krb5-client-1.16.3-lp152.5.22.1 4>$  Apam./=„E0<DF&_o}EfX,&%󷟻^ mm#ÈKAC@OR-?+͎/t]upg)y_PLgMǤo2JE+Ǣ> h>h-uORq!QC)G>-PJV DT7⚳*vm#dyzۣ_PL&ˎ1RX)5t{$ISנMiYW%N*%_p[ݒaBaպKbisv:PF{b|~+d&[t՘w={U'GiLV,kxT݄K9Ut+!yp+8Ujl(<6JÚIx>pA?td " VHLX\ox| %x% %  % %  %  % % a%<%"""(8292:2FotGo%Hp%Ip%XpYp\q %]q%^sbsctYdtetftltuu%vuw%xT%yz$(.pCkrb5-client1.16.3lp152.5.22.1Client programs of the MIT Kerberos5 implementationKerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes some required client programs, like kinit, kadmin, ...am.{cloud1284openSUSE Leap 15.2openSUSEMIThttp://bugs.opensuse.orgProductivity/Networking/Securityhttps://web.mit.edu/kerberos/www/linuxi586IU&%eU%%E5%%%# =T*'8M IAAA큤am.nam.qam.qam.kam.oam.oam.mam.oam.oam.oam.oam.oam.oam.oam.oam.oam.oam.oam.oam.oam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.nam.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../lib/mit/bin/kinit../lib/mit/bin/klistrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-lp152.5.22.1.src.rpmconfig(krb5-client)krb5-clientkrb5-client(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shconfig(krb5-client)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libcom_err.so.2libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkadm5clnt_mit.so.11libkadm5clnt_mit.so.11(kadm5clnt_mit_11_MIT)libkadm5srv_mit.so.11libkadm5srv_mit.so.11(kadm5srv_mit_11_MIT)libkdb5.so.9libkdb5.so.9(kdb5_9_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5support.so.0libkrb5support.so.0(krb5support_0_MIT)libpam.so.0libpam.so.0(LIBPAM_1.0)libss.so.2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.16.3-lp152.5.22.13.0.4-14.6.0-14.0-15.2-1krb5-mini4.14.1a,@``e@_/@_^(@]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero James McDonough mcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Fix KDC null pointer dereference via a FAST inner body that lacks a server field; (CVE-2021-37750); (bsc#1189929); - Added patches: * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222); (bsc#1188571); - Added patches: * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185163);- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196); (bsc#1178512); - Added patches: * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch- Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079)- Update logrotate script, call systemd to reload the services instead of init-scripts. (boo#1169357)- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patchcloud128 1634545275  !"#$%1.16.3-lp152.5.22.11.16.3-lp152.5.22.11.16.3-lp152.5.22.1ksukinitklistmitbingss-clientk5srvutilkadminkdestroykinitklistkpasswdksukswitchktutilkvnosclientsim_clientuuclientsbink5srvutil.1.gzkadmin.1.gzkdestroy.1.gzkinit.1.gzklist.1.gzkpasswd.1.gzksu.1.gzkswitch.1.gzktutil.1.gzkvno.1.gzsclient.1.gz.k5identity.5.gz.k5login.5.gzk5identity.5.gzk5login.5.gzkrb5.conf.5.gzkerberos.7.gz/etc/pam.d//usr/bin//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:17064/openSUSE_Leap_15.2_Update/8a03ca8e2020548530c90d5b784661df-krb5.openSUSE_Leap_15.2_Updatecpioxz5i586-suse-linux ASCII textdirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=2bb61fab214289dd0cb0d351f5306cba0e7f4432, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executableELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=b2357f46a8401d9e0fd71b087c5c16f991f52d6d, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=56e1d20cee5848a37da408a6e1e66f8906ba8ed5, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=d6132bbaae082cb935d9db6ad4577618868d05cc, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=2fe736f3b9dc899b361f4e1250153f4efc0ffef2, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=abcf91cd4327e8c95d3f4149a71424aba91c79fa, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=bb7a276ef28ceab2dbd23b3294b536b2c47cdf8c, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=65e9e4a9a9a2316aa27352982b16b18ad932c9d9, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=1a625ce9c3dd823fb22f3c98b2eac81a4e62a343, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=ab9e91df4f9821ddfb75632fc6fdb07171c40c27, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=3fb8de4a7ae46ccdcf20ba9d425f4166764d9b78, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=0b85644cbc3977fae68279ffd234bff7b30b3131, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=9dd331871edcb21c3b7d42be770fdbdafa6a5fe4, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) %1=DU]js|   RRR RRRR RRR RRRRRR RR RR RRRRRRR RRRR RR RRR RRRRRR R RRRRR RRRRRR RR RRR RRRR RRRR RRRRRR RRR RR RRRR RRRRR RR RRR RRRRR RR RR RRRR RRRRRR RRR RRRR RRRR RRR RRRRR RRR RR RRR R! L*9Rǀlutf-8c6c79997ee4a79b44e45f6fa9dd1c050dc29a943231220fb301fb34884fe82da?7zXZ !t/] crv(vX0qOM6~DWN64pY9y6) I]7ⴹ}TAAI&v Osh uYLNcj 'O2]}pb> Gs1-8yVӀ>u&_zmkXܘ:Dӊ}"4i}(F8s4g O `DՕWEE*6L܅8Ywrtxm=S&QP{xj1M3P?టxqа d@ifjR-%c zgV~n|;*򭐲4b7|_b>sLpk2L}Cj#"WߚAłIm _Ho17MneR\GxF` W--I$Q?DNKk1)ł4$)N\?!!!&>C 璅D*dѝv8*xm ej(i$/@Ahۆt D?Rxҥ%<6w-)i PaIK"$ nqYm`?unf:zƑ "B gZe 0|*I--v)bIAo/rHή~d.o`H9&-W_Rz5չ >[Y+̯;MJEjM:*9xEAȆJMץB&t.}.B%h W5 Z܈e3(-5;i  DzDZB;,yCRZ)Hr<o\&[\Eߍkb1IYNhO#-+? J+@.) QOf춄vy.;v_ˌ:ř2fFf@)&1bTňLy0a)`s]g$U@E/߷U#ٜ:\/H^Z NSn7֑ĺf',<)pF a% k.A 5.F %qfc[N9REJ'?w1Dc#EBG#zn8FDz+wP?y"[+ 2@Beb[2Թna"B8sZXܷi8(*Y:V[Z[*/!8.R\ԛGH'v8r^ġH@aKU@̀R&D?