exim-4.94.2-bp154.2.9.1<>,SDe/!M@eee@wȯgtaG@\er+Vun[A,۬CܣB8'6QSk(tAxUmD#nȡ' ZHãk*3f"U,Yu[5.y8Wa'QkZ^1P0?7jB,2H|¿#f}fd"FWڢ9\[Y(]X;3{g,+6 0yQLjɣuzs#u>M̌?|d  S $04MVg @ZZ \Z Z xZ (RZ )DZ*Z,nZ.0.PZ//A0A6MA666(6768742972:?@CFGZH\ZIZX Y0\lZ]Z^ bcDdefluZvlw,ZxǔZyRzDT$,06xCexim4.94.2bp154.2.9.1The Exim Mail Transfer Agent, a Replacement for sendmailExim is a mail transport agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style, it is similar to Smail 3, but its facilities are more extensive. In particular, it has options for verifying incoming sender and recipient addresses, for refusing mail from specified hosts, networks, or senders, and for controlling mail relaying.e/s390zl2584&2e-%ecN@`7@`N@_C^(@^?@^@^^@^[^r^ @]7@]@]s]9\\ZԐ@Z`@Z@ZZ@Z@Z@Z@YdY[@YGXWW@VV2VVjVqUJ@U0U@TÉ@TÉ@TÉ@TÉ@T@T@T@TuTuPeter Wullinger Peter Wullinger Peter Wullinger wullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.dewullinger@rz.uni-kiel.depoeml@cmdline.netpoeml@cmdline.netalex wullinger@rz.uni-kiel.deseanlew@opensuse.org wullinger@rz.uni-kiel.decrrodriguez@opensuse.orgkbabioch@suse.comwullinger@rz.uni-kiel.dedmueller@suse.comkstreitova@suse.commeissner@suse.comrbrown@suse.comdimstar@opensuse.orgmeissner@suse.commeissner@suse.comwullinger@rz.uni-kiel.dee.istomin@edss.eelmuelle@suse.comlmuelle@suse.comopensuse@cboltz.delmuelle@suse.commichal.hrusecky@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.commichal.hrusecky@opensuse.orgmichal.hrusecky@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- add patch-CVE-2023-42117.patch (fixes CVE-2023-42117, bsc#1215787) - add patch-CVE-2023-42119.patch (fixes CVE-2023-42119, bsc#1215789)- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for * CVE-2023-42114 (bsc#1215784) * CVE-2023-42115 (bsc#1215785) * CVE-2023-42116 (bsc#1215786)- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)- update to exim-4.94.2 security update (bsc#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID file creation * CVE-2020-28011: Heap buffer overflow in queue_run() * CVE-2020-28010: Heap out-of-bounds write in main() * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase() * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase() * CVE-2020-28015: New-line injection into spool header file (local) * CVE-2020-28012: Missing close-on-exec flag for privileged pipe * CVE-2020-28009: Integer overflow in get_stdinput() * CVE-2020-28017: Integer overflow in receive_add_recipient() * CVE-2020-28020: Integer overflow in receive_msg() * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg() * CVE-2020-28021: New-line injection into spool header file (remote) * CVE-2020-28022: Heap out-of-bounds read and write in extract_option() * CVE-2020-28026: Line truncation and injection in spool_read_header() * CVE-2020-28019: Failure to reset function pointer after BDAT error * CVE-2020-28024: Heap buffer underflow in smtp_ungetc() * CVE-2020-28018: Use-after-free in tls-openssl.c * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()- update to exim-4.94.1 * Fix security issue in BDAT state confusion. Ensure we reset known-good where we know we need to not be reading BDAT data, as a general case fix, and move the places where we switch to BDAT mode until after various protocol state checks. Fixes CVE-2020-BDATA reported by Qualys. * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT) * Fix security issue with too many recipients on a message (to remove a known security problem if someone does set recipients_max to unlimited, or if local additions add to the recipient list). Fixes CVE-2020-RCPTL reported by Qualys. * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase() * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker providing a particularly obnoxious sender full name. * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX better.- bring back missing exim_db.8 manual page (fixes bsc#1173693)- bring in changes from current +fixes (lots of taint check fixes) * Bug 1329: Fix format of Maildir-format filenames to match other mail- related applications. Previously an "H" was used where available info says that "M" should be, so change to match. * Bug 2587: Fix pam expansion condition. Tainted values are commonly used as arguments, so an implementation trying to copy these into a local buffer was taking a taint-enforcement trap. Fix by using dynamically created buffers. * Bug 2586: Fix listcount expansion operator. Using tainted arguments is reasonable, eg. to count headers. Fix by using dynamically created buffers rather than a local. Do similar fixes for ACL actions "dcc", "log_reject_target", "malware" and "spam"; the arguments are expanded so could be handling tainted values. * Bug 2590: Fix -bi (newaliases). A previous code rearrangement had broken the (no-op) support for this sendmail command. Restore it to doing nothing, silently, and returning good status.- update to exim 4.94 * some transports now refuse to use tainted data in constructing their delivery location this WILL BREAK configurations which are not updated accordingly. In particular: any Transport use of $local_user which has been relying upon check_local_user far away in the Router to make it safe, should be updated to replace $local_user with $local_part_data. * Attempting to remove, in router or transport, a header name that ends with an asterisk (which is a standards-legal name) will now result in all headers named starting with the string before the asterisk being removed.- switch pretrans to use lua (fixes bsc#1171877)- bring changes from current in +fixes branch (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94) * fixes CVE-2020-12783 (bsc#1171490) * Regard command-line recipients as tainted. * Bug 2489: Fix crash in the "pam" expansion condition. * Use tainted buffers for the transport smtp context. * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix the ordering of its ARC headers. This caused a crash. * Bug 2492: Use tainted memory for retry record when needed. Previously when a new record was being constructed with information from the peer, a trap was taken. * Bug 2494: Unset the default for dmarc_tld_file. * Fix an uninitialised flag in early-pipelining. Previously connections could, depending on the platform, hang at the STARTTLS response. * Bug 2498: Reset a counter used for ARC verify before handling another message on a connection. Previously if one message had ARC headers and the following one did not, a crash could result when adding an Authentication-Results: header. * Bug 2500: Rewind some of the common-coding in string handling between the Exim main code and Exim-related utities. * Fix the variables set by the gsasl authenticator. * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure, only retrieve the errormessage once. * Bug 2501: Fix init call in the heimdal authenticator. Previously it adjusted the size of a major service buffer; this failed because the buffer was in use at the time. Change to a compile-time increase in the buffer size, when this authenticator is compiled into exim.