libtiff5-4.0.9-150000.45.16.1 >  A cMep9|] Y}:(W"ӞcXKHi,Eٴt?#\^{N6q?#<>Uf5Wϖ#Yޣc6˥uUӢd'Dޤ ).ʪʋr f%ս7͟"caKSWmo|K{Ja K|zN UNImz= qwF_.X2'N3Cu;]1h K>W6ce27e2f0eaeee98bd5cd856fea10ba2970b14237fc7a2550a51b0f6f16113281eb0e96b327356ce47847ec00f835ab677ce3820AcMep9|pp@T?Dd   U 1RW m~    \ <(8-9-: ~-> @/F>GTHtIXY\]^jbcZdefluvw@x`yz@Clibtiff54.0.9150000.45.16.1The Tiff Library (with JPEG and compression support)This package includes the tiff libraries. To link a program with libtiff, you will have to add -ljpeg and -lz to include the necessary libjpeg and libz in the linking process.cMexsheep59SUSE Linux Enterprise 15SUSE LLC HPNDhttps://www.suse.com/System/Librarieshttp://www.simplesystems.org/libtiff/linuxx86_64((z @mA큤cMencMepcMencMepcMew7)O@cMeo5a0345827c59ece3dbab41305527978420dd6e7e1cc6badff789b6c38fcd366d0a4e6df8810d77d08422512b3ae11ff79f5eae31b0dea828a000c282d4d96e69fbd6fed7938541d2c809c0826225fc85e551fdbfa8732b10f0c87e0847acafd75b9aacef915dcad0a8158f1f265142aceca92b7b1b735497aeff1b92f576b3791895f521787ca3a5ed524d414c5c67dea88d4a33d0e7b6221fd3f879566cf7d5libtiff.so.5.3.0libtiffxx.so.5.3.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottiff-4.0.9-150000.45.16.1.src.rpmlibtifflibtiff.so.5()(64bit)libtiff5libtiff5(x86-64)libtiffxx.so.5()(64bit)@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libjbig.so.2()(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)liblzma.so.5()(64bit)liblzma.so.5(XZ_5.0)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libtiff.so.5()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cMCbc@b@by@bu bu aZ@]µ]µ\b@\X)@\Q[[k@[k@[$@[t[{@[)[)Z@ZZ ZZ;@Z@YI@XۡX@Xx@XWXWX=mWint32 conversion (when refBlackWhite[0] == 2147483648.f) Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907 + libtiff/tif_dirinfo.c, tif_dirread.c: add _TIFFCheckFieldIsValidForCodec(), and use it in TIFFReadDirectory() so as to ignore fields whose tag is a codec-specified tag but this codec is not enabled. This avoids TIFFGetField() to behave differently depending on whether the codec is enabled or not, and thus can avoid stack based buffer overflows in a number of TIFF utilities such as tiffsplit, tiffcmp, thumbnail, etc. Patch derived from 0063-Handle-properly-CODEC-specific-tags.patch (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël Hertzog. Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580 http://bugzilla.maptools.org/show_bug.cgi?id=2693 http://bugzilla.maptools.org/show_bug.cgi?id=2625 (CVE-2016-10095, bsc#1017690) http://bugzilla.maptools.org/show_bug.cgi?id=2564 (CVE-2015-7554, bsc#960341) http://bugzilla.maptools.org/show_bug.cgi?id=2561 (CVE-2016-5318, bsc#983436) http://bugzilla.maptools.org/show_bug.cgi?id=2499 (CVE-2014-8128, bsc#969783) http://bugzilla.maptools.org/show_bug.cgi?id=2441 http://bugzilla.maptools.org/show_bug.cgi?id=2433 + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is defined, do not do the #ifdef TIFFSwabXXX checks. Make it easier for GDAL to rename the symbols of its internal libtiff copy. + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in ChopUpSingleUncompressedStrip() regarding update of newly single-strip uncompressed files whose bytecount is 0. Before the change of 2016-12-03, the condition bytecount==0 used to trigger an early exit/disabling of strip chop. Re-introduce that in update mode. Otherwise this cause later incorrect setting for the value of StripByCounts/StripOffsets. (https://trac.osgeo.org/gdal/ticket/6924) + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the number of items read in StripOffsets/StripByteCounts tags to the number of strips to avoid excessive memory allocation. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215 + libtiff/tif_getimage.c: avoid many (harmless) unsigned int overflows. + libtiff/tif_fax3.c: avoid unsigned int overflow in Fax3Encode2DRow(). Could potentially be a bug with huge rows. + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on tiled images. + libtiff/tif_dirread.c: avoid unsigned int overflow in EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is too short. + libtiff/tif_predict.c: decorate legitimate functions where unsigned int overflow occur with TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW + libtiff/tif_dirread.c: avoid unsigned int overflow in EstimateStripByteCounts() + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW macro to disable CLang warnings raised by - fsanitize=undefined,unsigned-integer-overflow + libtiff/tif_jpeg.c: add anti-denial of service measure to avoid excessive CPU consumption on progressive JPEGs with a huge number of scans. See http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf Note: only affects libtiff since 2014-12-29 where support of non-baseline JPEG was added. + libtiff/tif_jpeg.c: error out at decoding time if anticipated libjpeg memory allocation is above 100 MB. libjpeg in case of multiple scans, which is allowed even in baseline JPEG, if components are spread over several scans and not interleavedin a single one, needs to allocate memory (or backing store) for the whole strip/tile. See http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf This limitation may be overriden by setting the LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or recompiling libtiff with a custom value of TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro. + libtiff/tif_jbig.c: fix memory leak in error code path of JBIGDecode() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706 (CVE-2017-9936, bsc#1046073) + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that a double value can fit in a float before casting. + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c, libtiff/tif_read.c: make TIFFReadScanline() works in CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple scans. Also make configurable through a LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the maximum number of scans allowed. Defaults to 100. + libtiff/tif_read.c: TIFFFillTile(): add limitation to the number of bytes read in case td_stripbytecount[strip] is bigger than reasonable, so as to avoid excessive memory allocation (similarly to what was done for TIFFFileStrip() on 2017-05-10) + libtiff/tif_getimage.c: use _TIFFReadEncodedStripAndAllocBuffer(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2708 and https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433 + libtiff/tif_read.c, tiffiop.h: add a _TIFFReadEncodedStripAndAllocBuffer() function, variant of TIFFReadEncodedStrip() that allocates the decoded buffer only after a first successful TIFFFillStrip(). This avoids excessive memory allocation on corrupted files. + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX() functions associated with LONG8/SLONG8 data type, replace assertion that the file is BigTIFF, by a non-fatal error. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712 + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to tif_rawdataloaded when it is set. Similarly to TIFFStartStrip(). This issue was revealed by the change of 2017-06-30 in TIFFFileTile(), limiting the number of bytes read. But it could probably have been hit too in CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454 + libtiff/tif_error.c, tif_warning.c: correctly use va_list when both an old-style and new-style warning/error handlers are installed. Patch by Paavo Helde (sent on the mailing list) + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470 + libtiff/tif_read.c, tiffiop.h: add a _TIFFReadEncodedTileAndAllocBuffer() and _TIFFReadTileAndAllocBuffer() variants of TIFFReadEncodedTile() and TIFFReadTile() that allocates the decoded buffer only after a first successful TIFFFillTile(). This avoids excessive memory allocation on corrupted files. + libtiff/tif_pixarlog.c: avoid excessive memory allocation on decoding when RowsPerStrip tag is not defined (and thus td_rowsperstrip == UINT_MAX) Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554 + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of old-style LZW compressed files. + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte LZW strips. Crashing issue only on memory mapped files, where the strip offset is the last byte of the file, and the file size is a multiple of one page size on the CPU architecture (typically 4096) + libtiff/tif_dir.c: avoid potential null pointer dereference in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag instance. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713 + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw" mode on PlanarConfig=Contig input images. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2715 + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile(). Complementary fix for http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the isMapped() case, so as to avoid excessive memory allocation when we need a temporary buffer but the file is truncated. + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the arrays that hold StripOffsets/StripByteCounts, when they are smaller than the expected number of striles, up to 1 million striles, and error out beyond. Can be tweaked by setting the environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT. This partially goes against a change added on 2002-12-17 to accept those arrays of wrong sizes, but is needed to avoid denial of services. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350 + libtiff/tif_read.c: add protection against excessive memory allocation attempts in TIFFReadDirEntryArray() on short files. Effective for mmap'ed case. And non-mmap'ed case, but restricted to 64bit builds. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2675 (CVE-2017-12944, bsc#1054594) + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory allocation when RowsPerStrip tag is missing. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683 + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate(): properly break from loops on error when stoponerr is set, instead of going on iterating on row based loop. + libtiff/tif_getimage.c: fix fromskew computation when to-be-skipped pixel number is not a multiple of the horizontal subsampling, and also in some other cases. Impact putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile, putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and putcontig8bitYCbCr12tile Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2637 and https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691 + libtiff/tif_luv.c: further reduce memory requirements for temporary buffer when RowsPerStrip >= image_length in LogLuvInitState() and LogL16InitState(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700 + libtiff/tif_dirwrite.c: replace assertion related to not finding the SubIFD tag by runtime check (in TIFFWriteDirectorySec()) Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2727 + libtiff/tif_dirwrite.c: replace assertion to tag value not fitting on uint32 when selecting the value of SubIFD tag by runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2728 + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG compressed file if the codestream height is larger than the truncated height of the strip. Emit a warning in this situation since this is non compliant. + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a _TIFFSeekoK() function that checks if the offset is not bigger than INT64_MAX, so as to avoid a -1 error return code of TIFFSeekFile() to match a required seek to UINT64_MAX/-1. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726 + libtiff/tif_dirread.c: add NULL check to avoid likely false positive null-pointer dereference warning by CLang Static Analyzer. + libtiff/libtiff.def: add TIFFReadRGBAStripExt and TIFFReadRGBATileExt Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2735 + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo 1.5.2 that honours max_memory_to_use > 0. Cf https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162 + libtiff/tif_getimage.c: avoid floating point division by zero in initCIELabConversion() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733 * Changes in the tools: + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw" mode on PlanarConfig=Contig input images. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2715 + tools/tiffset.c: fix setting a single value for the ExtraSamples tag (and other tags with variable number of values). So 'tiffset -s ExtraSamples 1 X'. This only worked when setting 2 or more values, but not just one. + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as the client data. This client data is not used at all at the moment, but it makes the most sense. Issue that the value of client_data.fd was passed where a pointer is expected. + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible arithmetic overflow in bounds checking code and eliminate comparison between signed and unsigned type. + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw program. This is in response to the report associated with CVE-2017-16232, bsc#1069213 but does not solve the extremely high memory usage with the associated POC file.- Upgrade to upstream release 4.0.8 * libtiff/tif_getimage.c, libtiff/tif_open.c + add parenthesis to fix cppcheck clarifyCalculation warnings * libtiff/tif_predict.c, libtiff/tif_print.c + fix printf unsigned vs signed formatting (cppcheck invalidPrintfArgType_uint warnings) * libtiff/tif_read.c, libtiff/tiffiop.h + fix uint32 overflow in TIFFReadEncodedStrip() that caused an integer division by zero. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596 * libtiff/tif_pixarlog.c, libtiff/tif_luv.c + fix heap-based buffer overflow on generation of PixarLog / LUV compressed files, with ColorMap, TransferFunction attached and nasty plays with bitspersample. The fix for LUV has not been tested, but suffers from the same kind of issue of PixarLog. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604 * libtiff/tif_strip.c + revert the change in TIFFNumberOfStrips() done for http://bugzilla.maptools.org/show_bug.cgi?id=2587 / CVE-2016-9273 since the above change is a better fix that makes it unnecessary. * libtiff/tif_dirread.c + modify ChopUpSingleUncompressedStrip() to instanciate compute ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip), instead of a logic based on the total size of data. Which is faulty is the total size of data is not sufficient to fill the whole image, and thus results in reading outside of the StripByCounts/StripOffsets arrays when using TIFFReadScanline(). Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608. * libtiff/tif_ojpeg.c + make OJPEGDecode() early exit in case of failure in OJPEGPreDecode(). This will avoid a divide by zero, and potential other issues. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611 * libtiff/tif_write.c + fix misleading indentation as warned by GCC. * libtiff/tif_fax3.h + revert change done on 2016-01-09 that made Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. It happens that the Hylafax software uses the tables that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable, TIFFFaxBlackTable), although they are not in a public libtiff header. Raised by Lee Howard. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636 * libtiff/tiffio.h, libtiff/tif_getimage.c + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants of the functions without ext, with an extra argument to control the stop_on_error behaviour. * libtiff/tif_getimage.c + fix potential memory leaks in error code path of TIFFRGBAImageBegin(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627 * libtiff/tif_jpeg.c + increase libjpeg max memory usable to 10 MB instead of libjpeg 1MB default. This helps when creating files with "big" tile, without using libjpeg temporary files. Related to https://trac.osgeo.org/gdal/ticket/6757 * libtiff/tif_jpeg.c + avoid integer division by zero in JPEGSetupEncode() when horizontal or vertical sampling is set to 0. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653, bsc#1033127, CVE-2017-7595 * libtiff/tif_dirwrite.c + in TIFFWriteDirectoryTagCheckedRational, replace assertion by runtime check to error out if passed value is strictly negative. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535, bsc#1038438, CVE-2016-10371 * libtiff/tif_dirread.c + avoid division by floating point 0 in TIFFReadDirEntryCheckedRational() and TIFFReadDirEntryCheckedSrational(), and return 0 in that case (instead of infinity as before presumably) Apparently some sanitizers do not like those divisions by zero. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644, bsc#1033118, CVE-2017-7598 * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c + implement various clampings of double to other data types to avoid undefined behaviour if the output range isn't big enough to hold the input value. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643 http://bugzilla.maptools.org/show_bug.cgi?id=2642 http://bugzilla.maptools.org/show_bug.cgi?id=2646 http://bugzilla.maptools.org/show_bug.cgi?id=2647, bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597, bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600, * libtiff/tif_jpeg.c + validate BitsPerSample in JPEGSetupEncode() to avoid undefined behaviour caused by invalid shift exponent. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648, bsc#1033111, CVE-2017-7601 * libtiff/tif_read.c + avoid potential undefined behaviour on signed integer addition in TIFFReadRawStrip1() in isMapped() case. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650, bsc#1033109, CVE-2017-7602 * libtiff/tif_getimage.c + add explicit uint32 cast in putagreytile to avoid UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658, bsc#1033131, CVE-2017-7592 * libtiff/tif_read.c + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize tif_rawdata. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651, bsc#1033129, CVE-2017-7593 * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c + add _TIFFcalloc() * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c + return 0 in Encode functions instead of -1 when TIFFFlushData1() fails. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130 * libtiff/tif_ojpeg.c + fix leak in OJPEGReadHeaderInfoSecTablesQTable, OJPEGReadHeaderInfoSecTablesDcTable and OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659, bsc#1033128, CVE-2017-7594 * libtiff/tif_jpeg.c + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling tag is not explicitly present. This helps a bit to reduce the I/O amount when the tag is present (especially on cloud hosted files). * libtiff/tif_lzw.c + in LZWPostEncode(), increase, if necessary, the code bit-width after flushing the remaining code and before emitting the EOI code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982 * libtiff/tif_pixarlog.c + fix memory leak in error code path of PixarLogSetupDecode(). Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665 * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c + fix GCC 7 -Wimplicit-fallthrough warnings. * libtiff/tif_dirread.c + fix memory leak in non DEFER_STRILE_LOAD mode (ie default) when there is both a StripOffsets and TileOffsets tag, or a StripByteCounts and TileByteCounts Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689, bsc#1042805, CVE-2017-9403) * libtiff/tif_ojpeg.c + fix potential memory leak in OJPEGReadHeaderInfoSecTablesQTable, OJPEGReadHeaderInfoSecTablesDcTable and OJPEGReadHeaderInfoSecTablesAcTable Patch by Nicolas Pena. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670 * libtiff/tif_fax3.c + avoid crash in Fax3Close() on empty file. Patch by Alan Coopersmith + complement by myself. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673 * libtiff/tif_read.c + TIFFFillStrip(): add limitation to the number of bytes read in case td_stripbytecount[strip] is bigger than reasonable, so as to avoid excessive memory allocation. * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c + fix memory leak when the underlying codec (ZIP, PixarLog) succeeds its setupdecode() method, but PredictorSetup fails. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds and non-mapped cases. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode. Should especially occur on 32 bit platforms. * libtiff/tif_read.c + TIFFFillStripPartial() + avoid excessive memory allocation in case of shorten files. Only effective on 64 bit builds. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_read.c + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with tif_rawdataloaded when calling TIFFStartStrip() or TIFFFillStripPartial(). This avoids reading beyond tif_rawdata when bytecount > tif_rawdatasize. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545. Credit to OSS-Fuzz * libtiff/tif_color.c + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533 Credit to OSS-Fuzz * libtiff/tif_pixarlog.c, tif_luv.c + avoid potential int32 overflows in multiply_ms() and add_ms(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558 Credit to OSS-Fuzz * libtiff/tif_packbits.c + fix out-of-buffer read in PackBitsDecode() Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563 Credit to OSS-Fuzz * libtiff/tif_luv.c + LogL16InitState(): avoid excessive memory allocation when RowsPerStrip tag is missing. Credit to OSS-Fuzz (locally run, on GDAL) * libtiff/tif_lzw.c + update dec_bitsleft at beginning of LZWDecode(), and update tif_rawcc at end of LZWDecode(). This is needed to properly work with the latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. * libtiff/tif_pixarlog.c + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc with avail_in at beginning and end of function, similarly to what is done in LZWDecode(). Likely needed so that it works properly with latest chnges in tif_read.c in CHUNKY_STRIP_READ_SUPPORT mode. But untested... * libtiff/tif_getimage.c + initYCbCrConversion(): add basic validation of luma and refBlackWhite coefficients (just check they are not NaN for now), to avoid potential float to int overflows. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663 Credit to OSS Fuzz * libtiff/tif_read.c + _TIFFVSetField(): fix outside range cast of double to float. Credit to Google Autofuzz project * libtiff/tif_getimage.c + initYCbCrConversion(): check luma[1] is not zero to avoid division by zero. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665 Credit to OSS Fuzz * libtiff/tif_read.c + _TIFFVSetField(): fix outside range cast of double to float. Credit to Google Autofuzz project * libtiff/tif_getimage.c + initYCbCrConversion(): check luma[1] is not zero to avoid division by zero. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665 Credit to OSS Fuzz * libtiff/tif_getimage.c + initYCbCrConversion(): stricter validation for refBlackWhite coefficients values. To avoid invalid float->int32 conversion. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718 Credit to OSS Fuzz * tools/fax2tiff.c (main) + Applied patch by Joerg Ahrens to fix passing client data for Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for file I/O. Patch was provided via email on November 20, 2016. * tools/tiffcp.c + avoid uint32 underflow in cpDecodedStrips that can cause various issues, such as buffer overflows in the library. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598 * tools/tiffcrop.c + fix readContigStripsIntoBuffer() in -i (ignore) mode so that the output buffer is correctly incremented to avoid write outside bounds. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620 * tools/tiffcrop.c + add 3 extra bytes at end of strip buffer in readSeparateStripsIntoBuffer() to avoid read outside of heap allocated buffer. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621 * tools/tiffcrop.c + fix integer division by zero when BitsPerSample is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619 * tools/tiffinfo.c + fix null pointer dereference in -r mode when the image has no StripByteCount tag. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594 * tools/tiffcp.c + avoid potential division by zero is BitsPerSamples tag is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597 * tools/tif_dir.c + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit the return number of inks to SamplesPerPixel, so that code that parses ink names doesn't go past the end of the buffer. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599 * tools/tiffcp.c + avoid potential division by zero is BitsPerSamples tag is missing. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607 * tools/tiffcp.c + fix uint32 underflow/overflow that can cause heap-based buffer overflow. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610 * tools/tiffcp.c + replace assert( (bps % 8) == 0 ) by a non assert check. Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605 * tools/tiff2ps.c + fix 2 heap-based buffer overflows (in PSDataBW and PSDataColorContig). Reported by Agostino Sarubbo. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and http://bugzilla.maptools.org/show_bug.cgi?id=2634. * tools/tiff2pdf.c + prevent heap-based buffer overflow in -j mode on a paletted image. Note: this fix errors out before the overflow happens. There could probably be a better fix. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635 * tools/tiff2pdf.c + fix wrong usage of memcpy() that can trigger unspecified behaviour. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638 * tools/tiff2pdf.c + avoid potential invalid memory read in t2p_writeproc. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639 * tools/tiff2pdf.c + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640 * tools/tiffcrop.c + remove extraneous TIFFClose() in error code path, that caused double free. Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535 * tools/tiffcp.c + error out cleanly in cpContig2SeparateByRow and cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap based overflow. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and http://bugzilla.maptools.org/show_bug.cgi?id=2657 * tools/raw2tiff.c + avoid integer division by zero. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631 * tools/tiff2ps.c + call TIFFClose() in error code paths. * tools/fax2tiff.c + emit appropriate message if the input file is empty. Patch by Alan Coopersmith. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672 * tools/tiff2bw.c + close TIFF handle in error code path. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677 * Other issues fixed: + bsc#1042804, CVE-2017-9404 * CVE-2016-10092, CVE-2016-10093, CVE-2016-10094 [bsc#1017693] - Removed patches: * tiff-4.0.7-CVE-2015-7554.patch * tiff-4.0.7-CVE-2017-5225.patch * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch * tiff-CVE-2016-10266.patch * tiff-CVE-2016-10267.patch * tiff-CVE-2016-10268.patch * tiff-CVE-2016-10269.patch * tiff-CVE-2016-10270.patch * tiff-CVE-2016-10271.patch * tiff-CVE-2016-10272.patch + Fixed upstream- Added patches: * tiff-CVE-2016-10266.patch + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031263) * tiff-CVE-2016-10267.patch + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031262) * tiff-CVE-2016-10268.patch + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image (bsc#1031255) * tiff-CVE-2016-10269.patch + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031254) * tiff-CVE-2016-10270.patch + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031250) * tiff-CVE-2016-10271.patch + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031249) * tiff-CVE-2016-10272.patch + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image (bsc#1031247)- Added patch: * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch - Fix a regression introduced in 4.0.7 (bsc#1022103) - http://bugzilla.maptools.org/show_bug.cgi?id=2636- Added patch: * tiff-4.0.7-CVE-2017-5225.patch - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer overflow in tools/tiffcp via a crafted BitsPerSample value- Drop --with-pic, this is only for static libs (which are not built) - Update descriptions- Update homepage- Upgrade to upstream release 4.0.7 * libtiff/tif_aux.c + Fix crash in TIFFVGetFieldDefaulted() when requesting Predictor tag and that the zip/lzw codec is not configured. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591 * libtiff/tif_compress.c + Make TIFFNoDecode() return 0 to indicate an error and make upper level read routines treat it accordingly. (linked to the test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517) * libtiff/tif_dir.c + Discard values of SMinSampleValue and SMaxSampleValue when they have been read and the value of SamplesPerPixel is changed afterwards (like when reading a OJPEG compressed image with a missing SamplesPerPixel tag, and whose photometric is RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when rewriting the directory (for example with tiffset, we will expect 3 values whereas the array had been allocated with just one), thus causing a out of bound read access. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) * libtiff/tif_dirread.c + In TIFFFetchNormalTag(), do not dereference NULL pointer when values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are 0-byte arrays. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression introduced by previous fix done on 2016-11-11 for CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448, bsc#1011103 + In TIFFFetchNormalTag(), make sure that values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null terminated, to avoid potential read outside buffer in _TIFFPrintField(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2590 (CVE-2016-9297, bsc#1010161) + Initialize doubledata at line 3693 to NULL to please MSVC 2013 + Prevent reading ColorMap or TransferFunction if BitsPerPixel > 24, so as to avoid huge memory allocation and file read attempts + Reject images with OJPEG compression that have no TileOffsets/StripOffsets tag, when OJPEG compression is disabled. Prevent null pointer dereference in TIFFReadRawStrip1() and other functions that expect td_stripbytecount to be non NULL. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2585 + When compiled with DEFER_STRILE_LOAD, fix regression, when reading a one-strip file without a StripByteCounts tag. + Workaround false positive warning of Clang Static Analyzer about null pointer dereference in TIFFCheckDirOffset(). * libtiff/tif_dirwrite.c + Avoid null pointer dereference on td_stripoffset when writing directory, if FIELD_STRIPOFFSETS was artificially set for a hack case in OJPEG case. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory() and TIFFWriteDirectorySec() when aligning directory offsets on an even offset (affects BigTIFF). * libtiff/tif_dumpmode.c + DumpModeEncode() should return 0 in case of failure so that the above mentionned functions detect the error. * libtiff/tif_fax3.c + remove dead assignment in Fax3PutEOLgdal(). * libtiff/tif_fax3.h + make Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. * libtiff/tif_getimage.c + Fix out-of-bound reads in TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683. + Fix some benign warnings which appear in 64-bit compilation under Microsoft Visual Studio of the form "Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value." + TIFFRGBAImageOK: Reject attempts to read floating point images. * libtiff/tif_luv.c + Fix potential out-of-bound writes in decode functions in non debug builds by replacing assert()s by regular if checks (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix potential out-of-bound reads in case of short input data. + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL, there is only one sample per pixel. Avoid potential invalid memory write on corrupted/unexpected images when using the TIFFRGBAImageBegin() interface * libtiff/tif_next.c + Fix potential out-of-bound write in NeXTDecode() (http://bugzilla.maptools.org/show_bug.cgi?id=2508) * libtiff/tif_pixarlog.c + Avoid zlib error messages to pass a NULL string to %s formatter, which is undefined behaviour in sprintf(). + Fix out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094. + Fix potential buffer write overrun in PixarLogDecode() on corrupted/unexpected images (CVE-2016-5875, bsc#987351) + Fix write buffer overflow in PixarLogEncode if more input samples are provided than expected by PixarLogSetupEncode. Idea based on libtiff-CVE-2016-3990.patch from libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544, bsc#975069) * libtiff/tif_predict.c + PredictorSetup: Enforce bits-per-sample requirements of floating point predictor (3). Fixes CVE-2016-3622 "Divide By Zero in the tiff2rgba tool." (bsc#974449) * libtiff/tif_predict.h, libtiff/tif_predict.c + Replace assertions by runtime checks to avoid assertions in debug mode, or buffer overflows in release mode. Can happen when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105. * libtiff/tif_read.c + Fix out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset is beyond tmsize_t max value (bsc#990460, CVE-2016-6223) + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly use user provided buffer when no compression (and other conditions) to save a memcpy(). * libtiff/tif_strip.c + Make TIFFNumberOfStrips() return the td->td_nstrips value when it is non-zero, instead of recomputing it. This is needed in TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read outsize of array in tiffsplit (or other utilities using TIFFNumberOfStrips()). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2587 (CVE-2016-9273, bsc#1010163) * libtiff/tif_write.c + Fix issue in error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. I'm not completely sure if that could happen in practice outside of the odd behaviour of t2p_seekproc() of tiff2pdf). The report points that a better fix could be to check the return value of TIFFFlushData1() in places where it isn't done currently, but it seems this patch is enough. Reported as MSVR 35095. + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() directly use user provided buffer when no compression to save a memcpy(). + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should return -1 in case of failure of tif_encodestrip() as documented * tools/fax2tiff.D c + Fix segfault when specifying -r without argument. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2572 * tools/Makefile.am + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff, sgisv, and ycbcr are completely removed from the distribution. The libtiff tools rgb2ycbcr and thumbnail are only built in the build tree for testing. Old files are put in new 'archive' subdirectory of the source repository, but not in distribution archives. These changes are made in order to lessen the maintenance burden. * tools/rgb2ycbcr.c + Validate values of -v and -h parameters to avoid potential divide by zero. Fixes CVE-2016-3623, bsc#974618 (http://bugzilla.maptools.org/show_bug.cgi?id=2569) * tools/tiff2bw.c + Fix weight computation that could result of color value overflow (no security implication). Fix http://bugzilla.maptools.org/show_bug.cgi?id=2550. * tools/tiff2pdf.c + Avoid undefined behaviour related to overlapping of source and destination buffer in memcpy() call in t2p_sample_rgbaa_to_rgb() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2577 + Fix out-of-bounds write vulnerabilities in heap allocate buffer in t2p_process_jpeg_strip(). Reported as MSVR 35098. + Fix potential integer overflows on 32 bit builds in t2p_read_tiff_size() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2576 + Fix read -largely- outsize of buffer in t2p_readwrite_pdf_image_tile(), causing crash, when reading a JPEG compressed image with TIFFTAG_JPEGTABLES length being one. Reported as MSVR 35101. CVE-2016-9453, bsc#1011107 + Fix write buffer overflow of 2 bytes on JPEG compressed images. Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also prevents writing 2 extra uninitialized bytes to the file stream. * tools/tiff2rgba.c + Fix integer overflow in size of allocated buffer, when -b mode is enabled, that could result in out-of-bounds write. Based initially on patch tiff-CVE-2016-3945.patch from libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid tests that rejected valid files. (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614) * tools/tiffcp.c + Fix out-of-bounds write on tiled images with odd tile width vs image width. Reported as MSVR 35103. (bsc#1011841, CVE-2016-9538) + Fix read of undefined variable in case of missing required tags. Found on test case of MSVR 35100. * tools/tiffcrop.c + Avoid access outside of stack allocated array on a tiled separate TIFF with more than 8 samples per pixel. (CVE-2016-5321, CVE-2016-5323, http://bugzilla.maptools.org/show_bug.cgi?id=2558, http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813, bsc#984815) + Fix memory leak in (recent) error code path. Fixes Coverity 1394415. + Fix multiple uint32 overflows in writeBufferToSeparateStrips(), writeBufferToContigTiles() and writeBufferToSeparateTiles() that could cause heap buffer overflows. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592 + Fix out-of-bound read of up to 3 bytes in readContigTilesIntoBuffer(). Reported as MSVR 35092. + Fix out-of-bounds write in loadImage(). From patch libtiff-CVE-2016-3991.patch from libtiff-4.0.3-25.el7_2.src.rpm (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070) + Fix read of undefined buffer in readContigStripsIntoBuffer() due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841, CVE-2016-9538) + Fix various out-of-bounds write vulnerabilities in heap or stack allocated buffers. Reported as MSVR 35093, MSVR 35096 and MSVR 35097. + readContigTilesIntoBuffer: Fix signed/unsigned comparison warning. * tools/tiffdump.c + Fix a few misaligned 64-bit reads warned by -fsanitize + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument which resulted in Coverity report. Added more mutiplication overflow checks * tools/tiffinfo.c + Fix out-of-bound read on some tiled images. (http://bugzilla.maptools.org/show_bug.cgi?id=2517) + TIFFReadContigTileData: Fix signed/unsigned comparison warning. + TIFFReadSeparateTileData: Fix signed/unsigned comparison warning. - Removed patches: * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch * tiff-4.0.6-CVE-2015-8782.patch * tiff-4.0.6-CVE-2016-3186.patch * tiff-4.0.6-CVE-2016-3623.patch * tiff-4.0.6-CVE-2016-3945.patch * tiff-4.0.6-CVE-2016-3990.patch * tiff-4.0.6-CVE-2016-3991.patch * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch - Fixed in the upsteam release - Changed patch: * tiff-4.0.6-CVE-2015-7554.patch -> tiff-4.0.7-CVE-2015-7554.patch - Rediffed to the changed context- Added patches: * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098. * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch - Enforce bits-per-sample requirements of floating point predictor. Fixes CVE-2016-3622 [bsc#974449]- Added patches: * tiff-4.0.6-CVE-2016-3623.patch * tiff-4.0.6-CVE-2016-3945.patch * tiff-4.0.6-CVE-2016-3990.patch * tiff-4.0.6-CVE-2016-3991.patch - Upstream commits to fix CVE-2016-3623 [bsc#974618], CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069], CVE-2016-3991 [bsc#975070]- Added patches: * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch - Upstream commits to fix CVE-2016-5314 [bsc#984831], CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842], CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]- Added patch: * tiff-4.0.6-CVE-2016-3186.patch - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]- Added patch: * tiff-4.0.6-CVE-2015-8782.patch - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (upstream bug #2522) [bsc#964225]- Added patch: * tiff-4.0.6-CVE-2015-7554.patch - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and tiffcmp tools (upsteam bug #2499) [bsc#960341]- Added patch: * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch - fix uninitialized memory in NeXTDecode (upstream bug #2508) [bsc#942690]- Update to version 4.0.6 * Supports CMake 2.8.9 and later. * Add missing file which wasn't being distributed, causing unit tests to fail. * Make shared/static library building configurable. * CMake reads all version information directly from configure.ac to avoid duplication of values. * CMake builds are now included in 'distcheck' target. * Autotools 'make distcheck' now tests the CMake-based build if CMake is available. * Fixes to avoid undefined behaviour of signed types (C standard compliance). * Fixes to avoid possible isses when casting to unsigned char. * Fixes to avoid undefined behaviour with shifts. * Fix generation of output with 16 bit or 32 bit integer, when byte swapping is needed, in horizontal predictor (#2521). * Fix decoding when there is a single pixel to decode (unlikely case...) and byte swapping is involved. * Add add explicit masking with 0xff before casting to uchar in floating-point horizontal differencing and accumulation routines. * Eliminate requirement for and use of 64-bit constant values. * tiffgt : Silence glut API deprecation warnings on MacOS X. * fax2ps : Detect failure to write to temporary file. - Changes from version 4.0.5 * Support for configure/build using CMake. * Support for large (> 2GB) files under Microsoft Windows. * Configuration and building using CMake is now supported under Microsoft Windows and on Unix-type systems. * Test for and use fseeko() if it is available. This allows supporting large files on Unix-type systems with a 32-bit 'long' type and a 64-bit 'off_t' type. * tiffiop.h: Macros added to use 64-bit equivalents for all standard I/O and POSIX APIs used by libtiff and its tools which are limited to 2GB in Windows builds. Note that these 64-bit equivalents were introduced by the CRT provided with Visual Studio 2005 and if the necessary CRT is not installed on the target computer, the program will not run. The wrapper macros will not be activated unless the definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at least 0x800. * tif_unix.c: Updated to support large files under Microsoft Windows. This makes tif_unix.c a completely viable candidate for use under Windows (in spite of its name) if the CRT is modern enough. Please note that tif_win32.c already supported large files, but only 'tiffinfo' and 'tiffdump' made any provision to support large files under Windows. * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a maximum size of 2GB for extremely large I/O requests. This surmounts limitations in the Microsoft Windows read() and write() APIs (which are limited to the range of a 32-bit 'int'), and may avoid poor behavior with extremely large I/O requests on other systems. * Updated to use I/O wrapper macros from tiffiop.h in order to support large files under Microsoft Windows.- use spec-cleaner- update to 4.0.4 D tiff-4.0.3-double-free.patch D tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch D tiff-4.0.3-CVE-2013-1961.patch D erouault.2862.patch D bfriesen.2805.patch D tiff-4.0.3-CVE-2013-4232.patch D tiff-4.0.3-CVE-2013-4244.patch D erouault.2861.patch D erouault.2857.patch D erouault.2856.patch D erouault.2859.patch D tiff-4.0.3-CVE-2012-4564.patch D tiff-4.0.3-tiff2pdf-colors.patch D erouault.2876.patch D erouault.2860.patch D tiff-dither-malloc-check.patch D tiff-4.0.3-CVE-2013-1960.patch D erouault.2858.patch D tiff-handle-TIFFTAG_PREDICTOR.patch D tiff-4.0.3-CVE-2013-4231.patch D tiff-4.0.3-CVE-2013-4243.patch D erouault.2863.patch D tiff-4.0.3-test-jpeg-turbo.patch- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128, CVE-2014-8129, CVE-2014-8130, CVE-2015-1547 bnc#914890, bnc#916925, bnc#916927 + erouault.2856.patch + erouault.2857.patch + erouault.2858.patch + erouault.2859.patch + erouault.2860.patch + erouault.2861.patch + erouault.2862.patch + erouault.2863.patch + erouault.2876.patch + bfriesen.2805.patch + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch + tiff-handle-TIFFTAG_PREDICTOR.patch + tiff-dither-malloc-check.patch- build with PIE/sbin/ldconfig/sbin/ldconfigsheep59 16660166324.0.94.0.9-150000.45.16.14.0.9-150000.45.16.1libtiff.so.5libtiff.so.5.3.0libtiffxx.so.5libtiffxx.so.5.3.0libtiff5COPYRIGHTREADMEREADME.SUSE/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libtiff5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26370/SUSE_SLE-15_Update/0cff04b2c7e52db22d25fb615e7a2741-tiff.SUSE_SLE-15_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d59dc06ee2a8751da30f862e882b64b1e63efc2d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9eabfe62e822c2c33cbde3e89e7f8ee9b255860d, strippeddirectoryASCII text PRR R RRRRRRR R R RRRPRRRRRRRRh!Z^@[Ye> @SY?h7g^}p@S<˸Gv_W]T;a30,n}{o K+H]ܑu 8e9%SoLICT[gj_o 9 /r}Ni;dqB.hpLA:_A(8g&|@AH(c+fXě^Xfn&hɑ! hcj~#cKɶ7Y`L'$~q45E"b!j߁ޟ*O.kO(eҐar- Spk@݈:0 :5<fPa<3`l{Kj=~ j qeQ6Re0U(_H4`~ `z3'wA%:&|\ܑO5*Ks"8ݗ ~j(D8@ "Z_q6ۣCU4|.