krb5-client-1.16.3-3.21.1 >  A `hp9|ߍ'8?r o H;V@k8;JH@3Ed$][ C'PaNTP6 96jM\>JC9m=T#DQ39V -O<1gD'Xgȍ&;['HkO)C12e/y Szt:J*'~HzF[1h#=%eSFאMF5B"Lin=> ٶfKi4hl'1d36d04c770168527768677a0044d4143c8e7153545286a0d82aa2a2eceeed1801284df211bcaa425aebd4749fd8eb69aacf61a4`hp9|igava7c50fpY:|Lٍf*Qrx]:'ȄRmӈtES:tEy;Bt_=`_߁̄+0>B`kP IaF^>fpAd?Td  PDHPTm %% %  % %  %  (% % u%.L%  : (819\1:1FnGn%Ho8%Io%XoYp\p,%]p%^r(brcsPdsesfslsus%vtw%xp%y|zPCkrb5-client1.16.33.21.1Client programs of the MIT Kerberos5 implementationKerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes some required client programs, like kinit, kadmin, ...`1sheep93bSUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Productivity/Networking/Securityhttps://web.mit.edu/kerberos/www/linuxx86_64IX((0h8X0(00(0X8(808080# =T*'8M IAAA큤`*`,`,`'`+`+`)`+`+`+`+`+`+`+`+`+`+`+`+`+`*`*`*`*`*`*`*`*`*`*`*`*`*`*`*`*`*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../lib/mit/bin/kinit../lib/mit/bin/klistrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-3.21.1.src.rpmconfig(krb5-client)krb5-clientkrb5-client(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shconfig(krb5-client)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkadm5clnt_mit.so.11()(64bit)libkadm5clnt_mit.so.11(kadm5clnt_mit_11_MIT)(64bit)libkadm5srv_mit.so.11()(64bit)libkadm5srv_mit.so.11(kadm5srv_mit_11_MIT)(64bit)libkdb5.so.9()(64bit)libkdb5.so.9(kdb5_9_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5support.so.0()(64bit)libkrb5support.so.0(krb5support_0_MIT)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libss.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.16.3-3.21.13.0.4-14.6.0-14.0-15.2-1krb5-mini4.14.1``e@_/@_^(@]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@scabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dejmcdonough@suse.commcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222); (bsc#1188571); - Added patches: * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185163);- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196); (bsc#1178512); - Added patches: * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch- Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079)- Update logrotate script, call systemd to reload the services instead of init-scripts. (boo#1169357)- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patchsheep93 1627316785  !"#$%1.16.3-3.21.11.16.3-3.21.11.16.3-3.21.1ksukinitklistmitbingss-clientk5srvutilkadminkdestroykinitklistkpasswdksukswitchktutilkvnosclientsim_clientuuclientsbink5srvutil.1.gzkadmin.1.gzkdestroy.1.gzkinit.1.gzklist.1.gzkpasswd.1.gzksu.1.gzkswitch.1.gzktutil.1.gzkvno.1.gzsclient.1.gz.k5identity.5.gz.k5login.5.gzk5identity.5.gzk5login.5.gzkrb5.conf.5.gzkerberos.7.gz/etc/pam.d//usr/bin//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:20620/SUSE_SLE-15-SP1_Update/dbf2aaf349f169a8b6caa352690a4466-krb5.SUSE_SLE-15-SP1_Updatecpioxz5x86_64-suse-linux ASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=7246086ccb473379887fe0961af8b063a8b98b2b, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=64ae0daf560de54af183a601d7f6df3429543e53, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=8d40230bdfe7cb4943af15b9b9bf5f33f59592c3, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=994d85dd6a77d50aefbc5b1ffec3919ec349bd4c, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=4fed21f0271d774907d5586fdeaff969d7196780, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=be4ab7e9126fa95c7bad72bb6e4cca799d2b1eee, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e5248f247e45e39269f9c89d74be8fe5683ead88, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=8856848ded1ceda50e220cae9cbbcdbb11341199, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=216d4f90d5762e61df00947f573561c2b72ae42c, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0bc931137767ec50d341622c1e5506a5c0967ea7, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bb0030aa625cda157c9bdf8c3855dbfdd39017c5, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=9b0d5cc2bf9439a486e674de16ac926a21a7b84a, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0ba8769b3ac955f290554347984f030a2004c384, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) !,7=LS_gou  R RRRRRR RRRRRRR RRRRRRRRR R RRRRRRRR RRRRRRRRRRR RRRRRRRRR R RRRRRRR RRRRRR RRRRRR R RRRRRRRRR RRRRR RRRRRR R RRRRRRR R RRRRRRR RRRRRRR RRRRRRR RR#(EUutf-8f6fe7bae37eeca03936a9b88b1a841159c2622fc4ea10af1b3a8417cc3556749?7zXZ !t/&] crv(vX0r!lrrn<ۼ|43nf lp&nsrUIڌdn΃kHRpqZ<;#4&۶J+ JitvlΥ^\_W$=%a޷^bw̹܂E-P.xӲnK?K_tlQ+5($ymH~]Dk2̦²Q-Ri0dٛ5-M" "T _ 68Re?jg ?Kܮ1SzW/SgOz,(=/#e <H@?W+͡[7@B [\ 3e*XLsqE}JhZtI Pn =oA+UN@*=Sg'Nd*qj|uf̎PA&ouIc3kb)wJ5%nH4LBw˶O[Uu!@ڦŘp.wA]-h뾄×"1QFj,8|}2 Ӗj%bsj#6zFmԆNՊi&[l@tˊJ{ϊƇ)xKD05.X`ʑ͎e:w.L5$dY_XAPSZP($|~ԪqukRa5QڅmyRK6= G&⎓|X9??816Ү\# zb^VLp^[pA7Ʃ`RV9{@G˩")DNp|YX1Ҋ)MB$?-iP.pV*A+^`Ι޾ -E$!)#b&/Ձn(.2s];'?W!vnɪ畛B'F`Gшj](}®7X! o_94$>zJ+xSDx9x ڢJ:?oh~sIO_2,6. {Olt:fM_[|W\^v)v̑džqx)vZ1sGcwi&`4xsTzky6gn?YFO4 euќr_Vt3ۮ7>K3-ρnr?(p'\Ҵ2J*Zzs*Qɿ Zm!xgWd3}d#+YI"\rz*ּ(got!;1o6{3JK.M ;a1|\?r둓B]g$"]suT\*|;1чY-0Fܼmfa=ªAvv-rZHo@z$Ŏ6,d)y)ZPpjdvH>[^8 ]LA=q5rj:)/zy|"E!WQI93} =}lMp(0P[ Ww"YVkHu,~2v)-8aZLbG $/gM:}Fxa ,1@gnS\^Ѣ6rج^Ug},ؒwΈT{y}Vp؀^Ke'}"8N ]z4R0 X^3;3g{se]-ʛ;(N6\ Aׂ 3W^A@K>"jw˒2'lC)oVscF7I2s<'[i, ?X<: v@/ZśCD>$XS8^+$;h;٨y WѱSaX"t %ѻN˯bkK=o ]EʉHxї$',O%hrMt|Sr=IX:%vp!֭5CqMtI€A''T }DN/J.7Rq3"dHn(@ @G.2o9G𤹋#٠CsŒQ&0C?yfhJ9B5hsS/uB!+:S:(=Dcɴ, Ji%55J L(&ᾯ($Epow75+H|*cnj9' u*dJ#(B~ 3?