krb5-devel-1.16.3-3.24.1 >  A a.+9p9|jX*f1N"0686 xLJakt9F4NF^IK2.j:s Ϥ $$jPS[NJUb}}~9EcFx )h-j(ztzꢬ]#5hA =?Bo˘g Ya,^h0 uf9E" %oԋ}!os,jk?0|ތ$00$c54ff8ad25017497ac72fcf57e26932b4cd48107449fbf87f381e756c2452ec500bc1a4ee0d7d5a0f9698746c440a89001d4c84bF$a.+9p9|.eQt[g!v$Pa31jl$YԩČ%ڴQ嗔 3GC`p)I8-e6㷊~/*#|N'ɍ 3`Kr|{NȥLJyE K38)גԣKRNp@@%nBG: ?U~N?;H3 wwKui6ck*.:Vƛmeۄ1n)p13 GqDMI >pA@?0d   ?(,48Qrv JJ J ,J TJ ^J `JJJlJ t(8292: *2FwGwJHyJIz0JXz| Yz \zJ]| J^bc8defluJvw Jx4Jy\z,Ckrb5-devel1.16.33.24.1Development files for MIT Kerberos5Kerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes Libraries and Include Files for Developmenta.*sheep72 ЌSUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Development/Libraries/C and C++https://web.mit.edu/kerberos/www/linuxx86_64tK(-3t P% e*I-K.Q  _"ud:CT0Ap8u @*J/z[ -YA큤A큤A큤A큤AAAAA큤a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*a.*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.so.4.2libk5crypto.so.3.1libkadm5clnt_mit.solibkadm5clnt_mit.so.11.0libkadm5srv_mit.solibkadm5srv_mit.so.11.0libkdb5.so.9.0libkrad.so.0.0libkrb5.so.3.3libkrb5support.so.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-3.24.1.src.rpmkrb5-develkrb5-devel(x86-64)pkgconfig(gssrpc)pkgconfig(kadm-client)pkgconfig(kadm-server)pkgconfig(kdb)pkgconfig(krb5)pkgconfig(krb5-gssapi)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)@@ @@@@    /bin/sh/usr/bin/pkg-configkeyutils-develkrb5libcom_err-devellibverto-develpkgconfig(gssrpc)pkgconfig(kdb)pkgconfig(mit-krb5)pkgconfig(mit-krb5-gssapi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.16.33.0.4-14.6.0-14.0-15.2-1krb5-mini-devel4.14.1a,@``e@_/@_^(@]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@scabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dejmcdonough@suse.commcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Fix KDC null pointer dereference via a FAST inner body that lacks a server field; (CVE-2021-37750); (bsc#1189929); - Added patches: * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222); (bsc#1188571); - Added patches: * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185163);- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196); (bsc#1178512); - Added patches: * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch- Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079)- Update logrotate script, call systemd to reload the services instead of init-scripts. (boo#1169357)- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patchsheep72 1630415609  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJ1.16.3-3.24.11.16.3-3.24.11.16.31.16.31.16.31.16.31.16.31.16.31.16.31.16.3 gssapigssapi.hgssapi.hgssapi_ext.hgssapi_generic.hgssapi_krb5.hmechglue.hgssrpcauth.hauth_gss.hauth_gssapi.hauth_unix.hclnt.hnetdb.hpmap_clnt.hpmap_prot.hpmap_rmt.hrename.hrpc.hrpc_msg.hsvc.hsvc_auth.htypes.hxdr.hkadm5admin.hchpass_util_strings.hkadm_err.hkdb.hkrad.hkrb5krb5.hccselect_plugin.hcertauth_plugin.hclpreauth_plugin.hhostrealm_plugin.hkadm5_auth_plugin.hkadm5_hook_plugin.hkdcpolicy_plugin.hkdcpreauth_plugin.hkrb5.hlocalauth_plugin.hlocate_plugin.hplugin.hpreauth_plugin.hpwqual_plugin.hprofile.hmitbinkrb5-configsbinkrb5-send-prsharelibgssrpc.solibk5crypto.solibkadm5clnt.solibkadm5clnt_mit.solibkadm5srv.solibkadm5srv_mit.solibkdb5.solibkrad.solibkrb5.solibkrb5support.sogssrpc.pckadm-client.pckadm-server.pckdb.pckrb5-gssapi.pckrb5.pcmit-krb5-gssapi.pcmit-krb5.pcaclocalac_check_krb5.m4krb5-config.1.gz/usr/include//usr/include/gssapi//usr/include/gssrpc//usr/include/kadm5//usr/include/krb5//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/lib/mit/sbin//usr/lib64//usr/lib64/pkgconfig//usr/share//usr/share/aclocal//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:20989/SUSE_SLE-15-SP1_Update/7ba393963e647dbc15d1ee0fe1458f70-krb5.SUSE_SLE-15-SP1_Updatecpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textPOSIX shell script, ASCII text executablepkgconfig fileM4 macro processor script, ASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRPRR PRR RPRRR PRR RRPRR PRRP RRPR^ b^utf-8add345034ce6a2497b0a0783519860cfbf12a56dd63eeb06cc43e1841c5eb841?7zXZ !t/sI] crt:bLL /PHm'FT~cy$#'鉑wk 6Y/P Ζɴ.:* _)'%h|puj=fSq_u:B.4>lB;]hCc|c<.IT։3ylry>3ތkdAq9Q]SeBx4*86PZ|)+= ӉhNKXFx>{%}!nJm94)7~ER.5fBLlAB|svh7|e< o ;4mOțIuMāi=1jE1+m!g8{'2AKF%~+f/N G;6I=  5sb٘mp`ڹ?U9Gտ0w׍ AwcA9 Xmj QX{y~ OpxJˇ1^s;PWagE~b9#I̓ uߌ2Mϗc m6ll;t&% %SR{㊎FFH0(V|?-14M1i~Z\װ4i؆  أ#cFEqxr1v< -Q4nks:i*ZU:G}'u+/_6W1KЬRYb?HarWl{d0g'p)a W9\(eQ^}(e"]g`Czӛ<]ͰWy9h3e?@-y l7XYЛ]2ދޯwG`(ǐ\bk-#9YeFi/>VCA"h-/yty6/4+ڦ.7xGXh4"/y0L;{Q*έ:o@w|q_3oKbG>RgKr;́S,A֊?5e~Hdyܻ KlOC@UCȽfkDg5Ek.kY&Xf P)vcܣ;?62=T`Vo1' c?YDlݼ# YȐh I~]0g' `#`~ږN I#04Ƣwq9ῡ{n_ xp8@ /Ο&es(%~gm= n"q-KtjK%TU8E?b1 滶m@ܴx-Β(/vlzL?c1k ~r1i_T )^.'e@AG}Rd eǑy|P'=80&Mi_ VgSELT~d@?67q{,L߰c[Z)[ATe66K5N| vX|{/)oZ׎>f("aL,\M} 3q& k9yQq"'ĝ/UY{jmjf.