*<]`0aWږaRT9+Z"a|m葅G&l/~Sbc{BwIƫmVW +oEea1`o7>eCi2YՄC1hqDž=i#}@fiOҩp][@$ع:B^NME=vpX zSߦ1H@9f^:2u|# +im֌L'SKxP;v P]Wm\#kH| 06j^\ƀ+l2{[6k_ji.W S44{IVgdb77'=]4GZX/v\jP#Ƨ -,Q1M4_ˬ!reǶRQ3 63l{&rf\ UC՚"t43svùΒD8 "[/DӉj@?1វ]$fu|i3crLRe͏ZkzO9oP':|wDj#N ULV63V,yQQɈLU;BdSI&U){$ob@y +rGr7"p:ÿ\VB vFG)Er QGMgE(!ѸWGbncNX٫OM9q&s$&x&e29S6jM5N_⭕e: 3W>׫#=8kwjU!6+iP ?nحBv <S?/95!Hmޤ#xKya^4\Ip*(6wlQ8 -&#i&Iڶ8^xԖ09lrr `̜oPn)?>vun#[;P{hd& ޕYhxkw ۯG24WĵPzV %xl_V/mpiSTyA=T~!;{BdOφ,.<LxeR ~66쬜j;{C9fO%#UG%=KXʎ<<4[*hIWAi1+d}=PBq vELxEW)'D+64O#Z2eO"<^<"ɏvceT 1\f1x.gw+Wjέ$*8@BaDTd\ F15U=N0 iHNx*Z]!lL|`ԢL%5y|b $\ / ?Y*:/jo$lFK'_8s1t6zk TC-+lcg! ?}{p.2kWߜy52x5p]ҨL*b֖2]ۻ6414h8*F3ih4dC p@^i%ܧjsuc/1=csUtfr2׫I\ERT<8Z#Emzu=ܞj,;yɄ{-WxYd˔4r)gvEP2F{%miZΝʅXshA32RWC8XHrYW's,J_n!/+rK-э6Kyȕ=~IݔX%=Tu؎έV0_rr֒:TCc԰ʶQcA[}12`-O4EЄbהjЃl/, Ex T:>nW yFA]K![-{bFŵ8vy뒵҄r8:_ӼB3`Bn^!{DN '?p[C<df+_e\w08R-_CYط̑[ &b1X9On7t}9Z"k ,:0O D]lRY PT]q4MzHU/ahcT ƫr$fڧQ$pi&i8bX~!0kTYx °jQ$~j/Ȝ mnq V dR*&GR@`qz$^YrmW;"pO##;늦`YRXLXi#'mu9X>V lZrbKjU㲴 ޢEu3;̢ڥDit Bт*%NTQh*Csu^ưT^r6ޒdj%KZK}e]{hSi=W ߷g+ >gnʭD' +fܪAb|3x._(I05SmtY<3I^G_᭓7(~Ve+H?v[_v;i:;۽O֠r!?B o2LuQ,È|_N;1իҚq(_Mh5=r ¸U-1/h' SkiG}Y$ZNł=_ԕnuɌЕA~,cH?j3kn1Wg|){mb08UnO. 4ZYJS@eS=NAsoZ߸pk-UZ('!0<^*r:ۛzW{epJKߞ+~xTùW84.Pv=^!:^PO5p|.{b 0 r|92-B%t*Ŝ{ .]oNW;ȁXhggހ?2BWTt'hC=K+Vya2M \!j+!jHY(9Sppu)sMK<ݎ^M4CnOQSCw:60PzTBL8cx#$WL0CTUݦ MժLw*HI)FW7"<88{2nJzGj{S~y'>M#͖ \H2V2omk=wXU↲91NSE +ޘwT7EǀnJ+w mi//r4t87wQVg @4r;&"b-^iDlf>D@~}D䦆n,d jם 5€lgK'别FߜEVru FOMIc~ F3Q:F҇wH$Ȱi:N{x'w3oxF!q&=O X4;P̴kf-j9XT,Q *(,d$8 ϲGBDu\B77יf}~O[=r=qBz#x+Yg[bߐW[EMDk/^/]Ngh~ńa@%"ˮxxp7r`JEn/71fZ3ٛ'h:pf>^K?0a>#g4ʋ>(d*t3ycD̙lYuT˰UҘy_Eψ<'M]}'".W9 Vij68pƔ=4eӟ!ZdUZa3*|p7NzqB"užb?5Ǟg=S:@siCP`Y"l6q?f߲m)[эv7'N3հ3ܠ k]2'k?L? }i:ks.MN"5sN>CƠ~2U0˜c$Vt[>}f瀪fZ.pե+]ϔ(K'G. VAGr |]9Pv!dŨNƻmZ]vQE`z& CB̽[j9dJFiH! |frYppee]Be1:]_\2X&T <:5q~ 90)CFqr^/ZrY;.}+j<ܞJm+a]ncXPuh" Eב:Ӊ˥koL^}܌+ eMy_aA5h3"u}kDcU.qO/.q ӅIʫV@<ْWtcGh8REkԸ3-x=BE1a[ ,h}saN }O5>=\}UX jwFO>(#.B7 yNbJlt{z&g`B̭8UTDG!Wfg2VL=CH =y!ȵړ+ B(/p.d 2"r<8Ε(XSdMcI ȫI+DE٬j](Tſ\HjM| ) 6]gQ['ͮ]o#/7Fn?vJ(flyZ?n0mzSFzR_mMsLc["7&+tL_'xj#jbLk\"DGn'ƃ_`I{>>LK& =j}π9l%x˟{Tpֲ[EYr/-DϦW"mؠ,.=o[vJLi26S5HV YRx~҇' t#6eB"OU6t-$~Nxp{k*rR̤ЀINќ{'], Kwd'з^Y)׆J ̪RQoX nQ=6p1Z"#^3;ЫmUljn%Ⱥߏ4*:01h],Y֥ޭC"r\k֠hz~/Q[@ hrJs:C4+[ߒY&F1Q'00 KE_-Z}s76ԧb _B g#k%y:`*8Œq"Ѡz#fGi7NdrAfrđA*eȯC.ε:'g4?5B;M?elMS,X^m&k1%`"D~ yꬒ8QFe T1 ޗ].AwT?)cVœ0Y\߉{8BƔOM:<'0` blC9͈;O0/ DoQȷQ0K 'PY#q1Y@ v%Szz!-T3O}YiwZDy<Ɠʟ)C B0{A)?a=-XcOexJ.pl ,NMow|;,Dl-~3Ɩ1 A ^~w*abK6!8f|a'$G&` Yp$oVR ,}*7/KV-Hn}$q{80|gN`Kkq:!y-Uvߢ5EAT(ݍYk7˟߰m1/K%y67J9ښ(:\ʔ8lT5Hϊ_Mgȉt 4aX|зa:+p8L-FIK5oT8{euSIkʀVM53(I 8GD+>3zm!vh K;J7ӟ%cQ>:rΫ:oGo8W!S DžQFY&}HqLP ]߅h 3)Tl2BINwӍhT&Y$/3 PF;y%eDjz>̺@#Dw1g-ѐ--ȲЮX¾__g6;\9ʻUKaaڢ7 5uRX)raU+8" GP A'Χ?%0);fXe"JZE|]c;l5(Ѿ])]rrVB1~"\twUܖH<">X?OGmjmk+I d=1CΫ` ΜhK1.mC,Nmh:'W"oQ= zH#đwΙp̾n@7j.3XM`0f!l^` h"8` r䭿a<.Yf6Ao6Va(ʂ4yN?`:V\[ú;V2i;ygI(En3i͎S|٧W|rZ0~ƎmL}b Y|[?V,ʒ'= s-`jbT pz61X,eɛe#P:>SuVSNyI5R+(ɛ_㳚]ӂҴ>}jCp?nâ*[2  E s%*gP+O2#";2K}C|)R6NF2su-^LdDFGiv >5W84x}& 6<Ź c !mSn7:Ser~jO)x0C;g܆7i=. ksEv;x5 @FC<Ҡv`QnrOCnz,!?}~. ]*C2X+NMuvq~8 2i-kMAv!K*e 8EsE ;;ѻ ltE_/HhNLD쉋>>%Hnb\@O6$gemxe9Y:aRr$Q&O) -{ct:i Y` rmPΌ4>,s,SjoL*0L <>꼵"^[#!p^D}#?ABE . _ y)ԛXd^|Rۊ5ŵqM{3sDoO jNg]NVװީ7t&GHUso+O1--+ʸ񘥓a=cr5!ڜ ̰.k0$ --۵]mg(HP[٤0jI:seG`Ŝyaϒytv!Wp͗fۜ ހJ?ސSp+$];v7kd9,Ё*tdjb;mZ_*=a 5#rU20AWWÂe5Ɖ҂6Z?.S!96.+*z`*аmZ \)d3zв 9$`'.bK)={0M:*@/:rttw:kE› ܮkR;/G厊vgoLG'hb8(WpykĴY2ܴb.Gx՘uCh?Z:((0On㓯&:J(im^mZ  ƅu,FQ+3*sz҈7W?b@\ݞゐB[= q|c+?8bcn0'O}.Y@Q1 eb@\㋰AOoq jN/)u/N@M$A6nBVF{1]:8 tQ0b>17 " i{$B֠{& \j/uL6}xàXJFLtn$8-^w1|BfJ]f>\žqi4~U!j@p7$PU&* C A=`$QOgx3r=>v۬zXӯ@/)}\/#k$ӁtlabŢ(tQ\r.A_D/.?z?EC^z!=.xȩpzß}\xnMg ذc'`M/ г[VW.Y-*Ȭ,P5wqW@ 2驴ukSCrxTGU5dg;V'Ը Ҿʏ!oNωe4OcU_q=B4}|h pkiUm14kP_b=Wu+j!kGa,w0= b+!z42)Bmh ϱwAq(!);ꉣJ }3%Ю` 0_VwvwSV|nv#2DOl藼&WlT!>>%p@/p 7ABt hCz*Ⱥgg0W,JjAT]_[!,OXud"UT;>kt0K?4}{0n3+=/Σdgb:(>)[}K vA<u\}]Z]o_̫6cs d;i1^~ތZ^/1y\ si)G4^] dȴ _I>h8)X?.,SY妔{tNJEPqrb9 d\ɥl_;|X" x+["Ĭ^;tnj|n_Z0bqwuoij[*wě-/qOL;j& {A-WVzWBWV9Id_h!aF었+fl(hiwb*m7U*;8XR|>y)$,,j'1L;^ρ8~L3msD-x7%wJ̲& ` V` D L6LsyU^hbqta* UR=F5[]PX2;N}|7lAZ^Xhnl b(59{gRϯZi(sms}a:esќVB>j.*[z+Y4I^ =IΞn QQ%cWٕ~{$'Sf BAm';|SVݕ*EXNIf})x7lg>ZO[Gd`QFGP{߻f>UKW1}XdkY|`sš|,L/Y-|$l~R[-HW@H>w}TݠX0֒2C3Oa['yF2C£ʊĘ]旬T-tY#FSA8Fyp0r4H}^i50p✾[Y꿛tώm-)ef/~Knwk劉Gld%uIW 57Hf\៵D*t m#[ WKg߫^ ~A%FivV]t=P$QAXX)l$OI;AMTeI rMd7.;: [(b105Deɴ\ Yu*+1+Y\b2%諧Kdx:9S؟ٕm:_mH ٽd@=9Hdo -THM3(ZCT &QLJ$=NJ!NZZT2栘@^1|1$\NޕQ1);`,`)e Șgw۲p¿A.;1xqvo| ?W.ib~uJ5!]_eݷ{Qƙ3nI<=zZ]s*Y9y.wp2So1Mc9k&_ !ѸM dFra݈yJtPx^,6@fh7udu9󗢤%ÂBdYh]}gф|?z>/cܴ+Ywvks溟O@S#;.U1su*X:9=UP?h*~ DThc),{yt [togeK+(vah>sW載ap$(Rt:~+9+A wTտcc~|}n4tfǏO3HrC6Ph%A" n+5:O営%EcvvŠ| GaJHGټkY E jL؟Yyw+nT}EhsE#[b70? ][B帑.Gy՚5 ~z}A=\R&zz^߬RK]dmvk2}Aǩw"3w{B֠sR<}ZSB $c}P-j jGND@F~3{).Bq9/K&`#V/'zG"OO#hVymq|oQ q 9&y]Br{~2A O\\嶫R*꩙sa%wmZtC{+6B%)26$!_arSLHv6נ> \vCqgjbDEooTra aęOd&n’ؐ+uwbn^Ԋ>~ F䐉"iChRKAudajylמWZx<>\IB[wE~H%mGQy{O]JNʵ@m f*87Љ_EOw:T fnPT6sY%wsUuţۺI>f7ma"k(! MF"hgi7ww=R0 Փ?$qJt՝`$ꞆiRfΤ[ `ǣ"N]pk؂ZALV;142I+?='zcr9C`\jnywI}c/ܸ0_VIC%{%ו33װ;yAkBAR^zR8yN3S  $mY1iyp`جɧ`I&f{DpB-#W* _Ҳg X7J"1yJ?)[M3Kr8j?擸:vR \jc/ȀPWNy:rMʇSnQlO$q5pn'pMHIB*wO#OS7k4CP>ugK@/:ch}Tc^fim;Mõ^AܚFe oFi #P`D+tR`*Mĝ+%@@ly'L}^P}VAGD>Cb9!1tթړP,*"6d@U7v8{@iw N.*[PȨ; ERxB"ƚd *+t>>6 `Tyu)' & dqE+@C;|AqrgDad;5I_3 `qfrSXtHH@x؅0_6:;Tq4EVᛟYQ7B߇^U9!k(\^:ka t?i,Q4j5yޗ65 #*Bz@#Ob/OY*]Hă [ z3aR=izs6#e:QA@'*h#LuU>Kv.2GBW;/:EpGOD.bdxNL `0Yp=G~$VpW:>wަeF+/Bioq eY4r[.(0yj;a/Q'1q`ſny-QkbJKO=D#1qo7r73;D-F.V31bb*N('+h-ѳqneXr%Etrz YrQ_w2Јyhʭ^' Q#5A& ɪ$ٱrR^|q~ KoG90V`iI~჉ H!X*N^%51fIX%||NR19ai<;͜޿,#:I8]lV6Tr<^! Ż۾1K'ɫmY[)hIU;H2 -6iKNH藓EB=P\sNG0gNًJ} #j,u}RX3 -|?Q-'Ks1Z<`l$tňS4VA( Ze: fs$"1ˍwXǺxWf1|3oH(A 旂rs,+apXօ#E_ &YuLRA]h"! 3ؖ6m.ĨǗ{ ~^+ȎDfOq0;P?u "xCRf Х̧rx22mgךE{%z&ܣ=M\X.Sڄ lirlyѯ 浣Ao9/+Q̚ '2{xVXeIR3~wgO܎n+X~`nW($_8߄xof!A+=~m2l4\]>):$g=HcoSH֗OCG9 I))h,Vh#<s:ut] t/~z~Y*&bnoOʡ?5]*lRln+$n ՔiU֏=S/ F!U GI: Ѕ4gdBh;@QIә?|o\C&gqWp "Ѫv;} 弹&oPQb%?AJ= $a Mv8}X!A ĤaAMSUayPԹ8kmگB邵BpP:Ţ%1hcJBmOV'@yk/JކS $-: N|1b>!ITXSk=/t?6eדKŶj-zkD#cbzd6()ͰpP>ޥڻ(̦P]`Ce𦾑Wmm)ڂ-(c *Ҳy,\^>Vb q*;k}fo$m7LB-[* [qHRזtǖ-<%yAskWJ×WM-4ŅzSyMw%WtvXiM)%W{-HS HSHTI.1 Yˑ;tJLI m6lս Ef3+3L ь̕& ䷏?l3|%d7Jk^^qiTһI6^ڄRDYkʳsJLn#5b֠5WA!վgE|&T9, ܀ߡB)6 0kBԤV`rc"h8f/BI"jl8 ٳ<\^h6ojQ  3PRŏp*,]rnv(Êڲ%|׌+]7M*D;qAz tw5kn'JTJ2(?!BJIN%C0 1ΝӸ̶]O6L6dץ{׫ViUgG:`WLQL<$Wݶs$fЈF{VeZͺ@i`3Ż-͓y=C&+Ηˉ/u*)RBZ\=yEN1VǒBe leHXU9+qp*upڤ#vu2 eߖQ;WWw\zn#3$v{(txyXJOOm񁕄u;vw7 RE:ILi$*=_1T i&$wӿcqe'#?^XI1W~7CJ&t xjz#"͒+t07l3sY5) 2Y`'dR{~Qd?Y ! °'D#&Tե?c?N6?Ie ޷S,ÌɽK)5ywcT ǻ8b8G}ȏ#6TjH̚ӾpCf}zz2nAhj!nC.tr}=f3?TP(iqBfnP (3tZ} &[PUe닉fZQdsn 2=Hs:Ed0HXS49H _, dTyy l)~K;Wɻ#8"Sǔ-jr~Թw%{A<3Fe +^vUlNplNf,.$WCKdٽhˈ\i’e'>:D AѪ!iG{4&S:|I0e D:@7 Ć7{U ,Ӓ׬<\O' /DW=V3 +dĬhȴto+ Xd@b`48+V/t=œ,gH5hUyd֦홟yHD.@督> ~_]#2i1͖-y|7C.!E+FM5a%:&2_"LpZnc^AvVADz5CT/27Ȱ7\WJ wCk\ a8cBAKS` /-6f(`C30mV_DcmD8!hfDT ":5#H[[3QfSNDf<ǟvVBtN?N3Ȏj_)aۙ0u#wh8"2"' ,xKJJ-WbxU!1`+"Z sLA5a&oFJ;+I+̻棏?t Cu",ď(_bYP):u2&(Ey~*y+-ߙ!!LZ)# i~c_4#f"G#0shcg"ӥ09 d9Sڬ%yN_vT5D RpWU4q&/| ٭=~-Ձr9ڌpi QL_+{XF"C+RaK ACZS'R~K8oImEOUd_K@#+ԱsTE#LlځEmIMN"@Oo$$ԙ1Lg7Gv7ؔDŽ8 Z)R oU!5K d5۫/㏣,2m9u}=)uGAedPPN\kN#W4?E#9ˠ^+Q<"\-+7VՓwy#>x5W kS$ՎVBhkۿћdmyvB} >2Fqo؄zդTH }+LJ ]TK>ǁ8戮N*$Q7M[A^Lv )3Y<6Hc `^{ӳrS9QD ՜=f×Q+#c1䔗a Xd+Z޼0%aq *, b@<,ԣPLd 0;(MI:+lz4SE_BʙUwZMС'8^qM$-XK+v$FUU>,`:F `-|rԆ!K~}M^[ Iu|C:r`[?g|C)}bЭxFcWHvx{U hW&7jJuyn1@,7iULA8\ _lL)~|-M!p7# |58 ?f. bgЇ#8|04*: -#zP^y1Xp%?p j3nd=N<~eI7վ<˧m-b2'vw| B;8u#0qdhדDNjM+5B![I0NU[cPױ&Fv;ftydqgǐ!cCO:{UPG[㉮_-mdLWa)JDHcAeooe+R<@*3lbs9;?.3qЫ/Dmf\)LB2 i$z(xm3I]Lāi?] ?+͸ *&uL-^:|bl҂2rTC~$:nDou[5}!.)8<}iJy2BܠI@*|C)ˮ呞9Aވ,c"4+sWeIkkÙVh a6iC*06Nz#GL0_ly8w2WDU8UxU}˼CY;%=K u8UXѡ-0b+7*;,mZyF5p{lC 1zB>Z+`p\YU^b89&n-Tx{~ʹT7ڒ.| GUKz;~~CB6|xb i{bZ |Ѕ$SPR%Չ XX%CV,J +ޮI|o 6āVD+A)$eL(X6S z̆͒7Tђ6AS]x.-yMet#sj55hc,מጬ%' ' K>W" 'uCCh#W`#qÇ z7J-2^1rCU}&)/<{R%2r| *8,,إXAI ֶqy[ zQ$a,C/c͓-倣8]€uI W1ްh°^[in\M3#  {TpS㺲u%CGi,Xㆮ.|`<oG?Xs(,Oh-`V@!Y7#3y L\_q4-EXn ܻ*hldHrcn[/e .vz=7z৉Fm emK!8zN )rsՖL[rUfLxSW VM2!"L!FN.thN8 C\Bnb6VXp3 Z7)We*,Mmk$o/g8oV(GqIdMyykl?HM,קl4՗n'@*WQ ]HQ FFWUJGCJRi< Zoptr! 'R[/(Sƾi\E,B:'ygQ?ڄh=݃yđδ##|OT d,,؉XjHJ$O[:#QI*[OxZٽw.jsm|>@}G_Z?<d~ՏDI(mMDؖ qxH.MR-㵮-~V݀a2j}Ֆ9wO7w A D˓9/]s:1Kz{s''J>gdRbB ,د]&k.nɹՙdG iQ]`w;*k %uyFּ4l餿l/uXx]1$NNElʁ*&U9HUt36KG= oS. BZ*|bc=dK~T#;M V~iaG;D|\B FI_SE98ַswzPRhzXFJ@ Xԫkd)ৰ \}=FT>..!ևd+Q-ۧz*ZaF"vMmކcYzkjL)]ւ۴nYw&u'ą_?Yd}qwXeWXMB"ˠ. ADnfSv^W9[hY}g"[#ct,[Ҫ#%oGU`+eMP:u:|kۋ\ӈ;,ΣAdj .T0xVJ,ٮӌub+6K\0f[l2v0bJiSY"G"hinՒkΘcso=$2ah0ZpV343p-j,톺Eš$ O7| Wq5uA)*[ +)k.nK1kL3hQJQZϺ?2ͭ9NžX ޯN0V0'{)DftN,KfQOѐjJa؀bPi*>uw 9ChdJdܣG+QF Wjn|{_ȏ`ઈ*%(vx1|doz${Nc):4XOee,;ԳO8ݗ ׍MVz;kK0Uk[n-!c 0Po\@t<rX1ޡsVvB&8Bcm(Y /V@g&>$?+KI?H5Q0(R#`έM ;*t*䩷~ݷNXlGcCxDtN咋/4{+t[mx$x/۽.r;ZtfeRmޥOh \Oa [PeX]r:kQI ])t a1.R}-& `qa@Cœ%p oeg1(Igڇ%=^>!]7XxR`."3(L9M7ZHNaH/\xَ̺ds+J~Ǜ @)({?`tB,*xpJ4γ@@mLoo)nJMOڪV=.ߢV(ME<{>LJ:bc c>:7(Cƒ&/u(^Wai@%7g/HLo ܔӛ_sA9Uzp]8I%yx[d2f1ˡf˳JBt,=+F!*@ͻLCnYQ,8quU`. I}V} p 8Tb6|YsоNv98wv']qA: Jטf4[ش tA$5QLᓦ䕿m4'n0xO]Ah3-l6G&owԤf[-rۄi+d}G{o -!߽@_e@k3~of!ԑԀ|XWT\zYJHSnHwt1iUm@6p|o+6M|Ҩ̺ ^7t*K̐=6;Y*@̒5gS49nm#:auGUn牴-{e,#4Ô$Sf~R%~go{F$;'8`jOUQ:Q0fzN?HU:#D[#ey^"dBk(ڨl1y )hz#'QQ41Jw~P[!u?FՑۀ3eN4g⸵'$24Nf`1ʒs6-rkSwGt9μӿ9u[܄A{W=qp@Pw" \q D 6p M@cMfqj ET~ۅ+^]?'LTnaROB$.SH } c 87dvbL)CdfNT F {s]?y✚- _(bGZa_<1 Qk @F;\ۚP~@r#$" ޘ3ʙv&{&)*pbsZŞCI!'?]Yq1)Z:58UOQXfMZ06(hf (ٿUWFnDDEm-vN햓xv fN ݛ4,22TĚq((=8 q97 $G*@Q.U]3Ҥ#}{r#/Oר#4 bw1sWmrPJcq#Q͛|xuj`mM9/-*N]{)#^C\4^*Uj@}.@,eR)ބ`Ej%ׄ#X{)b}`[Ypd4oeM^@M88um:lD[s*zbGQݶNk 8gi×iET&Ԗ*zó&d|*,m>GQ|.c|A~k@^= @<=3/dJ z3ys$AGṦE"[f .RrX?;$A+n%Rm.42@F_? NA)nնQr\Tw.}](Nl@cH43lHb+.=f^$Gm_ l]4fXA?C rFꔌr'IXWlaڹgPZ wCmMNL8PQo.:%2; .쯄TNџhvϦ[՗}}5hmN$H/!Z(\g8MߵR[mj*T$rPNzN~W\h.2YfP)io]Mz* N]e'(q3{í^BՊ(MkD9p0ZÂu ߙ*ebhCwRC^;"&(8+QP1[<&1'E4#$fzzy UגA DX؂cc[ 2O,y,"T-Li::Ot:d!5oz%\PLDN? a66-<|+&a1m!j2FDXꭐ)+Sd܌Ώ0LG+҆*.=9 (cGЈbII1쉺-m荧wV{(`"t`}VV;lrA\6ZWOn*0p D;bΗ"ҋd˰~+2o@MXT>tPeрI"B4 ZlU/K s{1g& 3qɏd_4 QI͗cySkP5W[uR!\GCΤuw8ЌhQB|KcVdwv3a: 0aVn(7>u E,1U@&YggQ2ƦRt'x:ͦJS)2β MlCJؘқ>$F VM='X !MYK1{t }ʔtZZn>]nhIuڶ KNmAKg*I}~cm}yQS::}4O-XCY ΙD,Qm ѩl2Uo;.A6tĬЖ5u!OoJ0(jao:utܛpT Wr9U!Lj:?;D*V?@⿳I1壾ZEZ@En QL7FLHi +&|"d.y@ (r#8"86wyjv(.xG|Ax jœ2dVPOWZHE>sEIt\*J+wV#R[fDy{BM{27[6'ƛvRNug7ױ3!:.," ePqdFO8p(ʏD^f Tn Y"e^ՇD3%0il,$ϓaJLl5J:2CdXF5)a))Ρٺ4L̫-)F=tR(#v`)> 6 so"r´D6gYHߵCkpΙqxՋ3'}*F5j# {-lh}dzJ[ؼ2hPK.s92tfU{uhZ& C#"khM[4ƼQL2B)̺K( JVhVJᆊ<55CdO J¦շx +aځ b8p'jHW1 g]UBzdd-frֻlpl*$ۤx_i`F|ot j^];nP;O7aHW7|8#1@ O8Z>٥dM g|`qaE:Bhinz9%iEG&L()uB*F\Us@/ ׽alY$r(, 5>CLzҨ@AK'{ȄJ Quv ]76&GfmJ;[Pһ&jx1}6ݿ7-0g@;tXPBnrPtqW3kדjQ)^I0)yB*>I1>zV!յS~ނv=> (f/RcbF,Q˽u)UM_D^:Ad[-gVS2YP:I"m3+0g:p7nw2ٓ9Qh %r.ٞ˓g9J{,&>ؖ}Ѥj7 ~2^3QUGx=Z뾖fsEƒw< =j~2.Jw3QV  /QCmǀ+x!`z #>N;zQ.kTWrj\.Tid&)bJ3MWb' 2[-EӍJ“u/oB`&"TΘ4Hyπc¤["A_!Ģخ wWJּ%:6qۿٜABVRs$~n3"8#}> fx5 m[fw*|LM<1qvijDzN 9sZe=.*7 f|as@>kLg׵Rm]1K,l*] U ұ@1?⼇;a=v&Ijjgg}tҾ{X)ľAZuok@4&p׍~7c̜>fs: ~#EQOh㞺v8@Et\c{L9ꔄfRQ)Xѝt/׭2ǮaIfRUm B+[6vςpd%-qɲxϽpѬ%ϟB![2d Z=fCDg~QwVƍ㒣mN)U>\ %*Z{@t/?cOە?