krb5-server-1.16.3-lp151.2.15.1<>,_/=„ '-^({ua6v=E >&/%gJZ}Į7<$1 1 tg4yгR*g=kP qP΄.Qma c#T4\=aT0фf!\0 |~˿(K Yx}g144:}ω_C͎i/@Dlc])̲RN_+g^Y#-T|>θޜv j&LF2>F0? d " U,0@DW`d }g&88 48 8  8 )<8 )8*l8+8,,8--,.,2^,(282/93x/:7'/=>$?,@4F<GX8H88I8XPY\\8]x8^bcFdeflu8vw8x8yzCkrb5-server1.16.3lp151.2.15.1Server program of the MIT Kerberos5 implementationKerberos V5 is a trusted-third-party network authentication system, which can improve network security by eliminating the insecure practice of cleartext passwords. This package includes the kdc, kadmind and more._obs-power8-03(openSUSE Leap 15.1openSUSEMIThttp://bugs.opensuse.orgProductivity/Networking/Securityhttps://web.mit.edu/kerberos/www/linuxppc64le test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in krb5kdc.service kadmind.service kpropd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in krb5kdc.service kadmind.service kpropd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-krb5-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-krb5-update-$service-new-in-upgrade" fi done for service in krb5kdc.service kadmind.service kpropd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset krb5kdc.service kadmind.service kpropd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in krb5kdc.service kadmind.service kpropd.service ; do if [ ! -e "/run/rpm-krb5-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-krb5-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in krb5kdc.service kadmind.service kpropd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create krb5.conf || : PNAME=kadmind SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi PNAME=krb5kdc SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi PNAME=kpropd SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable krb5kdc.service kadmind.service kpropd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop krb5kdc.service kadmind.service kpropd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in krb5kdc.service kadmind.service kpropd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart krb5kdc.service kadmind.service kpropd.service ) || : fi fin~xX `@ H@@5 xPP  +#.A|VCAA큤AAAAA큤AAAA큀A@@A큀A_v_v_v_s_x_x_x_x_x_x_x_x_x_x_x_x_v_v_v_v_s_s_x_x_x_y_y_y_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_v_s___s____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@@@@QQQrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.16.3-lp151.2.15.1.src.rpmconfig(krb5-server)krb5-serverkrb5-server(ppc-64)  @@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(krb5-server)coreutilscrondiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcom_err.so.2()(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libgssrpc.so.4()(64bit)libgssrpc.so.4(gssrpc_4_MIT)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkadm5clnt_mit.so.11()(64bit)libkadm5clnt_mit.so.11(kadm5clnt_mit_11_MIT)(64bit)libkadm5srv_mit.so.11()(64bit)libkadm5srv_mit.so.11(kadm5srv_mit_11_MIT)(64bit)libkdb5.so.9()(64bit)libkdb5.so.9(kdb5_9_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5support.so.0()(64bit)libkrb5support.so.0(krb5support_0_MIT)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libss.so.2()(64bit)libverto-libev1libverto.so.1()(64bit)logrotateperl-Date-Calcrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.16.3-lp151.2.15.13.0.4-14.6.0-14.0-15.2-14.14.1_/@_^(@]H@\s@\Q[@['ZK@ZmZ@ZNY*@YYY@Y6@X-XCXCX@X6@X@XBX)@W WwWu W1@W!@VbV@VwV@V@Vf@VetVA@V0UlI@Ug@UeU_@UQ@U8T~T@Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero Samuel Cabrero James McDonough mcepl@suse.commichael@stroeder.comluizluca@gmail.comrbrown@suse.comhguo@suse.comjengelh@inai.demichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comkukuk@suse.demichael@stroeder.commeissner@suse.commichael@stroeder.combwiedemann@suse.comasn@cryptomilk.orgmichael@stroeder.comchristof.hanke@rzg.mpg.demichael@stroeder.comidonmez@suse.comfcrozat@suse.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comidonmez@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comdimstar@opensuse.orgdimstar@opensuse.orgmeissner@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.commlin@suse.com- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196); (bsc#1178512); - Added patches: * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch- Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079)- Update logrotate script, call systemd to reload the services instead of init-scripts. (boo#1169357)- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947); (bsc#1144047);- Move LDAP schema files from /usr/share/doc/packages/krb5 to /usr/share/kerberos/ldap; (bsc#1134217);- Upgrade to 1.16.3 * Fix a regression in the MEMORY credential cache type which could cause client programs to crash. * MEMORY credential caches will not be listed in the global collection, with the exception of the default credential cache if it is of type MEMORY. * Remove an incorrect assertion in the KDC which could be used to cause a crash [CVE-2018-20217]. * Fix bugs with concurrent use of MEMORY ccache handles. * Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry. * Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name. * Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism. * Make cross-realm S4U2Self requests work on the client when no default_realm is configured. * Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch- Upgrade to 1.16.1 * kdc client cert matching on client principal entry * Allow ktutil addent command to ignore key version and use non-default salt string. * add kpropd pidfile support * enable "encrypted_challenge_indicator" realm option on tickets obtained using FAST encrypted challenge pre-authentication. * dates through 2106 accepted * KDC support for trivially renewable tickets * stop caching referral and alternate cross-realm TGTs to prevent duplicate credential cache entries- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package so it is avaiable for krb5-client as well.- Upgrade to 1.15.3 * Fix flaws in LDAP DN checking, including a null dereference KDC crash which could be triggered by kadmin clients with administrative privileges [CVE-2018-5729, CVE-2018-5730]. * Fix a KDC PKINIT memory leak. * Fix a small KDC memory leak on transited or authdata errors when processing TGS requests. * Fix a null dereference when the KDC sends a large TGS reply. * Fix "kdestroy -A" with the KCM credential cache type. * Fix the handling of capaths "." values. * Fix handling of repeated subsection specifications in profile files (such as when multiple included files specify relations in the same subsection).- Added support for /etc/krb5.conf.d/ for configuration snippets- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Remove build dependency doxygen, python-Cheetah, python-Sphinx, python-libxml2, python-lxml, most of which are python 2 programs. Consequently remove -doc subpackage. Users are encouraged to use online documentation. (bsc#1066461)- Update package descriptions.