- don't create logfiles during install * fixes CVE-2020-8015 (bsc#1154183)- add a spec-file workaround for bsc#1160726- update to exim 4.93.0.4 (+fixes release) * Avoid costly startup code when not strictly needed. This reduces time for some exim process initialisations. It does mean that the logging of TLS configuration problems is only done for the daemon startup. * Early-pipelining support code is now included unless disabled in Makefile. * DKIM verification defaults no long accept sha1 hashes, to conform to RFC 8301. They can still be enabled, using the dkim_verify_hashes main option. * Support CHUNKING from an smtp transport using a transport_filter, when DKIM signing is being done. Previously a transport_filter would always disable CHUNKING, falling back to traditional DATA. * Regard command-line receipients as tainted. * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM. * Bug 2489: Fix crash in the "pam" expansion condition. It seems that the PAM library frees one of the arguments given to it, despite the documentation. Therefore a plain malloc must be used. * Bug 2491: Use tainted buffers for the transport smtp context. Previously on-stack buffers were used, resulting in a taint trap when DSN information copied from a received message was written into the buffer. * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix the ordering of its ARC headers. This caused a crash. * Bug 2492: Use tainted memory for retry record when needed. Previously when a new record was being constructed with information from the peer, a trap was taken. * Bug 2494: Unset the default for dmarc_tld_file. Previously a naiive installation would get error messages from DMARC verify, when it hit the nonexistent file indicated by the default. Distros wanting DMARC enabled should both provide the file and set the option. Also enforce no DMARC verification for command-line sourced messages. * Fix an uninitialised flag in early-pipelining. Previously connections could, depending on the platform, hang at the STARTTLS response. * Bug 2498: Reset a counter used for ARC verify before handling another message on a connection. Previously if one message had ARC headers and the following one did not, a crash could result when adding an Authentication-Results: header. * Bug 2500: Rewind some of the common-coding in string handling between the Exim main code and Exim-related utities. The introduction of taint tracking also did many adjustments to string handling. Since then, eximon frequently terminated with an assert failure. * When PIPELINING, synch after every hundred or so RCPT commands sent and check for 452 responses. This slightly helps the inefficieny of doing a large alias-expansion into a recipient-limited target. The max_rcpt transport option still applies (and at the current default, will override the new feature). The check is done for either cause of synch, and forces a fast-retry of all 452'd recipients using a new MAIL FROM on the same connection. The new facility is not tunable at this time. * Fix the variables set by the gsasl authenticator. Previously a pointer to library live data was being used, so the results became garbage. Make copies while it is still usable. * Logging: when the deliver_time selector ise set, include the DT= field on delivery deferred (==) and failed (**) lines (if a delivery was attemtped). Previously it was only on completion (=>) lines. * Authentication: the gsasl driver not provides the $authN variables in time for the expansion of the server_scram_iter and server_scram_salt options.spec file cleanup to make update work - add docdir to spec- update to exim 4.93 * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC * DISABLE_TLS replaces SUPPORT_TLS * Bump the version for the local_scan API. * smtp transport option hosts_try_fastopen defaults to "*". * DNSSec is requested (not required) for all queries. (This seemes to ask for trouble if your resolver is a systemd-resolved.) * Generic router option retry_use_local_part defaults to "true" under specific pre-conditions. * Introduce a tainting mechanism for values read from untrusted sources. * Use longer file names for temporary spool files (this avoids name conflicts with spool on a shared file system). * Use dsn_from main config option (was ignored previously).- update to exim 4.92.3 * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat, remote code execution seems to be possible- update to exim 4.92.2 * CVE-2019-15846: fix against remote attackers executing arbitrary code as root via a trailing backslash- update to exim 4.92.1 * CVE-2019-13917: Fixed an issue with ${sort} expansion which could allow remote attackers to execute other programs with root privileges (boo#1142207)- spec file cleanup * fix DANE inclusion guard condition * re-enable i18n and remove misleading comment * EXPERIMENTAL_SPF is now SUPPORT_SPF * DANE is now SUPPORT_DANE- update to exim 4.92 * ${l_header:} expansion * ${readsocket} now supports TLS * "utf8_downconvert" option (if built with SUPPORT_I18N) * "pipelining" log_selector * JSON variants for ${extract } expansion * "noutf8" debug option * TCP Fast Open support on MacOS * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587) - add workaround patch for compile time error on missing printf format annotation (gnu_printf.patch)- update to 4.91 * DEFER rather than ERROR on redis cluster MOVED response. * Catch and remove uninitialized value warning in exiqsumm * Disallow '/' characters in queue names specified for the "queue=" ACL modifier. This matches the restriction on the commandline. * Fix pgsql lookup for multiple result-tuples with a single column. Previously only the last row was returned. * Bug 2217: Tighten up the parsing of DKIM signature headers. * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL. * Fix issue with continued-connections when the DNS shifts unreliably. * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL. * The "support for" informational output now, which built with Content Scanning support, has a line for the malware scanner interfaces compiled in. Interface can be individually included or not at build time. * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included by the template makefile "src/EDITME". The "STREAM" support for an older ClamAV interface method is removed. * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of rows affected is given instead). * The runtime Berkeley DB library version is now additionally output by "exim -d -bV". Previously only the compile-time version was shown. * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating SMTP connection. * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by routers. * Bug 2174: A timeout on connect for a callout was also erroneously seen as a timeout on read on a GnuTLS initiating connection, resulting in the initiating connection being dropped. * Relax results from ACL control request to enable cutthrough, in unsupported situations, from error to silently (except under debug) ignoring. * Fix Buffer overflow in base64d() (CVE-2018-6789) * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc metadata, resulting in a crash in free(). * Fix broken Heimdal GSSAPI authenticator integration. * Bug 2113: Fix conversation closedown with the Avast malware scanner. * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL. * Speed up macro lookups during configuration file read, by skipping non- macro text after a replacement (previously it was only once per line) and by skipping builtin macros when searching for an uppercase lead character. * DANE support moved from Experimental to mainline. The Makefile control for the build is renamed. * Fix memory leak during multi-message connections using STARTTLS. * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC reported the original. Fix to report (as far as possible) the ACL result replacing the original. * Fix memory leak during multi-message connections using STARTTLS under OpenSSL * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames. * Fix utf8_downconvert propagation through a redirect router. * Bug 2253: For logging delivery lines under PRDR, append the overall DATA response info to the (existing) per-recipient response info for the "C=" log element. * Bug 2251: Fix ldap lookups that return a single attribute having