libns1604-32bit-9.16.6-lp152.14.3.1 4>$  Ap_ /=„7Sۧ)@ѹ'Ɨި#(Zm"}'=1X:J"t踠7VG6I_X5偊V&`G 4`ɑ 4)Ea4$i{|6M½ރPܣ&V7Bv[9Gw7 jL9F |luڋۄ;sbҳy4/suMt!̲s-d?!ODhc]' u2VAZgr)$3q]3NK12fed5a831a28715a1a183b0e77902a76f05e055fb6cba5e192984e90d2f37518fa0c03bdf900a91545ce7d89d90bb20469191cdg_ /=„s&㫄&CYSjW+f{ I8zM=k G$DKi`243G3U*Iv=Zi9 ]@Rt% s31\Ϧ dx"Cࠕ`E,s5Q//0D1ڛ6r?ϬB1 o>cƹbЮߓ^h~/rN}v$F]:LUjmkԿ5-PA>tUm-0`mp>?d & E $+<D H L T  ,t(8W9dW: EW>eGpHxIXY\]^bcd:e?fBlDuXv`wxy<@FClibns1604-32bit9.16.6lp152.14.3.1NS shared library used by BINDThis library contains miscellaneous utility function used by the BIND server and utilities._cloud135topenSUSE Leap 15.2openSUSEMPL-2.0http://bugs.opensuse.orgSystem/Librarieshttp://isc.org/sw/bind/linuxx86_64/sbin/ldconfigt__0fc0866a837479eed1814a7100a0bad61ccb5d45fe189e864fdd4e0664f47930libns.so.1604.0.1rootrootrootrootbind-9.16.6-lp152.14.3.1.src.rpmlibns.so.1604libns1604-32bitlibns1604-32bit(x86-32)@@@@@@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libdns.so.1605libisc.so.1606libpthread.so.0libpthread.so.0(GLIBC_2.0)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1_d@_`_R,@_H_;_+_^)@^W@^@^I^v^t@^t@^Q^Nt^@]@]X](v@\\U@[#@[?Y[,[[{@[{@[ZnZ@ZZZz@Zg#Z'Z[@Z@ZfZ@Z@Z@Z@Z@Z ,@Z Z @YzYm@Yh@YZ1YV=@Y /X@X7@XBXwoXW_@WbW@V@VV@VvVwVVBU@UUSJosef Möllers Reinhard Max Dominique Leuenberger Josef Möllers Josef Möllers Josef Möllers Josef Möllers Josef Möllers Josef Möllers Josef Möllers Thorsten Kukuk Thorsten Kukuk Josef Möllers Tomáš Chvátal Josef Möllers Josef Möllers Josef Möllers Josef Möllers matthias.gerstner@suse.comNavin Kukreja Franck Bui Christophe Giboudeaux kukuk@suse.dekukuk@suse.denavin.kukreja@suse.comnavin.kukreja@suse.comnavin.kukreja@suse.comscabrero@suse.denavin.kukreja@suse.comnavin.kukreja@suse.comsweet_f_a@gmx.debwiedemann@suse.comnavin.kukreja@suse.comnavin.kukreja@suse.comvcizek@suse.commeissner@suse.comrbrown@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.commpluskal@suse.commeissner@suse.comjcnengel@gmail.commeissner@suse.comdimstar@opensuse.orgsflees@suse.dedimstar@opensuse.orgkukuk@suse.dekukuk@suse.comnavin.kukreja@suse.comsflees@suse.depsimons@suse.compsimons@suse.commax@suse.comlnussel@suse.demax@suse.combwiedemann@suse.comcrrodriguez@opensuse.orgmax@suse.commax@suse.comjengelh@inai.demeissner@suse.comlmuelle@suse.comlmuelle@suse.comhguo@suse.comlmuelle@suse.comlmuelle@suse.comhguo@suse.comdvaleev@suse.comjengelh@inai.dejengelh@inai.delmuelle@suse.comjengelh@inai.deLed lmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comdimstar@opensuse.org- Removed "-r /dev/urandom" from all invocations of rndc-confgen (init/named system/lwresd.init system/named.init in vendor-files) as this option is deprecated and causes rndc-confgen to fail. [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]- /usr/bin/genDDNSkey: Removing the use of the -r option in the call of /usr/sbin/dnssec-keygen as BIND now uses the random number functions provided by the crypto library (i.e., OpenSSL or a PKCS#11 provider) as a source of randomness rather than /dev/random. Therefore the -r command line option no longer has any effect on dnssec-keygen. Leaving the option in genDDNSkey as to not break compatibility. Patch provided by Stefan Eisenwiener. [bsc#1171313, vendor-files.tar.bz2]- Put libns into a separate subpackage to avoid file conflicts in the libisc subpackage due to different sonums (bsc#1176092).- Require /sbin/start_daemon: both init scripts, the one used in systemd context as well as legacy sysv, make use of start_daemon.- Upgrade to version 9.16.6 Fixes five vilnerabilities: 5481. [security] "update-policy" rules of type "subdomain" were incorrectly treated as "zonesub" rules, which allowed keys used in "subdomain" rules to update names outside of the specified subdomains. The problem was fixed by making sure "subdomain" rules are again processed as described in the ARM. (CVE-2020-8624) [GL #2055] 5480. [security] When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. (CVE-2020-8623) [GL #2037] 5479. [security] named could crash in certain query resolution scenarios where QNAME minimization and forwarding were both enabled. (CVE-2020-8621) [GL #1997] 5478. [security] It was possible to trigger an assertion failure by sending a specially crafted large TCP DNS message. (CVE-2020-8620) [GL #1996] 5476. [security] It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. (CVE-2020-8622) [GL #2028] For the less severe bugs fixed, see the CHANGES file. [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621, CVE-2020-8620, CVE-2020-8622]- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in /etc/sysconfig/named to suppress warning message re missing file. [vendor-files.tar.bz2, bsc#1173983]- Upgrade to version bind-9.16.5 * The "primary" and "secondary" keywords, when used as parameters for "check-names", were not processed correctly and were being ignored. * 'rndc dnstap -roll ' did not limit the number of saved files to . * Add 'rndc dnssec -status' command. * Addressed a couple of situations where named could crash For the full list, see the CHANGES file in the source RPM.- Changed /var/lib/named to owner root:named and perms rwxrwxr-t so that named, being a/the only member of the "named" group has full r/w access yet cannot change directories owned by root in the case of a compromized named. [bsc#1173307, bind-chrootenv.conf]- Upgrade to version bind-9.16.4 Fixing two security problems: * It was possible to trigger an INSIST when determining whether a record would fit into a TCP message buffer. (CVE-2020-8618) * It was possible to trigger an INSIST in lib/dns/rbtdb.c:new_reference() with a particular zone content and query patterns. (CVE-2020-8619) Also the following functional changes: * Reject DS records at the zone apex when loading master files. Log but otherwise ignore attempts to add DS records at the zone apex via UPDATE. * The default value of "max-stale-ttl" has been changed from 1 week to 12 hours. * Zone timers are now exported via statistics channel. Thanks to Paul Frieden, Verizon Media. Added support for idn2 to spec file (Thanks to Holger Bruenjes ). More internal changes see the CHANGES file in the source RPM This update obsoletes Makefile.in.diff [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff bind.spec]- Upgrade to version bind-9.16.3 Fixing two security problems: * Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. (CVE-2020-8616) * Replaying a TSIG BADTIME response as a request could trigger an assertion failure. (CVE-2020-8617) Also * Add engine support to OpenSSL EdDSA implementation. * Add engine support to OpenSSL ECDSA implementation. * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0. * Warn about AXFR streams with inconsistent message IDs. * Make ISC rwlock implementation the default again. For more see CHANGS file in source RPM. [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]- bind needs an accurate clock, so wait for the time-sync.target to be reached before starting bind. [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]- Use sysusers.d to create named user - Have only one package creating the user- coreutils are not used in %post, remove Requires. - Use systemd_ordering instead of hard requiring systemd- Upgrade to version 9.16.1 * UDP network ports used for listening can no longer simultaneously be used for sending traffic. * The system-provided POSIX Threads read-write lock implementation is now used by default instead of the native BIND 9 implementation. * Fixed re-signing issues with inline zones which resulted in records being re-signed late or not at all. [bind-9.16.1.tar.xz]- Update download urls - Do not enable geoip on old distros, the geoip db was shut down so we need to use geoip2 everywhere- Upgrade to version 9.16.0 Major upgrade, see https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html and CHANGES file in the source tree. Major functional change: * What was set with --with-tuning=large option in older BIND9 versions is now a default, and a --with-tuning=small option was added for small (e.g. OpenWRT) systems. * A new "dnssec-policy" option has been added to named.conf to implement a key and signing policy (KASP) for zones. * The command (and manpage) bind9-config have been dropped as the BIND 9 libraries are now purely internal. No patches became obsolete through the upgrade. [bind-9.16.0.tar.xz]- Upgrade to bind-9.14.9 bug fixes and feature improvements- Upgrade to version 9.14.8: * Set a limit on the number of concurrently served pipelined TCP queries. * Some other bug