krb5-devel-1.16.3-3.24.1 >  A a.*Dp9|]TN6gNۊU.E32ļe X .$jɟ7چFOqX|-җ AA{!`,pxt6>ΪF$vA yW. @ 3!24LUljjj+̊%M3}QȡOA2ÎcMb5fG H9<*.{/GB_}+wF qUβ7)A']@t!VGK=f736391b7f8ded3ca827f6572af4592f8ea2664a5476be64e65d6bc2203f8f1133805617deb210ed55f7de4fd5d49531c9c3e1b8Ea.*Dp9|PG":VJ3H pKzSMpv xv t,[@q HGH [GAה*KVqbv  2 g~79GFЉWYa~ 9-(l ʪߞ 3deV9#Z?/Y$g7<ſ0s6Z l%ss-LײTx78^N'4 -#"Ml\pAH?8d   ?(,8<Uvz JJ J 0J XJ bJ dJJJpJ x(8292: .2FwGwJHyJIz8JXz Yz \{J]|(J^bc@defluJvwJx<Jydz4Ckrb5-devel1.16.33.24.1Development files for MIT Kerberos5Kerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes Libraries and Include Files for Developmenta.*+s390zl32 ЌSUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Development/Libraries/C and C++https://web.mit.edu/kerberos/www/linuxs390xtK(-3t P% e*I-K.Q  _"ud:CT0Ap8u @*J/z[ -YA큤A큤A큤A큤AAAAA큤a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*'a.*'a.*'a.*&a.*'a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*&a.*'a.*'a.*'a.*'a.*'a.*'a.*'a.*'a.*'a.*'a.*'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.so.4.2libk5crypto.so.3.1libkadm5clnt_mit.solibkadm5clnt_mit.so.11.0libkadm5srv_mit.solibkadm5srv_mit.so.11.0libkdb5.so.9.0libkrad.so.0.0libkrb5.so.3.3libkrb5support.so.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-3.24.1.src.rpmkrb5-develkrb5-devel(s390-64)pkgconfig(gssrpc)pkgconfig(kadm-client)pkgconfig(kadm-server)pkgconfig(kdb)pkgconfig(krb5)pkgconfig(krb5-gssapi)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)@@ @@@@    /bin/sh/usr/bin/pkg-configkeyutils-develkrb5libcom_err-devellibverto-develpkgconfig(gssrpc)pkgconfig(kdb)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.16.33.0.4-14.6.0-14.0-15.2-1krb5-mini-devel4.14.1a,@``e@_/@_^(@]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@scabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dejmcdonough@suse.commcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Fix KDC null pointer dereference via a FAST inner body that lacks a server field; (CVE-2021-37750); (bsc#1189929); - Added patches: * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222); (bsc#1188571); - Added patches: * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185163);- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196); (bsc#1178512); - Added patches: * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch- Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079)- Update logrotate script, call systemd to reload the services instead of init-scripts. (boo#1169357)- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patchs390zl32 1630415403  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJ1.16.3-3.24.11.16.3-3.24.11.16.31.16.31.16.31.16.31.16.31.16.31.16.31.16.3 gssapigssapi.hgssapi.hgssapi_ext.hgssapi_generic.hgssapi_krb5.hmechglue.hgssrpcauth.hauth_gss.hauth_gssapi.hauth_unix.hclnt.hnetdb.hpmap_clnt.hpmap_prot.hpmap_rmt.hrename.hrpc.hrpc_msg.hsvc.hsvc_auth.htypes.hxdr.hkadm5admin.hchpass_util_strings.hkadm_err.hkdb.hkrad.hkrb5krb5.hccselect_plugin.hcertauth_plugin.hclpreauth_plugin.hhostrealm_plugin.hkadm5_auth_plugin.hkadm5_hook_plugin.hkdcpolicy_plugin.hkdcpreauth_plugin.hkrb5.hlocalauth_plugin.hlocate_plugin.hplugin.hpreauth_plugin.hpwqual_plugin.hprofile.hmitbinkrb5-configsbinkrb5-send-prsharelibgssrpc.solibk5crypto.solibkadm5clnt.solibkadm5clnt_mit.solibkadm5srv.solibkadm5srv_mit.solibkdb5.solibkrad.solibkrb5.solibkrb5support.sogssrpc.pckadm-client.pckadm-server.pckdb.pckrb5-gssapi.pckrb5.pcmit-krb5-gssapi.pcmit-krb5.pcaclocalac_check_krb5.m4krb5-config.1.gz/usr/include//usr/include/gssapi//usr/include/gssrpc//usr/include/kadm5//usr/include/krb5//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/lib/mit/sbin//usr/lib64//usr/lib64/pkgconfig//usr/share//usr/share/aclocal//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:20989/SUSE_SLE-15-SP1_Update/7ba393963e647dbc15d1ee0fe1458f70-krb5.SUSE_SLE-15-SP1_Updatecpioxz5s390x-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textPOSIX shell script, ASCII text executablepkgconfig fileM4 macro processor script, ASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRPRR PRR RPRRR PRR RRPRR PRRP RRPR8_oxJn|utf-8d939c3a64cbeda21d0fb254dfcc323146b334b017957efe73d4a292af9eb54fd?7zXZ !t/s] crt:bLL /ı\kOn N]ļ Zo)Q7M:Vymu׌IX8tzDW7oINR;uFs {=W *X):~}C],Y^Eء/ܓ Vx}v*q 5¯ {_mzDd7/yaC^I5J-f t.^أMܕC.E+q.ꄠy(/㯌%./،]xȂe\[! ^h\󃦁xh_Iqn8}a $Xzr*pGu*^V:OKQ'0@6iZUtsI=A+=3AAfB~w"$ܚ1}V:ln$B^CGrgsU׍JHl ʃw7׸jny#~;1E|7EȬ$GBjgUy7 %UܜYd9:TΎa.