freeradius-server-libs-3.0.21-lp152.2.3.1 4>$  Ap_k/=„''ԋ~_3HU[3]L肷lSlcf 2y@`S3~a.Crl>ɭ-lQ3묪ˠ9.䚚"ʽl@pjMJmhؕ{.DI*gD[w8 rU?H$Wm=n:k#7\B"Ah'Ef']rhuM7㸓$SYWoJ\lEZ:c a/3ŌUìiW48>.87253db55d7a58bbe090ec34f15fc5953886c1ce205a8e474de8a44f3a3c1209b4dddb6a77d6c26f1be2cda8798532beb10cc554_k/=„a>vM.xSl*dqCvUc`wvv֓*yc0ّ u_! @x C#Vj cAvqꅟn}^+;l{ʗY 8"ί W91o `utL2x(.2|@gMD1b_U#I.lT3b`q S>p>H?8d  , Fhltx ( 8 H h  @hp(F8P%9%: %FzGHIXY\]8^b+cdoetfwlyuvwxy8(z4Cfreeradius-server-libs3.0.21lp152.2.3.1FreeRADIUS shared libraryThe FreeRADIUS shared libraries._klamb05ZopenSUSE Leap 15.2openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgSystem/Librarieshttp://www.freeradius.org/linuxx86_64z(@#X 'F[AA큤_k_k_k_k_k_k^zM^zM44746d15e4ae4cb7462be9f5eaf3fd881ac2bed007ce4bebb0bba1518aafc3f9d875789c8537b8dc73cc8ddbc3bf7f4c543966bf4d5eb74eeb1e0795b8d6acfff09a3934c916caef6789d7c46a2dea112b5085428bdc74936828bd4001cc7c1bb6debde7512ad6e7e389d15135f1b61f2dd27457572a294d3992d3a5a6cbaa8f8b9cc1e5d41938be45a368f126a6d1fda03d60a3d622dc75e776be4e90c2d2c6e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfreeradius-server-3.0.21-lp152.2.3.1.src.rpmfreeradius-server-libsfreeradius-server-libs(x86-64)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)@@@@@@@@@@@@@@@@@    ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@Adam Majer Adam Majer Adam Majer Adam Majer Johannes Engel Michael Ströder adam.majer@suse.deMichael Ströder adam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682lamb05 16008949663.0.21-lp152.2.3.13.0.21-lp152.2.3.1freeradiuslibfreeradius-dhcp.solibfreeradius-eap.solibfreeradius-radius.solibfreeradius-server.sofreeradius-server-libsCOPYRIGHTLICENSE/usr/lib64//usr/lib64/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server-libs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14190/openSUSE_Leap_15.2_Update/388d832197792b54bb381a0d0865d9cf-freeradius-server.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcde4a462c323e69753207c55f16c89ef825e1c3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01ecc4eb1c9012898ffd82c9e6ed8dc1bedce8e8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59dcdd9a17d7651867adbde4625ae5e57ab6bbd6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=615c4ac3740b02c08f94d2f29d015eb70463e2b6, strippedASCII text  PRRRRRPRRRRRPRRRRR RRRRRR R RR R RRPR RRRRRRR RHP0`BjA`ֈJutf-8791b9ff70ce0efc7bd4e2016721a27a956325efb7e345886a16067d89e8c5ecb? 7zXZ !t/] crt:bLL g*^o1{!P蟀#&$Ph!^h_:ҺΙ6Orq[[+EEt=XGƒM c"rVy :EL/oçd;(-1C:^VO6& c3 ~NL[:ϙ (XQBGr3>+=މa;5#4W-&9?h2%w;*j&P;I[^0k*~ 0QA zX9x`eg+n^ m6ڰ2f;2SlH--Okpړ 77qwGtY?IƜε ]vaFbx50V gnՈ8$uH%ߟK:Xz_J6l=SxaG@ٿQS[ p34oڒ"iGHF  4I"'S / ,rR4i#Xgk3vYR'q )qo;&uk3_}Yг)> uŭ6I)CT\K&1n; 8zNeh}8?G#A#5޿,hdt߼9t5/7cj0L4,j&vx?^r^n%Y ܸJ'${[ p*_x+U3+f1:]sX^xfMK0/Ѣ!]Q/prUC9@EDe^ @\n4s_wcNXuRL10^tO>[5Iu-br^z:b }&NU+: vN艘fivI{0_g9m">T=I}T&tr)T5uF5?O;&MG>V{>$RZh7lHNi9aU,z0#DqJ%(8>s;KcGm=z7bUVS"}zƣV|un;~ u'L#oE˚ lnuvFk%ߔNgm.[$):R =_}T%I߬w'h61 e:sAiޘȋ ,.2xn ~__rG^z 꼂ғ[5O_,N@Y]L+&$i8 &IN. *?ovh:'ob=m31^P w-OJj$onbR8*yJcB3a1k>=.4PgH8@'ezRn}(bVӢa[K!TIĭߕŸzw&{Z\1>o&P~ P oV=\S92 q8uPEeN0iKzP 3`Tܜot],a;lDТɀ 1묟23roE(QeI. G*7ZB-PJSG1:x|nQVO aJVpʢ=14h*R ljƭuX${12rREfp֔N}l;&Sד3Vr,>2p"gJe0J T4^` ;<1g(P9JJ Mɏᘇ匳n) m Hz $z@Vٕ %2gIicO0<BۛGPMeh{*G۶/6ǒL3h" W*A g[a]VѪZvCJvxtXa-9miɬ}A) Q~'x+&C2yvZ{`7E8BҢ>}^2.S҃E30Gc+݈Z;gw)# ABSf#폐s⍧Tc#@Iq+<}%rckPɕ6NzsGF={/J6K|/2Xv-@hTKEAo PD]~dVfcOx۬ CZ\ZI!)I7l$ٶ N?Ȓ%%a EĶ~G̪Z-y"0We;֯pj`ҬX8,FVx+m|X{ƭ#N:M8eS0C[@Ň^k/KS[ m[d)}0u(q.<KVUnAQ.~Oь|.q@T?<46C{a㹏\{=kz}2Yl!%/ʄ31[r0,KA(Pi J2Z C̻ wXIDZ;; AXUJ5AuUPjIJ|^E.GHu-\gr>vIୢ<OG{a )VM0190ԼZ$#1{rQ0h߄OjԶOB;m>E +ցMĔ;HPqe[ө̝ 2JĞT4 :WZkIYh`tJ{kxb(?-ǻ<o| .me;K0x[WRG#)}“?/q |aXHMfUmsIr6׾*Ӹ5$P;EO0i'uWg-rQ kfq wcU>64UNVl%1MZ5lEf`ZR<JB~Xˆ{ѳ RmZ8oZ_@ Rwa2.$H_h.njn?gX*H8p OK cu.%KI'|w׶+5b+ on%b +_(,?-e73-zMcKm&N;+{|Ʃ4+ x<|Z4^ET(w+%৐bdDwՀjSw_7C;g5%Z L'#$=/$Spr #媲鶫$֙*G 6s75y 7-aw(vLa>D_4^W.f8k/76ΐg2J\oVqٱ 86N9BTeY'NJ 3Gavy,mX7C$"F9ݬGFF~ 2BRÊFlU ~ɯQ1˞0!]Cx_Ԣ۵kw1EC޹C!ЀNQbՑ4kpIi ZCW#14i0o41!0i T*΅F1P.^ƒAsĮNAYrU43W3_vM Ԧ&gC;B#ܐqΡ(El`!+P9ўEԄNVbIgQ`bOR2Bo?K [>.> ={Y@Ѕ@NplAK} F%2OvµwMGX F5h*?.c,6(1Z'g8Mr9MC31*q8>P>t41\|У70{쩇DU HCIE SyrיU49rJtC'5H0HK5> l%KiO 7N:'םl(!)DV[X#j!XW(Uc|1 a4H'|mvHa}~̔x{ס] . UNT^W!|!p+m?\NDΌ-Yjo睛Xw2R WA!Wsu%c1/Όzڱ֐\֖hKRAӣ rա0y+D!.\è Y`Vm"e.T=rٲ;a8dӉ(eycٵN\o11MC?j(l.}̮N* Ri$ӣ#[3q\HSNoҝkN3Ѕ ,850䕞'Ț JPl{iD7O9Y gR{A_9Tp"r}*+kQ1AJ)CςU2'Fއ#c}"L6{c՚%u$%*?FMƳws !a,P)0۷rH?{^}}yЅAנ՝LBm:3(D+rxt3tSF~+:CK6~-A*! M_9,~9WʗI6 VU_&5P PGj::{03)C2HI/|b^biƘ; `qrPβ _g'} +}r҅gs]l8C2,71( e,!B3NtWZ]֦͆V SWK,6-Qۧw>p@s+Op0nD:j`zJg5§8ݒ9)t4Xg M+ $Q4F,y4R{Ɛ6lj6 ΀%^jl)dϝR9,A~tt\*xLGU{ZYn梨dRӻcJS'&gq5-1 1!i/b[XBJr;"܉F p"yn~]m̎a X,7)#'^d+qlVr;.4djX̟*-_~nU}FL8VStl7E͍Q|{#Nh % >j+Uڷ(5+7Lʺw 0Yp`앺繅iXr@xٌ%ͳc s 1R&FGhy_eɖҢkvlaJ (;`,SD ǟ݂?}ɍ,Cv *(2M5Ll,ۗTQt&l/`G<;kD"mmɲ(w=q:]%y2ɄnI#(g!*kYk9z?L|nSje-PbBZFgє,0f cEOC[ Z[sV0 ubGw㹴3%7{Z\%%v|%3E»H[ǿwlMKI0B8gBE=@ cNG o,LiX-/o`ɕm2 ֒%_@S4jPDy6RXt͉B_cM(6wkp`P3Yו8ޜUuBbĞ 3q.?TbQxTb¹x07v Ƶ?p.wX>vx*|`қWGH G?+k50L*(#!VQKc<vkTcZX-FuXa/GLi$>Iq[r ,-dDyd v>WM X5ʭOzexya;Quk|{A8?+dqQ@7c ]TNm̫Rd%){J]uJxG+:CSq:".Gky3XȪ͚N.ཬ8щ]:6ЂkPBZbH<u܃_1|9ÍRG%8hIJ"=a@1̢F,9Ï݃9' P%eREf>9=+G4[4' 9VeCW'5n-?A}!r^ݺ@]U",&)8<ҒXBj1 K\*lwKhx2=&3fKz h)|@4Uܯ:r^\ɹ!_z\_Ϗ`; ?BLy<֗ZN+Tl$p]UrFB ~76u}CeWLB*l- >wXZMI[>3 Z6'aqlPKAJ JPm+Gsյ>z|(sFz!,mhMK`&Tare6 ٪SrփAH;wFD0\ *Sh.EsR%7x|#ΈyӐΩA_5p$~zԞm4ЌtOU*@|B=rM>M _ ,I;.Ɠjblq1N-x>A'6X_0^烃V ?z'K EN!(x|?d2ڌ,94NK}ܤYBҠ+U`|pyS L ?)[A%,Q&;ຑwJm3A&y\1A3=SgXy~J,O-W;)Y StnZmH0L,<$g7@ 0p/iܫ,"Ilo2Nx:HĂX8":YvD#O'Dg,A(.S[|(7˿ʣ>I*6Bڸ#][{.vus4R2*z {{PjU$pP4RۏI/?ymeL\C|,1{_::{`2V:O!Bĝ߳k @:`>sݏ0+sm{bn"񪭮:ŷ@w߂Y h}5`9O?›SL~ &uqu)tS[m jt)xcYqurMkt"Gc]o1E?S'(,8[-Jݧv$ӂ`y#Bۋ P>DN3<#QgM_Ťũ\[}JLm0Cgņ(fUNǰwUqt\ʽ7q6{65@ );:<fHS5u]7!<$$g綸UyT׶nLıM%@Mᇲ́8 =:ˆiYN'V U8[҉ ;aP]eD\FcE >)jQqVB/Vo_f2*AF&Alæ9Wr*V,ŽјJ;: G}#6BY췳whAM 1YX5!ʇ i#P+pۥvoԏ[s.%׮Uw LcX''y¢6HMvI]bE&?ݭlq2vY$R欣fGƳ)M ˼" 2 eϼ-6[E,4E<0}3^i;獵CDžӽ5~lwTk1&MR4Fu!<4JC"a r OpdP ,rq,b608$0IՔpĎͺMm=t +!ڵm̵t~2ݿ{[D,1>yu4C,ضǴ DZҥj*2ۤ Ϣ 2p/FDEV}r\G(1I5u O>sYҎrIs8FPB>Irj ߓe-A"–喉}aU rF(, 1*`#jZzU>]Q%1Cq:^َl D ՛;Lts4[ħ'թpfORr}LI.peaq,bGhȝP+Q%L:dxAwZt8 /,`#jV|k崆;)t 7\f|"QJ=ӑ`r@X=\l>oވA/!qeCҰ Y!\SKC4lt2_llpr8;@b~w&(VYeR[[ h:@ ! yvET9E&]Lq8|;FtjRȢȺԻO d@k(99ޯ@> uF1'6?2ArbVt$|#5ҭV %DDDTPUϏҩiJy6 . 1SNu |sHXA˝Hxas{:!3Onhw[kyw}8kz]5SZkRJoop !TYxM SbNą^$'x͵UPASlCԖLQV95Yj վnsуٚWPROs>5rAq;g_٧ Sf2 Hvx^#טT0 RfqfVGvXtO1#AD` kdbKw) ]LT9Ef,րCу>j^XYp^T 7?E/vDsXnZ- &N*ZpUujk)DSӈM. AfҨb)N>`j Ƭpg:3'M63H3E3)CExYOԴ8P8Gj\K|$WB]|lel(^cD`DOp^U~sѢfG$y@Ou𑇜<%XKQÕ8?I7akpN -g7Y=}k/Vח󇷍j(N:"Ol(KBTRqȃE ;\ ǩ*_(̩_?yIKfkDP^Q!ѕjso 1ۏ{Auf+M+X'KZk]& $+XOk]n>\7=d`daT[P[>t߾g>|؟56oҠN-f鎄 BvT<ˑ LHe-k&ea!9nQ 6/sL_B @@ܫtxÈ0Ĵ\P4x) ᇧxQ}5d:Ex|ł}Iū۷gr,R ڞG$'^)@1yL#rI48D#;oGaۼP@i[fFumw ]v >%Bvv,1b6+b U #x *^! g{waI|]UD^aÃBMg5D[CE`">昚D: 0.'sKfV8 +D>3Xv~Rf1DXo-}L[ +Ш ?=+ jujS[ @sap ޅ*{21F~RuQcu vV52R;b75ٰ~^1:3:vr?;q&BƴD1pGk)(Ry1YdnS"ಙEY-RgB3Sw~/z!ᒝȔ#(k i,;Bd#>.`:8NР>wsnTIFv" غMa;UL&2 ?X{يҮ;QBڕ @Wmi]ƫ=! ssS|c"`CC0qez$ن>"V%Tv,ֽ/]] 5ɯˆĖC ueG{H @"eV)F1PIZ#|J˞6`Ζl/` :`ߟ˞+Qޗ"qɁn@ C=ǭÙ_Mj( wy砢&QЭS/7Sha<'< hd} QjF]lB΍p͜:hg ~e){s8F ]y(S =ɸfۯeVmT]kTgPID".K u˟I# O2@ˌI9\BmοxK')]p $%-xzPtXlGPG]+bM1賰w,"K?'8D[ɎjH] HbJħQIkxMV୏^DMsD3Ŕ0?ҶI.f&0WJȊfB_j ΉT/_%<:Ə{E, )[x02ͫ5}.H}Cn]Iqr);*jnH1Y97;]m3Y.8Pݺ;|Vro6? o|2+f/d [t}{kX'V*/5"BK/WUը&0js}|jH2.SE'o eSHFRfd" e3!kDx}jennʎ5^e:;([:_>ǩoW:ֹSFN GBDl8Ȇ/\ngMIjȼ[To҅?b׏DeqE&Q~BlI. u$Z̓~Hrcȗ) :wƦ|(>CrUg6 Ω-7+- b!|:`>e0I ucM@6h@)a9ȜiDf>Q[{E=?I‚I^flkANjl4  -RphXwDM:ԩc䉎*[L9`{hCI=O2CTER&)ς ofn4o. nd̄m_v}GWФ d0F \{e#*cfLFgTX\f%PMuf*U7K3TuaI~pE%m5! 6bJx0爔CΞN"*y˓PDzisal5׼cTx{h*6D>}TT0PrH_eΨ6]:/ۤ0%l(~VL^(!)QChEʲv5Đ`{z2"N1" (w}%P&!`^K:@ei~/mHbk|g>)/ռНf|~X,3'>!{WJ)ڔLFzZьJ"q28pZY 6vrԈE9mojfY8"">kDOl|$O3ǩTͭ'_Y ük862kNYCr}h2 *iSoWhrPOk94 KQfATlZYPЕ!yFA]@/bqBp sfBy4ƼWq"AG`n9}G 7➐2t^*׋}bC"zi.&ڰ=?1TX9_΁?jzMرZzbO+x?l *VݎQ^ ~TC+ /=Z&s,ԕWתD_PU.8cQ16 2[_ yGWiSt9"U.E'z`j]0%LX/tX\'kz㫠:,aIwh(yxSԔ>f?ݝ;Lq8,{ƁDo-7q`Lnѝ!