fixing, see CHANGES file. [CVE-2019-6477, bsc#1157051]- Upgrade to version 9.14.7 * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0, queryperf, sdb, zkt from contrib as they are not supported any more * Added support for the GeoIP2 API from MaxMind * See CHANGES file in the source RPM. * obsoletes bind-CVE-2018-5745.patch (bsc#1126068) * obsoletes bind-CVE-2019-6465.patch (bsc#1126069) * obsoletes bind-CVE-2018-5743.patch (bsc#1133185) * obsoletes bind-CVE-2019-6471.patch (bsc#1138687) [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185, bsc#1138687, CVE-2019-6476, CVE-2019-6475, CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465, CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738, CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136, configure.in.diff, bind-99-libidn.patch, perl-path.diff, bind-sdb-ldap.patch, bind-CVE-2017-3145.patch, bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch, bind-fix-fips.patch, bind-CVE-2018-5745.patch, bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch, bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700, bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468, bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330, bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505, bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583, bnc#1127583, bnc#1109160]- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add FIPS patch back into bind (bsc#1128220) - File: bind-fix-fips.patch- Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367 bsc#1118368)- Update named.root. One of the root servers IP has changed. - Install the LICENSE file.- Add bind.conf and bind-chrootenv.conf to install the default files in /var/lib/named and create chroot environment on systems using transactional-updates [bsc#1100369] [FATE#325524].- Cleanup pre/post install: remove all old code which was needed to update to SLES8.- Fix a patch error in dnszone-schema file (bsc#901577)- Add SPF records in dnszone-schema file (bsc#901577)- Fix the hostname in ldapdump to be valid (bsc#965748) - Patch file - bind-ldapdump-use-valid-host.patch- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch Fixes dynamic DNS updates against samba and Microsoft DNS servers (bsc#1094236).- Move chroot related files from bind to bind-chrootenv (bsc#1093338)- Remove rndc.key generation from bind.spec file because bind should create it on first boot (bsc#1092283) - Add misisng rndc.key check and generation code is lwresd.init script- build with --enable-filter-aaaa to make it possible to use config option "filter-aaaa-on-v4 yes". Useful to workaround broken websites like netflix which block traffic from certain IPv6 tunnel providers. (bsc#1069633)- Add /dev/urandom to chroot env- Implement systemd init scripts for bind and lwresd (fate#323155)- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)- Use getent when adding user/group - update changelog to mention removed options- license changed to MPL-2.0 according to legal.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add back init scripts, systemd units aren't ready yet- Add python3-bind subpackage to allow python bind interactions- Sync configure options with RH package and remove unused ones * Enable python3 * Enable gssapi * Enable dnssec scripts * Remove no longer recognized --enable-rrl- Drop idnkit from the build, the bind uses libidn since 2007 to run all the resolutions in dig/etc. bsc#1030306 - Add patch to make sure we build against system idn: * bind-99-libidn.patch - Refresh patch: * pie_compile.diff - Remove patches that are unused due to above: * idnkit-powerpc-ltconfig.patch * runidn.diff- drop bind-openssl11.patch (merged upstream)- Remove systemd conditionals as we are not building on sle11 anyway - Force the systemd to be base for the initscript deployment- Bump up version of most of the libraries - Rename the subpackages to match the version updates - Add macros for easier handling of the library package names - Drop more unneeded patches * dns_dynamic_db.patch (upstream)- Update to 9.11.2 release: * Many changes compared to 9.10 see the README file for in-depth listing * For detailed changes with issues see CHANGES file * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137 CVE-3136 CVE-2016-9778 * OpenSSL 1.1 support - Remove support for some old distributions and cleanup the spec file to require only what is really needed - Switch to systemd (bsc#1053808) - Remove german from the postinst messages - Remove patches merged upstream: * bind-CVE-2017-3135.patch * bind-CVE-2017-3142-and-3143.patch - Refresh named.root with another update- Use python3 by default (fate#323526)- bind-openssl11.patch: add a patch for enabling openssl 1.1 support (builds for 1.0 and 1.1 openssl). (bsc#1042635)- Enable JSON statistics- named.root: refreshed from internic to 2017060102 (bsc#1048729)- Run systemctl daemon-reload even when this is not build with systemd support: if installing bind on a systemd service and not reloading systemd daemon, then the service 'named' is not known right after package installation, causing confusion.- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue where an attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]- Fix named init script to dynamically find the location of the openssl engines (boo#1040027).- Add with_systemd define with default off, since we still use init scripts and no systemd units.- Don't require and call insserv if we use systemd- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ * CVE-2017-3135, bsc#1024130 * bind-CVE-2017-3135.patch- Update to latest release in the 9.10.X series * Security fixes in 9.10.4 * Duplicate EDNS COOKIE options in a response could trigger an assertion failure. CVE-2016-2088. [RT #41809] * The resolver could abort with an assertion failure due to improper DNAME handling when parsing fetch reply messages. CVE-2016-1286. [RT #41753] * Malformed control messages can trigger assertions in named and rndc. CVE-2016-1285. [RT #41666] * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure. CVE-2015-8705. [RT #41397] * Specific APL data could trigger an INSIST. CVE-2015-8704. [RT #41396] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. CVE-2015-8461. [RT#40945] * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. CVE-2015-8000. [RT #40987] * For Features and other fixes in 9.10.4 see https://kb.isc.org/article/AA-01380/0/BIND-9.10.4-Release-Notes.html * Description of patch changes * BIND 9.10.4-P5 addresses the security issues described in CVE-2016-9131, CVE-2016-9147 and CVE-2016-9444. [bsc#1018699] * BIND 9.10.4-P4 addresses the security issue described in CVE-2016-8864. * BIND 9.10.4-P3 addresses the security issue described in CVE-2016-2776 and addresses an interoperability issue with ECS clients. * BIND 9.10.4-P2 addresses the security issue described in CVE-2016-2775. * BIND 9.10.4-P1 addresses Windows installation issues, the %z modifier is not supported under Windows and a race condition in the rbt/rbtdb implementation resulting in named exiting due to assertion failures being detected. * Following patches removed, fixed upstream * cve-2016-2776.patch * cve-2016-8864.patch- Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829).- Apply cve-2016-2776.patch to fix CVE-2016-2776 (bsc#1000362).- Remove the start/stop dependency of named and lwresd on remote-fs to break a service dependency cycle (bsc#947483, bsc#963971). - Make /var/lib/named owned by the named user (bsc#908850, bsc#875691). - Call systemd service macros with the full service name.- remove BuildRequire libcap. That is only a legacy library, not actually used for building. libcap-devel pulls in the right one.- Security update 9.10.3-P4: * CVE-2016-1285, bsc#970072: assert failure on input parsing can cause premature exit. * CVE-2016-1286, bsc#970073: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet containing multiple cookie options to cause named to terminate with an assertion failure.- drop a changing timestamp making build reproducible- Build with --with-randomdev=/dev/urandom otherwise libisc will use /dev/random to gather entropy and that might block, short read etc..- Security update 9.10.3-P3: * Specific APL data could trigger an INSIST (CVE-2015-8704, bsc#962189). * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure (CVE-2015-8705, bsc#962190). * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway.- Update to version 9.10.3-P2 to fix a remote denial of service by misparsing incoming responses (CVE-2015-8000, bsc#958861).