- Upgrade to 1.15.2 * Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368] * Preserve GSS contexts on init/accept failure [CVE-2017-11462] * Fix kadm5 setkey operation with LDAP KDB module * Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests * Fix client null dereference when KDC offers encrypted challenge without FAST * Ignore dotfiles when processing profile includedir directive * Improve documentation- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028)- Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite- Remove wrong PreRequires from krb5- use HTTPS project and source URLs- use source urls. - krb5.keyring: Added Greg Hudson- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch - Upgrade to 1.15.1 * Allow KDB modules to determine how the e_data field of principal fields is freed * Fix udp_preference_limit when the KDC location is configured with SRV records * Fix KDC and kadmind startup on some IPv4-only systems * Fix the processing of PKINIT certificate matching rules which have two components and no explicit relation * Improve documentation- remove useless environment.pickle to make build-compare happy- Introduce patch krb5-1.15-fix_kdb_free_principal_e_data.patch to fix freeing of e_data in the kdb principal- Upgrade to 1.15 - obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2 - obsoleted patch to src/util/gss-kernel-lib/Makefile.in since file is not available in upstream source anymore - obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15 - Upgrade from 1.14.4 to 1.15 - major changes: Administrator experience: * Add support to kadmin for remote extraction of current keys without changing them (requires a special kadmin permission that is excluded from the wildcard permission), with the exception of highly protected keys. * Add a lockdown_keys principal attribute to prevent retrieval of the principal's keys (old or new) via the kadmin protocol. In newly created databases, this attribute is set on the krbtgt and kadmin principals. * Restore recursive dump capability for DB2 back end, so sites can more easily recover from database corruption resulting from power failure events. * Add DNS auto-discovery of KDC and kpasswd servers from URI records, in addition to SRV records. URI records can convey TCP and UDP servers and master KDC status in a single DNS lookup, and can also point to HTTPS proxy servers. * Add support for password history to the LDAP back end. * Add support for principal renaming to the LDAP back end. * Use the getrandom system call on supported Linux kernels to avoid blocking problems when getting entropy from the operating system. * In the PKINIT client, use the correct DigestInfo encoding for PKCS [#1] signatures, so that some especially strict smart cards will work. Code quality: * Clean up numerous compilation warnings. * Remove various infrequently built modules, including some preauth modules that were not built by default. Developer experience: * Add support for building with OpenSSL 1.1. * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of authenticators in the replay cache. This helps sites that must build with FIPS 140 conformant libraries that lack MD5. Protocol evolution: * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements. - Upgrade from 1.14.3 to 1.14.4 - major changes: * Fix some rare btree data corruption bugs * Fix numerous minor memory leaks * Improve portability (Linux-ppc64el, FreeBSD) * Improve some error messages * Improve documentation- add pam configuration file required for ksu just use a copy of "su" one from Tumbleweed- Upgrade from 1.14.2 to 1.14.3: * Improve some error messages * Improve documentation * Allow a principal with nonexistent policy to bypass the minimum password lifetime check, consistent with other aspects of nonexistent policies * Fix a rare KDC denial of service vulnerability when anonymous client principals are restricted to obtaining TGTs only [CVE-2016-3120]- Remove comments breaking post scripts.- Do no use systemd_requires macros in main package, it adds unneeded dependencies which pulls systemd into minimal chroot. - Only call %insserv_prereq when building for pre-systemd distributions. - Optimise some %post/%postun when only /sbin/ldconfig is called.- Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)- removed obsolete patches: * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch * krb5-mechglue_inqure_attrs.patch - Upgrade from 1.14.1 to 1.14.2: * Fix a moderate-severity vulnerability in the LDAP KDC back end that could be exploited by a privileged kadmin user [CVE-2016-3119] * Improve documentation * Fix some interactions with GSSAPI interposer mechanisms- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch- Introduce patch 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch to fix CVE-2016-3119 (bsc#971942)- Remove krb5-mini pieces from spec file. Hence remove pre_checkin.sh - Remove expired macros and other minor clean-ups in spec file.- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch (bsc#963968) - Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch (bsc#963975) - Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch (bsc#963964)- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch- Update to 1.14 - dropped krb5-kvno-230379.patch - added krbdev.mit.edu-8301.patch fixing wrong function call Major changes in 1.14 (2015-11-20) Administrator experience: * Add a new kdb5_util tabdump command to provide reporting-friendly tabular dump formats (tab-separated or CSV) for the KDC database. Unlike the normal dump format, each output table has a fixed number of fields. Some tables include human-readable forms of data that are opaque in ordinary dump files. This format is also suitable for importing into relational databases for complex queries. * Add support to kadmin and kadmin.local for specifying a single command line following any global options, where the command arguments are split by the shell--for example, "kadmin getprinc principalname". Commands issued this way do not prompt for confirmation or display warning messages, and exit with non-zero status if the operation fails. * Accept the same principal flag names in kadmin as we do for the default_principal_flags kdc.conf variable, and vice versa. Also accept flag specifiers in the form that kadmin prints, as well as hexadecimal numbers. * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for directory names in the KRB5_CONFIG and KRB5_KDC_PROFILE environment variables. * Add support for authentication indicators, which are ticket annotations to indicate the strength of the initial authentication. Add support for the "require_auth" string attribute, which can be set on server principal entries to require an indicator when authenticating to the server. * Add support for key version numbers larger than 255 in keytab files, and for version numbers up to 65535 in KDC databases. * Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC during pre-authentication, corresponding to the client's most preferred encryption type. * Add support for server name identification (SNI) when proxying KDC requests over HTTPS. * Add support for the err_fmt profile parameter, which can be used to generate custom-formatted error messages. Code quality: * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] Developer experience: * Change gss_acquire_cred_with_password() to acquire credentials into a private memory credential cache. Applications can use gss_store_cred() to make the resulting credentials visible to other processes. * Change gss_acquire_cred() and SPNEGO not to acquire credentials for IAKERB or for non-standard variants of the krb5 mechanism OID unless explicitly requested. (SPNEGO will still accept the Microsoft variant of the krb5 mechanism OID during negotiation.) * Change gss_accept_sec_context() not to accept tokens for IAKERB or for non-standard variants of the krb5 mechanism OID unless an acceptor credential is acquired for those mechanisms. * Change gss_acquire_cred() to immediately resolve credentials if the time_rec parameter is not NULL, so that a correct expiration time can be returned. Normally credential