openssl-1_1-1.1.1l-150500.17.31.1 < > , x fip9|I M"l_r:& dǔH u^
c
T&dc4d-
l*._>ʈ xGQ7ùo
a pqfYW_L]JG :9pAMub,mңe/X"i(kH`.xXu0T`R&{2Dlr*a{ XwYO!.r6(J
YϨ[k/G B^ > D = ? = d $ P \ ` p t w w w
w w _ w
| w X w w !( w # #L # % % % % ( % 8 % 9 ( : 4 B #^ F #z G # w H %p w I 'L w X ' Y ' Z ( [ ($ \ (( w ] * w ^ 1 b 2 c 3+ d 3 e 3 f 3 l 3 u 3 w v 5
w 8 w x :| w y OpenSSL https://www.suse.com/ Productivity/Networking/Security https://www.openssl.org/ linux ppc64le ,P x
| / V + %b '# d o
Z
Z 7
Y i
0
g 8 ' . * \ b J
.
K ! o 'C - A큤AA큤AA큤AA fi fififi fi fifififi5fi5fififia$gfififi6fififififififififififififififififififififi6fi6fi7fi6fi7fi7fi7fi6fi7fi7fi7fi7fi7fi6fi7fi7fi7fi7fi7fi7fi7fi6fi7fi6fi7fi7fi7fi7fi6fi6fi6fi7fi7fi7fi7fi7fi7fi7fi6fi7fi7fi7fi7fi7fi7fi7fi7fi7fi7fififififififififififififififififififififififififififififi fifififi f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b b653f0b4f9517fcde7b6674837c0dc6fb45a0afa41f9d012c8af7c233b132d73 b46c1f4ca762af97b2442ac0223ec3c5b00c41e1c0e73c746bf50f8d93ecf2a6 3a6e075cc1890410b079c3cac8ce1c45ce5ffbb4d6e2b61f531f86c5690feb43 0cf78d44ad12b1ecc91b9c9e5069cac341bc8967bf44912f25a050cfa484a504 dc18b5cce6ac566c68680921332613b0b877add5246801d5fc0d664835ca4715 6de7780618d15b87af6a5c891285269049d9c11ea358963974f47d998e74614c 8c16abcefd83fe640e4232e8edfd3ec72cbfcc97cc1ebc01e8d5f5542bac5e38 04a33e4b8964ffcf7f4e6a428b2f7a0da0a154e3d36c4241f031ea9aec07e116 41436fe0a8a6ac5e9a32afe237b2f39d1fdb76edfb473f933a5add3f5bf27b24 ba9d1252f188d8213778bc20fd8eaf4b582a7c55af2bb3de08e2f25287c0e439 ac540df2acdb98eb1e264ee0d1e871f1e6991bd387a12bcd3837d8a81d6a94c7 f0fece6ddea98d04ccef746273cc78490f88d1ac89b877d21f5f783f0c8cb150 3b34baf93e8cad12feeebbdecba932b7284a5bf73abc6be8ca6aa0affbae2ad7 76e6b542adf23cb238b14771f159ce8b2205e4384ccc568cf1a041291a874941 33f0c34b957765961806041c7a5f9330f932e662619fb12094414516567f478e 27fb5fe88a75edc8a41f2f5dc127a4b176353aa5ef9b9247842fc3ab8e07a211 dfa181e92a0c7bfd5ea234a6f1c0d1e85c69dd646a75cd9c3d55cb6155ff0794 2a9e71c83a7d2da1b885c358bc9dab8fbca190d81620bc33f598502edc0ee858 9985b3e1b4fb6f28fd46910c3a855ab9f3f8d8cc89bc6f297aa2891b0464773f 9411a2f6f2c32e3b3c47126ad664f7c6236abb01a12da7e2eee9f5f93e7f002f 57fb48892597d6488e239c38ccb50b9049959645be4f2720722e0594cdbf503e 4928c45aaf39b572889c29edfab12028e8ef56dd9f3c76c41283245e3cfa805d 9adcf789629f286f7462a74f0811d96876ed41e7042c2426c6f393cab545ba15 51862182746394b3973b1ed8393e5db949770c8ee1f138c5ea5672f705b74e7d 76e71d9d697126c12d0200308c507abc34e3c79dfb6680905265e3ed99387a06 f0a732efbca4d5db39f70477982559cec682cbe9b3757316725848f85be39ff1 68168889d6661989e8181d5b29dd0b0e211f2b6476b6c406f6db45c76c7002e0 c088a99f45598e9f1d794ee303c5e18efe81e73b92d149382623f6d3e48e4b6c 60181edf429948beefcebe6225d4e3154a17526e8a74d1b260861ef54f94a904 ec9f9962fb6d4f2a0b9e83eb2f4c6efe92fcc1e798c6145dc372827747112ec2 37631cd84fe305f96c3e82a99a7294916edb3d58ad6faa6657cc174498ae2b5c 7f1310695f00a9cdc11b8c7069c082495db5d6695753d93be6504d6a80c5a75f 137790538c5ec0ed3a24320923d08c291e8530f841f39f3363622484acab99a2 4e71a97aec2594ce1439b8bf2dbaf596837141aa9d4195dffb606569f6426bec 741347b5efad1596fa6a5c488b09e3cc1cfe0c331c0891ea83f12440cef309b4 c72bfc69250498776479d6f329496088c879ef7362d12ffc406f76e4d1cfbd74 96966078efd722a3bd7c64d22c1c9d19e6f93288fae144f2e4ad33e963ba7528 80d7259650e2a4aba0cf82930c7159fbffde1fdedd7dc29dc9216423607b292c ae737197d58e7c441d22eedf5a7a493e53573ea5a9acb03dd3a99bad2f812510 9da6f3c66b141d9539dfef5768d380ee798d7d6a0767b481707819ed7e922780 0423e6dc27b12a58fcf637cb252abafd198b71b44eaad866e2510b5b1b409d97 60e31abf319c8f6ec902d3f2043248fd5edb6a120a8fa077fa744727e97f16b5 1666b5bee0a8974654c5a906f6f6c0a43d206db3db3b597e8b4f5edf81bfb06f 95495dcd50ce75d0282805f3f4bf9e23c42205eca081103acd7c1335c8490e50 e0085fb41f1591cac879107ac0d979e0286437f2b4a3b3863afb77f07e79d06b 48319a65332c1e73afc1b46a916ac6b5ca4d92632fb9bd1fc417785394136bb7 cd1ed645bd19af92b48ef7abbb6d94e86c2acd1ec4342e23e8643ed11704e60d 28fa579e5a527637f7863929c5e4670c7f0997f74f73caa9be751c1edbf08c7b 86033a9a7e26f7b528abd42b27e21b62d7174b4fcc8a6d778cc759ab4a5cceca 0c00e9b4d0d37494b1028ab31deebd920e950dcc2de01d7e11cc7a98b4d320bc 1cab8adfd49a9d305d07f3e58002a2d23e7395b002fb8fb11dfd0a17e85a2e46 cba69199aed117a19cd5299c9bd527f6692cc2e926755b2e9d9d1fef61405a8a 856dc8476b4e6a1d59d1422368e282e883b8ae717322839b77d4ec58ea099186 ced912c1c206cd6b18b3528fa03c2cab1d7a45ae355f154d6788e4e3757e797e 28e72237f6ca3ff1f6fba4632bf40cfc39c14816e5162ed4800029ec0da14454 a73b7a4d91cf0c2faab21b6cfcb0c0a4d9c93ee5c82be71a6710cd2d58aa625e eae31702954ec81f2c1714dff5bb86fc09bbad6688ad9e9574a5a04298be1eb4 61ab95f7e96f2b0f2acdcafb8afde2f6c43e899416397230c2fae9c1e701e45b 23e35449d18e085d82ed576d754c2dee7cf0580b7f73ed70fbb944278e4c3fa6 rehash.1ssl.gz asn1parse.1ssl.gz rehash.1ssl.gz ca.1ssl.gz ciphers.1ssl.gz cms.1ssl.gz crl.1ssl.gz crl2pkcs7.1ssl.gz dgst.1ssl.gz dhparam.1ssl.gz dsa.1ssl.gz dsaparam.1ssl.gz ec.1ssl.gz ecparam.1ssl.gz enc.1ssl.gz engine.1ssl.gz errstr.1ssl.gz gendsa.1ssl.gz genpkey.1ssl.gz genrsa.1ssl.gz list.1ssl.gz nseq.1ssl.gz ocsp.1ssl.gz passwd.1ssl.gz pkcs12.1ssl.gz pkcs7.1ssl.gz pkcs8.1ssl.gz pkey.1ssl.gz pkeyparam.1ssl.gz pkeyutl.1ssl.gz prime.1ssl.gz rand.1ssl.gz rehash.1ssl.gz req.1ssl.gz rsa.1ssl.gz rsautl.1ssl.gz s_client.1ssl.gz s_server.1ssl.gz s_time.1ssl.gz sess_id.1ssl.gz smime.1ssl.gz speed.1ssl.gz spkac.1ssl.gz srp.1ssl.gz storeutl.1ssl.gz ts.1ssl.gz tsget.1ssl.gz verify.1ssl.gz version.1ssl.gz x509.1ssl.gz tsget.pl root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openssl-1_1-1.1.1l-150500.17.31.1.src.rpm config(openssl-1_1) openssl(cli) openssl-1_1 openssl-1_1(ppc-64) ssl @ @ @ @ @ @ @ @ @ @ @
/usr/bin/env config(openssl-1_1) crypto-policies libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1)(64bit) libjitterentropy3 libopenssl1_1 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) libssl.so.1.1(OPENSSL_1_1_1)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.1.1l-150500.17.31.1 3.4.0 1.1.1l-150500.17.31.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 ssl 4.14.3 faf8@eeRe Sddgd!ddw6dkY@d*d d'@ccccccc{h@ctctc[@c=qc$e@c*c@c@cc
b?b?bblb@bbobaG@b4t@b0b0b)@b!@b
b
bOa@aaar@ar@aa@a*@a)@apa=a+va @`m`Y@`?z@`>(_j_~@_Wr@_G@^^t@^_@^V]^O@^E:@^C^0"@^)^(9@^&^&]]]]n]x]v>]g@\@\\ac\G\G\A\@[0[
@[u[u[r@[b@[Xf@[Xf@[2*Z4@Z4@ZZ2@ZH@ZZv@Ze@ZTZ OZ OYYKY@YV@Y@Ym@Ym@YOY,
@Y Y Y i@Y @Y @Y @Y @YtY Y X@XXXXXh@Xh@Xh@Xh@Xh@Xh@XXXXX @X6@WSWSW_@W@WW(WWVVՄ@VVa@Ub@U'U@U>UzUyx@Ua@U
@T TTk4Ti@T\@TFJpsimons@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com pmonreal@suse.com otto.hollmann@suse.com pmonreal@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com otto.hollmann@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com otto.hollmann@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com otto.hollmann@suse.com pmonreal@suse.com otto.hollmann@suse.com pmonreal@suse.com pmonreal@suse.com otto.hollmann@suse.com otto.hollmann@suse.com pmonreal@suse.com pmonreal@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com jsikes@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com jsikes@suse.com pmonreal@suse.com pmonreal@suse.com vcizek@suse.com pmonreal@suse.com vcizek@suse.com pmonreal@suse.com pmonrealgonzalez@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com jsikes@suse.com pmonrealgonzalez@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com pmonrealgonzalez@suse.com vcizek@suse.com pmonrealgonzalez@suse.com jsikes@suse.com vcizek@suse.com jsikes@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com sflees@suse.de vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com dimstar@opensuse.org vcizek@suse.com tchvatal@suse.com schwab@suse.de vcizek@suse.com dimstar@opensuse.org dimstar@opensuse.org vcizek@suse.com vcizek@suse.com meissner@suse.com jengelh@inai.de tchvatal@suse.com vcizek@suse.com jimmy@boombatower.com tchvatal@suse.com vcizek@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com vcizek@suse.com vcizek@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com vcizek@suse.com tchvatal@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com vcizek@suse.com meissner@suse.com vcizek@suse.com vcizek@suse.com michael@stroeder.com vcizek@suse.com vcizek@suse.com vcizek@suse.com dvaleev@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com dvaleev@suse.com normand@linux.vnet.ibm.com crrodriguez@opensuse.org vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com meissner@suse.com meissner@suse.com brian@aljex.com meissner@suse.com brian@aljex.com crrodriguez@opensuse.org - Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