>ub:S"ZcҴ y=$_Y=&|B5`gRh1I* jo=mo[o: yy"4C-47Є% 7x3ո馊S4C78]Z(Zl@jtuA't@PtH Pڛx#[ْ9v8nhGayZO]) iĎ>o N"oZ٠s dwsK|yɮH!kW>)QK@Z Gנ֎ s =)\lj빁ѓ5HK p SX [mStl 2"sjdKz[ZvRI-W.3zYo0.~Y*hg>epuC:q'DN̹|7~zOpG_B:yWjux($93G\n4Ƃ%IO0^F/LGܶ@f@iV/$MPR7(891ArH 1yߙJ ŏ0{w%UD@auE=͏)&ۏ/bIlYaaa +9(xxŽw%Ƽ䬵 -W(wQbc<:+~ l .r c@kSעmްZ$?Zȡ:B öE"Z`vף5ڂhq2=X,P2ckM 8o~9^ia094CFYfXBjR4A (HP$y4H5Ch`ųΑ%뵯0AQ8R_+4N*q @-<%δצrƨ$K:r Cj$Q=d`0?u>'YbнeTpljo,D紨3U':bfn֔eݶ*M>8BBr&:\"&{WDkVi2FL7- y&# $2n)bKOSd סgUz&>Z?@@5/T\%g!%zDؿLB-TQ-v%!J UPo`MfMyӌ,>Y ]I S>&C$pg#Ҹ'uHFFEDRtKp[-mb޸MuX+i֨P6( MG6csbE\mP62 DtH-駈lN=UAAy?SŷXh7zTh{U>>D^#Q+غi6tOjd C~-RZYy27]},i/QTm8!D)k`Ȧ%sV6`aHò"(Ix0>n3X:mvQ}pd5yKȠ2mȠ@ع-_Uk)h< M0p.%:y:_іP^ѽ8*?/ IiΜUFpZ|Bg+2V|辌Ҥoyb b֦5j^Ğǽe>? ?gMQkl<1lkʙ|fSK ~Ch)ت^QKs5ɜJVdbBJJ2%:=G&~!'zvZܪ-\Xn:} o^ˣjc~}L#Q8}Q yە#Eى(XV?"$Gh)H'PT`ʖ(E_H [/E-l+/Zt]:dp#7?_tzx<Ļ'=K UM*U {bG7b@#>5 sgJ( B\g AP"LCA&Q }-_95ױ4l0u$sZ O)epxgZ&=O@x nW<_̽esyj0X>xiXsy bWNʆ'XeHq9608Z.˸i]lRmo;/N܄w/ َt}͛ :aIluH$[YyaEvf^6VWZx_{ %hx[ ݕ^e{nl *vR kYNz3z3 SO3P诐TP=@LnՐW> 67OϩVk+UNh[k@ 7z<d],qka hh-jj5:m^  [yt뎻N[[gr mkߠg%z->mr:eP!2TD5?f!zn;H9oVaͣ CIRc8pA@؜[v1Ɠka@\$md2;ְ(884'l-/ަh~Mc$[5 vXRYZq[h2ogc7]!i4'{<1yP rR_?J&."pM#XXX-o\mQj?iZᆍt!Gigi5N!W 3VyPIy0܈D QfǕeV  m(^SGj4K3؏BFn*ā)%A-Oꗄ䅼J(l>ZXQrr [UiSIH(AE(e£PLp.Aցa~( )-5@pơuW|]}%጑Mɉ J??u5d fOh+´dgp"L艉G5Nk`b_w| u֜ Q?Il)Lݮ<ǂtF6g$C j(0 &'p!hzn :ϧ=^C1jTMa0>mq G˟LR 4VÓ:=)"Mv#B+-47uкLZhb~,@[ [4NIK{bP!~ 0SP"4^Oa&}:S0 zI3JiC=Ⓡ~q"v "֩"RbuT4>Fߚ) leQw4GXqA&zmKA>7[ܱ^d[UXI2 Z6gڬwd_~FE[(̵rqdtl<<"tTէn`ٺ:1J"8d-)<Bo_ MnE%S4>BzkS:Jz$W+o:!>~8Dk,g#1W4wzpm0]U"A"~JNϮOj+:.u sv!D!3WԢBqC_Ģʔ|p=|Y/BM ؿcIxW2-pE0/PhT/C"(tG~€H,`´Aj IsWkKy3"Ifn{MJZi ۷ Y;'ޢC)fzH˔0'HEچ&S,j1 vVnQ3jk O»|>ƒfȤ&'u"0 4 c'+8:o({9OލI`ǻZr 1s3+U]mxخD cά/ ҉ $ ?tŹw )lC "Z<2q} l5ވ;?:&3W\h,=lf{/{!)DҁK"cs-Aʴ:28ܔy oNh#y&uc[-9vsY,P d#,~òć߫Em7K2(rISX\AfxyH[j򞣤;'#$Z*I O ]<ؑxȢlFF@21K\] 1$?v dָ,3gbE~'vp ;fʮ䥮 Pitq dł;3ؕ_xYEvrNU9xpb.@VsZ=!i%hW Ma8LJSyJ(Άg5ݹy_VP4-;ϔ.5gρM6#g{'}V-EBB5}K|©D88O6P q~g,|L;\> 4H.(ffRK>JUѻR:Qa&gQXR$t8C!_Ұ\gAـQ)\] á== OwvyMRJZӧ3,I0L}U@pROsBQia?!s\wct2U£ H gd7C;~jHۄ.%*]#*sf24g<6CkxÍE V渉^ ~k8]dB`=2:KS4PC!suS=\5\8u3g(hKy 9tl$~fNO5wXnnĎi$v,Xr^4X nih1p.fU6S"\Odr52_c 2_"*YܘKcp}PWv2(Pڣn &$byXh@ƾ&|K$3U>]I8Y 0}k?C"W i19Lg\01ǵs"S#iŻϴ[GjbvZX5%]!ȕ p_;L33 [1T@$SyPuJn]D=pzr{5lj|,km`u K;ޮcW΂w3~il`_tB.;)9B \x>v͌y~6L"f`/ֵGv﫾qs{o@(i@N _AC"Dh;|0P^\n2;2:/m讀\5ٺ}M|JuNo닚^. Hv_iݺ+]N^vUQlP'y ;z}b!R];v)+J|3b.#mءQ[6Pkv( k}|{1^ۑܐ2ޜCƣD*12p ڵ9%#͐{˰SU֮RpVܓ Mhq uX \*᳙:ƶϗZ.qXʚ!Hx!Ei.v3yQ;cUx)rCAaY`OҶ#XG ?c)W}m{VwKRx rMY & wRc@ɲ*0~OuH X lOXQ c.cCLTO>!Չn'@98:&:[Jk*; u$[撉SGx V ?9^ٹ3 bYguu8o|Wр;CҸSIz^6c\,2q3〤AzǓ܉YGx:[ac{^_6G%V:f7& %r7kK,XpkC̏e/z4گ]Q,Jv)|s22 r \ fY솙ڔi1A?M;-JRxsp?&HΔ=4"ͭdxM%n9Dp^ eg5=\3[v6Id u?놲$ѿ̰tn?@B͟ޮ2B6:)URlhHzy~;|2y='Kbqlp0|M]*w$ʎYکǧ֊^Ojh2P(脰1Guy$H2$ooIYX)̕]33;r{z9l$E`™X -^r0B#oܨ\ƧǨE1%Iޒme譁齆=[:}9 Hļ"-e]u%yY׍"VlE QN{Avݢ6(-A_\W-|(6yOi=OYmH#2ǫv;:/կR6 ;fQNyF%xse뫶it7,cWbld4*-3;FbMіOó[>gkU&W|Tp?HCS&H->ȅS 0bj+ؙnnX=gɘGQ$GZ0qǴ7<㳢cMF,R$C@4F"# (OnȕIv(0_6AEmR B:JxO;-bgLu3I)a0weOK+1iև{yYK:#}D(-:  ya ZO{z)-%qɊwzqFf$Å')sAo2N8TU,8u&=bHDF=l4yM+籓yoԖM=MbOJO ;c]VYET9`UxB6xF3ZXaŵl|hvuim{Kǯ~|U7styE&O U4`_YEMnDՂL}ʿ ]<rަ q]}t$/c>Ҍ6(KoMc=+r~?5f7M6TƔǹ.J"kޟFM[i.Ҩ ḂB.^Nϛ<3Cbf)SAanEV;2pYi=3ރO3JT^m4P!) Btn LNe 5kuӾADŽt/ ,eg,2%pAyPLV4yv阭͐_yz{ )2B̤W㜳j `>h2q WE6- xVz= :=tckO,wexR$ bLJGc߼[dze;^^闧F8713JW#|]蹄>GdlvػуW"lNGj@l!,T b-mPpk?d#(Kپ~°jqA/ {qrFyLjXdRV3|7 Wc|]DMFZNjС)(@dO.Վ ~z@3kgZ+䎅A|GmTTTƇ+ 5XN*z}59OR0bk!ĸWI3 /*N:8|ϖ@vXWWC{&=cWB"dޒc^b<7}XƔdC30z HH% Ear[WwV<֋:}gݖ g{em t)jtીgVnU"漯tUcJ@Qdȑ)Q2,3?K ޙSL(o!AKz}TӊtY!m%c5G(#wJ>uP@;SPƉ/Fԓ,A\AXh1z?*K okQKYo"k;bfHxA[9q̷ẚHe{c=iMsNjǂ¸37||F32cp&ŤȰ4Gbya17FH'LQ7Yxnu!LR> rDYy c~_ɝ :˾Cl3^*w+?I-{'#cn Wm`bjt#jk80vgrJD"lUޫ AtRjw4S 9D G`4YFwӐhXBQZz (NF+_I?/@̙F|`8tէ' vPk2^mG/ ѣUYC/#c 2SQAMbe63:8k΅PkA| %^OqG00h*Wx'}i~|`{nR )WhX/z[֖lZ!Bo~{(>gZ5S9)RFZPCI3*{SVӾ{|]n<)O4 5:u{di>0~1cp4$ݶ`[TN0S23гeK:[)jZ΃)y &vdZj䙜Qc-N(_)yH5fap2~[|e韉(WR+~>uA/ 6.B&{\"'eMpS hؒ5)[ԥ+:CsYR-@( 4)9VC.AX+Y"|hir=;O:p@\_П=<0C⡋ӧMJt"1cE[q(uF~ I>E$B's]Xgs۱Au`B$^=iP{ScO2^>bf!OQG-f5CJ%fo]Uwy3lo68I̱{K>a1EեA@ (<>sm L[T7fe(Au|H 6Kˮ2ɟ(-7TS: bNJ͓i)q +tm1cqEKW15e]Axn@ڟF nR ˆaR#>C1,r)mBN*FTTo[m~5Cm}ׅGn"b&g`,tsWs&Pq,%k 6  6A ۮѽb=ٍ Egϒ)cd>9c5wh3)z{|I,dF#m\F:$XyS&ob, GkC 7~qYPjiB1헼wHA\MZ{NhU!*H mymSıgDH> `bG_ukZ$v؉R0O0fPTn]f2RP9Bt6˵}AD:WTb3b7GZ#PpNx+ޝq Վ*r%y<Qͺ%*B0vg$E7кdvHI M喡[4#Ѩ Qs/ h\||UKn Yo#G:,bL4CH^MΦ:2p+XprF/@!l؀v1; rm7 hD`~EvVlw5f):2fX0n m;HҨu/ ]$#MyX^v@Iy!^r㲫<ٞ|yɄurJsshA'-m&At'jMcš1jq5J"{8ި?g)qp,.FC¥PT-1tgl&;4 BljR22$`ݡv_PԻ|WUv7>ǟTP$ iaDĜ=" LPuo)uiRN1zCtכ ^(l=qjFvZϲbᕝtm\_<&CYa1N3Ql3 ,2ϔ{À1F+|[$ &~,W]2@5X87lPv.N.U:xҟRcK,ob#rBT\&,:5H}H<>Q۴+9/ޏ(> \0NדҨ濟\IGb+(e_t('y.g<"+k!8 C\+gtݱT]y9G%{[p 85o)|љ/y9-d {EYO$z[)@@BF$=%thB;*zb' [&(3d8ЊJSTd\]Č0UM?9Uw l-Q|fV Yה^샎{ݫZ'Ta'O8RY`0D{7ç_>۟)8[2)=n;q׳FVGڅ+%&ԾP|ņJ8V"3Aco~Zt SV"99@>6L龴 Jpq G :ilK+7 jצڀVA#\k w ")JOX]^iPǵB0@`;HDfЂC'0lC+${NVWS&iH74H$F1OjƑy\J`p6L2j^Ks}|Ωh(4VJ(&dEzi`NbGO{}"=ҩ ;lb>4C8n!"i1?$B ݹ0~XB#77w@7:M_HO..}/%f0}d3 .-!3&(AUIx%:@GT9MeÄkB%I ɍC B2Iq.!2p^͑0;GNS/]f:3I轷XT9Yl]Ii9pp2,@C_?c/3nvhOAVLjDC{+ZKP``нkKM]y]rocHpaՒϧKNr 6zֺNRF%#ue?iHjS5&QO RUupns vw=,$uvBs&)ef{,0^A{g|Z;inA *Ѧ|We,6 yFW }8=+Ra?86/Ga4%C$7](3c" DϭoO,oB - W^:;l&X'Tx4>ܛ1 s%j`/_$s-ʿ@ ^j~`}PQY=&}Ͳ zϩo.d1T . cojI93x{SBwJMS#})?n jY+LQAX7 &ֵp <@[bfm$u#'T?|D!ղ5.Ɖj}}6EɢꉈU(..s,$bwpOþ%k&4__︋>#bȥ#jcrG~eQʌwzԶl%y&maNEN* 9!B'hcr? V\sK* αZ 3{]]ì}'jTg@9ocu;["'K7U H840>hJ~rLR;[Vp{gbiB4d6$*i70mwg(Y@2 j˭W $%Yj ޜv&3g 7qNw >lNņIFh,V5f94 }l272S Չx;ț5cxww g{ iuLF%? z+L .4HdluY1;/(Cl DMd5 t~U:zᲢC$L[F [bX?