freeradius-server-utils-debuginfo-3.0.21-lp152.2.3.1 4>$  Ap_k/=„Ӷ]J7ڝwV㼘>`ľGsT'rt!ɹǶ3ZNCt}#;Y W>wPœƨZaBX|} <ȵ 8_W&Q6TiҡuKy8ɉDVg~b͕PқlSuE0#ԌqII(Er ?<Ֆ7 - *+l?uy̭*F;Y4y(rjs#-hccd3e20dde390d1b503b2bf76dd01bc633f1cef61a65e705a8904e22d419dd5e053adc6b9a6b650f3b83501495249d6384252000(_k/=„C4 rDm fcOE~c13+) 2/3<"Y.%B]I cXV73 {Xhޓ0 1;-J)#jE5 !\j>pl"6 +{87ipOZK~n ?Jͩ\$ȻjeQ+\s`j W]ƤB:ù-v%s(D]So_Un:e%'@eoNQVC f./dŊQ E80mF-~NJ >p@?") 5 k(,48KTs &`& & & & &  & & Z&  H&   {(8%9H%:c%FG&H&I &XH Yt \ &]&^CbcQdeflu&v w&xp&y z,<@f|freeradius-server-utils-debuginfo3.0.21lp152.2.3.1Debug information for package freeradius-server-utilsThis package provides debug information for package freeradius-server-utils. Debug information is useful when developing applications that use this package or when debugging this package._klamb05 `openSUSE Leap 15.2openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgDevelopment/Debughttp://www.freeradius.org/linuxx86_64LK NM&TM#Q!O!OUb8ej8`tZAAAAAAAAAAA큤_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_k_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../../../../../usr/bin/radattr../../../../../usr/lib/debug/usr/bin/radattr-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/radwho../../../../../usr/lib/debug/usr/bin/radwho-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/radclient../../../../../usr/lib/debug/usr/bin/radclient-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/map_unit../../../../../usr/lib/debug/usr/bin/map_unit-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/rlm_ippool_tool../../../../../usr/lib/debug/usr/bin/rlm_ippool_tool-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/radsniff../../../../../usr/lib/debug/usr/bin/radsniff-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/radeapclient../../../../../usr/lib/debug/usr/bin/radeapclient-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/smbencrypt../../../../../usr/lib/debug/usr/bin/smbencrypt-3.0.21-lp152.2.3.1.x86_64.debug../../../../../usr/bin/dhcpclient../../../../../usr/lib/debug/usr/bin/dhcpclient-3.0.21-lp152.2.3.1.x86_64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfreeradius-server-3.0.21-lp152.2.3.1.src.rpmdebuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)freeradius-server-utils-debuginfofreeradius-server-utils-debuginfo(x86-64)    freeradius-server-debuginfo(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.21-lp152.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@Adam Majer Adam Majer Adam Majer Adam Majer Johannes Engel Michael Ströder adam.majer@suse.deMichael Ströder adam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682lamb05 1600894966  !"#$%&157194ba79b3d44e11e1e337a4f32e7643cba4cd351311d6666e9ff1b7c3adc026d31f651cb3263d7f98fc17972ba67ebad1af195f328d15227a3893ac1a9d53ed8b97648822f0899aa578185c31b334b2d69120b2bba01c50e054e01cc58b2024df7ccbb4818f81dffd6f75d1074aed8cf388e1c7ae419cbcd5b42677420fe39947fa2a6ceb3d4a9dc7e80fbf2f4555c1e4deaef5fbf7a0d5e6c4dfdfab42e4cede8da504c5aef5fb6151ba5c0c214818afa2dc3.0.21-lp152.2.3.13.0.21-lp152.2.3.1    debug.build-id157194ba79b3d44e11e1e337a4f32e7643cba4cd7194ba79b3d44e11e1e337a4f32e7643cba4cd.debug351311d6666e9ff1b7c3adc026d31f651cb3263d1311d6666e9ff1b7c3adc026d31f651cb3263d.debug7f98fc17972ba67ebad1af195f328d15227a389398fc17972ba67ebad1af195f328d15227a3893.debugac1a9d53ed8b97648822f0899aa578185c31b3341a9d53ed8b97648822f0899aa578185c31b334.debugd69120b2bba01c50e054e01cc58b2024df7ccbd69120b2bba01c50e054e01cc58b2024df7ccb.debug818f81dffd6f75d1074aed8cf388e1c7ae419c818f81dffd6f75d1074aed8cf388e1c7ae419c.debugbcd5b42677420fe39947fa2a6ceb3d4a9dc7e80fd5b42677420fe39947fa2a6ceb3d4a9dc7e80f.debugbf2f4555c1e4deaef5fbf7a0d5e6c4dfdfab42e42f4555c1e4deaef5fbf7a0d5e6c4dfdfab42e4.debugcede8da504c5aef5fb6151ba5c0c214818afa2dcde8da504c5aef5fb6151ba5c0c214818afa2dc.debugusrbindhcpclient-3.0.21-lp152.2.3.1.x86_64.debugmap_unit-3.0.21-lp152.2.3.1.x86_64.debugradattr-3.0.21-lp152.2.3.1.x86_64.debugradclient-3.0.21-lp152.2.3.1.x86_64.debugradeapclient-3.0.21-lp152.2.3.1.x86_64.debugradsniff-3.0.21-lp152.2.3.1.x86_64.debugradwho-3.0.21-lp152.2.3.1.x86_64.debugrlm_ippool_tool-3.0.21-lp152.2.3.1.x86_64.debugsmbencrypt-3.0.21-lp152.2.3.1.x86_64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/15//usr/lib/debug/.build-id/35//usr/lib/debug/.build-id/7f//usr/lib/debug/.build-id/ac//usr/lib/debug/.build-id/b2//usr/lib/debug/.build-id/b4//usr/lib/debug/.build-id/bc//usr/lib/debug/.build-id/bf//usr/lib/debug/.build-id/ce//usr/lib/debug/usr//usr/lib/debug/usr/bin/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14190/openSUSE_Leap_15.2_Update/388d832197792b54bb381a0d0865d9cf-freeradius-server.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linux directoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=cede8da504c5aef5fb6151ba5c0c214818afa2dc, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=ac1a9d53ed8b97648822f0899aa578185c31b334, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=157194ba79b3d44e11e1e337a4f32e7643cba4cd, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=7f98fc17972ba67ebad1af195f328d15227a3893, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=bcd5b42677420fe39947fa2a6ceb3d4a9dc7e80f, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=b4818f81dffd6f75d1074aed8cf388e1c7ae419c, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=351311d6666e9ff1b7c3adc026d31f651cb3263d, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=b2d69120b2bba01c50e054e01cc58b2024df7ccb, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=bf2f4555c1e4deaef5fbf7a0d5e6c4dfdfab42e4, for GNU/Linux 3.2.0, with debug_info, not strippedPPPPPPPPPHP0`BjA`ֈJfreeradius-server-debugsource(x86-64)3.0.21-lp152.2.3.1utf-8cd5e46f909312587f0a48b6c69b91432209d6a9dac070afdc001c3e55ddbace5?7zXZ !t/] crt:bLL g.1h\}ݩWdrI{{wWo)ק4gs}d7"4ĶK`Ӈ,M N4/۷;Y\ݚ&8 Nm"$7a)\җ%ޒcD3$4@]Oܛ< H-HC0d(^N$&W]p/]Nd)Cu] y^thk_y>;2"XI ^ŘnlnO1gcSWsm\gFL*J{<:-0#aiBjerx9M4pJcWsͭ˳*Mx)E'9YɼPv`R󷴠1h"-]Ձm"B"WQ5yEX`EM+qs4YU ˸plM_vٿɲΞ &%h_- Q[Fo|h fnBQc恽ڤ,x%]%.jjtBZm) '0N 饾[6d 7Ϭ#PJӤC݀X/r_%qFj7owݦH+zmʨ7" % lF:µ#'(P0?gЙֵ#Fcd UcD頔)kP(5L .tUMt$:Si!}ѡI4"T0 &ݤȖP+7icLr3I{f11[y}4\o++I4@P.s $]ϝN8ɓYߓXd jzHs0-6lcluTSჽ{nKŰx\ذ- tt{g 杘v]h2My**3 vu>,#Zd,׮{Ab;+b q"J](l]~{`=_̩e)nWlL ;ϣNZY-?n J@(  w3;dW֍4pF<U:`Dݱ9Ap O1{ZFP|pZJlb_P'@Cŕ ܳv-|y܄)ki/´1~Ĉ)ꀘb!tJu0Ph=$1 9'nI`^'Х@!? ;,1dRRu)x&SL.#lŰdPѨdkHQ:ϓ %m"R5= Fη uⰰMR' 87Wu0SH:ЪR!"TXGe5Bmy 5|0=ғi7hb..qwxhT bLO 8ʏu4t[f ~l f < ƛ.B\6^|<~۝[.>s[) 6 G@қ2{Vq#]wg 'Lu}1/7T: Rс&p_uu$ {6bT߷0W|ꄭl+Y^ba ! P6"f>L&PUTK "Do,hԭ>z0`hE0AL>"es {P\7HL@eJQ4ng?棡R8{78r{(V]EHYv XSHm衞WW*t}T޾6v޴}:;XuEuÉZγɲ|j?78z "M;5rm/O@:VPF(C*Sqݚ?a>B"". OTHF8@_Ye2`6}ڤLpHanc.[n_Jks)vb|ضiG%6^ՠAQȨVk.9Z nVUg? l\\`Q# {bK>Mm-lcGZW^D+gtSص e 9 HTl֖{IxkNT$3*<7U~wE\ry 2B*xZaBQJ^F(QaFwH ,BgN^#":/,MHO|r:jZ屁L\v]X[\YBQ[2d ^=4˰Z,#㞷p,j偁}\DZܐS=f~*4_qUT6՝go!tև7GNq,(H\?Yԫ;tXxFZ 75TMZ<ׯ8F-E Mu2Va_; N~4Gz';4Ku|iuʭ6Qc:]B!UkP)J|C0jj'mZQQ֯yK-.c C|2~go?Zn 0+ 7mf#MA;q 󽦖fQY;jtߗ#cxYl9Ba<&q5'ǂee3l;lxeg#6@za!\߻Bʛ|P4<2Ed%c@@.9c)L2dB> Og i]yqJ-[|a=Vc(Q-}2 hl]=1D9vH܋꣔71DCLCm7S0x}wP,뷖ϳwe =.X>JF`o儘KծcaZA6#kh. )Bv8! EQ0)a+]0N笡a3Be;>&9WΞ/+T:#.r!$Nm乇0݊T0'?~ULRVԋDV_2WA^uEj8紁FmUɝ ل6|&{H/}鐏2k:š֝Ε4Qnl< j]Ѓ/ "4^2)t݅—p\'BޅeV_[ڪ,$ݙL{Z''Q. 8Vh'PPѶ?O$铔~%X@VI?wW lD_Z%@^D5e5{/$|?q;!R<`U  66:O /|;~ܦ ֝_7x`1J@K`C$ oy`WШ:۱' zH/@'jHkKL}syNcK%ƥ?Du.XD"C- 9vW{(2hݏ'i61mtSg\5K/E~ cG#[J[D⨢ W=b @\n\C" 0yH:- Tߥ2훰7<ZCokl_2?_ ̻Ψߺ~Ti\jk{Yɰ :e'qMUe0ѧ3YX̿v#V,^" Wǰ>⮋ȪQ6%| ݵJ7U&zIN.E8.4(]>6TZza} 5YFGOIu/;b|yx⋺ֿggz+Ȁy_ǒ8et4;h4M;#59pxH*ŻFnHfCAâ!4}e(t_g/VbMP0F*k` =Ms&̉.%ݕ*gM |'-=0MQ*w՛Zu| Er 7 "5n'޾~A,s?cbCPHJAZ(]L[WX$E!~qPwǼrsѡ/ Hz|jZyQ$I^rq{LveU%?`IE2R&ʹ mٍ/$xa"$zo:z$1%tx䅶U;2Qϧ8%rz' _ Sg }9?w&.Uy_м9*~Pu4JRe"v嘧*)C_}[3g`WU>?bS͉)"H>&XIsXJ8ۓ՚U0p7 e >S޳2eA_гP5d,hLq"oB?bc وzv\KYήp.E=b&R[)wU=m'ᘂc&K˞}=+Gif_G>_ P([9t#եAFg_+;["L`/Ȫevv3'٤>)yuL+eM+MEjqOCCզ%[тN+ p H|Z7$,qV['$Dc?I; ~4÷KgTZ8TE򣋐C4)\{?