libtiff-devel-4.0.9-150000.45.19.1 >
A ctYp9|Kxͼs]r;bӧGɂ_[᥋~?Ηu"W=nWѶcL]B)(;tQv: mT..& g,uƴ֙"; s ^y6D2$Dc??|P=i4$M &-@A7Jv= Ol+"-0d9~TN j|8-ſ @`̴>??lTF#Io)'| Ҏde46d484b207ad06250a9dedf559aeb8cd8f2756 af4ec4353eca1678410fdbb8463a8f0603f8b5cd6289a062ae2d2f44c76e9768 ctYp9|gi$m5ur%AH6zaF;3'_UrVwp4ڗ!"ZK@
gTroSĸ8c5=ULUd:`cNq=\bΆYSd1S,iz+.1'x_۰d mx(U]fk0ɇHCkѿBmMLmS/Kq^8b7A|5@] UΪŵCH k > p > $ ? d % g 1 R W m 4 4 4
d 4 4 4 4
@ 4 4 4 < 4 H h ( ) 8 0 . 9 . : . F G 4 H 4 I | 4 X Y \ 4 ] 4 ^ # b h c d e f l u 4 v x w 4 x 4 y z C libtiff-devel 4.0.9 150000.45.19.1 Development Tools for Programs which will use the libtiff Library This package contains the header files and static libraries for
developing programs which will manipulate TIFF format image files using
the libtiff library. ct#ibs-arm-6 KSUSE Linux Enterprise 15 SUSE LLC HPND https://www.suse.com/ Development/Libraries/C and C++ http://www.simplesystems.org/libtiff/ linux aarch64
e Z ^ s \ * % d | c " R 5
N g p t F g L ctctctctctctctct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct ct 817fc7dacfc7499ca60575fbd6d9d52f661fa11e21bf9a16165673c0b1bf4e1a bd5ce2bb7386939f98d6eee3745f4ff6ebda0806a48ac4e058ac0e06d4ea0a27 6d98b037201bbfb8a56a1947d08be85dfb1e4850eac2fc72ef850be0000dab7b 1ac75ac6bd97627d92dbdd9d9b812b92598cfb1af75cac20257cd4ae08cb982e 21195898e58f38860e4f0ca228047f29b2ea9056370c5268b1ec74f80c8353ec e2131cd235badf68b48234170dda5be6791e1e7ab86be6969b49c7c1ec618eb1 a23c93ee21d3c747b60d23f9f5b5a96b6ea3520b6b0f6eee118cc6a1c938157a a25e075deb1134c467adc8df79d4030eee8bb29c23d6bbeb623717fc199eae5e 11adb6f2e0a5cd4857a5db6ddc8fe936fb97c80c159ec8504b4835982979502b 79a216827d19e88166097daf8fc18839223874b2c9faa84fdd3dd1929194cc80 34f64c5726e472f89ff6c32b51a0057602355c3343a63258c375a3205e3fc12f cfd187be23200b759a9c5834b37fb7e43deaefe6e0bd8b94e64b7e74e9f4132c 7f1fcd7428a241e1ec2e32ee41e15fd824830390ee2d4d9da22e444dd2f25dbf 85976b1e12a153bb64ab3542b98add76117bb1142fe691b30b4e74ab682128d4 f3bec7f82e7d3b176a708f6b24ae73056a44e963c58b55e681ce8c3552172638 a8fcf0ba5bc3224c041208560ae004828f23eeed54b6b296fe79d9683b698e42 a6e31da094375befee7fafa37ccd03c7c218a7c1b27baed5411d928b82423338 bbcbe306115b93feed25f4a0d40add52608d8e69962b3d54bf8fe449dbf51bda 56b115bdf49cce358b1e3a22a7beca3b8921add702cf860590bc76928c0f8f1d 0db7806d474073d3186bed9069ccfff5274869cecb19c1cc51a56100d2b47490 0ad44f9d3e4f4a15045815e2a7f0cb011414b3da74cde73caced7a4fbed59b14 849b0c65bd87bc4873a13c2cd83af0a1d96ab91884c20371af19aa1ed8558d4b d38bcc60bc35152be1d96120fd203003584d9511a4774e03690e2a844f335000 09e212fc98129b5b2fb3159038ab8376cb86f58c2aee781e8b91d9d1c6597277 532d01bb62fec714831f6b10ee99fb0192cbb1316c3c3871b0be06bd875db9b7 3ea223f8600efb335d24663777e4d0d0a43215b888e24092a0849a52ebc4b1f8 c20f771c4c04d3105c3457ed714cfdee86d6fcf7f0eb76f0a147fbf64d257583 bd67c743ece7cfb09b19299dc453d1fa524e27628f639be1538f39d95f29e8a6 53ff2bbd1cd6d31d4c1e212cfd90700a87ab1cd8c2e571a41c82c94e65f2c36b 5f509b81ddb1fabbadac252dbadc8525cbb3e7879ac321882506c95eadeddb75 eca74519cd5ffeebc118111efb550c7e3476d9bf87ccceb3c41c3636eedaeb45 11b56d4e162a3f8aa34df44d9c643ad6156e6113abc7c7dbe054ec5e8d072e91 7507cb5a79579283609eac8c9eac45982d49cc93eae24433cff3e8c51fd81e6d 5fa350d2a1983aebe45e3935518a4bc597d1e9ebc5887098d00bf18db368832d 787a8de7c0ba47c3b0f8145527e7c5a735c1ad298f2f274661274c7192081286 30084912b49ef975b48561f53185255ee52c6050a717c63b57822c293b3760f4 c8b74a0bcc7484367aea0668c3c64798fc296554fc5ae0f39812a059a2ffd9c7 4323bbc04a7eaf272b4a0c101d46ff9b7c74600227054da4b65c1ad79474249e 053d869d19f7850142b4c3990f1e756147c0ad977b2c0f6a88d66fa9ad420769 7acfe52d65483e64dd4f82d680a1eb9b4b5f2a27befca8a4ba479d8db5e9a78c c0e38b8ab00a804cdbbf1c85fe717eb4eb89babf524024ba4ac90b359d61bc45 b7d5038acf3de26bb44ffd9f8922d857d5489d9fcf8a4ebb07c597b9787052c7 6d8e3c20e8d96e009c91f8c39d5088c6bf72f207fa5c6caaa32f2bdf6da4024a 2e00a81a88b60b0a6e15acda5ed2d36a9b4bbbc7229b838f3d17ed820a994b6b dbed095673f0396ff31929194259727f11e28b073dd2556c920f2b8e5f545fcc 53de645017cf0ef1e8d9a5a97f0c3453f8b9260a7674e6cf84090a922a320084 fc8e925e08dcab704731e65bc0211d4258e6b876e2b48bbae4e4f20e3b5f95c3 8811faf0e2c71ffbdb5f97582dff5615a19d3ba2406472adf481c064d39f8c33 8f294493039ed49a5a13b81e917dfb8ef0ae8fbab0c1f7399c831914a7fe09ba c9365f37627e56e177c682a09993e83888bdc87a2d98d47c55f68cee82f8e38b libtiff.so.5.3.0 libtiffxx.so.5.3.0 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root tiff-4.0.9-150000.45.19.1.src.rpm libtiff-devel libtiff-devel(aarch-64) pkgconfig(libtiff-4) @
/usr/bin/pkg-config glibc-devel libstdc++-devel libtiff5 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 4.0.9 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 cp@cMCbc@b@by@bu
bu
aZ@]µ]µ\b@\X)@\Q[[k@[k@[$@[t[{@[)[)Z@ZZ
ZZ;@Z @YI@XۡX @Xx@XWXWX=mWint32 conversion (when refBlackWhite[0] ==
2147483648.f) Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
+ libtiff/tif_dirinfo.c, tif_dirread.c: add
_TIFFCheckFieldIsValidForCodec(), and use it in
TIFFReadDirectory() so as to ignore fields whose tag is a
codec-specified tag but this codec is not enabled. This avoids
TIFFGetField() to behave differently depending on whether the
codec is enabled or not, and thus can avoid stack based buffer
overflows in a number of TIFF utilities such as tiffsplit,
tiffcmp, thumbnail, etc. Patch derived from
0063-Handle-properly-CODEC-specific-tags.patch
(http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
Hertzog.
Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
http://bugzilla.maptools.org/show_bug.cgi?id=2693
http://bugzilla.maptools.org/show_bug.cgi?id=2625
(CVE-2016-10095, bsc#1017690)
http://bugzilla.maptools.org/show_bug.cgi?id=2564
(CVE-2015-7554, bsc#960341)
http://bugzilla.maptools.org/show_bug.cgi?id=2561
(CVE-2016-5318, bsc#983436)
http://bugzilla.maptools.org/show_bug.cgi?id=2499
(CVE-2014-8128, bsc#969783)
http://bugzilla.maptools.org/show_bug.cgi?id=2441
http://bugzilla.maptools.org/show_bug.cgi?id=2433
+ libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
defined, do not do the #ifdef TIFFSwabXXX checks. Make it
easier for GDAL to rename the symbols of its internal libtiff
copy.
+ libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
ChopUpSingleUncompressedStrip() regarding update of newly
single-strip uncompressed files whose bytecount is 0. Before
the change of 2016-12-03, the condition bytecount==0 used to
trigger an early exit/disabling of strip chop. Re-introduce
that in update mode. Otherwise this cause later incorrect
setting for the value of StripByCounts/StripOffsets.
(https://trac.osgeo.org/gdal/ticket/6924)
+ libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
number of items read in StripOffsets/StripByteCounts tags to
the number of strips to avoid excessive memory allocation.
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
+ libtiff/tif_getimage.c: avoid many (harmless) unsigned int
overflows.
+ libtiff/tif_fax3.c: avoid unsigned int overflow in
Fax3Encode2DRow(). Could potentially be a bug with huge rows.
+ libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
tiled images.
+ libtiff/tif_dirread.c: avoid unsigned int overflow in
EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
too short.
+ libtiff/tif_predict.c: decorate legitimate functions where
unsigned int overflow occur with
TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
+ libtiff/tif_dirread.c: avoid unsigned int overflow in
EstimateStripByteCounts()
+ libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
macro to disable CLang warnings raised by
- fsanitize=undefined,unsigned-integer-overflow
+ libtiff/tif_jpeg.c: add anti-denial of service measure to
avoid excessive CPU consumption on progressive JPEGs with a
huge number of scans. See
http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
Note: only affects libtiff since 2014-12-29 where support of
non-baseline JPEG was added.
+ libtiff/tif_jpeg.c: error out at decoding time if anticipated
libjpeg memory allocation is above 100 MB. libjpeg in case of
multiple scans, which is allowed even in baseline JPEG, if
components are spread over several scans and not
interleavedin a single one, needs to allocate memory (or
backing store) for the whole strip/tile. See
http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
This limitation may be overriden by setting the
LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
recompiling libtiff with a custom value of
TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
+ libtiff/tif_jbig.c: fix memory leak in error code path of
JBIGDecode()
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
(CVE-2017-9936, bsc#1046073)
+ libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
a double value can fit in a float before casting.
+ libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
libtiff/tif_read.c: make TIFFReadScanline() works in
CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
scans. Also make configurable through a
LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
maximum number of scans allowed. Defaults to 100.
+ libtiff/tif_read.c: TIFFFillTile(): add limitation to the
number of bytes read in case td_stripbytecount[strip] is
bigger than reasonable, so as to avoid excessive memory
allocation (similarly to what was done for TIFFFileStrip() on
2017-05-10)
+ libtiff/tif_getimage.c: use
_TIFFReadEncodedStripAndAllocBuffer(). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
+ libtiff/tif_read.c, tiffiop.h: add a
_TIFFReadEncodedStripAndAllocBuffer() function, variant of
TIFFReadEncodedStrip() that allocates the decoded buffer only
after a first successful TIFFFillStrip(). This avoids
excessive memory allocation on corrupted files.
+ libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
functions associated with LONG8/SLONG8 data type, replace
assertion that the file is BigTIFF, by a non-fatal error.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
+ libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
tif_rawdataloaded when it is set. Similarly to
TIFFStartStrip(). This issue was revealed by the change of
2017-06-30 in TIFFFileTile(), limiting the number of bytes
read. But it could probably have been hit too in
CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
+ libtiff/tif_error.c, tif_warning.c: correctly use va_list
when both an old-style and new-style warning/error handlers
are installed. Patch by Paavo Helde (sent on the mailing list)
+ libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
+ libtiff/tif_read.c, tiffiop.h: add a
_TIFFReadEncodedTileAndAllocBuffer() and
_TIFFReadTileAndAllocBuffer() variants of
TIFFReadEncodedTile() and TIFFReadTile() that allocates the
decoded buffer only after a first successful TIFFFillTile().
This avoids excessive memory allocation on corrupted files.
+ libtiff/tif_pixarlog.c: avoid excessive memory allocation on
decoding when RowsPerStrip tag is not defined (and thus
td_rowsperstrip == UINT_MAX) Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
+ libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
old-style LZW compressed files.
+ libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
LZW strips. Crashing issue only on memory mapped files, where
the strip offset is the last byte of the file, and the file
size is a multiple of one page size on the CPU architecture
(typically 4096)
+ libtiff/tif_dir.c: avoid potential null pointer dereference
in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
instance.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
+ tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
mode on PlanarConfig=Contig input images. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2715
+ libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
Complementary fix for
http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
isMapped() case, so as to avoid excessive memory allocation
when we need a temporary buffer but the file is truncated.
+ libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
arrays that hold StripOffsets/StripByteCounts, when they are
smaller than the expected number of striles, up to 1 million
striles, and error out beyond. Can be tweaked by setting the
environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
This partially goes against a change added on 2002-12-17 to
accept those arrays of wrong sizes, but is needed to avoid
denial of services. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
+ libtiff/tif_read.c: add protection against excessive memory
allocation attempts in TIFFReadDirEntryArray() on short files.
Effective for mmap'ed case. And non-mmap'ed case, but
restricted to 64bit builds. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2675
(CVE-2017-12944, bsc#1054594)
+ libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
allocation when RowsPerStrip tag is missing. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
+ libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
properly break from loops on error when stoponerr is set,
instead of going on iterating on row based loop.
+ libtiff/tif_getimage.c: fix fromskew computation when
to-be-skipped pixel number is not a multiple of the horizontal
subsampling, and also in some other cases. Impact
putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
putcontig8bitYCbCr12tile Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
+ libtiff/tif_luv.c: further reduce memory requirements for
temporary buffer when RowsPerStrip >= image_length in
LogLuvInitState() and LogL16InitState(). Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
+ libtiff/tif_dirwrite.c: replace assertion related to not
finding the SubIFD tag by runtime check (in
TIFFWriteDirectorySec()) Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2727
+ libtiff/tif_dirwrite.c: replace assertion to tag value not
fitting on uint32 when selecting the value of SubIFD tag by
runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2728
+ libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
compressed file if the codestream height is larger than the
truncated height of the strip. Emit a warning in this
situation since this is non compliant.
+ libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
_TIFFSeekoK() function that checks if the offset is not
bigger than INT64_MAX, so as to avoid a -1 error return code
of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
+ libtiff/tif_dirread.c: add NULL check to avoid likely false
positive null-pointer dereference warning by CLang Static
Analyzer.
+ libtiff/libtiff.def: add TIFFReadRGBAStripExt and
TIFFReadRGBATileExt Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2735
+ libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
1.5.2 that honours max_memory_to_use > 0. Cf
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
+ libtiff/tif_getimage.c: avoid floating point division by zero
in initCIELabConversion() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
* Changes in the tools:
+ tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
mode on PlanarConfig=Contig input images. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2715
+ tools/tiffset.c: fix setting a single value for the
ExtraSamples tag (and other tags with variable number of
values). So 'tiffset -s ExtraSamples 1 X'. This only worked
when setting 2 or more values, but not just one.
+ tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
the client data. This client data is not used at all at the
moment, but it makes the most sense. Issue that the value of
client_data.fd was passed where a pointer is expected.
+ tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
arithmetic overflow in bounds checking code and eliminate
comparison between signed and unsigned type.
+ tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
program. This is in response to the report associated with
CVE-2017-16232, bsc#1069213 but does not solve the extremely
high memory usage with the associated POC file. - Upgrade to upstream release 4.0.8
* libtiff/tif_getimage.c, libtiff/tif_open.c
+ add parenthesis to fix cppcheck clarifyCalculation warnings
* libtiff/tif_predict.c, libtiff/tif_print.c
+ fix printf unsigned vs signed formatting (cppcheck
invalidPrintfArgType_uint warnings)
* libtiff/tif_read.c, libtiff/tiffiop.h
+ fix uint32 overflow in TIFFReadEncodedStrip() that caused an
integer division by zero. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
* libtiff/tif_pixarlog.c, libtiff/tif_luv.c
+ fix heap-based buffer overflow on generation of PixarLog / LUV
compressed files, with ColorMap, TransferFunction attached and
nasty plays with bitspersample. The fix for LUV has not been
tested, but suffers from the same kind of issue of PixarLog.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
* libtiff/tif_strip.c
+ revert the change in TIFFNumberOfStrips() done for
http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
CVE-2016-9273 since the above change is a better fix that
makes it unnecessary.