security vulnerability. Calling the function SSL_free_buffers()
potentially caused memory to be accessed that was previously
freed in some situations and a malicious attacker could attempt
to engineer a stituation where this occurs to facilitate a
denial-of-service attack. [CVE-2024-4741, bsc#1225551] - Security fix: [bsc#1222548, CVE-2024-2511]
* Fix unconstrained session cache growth in TLSv1.3
* Add openssl-CVE-2024-2511.patch - Security fix: [bsc#1219243, CVE-2024-0727]
* Add NULL checks where ContentInfo data can be NULL
* Add openssl-CVE-2024-0727.patch - Security fix: [bsc#1216922, CVE-2023-5678]
* Fix excessive time spent in DH check / generation with large Q
parameter value.
* Applications that use the functions DH_generate_key() to generate
an X9.42 DH key may experience long delays. Likewise,
applications that use DH_check_pub_key(), DH_check_pub_key_ex
() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
DH parameters may experience long delays. Where the key or
parameters that are being checked have been obtained from an
untrusted source this may lead to a Denial of Service.
* Add openssl-CVE-2023-5678.patch - Displays "fips" in the version string (bsc#1215215)
* Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch - Security fix: (bsc#1213853, CVE-2023-3817)
* Fix excessive time spent checking DH q parameter value
(bsc#1213853, CVE-2023-3817). The function DH_check() performs
various checks on DH parameters. After fixing CVE-2023-3446 it
was discovered that a large q parameter value can also trigger
an overly long computation during some of these checks. A
correct q value, if present, cannot be larger than the modulus
p parameter, thus it is unnecessary to perform these checks if
q is larger than p. If DH_check() is called with such q parameter
value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
computationally intensive checks are skipped.
* Add openssl-1_1-CVE-2023-3817.patch - Dont pass zero length input to EVP_Cipher because assembler
optimized AES cannot handle zero size. [bsc#1213517]
* Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch - Security fix: [bsc#1213487, CVE-2023-3446]
* Fix DH_check() excessive time with over sized modulus.
* The function DH_check() performs various checks on DH parameters.
One of those checks confirms that the modulus ("p" parameter) is
not too large. Trying to use a very large modulus is slow and
OpenSSL will not normally use a modulus which is over 10,000 bits
in length.
However the DH_check() function checks numerous aspects of the
key or parameters that have been supplied. Some of those checks
use the supplied modulus value even if it has already been found
to be too large.
A new limit has been added to DH_check of 32,768 bits. Supplying
a key/parameters with a modulus over this size will simply cause
DH_check() to fail.
* Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch - Security Fix: [bsc#1207534, CVE-2022-4304]
* Reworked the Fix for the Timing Oracle in RSA Decryption
The previous fix for this timing side channel turned out to cause
a severe 2-3x performance regression in the typical use case
compared to 1.1.1s.
* Add openssl-CVE-2022-4304.patch
* Removed patches:
- openssl-CVE-2022-4304-1of2.patch
- openssl-CVE-2022-4304-2of2.patch
* Refreshed patches:
- openssl-CVE-2023-0464.patch
- openssl-CVE-2023-0465.patch - Update further expiring certificates that affect tests [bsc#1201627]
* Add openssl-Update-further-expiring-certificates.patch - Security Fix: [CVE-2023-2650, bsc#1211430]
* Possible DoS translating ASN.1 object identifiers
* Add openssl-CVE-2023-2650.patch - Security Fix: [CVE-2023-0465, bsc#1209878]
* Invalid certificate policies in leaf certificates are silently ignored
* Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
* Certificate policy check not enabled
* Add openssl-CVE-2023-0466.patch - Security Fix: [CVE-2023-0464, bsc#1209624]
* Excessive Resource Usage Verifying X.509 Policy Constraints
* Add openssl-CVE-2023-0464.patch - FIPS: Service-level indicator [bsc#1208998]
* Add additional check required by FIPS 140-3. Minimum values for
PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
iteration count and 20 characters for password.
* Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch - FIPS: Serialize jitterentropy calls [bsc#1207994]
* Add openssl-1_1-serialize-jitterentropy-calls.patch - Security Fix: [bsc#1207533, CVE-2023-0286]
* Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
for x400Address
* Add openssl-CVE-2023-0286.patch - Security Fix: [bsc#1207536, CVE-2023-0215]
* Use-after-free following BIO_new_NDEF()
* Add patches:
- openssl-CVE-2023-0215-1of4.patch
- openssl-CVE-2023-0215-2of4.patch
- openssl-CVE-2023-0215-3of4.patch
- openssl-CVE-2023-0215-4of4.patch - Security Fix: [bsc#1207538, CVE-2022-4450]
* Double free after calling PEM_read_bio_ex()
* Add patches:
- openssl-CVE-2022-4450-1of2.patch
- openssl-CVE-2022-4450-2of2.patch - Security Fix: [bsc#1207534, CVE-2022-4304]
* Timing Oracle in RSA Decryption
* Add patches:
- openssl-CVE-2022-4304-1of2.patch
- openssl-CVE-2022-4304-2of2.patch - POWER10 performance enhancements for cryptography [jsc#PED-512]
* openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
* openssl-1_1-Fixed-counter-overflow.patch
* openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
* openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
* openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch - FIPS: Service-level indicator [bsc#1190651]
* Mark PBKDF2 with key shorter than 112 bits as non-approved
* Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch - FIPS: Service-level indicator [bsc#1190651]
* Consider RSA siggen/sigver with PKCS1 padding also approved
* Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch - FIPS: Service-level indicator [bsc#1190651]
* Return the correct indicator for a given EC group order bits
* Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch - FIPS: Add a missing dependency on jitterentropy-devel for
libopenssl-1_1-devel [bsc#1202148] - FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
* Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch - FIPS: Default to RFC-7919 groups for genparam and dhparam
* Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995] - FIPS: list only FIPS approved digest and public key algorithms
[bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
* Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
* Disabled test 15-test_ec.t in FIPS mode - FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
* Add openssl-1_1-fips-drbg-selftest.patch - FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
* The FIPS_drbg implementation is not FIPS validated anymore. To
provide backwards compatibility for applications that need FIPS
compliant RNG number generation and use FIPS_drbg_generate,
this function was re-wired to call the FIPS validated DRBG
instance instead through the RAND_bytes() call.