^WJl/y$ױcRcx<1֦laH]`%CD"⛎tN i!|9GtK2Hkt+ΦrY'3M JhU.v/ǵ2y9s5ET Ti<Xp\,wΔ\ۙ^?W>jzeCxH⮮!9 `Y$yHGqGv%MISߪXݺ; `՟w011VR@UZ b> qofuaq[eMg4X,-.`/-zF\Y]9v-2:>&SL #T\_AH+BNSThQ<(1S؁]\PZ~I[}-!6pV=s`aIakYgB6&S=usϼ]E3ȣǺ?.z>Ƅَ֕w1[IG0Y6ͨaUl|s[˘(&>Fey%^ծR0= yhL7{pPPWJG'*o5O.`:]F(*ڌ_ɠvʽyp6҉Ʌb9E*ܯ=;S]+Fx7$*`JUQn6bW Yy31Px1:GP_e'G3QBrV9˒Ըe7}5J@y\Tdtx sdC,Yr)}*.wH^18d,s8}Ke)-y':y{j1'FP}3]Ybw`xwZč^ܢI=v6ΒW3 P7utq yQ:;l﬇/bk7V# L DCvO7y/Y8OP:t~AUq㾸g=EϕQj"Gl+E^k/~ʼng`o'SL o AO̔6E`LuoVw4BzfAa7F3 )yp-/uVojdS!V c>SY+8U|D8`v[,Ҙ%vh,-)R˘Rcd؉Or>v;}=H yPh"m57ϬQᘥmK 1ôxrCѾMc{'4<]DeK2S[;~>GHL͜rFJoPKarZCylf8oQa /A<|vѡkE׈#lj!)ne7Q,% M#8qlYM7-ָr( 2' rIRX%.|h Ro)˖ߎG6VYR^fh׍A}gO Âݯ!M,&(^M;ehTl/yªx;VA!g8ĞFDJAuZV 4;z[nvrx4QPϰ mDeJjzv+𕀅*U$E@'GlQjUJ4S|HPhyD*v~ zv\kGvH6"x+' :zD`C5 j(I9CJB*,?c|C}\WP0_6s!kR`:S}Cdw,PdLGu9,݆a|I%KZR|Qۅ[ wyٟj="ݾuvckP'J Iqpѷ6ޛ鐺R!F;5>pP#v%5 n&TU,YrКIq C>T9I\uz*/#),h|-Hdzv8ujlG\ 'ܻ8; ٺ) PmH5TW鬠 R<DG'İ uF*gmDXmm7Yu7 URA!UZ`bptǐgkFi4$'!XOKr#8@$f-FkS 7pn6fnîJ8$9eP~"Q5PeGw (u=qcg@CDEu\'cw7&d 0XzBt‘yf^l@leJ#4n(xu#<4yAVh7AZRFD|g )X"N":QpЛ>t!JºǺjRv3R"QRyE354FW$.#n) 5KKM7-148))x}6'ˡDr@w`) 5Ϊ͸E0 [ Gk5h7p2)22\:oQ)cH@oDՀPu23W:7>KfwVdB+I'21Yn 3{ý u9kó^|CgTO EbF}G T* !OpE%lZ *3ƥZȚh0SKt:,GґHLDOC;8uHw<^3BAH{@f"Iol5^^`e_z\͖pP+S & rM9DjMKuU^"v N!@X%N -O$mN|Z#†ΥR >2?yNRlwvT5DvQ+PJp'AH;>PS$:AvH~<Ku3DYO=u02 !%+%zct[ ijB8&S}@4彨\NT\ TԱc~vC ױX}")3"#[jI=:"tlc;/a8gw}l DQA^%LS4ş%eپuzv-bYf|WY4 ztΧM^qf'qE+J#R{@fщbj/3 JiuUĮAZW<}h2!VGY@*"Ew~&,(mmD?>|X;kZx{L8>h27P]y-'#1iBQFk ʹ3tJV EZyN;:c_"dVӈ#&`rL঍+~pxW_,0ώjM2j$\D΢۳9Z(UO6[nՄ¢zj#}(:R\?LIJa501 _wIՌ*:[6{ab%KRc|{..2j$YSw$x\3.m6X'*'ӷNp1W[Uǖ+q(Snҟԁ28*s)NͬcT \hX!€,Dhs5u_o1_{tU[ T|PtK:Er5NVƗGvXŠ"mH~V78F-vWۘag4wo{)=xF}@Si`4j}sû6W&H,DLdhEmھ,cɧ}AGn#ŅT3IGAi{e&16NUP\DŽk#g(H>7a*k Cx񀂤kO Q"lmi*Q/-+q?l$ԟ7VJP1vE8%SA)ۓJKT3 -'rb쑇w%ҩ-T1LR獜;e[U ~U>U_Oi\ՏrXǓu$Ch`g?X(?6%xzep~G$k>AH!$0-x֌,D[$}܍fFqT|3dͲ=A;lM!qX\/SEbe%s'–k5M1C2_h7s~,0T+[G: p:YhN/"g~k%{"T%E!Fbj4NK, 3^^Z&je+/}[d:dI//&YP@Tc>vudXn`p: aS~V]<;hQ'lXx&wrjg@hCHnƆPtArGHV&mxq|J6usE&ܞ{c JeZD2ENYhh # UkE;HrLEd-QRdfB|Z`l#Y)._#)AK#>\Xׄ%6Nzd(:h9_DT^gyY47m/[M֥7a+kՕ2L81o= 8Hdc 7NӼy%j}.ή֧hA{2Cf߅/e5 ef6:QȻO ?*uVJ gu NXqW9wO[1,s#.)ؒ /W:ĭƄgPm'7 mY $%1 Xm#%]@na'R~ Ev[n?0x\ %_fC;\7xubd|07@7WC0U*jmftHՆ.flrS_7 :vCWh`x$W,i͹w@"c{|}%/}b؆Zw O4 h8z^Ct~!^P|noDu!^ʈq^3Ƃ~h{@^|IS 3B$\=)~ʯ-ʹ&oMf.F^6pUxxjt%a59E"Ht94 LE͵_I<+ZxEkuVB{8`Ť(ke SD9- ,^WX'sЛb(N3Yj]ӳ"ope2BU nvʓ].v+c䖷H4Jn˷4ΧArG8u-V|#CaD'WIQt]Zύ.ÈYhgf锰6~P% nm`V[2&ӘƓuLM8m>q_GUםC3A9Dy|O'@ --YRp. =Tn@H\: 2 1 ۥ$Y]==i6Go/_|&CSZL379&nhtj=)e)%#Q4 b_on +a9Ǟ3* {?M .j%ô@ imfj|"sOMQb-qIEu:@ݚ"GKL'93J߸: x$R-6%I(&6[ma}z̔4@17sE:|Zҙ 3ЫB7iH<jJxb8'јK>ch$۴姗f"~-`joouOLc\\3X@`*Fi]LaPcs]CQ@c˱d%uk { )K\j_bK:ղy"Z1뒭x !샍IVzʆWzzD- I1dϮPN& );Ùr+ZF%̍VzK=I 4.PY+,.4u-C^TƜHvht~P[`krIYĔ-u<(2O: wh1R[HA'qb4!hY {~ْ?8}@>L*2t_ʄ4Vo$t[eG(kc*$w]u'0X2wڦ.Ui2!՚Z}$_\- Q`Y fyrdݍc:'ġ 0ԍ6v@8>yBUk2qg4$Ԗ CzA n:KLrEyW78?H^V3V{ f:N7nvdGl.i~Nዔ!QQ{4$;ML U+H`Lqc[=?a >!h3)7Y's27fBˢ[]N\s81c{紾xHuOD pBXJjUKNnQN.I{pyRr3/“CGo2WxM6iwk~r<,,Ji\ )=5JNeV^’DE`)8+*yU:\]쪋uqP$. KBZit8Kqa|m%+2|.-gN#PZ __rZt;TE)tE0'Y#{A)ga |o>F /\O8;AWrv_Z Ԣۼ9 £kKJK½~oR;/lnܪVP)<}ؔ)OuG@Xa+ g)܏>E iޛt 0J O/mP.Ðvp.dG[B  ̯V dk~}"vS^&% TA<Z"Ѝ?7sL!N3oZ\Nh H ~ kJVLG8"t Jvc wW^Ubz(axC \90tgK-[fwj.t Tiljji xP?#>$g]â2{9UmQԵb&]yTw͜!T յ؎'3f#2GA;fĮU].@F,q}!+1i*crה:WQfؽ}~ 4VZ0cDžHJUǥJ!CEQL(BAlCQ@%sjA1a1gW8$ϴډ=\lOu(ࣵ5!V:k7yGR˯ޢЗ hS%u$- sB AYI nȪ©N;PMdS}XBm+%b@Fb-MxZEMKNo{J7JW#8ʤzAn}64cyz.c`B[^=R ]w(\:Ԥxz "bM Ů Isxi SǗ@J,f#xkU}ȱN(Oitwt!( ˟ 7{Ae'{ku1T}\ -Mj3/2!-7 htK^vp]}`cbE2 9[ho!+SA$ep6AHJ<ܭ{~G#8Oa_¬NӴAL= lUqciۦ9z^?Ꮾ~pÿ3)V=cڛcroD7W6)A1h[iub 8g{Dӆp),yWTVYFe}V*j1}&mTS;fN)^;OJHn<] e3QáЦ{ woMp:OyjL8ΪvZDy.JKgGY6W'" P:KmE9l[Bǔ.3BEӘcӀB:d8 =&ɸW^&Ø'o^7=(yPң6uYFL~U'Hq<iUg`zHt ܚ#F4;ht5-P&#aFK(У>G:i.x)ŭsՃ|&?p)a_5&/Kπt?J(IB]~# iWvA_#lZFjJ~w=mՍ'zN%묻ZHx\e)Ð >|'鬳zPx(kq4=c5k ?3R\!$-գ|L5' ]JEfM qסP,aj />$_W~lA(px=%OØUnx)]6BW~3I(ZD3sSJ5e *(!ds}!t=[Jv6m},rgV@Q0*d+HŚBJID5\*%uL*:uV2̈s11j+@as4d<}nHE4?_ch| INb}v"D{_~Ɲ&*9"\OE㷤E HkCU$ﺨ:r?O?Yˎ?eIҭ~ÎEyPmXJYLń!u0! f 3׻n;I0P*Ϧ!"I J"J:$d|j9نz#}SUG)=!e myulh"Wi$gK OM&S6])R:ƮSBV"(m!'?9Η]'4Sܑ j!4S4oփ'D:Hx..3P"֯`WqOT=Ҝ2A#-WZWW_|CA&l)7jwO~7{2n+@ W{Suuj"s#D)UQ'Uf5JB;׏|#B0YK f3s+Sԅ鯤.RDg8Sv|E4GExP0rq;+O_?t0щq4:5J\+1K A1۷K/-xXtNVt([pRUU!.Qԑ*F0ܕ2aI+"?|(׊Pۂ?;ha†fS:8Ia N-iBZbK%QNg;_]Ŧ92̷#\/}3_*ѿ9BKO '?Fr괶 z`? P3zD>|* T %) K̮Du{S452[ &+Np[ICL"H=79gc2j ҫ.3["IJwɈU//o7F&"%SaO>ns&{<řޯF-lٴ6Ǝ #+3H^y\iTY}2bT1h"ѢܳR \ ΖYNhtU:ڡ;/ܭ?;襇8FϻU1;[Mn$Z`&<JL!}QUHQI3]B5$ CfXf0O-WHuq## yw8.MنTR;ŞKfž)-< _lԓKxvUV(uk|z0$*90nƍm복Y$#J4g tN}H~r uG0f6'ګ9~]s_wgXohCIwG=]j-1ࣅtܨ;N,a)N ,X^exȳE%ᓕ"PھoL^E!]haw@3C3^A7-V&oEaeh1B+oM[52E.Mri_4Kml[ ӳwśWk#'kVP>bhJ}L2h%I*J f~wPº Ɇ# '+3˷&oN hX\'ֽ΢vkp}ڪ~6'(cF%N ~QHXEqZ qS3Y@D2f9er11~P6T Cz_N$ wERK2/@3@y3H?߭3GAQ,ާA/H;;UCN//yJd&X/(,3QtVzzwZ3?Ё%`,i#&bkܑPW:T} ̆^nOb\bnw@Z5.1-=kʪ8?/MBxw&Ưh)Ab8T) U2{Y{?ƚKxDf| Hb'SvdmDyT^>1e8He9.E84#>AF?>12g~UO ]y!K EZYjط9ɔB,LGlU7hm5z1]0Tn+z1+*IŦw($]i4~GCy4Z9]pfJ8G4&ۅL=Xg"|L3Dԩ|Tiޚ ["? Dкe5jv'L$ƵxJP2DUOnwab-N ZX1q.|/SAKl)GUPqYK(" '`mQ~ΰ;ٍv$ZMб7ZD6GUYV"U+qQ]N2? ~KXDј`eTNv7~}> Gf}轖\ȶI=;2O= Ԯ t/qW2z& &cIxYţR֨#d}~R@Kd֚<MMh:RIPd`STRvEUNv`pdWC庝zf,Sly`s4~9DQ{HQX>b?!!a!(JuĹ&z(C3|5́ݳ[ uZY~ޥy+LϣsT/?)H))f:Z@7f<.Ӯ3J@SUpU.Ἣ0 *)[]V'y;^0o0-D*dK%p尹 f^`ZS9 ,a#1k^Z#,^[>ʡ_93=5,.01 ÒoS"QNC#V-֎qRy܊q)-)Ecq?" ΂k zL$t {dp-zJ >lV^JM`!KS4:ʱ 1d%&#H:ꐻjj.)\GAlXb 6!7eBT* D'ghzQ ci`ֲWﲗ#%lFIʒX.+Or⺜8ac:k7P{޵[e43չ`lJ|3K 'YX7kI9`PꕱB5+Ͱ^`*c%'7|SQ OB6Us@?qHnڅ{'|/Zf^ۣOWcI-̻ X)>I%]a)F=Xџ'ϬJ, d?M*n* Ǵ:M%ͫIWZ!E_~()hTPT.Y$l F/LTW:1BHS3JOn i[/3}>u\=Rq-@>+ k(R9IRպyίI$Ȱj% A`#|VPYO>a'_@ 07љiHfiذsn{BR+HY4;VhmAU^WOʑ vj7Ȼg1cЋ1wC( !-$Ll~eաAgt>gPt_$ :983B*๑cfn 9> BRb&ek tHqy<~=w v<2ތaR6NW7~0 /vXٛ\6,.\_ӠJh"FoD alp4';wo\>§I{o7'o L>24l2`a("Ťf3u̢!b‡_q0>aueږ~әѓrQ@z 0f6'Rjd?E,ƍ |] qBr!ƟNcN"لClbWL]ɖϧ+QldQg@֕p?hKԣ r [ܤ3!>b\/PZf5CG: #-'nʣ.UjoUdEzZtAh׵g$o1UkWOR)c=FwC<(Eq5ޜVKTJ%f0vƸ6pٱI"=s%l9zqխ|fxrE)2xR>5e+W a.)ш;vƠ*BjMikFL_#j`?#dEV#őO7L%F +4C#<_Wy+\YBtSzϷ gKRp•J\t^WSUZd(^>R76D!q]saPYa91Beچ.H;A1}<͟]3ڧB,C"X]R,}᠂D`( KuvR_Kn:**?cՆ[FJ%\+%hTU zauT0[Q@SiC0Rz:26 tB m3îܝ~:ccPn$JچJo˭$gwצ POw%$uPnԡ+9j;6+YhG8.r*jœs 54%IjOZқk[oa6Bg ysL˚^ TI=/Գ8X4QCܰՀwo 6R1qBM0ܹ$rlezZUU-yPVPJnv)U.^J+lpzVXw&0i2gaHu/ \3痯,IƎN2R]q/h+:06hĸ29z0; \Nsb5/ ;%||/ƅj  %_:[6jGU2O*}lO«lGj +|!wq _1wFt8lFYv,'(l39By7H?0znpD99&Pr 7*tx-NP4iîY(˄jH1jp# ө[ryގx@ӣcŃQZX!VprP!C#+{9"")j,&\NNI @0OdU'vEfQuSߖ9rZPU7_5OGT{Mn㟟 lXw|`C:opF+gcG`N<&}R`[oV`6'DzIN0غ-6l{/5꾬yP]!w`=DP@ xMjҒ2p:SV %^^г1)P"$N!5|u)ڈIRn)`OU-[dһe4Z!4JT:R6Tb3Ew?z])+\͍uA쥓q9y?KfL2pQIi`(Y5Êc&ሽNK;g*Nr? @7r\f{:УWw8 pv:eH1KJ4Ni}Ը>eFƭDIͷS(K =k9t!ePj`^9j<ʳ1>+>5Gƍ>)Dp[UI>PKgL]x =8bCowa@Nˠ Ńt M)z~4£I TmVk=ILێ k[Ce'@MrNw”a=R_YRR{*L\}.,J9.b*j=/exhMX):Fič%#UBp.&sܫ"lyN̛FA1/O3eR#Hc*rp钊LS|ͅoB1ϯӘuUt=:Lhc2HYnڷtm J GKz@OuA!dtaAW`?H+p!i^٥ sn#@d1ŮEaGrtu:^$/ )Ŕ|`zfw̴mˆJcQn!bIέ(S i[!e 4[ґ-oG%8\;n>#8cxg܉30Ǭ:Tff@)&&Rt>~ a"L3-/Vo<׍fB@id)oVSVwt"V/0>є9xtP 6/ C#ufL +-GCiP9rK-f^;'lgE ˞:feP%bW*WP&i¡Bi@vQĚ$oYb4Xns pTs\#Ua#u%ӺGoyzfL5._Ԑ,@V$kdx;Z5qE:j\ZG; xk],Z[e;Ll~:5q Jh;='lzF}CqtM2XdwsLٰ>`|v䒩 Vb.\&ZܡY.<>1/z>D.+fgp>p%9ګM =1 $E)wp`lf B9d AUL鹜x\%I'Fę 휨hEV+qpSĔ#ŧl@Tmb+Ko*A@jR>XPފB!qO8U2x.q!kMŒrPLڳ3sykmk}m;hX$Yss8H0֣\Jڭr](Z1IGF*gz&Sf ra9C0^e/6nQa$5D-V1,^sʝr0zp2 ,uW1y58\4#N;}ݞW}(Z1وcԀf=VԜ8Ȉ$-q#BHw6M9#C[Νt2/Ό(m.sxtoߗSflh0!+-{*wC8)]U)*TYi|/$](nKU52jz(ږ4w}jwZ1*d-K͐ĕr[ >[ƮeIB/'υ|i>≉{& i GE w5WY)%+^OxF|@U^hH{3X6$7^7u#& TǢ|g(6Q-څj\ lDC^\P+J>,a[|:uJt<&:5tIbq^|̃zDʾ[#a1M!{ܞ16K! 6 u D'+~W0L2=L$5.j_,\(-a_S_?9nGDjռIH7 6Z )7L(ݦљBF\<÷p8/1aC? 'Wy@_:w7:hד bف+v/~9f8s3#=) 23 2Á-7})\}a, aH{EMG=HBo *ݽML­3 L]yOq J+شtw{ ~ #ˮ^LP%| 3 sL0vH (t+ze "擛skFIgnpڳK Q=nd8%!MSr"Y|)2Lqg+GO!?4KnXOF{{J _}SOUncAghA٪qGZ=[Af<i<*"Hec]eba ĭc&mɣo^V^GY4,'d`oi˝V׵ӟtXD =WtKvyFw/< \ G:6'U^*t0*:?u[Q\|jbaRbLPYPw :LU&ppJ%7b .1i}c0݉n>`"zrmWǽg.Xz³6i>V;k;EuqQ]"\)`TH Vyá1#WiK$u7?<}5 ?ѡ25v5r:**uw ~UI/M:_ݜ_4JX9b,)쾠=wW% ݠ)Uhh;B*fTvz#eg$]5s-'rFUTp+\k2;yWy XE?\77 ."6WO϶Mд|fl7 d_ w5@Of37J+ڨ "O~ݯɣq<5 !T9Mvq2x^b϶B*WN)A^QE6h!!kqhp6F0܇;H)εR`sN#. kO9:ш ̏7WO0x$Sv\Hp89$eWB2C;zDNɎt|=86,X[<؀A_; WaJ$?HbvnǒtL ,fYBo{hR'8ȟ!hLǥCh8IF?7TL,7h97+i0%~<r/xUOz 3Kl/6_ 9%d5R_o蹵GPGKqr%\DJMe]$EJˡ "Q䍞)eI'+ɨ- 0r: `I42Oޓw9L  ;Li,ՠ`dw3oRnP-Tz} <92=w[51թSOtL`;#\@:ˏiARJVx OqÂa>~ji]!R0F^^-H@׈͝_9+1"|AuaPjښn>|=5v=ܺ2YUJLD%Iߙd`̎(-KoyG1wnǡTM6FYcu]l KĂ'/pt{خ?V4[ڸtw"c>LgoCn:C W?V2H)& J EIBvQndej0?