resolution is delayed until the target name is known. * Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs, which can be used by plugin modules or applications to add prefixes to existing detailed error messages. * Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which implement the RFC 6113 PRF+ operation and key derivation using PRF+. * Add support for pre-authentication mechanisms which use multiple round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth interface; these callbacks can be used to save marshalled state information in an encrypted cookie for the next request. * Add a client_key() callback to the kdcpreauth interface to retrieve the chosen client key, corresponding to the ETYPE-INFO2 entry sent by the KDC. * Add an add_auth_indicator() callback to the kdcpreauth interface, allowing pre-authentication modules to assert authentication indicators. * Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to suppress sending the confidentiality and integrity flags in GSS initiator tokens unless they are requested by the caller. These flags control the negotiated SASL security layer for the Microsoft GSS-SPNEGO SASL mechanism. * Make the FILE credential cache implementation less prone to corruption issues in multi-threaded programs, especially on platforms with support for open file description locks. Performance: * On slave KDCs, poll the master KDC immediately after processing a full resync, and do not require two full resyncs after the master KDC's log file is reset. User experience: * Make gss_accept_sec_context() accept tickets near their expiration but within clock skew tolerances, rather than rejecting them immediately after the server's view of the ticket expiration time.- Update to 1.13.3 - removed patches for security fixes now in upstream source: 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch Major changes in 1.13.3 (2015-12-04) This is a bug fix release. The krb5-1.13 release series is in maintenance, and for new deployments, installers should prefer the krb5-1.14 release series or later. * Fix memory aliasing issues in SPNEGO and IAKERB mechanisms that could cause server crashes. [CVE-2015-2695] [CVE-2015-2696] [CVE-2015-2698] * Fix build_principal memory bug that could cause a KDC crash. [CVE-2015-2697] * Allow an iprop slave to receive full resyncs from KDCs running krb5-1.10 or earlier.- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch to fix a memory corruption regression introduced by resolution of CVE-2015-2698. bsc#954204- Make kadmin.local man page available without having to install krb5-client. bsc#948011 - Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch to fix build_principal memory bug [CVE-2015-2697] bsc#952190 - Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189 - Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188- Let server depend on libev (module of libverto). This was the preferred implementation before the seperation of libverto from krb.- Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically.- Unconditionally buildrequire libverto-devel: krb5-mini also depends on it.- pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring- update to krb5 1.13.2 - DES transition ============== The Data Encryption Standard (DES) is widely recognized as weak. The krb5-1.7 release contains measures to encourage sites to migrate away - From using single-DES cryptosystems. Among these is a configuration variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. Major changes in 1.13.2 (2015-05-08) This is a bug fix release. * Fix a minor vulnerability in krb5_read_message, which is primarily used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] * Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. [CVE-2015-2694] * Fix some issues with the LDAP KDC database back end. * Fix an iteration-related memory leak in the DB2 KDC database back end. * Fix issues with some less-used kadm5.acl functionality. * Improve documentation.- Use externally built libverto- update to krb5 1.13.1 Major changes in 1.13.1 (2015-02-11) This is a bug fix release. * Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354] [CVE-2014-5353] * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]- Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the MS-KKDCP protocol. * Add support for hierarchical incremental propagation, where slaves can act as intermediates between an upstream master and other downstream slaves. * Add support for configuring GSS mechanisms using /etc/gss/mech.d/*.conf files in addition to /etc/gss/mech. * Add support to the LDAP KDB module for binding to the LDAP server using SASL. * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed * krb5-1.9-kprop-mktemp.patch * krb5-1.10-ksu-access.patch * krb5-1.12-doxygen.patch * bnc#897874-CVE-2014-5351.diff * krb5-1.13-work-around-replay-cache-creation-race.patch * krb5-1.10-kpasswd_tcp.patch - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch * krb5-1.7-doublelog.patch/bin/sh/bin/sh/bin/sh/bin/shobs-power8-03 1606130306  !"#$%&'()*+,-./0123456781.16.3-lp151.2.15.11.16.3-lp151.2.15.11.16.3-lp151.2.15.1 krb5-serverkadmindkdcmitsbingss-serverkadmin.localkadmindkdb5_utilkpropkpropdkproplogkrb5kdcsim_serversserveruuserverkadmind.servicekpropd.servicekrb5kdc.servicekrb5.confkrb5pluginskdbdb2.sotlsrckadmindrckpropdrckrb5kdckrb5sysconfig.kadmindsysconfig.krb5kdckerberoskrb5userkrb5kdckadm5.aclkadm5.dictkdc.confkadm5.acl.5.gzkdc.conf.5.gzkadmin.local.8.gzkadmind.8.gzkdb5_util.8.gzkprop.8.gzkpropd.8.gzkproplog.8.gzkrb5kdc.8.gzsserver.8.gzkerberoskrb5userkrb5kdckadm5.aclkadm5.dictkdc.confkrb5/etc/logrotate.d//etc/sysconfig/SuSEfirewall2.d/services//usr/lib//usr/lib/mit//usr/lib/mit/sbin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/krb5//usr/lib64/krb5/plugins//usr/lib64/krb5/plugins/kdb//usr/sbin//usr/share/doc/packages//usr/share/fillup-templates//usr/share//usr/share/kerberos//usr/share/kerberos/krb5//usr/share/kerberos/krb5kdc//usr/share/man/man5//usr/share/man/man8//var/lib//var/lib/kerberos//var/lib/kerberos/krb5//var/lib/kerberos/krb5kdc//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15050/openSUSE_Leap_15.1_Update_ports/28dfc46a38ad84cc57abc88cf401785b-krb5.openSUSE_Leap_15.1_Updatedrpmxz5ppc64le-suse-linux  ASCII textdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=2eea2157c350935fc33c161856cd4ff0d0ef9623, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=487170ce5a37ff53610a2a85eea6695a2d6910f1, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=6e5765f951b0da78fb850fa36bde0687c424457d, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=e5672ff2e18c3ac58b1f4f59b1094158d8b31d7d, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=53962ca2dbd0a85865b758250fc389fc020b1df5, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=17c39fe9c55b12a15ffba0d1e0b6a505cf18e24b, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b9000288d79ac3d4f381b9bb6b941d8dd5c8f8df, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9464ef4066885f815451ae3ec6f14af916d33bf0, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=8ac7ffb22e0aaf74053eaa5dc7690d3add4f6029, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b790729595edd8c3fd45590f3160f362c853761d, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b442bc835312d8ae50714aae4e388708b4db9197, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9417422e164710e4b8f4e26f639c7a8e69cba563, strippedASCII text, with CRLF line terminatorstroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)cannot open `/home/abuild/rpmbuild/BUILDROOT/krb5-1.16.3-lp151.2.15.1.ppc64le/var/lib/kerberos/krb5kdc/kadm5.acl' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/krb5-1.16.3-lp151.2.15.1.ppc64le/var/lib/kerberos/krb5kdc/kadm5.dict' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/krb5-1.16.3-lp151.2.15.1.ppc64le/var/lib/kerberos/krb5kdc/kdc.conf' (No such file or directory)%6=LVfkpu   RR R R RRR RRRRRRR RRR RRRRRR RRRRRRR RRR RR!RR RRRRRRR RRRRRRR RRR RR RRR RR RRRRRRR RRRRRR RR RRRR RRRRRR RRRRRRR RRRRRR RR!R RR RR R RR RR R R RRR R RRRRRR RRRRRR UouU0 :utf-878a24812de1b3e8a4d7334d5f470cc2e6d18161d2d34cd661447f168d272083d?7zXZ !t/ ]"k%?8O^!0(mmή; GAki $fwmFm؜ ؽwNm/=+7m c1he"TE*>fKZ:GuʜMKJu褌g^3JS`VbfyZ,p$k]à &(zɜXămhLN/*?