* Add openssl-1_1-FIPS_drbg-rewire.patch - Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
* Add patch openssl-1.1.1-fips-fix-memory-leaks.patch - FIPS: OpenSSL: Port openssl to use jitterentropy
[bsc#1202148, jsc#SLE-24941]
* Add openssl-1_1-jitterentropy-3.4.0.patch
* Add build dependency on jitterentropy-devel >= 3.4.0 and
libjitterentropy3 >= 3.4.0 - FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
* Add patches:
- openssl-1_1-ossl-sli-000-fix-build-error.patch
- openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
- openssl-1_1-ossl-sli-002-ran-make-update.patch
- openssl-1_1-ossl-sli-003-add-sli.patch - FIPS: Add zeroization of temporary variables to the hmac integrity
function FIPSCHECK_verify(). [bsc#1190653]
* Add openssl-1_1-Zeroization.patch - Encrypt the sixteen bytes that were unencrypted in some circumstances
on 32-bit x86 platforms.
* [bsc#1201099, CVE-2022-2097]
* added openssl-CVE-2022-2097.patch - Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
* bsc#1200550
* CVE-2022-2068
* Fixed more shell code injection issues in c_rehash - Added openssl-update_expired_certificates.patch
* Openssl failed tests because of expired certificates.
* bsc#1185637
* Sourced from https://github.com/openssl/openssl/pull/18446/commits - Security fix: [bsc#1199166, CVE-2022-1292]
* Added: openssl-CVE-2022-1292.patch
* properly sanitise shell metacharacters in c_rehash script. - FIPS: Added signature verification test to
bsc1185319-FIPS-KAT-for-ECDSA.patch - FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
* Known answer test for ECDSA
* bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
* Enable tests for Deterministic Random Bit Generator
* bsc#1198207
- Bypass a regression test that fails in FIPS mode.
* [openssl-1_1-shortcut-test_afalg_aes_cbc.patch] - FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
* The IG 10.3.A and SP800-132 require some minimum parameters for
the salt length, password length and iteration count. These
parameters should be also used in the KAT.
* Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch - Security Fix: [bsc#1196877, CVE-2022-0778]
* Infinite loop in BN_mod_sqrt() reachable when parsing certificates
* Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch - Added openssl-1_1-use-include-directive.patch so that the default
/etc/ssl/openssl.cnf file will include any configuration files that
other packages might place into /etc/ssl/engines.d/ and
/etc/ssl/engdef.d/ This is a fix for bsc#1004463 where scripting was
being used to modify the openssl.cnf file. The scripting would fail
if either the default openssl.cnf file, or the sample openssl-ibmca
configuration file would be changed by upstream.
- Updated spec file to create the two new necessary directores for
the above patch. [bsc#1194187, bsc#1004463] - FIPS: add openssl-1_1-fips-bsc1190652_release_num_in_version_string.patch
* bsc#1190652 - Provide a service to output module name/identifier
and version - Security fix: [bsc#1192820, CVE-2002-20001]
* Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows
remote attackers (from the client side) to send arbitrary
numbers that are actually not public keys, and trigger
expensive server-side DHE calculation.
* Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST
* Rebase openssl-DEFAULT_SUSE_cipher.patch - FIPS: Reintroduce the FFC and ECC checks in openssl-DH.patch
that were removed in the update to 1.1.1l [bsc#1185313] - FIPS: Fix sn_objs and ln_objs in crypto/objects/obj_mac.num
* Rebase openssl-DH.patch [bsc#1194327]
- Merge openssl-keep_EVP_KDF_functions_version.patch into
openssl-1.1.1-evp-kdf.patch
- Add function codes for pbkdf2, hkdf, tls and ssh selftests.
Rebase patches:
* openssl-fips-kdf-hkdf-selftest.patch
* openssl-kdf-selftest.patch
* openssl-kdf-ssh-selftest.patch
* openssl-kdf-tls-selftest.patch - Pull libopenssl-1_1 when updating openssl-1_1 with the same
version. [bsc#1195792] - FIPS: Fix function and reason error codes [bsc#1182959]
* Add openssl-1_1-FIPS-fix-error-reason-codes.patch - Enable zlib compression support [bsc#1195149] - Remove the openssl-has-RSA_get0_pss_params provides as it is
now fixed in the nodejs16 side [bsc#1192489] - FIPS: Move the HMAC-SHA2-256 used for integrity test [bsc#1185320]
* Add openssl-FIPS-KAT-before-integrity-tests.patch - FIPS: Add missing KAT for HKDF/TLS 1.3/IPSEC IKEv2 [bsc#1192442]
* Add openssl-fips-kdf-hkdf-selftest.patch - Add a provides for openssl-has-RSA_get0_pss_params as required by
nodejs16. [bsc#1192489] - Backport cryptographic improvements from OpenSSL 3 [jsc#SLE-19742]
* Optimize RSA on armv8: openssl-1_1-Optimize-RSA-armv8.patch
* Optimize AES-XTS mode for aarch64:
openssl-1_1-Optimize-AES-XTS-aarch64.patch
* Optimize AES-GCM for uarchs with unroll and new instructions:
openssl-1_1-Optimize-AES-GCM-uarchs.patch - Add support for livepatches (jsc#SLE-20049).
- Generate ipa-clones tarball artifact when livepatching is enabled. - POWER10 performance enhancements for cryptography [jsc#SLE-18136]
* openssl-1_1-Optimize-ppc64.patch - Import centralized crypto policy profile from Factory [jsc#SLE-15832]
* openssl-1.1.1-system-cipherlist.patch
* openssl-1_1-disable-test_srp-sslapi.patch
* openssl-1_1-seclevel.patch
* openssl-1_1-use-seclevel2-in-tests.patch - Update to openssl-1.1.1l ('L' as in 'Lima') for SUSE-SLE-15-SP4
* jsc#SLE-19640, jsc#PM-2816
- Changes in 1.1.1l:
* [bsc#1189520, CVE-2021-3711] Fixed an SM2 Decryption Buffer Overflow.
* [bsc#1189521, CVE-2021-3712] Fixed various read buffer overruns
processing ASN.1 strings
- Changes in 1.1.1k
* Fixed a problem with verifying a certificate chain when using
the X509_V_FLAG_X509_STRICT flag. This flag enables additional
security checks of the certificates present in a certificate
chain. It is not set by default. ([CVE-2021-3450])
[bsc#1183851]
* Fixed an issue where an OpenSSL TLS server may crash if sent a
maliciously crafted renegotiation ClientHello message from a
client. If a TLSv1.2 renegotiation ClientHello omits the
signature_algorithms extension (where it was present in the
initial ClientHello), but includes a signature_algorithms_cert
extension then a NULL pointer dereference will result, leading
to a crash and a denial of service attack.
A server is only vulnerable if it has TLSv1.2 and renegotiation
enabled (which is the default configuration). OpenSSL TLS
clients are not impacted by this issue. ([CVE-2021-3449])
[bsc#1183852]
- Changes in 1.1.1j
* Fixed the X509_issuer_and_serial_hash() function. It attempts
to create a unique hash value based on the issuer and serial
number data contained within an X509 certificate. However it
was failing to correctly handle any errors that may occur
while parsing the issuer field [bsc#1182331, CVE-2021-23841]
* Fixed the RSA_padding_check_SSLv23() function and the
RSA_SSLV23_PADDING padding mode to correctly check for
rollback attacks.
* Fixed the EVP_CipherUpdate, EVP_EncryptUpdate and
EVP_DecryptUpdate functions. Previously they could overflow the
output length argument in some cases where the input length is
close to the maximum permissable length for an integer on the
platform. In such cases the return value from the function call
would be 1 (indicating success), but the output length value
would be negative. This could cause applications to behave
incorrectly or crash. [bsc#1182333, CVE-2021-23840]
* Fixed SRP_Calc_client_key so that it runs in constant time.
The previous implementation called BN_mod_exp without setting
BN_FLG_CONSTTIME. This could be exploited in a side channel
attack to recover the password. Since the attack is local host
only this is outside of the current OpenSSL threat model and
therefore no CVE is assigned.
- Changes in 1.1.1i
* Fixed NULL pointer deref in GENERAL_NAME_cmp
* bsc#1179491, CVE-2020-1971
- Changes in 1.1.1h
* Disallow explicit curve parameters in verifications chains when X509_V_FLAG_X509_STRICT is used
* Enable 'MinProtocol' and 'MaxProtocol' to configure both TLS and DTLS contexts
- Changes in 1.1.1g
* Fixed segmentation fault in SSL_check_chain (CVE-2020-1967, bsc#1169407)
Server or client applications that call the SSL_check_chain() function
during or after a TLS 1.3 handshake may crash due to a NULL pointer
dereference as a result of incorrect handling of the
"signature_algorithms_cert" TLS extension. The crash occurs if an invalid
or unrecognised signature algorithm is received from the peer. This could
be exploited by a malicious peer in a Denial of Service attack.
* Added AES consttime code for no-asm configurations
an optional constant time support for AES was added
when building openssl for no-asm.
- Changes in 1.1.1f
* Revert the unexpected EOF reporting via SSL_ERROR_SSL
- Changes in 1.1.1e
* Properly detect EOF while reading in libssl. Previously if we hit an EOF
while reading in libssl then we would report an error back to the
application (SSL_ERROR_SYSCALL) but errno would be 0. We now add
an error to the stack (which means we instead return SSL_ERROR_SSL) and
therefore give a hint as to what went wrong.