Η NfӰVŠ}5; J ݹ;W^-(260W\zuؐ>ts4D AB8biml)WzQjq`AQWsm3=یqsyN^CruN[hԎ2U>Seʸgy:w=1ғX1u^@X1bf !q oض RM¸$'49=ʠB/R` !j T ˞ӑQM<]H_`n;\Q5 ˍ<|zI_ZI u_!M>Q^Cwyu!b^0HjaYrےy4%Yhpe? 6v@Ѡ>̬i((ϵ/L&u_rΕwΘZ(d2WJ͗EYt\ ?=M#gxȺ<#}+$ܜbN ̴TY;V'@!5GƹL#*:4/J+{ůjӅ~>DMkbT3n2j'lC:ۼCB:(y/*7A)iNf\k"S.AVDͶƦ;9cLAa&Lx> E.s `M,%U0_ˡ$8-/%_AOpVԖԈ]7VX>,>s?GkN5[6,`8b|<Y:[VSd}הt]•3xi6c114\9e&pZy ᶿ^x:bcQ @cGeWpOa2ո( Hjww ~ڣODY.QJo#ήD$Wpasp'?c޳YݪUuk_{Qt`6T\u#%x\XIoroޮbaM>(2{#)3.ami7rPِ)0Jm.Q&dަ3 0fm*ҩ[f\,k|n)osi|{.ᢗn6zLrT{||4ZN)_:ϧFM zΘ-pg; E"K΢KsB)c`=:~Oq5! 5i0ֲ!."M zYՑ3BzqE#Қwv%sP~p`7צ&@Zzdfp%졏v3G&端oBD\r4mu[K3* !j0|Sl10:3 n݋[}̊ؤht#Ͽu8C}\ST2l L{9mV@qbt:)R- F:UUbzfk&'RXҏ5%;4'*4q5[d ”4c+{WsJmMtZ_K"xՌ9CoHؾg㑑,RI4^rU ISa̳Q{id:bClDBv#28q WjVHʴѐMB_8\m"3b,,AOzߡDoTW.t-Tξ* XwLP^ "/q],P]_O¯fjcl^ 4KVĞViA{aZX%1?ځeZδ"&֥34D"űJkܟ5+^3 ^ٴقjK5&Nqd/g]ݽPd9a7e nQV5vyLėm̥!H,36]xӜ,&@Bq,Sy !'DPwv)e ,hx1#7_z?J*3nF'!۟L%œR"&u]Бs hTCU#VZ}0`SqEf{Y}(DW*St[{$Fuwmp Jc-Bu O9Lt,aaxl5vXBpqaa#VbNȄ)F"pH ut$<eUQ hx ~rA;fdz'-ɭ|cBVe"udHj8}Io%̷1DEJ͟&]wcvNK\FEt٨u6Wa/dDp_N98}x3Iv|lR 6ARk4Lߣ4r+Fd$[d4"lס "(HT$|ktUYƅ6}63w_b؟Ts iPuFف_עs@y`!}_c+(7$zP;k/غ ~՜*Bi2֑qCWaqdH0QLF zYAtYqw6T wũSiB*w}YRɺ3i;p̷rYG|ʉcfe B| g}<`4z pG7b8ӠJyhVXxi,?,6,I#J$Bęn2}>`G?=i-BZb!C/fDz>q>QzOo-A7_{<4zERMc}MЙ9m K\J>z͙PdD !E[ޖF`ف|x{)e93j#a8A['^]lFl-͋=&a{UZcC D˸`{B% 4Ξ+i2 ealtʶ=~whesS z51,6v"X`G~X#FR=PF_  wO@ ?gB3P,)4I&8>idCFfa*&J<2miNZ>Bs9aߛOr;LFד M}wMu0VO+ --zo V6Jgt"OiއYd"|3f7L_N#8{ԤvdE~P醫%ρ;͘-aZ%&~(?)kR)Y:;x:-.a` mD+B᮪WI%XKɻlN˂a,\z."iW6$$G4f>-L&X.Oб V@PI?Eʃ]i]%SAdkjl׀Bi8Iv@q{ 4o`vl"ټoПFQPe86 x? uql 8`9"1EȲA|}wwKOv B@z mC^0r6R&b%\q/T-S%Z-G z4[#^WjPLCЂ 5u,˚֎0If0!jV#yXM1ˤv߃4VAFZMe.*s-sYm5a1}gWge|ZG'k*dw=m3#am83 ]vRlIrdE' q}| \ceq1^D޾ /2`֊v&,{mHzUH)G,H#a_g!:3Ç@m8h5+ se^F"r.7|,[O;eAuӑK`.fwrx(ww+h^}Eg?Y[r< K3Xu ط0:.]&@boƈ?P^|jԴs?j>M`20ڄ#,y'FdUc'è?8P#[ۚI ƃj%D,4ɋH2DQ9O968 | *OE`<ea!f$ACslARyCp'Ka\K\w[9'5a|rd Jd\7*94hy>im 1K1[|)*<$Z\8ƊQ0$/Qw$V3ʍ!b&"^]GY况Wd'{ ur=I(P]/'WߐdS7p$3 ! VG+Y]@'hK mS™PJ#ܪrz#ytYYMp^Iѹx<-טP^MR :Ta a3Yd;V)%r$fK,zJy̰.vp*FK?KQocv efIk[\z,5_*/|@50;J\J)BXYI"ڂxٱ̌Ϙ~ & V Ix+ürG1̵lHX:A{&[ATܶ-Yh@fo_čxKȃG"_H 샌 D8GE @qlePK('̅Pk0. :k\=īBv*d. _W7T!+d޻Faꈂ-?o̅&eg`̝gW[)0S9j'`r_']d6(.싉ARc4cПOlռk&k <+ȃ - 9wF.`JU^b 煯,).mr L@Lq8o;V|An27 .X;(Zvc/xqGիz#@udDԝ\}vJm g|@^E0_QqKnI?~$bS&k j s"C+AfErIŘIf6}D`0=&](P^6z#|~Pd3 >A~GW|0ώ,{Xdgs%'dm>E >rzdķ*-?9z7o̗k /7yIQ_ 5e :Ӓ(#UHSXm=l~ɞ8}1AɉLg>{m.ZG<GI0&ruM&QԬ +KO4-j)+}}oDI#RN\ѯ{ ʎ H׏dZr I?]VWbBOYxs躺= =5tE_lsvPz}iCYnG\:/B;#2* aE;% Qϵ๲"Y Yr.gR/*l7p-^fXb_99FM4B*͓N9_-fbNFvΆ@&Fԏ YwNMu P/ÀGGVDʤa ؓ#s&)T}۬qrPwrS :5WI=MSfͬdfJbl6lʧsbF vzUV|=L<"(o3r#3צar?80>Q?a\36ƣG0=qOfƄ}{X'G9?4ដ[p7%^~ա )F +'M#_ "vq4 3Q_N}, ~/\YgmulezzUDhލa('O̍E@ŝLvw=,o#10R^zA0")@Z.2k$ZZ½,2k9(DY^d @`Ō/5QI cor;LOf&ܝ8pUjm}l/8Ezm4 V\҄G=OJsz>]3uME|EO. n ]'h6YM_Pϝb=JGJ3ruIP)ҘFzES'lnvlo28dHe)ig NȰHܿo{n͠ZdAa0$VJZdqzF?2@;1W{sOLrEg[<2#qҥO,7@$CI@R/M6Au}MD \#[F!ҿÇC C^k;FÓyrؔc?Iav-}@Z" U#bX%.dJh5\jkj,HlNgKС#V ѯ Wiw*j \xs& !jIH [BVT7R|Z)É]i7wΰ?Pji?ig}0^ jEUq}z:QBgB4]H`VEZ&f{3=Z7L&nbO|k*.c10O9}Jg"(KLI`5zVd.ܔԪV\k/`To/U8K#!jEjB"816CďCՋ'!Aޝ\JmT.j^u.?(4䂇 OFjIv'4Ð%T%B :Z ߒ#< 6 Cdt*#r[M6 dxQĦFYJ8yc?9_"H]ʍ"Yɀ5 U=UC~z> dnzu͍MH9.] [,rTEK&#a)J{(k]+fiGoN’``za>PO*цUb|2ec*Aw]{i lN,N1?X5º&fM+92ϊ#s:,@=cӘ!{ڌ_uQ?ʅWLA3>w% *np>6yEࠉ# e8 lI7wnm8;HĘ{XO:(-B׬Rn@XTܘ?b977('xjlB2SwH;!\ VK->}\るBƺy_?)ǔOTZFy ZQ@v+::n8P_t֙XKg~64G> y H27IetѴ Q59F 㺋6ڬ:[ѹV{/Xb^xӿ=ħW#hunVLš>e8,?Uj9:tT-C P{|jf0lM0"hb ߘRfatz ^ny>ϐuc_-pÔedL8}{:aVIkh5̈aȓGܞ%"M k nלL˚0l.Oj#́?=a{[a/u#o$Hak q"OrwFj :V  oTCfQ#gLc_oԫB]O`N|\sxݲN#KQ{E~ϞgشDe)@=)N Ksv{.U:xetWy13TNIC{$u1Fw]э^IrLDZ}oyCd~ SuDƋ5@0s \f 0A V=P4ZR7dRd_xD-d$ xWXf\&̍.GieUC{·;r~s6b prLrQ+7zcN8=|&]ѣX olGS0%W&2]`.}9vebʻvr8eM=[WXty~$H%tHEo4{0i{m { ?؅V:*! r"]}0qWGS ?RSRڸc/oN..?&MU6M䷢8H ȒmH^SfcQ;+r}V+d5݁ViheJu,)&puXgQx w 3HhX^/4;5tpʱYfdU[G( F g}KNmf[)k j"J]*dWk;wx~b1e,FA])@,.GdX5O .aÂo~exi"]&'Ō=13HisNFf$mqjy7aG\2,2Gg\}D\?𳫀O穈z%TG,vJ$}jIŞ?5Jcm;?p8ok<6.}[f"[jLd7 if)-=L̈́*HGbox=fo}˪phby-FW…Ljn'ŃIif wEb/ڎB{`mAUT/.3#E /QGh ԟrA{'}ѮTА2}ydAbQOs1Vkde ShߣFRdNgVD6P4߯,POK#6>_(ԊA|Z!эӑ$$^5ÅTR$UvD h`2EqzcK(lD+پh@Q^;{֕t7DqGHWKo 3X̳U2Ug&oP5wt6&Z"RAAzmlrE 2.q%tcv|ː ChCVQS3sZrvr yHupԤ)NGȎCҫâ,ۮ*܊aOOeрRKTBT01Q\'f]L LB| GyP$B jaS[n:QvHAmc3j뱕0 ߍ_ՀBN7cR׌>}p^"K|9HH-fM-袍T=C끴wna|(kd42äZq';eKLȚҎD*g;Fhą=wPK%.>/N FT+](CL|~*rN+) )ˌGZu *䳁w e4meT5sI#7zhMɧp2']4i،0@.m#ңlSGexM _};|(6kB@mD>ŗ4 L-}Bdm0hoGuo*M8"3X`@HA}QT|zv:35);k DБH9'&b~g%=AаP f)=瘥ΘtXZҩiOb9./(oo5ܢ-`Li(8fIѸ8lQJ&Wܒ*+.ƘJQw#g `HUQ]IO6T1);rgY8DKj/mSݽ `R!PnH—G~Ka` EdvX)Ck;3k*=z_)~051B!zOY -q_ޔs8KL jU8~%D3uv /rUMDt0g?oC7gOf Ipv;ڡ0e,# N/Giw>@j`xG6:Ƃ . i R,a᳊e,G7U f.¿_!9YL3Ƀjj2hflj2-]J'%$OG'!)b;J48N43X{X&DokJdmu lP݃k@hϕq&ri_yGi?MH ٙ0MffM4I~CRt--W9^k¦~}Ś` Fgd\=͊~%]J8ٓbF*@_.U'A9vR O'q;WoDS'}FṉscǓG)r)ܡrp>~9@2 ;s8kV& ;۪<+jfCn&202†BM$iȀ\ڴu2~W;Q]`ULC!ݥ bVS@iupLNRZYh {%'5f%\C\fv dfV6Μ-ۇ_BUO']x uȖԼMp/OO gEߥ2΀}Ě Ğ]3 FM~h ~' gPUR[1 >Oc({Eі pʹsxAtU& uMn!Ǭ{rR<$SŸD.Ұ%rT2piȧK|fƲz5S _?ԝ@|::֥UPxJɉV9kD_L'\ 2;+kZ!ۛq{EgaAbxjG Ѳ yʌw=M:K ZQɪVSF=+;y`A5nYm^d`wQ%TDs7*B$uepܾ!S~Ȉ wр( 93,$Vz頪rsԗ;b.#]h w @;#9~8g$\C \op5i,rm/9fҭGeFVEm?vm."/Wu~zs hQ}䣨䋱؇B#GrIw."Qs۬ Fif?=`^]s6M05,w 7 QĖF@FE ˗IɌSWjᢣ6QI?$v"ѫ=l + D9h<$riv%Vcg8/mpҺTa=ˏ;([_f!J=-1]-f|eטqtI'Knܝ9VUFYE_^iRj۷W!ĚX kVw[ԓcqd"$O ǜzWff}C` ,8Xuqqb_V5[!kmK=IVQɯ]A׈){38,I]>1o ƫI'J4WnQFOiquX!6Ptv;u7a_ R)^ V!=uCNڙL`HX568 ڲ(O0ӎ?Utd((]5"!p=؃Jv+BY-n/h =:_9b-Ò)ܾ[b@dGl XFO ϖSL`d6sWSɀb @Az_n(ZT*R L0'faIhnn;YUZObªmѸ5GQٿ7p aB%1Ӏ^e0.ϝ gD &Z'ەПJƁƢ_D4-,]0PBljS_H/P"osゅڪP0S=FvzhU8AX\(F ayD\ ϡ6W8K$x/8{Lu*@DVm禴+eOCDV3C9eqiN-G$@-k.; X:!M1Lw"sfV\_5'Mn2kvvp,w\z,k^J8oN;}q(cS^Yu&QDZu1 NQn]B8~Br0WHxWw "XVAgqh1'zV䐗͋wً~MS} 3\LvrAe{d2\UK$P2Y-dlKUQy3rX8vRc%RJo*࠮0UU(}OQ4U﫣i< +H}I41xIh@ mmҩsMI*{)I/e? 