freeradius-server-3.0.15-9.1<>,?\/=„ Mŕd7l;_RHnBGbƇާ(;mE u*z{._ .E"u.g$f 4qII돁cK! !Bmdlm0?gFG,؍:?.b]C_뷟zyKR%9G|1ۿ]ZÁݴJFz$W8<7_W=֨hxD%`O>`DtW*-h_|Fͥ_v)>K?d  -@DLPcl  ,/x  " * d j|r|Ch=1114@l(o8x<9h<:<=p>p?p@pBpFqGqHy,IDXL=Y@=Z[\]^I)bc=defluvFwxy\zCfreeradius-server3.0.159.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.\lamb66/openSUSE Leap 42.3openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxx86_64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see bsc#1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQGZ Oe4 e! hB  NoF<f_6jTd"004+{ L' 8!h w t! +_ 6+klfD [ #wWb!4 E(#+ni!_D<O6 F m$N  6/On4=m  !X&0I`I)H9JJX9)ZH)X)Jh99x) )Y08J{p90)k9)89JH99()jI9J:0)x))HI(9IR)h:)X(9I*ZPAD0" *&*%nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yC"iWR(U $2 (m{$aERK78d  ({\M#I 38wfs!Ol+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKadam.majer@suse.dejbrielmaier@suse.comadam.majer@suse.devarkoly@suse.comadam.majer@suse.deadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.comsfalken@opensuse.orgvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.commardnh@gmx.devcizek@suse.comvcizek@suse.commls@suse.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comjoop.boonen@opensuse.orgvcizek@suse.comvcizek@suse.compuzel@novell.comcrrodriguez@opensuse.orgpuzel@novell.compgajdos@suse.czpuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.compuzel@novell.comcoolo@novell.compuzel@suse.czcrrodriguez@suse.de- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- password-log.patch: stop logging invalid password attempts gh#freeradius/freeradius-server#2064 (bsc#1099802)- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 (bnc#1049086) Feature improvements * Update dictionary.starent, dictionary.ruckus Bug fixes * Bind the lifetime of program name and python path to the module * FR-GV-201: Check input / output length in make_secret(). (CVE-2017-10978) * FR-GV-206: Fix read overflow when decoding DHCP option 63 (CVE-2017-10983) * FR-GV-301: Fix write overflow in data2vp_wimax() (CVE-2017-10984) * FR-GV-302: Fix infinite loop and memory exhaustion with 'concat' attributes (CVE-2017-10985) * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986) * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions() (CVE-2017-10987) * FR-GV-305: Decode 'signed' attributes correctly. (CVE-2017-10988) * FR-AD-001: use strncmp() instead of memcmp() for bounded data * Print messages when we see deprecated configuration items * Show reasons why we couldn't parse a certificate expiry time * Be more accepting about truncated ASN1 times. * Fix OpenSSL API issue which could leak small amounts of memory. * For Access-Reject, call rad_authlog() after running the post-auth section, just like for Access-Accept. * Don't crash when reading corrupted data from session resumption cache. * Parse port in dhcpclient. * Don't leak memory for OpenSSL. * Portability fixes taken from OpenBSD port collection. * run rad_authlog after post-auth for Access-Reject. * Don't process VMPS packets twice. * Fix attribute truncation in rlm_perl * Fix bug when processing huntgroups. - a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name and python path to the module - 62f7d288.patch: FR-AD-003 - Pass correct statement length into sqlite3_prepare[_v2]- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682- added patch to changelog to fix factory-auto failure (Req #242825) added: freeradius-server-var_run.patch- fixed SUSE spelling in a filename (bnc#889034) * don't install suse/README.SuSE - remove old tarball and signature file- spec run through spec-cleaner - don't install files to /var/run- update to 3.0.3 Many bugfixes Feature improvements * Everything now builds with no warnings from the C compiler, clang static analyzer, or cppcheck. * rlm_ldap now supports defining the LDAP attribute name via backticked expansion (i.e. shell command) in RADIUS <-> LDAP mappings. * rlm_ldap now supports older style generic attributes. * dynamic expansions (e.g. "%{expr:1 + 2}" are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * Static regular expressions (e.g. /a*b/) are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * dynamic expansions are cached after being parsed. They are no longer re-parsed at run-time for every request. * regular expressions are now parsed and cached when the server starts. * Added the %{rest:} expansion to rlm_rest, which will send a GET request to the URL passed as the format string. Any body text will be written to the expansion buffer. * rlm_rest now available as a debian package. * When an 'if' condition statically evaluates to true/false, unlang does more static optimization. For examples, see src/tests/keywords/if-skip * All modules are marked as safe for '-C', which lets the dynamic expansion checks work in more situations. * Added 'none' and 'custom' rlm_rest body types. 'custom' allows sending of arbitrary expanded text and content-type headers. * Added "config" section to Perl. See mods-available/perl * Added '%v' which expands to the server version - Patch from Alan Buxey. * more mis-matched casts are caught in "if" conditions, and descriptive errors are printed. * Support basic response validation in radclient. This allows administrators to write local test cases for their site-specific configurations. * Removed radconf2xml and radmin "show client config" and "show home_server config". * Forbid running with vulnerable versions of OpenSSL. See "allow_vulnerable_openssl" in the "security" subsection of "radiusd.conf" * Catch underlying "heartbleed" problem, so that nothing bad happens even when using a vulnerable version of OpenSSL. * Add locking API for sql_null, linelog, and detail modules, which should improve performance and work around issues on platforms with bad file locking. * Allow DHCP NAKs to be delayed, via setting reply:FreeRADIUS-Response-Delay = 1 * Allow tag and array references anywhere attributes are allowed in "unlang". * many enhancements to radsniff, including output to collectd, ipv6 support and packet loss statistics. * Many dictionary updates (ZTE, Brocade, Motorola). * rlm_yubikey now automatically splits passwords from OTP strings. * The detail file reader is now threaded by default. This should improve performance reading the files. - dropped freeradius-server-CVE-2014-2015.patch (upstream)- fix for CVE-2014-2015 (bnc#864576) * denial of service in rlm_pap hash processing * added freeradius-server-CVE-2014-2015.patch- remove the old 3.0.0 sources- update to 3.0.1 Feature improvements * Add "timeout" to exec, and "ntlm_auth_timeout" to mschap. So that run-away child processes are caught earlier. * Allow TLS clients to use "proto = tls", in which case TLS is required. The shared secret is then set to "radsec". * More documentation in the tls virtual server. * Add "date" module for date formatting. See raddb/mods-available/date. * Added unit test suite for internal server functionality * When loading "update" sections, check if the RHS is a literal value. If so, syntax check it immediately. * Update LDAP module documentation and functionality. The generic attribute can now update lists. * Updated dictionary.extreme. * Update sqlippool to do clears as a separate transaction, and at most once per second. This should help MySQL. * Respect control:Response-Packet-Type for all types of requests. * Add support for SSL encryption to the MySQL driver. * Allow arbitrary connection parameters to be used with the PostgreSQL driver. * Changes to the OpenLDAP schema to fully expose functionality of the new LDAP module. * Update debian packaging to include a freeradius-config package. This package may be provided as a site local package to avoid fighting with the preinstalled config files. Bug fixes * Use correct field for ARP setting in DHCP. * Fix crash on debug condition (#454). * Fix a number of minor issues caught by the clang analyzer. * Set WARNING messages to yellow instead of normal text. * Correct debug colorise logic. Patch from Phil Mayers. * Encode attributes of type "ethernet". No one uses them, but it makes sense. * Work around regex initialization issues. * Fix build when linking against OpenSSL. * Print IDs as positive numbers, which helps for large DHCP XIDs. * Fix issue with sql_ippool. * sqlcounter now uses 64-bit counters, to deal with 4G overflow. * Fix issues with DHCP subsystem. * Don't build / install disabled modules, or their config files. * Fix build for OSX Mavericks, which hid the header files in a magical place. * Fix LEAP buffer issue. You should still avoid LEAP. * Mark "unknown" WiMAX attributes as being WiMAX. * Fix typo in packet decoder for fragmented extended attrs * RPM spec fixes. * Fix rlm_perl build issues when not using threads. * Enable %{Response-Packet-Type} again. * Update configuration file parser to handle "bool" consistently. * Update declarations of global boolean variables to use "bool" consistently. This fixes an issue where some modules were instantiated in "config check" mode and did not work correctly. * Make more messages debug instead of info, to avoid polluting the logs with messages that can't be fixed. * Set operator in internal unlang code to suppress spurious warning messages. * Fix debian packaging. * Added "status" to Debian init script. * Fix "update outer.request" to update the outer request. * Don't print TLS debugging messages when not in debug mode. * Correctly manage counters for "limit" sections of TCP / TLS "listen" sockets. * Fix libldap debug output. * Fix rlm_ldap tls functionality. * Initialise OpenSSL globals early to avoid issues with the PostgreSQL library. * Fix typo in sqlcounter expansion code. Fixes #463 * Overwrite previous instances of SQL-User-Name when adding it to the request. * Work around bugs in both MIT and heimdal versions of krb5_copy_context(), which caused segfaults in multithreaded mode. * Provide meaningful error messages if Heimdal krb5 is used. * Fix attribute supression in rlm_detail. * Exit with error code if child fails to complete server initialisation after forking. This allows init scripts to correctly report whether the server started ok.