(:~&tXu꤁eaQL7"U|c` YiK-٩~¹0:oq.Rp~Ykh"EԳWu%;j/:ȰåOdN 1b/,ٿCJv'HD|U~mv J^UGd0E+DnC;L- ;zİ!]:ob ʸ */O{ouƩL"O0])ot !aDZ"0aRTu.( u1iuH=5BH,`u@;xНO}5ywģi-+tU> }ύ?؏"E %|+Ĺ#I=kb^l'}'é"79#w\"r$2l7x&RvgL.3o0!(z$)?a$!D|O{ARΑ}n,C>;iڕMY)&:48e ݧb*GGd(ꅧ̋vWL֠l"ѢZOd^QOlVaD2CFz:ԺN?u2c0"H]dW4Dwcp=֭67  ͪ?+c 3!"Hx9!˒Ϧkb`1ry70 4}H7\\i\z[3{MϞAm~<~O%,cv#WtԶ9(#TZE~F괅h&VQnS֘yBlq9JI0֛Q⦑$:v&O•g mGyjΟh(61Dg-!Q)h*]<4|<[s2$9? Мz^ل&G$o n^yat3H)&,Cԣ|GgED5WqxM*z(W["̤W5?V1V8ct,;$KB+tR.EFJhGƑwN q|gWPZgh;{&\`5Al!vN0WO/*.; dz_NY={ @4aXY+O{IHrPwab`*e6rPy;:GM [v%[V kF4H;HOdAX(#0}gd{\@2=eJx]J֧> %>A;%㝫Z;EEhN%LG&H)a|twR@UY J/iSfPWYvMR)+iNǪP'Q)|"BQ|gPH^',7yߒn:fA饑$~ e>l:0>@p|9j"7[4?=/rHnۈzah쫬xhOnޟYD3YgeK-Z_*j;@>b+Suw@;Õ sp&`I BzHI(3D;ȘOF(Z,0;"0e'9%ơ\*aq</4[]ҋ3Q{K@*M3UhFJ|\U-۲8@f 18oπ"ux0RvF+3tQ:)%Sb\^]D.2ԏʎHO)WVZJ5<OSIF_M^IQfv၍=RI+Ye G=9O))q6PaeY %9?T{L|*+{3,s8plPղbp$_O9f-|, ^UYߖ>*r2擋-f|7W[-R:R~S0KfAH!&؇FX?G7vy_6 Tǣ̣<5Ӣn(~;އl]ӧ5fԮ.UW؅4] }18ŚĎTA ΫF[DQQqpF $_$Kkz͙b wETG%6Z9~QLҧ .F V/l޵;$Z\n9cNR$\ψOYt5&keNc[ʁs2SÑ"Ag(ԏ#bU+ºvHT8%,@>Pײ;򋟖r{t}A$4|0P~ lx@$=&lVcX8: o3K%/v%OW06RXc#ITTsvR3`FA<&?6 ({7zs\OkP+ٳ]Дvkh"{`-Cz ܶ鳲U#8I/@J.Xhg ;OTuv Bӝz)ë $GrJ( S*%n4;UTMRpdFI׮H;3Ð>WXު3ZqLE+|aOtiE1PSPyz*O`7RQTK@/|$ZBơBFfeYSzwVM3s 2Pg|)Ie? 9ۮۜ A mJ}GuGLnRԸm߄}i7{t>iї>m 2)~EmH(d'K5kF^B_ m'"e:3$cC$\N6cʰ-n\;&$?P UuW]ޯ3 $_gz0VX$x F*fɉƵw]si&ۃJBYeg (wܓDߢ>+nsү2&nVN QfNj*`q_Oǟ BcVA(/BY0* ص۵{!2 pc7UJi1'JRSϒ!WqraV[AP$R D&0WjUBn\|Uo fs(GuS qRКT|}i՜Gd}&~zfAiKJsa 6/.m9bgmIFMWV06܏&tpԆPF[t[`[R, ԁ]49JrX/Rۍ2X ,;,DRDwhL#|ؿg0abWQM6O&z8LKTϬ`A٢OT't 9/U{6Qzkmzuhx+TGL^{E\074U~€;%^J6 `).̷"fC#"T tč{uNe1.5)q.%QW:'֐)SP GN Tt %!x )Q]oCjػv?Ut{vu\Psw{_PMky6c Vb1q8ϻ{z~I Kp( :p$(M~Dc6騶6mZeMHUY K*|xY-sF2pL; p;1@SWi qY, ~kxT&]DZN3=?b?U>h=(Zu-\d׎OGR`J,tA S%6j\I3|)ى\$%[&) 4jQH0,Y$kT@2T$<˜Fu-bm$5:loph&gx=zR9抏fןiD~<*_NB|',/Tu̱zw : g6/\x%kgP|Oh*c |%64r;!FSx)VIg*7I>G!`9&B zf٦YdƳ[ɶ{Va uK]t$C%m=J8|+ʉ)\*Y%Bv#J}+z <[qwA/4^, }p- ߷~ZTe~e+@1Ich6F@եi>vx 5TL 謓:Lbx2FXP얈S U>Tw֔!GYWCoRӖ x2%i[B~`VEVM\YD+>$W%]S/YA;ć ۹2vA+`[Ow~>9˫=م_xBE+T|Z;N2'n=o[&u2eA80hh0ŢO6%хpR^JO bCM"E5btbR>I$EJaEP4:5:_mgdT8|hi v0^`0HYKs^uN21# mߊ-hekq0cR>]9#if˩Hc(ao 1Q&̠1UZQ^L!#^i<'.˺MvP}kSs`~*z&kɋ3< K aſ̃2FHYVLFs<IeU.n- pM? ӣY-NޙnV0"|}14;bY>c({"ӝiφoXg @O'mdq3#'u+.͘ϐ^seyb vקZJ[ః #4?(xmY)YʂӇqXQ!$q%l'"򙪛ꐝU^:E=O@ቯ%Gċo' 33~QzK=3u%̵E6Y#{ȩz@R D!c`l_Α"Q49M0m'w2 +YFz Z)oXeP11՛6K5&5.G;YY !\DM(FrG)GJJjKh\jsV!Ӯ&g%\lI1ƆE%pݯ]N>ї¸>X h 8ʖ"\௳khx3G^["Df…G=UxH$t[G&>ﳊNQv(Xj+(n0{`E#gRcOf4Q(;ܼʶ08!Oh89OTؖ-h?8-͸;dܭpdɞ6s]Mg}7+.JHN~|Au*o;^0'Ҍ"\'Vw\;/_׆|pR( Q@}#"D|J:roc:Wgn 뽥39k|Mcs#xu2_vP)ؓV\mͳ+>>r t|L|_QSꮒ0 |֪OMӺ8J:\屯b;9=?z~-ɖ*R2:5-Z>mcP;-S>k> .X>͆Л+@ I2A?at sS%4oH/ӖH b z\Y?Մ_\g0rLʎeO^90.c="V^!V2'{bzhpr6kf7k7RYj\QG e^݈IhǚOF{.m6QeD|Z|d3͵՞kJ13xOe$ =v.b vQU\X5Ҩ=\E_󠆴hɐ,/li{FqSG^&$ho! c3۱|^KR@lA-n?hx^t Vf&w!sSαCTL ʲ: 9S h~UWcKa7]A|}i~xdʒ>Daog>j <>IeHDf餄dzeB_k3|dLt$1>pӖ9k7Q%A5T(-OAQY^:tٖ|==+3 ؃WjHUNߥ"peC\M?jDKZv}9;~ahe)jZ[+GOHt -vOu3SGZ*b_<g`UŧO.!7Jp\ic52Tm|9r =fz^|CRo7 ( 5r&;5vε <}"!>Pl%+: ~ cM=ֶ\Pr 2IĎP>7CK?68qL-F>kQώܼ4ٌ}0]EQ# |a WRN,"aYL݌1 ņ/Qbʿ* T@m cxՂX ft6e/!c^4;t$#>i SD'-S䩳շ)S;mhV[Ir7VTX[EAM)LUTm>~AeFʌe#|ܒ J{K[a-u GS| D Ayƺ]$-Rp]xqSIZSZ~??M٫0D<#`( Xl]+h?'hr7ɴ3"BfZ͔@=nOzrcA j&'^)SX?AYdM=F}2lTk14ˆM-}T'qs߿s ,zbUODm,Mkx%ر^(7Iq1p]XԨ`$`IJU(b5%je/VәjC 7{a(dͨj9NGߩʣ"^>ħUXB)ܛt |w]9*4RJ %4GgI6 P1 \(dKGcY(L.27f^S> OC"Fb;t%$uPT97)Z^ 8Dvj y5Z jp4+ zSY(dOzZ i %& bJS|BJ׳6Gsܐ *3[ Pg`>D#Ի'CF\`^~]͝mf5W0BfC3á  * _J_|nJ/3ij[zi3T#^mFlrzSwQ eM#. 7a?8y dW}Z `#b8>VtZ\:U'{IMx%3R=Jck-iѐ+-o[157앷fgE}>#3kf{cVIs@ߤchdi$v}No%g8?c~ _i\m!+C@7fTU` TEaVݧmҢ0}Ӡd{c&Otڤ0 喍OKʢԵ?o!PU~=\h]ۤZ.yyz26-JO{c*:*idDngv$\>m L2ikRp\0k {aS:*["n$y熽td={ܑmLKJH0eAFib} Z*S \p>i4&/Jj ˧m.& WK?]Gp0SʏߜY ӂWo}9Lc?(9/ž!aKDmΪ}r+Ō\JAӽh@C sQbdR1q7wk)iOM9Ȟ/ fROZ5l֘8K%=61:FXTѕ]DGa:߀y5 t㤹BLKՉ 6L/kށN!5c&e}XÑ ^I6a0[%>]NlيE& 1%$d,T?n " .AK"MQ=(1.DlNǘ`08JО |I[;#k&;yj;._KbڙЈKL7bKO—`dOB#m }>|;yG'N 귅4]' $U>W5ƨ^Grb2x wm뜇O L~>6O;!u!Wx3E k?-O o']pzq'K(+_X۽xu6òC_&ЗCi*/*Xb]++*M:"uКrk (;q :gi1/>Rx!17r.#Sz"k|N{Iu)Y.E*}Y|G" C =|--:|-h9l꺚~,.akˡhzdrIxdu֪4kF"%_?R.CORd㰨!#KwIj qI.5:pΜ( 鐐Nd p1u/ axĎDCr?Y8#{CWr1T'z~L^_fgΫXjk"x|Y_W˩IӨpovŒ酑EApک7_Ⱥ};n f+@6B۳6 Y``a;j{A7M=iCI\ы.no{.9fjwme6],9@3uPS3-v㠔>Iu43 ͏;XvL~L~gO-(hɥN)O'2Lm>cTʁsѰr\hFJ^AowvM/LVV R/ϼ„~n b!3! ڶLrׁQx]&&g C] Ǧ_ZNvyXc6 Cͥ e>:Q+ I.Us axg\f5F"1/e|>/w$v`3ؕLx"/Q%mS7;>/ = Ьl,`s8ӖJ{=fJSiF7&ryt$g<ǂ뒎-lpH:q=i$ZxGIgUB9!c*Z/xj̄f^5HX剖< }|Q'=5'qv_H̍+2NP7pZ9?MeU@g2;%̙K@ -H2Io_ǖK%D /co$ HP1 ^P|P}!Tk&at?;Q!{Iw̡AGIWc&t AHRy*gBXT+HD "'wxK?D651ϰNaSܑ u\>!\\P2bM~C @:rTNBp r2yOmD?eY*0C{E|K >ص$х[t'ͬmmKWrNn@hkIozMIF3~P'G@ʇ=GE9VohmõxYOޡ6 .hy.k:{CiQ?8@#ܿsi y[1S YTJ$}yda_ݔINn ؙpn]" !Fm6;g.7b+q8<"E8YvĺT\q]]Ha+:]miŸegd唗 Ӓ/6:=J:)rO'wxK^?7h.?6>f8˸fl !@ED'铏zbU3Ta(/o_3fzgxdrP)c Pٲ+~&!K(Ka4ɋӖ#WkUa`=\#&$ř2cȕzG&Mca?K5 CÞ'{V$qgeei_V܅ ]`)Al8kl0$KC%fThe 5м8]^Ht!*'E/*wݡ@[bf6_R㍗h~+x64lUKG\ҕw)v|-ҺC1B;>16K XqiSj;!. qxv=Z^^~Z0~ H$> ة{-`;49Y08<~s?}+ ^Krզ4T*_Jը7w腜 =XK7"m[FI]HeR *+3M@YklB( ׊WgC⎖KԔeKE!醘mj]/L0jE*z\^F ҔSiErQL >ie~ǼĤx-룦(UqgѐBX,Edx'[-[rPܐNn5PavVרAC@ζԢRZ8vz<}f}p/))pVoZV~tꌎY!]$φRVPtJ1..N}́>׼7T :=1% bVݵiɀ|yI&^tF[F59Tƥ1ૄU}Z GtVjwk" k?֕v:{*OJ1Hzi'ó_r$!D3>DHG _g%ڥdJE +:g9@)"3!2k;+9ζ[A/[S1v;cju+@C~wⳲ`c)ʄ21{O5seЎW{:Tj59Dhs'4D)7#=̜TTAعlUL'˪z*ye(X[QDƎfm< Y镱,+@<4~6tpɔr@6s?+*{:V{łlM-~fURr@J&8p2XW$ni>3Gdtԝ~5 @9,:fa%mܬS.U~Sh8xA(SIt~v)3}nb*Iq~͊$Fʽ̳@.}"/z֗tx3'جم6Ǒ1(@6#Ul0hŅaVd2f5n CÈ:='f4 8_%^qjqd? |;&s &31(ke tnF|t<:(VTᶣjQC OasVO ?vywV@#;iLh1f_/ۣpkPYt51h}薉c #r2q%h=)s"RouڄE#+?%#n1k2lzj08nz[M>7SL>A0u[[O{N0V6Zu˅z}+3`}wVbsve.?sS">rV jEmr5:oU.̝{8.HSX]o6I]3-jgFw)TeyTbvh Z)Ye] pٺ-1Q\ykg'œ*:Lۈ|qZ1"F=^LRFK ;hؗ=}ސDs*^?1)zwJ!۶{vu뜛ɣR6ks$Wb@e)@OTy6:\MY{]4xyh,O&;Ǯ/8XK_q  XM .Ce,sGWQ,i =CfE.E +aHgC;~Ax#Ͼ;)@pԾ"@I7fE}9U!^w b'PC1D7ҷNW#? YHu U7{Jd^+). /V [|9L[@3c?MRB%Uh@6%' Rq#j-2(p:!aVN?F+7j<҃?#ɩ̡o- yט<2gxOaniU˥bB֠Eh+ ,ϰɻM75B /)pFE/J^)nZcxٔ$2N. %$:S*E3K%3HY]ѝ4%XǪ{ql.#Ii:5}:~?^~c-K\%Y6[{W;i%p,Yu*=> AEB0L#f&&="᭧Qsrk@C)r{ZY!T}J UA)B5L5|PK`'|?Tʓabl7Cc䊝|RcI2P݃}z+5Bc6y!Q=}rxx#XgHt'=Ҝ P*HU1ö9o:v+~F hc.HBEHZußݴoxR80% i)5MK (Nİ 0"^(Fݜ*kpXW+Pp26$XPԩ&.zkxb`KW)tD՛))lX4*^ |/~ 4EKLA:/M|/X`"Qm7{vKtv ml cNɦ:FJ @Y4&Ue on8 rQmW̴zB7a"fJS.Z9y2!3Ti1JqLK9WPDo1~+JY-Zt?%S\rnm1]HBA86 FǶfT"Zaߡ u)S,/R%1727 x進=uWgcճgߒG%!gȟ2f|<mxJ LTnGm͟nQ‚Dܓ|ϛ|ػN[(KY@\U?5-Whrʚb@ L*SP^sw0]57;i1N9sJG,wzijWRKŰA'{2 >P!7v~lqPXG"fNΛn| qQv'`AߡvPNi0?>W酬ڭ|v b/cvRFE.e14 BdR"]qDTi>EcO0_!UކI"܃9 1X$h'n['u:$3xc(C ]f;#ǃ[^.h apH*zkAǖi 3Kn/^1_6Epoԟ%@Ʊ h#zqTA O}Ю18EZqгЪh}pr %ϯ3 g/DR>!zɩL|pI,D#h -A3Ɋq_ ,3-!ⶁ o}q G`51xW@7}8`r5'db`c)E}2@hY捈M$۩>lA:ܣg ].PU .`ˊ8=h3ΐCV%vz֓쬚8[hBg͇jI'< ?QRA%jR ERZ6aEj&/X놖g%Ԇ3r}c18n2잍UB"zS?1ZɲMdo;`K(_?(9ɕ ]z;!dCT t%?_3KP7/U[2n@OQZfLjij?_@s& ;ibNpҒ&Wsat+e{MOj9.!Q[NcJN%-fSyu8tN 60eD;R9Ff]&Gvb#VcU.Uw:I!-w%nI gm!P\`h,bѭhF ݍ}DwIz̯:n_&}4y͹ l/RRlOZsGǢsnAd=̓|naCO +wB*j a&?{b~P42c<8EK"~rj!`Oq]~U?Z-S'盟Weŕ1jBv5(bV/y7%EJBC3)#jt7wnèNv L}(GG_GG )^M 1bq'앲)?PfB1! +-=XW" Cd>Ԥ?-smX B3s4 &j)~S|za!DߨIͱBo@f8fO-UnL}eX&Th$k]a:8gPm#f#2E[µQr_`d&A+ww  {9%/qVT = /rZ J%{lU*F%=|2*ͩa[7ړ*!RT6uE?+i 'iOȕ8'80 =Θ,RɧFf5%/1Xa@ Q%;BQ**3,[صRbt3%Zu{Lq-$Biv5XysJW7Ք\Z:Qؖ Ts7N˕ IkJ>sCT(eOJ\ lrf tח?V~]Wn2o){~Aң+Hqf^%/~kf&LJ,y{*޶@T[{~87-0F8{fxOeOc{yJEg[}!\AYFNd ieZ\SOXh,BC ):lĿHXSQcYMn 4p*U=ri]C9Q\I eƥ'YpEՉ XYMAZZk*ffh(WT /GY򿘝~*Z8,Zo7\vr*Ѵ )=g6үA @93ŜuRyJG v 0}}ܖ2Xrͤ7ǘߙ3ʞ XiOa6xO::.LW9+eb|v ,gox7]}>[uop"2P>MKkDysVQa⦭:<Ճd{i8Q#?Λ+̿n 5ɺ T4>0 $-:a "(wØ6 A q~wwдF#㟄u ؝K57\O 6wp檲Rᯌ@+} \ek-&^7wdm$q̞+Մ#&b<,^N;poZ_o: ٱT  oL:^e6^\mYNWt?$A]amEr8b]If@[Y?Z62+~:a* isecԀ?f"81 |90 ~Ryh0DBHZ3݇AYwٰR6oEfZJ= >0P4vZL%I Xݱ-5~PVӝ)wVq VO icj)k' 9[k"rjAo{Dg&86 BRMY|P(>BMl0d O? (68KLDM.2 Et3weiutdLN&zŞdO@ 60Fh>BoD] 'Plh?#t1- +it d7ҞC[$ sp3Bq3#.6Z䑙y{7$|H:J=?=Ԁ\@'QڃH=-W3΃{F^2Aar{V:^%BeH `ZX|#]X̀Ͳ,Vf<96Q\qbBa Ud=;*G%`Xq'ha\5}<Х]?*b!S0ÛX] 6ea8_Xh"ab/`~QZ}y'DR6 ͠ <|Xz%@HJf*v>PyjZrƤtӍ:\6xO-lmK 5ܧ-ܞyMǾK(SKͽ@%R!Kd>m(XPiODb$ҺO7e0xsmN-W"M"W61c^Ts BL ꔄVW~G!穠I2i6w&7q y%xyH. sd]Q )zvm~A>YVw)Tv!{AnOFVf;`sۯ\S[" OF$WYKj6_nccSMq+Cd gB&YR[&݊ 6 v4t!hի d>/-8$'~T:j4B`xzZ\ukh\C]gkVt؝#lEDפH5oG4L3o}nĨy! FX XqcvN[;7L߬L*Oˬ(r$Enr@UCM"ړ!]/UfpVk\<ݚ]++`fR S591, I.sq)Vla[+f`1K*a$(֣:"!J6c'|ʩ~[]Z!