zero- length value. * Support Avast multiline protocol, this allows passing flags to newer versions of the scanner. * Ensure that variables possibly set during message acceptance are marked dead before release of memory in the daemon loop. * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such as a multi-recipient message from a mailinglist manager). * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being replaced by the ${authresults } expansion. * Bug 2257: Fix pipe transport to not use a socket-only syscall. * Set a handler for SIGTERM and call exit(3) if running as PID 1. This allows proper process termination in container environments. * Bug 2258: Fix spool_wireformat in combination with LMTP transport. Previously the "final dot" had a newline after it; ensure it is CR,LF. * SPF: remove support for the "spf" ACL condition outcome values "err_temp" and "err_perm", deprecated since 4.83 when the RFC-defined words " temperror" and "permerror" were introduced. * Re-introduce enforcement of no cutthrough delivery on transports having transport-filters or DKIM-signing. * Cutthrough: for a final-dot response timeout (and nonunderstood responses) in defer=pass mode supply a 450 to the initiator. Previously the message would be spooled. * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset, tls_require_ciphers is used as before. * Malware Avast: Better match the Avast multiline protocol. * Fix reinitialisation of DKIM logging variable between messages. * Bug 2255: Revert the disable of the OpenSSL session caching. * Add util/renew-opendmarc-tlds.sh script for safe renewal of public suffix list. * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form, since the IETF WG has not yet settled on that versus the original "bare" representation. * Fix syslog logging for syslog_timestamp=no and log_selector +millisec. Previously the millisecond value corrupted the output. Fix also for syslog_pid=no and log_selector +pid, for which the pid corrupted the output.- Replace xorg-x11-devel by individual pkgconfig() buildrequires.- update to 4.90.1 * Allow PKG_CONFIG_PATH to be set in Local/Makefile and use it correctly during configuration. Wildcards are allowed and expanded. * Shorten the log line for daemon startup by collapsing adjacent sets of identical IP addresses on different listening ports. Will also affect "exiwhat" output. * Tighten up the checking in isip4 (et al): dotted-quad components larger than 255 are no longer allowed. * Default openssl_options to include +no_ticket, to reduce load on peers. Disable the session-cache too, which might reduce our load. Since we currrectly use a new context for every connection, both as server and client, there is no benefit for these. * Add $SOURCE_DATE_EPOCH support for reproducible builds, per spec at . * Fix smtp transport use of limited max_rcpt under mua_wrapper. Previously the check for any unsuccessful recipients did not notice the limit, and erroneously found still-pending ones. * Pipeline CHUNKING command and data together, on kernels that support MSG_MORE. Only in-clear (not on TLS connections). * Avoid using a temporary file during transport using dkim. Unless a transport-filter is involved we can buffer the headers in memory for creating the signature, and read the spool data file once for the signature and again for transmission. * Enable use of sendfile in Linux builds as default. It was disabled in 4.77 as the kernel support then wasn't solid, having issues in 64bit mode. Now, it's been long enough. Add support for FreeBSD also. * Add commandline_checks_require_admin option. * Do pipelining under TLS. * For the "sock" variant of the malware scanner interface, accept an empty cmdline element to get the documented default one. Previously it was inaccessible. * Prevent repeated use of -p/-oMr * DKIM: enforce the DNS pubkey record "h" permitted-hashes optional field, if present. * DKIM: when a message has multiple signatures matching an identity given in dkim_verify_signers, run the dkim acl once for each. * Support IDNA2008. * The path option on a pipe transport is now expanded before use * Have the EHLO response advertise VRFY, if there is a vrfy ACL defined. - Several bug fixes - Fix for buffer overflow in base64decode() (bsc#1079832 CVE-2018-6789) - removed patches (included upstream now): * exim-CVE-2017-1000369.patch * exim-CVE-2017-16943.patch * exim-CVE-2017-16944.patch * exim-4.86.2-mariadb_102_compile_fix.patch- add exim-CVE-2017-16944.patch: backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542 fix for CVE-2017-16944 (#bsc1069859)- update to 4.88: drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch, exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch - remove exim4-manpages.tar.bz2: upstream does not exist anymore - update keyring- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation with the mariadb 10.2 (in our case the build with libmariadb library from the mariadb-connector-c package) * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and 31beb7972466a33a88770eacbce13490f2ddadc2- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Explicitly buildrequire libnsl-devel on suse_version >= 1330: libnsl used to be an integrated part of glibc. Since the build system / makefiles explicitly reference libnsl, it is our own duty to ensure we have our deps in place.- specify users with ref:mail, to make them dynamic. bsc#1046971- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be exploited to "stack crash" local privilege escalation (bsc#1044692) - Require user(mail) group(mail) to meet new users handling in TW. - Prerequire permissions (fixes rpmlint).- conditionally disable DANE on SuSE versions with OpenSSL < 1.0 - exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch: import exim-4_86_2+fixes branch + fix CVE-2016-1531 when installed setuid root, allows local users to gain privileges via the perl_startup argument. + fix Bug 1805: store the initial working directory, expand $initial_cwd + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671) + Don't issue env warning if env is empty - fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch: DKIM information leakage- Makefile tuning: + add sqlite support + disable WITH_OLD_DEMIME + enable AUTH_CYRUS_SASL + enable AUTH_TLS + enable SYSLOG_LONG_LINES + enable SUPPORT_PAM + MAX_NAMED_LIST=64 + enable EXPERIMENTAL_DMARC + enable EXPERIMENTAL_EVENT + enable EXPERIMENTAL_PROXY + enable EXPERIMENTAL_CERTNAMES + enable EXPERIMENTAL_DSN + enable EXPERIMENTAL_DANE + enable EXPERIMENTAL_SOCKS + enable EXPERIMENTAL_INTERNATIONAL- Update to 4.86.2 + Fix minor portability issues for *BSD and OS/X.- Update to 4.86.1 + Add support for keep_environment and add_environment options; CVE-2016-1531; (boo#968844).- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is the directory for inactive profiles since AppArmor 2.9- Update the Exim Maintainers Keyring file 'exim.keyring'. - Use URL for the source line of the main tar ball.- Update to 4.86 * Support for using the system standard CA bundle. * New expansion items $config_file, $config_dir, containing the file and directory name of the main configuration file. Also $exim_version. * New "malware=" support for Avast. * New "spam=" variant option for Rspamd. * Assorted options on malware= and spam= scanners. * A commandline option to write a comment into the logfile. * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can be configured to make connections via socks5 proxies. * If built with EXPERIMENTAL_INTERNATIONAL, support is included for the transmission of UTF-8 envelope addresses. * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly used encoding of Maildir folder names. * A logging option for slow DNS lookups. * New ${env {}} expansion. * A non-SMTP authenticator using information from TLS client certificates. * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS. Patch originally by Wolfgang Breyha. * Main option "dns_trust_aa" for trusting your local nameserver at the same level as DNSSEC. - Dropped exim-enable_ecdh_openssl.patch as included in upstream- Fix the systemd service file by not passing EXIM_ARGS as one single argument by removing the curly brackets (shell syntax).