- don't build with experimental modules - fix packaging bugs: * install init scripts only on <= 11.4 * install systemd unit * add %defattr for submodules- update to 3.0.0 * new feature release * see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release * documentation for upgrading from 2.x is in /etc/raddb/README.rst - drop oracle support (wasn't built anyway) - dropped patches (obsolete): * freeradius-server-2.1.6-codecleanup.patch * freeradius-server-2.1.6-dialup_admin.patch * freeradius-server-2.1.1-edirectory.patch - added systemd service unit * radiusd.service - added systemd-tmpfile for /var/run/radiusd * freeradius-tmpfiles.conf - added gpg-offline verification * freeradius-server.keyring- add libperl_requires, as we link against libperl and thus need a specific version of perl- fixed a bug in the logrotate script (bnc#797292)- files in sites-available/ are now %config(noreplace) [bnc#781756]- update to 2.2.0 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - fixes CVE-2012-3547 (bnc#777834) - dropped freeradius-server-2.1.6-overflow.patch (upstream) - dropped freeradius-server-sha1-default.patch (upstream) - refreshed freeradius-server-fix-cert-bootstrap.patch- Use the new 'su' logrotate option (bnc#677335)- Enable the same CFLAGS as for other hardware- update to 2.1.12 Feature improvements * Updates to dictionary.erx, dictionary.siemens, dictionary.starent, dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol * Added support for PCRE from Phil Mayers * Configurable file permission in rlm_linelog * Added "relaxed" option to rlm_attr_filter. This copies attributes if at least one match occurred. * Added documentation on dynamic clients. See raddb/modules/dynamic_clients. * Added support for elliptical curve cryptography. See ecdh_curve in raddb/eap.conf. * Added support for 802.1X MIBs in checkrad * Added support for %{rand:...}, which generates a uniformly distributed number between 0 and the number you specify. * Created "man" pages for all installed commands, and documented options for all commands. Patch from John Dennis. * Allow radsniff to decode encrypted VSAs and CoA packets. Patch from Bjorn Mork. * Always send Message-Authenticator in radtest. Patch from John Dennis. radclient continues to be more flexible. * Updated Oracle schema and queries * Added SecurID module. See src/modules/rlm_securid/README Bug fixes * Fix memory leak in rlm_detail * Fix "failed to insert event" * Allow virtual servers to be reloaded on HUP. It no longer complains about duplicate virtual servers. * Fix %{string:...} expansion * Fix "server closed socket" loop in radmin * Set ownership of control socket when starting up * Always allow root to connect to control socket, even if "uid" is set. They're root. They can already do anything. * Save all attributes in Access-Accept when proxying inner-tunnel EAP-MSCHAPv2 * Fixes for DHCP relaying. * Check certificate validity when using OCSP. * Updated Oracle "configure" script * Fixed typos in dictionary.alvarion * WARNING on potential proxy loop. * Be more aggressive about clearing old requests from the internal queue * Don't open network sockets when using -C - freeradius-server-snprintf-overflow.patch merged in upstream- fixed interaction with eDirectory (bnc#720620)- update to 2.1.11 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - add freeradius-server-snprintf-overflow.patch - use spec-cleaner- Supress timestamps in binaries, breaks build-compare.- update to 2.1.10 - see /usr/share/doc/packages/freeradius-server/ChangeLog for complete list of changes in this release - drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)- radiusd reload after logrotate [bnc#634445]- update to 2.1.9 (bnc#615699) - bugfix release, for list of changes please see /usr/share/doc/packages/freeradius-server/ChangeLog- add freeradius-server-initscript-pidfile.patch - handle /var/run on tmpfs- specfile cleanup- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore - clean up specfile - remove bind-libs, zlib-devel from BuildRequires - not needed- update to 2.1.8 - for full list of changes, please see /usr/share/doc/packages/freeradius-server/ChangeLog - drop freeradius-server-no-default-case.patch: fixed upstream- update to 2.1.7 - for full list of changes, please see /usr/share/doc/packages/freeradius-server/ChangeLog- freeradius-server-no-default-case.patch (bnc#527742)- freeradius-server-sha1-default.patch (bnc#546042) - freeradius-server-fix-cert-bootstrap.patch (bnc#546041)- disable as-needed for this package as it fails to build with it- updated to 2.1.6 o Feature improvements * radclient exits with 0 on successful (accept / ack), and 1 otherwise (no response / reject) * Added support for %{sql:UPDATE ..}, and insert/delete Patch from Arran Cudbard-Bell * Added sample "do not respond" policy. See raddb/policy.conf and raddb/sites-available/do_not_respond * Cleanups to Suse spec file from Norbert Wegener * New VSAs for Juniper from Bjorn Mork * Include more RFC dictionaries in the default install * More documentation for the WiMAX module * Added "chase_referrals" and "rebind" configuration to rlm_ldap. This helps with Active Directory. See raddb/modules/ldap * Don't load pre/post-proxy if proxying is disabled. * Added %{md5:...}, which returns MD5 hash in hex. * Added configurable "retry_interval" and "poll_interval" for "detail" listeners. * Added "delete_mppe_keys" configuration option to rlm_wimax. Apparently some WiMAX clients misbehave when they see those keys. * Added experimental rlm_ruby from http://github.com/Antti/freeradius-server/tree/master * Add Tunnel attributes to ldap.attrmap * Enable virtual servers to be reloaded on HUP. For now, only the "authorize", "authenticate", etc. processing sections are reloaded. Clients and "listen" sections are NOT reloaded. * Updated "radwatch" script to be more robust. See scripts/radwatch * Added certificate compatibility notes in raddb/certs/README, for compatibility with different operating systems. (i.e. Windows) o Bug fixes * Minor changes to allow building without VQP. * Minor fixes from John Center * Fixed raddebug example * Don't crash when deleting attributes via unlang * Be friendlier to very fast clients * Updated the "detail" listener so that it only polls once, and not many times in a row, leaking memory each time... * Update comparison for Packet-Src-IP-Address (etc.) so that the operators other than '==' work. * Did autoconf magic to work around weird libtool bug * Make rlm_perl keep tags for tagged attributes in more situations * Update UID checking for radmin * Added "include_length" field for TTLS. It's needed for RFC compliance, but not (apparently) for interoperability. - FreeRADIUS 2.1.5 * Release number skipped due to procedural issues. - FreeRADIUS 2.1.4 o Feature improvements * Permit multiple "-e" in radmin. * Add support for originating CoA-Request and Disconnect-Request. See raddb/sites-available/originate-coa. * Added "lifetime" and "max_queries" to raddb/sql.conf. This helps address the problem of hung SQL sockets. * Allow packets to be injected via radmin. See "inject help" in radmin. * Answer VMPS reconfirmation request. Patch from Hermann Lauer. * Sample logrotate script in scripts/logrotate.freeradius * Add configurable poll interval for "detail" listeners * New "raddebug" command. This prints debugging information from a running server. See "man raddebug. * Add "require_message_authenticator" configuration to home_server configuration. This makes the server add Message-Authenticator to all outgoing Access-Request packets. * Added smsotp module, as contributed by Siemens. * Enabled the administration socket in the default install. See raddb/sites-available/control-socket, and "man radmin" * Handle duplicate clients, such as with replicated or load-balanced SQL servers and "readclients = yes" o Bug fixes * Clean up control sockets when they are closed, so that we don't leak memory. * Define SUN_LEN for systems that don't have it. * Correct some boundary conditions in the conditional checker ("if") in "unlang". Bug noted by Arran Cudbard-Bell. * Work around minor building issues in gmake. This should only have affected developers. * Change how we manage unprivileged user/group, so that we do not create control sockets owned by root. * Fixed more minor issues found by Coverity. * Allow raddb/certs/bootstrap to run when there is no "make" command installed. * In radiusd.conf, run_dir depends on the name of the program, and isn't hard-coded to "..../radiusd" * Check for EOF in more places in the "detail" file reader. * Added Freeswitch dictionary. * Chop ethernet frames in VMPS, rather than droppping packets. * Fix EAP-TLS bug. Patch from Arnaud Ebalard * Don't lose string for regex-compares in the "users" file. * Expose more functions in rlm_sql to rlm_sqlippool, which helps on systems where RTLD_GLOBAL is off. * Fix typos in MySQL schemas for ippools. * Remove macro that was causing build issues on some platforms. * Fixed issues with dead home servers. Bug noted by Chris Moules. * Fixed "access after free" with some dynamic clients.- do not ship static modules/bin/sh/bin/sh/bin/sh/bin/shfreeradiuslamb66 1557252368  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.15-9.13.0.153.0.15-9.13.0.15-9.13.0.15     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdhcpdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10185/openSUSE_Leap_42.3_Update/347b0d66da01261c526d9a128e995eea-freeradius-server.