- Avoid double %setup, it confuses some versions of quilt. - Summary/description update- Update to version 9.10.2-P4 * An incorrect boundary boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. (CVE-2015-5986) [RT #40286] (bsc#944107) * A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. (CVE-2015-5722) [RT #40212] (bsc#944066)- Update to version 9.10.2-P3 Security Fixes * A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #39795] * On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795] Bug Fixes * Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] * Several bugs have been fixed in the RPZ implementation: + Policy zones that did not specifically require recursion could be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. This has been corrected. In most configurations, behavioral changes due to this fix will not be noticeable. [RT #39229] + The server could crash if policy zones were updated (e.g. via rndc reload or an incoming zone transfer) while RPZ processing was still ongoing for an active query. [RT #39415] + On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] + The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] + The server could crash if a reload of an RPZ zone was initiated while another reload of the same zone was already in progress. [RT #39649]- Update to version 9.10.2-P2 - An uninitialized value in validator.c could result in an assertion failure. (CVE-2015-4620) [RT #39795] - Update to version 9.10.2-P1 - Include client-ip rules when logging the number of RPZ rules of each type. [RT #39670] - Addressed further problems with reloading RPZ zones. [RT #39649] - Addressed a regression introduced in change #4121. [RT #39611] - The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] - On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] - A bug in RPZ could cause the server to crash if policy zones were updated while recursion was pending for RPZ processing of an active query. [RT #39415] - Fix a bug in RPZ that could cause some policy zones that did not specifically require recursion to be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. [RT #39229] - Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] - Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't result in a bug during operation. If the read failed, named could segfault. [RT #38559]- Fix inappropriate use of /var/lib/named for locating dynamic-DB plugins. Dynamic-DB plugins are now loaded from %{_libexecdir}/bind, consistent with openSUSE packaging guideline. - Install additional header files which are helpful to the development of dynamic-DB plugins.- Depend on systemd macros and sysvinit on post-12.3 only. - Create empty lwresd.conf at build time. - Reduce file list pre-13.1.- Update to version 9.10.2 - Handle timeout in legacy system test. [RT #38573] - dns_rdata_freestruct could be called on a uninitialised structure when handling a error. [RT #38568] - Addressed valgrind warnings. [RT #38549] - UDP dispatches could use the wrong pseudorandom number generator context. [RT #38578] - Fixed several small bugs in automatic trust anchor management, including a memory leak and a possible loss of key state information. [RT #38458] - 'dnssec-dsfromkey -T 0' failed to add ttl field. [RT #38565] - Revoking a managed trust anchor and supplying an untrusted replacement could cause named to crash with an assertion failure. (CVE-2015-1349) [RT #38344] - Fix a leak of query fetchlock. [RT #38454] - Fix a leak of pthread_mutexattr_t. [RT #38454] - RPZ could send spurious SERVFAILs in response to duplicate queries. [RT #38510] - CDS and CDNSKEY had the wrong attributes. [RT #38491] - adb hash table was not being grown. [RT #38470] - Update bind.keyring - Update baselibs.conf due to updates to libdns160 and libisc148- Enable export libraries to support plugin development. Install DNSSEC root key. Expose new interface for developing dynamic zone database. + dns_dynamic_db.patch- PowerPC can build shared libraries for sure. idnkit-powerpc-ltconfig.patch- Explicitly BuildRequire systemd-rpm-macros since it is used for lwresd %post etc. Then drop pre-12.x material. Remove configure.in.diff2.- Corrections to baselibs.conf- Update to version 9.10.1-P1 - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500); (bnc#908994). The recursion depth limit is configured via the "max-recursion-depth" option, and the query limit via the "max-recursion-queries" option. [RT #37580] - When geoip-directory was reconfigured during named run-time, the previously loaded GeoIP data could remain, potentially causing wrong ACLs to be used or wrong results to be served based on geolocation (CVE-2014-8680). [RT #37720]; (bnc#908995). - Lookups in GeoIP databases that were not loaded could cause an assertion failure (CVE-2014-8680). [RT #37679]; (bnc#908995). - The caching of GeoIP lookups did not always handle address families correctly, potentially resulting in an assertion failure (CVE-2014-8680). [RT #37672]; (bnc#908995).- Convert some hard PreReq to leaner Requires(pre). - Typographical and orthographic fixes to description texts.- Fix bashisms in the createNamedConfInclude script. - Post scripts: remove '-e' option of 'echo' that may be unsupported in some POSIX-compliant shells.- Add openssl engines to the lwresd chroot. - Add /etc/lwresd.conf with attribute ghost to the list of files. - Add /run/lwresd to the list of files of the lwresd package. - Shift /run/named from the chroot sub to the main bind package. - Drop /proc from the chroot as multi CPU systems work fine even without it.- Add a versioned dependency when obsoleting packages.- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Fix gssapi_krb configure time header detection.- Update root zone (dated Nov 5, 2014).- Update to version 9.10.1 - This release addresses the security flaws described in CVE-2014-3214 and CVE-2014-3859. - Update to version 9.10.0 - DNS Response-rate limiting (DNS RRL), which blunts the impact of reflection and amplification attacks, is always compiled in and no longer requires a compile-time option to enable it. - An experimental "Source Identity Token" (SIT) EDNS option is now available. - A new zone file format, "map", stores zone data in a format that can be mapped directly into memory, allowing significantly faster zone loading. - "delv" (domain entity lookup and validation) is a new tool with dig-like semantics for looking up DNS data and performing internal DNSSEC validation. - Improved EDNS(0) processing for better resolver performance and reliability over slow or lossy connections. - Substantial improvement in response-policy zone (RPZ) performance. Up to 32 response-policy zones can be configured with minimal performance loss. - To improve recursive resolver performance, cache records which are still being requested by clients can now be automatically refreshed from the authoritative server before they expire, reducing or eliminating the time window in which no answer is available in the cache. - New "rpz-client-ip" triggers and drop policies allowing response policies based on the IP address of the client. - ACLs can now be specified based on geographic location using the MaxMind GeoIP databases. Use "configure --with-geoip" to enable. - Zone data can now be shared between views, allowing multiple views to serve the same zones authoritatively without storing multiple copies in memory. - New XML schema (version 3) for the statistics channel includes many new statistics and uses a flattened XML tree for faster parsing. The older schema is now deprecated. - A new stylesheet, based on the Google Charts API, displays XML statistics in charts and graphs on javascript-enabled browsers. - The statistics channel can now provide data in JSON format as well as XML. - New stats counters track TCP and UDP queries received per zone, and EDNS options received in total. - The internal and export versions of the BIND libraries (libisc, libdns, etc) have been unified so that external library clients can use the same libraries as BIND itself. - A new compile-time option, "configure --enable-native-pkcs11", allows BIND 9 cryptography functions to use the PKCS#11 API natively, so that BIND can drive a cryptographic hardware service module (HSM) directly instead of using a modified OpenSSL as an intermediary. - The new "max-zone-ttl" option enforces maximum TTLs for zones. This can simplify the process of rolling DNSSEC keys by guaranteeing that cached signatures will have expired within the specified amount of