_g2XC "$ ECªG-L Rp "G7@r4LHpccQ㯦Ij't#-֬vLLT2z>%Q!ϖL'fyxXC)dPE}O6RBZa0_&'Q6Z,i|4žXs' yfMM14g8 .7OcZ\mΩŎ\;ė|DG'ϖ9|[eh7 PH:\L*0>b`HCX_g2S1K/]{FīMb~Tm5Ky>{(ȷ֟'OopNR5aea)tZR>ɚ :8ZBd4DCL_PK|Mo F6 e!G #c9ԇy}K JgMUWsEg<= >L\8ֹvp//k1,tfBcū׼lOd7osJ?/eorV i@U쾊i K;xoOSaKcr>t5fH?cs̩՛25vB}AͪpEbz6sOdU)C{.9N95$${ Gx[Y5,WOwG1)Fe&(V]qO!AşoYt~:d({, .p҉mmLhB^ ("BT1Мt[)gN̹p0mA SZ*EC ċ+ !QM6>wNmxx.La{'$O%aS/iêÖZrYQ K˕7`*hSfw=d$#|͵&=W!^~:eGQ~C=[#CJ?ciݱ@M5xg ӓyE^^& ZV Dp8j׵ûm' 3]E"b ꒼WXBO\VE*6:XʮɇqzsJOr\FsN4kKNeTmJzxDؑ>P.gzHqaϼJ?@SE'<=0 } Ŀ\aMo3UžV ?Qζ((kM[gc8.R6 !gQ-m-strMtU2@N6iegJ0PVE7\x\ !+Y73 뙽Vclk=*ZamA,JqZ3e:= Ya>;+0*6=Di"NB!Ck#,n:#nJaP#t3@ס; dT[m! T<˾y+KDIb;ʷal8_8Mn swIܤԡ%5>*'QBT-"gՅXF܇@{B$5މBHSp=8ef)J^xfTGj4 ac~e!#}h8ePJ 2Oq/5"|L! }b&%߰-ހPءTbn"8s1f) !2VaY3YyCJR1ཇhRiP!ȚouN RЯ``sG3n9! d !A[$, ^;yG<Y؜6 Y~m%T ]oB[54(,}‚ ּچZAˢ P'aRFS:WA0v]gm51VZJ..KmIv73p" PmHÜ,VT3-"(u# ϳ+،UgY9H- ވI't6"G_@M_p2ee3BD VE9UY]N+5hqKU]! n9ȋ?ge^b:`,ѷlK5J+(rtj`r&s0"gW3`O 7zA.5;ڙKQh_(G,>tv؟GJAQ^"6)=$ t)JsT֐;1M⡃3'=C I--!+L>-3Hp{v<^ifŕ> hF,!T MHP%{|h{aI0…!Y'P< ǣ2U_IZ=f%΃mұ@U W&{$Gng$a._ .KQZ3y;y+dce$}`vgiy_Y%DT%]DQCܛr_ͼ16A :g!Jf%> NNdT~LjT.%zEdJ%#x.E`I\](Ī99vkߏ6w9H8=O%^ &OROmy[ΥּUO {﬌(ᄒ&>mFz1)C!U3W!]q^|_}S`AF,^LAkJ  *ZTmO0|-&V{HN.w^ySrE6Hq .IoAvh[\!_d/񙬏7Ǐ"Xr?q|@ށe;"h;MA 8E.X]!Y{Nȩ`6*rC#gY IFLx; Y}H ?2Si&F'8ehN|>4BIdVlE;Juvl=hW.{VX_ 6id3=H_gܡT-7TKBo&irfi]6̋n6SM+""{ B.}g_4C^|JNL*.axx"5qQ_uL_?h| ƛ?m[#K姫Յ?FcBt=Cͩ~{\+>@+Agn 3~8%$rcC7#qch*NI ?yzdΐHhgiȕ)WGlYSXkz9A AAK {b"#fūon}"{H;RU<13ps92&lx Mob.x ?+<b#KQI|ybk> gqc7 [%ѡ۵kMh2x.f(e#/*[fGiJ6}N,;Nj ܌ PZs{C/(]Y6>w#";,JyNfF/5GcPT"l%KN ljƉ>DK#;~`ݝ1ShJ^zI槤B RpHAE7 gM07view?hցuTTVPFix3_%JzE[nY`enW L2^G*Ic՘'{o^T9zsl1;Gl[bN^nvk0`6L.#eιi&I2knD \/Qn4"O7c?=!( #f@\ف^`9hgO*,tr;-I22֗]S=h"QJ$ZS"w,%~B@ڴ{yⓓ71/R1&p #\[vX#NyY);AYlV{ÅD1.Lawtu_ s_&ToKx|G-NȘ*oME~|CO +G-K9-GIJgQ.QoPsڰœI">l&FA3m7ja۶6ͻ`HtϏykz9]8sJ 5&?Va<> !_w)"~eYvҺ9 a[ws.aGVɏί&fW)IڻyAP4Ξ.n~N*C;U;^ڔxQ)LIo\m(&3 ~ 1NZ9g^ 7P3M1>)WRn M`wyiwɰW00'COtxTMWʋ]" ~C6ﰿs̊uC+fC^B_(ʪJOz56f Bvʽou+pJ# 2zR"Bɣ!<1Ӷ7yooTϪC8= D1r9ײtgY4"aNSZ\~ R<"9N̶h>7GE."ԢR<+"VsSIV_Tm !fby߇rW,2=[TE<،@RtP-Ɣa!۸-t)2d%_م%mC3dL 7XQ>qjOQ3COw=Ѡ-S9b娎\XHF/1+l5w-|1, rlh,)3;UO@VCC׳BVyNEQD8 @T ⪭B<"e.՞ %uZ˿`P dZEf7)#ʓ!MIrzuq7[z0=0FIFWCzжx= c)/Slhq]={!ҟ-㎃ o643H1U?nk~Q[2nCeEY/Z {`<\Gᛅ፰'_up±LiNǘ\?,M')(/ӟ>lޙSK(OGm8z~5%٧3FKCթN";9a TUoj,Ѣ<m*K?Gv9INטgB•E*.ՔS, /ٲ~-t7ezz 3}9T3;O_2]6GwƤHzveU%3+ұ$:.A L:VA2l#g+ sעstA$FYbHɃT[xlRg2 c3O/-Z#JIT9~}yM,~)#|<]j?waeг}^njpn6y#h(8|l{==7SP: ^> 1 4dWXa0h-6mS+#ƪ oөyJBۃ/XnVi! MqGCo)֋WQT_^dW"#B$MvyKs=T  ? :P!ɿz rH u`tMC)>Nhz~:Lx:Q T /\f;1 &9L2dJ?Ln~.z(Ƃ(BAUK"j+<b\:E#2UL^ݘî-xѳD{rCG.j=BQ"ő EdwmV S?@]2@[df)0 õN"*J# C*ԷFVb8E!ȪӁCn(i;"r--^dQ=IO St KS΃yp"Tp L")0`1^X>a+?`139J&\ | t>cYNm$ZD$/Xy#%}UG$ZL@ڕJ |QDHBٯ#N1" ѪlpyCvj,2hip<FWcr?[l\d["nj0^w:Xv%VfF#Rilz(77 P>=d[w4`\! _D4N ք3 %-|+,qByulU> M낞vkoL+?UXf~=P3TP,n3hGDZk"^n}$ cn^x”:%Kykx=lj0Ҍ2*F.Ɂ5&5!s8Đ\J%qW~Hx5hݰ:-U]܅-p劝̢niX sl7Bڹ@'T:9aJg˜s"}jqbss+^)9.dvꒆ sV;;cRkyDڳ/OrD|*ndpp+X%ūgwڲ>-5B~d96?B ,S`aEQU03 q3 Eqܩ"e[p|/G=`sٹka)i7ճM4*(Æ70A35X=] 6*NY.^"nV0#O  i!xuRӬ~U' Ul pVRR_H6[vy?'_머\7>qw; ǃqxmR_VvZg!eR9(򤸼 #i'Ku/l 1Ŧzp ]l}~NGif:`z(Q!l϶IZDwlƗ2IGUvFBaW2Q:^P&G=+qD a|\;l]@s)F Hzr2,m\?ۥf~l.c/AX른.mKlJ!h3swb 5-0T9kj5]Ƀu%$NJ^qLMX+;96hۮq˽lS5կ\MF3G _ 4S;xb75 P N |(mCe+hJ[PAP{;ȹ:gd hT%O]N`_+:|(Ĉy$s /P)A%/)I8a /#0-ޘmyt>3owJu[eq`\u3; ,yB.}=9!t 5 m}IxUX?mG?]'>|.ZV߱,ry(o Mg[:@x/In ,(l0O˴[DhVQ3$/QEITY6{ ŞA1OwRVDTQzB$l?+Es]Z[ rD*dS+GhԆL(QyݭTDBL}Y 1З#^E wottHt2yd|G+0IiaQ})#&H)ֺ{2v$sMq 'NE qMRsvYv@Jx 9s=@I.K&DŐH7k;l;J):|9hfZwaVǍIꆧ!83@"f*>*ɁA5&iDa$H^F+ VN#gj64v'dF/ZAZNtTSm0fO4Cp\X˥Yq'N8m}s&IH!,j%(eȃ̫+KOD04<[F?*poeQ/Z7:t$XwHd]^"a! Vu )t|`)~U4yCqg (u@%н:Q!d/1t$-'3@R?k ,i8=z3*G;yN\kS.;KiI;O] XR~ͅۿZ +eg A>^avԞ~G C ?q\AP1x{N#)6"(To,I_}wCT%buOx% M@A[p ` U m'w!Rs0L'}#Vԏv7=Z~e2fj+Px4g(M]45F)ӆfc$nkk"*hƶ#ڑsjCKsCf̵PnrU#h cr}"]Ǡv_Hx?)Ϳ2[zgT3V$pfКDS`8##nm+.1» O"l#K B5C)oNtetFcϟXVekK>\[%ҙ1L^#^ݝ>y&K:=ێ;$`:XvV& VV-(:HPr@U'a(-*lĂNXHY)Y_2]xay t:xNs1o_1v6\rBhn4TC5o;t5;@!U":r3VYcJ8 T ŕ#`'ˬAldKj<]Ē$ $O01Zzt6ueA[\g1Aw1}che1P 1 hմ[-!UC =&·V7I(0J_jo8XQQȘb%6қI<*[iM60ELJaw~ot] 8mT`b CA?&gDPToiB#ќ[zzX$ %M%NW%Fyx*R,\.ki|:uDV< *'r: IPݾ#o4^0#,Rx%@T,N-A}XNasYiW#Lw-q2C^g5mY Jx-R`hρeNH%tE_U$]‚9.RA\keYy\{mo٢<BnĽvjyԱg^e{6:oc38# kD d!8ꥈ4^>Tw5Boa)rs do4t-Tu$i]H'ºKT9dL]&A~ac,mhwkY$klѲa|nhayI ^̎PT,$ry[iUHib8.n6/)xђmR}H 7qCg.#ldDt#nMșUdh2׬>T[E\<#{ALڔJ(_R(݂jqt'tC>զ:a&_2k`eyKm=KЮJ^ e\~#0a3͢itGxI^Aplj 飋 緢b~}`CGgh&eCwۖq`F%1W򥟛\k8mb͔q2; fKZ ,um^me.,^v,iKbP|CJ[O׃*kLԖxzpzZ HE3((yqX- iO/d[rk\$#|3YɰW@atϳϹIHP'}XDfN S ;X.8woơf)pD F> n'QM?Li~? &L.NA ܢ2}Ơ.W/pudŗ{`~ 3oGA8ƣI܇mzo=?cz_!gT?|8lo}@.[o^9>5K6}e PC(Bq9aL/rN F -)~YJTΜXBsos5E fbg{C={5XTqɲ9^M.\Wzb!H^.`ۚpB( z{72"s׀sr5_"t"$"%-C( yȿюw#3IM5_{\D: CZ7-W-x+=r֜wXO.ss[R~Bs)h 2e4X ]eII,$dI鈑 !CڙE,;'db1IiAy〇S_oyi#Cª<:|5s : wKqзա,W }~_#*\>HENկ藑suAOYYHЅo*"{@8Rn⸻#b?Ԭ#Xi;.&O?ӏ4YS}uЖAQIrinaȸ<j)lĕN>sNCRq$V šS\ZTDpIy a8tJbZmTWzv +wqQ JEuPZ!4Kxu.R2T'@Ns@[G'dSmtZ $bPdN#ńs-!Fݝ` LwWyŢZ#̚k.(Bʋ<XL#rq6%ZFO"D:i& 73 j\58|bh))Ts6xQ88G$0vnIcKs&.yuQm̗l v+){>fo Mlb'&1i^ŁYf \0O,bA o}RsC* d0iB@;8P5zu]8IEź0lX2Qw:X-=b20Q0e@V1Ji[gYMg`</ae@D{Dw:bkhӇZG+qNrv T.>`|DgIĐE+?mE"K'"!݊|S}ں]tS\0>,ӄf*JW͍Tsb~V qd&4"1j@6 2zd |5fT*&ٕcA`$;gm86¿j s0շ& k9J67IĄS2JBlG(n=>:ƕ${!yf%;vF%ٰJM!@8v뷓Բ;<-'3:5~]hKbW$kQOo;RESÞ>(1@6>f(KAoYHG՝d\2>_I9ne2%y̝_]q0pMy9?s4ޚ;}RKLU`u^ʺX&CQj yZ"p1SU못[i*| qC)2ܺ' a&D`yϩK0^b>::>rK7*fYqImՕIo?8 1. ۬۔g%2l pR<(T%1,$4^AX<({t)YQ8,OFP}'A7 {ȍ:[=wpa`b{D :G&nD}\ kf8.m/\i.Xr(_(FÓ2?}eQdmld~;YRNtY%H'|]$p?=fqz.\H]&jfצM& cnF^ɣLb L0Qh2)ֹLq. H/ѱ ya_B:--^2v! iS~;wn |y^C߉@a^ ma8l3_ ~)z >- U`ܮ7q>#d <9Qt: t&t+k YӈQ,8ld)¤x4 쫊6 Hj4E}p%aB^F0eD߳"ga9~ڳI 2,iUs3Ԯ7DR e^px-0}'|踚 a[S ْS6OmU-+7A|عj`U?؈w3Гzײը+Dgi9 m.ֶl׈h:#nM+P>'GAV'vϯ޿&1ϵJE@ ͊0@]jS*-7@ڲa*ǽ_+wȳ]Xv9+-=4OZ+PW07YFu_u=𮳡|~ȐWqKTE 3쩮șov Ot vơu! 72:v9*q\QG~\b޳Z IP ݳms<^-^蜷"59\ЯCf]ΔQߙi;%`tpAPɾ ԛJaC% ”Ns\ E3[OIJv(%S]ۊ4??I-o6N$88$whU G#?o'_qdZ h!?X=iwQ0)81=HUvʔj/tڡ (0HCdu)DQXb,E82Nn aU=P> )`5.f)8˹[Aۨ)6Q{ckGnC='-pUJfk`mW}iRz*׷ݸBSJvR2XBK?K%eh l:QAXD( 0 HZr(J>\Eqn")qp&['^/6]jm>Rӻ)bCF n \z@0UhBdת =fTL/K%&&,VI`B?xsL*z(P,QArn}R*8+Bz&OrJsd8,UtA S on SS\nV;XJ%SOg,kna>}*PN&V쬓\_TLo.p|r4SiLX*OЦtxl4[%ԬW zJ U([#2meV{_(@ ,+@V!BH<^C| k#:AyAעh)^Eh##j)!x/Oa;qO^kVم ZMG7ayDSuF9cɻ 30RQKK">WrtTǦxqstr͘  }v(-k0jIU[/ xһUqJ5kv>Kˆz,\ aGDkEVk 9w(Ƿ'ZYvOH] '%C>mF=}4,ÖM=`KJqa[î2+#]$'xfjo˟0h͡]6^ӱ@ w.tv(\Yόi$u8`ZljD'Ì~ LV8غȉ3%k$˺xܾR sD] r: QsFgqX,PmM$շjWd~,/k 7Z+'7TU.C3S1pH)}nkWNء«-"zuFYokb8c1C;p5&^ l]JFmkTҬ%.NŘ7Wsç%DWz^w7m^;OA&XwIeMb T.ʩ9!=B"TȲ`{ؾ~AIESQO=Hy,_txȾ]>?[,vAd? zz!}r" ~oiD+Y=}*~%^&cz|GBzQ'\Aخ+EZ g&ǭʯi;ZQ3YgeCf9-eoJCS]N}PKۡ"U ,XҨɹ29}cERM:^ ݛK;7Hc`)WݗjN)c=3X 8b}) 3ϛJU/Vh)gDz,$(J 5\*oe\}y:ޒ!~`bgy'1-uYZ 'SD;#zu]ē湎'<`y>6))_7[_UMRc0?ЗbVqF,ҬG[$ mSg,_ݧiޟjũ$1h{EHdRŽ%}4N}iYrS:=L%ߴv5F<G{fNXV}H,jxa6V*#N<閅kiM /Љ醝4? 98*aMXoD±$ D ?ѩQ!Ӣ4U1R A!7AO{w|VG8 |IRpc(aZ<_I4NUUs4ʉoLj&M"1+FqR=IXFIG6y%k4|@HCB6и}-;_;o5%-;S~m~L%*{Iy0X 0GD fmL`*vcػ 9" d^ߟ/:s/"n+xAt%X#m4F\77존ϧ&aDDŽ ZwhGe+W~4ъA}NOb_jjׄ@-sP!ź12Y{kx,mĆ\+@_Ԍ1+tO[Z2;- >?q ֏f,wMƩ9 m^ u4cI/ImׄeUEA{OcO.a3!ilWz+Q^8:tb,SLj{_Mav Ce <#yKPPgB3#,h~!6Y~ǂg!XYq4yUE>@# тͯ3GC@uΩU$~h#ƸW Lt"2N^KtJ(0z8Lc ߬G{ A 1墚l>nx`ɯeZOjx`jwBu.o!