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABACCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textPython script, ASCII text executableC++ source, ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2130780b5a44e06e005d327f2b1232db65e40461, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8996f2e79fc607806035388f965b9dbaa9cd05f2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c92424085ea7dd9e0e23e0b783a068a3b61c266, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=830365b8e685ea770d6ce9607256d4368bcd8a47, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c0afd460df1697ec0ad3a383c78aa7b967a2900, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44feb2f34353fe376110e3a45ac01d8c3d00ec79, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=357b74f1ec564798533a0723ea3a542f831d956f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c3eceebefe11f183e70c939b530234f4b3ffa2a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a06cb799f7d35565e98f9d87f3c0c5fde38c231c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e625c8b213ef9d15602bb064701dc198a2a94bdf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3bbb45d8f0fa070153d3f83d9e56408425c8bd8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45a08d5f0959b2b660c81001c6b17f15de674fb4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2439efd52f9fef8633fb2f7e2173eef71b430767, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae20704cd76383dc674518ab6d9cd64b4d4c6569, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=71454bae5121123d317082b1ebf3192e5a46a2e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=741bc3388864c35e62f0a472586d67dfa2618a70, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=386a34bcae42543a34f46d60647a4c4c9099003b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d66082952cd6ab673ba821331459ec005a382c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1fa9f08d4ad677d5b0d6e442004dd93114919af, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=668c2ca40c69e2f55eabf1a2623b221fb13dde23, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=900e3dec8758f84926150c9e3557d2d0125b7d27, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=313f6e61d114a52efea49f40b2c9c247cf6ba25d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3968a566bb5661fc23a340ffed6b5d2973d120c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a31b2f8d9961c42c571ce7d2b81727225bbeb91e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=13d61190dce1d7d39ca2b9bf99dc60955aec7f7b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9aa8b47b6c292240081cbefc0a8ba4d331a4438a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=70ac382bbf2d3cac60e8fbf82c029acb3dcd20e6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eae3f94cf8bc80ed7772ad4bb76e65a4a41352a3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c2f2762cb0813d035788ebaaf507865196abe07, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=144f949b621ae6d0c2be9939b2fccf200ee6f9ec, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3dc384cfffc434f33092f95b0bf7dc3796543b1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1d6d8feaf0f97613fa3351c22dcfae9b8c6a9d3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=646706b416b6efe88bbf58a5e31624498bf29340, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ad6074457043b3f35c1fbffad62a10d88a4d992, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=494c9576371d2bbba69bea19ec96294c84e3e9b6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=76f6f402c4a3dce056c1d9462af74722d5c92532, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=577184b6bb71162ff791366cf4e8877acf671482, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34dfc0691a007995faf2cf20859e745df4ca9dbe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34d4a13993ea26941d4c07d7e006c03537d78217, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb11594f4c9be2620bd8de6e07531971c4c7dae0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7e2108eb1a30d8f6c37c112ca57e76330a0433c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec855890f2d62e2ee452ecb111f8be86293f0f69, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1103672acf0ce3f36ff91b661199aea2a1133582, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2376a8caa737cc4216e8e7e9e21c3e1a5a3128cf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=493bd6382a02d5a1173e033a7bb2a1eb90a40799, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1f8b26120919d68a144cbe25d7a634b9b257011, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=24cca24366b487d067de7a0ce842e2860430132a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=68fa866f4df90c0979c1e0c944d436cc50c7fd9c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=feea5b6229675cdfc0eea1832d485c2549da703a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa46b6f4cf60555829058284ba724dd10633de69, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=92bf7228e44068e68008badc2c88b4ae45941d7b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd7d0faef8ace9a7bba78532a2fe44be70aaecb3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f91f1c243b3e6ca9814dc2ed4a927280c36992c6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01848a7a83bbc5a94a953bfe4b987feecf82fcc1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f09a1baa5c20edd5c6c0bc8467a42c07dacf282e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=82653afd5056d1cb36bee101dc2b7e8f8f555c57, strippedPerl script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=fa614f33e9617fa1d4bb455e9468e9589dd7d6f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=7b0399a6207140566fe2708e24408d269ead4151, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty !(,38<AHNSZafkqv} !(,-.@J   RRPR RR PR RR R PR R PR RR P RR#R RR"RRR P RR RRR P R#R R R"RR P R RR P RR RR RR PRRR R PR RR PRRR R PR RR RRR PR RRR R PRRR R PR R RR RR PR RRR RR PR R RR PR R RR PR R RRR PR RR R PR RR RRR PR RR RR PRR RR RR PR RR PR RRR RR PRR R P R RR P!R RR RR R P"R RR P#RRR RR P$RR RR P%R RRR R P&R RR RR R P'R#R RRR R RR"RR P(RR RR P)RRR R P*R RR R P+RR R P,RR R P-RR R P.R R P/R RR P0R R P1R RR RR P2R RRRR P3R R P4RR RR P5R RR RR P6RR RR R P7R R P8RR RR P9R R RR R P:R R P;R R RRRR PC9%7, ^rlYMeIxތ.@ xla |2di# b2>K~c_B@f}l94W]3S6|Ki)W1 yoԾS%x`}@ UO: d5֥,  ;׆.H;`wU1XiSY,r1ꭄ{WRUfwl=ot%~!\ LչT,ݤt]F'5NpMK!&-xOauٳR+&ASc =*BwH>P95s*PYۇ7ǚ F y̫4ʠSrEc_ʫ\..yf"oraoyIDQ:'i=h`ĬH\H:wZC5 Ԝ1(nJi;%B.ȱ ;:|mʏ[ܮN*yb swTdߩ3GPwΦL o_+gHތAt}J D7 _3aUV7BNu}sqF⑥ xj7a_=kxGqEbJ^]sE.J?RgLZj8rY s锄Wf=)A0,+ҧ2h@S|g@6멶UKz%Qy{6K2 Lbu'`?;tJ%ިu7][K];HSa1Aӛ⛧#aU*_tbŰ c35JюolWV,e&ZW\_+K(( /4qO2_T؄؈46ۈ!(5;fwZÖ]EK?~S>cȱ3^ t|*xElV*}PC=\ռy[vRLR=i\AШZK&AU Hs{95=Lks4)++kn;ϥw2AfAhPRH1^LUAHL+Z4f R[ǫeze5ox3R/b#&s`7Á)$hKrNBU,x;O<Ζ#g5_qM4{ ;i]Egzt;q-Tĉ"d  y]:+GT8A!%x9wqN=c,GrlKur޼L9@9q[1~*KE`Ț SUp)Øau#wLx&YFF2aψG8,(<5e| *u[1?L©tGOp]C3֭ʦ;p`` Zia+J.'gF֫Y inzp\Χ. ^WSt[KzL؜֙52yN(_E͑Fr2O@/C X:lL\#5^NX*\9ym9bx;XyX5 1ЯcT߆7=1hp11ׯI!aS C }RL"Ө7 |Ԁ 'ً#ee`8G`~vЭ'Ut:PY箴SEtkZ)7XJkiH7/]_!_Rnb._r|ZNNg}BZ)GVdg\*ō KK8'. dSLi1*#{@Dx(o=5Mn[ut}j`W'pgh-Z/kÿNWFk P+)CTav=AayI2q|VB Uj~÷G`_FA~EQ{d,wF;Qd\(iQjoKxϿ[_ v [>@AGL}VGup#MaEVGO4mI"#`x6r#мfMlsW||KjK"[\8?.J% ,tdROӀU33eȗ$a.[(iۆ Yzv{ ,X$gh wi Sg& ɭr|dV9;p; ¢6^t"FBʖfB(cfK(666˪ mycnuCUUέDc(i Pz\>A] rRn(@~TcU|:ѺdOq@QdgBөX(\)@tsZ1 kB=v= ӳJR1i&JeQ xst;ߘ q݃ieWp)-_)f6T`Q/41T~1G&׀S'v&N1fc iiO~ l~S`@ f>HĪ5U눭P%XXrK J?RXudȽ˥4W0T@]C@DzPh5ѱK\ٿazf &$Y$D;!֐+QVxjUF7uz$"5j-HțSN}f?|kXq$ОxAl]9—|%~b[7Bx80Y01fH גs:2rkwoB|@Ts rVfp uy3Cy)+) \)'a{GҀp>JC[Cx,/X๖xQ}Êwh/=zR\B,6`D#_^Y!4bN5sG6 aWCrrBՂRaRgY+&R,p! D[S Ÿ+\rb8@qYK#곟 5uJ#',=twKl­cμxZY^i~.eEE.o 6VVhqe5VF)B gطv=<cwNsAc=:akJ[wlv4c^Gwn V^}ķc8) <>G~,9FިI\\V,wgawe'aꗭd6C z7Bic^ՐJƄTtof-¢r]d"4hYGE)Yd\\^tB3!O˲F{iYZm[Nm mGj_m/<`4X6nMP.TL-9Zqq//BbeZm^cski,6Ψq(B"fP6SdA1 h/C)s߈2CK88mҶ%zO j+h~:eisdKGX_N*>%fvާS/O-QS1ʕnO D9w`tj2mmeI26v,GNԶٝ˫KTǚͣ 9~b%8'J"N9̈́[߹lHԎ֜Zjf $%rlZ;cT++rzҩJEu Դf].&юn%D;]Z٘+!JQ[ʒm'*!~V#IDg#J( ͉&?{dU;}^ އV,+?&(!_"H1ٞZuyM⥞==a,=h _cmt~\yd{bA"5C7{UEYeK+_}:p^2:#OL¥RضY:iZ%dTģ3 c`=13-LZ!V3MЄWΙɌS5b 1hwS'T9n].$ aM Gq fA4PG_&&[؃ Yr37ܶXi.yPq̶+mJ-Q@eyT/r%KY:N$!~N)*3Tb}9ҭ׃g- mhib kb+Mm, zYFe~'d_o1|a'Dt3 ˲uj9tRĩi=BCh MVl;U4k:6zƢ 1@i"c߰-zdFws:pr ZukF_߅!m*ۥ"Wc~*ja~"S[i!fOH@4)g83ЎjG6G/iP;E3 .a/C..WQONu40( c7zwj>qQ`TI͞[!pp<\;lXLg)SI#rԇiw \B$,4SK)( 9h-{gx)bo:)]8|{=eIȍ_=evC(#3 .lA'NPdJqF"ٛWM2 #7 lBbG>#W7UNB5a+;WT=O>N2'Ç yXpA,A=Nؙc@y .ܳ@vw#5.FD%?bZ+l'Y/w9IT-f,#ٳ7#f_s=!Im0>W7jYق|lRY-@i m>>`"q;}n_tfۃ@OtpxjI;/U6BŋS.U{^$m`T, юE#6:ܞY7~mD]W V}*󫖫$ 63:^6-Pߊe~r,@61 6J0^П4rր7Um?HgmOtrCשr c'3<+]Uit"lܱ7 ~C=gRF:x#s.菔s%6,rخYX2ZHC}2(B)mnO7|óW~:ts_f.ҲDe+Da|5'* Wreq99y?blyH7gV/eܞ ̤"n(~ΖZBL;(@o@TF ZӋ  /mQHi&n)C8@R5{^?l'9 C[0ΎIjB^ìލ0fG#u c+2dY$'$៊T`wvמCkC+kֹQm@yKĂڔHHCY萙P\u r7e[& <@_U]#nT8­5ԩܻ/X܁a9VN7>t,>ViAs$;ہ5c$`/`t!rΥA@4˖9iݘ#Ze0+'/q8pw(bϳX!J,EF݂$Snqj8Cء-dw!RwW-$ӳx+HWr#nD$d=„Ǯ[zFXh(MT߭*ϒ\_ez7qn\H:6ֵ$$_u0xˮR\} T!(/u`@.Xjo_'k&Yϖ*Wj9NKή mr(]>$y!5,V0jJVcCb C*;Hxv 0:}m/_ϣ][Y*>I8`0){OSIrdi LJ,C/t؉6f+ix9ĻۇA5s:y@2<` #CʱZ>̒ڍ_vȲ`3a/X? T,*i¾`^qyVG1r $VE1r1>:mcHqVZy/ ) ?KjN.K1wk58 hpOI)M&cn3Gj^cT2=t^& |3U!~f󑗼r|`@`N~朚f*2Z!!W$Cī(۽j iquc}<1f }to@8a?wn'i/ &!C{Fg\W3k ȍP>0]X": M;"UBz5Sk"&Րo9'Fht'̀-({}]< d~l# 'xD`7 1v E@Xl4d8̨Jir2oBJg :`YLK 9 sbiJ)~~\ļN*5/c/v~hJqۋL-;N_z CG@ l [9'ϗ좹A~1{C;+Zİ96rM)__k`K]a8Q3ʷ􄚅$$?!SLgG] KJfG;pzWc+* uK0?іm#??:1erQá'Ps xrY\ٵ*F^r6[/VzC -˾H"BSW#v -OCc'2P~??d*Q-'0\v*2[;0!W&2шخH77ZR~Ew;&}'f5OG;իL._fY- cٍ܉CdgA-&cЯ 855bHY~`z{2f lAr' <V6!cS-=5@=h#F 37ek60rJB/А(@52"p3U]K\WBT#M{W j/,b 3v DgHQP6@O;"5:h _1aQ .EIX;-3 )\c5fBIc7BV:eeGr% (Fk n6~e (n=y;"&,tioz8U@!w7xB| r'KbS(aeX-A=Ġ1qm߀œB9cpRۭ6~˹i }8K,w1^*:^PK=LHcml0#xR-8H[Lj;O{|pS?%ˡ&վm[LtYCEMUt4Ew8\.UjIH/h|5 K=fKڰl:k+>^{K4w[zH!9"0瀏.u S MHzC"ئ@@~bŘ,=dmWCWRNg@^Y;yѷAjPH? XD[dͤ I9iXtŸߋ iiՉ]}+D:2Gf5mg z@fxߺ&G)#iW^2\}1& 1)DPQp3f% .BXN B#&>2oFs+CTZJ7Uς5C؁SN6o!nEJ{0kyk /FV]u hAnA`Oİ7Wes2!!v鬮Tnx㝤F@gw뮘!%:+܊w~q^Ҁl?%XR\ &Q6pyPKqLG QzhPM H8&Ʃ4W.G.!;o\FpX6h{8o,--g2N guRE 3e^l{]D~~ Ρ ?롫Hv4)[0{Br y;X7r<$w3~rhA0^DYIv(J>- h]Uz.I9:èhL?¢ɽ ӏ=tX"!|iEǎ7\I3:lg.aܠI?h'k[6"/R%}SB*33 &bH O}A~Kn݌TF 3'^ظlJD *pKf>-!׆{B)`RBCMezI7an60=їo8E&7=<OKV,ߍ!M|u]~źeC]kT8wɭ7J\[?4L7%@8?Xڒ@e0M UQē]]~K&r6uN텮\UGIВT1Ao:MaQ̯p_gCN'dJ2*MZk40BFk rqUT<&S԰(](~G#J/E]Ty.6JSiI"Ǩ9V-&p0ewUY*M}֝<0IJĵL! #fkXn6 (ZLO;2/0C4QZQCG7|fկ;z8iEjw&~$F:ߎo[AAgg^6+{ phǽ#QmltŻxaUw{t W̛_d>_AV@^rtk%&'+/@Xi"dduD3ʉȩ`N).NL {aDϩZBusq,p_e v49,x>TK}2-IhIxd{c0_)m Şngğ"'?i( Bu:JU~}}eZluÐ1CyU|\OYmV]qJغ>4C]~դHÛ~QZF(0@U@o =j~<"˫u be~l9stcU(PARCIԈ+e:hK={oxM|x`Y|>C%_xGt!~aga$|# tPu;lh9_S仜UBzS ۦR%PB=x<> 3&srtRFѪ. ݳ6 wAך;JcN% A #jV>stMVFάX"nܦ_'F9n5k4.\ֶbJ:Ї *iK~ AC&} !fbVwRs":mpH Y6i>5 7yl uiQ*EJĜBgO9I+C7١t i d%cil /U Z*^\TSECfQf,Ts2E%KWJC TLɘ阉5e0Da5?Jh8 W> 2dWw]&L"[X &SF&9}?HCXFܕGe8`+xU\1;ŶtnJ@[?Qh)-@\f+Py>a<@ X8 Z38{ |X&qm px嘔4d(.NRgI<IJiګ}=zOݭe K2<-%>U 4NQZZWٮg;(0Lo0eoq`jYbPn!t5 =ĺ6$UFȤ5Fid P F.!N_\: ֕ud+*8LzQ_qJW:LzűP*ԃb 8i. e?H>->Ee>Whc-C3@=b2:Иg sE;?m\ 6-1Y{2(ϓXan}./7}_|\rBFګZW=ubާ,\(u)(2~9X%hKBC:ރ惄'HZ rXEC#k<)2 "ƓpxWgjR;3oTgfa xhiMxW`y1 q5Ӧ}&}AlK4򐇝f>6_DqEUm&.> 7Ϗq @ꕲ!G,Lŗ!