^fky{ơk hgа >Ƀq_C$).UBwv9iQi;3 E C $[d\0H%N0?ލv4kTZ\uZTg͘o5 z|1Hyg!`q4  ­ń#oW gWqL|w< Yѩ{Q zJ#MHN7Frr:jlOA:rw m]Wjq}!Pr3*?8̆tV)ٟ&l&ʰ=wntP.+P#Dg([C.&{ϮIt! {#Xw9v֍E^f{#i_!!;5/]}Tv}O>x,ΪTRJ#os BnË{-d{S\ h69FC<` 9mFJJ>L0}[W {Űh·>)֑̍}DξH ~TP-ycUhn&=yίGl?%N㿉# o :b4\G+'kqw鴞$ΉZ4[pvI3YTeɠ4VVErPbw`$L}NCNi;n4-#wmr: VR6LaꪗK]څeT$!u??M-J}'9Tkem%V%?fyFQbqU6_f_וp<?py0/2iS8wq3ѩN.X +tBԧ#\OV p'Džb>@<$.H&* 9( QNr 8تRW/|l 30GѪ.9 jot5H#)8 an9X{?5uBp^1T4M0B͛;Ţ%_+ͩ@'*Ƹ8ڬ_>cRކZ5 x9֢K(04|9ŷ/.Ĩ XJ}UryR,mVb~h65/; fXRX6 3'/)Ew^\H`hs3C s"n(;&̭V׭ll ]V5MsɨS ?LP̜NɐlJ{^;|HDj;}|,4ގ.=&^2u7>lg>y<æ^- *VJύt^405?Ǧݚ& `hHzFMO{E HˍHμw9څqs,IPf5:<q뉡Isx [?1a0O*`\_G+ki9 LmZ 2N{Mѝ~PyUY /9t%{Gv\:3..BpOacz`ȉ ʊ88xjQظLSNo {&JkX7V6 vm9"b_FvÐmCv\G`Bt^u)}Cl1(v([onv)7a眆,uW1fMd*f`E6X~?c?&=Ljijn2^n3Z2<5sY0_3+I.F cєn|#X"to7> PΗ#xM4?|XD%(ͽ:FL BV[+||_\zT(%igԨr90“'ǕleO(ӾDro3!KHr+„ it!mݍ 1$6u>.86\/bڪVsۿ. p3$L^FYCi;jq"m> OTwHGPҢ7gnSh>`|@`"Ȱ&ߞ2<Q*gtj@Bo+uKُ _st hetv4PyƘkx.%isVb3%lQ)p '\s\n|f !e RkHc=+x-4Z35oG+˔!~/k!uvTj5^}9fŌ$zGx~fɨyoULx50RB5Ue1m'9gzyxKv(JEbCXłsQ&FA #~A_ [1>&E=/rClAPMگOTzs.>=X|in5 턢;r:Uްy[js0K!!F#:0[H9V^ V_H}*5<|~v-I X4~S S}/#IPF?V<8HV~##:}T (zlAAÓVZ9H aOjpTSf{*dP,/ )?[J ʣjBF]UemU+|!iZC a~,6Csܙ_F<,~Хiz#H8Z= nZD!l/oSo#ipc^Z+l<+&xH` *;q ?[9 o{_mP?