謌E\$@ވ' nh *[A$'8$%H=$ڋ Ujimj=Ngxc] {/Dz#b 텡,b>e۔qqlqB'I:| m2H SH HHEJ![tO}}O 8%ڷg5?k ~È~3"*ooqMATwK"KHL8j4y QM1egkje^ c[Ѻai27S=1'\u CdWSFLr>d%X:rYث@^y"9JIV E4 axY14"Pi"B[JF[ܻIƿ$N]W [U=ӟ M^r)\:wMt 2ȑ  m|&7y'{+\wvtL82:u(p?U6ظ9#_*QЛE/⒗lߺ5Mf& 2aVˊ"SY: 4cAfA?Fҽs膵흅R/Ro>gT^9` QdZ+VF6/lYkwvm~3R&2ZYӦ a5@fW٤G09.3۪&4l}M[ |LƽPCW']eح@WLGUQ iX0m|'|10WsQ(NZ l&BַK m N(B=`οnf®LC Y>LބKM:FƊ^Bj;p7om>SnB.ok3TGly8+w`P%W+Wd$Ahܵltߝ}"-T0DZi?62>z#/mym5uu*ffij6AAm0@︖I)S L r6oA>K!tڜpzo2 UOq̎Ju}^v5Zc.~hځ%{Z789Y켦D"Hg{K+{U-,0Ȇ3`+_uZjeg慃| 91 \%=8qRF]lT˷sl#.eܘ?ZTC Ib}1|>.9l,\>S-U-z*`vrݬok;eĖhC6"q#Id%72RZmn6DW$4-Fz-\Ŀ"<,N!uf_i<[<71pJb|(c4k< sV%Dw2i4 YC=퀠Aavd 5NQf3 W߿q'g4aQ amDs=0^.8HMMjO(>*GeNC RVe;}maU~/|Dz`]3Zoܿ) 49aĘW@)awǺqJD\q㦐_s`}y,PabEA`"ANmFp~$+٥XYuPq_ɾNe.`|pWTHRM[^m.Q8Gs-?Pz{sD4=f{xÏA+Y0bRȂ1uBQ=ڎėKֱٷ{w Ά思M^a~H$eN/,gڈOZ4ԙ úODS1m(<hԱoz# lL'M'nv}sp)+!'Ra ˞Պu(̈6̲!$)h'8$&K-ٸU!nA1J["7QApQĆӺAeB  IH%)7l"D WX 9GB0a)VM]Glك*NK'cV1<'TpHu8g 4fYYuE0u@C&L +ڳgԳ`2<ʴwJ;/K\ Q5DgԶq*]PaXD VQ$ہ&-],Obxō/EJ+Kэjqaf0wO7>du+u 1 ,TOD=G 8v=oxG:Ik^gMzI“qNb`w=z}A Go5c:)Za|0`:=j=u=w3z2v鰾l hѢ ǒe?K0^?hLiΡ ϊT>ӺXKe銉Op6+ !0oL8YRutc`@M,V㢩#q@ 3`o# &Jʬ?DOO =x3n;egBEZhXQ&7+Ag?G'7f<5^z{e3cٟŌC$Yz7/(RQ6HXJG 9rvd=ɿj/+ QDOp"Qw)W*>`#(P\kMr%/þ=}t@K*yaDh\68j NH#;gcfI$O'dr^P( 8b..qsebt]Px_1V 3aI8cTd鰳f5A m]+rPp+, lc~騼0SQoV s 0[]n!\dwVi:TQdѼ k:Cۺaigo%P++!FIe zG,l+jFcK_yIjt2h_ڥΥ%_ץ(tq\kb]Ka 5G]G8"xҫ?v ffV>\1{ Z.# ǹ(tRЧR@&X 2z/'?Ya#l !K.6@i[)ΰk>e16Wee`J8t qVWJ [QuK#C&iG}g[/ͷ4j^ a䮢 k |Q>V O.C]tghp}/'sa$1dͯ+ :Aok?(J(uy}[vl*.Pf>Y̛kXuw=Cݘщ'Yˆ9Dƕ'@PS^캊 H,tM!W%kV \- Mi^jaKʃ),w>f wc//Sdy0cHo" #\.ށףuJdT]@t sNIGO!ZIyU|wY]ݐ|2gV7rp l/_n3O ͟ jd6נ';ZV(nQbiNREByC^;WdN7dvkpT9)ƛïnqv-\.m}<8Ф- H}mPS_D]sHs7B?/+c7_qPMmKJ*x16;>ʡ7?AP;,cz6ě#,8hܟA>\vTxuivOǪRXpyoM4qK^X\877p7%QF`O.!K]Ƈb=b_K*aHٻ C5ؚo$9{&B[q؃4ӧQ=3 !TQRYkZ+{tI„`+5߁C.lcwKc(>._8Iœ\@PLoj$X}qm=y-w$*9Xz`QPt`!d0ğ3P:a ~ yy!atfD%lht?C)h6J2{]CXu4 W͛eI᭢4i %7 ´jAV+Bb\TN/ Զ\3A!KWj.Ҁdu ޤV F:+F7.΢P׾ H_BVdM[毙h7n"hOq:m\}x§30D@XaA7NcCRj\x?+W~' 88.G8,aE-%L+c{3c__gCeo# 6ElM5c6],A"D˯Xb76_3@5Q% SHG/3$mV6> f&{w'eK]80 QZ]_>}_u}qoUbm-sJ16۰D^x&f|4\ oƪMh4Iu9 Q0+7!Ȩ6g;A68WҊQҥ߻ j5 _\ziEʛ* E~G3+6qbZRAVmP br8N 3=pE ;^feܸNA+i:0`,=EVN&" t2G\;>  cpkSh# ċ"zru>5HhhᔀxA. &Twy$J (a(ܢg>q!xˠy⫤ ^{r:ǘWi:BժmXuD9fijz1>ۅ¾жҽ: ]_{FG6o~ t JӬ>ø+lv#S s'$+ԃap sv9S )zix=xI`Sjjϕ .Vŏ]>եߚNgPՆBr=lLx6{'os yX ]y==_BCdAX^:%ucfUeoTzCN8hQ:wG؞nVD.1?%}Rd%|ˑo:aOb]?L)UX[_A 0.`9@"{W4qtМf%hݎmudPs C&~M1x`o Lhpf}L7S%l/EtO/s*ZX!zq+<<^ccPJWX ,UF,Otƫ~ϔwpdcL/qM`\mǿ=<+MJJ@=Qƈr5εna܅~۶ͧ=֘Z婑&*oz@հP2&Za< /$)]Dw߲St'_|ho;φ#Y`f vHm%+z?U}*h>!U SB!˲t;WF(¶7^BW8%Edv,DuCggS)LH]r=: Fzz#28)JK+)r*, eAB;Qh霥Oٞ, hQ@[#pCUCr "Y5]Pcz!cn HAɁwoc#޻"Ίp}}ϔ0t% ~ )j!U511j&Fm9#-v*'X#H:(u5*z33K^,#S?~wD Qj;ZGmr!'GR/j פgݕh懓+U+Dm9ܫ_bڃ>zzbBT^tt}qQČLܺ2"޺7EI^<p!5_=H}b{0t'RUȏlH)tm!QX$ڶ!,3`߉۝/Pe⽛QG؀ES3#k4]xg `DSYoR,vm| ׸&x5 $*Ubk,Z 㗣rS5tSaV&.'+XFFi>ՙ vkYa:pj*sh6rŧ>np 4On[ /M6% APWwi+F]Hs;Q|W؟p'ZꄀS_XLZV;%W'^ TsrM8W|ӟ_|5<ӴQRMx'cMX$4m[6sU* Roy*C $2 bʠۋ N#gteʤMd(缢`@@^pSY;䅴K~k .N,*Jr 8۔8oDgXܼ#^o_ӐV$M4xbeRAٺh[ oP ={px[_ EP p""Pa䋸~MuUKFg;V_xn@R!gSPz!9]7\0C),JwS:W'J\|4č/P߱fl(Reg͆U~zv\=\Rmxʼn_h9!a=DQkB`N’?8z4HLIyD#7[%jBv|]*Z:ܦ7* 8v; vjztr u!w ;u4Sy#%.NFlp3BT_Ae{X11ut$h<(8NٛBMq+Mܣ;nmYlh FoG+!ޒyo/bɿ7BJ $a24N.몦]UߵWMx˅^jexp6/`Kg3xsAg/ȉlz7B hCkXƾe>ٚ;8!(P9TDV%Tiѕ>kd]Hs)lm$ռUA6-uD'Q_(KjKDEr`iOg{2Ȥg &c|W$w0fgi8q^!D=t6$hwm{(z{{?_h'|v~gr5^ nGȊY2ق.9xs:Y*4s)M炴HZ=T7~ /<.х}8Dž+觰/7nK s.)< Qx״6ԴR`I&M@T*I96:ѺWx?;Khӭ^l"|{7>NCtIy.僇@vZe?z0vxD{F2;w!a8BЧ`'"(zZ);d>UGH$-ϺblzI(q|d9: 7H{c\n3Ygg2RD%G{ 1H7ep,ߝ_xiB!>gQb͜(qT΋1<<3h=w]BO8Cm;;7͈d7^pQ]}ジ͈[JB<`6&̞a:~x2r7qPQ'kεݱإcj?'&8P)J"ۮo1)N(Z띍=X}ӕvB>ۇ9Hh<3IPɢ zCJ`39a.9V ~I8]6Ѓ!M̺۷: tEW9M*۬*Q~GC2}&psɪ8eIP s7]Hڙ rIנ<'0Bn[6*1IL~@+8f1q 4.;1# 7*87獕谶57S d|+118Tx#lw}kX*k+6iE=AY݁9]\|+(nznjn|f1}pV>f=3F hYxHC!W{VgݤBiϛ^F/j7\O̴&\0soG"q1`2ܧ^]o>[OjUy{*z* @dGA`1`E; Mng26 Gƒ˃((\@,!<}a 2JgK7]?b$L"[R9PuAƪ;D˖Jc du|%e9TσJ7KR'~~i܃ŋZ:N&@"=mUD15^,`ir51UZ$L} ӝ*9J֭Gآᐴ,qֶϥ6ADXtoK,ZIN9{)υe+rh'LS|tWQw4OvX~no.2mB ::GVj͡k!0(RKUl[G #Kd8,\yz?{w3Q:Ch!g\QP{穁+tڤ]2m8el] 2_S@pkCnӋCILA.,?v/k҄4o s~EĂ [͇i%*&^E< x'Ql׍Xºا}WfA"`賤B:~1 `ғo1ɟa܅pJwlj Pև6q˫7Yk`ÈV?ds]Eh.չz¥>ʹ9BԌ 위 J\ _?=D%nH(`$+wG`1<Vd\e8K?>"rÅ\`&uf E 7r THs8l Ŭ'?݋4A=IAM8 7dJlvK^J%TqlUjiWKZ6˗=`Sh,؋bfse?,WEQJXÈ ov`W / &7(4> L)~b_2EI ?jDomƍ?Q5V!{os!:㎙kha 6:Bu2HzV'`)O lfjl=u^u`i{6 i q0pv[Flߊs $2mUκDMZ!a*%=\yH%Md2ToC7^b3~Ӯ-&jy{R]DcSv8*bkb7t*P碸:9S:9Ii[3$հͰ 3 Gf mr\ҋ3+U~XTӋ~(<*{3ŏ9i2b.qW3rD?$[HyhbHk=Ѩ@/#ƅ~Kcŷ1w8TlP .k#};dCm0lbZ??4qbF@yN$_s Iۜ^/ 8 8ϏN&ubŽn\b-\i-rg{ t+h+ϔ]^Mϥޥl  7?\v1YUFeTjmpӋ`J'QPrVXjJ)ӂs}*Ҽ;/K2ns^դO ɰ ҁ86DTMH+ğkL=_# C/_f3 b^+w~h_$m+/fRZIP O:}Q;A8 bQiNG\urWW3:6#4[6 6@`|lQ.duxz;s~6Xhao%?ILY$)C ϊּ/ 7Vw\]m|/X yP㎺$0+lA{/\80T4͘kW9~TzSYsLI%gi(萶y&4ax4XEH#H覆݈WvԩY)P@RqZ]Hql\mEJ.-=@2%h*%q#ljy [htHQ/ Q@a&-{R_1بnZ/x-%P!~v+%`txѠV;؃0kWW!/tq0l|H,cbqNjEUEo;E(GYZۚ摿o[%M-*Vʧ&g^t|vYzzO-t?AkyP<r&vBHpX зxL(|l8g&En/^Uzv#B>+Y\(r,$(U&{OxnݶPf +)yBvBf o]et%w^@WZ͉U,Q Itt t1`d`ǠӯR%h,ä1_Q|0@9~"@WWZ݉ҽq hNJ,2,qLXh+qT>6cϿ8x.Ǧ!d@!R|r᫖ +j-. YbMbyl8MxݏPiK6,ЖBIv4WD oX9D, *OI]ze!&/f-Eǵ~'릊c NMC퐁v][ 1(+ir6F,MBT' ^׏$29c g8B*a=Je;ZFkD x ۋ3ࣩAtt#|*%2'u8u17 G wȊ`£12Թrfpg~^ Ǻ`Ec)x@eoR2˯~%?;ש߿xSӥݷv֎V5TMy_G ODZ.*s7Om7F.:ޣX3D6;a2x6]FkGt,>nY<siEfC񅑶$Z~Vw;կk UN NM$#s熇w<67hy{Bi91q}I2,8dKWcTv>^VC:y_#"k 6섉0R~/q[!7\Σsک7y|ZL1G3VcyRf8/8R:e⥵R>`/ώ5`nk[j\\Tpo0!b`N"5ҺFa u~EkC_1ë EtY)()~`qGYN&_?;8qXpfz ީx!%N\9f.˘ӧ˯|9IqG։`z3,'/" B/0$v[>O7Ha>8oJF'uU;W"΁iǪd&Y/!c}V)c7-ٟDIn S\s'9(^1Mu#$?b 9͉%.