(nVyGOAGkַ8ol~&3gR}Ig$ @3Nky HV9 x|澤5b4 r_eSvX-Sw"(u"S6կ%26൥[ WcWH;ʞctV!> yMZ8 {'ư۹=&5e_ۼnXƆ6{$/Z _ZKޑLv>0 noà ^t-ܡKX`b8_ʀxEz2Ѱ45L8遌$#S6e 8; n'UCه:2J[OgFvm@5!%%߀,TDyFԙB9^s~7FBo}~{ c=Ab w7Ysk~ r8 v"͑6tLjA{aRR zEkDTus"T0l7_ ￖ>Viġχ9B0gioE+AmU慕UqʘJ{'Y7XTB'*ĿNHQ ur f,reCd'cCWW^vӜI\ qBC/]Vs{` L!?hj: JiK Z!:wADBJ X %s("9^߷rZ3{]cGE`) fG$!%2n2fG9M쇊a /ʔYEBmו⧼@P4msn87E d}3NˑݚE2T[݇;G,  K8A,&Y>v|/?Gòl}Uzh026=&ұѾ~aVY %ȢG}+׳t܀d= |/Q O:`e MX]9?O!A`ֲfLRFi,.yfq 9ǫ%_È)_HYQ!%(TTG(x,MK_oyHѡ#WW0W ~ߚ4{,|wy%b?g:ԀskÝ08]feFf8fDЫoU} L )\qoW'~#HOSC8a4R1 rW萭= ܉Y`8!T{Tw[ҧ%>X9rR`Es{dw #I}rƫuދqd?~PCl3n[ %f:VN@Hl'J!jp)g7e>zkɨfa. A0KNB,P= 0֥t=A m=lgɝ TjfQYP#hJ" >lM[9Y`Sx`J25`Oy` )#8BBH ўV!e+58 ĉJ۳&&! z>5d`}ksRU$exlIgJ=_S&jF=dL9+GZn98cle.M{`1h:UmE,7!]XՀ<4wbG$JKG +c~b bV\wWNgW㨄~DJZjKuإf㜵Rٜ9uoefWRjcpH4icmhPð(Ag' FD\UKT>ch8H.}œr_k:,`/fúmbPʉfxi b2P\-z=zsPa~7/.)%nc6"ȸ+4"#`5xA4,:% 18O.ߞQYn&%XM}"y(r,´V>ԓ2V@OHzmUA Ihp.A w`Ub+Q\=xQN"n&5-L'7p.P35Uf.[vD,?m zPk /,l rMҫگ7QɞQ>q$߅Q P.G/Aq`l%ԫs4P.x$vz}nG7IT}x6}h}QH&"RȌ)Tayjʡ!gbCI0)Sh>263u~0/+ሶJr-U*'Փ^4aD{"~f^߹v?BO17lfd7$ʅ~Q<e"189ĕ%~>*,g$d81 wZ3H hWD<71 0fKLG$6hR%; =D.}L_u-ycc~7,gb3\9>"p􃔀.7#@oE*ak*g*9CV]N0s&أ;y&l^<~90<(P=Bpc) 6>?ܻ5ӵ'K;=4/i4D?w!+Jka@OazMr *hW)@+}]qD/ˊH]u{J+WGwx<zM=s1B~gJeT_p43߇"Cw9%:ps{DƉ]3Bs[^sm0g"=VMlU`lطI": q;4V‰&S;A[e(2$g ^uֲ"# ÞJ%Rn7޵GY,e`gԤ+_q]29pfS{v8AHL6ȠU] %X`3>֔E;(oXpub1os 0P8'h`p47R'&JX!UvnI#hDg#m@DK|>2zICT3N{s"5amt)br (iKL>x[WF͚U;!G)uc%YMHb2* %yx݄K `'VvoQw|9^%TzQO0Nc *aJ!^m Cp|n O[t3lc" `'Q2Д"@x]*`ACI/' (91yf"H"R(Awl6/Wu\VEUy 7f+-9Dڑ71+m7U"e1 ~xynTfЍ,P ag>xO]cF:: :2jDH(b'^Y>k0x;9ү|4MZAun zU뗯)^_ROnlr$n)_ա2},ʬ?GIk9'> N+Qߞb5VBu~j_Th=a.*@C,( iAͧ2uI VAW&'ˌa"kW'HUxxJ}˒ta(5K, מة x D<ۯb<O2kt5mj}r!WKc@4gMy rwr |R buɂ^T7k$<4?Opm)V:dǎJ^'M3qQ"u*Q> OuR|-7A/unJZCzoTpPW]$Tko S-=(ZM:0-LiM$ KY:{ZU aQXżKQjtqG&`Xk\:PL3b/6(]9Nf6Z [T/#eYe4wS ?%%7}kZ .ͯJ;8x]y[!Ӏ*@/&2R;7bYS1D )Mp%Ji+܃~dQ]cZE@Щ3 ~\ ~jdrnO1F,i*qi;0m["0BeLm.]|3>}Mmv!,S||EG+k.57EDK2 92 |~@# ;~.iD2="J"'DO|CoANC_޹[WT|Ed?GnzT>P3K* ArFF?6׿;N4xgLy9LT2)}6WGoz""Ӳu'ؽv_"Rn`_PNn܋!DXAFf4>em#FK_h,w8ڢ=hv1 g>TGTxF2_/V-h2Piߴ.5X }eq ufu^˦ w'h !-.! eA~%xt?8/ny1N>t euݠl^݋`-, #tWwWK/ų dc>=]WNxWBxްZD ýw{GǦ=NO+'a0qCmraӗg!8hAvP4D( dY,ׇhRF"0ܙ.?!zM^W*1ʖdhY-4AD1\ zmAlTxx\YDzܡ `>|Ch:o "+( ::~x0)sSE9pc  Ukz&96D`0UEPkhz,j*va~iZKRI?[My0G[Q׎Ƞ fEHܴp_. #:e+XIύj*v*,+@sp=UH~0 xrfPҏjJqE&i8tٚ0Fao#\`/w8Ë|^iJCqQ*SА`GmÕKe|`sEø йqɖ)1d2n{<ó'yDrR{cɛ3ߤǝ YeXk9)=gmPWr]*R) rޞ >@?M[..h~BHr|0TRH~8=.F‘?]![Ux"GBi@Gbx[jHVf޼iQɍ¾5޺(ze?l l&,R3>E'הTp%1meWsio|\,D|-> Z2"yNR^#(-j!=hd ߨFg$8)CAփؕ:&:1{Эv$y\swAg>=d'd~[@_5$E=C˗MY"^<:+! >q8F?j!pU@ϠHGpÄ 4:3Xȯ7inDzQT=Zw%0|m/lU 3H*D(2籉1\LFaNtw*RɏxIa %)dҩ$ ˬɚ/GKB)OJ+Y3O^~!B33Ww"ҝU KeS/mi'ӫs2"!s9|jš3V4ÃM8JI#N~z=7'8JSMC5RCAf$4d4A͂WneUQ.ԹB5RÜpA_d^ ;kS*^ +iaC)E"Bޮ`Kf*v$j!4%Ibƺ(wD0(k l7N;Jʇsoe0D" y9ܗ I-6mM$! !_:E d/(R2*ُ\\WK :uA64&X.V )IʔsF< >_0Di*on&۱;Do򹭉[o_uKڑojJLir(;OQc1x]u0*n/V /r[pga,d"oFPNr8oL%Fnf2 맇Y~Dcubb+6r>v``K8n0CyIpF&8;$tRey+Ŧwo,t]:-AH'F^mmo "G?O2qXģb^G~ɑC5s"w"er"[R@+F;wļHqNLJ~:uw!L $@1DʪUDֹd]GuH&cm@М)7Ylc}/"ur[a]Y{wƉ7Ya=v fw9k֔;_ jt2-NV/m Зt]G!{̰f&GjD0lǯo}YM>y~"Mչ:Spy&}WqMؗ/Ct݉U,"*IVe=qSTl#Ftbˀx2mET<1Űڂ%wTBw;`~2oej=0C 0W9sE?uݥ$Y ݻR\9A 5×~{7e@͑j}Őolzz7ێ &̓DEt{[YA,|TZJ##GD-Tm:L?X4w9q9`+wYuݒVԮ/4(bɵp Ow\1q2]0-v@&'&qgѝkZ5pWd3 qgTTHګd]x%c9$*n`9D'O]^SkP;[CMt9rzr?JjFʱp<^?#+8ctEpHg%L=B_]$PMJ%THv O+FdØ4lԃ@Lnh:SXM֨GdADE\M),dGI]uR$}u‘si}ɷ+ jH w-\@lN.['@g9V1DĠ m \$=w}C۷|Puq԰J4+50~}#h(^NWqAC];x靎jڟ<mgġhr{a ὠW &:/JCXge-I8B} Ar Jz%&7 0=yB)H;U>թ*)Xw(*/|K5?} G[`տ{%$3s;(IH7ɫv&X!ᖁLOGΟqLF4ҫB`O;6r-STM<-qF#z7jj87-%R%%R9([5*V!Ĝz5+=Z㼦``WjIdand*|TPkE`9-՘ZzmwC;Z#KK6!ɬ5}~_%Iw>SAx QwJdad@^l*hD34 p'+{#`p;())R{*~*.Vz(L&U\lcFtծ*HvO{_>ߋvaEW߱M& &4r/?R6m{87?h ۮb#fdfOWH#]M'o)Ѓ?X/k!9\.Z}l ;qlű)F#RH/mʸT9TGaKհn\at]$ƈ/uUU=`L2 Juɑ ש&t`p4kv}!#B.jgZNeإ03f;3.hp8 {'T-6GHiXQvD{Vbڄ$%00sh"ǡ}}G$C7_WNGƟfz* jGw0s҄=^'jDyT})vZJϺ|LƵHZ'ۗ`LZ$!+dFWm{3dOFcrɔw7Z ( wʟm@\7 ZR+^4b 8Nq9O,taVA2EDUn-Eo/$'5v8og'tW7N[@0/igmPe:xRnY0Ӓ+4a!'z8~YwsdAP"' c> [DK)ZX7A6BwiK+m =^):h6c <=gD;=9ݽU>+ݳs` Ĺ3 (UwQPБ^Q SšFjpK ?h+p ` ׸yX"n˧#Yw8'eU]܃(Eל4:(P!B7׋wfbI="8oL %+E-ʙuyjxjL<|XRcS* -H^dNxM^g"^.rϱtw~!qD!88 P#cGI(f 8-g#B:~PA:Pp5XSf$mIm]`Bn5X"S1nbFo=Dv,[EtK*/#,^{ |! D l&v˪mMtb@mL+@ \ 8Jx>4>7iX O7gk9j+`Y#aLkI'1mkea鲅2߆({=.'nz}S_G3}̗hb,^LvGwe1.N dA=M4n  iUAWJBۓz@NKU)Er͏MbpɱJxG؉юP42~9B5-TCPUjiTGF ЃC:*h1r+t~4FCvţOXh'%SfO̕^ ubʹL~mgFqTH6?iҐKqP0CSFe:}X_.0%~X3lShY6 !Gpve$IZOUP 8%NWLiH*ˊdC$Op#*ŒPw!n'1d4O5vW:1ANEKs9,0[I_o(}żc/. X7yzlQyw `weUﲓ 2u1k+ɩTb Qlis`7EcXc}YiDi[Nlp,dRP3"z?̧*s`-]洞Pz=яNBЎ 7}*\)Q?Om7S|uFzP7|H(( /8}JJZnH`t{Ğq\V;=%AO m>4W5kMjY*Xw ,8Si 35h RJV85y4;Lf4!<.V! Y7D,ZЛ .?;Bʈ wJg74-2(]]j(pudP*1< w'[B_yP(H)Vj(ڜ5_AZ SUxa \3@@вϙ,ZodU9D/8RbgI3V]Hs9j$= Ax=C8땱h+?mE Dl`. qS  6^:PT8J[],kU噾Y@(0};*@:k8¬ZIwPC[ ;"8<5Qc\͕.ãԫw2j]ol`ۢ"TPp؊Iڧ 5I%TLl(-&pk6YXmAL2qsw#Ў"CBi^ l_UҞ\O)-7ҝ;lET]K㳂Y$ 2wtL&5 #q,?nX?FfxHXZV_[{ . !I]o |i Auk@7&Y70%QN$4HhDIA/U)y8'oO&*L E1\Ƥ ^2xt0ʤr\P7wS.3CAј>Kʽ{tR6 'pfm|Zxi7UԬ%i3=85?>e\ THG$DQÈ{sR`u)?Nly( 裷[1); PfRQ|cQD&!pdHfڪVq}L\k*ϜV``PM-+B!L`xRKi4+;yK9{3n|ko6Z͔n<#;`%)C">DbݘNu^f܆ ȅGt .:r}}u˭CqjME Ğ=r5#i x&ԍWрУhRE1FBٗ& |@P47(JF S/̮ ?ѽ}c=^ ti?t rz`V:m1$ީ^ܦ(0DvL󘹚{Ԗ#,N]^/"{kDt\Xr4i/ |8lHAwl -31GuF.f;2//dQLkrBΊ#B3{"'^o1?WV6;?$"EcQUz1B>,Suj=OnF#1(t6Z1[B%g{U쮹KDEdb({Fc\ѷOF׿M<9xʏ ZB+Ԛedq.=pxWP rv78D:Z`io, j~~ V]hHtA>KMcufB .G{'Jd9hܽ+q() QupYvM/_Ųd;on5R̫S[A>ÄO:gSVF|l]܍Q<T])h?z~ Q U-7,\B(Qw]/^j $+S +ÙzָXu&K:OR B/שet tԶF DHH+eajӳ` k((0?6fե) 5yz=5Bmѽh#ƮRK/WPQVՐWV2}=~)'COre,w^@<6{i:ŻR`0wlSmC,[ T:pxƳXlm/?F+~4{fpց'aw!! _1`!luM?'ԣ7qcHkr 6ehs:JUt2[jBJܚ'q^GqP.^m$ HSxZ /o# *c»ޠ7=YEp@B*. wZ&_Yuw;S4R7ˎ|8zQ6 q7J1<-ŀ^Vi0q.%d5nWfG: tAu߂Av:0$F=>x*g5Ml#К[U otfi#wPQ"|B/Ȫ|X/2<1@`0F=RO&+kԛn8/`0砩7a ŐA7HM{3%-j?|n_3 d"p1"Ī3r  XF 0\9]TJ] Er7WpP|-ܪ3ucId|ec>%G꺖*+ֺ^L~NiHPǶ36dʞZ\G@DrAniΫTN2: e&'dd;Jʯ;T9nMQ`N E4;ZQ+Ob=|d*τ!bTENC(%i5R=*%6 i)|c9G i2gcB}홀VyDEWԧf#^"c]׺﵌w}eoNT= gGsKwXSa c) H((]u1 { Vlռo'x<_#7(?F>=~?Vt z[~!EՇXxki#,>_$#%Me,{htD[ka=Vf-y(xE;}#ٴΖ25s4?jK pˢ퀊v;I йpƕ۪@oG|z罁a4#cU> oh²Om[6̨zR||O7Ą>zv4Lr%e(󄂈Qo'4঵Ql34FTPAha7Jwp2KF@nwQ_RW ]s `yEyAbz2)_/8~NϷ*'4~pVde Li;|WDX4R;<땗ёԤ6IKїayԨڏ"HZLX!=/ZEPr .(w|ܦU]f7{/RC+ ?l<Rx,WvHL>y ↹upHw: qglc%i _/LBi[:9/I4 $\!nm׭Aʖ~SN7h3*(ꥄCP0Tn%-DԵ`s5=YZ=zk<^tMxxy6AkE  ,##V\#t)e_CN*x;͵#1Bv)O!5L@# HU+M =F OvV#!CIk+zU10/F5/!50o=`Pj=۪䮯fgY)_{;P"s[;eq<%jQ}] uM m/y&aУs9y>!ԑCUh-ؐ_B̟VDֆxMnjmWOBG(.@ ^=ME.-'`:uLy؋56gA N, NƥG00qm b6.Y :φaA_@CH@Y-{V{MMt:wrwp 4 _bm z'tZ{("tzBJY4E |.{'z ~=}`HM8`s{3Hفݗև"vnϦi˜'%eÄ M{Ē'qaaz?bl1r$F{3zL-2>9nM$]|GPo%eQ~#QNFEW@4zK;@@1thĸeyIXGKሔxyׇa92g!:aܨZl^w 5m7攮#PV,ѵҧn)l-,V޾%G*b֋RM+VPTѳ]ᵅIjBR&LO a'DzkՆIs8-18IloLWF'hlڛW qv?Gf`H]+FCcs2}݄?j gy͖9>=}TCIݵzaWw)1MУ#Z4H2i=}kYƆw'LҽL̙y dެ%_vn=ڟj̶zIU!~>1|+禯C&s\JNӹ1_X0{`Nę-տHYzI췠^k`6aP?].!@ ó suS ^6cyPK@[Jvv֎ [CS.++d kgMF٧Sj0hzr'XU8A&0|[xgž~[!W[s74 UoÒ/3^T{$]JZ= d;P@V|_8aj.@@FÿLZ=!ǭs#^!"} ZK[V)#04C-Ӑ,ՔhTJ:oxe]2Q xmlADyX{F$KJ.;CVL6Nf젉 F#۠#ۘ1lo9%wd|:LyO ~1zR2L8俻=-M-Pz S{ Or⣗#,ph".P2~|l><9FhbpS1~cZ=t͕ae%uT'_]Yt۬\n$_u涧m02-r6vƃI9ʟ -G5^٨Ӟ{1x&j X-I4,⊲iSs45C6f'B6 Ui寜ZVGp"T!jENF`+Xϯť8ND1/N|ou]'-HAͰ&(^Ӵ0x%DmH'[eE*F9-gn=ؑ#ճ/quD!2˻0:73DF N>|OYvAҜ@"55YuLEB]Z|@gzЉ<|^÷V_i:]4 l~Zh\Ig)?R@r:C"~%X%Qؓ/yQH1!5"qQ2J ab6K>C,0.fIi5ҡ-Oﲻ]L *^%o[Lp ʻmͽ8ƤrmEjЄptg8?Q9))[Wh$ZRE ԆE[?v 1KsDf X`o6>܆PId~umF([Ēf1n@6N\/W"˅][Wv}. dm,Gzفs~ڥ.8} * _װm]Sh| ?W1=C'wrtڹ-+1ad.-b6{$eg\yd"T[Ng<־nl߼7>_~5PMs툹eqpwϠ& 1͡ <.9[/LX4gi/@M)">:C꽧Vo{n !Rnas= pqb=z3S+]vxҭ_H*B?G81$xc5.VvRhf%4fe°iKh UHLMOX|PVnDc^ l3+eWaIiX$LHzxnG:CCƩ'z S3>mXWH"s|BU&\>_TH6z[WkZaƨFdiLnECT D\IY;b⤛ǐҎɮB,&iʷfd'5;YA5ܚMãSCēuw8%<_(GEx7Y˵f@亓\oHmkb<+cD Ѯ,8h;sN?\?t"ښbX+D)9Hq"{sZie319]SqC0 iwJ*pnzFS&$AIQÖů߳;4vY:HT}?B-"Q\n:7!TRUR&V2T3mͰb3i dܿVx`0hr,v0 uAؚ @vX4!;Ă!g|wXI^Scٜ}8k߭1`tB<:z eYnu0h+{ZH>gIjC'S~ MNtdN7!XlO"m@n4yg"_ 5 픛>jBfk#ْ榵ePB+b\Hp,yh3f[2Jlه?9c|$SEZ(j3Ixε%E[7j+"/mo;^%$SMaN\MhxUdG OS9}~Idؓ̀VyM[wĜt%as7_|U~yC > ? B!9%"ip&`eW:Wlq/ CmNuwX=è7ޡg-Ǝ,_3eYWTHC;+VL2>>aOi>+(d?OPF#!|ļI7k/,gבEL#CWAa '#Ȣ,ކ!LvyfGIwV&wtP%ɍ/1$)\:{V5+*i83oŌV FeY7Fz V٠LC)ѡ +< ,@+FyJ}jD?]J~U=%ES|^4o/!&dn*܉e=Reurq+ WȺ߂,T?hPsשRT봠k$'̩~׉3 i8Lu Se`a'ɺoU6ҡjv Ole< LLީFz4M-H[xUXyIt:6}7Vsn0L)<{dĶf%d)CCsfG;0"`F j\ڍE*ټWXj"gU$f? )JCCB#Q?g^L @/zhg;ɋ-["Ů{(l䟫_֜ HCX D@q]78vgic=qtjGcLWyw#)=|#@ Xڪ ;nDgCrbLfPmSu%s?n`'r᎛d"B mHO8O#B4,~ÙR/KdRuKEg,jW,P"ߚF]̥bT~j-u~j8G ZcO3+p~]` OLZ &Lͻ!sM*/jCj;yF sG)+[KP TBQ\Q-DÜ$;[tKvd3lc;W/xi&}'q5V.9 Ӈ%ڡZMeuFٞ(uӶ_IT9C(bEFtϥdr% }a:&▼5߫.o|ݱ\la\fbH+9WˡbP7frZ ?,\gȡY瓹emɫxL/TMiά3#RJQ1 B+ǵ~뇭܂Ymis0(ClfyZжUGx1+[$,~ 1Vyo=V|t $\:Y"eVƝ2 <ྊ\: kqdT>!N9sn9ؐ1.FHT#{?Fi˟Ry4j|xut.%D \cQvH@^rgPSbX[[:|cP}I&eq'{Tk!KcNV.`NVMqɥ轵~5hU{0_KoK~+J{Z{2 ɯ\.crֺ߅A,"k2$ѮCwBZ4j.cvXBkS=@ߣt1) Wm 85 @2Re @z5!Ϫ93q Ą^ŧ1N4ۗ԰^1;Pϝ.y`XxpϮ?v ցVjdQ_ TD:?G»8FAbdD0;231R$hqLBH"`ECgFVgX N1^?d: +e#Fn*㽚2A'Q'K2ټpNf61>LI7IdhrS\wUzE`Y[,]j.]X{4+ҋe,7`mM(w(SP ^ic E:P'Ye!nFc+~JFOsm_.Q*fS,4f訜ap ܯXG%[2CT{5X۰:b|T, Q_~i/n=̘K˵=-,;o" _OѼ8)T½Ȃ|lCf~iTEao4=% I@,Lz"=W,ـ1goÌl@лЉC$ ^ޡit[Z h7ҩRwË / E0c>j'ܸĵwYPP=W.TPfGtFs809s&[]VN!R Qi+C]6'`p,ۋa)=0M%ƃ !^UpV BDzr@c2- 1Od<Œ=oxglٕ9^q Wui~iN/eb9+Jt]@,lBvV֭¥ir@rV:|Qxy hp6|Q)"P#ȱ@}Wv ?A_yUQC&T`OL Z]ЎTyCRMΧw# jHZGOSʣZsԼ6kI#k" ";|)Z|U0Vyk $Ҏ$:*Vyvt"X@yީWء32/=nkg_TڤXa1;I~yc= 1s, ̣={,N d1ldh6JquT.rZk^p/`1Ϊ^9,UL&j!4Ƹn;+®zDP2`huєZ@HyvL쯆e{K>_Hr$2҄P}+[ƿnG=B)һCȷOܝ)< EM+SKjCJ,J* uNNmo,ֆ;I#$hf{PQpzIݍ=l?do  qtpʈLi36Y:ډ -2`#Pm>xEY4ŧeVb Ywn6B]eUH~Sj  Wt*eoԆaA8K>f]W3^- +֯d~[e +ghYKM0V[A@<}i+p} \,^=l/ yRdM-ctp ~V ]{+I-G6ƧsUk+^w4NjHiCP2MZXs~T nFw5<#L̷? NfMUmj) G:R cC`nPCXDX \Z^VAVLd3E?D(!ՌiS. H,k Cf=v$8bEI?! ZXS6s3Bˌ:"Dr;#y h@DP6P7ffg&{j@cRԷDp価䋨y K{: w;7)f3j ff6ɏ40X7O>zU_xO"A,,,C]7.2P+ Eտbmq2SCe&3V!JH!xX}09]yt6RI&H3Qv(_wynTw aj^f^4}U:%_t#f&:K [{? Oe'J2b/@ bw+%h>TrGd&vMk78׏Pm3Ud[pzłsIgڃ]8AԤ/ *aT|FG(34:=3搞@ 0.X?/NC<֨ F)h̩2|DU3A /m Im1 {Ů\ÊUBQT7mMoVABˀ{)f7 FhϏ~_W ِgX zOĨ ٫EXA+ȱu20@-mRM؆$؝ f3z,} e,ΩBS{d;[N_Bdt1K0du Zu_59DĈqOy ;X75?n ك*a3 }ͮKL@NCo 2fm' "kr"7t#UTHL-(_ѕ 2S 6ܶ#OSi>ܻN3[h?龿mk@b%v+5 <<`ñ>J흍gIlԥ#N~b2,!؛ƴԸS˿Ek2\W 3hJCUi67HM`9tA&uZQIK9OP/W[T98IztNb^u@݁}||YM۟5ܻ՞Dأ:1O(S TędP1~9n`%InN {;#s^$4V\'ZQJKM\gd`vHcZ@nLL]Mz! Zj-,@¨͐hNEVMшaW70p `k{j!"QhZL-;fKP@Ed4q6=_d;OpVS:(@6o=4}17)ko+Hc SZx)_4^VM olaV{WB:?-u᪨znR,E 9keU;?Z S֭{gYJ֬.9' d0Gz DžRKδ7&qBY˰NL UV7PliKǒDxYts>XT4 G=N&T >Iqy5 V`ԯ1쓢-{ڏ7PK/!˴Ե^+-"Άz*'E^V], F1gLC"]7e[vq3 Fs,~-) PE9 /;,_Cݘ dgV-V-ScQtpKE;rUP1hnHg0sGNqT);yۖP'^ĜƑMҫVqX /Ĭ^bF+\ \1G[HQ,gBGyTf'z`>+O/Xvfؘ[P#CÙ} GyO9H:r}Dk.5im0y ]:ԎxώD?rR?e ni]JK?3U[&l&sz꫌`a%R" qlŖe}:s6kvmӖ=F% yڇO2X0M 6yMLI9`TG~$.