* libtiff/tif_dirread.c
+ modify ChopUpSingleUncompressedStrip() to instanciate compute
ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip),
instead of a logic based on the total size of data. Which is
faulty is the total size of data is not sufficient to fill the
whole image, and thus results in reading outside of the
StripByCounts/StripOffsets arrays when using
TIFFReadScanline(). Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
* libtiff/tif_ojpeg.c
+ make OJPEGDecode() early exit in case of failure in
OJPEGPreDecode(). This will avoid a divide by zero, and
potential other issues. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
* libtiff/tif_write.c
+ fix misleading indentation as warned by GCC.
* libtiff/tif_fax3.h
+ revert change done on 2016-01-09 that made Param member of
TIFFFaxTabEnt structure a uint16 to reduce size of the
binary. It happens that the Hylafax software uses the tables
that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
TIFFFaxBlackTable), although they are not in a public libtiff
header. Raised by Lee Howard.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
* libtiff/tiffio.h, libtiff/tif_getimage.c
+ add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
of the functions without ext, with an extra argument to control
the stop_on_error behaviour.
* libtiff/tif_getimage.c
+ fix potential memory leaks in error code path of
TIFFRGBAImageBegin().
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
* libtiff/tif_jpeg.c
+ increase libjpeg max memory usable to 10 MB instead of libjpeg
1MB default. This helps when creating files with "big" tile,
without using libjpeg temporary files.
Related to https://trac.osgeo.org/gdal/ticket/6757
* libtiff/tif_jpeg.c
+ avoid integer division by zero in JPEGSetupEncode() when
horizontal or vertical sampling is set to 0.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
bsc#1033127, CVE-2017-7595
* libtiff/tif_dirwrite.c
+ in TIFFWriteDirectoryTagCheckedRational, replace assertion by
runtime check to error out if passed value is strictly
negative.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
bsc#1038438, CVE-2016-10371
* libtiff/tif_dirread.c
+ avoid division by floating point 0 in
TIFFReadDirEntryCheckedRational() and
TIFFReadDirEntryCheckedSrational(), and return 0 in that case
(instead of infinity as before presumably) Apparently some
sanitizers do not like those divisions by zero.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
bsc#1033118, CVE-2017-7598
* libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
+ implement various clampings of double to other data types to
avoid undefined behaviour if the output range isn't big enough
to hold the input value.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
http://bugzilla.maptools.org/show_bug.cgi?id=2642
http://bugzilla.maptools.org/show_bug.cgi?id=2646
http://bugzilla.maptools.org/show_bug.cgi?id=2647,
bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
* libtiff/tif_jpeg.c
+ validate BitsPerSample in JPEGSetupEncode() to avoid undefined
behaviour caused by invalid shift exponent.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
bsc#1033111, CVE-2017-7601
* libtiff/tif_read.c
+ avoid potential undefined behaviour on signed integer addition
in TIFFReadRawStrip1() in isMapped() case.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
bsc#1033109, CVE-2017-7602
* libtiff/tif_getimage.c
+ add explicit uint32 cast in putagreytile to avoid
UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
bsc#1033131, CVE-2017-7592
* libtiff/tif_read.c
+ TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
tif_rawdata.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
bsc#1033129, CVE-2017-7593
* libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
+ add _TIFFcalloc()
* libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
+ return 0 in Encode functions instead of -1 when
TIFFFlushData1() fails.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
* libtiff/tif_ojpeg.c
+ fix leak in OJPEGReadHeaderInfoSecTablesQTable,
OJPEGReadHeaderInfoSecTablesDcTable and
OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
bsc#1033128, CVE-2017-7594
* libtiff/tif_jpeg.c
+ only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
tag is not explicitly present. This helps a bit to reduce the
I/O amount when the tag is present (especially on cloud hosted
files).
* libtiff/tif_lzw.c
+ in LZWPostEncode(), increase, if necessary, the code bit-width
after flushing the remaining code and before emitting the EOI
code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
* libtiff/tif_pixarlog.c
+ fix memory leak in error code path of PixarLogSetupDecode().
Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
* libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
+ fix GCC 7 -Wimplicit-fallthrough warnings.
* libtiff/tif_dirread.c
+ fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
when there is both a StripOffsets and TileOffsets tag, or a
StripByteCounts and TileByteCounts
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
bsc#1042805, CVE-2017-9403)
* libtiff/tif_ojpeg.c
+ fix potential memory leak in
OJPEGReadHeaderInfoSecTablesQTable,
OJPEGReadHeaderInfoSecTablesDcTable and
OJPEGReadHeaderInfoSecTablesAcTable
Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
* libtiff/tif_fax3.c
+ avoid crash in Fax3Close() on empty file. Patch by Alan
Coopersmith + complement by myself.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
* libtiff/tif_read.c
+ TIFFFillStrip(): add limitation to the number of bytes read
in case td_stripbytecount[strip] is bigger than reasonable,
so as to avoid excessive memory allocation.
* libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
+ fix memory leak when the underlying codec (ZIP, PixarLog)
succeeds its setupdecode() method, but PredictorSetup fails.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
allocation in case of shorten files. Only effective on 64 bit
builds and non-mapped cases.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
Should especially occur on 32 bit platforms.
* libtiff/tif_read.c
+ TIFFFillStripPartial()
+ avoid excessive memory allocation in case of shorten files.
Only effective on 64 bit builds.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
tif_rawdataloaded when calling TIFFStartStrip() or
TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
when bytecount > tif_rawdatasize. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
Credit to OSS-Fuzz
* libtiff/tif_color.c
+ avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
Credit to OSS-Fuzz
* libtiff/tif_pixarlog.c, tif_luv.c
+ avoid potential int32 overflows in multiply_ms() and add_ms().
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
Credit to OSS-Fuzz
* libtiff/tif_packbits.c
+ fix out-of-buffer read in PackBitsDecode() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
Credit to OSS-Fuzz
* libtiff/tif_luv.c
+ LogL16InitState(): avoid excessive memory allocation when
RowsPerStrip tag is missing.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_lzw.c
+ update dec_bitsleft at beginning of LZWDecode(), and update
tif_rawcc at end of LZWDecode(). This is needed to properly
work with the latest chnges in tif_read.c in
CHUNKY_STRIP_READ_SUPPORT mode.
* libtiff/tif_pixarlog.c
+ PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
with avail_in at beginning and end of function, similarly to
what is done in LZWDecode(). Likely needed so that it works
properly with latest chnges in tif_read.c in
CHUNKY_STRIP_READ_SUPPORT mode. But untested...
* libtiff/tif_getimage.c
+ initYCbCrConversion(): add basic validation of luma and
refBlackWhite coefficients (just check they are not NaN for
now), to avoid potential float to int overflows. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
Credit to OSS Fuzz
* libtiff/tif_read.c
+ _TIFFVSetField(): fix outside range cast of double to float.
Credit to Google Autofuzz project
* libtiff/tif_getimage.c
+ initYCbCrConversion(): check luma[1] is not zero to avoid
division by zero. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
Credit to OSS Fuzz
* libtiff/tif_read.c
+ _TIFFVSetField(): fix outside range cast of double to float.
Credit to Google Autofuzz project
* libtiff/tif_getimage.c
+ initYCbCrConversion(): check luma[1] is not zero to avoid
division by zero. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
Credit to OSS Fuzz
* libtiff/tif_getimage.c
+ initYCbCrConversion(): stricter validation for refBlackWhite
coefficients values. To avoid invalid float->int32 conversion.
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
Credit to OSS Fuzz
* tools/fax2tiff.c (main)
+ Applied patch by Joerg Ahrens to fix passing client data for
Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
file I/O. Patch was provided via email on November 20, 2016.
* tools/tiffcp.c
+ avoid uint32 underflow in cpDecodedStrips that can cause
various issues, such as buffer overflows in the library.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
* tools/tiffcrop.c
+ fix readContigStripsIntoBuffer() in -i (ignore) mode so that
the output buffer is correctly incremented to avoid write
outside bounds. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
* tools/tiffcrop.c
+ add 3 extra bytes at end of strip buffer in
readSeparateStripsIntoBuffer() to avoid read outside of heap
allocated buffer. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
* tools/tiffcrop.c
+ fix integer division by zero when BitsPerSample is missing.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
* tools/tiffinfo.c
+ fix null pointer dereference in -r mode when the image has no
StripByteCount tag. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
* tools/tiffcp.c
+ avoid potential division by zero is BitsPerSamples tag is
missing. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
* tools/tif_dir.c
+ when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
the return number of inks to SamplesPerPixel, so that code
that parses ink names doesn't go past the end of the buffer.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
* tools/tiffcp.c
+ avoid potential division by zero is BitsPerSamples tag is
missing. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
* tools/tiffcp.c
+ fix uint32 underflow/overflow that can cause heap-based buffer
overflow. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
* tools/tiffcp.c
+ replace assert( (bps % 8) == 0 ) by a non assert check.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
* tools/tiff2ps.c
+ fix 2 heap-based buffer overflows (in PSDataBW and
PSDataColorContig). Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
http://bugzilla.maptools.org/show_bug.cgi?id=2634.
* tools/tiff2pdf.c
+ prevent heap-based buffer overflow in -j mode on a paletted
image. Note: this fix errors out before the overflow happens.
There could probably be a better fix.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
* tools/tiff2pdf.c
+ fix wrong usage of memcpy() that can trigger unspecified behaviour.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
* tools/tiff2pdf.c
+ avoid potential invalid memory read in t2p_writeproc.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
* tools/tiff2pdf.c
+ avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
* tools/tiffcrop.c
+ remove extraneous TIFFClose() in error code path, that caused
double free.
Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
* tools/tiffcp.c
+ error out cleanly in cpContig2SeparateByRow and
cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
based overflow.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
http://bugzilla.maptools.org/show_bug.cgi?id=2657
* tools/raw2tiff.c
+ avoid integer division by zero.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
* tools/tiff2ps.c
+ call TIFFClose() in error code paths.
* tools/fax2tiff.c
+ emit appropriate message if the input file is empty. Patch by
Alan Coopersmith.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
* tools/tiff2bw.c
+ close TIFF handle in error code path.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
* Other issues fixed:
+ bsc#1042804, CVE-2017-9404
* CVE-2016-10092, CVE-2016-10093, CVE-2016-10094 [bsc#1017693]
- Removed patches:
* tiff-4.0.7-CVE-2015-7554.patch
* tiff-4.0.7-CVE-2017-5225.patch
* tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
* tiff-CVE-2016-10266.patch
* tiff-CVE-2016-10267.patch
* tiff-CVE-2016-10268.patch
* tiff-CVE-2016-10269.patch
* tiff-CVE-2016-10270.patch
* tiff-CVE-2016-10271.patch
* tiff-CVE-2016-10272.patch
+ Fixed upstream - Added patches:
* tiff-CVE-2016-10266.patch
+ Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031263)
* tiff-CVE-2016-10267.patch
+ Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031262)
* tiff-CVE-2016-10268.patch
+ Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031255)
* tiff-CVE-2016-10269.patch
+ Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031254)
* tiff-CVE-2016-10270.patch
+ Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031250)
* tiff-CVE-2016-10271.patch
+ Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read and buffer overflow) or possibly have unspecified
other impact via a crafted TIFF image (bsc#1031249)
* tiff-CVE-2016-10272.patch
+ Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
overflow) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031247) - Added patch:
* tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
- Fix a regression introduced in 4.0.7 (bsc#1022103)
- http://bugzilla.maptools.org/show_bug.cgi?id=2636 - Added patch:
* tiff-4.0.7-CVE-2017-5225.patch
- Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
overflow in tools/tiffcp via a crafted BitsPerSample value - Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions - Update homepage - Upgrade to upstream release 4.0.7
* libtiff/tif_aux.c
+ Fix crash in TIFFVGetFieldDefaulted() when requesting
Predictor tag and that the zip/lzw codec is not configured.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
* libtiff/tif_compress.c
+ Make TIFFNoDecode() return 0 to indicate an error and make
upper level read routines treat it accordingly. (linked to the
test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
* libtiff/tif_dir.c
+ Discard values of SMinSampleValue and SMaxSampleValue when
they have been read and the value of SamplesPerPixel is
changed afterwards (like when reading a OJPEG compressed image
with a missing SamplesPerPixel tag, and whose photometric is
RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
rewriting the directory (for example with tiffset, we will
expect 3 values whereas the array had been allocated with just
one), thus causing a out of bound read access. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2500
(CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
* libtiff/tif_dirread.c
+ In TIFFFetchNormalTag(), do not dereference NULL pointer when
values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
access are 0-byte arrays. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
introduced by previous fix done on 2016-11-11 for
CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
bsc#1011103
+ In TIFFFetchNormalTag(), make sure that values of tags with
TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
terminated, to avoid potential read outside buffer in
_TIFFPrintField(). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2590
(CVE-2016-9297, bsc#1010161)
+ Initialize doubledata at line 3693 to NULL to please MSVC 2013
+ Prevent reading ColorMap or TransferFunction if
BitsPerPixel > 24, so as to avoid huge memory allocation and
file read attempts
+ Reject images with OJPEG compression that have no
TileOffsets/StripOffsets tag, when OJPEG compression is
disabled. Prevent null pointer dereference in
TIFFReadRawStrip1() and other functions that expect
td_stripbytecount to be non NULL. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2585
+ When compiled with DEFER_STRILE_LOAD, fix regression, when
reading a one-strip file without a StripByteCounts tag.
+ Workaround false positive warning of Clang Static Analyzer
about null pointer dereference in TIFFCheckDirOffset().
* libtiff/tif_dirwrite.c
+ Avoid null pointer dereference on td_stripoffset when writing
directory, if FIELD_STRIPOFFSETS was artificially set for a
hack case in OJPEG case. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2500
(CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
bsc#974840)
+ Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
and TIFFWriteDirectorySec() when aligning directory offsets on
an even offset (affects BigTIFF).
* libtiff/tif_dumpmode.c
+ DumpModeEncode() should return 0 in case of failure so that
the above mentionned functions detect the error.
* libtiff/tif_fax3.c
+ remove dead assignment in Fax3PutEOLgdal().
* libtiff/tif_fax3.h
+ make Param member of TIFFFaxTabEnt structure a uint16 to
reduce size of the binary.
* libtiff/tif_getimage.c
+ Fix out-of-bound reads in TIFFRGBAImage interface in case of
unsupported values of SamplesPerPixel/ExtraSamples for
LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
+ Fix some benign warnings which appear in 64-bit compilation
under Microsoft Visual Studio of the form "Arithmetic
overflow: 32-bit value is shifted, then cast to 64-bit value.
Results might not be an expected value."
+ TIFFRGBAImageOK: Reject attempts to read floating point images.
* libtiff/tif_luv.c
+ Fix potential out-of-bound writes in decode functions in non
debug builds by replacing assert()s by regular if checks
(http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
potential out-of-bound reads in case of short input data.
+ Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
there is only one sample per pixel. Avoid potential invalid
memory write on corrupted/unexpected images when using the
TIFFRGBAImageBegin() interface
* libtiff/tif_next.c
+ Fix potential out-of-bound write in NeXTDecode()
(http://bugzilla.maptools.org/show_bug.cgi?id=2508)
* libtiff/tif_pixarlog.c
+ Avoid zlib error messages to pass a NULL string to %s
formatter, which is undefined behaviour in sprintf().
+ Fix out-of-bounds write vulnerabilities in heap allocated
buffers. Reported as MSVR 35094.
+ Fix potential buffer write overrun in PixarLogDecode() on
corrupted/unexpected images (CVE-2016-5875, bsc#987351)
+ Fix write buffer overflow in PixarLogEncode if more input
samples are provided than expected by PixarLogSetupEncode.
Idea based on libtiff-CVE-2016-3990.patch from
libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
bsc#975069)
* libtiff/tif_predict.c
+ PredictorSetup: Enforce bits-per-sample requirements of
floating point predictor (3). Fixes CVE-2016-3622 "Divide By
Zero in the tiff2rgba tool." (bsc#974449)
* libtiff/tif_predict.h, libtiff/tif_predict.c
+ Replace assertions by runtime checks to avoid assertions in
debug mode, or buffer overflows in release mode. Can happen
when dealing with unusual tile size like YCbCr with
subsampling. Reported as MSVR 35105.
* libtiff/tif_read.c
+ Fix out-of-bounds read on memory-mapped files in
TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
is beyond tmsize_t max value
(bsc#990460, CVE-2016-6223)
+ Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
use user provided buffer when no compression (and other
conditions) to save a memcpy().
* libtiff/tif_strip.c
+ Make TIFFNumberOfStrips() return the td->td_nstrips value when
it is non-zero, instead of recomputing it. This is needed in
TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
outsize of array in tiffsplit (or other utilities using
TIFFNumberOfStrips()). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2587
(CVE-2016-9273, bsc#1010163)
* libtiff/tif_write.c
+ Fix issue in error code path of TIFFFlushData1() that didn't
reset the tif_rawcc and tif_rawcp members. I'm not completely
sure if that could happen in practice outside of the odd
behaviour of t2p_seekproc() of tiff2pdf). The report points
that a better fix could be to check the return value of
TIFFFlushData1() in places where it isn't done currently, but
it seems this patch is enough. Reported as MSVR 35095.
+ Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
directly use user provided buffer when no compression to save
a memcpy().
+ TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
return -1 in case of failure of tif_encodestrip() as documented
* tools/fax2tiff.D c
+ Fix segfault when specifying -r without argument. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2572
* tools/Makefile.am
+ The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
sgisv, and ycbcr are completely removed from the distribution.