|(9 e:iI3I҆jͣ?xil_ȥU@p~KQ:uo_?'д8⻪\#G ק3d |Pjo{y*hfMIl,?d"4$r퓆,fQ B}"Wɥ]S3' " A%Kخ-S̄y~$Q)3ӶE5, @1~@66Uk]AM: xaΪ.KaDQ !fƚaNu ۗ;KF̣ygф5辷3\#xp4LJRMzaγ:aPreAMzF "Ս4C=Xk ,qEXMOYJ#洰SF#.{^]q`:SG:7VH%: +u¦zA ۰̺zA+SI{({H,ޔD/TdrK  V0RF({wvދ8oLBV,V /Y=W&iJPƽ#Y1k×O-O?KbgO.7/{O1Rg0РV~/9l[ʣJh܌jJ"3ݮ,Dvi7O&[~~+}E%2M]:N Ab:Py7ۧ"ZE]P4u1LPZ!0Ũ*KEҝFNINlTS?' P ]/t˃\(||"{A): ,[$Īe`e#|}۳Vt%Δ4G\6AۿFR8m1Wa Jp6`Kw%+1eH.'4,ޠ# aD|!Px::?tvEWXVkP ,.M8DSOٝø =LsΣOx?VPv%_8=,Œeaf D=7uR lc)7W$Pּ[N ,F#- p2:={+EvK* @]Ўõl}(4++ Stn~ _ %?{!ìwf`FyFfKeɄ`b0 F[a$ )ˈ^;v_N YKDb ʜ^I?EKHcUs,?r8LFg.r{d$bsYW`C2aڱܔ߻~8} DỌUM0؅LjR`N0KS_LU\TL1 i_%T+ħvGn{8NCI9P G5v;F$(Ik|*!s,8\E;x,;zHD6Tv5=9>sNyd#s~!"Q7aJA1>\($I!5m]7|V2ٛ?y5VbjBnY޾_#uPv{e5M{-nzr -.Z +" FOːIZ 0`1ǔ/^#L6Cj:(bmf`P|?N{0e{9rқZZ9DYcd,T$tꜣDWq4WGv~n3Kt:q*M,2RŠI}TR8(# |ngEr4QPS0ł@=F s92{a#*N!X3y槢())7aϺ%@ws9ָ9&j?hev$pݵy MFd3{q[XjktmAݟE\ԎfR7ZlP ,xZOZ^Jkb83l$Hj3i(a K ĿW0 [k7 -=t+ȸhZfH2pcF{ܕ|N]V6,̪6'>Tv/.u#)8 5UjX֬9Ό"/MLdE~4!f_:.S[AIhN\ k jpU};D?_PX;IF¨'bD}0G7,e;f LceRŹbƋ^ @ts,g5)7L"ݡd6]DS[ hgm:<&V=VMylQSg96ѣ(a&y[i)Xr%EJj:7=ErP%lC紗0:n{# EȘFv0m~t  Ƃ^؞'B~vfC!X[qȬ3@z}ݞz,lQVplx.=c3o$"^>EB)nMx{xқLc5V'8Fȁ0M`wG#"*,Ra!R)+ }"Ӌ dܟ{AdS/v*C>}5\kuC$(~[K>ޢ"19 >apl`x%VΌy9jz͔֫+@5[$10ޑFg:@T\ 55ZPK5Mx vr|q$%.e~_,J#CV[ww~>N;%p>[a9#V""J~+X5Xl($X3˳ᬂW wNǢPI`VODNGm+GNr/9Ue}x|&OYXOc(FX峖Z9:zr>3<{*2^ AV92/{ b g l18gW3Ig QOs|6 S#T,dejHr=yR 0Uˇv[CEd˛5K}j>I0m7(|Yg8]6/Y*|M#-FP]NB8|C?JTx0-R)Ms]ث緘++!)$T(F&,cGOgkr{Ɇm 0FpRrԒ1ylTܒOeseNoض OUE6Ej=,p DXD>I>׏0^ɁP,)nS;xb{a&{asJґt >Ӥ U ت݄~{ 69>[d$E"ͭEdI{2*!PMsD0eX#'#Jrrd-& jSUE __>4ݫ*vg="YhIׂ<.]VM+ c2RC.a X˟3C`vi$ ,1yu_:D]'˨{nuz5$W9jوf@g0<$Pc!&L.N vsDMM#eޛT5v/ןB>pxiۦ}X-?(@gTa)w}2kW701 mŪQql]g ۵L3/]NP9Nі7'箸~$bw؇% n?t85K}$mbt+>!0.ֳ A|)}=h*-X,w 7L9=L;%(Lvjo^thCp$ `8>CП3x|_`d8\k2ܾ%䔪a VOp ), {]3k c F{|hi]whobn@qWtb\2(liJ4p˞] O#MTS.lYq#]O67x3 x.M Ù9q;P*(8) Jg~}n Tx=OvkW4 OXF_Dwނe7E*\.$ DiO9(BCf@` K я"3xX3nA=_PJ@`;Db ʲc&)УT+\= iie7K !4"IWj49|]D{ ߇m 9 S l\Lr+NSeHR>IcUS֢ZѨ&L=vLp s#Wr^vrCN;z!DŽK&.`n ƒ29~x,cJhT '[3Uݲ.Cmh3[B[3%zv Lr*Hrs|KXpL(fSVHڣBH\VWj=(HeHc8bѬVM"ayeז'Yc|Jfg28OkZU's F]+O G=KE'jv#dwIgfY /zL$^`0<\~ҿA>zAH?G\Yd4)O@, HOcQ٩V&lA0ڵB|d8mJ]O'KV ?(?y_s7z83Eln Yf"D3!‘|bN:MSVMP#6:{6 \(\Uc0`WcQ]WØ$D7 g D*pu:H'5LI|'ž~g6J@d닚'p SX40/%,I_X ?y#vi# *"vڦVfQuE(IC0*S#:v \śxZL:2.2@Zvpwo@Aݎ#RJvTc7>tOFhKx%hH]㒙V9 >.z콻w#!ՍJlrP\N5O>uW`<}I'C%QZ8\TSE_|;7) =Cmv_}*OiE19Qvo9MlY$98OZ'xxG hϴmOJam0YPypSF݆?0$!`=N?Gɱ !ق? U_.f|p|27K67f|1U]"tY =]q"LjaذTRBN.ɑN/WI~6R@sS$`yTzt"IŻ6Tp6/D6&Ik2}Ȱ.,dų]BA֩h9(TrCaB~TZ j:c|̹;!TԄz^Hl5^X`s2jbP"`^1p57z\Œ#O<Hq}̛嗊uk~˚FŞJ96Ձݘ *_ˮ_R=mT|;tpneҥs*ԛyӌΒJ'ǭm{ ^H1KaQ{NǾ",$˰Nw76)!%8 ;F$ AF$àc,MB9nklʃ`uҵ-om'j^|A_hhRZG<"\`3z~u? ME˅2 _W;-!yTo PqqrZ3l$)*-K-ˆZw 8b 0?!)wwJE8=a }zvo{͜+` NOE 48R&a£T^2C3fJCXN/IБ)]-v8^KSw)pIrI(3_-6kwGLhBY)wHp G'0&}3nCD0Pm-݀v{ߐ]?ye'3sp & h=\ش9:w:>C {:Eq賀9: BfgSȂ5!=Gp@qoz $_MC%ELXF|iU?2 s*+~ 3߬%uXI)qu 0q?5˲ @9%?d!g*$,roPX\g@yUD b]:ey]9)=F@JVz-H_Tn&xM$ٽø:n/<4ovrIHܖ@Wdki|pZQ#-ŏ 2_/1Bx G:;\4k ;\MH2if~^gd%s8NaV9Ϥ^` `,epK)6-L찶Yk4SK9|ͷ aN #_HGY)_2veͱu|=`F"[5"GA,ruD^r-j@F&}o,^fZ&>I,SD2C=Ng" OMqm|.OK?l(n S_Y2׀2F]+n,.0cONֻ%'UV;G5%$LG+2Ν!&•c6Huzڡ]U9,u$5CRuLg2 ?Ph!uͤD]v%BK=L[ m~H,&֣Ɏ@+;̭khLC@}wcM"ar}6)lh1IRU[sAbԼ%/yi8cbљEoԶ>9|^kmo4xW uaI:+sDb`ϯ(!@hD93|$d{O4;D'R!NSN_4: 9tdhK yI){}%(EMTJUcPlQ0ٜdzZ$往sB{G?$쉵A}tK VNN_!:n[Pc*6#Ϟ)l9$ef 1O9A%}bLqVmÅ%6Ik{7U,4fTN`gҀ]%G))QZMcq@!w7^JypL[܍0auKԯ$nMGTLYsHY Rɫ)m50PQ;\J@D-h<1ɥLjB,P'Qlt7A- Nʄ7U4V Z\:ʨ.F?8bRcޕfv>sXkidF (Zʞ>VL7zTKV7ڟwV1<4pQh В:.h 5"/+;7L9ےΦW#ru@Z{DQc,5PNFSz[Z c_TfΝ|; !CVZ!!QqNR`aXƂG.|@$ީh' ;yTFƯQUr3>ga!b+ /"S䷣1Ps# Z4s\SR? d[0 T? )e}ǴPj+0[Ps*zs!άAӻW#-IYd yH3Kjذb]SȂ-RuyȦ \.k֨0 iWI+{Xʗ] ^x Mxlڡɓf ՝È8ONBQ1ġ灚8dISzp+Dpk_:O4);Z.\LtK^p *F%p +eb!yQy@/93L>-*=w8bvr EK܄{g}|"mL|8q?P @fF꛹jZjetА<$C}֘Q:0C<,Vا-b*Q36 HMoު*P=ѱ`oЙhNIjARsfJ\b9$|ѱo`JSui#z:qHeD3bGqޗ) QgjUR7 k`IP<pjT'ss DmjM+Mw&R%=9=.} t`jk9T7m34b吶\4 %*{,+ϻD޲uYyZ:p_ O;$Yfu% 7օ3FoV FoERӕ)LkdOTh%$f:؃L!]g&WaZW99J /Acug\hS1NRx3 nkIb}<$;=0P&GN {u D\d=}LSu r]>O+I3zjCr`f#Ǵ(8x>j9۫~':uژ-zCiCꯐ\,7`&/ Kl '`P҃fԃxq~^=Z u3sWz &Z'r@fC՞ "WEV]`W7kZnsTeqjg/2޼L*kȑx,(*;D%s*[@vGY$~! X=+ͥGq1iebz|6D<8"otxM^A_@,ץOɄ|cnu$6b.#+1|ApЏwI\ʹΥj1Uȿh8¯*|l'Qgzy44kch rig(ү%}F %R/f 'D] JH%/4ό?U)nYm'^)yDh/ b|K =u:位_o׎c &,[G]6|E}ސ퇇˂pgjˋ3i/]2:M1d03  9.1b SV8/%l/4J㋶ P'RLNoTKղ'7:l݃D Pj>Aհ5ӵ _5cE"5{.X mn ^K n?QmV㆕AWOcWXy,MUz[aDܫg& )9Q2jM6xcQ3qFj(B<~vӍx<˴CA %eD L6/V6ߴ[cul!|rAQt|wN^:,iQxS`E:9NǨz|w4}i?V¢4whZk/q7LՇYe {`p5"շ`ܜ5k,Sz/o%5Bc]W2K,pS(Bb=뚍.UN%gO_+e-u](IzOCq8m%va WfU! coy}~=Vg᡿Eu[63#׊U[/n795ZLU.dwc&tp0IoUf cCw I{s|$y%FzM_E c~.BeP3UNC|U:|a fK`ds 3c,J-UWaspXӔ%^|,~sYll-nBDmB|䴄%x-GL~ii>yLi`VC9s3+a)[ӣF aθV`=jCYAYcpYCe2.]:wYh\NѪIv"`5/Sct J!j`jDۓtF+\@<=&Gz\.%ۊ0XNBֆHIjj6J0q 9wCOl x6 #6㟊Oc3\wGR2wL=!!l1>&%mӊ4q%_|-=.1];[eN owJW3‚Ө!O8{-o 9zE[iLsMjֆ*LO?ɚ$a´]תމϴ0Ohs)a{`whwTSD|X~¢c/mMꜶLݪH5nWHW(0q#J֭.ݸ0[DmcXyboD4Wu}Af'5aLYvz]:0:Fs 1WZ%VȞuؑ?&%sG_}GT`oWΧ 3@Nè(6s$S X`\czDDY}"YKlvnvyl ~oezГ |9TL,OܳN3 mz/x&$)-H%ngΧ|Z3t '`t|e8w|Ka6lcݵ#Vr <DmqMN=@WȡoDmlu?. Đ֢d0HA).VNt%5q'e?Yva!.P%TEËm,*Ԋ&yh$~uACߓ˪GNQcZy kݑ9[/Fj#i& jf^?@4eP~ !\3[h6/rtsr?$jb] @:"P7"vs]uUF"JO Yk7E77=Òp~#MjN:@X'aJk6e§2&o'ҷ*W;>h>㙘NNC?K裦o_SlP=0VJh2^yf`IZߺ-1,㹠xIc9ԚDB99tBͥ5'DԓvZ8S,]+::Ǹ /uQ=`Oږ׿NϜ8CWhJy~W\մn$Γ;@ ٳHU+~cG<~j>l}z EZ>h2_mt/Bww^=/XMiUw6X4XI-&ĊP%X `/* +FC}dW|'m=mI&6k}' v}MeL3f[9eJė6s]x:6q^Wu_b;p% >7XBʇdNÐȽD Lcqg~)x ~H*̊:zO*߁3Etzq'@z9[Z y!)}cNZ X͛>K5L`Ns\~.q,B:)4vn_>N*q^WIIi|+Te3r?H! Zn6P"(?<1cMmZ>!N he쟘.uoPx3}!=;NRqnſhB+FQE; ^zzs AeNBbv' lQGyKҬ(>y}[m"U-,lF`EⳈ1G|LhmHA'崇E A&)mdi"^PTț_$vQ25pb"@oe+'_ 1'tPLf0h2W/8/o `3S?fhOA +}s'g](AɘA YŔK8![UQ@LY̅`Pwu9``)vF?rTt62D4Z6_Wx\J*Ĉ<'}L3B- \֤ '?x=/80=E`VߊZR@<r_ /Yٽ]Vv?(+nH`i 39Ƕ+f-3Cf=I4,s .{M.]F UrRZvPx2|%{bwtR7Ђ?Ļf:86d7"̼x@/R!V >=df9 kqSv.PNvG5oI $Q^9@7^F!!A2)v D]?.E(yS{VH(j|g[uH]RHvpg2^f9AS']FF* C02zX*W4nQ%dleV2egck xa8f]9Yb]:WЧI 'S'V[uUXv %rwR.@0`%{s,$fM)$׷%C==d#Ps"+V)j痷})&i j\duYhH> UGg-+ 9Rf7_2c٠7QGRuGXm HOd,sb擗a%> L?St熾P{Ten%F N@q6 /VSc|>.T6Eg(_!%|yjpOiKIU>ߊ#@fAjMSE4 T'VMgk 2VvO0yoaQE[B@rwmiHHZXsm_%%/RYs{:FvlPܻ4j}o6ɏ{=:cƶoi/R5l$@/Lr/oLXo'#SVem1cVM#(&|оGc,4hk!$?0VtRWlimasP_3幪Co7D?-xn/I>.pf*㴠Uᨲ~j\zmBX4 Jb~e6,`974f >cۣPw-UaU{E A[5iGtI~@PhDfb'z xzdql_]{GDթ2{\Px7^'-vӚfsIY23HkE\Y:yЯ(]HLƊv\̀i@DAy5;"Tѡ9bds֎& R;=FxW˥4J6y7Lif5yoa&z)/łЏxY5[x@q p?hNW\d_L`3̅#|fW3 e?^;aHTB r4?!Q`i,';%# hI!t(:X&L9NIT=-+ZH*>ufE߼%w'981\{&I  Idxwņ)x5/p8 :MSRKܓ8EWakOk+6\p592Y4ˮ4gƽTGmq7۳+]:ComW#-^g\:(Im"'+guX&lmOH !5:^9}sF/Cl1 P2dcJ_TLQPLZN;*|o]-t-뜥\V,PuvI[Djo1KbQWVcI |EtcvҲ%:i~𱫅9b`.bC*uDmLGF8xpL aB<M|r cQ/.@k-Qug|i!==w1o7a7B%KG p yo }Z>24~T@8/nO(R"hXEV~ 茢.4ޣ=%g 1b<#'Q^ւτ̃S{wrza-L_Yίj]{ʅ͇94mCʽRCCGE} o;2'kyAxT_/W/ѝp.;o7˫Nr, 6_4nA&\{Pj#Rm0gPUP,9$b  g\T)2\drHST*9[/0F$lrC x x 6~ĝö K^|}m0 yX= .At'L/3k)_V6II|L}OF%[@Z*$b&$R fI5h>j8} gmAh,sG8|(G1&\,ax,ffpH9-õ9=j=Ӵ A&4x>Dݡ ,,Vm;mAP|n5mTT6s*,^gw:@G0}b_ PN)Lſj J=fUVxJyLK 0|c8-~"..)W:ֶFHD'ћRE{>!*=0deeнeѧTKWFҤ"#kY m|vb+ *fxAN\7}Ѭ`_Ͻ[sd˨ُ۴J8;!Jh{1!Ե|qI8YcYcwP6ckP2_Ȯ@>0|A`(~YVpJ.CvF/W@HKJ8aKЛk<< Uhp8ASEw{ :k|V:8-Q}G7UL'H-> FQ4cR2JYdpD4iNYRJ&yܾLS_@ȳu!lW?d`{@">-i7.듩pmYpF&dhe:bQy@NH]⫻`7W1os 0?D(5">ӒA;/~96x̖tfi lNYPhڵP3NA5䑓JR%h`UJ!FaEB ӑ.Iӥ.$Xn M%7{+ɽK L^wqr#F+X:9vg>MID,Rڵ Pw"'L/۲H$׳>Vh6cGV}uBVv B 0\O6%cWX#;KAZIm"sLTZ545.RY.^Z (-AP{P.U(Ly+#@ &}4o:8]ʱr1{ɯnUS \t֬3`q,O]X_ngtեΕ<2sTKx:X+7̪&TcINE#/ >Z]yye1ͱGC;QU ˷.?{~ i^"f֓6@p+)]Q>]R=N8tK[<򁰜" ؿw>3,m5īs%C Gytbz[>^ MeU@NLJ[Xz҆)'FKm#dljрcX2MR #ѝ˃hX0L'9R: 4׫e3+Ϲpn_\i;6X*zgRYfWds߲z@er6*Ӯ|h*EvROY:O m@GJ łԮh~!iSo2R8 Z "aTfAVn|$LfBu6'W¥j*MtWҙw]RS_=wMJC{Nbh(et.4$]9*9&W[vI m @Yi`HKnoI$!7{f< ծkT% Y%IؒQjsst-t&XmwѦueg.ʱmhX[DFm[ 8L1 &=0.?g`3{_ ׼H.Mc~Ke ˿M޶:|_sE;>F2 IsN/J^f<|JRV\,ꃺzyQ]f杭IFS@}l]S2mD.cQ^GZۥ$n pz1[6Qx0-7<@z| D'4Zɚ$%拉g$T@\gn$zorC;CFq+r椚 ZϱUb0ƌ4!ګ4|Hf)*uxDLA@y;%بR#ShrWҒ-r1UUb!&be< .;(ՊA @/y{tA[hN65gIc3:~Sº]Y@(N`0ɞ~qn [<.t( ծd>:~)B~2g&A 1l 0}/z 28rw5d8NDFȡUHC1kPNWV=)7YG:\Z\ZوѰ^SM6 [> TFNj ].