time. - "dig +subnet" sends an EDNS CLIENT-SUBNET option when querying. - "dig +expire" sends an EDNS EXPIRE option when querying. - New "dnssec-coverage" tool to check DNSSEC key coverage for a zone and report if a lapse in signing coverage has been inadvertently scheduled. - Signing algorithm flexibility and other improvements for the "rndc" control channel. - "named-checkzone" and "named-compilezone" can now read journal files, allowing them to process dynamic zones. - Multiple DLZ databases can now be configured. Individual zones can be configured to be served from a specific DLZ database. DLZ databases now serve zones of type "master" and "redirect". - "rndc zonestatus" reports information about a specified zone. - "named" now listens on IPv6 as well as IPv4 interfaces by default. - "named" now preserves the capitalization of names when responding to queries. - new "dnssec-importkey" command allows the use of offline DNSSEC keys with automatic DNSKEY management. - New "named-rrchecker" tool to verify the syntactic correctness of individual resource records. - When re-signing a zone, the new "dnssec-signzone -Q" option drops signatures from keys that are still published but are no longer active. - "named-checkconf -px" will print the contents of configuration files with the shared secrets obscured, making it easier to share configuration (e.g. when submitting a bug report) without revealing private information. - "rndc scan" causes named to re-scan network interfaces for changes in local addresses. - On operating systems with support for routing sockets, network interfaces are re-scanned automatically whenever they change. - "tsig-keygen" is now available as an alternate command name to use for "ddns-confgen". - Update to version 9.9.6 New Features - Support for CAA record types, as described in RFC 6844 "DNS Certification Authority Authorization (CAA) Resource Record", was added. [RT#36625] [RT #36737] - Disallow "request-ixfr" from being specified in zone statements where it is not valid (it is only valid for slave and redirect zones) [RT #36608] - Support for CDS and CDNSKEY resource record types was added. For details see the proposed Informational Internet-Draft "Automating DNSSEC Delegation Trust Maintenance" at http://tools.ietf.org/html/draft-ietf-dnsop-delegation-trust-maintainance-14. [RT #36333] - Added version printing options to various BIND utilities. [RT #26057] [RT #10686] - Added a "no-case-compress" ACL, which causes named to use case-insensitive compression (disabling change #3645) for specified clients. (This is useful when dealing with broken client implementations that use case-sensitive name comparisons, rejecting responses that fail to match the capitalization of the query that was sent.) [RT #35300] Feature Changes - Adds RPZ SOA to the additional section of responses to clearly indicate the use of RPZ in a manner that is intended to avoid causing issues for downstream resolvers and forwarders [RT #36507] - rndc now gives distinct error messages when an unqualified zone name matches multiple views vs. matching no views [RT #36691] - Improves the accuracy of dig's reported round trip times. [RT #36611] - When an SPF record exists in a zone but no equivalent TXT record does, a warning will be issued. The warning for the reverse condition is no longer issued. See the check-spf option in the documentation for details. [RT #36210] - "named" will now log explicitly when using rndc.key to configure command channel. [RT #35316] - The default setting for the -U option (setting the number of UDP listeners per interface) has been adjusted to improve performance. [RT #35417] - Aging of smoothed round-trip time measurements is now limited to no more than once per second, to improve accuracy in selecting the best name server. [RT #32909] - DNSSEC keys that have been marked active but have no publication date are no longer presumed to be publishable. [RT #35063] Bug Fixes - The Makefile in bin/python was changed to work around a bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993] (**) - Corrected bugs in the handling of wildcard records by the DNSSEC validator: invalid wildcard expansions could be treated as valid if signed, and valid wildcard expansions in NSEC3 opt-out ranges had the AD bit set incorrectly in responses. [RT #37093] [RT #37072] - When resigning, dnssec-signzone was removing all signatures from delegation nodes. It now retains DS and (if applicable) NSEC signatures. [RT #36946] - The AD flag was being set inappopriately on RPZ responses. [RT #36833] - Updates the URI record type to current draft standard, draft-faltstrom-uri-08, and allows the value field to be zero length [RT #36642] [RT #36737] - RRSIG sets that were not loaded in a single transaction at start up were not being correctly added to re-signing heaps. [RT #36302] - Setting '-t aaaa' in .digrc had unintended side-effects. [RT #36452] - A race condition could cause a crash in isc_event_free during shutdown. [RT #36720] - Addresses a race condition issue in dispatch. [RT #36731] - acl elements could be miscounted, causing a crash while loading a config [RT #36675] - Corrects a deadlock between view.c and adb.c. [RT #36341] - liblwres wasn't properly handling link-local addresses in nameserver clauses in resolv.conf. [RT #36039] - Buffers in isc_print_vsnprintf were not properly initialized leading to potential overflows when printing out quad values. [RT #36505] - Don't call qsort() with a null pointer, and disable the GCC 4.9 "delete null pointer check" optimizer option. This fixes problems when using GNU GCC 4.9.0 where its compiler code optimizations may cause crashes in BIND. For more information, see the operational advisory at https://kb.isc.org/article/AA-01167/. [RT #35968] - Fixed a bug that could cause repeated resigning of records in dynamically signed zones. [RT #35273] - Fixed a bug that could cause an assertion failure after forwarding was disabled. [RT #35979] - Fixed a bug that caused SERVFAILs when using RPZ on a system configured as a forwarder. [RT #36060] - Worked around a limitation in Solaris's /dev/poll implementation that could cause named to fail to start when configured to use more sockets than the system could accomodate. [RT #35878] - Remove merged rpz2+rl-9.9.5.patch and obsoleted rpz2+rl-9.9.5.patch - Removed pid-path.diff patch as /run/{named,lwresd}/ are used by default. - Update baselibs.conf (added libirs and library interface version updates).- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify./bin/sh9.16.6-lp152.14.3.19.16.6-lp152.14.3.1libns.so.1604libns.so.1604.0.1/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14530/openSUSE_Leap_15.2_Update/2cbab5e66bca4b0e0b6224b994202c97-bind.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=02620f75c33aa4c1005fc1be5d6f068417bf09fe, strippedPR RRRRRRR R R R RRutf-8162b36696e0baa301148d2e355915d13222afdeac0d647701614003213db03f8? 7zXZ !t/UK] cr$x#J$DS`RTZ7$vf5sn:x^L#Es%IvofĖ]SgfI ?׭9NJ\ i(6+ZEm&s | wb6{A Y]H˸tll"X>3è#!o2o^T7eKxmߜH;-ީaH7&g'&s. y/m@XW-h Q~ v;I rfiELjML}鶡d'@a"mTt[Hc 1sg` B`4"aQ%Y}ށܮdi+Ͽq 00&9Kdq ֎YѴ͏cڷiE ~F'¡F+ Z@uU@R!l@b"i٩&DuQ1xwĶWJ>o" ~ʧ]:m ~ൟ_vdq@jdph #($`|0D}H/P}06FbfqQ)5KnA~_=kōuk6y  l̝sSdl'g8BT cσ7^Yzj<9x&âNqйOm{J+?2 }(09!lPwFC#t9 Luc_Ħn[{1њFF4(証6*9P՚\=Xs'=H,VC4ZQ)H^,Śt/WKFM'n`_iC0K:J;$N ~("M@32P.!*D,@sOxCc  pIh7K:}Ɇf)7H`RI4p8LG`P7y/Υ$%9 <2EB?a%/֪qS237r=F5f$)W2S᢯ׅ4/yKлz-i8D/k|r}D@aM:qZ^RV('U?VVFQ#.lhYX'f`v F"3^ B:Wx,z5{݌I];:Aw=[j6#BGBj=!;I(=su(b&!U{CwA |?I5(a淪gaIHSK-Ng;ӞCm"ʴ7#"Ut4T)yˀVc%gK'8:jZMf䯺;N(-R4ax,1[`()81/IJ| {{lML9m5>φrgK*Q&yP{RχH@KFo/`SzYP2wH3zO &Eٔp'm| ތ''шH_ 05b8)!avS;|+L:,dNe5I-_#7u:=o؟ߐa&(ZOxpB]?!h%u+pVk+bY̜P9N +|YtC'Fw@,G?2%?dԬEOb=In99h2` ESБ`d WyO~ώڔ nZR0Y4q5zkuI݈ .a>˲.;Ѧ Y/W="q>0{x?)Uf5QA!36,V!CI">l#uуZ8$eU1 1ƍd5pU/k^X iA^UgdT#L\'!P]N+<|6uICf'ldjPN!9[te$s}r{bvR_mU&xko0WkpT-Hzt>Q(8Is(;{(`r,9@AԔ(ԟ]2!B-[!}i&CM0&hD<؆ٯ۽.lc,)l q-nJ^Ixo|0C$qDxK"XuۍTkg0Кq+43L5P}1ŵ =Y50li*qZ !1󇮮/?R7 d_L?,$)rϋ,p!7-${\,9zI d{)=,/!C-G45 {kv!/+0mYL,$L=u vBJţ̟X;`Aiv |Z2&\+p3+(wcșE&$ᶲ ~?e0dikȞ~VC6]FArcJ{?5~! ф)@ v}r"t93c6pP9:?\ۊ֔=ѽq?y .a*]>VKCW< v'6u?.Kr})o =l3AwY.uksf-5߲{96h&C %zT`,9!BfVpo6%ﴦePݑ$d9k6mV1V*nѯhJ^ xC]Aj ɭ7HpdZ ,?#rJ6J=#*\(qNG9 Nv~w96ihlugkqnneH ه!1j0wnbu/"z_[H'x55Ƭ'S9 ;sJ'jGH9l0Bi'n<)[Mt+lo3d|zzwۃם&~pjroƂ6 f\-9YE dR%%I:.4;n,9Ay Ýj+Rg`<_4%3]շY4 PX/K(4;|ڴ䌩~ξTA%W3|k}$P=3X^ÄY}ifRfK y% ܆@ ⿄F-(h-Dw-k0tɔuCس@k B5P| Tn6&o-)<(hHW"M$L|1xˈdcj@f9nlt?t:DYݠ1Lzbm]+J*`Xv, ojؒ^,cfpo:E`Ht] [I?{9"j#Eyfᗂ4ufٷgQM8H{3i= :{*?XhƙNѥ <.uf).