*}]5%bos޲ic[nD=`9~u Ě{f_,trSBꦒ1X61X0j 0JIIuO4Qxk']Aꕒ$۵ڔQm~8/Z igoU w1]C:WZt0aqQu8aTU &&A Iaxx~McDAȉ7q~@7Ag|=""n\ϪZ-1Av*}7lSRZg2֑ Wx!T')BeGmh9ypN{3TSAz3`Nv2۔,w^C !}>>\:qh-nL2T0#FjĒei/SrMck..o|/2r4ZNO[vSy^1B "`cӡ8hYr5L7T[,+|%mȽ!yT_Àc8$?#)vm6xFD0KKBW&6q+Mh(:LUZ1Q EKI<76t֢^*w@ rPq ūIGip@7W]nKa(u $L> 3^ToS!"5"٦2M 2sl}<vpn¿Tx$OR[ofY)`űH-V:?*h!>HTz<<آ==X8͗EBp@"# <U0[+^2HM60ǯȑdת2(*v75G{{"8;0htߥzUVkQ 5<-3lӼpv>ɆV!snթq ]OX'<{{b&V)5 &$QE3cO ݋\O?y~5jEsY> ZKVA!=y >K+4^@Gy(RSOS'`N1ot֨ ׌ H&m"Eƪ%nUd7lo#=w !؈+Gî@q,NU_ ~T`qI;_Fa?5,,0^uP)蠉W5|?~aL8H@03ŲL TO~yZx'B_`W+.q(gܻ"~_|LkCD2T㠡d1="ۗ Ũà6,z.v;@.[ssw4伔V82hɾuo_pmpo=:; BUGYEpoliW3^#o 6{WN.ό}|GFFZ<^y s×oYVf]bŰӤDD_5OؾG (1[n&"~40.- v~ mcf3Z%j"V/z7Rv$.[3y :>!zF?4zA`ڙI3t普$L W%+4LS\GC3 l bA/.:;XFJn̵aZ/I$e$-1axo:N^UzIW#2юKZ\؜Z7pdkQQGqbuc'3BنY ?i ;Y ՐIgՋL%1)/ϖMa6 Z#W!hLV<4ؠq̰) 8;`S̑9 J,L8<=r0fHB| <0y&0θr` {D҄lҏ?#rf$D/6D)aAT)l1p2wPG#~TEՌ9YxpZ3m*&Ut')]?\$҅6/͈v5YsW:/ kOWxל^'@Z%:/dfǯ*i!\Q _*z/Ww;TL|j Fl[#rF]EӘwU^6c5}k|U}NPج(wЦ> ٹJLSz8);beKD2No *,S`Q pu 70-кsw7gv^5?oJbf csr5r1#puг|j2Z8ea "h >5~ G<'>LBI? m3at]7HKf*F`wV?%a Whda(du@SC3C$7}qZz\Q"yok*mbfTݗr o.*֍N>Ð (nPtrYO/ կpZVxVVF+RRJ}E \xv q{qp|PF>=h8$OC_@jf5h_eI5] QBH=V,Ŀ:o֞DaxmYԹNjgmfzD!"ndSK˩V!c|d|bB,B$pῃWa,{9c `g]#H߷Ih'J=s0U hһDAka۹V0D*260 naZSudޝQ',a:Oni{R%,#";,m}ݧ)6r1se?vӰy"uSr $-I뚒V6n[jH .3BEjDψ˷WSۿ)WR%$9jE*"yvO@-z3K=w3GzlȞY{kO*U6=|d lSfw]U/&5o]S7t̪DdђѼ v{4<𥓍jT4LWsޕ.\AΎ_I=M`pdo3ʀR(=af sM{J_ˍ*[3w`aZ{On=nTb2 ϐprM>SF&d'Uj1i3l2syE JTӟ#[pC#Ydm8#/]:<ύ^q>mŖC^b i6 &Toy6*i Bv[Xǟ1x>(hߐ/14#eRHWcKj-v)\X]N1.!Uf瞥JDcTz=^xPpQH8c-4;qgִ?0=zђ m4-HKaxW ՝An$2Ӫ꿄܎3lZ;_Q UJMl͔۫}9.HqjNMvC,fMCK${L:;X~ۻp6#J$ZT0pE1_@6yb<ΌL0?_6(A< lSdw;{1]ӊE 0ˏĭ!eU`J NݱvLT^ yU"x~uz|UήKCn(eI?mjӳq'(^R_j`PgW >Y֑ŽQNƾ2;>޴-ҹ!?arܫՎ9X:ܦ&_z?`#RKaI=٘X5ْ;]=̎{)f(jgkYRUihp"%yը@Yӆako5jLgRṟȡ4 HT; JՈy"&Q,rl:9gW7S%GzWWϠ~XHrKaBwjevs$M&qQxasg[y@s\|G! Ä= 6Os =?_.)L4G<-g4t0H .P[Jirş\~yKkmX-VVohqa~C,-xϣNDG4W HRZ.Bd~N,k槀N%0ByU2 e JbBR3.?0~IR` LNZ맛]N&KY̕9්0&Hy[^w qBHԐ"~"[vz&@Cvl)1L.y0 Y3< Utܢc%,,j܁.R_R[ 1=PGs&ck.·R#v184Bx5 цvB*TН2_{_'VXu8]j:3cLN3jc4䵅u*e̝kNhlm}_5?iL`R~.#1x=hYq \,*u4$ ԀnB;E7v ydqzocJ{ybK3ޝ3푣w3̚aÏRJe>|aҶ3*sYIe '몌h'ש,a7H40gG >lGp"<7Lb0E40x,{lEu05<OӨ;MIK߳U:)Mb4zt~ReP] ɣ)~TǍ<} &5!nƑهRKT_Qx1ZSvB(QNJTηBl9I7u_Zf̼YF(;DIؽs _^ 1՝t䴿o\x}g!D, &.T$_Ƙ0Yb9PR)UWfķtq@s?'hr7֏M鹾7 ugS}[#]ARʹDײl ?e+rREizonW8md:8*Uѭa6ڧ@1kM&^73<%+Q p=P%CgHX*Aw뒒ÏNStX$㉩tJ;m?u7E»W厠 7}{`cᇣOi-jZ5k%ز^eDGG+0"dѹ,סӵs5)Cj[92 ]Ǩ=e't[PFvEltwl^ۋSEޙ"y~붕JkU0D?/LГ va/To},GZ+rń}@@w;iGA\ZyۘSZ-h= jYJC6TmG˟$LHW%1dXi:LxzFYĿ*<jo\`2Hm91>e,<aYDho{*K:9[SYWyPSDWkɣRA:o553!F3*Q\$ˢvx[ӥ> KӨ!"T[y5.t9xf$.v|kݮeA;ߧ=hh[@QPzW/eE%-v601-* -Fqoe'k*3tߞMq{𯟜j䏮.^#FTx6Mx#Μ^}@K?r%D9ǍJljiXZkeQVƉ1%Ɉѯ$uM<*!* -iMR&F%xJLq=/"Ƹuڮ7Q+ATEĽ ES: 72A3Cb#*ێáK I;DMeXo?"P[ -&sG.)ɉ W;2I'X((DRS- x 0ܣ.$O6uJZ ~%Fr"15STL÷P>nf#߳e½œE+h%T)m c%*~ƝH, /^4p3V_3Nw>`UnB8-BiFs$MTEJa09V+`|/Jk,]Bʕ8F{:!.7 )XyfN{&9VdtϨups>EuI7gYCF,|߮Nꭁrrӷ| ڌieDX4H AbqR=k];l@Q,Z{" R]z .jtGɌJl;f>nۊ*'50'jlFB Û_V* 3"6zŔ0g vAIVW4__Ipxp*/ڟn߼!Y}ƭUl7p X1Xo}s}:K۰ɭ[ ;c$a!'5cj-wzGk|:^^ D TB{1&H5ZO 7'}>3"&D`*pCNn)W} mh P\Al:rs[lcϬu0)g`R QYC.-;,W ZC2Owo^P }D]ĥ}#̨rP|˒;'8ԋQ<ܘAJ` fi9nUt pq0 P/UV u=@aC).c0M@7[}ily[+ƥoey\cgă K}8PkcAda(R(t NH?$K mңg#5ʧ8=\ۑF Q:<2 _~x>(SHF" oOC]+\]]1?3Y wUΑ'ow La `![;NFJhȂƙN/c3Nq%4_-bG V8S׹\<7ٲx&C3B~|3\}އ1S=3FpN#p.PwnMqas)U:&5`fy" :Sr AɼYsظ[[9bXrLoqݟ:4A,5O3# zR{M _ژ[1Ld'Lvb3\~0YK^㽷#פwP`Wtb:%GFdj֝ nz\ lQt1x%6Lq~yGC1S !G-ŃT*=IbZXy="8h NڦΞNO頄jbk5vAiJK6y6| ]O$wzⵍ/E\{.V~+n [ْ C]Ʃ/ط7 ٞV\3x|h5X4!;7(?ո*kn<Oa& 2XRD:Ɉ.OE '[>G @Ʊ3 CuzغDsbL qv,(܅J_*C+1ҟxN쩛a L{ǤBz4l:HtqT b>~$DJYuHAB=!𤜑<¶$l!̃fTZ0!9=1:&g^Yѧ+} /b Og$D̷!S3|^Lf B|6{~TZ55F.Qc wU xQSSg0x"M]Ҋ/N0aMF-Él4VN||dwy[u1{رPߜ^.38ubsf!Tv#BJrd+Ez吩ȅl6ODVJr`YEC ;w{j'%zuljצ=چd!ʀPX?Oļ~*j?!NTն }nD]Ù_6\°ZMױ˾EenVzThʈN`d?%z9a\ER}ʣAfHFR8r@o\Wht ǿVIyT#K;e#;,yjY@-(䝰6 xMUZ,>9yt2.; T38)!a~)14;.v!CsDŽI,J _<KB"6)m g*kLeyV[{>4dr.E.qP~{,n~)-sV[-S lm/X"-.$hֱB:@nLϾoJ#<+S죗~f;^Z UK[W.n#.n1G --8mv]YG^%{g3iF9J_%HHS: cm]ϵ+cy@zw7q|MM@u3ZmJ2^NI(/J3nSmcMs.. •6_sES/ w[Ls{N~B6#m1)-#iJ-O6w y 6p~(j Z(1͉/HJi ԚgNy4lv˼.j^甚+h?y b@'^s,q0jLO,bb=-×uA|R w2| =i|0CGiE3@38y%4D[b aC{tcjR Dsˑ*63H @d_ S{Ź~GMוj''-E4C3&}LvIT5^ 1d!\cYf豫> d{NO^t"?&3w^'VCyo˓x*DxʋdZ%UDqAp96֚V:W[)9E@DX$ j}׹i'ld*e7.&`΄nv%\;暶}Xt?U-d-" rC]txΑ;eJ!YSw)WZ Hڗrr/qBth@*h f01F<(CE"Jb|&5bt\* lX|i!XY |#^8  DEzde=pꐽgb6DDFh ʞҕ5g‰{N0cOrW#U8c]]n(G<#HF`2np`ٌ]|3 jFgxDk4j +d ֝ytLkkN`&td;z ;C:@-{0 yo@5 DL#=^R=: AL%i(s>t1ic*1daF5Ɯ :ePa鸭Ew!ވ· 91C\9J.q/l)"LAf̅'m x}2oǙ,@6~ q{N6V9gRQ .qY/M;(%AsstzR,^wKȱ ^_QAKtk&fFK0K Ԫ,} DwJX̵k߻<3=6(]s67CI˳] v *#e ߌ{={5LJ5y{ yab):,w@ Dqr^q{yD1z{v ̯4y!K) ?QdU%I䵩]Q)c~ABGw'3Kh稃5' N˾8~"OZ" 81\!wR ~6Gvv ԚN?_&>kqδzap3(:0s,{j4ju3hQ:nQNW},O;WinnGQF!ZFjf.íεF*+4s;j *֫`LW{>uW#0 -&7N qOUԁrMȜBmj]-lE| \.@QOV<Ê3d #ZD(=Pkj͞ 2/%XI~k=j?=*hVnpK/IJqa7ܩA(__] `˸5D;ŋm+C]H2KE 7*P І^ wݮ7-ahya8LJ۠wIz)xGg Z\ Q&+L="\EىnaXr՜Bs0s-!zW3?a,iB<tX+zMk+;~зR6v79pS@ ~XZ<^_c;(q*ypmh`m~rJ! IeJ j#(^ţՀ!:Ԏ֋of]fzAxO8(Xr}}ObX}Xç,Rc&nߌؿ0I<$v7rGnﾫn^AfPɭM7ts[2g55Ӵهc㱨9H|Ϫ4W ļֆS) X6B{j-eK(zfķ+ƶYLAA*ߔ~K781s_E(p:I=6;Hc*9\[`F_yR|58ﶔ5[aΧ҃?*\Ii)B 0%G=@>LގF.ۡAN& 3DUY|eEI<ͯD%=r43u1QF/2u~hgK  JX6 F:]3#rN<KZaۓo$2 ˷Fq I= iZ1ɴՌ '9AD}ŀb^T.!UhTyiPLn`L6uuy8 lq]%Rx6Ps"-:bꂄ<_ 4тe\ֆhQ4 L:o G/[YBjz4|2IE :̈́$/I Wgna.CY6ٻ'of:V_oZo1Pv5ܡ/4 կvgc`ԙl0 js,yaR0©'8.kEٖ՛?:zWJY>S-C)pGzT1sfzj^K}9:D{/Wɾ\&Iو]&봸",MR E|y^27IZwP}B?9d*>#NRdA`4yb=UBK]+E>=>T9{{!NOz) !{d b3o9x"J,eWngVc,%Y\,@-uqJ%t^Q]ZbQaS9c.(̣~yЁ= d7?Jc;RXv)B?N6l82C3:bsKr 7@Լl [vǭrsE!HnqmbHT國klgD*nv#˕F/ $a>g;n 1H(WaTȾJ0 B,Pe ~(9/N3YD`J<հqd5z3$UfN "&O|N u`ru9/t%3=q rc} ?x3טZMAL"wBij3$AU1JKwHMԡQ:/93=8F Vh{j:߯!WbݢSm_ {z!5(фpU9T$EC'S!H^ACqK1,Kkxq^>Hk<weE-Ʋ]^6J!?XFW ֐5k@`ICc+~O`]+Q'`SlQN2ǗEFo]'Zv\/Z=k\n0TYTTՎ\9fE-wъJiZ!uSk) K +],\Xw喑q{?UPBMV$z ctv𖪷:w|21e@ƣ=F_&#Æ3c9[ 6d6[aFh|=UZG~q$;يAOOa^JKhHU)$J q'DΰܧsD&F ^[nWm&H݂̗|)yWҧyUhO"xlQ@vI.Z.P@-/Y\dF H9]6.![ ?t{&+ 6y~/We>$rPrUu9 ,EnGh.h# i}@ vY{z=A ζtjJc7nn/)񈽝+W{GOt;! t([g/}Y|)B >Fx}:(vpK Z⚆( *|%0@a7ݤźC9# 4aU-R_uox{}dl\,AIu>{e6  sCg%mxf7Y6ܠ||;@h)3OfHV6)TJ[*EMU_jW#C#$ϗR`-tEȆC=\*W|ӠūY=3]sIįid Qc}f5Xpٴ&*<z6:"극ܳL}*pDZ"iY rLzx,'^%z8 ش#Et wа ڍW٭V2TwSSفEtgB{j|LI-ͺAz3G=YU%\ֺGA['Z/A%[֓\rːj^UuK /*.cT+L%qmShf^Y틩KLBrVAcz0H!Lh<5P᧯a EV^>}m/za(@0 {Vs=qm%rs.^Y3\WUgG>?~(_R'p A`N]"{k< ÇMe1-==^_4oPMGF#_/3ȩdv{ϟ;ʃr6˴ 63}j"+hXXz3"ͤG#M6q_eaoښu3tɛnZ48ckcoďKOInWdX8 "X>w0_IocR"9|s!_wSRtŀ^Ê[hĜ"4&dX 0 6sA U4sK-}K< Yw7i3lPr#Y ęTMu ~.7 j 0N mshvѫ]ųH0U<%Qȑ8U48e4%Tt%E-&sի#%9a}}ebjuHfRYF"r赨 'vB 2|'m4 0i/?Çu'[v_6n28]4`KCY-#4vf 3c4Mȗ`l|e nQV@斢 9~wYrX员V5p^bYfJ20RW-pϏO.RS$Nr4qpD.ޛ˥~gG<+[IȫHΜAw~(|"~?ݿzo!ۄ쒢& I``$YY0*ڴkW5 u[Idc4q~4dލ^x+T彋?p IWFBFg^`*cU]%M>)H#sG#ZX|b8 f=?ȏ͙G㺔2$L2KuƜ͝gw » 7GtN/VڗKg ξQ/㋬$+HCrI@tCtDL `cL{,Te#.2jŋ`iM {VcXB{hnC~Vfͯ3k _p.+ &0)e 7 i=⋠3ޔ`k^T ,u1t*lLiyȩ:.RɉmwGt+lY/Jz~ƹ fE^Z(lrZ)>v !3,sPt;б;SfK=HIΒ3hך}$E6g&@ qg'->p:zѳ  莿|CC՝~`BR٥ n6!KN!Jz嗅]ðIdYhK#ĭ4٥haz-*RN-K ߩCK1x+2C[Q;fl;rA$_"Yqfyo7%l| ݚ'ϑ=Je V/zngd*,'T&UbXS)`H2⭋*rdlL0\Dթ3#A#4A_p.nytG'WtlZN˱qawDp.2~ၑ  ?bFW>]r߽)CBv40ibY%R&B{JZeZDNJ 6;o_) `LNR,}n8'B23ڡIv:6\m_6 c $|׎T$* (] Y8XjL/Pn]%ǎ_i%mAs%kќ{2}b!>f ~CũQ]($go2tq_۩$ʢ ࠀܚv,`d[К ӨS3"Q VB]NgK9iTyR󒲔Z'0;F,d,b۰J>U ̕⸺vSWK?xgӠ5!V} ƲMVt'.d0U^*Dy F@u;3{{n0]*XR5i?ǭ­vH6ᾲ2Msŗ37sCIlȿt^=SJc3bD9GI 臵t\&/mz:j@ r<D4_'ZI+wIȓ",oYAX0HsD.ef0Ib#09:ֲj1qBcJ筷 GB}z+$f()؋R+;rB~p˝x*(P$$Xig zimZ;stE'řnvBU&8m.w`׊R6lW%U%u>QꌨIȄnkQ xw7A)F)H%΢o*Od%F@pFuOre=J# >IwdjeGh;!Kd'7ˌXEZ99[8π3iwș$o`yW .DCLjp_upNVNDf[@taЁXU0\&9L+}2XLl8AWI)b+7g*/p g 眔im :\G!Rl1c:?A#j%bIvs9WO F֋a𓪥;lkuVqpF!rmWh|HyQF P"< ضokvCPHܯ!'U/*{AKb}5S~!1DXm:hdvM.5PLdPak;/~$f05|n4y}VQزvDcU{\'$dTF iJ*en3@0wzClqdضR l58< e  ^ՙ2M82^Dh^XW}KIsEzm*-5T/!1c{n;+-i` vi16'Ў?:yRig@&Fs  C$5м֕ 3Koo &@VvO|8}e F-p3pmd̒=+!'=4OeuxPIL?(,@k/'LXdI[YX]!ntz|2=~NFLI tggNss&0)"/M{W.foʸdK#yr إ#5zh=.rD%>[JM~ h5h*N[M`QW S8wf|=yct2~$?ܲU:%瀪zrBJSxYq5aR &,NICWjq)l5v6sؘ ȷ(( yg& :, gW]UCD6vr"zmX,-X(%Z1yjdc[۩xadXֳ1wA2DHGoyHrdzlFKE>S%Ym%ASj!˝A{Ȅ)%Xc9 ][Ϝw)F5A8glWt o"OO$qv[͝<҈҆D9jh%pSۥ5L_S\J5MzoT9sWQmj`5"$ Ɨ˪9g-0ݝ{N}/L}S6S!Ebѵ)F*t%]a ڸjD<YS/Qq͞Z;ҚK J+U]9ꖡdCsHQv 7rK>e XtbQ/3l}jx߈;rm#$CH;&KݼAtkB'~/Ѥ+k'Ddj-'UkI}+u<=Q?"