`F5I ";wFkLajbv[iVam @j +r5Hvyl%ׯtr, U%ad!6UL*iljYC14Qpqѿ|jz4 VFӔeln'ԺIwx5rf.C.H^? %1%ӗc\X/Rnbq̆϶2q,ZC9PNO͛k~+>Be3=-qE eӍ;,-CCrF`C%xGwaNyM%x*L  Uo71]x %3Ϳ1T%s^|o(v>!qoTəx#|"-q:,V֡yS_e Yе2iDTaX13d1ՌqSjly_sgu 0 zZ&~wRž?xƏE{EUI33+;U<|aŰB\ h}Ei8Q ?w{ ~&Ȣ$]W pxM skó+_}[/\n}^ho߃Zx/Nu+yA/3-dhF=s5"a8˕=چhpխrBX)CdRp;1:Pe"\1M͆uDJ%ΑQ7<0\Ĩ1O4A4%;c{qs;7R>jp/t!&ahs].I¤ o֧ VeJ-qKԵy0?V~l>_ dzAˢ$6ˊV=w#@x&[0-Xʐآ0jwv#Rq7N< i!K.2{4 gNPwLP"U.c=kYwAc=BP#AfA@VY2KlOZǧ Msk2E~,>q-J&D81r&M?91m7Ftu :P8]Ir>- G(o,he!V  f B$q3) ASP;'G"JjA 6i` ޖyukx&*ó~jW/4 BϢH3@nrcS)P]"29g缐 !9Ljy.5M6xzAPƋnSg..A2KnXV&ʇM"d '#^vd;3Z rEhbH6GV}Aq'0I 'ٻJn]:d8<3o}.U-!f i5"KYQE Im0 1XpVO|%iJ0 :=@vV2BׁV*X k&b 4bT;N#m5L"+FgHkҶ~pOr ה%  ZP0&sP>. c=EWeKA+#X@5/N.{R,txșڠ%`ZOQjF/8&_ȧf&7`[2ӟFɔ}lTWIo0e4SKL.=iA];"r>RZY vKxke5JstWYj*0FiށK WHJ:KG^]5I,.W_sdJ9a -V:PZHeMX#z4P(03{hy/-crWA$t'ZNYfBT!3t"--ojМ/X|SvY*ON\5`6r@[l:7b֋Wa%ֹn]^:{QGP6e SDEڜKe|%ySj0ǁY*3tzok # W0`N~ha™`?(nLZXV֯hr{踑I:H:U4)R8`"Sv7ls Z"rfeVHRiN0$6 m4Bu/&1g|DF HYϴܿC08GbSƒgK:97[赨F-ښZ]{`"݉LUc;JX|sh4_R*9haJ*w(yWy5͎-Yrb SWb,)pk "72;=k4u]9  gyaAu.Lm&*DZW$9YA+يs^` uMUY5MH 6 4bNz lHfcjMfk]x[m[HV2hvt#3IKK<~HP5́l_:B.Kj+T&]6늑,Һ! ^?GY*(B(qP}h.Ue Fte*ͥoS_l1`a͕ 3zܚ$jÜ"[S<~QLz.M]j9hYփv2hIa v*t mx6Pb:_)=~$􉄛=QmBAUf~[!R*}sfWC}}>_i(W[a&4\82փV if5?f| -4S|Y}K[ao p51Nhh$gݸ@x>H*bu {-Q=GA&K.:_ک 1~9oQW aN 6 /8߉8NAh]:sqn4ÝܳYCycPT7I&i wKVĘ.R'aG`~h|]j}'^*LjcF&X?Āӎ7̙\p(nK/q٣zPiU1xCn RE4܊J BTT(}9ϱ?^w Mpc $MA!(.{'v/47e"d-.LCΈ؀ˊdNigD+1gXD(-uH34|゛ch~EcbbyMaۛfG>Vk#*[I6Sl0A=b2o0mu^]>Ga࡚r&R0ɮêNC"K|&s q1Ut]?&Mcy>%(G]u.1HȂLʊq to&uM<+h0]9v kB̀O͞xcNf1GѸ FԄPB|C=*jfVp 52* Mrl~(V^~{qI}9^Jj# Р+Qr(Lաֻ9aԾ~y =otI*mmqZG-*.?0i,+߽w'(Ծ2ݰ:"0([?"u0^D"Cuzɯ@*3rz%"sp ~*,| aSPh_Oebm֒LV[X'YʀI9] w݁DLZVM-JnRp]AD/_46 !@pY=>S()>$ǶU4E ۷7Z'q7x;呡8W%8j! Adt^De1k{@DpkT(ev;0bxX|JWؿ!#UX<2 F|LrMG%;p]AQ3rbbNakbKʭ>z%pA{ +3{NsxY6U[ 6VX]}Vܜ[C:3^/=7Ӽ>PbrZBgCnxޅ45B+.ԩubFIu!qAOM [ B%n3lb2]޾6n] gar$=kg]w؎fyPMJ HUO?™@Gw ˃bK2>qi 1r?wi_8Q;x-iZ-/' vBYHO(a8%6bTE3adfkFW꿋oĊ1J_nڍ%Uh2/&*.hI/NGBAa 1|TVgGIEE%L~Zb1y꽡JBQӊxHMB_cVW8#Fܴ|ũc&bΜ>nië5S&~ࣼc V*h iްYQmqp*|pbzHrLq,$D:!mt ZESQ?U킃e$TOgI%о[qݟQAoƫsW&:nΣH`>Ѥ%vklEſєQ5pCWP'U[DGme o.ei'jAw%؞ܐlFOERwPIh(ze[yVkC_yS4@\kNz5*knx(T;W>>R=; 5rb7_*&A+1@Mzxp'>1q]*#Ϟu^d/iHy9 aJB Kn虯/ *Sԃ n^R/Bu.l,|E痑rB7tjᅴ<Ai ͡DƔKˤEtL|7zʉ\CÛH? M WVi`?眎;s_q]J*2jrw`뫄a94(ĩأabΎ j.Vȱӹ?+!#L*K=8*̋~̱ ;|FgЍFq9 U=Ug6N\h\FyLL 0j%rK0u՛wJt|5 m(p"*`}X%u`U8ˍ. ;.ǛF̟f=?Bi^JnuA68&)@S=Bz4J#BU{ XXiۑ0(?tkc/4tC[tRӽSz+iQuPQl>4P'8 1/F- Ss ZV4_@EA K{5!dՇU4IUY:S@\4 %mݓpr;3A9jnɗ X s;u~<| lk;w)kA(SYjA&?M潍$>o.kQerK#s>Gz<zJ٧KKvbچC 9sH,XzDvFנ^s˾i,j3)۩IܔtVyof۾n连0'M\ˊ%bӌ佸J d#F"lDk8z4azZ5~UJA|8.%gLyv83)oģs.RTO2Z? ᖔ_'aGʓD; 1yM"V)&>,c+otr^/*/SBuC1cܗ숻swmДIA;c#c2'/c礿KL -\@ +YOHϱ1lxo_y8>"16zDČns% sN]jA*榪Rٶ_Sͯʷ@X`CUE[]p zZ4 CY$WS2#ć&0v,Lٮ]Hj}M5(ʋw ͭ0M9.γZd9+cyG'jg}q E@m#/,evr(7 Z,_5{xg%W"ojHN]WMiyp9&!o x3wk<]F^Ψ4z& JFP 2lePWݔqJVJ*"LTT^.H`UcjoI:g.HK&AuYԫL2+6KGv $M[ ˪juo& +i(ZԤTl0Ɇ+ r ljeQ ` ~Oy ^I!u 2Th§y5 [$3 ?¥Ô)")6|5@{`ʔoL]\2irufWwlBzɝH3J{0ƐzU'8D8dﳚtq/H4" 3d5Aa_8j/:ё67MܜH^kZ%}}*:Gʹȝ"tn+k3⑜9psEyk#C\sBސDjj2s!aQe&b^ʭ*!G0G(ԙ}6{J0_{ȏT!S(ٻ.!ZQOgk2OlZ +IEl@4PA}ej;Ii-_ a=Y S]=~*[R4!̶նŃȏs UTJg)p<;Oj.R *C8SaD J\SE{u =2`H\ke?,8(w/љ5OmfxaOB-aow tL٘75LO.70WB?N{O @KFqc4^OMt[@l=m&#ȃd?yxǔMDro±}!\OrY dz$ Z>9)ʩ8E#P#!ΝʬwoJF(╪iͤ<ц2P嘆~G|gx) !uFh @{_q{Dz[=@ЪJt\D3(>GYM"Ldb˟AJ.>){~ T+f9wA@ԙ=7pMjn\#˸?'k'/2u/(ab ھ2:Dێxw,|92҉+!O6gF wbhk2 ax)@'9rQYS"@jqUU"xl*!4ܕ@zD G2Ecۖ#?j/}zaAVޏiNE6w1J31)3WͩCϏAz0ur1I(z" U,(wu?$Ax=  d:Wq*3HvZ5״W^I3 ^wZ"@o{LОztE#e2%%χ,u'D5yԎ'|ZڳE4ӂ*Yzɯa#S]:*!&B[:Mn҄Ս)Qm ϛ8gRQF6ߺp~&Nj2:s\\gMڂ* < Cø9Y63ay4=B6yk}~s+􈇧PUHL|tOl:]Hq0uTKx;2PﶼIهgZ9}FϦoR8x+ZC~V|zu-ypp~Т9z~\o9.RU2z;1m. Pj4!Osh1pPAa F)__g'i!SpS#IO9g)q6}+ .i-D,u9̣Cx#q明5Z#Bo."^?T_̉"YJ2x/~EwPۖ; gg> MWNʛ Tޔ7#X7_cܠԈxV5ZQDP %Zx M=,|8^bdд1;1L Qv)@+鼐fwb ULBTݰOMPYOr q"ƿe[kSLKbm'V"qqaQn1yU|uʜRgxcQQY5D坔\b7;@@XfrM ^~6\ [ )}B5= OSeb좵EXAі7zH;~ A?z y7؍:?M_vM0f<V\fWAb[+_HŲxuep#6qn+:ThܘBPEjү}9h ʚ8% zUqvbR ul^[MKKH&a5:W9d8Sw⎆|ޖRyQʅ"ٰ~{\8O#-ٖM@ҒzMdՃvg\3CSq:PR0?M.„\ 4m.8:uI;]?<ثΟ`D3oIUGf#o^^Ŭ$(]Ԟ hɐ4 "7a3lM_GR+2`-r"Xd 2̠uaC%gIG-mRUnU'87e*B3iz ww _Dj*DB'26vLgѐ\ J!~<^TBMGXtgP)0aMz Az U$}hXeh3"(rYՄ?94!KFAS'$~z6hx8E,%ÇT#{єä&v">9Bd?:C%P|@{LiKA%B34܌$(FFjJKxL{4쩬N:nP{mR"@pW" 챵/qR .(8q9w*R̶ǯ \\+x˧ FB 5tۭ#G>RF]s_K!\\xh%+&l|v zlφ> h_|U2OOLf>Gp;իxDw8O7fSI)5a9VC3 9 >/8Cnӿ az8*84 u/AK5qmUifVqxǢYA{-kE$"r~GQ{ENoK'L$x>in:%6x #돴WحuR҇Hm]glx)ENcb&(?JG>j"nr}P+f-!Y⸠mIlx3O7+K)?l*{e:ٝJ @h/`1؅zPNUBt - eeOf3';WJ,>>ò1{Z*x܆/p NEW=dDeǏ$UytJDYQfr7@2yV 1m G kgN\wTgW6L?mnc?5x{ci%-KXCd#2+og"Iѓ(RN1Z8\PFX|FE=q=vkU;R#3[y>Osobv-=k ?f:H*1ɒcSk5h0 ʨ=X\#qol}p _; &b~>"N,zg;ؖ ١FֽOCp%P}-`[joS@(kvpМ)2`@7Kl6L#Bђ|\Gl \P\l**+&`Ldl?Y`MkNHزqqSV}[xizp[XkD3jHm ][)3n`_|6 mM+Ch]W}FbcuYWeH{vc$5׿A CJK^ZdpҌ)OZD̫L㼸 n `T+}<2mMe{ EvD1ÀH6ٖڏ^-l)3r$KܜKo+qB h. .ntefr%p̙p%9n zY%P%e»܄/VBWioxqCu=Q9 vCU4̰({ҝO,l';x{?V+Z{RDYZI[ɲI q|v%z.X6v3?}}ϼuoyJA4HHw;j?H oڠDb]$64Nɹ}d&[ba<ŕu W-w67NOmt^gܝw:;>!9'ѹ- L`9 <W&WE'XLe+mNU=o5B#Ѱ8op9(%0T7i ,9ܢj7"nEV@a/ߏO@z7+dyxLWrNMcL_ͩ]tk.`"iT3PF\F:{CAfe|h_e6HR̈́O촳їjtve̓սɊqzjõ!4R.ځ*l/kv=Z](/*<<z-qe ءnSNs#/=M,;Sr]N=c;-/KTDqgZ.Dĥ:R˩TL2ky|[2gK\z>P/_`=qO+wL_F_:\oQ:iv'gh xr]btÍ*eM3Vb kE 2J b_,6pL٨{}`G648H|atAR#;D#)OVAN`H: atp7u ko>׏Jd1RmP nemЉM|;mSnS/`pʍP0=։N0mC_^A(+°jIG|~6y;a|)IR#B2yȹ,ghiH5_ScA䑷v-j] $DF ڰ H 7q$?v(x2t!ci4UU봣}A7TGS`o~ N@IX/=D㨙br5un@u3Ժ(1&>uV#ŌtNk`),zi9PQw@)iQiP kB1v奭B2u.JE ,0p:gc `Qn5 wY762H??A9 }6R3ڙfg_a05]J&=Mg[1Vc>髆<pu,QÝKdfU01-5UeoYa3iUHvIs$ 7m?"y$/cnb$~RvQ g#J'ެ!n9҇'5,jL8E\\&~w/\O 06Ʒv+S,h&]ͪ #3{Qii7n߃dC/g KO{&zѫ?In3x܌R ))W[MWL`[M* MMAn8_n+Cr 訮mԿ{_,U\Ëu>eA26c-ދN chۡn๖[8_ru$qT>T2ų ҄/0m\i];qB(j޼'mMNW΢p$43Z|`E g]!`Urg;c᱉: UJZGoͩi(r9xr $>b J$(Q3]|{:ɻ\,.A ygHu4W4wn80o͉vшNDQ nF%qpw%o&3C)lƧiDRtc-|[B`j6h \9mrMGT[nj $;]nt܉ʗ+lZġj yD8{fF{K61e~'?