(B\ cr.5Sh8mC|菟B󊋡ZKvw-sƋԅc٭ut G1b#j)W7~=S:R# q]:qTc$ _0z+K!MY{(7xDLb& kL2"Sti%jōJb! h7/"PH:FPu-7(ֻHO@RbPz3ɕsYD%-YVVCe2EC>9>' 3NFMr#k}[GiTtsR6{hn4EOYGvnݱf r O$hI'p4 Z { v QunT iELO=hγsBSC׭-Ņ%`6ƳP}[;}?cy0wpb0o)/Bbmbq|D>v^(*T4xU&{aU˲꽱3Ib^Զ[$P=Wn 8OYOLoXZa뛀y@cvG3V7Z6box`Qb U{p/> 1q5<姊}wSf{ ApL!Naq 3w#횤"[dc(ANkcELDqO(u`PvcoŠ.,4u |dT5'zlQ[Mށ!G xC}4sEy·3x~xjJ8 (|:iȳ3xyW(~mz,gVh?y Gނ^M\խ r[M{K귿u|cs={5yma69>2݋Bq|TmqNVcj:̏Jo+8Ha7Y/g9ў;[Ɋ(ggN8].GɀOm]VD.8.Wi3 #E$J)Gi/̟wk}f~bOUX% )jΔlM$\>$H=b<z3DzY`_!d&dBC=85PN_'RCA/w6FJXohy#0  J jAvrC^Q '>V3>N$puj mZT۵9XDKkVK7jP}Taw!oؽw/O<,Bkvp*u]b6־]~"㴴C, ZUD@P!nUkG_#4JSvZQdq#wjZY%Lي1-=Y%]Jͦ$ AX#ٰ[υ9D%|ܬZg-Z砾V*n݃QԤ(7׉F\RӹrAz[8p 1j}7-dlylg̪tVW9˿?Y3639w|tӉToasI.iU;% \n)Ha>((a2 "n?d(Tigl(ZjIiax~|XWA]r[tP/02/4(;mj{)lr4-Wjè,ʁ2k~GUMªV9|Yށ6ߔ/iD __rhҘ֓r]`?EYAH4mMÇ=M7;n}xͦȱ1[BH5X_楉 cTNZK-&$Ub EӐ:Z߰xH'^\d7o${x=4۩KdxC"7żW ^%4G  s%+ªu+")'d*PmbT5/?|N]z =?\ =^f͞ (맒Gq$hWrӖOa2?3u(LJk+(óeͤ5_ %Ii}^H}$w&w͍j.Dcnѭ!B#b&7TЇ&LƆ0^ܛ%7D#Dۛk{Wi3MheoOӱP͋zߵ.2w }Ṯ{Xκ4e3,-D"A9fU} 4B@,]%d"I#IƘLJ]k~쎚TZu\{; .% ބY;AH} 0,2l.Yn&&SEg"^gN&t0 _=HVD*%f8ȡ0 rn*2Y7Ao}kO:&~z~;X[ "G;:=HYS7דl>11,߱ B,pe[_H_FD^0%TF x+LT ÁO4/8NxE[YeӞe˩w4l5#ouLK/HKR`H}tS2 h}_Zd]d~1:@&7*}}~d`:Jf#`X#'4:]i^3MU~#H9,!uBSmP- %=}8JYxP;J6AEU[b4~qns~j|,Ua}PUXf VlE.Zh{33`\q0SE.⩉QD6e[ij)ܹ+*cٍ$rh$N@\_/Z` exͤhuhF#-ߌ;Bpzbb&_F湱N,z]b]!o:q~i%!c̻xN׿De_Xp3Uu,5cs&FՁV첈,tUj7?5Y|oX /U9@M{h,Ar%MGr"=%^Ȧ: {GO`|k:]DvX&2(ɒ9UGdk1 g4<8 Xst/zӏ ufv{z6l/o>a3C눷:Y^U>؋m[Xv UJQ:'j{N sƒp\0r~]4;\`Ԥoˈҿ X\ðr&$09%^L*{0z#~4ƒ53vɞ1R+`Z٪jѦv78GR+B^9kLslK⃜6hE=< uF<.މ1PiFhP%Y$Bj-M/NJT!WRK(I*F[b%F;Yw/Wވgq+ <8GgR?7q@Ǡı, n/0aì n_<zF؜.ssoa)_ѹ߮;%wj悊EfӐ.UA 4_ٲZ&U^^w`m;T~MH#`C'ơH3=uCoqX lqϼGw3l(󟑧h%od2&[M6&*'|YC: N<.چ%,J(h&c dqfVZq+؊\՘َsUh:z''=`0Y)gZ԰2#d~r<'%فseweu>Qfr`&Ŋ,qf 2B9ɔ^wMc! $;C}l3MbQ]8\)??Iṱ|zUM=?/</dW1E}w*(<7[Lgd#Ζ'xx̞͐BHSRr-bҐ˨3{j؂&䪈0\kyş,GL*oe`jnU2 d}NըZeE8P7ZbWGyP.n.);T8, \y TIb!|=6D?mN旛`(N sO6QgmtSrNe=ʫ兽RUq=HtQo/l DӜ԰R ֩Ɔ؍~'=žrJ8C5f2*tހC.HѽW;z_f)G'ħ 8"^3h1.(ZAcRdj'9 +ض~!r8*ٓmQnD$mt2&F/OQmu0fiqg˜̽^l:㙖:lѐnKY˜f^pF_{HD䥐@bW+T+,vVz䁙,v]WYсֵO5.Aw%Wn;)_d/*' fwB }}8M I&_+ܻxw=&u͞HsG5Nv")пF+?eu!{muѕωzPjΕ;u֗j&oP{T?}(ϳ2Ocjm19KA90%WhZ~s&d~'O{^txSɋ]:_q 笜z 2~ |uh8Z<.Hg@䙌ل䍔B7Hf*û)rGez}/~AΠ0L2"O-128SMs дݖb} (؄]#O󵵾e64[zS}6s{h" }` z<*EɑoBF)_^έZIߡؿuФ?`g1ϱۗ|%TۍP (;hIHymju'0xyL%,|/X=3T_</"ҮW`;1)»LbU$o`@эHbnc`nDK?.Q䓏'@sfV}r븶x;C]C_2&b!նu qǿSTJw}aR%IQ"0uq~5%otmo`TK{(T7RQT"M  #E W%_0oMZuz=DėJ(Tٶ8SATAv2#tuj@O! >H_҈#np3m̮Oԙ^j\| >f0(PVŰ:Wcmړp |q pH#6k7䞬P B]~U*`ߚ}(XcWYD͑y9c xl @[Q!_mBA2L4M4[W׿"hU6ԉ:I
`rGY z&bGMQ:Swh̄"f)XK o`x㖨Τ^p áZ;\ňq(nR;WR[)+kDkQIS`jQ[Eނ%QvME=!u8 frgEݍv ;T≆D陣}I8#>-)䨺vDMoor肒8pT嵯":̧ եShZ3oeMk 0G 8kgپ\owZq$z,EP_Cs{F2#zHƁN?H%8돮Jb!ͨa|5YANsRBC+l:,؊XþUfm0K#[ 1 T}v~ix0#&*t.3٬;+|lB; rJ"\͉TBMWk@TC_;!򴨏p=Yn]wʅW@T-FwOT$_XRuP=,{AǑhx~,5O^agF6mOv>y!SMIn<ۢa| f]JAmILJ1%sռ:*3E {x.e{`ߤ%߈BsDDiֳkG"f1>TO.g,!TcJ[{ȝך59V[՘ZVʬ!-Hi޻>X_sȭ͖4:D-mpzS8TDdC5wצJdL*耘+{$5h7pNLrjc2* O$saZV&T(~ۊ q!@w2L?=~a/NAL%ɮvGgb<OGQ^ٿ˘C؀ۆJV9,Qp0O7^VF`D*[Thڱq5[vcA?kA|6Oܼ)pp*#J4n jK0K%hv^ݚ .١p6*gcI+CgΕa+ VZv6(jjG %K;=%f|l+ߒH\Rg~tKE欢.Neu@5#U(M.@,H0>ȁg [Jïa&UMP E+pJ[to}ۻHbB{Z$w =Y/ pn\_;)n؀j_IYT"(xVKb0kX^cxQ= ERH+uv<3V@E:͇I]z~LhG$?SFa]xVːu~}ސPV{ y!jccuH0NOyl!`l}k UϾ<(ph3fVŌja1ůLdL'טosHbM ~;Nw ) Cvc{:4ہw4X2+k$vT;a=I٘}TFnLfrfUd&@3y_ >nTǏM z gWBFEMv VlOo/rieIǕem@rE]K%"xy%n>+a,&;ͽ}[  w}|F!ptb9&8P^=&#[#c>n/!FQYWF(++xx~tx^؜Q| NJ:.=$gXO?&d{lׁ F7ˍ{( EZ$OШR7R8Pk ᣘ> ?\>QrwwJʌѹI)sx.HnpvK}I6zN&ruqqہ9Ϊ]JԂ'W!-AWO+~qH͏dr)`4pgߙ{Pzgދ<ЗrÏA )> UDFFmz@P@74NF]Q'2[p3b\;#,we0A^` έY! p6[][sQ9kS 6{uq\ y:o'!%7Lu {pW@n֫Tiagv0c~6r%%\p, +с46MHWQTjKU(j/r0ȼ,.s%*/HG!]/3;c>"4ۜ~q&0$̶C]])Z\EN 뫜IGn#a!Y춒n 1z rB*g["_ Id?<>cύ0.B3Mrb+szx%iugFJGT6% pdzFŰrR%24":FvC$E2۾/Ad,p@&>Ptt;̮=fgi?5EwoqQQ/NOVTY"T\Cr+>Qye# "i/axn\YPǞóAԑKcm2Ѳ%.G#݇k.w`LBm˹`ɓ.!5lS.px2H9!O K1e/t92ŏHM"/q+| C7 JhJpTɬd#8 KfcXHH.#D͞&?DO6uCUQʹ-faʪ8y$hڍs#í/>\Y^{,pgqӤn<Nc6}jї04wal<بTl/"sW+8"+%FBf'<`Bkz *ʄ !FGV+Ze\U?`f`0TO}a:K r竡^sHSWC<=M 'RKRju^p+^qU'.?JC #b^LeRXl ߦFϏ+LhpHnd<р"lpej]8GVpQzqZT@6ZG(3>Pcol[V\^hҲ]'Z:E#%;0sLBw}3)t"$uvr +8lfd5OFLzS /8!x=9.}YZfNgR\PC+014MEF_'BR7=g{ƣuz ugxbۑȒp6`u<#lp-<186ː,90>{*D.Bs+XZm&(;TD茶T1^ݝ/])i,ZgNNJ%:Z, g,H{ޓӇ"cUnpq˻:F#".wv 7QZ;әeVk+֣Q¨^"H6کfz+L 5ץ| cx0ofW=S\+{5,_jUU&B(⟼HpUҷ l:/O񂘌i`;b{s/?!L(@/܊M3h| \OgITug mKUiOzqZԣ= lafvb6R1 ͔:^LNF/Z&NZH9awE L%L)52LrI-=KEgn7䡜f_$ ߔDC:3 o+3JjXS }\?e8*QU郊ƚ6Wa'OWMݰzHҙ'N>LGI$L/e."f 9$>ٙݳet!xHCw*mz4'Uzfk@V>;8P72g(S!T$Λ袬gչ.p"^NP(<?`f\!֥Fb G?)7ߗ11-R2kNιnFY?q]6y$}O=[[oNF@ֹҡVd3nv%:ʟI.gFS*l 2Sۃ=rc6srFBs}Td[$Up=x;#WU]iU PXR2?-Gv ffx+Z?ޱxiٕAue>fAF@h{o?KP^/uq$ YqL!LQD! tJ>\Az^՞V3KpEkPɲ, #|nvǹ(k ʸySSlԦr/| HyyH $pΥ]uÖ,e4iZ>QB Tx(J}y,F*B>T@7cu%Т67,FwV^kVelj&V 2H|Nap=פd䍤Q*Ք 4`h#t'.naS14gPjTj>KO{5x9 ˘|{k +7YFrg<t E czW5{Xm6Lй|*ݺ4?sҋ2g0J#UNZ9U C%햓tHzH >gX4sr"Β*$nO;}7úc(S1ly8EmFUf@ār~k2x:ؖCﷂ^aLW`?1SƠ^u H]N@C'$Sx4T韯}UNc|#S=ae:C>_CDЯ Wj̃)sq !V0Ψ_҄c n3KLIEU0[z$x+2QŽ!r8$q8+*'3tmZ/6)FpV3y0t8$ƥ+ 35k$nklb! Tv/CUt9]ɰ@Xej_1p%UyZMA <ä IQ`{zmCz.3w%Owؿczik6!nk;QЎd^კ=  f:ީ 6 ;w[Tps9{kDԏ9 ukHàRDkt]~l7O׫2 EP!hE˯g=&_ gKb'rq# _^yyܸc*;|ۥѦ2v .%ܪk[QE7#K-( vz)ćϞ:[%$d6&+.O-+'NAgT<4p([)Oufzՠ|WzR&E\;]z:.fD?/TIv]&w47L:Q?R UҨ.8>Q"Q5'&~f_#? b/Z-=(Rb̗s APֽ?tV6B K=Vym$J^Tڋ]aEVh>W9u6ϏAW46r9VAtv_0/:Z8YF˖QZ|+S#6˶bO|#aR ZOJa5:U$`zTܶQtUK4ɵcrp#Rr#]07\MK=7xE(݀|ro.mHNӿtH\@)CaEk= ~,Vщڨ?灬G\rwΔ+("t}og Yz@ǴCptdw캩UXUbz)Ifv* tϟD:s!_U#x쮜d%y_|{rac8Օ\4䕓XH6%=ȣ]jm9}@evǬp8^Q'\)'^I7~'q~ s.~Wmx\^>0߫;+ r #mIv}+g.AM0JP8x9˩ĵgtJFC/ItUkr Գ` Z^u_2#Ɋ7sٻ!妢h &$hRT)U7"U*# %j^Eژ"zjcI:X1e3LsB6 'm| (YgZ^,$,aϨ"2 [\٤%:Hwxjx7(o~[y6$/䝙o p8}zM=d>Ǝ0и2r¿)?NCd ,+;D32g qP©z7kOi~|#ܱ)g9CxdU bfo~tIIx~Q*E:$u7>Gkx塾{I/>RTDזp'U83gL&:XÍ|Kr>\ 7T eXYW@XÏb&,̝c4kzo6O@tşcF•3 SL WgzDIWmSIE+07Sa~ZK#$cӸ냳3\Q eERң   S<a[-3qYwJ56]gt4+YtC :t6-p𜈢$4U鞼wTf-ԣ8԰jxuT̩EɯPU&ĸ"9%RE)?+z{i͜_k'Ͷk,;ޢV\D_MÆ* d܏e1MQXKW \} ($JlUMK]2̈k۶W۪Y9#5)p.mS*dbhr4 <%=㬽:}IA%c#oMi ![cq]?ZS'tSHٛ@[ # 7WrN`)׸8$JЍhk+ NVM6:.C."a$dՋb"j>uO2D2JJ~'45K$Y4m&\5=*@T]c@] HYPǿ\_>n l?K˂.p2tC`Nq-4ڞ_\ ̀3h X:J#o1Eۓ/שƔ6'kzUyҙE|i C,BHn[RQMBu='AӃ#1I]LM7VGGk,G}&p;Кhޅ˓W_.gϫU"8cuC(4/ꋇ܋\^`BÀ[^2 2+S#(&4# k";_;na1uCYҟ@>0N6^""O <$e[0I4W d݋U,X;6[8l6Xrm?^Bٟ054tFT)?dVh|9YȵZSMo3t:E?tʧڀѽGom(qYZHsr@B0"es [9:tf#]2I-&)4lO6tÊ}*ײ,qzM vxtL#' ,oS}w̺0|IQD$(C+ª-1dWa?ʰ>Q*EkSf<gA'\0nU=$q_$.u'S9{F;fE-gX]@>̫F)󠒨XF;1UVAԀ|ɻZ-83p>Af}r }׳X '4>2RShR5g%xn6-%PM^|@x)Z_8IGgV1>wC޼t }DXNoQcq7xZ(0l +3bhkO nn{s^@h[kPKhL[JK7oxAVb!w&dڹFX饥#HJ~ƣC*n |'D.s qlq4 %iLB$VUg,lexγ9kZpx]O%QHuag$D($̴ >:}ApOK;r>OY3#2\&=|k,K_96+bx܈ZA74AX\{NdeZIZv eW|wF$6#G6Zz8ns jȉ%/`zzc4m| J6~2ƙsnjH9'$w1E:*N^g9p̧PL>0Jմ{Iv. LVi_#ĥ]Ghp5`$e[]iz絠`ꍚ8}`DET=^ |UG5#)8j( CfXӉч&\ODL-3xu#e|`k6B %"hd*Rl\)z9p'%g8vi#|Bޓyz;\%(g%tw'*{p^Or:,G Yt` 6KcFE=0XK9O<#.ZԴ7f-]D-C#sa@2yKud?xJf‡x<,u08?6p_nVoH9c3$W,x="c2*`.5xCt~H8Uqu 4W(\dh8,"{AMn5ID!EStMzF' Cd[ 1<2K4΋Ƕ; H _QU )y>\'3i:Qߦ5LKu)dx:Iq3laߥ0(bEIMD4!R  w|x ĸ 4)~eeeVLJ"k.Ҽ>O)IJA$[%(i= Ɖ*'Wzg&."R85NgdeD <%[X. %m*\ .䲢e.pr3 șT[nfdKs2,ItָmK'奈7E)DҠecq Gf&)vAg Wyn <#ЧzY}Ku~YE c#fet$ gH 85wc> _~6@tv0" l(vbj cbfZzCZ]eDɛUl]Rw*:(Ȁ.)  mRTGNiH5_"X|^ O3onε`n'!4{i|$W l-[KM/&GMc?T 1D #'Pjs." '-_0l*ĺ* E)ݘ:>_Bќˇ/xCl|T[\fU#E_# YkNBS /@gYlÅ,S$1X6]rR΄kn ٿMoOLN-Os^%r%LlfrnӊDMjz 7<+ʛP9ç/pnX 뗋dx bX=B[)6G,kh*޴lNi`&аD/ 0e@ ޸vrC ɍș6hAdٓ~09>[#/*͏I9g 2i$]c$+ Cpۈؼ o|pKVK8^q:|%+vvo$2FY \|JSb2'b& kZ ҌSnT4ϫAODU5$;atsfeŢF: V*>.qktYK00ڡ`')>h7@O/gN)wj3{w{/-65joL}RRA0_+HOf FC6\NHg{є3YD*#4G䱿S_:h$qRypVh,Ic"&9&KC:3Pb 5lfp\;n*CxY?cssgacw~PQg⼹ ܵ{NR94ΌZBw) Կв-! eT)͵+C}yd3$KUT^ F Ujv(nDp h>Xv-O!4X?B ^v Nq(AF%>CJ( M(w/.3<]+IXmA}`-iǻ; ~^lg K;;=?h: ).JأgPkF!V6#q)3 Rg+҉fw`s e -ԃ?(8闬|#_Js v}gck\t#t鰸>5,>跑9g%q hF/D'I[}[^N;s^"lajnowX^Q\>9{KIe)dT OP92d_27qp.]|.FhF2\J/,+ B*Ώj?y؄K8;EKH;YHuxL*tFkۆ  !{Y&A\U^Ul\p?@[[`dJϳ`ʁFtҦEO#w<{}9<0^c*@G W* `Yun 0]V)Ĉ].칝wz9, vWwf,+ɻ‚[6+ORxfs|yL'dJCH<:N3ӒFH h9)F)uZ>c+pW֫2k& }sX7MpihN+ï^2a- 9wbF M5 n-_R0{kK;@^ vE,Ih6/z'\ZAfcP~]e{o)#F 4pc6`_XJ j$ ~KS'w4x> wmw͟f#4r'GʬtcQ1c[A_Q"nfjmNǫ+°Pz!0J1L4VL["PDoW)W^-N˦~-MQ F+͚#+Y +¼NѺ6Zuc6&lM,͗b_bWC j\V5حh;e=.*Y*RJ{hϗ0 ilxD i?DVD!oz#o0. =B \ F&"E} (oۍj=]|CQ!J[Fw,OMD7wdsE^TeZߝyΖ}Q+oȾ5%~F^ԥF)W<rK48y<}, p3ZX); 753W'͵R?f:BRwh]ʁ5O@Ѽm{ɐZHhe1>Go`FxhxXƗ&y=YlJ:3x.7[7~BsH*(r~_N>Es۳bj3a ik`]vAIg yt+ Qbh]>\s1nXq;г ׇM3h6=l8Mӊړ(4䏡+˯p T M6ʼA*c:~_ eg-pub"3tw"@xx=O4=):H5.