ąýj& mvB 2RiuJpGt+cCI%V0._l;pD78wGyi[<I.qFp1[#ah ɯ* ;ײ* 5L+O1Kr !;%Bk.|u 바 8i1WtFC'=%Ŝ[-v/#Up̪uScXoKvi“MLUTo ;rRcq9 ~̈)*mٔDf2|noiq{ ' f|5n+.JC~ogԅ{Q%wmEڒ~^I Ebף]m3Ɵb#uM=-^l^qn [oZ{ig$iӢ8~3oǚ$PCFKy)2Uy$P֭sEVڵ j}v 'xJҗJT[ c~'$1W:>6FK f^VLfΝN4%i9ܨ;:!Qc>\L{3 DEb}&C,.jϡY]FOnh7)tAʅ#V2M>1tk%4apX[zcwsvN=~TAr921u0]omiejh@\+Or|Yk]toAJ^%s׏ mnd̻baOf mAPCK_@Ai^lJ$jȮO?k ժe{E-%60=-_>8q.4wpU ն'(ʍ)GE(S\} [OG*-MƖșlC1dyLJ"?j)cZXRL(>/w4[C0$-$U7Q(:jvfk;y0ȐDF*sA I.Ϳi6e,8+4Ԅ`ӧ'*{a$?bh QsOmBTӄ%vTwj([9W+UI߆7; 9hlhdF Fkl!} '-Y]G{LsoA]KWΰMbn~ޫƶ:~6J(tؕ}?&v eAP9 Ȕco+cF؉bp5i4O[7% ݾdGl-W}24+ G4JCvdIKp=RS EqbVi,佝_U%DEN,Ct]`FM.*4&q/))*]q/RPPXW5-0cOb)0"X suXw誥҂M._>͂A[tꮚirrhR|w(AAc*M=-#\gU %)SV>\(VyHjJB؏DW$L1O蝉ױY~P:UfIi (+]4HXj3 oN$dQ%Btu >eesM.ӜeSnz9ܻ1_]8jgK` T._'- _sµʤemA0cmW ݔC7|2GBܗo"ZOW_%qs 1?UljO>rK0vxy/n2~R"afMUhdD#X~z-M`J<ɴC0Qfu31EyNw 0\Pkzqi?yac<~եbu5l_vQj |ZRȔfFдBoLLq-w< (pb }cXIgkMN-M |^O(,`63Qo żUUC&';Xa]eLPa_sSGچ1lޒ u^դ= 5w,uxk8Jnέ~Zkc0%Uu>wŎfɴCB.7 {Fx:hY2}4JN$ICN&M:%eXMݪ0:җk$%M!yz&RTt\Lڼį&B7[qUq1@!4"hCW#4ʎvdQeS(̧eglYr>_ww7mZlD$-f# fC'$(ɯTy [7n.` s\ng[" &#gCjf^DL ,׼x )$H(XY@txG\|ɩ&U: `j&x79P2Aǡ0jB!H1|EzŐw/ŪJ& -^b:ϔ[d%ahq xk)ɬD$d @a9lJn^O"wa97q}u̩`,Q#$d" 3ɡmҥEUX@[HOI#NgzQ?s0Dfc~nP&XsKV̘vJJz[c\m]Zl(v ߄ о0'! ̫ aMmiu=zwv_`-Iɣl#(м*Kz,~x ;> ´?4Fb^^S?8͟F^P_dX;G/Olh[$ńW1&8풴2.A5[Ixׇ8ʦ02SՑW$3u]#̖aZ`,P좼 !-st5Խ۰Ch/$ܖH63KS$/:#/9 !y aۖTNiE Ot3䷧~5|!J[ eQjN ꋽ?㓣Ex^G 0i}NjnFܸ)蚟D;z =+_˟d:z\="YP(wRrdڜ;] a7+n gE@]u8x{GA٧!]AC9yBSu-u6)NbǺ:kYDmO׫&ٕi{Z w1%,ˣ w3yrG+Q[ތYFl2 ! 6;.0oՁB "ۑt2P zEI>+s̈́(pC~VwzxmPpM0H |q@ Fʝ{a%N%^"4:}|uG${jn "16B*52A"1}$Q(r]w6*NۿbB \4NIWiO86I?(sRh6Ա+I&}aЭ^Aө;@͂=>emWXaX PZJLӻ݃'K R!+7!+[]pH6Xu&:!DO&?Ta~lK'#=%O6InVO_s@IY&.@V"'% OK`6lҹ+ҒzLw2ct~O rD3Ü3~}pdG3 B,Cp[zB'Xo)b[)1G̘es{_WXUsg "G$b^h`7j0kqA /d W}z0hnk믢tH&v}0ybkYbRdCGS.H O ,|9[(|/i]/J!>쐣{J8K ޲ljR]l鹜znNq4ondKx^. ʺ1,I`Wd  ,6;7VvO"B}[NoZָ`NPn(޲moʞ,r$ t7-Ri b.91UϬh֦ޓ&YKg^{Wf=g3Ϥ4[YT^Wx wQz}Mw>Jh>< {nҡs\]99eq!I8#rFfd ˂? \ `)qB#Gp\GoCyi_e2Ū34TYb|}Mږi(ED i)@L~ˆ.0 JJh2'@4NJshk('M%*RnAR0}z-gZ7M?DhgXH#&Bl' ٬h T,Nexv1ik H-\Μg]v|EA!es]&EyمGU[MPyȤFJEL#Ȇ_Tkf=jK|>T)xh%uu VX$bg跉!UJw5QN SaϐR(=Y(0)чV,W25Yc֜|=UNcD 5-%.p,FʆNPӣv{89=;i݌\Do}PϤ$z!xS[1DwWbM|_;j9*dgOձ68f~F( Skm~oimڇ< EߨdJ"htZo{Z%) w3Ad j-b`~;X4ʴd/,"r⁠{=0 &\$[T|G oLl Э JܞcO y)Qu'L=tEbKrG<>@k 5!S@Bs ɫvUqx5y k2mteSCpFD)Ҙ* r44 J݌Er]@rڜya@@ up:v$:]AV#^05N]kv)Io?z̉^\rWnrk3[]hQ1_u@W٣VM9H#I)5 a2Ih˦XG|<ތzjGoW٤.Ɉ@y&N3WH7֍Aa_mO/湎V k5$) %.~<f:nxm܋ #ޝ쀍P]?+={i^NU+/CU'*t H"Ugvc!#q i͞Yل=+lM:pwh=$="{JGkDyo$f: 3U iR$=>9}usY $o~yeWy=)W Gs d+%cm|[Ǚ/;гHA:R9NDf KH,K]i> \Y;44qi/۶gLad@_ qx-r%8;Re_&*R7NuKhB NI\Q.vRԨ`h.VӌpJiP1pl0HCe^yvY /RDdP:j5?]³$1?h`wMgMG| kZؕYUa|n{dBY^@#1)7܈9]h$F,Ȇ ­).EoOo vB:Б[My@?ruy|`  ăRNr%D^)~ Eao?.k#떓 ]MJp/zg/>(Y1x{1i2vYFeJLAgCҤhYQ?LO:CRK[Jc apjp?mz&jddɃ7XKPhi7h(ţw<Ɂ-&]")Óz]9.dávu -͑sa+AڊQ|D{zDiWjooKb+? eP;< yLʓQ+:=$UyHS_.B" '@|Xlڤ]LzN>D{}%ɋhfeY,vɃɶ'=ZRSX% t^-]CM9j_,f1,x|Fd"rn('|}UT~8.CF4B^NЉ="/ȅ)/lJj*H;: ??XzCvܽ2|C9Ee%}ma \!S(`gl%3.)AOxʏ^ݾyNrLDf'c_bNŕ @io˲uuM w.ʬ|N59o5UМ3$6tP2Ԓt%iH< Fn4:qZ}nP@*fӏ00mKUExjq`r!c‵D*iF\m[K~Pn zgu ,8{yHcJeTt4_?F$56nn%z|fD0 lQ̹?_u {bh2ŃubKqx#4vLe,t>d3p*U hjNy"U 59AƮJc"Z8Ħh¶D@.J?%p֡h{XR.l>%kpH7ˀ 4<{;rK($MFe)#dJm*ͨEϓzMLj3._"7Inם=|}F:Cm1J+"-36h&: C-qA֫+nVk+ZLW>WHU/kiG !k çlfPpD?}( m5M哷=ӛd8! ґ;Kl1AdtD1GM1љ,-$^q!VI$aUOeaȩh`dֺc GpJZU;-.&G웛!ժ//ѴλJI<(4{%- 2jV:re.ԪN3cţ.B0cym&O"QJjXC~!PX8ZHbA>ӭgd!at:-Iubg,"3R<"ŶeNP%Y`"qZw^alۓ‹3n[lDd}72m̃#م\k6sU0l/ bBwF%)sn}CIL p]\| ~kSUD̔Dc㥧 >I&< X N ez+|. ܇(Vfd4uI QXr%%X)0[-5ȰNQn_©hQ.L7nkbM|.VPu)"1rm)YXtWCE8jdM8&4)*l9S O?}zlϡO="wr- j%M=%U(GU)(;XopjL*Ë*sK`6iQVS&@7/NDF{ȦLi h3*d<0`$;1oz/"aڊ6Bļ+Qr$1m_ωH:v`gͳ=L jQόz1~ݶ61 9l񠘏7/1KJFEy$;T. ~T-PՁrCB}L?Apc@״!6'|_ynF=|gC0,𐡑5Dy!Q󴟅l7z\iUlQ: 9G=Jܜh1mT{aA?ʨem:9v? J8b.8*^"g,t9*g J$hhb%JWh;g3_E  ^K^ȳD3cR?J,TKc Z rRҦZ9bhko(Pn7l^&v(2x-~u]qxc yi^|,XSևL\ wOofŊcYr>m%PՅ?%آ*;xRJ3ﮝY/$P+_ G\ڲ5sƄ}vĀ0p0o>'it# ; j6hmM{X٭h86Ղ>y(G:h/R}.ÏUBH ICeԋ ,ly}8n!>ba >W-wf>! ~qheǔ)n=V&-@v!䮭)4N#@TVʓ \d;$`|n<:YN:!cg-VRZ|yŸB숵ܜXN>ŋox , d &$~oo?.Bc 0dyCq6RB!4هUWax(H!;PyGK `51m FzS]{\ѳ<?0ZtˆIِ4gsG/5$끛ˊ&Vr0/ R9P䍓ǩ< "t$B&5Ko"qQ.I빅JK#cEGIU%낎BwH0!60~~A 1OYd-E V9 :c8>U€N]>2G'TqrSt%J)X@o=r>VUƪ&DP3!j _m٭iq:#;ab.e̠]OaXt%22^I]}NO&dk +.c2Ÿ n;FZxfZ) ]inwwgNˁy_2fRyl ,z9~Ry<5itـN B6.)Ato+*BW i ͇4-cy.ٶHyΆ)\Ffrfwm>20*)H%y~pZ-?J6\ I5kDZ*oML Auxl(:_`iGDY6?LyƂOƄ8{x,+ Ԑ.TXm13?LN$][T |kt\Fh; @xι})ҙC5;P#A({ 15򲙮:Eu:m$%U/09 cU5/sd՞^/.-j[3XPOܺV, R$,~P`eҲz8iH[QJpT1%^Я9s;aADSx&iM!cL ~4Fe5 oJ͝Vtٹ٭6Xυŭ٠aa3 . n9%<ѦJDٮ3Sau3 ",||`LKJϏs#VZ8],?1B%ʉ#!5C۸!H(=L38PiOP |̎E㡙'f}d(/6+T'}\ |?qb"5]-ŕ3 ) D7\` ѩhgé A{ɏm3uP=]t~[^)۷z#ۡ^-E$)o[O:KuC5u2FF3'@,nmǴֹ݂&2ܰ e%񨃨mBJTw_*/+6z:fYJw?ѠlT,!&_|sFq@='v?Jmη^wwuN Tl3J򃑽CCE>-C#uіG]H)'+Td@(aQNz/1^ÎXHl)ㅼ_njZ' -$fw`)g-?0J4PQ"zܭeLj \9~#"[in>%+2 # W7"օ=UBeJz^DyRᣗQ^*WF} #>fg0jQ/у r;C٬{vgjt ^{ wsyٿ?׃-'lZ-tl4)&i:G@4ʯE_ՖqUsƵ97ˏ`&fntd(e%)bSv2 E4O%|Ilns FbXy_M$* S%^SBqeNp׭iQ{ Ӿ&liq>1Q[-W7d]\^]Z jP+dQT"m:JbM+a阠Ca^GiǤko|޹YeF=;ѣb C{|30kއurLBUi*sȔN +֞ 206ƉsO M)a0iL2Y0 8(ːIHjW;V})˛ rNm[sFQd@pbD5Q.{5,-|] ?^R‡ʯOF@ [,!n$Ɋ+D>6 %eF<+ͱYhg&nh>/} "=e oJ,+g@I=")AJiD  >brfinHd1~-*/ډT9e@ZG$qw_79l~AHֹ)n5l,2Q_6%?eWfPDC)<i>Jn房L8I(7I,  ΨE3j7֛Ah :ZBF~fP|`E ZC0[Gϋb#wAFz/7|>- a ?<8@|eDmOw^KģsLS);|W\B듦8D"d!ru U`{' Wl«s 9Mtr bXՆԘy{SٜaYV/|;AbV`;-ٞ՝A t/C?hv?HAl@ҽq .Ey"K||O?7U҈19qu#]Z5LqmO3jқLzA엠hƬCxմ}*aL3J&$چ"tz?(6f=d>1z=4#`IH ο#Lf2M`G"%d:д]:uɪ 4EDZmrU7͐e;!3yJ&dT*K[=$v^hņ w!6ǻ[^HÄr&t@]?Rdӥn+9j&_2 ar#=*dh:\ ηV}A|trd l0b[V:T:;u'I +JaU2]q$B9]4 X^_1>G V4Xխ6P$+2-3 Ǫho7΀-P/>N:){#2Hj>S010\n߄TNg 4tQz̬RI[oD0$kaK̴77+ooIq>b71eJSu { %y=6SUɫ- GUv=OQU;*٣G즫Py: B{۳!Iܸ(me,_ y\ra 9j,,\ٓѤ2?n't.iT!lUs Ύ- P I]])A!