+^ "BaabL s]CI7q]5\R=D2Cʝ^ 7cbMNKgaewo2&Pآ6mO-;} RQit"hLмl|ib+ZeǨ5X܎\kPEż/=ܓ@ީ6] =/C ~7840}7>| |e>%`˔xpK X fn _/k)$Ϟ&n[lxz釭Z(±`;lHjRυ|/X84j8h)ek&`_EEd32$&FfYpR]|t7% M'1'`8l2$Z|qO (LhhRr,ʨ |z ^}1w4+h*ict*7 J8lC4׉j3ȓu&GRaxkץNK4N/uFJ?@=iYN-h9+ZtO.o-y>ĺ:a  CGuա`#A#Uu&x*b^1i󿒮쵿hB -aRXU jILKrtA' sn82l;'E?Kkk7Te jndM/rXo#r]jM1k"6=֙0|S;a*pj{ hU؟~o}j#Gow]:zYRWpl3RCؽ2;@6lY?AUB Jб,)'|3M"$L] (b8@,.!%W?:]aR_+ ϽCV:9 F4.B'GJ 64+A0tnx`x<̫u| MƒL"gO/G }(E]pgU_^JTB f6`ZZ 0Uhj{[*;9 H!@z}W"n\bFɾ>&VLZ&n#я? A[WK~r5sns:+k]DhUӨe=26SW$xj40[QL0Z&Iq O>7vyA.(-3lJcTF 8gϻwAh2acە.VN4p yqb杰M,ݤdPBŧ]{44 ڃĆ'IP(m'5y#!5~L4 $qв%_ )O0H{;`tժkQ!o|:%]?nGPib4{mڸ}fWJk0ː-,bڌ"Dh6˄:}t(gO\#e.ћv|f fCf_Ҫ(!;W PĮU7NvTVY67er-8]󊼖9_B꼉:y3|Lktc~VD]wUB~U(ENx),1[foMY7z҉*Y8yUl%PS)S6Of:$K|-)jTR0}/P !9^IDEYpSY._C+1eP&X۬;3A?9D#H&*g}FCݑM;E;yNXS9CjG.-.4Kȶt;\jEcK;EiTB`j;/(Ck8$ t`7zډ] !O%~gT}=`We;#>E>hz1ߑ]9 5k \z252ٺʫߺ'{TafX[?#_6̳7aV^xMb48Ǟ aK7P{R"+L@t0;FʊʛXM5tP!>vCT-^{pȖC*GS9]l&a1:@N ?`ڊ9kjtv~0 +G 햄E@mY! xyh̢&n ΰl־Czo? Gx70Rmp 8i'|"rl^q,ѷa$ "!Į 6 Paj)_BWI҃[:%o"o-vv>cq6(SZlu66ƿV Wy+[lxIЍ"fT"4 ? qgz>o\QJ|ҍr3pfas4X,i/8kJQ4X3ʬ!4U ~F0UzeH1KO6@qU+:I6[B(I 1 }@ TRJيAYsk/Ba0ڐ]H^3 iԄvW,f 4 0Sª7n^> ԕu_9)1['ihy@}(1:QjP0~R*Qa?얩,`#lC\@=Uj氎򽪻`r-~irЙ@ XSjW/ɣ)w@ΌI^pȶ 5ehG|1n?=.ѻL0/TB2W-7ګQY E0D~X&Ѵa KR#on+1}tݡTE y:5N`ށ\V~P?y# bud"f,x=A1d ~4;SHeQSD4=4`,[vo9[wP5~< WHS!tf1S>hAc 6BgTԶR7n;nYsT0%;ct\M?msH7d=$/* L5nv>QT V5ˀNU~㗂64{n}oW{Qm~ s`i' (zIMaW.8E0y6Ԭ#iA_~.C2a,RFSSq@X cEˀs H9lܪR&RG{(G*.#t(j_lj4yRj^֨B=lc]K1ջYyFDVչpqȪZ[mOQWQ~E?W>sb$R#w b "`nʳDԘP4G ^ZzEė3:.:RK!n\œ4W<E]HQm؍.Ls%r ſHZ'nO.7ei3PזxjaEp)}~s Ȗ͕owF̘am d꽄YGQ/R(keK)a К G|La5wA4͹0E݃USQg"!xqpF$'<禮 v%K4RHP&c4=y)p:kSأ]K0 U 5X IY4)/ur-aLtPO9}}e4ڥk4;ƼR;Ow&SvL/gu); c C=t!'M++QZ;jYüF~pNE On_~Է} L~EM1j39PKߏeL҂8"Ec\[i=}eg𮵺8x#Ou/5;KVs<$,cMBrXB#@BMT@A_H;"PiL{pkJSK}=!ٍVAO"uGȄ\yNH=ul5jLjH.;]Z c 癉U9}[F- sWn^"]K0fh%#2dDpJ委.I!`r!-\;*c&Ev_!URL@D=ieUw }oAu2ր?V؝hܨl.)ڙ W]נ7Nq/HT,OlU%zԷ@+VR=U&kA|@Nx2o$L{cG1[dJ VS^Q}=0{F1'l}{!-]͍ȫ5Ft#W\Ju-_[aШzo|H#ȉd;d ccIWV8iP .Z<>#(@MP(ݧ"(^xk˲=Sw+X,P p2Z(^xqpص9 rds Ns y&>~?_siDm^JL@¯|Ζ˦M^dIvg "C-"z T[˲$:[*t (J$(<]0K8O/{Bu__Pː F)ۘ8D֭Хd:P0B*0V>RzcQgPhh߹H]l)’?Ẕmk*Yǻ/3*/Srz\迮q5|B 3TiRsiKb{)Z?ԦQtKό][JrI!rIbxnLCi9o$6 ,h. +1#gFsLx<--39׵j )g`B@~IoZx](T_U,~l\SAcK9LQ[Aops'hCdZCA$yT7X/r4NMM'!ډsݚ.{yzD-DGQl6ZWX; tYM輸[ɮcI]XIZaJͭ_:+!Z*o-z}1xcr 5M.*!]\ؔYLV/Lj6/yxQt`k,;cQ 4L-\slG*NL]=_uEaBӭϻX5,cum;з=(`uO/,{x O |sICłDoSPPӛу*գK4/ kCar (00tarxqoTw x+ &sBCs$|8-=t}!uM(w`Zv0-hcO:vm<eOlxJ~[4tp|Su oQ#8KipWiOffrUP- 9>q1 җ7/C3QJcV҄jdF*;qNq`ԠM2JEm{l5}FѾD#}bt4퍅: (Ey (s.`JtT/Pj z6Zc̼$~ՎYIhp1K d 4/~'<܅\FW8L'05&$j\F,B>dj9DNya{xGyDv_}q". x:Gv.LMG ]O{ ״730)_Ȍ@xi٦76+ I&Ĕ8 Uzt1p',XׇJ΃dxةlqEe^\/#:DiCT+@Pw!Dܹiz[(@*1Ua xsl!S@'Cxk'/hxZ=ܭ2#G*Bϥ,4 / ڒ% kIp#}S!Li,t.HBG)]zz/>o{ } *dvhQY+lllXPT&)l]>+x>FI]OP`p~@zaDl~ E(-0\k7X G4lTg][It6pW6ْkH|٧lOƭߺa8e yR4Rۈ N_A& ̕F|K]Ea͚x,"xx) QSeAjG{zz^]CV7_/LťσD/ulKeݽԓ3wL;yMGKHX %_>7@_B" H:' '/5,QF3|Co<Q3r:SB 퓂kc':Bxԝ,O#J_+CM NendX<4Z(G1bO`{Z  >HIdĂsE/Ĉϡ]K>ly ytNI놤eR+_ փr4&858Ӷձ4 :2JPY`MQIJq1ЪIz ;R>lq&B]Djә: ާ2;F_Cgmy 278U0a6ʍ& v׺S )甡}Edl!.q-Wk@Ю@w ϵ\Ok1VqC1+*kǞe%*isS3Xn+R ko uS O*]KFISm028^ Oz.*_^/zO.</u4p1WgA#K-6WH96>ƣos>Qd&EN||KTX%{̄LάH,]:;xXKA QPhzn"l0eC0*ڶ  !t}XIlKȢ$h?$Z CdZT v]+]/xL=m%($F lA9ܒ.2ZL'f0S=ke%a7Hșܙ+pkAi.$ӏhѥ -PM &s["G{(vTvNk kYu6ǂ/65EE+N?d-ȎYX&DiNL1(Fېz?zgX0q(Z_,VBtc|"80 czM6GK bD]! R*WuU,H$X^23#=گ p EeCdP`ZP[l'鳥){Q g d F^jي]lCE5,6tS_&'tY&wVeSL{=pSҶSbdS&}{8j3as=k`I25VN7.H) :,WMtcaNRuPBz" "(wE|̇DG307Gܻ|HA aOeZfrB1.$x}%m"@{")i\"D|k,'9Sߠj ۘˮiS7{TEO_͎eĸQw!x+&z]Bl&l sN!%~?]K1{9HţTT3MODqŗlO_  kE7mf":sY;sR7p  h,n~yF Ԝܘ"hA\2)p:^%{JzqWSn4oyrޞF>[A͌[2iFtfb @/L~GI)_=+0>d!65 *gwXSڃXT!%LA-O=i^ڝl_PctaŇls@]@b~l:Oq3^)CYY{峀x5rZFd@wAsHGQPS!}0m' ͖l ChKj9Ҵ=D ـWJXlFG~vHrCry;RB Vǃr,Wqm;w0Uˊ c뮯Z4Vͦc9sSZp{ju$p REz-|DPs jn?cav/ҧ ўhיv(]4g-YHpMWHlEĊIqsX<'U!a_î͊aզK<  ~V&Ix[)Y{|J`3gEuP@¬^!XqX0<PU_v65mK$&#юOr5X09/L.+0aT`;B~hwgUE'Pl Rm6 Rª)_Gۯt6~2e|A(&Ab X5%1eJ5>` X@8ԲVWY-ˈjkŐ}Nէ ?(~*'SvfzЋj+N2X™v,n^5lI(1޲ZR.v[qБ^̏ZoC=J睥 4  [)ɻ*{{*j 0@bwSNh?T |֟ 1| o5 (x%=:]eoܭ[?ېh.3Gԍ=ީ]LEzPLFD7\]٬hpG dz Ͷ6pcӤ>rs+5v ?#Tpr qS,q=-+9bPW}!RAqI\qSi QXr]` b_uH(Ji-X1]5yweռ!; K c u뤑v;(ŴID!9E6T$:♯pD%T4(>"H*!|*rd3wzݲZέ*/O(\Kh ?ɮ%nS)8$ oeCQ3#.ۨrܝZaQ'ȼ 6u! h-~z+z'-3VaU1"e.Ub`>]ܑu,+/bRQ}Sf ]A^b |Ig8Rdl71(,,hqv&@ /OGHg^!yh".}xiSaDUvCc[b3nj`Uk]!_ I 6 {ǞC}BnB:#e!OqR| ̌{ EL̲IYZd +a=G tii|@Pmwr{RutZ? qd[Ԥ{_s*jz({S, EJ'_lf|BbZA.ç'9{[e)#D~uF[3+N^%o52-3[JC%M*7yfد5C~2]f=j$!C:u.vb#_#^)«SL ta:IoDLn@eP WUM981%!(1"C_Q 爾O 7<l !(,MQvX"գ~!~v!  !h6Z%ɇC! ꔈA:'hŜ't z|i&{D-oz`E [MCVxKUXp/86XؑC8M^<2Zkۯ!|ޜ h7o\Kjo* >#UŰ m$e(0~2\ d|%7qd8d[/ar_y4N#nߧΉ>9E(TCLf)0FsTCFULUG&DŽ|t]GFA4 ≜c ;6nq?u:V*G둎].lFʘf |04aB"P~RCA/5-%yӷB&PQilݳe&_.Ɔе9'{ƒҀTz pF x[vSnPk+0L/LHgF)gA8xmjH3i5;pAFA}0k.¼᳽Z25Zc/0t%șUAW7y-% Tg60T@c1S T)tOM zc_aŽTX{"gg6zG<;_Ƈl6LXjB.{|R@fZn?RcG}Ťb!D[SH~ms/&j%-߆M45i _Y< @4T3{(Y ֏E=R=y|.4\VD[3ԧجOGe`!09}bl[謘5䯓*ƒ`NC^v{]NJ6?2*]*(Հm)ԭj<{=֒$3jg`lu68/ /F(#ӍPN$U7#!*ҥIݷgYI9( }b|ɇmg;\0fa>JDmc17_&cF'ZI> v "ԆeR')]wd%}G$N]~Ե8teyL1>DA*d'k_߁V;l%ϼ{,!bM -Ds/i.~X]JGfd)'+n=~PEĊaRKU3+ ;ۿևUx7,VOR÷>{BS+ ?np2/*=װpTykl|Ǎ$]`mp ?AśqfBBOWϜ#Dw29a j ڤE?jOݶ|\J0I5;̪$T֭5_WW$)J&' 2/Z6/_QL_DBۉd#>ݪ>D}#rMa0๓sf`X)x"2vgؾTY!Pt%(pXQ>}\@z^! C1 yݐk뷗mu3 BĹj]4]Ѧ!lex D;<:jo-4LYY$ InnU9PPT_Ms.p,îoIԷ æaB.l*¨nKڟ罏 )A{=~~?#) i_Xy].#/O7IwR0VQbC~SCENǃoA8lb.zTt4{%K<M%aX Ğ1 ((Rlt:eIB2MKrKa잌SHs0v~HY zjT:4uͣAK6R#BA/qI;ÇL'E> b2e0OubD.8b];#7 _/׺[pwTz\jGV}2X<_Vto6I$|Lc:V1(h@bpoP;2 ~#V['pC)괺j XDhn_0[X[x 4KrtPTB*3׻[dvDv=嘉4b:BL21MډbbD)$$vPI_gHJBؙHMF]Ԥ[m‘VLg1,i3DQѽ%oṻnQVf<`CS /ؘE3us9;P ݊ T%֦BaO6DK0}e,Y)P56&’}P+D+gfVeXѥ\̍ef^17dI(<ySh!VFWVÚ 6)_!:JX{ | Y\ג( aП#7><0mడ|*r§UˤzCDu=,L^I?ɛL[ܩ%dc*ڵ,Kyn0FYб4_(^xd&F806r%wڄw.%fݏh>OI}5WI wG7柁9WqwP#jD/A״D5i8< j@vL8qy]Oh_LߨbȃLo1xxjty2R E`m1#^eub#:a^cQpϕ~8\o 5 WSRlHXmrsw/bzYtпF%8P^[͆)v-#,(K"\W!B\8A5Aq&)E@R0XrCv`PoMl)i O5%1͹J]+TʐN Ml1MhJ.  (w<Af<~jZmD&*hã& ?rvWٜ놠{rl>F'\2/Ȑ!ՔkmCOFHCT)6" Ӏ@Krnekޒ6SjԒCJ@c /5F. 1|mOAi4r ~ǒ_ѤβA?N( dR'Sゥq;uӣF E#|W~Y*=IL׬pO|5f !p=;uXbѼwGXR('!-Fx߂bv2E)#Cp_ P:ie!NP9wk1ոkӭPc O6V)\D!q~8 WR.[ 5{U7< AlYŀ;x0{{heu>TQc;' NEl(hz_g1[ZU:vnjx/v+ڮ\܉ i~M?'\>R5ƪ+lg5CnDS<ɏ+U>PY Sq ^/t|w$9!Rv?T=)HXqAD^A#yF9E/fA9e6A( ,N41B\=g1ٌLp"IoҎ JVDMMXSh*c$hL`Zq.n.ݣO0 ɑ#N$f+*ڜTDKnBLÖBd⁁U,|m8QogC*!T 8,ʩCTS$m#G7Mg@#: ФScLG=A=7=B췒6HjHp"tnZN)ZMϋap‡,_Utk1,%Shk%= ӑ'R*-.j޻);A'@Z1=|%̡JB"o܌5J-r\ `JX1a)~U񛧫NrNj."1NKʾe(/PxW5_( ل@ I@`OсRf,iLi,)i<_c6By8[- Db1DdE ȑ尭5-m:L-֯`GEy\0q!iqL+x< 5?b!a\pjMDFk;C4畧13ovX#qFXy ϭ8  Ի3LCrf`P+?F5isXuǍb(n l 'u 1Cv|`@1L*&ŐaZ;Kx{d98{~ӄ*32Ee᳙܊/h'eG0GP7G0[Œ~ǍVdֈd*,K-3ܧ^>gh`>aT[ѩ2w"W>Q,7ѱlgmu/| %XCBWɟYxYv{~݇Np vkn#kn \uQ /Oj1uvs,e£{:OӀn vɐxa=[t D{D"W2: ~d'%T1U y[d'=U̎ۈocI`7{*Zе#A!? v h+ cGNMK`ُ9ԑsQvw~SLQSrˈ,d2z"w%U^*|%,N#_vQ"\nrV[a.w/`XC(Nq%­: ܽ*`P0_-:7QTs`a#i%&ob!ːT^d Fᯋbx)CC\CB.Zm A#7=Y3n%x =t A~_=Sv^v1 dxG(h|#waOXf4uRLanr>, /U2.ÃJtX8Kd}7u-N40`m+/e$f) +AlP{X,ïpY}e׿?1wu4"p=cv%D7eNeBG +`T"DYmw=:4~3ߍ€=`O0 r fnvԑ0}3ŜIe,k̲ÂU'4rx'3#dVfRLJ{~sɒ;`q8#5$ԋIoTO*:FKXEI7aCiŌ<~ö}")ZnmJԩ-k9u"\BuX5"ŕG s_”hK1I.G&z6@]]=AVzP6r]1-ewlŒu{#NHy ^}t^)^ GʓcURƮr oNgJ{V?q* ?w8whK|Iz _ơ/p>wR) _J #Z&3芩zn|iSg#pɫ*Hq4ؔoj2lgZ{0Z^ua8 W򇲸UaFĸ:.Wf@s?>X]! r/NDyav{H\4FyrNO &bn)i+O[JCN(#- ھ_^CdL+DOu#sX(o; fއQ5Y]+p{&9z.#m5xO]'P-BH)rnB2 ]1Qb#WͦLyσ1Ō=@I5ixYo?AbpB XT2vǤ[=,9ĭ]e4Ābk*q?В' gR0謞8r>AC)47'tXXLH79\=~E >Ն ҙtx;jh?p,;Y[^\Mi1!8}OL 2]دec:}`(0(+Yg A -eFNGR(,a,Oدl?!b?B7{_ EZ<{G`F8f޾WWv]K4| Ԃ%c@ԂqomNKdͨTfqɬ4G1i6? 4 S'A|׭8XN=:!~`KLQ{ *B]'%7fb$tOq;ˎi(UH~y'u;Q(TW2YKx\I kf&6' 7ّP5t>m|% +7=m'UHy˷}SU*I9.rʨlGs%ʼKEi].5&$4~ӝ ͣs;8Bw[xU.&NJjHmR)I@PDž0Kvgk[)Axqf7WIvJZI݋_IGmgF<g /FaUD(,O 4 H.r1eϓz9X= euV /25b!M.߭,AyY38(#>fJ؀DWg]k`ies_IU/iXQ 4v&[⁒X،ԫg9R;Ag•$!06o`Mٷ9=$Os/nj//1@{ߘnV2()  d|Uz΄_\'9wekxs尫6±VP[Lǂ}tä;c4Bg)8f%Ek,n-~;~hu)9!tS ]&0/lW6(j#SD{8C@'HtpjG mõJ,oхPV؜_D'U6ϳ5 yV]sT2"JXxM;Uۆ20g~ލ wە2׫)F6GިW1>"^o`Mw@D)..©--g&+3()`I&^WD*wb(@0>Scg𳉬ɴ q\o@t%4<.ZÇ!wg]_uJNƫx(;B[Jl[ιN^sGMt% Ɣ=ZއKBNqDWh1s(z3ݝe2p=@`tar0Gi5 80JQN*ίmIyb{e0v[CqY&}ޛKRO>bL썶"{;]Cx\NI;;mW`2*t`,6;  aѐtxAV."jMٕQـDb:;H'm7wݨz13`Ҹ͟53Rdc`^xj! ɺ`(@r";#'FJ,|IpܵStā}`7{k)"Qx'zu޶Y%*m%5f_ևgt;:S$j\0zxZ/`(Jv[Wdˈ7:AHGjk免2ꭠ52#yJP3bRQTC?\;2zGb&"\Ͷ:۴VWtM9ʑѨ-CvRERעk pq|%g!CuQMTOۍ Y'vO$j AYc. w?LU:<ݘ[:Kw95ӈO]|Ch^ujC.tQ;x ՝g\S UCp;dTTƼUs-f9f迋Jkd!}_='gs/4VQ]"ApC{$V`ͻ)BcASu;CIA|ZĢfhApWMO;Hg,!ٖcՃsb[`jzC9#IچVey;p ,5w0&& %eV!9ו r+,@|RtoݳG+fS")sIs] c ZO׆';N5Ե¼Lho5TȨ. %|!u:*6g c%,94HBT `3 O^*0SO"%4"7xI`y`s~6ʅT\sU0@Z3oZN9 ]W'ÒdT[XRqz^{r l]AJWGp>PΔXؠQܚP^ |K u|SaK HL?PTp^9hl0:@ :j XCǻ0FO V{?tBŗ'i.1^U' !. 3҉)ـO{ +m ST5$'X =夑2_A?'PhSFd 6#fPC 6S٘LWA$z̀i Ԇ:[OZ}(\B~;?[V uꫩJy"‡e卲NsRSsp8لzf괻~Lmy4FD܊({B8.XQ;t@S,cԘx9&WE}iXkqfY+`n6sZk^teU32G.qz1?s>{VDlSU#ƁYUgL5 LAoƓ!D—_7#K"dMr\)qEo h:*""HrL$vMK IIlr{Vꃎr:-17wUեqpo%0nq,prlPs,\OY~iӋ™;JUo+1os{TL๿1G<ݴwvuꝫ_\4z +t{S遏’ sUqF42ٺ$tp(3\+ӡ-?,zbpdemr;qCe!g\z(Ыhc%fBƦtX[CWر(y/."䠮@`q#sdnCͨՄ &t pi&W&b=;mXHkopZĉ >@jTN S$D- K>:%`[u8 P?FD89Ks&ΪxgLynDWc ^TyoD⥎~A]s~f5ʁuS*t Zi^7^ǟD.YVrY*B̚N&E%гpiU(fjW9SZO &H:w=#-ͼme<6U?^]D҆.YONNQ da9ZeԽ}7 "MEZ6@!lB.vj4-߹C9-`s[qu`Ϟڂ+z36sUcSK79EVjnH[ (d@DgJ50; ;8+}z8qy>.yb:.