-4ıW\L $訖.iP""sO$((&NCJ% [Ӛc*I%ze׈vq`uNUATy7;2Y*D4#yn[?uh!1BE" d|ɸk&L|ս 8mnE^23HJOsQ:6̚ $#/y͋޽PsL&&j b2*t!C7)m笃e*o &]"m{D6rR4+2|[Eq>wBop>kYI_vp/yKiS9<1hqHD ?9~B P7$]m>meKK&3=׎:8c%$ID0X~G n\Ro@ Z|&Vw>EMQ٠/=QuYz}xq$):o>q+ZJ-KڠzZl;r-Rղ !(q>`QdP\Q~Jfb >wxamڤ֝<ѣZ6zM6Kl4OMMa` C*iȣ)<ͲJ8ՌM5l;m;f^י<zOx~2((FIIu;bbD)P ay;"`CU+Oܬ߾w oB"J+C77#zmďxfjq"kckү!1,_ M fXtEχv?au?ߕIbY9x_ xĪA%f5dXWq7][w7< NS[h1)&?@aYBq"W|ɨm걃Xs@X"k_#"="X2Knq+X[Ҷ}=h–Qp6Y 1s[ZdȉI{~zvS`JW)P.{2=3#u^n:/l` !{^ (N&[m RZ@=qko19|lC ِ–bz6OaK7X hN<Aޅ8'<Ðx3`v^TXJrAn){ZGyY<%"­,'AT"=A2Nj.+Jsf1G U9)?uzQ\n\2-kĆ&^F} I Cj2X"1r'ܾлd q:ʹ['5džC-BUa3pEi9s(hjfAPf:=޶udIc h>E*]q‡EDpQI+?֕('8`_ b$(An)B*En*ƭxJn[5Sq"Z#Zܑ76cI[sRogL?/r[amڜg69AtN#l~ữte$zZPg(Hò%L%C嫫=ݟI-bn̏}5_!oZ7bdN],I֞NhzK &i(d >gH SOlg]@4%H0~Qh|r $7/ CpEœmp x%j4jKx:p3x4gBe%GT"Dn*Q?&%cZ\u4$.: 2STs Nɴ( Xc+o FVZX 2>#/kt#O $&S}yZ-kgMPD-Ptk[HtI#uv޽<.}vcU٦(Hu1J$GnҲX< ~&q܎l0`Vt䵛C+|gj$3Wt&5@_ wCkH80PK=ӹw5?:!Ϡ߶B:Oz§gpY`3v@~9~v1], F+qhyMS:.h?,bЗ@A& 8\vʍHaX źER7 ٌCx@É] CGlģv]D=D]CmN>28Y ,sԩ2Q;hsޫ-? [fƏg^bAr(0a0 ÝXV)0k%96u8$1 MPZ+q'ȕqe-vuMoa4יPӔ 5W0i+E:Y!v!t@W Cf֡1S-|S 8<jxҮN֝U]%åG6OP)Ƅ^S_i yQEXonՒn!v d/lKSq{@TBw_giI3.#vr. ' nIvXz#\)9Hm7* JnRB4طp:(1S~ hu{H>=l($nИo (9bs30;D,Nrv:0GeYh)~sLO!~hUnk5z&=xoBREQQ[x#t! ,o;>*u>oPJl:TL[/%ɷmAhb<,r!q9}?V?{_[M-O^h;λsNVUNU?I343> _5 Q3ߦ {fY~)=è-d]9IfQӻ|jf _T-GNݎhsB]t%i;RυJ=*4kc8,  4aLNP ;JIQRcjSp<,MΰtYRNݟ0~lq`2S(ZzⳀ3oC +*qw@Dc|=R3DqezM?X NG07GN`loBҋ"cV..`Bc9˯k;`ꂇYYܑ GZ[hTJҶT>6| :mMzn5iۀz"7][t:Qe;fE~@Iԣ2rSvo/Y>JM`kd {iŅ4; mS PtmzQ/Mr_>4E'@܂>'ւ~֚p $!! x8RPAPDN+K! ⫎ f噃R,P[[A+P)˽x+&C8Xc8S˙^Kh۬Wdni猵c˳GH g[A+֏C =^AJ~;fD'ї?R (MFL~^\Kh_1ZtԶ *\E]hhr':;`: \M#֘ۦ,ɮd{zjL#'CUZP_RS $]-R|N"ؒRǷ}׶h,7ı%ک >zgdlE-fD_΍ `rAmԖ C ڢ6//o1|k5ǎ_nU 7D9~V'tEr2M@ <G}*O9-Sf2/)C(ԳZYql~m 6$8{4Z^;t1[>q0iN^:Y˷yeMuNfb'5We,ZFⴿC,pt~cNoS%VѬmjgkzvSCB4o9 Pq)S'T8ij+[!nf d|yP C7:F'#˾&NeT6G: =4ֲCZ/|"5*j .!l]Jeo)kl^VoQU)`ѷ4E0 DD"8DV\w"I-8CJWkJx^[0F(,JDO M)V(aR"6xSF@SnpX̩>X),D'lC{h)3JJ$.w^zesOy*ZMHDz@쒉910w^\2dJAcOoSV0QP۝$K.l,Z(fxYh V֋yӤf]}eWkrwq_k;ZzB;eB&pa]gE=v-a.0nyC\Wb}ȓ;Py&;X ʘ8XW,m=CRl%9M-l׼ gh;܄^0sIcT1M ]]rB25-Hfg:pm4ckR_o b[gY6Fs_ 6#.lacإH,i-aO$"gmpEWM,q??b̲9VG}g*RJ - e6"fگ̽L'Ap7=F~Њ 7`6 1Cu+xl;OnwC}V -A)ۇf ƒȯD oI䚘3T]˫)Tt8xJLjC̸VΛ(mW[.~{ c'G2{ +FO~I@Z{YTG}^Tx4/p~?C9)|[[jiu7/#% ܵ;v 0Ğ:UޛG?G3HQ]% ywN\%YV$|X;`IJ ȲVKQBlKdH5RϷL~S(^tV1x\uߕv!sћt;zKrwJАuS { kP Y\$HzW簓c3_Ź7<)2G"|+cv TB0w~i/:r 5MFpKe 'ft"%- Ga-yҮ6{ EJlL`Cݡa{3f„FhG$(c'g?čVnǮo헊bjl`NP n;˲}6K;$+@{ hG_t?~G"`hrלeS\tRH\!*za%|乎*JAYQzi,iͱ+7? D=)&(/ѼqKX8w;4sZg,Uݞ%3Gp[Lw"g6; 9:*'D<=I=4ӒMB OdA<'>a+񛔮!x'8lSh 3wMGـ].+R &m;ymDS}.|2O26e5&| grlMKOgr <*t3Iީ D崃-J"݋/#[*Ζ5cK?vY #ja\ L_< %TYG\"!nf"~{n~X!rpi+WxmHBqTd7U ltiᜌm#!Ұ=5CgX5&]J\/+ (&`fC]CY<.Egˇ  ]@tݹ_Gʨ%2A:/K8u\UK_sOFnLaAi.y4'D+/aѹw\X[Sh>!&z5\8-ؼ%rʺarVSU""7/OYٵHi\b|R(=+H̪# ?4-ܜ] kn^njxU dVDxXܯzpg\_nW.kCkhd'i`sb3lb$D UIm h6KRP <\x9M3bp tG\{69#B?r!Vb2a@2jlUsAǕY+dV9&l0z,gH3ġ\}4|J-~D_ȟ܃-Ey=xud0PKWw?`b[+O:%ѫhėlDdMahWUSf%z@cd|(ì"F'Ԡ]Cłi{0 ۠Bu Ղ,F(TyP`8{H;go"oD%c=<(@n'ӭe[˸бG>,K9 2@Y>]F^ T|/$ ]OJ.O/I Dݼ W#3iń wK27IO=jhSq(IqsBş`96fF?? r~}j d=uCTpf-WgٺP)QR ,Buڰ(uSnPqE ==0 @Nwc}vBJ6V2} E%TH@oexȧ?)/̢*40<[*|xܽ]4b5!y٘_֜urbu;M1ߤZ.e'cXog&^XD;FCznv®qfqg_à)߽PMG vL- 6Aq%mN高\Uօ֕kj+4'IJ $h7;ageT4) n3 [4v*!ӽEna}C㮟+l:qxNhk,qxQFd9eBJD uǟmwe XoŤz'Ґpnn,Esx-׏GMVx"A[we7L^qLzv(/a60&[|OլٗT>bŠ{ц田^yݦfzvɀUTިk?9@\ :oLVOP^c?#_ô1ޙwL+2!i +)k@?FI~'94sa P Ϸ.gpV>Qy>c{ޮJA?¼Xj|$]$#! 6?t3/.Rl3-ckH‚&VvÃ-N#NQ ox`jBv``MM۞@`M߯8eIf1hҐo=+ `3UxαTY㼼Sҍ=B2pn U63,5W"轹6bn(1s E/biAlB(d2~+cDSP;Ώ2>mA&9F-Z[,|8I3jKGOYE,6U>آtzز-6aPw;XY*G AttyP@.2)ǖa^X*`5یI#d?}kO} 2HBW؄da!w=Dfv)%F1ꊀ MLv>30vw Yvs>*/]QOPcF(1C!E O}0Pmy+ED/& Wx=ԃ?ӁfiQg₉9.w|emθ]%-b |H+|VosaTi1)hg#g#`/ *&Ɍ^0$)6?o V}"jJ]l WF][DuR@C8J u~>Uj3"W&t3(23J2d'K8BEz|[߫%8(꫆& @Ml/i}G!l0k5m нU:[,q9٤0)3 NT/iNerv!C'9?T V?}Z;~(N=֊|+;6go6J/`y=`2&{GՆMԚt *pan{H;DuĊgm_M>Cܨ#g(g ýEdžp@ "ǡ3Ň°M˲c<$LPfۓǃ.e 6-з~:`֦fqz8[DA~/,+yg~CL'#|0ݹv9Su{졸nTA>Ls.hKЫܲ,>jjӴj5fR\QIDŽK z0WEΩy])wGQ[!-s2lIQ\AXQ]c P:޳9Hm;LerE157 rh-Q:{c qm_ar9pʿoY1ҶSA4q0@Y\weD}o<& e9Ftq1ax+yP˽IBCd!cKeHu/ =y({ CMRQ.2vgEP'RKd_OU[2^ĭ2\i BZİ_!ZǰՎQ2B5JW4%>Y6j@EfXbٝGcxk8^HϾx=r'KX@-pv^!$4JFM8K~ h ^5HG(5#A}ν`D˴ ~`oik1Y.Ss&ImnMonZoo@Ρ=Nq9t5*TM}mKt{40Q"BMCFVؼm͵җtt=\kWPڲg-鬯46v0vo g\އkjW̬ut+huK6ڭ'+bDVMƟ)x0>fINV%,rV oMoYY<=@m1##:, ^CY+\pH 5U!^=yp;MFy/k텼N"x CfBZsA&;@|8Gb/,jj2vd̊_a ԰o;1{S7L7(xdl <~I,֤`?k~ғB$^u7ƭ"7u&I.D- ,3R0)P^3G7/(ur(&EJ* ؤߴ|sۮv hC\.AQ6vpKYI]언dSc\ǟݕrTɡE @km crpGB\oOLRRH:z|Hԓ٪8´I3%&0MP4I!4/te,O'Lt}J{ĩx]ə{yG>dQb@zY8SҲăzgIN+8v"㍦nATDN`jl@m`2"Xp,9 yzGyM" I0(zB>P"r n[GMM1N*H (`=M ?ry\;s!AꃨvS? /O8S&PN #献yT^luKA-bL)!c=kF4߄q*^.D T[97K0w&Ԕ/Nu"1+p|ɰi.+QZw܋ktc]x5-_@P99tluOxV7m~MQ˩3RsW҇` 8sÊqje?WA%fizp6Y\d~bQT PN2bd$TNBIz9 v}ׄ.U*-Kf:&df%3r2 qNf>Q2Tb. yc @WRpgnsƖ>g"wc640@rg3KOZw2 j^d`Ơ}bX\W%I i ̎NH t~,]Z ftY.HەIE dr|!iQ%$q r]}~X^!5ѷQ{5_,fqi;@yC;XXk6tI7)'u>Od&ɺGV*0R6Y3 gV9oMWCѼ7}@.MJ yVHkA%HZ}Ь\RfHtPf+,D>픣3uanC2XʶW)d֯f7T6E( ĵy5鬇 taQwzáA\ax%$_뷤yC^[8omP f.JR. 8sf.($w슳c~W|{ě~]E"L5LBmBCF8;ʄhCjfj/H詪i."3tϗ)(9oðPa#b}sm\]g S̨a5GP,cպ,4 Pr 2_/&A:^zR@#N1y('3I-P[lWa- β͔&#YE]X~ۂg~S(p$[b_15TYaݒjAg[G/$%`Ӿ2a)O-؜V0B{UL7kJ<>MRk ]-XY9YRyQ;xi)Շ?TDq&zGުg2dG ZA=t B),W5-%Y~L'Yч[3ig_Dn[&;iDqjz ܒN8nZ:lpK&S:t-Fs/n[r_v/1,̶l?A `%aݲI[qOV8,,UƎ`'sW+hFp\q;6ba͔v}?tm0 -#!Xf 0uwʴ| urx.~l \[CNZ6e'gG^/m1"=f:7h&ug/F˂!<>)i<B5t;Vز)[r4HP3j|,iUhnIx^'3!kGo" j=U-mQU.\i_re.9 $΂F4ˋNf/֒q!)?\/|~l x,5M" s _ӈ!Omrd3 ,\@D$&T#J ygȹD"\&AٝApozݒmRCI{[C-˄"ϳ1P8i㵿i;A=o +u4\[૝[j}/x Q.GmJ3[~ֺ g|JwKp\'ϗuRB`8Ap;R5I>kOyz}3+fd~mGsrŷR9ˠjqIEd3'=dΈH%}7} +酄C284b8)l*O>bRpA8'N!e1T(LM6u OY!6ma?_[L:gm8v,$9j&=IcC4t@)$@ȉ՞i xFyӈ_CUA}0};$wUS2(P)ږZԯO"*Ŏ9r[a1*ñFb9A(\yL/VA?uuAJ{5 }<)EfvO:Ivv%N¹hAkRNzBğ)?,7^qh(5v>"Q1ע/6Es#U써rFKsR7;Waq|4"WF;?6k"c+ wX)o"]'E0@Z D+_k#˥Q>[nkJ&1-0 63*!(+ nEpB֍h!M ʾۼr$";2$ƿgq~uI]Lyst)ޒC#XR6&ׇ !'g [qlpV,y7–54`G2a~b Z adkl,>f 5l~o}I0.B8zyyal~x Ǽ }a6c4g’> 8|i9ݙ۶OkWqnn^5 6>5}g:k)akZjt˃R =\f'ĵ @rH.gN;#JXQPllȉ4?u.(X+Oc,:Y NUK' P R!62zA_/B\CEtAg~~i> BnšD!~ݫrL.H@;+<6o6tEcLDw5֦\3ܑIkUs JVp>6.hEVh^ӿYܹ{)(e2|{Nrpvb~VjP1Ԏvz-Aޑbw8w" }S~c?ܚd0S*k/ό ȣlrDhϯj$YLܼ6zYEذ߉Z QfOeD<)>n5=~t͐5 f_hh2sC@@ ߩGdmH)nvE,B|]+<ş3W).}'r,S&Cx]XC52;y:sz7Υwz!kpAf;Eӥ"P鋪1b㷊V/-uUug2_ 5;zLʑu#u\_p&t8QFcJ6*;7서;e>`&nbj896v/\~pp(6̷^XWo䅷Lfы@w|F#PJAħwJ2;yΓ@Myq'er^#]36"`ghKs |WNTC.6 .R,{dnR&2q%V w ˆM8,[^`6TAy!Jbi?d=1`$Y?/[1T{L@CIٮϒY 2SBa圎h{btK!xsX{L |lhߥ8Ho''cKnT FW,ջ+] [gRIpأԍ>>Ԏ,{W-dF^:^gگbSN]2,END 7ީ16²e/c ଻@kA>LTO %9K-L?tgIh1HwLbb7 sOڏB]|d1hWpPUo`lus;Tw]tE7o%;=5$7xQk{~ |&u6 [n+I"ܾ,9$qqAKx$}?_a軨:qXE sJg 's(,4D#zR %a!5 'Ex"ixt#lM! j&VD,5,N=iRwn˵2IBH$ $(?VČM ?u3z=>p蔗/ׄNJ {ȑb׶Dȿ fZCnu$ ̓:eV̂/:MiDI Rcx!r Vr&FqMƺ&t/> .8 =,=#.HTe@o!ax .`8 cmel^f`G4'=f-&n*)]܌bdJ;`lQv8M;j )򆨛 qHc() ΃Ht,=A9_ g"%LLtxz@tPb59 WCpo7kf2W Q*aPx8.- (3ڇ[sӣwZ.;ϝaCrUL"}ԮM~f٨aB >^vd tM<s2h8~hɫtkzd|mw6U=tE/foxhGRzXǵrV?_vm!74Q٪*")Ν8nD2Tw46A,@i-l Fi6!%'ᗸऌH1b LDUCd|5=Mo/Mns # c7ި,d3PA -A6$ײ=Vk r6mM>#(je{}wZ|zGVR.vOy<y㧨 {xT!턍m;!u)arݣ?}EMD#,x,T5*R7y1"7V-'Y"=&U S[^TGIKgjWhore7$K5R}Vnfa_]WM>e|1 Fѫ/ַ)M p!K/6NxD y@6b򻩉zҖ8FP"o|X4oP~uJ &,pot/*Ğ7W-֚2p:\ޡ-:hnUt6;K` Z\zV? +Ҏ7)>]q@J(c<y zf",DȳO{* |ƣD|+Ќy`bep4Bcs1F"~(ʈG!{Zsa7EpTqܺ15YYSVlېC5v~eMWCl!fI5@"Pڕl[#i=$Cil5-MகT׋ -Ԡ{dH  W϶i6;)$y!eI\S܅LR!̑-҇ {l|mE6\M ӱ'UJ>yty{)Qj)+; :k~B-+Enu \ yvWt-hIIRM_mgKEW0[938ko- .-P)L"^S͡`HA)8iy5xDyHyNޟgsV./tQD[΋G7p,s _qfvU 5W]"ƪft0h: pB?幤aG!q#1@1~YB'{aID]f"PÍgfXEeV,kc|0fivU?)G~(|Qhg,eL#|k 1jӔ۴3]GwC\xҖѭ>)-MƳTgʸџ *+/9}rHKjo2ѻ?iM;C#KAp#Wv솎E2|AgNk܋ް@'s&lLڵ6mX?<3vYX-0$ sq9$[Ҳ հp\Ef xrCb鶪waKOkЮi{nB|Q4V&I{}{A~Z<\0"JN:UFtz|1Vgx =ZH f0"o:3--1vE{ʸ4~|O;{]Xr:98DC!/[{-9d+> yZ[euG Tn&\?ݐ}dFF(dϋnU#_+\,Yp )Uu2LAش I/LW#ݤ"ƽѦp^xFM|D ]psTSLѝr6|ԙ!_;o)r7H04`!:39`m{vh£7ݓ)Kdiu}njOK 2{WkwdXXپpABR#r3Y~nccy '4:C=ң!MϮ=QEI@|F6$gX(|g#m %9.^/WWwWe@{$[cs:H1I˗%t9 rf54wNoy2D*],@iCkFp_ڥ 3^S_(2c=6;tᮋܫy? p2񎴮`G0 l^+:oC܁M-Igomom@͋9? 8?,KLIF ΍6D،ᬔKTg\)F|l=[<-P4*ʆkifMRmeh-$e: +)ǸW/v{33E~|n<2umVZjZOigt._S0b-0 3LMт"Fg$ٓe@>&~9^<׸k^>_ɛnmwŬ/v7՛1jsѭb}8{ Qzrj!U&^r- ԆHP c\7ObEM*Sxv9$" !':+SZtTGG?nvѠy=C;5k+@7DRޛ"@G1Q2KNےB%D a @pjS: ,_]?