-[.̰<|w9{kA0e5I$we]bE)X;!i|*v^I 0ӌ*xz߆aDƹKm4|T=ǭmul Xzw]_\ 림kr#'l >B0T۠{ďjL6ج[TSXhFKg~}Ńa^+TdVwAD2k-ؔ:# ӭgZW >1D6``O$wd|H=).!sz9ncuWd{%wiTEL.IGf|͋gXƮ¶y6_1w>Jѫ5KZMΡQ6:7ЪRyF(lXx~l y,Ty޲u:,V$|[H?wK H 4xŤ-2.`m/mpoz3g݊14ҷ/qS+yb/IcF}B+K3B%;Q!]3LhiL( 6Y ۍBch$pR59+*7B`Rm1_cxkTJPҬ lV#OR7Yj ܯVXaH@YX¨-*"j"mؐi(]L(a[lVz$ ?$D .E*fx 4Z|\oKy2'SYjU; ӟuoV UJc1Xf KL%L-H&w>LŊɔhj 惸ca&ͤ"X3XK}}*܂'<\>?ȏ28q>BK2X1(rodMa& Is#PRgIK>b(]7V­3 *[pC~'SɫWx8"&kOKZnqK\%J~&⊬5߄2l䂄YM׸o(<ǧLmP*aJIa,H.t0|677feCPzg~VR+Zi[\<]u,nJ (B[տUhRd,g0z:?bE ěJ8/sA5,wێtп0C J`yMJ#fN/pBHMBwނlzmAb $Xyz%` !eGƐdApZ@{$:-2Y]p;ՊPn\A#+}? <3^ls.qw"xQojC)JD%f>%5 $I!T:mU )$ cP ^u׆\lėσ|񤀄U@`}5ܫ#NJe=ӽ|i3zRc1R05=1( 5ٲRDI9u8(?$zz~`+Q֚x{;"|-"ĂyU}C\+lWO#uϻ}^\áff~᎘I\":.dKj363,I=R1E!&$I|TO -ߗ&M]N<"6dWHʻo oms0+m}Ld.2\yBJU/% (f-pSIBwb.1|/m\Is>yoXG"A+"Ξ* :R߁dH * n>=|e넋b1\Z@k\ 7>u[E;ˬ 5YtE%` A\Ωz~&BiqV ̵E l |* bG<;I "|"+ ܫ2_l73uMEC6P5rr&Q ~S/ (/Y>47FU)XwxZy8/MnnAa&ʠk]=tAhtl,k]:8N^kg*u昋:@dAgnKved}Qz=Y}Ax++ 7Ő9ޑNHOq(pԃ\?hDoqck{033O Wa>iIڿb˃P?uY<5Uzy:fW8I. W"K{,6mZՀdxn^eb8 ^eDMh++%/HS~jzt?1d@ȓN6#(_,*n"Ka>8O?tu!7j,p12 Qȁ,xԉͻqqvH9H;ky8D zO?pM/uui06.?E.Jfe+VYƿ76a:.xUջz1bV9گ8_pțG͠2y EĪˏ}"ͥ 3?˫!?pӄ*\4xIuuhLSn&ѯA񷿷Tr(fiWg )ɻvLI'kQB\V?~0w^͑i&}Jc#fYx|qn/(xOF(sU /LϡL_L㩮FeufC)ח C#SrP=Tش-'\?B@5._v@[:iVjcp"l;i87OKj=ӂC8;e:nhI=?IBIbXi߁:MtP ͌5Rӗb]v$ɴصO?J~ 6U}Mb?H H#fr. -؉xBB$_Ntpc,9P>b{Xx/!X왞1^Q =.v 9CB]f/J }[$ɝ99=y 'kA `ݮ"^b ]>붦T\giӢ"n 0yh@Tv ҧ18gǕyjD]~I6zNI? W3ajD.(Y񺸔_fY" l,iLaӵ)X:԰Ƀ+hz[fGo!TJuc-io#Yoa!n| liΩIq*x,B΋)EuwHRf3Fh}l MQU$ 6VfV _$~4֭jLdF8s3feS뮟*_vM0ĶʱzIkn km{h T_Шܸ/xD^U8vm#u4r&~0_µmZ6RFrv.1o?y(ę R RJ 4܅,CpKX.j:v Ǽ?1S{xMV#MQU3PX ŜlSH *cr`:v4i|`@_D4i+tKX58tԘC "%6b9-7:0CuRO,a.t2:qDHbXVUzn/RnQpҋ˴+6Rr=<`4E!JB--,5z kHBUkǞĜ,1ǽZ*ݱ  ٠ &6e]!s=?)K}Kǁ.!~7 Ua3LW Q*š}Ԉ۱.nl+F$ }ڋO +] ; A0 ,[k{uæP OކU!{M; 6-|Tp%J ^Mh#vn׿y;4RZmK^j}x <ku:Yw??o4l QJ( #ZA BlFG5'y롟a9,̰eY5ŲuκE}>1chjp1?dȡ\G)&&Akh?:}1q],*ne/OS@@yb̤XS؍8.XK,Sն-ͷ:vy[Rm)3"l hH6\#oPȿ:vٙ3w j!'_wu)s4>;?ƕX he:5L&l{~u׿סּQ+vJ=+pA_u3 LIV [TןtG /O[kLZܢΜek6S]x+ۉhp`]ؕmpUCDPy(:ZD2{Ŏsۙy?';y*8o%QԢ"}:/7_D惴qD6b=&NwAHp v$ yD*b=m&S 5VnnUoKC~>]qTT(w8Wqܿvjl(#Zֿm3aYkc^*>ZŠwp!!5p_qr 6!@qs]ֺfe6r"!I*KD@I4aԷYBicf8S }N;GDf$0KczeaiIC-ZPS.8*:贛< `tW^N1YuvAM e{_rrDi8RwfY׏UWL( CٹICPGhK8q *o\6PCf>]2_Z?[{RGh rCzN!"˳gt <ۘKse<`I+mz3J xriAY;X=Qtߞ&izXtt4M*q!\@A ~oռԆ, <ҳx`mܘxc+AȹMa~("IP/vq!F%N",*_NvkMθS#vwT9>: )~Na6cУ0R[WD#"N 6}cfe]p"{w_yp -g{4;WEt /'+B^)2 .(8n64zJ-0%\UIDnF?o1hh WvM)VeP]$$},*O!~ ,c34|(Xˠu ^yλg}ǒڳ '֧5ğ=_DyNQnz֖~#L'Eo2 "4XH7\B6_ ޽pJmUE5aՎ&!SH/xO?oa&8J(ߔ!Gf=Tpt}lqLNf5.7(f0"yR=B&^ w $dq _L: `J9tQ`ceUD%0(9q_%hE?xf[KͱpȔO]rVӸT`E=oI[M˝n]E?OE hr( 4˄r8C~j@Ϯp_g|޼q|'9fE Qޖ ,+Q|(5tjWif9=Sq.6S7)崖4dޠ=>`c1@e*~ F5vOⶳj; ˼eY?צ{ )oHឆ ~/wFtQ}5g{6J/q%:0j~&@- U *d!vW’|DPza2h[ yo ` C1qU/~Y|) -Ņnp.?L&q:Ң' 5Bg!Ss:t_˳T[ wlO?،&ӇO \!;A$L&}t18} j2WEQsDۮy[QeJ Eיa+_YDJHΗM{9\LWAmqdA}yȐV1#Y]eЍ[! #ȉ :ϣd3r `%oׅ$ͻWDImQ"3M2H2tB 7ȟ"Q5Ԃ;ꉟ\-v^8U&HXE݆c~yE;%* '۩=#XqܼIi|+†j ZbU0z-;.BGP Pv VxdA'U!5ӷOrƪ|O^$Vh-ZehŚH*_w_*-=#UB #aߒ/ۇ'L#9j]o&#K۪ykxwd:}sf\}rj# "i2GʖjΈH C|#+`B7.3zq1{_nJBQwppp\{٭OC 8+ M4piZ' @NfEǼ~]^N3=xIJ NBTS'iS#K}vkm :+ntkQlޫ->/9{p8qcOӕfFO>~ K7n>U`^?ֹcpǖB[2<V3L> Ǻ"<`&:TqS`QhZYp|P_qlvl4 (,K~)/6Ã$j 0V* Cl:R$<(IǭqJ|c^J;wys PRiFjN,E;.#zt}E1́|0~<opI/M ϒy_YR;*mc%{>r3e_qV[]nN}8sS6R pJqwIqflƢ/{= w֟]Q̨g *:&Kڪ'R E:w.| &\tH7 Fi&CG{B=Pj0p*w~е2핡(RSIR2;`]ν_H&0mva+5E !ɱ`O4j@dtH)}#@)Mfza9\y(XlYˉgZt zvJ用"e)'}$0UJ!]DB;AAr1 ݢ$@דbÆ5YSu|@QR__̽v-!>u HrP v3^_|\CY1[R+Y{L$> 91x<Z'+BrO`vhj?!| m&Q.._.{zGu_toӥYW xb߶ ',$MllYj)n?"d5cpNg޼پ!\ryc(6OCGVQӧ$a8za [f)`sm2& GḿtTȋV_ןQe[0K<9(]XWфw.z.b;ZJMUtOodڡKw#Hxq7wj A/DA~ɓBq~~ڙڜ]?;F{w7&oE]deMD}Vmeo=xݓsg7˹JI~FQ>k;jAs WBTm灷YX"K4PjCK,uD^5үpЋi<:4F6P]H`Wu.z\QdPg M1hקP e U@@H]R? 2N Mn !g`j_bbxdA| a.m[unp̌:L,RN 2zcIORd%ACYƟ"./)Wve@\FOz! 5.n?"I5#SlŐyOYNV(Z[|05n5\Zե,,+)&kr5: ڻX%ui'|`T4 P;_=;pWK# \BC:Kڹ3W<% 큁k1 &웪W[y5sqi(P HKb;_l[6bfQKN|54Wr"}&.1u@ Ta(X۩WZT6Y@F6 C/]74`@xekP;-Nԥ4T%K}P͆D0TǂLML/eyڗm 9vΡ55,ÞTÒ#Oۭd(9NSB_>%g2{%aE(w{4s=+#1s2BE( iXl039I%Û!eWSce+>;7}}Rm#sð}>Y7PqLtecɪ9O}IVXcw 9l'nV DtR k K6=a!x}9Z 4|tDI>8oȽ-tΪYcV$r|z>L+E`}۟Ύ~|hw=6+rV\g?곝Y=" q%w0M$3[/|S{F,{:RN z8OOD;ͅ|tdQlA. lSRH eZ"5'zafMXc_$5%&°~tq7 mlPWKj[ܓZzOF)hp}yXsvdpV >9uJG!l(_uy` TL_݁s-C0~{VT<5ߕgHflty-KBVr{;"GcSD SK'cQmvsHԅh+uaixYT0-筚>V@Iʫ]yk~lW>/b܅t1؍%Չ2*Z5=cRVDB_M-J| 7rh>k1uf}ѡ0-b[O\4& v}2$uH3ƣO-_=×Q }Z2p8V<~XR/}rBm9#>ԇiYX/(9*ܲiy|R]/ ]Y kR#xhR'E ,pnsGobtwGK%"ȯ[!rK4o"ϩ` o~oCVn{K*~SX%;mD(&Qu|}>68k >!r(tO<ȸC#ό{umtnh(2_ٙs[^i"p퓼z'uHhLpF{4Zfe8kM%B.JSqSo74.vW{LS.XBxf Ԓri1401t+J{#U&&|"ʈē2 S4?@:A/%&בpafvB~#(OySX <9ٕ뤬PԂ\鋵*#7ֹTmxDƚ/Gz+u#P]]uӃLbQ*3& 4x_nn©iX C_q+RM BROWC#̉S)H ɖB A(zۺƒcɘzӏ2&u::ؚm('{djF_MV1}] Ҽݗ(ȢOדdZ',ؕ 7is"J[d`񴯅2q\l>Kpe?Q"##wFͦjZqLΚyN<! dm{ /JaV{`)z'0*PEXGmҷ䖴 gv3Γx`q~nRo'2kEѹI3϶Q(I% ăNqEo >G G /N_WF:sco@v۾6Ɣf8L՜}be,aJiⅿAbrFzそo G\BoIuMl`j@fjwd!R 6(& ^ȶaU!GLxx B,t0`|)1ʿcl^_Ԋ;ʟ R5CLJ,QMy (s&~S"d ;-\5ncs׊w=9Pn"NS#NwOY\Χ؛D)"ʤm {˥(BB}S9e1o\/,lǢTC)ĚsVPJkdޜ@i53<20 z DcY/J_b<~'$vH8UJ-/,a`OnHsYY{Pk aESɸV0ksYtB#$YRQ+ޢ@|: HeVm&cvԔ})v d-X5ZǗ0)[`6FNPt`bEo EZt6[VD̐tR%YR:sȚ/!cP$3h}FJ$A xE+':>l7%]AZƃ*.{J:;OkD9s+o݀B,d>|&2J~xGz8 ,u%K0-m2O(Fo$7 ym9`EΛݜVAb҄6P&]<ŷu֒UHb5R%L6bҊI$aPUht+:o+:, Nnc1Su0w8I:2*ԧvN[~W:|芨W AnԲ.~o~+ֆX}w so4}gu<&s`=ugpqov1Lvlk{T|.sll}AQtw6^\E2$Tl㻹&sRHӬ{R*Hk1O=&ϯz‘ٲu\10eg%Ъ@qEXĩ5h4b3~I`Piv-fiLK~%䤣uZ(ؓCn] 7>:?h8gLns,r9ݑjf#CgjDzcFg-E<8s5cߨp/!"k\3a;u׳pʒ%1f뇗WSP|{27XϝK1}3UHX.y%ɩ, mŶ%z>C`SL˕vځk+{\E1y.-tSrmiihH{Aީ?Aj.2D.C"Ake9tI| NoUGZ`CfrU؟