ìK b5[$oW)> X-`pv}da z79G 9cw=oo& QIJt}u#W]r$Ai˞g1.J|dE ˆf0lpq'7crZz>.zK1:)`ŞE^f/܇xFQn ]{'}1CaC-B@xcRTe}ErQO+E,TW*~E/U9^BG~HZ)W J{ͻ 9x'/1t* |4c9fZ~tV֒N0vzUU-  vK_F7 i~JU>d4NǗwbƦVH48qLcd{Mi!&QWkpgp|"zɠTKR0Yie)X=dm|,?NV𬑣{m-4v+90_YmpAsx^IhTzIF1LIZ2_o=sLu(M41ǃ~>ǍoaZ PHG[c)#DQ~"ws=û'vSCXHv̕qԢ˦_jI _7'mNs,:D9y/u |;1"%٘䷺bXp 4Rj?F_Lkcӭ}ثzf/*"|T@եBa ==/dwE ]k $ju .qm5LNF Ct5pH?sIkzʥċAQp6Kp/kZM z_fS>]*]eXCz!7Fo '*&vJOSDrݴ WИobc^Jy Wd͇\0C(;.7:D:qQqP&8t5^[X %y*~a1m1}q)qX%se5l3?m3 'wPQ2pDa5GT=&/7÷hD/`𱇂Y{u׬+'ݛh#Xi5N\iJQ?w5 כ=eR*~vJ'i@R+߉qPvf;م9AqݔH4rs IgxdRHH<7>ET:[ ϒ.uN%ܘ &#0LR6):E}o lec\mv\#4eϰG>6j: U%ǫHf.Q)iȥ4zʂ$#N5+.wj-CkI$9ݖa>Φ1 Κ*y[dէ@thGZ oECRf&aYzV=7WԦU1$<d\};T:9)R @#VS!f;>w,Ai;GrW<;;HY: 8jd B+'l,BX.rCd/>Iuhj\|F(= 0 lAy߃hZbӴ^JS5dSbUPA0#h0"-PHhߥi/&2mjF!ЩiL9.Ӷ<,,Xsb.ߐ TnB`V,<^H8mľHXnڠȣ?8 >{ ֧ !0W (ɓQ`R'J%BRZ/Xy^ %Ԡt`UdG,=m5Ti7*XD]H8(X;+M0=1ŪƂE-P A hqа a)Nm4%)pS5 Jj Ȥؼ_J퓡A24hoZ^bC<t5 'xHN-OGQ{y3pz^;3)Oqqn{'-nKmv5@cؗ*UAa\Ost <-B8?AkxӇ.)2gt+df'.ufs$裨c76Ml&ם̉?qc U\xؔ`݊/?Rq|d7-M_<7h;#dž은[v%GT_ޏґx' j6$8aAOۆok9G!feLNb̊q(Wvt05 M@nJԯIH{Iv +ʤi:ipΌzaY dBHM$jRo@N3%9&=Iݿ'en @wjCu8"#(&x1o=X nJqV̯9D4pǠ~Dpc/."2^2o~3*B%e!z.do;- )TlC%yh]L!آj@]?RϓorZ{"q#SCw3u 0T=D1C0'(%4KqיN5x5:͡+C5&[w ^blF6֗B;OCbU _1 "HEiۙ[򉈚 VHBkx'!c՝ǃ Sŭp%b|CNR|uҠ'J!Q_;U2t 0Ÿŋ9BwD *]ہ[YP\vdTHaG^NAtDd[>V lt%m3>~{By$x^'TV;m)98mrq>kxRW#H|.qT\s@+0Z"番&Qr* +U`[N8,Comm˘ ~ ܇(-rfU~g[>}xSbXqU7GsZp.b_Kr)cz8/SWPk{$̑LQ[-<fwjdפMoIˎ#)|Jl2/Ѕ;_H"  a˿@PM3hOေb&eA: |M b-4A 9<[kZQ֋J6,7Ǘs6$~$i{.z-Y½s-rH(C`J!?tsP+;j{@zld^oC"{8@7d2$!;Z Lg=οl~G:*G80{n6 ZX0 q0!1\9H$ Yh? Pl&vFTG.}ppk@NS?C_N f;;1dpbaS_#$V1z)0|3)\}-Ћ'Rm`DgI5i=<ζ"Ik)TȤT[U+reۼZifkC o94o:@n!!|O yY ʐ#o%b'ffB (1gf2 jR"J\9͈8wiHUC-Ɋn!?„P1I2MV䊯MW(3DԸ~&F\2x144>6b𤅄^$%rdybTV& s~aPuD.qZ䯴ޓ۬O !,x_o$I܄FFt$Vփ9fTOZ &Cy¬(5r:QRwXffl\Do.P@VΓNԫys 9ݖkzqBBMFaua Pn"S9:"WĶqnVpJK<o(\o@ N0.bFWwq${ޢ/UVOBܒ[{@gt mk%qw]/ ]5aU.9@Mj;Ujޯt-^c2XBow.MIy Eס_Ɇ0=XVDyҔib(dشw_b%f͔}ă#WH| ~LsT`T!x-2MM$΅kxmk\YdZʋi3z Ps*j5&^,?-)y8ܓ~L|-_ai6IJSqW#Tg-zwMlג4[B' l@e*~a:"eύkh97 becMx6.K 3{{t61Ο.y 6 D6jp &,"(S3ɜtPW[DwU;2sbC|tՇS=5Dv~T@(VAkn8 |ߩPԋɌJm|TTL/չnezHP$1f|@9U|/D/%EZi /(SyVu$vxƬJ m-ʱ!H*4k oev Q /"JעbLo{Ml4Ge6BT7q#Ͻ! 9^ Uxi ?O:@JkA:jX@Fn.G"p?ݵHK k}NaEO1߼v7SrɐamlYB\yx]>\@6koNg错2;W $,m>z]͍9oU+]Gai~\uRh-ft˚qIЎ @z?w /] a}hSWM4n ͋ wsՒD> )dF~Hqb'&i7[qLSt JPqb3z1[s5jZ>+ֶä')ҜTENqXbO2"yr)F5.8IAA݊j$T^ne{JRb˕;oŜ4*VЎgg 4NPaj/q/\8g,ò>̈?&DR/ǓsPK.mw A$tOe[D)5 i,, v>M1f)Ab,m尋A|I"^ޜ*Mf5p驲g܆6{Al(@X=>PTx,tѳɕ^~çDkba} z%) ? /lg ! y%hb ᧕ZcvE(@ ˡ1A_gq9oGk|~QSFew7/y9UćQB=-=XF4LجR8bsf7# =} ը#1S Pr/W8^AORu dVo-,ew(g$cm!&tTlj=So;A;"7]vFJ/8b5|;)䌵M 7҉gU$Ǭt7N cUԙз-6G 2u GIPD͙V n# * 4qV=cp^ z"DR :'K&s*+'0GùIs" T, t)is tk|XVor+NܾyuY i8G(ޔ~H/&L!~%HRyYy,)\đ:$)8͙otUyv I>78aDë@y mؼ,7.K.u@iiO⿼rDR c^gg[Jo^pmjeҞc^.޲b\(VDtRp/l`[mLv^>Uy[-dz1ⳡeb;-cR$-~wdUN|QSvV6TDUb سD WR#*Y@q\3?У'hC% Mվp@"Z߹%Y!Z;T;~ Iz+XNMLݹ.-mމciyZ 6m.+]Wÿ?sd GGrUp{:sIX8x1pI4d  3 Gᰈz3z A+Ig(%j8Ta'7Mxwl[cEy bZ׸p0)+6$a~ "b(m%ђ/k_^V_mqC+6i搱 U;_XH(2RHJ/BO"JG.^N./ mMBye+ߴÎ dQgȘ<6mԪ7odÊ5Pۭhs1E&.ⶮz@)9MO4q֛#y0H[~Y[ a&FwWPp|0Y&uo".'TZT:^яvsDcގƣJWiU,,EX|ʾa߼0AvϦlQa@Dx+ ٘ I((m vl,x!4s[OsЄo{b }٫Tt摺NE5mIȪSV=E]#^i}T"֞-0/j |7x0^_ j:LQ(zP7uqGq@N̽QRc`kNҝB˒.{WDX$Srq%Nz *̒|R#nj ֲe7pӏ<* y٧~|E䢫wXҠ·? _P =`lCb 7 Ƚ>* \9 G`R̡haYgJc_R;/;{Z/Xj:{~< _wYPZ5 }7(|jTEn2:BmbWu˔`sRU]]$lͭڙn]oADfz' tVUzqRFLsȚGH*wQyNO%܍7)kjI\$ P͎so}(ڦ6VxCn"l-$H|,sI?fȥRХ $J`u}Hvꄦ!•A h$_lߌ0r9bˍ{Ȭ6Hbd+/?k m&lmqj P V \n"HxIF jU0m"t Pxr}Xڧܡg;@ك@@kj漠~m/Olq/fr~M!Ɩ}\Xp9"/Ѳ%yT{)8:ئ[vpn2] ӴIlq=Jmo/INgӿ8 AQ¤ ^(Dw,7'=zp>zfH Q`MmY)a#^Im0ͩ rډhWdmξy}Ќ#")U:ZӶC:xCx%؞X( =*v`J;+ S3JKrwZ \*5&_M_Lrk80Tx*{ G7g^"NJn-5&A WA_j&H՗|K\QʼacMqWbRF$lН䪵E&]/잆p({<_fھ5 ]wh|=^ɛ}$h!-\FhIa=jwwygQ+k6?d224o^а`0©fsj|L 0p6:(ř$oI2@XWaYhsn9͜/ Z/ ZdE ^VkŦb2NJV 5qeGutSPؓV"+ߠ 7{ܭC|>7/ cH7qǎb =b?X)MFp74/`p_"b4nkϳ)|~Z͌;oZ_/NI Ok6zO%潨!ďG꺲vT]l}g)ΎY!##l<L!kB3fw=};wťM\f{PP75~oSj _.qi͞0xnDa# `;bA2J6xg  yE7lkT?k\ʏQVPbA܌PVŊnA5񊲎:7ycN2!nKXrupJcˠóJprVnKh/찎|+ TJdbsjh*yMn,\s6hs`Gf[2r t'PjnSklym-v.UQfN^ʄӨ/qťC; 9oBౄ Np-=UQp;ߪ$&_ges헵(r< &Č̩~\g(C;׻;5kʟ{zv8p:`PI尔-cUAᛖG~ͪzGT㫇dIQG 3L0uuu\zmGBLp6Y hD'CoƔ{*hADJ,ÀÆ1ZS6y7cB2Efƶ8ZjQl`^UE&o3t8d`=rDiSYAzO6+:v.AC/iOk Ewpw ݲO{[pf%d9=Ү0+1X v4FLN-]Ef\]/~DX ӿи)!oD~q񁸷kj.e5,ҦS$; ҵ~cq+)  q+&2սVRNng ҜϤp$9g'M_ ꏑ>RWg%F`8$AzemyV/lVI݃r[z0ЃVD i-+@VD}Ҕ`sg~?P㠥հ={: <`T(;ͫj2X 0 1:3Y+ʹ(R%g~爄~ jel9'7uw J#pV=ZB';}#kzh%/ Dd 0AR+wo^ B݁i'/ˠAqR!$4I^R K=;VH}DK*5=y&d?mh(70'² FfmիfGc>J?[5%螃'<\6g7s`9Nc~3GۆYXHo%a%eRΠSHu%LxEsPFawϬEc3Kqq:W' .|`2F$䇼!;ѰWduAd,%Pi.b0z3G`t<sAئ-O G3cu?z4]FB:pj^)Sp &U]]֢, TF` uRi{̓`67*Zu-drRa{֕}nx"k5밂nR%Dde+גne##ixHfmxʗ~I1 5@T!o&}LY{5O7FUatӯt-qYNRhL4lD~FӸԿwQ08d_SIx%DS&Zѝ>ń89p-psC=K[bNXdA:]Y0+{g8YPJ6~@`7/V ݇x2"/ 2/mPUH6NޥVI'*Uz,+a$x_8_SSxTl { wCGTv}R@FB>ѩOA6M:{M:) (ZûنJZ5W#!6[do3rPyq'Q8q!S% <Հn)[З@Y!#3ϥ޶ApXMEC%?ĄY_ b86W0tU/y!հd]˕ƙ#DW}@޺?UΈDbxsz 4^ɱ]<}d+ sYnl[QCY_# w Fr.RO+k+2ôo8T5m?Pv7uK|:{3,fR~1NTRVz| HWl~oȓ4t|QiT` G!g/AɟdF(O4[/bz5D! cF.M!h N`('98wRn`)x8SJ$b= l6HGsٛ؎}#k[\_.egXtAc،--X%oKyOԴ]Q=q3{J.`l&!]ͫU]@ & /*]?t99 G]SH/NM& _%ȓa>cSֹ零yÇ {j NjտI| )FdCNTsд4S#`@DE&xg w$SPJ@檛 wuCw2ˁb~rsS( ՐS]R6VQ8PIsВMd2ĥJVm:,K6I ˡ@]C+~cˡYg̷ĶD/OBq<:8|>@}LX\+JtzbC({Q͘B~Mc-'za bkBZZ+o1 &1T@$sf 6"dSʬΦQ< ^#x+:}{|,tiuTy~[Y_ LA>ipytFSQv`QA3usC$TPx`_4bEtHWI%zO) [|^QdO ~^6s?%4ԷT8!mG&PxŧI=7rWUwZ.P?dm7s$|[Gށ)N^#@v:Sr͛c2Y0j. C8<_G^kŌfJ)fG1IJ% V\ɽP6kS UX ^iЂs-) dFA:nm*\w cO)$RʼY ɊtE˕Tkzʃ´ D.5DŊ]À{t.]/ JQ`ٹu12Bvi|huG(U "2Ty$FôAzzdQ#/vL ,iinNCpf)9}leM\oЉ#S NVmlGqs97sPR&!5(.$7zZr=xI^T F2*zvAǴ\:{kF'JmD\6G~bI*mٵ)r6iF(;94oQ5T*˾#>.`OU[QPdRVqIc+ld8J'aa^(6\K4,,y.U7 x>VK#. fP& U"F:iS})6bbD/Y7`%Jã/㾹|S{Eh`4zQY_IpFWA9xVtNXV+c8 r  ?xRM7AsC;;iti6MסE"U9 bpLFO_VT}9F_-Y+pl[R @\' =dfžS\T5An(5fv{?ROv- Lr*}$h`e#ߘ Il7EʾߞըڳS` PU IGzŻgŐZ]H bqt8rR E>Ç96'AѤn4=<ǎXOW߽ssKBB xHAz( BR\X{ pþ*"cݑ,Z.kTmY# agH9Abrq!7,`ZT"C[ {JzZfA].,20# Ǖ4L~W_E„Ui.&vs6:| ཧֵ½rˈa9q^K?wySiGdD# Y|ZiK'g\&qG=O a!/ju| zpE^+hhO N.pt>>R^G7ֈ*@oBXxIC*hE0kJAN,\4YC&OnCz&EL`ſd.,+ ɰeC]jϬqDA~U'QO?cƂ,HDc "xh8BhZ|z6^p=$Q2=ؐkp5F~csfK#؂=ڰ'GN{% O[=t~^L:~=m4okp D2 y*'Y ZJ(?B1%e9e~BwZo+,q0Ðie|yDuҁp" Qm)!؞Ƴ^<ǐݒ@mX{x.w'i9#d'Yes[&Ĩq|s~]%GGi{8IY0!~XvO"+|r3/Rr¥cAğ >O|˭)>YbV[!j a1[_٬s( 'w<%j}mըD P˙ 9ul8 Zt.[b 9l32/JM9uYV<U0Ni\kR/ge0 X7{*EE+ռ#t4B6>\c-g lsb2* W79,L f iF-}uw~~ɖIx>!g|LEFeYkuc:*]Z@MoW4nڰ@dOXO?`i|\T "p֮8_ެ}_+<-fPiD9:7nn|r_,{V^uMXuiv"Fr|c'þᶀRX_)Bmד@)5\@usW1wC£[qLiт4wpfޤ1&qa촫(}pKE6_"hzw)\*j7r|?2Œ>$?|Bk`G1ؔh5F! niQ?,|hzNaka@˪Cs$C<6CZ`]\J EhNg8x0UǼ]azr"Tz(+UFuHbǹPf^!*ZJЕPu8fg` qfi^K+S1r͋+.@K: "t hk #Ŀ덠$X*4D O%7"Lpf0=GtqRr6M)iˆ( sOanKNSppz&gK)"1VXܡi?6- 3Q: Dzr}#a(iY?)Z:zѝmP ups9= Xϣ!4V廧G9m) vf@ousRUAEFWzxcflkmh D!˨SݡsAԶΰbK08L!^z.q}s;Ҩ_%bjM&lr:nwA dHxLՌv *_$"{'z޹Maa7ňfMT) p #W@D y{;o%Tyc˙wI uD%32`"c;KK5̺oNЎvd;iX%u%vh_r(/IϗL]W[-@tFREq)Ly̷3gm_yؚJ+8ξ[3H42ѴqloF.nmRwWNk4Uaz2>^NŘ-O(]JD{S;,6"E)UaXmmߣ/btF|gs :̿+br%%%l><ɵ]k5R\dCcl~H 4`Gv1L_9qp] (^,^.uڲEvqGoGv|oE Dt"ˬ ^ !v0nx'òАدV(!s'ċQdft\7ĨavfBT!#>3|Wޒ3S7]\*;`%M3YZ(ddqfYj/d"{Ϯft3@9Mvdg63\? ?SE=-6cgqTygE7rfֶy Z< ފ>drr^9Z 1'`;ytbLvo|~\;yܾM.LNղ#;MfGCZ[pJ`%A#h6;V슲;4V32hچZr"-kܪwˀIa3t@a2'u]^HLռ]6R?}"o !nz[ ||*^0|#ůMc$Cњ' 396i,tE)׊0 ]hTzXat~3g@YR!!yFq=SwiT=N[4RO/|n笢9~hYU N{ŧVvpE81El¼I6wR^}@Ly(^ YU$w `N-5ϗc~GW(b;\KKC@HͽN(Sۼ]!H׃VH;XZc1eW/pƋeǎ !?é+ɯ  )tnbUq"cBhtmɀ퍵^&v9pNk"%w_$`p RHE@sY[_;W(`ut9ZE`7JvH-[h$H6(d7 b9)q$kzRal㮏\1^俭GwT]k_^T6({a+ oeQfMC*vzt\J?$;%Xc Hdž9P#?sW_iݔ3Tw<Qدf. }kFęPվSpƓ=z w\#B"@yY}VnĵaѲ '4NIZRpgA,ogʌ%8?H+)R9 H +?{&QΏ@[ډk?^1V3`zW7k-OfAInA#W27Y1e@aE_0&der8q|Xsjf<ƞuNϾz=usupϦ+q; '\4s\O/Tcgd?6F?F{`R d? ſ`/0ZV.7+~ݦ!;[>ch3z3JٮZ\>439\?0L.T:%vQ1 G:]4M<{ٰl$;h9N;rrD7AD>Ax *Q{S&dTսn| )IH-YgqTִwsօR@b$wCBg'D #D}<=o \<5=7F i"y?;ٞ`j;s<.(SF/8XK'q~8nURuvGNuq"Hz1D^l)SQ-Z3]ڻ*}rTե9?\x/8vm&K 1\Մ7< =&&x >*l`La$1GX T9hO ڲ3(ܭcvη50^p֜jc ٮ%`g0btJ>s D&%1c5{HƄڼfľzT`YJv-~/uCWYP [1hAT| `Q:읗]E8trE /ZM 8gTCr/2y$H' 7pMV vs9٭Oy>|6 4F)wq3 _Z8D쥀/Y2 d>DWކG1^둈 A㕐us;b1ߢpЁ&eٱ 5Pv{^?J NXtϏG&^%W &8EI -ŋFX`g*f[TAZ`‰TA:G)hqpz<9P[$Ԋ]liR`<q oNfx;M p UIj`_"N oJ+VaKdg.