freeradius-server-libs-3.0.21-lp152.2.9.1 4>$  Ap`z鸋/=„r6XIi0zCĴ^a Gp"ώF P}iI":9Iv=kTŶuٕcxt`ܵC&ZΟ29})0 ʐ+Þ C6nx\/[A]]r qڪI̩(T bqg$1K""yʪfޥ/B)=}u8_#'Gfc53665671d84c54f22e76a5bb3f96084a92ad0bd094310de6f78a3bad3ed0a67423e5030f0a0bcc24be31a83508c58f1fc5bc641h`z鸋/=„<0$b)N_suZg_˒`[i'Ц A; TȫT 2D`p>?d  , Fhlx|  , < L l  Dlt(J8T'9': K'FGHI<XDY\\]^7bcDdefluvwhxy(zHX\bCfreeradius-server-libs3.0.21lp152.2.9.1FreeRADIUS shared libraryThe FreeRADIUS shared libraries.`zcloud127ZopenSUSE Leap 15.2openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgSystem/Librarieshttp://www.freeradius.org/linuxx86_64z(@3X 'F[AA큤`z`z`z`z`z`z^zM^zM41c269315dd3993e0f5f6345fd84d145bfa62f55e842fc7c2451f68606361ecd960e33956d4e862bb67f039b66a2eb7d76286bd5f509badaa8115af1a836e1c190d79e825e06dea5e906dd713c0826bf1b040327f901367d3c40bdcd333232032ca38fc4ce8f81821237db0149d7698a1aa44433ceb53b09e381d43dc318ec2e8b9cc1e5d41938be45a368f126a6d1fda03d60a3d622dc75e776be4e90c2d2c6e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfreeradius-server-3.0.21-lp152.2.9.1.src.rpmfreeradius-server-libsfreeradius-server-libs(x86-64)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)@@@@@@@@@@@@@@@@@    ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`@_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@Adam Majer Adam Majer Adam Majer Adam Majer Adam Majer Adam Majer Johannes Engel Michael Ströder adam.majer@suse.deMichael Ströder adam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682cloud127 16244722583.0.21-lp152.2.9.13.0.21-lp152.2.9.1freeradiuslibfreeradius-dhcp.solibfreeradius-eap.solibfreeradius-radius.solibfreeradius-server.sofreeradius-server-libsCOPYRIGHTLICENSE/usr/lib64//usr/lib64/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server-libs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16593/openSUSE_Leap_15.2_Update/01d40a48b058f57394a1ecc1551a3e1b-freeradius-server.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ab56b6fe2c135c0c19faa29f7a40a3a33ba2a84, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=281113328f12eb48180a651df3a93e1f861e990e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=13d8ebaab46185fa3cbc74dee7c72b1869a41f15, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=13f775b6f84821f480e498c1bcfe4f1459babba9, strippedASCII text  PRRRRRPRRRRRPRRRRR RRRRRR R RR R RRPR RRRRRRR Rp{"Cj"utf-8b1fc072ae2049e57fe5528e81c81ca034f2144dc1f76cd346f12342e2b382300? 7zXZ !t/⥫] crt:bLL .Z,5 N17&?rf\hi˙/7 ^w@VK]k_ta"0,'NikB"ʩ!z >ݣysNUk&fȽyQܫ/A#F R0A{'EMxO*Ca~rj=q*}ϸ&{uʃțeoJ_.SY(R֟4̩]DG5pl:}󇭤uR  #6S:.8)-3=\7Z2ܴR^[`4A m5ɰ&O@(7v 8.i)Yea9DfKZ] SЂT$\ n[2Pc6ad0'nPŨ{\sC~ %.FL%P ?YAijiBrws ֔Lkd0HcH6Als.DSA؅HHJp&Q [)=SUH<9erSoR^(<|#+ĻxNׅ2c,,}-\etmSOQ/Q^SiILNɴ4!#HzyS(IFWP.4+;lV99egfw[b%繴RGDS`澨ZY^V=p~3 "Užrү*B_Φ/-?Z8@RY,LWi4<K}?кFL葆_i: c#?^]yPqDf3+W-Hy#gr8VhTv'jP'Ubv%S7@`ɝj1`y Pb{\PxF$h@ćg MVC,r /jSFgQ1ƕz^%P,|[!>c"5j&eF8}e/P >5S^qte?OZb ua9[UY7NjP3r&8r#!_qPȼ+W'>q!kN\NlŽ*vQ#/+H[ wuBŋjuaiOHSG~ gP k0Ԫ`k'I.,Ȃ{&%bձ`d z5V&:q^Gh~C9 TJ&:szuw\';S\ޠG\ qKn٤*+ Q=`[#އ<v3G]aꒌy 5$A %'R&Ɨ.L6"sE ]_2\_eވ-R3Λ=dcytHܺؽ)*)>Pa:3 Å^ؿa>acEO^+|>FWIPiHNzbZqJʹtYex$/Zhrec;9lSoE\r6<0S -+~/-3`-BTvRu.ỉ+Z4~aGᡜ@mQP _pHCv>pYI^,[eZ,'T&tFl%xwOJQ)aO-6fVQlM}oR0N)2* E?!8I'-OeTGm/up\OwkcaF.[|wJQ6$%o'ƈ!_~s8 _pQh5a/4?u+us\̪x#d*K0+m$WE_U?fuDh4*9u(GՒn?BR#UU[WȞ;^&KJt-[1aܟu~ɱs`Pgh aq{ɝ-%׈%SLtS[헎d3Q|uMM@L[mYW PoiTOy p^'CE˚לtϫFzidGCVnj?4_o94ᶦG] ?jy lSf.k[˄Z'ҹQn eڧ "(m ,4z4L:c/ksjS1߽;r3qW6㫫7D:צ6:L4\ژٔ vCR-O+&#΍}kЙ?t6mZ2WnӨ_)(YݼsmjN6>壢# ?_PL M&C0|<˅qWqʉGj1ٱϑIP6%ALE$`瓼r5< }ҽ ?gJh_p*_LpGRxC8N\,Xr%(@٘/vX?rD˞[ ]Q~h<;H/E67FE8MLjR=i3Zb[\6kl?`V֎2]ޮS$jOA{ KȨgD0 U/5I;?gQP.p~dGFD6t9`/Rk0su륲~FF#ya'޲dURX M)%|`!.Ȥ3 N,M/6LV?qC˟#EdMOKՔ 7yApv+(_M1oHZ֎~2N uM=:9师+_2 +vKVGZ f9eD,(]P(b\UŘ"d6,j?XiTl|7GqZf(q& Rd}DZEFw_z% .9Om箲b~ Lr(} 帐Oc1qJxl%җ;vz?we-Sfk} R/8/>b{sGڎV:0##}awDqKR4Vx]Ϩ3ʆ)#:50Dˋ8Nw8s!y?B2^4oS܈7FAҲ=)8l ۩ǂ8n> ޕE 0So @~i!g[ I ,.ڡ!=t_Xڏ[W,jav7_uJhQz?\txݎA,lfry9έv8j9?Xb[97c GRbR졷螽 R-M`CR0*^%9 3( օ]45DHbe⛔ڐ| !7A@WFR1xn|hO$! ',"kI  kCbXf5 mMjNh y!XxȖ,3XŒY2Y7MkC^?v :ҰnS+qYAJhBWD {hq}C`_4\T5)P"=5Kr3r`%!ךnK~:,;jsR^R*bDŽ;b7|Wdt}]ˍW.YKΒwaAOȑf/__qpƪK4VL8#h? Ce2ހ q/DM Mb_U9$]r3g(B87lݎƣXP:gZ,# g"8'Ce\;ժmn'-|-kòq6z@f.5VuE0ώ:Z<gr4(r7-Y> 3te~gP9JaL^q \Z~woW7=d돺7v< 2\+W5wd GJoY_XH}b{.< ( #eH94t~ ,A`H(#{;$=UQˍHk3h.lٰ/Nj ui :Ʌf쥵 ) J|p#BuI+}_3ƿ/nAv)1E|@R*l2ٖzIٝ#Vzd/Sw%cYfCaQj[Y~>Qڪ ٦@7EQ 2>y1S?Ġ5q<^}OpeRԦ鿕σl (q'ÒBDȀ1kWn~Ea&Gt j6薟'#2Q{9 C&,+{!Q'8=$l'$Z0půC5B'Ww#W͞A/l/7AZ┴MV{ƞH\fdE:Bv KRHd@GuАSYʚJAmw{!)P<%O -SjH"' >ÿ{ϟeܿeu4]وs~+a43{ӠGVιc\M&~GRTus2طFr+>ݤ5/FI7CB=6wט)խ#^0Gɽ/bQ'I*oQ O.:Co jRٝs@ӼݘmpE^{8El1d{"u>w/J e;[͡#V1?4rVdX=k`؃laB/*s$ wX Ń(Ԯl : piD~AuF5d:}r y976]~e(sucGW(Y?SB=_b)@ IuE}E p*]3NR;CGY_$%hJje VV-?zGӬ!ܑi׳t.Nź{.v 8EB`dnTBnA?p)Q ()VD3>_m&ƚb EMղ IY8XxNGbĠ&-'HBXʳYԒTtvfP A͏ߥl %(b+:a}DodU8BYK Fz2 Qo^@Ҷȸڸ EܟNi UXvBDG׵ xU N#qvZ^`b8%Dk0&K07 mWdu]6`qkёd),q'Lr0e8 m4D$q@Bi:Yvg`aάzߞd܃J >&f?/}Ʌ7s|;:.a'/#)a*6R"…RfSuRE`> 1YiΣs0vdi/wDܧ]>FSٷdT7Ԧ)t؁Hd5 U¹oI߃+7,2go# kF]Ou`|q4oǡbK/=e~вFEcb9 &<7} ۠ZH%LiLS##-_ %n1SҦytdm+Epf?tz#y#K:,x O"~īR Wh+q +9pPtxJI U⪈l2߯؋5ʐ\']t*ȡkHT_[7,ʊbot:Z[sRWPzx Bb1\h=d;=1hèHqlt9g嶝% }ryR9D ?\26P+$Uw8IATkj8̹P6_Km.l {?nSw>H/„r%xu1cת.EyeQ qOM^yL=4+N?WN*}v |hXTٿ99U T_ofbfڷw;Wk HQԪzBdCM!Z6"uD[8C00׽T'۬*$xt뼦ȒxB|$ݳX. AFPuh09T51 -F6w7n9左N܍Wt2Vr&~E;I#N,Gð{?W$ѨQn=CٲX6u)~LU6TT4FMJz%\íkS ȽK8hS,(%zqy/߶-BҥFRnU8Fq،J0y >glxM+u^0z<"/ZJ6xĵ$vSғJNN'QJ=&~~^x&2'ŤOd4$! j&=$[cvu4aA{ďp&[Փu`OޢRoY4!>n_vfY-НYUJ ÆӓKSGGKhEaQc07XSU:kjv9a*KSN*TL#9*Lˣq&틛}̻Ǧs$J2;3ЧSJ?@z6+IO$v|p%ELإi4w%/LWY>J0T@)gb]PNdLV1XAhJN'돾5TxȃZu4zRv0Sg .o}h!,Qq-Z5 }3E-"iv6#M;`;. *K86|T|lddtINeb8 UN N05R:8 wbxlsB:ԫߥ8QxV&䩘^NKȨ5{&?y?}!QQZh$$ܛ>ߛ' ]=/N*& &ftmTT+):@̌Y"Jh,UQCˤ@+|Zn'7 1\[uK O&}XN \8q!˕/$`oBVޞf@P&z4{ݥ6no3[e :F% 3`W~4}_+ n=ۍqH#)t7W+C1r V']i<KhpfZ[Z#rz%+E{bFbMq&‰]%wgizº"C&Yr~S[( 1c])޲Cq/tA$.%Cl'A6mqSQmUIdžsdxG?.. *cpi!|HoQO$xhMG/B:T$wTZ7Ֆt]Me$o[߁e`LqD?rS@Pd;sfdF@{ȉ/|`#fHWJ8\ڬkO ?O,tv3hB{O*c ]5X3S9s#x5g!|>U*Bkipgo:oR@^:ϋH#.nd+ZBt6TR- 0?eoskMYD1$PlP2RWo17.6̔t cmP ğIBH D1)T9}yߨwK`8yF\-IMS!*j|xi l$n泻v I.x6tFqv+OO]|vDH3gi8pt;}Sm ҙq+HXtAl hY~k:-:7BgmB1 Z.>Q[_#+&am" !,dr![KJ1`߭Ge"XZ!;T&a1iR l ە@b܈#`$_tXk%?G~ 1.Iھ!-pdV F^/e7](7@.ڹ1vnkb'$[9a`Բgщc{3e4$ *}Zs\[ tE7 ({R/:4>7=2k|Tޫmc[g6 w fOpa?.6C6N3N q;EP1fx(~[ʺ cW7SK兢D:E`ctn(TCu7LL[C≴*\p(}uw.w 7m0Җ΅%hھbU "^sOvѦuW>aFld#ޱh޹o jU-Cլ_x0zPZ4/ʾ"Q_z:xZtz|  eN_[%[YeBi*1@Ssqf8 M>MI kvU#f,Θ?:.Eѥ_@2͓qSknx=l%~)T @߂Fjl<L\Uy[+G c8W&{YcAҗ[d,~XeԆn7룐eև/(S{.&V5hJߋ'HB;@{J9-lT*XgDuCFփ,OWN%H"ڎ952 b 'vMͦ3Dջ;OVS{'A= ϩuTxDj-ɒ\yM g{G :bucsjCg+s` UHH,䆅tRHIBfJĹ;`Z1PR*Qܨ>hpʠ6y˸0x\:Nx0hDuMXxC}j]u L&̃{`zQ`7(4R1.9xyܺ&*bCz E\n{;'_itZ^ 䪋,BWhgh0f ](}jLQޠ-w[Ky<ƸFBr99ML63P["$[M#xȌX5X.܄4v,LwBԃv/vz ޅ75o.?3^l#k"7}sZƂ,ZOL1U:9B(bi])~=C*1&+[ш1AXU-BXL*$Dp=d+/Zq+% &n<}o XP <ﱂW}% g[GAtw}ՉvΦn4a~`wp/C2 U%H) jZ1sy2çM 20g] gnߠF&FI $xIO]߅V:4Izomkw.̖x}ƮǝbE٭Oi *E٠p5 &:,yH@~ap܆v]1m yjǬt;EbMB?FFWԺ^2sHFJONQ)+U]᤽<|4wR>^pHd),5|$U5e;==ߚ*S&+4jXx0єǴ( H$ȫ-]q"T&F3qe.rwfqar`DsΧc4HrQ,Xq!vRPB87AsŖ6sdO-2eNY*~`{$3 `ƐlC8Ʒ @d="NJBl{V#aKbwl } @YJj@!/ ӊj(ǶC-GI9b'"LQ'_q LS`1XgӍ7d af&ش25f[0 W<W0E_O%|ncst>O8 ]K^xaWfO ׃F#9ӂh-b ҆i>E0lК6T-bXO= Sw6O AC?G͞f%F%)p, %]9dC5 FP_gnQVTU!ڛ%mJ R[Y4I1~?tvk+ovUoDJ_bkUvZK;:Gc6V۱\yAC ·x<,;X%6 TƂ,E']DdK;b /S͎%N \X'L :6Johh_ڎS~VX8QxЯst|m̢pK"V1)\"9mVQ5-&.я47C5GS#_Ccœv-+,.W]J r8DwՐ$À+;5t1^CTΉ?Y'qb39vI%g;>$Rg4Dϰ*qlF8kc]-jڅʰQݔk"̱|/z'AՅvqcmJ,Y0Քjp@g_^@ nr>_] )أ*&CV޺} aPćɿ!s]~^_^\Wnk[3x~lE# &@DV4Q; , cArL[Ho}9)MeXz{:xQ!/:~uVn}/xnauzٻ^R6}ۛ(okRQ".vKdO`/I, x$IFovnNQCeEu嬐k۽DHzNc((lӨA+ġ%Sb2rwiwdKm9gVx=iC#g;^/~֞^tȆLFQRznGe`?7k˷(qc|h9d, '=?1(:c7Bw0ܮ܅Br?&)}i܁66418=xÊ{tfTmFC)Er8K k6+;C ii4)3hiߤ^Paw=%lxPuzT'WV;2KJ\FCEW-L.cLӧڎoJvvn0=t(qx?}Ϳ)5n6, R^Hܝ,_Bu&[Od[?0cLu5[v#ϋ^n 5o0bx|Gthٷ'hzKP]fURQVf^7_u/f*J ^CXr@&ړq4bgFC)=ra/hډ߇|\ /gܪ~} QVDs#t R6RĒ2BcԉPbaG(qa:SU1>̧ 8 d2ȳAds%ƥa)Jj!k(suph'2:lC0%Qgqg^x@`DžQ89o]1JaEJElۅhH&imq9 ".d>/sE͒[gZY? U+H-ZmE݁͊ݭL|4I$B]TXoL p1f1c+|m;.7oM>ZQ9'髛#3ףA_SM$4|k+5ugAk/(S*$|Ɲ0IΠeUp0z;C&LjA`~xYZzJ>eJ é`=>{e<@ $elbe}< b#abr0vXKTmQ.W oƒ{[aM j$&WЧ$%G HFÂbmoцNräy]L{g^xɂ%Zߪ#<ӷ\H)r"p$O̠ `&ǡ^C)a.)(4=LƇhX= ƌ \z ňm5:^·- Vw.'2ZAB}5t,lt! A[[{_Xc^oPWT%; ȶd+I>`I,QH&(7rHvP~Ƒ,nt[pMw0 V?