* Check that ed25519 and ed448 are allowed by the security level. Previously
signature algorithms not using an MD were not being checked that they were
allowed by the security level.
* Fixed SSL_get_servername() behaviour. The behaviour of SSL_get_servername()
was not quite right. The behaviour was not consistent between resumption
and normal handshakes, and also not quite consistent with historical
behaviour. The behaviour in various scenarios has been clarified and
it has been updated to make it match historical behaviour as closely as
possible.
* Corrected the documentation of the return values from the EVP_DigestSign*
set of functions. The documentation mentioned negative values for some
errors, but this was never the case, so the mention of negative values
was removed.
* Added a new method to gather entropy on VMS, based on SYS$GET_ENTROPY.
The presence of this system service is determined at run-time.
* Added newline escaping functionality to a filename when using openssl dgst.
This output format is to replicate the output format found in the '*sum'
checksum programs. This aims to preserve backward compatibility.
* Print all values for a PKCS#12 attribute with 'openssl pkcs12', not just
the first value.
- Dropped the following patches:
* openssl-1_1-CVE-2019-1551.patch
* openssl-fips-dont_run_FIPS_module_installed.patch
* openssl-fips_fix_selftests_return_value.patch
* openssl-CVE-2020-1967.patch
* openssl-CVE-2020-1967-test1.patch
* openssl-CVE-2020-1967-test2.patch
* openssl-CVE-2020-1967-test3.patch
* openssl-CVE-2020-1971.patch
* openssl-CVE-2021-23840.patch
* openssl-CVE-2021-23841.patch
* openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch
* openssl-1.1.1-fips_list_ciphers.patch
* CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
* CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
* CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
* CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch
* CVE-2021-3712-other-ASN1_STRING-issues.patch
- Rebased the following patches:
* 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch
* 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch
* openssl-1.1.0-issuer-hash.patch
* openssl-1.1.0-no-html.patch
* openssl-1.1.1-evp-kdf.patch
* openssl-1.1.1-fips-crng-test.patch
* openssl-1.1.1-fips-post-rand.patch
* openssl-1.1.1-fips.patch
* openssl-1.1.1-ssh-kdf.patch
* openssl-DH.patch
* openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch
* openssl-assembly-pack-accelerate-scalar-multiplication.patch
* openssl-fips_selftest_upstream_drbg.patch
* openssl-kdf-selftest.patch
* openssl-kdf-ssh-selftest.patch
* openssl-kdf-tls-selftest.patch
* openssl-s390x-assembly-pack-accelerate-ECDSA.patch
* openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch
* openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
* openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch - Other OpenSSL functions that print ASN.1 data have been found to assume that
the ASN1_STRING byte array will be NUL terminated, even though this is not
guaranteed for strings that have been directly constructed. Where an application
requests an ASN.1 structure to be printed, and where that ASN.1 structure
contains ASN1_STRINGs that have been directly constructed by the application
without NUL terminating the "data" field, then a read buffer overrun can occur.
* CVE-2021-3712 continued
* bsc#1189521
* Add CVE-2021-3712-other-ASN1_STRING-issues.patch
* Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
2021-08-24 00:47 PDT by Marcus Meissner - A bug in the implementation of the SM2 decryption code means that the
calculation of the buffer size required to hold the plaintext returned by the
first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
called by the application a second time with a buffer that is too small.
* CVE-2021-3711
* bsc#1189520
* Add:
CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
- The function X509_aux_print() has a bug which may cause a read buffer overrun
when printing certificate details. A malicious actor could construct a
certificate to deliberately hit this bug, which may result in a crash of the
application (causing a Denial of Service attack).
* CVE-2021-3712
* bsc#1189521
* Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch - Don't list disapproved cipher algorithms while in FIPS mode
* openssl-1.1.1-fips_list_ciphers.patch
* bsc#1161276 - Fix NULL pointer deref in signature_algorithms
* CVE-2021-3449
* bsc#1183852
* Add openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch - Security fixes:
* Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
protection [bsc#1182333, CVE-2021-23840]
* Null pointer deref in X509_issuer_and_serial_hash()
[bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch - Fix unresolved error codes [bsc#1182959]
- Update openssl-1.1.1-fips.patch - Fix EDIPARTYNAME NULL pointer dereference
(CVE-2020-1971, bsc#1179491)
* add openssl-CVE-2020-1971.patch - Restore private key check in EC_KEY_check_key [bsc#1177479]
* Update openssl-DH.patch - Add shared secret KAT to FIPS DH selftest [bsc#1175844]
* add openssl-fips-DH_selftest_shared_secret_KAT.patch - Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175844, bsc#1173470]
- Add patches:
* openssl-DH.patch
* openssl-kdf-selftest.patch
* openssl-kdf-tls-selftest.patch
* openssl-kdf-ssh-selftest.patch - Security fix: [bsc#1169407, CVE-2020-1967]
* Segmentation fault in SSL_check_chain: Server applications that
call the SSL_check_chain() function during or after a TLS handshake
may crash due to a NULL pointer dereference as a result of incorrect
handling of the signature_algorithms_cert TLS extension.
- Add patches:
* openssl-CVE-2020-1967.patch
* openssl-CVE-2020-1967-test1.patch
* openssl-CVE-2020-1967-test2.patch
* openssl-CVE-2020-1967-test3.patch - openssl dgst: default to SHA256 only when called without a digest,
not when it couldn't be found (bsc#1166189)
* add openssl-unknown_dgst.patch - Limit the DRBG selftests to not deplete entropy (bsc#1165274)
* update openssl-fips_selftest_upstream_drbg.patch - Run FIPS DRBG selftests against the crypto/rand DRBG implementation
(bsc#1164557)
* add openssl-fips_selftest_upstream_drbg.patch - Use the newly build libcrypto shared library when computing the hmac
checksums in order to avoid a bootstrapping issue by BuildRequiring
libopenssl1_1 (bsc#1164102) - Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
* add openssl-fips_fix_selftests_return_value.patch - Added SHA3 FIPS self-tests bsc#1155345
* openssl-fips-add-SHA3-selftest.patch - Support for CPACF enhancements - part 2 (crypto) [jsc#SLE-7403]
- Add patches:
* openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch
* openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch - Temporarily ignore broken OPENSSL_INIT_NO_ATEXIT due to our
layered FIPS initialization (bsc#1161789)
* openssl-fips-ignore_broken_atexit_test.patch - Import FIPS patches from SLE-15
* openssl-fips-dont_run_FIPS_module_installed.patch
* openssl-fips_mode.patch
* openssl-ship_fips_standalone_hmac.patch
* openssl-fips-clearerror.patch
* openssl-fips-selftests_in_nonfips_mode.patch - Don't run FIPS power-up self-tests when the checksum files aren't
installed (bsc#1042392)
* add openssl-fips-run_selftests_only_when_module_is_complete.patch - Import FIPS patches from Fedora (bsc#1157702, jsc#SLE-9553)
* openssl-1.1.1-fips-crng-test.patch
* openssl-1.1.1-fips-post-rand.patch
* openssl-1.1.1-fips.patch
* openssl-1.1.0-issuer-hash.patch
* openssl-1.1.1-evp-kdf.patch
* openssl-1.1.1-ssh-kdf.patch replaces openssl-jsc-SLE-8789-backport_KDF.patch
- keep EVP_KDF functions at version 1.1.1d for backward compatibility
* add openssl-keep_EVP_KDF_functions_version.patch - Support for CPACF enhancements - part 1 (crypto) [bsc#1152695, jsc#SLE-7861]
- Add patches:
* openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
* openssl-s390x-assembly-pack-add-support-for-pcc-and-kma-inst.patch
* openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
* openssl-s390x-assembly-pack-update-OPENSSL_s390xcap-3.patch
* openssl-s390xcpuid.pl-fix-comment.patch
* openssl-assembly-pack-accelerate-scalar-multiplication.patch
* openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch
* openssl-s390x-assembly-pack-accelerate-ECDSA.patch
* openssl-OPENSSL_s390xcap.pod-list-msa9-facility-bit-155.patch
* openssl-s390x-assembly-pack-cleanse-only-sensitive-fields.patch
* openssl-s390x-assembly-pack-fix-OPENSSL_s390xcap-z15-cpu-mas.patch
* openssl-s390x-assembly-pack-fix-msa3-stfle-bit-detection.patch
* openssl-Fix-9bf682f-which-broke-nistp224_method.patch - Obsolete libopenssl-1_0_0-devel and libopenssl-1_0_0-hmac in order
to avoid conflict upon upgrade from SLE-12 (bsc#1158499) - Security fix: [bsc#1158809, CVE-2019-1551]
* Overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli
- Add openssl-1_1-CVE-2019-1551.patch - Fixed EVP_PBE_scrypt() to allow NULL salt values.
* Revealed by nodejs12 during bsc#1149572.
* Modified openssl-jsc-SLE-8789-backport_KDF.patch - Update to 1.1.1d (bsc#1133925, jsc#SLE-6430)
* Fixed a fork protection issue. OpenSSL 1.1.1 introduced a rewritten random
number generator (RNG). This was intended to include protection in the
event of a fork() system call in order to ensure that the parent and child
processes did not share the same RNG state. However this protection was not
being used in the default case.