\P/aEw׸`g]A;=4oG|ްU|mp\Q6z}}nd)}tR=I}\Ў#X£J+)@uqhC`ǞTђJ"UiOTN.UD@&3Ex-YN+/<t#@ m&(x/-XEDA$c|}{Q+($]gd*_{Fr虒5^sXl⨐H~:w^0+^Pr..8?ՉLrji4~2yȢC9'&:m u _CQE0 };h#v`o;kT(3z-SA]EL2,fxap_|19H3Awb0Ϥy+L$9tBZSScBQ^Z }VL\p\CSn3h}HQ(AÄwJ R2COO\|)VfI*;c$d ϙX,@oJ~-B7GxL,"0)b1P;bJЯqA`<ܲ%Yޜ`%rwR6-a*¹hT_cOr=X)$YLqbp_ld:-$BOҙ3!o.T|H"5հCkMs͆,SR%^2@i w{p#\1;XИYp)1%: tNB20/Qmq]vHX>e{8g&h[hA֠C DlF2v N73i]Pqƪ 0o~VWsrR#O1_ ۛq.!@a<éKu܄6-(X`SLu-ưZxoc(R'ʱOVme 1BGqА? Oaר.ir||cRBi8[)c| @R~._A OFUue|߿S9.fmgߖTc1]#(K6A"B"9}Ӷ_;e39zY\tonA;kdԑW_H~ע9FXuRy,βpH[so'#I[I5l|@vЦ'"|$L!Í4Q,ko݌`n0~oO7eM?%˺d6!~Z\:T;]{Կ1<8.z:h'\^Yη^5_a!cHoabvWt<w}= b%ό͗BnrjZGa*mOy  _*M WpGr@űzu=.}$ֿ]P-@ pH)K9—62V1w$˂OpإyY#髜6J'^hZ멿h/Kv4Hߺp_B!g0+b-D{#Sr[3RzH{k?$ۺ#;DRcIv=]`  r6bPQLٗF:wZBZt>Y7 =:1fKsO9F((^lW9_"{a].+ c9q]Nݳ6\(PK^VZ'0@Z39Z!=~a~:qr(((%gPH^jp<4T x: MBN=>bQ7!?׋íUU7bmH#ise{~_hUL&W?:$u%fZ0ͮH";G3-w+}E|Y޾`)ƯǽhN@&F[Uo 7 ĝMc:Es^^d]3[D1hr/ic 9u&kPڤxH`UYPS _ AXZy1棗`A *>%;S~o]^&E b? %v;R^v.drsSNy*)&RbTb C)<{[҈e)gIHy15O"ݑè@M\3^bln<F 0>SۻOM8t& eJ)͗*y_Zn}\'5L#źѝYJ~SB⚹+ F0]\ЩU?J܌1/Ϙ&u{!<82rXѡ_~RRL ߯KpPxOa`Y'zGs8^rZ<ѲvoF^Cv~?6,Gչlo, 4 $4y*xr"!`pBOP J5ŴƟl™YPD$&IHcqӫF9;@EنP a$#~c`lspK z*|-h~+n>ғm`0rzceO!Ƌ*DzlL(gTA~Q.Z_y;n:#V=]r1@kɱw4"Z¡MS֣q 邍aoїvs9g ɱ;]%%E֩uB) QtBRe/ەEpr''DF Ti ; ;s<+¡z&=ŃSK\t$"h~^:H^12a&#aXK|k~1&QEHط4j AlOW; a]KxXTB@j}l͋ڂ5Vaԣ>Г=Í?JIoP3]!N"%XT0664Uip 䉓Fm|:xඎA;)B P(uSnjDUJoDQd@OYty4)8Yؖth1rE [u Z!3?ysıftV "_-߳R?ıN.aZDŽen;{e>WE1S]Pi U$%ؾפT4ɤ^WO.(Js$?s @b mVb)s,|R\</} Rm4#b8BJ+0ﺼȇ%9)3F6 ux~Z8 ơ^J5i2Vq]AvnO\e,DDAxYxG+8bN5j-[Vb/5\Ƌ`)Ǿ}]wd@EZv3Z %Xq8zSUW!WޫR5k*C)CͰh.`jzK(UY#x]dUy>+Emr_kq'h!ěks\9JJ2ڷ^h@Ab\&[TI;LV*bZiin6<-y!(5b4ZI[0Ai6I\.5 H2|S~6RхNPJyܷ'%Džo~ [#5ӌ\`r+Jk K>Y^{Éneh2 %0vyĖ`pϪN˰~{Խuo}`ZL 4[ct9P w tB9yc$hPA| *4m뇧bLUHMN kaNu!l!,٘`:YĢHʷ-UsąZ[,[Y(KDFg7yJĐWhkiE,oSk.)oT%'o+=~o?q'q~zVb_P S;3zd)U Ie-'lHRrpa-QMQGwCow`9gџa't[25RipM'y{6pèj '}2up ,m4,$v 5ZbFZ7WW[|..p-%F|%*T8Vل[ֵ$ 0ךwdNCff/u ? FI?uƒ|nk9Hሂ7QwV;X}maY<`O@b&Uי$"s  AS,)D,o_[ k`=dD$oa ${֥*N4f ? ZHij:9$Ǖ X˓P4kzBpxNrP:1O&:8`_j(\Mlbi4X{9F[ἃI<:cEgݿ@>%'10g2,CjGDӷDq:UzeY NJbP7]KcSI M-Cb#;i2L8tef=[Bmŝhf:JPӧ (|Al9X%AºZx/{)aKahCqjs !]'ΤRRM lw,uWŞY+KN`1G*ֆ'i)rH͡#'ΩT6\3KcW>,kA6Cn$^ݗ&^6{.j3Tn\q."1"ٻ/قvd=q i.V4ns>Z?,`CA>7nixo5]6Ȟǩs(t@R3 -lxnpMy:}єKr]ʵW%)k7xmx>}Ja.Ott*xNU}M0"1 B>`CF$V{81@t04{ xQilIK$!^R/^N#e%eTne{vCy3C$L#q@_K?'Cb2pbKɷ}MqB\@kE)`V8h8|Z*QP.,reB9Nr(SNye"]z$ >1!],E/q1qƈOs~D 3ߚh  Bu(y&De LDTbޫ5v~P] Tx+ZZ dj*!/60Xf2h1\uaPh5bzok?( !H.h3Z v76\spk Ex.lG"{65{sUTWiQwoed&'iEPxcD/\7mٜS/,kD`%[, @$WD,88}=^Qȓ JMUyDG37짡Z{N38|yP_Muƞ:ivZۊa ^`WW㎠_U=ΜV%*87*h0f*Sm;btq* FͤMn)9?xWZԸѓ>".>(RQ-vup:,0XȒ|+PMH}ۯA$*n٤mT_Pb!;< [')ܙ9DoRg뇜3ͶC!߶=ts ѵpȝRx9mk Fm3.u+_`tƉv*L7P+y:qrlt^7_v"6ȹ-g))qegsg_9ѹ5{/Fg#a(1dᫀ$l>lmK_NR%nن }+ 7l3|%{[B_umEnDY@˹!,Xv &YAHRX{) re\[A kb&4P4T",2Q' d7k Lj {tN뫜hw)怞X%S) OiE LӜvצ C? /[J4գ 7|l}ʐ+ЮWazJ5 8LC.07֘Pwb e :a5!g[8pEl V-f4bp.ʊX pI|~\T$#Su,SYO^#IIVr'6GD?L㘴to>:z,׭˔\# owIN* lMp ͡RڍqH]@A[7Hlprn[j` ~WpF'&&AဓZx -a7aYfc$jR^I_@Ͱ5g-+bZWf }-Y!u18$òE>*7)BceNm4`؏Llm8dU %'ޣ2#c`uU(I.1qySUS^G=A(C)(rlP/lK4A9@X $:"n2M;tG$^~ѰVN/˅qڿ5q_-6{!SƿP ̻76NP,,I/0b.OUsu턍m’GqfdV%b[#-FJ`,;R2B>-GöOC*] U'[;ϊ(1~u4~98(yl86({j !d&҄go)/P9!zv&.a5QЄou%W4f[>1\XZz{LR'z%<xQIY:yv~=$N4^[R p ԝζ-/σL}Ԧ{?m[tㄪH9pJoAZARO7*ii ʿuzQȎ X×Ov=OCg& M{zmqwqP3L%FQ2w;$1{i ![rmuxz1r1;&NCKӭ 6@!e\rJ]KE}Z~aH IPD~u=$;c-eU7w>Ǭ iDSo\]zn&)L<˝'=$Za噟<>]6 K^*z|.Q] 2y½:>WkyWdN0x{,g0wV6 ۛ%/hEQ1RD fjˑpAHE} Е |r b1W~`3>WZ!Os2 6$, "n|~~LbF[2Ԩ n kB>yZ3dq<@LeΔ2)1w\DkMĴWk,0h9z mE-饇eaNJbvuFVԚ'dIW>J$K-B~9u;ڳL/TcRʲ 2`ޔ@V*̳2GL:HRjB 萲 j&"I7:>dr]Wěߍ?u4Gޢ"@,հɬVcc&䠭{/ؽ9=?7D†էQjvg(Q8Br;EL(пxK jG65{ԐkޗWz(_r,Ps2:?$zIN[;O-~]15c/ &l63.8^2x{6s?LձW8\Ӯa7?x0F4ԿYFZ9Chh+m{-<1ZgiNT>s!lc͹1`% ld+Sx!Yl+72Gݶz\gslE ނqs(]x7S~ig^}l*)o)a1;+Ey0NN:ykҙ._Pι u2E=z/U2&2$l=̱o$;'w~MNY֒# C{!X*HRIe}QW:p0 WE{&ۗ!o?}ۉ&oPҏO)Hp^K4S܋X{֯Npx8M#nbV !\2]NL[Z,o\V+>o5Տm|T9=xK-V,x]%4M=,cQg#d~^uYcH~3Q"AYk|u} DglثU Yoӷf.ߩH`βG;8_ 㚶iBWW8h5|F7nIJǤ52gtF &*)#fpFǠ1+NLDݗ_z +^q/E_ȆE-ǿY>J`pkZ^VK0!mF':6GZ{)h)ٷG5HiS7X__vsTiVRs8;=\j3d ^ R)T#%p`IXBtJ j %&*vM\*|+LF1n|}{ |\3g4VnćjҰCHhgCIoo"(@gJʸ">F+_rulZc 1)|v~o[u%# UMSzH+_u?0PH <ūp\*R," & tI<͙ڥtOUaoq1(\G!d'ry_ݛ_jfyuٝzveb2؉Y9x*:kT}ӧG:굼d h"7ޞKU}bTT*HjŔM8-5]t3GIKGIJ^Z܎%Tpx=#Tj+ԌsmN7<, N܀xdtbc L:.졀:;W?*j/#Eo:Dzb&P7d l-ҥ%$dOW7xK3\iE]ڷPG[pw&W:.*UĎc\DȦ|\?SFݢg K=C_\a_b.. Z P+e u_GuC[H+}SڛBTcdԔ oP-Tsk9Ys=7T>Oo|yƼ׷kQnzoq qCu_CҜuglcO">-j#2g$2r L7\4ziJk h"0'M#Χ0m]>c{Y{+-Q-6$MM~6&IʷxF&v3|`n"( bGG@僈)a[Ұ:7̋3A!h ҿ~@!t~o^qk TzE-gq']jOv,#.ax=+Swtz9%YjП:Ң [ zS{$$) Ue}$oo TI]I>v@[*ˆuP[Ňy੉d`$X4.գgq'z+G%e14c*UM/ۉ94%:_ ;S$jA3^iܱׅS^i!Gל0{DUj4-1xz|O͜joeBi99mbNw2^=>ZH[Ur ZeVӪK :$oХ1>)X~gtcM!+9ĕ]LҧeOBS@Vr냉1Cg ks jIPq6^J{풚VڊqeR?,i.#3 x^ϝd,,0H?io/=pgX!\N=RE9a}3+° l{նU@߰{P/aNL>.&N4Q+N>³og WN|:N҇ ܒrJ#ZB@ N{.msڬ2NJZL#oYh|'x"<_9U࿸}o\̰K;g%jvNK3r+ L[El䘃m<*)YD wbȚTjrzLS@JQT*00TRȍ?16*;Z06~?+[i;)__ c!^N&lduo?h/KY^?? o}P@}=/UтDc.W]U+YM{IF-38[EC &9#{S bZ>{k=~*)|Ãh[D)"m ݯ+ޗPKJE 7Gr¸hǕ zMLN86J}NBB2kEq, <}b۬wW`aj!i qңa GHm\uO^fh ߽\JkA@(eKsah#pE*r]$ V(YE~#1•gM%3aIG%t@i+IS)(V.e;ꀠE9?O;O`+!Q^\[f`t_{*Q_ swB0~@rKНͤ2lnH_I^P#b$?a±,:ۅ5@D<7Bۂƙ *Iv/Kl>~zAZ$=b|!l{W@|qrwCt#<(XTp\IIҲ{2Oe)q8r(g+3@_R{4X-[vMyɩpU.B^ G %զrYoā).BT5V=,=܏] tp&` i!LF֝e|e<0+8X gn} 4hLJ5K~lH]3XBPlR߉pMV"€r@b \$Liy}9ݸmA `AVDl9SX8JY'#d%)ߛiw9N@7 -/+*Pޥ/9g j̭S~uxޥ4Lҿi/Mߎ4{ WxAi" s`;Wmy;)piҲvܩUF=}P/RZŃg}i,VQVQ 160x7O3_q/ $s Z8]#ۦxf;xN ^C"^C`d:zkFVHl{ I?ަZc"Y!xO#7a0RO`&?V%7 0,Kr|"8#rE<GӘ|įM$9ħ?$KccWݣٗ6O^g֡,`ODT"-T Rm\sHSi7>\f%'uz3bq޺̎ ؏dR Q2i<{\GOvw#"\-Wb=*s(q[mFx^Վ9DR=K7Ff BrN[PRcjEy~N ej2a"N6}KTR!U]]iQm0Q%;9ї]I0ןkK|V^~4S9>J5]hUpcQ01k%,[i8i!1X"t_FM] Fr6$ ήg&dY:O)AQsE+X;Fvw~-CGQ,s/q[z^t~( ,{j`--vv=` R6Dv'TY*Y-LYumϬ$ X#/$ݲR1@[5V9AmpB8tj< Hd:a=<5].7;Cч.ACUKDg}LdLA „!>='$чVd}/%>{F7 ݖ)"2߽A!\^ {lG% "Q[ stȇr1i B[Eȁ9y@&Mӿ'\sU 7 ~Z] NI)h-B+y5mqKYP8EfUZAݶ ixmɃ',Gx,VXg!]gJ뻃0_)1.p^%jYBs  WkdS RGYh >n_UsF. |n0σϟ<2rW}Ul?'CvtM*"@rmT'#twF¿SifmO{Œ;-OF'gb]t?aXW$jӿ)ts~>N_QGg3_cHk *^I "W_U:"FLx'}Aa~u6p~xXSIwˇ1ԣ>`j|p,EYHWK[˅Cax#f*RqQ8:!oc~3N͡JWvwF8 SI#zP Ir:p Rꚻ7<!ݘ9^r2<­~ш$k >:L}<BTX2uln akgq̊lSOZm,ՒD\IIL pͱZc\F(޶[]\H#jU۰˱ B.MXjޑ-ḛpKV?'¸@GO9vد^S悩ğtbN}s:%]9,|rxOyֿ:w{3kRG|ig|%S~oɓOTcrYU05+fߟf_l|)F(i_.˩1q&=eFhsK~ZR/@DV[-{^Bx=qSO8ۦ}Si:tHoHg]Dn;b<P &FtY+-`(h)e;T=#^h5CsBKޥw;o,߆EVhm&s=.'EI#=XPJĦ\޸@A"ޔ@ǕCZTxpZ }o-s#2)JT4N+ _$@65E4?z]@׸>MZ(?жG5 c`mKrQXHju\SGV΁l ` dM&v&Az.lߖů|SvY=P`p63xfPǻDd7L*?P&&lC0W;+τ>XIFA!r_px Q[A{տ`iÈiP΢_᭦Pawb݅?+Qיִ 8|.x"VO%*koQ+p}s6,^l>CHCz"GO;/ Z .u6S#21הY9ҖLI &d{տp(1F 4 78%v;HCÿQ{F!$};]uCajghr89Ni8<^Kֿ#*։t_̓E0bzf*5*ʏk?}}v}#VQ)QAE1~p_~Bœ:= h ]] {/<0V'{r 3[֕Scz!7 =ax(Ǯ? 5$&y2 w,KᙟkpN`6 [5F[_I-auMZ7&< 5B_5?۱:3n@WF C;XF?.GˆB3w#H.CMsi Q =#

sb $Gkie&"靖#+tqGw;'ff`5$*3N9ˆ9=wW._fNtqyF11Eӳ{n7V l\A=NTª/0FN֩ct݌S43Ot%~zzԀ<=TImGgdv`߿WڭXLKVC Xv 1B=  5"~}ǬT`f^=({ӷ_ks`/7.{o ƴGz*ՠt|%.[L0=w$cHO"?a$z_ZXNTUX9#n˃Իc_>9̍b0dj9Rm 9r m# xLsO XݧkSZci qܤV9ٿ?n{0=Dhzy\K ץfO@J}b_*R4", Bm* Z謎KRA]t$.vv>T=|Dkwh0m$VX}NNW jl>e4o5UpP([?Rr](OHosPI72-M,RUmgh[: UO,vUcD0I=U)u,kA-RI([/ᡸCCΠZN53~RFÀ]_Y<|*l"7; D1bOpeŸI)~e)²CSL#6=2dEJ:,᣾V{ /`.wbbbbQvե'U602SkRbӗX+3ɔrއƚI[>b0qbX^*\5ZC`/ןxc-G?ML|Eo{S YAHMށ"8/e5ejBy=S 6u'+qQ'X8yBoEٗLܜ6t1j,cqDja {E@ M1μ5gQ_c?W 6@7žp]܃F[s V( +:Jڸtuqo qlCHND+\v'ʍ)Bfuu d,v4 cwQ`_pTkZ1#N`A_c!VboQ I::lUኈklz?s^Lv6AJ]%w*ΓV7Ym)_|)"}9~]˂T:LSmc,'!Ejy#3}ðȱ R#O+BΓ7MSyۏ)W#R=֔N-Ze|A#2HMd|^{kin(p'YH< U:TjF6EmE-"aq"ϥcsAaW*U(]Hwl10||!UE2%kf&lż^&ZtݙWUtCp*-̿^dOJ^BawhVWsp0ٲu'Hw*gJ"u$PNq:Ąosv+S%PAxmPʌÍS^_`}JL mc{5oZw=92S|'"+N ZܺOcKɰs˓\M>18"@kbܴ 2uW"=4d^m7o=&9 !%MRڊRD\_BO/`ɬ2U"(U9zB}rg[>,f)0Bn>ZUoV,>YlEZF`MOGҚ *[Dֽt 3*$3p<(<#+<'S'KCoa@IO]y08EHžKS)hc{.ؗl4J:t/g0U:Kd7El-ó*np|踩4V-1%~Kyg9g8Ҹ:Zst$-~-a2KE{-ra_IxnK,3Pf}j̜gk&47\XLjC5v^$!ܖbAnnVv_ VZafd?Y-|8ذSI X!uؓ@!&v#򛔣]pȍڹa<-֘7d5kU2;Ub^6Sv/brzN46D l/$^ ?k4R$_.>: M],-,:a7Dy}mj9Ym*0ԀA3*mӱ~7ۍ sF2TaHP2w.DN+dvL^R<).DW2gɂ)k(M4œw&>Vg$%F&p _:zኀx$)\NmsWe}> 0Df1zJnIxT8%/Ʋf 6{!