䝼Y#>Q& G- @`\H МE R6,E )ӃOvu 47i2W[ _TIQ[ iLtóJ +ʼk&=48r ˎ/$qgB0K@1;GLtfM("ۢ{H Aj8ft-#*n?]loqg3FqsdaVWv7q^{/3,yxD.i /^+lC7Y.''-R4i!}'`}v sSO ̀*Uuk3,ԫJ8<ޙ@mM(@+INC;8 \՜J4q͔`eYEWCsDN;N1f[+ɬW 2klfv$| %d;` ko1z\j!_Cq&wBX1.vifdj+'7>pF&J]$@]5`T}{c1V  hEH8 u٦/<"vޣe IXcWu4Swzi uATVy+A6,2E7InU]s/TFb} &mhpZ^s94,ɜN27ʺsV"aYv[[=^3Fd cHqtNf^h˾K@ [1z5|G.LU;% 6?mjӜXLrv2 AcOnwz Cx'j+4!s}XO&񶠾xfVNSoDx+$z"FP (NT#;S?/hȮO"aRfa,\aMnG8CkiTX;Z!Hx몜w/NƇ[u3 wLb.A-| ȼ&o/}T6g:c[HZa#-F vKx>n[6QF m%?0TD.ad[P#&B6+=$AP,Rּa իLUGg|I_PnyI2 *`;?,8z2y$:wݎ7OǾou"2P,#y= d,:akf2aT{w~8a8v%E/Jr{r0q#{_8HC&|! 3OX+J`Ɠ'"g#Ƨs~g6H5v`nؗ)Q4;a,Dz~~ ~A {d~$m3FۡDG| |+<χMXɃ_MuHAsM[[崕o#+G+6ݮn%=P4vИc amg΀ E+4$-Eˋ/5Ć YwDMVa휬3k^y ^eVbDIX-qvBhjY @&lW1]D'nyݍ^ =]e ;Y\=pV's_NK={CbJNc#O8@ O!gu'،A>tkPdWk`bB-&SzVwܸR5ih(k˯dEXE ȧI< -Wk$6IyeM٨ʁ+vCh#Uljɭrp߲mkg b@o(qk7hG%ñ`O79K*pF{C}^}> /o~38šŭKKZ:˨Z}'v*^;;[eh^A j{*|&7 1aѩe1=x@ KC6Fєז2-xZ%d[/;YiV 1OS\eT‘^3&E)jSo ;_+9K" ݻ_Z.]+H:řm9e%f+GEB6|}K5}2(Zf}B/fA _^xS(^_qJC <*p4]y2^"B8k{spM /^g8( ÎI/fﹿN[#*oaE l%KٖU|~<ť[1Zmy!7#aFH`QCnceR]X*J[s *Tmo.i̇a[ƽ?AXptjZpZp_R~^MĨL$jq=y9۩`{#g#oaتG: [8ֻ=L<5K ݰg֡xq0(eK`TH%?fZRRgZ#`9Nku?u(ƃe8y#y7F{,763vΖ+(֜]e#OGLy'.= ,sܜWPij*wqsl[%6q96>YYjA3мȴC 9EuQy?n"f[% y*%1%Vi$'cuʧ )&\^|"xerS7ps&k}s/v llR(l 2üT3hXX\{!"Ց˻ڤ{K_D?(3 h;Poa~操}Tj􅾚vn~dwNWHT`i5= 2PN u>Fz:PyǾpoZ[2-T7A3flۼm5[!Qܹ/t\f$Wu0s6¡M\:U̲BV!)3WUv?[U7INA 1eKB܎޹ϯ9rJ:զg 9FR܍3؍$Ѧs{XIߟ Ql kkH:AԞ~Q۞=,k 楊}n{ܙOC 0"}VWl!/#` M C,dW[QyGtr$O(plɾ mEgfc7}_,w:öo=A6M%T:eT{8Q+PE3{cgXX!ΓÒt60q1}ȴ ? h,Ac֦6\e4;> Ơm1>%X7.V S$^*,tژ t[t\`9U(-ʂny7|Vu Ѭc$Lj:OA etwbn?k)'/ @bO?fa1*]C|ٶdG翮,ڪ"ԥʀSŘ\i,?hg@-ʾg>2vk0rRG?Cr#7?(=V^h~+/}nV%y΂WCc/%MN ,HJ,pHpfjKe8Ya/ -u]prtlwW.EVb>Mǫ>XXX?nεB4hYkty PfWɦEB޺s `] :_LhZu%]Ԍ= ȗ AWM('h.@\ wPA G wIԘ^5;Pw<ȴFuVotV$Kʣ(zڰ+OOe/ð/)G$j=ܮz/ .AW. YvJ̛пU!5tL2"~ )D)>rH\|bu!0&L ڲ4 ("́js7Hhvvd}a/dR7\q;@)igN,ez.U0([FtS\Y_))wn`,n=yՁ{gS{М{bo cK3uPۘV,5J\2pdj4mf[wGͫl۵&6GᕁX)ǍK~^q?k^> 0Ja( -"u>#h[(&2b7u9_ %5RtyXVDv|sՅ[>.i$EA s7>l!@ ZHgoϢ w(727\l3TL&' *LVsSfhL>N%Hs%ǙLucmjS$X֖hiLN b>P2U=cCvrL00_kRj{Z`\lw2/& Cn5ݥ7Ұ;(h4Z-{YχŷP0T{Z>CʿjQ&֓2s½Y/ڿ QP X[pJd!QhY~Ӯ>\ˢCW[W)w˔P qxMjD5PP"+GO`GV 5rF=ӬԮ喴Z" ZY6OS`XXd9՛qI96Q쀖_,S,BwKRWI @Mf_-[d;yZƒRL>l+;= Qb}2K[r\ bp31A#t)C|:' rEkB|,2-|^݇xTSPmM["B`T$O lT ws۔6{;_C9.#Kq{*hN{ S >Jd')+[ \px~ ,͇sP D!Ν*Vr۱W5) #L@xuhgL "jXM5Jvp|DLe|Ok_  qIrM^?0BܜdN&?>tUJ-z iZ^QS-xP{R8RNP,+xqXox`r]R`"!XpԩdpWmmW&gRN_fjc j0츭7Ko-kyad}֟6SYzgj`^%MQd78尕 `A"T`K$S__S>(Kp|m+%V>JIh|R (/% x<˰2-$.3RMSSuI6 B$+lUeys Ӂן*pdP0@B * ftwf۹[(ϒ RH t.i1Zb f Q<y l1-n3C3s""WR"PUҕh?Jrͣ0ļ1Qk6KҼ1uo.r;LNfPyz ^L'[-7`<ѲzAvh"w }' +#HKC=8pǀ `8\6h1RXaJ_T& q˚i+w$&m8j')ЉhM[Qǧ^K&"qQ/Kqѧfb*?-=[ †t -M#gfLe~@/zW+RϺ'D7WS1|_9:.kjlF'**9*фHX:oIfo|{WE:P/bs{Ͻ"A0qj]<07? *}Ͱo9IAi) YO>+OB3V[Klm*G$s-ɏniN-!܅A8!R.EaG߱+b$hBjzRemnePq(]Hp…!/T +tC\rkB6<9n{n0͙MK?r[^ 淠$B.s_ql&&&EۖUրu(1Bz:L rΠQiq?ʓC6}::̴9='+lЙPT\uܙxHh&Txp\7+ȍ1w(-3T5'p@6i8jp'7%|;3j7B;`Dr;VeydP b@Y2mWvrC)녵HtLdi~:UZZyS ڇX0-Y#{}qҠcohR}8V>oj|fJt'/>׀WׄmаʏDK 9.F[>N0 u_<#I5HbSV;j0Q 3LAU|uxFr` o DΫh>c+ A }NA(d}3a 4lCr79W93P}x4v!1 %x5ZMzzqpr+9]jT5`)kG(Ѳz4:uŤZ1KHAoB`ؙ16M:#WURe+S"0|&h"&1UD1AhO6"uw9٣42wlQ~`}BZJYD}Y9'k(xes&4,\e_pLzTu24A~vg'' "WbBx ٠c1Ϥ0VL~GF٣ZyX3hdg Jnh 溇]ױ89m\(RdE"r4m1BX{GŰv6km up֢]KrIt466U$XgG0! ¹O D/8 I"L L3U*)k L-lQHdLvOA"z8tSm_ o&ҕ1tНP!e@R/7m0CV;4Jjq[_Bp` j\U,$ƈ_ uLc x]hظ2276hcJ!AW3A6i8κ80A\'0tL#~Lu| syFs|ARVrP0P*E`[IȚG᳋<4yF>q JasF"5vpZXEG)];iPgUEC!珛*3˨ QM$\ܖo%6V80+ (ΞmGU9?LnttI[ooEsLtb4)L:6(Gqڛz6aZF@ϓqfQ(F--txɯ* VSaC{I.9 )*->PAE 0%ʆBY`$!9xl:X16n6}|5-?z*cC =^@pK,5 E{?k\!-t<=3yѲ~XyYo1wF6#M:m=ȟ@#uDxpm-rwL-W=jʎ"U;oy32wf-.[Ӏ$h#Y:ڪ^Q}f .Ɋͱ'h'{_g:T-Xق|߷ij6FUSՅf9oaBXSBh>5iIXq1%IO;q*_1ymr r55Oh|a;F `?.G2qHPѲ3_ 3@\ O bB0&rk~$NIԳҏXL-)ȋޱ\59s2?y7dlDa@ n\S"Z`ޱbZ}m;U:*0߼@p@]=ր\PsG1YdOՌCͱPI"p+~ qNyRX몭+֖2m IP,4լ9Ԯu,T~x/㔪*Ss I׽9~z:iǝ Jmz>@ӈ 8S[nA;ÈBVe}Y%e4 Tr\WL@zR}zjIFwFSlwvv0A]hL)|XŭBAI_/~3J9[~QݬQ*ڠ1?&Ő>5.8ucbN-ЋEjCrrukϺ4$G CD2|\ $[ {8}yP,#~g92r3C}%bs_cg- -s֜TJ3EmQiT,dM5CJu\3*P)Dq-"E GeB.kV@~ FGzqv,"/f>[wHum>68mW;mt$팉|\)zi}Yf0Z+Ƞ4z3G 3d)@Z~Y-S},zf r20 %0 ?"EﮎTIM-:xx(&K/UnɻDh+Q.F(J4ȃ'ޯ0q,<;vvPRt'A‚!H0e9iH WOi{<=@eGj(aE}\Fb>I|'  Q7ŕE Nyi Ҷw.h^4b:Q642ï6a}eF-SAj$2+Mgiԃ`B=>n{JBR7J@6Īp.y:ޏ$˱x".,A+ O@U7۳De o;9=O(q89jo}{{]@t؇ |W:9ѸtoP`uy$JIxp V?o-]jOҜ!wW[q[5!_j5^HKڙEyˣ@ElK횅cmؾ qRӝFH np~|ޙ,?2yCu= رA2\Y6L˳EiSk֌{!be2_NCD*L.H{RdF4/II6"l@ -̈RW ~3CcS)IOx&ްJSÍ*I0n1;cpAWJg <1Wfr~L5%&e0bQK#km${`CMΙ:ųA6Z,I!;It[MZVQuy  D–*L;:2ޔMRY83:* ^vN,cB7)r=l:*wBfi<0" #X%b[> $G8wF,~աhlqP[3}GaSN:KቿeLMI $ϸ[ ~0N򟺷aV>œSy/K_V4S8`hDH)JsW>+&'Gx̴J&Tő'\h`(Ta(^+#u9͛:4Q8AaD-HዼuD^o0|(C7QؒaVUFAT}c] *N,Cy/DDGer49<-"ۜ6zcX󳿋Y3٬1hmo+I|y~ t}dy߇(5J[ %c> Ri0<" &3I΅5#vWA?@v {nE[ZrhiECgXՑݺ 6 G'"FBA5-kz8#=ж}Nt}`yW|sECȠTÖ\8mbKNԆVH&_VXfm\t&{ "zzk0t}?]^Yt8.XhJ2r@9k͠љY౦@~E}*O@ww9j 5--*mʬһ3cG -S@nKr1Lkw?Sd ^& amB?#,=TsdV cBIqқd6m'8V'M+EENxAF)VV$ft(#0oAX_[OjiU$Em0 k-lVMGQ Two<,6O-RHآHn]oibbX7F_M/Ux7Jbm˒jd՞+K(蒢e xwNW"R Jm d1/ysJtx LԄj2c+{)|( ^ Xc8fQ;ŽWm{h'9VQݼr[8)I˔&F Qnɪ=:9}=Y*ko2)e<2?KOQ˱Z&Mt-,x:l^O8' nhI>"ÖP݌pAJ7~O6 s8\Z<ʹY!Cd"wA <Q2t{ -#rY, 4qzuO0:-/Q+Kn %q,KTk`ejL^d++5egaXI@[!GH%p刄mv{P^`|Y;;c0P򪢡}sֶ+?WQ^łj[.oYD/F\T_j2G)Cqxs; *FW$%00JD1DZiyK`mW<Ꝁ? 4ȪTsx#ڔk""ga <6|9n23Zt <.&]i>b*] 2uq(ZLNBeekv<"A]',6??Ryh 2np[Mw+%nE JŹZs['+oҗsسT+C.ytoܯZo,y: E9GG$Uք <7袼K[~b]6`w&&o9%U6nd{%T5i8%RtVҀEY^KzaXR[nJ _$ "0A ^^MTJɴ6+皔#/_!Lnn2k{/fΒ'E>+vkw/ipDO@9,xZs&u

Um35;r:B|Gt/ռ $Z7 GP05J'5FFve v=%< plU`|͖[ԭ$M)'ߋ1̂Vd--`wË7hPdڵ%Ea5G. %m#XUZPpސ&c]pPmCUj|a_ v{w8NGk>fTC(X=@oJ>Ws b?:=G#`:òS|¶HϺd3nZK,xW|c0`دF:+ȦCLbSiz׋!Y4N\f2cֲ[_zOPx^| ?jgp՝#0lņpq@ )1Ec2kITrcEZ_vyJƱSylMc/2ofRo+&`{C싺-\d fE+ Ѓ8D$^kPBV`p߃8A>~ [w8#e:*A=TVrSd#Le]?-7X_I{'WO5MX*..5{#8{t(Ix_ىf|M*ijmKiͣކU AF,dLfM &D.9u 0"sceM'+Q=I*c;5}cKVPo~T١\#,NOm"W='P c+E~NQ+r JQsXS]]]x 41>. }-իZpA)X:G85+g='VH6t4DWMcn6!{jc!AߗaO>$%gRX!7s>79# Q9 ҁ>[ӪYai* z=bSZ049_V<Ҫ6ϛ/r<J/!' Yxfl'!!*pS3~w'6AqdJl#[ U}nS1s%T%'PuX|0O+? A G Փ|p4Cw"w~th̃86z\Q8l+?lg W톲2c3v1R?ǏRO?؏}Dڳ2r<_Cĵ*:7$P=g)f , at~( fyEڷ:bbMي~NR*;ai͖l')+IȮg2*EԔЙahSғ"<,5j@^lÇ{hL/tjFv9A6e707JQ/68Y5v\ @X:0ekD؉; FڗEzx3T22)b9#Uo宽MT4>IfZN>% m,S WhTbD$H$Cƺ;nH c+lV'i70]3#7#{PbF5^8x!T^>ͥ"K>"3#hsBNC:iEZBXá{FE ]LYT;Mhq.,J+(`\06ʷboܽSgb.6 mW%gD}&WFʒ\Mq$Jڂ揮ڞO 9:73J-qd uۋ" tLܒt#)Y]&>@Vwrk-`K.v$S ~ ܸJ lP.|5J3=z5ٱWdq$U=HyTd#n6bh 0P-Qdɶls[uR#o@nq800⯱J/iUɐE&n?3^S[̐W^;*>ʢULI$'iJ5ėB&ᭁ;Q@$kml>"ׄ:I+Љe$~T)RiT]Ɵ'r@.}␶7Gi$]#9 0Q{)ё(=$#Ț9Wܸi'l<]eMae,7xUh0"#҂p bݰ/CϘ#~q˶y] t8_&EͶmڧ1b\u/ʓD,ZJT|;͘uGN?kҢ6]J~;iX蚄9C(b&fHDw#uƒo-֗ >H8c\<+~!#js~gsuRfwQud&7i"}dFaB1n-@udNSS06MZ zNͫkA$Zu-/ lkuu(i[JYb`V[ :X)cL Sz1[2Ѫ.Hp|Sl׮&r$hO.[Hʣ$bT0Y};&Y*'et4 D/x+qWGeM*+7m¥1m20'w~:ϒ`H^DB'W^5nhn[ނ.!495j8;`"MG ('KK)A/Ya֍K\;-6 fu{G݆͟8ro[+)\'Tau@c Y|e (\74p2)pbhBOhmdrr"h"uN+)C:DC7|V^Szd8Ǵ&|ĽbnZ1/ʜ[!Y8)E_2iInα]ۂ8N+[P }F"J3XSד[o4 skiÀL% }N%j >4Sl HYeig5 E|Σ0y&Î ĸ}KOE7T'K.̀ڟ5k 2ўZ0Z4=R?YU2,8Dc!)a(\MoDGt,׽,5|?fy#zkyzpk#Zx)O'B2O!)9Vʘz^KyԛU'D(I9"itQڝ$3UD c?IN޷ퟴ_znAI:8Pl:R&MDa;mX}'[i)I?8). QW`і@R_, <[!SLkm^@gu/2*U J KލNx= jh"G I=@2AᾤN9y"KºiMr6 V &֘m^Nr2-)Y8 [NVfM.)h%oW-:)n{xypElp3y[sGAFBN'^I'YM Q'j#st{ݭwJ+,!F ) )n#oеmgg.SzpVncNK"I0DZlѸ4ڧ t!:ʄaV@?瘤hߟ"f`k5coA$ -Ё (7NR!nջIW鴻bx&wm6BՆx끘Gc`cr45/X2Y`\ns~!,:ɼπpx6ƔtaG%,ǤYƾ ǾZ=YJo5MtwEؗE+P|K cY<^C꯯y%ʋ\OcZ;8zEY"U7/"Pi=G@4P ypQq,X)Ɍup/U:Dmj#vVwks&3NBB F!X.*^ NXx"flՌ3uwuϡa:6aG"ݫ$q%<&zV4c9[5rzZ٦[|+Kc-(rP<(E6#tB2dKYTM(k"7Ok0 ^A& pTXN?0.3}ak*/{jtQV G My; ʤA)J]bNhT4`D 8OaV]d 혈=e#t^Zm]8Blޜ0B ~eĊa=w 8am5RT&ʭva\:F B#kjeEh` :݌V = lNl\Іz8jЬ*X7 ĦyE)GP(o"EʤnGtJV\2*Y-TteDΊ +fgH&Rzf.0U8<@UV!7nFB6|H[4QE;B[J9=\r.n"DiL9Adϖ+y ~dfaܧt<,ꇃy%`YOX171փ)Tѓ3{u8&;p1+vˊ{8Zj}oUZX&6t,9/RJJ})-`t)vf'S:[T9/>#`>ljzrQ$y؍?!-$~SLx$QaFCǴ(qDx6\~ m/^|~P)ha |e;㳥6^e޼6%ݗ:gF Rfi汚mQcF?I%TÓZ0"?-Hl))5伦4'ce?\/dH#맬i%!YgHZnO 1G"c7Ӝ4GN f#ŅK[oߒx[TJѺl+P LKsL%݅# i T|{ W^jI~{:t:?^cYB5hlDȬ\=n/ގ~A DBS@ 3nO,)9d @l46<+Q<O'mAKadJ=Ў #gؼyuA18{}4C3; vLF&؄~%!Z.})%a<5Fol7 ՂNa(ekʉiT 8F޿U눦)e?5K22t&Xw빢I{/k=pk*\5^ªS7J#ƖFH8A!ӟ'ɾlޭ"3*#gTx מ"6+H^|f}RB3uv"Gq}d33$畸54aE ,rMUT `0N<>4zY`w){JbYe/GJ īER UŲL-WoC>j\LiNeWs']Cj2⛿=ye ×D Z.=|k*r D_00jYgEsl idnUhGؘ!`/g#~NǥFGu'3.Y#B02{ ahOn#F򒤾y8si.G^[.ʎ)X(Qip- VFL ++sWcQ V}\RgYIyIb͓t]_ CtszM?b2Ἇ,Kq?b7hPrh5oW OᒸTE_;Qw6CyHh_t1wj@jcZ(*Э![J? SdRU (S))y~~/ fL#t, {5Z#h'g8m'E0\ɩkվSa8fC-k ʂ$=J 6vFf>qHfͪkH3Dz}ƭ"L:u]fA׍f,p ;Rywgk'!yVeN R\^Ī=1Ep j: 4ѓ@ wgR0VE8ug 0 RnX_oC4V4NCҁMNh Qbdߑ)d>Qp5iC%x}u8%:WJbݴ|tnɎUs3?Ja*A^IA[A"8 # Vx%r"N J"H#/x>?2,du43 4I d˲ua\vNy@y XDJp2Ugż1n1zlěnZ&5ttD̤^[D.B72;5[x!螧ˌ@T@%'8EAjk޻Q =7Ks.*"$8`̮'@~Xjޝ i9R^q+l}Y/)H$4m9nU-vQ(@whA5wʒAzET