|k'`|a_pPs%c5(Ĭ1U;?We U h`cg33V}lTH?t͇cXPŒvpa9Eͫ3dF= |fjI"hw K%:9H֍t1gihtDu]jF >}S)N'n* ]Z8˥Stw*hW4tNJB ?I|^تkVYz ni=KJ d"^ʫ5g_ӎe7{YD.lwf[Ƀ҆؊!il@+ ަj$ $/*a7a=TaAZh²D5kM6h!3*zTIZWy|X0ha p9UINUбąK _GNV]ƗB$wsu+V^uOY%^?d'~?pӌsU$0K Hb%ӓ 9#3F3+Y|@(k{`MS {1ĸrf6וroMbqx\sŃK>=n!$):icq억S&*4/*2ֳ}ͼ̄"֘9D# ,ѼU(.(HjV8^aaj՝\oR?z_ȍа`]Sc"3NNDWn<6@NPt9$~9f3ܹF:uH5 q]IkQGCH>k z,U+ 07pn%.j^cz Swa0Uc3N9sи:egHg]@4Ԩɍ"t+5 + օDH@#cZ.g`!֤.4gK!m5}P =\v2mbcN^&?TJ٤8h D}7)Sh83udbCm\'YL'88s jf7C{%^ӝhS۝A}%3+K*'+‰T /L:焼))1)&dߔSN=tGkJ4%S)"fRA#} Jah6g^?|ISA+؆= QZvdQm#-A%{G+T$Y* $,G^$%d{/rw7BuYىR wXOUsQar3D ^lUO<|O.YȞ6:7qGv$ \T4">emWWOG{`b *ILtuM>$ 8Z!> 4 'T IJ>NBŽ~]b5=kZf6Amt:}T_*6-23z_j&ppz+iJ7:O x\4VF*m>Pҕt8dwҶH[! 1z9+^$PpL9~|$)ZÐ!Н}a2etN{96f7=׈"r Kuu߈9le@tBpixw DGHI{Fi #xMj`V`q\[bV5L+ @q <>o>v(v1<2 */}(ySpwٰخhԆ8KY~"$ߤlāWn0!T 4}T/q5oSgY '־nNbwPyfgR*GL~2ˬ> ~u%c`GX*L(nKE1Se㌩Z4l3d-HZ_k/+(H ׶uKv iE˽8m"Jp*qڪEWMif2țHTOBk*h,//@8 s!Ϻ.,ku d2b31a3ڜ@?+z&xǕΓof;Ѓ)ꆱ+U" b7C},W8K0g'ԕ6,\Dϧ$=W,pt֝Dp̯ sġ+/ұh͕Z[W2w|7,5TäGMN 889EըQr3JLDw,]y[~ B43"i\&$n(SH.@.j骩~%*WёV$i˯ buVcmgOWL-DTN _@lC4>9"sז\SgՂHg (PHՈCvx 4Y;n qTzXJLucZDwrk6> O16wA9WٚհO)< KaTP]D6mNF S;(ɤf\ ͅ=&8:677wfA} !_~*P`˃۩(sA&`]AoBjm/ۿZ~s}$}(Hb\fó7{U3N<)5,U $h80RdE/KiJ5hτtHvmc|z\AnJq|+w?n|]hT3~PJR+G:`&J`2fݖe# %(RJLmQRx|UP7x t>sXd,;D߼Z/ l䒢4A-jl\l糿b P7;D{!;"I;2,h5 E|tJBfp4#-𴅔h(q:n"?% :2\xnv<8mJG>Mt:o֫U5-@.IMP7MxI9lft+ʶZ^_y7(v|?GpZu+lXR׽iMttj#|Wס,ںZgKWary]}f f(b^w3uL\F3DNHgFrYǮ~ѼnyLtt7O/ Ѵ8Eh%fqd9635 `ub}=",Ru@+KK̫0nUnX,ms~AgNl4)}Q]LӊbCXO9+EHov]r5bl炅~ȃuc+# kT=Ş P7Ng撐)9cBrFoWܳW 9DeY7R{=N1 3ݺi͝x+7 &V cI0L0^/۴aD#^Hw yUn)F`@v!Z{)WIX R N5"˚>9j`!}a`Qۚ,v^)BgYY`UbMZk?QOOgsb:v*ʹo_/w%(X[)<ͺ13wmf4-xԥ^,Si" zKpE)/$A~5 !||T̠mmV?[?6N7:\sPDy7FW_%9h_;Lkt w2$TkحEiHq=(Xٔ⽚.iD!NA NnKYK*P~"Sh Y~E mS;Jy%jg`8iz@{,y7z jDx "tUi>+o7O'#IaFo)`:UhߩL͜w2ҕenuf k0iyTIqYĒ>qT ADĵn IM v ATz4ن|4lmM/=8LJ]s#o#s_'Xkl<>d0)okϐݪP?4J 54mmUIOyR"}|+o*=^-/ߗO$&aZ͑TE:@xiNn͓ pG.LE:BjF`ٳ#cd4f|LeG̼Uي@Vb^WfN)ﮥe.&6U\ _SCm&oVX| \/RݗY!3LC'FyYIxpV`>Bb.C^6>1HF>hevϘ!7*S|~}^VGڅ'L6.-4yh2Ccvm?rqI+\,/b,G8ބ_cNЎ6d@Le)4|e\լb BVy!:|knѲi X0K[2q5[%zU@ނII3`[x#Q/)}kw 1& _A8/ϳU/sXpDGUc-?(ɮKmtKB7RScP E},?'iNX:JGܧC;iZ}L{'۶M'N)Nb C=Ǜkt?}q P1-m-L3nϾWE>"(0BԛGΞXYq>v[ xR,<93[iDL6= ?ijkBwEKܣ ^_/R<͵.?Or$0C\_s6HOՃ#GP=+™QG) otBJB }NJATvJ0WC؛yTI Og5'E14Փ?\LNE; 7g("#GC=D,,/g-V\=(U-~eLMI.cb5]r($Ҹ4ϭ߉lks|@ ſ}(*6 Ngk^kI!;×=Qg#SżJv&ܢ~ጰaIdڃh88ӎ̈́x6l !L_Q=`cyEmW\s|{!!t\S: M3r:<C(szm[M[OLsڞ^\ihh:'Y. BSwc5Í ^^\{y֙2%(G7Eʷ(zYՆt}ʕزo>/{,V  O L LD#4 @;h{rvM`c5E;HN )Gova|9v r &J Ѐӊ]+^q4=DfWNL!(ywbȶ~Bl{1nUcDn |J!dž8Ư~ɰ`%RdQj IY8cUdcj:, }u$޹G*xKgc³dƅT*/ sU\ăD$cl"6ḽJ/MxGkAg!c@S;ulǫ4X3KZa/ @K~wq?b Kr{iL 3w׽S`_A:[F%8fIVPRv+)?о/zg:_ ;p8t5ǴATa8\=.H%_X,5DghA@neyt2nUùpDe}wNä[$/=SPNҨRYKa89nYU*oXoz­[C,  oǀ=V%AMݍܗR*[=;y]s(Ymf۷TNv;ӷpEX"GK&5 {BS!@|,ٙg"/@,z.2S3D&:/DnzAăèzl`9L@t@?~*=(7D w7nPb%{PZv]2vbx7g |Aع|И8,N*&FOOKwMҤhC>Ak>`ED͂'?7 .1E/6/j{l7>1. *vD}5:'] {u%h-;$iײDr"1()dO N3R-X*0);yOP_>|_xLwO(VO3w4[*쬟&(j]J"UN/VLZ.¯'Fj"v "\3iҙtl{jm# C;57<V{4"gfi?f(JglMV';A[" uÒ8RAl(K9|@4np5̽˛"<#`)MT5-G²^^OK7dbٗ[m);]  'ÇE) |Wjճ0 $"WUkl "r>dz ]*P ro̐VS`S>R‘|zXs36C_6n-cֿWG6qQV _mWb+,שUM^ &ºCQQ+\J&Xz *2TYG}ÓYqPN* K'wx74~a%2"X=b p15C{OwFTT֣lGC';@ث%inaqkOzԞ-p2fZeרsD^*2VhŹWdC{.3FY:U.+ܑvT&0F 4nuT_E5r{V"UH"Kb2ğ0GyVː &Uk)LFBv|ļGxΚ* N}q A9' Sg -/O!#KpӧsG',Xq.n5X-3Oil&!1&X/`][FGnYh{7eBQ.RP3/oRӨl4Ulfokҍ"SD #ƥ3HUz*ªfjYj ll59c 98 ˗+@?5& `\G?Ʊq`E4;PkOQK~cCzߧfJ^p޴*@c;֪:qf`GEo٣%q}υPGr[FۖbS \#k>] L~M뫔3{>hD'gv}ǥ4p/ߩ@戜d9x^>h @Eu;-z*9_;hWJq޶RLؒRbG/Jqj̎~@(l_=ql!ljd7_}f!Z"F8ԾE!vGЄ8I~J?3 ix:N8wM`]93'+~;LR }(D KCȮB9{(-lJrScEsşM26Fv,n[MٱrPoв0a@J#cwm&QvCR?n3z\XܫOdN vKC›X'~ 7EױFսGE!A&sR C B1ۈI,J|K2Ig *ҶR `Οid.vI{ ^hl4al=b[hL38 >%̕z5:1ָ(G_|1aЅ6?OЈ7H.`tKۄ;UɛN=wБwKt «>D.85pi4l8U!x 1X„0qv1/"ZiďBoTN}>%i{>n?^r=Ћ!6Ubdz'o 4TCs# o\$_j@Jө6BC7!u[\:}r9j~pPQ\t1ށT' "ۖs(4cKT-r 췘GX͏-V W*\ݷΚ @AyLox~K$yz\aTc'~5@F$^K)ULuz8+ /Q3߼{ku{ma A: iquB] 4 szn)FoN\3fmC1}2v8+j}@ dkVN#wӕPvrd֚ f衎SpCmxLM }(oL n<ev#%5%^@z*џ6Ks V2A]skFywdklMp**VpT#)tRx -!k[ 3#+h A-v9^ֺZWWtf PU᝼=AS(ծy 2NDu"V|zYOy]x nI/E41=F*@`]_ǯEo@߬l&f{>z5ZY'G@Pl&]T3Ù_K@yѕh'kb~&~a&'F(z єkYSl= G=REr: J2Dċ /<&Bf %uB82{ ׶^ V& 67зG^ȣ'%(^1tVz(!.;HRcTh]tE@?,Lg=Z NΗ=6sP1⩨j8JU6ȥ 2rE_zʃEhC FZ<|߹U"V"9x3PQ'E"(cC%d% QCe^C y%pVъ"dQ0izx .z]Oɦ2}s8b3.m~\zϐUq@*jS{q,Vn3h92_E08ef k xSo g#y'sܬ<8bHb0X㉡?'s֎MiT|MK7K;,㟚`v~u >}onQlul6tYM1_2[~m/*EG#^c92 %nRG~S4[M }I{ (oPI]%P71v,^ *Y'% $?"0*AZ!T9)BA},&|rzY%(dSI-rBXU=IO^%q]@,on4 Sn+L _TyWN{x }~[^G8^z/!fw pذ&&m me_e}*)B_PH}0NѺIQ+ _."DaycS8Į>%# ^Pqu)DZ_#Ka?u\ Ĵ]rAG,^ puB=ڸSd9yx&vīGnK^MB#QL(x῏H9ǦR ԂMZ%+$7xn;%.<=yzW#Wl']緥yau=$!Kҙcr^^&A 1# CgwYi >$P*cr>F^ B Q&!+پ ޘF@URKCXSԇЇ?/Jsd[\C:e2`h]IIWzИh[/<VY-ҋOE-l8A专:Eq 4V/#b| A$ʂ~a4" }(}RvI8~ݥMSb=VW.Ww9^B<~-mlsI}>PƔF^ s*UwDWEƩ-v UΉkQB8L7!G'EYWީ)?HO {d)SVe? yg>zzVF[8#)OWt)9?