>g"ڽzW~> Slfn-Ȃ6[w]n1JLVe\ [a8l?j9eHS2݇"^LcM;6 c嘗jsw><Z,4Gbgഐ`6U$2~5 *zyEmPq]3@OhjPfMK)rEbqOzSL=vUZ7%9Q -wa&"-O.:)"45qNm#P qg69w-_Vf#d*]BFJy{A-WJ\O`sBQC+8@ X=5 &:hr~m+B'E%d24zJGlMU G.KƏn4b.`T[ie5qprP[0]|uuCoVR)4j!-Jb@!̏E Ӈ\SӁ6) 9--<!䀭>89)RJ#iT?a%2_&ߙ| {:|`U0~JknWbOa1 WZ: s/55 !-ZIo/QS aΕ* {@^"54Z.apor(1Z#O;ϨR ݥBhG ); Ox.ءmzPno uy(Io>6\=]aPX#$ l3P'`q5hq+%TY&d F vo.cS0\+'=6Ydopt&2R|HLTWs@gY&Y}j}7C HnzQQ5,hŽ`lcmOFP5YZ߲M066T6/>> H?okuw\y%s ?ðύ'8-+oɳ%=xD`>ZOgJw~=>Ȃ[+rB2kCwȤك(1=<'87Bڧ^KCSm}=&e% d\"sS Ҍwlci4׉,xߴ=HVh%/!M{1IhHF]xq) #-DGgT72nY aj'9q QDn(VkwP7sX'|0yUˎ@^Z|ɓ7%P ݋dЈ}&:,ξ--b^sX5>zP"2R}ևjXODzEn/gpąfDHlNܹà4 IgKL_fD _9~4Eeuz5p4Nx$=56\iCvBy[,g0Q5!·6ABF2eEfA%Gmxk:i7Y5=sE@@;v#DpFpH ^~%9L)fĵqrB"hE Ko8cE_JQǬ,,e) ~Us%a!c.{:HtMڥC(BK6Rl ](Z2fB)Z6<;}g X t!Y;4k[-[V WϕK}6XB]ۅ˥27MB9 [ >b1(q]OҦR|_6fmá8<n^ pM/};+_MqBRpb[akTߴ6JK(AO\43#UzKU\ zϜp+ .! xESdpb=]F2Aq)'E)p;-Qye.%| OVBu_ȎE.z|F;t86dtI 0G2-mcwUꕕ</7ļۀjFŀ4Add{ըN<킋">R͘:uoS: ?>{<;ˑ;FA Vl\ }!DX_ivM/Wj廳R %z [:w]hdA-{ڄE}oX?} 2gy@4B׌$ͫ@o0;4O;EmUBdx۳øV%1ɷW\ zGΈa2~O6MtK^x֕~]1tJavgNFڛ:=Yn-&ݲ,P;ȣLs!V/(%_n MaΟop:jbzĺ77hD7ߛkkm+)> $L|5]fK@rhvϐ,a :J'RW̦jG޾~_uX ߅٭;MG(4c0=.ߣՀ`aDwLlhX,S4ҕR3"(ۣCLQx_T+jFt<8Y'=Ďr)Htz3<"t u9[/okVU'LC J_0@_`L hqD=';&ĥ%$X30%c4;H>tyiQaUtQ3xoHUł.-wͮE}?ƚd<[ vfsX N v6cYCE 埩5][?uB6EѱusIwm*ȦBA,uYHnv'i8Þ*.cli)"hͲ6kv?RX6DRr.gJoLg_U_0WBOCTĔ_g%Pᖼ2)><,Һ`{-B6)bX%M}x}I$A wֽTndVl0^Ae~,Rt#S5;}ʚ̠y>'AɺjeZJr4fvUL4GT}Bª%(ckgiS,@üC\ S Uð&l%*a1/!^NOgIm mnL2EET)L%*{Ϝwb~8,oNrUn댖j 2ǒ~(Żhɐ2 /;\~nFyû}skNxgi^h c8/!Juŗo4s ]\-1n7&,'{Dʭqlp9@5Tݘ@i}lmmzSzORMO}.zH52<^s-gT@w)+MߨFЇԲ?qČf.jtTmFFڜ Svu!KC+iErϸd8-H'CLQ^-4B2#dmGIg{_Ik&#Dfw7\ϥFrgi#دUtSv^#oTOu!j D+[ 6sz[A)|H?l[{*xi#]ؤ݋CT $J/:3N׷Er_',mAibnc/ ؘGa%M[u0Zxo֦vmh H> $L?^Uy5*gU}7qFU 2^hڅYIj-LS=j)Ah.9,'>'d4\}%į+haMB]OHGpJ8|o!r J\ f0 mk, l[@)QpCO[ =#m^s p V*]|ԘEB Xj{짛`N?ͨ1Bk_С6tũX}zI>w:"]䪢S_>{^!MÊR࠾ =(g1]Sퟣ7q"ѡ:PX'"8ϣ(3hqMΡ(67{|eQ)栵g`8DYӤi0AeȈtm:X1OfZsn{gYndmhkh7jͿTa%d{tvSN5x&A&儾#UL _3T֨.ڪ%Nނ64ԯF[QLM)B6'-шUC;.ЇqC&FK w6'|aepJF?N>afλ{n4m2~G!{;alWMFbU`1Dݏg ÔD:p(m|iL2S%2| !5XYn1gBIp9 Nf%hMRuT_ X~T }NA_v8+FޢvV?͏-#R: ]f~'9oDQävU)J Oz7DTWҴkrQ^2mɾ"dhhTp?s:dD6ܰ~P/a4ijZa^Kltk =y}}zu$GK ?<~%emkV ѬޱCTd]]_>oPF>Z c^@*YX'uyWY6V\E߽jلPSav0qis[I).>k+6^ R Dj!`[rJc4)kT;%AfխjhP-ZUlVq>yރ~<<ߙg+qTk\r=rOߴ|e`m+}[(n6wԖ>PҾOu{=VUL_Ѭf'עWQjMyג<8^Q>cM jBTnJyϥaCǚsYwe¥Y䆎"0Q8Z-3<]p5an2nV%z]tF(&mBloFx,61y7C!q֎ٷaQ>?c&bNKmmeȰbtl &jDo 8y;._Uy3gqNƯ;H`f[Z.ƽh[K 67ƅr(|J=Q>a~"ўa/~ki gԀ{}ĝtT23`a~WoFU>>xŖt?ԝ$mk8@ HX -2@űIppFG\1 L`1+_Yۑ>*bK?]|hGn d',j⺎d5겖Pds>-'Tۉ?&Z#s{p "9wy^34]NZ:SÑ0e էBVpfηbTڜ pV0\ $2$AJ :/,@Cs |38Z Uź_N#RvYX?m"],Xʆ-l"ϷˢX᭷Nt˯ /hޭNP./,V1Z99P T`C lhfTAfnaD_LD ,4:irQH= Hsl7,IW1z6^!fZp\0S߂ ]Es6G=,y&}rJO+<.s^X\NS*^kl؟' 1o6iB<=D-QMxO~V?/LMQ:bm**<42-VX:Rkۯ1WQ6ԕ7EL9yw;ٯ*s&ẕ &)\}-E uV^CC[kK g1ZfȮBԨYzݎEX-[upN$1tLH"C26R:A1`,@Rv} *asem`wE ER3ژkh#稁 d䎤 YePRE}Hb#GU&A)Z:J3gyA 8qlzE!<1F}(%p6Le(bb[7qFvEnLڄ).Ϻ})Vk!AI ]5 ^hI'wZs0 0q:p ߜTnȡ3:{Ms=Sy?'B3{YuwkPldfzVKh6-_K8e FU 1Ņk/$[U.ٺfO  Y_hw#(ZHIX$}7F&5oPQik맸]:zMM6F~KOU82#"b !D{u2ZcS}#1S'$(#p(wn\f e.&QSqfv l|QrO&l;0-#<~gd%`癃Mi?+'43ZgQws#jK(@~87`y 5-J4AOTALeI1 %De 곒 TM`\}xVJ(4; xJԘ~PS,uiTA(4JkQg #6dGy S7#?j! MN|}S09Upzq'6cb'lF,O"\)z"JڥZ##5'2]8 CxɂSt`N0)~/Jݗ<9:j#v:1кQ[42DPÜ*P=%67kL M1"a Pz8òdSX<([7INj6r`%WHYDeб:jup[Kwm\O|[&ٸPung 3u?II#I\lۨjAo5j"bjзˮN0G0M*`& dY gY0 HL}4@n'KFOyn8B*# TYF;TjkP[WI פf)xFHU,yrY"-YBl >f=KȷSqwI&EAJ4dȺ!1 o,P# v(.J|Ts?YpBW£2c8 :.-+[Q8QPri!Jf_]FI7o?3ٽ%/yجTU96B1SzfX!H+<@bXWuo@ʀ08r*9{;|Chc!P zx9NrCA!_I`]9g.`7o\ ;/n0 19w:SO,'Xbw7 KHHF{hGl<첸W l}}A H @?z"sv1LVܓ[ iW|\TZbD/{xm+2T)5őt0'ғ dU12.CcGWP s}֒0tl]yX4BBF=ez[H5>axRLybGU nLRUDG` x1R|GNBIMbqD ^$Tź>++f qYt@@CߜV ߎPrw_I㐍XwF5r2O^)}P`xG#M (0Ʉ+yD5 o~!ub+["{QSau؞=RYfS2n )8>F(8OYĠm/o0Uc EG9PD\bT>[mcf$.B]-E ?wtc Og,&cG DV /V}uCod|O_.?B=Ș8PB:"Y$==wkZ4qؽ;Fyh3/%{;U\[nƭyd:R#" !y4̓KVG6GV#yOD$Ŝ0o;(hAiS,}LJFҥfe0'UV?$ZnLT1܃ƚFVsYi_)I[l`*UWbZzl\y< qUǃ>_FMmY{ʁRNuIhnH1S þP RffmTKxP&J[{ch a+j Ph4F'@SҏT6)~ݬF +Tԭijʭij^a)ShvϦl[k{ZwB".ZEj6'r7-8<4d㫷hxaވ/Y,{•W›8ۤ梀+ܷLՋP6[WN/'XݮO{LqHqEVD,E^ˊ~7"T1 @Q]V~9|0@Qc]d&$R!QH"ʲtO5yC<ǔO 4T٢7a ?48?df% `3L ]ʹ0cW7Fl I퟿.ا%h/afQ )F#~Hs?2&kU^}C>xyiҕbW(ť e)4i (OhiN i/ֵu_4DlNӸ~sYYCj 'dX`>O_F J`[Y|O'Xy̲~CCcuaDznn[ xE#a/]O}i ]0g )+޾?QBfGQ|fĹW__)>|TDjQ]έnh_hߧ8nK[LjsH^[Ϙ8ݶQ&4]X'‡..,EOkIRSv! Z o}_\4CzF%: Ǵ3@-z=p!gبfXȒ2H , @TcnqiAD91v}ܥS KIJQH dFQ|Fs> '+ 8{% bJ iK9Ճ2( ?'&Sy1MXCU_9br$:RjOL%%sE" ~"M ܨ@a޾jP4P sD )EuuDyv`rm?k/ hd58G饋e4_J2<~~_?% ^cC*C ^&iy'!*kZم &=Ix1fե/X`4h H d 4qCOP_XM+ ZtJdrcffA;Re7 $JwvPY?eIQۤ]:.zElߦ!)KL^ 5e|q*ےBHêRR$?' s,E:]"t͢JTLy֠ >ڏvw)gDP] E-LJ7ּp|T!]TΡ WVLoJZIN27=6nH%qSegMgôy@eQcKg;E!5~WN`Ӛ$I=o$!Ёx8vF8kMUoƹU!{QߐQe _|*l9B9LqExPl֋+r=5*/ ce:%~ΟXTA(ʌTk@qEz"_ %z(|E}\LGK8tjZ|Ή)Cw`Ct>C}+J_>ܯg*۵cD"@N/cMv%˧.lAVm+^6 {#Ec28/tӮXf£G5^xGִ=F\3ng (h6H\!Hf56x>k*B8Mq\@*׻)B&V3)'O\AY>*wrd&}LOPYMŮ+tua܄;0{ @Ry+؎ZkMHm p݇69C5Hyͷq$vݔ퀟UCMɈj3Ng]F>LPiNn:nv-Kiub>;VrvnIӔgwD*$o,\Z9t)g&fRnzTk~ h G_3nr(>/ՉYxxY1f26~f]o9ȹ}FVg<-ē؟ގ%.(]4js#ju$C_~K8vFp4< 8']爒aΖZ](Tq\!ᏑiLN$ l_O9#6mo]1b]UF~8wv~K $Hy(nzum5qLlf=_0/}#7 o9!0PV98wDZjv\u34rz&s@c9{ԗ޿(}лpӡ O滋uFD0Dh2rfDFr%Cu/v fmI7N3zslmr@p"QJ^T_3!M!shhEW-iNZɵEַ#_Gjg".u#$CQcX{Q%9_۱@Kjʻ&cP,Wm%XnZf? F"\ ^4{Pl/п@&LY@[4#ݮ,[%ttQRd{FwN# TNnP# n NL/h_} "ZGq*> YKi K9{d*tDm/?O[s 18(|6ifu(%:^KG ߥUk%QCG iBKx_eHq!榹p'&QWK-Js-;kGh&y ?;v]u<~3CmWdY GVts0zD|у`B;MFv+9VlΞ2*s2Fb8rv,EμI'rg\)gyLazu,&U`0|78> NMP^Ð.FJT1MP!=yʔ* Ǘju '̐,oy~J:kh1W`(+ W@VL%CD+SB%:֖r:zCy C 7lXsbk J2a| eҨ ,Y)&zr $LwqNhUUdW1nkhLe"h恴"aY G~QoBλOymi~蟭/@y!H͗aޢDlwS$֗l3e\hv >Dݙ*y[tfp'ERnfp gZ6@d݃@8?Tk.m PVk_]nQ_|!7tb&!EϳQI Ƙ@D@ȣ!-X0m]GD3YaUьXQ~5Ϡg@{y6 o:A֩^3%Z#+t8SQ< >;T:YŠbؾWh dJo? +#}itܖo 﫨pQI3NLpBE &?uq#^1jl`!"X.mbg mVp40s_9=S%Zv`Y6ׄk7_i{2U:\LM͗ZAk86}_f7-yl8/!3 ǩ#תsfy26jYB2`sEŸſwD,ё7n7kdG`/ (HAF63Shт>mvNލ74 Sz5"=˱]9PF o5.а!Pm!iZ"sp!]wa.410R۱<́/`s뜨Ò3nߺ@z`^v9DTI1X)-&D* H¶M[;]/sNvٌ.| R d$?$,Ij()ď_ĢmCt/#]/ ^# +h +O<`Ǐ"{aRKT} 1,7DR:U{)9Yꎩ+?U3h} Xp|kZ?_16=r|E5Lӭ=??~tuuP9۞=l%q*s&`[{D.K,j6KF:2sZ%&t/eblپ u΢[0+nŮ љ*i_Y ksvZ/0d׶J!򐷘O=kGě9+Mdii,qm8gOƇ;Q- 5h59/Aƃ-^iGƩGsӨtƇd z?^=zS[GN À\oJkaP9=yfpum''f0!]J/22_Ns] gwGY,϶4x ?E8-3>ȭ1l9pHʿZ*~G::+׹XGjwRdeFX} }M|}yut ^ҟ&e$|!fc JZaRD̪`Q_ەKwx^>[/7iJD_m2SVaf=Z4vA:*woWm>h}'K1O[wT.VhO>u}R>CV a\jp#xZw?_m4hـiZ_%Wٺ'GOCbvY%st;P~;NyU] CA[T8WֆC]44p3KrG /qoYVøDYI"&:y&pK'_;QIܻ7c;D:ht- @Y\W SVB*_W2*U fbvw}h򬈨f]/쁤! 豅ԒLEN.e梍,~veUI788?F{Vܚ\c+qU>!=%*fpB| I 7R\06!Pj] Q)J-PRV(k:y VF]5Bf*4XA\I[@F,?kC7HR3`[ };A3G{*umwL OYd"c/f4\,#T-}nC*Rke0tԡpl1hp 5 \I}UQoEr=] y>~IГ=5WrSad}OtWۂ$4]~t|aԘVDOwCYZHKD8x\㶫|?z ٻxYCpJtٙozB9Dhm=z%V*xDf#[;$+Ln[O俀@wL[m8dyQ o(핗y07l3PCOv&yt庇%Pů>_An`> kbLTM*޸p*dh">:ίCʜzXܐ6 _6QKb:^2x\x1Z 9̎,{郞Ri&x3-Wv@5ewN.XGp;XUQdWs.o/C%.mg´u?4Y&R8&쫘 DbKl1kVS<f~ySDe%>O@>Wn$7"nw"Nf)~XBcH`5#*+xeD5)[ǸVW?vEnk:iڴq6 J]fқIwI1kd'Tp˟_CfJޡǬu=P3e6~A̴`+}m̅fu]joVC?nP9.lSykPd 9%^z,1^3@;}3 o採VkNRmsT}lֱ|79!?t@e'/_Zl']^.dA1ģR;(1噼ZV_I[y֧&q7e;40X΃\Gkc5EnVte&mt Yx^ꢈCgtfAw6G7yG snOh(dE^iPԫv}GVOnd!%W7hbBqY""4j4VZaԂ=šoM#$ k!Zc0bo{ޅȋ#r }*[ڧD$O @evPƕ<軷*uBG-xD@ XB7h҂roLZ ޡ(GB£?ui d@ih8Ъn͐a;D3j I8(_ gd-CqIu08,7aəP'I7AXti}䰛ݲQda6):m"n"$]OfkOE)}Wp68 |2b` .ԮvA=֩4 #n"ܬ=Fm@r] |o1ߐT"w(T =2\1~p31O:Ԇ9$^)́-97nBS;E?pLwy^;:'a3ϐVO63HVڢY#%qުxz7öT!,/w{D*2c!R6xr'Wkn@򔎑uUBcP>qC>Xu)?׈a~“#.x3 cAU@P Gv$a:j|iv'2)r>< Hkr4W+xĨW aqki62yhlyP/^Zڽy$'f}bW_Hm;!H2Kމmb)<(HG =l9Ĝ@yF5DC u k~{3_F+<ZA \Hk~G^ok׃zw$Ðӧ>qg%c@_|Qdˀ1Qe^q[ Wϡ^ l^@LTkhןp =tU+<ji{e9"Wo6b0޲ف8PkX>;V݄kyϨϡmS+[:-W\L1N$׺~ i"{#R ,}?(>k D/ S۷Хex>OX;>;d g#y0NkQœ.D/s fzdxTlnμHf;@+3-BK$kN.2V%d`UL~c!cd1CrW"!&U_>Q*wyPT).IOQB,s>n=ɢwA(;< e ,+Yr{&[#¸Rt"O?qv* TO|j//+ >W=zt͉‡÷?2jqíd;L""3+pRP#\t"gV1,/5QUۡ=XD1 %t *jtm`!jfa| A،^DuEa1E{\ zUk#c̸uֳJĒHlyB,hvsڒWMyTV oo(ؕ۹‚SSj@ 䎴Cx?"t>JMڞ -OOq1)e\@642lGIAʟi!n"ۋ1~ĝDP:O'Gf^ε J7 z:B! !YST ^QG=͡6_&JA5<囙:⼂33)(PtM)~G>܄Z7%5xv$d5ě+_0wxsH%bM}9!Hxl?3* .\ :X)T]h4#6W>O2i~P R >y)}{ ZPGkn&K_D Ba?+e3&\.'46TK ;9ɏݸeiQD'Bt4qo^bS.|`dmI;BK[A^8XMRڤ84b~KA bfcD_ۘr<)12Igرە BƜ82Tb>u nWi0%²H2iA,{`  cTAq@ Sltl>^s/NJfR5՟n!sMD:*F\찘%J_3pF,n}tk2|'.$Df"FLZ