- Install fitting eximstats.conf depending on SUSE version; (bsc#926861). - Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in /etc/sysconfig/exim; (bsc#922145).- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to build on RHEL 6 again.- Let ld know the path to mysqlclient.- update to 4.85 + When running the test suite, the README says that variables such as no_msglog_check are global and can be placed anywhere in a specific test's script, however it was observed that placement needed to be near the beginning for it to behave that way. Changed the runtest perl script to read through the entire script once to detect and set these variables, reset to the beginning of the script, and then run through the script parsing/test process like normal. + Expand the EXPERIMENTAL_TPDA feature. Several different events now cause callback expansion. + Bugzilla 1518: Clarify "condition" processing in routers; that syntax errors in an expansion can be treated as a string instead of logging or causing an error, due to the internal use of bool_lax instead of bool when processing it. + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for server certificates when making smtp deliveries. + Support secondary-separator specifier for MX, SRV, TLSA lookups. + Add ${sort {list}{condition}{extractor}} expansion item. + Bugzilla 1216: Add -M (related messages) option to exigrep. + GitHub Issue 18: Adjust logic testing for true/false in redis lookups. Merged patch from Sebastian Wiedenroth. + Fix results-pipe from transport process. Several recipients, combined with certificate use, exposed issues where response data items split over buffer boundaries were not parsed properly. This eventually resulted in duplicates being sent. This issue only became common enough to notice due to the introduction of conection certificate information, the item size being so much larger. Found and fixed by Wolfgang Breyha. + Bug 1533: Fix truncation of items in headers_remove lists. A fixed size buffer was used, resulting in syntax errors when an expansion exceeded it. + Add support for directories of certificates when compiled with a GnuTLS version 3.3.6 or later. + Rename the TPDA expermimental facility to Event Actions. The #ifdef is EXPERIMENTAL_EVENT, the main-configuration and transport options both become "event_action", the variables become $event_name, $event_data and $event_defer_errno. There is a new variable $verify_mode, usable in routers, transports and related events. The tls:cert event is now also raised for inbound connections, if the main configuration event_action option is defined. + In test suite, disable OCSP for old versions of openssl which contained early OCSP support, but no stapling (appears to be less than 1.0.0). + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on server certificate names available under the smtp transport option "tls_verify_cert_hostname" now do not permit multi-component wildcard matches. + Time-related extraction expansions from certificates now use the main option "timezone" setting for output formatting, and are consistent between OpenSSL and GnuTLS compilations. Bug 1541. + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047- encoded parameter in the incoming message. Bug 1558. + Bug 1527: Autogrow buffer used in reading spool files. Since they now include certificate info, eximon was claiming there were spoolfile syntax errors. + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return. + Log delivery-related information more consistently, using the sequence "H= []" wherever possible. + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which are problematic for Debian distribution, omit them from the release tarball. + Updates and fixes to the EXPERIMENTAL_DSN feature. + Fix string representation of time values on 64bit time_t anchitectures. Bug 1561. + Fix a null-indirection in certextract expansions when a nondefault output list separator was used.- Enable SPF- Fix service file; (boo#935601) - Using bcond for mysql, pgsql and ldap - mysql, pgsql and ldap enabled by default- Removed executable permission bits from exim.service file; (boo#935601).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- update to 4.84 + Re-add a 'return NULL' to silence complaints from static checkers that were complaining about end of non-void function with no return; (beo#1506); obsoletes silence-static-checkers.patch. + Fix parsing of quoted parameter values in MIME headers. This was a regression intruduced in 4.83 by another bugfix; (beo#1513). + Fix broken compilation when EXPERIMENTAL_DSN is enabled. + Fix exipick for enhanced spoolfile specification used when EXPERIMENTAL_DNS is enabled; (beo#1509)./bin/sh/bin/sh/bin/sh/bin/sh/bin/shs390zl25 1697615898  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ4.94.2-bp154.2.9.14.94.2-bp154.2.9.14.94.2-bp154.2.9.1 eximeximmailqnewaliasesrsmtprunqsendmailexim.serviceexicyclogexigrepeximexim_checkaccessexim_dbmbuildexim_dumpdbexim_fixdbexim_lockexim_tidydbeximstatsexinextexipickexiqgrepexiqsummexiwhatrceximsendmailapparmorextra-profilesusr.sbin.eximeximACKNOWLEDGMENTSCHANGESLICENCENOTICEREADMEREADME.UPDATINGconfigure.defaultconvert4r3convert4r4docChangeLogDANE-draft-notesExim3.upgradeExim4.upgradeGnuTLS-FAQ.txt.gzNewStuffOptionLists.txt.gzREADMEREADME.SIEVEcve-2016-9663cve-2019-13917cve-2019-13917.rpmmovedcve-2019-15846cve.txtmitre.mbxposting-0.txtposting-1.txtposting-2.txtqualys.mbxcve-2020-qualysdbm.discuss.txt.gzexperimental-spec.txt.gzfilter.txt.gzopenssl.txt.gzspec.txt.gzutil.gitignoreREADMEchunking_fixqueue_finalnewlines.plcramtest.plgen_pkcs3.clogargs.shmkcdb.plocsp_fetch.plproxy_protocol_client.plratelimit.plrenew-opendmarc-tlds.shunknownuser.shsysconfig.eximexim.8.gzexim_db.8.gzexim_dumpdb.8.gzexim_fixdb.8.gzexim_tidydb.8.gzeximstats.8.gzmailq.8.gznewaliases.8.gzrsmtp.8.gzrunq.8.gzsendmail.8.gzexim/etc//etc/logrotate.d//usr/bin//usr/lib//usr/lib/systemd/system//usr/sbin//usr/share//usr/share/apparmor//usr/share/apparmor/extra-profiles//usr/share/doc/packages//usr/share/doc/packages/exim//usr/share/doc/packages/exim/doc//usr/share/doc/packages/exim/doc/cve-2019-15846//usr/share/doc/packages/exim/util//usr/share/fillup-templates//usr/share/man/man8//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:18130/openSUSE_Backports_SLE-15-SP4_Update/d6cd7fb144da3315d0ddd2296cd3752d-exim.openSUSE_Backports_SLE-15-SP4_Updatedrpmxz5s390x-suse-linux     directoryASCII textPOSIX shell script, ASCII text executablePerl script text executablesetuid ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d3abf8b95bfdc9bcbb3f4a739ba125e26dfdb847, for GNU/Linux 3.2.0, with debug_info, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9e6c9d801bc8eae562e5dbb265383318c72c042e, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=c11bd763d3e33d99cac9610c29d97be65d6a1feb, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=515aaa80bd7c09875b895eaf0a7c9ab724cfd320, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4afe87b7faedf2f1bfd84a94e902025dee2ebf69, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=1288d1abd239ee4f8d5968ea22b1aff1e7a3181f, for