@h|o૯r3w* G?}0Bϝ3f$sK$uR<" IĂr\G'VL c>_xjjH֙-' jq))_Q^:o(oIcg`sKU+A0 %?4^v8F 8zN̝r4 on;m#_jT5"kRH^p_9='4ZtS/`g-@&k[/vh6}pFK}ږ4ejA3kJorù5*Z\b j]J y;A{nCf\+"uV i1 =?o#..1Y}pw2k<4_{ 16Pr(.n&q& ܆ (jzC4.be>j4lf!n?,_U92N>ڗz?TfpXd7:x&|>E7a%/+7' tBk'-Bݱhfn)ګI005ae3SxԂf,diRcPy=/QYT\::no4t6cW!GzHl@B Wn jmg:n$`۳#pAo %)Q2Ndq=xƧ9X"@HnS+{z pq{ 074H = =[y) Q\u 3.mMg^i'LLaz `ϝB*t23?1vLI mRRk)֠|k/$8{h% uqaJ?KC2O } -ټтshxwio :)(n7.CƁN:4 %k=({[$H¶lbwƭi)qh-DkXxK5nxC#&Q㾒)\%S@pA3?_ۏwAq>0iW+|AdjU=R,tiFǸ,:|.}$[#zO{=b 1nU YK%ލ.Ɉ%f3K_+WFrmYV(4wՐG^ ْ,ѪFZՇcr@A>ƒG”jb3_nlngvb;uC*}N S.GtFrvp7 TvS7*6/v, SDEbت *Y5NLa{x f^wW 0.+=)AB',cu:y휮X>ѿmXs(X! Rxp^Ik=+#uVyH{l~ .zx'hK z.K“])V>VyV|2fﲴ[\:!c:wsiGp׈ k |ùH\W/Jd]B8;ӽ;[R(-owJtˉrMW-뇺I 3 X0Hk8r/V`ԫQAl/\SH*vpXv^ҖӲG8!ɢ8h[51u61NNA;K^SDNT X" Z$UŲ,ۿ&:iLPorxgS\︳  L_m a|^q@38+𺰌`ż䘲_l$W| kDa$Ӹmw@A{d!Q|k !n ^'Afž4zWgXd_iۖQL6PH@ ==lAosoGl2`0r{P;;W=C5}d"% %6",òVL)l/Zeѩʖ:)/V=T=:Rrz.ɞ9VU_wҾt%ӧVĭ/ݒ݆ ) z (E"G9[k ާ80!6V_D)$f %[=x,clH_srJdO0t3l^=j( 9F/Uܵo 1 S6ju019mE'ccfg8ⓡnDu!rNR7椞A:A40AX v-}^B(Y>?iI.VGU#XIeY 芁crdot/ST|xnyPuzv_y$דqtktC L(* *p^#]ePF!h:žI>ތXNW"r~ yCF8{oozڛa^s[e.{0|3NX]աc]R&lG ^v"?tI_:^уN2)IX9+/ 7LR(S]dn<{`(rBylXtY{p*ZELޤI*٢rsοS=d.,l~9 )593-31p FRk}޵i7ܷh*ƸzQ\L`[FO1vr  M!Y,k2NJQa`sQ|3?y}0Ǹ֏k/=fi.KT.a({)=.Ł [,[k;?~y8YƂo +~' ǓV8zO Y},1IVs;H\ae\ߥx ~ĕq4׊H{TX3,Fh_5J*jH`Wj S}b ʢ~>x9VRz <5BHk*]RGذIwEAo݊ߦt!pS9Ch{N$h<õ1Oܪ3W*w[EKW7X;=Oص}|R?;4K0ؿNLi]}HL%Xݽ,T ꨼5T:#BqU.Yl+l¤3W Q^ ӔTļD 7_H܊ ̅ ƶ3' |0zRNIk^&tF QRN'>N,>/ ; xɭ}ta_ xRR@*00 o0^Awݎ1p7. ) K27ضEOsQɅFZq2|Rx"̮18 Ff@x q}֟˱I}٥d B{h\I13gd~y,5HMQE픟#t`'# 1dƦm96ɪ项~ ? AL9$BqL$|+ s*BkC;O)GSyt-{e~ HkP:vޢcB;wAxVefj{֥_|MexD+`#Z`,}JiP)e ·Wp˞36EGr耷lp ?* M(ֹ\1}R 2|eyGnfu*=‪?{'Qthj|{?Te<(\xk?2=S&ޡ-~9Ρ!PMȖNM 1pG1.$nШ.3=JmVN !q_y :.նOCtK@j6#Fg-?[R>'Rڋu߭^Ry(LkLQ w rEKq^K۪U P7H98̚#1贽_ZZX !%H /ӯ`~7,'}̿ԃpS,NNh~LVw꣼ y;-a'Me QѤ[B׫QpAQg]݆Px>*V#WL.׾-~(Mު+w e^ knKw|N.~RD&rj]I 6rfǏB#^-J")##2I^PًIb)B$؆VF@C`8_>-0VP hmm &`oM7uz_NO61|“tNdJoki[kz-Sq)p޶ 1|2H*V/3&ֺG[XE&Z-<Z|Ҝ>ZtBI$lh{o7m2-^`f=t'~}҉$|Ԑ~5 FAmHڹX5tl qKH E^>Bu:}jjvcvD\y] W'\' r @D%J[E1/ɀDGhcX~aYZlqmG?afnFi+X,Br>fK2ҴB'prŢ>FAoWwR$DHK㪽.Cz;U:턏&o$'C)\>6A$T1 a:X4: In "j=n89G|c4ۦYk>#!kS8}#E_8GIiQ$ E/ql)P@qyG? qGIzEiiXz048a\r-oo_0 &eu>:G+M.8um;/Ӫ!$.:'d1Bg1=9p?!82Y.U:N*isPzRյ;çt|ѷy ]:S߰v7s)oTcH'/բ|Ҷ<:L<X5n$ fhk |ѭm&9t PL_ M`U%}Ln8}ti03rJu/Qnw5V!3ԒNx:Jun6:n,OuE~J+{T߾ܿ&2Ojǻg 'tXXmS2Ѕ+ \"/^r%qެ&1UIs!<.?"{LڴL-ikWZaZc؊"dME_}!fw[)Ax1Π0&=xfA$B"d}[A| j2pW03- 65 'k 2c2Ujאwi͡ZmT> B`gIeBrLV*\(|P<@ږU~oߟ,)LQ7"@ wӫp]4 Z+x}-xCMT (Ju$әWПq@LˆYC0}hU'w]<"2L^F<m&)+W&=wJ_-0[myΖOD^HLJe#ٝaӕt Ьܟ3-vDȕ6 J/m]恁:}Zz K) J,]9>9TGo3yWC !,6 ɉ1$ankjӷd@Q9]/$:Xp)'FE> a;񲻞jCY{艆]o ?oc svs$ED^qxO@64>tjyٗp xV䏤y C3?f5ti Bмsݑ { OxeҊx;!6&m1" u0D!AOFp%\lg_weVRםw)x!#?׶wXfdA+e΁`#b$* GjBi!yF`„բG #w;U3oo4!ͫUW뽺qgn@k@m FzKnH^4·+4.Mڏ7 KHRt1ImWĀq" , ϊn;ӹN!T[,@ZXw(} $|3 ~*B͓eZ=(?. %e4Q|myR;/l-KWgh>z)",yXi"]$SuRP5x j}sYIHerv)89/aʲ kX(bIeaTOCJ-9:VU)D1K|Śmv^-vPwCpx W4ѭ59N"z+#BIl Zg-JTȶ6<T#6􇿗Y<.}pL&wOW S#⡧$#*)W }?gcOh9+_)6 MjTh*);XCOI?~BMO”yم{'< E8ΌMJk:ukV4|C##z"WRn>,x[Z i_ݴx{zKkdBD^pHiA 'ʖgʚ[+8{޵*9I%ͽ(N' ,9J@f{,-8d̒I #$i Zh~j<ȫko'v2=\+Pבir饦O #wB.lٓ q̬ZX^\DszMf? @Z=@jn8U UBje V'x4$iD Mɍ@\{5I.C7}X pʐkv^3:]J:Z[ʳq'5qrq؁B2Ddjz (RRzXse|Ǭz)%Ӌ 1[$zڂ%}߇ @c XS՞(;I-8?1qzC1}ɧxՋa˦^F 9n*nRx\O>Yvmڷ/R0] \I+5U-hجv|tqS) ilk &jRI4 $ڜ\4zS :moj"}0lAwK1bRT|1 z$vq(od/+2'5- ;~/N'Nkŀ VVg!LB]4&xRdfep6LqОSs/$@ѮрDnG:q[`޺渝4^0 v+E)?v I ؂3 6S?!=1_0l,ȑ Z '9j> _RЇki &sfv+ eoru AqMq޽z5@xC-o [ Om '-k \Лb0X|M9<덡:==6}uud{\Ss5 =GCϠ%o/7yOݏ)ڦ ؕ Q )n"v̴33IHQXp*% ֳu"_˛ƒU4$ <:MIQ*ƛ~Bקбz"Gr{u@$?.M0B+ZATL4b[>Tzl8+eP^Mȋ8 p̊Q/Q2ͣ1kbV'븶M \6U8J#RƚHR OHi/YEr{''! 0D;0~AZbŃbd0d_R|]R"4rZ=VCJ=G~E6%m xs+ۚj_C#%/Op&l_p_Ww&c޺kQKOA3K;ی\úX JȂg*|ϗ|㶱pg%zWI(BkH%0ox +\?Gk`EdxaU|VTT խ"8 ۝s1:GN;6mTV۩`n43GeLqjtUډM""+.}6; 3" R~s[ke6D;;Oa } p?^ VO|/G ~TZa*xä+ncR&# $P88LM"fKŏ4- WПw~6prMdTl' X2I\ ˷'h@3Uݐ-Og3,⛕sOXcicz !`,Dca0EꔅmX5ȊtT'ɰc3fg]2 K)O]=}d6t&74x["b~he GvL-*?jv bƼ| gBVePgoJhyM@MX)7L; 0*Ţ2f)kq7 W7fTm<fP0$0#Z'G(*,IȄgT*O4rdDps<Ұݒ[1)&)- 7_?g 3ah+?h8H@ +Lqe?kϦM6N쯥nUǯz Nvy8s(Gm53 R2*JlE(/p41۱72DLu#E(զ_6-L`AX71nB{ԷP4iֹ~Z1l?ҔmR\7ȟAnhcmI4"3 9a<`j>/SzB|Wx̤< )nLLT31h1 .Q53w5 {Ȫ[mf2ADN ɺPQT#;ǚE&aQe*ye IEiP0 ='s28#*iCbv [3T :>pyO{}E:)~a#\LM|W$c*66:ND[p,ҁt%䆟kzD=znvI3,>YWo^ Uٱo _w+d EZ3u BK1U׾ָ}IC2Ѻ-w?]DUs_t47P R"{9q,F S|YWݯD)SΗ r& b븩K,ڑL^ w 53j*L.G1ߴi~F@a7CXy@ O(P]9Bhva[}CzfIK#ǡU ˛6׺]%B6(4Q^FL}d&݀&=tĴQpw {09]p+ !D}LȯZ"-1U~ĆX'.w4jc/5#6NNAH;kEx"ri;89"WϹd3v `RL@2!:yh?|QKŖ4 Q9Z N>eQ/WK 6dn|e*p"ߜ&`0GJ8N%!$ -K;ke&wB'wbM+na~:0.1O )Jd')]oζ:Gړ_:xƵ9ECZ :a?#[o, j{ 4Z}˂d;ha|.3{- ?})&;˛;h!&`9xiIdsRK"uSө*ׁB~LsL1i4jʈ'vd*s1,w_ J_V,5d k}Y H`B%bA_Hzj3/_|J蒬>l7e xi[I3, s=[k T D_SFpkRW#FGL֮Rkߍx %WQ3z^6!65陆񝒜%m46JxM;wɯbU@nLA'eax qyϔ20/ ^M!E=@zр!rv ]`0tXabɬxoJs^k~VB!