%jCy'vX[2.]8>׏r˃NZHmm>E/큡kaҵw_%u*g`8b&A~=g3Z(C^H޳ R0lg,P s&?qM_}>6Y2hUؼKϒgDyrƹA[}lIڮJ.gK{Z@%)MG>J-™/`ARҀv:c{ewީ5p77ԈɷRgo&j_i<Ze}eK(`./j<xh|oh^*3Re-d9-e WI5N?t}R'cDPAH]ϔoJHёqu ? K%2kzUKF\}JI⹮v&VJG~D2}J[E nmU_ 4$['>wrY_(Zt|u ;d>v›?fck#Xm#n7]Ђ "2r3E" i HWw2"EQ:"'ЎҘ5s%+AIUu2Q:, ~&8Wۼ%>pəXB#i}NT|v=\aGIgDF`r]R(SΘx < kʺOjV˱{o#x`l  Û剪K$y zu+vD0?34nƋ\JibR${dǸGqg-l>xs$%'k҈\|D+4 ;g)WP ]'< VH g0pam7:(&=1(Kb\LbЛu3CG~q^)D(fRV^j|ۊN"i/bҰg7.^p0޸|ɌSK !>RH(:Lf47uƮ9HEKm'5,ޙ@if\.jTY8[LU{NˑI=Jx"W5f@*|#3bw9Ts' #IOPWLIEtF2!XVH upuJ\[eǁTqw .sә"f iÎempj}k֛d oD.+0$;_㵁Ye6BhmvJbx쇝{l;h"gG3L͋Y?wv?: 9> CHد7/z"{4>nX}+=[[KX"Vc)*tX}H+_2w8uzY ;Ǐ"d >&C]ͺ^` (msC ~mEH_q5@wBI+\e܅mr^t1Ftg(#R a{wquqB W\;˺XUۡZ'~ .7%mĠ~JsͯaA_$h"6|fr?R].*vۺ  ^O`$ZNHDPj 6g |^z=Ւ>/Dpsɞ%d{1I7DU.){TUu ?y10(#qP& V[*}L6gx%U51-6:k4)TE6ڸ*у"7xa((t*78&5?J^D!%njƯDj:;JA7wrcMظ ?t n  CGnTûz!Je V0[UrhW1$QX"feK i7yUaT/mҌl u{/Ix-Ǐ@4d1nT6a>4L&B2WAOY)VT_`UxkrjdΖ9uV9V Y;a>Yy5tik]Cѵ&ӂVeBV(qvxY ڄ۷ O?0=IG%CkQ_~"`^:oԔ@~UOLdMED_* -t3ccbKUEBgj^ܷ 6Hi{a<(:1VTR~ZHɏ"(EtU3}Lm nP>y1 p]c 0(,K {1O"@>p.<)CϨ&^"Rf޷ҺVH<HK-a:צw*d<;,EY Ǎ*q>;`RoM) 8v(DI,cj{Yű#'Hgl+iA\, ^^*d/Dpv³"t$1xd0'ZWtgNu8pybipt^ֹƻbz<w  ƣl6XX22cC3n<]" ds:_+{[͉n0߸>\R-oiu6eZ5$Q&9Lk-' ClTQ=xoZMT`bTķ7U3 ec8zj 㧎cv̰_k^y5[{+ќ^L"A~|9 $&$`z&rq21Zb>dtmgX/ 6'~ [gث~%bx =~ b0ҷ 5TIyb 01B6 `CE_@&P``gDlAcؘ^ Дw XhjŬ1b])& D)qAa.<\LIhcZ88;6uzd W.hcR`$UdimbI;8O0Xa #{`fUƱJAXS@ةqZ0qɊPI]. wRlOZצj,._g< }m\K09cWU D۶4cCT:Е٥So uR͸qbح0iY 9 \QU#Ȗ铼{2bK>LFQ->C5$;z|p >sԟ_G>"75T''/r ,Fbd{!i؍]z း8ÖGj{Nx (hHgLnw qYNOʋ,wJ.}@e0װW- 16< }%TE6ʔ{y:&j\>lmQc'ǤIF[i3U= .yBlt\`F'Fp. ?VZ̓s}_P\>R>w Ţ-]*Kx(tapǓw߄}ȫ,ArɈӿ9ƫ8;<_[urhCTGI#. UpJI, ۩qm*3㜠?+i}56Ѷ7F-J+=:  %:A"dϑkgJ•Y{<ڧ oH^߷%P"qzڮ6N\4^g`/td-~}S'b}-}ʫցRˠ?@N'SϭTaьY5B/g{s{/"*Fޏr&$iSkmx:_- s1CnII?é ![YuNH04pqGwN^ 5McGF u>P&ce %&)Rאɒ?%)R -JO« ?Yѷ-$3I/QN䜔׏v7sbDćz).k(udhi >X3ZpY<;@T-@BVx0n/j L^w%˻NX4[$~qe+B|aD'! ޞpb8P[ g :Lam6P `c6[v>@7S#rV7 [U+!'\y‘K1Q˗ڼHuҭ-65/,!y<lme)gZY ] 4!ϲbB$ϓ3֥z `Y1cq#>RsZuzS/35j-4m_#u=m'/ϣ68t],xHBᅆE\]]s<.40mVMJRk }GCt̝RԁLE%&֏Uiq=Ax1c"]%`kTNyN'ۺJA}8#t;`*;1ޠ9԰!Ni!KN|VŒ,&eNO Ч0+O4-QIڅL[aЁ~fIC=MT< ~[JQ~JTW$>gnYy֙mΏG|r MfB3YM8~ MQYm qOAUYV??aӂ%9R^= Fh!&H23чK ^Ū7pBݶ⧤x*¹2Yhh>Bi9ƥc t̶2o]:X-5ծ,ף^&$ДmҒd07=̳KZ֯^>wgixl )ŨSԌ}<"C3,3PhW M9_u@ͭGIIV;UB +E6$Z\ @o)5u%L╯Q&C[PE 4!nag :fG=W1rBqU:rqgsȸjY aT_ё^fcnΊ+aYK]:)IIҮd0G{U}ᕃBE{8bf-E2(wo56CWu7X߄Q}B~µa;EsbKVD7aa&0TP,8#Ԧlx$\ _!$Rq+S^%2(Ԟ*@[p=DNo#1s᷁S/#{  KEwF3][-rNQK#uE}oO0AbGu30SQ^ƟGERÃ\dcuZD3,GKٟU)#)6^4@Ff gucTGv?[5~ uH6Gd/9<. big bBܗ_=z<5 poE0=(,hw?@ƽ;2$rܺUa{C9D]=p:G,E"ePyD7ؾe**$N[o೤ʜbᛘSuf=#9UC'}ff#x,G3o,}wGEk{&sn1ca$e*4e9AZ'!@#·_k"n/l[(ZKF#=hN1Z(E`vR\yJ m 11 FSFR Z[]'uȆDٿGch.z U:&^@mL-B Ѕ L/* TZ*kb3Cx,/|| k†i)/q/#0(Pc6ɳΛ68ʖ΅;">HhnYk}.Cg(dyй O J' ڐ&Az:6UsOc,i:*D {a4st!NXo%n3E3[4% gD$wo2ކԾoPב& $M ے< uF]wQ;~`9Kdn^̋?$D" 634R̸ǣ BL+bςDn@8HՔԫ >/mz{Ia,M6pqcl C}"͆LsP`9<OPdw@Gr?OGJ|t6ը[xb6.o6=}҃wN @Q.l`نԚ_v`Er* y\@aP0En $؋۽] ջZ^PEwŏFFZ÷ 6L[gSiE.F}Ag/ Ҵ #>z7C-M,Wi*뤧 jxDK楠n;i;Iz[ Ist PJwe5ȯ>mo~b^Y2RQ%,]?0%֋הw xʑF;-p3\3#i\zrQ)S~R GiT6 Ѩj}]c1*!?1ͿAq$0RU$ORh {#r&+VTpao>U_XG/kȞ?pjï>aZ# e=fqF"o 崞Lڜ XXp+5,c[#k9ɲF&n([ "o+{ XG6'a<Ӌ7^}+ݹ V K9]!IkcZF JF6."퐞n\m9T}Y'qڬM A/N*፦{h`04H3ցnM4V/4nH1ƺ~3HxπsBGƫVδ#1;z V22&iV)TUHhlNi;TgG1fz!!|ڂuCR!:jAcybyk?3kN8OD&0KcIr_s9XI& Mp>Y'ExI ^`z1^U m!Pݨ-0T3@ KA2e䓔0E**qOrP| N JT5%ӋhșRtW~mz1~ԁs8{SHori1A砝擛[d\gq&Q%r|'rL>\>N%>#do(giIߋCpq(}_bI3.wd"jiZޯb˹9}+jzs"s()pw^' [jJpWf<כ ar=RZ=fp˫3R. #&jJ̋Le6\F+~¹ZV"J=EqmZ-5 d:@´PvÎu>=@ԑ<'k ?J-+ &؍ jVWڔD|pDfDF8d_lڎ"I0swː č=7%'N'|p2t00mڳPu^vm TG9\9kwQb=FǪ/ '8U#vx{ A"Dxf"Q$-J?95 %ȉ|PU2]?yMJRlCRH_V.7^Ғ~'#ۢ&G1$XtgP MDZܾvPl8 Df1K=ڿcmeɓ2x)|h!W<=АuR?lRhd ƼJnU@]?kZLk!(Ɯ0ۻ,Ȁ23nO7Qo!5iY>WshɐPYC45 0_TpW+ KsI#c4TyJT-<1HTXnJ,bjN b!t bHcq=lTG&2/ai^3Iv߽W)! 1$*SAKײd޵e+qEj"ZlF =0LҬ2Q !ry|j) eFA`qEz<*S_zծ |3wU ,tVM4,cw$TIze 0[Q?Kca ;ݸ2!M1cwOiy[ٟY,_`r4wELj2*b{=T=z ip~91xk|Ry40H^֍[tmt(gz#I+㙑$eZȾ^+qgYBK76Vpz9:ʉe0 |G6 ̊_x3+bwk-ٌ$OC4 Qo_$o/$Rl[ ڙ%g>tFWTC+T.7I;юl=TO O11~4nۑ O ݸ Gkuʜ4< j$&Ze2z' Xie|OG94'G 7z.`yqSا1$ë2Y<Ip^XY 2?4os/o8Sr~0!&ZDYRxM`1 H"^0]&KwwP-Er{Ȩȁ5^0wǯZFKFWG$e8eX^aԸNbuEOy䶛̪48iu{mx }#NsãMEb9uMBAj#<x+*L_G buxAJ[!d=m磰ſI2=(iQT?CD ne~CQs74;B㺨qqZ#TnX 7RR fw%+cnJ8-[2,OS(AÂ~ 1%?Vvћ=;4L0±\~S]oU *_8Ud WyIMTH`%mCB#7g⍮QɨU.m=ҿ+xAa$pmExe!0&[ Sl'TE@"qGU;Z#+ClȗP) `&|Z@Cj)>Y|Ro]dnk<܋ˍHn^ZrEX 5Yd G4_CAw)sm_04ld t Ek׌uBsގ]_B3S^d)~̼#gvԱޜ3Rd: qM 4¾vU9|C (re#%EȺc'x]oB\|'auc{*|% nׅ#)g;>mi:DdBID [0 1_b" %;. jt^~-S h  OۜKb|4o y”}i)*6vfJ&^atApT~˧/5Ƒde/Eg2( "*=G%^$)'u[\߷檑DmcQ= ʬVs(vv4co+[Yp ƻ.] w5߀VZ;syߌ 6 {]pc% ,7>=Z.vhQ?m )ND+P=ep!` w\~tl:6=(;JC>ɴ̭;}y ]>QLH(#q. p5^U,;J sZ _h"!BmAgw]sbTuf1>WOTC3Ɛߢ!lb¸9E*T(2Kۗvz̹`0B%N((SIؚo8pnݍ6SDOWhRN"$7;Y{1}05(²PpX4J ;{PAe8+!FښRѩye4vi.3IËM'^o,M"BKJN$G-!n4ZBjcl~umBT&C`X'VsCPpO$u7Tpp7TScٯuʱ ݻu(L8J?-jsEs0JNp) Y xMedT.?O<߸Y$+\{xR joV٪ c[f42zX=?fW+T".?w8_sL6!w7ed>As1fHj7_ _ :AےoM.6ѭZ5c!ĨIVb}5Xy- `j{LhRM?}sV9gmD"@4)b-ĠkPƸ*l>tаjxCp݇Á#0?2Uمo*ȸb}{tf"eS0h]kOg/ |\CѺy_Xǘ*= q&8[pju5WqN|h]xu oقG=gn~jOI=I뮳d8=,;Wmml K:`1HCi6j@ $:L,SHκ?|շʹna>٨& p5Rlꥃ%8\|;y˧cM(0 VdvzjD~2r ؍C1X1RĈh59fWLtd*? ">X;_HhXX̀/e)1$BVc$e Ѹ6S.pfdX cQm语5 C p""(#fm\7phUIFK'=YC9ypo}k w׺_NanRCBaB@-YAJhWҷC榅}S|G:7oܸ~}-rHqb3٥\ߐ!hIP*vćMY:jHVG.YY:g{rb8Ahr1ycvN20R?ģ+J1@ω'yz)ybBAdVT6h[*6_,ɲcey"SswJ88A~sZ>A O6qzHɚ8LG(g#dx=?_@!:MzfeT&,Wy#矅m'Q}ks%jbB6ך|?rd@v5\gjrwe;՛"woI{ԙ,#`M5>sP7CmG\&wUǬW);̚)|Fr ɌO:w856h$gnB3y~}S/_fYHbm"FIL! Nd`Z2.}/4~&ZǢ 2ˉfIzʄ`"r# \KpYtFV;c9!oGßN픕5u.[Dr_V|[w̝8ns })9 :-q/ޗS/lPW'%Bg Hx%Ti2!=][㯽Q&/N? J4ۈ4!-7is'KuSAe(\\R ע?7`24#ɖ#eNzYGH|J`&5n@9:ur&h>fe)s=DbnQߨ!`l4ȅ sUm|D"`EqYs-iJ;HQl݃R>D񬛵%-Y-,P_?";b[қ)0Kd )^D2;lP7XNl'eшÖOb 7h֍3nb5M3Yx92c{FF en$7#g>w9`}IJ^ڋ 7ٗ~=Ȫo6u-jT롺}IUFf_H$1 A7FMP'2DYY#/`vk%WΔrbmVʔd?%+hCv`X5'4$]@P#^Yv:(UvpaNH  M&noFaeq@}ߐ_ZWG(gsyM([Za͑,Œtzs[UVQIl>Y8?%Mڃ¦_N^ƅX?U&A9Ω\s~"̑jEN:im?Uc$;{jWQ"Wm믿bBz_(C?eM}d )!u,/>, ؈D(:ì]K_=Ҟh]7Wj-2<]#TlYs:~?U g44P| 3!$."vT(iH[oĞ;)3u<| {|HcrHԯBS˵Ng[ uB*9#zq*hn>p] s,lkZ9"+uKP7"kla?'::_&ܺ5=B ob-|d~Y RUliV~.;|y0O> @Ĝ:TlnLj vc^;/.J[iEV^^+O{a4q>n8 ogFiX*pNthj .C1oa@hGUF# DƟ jF f|S2!FLw0_\Eew[s̠ 7jfBO*0gQ=xqizF?s.ǕY"P+e'qžjL_iv0K c=RD<@ SNrh$ŴhD8ϡŸb/Ȟ n~^p~e䏉Gt]Ǭno+]LֽUo%EU9$CgGn4N3ϕIRek0 ^1a-Ҧ f{c>Md)q\q^*qpPKTUǦ}J%9Y,H0N0j&Dhɟ5\AK(9i臤e̤nmVaOথFQz\Pب﷉<`KfU*n3V6">-!Z m7"FKIa{.|dڼAZ$jxqGF´'xUc,qE-hO˭?}fR`=-cKfs+8/o!vywL2)#}[FFDJrAF?7x=@_VqWSijy^wvP@&UN/Ra~/\w̝b1gfYkR!G p&lP(}M^qiО ,g ?MLhxޡ^bĽړ:@$:H& T-Im)!Ǥ6w䍉xx}0D QD#f׽@ X}Sehg[:[d~8.[pZa~VODr/(9h͍*y2;=K!Z [@Π_ EP1#9Ӱ3+>zŎ<<_ t :5brr?ŨϼScGxIցn4z*{RNB>RSP!fԯNMeNQwFrABO;ؾY+,R3XMNi] мNR#{o{B݌4+gwIz9,@C?I{@ђNwdrYZ77pŖh3`'ȧD<07cuh&wyĸ낈W0"F4udoٸ uMKĥ:Kec1M(; LRdEG@Bؠ)Ȕg+m TLBQ!.d\U:PPx餇*4ҤّC'v%',]jcZS[*FDNP 箿Qi<) \H:ɊqV{H+{u,E{Y&Z|[|]}t7OQ(.4N5YH1x ק)[o{tyy>*0$N v"ϲ3qQ)>˴ P54bPG𽎒HWvQ}\HC8-}nStI({оGfݓHtѴ/JPSXVd"f:MCFuhJN.#ūA48?*߮xpoç91[!(&6:W(zǾ4k$z}Div@VglHHʣS@sǧRCT<8 xءXIk{B'X~I/-Yl٨j||ւZ^T>t!aL) ?Y6 淬o1hFa|fN^vf~xr/ #v>}e賃'dMHè'~?#Ji˻&6C;:3%dÕU{|"Y"v3ܤt"Bv`L X Km8Ofuyif9:s$H]K)dw X7.TۋxkF TZ]jTm!qZ`6e[xq!y. si򅓷vR&ZEll@ I4-m\/ncڢyC2,T\: p<r Bc TGZi~elxXsSwZX2p" )8jSݩb)Xn`e5قn@y=2!a#eD4 qjk[04?!'0Pɵ0ˁ->L宕$\oTSM琫ý3c,V*?#54s>CoDKvqPń*=[`K\XlmSe[[cXĔLb@byD|Us-촬,5k=9Zef#к(&wɚ3j [ڐM‹9EIac΂F}RQ3#DiT߬ j%{ D9` }$h%\}jlks$Bv(З!71U5FZZbS>3u쇼/]A̱QB3-l7$mۑ[Mp>0Qьon݇,Ӑ=!3U"+fN,!=ʟ'S 0IA(pU8dژɶWXIv>[73wwHR3aGrY|yV \`#~uH8fJM'2)@O)~pS`8i%ۙZ\=WVľt;G+Iڿ||Ѹ`dcA74-[]ԘF0q sapڊƪ/KFbQ=oN;Œ|/ S$ K(o5Cgv>0!FID苯<iE-) W(g~{Qp||),`!í5{EENx+!AF2N 8tM~KjRTv[zzod3eŴ ZK5!Gxka;yz [ R'{¤Q<;Q5 |Z6_Äκ&bJx+:gKJ?=B KE=+FcJM3V\ \t͢R0|!XP A*:sl~WUܥ욹y$aa j7^rJȔS`u^2ӻU᪳)0j4܅}2&PUxPJeEφ"mD !aa+f븛CkMNV{sܑL !g >)er9E8ZsG=HGȏT=C:f>d%Xn5juTB.L."lpuP]+^9PbT BL\݄8r:ppÈP,e nNDŽ=nFl>Moo΄yYć1Sm?Xqߪ8Z啾LϝSІ'}-|3ɶ- ǷU3A0hoˏ<(Ӗ. {td4A6cE6`n^؁BzH@-n51 &vQd`RZ^DV[dHf}4uYUl/Z.9PW_zmVΗs3di?#Mx5XAS fwʬ3t,2DMRho8 b"@LY%yǍLFtH .iHS(f[}Y"P?Rt"̩cR1V;BLm¢PK2nnT;r_;ѓ-y6JpW@\{y7V کl%vD猲)0lg#E9E~|˜Uߐڎ>!r*n[L)P-f5,ud ]aOo5eIWN?\,µ32*pZ{7%B蚟N.,P wY4@e;<~@ te6Orxxy!'iL:ϴet) 7RH).b`nP 978.?+pb/s1"d_<ùY75xv cWi$Տl@RVׇbAW- ۖX[/SM!ZvEj#6z .reh wJ iqꔏ1K!Sfx1uca1\ʼn fxOGjZb_t љ_HYvL57l."yi5BGbc( ހ|$k8'l$n*cKv,É)"K {9 gqWg=Ig=;WKzLcáVףݟ(Z@̚;&w̧;T.k&/Răxѐrr `a%z0:L˥diz`v5Fn Ͷy5_lA a5 (HoqA ''(rhpIrsϸFYNUc)"CVf~`հ[y(K&f)[F32_6!=GQD'KS/ʥp_庳wpsprf;p' k(P ]If\*{;I]庂pqCPYSL N ϥhKѺ 9KhM.JnK RGTj\)^ ߃*:uGPawg&^PO(&! j>iˡ9UAo]a_qyM?qU2\Hq?CJzq®H)[F$){ ԕaxf59mi)])/l0O!4V JƞUܳ d8Fǘ Bޝ y=_,ux>d_E!sx(׎Zܾ&">,0&Ai4Լ~z"8 bWtיA)%]u"D,G2 9<{AUOH=96̴$mf[i.' k5Қ2jSj6sIʍA1pj4 @&c-cg㥧dT@+xvХȏSZ1>1 Wnss~q&kJ$`{PsN2@΁|pnVvD a*)%k(8Pwb6-5>uEg};史(jqYyv߯&9S=)b4m>C9DGM"}j q??/9f _3Ͱs6lw/P`PX2}%u^1_a \6.b4FϐLe6/A܏^l[HHYB*K9t`僖ݙ q LCzts#?͓ɇ"0مqF@z៣Qz6m{TYqDU!aƜg>ǖF9jDŽ:UCBaЄ&Mfn{io)An3=nɶXL/m\ۢYjC-a->jF04N '[Y]ϗ@ Fs]Uc̊?Mgmӹ, ˌ%8fg9=CȝRtQ`Ro3h%3]K3?))g?ݿ&Z($XG d ~l Dx7q XYu TJWƊ @HtC`i5۟a-=%<):mهj=ȔϾ=Kk$ ,@LZҘkBBJY8JGwAR{+7Ԙ*Z/E@d2h@2~~ W-42A@-Bל;78cs<۔