~w pf9iÆ/F>ț(a?)!1p͸%n#ij(UQqӻJnZ9u|H6"zAÅ]?0LvdhJ ݇%jE%:Je ҸbZ9T<,)YJ'w}1Q|Q:1MHӁ"_ ޼)O:/\KxJԠ3J?&(tUT:SC*0&x+e`*3xJ1:*6 %~4JN-nξ=z`"O$.ɪ +Pޯ8(ns .a+8Fxb'7X3ta(" )^6I2"cþx:L"1Fa~*>@^ph+~v5(,~dս#̐LM)afM.U h|ޱm֊7_ ŕS߾$t#NoA?/ϖ/fiiLN (/k۔27bw?oH\5UsiKGvJpw$hmI!|]?o 3x6%^zZzZHR|Molv:R1}OΈ/m!y7H1.Ǒ ҪK]/Ʃ%Ito;?w0 \/3JrAAGlvJ5b;pLT?aFrCƨ'kw- .hV1IGZ[ ̜1mȩZ[}΍#Gs0n4)cUG^C3'Vau:%~/\ rxQ<0QUG9e(b~#`qO0?"'2G@q:D:=C0EZvPo ;{?f/ǰ[^͕2tY0;l3RnsWYGS4e2_vX$^ z敫lzjOq48Syh10%>]ܫ2]Ͼ*:>퍀̪DP-5=fT9պէlayi I}hbV#:9¥A`_q^@q|ag.HM'|+ޣGl_0 Gm<( 0V<)*#:1TA>)XZ`l t-J™MbM{pRR|;b<$YU?bZ\4i x3?(<B]CAcB}"DO1򛡖7UJXLI_D:qpG:ƌV& ggUѥ&No K]:YI</a5Դ2^tC :Rn̨n~mH7Vߴ-Z ٽ+vpT%.s=:f +O-F%YoÓ&}H[A \ݔDw X:i4>E1D4o9kΪp\;o;\sGfjarr MDjwM?ؾqô_ 7cs$)9^f_R/ m.7A,^,r/OGG~Ρ0A⯏[`uh6WU.LřY-A#A/~"0*RnBԸAyBh*lл K Aj\4*1EyP3`W|nw4(2%9>@蜉k>@?07y}OWG&ڝZ//|+8[Qxι6E#(<{)$.KQnIc(i0gTjYV$~4l 49>I7q,M1`u2iyN]1+ȗ-n>AA "ol0a׀m×F!x'r[,EtqK Ӛ9߬e|Kq`GK+.RQ~e:%A2 W0xwՎg$R ߌ7('cr{^:9^,J YC"(\Ajs鬝ic))5bx?U}K6W$WS^An@Hq}Ed#*&ҜLC*IqI.^IDucih ʥC)JPvX<N8Zх-YZWED[_vLy>KF0L5&'@E!,̕GdvEDvbNV j}CS|7kNza3f.a [/usѰGڠݧRq6 E;hP\}WPU~P P'f0f J-xO,'dصV?U ❴HpsO`K &>Sָں]F﯑WFWc6)_4fBj>]._مT1M \4^1TS(o5<0ٙ*@ HsTO? -S8]G kzd.6FLy2S8D54ɌTgFz~vmJ-*Y4%8N)-vorBU2m\]zE 3.3>ҟή|5i1,[dй-RlfTB`mNqƒ8d\~+kc݌HhSho" weX0 */W^Γ+Wiin~o3{Ge\O7dѾ`W"4\Dha't:g u\JzfU=z+n[i㓦}cȞ)[dwwc{EXפ"_#."<{<Ĭ~_;ox, # `3 7߹(!ߍoI\'-OQj],<L|Hm))}acI$jk\~$dF 0eP=5߯S}ڛePH2v$ckk:E;OJ118\_z3Ku荐J_[4vAQ`G/8ĹoͨW.i׿]. ֔cU0`9O4Q}TE.A{3_:96j?xoR(5Է\zI%Q5xF1ė!3b~kAqo;|x@ Vn!F;S<>xǡa~#H#0+MH왢HHnat<G3̪wDW##KZ&֠2L"|f4r*$}FZч32^JB3ؿ,k7@ ubRVV]3f޶noL0вFkaYlI}6&%fd 2.}-ɕlA~.X{ YdDC~]sd"0SGW&5a&ϿaO`xJYċ#̵U}۷}ӽ> ڇu L~[l2tض(m3w]~ {p`2U0=0.̆UA ?>&W%}aŐ[_EXv9؇,Jܳg= #c;EpcŜ77ԬqF = )o[h]<6{?7c[01jSHY'"517d [ֵԹS84G㪣,FfLur"N1+yא^R T)hz"ȬQApuR"/‹;&6vYXꇦN <^p\:p=#AZR>~8%8_.& ШlW*s5}3cP4j; `<:g̍bm |YtcDjVʅFe3# Ra$|`,zAzHh<LgX 7W&uևc;_3/62nqJ]SHЬٰSm7")=U9XQIBSuBeTkQPJ9_+` R>R>1ǞZ!.r}SU\NAS*o} lƺ=^)|SqB`- AVIqpy~.@Qa th}v0"UCɇa~+pɖ{HXc5 a3_&ZzYqU}r -F. =7 YQlZ㱟}']BZ$o4'o П̖jSEIɚCKT Hסx@AEDt1?āաW6M빜piyΑEGWDN/r={qE" K`(ܓֶ>M0@0?#|=S()z "{;ѱ ^DjOVJUNĽn)iFWfKH6G7SW+3"rTke#} WOHvkI\!GByںZnE7F{d䣙336yJnp\or刊(i1Ё[@A|X61> \X0A:(:W@ 1VӋ0e7. _>*ܩ:)p+,}źMzoT]⼾R/d9L3#@"漂Sdae b$uhKsHpg¬7Vl.9:I% `g iʪBdU2&gTtMuIS!io8Ԙ6m[ρ9grMI=d'qd#@),gS40LkTIj+e|Z\Qa[>]_294=1dSSLLyf)֓zmh>#j+qK?ޙf[:?/Ս375UaR-`KyUhs\)7?-Mq|TfCy6u|(}:tl^ *ґg"rUSXhg@Li/ .˧ zWPHm<?2ބL@1eL!G8oa/qN_1; 2l rvdÙ $]~,Qj.47KtKW <"+[fs1kb}c ^mByɯ5c\ҫxbBć)2߈iM^3 X1 l)ٌU#,RmΏ{ZaE) B 9JX)r^,ƫiwӍ A4o7($91{juE\B͇i~ὣ͉⇥1E̬/$xY@N]Zf[- wB*!qcj}^RpӸ1 -7M՝?L; YͳeSY=V/xf)SN X_:s~ȆVTi:1ʄ*; C-ȋ6r<W? ;5 ?j' }Z-MQ!lԑJMSvE{VrR]5.CI6"7a*"bC? #0Tj]Ͱ&+غi9)қi*d mÙ9Khꭚ5L}Bed(7pb4!T9Z2Dy27B!F;2s>h{I WN4?ajv4Fe#| 0HZ|9i5w~5ɗgT frS'-#.$\&'b+r-9Q*"jQ2,W7e {x2<DP]5pיQÒ=,_qV//zZ v$R(Sx'm7cr]̌P`s0A큳 nR.(3Y `F{= ܨ ZDLjBC~-|Bnzά<[g, }ꊐGaF~!P0Ko;e$  YE+Fh:(2 |(讥f"GҨ ko[K H ErZ~NXo/,}HL1*qˋ,X`J(8$UR˂D)W9 h 0#|3TE.+٩ hlcN[˧^`Kt) T*-0, 1U­z4b+oN̼D.?/ҿ+ě$T ?B=cb ca>@'{e9K-dmU>wڌW[%Ro12Y9;$8DL/fXHJu|S \k B?qL,p|VKИk5㻟;bY!bplR@j0NȒa`uA6uh$tp׽vn0^Av#SӃ`EMo-(AV2gt:T>2Tq沾ER/[`v@!vvi-ӱ GVW{e_-\d3xqe~ʐ@}X7*|P$6c8Cv/B\#H!a`K&GU@xLEzS0]&wbrjd}5 B51x xN^)%zs.x7\Zix><]X'Bᇡ=p6lU-o/-`" U;YQ}M#K 3QWH/dq' =)Qo?tsT d }ʼn8FSEM!L^sKYޞ:bQ''XL,K!h0EؠM0FF{% P=[dRY}%\: B`_o6DX:ind8=rW"fɿ;¤"k3}vÕu./mR_GK泴E :7xY#m|WyZTQ3uhfM9yJ [O1I/괔-R}︢ ;x$_F):Lv`B#&&Ӵ" =H4Ⱥb  \9ǟ.0V#j] T Q^Fd9 =X~00q=w!_jR$Ӌ1b<6$μ9AOFn:8\E)rvX2X~#5 SMV :?zI8nrșt.RA&oH6Ԏ9.S x9x2h4}qTt!H0zN 8~Bj Al YXjz1Bvp$V7uP硔IJUTTe=aoVM:R~Ӽ j}IHӷ`dTF6?r.GC)h96ª%MSq덟@58'&!v5+oAػfɁ{gpGT[Zc\Bq`_ZеE8Ryt3 R}/ jHZ}Tۖ ΁M"LyyvD#c|4pm +0zwnʄBHq]/3-,WjZ:EP$Ñ:1kٍ uh?([.@dNyP}J圧e(f y:ٔ '5H @ a-{% !V^LI\T([lY;LbcՅ([bMjR?=`GUsH2P%w aP=ek(F,o)iWNX>r_<ۛ6M@4 {x]7ĹGw-"VN Ͱ2Xuao;eFN'1aY 2ܯt:mՙ#=﹫&?jxbWQڿZƫ`~C?Yd5j^}E`FrG )?rH2'%4ט Ya׭ɳc k60]z];i(/A&!ay#A%i=29!!w 2 4uQ;%NoVY *`ש3k5Oŵג8~:I3dZ^Թ&&w?Up](UYV:sCzJpc5N 8լda!RKҤ7Wk5 ܌ſtFP5GThIR<бo9^gC#:uይmm(׾+05n:v71b*~JnYnߢd$v!%Us43Z-=ͽ_= ƅNs=Z1N tO DWJBga)| %OqTKo9drq0WpՋC];` D/6 > `6ΨuliP]gxM#]clTt,G i^sUևḒ!A܆ΑD\ɗ"eujf5`Ehُl$}ռWM֏vPu_86~iް9&4 ,X>+םEVCA*kiWP;nHrA9T!%R$(=xf'׆o#h1c_\{r7[ Kc_Fko3~s-u-,_ա9r8B?D UCXHwbCt0SgJ֚{kboUr%.fa pCq! O QԄ7YQ;O@ HGrKb=jܱ1rnw״MF26aubɆ1-;jP$HݿT(5Q"c@{kB Trf\XbS55cC5f"lo{#/e%@e%]QCwDwDȃ}5`ρPX퀃&"Ks.ގc*0MښT5Qn7Wf I!zؚJ1<BegxM<_rq1%b_jQ䦧 RȦ#O/xB#P횧~[Anj4/W [Mvp.zE$&'Ν(W/k>2~Il~_soďx'k:(G]I6i1>2dO>HM,0NqEl8ee[fB6C$rS -o'A=.tɣn}U1'kJokIDW~!IS]YXwBծt E) 'S&~( Cv5+[09/P6d A7|L T&C+[UzQ룆P>Ӌ16oMBv% 9.X)vfT_ {&&I*`"9J jcϻmEl /854MZ^@_t<ʄ~g`5Jk%p|"HJ$pԽz߭*›l]EM6]8WmLUSײ~]D, P31(`O=>h)>Xc5/FM掛w a' ~tU A/ I;D9+Gϱr.]:#q#JrB |?*e6P@|_^Չz\V`O\ҴPiHwԆ/m15ʦPChV( ]q# f,FI9PMԁ5 l;] b.To.Ji ][x#4·k\)laf/  +8!M$7u X#oE&J%)~h&EkO8h K !7Tl1wk|V}Ie\p9V5nȎCxd. +[YYA 0KۜQ+ݫ=3H3vˠo~E>]Kq ̸lbEd\YQi$1Pa+߫C}H"ݢ@1nZuR ňKӝƂsXXcr=-_q,NPkbѥ*T(7l~Kc-~zD(y=>ğͱL`οV3wÁL,{jU?>3v68!Nʋ9Ѐ{1C k>vp *SVkl99W_ib`K͜ΗO,%N48^q}Gޜju:@F7 Pĉ諚㬨*Gݶͽ.ӲMF)gXL pa!LnE5oyՐhGљhQ6<炵?˧l=j t& R5msj*iX%]P;vo%|;YG9W vNE.X/I7*t<>qm%>xy[J0 $kǚ䅺\ʦ]Ve"o^RΚ`%,Lя Z5y\xM>RнVBkImv\=3K'Rk%'e D9|ۘy?s'߸>>F(QB)ƒJvPqs*48깉daC̽Ό] ̤~AS5:rlaLzwmcMҰNhV]v$%>az'\)99ȫ$2TiՑc:_fdz 1]5,@G_Q$|1EI[l26kb"ϺT|VT7Ro\Մ]5' \p[˛qyF$bO\Iq\yYr* uB\}!6"ݢаRF5w88y>Dt_l{p5or~!)~Q&$&eȱKV7i 2nOby3HZiFj痶x4䩊J]ɫ^ɬJ*U!+GJ4=0~bԖ ϸR3\3xR}g̡\$8󋘅.̏Hho*=l0 YhDg~V2UX^\\Eio<HeO_WБJ.sAٝq[5rUz9ee@$;Z\+ :ʩn~Q > *e4+g@;Qj̃VrWD(v+ρdB0c'X;?k&OEb`E~F"z KDT.tM\%2YIx 9K#?&^.Q(P%!PrnAl̟ +]1KoUsi\) #f0pܖZJ= oS.BF%' Lgu xrI`xEڲ0!*v@i?Wz#V_F'=]C0U' qt7Q;JHjJ2D6BDۂ.UGJR<> -b P\AʪNM;j&=j S+)ڏpUHZh:6^;#1PΔm.A0BˇIl+ǩuف6+$|PWRF:! )H,-h{w+xDV79Zzʝ,2 dJ!gZGR? ڐ~{PPby`e;8/J@XN > &_b{ˤ?.kv#!_{7h 5ʎgD•$[uy"""`FӈxgFp%` ֯S\%-` ?0Ml(]X%Lv$17JΩ{r: ̉`r%ᴶ{ Φ͉RxE_a2bzWUQ7P\t~qboAl{^*0 @(V]cİ(h!fذ0nE#EWOJ[0E ]ͬ}FBZǡ'=:ZxE{.f\:nD|9]gUI8*.U{"*CUpMo;?򿹙}su%*g=xnɉm=Z-E>mbcUqeo{ "t>-hӈ{ zpFV]yO2j%gHW"29.efi۶c@ܠ39ŻIA'2U / Bj쩢ZO#cξ#;5ɽ\Kdƪ\D0L:+n7EoYf&p])N=vqR-,N0,BfGem?$(ֽ@\F Ư0@+PqUZoٮI;⑓n7Py֛xgh,r#:(;zr``5EF%fBGOʴ\v_k 0*ɍ@XFVT3tƦIʅỦ@>IlWG+ư#iNÁ qHb7ϛRLPCzgߜNd2 gpEx;*gB`DRcWAm*ڞ :M>}ԇԇ?nxvJ3SP/Vh!m`~fr;tDe/ vWLKJqT!tn5S&nL˾]Z_y#a : 5 ~ž6?Ba"̾Ql֘v:>Olq9J!<`٘w^QQ]T,8թq3!ʇ9*t:@ud!8(Hb~LO8>KLGQvu߯ a9;dbIZ'4n ry{,M_V2zNyrU=3)&>e_V@* zyW&BMyu`sU7Ъb8:-=.v3 tx2fbvދ7OPo @ӈWVICq}"ii`0l Yb8ͺH'Kn!TB/S0{ zL i|7Zfs?P69Ki T0nҫIMMi&k\ c*;)lSM{TpǿBqSf,eܣAWDh`jtҮUuU:F *G1W6erf_l?Z 3u]M dfڹFlkm.@p([j(%ycˊEPi;tu 㱦`\^AlMM_?ب\NY0p+sf* S:Mg=HQz/Oc, oV#ֶf%0Νf vw "^##=8쁚ULJF q@)/QB\e[]>51 4hjgȥTCsq.LRC.Yr"dH+M~*i3Gtwkpõn'JqP}t_M./;B)#] %*l3BL>QURQjmL4c=/ xPf%-rKǞ^ Y ^l;^(dYcALsAM4jj%r7<%czh˗]gDzZ3#L,uɮj`cNfҬ(( ;4aQLix&!zNKAJ: s?&WB-sP**wW:ڢ˳ E_HN;Y*}q+D"8|͡!ȟ7^+LyerԵQ+9yy+N4[WÂaVTP.*)\e _!Du ǂnмIr#i__e .ruN ?1 i LKJHw /cEQ*)O'k|ۊU\b;0w(wbOZIKфUA]EURTS 걾YQ*}w؉9:nLK(ϭ6 Ճ&uħ J؅ƢF>jMa*B-ωpd346mrء|'mj.MJ/q!\-XU yV#+Md纉ZyjwY{%0}C1!s!ty-o0=$`l-e;XގVRzI|Ԗfr]*-̖i*24[xT zf"*VQv;mٯ?"TjFWɰbIQ)f7n\y'J9ՓBfvg5V/cf"#*U!σCKڣCEuI.ZX)UŪa`tTBjUv42PJ&'Ӫ<ʒ4R>fNbq٫oy$Zx/(֕t|*W?fz.5ClVuTm^]6ų9`%ֵZBK kP$ڊ)q@URx_Sι>DE3{†|t XBn#Ӂf8LNTxQrD)&;iy4g!dzbc-o8AbGKsZĄ)!$"$l~,/˧5/) .!QU:xN$lq2ͳ0k ER}Dx"{pW,T M+"5DXEbY|z 3Zi#!h&l ~N̟ Dh|6e0{/ 7O,W=b]ߩf8`ןK;M9,"zݛ0N@cge=HЦJÎ+֮afK$Gȟ}_]Ï-mp4cV)jErK +(̝e<{[/Ⱥ&p]3g|*9ԛ]OuÈ?ꆣiUC?zsZq5ڶ_wdSs+jotϙ.qU따RF5AnikkRDtrP #ZdVyxPN"]}PgO& M"5F{L]FIRʀ}P`s]FFaGk2p/E?(xs0;y1N<Yأwlg2X;(UirqL~=G[OCjw:vd^wQũ.8bN|AYxyNҾ!ǡτŭr?cya/x-59 Tl7U@ojtS7 T}\3N}zXN7͈k$۲8Yik !3V ,lnv]nvNgתkPզ(]D^o) sFQs%c 5U׹|-`5W1Dϟ!k%Wg _|q{ڕ"Q],}\ 7Se_\/g@j+VY Y_Tl $).X/̬Z `e^fqSesYkfwb(8^&JY$+6B]F݁m+.ֶ?ብήJ@Q#»V+B4&Ir '>Gf/7fV ?1﭅iC0θmyziqž#l/IuPFV)Y۲sǒ_DWu"xb[˔ߓa&)nd2hzYO[x*hxEbInME'q!=]1H~G0FeaWxW[^M|}.2>"1Ƨh+}1;nΙnm( vՋ#7;|/ZZ%Ͱ,ZTD/{%%Ӥ=: AH|@] Z Lǵ\"BDsV,j:Xtgttb=5dC$AdcxDiLƟۭ(q1X\7._s-jYµNK? /yi/ #IaC2yNIFrexBUoqCAd|ucIz 'mK+0E] 5Սxr\ٮ^K hwb 0 EJi3!)]F}N25ΝkZ[13[&p&yT&LGK+Z\[+&:YztQ>sZF`!jn.$!\Ҧ"<*7If-Q3FUu\S) mf 藍ÐB^=X ~ 9$_%TJnɱxLhCW"v-i%FÀKCC03-}Ib9Tr)\S[P!e9keoCĭ 7PN!A6G-U\L| Q;l73ڛ^{`zUK1{׿qM@~2ǠL8R gnTb7ܸDR{qT3 ًZH7O[~G,IqPm㑈kS s*9+"væhǑQ:C a \:kzqR(J*Zyy%eP̔3=nDWe .