The libtiff tools rgb2ycbcr and thumbnail are only built in
the build tree for testing. Old files are put in new 'archive'
subdirectory of the source repository, but not in
distribution archives. These changes are made in order to
lessen the maintenance burden.
* tools/rgb2ycbcr.c
+ Validate values of -v and -h parameters to avoid potential
divide by zero. Fixes CVE-2016-3623, bsc#974618
(http://bugzilla.maptools.org/show_bug.cgi?id=2569)
* tools/tiff2bw.c
+ Fix weight computation that could result of color value
overflow (no security implication). Fix
http://bugzilla.maptools.org/show_bug.cgi?id=2550.
* tools/tiff2pdf.c
+ Avoid undefined behaviour related to overlapping of source and
destination buffer in memcpy() call in
t2p_sample_rgbaa_to_rgb() Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2577
+ Fix out-of-bounds write vulnerabilities in heap allocate buffer
in t2p_process_jpeg_strip(). Reported as MSVR 35098.
+ Fix potential integer overflows on 32 bit builds in
t2p_read_tiff_size() Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2576
+ Fix read -largely- outsize of buffer in
t2p_readwrite_pdf_image_tile(), causing crash, when reading a
JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
+ Fix write buffer overflow of 2 bytes on JPEG compressed images.
Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
prevents writing 2 extra uninitialized bytes to the file
stream.
* tools/tiff2rgba.c
+ Fix integer overflow in size of allocated buffer, when -b mode
is enabled, that could result in out-of-bounds write. Based
initially on patch tiff-CVE-2016-3945.patch from
libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
tests that rejected valid files.
(http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
* tools/tiffcp.c
+ Fix out-of-bounds write on tiled images with odd tile width vs
image width. Reported as MSVR 35103. (bsc#1011841,
CVE-2016-9538)
+ Fix read of undefined variable in case of missing required
tags. Found on test case of MSVR 35100.
* tools/tiffcrop.c
+ Avoid access outside of stack allocated array on a tiled
separate TIFF with more than 8 samples per pixel.
(CVE-2016-5321, CVE-2016-5323,
http://bugzilla.maptools.org/show_bug.cgi?id=2558,
http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
bsc#984815)
+ Fix memory leak in (recent) error code path. Fixes Coverity
1394415.
+ Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
writeBufferToContigTiles() and writeBufferToSeparateTiles()
that could cause heap buffer overflows. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2592
+ Fix out-of-bound read of up to 3 bytes in
readContigTilesIntoBuffer(). Reported as MSVR 35092.
+ Fix out-of-bounds write in loadImage(). From patch
libtiff-CVE-2016-3991.patch from
libtiff-4.0.3-25.el7_2.src.rpm
(http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
+ Fix read of undefined buffer in readContigStripsIntoBuffer()
due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
CVE-2016-9538)
+ Fix various out-of-bounds write vulnerabilities in heap or
stack allocated buffers. Reported as MSVR 35093, MSVR 35096
and MSVR 35097.
+ readContigTilesIntoBuffer: Fix signed/unsigned comparison
warning.
* tools/tiffdump.c
+ Fix a few misaligned 64-bit reads warned by -fsanitize
+ ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
which resulted in Coverity report. Added more mutiplication
overflow checks
* tools/tiffinfo.c
+ Fix out-of-bound read on some tiled images.
(http://bugzilla.maptools.org/show_bug.cgi?id=2517)
+ TIFFReadContigTileData: Fix signed/unsigned comparison warning.
+ TIFFReadSeparateTileData: Fix signed/unsigned comparison
warning.
- Removed patches:
* tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
* tiff-4.0.6-CVE-2015-8782.patch
* tiff-4.0.6-CVE-2016-3186.patch
* tiff-4.0.6-CVE-2016-3623.patch
* tiff-4.0.6-CVE-2016-3945.patch
* tiff-4.0.6-CVE-2016-3990.patch
* tiff-4.0.6-CVE-2016-3991.patch
* tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
* tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
* tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
* tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
* tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
- Fixed in the upsteam release
- Changed patch:
* tiff-4.0.6-CVE-2015-7554.patch -> tiff-4.0.7-CVE-2015-7554.patch
- Rediffed to the changed context - Added patches:
* tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
- Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
MSVR 35096, MSVR 35097, MSVR 35098.
* tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
- Enforce bits-per-sample requirements of floating point
predictor. Fixes CVE-2016-3622 [bsc#974449] - Added patches:
* tiff-4.0.6-CVE-2016-3623.patch
* tiff-4.0.6-CVE-2016-3945.patch
* tiff-4.0.6-CVE-2016-3990.patch
* tiff-4.0.6-CVE-2016-3991.patch
- Upstream commits to fix CVE-2016-3623 [bsc#974618],
CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
CVE-2016-3991 [bsc#975070] - Added patches:
* tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
* tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
* tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
- Upstream commits to fix CVE-2016-5314 [bsc#984831],
CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351] - Added patch:
* tiff-4.0.6-CVE-2016-3186.patch
- fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340] - Added patch:
* tiff-4.0.6-CVE-2015-8782.patch
- fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
writes for invalid images (upstream bug #2522) [bsc#964225] - Added patch:
* tiff-4.0.6-CVE-2015-7554.patch
- fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
tiffcmp tools (upsteam bug #2499) [bsc#960341] - Added patch:
* tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
- fix uninitialized memory in NeXTDecode (upstream bug #2508)
[bsc#942690] - Update to version 4.0.6
* Supports CMake 2.8.9 and later.
* Add missing file which wasn't being distributed, causing unit
tests to fail.
* Make shared/static library building configurable.
* CMake reads all version information directly from configure.ac
to avoid duplication of values.
* CMake builds are now included in 'distcheck' target.
* Autotools 'make distcheck' now tests the CMake-based build if
CMake is available.
* Fixes to avoid undefined behaviour of signed types (C standard
compliance).
* Fixes to avoid possible isses when casting to unsigned char.
* Fixes to avoid undefined behaviour with shifts.
* Fix generation of output with 16 bit or 32 bit integer, when
byte swapping is needed, in horizontal predictor (#2521).
* Fix decoding when there is a single pixel to decode
(unlikely case...) and byte swapping is involved.
* Add add explicit masking with 0xff before casting to uchar in
floating-point horizontal differencing and accumulation routines.
* Eliminate requirement for and use of 64-bit constant values.
* tiffgt : Silence glut API deprecation warnings on MacOS X.
* fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
* Support for configure/build using CMake.
* Support for large (> 2GB) files under Microsoft Windows.
* Configuration and building using CMake is now supported under
Microsoft Windows and on Unix-type systems.
* Test for and use fseeko() if it is available. This allows supporting
large files on Unix-type systems with a 32-bit 'long' type and a
64-bit 'off_t' type.
* tiffiop.h: Macros added to use 64-bit equivalents for all standard
I/O and POSIX APIs used by libtiff and its tools which are limited
to 2GB in Windows builds. Note that these 64-bit equivalents were
introduced by the CRT provided with Visual Studio 2005 and if the
necessary CRT is not installed on the target computer, the program
will not run. The wrapper macros will not be activated unless the
definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
least 0x800.
* tif_unix.c: Updated to support large files under Microsoft Windows.
This makes tif_unix.c a completely viable candidate for use under
Windows (in spite of its name) if the CRT is modern enough. Please
note that tif_win32.c already supported large files, but only
'tiffinfo' and 'tiffdump' made any provision to support large files
under Windows.
* _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
maximum size of 2GB for extremely large I/O requests. This surmounts
limitations in the Microsoft Windows read() and write() APIs (which
are limited to the range of a 32-bit 'int'), and may avoid poor
behavior with extremely large I/O requests on other systems.
* Updated to use I/O wrapper macros from tiffiop.h in order to
support large files under Microsoft Windows. - use spec-cleaner - update to 4.0.4
D tiff-4.0.3-double-free.patch
D tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
D tiff-4.0.3-CVE-2013-1961.patch
D erouault.2862.patch
D bfriesen.2805.patch
D tiff-4.0.3-CVE-2013-4232.patch
D tiff-4.0.3-CVE-2013-4244.patch
D erouault.2861.patch
D erouault.2857.patch
D erouault.2856.patch
D erouault.2859.patch
D tiff-4.0.3-CVE-2012-4564.patch
D tiff-4.0.3-tiff2pdf-colors.patch
D erouault.2876.patch
D erouault.2860.patch
D tiff-dither-malloc-check.patch
D tiff-4.0.3-CVE-2013-1960.patch
D erouault.2858.patch
D tiff-handle-TIFFTAG_PREDICTOR.patch
D tiff-4.0.3-CVE-2013-4231.patch
D tiff-4.0.3-CVE-2013-4243.patch
D erouault.2863.patch
D tiff-4.0.3-test-jpeg-turbo.patch - security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
bnc#914890, bnc#916925, bnc#916927
+ erouault.2856.patch
+ erouault.2857.patch
+ erouault.2858.patch
+ erouault.2859.patch
+ erouault.2860.patch
+ erouault.2861.patch
+ erouault.2862.patch
+ erouault.2863.patch
+ erouault.2876.patch
+ bfriesen.2805.patch
+ tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
+ tiff-handle-TIFFTAG_PREDICTOR.patch
+ tiff-dither-malloc-check.patch - build with PIE ibs-arm-6 1668587811
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 4.0.9-150000.45.19.1 4.0.9-150000.45.19.1 4.0.9 tiff.h tiffconf.h tiffio.h tiffio.hxx tiffvers.h libtiff.so libtiffxx.so libtiff-4.pc TIFFClose.3tiff.gz TIFFDataWidth.3tiff.gz TIFFError.3tiff.gz TIFFFieldDataType.3tiff.gz TIFFFieldName.3tiff.gz TIFFFieldPassCount.3tiff.gz TIFFFieldReadCount.3tiff.gz TIFFFieldTag.3tiff.gz TIFFFieldWriteCount.3tiff.gz TIFFFlush.3tiff.gz TIFFGetField.3tiff.gz TIFFOpen.3tiff.gz TIFFPrintDirectory.3tiff.gz TIFFRGBAImage.3tiff.gz TIFFReadDirectory.3tiff.gz TIFFReadEncodedStrip.3tiff.gz TIFFReadEncodedTile.3tiff.gz TIFFReadRGBAImage.3tiff.gz TIFFReadRGBAStrip.3tiff.gz TIFFReadRGBATile.3tiff.gz TIFFReadRawStrip.3tiff.gz TIFFReadRawTile.3tiff.gz TIFFReadScanline.3tiff.gz TIFFReadTile.3tiff.gz TIFFSetDirectory.3tiff.gz TIFFSetField.3tiff.gz TIFFWarning.3tiff.gz TIFFWriteDirectory.3tiff.gz TIFFWriteEncodedStrip.3tiff.gz TIFFWriteEncodedTile.3tiff.gz TIFFWriteRawStrip.3tiff.gz TIFFWriteRawTile.3tiff.gz TIFFWriteScanline.3tiff.gz TIFFWriteTile.3tiff.gz TIFFbuffer.3tiff.gz TIFFcodec.3tiff.gz TIFFcolor.3tiff.gz TIFFmemory.3tiff.gz TIFFquery.3tiff.gz TIFFsize.3tiff.gz TIFFstrip.3tiff.gz TIFFswab.3tiff.gz TIFFtile.3tiff.gz libtiff.3tiff.gz /usr/include/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/man/man3/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:26866/SUSE_SLE-15_Update/6d2d974e3372242b94107a2c56a19623-tiff.SUSE_SLE-15_Update cpio xz 5 aarch64-suse-linux C source, ASCII text ASCII text pkgconfig file troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) Algol 68 source, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) C source, ASCII text (gzip compressed data, max compression, from Unix) P R `M@ 0,+gel utf-8 1dd121ca404c27d5c7c2fcdf9c250476641e8298489ad6be8e3fd4df3f930e93 ? 7zXZ
! t/Ự]
crv(vX0c X zwj>7kL d]+1щq!_ld&tL/zx:JiN➵d3dLCHވ49J&9qA}N[OMP
3h;UL ҵ*7zWF۫#4 &XrB};BӢZN h9N}A2uWҐh2Pgy>-wIP/a܉ݯa5HԆJ|t6QcB`P'n{\1śmWϹ.S\ovL9 0Ƹv NűO ;: t"p_n~טj8o#\\]}ƣ[JZt #(3ۀUgpkxϨQ8icSz=i4IqKwMqi31
ֶ)T`JDn@y\' i"H= b\rdmagċx~=klvSwSq)8g# ]6U-,cKQrq+JJlZ -?+sM^;\5{ 7z9(J&ǒKLC&>_|娣c$(sUH>{=%
.`Ĕh,O3?ܷ3c_ ɄFЎ= VoKq7VA`AԠCJTWԜ](ApԮLrp9 ja2Ul; >uʡ'*r !~ԙ;d=9K/4TJL1i=%@$*TSV-KliTvH,)SvޏKWc=*ZK^<+{}ֳiG6̥t<@wyvJXn8
N]#V4Z2z~ [ 0m V U|nfI :06B\6`-6 &D^S97%;K9\ëF9RNL="Bfv9`|!7ȣdǠt &,Q9
/'dٸ\P5ks)
p4^*Z>GP JѤD٠ x/6 y= Ե5 K_:3 ց]
t]R&! Kp+۳Lj>X0l͇=A0kTGc$)edRYSBFAh٬Fh,V"%v
CZ_GNKJzj 0J.#d0I}) DBR ~$kw0n=uR?us$%;v B19 Lh`
@?Y{q$_ox\ VkQc" unkJ?-;tE=NVDQNm{?;>J-AԘF:vyU&) Ur.J?;#d X#
s R6z4hb'D& sY37=AOQEewV
ŅLe 虺K[ѹjP
)do !G4͇1&hc{<3/oOɃXI*.0p`lj3 bǓ 7Wi,V}٭Q54l
Q%5)Q4&s7WLJL
GZQn X% xekk| PÆ]ɱ6[VzɮFk #`~Y! S;.qF]3? Άb}d_vhyڑ? ob0ϐ @l,Yu>Axrl% ojhk[zPCu'XgG7;N/.%,g֖aM^X]Gښ $IO
W| ȿή:(kl1EQؙܞNfԴ kON5W JW#h0ý|t8
2!"ؿ7ŌVL)*6
Si?"rQquCYIfmfB╟ Bj? ܦ[f}f
|g< AY1Y)hR+(@Fѭ~4c3 kȪ,Gd]-͵Ȑf4-L:OMM`۔@mqSVɐU5}oAIͧ9oOYCeЬ. Z =Aǟ
|xlDZ"s6z
)bCRN?$ ?