=ocm|o7 HDbPc2?چt3nHm@ݟ&ӡ&杦1;M;踖8X_s65A88c$i} lXp(_A, *@d]AZ{YGoWԙZdK8c[3j9% )x#Ub$8+~6]9Yl2$ؽA|[K(ܦdMHTS1UyY; ߱Vsɶ<WanXH'U?e,ΧK:xU6lܙa%_-ʮx$,k a{fm]FcT P~W~C~VDx{1އ"JQ7qB;D5F REߚi3O+ \u8n-dđ|TGԀRJ))s5jhU[Ayjl wo&?i\6|gyA+ K}IFё-Uk2!}kkU3`?JH߶+EN~oNg PR97<R,uE.QskmHMf5եӧY(MCsرYr,S.8[o NL6ջ5= M ׮X6eohozS%4d=Az+`qrTHԆ3.P &D2` Na ={wEt+eR<2!eX9|TG̦ a4-('ǑR y"; Fhb 7rBз2't7ۊ4U"4j9hw__i٬Btj<R3$jD733 SE,) XiOS?{D n|mHÓ!DvBǾZEz)ͣe=nXz)hl ?n`ߙ[$u,Ed-!}_&!wi*q;U5:` *}Nl~\Z>^5hW2؍-_$^jϚ/F0YaȇR őe GιO3H|!I~ȳ|j8#5ՂR$Wˮ}&_c{f Ҕc'~g@#nYOBdĹH]q--ǡ.c5ƙnB{ 8m{7df\!wRǵY@x %;qD?p);2s{ŕyfhcj(N_19%؎dͰdiDቬ'|Dv"16s Ux.%X0Li7JT(:'̮ naUŏF5l%Rr۳9^Z]mR5~n6ʓl‚wg"wZ :g=2h?v7ҰZhn>5n͛b7}ʧI+d hIx3ȭQPU4ȍ+WxT"h`Dm(C=#QHSe+x|vL;`i9YZ)Д,ti-.wUKNƣ,t :7.Vmj͟yz)?fT>#?Z 52 >4|h&'dAc3q#@k\ ^o6iM;~9;d#)-հG]ZhRy>sbő]&CC @Mr!OߣSXcfzi2Nu5n֗/;0G&"gOX- v%kUcz+xpųSI\ѲP5*.۩3tYd5B3''˚E˾I٩3\'Nq"Ve;[naP'_Oє-&@s(-dh立QËQćKI0^M*. (Qӧo AKʣ4epixwRCƃhX N UȣIDoQ"eEeg8`fUQQjss,e*$bqFɥ aҿc!]xڴjim_jj2Mϭ-z.(LGx]BZOCtA5n>3Dެr`9ݷӃJK}U>N5{{#Ȇ4f;29(L B5XRquz}@SMsD4EG~>t )jOWZh􅷄?T1TJypB\..w$.'j'J{"wb.aEycD^u+5%HOUd 9hyJER?9Kē5˛Pw&KehZD/MǴ2jce=1mo]8~7l\"O* fl::\Xȉ;\k+)F"Gߋ)dz&O/`zXߒm{B̕ ٸq/ԍXoliagi Y0Et6h iFK`B]\y1f"py5$/e?v5tmnHzOmbW0s}:"5気;gW*}X=()"fr P6&B;r봈&0k*{lqܹog]b5@* ,evDɑhmboo)wQ2ޗj#-)ЀtlN9 &I4TPO=-r| s@hk}OلAU 9|!e61;қ?! X/=ESeT٘GWfcC32vZ()Z}iC_? y㲃'ed  GdW9Y qk ,r,KF$m4:@v03:k3!;"]۵2D9΂\fTQp=cTnj(2 ?OjiY5TlfCIތYbpUz.э2HN.grg:OO*w.\׏Z,(%o*Ń ~̞|REU:|q"XJB{kT4W0lм7:nB´kY5%Vi&LO!W֙z_i iFUo2v obuўW N+6]NKyKg&;(9w:;58R\vsΧmYq2gbN7,9$֙6^~Z e#uRyd{h?ۖAB_ѯL:\E^Ȕ4_76;(cաq˭m"O,m=#c\3JQ1 im/ܰ%^2RJ[hsN="jY=l76aWprQ5ֹiI$u 2<Ѣ댿ٛ XxI:T(ۃI$W&D,Hi7p562밟ZZJS6E!U +J\u;VɃ׊y *%yL'X1No L-Ѕ7 ONǟbM&xq5k!x^Ć" KuiH_їF_JQT\Dl~$=u!ԛ颡-qj^s%b@0#FC:ߙg,ƎWö#xh!^&kTd6Ư-xH'l"esS6 Mp\7)W)}O!^fZw Vd2xhOʌ5 "ӹޟ]}@ ts{KB#Ǐ1oCYƩR8ijL"銂?0s߱s#2)LD>ASg ӊ q`n 5;7̽0cƍGƘrsoKvGK׻ e7q/s׷P.;I2q5< na Hf^5RXgRg6$$D+poYC(ʢ8;S} <9 6ۼ-">& 5B$^Zm!kK˚W\L/QvדO~_ͳaҹ(p/Rw4\rxH`[1g8C4 z Ԑ:rUdOi&be$HUF~%z>>4;Yٮ[X{Xv3wd 1[ $AJ:"y&Oڌ'K-/Q?r7}(?]s%DŽsӊ$sfL`=5e 1Xp'dKB:!tx 4)S&mfܤܨVQ|]qiy M6ׅϘ݌t<9h@Tꗧ1,kA3eY5T$#U e۽,8gmBㅓeF" L"5xټW ?Yz)Pyak˩q!{$B]÷1'sf/ c<3r?g0ZRn:Z3v_pR ݚ_ӈWd}U"uXwC3*H @LYcjh P[ eRhGKN}ߴPNͺPIG|Sސ[U~;av5%UՍc3.q]5cwl/"I ػJb*B3[ݘ_A?5㌉Az:-KL 7{5g1z;ӛ"5Zb UVeFO~  rs+\,F^*\+YS ӳ-I}rjH*?`ߙj5Zeb]Gyz[+o! B K6bW(4a/AsI&Fq捩)Hu!C bĢJ8|hLj8)ad9@~k#Eh$fQYP 1x6n ZIO3~0.2,.CZ~mT;Gή*-OdÆ bNHA++nd Hj',URfrj>~j~2$հӂ罂;v;ّJD[$Z-i0tߡ^. pa5Y;'P@nJ Yٜ.Zwa>29.pϢEjtYpUhSGquzpN?hHG{ɘ*":Y^ A(D>/ oFm8V%{|1sZ39ჼV\mbYEHҙ r8, K_"x f3R8 H (̈M.TDtq-z?]aEI]H9}%9'6.n4UZܓOjbI GLF ]-31 ž knMG!͛bA6.O?_E= HAJjb5 [tԝ쐾249W {}֘Np,-3-h,s 3NC38X/!*z"5@s8ʗzTg1dF*iKoxW:bU{cl@ہ\䂄0*1W$E)KV?[?F ǒEGͰ :,P"k!.<E14i~Ewl~pVm'ogpEۻjB^ sCN6rA}C7+i͗2xRw2ZdC~TIT_!L;6,+#±w) >;~|>?7} ~|~_K/M&]'|SULr0*ɵM0BWnŗnb2(4tŋ}"(ByAX[i $%6NZ Ѹ0+dn|PflO(umLJXLff:C?=]Ejb! rs؁> mo<$z:'MuZ+SX3Ag+dU0z/{3A P %Ad>ZEg<'i+;)CMӓc,꣚O6BSziޡSCm7֙#ֆ]N}Nу2 o!"k,h&rBc*+]^/y aZ\ m?: NeٸG٥vS<QF(dZMP)url'qx(S ߖE#]<F*sn.*+W&oR'F߉=@L–g%*fx &{2زV)ǃ#v0 FKxgp0!FY4X¥ ̵oܕ4n3tO9nVbpD3X,Nk_%9? }Qߙݖl?ॼ4u5Qga~bS6)%;E_i~F}^'CakU30&<YޟF3,f_gD>b!_4<Ekn109 gÚ}Dl* w#gŏ J@gȊ)E66n֭(BKKԇQV>o/xqT'T{ֲ\9;#i,UM>E!,V|`3Y8Ζ9?)WR_~ ?ciZJc%;vl!p \s\GwvC"] /W'8Lpv) Do(:\.E%vǺC&pt#hX_N.A*;7:F ve^8W~(NiL0\ҝnB=+9(f\e)٘ wQGp]nq*ٝ% 6Psץ1V$getuf5S86CjnXUڎi&CNʍ,e8)QP ~D#*CZFфeiHˊ\<ك:v@:Y\j]Pgk {NP!>/EYF#[8S_MTP3g⢎e; T-H vG)Ed?lvjH>:JDpZ#u"2]P9ze9jg"$x}ASAssu8]cC$0Jcn{֠# +{C"*^l+9f1hZ- P1 :]s& <ՒEf'T34q =2f1JS< /R`Uƞ>9qHbi.ro[&[_4dUMPw' t(6lSlq1Ƃi+)t.BF".%X[a;@P"M̊ȭ% ;F9 GpC7քʽ}b3&=aR"%`pC%*ځg6rX:/*V:BH'ٱ^Kn @w!=Ƶ+ '&{·2"ZWwR녛lQ4z+*J:]}VN`LۑЌ۸f +CCFGkKS|{-6m76*vƕq$wa!zp{xebU=dvWf;PSxHli.O^ESO i5B6-|oh ݏ=Ƚ;Ipnz)D$Y5HKv[~5Y9} r@Z+ot\,cdz+d"J^gE-Ջ{ee?  /@dl0#h)_dj:G$wnarút>4f 5>7#b?L ‛7|m luyW$JVH%xqOguϠJv>d MGqg=:@Mc^;A"ۮ))zDii(0DERY -;DTWa=x[ҟv [\j$Vn{ovTo_cRdޮ+9u\Q`|j|Qn~o(A,@pw 2PuXwѝU1Gj M< sb`@,.\+A쫱ԋKS/~0}v[LYaA]rU:4HGW}3*=_4Vlxp5,cdYV wP4~VOp%zmJi勇z0w'>$ί{Uݨi }NP!VX/@J%\%|X ÈJ]p U7,]gU\.UKR lP)gTjU(*Wd3i4CY?/?f~?Nm2Lۚѓ+QmdWҎΠ|QiB=@sfw*@aˉ+hxo=Xk=|S4bq w'A3'39)d=Rmφ \!ȾڲPR73 5]$|ڀݝڋ:\]sK/Cb/?azi 3_9EKGq)6N%Lerzۦ/m5t(r 0׹4 v-ONznJ]ͳdrـ: )*̤84ִWDߊot:@1 rI@0CCu>O"^+c7Hw{?. ߯N౳ꎨqMfv@Ӱ54W)QQ&DA-8i7xދQF\T(p{ N̡ xć(+wflHtѐfuBD@(Ҿ6 #@_r;k"sq٫x0(] ʝEFYQLܣ'^@(yg! " ‡ x@7`:)Pɀx`ˋ}!/4 A'ERv}oQ\V M8k*hu@ * h,7+IVbѰJrTo?3zY)ɍQPS<ԓPE㮟O;Sa)a=exV7vU;)Tk$"*pįk_; C&|hD(~  8AvHF(|!Ӂ" bTyYX+9h8b+/wwĐ}u1^ !@S?`1zOG%CHB4J\igExjP9I`e,x1VeH HY(ݗ**t'mV,0%/:$D2;xC.ۿ#HWMת!)AFHQ%.j'Iz{g)%RdcyDԑv&jTo[A`&JO+$.)2ylN ˕CԾݍoxsLJavjNק\?\{O]  a dEP1s&%/fRǙfa$Wr0fu* gp|!woѽN#nMbbHRÆRm:XJ/Ʊ-"p@c~`3 'c !@$|YZUGP44l3U?OR'J乽nRo7tWHs]FF23@!Ȋu3X5U,fBfsjHKMVw{ϴWO NJ> ']M/3]5IׯsQ grn=cm9JW5Yz9n:^.Tm2HJqa9]>ݩ22mK ڨ3Z,og\Cy.J\ |W,!t7y @)3Em+؈d)JM@Gl_SpL6ܡN'=28V 1S,j^+ϨS`DI @>y&wz޳nJ|{j-&fe%xj`bInt`'3r׫6Gv=1P|Ƕȷ8G#WCB҃j#dUJ)^#> +➞XGwHeU] );^"PCpY|":o\G˷|rg{`}jj^s 5B. } 4W! ] ENt:+JE^#J*v$ -O4۾GXAV\R)HLvR n&=Da<8CG漏K ?f_tA59ֻ„ Nz,~)]g!W=k>7TLz רlaT}\v87yǣw7<O툽!