{5櫣ǶQɰo Fe8.T0NZcFtqYqEɇ 5i s40 ,DC/L ef&5=Ϯhr:S!K&69LͽcQ"|@H] Rz>dAXm4DrK((W]=xK㿓HksڬCs ĎNFh0nHnjmߛ4еaM{@`cR|B f@3:\a䫏> C ŧXd٠I$m$y'tjSoψTi9Ic"Sd] RpǗc5S|]CS LT 1yPtOP ޤ|/ᬟձFf,=>6ԯ0OUS[<VH2ìc#jKhů沤0|`[ qloط nyFӷ ҨC,Wwvb恸lMoشnŤojG=9TlJ\EۙW Y_M hDFj\>7Gu8EMoླྀ}倧,Js8-P!fPyK䖨)It_huraTCTLдU hz v$LaU:)ݼxMKG}fGP%ǐ#OU]7 MΩ-O݁Ej9U9bд^RɩBn˧v_]gpX;lWFsš?yw\ˇ+shfRf%<a{kOQ r!l+t.u#?,x\uHFS1Ggtl(RIy)ol8HΉ֥u Is~vo-ߤeiVΫ0ʨQ#_ΐ@N('4UWHq `}%f`r9Tad o㉮ @c =# -ֹhسܶ.E$1URzȪ+):fq8Q/+ԓY"uRJp/b۱h+sӜc)^1K[**3 Eۇ@Męcmzp\%u( P&[~!-mq,ѼdϲKO/>m"`-Tɩ_t+f$ҕ;hI?vr;¨7һ$SVZLXP`Syw_P\Xo]Q-ꢳ'IW?i>6OX<|Uw u`Ia3d@ȀiPnL[) l՚ʯf9.հ8$-tnص Z;ls6"βH1V  @RtlOMإ8r  lY^FKK yt9|kקOwaNc䜔|CU#>6  /@̝mSRDWe+`0:y!c<59yİZr(8k9I *KлzZk墶>l٘,\A _3uW!SR!Mΰn0w0yMe ^[x0W(Mjo:Az.egC8Wb/UV\Ճn ẊSndt`fZNoϡ1 I yjXMc[Ug?E럥yz|dp$Η(3CB+Cʧ=5 BN+>qeUɄaI 쯇_zJlhqY,_]pe$qFBBpScX6tL֩W}ē /~$|7fDњM\VY`)X #+MȌPf6y9;lxu!1@ د]?jIԷ9$Lth%r]/&۱lⰚOKXMh2D/0r4ڿt-3vQj ̅8Pl#onSp@ER٩c7hFcA=2<|g_-m¢z3927b;U?ذ!g2}<-Y tx$6 o}B |(~Nߞ1,`^a^oX>{ ZX?s4&}Z~޽-ˬ&ז􆘽$z:~U`!2U]\F-@o4bPGnhE@&9cQ̓O{kzߡ,tO:MX*BЙǝ-Jg߁)gHf v (LA񐣻-|@fXU0Ӟ{s7lw r$8}n˃hmC؆N(~dA2:f"X&r]lR=͖b[!s6@IʕF&+,svn%|($8#.PQa`&ve+.੡;#I`;O-P=~{]\,CXJ{:ډT#[gkM^(ANU w4R~}f 1qcL2k3񀇘M.\TQ.Q,|CGR  {%oL1/q + osU[;E82?^x \?_6CϽԑܢ-|w^UL40Wâ*tw[UZ%KC"Z a͍49]{1gEHJDK4AN 9s C'e%:}L =Jt@vml@gs75(p+qlUueOnb/%9[dc/vYRI%YeR˸PW HzL6+[gKo=XNb:_q?pԴ*%4^$Gb)PKxga6%~byFɩ(#拜Ӭ{)mD!H9YY#Hqs!lU3d+-@^pH;*OfkBpˀ|lw0YRs=/zK_:JCK׫e;V'iY8D'+Bʿ}cp7ORfA?kDRǰ/*Լ-(4kzU9 ɺH}3K \oNBꌲg wh,W^p@gSx:'y^Ή)NQ&Aټj=X!Vn l)M;pXvk"kCIB,Y>'rf:|ދ `jVׁ6w}]x:A[t>Mr1f*r1;r筮*M~st7N;>ԝS:#[W'>ZI$3;<>v әXt&DW'GMЈ|:FfWZKg^;ܔXd{{7J@4qR)MoJ`KDtΆ <A0)Oo8RI2T[*yѻ§q~)~"SD3sGmp 0$]x甲=o+xRߑz1^z2tpτM)` Rd\VA˂.