=q}spLܣA%b/I& :)FF{bhIk:V d1ɍܥ= ~o#^oX)p0'1M Cg0yпVI@TڐYXγms%+v42[dUKαJ0vwJU$7uCI JAǝTÈz`lyCZ3(Xyg8A[Z7RG~HBI辉Ҋ:WFJ/DδZvv0>(F*R1ozSLPZC0z +A/a>ޤm6E7|v3^%<`%2\),8N}$,ɒ"_'T-Э Y%,obuD>Mg'T,$Pڐu0p6&e0<QL/{~'O9DCWؙMM 3X hygҙ/6 2<|"z,]IK4o|AjHl)\{ +V9FX`[6Z6&wIPJ36~,e-A)H0Dz]~<geфer> 1=;|3^}xc< o27@5̂z+p#ʺv[6lQx,"f P J`W[Og YH#4>i]qùd誐X[_@#J#0<2dJX_@",m7|eo&6m^0l`CgagȅQ:LDa Lt؃1=g۴yw"~Krj[(op%\hT=@U7~3d ]L{ifu5wIQYMʆӎ[RD39~09$o~yڀI\+orb/` OvHum,;wH5dB@ Hzź72w9bu^Dڜ7%{qW8sN+aXq76oWy @YB4?}s(Rdㄝd0FȬ&3Zy{<>pckOx#$4Y@dBReDazAHbt)F;EPkk[V?Oު:|!u# M9gz9KX{gM|O.Q*}PB_=_w~+U#I:ŷߚdzhٖ:aS`zFٻQgLqC4bŒ9X`e}zd@yxո:3QƏVK6^w6 /EۯS#~-@Eϋz.YeK)( /aKV=ל7/f"}CF3k ø2;#}HCgMޛg(u򐭞n .f/acd(Ud=*g!tZw7mu?sS ˨Σ@bAo>M*00Q{vf%S EW*JC3C\bxѐi1w.a`@/Y3|_F t~774I |Ϝ3H$,:1}X٤"g썻׈U@!@{c2 y=f.&'\%1q' <`"uo:Ӡ=s Ldp6 XwOZ"4j8Gu GyBZƁ?veC˘偶o{ݻ^a<}jKU៑v6Lxԙu^ ɢmd" jCG[}Z!dDUɬH5|"`iR/'[r%$awqgs!LY2h=@aW MfŃ@~Nx~f*<9-U*ۛo 5F-$2f" "qޢB P4vu䷣$}j߅(Y2b1*V8Ia[t*DAf'o_Sm4/@:vBuYgRtl$L7,j&Lm$.Jqp/hlI*(]C7ܯ}aWG~XFJȄS8?B%X]ONsԋx9laP0o+Ǭ_gUHDSl/E) m` {-a="^J.[C_^TOg[&r6c ^FM,^qu)łdܔY?2uv+22S=R/2QABϲҎ9FB%tNWYt[ ('١$h"yI!?8&L$jq~VȿkQi[hUJ(͙^!` 6#&++:/4«2ea1s.pudfd`⦆FC7>|[ 瘘BZ`+&xj-(veg-HPJE_/4 &SEpA/t -"b$Atp~ZU}c0;pԶd޷@\ڽsiJZ>=&I)m,N~-0.a49Ò;h| 5OrҺh(E [Gm=<߀bgB*(wM{jX3\B`Џ ;W;| ѱ* q4Xg f"Y9x2l\h2YqGjp61¾ÒxN.~f1!:&zP 2v ܾL/4hxM<ۇ6r.Wfx/%-_ vr.AWfIfZч?+SEK ܻXKS:~0gD =2{s-.ʊA9co&8VpR{ky Dk6C=4L>'T{4uע[Y?栾wUkMZr/-gWL`I۵"y0s!6mj/^ָ !lۭ;mfT"z#7\?}EP'1G&ˉݚ#[C\Rށ:\ٟ˞;D2ϵ\X/٢F8 2yt6G vߪ% -p2m'ơ:IV7YF}ԣ}:m5:*m*)aH̵oCAL?"QYebTө*=P~,*P9VJ߷mj3G N- T%Ğrs}Tݰk0KH59C$` L?SpT&Rsz#J/p,6x̎znL>E]ɽϑX dL}&V:A`oJB [~Ȓx7j|G !7&`l S_LrBY%+$UB,Dy?h-˹ٖ[]V>^\=uGms >"4A57S(<|EWo5ΐ;l_y7*+0`o bxQjK̘o!# `(+_;y(}vT*\y`eFwV ;U؃t|{b~2Hcrw.Iw36=ig*tށ1D4k2694^j 95xA"&{~9Wщz*ģuXAn]BE>Ma*`6*}vy̫8cfV&Wfϐe Ns`֊ _,NR"b(pR#ƻ4g|f]{; ע9K#t?MHtx5q5>I#Yx*}/c7G{AJmR%oUUdc՜5T^XNs_𜸷6.G0Reqk%TP?mHw >"1p~ %vtI-21uOЦ 6~lρc%lU;c, 8-4F`S;]Y4s?3i>1"ͫP\6&ՎҐixB(Ip\cͪa9fz~\@Lwop 4喭D^b%BEJu'ʽt3PZD;~jM5pwTZ8,nuVJ6 &.=H\u7? qZJey6ءͬ ^ tiN: *=Q%}з@2 7>Lk  [&Wc_˯!5Z boy9K}d3K+@N&7%?UP͕LzA&Q\2u p״u+w4Bkq>&aEFcJƥMQaAB=gXt^LJ?]YB{N!jd-qg7{o,ȭZ>"l(v!EħzTB")o|TVJSy)w_<(Ѹ }mItuo [y4t f_RK=f R}k)yHi {.:l..wCqD=:Ec"24I:Q| r"*ArEx*)(Dj*%:9'헦JP|- ؋Żu_.kZOttt١zԋ@%bz̥l1Me:?rA88]+ES&f]lBN^_Gf y0Cy,*gv7KOܑ.CORMFjƸG2L2K^~mm xzӼWy$J"(ϥ'hHZhD҂Bq]B[ u)Wd=WIìj&Z+))"$c<)l##m0bĜ8:e};zy+o "ssY3 ԼS@%uc6g/ȓi-d̫~ DWVt& ﺒt钔m=3W:|&hƖ{ntCȌvMOmb"1x&AmϿDR(W@)>Co=fx ͪ#xer I \ 3ckۮK\/ qbJ#d k1 7 {Bb-zvEf76䂀áM\tIb𵆧E3x!|B)c3&}oeq5SތZ\qFOk伩ݤ tOO@ r ',RLM!qX~Br=(7lhIxȥ hd1+#cuj]odϻK[ŝx7~j_!=#̺ j*-^/yW!qH_tfra京uq Zl6̶|a%ݛw,GxPX 6[HGtx*\ȁ^R]맫bop"-ق)xakN4Hj>o+C6MEnF؊hI2l9{Į@6ޠK9E"&&[zwx6cOz_`׿(t-5Y-PsK} u+h&Ǚ㥴u@= ̝*d8 `׷Tj>d FJg9#xVTDO)ꩴ&3aǷFv( ZMӎy s1~;&lb3s[1 bf@(uEO&[TFEP-Խ C1Kn*RF\ol?*$0R{pgny˝7kT1Y.¬Qp*hZTO/Ts;7K}'p: NMkF;R<(rZ01_WPօE|y ?\ʰv:(e2Njњ(d9FA͸ȥnUR_=?T;mv"xvKd1昷ꍺElw_f $,Qb.NqT^8Ohs{B !T`5VFNRt~pnWP!\ AMa|IX~*s,ѐ288n)/ȊTVט!F38NI B1ׅÑܞ*͓*Z;e0]HͺL]G06tJIxdb/M4~WRAӴ ƤRVp 2 ; aI2|5 J9U M3l묉t5!eF|ľVϫcݙ !ynjIP]Y *j60Cj=+ <'{IP3g &5.k~*9e0FHIJ `yӋ2s]YԀtd|r$sm^&>< !bd* " <teBξdotvWZԗn\%$21*]U.Ml~NaG7Z d 0ځ>jxl%s{#&%nR-4H*Z_R{U6RuY{A]d! b+Q\0˓ز$,&lA+%Gả=Fh/!OXoxYw ^b@`HȈ{Sn4qOLnUsT@mIxa KHcqm\|:Z_i(I-F&+T,D^kmY[)[ߨT?겤b:49fhzruA0Ij2]f̮E԰mp0oGH dz5>5&ls|%8cqY_nȵ FA^5.Rjϣ3?}LyN\sYvGjܷ1U+d, :rE~A&(6d^lO:n|&ǎ4 3s^$`3MYGDkbkW#ńf֧[fieqg_p Orř[O:1Ȥn!~<( ƵQ}NIdȢ7҇}뺬,3D,_ GZͥؽmw?/!2킝OaJy9gDsol5=}n'@C{v'cvd a}i8\aw\|֡wB$ @xKC53w5 ]oړa(R(Q:_ gY;3M,sB; Rjxb${`t*%4="T&q*,a❑--GQ|A:jxꋿ-+%˴'!ξN=>愫kjC'8(1 IYR tH< %NH4O7_6ps8)\CڇGX5?DPź- Rkέ^h9&YHFj*2%PhY8_x9BT-Τ+|rD2Em_9ʸc /adAxXH'SP4Y3|p-PG\uۺGw)evàj kCđBre~ɵzA@ԹL[[mĎݜ* =l$Wzρ7$NB)h`? /DaHm+o6$(xHx(R*#?sJmN33jӍšTZQ)gqiu/,WADžG^f׏:X$Zp|Yw1zP_حQvvKnD$JY\HxCy}t0NhOs#qQ7de񝅒]pZcĂT@-xiL%pv"H&ŨNW? );NVయe0oj xX:{6F] dSG,`|`$Uvɵ,3l㫲z\ͳf,uS} uM U{$vGqK.M':qw6#VVħ1M|wcI̖~?%DԢ?"?> c[~>ጭ$8[;#]?<jrӊH!)oe{BTbm}P+{wnn )+9=ǥ۵wz2SѢ`ҴaNvа[B:/+*UNnؓucKQFD~&c0|8YHMZZ#x>Q9op|9˶?Ӓ\Y1tK+\d;1@|BZ iL _do|cC9}y<.BqzkG{.ziⵕ`uS z8 bLxNJ#PV2g:R%nk S9RRZ1V- 'fr) g. P >r,iK:)Ɨ͆ 44nα;4>c{_Ħs>"g)s,!/ 1kڶ;r3Cfaeo`b< Ι5dH\J# q $ rAhsJ. N|a5J\3# %qܫ]}Os%`2%y֚3 3RE-|0Lbzˮ{+X~0m@70I& YvR-yi], UzBBO-8/ yYr d njb#XkDڙve[#.G| [Ъ.O;ʙs/TmsY9BT`KM?1ExkIITl03T{ӂ;=8_c ~Bd^ 7a1M@%;$zg!Ó]GYv+|Dc҉/n Oq[zxl&+72rH͠K_!v?.P阄AC5?nܖ&*z1p]VInrZ2__b nL;{sPY>#8?< K#W7 ~ǻlqqfFc^RtO6`'09qW,c-_7F LlBDQB3xDE+7{>pX( YHlMzlEc^l$zmdaŁdgo-z>^=CЎ뮪1g} *2tJGCzkOL[$IĆ!8oQP3KX0, Ztuuh%栣rD5dZ<4Z E HSk[hd # m Ij05۳1jhkXlK~K'=B: )0'>9ġ N z[-OdBq{Ħv čCViHqnE?7nK; @^7h6 uP (t "_:O-~=зn%[p+{ڏAZIh߫U"?ģ<3K@,˿O8$ 6AQ 6*0R%F3u1{=!`7G9! ZDBb+s㌣]vxC.Wauzyì!'7' {GO. 2ī5rjk*Jk ̯@}>T`l5^0L#p8.aLGS@޸//Axq$St01v"F,kYRGA+|q^`^a`¿ uY\.>[b\-xDU<yG3O:E{,)r׉U@fB`o}Q2h?-iN!)sunjՎϞ/H/LR`c[`7 Nr A``|i:4POd^>mx> ɣ.jvM(tG^-FwQ2rD9Kp@Mp%g|oD"6* |FGvDCZ+oj8 S/ϮWE0U<6COcW7ΪRە/C /pȈedQ$;b7Th,*Ehd vb#!e#5b937=yY% PE<~6w%g}=QԘST֢a.4&~z!yd5DїY+|2oa{*EOo<0GmO46Gn|FQ^ʀ=Q{-ՏVH_ 6k5h 9w A=^Vǹ?+7h/qG|愗%zRܞ!4alG4KpTYMp&PPIAb{SsGnNaʩ?oyckRŞ`u/ҿHe yLxȬl[>U/ n,!&}tb;QDZ8:1gaRekͭIt\EyWVc9ю;B5v5@"Ěm3?beX(mfN& ڤ5ʲ 7hjrkO Uky1h|b}ROZy%UmLi\ }*JI>Vt_ OBO\/E𿷭NȞMb%"E:k}zɥ&_Ak#t@Nrdc b[IVnKّ.422IQ єf5)\K zf D/x)+T =ÅG.*=DW҄sA}aM}WhX黽8\aAr?L  ZY0}Pw3.n#tROA^+K֕`dT|E1X߻5F>ձayv_׿08Eٷ)Q/9@02,ӯZSu3`TFc 5ލdn0Q@/?u, }k>s|B3toIQbx쳼=k8tSe?Jq@nṚ֓"BDZawgvv^Lи"C;=B{k%Dc4P؊d S7y)e~B/.Nul{# '1+R3ҁ`v\vք|SASB< sgvjR}jbWML=C-( ~ xqAԿ}wΞ4. 68tH`TD C+?)D1l=nXW3%!5{S5ى}m'>xӡ!bҥ hN*8ej+9ya KpF F\ff11UU x\EZLHӥw̵O;bV 2O o[ /ߔCmeK(P[n61ĔBh:גp]09_n L֖Ew??UYVGFX89S-":eK 9 ABܑ-pZI|z >lu(K%2uk.ى7;K1'{FIhw *K. 8!:t~?1_ RQs=e7q>>ڣ0H^ Xc6C4Kw3%bh9C*DD:I4ڲݫFJGi%`\_pQi$X>N(Q1rLy 墟"3T=SȌ2ICM:-}T "I~j9Y8-[A@lGU'n(8cI嶚#_t_˝/ ̣~7ӭ~ 1y lA7.˻jx )7 .?'9p}byrUR54ۗHw e&D>8@R7YR7SY hV}DZ?O|64/ yX} )$`C^Q۪sq7Fu?)nf yfv&)G>3s4Xt%7jDK5C2p=v>6/}Q%纇a'Ui@7yS`$j0W%( $A׫0}-@N^Rds:]iׯS%<z |DmPy]5gYHw#ozPVZ{-桖&Fp*.