ʱfyCU whtFFFJgF#w0=T1ͫ$YP7lnݓsuH8-o*,U";H吸/ٺ+|p3_uXP},#Nt"i8jDmG3A1 H#> KFѨ!Kp?@u NvYIJQt"ҍ;;^|)?#Q, gl p)]:D'%Gnz+vx<% Y2,H&mM_f]$+ 2z`7YbUXY~ҿآ&?)#m q~z:ygDô -`M͝:PQ]4\mqo.cCH9̝U;+؀^wLB$\- c"$ tq)4|F)VJ[vWku%VsD5 Ug@Pi!y)I (7fH%S#Vt&a&1 ;V|V F[D-JGu+,)Ӌw٘U gÛPkg`mfc0O!n|uH ^8: ;XPM +1ijbxd9}ݤ BPT|ǎ1AZoɸ~TRtr'yE-ޖۃ0u8]>-Z>4Kݙ%RcN*+X?2} .V 0Pg> z->4=!Jk4Ywos:TUj ; -N#Qy=1H|7LZ)\ybHo5b燋 VInKq_)#LI MxE6/b_Վr"U FۋNψ~?ZdDԟY9+U:+q286pRĶZv\mG:Q"y^9YI")d2gD9YD gW=#dhۤQ;]//LP vA۪h~6tQi})S2 LM!ЃKZmOۺٿ֐kC Ip:k'rǻ x] u[r6G2(Z7W'ЮE+U7'E7H#Ŋ‰uz6) Ia<#N V$0&dsbr rpY 6yTŸ(cz?@ɛ048TF? uQ;[hUgqV<>.R۩h<06LG~vV(qx;>vP3Zn"z!+t'KN< EϭUTL?VsF{aYH9OixY*#@.~[ {"$yU)^UCo З)D oHyFA;UjCm= Y [xx(o^V;~OXܲ9Ym"zxIf7n/% ;*>[KE;ZW0M_ٹ`ZhdC6Psv#4u:3+G2yG1i饬  6~2Vf`AA]Jn`C2xB5Y>qDHur܉]D67m1Lkv`S Je$J|Öi'<Mz+bnJ-[x&վת<:~3 F  }ˁpRy5pčB`lF DMt&-Қ]@Gn~8G5+ l1)ZYզE _- 1Г.7B<3qۀ9g:| iI'C ƘCVY-OsnQ."ZnW痈HN 0ZoiD+vՈہf'ؓ'C9z[@OyYPG )`{]ܫoHy=[6b۪=k롨N5 ;S d]{Db}ibo$ϓ awwī7`ZQ oYIGbM/MVv_J(b'Ct ?YS 㩏H S""꼻iǮ2~5n|4|C/I1*և~mb綶νMWg]ƬBCޛy<5p$7<3CypT̃~bwJ jwVsυX'Tq&C$߿-|"0.5 91+WjZV4Vh1Mѵc /@\ll :PњmGf v~Z3ȪUƊzxn߲y\?ȫӨW?zgޞF-b@+ j}*8Yer ٷL0R:=8<^_'-!,a#,'^joi ưW2HR$3X4 Y9&j ]fEKZB+jlgd,Ƶg'l2׍TBGV.Ō#0,st.bCV56FTy+*+QzYd t-k"6Utwe ؿ볫-w[93'2vЋ~@b#%3Uܧ3|}!0OTvOгb 9KRQ"`KC׮<\}rKQe߰~#뒜ӂ1jr!J\*xˌ?WIp0:+X)` gQ% vv.m)7K6:<ȧ;DbL8.Y]77Bɽ{/6Y 5_pOp A6QrjͿ~Uǒv1O Ŷ+".˳Ω!MF0hH .8rK;9jT I+oXm^RI"C,;ʌm =V.9R49HC:sZܵ_4 )_1@EB/?e4pq"ףw el}/l2˕N0\ӊѺ.4#ޅ@noBlqD0ōHSJN>7))C^uĉG6)&3Ź>*ZCѪNSS̢k. gȤˠ~F,HEon/b_҃m%1տ>E(SrVf;enTTP7\W 4*fNlyOg,rc*Vۉ~~Z3w R5E=2YH6yGl_fpA)mUS(IPC5J [p[r1yD Մ@ՙ4glm9z ߧ8Kz!_y.h ^oo Ao %E|Aj1UQPksEv Oݿ2Q/a3Vze}>`sfDF~3g*  UD@*/HGo4΂FZt [vf|SJ  \=a7FR\HPa.9t'%K:j[ ;FZb X4>6Y$}?Sj S85` *0kM+ R~J7ՠ](9W{1H/>{u*ϋ(_բLMb5vU$>~Ğ4灧kVrVjۙ3M=%k47zNFf[4 2#k|/ʄw|>JibC X79'Vcse۩ F\e..&">ÌdCdI*_Ƶ/J2⠹^uLu;zvZ_5;L2__T Btgڷa̷}S-FĂKq )Pƞ~Ϡ-mSCfk@  f:}.Bi>8,]! B 8O)N*,եyI_J`O"s&ag\͜Ҏԑ{# ^'?`?o#W[oڳ;_7PD8qv m4 6.S`w_Pֈ]F$'<@XGcGrmcMk %6p'9>»G``]p ѭM2iS(3j9-}Kh5RJU9cLw،1%wx{YY{QOc3dxCi 0`g=uXF8B hO*Zsy[o O;4PƲC;yC:2f7qe/ ~' -ŕ%ּhW0WYp[A_̯mӹK֐ṇ[aXϞwXE)JZȠᨨI_~A:m | !-*#z7Yrvצx"Oyzȭ+ou]׿EDRDoadlõS6åqte-@$0I$܏=q Sv*. eK;i6@8& LLgP0os`,^N"?BU Ħ<>jg&po/ȠXkGEnh 7/C߱^dU8~Pk4ȧQIJhw2LkX%;#kD 9 __Goň+uE[=<[>Ѧ+'d(BxdZD+WLh+;qVAKܠε{r),ԣWAY.X]~%jV:{?x(RR7KN$ yj,+GD6bip+*ŕpB aiԔB,&26CܿqJY8pVn!U^ә} ]GϪun|<78*8 sO|o^G*bhR`'Qr̘1j̀5OS2wT hf"jie/ lhpNDsjҤʜJ狧Vy%1W{6xFSpBP 'IarISٵ}SNgrEqK" S$X#^::Շ9_sw@xJ(]G a^h9N`c-$CuBbw"į+1SqP=kٽBۻs dsnu? )ٌf}|Snj_ |@c+F<2DR\2Qx9dd^5oz__+E=b3;(/6Liyi_௠vc\7)OG+μ.t-%!V ff`$Grrem! B# t3T+|Hza -xBLyf ~ ]xaG`iHk9զPQ5сꗡڛΒ)~,1^O#i5Bq-4{تP,wj[SIepxlr>-VS2Sl|? gVтHeC-# v9)k-}CnEMW'r /ս!t=ةYbN17q_JbEȏ꥔ +R&+[ff+Luw, .0*?S^>c"tp/ViJC-do!1;n]B%+ЗŲN˃~.k r{(D: xN"A <gt&}ω0?$ Uh hޜ'! c;L,mM_|8nVkdݷX0eciP`¼GrB\IBR*Axբ.A|m4 (M_vMRӤk<Z-U-̰c;~.k:m\@>6o=UmJÐWH6/l rP4%|6@zj=]>f3.嵴2GD2pzG *醇7WrGן)BރCw UQN$mFUuCP5 kJDC, 6r OBR||tq3M[ D@B|5V+~3&?1*}/`ذ:GR5^M @UITrSmxIr+GӆHR~+Қ +b"[ ujD( WY{DxczH-UٸPʞڲK͈z$<#zjWLܸH!`cw\V8ӲoD[b>|ڇFt6=P(1ً*;O c*b AzuF+1?_'aT >51e_*B`u`;zåN<NeijA _bc}tMBFwjg`$+P){~?py-EGM)ds-8d^>+@ͤ'aIv b[@!nSV$ҵ3ҕe$8]x>ywQ0xR(f-d{ECl0 yꧤQAcSeZPMhf=$oggAeWܟz9q#t.2Ζhv Rc_%&>%M03,fә WQc$//-<95G*hQ|IXA'NDŝ#I-cdeUKpELQ_|jVpiOȘߵဵFR6O*nD [4 dEm׀\ekAL`b5 ޤK[XCd܂Hw`△~ ^Q W,pYGWm ?mAL 2h"MD4Щ'Ց  ;I={|KaY6.)d ?be̾$X5t\G| *I(h|`]-~4/X_ɬ3e2Wxywko1S_pTͣ[C~. ?4ac(Zx_͌']#qT:2@0 K+%C+7 }FnT2(Q)TӘ2_-eFNWr~@ZoS0(̶aoKppȥ!}#3ن&^FPjK U|)_g<˟x]1 gs"s4uٚ6uDw6j'r`0U!Y*̣[\Lrm(R X1)ɯkD~AyE>AR{*c:nرTU<ҐVTGa;ٟԟ^R+贿z/842SZLWxw}B*c |-;m:E*ccU/ 7?sBO %}O8} T!vD$qw7N6M~Oq@i*@O[gt<37=`; KQط ZE d#*&Vg. 9.JM7iA=IƁ\~~&9ٙ,te!˂eFP~{ w,".x~& Mĝ]dXYh3 ,a L5Fޤ4qoN1ix9]+,=]wVYx(xyưt@s ò_JjU ϤkoX[e'`B öO|+!~Yxi*-yr^L>\ d JnV{:D&ES#0mh;idYBua i @n(^+S72\)4YrY-X)cꘃ>-7Ug; ^\R%A j!b%XPSnXTI!s>NKҍ@f ̡[#"rj@~c2w%!PV09% [-:t͟sЫy֨"j'`{AiޭՄ^-EoFx6)y?&T 9mK׬$<)R\;hI e\V )<t u C2MU|MMxŲ~iTd`Ю߹Ux  w| dM~U7  搱R}L(p fӟ6)a"j /vzEOq(>-y19=E1`Rhf2MO,=ڒɅ@o?)eGR]$ʫ-y2XLb5r$u rՊm`:ҙPo\h,ϓ ٴOHwAQ3#_T76de,46zālr+ {-o̎9>髅EYɊ]d)6fq7Y) !orUrr4d7iMɲ9'Y< rVf-nz'Y`fGHTi Y;3lts)[ȱ'6R!V&J?/+MwcѨKm5NmQ),K "2v-\!}h,FgVh`]]_ކ5G@.&a1&YT\: yjCٗ&ݹnV7AR+ISk|Dd==PMpѬ?ijE"8= [O0Aga1i3j7?n]& 5K/ǵ2y펧3V IWG)ֶgw%&Ĝg> b[lY6צf X8Z.Fr$!8FY7㞃tOP&Ks㣫|́U6 u ŭ[+ ye|et\ڝg ᓧ^ -,B,*响WA܁վa3׀>NqARB߳JsI"ə="8\`\?OM.Csx߹]mPµ`Ib̟A3@ӫꦦU'lٵW O5gDb{s&=]n:WAϹ[u\0kV1ӘSl#q>;pVg]([>Ifv ^ vݔ#gɏ̟%2I4sc if NU?>7UZS\P?oGZ)1E$EU9j& 'W 9z`S ׺SE+cfHbhU)X{hi7oEV4N_Ȯ8ͤ!Ն0,]e S, o|ϖ@57R ݴ/63TM$? Yܤi,ĩ"wb}茶ɱPOĽTtNXaO<ǘFCyi$.ю9ڟ#]OH8,׍-}4Έ \e"婮Au#_bM9P[5f4幵ۮʶ.t-Yh oJIHw 4ಫed1ɿBq;DUˮSZ <.W-%ʃO`K=,e}@}u&)P'1[t)^[>?x? *΁XDUQSLRbӽd F430M <kvsT@$)' gvEz>%F8 NA]V=/T셹b!'T撁v7ch zOms 0vɒ]V0Q=EluaN|`ĆUbrr|ď޵ps0w+(w #k&~ eJYf>_:/R&Xb?g)l99EVΔC7#{SIh+\u%D|lyd\J|X Pȑ,JI*;!;BPBm916cϤ?,h ,9#*qNxmR8wo/BZW? w_L-mUp'Ivy6ϫ;ɮ8b !Asr7~zJ&$UqG,` ă՚BZ$"qkc?&o+ЃDGqW-ReXUtqKTr(H/^5´(.dRpJ]2 Wπ5?7޻T}Fo=g~M !{s{$b w+pdϢ'Q 违,&Pq x3NRͪoMdfvâ rq+>$O<):8r4@:9/<{&l8鮴R8c$F2;LĻO_P:P+؍ӀgQ%xe( pkw)mSѝ!{"`X"0Tj_#rTMT7 gH\e15* }(d嵟^BGK@tއ1۝>B IH 3Ӡ:no* d'Jlݬh2$͢1ѻmeIe8_ ndi!xU`7ehoj9Uԁx A>Idշ$G Bn:WzJ۟sfO3[H A-ą̅?P`,}yltW4Mltb`^?UБTY3rWb 4xh5Oo q 7YKKpi(3QO0m'6QBpoXWtlx Ӌ$M cY9ak<6#fu  f]RI5rkKAwfr!u NQnذ}vҋGN||#BP*MOs8XnW]H%5L" #@yts Po r)6< ゕ8Wӽn/ϽT&d^+A/6+۝;ΌDfH10m<*._9Hl8U=Ya@+Ϻuz!)0aQܱ0Y˒3qќM75"^M!iݺa^hh,F|>j0 KPdQKZr])Z5֜KA r`ϛ?_kшI6K0cnn>LL;r$|.m Bg8*x>0#joT{ >7e6 2755ַ` ZIs> P0 ɼvYM_ $ǘE1q{ P˂H*KCFM)XPTۿcOǵ5*؂G^Bx2E-x%uÔ?MV{{Y dعԀ3Bף(cWuܹ(֌~nZ(Op}?/i^>$þauSJX9sz>8^[K|G{TV#PFnHqManek5~O{ yRWd31<̏ajQP'S%BnLpnR) ~)W Z\mq}Bb!/ -~_f IcǐK)cѦ^'k~[ꦌĈ弗@Ψ|+)ZaVXeu-bћr|KekKKSyp^näq>ޠDZӳ[099k*: ;fl&Cŕ!Fx: `2JB6<cK$2)3Ҙ;)m1jS867ςžӻ!G x fvHyqD_RjعHi,裕bW0y(Jvy2> ^ U+1曐%0tl\\UQXb@^8l0a>u`8T_R{b#o"5~= J=1?bBbID1/ "<0l)B/Sz[Q"}<94hc7~jZWϯbx8‚IzJ .]?|z#^!j+:@*N>};!E R8嘉2yRh ,jJ8|-/pG<H5!i بfDh6ۍ ]A>Yyڙkq">QM}$}c mg*,9Ծ\S,B] A:YXM$3mo6H# S?k[LUa<0Kq8@ӿǞy0uNzZAX&}rv T+L p| OpYwl\#Hca2 ,?Ү&w]yU>r:R4S幚B*]Iy^!M)+fuj'SrRc eulޔ@Γ؜Fx*,({7HM#vCgKҍ d),Лt5M)巄jO ,8|pK^yò:ڐrij(n Д;2rhEɟdܗd+<@;|.bWdV]츀׿19oboxi҄.WR՞eu5S^ j彝8鵕7'm֚Bx *ޙCvf#^a},uhLHM˟Ӹm4%73T v %6c+賏H ͯ׬Z9D}H_pN~&*bOdGye%syG-BLTN=In*oX~BX}\h[XK>퐖>ig^ͣQvM/ }) *t\ ob pgY̶g CRgriZr*eEeGE>挳0a !h(#4WF=JGU.̳VPoc^% ^ޙZƄ4,\. @a#Eo^[)Z5kJmT̫]61greaGyk105~GPfkWA]pX-=59@2nbn&f@dP Z}lӜDx gFLh: 8-AMBP1$BTx-E砚iYHoy 7D<Rp t{ЂYbuÄ~JnR7ܗqCFa׊幕@[A6QPݡ;A*x`!fzW n(k$mvxwyWz֎Ok}:Y{WS`0=`J] "PJË$|h#?vK~]^D#DYsHs׼[rA:q[ҳ&s~-MqF.Rb>ntsܐ' H0q@R)`L& ~11OdfSG4v{x,y g% yMF8lDX5hp w+Q|ƊX* Ya Ϡ~zS-~=1ߒ܄HEFC0IeWɬr-ɍgU AʥEt 3KŶŠzB^"*ٯl휵V~$4'bb?6$K?1LU+B85  k$>Ǡp/~ F< o趁Q1"$:s9SWT+]k&9&$?E B‹O|jNG4{yD/9$|%\=Ln{jf ̄Ouz7z1ɉckЃ͠n[+ e_D7V9rŒ+ Yjⴉ,Y1[.1֞3P<2Zz ӫiWw2EtԣXs ?y/2(Rn%;9˗f b1K?WbcѪ0\$xգfvh $ G|c(~el7Z> ?M[4;qEf`/'"euT~*h :*r$%rM;cK S*z>9\H.W\. wk*3T0 gT́v;2!]lI=  4gցt>`SYƭD2^.;u<~Yx#: NE—"~8StYW7sѨoR *vu ~m#īw46#¿ kkn^ &Iw{h$ʪ F>nM#/C"K͸~+s4`\(Վ}Pܴ~$.2Zd>2#@ )8gā3X^<}lPVB&\aW}"ӑ,,tw(  B^'^Q7v܅pa??w_ Kt2FWi7tq%%kL w^;C>mhCt[ғkS+G ?+@Eg CxDt>pѤ%/:Eb@ Dwka(djsEBzK;)FX'~Ml#g/xqL-~ R5YK:S-q˻1#;>OYt0kt“~T2Ck1畃}1ʀh)؝R(,v E_IȍóBU5.*mՐV(f0\ ̗Oĕ21: [ӯ3HE Gzr%C{~ SmaCGn=W\(dyzh7s^̸@{ [p<)cG:d'U_E)3wc ~6(oGd][>H,Q:N,Г(?|U 4n/HKwz)23gGM]ıRc包}Y{LZ.^[L<TٴCH~s`z'8o,d"r"՝"RƻuSh׹Āy+¦mwv(1 Jkj2:wklbIJ N6$0SZbDqΙϤ⮋[BxþLC:<#怆ɲ] \ݪཥ]\Yob}uS@kΣ5ac+ܥZ/kCu:C6:"f/MI ͱodN36b3e>HEiEsB8UU6-*xmOW!;U0~&vͮnAF$@E)*k7S Sp ]v!PgnɯI #f֢P"?4"px_3Q5-5*Ç;E4jADp'\gݻ_IWǵ@iS[#+~<N5_ZLYi77z1{Jg6Om ܿiv͇Sh~,0+5SSp@2~̘:_6B.[ K8@.> }=g.~q 5ņlxJxNd0Kkt55U @։ܸ6 e&|Mft$3񯒭).D{V uVMLe볚>U.WY|uxT8"2{9-~:=GX<[7E :5Oz t\%A<2ELfg((x6+Ţ }\%tD?n`oR[mbxbgVH \V'WM횕 WWp P~[eծ5Qnu̮c*ᾦ, I.: [.kFs5 KW%8RrQpݻޑMOji2Ðeo>ࢽu&I.i K4_3f+k4ODvESU{ɰMI.2XK /7 >o]$vwkqD.UYKАH.$8?_AFeav΢ٚL,ȅKRG"Gr0M+2|d|18 y<= =Cs9z''HD#A?⏙9I(#/T&%RЦ^r `JLW}Tś YjJ/ 0Jп0}gA7&Nx.\٪5Upb~5z MӭXr+vZ&!upƁ#yfDێElѱypPjjHM.d%spQw,߅\SBV F"w7).+ҾzcωZ0 #x4=7VOtCI`\Q7D\{&^Ro%_zx#YW=]ra wzgo!3mun!,^ҴR*:CQM֭{3bYg_ZV3,E%l86\Vh3xΝwӚ7*! Lg]h Ήuezjy>= WSעkT v *n.lF&¥zN:&Mg@[~&ӭ@|Yq=`&"׫m4ZGVDz**{$͉|k >/l gEfuFMY)sX$aaRM#2QMB5R!Ȁ%\r|:hj=x 6~[N6P8Uw K,Asb# }9%uSwmBg %& 9OX7h0qA_gE3{$g_]>7y_ ~rBuľKhEF.>7 I?6Xsi3 QR&6%W:$Ql^L_{'\*S@Ls (.