[]
A7R4QZ !̙=M 2FZ f- >oC>y Ze w71JEu+ҡO9|YDm^GI7?;0ƢC0api_3w|yvV&-IĆ:*&'j?6Waf8 ;BH$AvT7
Atfc5#Xwu ÉOoe0SPX#GJ=| I@ֆQ+].4<i`09I%VM\wb̀ * }#L>vnDFQJmSR]Po-Fy~&氹{{='UguMSNZ$.BiP(\S "CBWR XV OԲcZ=|L dž죷'H?Rf_(2e&h6YVa4FzZq4b wK&Q 2rԃ}SO[9{n>>z߯+\qYVS\me>Gg15- Q+E"%boy6q# p?11؞x1 FP~Q FdO,2ūI%pLYD>CXl :oUlBÌ^1 xإ6 Qx ]5::j$Ge;[o7v{.fzjy_.t%ei][urHĥ=Uì FXU} RO; ;^8w@w1$Gĸw˒ˢ֗=W EM{ȚS&!PMtyW C$Z@HE!{_rObЏ ,fke}5ʄFU0hwnEI)0Ʉ"yJKH D {qx}߫|rVMq^$
v~z?< =;ж
0 E F?.}ɔ s&eM]~ƍ |Vhy9`:sT]nG<| 9X$lAf`;$%
e?ѺJ3ak(P${06SuኽG;y9xD,*.fdP=,@|q/
\vq*3_?2Aurl{[cTda9R:; =,'^y =.إ`Hmq/:_. eACnE{.1nڃ_ ܆yW ?'J)[
E'Fciw68;ԣߕ4nxt}zp'j7q o Ɯ7ŬwZn|7Y B+S
\
e=أN K-oJ "
$q B5 AkLHOoT0 /k kx"H74ѳBw v}>XUV*4
(O ~$-@!9Tۺ/Ť =_E?WG[ V1Vv$
£s.OL_|9 awu~lQuo6."N
X]X.|l ՂSTj% M^x4ߧGA;
yNSչ8XBr[ta9`lodIV&r /lEi
eG6To G X*>MAzLgI``η5 >Rh qDu
P$!onrD}ѫF VjRz5ƏDhGXv
X xaΛB"6/}l#2)0 dȅ Ĺjxg) 5Q[1lQ !^ؚSSmmDYQ
:R#ozsoq3ϏIa[<[އz\/{CJv翉q tBS$X\aNn \.족//wo;LNd6 6a
:?-H
%ħyY lٺO#ތ֕}xbs+0,E}/[9'C%9kN r ՆW"? 8N3Lqźm$Ͼ]4U>^.+4 :*Jl2N{X4)Kv#-Wz`q B5XYmyb
:F=!DNV}'!v(2Z-
: ǧ/Tr ҃y}wt/8\tl"2ϋϖ ْG}l΅.T (rUc6&aK,J xQWuYc m3ٸH9aSp^;0, 8-ݙeWD!Pygsq4+v"鍏gZYu &t?Qvq~zZVאdޓ.H"BtI1g=U8$ ~~[vQoLT9 ]ʋl輟V /lߊOߦ P_t bv4WN. ~S 搌iaaB¸}'c#?HFmCQ2oV=ʻ 4t3
w4g\(b2ċ 0-4Дg:\04ͫ5-c6,ZWȨjDzFon2|c1
]#XzȦSeGJ@TP[ʚ?8d;iY{\YVމ(ј{4E +hDT> ø;[vK)D{KXEkT`Iv%vpW
]HcOFn#S7=<
Ző
⭎
4z; R&pWsK l4#A "ڀSAgeedhNB,Gl.ƽhizH k
OU$W B /SpT특R#d.N]6m"BM|C~q}uNva ~JG7 (00R#~ 9D cbCe)d5:W!K'm ӭXBMJ v-G@/YmWvVQ#p Pt?Aĝa //=8Vk(V\1 L7\DVF`/ 䧍7Oʢ> C (F6RjwC le=#ꠋ I[E᭒O{dOx/ }ot $f;2~jK{\{z V`wJY͠fw73I?k#qVmME$lYqa 3Ik4qݎ֕cR9]fP0{& rn,?9axYx!Rb
^ځ*#IeW'n|h':a { 8O1]Lo?z k1{
Ces
VlvLxLƣ(tvQ2a-˖JwW nއ!]C8lYT2A&e˝^Xh7T}ͬg7rb0|~Kn/qѤDUOEt
sUPd#M4bFe xT%9/%WK ޑU8OyuU#&L-/k' }e)x5 XeFX vR&o\Rè03]cCéq휛&2/QCcnЀj$AIQ4^(k1!ś`r)B[gbww
dqguYO>+ G :DK2h|.\Mi`b 92%g\'r㠷v =Z*庈] '03ju;뜉Y>װח6DKnouhBWJO賆 \a=|RMq㾽7l~'W8=RSw
RFά E/ Z N 3[_.q/3 Z~,RXC/40a }%aqjv/{E%ᑼH_=ϠD1m._XtﯴΘ;#W1[{1CM E¿CqU礦Exp)MQz!z 1
@Tiف ~WB[Aa Xay7t>97עeBP Nfe+_]ԡ $~?Q9e&pPu홓BfRzDE#6{w=xTJX)!A" chl!g 't8F%?PW{yw>Ho*#6M/\ dRHT¤/
IX< x,ZϛO6t1V_gt1h S\Qs$ _tE}'qscvEuD 9w@X>o^o@bO?V tF;>{p{b:5
>T Eǘ.F
B`G{Yr9 P E;s'!?F;ۺ|X'8ʬQPGZk 떥q8M1Vͨ^WZf :ȅeKKx ? +%pCMU@P/>SH A)
,D)pA bu I{ bm1']&U
RZFh]˖ ;{DuE}bg]gw}AD\`5c0!H*fl:뿩j".(ЮmR MS[
{p]''dٙ/{2NHub\?%h%zFn>htPe,D#RP)ܡU .F@_ 6 74jE>ݲi]g&6M:!M sguRpPvlu_y>@{C8osFʈv/ȕ5VN-|^b5 e``Kb `f>)A4WJt;wNPxC0u؍V(fkJ>,ڿ$۱
md} 0P +< /t|&l ]Rw<σ ȸ.dbX4y6c0
s3m'">
OGV6 9XP/8rh]빯)U:{jJYa)) ҒUim62).~4kpݴx:_5}V*.SNb9
CQ`k9@Xъ75cPj(9uJV\gbfkxYY6Oz+vv*eUqZ Eb{UxWgE5^k̓ A|wӹ 1 qsM @06"Q; "f(Aj-.ɪbp&s* ZaHSKLF P"svjG Q&
+3:[-
F~<5^=1`pL*poa=ƑNtQwc.aoHZcW^\dc&#eYoYa+'@l_ ʻ6 j~JDaO-F
kSʉp3 zvSbZief ) 뀌HG[z N7N#1z[Q/_)!GeM!J=\x_gL qBDY ✵m^x,խ
%Z+y
o )dRH~^1L5XΨ\I=K@TلNߠݕ^OYS&m|ְ ,|ta79ET3rpH #D["
=x/l/
c,E
AQ V
Q| ϰY=X Mqcچr2뇶0{D 'p
1Y۳0oژf;x!Y4͵K:l։1~|rt [Ӿ3nMg.VlP:C9q܅ژ'Ṇ\'|:t>8U/[ϡH扪l*EDnBLoNm/|>e
1{<@ %{S_ԭO.3Vie#"2?eI1Ka5}o;CracG9u @`'Bہd6h] yFٻ $\A
HYTwiKm8GyYh|)k/ 2T\E8
_6qi1wuA_ہNMIEDN$|m"]U7X
dMVK;xcs9u䳄(/ Iu+>rObfg\CWwqv⩽Wo#(lpOLBQXiU}Ylà6UaGA!2Lpj/2na {2*@+% 6yxCS EAQlhy |wͫ Ճ۽[R
}{;WԞGW>!y9'A[s
&={YndY[i ɣZ3->_\pŬ$WLr'>k|
[hooKdXu5*PSb 玕/cGۂ/ 5ocII|3J`5鞙_.h?A c1sfTrV\Մǩtn)E):A=b͈}7i#̰͠YBb *q_~m\gM=l sfS i?Z?hu5DNQYPVg;ops>t^ F;u +xuhkVUD26ѱ_zsg l -FU%p8 1eǀMJ A ј84KmPTj?>p1 > 6BRL1^T3N'#ͣS0)F mBՙؕ+ZS;zD'ؔ 7InŅNO) ʗ/@E eXmtzWqFUW!
F퐊ŭTv>(hM<
g /TY!:SbBףL `Dnqc3Zժp;!ulΚ U~uG y)%
Q DÛCM[9=[km&/!(;=e=Fɡ^y&%1 spRq0$I" <Ɋѹ_z.}V K/i]%+Et̏ |خH Iqk@ޭqr\lV!0E
:LYe͞WFZw4[ O]<<26}xe=&xbctT2DFio/mLZ+:#$ ހ9\Ynښ} !\X>!LlB"(wuCOR,%MrخrvmP<M.In x)g2'd28=5 M9nDxW7)at2s(58U/m2k;d
$Nvɸ2RۆUflh:ǁbm/Gn-gCTn=*uTt`02 n3_ 1M)?]r;UCF: > j9RY}NHI-pe
} h7+/&( <:D;`\ G̾G# x n#
Qz4ɷMR XZ_W#VXhd vgB`cp?鋍&==*![LZM]'OAm@͡cw
Sn8oFMʟ_IQτ 6) #eQ`ɚTw$2` Vt(!aW5qr,RrPAf* @*ԂGgf['ACi*+; iEP{bOko2+VMH٤ Ȃ,@'Z,>OFPLjC߄&d UFL'Y s>̷ 3UP(p s|$Lho2[L3}o?wҪqxd+&GzF4Bӈm᷃p+;ơŀ +g lO1'l
ȑ P i4Er L:4YxK=@u»sbYpz>֧y.ELz8t z\Pn94Ng=
N3{sf=gCbS(uSXeB_*_0+/x&;Pa xfQ9 ZI>Y
'( 1^OЎiH4Ά𭓦4p#ZhP
[ i7QkCYa~|p N
) &L_/?'5Y1> 0gxDD<8r d㸪mRaT`I
͂W5`e SfA4gTßG`l9}Io&e_Ưܩ#%7Fn|'jҮ/8dNr!PK˛SSJ7ߍ8 a%)I ߡ_t!
ER7Hܣݵț`*9{KlX;0\g@ jVQ0xx3Y_Fry/[90LU ( Q}y+W4q,
ᕢq{n{ϟMЮ TSx `#BQ/8hGlw0߄ʖ&
t]EfZ{`Inť2qiT +hĕ9hEIL>t;ëK%{ +LV..<(>"L3΅QY'D dxk9{ D)M[Gr{ TF:B*ےUc34[C%]pY^3.Kh /]Ui>ؑ5 elqQS{{ fI4s PǨ5gy+r)Pia)rn} x#nuX$)mVw .DgBAw %%bՈOqxΥ,*8NYFv&$.W n-@MW Do܌
Hy; ?M虩7B @d% IOGZ`SFIP<`uk>siۥٮ6#W$xh/(eyq/dTZy)M;OPEՄ6cXMr(jn?y}%^6lXR8[ȺP1#p 2 B8MvTpKVP/#&]!xi?SX0I ͯ 6߶[t Q36r#A_ *;KpNc-6%1zq4snJ9: NNl ӲEIL{qa&ߏA^Z&uil-tDV {鯨E2n"f!D {{FXzOPMs-kЅh pAyk.UlfoO%ж=N} իܷ>:=g~LGQ^x46csc(ʈ
j3YC{i@,v&ZQetuy:?BI
i pꅙ]HUEph"MX';p[**/+푞jZ
H7jY Hh3i
ZɅ0=fsH}KkTp8e=Zӳ,P_d u pE neЕDZ2. ;WEɓb OFkLjiƔxyD;,Jig !&_M^:.Dž*Fi}mn5o?H' @˨"f)7# `0
.OQ9ի~`ʶ`D>OTY*k(*L q1>[11ݒl~AT}3Ab
xrfe|Rt2;H3fTj 4䧽|#n 7/ލ6w5Nh&ޣN 'wbY>N nN[ v`nz~:%F, Ycв
/`(I2 zx 7%(uW,vl܁ elr0kxEeScq.A0{PlVKxۤXRPnI5
" MU)sm> M{h{rSjuE%Ό),mKߎ
KOIѤgׇ@vE2P_POw٘uS8npk8`Er\Tmx \ ͝ZVYFɗF톞 \lY0ѕ6jU)y.ܲŪKͺ_7|_N[pv/ʵ (zBH ߁$LK;AfX(
o F+csS_n lsNBS1)V2;gm$$uERĦ>wS̊e$韑~Zi@סdǬmqhIE38vbe`+RkqL*%8jVoFA}$<$) f.zѯփ߉@1s%M`5V[Dz|zЮ~ rMWSNn%L [h!lX,qǠQBC%\`v2]qIT{eh,
Cb?!CT*>W=3M ! $o33Ky >Dgr1%ݺH 4W ns;q+/cX VVm^.ekJj/\jamL9Jǚֶ
%)0vpNl=3U&>xWY;:4&;^!2lYR_GnN icQO_3@0OHŽRUD*7b-u@x.mud-x?k?^+C b_ͬ
docنY K$5UQ`ڊ@"fFi 27kBY%٩6Fˬ r}7=V+7r6"V NGRr:M>Y`jsÁ8̯R"%}{eE]⍱#7]g- ZrB^_~e!T0W*T53}at|5ٷH dβ8f^266b0!
h }SzK_g9~swPm٪{0щ݊RmTEğS& oO
ʟ_T~{-,|ey
wDhMn @|$ &W5tsU@F>yzf@qAW Dv
@9GL/tzlGo-|o7' /LR3s
bz%j =^/⭎w m2)Hܽݷ'LY^J1_*CGZ ~Lɉ>RfNΞ)i T:o/ԞY a`: ٭N骣y!`yWCB8XqP Vۼ_^`c s
@ vi|[;1"KGeG_7tQ*/.}6Tr 4`X]FwhwQD+OJըԀ*:'t7YDQH# /AhF?~@"r| |8@EA>
APeu;cp^vT/\}Xʈ kׯ3!뙜GJJ(>]jq*!| TˢbX$܊W}:p}?Y7*" ˎxfo |]Ҧ!ba؈2Ե'TUz р*Ov R q ߗ+h muuG N-DI߫أ 2 ˄ŸK&=-5 9|R=8w: eY-c ؐ [ki
pg4c#ޚ<[ _Hp朊 6 ݒWEc:e # ݛ_ĩ)1d.,к.q`' |&zՍN^.ptPZ=jϪ)hKbOnw%.\b1wpTkդN4O_R ƈ8.T\yy6_qKPCnׁ_Zlk :9aJtШ
mBbIpLiV]"F.XЦqB S^ YfAe\) ۓ8#}@&\&
@e[AY=8߮8TJ6Jv ,xy
R G sf^ #^_oͤ+?l댌zbe^px/[Ȉƫ0(#tt1L^^< =7Z u* w#R\趲+
,?< g:8L sX M~;X} PM]V 'L^>-e"q'z,p c.X] OEUop^(o۩ \?lQM 4>ɎXa>r\ P2} :
A{W—/,_9K5fbA*, VVR,4Orqsk A5tc% '~{<TXDGttͽtZaO ѻ _]Ydf[(˾sX{eTϦPn d
lg(y E,Zj*ft@ C1 ӵ.d!eHC6/x$ʴ/aO|B$?-IdnMɾc8 6~~BRզ|2*
]8SB]ΕCtz2JWf:ikHqr}@\yxފlJˣM7/4K|g130acRX4t9:7(!3'eWQ .S\U.mi?RK6 /)=w6*[' &梣/+QeCZRMn#V .>uDlN_IgAn.6io͠:>fgKMOq2~2uN
XO
h Sk(?)$ >qU aa+N$!Fi `glkW |A5QW
+']T#h6UJ4~ kj( КZk *T@lIz|>ԪO a |Tm& 7_grTk#n ,ӌث~ E[8 ~T}s)ݶe9Ѻ3<P* tUFxD>Bt`TOMpĨEhǰC;BP'K;$0Qn#7hjv9/(ln_jqчq : ;A?MӳV4"筵s++D8D\䳫 /(%WKfrh`O]ڴ:y^7xq1 {rg e \ 2,/_wƇC"x HͧwP0y NBܪv5$hfA՟^Waҫ+{FV,i2
`e\C"F+g@ ȂlIk4FZ=G҆dϨݗ.挪^cTL| 3wިNEmq#j7oSDUr=QTYwlVoҺ'XN8~ ⢾ 9tqݡ(aE;v ~<"ھ<=xj-3h6K*ra lgȦLrkD|EA%!i)~Xeeklt/5=cEA4q9JH谆0aSo5m3ۺ e<=
HPቋeR }×vn+k$|:=&
u{Ed3"< 'm :,v)Fm
Hrʸ QΕ"Đ]r0oF`쯲
Fy
?İǧCxJ*: i .مhF:yph:lqU;+ĒzҾȻ~{?s=nwF2B = 9E}n & F6?'D>Bc:"H)>^kjiv;.܊_~sz *-cnB:{
=]F(}U 4 q־Qt>Ys{X'rj%&SgCKvVaS֡ɨ;C_)#5g".ކl*a= z9q]md FO)P]b,Fmv r3o4OQ>g^ 0ʬWr@F3wRc=R(L>V.9FPn+!h2l;e@^YIfGZ; '&TXG# 9>FVjTGI
M= zvr +ev(%] Š2a7I8']pOo RQ!4=Ob
싸RE?Hd= .=W7-;?90LBk,ēHd7f(,u%ٸ<
O|ik=M w8l"p8\ aːc=bH!2 w?A3d)&^զQ[3A |m!.T<ߢS l.k,}܁3 fa0M;yLe!p3
nB2 % QP W#0#u6Vu
df
l2*IsCQ|<ġy=l0Z: ެR$k \ut9oxV3 "O2il" khj# 6g 7Tk{^EDa9q54l;n?燴Кgp¾"U*@(L jRړ ^Y{mdV@Gm9OI-%+ JDr3 =2 0 I=UIoR7i5@&h4NdR'1 #wZa ۅ0S,6vQy^F)647.Gq%pQq- E=
>%A#5ߚk-۰inxXzp(wJZ'I%RuhB ^MLTG &IYTbq+XfZ.Ro@$ RUWQu) _o
I%ONZܲL}eBR ѹə >vĹ+> c;<X묒> ^Jo~XH!2)J:U
hlK3q;]chK8F㕚
`0)TM@bQ3bgkUuςiUJ(dȅ y]QG~E4Hr`giAY(Elr( 8}s,ϗRθj:A$o,G# X
~B ޖTԁuSu^+qA~Q9Tn79ZIRa
yw]>ۙ\iLX|m?N ү{4t&!n`nSn˫U{cދÉ23l֜FqC*w'U\vpzl يq'RA{)3#\ ؗ3< Bdy
Es٥n2˱2~t I!0#pTF,1- oq/U`7ifS$2F*
Τr2V H[ (h}V5)
*&RWH|T)#ASne 2|WBV&: PLUXZ0i:_rhNrNd'oߋ+
y ~\Ռ<:LTsZp"' &=LۛjU
ǥPstۡ@* M|V2ŎdSbnO98 q闥mK19 *awY̦`tK )2ϣ
FOJW57*QRasud 3M2q/
rڠDz0Ak y"#GGg5
K $=uGy̽xv;Bu2A8&q (Pp)@ Φ&wl =컶ڄoȮwzCz,$.]_0呸>le g9b0Mj ʵ*=gfjh5b)U\0 a~1;&9?{b 08%,4-jQTk~Ud¦l\
({ERjv4Ecnqvr %!] ^ґw1tk/DrB.4GTT
5BbxEf|e\H?Ek`vqjb6-v7VjkX&e kўJm.[^Ib7XސF ΨK#gKkJܽ)43ˍg xFQ]^~20H7 @mE: U7E22ILwʵEhsp"?˭
au
^;u
mLk>djYv&ip`hD3 Oahj g )6\)Oma~þ vVC":F b$y`Nb#o{E2:03a5S* *L^rCO_=, +p/C?C
tX3 iAk )-ୗz3l7EcC= v;VHFL*f} .)XimH\A0+pnд
#=F@r;[8[Nԃ֏-Vlu7 ^x3ѢwPzDgƅ| Y6ŷkwI7!>Rn!`nqTرSLZq,WOB8%e#z{
CW P6)ȥlP(egʺ+C2h;/rFqlk&dI%X%6s.i +шҥGt`RN='vFxqӞ$SU@[ | ,nVYѕL5p} h*h\vȬ{ i<
PO[@@<`Hlyӭ*YAw1XH56>w1$?~'Ī/Hb6e9zy1,Q82;ztw99 1Fu"BVܖ£7#SűiՃ%b9< ` rd<)#-98G2L#3nuIΨҊqo`pG?iias_5;^< ZuIP Cj&Oڑq~5QR"2Ouhj[s/|i^u+mL$"3u pMFG*}n:KDěeD qgOe{xv; "WUT
(nE%Ғrj\v8FLR l)KڐJ-YH]ɑb%jx0 zc 0"kg0
X-."A@6sF$>,\
:Y|lq aWҗjnG$fXjCI t_S<ͪ)@)%%SpK}C
aҌ)@q&4vV^O:W8*yFkQ4e0{[4< .j̚-@l+X֛~ #Q| -pXFڅ@
f
*29]zw{ ]wD`k&A*,ҮxbGqlmh5Hՙd)
TF:\oG`+ SI%2^ {6aFD+\ޫ8AEJR)w07Ywgi9FI̮ vT|~ᥕ;pKb
q:qKWU. ?k1tUB|tㆴ ճ Mf=˹$TAvc˔!*^wI 0lһ _0\a*j;PN@Q _hx_yE}_`s.Xm. X:lwU_ $ *Sfzab6k^ㆊ32d,}NdO/='1ō PeҷxJ@)킅 dk04/P z1IŲ6j@6 NWV] ` jv`۷!m^ .ӆAȵP %Ig,m|je P6lT.vL'Fij ]ZҕM
J\ Y|b~\d|e?̘1WRsZx* reiw)=kT]sfoè{rl1!WwP j"[3ngr&/
f5ߡ{Ll)
iS{Dp75@MM"Ѷܘv SlosUǤln^̆N'(RXConXHpc
s_
R<إ0w>ٹ]_ ʸ)$N(*q&:u`c4q0˹HV @}\e8TŬA}$/Ob 6T5?Fw2) 6QK(ElPF46c_RѢ rNh i~ J %lbgC 9= қ,73a] C f&
zcV
)0Z.Z 9%v Ƹ`7P FUi'{J o%Xm:m$_>Jg-`:L 2tG4 H% k$dATːSl2<:V {5e,5 [\Z-kxѯ^gJMl{ ?6p"i
/`pVAl9"LooIsҡ|^D;G1qߤL٨N|ny(4|Nl:uH5vy! Y 7ksxſ =k#oVr! )[t-8؇? ?..!h74 .{A1H
xÚp_lH a0\ݱPvwOf!(3s[M(d}ϨZφBd\(HKI/ с
-b(EAʼnw:(*]@?9'V 5 wo UXՂc̩F_ b*1:x"ULO+Isu M%+Y%e@
z
G
zDEe|',[nF-pGG,i#mj5=b'Jt0_K ژ`ͅwW7"h xr%:]Η~ܷy]4HT)ۻ]R0%HحW'V}":
jkGnp .[7R}pu0 ;g c#ֲUM,L3zvn7TZܤP$E
06u k*[*\ x-ELg0 Nݰ` rDD^R0C iѻU-I/'G~PPy}SR tEl@h ĖՂe6h(.a?|3d! %l (%\+\ nO{ʸ 4Վ9^v@T$FSH~KГbXT r~Z4Mm14R5&aW)'L_a"*T"\ &Ycj3K\5c?/Yfym?*PaD -L-,=2sWQZq[ ,HO-*݀˙呯{N%NhFCCg{#^UL5tTnX^hvKCx顎)y^&j.F=.