~0Pt#Ǔ&Wd{ؘ)bBbRgYEjf߭ lvv/egqRQQ?$QJǒ]b$d2Fr7uXh|}%Ak *GG;B{`I[ғ: k7к43˹VlCfIi x͕ħox2Z[sgOw6ŚM-`Ȧm}#nlJ+u$Ebz)":C`Ny=6μOFL;%e'-h)`-AQ$6b@t e*30 {MX/2qlsB܋rRh9YVBh&MeC3s/}q "NN,!kpJ~!lWILQPQ2ձrV^kYG$C6w0\r;F^TpiRW>=ISblSnS}b?ɴք]SU]UI@sJD̗lvNJ\zWE>9JO28h9*Op]lFy28IjK"Z:zf ݪVPߨ 9So;Xt SzJGUR'鳑2T ҜFmoF?1r%nƬǩ SC~TqYK.?h [I X{A0$/ QSɒÀ p3 E<":_n~?9 еkQ@e +,!q-[4ai `nNNx:FaI~|HYH4龤R,WVo 2+K^mm혼i0(̘]]]Vn?9dG}÷8bj3XwwJ,K#srX&%$tpJC6JLk:T*$ %3')fd#ۗ<#\d\|rRu*ikSǽĶY ##sH rIu f'PͮKaQ>}x|~Y=poܽ3p-g[5 :h/7,*۾,1b!UT C)sV#r#Mf[7DbV1]'^'m͋]%ieښrNWѻ,v.Yi|;O\n>g, f^n Vt2e篻k-Ekk`ZH3gҟx+]Gkfl1w]1󽮘ކT+#qh0D{c} iBu7$ߌο\H2M9%>BgUM'2Uᠠwxx*i˜+&f>OahNߔ%_WV+ SmRU 5Gd)XV>^u?{~HÏL%:utr?/^Vֽ٘KC^R~þ˶R`1jR!+T8㔐4+7l UXA"뙥9,Z.uҌ1k ['1<5ßjǍl;(2Ƥ:U^vGNyIߑUUeʸmhysݑ& ~l?PkKfG;v ߅b|ca-U7-Tu4(8A~HY1 ϲj{qȝXzd6ïxB['ނ3HOWbtDkU^3`<1}\$CV ^/G .КF\^kus Q:LGͅaŔ~(LbN*ڒۧӲ}ϜohB7q*虢)ͥt.=V> g_!K* ޘyRqu`镴X7!PniX^$ 0\9XāSN՞~4X؄^5Mԏ; ~dEIM>IUˉ slZIG=$DlfD͞olg s*O/$>=ωMf( Y Fݴv2kj͇Z, G9tZؤ,B&fv v%v#V+atWJZ@yIPD DƔWuL؈Eya`vȠS&/T=ɐ =(4T*$P3.BOF'ޮȖ4(/a^ΈvBrm*O{%hJ{hhG* O@d5Yzv0u\'Bq+- l^-!tJQߎ^dΪzAɞ–1{wƙT.%C=1,-%ꖻh삁?8Ll-{i_~,k8FT=!Y8d@74șxT|sָ^e~{ vb0ϲu]Gffg޴`dM"b[tĴ1 BKV>6f[J O[ w@sE+0H:=pťR̓}k%µ,!8mC38fmgO+C{ ,:R'X~;a,]g 55.PvgAɀ>lïIc~id#8r6m(cD_0=m?VPִpZVރKR")Meq:iXL!pvHՇ*tkLNPl곔^@{6ͽE/#4@3];;E3@ƢO Ee2Q }!OSqٝQ:EQ-aTq] /OוJ"m0mĄ`EVA6Ako$D(CJϛD{}k0JXneQU!QwRzs ^c_#P"U~N(wm;ٺ wѐ2J#h_">v:1/7\ Wt!N(g_|?:K/`xkVj, Tc(}ΔEMOMY1{)R@u1ik.T"hʒ;[p6ۜ. Cw3C=1rVb1FRx> \|\LP,Խk@T[e/JM—e }+;/<j5t\c5^Ǿ HlZS,4vT ԋew/>ٻƠ(G%>PA<ϬDxh^'GbW;̢x"F'iJJ%-Z9w脯ݜ/{|}gkWu16[et Y*΁Pl^s&@ǥ悍;Mni}qtڝ+UKgD!Xmh+u meU2GuJ naU3,8O4d*쮟b}Rbo$(oGPTfOlLEZR>KSy%+Ԕ5vc >~c8HYJ^,< ^SѰMh*5 cvn0 GD2QKDK{"iٕ]Y`jg"xe+3nO-K!kcqQu:钌Q*g'X@㱧iqvi#Y潼ۆ HqڪsPQob^4 #9cJipgL%jcjp悫薰:S5ߠEwʔw ʼe'*ZZ U5vf NMpe~6򵍂"B hWju˖eԁnTjqNjɎHBa=yc锘U"`ѐfA3BT]F'G-+JF5_e> sySM#beA@49Gx "xZ;FwQ4[[Յ\l*JJ1 ̩yYz\z9s Xdz1y%T%>1w& D j Tg:w ,$/ϊdMiQnf&RD,oM~e[*RqP"X@5=Tԡp'P |QmvF*]]QZ0!WP1|/ On%3, ~),˯5_&Ŷ(|aPeлUqgֹ[C 4ޤJYWÈ0ĪńL!ij"79Q׳I{skX&?͌:f0&ocDXO0iW/,Ak 8I7 ^w34me\W#9 nj6IC o5vOmJjỵWЯh5/#I Hc+#6@ Ar`]ɲyF(`[#0RltD5W<+c+4t/s+kkAli'0F6EމC'dH/-D+:%}_y5]7?y_uL@KD"@ǘ VAaf6N?rSw)/ՠPs+"&86+taHS-^_1iDhvo-kfA)O76N>ht  UȎN(N;y6#{~HyT1^2)[5n2[x-3i1@eF@ KybFu `e2+ݬB[~u=c9AWQ"p! }q؈ԄfQ~ܓ0}9٥%45wHƔ|DIeiN9x YlJXb 3IPJc'zWjl7)y14АSo` d+}؆ XCLJS2Rw'?oln]ߛvlFŵC({̻.} -T\piZI5U*;_P j + ;k=HH!ϱ> 9(+HyR*H,!l˴<%Hul$͙.`V_H'P WXO T~3ߖމp֑1bgW1pXֹBp9m]pVV*߈#V1p Xx0;-9 V7t*勐=Ġ!y=h"ᛒ"U2#  7soM ?֊l":65KhTdO,P+P3,)}<:::aO4A$OYCTjoȪSgF1,A>q wX/X GV9 &OB_aKș_5ؓƶʖ41w[.C-3[R*8 JY&]ADZ'XaeH~Þޏ:] D21̹(fg,ڡ=EjDFlr͚A(DqLS3s\yn&ŭ`L/ЊNP p;Z̦T ևXm맍1ʗ\Y3 6b ddgtvh&&M25k--6JT,%U.0MX23<JqCyG]pvQ_9ZXdxRP*LC37QA4֜w?,8} ;sBsxݓ[. &vC/OID bvK.0Bl]MN um[i)JCVȖ`x;S`kΘWSZXz$w $_skk녺"Pyb{e@iI<,c(,%S" F(B\]7 Β9Hz^:EH i@Wtj0nśểI,uAi"z׎R:yZfn գjjeLWk+jkݧ*G8w.^@]0d\QRHa\,*q럨\=kKFqRYZuJ]DgI;0[,!K:[{xiHI^"62O:nezpt|L^gm{Zyx'Q"b\ EqULGBSv6T=9Fʼn쿧\DM?{W p&DؖmԆ9 ޸VKg_S\^^tuG!=—[v_EeIj]Td@hčOHҍ)sCݗEdd<^Pw4 P f7ڬÿHcztEzAk!`>3¼:69k_]Ә;WUmz}aeD9SnWm$ ^~MEԎ&Ohʳ6k9(m\rˤDu5(; .\+.l^x1k)duݳ<CC(W6t3oРS7N'se$@UK1p]maDrG3B9Vx+A=XLX\m(s5aQ|g9?x"^\HJ }bX:dnY%*ovnDo$`H0W]YH"fSs\ 1:+%H S8F)1ULJ Oa%G(L؄&@+蟖7! &sb%%Wyx)Ahh$4HGuɌsLNcG!4&\6. jL6ʁZ\Ͱzq5T l~;~ $ò^}[d(}/UG  ڷՠs~򏺵1V{4SSKz 8#%ʀ ,7GlObX3kF%㊫ciL ]g6! wccm_?*V;t&eeHYs m t˿tOM $?K5NTg SO'Ώ|C%PKw%X}q-jck@MPJp'04iXWYΝZA" ?OWhd,#'jqh +K |"6?kZ/ׯUeDץvrinRP`dO.)Q凞 0Y<%~M+:ڙlJpPXJWI-yuKk hñ_)DCgZӢQ_ǺVc)1tЌ> Erδ4Ķ=cU E;ȏCUxZ`-?%[0ТW4 7{2KrO O.9qha&˸T4)¼&_ϱ;тU5X/hKxxB[$21@<-ʃ{QcV%{hڂT.m)n*)LD{8xA_tcp3hFM_X57-X_]O~ZH-ژ>~a+@O$caP:00h]1<TtK3TuFhCT&rOr$+`8z> 4nt=nl Y1ɔߪ7R{uӹ_^чJs"#m#yggږZi _2q5lHYFw!e bSVD5*%RJPpy|.#g Yp?HT+lK%ۂNEK>}3&̓r*/gj(]fC{]=Cta˻#dF:7ͦ}{QQժ9}O1#iJY9F'cDo?,db!p3pBF d`(MR:6DAPrqcNH8{v \Ws5Uvf`h?bmvO /&z-0 6;V??TA\ݲ 3~t"!4%XݬԂ-KTDQ~ 8` -UJ)"mɅ>2H^ f3҆972I |),Ypc|)N"z9~lp8BA'ڗVd;y&sFY UQ\֝@6ZroJq}_O3^^ǐF%)@Qtj +FsJF (r (9(QAxfV܂ϓmVf/6Ѧ:: WCI=n}] E~ľwiV fc!CJT*ex( 6իoHJ3iɚM]P$Ϳ Hx4|ޏ,{DήH}p@pEgmOpKqESIn=^p!qHn1=;&<'W w@2jX_0VU((XGl B9Cbb27ZwDOjox|+ⴋ(E4kMUCG͈IUeiJ@ EhSe- ھPcBy,Й do "&.lh(*1b7MB0S|(J*7V%o"hG~RTd"}bdvn01+7>b?H}pAIk}i΂,)[aO?Q,==m&kpج'S$чŕ4%b=-1>R({>O4n;_|բRx̴6pVŰr4zCX =}b3(uֶ< ^;:.N-\wV.k^w@ֆ{Bzз_T)#BbeJ`ۣ~d6yFMYϟ,֯fFxJo"Yc COjgw'P(0#ikOMN663Xű}lP~h%ldBr/,$ XLV(N9͍ZKh٥[56 QߢF@ei)hɑg6ܧby9;&uɫoFC[ή*|i8;lSQ{!!bk m +p0xOr!Gmeu{ NNv{W4M //z~_W$&I 'O(s h`)0Q>V n`2!96NPwLVZڮ2 5- S*c"5cq*MC)S(qz*֥܇-{r2xny'U7DJZuR;e0؎MG=Ǯ&dv2pgj[wGzP8:n94}4T9EaEXy&1K"5Aؔt34Dz kJ{Gbe[aDb ؖ,L+>CC6<#N/$;cEKoH_E3hUhX48 ǭ~NgG?>z 7:%s@%6+ǏU"=h oW~T%T/BaUjf5A݀ mVSD g #c.0,:-q 8Q\ w$@wGS%uhZy*ڐNj|Rɏ_p֜xLYTc:Qr xQ0jc*d:.5 ɟs)!bxRo2VقEO >Z[r  4'1(^{q~X@3pp,A)oMݧb UW`DD}0Rr$2)A Jqxz%VS& Dhb7t 8,= \pr<ó.bV[1D{4&ldT\ 24) *yd2b G&H?L5rhhUqF>d:s|NLl/~5ɚݭwU/L%kqU6o0}gNиe@5SݫZܬR͘7v I/ &ݗArI̸FF ;.WHb-M\wg p} bkP-Wr l*L<.Vf,#D{1;cA?PR%)F8&le_hms+6RtNfg= p%Z#gl Wp%ēz3mBFϝ٤7Żvr%\+=^c܄|x@tB Ɣ KL6x 1y C]Jz|k5gTÀ&{ad30{ N;>QȒk_k >J7Kg22:R4CoVrģH qYH{V$yU&7Ǟ20S\ķ${4-}ɍ_d& NT4zs2n:3LM)P_پf]A ,rƓNUPZs+צ [3i{sHfwdJ `~#}S%tb/U  =F< -y) Qc2 Π^&譫ŽfRSF De5)GWӅ\V-b5V !^W_ ì<~á^4P=` PzHBi*fU֖0sRr)9 /y=,/MQu B3aPȈjWWa}аJ5#8K1xjpӂ˝Sg&QKp!V3;b{'YCϝjTCxVU`V/z,Ȑ%Xm?€mpm\W~H\ g+ذ8Y[rnÆ(__K Uc(rb)==pa>M:K6)x]ۼFڙT> k tm+R O-m0՗D=-SXoG-Cɗ(,;,~>MJk=U\jXӖ,Zo,m>%?&5o j45ݺ~Oi9_9*o$aߥ?piیGF0b(?Ik@ceZI5S[7{ V8it(J境ȈzR_\/:M3ﺸ _0r fs6-bT +ڛlNW$Fd5At+BXX%n$!Z'j+B9hoތ zi}8 > /@Gz%WS]&t^ds12N^yJTh3ٍAb tvf*?\ږ]`O-9Z}SCFx 5C9>%U%N-r[lO~ ?ltϹ=\`lQbKy'r CJU&54lL{.E%y{ݾh1k?/jwz~))]@je}l ߼w8"S,pt5#$ 3Ou$Jk=}T2 +NDw>U#v@%An_I:EZ_ P5w|!b E|A/24*R{,uCFfthlwUp'`urv@@*+ sqe&MvP`z0; rLBu VFN~;sm"3Fk[Eo-vq P6 w-xc(@_Ϥk{[r8˥uqhhr@(uDZf& `/_c͐OOCQs 喍ЖOX$_=ފ!