ۛ7}"gL]SXɧF:kwt[yc$Jmf VKjauG–C'=bFr_QUC'Oјg}H>PP\ I([Jjɫ;KxWVȳгsSIQsS`qcY@d7Up7/ƩcT 'f eG{Ef! ,8?՟8dXZez땴S䣇׭"4*K\)Ugrl %mO8;1C01.:#qRy˱b?3m "xHd_ ۱b@x!۝} '_h<]wH(8Z!K?G0\S h1Bp0cS_g| =9;Pm6?*@!T@l m 0;-Ojp׌ntR!ч-^EQV$QvI[o^%͕5EbM Eҭ\K'=ʌ::?|ᄌ Yw&!TAտv40F; 2p9E#ݟ]ȵMNrD:|=>gB  O65@ٰB6Z/Bn{+余&ee_G;Q41o |ϔ}|Āl>}!0||QIW}kAҍͩ/vY7YeܚL[mJlѽ5,|}y$֦͝~̓HOI?j#F۱<㚁ykA\ N:pl;jGwZ1sXAS9n{ð U}kR<;ӛP)>YZ^R6g ]7 HBF΋~ia둯fW$)sUقKmc̻H! "<7ʇ8x,9#Wv%B}0En<+yFTj@ibVҪ+I--k Z(D#2QC+>/WADp\Ŧ# ^4^.ʈfj*(87Ͳ3Utk}is" \e{ AwL'[DCz_tyM e0b_7ŸnK:",>~+ +6<+xzFĻ%zFT/i7BFj}I#FXQ(g3?Hl1"@P YT>b/-*֚# Zn)m#h*Pw ص ᐉ*RA?CɭTک#DZ8 9x.ސ?aS{,ᩗ{&/9-lЌ]6T%v`j{UH +6oބ;`*ͧy.3r:p@IJ `q-SkpQMK$, Kn,\!:Ƶqq:{ꃦKt%Q9KVd̳u }T3QLSr盪t㦩&Ʊ'šI%l?Z`aƗqva}re㹍 DZ0+=΄J.NsgFl^i -39%78B-_Aq#>y\=@5G`X|6$]3 vӌقx! %,qY%vNT 9@man/v9#;4C炙מ IC"ү_H99zK~g@GJ!"L梶iC6R.p HtY!Kh!GS.hj|yMyAR|JU]LK.2_ZgҫfBGK>RcI`'ZW>U:;-ne#lI~Y ʁZ5Z j74U'm(gm+y \֍qN njieRl^ΆC+SR)8C;G/ZP[#+ IAE`Sg荏o$.E קPPfizғlb 6F 7?b9ܫ!RPXDV re C[ kNEl~m\~o"wS4Ù~<[t[lH*\S 7fji0Aim4V(ik.[`QS4Zii{.q]2-}OJ]kݫIo>4 ˞eL>U2۝7O{b*M]Q%( VGVj÷9|tV]2"E$d^ } <}yglJ&* Q\޿F Eq(2 hlԼoUNu\Th`٢B)z / Nr`||#欚g9@=4I\Iyt<*Em3aM\#AeaKˠr$^ $TĹ>j%ntU҃h <FfERIJkpI0nTg+ܘAi[n(U5I`E6i M5vdD:ÚJUjx% +.ByQOZ*!o]ddgJ+ɝO*ȦEs$PSLA݅8@gw0 F8VPT.(YJC+&46*D\{6ތbG@:MzQ݆~*P {,^DNsXi߉c#~w&PlA>TG7`ň8et GyT=i]3Rb'q M/= RhnLvuXC:"wS:a8X1!b L*:bLV M&:!ph σ]T6ּ2rzmN}R^>T^H[} >? #+ʺp@XUMb]l)m@k¥ P*杈8`;2R{+JJt;!㥎"1c] 鈉 iqnX 2fM_](|_'~b3hHC0rE9 'jۉ|s ZruF,V$K-Pi{TtEM\睸TuU/?Jc3Z]]?})!\0աz8Qh;zI*eP"H=<. :,K)u Yx̦U,( c>+r^WH"OXΌj w?N_м(pZKd* Ő}P؏q?>@Nթ䫡)t PTok~'W.C=cAFg:aKV%nK9[a(h#fX:Ɠ-qc(@|5%Nm)& 8;]âڤIKɮq;fUh[GM+(o)p#-} 4+N)KGI^:>?.dOim ?V[W((=|i&UR!pmIH)7wD[jb=α]Zd蕩/쑮!9ӠV9ߴcXT{6r+8@=bwx3ɦe#(|YB~D2E,v d{!cwowjUF#M)ʬDőe8WTMgǝ!X}fnj*|Q}j ? az "mWd){|l@4W =MAy=AMI#I&!{" z'!J:K9i{43:Ԛ+>F-;nP2W$o9`0w,isl1}rSVd}ܬUk>ʱhл{R,.Q0rIŃXF7@RS߀g Q##OrT%Aj[`9$EQY:jͭy`e#FaՉSȲsy+o1pS CiAk 0j`Cu`&GI1ǚ+WzkAB恢z2.7!eÓ\/-#͗,uP"wl szf ejbUA-PXxzcA}p^fQ?`F=ʾQTXNiMK;RNJx? /$9>N}ȮIgCa|1f7S"${Vu@G`qGՔ=@65FYEYԵ+)X&Jw0okZƯV'=,Iݚ3ʨJmoͬ]ޔXv/}Xbe#Yew T}³g2Б-U@4mjdl\5tAn.:1zs= X?1ACwg8K 3ܺ/¦=ID_6ٛfW 7T^9Κ|f]Ky;~>re{XY7O"Rq!8E9 J`XHzd~ Z?|{Ǫ(u^=6>)vE` )t!B 48pV/`eKdtqڄq+-P(%E(UefyC. ΐzv. 紶j#}BVz2nC8(KRs[$G~謈]R!eͽiFJBiɑ_,ȇ-k[rF H2zH˛VˇF ^tVX^@T1:L֎ϟ~:BRt"Xgp=1!nZtvC2GS)Z\IÚm`NϹEY0CV~-BS&hlm3=jG+W /Ig3J {=O2?D uQ4Q1#^1nb%;Rł.3;)QsjX/yb"JsK?Z^^n1vƺkӄv B8Ҿ6|*.N0}Pf4%m3:Fr<{ar ~ҧ! Ip-/tqHHݯ8~tw$O~,ڸt/͸.6m&57ן{[? R#cI{ȞMwOޭ+IRjlDC `J9nɗnu aٲh-23ղ{AѲ:\lZG߰ Ah\}I0Of]J BZcn᫭jYԪ_bcg0SX;FZzv;q&u0Q܌ Rϯ0 'ߚV$2=@5'VwV`#wWj63S?m݉x&SBQxmF` ח[^Dj>ф-WR)xAz$Y'e*/bId֧5x,Zz& aq$&+d'"AyM.%{[4u .n==߭s=w>-_7bg,hi c<oCc.PFj>0fl&j\lr_Df:o$`)e$~4XAq49LbP&%l&%*|ְ6?L u g[do y׏B7f>sBI 852&hڋ9ڗ_ TW+u]0%PL!YQ=3L&|[2,XC}.O!F/S&& ֔1'dE`Eh䌲* 5|g n;q.v}+efCxL!|H#+(m !kךO>qŸ?k$4*sv8>^9ٌ9B a4- .XIx4{pug]4%K>G(8^]iVԻ_*yU$bTN(}0MCXPt6v;|}Zߢ\9gi9h_U ÔZC'R+c0eL` OMMI#.M3zzJ BjFfn-76cZ;]~K6֗+zHyH)a ێm_fZf`\J0Lt>D9ow5SU` cK̉hS+m4CE"vov& 3:!Mi7{@ w_HPMq>ezgvtrwRNRv"兖,@Y}aʏh.ܞ=09cO@;_']AjQv's6%Q7RәzC 7o5g3lhH<$C( -1Ok4䭈cr cv:dÓeK`kH+AQvz3!cZa`DDO˹bۓiȬ5oщ^_0IFρ+=zH:X Q*H[4䕢Iw$еIv6KJr`||^ j/`NEpHާ3= rU]*Qa;1`^犁@5"˱ M֠TtrF qb-ٮ23pYz7X, &nxFT[%U$XORIIƃ| %㸛7+4ʏ 3I+vƅ7۷>`|ve[~Rwhnt˓5T+h ݲd1 @REtF1uﳵCUֻpz4ޅ ˀ{溘=:1 `:]k-ŚTNUp't]+W> tULF?O|x/\kD%JAת?âė&T7Q "^ID*.yC%jhoNJ/gKKNY5C;^+ZEZ"젩9[^CѠЇkƌ٩7/OPB35Sʓ҇=24%4lYZ ^X"\0wYU 2+4ĺL:^O1hI/v= V_h/; ;ij7`(#E0^Ez#uB玬I'@H~E"KYӣk[erJ'(DVFc@j`lh52F¯7WH`{0f?OXl Qo4h[֝ZٟԊ卧9Lpqdչh˛Оv@m Wn! ޒKpE;L9v$QDr-ߚƀ#sБKxxX&`øaI%.*U܉D"/b*<],X! Ks|w@Bȸ~/&YTQO!9E^d M%#vvzsl%6􉳴Ln5H $.REHFR k#Yw抍C?JJU 4!B%SN yLadM onI,S.A.y1?+`iOr'(bW EL3ta O^Ij0[cH kn#Mޣ98R1 q$9A]ex7(d#T­~>RAgT^ePZ#_O80bMU%-dI5 D:ZUv Oz k\w|XQ.=FUuX^$h\Fћ@@H]!+ ܗIHt/v-HߡO&WSH9&M$巐[=(hH s*: |!rR1Uyju=xk*uܰ O\/X@wz/?Xo3R ܊X%p@Qm1rjR]dk"cBJ,:!Y S85p(1@́.v54+hL jVO^w!@n *L{XRr4 ѣG5Gl.Cр-VJ[ !_꜀?~4Fb8ڽIlH`[M aρU-Qk.eC`qz<}@_HJo6_c   2e^"8 jH;SkƎ># ov32,/[F1in>4  qΟ ;0KZJNGbr̦#BOs($U jNAuץQN@>wI%*}&پyab;$LtyjcWK^#Cym(7ބI,<0,#ȥpXء L숴_ Tfe])NOEº.aJhk9tX\:_I]]ޘ45_ m}0UYגxXv%dɤnNn3JicRX߫$=TbKPV֟7H4o*y^H֫Fc>;Sڂ;Q&CͮL$V n[( ʸ͎\Ɨ^UԉF8j&TO|e9Qy8S6~ C9$SZ" ɼlU2M)e7Z8BBtӋ< ssBK;I87)'^\N.Em MTzN(*o+]N+䒱K(ph/qSֲ)]%c=.QB;KR8=WH[@z˴JIM`r9V{>&{óa0@$ 2)*7H轴$0`,1ʓ3˦<g<LSJP :uQԯ/+УCS>)NLb08(W(53 +|9sC$;4_vF%~ULVx;ҟJnDt "xC̅ $quq!bn {AtGd޾-Q hW !7s9#ڊmHZ~xҀH$K Fxc|]]sPmJ3o ^ e{VV̞ـE3y߷8G kf Wg ];_&0LϰD8qL >'\z!h'i+ӘZ]F mB O%N`/w02 D…hd?@"] uP&q{ztKnyllB_R850x4l˧ _Pic^U>w? sO;ry38k% [3(WN+41H60kuP t yxDiu'^?q!N;.*'{|$wcMSj] +"tfSY&5e9zsRflzRvH˄!-Blԃڅ ==И uM $aCa$ mJJF2l|g!!3D>)z]k}kBMWujk#8^imxUEꑭ_R0itz .25:o-c&/a{Hm":%d&c܂~zRfԨZ%m o W9( pbV6/4kX9E0S g,4JG&\p 'k ?%p1qeN[/lu6Ț/@\w3̵~E]vm&/h K5+fS.{aQۣ}i=妼/#I>v;M; FAfUma@aE4&&ph3(7Hnkë]V2>v5 r'RD^ iz|HT=bS?rwKǨ)RY|\-4M1j0 N>o$7ߣ~d?Ҭ2cYi ci^OO5IT,%cZ=-<Xɏ,nN =diLc$ߩ7GYy9_s,/%):%ur8b'vUt @x{b$0Ö~wzIկLp369ǥrqCN)WOҗo} ՌǗْM| R' T-~]?