GNU/Linux 3.2.0, not strippedC source, ASCII textUTF-8 Unicode textASCII text (gzip compressed data, was "GnuTLS-FAQ.txt", last modified: Fri Apr 30 12:08:21 2021, max compression, from Unix)ASCII text (gzip compressed data, was "OptionLists.txt", last modified: Fri Apr 30 12:08:21 2021, max compression, from Unix)ASCII text, with very long linescannot open `/home/abuild/rpmbuild/BUILDROOT/exim-4.94.2-bp154.2.9.1.s390x/usr/share/doc/packages/exim/doc/cve-2019-13917.rpmmoved' (No such file or directory)ASCII text (gzip compressed data, was "dbm.discuss.txt", last modified: Fri Apr 30 12:08:21 2021, max compression, from Unix)ASCII text (gzip compressed data, was "experimental-spec.txt", last modified: Fri Apr 30 12:08:21 2021, max compression, from Unix)ASCII text (gzip compressed data, was "filter.txt", last modified: Fri Apr 30 12:12:05 2021, max compression, from Unix)ASCII text (gzip compressed data, was "openssl.txt", last modified: Fri Apr 30 12:08:21 2021, max compression, from Unix)ASCII text (gzip compressed data, was "spec.txt", last modified: Fri Apr 30 12:12:05 2021, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)&'-5>DLMNOPQ$ RRR#RR'R)R%R3R2RRRRRRRRRR-RRR,RR"R(RR R&R!R$R+R0R/R.R1RR*RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR{{hb&:~docdir = rpm.expand('/usr/share/doc/packages') pkgname = rpm.expand('exim') path = docdir .. '/' .. pkgname .. '/doc/cve-2019-13917' st = posix.stat(path) if st and st.type == "directory" then status = os.rename(path, path .. ".rpmmoved") if not status then suffix = 0 while not status do suffix = suffix + 1 status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix) end os.rename(path, path .. ".rpmmoved") end endutf-81bbfd25d620c2a8480bc922ea3e78b987bbcde67cf15e1e8089fb49e906fab74?07zXZ !t/D]"k%j[ͯ 6ƙ`'!\~ju.>Ni@t;L}/wncrԗ˲ٸ/rfэ_W22"mإ#ti7?L R['ddĀcX 1:\ϵgj?qV#3 XQō&Dwf;W Isg;aP7(Tc1@tw;DdFB:*{Q qi@%H>$oʺWx[l@֨۰H{Ӿ\hș&<herbM$>H}eDL~Zgh;%-OIH ho{V<;CM3fbC:TF ly~Ryr_\`*q}v >, 譤XDn@֘;VEj(yM)!N%0&b)(\ֺ|]rvN򙾑 .FGGZZagT̩; 퀒 /u%h ] x)!4磜bS@ر*boT@lvnQ`}l9Wi6\K:'3%)<]Vl5YYL:6[ӛ(EFN181oԩʬ@NHU)Yw})Ejqgd(,r0>B([~ԯ xZ]@\@ܽh_YT/]3k!݂f X[*ȸfH N z{@Kp,ת$sXQA^q٣CV-VpTp]I9RCAOp}K5_" 5s%F|cBZ8Qv~i6/#^1lsv `* |a=6HWԺB~8l͟4tq5L^H>2PRbreSo {RRQ}?˖VZ< ZA< 6.6_S6#[`u?KT.G\Hsl ܈xfTVK;>y ӷjM;+TRQ/+,1+q8ܱ=F}6bHr y򛵃eRJ7WU?!6$b b_U.5E]n༦M~ƤM%X9' sDZ}Bw`:3jzˆGP![i`mDiU]0G]Q[H"iFSd}Xkz|!I3;"-Zo^iHxi~iр,襉k3Ia GV{/~'P![nVئV1Ɵ19D Vob, thzK#h#eY;l;EQ>JW]g#Jم|/>.x1ySLԀ`p׀M!~v|d{ =q#ܕZq#R0!о,G#ԉsWUD"$%*l&\_~ib1<5A3iWEKpD%) 5g.Kpa¿nd:r(>!# F3!)*hk;*)! W Cmh¢7^烜'lhc.*WחSWL^ @6ɁĿMsKh0JoQۄ-+e0MvD5Cլ( aaƢ#7lޖZj?~B2r.a,2魃|.^RaIS]i~J?kB*Ik:=[cE=bq ];3i2G{"yb,ӟmfKARZ;RVY /ra*: =l).p̢GEW!_}}WL x2 ($DC7eyE HHF v+a% "mҲbrzZIc˒4€1L q/8u@mm0io!;'!.YKU҃2&w:I>\VH/j +ZYĦM[ȚI[2e=e0Tmo(w:`T!H*5Z؇ 'jGnĶ ;!yȆί/ |^?ħ^htc/^@jJTSG25ypJ]4pdfHX)Jfz}&&XlrAGJPPȀG@u3%#zut ҼF|2V)zr]N:X%~j.R"B'ֹVI&HiadTw-DX˜D&mlW;Sx3[Jֽ6KTz$4RQ93UWqP D^ծЄBݪWA?X,f F`D!S#f6cL0b >޸{2 dj=cP~JT_{0;J6 >>dKD҄U>@ըMҽVӤw]),reӦ/5aDv?Z)B1Dc6m0u; h:(?fQXrQ d(_ۘrMoM.>WY%\f2kCYV 7,mĨ$FΆ $:bJb3!g#,K ')T GY]J!$dUUֺ21*Ez+)Yd?ْF֞aFsJ-M4hhBΊLJ2V¾i=Q r&G?͂'tLv2`oL\)ZQHP_mG܆-E$>*?9NA҆ú7[iqQ$,ukf7:H̡աM6~j0Vq&ue&!Ɔv^=Ό.^I[P2*|PC@5p1vi:g = p9c5׍ 8V)[8o?KdqO_}BT(% o٭Un"NrRʏ`|qV 0.4Z@>bevpSd' ~[+FoYT+;|:q.W4a0K!I6\^n_4ϠXy̙$\6~4YA =, {#͍d`x NlnTuq4|sȴ2Nɜ~3+TH|I@t8T7c|AH&ʼr䝿90%Ngzoπ s95$:*C!iQ~dʄ՝ n)RB(<9@$Ive^ㆽ/_x]&XZ0n?5iFZ ?CCGCvg#r`OT&+q3R]ٛ1+<Þz`NhW̐wP!sUi}XE#URD1b|OѼ^c &h8y0>kquT>v') 4ߓHP=hd(DZ=unot:?k655L{aTv@RÇ -x*r+^@uܒg`ۇnI/CM ]Zki4԰P0.WY3IN< 99_??AQ`d`[6Hyi_Fpd|O-. p]Å0ë2-Jr1wq,xiq2řҘ ?j".bDPauwtF4ND͡:/nJJ8:-5ckN^+;}2i(*@v_7$eçY4Eeϝ6}ν:Hog\V-0 ÀA&0tmP|Ճ/U["[V-Zꇥľ)3v8 A( y× Th*m * ?cv~LC/h<Ad q+.~ENMc~]cɏZtBqWb o˅o߫{z4 7mEոo[ &^`2ů, Go͕e*W K'D4Wg q-2J^/8FZtsZCzP%4k|xz?(xzY'0 R/3)Vz!is BG`%zd(&Wqt6:FRk[oz4~%^Nې}]Qs;A|yJ.F?~%b=,P )nR,^-67TI~74x!7o9 GsiwDl4GI?һЊ8[v=rւbV㆐4k#,V/-m1zw Yh"J  myQCjg:ׄ@(1.}|Lq?U)!V`f^<<來GlZw>nK~ud@4۴m<ɂl&Hubm }>PBf|;Vk A vsw Ov!&!X.D!2Q|Qe^vb(#6A͔3={v[`}׾z|8;3T c6 MoaG^8\&1_kB̺΍JYf.ܵ{Ѓ*`d!xV81ҕBgUU*H\|}a ~[Fr3THߦ^A(:tj\U]j+0!W(ATߥe萭ԊhNH2xT^ i<2Y @O낥ʠxu Lߍ9/L~He($rDMrXX"weKsGBh0@fcU@'H@Lҩs^=@I|]KN=Qi%:!S@! hs {+m  ֙[J61= wWR0+T8F : נ‚ nՙsExUNr9.8LuBڦ$ACj(/ERmzo'F *4<HC._ߛDa`Xٳoآ]S*'m\("Noy."r ڣPK|d~en.W^:t.$ `jtiЛ8^ݼ_Ң; k=UfsMS@@U/]%uzvFmGɄJ/]0˶$p-)a}bO9lGsM~"kAw&r]A'&[5]^t{Ï5 kiԧLw#ÆQ-Y"`C-%&[Bea9z|/+qD9E 'Xw %I-+dxeyRmB*G2_&0PtżB`| 5\+ nbn`*Rpm0m Xǵ0AGb/}:skçWN7c- 3bu8m"htYwDJ_16hPi蒻LīZ+[FNpQ._c U*N( :rYHyi1u} t;m]0h.. tљl~[}DQN'=:N5&XLqF$tFPRDyT=`BK T?Y@$Vgw@CN?( FI*cuɷLR}o!>yw`Ly }3>M_Ҍ f&`)>'z׬$HYKByzܰnn[n"ԁomVNm%X!pk4dS&x=ӈŌf}N.z7jɜF+f 4=ٖӲWND.080NYlįfG61Ƭbo8hy_59M =*auRl}ÅO9PbU%QLi[st&i)H}=NW%M5Xz)YS} myK!/s[*[5noZ55xPt58y a PQxҩq- aԉRv ZόhmPI!K3s?}\, $@M'| MAc|/e* 6ɢ~f j*~t־Ij6GW_Wyk ]~x 絹&~6# =oҮ2дYL%Ng/iqv ޿n jrP^^snd9UZ(ج±Cv(I %XɦOffk %&oQfTd7 75=cF-(w6"WDKR+<^A5NÕAi6ibq;#N`5S7ʯ[7Cд7=CpU1':ޘT:* *twC\O܍j4KU9IX`/JO)iIuXt!Eu4нe[فFF-Una3Ŭ#r80xɯE>qj J4b>`ݐ=@(^vT8[i W@j\3/ĵBA b{'u; }N&={,KJ̽;̂9XB]{ܼ6 8v6 t1yV/9ZAeݿ,|֯MQ>f*ꅲ hf@߹DZJkL iCV)wCG9yLH4%gwh-=CaD( aG85_ho#g,-!y!U0ȆCׄNYPˎ1Ggx D P;DU uz㭕4>==Ifρ?0u3pųݛĨUxS"cK\-_VI҇2|K!t;8 S`rY,-fKLA:RQnE[ f?s|[F7f'Y+huQZʶn!pּd?CeJo,Ą<8M@4Anrw\--JV5L\J]޺Ym Rӿ^65<E`NBoB`-XXYQ>?(/Agǽ AE5te^oR9Mt]wF:A*)8/-{H'PE`ҵz͌0ڹIJnVUl,I GPFY/~ȴj/ m*9Y 'hPp8D_s\B|-xO%v`h.\x}mV){5. qfOdz䂤B sy `qbЫDVwiaw['݃`9a=q o@_RF) ֜W)fIQf<34HW.V9~[e v1ư mKhx W3ؑo8=n@BMSPmrpHf q^_caZ`3=,zC2`4=>\iPJ3iMkCLQpd[2 _$\]e 7;"We>NE<5FM{i8qȶI^-tjђ"wD7sronK}kEf:H-8aAqD0j;hNa蚊i=h/8qs,7hpWMW|J YCs_3+c<0)[gR"h]Y R.Ȥձh\7:==8?N-=64hۃڅj7M>qz >^np=H:(O,ܸ<&| h7ڹ VnHCoJ@VE>?.d E8 fh.aI2:ܧHha{0Fs @Gm-B=%\`ϡXyGvS'd#;2]`uM{yH`#U;Dh|TUEnU h:~F}btPB0\YA S'?^ (wcWp9/7LSg-qW<(R'g/ ,AD e"\nZdrJPXXfu,XgBFY,6K략kDV4 .ّgRf`mnpuqgL6kL &*]K$J>$Ǎ!$Zt k20JI{`P jw)(@ ;N+% t5+= =]-wI07G6Ur;aw}6|,AYġʿ_@^uꓬ+fv먹Hr rzX =$XW+ser3rLNwn\\{>p ݼ* Y孊Hz@uj &o7eB*m͡['ݺI#VԞ5-I 7Gn4C5p02/VB{Pg9a<#{O#d8^muu. uY~ p( 9G_FҝV(=%Ss|Td9F}~5qiUF Ǖ(XW.(e BVMQ3 rt$*2 Kpbk2nzUdO;8Mr>tӶnI>D -qȸ铢J&H-?T^!spI;Y0Ρ>Qx+r/./)(ePUvm6hs_OY-o/;pDgfȖ&=Q94Syg&CY8YF?*.OP ek*{<Ҵ=:Pw\N8T{"o|K-(0B2X?rpcx1NNcIR(W)ABKTF "_ 35Mp!*Na ppR>OgMiqe^žl@gcfl<1i&s&+6jJ$`sB{\`rQHfib}!`X0 rUQB Y8CeJ9 ./ߏsY +.4#ºw2,#SۅҒ/B." B 2;O05AhEl~ВQΰЌW7d֪tI[qӭ *7r-K.PS\"MNsG &Z%.Џs!xbLt%Noj$11]U >+kȯ0u\X-qL(H(0/Whn@1F)M'5chvZ.x&BZh|Y ̌#fuFPP/aA=ЖoQ 窾,sk3%AQg)r}{̠LӪy;'Qk&P8ᕅSm&<ƄGa6q΂_E@|QBT9429X.P0̧x"[):@|.HoU$,_־8Lڼ.2W>c9s_?9n{ɤ]Y(v2," 7Ub%i+ (3ev$]STMbZ|v6M6v4\^5TP& aZ&26Bw9KCTę*թh7DҏE'JAs*Ԛ$-⤇T^l׀sKmuQ,W=>4'pمJ =t$МOXir~`wUS ?Zn˥co?:EJ{7yA?YpjӋ @Z pe-pnt \Cpcۂ8f!'[|LE8NCT$2*.luU2g z_X:[@vXxԦ<goQFz⥇z|B Nv!)ܖb] Y8pLoFhDc懵pzww9֪cW6 Gp[Cuhm`zkhRա MiuJBJk`! Pc-vV gУ7KbJ]"<"OuV M &7\ a_&yòzwI#έᔌ^edװ溮9YÍ:12ef0=p9BՇ%A-`(|7&Nό̨? W!Iܡe\8/Wf~f&B5Ut̢z88gz(|I9^d8&B1c M;(MSdy6x^<ΠnX;/]5S+gdV?d{-+CU'e;""IY>`Ej as \%d5~ag`,Ul͕F&&pT"M"ح0Ϭ3o:ps꜀Jm$d66+ׇ}έhhTa-/$MEzآ1He`ʼnP: >`'a"SG;N5NѥQd=&6|g%CGJB'>^oi=%2LzUL.%PG~H箥nt"[qbO܏8$#H"#rGo87Tf.H̃UY'f'wsn6ױ:c %vH ķ)%< =KAt,3#̔)!{W_2wd?b(zOS:v0l|Ɉ`5FgO'`ʚX.$K'RT*ź%'`f!k@FgTh95727CePmҶ`5u1H4>@6Pt\φ{o4T?fSck\y=ׁ+hg$WH {rvZa wVKytk*G^՜LDFwJo*,ٚîm. CݿΤ?ZƎBQ[Z]@HP{dו僰?㺥S8BI[!B#=(pHj 'S\m7aROT6f+Sg. .ms}X#yF^ZݔH?;hR/e] tD"@?XjD՞l+[M3NM)b>Q>,ln@" wy>q2*yOnF 7oW_p#f3Yb țK<5OSp'd:vo?ƙER6?)ё%uI ;f):E:T*; T-r_lc}Kf;11WRuBfרSvu"+4X+@{%J` f>oᴹr ^$ja2z8qZqK^V΁>BX{_+vbNfK5l(9N;QRX9yEF9‚K6cuAď9鯹w[v)ƴM~Pé*HoNE>NQt܀mm9nHo48yd99BuE/I tmģ8Hp<knjׇ /`UޒA:"Fkzs !. %˒&y5s85 8BTCk q 7^d8^J?v9T=+Fu1D#qO dT ib2zmf-Z_X bd$,1/ }$HQOC>@)I f+BlMm57|9xT9;vIlI )a4$ S8 *9/=1L Mn .?r=Y?P: : l:_gҫ` 4O[QrAKʗaڄ«ⴺrGh[rgn5j$S&C5RF$j9iR(-h`⇻GHZɘCf<-^n5YYz{:?,5$O2'Zs t2\pL̻໵Nv.˰{J|r뻿`RRͧ:@CR wb n\Y`:i3ӝFOdc0 3mg:XYKdGYi-( )9|'T`.3'mRMӰ-1KPPWNuE䵻lLq Q>]IĻ^̕eYe^z;EIذL%TCۂkv$$Ws1l?RmMTm2Hp.i^ V_ P5㢧dO$y )}hIq}vB@bhndHP/h3qD Hx@A FNLo+%-y/`qQ:ѓ6b( \9:ͱs1$m+Lئi\(p r'! D*7OTR ETZh!Mf&R[*$GH+O0zE2?.P9G@rA}_՘r>ߐ_D_}e씼kPxp[<.=&r/<<\vEqͱ,WY7 n @JS'^FK/.c١OxɑOV)K BÒ=*6VO5#@"հxւ%6M3h}Gc7Zկjh2ta5؝DZ{Q?