(bsc#1150247, CVE-2019-1549)
* Compute ECC cofactors if not provided during EC_GROUP construction. Before
this change, EC_GROUP_set_generator would accept order and/or cofactor as
NULL. After this change, only the cofactor parameter can be NULL.
(bsc#1150003, CVE-2019-1547)
* Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey.
(bsc#1150250, CVE-2019-1563)
* For built-in EC curves, ensure an EC_GROUP built from the curve name is
used even when parsing explicit parameters, when loading a serialized key
or calling EC_GROUP_new_from_ecpkparameters()/EC_GROUP_new_from_ecparameters().
* Early start up entropy quality from the DEVRANDOM seed source has been
improved for older Linux systems.
* Changed DH_check to accept parameters with order q and 2q subgroups.
With order 2q subgroups the bit 0 of the private key is not secret
but DH_generate_key works around that by clearing bit 0 of the
private key for those. This avoids leaking bit 0 of the private key.
* Significantly reduce secure memory usage by the randomness pools.
* Revert the DEVRANDOM_WAIT feature for Linux systems
- drop 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch (upstream)
- refresh patches
* openssl-1.1.0-no-html.patch
* openssl-jsc-SLE-8789-backport_KDF.patch - To avoid seperate certification of openssh server / client
move the SSH KDF (Key Derivation Function) into openssl.
* jsc#SLE-8789
* Sourced from commit
8d76481b189b7195ef932e0fb8f0e23ab0120771#diff-a9562bc75317360a2e6b8b0748956e34
in openssl master (introduce the SSH KDF)
and commit 5a285addbf39f91d567f95f04b2b41764127950d
in openssl master (backport EVP/KDF API framework)
* added openssl-jsc-SLE-8789-backport_KDF.patch - Upgrade to 1.1.1c (jsc#SLE-9135, bsc#1148799)
* Support for TLSv1.3 added
* Allow GNU style "make variables" to be used with Configure.
* Add a STORE module (OSSL_STORE)
* Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes
* Add multi-prime RSA (RFC 8017) support
* Add SM3 implemented according to GB/T 32905-2016
* Add SM4 implemented according to GB/T 32907-2016.
* Add 'Maximum Fragment Length' TLS extension negotiation and support
* Add ARIA support
* Add SHA3
* Rewrite of devcrypto engine
* Add support for SipHash
* Grand redesign of the OpenSSL random generator
- drop FIPS support
* don't build with FIPS mode (not supported in 1.1.1)
- drop FIPS patches
* openssl-fips-clearerror.patch
* openssl-fips_disallow_ENGINE_loading.patch
* openssl-fips-dont-fall-back-to-default-digest.patch
* openssl-fips-dont_run_FIPS_module_installed.patch
* openssl-fips-fix-odd-rsakeybits.patch
* openssl-fips-rsagen-d-bits.patch
* openssl-fips-selftests_in_nonfips_mode.patch
* openssl-rsakeygen-minimum-distance.patch
* openssl-1.1.0-fips.patch
- add TLS 1.3 ciphers to DEFAULT_SUSE
- merge openssl-1.0.1e-add-suse-default-cipher.patch and
openssl-1.0.1e-add-test-suse-default-cipher-suite.patch to
openssl-DEFAULT_SUSE_cipher.patch
- Use upstream patch for the locale crash (bsc#1135550)
* https://github.com/openssl/openssl/pull/8966
* add 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch
- drop patches (upstream):
* openssl-Bleichenbachers_CAT.patch
* openssl-CVE-2018-0734.patch
* openssl-CVE-2018-0735.patch
* openssl-CVE-2019-1543.patch
* openssl-disable_rsa_keygen_tests_with_small_modulus.patch
* openssl-dsa_paramgen2_check.patch
* openssl-One_and_Done.patch
* openssl-speed_skip_binary_curves_NO_EC2M.patch
* openssl-static-deps.patch
* openssl-urandom-reseeding.patch
* 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch
* 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
* 0001-DSA-mod-inverse-fix.patch
* 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch
* 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- drop s390x patches (rebased):
* 0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
* 0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
* 0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
* 0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
* 0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
* 0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
* 0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
* 0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
* 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch
* 0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
- add s390x patches:
* 0001-s390x-assembly-pack-perlasm-support.patch
* 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch
* 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch
* 0004-s390x-assembly-pack-fix-formal-interface-bug-in-chac.patch
* 0005-s390x-assembly-pack-import-chacha-from-cryptogams-re.patch
* 0006-s390x-assembly-pack-import-poly-from-cryptogams-repo.patch - Fix segfault in openssl speed when an unknown algorithm is passed
(bsc#1125494)
* add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
errors (bsc#1116833)
* add openssl-speed_skip_binary_curves_NO_EC2M.patch - OpenSSL Security Advisory [6 March 2019]
* Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
* add openssl-CVE-2019-1543.patch - Add s390x poly1305 vectorized implementation (fate#326351)
* https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch - Add vectorized chacha20 implementation for s390x (fate#326561)
* https://github.com/openssl/openssl/pull/6919
- add patches:
0001-s390x-assembly-pack-perlasm-support.patch
0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch - Replace fate#321518 s390x patches from closed pull request
https://github.com/openssl/openssl/pull/2859 with patches from
openssl git master (bsc#1122984)
- add patches:
0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch - Fix FIPS RSA generator (bsc#1118913)
* import fixed openssl-1.1.0-fips.patch from Fedora
* drop openssl-CVE-2018-0737-fips.patch which got merged into
openssl-1.1.0-fips.patch
* refresh openssl-fips-rsagen-d-bits.patch - The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
Implementations (bsc#1117951)
* https://github.com/openssl/openssl/issues/7739
* add patch openssl-Bleichenbachers_CAT.patch - OpenSSL Security Advisory [30 October 2018]
* Timing vulnerability in ECDSA signature generation
(bsc#1113651, CVE-2018-0735)
* Timing vulnerability in DSA signature generation
(bsc#1113652, CVE-2018-0734)
* And more timing fixes
- Add patches:
* openssl-CVE-2018-0734.patch
* openssl-CVE-2018-0735.patch
* 0001-DSA-mod-inverse-fix.patch
* 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch - Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
conflicts when updating from older distributions (bsc#1106180) - Fix infinite loop in DSA generation with incorrect parameters
(bsc#1112209)
* add openssl-dsa_paramgen2_check.patch - Fix One&Done side-channel attack on RSA (bsc#1104789)
* add openssl-One_and_Done.patch - Update to 1.1.0i
- Align with SLE-12-SP4
OpenSSL Security Advisory [12 June 2018]
* Reject excessively large primes in DH key generation
(bsc#1097158, CVE-2018-0732)
* Make EVP_PKEY_asn1_new() a bit stricter about its input
* Revert blinding in ECDSA sign and instead make problematic addition
length-invariant. Switch even to fixed-length Montgomery multiplication.
* Change generating and checking of primes so that the error rate of not
being prime depends on the intended use based on the size of the input.
* Increase the number of Miller-Rabin rounds for DSA key generating to 64.
* Add blinding to ECDSA and DSA signatures to protect against side channel
attacks
* When unlocking a pass phrase protected PEM file or PKCS#8 container, we
now allow empty (zero character) pass phrases.
* Certificate time validation (X509_cmp_time) enforces stricter
compliance with RFC 5280. Fractional seconds and timezone offsets
are no longer allowed.
* Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
* 0001-Limit-scope-of-CN-name-constraints.patch
* 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
* 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
* 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
* openssl-add-blinding-to-dsa.patch
* openssl-add-blinding-to-ecdsa.patch
* openssl-CVE-2018-0732.patch
- refresh patches:
* openssl-1.1.0-fips.patch
* openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
as it now only includes changes to the fips code - Add openssl(cli) Provide so the packages that require the openssl
binary can require this instead of the new openssl meta package
(bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it - Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
dependency issues during updates (bsc#1090765) - Relax CN name restrictions (bsc#1084011)
* added patches:
0001-Limit-scope-of-CN-name-constraints.patch
0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch - Reject excessively large primes in DH key generation (bsc#1097158,
CVE-2018-0732)
* openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
* openssl-add-blinding-to-ecdsa.patch
* openssl-add-blinding-to-dsa.patch - OpenSSL Security Advisory [16 Apr 2018]
* Cache timing vulnerability in RSA Key Generation
(CVE-2018-0737, bsc#1089039)
* add openssl-CVE-2018-0737.patch - Fix escaping in c_rehash (boo#1091961, bsc#1091963)
* add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch - Tolerate a Certificate using a non-supported group on server side
(boo#1084651)
* https://github.com/openssl/openssl/pull/5607
* add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch - Update to 1.1.0h
OpenSSL Security Advisory [27 Mar 2018]
* Constructed ASN.1 types with a recursive definition could exceed
the stack (CVE-2018-0739) (bsc#1087102)
* rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
(bsc#1071906)
- refresh patches:
* 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
* openssl-1.1.0-fips.patch
* openssl-pkgconfig.patch
* openssl-rsakeygen-minimum-distance.patch
* openssl-static-deps.patch - Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
new libopenssl1_1-32bit: it does not belong to the devel
package. - Renamed from openssl-1_1_0 (bsc#1081335)
* All the minor versions of the 1.1.x openssl branch have the same
sonum and keep ABI compatibility
* obsolete the 1_1_0 packages
- update baselibs.conf with the new version names - Remove bit obsolete syntax
- Use %license macro - Don't disable afalgeng on aarch64 - Add support for s390x CPACF enhancements (fate#321518)
patches taken from https://github.com/openssl/openssl/pull/2859:
* 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
* 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
* 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
* 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
* 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
* 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
* 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
* 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
* 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
* 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
* 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch - Do not filter pkgconfig() provides/requires. - Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
clean upgrade path as an aid to zypp (boo#1070003). - Update to 1.1.0g
OpenSSL Security Advisory [02 Nov 2017]
* bn_sqrx8x_internal carry bug on x86_64
(CVE-2017-3736) (bsc#1066242)
* Malformed X.509 IPAddressFamily could cause OOB read
(CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch - update DEFAULT_SUSE cipher list (bsc#1055825)
* add CHACHA20-POLY1305
* add ECDSA ciphers
* remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch - do not require openssl1_1_0-targettype in devel-targettype, as it
is not built (it has no libraries) - The description is supposed to describe the package, not the
development process or history. (Synchronize with the
already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
("include files mandatory for development") - Disable the verbosity of the tests as we expose yet another race
condition in that - Fix a race condition in tests to make the package build reliably
* https://github.com/openssl/openssl/issues/3562
* 0001-Fix-a-TLSProxy-race-condition.patch - Add Provides and Conflicts for -devel package in baselibs.conf. - Add patch openssl-no-date.patch to disable date inclusion in most
of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod - update to 1.1.0f
* bugfix only release
- disable RSA keygen tests, because they use too small modulus, which
is rejected by our CC/FIPS hardening patches
* added openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- refreshed openssl-rsakeygen-minimum-distance.patch and
0001-Axe-builtin-printf-implementation-use-glibc-instead.patch - Add conflict for any libopenssl-devel that is not in our version - Avoid the requires conflict between 1.1 and 1.0 openssl - Add conflict on docu packages - drop unnecessary README.SUSE - add openssl-1.1-fix-ppc64.patch from Marcus Meissner to fix build
on ppc64 - Fix build on aarch64 - Remove libpadlock conditional, no longer present - Update baselibs.conf to contain all the renamed packages - re-enable tests on SLE-12 and below despite current failure, so
they are automatically run once the issue is resolved - Filter out the pkgconfig provides to force usage of the main
openssl package provides - disable tests on SLE-12 and its derivates
* they fail because of glibc bug bsc#1035445
- remove README-FIPS.txt (outdated) - drop openssl-fipslocking.patch
The locking in 1.1.0 has been rewritten and converted to the new
threading API. The fips deadlock (at least bsc#991193) can't be
reproduced anymore.
- don't ship useless INSTALL* files - simplify openssl-fips-dont-fall-back-to-default-digest.patch
The -non-fips-allow option was dropped in OpenSSL 1.1.0
- drop openssl-no-egd.patch as OpenSSL 1.1.0 disables EGD at compile
time by default
- renumber the patches so the numbers are consequent - Update showciphers.c to work with new openssl - Add patch openssl-static-deps.patch to allow dependencies on
statically build libraries
- Refresh openssl-1-1.0-fips.patch to take in use the above approach
- Silence the install manpage rename phase - Start update to 1.1.0e basing of the 1.0.0 split release
- Drop patch merge_from_0.9.8k.patch the ppc64 should work out of the
box
- Drop patch openssl-engines-path.patch converted to configure option
- Drop patch openssl-1.0.2a-padlock64.patch code behind was redone
does not apply at all
- Drop patch openssl-fix-pod-syntax.diff mostly merged upstream or
not applicable
- Drop patch compression_methods_switch.patch as we do not need
to keep the compat on this release anymore
- Drop patch openssl-1.0.2a-ipv6-apps.patch which was upstreamed
- Drop upstreamed patch openssl-1.0.2a-default-paths.patch
- Drop obsolete patch openssl-1.0.0-c_rehash-compat.diff
- Drop obsolete patch openssl-missing_FIPS_ec_group_new_by_curve_name.patch
- Drop obsolete patch openssl-print_notice-NULL_crash.patch
- Drop obsolete patch openssl-randfile_fread_interrupt.patch
- Refresh patch openssl-truststore.patch
- Refresh baselibs.conf to correctly reflect soname
- Add patch openssl-1.1.0-fips.patch obsoleting bunch of older:
* openssl-1.0.2i-fips.patch
* openssl-1.0.2a-fips-ec.patch
* openssl-1.0.2a-fips-ctor.patch
* openssl-1.0.2i-new-fips-reqs.patch
* openssl-fips_disallow_x931_rand_method.patch
- Add new patch for upstream:
* 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch
- Refresh patch openssl-pkgconfig.patch
- Drop patch openssl-gcc-attributes.patch as the code was redone
- Rebase patch 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
- Rebase patch openssl-no-egd.patch
- Rebase patch openssl-1.0.1e-add-suse-default-cipher.patch and
openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- Rebase patch openssl-fips_disallow_ENGINE_loading.patch
- Rebase patch openssl-urandom-reseeding.patch
- Rebase patch openssl-fips-rsagen-d-bits.patch
- Rebase patch openssl-fips-selftests_in_nonfips_mode.patch
- Remove switch for ssl2 - no longer present
- Remve the buildinf.h parsing, should no longer be needed
- Drop the rehash in build, no longer needed
- Drop openssl-fips-hidden.patch as it is not really needed
- Do not sed in secure_getenv upstream does it in code on their own
- Do not install html converted manpages
* openssl-1.1.0-no-html.patch - Drop the symbol hiding patches to ease maintenance updates:
* 0005-libssl-Hide-library-private-symbols.patch
* 0001-libcrypto-Hide-library-private-symbols.patch - Add new patch for engines folders to allow co-installation
* openssl-engines-path.patch - Drop openssl-ocloexec.patch as it causes additional maintenance
burden we would like to avoid - Drop bug610223.patch as we moved to libdir - Move check to %check phase
- Split showciphers to separate file - Move openssl to /usr/lib64 from /lib64 - Remove some of the DSO setting code that is not needed
- Fix the showciphers binary - Rename to openssl-1_0_0 to allow instalation of multiple versions - Remove O3 from optflags, no need to not rely on distro wide settings
- Remove conditions for sle10 and sle11, we care only about sle12+
- USE SUSE instead of SuSE in readme
- Pass over with spec-cleaner - fix X509_CERT_FILE path (bsc#1022271) and rename
updated openssl-1.0.1e-truststore.diff to openssl-truststore.patch - Updated to openssl 1.0.2k
- bsc#1009528 / CVE-2016-7055: openssl: Montgomery multiplication may produce incorrect results
- bsc#1019334 / CVE-2016-7056: openssl: ECSDA P-256 timing attack key recovery
- bsc#1022085 / CVE-2017-3731: openssl: Truncated packet could crash via OOB read
- bsc#1022086 / CVE-2017-3732: openssl: BN_mod_exp may produce incorrect results on x86_64 - resume reading from /dev/urandom when interrupted by a signal
(bsc#995075)
* add openssl-randfile_fread_interrupt.patch - add FIPS changes from SP2:
- fix problems with locking in FIPS mode (bsc#992120)
* duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
and bsc#990207
* bring back openssl-fipslocking.patch
- drop openssl-fips_RSA_compute_d_with_lcm.patch (upstream)
(bsc#984323)
- don't check for /etc/system-fips (bsc#982268)
* add openssl-fips-dont_run_FIPS_module_installed.patch
- refresh openssl-fips-rsagen-d-bits.patch - update to openssl-1.0.2j
* Missing CRL sanity check (CVE-2016-7052 bsc#1001148) - OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
Severity: High
* OCSP Status Request extension unbounded memory growth
(CVE-2016-6304) (bsc#999666)
Severity: Low
* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
* Birthday attack against 64-bit block ciphers (SWEET32)
(CVE-2016-2183) (bsc#995359)
* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
* remove patches:
openssl-1.0.2a-new-fips-reqs.patch
openssl-1.0.2e-fips.patch
* add patches:
openssl-1.0.2i-fips.patch
openssl-1.0.2i-new-fips-reqs.patch - fix crash in print_notice (bsc#998190)
* add openssl-print_notice-NULL_crash.patch - OpenSSL Security Advisory [3rd May 2016]
- update to 1.0.2h (boo#977584, boo#977663)
* Prevent padding oracle in AES-NI CBC MAC check
A MITM attacker can use a padding oracle attack to decrypt traffic
when the connection uses an AES CBC cipher and the server support
AES-NI.
(CVE-2016-2107, boo#977616)
* Fix EVP_EncodeUpdate overflow
An overflow can occur in the EVP_EncodeUpdate() function which is used for
Base64 encoding of binary data. If an attacker is able to supply very large
amounts of input data then a length check can overflow resulting in a heap
corruption.
(CVE-2016-2105, boo#977614)
* Fix EVP_EncryptUpdate overflow
An overflow can occur in the EVP_EncryptUpdate() function. If an attacker
is able to supply very large amounts of input data after a previous call to
EVP_EncryptUpdate() with a partial block then a length check can overflow
resulting in a heap corruption.
(CVE-2016-2106, boo#977615)
* Prevent ASN.1 BIO excessive memory allocation
When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
a short invalid encoding can casuse allocation of large amounts of memory
potentially consuming excessive resources or exhausting memory.