}%܇Xc#F-|MtfP\06dW$j1HJ&Re {=L/ a] [FA"sޘGj$R1EjLt7C[ ySVvA؇1[$=ȼ9p;ٶ'FG^W s xz͏B:_eΫ 2ԛ0/jCJDHUjK(3gng1cm )gn+a9SX-E4nM''To7lˇo:Ԑtq17M6CY"&"ֱ 5/3N43UmJ(eR^M%gX I9!bcHKJ%WItG/}'İrw;;}ܝ"e gt?V)ኼT{ڡ Bҿ¾ 4}a$|ls]Ovw>n +ܮXl,.$w֪U2& q+x%3pgVi-^9l<5lX .T͝}bWnxrUZajXL~@Ti/oM1;BFv<h 7cPǶa1MC O$O4b:L}J'  .ykc+4;3 ^kmJ( 6=FjmwҠj =Wt|xjobtzÔis}OC ,SWӶŷh\dlxٳ,r ݚʴ7 ؤ[^h.?O.P:I=Fs5Re,Xw|kRb 7>0B\T}GyҬ/a }0S鴪iíT^ʆSP1q>J%*Uk_3\&6 tY:`wp26YP_U銽MIN|s]ZЪ0!@j&ycfH.$,` To2Eczdx &Po[wpNTwWԀPV|V }K#oټħ{!Pi(%U f6΃% Ћ{1T=볉y%x?`Pe"- "[pEAYr*q΃ hƄ\>KJw:=3xjb2<0ޑMY ݅(lкGgё,Yf-ʒ)ʌ Fd9%dX<OLjhh+KNr߷nN38uVA߅cM^ʘZ{X4qgW9ض^B_XXvyq8G(Κ9W۶0-G)5c"헾 y!0E;Ӝm+r2|e:݈/`4 NH ^jYZ?Ub]w?4b 2MV.1.2\-~7 *F3 cђy@mFrG!6sF}CFB;X`{GOTRBlp;Q$%l!_W#F^)ƖU <4SHZkX!T%dKiadD(cN}tCüǚ~R[ۯ4g㋜H2Ci>vzfmVz p5tdб)'Mѹt! !RFi?iyE<](d\!y/Rj;'g$IbAu"VG`P@5iH9C^gf#EBna,d̾NF.je!_=:&&Qݪy@lb;z*$O]Q "TPS9ĜOrnj+9y 9fc>?SC 0ur˥FZAvZ"=m P,uU1bL֥+[M_yl7A>S܌]6f[l9P>PGdRy A$x7!%BAU{:_#o H>yW"x4^/sh -+$+TIF⸅ѧ||V-=Zjnת/|FL;BysB9:Oם2$@ďϦ"ɩ\!k$?"; e} SS^ds3og+8L 2[~'u딓֔04\#ށQE`ulۧC2vCm8:^fF{HZ%]>rL±Nq~,*f=ݡ'y.R0qX@?~b/IҮ*]5%@i'Ŝy,A7lB +Z6ϠZT%>~'7W1y@xM"Dtv1zmP4<$).Vq:vW }q#)5$xMQPc|l|'-pfk?>.p#A h&:b}wiهH$f%9 Zk[4ߩ\ǍĢԱ :lru]+`ҷ\pWǓ1}?zh+K+:e1XixTۍȌLO'9ң&_X7jC!*;9չny8N(q hdOOv}#2߽f MIhuL66IKe{eE X &[lws;֊` F%xE,瘧u! ;mwm9-&~z.}sd$l0.^2nx!>F$2t쑻d/qZu pK޵ҙ9fA9ט8#8Q2X* qn#>865ٿeJexO sJ;qlQZ~1p R"o.6֋[JcX=/óD4ɼ>a KۦВ ?Lڞ ie* Fݪ*Ezîl_;7? N0EQTGCsc(A6ژ{!љH's)7@ զ^j(57{l(+ aWk/{BLϦdV#Om4aR|q~sLdH 5Z7잻CRF[ aͽ%n۬6ڑG$Ρ,y1F;Ch^Nmk2tF9q'i݁R"3JJDcd NyO}w~rB]'hܜ:`WBpLZ mw4"@"c~y') |`ܠib/ь.=u}kʼ/Q|gXu$Hs~w}70m:+kӲ:*]s瞑VMZbR;Roq_"XlCO/3ۇW :!&* Z@"( ]/϶p#u}"+!] _|TZ%d6i>!׌͖óL}=lC @r|X?Sj1s5WIy>#/AmQ?4vŠd,]5Gggssx ,Sb~u=[\7!k6YSUl^$i^9/ɾgN*[S1d_X%ٹTG5`9iuuEB.ٛ:)q| SZaI[-\,GmחoN35,cq>VKyaZb0^!UL][bwm79V wE*WlM8 良׺p;dMɰ״H}u&4xMy`ouhbL$^-YMOE~{(. +䯐^ƀR 2^hs_-n>HBT+z qvY; WR%PxhaWdM뻉ʏB!@>IM>_}oUTlFMNCo"%ڮERV*B f4xuAq_ [:\?;/}RaЌG4t --1DAXP YaPt> 8N \ tc,ֻMo,+?/8?`򅛋JL7 =u,undkJLUq)U = Bz# pzK1 H7S^  *4p8Æ/D̐w(TC89K zG=g{K"[)x}\<v1j Hbg?z{?2HˏQDrA'Q6E#GHTN;+}bE!9xBO4VRLۏN'\ywOGm2}Duus3 48򔉘= 'YlsB K`{Κ8:NCbBt C=4CT'U}|4vT}Rᯃ~ z FC~L{mi9En(E(f_Q 4jgoS0f7lG0MqOݒ0[^E5Ĝg"ULN,P;ҭ{8]ws?$Z<V|nEh!w콜~aQq(Q  ϦnT\[΃Ug3q~-\A-~5ũ4qX O X^y7dj~?xN@0VD5Fdx!q8=tcnd^~ܾߜM)UsuGgΏ| 3z\W;뛑 b-yrШ"<|YKqG/b1Mw\g_9%'uK *dGԱ;4i 6ynl¨e7DegxP^9㘦UReMPCܰaV-09K}F%i,,@(N$.*\ZymqU7nfE VViE-m^0.Eϣ@9(:V,;Q\NnH˵%WLݔޒʢA$r9'fHfA'Yg6>4T3g-aKmQfh<q{kr/\jppCM M2+~ 7_~. S,ȂJcjY6;I>4+E71,KMkw!GP,y+AZ$Qc8CNk7B|- J[0JWUw7U_J9-{-9FLeq')8lٌGj)Y֯yO-?h\fLI(wbTY#ĩdct:X]C2/;8S'eRh۽coM%[;2^A _녉<~:[V'>YRzQ.QE-GI}$䆃 ߿g|0d kڌ~r]*62ΰ EP _-J/dW^ )QpXƏ΋J! r٤6t9m fh@LC.]$㗄gSDtx1p!| 9 F/9׷չ[.XU Æ{ <[>xܑ'6IUF  :ͶGU;=nD5R;9W:5 kI ˳*&o՛+vǸK 4çLe5Wlw>@$.?5ОfnQwj(sK#i-U~IG!^,{-^Ch٥j&u_fFe&~>JR)6.a4¤%ԉ†)c\*KBS`6-tc^sIMBT:ϭ:f2~8N^w&`lND"}Y;Z#f/t0d坘wAiGjYEW'<}Q8YXǁĖa%GyrO!?u׷xX̊+ F <pn g5{|ddܨ,[=1@׾R$G&ˏUbz5P@Hf^ IHTFٚ^ڜ%ǔ̴ s]g1~v_kbt'~ib@ՉL"9|L5+p _1Ĝ4{Le_m{5/ZJ_J^8QMS0xJ3Z!Ev)Z˾H'WލXcE8,jj_nJX3fHɜg6*t:Ӱ@nbll`U)y!̼AGs7Vܠ( w þ@Ɨ|11Ğgp\"ɢ4~&<bKǖ@ib{w:0cjR-UW]NB'&FMfz5CS\Uv`xΉZKb/'q[;R!94El%0p`KT2LDV5 v)i/oWb])%g)WN22TvF_/*%-=[\"-a{Hh h̭g[+up$ #+Dnڟ6qhha$Z,e'R^ǐ M #1 )F3ɽ9I8Eu|lf#z$o)* v6X\\iƕ0t '! uM 4>ohy&yfi O5%Tn7+;3ZZVX6t Rrw?,fuRl*K"Fm(A{{ =ה]F?VTJbj&(~I38:zXnY*RžXʰHA?!ŷXSPj=JT :ktfXzzOj ]ҏ>zZp)qu8.<"OF.,L?p/$mi pL_?ɣ)|\ǡ35}qw[VQ qJFU& 6gP'/LJse^w #N Ì9&ؽVD3fC{5/z SG6o%Z>wYA6Mol {;뽎js8\fgH3rHlK gAj0t6b؉1<5p! 2T "tjp)ΔWt{ɏ .@etWٟ;I! $E%q!p@ ljm0cv>\C`DCZ.9CX] zSJcTgA_;+U; r뜫F۷ L C^tA4SBA>j+IY"6hLZT(3kBS1gnm1ǼJY Y}Ԓ;* MÉ Jcm`ɳWz Vp!E!| ˄抲q,DXVׂI-=uTnbE\4tH%9LYT`NntUfD-}fl#Xu&V=|ܠ@;THnk4Z0q;@wbhQlqw6a-&f@_$[)5-zK:;zˠe;R~T |\Q"[)O9<%j&&Gq+O` Ϛ]*;<')p}٧o@y~nҧ׵M #6{A=x9wtx}ڊŴb}ŨUd+56}_8u-x Pkdl""\{\)VO7tFA0{qz"8l:vD iW퐞XK@PixogPӬ3'm~hnǫ{&w]AgHԟL?rv~(ǫ *iL=]uIMmrK a/g 0h:Q߀7!!~CbjRU1MwLp#T@R2a:DH@I`#lmI˨/SNſ1֫6;;sx5ojuyYjͨU`Y)O&[67Ί4 ӡKL0Yrc[u"A)2l6@]P?YE%6_\~5V>*BBp'qAl!U`lT$,좫>4 $sY')v0>OlܼoYkj]eh2$>do؟w[sf*0Xɢ$>H'icb5 hbZ(MM:S4ZNe߇{~GRSwk6fFXPہ")aԙzg9[yDn .`]4 UՈ`ϓ @]aQ4&' ЇJ5xQ~D,U@YpP t~%*i;ϹY( f -p;i>~p^'V #i N.eOi 7>Nؐ5ʽ_1lo> 3:*!+o rPq+u>^6OUah*=³?ƽ{BI14Z؉K|^nͱ{Q3_ ?slǑL[*Sz_(@]N䰜 KrDžڞESngHsqFǑu|(_:$&$JQtA8q,"iI&C⃁,N>;yEBB@A!CVϔ ni Ўy?_6۲+9QZBhbv8e=ϲx$E*wu):W1~ ,{&P:(pֵMG M 褨λMǔ 6҇͞Lo@n sup HuR.m| \n )+a;+8 TZ7@uEr ?'m堞:p+0^UR樨/BQw(n0Ή ;r̫y$zߐyh$3F^_C:eEA0ErQPW) 1ʦ1![̧2ќTG DrIp辀)LqIB#Tj#'E;uEe-/%6RnyRA/KqnžizK]aDPZwOZ,/M2=([> |]UaUL< &N)<|U:aci:@H? H밨iׄ2#5di|dGR +$d]>$!{^{{?VzFշ>Lv XcFv{Àq48r'ZBS& 0gcK?0Ez.̜on }ٴؙ WfXcA^gj8P&%=F'iUX6$JB"DQ=%9\=n,;.݃FHyz`YrYu;fDLu=r FINs>b$)lB.2K2ubcc;2zqP :9f G?Cuy.dDIBwF27ZLk0Ȼe36w&9fom?bcIIWvXF{=D坸hvV+ @g=%l' bV pbv 9$m5O(J:pk /X(8-_D_ֶ݃I#ʷp۶̽j3bĢ+Xh_CnyWgɿQz#5ր+p: 9}ɩvkFqdıFbA.ң;SD#ose^_' ʡh켴=s{@FiNBOi1\Sd,mܬr,65.uT% âddbwIrun%OɖrtymreAN#Cz2j>':7ۃ̍ͭ?I3 {s-F97!BS iպ967ŠWn!4Am& u> 0dVmy̠˧+a 7z߭%mDJ/EtpX%Vp" ._ ӧᘺ[T B駠 Ю-qz9PhU|9D)]Ռ=FuV-H F#RV,htrYBgubƨY'JyX,EUF#7H}YnW1uہ3pH2SDȲ]~~SNOz*Rw);R#?֧xwDv8_2"Z|Ts4YQoy]\^#UxS$F!p\6۟LrxS5g]m/pzP9?"Uriӝ}G+~XuyK[{M2"KUO 2~+]~:B _乭Bt :wCn:݊&Ƭ|Ѭt\ZKرUxW$%ջ){ɪDcv}|ئ%i\D;8o 11]:=$PnPy\zs[(U;z-+c.ɢ& {6&Bhbfh1:s}$P:ǿL?hVEsW%$-%8M&b;`p{c5\ԇ=Eaࡻ+9V2o>f(Vk$ |fb2p?&n HB%67BKXU_q5y(h}ŒB-B)\j T6hb[j9a=imjгNLMQ rXS6)߂3>w!۹*d=4V-@1\Ko,M)j!FPu˯@X' R CƜ D_dU鍺@z#dW2c$kҰ45 zW9|vLq:ר^tt`[;b=v"axǫRq^%E`NUH]X+n`ن܏s؆9 ji3>2ZW(T/r_Hw֦;g{ hOZ!y"I)& xw_gaiBd.g-jʰN@./f]}I" Cnu[gw5$KVf!#AK`:$ajQt a+@D#ח^UF/Ğ"ERڂNQ&) yQ>ZGXWiTaM7#EsG"C%~&0f\5A2l8B-"ЧR{ʘa%هh⡐}Sc}'f5uEӟ츉21(|LOO;3\,> ԣteL4=O1׃?Ҷ8_L  t)c6~Y12[Vb7%,\!2;IY< FwNJ꒓ϕsaWnn̒E1RˆJ[P̋3Es ,ؓT>N ɼmZ`ضV`/J'Z 3G#lh1{A2F 58Eep [xꯆ2k07dGD+!*nsi>hSY,ѱV.($9֥`ŗI1㤰m QVrM1ܖGh1efY]=u"?w|\&FI5#ɮ3K忱_ ќ6GcB$ftH} 5TZ.y įMclFcoEb7{5],fΉ{ͤw:&~F<Y^MJ0B'Ųg *{[^Śz$Dx4!U}UwNw[8L68Yn<? ik5% +8/h\0iXZdhP:L5u+Y9NM~ͨ"mg;tUkʐlHQKp$+Qm F S꾒T4t Q=5G-_}(uBoU-'m;H:KV31 2 MxU)|F2OnoDep3ߥU7. 8䜸vIP32=W]h%B}X~x;wB1Gk׍f(!e(P3t"'ۭdVׁ@YŇ>NTuiZ[˚G1v<_k&ӘZs p6f] pEE҇P:5<#dƬs m[>vFY0<,uiДJpwӂ3WnzOhx.޶.UTnO-X svňe+q=5ezц_ 4ܮoDӹq4Jxюچw;WjT՟u8OF \;, VT t?}ѯl~m\'h2Mk\4 !_MнKɥа~XޢKlz<1U>e4Sze?S / xzdÖG=ֽX&ˣTݜjȻTՙK տb~=!G+灛V~{ Hso>K>i2.OmˆqEv_aǩ_dh=",ik.&0pЍO=];w܃SDk8⹬KL93mF,-9S w)Љ%63wE҅O (6Wi\m,{~*+*sIo`X7a1ǫAweF6<,}ݥ{=T>[iFMzx7靝Az_o9 ]3EX]5¼v|B [X^S5eZcnzi7l5lEg9_K>VىDLL9x![Wv$4ϓ,_nQ>6jl-CV-ϐ'JrUɵŠxQgD#.5ۡu8O GBkuӔ :j<|tgԺwpBrDPQdϩr&-lh;U('K\^}a(K(FDa9ļuoctBr&B2') =x$jl]wBPon/yBT;߆B ? yEdʲw P9I$ x@>&F3+&2-*f[VFY `ip3,TM?h+pivF!sd 6X h{D`V?e,drnz[HDT3仍^vzVxd^\ϟ%$x-;ئn*!vWh'~E_tcco5DqEnU^Y6נq KP@1wrѳƆ]<'TNUo=I}#,|wH 5N0M.EG0<Ȱ}e;SZ͔;0Z@ί""XG֊6OHe' לE1ЦTVĠ2X"h~ V/!ˆ<4];1-GԐsW*eAeZti/q%H~K&ǰ'|U)A[0/Y*sX\]6 bkrM]zZ8,VyDHz&I'S8fU9 -Owk;63>(6NZjKqú1OkF2d0]1A1 D^1ן2oޢl̤|%WZZ 78]%z{j(rK\. y) On߲2x9~J`V>R3peJJ )L>f b[s4C$w[F);ƬQԔT5SB7 J05ws&_D%d|j lǿ]*/N>R{]ܺ,Ru>ڴuAMrB^܉BnlչR^{!"BOe=u0b_-_DK"pE?LOLS@9-J7⟿= @ӯ Ѿ/ ÝΗ=@x#[= X.b/./S &cɃ(DM˞'%eb ye8~(SuD(m3ʞU He_K&hjyOg7/Zʔ=+WݒS$9-T&E]&PaHÖ]νcN5E78,vtTzˤ7<[H5C^/O1uy +mGE}_.EOw@u oJT8tC?ݞ" bZ~,*4/XG) [7D#fLdzh"F$7G#_}z&+ 縋!ps=jw`0 =GF)N[ S5u_m!H H7EwAS~bPr'yI߉f_L5/H'๒{rkJno 뎀%XmG>k- .Bm4\LqKc¸4iyW6_rQ2H|wXךhR&K}> nCaf3ñG$`83.C ڷE7*U5-Vrl9txXR`dTwH:ʟ'M ':7@k0Qw?Kes7?oyw<]=՞TB'W4Цd$Z'YNF&71ǣHUl3] A:qx}|ѕ<2R-c8uT2a:DYXAۄj>AC< E`+>nV!4X'O!q7⋾Z~!n&|+?Hp*sI0sDaβ1z;&xMK/TEd64s8οQW/xcg.E٬ olU֭˨ۊKNZ14nYcedMCM5ϛJppg^z]R7 cH%HZba\x;>*8Q 9FA&1x(InDsvߡk uh 4 rSe& >X)^pdxJx#-_ 27z1U + EUY"qM4=E;w*NcatRTzRHdrtdT\MݰꚔ4 ]yCNZoIz;d&+UGN󶻒$3rBjGa&?j[zKeMDFu)k<: ɂ.#/)9 jM?鲕 Ӛ`e=/9?`Ҫ9S8هqŷ[|x.2)٤-R(d28MHD@(6|pcǃ݅o71.?d&Z~ g\)>-Ap֨z( SG*d /ݳ=VcThK0@!Y@"3ld!òe'.Ǖ_b@el*MG^&r1D"]>D>\U^f!nXWhyzLyjȕut03y:Ru"x)Ys^kL-S  6s=7>ܫIrAG_H29O=ll#J1Hh {K8N6UuH#\qHWDz(2dXh CSFuf) R#@+Wr4P)wPk*D{9ӵ=G /Y`//RɚXQ4ʖY$USz9Pl$9 Ո2iIRJ8]<. wJt/ȉU:#~O"G+NJ-(7 pG .wQuR *S9_}&@Q;Y؞k|}|uv@!!CPx/3'b۱`z]GpBC˦ q}77QG=i`uO7̭j ⇋.,{ֿy8l"v 9 v7Wo2{PXagvӧ)6eylQڱ3[2N;RKػucLAعa+_5ìmd`_:RЯ 5 {p#7 g |Ѷ0ug I ͵уyʙU'_Uu4 dX$(rOis2mDzٯ3ށus.p` @g*ˊ (қώʴdo4$K⋻vʗjoNGCx}Qov7lq$g BZ{ P@rMeԒ("zPc{`7l5| 4;cMwbǁp.b1#K:!Xyc@YGV˨ղI"Oy=`S94);υb%I 3nSUef9şrU}[q`Zȍ$Xk]XƉjx11\oiL\}5&myֽs`y&IybRw@4:lr,W<օ?~]Q%mYNO#5zdp|Q'CGɴ'cRlo(ԝ @'geb^SqMѡt'2 \[_ab"Xټ켋7%x"%WC}OWN+J,?'< Z3<x{f:FC7z*ĶÉ}bZyd5،йRCAC+ܬES~ğ_r%'P}3'ÈY킆{S"B4ݎ *EE|f--H֡]`(]"aM)ҒHA}{24R3-L%3Cxg$2mqGWMB*ZA#옞Err^8)PPh[Brc>]IkPê' M)Ap 잙2x^Q[4,QDX|Cp!IZ`}3S)?@< :KXcen7N}WuoRY@91 \~[况ϋC@~| .k>5bQBjsF*xx]%QJ}ܗ/O }e5:)׊UL#~:ٻnXaعI p:*#d4miKDͫǡ&k zoҬ:AWz~b_Q%Wb v"oH$r6Yy8ɗ<'l1 {Y&]ӻhB;~IF tk d˹)gfZ: Ntz긬DKb!