nd}Eΰ(^7=B;bB:-`XmJ|`%%+h1t*0 #csh~t3jR(~ym,ӵ>A'9[k؈yI@ŌvЛ4E(;D:-͎Ju*hKT~Z6vei ,mtcϤY6JNAўenrlNP5P0E)S:u{3n˫۽s`E5NJIH;(n~0 VDC 8)(Wݥ+`%jƄokze{JsDj <,0 qH䭿R,Bde'N Cö2xΏaY{oYRB,nд-"'K~̔ӏe,@QJȉo;qeGF# 3ǯ,j6}- ZIoSz-_P e}:~C[ePƾZK~Vh'{2\*+QHx ^McSw&S^Xq ؔ+#J;gic1㌜+hjۃ;2[ ;Xra]{ " CIZdpQ#ǃe*,ݡF;X?NLIץց_)R_ «FɆ RpV^)ޙK/$ЬR@Kf opS)nxu$d2Q`qp踱Sx.Ur 춊Րk:`Lp<}!ۢߖُ2䮪C,E0X؏ 6W(-jTbdAXCXIfg> %hS.{[Au oqj[:Y Eղlײ%1VgaBjy &nϤ27Js.4󍁚[zc@|Ǖ [>PHnJ§2s8^Nj0v٣jDgtG = :}ݔ#m)+K?">ӂM]E0fgUh_GgʁŒ!~SI 2;ss}{9ø<7cCMyaUcǘBqO/֣=}H_p/C~fT#Yu9kReO7OFQ#ÃZߚ5Q,sQH׶]-UpGYŢN%:(h~zd%Fs@| ʭdm/u AAtSMssjmRb|UH 6kD\-ioSO޺*oV=F0{ s*BХSg_RM/m;zUMqbho`27 S' ?c]|)MP< K| /xxAPOUg,Clbtqt1 b<4q>ʾ?Δ)]GjӔa.E$v{tNX/,; Eu)8.ULRQڹ B Vgk 3pY2z&WA}78 |0륲:ѳ tYnK >iUw{3z;Z+&iԮZ|$>7{g医t}`K @AZ q7cKNE?P^SxMwH; W3uTwӳ IWZNwz΀{!ŌPui$OɉSMC&llukp{6ё)X\<4T=Ԇ6(JIR\ߛAo]81o4AMyOϟi]OIC\+[^K͖ =kAIYxjR WZ D(HkU3.ƜfK3o>>/2hjRB{򙩜14PYv9ݸ8=ѝ0%eW#.uR4/Þ_E KoOV:/ु?nJVa=_jPr 6scrjwp%Wjŧ5'p<I?A΋\n4,-6kf^t-(5+^.,0IiL~2DBsV0$ 2q*^qPEO{!϶ ǤvcfҜ.^ ꖀUuqB4 K%LV1Ef˦29 W/DCjqFeĴl^=<~X}䗥dgl(mM{2)I`&9} >*Oը@^V_xbްҦµI~pb ^ywMGB-mGЪ(EfZv\mF wڜq mSn ]Abh$Nh9zS NRxO k k)qԔ;1/0/˰{ުLp0.yߍ-nǍޢ섗G:! J`'s5C Yͱf(gUP7wbMּai?o[v6"~֚ -WBLv^Yek6SŮ sAD.Y7 u'췜Fڣ͞?%@4{J(0DN)C-%P*&HZfd<7ie\CBc+H/&¬M#~ԴM[oذEZfJ-*/DkJkbsoL,leK7hgPGV=U٪An)?%Oxo^ɝУWSߚ^(%c2_Q9= ~!׳7Op˰\OQ@LkuOIaO sp46H:zRcPեX!#7G;ة1ֿ?I5tV6H~{(,gFy.r/M'`{[ _ae*I N=g/\,ZcSq/H*nXpWy+t:ë!R.*(5 ~ʵ <=2ԪJ0|c!5Y.rKJ~Um!D-!EGJNqAdoYJtʜ_4i8.FB UL)!SA53^~AρZ _#ju@d qx$͋w}iX 9yUe|b"JQ 5.wW1rr[Eƛx:v_A6EGH^V΋f n\aoҳ"Xi~ق XW3COڢJ[)ZBz( dɽo+#Dg%wwhJL8C@kXf0ǵ9Vv!ǯ}7`j7(B `;qɬ^ۆdCvڵ"CF;Uk2 CtP޻1aKA%*1j{n [bz #}@F9oK??p.ʱ)(4!]^X<P7Ruҽ Hu{S i̇FTޡqYDld3½D 'r x,Ui.ҠZT=oW\ꥴΞ#z%Ow$ 7u- ?vExe1ɡg0^So_2\#!{'UEUeb?!{6P kIܽ7ڇɌaR1c}?F*CvL8ЖQȞ}#d&p*5YyXp-K"R2op|9gXzs4C! >DP#k:vQAQv*4f~xݨ2<2WwJ쵺;6dG^{ykG0wp d?, h50'@}Ŀ8=ʎℵG+F]bZPFoYSmةoRDv}&ҧ/ !.,4Nn(,{ߒmc~g)5+ʹ·$|m9*-7ӧ0`P⚻-uH|=wmD 5D.Ж#ڝ#tNtzXoNk4$wK9w,:?+iгe7_B϶ о-XWV̫|#l ?> Ks.Մ ')JlDė79&%˹95 I\ 5W138Ϥ˙ \ \bqQg3y|ʤҰhS 2)!rg wivPa/_°EIeR,ꨑK~߃_>AE£hϸ0m ) L[m=L,$YĥJQЮp1=a8)VFPS|ߏ5רΫhje.L2yi&О?Uӷ0l5#]ʙWf1sWq\ª0uVnFDu`pw8rt,/ ,0*^h=ݑ©t9/ʙKXRBuUl5INJ3Z$OU0u_Qé<I]CR}..U";k?^LZ*Ԯ!ERV]&<`5>nj"Tv [cu[?>;ItYաCMjtH3 =._n66D]2k yOamEo pio>0͙fH_ܚIOuBJLڋauKՓw=Q13uT ˩0Xa-.?|LmmG-Ҩc격- >+7,mDUyϳkK}+'+ssA 0!>ʱAduUOE v}Kڴ޹H7E)-bA~HFJES|""a#VL -_&8T~D7ols#+}ZV(?i |"࣐R`DN{iv5 K'v1:@ lGSh*Uiyç~v"LXNGɄ8WYRfL܍$'2ɨ_eac[,ao<}볥_SDpu k/&#EOi;D"J h ݦ"[>Ok8^ɕX~.g:|A4 Jd2kK= >ul!LV>)>v3nP873Vƙ.kNQvvbceQ]]qaR&43 \-pgTl\48'2DR9,%.wtBeN3lIbkTʺ| ٕd}*`GOϓL淄3{*;M Zsh;1޶m%icNmf1[POX$ -'vM3R A Ϣ}[M_F?837TV4 Wht;j |SJXt"r& Se*܅nY E2fGx_ =8hQB\1 +."C]٤U L:4ڝڍAeu:_/7*-J: Н@)ΨP@tU'N/0s Z {9+ ,h";\A=6klW} RcH '9&pm²gc&t|@bc(~wO Ex\g䧨h?WژtOhn1N렎w]S~s#C4UӁh*on Rdew~V-|| ?\?_.R 1lNJt1II6A V@Iy٘G0TٞYua#R6i/mu=Yu)SfAaPFCZDoAj*]cqD5*KʅxaeFTSQy=HC+٧}Go؋|G}qZjܾ8aP`?@}P4d0<ҝȸ˭(dH*DmpVl.#&ɹ=Nbr A3jdDٍR!0'rJSJT:ֈYKFe!'ko|B#(ɂr5. EІLJcZ(Q=n4 M_ѿ (U,$|lLUPadV0 k[HY/Y! x/FB#,s) rh/;5ǕbFRmH!{s1$^AP.e "As{!!JitdSd9V7KE}ѭS8sReH7MBkTʱ K%]YŒi?ݵ+&g^rX9*bW!M\ηFv_Mg2;E$Osm1q|"N\{ %*T,CxQl؁1ѝdWhymX6 {=p& Kh+O63FݎoT[&*;ǖ\}ZjO\o:{++~}ZM , ! `z/V)_adjWFEܯrT o*Dp$2o/=W aȦ/ #>ƘdIr0BŷT6 W;)hv H8'!A&oh{? :} 3Lٴ.{)z?xê7Þ _' W-q(^{4#’Y+:)ELr=Ԩa~XslVq@WKL5/J[YS bݔN"_qHaS "W\2}Cĸ{dPwqa!v]F掸}5#5XARo5eMO(k["{X6o{OW4ͽ{u#oךK Fy`6 ГpebORiL׳m yjl'W֪ƒNdB)&Իm7Ad@hA#|z- Wj~㚺akѾ:o41s=[[$d/!oX hxI!W{-7`1Qࢵp:7ֲS|U,ۄ9 ^Dihٳ]Y@ t*2 {`yw}$w+mL:ill /uA45 @<= ҡ#?4axu9~ACx ock "&MS90` fsJc#[quos} @⣮e0Xڠ[8j-wiW+GUʹrhT eG~Z0mBV s?7m}<ƮN3a?1)j)N]2E  $6["DF-p4 EArƕM2rrгV[EEwhlpG@??'9vQ]WCv K{+h(2Yۣ(۶p7.6L]3' URC Yx@x/g묭Hciɼ;e q qoJI-'~0բXJwep'{eUvk:3@CM@a.gE87~H6* Qz<>'wT-vxFnl<U nybYmddCJ(te:>҇* HR LEPvF:Z__#$Z J4 b8׀P(8vY򥵬WƒPe5 @&~1ݔx-wSӐ% z5s! rD NJ:l|?xBgjyH*[-OJ3$Q&xij0,paZAJu.NBZ~-"jC; K̽yq>b=k -.#{ LԼc7 , ?V̎5D%WURtmqqN,No5ZO7d#_¡{ODLW #C (M?j.e hr ͮk-e$y•G8P~u46ps !hP[69H^86y'_DD腷pe"MR~4T{8'Dw 诈,|CW;==J9Z|D20*k8 5ʻ!: ъ)wW:)Z1j(7؂jvN> HDv`R3=1 x@=c˗MCBhsS^ĒV/yUIRff0B~`oo/8qGa @78c(` :FbC*3˴\T?Mp@LAׯ>%0AP( Wl˟'؀w䇲H-3߸ڌ pPWh.::8:˃/)=~xK0r/fD+K)xV wY+̔OYJ،2ZVeTzP buJV#UPڷa0^`~2C%oHd32;x vVzfKnr&IBPŞDȍ Tr$w0NFy{`.[IֱJ7ԊcAӸ P5)bO{?1-76 zsG~ߥ\NKb? g3$ j$5otA Ske:ȹPt)0 BKڧC!;a^+wv$i 1Ã3[[ `[B͑+7"dP겙RHGx}D *,fa+ %ieV,0pxէ*ŗ,PP#\6H \YOw'O+X&TO(U[Rڼ)_7xLbTj)m(M-ǝ@L}:iO\P3̊J ؙy;2oqF1yU}cW9H~D+`V0C6jZ0-I09UR=U멃[cxq\n-j \|2#O&J*BfC=m5;3N)|El6/-'DhgWͻF@e?|[M +:^|v\&!XlúPF>Cfc&7hgdAń5AGe;ڮ%"8YвZPgصviF*\S?li8 ͬ1)`ʇXA7]Zb(k8e.b#$^ NZA\̄D|<ß{ȨIayT4n?J2M'ICC$l Ms5ڿ4#ciHz[wV SR}d24\avm>?N`oµJA _:*oLBʫp_]ǁNb [4:L`BCڤ*m$86X΁8^QUIqQAHiB%jب%:LXQzkdf >=b'lEnOmamؚ̛@yβ596?q4Erlfr%p݋ΒK|imVɢ# _I Ud%bj3ȐM*zKXt8QTrsFk*c}wX`.@%/bm*orS"FmXO1Zu_D~GI Wj6ej' mFg'xA ҏx`$w;uO=)"Q2z8МN pJ! e,5DlCh‡ù%asAH'%AR'طWJo{ ]H' sY]8X4͐me0$b 6iTT!2u2c(jqRR^x>{e̪Ȭ@>S$RZr^ؠK|D'I@$ Booh*Cab*kY;I#^/"^Zt;* wpls T`I-.`fV&D٩f8quw5 A "FjRD\߃8d2WO+x-dWzPJ tL͔ѡ.-:qdJn? #Ⱦ5,r|Q?UvCI$N;{ތra1s3oC{w3} ri 'bRV8`մ"Zr9DPV9|@2#~67N' 1 ^_ 4nԔ=h [>qwt7&X<)Cco{ޔwyhb@R-.g "4'gLPyT6-J (Hd@+ 9‰H18o;š7m4${EpZ m_ ȥ\>ڠٓB ֟Y,XCcːA٣&L@Id E7YI,rcfXV×b )4xYl[)ɁВ*vvدD,MYh'^WbN9򣿈Gr-AF81.F=vI+kn|C犪H\U"Û?Ơ7QrQ Q4e;<4 h E0BjҪeϷ㹻҇ΠjsCrao+'VD(b-c52Ur捁 u F}#7hG|l ptsjTG%3KU,]zGQ Z[YZ7HAJ){(L'N[+@wX(ZCZ)uuZ$fXPm;`O[>x`YZ"!yE}|Uzfwj:/}6HTtJSc-1!Xܪ#aZZSrMw]fŕR80L֌Twꐔnޚ2 2G"Q H&S4iC\l'g*69YE=Q)YZEr9iU_Um*!7eׅ,ߨNNe;蔍-0/-gh_|/X%JN `EdTUF؉87 #;TE-<\`]Yx0ऴ;} pt<^+;(oyP;<PA?k8p%|  x8"fX=Ə2CJ$Ugp<:!ߚ3`I#h TO.w1_5n7Fw5ѝ ]-V6Gܝ@D30`"ij4muh+i|nOL%Tct0i/c"^e1Npdqd 5+2Ō̲ 3t,M$[h.fz*JL?evg Wf:8KvG;gD-v~l&-Ӧ]8ͱi&E&U`G\#}))nRb< Vst MM{s^N.H/K,IPQ-no1>e݅lF7dzCl@t?? J!Ow`+y/ȹΒf.s*Bؙ1 nqKKÅS,<@Pl"r0Xz`e v}@ S\͊1ћgdY[,%J6o=) qɇu0y[= e:YSwYql&χvܟ&"$!|A[7bgm2FZBLB?@yz0?HoB57،FY:oeڛٛ98MWA)z'~Ak_`FxyBsކc/* <)dGnp[DgǑS礵|4B\H/z36MńU^>' =֨d/OM$׷(2i~|'|_6 43}z&^1"BS62"F?Nop9 7Ӧ bk,*"ԃP2V5*1[me ^>Su =U{0|BQOhb撠#8 T2c8{WĢg*d 7ff(W/@b ݃X]VrwFT*#Ay;oAuC" pY85M5X+̄Tad_KMzlP:xP7fHtL#rj} Ex#+.-db3:05v"/w|\|N4!-@La=^Ҏ^wsoW,' m㬿䂃z;)(_ZC2q'еP|NE#2JKƁ b7i5@'ZWL Rb}_||:[ F iyxjMf>ӄʇcBOp&wՏK|jF4/wN8r3FB`TSC 9&44_y 'qD!$YbiQڨb"eyl,ɍ}ĵt0jפCх,ڸXƆ,̓phOb F7D,Kd-^pdy:-͎}EFM`A wxZDR1Reպ =%NSOaQyPKv=cs$&ҭMF2Qqi@1 7)#d('qGrng)~-Բ̞;+C 3 Qp6ΘFjAo2LCJJJͿM\$s$@k$Q?&%Ogv5HdlNhy}>!?㊠tSJ Do@rB tCjjDa^4 =5 HLv,3O}ۄ5S䫯((N ?[WCwn:3jтjQ&DrFhe%zW'd\u]c:Ӊ6;4q!oᇹ|X% Az RюpFz9E4F-IГ Hvƞ}# ,_먐"V?4zcwdrLR jS[˰6C9"ytAMjchWxW|PB)BU뭸+y]/sU+^y[7̛Xk]eJ9ʒ؞w..C2JôTKI">:['O) )"?JR:]yx3)bmr⦅B2e8&9옫կJڀL/ޙ1?q ɇJΐ X@DQqmY:CSnA#pJ>Bjr1ئ)qbژll Eqb*(~P:Gr.x>Ā@%2+RK(fDT|[2$eE^/HcR|m[6\ҏn:SI.}b>lǸ袛"m+:x{7K'$[*\+oI~[9?T5@v@'th{pKu6=&=XbF#UkzS KAJfvN9=#Ix\#`ݭg2w~Ơbaհ؉eО(r .Dӱ|Ot4B.SHrENi e)=/Bb|CkDܲF8Vt8k+Usy6@sMu݉L7Ķ -soS]F@(+ثznY&|tܫ,MLB`+wS(#1×OP4ﳤ XnDd\d̩Lj( A軾lG6e2n#~ma1Q_Kc TcR@seOPtlU'7Wf=6({j#5,$aT(u4jFg(P.z鈜XY*V>Gef]JzZ+^9ώѶ@yg֨OZB?;"|Y gEaD|5l}<<[<~r7!C-s b_41yMrA[POJ*d[(~XAiۖ:RLUgq񸺌(OF鵁=-fٶ #tz$7+QȄ4@QpL`\aѢLhYG &vmK~xԬ¼_ޭ}H/S1~+vٙ٣K;=CD!R?E.ٕG̣sV݃q-6N;՝O53cȾ:߿`lGgLq s5m":{WUvʇ/|*#H+ԋ>J6=80Xo~&\W,NAZ @C>{]*"usܘ%ɘ/=!⾤O5f(?I}Vo27VbEyFz`mDv\Op`N7VuNTks@[D:s>|IuP\xQv!QkoAIz |-N(=# ;骗J^Uo^=kP l.,,oLt~, e5P ;\p@~t;~xg 縇M!h_zq;mAV@n.뉨m\6nL! 8 IUֵCFON)#ͣeN2^{J;iNӔڠ;\n!ŏ?B.&h/_\2[w/&_Eާ _-wapn(b}7RQI 4S5rfNњM딽ƪ3дB"/ACd Kt2_ES7 p#Fʱ?(o1`Bak0]/6:}~/Jr*Zjp9i㿎OO5uo_GcvݖC~-A$>$g2q-F_]q&f`ǡޟ˼#;CcҒ[2㒪OCW<pBʌ8HtQǍY.jDfNw+/ݲ~w|}=!)iUaJVhDGD^AןT\ f =G`8s3PtG-pr9ݫ46Ί^`54<382Q2-Y ϼXB K󀓲gR&B&c4x#k嬳X߫@.\EHD[8Ux, Zvg곯2q~1DCA%AKN8uGz6 R2 9m ڄ1~EbX6lSLע;AŒ] sk&0*Z5\8tiAX-Ҍ =%1GUҾ>&5JQ:},ř?;que/y.(Jx+fIT`$I{Z]F! SM2n&J{U-K}6 gܛTR`zn) F)Tp;DV< iګpz9 vL 7𯯒ɲ!NPR9UZabn5Ff.P܋ 79vyٲ_NvYGU,?r_ *wk~Uy}"W[m`%ʊGwuvFZnёI5$}|EͿ=o lXENLO2iwĢfhjdi:T]R7_5bLNzuIxQzQ >n'V#jF-B?ѱ9nmsn9#1z6u@-TU` ] J˫=yBϥQG V!䦳j'͌ز ުˀU;""{F nh} aց/QRT|e9nL+cǕP7h!R`g<ýW6.o6u$Kfܬ1@Tg{Ŗo7^֞(MB!C%S:<!#3%c4U lMh~_^S$۠ѹ/~08yY#q ;h./rw#K?6)Ri vv\.%(]%Y7[7aLI3U_AŌ*5,c5p;huvNl8'ZG5ߥsp#TDQN.d_=ǰ^4{.sphyD laݘZiYX϶=:p {bmop&k¯@A 3a54N1?k+A8+V vA`""Q@]"Na3)})0@q}ЇMj[*} W {>ҡwgڂg£H)O:'.rG^[=Nt/&I#5Nw4>׿=Ro)>j~| Fm3|5KZҮ)Ds|%1BV.nګlrAx{^9в? ]wd 䗻1GOV7:s~Og:ˁf2Rs9 (3So/ P˟`{ -=WmėQ%ր"H 9}s+8}Iځ?{,0`/K^]RN0N tn("uڑ/ηQ{F5=$hoxz'JsAhxyC݂-t`=9RgOx'˃B率@ [n(Yv ]IZC0<f4܊톯a+͆NYWiAt0۩~9+qL$w,N, Obm5N| z×+ky*#h6C)m/Zۺkzj"7YMd*d.JMEASgb^|l؊`wV#"-hN"7>)]h42bR{e2Mˢt [14w%~>pNo ޯX</S7^ F,n8eɟSˏGcWed[xD_3b5clh- ۠qka. t8{ )#~̦ƵVofQJ|e?$(?6fPk4x D%qYlS.'us_=kԷAYMάzw.ijݾa\Ȓyu\3@O"u]E{KJXue>+r (Ǡ,sڦYzh悀6N@'HK{f(0|h<=]u䮵wqxsZP&̽lzJTrV98j5<@69bj+Pـ_'(5+8pJ_ZA8jdl 1tY5ѶwT֖" j7r% cqM on(T+!G}0&{&{UwnSޝOnda?+QUEUzժU HjGe-,XXzl6Bȹv+MzmfHm0(u.hWX];;cV8Q½"+iz =i. dNuVA/F)c]Iba39(I+)/l2uduR'^\]_P.}!>fIP$>mv>hY( )@cUG؂=b-K* !_ֵ[# fQʆYAi{8MG ?kXgVۥ|_ڸmJJ5Uw=lS'AF˺ BXmJ<w{ ޭvh^~,۪tK/O{'(g֛G] '" CA2cE@͌Zl{L1 b97  >{KeȲYuh&&,.Y610|ȷ_4fA]!o^ eZCSN6*|61 ´|=~u?)̉jq*Ř̠yAr13ef5 #xQ }[?`H56h˰^D*$/"y Ჿ |1"`X$]Pz;Uij( hŖ ([)Ȩ qs}EsW3P)Fq#D|zPW¿%BQ<)z!4f KYE,TJ!$e^b%=uNFF,uz Ty 9mr 6>'O|!X_k@8 G jN=;[st%$ k 3SPYfwWpZ&'#b )~P´]SmSyL2' x+e Q8wQfmlR:6QE=w3pi{T^27`~y@mlE>3]n3W!wu"t f}ir8 ̕DE67 喐i!^os@|Iš-Hm;=3KQqn$fVZܳ=JH{!GhY]m*aHo ,HĸU*@?