{uq#YCe"$[e?q0#p%"cRTJLc_J=ˠ,Y vhk7 -4EFN`cyBU z38 $ZJ|)@Ok T.)(Õ8#hKKuyx^Ѳr1}D2#G]4"^][I4dsXペ9hUɢNHw+nh?miZ+_{FZbRY;}m^CGYhit'ܺW4!6|xݥ"J~:yȌluH'5_M7y7~7Xyzz~폮ǂ Ut$=/\c7%7ϒ5G#=Nxxse Y*)eJ%`CG${ -'5"J VW MwLJ8qKu 7e1\ 0Z`.sYۼ}\SQDnrhk˭!Ja:19[ڥzZe1VrXNJ[up9* Hǥ`?诨jNU4ei!,dhk[{:L;:p9;j)Hh藳*kN{VNAZ<)d$'y&%@`PshB' ޏ0k x3T;T-"}Ԅ چPU#), B8dϐc i4fYscomBeB& 6U77jW,rK[AnHSK~T8nGsv~t7xwFD|@ _մ4a*Xr^ gx x$/fNP>Iܫ.Ihx!yD–3v}ʔ*QΜ 44Ae9;0q@5H4,X :$!&gQ=C-N@r?pQCml-n6 uqcR5Sq9C0 KPsKONe"*vX|ZXO '94E#+QVnM-D __#7|t6x~ %2],pauSeقr]'PWQQ`9LN(2m֐l>bkaTmwK_UY{Jr4 N-".;075)*} -^Mb7$P.DrJo"8j(](Pv-o s>}/NBZY``3MhJάyK _&~ݙWOMÛ.bIj8qا-8Îuܮsqj~Bg].TQ •.(PޑT&4o^`HbҠhυ&䄥b_f=7Kc&~Mu7.zfQmN(4g=>~P #i)sMaC XݢIBVYyҾd{GNjQShUB&:u*o``ǂ% @e8xVi56xˤᑛQdӧiHw2;e+L#35^X㫑G=[쭋29 sTZ/= ~3+rՉޜԹ Ǹ{FZ(h']ALh;)>F]mL*H+ǽM-ŭs'^'ϫj2Pck<[@fbQv4H}rBР;˼xHM8k*n9 >6I٪k ,JGĦAae\r + c3qR9] w$>crrϩւh TfgbƽAz}ߐ"z~_F(c $! %/`Bd- ka#8-,%& 5OaJJ@i? Sx['uf(nJ5.5t @nB tB&2Y 8lIIdI%8}t3}@Nzra+,`f'n)WЩ{TBo5HrBxc26|%)A/[ÛEn0jl>wTTg61nU`(eY Oncm,vk\ ͒c~2]2,ч孠y~@+2+`!  TPe54r;-s&B}b{$j %iT6ta{IB2ѵb F y&4?bh^΃)v~5l{lG ZU\c8=`VLS->Jnwˊ"bovfSi:=? AD7x^j8"0 (u:;VVII\Ytpu([GYȟK [6' M'=ǵw&P ^Z]Q&=]%`+)Q(Ckʪd-ጝBPr5>uˊ=1& *LEәK[?Г^ NtL_^Tңmh\` B7bP6S҈2Yb7qA 4U8Oq,Vrr!".f, }Lo1I$/B4:, 3D䛼ȓqXIR; omfC B؛&jrX*eMhڕUE }5v\:Ykĭr{x$vYW=PPNu9ZW¾2T\tC]8!tn6a.\#46(nR{u,K{ x^#Dr=K܄^*Uwq5+ xu]k ޛIJ\PItwZx F;L$yYO'Z); 5y)V*O>HѬi(Ȉ!t1|[٤*Zur"+52jZtb: ejh<%zbNgg' )}jq]VPPhP=1sL|y75+`~V\9ȥ0/ۭcRFNMvcV 4.hOggn0@$h9[*٦qXqC3D%i"nk{CbU^@m$=.33J]Y㊯lrOQzIDNgS])Դ.^ݥ6G _!cVe?1XwIDRNcNCl(pЕRp5Fr:s; EgƷ+l4]LNX' P_{o̹4X>*fA<;0w'|j8 dmyhWK2 jM9{SkJݻyk1{grC|79r_ =&.>GA8aaUo0M!Ͽ"5O%r'Bp0&s0lExɥU)15JW$Jm$Λ':ZT<>~ģ0]bE.Y=3X8P}a?HURϧ( 1\ ȷlGO86N˦ GWPIgBO UF>7p Iڮd8&ugA!"iOo$<@>zH/Ckn#IFr\b:ٛȭikH|$(:2Dl)!Mo|Cp Xm")z ݕ^T{b]>҈8L;%0E-$|* Ϛ_2t0x: ՀFo:@)b>|4 ^̶GE.(Q5lJ!;+79vW_Wq/U'SV dgM=ރ*PkUnEvG;-*$rQTT2 J{hhv cQ 5$ג @Ӕ0^pCc5b;5{@a׽>F_$LifPw)[2 cI>|OkRQԞu>;bbT^@`//wSYrToezOb<Z㈔Jz-MTzN!X7P:'LE[{7qpE[%}-w$ r \fΞ*u%;ڈK#G-W|eO T,b`]AeJIK#qÚË;-7aOS |օ.M[G㈌:RprΞ FlJV<]/DWas:zvFj1 r@jr+9 oRU %"%;0&9 9X p='"@A<e]a [@xJ 1vwQql3T#7@X xdč&ˊi>#0ci俱ۖ`crS:AC~ِ!JTtg-ٰiԋTDr廹 P7i]QuSA2m8X>,]􁓽1ħ93PڈxG{U<= s9Ĥ݉D}s =u0~Y *2ْ ]Z8Sc\v%:Z"JQ7aI\c1|2VP݈x.kSF/ߝ =q`wj1;q=ekGyFEJ#v֭d\RMjUr!C2ܛ {SK e'L~no߲H/{VI_Of72!H/Մ 3Q9D_uw"Z/ݿ84mpa+?t2/v][ᴹ .i^mO=k]#O0VZ+FΟPAjDL\(]?j JΏ`N4`hIp7djj= |.{1ɢTSwVU1yN!w g3X > L ̆jKv6,ЪپkRl2jdeChZ^ɵO7rcDK . Hލ9 (o-gݪ .3 !6]Ǧ)2_T-8&D EJj-'(]$ QAF&~LWA&gPnx cRY٢ugsRp5,#|[:lG,5BUNlb dZtg10S F>SQRz07n9:nT:o$>n5BAzn~qu,Er8S/AYܐabЊSF]~$!Df(=5ZD}Bl,,vnhDڞν;拫off|d"Av_jߌԆ9%n6Aa~>×Gt(5eY>TCm_mm8^F, VBXo3SÍ6Z^rbث3zGk_4(lll(ō Cv^qHIӨʡ NGØۉkHr;q714?AxL=UN֦%eC<+ye(1{)3|7R3_nء(^D'ѥdsA' qN1_sЂ)Vo/ /FkvQօx#?VA%GJAR( |ngfۇR;:uAشuds0K&yp ˱6c%ёxx] =ace@HNV/7f(r$4|sg1g- O1{%G)+XK.6{rwTRp37Z[va\l 8TwWT}՘g{NSNn(l v}NP6?:.|qm:x;GNY4(g0º|p7z=ŭkyTB^ BUޒ@+|7 _O*L,/lǮL>NԔSRFfn2`[{>OҮIH?0Dム\ӵ[IBe"K$ *frJË+.:OО lW}*q5e(r.g!΀pZЊ:YiЉJFoăiU l92ܱS;2JYdŽ|/fg:wl5s$ }YlRʅc97b@;H8\JG18g$3d;4оC%Z1Kcn P* 먹zy UVef'51M(ޒ仦8]bԾʙH{"qSD4#zr 1N*ܩ 7NMeBp9yɕN 3#o@SX妛P{)n!zy= J>DC9Σc%P=na^J@\ EbŇk_n@C3#<)&_#HǻLn\je%fLcd݈BehM\ [dcgNVu ánnڲp:nK 0#ap?-{ O }&IGdEP2E$j[ hp֦hZfL(3^k52[8p[v.#SMG~R-!8W!h3=& uKKgn=&+myct"= 0BqXٰ=C[o!q'oP'J[ D~b:tKmʩ?!ч-`㫜$n[d̺E!09aZ|4j+`9!6ĩ^wX|- ʩX62&ȳDlGgks^Hkat_u4;ml~p/jg3@Ubö)B|P(FWDЅFfu)p(=蠟!r5e_Gx~껻@99Ba{n,'j,h`z>}O '\(;B5mFKTu <qEQHFg߼Bܪ[}Ee>RJ›4A,tMQ,UjOJ@*K2ށtPO:drZز,eUH^Ė=꼴\?!^.1P\j}J-Tr{{d[W5\ЎOc_bmTp"n`7#+*V'Ka4T͑t^b`{Bx]֚퀌iI!o1 yRQ*l5zt8Lk,Nq4}QgO/lkI"IAm#QrZf|6xcC7X4*i. |zx꽟{q<#d1Monʞj0f4w%G)VA/|Zh*{-yaEOIV+S?/8k~/\Q҅Mӓ'ıa$5M\=&U2[bdAnIfՑ9z[s~p9නh+Dkۖ@>~j&1x:o.Sz8i_^#4 lp Ox3$jFc0ʱ^VawcB:h4'tMEUlSzǡeŞq49E? :6y%"\`YMi:/Q}_UU <`᝞Ǩ|%4$Y.a$5~)$UU] ?G@ vJ /YC ?4!xԳ-TbNࣂI8L/ާ S_pFz<$ ƇFB%<&Iӱ ~{k= x-w0u|S" 2vC"tE钲g]v4j{9+vn7^ ތD̀ w5>/|c'"Ǟ*Uᰱ*V.Ƞ_ъ,M]Eu9O4HieǡnSw8u w,Pcc{uon]ª]^c ᣪ#.Cy,a?-AK@E} gs8 yB3(#/׾kZM5aԱ}02NՁg)Y#-a' I;4A0?a+$OZ5S屝C׫a -,!N>Sl\O?!28zNY.4ɱZe7:=#ulLs Zts z͕kدs%)㶝ݡY+uח܅NB6% tiڲYr;4 DĞl娮 ;)TOE&TLH7OFU0З+MK OU.vv/$ [[[̠m @L-2.LHQ?lWnT\ebM@@ƲHFRk|Yh,*}0|JEP dtb4g,{:W7O G`,Ȧ\6K:ʁh*~cy-L(ikJ;#{0&Mua$1g0קt㐳ͦ7!zU92em(qM BޗEc[cX v_:K vҧ$W2YŨ \6q%0G>t;)e{\aBgJZ T/J\GD :}DS:۳<غ Y{I=dSݣq6KelPg ru 7^ ^s%d#9+ZCZ:5,~968)%Bߛm'eqvcL٥N-j:IJ3^,=^GQP3uoKqXU1#$. 28#bW4RW 1#vo/"uXnCע-!©HNY֚$_7^(|>z1]@ ʃ> s #v `Nx2>;PW6]r U6H1ܚk9c01X0zIB~$!Zsaid:s\w+&Q#6Y1&8 pg:bX:mRʐԪ=KYE54Ujz7&>3= ͑>Z|2'-%?p &DF}@)5os*dr[]-ZC} ~C9-شa-N{&%7?ո{e ̍zqt}\Dž3WJ%0jSTWtՍ &+͏$cԠ..2` r_{qaBЪ :яm4 l`!4S073Ljc,mM6L/oaH  _5R3򃓴)'PQ>PޛvȾBWi2|xn컸Hڳ G3#yRG«\owC.HE$zx 'o7#6$1G+^GRۙ'?)ubP?'Ư ((ҾqTJgQҖ4Y lsN뱦,&.-Z$6Ptj}ZǓNxݱ7 [|LߋYL5 tDlIM}g)?9R{^ffL }N0<=,"&ͭN(\1k-؃vn?k`e'! hC<2`H~4R0$읒 ~,H%ߜ”fwED @cXz}H_aMD9(ARYxސ|%U+2ݷ =˳?ǭ "t39!ԡ DiaAgόZh{{-(G~O)j$wA}+Uݺ=&b_f!cfQױ@a16M.)ל5uqk!pc, VP]/}ldxv[8fti</n׺'Bϔ?լ$s{fo ^춭fiG/(P~ `sByp@(v; n'p ̞/Pe?pC{X]a՟E/>JE|L[aiҪ[SH|M 4 ͐"@qTZQN_zq+z81K=lQ-M6F9Lj?3 b"0gŘ фRX0cWQ~{ش%QI~v;#bHFaVxBp[''d)Z0q-λ?`CG"i sͯS)O'=M&W6y#" ۾) . YsT_o5R:\#DM* of%VTi= }h&NQ~,^/e]|Pk͎>ёw{Q1=TkNꧨ Wb -~iL/4'YK# _IXo>UƯ|*kȁd6g?YThFӲ*{'eE03lw%3xzM8 u'r[Nʽ̪ST' H |!&G~4DL CmH8hl|덊jռ=w#=!> *O)s@ˀ%%#™X9<kచb63瘺[cuDK8azy^mNtL隣.hCL0zj RTY˙)O5F5!50"oS:o #ZkgHDIq6Gg<%VeTAí4`G{|1\_*/J,{^0Y]HFUj IyC'фu~D{} c8{%Ҷr8)k~Gy``r ,#qW">Gu=E{qZd[r}*bmUp,DoFb aSOhU0笾Z>I1 %Ɛ9AxyEaa<܄뤫ɍh㙭0F\/D+=Dك\ 딈KssD2Q6ĕ#eJ՚}pހԔTǓL9/Mܢs^q({o7Ml&8[|-ܒ\!ej[Μ rx-WI%H0YL?kbYw5ts%75&?uIbSRr8^7LAhs5V(@\Yø0E Yoy틂ATd܀Ff?2Hrwɦُ!ܰ#b {@tJ{,N4X!X/۹Y=cʕ-aw2TD74a#\L"?CLM1e i&YE菄9r-htmh:-Ǩ!~T('@(ʺ=f3ħrN5?1zUuj"&Ԓ銅4t(¯c)nPQT|Z&6 ֳ>kG }}4Lu?J<K`'\w%kM.m :3ۋZx "c xKtXYLV8yw$\py&tNJLPT,Ϙ L$bݘȨ z"SPps>0yRY3L(KY&@6@"o@]Y_ຽqSUdLҹr6d/7F@lBPeY,4.4O]6Y5^|k Հ7*^ V^*Q3\T:$]e )UG` )W Á[P >ǥM5a]W]*(($/1fb"|H8ߨ !l{%< 6Oxכkl~ MSZWaKʇ;[ %S=Q$W>V s0pAgLzvvHGHtq'gZ(A; >UXt3' ra&Ds!XOn6<8 •s 1CbuүQyE?kdXH\jQR94*?na>QA4YǽJBZt,IX&җ7㸗E>MѿoVEo9<^ _VP5X%EXc3+1zx< YKie 1ZVIOo"K|2b6B@H!O.E2+#HpY*~_W v5bTV|"/ùamύT/ pVzRl0Mݞ75Ǘlt,w~w}F^ )?4Jgyf.%v?Q$CB=5m~j?p ?Kd{5o*FOZXF 74z7 J>~SS9\1\޾ G&tvNcnK9)Qǟ>N(C=f=1;P\ХxOI.zݠ@ge es:W$OvtoD ,- fLps 8F Dg}*! x2lZfhج(.5%Ud2[Cya93~~uFKpg ~T8mlRj8w_iqfس5{`Nן+f ϸkkޗ3E97>I,R1=nD ~ ix!'gЬ]@5_+7${+ :7?U|+rK%U0E5DQr'GrNm]{0ٱ `W# , Rv<=j=I_쇍coͦatl=Oܚ\5Y+IhKah ?[ ϴnP*էԄg>csT@s@:NlP.͕-NB dIBw m*$N%V`u_R҆8Pj{Ija;]]`եϏ\_T a#Wڡ=] &cB]Ì5$#7NO揪v룥˕SܼJa R`+s)7dŠ쑹OOg@F{a.E6{#Y{p6[T|~hԥFDv,jnb=W|J5:rpcgP1k9FtD!]n~o B߿?s3[7fӺ]jt1xcxLҥI:= )GvVϋ.c/[y"Cl,s}p5q:= 5`1qtDgflFkjJBhdmi̾Jz_J9 EP'Zͧ,Ak9wjl;z׀F`T/C ީM tޤzzo ^k )I*L"̆ `gWv`\>i=C("}-PjוyAQ21$2c蝢ϕzзc#"aC^u|];q+|qudl:~j'`E-b М/cTutw,|3C$JgC '2Sc Gأw7%iz0J`FQRb"[~Ӟp>0(dtPX{ `;8>(eok` _tp; LȺcrz^3`ޡ7*VX$rB-4 bv;32凪yPh7no{injyAdt8{ry.U[Y(Cp)6QZI>~ }<ڸ9 IKc+тs)t*JQxTپ :x.ú+rMRn=ԟՇqq{/|2x6C -Su%Y^\LYa: |=aE궲:HN_3sx)N 1_X,灀1]TH:<LR{D97 6<\LőO{Wzjl?ڪy{k!!K ĵgMjn1GGEC1BzETuK^l<xRN!0" \yJsyvk&Aw֯8p iG66~ziLw,ԓXuӿ[G_eaYq7NmZs`/^s)-n3ufU%Z)& JtA+ EP,:2&kΚZt/ B̠])4ZkCc{~8O,b"jAT`WO@saF=>4(uv`;h"b=yd>,‹axL՜2-y@#WE"=+y7.8nkMefwgpD(jȜXuPzKv`[V?ZFG. }s yeu)O'}?GYۏI/($Epcj]=\*3}R]nSukZ{UI~ DgA9,1eQFO+Xn1OFgByg>@PzsD+uJY1PA9 #̿ȖV]ߝ@elDcAV>Y_5o H?DOZ0ʼy%=ʬpt)7ꂝnC$:RxqfkNAOBdi}޳,x5P [5h,E]4%u7=* Q1|_,ӺDi!ie&`N7 "_DTJkeoߥTc)D_o53v hްlŠ4G)5>w|fUU|)q3IȌ+*fM# d4 0`H>?2:l6Z6 EaXe0 zm=rfVBUTbs}VxrQ㰡{hA]'?9h]ԸVԊ/U7mѼ$ph$mSxqt)Ģ.cSZn" MƂmnnD`(=` W$VЊ9`d@;]rC^RJZ8oJsw6SMS̼տ$)8Zp$9$^6uwm4ەD]k͔"Mj')dOsZ?,'7kc.Ɠ^“#ݐz$X"% ?dKt?!rH29v,ǥ{ʇޑ/k.Rߐ,!_a6Ծ#ੴűallB}sT4l3prޥi؏hŴ5@~%y}C #5ӝ:N0)1e.ߐapN//( хE GPq6=iM v e:oǀ6i~WSEyKaj/+ dF"fIِ\ԡۣОJMǃwh>~Lu!6HJN?Pf^*u5y(mzTiLS#>7)raj4#cz1(ZRR~Ĝa66W L>i}+K~J2t6Ц)yt=ao^noj&<3j4Xpϐ\1#LUdHYsZk&>V,}ح[}\9F g3k]D!6-8&3 R"(m~yOja%HV"xt!. Y9e$tx`^76:5mXmĢˠȞ,.jO2 ,g(12Oۧ3#WH~Rk@G?1p|a/G"&CG4QtE^;}J"^Y y85qQ"TwN Z ele,IJri ڑkfjR`Vp{"t|u n*2D}؄'4J}H樫À{N5T$.8YQ§ 6ԶiWBw:Nͥs K,:~a+y5~М#X< _wf).eU d:>M P<`d")ZK>SǃJWp>K+t"x9 tg|5Omdx08+Z oG{[xQY`'#-̆<u]V}ɶ .;hG9sy"tMvyq1 ތO.;!M@{[@~a/t1ZNU+ xv;T \lDv7`đ}͜>6_ʣ"!QLyC5ڂ8^x r ~'O7:̝f}zf?8>]@dv}a B5)& so7w?