,_(6rX/ k\,gj{wY"OH2_BNnB)|VÎ.ZB) ;G *ʹdQ _Hp-=>"_#^O$EN 8}ZE_ġ(ݛ :Y|D;K TA햿\x w) -e6~{{m[+p4z ^NH|uxGFunS/F!2-htOB+BAvO,͈ xgQHj )7-WU:vpmRp#&lZy)mo\nWEsVwkjK^ j(}VӅ`fumq* aكC ӹ*CfwP^R .ԒsMzEՙazy eYl<=(&J46f(2 |ڜvj-o+ ;\&lϛb彌KMJ mQ05=C M`$W1mMjTGb]M dK}w?-ni-Dq4Fu Q{_G:|FHfbWU6hIO?+ Gx?@>cLnfhNCB"g
U-eta<
,٬ }4 3iAp YNhC{Z&]6j˽#;5Rl5P/ 3w2ZϋqgtKm Zȇl epO ɧ_ainL A
V 3YnWj>AaT$ej:)S3q@cy 6'DgdUHoZ0g~OZFK$o+GV[9C ̣
,N8ֳ .wd2k+GI =ݞ{ e&K㷩^c'Fp,3O d @J>ZA[vy>R92S܅YL?XEF2"h Rή+4]JڽEڡ6mNBT
'MQٳ wB-Q*o9427}OHHmhB}B|㊻}1.s Ӑ5eal!wP{{+X0i *96d=b
fQB a%'GBK-<4Xax#@Our^DTWwuz]?W< ]cG0is1&_Uu +RjdXLɫDz_cl4J2
= #,FXzSD]ήJ7h&n{d%IdrquEֆ9A /vKZW;<5y
QKuJ+
>] mZp xz;u|O/6 L+|bƸY;Qn| j, Kkca:ˍ+Y@1 ;})GvC?76b ϛCn;T*1ʶ*m@gu|IiUEGwY7 O&|0 o\vUĄ҉"c!"l9r;p̵p" Ts9_8h#/^ ѭ8`7S/I;>&:Ik3)~>F~S7/5u^W]}LƸF7V/b-S 1<<]ȹ|Ƈ6I Ve*s{J5ڎN
Qu8 .r&!N#Bh5NUl9Meˑj ;gp#c
I
CnbZcEehU~Ŭn%zO %c^4QxO/)V G׆T]7/:[7`A2 -/.?LH4B:t
Ai<Ҡm3D./cdu)}Du z#"|bֶnջkzV;DfDPvv۾Mӳ&eט]{&!ֶУ=QViX8hӟ%_CRToQ@߬@:q,@>DX
#2jB^| \z $C<'~_Lc#]z?'w ω#k-ݽ{]E yi ܾS
`IހL{pLے( L5Λ'RMF|ߩ
Sj`[Ãzw: Fd>Aς-1Ij'up?
(WӗΚ>k8f| zυ:1 ,
Ag#\W ^6jhHI2maUy/ OR撨u۷)]J4KwcX CNO(-1^b\!xa Ebݎpټ[Kmm^*7Yvn4oHS w8 {˓ j]LxQvкp(|zk29`=>'/jޕ+A{Fؚ= _x7 4b Oi0uP+in/_ QYּ=:@R?4RTOޓ,T%0>F+/Rs #'ܷ۠xGt> cZWt~Ǥbȭ([9gf 85aq㾙ݦ6'w]eUXK~)Յl}oQX*ZWIq| ?$%WSe)c# ጯ!tn!GxG`%zP!r|A !$ b P$OmXI$%sa bd' +)6%*Ӈ2W-dҗ:$7,8ob< NkE 2˭Xcys
qKpa4lִ<.'!_ 4qj?lvIʭ=v嗓頡}{dW`Q )dz1'DIQtCph+ TN %|q&.zz?BKͽ@}w(`50q!m+v["q$Fs ګ~p?7a |1p]ᘧx#pm9z6ӿ̂ oJK-YDhTV Uf.Sa zu+=
i_>~N@R&ڍ@["ub^? cO'!Ʋ4SGNzԦnZQ>ίl4wL!qFt6߮l%?0j ea>c gd' < 6Yрk^; ֈ({9TѳF*@^ W N
.÷XK זS>=\[S`d+"S " T,&ö *rABHUu
{swŁLG0ڜ29
|5 c~90/Zt5PH:
édJ K ;ѹ (7 *m2ao#F~i1un#{.W@ =CwN] &(e[J}8|] TqN?5eenz<_bx_]A7-QNW.[ږ>kláb^? Z1+$ty,LBg~" H9+F\!t7Eyߌn,[ ?nLVcTt@8q]d&WpykN+ð[̤ǧ
DIMļ zxI p"TF= {Y:)C$3]qBc%P2R F.Ũ%`WԢ6{^G:}9٨`c͞z]FjH#6oϕIIY>ևC/D$K'WJ^*t31'Q1MvdEPܴ>CtE9̾ȯJc< U4[qlj_@ A5i7iJ 5/VcGx SS|"WA2HvAj^Y@aI,_SY<&qp#C:K -9!S-~ .\U+KD~w2T_B1e0
hj6ViS7#u>--l Sv[7)<[W8^9:nd}/#9 C& xm䐰)8¾`! >ݫ|on,V4t;B & AJPhktYM;T' [1e=28;f'TƜ)U f {nLJz Q"kU'^q!3x:_|٠+T>"la cvq́јgWw^1V'e ~N$$T \+qXqM. 1i8xp _a& ֜aC8]e ׂ[ ;=iiE
HsJݢ.h֑'
PP)Tc :?7ŅlD2,B
/+rjJ ɒDiOi=MS?ISt80 ;
ڟ1.o , ՜.#kt&@*c e.*o 9-$'ȷZml
$V_+9&-*c?c HM+!H
'~QDesGVN?sao =Q+3*Br-CD!s 9IH1NvQwC;$Wu Üx X>],L'ٶ7̽HR )4E|m,j"ȢN}6t*rs V<9*1u {e UrM7>IG^Vn&"ttL|d`h=NH(s/ tX|t.Q R
itD FڃIJ68"?H}*\; lՈS&?,sIXaV* zJvP*o֊4W NAɑP t BM>mXO^ ay+aB<g%#i%w
xD
X\0,|P]! Kcl'^/Cyi$K<іSy
+1c|;|>ILIG杣⅝ +$vI ,H~yyk~.1a M8^E"l I\:SsqΛUw|.}~y?G0cS_x\IYg; ]EK=Ր@k>~G&ӈ0{I?%\E7nd|,Jpj)h N} ԛi8W$/ng #HL ʋ MS$Z}KԜ37ȅ%͛,;s93-E*NZyÀ0lÐlA^
ɒP`;FIaL}j닅
#eK^.ש;Nf5]*x&<k DQi 5h̙6
p `#F VsooqhVA<ڡ`-'Ԓ
:tlFfLp&ݱ3C=9 ]j[Z(J ӔVy
z;`4kE0( XqgZ!2v#]
Ylna"h!iCaOƏ5SP3} kאD7'K¹ ؏U6pb|dCgQ0҈|{֡P29:
:1\Mrr63`ul@GdS4&<֞F<6!ߗ }PȆSBgZ7&|U.Ty'ơ:@LQNkaN؈`$FQ[>l x\I~m@ l R4/ӌSY6
Q^A)25y 8m\F -m eQI"~iƥh98 V&:V4lPVEq䱛D)̺ǬGׁɖ f?2iK=B2*SJ5/#6a 9me6n^ۘ T"T/Z'X},r+'V< .<$ Ɏ
[{DE 4,&$C]ʾ}=DZݔ5(d͊(9Ryon"螾a|@Ga;>#2|&~OGZʰwQ B7=nBGcDs
}%KΉ!!"Y%WW(+ `y3L")@!JPݧZ MQ (f &lhn;]' 'vY)[aƸ8KE#6y#RB=1=0/J6{5(nrXpu#S znk4M٫SըP[.Km }fZZI"M 'p":{yΜm_c&& ҆e|`Gp1*6\iu;M̲Zc݊>嬑r\5}lzaJ˳
hm& =km
$0qBj 4m xswg
P^VlQh i^j蟏5?$o'=#\94q%nj=$Y qy U˯Gq\tqW]7\d*N=ZX7q VG@H*n)M*Tw\fieۤ1b?N8/~9/g|!/ b La DۦkP 96OA
PMM;G&\ʣ[ؠ;RIp/ߴތ{WsIJP j0t 1sWwmN.hiSH} 0̜MIX(ڞ'E`U rr,Hr_[2(E/d9& ܦ7Ҳ% { xf
.Q^(];|f2݄%wRjrn=jm. )O_Yejb /@M]`E<ޟʟZp{`ڈ{*Vb Vrpǟ'
Y?ʪ\H ʤ=#e[@eE'4A1 0~"p'р<\.*eʆHAӵ6<{?g%B\݊&T2\Dj.]ܝ@ (ygK=]SgC\DM \x*3OT>IB2G΅(/*NO\]˖6]E@9hYqm܆ X: J]I&Q=%Tq {RY-@^AQ@1ʀQFo6q';x߱{f'\"71X+6+svdNY%:,˲+92Qq%:D;y] >te_QT(&f#װjƸEJ̋S+xೇW* fj ب:F;9IaiilX!Gnֲ&\ݵWJe Iw9G;} g/ lHTulK9|E 9ua8X+|O%U$:8/ 8C\wbY4wD02_A\!Ik4-D1%(6a!vb
iEKWZ&fmlGH{c/-.y5#q^Y_8T y}{k|a;-u]/Z
U:c┎-;
_vY5щ
vSgEZl^iK[:u]uP+T
H8
Qyף}Ldۘ ј6y0 ĕ2zZq@%1p_D1vcoΆ
>cO^Zפ̱Q2vP~\ky)L$$ߙ\%TrB=2tː~ ~z+`kYJЎk!>5
8
~L愢WZ^
NGeuw f;L|qqf%ٝV8wb2|r\9 ~\QW+%ע6<1*32 *Ąs;Ul d÷'
j|q8Agc/t2mwi]~LjmŕM̳-llUBW|L{M DY9DC[j%5]Ta'(jj'OgqFsx L] 8 pfY/ ~)QHSİ54RLER]VgA ^# ?3@G"[ehǙNJ/i'i
[.es%SN
OwJnm]7 :,}zk*;w"Y`FZJj2TUmO祁-9(S7Xv2]B,i2 Ute;&~m*!O4&7|l KrBsR!@lkҐ@_ps0rb?R V4&qz= .9`ئNf_07K~^ K6d`;k!R;H>d=D 0#k96&?!bA5fި1Ta2O9ދPȿT ܫfv-;RQ`R
ndu%sR-9)j"1N2G4:Rhu 1ɠp2 k[gifϷ~ v o3eTҩN_\X("!^#BDYx#| ŒsI#cvPWQ`
Xxj{! t69W՞C
T:[_kw}F4>gY5Ϧ;O^ eҨKei*6<0 J\
c;21w@Ф;eٔtA5mQZsbA\/^ǔ\p3\8wC9`1 YC+ g|L]g.?!ĎbwKqHc+ {X]-ۇ߂y:?.*DR^L]:`_[ gY zOE,݀
; oFh+r qB!,x2oB :"hh=} <|yW)n}div`R ݑMLPy: &:=O?q^{:=tlO Vtc@i%(LnBͥ{to` ?Ȓjz{}gpגMr<[gZXMJ`|2 ?xD 6~8ƹPP!h
Apݖ`r^䃣=NC-Fe pZpi)gѱ ) E~E""tssjj[
<֥H#-7뭒g7./:7襜8r{倚sz~!CLvB$# )4l!=TjX2R,8E\'ؚAH&}
ӕh {h'yK3r~m̧KGSj0e~J4x 9:Z7^O?EfZT<ԟblBI bj3q jB( ZB}1\B de=efXw0!O~[~B ˷A+?YLDtʆda喷*XH;)4{C1YquYV:?ԡNzM1cݵ"\ضl2&VoGd阳l7qaPx|VBά/f(xXj; ,/4?E<^[}২̆79UE?nXtg<)Wus>
LkJQ/SzŜ`T嗼Xwt9q$np*8K5(ּ\[?jAY$H_iDwU͟q7@)B&VO"ķM];_ Bk.x:_ 2mWC?By+7?H.ExOe0Ӊu+&_*bb!M.뭣*R5 A ΠTip>$4@~|e4 V ϣ_ie 'م4Rt
&LAٛJ5|
3KN
?KJ ggʋ4
Gv{ W&G1S3htPȜ 4]c0rϵQ 0*" ^м6Vݳw\ni
4{oq!9kp |(zee(
a|_Lc
S uꋋiq o 2zڕ.?$^ltez!bBjgn[ucѡ;^y
9L?'Sǿ?wL @N/5zF/ SHԸK䖬rQ&YQ*?xt/Mq&Cd928T9Fy4P&06\]Zc c(uX4D*=g =9v1gnj_`m p|<) {(o<6][ Yd=Q(~}8:/xSbl NT`R8Kq:#G`UԵ@qsS#qL+ :|:+ 0R>$(^33@Xc x"ǣ矕ݳdv }/'bbp%wdѹp"Ӹ6ע,~9uU,4h4L~TuyuJ((2 qu }h+ᜳ=B3 ☉x51CbeS\ūE+'Lc9v zFO}]!tȬnl?)wŪ`Q 2!)