=479!:| r9)ZsC']}7z8Lqѿ8UڲGP}T6I-b T=L ;Zq̍f0JV&Q3&A  GA]K`hVؔ:.NIL>q^~DM%={WBJ=PΆqxP;sVlמ2Z57(͙;I/E Ekf 1#ðɋJ뷚~)1~ ҉z%f]W4N^K"|$ V(]np<&Ekh_x g8ߠaiHg+)F 01+sn͹ɾf~]ԌZH̡uyqW1g)jh¥7Le{ߞU-d9 'B ,>490~~J=+#5}[Q)Lzk a|"roLrOitܚqRpOG(ޝHfoX sDB\E=?x3_dli/2]Ӛj-&=~v`sZLm8ml}:}Ok~=~1^iP!MAn{M}#8&PEDo-ul̓RL3V;mywt)}W~rODUh1J// S(GڻYVڔ_*߶m Vg]C$ߋbeT(6&)P]<%HUFe&FϤEߝ;]Vf=gVS aαDЯKȑ ~QT!o]DtA Ylbn}S("kR/{`%hU($"LYI>-5?g:3!1ԃx&/9)^@FKok'Ƥ!ՇD(S1702y"KÝP8ci*;]f*"ھ]@' そ>h UI$2p(亃1:]O|]դg |(!@͏p~#sVa[t55raۜ!5Wg h0)!pm@Z%HdBvA1owͼik4 }d`C̢ !qXy~,/&J-'E~i\"1t/9zh@66YjZmriڲ7Gq~e6>61xY٫Pynz¶N )Ѐ[es؂+Ff|α2ȄFV5>@x2,:zg`˺^CKDב$7ę$QN t[룬8t¹)Z,k0t|=y2 i7v6x;ʔ[.oۻ҇0Uꥅb"<7 L ˨iÙ+<_kPI 5& k+h'TU'kz>U_yGSHqfg%й72HbzP09o!.M `TGBvJVn~;>2a/])N⤺Z(NؠMNwlo p."V bDG%av!fr} ARX#*:pFlVӹĖ|NnJAW5 M0-٬hhK' Yϲg6,PV1;_ʠqN8MY#Xu!NldwyJD==+R?߂ğo9}D{|^ɜ)u D m|/RmhO+AĎ2efg%;Q+-(.K!*VD>o W>OZ*l,JJ3cȤ%-H͂YbRH?V ǘF9?-fZ1~z-8Rm%uvc rA 湢5\Aq8x1Ђ ƒCy?1΍ % # ݱg"=75{WDz1>xq||t~Q.Ұ1VAmV# E$F癡S>f:M|;qצ _llVOQIyÔRlXH(2E*CG<9w Ap;( 5.@MB7AL QLz2,, TI3;wu?T3k::[smf Y:$&1nHXz} *asֺwRo?NN t@-/Xȏ7{|\#:ޒVNM{C{%"8C!@ҰK.HZh愮gLc4=rhe2nmkN3ar3.XP!%t.΅Ÿ2( r/-"\g>W@#x4E໲*c lyq 4˝ 5r,Cީ CY τW]i! N 3%%:( v;RrL~l4Й@ua30KulC 4%Z/L4%!a #JC{YI7Meɖ8gQXUXR)IN]:Tgi:~]Hou7ꉠAocX][l옚c\ޘXV=P]_=p 3Cf-ƍY&Ȉo_ 3E&'mq9N9_2@ٹQk_vGM&zuE#c2t٪).RܸS߹z̘QK!Z0;Rt-_^$$CC}k ,/I Hq NXDVbW]N=.EO&K@MښUAVWab׎$rH(e(:ų4at FCG BlMu. ^G|GЁ/2;*ԊVZlL|>sA?2EBb8 EB~ݬ36Tgg>="ݻ5Mx bi{SUK3w u4dM0V0Qp'! FUf$ۑrdk)y@hNQ/G!`͖;iȶØVs\Fs)t6Fؙ,ZG.")P 1*<غ6&2{y .61 cU؂D*V &{V?-5HPңyVƍ7FUu]H; &S-+]IV ҁ9JH %}`?-_uUe#ΕS{}í}wL@xO~{ST(JR-r=O;v!M~UT9$\D=MN Iy2|veqt1 ƍ$(aג/kN6 g3X=N{ ҋh4 S 2lg8+w (FYNG 6Z Nsq6jI.ώ11n֣$wDT[Bڶ+sI܆p[.asKi|\5hu*lI$*~Z#k_; z U=Ǎ%_hҟYvjaik240U .~кYp۱e0C.@O4FwLT̊y4:csC!qi:@/U ٷ--e!BkPKn64ZV3%`C巵y 6 ?jS.ˋ(g\"éxc6wl yA˭;k4&QP0h#DV0;RXQեD{)MΙf?YI1;֔!.1O5B>jˣi?yhSNDVcӭܰ8I_48ۦ)~p2DB]Xn'E/GX-:O֮!zW\T?@R&3F} o\R͈؎3Gvgat}ƽ?trUx8vx1R*@̾VQ!/US ro6+O:_Y}%-%)6yӞA{ G+V] ]!sC{1_fͳ$Mlڹݹ+;U)si is@\XUL'@kZ34q:OU\li3 ?b6w?X{&TNw^ ]D 0`XP6d ǵʮ-#:PX'R>{@Ry3s7-W vl};2(k1>Eʙ j񩥲an^1)p$C\RQ97x3MnZ:IZ:|lKe_I- l,Tkb7vQ\ePw^\>G!o Cv\`-,e[wረ{v\oO=Xn{9śz›~:Av>Rȵ\zf+w,b)/2s;'RqPsj[ A-7z1Kl5oٗK<)FI\ߖ3FwߔRۼ̇ЮNIev? ) (v`{ M_#iX*-EKQZI(hPкn!W~LzTB$i$AbzHwڐC2Z^DVO a PZCAC۩XK=‡8-v^lTa/ux^μOn~w=\ug+(ŚB:9`i9oAɾn3Cq)@DZgΰ-j^WZS|Mb岾섉Ⱦ^n+;̽: WvvEj70-Jt缶V0>~~=T7Ru/ T.@v##%?|3{eXy@q{<"~{&B*-W?n\T")Ăì-ǢާGXC\24ӎ:"u+bf>q"2L{vnyUL0_z4} /hjd<ϟ }0uAF׌eØ5}O Y(Wn#1kg괞/¡ N`X;)μſ)NR]jw %Kr]^y Md[4ihG01 >zHhMfg=hB\ m֙)-,àc7eַkSϳ^ChbJI]5& VXx/N;R)OKz7tob$=―$,eDՉΰH"[* tcl'myKy5٪GhZBL7 5Ywɏc#&WDBByjjJО4xyZY>C? NWNE:9 f~hZhXQ5O*w[mK`,dG7}K  4%XSZΧ#ZXEWϯƆg^ZO;c@g`!q!a6<r\@42?J@hX~l#r 4أJ'YwȣHJʛcyJ0 f#ip_5\ޟL}{$i\g;z  #Cm:#IP%(Q!;u1g-v=kk!Fv2&JUoL *šU2-U믟m;s3\*Oj3ܨ¿[ &VɇM6)_И=q?s]y1m[y-] {]}3@˃ڴ 0aHͲ~J@ 8ZiMNXh}oW^$B*dH<0vdzh.PֱzL~"-P BDL+SBQT {(=x"dN=%Ce鱗'HpvKՊ;y-*.hn]žwC0Z&wb81(:RtquŝB_>s"mȴa԰&[A!\fS/sQ iOA_݉SeQ#/|ǔ*#l1_%G2K j J2 8Q۬)i8l&9oG;?%{ۣ({[jI]6OԚW/~jގQU$;yR${nuâP) )j{+tʤD\cQm? q&PnӃp?/x{^rOl,,/^Im:+2xʞ>v|O@yȕzN*#f^y_Yd*'#1!8ag?o`iS{ Wu (\ OS9)tJSfn\7>.&]iDMĐ *=DZgו P"l@]@ݮ(KГīռA#]qOyސ&NMA볰ӥyi Bj~aK2F'P.kR LX0m{k[({?"4`ȡeX:3ʲY%;zd RzS$"B:@D;;Nztep(yaщ3MZ>8; I~q_ɕx^ve%īG8^1f~ƞԣ+hpqHmW w#}N9e#5z޽$~rE$ 60y-saپ;JmHzP/?k|8v:Cj{'51t̜C o (W:RW-sv#ʽ:]g0*k9!Y˾oRzD-:MuSeC8.)› wB%]CJ/k& 5ԅy|tU}Aqّ/JV'T840oY]_:3h(`23:!vG5Am,j맳ޗDjYa^mHYBjΡ : ]XQ!{ϸପϜEȖ wB>ą&1}l͋YT }$]9u9fJp? kZE"0=Ȉ=8rd;Ǣܺ.8';[(F2s]Ѽ4[ !oC:|g̺nn?,%bL[yN_qo.SiRB Ң5s_=!^>A5cR7j[3v`j Ao|c,zAGjD-խC0ڝBQP]MKrČu2aE |`yenk9tK)hӄDM1 uQVl԰CvF(::t5XUlЎ]|6eϧ"LڨQΚOyi)H)?'l۠|цQr^ti\*ևTߡJk)2d$a#NGÖU7aw9Y(~'{LJ'}3k砟~`%S]w >pKXF%ĺ(@=]ZǙ٘_E4)=sO|ƫZJ dΩZL2Mus:ǼueRr0&8].Q+}qLY]3] N|t?eYc5F+#GЛkziěd-̡ZX>)Pr@J%LkYP{gN(z|Q9,e|<\cZ#s*n|2;r )Wz~Lm_sA⪗%:M_'ԌjCjz54TBfF|[ )B3qCF9b{H H`OIpȑܵgd1>rWs-$~~73ØArJQ%) N{|Η$'`/@X4\M_Aݒ Y7ěEWѯ"(Cc?,QV{`SIh`8ċ6͚;}s ǭ1 1.l1'b:lN a`3~N_0n-؈rN4pzA2Z'Y)d@n~Xne\kɀi)5#[ʫ It'ҵ$Ҽ(c,Eoº@P#t8S.׫ݓŲlq_v]C >Iao3'DF\E7B`]hw䪓_*(g"p) lJ4 *$z{u}d@Rq%I}rm%QCE`͚8x7-@W(-.)9M&mq t:HfB^슳дYnJŒ̮ʡbtH#p9`sVͺ}U}zUfaKh0PykM@;rSr4?eɣbL6ѹ Jz#T -I}Dpejq xNLg9FGb8Q0T:k=tq /d,~LB4G0=ҭZr(a$UbץWsJV骖X ċk|6I, 1>&5\w,Cp;Mphh7 tD*lY8IV Q_%h^̑O8qTrscRXwǛdG\/JL<ԛ[n=A0#C!Q'mS?ǐS,]8V,cGh*k:#{ᦆXA]~M49ybV\OQL yqPn.'v3HcȲDL ldP%o\ܦ 0Ӽ[G~Vm KoeӝoF/Y@{TkfEn۱g}ŚEݣTzTu5U-]OS5b`4=^lzh`,M+ttv`C1ADO^i҅mFJ;~~)$e8vk|{c2ꈇp.a }6\,QSROn`٢Vw\ 9UA.ʎBR.;"*Mcnv{lVANJȞfz(w 4tDkӄw4ޯ%:x&jiF+9 c]uX92Ԥ&inh:y73KY*3*7|Z.}.EX+'vGQ=i4zEG=Vc4< P6.*9M(xQ郖mT~@H@];;^(uFFAm]Vn 41!+<-B@鯲0׹>Whː_ji8ӏVC>H4NF4vÎ L[FՁ 0$Ȣλrxx J?pTPava? Kg!1ר pwT,ğIE0fo(! c9F: 9T)RFQ$9Rib)/,er`w9%syv_P&},FuC#"L>V ZADLUiv7&):9R6CۈS]|(J9ƭhS C{Arz9мftNJT~ɻՀծb#=GY6'9@XJ n%ZVTm ?W g]/q8숼6x=Py1[`\!ů5ИɢK >2`XJԪY"/{<]ۗINڭ2n!g̦in{bkfpN,# i$Phe~f{k<-b@NaJQJy"|,mB>3LLh (  HUуXCEhJ=p1ΔVOg1LE $aퟗT⋓˖TTd5`nj͆ `!B _{XLzj?3-|Iv(ϱ,lGIr\w6m>R]̫1Մ o/7KƚbZGbrA#m5.٦fJρgUw1mq>@eMJΓ ` ЫCZnֆ[f6:;$1H({+F"R!B,T,Q ^d'kAPy:mME뤢($5)WM|~WmHW9oB_?χ~9G'(Cn LIX5Y;ؕd!3Xr-]$&y3)*X>/Ipoq՗(aZGGEh$?&ח &dI^&Y/Y_cw` S _.CǶ-16gz;/!Td˖'TsQX%@_r3+*֐Huc0e$!y`Ć gܻļ-Sk|pzay@X8Y.Zf\JQQKbCRͧ HBg:)!l#2BDcy=%2bP!"iSK#k-Ҽh (@>~BT>v!~RtZ~bU\1lCFȾ/0 }lAJ\ЈC%jtMՇCaLܫۏz!T2Z?Z1%!pQjm΋oXpT+[5%r̙ʹ| *1X%Yoz >9Ӟ(q؀`w.n5s~7BAPԋkd}X? )_&|L)ה^WnQzjSE塉~'o}\"j<pu:C^ҸYuU܎<Ѷ\s=X7}8>eC~ \yѽnF,5c4sr5-ݣW{넦2p~u"@OY#i!"CofHU|Keyo'Jyَ ;~ `@άfİg\p>}Vb3]w`t ~,>E!1:a3vm[\ӟhMc†&5:z BFL#6v. ?ߍ5\HFVj}'jt[m o"dT.BX/R#">޾?.fz@ԣI t6s?S }䮎MkATM6Ej -d }dx@C/'/2ۼW0 l?&zl 2ڡޠ'd5R/- Vr*ac0n!N_lXY"0j@0l!$|]Doܠy}l0%w_`^P(240/iAټآ'.,XM;~( mF@5z%UB"):.CX~M!2$/ǑLCVp#Z:%CdˤI%(8Aꀿ :AnI7 JE"ZaB_l֏40֏SD=H([MDR2|OWLtM3MAkӫWj%RzseVi)Ot||<*;\B ra*Z0t `<5t:[OFq0ԗJ8&E"bw}7³9y%>ş*wYȓE6| YN| YSFwݪ㊼nھl+'yʍ|`T@j.0oNtS2؜vi;t sfQJ'sf5@c[k>[ pLI0sSR|^O[Yn[O yxj}P|\Db0N|Cp瘗r$Lss”`P&ǸmpA3X?`4S[cmeDy@nʞFN9*YO 'm: C[:OO0u k{aWX\¹Lܼle`z'`D@߰`[ag(S/a{PS+\s~_G) Sw&x6(5vB=Hٞ(%J)\"^/~e&ae~ibimTznK^šPbcA' .?(0CWߊ>Ԕӌ-/j1Rf+# -02} u,/<{mPQuja`X`.-aBd۰,FF1&J2@v: Yk03-^˞.;PזC%;cR5qnX:d2R),hс{Aiẗ́ZǠ7 F8AzmKOhja(79mc+U-';R3ZKqn[˱\bbO\W=/v 7,AqsKfnb[Í0_i*hvBƍI pS2+b `'5cOO[1٫vQo:| z$zp)Vib/Ks>3'r60vX1CRҚaHWhSyt J3rB\c敩+ Cm,A@?c<9׀$r _Bt_ݢhcMQu3>J5M!IA]IRDФ[xW6 %}k@}X T> r_/0~'XM-8;o=`eLc$-#X.~N:#n7sbV Ji%_(ߙ#aH{&a+s^ ⤔)ܱ33/0r{usܜ[LS9e0=oQ*nTF^NÝ5Ae(F;!նM "̳nP 4{=\{NwMO5(#.6E¼ڟimzK P\%rO7o@+Px|'OQz讱OP}H'䆍O~>R{Fu;цzRwye ľPb?F@KCE?$D ;Ey WO$+/Gkٌ0h@&,J{w$QBuÎ'or/s(n>(سC-@'W6 ~> YGƼ$@řml֝RnW{Dmt##=I?v兰Z y??%z}ZW P'p7pN(*6 nlǒ.͵N$V)Ovd[k[;\F3Ja@.{P/K$:ji*!رIq2FnX{TD[Q*Os||ǐ2T#]g8KQʤN`-, _9[R\EܞϵW2nP ӏD|TF(^p)D1`|j_[pBC)9*Q处DI k^v5A,-L/!Uw-0V{Ω`{? ֕bMvXjO 2׿幍C$bƑ4k$06= nty27\9B FW@~.4N?5%N5aA]ai\b;cwXHrwUkD9ѕ`\žfpo"/1q~O0roG >n H~?"ۥ畾SZv^0 HYDU0h#gmr 2FfGT'ƣKW)*3B$~Y?rptCӏikuؐC]z$Q(1p'^ol2`ټ6Ɔ_(b0Lگ|^iC4PFkCit=#s.}=Aẗ`^/I"6jy"|H-(iR/C53¸\d5Y u1 T'tW:9CG(&E֒-70րd@hhՀ+p IiqPZ>Y+k]ɁěyQExvJDr .tǚ.2R Y\Qj#[{353wΊg=V^j οB;ʁl*":x~W+tțJ I?7*6:m>)ӔuO=7ѾB[cPD]цZO6 >;"7]?~7w0RM ] u [F\Gq10赻u}lkYO"JG ڼ&2ϴc` pk8A8}]Y,#*gu"`۝q>vںC&Յ9n%&6 ^ۀ \P 1tx0W.ϕ= 0Zi慔#;*R–S"G`'Yؐv p*`uy#݉[ 27=Î^O{oYMThSU)n8r Y:*CB踚ݛbcL9NȽ^zDyOn<[(:YOޑÂ9Y6 ]pˢa_-YpXr Ƈt;jNC#= uGg3hE$ڮpȲ"5Q=x #_ՅʔNOn%n:(?2.5mf'EYi #Xzκc&a7&*VGX{ ]( [e6HkKo8FłVʒaR fsa?eߒh1SFz&>43! oա[MΙTbg+X:ПɟlCK6h hR7[އ|:oԊnA>5ٺ2.yĒH]Xǧ\a&`S gs/l i=p_D5+4q -35 F5M{RLӛ&yXK_Fʏf]mƶ*l nՖ*_ IBjq^ҽ# (u-O JJjQS2d V{2Xʌ3ш:eL N4pl^;6HWP6—5Ov%atxJ,`DGȣqнߍuͻg"nD/?yܞF8ĠhQi;jج_Ŗ ]/W[1wm_1u䣻1.o'N+f浯oLc\Pr'\M =2[*B \| olB.9fq򘪂ȷ^ ?ߣ:@A(Q }L0CU:HH-<&@_d_&4Z]1Fœ>)B6Dz6  dς3'G>~v*|4񟡑l2sKVS&JQޏ)1  hN1].?V=,DK/eM6&fwUsvv`<QV$Wҿ %`⡭7Z ;Buh* JKs*ܮHbq;s FqiX?QcU]alt*CED ikuu^In& u-xT`,myIi")ɐ8/ qwvQ*+f=?uјyw/"]e,۪N*sr8,:IHjՊz!c'b_{rQfH%SkiEm8WiHV.:}af֒¹IT,J|Rr~ |TqRF0U~ĪF}{2 /ʸg\tbR@48a;5] GQW`m_5VYT:ޟwUws+sveA> %Z.٧@2gtN{ι$1{#Wrqm'S(R%.~;3{F:,J1`RqzF(Ќ2nj/ u7_urG4zN] }2鼑D2ςK=ylq8&1= $0YpafX(%RLPeGܔggҫR< JR낼BStq "6҉5'2UM#)\lTȂj>~p~9@D7h+;[|{ܫϑzfЫ)jmHE^Cwd#83`>n Ƌ1IGfoՍ9KZ;sY+A)>#oL;~kj&Ac:MBWE의)?4HyP@A,EeVlĪpibV0T-afUZm汙Z:#0d)j}Fw<%}.-mejR:N:^V"~ %7ϘJSjK ,1:*U-ڽ=RA#[q#?.Oa Mu Ibi3~D^.W{_ϫѬ|,< GGeff=-\TJ" ںzXh"|:iavCb UP lWAd7<)3BGtkl8AwO17AQ9H;`} }_Eq֭jo/2Ph7*E2'i_tM80Q`ӥe]wzR0;Y{ ӏFVqu|~C͏`<.'(d@H_ii^OpMj FD}&j Vz4FPԫh a奖(nrRD?+t9ȣi|T| ud]\PNI =׭rۣ;&P];_8-ze#C'maBȈrs߇됊Z:BJOWy?LIDsK4 nK(8-O$mAaY1jk} j^PI଑.^K FoᣋE9 QA>_]]uwҙ=XVa3݆;&4a֗nVvH@zK[8"܌mLim92ЅjcKӢ s.*֩(@Z'!=mh &EቁyPy0rxNwGn>.p'q ,a&2tKsƸ6E=|Ǘ* mW-[me< R椷/wVѢvK #D(B H1nOߔLӁ,Q}&2t0MG`!=;B%!:~Y֘IcQ*{$sK-%b,]/ϻ2ՕE;(Pȷ(cOaG&O(%\tA\2Jd2i\*rETE`.KuVn4HcdgJ+ӿ0D\geOD*2sR|8;bi(Fp~Aa҂H#GarVܪO DIGek|H&;8 1C*8}ƾ"j=;DNkot-kD+΁}ՖQ^WtY`?ܝI;f&I8oɌB36Už%"\su28{L%P+܍vZ-S&1^lL*7"_0"R.]TQK:mUQ8ng5_KQBչM˜h=Q-#?J|m]6 b<Π~QLltE`r%O|nM}HO=QzD& Q'MoϏs$ֹ35#Uz2͇dE &qso# H٨+7\ݵҢ|?5kf'CE/x@6ݧF^XJ6~`=Nsyln{OW0mW}0A}Fx^[?T&1 <2Md %y@xI\{7`r,[!/|A~?c^.-}>o_ ?:V2õ@i>{;_@ۄIxM0:4H;qhӉi̚üm?{id݊~1 ővOqznub?ӸP "oGKD8`yk }'CӅp<,צb6swr;tEyXWmP*jDtMiƦ\1_ "r4ȶ*3=E5n:2qҼQuLj$Nm&wy"Pzdzgi\T^(P-aΗjpWi H_ʎlkm>Qp:tw2gYF3쓄ƭr aS|=IBT?)s-uca4sw}lADK$PEX]٧c+NJp="){[/oYU@N8皖r4'#U>`8i`S˹8k?pPKeSLd y4ί괢7du#a.ƜP2&睧Ÿ_Q|FXU պ+*ґa؜.1:x/cJd_*ob=*rheSYp~2huaY^x.RلX""dsB: uoW1 6;#%8VKIT;z֊8_ ZLP7x^N5~T/qΤ)xl,3F9AG>j`hHϰxampdwnF`F&7{`9@N86p&B 1pY]W|"4+,_(-.5bKT@oV&(bR0 LE$;X0 (c̗zyg&jL]< ?GL=JGlq*0Oք vk\e3g <-ܸ#  xJ7[i/,8Ʃs,rvٷf%O|+[<L+PtFs˫[4uJ఺ódƮ{Mvs%i,O- 63 .q^Qn3Y ⸠*ި͆d|=u5_G`ycpFGr" +ug*!OC Il >f@ͭ e3E>0BsZ%j14bOj)\me@X{Z,*[M,8eY)6gc<߂yvt vyD_XD&H;' _6&DT+Š %o;JbTLYV?>/O}N5qC(;U 7&b ;tAsRAr->^U(ߓ^0zcʍ%7 M& D%y' 6FAS4`%~~YR?P~U>:]F Ig$15q&,/nCqBAhdBJow*0KYhs%&?.DR`/9~,јEYg{x떔z-1lTt?*ݾD.7tZVS-BFW$v .aA pddmrL\4V]cQWéI|)ˤف#] R N2~gnyL2d-u5*HsU9)ShK,ȟ9vl7cGGFsl0zza$bK(g@X$Luhў |J4qxK&픧]Id:<Yc;4pT:\}1!ʹُ[k)Y!7)~̗tu%fov͞XR eMb]*AU > ̀۩hPdճ. k}ɆXF~`'5a30yssIe}|2<:6_[{FdNM(C:nPd`$ Y$s+ѿʗH*{2Dx^5Dֳ(uld WQ& dYcXaȏa CZC" ɮrx^ Xu1"CעzA+nZ*h7)gM.& E; &H3$ծ`871ڣql8mG#yf`2^oiq?XA_-c`A0 $c{QCl..|ɣ\VЭD8gHOa1`׾n w#cu5w6;yg(c󆕓v30~i'ۨ})K ̗Uzֶ%4ib0" i*\n.k@ $I 톽u\'E?OѴ޷ֳlEМ`סW2a)M\$d R Ɩd7W+d" 4Y4cе_nߟ{yGy>g#Ygr|i%he F5iw'"*G5a 3So ڂq̳J C1hEN!˛2r˝-8.|,Я$|^vVvR od>O#*)SYg;EHC ƝTi롆ʜSUxuoWR'k <}SS&,g峔?F|*&op&?Mbs&-lA/ hLlXN7;K.W@H]䘣R`عMfƕ0C [ 4N9HTxqrW\@)7|I#2!b}CfȞ89^Kڥ L7z'=[^5? _F~oޗtξΛ(p5Ww\*\~Q5rU他uյ0t?9TG}"!Éӎq t\eWO~.9vADC4鄺)YCc=2$u}#F͟aGSfq)<@2-5ɊfmbƸ(n}at4b78Ԕa`κ\燃KiY,9wdfZՑ~}vn xPq@vEc2zP!p0|g(p0[r MC{^+*64YT`Qea@PD,Aa+sD]Gt/B ?efYGU+H'b6Vbin>(4ȹdłp'fw`AJ7.ʩHڿhsa6MTҺ2TR5ouoILE\tC1P.V+۴@\,sɪLzjK: (Q3+Z!Ǐ/*)3A5ު? tՎ\R!5 8$;wB܌IֆoD15B#7ü:Hʄ!(6 Q:D!ROf@\7NއOrdw-0$pyPyzfZ'|!"]aĴx:\߻ly#oxRo}'lڏ0182$Z.QA[k{RgM\甄I]}l?|ॅȟlo56H\' u+ZPڙ0k$ [@ΖHkTH)Տ\my ٿz &EO ,pr'\a;>k^95.9/iE}-.:'Y04/kk;`pj 4(f|/@,Ǐ H5^& ^(1h }@=,j21b#FJz:Y&PĊfҜ.}T#^2*&Nk:;SuЛdwIҤiMV;$Q,iɄڋ}V,z(R/ #q3̋$ˆR9{їMDDIݘq-:$6þ MsS?UI3GDoa0'F+8rؚ6 v Ki ȍk^T^OV%G3q<̕A#.NA8W23Գ4h1qS9Ni˸> RK La˗/Ωm'g7ѯ W$h%: #eA&3`Gx֑MS/d#u񏁁!uXp잶eI\XI7CeWķўY(^x5v.>o' ʃ6j% )?UVmACaqY_%iη% 7U/hiɜˆ~4K:(Muf=b~YgL{!x2ޫ\U=8|z[&A¡| U@& Uga^N<9'Ȕ/no> |,.S}3BO}iIS$TkYi]feM%㴅AP&9NBAWr[Kr]跑5䖍e)wwqym=jvnX)ݘғ1`\jj'g;nfuN@[:ZYČS~b%yT/mX~ȣaJ:_]Io$!_2<(UMnDݔk^H}s_MKFJ˔) Г>`1q&R Y5xOdwm|d\{ ILC'# y]U#gUhrM0i 9v5TSBظf̢Ȩ *GYFCochd=0A J_lhGb{=ܬ$Z<ߣ([,C+9K]!CcCmk[S_")eV"t7=j㩻ԩRMl] eB[z~MLPjaLgpDSJj3n ޭ%dpS QA[\spu٣{d ͺT&0JɌBM{ f2 ݡFhNQi!V7`!t_82qH릙Tѓ>yTֈ {mѸ@ÈP[N &B~_9o*7#6UdEK\>KsUP}X?Pċtjz0Xq*6I_ng G|mt"~XH:UT*KVN^hR’y⿦lzTީؕI+DQ¸,x E`'k*EHl7k""AKu^?A.ɔڙ\-,:/P;0>tmP~0ՆKfWFD<ۓ7 }WV [ i| lFI^<+i֟-ZkWzԓYnB3Pf-#;dʷa3oZߢʼBH5Z"ȝ8Bբm*XS~rV 'SJ,| 9gt3Ο й%UZjmD Ox?xZG9PJ̷ĸ%!FjCfdIP dZT `Ѯ.^,iw+vGnT?ir,מ򐯃=;W#[}M3 >h]ϙF s[(LzȉMh]$˪vAq7F=3Cqgj J I1̻X Ep*)f@.ʥˉ.@'T"z̴+>'Q w~t}T -?"{a0c=skAj-K)޼IE%wfe zGU0GTtgy|,L g1bUj 1HŚyi?~?~CUb >)s:J!s(|.I}1!@M&Ku&!!  ^ap k(u;GAꅂҪnb`ؒ@ &g/8-~?H]YP҆T3XGpd9(vj4_OrЇv8F-er6*; .].