<06P::Jo`[ƨkB2hWt@;>O_lG{&3xEP@5BԟL?%7R<: 6u)lIʅ#~6sj5a++LVCY`ح SZ,xHA]vU93e>ap6h2p"g1dIA{dwh2cjոPJoz*6xyCf<'Fg7f@M32.N$޳Xwt Z29(E nf6щxPRM%ο9Kc=2m6˞?>QaTT[ E 3=q߱6>@ci߰ ~~#q"^^ NKFE]gc,If͐Ś:W:IWw&MR3(vge+TDhS+# ̀l.N5+. Fv i:'{|%mqw*7ܧ59k2LN^໘ k i[>06(1Ɵ٠|R격ovNS )s"שi XIq[ .kD˴Y)3f5CA{4Ono1H!pc,[D^6|TnŊ3=J.@&3O/` ʒ#Oѝf8K}lH;] ,.2i0d^qnrme뢍 P -P?,Xo2E.p'MpFI5'h26Ǜ3EC8-̮ pa#дJj47Myjh\\a]%Ce %Seei=ձԞ7*}<$Ue ڔpWww;mjR~-.aifl S59lP7ڒQԟqZ`7`L N >X8u3ZĚ,m\9h5X[y;|w&f~H#J휔sG-n =EC,[mEH"昝n^aB,L>@&FkK/ެb-=?^A)m/yy4CwbN9*cHL&$=Έ m'UIj] PYQ̻EUF[K'/_oJWK/h/|G%&>osfb߼hb|'i0;׷=͘naqJ_mf$tkp<?#>~f~6+o}JܫӼ>^C~>}EEՒJ%t؆D|}W/,sl0> r돰cRS^f%ѧ0y8hE=gBl$yJg{Ψk)%PHGGV;cgh-p0Ֆ'qTB4V(3JO͈ s/C=Ju32ꄯYKeaO"}[[3`\p0t&6MI㨐,ϛ~MjJ․MF{兓%8%|_z57Xץ$mK^[#}:41/HSlh &jNS9A'WawYT1:̭;e;xg$?V !7جuTX M͟VY5t]"5X)aM찍X瓗AN^sw_k +L '&21e+U1qTzeMN5 #X5qH=f/mbF25߄pB@+ ./Q$nou&ŸyvN[{A8I ,5RWj_'~|I5Gс 'kswXLSpH>NbodE}>wѴި;@?!oi<@ A>`z>*1[( 鱜yFyA "Z0,쮏 !~bj.F]E -xؽE_Eu IsJJhh\Mp fedE2:iVS:sm4t1 `PsSr',J*7wchJM]wGsF/"J,Pk^T4Q 5:-{c3߼ehycui}14^ͪ;W[vW~YZ1*M={4lO#BcU_<9Yn|{D~kǓp d62cf)X]0ьsT8-IRHQJp*PZ~QX?#~xg׫S д50ܑ,s(gטE(a1HoQ蒃F{4fJ]!.uTد;:%̲fS;5ַMֆk#6UhՖVR_Zm㏝_ B6Ö]*pkmBa|X\_ʓc&Rކi!E{mwN?QnIp"7q򣫜-I܃]&唺/Y%Wj lxve[ԭƩﯜ/ l8 ޾6 ud:z`dҨAXڮG{V53pA']Fec՚"i;̆ч+ɠLdɗQ`RN,PD(nW냂9 x[Xyi}<[q1w}@\ Aˑ$6ΡuMI;תL' Bƈ*Z<合3Ð-q@PcѾ#C$)_\YQ"ٳdBF Lw%2z.ԋVl(4; QIB!XWnu'@ hJN_=)4}qz>A%5*۟r#/bor2Pd\9M"Ni#Z8..#hkd"<+n޾p^=|T9(ɻ;laՆta_ɝ@@[dOAtҾ^G7/.cey87''wVH-MZ"\\3,8-$L=u{n.F83($j|[i8(`AƔ]Eڇ>EFS}-RyyU8n_m$CvLٺ&&C1%zH*I1_@;k[/lFǚg%XlHsNWp'ߺ=x. m?.g\~_J9G;M?!ח 'LfYeX+}YN.W όَf:eܘ8 媄%ʔW-9Lԛ/ _K^`3#دWШodhoޝT0r#p\6E>.c-nRf}8Pdnu% r双Llxk8@qّu~*p mHU QtBܧsKm!E{w.Hv-_]zgu{z eY;63h8]!}o_;SjVWYruIl$cqzA<`?Iu&XtO$Y&{pӅ]UΜ8ǖy7va:y#t3@ۮ' y+n9@HVA*ߢt! F4M.QR5)gjsRZҙ'~Q9uG04j)n-ݸveR@̸ &?1YņV+۳`x[0rӊeXu&50HJ`2W(%<Ijv8:wW|e RSn嗡H(cu!nS Cr(3},b济%gɡo*L_yU?/[j]୒ՐGT'X_v X;M +T xJ QDHv>r1*m>b^$u?.w;?Q΅O:bb!SC4ZCVvێY6Ir$ԇ!DӞLu%SqꏇR>?_m0<120[xdm8s+MSWCDc:PCt2djS\nfFUN Bp~ޥ7T'{Y]lMcs `4li6ꯦFiMdM Z.-y4>F2e+ wOMg5@?y<~쿀]ՙgطr"CsI騉Z )B}&x7xs}իx抨Ŗ{]Ux']||(7J`eO"mWcZFV)䣈i"-w'aKi[3]dЃq7^à=MaRQ,bdk'.O4e*KVٗhk vHQzF6qcթ%mp\+r?t ̕">>I=J=+# GFHݩ C ;?dأa{2:c?f$_$xf9҅L앪MSPou(|hzSiP !iy<گ2!mjWHnbXfnP>Шwx,ZPGW#. JISXiN7Yy4& ~?*.\\HqWATO)lD} wW﴿ 7}& 3(EzB ©YFnAPsbosH+:\/!b+;kBTʌ٬L^ъN ɇ.7Bq_5F)c"7FW)[Lc?Z` {wl>pc+!(&$4G}#XnMU( 8)c[ =D޿ր}D!qqWt9:00DVg sAnف|Ԕ&]]YyלO?u=9oP:fclC`瑔O M%jM̄G r:9a5ِ=DtGɇ 7w0+}{Q#--> K,,22 ڻ=5A(̏?M :+VA[?Z=Š91).*&2^\Cb-@_߽kXM2H`HZ `ϐ9:W0\O+i,_8κaţIj£U-]WFq]oݍ,X-{ M b%BͳkwEJgCX dBmVnC™(I ۫2i盫:82,z!$-h$O Wr}\纖+8ĽE%(AGe ީ:O=mH0K$:)hsR` jsᾑWc?qBMu"rji3f৾YT*%ih| ru,"߻T  ]s߂z.v$H(WS)s7v7MђRx" f4X@ꭩ&f a0+yܒ%Z̹sR@CNÍfs_wTc?{m"YSHʽ#@68~5Ȼ }eo~4:lZ͔/T;ox1=2 Y4֬T25}2O^DëHx9-ox>jzF;o?7 Q ٝ"e7ޱ4$AxU(~zNvePg/mԷ3W:pTYNbAGO$FwTZoN1&0j AS' |I#c?PV=-~g2o"w]&63ڥЕQLD qP@8I㚔T^VF~#}Z^4E?1AK&) (8n T!2"#7Oԍ %ޠ`ԻP>a;g&UY oEF $d5eZ3r`mհT* -EDhM0vnj ouEKL nK^_Dny[Z~}d;Q?M 7ɱ MTJ8w֞ ௸FI4'Wm3g䋲J_ױ$ g. عSkCM+\fz hf3삄32X0\|Ӱ{%73=eɸ]Le=3}* GCC:Ob .>%h%GW[]pLhڂ(&AǨAZ[G.@o@WηvUS3%. `!(O O6`l yp.]^֯C*Yn[OeڅtzJ>k*T{L%"0oL}W%y8]64z*ɫ奄bBNtKjpU{ZgzҜZ.n_yJ`o4i3Y%k*4fc}LE}ፊ@&ܡ /(UG  HPt!S9k]o\&zcҜ?#xRw lᯱͿ 0 ;r!KF<г3{-z= < fFˁrgYTZu°wX& e~X8ӟMҴRJ(;_AB蝑`tźj}.ƁxDCrY%=FiS@tMÒZhMʭ!pD$zJԨ+L9:f( pILN\ PԐ+CTOtRHĦ>ot Ӈ|p|-qiR GyEܬ؁sOWۓ 8t >X198^Eф0/z|5Tmy5wK9@$JǬ;H5-F7y@aK9˺V"%-Cb[ X Ա _TOU,R"kF77s(POZ xp:NWDEZaG5Ð{/Fu0c^9:5 omLd.gFϟߏ:L:@$L*:tBfXF_U}n]ʢk9I~_gM$U1y_Jؔ{H7 \ɤwbX|䭷OUTRÃdv<őb ewnEY^x@X_qOO| 7P?S{(#t/8BZKᵯ 1F/yJt]&~݂7&e\98ćW<%Fx]|1őeZ9oLPh|vIw\&L[e^)>p lDhPZuaU.^^Z҂c^M7oS"wX)W'28Y$XϾ8ş"JҨ] H})^hTS#:M'OWldZ*jʺ&a|<8wڧFjC ½V5~q|a%kTf8Z2s!}3EkIvRKOEg*L " !;ÄB~HF;FU/UgKW uA4KH3P-ɸcm%$5Wo1é%b KA¥_i+:Zw@M,4lJ5r=+kOBϓF?m#;K3n`ƕdRLH&)ؓF3tyLv~hLhZL=z`Ffm-a_6BgidkX\ػt C1 ص*">^}.o:XtByXӁ_L)ۤf(qz&ǩ@sX:-1XWC Uvb"5.I=Or}0 ͢}ܴn|=GoP3o(Lyf wCzsAEʍ=¶x pckXe^_1+4 (i8QcèhUNEFA*ϗaS\[;( oG\^q̷^&)0{찲h)6,WW3-)8$T ܎Jcx[IF%&>Ŵ-װB\VO]`ؒYweAƨJC$S20IglWlj ̛y{6>-k;mr{ KIMvvOƆ0h>oME䄯/)&x(Yjp'jwSjK7q'CH xpJaR:nm@qt'VЭ>O/eԡPQ{@$Bu{S?n];mh*[ aԖ'.c*oWٮyAwdq̖jH!a&nmsug,rTeO1$d}-c:2=IIՍ(]KiuC疽q}ۣy}B/ )d׆ _ē], \(yڈ̫j-9*NãِS]pd\t ӪbTfE5U-޶;:kiRP;Pgm4lC9< -9374ϯq⒑o}z-n//Q}Si^"7p;FKH5ߚZ1УJ= ,Dz(C\{y6sB` ݨD"ŋ9&E^)p:Ye~t Bo!f* 3Ʒ0LjMIR% ц*y_ 1u!6W;V )CÂ-'hav!ԂMEPA3tz y=%?JzA wastfw㸑3 PuCs7 j(QZ,^@U$>+OpCbZ d,M"ۨML]|ͿfUF"9Eq5˙$%Ba&{RpPDzi2XI׫8)0No/LqCAUBqItowځ O>nG)~fmwj.$ٝl1+?O fWD|}웨%K%%X Aʟy;2[+zwr~q261(ֽU>K٪󸒗{~< :K&.up]6`%)hkLlM_qTQKGhi^v8҅Uk\jM@Yy,f]-fՖK_F=TD(ӹ+^q3_Ny)3Ae#yy]bsߋd˜`'*,X:TaX,`1 {/W!+Y˔!i?ЫAIr_kbnX t;uf+N>Sc@aQAਛFV3OH0^+5̷}tI Ll+Ih ?m oRkdb4yF7yaXpbgӹr[y.>%e#'z"1 ]" ؐo+H$1=|܍?}|*83LbTs6LoՀ%Ɵk\*)?ATJFJ?F?20\9b %{I? !ф50^!_܌H`5C46jG[r~W`7]AOVQ>2ɝx2H/v1'Mʂ} -) ҫ8vC'zB038/5C"%* 콐%:F~_7?Xԟ_l*rxGזO;Sܧg\cݰ$_ky3).% XW!F7o0Y!c[Yv)=w.' /ka&azUϙZN 1q<>22C9: )7ʠUCa28|P)_d\b3ba"/$JNsFRѽQ+F$l}zOAK  l`mAk!_a>"Cb϶:JڒE ΢Öw)EXGaҴ5簯%ݨbN ':Oѝc?}8ǖq<;K$jUUnƫ#\]S2P:$,e nn  ,kp!En $_z*+\˖Mvձ`ւ}\+3W?+%O^˪A)/ j(c^1C2t0hY\Pࠒ8wDbTD]{A(c@ncUq e+檓}b9"Mv% =Is#6ejzi +G/.J+<S)`fzPfŇjM~{{/&K@t g;|f@7O=oC-JdO U3[Rе<@(OcQkyuχ@QctcRÇyEpo܅uH/䣪 (I $Q靳jG$Ȩ%bdH yrwD/"|bo8y%w. %t_$-/7jJAigG)b2%+@@b R3q5*ptg}uЀz1~IHHw\1\C2,PBŮ664deWn]LnՠUԪA)8kF*C*dk8x#+jQ/ǾOo Y,6y%s%&Jեn[iHz{p!\H_&u?y&!fZ6W$ZȚ@'=-uH g;4Qp=laZvEJ4tX'j9#x g@ɕ4!<ҩq^ѤREk7PnC; UEgvj8Erͺ2SSu횥whDbV mB~6W}scU!}2WFFe9 aӉz"ۇ+*g C$0ol@QWe~1Vm@D,lf$;WG-Ht%l`R IC:zhO.jسU#Vd(f;kvCY77_AQr\v҅zӄoM#-\!g}dYp|5 EDW$j@*% p2-*Y)7$SNYxyZ%V.bhZ#eP(z_X%JJ1^ܕpbc{@k#H[:C~I(X>Z 1)1*KBOIcU5vk<&զit醔ԄiM4 ڬ?O 7*q u} $ҟU+:Kfi.hŭ]rJe_JLv'W8 7~-.hSz|e$oT)`L ,]G KP-sQNӓ3P y>j{u_!P Ce×5%Ӳ:\v\ȒQcRVfrn7J{QXI򗖷®#Ci6z,m5Nd&dmeyw)>ބHDb}[`܊ Ҡڌ5BN.'TbIeZAH֭@ ߐ'v&4p:2{<||4@$¿QeL|ǚ'bՊ? CrB/vF@N݁S*\fSO< FA)9+kOXa,; _ N-AĔM3bGǗhܱb9d!2ЊG$+k:<o"B]Zd6JD]N8m%,l7?GOvrO8wZDF>*;w{PnM0e" \}Zm큤HT)T ZnMij"(ղ_٦] 0^i-^l_5N4LAm5g'Om'I/Jz !_"zZ_U^[/uM["41S2=!DhWU7G]5:.-E`?W%gx;s j~dY Qh@un =x.B3=d/B azuU E.kS&X%Ϻ+Jf4  ~. Vw|Zw9;VAQt vk1_z1-[aE,ݞҝZpu)%:DM*h\T_ @'qqo;suJ mL5f561Zt4&:-Cj)I8og50@ hZد] :&f~%A%,8 ? x+VGsj-`l|Qq6u# U_Q!ǷfXTz ZcV6}Gz6՜ uK^p_2RaT#qu8|8H֩?/H~Wqxk*MDfuaYqLN kz02=ʊCq}3`fcTMĬasyLaEժ8,Z}fPIקS;ꤖB.gNd+!)z8R{7ݼ&{McW 2/xkQ32JTΕ2qY;í |鞵A6kqrN0|/'؁ O2mzH>VRwϨ̌IJolrupV4윪h_C)J(dad?wM,;445jES  w`,D./0> *^%F_1^J_W4+&ڇw_[xNz}eIKU^ Uџ3=JUQSg31[9fHi`yIS}`nu'Aj+Szuүř9̵'k %z_m8* J $4,']< ;f"Y܉\4>uW"CJϙyꕶYv?3`?%PUŽfLV#*%ghUcQ`Uq:Sу12MCX+*'kGivޓ&kܔSqHn|(e)axTb(;j4iM9ߡ/fc䱶v;?ÑkHy74|]>H.X%< t+sb+"s}!E³ZVL7Ro'oqDF/SXԘ ̈Na}Ei @`xiiy,4 'IN^GiV D)qA~v l-6^7ÎK-W?1.!HN5|m&O%3 ^eK@IPh=K=#EFCϢJz9m^"1\y#k5m; Ud8P%a'XGlC9#+bYG12d9=6LDp>GMjc2aK;TnrTNO Rkƙ_glqiP4"$'M."1H 6tO8O*=:˳G*_ ո.6(ra&62{A?y"E]f}rX%^Sldcn5P_PL<+X)p7CQ VwA:SwLKZjJ/]0P|'RG23Q꺏 dfa Q=D'9Bƒ4bh 6M!8]2KIiTz(4 59t`+7M 9w<JF1ܻYE :s**e'>1B|Me'L16w?F:v'.LCL1LHڢTctmrX'dāmLB "#{~͵[hiL}p^K };?^Vgw|6EFW0߃"&]{'ٸn>N75Q*IPL' h<5H? Oc#W=w}{t짬i,N,w*Խ@E=($@)%$i}{rᬶ̦oua5ٵ7zOU>wz8Q|`ЧĖ6& L"˄UYZl(fy`=hbb:^ằ%݁+pQPOj>Fzt5mt~UnCpr[MH\ǣoC|wt&$6;-XR*{ʷ: /lWՁ'?MbQ[~Ed~t^vQʢ$VYzEvs=nkqmo\ݙ?;'뻖pVA'(@l|[SApuXH:bޜ{X?ت\c@r-Y-^=g@ԛ%rOlZ&>y>e(bE&pvoю = $j Κ)"x=H;+V_V%DB5M5^BQҘY@)8sq-pV89S;z@J^ŲruI[L˼3#K\V!gɟXW (|@sی^( ?k26>8!CWA-u7.}%GF3W=ޜfzӱɤy䂤׽APsd5)?CR A,r 8 LXwϤy7 " PX͗AExZ蛀lSz;,_ڽbDt58j;"j#͵X;v ^x!]P;,`gE0ԛR\N.ڹG8 >a/7b]"۞!2TyPo}?~(&9?9#U698dȞo1:[+[[,M;Ap&ahKiyp,°h Zkoz;aQn4O_!7.I?l'c6a){V&߭<Ũ7OG " BbKK@=X3ٳVCB8u%a ~_> 5)p+_ .kk2MdE,I>Z{P/ͲLNjKRO.Jm&O";X"Ox9#R;ab/f~2÷tG*`yj>i6λ ,*}a*GyfDKJQzu9 F7ZT5csMdBJ% B8KMs/K:V0{v1=ׁaF|5Hw,K?|k(~OڰZLs(@4Btb\hOB?667cѹyЧ:#e7$ohT-HJ KWb#kAůvhӚ"bͣIM1?oCSuU#Ѳ/RLq raYpto`d_zSg>T ܥ|eeBU(kE@y~ gPAZ hTje?GqpLb Yu ,`/ #AFЦ݅WvZ rAJ[cVN7rqR)=,m JFq. ś? R;qITQҶ4͒m_ 1&r^ w1谶S|oh,BP!< !&4L wm/XБYs[ KkD`c*c֡Sw`G.@]vǪj)(Ͳ=撱wZGQoY,*${ (U^(LTTĴ$:qTE)e'@`9[|Ǧ%'`qPDGf5(rDyAA(N\}YZ ,rq?G-qgCmp@>08;‰lsW)(d}0B+ׇ#nU3C;E"sT[)NM ڼ/p XriUux?%ɷ..] 4wmq3b81 0K{O,n]k˅+gg}]voSg1]30) [6EG ۓ _?W7( &}/=Nps+maݙSAY , ";2I_ E!,&ucFH<_oy"o32Doay>Kc_26?ia޺?\DRd6m-K2}RY"z=KSѾ/D %/MO ߶;;yIlE,lgŪj|-|O<慅yh]8 ,ݺ&,1'^h`-MòeCi*T6=!vhcдb \@X%׏O bA kҌu>'QU$I&~ i1=֊(T 0C\:#xւ^o g\gɣL#MI'C| ;J ~k?!-4釣yo\#9F6+|P6~,/F^z-jo,3Г?v:0Or]EmuFRyӐӦ{GYچk4xJYq&!T[]qCSKV)<mȓ[ȥK NfVzmx$h}$^G7([rl tbr.~l*2C}*C9hVR㐺@ڦZ7}&3̵B*ueuz)cI-y4g|\cHj,YDx]FAwlٌ33 CYM_Y5;:g"'\#e.-ӻVt&ˇd'-xLwX pu!L*ABg ?cDL~=Eeix֔4oSΰ?