~+ $2_ZlYͳ>X.Dӏ55ijs$mh]QSv?UDi4 }8|&:5 ᯾y?)K{],WlNrS; P0br'\ÂR%4_j%4doBqRmaWR">=u^p2M%\lT.)0-zk_z#cwT}UAyl4rlR[zpz ^*CLQpc/WS\aKfw:Xcٙ;`kI]uEqkʳoթB|$KJk7|d"\U ]-jm]O~oByqco[2l69 ]u}5(qt!7XU~Gca)9;#e[4g01B8";@Wץ -ƽ{[׫=EGa|w$lB*;r,Q#TIP^X m$tD/-q޻2"w(ʾ"-pk]JȬzu=۩QN Op=>(jXL׃aEƘffn44`EnpKu,߼N&:TY;Φ0BЬ` 6.1P7 3`sP~-z6.'h@^sS| i/td_Ecpt88EX g$&ЬhDEQ 4\%-mXM-MȒ+ \܀DhRVVk$bR7xOfԇnzLEgVշno@~E\?zY2jx UZdG$(οͷGga.rnȤwBlTXX'I=MƏZ99h)%*f7y2QӅ=}{ˬ&y1v?vfW' V6- ˮ9 jO'[e:+9BMЪb珋8<5 [m[3J< `K,q6kEjj~7}M2| FacD6UQO^j7̈́EY]8ԡKuI?sa|g. Y.~x^B最hR)Pz,V Qg.LWo yec.M8C^ @p.0`Lm`ɯ;8#pN'pܔB\}u10 ըGģHU֦OJ19[^>= 훕=BMs0-l6\-֕\zzM RP7#d}G㝁F9OcB17LM9 83P#=Yp\(`[YCۤDe~YW*g\Y½NX(aWޫI(p JZxeC F;f&A7=1q)T~ͅMS۩CKFHϙXn!&dـ'KiH@}qօ\6xnUF/ZccҍJcpا9+ٝ~b 1E9dǗ V;Iw,i QVu ˵Z&g]tC6Z11)|h|!#e!{y5T벵?VTW{ZMpF3 Pi{r=s}U[|pMDl3νtfsTP|]2`"P'}tcYsu ^-=}] ,/('iܥ Q}"t&C_O:5[E* [223(oyt BŁMP.Q]>e$-78kT[Wv `״xՂ Q t{xVSJ4Vyh#SWƘmuQocZwX5~/@O֎s:F+6μ\1sjd}58llr_ (k'ey ,u~d'/[iMRC.\Ůo6;eMS|~_07;o$ 6A#QT.@KڌbO~|t]PX$^f'QHAF`m2*mf<剰d -8ۇCngxC6Xn(6AsJF*fg]ޠV懼 J&4jh\w+5/ }q4s^^J#3>>8=I>`쮦bxՙHqgn;@u*(83;z{b ޫe.eIK*wd<;c"ߟ.~7JllZWɼj*U H(t8.q*8LRᢁCńGʫ9~3%9m(0R{jlMi#ZBePA?Tbj!H^0t dY LAV/ i]Ikm2*I?5&RZNngqUf\haA f1]{=W&l`*rײY˪ hpP&'u1Tq%"&<溯wj֭9] mYMb§w?8Ag7S~Z[ R Pƙ-?)RO!;DĘw T !=Z/HZ-׹!ñc 0a̷j֜0T*ڐ` b:4eb;nM,lJoqR&vdѧMۏut>$JҖ4=!Ԯ]HzHګ"dܻ/>>hf- 0JEMw<cv˓Е3 E'/Ƙ1P Na YֿҌ.hT/Iƍ$#`x~Q)܃+%-%{MWI)yC*13C?mHzQg2}շXТTsȾK3aRЇICU,e""C t13.uX34{=[qݖQ"TGv+aO]R ٫/7=ɒƕ+tn*~fox Wn^W>DaCh:W?4zz&-L}:҃LTp ׉m#rdB3QݫȈ*]'\{a*<|_;H9Bt4ſ>"qفUT`=˴&,sqnvX;rI*)vJ+2z06@ʐ>a{'%}N%?kOn }ꇤw%aO۔45 d*ie8=׸Hv%6w,2vW`w6=ؤ sTX!SLhn0\ t 1<-cE_:ܟ1WHH lVЏO^V@a%"\eג":Aɤ1iy79AouH N,mJ`kfsB.ƨ-_QmfdlQzNX0A,|,s nmMY ftB:.FR{ 6'3]E'kVuAhWȲ<:bK~ҼKgg6vR!8NS\0My`9UA=R-׬|vHLv ή$# |@WZ&! !\4J= .W$b͎+!K5?cһZٔ~wo!$$' =5 zž^kMlդNCJq=|n/ Y|N դLOʐv6Ήq6O7!䑄a-CA1U %VgAZZA=OS$ҦpMjq=cMYf,do{Jc X_ 6Y[RK"LhJW qϖqMJw;U +A>=>*!ƿAUl ]G8yۯ2yhm 2?Ž M Q}^AȘ;rԠ*8t>$;촖bݜPp>@&V-|g]7Szؗr &k6 n[N s"H̘|O z9q4 DXvȓWd|+DDNM7M+;L)dt3@!j0#.þhU|z@:)S#t&.Q9~ouZXg6G ءR_p޼:ۣˢfeTwUy2g9rH=n:ӯ$x2QzZ[?m3afK;_vpBKjxp1};j"mG[]nXm~K. G ӿ翠)PR}dAaUfUiDz.-S6!D6LfhL[?"\AK݁%Яl-!WD~PLN%= MlX!SB dMho̊N n!`ud F6@OyNpMEa·bmpgI;S3P@,^X#mHm4ƅK1T([dq\~í5cBIx~btO[[P%Sާ7.,C ݣN޿&+2#WU3/8?, m{ R 5~҅'c F~Ʉ1Q_OIΊٍF#i$+2,?&Glo9fˉEF9  ax:RLL?k JkAŨ2ؗ[L2>@QZ:9ݦ&FsvCy6b] $@&pU{.gɳ3W? 9dnFI"ծd7ƍViI/+EhAM$j3mR_B(ծV4ƂWGҊ/K@65y"-RCFJF8 I >cYU )19k{Ojg5 K 1a,5v#Kצ?Yu]t}:3 KJ7v(`=&7 3 ,Ng$0ˍU,ӽAo.RK)DqK8&{\qإ"-- EjtOṆY@oؐAUO(#`*"V5=p*^ěJ=7#>žC*jx5gJ{iKf$(2>+sX f(z*-r9偁p{|Nn~BYvMu-I@D3DSqE7:bbDvb BcxZ A }p] }A J#4w|# \3s퓾iaD0{)ۖWdkэiۍaW隯멟DƑfn>bc@e͈X/{+&`אּc g|~B~mV;yّ=| lU9`I1*eoJCVǭ(ZLRMIS EwЎys{Do(F?߸-t(sGzdh$~DU~b>G)k [ߟY|&ͺ :^p#l*2N9DR 5㬚0jBvn /`gf͇LmJ3oFWhs>X6TI.dUFc6OʑE P4cibm{6Ҹ۳lkiWm,# _w`y^)9ul}S6Qþ 8\u/KPE,g;WWNC36ADL9MWo>(2l.MQ=== x~uu[K]vg&#|]kIkXߖhG"_e%EA4Gk4]Y/a<d(n'~ [eC5>QPiW ~z|dޛSa9"loJNL6bEdM!@8hM[ !J7c*˰ԥɛ*V,lհ-İsM3Nalґ֘.nkc$61,Ɲm6"5Ǯbj$9zYsL%`ôlZ?g#6a>QC"X/^mDeԑMch%HnlyCָ7H{T_V}_ISPɤ *$)rzs zhe]:& $f)-I2<!9wX3=2TMefpɼ)-Z}DўFo+m&G ODs7,y=oQ@jUtkڪ$ /@UuO% (7mխTHNm .Y3k,q-k@s(TF% za"Z'3Cf_XƷ5=h|: u ePuj̨7 Oo!>!X쭑פ<fBw-.lbW" S#h$ZA,[{^zBn?9ڍ{k)wG~dQDYrz\r[<2xkrJRDkx 1_^1^xG `\}Ї{-/ePG= JP rYM8BԡY[Fԭ}r1כ34T-6Rm#g-"wɻH%HvHqF]Y(%б_AڂZZ&6]7Xgw)U2Yr hnz H@{w&r ^tU׮4yʳR)'oa +ݜQϴ>՝Gs^֊89Y]*?/t"˺>|4ig"RCO3p3?3,&3%OLE9H"9{ MW  W(S̊^ P`[$嶵Pۭ)IrBWu8h{66HY"|&MBIc*U zvz|gO| ?Tж>{m+ˤq͖]r쿦 *1"68q!lh0GQ, 4)G\7iDYLo7/9̭> _=䋍QӕbNZ>tPSp|}EJ 7$;u\퇷L`RSΤ-4I?rJ>9j&WH3.v^v]Jjg_lQi~b< Pe9-&AXC;Q c&a@ ;4ɝ~V1&]DXϭ0`!⻍ `hIJdL\ʑO &Be'(=R@fi*O𱛊qCoX$ߥAx i8Wiz뻽[ Б%ldg.PL& [ ན Ү̱J/ᢼ<hʎҲZz/Dn$(keI6p =IO5ImlrYwfFN﯏LK4S?fP+6Bx!j1>f$ڒϻfKMcH`%!R)9e5a μѦIEt[\>@txFZ 86t|$n#l9F>@q2wnd8tI^Yw Zk&H#d4pgx+\UAߝsL@;xy-ln]`y6ݜ*XsK״lai)N]$J# .cc/X*)LnhS,ӤPD@`CRj`/w:2Xk*S&7>wt@=o!MljA8/޶lmy$:)3Ɠ[<^0+,Zwn[;ʥ׫Q\TfD/jmoc/j1mgWE$ #sq[9ˉv 0{^ XR,]Gx4 {2hc27x9tPHisU8x+-mΦ"zO1Rvڹ_ŒoEĚRn=.}v2m5+z$H%nе[z|CuzfF -x3W@ZoF>.7SCfT$ \i*WAkkN[oFnj֬LKBHuԐϹ)N弱ߍ-VlIC]/8e9#5~9Mԭ^!FV7㡀^m$,b tS=6O`i=ثΡ7ˬ/~L,+#VS1Tq =4h13"ӆw9IyHNƮ0I3F3 !'72HgŃp21XxӡT뻺/PȎG(-?%u#ZJbye{ǂ :6:0ļL{-g twR8K58 %+ǽDsD@QSVKYs+|$Hqq>/2\L;O[^Ǟ% IG}Ңyefoԣ*Q WFNȴ@D .Yj*ͨl$\iĦvuO _N qCV)smdZ0EI2?Q#XC'OhKB;7k]uqQ7D=շ&w\h}aZhx5&d2@] 2 hgn6;ӳpӴMJr}|/ʅ "r{09Y3ces{?MS:wǡ, [knX٩R@Rزߚ'G?g 9F3hxl[ӏcGc>Z'ؖ46ጶsFijyV"lVLUE‰d)mXno0٩_7SBLzWd4|^~PINf5ۄI$<'K"bTW^V^R ctJ'uj*AuP? $U ȿ"5ߺ3=f@nY{jWxTO!a%n7b[8HV JLةio ?m-Lw>%h+LTn=o-Ѻ h 6AہtqBkN!x㫽\a=G#1k*t l" Z3=l{+}JXDW]mx/bհp]8\mhOo591% -."'.c3$,A ³}^-_n@b *xTi.ؔBj[GXl,iT[=N!ڇB/~F_ n#QӺjf`6\,A3_ o"aTp8dGMjW'LVm8&D?%6g)jаF_^*}|%L ֲ1=jka4f/<U`ɘEÂ8Wܗ?9q0Ġv~YiC;5UQB 4#f{fTڦf [kx679CġFgw/lH w%Rz$L9-T&V,X|zKxEf"ZA])2CG96gkYqfoS ~mUNz-nUý: `b^h.,A2ɪPJS4.[kw9d+ųÁxoe'mÕ1g/d9@l2tG9[ȣp_Rw"EE2XMdޟF4=⭃N^v"z'LͫGt~!Ø얳aЅ~Vr*x54mvCwM)OyUg& {Han4oAY\ҥbb5QD4z=;#Yw#[c2ѐN{R\qЧM|P% :۹Wb_*AB!ĞBl3T1Wp эmBlDKIbty UmaǀftNOM+p>.&#ޘ'ZXmw=-v~~2'9e= H*ܰ[]k`\8yN20|sH{D?Zk=V}V"d- T+@rWW`FN/]}xK <.Ș{zژti˸C7kTݦ:m߽\w2 JݬbDo򩒌8ގፐNIu6|ю\ئTlT_!`-f'JEH~ʽnjN(7Xv"8e1}޲ܿM]c/\9YgK[AVE W(*Im*nHHB:/pHyFA%cXR -0uszd? WSnj$>?ɤ2>iqvPĭq' K8~c,H*xt%s0l 4X>p(ܞ5P+*m#D*Sd Brrw%S_6eQ<K$M&cbt L1G4*ht!"CP+=皴w$0g.2Nk/ (2h?~#%f_)$##Ss'=͐_l5f^T:g!T %&2 HhIWY.%@d Ouagu fĚƊFNs\.>QɇAb(LTxx^kX+9e,3#w4ʹU#\8. No NеwNN!dcZ|PfLKvB9cc1j Z'Z=~7thsGgmbASCP>6:/ Wˡ*!u'"FAtS,ᛆm(nfܮW2[O-шuOMdkRIp mQ!9 m>eŷ[;CksEvC ?S"jiy 'OJ4K\lxh4mIDd_k] @l/c\.MZET~5&-NJKcm>ֺygGw#[c7L{JkLC]OţK?`OVp(R2ؼQp2cJ]X}(pt `z)}Mf8¯.UKS^Y af(g0 '1DB);ԭ^փik䦴gpo"#< rWJ¦$k3|-"Q&Sz_,ZbثTתΎ4]n8?CHn4kDh%_ajMBOkJԟꌊ9FY;g҆CHdI'Y'$"J0Ԓc|>4r_{SqVABfټiOY*V#8 ug\];E (rCiUפ~z' ץߊ&.TJ`6T0p "Ko uҵn~#Xsp'%UཱྀޱmAOp QU=٪?yDl^:ITex7^' Ubꛢ; &T 3{iy$C)W}+"M)m^TPgJZm;c fe K+U5Gz7ٴ&A&au_Km)gr/*Wsq jLr˳D:>*2z͇y_CЬl}g% L MLfBxUmV[vu!6w}{<FfBLx $(i5-uar:?r@!wFy^'N 7߂[ϐIYe8bςbKjs#?Afa\Sb^1ϼ\%#Nuo~lPX^a0{LMˮ }BviM*o_t"Af~%=HqZ=#0;kU'D(X g' ZyXs s ~tp#@W/ؓMWNV= B :X)Z]~xqL'%Jdu]2pL)ۄ|,TIzW GIϸ[:33kɹ$1R/+k^DVHasG̝jMk"CDOstjǶcѰT9j,=yx\(Eŕe@.9ƣ'uC+3һ msT`:ׯb5݅G38뭜+`@!j>:ePg!23Y$0Qq{%Z_ (X|n] 9RDs!L4>m Q GFZ$U- aqs=m0Jm2pL7sᜀ`+Y4ivt!/CW-rtN5ͺN!I1bIiM瘗њ5kR뿔0?S"OWn40:hX6DrqiVFo aE>NaSROBB ^%;o1q5b+xEi7<@/?`6urX*z@12vIAYG;5SυB'b*0%:v=4(kyjG K o|8T Ie* f id2$Y.Wc:qntgfueN̿LDġWWGL#kSJ:ϳ5f[jWJ]R=<t[,ؤr]8YNiZ [bp˙c  ؊I8F4~ϋF4֠x\2W3Nr,$_|݁;N$og{2.gJ:7,'FWh7ӒO 4~{))xRvFOdRʈ`,EkBh{AAa-1ҦPw킪5NJRjES5"5qU%;3enyC"F}ERQ3f۩i7XvHrLX9/u$}O4e8LfI`o =oo{5r&*V PC@͓C Q7*Ɉ,O@AkFfO 0;Z\Y NY5"Q)?kc) PBG?)^m*:ߣ=R Hw>I B-.iޒb/VK1?dj L M9xI`Zr6˞S4Jf2 @]1i#`$kKF|6V~-^݇B?v5OrmUD'`?,a*̼-]an?U?9=2Xyy`9~Uҙ@*v%7OSCr ƭVs$@+4Ϟ:eOEND1@Z4Kި#NyB,#^8ˢSkwnz f5.KHwH.v0Szܝj*b75J8R`[z* %>xNg3`dMI'OsQof~kJɟtR b矔{԰#09ybd}FV%Lnj a _]vY.. i~/v`׋vFiB8;JKe=5mߔ $vyу"#H+A&cU-/.ąh1ٱpȨ!A nc}R 0J:z>3vY~12(6徸OYS*T+lw+ͩaK LGg~ Fv;.=UB?cWQ;ݡV: º#hc?`٫TEa.e9w@ VKl|d`;-^~vk0TrU29ک3MJ%{6Qv|1VgT緈@ 5ᥟ=uaMՀv}kƺUEx 辒T[lӿ4)RS1,tAx%DO1lyuuKQkO)BY0D/u0N3KBW=:A8~gB i<{T27'^y_$U ^BGKLbyv׬@Ӻ1ӂZe4t(rS=jՃdoVa\Q)eX"= | EDRkb3 7'Kt[AσqG"SA}q(f6g\Rf3F|pu'HE=tۚB\t{d'b}(*NoX1h+em6'!\B|SuzZP2-< ,SM) [^ҁHh& Hr8wԙGNv 6k]nHn /%(YŹ""ԭXٕ4bPܽ: 'sPW}əVDXSd/(< iv  ަG`Ol]zPY:X<觑.z[LHUjD?wݒ?qtkx^EGV&y|(jm?:ıH86g垪`|w*)N LVBҜtA(LD>ɅNQVE10_1vJ2rOcC#$tEfG@qy$6YSk|P ïWGifiB?;6?PQdg:)ŵ[b΋]7fÃuXhS0 ]<ʼn܇) 抠4!LLjôJBn:U3fÆ({'_)9Š0#8Q`$4rݶ'XΑB?˸f,ߡPo\)iEeXЭiSg3XS#>b|jsGx5J/PJ̨/6.]Z= 2V﷥eә)=Z㩠$q4\|TdcE Ea4{,eYh'Wyl4]$l.V#$kJ|er\U0? @;2 m┧ s$Dݿªь//+vhUj:׎c?O""M1sxH`3UmXaqe6aNS:9z..+VfQwY,S|1\N4ᴾ!LZ#CMo8;#TpBݙ!˖Њ,Z<llGFiC+ZYw%sY5obVܣP ٝ! .3-hcF9:7߾O+O9)`Gu> +R:f^!F^ƕʼs3D-6e{wo/=AE}s?"Aq\8 k2 '%wT:0L_5MYb%P(X 5?Rj}\@6& dW9fISF/~Sq5p)^Ch>V<㖿mԃ=:Ltt,$@w!o=w{M #ATZҘ'0a_HVa3kN'_.Lxs$mU u-:@ŋJ>,kԥŤz/~˘5Keɜ[ m a$oI&l]7jgYHLc_AL SA$MzQ@lmylqy7QG :D(I `1:|?j)t /Z+ aNfbUӓw`{0@E]i`hB~z'7c.+`QAdыƵB6*IÔEhomLY>]O 4%QTm`4܉%ᘆrؗ"ZIYey@8pT`%ӿ\|OT3zAa&5'0j3#0[QT<QqTԕ)кrIT&#"(9ZBà&iU;bp=&.AY}ӧPLKIkwtVxhR]Qw(B$G>lTӎ[;~VFсAw9}pT f1/ A5olb|vv9{-p`6ˎ FE}Y|m6zoF$u yE?=M?6yė~V +NF88} `I5ʞ!7w72SFYj c"hNdWMKȷ%$ݟqgeUt[ť;y=ĸD a\Of/$Z)M,]VR! Y+sJp0OLy[dA;j 9#l:b/e&ǰiL5%]/b '7o"{Vch_LCyrs៹7 xBC=zpHm OE/ I,C8͹_(g۽<> 6}ؾ[\3*J$;to,k`O֮ÎN+og=YqXϟS3ۉ0Ny΅sH|W6W֢m̍{bwo,[&/{0 T s 9:&g͹I4[u.Fym\H20HMl[Po[X ϐpc1:Kl2r!%YZri;!H#-_deP .ZqxQ{&Kz]A!:/ERbF7)+msKɯZ0Kănr] TH8~n{ipLΖ6Z`俭3AI5eX4QZL_M'8/JͮuXćd+5ڔ}NN]CnX`EeyZ@VтߝBIR QuρׅɈd9?I}E~v􌖹NZ靐;.Ϫ=8Q\]\[̨e 6T׃2桄L2K>z?-Rpe)JPƻ\xg4aqJ$+נ9i>H K6ArΡFy:\>d)N%ӃfL++u9ip[ꀗ_ya k!M> e[]l? zsT CH^　 _#OpQKm؟R̮oY8?U{}0u_|\WcCXު3l38|-bc6%tȗU}`D 1(<:z3$|AA~ d9g֭M!GW(׬YVeqk (U#$ՎZ5o ¸攻.JuR^f5 1fXR Q)Z@Ul~"^y 7+m(MaJ(~HPl1'r^4`s岭'1rU߶ÉM?1OKUܮ5XĀvIY}4ԃ:c&N`Pi\V{Jc#@ԭƿNtoÂ9B.:ʳ-c|[^B3"b.䴥Zn K4n57IO4 XQp'u}0~6+RMcPjrf؃2:.MČGKa}9ZIQeeu 農*pH8mPXE,KW,I4w{WJNM-}naj-*,S* ׆dū'B5PMٹq]ƣחu#Z>"ӳ饍En8/lЕcNU5 ;,ߠ6ècؤn,gOB8/udA7v3pfSeӽVX{ښo4AH$;7­- ;5>_֭n=x<L2m3X89%~~?deXDƟ(Ag)GN\udʄDy/h),-C;e?pL6sHLp=q…}2TK_("4Lxvׄơ@'g,򌄔5cLFg=F9E`V3`Hήˊ5^F&ݽ*&>ͼCv!öer-ҩ`]/OxX>AD~hĉS8m`exHU{?^Hz78L5u ڬ~TveG "d 9aqDj2;屌ty؊7u:u݌?"ߐ4[']/HV,Duﰁ .1c9Iqj4PCcAZڛ7lG ѯU‚%Ƚm>[b:B},$!~ȸ},1x4KU(A`X@n=E]]- ԣb3LKND;u0{[BG~_vAZ5^+gr[ר^RȁGzUj ۉrPnчeJL6XW 6| _SWPE.#{fP"u MTݾ#3}&^WCoM3ym(x3IMcrS̷HyĶZ{-y*~O*0g v5cn J˪庻Hj[vyQ'iNRB&R pG3FO+s%Ѩ)ľj 9:Ja:%C#z1H|Xg1>4ٹ?v$/U, ?4bRdžJ ?$Ͼ'gIЇhΑA$sb0lpK۝}]Dи*3\Jdelޞ\]-dmQP:^ vS8(UՐ: `YFzF)*q'+)0ylpq2,_ JIoIk!RzĂVœ-UjJq @!0O_Y{; ]fp  _`W:d)h5Gcz BW-TB|F|5j,#W-X#cڍ8j1/V#ItX DFQl І[<>ʭa|nnIa~n598 ;St%('arpp5PDi BPi4Nխ0YX>2lM$qk,~ZZ˸jʈz)l#XV(dP>3*ݴl7H2gw+^J\;"ah8Ddl]XV}yLHk~}YeI{uƁyon%}RCHR!4{8Rkabjө9 cC*MU -[tMs{%1W<=%2"qo&]U#DZx?iA$Γ8ԩ^r/Җ`ܞVR.m7Ϊ'Hk\%Geqt|*: R|~%FZ1)ObKG]qMC #'*f;W{A(JV:eۺFfBkgTCx}/qM3z a_zS$ <47 DFر5cdT`WGQ 9!h_#?-w;&Gv,0+N$q.˛YA`ءzTt#FQ5*.#|E*>*7@stW}>U&L=`d:yA ;c}c@]9Q 2ɷ?)f2G-QЛ jh=&)=5oD(9NRPg d4bE -Tң[I>rcn;d%5Í kCDLNWfFh9f|# ?(oQWs91dT 0i ʼ3z#;c9=m뱤8D)t ~PM- @T?Gma!͑5IXlcVwf`b;Q;WǵviL9!dT%AyV'{Q{پeK%LTzѣ I}N+(̯E.Ҝ_^pNey=hRy"+4*3z)\]G76͓\56=j}L?^O|1?R&|[_-G#w]:r7M NGÄdn>=j,Q𶽆I ~HeKnb({: Z9U lgr 8q[+x,f;3 eAЧ1+zqc~U&EOD%Hxjl_ä|mRèX WRo]@xs[(u+9 X vifgBbnF($ih x:2̥+;ipٌgr@LD4$oFˬeSz:}Jt_s٬Q>7; 't_WX_z8f CHB'G~ʩ{oJIPenIe,4Rع6)_@iip < Scſv1d'0GPOF"lte z:G`DvB9A-eНFJ@M m9[OgY$#\9%jԝ9%> 96Uyy9+FmWi$ŀIB⃆ TB=B[A[e<)!fpm5HEEh#ŅF 񵦤Y:~A+6EхrϘjS?GT-nfFW{ [*8amuĭQXW\+&҅&k,ܓ0bS!E29:jvZÂԏ(&PHr 3,>,~,f+#r7}bɚ=րFZxl EO(BFP/MD o]*& noq5c3!Y)j+?$ƖճIfs@x܍ ~gy#6D&>SL\NPNʄȆfF})=cxE+Zx4F@Aau#qV h,Slbi37ID|}$͏T'.';ҔEwS( Wr'ϲ HEBg&K5BS; e!i̠qyD:д~817d*.)?9*W/E&;F?ZF/cIp.o<3** $`Hэ}]HaR+صq?emʌ;|56?`X.IRIw*E,h r@a,->ݏl-<Ӵф4؄H<%+d\}Lߟօ K) :*@*.O^E=Y keI`ER5qhU@VMl8fT1>+vh\}SP=ƅf|5e,,3: bAȖĕc4ɝ't~Ч+rhdlsTpfE/x{AoA ~mSwۡ4@&@KVEܸc7F~!cGN_鍏dDQ领z!q0AU2Or3Zr.mit 1ƿ`/~XmwB E#VZwSeV[H&VB ;"ڂ=>< Lz>Qgi D^ZM\v_ZH[1HkѨۼBx scgPRd{Pat| =wO1JrDPU{/5T׉{>HoV HjD# p m0uJ$~4|k! Ci[ kӊUW ;]|)h #@`*b$Hq)ENh4FYnLg_.8M"u"ye 1e2UO\VNrs;|&B7],5S"iݰ>G7sq꽙 _2Z0ZWV NСZdWl&[.BHs@;lla8CsC(/͡ k)Y,d6BJܷ# :7^yBOt5;krDf-SZ qz$ a)l=.cy:qmKW+Uy;UV6ݛ# ,="Bw` ~!;:Vvs:4@g sY|b7ԲƖ'뽜(Y\K}ti)vUs!E!