^%$DvtXF1F_2Ʋpл~&6czDٴ9`"$~u̼ۢpZIuщR(p2GTCGy+6>_sq0lReb@k]e\`0NCV!yB i"\1v{%]z{\Bnw IoX}YPB vEIsN>12$z' Z^hA/Fڈhmk # -xoRv}S̸VmÍwI|1XHz>;͑ΥWlG&Ѹ&;v+XÍ`3)'1˱֍gDr7AI; {¤xb햞op=d҂ :@[~*:/7Y6cFo/`˪&=Xed XHUl"vt."&'ygQT8 Otut%.)rק`a^Qn`HQ$|6uY`ëǁjx'/:X"WY0=9P,7w+XtИs@|:H@T_qտaLU|q}jƣT5Eő"g'M02}nd۳&ƃ(׍gk6K]ݫ[39A8wg -EEΌ\Wy}B$&!WNB- !#,J5n:}YEc?mLg=X:bpI8GI".߸_!WC=z5dSf>7 xS*-y!'<}gh"BDo]ًTȿNJ:~I8Dɓtl|ʠtyT(0YrKjF#xcI[ǪA/ꄀ|&,?cAҾJa~ B1B~E&23I&8G_vY%yAq7yemw;hҠZ@2uwu7X.ngCŖP<.4I)RZ*+^p |YXB4}̯Xx3^3weU҈I'U`ȣ:-jJz=^!4Iţ;C,hSa+nMxr?עSӮ$9WY=|y^%tFő3[gKB @ǓI.A5GNErUv0EC {K<du[;0R&~P\ua=b˭|#$ k" +8XgTMs| JT^=~sU|Wk4yi,']Dd΅zyȭ5r]QבNʄ}q lRvyg +)f-JrРWpRr=65!6qsTً޽oyUrT[>szNpTY_.b>7ejbiی8 >_ls }Ш +ůICԒ}tc)<|A&^KbfТ 샵Cc}p-8}Nvboo @уdÉ}EAfoĢFEH l`1 ^IKw~VFmR Ϗe#S K$6"E)1yp3h%،=c{,Q"GO#.k䆟CQsQ_9E=j(NǑ+K9[s.q5}a'~4lHkxr\d^ޱ4b+17TW9 N7=)"fWjӜxlTXwZ:b%o*9iLfy. Hed1Խ.Y>dže]z҈<)(MƲ4{E\X5@Urgda&VB0[fwKlWM9g-1;zʪNd?z9ٻ9{_c}P\vS<Sb[\1L*"<4pK4+8&X9-F[_rn3HJ=Ě2m&!koo6.I<ԹxzHWpߠyxMo&']bG1^ t5b3V Mi_q,W"D@}.&gWU[dh qpYjW7G}5r-ZHR\W@u:llB5/]'x&X-9V]wM\88&PTwha<%* r7\J6xWt\a.K(J}xPfh>luQ%,H c %X7?.02GӠ398@k+z9i ST@ 9}1XeP9t]>/nϤ8KjWvWT#,4C(x8DLX[ŭuOHt<:SO}.bs:eWu'rHڷw*3'jp9-;\*@+ΤݞD+<J,?[tHsE/ [HHNJ:f8-CoĤaeRXMFԫ ~^߂ L~\mCHeޣ_4؝hЮ25F~4z $>)쉎R7<>[Zr]:&2&8o\־$|J$®5Y7\GSD/ArYG n+H@muj˥<~и /^5frw \d1JevRFYfT;$"vodYmX$2\mj0c FR9AcC-cKuA6Q&<)<5)0 ٲBm&Gvz\+׵Br\(W$ 㿬_AR&eخp7`7\ $H'PIsqw l2` &j4JyF4u8օ#\}wh%Zp <4f8!u0_o׈DgEfVB! B3%ɄN֭J bm,Xz9o}HǼђK\ #ٖEbЧ>8(qo1F*޸ВUmo.'\>$Z$2^vB?VSg/|˜s٤E89+ƼI$K~a iwz;i;7s0SeFL2dMdȞm Yp-OϨ$6W+?|'[B@*Senn@19Mq&Ee1cQ Ёj#A+?ExCL.g F 8E}ᄔ nfGEQ|8$|)#fC$<!]5q ]! x}Fb(U5NZTh)SwkdɱʣMV2čdjjvn{Q|s#؞lPK@k~)>纆mlOb/=XG;;F~+{0|c"M\H0FӜslXXsdROR1?&^,t\$ WS GD|*l6믛70S,Ө[9'T4L4&+׸xUkg$3j[ Z" ^]vkPdC*'V~Nxkm̠b,󸭛'Z6pppQג #&?ZAEZ&J6Ex)vo~f:}7̃ >yIZ:|AJ0mk]˦9-}WsNLɪ-KtvTf)ogӢ_;Uשz<+oCtdks2@P=,ay/8 "hTE6y[kSY%[(BLFB8B9+A aӦY:OiqG3_1_<um!RvXShO5hs2|ytY%ÊbJCb$ÀEwr 20L:$.ŘLᰆQ١ފjU*Ic@nx?̓dA.4),wi 5¹B-gj9 L J7T>#qZFvTt0uQ(~8g% 0VJ^CjJ#l&ń) 鲇AF$F~?+䬂K; >%iW/C&@d@ z]kՀafQsHG 5YKkzUB@.<~W-3|gitPHJL\ф̓& ѹb{/rgưggi`m/"Eބ;y׎fL2%F6[b;S,S^b: 1hVm:=㾝YOBnyate|В1ƜBe1D%7! d8;"IS:C\<՛ >(SOVhNqAJfN{FjV=r۱2LlOF,0W@1K.ƴYL5__N5 CaKi5 `z)#p! .t24;S4j] eUIgT 9zͷ| K4Z&93v-+.m=NC܄,eߞgSXͽQ(D70r׌$:ܚ.uQC_-K,.6"ړ97zQZ,uitGh?CeJo=1lrTZrU" d")t7!YZv /ҩӍ! 93@4lcF6 {At|d2mVG>VE fZfP5ltY>o'>x${HC;*[3^s7^"Wa}ӿA ˣrLU'/r)fhǷ3_1j~+ RC-\61oҥ37Lj u^#!o Ii—eM ^X8?=I|JHx16`n2d[܏iQ LE*bX~xį_ ~5SpL||L#&vuD&}>7't[tkV2CRtIgC.B|taW<2Lݳ;>#pzt~Q -P.EK˜:9n?6r=;*$u<ZTzjj~ДB@y"wOcFF"BAE m-Yun{H$հ=,5ՄgyX CdX zFnh~9zU-HYw'YG>@N,\ELԙlZ4FKLt\ݴ(ߠKaZRYĝ yɿ#{@rω'fPP3NI u{Ek H.ur֮&7ׁޔQ+<ݭ}J}1yqHdTcbh%[ߧ 5:&~*5?.TĠ7zJez7]?HҡQ m~) P,؁T~ֹPG.̖O()+tiAƈc"IR- Y|s)9V(d<BQ]=M' UGSjv[_KEg0leYufcA\%{J{*PwU}0'>,1oqڐ~kVH+43ae } 77,md͈ìVDiq{KV ׇ.ۧ]x1ϒuWOC&=Ce^FdQ2QG*pNPJܰ3{D[6k!hT6j!4ٲJĸ0'&(R6,~,~_.%H礝Mu.*O'c8p&%:#pFO<-jEFH(c4}ϙN|>~i|B̬("U{٘4)x;UÅ %䃜s"xkJRaK!V)"N2dvT%hyucYNfilo˶gQLF Z_oKȝ.b :H kդჶ>Vif0I$BzXAá]O hC;(>zU4+#H @XF6~lJ=!NZ_ sgM\>YzJf򹲏(?*!`sJFZ4K+@x6EPPG܌J?!G^'d܅.h^M+HI5.$}1+Je'iCw⨜`S˾DFVzO4f.wŰ`p\b"+|rt U[4&_SA R"L d]U0O[f2ӈX.trFZ݀ƹ7mջ^@䶕J4+3/Hk_j6FAhv\33-U049j<*YV:VXrn-QIZz. 'kc_"Y/;갖Ӟ$Zp}rϓ H/5͹?F4O f+g*w;U/`z% MwB -Z<`7)oc)p9_ 㪡~cv!EYX'psl>f$w{LsHw1y/,`J3@=glsKPw;stVX팽4>Tl7¹) B|gаjpII?{l}(`*_v(}G~r ]"6.~ί/fr|i豯E9ij,XT*ݷ>aPJŀ"a'rۄAMܑ+rגSZN#Z;[]RcNpmmF!ɀXMK]nk 畕 =k%1rr^Uڸ@:SiiP޾(Y.R{>r brjMe,>d7u['iq=Nٛ+K4=ăSJs #[>wIE1 ǀْ}TSҨ]o~} }7xW8l]%r_q?P٪YtLHx3QX2MPYQdJvDs|s!٥ћS(0A-bp\`?qf|W6(sQ*IЫZc0YG+֬z`X_&NGpe^4j`6qPS;須X5Q.ӷ;]60淘Ǟjy2H%z9& 'jդ+/kIԞ%:JzclEtOo>{]<*RD[2nbuai:7O45S(Sl7ۓL(!zkǽoB]{lZsN|<&=ӦMhty{mj3'oIxvCv5{ CEaTG9hA3VDv*)o#kGyL.u*L -͢"> }$wf|AKM8UY;lXiKcB\%sڷ^6yW|su705֔D^ʸw晞 =Ep^'GSO(xWH՞8yw3V;#]qÖrΓ}<8>p\LDN "˨Qhs#ZV6Ls5fWRtf*WO;gCAE g/4=B{TEm=yp/w ɖl2Shܣtu77R'Kˡ*tXJB *yTiFXnTlP:Ѭb t Rp8{5TJZߨ%,SX(+6_$wFS}j#Ic;GB6nZvF '#'οiѸZ 68JM22#/#3H&Qv^{L!r c7v5jpK巪&pX|L= @<`p%HN vY  A-3r #/O(|YI?"}LB =`B`6Vx\ W-_ˉ2~svL fNdyUR]𙇼~D{ ԧb0g!m-::iFQ/u԰VZeS6"J`Ϟ4J|U2Ѐ^㄄)DpTB2›qGPSpۄr*߸b2]37km]` lt$u;-A7g7|Ÿ&5oHN)x{'uf]kؖ829D=2#mX^,ƪ8:D0PF"`I8(_yd(m֘4>"SrZˁwvSt4ҕeJͷ٥;K0XGp4n1I:s0d Tp?Bʡ)4Ǭ[i`{ "^83|\L`jtBh.kqSƙRzD0™nH{3 Q WunCi L3Mʃ {tG6jS,esY-cB*i#t4n;[YCڽq{՛ =c*\r!MSN(cNcN'%sF aCݵ:Kct."@2 6p9/wNkhP ӎ.gf-rǔ"ӆyAe)VQ >TdJx'ќVf0b.Hv!}'|"F^  $WH0^S-ܷ'܌Q]WK˓k yj-3xVt!ʶh@l G\%1brq 总c\CHOxFn64>y!!G96d M<-`13HhcI05?( \94P݊K+MbC2C# LO~:?5mi}MH,OsX_UP@so2{(T>Jk0j9Ǹ7^W*=ͻӖc?*z:[xCHkdEF"2js2&j?Dž(3oq 5*52Iώy8Hh51GT z\/)KmXTG= $Mf,&h)0oJJCQe>akb&o {BABq&!G"5F?FMB4#*)t?[^i] ~ܷ#s=56$_LR7;F65`N2u٨wfs` +u 䧒}"$\߃=6!9@'#-Qj[rISWLuU M0f!-ȆpsjJMS0-Ǐͱ &Iz~J XrR}4$R(ߒqլ1ޤ-4Z4-`^,n- pψG.h!Dx%8vx3ߴ؛q&M"':ͦR q;zhX5ŜSbT._z× W`wv宠cl'%&aQ'ئ3Eǃf huFˇKHw |Pɶy,(nWa{j'yZю C7#Nݭjj3ej>2-M!4OcPg_oXz 86qԉ#Mh:4 l듳P0'$n{'d7^` }H\! $YƛbM4II5foY~m:zSFY|e T9Qz ,pfUz xHĸķ^rׇri{6;y. 1QNKpMRt^da8Է>.5MP*ۀR'`=xJX{BFQw61Bu&Sb?pwSl;rXފI<~}#O&Zzy<OǛ82r곁ފ9ֲ kf)dgVy48ͳN&%5T P0b~B~ S} _tkNw>7ؖBcTf  VG*^7QǹRql&ZKcv vQA MV|/53})Lԁ6Eusc3W<>cC.JnX!uW[ϪyŽ7go3k#0CjC\< &HgLڼaĦEKٻ BB Z~!^y22+&L:mݶAwPCA_))g7sBwz +N#h <(Ԉ,Y5Nv ! a"3iJ`/j!v5&Afۙn)_s&eYkφ;Ϋ.փΰ8ȣ(N+ 9( gM/7ڈ fq3%`M_浰X\elUju\jHT'nhO'!ӓ]?EhjFǰ7cJO+iӧ$r/LX>Qs}aqC/̃]8:#AQfrd v+ubXS]<~ EQAn_,T)D e$rgppKR͡kQu|BpR46UdJ̤ P!B#uڸoEsVSPdԬL]V}XHgYZYdmΛdFL-+_x8{I֮A3}ֶ"O *P`ಥG0J$BJ'!0XED^%0*Հr٭ ucSgU׻j\uì2y$R1]|?;:@5B_>ȆKb]w,6-+'UT M_!/s7lm :fbpP$"C鑛 _K&M5v2+hBV7il48Jt=ns NPOf8YG_$ [4T.6FXoYᮐz j6O ^?˥@ף~%4C67%:W+bOZnqؼo2;,nzw32(d܌Ӻ xzgw.,R{'H{%F<g02k ߰䨱Pnz %`VN3c i6hkl1pYCtz`, HC A]q/4}^9X$&N^N5ژ)T^QlLrj9?hu콳ZUVOTsm^rBmڽUrUVOs`@P[/SJZV;`NϠ,Z:W[flrjϵ9S[`%[m ؄ LJˊ*U/37fi(SҗpFΩy,ƒK7WҜ@_i)Np]"t=biIR%s-tFN`S-<̛:b !~xS>Cr EPEB)|hy@qQ2L{h^^{Jl׎0/(MgzPTl JA]kjQc0 )-K< ҹRI0f99n2 !'~diI9bG|-Z^lN ( s'͵_ pomsuS:xjag> NKJJB0 JDݺc>_ P`+}LiEhITA,7?QF"Y[W^U(,$ WU֩磨E,cjcYht= }$G3 M]ve$ZaQ@}_?<}/p tMR PycM,i2: =pO"3R~{^9=R+NnZ%]H-~&'f% &2&۷%PCLژx:0llM݅ӹ-3] Dto NJ>Py`7ܢ0̩W 9]Di~ߣjhEަh{s͝t{hѯpD A -+v#ԆFV _?I)L*j(֙NrKΊ~xa1GF,{gqlNXcL,MOLR/4i ("tRƲz0yY8;]GcqZ?7-n=׬'D{;fM)=)V;L'ᷢe}!]E$}Z# wOBNK<&86P DlQbaȋ)ь oM&M᮶u1hE}ws΁0:=u) (a+j<ǔ ^(Sj38Xn5( ABi=X!M1TUؾ.f8Q멊F ^rJUF%[zSaI72@uZ ;=)]d $0\Py6lH)̜i8#- -]vgаyKQH-Ȁv2iݳs&ZAQ!Y;r I?)|}zލP}Zl?վ/NlZÖ.|~аzn_ze(ܚ)SP=~i:R#i1YOQ/6;Z'XB|x ҠnMW6 1 +V28(nD50A,55$4Rl7sEdx$7hDYJT2~.8`)KplmctX%ܯ}8bMV KB2e֐p {(Jmj:Ozh.wYPv4oblFK ,C.Z>RL$c іJ[c>H-dfn)4J|zuXYjLo`h3{ p%5U&~rW)W+SW ~vlbLΪqBLEbwQ}qfwNLjjPG7fBk}R՛@ EG_ZΤqQ)cN7"4"HosPwWm 1mK :1A3W>y0\NYN"<;ߠ02YAoKk3ܲǂ*˳ЬЮ$;2mk4 &[Bz=. ~1p|7 .kxXgs%%t#whV`rNunb}^S&1}nX*}NE`㎵)7 a.ս,Ht3i5%ϰDrPLN^Ez ZrLB]E^5KdZ?ǽYuF17C!4d͊~;?Z)z!9(r`05TCVq{ L,# hYZn0}x#3~2M-G/ yƯ\'\6>qG}Ak3DxmyDEhqlHՃAڅ] {SXAR IQb.sAy5Yw|iZZGБS &z E#Кk0_CR"tncGJu D~t?YH*% c q#>+SdE[AYӶz_G֥ƣ(/uc] "wYER`D4& mcE`Q˓,`yw\-aȁIH FTi p)n R=ݝ`6H48 ~tPNP-1}QtNcmŖ{@ LLDf(0ۛ*b3掽KRZ_dŠə}tu3> |}ɓe11>|kUk7B/{.,ݏգ$:h_ vKR,di_se@ Go`=K>o-M PFݽz`Wei.V߯bV\?le ܗ)ڏ'|FÙ{[Kő5rį!׳܎0t4j4 W#qFVT(jk\(RTO{| Ǜ ;I!*3 Bav Mԉzs &ZKĆ,t ١ic{>(ش!3sg>pꙤO'-ʠM|JLK[|hJ }쾽oCشO8510 1eojDE y T ;9jxT&Gٶ۰CGklh!ſT)[|Rd}..A=0OVW$8;ouhPPmձ YfTiD$mX>9F䉼^X'Z#܃8\(->c(D0wS UC` 'q1JŲtdVZ0 @zKIz+'#~7h\TȆTnZ 5,c~bG)@ܐ0NtwAo !f .ҨxiR amnV'M{%toR?r Ǖ@)/e9*l\2LsXw~lp3fq٢q.W 7GQ*NL Wb+oLce(nQezڤ}yrMАkopW3M!,E[Y-=Mn }ս)iI)()xQ&m NPT>m$R?$7bƛ˨;p̰d(0g߾}ť]sc׍'*ivdKFXMgmOYSt=[Qc+eXʌRY 7v\50|zco(-pl-#dnUzztv:sZ^˳]s9}6hlؘcDSLV(G1 jɇ)^ȁah@`_ZfQeAL;v;P,q] '(qnLtq(E1Kb! =VXA gmpcI+N$-s޵IfgE?0p1 Smz#aѪ*%n+mI!eEI0DY.OrD}CNF/C3ȩ8 nϰ^7 Ny}=l9tVol}'$)s`fRq<+&%ʟޚXΘ˟>oȂ}yRW W tGڎ"yeJH@}iSWZI}t5+Q}x͎P{{xE.?Gܬ52lk^Xi4 +wh%yits_@9$r HĞd_iwk^:b]Ge}+H%e+}d-XʝoRQ=hZehj2ɔ("8̾:zXMs|%`Z2",~7)8Wn>n[|`$3'fQ77US\J D.nD)grܼ^F4H)G%2 &l W`Ҁܷ(=}Q"4nܺc;d0d}~pB4퍕Km75)ЪROJZp*2%G?>2|uj42e:^B8 :}4.ϫZ |Sjwǃ_{>9RH*c@PhmP<<NO,٤̋,Ra$lTdƎ@) C$mC^+ gWƁM<0dpDJW@ B!h O1F!R68Nh;g Y2cЎmd/B& ?܆/_Ɂׇ{AN_(W}15Zr-/&u^ẗ́^Z,V+8yk/xe#`Na% X-g_D.D:ݖֽ.T;l翱_R(RcQm=o󱮒9`M!Vޗ6d5nf/8  }2N4 ʎ;~2(kksz"2Zw-" #é@ޠ72kւ\6MY9k+ },)\NC:H]4̲;HCs ;d,Ϟ1dm"Qy[ނߖAi'[$#D6ňdϸ{;A2Ųp (1ބu ,ECeo]H:Zo-jZU&ǥUnT wnvfm,qk0N-T1 q @Tp告>E*VȖ;_̦r|aYp>E3qLQ(N<=R[#aC3(un&Sk|QNtҬ[)pgvO1#i{Pct.HM9@!Uۺsy>!M}0 PaodڿtF1Ź4݌#qWxLM?Lz!0AdqU$jr6H R6~̕Mi'xuCXOYSA'@ Kˇr6e>:Wu~5mzim*|UӈLUۏNotVG_- AgM% bmg~g-Ԃnb,a%~ٛhEu֘.F%?A_6xZuyeG q9Ai ]ճkC`rR.$-`=1L ~f2qw/sD\p!{y7x#/M-r(Neh؞fǒyOOm;m[yݕ/!ڕ?7:`a:.~sU'o ENoi~Jw$;T*9i"6)PE[^G)!SYiWS:vz?}}/y޷ijz?ڦCnszCH%%8XUt :3Cby*wWiO'ct{Op>lёk< ݋{Gz#ŪݫEGme,7G_o+8>̈́E'&/?($gZ3y%PVwTˠv(yTd(!x0;;L?JQG Qte0v7/ Orr}ğ+A48Ѝ#Ƣ "6krN++y-*`{cwjMfs'A~hz=MH@ossH}U<:AUxE<[yɕz48p 7E-C# jLNMs'}tP_Dl3a7^Ҟ͗ :=QI"= _EDlK>442e;!3.CbuGe?ĺɠׁ.&!19ƺ" c1+G=pD\0iV,پ_\~cDZ,_FƆw4g Fl`a./z˼ .k~zB9[57א*,dO hj7 / ԹnIo(^\LOwBxL ij}a9/D)9ûW U5Zf.ÁqM9HOO5ؘ7z"ӕ_\@%, i8Y ?@!:8!쎱"CZ E{pc=o{@,.䀆lҒdqW K!uiH"\ge [JB{YoJ+?^UVͳ/ @=Ommڃ>r=/0z r`A&O1, _ss Whշ`(rp0.غss*t}ugEM~_^gBvv4| |FI s]9Qf[=֔t'c81Z&p·aEm27_5^:|d./"K$:#h<ފg r_2ȲaB=fÄnSӥxH|'~@%%"~]T~zNKA6%ފt(Ú,?5 s+|=4. /C_٤|֛@Gi5+>5|tnX_l̓ '迺3Ps5?7n p(ץ*r&Z i deZNJrbg[K`p_icrC St [mpi Exo&88,t)&ο9)d) %"Iv+)=xm!qDzDCDQo΂y)ҴT@K~Wuk^_"߿AA;ctJ{Yrmk?u|s *&'LvJuw52ž2$V~!x nQ mD֊/\dxwKj* ƁVELK?ݨk1rCU[sc41_+P_|#i5DSܸ5鿲 "kCw# $U':9gDi`@}*Ta)$(wXw/D(7M66Рi c𪜹FvsOѧ@MrZ&(":-}lrftW>B~Nϩ,zA a#aXW$H<(HhGUB*,(S2\NZ`wEwtm?!L*Ul>Ƕђڑ t;< f ً ˕U:||qWtH$#7DGJ!W>ѳVry y_NID, c9PWI8A'-*LisVutǧ0b v#_NƉlT^5CxqF3Y @oBWkiꅔ0mI}Jd"zVe fU+4:ͪyxS,ts(|%TN >MX&l~rK?Ii?EO~0y_35+n r7rfxG[ȅXVEwaw r%5M^udRC,jD R<7/!3ۢG9;@iSNVYHSOU1i!0}7퀽)kIz&tf:IO_9Iz\̘X@ U'j]!$]&Â!zI% wCvGѝÒdQs_J,O\) /Ud%sҏ+"M .LZQqM"Y @Em%`5D,QXvl|l!V4ːӽ1Xy'Lj1)]vcf`&q\+*?p*H7rj.*9: kUB su  .Bv*MHG<0O>Ft 96z1.~VVl0*K !x̍6^F7~Ck;UaG<ٙ Qϫa+7W|ɼKMVOHLoi)^P~~ D}eQתw*}?R DqAƚn8}>/8@{E½LY/6KMmA[Nk\/Ri'^[(FL:1ڄI艄츰`&~$b1adaDb/xc3$1ahvm-6 dwZ8,{sV˘+UB~~;@}2 ytՇedu 3F,w _bHz|JlF'ܼ)F臠_^ ᅥx*sdqO@&tSx[&.Vb҉/FF0¼ǐuN_rA]-sQwGK |})J/qgDp[,$SXڞچ8~&n`DϜGXC˿sɈpԞ{ !o)wNEa .+ &Iges\vu\Vbmc1c#mţ7GFg{_Ó4w!o ٽ+ smMGWOZtYR#~Z@g+@vZ٢@ɟwj (.v_|| Md}EӐiV`KԆ2`wXݠm{=OOui)K s|Ua*]$x|~$9W[h"E9DVlW C0YMhQ^7R۶JWD![<~\:W:[H hmed?܀b*QN546?ӔnAlj KD$5P^繑% yKŹD3RwvZZUp꽦bWֵ[SQ'L5'~HˆNf޻Nuyh2~~`Z@$̴N#ƔP-&SE9 K'"5A5>6i燠.FfX!-q!Lv 'x*Ѵ䨡?_WØ;~"L%;/ƪrXVu#9oFq n *ݰO0n䤅@I-:*1#|1م+|'1[*ބKoZI0Q v幐zMtUH~P@Z, Ά.-¹)8-':zE fJ Yd~F+ q0J]~':ܧ`ZY.,8@/@,~ H YOls/{h ]<<4p.|P͵ 7=l*Bo?"oF3 Pn)Wp< פS!aӎ8y ?AVcj0t+,bORX|u˱Ӧaes3ŏp='J% _YSbu7} ŵRN&ݸgyqWv7p;|WNcnArC}!Mn*c90OSUY^zT kwc⵩}DnL=QU5pˏA2Z#K+\ J|QKy[^e]jz狒$t#]$M \ 4 8|羗DRd%y'^]+:RdL+)MhMߖrgtO\:8V*{恢7]'a,$F6M4QWl(d E< N$D'LR-[c;ZmtR:\ ':HWp=ݚMچu35~a.e;dnOz*nq1?-`J˖szXc&ъ"< 'XVL)0\Z#t *ړaUNΐ\;+XS+L&*^*v]~_uSܲ1XIu#ҩF Uc XFKs126T kjV swff& ;o+H.~j@ NXiZy5wﭱ* oeoTB;"M&'w%I^  V׮dIlI 4X^bӢTTU 6U:?&!T’[1h\8v>NX|h$jLyD44֙臨V[ҫ^ (;XWO,K͎ˮnMCx6BeBuw"jq.973Mr0:xunj^AZ$>C դ]>/:OU0yVaʸ8HHE]uK%+DAO hEW5.ʅ ᲼HFГ jO 1d\at (}5&D3Ń?!7?(gƒl\CojQCC*~ Y\y (kCW'PP== IN[*LKL$lnX!7eUn9*x)l탮]߻ְIMI[/l9냒DqjO$8~ksz;ҁf9xԜqFV%&~pY,+'GdOd@8Jqe9T2QUA#ī|{Q ,{59ԅ@_VădsEnu!"JU|v`5JAq&"<tʐAzEy̜$6kJ C~w "@yc:.]n9V>(,".l(ly%^ ⇳epA~ ]  8a8c><<j<ΰ&S9?,ıχ1Ϧ\ 覉ws6KЦkL wx?i M)l+onz=[e=;" ЫXΌA6=mez%\TaP$:EYfWdցXz }[ }ELԊZgg /#5Mg͘\͠M ۆ6$uHrr"S\f'ĖHIkT_l;>J=L5<#܂+6mxk<6|?_ȉȩ 筘ѓ]1t?$W{` mBq}YP˿1ֿ!H6\Rp~U;[zM@ JBoI^H(DSb7Z[/@ZA. OEN\i^[ t &4=H7#%\S Vb6N|wr}hnMyf@#KeRӼ vփfR.7ibsIVPRb_˜Xq+ůvF>zgyh#3EW?cABOH u Cw4de)PG/K ?tnTmȞ627E;TkcAsnR5DY?^HׯPv,?])E(}G7|yq砮J:+ݮwjz*cL2QCO6sbHmB28ae|R쓤*Yku$9ݼ|h0֤t\Xdd]YJ:o,)B'j *9PYY\tR!@eݸ%l`,=K+4IDvKIz[9+SuS ȅ:hˤ/u6f̍=.f( tgLkkځV9&+ 9 1KcfkpI뒸YeOmlD)9~ ^ē,;@`NUX0^vC7{cHp+v~."a@˖| '*/5O6D _i6 ʳ ?],.w 2&s/OAMǠV _1NN*KUE:{$0ۍrgJ*60c,B|5̇X+}M){%YVWq;BՓdI"Y͗W}t6V?[]S7lW=BC+|l4 q9Ň1PfyBkH¾H0 >)PÈ;W, hsؔ}8e 9|cӼy1)h\''$RHpbKyCT~Uk ̓$P'}dbᆴ8nIfܛl *>y_A5"KxH3LP֐K}"RوL\[;HBmlk.