Ӏ۠'  {]NԗJ>.'E[醺5b:TFp§y0]UIw&чb4=G&1&zQ UOcj<ַrojh\q@q}* .!ܠc(Ⱅqt?Su9F򪐇^ auc[InF[H䷮^ A<4~P#?M[cYM+=N#/eNNx:/ΰu(9 W_/Y6 Ǚ4S\/aƧ2y|5U AӘޢtOVTu->g]^9` W6eZum f8F m`^Wz8 xO xO "(ϗ\z C;δO;yGLrWLCEۙ-05C"'6b?B~L-WNR%mҼ|pDa^Q' e=/iIk;;r!s^||m䐟,övýRkS B P)w_pvH 3\媾l(XiOvo K'1{[\X0+K:8ǎ d^1+}U&o&^p&P%{\'c%W$*gp ogfT }NH],d7zm^^DwҮbs osAVdRڵWmW[ڈ(+~ =߂露U WZXF\m.!IĻ^֎s55Gk䝮M̄.{=?&{b?TIERQT3i'V_<#̮Y]'l:jR.Ox+;xkd 0ez54qeتe[ Y^CY: sm6Zڣ}.;f=FS.U iPERTsr.S:KP\r{2gUD,\uРUKoU~.AQXkg'|<(p@FIe\~VKc2MɅRrj0/DV`Ƙ+DkqY*~VZ5jz^oU(r(B52~ `"AvGxj7 Fdʜ%+4l'o\ndY/؜W.".+Q!rbsR(L >guO{3񬎮5*>#J4@7ɞ%%01ƼDG>-HνlO?wd=%Gʤ9FS|ɮ;눠Ԋ$v6w~n6Wʶw~+;{e|S#mz#~;9 (5Coˆp8CN*s4/05R*=@_GΑPhϜ9Šsȯ϶^gn ?6"TytF۝^B[ `xFXk>"aKqV).g'?fW`pd=yܽ&`?hH|p[ ]!e5"0_:k=>TC"b g8α5]*p;Sop] r0!+x*d %I eh5P[{0+ iL,{}CJ&2[Nz'Ya $;DX?ח?07~#з'S1aT}>#24!/Qrz4d%BA .~X4jظkw+8>AvxFva"Fak¦-LX>r wnTdF!a*%j[.*-,R%hώ[}\[Ds1 4f &|c[87&*(n/鼙6\x.@L`C8p"IF&Z[K R&X睰hxMˆx[٬,Qj@0cx˼Aeɘ^,l((29&2`dK7(Roo ý^3 BdR`b5I %(*5&__`jg L4NjbPch#[ాdrХNB5H'?>(~O\ǯr(QaXp n|T#Q7m4:13wauob|YOO4+?1.ZwiX-0mR[u5ބa bėa`!ja{j)ԓH(_Or-9g{݄)JI1ڙ2|%AksA[9X[ ;R3ڙ|:Q~E+)@Lpt Gv8쉟,K[ެnBQ2 Yk;<h O-ן- gX"+*NN-Y RzO _8vbjme8 WX-B 6-<)Xv7`xA\@@)*o4?m=edݥ|YDL,8PAykJ0Nv3\A- \ykS)jD|s"Cͦ %~}йI#'t'7H5 z/aXJNI4κm849,ZJ# -B?Ô`%sŔ_ˊ4Qs:g R1zy]1zX5C6dYG.<,ټǨV3y=ޏXm`9!h0[VO8ՃF}`ۣMwUbWcfN:B{=١(z[o'}_2 'S\Ĺ`(h5^%Ho0_ 7I/}[>,ʱ*堙ibVo{χBpfcn_\BtPV2;FHoPI^SYG̣F5 Lj:K j-Hؠ`3l GSL,b؁4[( b0^cYlvT.{3,eE+,f*[E?MFkc&¨2D`k'Pb7U/Xǵ} uQP3. E/gA_MVNyZhX&NYob{jA,_ !e.st+6xNI"*iDƫR4qBa -''pR,2cH^u 뽚εG٪hqcƔC\}WI\ fRsnWoϲ3 =W݊4xX5φe>O7ewqqXE b} W6k z{&=["OTt.+xtd{`NΞT, _Ci. zPKͧm ǡ mCbcXS-8!p 7h z',a?%4YFδ`hy: `zm2ٹoK{:,Z,|A"TT'vM#_#-6jmDI5)K@V [l4n9B%D $âS}Sk:σBU%(4~чh!S_naWYXK(AA(j]qZW.LS~2|Pdd?:f$u sA "5>~ҿCCݹg/ͼPn:()V5$Jvoudr؞N7\ӗz ͱ#0w*Czm&xo1>%w1?|)yGuT? /ǃq- E6ϭZ҉l]at2i?i+6ǽ\0K@{D&\Na ˋvu(,Q:ȧj[V UavIG~d<' TC 1Ɩ~,Tc_ꎐPń'Tu`0 IMu\55@rpRնݠxF>)|Ks;Sp+8#ʇm0ץyHpYs3#\]r[q xo^̧ՀzV@P&<ƫJr`Rܟ{Lo 2` v/Y !VL9\ .7JU)GU{LY5Wܠz]bz= Q=zC̮nOڪE$^U߃0\L]08ħZB6oAg4Rӏ5fhJ2C^?v,\z)e%e~ϊ:2=Tp\ [&_ks@[9Ȱ926h P0.P*w;QqfSe0zʼoLnfIϰru ̿ڣa/eG|z~2u DG⌕8$xd"P_ q`xf7e27[/ Hns O*&؈˂C86bk8W_ B9~:¡ |l+ O9 BS3~!bf \5˿Uk|Ѳ,:[MpfJH;Efs󄝚(dyV#w,s/eC l !w!u Mwy-ifA8IB$rrAv߱ ,_ AƘ#{8Bp `65nvWYeYeDYOrtr5J6ȘXե՘2f`5Ak% %kyH@-hïP]ǜ ߽eab4h}zsVjl۪K̺3PW=')賗{4WdQGL0!JD/]$qF`%PpU{dBߙ+a_|"}vkG(l!8IQNBD&q́M'k&Fi&1/y%!{q,<#"(8 ˌ 9Rִf=Or:m<zUK-0jQax_>29M 0wo$:v;@75ldΓ+[ #.zO':\>YI* (lXxt%/gtm8xCBwbAdtmZu95Pxgr5uTT(,yU]k<,ñYђdb`Qc-DO$h?}ghv_WB $EX(R;I"')_FxzQ4/v5KY IBPny0Q! YejtXCPULkd܌Y )Q 9\i"O;|[t?>_[ eeozJ/LҖᆰ#A0;1<`kBa:2IY< $@8MGoM;lAH'i^g^00hؗ>`HHrJX8w>hHuD+)a fbA: $߬˨Uq"Y%=FO%Y _ N> yC(2J߆ir]TDF#*;Ѳȥ;ui01028DR^i 54_mdW}7-)JkJYD WJH^#;hMpU $j.D")SοTS*&F:pYTS=9~&Q0Dڭi/ Tkwzbj+qӰn3Q|Q /;0[y*FKM+wz8:@*k_pr2&wc]6&21`Kbt^^G)BXJASaG\4 &lU3s 86٨9tش;4~R& 3z^%iR3N/%PMG6ʨg~ez >x5:UMpF`6u=)KC b6)U1s0c?!K=s:I];/wB it8aÖ<> ,GH",4HgFlf6L\4>Ã`<`7.Wiy'Lf |j ^ MYڼ;b}ᒩ` rJAx&Z>uvw|{OyA ivrQ+t*_7#BK\5@fƊý+z w!v'jnm/,Fy/ f](%.`7@zf  [Քoz>Գc wG1()c{j\s&)5(ajmH@-Gqx1(E`eÄ _ȣl .;^k裀&rqXubWӖYXLsjU}ƌ>0YνDЍ;>0 \?cE9k:=N'-Ed<Ϸ\BQ*~V t;%L Rd|]4^[AVC?}Ŗdxo )? %8GtdUķk40u29dU} ({a4U;kC E yYU[=j/78Wr'H~\LU:9g39}:? {cHw#'(Sw%9OYEx5xGؽ>}$RrUL qq{|;} º.1{ၕ^%>&h÷|@9xl: L מcu,&Db_Ϗ {;kk}?y{]IG^Ls=[1M8 _BGc$Įg!>'Jt~pV|j~C# Mђt p(XNw~e]8zDkUPx2N(k'̈́q7`!Y)P1'7uaի.s&([}z}Az+eni`)`4/ta $`ҟgQyG Dx</1TpC Dc#??6~b{; opٖ 0K䙤[ѝNaq/fd`KkXP8O#Ny\'7ؿɯP癝 ]%ϗEUn1'p6"8[*D籶,>-Qz=~˿gɚ_TEm(m]pXO]^t'">V4/yr2|A{_ *RS>%7):pmu>9ߋ ܮ2A\@().}4L_9@b=kN] zI?x"L}DJixyBjw+Mub)^qyV|v jqdO(ob("#K&,sqݷ wXD(Rb hѷ68u0 pNbXk]DJLxsIA_џaS鮸 Ecf'WJ`"Po[mkg4=@$}$y1xm<0v|flm]>w l/$9m"hᡚuJ9JYwԺɖEG, `p>R |6Hy]Yך+<{5ֺM`Db }eGGS zOr>U&yos! .b M\}Q S <5#S~X~ndx>ir'0֥ Ի_iKa]0N\Z=EiZ \ow9VKT=!@JDcgl3f& Z׭Nâ1x7ܖR >Sz@ki7(fPUjsj4gLc;hbnPJq|.+ яGSiFS=ܗnxM6!sF_TU&dPJnlXٓjio>ۛď6tz<TgM+y5BMՎWJs/7[áxpxC/uB$UKO=hy$_{ u):lN.2tx'4Y"KkҚ,4)avm}玀7{{3} ld]^F9wWyO޴JeY/ރ3p.x;?^m]+ȕ~H՗F=gM)ꏢ+7ƞÀb+ [,X؝,\֣k)c!l+@hؿvd-֟Sm%ոH>)*7JƇH93vH"^2цu]jeq7?d .OQ䅫⡉]Z[tW|! 7T $%z"nuIt}@Trxi9)Sx+ui^i^/Wd$N]}(6:={dB WNI9e d$U#bv}M( ]\4.mÔf9G+H^,1[L%\aٌX!5f0M )B!0ۻ]ID3=r |x"_S-zi)p߄tX< 5 ]IIZ 服?V? ?5c(γWèba6mH!uo:b g/#̙)˃_[R.u}L"X!CȒ{ͣoϤ !f o'|=&h_Ө{B^!'7dPsJ)3wg?vH):ݚB$;knvM@Δ\p#6ZrjT ,ܐIcFRcnG{}@z sӰy@BjbbSL )4M+ifx~'HpZq:K~Q>g5;·_.?(L.OH%?M6-74*MywRyW\Hj25^0MH>3zlj3^}T?P{'T 6&DiU=]|I &!O ^yCTGgg%4v9W.g~D0W}wrlŐ ah2&VgRн+ vtL_u#:z_JOea11=ӄQ Ş &>_ld(ͺW 93#'06<]pFz~ 6k3u Ǒ @Q=Wo#ކ6x\GP_k^rH5TW vELwJ0فc;c/-lz+k㰛)[t^6l͂G7A'?-CÛt#pEi3w tp+K+L@jm@,IUlr\ۈ>hQyϨiqT#"Ppp ~f4ps !73Zla[d두3rR8Wk}v(}tR8G{Sy/7 j_@hs3m k+@#Y9m>4vUgHC?G~Ƴ*RB`C*.H ?mYe"rF<6{XY[hD?H%k2Ilmk ,ٕX"nn@= ya U%$";W԰O+ Pů! ,N~5Qt޲kÿ1ʾv?O<*wA&[up?iE+M&)ڕ`sʉ"QF꿳Ծ^=kg9~ufīCR'e= 3\00q !0N] -oBl/wLx)Ѡ:s|s~2 J/ͺᆈ'>p:J,(G{Qü*B&Jt>NF a?|u|s ,tZ_f bg$UKCUGH6AڤDN!aT^FoX^5t$]YWn 쉧W⸮k2da :bG?u:£D1v01ɫ8MtةnZ'*{C= ~šu(bޡzts}H+y?Ev*6"k20(9m]?XerTAZ<ʽفik1"p^2n*oxG=gz3rEN{B 7oYx2 Li\||x)Թ4HA/<]*1 MYswqyd MPTJy7@`aNpQu3^S7G ݤρLnM铆Q}R~׃ջ #sn#?bmNƍNOek:(NwI{SQ ҥ?xH˞״7y#fgZDY@ $X^ߔϾ.߂5N`,|pSN2Jà @uSO}~ױc‚L S8ˇFQq{'dz3^vd46A W7 LQ|)y g,9Z腂Yv+}zsIb`)԰ b5IP:i;?37gB4X$ ==C"ezS)a4yg( q pzm ϱ1@Fu^YyXyhg!cq`⪥2I-iMM^٭C1qo~X|c15UqOpDa2sǬ|]CDkmihɨ+ҡ`3myub]˾M0k)D${X` |Z nË͐C|.1KZ|9UlS9#;n\;nQ?YjwW2М}\9!.ǾAF. y"ދ#ȔX4Zߵg~[%h a?^AmQbG[3Qqq*dei4YA0[Q/U,?+CTwZ8 dVPU$ϩxcNu{D5%kR`,wb%Ԙ*su-C)Q^}Z]mBl2?C])ܬt#b~cyݠBb52`l.X%Ow~ zMUۿN`ø%ņ?aT",tgV>AL#dyÁ  D5ҼK rhsg&gYBP9?yzo3I2Ag>gp ؙ=ZMM]cv4z Sլ9"}&yGD6dݯ&9!nj5D(2p#_@4r>H: vb325uKgf6,ڨ,%O6H?4 >R Ԉ1jqďeJ7RU\Ov)u͆}ֳ .=m!\esrl_T)cV!W|m>lMl"Dj&v HZ*$k]@ cr"nsuVSܐMܥmPJCШ}; b&Ml1R=΅ lhXL+c1U¦bxP 2t_g嗠zNμ%H6,"=7PT4.a< 1v).|PyfWGF,_h pmTjb'աrjUն>2b s:@'vhq]kU#-%Bm{Lh:<6F@uڛu?&=X9м&; ;rE@WeT\4&CD47sz83>푯g\qvKoYƶRʀlڙN颪uJW~A93U#`R0;Ke7(?b&];v;4lӐK, Gmp5c IUsG89y}M-Ls1N8#Ӝ;v7&' cX+;Bǥ?WsIוdPz ^wvg}⤑=bfj:ZQܽTU\I xGrS.n+Ě|VqE.V ZRCza q9X.jUTi5Sx<`W4F>mc \][cvlm>Rx07vFLT<7v 3ޯcAѣU_MY64V g,FM%'13&.>ԅgm~ ;MM8'GG!zNԏ|<ɶp!GiՕz?sr5CUv#Ve/S ,09CB}c?/݃($#78{N(Tns/[&X<2m'7iF߄(33%dvaDmLӫ9;Kr@y|Cjn7p%݂44“[mJEG+e` v i++{)t[@d[zX_Yd8ٛ-5z4X:Cc"hE䨰cfE:N^ zaEt|Dh7vg ί5/?I_cMǚ ?U:!|XG쮰ԤTxFXuwQG@Og&Xy_$ %qBX8U|36aq ܮxV2i(h[mfP ݛI/Eq/^mZ{3*OΆe6۞RG[TpZ(4qXek4'8,ѣZ,jdQBbPܻeyIιsdB ^Gs;7g1aӉhLhyv~3EP}; \ՌkJw)|Kh!iD| :;S]&/ȣx6c&0M45)kᚴ q ʴ'XpO% s^ab8iv})K !ȶS!4 ^SaTXM#o)S-G u j+4I-<f`ѫu:j}gjՃQ/}G烈#h=jm`ic.|$l܃P(ĺLsZ!8oFpطzyLNLv6%}j/lIDU6cf{"0-x*Xhӻ U]Zxa1xHOϞٿP*&L#fZųS'A]ᖣca39e  HtR?_2Ny9D?>2BAdc{ GWzí}wYJl%NE5#;&wRnBUH$9c4vlxߚȽnt"6jY/7s4@]w|!^^1wAH%+CW(@2&-()|U<-%нJyK wpXr@P]i',.~h6ZG8J_.qF0 LՉ{|6Ao,׳zb^V8X`T f2(S=lT.û8;*XRmt7T kpUyPʈqp-rzn*F<51{$d-n5 kilO-);SqbHsvoWA'J=gE5XD7CmzNhdީ3[`b>Qq0V_? N1l/9 ]^Q bW yax!,$TZ#wT2JK&~Q/썓N6(E }2? gRP/ mm#fpP3rh3ցM B~AɁBʵ.Qsk?-E47l| "k @mE7*]=^!mm2v<}& ˂]">[X[QGأg\?n\Է(Ozl+YȨrUӠpPoRb?:#*x(z=d`V `Qp'〜PNDX*U< thI!P(pS̔O#%ީxka%3_|aGSVy>[-rgRdWƂ+EE(t$l %; Cpz9GբBgĆ@VDǚCD \<+E1Pwj!ڻ+hn^=ж.3THV(~1yl!ˮ ?\p3j%++ZTJmakOM6uARȕ&[Ɉ)0,._?Î~Y#׏ ҇S_١8 8zS4pa9Lq+OtQs8 0"xz,Tz|TanP86;EUӉJ`g ~2y J&|bHBs0G KܲQȋ=]z~ce 9J=,SaZג3M55vʇw6hդGT=đ؎Qgm"g̎ |QgηVvDQ\Aν ơ,u;d`ZTDJmH8{l2WtwVtRMjhl¯z"ƥݔۄWwn?ήH|rڨ@YKsk/9pr5=FR tV4s=8/0gw )͙C],:/^N9h줴n؈>+B}UKxTWv<*{GVDȼsM-ݏG{%{!G. G̀83C.=/1wPE>uWh!Jr?BŮCB:,GNPz 5ڤ/TojAV8vKF,cУj%@ 72(}:ՠ36pc XuaS.e)޽3fWj#CAEyyбF pω(V(wu\aO㝂yaTH:~,C4[`Α$iρHlc  $a',]ݳ c"vW-n(Xy^TxY>ENg` 0 q)ͣbK^ xDc8]~;B[= U<}a=8/f\G60-7 r\*r c0#4#/9K77J .hckfLۂ#yde>tѤ%@Ӻ+8(pwAXdX4Rз;tKz7gÃSx_%!c_s ?a[=愲ygwT餑biTβ~6 *~-YCi*ed3萘S'KjH9$zI[q#]t9D ^ skniANtbQ%El0-Vʋp["@t2 D}h;ཡai!Ѓ  Ӊ1h7e8/M>ދ (HN'!(,~DRWkP.DFc0ҍ?uS0ɵ/{ c5۩VN=ġn,|&]pk/L%)L=9lMzE)~}VW"`9\%-8fC^. dlVoMGͶIşKl0_.h+xJ'YDS|`|KX>5f%U*NE!+JG$c2{.:$ץ]̪2s ǰAb5]}~v=YkǂeFЇl8'; ҀĎi/}ަ++Wa |9c4{;@F\^LPL $vWkI'%H@-,wO^{3x5@f ZywYilYI M0! a?sXNI:}Vğ7YRQo]-xuru!(T|0Aa XZHw+Rtou9|)r4Y}Yu`=LRűg̈́O^O^ݥNICLDZ[rD4ܥ8_f8>:K-LLR S\f֙Muwz5tϣ0/P05E^G!*h\ ;,,wIdPNu0# rnVӵo٦ݢ{vw^˹؅c;'9Ӯ"} Iu${: yԱhWT + 'xB $aۭY3E9ς.&Ew(B6P=*ִg ˼L8rȩqiOSOk1Gמ kEuYzㆆNCm/S;dT{%)XH)xs1G%+*-ӳ&]X7Y9=ξ ܴ^azq.