Ш=# lf嗳I*GV~}RrDG>}>i bfNͩ'aݸm}N]G^W.LGyj Wa#$oC.KXj'8K{aYذ $ZÁwx(3>ݠhqYVt0cdFZ)|x& 6O2|ԭq|Cj%;ABf:D>GbE O?U]M#Qi9'vT\:C|D ; y]ĩ%(RH*PmoDoeU΋A"\}1Z(gF6T􉜸t| #Zy̾O"ԥӇ<('Wj/Aߗ 60,MൔFhN>:FЦOeqA(g?ZJk Y2_8RH͌ ͳdk~v+: ؗ294NHuj0 qR񳿇p-p=YC %B}d^¬"UҁuL>A/pа㔀g=5Q;_F"LRUAҾIB7*f Hgs:ŔM3ϭw]_X/DSz#.]G\ٞ7lda>Q^Cױq6+PRl~+[11vQsR5foyZFpE5#< HWNI0W9wn,{c["]Mخ}8.ҺۓMs^F|9%M9 zDρXLV)פʆdWs,;kLaBiaYC5z{ę6F`@ ]6pAM#eBLs|Rer~MѻYۈh*; \ӱ=gnhH0ӘךOYFd .Mr TI`͏]܀aU:RA!fA^w#@36#k}73X}J C5Ӧ²[x|xȞPx1xѳ3tG=iF$۟ap.]lKt&%:#H9aP+TqӅкHXPt3`cT(`Yz>Okza^m+'/I(tѸO{ޱ02ˌzvK[N-1e'pB!h[f]PZHiD}kƀ+B܆-?09y@1lu4>0E(bf)oeJ@M5kyb9?jLStrVi~.\e|T=irApc)u@!wF.t/JOkΛN䪫Y+wg0u;P#!kX;6ńa\E>8EC3{S(/{H _Af)Σ0葠;>Ӻ:4a`C@oӿMlsFֺ|͛&".#oAlBZi3l],wcJ-kԭY#WKu(ngu9"A`GyisBxY!]bQXѤa5?!6B|) /PnAGlWsE"[h2sM:«Ճo*bނ6 aZUySΪ]q V.e$3 "ᎰSZxeF:Nqso#aiQYgA'_k2j,"A7F55Ce![˅_DRP1,ƸKs-dK%վW5ұwMFR,vVs YN;CVi|m}PQM55PFF=q5 e=xjQ5`ޥ%#,am1}Puw=x-`BnҹzM/%큾n.8L/o癤k@̰@3zR;ݗ@c/JAI#@C9O~ŽBae^fX|/‡·At (rDA|)a%e?u$/a77"mX0' _$ +nR18<$#?0d{MBPF|ظ(`]jj%T$cfV5WJ`45k}aj :BQ79(DunW%7l˜f"`yJgHʄ-gO5H xWk| aEaIQ>b6OA?S sq0b4i t#d[?;KC%NFbuZLs%sZ1Ld{ 8RBz4{+OXZvl zx19~O1yioE+(= +Ɉ dHC-sa4  2q>ߴ= )x" }\A;Edt<^ߪo,2*[qEӶ50ZMΧ+k겆8&oI9a| 4GPB'}v! 1YO}3}[|}<ťP|~% ;^S&3:Ƃ:g LkqB[=@\gyJ<=k]iW/QF0Xtg|F=)s{: &pW@<,7n_~Ef6|4[oGm~g4&HS:]iceΪKF 80rJ:>D:X2٤-ŵbaDMxCaM-s`'`?j=x!U=wvē*ntP^Úpc5k0聉0ΈD0@Q{K<\K;DGiq.DaH%ag2=?0VR!A$uu;3}?S 4."<=ѩcK'6]~`Ch:/;4_K .!XiqݚA*Wh |6t_Hb|Q۲i1m_遏]RZW6A]6fOJ@gx&QacdJ 4qYD@?e851G. Qu4K&sQ o/I^ӮUFm;4>MYOID/uIyS`;+nǕin?Hjʹ93R~ٽds|еC1qnWx", 't9 J"1\SyHg&xqz쇵Ewyg$ vNR\R+ re,FEM~<6zuT)(Q]?I!r|5vVzCϚYZh18|&F E\rMGP[  v9@Wx`۾У|oພv*!T76, DIk!$Qj ~'+cN6G| ̂h1obbm.4 @_*半~laU(%*ނ⿅$@RD]bVF8sċޭo < OѶI.tMmד)KeS[¿}P}g!lOiueF=6FOLUoZW #{w4$G>9g{~Dݑ-x$_*॔[30E׾k9+R,쪺s3/8YKs\d(-%qr9g&e%5gz4݈1D yk#!І# ;`^݇9 vPnX gӷ_hADG&IoBaPd}IeM0\>|:-+dEdrX <5pIE1I?}~bK&k8c**T&0/Y>pB%eho_l,uu9[& іCOj0eXfۄFep"(|ad%fZCGnhdm_/T).)l7@P 0'Zmrmn[_CS6V61%8]~nxGGSy(-ip[b58R.9׫XSe*%2q8@㌥X^X^zT lQU.@6Poͧ'g6[Y֑(/gc+c˝V0rgj,l`ǛT7.Ħr(9ՠUHk4EܗuJWPACHD'T1x/ r[?s X#/xrIgԧI1<6?~al iv<{yĘӺv,Iv74-Ƨ=Ȣ ^_L9$.<%_y8 TvbQGud7~cʺ"(p,C'߫GDp`f-0LJS0`l(yҳV-e;elE`87Yr`:z 10eIZPDDWߩn ̠!xq8.=33-Ϳ`h9UPκ]McrQds f^ؤ7'ô(*n!}SOk'_#_50l2{dyݮU܋:=E oY4' Γr8gpۛ}#fiu Ɖ 0SyGa;u.܂#0gXjxCĂûaL{7u3 7TJ]G:N N$#XM%e_?)hD~7~KޘkS)qh@߽.oOhٍtr*Vs bYxZ>9_笉$LƶC,'UٴHRRFPipwuZ|%Mem]׻mlO_!\~~-&mѣEQ:,W4S-n1;-==8@i_K,*?ڥ3TVs}KFFǂF̮EK6zV6#̴{g*6c ahpG BLIMT:G\Y+Ho(>J oe.H'TP25;qr|}C<;ܝ#Z6L]jItkQ[5@s$*-C~m/?e5]U^oq|[hy>JES)tCLJ t!KJ "t{&s6:zއVY4X ֌]oO *4,Z^)o)ɗ`u% )pO֑(Bg6X8BI[zeORB)C%/C!rV\̥cۣD_ޙOmA]9,Gט).|dF&hELMKeƳFyъmYPf7?9;$ Q.\#C׶3EwZ9A}rs S XT t9YݓRc5.25u*?SUUBGE;/>JK٦U6]ܯTՊ]_H/wFЊ@㐛:S&*6@OuJd1Vτ#ͧN8{tt1zyy\c[UMFVwi)_mH~g2 NFwH770#ۉ<}Qʚ )³ZB~źƪ魓kۧgSXXNHr D q=ȍHS&qRR0cKAfLl um/<7{D g]7ZQZpilD6yC%^,K% Mab=/׉Tӟaֹ#V&bߵ왬2W^rS[unhvW\]pG2u$MYٍ@ Z,z+UY ERR ΨzynILVitˎBb?\RS/KKNW`rV&6܆)(%-~Й5p4%~?[SnǍՉ$W4UyŃ |' @EjNH?&>pZ&c0'ّLǯIdn-xԏY  Xz2"R3ίn[B:N||U4^%]+Ʈ"lA1m"dq9R\yp$vL'jxߺel(!{h9R 5vǙ,ϱ^XvԦ)Cc^i^1)z C˝Q:Sη5'v.aOf@>ijl)>Nt#=iSS䔊m}m; ȤN)56̛|O*cI;@sP ^{ƚH`o#9E {X׻teQ*"TЁm= ~:+eQy FYt4慠ZAeX|RqU;NR)cͦȬoW },L)4tdu_, }ްP3kvmݯp-* 'ժ Y4ރD??R](pir@؍$*>rC10m(&.NE,H>ۄIsfd uܻpq? d`qNr2y $=!,[rk ϟ.e/eBPOu U̴"@Ė1m2[E-Up`WICXV6&+cpHl1y& sIMYS虯(S=X=VvX~bpg_/g+(BlN-Ѝm#Rpػc d!V3+y{;^ TMJ>$hV@e])GVς>oHu DśM e% kAYE*^P; W"JLV6p=®oOgyt8{xG\<Pq9'k16a i#4pړ(&~4T&s@}_;LxD1=$n Jnc$ǵ^}Z}Q9Erc3BJ:VxL5]6hě]&l~_yP;qdM_Qϔ)`Ίo'1cLe\M)n>,JQc$SlDz~:)zpdǿC$ =8 Gj$eS&TI0c|A:b^Ƚ6Svw$B>1j~il9ME'n{f` -; 7zb)\(@G4; 1jbN$ti[YsQvAq^ OlC ?c˂Ujb90d?>:`4vpyٴG_H.#<=+8f2 vV\̻@`Q|43̔,P CLzN\O#ٽRwtq8Ic mܱ؍coScz&*1m ѷv:ߦVc eÐ sfmDS}-O}Z26>ϥXKL؜O^I*eߥ^M[?!bh6,N ЩT S6mnl?e}Cl:)&QK z?e ^PLީ!+,|ߟ⌊T h8tLs<OP z4m:g9o_0alg VI\qM̙O eKЂq<98)`Ԋ|é*b FrWD´Ω^`nRI!QqiWT4]@8매r e/Ac1. 1۪~;plBI =Xz]Gk=,-[m+*@^缔Ƥkރ7wkaPno>x!s`f:ÁLܰ6BS^$VC1-XpROH}|Rb?tW9?AF6y;'3m:C1]([hj:~.$89$Su}x3>z:5:?|GaҴְgmTD5CHXΒ H*?,܅ӣ J7,J9  m<)ޢ§mh#djV@vMØO͇ff"Ff^SڪWCFVꀽ!8YwY~BR]ˣ~>EDȝ׍x mx|=Ul'88} e:(sC C{s4r)or,YvHG~% 5MsF_S)B[&{-+RlyW`4dwlD<)Ќ͜ V } {:>ʍ콓✔ʡ{ίQ]8ga8 BR݀]i$dLu⽤{H['I]]p1/i/,L/,(E#IVn:hCPXX*yg>b褍 ^ү0V 8~]>(זތƻ̖zᆬrsF< +WXjpOU}V <^fyk1%VqűDKEV0,\v:D1ަ; ;`(t{bZ^5BdG܌ \њ8@YX#( ҕsAnŜ 2_4r4u2;X}9Tov8X"Altu,vdp@ڇB9s>)4ExysAT :6rD]ȍY}O?GAˡ&16Vz@ \!Zl7&X;uEdW+B7tjaru-Q73pɋw"G0'k`sե^BFi` g,7<~K3c28QH|$}'~q K7Nlc󅽙'}̗ rO0jcdN%KrO,e@ַhN>C>MfP~xj!ŘsQkt@V}oВX*w8Ke㙪/ H]z(ܕf9,dv !F3:AY7 uguBi}*VDwP2k!B3_@GI /3.oLK Bc?hvނx 'MʓP(w71n> `Zx#Y:sW9_DrEzX8(4V+ fnj!ܸ3gERtD.BE/Uol+ |#)HҲF)ק%CjggQjֈ$ 4[UvX}_;Z|;N&mnNqVX!5+|9؄;:M^AB23zҔO۰Ԩ,mt5x^"*vIQ!!:6mXTAo4w(Y3=>& ldﴬo9j-j{. k挹6rbpA\z|GE5TSYԪ#sm>"%W&9w <} 5e&aHLhTO Q)3&L$A0q.l1˶oebiKL+ h/n nvҟҴ# 'H$!@:C" 'F< 3OȢњIY*-Z8)EauA縛{>Ɋ|#|$R7]^PqfW 5 =XшYG{_'f\C]j{@iG[T8}=BVXg QD`;PǢ@qk8o9e T/*yM'MztTb(H\P-yltK n?Xުon Q]Vƨ6QNd[Ywáp`Uk.h:^^N)qYPniEZq}`"j!@8!ߵN*)~t /IobfnCO5ӋkF![u[ٖPϔLbzB( x(,mb,@茐-k}{S!wrY`_|Ξ˖uB! Ena8B,cqm7dII& wZRtP]k7oP@A":b|E{@PbQ4!\a+ڻLb:}|fw&úC4:|cp[gf"#$a'k})ѓg5Blą.ԡ˘k|EX_zsQ!Fh2i=MaIL#b rP;*N"@o@*x0 9E9b,"=H9֬gQ5i3a\{cگvalXSŪFWD+ă'YٷQ/40]OZO&H 1P5rb1Meʥ+S &Se,(F[5LF ,p6ysR~_#@T3X[\#}7#ȄZ 6K3lF"{/F%I{t;8 ƐyspӶ g:ZŘ[ܘ&Se?'e6g /bd)_U"[l˛0/1 (Z͚./-s GY UYZ`EŢcԪn &^)l\+#B>B"/A셪яV96}*v]I` kQSYYE{q\m&jrmK5MjAA%ʨ>J?[n昃v$ ]1X"lC4VctaX$ޖ\D}+:oCcsiY"7R<XSIl~x^1zk08 'zM3jXӁX!"Ys PM]"cϨUL*hqC&cܸnrПDc@m;)3&& d]$sGcKF%Et2e?PЀܑppI'T5ձ9ƿl{эʣ>tlb mu(]PLTMs﭅mJeQ^JyOkٛWe۫BT򸛑a[j_ԏvhƎ B:kN8-V6 D豈=&=zK@xIu2#i h6M/2j{?ӿuFsH&v߹\Q]YKَo[)ퟔgœ&ANVK2Jz]k*4cQLȚiBMi PEG;"e΋rӻͦBQ<,~QO*ڡc)9``Xy\S YzpB&e~&<`>T<>`h3өG֕7̎?·p). ꉮ`'p Ge tօb[.߶N6Oч\C!<ݞw(|  pcH#acSzPL^L`=kRBOK3mӁ&k? y#@bo +zʽ.)m"6'7`e&ߢx~q? Z ?ߥ4Kv ~O&ZN4c3.3_G$%Oh$ʸلhθ?;$Ƕ̌Ɣ(x! 66y KhƐs0Щ2N޿Tf-`0wwbm< C0):Mݶ "(faFSX%*.n {tž#êAC)qg yQkUd]0gTY A/2cQcR/`8xf9V "\A;qZA|>ĻJ䤀sv8yAHédˠ8 oyPӞp@0 6E$%2kQrk/vR>[䚥zu!UGc`]s÷fΞ)lv<%rMr]-姻qjGz5G'Ǩf,6xx4Ap_gń NVSN'0or:5kve@\cpSX w*Z#R M_N/7{E8H'IQxd  %*R`=cW8ൿ/Q]6%ukBqGe*V~p(-k-6ɤ# 0a* zK=ɑhgؒE;" mQw&B4eQr\V qZ] 4cbCѥ½"*{X\͍K Ӌ1 Z_L`$͂dM҈c3O`|#,Rl/:MqgO7H̅Nͨ-HsA;,J9KPB8986V?Jfxۙi#ېvtZcڙTKcOuLafK_|t6yi4aίlpSgKkpF_IaabWvYdG1 rg%#]ĕVה;|0HUy7f,l|; Uܯk]yަEvő%Y/Șhwi0G)FQAD04Ag㙟1`kx8C&KGƁ+F83uKA݌9V7<ĥ_ $h{qU{Y]vutû%l~MoF(  {xy+fj:﹐W] k(EPb:u}8L׻^GH,ԗc~p/E4C axڽ\!|1l.»ѣ9 5ypK#sݹP_I tRQӹ|[w5UdTc D(w3\mEх )'_~PXv NP~;m|HmsAr (sHd(00[>Awތ-'Ι3\vqxv0b%j6$"#.;;Azg탾PG9ZP(,n)ǔ48&UkRѕI.̣6Lj(@0}@及ʙ9dU‰8(LE `FY)@ڶg[KjP!zZF$3/f*!K݄cI|,9K:/WQn!%"3VVaR[N@nG wu*? 1Džzvs\#^Hv  \8t3esxuq9|XXہ`y& HNNuNu <IVYl#0B$ Hr8Y_nǿSPuRf~)4 ;ǁcOPhcúH5c,;'pZكc.;Jی@@#鴤6 waY4ATXik&1^KP(EUG0g?#N4F^-`* gsLG=Æ8OQUJbtϑ/zƸ<,I]{\mቡ(-YycŠ Ɨ*jP-n|k$HEDzxmbk33Э%:` S^Ec) ھo X~eӆp:*LZ vN5M G6 DꞍ䋝pR6NnFԪ~ur`[o]c\mtsuZE l#K1`CW U%܁;f4~,Ses>Ŋŗ|LTMM3ejH^qpf byNn0>SUu_6Nzpg)|cq"*m`H4Á0~u^ѡ^r<,RÖdΉ& 4'[uWhXmNV4h*N6uVҗMӞK…#H<ۖJj\n{DiUq95]@>ԞHcOk؅7"R[i_?T=nV焥&i:|#vvX'0M<V!/J~zrK8@vz HȖRe%3uhgWU)g}C %o[7o/QX*}uo6i=nq^:j~ӥH2`=Nx'o9 e{ICe:gj!~b$%HmqruEbc6xض i9Elݖf2hAٹxac6`ı9P'Xً?c civ21.=3]'3!w͍UOB3M眎6&g_^xUYVwx#hq[%QFif($@ Q]ZdDcF&_BqjTbV:L16f}!qRsFJAV"tkb4>>aȐD%mx2_Cs[w#EGnbrEѶK9@WYCۡH)zI%"L.Pe!F63dC#X1"7Qo]=;1,e>H2R6NA*:_f\Qcy[l L[A /IoTP!#~.] $B"rϝ0> R2v7_,_[8enr#Fh6mZwHCEקA$>϶U_[:Me5!<jlS^W I*eV1ij!":뉶݃!JvWfǪLJ00 } ~~^ mMIJ'$Rlh6 3. !8 04m!\aAP>Ȼ ە٤3mvr8LCdti9gٹ iVߪjh.s&ȭ]X^IzهOT(ym#W2eN?1i{ -${' PfVfg\#_ ˲xZ93Us 8cxktX@U>)WeX\3jV,@NJ)=/l/'N%BKrkO8X1L~ӳg.i\2]'_?]Q0O;<~o͘gm rFZlx|ɯCQ$r8rWJqQR0TD0UY/rDwAŽ9PH~_Xi`O=Q̝h=CrV.+!5 Quаː{T,+2Qڏ:GR lZ Lrm@c D-^=lTC:a -0zH9ߝ+vnOr?ׯkk[:A.)X&]ug">D*[|9 n=hOoݨi]x|eP'vuO=&KGdü1=S˖:6oC8VǃH2&/p0̥B}ܚZiڳSfU+i$gXzoɥ0S"Jɭ2FBz9)JX^32R :fGB 0JE%@!Jv0܇$+Mw{s2fc_)q*fB̑\>Hd!ui;<]<,Ecm=V|M? i#7y̎e7yqSAH@aG'I>Y0bS VA~E ,[=ޫ;U_m8=VӒu(* $F3[(v3 )]NreFI9+.x{$#*1ZU7 ĈC>9wB `\A?kFGݿK2? uِƈhB#WNq߼n0ۗŖls&_9 4Wƫ)Jߐ;rKkB#' |陠uLu1J9vhԛ㹢 ?ey4{,vĶθlBc5.J^J/䏺{cQ{mD`\sLmMSl}ɤfŧɽ[49Y%;5^AJL^:W?"6LY(;artuւ޾่W啛NnjU}nzcUT w$$:|&F13_V5ɗ v`Rݣ I7eW:hx4'Ф/!Ϧ'C\%FAO,5 d) I/'wvL%жn+ZuظPMo%x֪$_,X܅965}OVuF@dԜȹ\]gH9q[a1!c" ÈO9º;D|REo!WL*-YhBݕ$zRy [6(ƥ=?\Hbj\̟S)=DQ nF^H/_u7sғrgQ*x.DD5g0؝VtTyF^΅t$!ڪr }eqd(Dq.u.u/*i(z}$}{䲬a}уFr4B7u#jK=?q׉i^Vb&!9&S(%26?SAǓ~uqpɨIqWpo)s6t5~q ѨZ7Mn}@ⲏr!VOTItvg(@3Aǿ0<3˝b6Lz=6Gr;•/JKw? $&=52ܞ^).W*V[7w^;=کf\:X) %ԇ7<=."{MKF 6koe.l٭>ڵJ[r!Y ʦbۏՕJpfҬ#}%Ԣ_a ؈UurֵVJßoA.gVM9j` :K6r`lyGsu_ ,)YzďǮr ?VXa;{6,=`*Xךj=:I`ϧKI08,Fkچ&N W@m?F_q6Q}>2|n 5%CCn0 ;լr5I5-J5Zx &dU +\.ngJabW .'ÞmbK%tݨzIp{q[@Oʒ2ƎLsb_><grNjV)%Yjͦ1Y yk`wX4Kg,'$lp_kfKk41^nRۦy^,Pƣ^톤;c!RjHC9F &Zz\kJ/_ 0!*/@*qd&vN+4Nˬqg#j9d E)w`WH\3}/2+jJؿoDM-M)}vC4p6xYc$+iUA-]a^VHB 83?ɟ]qR&€gimp\IWGoܧ\OgGwTuXϘ *P34@~f.3D́?p\(^/C$Es ֦^$IDP|ԔV+T l#JS2,qCOsV6%$V3QLW,5.$Rѫ1{v=<:O{$֯CGxS v}Q-Jc=IhOnotqA`P}"g=s=-o" zIpk0 t7?G|ꖄ+Ὤ/u㪻{I@M|*>Oͻnݒ,@m6izЛqh%rjӟ=鳉^K pt+&9GkG7 93KYјFI4pn]ĽeH.܋] &JW|L?,sVu'䲊Obd&By|+koxE g=Ic0@*毘yĪ3'U XJJ#3BEc,&YTƫTdWt+Nu[Zϑ gٍ\i(\ǽ~RW} pI:D?#8ݵ?zi*+Y h,_M#E1W,x.o(}Xx7Um_ \ޓg0Gv3M^][%^4b.h2ml,-³xKB摊ErQbN6LsH͠vZu('2~ҒH_AE+EUu>ˍZHVCz,$Mr-rƚ~+H:76Ah^ؐŽ}C aZ3$fXyT|:4=.F6ѲP-1zCq0Ϲ &+NU4;z~v*J?۔!-M":8J7SAǣ˶o lR3JŕaAԢMƔab*jRjփDY7!@xvpSEOW)2;i::_g~}8`ozrP(rL׀+BdXr4A`8l\U(?DŽOh(иTشf]cOcAG!N uISCd[23T#R88hGĘ&c"6`Z+)PdQM*}3ߧѸ"pk=*a!7"]oz$٘B)rgJ`n%L!J ٚ',;))*0;*'QԺ~-k e`Y%`;AoPnjAHኤ/tEB55EH*dxA@1?^qR dBe#=`ČʂFF)6畏߄ gV @[X*#:OOwUDyDá'c(vߵHB>i8kJlй.~AcNxu#vwh?"@7ȍ7d 8wSts2jN_m4[8m@ݥZ苞_I!@y n,2^ʳ{qwc?w`nI6@:[ض;krCzdA^zRj#0Vq%Jmh%=ȃ^8&!J回_;$GEO< xᤕ/Go̔O2BP֙aÀ#PЕ,Aa (#7InF*yTtGj;;Nּ%?Vn-3C 'yOpjqj0q=UJp%[Y% lQE5 hj 7ʳ\P>m11gff:j%ЯcM-ckSh_So? 62*eP2м֖\YF &272IΓE$җyjljx^ H28s ><*9 MXV6zF ܏cD.S3V3cu8ε{N5s* Y *0]#1:Zlng7y-ʽ][ e3*Px_8`ÙӤbuTBg塩9d;ڨ5Pvj,vc6-c$p[92S^;\bΪ/X@A4 Ѝz%]PF DjY2ijrg| 7^3.FOoUjf$ hN}MV2!78G|Cqav`K}V@#vɝBg$V y܈ @1 uHa1nvt`*!<H#;:OxMhuǫ T#,,<֑!Wk8eL626w۲( xX §Zu_svCҡ9V[<_2 @'  SD`Q~\ :Tێ3q^ֽzPEĵ8d/"~C-BfYUO_Ϙ24*5)՛ ,t8e+#̏Qy8Q`$QsSg %?)Ł e쐅~1ְL43oz8vw< RewNܤ9'}c4̕a3Mw=尻q-a>HDhF W(i4Ecѳ\+-6ZlW+X s1:(<\ZIuYg 9"G Wǁ$ۀ/._O% Qªw2ܯ+ gCnQ6n+tE\XU1I cyvaC6^OW(aA{9QL|s!Ft )fH=6VzCJjp0V׀@*٭U_V,Œ<'|Hv;\Ϛg"?-)֒΋MB΅q'U/K:<.:֬봕h׹8F##jl6ȕkHZ"ɩ~=0מKxXv6CisG_ [f|nM@,R&;`a4ldG}E h7h'NV쮱]Fȇ֙s`xD@o1z.v ^q3oKYP yr5xx<ϼ3wL Z`׾2hAZ;7;Ce?'NYfI V./ ]X/.b2vz 8lzg$+j0PD2te,@Ʒ} nIP+"(Pn\rYGњXڌ6l&}aͶ3|l 699m=B=VB\M94'VO:%WSs̷W_zɥs]4oJ/Tv'H ,Ca>?*DֽG l\t7NP.ɶxb1qZ20L[V%_K=W0@i> "7d^ ;cģAؕu8;\=NQvmMaaKqЁzy=3lmn&hAqj<(L8rV};OlCX&祝T@:c\-!n6ٓxn Tc ޚNvy )Ix4H>t%.I͙$z5Q#.3qsx}-m˽G1HJ-$X&OZ6,8|ކڊ/ N&vXꉽJƩYIUwbuR(,Mot' "4e*=!R;OOj\L;;]Y'z8$ƤiE#c"ԧiH9~qW/kC!6jUfktU)BPПm͘VMty!ܐDMUnkz[;=WbAфrT.N}34U=PI;g͡V12R'/U9;h7׵5+i(ܑ) upj qqE1{AZG:&iZ\iJX`Z9p1~fVB{Sbu@Fp^ ^o \T_.F>TW~0AD+  hMlg*$)9u4׎k`bzv( /j?k,Ћ=u߆P  t0O{i +G{A.^JvHgg1 )Ji^fRUJzP4KKcПmЍ}l^$Ps%Hkg$c!eWXubLt1o{ L2~6Hzs CT+ &ݢQ;JUMT,Pa$c7Y(13!: ]N_nf8(mAA9fNs3<(+V/}F&,4@//ad%]#^ Џ\o}'=[ ٰhp%AM=iгCMNbȃ)&ës 5+hyZ$K(nu tz >L(7MEg3̶A@|.