┝/?TB Mxj[5ÿz? xJV 0UbFu\I5uTn]8ޤ9+%zk,.S]ɸGE=VZQ>M 5fʹo*5(d Cpu\eb6}#rծL(v(gH3-<gj?-EMo+`Ȣ`>s&=Y-TJz`1'ƞ?^<{F, WV(Ig #g'At;4i'c$blqICaЖloiIGSdD ^!b2L*s"8ނ3Oe?`5iN:+-(4q_9EItwX0qߴU`0e)7@Wd ﲸ{Ʞqom@-g^\8 0oyo $MzTXE&eJfǀM<6ijVropUХ5$8XA5,^6nm/aS} pOV )B2=t#J3dLD8צ6XAES^6E&( M~^qV 3ٰյ ۥFq`/5tq,ZC g7Phقpceb3>s'X_;29|OG3(@Qǐ/[RWWGaF(}njd]9y/U#6]tk4S C΋Lsv;,k}A!CaTЃ"(v6.~Pkf(mL媘3hqU. j[jN0F*yB:.ijճO؃g֑?S8`Dњ|^Qs*>O[@)BfSR>0 mo ='YwB!#gUz"mnkY~XX_#4"ȇ+*/I`#7j6;IR:@6l\>u_T9j(A?]BrDUq o{{d Kovt聢VnKS?WϏepabeH~|]J3Y0JA˽Bt9OS&BiٲxD1+;&tmb![I2SE=}uG~~h'% u09R+]h)Y we*u,>e|(&HtXo A,nn10z4 _痞ԟFGx MS *=,smd94{nP])Z.^&~4[4뎷I 2W5GWERa~ΊۊDjGV[EhɈgP9;1 $n];F'p%535OJPYВ!o#sF)^>CסpICWeY⦢84Ex#C;Mũ<p*r/3!m!`k-s(,#^&m6aLe m=Coiv3ٿ=b[ev#0JUP,['=A•hgd?VHMu YGRS3*1HZg@I?z"`x3㾓m(ޔԏZeɀm' 5vvvK¸9TexFDW0%D֭xm*|1SAS%œ9baQ$ c*Cjijs~eN  f> l9$GGWM\/Q]J|˴]5[PiD .͔ kN/'V;3ϫ<ق峯; #v}?n|\pS")*u W _wNc}.'BȶǴ.K|#M@cH 2yA!akT""98I-N]\l1E;hcPJHԱ[ x&6+VT5] zdBꎢލ.hlVf{X#/MJJqZ} :vZu2Ӹzsʉ D8d.cPXe|ҒEA&629),}q!YOAp2>%ѝS;u. 7{??lj}0nG ee\7ݬQ{e0;_L푻U1P8a0o;D#lV>t>b4i$M^X#[v Y׸6CYKFٝAr*%c_"묭|n5¦'բcE ڇ" :[ n5}'to򶀃#EƬYF=b',D - uX2-"}g&: i1(M:`N;>ρ)gfQȅ[`cQ[x`\ 飓4vl-e錰 gn'-GmVfX6o,T}(s ]CɖG9 i-W]P /ѻ -:`ey27 6NdIXY8k]A3n\lN"e2vB/Tbg0|ЕV;*I)eűJUX J" ;}ǪET!nK}C:,FsP~kὛuY.ӑe4o Y[)4Hxd :|]1ƚ?%ⷫ^qm_2a(h˼'W 7`w0†)d@@[w6  2/YC`"RiLgt*%~;4D!Gu²5XR€-oVa!]_F e BխBY=Ub3}){Bfڮz¬B->O\db+/:!nSE^^e#7`x2&kLF=DTl•?`"`i/DYJ,=mEJ PcfQy>0(=\=ʦ@/l9{zPm{' 5nyj#hRD͸[̆հ:UI1CΔܚpvo0` p:y:4ϚClvC}C"5 K)2؛r]5څұ:oYdGsIjϲk{:\:abkZJ <[{;(;˛H Z|7Gsq$&$dWWV}CqZ"<3 H`HS])d:] Gxc䱼-KÃK*um#K'RcH<3y$l8-`o|&oiCk_KÓv)OC2>7HvJ&Bẖ Un'Π[0!U=tEm =kT1muse׌{%[oD5fX_$JRy4q X9痪N *tԧۤJi*đXY@6ڔ |ko<,+艔oz%ӮB:mU l+3>3l9QHC ,&3>&$W,|  5(OSؖZrď_+Νv[[lA M^FKҿ XORg~/<25Fsc.02yku>N>P{?A˯yQĺ ~tHAXjѹ7̳ 5$2 |̧yZvJqL@X@c H"Ap1M ͓!HhulО6YfpڣfӉD/gՎ z2|XV2FzL|'žG*{%S/Z|Nc%ǗQF hn};ˡV>}Y*[Uylb]/-]MaSE_ ζ79h*>\m|pA'9.&PN2Q"Fމb-K Vrj(wakY`Z@46_ 3h+hІPS.v YOփ׶4| +J:?[,0\\ (O ;`Ais?[\UBF'zKޅ)*X@ N B}͸ @cgѥe|ᒤ'/kqܑM߂H׆] >ԂKs)^0Iҡ!s+v~==b6]I{'7*)5S6qגy;u„<0*^GD=Nxlgf77USWؑ ͖Z N˼]@g㥯s&$NSߚlmY8PzZ}ce7 tx;Ә7YADyfgVDa7cn#vY OoݣU&:BƲkjd='l:*&9 J1@eq4_^} Jk9BəO4q+Ss@ًNݽ/q)@ MÐP Rw,qНvQ^=d y.LNz5+ ],.`zeG*&abk/Q(dJ&PW-[uVjƈom~U)0C +&B vC]JhrТeMbKn{rw |?,Ypya][Lp966ЛEʸ@a@ީt+C"XBM%]~CMҴm ~\y.[J޴3UҜ$%O>y}goUm8Uv0׸cmjER3mѯrwK`(x04+3M un*2*9`J5ч{Cq!elmظU1oJ}$At_H4 55u:~M^ҡ"l8H?Nd3zLdzQ~57"Q"[cnDJ^֕楸iZqSA0^*l9$ވWeMI7iXG]W_>}r?}l -,24hF2ݩ -sOc?aN.18rFb?j8!k9^S30V6uy-ږe+2sޭBDzRC[AK_l&ľqZ`&Ύi@gl#7ku!GGf)!. br x7lh!ź'GL!_f>A*ukF~t]qGCD&bC(dܯf6y ?C҄x_x!٭)G=#ȅi.q)R&ֽ|ȑ&-oL!o h0{{%,pgBEYbOve8ideo?<[jYù9"|0uc ƅ%>EӃ6h,@ kD>ہ+HScL1S]dfj)p=(>񐤗hiGBky‡3R@DGLZUO(clk1;V煫Tr)?jU/]~ FV``%|u;^CWirE֢@|rn@B V4$FÒ"dKTq?nx藝KuFTfqqtK*!~35k$ B~e ig^=mu[AzOX~2 #D}%̙m:A8kd9";,s;"fi@BW;*c OҎ L1Ny"6D |Kp }11S~஥̗e4"+ueY\x 1 I{zԑNB,c5L@]*ĝ>>Ɯ#7Ib QM%1ǧE l{1mssfzW!|9 |ij4?u2pHdl]^{3!VGz R~L<6E_㔋>MNĴϯbE߯j +z#t'Pz9TMSߘZbNeR`Lmg ZMNu~u CPS5+Kt}wN^5--Qc{g' Y=Kty(O(t)Tj1e)SO*O9/G*JM>(t: 4Z}/y! y8f# L}G$C>QA),_5x!} ŘSڕqvc+H-c-.Dׇ!'+0eXh=5UdºbVv14-2*i\ܹ7\ 6cllZi<[ !olMBC N]}{]B`r9# :Vt#oCVt%F(Ǔ @n޶ie-DjkŀEUTYbM6rFTL4 הS].F}آ0dt>r9JFptA߼''@^x=%e-7G]zqe,Yk&ϓ.k.Yx[{>qZV*^s+˨rx4ExXQ>l1|׊z6D]]`eb.HZ'2}a$ߝD;l=_Og9*7|*E{H *`ȥE˨&GFTzF*dlll9TeQB+2}[_]A-(k 1+s~#gB5xc}Jw -]o ͥ)؈Kbppԯ&Ujf-1* RzH?Ku8%y-{,VRIړi!a_HFID1r0đ91|x%4W喻R!?,6l(+ZH-oZ 3*=1Z66ba/L l'cOzq^3Sp<*Bnx!".,gQt2]s@]q^35e`10pHvzf "p/,rL : -jTJD!93|zԣ5/v {UiհZfRdn ]~, 9ȯUqPڰ+QFA#֘lPAVfHjF"zrU,ډSt9E'36j F.ٖcbzqWݙ2t~o9AŃp:j|ߙ$)"i*7T| OpK|ۊc霄ǮV}'e30tN_Xx7- Eh&%6_N]rw;7&L 䫃!4f;S\\<8Bp( R|^FJ%cg#V+"R ߻Myj{1< 1`rOhl:R5*(Do{D ˞w%-C&!v0}ʱ:r~ u7`Ji0?CTf.=,*ϸoky;cHKfjg#hkWKfu_/l %LRY<P/$KX6|xd~Y<;S,YnLmCl.}`CD1CNF&#WH<!Nj e˺WѬ cgG1o,EIUGe͋lѬJ ɰ#rpHA`*>+~蘿+@l*(\9L5d)0˛_XISՒ 2AQo#?oU"_>K" G:FV#Rάaׂ|6S&[_jye) Րț2 { 0qԜ`P Aac$R785x׵t<9{8& @"LWgx)zڳ2n'[j3YƇBK;!iFw+Eru"JugZiˡ_s|D ְ'wA{t {rr3](p};g9)vI#D }`wZ:"|,XF|#ҶegKw Ȳ\6\ B)4éDpE+r lÒIl!v3=X^w1.fFh 3 vXk@-tcah&]:(C!Hq77jcc)<[iTMo#~6Akh|9ZՇX(<40ڃ O7|vϩSk6ۮt4Iu]f&)iZK7=})d0 3neB{'{ _elLPGV_:έ,aE|=B{ uw7ٜmr轒o^bκs YyΨIWu m*` t|`#"|p5$^} T\Q0(0g tgVg;+M\)Ȩhᢁk9j,Xl'AW^ dᨃĻ*vD`Lv2e2_ Nc}#vb\q}z4r=n hyl75TJfںU[:62{܁(g* M̥q+-so#N@_Z csOat`mŽEҩM˗"iXmna:\+nE^Fu<)l_> (?Lbϛ3JKu(7]~32:4v(Ƛ\8+n=@LSrU$]qS3'"y'0 1Y}f _Q-sVgvD[E-|/-|[j,n#cGC sꋕ+5A/9fʑ5rNǬ)v?[n<{GY&SbFL&G|x4WF:!?>~vZ>Qyn̕8j.6ȱ|:݈7))am F>FL]U*:u zUyl,Je!޼z6U]yu.8@|!| +;.&5˄84im&b&M *T7I`djkW;TF z.m>SC_U$Ӊd+U9I]VX܀Ev*BOڥe,MMQ#NZIu_D]9WF,jaƪʕeVA=pJ>ڂSTOe.~ed0=-@~75-}*7AvGȮh"Ѕ5l>/%3#<%r` P#ԸirZSWZbZyNGQu2s9NAZS$wX µ[ hm!L#{D{8j[\l-XIΩۼPNӱ)%BvB»+ RbN*:Q~ϷiFm^0~*SFPRgЀ, R-Z炙$bE,Cu~'·\)O\%`YŤGdn̿IԗzcO"?̙K`{9RPB8*YvfsT^Ԫ-}DkEpS'KbڮF3Gۨ}Jxq_kAno ]Ybc]忌r] -rg(I} Cm8R(y%Κ=4\02F&1APHqi`@ۑigĿF"xE),R` OuUKAC|aG[DR,L/8r|-1vA[j H RL֑pj)0 wqןKzbZSfu¯HG 6982_,;E ZZ/ruY[-6CFt%ފHDž l1%ީ3[URķC+qZj|1VThU-l) 2aQ돷2 zЩ5o֚@;lXx,)yW N: Y 9<>CZJfR쪬؄ _dgC6U =KWK3: 6: cJSp?