$8 A{k ##|_pukU5^@} )Cf̬:{nG[y@\FVK8!rI_-+X鲯A~`XÄ{_=ͻ_(7AHBm$Zq\J_.ommh ~tl771O.Rҕ᱋es TԈ 4p^DKlL2pR/vM"(/_ d"(nbdbK"scKðRlCd`Ǻ˜0W,c;tJz(Q$)bWHfI1gDl4y%0@1wKh?wA1¾ ![RK$%M4%OF6{4RjǾbw+tۭ~"n;qC8| a 4,FTȐ.AAB=$tjO30+\QO+=BgW^<&φ-gX 6adaQ>@*KbD·XiR{}lg'V7E>{yMɰC !~ߡI$̣PZDBDC\G]mI}6`w2jFͣ`x;I-oV%BB%ס0z*"͂\%MPLW榴9X,iqxQ7'glh޻ ɑ1ͳUep~K}ʁ 9TM'='G ٦z_[vcȨe=נe)l#;yx]}EMTqM#~L(ǜޯz%vf%-}qGC!62QjN˩n9ɻnja?MrFdmás5') UBB~ezLHO0鳵p&ツ)2 xGl3DcL"p3yCEu_c軷ڐGbQcrΊ/<䜤n'zL;FJ͖Sl,ѱr4@Z"HL%,0"=pfYXUNۊ\yNozWU6+p ׽'vZ Ld)'ZjARZ;u?ҙq SޥlLPM3ckR%F]Lqۭ%dYoI?EA^oV^Xv|&tK7*Gbi`%Ǟ;$ʭ!Z( T "/v9[lKﯼ)!0*,<2>1sݰO{tH-귓b235 \F Wù>8iE7gf8#!U ELaGꆉXb㾃m IL*胹nvJ @N,ڹی%I {6666kEl`#Ȉ\Ujc@ %(>=ԃ@/̔{|;Y-hV1GyzH2%HW[=Hj M3L/F3*E'v`knïnڼZj*nKC'fe{z+Bu֟+5Q9qqvYJTRXB %}ROƃަ@WR&mq,3ˠR82{LC/SlnPԜHA1/ ,0ɇaWIZIߊ@.f <6e*D[!4zR&*9H3"DZVɓyk"NZǬuL=aA*d{v2C~6V';"MzegO- .ceo9MF:O4L״ȆCKgpf)%eT E/sl%F[q#IdC@;;ZHNSݢ'OEG.?a >7հʂŖ<kon1 Ar2^ SwZ`t;#ՍTOVX kf3w\1 K$9+xGA֑vSyje;jP_m 458pCY^\$/ԛ %rnF9:<0]jh/c+rkNeDŽI*SjJ}'1iWwԴٹ-{_c.5}r3vat }V/Nm@LvVہpp*2Y8‘-ڛ{Kcbn,g #+s>(i\`FtWvJ/Z!N;gn>#䆖hPKWΆD- 3)=v& =)8yԺwNb 59vwGnnc15=H΂V0oKWσWcYgne #}Mb VId.$wx5Z6= ci.I-U~Ȇ Y{Ibrò>Zp|6^h4}TWlƙmI)' F/U8H#Bm/~ڥ> .eW2?Q)hi ІnoU2Cjb }4ҔDU[4AIgE,u$Om>wÄ5ߩA DƆ6xq?v_Pp*QGZ^zUJid3lj6 )A1'jL U`z]T.3E7A2i7ɻ a6^r%3,J%q&OƤ4\9pH%(OJ0'kAxԨ LkY/:1".9mՃC1RCW3 !4C'wTARr&JD1cku Ʀ[vg ni6^ GCD2,$.Y6g|Y\eIߺ5yb`ʉ}hyL 3?ғ29D\aT E{%`C: d). U]}>n?aB $m&081hy Nbm_Zd^׏j/{AQTEʳDG1lYdG/t8.(td00PCl6R8I<=|رG4=%tS|p͈^/j+GQi5X0G.\n Og7W8Ds0R0qvau]|&e2\N_P} 7sr<}1f{.(d~]"Cnl\viD&4}>km֨BU\Y>! t:Gӣ'4]tł0l*yK7A-7#m-ǀB::mOM3'fYmqz#fvxZ|NJPЂojեKя1NQ|ANO=[{A|xl0X jtB|l5',/p'i7A|N\p`A5VCzF>&B=CL1y;?;Ke-䰴6'[Ak r7}"iUA6 Dx,h ϚgXth=PN1`xt7Pv9" B*.b^`Ə:qB]?'qi$='#1z L`#3R;ࢨ<5e*/%a57kJV)?__N{f#${t3I;( \>|[7ZOjY;LhfoSs`9hvvA;0Q7H?!T"cp`W%R- [D67ΰe0XN9 I87LY]f|gCo+f~ u #AʺjˤS%Lؗ"DIӀ=Fϡ.*E)2-~hct&kv&"kg D.>t\DQg">MjFs\י#ŌfI&J9i\^PsB<^FHE_zBmt[dzuOj[&*D 8 ;Y3!8cFĂq<]xj\hڤR>jN%y63σ^AְY÷Ykz15@0aPЭ)Э+? fI3En>j*#ӂߒ{DWHA|+D//LFыL ͘qePez3ADQ/QC}u [ ?5͎ 4c8tSF62Jt*=fx*'Z<[Uva fh&vH{a_ 1@xf #˥)zK߿6R0GU_%<84a muyyJ@Θ,_FJ&<Ճ!F~ -٘1JU=ꇊ …xc3/,WXsˌ{BS 1 2GCf (<^_HoP,͈֐Z\UxѭCgzEA35v2%tvߩ§] ~8!kL% HڋB6rMZaq;|C*SPB +2EO,Hwϋ׋^&[.kmBt(!)7GXt&'\v]Ue#t1tU]3M&c5crm<P4Y$ؾЅXRQ79=. ~(y;+>EJ4gyv6D3hАF 1 vӎ\`_,14FS zoGa= %Q|d]ZvwýZ/Jc"VF"QȮwY0iJ 5]ޠ͔2 |>7?.ӵ}UJ4ON힖;ٞ7!/iS 0ܣ }nR4AZe%_n,h%X3~f_z?S>5Gevx%G,f))vü <\ˇęzh$H^SʊiGbVU&S'<׎l ``#ZpoCAL8Yf َ25O +%`τ~sls1-W4DЊۣ$naSoκs@ct&W]&a=< &>p˝* L,1@|V r>OPMTe|Wo^ME^w=1cm7#gNMP"j 5#S20۾6kRիOC4Lnt%6WOt;%zcbXdI0,1\cObR\=Ug Uو_lM\]hBݢ'&ʥ|QVO\V(H mb{z/aJsٹ+YkSLK}tZ`&o|P4ʈޓAYz6Q%j#ߧne¨3Uji\02C:ɽ+ OD3хZ*M)۫R/iOM.b׈,qdsmtmP!RMVĐ|=tA6S̉+V+oʾ6 "Э;1a4uoS8?-&Kι2 _*kbr_%丂 mƫqE7jW^E;gK!h *IrREY5kՌF![>G4TAn沒4NP\Ngђ<)(tYKFəR)E7x8,:1[샽 uMD{,+B\pyS_/hUѰ-?݇mx ʳcwx}ءd gY̊Ѻ?[7޲rbc.SZ'Opii  puII:n)7(3 jَZA ˇ+N?E"xI 4rk\:DGPtj,5k^s0Zxx1cOnY{fL@v֩=75y3d]5D;#L+G GЛ2>"=m[Wg;u?E]?!.?.O?K+Op\\z[㴻Ti҇C2" 'F]hy 1 ҭ"B~-hO7eZGD1^>TBDDvkQ㠝 l:U9 -9SG@ȩ J2A2a&fq&@q{t;sSC'{OUqMr] wdna]^L^&LEEw~2?mM KTKM C5<_O2nD::%>,E9N*`*iI22u-@(Mut_ &.vPR U6bqbn@u'XhTR$^ BNQk?mzrѫ " :|/@2CG55K U7+\ˤ[^وF=۬عJW &8mSf)ٰBzλ˳m#ǁ!GP8 ,Ҭܖx^&=WĤ@җg_%mTY 0~ '怞7: f*pwEz@ MzRn)N^;”zͬ_y ?986v v~'غPiceLpiQbo9zl p}+0uF]%r Ӝ$M'C)2OiGr~@>N>z 5\l]<7E1tp/fׇċ*Cv5<)^խs Y| -VYm˸unkL8`m@uh}R'3j\+C^Gw X!W tĻ*AQ~250PU?qm+gTRѷ,_Xe۲!oRTvq1}*P$em*M b4*=RVRPVƔ&pWKڳ `Q^pГmMԠwUE*l# \ j:rUFާkgc%썺h9О>z,9G+q'}☠۪SO ~Cɝ r bi% 3qdc\ɒC1Kj;>ֆYqWhľՆknR(фf a f~qi1^ⱒ:\udYbIX*\A6X==W5mRn&NuVi8?ٕa3|0Y UYYzJk5-p9)Se\_|{HWę;#Tհv){?Å+{5oy{읫v~mt8^]Һ7vpk34l6leDZո IjjPLsh(W b˧( 31etKzSWfO"]ڻ;qn:0 wf j*4#3+18L99vQ;;m佉Zk^Q rjAK]ADٵH17L6E //@qOI㦈Vsok AtB9\%ps$D]Җ^iPGЍ6ŠC=l20Royl̖*&GA k̏%W\RcA8];k-54(rr> "nB *>_6?;ì^hxa箻s|<ߨ}tkfOlך~:yuȗсOCS__LV#7wBG_9pvPЖ=D3*C0U> vtgSC$voZPk'haU.6Tu'cbGVRγv1Xq1 VA|5+$F شg'=u`Xb̾x^ 5=Yj&.b+w#CsQIBx/ $Jkj0rB\ Ǭ!TƄ6N5(-nJ"MUҐnaQQ o[aiOR Jm̀̀qZ_csVq 8G˄z=r !gL}y@'~eXԚh"nSK Am{VD~Pרl^\X@W /߭/i>6FR؉LFip|}koی7I wzuXqSrEFݎi]~n{ d90uU/ζבr1a)xj4euVt=7ޭ]LborY7cb]}켖Ck=JWƄ7QTﰴ) +6 Ev V@7I/B&_ aH'e}QOn`"@Hȅ@iwY[R0J0ҝFYMWcHHٚʘŅb+h-\D\w "fZ.^S !s.ߖ4|&hVWcx:~[0?AԂC7~/=W53(S2Aj zRd/+z^X@JEkjppxm$. *9Ma\5%#(aTn,zRWأoK oߟUBK?A %i|޸ |"~lG4UԺA7uʦVB<e^.Zݘ= ɫu=!Tk!.s2rQ㭬ݿrUrtstfw ( DQl">( Zp~eg> $N4Dǝ:}tM7_Ux]Gr`;l6+Glj2([X-6-ŚL/)nm*UxBz=/LawMR}$j}G;*m<Lob[x ?gmjyN}2TWp彇NiI*(u!bl>ȡFUi%_,4[eEsGfyr Tz:%m} -)\ߏn1{xږ iaP`qEU5cl;;7sw]rWVc kS/?M[>pǍ']qR2xf4ۆdUW(i&N7!^^ϘDT*Ew5Tg}y^u؆Z\:Hʔ J!!9Ǘ=/ c#]mBL Xf9]3L ߐab ny8X0kN2ճaZ~%‚.e'F@Sih)hoi8fX} # s`9^bV+T=u!uL`X-cr83{EV9?q) MCI=d67ŀ}zX-2T z:$%چFYLKnisZJW$sWv#A+ E_PF*J4o>vl]*2f(8R+ܿgW&!9[>CX1߲Y[hb |1 ^p:03}bV? Sj0Erj,լ7%RK^KGIXU!br85 ipjppzΣK5f[5VM54+/B8FXԠIkSo*}Ġ=7J vXJa/5{c>ʹ4i(Vmf*>d@["t=v΢>EYE`27 ,C9-WN="/$ŊEf.GGXȫF3^gd*'WQs%ҩ%jݛx4lϧ)?!