@o$g7$Fkyg7F4 ʮH@=;{Ch3GE.0^Htd|w=p}Gyy)]d x{l js|p}b#W!4vޒeЫU5C3f=zxND楮XS,QGRq</ %]|0r]Hb9 #A9}y_;ߜJ0L)DkqLL/dbt|{˫e5,٫~M 2g4n&5\ɜsL5SF?Cou:Ӌܔu?A;ؖI[h Zc6rĚzP ŔN36v2CgD蚕S]*u._=.JJueK47?׌:: 5y, +$_zVX()PIdvW*gn?v;Vb'97 w;}w4Itcf x"0ױW5ʲ):A?/BfY@PO)-SI|VmW9B 0f$id6aП4k"7Fqa[:pE2I'z.NչXٞ=|t%{L4\Sb)Y 0ubSj(JFpERjE`Ug,WC=9mk ξEDUX͹*Iv!1E^jI@J +c&,>U0wcyefGfk՗D槒iS c"`#_}\e/?81`km  R܁P! .hJ78=Ѱf25E14@Df1]^N_N˛.@78K5`D)i<DMLG  3 .JAUC%A_70MD_ )Sq D!ExTjCNR0o$cu=z|06 "%It@mĀxZ|/8՟ue1 ~\cb:{'6/l(oĂyՆ1+f.Um,-̀iM ToTl[Sb6vuD퉞ےاN E:!# 8pYWy[ޢ\+~ۮą cp-A+"Sc+)"pn-՜TDA˜(6߯-Ui{9AW)Kit-؆3R][ UZ#@%݉${DXLck+u m6sɢ?-R&b|:S~8HIJEŢkt,jEv ΊLmCiך%j%/3Iee6A=# ;]uhpm Td³pjM]sxz}4 Иo N+ `1u3RbT3@<Zݠ賲nB'Jӗ 8FL"EҾ)EB>!B`*wcu~B F@dI\l 8a[$'"Km*wXO3k^ ?MklFL[+XRpEH&e04?,Y06!XCf_ق,B2_ yl _s% kUg 婔mU؄*I_WW?5m3JB(RL0@oYIqH:WŖ7l}?}qDwIfz(3ľ{,;T3O [XTB}M!E7?c2XL&z71[u֌qXtŇ>nz9JfRD6+k7`Cpp < *VgÔi]"@HiP=19tl!x W<|?%2RҬmvryF^e>0v݃k'0u\>8Hw/G)_y ) Xe&fr& p~:œ vx,szb;) ˿q ¤h/RC_]plc*p̍G.aN6z B!'&= _m$%#V#M7 Reݐim§^0:-{7Ԁ,2BGDGă Xx#A6VX{$(N?u 5~x̘$uͥg$Bp[Ґ~<4b҈5k/]3Tfyy)K+ގ$Q{4!kZK^< B]QwfSJ0\Vj7v(IYdn"~'RA(nQbA8Ql5[F0N5XmQ`'Pz)Ï56 ^qA tTD?]5x=y)H[9Uy`.)pQzJn~+,wWbmך@LW̍z tf'8]gdϔ9kb*Xk Xe;ONӬ^μWIO::prOt_Z#"Hx>?9nh &x毧jӨo`M\܀S`rb2ٲZ&Ez̈́.TbY E!3:΄awo*Y'*Źk;E1A5Eb5q7g`=~A%U<w&OAN.\bo9lySrŔ.QpݔIѯ=1հ+k-)8+3ʃ+@&Ϫw ʸ. D*\Ԡ$u0WIht 0aq-^C85k[#NVJSx׺25EgOq dtI:.?_$ӆ&=5sO'jUS<;ǞY/;-ŏ!~|k tya 7I1mr7| \>B@ѫyA| h΃m3q灺~@8ϙz'Rj>od"n_4_~a̙U{_syϒN7ok.}0rԬ' 3ghP|>=uψ$pS{+ɿ2KW (B` he1W1`',w۵fʐTyZmaBI,YJR.4ɷApξs"ZE: (R j\e.[3 UV((v^#އMDa6(%D\'.}0!ڃ: IH@K0*J3Mib׮qaysEʭ ̬z+H@^B<ηF?' !|-hy#U.M 'E;P C/b?چ{lqqp.%J>?oR)OLzM`+ ,..Pd{uU{Ɉ `j B5BxR\@[BxTXP9^*|!>7~H;){|`7 qz=yafi[]@q*=ZaD˦t"%"hUajY"y_8tG$[m#s(i 1R? -#aSQ{W뉓w9m%W^Q/B{9Z|1IBh; 6: _Vu1qL,>t qŸIK%|.Qf z tej}* N Gԥ w Zw^{£ MM 6⼚%!qCCL UWc&oN]v~aGQh,ڂγF M/+P@>M, sat"+o*C?$-Fګl&gK/&I帋à&e_CRj4lȦz(s|8*y={,ص-)cphMtUw-ˈޓ^T 2@MCKX3;X+}c?y1Te< x3&H:tp ,^n2 i KQ^bL@4XX6Jvjաe=Ϭ‰Mkĸ8,$d A1m}2&ܐWv(@o)yCN,9H}ZR̠SXVt,$KعŖ)D,eoѥpdC.'"osUtDz]8Er2Xs!AⴖCQ)Yb5wP5.4Ugp&t떀1ƞ%j?'M*=ptqUSHm/֧4z*cHI43EL.` C,.MAV (~1Jֵ[|*dˡA՟[#kB:/pԓКʉ)u{te?BYx0\h\^x!B7;%#kCtT̀sN﬋)I^IVC)#^뷱 ǭmd8 AJАQv[hS9]-n:?/bArj;Fv4 ρ$39zU5ߧ{:K,r_ΈKb[. GU޺MMLMW%1Volj%ɉO!P]c75M_g8fWj20M}2kSt6j@瘴.f(vXԯ9m-HҲ.wНܳ(4k_;d.EО]!gwP!` ABP}e$)*RF5{=XVbWxPH\0Nr#exr[N5k3L&0. Jqe-d G{˞ x&=!.GA1~%`cY;hkí֌D׬pqោ'E9, K7|:Up2Of{ELb|fjj֓NN)7n .8ԉρE HSI;vj9p".4+St[BNdu2b#Db?[7k3cQR 9u`p NhK;WC>I$E : v喚Y#t<.Vk6]/]9̅(Qt}#65(-)pP,xL@R|E9RTn?DG)aGhdun ~ ەbiyخOaxȳzi)(f!u<IP/MQSI% k]Pq@r].qj+ lm< w}E1qޑ97=b:mY`h{O 'bӎnQ&X^/F =b8+x$#ithH]e@EMkq|'zm >~# =^__._) }h|։FI5uXK)P <vlq!2CcG;d(C\ٱmQ2Że*dOkb %zZ%bAj}*G|8](At8LhHd44)b!MR!_9L旅` Wvk=*S|.͆Gsƙ-R+lZH>lSᨺSCK4cn7jy8F4yYQkuH,lg ~ns( |,W|% цgi5dYT\Q-8ibiP`~Xh ݦOlmrGlCݼ/͊]=^paҪ!8nf8iỔbHܣ6Ú$pY(%Ƒ\-ut@K1􅷑>d63᤹clC.7O@x~fP LϜo]yOɳH Mn4 Oˋ@`+U ۃ*K";% [k샕,wF@֪+ Y 1kAiCfg?~`4:bXwd'^wlsNH.SwŃ[}V'gҧ`Ck& `(%#mF EgP'Va*LIb7Dxiqd?4KG!8__K}/vUrI>&JŽ~z22L#o2k$-*6Zlt=Jvt H؆g%ENMBl͝o$Ac[^(7bx疁'D8 _yU/L4;gW3JmbCҋhh^n +Ṃ Qb`:K}s" g}e q_*h&lJBIj,m>[~脌&+:= ϢpiwTh&GtMe ?k2J O 4"齃@AP&LcRm< O1x@<;;HQBl=(KnHd r nC_1)Wꋎk`XaN?0+W2urI z>r'c11`cPԝN|Ku0bbqꈵ# )f_ OnvD2B19`#Sk%7._N0/p%㟯{U"uDbGsh6U +FTA|d\h _퇂WlH`Q2e5u@#[r wWN9ZTM=7 "Ơ[P,AP\YUOl\U c }m`uMo|#X!fTfݦ򜉷] vB? Й n|Łp`n/&$Gu)ǰ] `XA} ฮ-b]?k~f ;0)E 25HF Ri47"Qٽ9o(@٥s[%g= O<&y@jY+F} zFsygQW6B*Ҽ5Z~hpçkSsC= CL,~f¥, XXNztf75ӷ@4'zaK q9qVu«J8'[aDM_. ^%Y=yY#Ԫ&KUmbYt0b"GMiDq`W'kFΕ{043!UBnm}цn\yRO@/̞(v@?˸4^hoUnC" Լ>T_lžm '-Pcḍ95hNInAޫ)~LX"ZZ@KV] mĦ1?mSWrioLz #!d+*F6nj* aʯU\63%vθoVV. Ò̂a&/Y[sn; 8wX]Tr8|Wo,$OιMՔ,myK5?by{j6\' 3~Sk{УJΥ{nWQ?WVv=akj9}]DOh)O ZO#?,cÌ/1p)rx )q5ʁk waX4uI1P(+6vG$t'xz8 /Ꮛ)ld+\aP^q_#,Ș5u_6OܦlCvUB;-O+UH@[,UxUB2oLJ8k"n+I!:@yzoiu\҉ؘ.e呰\ZcF%7"4iN* aIs)zdt΍#Œd{l^wRBq.Ywvh4ՈSFhu6D-rU(<$JN@G?ok.)|!ZBw CDH=7OF[97$;_~vb*|{GqYw;}f!q 1FФw˦֏=_R=֢Ali7E}F@!LHozͰtnU\=2>߱iˈ9O'&nNDokً?vIBM sJǬ{cz߭Wd{z ﬞRzy@U~B[g%^m5~L .~]pfx`8B(ae϶;{x #\`6QC4 H\M[:_S~C@&r%!!h !su{@WI |FRmH CCEY=d&$y14nϱF/td}8N8lEX{9Sa+arqT[U6>C9 7FrQűݓ$p#cȪٌ ^.S2IPZ?,}t!'`r\zM;$<ٙ<^]#T:vhv׍p >(؄Z$E!]dK|24y$4NoV)O-A!&+8i Ef\z E][*I#>Ty|FGuQ{hߨIDC2>gJ@K'\A44?Ń[`d.<7e-JS0qҟ_~](T~#lYoiqY۲N7USҶP|F 1" tÕ/|6="ƫ|L)s--NH鱹g\0KgC ɂ  _d|H~g`v/Q)u<v`*L9LoC|tbaДNg#&9 3YCו?m&?C/Qu.VkUy;Mո4sR;2=b eZ[|ys[(!2ZIԚ`Qi4ÁsMqNrE2k$)$Pa|;! 4&=M߳; Ͼ@du5=b&C#`TpޞAOPiJ[OV܀_ wӭK s@XĮg(yF*B~QVl3͑{ud>=}?̀֫)4d$\} R#tQ2 ;6`ȿ k(.CGbs"2(B%wZwr/Q BzMЇ冄SyIn|:l^~XC[KRo#o,߄6xF#pvt0>1TA$=c!ap]K.oZ>t?odruAO^1TJJ:>''Y\G@$D0!_$1zzi E q)V)2xY#Q%NӣlJR7* <;ߏ>%cPV@ e(BWr);n>o-V\}g,(Ə\ ̽s@ɣ2Щӯ6$f/ B85i3*qޫsfBa6';ńd&h[޽|N&pw*'*ݪFt6;~0!~LW7SkT@Gs:s p.jx+vKnDGoucQ~.yob%' 'ֹ)J  {3jX@+i! ,oJԩ6{"ݮ0璉՟|DBג|&0w'~P [e]+Kʞ %N&Cx7557XIJ!V Ȱ >S-A36)mo=:_:7KXnk0bgp<֘L3X;4/' d`9idAg#C8E-ݷ^m;Pwx(4d0%]MA{2,n繅Z?t|lvrOtYgZ8ߟآj:?(nRpN+B$Fq?-fZz2yjB9uߵ S>/Y|sͬĤOjvQ*jnd~ :!X^9-ڏ!k6 c>זjHۂ&K$=QGK卣}K%({ ڙֹWPB)h'K4J M".m:O^>4|6 2AAtSڝN TacBdn.XYP.#[7 sg fq` d@H "G~(k\lptk *oу{ѕ%=yx-L[-%` Tsq w*BTGcs׏zڬ+Iɪ`Ӄ0! ܤo4HۛHڇ? AjW Ul!@NFt)5s|(&Qur_-+o$8lD_Ȍ,QYyb^i☭ڎ*dnl6 +=F=W83")ڿ"-%&f5x%3Þb]b@Fa1Kw"R# E_SβH`P;Ciֻj7cHd׶U%e w&I>ټ/E[. )K w`7 DƖB9 x}~p"/3机쎖̿saJ,6]w#12M # #{6v]Y֛\IW"A{F vjףdnQעJKATڙ hy4lE;4+ĸvgٜ@\1lPeA4FiOA1usch fԠ$q )/7Uc,Zl%\U rjV#OÝ{<(ݲݥ`- 2>g#v3eX2P N es nI x)p%hbT_Ζ5aOTh~lWraMRВ9X04k`")!!cI; ^cafcn#8@>K&5Nt­ؤ]^t}:MH8_;|P_!nP 쾈0ָ2/1sw@{oQS"V*o NĸЕWC0 f2ٰRmɍZvgU~hJ#s [KL$*=H-k r Ml|LG.fԝ%㛝zẇF5G[OF>wD7b[L(I^.W>W-,s7}gcZjy-Bf X7C1Ehy<"jO:=_ Fwz"49Ο\#  8_]zDު{}:Y9vX~7ArꯕMo7?jߝx&kZ̊ p֙y2O+dAen25s5'[)8wj [+f$5\8J3<;SѼ$\7T18HfDhժ)>WTյv R%J6Ug6ׂ6xuE9o(FX|o.ΰ״!?ib&a '`~m'opnJ(x{ߣ#ب.oBNRRkY7"}$q4;1> ZʆRQGIL/wWZ̺Z 6_bD&TƧ6ׯ w2nrT2iJJ+h"?I+횷8 jMX9C{BO2f:t!"& Z$b.>ߍEx`zkkwLv4ƪ)wD' bl)ᩣLi,~wK}J{Է*5{\-X{ikvn :[GJз4u;ma:"]Y1oynALP=|wC1d FSd.xK_<oͅh2>(@cR o)fg!PO?.ݹRSn{~t%k hF?3J>mv3qNݱSfFprl+$﬊H*BUئAIa~8SqP'2co86ltN)393 }@1t*Ԁ".BG+ZJhRcĸOhiDA>140UPDjz$šǚi4d/CJ<}H)ʜTr=bQ~KٱDxfs,K{ܱmz4gZ*^K}_ɶ%"cO s@g>Q{*i\+F*G|J`Zrw6S<*^1k IY~28H% )OL6@ qKZwɧCJM,"fZE6V!!)nt^؃,_g}lHZ7⦸O=1<ݴ;:r߹جGjbצ1" GOi.uiYvzK< ӗMO [3 ăL3FrJ$bxO Mbg}B_Nc('_pLG-OGƢmLƨXдu#<hiRd/gC"t;A5Qrn 9a8t(rכbbHqhX[ =ځD^ W2liR :ZJlMACv*Q(w#W+d?qHa>#H;c=EelP ]<-nLDǀ~P;Fؙ߄$aê' -H[}[vk6vp#p㾄qNlO7UZ|8yj"skx<_e#fQդ;rR `xi! _5(>Z=l1-ܨ}HJanU/(o1L ZOhot#/ЀhK$7Rg.1/)ѐ'B)yZ%PW{ |"*{FK#;y2SroN& 4Kd%Hur*ꅽr'=Ro-{ۼ D37XކYs&^ޣ3Ίk|5CѾMDlH+s/4FLOr$%`#N~=)/aQL?i*_|vo{_byIڈ|O~9kru&<3, h*E BVp@s;fʼntN„w߶J>8nWED'~Z/>::j i"mAEyHe*ttamHfSq㉩`hm(Ӥ?!K?AT6lg 5FMXP!h.P36ml,z7AsoDz.m=60[Q?h?xS72gN$ol Yye@ql;,~{A(#'f'y&d`,͆e| גxj*M2N?1ӣw#7>u\F;Lԗ 72n]La#3JbݽUUxQ 2;4zYZ`#5WZO,Ud 6R{5,¸7ce2(TEuȎ͈ f+LZF-@v;i]yi |a TCmZy6 #volӠ3}j" jEeϡtΌso^Ahs<(Aѹ sHá&ʮ962>;4BY Q%Oz6Veϒz2aM2 v^⋎=1ܞx/GTOVwYd,̢ #KlS{cl̈́pޜB%9ߔ/%=)Ki/Du 6uYlc|31y']=hpRg ;b|`aIz4C-|\\aG-Q&YwpOju"M&כP6^ 3cbLЁR!%GΆuo}{J2ISK0{l?ŹK?t\Lj.'¼ͥ?әG'WZ>*4ͪ G59`.l&0Iu<-qL0B<C|qN{U0(+Yfx[=djbĮOܗP@m.pdDlxB* 'Ԩ3_QYk<$2 N,0匜(šK١󹛅,D?4C vSqaSѼ!r+f#lYxJ *NR(B܉jwdY1US ` JqCBae!Boލ?e؛qpӺ&T{.mCfJeX]‡c4"PN >|4}qܔZd{f}-vnV-04:姢uIux  *c0ӀWO W=,J&2PASElF}bnvxCaaVHp~ZnW€)-705d*l鬰@.>?ʨtN[ɠ57FK1+ax TUu YUjUg/цueucm? Y;ZvHt6:7-U+)A]̧H;SqrѩƔYam#ˋ'ȉZ}8~Y|Vf M+چdv/бtSH Q$Ƶ)q5%D!UW)Mc6]ft[_uPoN>V8kf v3Nn@HPFZxWUש*ÃD7NP+δ~ZL7¸i 1yH ;J6^ND=Xh*p`D3&''Sitga11<>0Ѝ04gJ D:~jǂ *F2-7BNE2l轊ܠi&Ҟj↲['K}ZDʍm6ͤ{f`_}$^?j/٪yeI7p$$Z& d.wՀԐ,7˴EKoiC ;dUD kv`yV JVe0v*MQϾ| 5t0.^}K<\ENW)kT1.. fw(ݸ' ڡꤎ&Lׂ X/Zc%"bdOq1PyV-gy9v-)^T]9Շ\9kSfj;7 sE[u"j)gC%+U o;@_EK(<G+òggă2oz[D%Y*n7mt8/ .RW L}HqYZoQ&)Ls䔕f%v|Dœww̯’'c5]d0g|q#eP%4?MF FK\m G P1Ð !Gt~ !UJN{$8۷Ru%7IwɣǸX&'7 5DrS=vSAxII]U fgD;aZ-qj5AcUٕ:y0ھ "p_Yt$>t6~H(C4A@2sJ✫_qĥN~̧$Vhf7kהv'`{>US<iE+TT-d%0(gUcoS>'لhL32/R0gމW)[3\HE|֌7k#f_Ex`i4e*&[F4Bw[+a7q[kgIљlZw£b5F%s:08Ft31F.,xKp^%m@ tu^~kL!sͳ\P"|?^ZfV멢PU ҔY4rSp~vpC!U8Htr$? wͳmM4(f@cD7{EMEeV$ YKf(pS-+ɵmwQ Y+<6QUk.3z#iq_l;けu'ՇXqGq#"͜A -Hh ^Qm?!fSF,klHP J*`V?!tCZ!85}Ѣctq[ | wSPfx,Ie=_&Zl%K+K [ӚAf%\14n'7*@yGj9u;[M&z?Qw"{ON7WNEH,W] pz-kz$z Ug8DH@3,06ycn[{jX)$hf7*u{)zRb]5ddȒS]$d:/+I)sJK§Q>r d4vEu[R ί"T_,, +|cf9K>ùQot-b1x$%[>B,(Bxr]?37\Ĝ X&$zܵXRu섕?~;9rHc4Y6X)B, 6/-50~zug)0ѽYkfU/$T+EYFYjt\}biTS'M|R\lc a~FO6,)%&/ w;,D}%OGx;h9r^YULS ?e%ev' |#3q ҋ!zcČ@^%ޘM+01ӉKWuPm"CҴ7t`]ˊ(1 Mksu.m*cJ]z֒Ue/->lQeu-XX4]ecqxXا^h%%m` XsD_`燰wB +}c/B%AY4/zL?