\.ht6aRǖfA",Mf[tYȊhmt)/m+;V5(^sjxh 1 +ϷH1((^/oJhz7܁6i۝>cu;/_ȤryQLilq- y_rA}-xd63sMC=3k80 }k2J~MCM^0![,'KR0fO~ຍI)abA^,Lc 82U[Z?h|ǒR{.xy"$[TУNCZ!BdMM+r0z$*Y0>-ܶ\|}bii_/GE3w=iY3)յq99ٝ'|n#ħVHttc G,?rGJ%ȊN~^*%7#`Eb{ T5paNR_ee B"-qY).Q5U<6~ED bw[^frJ^5 xk01A!T0;-?뿴REj>K+ BrtPT#тlpບ̴iLWn0Yx/$[-@3 ޒq+zK BwsRHmC5ۓ*El0@9NHP-n&I%nlwbk\B[ ƻ)|ʋD ?L7TQu }̳&[~ض1k!l5=G)iSų)91+;S,;u~!QzE O;aذ?;7=!X6 t!l^Dx$24∴*F&3(x&0[S2[c{P@sWxWG'Φ0|S_MDߤ1(ɠ,)ef]ɅØBUͷy|:h$MLHF0&GdH]p:г_zf_pRPW/"f]䮟H*4k5I\lJ?@ȗ;a3hMo+)Csz!Tc˼_G?mzB݂. /+C"&17' A&6ң]7utI4^X5T:b/D Ww8]ܹ l:1"H)#:k1ocb ;u<%Z^)%TMle| B7LEGIOP#ȽALmRвԍ hXM(F.^64!~:sa&y$K/05ķ>|Dzc"/˖qZ wJ[G'DuƙtL@pZBT]zҳ4P?݊jO ӦnY+ sq9\!KςץZ7$mA֚ӳ.5 '8wh fHatF#iVcU @DzfGqL8 ~kT%ۤSxtHDePtC?_buc{-Wddkxp+t/@۟}e;獿 ]<{Cu6kJrP-J\13 ;YvO$ UEJxFTnTB3)#_VavlVpР^3K(?XhSfA{gYEפQ s?EtW@ aYW5 )ʢKWC߭/2 5w W|Z`[oܙK0Ø',V|ԗT=N-Oo! ۊn=xh7w.6RWiVUlUo o H{l5>ae}q r&^];4Ǿ֡u.rHq }:0 $jVzO-YRHjog_VgooB7EֻޣET @5F⏧5=sۃФ"P?St^oKN3O jsA,Q35!z8RgN"pv821 97vKѤ޵yڰDjP?S@'h/ޯ.%kZ@e y:2gro˜fl=RBG[JorbHD27GyGf\37g\LzZH2Ds~|eva?ܙO.={޵9{Ò Cy]8 ;\?Lj^E*p#S[ET35 ;V:a CA*}*GeSǿ.QIwtТЫlbօ0pծ >мW,#oȶ<ߥʆlh2j\~ 5"8P7U0 g? ApNrDfĥӬR̎nsSB^!)b*ӯyŗ>Al{Fyq \[/?zCmL- "f> "{e2);𯳺5K}R.KO>FէM[Aͬ#$.^o%z1/v$VزІ]#2q2 Ex\j]m%3xkl/ɂhISGWo43k 'F3d ^6vۗuZ@z vcn:d4AdKVaq$Yh)K(! ͘㥿:=zBe~Th ܶGӖnn``%(X{XK Cwcf!ԑhb D&(zD#Ic_m mS\j܋*'h d L#֐#K,VNu J)hl- 48M݁50*4Fۡ%.='apM{23'zjڟ%,꫰+ga[bw_7 90tV L !e*p>Q)/h#P4d[@-1~!:8HG b MzO~_ߩČT'zwJo9#E Y4Aw)F= Cff$ǝܦ-YIӳ [^g!kz8_LOg5xV 'Ct; Z%#> c' qFM}}k;.{Gbjh)tS$$A︴bN.v>լ3QG,U |qJٜZE00•/6gkM+=mUEMs3XoPzO|oD%AEd)o8dkVr̻W5p14NX)iNsѲn>@,ylOyۥe[Tg\hDA.vǙNjfH=^ ݽp4Ev*h+34p\<7Vɗ9`% 2 1hx}UJy6yBUL/8_y81;Z>@1YΡ:kHD 7O4^^HVZ=ϱ,ٻq~ŏO6S0{ޛ9r~cB1d{pX <.F/y[Jklr^\jܱ35Spos${S>]Ôb`&iOWHV'EȺPYnׅ~F|JVr!;N4Rz͂Ɛ:܀wThUB3F Y8їZ/&F4kM*Zau\ hdAUQ}ӹt@@9vUng`Br,> )]l ugȁ?V !rģI&nWLu20[\ᙗ]-#Rh-dceA(_x=)>Z؈pq}A!$')wUx9͉&.&'M`Pxw is9HyT5wn*c k7@O:f 2zjd]x۲%ʵo"1rf}xnEz<)FLI߁AKTBz}o~*Ƹ TS~,}hؔLdiCǯXWˆ~!?%]IT0;2Gri vq Zpֶ[_~tB.is>4 2#7E[2RQGVSBMTZԝkL_@)˦'ڣ/ʻDcDq@CDn>" Oh|L-{IHϬ-nmFHW1xzW}LV^kfNJ?j.AIϜCS{AU)JA\Qz{4OT6Wf6,ٹtY*PsiqA̹:x7U[< RAӶ`M13olN&qkF 9Пjk@1XFq.b6%*=P,P_yL vTy?1Pt }ΰ{dȞrEeڞB9 Z- 2lG-1ڢSW/NfhS? ZW$@.@of"z]e. ӽR>;jn)Cq,v8@.Tf˭%-4@é%V"𒾎ooa !{R8~*&<ƊC ~!-mj)furr>؉*!]]յ7oG>Ⱥ"y DܺY਄Oe1r%q< %cbO۷}Ҫ-9(ȦmV0>2D*Q',@.z=V #ah~LâʨkXnHiQ: ID ONBߚsUŻMא: [>5ʛSRcNrYߧE3'ܫXl$ 90x 7=/GG,7.]xm廣7Ԁ^d4دqgHؽܙ6r,~I_.N%ȷL+gWx!@-9,ehbC?աK a$r2.Yg ڇB~7AYQ;7;+n$g#e;z%2Ƌ(,軙!U80iGOz"글}Jpo:iV~#݊p6Y5$;+ɀRcw&'o;^>C3cX6 HW{spvMy144?#1,2 ]v`l;ţIqed(nɵLM3jNW5[4^<ݘ;#~bLŠt?Q9YNΥKRHlP쨞ззY 7@{-2wTC% HZpyuOaND2w~Wl q dII'jvJb8c?pzxNUBr*ꗞIFط\?e{ e,@ q}?y lapg{;?=k3MuȄ-Yx?5F(ơBGwġn7VQ8%*l kǦOKȓAE9*Biaes,&c 8il_*}/eu<\]"G/R&K. ,0>g<;Hr{bajWs1 T鱊7m*:P@Kd6'W PUJTk#1u+'æG0WP.ϯ1{]|zTZn]u^<Z:Ta^2}i2(}CoD\1-=;y 慁NĹcMo;P5K8$oٍo`'g&j!9uD<$@`b/txbZNO404<4CnqF\"L"c!;+(g|'l>bۆv:murD\[VQk֜z_ ƔCQ#4WDYUG"1{X* ^u$vm+K2T$(+ѵ/8 [_ 8DTJjCzI`UmNJD>ou9'٢mH-"U)e Jqeunb*i~ub3B5,Vp @\bĉ  툱L1|?>D @SR*/ %OeǑ؍bxqj{`+ه hcJπnNnSqB u IU̘/侺UURw%,i#hZJaW--iA&Iky.i mh|:am2r0>&8 nJՊe_jIhɟG;t?QGҀJZ1Ƕ:p q}R;e)Ř^U`癦l ̟xG_?٠I` Z"$rI*}|K\ x(|AlaK0Ys'byȓLoN'Hktyqp 74erC_OQ/dĞ{]__K֗)? L{PyU"d-Ƶ"a'PP_V4 zSFI-f _T2u.ٙQ샞d>F}k2XS~-A^E,}8z9˯ T ܸIGq _ pbQh œW/zφ4$P9k  a[FБ]jfp ֟r* 7Oyd|o|R(+rc_A&89Aurijr9lcSHMTkw5F s˸?RO  E2l_СhQ.a$~ZJD3٘f)~EO߮ly.fES۫&ƚw_eKI/l8qm: @R8p51_ Ϝ<&oD 3F:%K+8s6s挍}}5 (s0NQšw4q<^5l=آsn6 pq6l)>޸< 2ݥϐ!mL7!CIVw#~[Ũ)چ4 HRՠ-_U􀹽 p gJ ]JVxwPgʥΙ^fSQH\젴ᣐtǟ'zK)**Eٷ_8\k#cCL NSz `<S6fKNIlZs;S 9ev`$\ YX-ԗ亏 0u^}K3ꇀl,ð݇7Esސ؄/dHsܔrf [t a. Hx21z3Z=={܀6V !aSf2S[UKPhyD.-<븣5e<db±X'5"01% Q$o䅉IZ݆eI\ou >Iq=h5Πҵ&7%T-8ƪ&",_niv՟E4&V$Z;3,&* }qZO1fM9mGUMo1 3UO7k%VVe AQ660-j[N@Ey_Q @OiaJU:' +(r٬C):. [_:#HZпMfAKlaq|vK)=!lYe @Qor>s=x,ˊwbYz[]wv#m**HH{{O>d "x,ݰ\qbx%VtCiG 9Ql20ߙ|4ƻ,iE2lѤ`|vA8=q=nA. ^ db,+0ksD+"ZnsX$<7~ƻ;1jFG $cFx{?kIb?G4<Kȸo_oI %3IʤLx% ԵIy^)-=ΠKym} S:ee$ txAtX*P'kYj.?;'䙀%1lN?, | )gUbB}4l߇!Mnlx5Y6SjJ˺=xAJ f>ͪΆ-x(oV.3́Uwk艠qqc슑RAcXWM,PRP|X#P(wK+n   W | ヷ'ȃk!w]Փ؟m2G&3& m3YZ $1&;2%'ly;bqx앃vXX)D\Rّƪ ..&(qD4d.9j|6v5kّf00ZAToL HD>m@&ayBǩXtlhGc+4xLjqkL[~P0F1a<2{xx p[ŜdeTEzUr QgpTcHa䓮Jmm%CfZT!/545snCݘoGHVUG䏾PN:,hqZ,v#]WM_֥$W]@aϞtOs8w aliq/xh驥/--Lɛ|wbȟ5k$u^`V;5($h~[ BąbgM*oZ|uȏ <_@lCv&3-},N$'RXB8]@dLu%鴱2 iϞ<Ƿ-193L fxjl(a(- V5RF<"Uu9B~?Qs%^MIͽp,s)Bylg%7nݛwADTHl?􁓛Fb=e$=]nѥ)lK9QЏ&Y%D=w]c2iέ_#,,ɷRkժ(1w2)9&YBW=&3' p ϓP W~ltW.KY2@!.DAE,Uf(|^);.VM'}x{y(D Qg~Vr1z+zJfLx{=+N` &]jZj6Xkte&BAPWnw},BVwAH0 L6di-fjhfH0u)X<~EflE: OEhpwMt U0g381\Y ! BG9F v!Q"ȋUȇAX+ QFJ>Id3lszc7v~Ws 6GR m0ܓ`iSlך.]9 {jMʘ)~}![i\S@XΒW U$\HN鮇,>YSעC鰧xDK]2M8aWPL*N;v5s0oiˏE_bm0ircS%#r\n׷w"W +eGAt=y@.t Н잧\xضLpй J*ƶM}DE ӶqY-:O73E\[tnpfjT =Z}G\Pl܄GZ-/Zf4="V1!MadHW[K1-PnGd0Q$UGrxoa4Dk*BH :)3ڟGRxuOuA8fL7rl٣bpK'S9K>6dl]m"rWpFqD!_:Z.5}׉v ?`Lo)q8ͭp1Y3]%K;3j߽~DuQ4L?]GfnyELA#q6hBu! L yc@NMu+pAp"쪷D{-> Qu5Zo@J;;" @Qyptу5*x^SmtD},&;:["WM7>[oy'@)1KNLUN`[c!̳&ZZCsB.gSnT #0_7^Q:R,U}ۯ1i:dF0X2?RPygk(U ]Y8E7KJ> ߍn'?:Հ./FgNO>`܍QvKnt7oS(6!,yS p2BENI޲ E;Vvf|a!fFkF 8\tz kFxۮpV(7[`uRS)BuhM% Et|^8EfoS( 6bH*L+0@y:xWus 6FZ6P $V8 qY7:cR!,,SZqLjp_lTNб.Yhf96\pз7T,c7gZ3%FhƬ-L 'G =TMC@Ng-N$`jR`{mGˠt`h4Dji(Mp(y+[qCUkUUft=q.Q {;,Pw׊ @ QGt:#!4@,Q{XyW6d76MaJfq޼ R"(k0aT\}~ORcp OO ord^ w:ft۸o K8rZ;JucFщ&O^a; JHthk9P?3;KWU~V\2ݗBs|MD\ՔX.,&UۃWrLc׳]v܊O05~ƀ&p-0E'[1DƉ1wga"wˌ0ʌM`4(9CkS{Xe3{1y [nCIqteIǻKIliCvBԷCq.뉜EPr/G_z#Z ނ{-ySn[ Y;p\Btb%m6nR hBg cѶQ[6,CD+. +py5}Mk>]%J[-(J4t%gbwxү? p :*,XT93i1H*c!% أA*r}6pX&C07Yg(^jj^yEpq>i <"tcsdNk> Gdq8X4/CFW]5&?oƸpKTNx<^ ׁjg[3ky6x`zyt&*r<Ĺ|E ~(_O)&x(<{֟Ŧ};J9iν9Eq{rDpː;F#Y&tOKl %̟9&/ 1g' +Ǵ/9@|5bz!Z#]2@7|'a {0\hN\_Xq)9{twƁCfYñ#5ٽSU\/P&OQqIfBXp ^y6zӮjY4ʞv,OhIq)Q5BB7s2#4/32^Y!GS4@ Rn e~,Q՗dO N.g8m؇Ư1*$=F+R`6iŔrc B kw ,$å~a \i!y-+X~ǺξjGQG lh~^VAoe͆ikCD]<0{ƒNs5hvo:ytW7 p/MTz #B|`6pA1y>hn-˰ZV= D(m 0YE?:䱆Ii0NK+;eVA*A @eM'2Pt2%1dSBvdq6 ~VuDAȏ`eZ.|CSkyl[({3{à[GLEa=w9S@txI0"(e)S2$D LMM7wR]}D>7YeX3!l5r^j86^#فQM~LunѧK-fĒSD5H]I"\o,g}Bk)6S6x_rԆ 2u>{c89U"Fl/7 ݳU%hRM)3wf7ŒG۷nT^N+uEYbc! {U}1uh1@VCni#}M< #?,=9VB'}h1VcǔpsUH;>/+spy|~{2_#̓/(SNU@JXY3Hs/lRRN 5)d!XîJmkyvupb9ŕG |"`C^&q<䞅]렝u5|9Օ+\L1]ơL_G)mqNfoTG䬿@k |0VމOݬ0;s'Zp[*K"!%n2~ˉSWĀ4RD$lR '+U¼BL˳QYew;6ɏV5$u yo#%rқ?նV'pm})˱'G6Sz>Fz ge ?ÛMY9}a ~ptjIG]B;.JHX?4SLnq͏uiu1YEƐ~U>dڏ3 oChxamR/LL_s6$Hm#GNm2LM QLWwI'.͟W滥ߎ{b2:DV+kHyJV\_4re l\sf{ma|ZDp91ڣkyJ6W}LqFq/Q#\ eɢcS8&dJ!9DlE @ $JJXdy~ΜtK{Eё)=ʹڃ4-GkR8muGɀ9/k~7%(+,Z=Ǝ?BdI?$ߑ%NZ*!TS_J[F OyķPVWR-~7#%-2tK`,wӨjADfǶΈ ⴈrvyf2WyO?I>US3ΤTna.tC/$9]k}|$yp|%q!~B0nΟ/}/T؜H# wf8Wglv/|A4ɹ&*eujx9НGQ0U$t cKPP$\.r_׾Vo x:n%8yvE220H3vi 5}UM8hlXj: K!ڼUa9SIN:DTRА\J|C?Z'0j\4@f`uҊ_@Hl] i /IeQM baKre[@t41̴oDwqK xu{)k*k"'D"Rd@&/RSjIND >>yFg!Gͤ]7ےBϏvzf VC;Vd 4~94DFQVɫN}mpAEwIL[f]1OxbFD2*4 ~';jx5L,Tl4Kxec蒮g ӈtX}t ?@8`waFuԌ ShO)(XD6L۳GZ9/UElI}/WIHG !) ߀:X to)&t5P:%Mn8jB 1}~zȕ +:?J!kT)lĩZhS0zBދk34U[ h6][܇_*` s\\izYcUC2uJR v:`:,ц?G1k.@"h.}8~c"NNKd)[uhR@('>mFbﺂj^)."o۬GC-\ DƢ gBV*F93doW58J՟QzQj/ Q\V8]GRgV\klMp;WQ|QV]*3Zt Vuc U4|{[p}t0¿0H^aj~T2؍b2 l@c UK6K)%~9ٯ}3 2v̄k 0(o+X`*S*Stj4Y v\I|/w$,OHsx:$&W,p#8Mԗx?Cj$m:I1 wv pqGWZ`&@tyqƗ;~PIi~*qBY\hfاnF" 9͛~{xj{y=gr}h) ;V'>Hty]T*Ɨt(m)9DLVF+az*%8M/m4'o_\U1 FՓ}<)k_;TJf_iiE pOi7hёp?8Mӑ~*=~]`hOPi7C>U,_b{W+_\DID*0_5OuYeh)Ǹor{?F__~G5RY {N 9jYyonW?" E_L(K櫰6eqIw\}{/ae#d)Tvv Re.gE3GJߏCmf0嗾6O&d_Y%S QZ^hMs&.J3Ij, 7[6 6Ez-eo+B09*(xw5I`q}AdBFhN5-?W=:$3ͽ.)QnOw2(8R>;.2YoW8 Kw o_1U y~% 4ڢ2R?6mfv~%8USo`8D;klECf]b/ ecbbFivo?;6RN1ߩ|[x;pނwY>C*V:%& 4N􂮻!3/Exnef.WnzBke{d߄םT ^vY G%*`;{lԟl>=; E mRt!l!""|6o $})5< LEaޙv܇25sVsž.# /gQ7ƍ0ysp]g}\O2eriw۪ 跛Ofq_Rk.QϺTޕӴ06alj}ɮ7{b˸gcp*SąD6V'!(ԥ+G* (Eq6 ?A`eCNMRtyI783$3K+49aArKdyMSVQGɥ7K-rMPlsdw"D7;]F  ?NҮqQ: 4=ءf p1%80]pJT ybqYc,6;:P|-o P^{2trسNƷ8PuS ȭԞwU79KgEBfwh2yYミ(`:{l19fs2!IߜHgPai^bo~#rii uEKhS/@K6IOX[JGR2N!@Wgh"Op4si24g1ハ.J&pu2phu)` atuƮi>pZ(\~/0@"*ˣLD BZGHߪ)A)O' L@poŖ+ Sb%^juq']MO" ϕ)ٔK n^̖Qc)5YtK$>{bpI}ZO'YSo>9ݤaUz ?ӣ + :˪3q?IV#M9QqHFB gkƪf+TَǺ+pʙN$݃b_\6-(>I$>.._u> ?ERwGِy81rL.ѴXU5eI,( HY$G.)#[*ߎ@n+V'_v:nBkEN@{W2W#6fō;[.69$^EJ fF&}]fhK )* }#U@ 2\ebgĺ3S2T5qi;rE" m QW a"$:eiڜ͠DE<C=]~@~o \JLasgW;N) 8O#2‰KDP85I!NAJJ;bU!vê07;08Mh5WCPxo2jTSZɔ$24KRAK6pGTJ/5;r'BLG Ӌ-mcf|n$y3Zf9k @B0lQH c=n @VZBe?gqZHGa'.#|$œIe0KZ;b&0gbp.3R7"qqʉr#{%A"k++#V Zv7Gvvؤȹꯛ `:y< @qEM˂@ӊ?c7uwk[*s_yҾ_@=#Bb9LIL/=)J{ @̄WfMul%MSֺiغh!1I}ɓnZ=c=|[PTFߌ^U@H$ %T)5hٞ!=aOmaCЁTw١̈́4*%rlXQZi4mRV.o¼{] QnCWsi;9Lu:# ܓŴ_9}knQ-+LNoFkV!^ ^1~[qHd.)HGuM!y/:*f+ C{P1ϖm4GtX &6j+ rxmj,pFdvVz\ Xѽ}Ȉdأe|5ʄT,U@@/&蓙,Z\|C+tEҵӻaϐgƴkQA\gO Q9hDo`B4P'6 35':ihꂯ\0)Hp)ZQ]XsB*ml!rEU&OQMB6*nBTK^Z?1?jwX'Lh!u 8A:d#, c3'+ Gr@g׈ IɧĞƹIVeaG̻sz< {%ސ+ZkP-MNyt`#x=|3.[EMLn|yyi2 &޾.EK:7DB1}S?RW|#]^#b nE *\_FU2]!k͘9\:xBPPvy$ `wSԚ јlC6˃Ɇf̱}B+#|&hWGrٷ9#H:`36[u9=b0'yC$h&8'Ni\o"7}ziȂ"!Z yToghq,ik>IPB3Ne |o@tQF{6W{$/t8ByfX,l*ނX sߺ꘧Ao(ݍ~"%<#Is%8܄!~:}[47/GH-EUFK2Ub^m&5yp;%h+zzr$r)A(Qс>QKfJT;A?K)$-8|$89( {|AfWw%rIMGSWk0& Oc6O.sn{ӋF= b Z ,| aVAc5Æ< }ۃm岟>:NPʃ ,8T5C]:&SA?vaU;b,$#8 0!8 B-*Q_88g="'Ri RۑΓ3LXP7^ h}Dw&_Qش׆0wUG4@n ^-Fʩ@0-7w?lv< ugM'@} -{ Gc;󲞒2r7:Y" 6k0!_ӕ34`% v"fº.E4}Z5cpBp_2+IYIs'$)wS AW]US,s~fgEx+WeWUΘ4TM) sJ#&#._Shā/^ ޭn~Q*1kN0f/6s,E\KS;! %.j^}e['fmaCy/UV8JWů+"X; GUh'"UyYPye᝿^t ^NzV-iruKNRª]aߊS. ; Xh1y9T9w,zmuYk)?MNH0@1>G2VH|l+#FOyĤ%UtŁ3Od8~%wt|Lec3afLDMv$V=ìAؐ0hR=t- -J8VKs7~"^"",S#4Pߟf!QB50ԛU)'\>,NW ]v`ىƞI>C6:sB7!=ػwHaw ';C4[91>7x e3܄ѓdC+{jPW# o4*j!Y50դF)[g9 jaF(49~Ao￧Bo bX ]x) aa,,pud1rkr<ys#i@O@agm K$\5Q"+{xoj Üt"q =i~lMs9Ҁ?>GD %T$\ Lq4b™:<$;x*˱4ey G茑FSx*jOw34KR<b\rqq eQcTpį_zK2ԵXR1Mt*b|ÒE:hwSјP/9kNYQ<#5ݴY`}kt!F!-l[PtmT64H5 ^t4XaM OX>D*V{TPʻl+ 3uة.QVfd$ IFi0m`_9K[g\!%;)y6֦)LĊ=۫ SQq #|A@74z0VNoaXh=F0t؍J1M)cH#N'LaX>F20Kbh k2iaTٵbnb3g=$kT\Rh‚Lj"#-$+j;I!%WauÓHA} H: 'yPJ>O!.IgF\HvΆ2:*YQeOzym62_ dS>CyDn1x͆فqcot *HѮ+Yg@ϭ[Ҽk bԴŭQǢ `PTg÷ r:Jv:>vnJj0yET[׼~gȿ`+aPAHwF0vܨyjFqgm^^+RsKv%8L9&5P ">[7y%4d2/&a J|'$|;vӺ9v"*$;4{|E{(m‡t&jR_(]gho- **Be#*.EAßbzU~geCNhJ޵,+5Їы*jQôw1uxjVF5/lgO ]bna6Au#,I.(dZS !7Pb}aMX/7@<>l݊ OLѕ\\mhqO<"PL%g1̚pD ;(O0.ՊЦY6;gnQdU钆69?uYڸ 儅#ep@!5Eబrj;hu8Zv|$cS &SMγp61E=z K?[vvƉvheM_B4a$7ELj Db{g/)!`wuе8,YTh%[|ZE-pU6z$@(O˲膝N=6HcNwު0W %[(b>lo3BŠ- UU/_Du!F:egd9IYlD~k`}wΣRZN2ȸ;6s]+U$3ᵽٶ @9`0H&yp6/fe9{lyfO2[(5GULvȨa .7]&[Aqhi10!)a͆2xqhaJs=XlϠF c+VwPB8J+TH,Tv]KDxMMBE)9"U~"!Yl/~Q\׶ux_ y'|! m)q䉼:׊Dho Ķ\`ׂŒЪ?/O򢾺<%G6aonwFl(8 4 53T&qŽ=,#$;Izض;y3Ec _CԎޮzIQ04"f9ldro(zg݃i[a p 9m5,by3@| ȀdM#n<ED͸V"P#sJ?DtsѺJ+[{kxoZ @S(z,a+Hv^@ gKyWI(EX-@&2X|[<WDt _rWbsby.߯m=8]EN'2iq簓J'[Ͳ27GKY~|[HLy܉qǪPi%o2Z@Sb oHi-pQdDep8uVmB$/;033:VmW/=7[hG k5:m.8[~&Qij~/++roë{w+`#D PU-{ n5H1stOuii] y8qzY1DMH}E;˙1Sٽ3,6%e.IN ^$~*hOMGeCI#|ŜS{cf'LA$R)8]E~AһK2**z?q7QJ-KcΎe5u[vy/ i [0W2%C9>x`:w@j̢~oB 䋊c/W{4}}K-n+PY^V[nifOZp7qusbT| $5wE0h_mt/D'Csԣ2K"RI_Mp$E[7*\дE 54=4 .{ uwyOT!,B՞DnIa S{ԽdQpa3::pTօy 咰sSDU(vw*9U+VwD31XV<L5y&4.u.JTn(+B^ұ@ M|e#:ǎ-x/r.t5Y\ 1j)B|{Pc!!io n&Π,'kl.R/E-n#G剆uB HFsx*tmpf[2\ȎDi#׺*c1S|RnTb[,M qϨ—U_gp@b̤x0w7L u#u˩ u9/l+tڧ4#E*BcS+eTҷ`^(.͔BlOvQk8Ϭo7# ΨN%kTm-VgMX~YR@TMXp#x~ vL &*mRupt\΂ JNl(Mfe&ދ .dd6f ȱʕE')p-1 Nod G93A3G%tճt Da=f# ڤ` ,Ow 8;+%z`j0J YȠa=Ch*vl0XII- Dk@$xyCw5FJϯULo,$ՍgMA hIJˋ=vö{ц$Ք4Ũ\}•ڈz0dWi‘8mJ`g(![&y.Њ_=VLpN^{lfB|(QrgFv:&F`k "OjMorř7I,<ɳ)8[޷"+ԯhT*sSa 8LBQbf5 ]:܂#E\Y`i%m1 yGcaZ( , j^1B8'o-֧*6ڠwO'Y 䳓ԓfJ} CFƍS)vo[HD"`{X}2s k鯈4 }$p_b:NN1AUyۑse%cNP}-&U0@< Ar0:j݀ɹ @5]~2ڠuT-2Fj+!C^l餲.FBc`HsQCh7 [`z؋{Bu5~("R*Ћ,EN=)M9Sh^(ʶo7 up9O$@^l4}^'/EWߛkzC*jNjܽ;͑\m5 7wDϱy|Z[ y'z2m 2$E6¾>(-j=EyD1}6U3 ؞<_Qx'FZNAmڰ Lfx[eam)o}HZS&׾mɗ6d0уFZ7[}&MBÙTj݁v1[cm鑌ZHX {^{t*p1BF}S-GvH&iq^.X6]$.N/ّf+V/V (((+ˁ8z%o[PeWc,7=H&WJMKWP6F d:8G3eU^&ax~1QmWwڷ;zGED&߽ٔogP\M߸[Cp<9#1V Uz",} :!hxk30_6mt"n.%Cv`AH_DÍ6 2WP)j1;Htxkl"DQЄb!l O2YJ]L=^.J] ﰗv^g7@n-3v|G#> RUm5"/-G%Qc޳'ؼ7v7f%[OP3^(ZMcq%ׂ5Y<_3o<"(<<CzgxPN }}1 %iIJiIhD|Mq5h58n.'W,}(~Dߚ̽pA0c򙎤 #6jtZb&~H_sױYZQ]d5*3S c YZ