烔z,(s@r>2C€f "*-U`aЗB}Sw„* +(Қ(c m܉`mNPm?4S'XS<:oMcgOW{~gc'a w?/}Ou+9AཱྀG*1y2, ֓7ydWϳĞGsM cY#< ^mZL)eYZP=I3mw2S8dKq9,L}`lVn M6`ҳF6ãg4wRxR7*c24 w(bMa'u2+QdxNbƀ_6lu||fnx֮$/$s) p0 t5uV%~"k_-z@&KKfC$UHe. zyD"A"XWb'$|85vQ =˪]ư5nȿwޔG=諔Lz((x0r/8N]Zt LzYs%>@;$ y Y|>ȷր7gD_XNK2E0$Hh16_Z 2 Ӈm?"<)c"Qe!"d cڏOD1/|x# Ë&L7lԮcf̤Y ^s4j6/~X\٧[ɿoVϯDju 5וt#0#"yd)%ˊo7h%#?s vLꝩJ5f]̨@4L}Ηl-612$l8頝@d }@R8Rn~ /{Gk_BhIAld72Iۨ3`ktV阫KPEJ~">Fj@:lkmpVU1MՆ4ĒoIQhj_tוc'g&5)BVPrǥ}U>jC5!O0$Vfesp5z;ThbAV"”1BY[;mpgg *,ob0/a";V{u-oiA^JxV( 9`dkn6Y,nr 4hhlã궕BOX6s,G%drqaFP9/)f䨧L usR&Vzd];}q~epw*g%("U< gSԳx6}mt5_B^̅Mݙ;X&?w*G݀UgƄ(]OC򧫻/g!fWM{y p_χp%a1R.1~̴Ӊؤ eQ6r ARi'/>2^qFSA0 D yLisH_3L~oR oݡ0HI\[v+!b^ dc7,~TTj$%/{^@wE_D5ku!)9[>quKE{Cc!˝7@KBs9cHIt 6$J3%X4[-:YN\"rly F3"[*">cr>[$wIY8Md 1HOO%}\{fЁ(O f?h$n]塾 aUgB/ՑA-;?s0ԭd֎q-puL٤j [,DJC|w$ ~'(|6Ycz6[5r' FcKgU@g1=`|X'2RckVHcMvDIIS.zmVqP>:QYgfC- PLx'4Ł3$2l=U +pn 6u1|NObB[a ̩g^ξзXID? hաj+M:HI~s 8&;YǞ7n %4)b֐m Wvud~ >-dB ov3xV] vlB< _+ulg`J Cd9` V{ں/-[J Q{}XEh*ҝPpOik|m mR`Y~_zVCRVaF? $75Z1boS}+#aNIg? OVwx&߹:Lf5GIy3"#h[^J < 6c0J"dV@-M'|\&p1)H0pTĠÇ_m4.dDjYxh5Kyڌ*k(OnnC; 0gxPiRf4A>}*Fm:΍Eew1KG*liRM4o}=ZI}"MwoO 4$θ6.X$t߬u<~ L[W:cpTy5{63O~zŹ5;JUp)1.g6mc^ş.N0H#V=ADoZsHtlbӞ2ETšvJȸͬLg&kJ`3tGKg&ۏI )ZCT:S5OnM),^3:pF dl"M.פY[[I7 {)PōӋ:QN9%nX7UUnTO2CBR`nǭ|ac62s5΄Ԑu{}\\jѝ:UМ~x@QHY7/j|W >RwK?dOtU@ ]"-4,]$h"Ơ^"aZe" aiɝ!zHA$>lO05e`,^NR)_6"3AG~Oobx \ܕTket%?z޲3Dix]HǸ7z 8:9OlN5έ93 %N(<_@9fWrqg|9~娋.cJ࿯-pm OY迳D>7V`ɥoWV>'T؊,|,J kWiO㦔gO`6pR'f"PXpu7Լi: ҼЙaڬ!S&=q61򭊯I;< llUnQz겛IN\-P+ևCXA]Mj u7O7㰝SMTxAwy>I/BDۨgP0WBH_vW"১`]~ J Hr +S=^:N)P?Ȍx4G!CF6 Qx+v`L'L_mڮDKt 4MtѮb+ 3%hȥxeǛSߥnKjfkIRRn1Y!t(D)7p}k-`ɊXAeR@]ż vNX`*%@g!gcjJD6 6|:x+m̫I-)i+Fދ_C2S"<8ޗGxh6G\X -6T1KgoF),sE9$;J\Jة % m2է,o;z_zZK3!0{bru,P]MZ<+ KD2xqݼ`6ٮ|]e.OhM/ lgaWjztkk[;r5!UCglxG7k\ DH͂c)7m|8H jM6sn "_@0P¢-LmWy;G~VWLآ.:ȣ c[{'Vʽ #xkbz%*)NJe]1\ږHـWU󕳔{/ONf9z  ItH`?$!!mQZ=(Hn3gDn[, kaYK{*ga 1^;H鍤;4I~w=wY۳JA$PB}}S]b7W+sTs>pJ#'8uE"0fi]6D?5CKW3;Zcr{z { P \/YWbۄl }H&Z 3Z36]r2O󈃎B)Yp kB̝ɜ m)R+f.vq<_-Tv}3Ǐ(vͥaRÇjN*9ʂ ypHn6y{koChm]|NP_όcn_\%Q#2gU1*ZI跑{2iV yn6V{p;H4(k}Ũ'-B Z F+)!  kyj:G2ez 'O4 Z>ߙÅ_{GLQ vIֺmr?0 gNd> %+?!sr΁wH+og)H[W3D_٪+ g %0vEqĶ\( ^tEm#=wkN]݆Q<sr-tS+8-`V$ N`gBRN,Vi͜M6'LgõAs;(ShE>7Qȑ/"ujcJr7zӠ! H ×z=o~ #X B9\CCC-ޔAseoW2reWb_DH͟^9kfxy άƓч+z+THyOU0w fD.Czkz1K4xECSWկԑ90ꂀ4E.\]C+? D?qwccUQROwYa<:-!OtR|l< 4unz09<)lLFs\Gxr|  ׸nVfWl47c} * M'.xNFAڹɋ2x-yݰPb>ZeSXZr.`r늾jZV14]b D>,XO6d_FW@{H#PxIWN`u*zڔ~\BoNA~i`=+KJ/ǐ>PW뮥}g¸+q7õB9E\ꪜd:44 ?_]&^7v .xMͽ5iZVynY>OFTD1KKr`M^ji4RJ%۝)TojiJ/c(_G%WÓg`|b݉DpwImOW }^Up$G- BwXɇIy*(VpzK6AGaQ3ee{|riݙ }n<)'׳@8K$!r1AvFbf_V>PlNQS *&[}AL06 ϟEQK˅|0Ik7fͅءքX]#}vnۚIͦ[]LĎzoN̈l0Zfl0*70ע X U"+p_HBSo ׷1]7d`?UN@w2xo=Jeٮ;>DpMk}pE=bJ:{q7HgA@zOsl>& {C8c#94.ǰE[dcT<_Ý9Vݏ@NR]Ȥ<+SPoꂴCmϓ4zt_I~%QKGژlPW;5Zh_Gp~+;^76(S:@+Q/2۰ rz-0* %xtcX>Z*{V.5o4Ud|":ilg$evak/Ѝ3L̝*|+Ȣʢ,SBT`ѸF-JEBO }##rJ ҂q:ip:+ॿ9г!}H|dE\UKKKg씌 k^UlƠ@Q\* eUܱ;By5Bew6˝R~L ͨ5{åP7S:8nS@C';(%WgA"TĄƈ9B2;,!"am .pՏ ۢgo,{ Ѐf:lY@}*tѮ4̋BUhK٠p*m\O:(3{9߮@+Æ>H Ttb`T$摽.z$3 L>JxM,( 3$;zۏˍg¤զp:)9Wlm|B~}_fѸb19D.|9:Zʤ\;1݉ y5Pv&~H OM_v{$>{SG[ۧUv>ABQځgL04&nzEZ"Zƭ,Eq=[53E7 Y[cV1J};7 ![&Ǥ֙ :D+O"[v-v2nU b=d/4)C;ś\ruNK-/_~.٣Pmy$PGSoZL 1AuE& Q` k_`CJܓqbQ#˫AB?u;d7OKHI/>k :ꍴ-%o>eK>t4OpKf|F5@JA3Nt[I@PЁ_X7ͅ1~ b jKaho_SluC3BAY6>QUKo\uwEǁPOzm5_<1+9q2{M&ާiѠaokFҼ:kn[_2L@1mgܮtJe;JTt@%7ulĊȗo[(sC垓17Z&WPR6r∏2EBP+p*lbY`nէd՜( ̘Үg5_4To)Nm8~͑eCJS|q6QF#\uuu ݟEo=AKgPa 5!JCU`5%3&Y Fgّ+*i9V/QqFQo"}ϻeQœ Ֆ"4b=/4LOiA6_ ۛOʔZ"b*ĘȜxi .}N63h9XB3np~jDwe/B# 'lÈ3USW$y EHNnYmF1S=p*|quR`*~ݹZƍRwsK/uc-8Ԓ9-(Dۘ`U!0usLT AXA@NȰP.ɀ,DJc|(gymDRԾZQ #l9uY 嗳n 3R\ o)r"6j ª?^@aBgbcW`6XV'~J 7ϓ߁+JJHgko:ajcbE8!&\Wf(>."zqW81t/Qq ~D2LeT,Q']g2T^AUnzQ@Xhe| &ǕY%|FoP_os6'Q -_9%-WOjc ް4/QKƮN%hHM?@_MX-%;aIv:aI$}I ("+< ϲ";&?|X6)O ߃ «z $T *oˆ JYf搃Rug u G%Lծy&}7jh4E Tv=YMO t6 SeGeE1Q93C`gUk3`o8۽h2cH\ped8v΢v? F]qB/uV œk1UiEɟViLn8P'@u;2PAz11T\e\Ig/dޘ܄ga֥1P&e7 <}촀\Sl(S:R'rHj-Y.$vD= .$< (aC&'5o/4u3cC*ps vGU:ױ`EQsrM*TdS,D)07AtmZՀ(e(,ǢAU5o*t=<a?cfXʔ1vQN5vNPWej'Z -GY Q-n/nlU&!Ee6Qt 'KEc|ҩN9=8(cg9F@\  }?"$4@nƋyXz8pdTa-J|7b.^TF<͊8Yz-մ{}e\i`uvafA'Kђb"4!λvr\HcEB+e ,_%M۝WU2Gvug4Dӏx.x %}0=}Nl ռ-]jH1K_ռ1&꧞$sA֯a3!OA@8̇#v4tWT"OK3xىn,wBtJ^>@uUe;0b[W!XGp@Ϫ9XƢPz ivEe7Λ_3߃aú/vA}1XL :`,74L=(N':^^=ˌ+{?呛qZKNO`bLܛ[#넊n.P*axoմ Ai[+D;cU~wAZ3&Y\mBB,qCF|0.%aDJnS_bo@K움K7zBA3J}8c,ċ-0ˬrM~|fCb ~SҠƓ@7~}FbObm{ﮅ3I'όsC+wCzK5|80]bQ_?]7gkxdh/*Ƅa|cN`8h0A?i _(' o8g4D5 ;§]G2b,gejᅱvCʢ@]e_8Ҥ·g(s4@Y(+s>*q kyLtT,#cW@czKĩ̺JcǴ٪ExK/0XUU<B3)1b ':cBw\{,Qh0ҹ³RF:]XY*JUe_ˆfQ>h̡r:aF^@сiCfgqų_=3k`[q? NbW4x}۱c}T h;ޭ-v>lw_I/US{,qMUelJ{-H;!"tͅɅ5UWUZЩς3_\5ȴu;|tC:'>x}[B4%$MIJ͍ T|&>)@GNVAkaU|KR#Ŋ ~+ la4 Oj*h恢ufV &Lrs!I Ӑ;x6˭hY#z$ps 'Czvs.