f4흚`OU.O-9n03~σy&w v@4)΄ĉ/<,dPVkX(K)7ۮ%~**C;r#mD5~Fxv Q=-,:߮fMc)V rx*m#oY s:՚jI} X~dҥ̫h~&ؘ }ߎe3KƐ^ϙ^}ckZ/LXI=k0'JI &Kpy3GdBiry܆9 S$`\E]hXb T.Sl6ٝ6ֺ7cR mqVEo#k(y.K95qW#tQmpF!+\z(IV8oyb.U8!Jy{{%zXC 8?aq˟Xt(g4M@dz#ģG5P>x.`Zৃlռ[<#vngP=+ W {IM!?.{`&`KDOnSϐ]*+s^0C\9Zz8@Z؀~UTM1׸?djlz38\XZXe™ie0z@*?ɪ _b3[@y=D&ʘtJUZ! da"x^eqfCc[ڿ۟?۫?LSU?qmz"yY-ҜH: {ܻ[U?$:f`"^fNDȅvQr~JrdH?iTv*$L+sܵt,%3R[2cgkԖ3)X[78[Be*TAX?RkD[VT I( hB64>HReU1DD>>#b6&x.StaNͣmbe&fQψ_Qu(^eV6v'rƲ8{Ҷb9Lx ioP> "Bo!NG\^,`*bzm-B|V zm6<KۣtGWe%~&2j ]!{%k@^N,m yk8nl83$P55M7IՊM D9Ndi`QEL*TP /<r"JT2&|m7:2Z;ad! P 5,KHUX%ZH!3bP5MtP/'x{qHBȼ[+ةȖ@f)(rLen)JJ^#9׍We;u;⭡o5)3}!vY}e{5Ύ1y|k+])& 95R\\o%Z:#Mr_k@|gTZQv.F0Nc3Q)8OUb*-R>3;{A~3#sF QGlGiֽ1@)IAex]3vO5~eG ~+Vq[4&3tþ%1<[n3%jB<7tF=G9$6>DT(&!컇7ʤMA[?N q:obyOt c|i-x+3tқ8k/g :F*WɤLLhF;dD6Pɶ:ٞi3 U*'(MKFE9]ϙiVL?Aˊݲ2ۈP }zHiAټ /6*8ǜ1lC?/7k"lwFoGxYXWk;͗ol&zQFb:OtΨW`o=weQbϸe !Z*v:7ٕkK v1u~ tD:l5}<Fb%X/B}ɭPZ=X0|ǫ))4h,̀xsuU Z%IAƇKy1١oݺ\ٲe9s#R`T%|GKPd?=&q%?1#'] Js5miiep+65cp 'KF1ڃ* 0ؑ</a=j_һ!u%T Pq\.DQbfn:$Fuq5RшZBg$~k_[oEphwn2{e\~XtU[Wħ$kI0p _ u,̎^OPZ{{gOfqd {OyeU;KXGTt?KbY(~.},ySһ3}iȷֿ`旣nuS|9WH @ Z")ӧ&o?>)ɳ;>#L%9F*:R"S~mb9  JGc}G)Fptc+bQ"vYND AHZ/!$/WOp84٢lUXKI"R,m>ԉ!;9.8J٠hTىB&7f03؉b|8;̟9^e:?R iTxB6C_LHէ`if B3 `0V6o}jE3(ukR v7 :ب @YA}_~=*f=>(^Il!꘥hǯ _Ktk[PӉP6{ܠz{Cq~p!D.D %g𧝊2HâIw @7Te޶,OV!{8֮QA`JK|UW"!^ i/J6oRHCjpGCqXO`6_LB*YYka/6OKz-Fv7 L*jcWC; (MeO^io۩3d{vfŽ iz՛Qq 繚4hy1cFѽq&.HDem'ղB)+xM$.pR^tZۺFnu%P@/ly#`\ZqYZP ^̈́dq(HɁ )i6y(L=("M=XHr<=-%=C)τ0Jy:)_+vdeS?p/*|e&%q3Sw Qi fj$m(?`_D󵳾rm7}77t O"mYoԝ<\ΰyfۨ=ڴZA}zV#F=e\?yʂPM9O߶$bbQء!ÄFR ],BӑZNb(Zӓƻe \:&svmxb+j,'^)\]BcGp%Rޡ.H dx3ޙ?<|OyZpb:/]ZlwbȻ4V]HY%Z.xI2Sb-%b|2t16rM^:OD&?nldg΋!cNDYI<rү@Q2DFE_ߚK;#cPJ˸t|Hh="s<<:}./G3[Ynu.n~}bm'F8Hb Ni?rϴj.XK/e)j1v᪯Wi^TsDy$?p^nSEu+v6dXrU8nlGݣhmEy"TZ*%(YiR#\Jot3 eݼl=&wpN= m̘Bm29٦+҅Vltʧu)TO^1dl/%g0WpAD˱Β/?/*rO\?Љ}qMNdD<+uu?Hd˵Ir5VN+fO>,>o\1)(;޽Ͷm@=l% QrÑcۜG_V=cr?^ N.d9W2䠏Ϗ)ee|%ג<X1~$ta' 8u[XcLcc7k2 M<%6PdjZ] 1LQVZ"반s5]al&@,yS A\`aS .TNY}E,_@T-f"~5^D|KwNo>K҄18] m-6O٩fk'4Ѣw|H]tUy~@74RG UF0̌U#ĸ;1s A6grS0oppH UcG׼1䌱}ϗf۫;A}\7hwS #\ܧWM+2S e ]$y@R-Z CYI#?-aE aqw:jlX\3sg)k&&mª;>;* A,Y4muc1VH1%8RR\)Q1GwqR 5>5'?q˫ԭwωek] VhϪ'$v7T]B@ XyUBbwgF[ {GRLD˅dDWq_0]~2goEI0{.T`!㟳CG6:sQ{6O\y)ioRH {"D()2eh? g #-t&8צ)A #E;<K Z8°bv&ߠbf,hkn\o7 >U1,j0JC!VtQv4dUZRj1_VeFraˎYͪO'4.n՜UǶ uj [cX v2DӒ_2)qk p뙵LeG$D ߼ԄZ/3i{ð҇j$RaԂʾ< fRj0_7`筣 l*8Bj#b;"nr=vdQڹ)C`tf5z%;n7N {f3I7NqQK:ԪM!qQEkgp7(<5~zg?/./v Pczׁ_St$M4™){条fT˩EiU i"Yp"BM>jVDU "iPD H47pn+xG2b ueM"j0 !0U +Kˠ}Gi☚7>/@35߳Ѝ5k^UE /7 hskӒR0zت-,+aRN-_GtՠKSqv<q>NeLlyN%F&"Rw&Jm!/ vuucC~4W @E,Xi\^@E?|8cwjenp@XKJ]*|w2HLİ6xy(_fYQodh-1&toG_vp;0#kÍ4F.S\ h.ʏVHjX~i{~u$YSŧJ@nS YUsI=-A13 6?1?>l^o!+;NtK*.+32/QH/<'i*|=Nl>F_4|d#]tS.L$คwAbtֿB̰hߏd"*rէ_ hd>jhݱBHEHQnA ֏9iIHwгcU @S -T jJ f%` ZrK @]KED!͙rL]NtYQJT,I>6.Sbvh^/f9gK/,M(|JRⱤOeH ,:RGrFEٟ7̘l5f8nHmF= #cw$[۴Qn.Y.k-mKrμĐ9 (ӜEl+ 㨟}`X0 B>Ps:*d{]Z|Ǿ<{o'bt9+ xߐ\z5Q,|:ߖնߌ>F( NSr"='#ay20yT5ڥ<&[ދ_L^y)aԩ,푊v*t8h{x=ULvj9=Oa}[fՒ5ŕ&"aԚh'u k8Bש`fuzY ;|u:O J%mk bͣh_::yu8GvўZm3Rÿx4ei{cp@\X/IL:BV{y>t1y:.;eajFxNi~lA0Dv$ӮeLxx@Cgx7)~}\'Ψ6A-k">*Y6=Y-1pY o<&fs'@@ ,Dtf!}^RBfJJd rebԷn> 8LSep5p--w pIk_wSW|=,dn[E̞IrkkiZt5X|(``/S͹V.~^.`a4-S`Tynv!ng<4|{df i^~WHqz pv2l o#K;c^LN^z!2Vp'6012~X!⻢U{bj^Ss J"q ֪ ցr h]gg8YJ[EYƎ]*l꧁|nPA$g~ę4nHQE8y ߻T';E)s_`QL9Ԗνtbǣ1[7ޓMQKB ^@C.-\t6,h_Z3̰x[޺T'Wld=Up{.ӸaOpzF eCMhd=tfT&G?[c;Dj'Ŕ 0Dd|UINF?h'J1OīQ,;p-WtV4dC4ap:DNBg:34pUm Ta(.:4kӘjloT>q*"y7X$B@A$ mr.: {{Jn nCF5r]$u+Oj( V?NZμ N>Rt)˜In&8Ȕ^Rk&X^~aZbGPʧ '[mFw.kR3 LCD+6/xH%JEnaX0a&jqIE1JRw0[vkjot%sZYl+h?"P$ZU ¨Jwu .wOJlDo G O(8~W%uTa`(ׁZLߖoWN9\xB/ߵ['Hraiӓ+)[۲B=C"QصuS; iqRceGԚhRA_b **FKCG_!,Tlf8 y16PO(QϖGv|#A zw$_"54x>פU$xA΃Y܎б,?rO!=?=HT^شK7}'B'q9/QtOE6_ب_gW:h(wSWIu=+%`Z<OD>tרU0s 梹}Dp/6p ?K(,-ij v} k]ݹGG`>~&,APA֕'8I!.T";Z,KC35r9`n5:$oCʠLveq@H:ݰ;S=4В@[tz4=_'O sa}or9{nй[7a%DQ 2;=;xՃ6O$v( r}RI 쟞ŗ[m]]7}.]'~iS~Ԗ 찮_NW<k H穧n C;Χ?YRV Eev(L=9e3 uX6Ti)d8ҕXl3A ~b.~jDyxi.'[]p'jx9S=*O+𛂻,X="C=DAmĊ@QW_`F7j1N!Z)uv~Cm JTKƫfR/ef7!F;5yn 9H _Mj}:wew2v- Nj$  u-(s ljw V W ?xy.X^JNe _[ {ƾt !ީ@bhDPmħ$" vQb~U#}]?%.)Z}poMZXY66fO\gv7,3pL6Ѽ@Pj!GFA-ƬImE @t\2!lЗQj@gH9e}9_)F@?, Ck͆1mگf6>Hhg?,*h+L0!&,"=ϊhjr'`~sSK>;|h7pnMpEqޢ i0YFN@Ap0ݤ39*C(i5D*Kjy$qg"QR d9~!#eo Y'0k25y mMu'4Er2J&Dc`j}!J4vTݳ"l{%UjEư"X`D}ӗsZ+w%0 {~7bφ! ,:^On>nhFG*y|'<JfhyL ɗMβu-U7jl;05_&ni޸  tpE)̈́!oa\Uح%,Zf˭︠)Z!i#C;A5S+1bp9"{3"r" NJ2ۄhG B\CgWK>RQ2L+%U?Hl80B0ElY ӟ7G[fNaJ鯕[w!@e0NN3Z$F| d+?LRa" T;G-$ei8~nDf>sijCƚx擳mX(Ef; Qa+hwV@#n׀nt.tB2D@#~j t%t m@e=,\L -$)o(xZ^{WZٕu6={y*Dڀ4Iyf]*oZӑh ?jtƆCiH Q\un+0(pYOHubFU_#u('.+; pUu8(k?8I=?[Lga/+!T!I:䄷A< ߻~i(q>_%YF%8p1l@2U>v k9?oS;yemW-BcsK~fgO'T>s"R5r+?o/AifZݨeԔV5rLLL\B',g_<$s)vY Oay!mVl=:tZ0n#e=N'l2zv Ml KM;+ϕ‚]`\qE*B ,HB,V7I yS6#6?`+7aѳ}XLV^AU'םqBמ?. X!^N8Plj3ɺޙ.= &KvqTG{T/rMD^WLHSw`4vd7qpɢ'P6O1?HؐEp!_3#JV岌-v;BX7:5m$Ǹn Ȼ!ͯv2ƻ R{!_;̕gAu&@f~PϜUMO<ْ%NTa 2KYɂT!JlY x=$ÉVpd f.RAG`%̘߰UL?94 I֨ iPz;t\fM\׊JP_%cxig'kOċ̥4v뒽\!zwNp94Hqe1x4U\햟bwJGTm$ܪ VST{4?nka@̉E&%*Bׅ64F2m B-KLjgoL$Mjf[ Q;G.)57Dtcu*BUZQvPY÷lI;t6TaY؍*X- l}ꭤ Om(2G?"@";,7΋JCM"ᶩ9I}MM"0Jn'<#dx^K2erz€j~mɐ4߷ cg$j RУ C:3x :* 6 2MGˎ*Jɞ y@ ;/jzWi[q[M^Xzڧ&|$L8weYg9  n՗JI2}#j6ɑ{CR %צC #ɫ!xٽt,QN󅶗 tԡ vq7)2 WWD>p^&Q8}) OnեY"F62k}n]jg*VrcckܽR#2g{P+[0Wd.ȼo]BuvY2`7Vi@>&>!ƭ2+\1Y{@n%λ1΃ػ9$ &orP27VQ"8sp O1y [_K M?<DEb\- a*.ne?fvZfAUYnBEd)'dU&F _zTwHn@+e;1>8 dKuօ!-t\v/{{JHtNq"Q0<_< ,r8aݪբv]>G#b3GS<٦B996t[+p1=Ƞ4 %Gvby٤+0W ؠ6ŸqSO^DާI5تI9`,rg(keU0rM'0d| mX]E6ʥx>Břv ]JDpG յ!TAM7FIiYz,iM +)P}&n/y JtuLeJQ돼[G`ܐH>轃5˽J{82b"T0m L=UXz5|D3gkI; ̀d&4]aNY.U=nXoV[LQeDZ QwTCeU5\#`zF_1c4"AfafywxKe4KD5ṇ ΃1B MY0+ȿ?cq$D|[4vUo.zkM.