ʵ,,P*OJd8 G1h*|IM |U+K"-ԤbmmN~ Ǵd‡۽fnL*5 v\W&=y! P1kS.asO><``䲼mG4B\ DYayB7,OȌugMYtm(U|V2Sk)X\rtWAaDbp/ӆ 4(>~xSxF&,Mm nN}V@W UAa aY5ॐU3&oʎ+v5t ' BDL]AI+pX BWcE\ e/Wܥ>39 C+O쥹7CTO:Ymܨ(ȉrD@eOGPXtbc>sP8HRR=t^!B<0k=J.@6 r| LOmឤ] 2/X[*yfZRȂS?DLHQZ!Ncl%Hh.Yw}*L&t%r}jߣ/r#ovH";OWz ը^ {f)ӦY ԅQf~Kkb)uw*CW~p9@ `//ҙ(aSCe;fzAb 0qnhj=jT&Ǯ |-ŁRG9%@:_-TnYdsЏ#;NNޛ XjM;_cP ΃m`>2DУmjY?>%D t`[hD) !-UJ|E%ŋt<ܻn;'3 cJd3+v4_ո\:)ŠΆq{PJiJGS dw/ RŇA(/ ,A>5r$ֹ)e ߞ.nfMrc"?,lkS'iJ jjF%fȽ >JV.ijJ } Ciޒ0zktZvjδ[,(ypD/uOS.E%M𬭻گGus玢Kgojĕ/dբ"z!$T'w~QrQ5Q@67i^}d lj& pc2"}JП87 K+OֿviMtѝ8}5PIY+ׅϯs}<𷻛\Y)؜8${'Ҭ#a0=ߕsv |LnR_F04%+ ReH27S -9<3)gR NJj5%fQx`;oq:ыߜg4˭jտ8YpYtVxwĠPzXK͸yc$I0%$+ReO‚[}?Ywkx~B:N8,ptYV>e~_sLp5`z¿|)z;ҶlP\x#p6qWG}klkL.D46Ӣ0BOdnp &)x%:K]paKK?{g H D$Z _uժ8ugvo up}5 wc^q&wߣNWG9r(:M1e:|X?cb`)_9[+h+AmKw2@O:6>k*fa8^@H~~D6:4$pxv*rzwHFl_7l\(ml n9Zٿ/Fgpgn)T2oҩS?3bQ.fL^4EY skV"ef9 ôRH hNa#Iۗ'੭ڗ~bBxrR'jwn4/7\5'X$iX(3+D0"9-zY)q(hߟYN|_5 X2.g\|%;x`+'@F)U~+S5mO6{nO_J:J63&f]#b8z8*>|rYFq^&lpxnU!.#5Ǻm TO ފ vco\T9(xEYEfFf]$䟡|`ٱrSV4y[lѣe1:Yk-Qh](y_JK=^˔P6JO&)1lN|~]lW1pssƜnRep! SG*-uh|3ȈcJsZG0gM/] s]{ TkSҕTb.MG 59U9H&u5,Ef]t# qxc;h+.%<<,k+T/,DHHDRiOLIreSPmMt2K<,?X"|'JpM: x֭ɼd\!\"Hh.Z,c455*GZ%yJc^ g5|r oJQtNTfUEa]r;q8JCîSb!p)J|4;\Rw㲔־h4h%7At(1;cx妼^Ѯc-SCh܈ &n'6!F;R:g*5:ML?u(%'[=.U͹ֲtm奐q+V~?K%~9Mha6'Yzroeɬ^Ⱥ2|W֘6Zt^i$)PP+%AFvN,{*kέ'v\AoO(N\PQQ^q1ַa<4?" WJӈd]; #MZ:k `oZc$g[ ,PsbKP/\k{$6)GO&ouB:3N}6->mo~k>fjnܛw)UUaeloi,_W93˹HU׻6aE&b:-?5EtS.` X{8_vrԓ#b5mE+L+QDJumg<\ ;Bn5s~I0&1ʹ=X ( wɫs5U^_{tcV{X9Y&h گvCSrEN_VlH CxzF5˥`NM^2s*it…^QǃE1@I^j0F^8'1ﭳſ2X&P{< ,6s;!jƄ݄ )@[y(lH%EXW8[DИ8HH_eI%=k1ё s/G6|}C0!Pc_II Ϯ,_J!hL+pQU"xA{by,QQ]2 S4W b { ]Ph`-z"_5 .آݦĖnIuUϺg*f;ð$\r! ph^<45'ȽF=,r?[GL7 E`T НY0]/Wgdfɋ|Qn<ߗӼPEԓ"Qhڗl:0UkĊA츏= c%4%x%ABukw@yeEUzlݺf >SOZy򃩝D/p]N˝`cMV },0:(n"S. P4fkT"k؜Z;yoq7h1<ǯo`|C=vd ?@[oekH:Chl!#PTiGy0h2"wT4l%ZBU`s2s|Z1@c'FJKw=-;af9@"R-^|a4z,9@ԝxa/QAL/X6r4jC'mEid&)StXkX,]˛b}鳂< \؜NyʡMoKHP2pbkqM?.eS"'󣥈ػzH1op NeA/S2t_*ݟۀ@ "%}=i!|I;|^{4igrMjal,/֯{z XMb$Qm%Bd@M^xNrW_Ɂ$!e<^ct9nzq7z ﮪ{+84im?Ѽ6hwMw߭w]i;?'03ts v_ʂK-.ȴ8EƢ;qB>ZHTJ :]A&gKŨ' [ b,#U׵}e[hXdAt@QT~BURl?%4K{b+U\nh- JދL#NYd8b&0s߉ȌYE#|YB4!Eզ&)' 2d.,ȺRwx4{':j n{5oR˵J 6TI NծTn(g!+1.сaYmOjU|HS'%I,< Ei oh˺iS~MSQɸğm?w/kR[:%<s AoƚWABFS1ù丏":mgSQ (U=@^b",sZ70`S;! 9~pDŽE;h[F{] ڍ 125Z$ITgN/B@āfl>"a[Qحuϥ y:odr?8kw8-q:%hSS̀H`p q&1@ُ@"{W+uh^@ jThUHg0"~~LF3C@ r(P#Lr/ ,n] itpFT CxOc0d~Pi]2\ t?berh[dLAI^=L7C!cDUH3"|/VUn kId/C_O #&.WZ}:'lQ)䱋hLY waNw%GD>kߜ+I|!mP.&0[χa^?)2Zef)7r ‡c\~lԁ7~:Thoa虧TYJ c/oM2A"ORMhԖNjLx;Q)i>$0f+J|cZ'r}6.#\7;/V_ۄQ,L tIt W?+矶1&&ڣWQ0+Th tεG@^J,"6HŻ?j`pqu퇟s,wq LQڊEQ /G(#X}p }ɦ( k"?oLNpdiI$j2pzF>wjMtL歱;=`y|-'k֜M*fM%{x %v(&jͩ^Pf~$Rܮjrn^Ƞ HGcdv1k\ݞwQ;ܼ"kֱUHdE jGЁ#ߞ6A>='SswKd،AVWoB$qF"CU{<#u(hPm致Z[&,q8iI>]E\9#(86S9)]@|H푝8uH,)'՝0KqT"LPր}5lMY-Ef0PjⰡvnBӹc%Tߏ}Rb@Ou.T43nBEӃ"G:|_OQ)<Tޑ2q)#>3ؙN&;\<ʹ~r=Oocr;d֞h}}_ƾ yvnޠ mhܕ fL3o O"1s}(!1jȣ.qkxdWߧxf(V6%K]F~EV)kH ,ָ޹xO"e]S;ϗLǨ] ?4Sg\!Qa G$zIGvWGA~ד١ rLOHrCRAY߷f,TT pj @E^擋o ms|"JXfQSRʀQo˾Ti(:g>w5>r!>w6F E qy*D o2'8fv |ﴬ.5a-ZBMEYx0=U~3z6_c$iH U})# ~_VˑB5uf"j&k,f@{v "c\ϭTrj,1|0j\>S+̝ .:uC\Haȍj1ç|Xg%+s X ,r -IGeXlb&Ս!w ɀ&F]$b{j0 C#{$$>7G<I@: P{GBeb,'0a6ÿO6d0~R8z͑5/J^dRiG+@':|BmEe|K>*zq{6Rp#-ݞ9 PYB&c0anL6DPxa.\& +әļgMASW9̽L5Ouҩ2nZ.\ӄ0L5y=1yW7@0_ϙ8E]vl0h`'$롺O'\*u"q/P}ܚao=*WAG^g8Y(寙^5tHSDZErla?(W]コ yG 5F7 `ZFt$3Z``);  .-k':<hOM@z[EZ'k|oPoNWm+nR}^ʌ u"gn~Rsz$` ='69k?yi oA2iݩALjKbЫcHʍa3I--xR~uR@}&AFfƘޱ*tw?% Wlt>»e%Dvzc1HQ5 ߞΡp7<Ӟ+>dτC!BZ*LvP@񡩤 3u^>(-R܊=\!ֳ"bxC}E!-=s~XU|LqjxtFsQIXڌL \axYSO[_7~?})q3vA-#| gZ_ {i?n``=~E{j%JyȗQLƣLA5`4ꁓ$_2AUZ)_o$Y"F2jH]VBO'HDQG׶L5r$PZUجAՒ]Irnz6UT7A hkKvH`[Ɂ}WuKeT5j'5U`ӪjgTF$V.ts}pU7qx0>OnI4E1F$WƯ퇅$ًk5^ qmskA*f@3&;aWq͑1(,rY/8 b́`7 ~TVPτ?3k+l å+u -E{ -]3lZ$ef 547kuw }sc缻VBIFOHk\$$vkoK:3C6]J<i>[lǛ]_yw*T,Kg<;fƏdr_9>)B#pOP'(%~1Vm{G=M[d%$&5Y!0e*Tu^ȂZ8kZXo 5Rd[~6G۴Vwe7DGR$~ENǨgy{=dHƶ6 d Px)"ÀdBܞ͂> &0wEk6sYC?G0Byy\j `%j<[-*<<̻.w/G,=G<ʳfq_KKr,W imm@Wx&HNAm7:ENB0X1o¦Q9_ tx7]D@b"ȅyn@\LR^\AJ8e{Ec#Yc=@K=d~ί-Ĵ6$| dDyw~\,IBWCOPZEo)\x>pD={\ֱυry*|9$~Q.yD.xɒڃP zs!!t/C"jAXφ@W2Lo+MCx-wL']QذT^WILSXrd-:=}-8 ;f&>-Ѓݓv O59ǜ T۬eK<%1R#n 4L%{sD پPN߫;!RB/c1*W e tj!#sG Qp =&UխHJ{)hbNf}Fxz~XTZMF\;h$f TO|dF*Lz.L7rtĊ&!*0h0*dU:)L*-}?d"~(|:Z(x>>+a鯷=vG-ȃ ј{+Bq¬*\_k&s'J sTp"Q=Ee'"x-,vnq2+I7Wtih!u)WYp$,8i͸m^(tp th1`GkɛtV0Ҫ0!?ܯַ 3zI9Cu]s^e7+Z&+N}B>KO#1?ȂZՔ]ؔ6U;Ê~]ֆݥٕ+>rI0β4D~csGlӢd+Y\ NR*כ̻x'ZgN`gLj(Y D6`*IÖQe4g7Ћ-3H.I]&gYZ~f'E EckTSlD(St::&RkR4pI{ZkͱI$ȚO9fW%jHT L(u"pO'rlȧQ(ˢd}\PDŜE7}E\>cEZSjuA҅`=N[`f"ݓЀFy+Q|(r>w1(>>KO??f݂?«4tg_监z?y,Y똥q|';B5b_݋neZ{qUnekLd|<ɥfyY㯒և6eG $"}.U-O %Zp$RTjnVZ<\@ X 2#Jt(9p!ʠ~jceQn5 1MD2Q.pD&9Qn^{b0EXSj1R_70_ w>Ʒ&E6VO޸36AjUMRfe O u\ҔRyt΂ײS>靖$!`zU-6I>3 a43a|۝5A$=ekĤ.9ls#r<\j٫Ԡ>[q _V11thԹqىhɬmL\Q߇AW.:0~ #h DoRS.*YrV &_c"SK=\#~pݛzdCpliw#PJ91:Bmo$-(BH2O0 }E.':<~j΃ 2X-nwC,1)ۢ&(_+w,l? %y$H'.S~)/cͩOKѵW.L!FyUm_4`+%Q48tbm?Hv;rRC~_;rbk7))ƕeVNKA "FQ\ 1*I jvJr&ebyBt\KPӴ :Yƪ_pت"Tºj\/J޶xЮֆ:dzIՕio6^Bݝ'#f&41n4o8eNAƙk^Hs:^"Ar,c[^=|r[N#[ ȀG܊(pݞ[[Ct&\|"us 1t%_ȫ Gt%B5D3Py]Hh5Կ},d@`_pҚ@:^k0<^2snX.b7XBS,N_Cd+LBví`&Y(1ɻl%)6MP6/ct\#ACPIa8XLVF3"l K3o`IYc|ɾ6XSЕEF?3G^U'!ov<7Z:q!t'Wv5}yxm/c(k X~Xkabp/2-1$c\&]ciX6 DNJ,̘~a>=qﬦ+=%؊oXrDë1Do癗%A ~; >)E+{^dy۵ۻHB3(Noݙөh^C?ʃ>%?a{PMb-01Y*{~#ٰT/q)>8Ŀ\eq%33"w,hx[ɄvX 65nUu_GH~e}ٍZ l}Cw:&anݐ֕~MmOl÷iQey_]bNt /TD6|ǔ)VG{TMTMtW .?ЁҦ>629A %CH5- Zo+evqoܭvKb_Qζ HBxd |Eb;=k狽dl[l`~d!e+PSZC: `i?:*^T9?y,@Ftak ߍn` b.PXNCwo)+Mw|!K9ñSr*UMn+v5N/(m!PP& d^ڴQD{ݎ㊶+;SDh>R抋%lv` A5kqh7utdčl>/mWTqVwOpo(1`3LBxJ?+byYl4(-pן9[tk#o~4<=yVIdCvǗTE0} nj۷>U +M:3楥Ӟ2evńG8+iV /Xlʹv4n3qT5ߞ|oVʢKI'աd럧MW {`'e[6ԧ婋hL'NJF!>d6*̲MM8$1U+S:U*IL m WŷN1#xzAƖfstI?N֖^bFe#gSͬ+*DZ!֠O מxȥXMXbS̝T)0bfl 7pۍm )U}dyP&>]?8c'wr`t݄24uK'm&DXÊJ_lSl3-ԙ) 7ӣk=)aewz킢l*:IǪ*AE)z0r-^p껡[OIh8btut}rBr:~.b׷9>%Ő("[Ta޺Lyܜ4JPU!DŮvɿ=wlDI0sS~Z_^/@Af]y A ##|~75#+{XciQO6[וaQ$._FZnX4v1 ow??RX+U>c PX(˗D07P >g޳zE<x&xT 3 |7Αؒ?_OOkkUP>*Xׯ˄xP<\| 8Y 6{Xs|RҪbl `3- Y7]K& PɸM. 4xCOa;,RJ.yV/H2.ovc!~pc1Du>pS)jVl&{B灡uz\t$G~\z%Onqcu^njw@Aa$_Q'RW?Z}:J4sBgh\3򃥰n 4A,-^ "S;2&h隑8W4q'e#]cH0V̧_=x.Py\1We y;}mp!M&sipN9OCjP%enBu|''{왍IqqnQ+VѵlypQ=(`'i^c6 YjtEq^68P.YFRDWAה% 3Dct d"6;fEY UbR4q1 E3/m,DW$Ѓ{ν`Xq8{7^A(֜[  A+Hghg<  FaLMRӧD9*NLV8wnM86/toY0W1/QDwA!b=$8431͸Jkmv+uۮ̔*W`Ju utXv8r:Y;ԉE2h9Pjd-ݝs$-vKWDRmtju~}iYvQj_r " eouW6p, Xx+ɲ xl fܬiݓ+?P M..r."FU"ջ"F˳\c@#W4V:=(v"tZ>_-s+0& nGuC\˘#"rNN!;r%$_Ò2c+ky=ۃ 6ǵ`bhn?:%,Zϝ򭍕gH3%-1rX ;[4xQ-Kbbwz,1mU9xf7P̓lQeӋ-J14ڒ\ki^Q(!'@;e}[[Wu4Co/z}$ !Ϟc~-ii_o'R~_ OH@Ue_0*hQs`yhm \@{ƦbI['(Mۋwd1,+{ w^_^FM&csbGGOgdDZX^!GI+t:I(M*)"1~ $u%IuW4^3UL9GrΩMR mIH II# 1aS PQ.A Nq@.fgp +zhF7 33ocAJol]ӗNl_(eB3Oٌ`}2kȪyUu${*"g[&7= Y- b,SG *U\tXe`P$u~7Ω`IbiEh6b) `r6 DU Qsg>^^Mxw3:1ahS\9Zq!2jlqQj3DtDC miN#;ΤyOy1) b' Q'83_ݚ_z$J7)'ǐ Wɕ I@5R|_~Ghd> O šGh,_95Źxaȑ!,F?" t6>"zX+$a^@VІz0uEm]?JÚk?%:Id2y(f߉@$nXvt\XF~":-~+ u80]XZM ʨk0znγMseqUťyH7}LMJuRbjjU t_UF`I{ :=^B;,/h2Z@:P]hKU gaO<%xAm-0BO/t)\,wp:4$Z{Km'>Nxn%#Re̚9J v :~:Z0}a;/C&B';Ju CŲYH|tnw1<1UiF/ZHFߺXRVʲ_y ;I~3 EL $l˩/"BzD6e ʕDx9[IqMCط(ܸxDvAșb^HiH|Y 62!/ŝLqaLW ;;مd)pUQ,K7?w9ƁD[|kAp5򘼒*Tɱ i{&ߦ _Yuy]9R|s&4N͹K#sQۼ%BǑmUӷr׮ _:aL>` ]R[FgUg-t?ͱMbryO+lEW*'P\v6N&<[P'ɵ-?|^wPՒbZPge8nXqDz?|^-U|-.L' sp5ݛ 0d/dI,hPltؤ알^"|pZp>ńR1Cz+i…}0yV`in{~65ݽb-r+iCja/|??G\ƝG$v!1;tA_8 ߜPxnz/#udtf[5@T]X{~OP-q](,)Q&|{D\1gRm v;6,R>\SU!qcz%^H^vQ;ne8_6|) tニ{N Š\C@L]PP2\s~Vx@7 wA{va %Vnxq$˝ ь@N]9YX6 }j}$i(:- $T˱)t#Sd^aSᜭ3"$Z&-YGϰ7TPXRYr>VE4Ab$K1:#lүWCߑF&L-~L_F(GF4|&z&[BךGNjW+:h]TI\%|Lw~(8nI')jm@r8ԵWZ)*H} RgjwԈՓ8ۋ}zJ-"ESqa\Zx,ѭ"!Ŏi0 $Ml Qhs)1<ɑ} 6Lw$ M0ED*x'y9CAH{ }]6'NPI,ԣ#6)e<:^3i |ZB:=( &4wVzSZ ô)I2Q.L]&fDstsz)")X҇6yfj<$R E{:Gk-=.c\A\@` Vg&~ %cO`M fQ ZRȵ r@zON<+i5dsTmYT=JM?pQ_~{_ HgdUvfid={Xň̦D~t٘9l}"5b[Ry9(>8Q/k [/V# `cȍʒ8LlLu{ňPPy2[͸D`|PY [+iWUCȤsqImÞ/(rkc' 7}y?ȭJyv2Mx|$J;Eij^7 lgmn w%h K lE X!trδ1\+  ;%б:geݧR8 N O`?%*D2~`.\q4:cDt5e90L5'DŽ'KC04w1M0Uj Pү2mDM ^QN2<e؁Y}[+I%PG.ɿ02,ZnF40Dp0fݥIͱ*i /}>9)ʛ(6~xK :alMkRyz҃aՎg+")^o1gmnsz@rـ={2":}땻K0n@aQ%[VsALu,-'QP`M(a6w+TÚd8X]r%ap^pvS0%}&5i@j-t\],f\ \뷾bm+[VIok`ګGMgRyd{cd]Sv2IΝ7q6Cy]A*pE=P^3Ly_narUn֪u8]OS ,A.23ݸ˴$tBؖR~p߳1 l&sDpKDS$md@AAndV;m/`wCGs0Y(޿!`"s8<@*s|B.(0ኪϰӠjkZ>];VcuYJڧ )Xwe2k Zn c:]JkV4HB4gɺ MZY瞬5&/fq($}dW³i1/}"89Η o$QQ B,b~jBQMR5&  -JJ:eK?EdDN,ҕ^@12,Oۨ޼W&P7dn`FjAɿ1խn7jsUCyHe! 