(.aCM5;Z;RjȲLqYj:'%~؂Аroo04AMK6GaF68-ؽc#:~N^rmal1ēYQwj>E{ fMcu8T5"kv@,a)9_c")E8ghmZ:r8#{ls4H~5vƬ@ZYze|+G%xjQ2R$GRz!/ObT*az !+SxѳƃR *ui#rI0UVGqYlvkF^ #`4N-p}ߎ}wMCYM`0 kt(A; v_'ы}_G8&^ɲyAyDOol6r(Lvf^7`n"H1Qж<=ӃicA :3I¾k3&ׄ4쒠yH_+FK^K`_mjuWV&53/zbjf$55|z,v齼`ݚW?8,HJJeSGq2C+:l3J(33.Zu%Z)JքjӻA䍎ChBr3P%nW yWc96}ѹ_-JJSC^ n򌛇gQC{(yHyO!vzo Fۦz Vf8@<ifRIug~|8[͸lKx]{lEunKD̼bg5r8{Zq`7V vqsSWYi0UYeN26򜱨֨JE{tgEgQ,~v!sk,g7kEr eA B5A:*i+s+⧚m `5WM6l|U2^SJV2v·]G2V%~k4ƒ8r"_2i%dU_gB(ƒf:L1g k 4u]<]HSnukĻL@xI8 Mr w:g d E/E|P7gIzN--6A^8=ZuJP9X3.t ,G\(Ũ6wgv 3eYKSXBV胿s,E v|qtҐ)W=,OV&<:5~}D_b.-e8|0VDܴ,ޜ#h7؄H{OAA 7†O?Tog?Nh;US,eҝEes4 țspYlA;bh35P .n򜔏vBBtk#dzzbL-o[(Q#V܍LIC~/oZmRp\"O2ؗ2>7y2hmjů3岀kt{L\Hz\(iqtkrdz/tmH/?I4-IM練Q B0> Gfo˒JK#I;vS=J1I(iKf_9ЦՆGg3Z} QǷj+}X"O[*|mWò+Q0߇.:#H?F t Y'|ơ*_Ƴ~}$+ }!pqiZJӂu`N) //vm3L8*3ӚDfk6}VVTlg6`bX|c,uY 3\?_#4H2Z#+Z \X)V+wa9Jmch/`|7 GnS'6|'7|Wa-1g/TrjnQӞ6oqˤވrk[{OΣXN32ҕ]H 2+1S`%AM)*5??\ԊzdKqD((`vd5JyњT-<극S0T&JEH; W(@Xe o VW˽ h=,2!Lzg|,,%d@$kHNNE 8M(Pt+HA@Sh"2iiX/Zs I*,.TšbZo>oIhM#sVuSJ8Q:TI(G3Z9$4I昀f͜!A]T*^uUﻡNzT'ka &{" kh-G,5V|ai0-7E#f6C.UBbVGd{)%h[ Hۮ6$SOi*/GǔG#;)p{drzoj@U֧܇ja;g~l,1,ٳJ⻉J{m_CvX]Ҹ##:U ǒj4XvHUƌM][cĎ;y MRWS Z ?R*Mop2]Z3E, _y l܅La}r*`DՐ3!U%)>Zc7A%4Dq9 aZO>XvjjeznUb>)qb{.kdE|SJI͎ ,d} 0* V_>)mZz86B`2>T^_W̑Ii0ȭ\'L7qces کs6͈%-B'&_PGʣVqvi^"7]WeQۖ%VńtXKD6I7K~3EC5jk%ekwG\q"|JNQbtOEA (N,cȗ)SHcSpmLCT2쇭VԞJ*2Ԋej^>`c˘U:Z:;S$:KgF1 O * w!`-FI62D7}1 n. ψʯNi %*e(`{Su~&^vM\-ّDUd|rĭÁ2 Ebs%" &m.6? 0LSU vt}m.QEު1#S -&0]0!B@S#BK XSOc]8=h3ʺ [8:vk7vvF>}^fkd&~3N?[H W;%G$*oNU.a/,_+H4dT>`a6ݖ rX<vbV3Ψ<7[VtQNƾrLWxhL6D޹;chJ$!gRU)ДAN/+Ecam"E} 6P'd?{2INِ” )7"qc쾑o),Jhy^TVNE$Yi0xhp!=lj6t+ve7i1j*wJXL]cUGij;Q$ڔ˶ ۏksHj&4STGMNJ75;C!KfSn}c4W5x0mx>k(c,k2wL%\mlP/I<I] .Fֶ!%\wf wFge Yd@,}sqI^|hB+J,ac G=5?oG(fضɝɪTf̚'jR]{ @iqRymEAv]We<{8*yo@i)CHu!^˧f U!66Mf)# ޝB҄(1c^\X|^RPXjS>>(y֠LDX$dEh4VۢnO_!F9hҥd(zDQ3}6W@ߗsypF#p9#+w.iK#'&Ԑs{fՑi7PPL_U@8ԡm WM(aGVs5' ?2^EY-v`T4j7d>q̶?[Z[DլJBypߧ@uqx^7#&7]ϟ#i %\#1iA{^-xXPt RAہ". }A]S$4W6_351`VFcźoy K}ll97(@GMsh8w7cV ꐗ>F 6XFt?;%Q)=~\hz^%5 s_2?ID:I%]JSJ2y[,"c˪q+:l^lRJzǻ@Q*ѧաn 9?D |B-)?M5zwE?һ|3;kZe)id+Wjɒ6D1PHA^4+ g5iTMÚ7}30<5" ғ+!YQ$IX&:l|~zn9Wzw}?X|g>I~ 격ʐKXE7eYͣ| cZPφgF,bG{F|;4 C>urJDNılyd&l0ރ3K 4۔N%MJtRt/ұRߑ̏/WBZo6N`84j>*#N\េ<&KnN ¿Ԉ*y꜓O !4JASqM,Sa^N<:r=9lvtLbUa ̼v/vˋm zY"Yym՟oA1|敷{QJ^=5w[]OtlhI14&2La@+oKk"غZ[J x$S-Tޑ5g'qVDW,X [H: N 7LLSBu`EZNƑ͹G/֛] | v-f"-8ٻ~[w,h6Ԧ|  X_VET!Nï5z:{eܡq&[x(ؾuɬ=Uj lVB; W;s4}7R@u>hУ8~CO+mDK 4]Ҹ6B0zSj>4(o! [LP$6t6aМj}r)\T;"X~ m5jLBI ~*ȉ;/kdB5 Y5 P.gý~G#7wARPc$exݤʹY}Zb 9jk!N"v{u4_cL?E.')= k }#.ف{\:bd^lHfr?!Wq y3j0`Z.Zڢ鸪}0C 7/~Uk]*| v/o~6掌d)ǡ<>0)5 KLބqgO̱EMQ)z`T2evw;UN>J;Hb}B sfMQ0uj!(Qg-oo+ eΦ|+VyTaU1nig~6QB)Z }RMh,, d ТT%n@7LC!+)p'fT5MEƻq!v鷟2'ӗ/&*\۠%Dm:/^\"aNqx֔JRv fkzSM;8$.]|<ٌhaJt_mzKqs"\xHT"s@8@natPK4̤_׿fPHRPٷ=c)tzdOL>\^f]W%7.&IQLG䥝*X0zLq F 骪Or\؝.inBGRު[)VQaJ$hƓHu~J!W-w|ֿ_*E! J)^fcpx wsM"_T"2vIVr *gVy?/0Qo6X>m uO с4zyx@.W4_N!4(qe] T{#<,=8ae*th9P~_̍.n:/zyZݗ˝ K*jRTOoełBʻPM:%ܗ|^OF%פ40熇q!A`]q.<@YU7]tyng f:mgd}O44^F Mo_Dl"YӦs{*P(c!Ԭ.8^Sf G? )|lMAA(`>bfY;Bc3 hPtQ-0Y=7CSW=xkK 0"_{mC,`? lEdC_ !˳.Rd*R j(*tr:%'-VEsC2q&Cdk_J 't1SfX=F=wiU}wn=3x-9Bېꠜ%e6—t%5==pk8Cr0~} T_sBzEt_'k͊ADRGB3Y8]'dc lۊXafG{u a+zuAz98I hpf"~ #/%3a+z^&N؞ h=Z1ŋGJpGK` `u]c-dge}jၼI-,g]+>7 |$}zk.S-e4*(zp`)zaEj2a KLF%{_+5TX (w 9 H)O3">Ʌ0CKRYU69ǣz<*Z3X3i:tNm7 Ma@FaŐoLQZ~ʄk_*p;ݴ$.f7ƙ"=ۉR^+藂,HkVw iZ(g"l[lbS +`Wf!42is(($a+<`wsn; tU DREHl olY/<7cTyOCf]eByt:๙Sa܎GŇogP"'l^l3(TM<ټܟ# Ƽ̓ `HUCe[2LYs%zo՜架ccBgLa;ӆ"n&q .4T,.YZĄYvGZ(z  xQ}&'+_!`EœۜלЯtB{O54Rh6NӍgHuܩGH6 FFu*scWi<$A=#t+ +`+kMr}<%wA/ hgl!>j<Ա ^E77,YcZY#?-}Kg"}Mh7NjF[&x0>kszG{ U3A>n3bP6%(OtBKrPv}r6ҴnMQ&m Vr߅#|gPqqkO4(1ЇzR*-j(DcTw۪U:uq6|@ߧ]˥K j,s`&6p)jK5%#R.'Oe;!sZTK)84~l4!y ̵kj+N\E-O=`%)d5:#tYV/{t4PΡ6)=2h>ELR ‚͙}O?[ 3w=] eh! Jmd_VK`_\}o9~ͮ*oD8slvzmp!k#/U׭7ˎ0^]hM/phYy%7oKpKØe%U uh .=V?a&1RƩ7Pw Dh^9K^V};Έ'efeQm>IXQYcwV Y"}xc/@Wrϸdm[u7, /$b45-Ym(dd8/cP8 yX}p5Dtyd2 ٜz/' f`؟K8:,tl0 3E[f}"u9Jz4]Fݬ{D7G=iڠ<'YҗDh mg/%XʏF@JW#Ǚ"k؎^-?Yl:[7?CǥK ,bGdZB.ŋӡ_tFRJL. >Vt X4rt|- 'A+>L'i;rM26ei~Vh![;$*M 'qrʆO5L "xZ(2-P&C]t˄[ao Anůh3}%h*w8E9VPϦD~[kwN:ObRb*N"#I?P#b&tAh'6vd<~BouvJ 1`W)䜖orf$^[6N"J[Aa +ېX4iPofpDi.>1'懓Cw%Uikւ$m:ŬU(5 }UqMgSp/DDN8T"qRjUk֣C:1l!i)r;< d}āwTQ:A\kKB@ ;7/"h> Ksϑ@KJ Z q\(?.\fLCm~67cÈ_6:)OBgATeWqC,_BH)#@"B/6NfJw Hj `ޥ)yƛmprⱩ\Q\ܐ* /ݥȫ:A[(N#A_ΪguCj=`:u)[XQU6I] n5RJ\)yQF,Nȭ+ntTO~*C9 |uL2 kKl݂^ϝSrԾq;3-]>Za4ݪay7 ]Z`>\_p;!  j$WP|mYPI'bsh JFkX꼧G|cJWodb@M9`*!&FCv!0XcĪTV4E,hkۛT:ɀ+ gJdu2dFwsF/Ҋ;)7awGrd(WZ7BeHxT{g.) ҾHt TеB@{yn>x tGh \ 7q፥dfTqچ6RW;PMCE7 G5DE/h_~xz{i|Sn=gNignRH9wJ/W2W.ƀfI.)R%3Ս%Pn%. `=:+@\ΊhOeDхc<>קp{y྘fȶ9@:h2 E$wv9} @8#qS|}<^×_ɗܿ2\yTr|<")36q#4q":e0k5S&xk,"R11VۀBHjoy1"U%IdT՝xfo&@u]R7k]7P.-P$nb+"Fk,]$0׎2bSieMOх=ޱU"-=`邾n\~8 %Ick7T-1?K=bDٞhIQb=1џz@to|!s_*qljx:{|G S6#Nzr~;J4͸IUHna9?%0u?('V$T"Js j\gl[ V$Y~R5 T rE1u̚^!fc2_ Aʊcj-䛈&z߇ -+TruR9;6?!a?1\+d3]sosUO˜M :C]'M7n>3T*TCR1WKgCA Sp@Lj׋bq+6ϋ 'lŔYW0=b9cUbˑwLQHXzhW&Bx.N FJIŮ>fƶ܏}S0ςװRD)mM-OK?/\B$cy_9̚8ߣ֭H8p@ U'.Y*OHhamU 3e (|/LZ$ MZQY>U]lܼNܒy{] v* rVbY[D}_e& E $ZoL"Ⱦi㞛NYK#y%Y=FQol /AerM!Zre93sYVBbBttZJwM:8e7'.&Yn_xڼ[CFJ0 {$4ܬxh`FlId4,D7~zV*@rMk|U:b!rVN:Q̯`4&7mm2x,s#LGta@bƚx]ʬB^Hb>~`H-^pz ԺO@@oCO PU@` .rYoKk%L[j(DE* v1`^p6Jı6TW4X8i͕1(%3_RI5׷x<KÎn{xSO̫,}7!y*E* C\~-8ryi?~S0z[7fF( R7L:olM/qX5aSEGK|g=??*'-X ] 2hlod\֌6Z.&a_#w갣]+Q%ֱ]*ߵ/ 76`¥o pzL]P#7T[,qU7z)ER ʼRc%8c&Lީs9Z?>h_:n$U5 ٦Y=:/;E ӕ\ D&%ahC~|YlqqvI;:(U7$ |LUy5~o7{ .UTE_BvTtpf=hMO26/)|lH=vcQ%A[Th1˄ T,1O䥣YYǚHS-dJ ) *\K%S.2I1lfNk 8ӎnwY*p )+/ኪE$ 5]j[6`QLY 69WkΧ[G$kl`i~X EzF : &p= "UΥUCxPE%/>8kg[\T0Qf,c4Ct=8֦ѣ⿪Wwڑ6b$`y Yz#R3 14Z##iW;)|pbŴ>Z3:zbDF=HPsE6k J[̦ 9u(ÅE_ m&b :; ϰ8Vf3CZ3O>Lr\mj8Ep,#zaR㗝7&fxJesoҒaumN{`Dg+؟~5sxyf$;Tk%9?A$r3[lZc #έͷI43.z$u[nx'N*Oa>CD𛅵'M;M)f|zKe|X``IDf`A%խɬ+."Maէư%+Bf9 `5~,x @Gdmbo:RrF!]Zi2;^ 'В+>ayt˱zqo`NsSL #S)'Ǔ"T:gWڻ:]1~QU|gz1 :3!I쯭C xVeUY&* ?g@%<,4'Xt*ZL󄅎D"pKaR2& I6nKқ b3[Z78bэ NGU^ќɉc󞖤gp|$'*C$ vѧ; cvF_C: .gqkΕR 1NXa9w#|wZn^F}k0eMXGkpn;Mٶu 4Q :]+DZ^TRhdJLO.)Vb.b3Ӝdia»aώ,0%\L ~ZAWIU銘SvcC9xMo§4dxIrU}ZnMyZJa85!m$89geG~0HVۇY{e|IxtUa{aAG)"vc XJHg{o`_lQr)jջ[gUmt84x fu< I*bz+|qȴ?]o$Y "Rj݅컚$ej 1a]!7/3UXgoA>vF4>/~)v bR9Bȧ?<&8`ljC[ifO CIyIɲ k e>%&| O{FD{:<7/T|f?a9Xl.jJ@z:d ṮM %C3i5Qzx )nf'oCעk]Ћ,ڱ %S7W=X6$6ղӥZՃֆgMwΠ}横2\xexT~`nnt;P jM<˄>*ϰـ RX rX8_ޝ]$@~$g&U*OP$Bl=xHezXDӉ˳?rQJ!㒧ğ4[ OH>ǩvhݸ=V"bdRub@FG71YF~__.zzdJYL%ajOӊ(U>!62Ƶ'l]m1JQX} jc>: zDꟷ`SA@@3=/QL TKBry/eAL&' h6LocC5*Ѱ9 钏f'[e+NB@35EiM`G'&ò4g=03b7G62ݧ_~ !܉:OY\qcxApKT䘭;4*ǿec ͥdOwʑ]*捞y ٱЀ| )G+("1G],fAx;BjV[>Fmf?tu֛(qžomqnNۗG2,faᛁ^d:S4F.lIޠ&.JU(*+G!Kc"3DuW=oKNU)9G%xGLR]ƺ3>qh0$z*cy'ԮZ?rM,? ZE [i 7 0?\LfG̝r`Lx?:)ܦw5(sѴY߼큉rzpVutHE΂ĶCAvL}v{i7|QFo\̘c̼ H@p`ߧϢ$^ʧzڑ 9 V+v'M+Miy5d`:&˄i.#4"3TvT-pf;$-.y<xRZ%cm ]8e5f&? B)N EzіE`YY.2tYk +*u! `W^EDI+zN#/ɦL[heAV3uh}$H+b:(x>z,Yca"5d>7' Z&.cap23W.I*{x#9*pX*/(n$ pO?#Ww"˧J8si$ HƷ֬ ˲9!P<,EU!n{ٲ|"|sLkp1dV=b?}[c@b5P%+I72O,K[p '373KR-;8*>):yZKF*8(mBi9K;#0TYƠ+ {lo_@=\si^~kZF*g6D6"@lz ĶsTMj/Khkh|p F2_RJzsDC-3"k&ܶ(V"wpl ttݽ`(*R)qBkw<؄@+RzEGÚƍ 4THfB]6Kb%a*M&aāvLݡKNpU/N|,8FQ$ _](8qE[!kIE*"`P.6ƭ&DۮI3 S.d; XqȪ~ߛ͌qNhrf_\_CeÒS^lFW^xݲwP?A7V 6h@嫳(YSUqSLngfdy©XScjfI2:taJOAZa> OHE!y8z\>9PwGi"gۆ5םk.QW%$xvXQ0ZAPɾ{>~NT5VR5e-[ \| =>JXSc>˰IQ_8ҙy M7a7 I@ۻ)_,Ƌ z x@a0::3`(ro ^:옌5ڂ`SA{ΟV:ee$]G)z*}X3IH);W pTإf0{;9AʽAњYM VSh$'0H;}ׄ2o? ~ԕ)O cj~7e"{${cET:Bniap+Ӛ|;ǠXtC`aBn /2:rkTxfܾ>Τ fǡW DpY'' 漠6CBe;N=ˌY$faOÕKqMxً:n\@uKV]$9ݴi/- <6)O8: @Cʒ\2hxiث=BSTwe3c%&JFPBt84Ѫ~ߌxDFF M!J,>V/#GA`c < WLTWVs?2mFdY yՋ$Tr=yn|P1:GU}6.6 Rj'gf.@ޟ@(O' Pfy0ilen W#F*f/$L|Nzu3d/̫JBDa,5vBDh/s'FWO?,[Lޟ͝IUB,*̺6Up.d]` `w-YػZc4l6`?# k#q0/}.& 9ghD&|g7tE\A/\[m면qNض_ANZPBzy0k@6V/qr8O 8j@L~u~&z.Xk+;[H0Ge4&n#$QhURhӂ}uO"T**+\ =upgW =BX̮_(}')e·BUj)z(xaMGzaT ɧ0ħ/\}cc' VPr.`T'` Ίp{OV{ǁRCRADGs$_8vwcD/SK @ ;H췺k,`{GzԮF~Wą"'8`Z5UYg^LS3ȡvO?ӌ|v"SWLזpzͰQנ]taK/C>5f\2YFCL|'s$ݱ4/ɚسsΌ"MeDVX_E;HW"m*aU4ԟI%sqT z8 )9޷^ٞ`UxkѭE /mƦnz0_+Qy`@/J5E$Ź31Fv~ӯo[zf.ۿZqr&՝34wEĺB\g{@s1syjRe]%L܄'-"'A؍+pmj#fdz^JneK dyt(y.SE{7sEgncw ^`Egۙ 5^w12Sτ\+tAEa[-إspE)7=>"6(&OwG~d;<+ EL͑hߜCRieBw Gq-8N=um<\Zrba<8ݶ4p6\wnx|o '@*^ Ľzs r.)nr9Sm>#tDڛ(IH0F#Su˴і>f- [(oIǾ3Bu<׮=h!W6> /S/!