+NwtjKw'Co-!lQrGHi5y~XmRm&xCO\踉{dۜJy5%0P)3|E\զ dIU\+K&0mB@+b=%d -fcԠD;PfCiB/ XKbY&4B2V?l(`{>ǒ3h],ye ;qt`jAॄTV7'ܠueI>Bק:9w}c/z?3lL_&ب6S0264B^GYf>OSqH5TX}Zr])}З!>ML<8TCϳ*,d"x1A@vjk0 `Wdkݣ?9SoIX 8m ib M:@*r|q%B(w]|0-,E ht25I.H^Sm.~qPˋ1WS%nhb AW4O] }0ۍP1%l`Tr5}%'Cp!#G@SX.ުW2ಾL d`T-ZmKӌgr5a  OT*x* '*NCNϊ2Yd7\erl<떋}u J$@|ܰ߸*/ɪq71j ;TT,O_TLFQ냛=9'!k ,[gHn&tMpg];>B&޴CyZ ǵ 2n֝Uj䩖}u]yQ5+tP' $;³r3"wOnSm( aJ.4>2%hMo$BD<F3" :>wf3*#ЗdgԜΎ:o٘3><Êx'S&5iЫ_Qdxԁ{,(U5F[F4qA@Ԙ2Rk %$9xJRݶiB$tWU'))=v"g *S.nH^ż}7A,I=x`9./´3yO Egd23""}u&1pMQHץ\k02*n,/ ]u_e|S] <] Ea#9b#Nn)7\E_P@nm$!T)^ YnSW-#5yeb۲oI\_uՑ!F<$|AiOA[8KD7N{[/]jw"bp_d*)p~XM%m+T۴joMM% 2c%!TMğA5K~I,y=_ 2;Polj1AgRn ꖛ&7dZH ȯ"Ht6̽rޏHj?+GS So3ys& n(32Tt^hgӤG [P[yI2Y*&U;=0-tuhaYDCMx0 X/7ulU:qK Nqz-,8GSQR]f+qt`^NT%uҘ*ܦUg!,OQ ܉ضz#U6 O:t&>ަa<RSطSᦏd:Nmm,X)QVȣ9_$w `"N'G^a{|ސv0Fp20}kO_#3|s< xYqU?&BX`Z Cj4ԩ.tBG}xG@QݦĒǮpsÎ}T΄ ߠR||o렬quo"iV'a!C{`>KVxy #fyGJ][8 l@)=T,:=rctY@BjL[;RC %4p`=^Vk,B$bR뒝p!)W9N]+8Ml]2K9 \T-:HaxW-3=fNM ,`oUkI[zxW݀w:C,} )ytLLOvлAYy+4wFݛn.H$KR N1n XW5aE! L!O _JQUdgklgԜ}W\f~%Nʁ[ѳQ߈mցPjUO%'^%)s}=Df騑t]Οb]'h Y' N Az0d5SC'{Qoix/R?G'ڐb(AQ^J)͜˯X5a&&ɲ$n &aYu:϶fAd!Ğl/DdE_, :Y=3D^v݂!lc#WQ)6v!BKoc |M̨EER^6\KS ,wE{хހaa؋oԙ}V᫷V`v?*WM]U10b7z/h*uTé[lP.djfe'ɞ{BHm#=sIM~q_ssksnBUbn+#2@w=nu+N_]r`9#+!%aCЉd:TF5j,7#h%|3Ƥ q )Rx Ћ60K[L !НàH(+@>jKfgFɆ柃ԋ^JIl,VKO(Qb,/lH_fZwΘt}{[!sc8{"֦7Nѐ@< d7^ ^7(t8XjVxG&Zk 7e,RtC5G7ߤc1eۊ?oCdr fH_mPZwt|F#=[Dr5Yu5:b%i0NeYmalLENct\lR0 P>UG$_)( . q@l h,M=+!.s h'A 8Yޑs\ >M{rٝ l(w$ 3N|QsݗXSw"!c,R\.s9%#Sюvk@4x*`&> a ԏ5ifS.AvXE. o_|E3#0B~v}걸~Uc]!,N={@qejahJ`:.&Duu'گ5ܕ&@(g@vU, /Z u0K#l6TI_alf5 9/gL2!agiA X?cl!LE"Çh9P}z?[yh)*ߜJ^+^Dd"z1B9(i=]xUw~1q }zItȃ$YWcévPw$zr~/w` 9lRΫ< 2afv5VUl(dC|,VscCcVRE+N:-ocaBFqEvfnN+ ?`[ ^㳯JXFٽ.LCꗚ>硫;J“ V]Av9ś7 bhwb/Hnt-MS09MR~wT(WOwυw:I`lpSU%CZOV t=ϼAxfnUtpvn3[M1/Bԡ ^=>{!Yƒ@9&=(T0%$bZ'iTq6lZ< 7F$>M.Gx0.~PFQAuD?*M7 @ }.7 ,UE'y^qMd@ՉclY:o:R'm/C5)*u&W|ck .3xER5"b)>7>m mJMu˃AђFIz k|֩U4ْ'ޘ<:غ3(8ɻYTt4a4pɪD$2N+ d0xUGleh3MEɟ`*MWSnP& ,ǁR%IO WUBQt G!^ITL%\\}? rRqARf e FdY j)[̐ -|`aN ĺO,ţ xL&P7`>ߦT=biHXkc;nv۫KxI3EY8 u:V1U_wۋ$ܾ4/dQ7NO'5O O白Y5a^yU;SZ8}_5eЈ; {neW31ؠ"Qṯp,O%и\5APQp9H 䎃Z L0~RP֩"P`ȶaL#‰^3pd .Ͼ&I^~B٪i" 2~^jH7g88k-Z\!X_F[ixS =鄉veShz/95HY0^sl=C2!2 3 &QWhFpsH8J/3Gk8<liq2O2d#F3a wPOܦ Ci:=GI |9s82<̻ݣ-E6ق揊(P mՁbܲ{?8o0/A/ίKjhKz~9 $+%K]%ì,aR߂W' 6n|E<(A_$'󗅆 dTZ7y+SYM$FH!`$' IhpG aQu5SK]~WL N':H5M}dJ2(&n;,}Cѯ E&.da/A((0m8prKQl12¨fW F @h f= ~Օ.A.$1a.M !2"$1Qxa9ԂsW u*]d0$U3:aC O O<\IT)wyKL1l[{[g[/7 vNDv$ 6EyhKź.Ãn gU,3rF.b" ų?ӃlE{Zč{>[E82 ߟtL61DUdl޺&=7صmLd$)ѕU܍&!4\uF r /230_I-͇~&AVQ Գ:U< uc'/)-f_fy zPU q:<Ԥze I Yt!̈99EJpi" ؘtcn`jھj~:T3Op0LuҵMΧꗒ H1RJ˯FNo@yǙ8W 3 Rڒ/,5r1 n &5?i #.Ea f3*Mh*-;r—=FVrqͶue}Ƙ%/a)ۜcS.䇆ru QO\lL 0h"ikR99V2kJ6S#gx649=$m&UX$pu Xii 5:XDw8N+`8Q$/q"h"^:istI\sT"C4ncSʞz"]g5{HY! 晶9/(V Z|-,+>kjѡP¦\uQ}56Q:AfY6h!.VD%Uhw(|AIDD*ssޟ'"pK]kB]r}!zycv!zwI2dqlA[r =ehu(nWipWAk IY0\1G >Mr ёNۡltwN˘L@Z3 o s>|4B2r$:vSXno>,@Ջ)C=Ft뮫 0-4m$ =d 3θ 7O6]'s0SaEdN gIݲ7|I)nDfsJ,](Z}m*[TbEp2O߄}U4<ռ',AO6;l}k8piFml D:DCnrnqb6{!81ac}MmUn7Hs*IczdC'|Pa=΂u{gXi"y kA:@qw_3IЁ @cg${r/#~?gZ(jC4[U &]gEl6噚S+1""=9 ENN!F"RJSܯs%6jyd],d7JBh LR^OԘۦwD8++ɫLw5i*R!S/}M?h9.:ɿa' p !?VB%:#c.Kqd?Y=Kʐ *7++bofi:Q-kˇ8}%1!AWWW1w[ Zɤ[{$n>ᭅڻ'2bdWǸMѧw&M>$%,.&׵$"=hwBcVg%cT7Ay܅G肣ªC9f0JWl5 =buIVˤHz#zlW CA&kLf^"3d AHltYsxu$ Nl_Hr5kL=kf0}O!7Rh'2s ōNr2R;f7's@"Ě<~cpfqݏ:nm vx)R/s1MMh }&_8g.h b'~VCY\DH7E ؂S=_l3Bޟe="֬S*b*%USyJM{z{ dž'xuxG?nw%$C|4[T[d:/Ќs}eK)͆smɈQZǹ hpKP)lm6ĘXwʀۈ8߾[ ˈpF-jn Rx)_kqTcnЉ!kxIۿ>9|HM[a} w_*`:7/Ń*OD ncG:e(#C8p؊pL~:F $u]>f0*zXy[m}O^5-,ꎥ|re]^ѹ7Tt':2cb;wZ!g^ZkpK<۠jn狐>:ܘO]6c͞ ;1Ds$B^gސ?Տ]nYHyj%f,ۢhT/=hW OBg̓O[ PD_IA{YL]?N7L \+ŖԞ_P ћTn\d69XRW :bw,/'7ŗ[f9rPH|N> '_2 Ɍ Hakʫ%NbuWz  ,)d:#l~RIqZ2#zlM)I,wx+˗[8΅ 'otYAS}v/AJ ;`SJ8i?.ۤh2 Ei$ [81k_V6 .fw8Ow[_Yɬ:`n:a% / oAh ?ưd %䞚QOՠ < $ipfRO,6pG `M! |@)ӭWs0JdH#3k6擜1^G;Z!zFUW5yŒ=蹛 R-Z`1 7I\M) zu*(*0.^ܕfˌBY1֥~tہTv)MYJ =󔃋5(_ϺHK_R`hƒUİy낏sh 11.{S@ qQ>!y)WcOV:9֘/ eL]ckz6~jz`񮜔ct$~oz$m,)˗%n9vs'q׽uec$V 6a1ܣc}DœBbnp e=rgzO#@ :C JЗ7{km0~yˣ~4Cܑ+HFw춬n^Mm Eln\z 7=U@W!1 RI6WsLUL9A}< OJyQĭ$%.)@~xX99vfkĞgPiYl]w%nUlmg2jOf4i{eL}v +SPy %N[5# EG&ܣQ :;ԅCR/[#J`Q /z}.O4lUj6YFтebRDH*y"GdQk{J. \jY.#`^l;q3d푰ɈvhdJ;x&? 6NL7ZNL#5d׉ΝIE8O*+Q22\EUW-`8u&VGdOoluqo#G:6i1GddeqJ%=0{&.rKkyt{;M9&82؊UiE8S֫A{\LK{&Pi9D/XE`GU=LzwΏ=o=G=?jvNMRJ-kIB&JaN15 uN7'qAj ҞB.= kگ'Kj-Ӥ,x0kwP0?[`y|xfy'0w {⾄h,!oSk#3_#пsc w-!^Դ'BhA2 2qՔFqzV^#k.L~)x$Z wK!);[ ̰W2 ^Vd+*%JpNf*9KA(Ǎ.n꙯.'\0FK* Qs茶*G 4Wh{ƉRAPv#:0hUX$H7n*jQPfϰw>)'pmBNiCB)Q %ǻҊr3ٶ\)N7y7L&5ch*h;jL?6(ԁM'ڶ@2)a]KP:GM;EjOiH 7{:b8_0rxܯ!Ys~2(P}yը <25-6I(3rD|w̬ *})e0.3| rj -3UMHxHxOcuG:*Cx9$ýCF ]/dV#zytbNJq(+*dx;MY|0)]+&MTd^.\ͱ6 7/XVe2M+1OD_4`hj6aiRBI}#ttI_V؈6_ys7"nG|L>%LW1v+VԨ7 @{)mǛ!Jm M̂mU#ru8xbYt_)Jj|b(_R/1sx q^BIt:zZԵ% l_>fDxMNhwX|9/\9x]6 7ն&W"+)~k'1oBFt54Ɛ ՄO#ݫzʅ!<ڨaTx",ȗҘ'r>EPih:Zk:\˃_@ߜ ߜ{û8)"CBo߇' G{iu\sd vcTwUyUx M(ghK=_2*# 3(Ldӊ}SdȶuM}RNf +i$b&E\dSQI4đ姍6@! + iXeI'f^^6t5ԝtzfOvS}SnzQ^DYq,k\Ar|d]JvN +4`<~0GKIhvy&^k׬Ӧ,p|i^GF&%u;TeoMK<5Ϭ ūjeCܸcoJ˦<鍴` |~ 9*7 !gBYo?~_夯7'hгW1dn;ޭ2W1Gvo3KPMÛM"è(wnF7emluS-bmYt 0lr(u,GN}_/844Й%\~ ~0d<^$-D "~Sגb![[ym ,G |"=YKf V E?t`$M݌V8<թ`Vs^/Jt=PK)2 51{F2f$Jl g =@xZy^(`Ss2qb+'1 NJ፪,w+Ȕdj}8^`.53+xCM'"~ߑ`V~n^Z]\QGc_p?bc Jb1%%q'Ѿ~/㘄!!,{߇~:mugׁ!hGF_,0,xI]1k8KW6 #t,2-zs<QQoQO ;Ç%iCOK?˂1 GJZTkV;18N$ X2i%`6I~##g[b[k *Pjєxqs_2NfΟ*.d#hu7[MȄsV]-:b,e\DEq E,-e\@;: Ŕq\&–e.vx=N]JXw8NmPl1Քq[D[Ns.͛;G9ŃK_I̖rBc=w{(oTC0J ]M76Hf A(or[cqlfP_O&;kFS] :$d<ǛOFFZy2Q2Q=VdbWe>3Vƣ*GP :~׬| W;=V/ïVl`R:O7}@)0q7ȓ-<8!aG%y3{g?K{Liq.~7,-Fw`c2ن$-4.?,ô`Թk)s߹2b͎#;sWv!GO;va$W8CKJ5[~`@K%Ub5lھiu n w6$ڃ9Π;ΐ~. A%YKʁhV1K}O<4z ~iN_|n"5A\"I]/[j0 gD]ދqJAWi$j,ERʈ'ʕ)&ǒVcc0ngi׮<7fEO0莘tIYxf%􀴩g?