H1"?'8iݶ5n`gnaFurqsSBv\*z;Dk2cvA!(IM .ց> 'zgm.lWP˞Uoy)W>y.ȼ.ǿFc;զ@t Q$h+
jz 7nŃj]hC}})%f a".k,tȮ\[Z-y3Hr7f(sxڝVFA$aqԧpKayG
nUxXgI]i߮yqVНEWTf UY 6R*d>].ۻSV~z$_5~dߧ@E-lu
ί>m@R6~S0%EL|!R٫Л 0"yb "n};̱5큜[^4B1w'+c?oN>*uS4
肐QMaƑ,#MUD\r4ٚ45ћhm"LAG7#. qqډ:Cmd(Esظ_+3TWN ı3mk9F5-pWVFn] &Nѯ'x:! @ʍ5;e_6Kl>mPя1 ,wf
蓏oЄhcq4OHrP*=H;h;_\]tu|KZb%*a ۶]q7B-33 wH Z')Z1m䥇|l79٢_q u|Z1e[c8m
i ,`2#%P,, 4e:, KBKb
#DN|Nqfw8("$0+&vG4ϼXDEK
{!A!ҳr_&N }5[_uS2#g8SC%.0LҀ\TA orv_u(0)L50`=~mY߃Ŝk"oHL|ؽi_.]Jޠ9
IB ڜz`Y7avzvpygN%5cN+.vʆt4B˯:CԪmfVxByl,C
>+7KBD42^~]wCF"!~C
C|P_߿WB*WDbӋ?yyP÷HSu\d\re=2J C Ϝ>NԧacOsF=. SShQ[YQi t=tS|d;m*wK>st {|
[3E%
y!*ߗ O{-u2p]h㳼qPt 0.E8o892'` VMȵ)'kOD{p4%P7 /}0eoL>]ȝSBI G~cʒcKyX k` hĔPe1$ TwI-NrteeDęu'g^ tD)\Ϻ W7'NLn M>M(oVrY0< 蚘?5T M։SqU"! L,̵gn*vE,"PeЄI_ƨHtgOwێ RAhc#^wbl}tݱ.~>dLi9]dqռg"{IAM[dx+;[:q0e}DchoAK(êU~2\~-2x:OՎ4L d]1~r / i1xD%[ q,хs
~@m.-~Gbٮz. H5ݑۥFO S9'b7|WJ%ix
s(qe%
Қͳlo%EtcS?!Vi_E!d'K=Sj: &//C{ρ*e1
/KK1 !{7[;=gEBO;X'sqTleLˮ=pO&;1yX5>Ck4?Q^O:
x\kvE0R WS$!UBā7z˘ʬɎtή[|V U4Z &aSUb^"XvY DSS
6z3GX _tpЇv!9ܞb
y ~ UcDg 6ܮ`rWHu0q hSDjJ2/(H$5MY7S% FУ٦
Gu,H^f*90 BJ7'A2S`ÊT \PńKn-)X9ߑ F#귵odLB5<W-pʈy:>X_ߍVs8͗pQPޭFݻ EdkH, _S2}陖
,
#O
\c#5ZXeL~
d9[(LL 1P fhz~ &ೆ_mW&!4,/AH8{!i Y.P|.)%)ktk.hފfEF [בkS ̑P#0 wKEg=q~џ k1`/ :,weukI`4hnH[rƯ R6){-e.pMy96C_$᳧T,IVS*{z0 6M^7>_Õua*gMrƭxW Bw/> 7?K6gL {uhK%B96YL$y6k,;1+q52: yB-"| 3wr"[ Si=MS^ P+M^U۠DApK W[j{Xy-9Vnvpt0GjBгݹu6ln-iw(+ا}:'MlH
B7g4-FTҏwh+'O@'݉&'>8M)ǘv=2]f§Hw\ @J㮤9Ij{R`j|}8#D<~'IA/q W.)ȢPU/̑6x%6l{aeo 9RQn"gR9
%!H`3vL}.F4".Q>aFv o2#|")s\e O5S{] ne&eK=#1A+ÇTL P1
05 Nq NG!Ubᆮ ǀȜpߋK8GspN
ߠC jQ6֫> +nKQ 1#,"'B E'IBBf2#q0|科M ;lȈE%<usK')Ը?J*M P~A9AowJJXU JP %{{˔ºz}gh'X^f,Z^hO4]uaO ;}?cyp'Տ\
~X2 2b.r y&)v
=ϧ<"!2'YvrC>Yoy &:=eƣ
W ܥK
ԖѕkH3H0K ѐx 6煉R@ 4Ӂ'`rxfNgI(KZ*V6fm-o = =օ0LWdMcnZpwg88
B]A5=+7~
p2jO ˪ap`XJiW`Vo6xǡ ;LȄ7P=F4 &A- VW۸&qi` ~1^(%
!KVH0: L~? L g/Z+aH[i+*x'̒pQ:eT+J [Jgt >l
O#./Ku%#6ZЁ<#*kG
I^b!R;~nۏcW?Sˁ hέq:t4^'3^)(aDcP2/ͮj9k^e̟y#T;UMca$~Ԛ :uT_( : Jיz~ at~4o".X Sؖǹ2Γif{bhpXۚE.ơ@d71ɓD]5L{Xʊ 8 fǶ1 /?go
uЌױ.}Ŕ&G
ށ#" -_ߴK-!],kܸ Ҕ@k0O AZ,H cn3X >HόM!-~^dJb>st=-R"xl`Fu^̄
І ,(%e
ec=~7mKZXN"-=--RF25>jPn@P"8Ltd_y)J _= N*
M3 m୫;,MsCq8 Hve9@R_ ;id}}/c[֣s|*Wbya$L$qf\ '*UlqؤpXR
qb
ZcZe)``:>
kWxpQFcTt x5"" Q45-6Vf2LDWO?Թusb*d[~_VԚ~c F+Ed
%SK+ e|* G9"WTC[nf5Dzc qW,J6@e 㾁daXX0mqSٳ9Ƴom3fj8~ 'DׁejRe 3%g_'nߛ5UP
yO[X ʪb%]1 d jwܨ+ms5Iu[$HUPpgwфpm.%R/h'%8UیJh v|CtAEq9;uLUP C Dy;Vy2}( 0긛hQv ِsj̡7l\?WIbʼ8X`r*
Qjk-e!'_pΕ */ߜ8uǽZ|B7 WҵDڥ}{085Z*c:kqr*1+,A& yi;Ꙩ~Є5ǖ!8*( k< ǎBuSlﾏXFX8ߍb2HݔBhe<P!EB=_j~A%^ܱDCm b{;v#`'8
wu_w|c4Y#,[]!u$UR5gK5
SJW1j?Z 7F{-,
ԅWÖfUS.S7_B-9~c9# s0_!G0tq/@u!|e"/ N26de\ 1SC/0u &Bk$6b]oM֝1f]v@
ua`1E= ' > ۡuuMY_U0)߲Sfn3;Dft:-I|c-Q$>0ꁪ- 2܁2.4zhXR
cD2vPn4c#9 )ңj5J UAӕvs|=ʅnh<1#@ M ]ˋv >M D;$aynY%kaic*/wƱ[P(RLC& !C^/T~S
ئ
sCznZ@~o:t04wb|
,#{gep;7 !Z1 f;
Ĺ ti7U1fE CFj m<Ä@|*&_Ӥs -h Fj)вթv ~Z`l":#5j 6ǥpOfc
>cVu jٍ!L'0ʽ%p u"%.<_1fXT6 >V _rfً.D.O8LR~wVXBiіkq
ͯeob@H |Q@(fi Yti p[A {l N(7Ͼ=X$N Yc?z'W-b~Kk 3v¢ϩbj
!V5b2!mj-_t3@2 6m6;Oײus:q"(♳;=| m
rmEkl #G0 A
|Y(oR9t &Á$dFz#F¼i H`]a { 9z(8斴zU
%iGB jQyuabE K
g{2aujD'
e (e]]
Ddz VLJc *= }6
1VД3SG0xm?u/ }Dfks8W - gWޗ0Hd?(YbiQ )L@>ϧ~(?@Np qvǏ҂!j
XuWUnEZWFw<,tt |VmJ;ײ.)o(o1!bv̙ZX@9|za" E r^yۃl)Qgt!T+ R`?E$62Y P+b
s%UrOLi cwSC̅Z>x]"R\>G/
SZ_G d3ٟO1nD<JR}Xl!zKb9k솫[\a`Nr}01ze P4Zfun1H!F@۶P\{/u\4uEDkue> 2r;SK\woP/V82: sʹdOu:3NO [2STRV3Ιyk+oi|03dO F̨ ,E uQ\P`! l.WN s}Yъ %~չcs1ur6`97kMpo/aG!=4kl\n5
rYSO/ejb9 '{MA ;|+zjr=mc:I; krї)Y35RW[X0V<
M ,) (Z Vr+!Y!#LnOX؎=Go5 :U> "T0W
Xүv`\'Z ?2eسP%={x,d:Y߇P23In!uT)XjL0-. gY /g?e.
VodhEI4s广9_AF *mTc%Hb'k``E o2}ܟ; !HW479~TCYz~!7=a_"
-L ǍZ<$C.gd%UM2QiGq o nX, _ P>5zmFWIG d;e/wU(-u$Ǖ\{o}z?EVM֟Ʃ)vmyKcMۆ k^oe~VmPh>,{V2ёY0*^K@ZU91%@k%Wn#2tbt@ QJՈKĂT%R [ Z)J*7}g^GZ u9 Қz eA=ߨ b*/-Fv.rVOgCc8۲ 3Lo?_]?_"v(AgH :a=t=SP6s5n#Qc* AˍhT/bߤKOwSfHkeY d\Y<;_k+Jq_wXX( F~Ka:Dz BtbTq.dJ: Ӥ0V Rɯ=쵙OO1X97'&5[IDKnmh;ºة~&=䠼
юl/MOtG[ )#߰/셶G.pmȕ' 2XȣR-F={u P6x_y) K:NR6h45;n>zć
CwKtZ?^࿕V[IR* v4^M ={)f%s.tV$$ZMgּ= oB%z {7~[
`bGFl~/}K @qg*g̵lte|')OϳnyQELk^A4aT |q@~)*Iu:Ct R~i3EپU-T# иqE!닌*V{Z!SφK<<\ ^" = {S(U)tYYibUͮ" {nkh9q=5}-~l
ʩ%J(v-!6^mp&]L: ja lLJUxxKioҨ[z:Zz3\jӏyDo%Ϋk< [ݓ@T+)vQҔT WC5N)Cd[ѵAɎ$tE@FXOZyp]S+Kz')ó"!e7{c
@ yY{o 4d"9
,e% de:kSsJlmDWpTe><71϶Tpl<{NQ艇8g - ǣ۪QЯ: nIJɎ]:F`T;quI0Pz/IeOү ~- ^OG4ݡJ+XB|WFEI0ϵ(>sJiTZ\_ptkfc,Y\p JqpN;˾G0]]ƚB=:4`dMG0GAk
Uď|$@ʳ7ZKiBz"Ӕ#h>^pkhe|y4oe% ?RJ*P m^Ҹ)ҵ=xqH
2&zVX0$Ts{%DȴYzz1DRvP|P⋰M&0h?E^CsL_!*2#1ީ%?;P3
KGS3YgN=7 Hd9oB]6# \G Ț
6K:yg> ?TJ0J{elcQ<:@&mEbx]ȩO!0S]drߦ֒z8tۇ: ]tgfL { 2?ѕp!a}cn
+zuF0g'"x bZ#٭_Y)ލ%U {~^(l?rlH,#QQ*Kx䞯''X8s'XM'O~:4?iCح-!)kxID\;@)rIơO4thrH+m:jScGWBx#q_|(G^v32 $ L`n8p-#L*T79xGK>+{9w8+B8#q
mr.
M.TNTV+3ymOfl\2_V|*F? .):!Ǻ}+`5<+q,>$`rJ*ae'myjP1h?3`N7{
,StW XI?$4ifz9.Vh᷸=ŗ)~=V6&
<\Q]9CtpV8901JikcP7iPv$c6_RCWNN dw( zg; t.ǿ,]9 %( 9'tX #f8oED3Yz8aOq=Qܤk*c¾bBH
3`r>+ezg
'nƄqi:V5ey5#u@#N6| WNl7kRIgw8V^H̉8(¨
zEGdevgQ.s{C~ ѱv;"]ꧦJ1Afʂ]=m 1X 㖴`#ud)c4՚Κ[][&$xFYWcm-6P>D4' ;Ԇz`>1_݇ a=1ԁ+LE
}32(t1JCЫ `tZ a|MØE *+}Ch%tj}
x̨%
_u
BZB^jgOb>X42>'@"
'5ƁYr!N.#ZV}NQ[ c
=g#u
ec%kZhbc/ANm5qGՉ- ^i\i>w{ nri
>z.̤(eBt+L8c9'wG}v@%17*qhmz"
VT&JFUށ( kƬN=EP$qg#h" `%cx.*N;QjlT * 4ې
eL49 F
x@Vy)CKCA/ ,uKqu2l@ColtͶ FZE7/1d Cj ԷM xzVh[$TlEJЯ$A7&ſi\)Oȭ2S]. u Ck+3ƞ:mC;`2:NMgzR6GG?DĸR /2j;9NUp+̛1l/iSteܓ BuP-99ScxBeլ9\yCUp% ,oNjA#𦼤*>n6
@em7>EV!ZinqrT2T?EVQk<=0̠I+ys+vƕOIM=~*u _
,{垉4_ǞS:#RBQl1&.$,ÄD| 2N+4zdޏh/die[yr ^k5RQ]in W7s2LJjX T}r1eα1ST$y c'{0?
}] h %,yܩbJ!lȦ}? Jŵ%"UA}URu1rr?}6|}_: uޣ _ِlwt.\3( Ic{ y] hH#:*Zٌg9`=KrQ̕Guעr A < hU ՜/V%y65CWEwٳ;m kAyRR7% 8XA |
[=2s(B LKT#8oH0nL0QVpVcGPQ$ (ztRsġjjOBg|"ᴻ [oļ_7n[.JlϢӶ ײ٣Cm=qpw!!gƱ8(Ά>ZmϔU@Wq@ T/6ạ , Rrﭟ):rjIW
9<" ]Sٷ WSq;!-ؿ:b^g?h9 V?:5T =j,q6r
3+tu}Ud
c
]?K)iHH9-ǧ|f+;H}8_;I)o}ni7v0tJ8&䢻
?#!A dFq]t#/]SW+zq=rep7ee],ynϡjn/tHqCך騚ǯ HSoQD(?d 2"/\e=b_/ؖ aN (0!c곮qC3lMluZڛa2 A5 CTr(_ɷp9Vkp C%1!H"/lP0v%M
Fh]}FRx3ܡփ}E
:[6
CQ& Q
\n+: #OwltvB #n å^r(OnRToa.5a1b!Vrcl&%
? Y{B9/ ˤ W%# ,6x$ iVB.HJT|lٔ5%ۑ?M
JNe\]DlDsUʑ4 Pz:L $z gVRyYgHK%
ֿlx R>,I? \N 啼l1 i4 ڬÎdc:dD~]#n*
XTb⸄CnYx4b's
crE=s6E!1rFvk~v, @Ey6SJSUڤ98$H' +sd("6ޑˣ>N.A >t6^0KׄsmK($d:!x//SLB`{ ̺ U0mj`ʦ͙z?4;źZq lRm o
c Fk~qE¶2ln`Ks1@4JK_fWpdVɤu%qmvM \eCN_U
BO!CPu syniOP> s]{f :Ӹ֓ k`+P,1V/=Sjܟ=m HN{2^VPY:ZځZ mlqb.T2;Ԡ2Cʲjs\=_ M@r6__PZWqAÇ]J7/yLL%8&4+?5?5p@ ,MF8F'cE<
"F}12) .
C
_z'HQV M[]ީ,O6
/w T/xNꔠCKL!˫Gz==ث $FD<^}SJ"HYuH<6ysb)}kj?!ʐ)ָ6vDX_G! +$K{@؈kPXk
뷒Aٻ*%1DO-m%^
D+*s0ջr qdȟDMI0%4y Πm-r1 \t._LjbQĂ q6"!eQY'i""μ
ļOF@ݭ-G,3wd-q 4".t- ެ*D+/{3&dh_ ܍ s)2 >Wo^ oeL,ǟ43mx?]: bd ?
ɹ>bZvpޥфa52.hk?|ok7d/x:uRФѵ
Mz@{vWD@9k# -Lt%Dx \>Jw9kK8@:1M*(-wh Bw?x^~wāRA%vhsV!jFRٚ9~,
iկAۘ I8p}Z {.WV֧1B(yၜ&B%[fUn%MV8h.&tr:㹆Z.ٿgS9)q1o o>ڵ;Ԏ?M:v}wshyxXK6 #>KLvc9Ou26,Doiˌ9XD*Nu']$v ŷJ& >*{,ՈZ=I4wNFgE%*J /3"n+.fsv=#X0*
f]'CRIj4 f
lCVy}-tIhkx1?Q. u> .kRy.i~̎/%R~oNL4x~,-#B7T)3Xl\lX}mBs\d7͈AqRC <\Pjy]vsI:~%$ͥa 3>|n`Eq]ef\5ZRh>Y7<^~TsS5!y
-zૺ 9wz'=r&GNZ Jͧm{3|&6SCR^#9aќǖڥ(ګtUU=ʰ0ZDgJk4c1൶-N xY |I+ ,_ )=Oa65OVittS.2$j'.0qD#=SRbNg:zǽu.