\B|(oܮE ɨeõs5gdt\hi5%IXCWl{WUS:FDy_"OC]d"x^է#20xdw>p;Wf|SDzxzEh/)z9#MG :6 8#<܅,"ɛ{m;h9{|bW 0G ֔~(U͙bQ5Qq"?foh+> "Mp '%_k~f_$Nx:ZzApCS_*^*~ , RcR6$#4is&}sմ«,+@]֛7?;GEgG<Z:Ѣ%盋lsr+BEcpm8GqM[XL"!V$Fm>it[\'RxYo4o%|QfeYap,!SsD]Y@: >d橃H ٸ>f!1HVGiV 4s`d.CW+dG6O!-!.н4zpg0ӑr|SZKrwՆ_R@fe1phF\DcU".KS ڣU(77<8F Bi2V HtYBa}gI_r$HϘ9yNBLW =w#v/*O.{ lRfD2'틒Js24h_:t8Ӂ[uKKb Gbd+⛳.Yi#^j+"ID1}РS6f^/gP?4؁A9d$ K9СC#k@W|Q~wOL\JгorH 0p%Ժ,ġtײ_1^*t6Ru_$㘫| `J#JCS9h7"kZp~ğCՀ ۈBwdU&T"Z29%!债aUX j՞$~O[~#W 0Ico ]KilB<΀.+-?4F] wpZG Epg"kD tdt7^r0P%GzKsE%ikGZ?뛶R/(sqzJbm-(ؐ+T.bcš p羫FhuǨZOF(DP_~۹X$,ݷcxE t0M&3!Mtg$ K7)uZ*捒'gPB??4SvgՅҟzJl9 g Yp#1.i;8k Zꈾi}ŕw몷 It5D,"z,#wPOd1xk$Ģo#`}wF;Y8.K]۴7Jp0a}S|$ g#x,TrcM F`7l'&K{$]XkUϨOwq-+tS8-$ŮTmkt9E23E"+OʸO^Lqޘ@Q45\$1gRtP Pm`SK'.5ԛd"W b~xt:?HЫZ>҃=OT8ЫZjgHA=[yp뜯)ӴF+.29co;SX{l)0c鮿ac ~zJ^DZK0 :GpVH=] cWUgXzsՄCEJR]u'[7uGvnk>[ (UpnU j+)at?JaN (I ~fz( az0ö+Fw$Aͫq]Tsb ҥ ʊH5Zd6mbjǶĦ9NE&؆gn}=WHGT~^$No9vEg$+Zʏ[Ncck>ɀݢV"|Ԩ:a,f VYD'Q9wU{}+}*XM/^ Ǽ&urNY݂<녙 ESސU; Jώ aj3[!,Na+@PD8(3!ˌjr,>\_HD{Cb}%8ɥKm@6Qyh3|$ȫNcFxȫPA4홚s[K LNan3Ct,/ ,:MZ l+I4~!&#|| /-.N=%s?/WVN {Djf%-KFevRO)56KD*&!"SAzyn8EŠkYgSz)c$ ~lE][\me$?}zO N9߇3;tc2s(c,s5usO).l R _n'+Ziid)j;3n_ {48!E!Eϳ;= `au3J Fuqm}pl8,f¿ {]D9<ŗ׼__Ff# wBm`[3@;66ϿiD#?@?G4j4QK 6=΂Y~"Nh kN>lO++~$[g]*k :;=cJBn24⅍0î^,]^D}ࡷ&Uq'P$,VTʵvbϘ@k7y#h}t@,r$k^kDUni^>1@@vCaw\t;W9)Z>ˎgĐ|dhDJiC,J~zjP%9%oiv**TCݡ#\wu1]Lgpߠcop żWܺTy`׉'SX.W}Ԫ 1J1\:DgA9χB=7F;4tJ-7Ew;-oΓm09wݡaW3H^U.J:s4N5{3#PT).zS\G|L\F}qnh|s|F*Z[g"ehCsn|qޛyU^zl+KW< ˶wU WNxz=WAw^&9/)gnG0qd2`3'|-{SY,_c2/Yb6#X<`ru!tD`ig=xw/TˬuC ɘ{l +!S*"X4H%5ߩxnтdcBQ%lZY aM" 9 e֍i9ґ: ۠"1 Zp\%S2*' ٻommcmܛ@Y]`의1h)!6 >e7 4 "HO:-1J,Q-L!K^]OdȳILRV}m;:9= ZFQ4C 2{F4&~\>.Gmn\Q5 Y^ZS4NM(30d])"дT aݍ;%tƑo+" W2{HT#bۗcƍYRi;]vλlb}0>iFQ8QN;\N '|uyPg;Y}Ojtݿ44[!:Mt#XoLJ4z2 K&X[3X.%r ']6UV*bxABj>bZa@ [źp,wȪr)0qZm=lU V}mGDڰRd؞=.lMG^cE ,pxTES%;cu39Baj|H;;Z$2Xw % {D@߳ԒQm\tchp Z-JtZO0,rdB|̧͚څ3 籼6eD> 5 7 y1<#"1Xoh).ИuP3l0kyI>*"*9#˾N|WE@ull>v6ɴ,[(q(PNbw{r; ϲgZ\cΗ\cr x'7S*=wf2ٽs] o< D 'nJp0*,vJ:WǏاwPR_I xr0ؿn&@n">i7D(zd+HlIFHό)+!3f-QxVR\7NdR_qX&S&gD,BrE' &;uy;v1.ohtcUD]yAv.'(m'oeCeiC:^bAob t\D$G{Ie\"䠄סXjpJds|jfC z8$bSuDκr]T$~Ng: dpDϢŚGt_R6tִ^YsLu3:l뱥x/Sb=IJũ]Eݚ/W0@1E2SgZQ1Y%7,Ki, 'a?X 06ڝǯRT' HK[zB? 7;]͉.V!,~",u2)V{Ax?ͧE}-|)xL@b=^}*Pk C-1[\i+f-Cw麸 3k/hTY "I :TQpb%y`5P8O$ YHHi\_;&6 v~K>-R]=;UשkBHHFlH V6Σ621-mL.?v8$;q>Bes,J@%@Q[}bc [3pbPE_J {>|EV4:y{e΀IgCygb%](Ter&~(I o҃&MXTD Q}y8_k?u YAYC+G{Y+d7XLٿIkN^}M<cpiY5=*;j 0gbzֺnf1SB.`q8տyy-C/ t DW㪗)dI#6Q]~f V.v_dd%q O}AU)9:j26k")f+}xC˦$<$]v¤$O\gtB>m)̇HeKAw"2nLrskKչhQO9fqwzzv?iУzs>g2JCkTǎ"7 K<!AYq9D Fo${XO&tɼmYCuRɪ$յ2- u^,er:OG\T86#8J@^xܕ:dB^vt_ѢnFH%M]O4p\SOɊKly.a){-bx{A}8>ȕ&؞><w1EL}6q ->Ee:ʬETijZrk W<2~KkS"-Wy< ^|< WLd0_rY?stQ5uA$gtFg&9^x`̥+EYTSMuug8Xr34$8ΐB&LNrVR_ Ug0QH?#6k[f% NX_ĩDnAKqb3|:ZV򆍺 \R ^bѠ=!!aⅷRH#A@?idw]KgVJ̽ b ext@{qB`R/ͨǠ``qa`p AShbxT3>-mI:jȦGd~XSVq!ul/`{_7=m }.ƬNҝT6y_$sP35_ymL!_~lg+VxpSVG7WdW*ml摹"7 IgFטE <vnb,;ߗ0 OVK  Uktg^]H7ceDtSlJ ' ͌+9l )'?|ΉOWԭ/QmupL_Ԉ͊A&srk *tН> jd/_MdQ.=ۀ9?X]*7.64@mMH/CɷBYV"̚v˽ݠ-x9!m;KU<@A*-lӜp"2%WHT'ð]D2*H/1 ZYfs:5FyKzr\>-Ǎ%W6, C9#YeW{SH?8X]wok,D D+OvtouO47"!'ñ.vjT~Ugp&N+.+͡SǹQrkωdX'xPt Net\#nPI<>2jo;u 1^mK٬]|7rB ..(EQ7gRaZW߸\6s$ 7PO!id !Scq9bugTT9ŀ@@ZYdNbǁ'U<ygWzHMxO+KxmWAx㚯adg m{EE0oLHZiG=k|Rvgjmn Ըt{\L [N lDrdj.5ED霑0`Ϩ']J\bhWQjNaƬT9G:~ ֆR26YET:CNL79I\ AѵF-] S--Db0;qQ^ ,w[<S8J'{i>#b55-Z #اlQ?;f,% =dc^[dn6"a=-aW5m =?ŖA+Fi$&**Ӹ|@]xe;؁" -lDy㘿Z[qHO#5xs*OԜ!L&Ց }(3jt㒢epӯ5\-&uHT{XxHpU漇.2t!*TQ)9Tkqro=2R*B`comA]Qfi#~̰/[]B74;BɪX5kSN҃dw*9D-IF>uP _ OwRAw6`cr/EOg&Vǭ&΅d^ku ,bH~ȣ[hQʟ9Xw|Pe{\ jC ޽n(-4rP( ;]w#ןQc ?,Czxb:Xf5:gcQ>rT8:Cv8Yju u0htWXXnE{'e Cvք26sъ9Ʋ33;`](jtLi$o?/c`^ \%='Bek-| ȼn^Aℯh 8|pEfWiE7gU)ldYlys?R"{}?h眷)>\ yuV8<妴<~F1[Oz|0)opbK"KOR}0P܌Л%sVMbķYYkS2!$ 郜1 ~#aistwۏToM΅H>&5 V"mrыp'>s:U3F@8ݫoBjt7W4ǞXKVd[ocLހLE_V(ƺn*iei;A8K\5o(@NM+BY6|DL`> ='hc]RY4m\E0Æ2igeqƊg$y PTdԩ55`-NG>(n8ѕ}ܞBe?i7? ;rly?ƬQ,*C~ ޹/]qZ酲/0V!DOTm}O{=[vYcvW2?<0ˌʏ g+g sZ@Bݨ=,4d&,$;3F9lk7OsSvHR.PڶB03 bINPA?b}\2=;OTK + ~ oU~F+g 63^CbhzkĊ@ bfFw$xhڠ[V4~Bۇ)\V~1컢];6x0st %P7aCT_"H{Rl-v" 58ZbB]SvhFJҮ tM(O$InS*:'x#:aW×ǺXB<7`,U(j%Ti~IN;'Tjؗ/ah~gjТC8r`!GD6铟 I0J ri $Z"%Iiy8n)9M2[TMn])m+H#^B(an4H,fO"0$Α@JiXbQ^@kXW`7-Sm"ş窙tYZ9ksZLRqL6ag*l=67}Rn!!^B7rXp){$tNCR1S7Y_+ CZ\<2&!IlZ ]gޠlڗ>+eOw frg^}`gLBt ޥ(j65oIR&+[ L?{cgkpA;{a2&E={x|+gϱRp<c05!=_-99ֱZEI׼~k~C Gćiܛ׻e6h`HG/ 0+!=z"5g=8@@Yz?^ #w-1Cl3{a?&hHu:;o{6LI_ѡ}m2~oj >`}0!-g6i*GWr3HJAgf4PRޖ bHӌOx t! Qth{4bdR6&_⮈VЛ {>߽i)i3!(lYלvI[^f.t& %aJH|X2["i͛Ѡ[>xԫk9Sa^=8boW}ՉL{M=<z = ;?Nxe-m!s>k;qN#v(c.T'5BpcF_cs&tq^}`pVM3Wݘv{8j [=D?LQH+,$W`}[D~#/!}Ny{gAd𳦡c1.a^oۖT Y}f 3@B(|z͡<ʖ\u>.%j(̜"wxƳ=n>£UZQ7kͣ^:pC.L'?%cv|Z&a|;CPݠu/[Ԋ0'r+ow8ʒSw{U1>AÑC6ڧ^QS=d%d8Uxvp@p =>bA#vtstճ8gv%l4Z/JIV{;~c24f$yG^%@ 7ow5 dTB {3w۬dJU[gvFCǭJ"ۜ"6+2+'4ތo\vrʖ ^KN&y@IHGDZsjzйr~ЂZ]EU)a3DT+(9p1i4 wڨt?f[GX˙g}QפNd=5X%Yh;ҡ -K >bމF RIWmn|K_bi7f\rϲP;Fx) ӡ5Sc)f5 Da @$D85[ر8}KEIrLSvȰϙ9\bΝ.缛}'5djL|dڧx" X"$k sz&S/ʚ%? kP2oҖ8#> Nvo1چ$@ IIs=`P ֻ+іWʆ0 6xsX_F.d +%;}+}`A࠘-gAECv 0"2u(hZ_.7JǺu!wY)T,i&7]U nߋy|mb+:.N`-@Çޥ>&>Hm. (5}/~5ngh>q{0 O-aٱꌴn0uH6?z@Lr&]~._xhsk>uGl i7s*F L >ZކbssNr4DX,Z){jِRD2eqX>SO`eb2@~d[r=L:2?KDzQIxJDQMBX2R@&v;_oWl^g䥀)5l\$Yu6^kLFmKhP tH #Yư4}@X}LHxv;+1܋g=չxEL\V%Go_t`0gF{J BRNipt.NT%7ۦ;n 4T>/8I-]#PQ;3-O܈:O3]Ĺk0?V8~Y%x>`ɛhMtMv(a)77Oq:NiX%_?czi.ZĂR,QDG P!^rlu)I⒱X#xsG#&GJ^fq|-0}ћ*ԧ(yS6bQ1hF->'/ qԇykcini9S{ĆỨ2!⬔)A>>!rdω|Okij7M S=P/$_MLvУø#v0$^8qxe^]*]^3g0ǫf겼m$wv.aE C j@㨌n)2ǟ,bdcBJ*odps?i.]Br.i)FdH1wx fTHiڎĶA؈MttVrJ *81FjDBƗ} NoCX}CFjxaj N'/x & Z2[ xSO%cs>5@;|Xvn͏D2.y]^vBnStbT6x}:j6fep b%,؄t4qOeٴjccd*h/(e0M$cMm[,}_1{Ƀ^c/tv }9l|@6qmcnGk`ר䣃lOw8REfZi'f'ܘ5d@3[>JG2;f-2Uv#g68O]!TWӆf}# շ}e&*}v䀪 i1E/qA,:Э.>zj]ΗZ Q#GH=R*Me$PCNC̑ d"`k1Ӆd'ֆ4V œGw2` e*)+ Er>Kȥ_Dm8 2友+~ ,kKWM9W\e-T8-[X4kY8c\*-э ;/Ԇ=YM"֢ Iei?G/Wh3}S"& ^w)_ylW۠-4bV D9(hlJ' aaNh5e~^n+؈oNS{H׆?RZ~ȵUgsM/Xyє(gTXKW?gnիL텑hr Jqî05V[:jˡi SِrYx{I9qPf]?4RC74e{U\9GUٵtĘᡐnݎ o n<_E_&GS-_؎W­aX&T඀Iq:Hx:6P MfbI_ިô2sL6`BjQWn !ZZ=UX4Gp' QkN=loQ+th|^Nը'ġ{QlzK t ooXFhHuC418k" ]Ixc})ୋ+neBCܲilV5ި_v0 *A:hV*r ȿٮH@([YcX{>Rz?,F_ 7]j%$1ܫ 0e{ /}:|I& w"y.%gcw%Զ3X^\.Ie',0C2f-Qm,H}ȴi/%]p04"9 7Ea{BlكR#& <]@s"xos{h0o::.ʳڀ'U[?{Юnz&q7G J!ϩ~X=ARdw#",T(zϻol q3MR/FJIfc1^nioom_(u ` Gf|G 0r ֽn_^*ZBx~6~)/91h1˯_>UE L{7/)N(sd0j L4 D"%`DJC` xhQX ocXARc}%ps!I, \/ jv [FΟ9l_쉹ֺllɌx -<]}RT6hT+0UX5 /e2L7^r!:siiJ omáudP5çEÖʐtX29z%KKZT*3H|SƌӞOP33?]C[ T݌Y)Y݈4`׾7"{-`[`Q ? s.W.K{-`rffiwMܦmHͩ6O 8+SYq~p~kME,=GVy3*EC3IJ3Z׬YƜQ/Xd<MR)z qA WѸ\u1bMVLR#M sI+!Ǵ6u~'-B۾zAVNPo2ܓ/{m̄o>7t6#iɩ57n({'YLa> SM|\a7} "bdHy[A#FUv ̴Ԯh.Zv+qK~6Nq@Mfw;r|^tZu_Zq-&$ł5YUS&'dʟPתs3VQvzHX=?]~lotDU.s!U]\yWY$v< 1{ <^Em310>`ت*Iج(RA* ,٬@]c2^2PF I]+ɬ-aB\PpG0`^gg"̩w$}[=W>/!幆x`j ҽۼԒdϳ&5|PPLST yq|6AGw.]^# eܕGr`ԣC.aG:wj(UgTQBl8h|Ag nFv]til6.7g4~G!"$U{o;靾Iɳ ^VmgR"Y*dt>fE9 ٦Ύ4aP E&}-Z o =kgVeXpmb/hߖ=l$'T;uu1TV)+Ra&H9Ryeȶps,ߐc@=Φ.y%29YGyG~qWYf$.*hѡ (Lo߶l1!yMY^ 6_/|.,'Iw1@DORb;AU bȦu[FAvkq*Z<"&2 ۊ⒭I":JΏkkş_e+ !PW<ai0AFhr458Ԧw^y= Wz `*d R3 2.oXm qjMthŃ(fU[{WX#17Eef2g / nX}uup j @D-z%oh*Dƫ6WҌ24nIOxTga|kpt$mҼ02D&OWQgZeKN:óVAЅ_nHK SDr9U`D)a82v }iYJ`w3B7bhӊ-aBg?*N eF6 @EK#8S.rv㤭ቃ0"I 3514 il+@/P4("HrGx |ZWʂ%]o\%XaUKvO_BI6&o9];ereH~lW [T=<#ljhkcEn>Js"jezR6ͭڿ|:i[Y b@1X,|zayix^ $WXdꅋ #9/g~`ry7<"QRm.`@^LkQe4:ϭH yp>[/ 1nޯOY2w%# pF߀2eD V]uE3d3Q^*gaM+rœ0 BLBy *M'0g+[03nmjf%;Axn좐"q`HfqFoJ/~3N-OQ Q65d>ET(@Q,cJ< ?y'G.fc^ˬaC֐(/gYkW<4,@sd–"Ô]& T1qt|{t̐L*]gobǵXjHPG+$k Zy@UU[/?%ꠙ0yT7#1'@2@Ouνǃt#W3-@-60 :H#rVڦB)3 AۜKf-%3Z1^}8nі36,3~ 0N]Z[d6W;?T`AIK6?#:0L!@x@Jlww}^B9֞ŅV~vAnr2rW 5 ѹlAt='`WӃd=ͺjfC &DOxwa9`f޺)DŽm7gMF.#"ΠYULtiPh?/>Kl%~.7]q;z0Uw 2~`<R3W("/Tg?nBt36~PV6f:XPL#]_rJ߸grGu} ەZVw#\J)ȫ V֭>pg&> ٙd'&6j,Z"Y_^ϛ6ccllH J~F75+rE=iI3.ŮޅI[13K2>g>ψDgMϛXcsrT΅x ?3l`6qW3֊ˮÕ }I^.:܎T}5vDo.4"tX5=P8M}sVU:'߄10-76;DaUaO ؾF`LaY(ՑuWv\r Y&JXT`&$U&a/ Ωc';pw bNra׉WN?&ɗoS&6nm'<ږL$_}ݳj@+ؿʼnI } ;.C[HBֹUfd”!iO-+=5Ԧ>+HJIvmI, V:ϛz =1X]ZJ^愠wp>!:?*^wY)kZɌ'|6x WMM97wPM/M 3R0|7^qGhN7؜j\%smBd"80n|W59cnď;/gc30x/`=g nNAg1_T|1x?p.H(VXWW* U؋`ǜeӘ-Gm4YLRuj_x#?(*>E@=ƃ7ar8,վ;o'gtbn#%<`)Ko6=xc *K'o3Tw.V<955#,…44[_  ) "6Mu𮜗%g|io܄(u_]7* Kaw 3 E&(7䷔Ҷ>$z^G_8Ao+KtY: iq#ZP*l6,%jVJ|$rz*e¤32$jI)$"ч2I1_w1K("1wx}dnEaǦO=3@'~n8$`GMtD0HlWctl[N1/F.S:aQ@!VG|=$w#(nuIlb]XG9^e[|>WeWzMDc{A<0`?USЇ9J_gP,zߙ%M^U.ޟI` H?% v 5 y/Yg} (ĤM i);<879l_Yvf=Om73ͽ/%4ʃdyur>gJ\CpIEE/G9΁%I6o=SA[tK:acX ֦ZxaG yUanRR:y/.@M3x?5_87~Z;F@"Mn-'%R![AVg3a\%Q=&V띶Gp(6[ jed?c:+sM +13|#_T*Vf` ۸'^'#i7gs7)LN9@NyQv2>6-׷KHɭ)j<Åz1y8Ҳ[^/tLj.^$!2kT^Pzq)5E!5IMSlE5ͤt3{1 ~mt^/!{zp L䌃"WjPa2G7_࠙V]bQxEGVWkE'#_{ 3ŌGrJP{\44Zb7nLs7^bu" C'/v!)B us`pB\߮ɔ.?Eq9 nu>&D#L$WÁꎝ{tM1R~*[QF#D#Fk D ˭C%E(M$;{ m>A<@0=39&{: w.bl]%k:kL M?m,d0_}+2L6@pβPo*cvo. ݊T=L60FoB=p y?cc;l(ߙ#όV^LYlS@>UXV."ޡw7ŷRD(8"BP_䶈1oOV4W{t]jLep⻄!qbIֈR"M  M$.;#y@^36>ie r $0H+bHT(iMOu$ 6(AgStrX|%F/AC++C*H dze}n`R.:W @@! Z<L o1l73nC(AWtw@?ǨjBv5yNn`\ "D VJN b)5<_fM oۊegѱ6{-zyI ?A5% ~s8嫧@3##;,Qmr 'C| #cZSLʅZD(0RIGI9p0'ZB7WÒ֟&V# ȗ"H-*_!U#`U~ݦnqn.+ɝYbl/c1 d`.=g.M#zGihp/a'Upt;͕Fu_G.6Kh\~J k(fČ]ᑨuNȼSäs }r""ugMwaO;]E^HwHFu/Be qm 4/L`_ UNy&<k#-3#MTd:W~a(n!qE0QϚOj14ЁPf}8DVcƂ@3Ĝ>\v(c)1\ 11۲c&Dh ٴt|^WsZ30þ]'hYF1͆8}=%m:'i1V "nTGP5R΃eGzr\qbEu< )wq}6o(6!`k_ŠȽB4췒^$;QIlw%_*!D&b4M5"2Ǫ>Z$1mvdyw)0+s0=&kMzvq0K;ygCH=UJHRh?tQYK Mr<>quUbC1f19َlh<%" D/@i ͼR5Y3iD㎞q@tX&2nq'HX{FUũC:|vYhހEOjTXG>G0.t̚F#]k/N Hn4FxmxDľC&It¡xfTTrQVDm!TIv'pphXQSԊXz8#@<缪eB_>e afpzJr|;֙ʄ`;փw }gȓTF| EۘnI6hw& ۤD1kTf^ǣ[_%>^\rFP =hgs BXTOPtY}h(ݺ8n7Ըzpkg)E3UK/.GY"^ӓ@'VYJRl:5Wڣ r4/m r=,W_ p ,`3Ss0fEYIl/T.˝1BqY*[8M#(GT\dgx&B;(:62NțĂPV͢~1_% U*^;`[9 X f`[R7cO._t.37B!Ć_ 0\$zA/uϨtzx~ܻhhM1-BۍCˈ\!/׈V^rO{Xt[D\ȵ[t[A}3sŰљBSgB~sȜJeiʩkt89ȣKm'F3umj:nē͛͜a=dҋm)Žˢm2ї[9R\kPI'k}hVoIas3zω4^Xf"/azT6F cQ!e}H\8)]ٺTQ, @^y67pN+@qDZͥi 4_q\+0cfƐY<'1F,֟lq6._F@d>;@0xM'?J"2& qlhD\/9YTH %b*Ub#gV@&G@F2W1UV+(l$-V""':y:zT5s @g ⥿۶GN#:/E9z j qߣXï9/m{סym]Xu .TGPɢvxٸLk_gy8TH@OΟ7"؇Ra g-(JH;wQUpqI Z:ke+*ZKw(dY Ll'bqy%$7 Nvu- D*D&[=$.E{%OmFOsWEk7Y%# W 27,}v91 "ҔTm&fgCA'5 98Ӣ$6.K>nwO`k mtI Ӫok0EGF Lg 50!y"f1KajtxôDI3ľ/ h_m6û5Q,9$=A!ڡ ^`l|䄙DEgX}׆@ ]s|HE5QC!_ ޙG729)Z{^LV "ܥ#x,>5'oTn6~!B}|NS פ:P }k[+6/f2^j:k+jA%[ ;,)ƭQ*Eg B'*kQ3>¸$1n5[5-G2vQ#Xr@]gs!`[bBt4t3 f=ü060Px\_ 𫸌[m*ȇYW`VJ.m.^#}X MfHe]]cc 7DTQ9zVao|SJo|+3+o&sg($yc빟7A8`mjAZ-*fkPkKx}Y{ 8*{iHxqVկTqm[q 3B2ؐmmDr$;ж j AY#\HEL2w%:9@@HT_x+)dqV= DZh0.$,N[g\8%>QM ɝnxY&fMjD ~=VD^SׄQ?EeYS:U̼pL|<[) Sp1xS,|bnLGx0zr-Cn3 =v+GZGpތs6 fq=%+ЦCY;Z݌-cb,/ӽQ ,Sbs@b=+®Ȳ^Ttrx&` WBy ñgƼ9āz@OpUZ/-h wZ}a}b?#mxRHj>5L$T%â3޹%;-!s3﫤 BBwNjɯHc3hKmO4|F5d }1E^A%={T mArʞ-+T).l|z]XIR8D#'䒸;A&@&TŜgEHp5yp҆%Y-9 <2iaeq}WGU _2ɜd}m_b]_tk;x=`Hǥ)KժoŭIK9/erGL:@e_r[d'O J= \B~&2T"\}gP)[x#(CX8+%5Ur. 