%u\!v3ږ]{ {J'UU,҈ /QZ Rp:^]{\zץ50͵.rFU@qt .]՝ n .#t]٠mng;~'Pŋ}rX<$[2< \#JCc`[ NNكi\%Q6Y b}4Cg<36Ib 7pꝡh;y5aߤf^*T؋i™l0rvU0 Z1F{bGi7x 0y>d#t0eFM *?jM>3v@lki},PE=,!JU;DkhGe-׾J?44,Ǣ wp~5|V:2tKdE5ji{>SňKH+fh)Q>oVKWuj,Vh_X{v_ ;$ P@Q\"K$ֽ1VoF& mi;#D&T1tօ6!(E?)AiֽL?S X:sI,Zk͚噲p#Px}4SbMjvc@](eH蹱(cX*3]{J~N~HtN~"0>c|.[=z@NMv&Nwř{/roLv;>0'}@bT\[*n>2R^ӱKR-d; EhS̯\yf:ej%APTB mHbӠ8LG |>Yp~OZLZ%`ߣUcoOwp9WkxKQ6P3Pv&]ʮŃhU.4,*׾_ r0[cs!EՄ)eT! Ȳzރ].?]DWE[<@|~HW!NG?BK|!8G7DThJl]pVn:L?JVmD֙K%!d6LN5P_kuOuSK\7כdk9.Ctwb&:%V0LQE8Qн_ |-98c"%2$Ei W}^ vMܰM\K~ z, HbŸ+imo)}Fy.iPH&hT:]z%!0ZVu6tD>LYOR}N!ךɞ>zk<M;ۗmfK3iVM͵nw%M/r iKXZl5m*jnSyL^~[yZzb(TjjVhow2@L żfĒzO$UE)/Nɔ~%V7i z&V9 1h B0l`a'Lx]F`}ED<ʡcP7~1t(E۰{bO"J8 k# ' G-"q:G!B uM|+%;JMB. '.be#m9 W,͹d_ͱY?]Y<06ŇoC3fa8 T:Za]q=r7 /Wu5x8xu9,=ͰxtӽRv,bT Bt永8#kW i s|Q'<}u@GK,9t/w{U+I/az9V,,ո 3x+چ,D>YۖPY ۽kN1yyC(L4Lv"PGZI  pC0{k}>y8|:sYPy&PF*5C2|:7Pv[sبV(T#qNvރ9Ӛ%GBi8q9]mϧ`z,wCa|吤WVt/XO.K@ ub>I85^ vA2?=Wq%yCoPp[pq.+kЅUw慻C_mo ™d%hr !d*4nBS5@m6vGs^o؁"(3r CMJvcN +Ͷ9huѕMn+>+z;-#V2t[! ,DY>v+!At =5.K $ Rί[ԱK 1um81d)/-+y p|~ikRƵ `—w5>-G]$DPGebt廏+S):?Jge˃:iXÍj:# 3X;;4a em hl*( Y lϋ3λho]B#rڙE~EAQxFQf%BOuI뭾>/!yx.Q%N)Vߚ~O<kŊH^F)wɿQCV01Jc/ ި}:<%G D%fg+~Щ_'OJ'ʣny^#ٰ8Fގ/H PCs Cz%ڹ6"Tҵ:6n\9%d w5G[ QBFhU3:ţ$WOObNG{7Bvī3v=:}N;"rfw d\̫]EX1, i7au\9]^:+7e,qat NVeE+2`a%瀥׏X){̵ULK Nble^=FzC[ !"H-3&p.vz=/!IUР79=Fs[$C|6nRU6'b5 K![6є|@^k^"̔@c耕 +:b>zC튋H2V$Շ~e3>sJ'408, ?Y+k&P}l'Lipx;Z뾦ǚ **VoqCA1} _kzmzak:v:vP7SaٹQ2]t}rZ3{5Ѣar`gˋO$ECI,.j/#sr.r'K?x\slw}ք AafΨjKɨZ۳{QLՍ)sI Ϟ$M%|d9<ΒP1C@\N^;(3#y+6_} WJVӸho=|96sޫh2il ;YT$Op2A:Dz9ڷ,%;}&B|lp3c!iL@HQM\=r#:>ىf H$u}inZu:x/Kp /0O,|,#6!)l Ȗtqos Ќ=PB<1y%i M.x=F{wAR, f&&_/TK_F`pg,_6~(g9Ux`֎<2>Zg?&v :o8ݯ֊8KG+?1 L"ߧ˚e'Dӧw638Y<;@߰hC[``^YоUXyKjKy=Q+Hrn+4wwK_XگFO^CƾhKE:J3OF#b1=4hI>\Ѝc4 $9W;{eTGhTD[ {Xfh- J8eH̓BZ֙n|I! a)m3oR?c1m#鄱.F  MX4>WZk0}:VOg[ <ć&el$?pI,-!Nti \`Q q+G'^_V,H}gJFɦ1W;!kD#G-M&Y[n[m:O 1HO/+F5ccby±g5WAkѤ+S4es.Y@7+O {d[} rn?'] S?1RdɒLˎmQ O KZX|$/В$6υX1ʒ1}M2=Tŭsv2p-Lz;'N=s f/QKʋ#4|?`}NL:/kJ_3Tξ_寵o .Pg~.& _.Za8cY$ .ADEf&*ڑE4Ĩ& ߖC SCmC{x.ߣIˬꖊof+Quݿ@uIIcK?)=hu5uWO$`́ˉyn06$~f:FY'+~X i^(lՀU9%A@+\LĀm&B  0n& ܸ3ҿ A!޹S¡DGb+S#y{ o~ޗrn'k4)I1'4:y5\N3Qfؔ#BmrNlQwJ,!T/bk9ҚV>D/=sUJQ^2l0 DdG٩xiM .P}A& RPxw! лTyf$씥s"+a?'ʏWX,ij2qF|X6򾶍PI/Q/ź% ^0篍eZ4#ֆ^–&vsql3qHCnb ^7"#llr㏎K_Ogsh%zo3i5;yK;;}T1èGPАxF!aEk7L?]$"OoL1`ils8'PԈWbo.p[pzYs0"?9il71%-lpwgo#'U4bDK C$"8SK At1^" owjϺ}Ϳ=ǸZ7.n.isvy$|8>-6>. n+Ge\`u ;ZZw},#N6;TJ/24i¹P/ބԽ],tdV(:"FGW{ungFO'b*Ր9eX#b; ߑ ٬Pҿ-ס#7Y~JQv#^pbL\ŗP!:uA$Ӝ7?t$Tefk{ Ǹ4KxTρ5|NŷV,gZGAK-Y ]{7\|@%X"%os%*g< T1Imb+ιϥ~޲: z*+t[Ir>%0EhITĨjL%>}>y=wng P eK԰jY')wM]/ru\m6\7Qߛn̥%u(]A57M0BE{RZ#̄&>nܕ4Akؽ 0w,d |ŃY;(Ëpd-g?-SH-js/taxK ,{1BG{L%bM3n%l7Ga@Jo}~b7Wvk<1Et"Z]9s*l K`r)OX+7iCE:L3˟0iT_J(˱̉66•&sCKC2gc=?|>w}nih Vt'`J4|RLM% &hUr}W_WWXɾ ]?Gһ#6O(?T.C@lg@g.S+Y 3\z66g)hݴk"Ff g?~Em(w׷=_`5ֻdmfs#ZzXK{69 QVCg]o#!/VhN&M(+E~+[Drձ[I[~}ba1w9FpMKI.$ >0 Cu8m~IXY í9/.U:x7gtW4RFUTVUՅ\=ʹXrQ<0Č- -42DF&?޲2[T_,Z;W5,D @p3BZΥ[cߐx尌(<]7OGT3Y bΏnG,\B؎Dud3 j-ϴ=rld=H=Swo{G+RbOYbцx*Aa&oWNB^q8Fg`KCLTEtC:+r !d*ḩ<KV Ex(&{&_W+#P ;3y+[s/rMa?ٿq9ƹZ6CF )Ӿui1ڧ$_Qt -jer*]˪#`{y V;{ڟZЦ|@8R)/g-.5MߋT-x^?U6mŨBPaE6{Sbx3$HHs9riåqnJ$2 i ܃47tGPqh%BTe|1!Q-<(-#@4Є!-mIάU_3yi܄_S\ƺ<1AT |`Yڻq>Z2E&18rM ZAE~G0~Bɀ̐xX7T.Jn*NFW& ("UېHy@&sq̰_B$#r6~k>AI!]oY1X}bS*k'PXݿaSaXg鲇xΥ ͻBoA75/;tq2^\BXD'u4xtRV@5L\4+GK܇0o̍_DK .>$W蟪 F='/Oj) goMYMo8ϧI˪z&A2"9^$`A?0,xȲ0`Mb}',=z֌p:M=8&F&˵j(wj{M+'= S`"c"68Jc@/X;Fz"eW%"Կb2pd4wA^0jȳ"7cWJy}z1#va?v=IiUtan/!2<RUĘ\/.&)\Ap.)?Go`3UW1-}#yTcVIfj^@ T!J+U6*P~nɰ_h-."IaJ1Z14w4d p{2UApc3c/4Đ X>X#̣^q8HՓQ1qM"Fh&*'FEqm8E"걁agEL&)RM}z֣E jOKU<0 3s=|!2Ib2.ݟR|(DqykسM;r'n.e?RnqH)OQHߑ_r<Ɍ!\ 3S+` V|1#.ﴼh3*YzB gn!~Ej̕eDXd|x $%?%,%aˤM>artQ\'yٖf:|2:AԘ_Vҵzd3!<_ҳJ[ Ww?FݙҸnBDsI *^Յ%tسjWnvpm5I@ M_sF~c)HtxlhY"In.=//Je#mh]Ǖ`*7GPHT啈4`6PSʜ*|Yo'8M5<.; Aΐ&rIZAbŧ˘#5(kiwxnV95T{Ba{G+|qOZ)o754e`ݕ?t\s iwr#MViZ{f`'uxD0g |RUA%_09慳gנZk~Zc= k++xU'*Xtȏ47V5yѦ=RDw0]S|*O|H :8'{ ij))[f"&x_"K#xɰL.Ò-].-DOh?4/R37EN.OTS% l]P_-_4,uwbɗZ%ǾRUlx/!xSK5ʫm BD/Oy"('<˛ټ5ѱLĐf5jΛC"ҼU?gz+-D#FOGp{l tR+Q<yG-^s/4lHˬ$:$Q;ӗ6$o=M6j]×.W(UOI6m{er zSrߏ"2K#1TOe+уtpҺ(7`gB6RRH|&wP3(XM'(81Tvtj#b(Rby*,Nmo z5@X+2Wb]*xғ'0?{KMI}'? L/ĽGӇn *zLFXfi^9; <%,TI+>4TؔF̅~x- O6LXWe8e aӑ.~i]W]gNFHl37"vx[jK ;yu `/tb|tɻ:4H:T)f&j4'et9 q N{"0xʇeV8LC>p=Tʩ m]F_XtYNM tW-`y=d ߮:΍s!Ww#ZR u>*u=ŨлF-Z_'-J=q,9q"F9YR+_yc% ,yI|_rTLmvP肚KQ^ykH$i-$͏7T5z|[aiDF3&ݎmN5M=&b/rX#r ]#!˷Y}K ]Z>E*% I :lJ zB3.H?5+NRWg 3,=nP?E7>:'b]1ԟ2O#v,yQU? |MmmuIrt59n\; )1\)'~2! w(LA]-M0YG|Ư@%!>'|9/\eH?(Ś=21tkAM۞&9Y~dq"տ)336NzW^I?fp]Ҍr5őlBlc}xe#FħBk 3Z 2D(B0s$X?~3D, gUݶ?-.j@ LAۤw})T}vbmGuWѶBF^Q|V_tŵ4T~R&xVhzx+,O4Hl0#m=P}0.2u keB۶qi0 bu-5p(2쳀f yW YhÅ1<ރ^~_:P^G. $UKl" hN0OZg_kb 3Yޥrk3Vdz_H7AdNi,oٷXEW7\%MD2p'lMdvoHhQ{m,5cRuB6b* deXOeu>?^)J}r'Q\D$xgnAS Q |)| ~gkpk@ct[yG E_?po ']4KgP0R}\cߣo|G${,@,2Ѹ$Gѵ` 4#ٞ]6L @ŚvPJ}:fߚ0Qe^^Nm`4h~Vy9`SY dB7ij2)gAKAj牏BeY?