吢`5h(levbo]+(]6T +;wTs UIIfa[G쫆ÝFSGoZ2R9dnF*Ǵ^ySW~D;-Yw"碯aR F YOY6oHZam:6Ruи"Ł݄l~aYVq4~XcavUdo>O?_gQ6bo7H7⨣%#x4K逳kF`lG9r1n"*{/s{jgGzwZ"#M>Ky a淹 hA$aE& Gȅn(|e4sR9oL})ŻF K̩Xk~_gy4; x*.B|pWkgm/#U&T1t]-a ?PU<@"3O‰yW=^w,-iF o4 LC 0#.k4Hk0''y4f)eVA o8wYXN?s?yB>3D ",Cr#BU, Nw _1~(8K'HYQļ8!$ %rٳG#8B-,HxIےBOGO+tA/CIɀ :yw*c8Xu:NVEdV~`DIX0~J^՝Nu$;W<Ĭri #0BEQ^em2z4XX^'Iʝ #2Y0fOf,WM<ݟѐVCbP[ftB#}IGOr #Ja Vp}D4P %hI?ͦFhs(T0jiY']B-b-VEt7Hq:JvFO(mW`!]2օ*F|Xuki9y݄)2Ip925k䤏!'0_e xbxw\|bQy\W,YpG! fZ~YsZIm%hOtYbFiI87jAS²r.\c2Ze"_n L%af\ ! 5eb#Qgː.Zŋz$ %أ>N ɥm0gvAeM]?jfU)ŭ]O`9XveB;M3+˭"%ӷۛ+ד+EP. j*Tl1-^q`dB$B8*Oi10L#oa"gk'AljWK겊صb`כ4S3BT_ EBC8(,"]eGg9geYh%ؙ*sR(л4T 7D/"ĵ⵩9:`c%+X+N)\k [H?!e}cdv6ʘ+fձ;*9~@=JXI$ba$P9TB2]OdkK;L \LYmEM| v@[D_V6WGn@%rѩ&JO3 ZTs=|N3_cy-^v}Pc9%'+I:J(ˬw62j֫ $|vj:tVfM~89Sy/h>*Y nܕg x 8.yYnfE٧b"zz%Ay`g8=8Vz@fntř'EZq ,Y{]'PvAtiL ?7[gwoZ^3չF@Á& 6b Ŗ͌.(}!0+Q\o:y…>  7z9 5ʲ˕Q&r堻p^KTA٦=")S?ʵDqE і] HԼ Kϗ얰,4~w&xuP.v߃w V23IG:q4fA+Io{2eSC,FG=o qWF8l=z3_=Q $-x|Щjh4$ 6QEs\q.7ՏYa8XEvBy,4c/I @B Yx"8 V/+IyK7 )6s,5pgVim!>Fr%oo< :Cl/5wIL<084$Rk% 9@.gAo 顁6Wjr\n2: P]hwyHO0+oj1^rR o`   `O/I~/Ȏk%}M9UDDs>1Aܿp6p\KAǴ }]+ Bطin.We|s Ǽ/Ϳz"GvzbIxWj1$3&uv pPJۧh;imRG=tc˘I M `3 *t!dr!:_AjU9ټB2PL;St^u ,c-|AzIM 9 C7>P/R {qt߿׬XNMh|`>Zlc~{`_8snOmrc*Are{-$wu|9fOlNs ؚc2ꬱN'_mQ1:$eyyV1Jz5ד=%s(%3o{*(ٶJ:a-yң\kO%x0t]5 ?%$&I)+RgѾTϻ|Mb"0*#fZ4,Љ!W/*l{!N :s仯9z!}tzj {ؕEϻRh,`?/r+p4D Z]lj%Yʷ }Cl1YB"X5 j[ѮRhbK#ZOhڟ p=hfa?md/8/in'撙%I&z״;]lJmFs6*6;V֠B{Ǯ́Ru()!TChPy+I1bE`SЙ4VTP!|y W]Sc՜ lw< R#\4/j]jUrD9,ц.*+3x G>'Ԧ~NƁ86d>FFo}ր(&*<uZRN^\9P怠u/%96}umsØ9i0M`4ht /-#|n8ZV|!!* \z_ϙl|kPɛi?gs(@``Yߕr*(8.ޙ ׀%xX&$dPDH!e,ak!ә;ůhw-D..q}u`}qA֙l}fV%r^Ew,#>zo8΁rջ#bȌsjcOWfzF.`^o("'ːpjulƭ7+NEDFfy|fU%^ T2*p S9b `i S4D"1)PS~Wo7?^@3h>-b&!2 #ZM9tNqruN3)dɯǾmhޱ r7I>*m^coR/'R 3[G:!SuCtGW`=X`懚慎AX2 ;ѣO7k2mCoR]J%x[GY D9%.:tM9(Kæ q!1XPTodw86.:GΦ;Q@ۙ=qo\/Q_\o@ksrz[B:{%ɕqUbo*n R?Ǖp1Ji-Ć$eK5wڣ O?sY^w8ڇdELDDsQ8gf^gxJXr3a>Z-͚MfgW;{ta2k?L{9Oe#M\maFwgs~"SX"d7y# 0|cXLuB6G7޾p;AP$E~+tj7K|{axOwOz=G$s^=J0ǵ{usj4TO)[AY,Ha>*UQ+zj;K3d#ٲ3YwtQ #INHCW SəXU9Uؠ`NQ@вzšR W>*{>rr9D&M;fˮC*1_0o-o& %`bx@4{*sD"-78"buaђe&&> 9ЁRcm\BbX7@f&Z:KeI t%Rog;םV+ؒ8kGm?s_{qnTyѠ;~55jhC]T{2S}j`q[a)!1̞d/#u+v!OnN#yʮCCΦ;܄#{ھc^^4ͤ&Z)b{pʖV w,J9CsW.4hRfF,v)gD'ki:&#*d*ոI(-ez3Dv0h6*!_IK\tU/G8 < Fwj&eI;r< W<6T(Lk%MR3q^if (xi"FitE{Ro(f04XH~BOJG qkY7 ;8N\i56$34J2Ԩk+iOޭϮ*;'1K|n f'N럈|8_@uC՗vm-3/ӶA o󪩤?IM#Ob\ oo10˥39Mh\LQzAX5UR~-Mfvu!<SN4Rn+v`IbTX5sg dJ5*́2y{Ñ{M\(H#'"6dW0]1פ6Gu4EO7>kTPzD*V̶(8->nHڝYYdx[ o<#W`2,Bv:Jow B6 CJDDVBufƩ??I: becJ6\m3W;| ùakFAY"u1$˔+^;+P-&\IhPTm5e7 [3>\"/f5+8 P,̴o uN&jFT9KfB&,神Yw ;_%V֑"*9Dv(W&) /Nm,Jܚ pLz.Sk[re_ s=b 2_9!?7.K/ZV\4 r)H*ec S:cT`o1%qJ~YަR ,FUJSi@'06EMIy,'_n4+Ɔlopg`2 nDgaSk鵏x" c@j,i1v~G#s(Ш/e速g럑.@gQ7-XF nm?}W(^W ~Y~lsVU<["B7ʅ -(r>uKN@:| z@`x($N8 F#3Phڊ\m7hXd8^7H1ph(b~' `$xJ`zt_{ţ\VZ 0%)1@ pds) U>c=s}q=mv0G5X#]ږԱ jJPLN_;4ֿ>1h(3?b.G侲|\ym+i=(c$i W@a 6aMQ(-ozuM҄ ˆ>UAح *5E.Q[|(HE[b6tc '܋wg i=\}݆<מDI+2%[4@9Lg/^Ha Qmp͹&LːV)vYdC_Geb!0lgwI\"/a);Z䥸9ZFW?'J 'S펧҄nW\=tݸޗUXlƱy{Ju^]cLy*-Yռc@)Λ&E]vC$kJM^ M('W|qRL7Ս@JJ3-9A7CbnY>Xc\Q`5 yHXn?݂#K5CoDo RD9d{R^:hwg_8ۏEAΜ>~.ѡ[,$[,tU"ro:%$(1,b~ y ?_Hi_uy@%y _Fz8~ y].`T'"|6ܒ "AxJ,{u_% EW_%uj^Ipu\J1;pw40qkBnn+gDL?ᘋ0VfgT=%l\ 뀖LOO6"On-r-& 4elƉUJL7)᪣Q({ C(k5 &8W^Nj4ёgA*Շz!F]SӇߵ.JFSax0OV`}-K8IL"`[ H\4`[iMA.#1#%c'ZwTleq n{O[*eJ.E+G-9~<(`,s`$FLBAjJB=F=ɜ($ќ$o3w~hhBG'z;sط߈Fdο}}9k$؛}\wNq2NZqk+D`@߸Ә[F6mf=>.N]ӛ-< 핅$%T\'f:Y=xHG2>.ie=V W@xNJw:^wRUnY.rKpn䆀NsK/&o6Xo@8.Y;)Ʋ Z 9ab4:9 AIX;zS( |s)7ړbc2-,`n!)ּD1-_nZwu|K Ck 2[p4mbմ5U7?"j}8S?z,-ƄB"W@%68U-v8/1ȿksMtk.g9{2.ͳv)sO|@JtDA4z3Q*|jOS5 mV鿇["Cm`\b,$3PI}.֘ml4kػ'_aWw/%`y@ݢHO@=s֐#r8.S^ܷ 04m *1[\ŵ-_?2CSUt@R}97ܭXA xOuE .,sV <}4o 4L(N"jEGd#}TxbW1ı1yu }H:aKHgx(X,oo*U:^R)ݗډ+8q%vדt%K䥷QQ)cj9 GHWY։:07꺹GE YVU3"|FZtz :w[翭ѧKG_(dqI\Ŕ:8ߗr P 8;}@ 嵁E$n[i/I~rQy O8;PLgiQw(=sFi{2+{g'&vh>nE ͔3 rF>ٝBbEphPp̴`/Np6j;ge~ Z 럑ew8~sw"4I]Gx?{{[MGRHڎ]j~O$Yd˛r;֙> yRNo oVևaKU~ʝ6pJsrL&ߓgZ/Z%=fUz_9dbZ\ 2~ 1g3a/h<96s6Yʜ;.t)u%]滧X|8/ 4}[<4w;_<zU|y342' ALm'loiC8ݥaw5 ry.4zřb 6%ZK$\^&WJ&} x(yCZt XALr>Cg)g}TY ccgv#j49aukaX0)t;=;nUD͂;dg[uS4gTgfi5V#ִ=JatI/~q:TyrI>Ԩ' ɘ_?#wam|֋IB4vВcւm:m.=åbzFܗ2nC X~@lD{}-3,w0S3ndJ (m ~RUQgxL&:Ug?g .հb+J ʘv-<;PDǼPk.R_ =MBU3 &[93RPݬj SDoպ%_hIPk4ȴ늻Z<ډUY}mZ1ɸ>m5~yh<T#>$GЇߥePXЃӗgxl+ sI_QeMzV%\zpU QŇE'2 d F[o8wʅA#楌j v9+ qNWK-&xRM3b @q3\3g{irtsox"FyqV;$%<)raD L(# zAiĴ\>X GǡTSBeF AСH+XZ>]FQ%4KeNtI= 5੍^o?x>KIpQ٦/K;<&urXhpҋ8`Y|;R\]0K"um8m>tB5@F9E-<6p=R=C9QM jb{|qJ0UXOnEaq%BaVVT۳AVT p8X\n=ْ. V^$eyQ#]X?QHa\Dk3l;֒rv-"YslO]ɉoB6ه( Hcu36uJ(B`u?WĘ%X#|>>P…ail"f\Lu󾍵@쫩 QHw|8H"7V}3$~==]^0~ ^Ym9sm<bI=sdqgW@ԞVDޒ,A=)/CG#vt4CNH?3Nk7+fP}qH#^&͉ks* Y8=&ZZU5%O̍ùr϶-9DvwAnsϥ8s "қV6{x۰Զ\խ 듫X`i{q 7ȓ놨r>~'%!FO6-<hpAbUJI*sL2@E}],^MQu4\[҂ۺ~[tX+Ox<-㫛dsqeidL.=vd0Ur6ulD'U,"cge&jʆ['P[ǎwqGT*g$iJhR!q۳Y+V{dEQr{ש(sMg^s γ+Y |u`ۿbl5Ϛ pPyCt)IAƟ襡|jH]i ’r !CEw6F8gM',֬(HK/.OPΝΤ'4UN$Yx=դg)ُ>};_Jl܄+B>&Y9rsUIzĜ:oF3+S'~hRv`gwDr&dK_ +F5\pfi3흓_؃[c*bnbGGOSו;t(˪/ucCZx2X@F,)[ŋTay ٦mLzjkz#;k=6UbR߾Jm;If_܊Xۘg׷]ZԷ *|ogFygoH`a^NY1hFr$\7=b`7XB#~OOs!`şFF7;NUJjkL8@'Ïs?$ ' Ax1?;@Lkpl]N/=4nwDq5ȼ~N|ZNRn`0W8sb%#?KGR_Tl.<%f; l!*ī:LUJ l^+25}f1ҫ*)z)K͒!/;~c\J#p:I Q]0qngBUkuvGHG @r9t΂LO6b 68âܱIh35ʩB2W%Ǯ4 QҘ}}nZ[elVg^ YzXC 9Vh6{حadR 0Lrl:nrWC8EJeKG }wIQ/? C%ps ilY gj@015`27Ɉץ=9fm;{\E0i{pypϛ%U%N" D/L"ҪsA1l>6DdWxj{s6& d(gs!f8I!)qg2y `:Qr Zw:74 נNc71/g`4gwd-0sv m>k v䔯r^@V7AMSLR'ϓh׸rE-zy|mRNʝrox_' "Hʚ,<]7-Z`gHT 1gj<|_H~mӰH @o.wέU'H#'@gf G [?Xj;(QLrң|:V뇗jUWO`F&*,#"gsD6T$9xpk(35611&=UݏcL?bݒ IJ$ۏ_LPBQ es{pLv"ʥOϩ-Djyrx 7f({ÝX'l>VwܧKꨑ$z䂶*bPx[_,Zc<>1[Gņh>L%iBXKdF4ܵݯJ{O>fR.JB)°vbǾ}0rWO:p]R1̾5.,HҪ"P$ {CR\VQx|GbE9>Iгyxo5B;cǀEImJCI=mtU%Яj]a=8Gb(>ŵĞ.8 !ޣԎ&/WH5\9ck>֓M\Hjj(0-?*a+q`VM[291+ !])ۘ@M2xZc?@֙ yS0RȖ4TS#h{VXa:-oQw!?^.ņ}}UH @Ju2`Xm2Dyn åhlָ@-^ H/i$E s$fHG fl d0ubk͖@LW!;Xw.X+}[Uy.rݛep~TJ.Jw׿Nj@ijLBXy*u { @z XbF5íR7Ggf~5W㓍7om~bup~ytTg_KA`]s Iν!\fpRXnỉKMK!Mݠ!iED[Ӷ"i5y!-d'Qiu_A(()QլFŻ66ڼ< Gаf)] 950l׫ԼSHNIP Nv(3q,H5?X3.iS76⸭(٬'x/-9 3 6&]Jjsl/\L!.cz~ #T#CKg-Ơyh:39O>+ې8j0H0 9mX'Rp!ܛj/Kl}^wQ6yY4#4P,Y:AIKmEI^ZxG#HnL 5 Td9o^цH py+#Գ!oI˘2u*7͆õuo|;0*JѯeryM gQ(Tzp$_$Vgi[]Qr tasO&L)%%o3oOԼYֻ*Ge6;Rd--aG*7HdA_T%ko5)K3ʵ4n=n> c (Wl M֜LyX aH6bUU9iUO`BB@`+[`ߩ?As6JԙGLk^B~U\+uHF`~axv$Kӱ&L]c(p&= Bd*y d>gx >δ,gsb "d@ =҂elUݏv;޳p05+_C_ޓ1 K0ل [@;O~7XW;dʽso/Yx}輸( 0EzcO%$Jx8r-\Ĺ֗Z%Em&"!)(NP  YNEJ9BNJbmsqųJK ֔RYۥDqt`QYPT wXOZЇJx8$~'epnNMhsnvhgbU`{h|4A]ucUMj:]^"Did@W)bJBK5(х '9i"%'(_#EE@˼JL2S3i(UrIM{kkHpDCDq&RE˴IXw߶FTħlYSz>Yb=#]"D5;-oޡYM(E*oOe:I}E;w"i{5A=Pym[hJ8♒~6qSRRg,AfCjr$IkF;l܄UxNX5u}}xyPYo~в,?U*'ž TW hrH[TKיpSw(F7یpaI%"-{c^qO X Hp#0f^N5bV*envs1TWI`90Ֆ86(u*?kSAH&<";nA;*_>Ꮷ噔d%Rk7:9:w+5=\ͧ=`ה3geLی&Ӡݳ14;|m"C,O<׭D orl:Brh_<~.:'GVΈ㕷{Ru#kנAUsjc| @PQ{O"C샼>% e .'\Fd/gzD5h]j4g r M2 . '= NxzD1C୕r܀G|*Y+P\ ݲI-.6!}T.IEaG*1k |\`2q+<Od'D6(Zp)g*VWAOaej| ml`}\/$u.s`~~ZzR T&w4"ZVJ)@6!Gs8m3slP9pUNjimgn*4 .VNC i8e;UY ZI!Jg^c$XkҡqU|[P@{2U`(ILҡw~<,OEL|,c只Z'۳#Х^q ދks͂Kcmt>n#"+;Y/)k]u#,cHLs[2}0HqJY^ ITn'M_>E e#EJ1!V5e_;Ս \Pv䲫ϪA|_%YI Ft_9 Sam裹Cmd@%#ਡ@[(>g`"%aG%[bOU{c˔|,fV &Z~EX " >SBWM4Cc&蔱PaLsy; XS$/Z4QiM \QD"SXCyTwTZnf!O5vBq,DrD XZ7VP' Z >S)ci$_"G{7c4- ̿qHzH.ηnb!zlNc`z.nZ3z_{`e{z[X PSO3dtzhWysgc: %_iO?}#!IҽRcb[l;X|HR~&?lxcJ8N8Hݠf O ,:17J0XcyCHZzRW%LjN)sżʭ>MLYq))XZ$-2nF0Ğ0I)5٧)3[lIMT꿻ޚ[ ĂV&?9-3%o?S=$ELXDwƶ+%&b^E-UZvƕJ W|O+<*<Xs]r<4(7fg49`}5@[7i'v ZJyٌYY CNGP\bmCU;UBSgWnV0/W<JؑxF~oGal{&':Ah$|Kq(i*=<]PqIo$wҲ-on+)g:KT>}>0B pVg.6YzAu"oZa&>_#OH 3GAΰ-ڻ1So'xZaL˥KY31 YČ,(̯Zv5 =yl,d@W?-U+> L)턺_+UJ~ SO=7j/k5Smʐ{޽"X2Z6Рҽ܎CO4>*F IH}kCdbni]b`EmB+ VJH%; >t'P-jt?iLg9O{źr8He*84̛z…%JUֆ7p^7ʘ7x41I\-4Zſ.i}EBcYCAn#G"BԔ^e +r "3JƠXYΆjC@W3gm4P.+fgM#;|?K>`4U}1~qv g}R8D}#nyc*a!<c ;dBe1B?C? *hS-%#D}}C?ʮ&g \nHz!@XkO 7 JD*نj2 *]GV= @ם$^ro mb[ebc:8%/M+8 7r~ďz103yjV.*!T/U;C0D;m1tݘE|F4R;x" ד{ :A9UKX.0Tdyi)| m%x}H F P7^Z_]vm8b3^c: º\uŻDH@]ѪiؒSd*$ i#fD)TEkŖ|9(LWeJ ǟz" ݢQb+]m ~$";5a0˞r0[C=3pIY!b,ifAIS~[DO-A3܉,},@uWZ8|q4M~q0~E٨١^ԭ 2,J1(:#jBcU肅mi83w'wg p!0ӪUV>D|WR#q*,,kbFɬDרJTs}카aR\{&9`$! (ؽc^[A|sZ7s *cɳ7VwC;(:-*~&IMKQDcwQ7qXyR;/pkq}0oa]x&eA˰$X LW禍Ɋ DW/;rl&ݬ&s0>tk*4CnYJcyw3TA_Z1b#jk!7?q)7v"Rt͔M>TY7d*q Īb78Wph(WAVUMV~M8$sNo]/F $HYg[ĂBy؛t3s }+G&ef0WyП1V6W8>IJH11:qMV].uH]V|~Z;/@zGvFɅӒaOw'[T|めVW-ST@*l5Б-`Uðj0(D_[xaXdQXc]]Tn"Y%nt Ԝmh* tj{N(Cv$]Rnay]SaSù}RP7\^`fצXqKrq2hSefjp ų8g=;@N751яl?FͲEK5~^]$O"'jOtyvDAv_E3E Y{7/_k`^3BOpp&n^|Y S8c2K=[)pA Zۧ+|s|Ȭ8msj[G/Ggbe3%/*9|=.