[w?B:Ή@=PzK͎ث: d:$ȝ<ԇlefPk[‹]j~1~GLXKmG5oOI!m t uruCق/(;JF?%)y5Lk1|x/d NYpsHnCP֖ƃ*\.Z@Su cYU e۠{?6mw16YjgXQFrA_se,K}@e:i]hTm,Xf'#=Ϫi|Rp\k\<<÷T?Eӽ3FZ1&+V>SPf!흅 {go| \=ߑ=Q J ٚ‚{8*a1g)5Cuog|aRKDUx_yRh_UgL n)}-Co%,ht!ڭٛ|T(rEna#7n|bfk% p]^Q/R5{#T¯Hes;Y){bT]@+>)Cp4a"(tIkZaC8bn&P_xm' R-:&:h):QBkm{b6D;g%. KrGzfΌ'oy쭃$W#BS-~kA~?nS@GTWUx9u{ɖ2..w j8"p!Kh6#rU!CDO"utn>o9no:LyxnKX`Zz߰ _ko}[\b jU?}Х-Vie0nĆޙ/Ȓb%񹔗tgG=WIvJIKT ަ_pplLE([2}hl hG׬"ۥRFV驆` YwEs0Jpq[4HŷZVK?CH͚d"VQtFFW}CHdB}C쨂K4˻^OPxQ=g.83tab:/['*OC7|.OP!|!WnumE_\*O'$Eѭ"&ª%CkUek^49N2H­{6zm+r|Rt1:7NI~:6 82w@Pv6U _1 PO!)Z[=ԩ.Wj݃}(ak Z !51Y?LIwMII#L[דdN:94YWd{]c'\~ [Y|鎬NYf`E@ݴ&F$_9K_':!"\)aXn?jlG`mծ>jT \ߺ'Xe#tZ;8霕K"g \~ږ-w:!?umEjfz{'&{< l߻QOH'6KkWP&_dX ݐ4)-6@Fּ)'w⭨S#qtgc _u+_B.DG~{egQ :jʣԇ LPD%cDRX0)!t}djsp=Q~Aqo6^b(iy3\'GVe<x%9%>Fl~is=!K5~Hبݐ6ImRcТ@r"h^Ѫ¦qh+Rb6D yQ0KӦZ~*i^ h®\n21I D yĎCÐ"*r*>\Ґݔ:% _ ZS@> [ޒ> n4s*!$EWSV;;w2&$1CblY5-OߒCs[2It 29ڦ\\&~azhYAF%GCß^DK2H.+`|Nc0F0ȡTg(H[g*gmU#{B0;$4&Cb FvcI<5/W*Ή9pb\ꏮVdU[k"y([ڶ7|QbLŦƉ^K,׀=8䦏VvTurLHI|X YaZs1 fiR\& . _$ ihCŝîźDBϭ8&`b(X-8uAj q{=AF0'S` Fu)k9GOg{C:ҿx}HЫetP Q@i"OuE]tflqOJS1A~V>*V:g 9iUŌ[6|%`X_ϘoA8#:$uu'ϑ#҇@E?>R ;%sϋ7fcs׆x`H~Q^pa6}4d|ΒpU2Պ ]R:`bf!{Hi/^dl xj8HGdy k8 uk X*w;Jx}6g+ĸuP^ W*Ԃ8b\;D#sosxAW|ȟIZGfCa쮰~ץoYpa/!W*XU^WC0j[ !ؖ֒e3L}Zщ +x\mi(8YL͕oA3[?!F=mu4xYpLʰt'W< Hf nMONkyf_"/B;v95H^A mg*QMi1zAgHnQ1m*215foK1# '* R@7.-萻$܋ؠH GKD̖9k$K /.#< C\;|٠M{2Ԑ04W[Rב{uyb )%nfArqdD&p.['@zE3KHn`fҐ$c! Z9<LU;{\MO:ANAnjj,X nW Mt;O1qH٠RfN%UrON[del3iq '0< LJO\{kv2iflL +Ye+[*F yb Q:GxUjB\Vݸn #qh2dtG«L2>jKc 0AJG=Xr .vۙXȻy/.N8[j&b"1klg#AOt.n`&"a}#Dgە2~zYt`?ie@RXq14,ٳA O^hvd4; nZBYqZkf$QFfŴW(DoH tRȝ$egϯ1a_S;ptoPUA`ҸW2 UpHCyh6ҕ| ˏ]I<[>$t>9J>88Rc_c-cKqCJz^j.K@G?2"~gέ|0`Jmdu"J MY4%fefAw''^V<X&fvZG Q+$ܓ&|Sݺ3q$fэ6tր Nkf1b{09u?g6]1pmp'y99#՚œƧ;*Ϗz>B .ZZUiܬ<w}Zd0]~YP3Hcƿ GRFޛu [Q(- On^`yPֆLJEՈ.}!,7S*^aY$Mq)R%~T9W+G w8 >(;ՂKjErWt )QQ˥J+R̐C9ӨZ;WT奿r&哝s.fnBۭP@TFxiـ"T/z"Wp{;N>*ŏLߕ҇(Mq/*  ~}FV7L,my# " , N-7ֆr}¨) l1YL59 y:]D[ CT9(RZ0sƣL GxkɹJ-o\YE! Dda#5Xzȩb׼bt)RggT;al^nn0p$sù8m\>Q?E>JXSրA{'LP#ÊhQ S,͔aeHXBӂ`4|2rYi{峩wu0Շg- w jإUx~R+$֋G.72-;uX%xo>G<<%![yċltNomM㻄a۞9Zɥ}<)3O-^iҢѥl^2FC"kSK%ד In5~뤒*(QJɍе+AD'rڲsjaqgޙ {, "\Qϐ_6YGl28t… TYš^t>>W\ۥު% 3Vrq o6W(\8fu.tr2^"5=?B+lҭux,;_n-vᒂiUc,!ic0äe1VNeʔ%(QPD]sPD[QƖK,JsCe"^ܺi(יR5JD+怬3KZT~[d\Ӳئ4U9&Ёc)#T+ʮ$=%hH i2Z4Mwφaq5ՊHv:޽(iBm$ $bh_"4Tg%R{6qbYlS*7yz$,ٯDH-U4[SWfnmRt `UşV+xXN2_(/c`7"u#ӂ tJ \׺y ;]^cRdZLKH;\G'»4AΒBuD&5"wge#q<Ɯqǹ!ꥧfD5  ӯM*8upu>-A2'Q_Gean }⧲b\/ J~h8PSPHYhx' Lm6oH!<$L&Ht%! %7 ne$K/os0!:jJFQUh}˺} yTM4=  jJ{#ōPx0 IϨeY*i%a）(.v=g8YI##ŭϜkvcXt͚m{SF9f2][ FAHT9+1fa~߁y_2yV(9=W8%C`2 9PnZ`a1eIPU~q ].t,?#͞t3vmYъX7ǥk bwtH0]jm[еf`N+3' SnJD#> %.gd\{j\\[V(w:Xi\=o9*P b _[inMnG~C]t}E|imE[7HmcX_56jlR@FmELt>z(/\v8`Fcg%ȴ]@Kͺm ͙&c岴,(_s]6#E ?+ƹ׍$9&OAP~]KbDg#2jFHd.dߞ4e|d]PwkO{)|1IR*'7u5јQ Aj;eQ4lJ?wM+! nd s90[3X\pw"I^ी*hR@<`tmuѐtjp(+YF])z 1l Si I!0HwFΤ)$+ߊd\ߒ0Űʏ*4hQO&E\;Q fXaՊJ;r hC%ًNv2e_AlH0sX@Mt. >r%-8#xcr=3M(;S:N79:9Mx">AnUEg*G;Qo  ڹnaǩl.ʣAEpT[q z6͕@NTZkgca)ut WT*~s J2T~-.#HӽHcXLצf?6.Id.D'z󊠉Wv:PyxWFiGZnJ&w:-=q_GϐBCn#AV{"AF cdZaUf}%Gq7g0* ڿ9:ͺP#v$Wu-"m*%1O*2茵VQD*$"-9TVr] y18mW% x%DIz~ rt1H ?ye䒮F'j*~j(NCY44d#x ^Ÿ˔ yR|#rV{#m:DRNs jiN`.M{\i|W "RgGRqrݣ~;o?ĘQA{ӼY>j^t ӨF^JS\4H֤ ة^g,=kOO k hFu>Jhʛ;+ѯzVgIq|t_.ˎ(oU- du[ P7_Qu̹~:2?i XhY}D]/% Iuhi~Ƕnj0X gEhl_S̈}¤sO1ԄJIUJthо.lL滋Q+2PHO;:$~zaD]K J;A~}1*_1g";뽷ۆ+jB"Jۂ])%,nڀ81QB1EL^12`Ai;w>0M| @ojc x'4)*g1>piY(Z(r\Lkg\" N&$ h&Yw5ϗ`FDdoĪ'{дVHx ч fJDKX|A{R 5}Ad_"IQI=~W-p5L[F|r:1,;)>qstmM/I}t֛Pw7$2QL(JgNޑ S./a0ա|VUւ-ÎđwD O՞I@g}?%]GdsP! :Pc5ˆSr LT:SqOd@IPpFBNf:h4N)p%Af*^MGyۭEBsgw[gw$ rh?'N>"c%v.DuK?}Y4m]]$.MM.9l$~XH9߼/1u$΅λN*t8!{_GYenk^>pyG>ɾ]OT׎8/Et1?/T5GMg_*'uֺKVKަτJц}[6PB=|DŠɡ}|H NI2=]X#@|̉ eC$8ė#+KY\d BA|~(6XvHK.( Hdi^1Vc-a>\t$(Mt#%\Kn\:{y׀`ն3З`+ѮIQ4I4 >6Wl')⣠pGbSzI=Țtxϱs ([1[A9$=[=SJMW^As8VF YYHK@fG@y$/^E'kegw*p4^>c0-D#6pQSo|ڗr :a8HD;*(RBSLR[S\]8N0UPaˆF^g&5bkݗ'rYõ. Il܍b};s\e֘@Ċ]L 13*l4 !& 9z bE~9J9Ft5KW7Sa' A$k. KDR[c<;Gƚt[xu%$FD*G`JlS $ &sNje}XSۯ8W>bfqg&\oA v̧-\{Y߀02x• ""NxZ Z'NHP_sϐ Lap~- )yo[Q8HHB&5(Bv'}d(zB9J!}LbJ6,s·ȿcΐYn*Xp1Df|(1R)1t4+*l1<ێLIZ 1^Amt:C)Z^؜ FW'Sm 0?D[%ǕجMαc[i" i~a]׬ F=ԙ8#cJ׌?Rs.2'h[P2!;rY^YD}Z<4@{vm )о; ktp=^edDI>J6jTIt45R­c1xG1S O|m "U MZ]M~ifz#zDgo̘OOBeCT`O 向QxikWf޻qdvlkr"a$ ۂ[U2 '<2KNo'Yz_rNuh&d;6E{3d>@ )1rW3j;ym}p^$ !z"7cc:aaê;g(9c .]{Dvd$@vЯ&TÄCKLx>Ǩ$i:I+ZA6Dk֯ ;@]V܌ј,vas U}k8gޑk Cs9Dc5yԳZsWmCvdIhyjS9s1B˧6 QJ kf21P3Z'9Q P։PKdh2\v|XGE(aI@p\'BVz6Mj.蠿K0KrEQ,p7 2O6c+<)G4#V&{MJIf}$%aKodAƟ·ckſbۑuD eE֥WaܛF[:q%G-20v!O4%\'6fH1`R-ǖv.E+Bh,kCt?r4tuYQY~zI'"C؀?nU{ᾉ <*vClVZ)_bei*e,VYgp4yUuج uom*~mC9+\j,xّxWLgTzRs~&p{pYJ='3|9DV|C'!p}=+_uY"S83\[޴OGnkJv%^er{=}ǠPAiV qf'H)J `>jp9&_4 RӋJWGI)`^^%}LSvcpF5Y`X^\GGI')8 &[慽JΧ[0t]2w6i R_8}w-/#AˆW2Z' G B}eh\E)D FB0$[j$h0H齫w`؅elԨ1_E~WwV^I-O?T擜(%\XF~0 [fyR_pwK&DݷӝqD HS@DV|x)S`i0*8+`jڹO{kJ$շ \u4^weTe'ڦu(,___%'z@Fgh5 {ҿvG/>FWp`eadq.NrnSLi̔x,1a?&P1 d߈{e'FUV9w%>f~8;m3f#%NzL)Z dҔ&žۏtay+rm/O!뿙Mvig9 &(h ٩36 rK:Yepf++ȅQ7N""ݱ"(zǫ##B>Jbz'-dyM3i?qpgM Zg ;|1(֢ft7>% , t,SLb+G[6NBw__jm 5X6`.fThZB۞ b(VcM|zDrR'Ou+\H5U'yם K^b伥KX &l&%֋͏ɣV㛧ApRLj9bt}-iUbIm9m FJ,(_.bEG "&[R*}J t!PCmc֧i$]9H uT\U1%\hrM !j.N5F9 vt%ђ;)4k+ѠsBnkoc@>{'-c*GL@͙Gvk=g,iz)]z-5;~mA eAhp 3hhKMRHÆG#2,D)w6@}IFǪ.Ǝ`jy DlIH6NT& ;@8P]p zl#NcEd/t^`ƺO 3{ I0HW]W [\`v'@`r" b)H2 Ri(;Gjj107Qxx ~rIN4zHoA=8j`+ki3Ѫo#U۪j_}Hnim(j@*ߚbvhA)Nyȣ;Cc)4~w=B;cK탂-pQP|()c%ͨohX 9% mZ@5x Xz2 2zˏnceԌz 1:XhI&edL! n] d sinHW! ]s$p!֝.|D7z vPlSD+ʾ+1L /8`˵V ֏;藅N-0 }"z:FPtJtTxYL =>Yቔe-Bz="+Bz}GHh/*A1;ө 9*CD* k5K_wVVݘrSs#z&R 0G#);zoI:5wzm>ud֏ &ވ"7/̔)pwa)NC$M% LA}9_duw,)Oj \L2e|1/mZךOOģ]8[9dОqmyPdeRR6!ÿ{!碷Oe uQ+MlR.%4A37)g^YI,ۯS8AAWz$g{h/Dtl>pl(*sdrtt4N!d&bb,k ǧ{h{bX DJzi!P3ʥg]0olc&E u;6DрUynq {fPB25Q*8q3|B#4I Ra,Ub5YJTk>ۅo[4,D,C/?B8Σϑ9E܏ Pң]-lr $Ts>ARF-g ^?P3 D~^@Ϫ1m*1BHfZljƗ4bjș=i~A^+9 ߛvkʊפ.FW CUOw?AqaY6G5L8 \J~->@2ʉZ`q!&hAJ(%WY J4w?md[vz,T鉧CT&gTk.j#df`K nJ_aR3+wxMv257v6cFAp;z3sV>݀d!7m rXQq7 Lۭè (&B]3ptU \"k0>8o=ۅ؏%Tȩ&V&\֧E[5I*Kߐ >?zk @436הcnO.ſVv=Yj#SAW$U]J)tnË  Ż@%zO `|r.at U8q~l0RЛudBTs3Y2T KMv8hZ7N$^ 7xT<[lUb02OZɛH8Fiky0'"mͬ]XW0KsEҮPeHfKUCå.3%6p DfǂTKY1t 0 J }"RbԞe'?^ht MLhsgg-ÐFH=~ [] p!D TO<.6g7r2>yWZ fcV3 \;C߽iJ%ߠWo29Q{)Q1or;9!j] 9G 0/w~3e:L`6'  +Pe4g[/vlٚjx "臏T  U- J' I1ր9PAI[xbmM\>mתn6nΡ0[J-MƋ.BYp@fOmDT Ӗ1-S@XE70ICv@;|)Ŭ&ml8 5mp?]MXG$lL]66ܘD[0J3X:v&Mh:oJ*%@GvA}SS*͢;B2NNp }2uD7$xzj_z !ox`gHh/H Hcx#.jv>-{qp{oϭ _kD&'QìU=p2+4> 5uNP >XJQJa3!L텐}m'AX'wc9Wg <ݳ_j簕&I6W?<ɧ҈Z<|'?)w[$+clou.̡;oŬ:}(g}є>la45 Z8_bYU3 DE^T!5ZJjE~_SDN{?( m҅B$Lk;T@, WXل)LT W_jvusZ*%jڻsyu$o7$:Az"ET ׎?[Io,$_.OuG[Vwm3*"nu<"z@YR/'3—,Vӟcs맪Mq`vf|)IE9y2}vZ~=_b Fy१qΖ_N΋9.*s3*W#DnX%~Ҵ&bƕv,|)}{Edo+$^g˯nH uQ!$oBS)6BH{(JX̂ⶾdlLZX ?V%IxGO=OX?HZӫ6{[ (g8Lq-GHWde[8Lޮ aM27$M?Ͼ|RՉ&ܽ kᗏ&ٝPB̐ͮQ@/W6leh!JɤPbd%?|;ƷuyYŊ5hX߇nX5_l(9<};{}yS&@JuvJjd٬1sYIٱ$#HJTHP c~˕]7m`X''P :g CC1}d"ށc u7B{0vw/*8u?NN'0 k_MEm^" @#2E0Lm̐6"&?>RT &>Ýڷ(X`.Ӯ _ }ՄqmbR-s:%ĝNW]U8Ntf!;Aښts(Fܑ_*XQ&ēPbեhu?'q[EA W}[.ƛ  ]ϛZgs,y+^){ϿLCsw$eCc橔c~ 4%;})UAK0KtУ8 m KehG loHҒ171R2t]MЧ][ni!0Jqk¦] 8,݉Fg78O)E`|S$rv]\iؓ&UyO֯X!M2osM6|x5oיRb^J.M|aYvr9RoӉf}K'_܄XmK,Ƹf'>Gcr(ֻIX0FU)_$uo.?G(cTR8<*>)09I+5QqwAp}{L6??Va%u!~:R8l1`ckwWN @Zp^&W.^vm9kV&?ou_!/nm -Gn0lm&)gIxk⎀a1:'3yvhzjiVϗ('ϔⱒp: xy5haq6>c ٖ@7  2ALb=~0Ů-g8k*@%Z$ 7sN푌v˺&uV^q~}yoiz 3xoA xJyH!~,A/Yr~iYpF)XG_2XT_2T$+"aYUGނ? ϡT]ss7zlFbS'IOi\(#o`kɠ>y7R`*8(?nC#/#hԖzW=b8d_ yC蛝f[v|iis[&/5(.9 &Φl 0ZLeNIP,}pJS~)ex76˦W=BCp4W|uI۵䞢#K/ 5b9M~ۢ_́ĵ*9V5X<]̕>)h#_W>g) 54A-[Ɓ:) G"ҢܽSXӝ7YI(}E\,fP-_n!,!Q {H! ܼ9I:2gSeM2P1mÁ}Z]WYTDA~0/pJ7Lڷ[FG 8AكxABՀlLy<$Dk|CMz.s|X:bVnmF6Hw +U~E?\*5lS u|.9QZD1±{vnJ""5^rgJ~dxS PhUyʻ{)MO UV0nѴ3$]FJjeF8`H mg'Y9)y ɤdJPz ]QŃAu8Ry.'׌ "e>x6XX0B;:SUqDZȒ_%A@*F_ҾRޱ:h%~ ݖVݐӈkio)[ڄpN:l*o/| LYX-`|b|wkmwJ*{昼 !2R$Rge,J@nĕL~ʺ&On?%L :=O$ VP M|`סP v6{x\Nl0bj~+kчp#ѐGۣ`,mJ& 2bScʽ %6:6ۈw0/w9q(h'Ѩ4?snW2.eI%~ID 'v}V0}W=)FC}36y !TcbIQ?9 0:S COφ%ꗰ'MY6{cCp_ReV2T&*5UndGg %%yvPDK- `v?MFh/bei;0 55E; y4i9^s Gy]xer3ĕNׂb*9L7E BJBԂ@L{d~֪gý55A<;ذQjT6Ψ\ uAZMG :LA2in 8*f c#q;vꍟA_gl)U0E5x$&TiC-[([F>E#1I';ܳqlj}6z"j[ץ1HZctz_ R}: @ C],FwJQ`,/oZQPnS3 KBԶ[xEkk@H0( tvhK3YDRz'!\lJwq6 cO=3v׉!3ߍ_d''4AE]j$IXn.F4;q0zݣXzW+{Kع>АueU78KF~$W3&L,,T.