%$3# ~+E@B\PD RoW&d3!hƘU}ف:~4,ZZ}SI6E^lne|o%F$p  3 E6=PcK2@P3%RN[ILUY}&R7zQ;W_ẀR8|;ȹA|6'Gh/59"M: O0uuT).n=h:*HRns ^JdJ>-4F`$[ K%U,'aM6΃G8$(C ws<MHQq7 Q;d:CZ8>ZBD&7iH|sXrR 1==kG֙TeϭͬʪDFX G.A;E U&{8' WZe!eA"?T5D,7R"W73ԖAw.Y~ݸT)vkONMVWN}g3#u|ٷBͣ3OEH'Q߸X@[5bk_o{~Lխ̂wffWS.VSpadc|,q)M `qKC.q+`TMkېԱ=AV=,gMNF5#?ș,`,lfo#Y8T08)WpoQD92#˹$ yTa)&YT-_*3RDcXߐU|}Đر~ %0bQQ@("QS&Vvs=Yc_=pՠ¯N;q` /C3{z0Z}s؍j4u*LQڨW~iV5}]/IV&㋴,H|ڟ/,GqjE(K%jp*ffq%|*] A<A~wdyL~_Q&;uvvFL#yG!j1@(AGλ ɧwGnNBAbXG"ѰtuI0baU(tńs}~:%;(6]9m-f+YJԊ^)a_]ɹϋTENM/i+c9Їz@v9JFoj=Wg)~ECf"[2$Ib-Sg㓏ʀaӢKl  % $cvi=ld'u w-bޕ`s(Dӂ^@|y{ nD_eBeV rejjFseȥa85!#iO!$Z Fv멒%>܇ AWAQfZJy'&-6rs].49֦p:KVjS(/cKrZAOiXI1;ԝI8Khe_Vi<;%Kl*33q2S:m7!%ZaWHDDLj\8bla͙F\5V?3;'V ~:%=QB80 ~𡔻`aȲy+Әm]/e˧j __go? N:0ͥ\SsibNk1fcc'=H5>b81Vzt"aP-Gy^;k`0.7]|$V7XjLT jExG`2mqVw6#f1x҉Pk^e J~Q-¢C!1k| 7;]oEzdl!cDTV|Xu>'otoգXvLϼ =_wwCc(\&LC@1KΨF e3']9LFll';觧%fs.$Nv#ӡ5Ln<34STbs16n=Yٟ>#7aY,?ߥ%Y$2-OkJ`QRt{c(*XQ#"9AhgƽgQ.r)bﱹ0Lx kM"I4op$ ɱ|w{xpa1Sf67¢ҹe(CO\gSM sG6H׼.LLp *`p]* Q͋z"G3?pTtv" &mq)S? G.Vp ؉䜖 Br zB-Vx+$5<#GqyaMAGF<3L#)?ɀbn٥W/%婜2qPDB?ǤEԞo09ϭIOZqq^M4ģ g)3U/HY G?'㝄 2i{!ivӉk.Ҡ!'׃:qФuA)0D}ܭ+r_L klN%'2!8)eymah\*irنgus[/J!ԂE,-&>zK۾ݩW<_r9{hK,%8!4 8AwNM*HT]F!0ՀO8&ާxcRiÒn7>=N怪R/fZ $qw뱛 Oqc+Ey3ޚK :,%jy|u+l^eI;nYpӇ31dʱdF%`OXXܝQ Tt$98`Ua;d1Bi)KV3252Vɍw Z*G[E}9OQպ{QtȦ]6`!@0/k x.fdߛux2Aɤ%`Z Tjy\ϸleqHja!2f*;!d^?9vvhu1Jl3:.1/:`$~gc7C8ڥi2R;(OD6]˺?%^aM蔻\DE9 yT3yqO[UIBM!iÿ&'ԯd<]`$Ŷ'v9::I* ݿ~7д]@Q`A=𔞶ƶXgڼ!q3z -ҡ.yh8*T0hP9eleHP:V!Vpr zatxF6C@[ӔXtr ~)F;#t"c߀5K}L 6(54-Ӄ^@+s‰uώ =G3? |ZiKb{[4̰}6eճ <A4@::j.#晴Js| W-\jY,c}wluL\ ep_5vh=4.P epᏬbs Y{;q2 BmL~jGysi icˊAtD#%]M0rR@= -(w:D$ifكxempݸmn]9zmgmB+YvkiSImSy ⧐o]hoij]qSwFZ]~*R].;z(A՛ `r/X]6FSہ<: ƿZ;F FTK^ 2O}ֶifIw'@l_SeD9. @7w`Sl0cGtmqMRA7|BZekY KTNW.i^b zxu9Cn0XhP=Ɵ u}ݭwZFmyKAX$ԟ`4oʜk'RJv4y^g$uQ K(&M| su MjҴ3V$R>m3Y6uO=\ cnAmaFLXk0;91kr6nι吧| 0#={U+ZK'˖*G0$'ɨmFDR #G@c~Ͼm.:eƦ /}d4 ^xIbߣaLUN/mJa(NE$ rß gAFeL|ej_> G{i(OKdwUm6u`/r|U![L:)0w:}F00Z 21yWӎalHaGwoa]04l<㒮\UzƄ~ۭEݾ?z2r`>a(+A(f_~:j(g_$(xxx2zq[ƃmN]%=9n$Ƀ0YSvnNm+E'9F wF;w h|Y H0l&ӛƒ2xa5@~Y5>'"$vMMm5XN(yՓ,-:%lv]H 4~-]0eUՎ cz1d'Gax: {(Q1BjIؤ,F .gn}٠E/Z,ۺE0Ηұ67oSC2D2Y>e۔x+rjT6v"{ .=Ά Kfy6=eo- [Bwbԫ:O6m] /S1=+7nhI 6rթF֧6/eFCSZzn<<71| WcYfiɣVרŸXP~SsSӽSNNJRQݒϾBZC'1n\$J@h|ZV,j^Vc|zSnݪdE%M`Eul (.GNdR~[)v)4/]E.\#U"]I%折gk80Gr\'|+k?v<@\-Ahy>3s/0ųǾu Sȧ#)ޫ<Ҟ`iom`ۓ+́FW"~/t=`]iZ"g`RsM/q=Ը(9!!M 3XP ž%ʬa7I3Z̝1dV6 3 iø^O%$;+99s/WgaķJ1PY&-l*u'ӫzbj-}4}0=xD~* GP`ߣS58OAY&#/nǵ3[ ZFS/F!OT ؕx`h͌ bJs0ᦛ- G͋;˖=g&~ZѿxoRjw۷eK>S}$ɥ4"j6P\74oI+NִašaN֨q YVx+B[}Bo .aGD_dF~VW4pfBl},+RWc5)v% O{[:' Y疮akQVyUs&z OXp+.H[` s5uFbxQa܃|hH ]hd.Wزң`79>Ƃ`9?z-%D޾3 @;XJIu97sWV8"nXbwuHr\> nYџ/h4d֗'E,vpΨa[ѧηJ v nN 7xu3Wp2Qm$JMy3aZqtyؖAyũ[T? mJ Ƕ$, Y5otAo֞zU K `FxH3YPPJƇjeL0>Yg{`b dͷ`B]7~>lbǘY Vo뺸THDeͫ\thng|l__匭5^kۈs>8|os\4I'&עB^r/ !g ?9R ُmb `Gb@Mlߚy b R]!0p!Ϙ "dW[/j⤩{!Dɝ=5ù]= S/ H J^{=CK=1ƫ k";b#!3y髪񆄄"CۤtKhYT8J& #d3؏rЛΥniAZHG'b.: )1T\m4>]"R*"CR6jV*`E<ڦ]d%1U@]=P9V@"?(Tw\B%hno(al֯SH C|5t]9cX:~FT0Wt.slIAcNg=ypI,9i@! RP*t!29[!F^, ،}`psu!ܬGW$G+uqE*h`Х<Ýn}tlVyxL1րXuvk[1؞#%('Ƴ`N_}LԖZW}GD<}'^[tڄtMRf.{a)U0X ~I"ʛ[[flddEBheTh5,cBH*!$_^T$ratjU&L)a4~uLCưGHf [Fq Q{ .~E, (eXS@+%'̬  x- Ϛr6I3r \UGQ.Vim߾߻:HmZ}q<`KBTIBux3y^ D.ז]SF;[b \38Xjv<..lCk4#R%L\ޘ r`aO_=fշjҡw8 W2KlQ$dN&ќZr%KL;ϋb?[b6xr_씢) 즆{Jmxqz[*B=PJh)Q!z4qreںQh| ߐei-xVz]¿O݂ Zx|:Oq-/Ȉh÷݂]A$E=?FMH\JUnxM$p1ֆ\M+-APg;OكU)ی} 0Cy&iT>J5E;xj]޺.ԍx얡AVDK7$Rּ\h#ya|s;c'ec3'~Na%(tøIό[—]$ENWőp:p~e4 'kLtM`*ɛE~iL,ma QQz b/.y4m "䢦Hj2}Tk+(G;a55T1!i_3Ym S܄a%? .GOA6/?XGw<Q:ߢ]=^:#׉_FՎ m)l~r@B/`S#c&3N:?5xG934vOLวodV_#TqYXRPl4)DzDꊸgiL1ZG <gKI4^!C)85d.1~nZGw d@ً_$' pS\ |Y6ȿwcH|T ]d¥rS-]$,^C3Gb J+OhZgj (:'+Gj$Z#^`Ӽ\E r,e>@ڕ[.u:j2 K'pvD\m0 -s]Nޏv/A47{VƩYhI!ef80jK)q=8,A%ˇvx -)s En}|9um^uSQ?|Hk #He,J9)dMZr׹0XO$ZB)xD6+wS X.5^]D;;gǛ`Z#qi<mojT5qu#󉿟$L6J4d~}赖Lx$2XP))v2'n䩧0R%.=;6!O/,Ų]֒dgx'O? ªw];ggd%Rw! 㼠Mo*< Z;Y2Mt݀SL0s<2<mzdCb;n4+ J9""/O \E>ɊP.E> RDYI!0ȨdU1*PG|zGn:9P=/PAK׸-^E8įEyx2`7SĔ#˷oH63*~VO0̨V⪨Շ2=N#Vɣ;&:WL={,S_FIMӳ NjkE{$&GK|ωȵ>Y\LGq;ڕ4/ez:=eM՟8bFڪ0.d^/pD\{ W|j7gZ%+EЋ)ǒ,5fT1 Ӯ^Og'j"AfOu(-K?=1 Xԧ'fgӨ[s  zFd MЙ^'뷇Ss#V"8Z>ο=c`3[&jZg:z\2(1`)h#vˠ7-1au(U(;v[F],<6@d52IŦGacUp!7mUhyh&,B/10B IBBN8z$Qdf7AlYѲ1F꣬%.{S AبLO2zD7ce.4XaUFMf坊3^N\VrGfLh[n"prlߤ k^f@\."})&`%AsU6WϫKo odXuemi#\<>l1.QK|BDvGWsdmSM#Ur&cə|>4|GaKx/S’W1˸ ABÞq眑Z ?=Z}A^,$m5*uGfT?F>}Lz!:lҭ@v2g`HMZ섃*7t!݌*/S 1R@'T8(kY8BtCٛI-{Y*؞l@zۢO ׅRjz̘:Ņ)Sb LD䆠1Jxt˟{`B4G3:AĊA{"uS<'~k6z`_"?!D]~÷7Z4IiTsE1 ^h%6-JF8[5;6auH Uza򦰯4{,bFz&c0La %i5l@NG1rkeU|+S%Lm Z©}9X8q@7x5C_p]ú:]"4ݦG ]tST]T`1ϸN!A|1m‹'Fd/ bmD7E LIS:o!օu. e*yܮ?Zl$IbYh2kԊ{ Uِ.+W @棤{p$hJê`+ =qB_ Lj5`HI^*P#83GQY3W0r6-\9źK%˞0<2OF 2a?:H< _-AMQgR|άbLO]:??c2X|4Z>%ϟHėmJjKM̈L _㚿Y\{I&9<ڏ>S(D 4*d8ŗGLZƦ"8hԜ0ԭU,3pڇ[om`) 9`1+FR!<=B3@p.ݐu8!6 .diflB;y tXUQL x:@H;Rl݂x zeJ3ց],ǵՉgY@4mOEsUr`s1W`ٜsQIua&})mW#뎆#*dKdo`{FB^| p*) !&+: ߵJZ'w@=~Bb¨VCQ@A:q#k~+Q%BP\`,004QjJԢv8*pu nӰ% 6Os=@ίhq-_L]AX`1h/v==pX] K,= T㰇%8z?A$%L =I 53J\V}q> -6m;m_rz;'_Q|G u24Yv-yA6ۚz8[TƠBPn X/?uo$ %jc#M> ׻/$w鐢J8 Uxkųfn}fg"DTV0~Pt>feR0 _OnxetѻRS&21ӇJ{MuwMj8 گZ[#516K=u8RڲȞ'Sn&I6I>S.T6g7=c81fsaEPԔjeSRX9'fIzlg!w8=0o~48:"^8\1Y\b؇\r)C|n5@8M}3 9 :4.~[Fukzo3z}rϗ2_ (..ӧ~ÞZ I kz_ʝQk~Dɷ)OѓW!0 Jg0>c-|Q40%lѱhїJ1vKpUmopp y1b1/*֪&;$7 qUgS]ʊP⮤d6ݟ\m$\Ns?X{Qw%w  `[AԨt.嚾d^M4lb*IO/ώXuwqOyv*L`& ʾ6A5o E!2kg>\r/ }Wl3o ɨem&P׵}ESS6nФ_t+7ViKd̔kgK@ef̋#+GLlYt:>MS-Sj_(N7T8W8Ŵi=IT}]ʕ6˾;GŔyX盦|4tMnCTrϜj$``/>k0Rށт䚁_C۾nh2G7J "+kc˺TPj[j\鱸o$ 8aTV3c ϛV|qW@UK &>[Tc^zOem.I64F#( Rcm-3꒴PV#77ʓϋr4IBX[rbO+oـ7# C)8XzEaq_R⧥GWQ:#irnLPd[Xb7?,bl&4Ip.Kn#_Mo&#k $(>No(DZ }B(b7f#` $`-<uBESG\k7&V:h:!*+*ú"0PP/ꗄ%p?B+`+=F -;1n=;sҷ^ce—1[|o~CHnr% Q3YDWCy N<p%. ` z`Jv\WFxdw]*PP $cҺlʬFP"Qb/VtJSr>,Q(o%h>dBPT{P'Q猦P\V)Hѻk:bڝ/ %$o|R /w/Zt'NK?+.!<;7_enxl>"UG4VPfN zI )3Z_Z *:eaOTk- .