[0CI6CPߋN4aeӉ_5M5EC;uXb%3oWAtJby[͔Bw>@iSRZ]c{ֈH/IGvm\uebUWξo5!MpK"ϵ :?9R? <㐇iy&(-+F=>HHZu+"Bʬ?KTŦux#;>YeBg nVr,j1_ Oo% \~i0 7tETb?v pLlGxd[[hLe)3B-*2Z|GfXk0Rja61)2sf@m )cP Y!bdHI8s+vx?36Tx~+t@k-8c}#QDױDLBÕ>jM\+ڹ;;%LC,9qf@2DV]U{@Eĺq{RD Qf$8k(6 E iՉf0sLqu=lAtPXN.A e܃AL b7=t49De9l En:1a!YrR]rNG.[4B;Li5 ɥ!\f&FVrVgT5+)*~"$L$Esh @՟n* $^Bq$ =DBЙrTy$3K7y;N.oD,J N0ā4!l 9pM>m7!igsp 3 7zRiTR$Ѽhn?tٴ˩MNLO9|D *&ҵuz;T ZGb q|$B7ֻH_'P*8e|6 Kd4@/< =vG:n#T$\ ] U$pd5y!uc" P-q@bxPzjD{Lu`uaHWf“KEԩ,l "ɥ>ac)^7!ˇuu]k= O cm_66ϩifˤ6F㔮n0׽$0ƣ=L^z>FLIQh(\lB_uobB&Bݫ~n'>Ge%\Ne#;(nsdW7FRb 偡95~@ΫH#-޸Q+tVRyԸG E`9nE*G~\a"|K+JڄdROw1<җ#Rg QW3UDSNg'eؿkJ(}Uxa{:MgNO6K~=|  C0M_/V~ga| r@=ځ;CH,u\n9%,ICOwgdHZQȻV|5I=-:)>y;}Io&@̜gCWİ٭s#6f,xitJ:NH@_Zi4E~ұ#<ׇ({f?,].lj1H6Jb,uV)s~D6~aP/ L&69yg |Ę@ذD-_u.z3x3koUS!}{Gn"UϙYtɥð Ӛm\:NmnZ3WwfT %:Q/r5R)kP|S6'U{#y,ziig J^0da2u#54*SRLԢ^k;xlm2zNj ֘.Kj 1^@;WV;ݥb!IdMfn"Iy=6.dImKnwtQW<#3=7eh% GBtѺª$]#P1tW2%N~<>:QCz]}>OcdM7b^m1-NE3a_40qҲ$4;HJ✯9d&[J'rg>2tDMpFu O"h#WDaS})oB;0jq9Kz5V-,{P֤^RWJ[^|#D֋>M>(d;{3o;h_%KA[pz ;&:0.q|27v-_Ya>[5QiFuhStH简,7OOG-@O$ޣ?i),~(KM /վ&ISU(*\E= O\BZ|Ci*^ME1kRN0&fCXe-9poy2C$4F>G#CdP b9xG{dxK˿+ob6w/[ҭfZ+X:Ia[+\jEGHPN"6x; *dRW (-~C6)绚MatO۪E5\i}L\) y4",WXv زgcIe w5AwbxS'z$*|N W'#J\g0g_eKf{j=,7))qk;يl>j5RBC@Riy4V:6uf$hD):1EFidrq9SoKNYxV9[Ȗ@tfK4* i&?oQw/D$'ٵCLR$\c@nDtkYxUu'J,w? ) K M5G(m69skug\@æu۩BFW6'sfl0AU/oNuP/ŲuyyJN跩Oa{yXPK qR;;1*^fuc$cʩ: n.qT %"1J޽2y?"G}#Ѐ?D~bsx+y#>Ip띋!ZiX%i*' LQh|)q F R+j^2ǻu?>C#u0~d0T(؛@bW;B_+tUP8YziC{CBF^VNb 2Or׮+xl܆o7a̽N{__h1iDlx &KТ*/Mqduȍv>Wю-@%8}fC纳յKPOt򀙱nEWrnֽG( @d9z?^5J @JIWyg.wJew]p9dyTdϻ^x".Nu(Ip @ˢABtœq54(0W2&IW+1pZ@M4Z k̥ɜ3Z?bnu2V{"y%_'.\ }9~<9b6U5:h.=.Lzq>ɹlueJΈ!XR̾D:b]| tSƘIxmžjU"4l0k8kQUᱩ| d+nJ@b;E#ϸQ$?g]h5fόlsqvMf2 :"(g[F˟I}-wZbzi#Tљa 21*O-ôg'+Gfc\PdseU^1pv );Ūw%˫qr>B-+,-\5aP'>` }?Nu' hIfZ^ :c;E ~td<K*g+G?bl<AV2=gC)SϽS5A{nZLUKxԕG>[fd"51&oeg‡٦G'KϴO ~oZN˜Ն 9Lv h)C1+4laKl̚R}Rܪ,WҞ淠 F'? *#K5Ç;'KŒ !C$ފj3ė+iE1*bv c$y** ,eޭWKɥ7,~20p`Lɓ/W^JZDcAL<3,11~ u>뵜{%3zzN_-AEf$U % %ccZ?H':PCayCUeVhZTճ'x)FdzAhj5-0܏f&*g#-S6#TpmMu<2]'jJ1NdMm* Y;Cw?lc=Dd`?c׫!u8(s*Z =#Ƴ)v;ї.gD^~+/+~Ѽ{eڲ/K#2 cOT9̇QD&rYpR֦ՊֻAXz^I>+ޣJg " L}ځfH7X9v+mU{fL>i4;47˅:q0$VmKX76h&SD ̉O<)]'! -#Ԭè1ex46a?wxCX7JFd<5FYXGZ .I DH!潻( GW 1^I/][5gzWovQsbYX^xgoG?/uCwV/g8 "uÉ[)m 1`  +'%R Y%Ϸ^4A'=4`x3ƙ w==ΦkαZ a'P!jopD#$a+]7X+P3VÜy>t2k,Si#w!Q*I]>;h޴szx0J)0]g)ĀPM-::H|ޑoj 1`eDtjAAW_8te1I3@MfiQ_,n{dfjNYqhA 4ޭoVl{ isy|`E5qj<6={Da `hUCa*{LCHO?[;>`E2oSSBy3H`GɣFqDFLyi1fa[$;!y3pPS$RtaCNសuO*RkPj: tsW.b[DX๒ ̕ӍLqeRqe#y {e?Ɯ XBE?lDR΢C밂'KJ2!rDTzo][2B]1jΈ|47b@Knb[ #iXs8 A'.o 'ۯY=2$&./%(<'m/>]׍mP#BTxRW$?#Cɸf'bT"sdVJ],Dנ*X_-Jk?)`Њ[",A6v:[!HӸO>I3KMZ!NmXWbhfIʳuǺfGCp]8Òۧ]cG\IF"QA.23wܘG@t֞1vυ"}QNdܧڼ$3~@؇;wX!<ށ }gًd*KO;@i5 ޫ4yU䛎_=RB_٢ Bc 6+1/RЕLt!QJABYNwDR!Qşu<`]=q:Ӛ~RHx4t"߀1 R׳_4¯1)9.!+ty&hy'."!p>1rT9I` (ɶp1,{ n's˕B/ Kw@gA%,+ ׁ͉(V"Kt OUr\BDPl߶ bul?DcDGhnǘN%we Pq, ;k`'M'~Y> Mć]P3l5O$O5>5(TJƝQ* "իwejߋ@W |en65=Ƕ@MeJdEO&9dKWH8y{j).@ehsWJq_lD`)aiQ!ɦA?@ggƑ۠p66sJ!pa״gZ54Oۍ_ձlWzH0I5C:PXp4ڽMȑ+)*3]gb )@n]tjx##`'JL elpmq"cB--'= ˗op# !2tQq%:5HL%$}y-1 %b^ɖȜ!R|m6 ʜQճĝgTLȦ_8o}ŲmV|KАdM<)?{HhI'4™, N(a%zA<$D[wJ("HN҈@NrzHW?,+P0f8>A$/9C&{BA^QvnZVB-_~}sZG#]Ra^%uTI1O+V8˿TNTnbzA"bEH@FWİYZ%s3p}1dx~0lWƹp_\pnKpEJ*Q'P?ds`zրW=zI0\CKէH!|JA?EjfL䈦Օk +rZcc6=u' q L8s eEpQ{;gӥ.rAP2-,bP|XLsĕ0֣q8Iegݦ'1ROx/v JUweB<KήP]!f躄g_Xv-{C3GC;҆9@6r9%EK$?'3^.@𲹘N:oMX+ܳaE՜q09Ac1音hW!d(D}9=#c|g*$* % }8k%aRS&D!}<;5o!RMabEODSK{NMEC2 7Ҭj_3۸NAu|~x< "_n:*rj wrDYέT;ut;,߶{cLgjah%ns΀:RdqP8x}0qvJh׋0q\7[W.F~OrMȣo"p"o+!7>[ !C4Pe[˪m`6Y>6Y`y_$^K|o {"mvbנPrm3p&ߌX A~m/Qi9Vx/iR`(* 0OڭɞU+3X^N U[=k\j(E.٫D܅@:}$R]ڨCeo6P[jaPuWUBNZ[h [1.7 xmu}fs?2J teC ,SK~>sC_ouA _s1xFi5Xπs\ч YčUJpP9x|v~<Eb8 q`9?6:("j= Un OY˾mAX>wt5U%(p:%"q$r)wG!I{ݾCS㇗.j/lߐ;) hMϐuY0V<8[7^l\Zx5S|Z/ԺKu6?e<;1\Mݑ7uLQM gfLр5?{FB6 ڒ :ap!\@s +I![lXp$!jwckwy1$1SU^s¶ w@* \@RP-c3L3U2A7ȸbGȋE",%\Ɠ}E e<,!DI'4AS8͎M%)F׈̤j=Xh,ͩ+^>fs)(>Vv0L (V w쿲60 8g[aa_l|ݮZs>7`"NQ/ F;t]Skj<nj?׌ut5ɞEEtHĞA,50ʲ,q%ȯB-3_VOBlEMH $l-,s~<}XBO _Oq\ L8JĎxMTR3|arbvNbGK[DϖUJ^E`Ɛkayr}mɥLTh0 Ьj$ S8SN8XLd'֕k/N;91޸rdc7HrNnهYpF/׶` iQJè[Dwý!z4B&0BԊɫm֞ 7!|%+{q;rdK fjӡal,^Tx4 OUp) 4 {>q@O k~h5 ɤoGf9!|vz7MNhW]HldEu𔿠 PXu 6o)!-dF\ٳSWc{&Lӥ3S,ރ++e~t%|܌:|AHQf ׹5?P9L!!鿵 :)^/z&aRIa4~.=R RF'YGQ#챭\BWr5Gl (1$HqǷ-oa=j`mz)NaOLt- $Y%.H1 :cuLiG"zX~_ejKV[D5OAAL}쒆 Ĭ'&?}m_6<fJG~ʍ٦]1_'d`#H&hJ"*Jz9S* 6'M;rO%+&nݶDYLc}GnR/o>TUԝVo[HA`~Ma>]S,l~28hJ) q"Tl_[?0;./L^P@ʌi?`6 &U)J%N'fw1 YW5XMSG*%9^u;S= nSe',Q|hWB),{ .;}!qϰ0ihkb%i(^QO_P^#F of:b:#sdP_wbX@6gwv'1? 7P)KN-}pFfwS54׼ #O{ZG [KFl7FR̙a )Mp-8vnwEKvY7aH2I)*Ț=x[=_ {#y 9y [I L>;RbV:k_+.RjPA%L~i VEL; $ }j4cwWqSIJ&RB7K{jc <[J1TA=wcB}ScNKQ76P4;URD%{ J q$Zs~UUrᄪQB2P&EQ3RkC@kxvⶅO39Vy)U9|r 5J|?"DL+Z?ȍBZܸLi}9+ɜfX-}]#\1z;a(!=ug픮ht׺MtN"œrLi]6Ҧ󰪵{W4̰MlRE!rlbgdAc% G!Z g n2U cGכ0hlE'FiPzE۽d+ljuHpV[0A&UQFG'm}r/Jg>H, h<.S<-P~=l nF7}.I9 LڔD@uF ${])'Hݍmݡ`.X/4$Y <&m (F^ݽ"t9DU`SYl40Z8wdUۺrC,h#J3*YZ,(38"*]&x3xֹf:UR~v0 MGI-yl'Tù@ooC,PWdMлX(mK> 0K~H2.oIqc+M{sGׁjòX hWI[H\2m3q!LCWwR@#*YJ`T I?Tl/TAFiiddŚVU fD#,dT'1@ߙΝ_ *5r}:m@iKb~5+Sy91eeRY>My*IA;"4gjBgD2{xV[)` E/9%bڗGZn:u]˹S~ae~ՄEP'{)xXG p Y% G*,.y4*\(Sٔ\Y]84G:"El=pfWQU6Σ:iHDjFG' {k3V~/$BFP䈃V qS*)8{؟