ٙ*j:7Y0=$B-e֐%^kxeF n Jԍ͂@ 현=OΔ-hx [6? U&&L00ŨVW`oFe`y dd}On\w"KXM-KCsVOPQF-wFKTEpA!mNA,t-FCvp\JHV-ǼZ.Zqꠗ`_xW)-mv~O%5؂|C0 lNsW-{S(,#t ):bGt&nw.Fa W4]mOP^z0mj𹿦DNXƃC~ma^!큙ŀOP*\y;)d̊sPτj ;4 rC`ʶ%N}&w 3׎j@ƨY yE#WJnbӊZh>Wopl$(Oԗ: QC/^drZ"G7a5M0*@YeFNsd}i Ixl.Ø I(edу23UfqýUoe>GHj &zٖ}ƪP0jS@1; ߬+o2n&O*č.S=Q@֞|B@5[<ޗhaeMw|^iT@(@Ņ,8,*B?+(/J'xHtEn_ z-3 GvY\ 4= vT& x ք|P~t..;;uAeBH58^m:@Gsa=g;΍t**yomE&R#5RT#9AbJКBw-SJuMĹx,DޕօE>Q@AmE [pO_2zb .1hC>9Eh}r ugg\3=j-eALzO2kv4r2?B1tjk&ű.o%W4X-5ٍWCWˇ7wҡ~4;[Y~Q/Vl&^DN-;f' B~n|8]֋ߜa} O1L";:DѦ28]= 'xh'ݨ/stD{_xI8r{pNvci$Wծ-cm 啿tN1ffquEU%.-~՘O5-}:5u%M.O]p=t"Tps [v`\ǂ-#,5Ö\ݨ:#|zTӌ"Vt؃t# ͹*q VY0cx~ׇF:;] !L{53NJky6m<ME+l6*{y`kƒ, 8 eQpu. YYWiTeM QjxHKN*<N6c_xpr ;#l(Y_W돿 NI,1__.Zc몌*ܩ- ˪{tHO3E]hEѾ%1ǥ`-R֜hNh+RuLqmO~=POႩapp&ֹxD'ӈ8W<#&+D彽q2y A|vieY}4C@U)q_fΟKa6Y^}ĭ $ۙ$)ϰQsX֚Ն3êJ3*/2@j8dD MA0z- *Bn>۴ٷQ}$wfVJV*9=Q9 0EVAzh/7/#Bz1uD='fݠaW-DP <4luYԲiCT _vGyL׽fugwM# "@F) Ӄ.FL%Rz"dԁh3`6Cz3f.U%ynINJ?kv^4@1SvA1 %}e܏+fD^ͯO9d 4㻬j>)]`K[Dr*>6; `]v&˫bژ0 2 zMןnhkÐ4[sJ̴Mn6ȼ B$]yLot\>&QSd)[- lǥ5D B*Uuwۣ3䪞g2FK5՘'(xA<:34^cr[p,ќ#ا4Iq+W5% .SN`FG~Bb`g>(wE2# . JUz DvO,]s4IxG\-КḈN9Hk4O],Qt V/QQQ;' ".'g0o߷~@}"R!eT"ĥd1L{ŸFbqjM^+?kJ]. o**\!=q5fM!o_@?Fy3Όi S1Sah 0!KHᕥpZ(\*1 lY|gfώBH/*谿)܂(-55CErP@B!wK9?>No]kC<|hrwHb&D ijG#W&";:lIB(cA"HhXB>~]!!zI e(T`F{8drG^?uDrgKŹ-%9zST; |pi7PNLW >ZxRa|Ob>`N~TP!{ tEw/b(E4h]sB kKF ,D+d_^Vٟz4/[3p밨;H$) E&ya{vtk;Nj_& 4jj uURH CuM^OƸQoQ?h>7q8~a^Υc-**m"to}r6D)=00kb3JOԹ0/]Ұ$bgϴ.i4CQ+ ) p!vdä>Wjfd,4ZDczK_z\cz "mw m D~VT,O:*WVgHD} K-/:GRŻ քЎ|^ h-0oB"ɻAC֣PTKI(*{L,fֳ48,|mႝGv: ۗuyb}ql3իA5Zsh{lzHpzoEDs_:ghP2e@[Xd{ m 4.c֯n{LXjwSC:S|:R6&~@&8K &a^zW@T۽!F_|0=A˘11Z>[w]9{0Y|̐ruPDXPKW.yϯ$"q`Y9jv8etj W- 7Ilӽ.TdeXem^ #&_Ӻ& w8R_ab *uΚX톾vq]K\l}.jv0{Rn6Qe` ,a*A8-wWDU3 Mo e9%:Z ♛&d8ZMvP1 Ϥ 1)Llca.jۓ0͹k|uk?SInO]yk9O@ t:h/0:nGءW!j$9;ƖRUTI :W<,YS "S|mU01.#?I9CJ!F:o'Wsn7aoWA t3j\ Fr(HM> 6j:dLgE ibFЮޘo [iqzX.!pЍ󽌄hU>YY/M-qn(/<]YSnsTQ$ӻg`eKK6X_/Hge^`LLK <9CCJ`,\$*/qk _د*"W:YqotsN -Hx9 9PT͞b[|A<Ϛ]0:aNtЮٌšCg`ŻTϢ._Z T30@w`VoXF[) B6YtFAF $5{+ZpOoJZ~?ֵ^#G er7VQqX_7?PtK'"a-X:.@R'#K`/p^L# &2ʈ;;HLk;",?/)/=@-:6ժ#r#$c=Ҁ8-䰑gӧ Aԇ\\ΧL_wЄںqT#p<"<`u)f±J(m;kY`^{!Եܥ}I{yl$@G2"XOfKcѬ~H K?I,IܮAUѨwGKqF0SRCɘ7킔ݮqʼn0/f2BH0lh"P8B2%h=7>!#oo(G&o S$PgwA%Tk>eO P jABwΟp5vT{=IlH༎#ԐH<߄Һn~y(:FZF0# 35.0eJ֭6IMZb,5'Ξ|X:~79LZmF|.V_ui!TJY[NQ=k[#mԋf,{vvuI74CsDPVX Ì%X=RJO`;FN!Q37]^@rs-/Ώ9qdm[ÿ1pD eS,>t?Гپ1rXkf jOP38!8Eش~&g̹)ZNFQ]N_筑p@X4لFZqs Ixm%*nVq{x]c5:[昌g]Ps4 cyBY $ r҃- yN'0TxY iA,.)?@v}g'Hjg ~AH3<ЇNI ,:F>%]5nb ) %cPꙷt[41AoΡ:*>#W2^Bbp@آ^Й6Pg=v3{ 6Ghv yኛ T޵q$>-J4ؽ G{u1VYGM@ΰ>ɼ?G*[VPOWL`L}4oIB~:O^~EmD4Фt ,ی 615k`ʲࠢ c7{>Sff) ߚ,_I|;ܕX[agtkjcL= [&5Ģ"FibE'j \U82E:)Ȓ'VTk>ݩf,eYGOW4M ja,/=RUsyNVPc82"#%AR̀ &qg0݊XXCr#/B-}ͼ LZ#zJ{JtgN4m뫹w^Kι M+#$8q=\n봌:sS)!ɬĦݵx1Xa =|5W܇U4W{tXW{W(2D a,_ッхxGo+z}7} oml *Cb|W zkzM%?[XE_2co/,tHɅ,tV0 =9<3Ķ0!plY01n/$/T\j'pd>$?;)kk~ bKR=k<$.ݲѬͭfSw"_Sy U]0)/$P1CI G3iSCkD[os".^NHD1 * e=6MNeR̶V<bPcb$S^]yU8oTm5T?=wDVVJRLQ_9 z][^Ԓ.h#勠`R`Gk7꾆L@&qިni$7'dzx@H,j ^ `2}vU9XX*[ɟbc\0ƖNWoVP_eg=Y$!нp8y TP9-z5QT'oNU@#ζ &Hnh}wY!ss* oT;V$N~ l!FLaV]-iK=->0OfYfBZHGWpǤ.= 9_/WxX㶑n{U;)I`5=lin3x`uj`A">^ a|K2n13j<%D]$V ș;S‡ Nda3cC3oo? cd"ëbsI4cq )I&/-o 0! 8aoQBY\OIz9v[Q؍n@`P 1bJӹ3Ag&ny-2\ _Dz0 H/NF[eХԣ!d*IUxz#*2Y = @tZ* F<{I1΢Bz\]riG1r s(hc{͇N{m`R.Qڄxjt@ar@{C{y:v'":}&Ey"k>c\j Hz@L0X)v8otyTeO Y0ogۢ.\L+@Ee2QyPzjz%cEBb9#2淛U[1ٹ̊a)POB2F&g*3u?fD%<8tN?UC. M52a0i1.Qf4'ˡqhEѽD? d ٬Pxa,Ϥ4ڮU 2o'B<k*TެyQ[m[ð41PHpW:-7n2w !g8ZJ ? @ 8E8żxq-]3ny'/*zcTU5tr*wl@+:z0r]/_ݟ>G2?352*s CY^r{dfH=ρ CFz$)ҋop*iS5hZVz%}ZGM@SK{#K]9}hd ?k=;UFPd#5\`kD@Rk~~FٶҾbr+D 4nώ ůFYdTnǜܵ!WY 9CAm?$8_sDő3}jƮVޙL?4~#JN/>:m]o]0?<5FOes䊋|,JsӱZ\Z 8) [yEvZh&ДS54 Du,Q>n}RLy;lꖯ{3B>,p+S8Lă=x,m]4}#< NkJt B:=wlm*.٬q&KƦdp zp hl$ooqچ݅Y%>9qa]H|%~4bܐNJP*\ *oFsaZ(Ԡsġef+E HO?ܢCG=8~Z.p̶%$<.׀$ԭO'{<3,;)=4}/Ntˌr5k׭NijЬn V6ť,,'jiCanRV_8g-i }xVlL6v{5xyrӁ6,-ukJ NMgdvΙv T٤Njp5>9nn4nl,QUJcEQ 0t`h\J.MG𘪴IN NhO'*U(~Tէq?(x{Lutp4b"<\kKWC=V)̠;ǵ<kNoMΖDȠ *^ >S;/edR,,Ҋw<]4[>|oǤx!NPF=LTp 9`4v&Njʰ5jNڶB$O=QI^tJ>]gѕH둎7¤ݫ vMpW=y*{ R'(?'Aꡆ[? KT^&5lrXSދ x ߀՛:Ә<,fEVkoM&'M^ cVYenPR$UqfKsS5SbFJ\郘"ɒ_VޕY#jMc{Q#a\fR.v׹)l$ [.#S@/be)݀j_1{E|{BuYօZ -fc"5UUu/C/Fm]s|;IY(Q\)! &+k<32|xMro60@ T?FB)fð%\5Ԛ_908 PUHE40.ʪK/$@IMnז CYϧ`gB9@;(5{s4@uҠ#Hfu6)WP7*6afc Ex(וM0C4Ndjwijm_ѵnv gٛU/_nE؍sƟ}wC-j0s )+Tqg# ĎjZAsiKMoĵ&d(K>-@wE Y>+HM[%م9WAe?P C9=@_=|k&؂32%6j9ah*D(4 Ʒ@ܧÄP1بo;]m U]u_qk'&îc4@q~]W]S&LїCџ 䦔LPX—X?"=п aʢkcPuM̜6;Tl0dW ~ Ok[OlDZeMBT8*цwQ񯤕YUI% !jX#~e^p~0phe XUϹ'oř.HBw|+' X :^gkb53VpxeU1 r>'L])1U -Tq7h)H _cp v|lPfCk~C`FrIY<^Hb[vMFȱfu U{z7{%)jr z?+E{_szPTuk{F &*Nz'{f-A2Vo)z1f4D8CCXULgλ#dh1kG.ToNI}׻⍔C=`T_Ƿ߫곿C%e[FH@o25+O>KY@c$D*3xx S hdw`s0vP;10!rgIn'}j A/t._"MDž._K'zy"{~Ql҉%bJ%kQQ' Hwo# V*:^n"O_gn"J(xRhTFtIH)i0!9-'<)ޜH ? vU ΕuMqJM荙$˲ݬwpχn.{`cwux-TnȊ/)}OYqHIfǔWM[Rc=P׵ "X~JϤu7hq>t4׆jPm`'qF㝛ݠXPja·)ʊ_#[ duO-v~'--l"OKB7Qf\[ZA[[w|kɢf⮻|RrꜹI/SB@E(pY,ef=tw^ҁZM q"N/NFٻVKIt9:uk9xvJv„l1YT CA=8|Y) k"WR9c"xGAJ6\j`;P-2ZJ}+it'u'G=&vO~7)46'O\7jН֖3٬)7Lp7NYbe8z- Z̃3sKq^v)3 wP΍{e* ӹݬTk $8p9fhH1)& TB\_{p)x?$w'_1TU't/={ڣWF}K~3W ZLַ|p=/&n1;:$?4N7A6=pŀ~wCߊ;Pagfjɑ/>.T<[zT## =69x³! O٧2ׂ Q"-]&P^. Sy5gnJ_106ᙃS;#+aP M]O0CDN?m ͉"ӂ hHo'{v$Fl1`e2is6`<-{ h T`/xbن\Zn-O"ǰ$|RdORc\3۵2WzچW¶(AUt݉0HzOH{#i (g_@0}A5$!*L"uLuyA/ $J u:2 %_?)R\p.`C4W4rGFKSv --RQ0e07q騿b'ri.U Łԑ(*yA9-R՚ԝ$/w|(Q *fM1Ȍۦ 8~򻜏NLuSfͅ>o̪rl[=ڸ\tFcM 5ߪ3Ba'D9NT?/[fG!} '[/vDP$ljU.k+: Q=7sНkbv-}e;|ǟ:5*l4(UO2*>s0b4XqwvH$Fqޘd+->Ox2 H^$S!5# uT95$1߁X.ky_M TM`o{;w)zFgDZ:d^>b4[ UO ^>bGg=\q3C5L棸a@ESjY%{ojcDmH#<P:–>Lr/i]ýͰ£ {깷fu`<AT*`ErR6)YAbS%/̒uxv&cU,&cќ VyeU&T-}&fzgݭݫAF%* E?v); LA~]Hzȩ"HX곁wtxODS7)IomB;De(ZSI@SljGCЋІc/;)T$non! CFQ;[!_ j yK,3yBA~?! xC84B \J^8' Frh%ngw}xe &xx&`V,<(&{ͽ!3UDQ܄R?ԯ4,EQc7ۧ;R*Y B|: ªqCA"-2W)oܬ%Шo"D_K@H~vP䧶*2rTPٙx*h* ̽u3:^ [qRÿv5`E Hm֛qm&_ȐhZS`mr|b.6>S^g`Pť3 T1A95DEZ_$Гeaw"#uKyBԌZZ+ r%=ȏL⋑5Fg IU:HR֢uqsASq*LWrX5cuj!:nBW dQYouj]<-lwx8OM^zZI#@~jPѮo2'nfDGUЍK>섅B.WE~[Bž5.dgh+%t!$rI% a3E15A>ē0ܴlUtë3l|Sµ8NFf)Կ}E'3;L' 34+QPLPs&"U^ɈǵEXT?kä ͧ+!r 'P\?GGߙ@ӷ:%t*P,Ms\?=n+lue2§9; 3 ]y4BXbC\o<sIcwY_F0gFD.d׭+RWȟ0?56HTA]w!.gkۤ+inAp?N;NQnw\YRِ)Di2ZY)v}XPwXR5>y z2PD v2v3~ť8`QNo5 cעns1b70|?Rx[ܢ.kae@P D\vAz(΂K[R&3< [ʘc]q5s=!/ a\'I &NXWI-Rv(0q_BާnkN?C~r>vMu+ @Dz&'.4nC^1?9O 4SutC<k GLC6I(D0"#C0lUo1X|y΍OtP/"Ozx.w Mv|eh^C`[y6/1;Ra݆i:3xA>X("owXAЪ^#;xE&> LȚ8g 9+oAyc2n$A=ߌR1Lܡ]z'>}XwOL͂k `=烵D7[& n`ip j#\$ $P"d태y,WHMH[ T9o>{u56W%b䌰~l-5QNwjoq$OǰX|`pX0I~pK.T @ߤq|a_Rc3F;v9^='Vۍ5/\fJ<.iźeMtU bW8845Xlrdsjs0HgY(=I8JrP:xJgH.6[aNc*% }l.*|= EhAir)zeyhFe?> k1ñOK@iHʳ|R/ okdEU|z܏~!=I2эmfkzk;;{)io]s%Q\(x>tyMb,BuF G)JYfo!!Ras ֞qKy%s(2?0rՐzX#G~F(1zAD̓1k1#_0s^#RHo. U}T=v@x >:wu@|< /9lU#J `9<D%8Ǯwx8fJ@H:~!M V s6]+zZcfj !лqdqױLE^@2Cv)wbm`A0B)zFd ?&'D2aХ6"YOk0q;yx$ Q cwlȁBwKgO)ϭrp -ri7…@LIWT T ڈ2$S5qi3?f { P K4aݓ;N Yǖ }uIϛјFd|jX$q E5ST}\&yŻcWy8hOSw;6=Nm+!ާqn'u2ӢbvGɑ`]MU(!TT+KTXt =CG';C%)^NKЦpڙbԾ%`JM^P͹k )ft`o}_n0:U|wUV`;4kt}-$k [ OMTUOe@ΆwsuK7ƕ_Ғyl=ßRG<לKV+G!?3 + +F"-ZPlioP:e p::X7p*F vKbisԺ 2hnO\J i.qrC`ȄyJOjc7 ÿE0T+.΅^Ap`䄘'^&7Zl\XA%sdo"\YgMϏG:L]7:[a>h,9(Z/y,?ywAٟCRiw!S UT2xg>[]xNR~5r`[l;18j1Nx]oNO8ZLSOLavX(q&ԭ Sn_u3M?*ah e`Y֕l;NK/i'3,MLh8ٛvp~&ڿwM]/^ē# 5`GָCQĝGi!YA<-輰thr聁c‚.XQX2?+i- :|,W v:\u%,,PFSZ+~a=h@7qBʰ?7 i)OM հAl4 aC9% kbe++ Ka"@B&GEoSnSHmhFyС}^ O #*:d ('L,? : _ߖPWE:V@2:Oee=OD [s, I;_rToT\ޱ:ֹ0渪UNT>RSƵ«Фm[fT@?2yZwes"T($eKDj'~RuUg';o\sKLNC#k陃HɃ;C@ugS1|%MќcNpm]zr/.08 ,?ֺ ~g=;@I*bw?By܀eIϵÊxjiܧUj[λdoO/@|ᡅuBɑ# 5R6\0#4>P6Yx di>z+Pgۅ}&,'ј%[ZBwyEqA {`lo$6tXʋtѦB&ɵ ,8ZDx[,@Եn[I]Mkm[9\|m6 R~CTEh|.md/4/{idNQs,akH;)c5 /S>s(Im%soh@w]gN`(ܶbc|qR$ Dt|X+A$CYfꮛJL,(qH᮪Sպ{**)?S r}f<6XHoL>ߵ-NW:#*DN`XTM;#1qJ̄)g@n8,DwIM9Zb>V[E]|eMTfI:W"H7ˇ!*Ж&rn&5}Mu21%1/DSDŻi'| anٸ3EӤ1o}({ :Z''"_qs^3{} [o)o\ê%_Ά{Mk ~p4#Jlcmv|*61,ҕi(WjH/%Vc!:!gBb7Ukqhi;$ k:CseGf>(U3b@@yE%A9G2Z^$^}BL5n78#̍4 {o>曝ɷrYA7gI;AE+2'ރv?L 14ɵU$,M5"vmV:h`rX8r}SH,ے*w!1q+mKbקtۉZ&>~w̤ H 眒bœ$EWZY ﶃTPdU1حs`DO*H룸;v,p} |m,zy܋,WS*A䂑lg|]ܥ-+b'EGRkdp3QmIUL) Aӄ)aTmS6 Z|}'};G.dla|y$UDJ/I#/R0XJ7tad+ݫ~*'74eNx5|>2^oqel$GHsp| HYfMǿqKQƌȨTt f3|-aೞ%2f~)x[Ւ>2P7tpbե?