`jDӘ3LPΖs\ॐwsWP3E'\(f,9ǙFR?y,:7v|~^bm)ۙ^mh$]N]߱'Ca}Hz,+mvyS*ƷtcʥVW:=G4mey.D2Tsd\M\9'dn e-ǟ˵]S&Ffއ^Z`IeeorL7h>VQ&6G2^y *ՁNhICrPlRǜȥN7]nb+57 J,>&pd>>Yzc܆"0iqDi*wĚL_'uq"U(x;?]B`5u$xcts'b4[L\@:çd?Ȍ7э4 _&.{b0ktYd>uy)YIGfEph"/ʜFM2pE1xԣ"$448Vx/dwr!}kT𷔡Buu%`_@S0fU논0C|HD?jީMA q=˥rL8SbB;4' x!|'s䘗#6W/HV@] m7 ڑZ5Y̨HU2epB@֢5MծSkbi,~# +IJLjX:fa~u2vRu->/z|$CD-ŗ$yFU9`1e™Yfopj{&F.̆'dဒAH;H'ĕ$I"Gz3;8x={8SI_%6p TB` En 7:ȭÏ%Da+ jSebjҴ]@ayӡfEY{I}~Ww>sYdѷU2sfl;ͫ9oYI7KmRוAO~aI({^P@Bʌ p.^}UmUEi6[={'s/gvvq1pŒ4{\+x>'Dzb#ZS'>1op(<˞#C`sXKR{T!ƗJD ":]pI5s?;Ӱ^躬P2,PVYK4^-dv,Jp `"2]-\ZtQiN{b~9L"!;*ԒZ,)ym|HObv2I㡒>gb+UB",Y=#CobNp׉s=Uo6Jm7,C>މ\sgʰR͑#x5 \TԶ_:=P ~ Ce*XUg`Gx͏KTȰ'AyɎTۆM& QgڿiK:oP]n}TE@J &3FzUu.OEH"@&psNIDΰ0`Kp=Fmlu30l h\s3Q05`Bib_H`BXU'^5i蒟 B$:[lQ$e-5 ˠ}MA#1}0ߚ*ft^nIojt5L<'kl ơzscb@dٌ@(G_ ]s)*`9 .L_{iXݳT62َh:*d!ds<6ϭybKQ:ۥN^%a? H<΁[&"H9F -#6}rkC˨-|rS*m)Y98f_DZ?Ovbja_ntSa Ӱrw aPZEEL/>=W*''˹gb82XHl]puzI_]4O(!m9ZGW35㤥dBY?Qd|R!|p?&9i/>8` A sR9ڽPy@d{T/B3)#X-Va9O`Ɠ{+PP $]܀%LlwZ@? %=^*=ߵR]%XFH`tXKebS飠 `Mӑi_`3Zrɽq@sI (cGN!M3* bb+N謮*; RFa1=jC?fϳ{7َ%iL8u:I˖6yx>Ht$9E9{GÒ(BiJ`LCJ 1<3B$I ^.Mu%UV'~6 uWlޅxjƌLd"2-0 z  #jz/M_(w5d:QQ5s(A)tKjVgd$@ųHAD>e$joSEtnϝdR2wj^ZaDϽjCk>r4O]'ʝS0" 4v%=_V@v !..Gߴ7fjÓ>Ä۶l'?)zS:HU kPֶ'nz0Z!&$J,5*+R䮼TH)a4CBLMD%lqقZ-]s|΄eڗQzM~zﶤSl5շ}-Cf638Z"YNgWF{: aK<aoK&fr$E斩,$MON L~ɔ7Rۓh7zeiw,#Hʟ>9l?Bϙ7%cPU9dKnx}"uͫ #u#ڵ 畈9LQJyЦ*w_ 7=(Wif 1 nsF¼̺gmC'$tA\gk;$ 㡶 ob?}?v "!#ɻl@]M5o'KyKM $'`oM컸[# `sĿ :"wg+#,py @^豨n~~"f[-oy\ΫK7:zOC0T z<W #,78. t⷏"(.2.wOvT<,p!Et[ٹ!훤cv+I: Z!063I!\-#OT)凲 5w䭧@/qJc"ya  d*mRH8#H~ IS P]:ETuތA׉ q4Cz OԼk8nFI<4>n 0aK*pP9,b zwU.UՉYi>IAI`$P 4 øR/:_VvXhpSوQ*ZPcƏR&lO\\%HEQ#D~Y +17PAPkCA2ZߧQڿ֫ՏƝ=W],nR*y}Dns_LK+cv'*d$T/RtXj{i9-qr4}c-YplqK \:Q8w4ڐsMjduh~ ѱx0R^|%bH;:ՊŸA,׬mj ԾS) п3o5ye#Qy"7*o! #}nl'3)^(݄98&GFj{v#bc"F:c\dI.0UWSbӼA+G=IY8 H wBϿ&cG|m B$yS&B>yqeo{driIRr2lNQsVșFֶδ^[~EiAY,\R/7xdCP~5Q-hTu5DD Ԓ)%) M)5 ̿ B1SM"u8ޚwZg$wI6 t&(u,,h+`Buu_EQ ^cG熶,Y(U{41rf'0W#`KzAˉ*mOgg %[Aa߬Id;`XX3{!b8u'ber{uƷ_L>Oz=/2gv:g(ϖd}@F=0f%?!kr*7 ާvӵRTqG'bW)yAI %8lkyy8@);p5XҶI |W ?$vEb};`n4o&da]#  s"O4Q,Z;;$9 ?K5A/i_4Bqj<5&\7铕Dδ840rJole3gqJEP*GuKQtU-GdX8Whj|br3JZzQs1v:Ihmjcl{Hۤ!~mfuhsYn1tB7ȍKK`?}Hk7QZLp';>,Dޞd5Gωcyf'mѤ.LPUrTD><퀻QG( rasﴠzDA{lN8+w~}5_<}ΝwRaVXʁHnf@3)(+)tzʦ{BDHx%G.?z/{r1͒=OdQg%yJQu-Fэ :8[qpWqAy9T{MWIR24͎0 oY'p]f!H[g^o\e bĊx2E/CugƗz㵞w'<S RC#zn+Jspd+q$*!ٝG&xEŧ^G)&xѺFE=nJ5~?Ab[zRy9x`'#a]yS ;u׺}19CCtnY2ˋaPJsޠIx{V뜯$  î)o*]X3K>7Z\e&&]#ksb $ C<s-yh岵$kJ,J)9Ƀ6Ph0Ic; #-Qe #1=AW!L]3!J S- X.AkGyu}l G^!K9g#ŋΦ܎ܪ?!ZaȡzaK`f-qyBؼ)S:`NgEG(E}%7N fw5 **CMU9ZvHr=b382X8,1GLUf]_97 ..}?-&8"W<@IlUܕ`pWIA)AЫ@fA|v|qX4ˣČT.Ӊ\ ]= ^L$֮$?Z'Qo#Ttq1.6 ZH¶);e_o#zS>O֡^/5U4 <;`MJb\$5&NMXNnmMfNtE(pRI!滟*SpVvooci!9w3gPk!ReH:Jk Oh$3 CNLU ^ ތ/! @p1ޔ4%׌v Lzfwq-PG7"h#,Ϲ0슨`ѧ\U*#|s d8CZf\jdCM­Z45C*S(j^L"N(q# oq&Ҹ-祊M`!&wڌRX\U%pI|7bm?FdxS&ҫ>L!K;OEqUEݭR$idy%wm#@Jf]d1 'l7qRX+H$ٸwY(y$ j P_:*o^ R!ԩu)_ #1'*HU y )rt+ܒǔj{xGvok#U5dU;'.ǖZM4sL8LJ9*%3F&yslkW0M S[jZk&`^ BWAbod7K.kɅpHk_Hr;fj r<G*p8y3unNv+>DC(1G ys㜠ا{r䟽C+ѳϳ >3+LDYw mѧd@7FB`MdG|+cIB@ʣNOj^BhШ[?P}=; '$p~>yQ[LiUnw(_iyAke;"?E,kb,<< L~C \"\J>+EL]+[~6g*-3M>;d,< Uy Ge}GVи<0/NՇ@HYXZѡq7! n49P3րg8+dCԄyۊBoBH_Z S!#D%/qD]zl6Dhz"]k=^ļP}m{a[$ZcI`!.=BՓVyg F H0iN[2 ݹt"\s}q&Isn[ _:zכz" I4v9~- C^`"YTˡMOu~1IyB!ks,; ]#Mrܗʙ 9_b>+}-&fd7n4&LZjRG=:Й5/ ˄&0qC\X"̐kj{Ee Je,k{Z?ppb=݊:(2'fv=.٫h6;ĕ1s3im#3B H}_p$?,{t__ЉcDxZT|FTR0 CBUwt3̹ ωk伐Wjlѳ@hb] &}wsĨ 4mR5ү/Y >G;9raS%gn s#Bo)n3F#˟G nSQu?!IFV 8՝_\n B NsWn9FC6magys.΄psipdF}I@oQdPR†ɍN>*Nz fգ=jc4r%IPt7=Z){pKWDԨǟ BS)mJvDYu-J(ӽ@#E_q/\[}.m;ywNeӱoJ9Oo Q#IbZbN `.?>|6J^aQ7ꮗ+R\|+90S0$ V#!ط[Q`92٫>-Gn4Mqq_38g_NK5f?02Fy |5 nC+ tLi+,(”`#VԵ#LmkILJvhΞ|lVϷLdrɉ*{M0P'= )2z$} FȒʪG<}sԢ4Ԫ@sXVyB 8C?QOx=ݼWHe\<]Е H\6&x9sCkDb.3{q V:_SBIϸuU>_1QV|*YD1o[i.έRJ;"b)BG\NLE:ݠ{˲d[Ci`o0 7۽8@<,3VCo]S܆l2gD%)#لVN P7R.QNp99򮝋jK6 N~?DKj ct7eh%3B A~ĕ =jtX;yYa} ]PѦJ{Owsu9VSUXKϱVtKe1ּ̰I}&7)h vD eQã'gt/O7Fȡָ]D@G  |/qy Q6iy ir?XYYlgsf+ BcKlrhMߕ|옖li[3% u;3~.!w. Sa՜k㒹Ea4Fc%cjN'!Ÿx*p /Yyu&{S!pjBS#|n2UZ&?7D#Ə!q?" ]>EOĩYSn#{ݚZĂkŋAjǤSI5q%gѻFLt?vo6hw`)Z\zsq邚5xM"BsYw2oJحHe Dw005ds@L圠F K sw8]OӐ&~ &l cE;C8M "zÑ-D|8-{oAT;V8is \OQCn_H ܻ~f)b(:I#Hpi=hg0(6F qK V^|ZHn>:%R\::Lؕ?M$`Bw% MO0G@-wy\ )-!6кVEŸpQN(E< xk2{3̷[r_-><.I#LVL6 L'Vx=6XS,:©P'4\k.?<}{Q0Dn+7+S8 ~ ^.7x%'S> ` iߘh 3o2-IqaWm䞫,+&<ރMz8fθ[Ż0c<'n1 0 pH&Iav vB~%C6,7"\(rJ,ҏx(.ndʪc߄yҪ\h&S?d rX(y'lĺy,qB}ΚU7E(gw gxDOR27Uf Ԭ}nVWKn0֤C;kPkTjRa!=JDX3 "n$n[a5 Aqe9w"d/ӔQ=werckoykbBoL@l{^W ́<ȠMc~h.<.+^$zDV$s5/6HQvPh7 fomSz?y`6TuLNUL 3$X%y8 ȃygKR,p ϓ@U;##hPߞA`d T&J(>DzY*HjuRɬcNU;tWC ScqWqLY#Sjm?ȅ4OQjQRPI%@<3T=A$(q>"7I߫Oa%x vB~NP9\ۦ渳OV #U5⯹:P(Phkr(&C:1o},b_!tnˆWjG"e> HׁW' .Sb|)quH5yJuDkoa 2'eEh݄\>qp?ͭ1DPk/g4y\ NT>/p͗)@OY D9tf3Q%TK}2o1L+!lj*DQ_+c<}%9j8r'_RaԲ{lHz߯4JOHS79&!7VVB ߷;? k|{O`JƺD)N60[XY/Cv(HG3[&6x-B#h ~>CIG1opar&9&mGاe1vt=ģCQkȺ}` 5FᩁƖyvp_Ay* PA~45cY]6>Л&CtSje'2:[28̀@y7ĚIz%K/g#~kau$h&@Yk4cd0&Ϫ!dv: uiNl%ޅK0ս1O; ڭ˖dn#Z2KZ|&J4?+*+kJJ"=oG-#0,uQHp ݼup'}0+ lGv 5 h0o ]Y-٘IUwKh"܇k}zT!MmΘ{~TGwP"lYlI~2oRFbHWɅޘJeL}|2i3A@UP-9:@'K([lłUԿ=ԱxQ 2`UT=Jx_cd-0vN+V.3MwNjވ^_&wWJ\Hwȓ\J&҅Jq.ʠO cm$>-ߧЇIcTӘw:-FTT0 Ge`OIżq7p@e2̎{|te}t| /r9wMxr ݔ_쯮ҸDJv7u.wal-q3]ێ&<8=0ӺϺդP$VKދ~[Q|e-m"%H.=2t57rd%n¡wCܕٟoW+d*'q\Ǿ</%O(RGE d:y7ӷ~ +Mhj &1(s!Q^:B҇2K;ti8:>%m}/^Hq?{O,% RXN5Q ؏(Wֻ0U1W-5H'GyZR]/6$ʮ!76X=zխ7"UCźUSv!uƟ=I7/7;o K@ Q͍^cu?HiTYm ?j#k"H/'v)?/ĬVn2 @KB0؟%\qJI¸G^²LFM`g;r#$vs}9r@6"n5aߙ7I URPCR}8갷.&V8dmJ/s 栍n1LyǔGXyx|u7Wl"|GU0ZE40ohq  BU]i^bʉ 0mA oڵ& 7YH<]AŔ덃ސG St]|\s)HW?<v?s- LlJ|^rW.J$Nyeٱ} 9M9v^dh%S 4]Hw(i)*[(.$ EգYrnM=EZUDž8풽^y9O<#нK-ɱWiXNcw = c&x:YD 5v=P qU[ iA<WVWvc莵d~.vQa6)fy'%FȆP*Z Tr^jegF0n[2ҥ/05"H}>}og&L6ɰU={L3;;5mj_."^1B2nm qU%ZօDy􅂒*җӛJw~Xw\`$/s (t"wzJ!K^Z:['kXG9YbGO )o%~F@Rj!:nݗM\'j^K/S±bIMFXUʭj 0@30|@%HOΠ0];\PY>oueV@G&E>uf'@ Eƫ &k 5T56Wר<6Y``7B_xZHN UiNg3a7w{OiX\3' *oS3k&4RM ^.Z]հSFD7C?ەyF5!&q8&a~jMN9Nj@d z@ F:s7>[^.)LMmcDj+˧),/^H^%>qeqoVx!c旴=3%a k -Ӆ·10:5Vǘh0\[ mkMbfFO{H|ih=T#:Pq2NHXIC[ڐGZh=TbHGk2W{}Fbʔ4qK7`ͫGRU6T `)QY4øYqZYC3ExgcyzanU$]9 gz̰xFE P x 疈>G65E`tD}~ !IU{՝-?Di>>xxLh-v,35'딐Ł;>F WgNHñ~9 QH:{r CViUd>pTޮi5ԊJ#R;*4H{I4W)Gs|ڼ1"(Qy>a k2z#QR[lw&|Z)`UN iH"lj P;uǂNV 6eIxr{yA"zdXz6йx':FW~D[sdpwg|^ʑq\9:,A&qݸ驡W)zƑi>Hdz̤V"g`(0tHX:n<T"䞿Jh[wz8_(fW+\\!r #Io(q#ts0~' E0g!b = $hiF= plp e/y(R鼫[KZ]T 2|;;X?r\NἽP'2&gIw@.`j6MdeeR3; zԫ!D&v@PL|fCP Hkk?[|WwePKnm>>Plu1{ 4l&8} Kp{{]g$Fzx`7/6`cڄnW,7[KUuavӮ[/ Y0KpV1K?lЇAՋ ,vٕ!D#@OsXmPYxEmbdP9{#CdJn3EIјiΝIs_w&T\4jyO&ZJ9n-h !=0 3`a&ءvnuߋH2UlY_F >ឳXuP{d"TmlM>wt\E o0Gj?h=aXUO&V[B0T/h9}/m%X:v8 ֜:L~d(LGQeS!p|4EfF~LG5W7u'LaU*ZNȻW %κM{0X5{7aEܭ2]Nآb2вY&+ aN`ȅ-!9虅\ʺ9buOk>;''<|b+#bn{BOYÃy5X>-$Xj@uZx ZQx Ƿ^OIP8b$&ڋCŀe'pFdf{cqUw<2ΘdH J0jk~[E c>=!]yŒZL ӝv*~G@–ɭlqLfX]ƷI`$`7'DcatBђ,U:«^ ']u\ s;U+)IWwq.ȥ{1|U! "svw#nO'bJ3$) b9oκ˕,8PMb}{m =7LSȲ;wǬ:4/(<?voկw SoGuF2FD Ÿ1TD*Y)!S3Ua.YzRgܕY}Ǫ8C o  P4430LKQ3BqD~{% <&=%pRum刻 2s$pA}Eo~fU9 Jk;o6є'Sɕ"UF/bweBv}nRѵ:u BjSg0@H5GrZ$sȌPx]SK)듽VaTC[:՟ Ax:P1^cDu_8BB\dHw0_$ea׳WT'6\e\eh@6o$+ ]o`z}G?f2ZuT/kO,K{sU"S~-slkZw <Ŀ1_B0V'm;̩$$ˎܗ11uPW]|ĈXC@ZP=Tͣ%"uWɵظ f=X)ޥ~ӁFV;uc[D s$Zgz;o?-tۿ(1XOL_(zyK(Ԭ#PKZZeܪ^A7 2cŴW1s竿ZUi B[`7VKOhq#nѕ7lMdClm"D,w$B |I. ZɏMJi*g"7Qq{T^'ǔ! JRIOżl,I㙧+ՊzV@Z2徯7{:ߚ0~̪1ܐJ֍ϣa| F f+W qvX:>M4`8x̒N]C N]_ҧ?rq7!2v~I:iz>vKI"#彐 p)b@1ȟ7.ItᖆvmOc41ئ1DcE#ӞppiYYe-;,甡9rkշz y ~Apz{ts%~!#vҗ]ܛo-&pt%*ݝpv6{sLNaKN˛ǒ^E1udu (l-&sQ UWHar0aJ ,u'ZsJˁOuYEM}66S@$)` bƅq_oC2(+/5b3eR/ڳq;^ ѓ UmfKJXL0I 6dJRB޴ھ:D=ws0 r1iW̡H Vb1\(L?댷ܣQDwۡ=KCבپz(wnD`(a]/#*t{#T)4it?inN!:c V< W5-{-dشoĖq>|QLFh=d :vXW dȱPA%+HAeE!x,D.&}g͔fbr%VTN ޥJӍ{{+lPrPIY*C!Tw_ ˛F <s|mnz7Wd4,X]bv'9nNArFxm%Id2QVlYڅ|J8%aZv6]ҨFʹH כ>oW L//0ef[81-<@Nx#krP%0"YU@O6Шۻ\w]5,(BSQ wi#l0X@sQ.!8Lʡ+\g|%X_nR= rd) 2,;k!y3m>"^5u®ۛ mɆD`XfX]EI>QamE4hӎd ^qA- AmTBrKDO0ĩ'br7YuQBC@n($Y貧0k!0 _z2wvf!eڔ{_np'+POsS9|8x DLrM'R3GUȡ RrQ Q61+76]SL]oŻ^%Y^9=bt2)"KBe]`]?7Tkܪ2C y 4ƅՐrm=LDo"Q3&ʦ7Ԉ(N'Nw$4-zN auL)k+q}h@Z`҉ mKC*h(~7鼒O^T2|#kWwb-^ӓ][֢ڻ.t7~}]jm/Q0{j-) Q㗹uO6fa9/IJYNQ.?՜{ԜmM՗n|Alzk1rM}K2-[CHq/߿}ėe?fP9K@MBfQ0D}G4˘q$h1Vr@Ҍ^Ɛ3@?Alӊ/aЍp$F iX`\rܩ\|wuƔ({؋^8kCѓmj'L^{#8 Mvmд;* ҍ;u߄]Ⱥ7#ݪ Ә$NWl3oX%̀5 82=%c-҄Rels4զs}/Z9/(kȖ~ #AzJ0_ЇCWwHrɽ07iA*gv-r;_V+hgQ5Vٚ/k7Spi8Oc̍T) [i:1xFg`RE3^p?smp ,k,v\k\Tvۛw5g!O.V$%6/]y9iBLV3zw3~%(- GY5SRBwdLtQ'7RK:{s?J{qW }Kݶﲗ`WqN{8+/;<כXW /6ʲܞ6GoG awBn{b)h:4&%.xF| +03h<;ބbHxלoWZ#N0tŪaXºl{R֕(rox^KEUӢ+ϵxLڿ[Yőڱ4zp2']1xnL,Gz"sTx krW5"z&#Jx̒ˈ忭Ag|EԹ A/,+FrH-ѐb.'G  ip &'Oq0=߆WۥLڙ+"ܾqWdP9oVΡWlSS*H'^y7Z2-zWE/ωŮ+IA5}Gig-"+?cH&VH4(oX :q +3˫щ1kyZWv=u4A -`T0џXË_klO荿=h"Od:~@O 靺}J| J;dm-YslŗVeMG΢#6wnHS33< \>2tv!Ӓ)cItFTQ'+FRPnAo]rpޛ0 FN,1F./ܠ o/m1bO`ŒA6{sʿE_Uԩ3`砢o`lw{!tKjs/l0BS1dK& i\"ewnⳀ#a pO\k3%y2چCATL2YJVbCE[F ӱ3^8#v!d݋IL ԝul}0fp LZH{k(g` \N [0)t$/YFԋett%f|10(VMt ]E9(i>?@~ ތj2XnyyTѩ))$ad46AG%1fGRz:OSo*CHDzC)!~k[teQ3t"=,“<ޕ1vl jMvM_6}:)gm+-Jp6>7Oy")H+9c7C8mY?scf]c-9BC AJs,j}omuNf(_&+Є7Lq fUW뷭Wo1xdZy'ӯ vy ]);!.5wNXT"Unx!f wCt ;m~}GMhmbE0:+R;(2ၓ]D$R Fk;0򵐜'>zok^ vc*,3 ňΦjOXN`&f_*v85Nj<6*IDO^'{.H#9B91In<i T[;z!bL}Bmv)f,B=ڂNᒥcY؝70Kq+wSd׀.sPPI !{?:&e# 1*d[5s9#2̃8K(9ed~Cf1'ZhFM4l }e,Q\7T[7cѳo|]t[yPѐ̖OcO1O9=*yn O]63߿qн̨)X!nZ´gdNjm