( u4abߒU|휎P6]&\[Cȳœn4} J$ lfԭۼ=f%p<6`s#Y cX|nsaKmVV A;\]2'(*rPjsLvaY"K%Z-R$nsEư7F,K8+rtvŜS]zςf{^fˡbfeVRsRu;WHY(L>Ln& hd?"0 .~6gxZ-dPr*)l>YR'5))a09ff;-K_2\T .&+=?U0DCQņMlBF yKJ\xu1t=MԒW"I+z=mIu NIb6/d@?cAv[ռKӞk[_-m\gk4J>N4=Y:51.GzPLhyJ` a&oR3&ܕIh&lnL%5ɦΠ ܺ!zͥ8;)෨7i K!gYL)#p+ B[ j1*hp8aj/;ɶ1-^WB՝])$/Kjp^WXNҳK_|fF{*v-w똌SV$ k:7t`G.ih5r HK3/Tp\m'3љT%|3PO0[(bk!oFQ2b$ҤRaLt8{6_}iʁ'˅3UPa7DѮ˸?ꋹe<3ph7&+Qzi`w Fj]eH{XxuB㑌AeWLWK2N8׃myTe]k܎~:蓨[3xs[7A'D@:Y05Ty ϣSA.PڸНM+~1g2"Q@3 >-eh.΃tFd|kU{?棯BwJatij=p-MuKVf5Y>MJ*DZtgOZ/xzZ-)!&Exr-5Y7 ;2*r{TɑP{ɵZ`TJr,{`Gu~pԖ2@¾Ijoǧ_gWU,uˆ'E)΅-&ՖY;pC#,$iU `kk.FfN-X1`=+]7@6 scZu+tlu3}H="Cdx} y#K<,&6tX)nZM@73TȪEqˈPYwoa.DA&ͫ?ͱt'=Wu9}l54y$R5h3BwRt"S2dۭJuw ٞtz2bl|AqPV6̲J '1:#ޫ1a>Fж*=hzUD8n7+4, $c:_"K?p4Y=GS#*hP:"I|G[ϲJ!sŞRuuƬNw!딓f%R+M!T Q3~ݖ-T(\[,lTOQizݪ^Egq&VC<5eZa(>kȃ;U&S,oAYrwu$bdmC;ț/'Bb;U=<\J :Zͯ~c@Ss1=M/wr˦Tª%Q񱌃A1^K6y(wm B%"l*zRt3 T=S9pI6x^L, |m);9mJEn(<#w-}h]ueF oTS{`byنN0#O으b*EglC@<́O"ӖMHg=f_o{fvݒ˦6)W۾Beͅj3wX9*q_a@\qjtH@([;A6DKvX԰vu* TcJQ#mj_%P,"7 ؏r(H>qfئ蚦mPEQުhcE7JtX{@\w^7tlji@OxכH@Kz(m**VY./6#N5C^*f^eo_Z'^n UccBQg¯NݍeP zl:$ME7 m (g7/yIJ#j3h2kyC\ .)=DNݼlXhp:yyW* cg簖15vE8!pc;hab1美Qv9AU~nmjq40`p0to"?bPyFOrd"=H蛦 #(e.FH揄+|RGzܟp2AX%,|Ñ}IX#߫Evj kWrLmV"W8rAv\bJ/[/gqB0Ҥ1dEΎm FU{btkqTeEFkӍEvxU֜u r#c(IDCgyݳ67=s`tuj&Y2]XC9cɈ{ Qmo$okK)dD<$o4kXĩrv犍U*BrI3)S9 ,_N$N۴Ds{F# -B2 >; vv#1g6ZvZU^>P`N8b9/y{ڼVJHcO^Ce. tieS7Z-Nض,| $7|_BN^NfjR*"Y}6yM,ɲHٓm0x\‡Boge1<"ct!"zzycՅ7!:aSfJΗj4F'&vږm3D\9QJsZSg61*ȪM$VkN5u7D`r ؈#'&E9'/[C3iA%.iY1KJK B׼ GUNYy 8h^3kJ:kPYKL(lI5؝6&OrOt꽴yz>Wd!0]MGBE'Y{JK28o!gA*33ɲfGx`fSgb*pnT5!\àڬb4˦BjGB.b918@voK1 Am+WAe"k&E̷֜39RνSs\vQA ?$C .sW"E%Q}{g/ZՋ~=tK##Ld7ND&Rs$t J⫕S rT*-kw^H@m޶$F}kRX!r2D5`O *ņh\b jd/cc\<`Ӧ;7 K^j *7>v kDK'| J,10=A G7;ddv4u>ṕ L& eƒ9U? _]Iv8q$JNmE_Evv.ymHq{yZcüFN24e_|#ؿ7>[) {>eds/R~0"$7g;G\U)S9t9q6c™}"^nrZMoHtW @ /{w1IFpڶ kdA{t~s.qhjLUK<5P+, +v V5RRx vMV ^4)64.10lW{ؗ-ߔmKyuM5rҴ٘j jUhrDvJBlys"@ڱg[k2ն)0kPˁŲ@cP-6%{S6MM{ˆBe+xԕ}w=ZL߹x^Q^@c&6B}2M+ $!ڧ4,B9z#ƒ(=~Q*u@rwJ]wvY`?0'HWenrs̸]! v\":$䈒F9 B PH%~T ߸5Vwа(**7\.isVs)NU|5Mۄ56m Jbo$ V"3DO0~we(^psz-m L*y#g$#yt(ղ :母 ] N;d+vxHɈZ}}Yfš|kch&C)-m 0@\{71qkPQj N/v<#'f~E̴e8/1ThL܎Yp SnlE/1ThE,Hyݬkϑj}Q;9kEY(`Gq{nFxE`Z4aHR̞櫒4|ZH8y;ܣie:E ʫ]ۍn/ØJ];3HD4gGdcW57Lc`:03lW(uߖ B"F35jG.QU>j{%{V:6ԉ:LnLw,պńi{'fSDcq)<|d9%AnkXN)1ܣHtFigχ[D}/fu_:Z~FNb)Iu<\Y+la2;fC,!Dqt ˣPClQ*D`Бcd=;eQbKIY+ۛenu33~#Rh4wĝE-5{0E&@`"bB$5XO\I~[uԋ]i> (ۭqoF#J|#C~-窠އczߓO,{J{O3}Ye[X s}Y [$ V  酋AՖY?C?)CRc>{p[!o7מ$*:&=ܟVS#|124O뎌C"jy` yL} 7`ݜPEp{y/|F ظ 2Aܸ}ׅ\#a™(.B$Vq޲ Kr\=^wmAsܙ㣩N&0zL8c,ʧ (h4n'$OVvֺz j9X.O}>~k`U&=0?MdH(WȄ?ŒVJ+7z_`/DZGF}\a\Izp7ΈRXE,z[=; RNÁtT9KC{sٙ~2͇Z(~w?]FtweBv5SZtqDOEӱj~v+,&"N_7%nDAXSLgm)x{y_ֹiK.Q/nξL-4 "Ëp%\Me $~L;-BBB!%V2XOs~I#<5p&F,pj UiBj'+KdL,~ɀ!yoN@%ߒ]b؂0M%vL6SQk*3epPv}ifE/Ke=*2x -!_52JzmTKHԣy1j:m`]Łr蜤B|DfYp=7^V0*£)$!zcG`тɭmiu9<R?Z'&Juy&dLɾZH'4:r!AHԫE4o"qZarÞ9UbC~T Yo3=HfÿMs L>Z;x@c)Suߪ@\]M3 M?1^voAdRSs}}Ønk˩*0OX RאlūN+ S P5Ūizg@FA{;>Լ|vRH~rחzBPHƶAlgS$ Ц/O,O|nBgJdL(6!?R%w]B.jRh8ƮBWFWc#Fd I.QFf^_~=S)W={HU|o$L#a)&@P2x O8!e"SŜ@|3 ٥)HFXx,-ۇe?r+r|L1IsAP˳%pE,J{t([Ԭܷ>] v 0@WRUQkItUvZE=z.^bTˈ $%:?Q2ĔPBzn?dd"Q$mE4tK@Xdv"@:ùƘ]H(_Pe)sLEɛHrb6ެq $Ɍl|6Y6%PO Ϫ&ZOhXG?* AZ'J"EԲ&^|,EN d5|.JxNjlq ف4׭] Cc`mN-p\8 ; z% !=nrQ]?j`M쁺 d䵴zmo^$Ї!֭dhG {*V4d<ץgZK.G( *@08V*Ŧ_XmJ(t uずP*п/G}IKjh*t &u>6+iR_AѱN+ӎߢWFjFv%uB',&P±H`* bj^(y4nvҷ9Uw̦[xԿ˘]'1y v.~`_1=(MjK|v tJ,>%ܿQ֭#\Pl< _kQb3bpZo@K=69>KcWG.I9 MzލG'>Y9*2gĦ.JPl/ Gvdgp$bYFWޢ;0-_#B 5Zia*% qLS>tλ ē(0 Dgd=N|a'p/JhGpav?xH`5QUi%̝m桡NL^5eBÐ yx0pPvCH_C l|[?qoݝ B. s08/1i,Y ΛdaB$g%O,q$QRNò -2u4韻Ʃֲ5N9s}XGRc`kihv@KA}b] ƾҩOjI5˺PO7tRk 燷CLX2Za+puR*U88c7D#cā;%]:JWQf W٩!J(ӣXڊ( A{/&(!It 3̓OLZ3/P$PsgIz޾?;(X.#i,Q}z%<'`[] CK>Ҳ2%k8( R!K ʵ'sfއc-!y>e ȳGLIP9_L<L8,bSl;vR(.ٵ0e;㏿cL?bH]bx#ybQo*:O)m@,/D#j${$L@g}q=VC1XkhmWPmmgXz_a"5ڳ ͙fz#R*aX+s۴+h!s&ɑtOԘ ދ\%Ӎl-${= \wF#N bnX턔y-rhm} \/Gԧ7>t- Fa󓌍;&w!f!zZB#1k6+$4ֵ4nt)b_ϭ*ߊw?"xjVtak9uv_ %J:lV^aOH&1swyƅ u& ^˗ rh/ q-$(r- hga*w/a5D5k}f-.C((7[0 ,Z^Ts#[䜑V pZ) ǢNHG7|*lB/ztGntTW*Uk YP0qw*(nHG]ƇHh~N4{q!"cH-{v!Ș:ͬÐԯɃMNN=m:kbtfANCXl{.b[a<jk+D`;WY Wrڴq&V AO <\}ݚLMDW՝^`s]=MBDB6N_:x*@:jC{k(L+~pp\1|AK=J"'BX74}㴗LWV\d%!(!J6\lpIJSz\|N`T=nw-<͇RAVB#8\dsaSOӁG]s+#-2r ᭫x9qI0#pk\:ʻVkM}[qYdnlg:򮵀J7W RY1 "i`r*'POk KF ;|ް]!/Y;~\ձ~ 5*M~ S*Vթ,Vm/ SBPep [_T~k4 w;iT3pQΨ/׳ HYoO.82W CbhKv(/.jJ{Xbfq'q)VMU>пdsT -ύHIGT/ vPp['P/ vb*p=MpFԲw6Z˙a!23M>.0u $u2xwb.71 6hބbd%t(a WB.lףH}]Yg oz"7J!N ?O2S3#K(ol\7tp,n~ Th R^韥\S^Ắ#ݱ4>W:!rr79S_6'5sC\{ My3:dG0|ű 0\)` ʴyo)9i]0gw(53?B`cTv{n*oO2: P1uyKabaS8{J3leq@0Q9 d.KS9jEg eGD݄ҺI-EpW'2;%,II|ѓ@HPN!IQQ휯0 Arс%Ug0t =[m/k~9Ϻ{Y} ބZ'E*ٿ@b?F;X[νpȀiVǜ:Q)n^,qH{QTDQRnÓ^e-(EϔyR딥t/c6yJjyLneSQ`έT8I,׽vmbfJu'PqFyB; ]C&io-4kXϠd7GJO?@xgh p_D~Jz:|!.˥7Æt{Qd#"osaҾvx6hGy>QQbþI02G{s^ꚾY}#f7 69 ԁ.