+?')'cxXh[Оz5].+*w=xv|-B^0I-x7܀Y|YKyQ̜>K4]Wu}:L!c~v Xm(l<Y$0Oiq!Knw P.b I%SS2y CSTˑ6!Caܟ+y%bVMeyQ$tr@iJ<;%/XeZD*{:y?\oQ`uл-oB\dǯik,0L[ Ӂl<k('HY4pś/5=$Wi|.2R_ K@E<7U>SWݭ Je'8g,C=Ȳ37 &ć`EFlm=zebHpl.9Ar$aҺCUu7Ȑ+Sĸ̀Z\^!;7W !!Df8U/9"hJ܉N9S7YNaelS̚(bmߦ_݈>Vaa; !v+ز>ο,&üPүud L^|NnUa*<ئ8hw\%ick kZ`SJSQ  Zf*x,OlfߣhFKltzy/)AL+0La4Pe+7_u>ٱgrY/{YqZ/ ׶kV7TꈭCsJHH"GPhӆwcG \t8")r4(W!?tXsړǴR&7L|sNZBI4m>ǘ/i#/HC|gL6'==eQ&QGF.r o-Y3Eav #vΊCE[Q++ !Q-KB8^SsnOM> Sua2Ҵ3N7aFM5F?M9dU]};öУjpְ=Z}?t-[}e`(7 %y>fCV,F16ZMDLғUPڠ O >ߏ3M. BEho2Ydݦf";) 4%]x#qߡ{1;XS<; {U" oW3,)ә/Ky]|![Z=< dWr+Cv2y7\'E_'!71 ym0#vBK۠Ig;ta;A!{1"4,u'޾j6K֣bBH3ߢrC3"O0(ːSߜ'ɾSbBy:"9ţקGhkNCǞKo]z?s?Cf'y^ >o8汾e vOP1 r«m(%C&B"i!<1864NįRʀZo=swj$ʂZ 9Nd/w1cb)Z矛Cq3ļG4Ny%B|t<T =]Mr%W<3c_OUږW;M5FwH)$4x Hm}zܞ~@QR4* O>8iӁ% B+93R(@*.E`za w0km{E!(WEz4P.R|rb qMZ:@~j[ܵE 1_i-'~ͬO=918V _#f =fr#/bj$^krj& G*WԦֈ{܎H8tcw.1P)8uZ+5lG&7D;n\†J[gZ\|)ۈ#$bAA̱ׄgq8t"|IP$7`Rt+ŽV!zr*,h\=3ula͕:*ϵ&/ "+Y )/ csuf[3G<] BO 5Q#@{zJwo/~fjsHU^j `<[2Wlw6WނaSO5qcGN68HgP .j:ܦns#ZuW 1;zV {̅(Z3R9L?Ґ=#ei$ #NMKSas+omp&n , oQU{A0P9d')J|V_ntN Ki;YRJRSmqtg?%‹4^atyAϊlWVO=YFOlcN[?̙l :s$y/)MѢt h\RrM\3I|LFMgyd>}7eP$|ŸhqP~`1B6hpl Y6NQ}V\2e HWrT O"#1dMt\; p`}% z|b赪7c R rG@荧ʅ)5_=#3TNihLtEJ!! 4a_T\)WuiǧKPg'B% }Q3P0֒`$C4V/kL<dAbraS+^Qe>&LmlVÃ-exQ>ǰD6=`_C0S+–蟛Z!ɵG Wd%yv;L ĺl}>69i~eY|{QgN 1}g:%W aܧl mEi릕k]ͩcI5LE (v35Tl/*:UAə#QO6l~O x'RQ`IٿN0h|#r*0ce|.r+6߇ꊪSyԔm1 fTj$)C1u䪽7l}a>A;ϦeEMH0MhH|UCX1 ɋBvkQJݟ鸭BA]Ulb:Z9= ,7n9t2sY);ɳ{R:F;& AKs.Цoy-!Eogy>d|G(5}BKpj=?s  myG__%r0-|!z)gY/@@9 0XKHp1]xsϤw nɳKtr9hj|]=;!<ɊPu<=!X0e!S6\ZΝ޺H?Bt.EKIίjq(qeNVol*e~SHcГ}iE $zk!o7ώꔩʐP_=^*o0dK?P}rSd9WTm`^@4M#2?Lg'$u4`= [T?%ALU.;[o]yx̌F5u}To+ucB_ W*=%ffk(Am+`9߈\W:)f)&Wn,kvse8,s*S>Kf88A_Gw'DjX&y~~jGvZGc%UA-.%gbj^t݃5["6Wݙn t;-򿩟+뎊4v}\4u\dDaZ[w"DOPK)`R1VPS˅XVJU7`-pM >妌pUJ^O,ώ93'}g^t/G_SZt"jlOD4Beҽ<#N{pϸ'"L+#^ 6ƶΛNE$*wPUn!+o+2A8C#̥)]C5#rr| w6Y8IZw=]iSlP5Ǹ lb;2VQO?;KL`Kcș@S>Ns$>+X\5y?1/(_V`#W}ن۝|@lwqC14`zT6lo:#;/ NCMYy 튝&e7y؛} oLa @Qss _eAV`iܑ٭S5a^9۰2Sة`U:F?oS@Szn~?e_B[N6>wʪT6-8g\~*|!C]*w74n[|``-(Y/Ij* n=YKQd%Blp-"Z09|OT;[UMg!#:ДCNGG[e"4݅y!s՟8 (W1t 8d]eGQ/Ҹobbɗ25WXM̀fQ ..WWn0֪Bn3]4N21?CbfGKM/~!4ZeG~ 5z"i%&=}`ʃov"VtzEʌ(ʼn S_|!7%E)h+' o?GL:%9ZK#k膖|MM}zk鴩\fX%gVAHT,A)^~E_?(s m.׍ZqZСӿI6 w(]Վ(5qqCOec❋n8NEz2cs8 _rRُ31 5S!Ưl.44 %9&Ƽwp.s$-ep;f:M+ʙ9?D/Zn@nƞ= ,^<tx5V&¹mMyЊ j`ɢ^?gWMOHRC! <6O(:JP Q0)7X<hTh|NdJ^0sjjMDFQeE\!`і-MB=ۺ\ k?1ל1*s\HK.cvk۪E_\(kl7FDq wS ~%>+`}!ꃿ/@f+h:5$Γúiiɺz'@C/V-4dy@vl.C wOkC9< TlaNCD$UDYjq㓃f5 pR~/Q x;~R~)uni*w58Kԯ{ a7_"aJi.Gzu/J8z1ڴѲ^ 2EUh樶*ePݟG47T@-D)MqnPW^LnW:9ؽBe_oq$#ثl!tX|@CܗpR0bP㖸\tΰ yW{ǝXZy8:4a,O*(F+7;Ear} qAj'(xCƶWM fLMY__2*8y(\5i͆Np0`X=|fޘR[rgh^ &'PhL gvW#F(@!k!T"E ҿBߠ_?WdygGreMgu"VLqV6D^C]68O -Zpzttc7V+Vyu QA$h6=o~KrL}l 硫Gdx']-%|>`"k 6h$S=pO 2I ДR[mC-bL|{E٠].*^e' #O[61q '. .@X "X* |2^&Ew'`1&3B/uKlI xL hXQ#b)%;|@xʒ._OR㲟GYJFe /5d 4(a/Otq:s0)y @\ yMf pû_ޔԐ~ -8}y*͋cC0kx{;e.0B ݻʷ5/2mh+l<׎+ XZ}㕀` ڛd~8:7.C0HK:OvT"d Vi*9fv-})j?#4TģC K/3:[&@MC)xe>,bqLtl4[|ާ%2I,{PTR)}0o-) Cfș!V=+?pdaB#Sn&d]䶲m2cCd+ †w˹H]6xNlrv8tR:ߎhpօg8LkN*NFxEiudDJ5q%^fBz4,V\dg~yqޔ"lБ@Tݴ,>MgMt"d W)'9[j(ΞoK̺'}*2>i0;Ʃ9yԊ0ԥYcO cO4_Y*2+b0|؋ ք%unّ=F8@]hlE?R2ֻA-qӁ;Rv[=Yl4³i}+ءsўLc^굢^]DD6PLFm\ޱFqQJ(ǛP`]sF^Xn a(=ƄqZ;I*ONHe) Jʃc+&NOoxCAV6[/&n|z.D5|iB:"`!W/ ˶&rq %a)mM?-^U ΦIc/xbG*Tobٴ}O6l9o:  te#Avt)#ŀ8+} ?1q8?U^C"-tfj Eq(uXGMSG6e$?7-PP0q0١h n}RwEjOq] AR=~0XFV W8JPxAoI9H𭋳gD7tQ1\!mbS\7) d}$4r״+iF7 y"h\eNmdaX:w¬B u¸ņ"8F͆h[ .­XwB/:UyDkU ^{J| 7k$H|>3DѪ* fP5Ex Sˆ.D{JP4ѿѻ)ÐO(}$v|5nH]mX:#D0\S7|3 i\QH=Cte/UU4dWql)F^="cXi]Whu(U 4iyuM2:b7$$zR[i[̼(GE`u+{]\(GՉk!"qovi#8P W?O} /YMfM$eDTKUa}b+G?2R!渹H2cUU7Q++no[,e(g#H װ9`7q 7Ix>¬8>j8]u: b[Byn腨M.& CKX'z1-+dR)LYˬR{SO/ Z7$Vjce7KClqong|\ vW~3j,hW AHo\ k"e6wOŢ-W\w޹5C+ǂyUJl|W4g·"f^{ͫ;i#;Ae'd.TPZi*v%5~zO1爂.@\܉Sz۪{$Wl>G+D.yhGB LýN#9ϟkSY692=./5w%<#jPMd-k /預 ~``H,/mm Yb hg֐ۦ!5M}VpƧ(y'Gߋk0T@XЋw1-X>lyg$X5eB7SϧngYPoda) f0(R*v2﷉e&g,9$W`e\iuoNaٕf2dzbZ7Jy5Q޷^/=G^ NV]Z -(9cz[:tO4V8&wԱ 69.z\PJGQU>&pVk g0?4.+rW]sa9Tm¡ۇR /X\ Vr O:q^F'ە~bP\-m\뽑"Jl4vQr&K;F‚3q̾Z"i 6,Ydߛ $(FhVy?Rh=orFڨυXcj5 cte;}ܢRD5HPu!ya"dboFxwf WGE7yP}&3GչnOi1hdвt9 L[;`Y+F"A1n:&IM6E;1Nʺ5hQJ{k/VC&~^SHTU* =o)p'C6cbKN,owتQ@ *^h|Bx$Jlz˜YO}P 5}/}KDDg)[&nbRܜ_,ȢG 6kCnt8廅 9hyZһA¹Ā1dǒ +5%m/ G| &]>S*cm|0Zo_4!67~o*K Z˽cE*+1 y~$)7SH)nwKbyJ^\mʎ) K˞AX6Qh 9quI-͝I&]V׀Fm+*` 9]a􋮗=~p:qyQ`ĐuA$oma)U|qkVe/J4YMբhI[* Q11k,ش]u F|&GhTV3j6)EBǖ{O Ah'c+l^ŏ+k ;ghAo1kͥ+ocvuOfN0R}Crñp9g^=p!BOA50(E}_ ~>|=K?]Y;gFd gcYf>]KCE⋸܃Hs ҿJO3_%/{< 1B1FC(tMXx+(.-Me>hUU}n{)> mj үcm [2Ηp~x4t]a"V+.W,{3.P_s`ů 1nކ( K;bFs_Rd}'&F]qY'RVβ6x־rmjNG 4_K%'~ @% Z|5[fMTpig*ӝWuQ)Cdt-'934V{ɡ5w-g@hһJSukyijFҊ׃_AUĪ<6vfvH_BvpIN[u٢m@T<<%H׸ p>59mTP8zi<ﱐp7a/RiR5In} eAg\pɽOK%Hb .@Gӻ!yjIW8辱E>4G]µQXF?\HYW"l yd?vIk혝W`- f]HG= ~6s>'M!EA '/nE>+˩(޾uxDtcuӗ  ]r0Z(CcH\]75FB”~h`idVk:?^xCD{ܚ;c?֗Wu-C08XHK U dpAi[~6pYյ4I r0^2C\o.໅-Zufv4[I5BwaЛCY""M9A;q~skyR-g,Ĵ`!!xi0 ZPI"C Vw89N|UEkBVƏ>H^8،Bc<"|F u9Ms;[^r<d Z@˹VV |OP|Rto 'X};)M4KĪh3$YcP/%} 'BcPR|b&Ya_{UOrZ04h3O8@9/Z)PGuvn֓FArk2tکeK'fx)U^ AWS㜵5h^DţQDLV'9v!ûbG~l4++/"LZ8`G|S@~>4Oǐ'΋S;_I8n@`^ wZJ\d'JmqzmN &STq T#œN TFis{ktI(vw>u7t\pfAmۅⲪ FZAfɑqEX wp@W{ɓ_83(2~H.@F:@ ~M;GrxO{P(4`Jpx.+4h7Iʈ#m\Țz;16a{^=R{{YF23J딁(#;Z9% Uv>* IhTU+H/*"MA0gѪ >Y)qG`7jhH+u/g)&1n1њWR^Y$-8 o 0 ؄tGZ8yK 6ؔe@I(a/P[z*BEodQ5ܮ=59)AAbshEd0O6׻Cݴ_:"6/3Mp-,V乷.FӚa7F^-X9-PZ"Z6#ዎ dx09p&\¨::q`ǘ{LH*>ܦ>F'ķ3δ\DHƺC@}S^Йc{2|E `∊_ݟщ'tS޶d⫸N&qǙ7f2̥Y1l_6x}r/ &ZH5W&/2hls8}VڿqJQ(._[TN)t +^[j?8ҭG_1&agS\,c$oc'Bn\SJ{47-u hd$lt\n;1Ui@iXJpE>@21YgOƺ9KL +j(3b~BoSNJ~' ]&%i{2xt1бgP?| 9fX;b5wYT5,ۓ= 0VvZMXR߳,:jp{%%&eV(;'z[ZV|;.UKf!/rHD1i]UƆdǀDb=3 &ޅ{ִr--7x,A4%"F\NOa˥OHcN-#≷\M \.L~5L ]ߚRVMsREc|e2u屻6] ' o3#rhb.Wҵda2Uf|ǖA6\?|%G-dW$K=cƯgcqVeC9Wݲ:#ƕ &r^T:Qhra(=A\m*LS~N/ݪQF[kAuxTBGbpDw&nkc>%BzPϐB~I!u%|XHg>mUG7'L8VG3V$RX5;(0r#0ub\)581Ɋ" 0hm:@n\(֧=4IJS|6$ƌ =OjԼ{jׇ8'Kx2r? | qYY˓Kr)MhCɌE/9e8]lx5):'(牯IavRF&6w٢8fkތpK}uȉ"BP^s Ѕ>ٔtVg83"z|ˏXQBׇe Sw9gMloc 'Zho'M듡B`ѻ'>m6j[+ߥVE9>rJQohBp8@ڮ:>ȱQL?x9*UOاF<h;jM=5yR 6k ݘU7z*_^X}oi)$O=w(䳉n{!9ӦNYt/5/>jtʵk52HSH,+ȃh KzI6Dw&]07ϯ<50`3o߂Nryrp?-ԑr;"=UX6/-7jУc'p x@m$Ozn^tܔ)_T B5`̜gm[m+(K`X.8_6i'R .N_\;k^!N)~wExޤ4/n:{~de(ޗ2sS+6HJxQ[dMț(80822'srtS*no‡ );R?%់äcscjE#3eQheY*uH0!vc8{*1uSU/-Xx%ybA!]t3x#UR.yUWc(͖z A)x{٧}vmFTod(pPń$H#PEpr_}4L18kmaNQts{ËwtY %u $hE#9A@p6B[BIຈZg9nbFsìY:oϢ.Hxyij$\NAZp^5{ `n|^IBpv9oy2A2ՅgLw.F[N_%_Ijm,(S}y ֞ߘ'[迺>\λC޶lN“R (%$1{zpke!5V(Ai?D>ۅYЋ%H[+9;f!y'sJH^Eb!A$d=j4)*șLpNZI4׎*u$WBH,ɑΰ8'F"b+U*G>?EO\I˨Ly A+xm, )8đ@q(GrkIH}o,V>͇bVje^Nd(6?E`Ⴑ{dJ`hC@?2en@9+ZHù88ֲIW1g9[0BfXXZoMUdi0V_̉i)aS!v[@9;:6zk 0^DvnG8ZI-LLXB͉} jMlz68`/EU؀UVxZ-фfSm;eu`T"_ipu$|J?^i,B3idU^Ya!o_F 86v&ꯇ~\^!;p~[JĊ \8}7C_&J*c#ou2FmV1a"W Naq[o"񙂝jÖ92ρ$gKHK/mGo<5@ǸTɚ=xIx@sr_p4<f{yhjqD@RBg8fA ->]gP=^.zLELja>sׁ!eDv՚hEPo45P73>cG9NhZKIG9-25<.i쀀/@~Z x&[N*5 )~g:,I8 :DpWX,іߙJ]'S{%6}(~뜪9J3YV`n4A=؄6Դ/k2>N0ʹg::ui>UL[c ([kc;0| /.cj/N׿wΔ<#AwLhO\V, T!u;xƑUbM9x$00A$7AYAG0B)Npy=K*{9J$;3?_li' ;Lp4=]l Aws=]>v _'*eڳwt!br49ݛ9zjq0`(;݈`ʉ3`|ݳ gf`gd_3EHj|s"E?'FA1L&iJdé{,^cޡPC|7 >qR`uG+"8c't@xͤ19`ط7h7[e]X%8L|(O01nR .G@\! I%Nn=uۮ%*4K )I"X<))`mI4#^ b: ^m ¤bюroeRTڜY"$X:vڴZ 1E|dhiOĈ <:0$1*e[;}8NL\' .G>zz|~sJƌxāH@i)y§lJ=Dѽ}3KNy9F'<:+Y qLQXY '7 =z >C&ќFWQ;;8i4to^TUִkmx9Y'/NBogU11J/A<+J d\+XE/{P"$c˸(&7K„?$Pc#oj;T(X$*-@`# ǾO.C.R+qW8oŒ5O/P~u2mu=S3V,u+D!Mh6 -O?*;4ok ^ UT1W9yxjY;߰8|.h8 .n,̃pZĂY *4odX͊}wͨǶhj48iňHK~bGlr }3Ϫҳ8ʏ1ۇWD8R@xDW:H9r,?-g#S7OL`rҫp:),kVF84JgST,hVva >QK1p|Wn;S )b?w\af'Èk8ސ!z)a_re~˟:/27JPڠ=0zv6))댌OHN`kI>]F?K~gaPh˽›O=}cOS.*×x >붱Ih L.a10֕/uJvcRK6M{%@>G}1FVː gImwt05J$j_ w&D_Jۨwݥ]w6+ӥ8I9MKOBm(Zy-jPS455 - #YNK zo~@G uXGlhYHDy_+NV\ZќNV[Ty:2b#kC0c̳]s!Ϸm:'^a)o(p}Zu7 "$Ҷ(ܺF1l,Ebjr!;uԵr1 Wdc,Ҥ&!Ǽ!PZ45#L>F@lj 3gR&~&6\009  1V)p-Ol _ n^ͪ'?oI_?kVG]q`#[_?NvYV#}cRF7/<@2#<Р XmAon5r{uS帕Xd (je[ַ=}EiD#2K'Z{p. к*)GUPV5;'L=h'cY972zty!XZW *MB`nG9_"%2wa~I@mŷpT\=r}72;wJK f"b%X~ C``t %yIfQzF'q3 *Đ>w۾W9qɚ~hgy PhT"lf5#@/8x-d(b0~h4BrPrxX5H4VgǏg}dxR DHpEsϳb$}D.{%\O("-KnuĥTd<(mFlx N$&oXYavU{ROgIB.x%SuA~y!'<]/U3~v56"6=>R|W2@%]k~.r9LR>2ca Z+E)Ìhst=qo8 泋fv?ϰIfYgn7T[~x_x2 >:taKs(A]T/>[ITFr4.u qLb)ynĩaA3z M.ՖA},8Hc Ig8lqĊjᰒ6U/^HB4XEzyc[69(d^(IO_ PБ $#d{-Ѭ jJz_Hpeqe%ZÅҢ3qp ԟOk/-{,$k{ƚGp"k41/; .!sQ'B.