$ N{?uB՝N~8Z6`g>:b, ݱ:K;ʰV)_ T(qHw\E5+Ćk#8/̉oUOFM>yx,$Y)uxێiOLG;8%Rq^gdYYr -"zF%=\RxH]"hs Cs!?I4X)Ojdg\Qc/EUF70y4J 7x@X]& l%no$ ‰%_cXMns+Ri'x&yJ'33x]Tf<3Z_n~+MZIUyΪ_,Gޮ {X }۴LQ.I3ˢou&fxtI|⒓OHK\xtt)eiWLB3G])Y'qɥ5iD"#Rt ŗ`c;\px\EЈ鹀Beޠ($*ELXe;v'+Q A/14bl_L%{ʒݹ'n0V|zl ~H1Sٗbo'^1DJd~"7 TѼ{Jd!AZO,5<)Qk-fL^':3T7a|#[arTf̹՞;;i1萧ge:s}g2#m $*'REc~eU(~3~K#TS<)pAW s"2bnҥk8^/ux]#,*"<O*97 y2\p!~џsHʀ)Bl0DPwoH`~E$-č3`$시!m|HkFxGXV٭@&=KDv]&Ku'6.hcv<nuF6 ̒B9uߑE~ZR GC'>$dwui|v^Vu{DU<WQY[LhDBcMn7hC9m](F:p7%dL CS[2<׍0O4jrj\+ႯtDy8S&("[@#J(G8dDcf~t]U3i3'(H2g ?G IGU/n8C6KT]L{׀M@r@T{%VwDXH|QjZͰ#/e jOZW^c xf*5^BHm i pw~1F yțg# gH_:Z%>J"8F'_E3a><)naDƛUw^a̰ fއ4~ߐٍ{b4kz|W@J9xی;%YoexIm5l'1H*2wdY/.Ni:V0SfZ⬻إTA"hl1oU8Z Zͫ,s=>9ɷDŽ -U$j G|bap1ow*LU0i@h>]u{ 8}JȉF:iKN]5t/pU D҂m~ް^pDv,J06/*IxH$7\Tw&=#=dch?3U7qIG^oɎfxsh]nx{y5gϗFo(Tw=@㙥18ҫSʞd/ iTv\ /ǔ"= ~{KǨ2R8 ВQl)Yؿrf.IVW:8XҠ \# N# faH{ZAR;޽j݁5H'T~] qDP7aL5pL)6=}HGO}fDDG2F(b43f͸kȁ co'1P̰vm("lN2/E E -nL&Gו`}ْvH` ?Ey|ҚzlcyO\ly x1HPڝ^)u hP/x_ }#.0yyP*gcΫG- x˵m:dOu{02_70WAx/csVt09Cw{ 19_áWGʾ(wj 5: 6(a$rF4pgi[^C]j;AlٮTy9_u]zFuV) оM'r7PBnY^صJb .BDgn_w^z*þwtofSr w)r 'Ka(P\vQMh)TlJqy 1v x鳘IYvHp@-!ظAE{['Cc˴SHK\pZvbpU&Ƴ&$X L[ۡ'޴62_-^[16. ø+?>M gEmPŲ+RdexY1eZ/a 50,QYC\{'ZQ3`SYW1A(!V[j!ЩP(fCF3R Fg(fnSVo>^99I1rͻ${/V/cHhR5NO#kRsGzh]COr=0,PڂoQ"Dx;FgX]LtAל .bdKHijRP/vT~5lx6Ll<j6UR!65!F*6ŗ#`9Qt(fH+^ՅzWhla?H"@`<պ%'XfՅ͋|BŗۦlF;#F:Cp-kxAV\ E󩢞{Yi{E[E%]ꊯB-P%kv![  IV.187F$g3_j;3+d A7A5ׁ"OgX^}΋=p|ntXGUqg]j QVQC2!"gEIMȁP|d.'sAW"V2m5cMݚs&|g7j4uwj~: 4pt-`ߞN%me̵ , uOULN!HԃLWWel]<0ЪYWx{P!LZL3#as 9`y즀{MW$3 o]*1(t-eny߷vk&8FbMv2]1rB UɋV2WerC5A1yo[)3IAuMzgFҤ-,1Y!ie}4X(Ă[2zIq2(| Idh{J2|ݝ|߃G=f0yQSS5NN?FR;} ./|X-~)~\f_;Jz0 0ԏ56J{ n  T"0/i4Kq~.L9p#Nq10lOgA}M'+!b9)q K:##[(97z[=8(%>1p&KPgUIvO  d3T.v) wf!֏e/{뜪N(A,ҥN~SQ?Pׇǃ*掗yi] X1 eÓ߮qI /輓eۺtDX ne 5QVѪ[zo꾦b@Mܛ}bUt3g:<+ZMv,51X핺-B| O(jQ({ *3ԇ eC, s@5 ]&zpڀ( E a0ڨV8FVZ`np4>qXe?_4t Ϫsrd&si@(-3Y`o ,«Y9։OJ Y@Ai 6%=R%% 5@ծwGq>Q$ )0j|Ҟ'],4 l`*[IُLQPn.G2pIY 6㜛g4 +=z[CdA|YUeҀng1>VX/2DE lxЪ7QK̀Ӗb@oмS1ցI5zCnxۃ#PFG#=*Tҵfv4$=5`{XQ>GT"z3YB&%@cAЉs33=?A檚}q5>{>Cٗ[v'&d7aLjJ0F)on~(ߩw Io&K$4k_UKY YD02Eb'moGrj7ᲆpRmjBcj)X/77'8Vѫ%7`ëWZ]2Nc2=U& o tCɔrE ,<"V3c]慃 蹢 C FO 5kÞCf5gDc*;˵!MTm32Uc qW8(7] Lǘf}EO9ACJ,@+QD`2Ө kBG *5-ZJ zXmQ}ÄޡE b5( SCˀQ:uO0:+ݮS `gXbc*v(f7A'݅)RZL"u:дӏ'  &f}p36"VOI";]fd( WLZxK .pбb ڔi; X ݌x> v.8Ap"# +Ŕ}HaRdax-p^7yTE_|~b9k~Qvr޲a[FywͥoN\+ɬNIW=48&OQ\ ʑ5g1z٣3{E Fuߠ>N-n!.M^u$#Pon0|qhr@/v-s>/b)(_R\&C g#Xp>aT  ]fH7A4!3 *!\ _x K5 S $4ٞsE[ɒtSU.Mʘ3zGLBc+.zF?'|+_]}no3xp2_G6b.abScס'x14\0(p*|:AYe=PUzעK[yJc'3: fdÒR}U<%s!SۉѢ]e#K ay~Y𛽒tZxWl2 )r= Ecԥ{IOAƅ$ŜChxTa` r/cm)OiS J4T dzؿCЀ˝C*7//yʒ}u^sPx;6IHAJ퀿Ϳf[&vCBF[1<bx^3T, ZM JLjgVp%=9 #3l[H]B틹]F'iO$Ysn!EnRB[g4u@\<1eP+MZ1~S6վSBE+,K+5b *-m쒼2DZoV5aF z'Mmtv%Ab9(Q+n'[xZ6ìV$*b`qNgX{pfq.  8][ArIN+`6d+W ީb~ZDk{ZX҈6݋:'%R%O?gZU:.S: $6U5ҔF IG>a 镤Z^85-M.ՃNR]*h^DCywE;N'u7]+ fs+_*z",.Ip4:/|1-:jFр I=e}_Q;8C27M2Ku4.#@k5ԟ4 B-A 5Ռb.Ծ;rmO[TPپt}-41vW/l.*TiJ"cbIL6)? Ҏ,VQ gߋ< 3hxYSl=L0pP_`-1쌆A So'/0|n'zq8NX8֘P0 HKNf4ÅƠ3ܳf& /0;uy/}hJ_h7{>r@ }'=u |U nC23z@n-&Om=];!k$Q0 XZ :e𬶾W>fH'(d'(^IC6G bAr,'KdL/@,nHH2kR/Ѭ`pmij)Hc(KnNAnWυl8gbJb?a0R([@xjO3^t,[ޚF.;덻!@ZéJ3s{ͣoY9a/}t-ee=`a#mB͊\ < JloN`늑\Xbsb^w O|uJF o%Ĥ f˓ᗱp0{`zWiF4'[m%mp\[pFɉY|.1? ߇FALȞNϞq;E ["`GO M~h6tY)Vڄ&ƶlʿPa&P󡹭(Lgø:" 9UMRܺ SBꑈ:<2a)WvX3džGcCCL`f䐄lAÜ#66˵O<fSl 'lOĬ)fH>Y)VsC} & vZ[C=V~9LǶ5gf׏dXRqX ,epq"i0::E?ɖX/S05lX=j-d \zY){E<,!c!{@-tAjnlr@׀D:aX@>>_6@8UTb9N _^'p1^ȹ7f}e}DDy RL8YhTnJdeKVGUơlkLC(pT1P*T`a l3]qN2yčiCtf|y>>rfʮnw`1[by\5x%{5WM:W[\Кu&n3B nE\%0c)?Fyu:aV/>=nْJ^O{dA3Ilb D}m`.MLEy d!@$ȇX6+ ߯&1q^dEWOW7$GT b`2It%ܢ;tfh 1掀.ܨly%46߉#Sk)<̢/琱͇Bm*w{2@Hٶ3sV2^$5Vz -nAV֜t:vxψRgWuG["$EiF$pd׈;wY"fv\9t9 32~~گw8o++G U=q)cH{OAsϤH гbϺøi+ RS]ɑ/-Ww0D4[p`T]I@fbvHID j/Zk]loЄ~ީ s6b5~Hz\%u?~Ky'Ecf -DQ(3a*^i߭i=fT+P-cտND-ߎ~d#Ʉ_skLۈ,px6g7WD襬gy`Bnjskǯl U0dkUihwX\0St*9!-"2A(!D̬3,0q~ߢ#\pN,g!js,:ؼC=C$|– ܰb-է! . \:ɵui4֑lxJ9}Y[/B9E[ ^jHB+^6A3m)Zοd*&O[6_v 4lv-e61qjN0r?q"mUHc%y\YA'+ȿ?FC&t?_N$ b0!w QY4Fy(n=D528 8;2irCãJL̔;x\T'aGD>OQaZ < =GPN|F)23Xb 3ɛ1hWp@Cp Fd xgއm-QGuW@*?~+߆29;\dgUocЋS!iqh2WT @Boqr#p;R|=s<1QHs'v~ 7>zndyToua|v|@!Ұ?>|Jd$nycfda$A2i1lhuoĕ dzzV^6я=jrq=.TۊM{XwM32KJ,;a %:dՆiS]I|'R65hg1nG[o4 /~*z|ГQ?;7c׮UU@aK-}'#,Wy@=c-gA ]p 5<+|ʙp3^V1Làby2c*/@>}P[g5Q )jj}Gs}ϕ| x\ݢ<74Tl[+!"^\ҧev"|>WI??Q=tK G K8$5*\W@7*˹CĪ_8!A(vOZ" VC+\!dzܡ[ȡdqXͣI MO);Hkҫ$#9%=EMobj{ZZm f,nGH "FvLZϞ_#"T5ˣ5n61}]q&dC%]{h:ʻ)MWZ`מ LF}CA ZpCbNw9\Nj8zznx7#(/ӫV!Ϗk(B_ n5OywW7.O#1(cni\85/'=2&bD{z? bl'Sxm\yhNW`SJۢ!b"IVQ7Bn[=AHQ`X{Y|L4=sqQddd|dS X J| gVmBP(Ia:^;PtC}/5kމd^$_^Gn뙸,mR1+yR͘5Y:݉' L-:-#3ҡ] Gʢ\-LGn<6|?zWn@CbƎuz(,ZzXX<}'ADZ7lѻ!2 x^.ޑ\jTxgPI-ohhc|j0=}|4I-ýEW({_sG@Je!c.9&qڸd=a$ j Eosٮ=m{!