[_Vŷ"7/gp͌^~}i}"Qjwy 'EAԪm3xo/{ZA$hWTSh;g¤Z3 *!C@dŽg#8M~Ěxe!*"m3Z6ſt} lȐc|o 3"0r#2W~ ή- NdHg(0a /49L:1~VoimU]̐gqO?ԕz\[58y>m;] FRf#yd h;F>}x)C YM޾sxIC0͑q$toKۮ"x?LEH t0g.6=gL q'5}Yzs㌽\_X)Ms-1`4]u<;)ż5sa^ +' X8`î.xT7V5G0)#Uo/h͛p \TqγΖ.[&y"!7}MZϠi4)T``.lщaYUX U )0i{7Ll}MsKh2L2qFxj֭7*fmȀ4:LvUo4#Go8W9Dkt=ּf%1FѝH5[g@6T@UF@ӵn-Zi G|"ķ&$Q=~ P(oG$/L2 $zY)0pww08]qtZ||q֘eEMYH՝h0V=Īh,-+?˨gWxSgXJImՕgIllצ`QὩXp8^*?;Sl2\K}2W"0z.h6X,>[ʊ/ٱ q-$!%V/ 9zj3I mإqy|( `=z  x3yNDDM&ȇ>cq9Ш: r9ǁ0g{? %tX Q-(2?lH74=r)/\xR 01JDQ8K`]$^Ү7Մq-tLjR%-nϷuOutG2:IX౥6u$˳f:۠RV0Sph /A"P$H]vB] j<Ӌ8/j>l6p-Puʾ.A7}\gsnhj-~FK?t ]OOt !hʔ^42i+C6El?kF;%{ tvEY16q+АM9%šjj 0 ѣ0nlc=#bgR>jkA9+I,p"𲯞t[k7lѷl9dWλ/W|jlf%tjœO lW~}\ebv5'=i4|$(0͝Q NZXg::C$I0L\8 ֞.0o膀4S<y {فgR &o5&}M,J=_.>hWu ݜ"xV Rm4GUK $*ăEUv=xprPϨ 7&W\"Oc<*j^[8=͖sD*3`bNj~5|a7i曰|)jVF–dJ,^u΢DduiZpkpT=AvxE qRRO:JIkmȕ${md+$ofonzk1Te @ abKĕf,Ǒ\+|:ϫڸbiHA4z,>6JM8.]yB(u 4VZ%}S^DS_d#"`/3p(yB[$3{N11ut%&% r1/$aCWZ)Sc΁aIᅌV$ $/`W*BwĶ/`Ur s}5%pM]\*j"pi+Ę#0Y̔BhjY{9n폎Ǥ DfЯb`-o݋ē`{}$ϢiبSX_+mL9#,r:\B| QXN;5gpzAAؕϰ\&X\WyYS0|` SG>œvӈӏë7n%]=fԮ+;(Xo >z;4 ![>=TاūiaP2'PpNV׵}d&x\c/4Q6#9Xu},  [ r8sGϠf>1=QAg/"c;eޭΟS*"ʇf_ƭKjYr3pXƨʲR7Zj9BR73f<H (d/3n$yfZ29=Im; 6 3k9:]}Da+(bk^[Pyy]1c{ 9a~618ρǽ@Zw0uy|CCMkdr,xQ* z6R4X@ogm[¸\Pߞ(Xkg^,S#AjY"hֿ92X 7P9f7",CQ0R}=VqrY S—ln3ᒇ)уNr_6'h 5KcPw(3%g5N31$QN]eǿu" Y>:E~sPΐ{-ZW .KP Z'seo'!]dKAMW$v9TЃZ_n.U$2biu$W $ >nUJzfUBUU+HovA ;8t,T6l"]KȢ0`)FMzyױO`F1-hurR㊞AMps`D 3>9t Bj~{Ӛqە(߀d2J:TM _5: 9,beAa+J _C(0Spޡ@Ir.AQh" 94%<38'Ul%ϧ.xXc'̌t4Ř[-GpF0 hL$zEV?i92P|43;1s폴Ԭ_}rl^vA߱9|+y׮pRsE?MB_2DtĜZXhe}SIۚd D<H46LuZ|7_6ov gA C-dFSW/; 'Ux2B$6S("++|% JttonԪu։dۓr6h=C" g=-Q)9O6jZ%`Քv%Bjxݰ1\[D> =hl)b=ַIW{3mi5qSopLN*Ye3f74L_IHsyݺ_s*%%EdҋGO :ʮ0v4sj0'x툄p#R D9N>гO>>8[w;X<&eBe@ j߸d*Zk H‡ xTm\&V]"&˱v*~&j 1*HI,40װ^jp7l^|kb&P-X/鳌i6S14Z(4d? 4 aCJA*o.&AtH?"HDA[{~3(HXIC'\VP׀ ?iryr4VR9Ӆ&?vݔC MJp\sϹ6e1{@Ic p,(r[[KUCXo?RC1xbaˣ2yyߚZy5wEއH(|[P'c}ilE:N햩Q'{ O+H*]6w.:%̻RUmUQh>^6u!H[M&fQgdsH ЪLa<'ة}#,`F(Vk{EH!'V­@gu| %]-ɓLyY\Re1@@M;3+ݦ^K7E ^lkufoּN͉} t='֌AɖPn[嬐 #Uc=]|yA$󌇘4DXM( Cv0™ln? r 7os#rRxLKl{]363-jocWjVAڏ/o?m/-+Э7JK)! ل"Q[w[HiaIt'kHk i+ Ū&8 77GAXׅ*|gQ]Vjԧ`/ j}D:`[v 7x80MdRа%<6nD~42HT< U@<}L;׽G>bU֏ aᶡF&?8trA%fJF|؆"H3?%W,]$i1Rû`6nX钫*ze+0Y'\*@[zsn;P@[1\}u=6 b44`civ5lA?UZ Dp3]=1ȫ/^za r}3YU݊-gާɔXe.c}#ɟl8+麟Yfe>#Ar#,77=,Fף2HX'L!kqG"ărD.qaäR'E',c詳L>MٙP\sBI(ܷ$m4rT*甡%[X yZg2x^n d3쀀tutL#'e,yۑ:\SZ{Բf珽hcߦbꄩ@0^_Ƭg\m  ic9m'W2 " aZ> *wfJ+o$~um4 =ْ<7vҸ,oѬAjv#>Aњ냦H(pRzk{ljrQيqd֗,FCG6%^,%-s2ʚF`,g8*Ч)Q@2yӥ;z%}_ h%,/4P@q_j]҈)G[5/A!qH2ߧ y xeԸ.csGc3ZL(sjT4knV̝=4E;u(K.ڵh))ae %ۄif <ҫס[,N~5r+Y`YCVZ&֩"S7+Z0OM1]Tb'7،ZYeUBhd\tK\/(7b~x"$ʦ,J1S9z#+M $6o #m6JFM }A(azXEhǧ: k sZ6Tp`)Ӟ]LʄDFk3x2-@/]\ږ~ʈ@H= 1k;~Rw^%N#|q$쬬47h+q`OQ\)pg66ɢEpk[-GRbrRsޢ !Պi3 ʩ An6H4B:[a?.82sKp| 8^3G-m7IMW\ԮH 2$Cm.M PTWGo'!]= da݄/\;{8rYal(h @%mUnҪ&>?㤧^]1i]>_|xKBMmt~ĵ Mn6Nbq)§;KDsAIvfo60h=X BʆnJ="5,G#>[Z˥em)8 ^Sy HW1C\؎N1rN۔z3V CrZqMY/;gE(&mM掎RJ;61VhhR#̒u>RD:,JG1wb/i/uew# /FcgrCޝ;HPWq#rשH=,ebtڮG{i~PwNv)'7$ƪ=},!