ܴ=A쬣kd4J`fE~[Y3⛀hEB(eYr`Qr6 >UNyMU 2XG-_bzkybZ~Bdԓ';PTب2ܫp\՘owtKjVy@oT0@΂ IVG %<&Mɚ <0$ɶ:ҁ*%j:SxV#z  ~`/g ,)[ĠBYZҾ[ y;wgP="Uӗdn%w߫~1lRe/-Ʒn>.oplEZoLNkZB\I6)Ă  *Dr研-WfQC0<cQdqeԚ*){KKw:v6!ʩ. Exp hK8;rk17!kHYSzX_ w3]#RcncDLYśoH򰐶ـQ`jHg^[nڴ3_Y *8͹qP5mMz'!X[""Qھ,~׼oHxE{ug m ":>״f^K<Ҡ^ʓ3T4C0b<&qF4B0I ,)]9ҍY۴ZDa[G&l [i[ހӖ*P HI@ Д09+.h3*zq@XkZÍdt?QC+wg@b،BF, 1&}楋F2G.uގVnd ,vX(碣־g>7|@f|&nHKə1 {-; UlkAgA s]_CgXBR.HS[ VmigaޯX԰%*;LE!UZ,U[To_.n:In鵫O矸膅ܼ">DVHFrBٔhY bm[Gp5KI&-x8Lva.E)p@F>V`>u{KI~봩Q[7fyN:s (i#Ƙ]I\|jF %*XRB[ FSl/Oᱥ%(1N~;Ң iiX='"qAlRJ[`b E5(4$]nnH [ Ee{:25!Ц}^ DNMvx ֟0 8ԡonϘїtl.mpt9$qO<"*dg:&ᘇT9݁."HF扵Xpۿ/%pp06QM C<\aSiЈkUԈqc,YI2%jQ(8Z4SJ"n̽񧴝K1yZ 〒hXuYy$$\.⏃S I?.;Qyܐ 'AEcQ:DPKe E6rrz.\Bn/ԤT>ֱaϻ):D[?b E> r}`LF,F#2s~β""0_jiŶZ:NG.)6+h*SXh[c}g@(ITփ[PFK%Rw|}Ƞ _Ի2H2,3xuL,߸ͬ"ӹ30+Q'u)vjĵ/[ǜoj{ۦnF<7",>]QUt\قdQٲW?P KӘFɄNdۗ/ph "/z2- Lr%>hcsKFm,JпnPZu(|[ (G{AA=@JgWn=De fyrO'D Dq?eY7bLV U)0vƗ^0-f{ʵr-0dHW$PE^X,s."/G-+M0GM= |9WWѻeϪ?X/W ;/$ɰ넣 CHy֠?6)bOi{AS"N)N?^>ԝ'_ l?lRcɇ&TA++ j2E~y?`^;l焊[ gH<0s0-@}kn4ESK8@fz29$lj+0+g.{/~t ;(^f.ɫkA?lbOW /IJ 8Kz#=o5ᘆ&![ėW;~ F|~AuX5amc7t>@JRƙ)l]yHGWˆ9ׇ]lt5YMp>_-1'uO8ؙb"`J=$tJﺆ(VNaE [dƱ2CjGRCP#f>*{#G2xU^%9? I..^.( kIE732/i j&%vs?h^c!y%h% 2s՗-rW>N|!td~s{Xq`6ı•ٴcZi `K.K'x_#*wSͯM~E{Y֘4#G SSĚtx$x -뭟fFɊ6LsI@:k#ӡGn\k6&JGF7/[|÷<0 POW(9$]?fS 39G!7Ⱥ4-S'T2Y|-5kR6pJ}ŵ𘶐cNlg,&kڥ+,@YE ߋЍ6(\zXG;R,c:{1VfW:M0yd*X@hVVǃWYp'F^ItV3[VJ ΒnP^QG T^jgH,JG6}SYazw7?˲|Hp>֨L6O\tzEaA(L&MYHka"D/k@[:y1£,K-a8Cͦ֓ɿVPG"kإSbz2KwkCqz2<9^6fC'N ~\C1#؈4Y  eC_tګp7 _P, ػs>QX }5{Eb֕B4O= ܰ`w4 8й+,F̾9ԉIP CY vJ$gTqʳ#,L'>8yۦg0{0}Kd*$v=p@юI|̬]2C-ݽ!p&%)-lnE5́c1]jQ'.-1 ó+}pS*AJ/-U-G ZZ hRq$o _πe7eAB'~k suK-nDZ| Ȭ[*A99B sz1뺬 6sh} Ho϶*B ^̱_":/ek?"?0OFf(w9|xcM |ɂ9++B+9"f^#4Wj۾m:[{A>5Ι}6W:u`5%\eL+:kbi,mo:Lq>:!]T;XG0PG~5y\ $ F>[gYIBT`u} ^OSRWw,x)/fmK( 4t ׭{6ssu8@Ӎ:~Q@#=dT]Y% ^jmnlx⒪SD݅h.k WF"\\!| :] \1ShtR4ϓ`cInCc۪ۥbm \E}wZPt"mU[٨뚅( >P׉)Χ0=[NSiYur3S/}NPMQft.jbd`Qs50Qb)_Ғ*6s꒚i{PAXQ)R.ǜXL;]ncP<~1dlդ~$Vm\ݚ\kAK2*J`fqKveE$VO-u *,0db\ 4/>=#d|Va/փ ٴD6=4 _BORl΅1PO`%E;(#ZPKiO|ZIĽrΠ{g/(-r% OBY/NMU>j#veʈR,eS\oeeA Q/16h#h?FgHEySl[`ÆO.RT3D]J?ol:" O<f|2d `D8RC@>"gY|&]Y[+#1hD 3מbU2=c_ՂK[Xc\q| ȸzoU#(IrS"8P [[wC{

F~ʁSn`xBG1يVM}e'JQVZjF{}VKOpnrqBI4 GV48%?H!M^@>!7;Qn(|NMF#V볝ϾbzlG>oŦlۅ9zu%۰t0: Q$q] 'Zτ#sy""fǙcέ\4:mK|p+\gE [g{Q^1`FDOxD׆rdolp v&bHR(l YD tW!6`b#HnvѩQLfA=XJ)e\Ck/ _lmXn.  'BMM|e )+[a^@qKTCI\0D aw__6Z4 R~nRGߙ["/ʹLͳ`Et[Q ܸ{&a.Ԇ6V9~mU&/So_YtCLyE7RwA݃ oC︨:6i5ƭ/p_Nka$pJ! R [a^-~8 ~S ƑqjS:`NuK>dKaT4|(=Cmu$ҫxԧsGx&BTq =k#.8$ :2 !oBcURBp=~B$$gfL) u>t,&uk4+˜q'A\󏛐XbSXygYqE{ZV޹[>L`$Ui.SgX<p)RzVB;10g`vuZpWK,2)K)Ho{WrIBjІF$'HO*hl :󺃧o=4N|!ʹ$늯ս LPԡ4%yCH wML[rs7#JDfclueP7|qγkx;%#Œ-w(>T:WOԽgPL#KoQ37>3ˤAֹd}CФXp{ҙn0k@57pƐp m,l`A«G&4 EYf-_俉qR FV^D&*o O7 _Q{uL^ܟǏA@3TIBA8v~AyI^A-q&yJR{nщ4.KߚQN ӝÿge*\cWRiF™ph)?-6QevlnRl8q` 7fjzğJNiVCƩEJ CYK![M r9_N( 4Ȭfa+>z~2q|Mt֬XyjF0rmسX#1fa8A5Ǔ hV-$5&.^g` HwoZh=)ǺNV_gæA=ܿ:WopLxrL3yoܾuX3O.Mvde70{5N⢃2`rwxܨ: ei,a6FZӿ&P mƓ6{öCdJ;Bw V9\G;[CY&վTuoSXců3Ph%%{Ms9"uzw]E1GH56_plK/SF: } Xm]V)BlK.2'l?QF8?jl6V(]|¼$3oWVe8efΘ ohqSa?3w呰e{3Urڧ^D6aZ[Fb ]kI3Yr^eMH#7<1<(Qj0ŋ-B5yi5'o|OjN8E0$2bBÓIlGc()t";W{1H/DMj62 c[TbN/ӴeL}ft;t 'C2Tsy?Z?{;LüV.֌!ehS(( [p۝jFo 'ߧI0ʩ扒A򢍐)H}FJGBRIpK8I;Qtݜ\նl󸫠fEgQs  Ǒ̋1n\s[t`R6Y rbhms!qz5:,nm:UU(~\ 6v9k琼֚֌Q9%ɶ셯e>Lb5 q3Oo@6@" \P>QVq oT'LX-{¸-Id|(gI fƅ܋_ۖZIA+5D*|bpI NS5'mu8q2 4&-!p?M]D'O࿒=512;֫ng`U ֎pUPY6]d΋R(ѷjSA1́u@'3a ߍ(J6͆)?Q:onդKouCҟ 3sޙKo I'ӱR>< D$[k^Q Y%J@V.7@Rug+>^ӏT;=83(s}}Udр%C">\̉i_[QաMfWJiRuG:~Jo2vrw"^KXOyX:s1PS P0s4˧܂q&#ػ)Ϝ2:P3ұjs ( Humf\=f~["Mdi:F]C˝%2^ t9-X)c'h^T~ÿCcmB藰1F]HDL'5!7s0,k3Q~`d%PmYS?t*FN^B;e$=K{?4H|zhM} h}0lTVx@v1O+ȼ&z4X N۬v"yy3{YPp wƫ$I͝jG&*<$ZTU%oI?YAu^ʡ4\\CsyZߺG5Պf_vgkϫHS ݊'h;%矱rHAkkiԘ1$LJ4o|3(wDž@y6m4FRCQ- sj[f͉7|ϩX8ևJm-Ɓ.x6TJSd*v yB?"ȱV9 Bw:yFLù奛 J$l]|q_Y?A8 w7nzQT`dщt|\7-cBk}0Aȡubt] %z#UzzDl 3[+ -0o"EAx!~MjoDZZ5#BaLw/Dz >)-@Ҝ. 7uY@CpQ=j_:b/"oαE)gq%Kbjp՘ª6RKDӦFwH (fKg Fd71:wlvCz(E|#oj],-)YM9JT{}k0n~}+xPcޭtg9iUX[_F1Ɨx4,$}Uޭz뷘uX2օPd3dy?^gIE#KH6Vl٠LBYSg]YB[+lsfyaE7࢐UmŬM>7%N3 /-*P P Rk;ޥ}DtfȾu8y3zf6=Y tEb1Ϧ縷|f @HhdTOfe&‘‡/Rt:ɾ l֚V\C4 !K5[CK+hۓr1f 4{L{H3I&A䱄Ӥ qu0^6;ƷYMVR) &kR^ ݜkE~(Ocrw_p[sVŵd| eώ. ö42 mQ@N;P?߀ŒxeJ48ba_LO>0W('&F d;AajaXc*Z16z_fN,1_ hIyZ@%dru.QscA(o(S>Bp* m2&RO,*r{Z^&uv~Ӗ[H؂(\plʡS5$U<R*:8 #h9MIC.(G;Lňv hAٌE iw)%>1˨z3ݷQo@Ⱦ.1UDznZ` VKZJ1>ui\W^ƀ7Gǎt`xvD-2q\m=lଊKCk0ϦjH{%.3^쯭ebvj챒a+ڵuNj1{)?xJ0GA&.oM Q̾mst&3r:oO4㥣Yl'p U\l8z(dn>jP)~ ɸ20;C\ԋk׮%qɾ\x9-ї(ߞib`)%i'-UFqĉV37ŷc`\H/W gȈ293 VM}$1l$vY}]goŝ6DeJA׾(jbY95 f[O0/?h yT7306mo,[-&9WU}ۄϗ"we(,Eu}zѳ)E&0 s+(o)͞cAm<rF8f}U(%WM_xϨ i1x|M̓- ǝ TH馪 )?&fqe Ϝ|k"S x '&\#sieW1aMwS;wt}\ªV1gŃ7x2Ti[l<5$aEuf1hi1Gl2P:tS(zU+0#\\O'*3-'IF&:FU8lsNzoZXPhX3FnO5M1R!S<}9L\m/ZT &J|3nT?"9FpwԽÉ7w h1.i|nI9ff(XRw+pM\ٷc^3gl^]nYGb컁VfpJRY rz%N}.λYШ99.=Fᐌ6*BKF,҅CVgHۮy8]ݳlH@S>ȓD1odA66V0"ڽP %nyT/w)3 PRP,d®+o,=Li,Q3z,YN\ Ё G-|bUv*KK_ˇW>xqgRȇЩ`k e|'n( G"iԩLgv@6 6Mp@erdWlg&˚+75Py -!тJ&T#]M3(Q,;-;-a$jN M !bO i wVDj@$6XLFMX VRDPjfկM(IO&6sy,|ع8?[ldN@#B|MXW"dyc,YmMD =cWSB%Ja~J3 y,>+764A3Y@;%`ZN) 0\ 8NTShk}0A;*RqKa  +J^Ҝߖ]T#AcJ%N,db(Xű-[uk8TogLʭ,Ӌ5Wa!<96Ye/5 _To'*>ƈVqŽZk \T୴Jkty839I4O`Xg﹦ 3L'݇׬V-7W) JGs8)k*:<d_Pmw~ "/'U9?Xn;!.HQÆOx! :qF?3aAb4cTV]>i$Edˠ*"WvXE!>zH{B*Š]X`;#,uHzjW/ZH[h$3,{߃FV[kNro̥a*{@& ˻>yT!*Eu k{%'eMG=Te%uQZ!ifC>EUhY _F,xcR~zeDn6Cdr43i5s5,bc _|͞{1m hѱy)R0❆aS#?Fj/DC[UIxjd&z˧j4X#ګ"Y7p bc| vԳs:~~;@[-= >u񂭐2R4 F.!s7WYVCh+'k$t|qћՔ)dUQHBClؔ)Ҹ:7KVwȞX Qz+ b$;pq%:|X9{!<T+U?ٻ8b:}#EecD?fwnH*Y}y,!ŋ>­(^bdpYy Hx0S/rpjS=+py)7P:c m1q6}d˩r21/3Y o0wy=hBɻWJ't_@ZEq.1z$#B`/XF#Ĺ"(Q24uN_9?a XJXSfv lp ~M>ukdUyPc&W˫ظ+dnа7&;~D*^c>^BEvmd&CpTl2Q7M%3pN K.M )x\BMD C2B{dը=qT g&Kg08ej1^K'.p8zp(s۫6pŻY̧z }*T1#YN$dzr5pZ)m@F[P3ᓬN'e_M>K9a#GAY-t֚νE ~~r=qlf;[p6n|"x 1",Ŧ]LI"3ES0 %E3s]Z-N70ea~݊4k"Z2dT(@/ӱHԅ %f6T0;.Ye=w]!1q+"Wduou]V`Wo<%~Y:FƟZ*CASH/,y@vuw1`Dd04EV ZY'COvG>rᣐA ov,Aϯޫ8Wx+Gɏ[ܻ^[ս4-ÀB-X:5lokf)&'^a@|a,5có%CHRI w `+;DW1HaPkòKq?T؛vCq|-~;AW<"GuYc]-=|!Q&\Q `~ހ<*6!d4TKGL")E%xM$xrfG,FD"j!Q Zah` ,?7~Nn{TDJuA(DS3W셹1I'@3.E' J ⊣$ ]ΘP5|?$${dtNUKacۘq0+~XχouyDbeu0xkxcJX1 1汘qyDZ@}n23*Ey?BE8[ܚ9K998&x㺪ӜK**T> w-옣]%e|4t 4|d$"H%LN}@dƮ<8׺0 $܉_6ϓHήe R-rn 9%$՛7N<. %{A9S8 1{ʦptJgJ3Y ȯZaH(@((w-V ^Z;J iP,C߄ ]%CڼV+M/1mrn8fv1I,QƠᏎ=T#X½yaϣKi" 1F ]<]f0}&OIi PWHz#f~ goJ 8DÍ#Ǝ(Yc-':wb}`wXP{RLKMN3O{5+ -v.ra]HS&ˡUh6EU%,k*gE*(qݘ%SPp_$og;-k 1,W> f - 'ӟȦ4e^&Kϗe6 Ѿ=yz66vkv=uZ32j_; B;bzDBH(R{@X|1=3HN(XrsXU3Q]v.6`8(gsԙ`I: LT s1_k RO&簂-͂Ӱ7,Fi(Vt\H׫Q+qD[(jP/X9z .WQSS<]//,nh{D#ťOG _iŞ ~⻁)(v;8a>gYii̻QWPT)D+ty_@e.S/7S$Y˨q2㢜X/?'5pKuywWX' G%#Q1n+bGj> S3fgGl6)A-Ƌ,_ך "c) bRlyỞS'g!rw2NృjSPw⹴".Wޱw~`?e*ͭNXhO9B5r-1*%Cq!\Et)fݔMUJjm]-;,gecR< /zbT*wqjS|CE$L8~_+2SPIE7q(Ez.)`; oYwk7ƫu+`?}=E:$>60,UdΆwл9;qEvџ5r( s,HX[SIP*>@>iYѤ$0Eq.=i 'J] & SPj:|Y؋zBEM#@yO|]Dί՘+C5uW*9WQ=HyTYnCVx4bGIO/#;@1ہ N 55n# 1ï5AC|=^y>^`/)z N~YZޝ`Ţ? 7 !&@Gv-WsW JJoo,8ӗ:lv7Nt]l٫(A6=ۡf_^Ԏh)kuGMOυ8brJtnAy;liBYڗ0#)"cfY#K1(6/6U&6ؾVoR<kCg[oH_FhU(4+<ۙuiW0V 1 `I{Z2I;t*Q]nHY:$O-o%B6}ע=#u\;ژC2y4x=tVA- .ey%IQҬ(V,^_ѬD}]O\Y/l-7ha$ }F',ZlZ2 A n->iq\?12:t3sPxWJ{5Ly 9R\r wӮ3I!_N n ?GfZp[Ls[=QH<~O"9Ik/ R5>9߅\~k#lK`Ɛ3fM#&^>{j[HNt!lul^ (QI0}jfrB $ԞY.䖌rǐ pF'J'7ڑnd@ ;[N5sY\$6 h@TS7&ӆ$t{n!&utDk6fP[J*yl/fhu8v{n/?Un#o$l̤`x#46\Ty#MH pfXt>lp-{vaZ5n*70/kaՍBMt%_&UM1LM|12jnN\HnU0E|t XQmn][>~ z!t-GBW,dk IM6< &VL޴/ <1yp"{\{$P:?Tџ*?؛# Kſ#<#vdt識yb>M'vQ"!HXTQÔ^ 3S3OqD~Nf  `ˉ_Z ata'T5;ʧdp+h ejcx[F=jZS]vŁ헟Z/V WxShS&,lHWQ[6]N䣞UU"KB3u"H*NjE8|H+1$KgV^sfa#џR4cdo J(U=>y,^!,}h^$BumÀdzxqOW"ZXy,rҚM<5σG.=ٖ 1uJϣWzJv(kno6$Rzb_P" G.36g+F#L4Az nG?‘ >#m`d'&7 M@lWU_۵ϐ69T>{6n jkid||爂L^sE.%ib+iRMo0pzrfRc0鶚MeÁ  sS"-r`t^-8X1N>)tH  Hj}qqoBo$P[P9AQjw<<A>kuP41+j#3LDjULXwEd:Sx]#U݄=|AWE7>3J,6&^A O!#w",3#l>9"!Ͱ<6 [gLjIQi+'sVԋ#1rd< ~L׉C?>Ԉtr[ uʍ#_txA>)[|G(W;[0j"}>LM ELYtj͵gKlZ6|v1ibB*M+.o()lH^Jlӥ${iMyY~nxsiwܿ"y\GF>%_"MֳiX2Cv^ّXyRE}&hP,Gbm_U-$TAH=l.g?5X'/` 4p ginoJNH)Yp5 s /#qi`~@b`R:v]^4e\dfbur}OAFѷC7GԐ_ ^+]>pnӦR3nF.oW ټ{:ipP ٷw)ʽeQwME Dv*1x'[SĜee*_g֜5Zde$WC$12hY2վV e1k"HXE HB]k;`"!-! wFn';Qv)#Gӥ[(ʠGYok̐2BdmV82T*~Iv A r17p1K$+gGL=̢,BKYz#W@c#&C7tggI#Ւf7S1=I49kQ uhWY9ަ#sOXՄ5F$iR,MQ"6Tq&v>юh@?mI!m }.TU$=赁<DyI[4A1sIcᱸuyr*7 jJU'HچVEzзmYrja[W݄ DY MN߻ hm6G#{Ɵ~N󛍫8P翛;1=I͎mz e .hD&(HqМClԔI֠Yk|N&L(ù -=O>-pD\쇶c7 O5Z}Xs?œέ1!w]V𨪧knT?ʹ *Sv YZ