%5@ "4d5mps!5 Aݸkto`ۇ ;0W9FޟF|g*WtL*ȓ׭%pdwoO?jA*A#<{0hAXy/y|ԓ:R"a-*og/fl.>'I鎦S3&;4@iQF==qq˖HoX1(c l&rf L+*Ue^dPgH79$lLOA0~'`%ݿOHԓУ6:RDF>ygKGV[k٥0M9MĤ\hǗI8Fv^dF%B ?#u *q;hZOdүBZ36O ,6i7B tJC9bLbۈZD bEK Cs[1Th9o/ # gw(.ܖZg:ޛyB011s,7$DɂZ7!pHs}OlXmvb@>a#~umGrRt8N/U2«oF&GR9o$9dX [e QaiۣE-O|܇NC$T '\&ߪW@yPK?>X9KpJ ;e65&|;grӡK xt yc?( ̜wtq>|) g{e1$HD'9MTt]D?Kcgg.HƖW!D'Q^]Jhܫ}<.К.Np>7'm:0ܻl-%:f/"ٛ|T2;K90 9Zq?}8[क़iZkVm"!԰uvt :i:-u6Mjh _j@߼4G fWV|ԭo~jr J{n{G=2z*Ԛ쩇D=ŸZT&n4]R*I#EIL|&`Q^Ѡ_[2 -HLe0ZLlCޫ߼RD/:&A| t &oDeuokLS.̎3t-^ daƌtK y ;?=E2G{8%k|c/CD/4/(_0: HjCMA9!Za|{wk/W@oђ*O59WI)>հ1 =E‘3]e~U&r`d%+UփkoŔݷuYq YMKntyh5qRK?=wKCA mkZy%􉀥#3P gСG8tBNcΤ&R LH~.ѓrIlB+Br.pð!dl[_Dr _+-7e`jZ 4!gɭxξ#JT\feiq}(j> Aה Z!z}{q &_%_^ng"2s5]A ɗ28Vlh4_;cX!g$*W?V/zDwi%(?^Nn= cQs1*4X6pY MNq#):́ZPIϼy ME3Y|}:lfbRs5ȃ*LxN FVv9e9RQRG3Q:dY:tsO:L1t ?jBY~L>@08YU༚D}%hpK5ȝ)qmbK}% =]e{R熵+gRl!>Vw,K#jp- v=R/Rd%YJh4L:"G7(62o?ř6I$9ȲqGi00hL6=b -mdGsrGOi hq3`Ya,wH.W3zOAQ6~#%/Zlkblh;b %ރY1MFpȉ=[VXjuulߥ(quSGŷ0s܃߅O rllSK\S-wdzg윿\5>UgKUAeBl`O>Xp:jBCgRӢwPVv :Ê-s^*z#IO]8{B*,As {ߙa4/A u;@7=|%Ir$2:A&B^s=BmvA0gQsZng6Gw-aJ׺"i y_|^Sʞ`}C28Q ȃ~U^]4` K--ܙnl$ޢ'δ%&~ڄnp  ߶qy~ t5.4Ƥ橩6Yn<"0.C]%h)) K1Vɾ HG2w7J19䀠!8ѷytJ ?9%pYeHGc(ybI1.`IY"˶>MP`wrMs߷f#a@Ӎuei2b%5wDqf$nfidS֟ۆb(`n4Ҁ~r{ܨYrLǙE>/ά{c'IXzMZpcڛȥ桓 ]\!^)7͋#99_m\vH[Q#7lQ.\K}vUE+uDa*RE*8)*hql1)ZHEaeYdF"y1Vᘸ,S(z>ԯ?A, ,F,w0~tl{pXr55mrNdr)1Ϝ3v =` ,=(ei0Q%bZ}Zpw⺦0m?6pB;oyCVU =pl7gmd}^;-'7zGH@~HQB.x> _0;4ڪNsbK)Һ 2/mZҜRZ,cW-pB^OIPhܫvl-z&?ɫu蔗&Ox$CS\O4!KЂuΣkӢ3҃/> z kyWT^"Ĕ\`KoT s 6qnn 3Lmj5r-5O1C|:E}tj](C^-JEjڽv 6_@\YҹAq+ub2e} W ߄Uc0ES_UfPMZZM T+eŎ}R`1³jMCį)VD\q-M7cAfj`Ylsy?dƊ `*l2i$,~卍w>AXFCҲD$d.zp>Uiw8$m(HRbKI!(V#ĝ61U׵[-Ox&[lXRԵ\xr 0}]1NrWn&[S@0,_#V$ B(;, dH<ͤ=IW/RoGFRS AdHUӂD*F,\vK6o-ce`Ÿ:4$E܁@3厶 +I=e( 'l5Ӳɚ<l,/Š_ &{&!i4{@K.wXd(j`0N\)XQSqUpG\Ld]G kIc+(##Wf_b2"1P{u`"lH5Me'&,IN9,8K޺Iwvo`)]Q р))Ђm` M.* bKZit^|d0R<>gJgY'wSKAnB3^P߀L=,^YͶ^۲#\IH IW0ƺ/;*&7^6 s"psV̈́LHSnW eeo֟Q;e«"rknK:\eElorvPYT(cLU# pTQ(8G _CkZd">n0Cl2v)طWo*鱬*bܦ?72xB;ޅ!w\t Di)!ɠ0'6,XvyGG+9([^*_4ӇUlz_[ibfZeoOH78]wY!(xd6DG@sf%NJOd[凟y؅6%g [B sԅ SWeyG uqPqQc#y{?$K7it guvDI~/^c(C|SOgn:̀q b+Ŧ)C {5:Y 0[d3GkaϘv`'`2de]\MeJ@M~f Cp1{^ 1.x;yqr+vrI ;m*O,yk`>I`41OI}+P) 1 l$xI1ZQwõ)Rvts5}vn\!!J@[ʅ b uSPfݚjrt6Ӆ3EQFu:0dA<$43ϷL!v gҿ@c ٝ"*b1&_cȥfl;UD {+%9](V`8\ɳ\Tt ^I{p ~]xk;PQ:w\&zBqL=~a^#;Xϣ~ [oTsA:9,|M+Ôsc!0Be )7W is :'{z%=G=gtU&L";ฬgvsXő-VA,MQ&s=v:頍ӾH E _UE I (U/B* y$!lozKo/9w׉#TiӇ"a~KyQx/i/ޣItwEE H55 lH],⑪2ԯxAdCVP+l9L# k W1Dq1oo:Co+.֕7K)EjQ2v47 ذ*x "S1<^\íh p\R:BV>TCDyiݿG_$ifϟT"r"B T&G=2jdvbEV; mʼn4ݐqDif{QC4HD6/(ξ#(=  3o Uz3OfCc-8wj|dɰ=b97N7GǦ9N̻I%d*fW' IusԃڑJ^m!%h]IK9 ˆ`mjF3StCDg%@#XxP. ~D`рGaw (JUaUNWT.#aSFgJCdz(h߮vH0x0yy! ݜvݒ D!.@} U\*Z0zso߮@2=D_]063}@zMOAXJ6u㦬qQ,. 3es"&k %Nʾ5hPYD: 04pvmt+%,W14A%;cg5eW7Fl\vK#x+fveN'b El(݉b#?#}_Ke* L&:HVY-2Hm1 s˧dɷ$&:C{%kZ8\4 6J7 jGW?DU/ú.[}ˮv|>px7tx&[\rLv[Gdk!d~Ӻ߅ߘHR%j9;*3^_.e CX\S&H;@Aua]4X`g6ADp"\VJ2;Vs+Qu|(mC._V6OD=BRRް.Oh17gXp C RW:1i |.IL԰ZVi{C6@:TEbG'W1:#rF5XJ!YRSpUIG؂4I.E.^X Ӭ hH|Sg?-$1b >^F; 91T/]+EYZ> g )2J12֑bg0Dߋ߹N=kBڕw{R ; Sq?Hȅ5!f.vӎ|YPhl5 _n $;1ujI&HIPhSԞt m Bqb';9JU:wz>W}``4 vQѯV|*yZ|#ڝҙ mr,ȦN:!1T=(b-|m&H%K!VMg@Kx;Kr_ϱv|!g84 )8O2{U(bG!JO7 :_ܭkOd.Mϯ3b-I̚%dZMgM>''L\A)d?5qM;I/Z"6L[&jxzw=8AǪF~١O?ᬧ&t2:~GmnԤ'D,tADY0YҥOfgm^p].Ŭ]it,Q]&M{d ?ooDz' cD2d8?&j&[d^㦍$*'ce)vu[ fz64z'=ABe԰qY6㰾PzOR|XWw08|,T+'0D\ lJqbq"ߦQlm#PzfSlDW~GCr44yEx|b4 A+'{zbUxS0FPnK 2ti1kKCcf&vi1\bRL}ڡ p'|^F ՞! R(>^G⏰84}&ػEx(m 7ε|zYhZxmu#G.k'(л/ {5d@'kv, |ЩnB]l Q &ā  J֠.g2e o :s 1 &onL:Vb)Mk}+@8"%E/cmhֆ7]bA+A'PըFW`d*[Hbx/zh`)U\uܛ 7$oڤ;Pmc!T9eƩ+)}"+ U0@`UI:ؼȔ߀jFԈFzAc"wa#;",@K/gW*>,8`Y{oݕզ5*M4]g MZdNtDl8^'Ph\9kCs άPm@hrʇBʗpf|.b"AwV-AMO2Hw #gQȌ(+bv*eفqDkhf'SSBB$v?3 w)7Ei5WF9$z!;w;ceЄ׊똚a0^.rՁ8B8*hŭg{y~t6nargjq|QK4 4.v_Qr36~k SuD[,T'l۪2yn9# `֨kp6$G4(2RJG&K F0n&&R'pv68( 9Ť m{Y̐Ppq_4@%Z%˃twyWorgNtAԆwNQEsFmi/.M{7y ny1 tҍkE ]֌L|n"3M.T ӏ D/zC֩C*Uk*^|7 !Gޮi֏-9@ŠW_ŵ1\/%7YqQO9H}Qj;}x=E"Fc>,EZWօTI_Lf t/x`({hTsNy#å.%]|H [qo5O,@ڑ4 ?o90k z䡯 \Op1YT1mP.>(& Ő4jsA`/*Ѝ]dmi*Ĥcܥi;@v{T dIGM]mTeYKYa#c#[ix9I>¹9I{V7mX1븩ƨWez xRmKB4,^'+G֊u T&O %̤ {_(c۳ j_m+ECljIi+Is32IJRf4Sw9̛Pබw 3DŽA 3]}S}."GȚ)puhզggt;S7Uc6CY(AL7ϑ|5o+cxEf-ɀz:sqU HG M Udmq5Pm_l50ުcj ;9c.fډ;q`rfsqK0 ㏥e& $&z|vӦ!lCy!1Wszs8"urCyƭe2()$Ym2)aF+ |s lʁ`+^|­u&$A,EƌA_k>ɦVǸH#蕞:J2;5GQPp HR>_1'#v[[t Y ڶuI3 ~һ@jwBtގsZ?AbʌkmIT cLQ=3)U9# 3Ih\5oa3݌4_%*#K/33Hp{祴($4Ҩg1:y!Y/M\pz۷̾ *.2Ǜ:U{S9dк]gʵ}`:kxa)36if&uya:RNu&*%ԛ P_\3X$su*$V7l7G6 _f@6+dlPg{3SP|bz}q &M:tl #^ g(]}8>[]>T]]SABgQU@Lˆ!dW+! !e9 QjΠI= A?1yDU,^ d-Dqe65b]*'p5;xi; 3Q7aNI>dUN1}qӻxՔX7Q9`AЩ|=J 0Kܲ =z5y0RMAG'?p-8Һت5i8Xl;"*0Q;܆m=g9s+&4 }Rm!Mz.FkOQ <$TRR3-p_~(t셔\} Fh֚X7Fc zk%fFEhdinu),}^7VNXKH>C(sL>mo Wb%%L?lk2+26[PZrӪ_4mkz;q.d])*iˎJgEk+-Zi+W38/9r$ӕl HvX%ف\:#V%TǤƋh7*1N2`U5\.6Xb)p\l[c4(օ Ӡӹ"V;Gܧ>x'p~ю ]$fEags~+toeGQ- i^^ED|W[,20V*t({JI~#6.