>sh1_OҚ%EӸ3TlrKA?Xy&h";M6U;%ftl)d: Ϭ{H(B Yxoz߲ؗ^l|'Z#ѹmeֻ#N@/(^ilW/?3&H_W"n)pm ?u%BN "”@^̿V)wH^Zsz`"ͷfwՄ n&}˛ulhiOiBe0䔌<{@D=LCd}72 !GW*>MU]߉+XLf26= m ogĹMM;6aX6O>b?yD[H-[P߬͗e q-¥7z ]Y3/ZPQ! tM1_{tQ1V=yg۷qp9\jx3 `N_^uɦ! 9±.qHJbhua RhX21av{HE`%{E?A`lBoAħI:WG5Fv(͈Rc*v[%ǎJVZ(5㺓\pTOh!O+!m:vuy2:DChԞ8P07rLmd)ڳ_sS~hJ(4Fߙ ru8J,aTgbJ_|^X74wɥMXcr{M`v>=vqn0kVyP{IHOO"AFTẁ˔ǰ"r"i̊VBa$g KV6d&ܺ)W0$@"07:{Kկ~$o4xB'ڢ[C,phvqo_親#siΥ7r BX OnU!Hhd]Gfb=5mbYII[&.wC*ĥMtE:w4v4!YrB@@OX ^O rh.7A 'v~N d6ϵ}~ n ,G`FdO@J=+~Ыt~^@5{Ђt<3kR@)qgbi~u3?Q[sMhn`pMMT3 )ߙKQhAF"9PEKHq"*2sO45m:AR:6{'޶WwSpڮ) *=bMc['ٵjnzՌp azܑNCޖ4AӲ1SPRiB}f()TiQO Zqjn!p{*1~Q,:mAkxiW~ ꏥs_ RV}Xä#+o̐VˉQK(e([ ʊn+F5 Qc0 MEWgjV6^,>MqoI;75m&,2{Lܳ$]zOhx1^E+,ZxO(!3 /L,"orꎎ2u7EbE_U6l6غoE:g)WIJF.\ ̡3[~"K)T V|]Jv{ZiH73G* J?)EBQnk #)%29%<_9M6J6 C*.B_YBN#r#nЌ3@vۄ{ ɼ|D.Y#A&I}7,Ρ.ܲItYo\ҨZL:jsHAvFͲd6k!w02MsܹW8ӑC-y,NvY\݅䀭W̘ kx:YOHW+1 օY2!@ ??ڷDьlG J3igZu@mQ{Ujqډ|rLiP:ȊǭA},m#Хu2{P{5,95b/g+`4\S53>5v;k}zinv2)v"/$ʺY6<>E{kr<BjW{A6𨭭MJ)l(?ս?){!3֋?Sjf?)Z}:N2wR9Uyckdrޕ!6[wȀԖӇ4[KB͒muΫFj3='odsq|u$/+Qwfꌈm}11w\}S@yA8=ч,O%|e+t{ey+/p>nzbLV UJ2S?sS-"Jɔ˨`|8rybI>cz4H/;C1YWyx = Dj$,FEP`.`@翚(Kܵr>}d(eSK7d"{A0͇#`v/uk-CA +C]Xq/=Lᤤr4pXQ}ݢMњr!זMO$9s^P+eץΞ1d>r_||-Qx9m>o\\r ,.JؠÅ8jQOEx?"zOFJF$MTE_nBp>V Sk0ͅ0PM]OWiSO|ɋ,cd%kĤU7B@@fA2E/QU@2dN~sI*}MlqQ&"9Hb&.*2n_|kmE\YmAL bV"4,'@` |:MYZh:K'{[oB!L`[(^EJ^{䌟AQ-.`f4RO%?ڈi]U[_Y=yI?~>4.;e%3k8+^ 1ǃ"kQI(EZkF&I }EE]c4LPpߺN;NV/$7&xxWh3*.,PM2_̥Elf[ q2>y:T0f;/M?V(A;?\]ܔp#iݳl./֧qW6}4f Ns?p~J)|QA~](f?!~O 5iWl}҅qx6xqن VJ$PjtZL#rJOF/UVIZښjyB~e٘OHovᕽk lr>5{׾5Og62FFХ~@a" iDۇ4_aaT[jqZ)ik˴]$Wf@E"fud Ÿn#G&a͔>-x ",~2 W?GN/ewHϻK"! clIj 0yթ79`˳≂W% ]O)=8k t ~?>!zn|A$T> ?謭jҘvDZr61皉qiaPf,h,:R@ o&|9\A?P[1|A(r3=jiG!, P|K|X1E6F#%oFMych ݻfУ>?:^{(B \7 -թV!n0{SA1L4X^صvIXrR,8&]TM4(6Fu]Wt 'M/tI{coÎ k5via9DG7o5踀W8rb#/M ~?s)FtWs%_ TP}GW=2H;LBG3>ʨŒV=b~py s_g׎91K+:}.\m>C&VAos9dBķ>}^.aIr_.Z8|w(N\Tl#1}ey`d?^2$.WS@Ʀ_d fÌWo ?dwxA`l~!N(SG 6PNg =dRB%,| ϺO:O,E5hr=p%_Ji@i5=v6HeR'F/x c%yje>0~mD1`K<((P2F#s@.BYe4G72ڣ8DCw,56aZKnk#@fh^eb{e'Jaǔ4H 9%UbJ_(|q@m{?nzN{<..\?55ۣC*|G vN^/NC"Qlc'6NˋB~Ǥ|S4⣍65\抌$q`'A8le`YN%t/JtcYw@r'zMoxuu.z Z A2)! shLP.dd&|h繵 >TA*6kHWu&zPW5"@'adn*GV>^32ԭi5cyrɆ(H<|ⵃ@dG삨gnw?<0^o8tëSh,5?g8`ăU'{R;gZ] 8s-»2|]K~1Zx2p_ /;+saՆiSFN/H4/5f5r#SYɶOlxBFK\iϦ&Ӓ҂uA6k4)nn|q~5񡩂W(‚A띖u$奄X4T󾠝j| a'k W\} AaQ^2 #I}s;e>f2J1ׂ?f! p Y |9dĂ; -ʽkz62\Q *τ?LkV24('$E(6eHDlnpkvSjzGV$$n+( -ՠKIp6 b]P!_ Oд)TBTz2 '[DS3Wlv[p͓#ȩ"Nf}K7Rbw$0ؾ ?RZPY6MWe-kq`ѩDV$"!0h/'аƺoiRXTUL?KnwjƢgt"r"|D?3*\&g7_oP Bm-4ՊLKZxhiJ62a'O37)+6~bN+0^IȟJTh%`DZo6vPnh)>>=r/eWf1 pTS̬̫Zi//)Ӆ)C9Yp4-<ȚܯMJ{=_nq؆$+nFh "l/Y ΡAu[kߵbzrZs٭x,?htm{,R@/y<3%DPʿnb>Dl66r 0:3q1?xE _W1ɯ9|켁ycB_Jz[V\XX}M=I@YwmR3D%B=WחjEj}7TEv.’' B\+睙S0-N2 ۽ą`E,fg U=ifaf-#cz.6InM4"KC^PiB?4 cA=ԷI4$,OX ػo)9{1'xx,8a׌}lP"K,LyQjE-ρ5ZuP]F5򩫾%\Y)~g }ѤgXlɍ`6ݓYje'LA  bhgg]ss`4ͦӗBvIx:W|^PNf`M{ ʣBF^@J_ d8sgեRUыS}ۿn4B *ߦ-XNy&u Q5UWU+3e R1!IQ x_ja>QsLX115➤NYȗ VRо{4 ]ݡL'\;0N;#TY<s)W oECdqB1&? MCmd\7 M-ae)g3"b\ëld;ͭvR阯큟gmЩo\bDy\zA /ن$G#p1+T{F?R$j 4!n~C'lkd2hYo*6cn FVc{ FOwG_]A"9Spu >=*o)gJӅ# E%PYW$8ffJr5W~dfXGw9{m yGdk*̰ jյpǓZ?`U221q?u݋);k>W1 h^1 +!)#9<ϋQzz4!*eþnH) /*&do?;\. vnHU]B$f}~ın)E?(RLQbS$jEh@#cP^.\cۛؽ> +Sm~=SuWJKu8F#]x&s:dĿ):Z*tRAkq^MD61o >YqD-{+Ș`")W X2?L~RTshf32GTggkC~qRzB"]n] #}%6y*<="xShbyefBQ[P:Mj7@SlG%?isN˦0 4_ǧcOs$U4 P't4Ѽ8a iהϰuI#Gݛmv8h)^}qB#dpq H4qXMLNN6 jˊa‹3)~G9g%X4|j\2dޝT:Q ?Q5z}7GZ34) >8Ⱥ*1wڠ_WR|yMأU!""Hj9 Ѥv潟iwFy/rb!o*|bj9 ^!>QR4e4.$W;k6wnhwvn#`~XjA뾚$85%PRgmJ GyCrDCbMC+򋠶*# sAWKQxNs  \P{qYCuq`/tQ^$m!9wf؏l48k)흗~A&֡Cd JOr(z2J8W$\&Nȹ X$$f .fGiohlTtk5iE!V+Of  UB1n t*81Ge`rܨ"2z0 nz?x_I'ubW]%I{47Sܳ} :ZW?S9?k}Z`Qrko^zomϹҐZަ3L['XkPwe(Al%X |o%vJ&I#-y8jE5 î>rn>A?[ɯ \tߜz~RHО1vJI?IfL[˛q/0'3\RMrNm"IYRQDc4]b?>AXc[[/lea)h;(238W6s9wo8i 2q dOm})YYA8Wgw5RmB,+ةhWc 3e8 V\k&S )$5 PHR'cHo:PAμfÜB1A*ps(m_UW²j*6!1eu$-@]1h͡Hm{s]k!5Y] &vubq` <$Mȯp&wIKœZm{,2mܖMAQ|GZ0sG!;Q(q2`! ۰5>:,ޛjFQKE@Wr]V:! z#S~҅}Sqŵ;c2A7ȷl\џ{WN/SN,^Am@Xdc5 */M)U^&uxA,&#h+u 05Y2K?DK,=xکDs[} @&Z@<'mRHTڄR;͈)bn]hi{1uvvD_EZ/(CdN/ahqStR: {g!ZQu=t," 5ªk$ãM1[F}.!|$جb zf,W?˰N7Pŕ\$[L|Kl|-dR:Ž G ޏ b+4:moL8a'ġGb(H D#3("ꧠpBoEsd|FG=r2ROJ@tTEQ9v8KBPlJ\j)kLNj_1=/c?*$eր굇x맜$1lj fJ})9Dre qR5&tœO ; ] J&&))R}G]3hy#3;$Qa\N{)UOޙ;/_WcFFUۘ} 6,XDYC؟y Y K0$mH]4-e^5t7 aZYYinPţPq+!]"'%OAg6PwKTK,UyQIc hȸ7ckts2ZQ9)h0\"oq]s-3y듣kXƊW#9~Fo2E0*l/9,6ierV˖IPKO+vśPݙ@-e-{}7(0+!pm} Lπ/y>Cs6 g_'bʃh|?a8"r)We!vuIñ5:=`yd/)EX~'ߨAꆗ볼{} 9T !qϮ ScsV/p(:%` cv|z*^JWibCeuq7|'qI(m\e7iWWk2j9oknAZ*}[HobX@&ݖBZ=!pW.GͻaMbT X.VgIOrέ sHeA5RX+˕E+W&DjR=Ҥ?9Ef\s~7j|)ivtԸ;n^O;p0^y݃cq_ F"e&$П_,v h[H63:!b)dz-@3^c+`Vf/uUjq Zֆ*Qu6-~2)Bx~Fqψ NybwrB=쀋ψL{Lx,(!s';(s.*PI%_W!mfItW\R2ޱhVΡ ;j\gYlUυDu 6^aDEUD ή0R"vjoD9X 3|y?ER\q^wkEǻIM TUlzN'^y5a>>#%]ݡb%~/ Hd;J-޾v?4[4p.:\4;wWQ-08D +%t;#&P$LWhu1XA.5W)/ )-`?hҞ.bUE(z'6? )-6b6jsZvmdùf6F6OnIZܪ&w-ZL ȋ&W׼M%<| ƽ}Ruȁu.$N+./ůӄ5r>+J$HX6{wCg1afY^6'bwk*ރa̬?R$.@,/].u\hmi^7l1.9).yĒUwAG)\ӈ^XS~\CYΨMUf-v5b3 lUf^k]s  oX1!?ϭjv&U Q6$S;4G(M1Z!WQ#ʑA*7֦T2T?,0ǭf^a&y? ˚nH"SkZ}F*y#!ۜ"SR/^ΐy炖j!ɺ]?;IO랎o݁,&{K8[4nɑ1s#GRMN~ULqSPXj<NWUq`LjZL!fVwʸo\WeB tvMQyoo|x~ɱL C\Ͷ)  j 7i EDuԝ];n,c[&y l No6^,$`r搚 \K V!@f/: &=+ kA@j-, ZYKlc!p;[6Yl"Y8E}OyuO^{MdqS: nY( '%%|7% +3L XF)*\@i6QUSSppNT˷IH^+ڷ=ǦHbޥWٌa~;vP#Bd*Z(x2<2z0pQE(YD }*j(:"mr > Jkl2[:Veƒ S@GyoSR|bB_Qi$Wwbd%'b35-䁻7j<4/).;>nM{n@2P3EzHvrJZTZs-X_b_:ɵZqTt>ZbeYEX t=xaS}w=PX3> T2p$|+?%_O5ԹTUv;N %MYbl`o;F/wV)wKD~-m{O H'xLa\Lair!Wh/h퐕5I`;\no'3BE̷%NvnUr 4Pu3 5b<. -߲*/ b6 {80kAaC/m2kd߆a]'X<!򻒂iڂ;Ԋ﷜GH9L.QlVPyE3"?}aEHYFr vK*Y(?duy-Eo4H3vrYD,}k-JɜJwR +@b1  AMFFA<:1gK}{զ)*!zwA[H |"6iw[ YF}H3 ¥gׅ Iq\0&Z.!&[AI%wt"|p{ɂ?Xa{:&i@yk]?ɰ4&T'¾Lcz,THYcԩiK;Qa  }B$+$U{&|$"O``ا0elsI@1?zl*!BNRv)j+yt_HH!.R ԭBw6)1o,"=GR ,)I<!&;`gq4 ˭3_R|MlN`'9#lqV TZ4'D&\p<cO҈df>w;DaAG': Lq-Z֞[/b5KP$oqaҹa:( @`Qof(ٻ`~]:2]|PDޡOw;P'y,}/|S(Y jQBc9z.y慗jnX1[lL-0 T*&"bFEKrp{q5uХ^rfR3`4PBg]~RtTxU}/r+Sr$oo'9RW})R.|)-@IcHkg|"1v^ؚq[)7sQÉnj dhSy@|2usQc`k騃CcKautgǰ0cͫ8ÒKfl4Pn2,X:u#uoi? r9%uQ> @Cq~ L8{+} `g Ǐ]c GXQǬ`Hw:;ծ?]Osl |`12Koc;`JmY"ynٷѿ$`yJNZLbEk}~P9{I@eJ=HE ,WQԹb^\Y~tUUe&|WiUcNxlܟ/|D򃊬[^]+~O sb M,ԩ;C20$Dg7]M'>bG3l3\yO*? } ,>`̢gHGg#hnȯ \ drx*4& ()j~[>jsƁ1Ol,\݄(` mr4 nk4vr.lE!TMwA(@HK^&Fx Y |jټ]ѺDje=r( s!Snk9|VB;\@kbrtD"_p@(T^RKՙf6RKu8O5mW`t^_UFא ePH|cڍW ? ׹`%9ǿ;}̕YUQ]%.fat6ν 2b( %,n>u#֦ AGsϮyevuj;\WO`ԞΞUԳ{`MgBퟌB{Q#k;P<ʮ+P XY QYRtm#EtJᣗ#Cv 0+]IK˹f U\m%/~u{D4]?4q&8+h,;61a }hb-(^K̍੏uQr%_ø횉??+~f_Iԥ MZG?pR2?$߇Qxņ&, qlJPqћ|zl[9i"UP9gd1"Fg5-M)0m54Hfr!~ T4LoR(5Jf/F$4 ݬGcGa]s,k[^yQFgkԧf;K?D,]Du.MN30%H՞rzo_S$@ܞ "7] 33tk6(CXxJ sJ0J4R> ONJf$[Kk+3  tz KM"/v0qif eک!FIMYZ(njv ֝&r2DՠO'BAU]N]=kώF_ y *w@m\quOkddA>i'b(qj9p $CZ#΄>qbXBs-Ͷ`\'wfawݾvw=_P35D^0;F&r:䆑M!ݫ3nraeLo vOC۔5&>id߽P׀v {'RfDbxwiE@`E@+y%_6jˤP]8V?eF/;Bo3KDIY A9/"!]ĹL hzd#* i?l2X#kY,3`R*E*$ '> @XE֫hETp؅X X*9nNʆyl.E2_|G WTCGrׁ,eԼ;")PQ[qD4F46GxB 5v'5Nt]62hp:!h!%2a UԐԎ= // ӏm)u'drɤG #d K; [$y&9ӂ^fgw֕ (1@ѫ"]z|Yw g,$G*x&V\+:GtmfCaoi R LBC`l`V ?[|&w3h˼[r9jm-vsX)^#T2w%# jǞ.JDIUs!uŊ#ZX4& CsߞqYwqvH:M ((d!n0pJ*A@99!bz+;a"! Ho Azz 6_cf$ M( ݘTTzyolMgWѱO2FHV0N7NKKN'#'UN |+3BGyrȊ1j鷻9bӐOJZmkM{?zm  e +3Qub[Wr]cF-BZDM2m&יwPHmGA_K A˩̾;=<D23>zt|Hyף3x/9cX*d~u r9NM_cne6Y J{d/1Aqt~6 2U+1mEa'C6; L<ݼ=@,L# i (PJL(+j$>G9p zP>@6:x陵$:d惢NSJ5"rogی黹 T Ƕ%5@ |t_YR:-m_ Ґv ěS>NΡ)wl~e̼è\07s3 e>Zܺvm 9<-c[i1Hh5K35<'3aSb5Nv/ݰB" gTr6 u͎Cn04* D_7i%%FoFEՏc_GK[}fN16!t f̔·(U 9 _-U棄!ԟ{ڬe[DO3`&5fA"h|=w%9>kɴTA'K)~@q d0î&!,\dg9] 4U 9dH?:ݧ.\PW0ˀwi#+{5phT4hWku6ݒ^E3&"?8aoVD[ 7 e˨"w "ɬvX^O Ô!a& \H\UÁ7%f9lSvdM_J{04)!ZTYgÝAcSd瘂֎?d.KD OU/'`6+y]nyBK} m?qYa8FېNbG;EP5 oJ%V ?30@oޓsSB1SWӁ}:s̖$?\@EZ7I찍z!-r\!Y 了ޕ3#Z?(-è2V9bXZ~i0VpFqCQ0(TD\lUqn8Q5 >H 9ׯ-;@zGJ~Q۶"dt3s2, i@7y-;Lyna6|ʹ nX$o˛Alx[80"A.:lԜzNwAHIJ AӀq2.+|CHU`$[(rޮbL<և}Yk(EN-z>b3"L'sؕ! d$}q%a ^,k_ܠБ@䘱uv򱳺|Jh'改R;PiFiP1z`_btAXRf8hmbpe_AІ"ymI|Κ sk ]eR"QAT>O@$2Qҿ}vuz-GTGY/[̆K^tWYp9(֛oPsK#\(ݾ 5ga1Y5'4c 9]WRQ{̉Mi@o`ᓢ0>h!RmˏT.(b)WaWbMOI(ݲYNlK.ڀ`! ; :T#I`O%_ > G3*a.D3n$Ǿ.MBl/>sUKQ݌úoć"jR2:@/M' GvρmDuD?-?Q%T-=+,F=pO󈲢 @OYB?39eu[Wb2d%نmtXnS3U5ڇ 2͔Kq.nyETxTJޚvYt{wdgt|'u'4,G>*&QLT*])?\\C"O&4A7x#/OR:j  nL$ Lm*Rf?̰$()=L&[Qy"KD# dٽ+zv._QABbUH l[y?IOk S::phq,O”Rk0B_㴫!|pRh]mI A&Ll[lkȊUz%{JFhV`f8E]+8 :ҸJ]ta|8uاww8oä^ZZEe3qw|4o ozoHFW@>N WTΧ(Bx>=h+\XbT%ʖRYj`ؤ/d@kV^):'o=Q_IUcnKn% 99@ c&5XKs3͏njBr M\#\! =[JȪzcp]a`Xxn;-'0M2J._;Lwk^bx~ (emO|1j=/ԴX1-f1HxhZ6H;ޣļ &bCed FOv95[fAsz_Aϵi0te! O߇>g;Q(vgp3qc@x ݟ?VG>FO-\)*r7ַdC ^(|uc09Žйb0l9/T945!@S}8B0*r[SE(_9K x7(VXX&HXq=M2/^X>^\3/o]KgX Y@$C: ;0`fV,>?ߘՌӧ+-XkLHEKhgjS83 ]T_Bp&yʇ$مUFF1k?NkǪmni#CK$O ̇S Quj1ODopIly yaߟ)re%y DiK Bbϭ#HvAEn0StGɦK,eb:3d*1hΥ}R]W^O"L.qVgQvǖU 'YBPMr{!"[EoFLA/+8hzӵř]8ʺHT;Z]3 jl3iPaC9/t[tFfXHO;SY!ɻs] \TVgi~|E;7{2^W:^rP,]nR9 UvxQlKXy@R.