(CVE-2016-2109, boo#976942)
* EBCDIC overread
ASN1 Strings that are over 1024 bytes can cause an overread in applications
using the X509_NAME_oneline() function on EBCDIC systems. This could result
in arbitrary stack data being returned in the buffer.
(CVE-2016-2176, boo#978224)
* Modify behavior of ALPN to invoke callback after SNI/servername
callback, such that updates to the SSL_CTX affect ALPN.
* Remove LOW from the DEFAULT cipher list. This removes singles DES from the
default.
* Only remove the SSLv2 methods with the no-ssl2-method option. When the
methods are enabled and ssl2 is disabled the methods return NULL. - Remove a hack for bsc#936563
- Drop bsc936563_hack.patch - import fips patches from SLE-12
* openssl-fips-clearerror.patch
* openssl-fips-dont-fall-back-to-default-digest.patch
* openssl-fips-fix-odd-rsakeybits.patch
* openssl-fips-rsagen-d-bits.patch
* openssl-fips-selftests_in_nonfips_mode.patch
* openssl-fips_RSA_compute_d_with_lcm.patch
* openssl-fips_disallow_ENGINE_loading.patch
* openssl-fips_disallow_x931_rand_method.patch
* openssl-rsakeygen-minimum-distance.patch
* openssl-urandom-reseeding.patch - add support for "ciphers" providing no encryption (bsc#937085)
* don't build with -DSSL_FORBID_ENULL - update to 1.0.2g (bsc#968044)
* Disable weak ciphers in SSLv3 and up in default builds of OpenSSL.
Builds that are not configured with "enable-weak-ssl-ciphers" will not
provide any "EXPORT" or "LOW" strength ciphers.
* Disable SSLv2 default build, default negotiation and weak ciphers. SSLv2
is by default disabled at build-time. Builds that are not configured with
"enable-ssl2" will not support SSLv2. Even if "enable-ssl2" is used,
users who want to negotiate SSLv2 via the version-flexible SSLv23_method()
will need to explicitly call either of:
SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);
or
SSL_clear_options(ssl, SSL_OP_NO_SSLv2);
(CVE-2016-0800)
* Fix a double-free in DSA code
(CVE-2016-0705)
* Disable SRP fake user seed to address a server memory leak.
Add a new method SRP_VBASE_get1_by_user that handles the seed properly.
(CVE-2016-0798)
* Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption
(CVE-2016-0797)
* ) Side channel attack on modular exponentiation
http://cachebleed.info.
(CVE-2016-0702)
* ) Change the req app to generate a 2048-bit RSA/DSA key by default,
if no keysize is specified with default_bits. This fixes an
omission in an earlier change that changed all RSA/DSA key generation
apps to use 2048 bits by default. - update to 1.0.2f (boo#963410)
* ) DH small subgroups (boo#963413)
Historically OpenSSL only ever generated DH parameters based on "safe"
primes. More recently (in version 1.0.2) support was provided for
generating X9.42 style parameter files such as those required for RFC 5114
support. The primes used in such files may not be "safe". Where an
application is using DH configured with parameters based on primes that are
not "safe" then an attacker could use this fact to find a peer's private
DH exponent. This attack requires that the attacker complete multiple
handshakes in which the peer uses the same private DH exponent. For example
this could be used to discover a TLS server's private DH exponent if it's
reusing the private DH exponent or it's using a static DH ciphersuite.
(CVE-2016-0701)
* ) SSLv2 doesn't block disabled ciphers (boo#963415)
A malicious client can negotiate SSLv2 ciphers that have been disabled on
the server and complete SSLv2 handshakes even if all SSLv2 ciphers have
been disabled, provided that the SSLv2 protocol was not also disabled via
SSL_OP_NO_SSLv2.
(CVE-2015-3197)
* ) Reject DH handshakes with parameters shorter than 1024 bits. - update to 1.0.2e
* fixes five security vulnerabilities
* Anon DH ServerKeyExchange with 0 p parameter
(CVE-2015-1794) (bsc#957984)
* BN_mod_exp may produce incorrect results on x86_64
(CVE-2015-3193) (bsc#957814)
* Certificate verify crash with missing PSS parameter
(CVE-2015-3194) (bsc#957815)
* X509_ATTRIBUTE memory leak
(CVE-2015-3195) (bsc#957812)
* Race condition handling PSK identify hint
(CVE-2015-3196) (bsc#957813)
- pulled a refreshed fips patch from Fedora
* openssl-1.0.2a-fips.patch was replaced by
openssl-1.0.2e-fips.patch
- refresh openssl-ocloexec.patch - update to 1.0.2d
* fixes CVE-2015-1793 (bsc#936746)
Alternate chains certificate forgery
During certificate verfification, OpenSSL will attempt to find an
alternative certificate chain if the first attempt to build such a chain
fails. An error in the implementation of this logic can mean that an
attacker could cause certain checks on untrusted certificates to be
bypassed, such as the CA flag, enabling them to use a valid leaf
certificate to act as a CA and "issue" an invalid certificate.
- drop openssl-fix_invalid_manpage_name.patch (upstream) - Workaround debugit crash on ppc64le with gcc5
bsc936563_hack.patch (bsc#936563) - update merge_from_0.9.8k.patch replacing __LP64__ by __LP64
this is a change versus previous request 309611
required to avoid build error for ppc64 - Build with no-ssl3, for details on why this is needed read
rfc7568. Contrary to the "no-ssl2" option, this does not
require us to patch dependant packages as the relevant
functions are still available (SSLv3_(client|server)_method)
but will fail to negotiate. if removing SSL3 methods is desired
at a later time, option "no-ssl3-method" needs to be used. - update to 1.0.2c
* Fix HMAC ABI incompatibility
- refreshed openssl-1.0.2a-fips.patch - update to 1.0.2b
* Malformed ECParameters causes infinite loop (CVE-2015-1788)
* Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)
* PKCS7 crash with missing EnvelopedContent (CVE-2015-1790)
* CMS verify infinite loop with unknown hash function (CVE-2015-1792)
* Race condition handling NewSessionTicket (CVE-2015-1791)
- refreshed patches:
* 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
* 0001-libcrypto-Hide-library-private-symbols.patch
* openssl-1.0.2a-default-paths.patch
* openssl-1.0.2a-fips.patch
* compression_methods_switch.patch
* openssl-1.0.1e-add-test-suse-default-cipher-suite.patch - update to 1.0.2a
* Major changes since 1.0.1:
- Suite B support for TLS 1.2 and DTLS 1.2
- Support for DTLS 1.2
- TLS automatic EC curve selection.
- API to set TLS supported signature algorithms and curves
- SSL_CONF configuration API.
- TLS Brainpool support.
- ALPN support.
- CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH.
- packaging changes:
* merged patches modifying CIPHER_LIST into one, dropping:
- openssl-1.0.1e-add-suse-default-cipher-header.patch
- openssl-libssl-noweakciphers.patch
* fix a manpage with invalid name
- added openssl-fix_invalid_manpage_name.patch
* remove a missing fips function
- openssl-missing_FIPS_ec_group_new_by_curve_name.patch
* reimported patches from Fedora
dropped patches:
- openssl-1.0.1c-default-paths.patch
- openssl-1.0.1c-ipv6-apps.patch
- openssl-1.0.1e-fips-ctor.patch
- openssl-1.0.1e-fips-ec.patch
- openssl-1.0.1e-fips.patch
- openssl-1.0.1e-new-fips-reqs.patch
- VIA_padlock_support_on_64systems.patch
added patches:
- openssl-1.0.2a-default-paths.patch
- openssl-1.0.2a-fips-ctor.patch
- openssl-1.0.2a-fips-ec.patch
- openssl-1.0.2a-fips.patch
- openssl-1.0.2a-ipv6-apps.patch
- openssl-1.0.2a-new-fips-reqs.patch
- openssl-1.0.2a-padlock64.patch
* dropped security fixes (upstream)
- openssl-CVE-2015-0209.patch
- openssl-CVE-2015-0286.patch
- openssl-CVE-2015-0287.patch
- openssl-CVE-2015-0288.patch
- openssl-CVE-2015-0289.patch
- openssl-CVE-2015-0293.patch
* upstream reformatted the sources, so all the patches have to
be refreshed - security update:
* CVE-2015-0209 (bnc#919648)
- Fix a failure to NULL a pointer freed on error
* CVE-2015-0286 (bnc#922496)
- Segmentation fault in ASN1_TYPE_cmp
* CVE-2015-0287 (bnc#922499)
- ASN.1 structure reuse memory corruption
* CVE-2015-0288 x509: (bnc#920236)
- added missing public key is not NULL check
* CVE-2015-0289 (bnc#922500)
- PKCS7 NULL pointer dereferences
* CVE-2015-0293 (bnc#922488)
- Fix reachable assert in SSLv2 servers
* added patches:
openssl-CVE-2015-0209.patch
openssl-CVE-2015-0286.patch
openssl-CVE-2015-0287.patch
openssl-CVE-2015-0288.patch
openssl-CVE-2015-0289.patch
openssl-CVE-2015-0293.patch - The DATE stamp moved from crypto/Makefile to crypto/buildinf.h,
replace it there (bsc#915947) - openssl 1.0.1k release
bsc#912294 CVE-2014-3571: Fix DTLS segmentation fault in dtls1_get_record.
bsc#912292 CVE-2015-0206: Fix DTLS memory leak in dtls1_buffer_record.
bsc#911399 CVE-2014-3569: Fix issue where no-ssl3 configuration sets method to NULL.
bsc#912015 CVE-2014-3572: Abort handshake if server key exchange
message is omitted for ephemeral ECDH ciphersuites.
bsc#912014 CVE-2015-0204: Remove non-export ephemeral RSA code on client and server.
bsc#912293 CVE-2015-0205: Fixed issue where DH client certificates are accepted without verification.
bsc#912018 CVE-2014-8275: Fix various certificate fingerprint issues.
bsc#912296 CVE-2014-3570: Correct Bignum squaring.
and other bugfixes.