<ؗKyQYUlP)Ba廼f,:tN!+6@NvfyίPI򮱮 f2u~*=:=vq;ۅbE+/6n)}`9-S=¬ȊSk}t#C:l#8G =⸡'Ɲ'-v¯9?^a|CDy{8 ;̃ aq bJ"GJ1 .{Irevq+dK_xY8]U59=y<Ҷ)?zHkT*Wf]& ZwqBHm },MtM ,\ Fkp:v) !YPjy#K""7 GJVW?eea L| 31Yү, e dBv?^Ll 6aKMOt"! \ߣ\1^5`EKADpѢ2>L!8hx&YϞ\pj XOЎV:3`tO TܑC͌v HwjU }|8{ZS@'Rav %M Ds c_õ-:@J(T'ꦜ2cÁ>I$PwtW' t[9k?yq5QL`&:ԋ*Kvhy^ L_{1 -bQ(t-nKۮzJ c 2-6'v9 b6wz'l[t+V<' 2כ7m\inRhuɦQŜgs ?u`h)TwEeRYzsA,9nS#^]4<|i x>@ +WMlhpwKuMwareC:iDXEp{g|ы ~x~@gWU/];݈rȆѥh(W)W ٸicПT '{Yp޻UK\ۯwнkV$cdt/ʖS"Wwh!r7B/q OYI  (Ćf:ZK.] S,$>D1#ISJy-N [ i(Fz?QK&14ZSʘݵ ="@w/`O_K4dG7 KBh(7Z@+I e82 P~+458wpsg.>oU^`ϰ F$7:4KU>CiAJSS3ToVTEu, $Q:9d8 +>ftRq,Eyz[tjݭgJ+0yQ@Tqj@ݟ t#aa9`b#n@8KK:NA5\ڡ ku#|{hUf:ނμc0A{ì77FTKjJX^(*xHa٭jgDi e̦ ^ <{OFk\TS~/fE7d+/Jz2M%ڢ X*h} LIBu3 Xռz,XqyBHѦ cECLAO"Z*.`( 3X 4̓F(T T' fjNOXs) L5<Gŏʟ$kG ^HMmcP 8ϸj'cDT;"4}P̆T^&q/ 1Zψڈ#N$6wRǣ*r뺠Ճ sNp"X(&ca0C I7 qM#ꣿΪ L+6|7MsG2-Z߽mӓn;JL^A:ʚ(pQ-;҄tK76{wܛF<'Ԫ}guO5p>sq3 ኹ'IX_y ]'f{Pq[a~opckCLdYP~.D X'U* S߾+v>R]{ 'бPq˩pO*sFkyLP"2uʽkKK.w1.'e2I]I!}Si.`ec>=y M[.Juhݎ$<%o+Z) Q%f*ȗ?2Rhd}=S2Ʋ l>|D]hcO~ qĽd~R)! MeZ`MiB\InԆ 年ϋ=_hwf+ C" 4oV0Ajpr,WVHܫf蠱iFU!yFM' ">+AC@ sK.67w!UXѼvwVJW܅FW.ӱrɍP! n`I >qӗ6쭦GVζDRr*K%?o[ Zke'*x1||N@}R +WۉjݡxGq%-#i6kW{1 eHȁ%7Q`{6PMCA?:\6¬mA ^LvprZuqτp6~Zv0lXC dqGʁyMhBXU62;nuU1f5vY`kt@ns5Lj/T d% @S3fh)'>(諑\ZRӰ-Q^t-͚G­@*a(E4k,(xj4$ԤQmtR>>J.>-?Rb^z¡E iȔx4Ce5MάyPX'c8CliQ"Ga3i'!Fc0ەlB-g haCKvs.@˞ZAֲi 4I J1w}dɞjS^#6*1V Eϐ z=[V%A[ c8r.!Y>靥ՠ/r^<yl=cZaY|єMvZĀ[ND9qa Ahs{~/r_|Fb7O~Aagd,쵢p`ipmȜ!^\X C\ >һ]}g ₞iST=1nɄΈ;Ӳd@=dz6te뻣63129υ+xwğ ѯkBYjV'@Lp66ܚcrP'? g=a9L_ l"o8i^AF')p{_ 7J _Ho0!什Aoxd~/S"=ڇNH5r9mxhe"{h<Ό+敧qoA֧I>s2yJz۝¨FМ\$ 9{80~ ᦬ݢr6tt=.U\ZO\q Ql@r wpm45FBLZ 12O2_}QvtmNЄkɓh'K]GQ0LbeDw]:^#k,?QYO  <.,( ^%HaSBPٺ{)vhL5WџD?DCqVc j M.U1r7CS2gQs !CbG[ܐD3|3`%Z\#ARB׳TqzrTB՚+@49ݞT;o: 4b+RI7ПSJ5X HtfR_n{,U4^F$*̓OғjXC} =\F%~P>zg"Je0$FSjt^p>m!3pQΣ ;'H@FxLK_".]o=oct-g~U/t-=K<mzPVZ4VH^6t!%k FI_kLb=mIz_dmc{ry5Wx+|"LjwDӈ:P|QEdb cP=lFK4Gܕ!p.RdS\ͷ?1\񘢐DΠ-R'fLP"FɚSPr:Yw)bY+TM`ĻcDk'Yyy81ͭ[i) b7^{PvCO\<7Dhj l=mAwݧ@`I2nw+ f$O)F*k${3B!9 DS@P}L[$Vy|q` uFm3zh?׫XѼ~wyTqЊ꙯DsKiZ}6#&lw0HA㦇I1*W[|̢N9l9tth᡺tovdUUhkΟd )Uyώ}A] wf\4&t;$j`;HLq6sTY,Aң37Jv pAJsxmRoD(]f[sv[^t_5?ACU|t|ZA ^djtޗ6SY(VuD}FaF~k쩄{o4 I+Z>TߘDs~o+4T7!;HPC3b\hvȤB'j_1e눥<yŤʭԿm_OWf]$W(j^;TKGo[7 rjѫjxR.-u~~ޖ¥!=g=ÀCbEKon4KM30g!RƬ(dS0 3\˰Yo^aa -THU/@b#ƥMY}D:agĺ+x"j{¡zA~JrGV;! *Y&tv%"-pe <@wБ܇ ".3g?&D.y%|5NC3%l? &"W "V0m_87N3z"2UDj @-mrk> [XTqxx"$ޚfؚ$Y,Ŭ~rta90f}[+/F/K/kkWP]Ek᧹ps=w[rb@;qbPxeu4ƿMNTz>Zu]H6ێ;O}&pj5LKXk~sVP4*ex4e.xBNЩaeC 3u4 T SUhXT$9,Nm~j"Ο<<2 *%%榉8-x޼`@j@!]ԷPɯTH5ZڕTcBvk(o澟jE49Qra3SC6Z1ߪH-p֯|قK3=C+g=EHF%ܖ/:Z,ms,Cٽ"ĿG7o*(oԛI*}SNSӤssaZJ ʏXBfS/S"1 @+78:_oz.iCkN7y?c:t./ضֵÿYu>Ը 搂-u\h&Y>_hb.ېnwT 攈f &D MfW){A(gYoEVW@B|Pu>Xw1K' 6ioFa'z7Wƙb ve>QCoې[9vm/-u+";a:B-ǪsJwz3a-ùGk@\Cw\ ͪq56[P q@e)f7Ca}e;5ζĝg)H,vh95U"WKhDpj_Xx~:=jՄdV +p+ӄ||OרYLm2iXSݜw9;(׮rU k2d_2)3gj]Fm~ÒI@Xf GoZ(8<4q'mq996x<VXx :QwC$8cowh*uJ+!Xl{6F,0ٿq(R'#PhX3B؋ xҜՓ+ie> X^\gͥFg -K^ 1;W.T_H؊86"p0}^] yi5\PO0fB+S j/i@GIE81x90}bMT#v^֣ |\I 땇~ұ㚩N =ӒIHN~X4JF8rT(vgݧ<:CyҥJLpuAPC')/I|;[nTF3c}ŵ ;;C&S-%ZM5B/Gkvl d-$DʋK7 f~ aQ7/e[U%͑cx,JC68yטEy\PE%hf*`搄Lhnl1ӧ\փ:5'q7KK8.vM:9ڸ1;RKI|xlxNWFrɀ4ZEi6D%E(L%qdggWʧWbuԡ %Cb0x(>eGe86kƾ=(h{ѾL#ĸLd5ʠH6yž8 hh"8Fxߏ P3E]ĂT8N`=}UD_Aqsn|[Ovpqgb;6n>6&QJ比GLQ~~*p_p$&ັG?n/Ыq5o&c?-[Th̹+A$ qPK^"Bd8<"'J{t"JFm=?_&ÏIe$u#$/^+ zCO.@-q0B}h#/M3}ny) y>{;Geq"ؽP/GܠKcPJn\̖=^҆*CO|᱇t %mxFRt x\/Bn2ă_ǸJ>t~&jxS]6A; *b \:h╖9MyjO0L7.J*^COr;>M :S}}^~*ŵR=%9U2SJ97 lLBb*G`?(S*08iS4m\u Wx~U/T}5J"V/l%ovhs tΈx,AB}ɲlTcn+<~S \Tď 4byh3QkH=)PyC7ڧW} 91}Lܦ1k8 "W7. l%NG6o97/q]7y ǎ(rWĺ}mJ*PP5OlG^ؖDL^F't#f.ʀJ@Oݛp]!Q[s$ɥ0_pKRN1[2td,vh;?|1*ꃩ7BC\HD-!t{MEvk @חI%|OHm mKn9vW6PIh+/woh +_>F Խ:e0{x&="RFނgA:S~o8wU-(G%aL1Ap+/ak{ (o31,;YPŴPp1̐rX,?MT6LM4fZCFP}!Pgvc3.]aC 癝iCa">M;Md/W\^A:Nr~!ub(' 7gHGe6x>< xrpHlD klAI;Xb1#SI/Ơs%W7gk[j[Z1\*I뤉g? ~],25'4iR6+@x<8nsË*Da* 㨅9$|^w_2Z!k.ZIDG)GHgAB?pdqZ^n|U~}F,ECU/ٻ9sɠ tgc@~JTjA]Fi, ZL,)4^9#yK 4! Ʈ1ҋI@}I@Ü].t/!ޔ,̛e㺠 ugҟb'P1fh|.[LbžR[k%3=`B(NJ|Gܨ,Cc+@&34Vu/қJ<+>m ($.YV~^|6~ xY?p.yL/ q3,iO+ϐ -̈́e?p`81:/tUX +Mrt4j,kGl nod oKl&1t (xiL S}~#vHMi="2Gv2^?O; #_!.g{h/+%rϔ+C#wi;&]b"RBU.v$0BPSٮzJ3ySx6&(-5zDH ~-vqd|}8GĿq#} 7HgJFpzKV|Ĥի.'WJ EL#zzJ>Jӡ|II#+K`W ED cYWogQX6f!5^Z=@nP{nPт>"d@ff A .AcU&kDN:`_1/}&VjUOXO/e{x;T=q $ZFbwRyR{ W%[R">j Cܻ hJA&`UgȢ~9ΪX.QIBJ%hDL0LJ6Rߨ!Ky; hDڛjPޭo!8,+MTfǏoBW-v#ހ?D4wn|BR'9:5G\~Vೠ-Í|R.xS۬8(1:' \Ծ6_ylUTEC"d<^X>EpҭLz!6hqjfB8™`Ix77WBoЙ9.=#p6\;FNY|i&+άWj:xDB"¡(z7/H! UYGai8ߥ9 )o< (V]j dg$Hͺh~f)xe&蟻Yu?N\,+<_FLTqruК ?yl0v0m|Sډyx8_"n4Zr=?d..p]mPSp DP)r{@sSqY%\nOwҳˀ!>92ZI,mM-8gV{R[3&6VHoFz"yV^*͢oŦlaT~I - tȾ 5AN;'>@(bK0.N4 Em=ILÌ$:AeqtH=3Zp)F&g͐fٺ@2͚~M`%Oal8dѪqG *Fdo<BnJ^lpGɗjȤPj-ŽϛSp?bsblɵ%86Zsp CX>&Wء'aM 6bJ3Z9"PI.WS AΆ6DP{l#^(KnNz=.Ю_md"_;VYOc9:ɉ~]),I'u֪#&#dmK"ϝ.LH5h5+y/fݺA#$Ѧ?){6)Zj6z ؋%2srF>a70&״9txű(M 4Kn6TI‚Yp-^OsG0'yW(aJS$m>GHU&ݼ(*-%ͣw0I,rk{&2sroྴ3 ؠT$5E 1?I8j(*"BG^gߜa|eۑh[U|8r̴g,ٿ#-\ Sq=$xsqgG!J:)UFAg+y՚)R0YB"_J0q. ̱0TVȯ+T:Ɉ& -.Of v4; Cy>Vj=˸P:Y^N)gU2f[ܽܞ~d)ٲq[Eyl4jPy4`ŤCb:Ykߔ :~Xk UƹT9:jKHQWQY^cKN_u,޾OMP_/-De˴]N8nQzL W~ߣ爤l"&?oʉ,8!>}EmHUSXbmGS#C+4hF'ldዠ_ c9!ƒ=Gg0fODG$J;9Tɾ,5_D&{7Q`dmE믯;Mo'hwNi9j^q YRޟ̥A{tzgJT7^n4a)(.pۥv&6,)h_vMΔ"mf9xgq5XC6\x'D;ԷU]IPΓeS7-ȉ@/$qiHfϔKLplG1HBv\G- #zQ8?UBƓ8e6p^lo /|>6)3k3ǝQxGCuS ?"<8Rl|8)r!S0|L88 *9G'.Y6,Y&T?W\/7hUWƶЃpE07RDed>Z`O0Tĥԓ?' s{Q׆h*\D@`z  )lrHgNO!qK5rVxFsBQs!2vVjo 6`=]˹~ijd2 Ԁ79>#Wَ#:iϨmxCfg+hzóɾf^;=`G\i_/4oCJA:4D|fO X!O+n:Onު/vVMyQ4Vx}ySrIoHpw^lF+ѡ&hhujs+7 ȅx;UU;SknqB1K~SMT ,aqD-%!T S6uYgVpvE_ ]{yckW%+κy+@]|Ǿ8}d=5\(yS?k,anhL+RWD5z  x>Z חךmw 3}/h1V@} ֳlWm@88Qs8ĀY3@nsm۟4m*-&pkXoRwffu÷K27[!^z>D`$p%ii Q_㊊*W uBX(^x 7D1 KkQ!*Uf^$b7"-1 66f`><-31ٯX3MlD|PGvrQZbhfXe}I!zn1Y/A+Ge`pA;hhdKgun[8TQ!je +z5ioaVm$촑!j)3R6/Uj|5G֟D\[!dݫ秔 R`#PU])v솢]QG2oEPGXZgVϐ%,G" iCn06DD70#,`g\l)K"b 2E?DTXW0G&;dH{ ~LgN-s43g3lcx4dn~+=P2L@[سM_}CWĦ_5ad +`cw9l1LApF UOae;5"/=z ^l$%+nּ€G?}vcju'0Ъ^'LU @mȔ xO!+ЂAswZLS=D?Ʒ`K8UN%yƊ|sSl*f|) 0wmpX1@֎]3nOb8bC^ƇXU0ަ2sv;aI=\=9OtKePͷfӘeb]|.E!)SF,B`(&eD-BҨk!iaVybZ=׆<}чeMDw2Ó/. Eu!;W~By4H|"EϑEs`a`jK$l!#_}[変h{_ 3Ӕ,Cs`;:_HޖϗůypiGy;g @ˠ$M!P1Np 'L~ӓJz,z(EA,p7#=V=vy,QA^,٥ nH̠#Cd7j NvPVq^(z4D:+gԺ|ysSK% -\ 7bz1_C^vc ~^5nFtZ׏=u2 89+yk;i#CA %\=T-[+O|,$ƃT_j8|=:4#p}!4]G/ 'GM[XP|"PGEH4 ;,BjԱlw&-T Eʹ񱷇p Ke}QmӄVѥuNyv-=Tgw'[8jL0n#@O 6g\nјo;INM}f%A7ف mXe 䱏S6RW"AbS΅T?-D6%8!0=äe>oMKsz'v>,=\ BgwJ̌Љ`E@g3Ɲsx.^fmt=pa1iؼmHs\%?Tb';`$b)S7;_ 3agY(V;7aA:Z$fO9ݔ ^h"Jwr˒S"LLlXPs8NN+,O+ ?%%*1sqmjS +Q YR+Rs䲜kV ?A5p0.^!H!(?fRFṟ6 T]t~w8Ec30=gGvD2G~;00ZI?^C܇mC(1]Yxn/&R\]UeCVMD̦]钧>rs[1gۏ#PK5^ؐKky :pf~Fc𥝖猊=g X8wSh(Z};EMڂ]P0GxSswKAODS-9GWfXwjN=©Ãjٷ%| eq)`lȤM`2A~"y/vGꊢƙ6RWn" T7D[ *P'Qx艻n*>Ɨr`֮O}R*QY pY $y(ĵi' /3Tԯ\bSЌT4&Д~d#AcОzGlY[+eLh`﹉LF+@˚Q{BFSGH#Ϸt7܌ʆè*' & m]ަި *ǟ'1|f{_~C^R2.>>b{c `ݩ!S28Ff^JAEJm:M T(w],D|)c!z4H] b o˔E!xI9- 30kQ_T9 ʟ AX8 2_ ̶x/*?rhq =2Gdv籀SG:KrP:IQZkn,aEݿnA./Lu:[4ԓP"Rf: O4I6@2' #7> z9q}`&wŨ 7Wއo;\+~X'\ݾU!N&A;l2nKgH.@"D4t%~k*|@'Q)M5H[ &~^,0.>< 0]ï<8T2E͹IOgji*:,їQ.تjjL*K,R<9smKz3}%$O7:$MقWz )WCP1'vVAG =iU> atMGԟy=>ƾ8 95GSMelP&X+5ec_rH[-fq3+ghb)]u#B&5\df&c)_2N-B_.Bͬ*kbݔ`!((6I\c[^5=7feD58R.DL H]R:cH;)M y6faO0X' ;\mݖd2R Ǹu(@k ly\7 ])GaY+ȵXO'a\0*zm „vR|+=W`cUkQj=c6*@J2a,ӰqGrL@Nb=Xz<~-|)eПJ `y);ɛ'UC=/rqk3D1M^nwk.L 7] C}-ޖJ&dLct""%wCV1DL4L"q Dy=r>5‘`jUغwKE Z]kRy3?BMd Bs1]<9L_6(jmL/J.VCa3k&Բ &q?.cd[N5ڝF2;@S:3ɡ`˼ "4dd*4=lp@v`m2fx]j))tLuW!8N%§cH ;`Q(0Yufu5}v.]# I򫺽R JZ}Pxg$|fѶį LNX @p4#$x4 =uY_6./Q)|̱#Ų_I&~1x0o%Kr@6ۼkW|QOZ)]Gݖ^5S9$[մmB{B3Dwõ4hOWts*i!yC x7%uWޱZP0rYe=EeϛKǶi ~Jȫ$Ll$p b% ILS?V5x-,*zLuϒZI=N^S[vP: 1Թ#Xz jO" NX,,Pgz}hZEs~l?@y|U|"y1Bbplь4t 8Wƙ)|@|3_ xߛSTyMKf,=e;0&:ol3!&@ 毂ւmv.S#ǂ="fQ}ݰ[EICUl(Ne8@%7ZFKE'^eѥM"GlKUE#IA0Zi(Z95dz'qS&#++S ~qh HT;7L}_PGbEf/%!fw?bGYZʴ©>*UbMר1<6 急lRRGpIw]tf_bDZ#%8ol$|Iڢ"_]UIL3b~Xktl/9!B&}j&-f,ճ@M =Q`^s-9TKwvP#ucH+tM^4BoнM [,q[V->1~ew%rmБ%ŷQx3չ9zphZ}x.:QJGwvMHɠJq+lH-Wp$r"|A ڎi;KWeh _TFk-an@?%- y|xUr!^..zC܂I [Qeϧ7y+Oz*}$ GSEaUni˅>Ax?!sMY˩ù3dKa !< 7XuD'ꍍ[fh5>(F3O5 %!ݳЀ#m-aph(ym9k$߀ T #qZasyxLI|:Zęo7^>`b"pWU1*pc~T-UnGJ^]UwB9aU- 3B(b_-MM!‘TB6;5Or_cUZ4SH>!Ƙ#0 YZ