{i+Rk&UO;xnW^1<[^Hj_;@+?FG x Z%'wq8M4nncBJ)Dɉ:^eN3Δ ,FGS:WuosB9%Nvxz;sUS#xQfrDȥ3>b cٙG::) K* Y'Mw2gȟ c,16#۶ e]\=' Y{0kվ7GccB;q.kM/)A򑪜Yq\cnbJMRVKmWZhlI_8 ުvv0z]JqJ!k2^q K%d36 #ܑI29=QxNʨ6m p{Ǩ.͈*gvza]Cv0m]'&*?żE~t Ɵ̖ dMʒP3}_ܳII'bYcGxЋR+usÆůvbllj%,bGGZ)}"Ze\vYǜe+@8<$[.Č ˢ|p@59Ɋ5j8܅Y-')*q.`~PC] 4\y¹U G]L]pSy՝z71m VUh#B"z(;&5'Nƣm̽Dec==]]vȃgބgXn{??t#P;ehFT5\UNUݑ|;^H!PV w/{{ E%osPm51o~uE;G8&Rs>Ɲ.RPl1z놜սx#i4ۡhR[RWȽ LKj sKo䶂۾Fy&$n'Lũw0q|A;,Gus޸O0"gﶏӹq`ONԔG%-\laqscS<-qh` I?RTvpA&b_8gJ!@ň)wj13I7a"'J/}`A=|^9^ʖ`hrqg7ˑ^WϞʷ 3O`e.&ֵM[idj$|8WNc=6F;EĆ 0[6;e1ֹ6j%P|M2"꒚MŽ- ]K B X!_y?+}FIik~ o]7ib#" ]!j\~ke=,̥K]s ]*Z6O/~o/~-XRKJ$(V_$O[yvφwH X rZDku'ÔMhΙ;yU\A{_ʧ7p3-@6^=X;1$ȃW4 _}_MK3\A%bWf3H[ʊM+D؊*G?sM68H3hUѪ%pu"&g.Zq'oI]ܺE*"!ol.a4Wړ vQRwۻo˂*Rg(a:1pQS EdK_B =A-|\Ud/w-1JpIkAnE/櫢d%;#LӢ?$jڮD9a-o/H?mJ\;<"/"ZP@4OuJOlΓ*vs۰z©5݄)΢d {ȝƔ {xEwb}e0K\:g22R'y hȠ6FiLTl%iwY^P&{F躞C~Cg +C(RecR[ 0Q䯱Ja6\eT`4m QNJ)^"BZ"ڵGDvwBdgm%C۟3 Jo${"E8͚z\ƀˈVNаoYPhydVLiLrDqҚnIΤ~C䢺(Ё@fp^C'}1!;3Q6 #3>fCYal g:v47>u\3Zd)ûD~Z8L6]كwKzWD{ ìA3+YtHI{.6:wMEXk DZ͂?QnW }D)HL@|tǣɥ>SC^w>s};Lv߆o2VA@;i?bbJ<0b8k\2lKE+fD߼u4X+G2~p8r45fbc7,T@wUVxI❏Y=ֵ)|2jl9 \yjn'i9h=SCx  yY_hl+oFi4 .Q6!^RYZ >i`Ta spaOm_,6N]E8|79dvs:)5n~H3`gwboc:3½b@= 4J7!zϡJ8te)K!^_kGCxÕ k'f8s%.z`įIU=4:S#[31lljktPٙp>hfj`]%tRIQ9a^Z6ME㿱JJ-[B9!ሏ*-*#IUlWҁ94.}@rcD24g d"bDlD6# dqj!vJɦE7yAejSp[AhQv >R9QMZЦ22$|sƕ_i#'c7m9M) `cRKm svM3F>+u!цtdFܪtM+i_PA"+JEl N4wC*/n]IXT' 6 yv\8-blV6WLRaRLa0$TL6r_}'݉va9"E5MQx4t|om=^fĉc(ŗJ'-n[兖vh?nX嚝!R@ܒw/?g44l&G++sa3)HC[˖ӫ:4\'$2.4J'I*EQ K&MN/9)Vr^qܻagGZU\D0f|PH$ro f&q xQ)vƿܒGKXQ o/d-m?g?SH&VXAȔ5B$NX\%,[8 T~K7_ݰMY߷v̈́A5ry b%hʖ͑?JWz|4vӖᚇ(FERMl=wyZAŅ:u.F'jO6xx5@9}Wa:NP,KNjKL{15,2N+t"/zO^0"h?.Ͷ>sEMjnJju ߢg4;Ub6z鳦ӓ9dB2apNV>5EŔ;Q1t&غ,A}JYʙ brq:9-] Zځm ?QmP˜Іj-A9ϔj oI}if?[(3,xHo!yzݗOZyWCq:iQ9}Ydw$fUY3du~$c3pІ0>RBf+FsvIޑE ~ьfKerبxo9oahlaVxZjǭD^Q MI7/ƒ8/Pp,!a؁6o `K{AH7a=5`]CLS Zd`KRy-JƬf̬@ӏL&l=cz %UK6ŀftBKm1Ws7T9Jp6 X%qiSPF&mǔlq\WG(Q̣ǓEK u^x]D0^mLEX{\uKzEI{vM :¶j-)PoUS/.x8 8 nϸgRwRr m Ӛ`4#FӥRZ!|Ocߢ /H1XKœ 5ORf1"Vo:uWyqͨKxvtc{iU no>c:(^Wi=ҒM_\>DbGwT\A&ݕkm٠6pռFߟK;)ӷ{EEn5Y\XjGՠ"9hioMRhHU8qH1$QAR1#9Z[fxwsp`8xj=E@8VV\ .SYlHsRw/Gw 1NdقLn˂ݚ7+ S_@`FdP!#`9ղ8v"`mx3 V͕ _c_,J\lStwU]]s ~2=d3=aWnylu~gh6wʭđ'Bx〇_Ϲf:4}E+=e?K4P/o`(ULmiդ@;1iJ)Mgut)= ˡ3ʱOkِ`o5F+Ѝ-3*3pAmD@>Nrk>?zcTvZy~M9a錳,z>D"hQ_w{WR5,8^ \}Mp^MZj S؃c iY'#>/'"$ 5IVmw\3WR!;^% Y@, z-cb= \aE00^6|%tXR돜 ["].0psNl!l"5<>[rae6 P]V*ȉJ$.Gѹ*B˙)]"NE\$-6clOaؘGUa֯g)۞v0ҹrEcu#isD v7C]Qs>xsF:G {9afk$Kmjb8)be. sSD5+ 4#%K`xmYsg/&y_b 'M4Ti1E`eZUӱƻX{(l[ j#f-b|Qlm5C;G5\C&.?san(k+R@>Xo0<rN9RD@t@O'o+׎`lcAR N zRc73 ?4/7Cw`Oxig4ӶWX45QO$OE<&9M,4v#4{UKǴ#5G<@lS(Gne*ov|π; Frڷ9J+ze'l<|^YY0Ȅ는Q6tDwPa#.RՀ>]% T+̺ES^D' m_DY ,t4ZI_)] Hf [Q% 8C8W*je`Q$ .b`X*E=қ,:c>W3-(7Ms;DlQ;]xE8ڮ>{j&X;) 4mϿ"G^߈#*m:#LMB%C}5*NyAXvO;h `r~U!y]W| l,aNDTm?)ݮ߬` ` 9EL-0/r ۵Є趧}qMZnr8zcyr`ӄ.ƄH|am"~ =(ڼ'~!vtƛ+wJ5NG()lL X|tBf/7i2|otgꅁbh8&PӼ_*Mf׮=yI2jnjD"*y3+|W&vx˰| ==ߩ,` &(MqDYh[F j;vCGFB):9MtΣmORzW,>$c6'~$V5 ^Iw]"kP5)(AFDJu& O&_NvmMXJÍ&M![*Pol~<i<`ĘWe$Tvesz/뱻.~6: lgPb"uB.* V)V/[5J.%vB+rJ|JShrR6scT,`@B⪲cvEuӒ֦]K`):k}F dKq;fb<^2ls avV`H Ӌ*0Bdbv9;"At={'uRxkF-0<ƖGaR][=Kxoے4`BN57nCí}:WM!1Gb9~(>&DɊidIz-o?LtDIkQfT5ѭ;jgK @NDYe"|uS5Iea3ɑ4SzVP4'?.)T\9KL^q2NOTn%ݻ0gFqPdzty1mPUWHDNo0Tm# Ipu ݯ+p"7N07vf!l2"z=h-ʡMvWZz&xCK b H[Nz[l:svݕfߑbqr/?kd c{VA1Vܳ_\ vsb9@ `yHm{:/hS;L@r_OUOƈ}a#`\F}K/q4t]N|))\.-Fe]O:dzV2h:1Xv۸P`E}p(]l<|QH["*>!CAS~g@cV@64zGCPci'}p잴f3(0\TɟyI\VP?3D3ߎyf)"bM#\9F+)!: blX0 2v SlauTîc]jm6W+9H}3l)@gdɉڝ$7ĊOܑ7 #Fk꣔sdР)>L5LT.tIH,L0ρ@ဝģ6eÂʡ#dZ!a/7?U@5%@' aunUOf39"%"69T14VoV\g[$B"}u 2&}ߓuFoKVYS& * ,"aAɥ9ͬRA[eVЂR(Ԭ3ӿc^Fi|OecLDIH2 OK5AK&+:dxig]-M z2u&`!x`$tn4ي؉F)sV2qG7MNO` 03W1JEɫ6wïc[rTǺ_]w_oKPj3wQOEyͨ$z6ŭui{Z3G˟9Qwך:S8-{~<i$ "Gb"z{uc.hOr,Ie;B@ GMnHN(Z?)i yz702E.ʾxpEm#u;/(Sej< n3`%gYGI0x7;D*u[XVCBU<) PV@jДNLetOPC$[^gSum]+H j' Z!nۉibd~/bk(J*άh*@Cۚqw`chw ـAv x] 9.;K]]˻G6UuGh9\.H @W7m:>^4W=;Ŷ7Fhk*Bx3pL." [!TNe!voZza_E@3hP u݋U!A"WJs`"GQG (+i ȷ7 T^@c=e]W?TǠHC'l7]<NQ]< aù3^G]i0qhVT)zS"i0*A+̝iQ@'v7 *-ƹ"/bolC0Rh5Å ZNM/|З`76,/nk97N= c^6pUz_ה"x׋1}zύcas" [.. R/{+Mv !<}SfT㭲 &{ 吩ѣ.Jg N)vm@kW,S|l/;T? Vk:8F"c-Ĕx•Kl@AxQtp%`F\bNW/R:G4* 띾g 0\ Բ.+t哻(CЌw܂|DŽ6dzk2<|~բw,\ bC5tי#^A޶q\W~=3B(EsDrr뉏٨[,##1I^!}0dPՖ8PHm_ l<$5Bsu5)H?dǪ)H㪎820U DS0˶P݄d iqbpj4(Cѭ) )gkLpsu׀D>0Ii]hzRo / H[D^WmS\4H~TϾߋqCRn'@q#=ܗaYXui*zgp zܟwc|8tuE<]!d1j6Kox$ñS -ꑜw8_FM}Hj [XG<ЬehmÝF{<' :B#Qe=&E䗾&8f#6۟{42̀7Z?5{rO,ùM؉_+)x0x'?Q6ii[N>J!SE2zzybfgף:k61n+eZv:+>6>T&CMI&B^N:}{j!n }{vӹՏDNJoǓ]m_З'\)QJQ|K.1s"mW}N`>8c`iñqZHaB)9ewMWXh ~ 5XKoL6ؤm\#ò40=\E0:ۏU p+] #lK N=dG;\(IqJ- (۵d!K`'V, _ytXh@:)l|xK=-psa,8'` jf ÂiBEr*&QŨGgpI3φsr?ɫNڍ" ^匕.xXpa| \p?p|}beA¯17,Vtq} r!L7{Wh OJhtم ЛqW?.'b無 nS\D -M Yv8)I* ;Me]M'L)CxI8HCLVCKBox;06%Ow0(#.MM]+ұU^yEj~O{X>|DŴ `D,qq`IGM\]nֽ űiLkAǸll!T- GeVoޔ9^Ɉ~yj*?qg2ZߝM[e=T͎5';jy='m<_BPz.VˣTl >%U,6gpuxh ''.u* 'Q/~X,cG-ffk%6r~9+q n'@ YP.an&yOkOOP&4$/H(>CLR셮ř:0u97S}GREDn}ϯ!%WϯH}J$Z- !;] YE4O?0n?F_knZx%z1繈J3^kuǏkzoTm& g)BXEať?$Ya"7³GIΰ^}xi(e?%#LJhlYe)3yWFr#SoN+hzk)lYSy^m#ԅ!\4Rk.>bP߸iF[s0[r &OJ!+,iI ~cvMI-C*bAG X1E.Le៨M ,ֲҎU6)W9yЗ8/ ϶hD 3~ Q D'w^_m(oVoq^P hQ/@8jL<9(b,2X` aR\[N n+ edܴt7a.&|LTZn'OY0n"JrWZ 0RƁ&T[`# / x\kM(T"݊$;Z4mzMmU];O0DV'i倌{̟6 IPclώ"%x"/x?Yw0vBW ySCF$ KDz%[-|ݹcEqR ֥+k!?hf rL̷/hCxW,?[G _HuGU_[`QO>*O/e 8etxCpzlhaNJ/\׷Q@4b~P..xj@ݛ~y@^ot.,1Ml|~- G`jτ a UGgD7l[䁥"obtvL\-Z$Na5/dž_l8=YN,$e+g5]K 2R g^qcwDc@[vʂ#'3Q.2Qf$o;O4֪U~51S>"H И7%eN*3? plj!(y)%w/Jp~c+(~Ô~m K,z.'DJ`/C)Z ?}1Uvn39{NKm#1 3!GYX\LC_t]| M)|hxo= N?h1+')w4mx \]I.wDa%=yVy;͟=끄g{w- EQ cpx'dz`wW d-wWl YZ