*S j`\NVa@_Jx /qwgqC5ܢW
(b<}f}yfk'cA3$:k<}n}T=t'oJC{W%QMjʺ;y\г ,0
@mqC =\eai|6HW_-wnpA_AL{/L2^ O< b*~Nw΄LtAl^K9}øSz
H+
6o.k\ı{nt d5sh:ツ,C bۼPe>/lMA'$x?Ge,w ;|zEѥXl7@b-J?m[ J4"H<\ ?=/(et#CЁW6Z%ZU?9_u5f$=upURb!Na/1;@yzb _+A-盼zm >Vˀ˿dk-XW=&Sx:T-(kqG N4_[.JsSEB7<غ\),¾s_OhL/+XCKʾ#O5 r:~\"=?(/88}2Z;lr D$7z ?`[ ǚߨA;Y/ n߃o1/z1`9h' X%dst[?
PT3P+gNuQ F6rD0P*Ӿ- 9{1$:("-(xFLA'*ǵ TXApx s=ܠ s
AG&c$~i9 5XJ69IP6Nm3U"@"1M:~Q@w s8WN8S$۫Muf.ooxa !dƙd)x&POSQ՞n >rhSFL?$>(Ӻ A|-{ _N6 fOՕ\6` ֕yJ6h%_Ҷ9σAE=
/1J1B,yw583] >OH0 KOKS? e:h{G*E^ @uzsn1#XZ;
&l}bnv
F]Ї3 bF\$[2n_qE9K<}m
=!;Ģfܒr_8R4 42\Ԯ=AǝI5C?' W=^ bZMNRGf3q`x|
W_Jl: xtWl s )Ôx$
Ǥ_[X3 xs_rυX}jOؖ n> w]6o\ %6:S *+ٵarAoGTdjhy{p}( PRfEګ!$w`6xĻ::]@@؟ qy4ݷ_wA #frjaϸ#AoBX {^k06M} g*zVQK;Vϟ\g Xk#.lڡXOe4Y80mzFBmAlQaq!x0
u/qc,/ wC !j3"&QhPoױ p:'tDfMJ;Fm̃Pp觱
Ky@v
}PlOb 20 e9z8]^PRؤXƺ!nR3,.|I*$+Ôjc57V5,/v6 &̍Ha*OWgh۴Qi:DXBeNSKR27\4q(Re+0 W&PtLsz5X(4ɛ+HU' . Ccvľy{fHSy/lsq HXMvDY\W#I^RX h뚘danPe;%x%;y$^@wt5 *!vd, ̞ã
kg+mcȽ郦oeG|%41#?5a@/AIe /CSd-"v\A+Ų93PMg2t!&- ō &;d Ckz $8fMG[^,?Y:o5'H ! Q`7oe\-I\Ch,@ *Mb_Ν =jf^/~5=oyfT>6ϞДPNKqOpMpт C8/:eu4|[+-DBNFyE~HYi)5}ѡgy 4SƽٖW
b :z7P >n! M 65* K"qz8GYYH
oߪ@cI0KBsG{Pc@eH=[dO`W{>dŰ4qV|[SvQjϫYk]?$gM ,-zk.;ю{ l,E/;$Q@U״Ac "+ED(- *"K#KTm/& 4憶hMWZ+C1P$UB%tK$:yΌ܋.@9CMFwsA˸;3qFVLjwyX&V[MUx ܍)f˖8
!_ (ع|ϯt> *Gm! a` 3
cͥ3n&Сr]f2yNh Xw+
`'G%ZaE~w}# iU Vg1oQX]}z4l3{<TCN1@z'Yx1Y{b
'o
XÀuW
YQb1#X!? ő,
H *@œml㫍aʘO>}@Եj7w~
(>ڽ&2I4*u۠Grftx9) SsK8 D}g O.1L[ a2I@GJ _ ǿ ^aa;n* t?8I 41c(En 2i*u6E;HZѣB%,S?O&FD 9 <
oԔe䈰W֞vZrI i$Z1!04;-
QԽ:,$Xg '_ig#ޠ.bR ́%Î _1 kLo$WPp?8}3֒r EK>x1R. 4>bOsXEnY +\x6T(;P%5?i%~S>yBA@54=N.)PXUo}/kŽ
FKht< r̨ %(XJy Hmt}NQIP8ǭnu)EF(4w/dvޥ fJOSatJ,-taf-]Y@SloFF!5wıû$FU+fmϽpRMpo*Jʛ@"١'GFzؘIZaciZ0A?bB0<̿}^-H6 : 6$6O
,9¸:]- מ-C[#NRy`uc@Y5FЍW1ve&oCQcC0[3zϓ D1 }>bЗމ2 wQ`c XPc`|{V #/Mm8r[s[q,iDE5u>erQ߫+VfAjoÆbK@S!Mҡ[JZp0zzFtA *,E8xoЪOk/+Gal/T{չEu=K'k:(қ3 xl$=.=RlI#H=B6 {>nW6*X)4v.Ҁp>qyo tLoiDh#6w]P1E+ղp+'%S#4K@ yhʡ9){C37ªk:"[XݪbOyU%^}Є]-NEXcL+{c&^v>iJ06,FJ+YQ"v6,(PtRkV/ݏ T]u|ՆҚBe++ ,5 1ğ;yP=ȐXw
Vk!$wԺݰ\G
7N}c &Oɓ!T;A-y#:x<[ 0#^I~)=mΕNH٧YRb@htӣ=;똡` Q[SvuoOmUS>Pk#J+9 }Ӄ왠СLʹ?Gb9-d-WKR!S\+jf^s5 IHLj#J)
Cp"ݺ'μ-Eyʇ p#|$G P^]s' -b;Oqjj~A @@FE9ld){ٌSO sYHTZ[ TgT eԱKO.+FbBT-Ϟ+)* lGPS{ڗ,&#Qzs]g$ljQ& ,) }u\&,Vajnp2$
h5~h_8f܂{oc6g~H
ƯT-(y',88|z=P>mKKt
U ̟XtV7te4ZE#!&EE J[l및 v2 wnux`Fr <,'Yn5 X^k4Gq6NXv}L}s19We/
ɑt? <;'Cܥmo \yg$$ WQ!rgI
:ul9^ |wDfUG=X+va"\(6&'Prxeml&=jβG>"
8c旅:zU*a`ᕲ &eܩaz[ B\I w&K y ` }3W?;.s|K?tc9\͔jJXlB P;y A ߯O$ Gwu `y6e[)#L!kl8FF(D;nb -JeAq D (6 w *4 iwd@@k#(sb +tD+2U_A4F3,?'Qj _u ĨԿ!wrCq _cy= tx9"i)p)rFbz @UhR$ؙڴlWVqZ\mZzݬ zLy
WT*er;zmlx~ͭ_ojtl5)+]X͟}/ab ?*@ƈ% #hFC4
|s*"rrJ?IT{ga}
f ߕ #CwֱoA;gc.e`wKӏ\Ėkʧzk^>> ;Q : QfI UW?.nB.OuԊ`ޭ?])MH܈By43ivA[TP^$VPyxqlKaVB
bxuVX /&
MTQy_i{[O>w،VVQhI fB؞/R՟q,O_۩TI
]f]yPGͯxiP
Aɷ=%?
_۷&}Xg 2o,㕨q 0V)"TYjnk<Ջlᭋvh C[kOã53 qB^ |<
vEw]} t3Xl
=&NK HS:;vOl BZ 77~bx/UMg
l) WBԝ6XA 7P9+icEQ6<*vwV_ȄSIAk3)?&X* mkGIO ݯ<ϴ]*kt ywOgltx`T)ցxr8dn mԮt tELTw}qݰGNw\yϖWf32U^'*2oXFwNu ddbu(7.B~%/`9.yRlԈ
ËyBq @#~.Zg
ei[:30hQ,~Z[G|!妮kExtcG,{)/;klfY)O8])OL( Xg;`nZ3) sa̓^GO}L8vz`UtQhd ١dE2Ky`[ 4z#~W}] mi ; jIUp/HBJ0EgK_[sy^ <"N piN)^:7wZ
jL28F 7Hp/4X 3Wޯeg@op'^daxJ 0_~h*+IÅ>LW ifza y`ьFi J D(3/UQF= 6BYS̒RGMxN-`ndΐ;16;b5"$[UDf늸,IQUEc>[e3G=E
7avj Jz\0S܆3N>.,#KQpA] KGGȋ(0]4{[a +aCq O&Z alA+@@ Ni37W!LBmrooZ zr1kc Gc;f ;V;:OXHx+ܠc"t<5Q@_):}1Ѳ&?PAB?u 0ɥ뜥Zm$.KъZׂ;j}n#ACOK LMS{Xy)uѭ,1Mt#,+Du9pҋ6v@#7wY͞{+ m&Z/#A
9@ 2~d]I5ͅ"^hkN`6حZ(D-g . dFvK*>a<f^"D )dec!v:5:|L3G \,TR eXNY֏?otjJ r@ 1(0H}D ktRVagYޙ xzqm6E#+Xcw51J¼\~6p + dFk `T.ftPEAޙ-cʶ-hL} +FK:A1WTCϵknz+l\EU+Oaw'z2v[)u%rhO 2>Yq^1 8snoZ G)MJ52f F"2Nl051UW>T |{ ;k/Wx#EBv#& '>U{"fǼPxפ^HI9W}8+VW*o &c3Yh)߅bY_
Û1, ! g06U"d2X$/T[;Ν 5sJ a~3 c%WsKQM^`P΄sZ>. WYXm-`3q) )Be\bjWEmHg@7 8^]N`&z!f_b)
M p
^85_x!h(+GIUBބ+6bpTl rߧ+4s]=˃wKɻ] ]mW}Qf%J,]Ջ8
Vu<ݩ6eU0 6 #~>8˰ql7n:/b%E˛ʊfԏl-j3t`@G~? AQg=a4l{څ|r\TO.Y7hG]$~zVu4a? ǫVTr5ӆsL^'3GdK`u:kI p!^_1
w 9ХF$k 8=8gBn\get:gd0O?^ +|mRMIfv}+5e@a}xewjr À /vsEgJb_)5N } Bf蠲Z4{RY()'dyQ6_磕_W +(VK-$\$ymoΣzc\@9)@@``rblAj4(Vrz
4!LTZZTG J FRrKK Dg&~] ;lETm U4yi%j#Ҽ~zK,DdwVb, dr<32ce]w{O-UҴsJ He]]}w`y*%NTJ+ը# LU%{ʞިƞ (Κ"_ǪtCx-&(a {4WO4݄:_$: G_ gX~A:Č ?C
q \! s+wF DZҖ! 9f3Z-bGY{ NXq
P35e؍8E֍o&d4Ϟ
}Bt~rN I/ampH pHgurYčѧB @w<>mr`L1nL;cͅG[O}ŊP}ol]QFRж æw3{W dǷ5TS@xV[Au ̻
KǡJ,I qbHGxMc1 ,c$6 |dލ @/]752(JUu<58%'IPɾ22
vy}4h -?4vBfgoaa/ eE&vks PL0YAN*LR!czqRd Nu3 MIwɡ,LedV
8ٛ%o^a6S `1u#e^U'oR`X7v 1-i2>xR_brXfR9
<; $=L_e?R y#0SYR^ jh Q=r+;@F@`jo BZ2`j-r70.Q.o'Ҋ (])! e(xR;]TP8T @
s o>/ZE]`/kqX5ƖWo?_ qCu
Yw w@ޞ; R+Irlʷ̰͂4ȷq{
wN$2#,"J "o_u/^0qW6\?5l`=..' a(a ]Lqay jmn4P4lA? wnZc3TZ[wV PFoA0I
+N+ Ԋ 3h"d\j2 (
3?c7JK/<*?ƶJN.b%?J+Q=/ˆ'g%`o+NAqp;uPћnqS#{aV|k6el3
긃xnq>4 h݀x%0%{
\>Hja =:HNc{X}2Lvu{^b?."b 80/@ " 1dtާ1p>ǜ@"y'-D?8W %GlQǁa$~rLitleV6Ev'DFrIX!Έ-lkjh: K| J{/w LX f6L,UH6}))[ M,t@/d).ؒ8aw4oku칔WԲJS _iʐSr5Ծux(R_Lfp{5\C}J ST`b?IZ\fy6ގO㫘=1pQ&r=Wip0jģ}m}C. ~GHR|@#dJ*qqGg C:*ɤ7: 巋n/BdІK. C(h1DRЈ`ثV Qiqy5*6o %嬃SB_"@# "
#V{tBiYnvUk#u`S;瓥4/@^H2c5P(-E}\Q>=u|LɉņiBL:YZ ,#q1W7v %`H^aՑh D0cUvO ^1r[q[( =mI*
*.
D]]:JSkbA2B{F-@5dÈ2uksA.a]ء= W#*ԋR5
a,9y+NF;%V;8KwFj,Gad0~vkAF GOq hջVIQ%A"Sęt5yb| zU
xOYC6< DP{nt,ip1 }!XGw ư 0aƈEe8K]WAHS98~9JmȲ`jA2
3²mS |!S@;gO yDW=nq{ \q|RU6YǓу] ^֬)]pK:&dR1)z
ks$Z:!`Rc?Z²cw {pt-oRm,7*(/POվ^MZBgN``E zo9`i"IEz:sHaPnT
rBC!:bb32+K[O?ZC<(b)Kr| |Bu1`YJхw1wm榜\Two{7C{5f56SvQ5y@qޣ o5T~ rVb g@X9lDMVl0)#| Ey$_q+qyߎm)!SQ*=NA+&3ư#}LmQTUbm/Ml
q
1=N83{SM+<LME" ؘ+im qܿa&H=IXOa{bvd> BG=k
&@:ʹvS^`F~DhSQhC=-W97#&Po u)LcA)S,",Uf bi]>^3o>בTv/8hraj;xB}㮊#g:kKBx-Yr{j M|ƥ Q4
@S@]6}3sqk 9fh)I QɈn$:t۠UsŞbM-p+/GU5pb#xy [2DHe- M:}e] | NMAqtXnu6rp|oanϯ\hF.8}&Ԃ$=OTã0ֶUR)m=!x> T];id4' a) N@0)8ۈ^h = -l9
Ќ+Q
~"2'zn4U5 zaR=A:ϫ| xb}gA _Ƥ"H{s g#bJ'}Snpy䯳Zf#S M
ybt^3
60A"7r f7lLx1lX ]B̀rN~#oܠC J4eE(@x3@Y MJɌ%T
^*⡹2Ԅ@3NS: ?n%N'G$Pku$[RJ3=b+qZ sKS0B}ui5}J~ Xu\3 f"q9:`BCCU<|n\lN t\rI"@
@|œ)$#C8nrr`2%*y _=8wdc&7F(oGU}B6asw8sGZvpܢ'KM=KGTxgg.r
T_(1E 䦴Ur
ڷ(HdX1|qZ]\X8z$ {VHRv1Tn4\*_=f6xY||
0b75R&K["eb8lTpjc\bzlDOÄ 47F6uPa>ts[j6-*^!9u_ Bvc+Έ)8h D>kv_:}4# x2Jё85ae:Fb{e[Px7"
vN1ucܧ}Mz}Ͳ/]\&ۆbd+fCQւ*],WQ~Vr Ն4nI2ݵJH5&4H,?V1S[
復=7&t.Z و-xd@FB]4sڄ:' ް!38`SȩE #MigE2u͟1'^
dPcr
BA*:(oύ99!Q y/LCʄy r֨3sE@} a/$)D tcv-J 7+2ϳoKpBn_PxjJF`y\YdJ ROұ!Ţ?/ċ WK$2vA7PM%-%.0Mx5 yjE*eYT{ ~=<}0? 5u* 90)-HDq&Eƚ3 R*㹾 0yk4xKG?_l"!6)F_FiZ ŕ8RbB^->5k0[#p[ I`f=l -sht=zDhDr6 Tu *Z!=;*0e~ͅT` ܓm-}&w: )>~F@4yn$6"lv;-]sZYLfT Nŧ cBPd&%^: 0%_VJf|OdD"!謗BY%Fo67ilqlnѮ4ֱ~dĈ_F >AxI@ {|^Oe _ot=6*sOx^GZ1*Q)68잁œ :Nkブ "TL%o&mKD5VL Y U&
c7zn8J<&Py+~MOkz/tX}Oh0lT "7[\u 3( X{i/(ԁ Cؒ
+mټڲўmDc8
a +Ny]br[5HE"ab)DΈנ d A}|v y0=pu:JG{|+ft SbƮGÇwh( =3+LľF φ D]ґ3dXKVĞskX u
U-:"S ai" ~Z7D !ELN+y("|`UZ_hh'ዪQDkW!BWwjϴJDQ{D(Yׯ:Ԫw:ҼT<^G; GS>^VylI}R>> @ Ne+Äg%N@`t`ÜٛnV a2S?Nɷ xs:{"ߏx7 ' C{]G+鑿;r!LѼfov +!KKpI4参zPL7ugdN>_/ fkr h:wٗSc02*R>
dDA6{ l?:LkOcw =&.Kɣ6
>ɹ&@\)ٸتYJ")AL2t7B ʭN%))kF6Q+P5a!1y`NI H#T0]D@+\1FSs:Z[5U&pWqUҒn4Es[GwT.eﮜڞ`< X@yvf{g1P+ ^ڭ֎50aV} >99N&ʵ
lW>"rnö
87k\xDajyhstn1".%Q{<_Z)6D @2xN
,_/M6psl\ ViM)1C ݕ0fs~zjBC:QvQUgka`+
ae<5XХi
r*'ᕭ
ꏪ~i[s9ʀnƎY3 Cz`i-XKER vEk-4I3w q%N<]A9D |_2 _F00c8Kj(8 c7 'qً`U0)LOG-ӌA2eseMu5E3 .*e(g@_3yUK `cƔQ^n>ՄΆao<\NЊ T>x0}G^<Ӑi`_J" Uz` _",".