/zTU[4tWSmA){ &0[" 㾑X.aw8^:JvA'Q\ 5SU/o SZ~ȣi".!wԾ\oG W $Vk5nsmqM$B[JQ %@~cDILSy:^3#qsu{3 K_hhQp'Xok\+NxXF G3voyLv5 }4"c/U4͝ݶhdVp4BIM_H~F;a= X!7;|o.aXQ]7f^ymᖼc/H ufs [2N΄HBoM ok73$ ?t9X|z~0q|˿ <̺;Xa}|-I0ː־&^QqH`Nu :ݡc_;wn aΚw*ES^nRGqY93ϡ ԗ#Gˆц4Bf{!3*>&Ar3K u!›-LTpvġĂi(\`v; ""wCPE*@ZgPG :+-ʑ2KMD!\nHDfU:漟?<ڙ׊j,6NԿ@51“RԔu۫'D,fBS7˺Ρy$mxK>-.ߥAwm]F_M:>d*F=꾁@ xμ OQiitBjk!?^d!Dl5ުM󸃟@p &Ȍ'0YcZwV$v3Jݳ!64ibD|dEK3.+KC]+ڽM('/U3ZhSbQv)|V`a0ˇX7=mU|Rl(l;nGc}uXհ)EVpպx3 ,~z(N{]N+PȌ|enc:t\ 5֜r o{^I_T$?gݼQBnP7tLiyfW}pwm*hIllC3Sc CfKPePALJغ6 b+n4Q*iul-ǀ)y`"C!էZ.c@NscB")qMLKZi1Vl )).FYU&vOk5`>ѥPYfЋI)HqPirlCMb⢴V"I>qB5)!ދ\k7THORMLd4!E홣l>X]ldʈ u P;AǘM5fYX\eꦏ[kw/Z+'?OrL[&4>+oaٓ˱*"@S+ mMY!FBtP=g>4S@Z#.a&{3E]eשAQ#@%}b+͈y/1zvwX'U>fT-3UYF焏Lrr.|t@bQkK32:T`s6t {M2&tz.db?{6rp?a w`_SadLmt[-[s(?yN,;x'DvOp$T}3E.dk;.JBld/%d( ^/jgbG_'ar^j:(0U z1\+[eoAR¸# .kɟ?LREH=Hf[:ct#svG~sTDgNrЧʌb~ui͸w/U"rzM1{pö.%,+,p OWovaQF+&lWs5bmי jU2`{blԮ-//gh7Fn TH387) =LҢ޴it3;&'ܬ}8 6>pfBl`s;0o5AB[v3-荑_DT2Xڪte$%xC꼣OVHGmb:{'b,m&LW'sSVK a? LƃUF촆= =t'{WkEC}栶Pg6d?yPO p];1gG]k<- 3r:'ةww졝~]!i4-Z"jp,zcH=X#rPB5]Wck?c}ޗAOgC6J~ŶiKfru^ gI~vRѸY&s)>g CCơ:Ѡ~J=~ŋKCxq4b~:r_暽j\4Q&8sVR꓍~RMUUD~)6jn1V ,\ЩϜ1v'٦,h.QS$Im ,ܕ*;^ܜC|B74pnSLo E ϖl0ytڝa8J[0<ìO(A> uu@u%1A~@sq!dOah诐9ؔGor* ?`3bJl=BgH\Vee?VR fXRCN| ~Ϻ 1^( qTVYb &ޟYz!y#I*Rv,U^4c/ c/-6|rd\M>r{4{PˆnJJ *9Bu~QaӥJpig?Hk8RTf8m@SjG9 0 Q9pRX;4m,I!&4rhhhԗZ΋aEx '] YG Fk(Y3?W}! )YXRޝc\o `J̔y$6&6wЀfco]# % L*gհV*ssw4l+GPhim ~nы@x€ ֗GIHeZ