矷os񈎼6QHUHvE"r@k||Y߳Nb9m܏>P.9b!(VU5BiEJ-5w*edG` )S6n_\4(N-{Gcʁ9:H~m""ڽuAБ*n.˾u(zp[9 bޔRδwdZ^& + đT-5t#=BkcMY y?Z ?DS'n߃1_36R"W):Crra" ΀%%!.kL*œHdˇZoqyʵ@ (mzd*aF.UJ{(PAsړ2d &d0 dDڪ}s%\Sca9٨#+۶g0Cm/LIQr|7R^uA^.p#R8vpK]JH*Jͻ}:oxEi2xG r=9ŷ]R*:Zp>Q ;o?5ýE$"ϟv*L9U^ \b>60b }A· :lRim, ʖӊ" {>\~?/Xh(eE`>ƿ=D㉜=V@x;O]?Q0V%2sImgrk&j;a70L8KxjhB5,i_r}_,qns#At֒A7P}uypSRBVuֲX6*xM_.pn_*7-B6)e`tYEr,zz`)=.3uk;9P4/ ;#@ =6_xFr;ˢ=5k FIZ+<ӟ9'R߬\˗ыTwbWk &Dn7 q|.0QJI{JN9ɂh nALxoL i­ѓy\Ó}%!L6-Э! 9Z"GtzE;k]EPXVxOe$`xêG;-f{6a fϲL8p5f.̨*="|d'D'@sD b(\ G>JIj)=x0!}ʫ&-@ioD i g,*M!x@sY-* hL9mu~TuN=H@'+P(gO[Ȩ!xrW RbjK̆!TAo4v+XtJJN JR'@6QIl~l5Kȓŝ#׫+dKU-Ӓu840?RxVsgsL6B M45 8nK#5:/;rJ:MlCꭙ wNa5j&oo\p({'^Kwd ΟQhF6TY$83sX:mGSk\sJHMQ$|Td2Wj׭%>Zwc^9zkpFD1atѫ̺@\7qPNA{"|c.-ʞ\tc˝Jqh)'5HAx"/[Ag*t_b=f>5.x/$dd$LLeUom m M9>GOakpr.FZE MROrI\M #Rf'@g쫴VkKe]b^> (`t| ({4|Bax`ls. cSd3nvHn?c79ڠ F3,=jYOw? i(#K*`h 8;¼™a K7~&1շ˄m!C2?ؙZ^֠%ҭ{Z|m X: gÐynLԪGm /w&OioO!= sUmW#$ʾ^~&UjnLjZ |\KjSeީ=g_J*'n "v:Beb6ֱz[Vxr":a,f a8*  +wChl%% EFs˳υO.alѨyNkUA8!ES`v0Xڼ+JYo)ʢUxJav􀏥}OXv۞QqJECy0$vbS2{W(80"{s-ݴgk%I$&Bm~Թ@"x`dE3'QpL·qGůRΉ':Y%CjAJѬݠF YEC- YL5hUb|DQR^z1\r2lޔ9Fu! p&H1`>(t#nD#B`!?ct1 @]&싷p8vƛ5ZtnY~xf{̆҃jHqGc)NT鶥l rTa@oTWC} 9R`?8 $n-OPKtE@Ryﵔ&C )yH 'RЦMckc:c !54xzw )0cGrJwmjbjdemң1@5; g`P1,1/pоFW\>iiN 8NBx֪ǦsV\;\[Ύ&?%/¯Xq>0aPX+VFi =ݍ&j ]4x_,KB|m jOtnNĻѳNlRDNĩ|y?!fY{a =BYX٧` lYGm<;IfWQ%׍/.^Ew^gNwሟ :^<`r9l'>`f #w&\)`ڲwn̗hC(»DӅYq`C*3&?elj BK0/]wmvX`jX}3HrEBWf[;% ^B|Kf\O8ʝ%r Sj "WOJ홤S%Zfy~<*gE{'V@焤uSW̫7zf3zhb4֌R9ALEMT!͕9kOBaOCG>X2 lծ^] Bt7k\EEQhO_A-.gBgj.+WE@; ٨蝸L^('ײocnKy!bv5{G\W`H>I$uJZZ1_%r T>hrCԀه<4$n:\,Sf)1D9a\濦> * KrKyw/¥$A nCW%*@;Z-/u#ݾY55&c"N=GHҐbUgMIw mu/6jZ80cgie[ `"D*5}ƊgPJ$ϼkžٞ|EQר4ƊIBQVxHvjo . \'%sR+ks-S&TSOL2f?=caZ`bx8t1D~U$oL&H%`C,$$e4}!'R׏̭4 t:!?Ob v^ NsAyMgܴ_3}$1%7يP'uE1ndZ*)2њ0\Т5ÃxDSuP]=ew6Y蜇I}H6ձ{i]_B+ޞDRx9!x_+NxZOͦmAoݓ_^%G7-t̤ps5Xjɞƿ~`l\wr=31~)2qM x$H͆G!tRzu b˫)w?Da#rc0q"3BLU`o<0yn(r[5GH_v8iENPRiSpVF on[jEwF_B4̕_S;`>T~*_QWY"_T D z^*T!?=ՍbմEUs,Cj;di*Tx/m͏ l1#s5>- Yڤ弨^c`]4m½u9"dv09RCѵ3Kv] e2pyh_j.zQZ}F)&?(^Ijmbی ŖiFwyXn"d8&)DS{@mm3VO00P9Х'6$yG^3t}U_`Rm!9E<8a]9 k;p%L$KS.4 -J<ݾy O1K>FZbҬ!ي IG#=#K~[ [^B샮 fɐ%Ʊf,#ebcj+_]ZP7" "t|xإP\ =2y !Ak"o.EM'+:Un|>,Ic _ggOHraG„lx29 svJU-R?Cb#\Qfߠ(lZsRZzݳO7ӄJ=b>%d7[@cmmً7Pr#~2MGp]dy c T=[ ,ƩÍfvk|ejB͗7H˴&塯EK`)97g.Yb's;[T\;!/j`Кch*ӦX نhh9}"i҂7:\EjL{{\F6s4歖BB,8lU (.K8-~%AmBuDmӮ~֗y@86I٥ӆm³Ct-cXs.qYjXJa^?Äiʩ_MKIg3,iR,LErRp;Ճ36XbK$pF&BRp5^ g"ZvL Ϊ6q& mP o 1vN?EnZmΣcOY]-+jpR9hO2sn:wS|FcOY^ UcxZ7sgzYNj䒼ͪ  /)$dr3< ':\wF|ǹ);x)9xr=$7l ::Xۣ\䤑[oVk+{o\oa["tOPy嘱Fʀ7_xGb?zסR/ߪ8sYʹ+w~D 3୿D;FI81 YkϪ%<btI5nTWec: >Jsχ)PEGbsi3? 3s>OmMtS海DԇLƜ@v 5c%P:ʏuLvjߖ\! R`m*,X*6֒i\tBIQM;!oR'Ze4 X|tu1^Mox7G{clO1%IpwslRo>Ih@G{d̗nL :#1{lV\3Q,-0in bEP|[\C`^Sʀ:`м4=1*4st;>4 Kׁ< 5[m* 3|&r9MYd aZJ1c >h:ToA:lO:ƫש ٕa¨F]G" ̏JSxLpsA63R; lMpip̃lNH@IpN&h+^mH~(hJ+)l|.f:[/Nraӥ .H Y y$l:3^}sl&'|Rq=АLV)]dFUYt=K=r:u;ei-CqVf{GQCx vYg~#g{Ė a~E5p eagI+y) ¶RK|9w!5 c6=扻?F<ЄƥBa>jU#jGnGqR`)F,"d$#Pb;0jZC1G=NU?@Bc(?k\cۛG L3cvn,ٱi^ѧE2yi~KB5%%HYDM-Ü4 3AƿDoLzudD+PMI擞8z h6"LjƵz~jd셖#@bp%;aq 훋"IZ8_(o7Ɔt*FwՁ ]HVfk +jzyCCz)B73a4uxUE6"we8H1yY!Vi#:٘o}\څIͷ"Q "^Ru[֏1?eE螲OŘ_oҨfMU%s)& >z?x=w vVAOc&kE򍥪 mI3 pxQP `8YPѿPMڊˆ ߗJ֝/r(r`E!$0[C?W\P$/v0[DtH ;G)QW̬C^Dp\L ]s|AK}dw''CA_|Z#?ʄJ^ P!FcbPE;oq1j0LՑrz5)R4P-oZ19C[.9)*8bͻFȐB9ӅnkL˫|I$1`ڊFu uLxs3?q6w6n%[<{>f۴f)es%_%uh,ZjX='#)tx_՘nf\0$z5RtC#]˓cľ$B0=tqػVS Wz-Sw`xV\{j~ݑQ+Pfe@'߉efS}9Y%r*L؄4 ?~ժ;vņ=K#CNJKN,).ۉcf,0QVZ]VOIK"D^HyȈsej֠ׄ$)OЭ[mUF)Fف+tۨ\CWNYz^P° |ml[6>s yXR !Pܒ+)ꂍ2急 z(t= bDZlu Bls_OiT zw;"_@+ H+Cw3ݴ4/QmSU(- Nc}o'6DJyO))uU,:nӷx9@lL#UfaLS=o^p{x ۛ4[eLBN9x'iRV/dw<(;s=͸>x [HI)Cs.?>. Hpb#ҺE1M@() "e{Ϙu'v]&t?=Ԙ$.n1gx1eo}"o%hFƵ,t 0;8l\qKsѓ; z}2"銇tV|xL륐A+CxwUwt.{/С3lT41z#.v1EG<ګ\_o?[Gls^Z,mm)oÐxO Tl]]mPD]\oNK|ŕts̍1SA8g@:ҵ Ů^uDB(:'_z#FWS`&@@,Vsq"߶U°>|`moFFhI~he77֕III5,O.r=,?wK(`'J%KerܟIY[p[' sy;{E1oZ*ϝX(y# N<&!JHpoʦ<GP&b%xy*[{?42!|LFG2-0!:u4E a:ʈPkwX݅#?st}S8"agiɫIqqb9NtC,=2.\SAu 4.lh eěTs$M}T%0c'td/n} g ǮA7j8$Qy[c`$9%I~Y=~,"YYVmzz=<ߤ0Fu9M$)n$:s)4٨`ɊTw-L6_yj93MYv4]G#TQ:򗛽vkKm 1v,集_|y3.)tŇ O/9_y&KZ};/Us 4u˰I8&KR %E--u ۘ*7RENM9lAYo FQNu6R38yr|w!`5um6*.UYP֑:tUU mG?7 Nn)׸C%E4O*<B|9۫H"Z^C #eoN[32Ж#Il7%,qoI\^ۅrIf[uZy6T^5\e&&~ǰ ?sc>=ī}kDVt c5S`6NhOXѩB18UO BH BS N2tY3fˮ"AfFl n4 (TQT$RlrԲ>SD''~g.m-ׂiqRk.Ea&jyp+Yt+iFtom߼P5f)gg3@NAL>ě2z:+>`v8G._FG#VĺxD6&QA/E_j/EhR;#R1Q.=1 T*^ޔ=PXȀl7PmO@m+OGR 4?fmQ us^18+b}8L ƴZe$/m}Қɶ(7GN2گ.ͬ~WM=Fv--ju%xxjPs$P5V٧0i$w,{ `=X΢$ڷ) h@ٞLІ;dNp8"d>u\n{7k2n %,wV=мm1I&tH^|d2\-ÚD|k ||C~BI %?71^SIC&sgDCIV+T\U_+EQ9b<2ʿ?t\ħ}Vom2 ]#Q{7f]ί1;8ZL# àW#QCrFrNshЇy 7Ga:JJsͼwi)ҢVc' ׮%'_έ5(`AALUuق 6qX񫄘e\OʤgT3Q^ T%$C»pVpT!+\qܣ2:o7NUHоƦ!6BآhB)t}]CeiW.W q|ǦFGD7|dջuS/kƼ:o][ONpQ䧂-[mU}LbN*ȧrMz [QXE0}gtbqtid$u5?(peJK$Y%"SY$Y9̭fAs]v!b\V7h@vfYT^+XjBd1.%CL ̊$JroNX m7"5]\3bKj2?pe|[ DT.hԦ+jxoK(MԦgP;j)FގեE| KWM*K <'*`q`+#;J//vy8/˯`C*mpvzR|1^B}+Ju*JX0OU BS2I^J=W7}v#g#\ڌX)/'>aBJY8H`mDqKĶ(:Dy0]1_lf-TzoذIÖ9mo:=Dkbe'nL\0M(ڕ7.z.:𦻠emk$ R5EmA8X3MYτްMa[H6y钬ORO\1'ld */m;z- 5XGzc0*]EV 6AqW6Ytz"%\Ø4 ugҗ(gr* 4ëU;Iߚ䶸?M=/5x@IJPdPAIP,3Խ=RLf=3T>UP^^#7U%kLvs|I@OXՕ^77e; s^@ nF@zr+DgxU \K}UxIf$;yJ6Ã; K9"qG5FcҾv Y[PmbA |^|q.W@& [٤y(ꟼSV΋oGq!\Dxg&a^Zэ_#w V̇r4 Ң4tgf;5)Zktr :.f͝N;P|L;8pxR]Xi_;{ZolCD')/SSz$p1RoG>I_ΰ8>vXZ9~n\uFa@Rϡh$"R~槤 څݚ1}d9=lPĘ>ZqHhKkK#RubVcw[;fz lԉ6m5DDga(ӱ*y 0s*hfSU+dFlNENKJ;!LWfArHZL5teAI*ǘL-]_?՝/?v290`쪇;\9,l\ESJznۊ%®  m5VyڱTȶs@!U< ' oڹ!!|+e LM4צ{xti i IA"9\r\)2M,W999~2®d;ٜw 3":s5N(ezY9ܑO#rPGj!lY9uc jDĸ\-BhO:HvZ aL`ωCWIbp Z.ԠJX9LZZG,¯Du_%+PkPHvX8\Aa+EPU !L(W[F,1=/?$.[ vM'ψDvE?Ad-$ }T~&_`T[앮7ONgL7.:ع8-)'u$q:6יލbliX%s8ϤRӎ 텺wrR I,QfSs.mt1ϼ$K>qyQ:≟`@_@kO ^ P?sʔٲ(7v-Jc7uũsfr5,2ߐ%}9ƩY ~q۷($&YcQp4.r[/5xW@t@ɵ#,mt7Sj/1m+IW h[9\$/K!to%}1wW/b`=LGKο]S2sm8 T& HD&QH~-ZdUA [u+[_*W"Inoi=+GOpӉ9؆'!\BQ*&nHJOk'Ƶ N"Zк\^%$oLM.6 ԕ\Wt,R"GQE))T+ntµDb&gwyo#U8/׃Iz$ddxT_> Ͱ8t!ÀZb&j 3[$Ρ5r1Ee3.e]%T!NiU@9;=4KPP%o4IvTUY(3ZdTʘt FE@H,V!^'GNtR_yWo{Ե}&=+@Uq6P[Ai=mq?% 7\VƎL;8_|b 5m$5wz<: u)ڴ]ՇP oI8LWQ%iFTIh`)\)&a$y"nOتބ{IB|~T}"jDDYV0hW# շK 0\nki<rp mk(2jYJG {NXwĺ81qcblWKr埀YN鉵\ JQY@|f$jI EuzYhgȯhϦQ33b/>{:6hhܪ'E~}\HR&"N<ܯhxI 5 IC?+WqSd$@"ͪsHk€3H9P' 7gjք:_G!JW \{E2/5wӜQcTGMz ='Q+&N]y{'& s~oqΗEz-x@%[ ά2kf*y&zrRi[a$Zҡ}u_6ޟ~Cwh j=?WRoص'ChMHcY„'Do'kXنx{rÒP_lfgQ~?LˤN;ʞF8df8:9300*xMHm"'! "9Z5?x:D~/V692@jw3 VWHI7R ЯP~@aS5}==‚DP㿈έod4|ӊ.G`MfQcEULF&::#12 Vi=UXyNr.$g|%lxoK.s:˻)B:[ɇI dP8FH:;++:ᡗuQBp4Y= OΫmiu&+k FIr45CEZքxg4@T*#x2ċ_NY1PGmғo͢kH٬,Xham"x4@>T *4Ygir[ayڤir03ZUM̨]GISP;۫jJjdzZ)^C 6^t1wνKEf 5Û'ԛ b(VQZT*2.ex$0|&0RnhUed gM;OޓnQqz4vc@#M4s(=S;=lҐ b{' C-S5j6* @@Q}FsIYl qπ [񝸹bG@0g"Fs{1N~O3,EkfaaʫsTʯw8Hex>Nj?lM,ҾD/|gV !CpmUPs,s oVH!(XJB2sJZ{c޲#Ct1-ج`o /c"=N<~.YEIn|Lx:qJ=kvOX? xh*=ҍWh |\[W!mTQYհ-]xݥr/'cVkU)MI#n6wnnA ptGKp}a-=By{t*8>h/#)yiCԯh>يr֚1\Q &:d0&zǂzU[ܔjzQX"-葨,cTLȢAhG:pn_؄iNǏ[Llbv !ŤKXpžY$b/_',X >,7NhBЯDD)rD  ~Gr+UdsedŁ$D f@pkBV$Ym^Lc&ɏd7#G27-X˪͊r oڨ$~~[G\_f&>{SJW;\8x(qQ~ ee}J^~$47Q(=]o~̹(y?)tN1yd)DgfLT 91c?6?A,Rb3 -#*[o6jgmФlCbG?4c2P?NIǠ*Ur=տ;\-(I5j'UkTגޭSIJ[$;ׯ)K^1T/?"r{ٺn/뇑(q&Xu;#P:BכTSzgSr&? 0'J-q OYS<"-O:l"Q[ht>D/VuwJ$Z(c|M%}:!ҿp^X{Mϔ!ȕ; jI  fOOmkv^ARh)51|VPIWfnh y}c,ǕH:S'DhZ:$<'R'`ƕ%F})(>gM \)Z6 "|:m_-ò _c6Jİ[ ٔcB>m(euۼ:!8w*΀r'7Px0܎AgFO{j 6Y̓Rv- e7 ˼̣]{oRJ5c[ +ݺ- S>LE\iu~j-BT]EHtlPkʩIQKQ E٢moI);v-IީG6Ȇ08+oò^hNp6i~i#+p*ا_.\E:yҜPVaoyv6G|Ӭ OFR5|̬Dx2Se6)G5[΀vJ[]GEY'\Tfu΀0u?vThNtwZc`!JN (0k?ϳZXVRg $ M~(;bvoI(_;Y3Z"ޝ`vkbgEƽLZ'\4Z]_:Wض[Ϡr38Nf6RlycY,͈܎&{&}?!`s>S3>❺S%tY ¥'ƪ+b(zT:eAQ;$?_1_ WGZ4Xپxв׏49/aRxcTj.Cu?#b^?2ҟ=ږ-P2zLXZ'|@|4jC-Y96RupҺ5t~R"YyzIټ4تg_Lޢ0'LI}Dd> eE8=Y҃ENb]7넬=Ab\) .hpBdW!y;E#u'><:I[k!֋cR<Wϫ$E`-,}MMKEZlO"".aoX;ZR߰-7UM;̺Xӂ$5Kv1@iT_%ecWrbVtMk!' sewvFDTThU~H( dG_:$ 뎈 1ִ,T͒IܴSgRTKd/xN;8>ÛPlnXpTԝ\:={YJ0PX&7cLǶ+Gh?Ȧ4cj-հ-6`,ȓ1?Ԓ^FG*DȺ~o7^DΔ7.tg,ZzIꙶjDžP 9.OIʇ S(fΕiЧg$LG]"lp;ב3b="#y-E+Դâ,[F@#Q-札[q Yɴe?)Wp)?SdtY4B{WF ^$ɦ&ŢwY1U>Vv4b\/w)t)>~|@$}K\Εz)I D܇ ~(8$rW?s !v[љAZ"&#w-C8Y%]sZfV4|D[GFxu#^6ט;XӼ2V{D_oyvHdM` tم}7`OyȚA=PT@*e5䕽{h+`3E(E!,Q1qy0kdb| LvY:^V.u{a%\FPp©+w9㦾/H :V2EgSsg%2CQ̛06sO;?lHt~E45^+` Ȉk}GlT" C,O3R9qUt<\+h˂4Z5^h ZP2:4=tpyi餉~mAd5c#m Ԁ*k|\^/#s{"uty0mx$diI%[*٠_z?l0w5[8E?Rx;ML/]/i3fs!o;]adHѵ`߁n54Tܒ@t"H@;Gn=SZ<|0h+&wu^.f : >E5?X:ҘڪJ>DZ,l G͙[9kB]튘W 顿lkipc]L|ڼ+Qد*\{=R,Eql[ys~x&7.v@ a"z< ?R 쨐C2˔BxnS{8k~4*IEo]*q.0|Yݓ9UqddI J.Tt:n٬O0n#Y 3I;I(pDv(X9@Y/\+h5v^$7^NZEdFvLJ_|0?^#|m)=V귋d3 -EοUORsN腙N8 OK%BaͯgG'@[mdE7Pu ފ(̟ evhk`G#-`ƟCigm*(0o:4kUP3aVba^TBPI{x W\LhJDK,``++Ҿ.PmQDP%*L⬏dk.AS1a wyaArv &[c)8`a)Ԍ FRZL{Ӂ1$ϥHo=D蓒U ysU``IYtˎ˕M!@V3WLBTD'tK6 .'&jD}J lz0O tDfz}| նs5șm˳f2O\-?O[)Ax`*yilO-D~Tp;RY]R0mɮXH+.<50ү>"cH5Ϊlz{sX$\mٍk+ܽy_X [ h\< o܃5O1Nt䱒m~݆#ntLrv#U⯪RjmL@J@1qpO%#O-?:{wš*Tt@݊mT%OoW+2h ŕ0C=ءVƳ_|sP>=-iJퟣ²7UdxϟH3_ذdl(Q"2g73IAB(@Bޔ6=3k~NF>۳585 Y>:_vۼ,P{eageУ}]pȑ~N<0T`|#wGKeXSmAb}lFoPj Q,e Px!O,ᬰٽ4ZӍqn>>P: s3i`'#TIXn] Ƨ_|XzfneNQڎEPCY`u칋mf]5wL43/2괺H]~YKSv}y/T´Ba?QB##{ؕBAbaNQN)vtci[cV}{7ss&Wg)>N H؍r GBJZp(m$bxl L]MI Ği%o~嘛,:8Ǧet 4Z.Yho滱Q *q+ŏWRXVCٵ hv>K?0uiKeY@ +FWt>/Z|Z}Og{vU^T((խ;OBŌ&WZ+ uu#] !<j Y^(64~Rk+1)\kDh$MYt`x'@ɇF8@<;Yp0r0/14X+sB(:9NEӛA%#/[Ջhjɠ$4菚xTKY^b:&ңܨG>ey1ŗU+x1BV̒Ap Qժ)\`ygkr+e*d8MVO*MԁF .G1BiԯJj6ؑQ~"r 6gLL] .YRKJ¶g\^ҚYݫ K0Gm뙂 y0Kwlc1;򐍉:ruėTm6&N=nÇ=(kIdyE q(4j$eǥ}}d@˳Gu28ws1h؀%k's N`bKA QTF&pAvּ Glݘ3­=gB@.҄8/u` 9xhf 3ΆKO0-yZ}6knXxQ|.bMǃbja8g&k{R >ShJ=vcZuy~muV7[-VVy'5uҋMD*}drC6]T1k/iIe4|qA[\7M 74B)E"t_MַTqbEL+|Kt!3 qrRN95;Ǝ )myL/>Dv0RF^muZ\nw('Yá4E#pLMfsLW'쳫V !Vpb[=ՁSsMVHL)+M 3xG418b.KjlEJ-9خFJ["Jt*z)ï-fsz3s)GNÙ9MMxʫkTrNX N=8B.]"wc,[pMNQW0#0mt@^/Vd?HP3!Gߑ+}K?op09l[x҅X#O o=H6jXJZ嘠#ΘRFkY`CFVp{o/߆'//Cc, RALY^Ҷƃi|~\U{UqJ4~ph3W ՆHYAb w\uyA^!a%r+zp<_+IزT/_-AŃJ!N*aEa6D^L[pWhfrOdi[F ?9D/Xv& Q(;rAga+nUp:@Rqm뷆p_h bgypiro;1PhTx%cUMpgJJSJ|&h\$c I kMBv#$SGgǵ=K %$-ID)1B]D' WI=FOԹ =,6.w89?o~e*U,.itPpBm"'ąwAyV2oZ~focSvNЕ&P,Q[:LVBou)4LFnVG_Y# :١CwS+gHz=q[9H󵉛#{ãN1*^8Bǟjq Y |UXRKە0} C-Ǟ:auQLZ_{2V8{fTdhy9C0A@} FDȶqqˉK}qmۢ.x) (tya;ÆXQ!l؋6NND$/(XWX=5NR)r:m&HE4C˶OI}bf70,P06LEwէR(:`6NZwzř|5K-7pʚ}奒$O܆ɽ!ʢ7M:o^Fz>t2c#.{_Zm9-g7[~-1k_ vR#Y83ֿ^d1pk}v1?ܩ(Gˏ ]cAauIPZS{ p^;]I:6f/;1 x} bΫPyrߤW8!a='(#?hEȺl;l2e{5ĵͤ&I<7 ~3!=f7F .Ł&&9,0 T腁>%G"6 ojVfImI0!;i.{Q* h9-sm~ nrHL'm3uPּ;ú"kύo`?nl,C {"+kP9Y=I# HN pNCto:Ebv OzKAr5ߧrkDqSۓ#YIJt*/0{꺗hv=}4q" \UĹ lB~+VC3pXٻn7Hn@(aW;S(!fe.z;C|YEOX QII:qi]Ś5 Ŏ-`ܾ;֯95#pSe]r!8+(::]m^? ̦p$iZO!E<}8p a|l 9؝JDv\sqX԰ԧ+oM4pSv(H AN8!vךݜ]1>@3u%$}VNŶ䒃q.^k*ޮ IVR,Eq@U ]R%Q451 yn7K=#a6UO@qͲZdr[~gA.zWKgK&bm0 0 H萌CSIB8< _k%c%@m+p#+LN; 5INf]u(yyLj8 Z]#c2BMM6D:>X]Ν,k}S6?}2hW7Dz~Gy'ӦޡcC@e$ "ᛝ2o,7MŤ I2%βBMB9w^.yPUpIH:V3(fFW3M]wF1X(HN$8q!4բT 5V5IO`}ksqKD GG=T:++FaM%brf sms[Rz45+WĆg :ݖ -헏D5BH_ݾuY蹁,ϻP22nҀs۩q7(=9džKK)w˙q/ Uf=`8|oj$eQS/X'^UA ' ,h&y?(z֤l,tw 0Tz )[P8`p"SY%y(=GcPNK}mnI