ѻ(ܵ)%Ɯ
[j+GC/
v 7A8lSb'B̗V1q_U. 4lLtXC̎%vZ
HWyZ )qﰮ!LpG \ҍa#n ,WL軯W-O%gȨfsADO[ϴ_kLЂ[s;+'3-: N}qi/-lKi_eõRw#W:EbŸŇы ̠9Vbu^~ Q*Y5Gw4}9J N;pϟBK};dKur'ܑ{34Wj'i 7d}B*4NJe9Ǜ?I C~( k [D`vu9a8<4Ŏ> >Ӗo"FuK5 vRv E]i
]ָS .>rJ[ƊrRj>T.۩q TߟQ`Gh:H:`TnO.lND>x0t"<51(FgE176"Gc J/.w}A#'V0Rec| $(9yX:Op
ڽrwwRÆ('7Esb[#̧eՍL.[z#5ŅJReNg
2B4xݟWD/)L(ju0`RٛNDMW4g6 BY7Zq9Y πT-:Qmo}Va%@Y 0ntݯxؿC[5l5,S[T8:K 3gmo O`>s!xǭ]wHf}L]殧B߄*M tUvZ#!X#g'T"۸Nt:1J;23Hu} 'P1 ;=dr
],N)і@K)iK4wů ]I!$n/ϻ
|ީmXc,7xfo2=Y-WإJgBc?nbSEQZ-/ _OL~@g?_5*/sJIqNԸM OPl5=q|GɅʄnуMlQ>Z<3iñ cd5i͊U~֬cR,)%+ ̋ ﺕQ(<< ƗiA> ]C7BnK§>Ҷ1+aE鱳_Lڅ x=P_.rB' >k?) .8LW*1g /ކ nB2 By } /GCG&w b/ (Nv)&h0u-~GM
S2kw:o Sem DLZdc"̷7<4(WX osSeBF4:kk(|ٌ% J84? *ǘjT/+1B:6hQѥj6?k4˽Z
}n-)wqR<+8PWΒN[ST&þyF5ֵ5lD"6cź.6-@aZi oT@E7
Ǔ-4;| A.cаKR'~
+Z*Ѩh( ksZGFMcGVUǕb.r|7W RGxE؎0ї N; 羴1j_
\Jخ4z2zB Bt~Ãp_" xT;Jyw(efd
D)\TpX ^<~ Mc~,H$Էq+';"W#j1x2:ਝ7 Dž[@OsF D0vnTxNZ Z|vӷz,zq>=%^n涵f<(߿4
5tq̉rɁfp*d
i:$
3ҭDp5 5)@H&JO0VV' F iNQ0حH2Hl|laH.0 AFA7:wVK[4^ tRP ,2.'_$4eCcLoV(~ S`]8 WٝQ 8lG3?Omq"Nșt"}=Aӫ~] 7" 䵊E"3B6*S-1LsGWT d&etDVt`AZW$5 b2mGTwa:V)cU`Cr1(uGկ;z[HC_ wXswT5\0mj%(KKO6soǍ YKm*Źd坬%"1 |NE$ځrg~}]=ɴVXBZ ̚07 Ky$?b"@u%lj 5"(0|\ZPGD<ف^ho9 f\2ڂsjj_?+yh/`eIPEш@qd |(݅wz< ZX=cbB'xL1ą
ܱ it . ISD 0t@AƸiƲ?w+G=àtf T7MMz.zӷ) |ۡ} ^h'rDy=RE(Jgr)r =G &6RP9 TdDQ =|BEOvMuofL? #08+'b1!XhT3y,|D wu`KR {{r1$4
u.ء3hK#:emek # }9=-Sm'Yl#COGN?qD얒/ԯ\{qT9 E>]շY4,,_L)TVY; Q rlږ%C vUS" ϖUKNȌ{o֟H5+LwEٽ~WӶ[(JAaj洆~7&Tpa$=V7xt"O54WbgH.h^+(]*&.Yy|sFgxJlLϲд"ykKO'Z-S,B% 9,FWyQuz!qr)X N/4zۆNo_mbs!Ef{#xGlMGѨL|Ir>wovn6:ӌb*k+Dn3# dHT{يGs_ tVm9%FHE_{tٷ(:BD.B1(]
yNB1 "xvx -kp}^+vkCf~
J9놩nHf4&oj!eYFTY.BaNG -{Q d H : 8}H@z}ғu$( s7Yqik 5Gk/
@E>Ϭ5>R ) D5˾f}οQ'Aj04 7, @VE,esϻni|Լ ecV~{!Q{T :vtHEDoQ )Ǔ8qSj biG挂'^]nCǛ 돧wxki;Od)BtGx&R0e ]@o'11$aUV,CYfxxdSo
tt,0[(g\aW;/α;mNOp_G*ȥHҢx(9- FH/k? iœRl:x.[@arƠPY:3)~ja0f6|ӌ$F& vzMmܒMF
JX)$dm*gCa{f⋻2Z'@ Qӥ<:%Z𨀧-OE &s~W\0}
0(_@&qg8>n`8:GO Az3 fC 6Q8}DX<{hD^PMt4 ?E&9>P(*&t T& j,OY! fpT5 -Yro*`V=5귩ymH+8 >6W둾.4Lma}MX#Cf b L16 u9'Zn{>ȋW :$z\pN5m-ثW ;M+\}FXJp洔J%Ā\^gpϽI\Z)tzO5gA)0jzYrl돆MW78O0/-Y08{5l5ݐ]/\e֮Upl? Ug wQw,̭v n)? 4y}E\KoPN "ǒB5WJOiU?Cy`OЩX (EZ
cLy˂[lLxv9u_cɝau{ʾf(_g\Q_K
aAZ)Z>{z\Wr+ \%D'W%u%01?NQ3G/$/+MT_
D|qrM%n p/jO.
$_4䄚Ơd5{ }!1Xi UJ@ 𱤤7'"C%
/z/D3\,\nz[OM
mۡ]Z'첬*%l59B5v
; djv(אmLse7Մ襤:a7ϣUmi@~5X7/\
b/Ήd6[ j) !(Y[-CQwelXWV!,6wpƪ6A
%o X' ͬ5
5d
ȽyF#ҟf 1~: t E^84E0g ]!/T
~EO 9]\x. MRYX ~{0RUh@xwh
&U%oDL y:gV'5q+Ik}0h#K%;#7I2iDظos%SZكaD/ah pA%~bh8VA[' %s'b"-VcB:QUsUUzxȪ )o⨼} i3kAjAsDD
PHir7u =IoHq\ G0QQ7MZ1}\:;YVС¸ _LR]?=ݶ{+Y?WS^:>Cf
dV n=T@}@~ =u
H~_lWjJp
JՋJa2GhD=`-
`6dj@]}&"Df8$!Sߌ+*i_\cݏIU H1lQ%#/]Z;*m']FY(pG>̾Lh !
#Ps_ȽX*!壍bmm1> q SMH#2'`a]R5; d&d1 1X{= Hv,AgD**7߫ZILVLDi'dZk&@ Ap㘉 pQI/dANBI?'Lro]^r7w(᳇#C':. _|LE߮=L8nUmb;5X_
So5J綾.Jxv?<GUҋ1+5? EN+Zt) |ꆺ$v5NhDه'nסcA#Iq~ 0yCCW}c6f:=Ʋ۰tu']nx?ZcrWHU(ªA֪]CŒfxҙtiW@#ipgZTړE5 Z.z)2Y dv߃EB
/|6J76$U-`HaD"L3y*O +t
u2m6&3;yOC%;WIND:k_V}.ZVmz~:Ēݲ! ؒ>JMH Tݍ 4F2
jy ڔ6 Bm|^x)oG2BU7Y66cqa`Wrv 1 pA=`wP>괭.]PD/B_F9Dvއ c&E2 wR$@x!lMU-r4dXDh;n3g]cYH
+t@`F8I]+
{ue .2MS5emZ2k[,x0R Aɧ&\P$|,``ΒH&ɔ>8ëq9dRNh3qv,/ONJ=V>_E9:VA CٶmjWԺ¼ae5njC\ 8\G\/&n(3̜`vHeR#5h
R+i51K+2VW<{Bαe]:nZ1 Qg܆Fꖊb+)'8ITmMⰭ44%<bk`e!k6`vyK=(Bfƺ-bzfh<).+y& л*߿ugEw>s2ZsNL#FVo5Sq 1 { k8"cCrvM!ఋ-;@MJxΤT|nIXcz,fA)|ae)JmS:0'P5 f $6Ҕ̐/n:/YAubid_SⳇdAKQtNLң Q>d}ۼ*"u!b5O
-nl
hk?L GQPF(f"%y1, (g@˱
HVoZ t o> {ݰM(,|??{=&FD/ _@$-qY52Y܍8{H.߉57LŰh 2#3J?x gwsz
=Bu0zĄnϭ jZb?JjS?> ]팷ZW9yC f%dA>_i3> @kL+$|!ĝIFK'흾 q$yvcw9U ScLkD=.vǴ(Rŷ&1OfXC"8*+,l1~zYmz
O?y5U X+v lVеElIù`@HǡnqIM7^tν
B^Jl8i CETEc 9z2Lt6Ay7J 6m JL?wC14) bU]+& I ii b@H mo`~
/noh}2rļ2 YTڝՂbU6G@im
@Ñ* ~ Jv* o )3{&bD[\E{U w"؞rP%[pWvL ϐ{FnH?\2ju_kuzAMF?y i 1V%[}wCC'ʳ0@OhwUFO.
:>_m<'@jT㦄 ^
>Do^/~g8EV?x n%$
3'^Ksel.DAe ~-j;d[~7 O)+u
_N*i}qU)i"˳lCGm ՒC&M|,@Hf^-Ij<n{ _7b1˭cXuuV] I~/R V>s='ئtF.i# Ŷ$H! ؽB/Sq|ٴ.y507)
J;!$N-J4MpX.)I@Pi)/>+{i1 ++(4c1K }|W(L
DG) Db'tyّ x d1'DIDX,_Tb*SA^.urS--i\1pm?ӑw]@h f K;]AZtսC-@$^4,d| =Lx]Hw XzH鮳-ՃE
gɑj)_'ɋ? Tu9s /gXk
*d+JfEtAx|g&]@:g{05C;
iy r?* \B{A#
CÁ=C52.I?`EW
O/9t|X,SX;pYDd7ڗíy1ak͜$
{& IGqe䑋N *}k}[V6n |Љp ]mc 1%2'v hwe(NaKϞqmZtg&i(a{Y4ЁJ =Ғr` /-HhGʫvrS= u^SޤdC\&%K^ %6`Q = vSYnsmX)q lvd(k5*J}f?h+d 9x%Vj : b`la
5r/c&D,ӰβϢ.YTЁn
1L=< _Fu`*#Iu>N}*[
y~Aܲh%DgHP^FAg#.
fMߧw(ʪ{&<17rl5QẻGf9k<V
A %+p1_SHѴ~sٳA-
|jD kSX63lBZ#p}m$7 R [hr`q"98-"h9.7̀ %$ N EPV b8cA,N^Xq}@'()~8h<'2} =6k(wJc
)doH&Gl61Li :"LY +nVvQg-Hsfwe+&n"ax£&Z*˔E
5ot cٯq:ȴ
o?,9:`'@^N˂B{E* (} ޯF&B:VeG}L
\C Tt}4A-˾Sl 0#{T`[É :,)28,\]
6s5,;9_5q7)p$:w yBWrJֽd'3,qns7g6N!E Cxn S +i1P ]u `PޚcB6/ . ؇
!SG*maSGC";pvsZlռS@ٳ'lPVފg 6`^gB~ OCqs4D
0s2_/?B K ?fz)j}, Xzgn
]1 EB領6Ԕϻ MrU"n8A9k[b z;ϽS+gIUEql5ja|jV\a.K%cDK)0'bwū4F(m* fEcsý8z]O˃F,{XF?b'HJK,4 Ӫ L&&N ڍ~֚
UpPp?4h5ll
\fp_,G}aofC)?a{'(r @8)ϞOՀd%YY{;hok_xZ]x)*>tbzi
YG7T0?~4ކ (̩kR` ޏY;KP'un&hR=4e%WLL9TS(D!r ,!4] laG_t=M0Hmځhĕ 6jC㳖
aO&wu_+¯Yi@'[ T9H╸fg9 {iF$e s! )HX瀘,3Y:y عnG3s#[k`Ip1Oy k?3Tag2&{|NߒUpr''X3>].pni[h- bq!P^
e̾yxYƂ_l)~ԴWv!$ZeAԭj@?7J){푄>Z {Dm2&,5 2 };.\'(x( G5SW2F{hd G'"{jn#0j%,DIpuIx)Ciɣ
i GpjX
爧3k$B^pkV;]Ѳؿ昛b6$#? Ľ"squeN BGƓydOxoN=wABLmmK SX+W \x`;'d]YVP}^$
rN r;*v:b*.t $b2z~{dNQX
r]0Q:nDŽ҆2rI AjtH#^F52[r@ڵdi寜U> "o8Lql@'ŭMx*F0UGȊ" 'ࡵ$/YާQn'TL*TpB@ ̕tpLO
g# ,7>լ0صur7* `}
.ws ^Gm-ʙ)7, %y`6KZP;m5
1s,
j".Z)x'2.~EXre435g^9}B6=PEaU:Ϟ.Ma.bV:7X_lp.q@=ȅ$Wa!6lL}'
#ـ$c L+mj:B砠uֿ]a2 l:~YkOĈhOH
+3A\(:*/ gLS˔GB ԓa&,g 1"h|7aK|`\>MqJ/d o: Jf¢eX靖:}cHlzd{
]ڼ
86lV*ͤ(h:!5;ÁS^jK(g 1, V`Y~v;;pɪ]nOGXc={ vˀq5y *'H3sN*f@
\sHt6B
OwPYWbcд{n-cHV09./ݓ`x3'l, ȖSJL 6h3$}QL AHR 1֎W )P+BK5x-r949DHVAu&"gXA_KpjOv-n&q|24߅< ҉ g:sVT[Uv],a Is~-DzS̎ixz|6ܽ9#F{0r'e{I/!7-ىɇ0ECi*H~ތCl$7Iv_)J-nFQjI=O] ڬUfIHOh [coUngADj `htxg 1t͂ 9x?>*g _!Ū5n @X siړ4&ţ-&#^nTn)
b8,S4aZTsH)Ga|?^g(/ږmnӋSJ&QT
6ZC4we"6úڛ\hD[
`s˻0t 2 rR9vB#>?mM@+ofE$XFqp|iR{qZ]*/EZ_{ﵪJז#NkA2!Λ$yJ 2L6FPm>bqꭠ'v r ], ?!ˌfeEvn^f0- 9ԪxTڑr4JܟH+Ac=*fnT*1_
^?Yˮh2 Q_Ͽ!e\%ݟM#"F}q 2H R\~v,ߘ͡P9]p²&
\R$I{MrD e ݧ
0+ S?%A?b5bC3@)0`+bwq,Vg t,*iK"]\JXQaΔ18}ԎwL3-<0 1q?/Gg-[^1Vy yd[{{ah}g״(FK(1ҙs\j'`n1zn֦XO Mr k$.ڇi?Paյ^r
=R )\fk !CJ]U>'!9ܦ4\f
V;CkĽ^ҕEZV}G_zD(AӴ^7'\k${3upSGID 8Fc%5NX_*\Lgr )~yJ"4b,
.n>9S"{:RފU4%צ$EA .ZZE';ټ>+;$QиT2zC4bS56: jLXc = C 8D.jP:QgVa _>C5i *a&j㋼{Q) ; T' $͚9 n@ڜ˭ iSX l̘#L}ٶFX5Ah9qED]^mI_d duC=59>ean#V3rki{m
'
%8)d
' |oemm?ɖTŐm-UYb * B!dΘ2ImŬcPP FOfyl%`KP[.U5x:4ԇ<'C L C@ri1oރ{hԌ~XTVz?i0
`=OcgGV6>*8OFڞ!Jkm`S57`П!aFfeɻQ6 Ҏ}ɒLt/KB\L:7qk/|mծ
ay (շhˀ}q?c4
I)*. ƪ L
YZ