˫$H}4bD "krDD='Xog&^ĘXkR#[<{e xF} *09>ۈU}frҚ$0=S@QVMwAr9(2&EZ0P 'wmwukQ Lg co 4$Uz'HQAў8e״'R\'] zQ B$0U;ǕZ&PQӅf[%ɪ*/+L'BZOx0g2u{ *.C2OnCq((Ka G:3~9~ YLo/6A0L/4=g,M~U"-GU|c\A8pVaStp"Oq;{{UY_ tTVjcžq̺6PN@\ V{& C#;}XPx KaPjj `⟯mrR%" dH2R&3pJĐLod}e4gVk9xjPu # w.+Hh#?YfҰ99 Ml~Ej/=V.9,+7md5{7ҜU]-W qJlD]M3jzn;b ޗ QH4/8K,N1؄_ MVp#hsV\cti'`6ԋ~-Oj> HηȾK R˾PpԄuN0 A?/ڪa+pVvgD 9À9H9,߽aGwɂ(ӯa`q8cs ㏳j\Ah˔%,f, [[)bh#3'=&Rs*t֘P_gȊ;| z<S 19ul]C1tKgVvIӣw⾒#լ$s-@Rj' C L7B8:.d4׾c);m^ޏ3>#kNÛRO@BF}k7:/@9McC]җ>ق̿@43_21*aM8y%sG3xl֖~ڜP`(b|* Kɂ{̀yj$AWBO8 (\pv?JkgASjV䵍!d~ju/6%SqB1 4R^KPm.yck(΄GKǺ}7xYU.b>np? ؇E\49L=Մc/2*)g3'3m%aOWP,|khY@mp4cݞY^JB ׬5* Dq5,1 )1UP#ymʵtMG\y@lѢ;4#DsB#H3p0b#֚ӱ9DkT5c2qַ1Lș_ou~~?'fZ7ge 3i|#/+axq*rݞvZ^[כC ?dOlW6(Ww[Ai_. ۣG7'űrl0Q,{4i"R$fE4nwBZj\ 9}c2s:E9aztC7EbK&dk8DJaq 9:.)[YvzëRCw#ĝ!˜6mΠC:}c2P`䑘[J)Kq5NB ~˳Y x?t3DX~ LG cۑ^OeaV!y⳰~?b?23:, -Eghp7~ׄIh7h Zd+h n6:kX#Gb6,67s?/YM" ]\ 5f o VZ;։3 *4Ē# RG4|,8w95vn+~[bCTtTKNxȰ) $r7c@MG3x*] ".❟Au-%55 A|[IGE}r#nbf ~c:n8Bݑ#741 Ylf׊}Yz~Ϯ睑s-͍KAZd_FaXGA(xMsh!mZ=1ʊJ͈=ѩE,}: G Fi܈LOc9L !=bh:uZ ثIQ2]h/(05 dtrbA $y%=nӦƎN8tF$^]9TG(Kmp&a! ƒ0Xf*+PfcaUGeIo.$Ct|So`}(٣\Hl9 11 |akr"F*,5Gb?5Wv(!oWf{U XT@^h(SP1U 4ƚ9lægIٗٝFgUݬ%>g0'$=nQ~$_Uőz;Qk^a]g[%:Mi@{Ҭ-+K}0ϳ=`"nDGKߣ7Q[(X}X8rD!y0oA.(5!ϒ b9J%NKǧ_5OQ8F%񧭡c$E{$9) n/hU.8`E=ß )d2/&6_ʔevz~ReِPѡC޲go^V&`2l?(Waݜs\xU4iwQ Zݩ9@S񛏡PBdʚKF cӤMAQVz&}8Kv'*]cH>I8Xתs4!)=s{Osš~fYޛE]0EfhC" Ӿx:JFM))~(Q]_vJ)4 j:?S‰A.Z+&ǥ:DgS<R zeh$-=#;Ι#裍rpx-[,-6̔CH3~jemJ-N ڜ_| Աsy >V! <>@ԅ^%g =[aꊇZ=j,+||\"yXoV^(7nJKx r|FnҁbP{s"wd.•wr>FLod3!ehu]G*=v\idz [m_-#qHa1DWȤ`"r]D֤f1I/cZtp'44#4[lqDQn kb 4>TbM)y]lSt?D{ *V@Scah1:^-Cs6 N2gvҰnVW GwjZrE-^{LXnH8ahE 9B']kSPS{\)pfikrN141$F q&P*11I_`߁`kkZzM<ƹҾ_J~-B1g$*[1TxZ@9IߗR?vIZݪi~LGĦt?7g>̪B&kMWU_7'&dP'uXv(m_!-"T`jZI ݹV;IQn¨=[pe3(CMHjM Oސx҂%9YC>|x& fW=Z>VDAN*Y=Bvqm<:I5G]i!1L%~Z&3J'(l@c`k 5u|:HΓU+Sj0I&ljb'u iFߗ@?G1?T/z+ր"qPb꧊=asZϳGYDU޸rc"s[(p75'7^:A%9\TDlCA0VU-U y˃~rܷ3=_:ج&3[įc>poXLt;=I_YB#ꅷѷ !ēo録#tWa:M,,)0X%F#aR /j-.r1~} ~tB3_tp 3;,L iK.lE;gvlA Vo1Fs8W3PEp`kI= ^.9ye _\S%vQ:)O'Hx;lOwP\ҷQ4*IU1tѾ^$̛aPNqYz/5v寱zb֪︈-vgx5\$hC78عqs)$AW.?;>KgYc#~p,`& ɩ9o쩌П%," }; T5):u֓ӑͨ[<^+.v^|UM͝@ZPzӶ˼@q9Y؂(xQ65{:O: m1_$Ro(ޑ[9f 9{UFՆ0hq?o}U-n.w0.?nΦ[N{N iXL"q إLmRA0*V<$L=gp>L@L3DxksL$>O{) B&s1ܬ6~8eC~fEwqy.o)jQZ77_a,,bT SvKZ4X):!J'Ri;Zx_S>, dihOLUOXͶ ok(6BYҦ;inEeWq~wQֶ%M 9U$W;9]>9KN\*Mբ< 87&>hZU ́w`*q-'j m`.m wԠْm~Hj9If,Z&0\-ޚ=|ꧧL48Gdf8n0J a0@kvX.߅N-`NF?MD)v"V51 ko kϤҶ:B͇B쌂%o -@gEaNTph2H; ;,"ԡjwqOu $Oꎽ 㦊.F3qi0U\31uH&IԑiP^ \6ykʄI/B#xA]N5.-O }l"h,7UײeǼ꫞{5(*&Ƈ'4>e5鹿 7yݨoW0Pf~8D ≼zKM9*YL PL*0"mϜq<x-nYm|] G3EJ2(#{Uurj=#o}Okw|t}x˵zŵT$8`@4b/82_ !yXB8zAn KM^[M)i/P$e_V;A>C:>;Cn"˜5w9Ş%JM-8VNz&GB%'UQN ",4P"R]{G5kB]mނH5F#.Td|8&^ =csv4SL)bUR{xYo Bu}2/WPրXUէ[2J*{cY25#ju P.\$NP3} 'U_x[q.;t@/XM?j trIJx8fXf|=(XƯlp85ܖCr Ku{Pa Ѻ.^֥2R.4.Ïx8m,gzYlVX88Y= nRɏ^G-4VBEo{5tHkU6ĀsD+|zLª9_#AxhfIO/0UNӆQ8zZf#e籘KOYU3%߆ ])XN $y2X+>,Lz /G*˧;eQ4-PߡgU~ybsx+~>؏ EQ+2eS:ewt:ȧoMץ\K;16_\(}W@e)n9~|M mШ%@C~RZq'i-Y1 4IuriN ԩw_3dK,ig!w6H2ҕ M$*@>MG/Ѭ&Uq90 IxMjs2*X+ g%c%=%RKMATsF HˌƜ;ZI(o٨[Ego $p0+ǜ1$z&}aZqcQ`a(,ުJ/_&⯔ģ2/@>ߪ kTnl\e?d(LU06x RJ_')zT_{/*zTHԉ=}*<en+S0N`Q2LK]:ص=}i/(?5ruG6o:!W({!$Ю[.0yTt2l??B/6u6jU^^,t7:3;u!%Xmv"U|=Qw=qktR% v#Jz@?< .yӂ{cv~uAt4K(۫y Ys8kNjʙA쯷:GȣևK1|ʦ]u8(F0#ո'],yI$E9@(|Vsx(?ADlw_W'#Ҿy~G;6ᏺ-$+}4ImY/b{Tg0Kd3aL'siIAֽr 6%AG*]J5./`ع:@!ɰ#ufr1."†g Md=ϗٟ wI/|qJzl-HKo_o@Pj'??w#TO ӏsfB="_-tc,ehwzo-Bт8X*u[s'ei륥ɪrWTrĊKkZLzL$~MNy|=䋸G嗈Ml:(PU](cp4&=r/ufQ ΢g`/99YDK~GIkJJD=+.h|+EkоKFhmm/:*Ce\wq?)qy6{K{gW!ѨBdM|Mj % 8 C%d2W8 ephTp=7$,ܢ> x Kzv#1R>9AE!Erj~`[ Qliזe^#]~dV6U8,z ZnzmfN<$tѽ޸]GBYuswh|?i{zg$+S<Rpz!.W\!5S]pZD]l xD5{o'vdk-7ssT:=|-0wQWֶH6D);+s}MK$< ,z m=NgȦTH?C<i4kxsos#]|1|T iȟuO0r \|.vKfTgg:PmbQ`Z]g3ps Q!;7Z'Ȣz_jl:@B4 '9>ޢV?ZEs괼%ȣuRyuzN}lDj˷}0bpcH(*Yk/~3LN)C-R/Mf]JHu-*SU܎ѯVxDM p~~aSsԴŏҚXd}Naj ‹XV*99` Z&1A{dcy?N[~l(ACÈ2nzh0 W0_YWϘ,{Po '3K*>q_ijpv93xn-d#\.c[4p5m=9@q' * =i Ak~6d.UQ:i@X yx 6A:iQ3`5|j!nv.@K@FOOpS>WN % #)bm9qy ? ,!NUW%e33LM sGe P$NJҿWKWKTVX(}{@3;ybeJ|Y~E6g~qK/@<7yC-pq\83 炷ȩޚ'@;땨 Vj Z{zm'F)…t^saьGo3?wZ|a~٢.DirTN6HL!s8G$,yvܽ͵`ܧZ/ 3j#o5]<QtozC#C[o 36(+. ^}@g[fX.c3Ғ_-}3z&}| 'eA%bv%Of1!#C9+W "<bZ&=Əal-9JS} Ң޸g0n JAb8E"\0|#p_'MǥQ3֪jHg 0b|kc?,_C-ψҌ1,~˜qD#" b&$Y<6q0 6--IT"֫nPle_=^kQh}5:Om(+jC6Tc`\Q1 բcfÛ4=|5*UnrT,DU:,q6L)۴aRo:a6e^[*CQ<}zڻ`mͶ7 UMJ3_%;M7ui?2>gYR}Aw]i1%.yc ]d8H3Z.x,DzE-^51F}hπI3ֽ>Z&n 7{dV~m,_hMsNV#/2f!IE q m^èurm_t&=qf U wh7)lE\͟,UlKJA?qt8Hg-gOS߼wkTȰͩ7I_Wʧy;cZ-(fYIsvT]Zpg;,NPh|糣0 ^-) =^FG;iS.ZO:eݡjǴn3AŊqџY1QiUu^]@T59,ZH_ErlMsK{|X9kދ/$=66"..uG>w/nwdw"I_^ ROLD硇Z ~7>RQ -l*6xƄ?90?.,#Y$lSoRd s[A Lo?:߆9%7psaQӜ)0bRޒY1UhDQs|8.p;T_< *3CrʘtveZA47 Azt8N$4s>i)e0 ?bt~ )Ο)T%-{"`97Col*ρ Ktv}ōAѯY$ä6;G\C{{_ӆ{9P;^~\#H,E=~hLf$Y4;91nLhQd׃VgB?nnܺ/Kj8PL+)Kh[z3a`EfCr*5o"M㛂$tp @FT b]{-Qz&Pj\n曛G:7RY$h/ _Oͱ`& %^c+cpXH̅ IsbZ&ߎVq 0eFj5=Er,tjXȠ&v#N]"G321H4=#,;BADt`Wz4?<v]^)VU9u59y#-^uc Wt@UӰ1A&r4%(+#g "pړ~vyT z!‰L쥂6X:\U+8l[HtG)A`b?;r|OK\U|d7I޼XYh9=䡾S DT) lPRcVt鼖bOtG7sgKq2 IVe×)~x7 f&k,TuZo!SsVD,޾-<3^ݞTԠy&!TZU|ooء_;7 e~%*ꆖ:H^HY4:+U YZ