ĻVLAvy~!Ku$݊~02Ӥ~͚[Du<ʭO:;W!v 8>W"1/:8QְZ*r/q@O姰x´|ǻnZxm(iӓ{rI 0c-} VZm- [C^Jm~S2Om`ocю/77K)s#*m6(j>W}Y㣣2%ѳ, 1~@鷎 J`+2`ff$v aPAM(U%Ă8}EeSqnOtg#"O| uBe҄#G)1| ʁ_'DE]!4Af@Nd`?xU?jۚ5 PP;e"*^kjP9עe*WB2#tKU8m/tj7.Faed"EV" hwoU [wACVӬ(`~\Xn5"wD޴2DZs^uc[waǞƲO+~>{e^2By3P <ń׽wRoSeriٞr[@٦ %НɄ~\0?FY/:ߊli4k%9sB: 5 iV0.(O1C1o_BQ]^K⺔ $vyƽdfBe?d+j2ESW hω+@v@ q 6%Eapvq~xǗU I w $M-h#_AQB.,Ji9&>df:JH4q3O9U]yw dLy\$pz. 7ic1 ci ݠOZxoIP? \{NK$v@gFTǜI*L\.@g4f\[jq!(3n3iUoE_8̾ * 4Fc! qV"8X_NVߚ2R] kZ-C1Qj }nJ*zfko59KN;Wѣ6/|Q:Ns(Ono6BlSCh떂;> uVؒqzi #;*;4~&Hx/ h mpW9R$D,%'m)W=G>rb[<FjMelQlZ>^%H*Dwv/9eCMab!T# E+HD:<y }ͥ[ʊ0 SRƒuJ YBv UM+WXvc&| üaOCԫ!Ilmp)Fa]s"+c7l)8{Wog|Q|vzO6}W( $vcܮf~pғ>Pxc98Un/đ"\"'0ܼWpm]74k&s B":!]<,yC&P[kG>nO/j4X`\!(IpöeE2Uq'Јs1An&O]Vcn=OirX{Qdau P0/CfGAfo-6XYSKaxQOj M\L-JەuTe[SidIķrD (Wj@ C^^6FM궀%Z*h9Jmz(fFAZG`4kp_RJ@T#{ٯ nuFfFD+ojW{Q]=-=̍44Oĵ*z&Nzسt(RAn" !&3QVjٜ֎ [`W!D<7 4|PQ :t\QV%+4XYmTGGlc.ڏGi6G#>$5ȷq{T9Jd[Ljk H,M" qir gOhn;\]wORNfӻkzSs(PQ]aec|;/>UYfZ*7ɗ} W W뎾&}T(ݞ5BvmW.߯@`m{%l@P#$V59/6\~qBzW%/ȈrςPYR/UC-x}$SrMj̶0" O#P aI- 6^BnV EIV{t&For>]UͷAAMtFKpVTG)h>H;n0E4gxv]!rnZRs8*y]YZIY"',TqK!?K$u?>.<|J݈"m(}@elGfU>TG1oF*$J)c 0u e977oٗ1QxYsb7L< v1vw'. LǜWREH4G M\5SK`@ ,cY@?p>w)KhnO 9Fvqx[J XLa*};y^p917SYiѶY?NHAvw]줲NERީZjއw.&/du.3'~Ҍ3 sMy"WP\DŽ8.Bٴ, {B|̴ i֩PyXؐfaxl ڡ{t?S>TQGJ-)ՔQW4drD8 1Z{dF(zZ*5v%$6nr [d,H [ڡ[s4Aʼn[wN:1{= MIŽgƱÐ NQHd%:|pk:;EWq&?GdLXOHf;BqhvDJ\ߢ :slڲ}I)y,Y)dgܾӭW·!FAmV!|x2G WERDtN\[$SL%A5 T;IV`Q0!0` dy{~gH%&so@ePWK:TFn9o%!>Q;J=ZBZ MmPmV0F$?'<YgY4|L/bDaw y q!k.a֘}nXtW1Բ'r YJd^!1.7؏; #Ł%::KB~{ד;0bG=L/{q`$r[-bЌ`l')ia>ZZ:fH[mܖ UYMώm_ֳ!fzܖt+OQP:w% % b戁+.t8bOVCTF@.>ʰ̈́V"-3J^r#^>3hؔ]qN+( BXTkr5b!>BA,<Ƨ`>nNJ74_zM"&%.*)5-PjYz 8lFNy##ŝQJ=`݁ѿNP[1'f\ZrK ܸ $XjdU圻*+*CL`DbƩ6Ӂd>ˆNnT!~gt!1+ N%~A%{TMr{RxQ) \]Ǒ񿞘`"nR^Wb 3l=Ues*c` Ê؆CsDިoQ_F#h d7ERRGn2T5R $o,?lDfc!o1cv9y‡5u .<(ZmCV"+߽Ir(GœD [s'^ 7XosEfhk& Jm=j1t{ ?y9x\S_ji4~ъjn5>!P?ORG 74\ }Vһ1Jvxޮ ba/%$eJ rH(ɭlJjvVKu5]1URLHs9.SD+Kqp$ گY4d&tI߲\ü>ɠ@(s<ɩ׺2Epi`+\4o&6%yߪ?7Y_(Qbwa 5Utf?6z^C(N> "WT~mgٞ VR6wgLڣK!wlLwAOƄ*4A)0}qĂ}6<(+QŽYQ MP[Pq*%㏽ Ff7,ݖB+6[Oy<~s.Um>B|c[ k𓙬OXD7S;Ul}Ep9+%e^: D#QpxGVR[oKph1?&.<}Y)B0yMWm;Y U$f hF3>~S ?Y!FAZڳmI,Zru+tZ}zm ^8g&eDрݥ T}Z2tZˮGV505Oj!XҚGgoFQ|ѫ԰ֱH2'%? ;Oy}K̈́QwkGq:E1]sSo&u6ZgYB4rƣK̳J?tm"˕.+ ,n ̹w˹—TXR8j__E{iV}͑zyJ9<<#$rsLv~]f g`a.L WH1++G*ݯQP2MOHqX*_9gu"!_\bF̂= ȇLOqM㨒з8" ^LF9~)r}e ^Yvt87/WH֡s.y{{/Ws8ʿ>^Jh"uń] G[]_ԗ2zJ.Ť@"c=%J_~&|M&7G+ nM B59fU%q1w`PJ>|^NUy${_CǠu@udCL.=`wmR|}p+o3>?c^j>U-X}ka ЄKEdb_iIS>T䲡} cpW2}dJ F1% y"WdK4/YRʿ -۵ri4A1޶2.{nO2Cw7F 2YX&ܳmX(˚Vx{1-+售q\—n)j.twl M,lXmٌ~SUGH$ÃyR\=$o>੆Ƚ6=]i!W[7«i![2҃f#!p,QdS ~ FCIGac}|,XEFHKmJ t,d$yM]zA#0K#uxg{.9qMKeμe#B '_ # b?;ROqݗD}cYƦ6D@ZiFvt?4f2Sn.*4n{HFD@z`VNi{$h7)L6鐐lJjABp9MY,<,<6sBjec BQ1hIɃNɨzw/ `Ԏ>["!Yk/)RƂO2H"5j޸*HpiM:{> &s~kMo6giCbº9FZ} } ЙnTl%8>qtrk1+.o7=pG*T--6jt\9!8o>_ʖX]s7½2ӡ/# ٵBD뻋FD $IB|Vw'm2 :a0eI߯gMG_]@k7)«2?(,(ݼPc"L<4Qf8EBJGj*3k6ߍ͐ 5w: z{ļum@O.ord щxvb񵦭3rWwU=e`B6נ'a筗CYY=:a.aޘLs(^Xo' tcnC۸ӑخxw[qC^ljjryBlknLhmڡ^PFfWҥ`U0j̦~\1{&; *5?-12z A%.%7{h,.@C;K;17¡jL&H5;~!BSN1(?$ᷜzG/ڷR;XS/LrJ,$>0k 3Ϊ'tmgK [xJ1`h1]ba__M:~+k$G"9$0"E:H<8o|bQb3? ~{-&>tadKZJt2%ѳ-.3F}JJYjnyb!iPTըO[y:3پʯ ܂XD-R7tF;'{\>t~-v̚SBg ;sx|~RF1|^'LD6N^4S =xZDfzHEn"G/񰞛FĈ aj)G?ĄоB QXG3ɚEf;$Ï)Yx`Ѩf &L[ Y@P w&BZnGAkƟnK~?O0c24jN˓U%:] 5 3;r.g[ }8C;{R^f11'AŚ"VV@bqpkz!80inv^7yV؈/qV ݺT Qn_c7 8OG3a9 Q|+:WoD k9U R$R;Ш?v:11{Ga  تW. >Q/gǷܢe,〪cVdLNڐ}ZdiG윝CV5!J$Ne^5h Yn 1nj$~~:WԝZdujm3#"6cB_6c㡥 { T&.YR'W!sݰl@1^=.Tn `Z8&RP2HsmfkZCZ(i8cr(4<+Z즭'|HBq<S],Sѿ=:UՏTM$nO M̗v4+n%);ނhڻSȏ;x .|(5*M3ԉc=\đbtvWa5~FWF 9LBA-W)i[5IKP(fVVy=]6-"86muq/'-,wo Rəjlv2 >y^|$yit̷+T PuyMd>Z(ޥS>6%DNie4y, lM+hz(t a8G kwKK)Ձj/_@gFn@iˢ 9 +o4hLUDu5R\L)ܷvJ+շJd N2w橕ʥ;>#gz#GYy)CR| (d 2g˃l2ӯ~v=Y?P\F:.M) V?cxlOnyd  ؓKM:S&v""3Xj GnA#;;a'¹hF" <3/@_G8X gjBm`H+^YpCf(%d &FqHԿ'v5HnT# Wq<&"2O˵xmw,,Pa5K |G$6 :Ws؋۔(z~QɰXf Й3"fوpYb2 7QH~?ˣ L&vr== dB$u5]l2UApӃͪ~y0Bx'FFlO%$[k6uIQ{Hf  g7xA諢C.>Nh͋Wu  :9wmtPX4@W.$j2ñҤg}vጫq-5`d]ݎAi7"5$GS"gL9@+'U*afng!}mw%ŧ5dTD Slm|TXgnG-$3xW3t޻|+8(BNqbfĽJE yg;}:䚉p֜StC(e= aG/O.7[*@b_ 8VEЉ>k5 ;9bmїp% cG`n v7/zӆ2͂ ?_-/p1,O?4:bd{+݉}c=i;[MtTe䗞#;T^xxhWGa> ۦىaAg`pG5dym9g{OKC,|Uy/,ܠ7XhRppWUՕ-;r-7,BmfQ%2 G̖vȲZ$y t#nS?w_`ֵWyVNo.K5N+(=sMsSܖ Zz j.rzOP6rysTT MB&[oGQYȥ9"Ǵ!Wq9ϱ0qf ,ڠٕcm ]}̌"82R4zqk:]+ؓW~zSKX_P{PߺP QF I8sR>?#W3'z߿}Ѥ+]^2v!]*Q =Kߐ Y|X8m!SMNB s|v::"eQHQ #M2䬭c`dmp`g6p릐aNۉbsicZ$ Π{ܗȸXbD]hd2Y&] ؕ+3 J7j\lB!~MH zǁ` GAC++4 WIVSeʃ+1H|K6Pk\bc^ܮ$͏#͏`6\Y&Z\xq{ ͶXĮ̿}ɅN;: j/ aГkQܓ(L&;گ3S4*m/|46@ eE3x_y:2fɑs- G4 Κޗ] nǘW,[Yht :^ DSŗo^ gg &02xyd @YT \fs|ŴXCXTgCFю̉ijoJH'ze۫'Wc6%&Ot|6q)$MܵJf=M戩Ej"K]M~$/ %Ģ/!A0"7hJ5@F䃗2*CUmS#W[I0H1J"bבñiDS;E>WwLJ%ONj7jkeJAS`Y0,PS;!ޚ bI7 bM(;WAG9y8ɖ:p:ITt4QQ6ܑt"lw߅^Spd"rֹ*#W"QAiAܴTV` W/<>G~YD߮#lLԓGɉ,V׸[8hJ>.j! šO@2F)30Ggv$ L9B}K,_P<G rHn^gC\V韝ųtSbs|ePelvN9Ւ 16QM>Sa&uyj" &OFi15ɽJ Őm"bo.dF̓M4@omC#9Nr7sb-gCѡ?^Cf hK?$,ԚYdM6#%>A$6mo= GTm6/>$Āzx H8rf}ŐUm@wٯEMD/8-t>q/CڜFfӌ.9(*u".1zϔfjxUod&Q<|"Dt₃ke W?^c VcXjt^NGB&.bT" Go*2!qLEi+)<5ШeO@ad@X 6f.­{%n_6&4g/w.#[zj4:,t4rODix6h$p>*u1}J"p O9x!ğMHnM/ޮۙBP̓waNz &2r^0(|~fOz-8(wNzw+'QABMr,U]Ǥ Tq}zϏ#rZ3&ZQaBM!;}%Y?!r} 2uÕ0ELv9\+B#1oDL K@ngܗ[cσ4 6@I0;!D_ QWWg(:xx|ݮ+ ^v L3L,A'udcaO|]VE1iL%nG:rA8K(z?a^ok 7<»S`~Ht+$f4\X<66Nå1 MC?Se˪Gq~ـ9ЉiqfRҶXnW^T04l[쭳PػhdhڠDl)_>kgeP)пzäGEo g?!RA2 w'Ww"ΩnՅn?=HUUW,mo>Wn,o+uxCV:1gq;R/yvzI4z&&! v;^ykU|C\>3h?µ]^zk KM/³AR*G3'S:J/IdG'?IplsE28˚ac(Ju^)1v[ƸO[""z ՟ѲϞ&9!EwO=[R;*HǦ44Pм2:\(ڊq.W1F'/r`WNϖsȐrܦYE٬(':EoQQfq?'FLeb-F󩸲[ `/`b6D8|n N @5Q\n1gx7>'meI<*Wt ifR2#x: vHO Le^Qhf4 #Y4B/kvcNƛj|ée ^*I**i*z.ۓVk|c5Z;8Fc G:IZ狾~#{ڮ-M Y,Pvmjh~ bS%;k¿ITP6EĽ=KvwN XX پ4FSG0[˒H# Iȃ9M*S%H,xEhiw&5yI8Z\ }ѿQqNLRퟢk7ƽ|P}RclV4c͒KɂD5#n[ ҡ]>RC~B$q!PP^}4DF9z,\zjw.CD4ӲNڭN{{;`v"c WuD!ɓ:PU[BvVx=uuR7Y=Ix /Ojd²ge:^u c Aics)6|%m ,x<,^tmZbDÙ,XB #X|,~ ޘ [~"g%3 TP] 'L90 Kν0ú ~UjF:X_]Q2r|:V]o]EU?])1JPn$jȸ9{L.oOĎW2@Wd"8O? s8 yt.8 a =+q$r6>>]^(&tJ-[* *szSz߲~.pPgCq$6c f3xaO=BnItFS",r2_;ۢLA9p'#1 %q21h'&1//7ɂ覀.vQ'5Ԙi!h/@~R5,}si[#0M_OKHFNKYt xbTD8t\m* 4-˵APT| *Lυ 8!fw_fЖǀ6U^m-8.A%DmUh{׏{y_eO;?S7*Tꁴz BxZS𙸤Y+4jj&6(Ari-%EhoR<[!$1wWYЯ*2d;iyU䪯/5+qB%z*F1X9\d|}M!Wlk|7ԥ&Z/Q+hؑQ&:hgҞU؟=Xg~VⰑ%TzuT9ՠV*}RxA9rk_U^:Q=O@Vr>l[X u\Fqk͸fL){ߑw׊bTɉM)f 1JhFt.멢}C* vR!+ӧ֋!OH -UŻΜv -A+<QEsKv8|2pzIOBci]qˈ?6;-U9xWCGy|jR. 4c^Z,aHۇ{u(QMA;bjq]A/< ; <+8Wz|O͹Rh\^7F2uXbj-8E`SXbw)㟼OkI-sx@϶yIhs_*J{cZ<_Z䳧9&m)ڨ!EO"M瞇qX:- &ɫ;\JA}7YS pe)W77L#o{^Yx]2`m7CGrbHɝO 3Ņx-D4Dޖnd +fP^x`y! AOZωgT*| {Ĵwk` bca0HeXe%(_'8Im[xCCtuPʑfF# A/p~Z __hDX%rŴ0rpyu,Q8GbϠG$IVR(1!]c4L]лue(q%?\ Zb0/nQ_idŧ)EE֊YyRނ5 hH;d~X3~O8`nBqnE&Ae[ZUmkvNEJq8~J{=O͔g&U<ًUSWuȤ;I՜ N-BH1{6<$8Q=oeR}3 u Lf^geJYs1b>?qR4B93TBğUMWڌY:mz/ڌV6RAnVO޽=N.$ DS/ }`)?'Yj+{i ޡGjJsʱ7*DbzW 9^\e0$lU 8AQ:Aq#UqD9hTg mRG7'~ \j/@sf9_w*SB3UPv)Ե_xGP5q4LcS[ڷŠLa=TOODQUOA*H7Vj.]-XJyxiѮ'/T0Yd\'}?5P9Ba+ZÐVX?L rmK /Gs])=jNp[Zh1t.i<ߏyw he\osnIWM:r5ⱉmboLRDAm!Ӹ f㝃ܴ"_,ؽ>dKBb;9 Oi߁^JV=B (vmiZK @.ؘf1Z9,'DҫJz%pntR6R4 /4Z>AߪlI3DQ:(Dx< ۉ_׿8W ]|_=p5Y.. |#{wix92sw ׅ-[k!j?` mW+#M8Xo[6Uµe>gRf\C@6⧄Q)-ݭsx[)֏M:!:`l| ,`T'Cq+C*S=-6k_D!=L Ŷ*#\!-٭$uu}ICRr$ aFWU-\(oXo/-&B ծ@"ӧBD=$|^œv ]cS:#:^ ZYX!1rbE:'aEsͳq\Q8zN|݇hf#|)^AGGP`cc Ћ]ّ/JϾ$1YX@gU~Eoq>UڃaW^a+iXđ(toa涫WgmjzFp_SFOCj0XyYJJ]K >{֨#0k g[yAH->[^s9 6w7 jȕs$CtRz|kv3Nnh,8_vԟ>㓆zf|/_}p7$\ #rFodCrg#e{ՆTT#'c޷@5鑿Ja7h x`+UJ;Smߋbn^p@N{ਖB»2Ay 'vPAd/?5֫q#~PjgkBxR<ʮpzeu(}RD/B]mW {we0cc]a Y}~n&=#9r"֊rKr7tF" @VUd6R :-g#|xݡ7M Ȅw߄fYP.F$) |Rj? D!-m)_6Zܧ"vv<ZzN۹zF;l˝M)b di _Gb:6!]8yP-=F23jT)m0G`SWl'woI^ DXqsEо`r%- 9 :Q!f3WjI1gdӿk8HPaz"FCi-fu=wțgJNP9ilGzޱ]Q~}[>x;p#zoW)#CuiL#|K9ٷeeIH5mq-j{ǩ >WU5<u9JwJ# #]2 ,{8ڢ*LMAj6>Q@8j"a;62@4T=×bǠ+k,*@eZ!䰀7G5Z}&km\тHOoj tED${jȽ3y %m6~Ø:}bReG.VUP4"bQhՑC^In+g&a)0`5.$ k:41 x9IA>+ 6@Wz$ <gF1: ¤5Ș옢)htK#U ONf 9,}2|b6eb\)F*2ϛ4xs hgs؛ .a^W胦J;٬'wucTalpDhzU+ϊ\ Iyu^T[jPtB ԭ2eHўuݠ0!:DB++Bü6%{ 5cuX>5N*4Cze&2*.&[bab/i>n]*55dp9Ya Z< qyp7e(S"y.(a2 *o $lua‹e;!V .'HC"ہ9-HΛ`Ut~= $j*oZU sʼ5\z(HzݼeQs~^T&kSkOrlQs+S*~wR6R4IҴv"'(QsðxVjsOi$`ըe>Xq,cDg|VỊ́?Z,H' v:<ʶbƔ2!k kL'u!2=EWaCկu-sV/3fOl!. WK8qT=4p=0K$mq4ؖbAr$\cV8QGNZWe=mGv񁸚 n'GW^Aۆo%4 X7`7GW#/gb2#?[mji?wx1u,;JmyDB"'7+o|{0mO5(mЊm 6NжdIc&p[p87qn3GY?K>4v 9y?и{0)m E["TӼ^ŭ@f{H_0'I~dK3oaa? Ml9*me<ҝ>įwLnOraʯ77NT$ xۛ?Ҫ:"A`9h˚91:Mk1 ղ %1; lZOm([vBT,* OO.sުAlC=R:_D#%0Ԅ.Æ  -dTO%cȒ,lQOV)d%ϧ2ZmQ>#̼6R9mIćRB?Cr5}h%}B Y5 u ᵱa%TOmJQ^?7ґ/ׂf½ a*AV61&ǍGT'P ܀ܨUIHV9ݜq1wGm "EI YZ