$IB8?ibE _lmmccz0%XDHSD}+ZC6el|Rѹs1q$SF<-sMC Mδhø\tgǼ]~q}1&FޭKѶtQ:}YD넚_lG.w@ڎq< #.@ƃLkŷT*J_o"ň_%ƨWW-vGRDL!gǻ0iA#%͕^S6}zY}[ G\+oмY1{2cxPe{KBֺT]lE i2VMHM-HAYMv']G˽y}iGR UX )G(?] ߑdy$K, p9bYczvTf,#V<8#B/4>j{s!@( O(.ߥHy 9Í'gD/kf kxkaD ŭdY+p)mǶg_MmZʢ{vyJ `6<'w'vAdJ;ۆ5aCUJH*MNcO|T} c/YSALo V1*ʰheyg\.yz-bF$]Q* (q\&Pխbwv:Joc z !S]g%U,D ]s\:pԝpIZq@V귌'2:k,dz,"H5Q )3XQ#?(JH~j2k ^}Uɥ>Xhb?D͇nT"+@)i0$[~!4ȹ|zM0\`| \W}ι?ؤ,TO2Ƿkk\yF2o%{@O*c Kpv9AUbH).s`9|/h/S_ q %1Z-U ;L57!OJUrDNKEpgA ^|\W f W0[,Au:[@:lwx_^lʌN5WZznkO"v=TJ-MXNN8E*5 $ٔ_gH$wAM -:M ?S5nX[}1Zz'4 2UUr8V ]U|LhUu,?"n'C֩9Qko]mx2='`xh~V l9nj&FV3lъN JȣoO[y#5RiC.=%VjRxmnEPNTC˞:̺XKЁGGHT\$R-f'—._a2>Q7:RZ$|@;vRʄ/3 _W:聟"{ -̾fh*hP~;/әDʳWR-'t[}K"#Nx1Mi0,ΥZA1(^q$`yd& * rG=;X+Vb3QpnPW9"=ɗ0DeͲliot܀Dy@9z'WRuщԔt Q?aOVwfC(={1?*H'H\d^- ?P $ Js0NڙSb656A#*`Mgve5v{ 8!Kt؆R9 qHL E/V ѝgk@> #,=֧ӓ݋[ u7Q݆ҳ96fnI* ސ M3ȸ4_x $y(Ӝ< '[,+/BdN>ќ_fTPDTFԴ%&;KoKK5>R>~Dg;{(B{5X^1hP=b1`,0KOu.z]@5[ͺӭIs)!%} ɰb2О_@*JYꔭ|ՙb;Ԁ;u6GW3\MK Rd9 bK NTdJJr<ʁa.}FQ"~Ǐ8 /F(Ajh#%OV^ -WأWze@%T*MGX=s{|fk+Q VI]9۾puL#A+K0WV+~CZa!M`I9nFB_69xO,ޓnw#ƛپ "lÄ`EeU4}R|-2oOx/p2 W2-Lޥ"չnfZjc4 [~q߁QIeDWZg~ .=ɺ|"8a j*xK`f  '}Os͟%)7IYsm20J/mq6fu[`9gEj?AޚtO&k2s+TJH 9c؉#  OV.ώ 'RѰ:q}vEw2n\*!o}FF%% C׺s0c27 ~ &9 4LMdhS0()R[6Z %=!p/XNQ9DdAf&8Vm* g43P) )F6h5yV"ڃ"CUcF^.iq0oLc.@y.pV$_$=aٱZ} b} B& 2>3C)iPSzU"@YGd><,1P]}g ftt[_PGة"^[#~7 m n9e)=YBy'< /orXF-GXs/WN_ןaw,Y.w:QWneV31T}!ZpA$#£*;?yG)}^'ʙ&fTWBWЁuZǜ cs܄!(lmoxfT"|N'E?'2nX$J;&9[`*\D2װw@&V`GŪ[-db; f.gemTuyz(.uGPۉs; ȦY\ވM2d7: $,#87bG^yA9A8Q߯d3 4>6 ID?Z+iT;1IZ$-MX~4f!@~JrV^|7Lc0,ªfvߓ8j`PS!GgAw Pl])=br\hL仩;( ^A,H rm^QіG_+n({ȔL/gtUK. #\Qpy_)cRΕ@9p^Z 0Ƚ 䵰|xEOU[^nGՑf*cdz{1"uO*˓y:6aSt5Ob)hJ}:STQx`@JLl*L)^qAj.lzj.v8 Ôs梫އofb;kW|?/bX#=K,<0riR2w wVJڕ`+_Ax"/{Qgo]K!sZP0p6GPEI4)t@ÂcV6(@ͫ1u}CLX.5IfCQg\,~uynuBSpT\Lqxt"oP}qy՟|!@3HsH9BUȎgnz48n!eA9AOr0Ql-힓29@ H5Bo{:~D(d 8PS.$@]?i^RDϾl5pdqu>Y]u&Qn϶vPʮBtEACH|I%+9bF{F=vS dtZت <ؐ/,F&SD7r;nCvp~@tFSDB@tӟM71 * 9)+!k]LXDI@IȾ@fT#Y_Ű1' "֩]W1U;ɽp EvKBE|vv{7R;04S$9,O_V8 Z%VA`-:a@}{m\ +槩%;2U`Z? pO^C5 ?C+Or:}FQ~Ct՘j%\(L5ǘ NpZyW *;5ئ->ї*a+ h!̈́y !([@7ے=qkBmcwMM1[xx"RHu%p 1 sU:eGԆMxn0VW?w \#J462kCC|tEp2 (A-̛92VKcp ]ZWXS=__]vB<{qnt굤ٕexW Hkv(PgF,fJK[ǖ{,G{5̹ÄZ쳒0 Nկ(])z^x(WU;`>-@Ϩ8Aw]} t`Hnqzf? 0WFO$DŬhe*TԌVɨ;n~TьH#xٮPbAacpлhCȭm{`^lUE,ž F)&L҅*&_=<|Pq)<'n)[:m˾R$|+nZʠrT[6WBe ̚-ɪ֬UC7b`7\3mͲ^HIhpS*xFHʄe->h='ҿ):Z{\ÿz{qoɼe= e5`LTnAN& E`pkpYzHɟ> Ra'(z܆I3 ȀRE[= [wD9!&y6$`i`Ǎ Yo8-*4]ml ou%8MY0s3%v4q 0[R:u1p‘ *D->4NcN_ߣX¦=cD&_pm(y.h͢&T-ngJ]lU=5,QWl慴y߄gc-b<&@8P$?޳"flfùLu83VjJ17d1r.zyQ:pn{]@+gn%dgFB% TJi^\m,#د`'8oZ |XySR)a+E$%<>kle6U]3̏j`lzE#0x֡g5l|2͓w}qv>b^}$jI!)9*Hٖ+)~ rXIΫn PݔWxAPMTaG<|;g٩?*I*콋D~K_>GS o0M6R9Ac }0_ o@i{bA;-r-BкaF m(6K0`سmoHL ?edV6Pu 7S^xTrje P*2H2[]t6q]DZƜ܍EnOf .9N~}1PjߙPtMS*|˶gt H6C[}.=kw<KX_όucL1iMV qB;/kE+j/};_@' ݑCûf JX0}^Us'š,"^ݹњ6:3Qgmojߤ7 oN$Fr\qhH,kw 1loK\T[u<(҈y)VLN e8@Mne ^D`8*rKm@r&7´1OPt^ckNA`KO,X)jY7QU;9ql0myLYy4`ޝU{"zqI1BI`4yqdZDng&({H'1ÄܣȰX npFd‹{w"DMH6ZP*Rr&m#N>,>9O/sRSokݧ,N *cT4wcgkdF\JyoǾH^ ASꂉ٨=?bgPrϺ}bz1U:,{rlh8AUCyH%ʓILMјBag}~(Bp Ўz, [vFw4eLEP̊S-C({` &ݠG#"⻮BS{ ̿Zpe<]i;Q }0 .I/7R .zL>+ >K1@luaѴ:ֶ@{Ij6ܴsm梁A}CdHd$bhE|Qo I_>~Y^B6c\a"1 8b~[@XR#ְEt`pml*;V xyt)ƵQwsB-}y(rs#@)9ڽ u*X/M5F6Fh=>ʐ)cǞDE;9c2豃)Fh*3s+.׳9{8HyuX~{"ݔ;ã} Z*0>tC厅]qLB7aE|zY8S5j@CBhAMXVb-1OIZcGJ֗ؼw|ml̿>òەR ]hTk~4c7fc:+ِIޤUr~C'_L&Nu] lW2dh|뿚ES^ń@^*N^6ZD,%;`DVO)ߞ5F]?>}wq HkQrIOח{<;l$ރE'c 0\[j51BKFzo.֩V97Mu>E},9[R%/:(_FL b9]Ecu88;{`+>KkFa@ŷ`<sy:{W#BKak@7 PBw(6yK@pu>;!5nB`b%nRr?d~XqOٔ$޼!4`mj0K@sbx0k4-/PDnW?TRj(+_HidnF֫]b?4jG RoC"9B+DE 5' &6&IﱠP G-lmߤLgN>x q-hwEc"=S^hMr~~]'Z#c!qc\RMi TwIW~i7LtڢMW-a*DHmt+{y,aIx[$I8^; ;*i/ UYϘ뀎h%Cխ`x=hѲ> 8YjnJ5QZ3SpufԒw>bl;:R0dAiΖѧ>ߦ&URb[FQ+l(k㌔J_c f>)JN%"[~qu42 3O CvGc SjgCc--w'ke?bGE/AD·zO2'r XBnw`ԫĹ4u{ 7<]Qj=";؉}C~]4i\d3?T񬩷_#0+{qbn0:u6_R S͡4oX@"F7})r5CLRyk4rgZ֏U#Xcq=ʐ"u6]c`3iO_+ﵤ.̓Rnpc߇jM[=Vuw0. >09(PZ3\n22%{mc퐆%/:wleMTE/%e;/*?ǙG:9Bwshɀ-щor;%Ī}Xޭ]qtO[yXoL.B C1 j`ꩢuIHCIr} ݟw2BS8\6<#/r-_nU? TޔŬIFF)JcnNNcq#C>J׺F%hz^yLt)ɤB{M'D:?S.)L\M5ڲA˲HYĭy6CB'|o8u'[ȝy,ަ`*MۇOvuO9li)f Yd͙G=9EV]չȡp9}]11u-Ϝ ffcuݒWEe~dwm8Bk]$E-!1].I /υG\]\U5R+^_;!1§@]n7Z5ELpt,1l 5›za۳ $ z;1-сF4e-Z'{?GcGDc|#@pZCS0wgb3P-8+r.E!VDcEUi_8ܶ:Ŷ s=>DJp!`=J݀(T\nʵշ也 앰sfRo-u1qLcժ3?pok_+3m++E}fUgtj{p,ZՎ=g8PYT85j:̛GpNޟ ?ժp[3t0}OlLI,w?PKhL=Gijx"forG{xk|)ȓ%ÜMxmI'nߕ7/ɰ2qM} U`jr(% /|&9X](A5"/jYXlf aI\4ό;{4k@edT o~CS5R 2@0e- ui"fS40U@L>i_|gkeGO(_fC/&?هϔ;xk0 .z]Ahw= H1.'**D;@[ (.ҙ7Ys>*Y6k*)%%^JxBkֽTّN"?8Y{?7 >2m݇Q4f@v_@}w*"*/hsIذ7W(_FΖncow]TʉBœxCC9Uwv4H &Ul%2?EFK}voB;?`sx| uP,es: uDg&t/~pn; BPuC>f\Ay KS- ؄3R&) CUqg$r&܃> ŕg[Hzhjӌd‚8Ma8o #|6كHeɢSRa4yEK{q5>ļZ6 ,yt@'[Fs,#uyM s+SÓ~f Xqc߯(SӦh~LiǣO1xR:[T}9a&d`[iYSA#Q9#[.RJBş |ٌ=VL/]R>N~0=Lq!ycLEG/X h=UC}0oM/_9,!dIhpсiWqX~i`z5:*kLMEEAԷ3KB-vgß?rVT "=E7I%aHQS's*|;LXRH>BW=j]Oz!yY!3Z(G2A0KF-~v)gz}#%{A0ޞ>u 8:W7xDSbnB0&IgY[p!"O5M#!@ɲ,&(VHFza,JΝT-u".H:/&JeW5DuO?lQ@AQD:H#O|~WtKS"^QBR2o{~8&,+|ҕR^V΅|DB.="J!VHz)xGB<" ݍ[w"~kÂAJk+1х'.[jqm}Oby6#7ws-^}GjKD* hk4ɚ`ݐȎ%8 {buiIP'CDz+5.kj)*p.M^JޮR#'(K?ZALxQkED:#VЁޤ*:#*q-3Ýc}:#q9 aܤ$# W qP3/kJ(Ovk6g<;NЀ]$kY/yC3EhEAC j(3]w?mO员=W1%~@Sw2CcHhDF>^S`~c6u*ω> 0~3.(ڍ6C@1jn^u{[%]RoJVEǎ2M19xUُ6jQj;Y9.!P#@r{Qo-H` ag'OqL yqۧʛW Q&`.SΛk, _MbvBXN07hwC!i uV%=^%ly|E+ )%w:yJ-P+ן70[OcF!zߔW$zj>%+Rt|=&%?'l! +:Y-,{R~0n/inU( Gu4b>{hzZHP>OL|.NR]7p}yl<dԓ;P[[5iYAyb7 f DGNۭ#XwGm8s 3\ۻ Wq}wo/m}X<4*m@i4 .&} ɴC,@D19X 7F^mZydB#o~lzLݶw['*3g>()Տ#~+AV#L##^14:r8՟5 [l?yo'pt9o;gj$R9'Gaa0DD BM(? ~|o!Dž{]bY+7}dQg'k~)ŎB;J˂A~l^Ysu1N'?>?V\8Ze^p]Bnْ˞MY24n7 $qEq;(([L4>7ќ@!X~f\`\Wo(7.HխQ2@Ô:'hTtsΣh uOU4"X~k;O(f|_; 39;-ٿnthKpug!͜ǂ0#6&\K }hV% H%?զbt4i` b T:Qаk-`룑 snV멅,H0a'!t.{xЦSFpwAѤ9_U0NC"'\/@#8!G.@a}җa:iX8USZHsb^/l=kE^:Vs5F,LS6:j~s10PLb׻.FL&tBlҕ먁t]4J3.eRo뱴<= FFm~ N͐"et"L;#vbtCEf`>?_f}P<)8+\0ES Cw) Z&T?s= Z.zL n)DP8)y8uN4DdHh.#xpB_f'._٧XHCWAO@H^o6_%F<ׇy ]}7@n&?Ne*3)Ia9Ww/ ᅇқLgAbP1|_C`Sj?L~Dk G5-[~),-0d}@&!jO+a>_b)uVMMSXTMzE?ԏӏANFk@=TudDhы`O@B&:惉3^(.ɾs[j =Y+YLL&}.&%^-S)+őV`KyCj; mWapfsp/,sB!Wy遑qگK=+\,*[(jmFA*|~= /aPy RdL&}ꎲ#F!xҲ(8 X \aUJ+;'ks] \1RΊ&B*Z A;5Uaݽu_Ă ,[8*#5bM8:uHy_ΜPOm$MSpvNÆQ#])(QܣnE-5mWG=bs{՗fCXؕVyO\|$'ҁ9-!f0(C;i.n ]rOu d w2_5.~6?s%vs S_8@a%9lfdnGm!A)Zy abRGRhDA㠬E:J; /'$H {:L?5k-'.XTc1+w*5`rewư;w=M@|i> ;z_DuzooKVsR*(Fs8Au/̴@ctt &{0I3q.Hݨ2w!2%nj+eT2O .ʋB+Xldm2~Œڭ)afS.FW ]1me{M f&!qA(txA ﵸ"BF-4}%ehJQpcN&T O8RIJHÚ5YsS{FB)X'i{K}[EuS?e)`N!v*mixZcT(W <I=K=9rG+{\0n@D%|T ݱ-ƵdAJ;Gotr.|Id1hƻ"p8l`qOu}~SHQ {f뾑﹩oz Wn.l "oAV51b,mb7&EˑX>B'M ױW1ې"sPf n=3FOF38JT"fXꪥE"0Ù2+y$U/w/(.ط?ał?=%-Ā3K9Q1F(p=;5BD m}*oV=ϏXE NSʱ9?[)W BIL-ƑI(Qݜ-N|:WW'nu, ~k 0aYzx:鸛C"ʗfrfLd%k5W{d_2`Z̺CӄڳIv1-lEd9'\X+-nw3sqT=b~ J A) YN8*PlhIgNz61m^c:Pj8py eFB$T]Gl:m7LC]ޑsP[%x`6J:HPA:vgN]O|{]sҀbr"/Jli~qR V )f`?{!:fPNJQR*{~1B c]ZݣGGX!B6{Xju8TX6MR;HdY XI[ՈR1JfRL wq&zBҧS>%lp濇_ TVz 3ݲ Omx'D뛐+Ƀm.,O%l6>fm 82zc$<xC_ImI<P}t;{BW]0O2paWD į M -qVsݰ<xXwSDJ9 &{I;}``kBOnnIX`87`>P,OWldJy2WɂumSi5B*U8ABbJ TʠH_*~%zlǼQ@dMPau}y>JQ&Iܺ;  1S۱jۖt9ĕgZIPѺY$  /A#&k٢L՗k 8ԼA'(/jSϔov *߂Yˊȭ9R"T*9jY{ޟz"%^2$aIv s {xhd=RGYr2z6rE ^>C0J۠דșIxy!̊h1. PҴR\[œ+xO)|'&xL#=;Ai _)ȒS?'#։ ^{7EFO'{#!k wtf kZ2OvImLg<${cZ" ĵo)ǟz]"z cټ,Usbwx٦š6)ZV9Yp>;L il <>Ɠ(AR5Im!/B-_,Y!)鱾+$ !'1vK@9(N$4N$=vy^RȰ4( LZaOi+=g;Ѭ`8zBIV)sGq:+T8 "B2Y+?`bV>INQ-no 0QC I7?>4-~U%b5b+>m `sSt7ƼQ_fG$+J[w.{M=aLqϹb9=VgE>+.Qij(5N) 6.GY/ yuU.y=-vͳ8<,M3Z SUY"NPo8e{#$qۡ A2{7/V2{f;޳/cن>pqD[N4T-Vu4*\?'8#X(NvWv|;0fUA@KɜF~$I=gY$m.dfqPpzw}dc eS/YmxJG  yuȅWa{hҹXq/"WE0$#ILLVh1.n^ If 896P<=\fuZmny:Bo~3 c(=}2a=dEt"*%Z=9$F/c}ugMALky`2`Eb{dǖCJZ-CakʶS냧8K/Jâc".tB|[wKtG-c-c~M?1up*4sߍ^a꿉x·!^xDXI+j6[0Qw; Bj29]S_\ f-oO5;աT X pZûiU\H(å$E9xЎBnWm,>L) -9ԮYyRgroZP=~XP 8,@(L |{\B2)Glas>InjY# 7C>Sj DD͉=dC-YSa3,7{`ZⴳkMbq?OJ-q|k~z#KC[Z PU's {o$|~ *9ffMSt_61PKu|ab[A+qP"Z32l+F -KH s3_Yč2St59ro#炴UCYlWBqsװ$"@/VJ CҎix'rXA݌[-y~q+DK<4yf`T= "@G YZ