{s_@k~2$_h3X[Q'|]!Ht}ֲGeyY[oں( ^9sQC>n{Q<%۹c2:*7\J ^)X'2WZ`AuxʝJl~$,Ԥxp~ZsAb l>wZ7 ΍C%|iGk`&q梂&[@ RvAZ.Wi3Zn{pv <NuqF2*:i-_2/\oDv aIb ,(_|55R$QIky'Ocf0ڶjSX8)~i$Z9uꏮWKb).-t:üZs]2K, |kq59VX[:b<4H'8S/+ !C*'B=[Ƌ:QƇݦmΕ[kgw)KQsRth7(yNo <PJ"̚ L˦4&&4 ui?;I;`18/OgԬjNoa ;/$S }/%Pp4c}b |B Y9@+zx }Am ;_&_Ȭg6o4/N4Dpe+"[;Sl[gZ~Xe4cg~{=U,*=e<.J,mӚ#5ݡf9:V[)b+ۓ ЌJ+?J!`d;G?t!ʊۻu..N'S*\4&FnW73rYY=)2[VoEֽ`M%thVLY&h9UҷV7l=n[G\M5D)mDT10ӫ| ֞ÉL^Q,cy5 ̝]9&@üҘDi꛳N:O =eɳ&yA )"_,W@l3ֿx\Dp.f&]%@ @z/RAS?$rK,)` ܓ{bewWZ3:\0hi_ ܈ئz/w:0mC|Uh˩ܰU72nG g$6C TRc裂#R15ҷlWu-aS)ru+^w֡fa kq ҐR{P`2s9mR%i?m1J0a.GYǸ(#Ÿ+ vݵ&u!ҭ׊85݇EkmfǔT^&@Vq`OvTX\HxrAm oSVg\.Xm;#q8B,&Y& ϺPdR$s@'dB#-LQ)@#%D=u-])ms7PXާ?=ٳQ d<qy&H>]$;eq}z j]SMi=2wRj'f[EE %0^H4/T)3Pm吣1.sYS9zsfmLms-@_+b;e hOqj>72K>ljA* [:ףآ },fЭH}7A(upA1zHaZ:u=W9nڙEeFb|tFYp(7^-^gc$낎C- iTu  wq pSuѵh*;0bx,Hg}gD_3I^ծP]_ ADSza,V>o{̼} RaG=jB~MYO*5sϫ4ML( jtA 2^|>nw_C(BQ),`O_tt +6cTDsoijPo8L؅LA˽%tfދ<<߱uּ^| ќiK`_nA{Ww`f~946yN#^.:Sg$ب#\+,;9(@YDU(~ֽfKsMd8W׻C7C?)vuCT0Z<sJo:H9S-Tn٬5SlVC&VF)9ZneE5~XۛA*r3"P7_qQTD;Gޗ|kaM@+ dNd}OPӖ,DdC2@:9ԓ l'Yr{nrz2@{-!Ha .h櫲 ?0_f]/ۖY}LBp"e@P ^ ġ7وSpJϖn_jݤ[HC]3|U[*?dU=hStv`slL{fvv4 t'z5`s'Y3HC57: ߀)_O@}{OqRc,}^>YqR-O'I ptkx0\ae ?Y-!~Kbn^̍;Ɏ/6{nX?h}Ygw03P]GUՂ+GLԣApnT`z|wtMߵzѐ^̳tM:xFTs!6X-u !,nt6$IkY^nCwx im U; ,,@3XwAޏxACs2|h2兕',1Ud լV. "+}8gu<}'HmtXaێUh3\y'Uu$݄x 4WG.@E; 4K[PUfP.)@ d:?j&^WiI/ @Us=au.&O^6TN<ǯxS+ҼK6WKA{ F&1Kv^2 @"+"ɠ˟ eVW L~6B*I>1y7@bo5{k\^ 5̱",flG3ʁi!,w3"&Ny+(=5*a: O(ZҊYq yyDD‰FP9.\-nk=[g}od^ʁ,?L=ФN1YۅB#u;4 Ȩ)i%Z-6=L1?EIj%[4ALdf5fza )~n3@ߦ* 7̪^`oyԞ_HVT1 }> ??ǔq3!wwԧ/(4=_;4dJkI E 5XsrZ&4hR$ OU[f+BK[ǤNo-bBECͮh;]|]TIHDf};Z++_T]Ͼ(@I;@'ݨ&÷iEB]`K)-42lmBz|P5fwΑTLwU?GfSmǛL]+nޮ݅p2-k|`i > rЋ4fTr/M5Ή ,`:_1|Uɪl3P8 u;ڵ"r!)@qUfcT*&`X ~NwDm[L 6lt[\VbTpysjӋ|?TYIsТ )aLR,Zڪ1 DqC%W+&E^i N"s:ŲKQD@ ~Oh)Y^5`fwSX/Mw=4YxcT'@%a~$ig?!/C:\'}c' 7sDJc1""~N91ya9 X;b;12zL&EدSgM}x IJі]{ӄiA|HEOc$PRV'[7χ%a|VOH}rRU9Je@  :K% V9)-]w [cv&?h9WLʛ5jN=LՄf:U1@9JGY bs>oȃ_寨Ujo뫔xegi.kV8at>+;EFJ.r_!p0(Rfa5&pxM#%]:GNv Ҕ,*I9K!$.jq`zƖ tA?7$=Xۧ; T1ŶhISѓ̔+ms ٴ]?VDd`39RWk7Z^vF!ٔպ L8Bp] l5ZTJ>3F g?-c/+vk =WL-\ai"#k,lӞݐ{f$cpG^z_dU1 Xaq%U׍!LkGkS~3-  eyotb7V.v5QP=jAA&fu9RD,"{6#`_oM"^S;ۀ'#nq58\o^oյJr$ڼ@{E%K7ߢg.Z~Ҳv߮ [$BC#DdL-6hV6(ԍe \#]]6#j2#QiJԧ"8 `-Xt 'gH wVDzޑ&t:c&%Xp}kN%1N3e8/#AJ̬2*rkf?αeI,zuspv1I}gxtwE1ߧJ`o#p_Ħި]EWhN\: (0#=+RxSX@ w 99: xNxQjxX_A8e)ߝ9mP, zSdV9 J/g_BQ{v aGEϚ*%O P^-gVj.cpY?@~=T&BYO5F< H6 N~ȧ c]?8(JeSy+_Bh}*h;jm$:ϑ@oc2tٯ񡈬?{<nn C)`a`\s2IAS qO"_QR4RU%U}𞕥>mnh%VS'Yj6xAk(}k3w@hSNmfNŎT*9\.[H,7J]&IE`?- 8z$V}OM]y&*P&"EѮ.h<^ő{fIG+9˔ ԙNގleAѿ?lދMfU6K=Q)!}/K]˼zIdMuQfU/j|&c!HF~m5^iMnbm?qy_:_$)MW_tW_p "##w'l[K9?HEy')ܓ:5Q#)6*cfj#ef[s|qЂj| .44%RlZ'-_w"QM]F` TrNJZm nn}0Wl iƓD.7<,(~(1Mz^̗Pk t TͳֻЖīV\kd/q3xʡJkhhZP 0^Zm"p3w(ݙp*cWqRIJ?AqЮp:[ҔU ^&j.j#lN[W9vJ*=sExc ./[va鯖~*@8+i3:ֶE!_x_4,}ğ\}@o8Ƙc;ujx.⃗ėQ^\Yenɕ%fHSO"ƌ9PڕY~`ʡ0YQn Hv@Dԁ,`/T4C~\+_1QZQu"YwR ly{K-Hԣ]>ρłT9!>RX);)rP[IS̓[whLݤ6@iw;a} JoFLʅ =ĖYt l}>p <`C_S BJԗ⤕s1H?K%$%`Nn,e5w(bS|ǰO2FqIuIo+[3&-7Re?qS&i 4}̓R)x9vK)-XNFuxkkʸ ZLx~^yxk;Ԡ7)b`zclD{p{WFi[jskU}a_ԭ~V[i܎f'!;Mt A#jS@ Ug?hv(걁&OFj mU8L=PxiG//GD+79(#xe*Ӆ`ۤ1.dYcǓ~ 48w&o-ۍ5zGsKܨ ؼC Y`_,yg=@}1F^g@wND֜@,rŖ҇Ň?lgQ'oT@QtPՠmH[ۈv XM?K+W2W Qbkk bPt{.VOH&&a5+,>ŧD (ε?/ܱe~yy͏qّ ][<{:i}؏ xn@F֛s:IMޥ;- wD|w,E095"8qDEA{۹ p6i4}zTn$,LZxΥc]ӻ~fy㋔KJhPIEs_t?M6a83;x:u%i`V~VAqoy-^-Y2xZW]% G|R=2P) DJH8l}%tc8|E:' %jSτ7z͡k`0u&=aJ@_y9]=s=O|Zp/OG]i,z0"(VJߊ wICN'+:׷b OX7U:b< dWR4v˫8-2&K+u~o(8γ:"HL5/\=ov><5IXM1K]`V#uң,Uxo?exeA68fjEx3=+=HTq%{(1B:(5_3u +8Fw:a$:c(L(v:2&^j]ٹ sYВN ?&!&+mx-߁8F^y:+BڟG8/F'n+bE"8oŝ*LlPi&[+z a0 a\(\+)ΖDm؊.a*l7OA0Ɛv.oއА{^<)+_ 6I.g>ݯG^7qy|:_/?ԃ2z7JBгq܌(.Q~TAHìuXScM%&L?xRYy!(`Üث%Y!` r%%38 Nk,z* R$9HP f;Nv$_Cb@qW1mZ$gj"T2-|y>$~ ߲hsok>.- gxVz_;, ftKޥA+(u@NyMp8] tDY_NkHCy{gHjO#| V'xؤBvA _v*Q ρ}| O{My ~8"9N$go-d G0^ֈ"{oYSmch; tkEW_W=[CAd yfIP㒲?m@ 7` Ν+% lYzTK JLuX\)}tsJx;{4}&wIzg?NC%\10c;(/"KWЍҺDiy|t[8v&*Yal΋`ZS~׃8ʙLoƚ2?O6LR4xŽ-(AD-S0zAFHSLO[ Z+~2w 4BjGq*nGmse6[kbFflS)ET׾s kQ#΍x2'$&Z)b5e:v#,$[)F{v=SS98}ixW(6ΝR^{u}TI  7\X&I, ci>+nj0z:0{3f@h \u˗bHdhbM̯<`TΞ~,{( b7{.5I/XGoOVKn.g7YFxovz$Ƭ4 fy2QCY/aPw@$XnPd4ipy{Qq*ȃ_.B2Yt6Z/ ?gZsz ǔkAPii6`ɽ=&} x6UeR?oۨ)k7j0ؔ#+{6ԩ>bgb5 Xh?,pPg;w+Vkci$3NGDr Yt;gYB%__5QXf/NcaLku҈D>Zi|[O j4D%OwWM!!hgr`-mB33Qc"$QFa:|[? y٧}/!F{~iRגPI&*rݮmG7ZyjEݴ[7BsFD%#p e|?20q_ 왯z#A=zXi;j|,' ZH7s'"V)m!h79ytiO狒oba{bE( T3c(a{KG} "Y  Cn+.I c8̟wqi;4X@K 9eJŜD Yb' 4p+k@ǂN8!0@5i>g]/x!dkI\տ/U1ܙkVx0fחC"Y˝3汰t>Esh1xT% H!+G˿ ' >> SOa;VyC-8vp7W֏.q:kk_rv6 v&zd[bβmۇ% @1DՒj4{g& dOlpf^P`ھֺaL"hVF{V r<ˮr95O~~N۴e)`?#C[܈\(!Y"Yvt:exYt(z4PQ>=}K?T.6afBqTa?,75U+!)IW 2fY-HVQ EE99Bc'ŧMvv~& f<YҚ1őW&MyŨD2UdƶA qr)9Q&fgb7ڹW'#mp׉l8~sCM CnO52oRw$=t>6}@}߹A- >^J&Q2>àJMFmɬ'>)pNdAQ t\D3{3(rhqA|N6SlfgGs=qi|!oU QFAl}# K4^LsI{>xU ?@d),$6բ]LW_˪R _Baw!Ms:5D'f ^tf[tswT*=^ĉui M PZ|0Zdo/Aoy@YXhǪq}}RCR1IMyH0olK_YʲIHlڡE樚0#𢚑ýS!z6Q 9>{z^s0ҿ#[ܖ/"o-7ߧo~ڒ1xG|q- HJVX=h~o$zI/5˒WV&{ؘ\Mot!brd_~0;%Z*:|Q㫩u!)E #[|$|+sND樲eb|HI3T9LS읏!S]4I#i ֻYH G23<(B"A?T31..wE!VU>UK6k|6˟ W_ I;}Dv>+54?75{έ "Z٣P1CsS0D V!;h'<'o.f$b*$62S!@S1q񮿉yҚd/!;h9qې^zW+7 ,,-5CCaL)m7;чc1M`bi-O7Gk%ФücAS6Bәb\{ŖiVݟ "w3SH zyE^P΅Kd,(X^F{V\4 O,#FToH } 2K* 9Jb^djzwL55 Qvy@_xpe&:O﬒*-A_8V0~uC  NjϸgOwtBoH._sy OĈ "*ri8 kD >2;u| f*v`\G`0L;"+ '0q6jǀ-`BKlÿ}e'g/4w՘Z${VXeat+ӆ+yjR{:ZN۵/gox=&" SbsfQȁi'14^_V-T#* $JmELIDDYX+U;kF ϋkCH։E6Q$G*(Rʁܑ LCI-fЧOY,mça̱(t AR"b5:Q`f8r @_@l)Vj֝N3g|LmW ETӚxTt, d>$bCө]Lj({mx gg&l{;5w.v;N/.bm_!j5w8jk`Fd45q /oG;b~]<?@bӕEˆO P-gDg֓-o BCe/k;ṕ'&O=cVTxܴ'-;zʝߢH4?[;Լ8d <31y>Y-NG3d6H 0LL Q W!YD i\fKZpTE95*Jba0Q /={YLK&TӁaPrD9q^7[v-gF# U۽} 5Un~;Iy(ۡ8 Q@0ԷW_¥MY$@2~gn1b;}58GF-HhXji JΕ|4K`;d1XwB_ggb 3㾂K]G_ N8"VI{ޖqsM_PFk{Me [X)jWA{rn9Bw#4ףuK 5&L{״p1 )ֿ=e.`}Ka' (~ڇvX!zQcC{ca9mA@{ݒ X@]F.HISV#ҩ@mx-ʽl\)n-Yw\ԗY ;y51^jj/i~6)%e!AX"Ket`H0z/H9Jۇs1}uk_i2G6ScDەI6 `<άr B1C~vF?DLܼ0_7!ZKR-`:.&%Lsc2A7!]