ŁQ2 nh;>omqI6~D Y 9XcH:Bm4<DwIH̑UNSBgTɜm#̜nfyz?11 ES |'# "]U m;aCI3 ugs#xlܻ Dp"텷shI,! !QIfƌ9ۻ=_pb<_+.?䔚r8zx+ߓߌDpb)8݄z::bpɦȖ=c1}ڵIXk?Uo`9Oz4k1~9-뷖aビw<Շ˘/![JrX;>M}&ۥ31(2dxk3]7&mX=짇w}:25%&dF++eըY *vȁ I*!hP'Cp<u%-%8Ftp͔grfOJW@j}15a^K5[rcL9 %.'KmeE9]*ŭh0E{E$787.TN]Rb CݎC $̓PPAdXnEQ%6 gp mld3'Y$_অLO%)R[\hնVl B_69?'Cp͹#fZIw[jD.'~Wߐ*m`?aQ*ph#UKdK5J2XzosuaSVJgFk 3y̞6AUx+m;8ddUn (ɧw6Lxu @.bT{L5ɟGs}DB`U !S;*APW4)z=|RI\JeUu囇}ԃG,̔rjbJC[ާv%6⪶j-2=<`[( +3xxPK8jҰIL/#bXSCXXi1цߐ$v~!HCN޼ͥQ=nB1P]aC6@ZGHbea R0c3m==f !:iPޜ޿җ6G2"٤}, J3h,u0%1f}UXI> EX 勇o:Pv+Z3W2@3(Jy&7Ŏ&'Srb5J\vQ6Чe UM GlpN~uga)0pŤ=wq%<_ xy]CYRd ]3:ֶSaO zMWD}Q`M=1V̂E<{+Dj˶Ah98"xxu^Vd iQcPy_i`VJ1iZZ$YhL_twIE6wb|9h>z K>)fQߚReC s+p8(ltJAѓRS{11NXq#ҖxA$XA2%mϸhNҋOK~ r95A޳iE1'D j&c t!'Ϊڷ|v/}1ȃ: 6 "aZиH)[8]q7SI54$)~|o%Dri)|Vd|q(YH|}Ciخ0'>Xtx+p96[ܙUNӼYn4[Ce^J1s_mNFrUiю n.h0ٓnqtʻ Ĭ$E>)r})rQ1qz i N0Rt :nmhfX)w3JKr:ו>u.ԘtX+'P )'u&fv }.i$YFgqМ<]IQ ѫ ȎZ"8ybL8zGKN%&Ky.2mQٙRx#] B:BZN4] ԕ=@țcIhg?2N5u"%SPn3W TAW>JWZRrCucC9O;kB6Dl QRLֹNq@%;ӈCj*ՂF>Vv'q0KfLE(eqg?H}>gT ;5+7$n&}"\Zs??LH~0ʮw+;.,E&ޡi&o1 y i_aS Z 'ǮC Gct2}D( /l`Wn!OmpB74r6%{dzR]e8 /[=jj;g@ـbܗ<TO ƌɔ_yU*m+ (LJC‘3 \x<фepީ1vD/bƼSS i9A_Խ.LOKeGn/D%VT3b?DQ{ ɺotBxtO!{7#+k~%h{KB/]3iyz5θE/ "Xñc& ~Yv mbQZche{4TM0]ϴbj1oS} kg;T~K_zRޗ;<+?bDѝߧ ݣTm)mHD9Jlx0;L4攑I;'UC#f 6jk"\DQZ#CPsZ̨BͲ& @wjt 鑁nÐ(ơrŽK%T߆1g9A}Ɉ N K389!PE0ԄD9g EP9&,z-ŀIRc %[1Ωrd~%҃pgh\ CUɶG1wz ܆쯰}zܓ̗4Jά6:S melìh4j36~֟{ t]KR% f 5,-Rw]p?J4ZdMֳ<qYFdwPٰHZ:!RG r7P\wh'.~N34Rw&?P⹴s/Tџ.V1CBZS(c1葢HL]p}a( T*=AW\:٭{f> 82%uV y< ox^234pjQ6kFa0NJ#|bޑ164@CU?ߘ03Pv풉#:b_wcHBg//@"~˴X,Ъ9[]!*JjB'{[u-OXJYqFͲ4u~@ LH^XUq^$qLU#?Ų9k50.VDR?qYYP" *oQKFYk"WHjZ.!jZ51ܣXӋRrvH~@3*MnKK.) )f_]Yqv"38'FاvۯZH${cZrT2;u#ZgSvZxW<.-P$aaboW1Ē} 3gl2uԆ@qˏ>c#-YT:+$~>"w"'H@#(![ypy6T}͛>ٹ֐.  >5jʓH_9< %WY /Gp<#c+֠ Hꝅ_[3).x9$ 9.}TPUOY^^Ed$g LZ:$ Zm\ip&,DwpdPf8hu0\,i}2lKz#"k?wugNVcfHZbg/v՜˼fe,2ɈX[B(B=2ZMbی5OiqoW8Ud3kwX6L^0dNFql, ]‘=Ϸ'#Գ]V鴯LX;zЛ'ϧSyKlW (r%۪7fNOP ŵFһ0ν hirFxQyx#,n|ZmKŃrl hGFZr׀=@0(/*W] 5̧t.,>pEIGrK6e)ۨc; <Ψb]U? hr)Qp <#ٕB3!X-qN-lH<Ї!PtǽӋc2Q6 BL71dp fϤ=|ֲAXeB\'‡mK=wa!+J~(dEL'GֽX1 Gsf.i@6FH?3j:;%=̏"L ^rw!u6T@CJC37-1Y"MZbls]V<‡,pےϯ7 .YN<UT`S1-IcJOIK[9 ʃ8quk׫Sj[= .ԵcOan7 ͅoA*>DdORTK)TgLbA܏`(>OCp6Ǜ“RYdFg:|;0ap2_Y plҒ=~{ƲW8Y?hk'fi |U]EDCmҋH4S !?Rou=qQ˞hhztgM*ToUTR L/ʼnƅ7x䱈wy[ghTxYٙzH%і8xhMM͞%.Zt~A_lC2+zB<ҏ)w+o] EvH?1z=)A8 8PTo'`- I| ^0_*Ue賀:[wSzbxb{WH/#@c&q<*QyOdSHsQsXaR,5˹|]8a!3@}w58sa[̧YvDwRL2F:kVwdq ODLvG2uVw ""gH6:m˂)T֠< ÏܒFdOl(\Kfއ.Rs=: IՅ&`mzU:F*csPL<%2ns[{2}w8ώ eغV閍30VyjYfҪvv`0)|d6Bd:ط7YW݊[f(y0iz?-$BLP4bFh5ͦ=^9{^Vvaf[y[.EK rFcP|+\*aNMc;ۉy-Hq&*pc1=7wz~}at[.6!*3ŀ(I'h9$U Cc0LXWI k:7ly!#5)+g[Kk@  FLǸ"*{.Sf0Xt&`h&,t xXBl'jT @57a*D "3JۙK8 ـri4(C{(tᡥL0^tUrJ jV %ڲ0FM6WbBҎSAp_mĸZڊ}`2O2)l &f}\%fj O&$.4Ӟp<7T*v-'(6VsS.ʽ`Y ,e*Afz]/ȔP~CJf}psfíV~)X?r:@|q_q(~bHW 6 IceV A Ydni:7nSGhB=7fGG~-bB\T'ǥ8QNpSɜ$3سh$0'ԧ*f[0؛2׵أBj{o^hDh5&q A&\ 䉑-UA1y}-ɴ!)@[H uhgpQJtzzpGUL\uJW>"cSĞ(RA5uEؘΥ]vZɿAf1*O84S/Uiڲu5d꘩~vpfՐ!Cn UvZ~LԵ"_yd&|1dPG.GJT5X鋬f_ |c^_ڭLow))Ԙ)lf}9Pl ANK 9*]@V7ok_lV\$F -"ɰ%(mW@, ~`o]tN{l5ƭw3ea=}`ƚHlYv-;LrK ⦣)L 'yRyx z.~t⡷1+)?Vc zaƛ,mz3! b/OІ^0wު LNiu@! h'PC<>Y<.\D Wr|.8BIp &9pC nx~J/\@3P^۩);ۻE!u?fTI9Vl+6GdcafNF6,&Re#OmnZr`JY \~HUE5Eq/:#|:xњ#LIiY 2<_R8ST AO#(@S1?#2-c2(YBe '++6ܺ]R -`(,K3,.^bL!>TФJgkW!4~qWE$Al!YFedBvS.zoCY_uF|l̰;CcrX1葢~QrlstrlA| X;mRv*vzOUQ ' f4q ՝Ng8~h̋3 {gAu ֦y``we6a}ޟj]U\𖈬9Nb9%8C;}dQe&`7 4#槔Er)0a(L 14Чόa,)0c2_cM:ꆬօX?pih3pP$:f#*~@A 5ӆ-%gtxMA/CN3~*Vߧ4`-!`mGRkd\xSSepkho#c&ćaczyH@_GC,en`3;aCJyS@4HIosJw`ObHT/"52} bGa"A$AT֫.u YFD*vE;#YAit%w2dQ9(k1}\3/ %dV 0p1.ho ͺysX(nO,3^R[M]b0bLH@*SnR螥;5'=޶O OV0k1;J zLEAG=XBFn ch:sʼ˞a=*3"Zq}^c{cwmR4mo) p\XI_~$G Haau&#)Hc&҇<+}4l 5"S0iVX7a51*v*c +WF.(scd_ޜ]35 U7 ;xUB 31m)Ts5f*Z!@)\y& m3EY%D|s=zX hlD$nOLx+D)^.#)} cqŊR(rh 2pk(-UB4p;nequZH]O(#]s]LECtviU%H+ lz Lmog<(j@RDwNriO=WoR~pwg jR^ưSng Cr|{OfHCrLr|=~1!嗦ܣMNu6,y.`fϼ[ݰs: ~v?V:o0Ƕ>[XWHC`;1wx{AmwHE 1$L7C/2Gm(NIYW(>;6śLB<{7xNNƾ;em0㑬<ݡJj !٘ <͉Y^WxDn2G듪Vn޲N6w$^ ߔ¦ ,Kd,`ĕxJoPB(lsRVTLV'%9{ԟ5!3&[v\R2wT4O&|O32G ߏx4w Bb.N?^˳zg%ߣPh O0m"F\-QS^="38=:w]y0[ъvIIOpy?2&wXm,)6u\K4381w4JPKƢu[T* 1:NeU~<B3NΧ }?J_!n @GU3W5cf6~UV$0vVT=~qGJJ%AQ5bv8f+ֽ >gPM9< xsIYxT859yPP⦳R5P'U$=Y|tC~ݜCLȒo/Fzr:-({v;/x+2ѳnz{I+}t9o"Ypv`/FgY>N2DU'mb dji3upY0xSV0ʒ7(qWy=V!RgQtQJvUONiq}T'SrB'P $JR5j ¶ Ctܓ}qh#sQ\؝;; tJ2Lp4^q٘o[O '3[Vk /E@X9*p .jDY'-qtu); 06;bhmWT>/;dcP|/0! i.s)'p7}+$YDϩ&]g߰aaoϧ&P0!{Tk<QQ,aN[cTk.}oM2Caʠ=5MVaa%>N<-*$8j~Ȗ\w-Y^7#vm\?Kwbe[0TSgjՏO}\@Hd! kUSn(!CM+gyo,9D~? ZiH3囼klz00@3BZ: wW=Z)L6%ᭈ%ȳJSJtP/n/r~>ed>Zhś!nZH'_]`\ S#i?"|"`5 Zy/O ARz c(0.ώe/;p*i]qިjZpnP= 4iUR" \mh6h&nˊ+9U YZ