-5RtR)xsEz"#ZX*#սd([=.>Fdɬee ln[#\G#u$]-6 .1sU ԣ7ɴ2>m( v 1b)ǃvɻ<}#Xl3lD +> b(&ҵ?ALҏ]-iٍ { B ryH0g1 ﱶ8ՏT\AV%BEyM$tr[qU{BF:ܣmތ(I}A>Pԣy oI] ګ1Y>w>+_Y\UIÙaژd-tr ڴ}FZH9UX9 "oJ'5)SJ+GFmBkiu6rL*{Ԁyuw kc^Q.7>幇7P _?Kť0ݿNTp-zj4a)bJMx]W2HH ,!) OzW^i}ӛJ,mՙYN3rIK2R GW꼐ZMi[Qpd|I u A>s8@^TVWB1-2χ 7],X;ʮ>xשI4#isYcXId9Px%t헝4]f4aI`b5N"}}gEX?7Z.) wI[AErȘfFjNM!&[HI/DYeU+VpJLk%%*|(gR%˥тܐ $u\UmES C97DjoʽR-h&KʖP9Sm ؍Re T%eE*V*fԻ+:IJVM(G=~Z*sFq; h6י6o#}{;xxdN.ԓP]Z]s䥌ET*> TS/HAJy60Gt7 }.jD|_$2 )l(4L1ugtIVˍ̛8?/kB:2o)Ị8d9PLUo,gQ?ěNKڣ[|$oňm= 1ʹ2 w7_GpT}SZH]}STNnv|ɔ1*5׫PlMvr@%$PY T<>ol[ ǬPޘ~#Qe,Xd&^TN-#I31kݞ*5Yഄx?*C/A!Stգ4|WPύ/FF,N w9, 7V\GGdMDgu)*3+̌%a jdv&)2R 7\'}{Oڮ@Ty».kBc'2uhW j'_x4^A;{-uYf6zM]^;,F>(,ٰWAhTR )ĽB}Wm-pQ_L2JM7_!u ?^Jo*֒Iz[jDhX{++:~FNVbq9kkv. TbH?^keDQ8:bA(퇢2:\}#k'VMM"&$q'b>)}-v@_X+\f0Xy I)>Юߘ.n19:"HE-W` ߊ h/~]^煛`:'YtvU+>09:J y˥ڼF6S%<N>w㧽ɇ'rpXMѩ pBKW9s8B5?hnH(vF"ntR`A{K g$ė0~%&/޵&;9J2NF2#ٔloktOt |t˭mBsZV PP!R +{'Λ͍bӳf8#4LY]Pu s lEW1I#jbw(A:d+%l9TEߌj3BxlѮIlbVmsp-H #^g77qhkrgƞWHyŏUKXnQE[]GU_k覝p:Yk|86W׳BݐFKxAAfpsٝM>3rH$:Hӎ EmtIpsIq>jo¢xb@'mXipVK5F$oy#9w+cF̗Bt pi-G)P(6hzೀzNé7s@c|!,|xv; pNv9ҡQL29OC pO3cI|P}+~V= bGH]kƅ̕%m 8?Q|§k : 0GC"`Q5=CStLT1E[g1Ghz\ {R(y_m)Vƒ bX)B@n~ս݄Rr'o/c\be1OЦ{lTo+0GBZIj~Iw-n'7ISdžM=S&:_ZD-_+4?[6Xb3 833C#Dz#I;O屗QԗXگwy@0e\"6Za2Ҏ\bYt닡1֠ u.YgKG v:YmVwr-®M-#d]Ġ!jN2d.X,5@rI)r %6eJ)DC^9XBƙ[*"CM-A`h$C=:$CR1;4i O4 ěݶN~?|R[~(69߈eӏ,pIdrYEeœRV3([zˆU *"|YC c6^9Y4 ?sdס-ʥ 1p70h^KXĊׂaMts;?œoE%^~L?u7p 'xs7"ۅ.@'ezr{-x"4&OHb[`Z"?WjM3N "uS[DCUHxPvi84m=8LIȤ[c8W&$&Pvsɩ7}3zk 6 pYU@.N6i]:וrixU:`.K&9 ^b@I彺I"ʑRw9w],h>Fe_2L%"ZSd+U}KAQ*Ԣp ʐO>Jy-s2q#/g|Z7.gavxK/yBƝDUQ#|v͈:+%]㶺^]/| =¨]M;&_aquF Ѡ:ШXց`WcmFX̅n'K6Tw}C8|j#A0`1nz^H@16QRxWwZ9*Ə Ud+Q|ř4w/%BUkniV8(E.I ("PR€o%)Jd}cyĿ>9Fmv2Qne&IܬWdA!o͖¢Į{y0s+I5ye|[[\LN=5tGQd_i4 qQ+{(+C>rPXr%2#+<ҺI of!+z-ZBxՋj Ne̪bt>8GxҔ)z_ÓDPblߵQ)YZ:P9::7ha-T8RQ9XMI._63 k'Ji ؔ,gߏȥy> 'VngrXQHnf1OxG-O4o(Gʶ<2DDNB@oI̾.*(h`=7 ڒpJZfp&kp^fƭP4c;䴡R2hx9x;r /Fa5bQ7 P$ _E?օv#XS90$7sLKUyU߆ {ƓCi84))Z*Gf1?H!L ו˓γ2j2R&7;dlD c iﱑ5- Su⟣CWw14"'k].:1r.m2KB6YYV7=B#J5=1B/]ےZI{́5Nt>6*^Q)^*ˠBb < 2gC 53uxIj"Y2gPכ~j~I*'\LsAҶ0XA*IP&r vR_fb/(د[^IYQ~h)bMi͐=Qu_ĵXn)ϑWIatSL)-:(085 N,]mu3?d{xwrA|A:zzPxSEKmU"K]eHD!#"W'_r s@|_? :WT\ MBjD7WɧD4Q//m^|3_X6 H%Pâ<dHX{=Qv|f :"~/z?c %/QT.2̷)7^TT;eNRϢ~>ܿlg7^i>Dո>sN+MfsPz{ \>C_L^G%c?ǚP}رn*CgֈUd*HE4 mz{q28V-ʌ<.]I#j.C`{\\x9yO A`E^(hmnqWL/0e2[KQJn`q&wnjNGIh~?Ȣ Ӳ,sdQh2꽰c2AJ~;$KƎn*{cDSr-̦EÛ`,6$#[`_Dmdo0Mp@ *Yc.:`.ɾ|KѵEQ¹^:D61ILj=^=$A-Ed6T<vllrWAXr'_cKZ+xi9ÎcaDiWY. 5Fݑ}d|']-mE ɿ6lѬPV @7Hau'dڒLQ5xݑl4IoC #7TRG PO377KվhdT_ ׀ps_CzJųӵF. Ǭ4ItiUrR]D̋B;>Ь#p;"1 BB(C/$:^)Ys$f&ib2&w|SAHMh‡>.ue=S'fò7;Gh{#sɧ o.E>u;b͒afjmv^=mx{_u5u3y5 bCY[%s5꾀KexrF$nҨ5[+@T%N5Cd*)A }mul1iYSD>W44B^~[Ohζ5qí myO|JDR-i^9\JovPp>k2 >->mtGA< # y=txsiDv_UaOP&/} K}6z86㐈8xեfOfAqYSMUǖ |"tv]ă}3 gg>̕tMF ea^@X]E]n`˨/hґPv˪ 1M#w KvtEQp ў(6 䄾 'Ba,x̢p|'c|%> P ? D0d9¢kЃ]ƭi EA'#N/UPʶD0ex"}L'#NtЃhL۞*>,-YMD>TTQv %@ΰyI{mA?68sd"%hxG#R$8T}Wm'Y5_(Ģ>,h-:j{&T ?\no׳FNx`h䰆y{V1!UЄ^oouܬ %q\W íiJ  Cy3 6ko48;70D?k՜SM&K6S0wexX?EhO27]Vno'g}`Oshz ([}W?%($P(RS6A2]g>ĬJ:r8_|}Nke \ds6Oz{5 ҵ~I_k8BUߣj\cs$6a`h7؊ FE.9#yN V! vڳ^u/Sʛ)WM'³uӔ(=~c $1b`>bf ??߀`T̈4y9ڻ7"J=Q Ml-~ w.5b<pi'HӖQ="y`QpRY1^?43/lMȣ*>"uA!Z:K>k\gi!quXJ22czs@gfrƺ*{bkvaW:VtΧb lU^t(B?7sۑ9Ko"AcL֯4Mȳ8cJ+Q|!o B%Y7֧WWcsv-"u˃ϮmFi1ۈӴQ)O|,r&D7FɣoǕ,}v޼7m M<&cZКšŌv7(`fνoo L{mN Ƅ`)%!uB[O69A *0,{O'v򃏆PJkܫF( P>B;e6EbswVsqX \} O3uЀ@gTܶ58ZI?N Cx%jdѮhBݓV@zTS΅9dH^`KMnK`:%r5*O%vY;sBKH8~5+ޝAh öĻ{ymK'g|ת.bs2`@^ ac-<%fٜ?=I6+͉jy9vߺUPl6{C&s?7V):k7Ի1 Kr+Ԭ@.}.F+3 ^O#G\Ax&KM @[%ذ8/w9^Z:eӅY}rzNwؑRI#2mNEU?fVݩ/+iP".R2gLJطϣq F%8+5Hb/\!~sw]&GN+Hf~>g$CɄ ##Ѝ()Vw,5N FpG/L5WfcF &DmpV%}U%pBl: !9<-,~EbqAݪ;#}#S.P>5|B:Yak}'&`➱eWxxfUm$Uq$iǨ~3E^xOAp_t@3J^Uw=W/_t=itؖAվP*r1<1+A98hqjdt㶂Tru:XG+{.U?T4aMS Gcv|g{i*aP_ȰFքiP!5͍ loWқ5aфo*c +*v].4Äx(r_mL1cN}3KEtr溽Ґ"2s j6QF}*QQ/{ 7O[gPwxxxJSƢxvsOèĄ_m;-sT?[?D1_fTQCd7{z|mayЪko5Y4Ja{k[l)DV>nOњҧ-"⟴ y#52'!@瘚'BU=n2{!WcOnF(jq1v\,ɵcbdԀQ.zMS-B+e 5 ^o OǴ|-ՙXz,ͧBdpFt[62%K%nG :q˫Kq %(?lxtdzKzaޯW*V] tvm馽a^뭎bW(o[:faD6iM\fse񈋔R(߰ulwI;`(n_mﮀ~nʣ_C'0a!۳ H:ju9/I >IOeU^u; oJo /%.fEϢK%o3O1.Ӥ:M~:|q2im0[0e"RikOfUxa9Pf|U =Eh\Л0\0(/d10r@Q]N֮;,a;'l"?7 >  y.Gbd2?/av z/14F{l%I3#[Њ>zwDtie|Ecc4V( 8FG$F &obJlf8`Z5Iz%6{ky.iś7>*%VYY/5!rqʯ)؅L ;ܾ*Od_{]}8[hAfe(rzY2׷د ^PZJ%PoÔ[+@ Y<殧a\ReHȨBKɠ/uPtY =IW^{( )aVq2s8;8`7=+*irQ^] VQe_sŰyPy׻i|b%52Ita[˶r+Ί (>p~GOU*+(J7>JX-^n~1z=Wnh>Ui~XYvLyEC3uQ<h:`FZo!y]dI_7smf'*KT!}B0{ {4Pr[Z+N,w׏Ӧ1vN3?n +YOW `T),GwLM!ڰ=>1H55T]S3A13Ci)bm5=K%h븂Iy^ld)V6s4~ؤni_&D^"H, 8kIqWĄ_ґB\8ciqNanAM9ZdI]Un!iCȀ0ȢOi}I҇n#b;cp[K/h*:sbYiFYfb7ic,| WK s8 ʹa:ƌp: \4&e-UoBJ6v7C=3&2r~ӶD:MUÅ$d$FAo*ԴnȖ-5GU IoۄBua-%>%V/}(_u4m^ٙ:"^ā #[tx; Y>欑7axs`tݳ~ RMB, wyv/"aR]V%I(,<|iZ'r(UĊ8- v@(dvu% NKL7:2KW&ΒpP 7Ô3Ϳ׬׍rԈBGZ\>-W,ϩ'ے놵0oaALkU-z>u>Az(w ϊ5( {=~,Pb2Y%'OWJu;xPXLthpFj͛{,WH-U'v`T^,Sf~gҎ'oINwBv8d).M<\}0W/ɖ$0N A 3mRz$FyU&7CccFPV}N9P?kc\l}quONr1.jp&]^YK0Wpezʲa,!w$n(|RG'\N1!-‚R$pȿ>pϵ^[б54} Lܡ8t% X0gWhqFKf#,|53 *bVX)RfQ-ܘ0oN> V>Or &6E܆z=dy@@FE^S-,r&0`< vge\ArL:B$~2ؽЗe:Ͻ/98}F:eMj#hani\`T"nQJ"se#ߘelm#(!ԼږyLaÐߜZރ:ހ޷d S?]1w@ x fʚI42 7AF۰#<yTFNQz0 ~w6.J!7 a@4 Ӥ"S4]9nHP' &q$D&|3o¦KM f4Y0B|0-VmЮ>)Icظ =}մ) C҆YCP!#n1A\ fƫtӠ+R R$lV∃F-Te5=>|*!P}g-@@C!P$;oUa|fQjh:2`&sqoX ~auNCϵeQ$Wk2Sx!R%@bNy?R"aX^8D\UXߋnUxKmin\Zzt֨qHW7=HMz"De&zHJV\AAv:D 9v0Cq.?tJ]4$/Zw-i)aGڟ˪+V!#I Y%j&.]7Qxæ!Y_oeq9g#B'ﺡGb4tS[?RAy6"nŀA4`0 kCRjH }G0U6ŨS$, <-8eٯqFsʭ< mI Kf@v̆UFi2Mo(~dt+-9|{Ԓmx y짒VjggǾVu"DA),Br8ڮD@a> %/G9a!d7Ds|F>n~3c5tC:(`DBɎI$blG/[zFZ򐃱\B(vrHM&/}n`.SY+k\0c5Rѽ&cCA0qMd z7SД2th_>.~L頮2zQ-Ζt ͠F/E)89Tjeo?vfk~=205j;_kTtk tch O`Vi0N6kk+~ dՓy,[zExAN8TW-p__#P%w)(TT\A#-yp%F#.gO5kL@^д5u9LKmq8HIHȌauԿ؊-dh)R ꀍں~) Į;&`˔Hl ?볯Tba{y\g,x)^.%v5ioRRyK  YL1(PB;~烱' Rn<s {(H^?%u/PlX[i "uOv K'I9E} Ճ@`p˪^?i1U(Egd^FH YZ