- openssl.keyring: use Matt Caswells current key.
pub 2048R/0E604491 2013-04-30
uid Matt Caswell
uid Matt Caswell
sub 2048R/E3C21B70 2013-04-30
- openssl-1.0.1e-fips.patch: rediffed
- openssl-1.0.1i-noec2m-fix.patch: removed (upstream)
- openssl-ocloexec.patch: rediffed - suse_version 10.1 & 10.2 x86_64 can not enable-ec_nistp_64_gcc_128 - openssl-1.0.1i-noec2m-fix.patch: only report the Elliptic Curves
we actually support (not the binary ones) (bnc#905037) - openSUSE < 11.2 doesn't have accept4() - openSSL 1.0.1j
* Fix SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Add SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV)
* Build option no-ssl3 is incomplete (CVE-2014-3568) openssl-1_0_0 openssl-1_1_0 ibs-power9-11 1718204097
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w 1.1.1l-150500.17.31.1 1.1.1l-150500.17.31.1 1.1.1l-150500.17.31.1 ssl ct_log_list.cnf ct_log_list.cnf.dist engdef.d engines.d openssl.cnf private c_rehash fips_standalone_hmac openssl openssl-1_1 CHANGES NEWS README CA.pl.1ssl.gz asn1parse.1ssl.gz c_rehash.1ssl.gz ca.1ssl.gz ciphers.1ssl.gz cms.1ssl.gz crl.1ssl.gz crl2pkcs7.1ssl.gz dgst.1ssl.gz dhparam.1ssl.gz dsa.1ssl.gz dsaparam.1ssl.gz ec.1ssl.gz ecparam.1ssl.gz enc.1ssl.gz engine.1ssl.gz errstr.1ssl.gz gendsa.1ssl.gz genpkey.1ssl.gz genrsa.1ssl.gz list.1ssl.gz nseq.1ssl.gz ocsp.1ssl.gz openssl-asn1parse.1ssl.gz openssl-c_rehash.1ssl.gz openssl-ca.1ssl.gz openssl-ciphers.1ssl.gz openssl-cms.1ssl.gz openssl-crl.1ssl.gz openssl-crl2pkcs7.1ssl.gz openssl-dgst.1ssl.gz openssl-dhparam.1ssl.gz openssl-dsa.1ssl.gz openssl-dsaparam.1ssl.gz openssl-ec.1ssl.gz openssl-ecparam.1ssl.gz openssl-enc.1ssl.gz openssl-engine.1ssl.gz openssl-errstr.1ssl.gz openssl-gendsa.1ssl.gz openssl-genpkey.1ssl.gz openssl-genrsa.1ssl.gz openssl-list.1ssl.gz openssl-nseq.1ssl.gz openssl-ocsp.1ssl.gz openssl-passwd.1ssl.gz openssl-pkcs12.1ssl.gz openssl-pkcs7.1ssl.gz openssl-pkcs8.1ssl.gz openssl-pkey.1ssl.gz openssl-pkeyparam.1ssl.gz openssl-pkeyutl.1ssl.gz openssl-prime.1ssl.gz openssl-rand.1ssl.gz openssl-rehash.1ssl.gz openssl-req.1ssl.gz openssl-rsa.1ssl.gz openssl-rsautl.1ssl.gz openssl-s_client.1ssl.gz openssl-s_server.1ssl.gz openssl-s_time.1ssl.gz openssl-sess_id.1ssl.gz openssl-smime.1ssl.gz openssl-speed.1ssl.gz openssl-spkac.1ssl.gz openssl-srp.1ssl.gz openssl-storeutl.1ssl.gz openssl-ts.1ssl.gz openssl-tsget.1ssl.gz openssl-verify.1ssl.gz openssl-version.1ssl.gz openssl-x509.1ssl.gz openssl.1ssl.gz passwd.1ssl.gz pkcs12.1ssl.gz pkcs7.1ssl.gz pkcs8.1ssl.gz pkey.1ssl.gz pkeyparam.1ssl.gz pkeyutl.1ssl.gz prime.1ssl.gz rand.1ssl.gz rehash.1ssl.gz req.1ssl.gz rsa.1ssl.gz rsautl.1ssl.gz s_client.1ssl.gz s_server.1ssl.gz s_time.1ssl.gz sess_id.1ssl.gz smime.1ssl.gz speed.1ssl.gz spkac.1ssl.gz srp.1ssl.gz storeutl.1ssl.gz ts.1ssl.gz tsget.1ssl.gz verify.1ssl.gz version.1ssl.gz x509.1ssl.gz ssl misc CA.pl tsget tsget.pl /etc/ /etc/ssl/ /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/openssl-1_1/ /usr/share/man/man1/ /usr/share/ /usr/share/ssl/ /usr/share/ssl/misc/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:34285/SUSE_SLE-15-SP5_Update/97957e6642a544b9c1a115d020946621-openssl-1_1.SUSE_SLE-15-SP5_Update drpm xz 5 ppc64le-suse-linux directory ASCII text BSD makefile script text with ".include", ASCII text Perl script text executable ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=4e681b3b5b308aca99b262636a97b65b7a02dfe9, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=07a4dd4c3c70f5d19fb5645b406ab9750ce21b73, for GNU/Linux 3.10.0, stripped UTF-8 Unicode text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)
R R R R R
R R R R R
R R R R R
R R R s_vie- utf-8 e96e01c3040163be19db3721fb77764618d93a3adba55044471d21b41fa25acf ? 7zXZ
! t/ ] "k%N66X&fV\C'<[s1Pyn4VG9;r;
)Aub $BO⺝ ۤ
KptWʻSy'0(yo, 6
7a@DZC;faK2CB_\p{|yZ&]`s\/6^~ k QrHUerKQ jY,Z%i|K΅n+;WƄ $ɭb66ᔄ|豸ϟ&O
fZ!OlU &:]Fv*bxo}KQNx.ڕl AYR}R`{IDS6 0x
]| 2B" Z~>x*T G,U5i2ңr^:qA8emƔ!i\FJz7Igi.p@*¢Uj@m;-;2Y1'+<; f94Zǫa3l
3A OteIF\͗0d/*֩zP[qֽ ~)O;'#a";EޢjF:V:aUg0Fp(GeG+mR2CqA>M3pƌ;11EY(5bf=]I
Y"OH'" xg^hiWY
ƖOϟqBuTi(GlL˦fKq[kEcM.$Lk@d֨ OT%gۅaͤCx/K*!^&C^\ֱ̇K2FVF
quGRҜd-{m*' rxA..R=8ъ( 0A胀A-cPЁWR=;CU?f0B+&Z~p T [g3vcmMbϝ+X CSRX7Tqɒd? &)#Ĺ Jm䄋[j'/;9Rz 2a-#uT̷6c2 7ڼ2h~]$> -Y 0t SYcn18͛F(ǵ69)<̠{,IAeVn%$J% ݗG
0])ˊx3$V 9b+pw~n~Jx:+qV<Ԫ-@z sc6ȩ:X'S_-ifx fGJ) :h7]'ۓ_'. _&_\oY(!Mr{v( -Z~`x}`DxԱ b kY&To7~)= B%@pU1! It&!F }xVcchrjY-GSdǤBXRQ&eڦ_aH7 =ˍvpxBOZ/GgQ)TB2ok@sA`y |2D fv->\O~ t[:2#!U=*@o &%ϟJQΠz>o[)C]bCG|[h/BS( +.OXƊfJY%i_3*=xE"3"7r&c1Rn?%qZ{$4 _v >Ҏ&.Z 6G5ƭ>*apM>-Li _ hO$·!M9"S\8'z O* ަ7W^nr=ZDds, iWxaY!E&\Qpw۩D\b EJ\.* 1)k\ꓹKaGT'م9/.1Xа4?pEAMSe JI
@c`pg}YQ}:S| '"v{ŷ
HbSdKNzօ6f yZ Mc.t //=))u[V#ȸ># ޮ16Mfu]y2$Dč1ne?
)9!e&a [Rr 9>xzp
(M3ʶzlu+);Sњ80V%\7Dȯkpl#U>MlNx? Z /gtlJ|M!3UDx }gw>T;?8$ 9O!>,3P2| %6@[u %L\59,}`ʇFc:JsSQM"v ]PqT'/t{ƛîo~!V1/<-x]1dLֆ5pB:JVb т=8{sYr3$<ƓCf4OoMӮՓ*zE8HҤRDx,]aB!WWYpkRѥ?zKؠg(s
b#՞ppf}ƃɹ"`I `eЃSxqAnNG49brc4E %uK#dyU$&FԌb̑J{"8 c6.kM|)MY{
n k2I7T@kKD+}բm,*B4` `n)QÄ|lFJ+7ؗΒ [PƸ#_Oyl1+Cb T(#2ډ\ i
ے4+EN6xp.9
?k!"8KE[ HwbAr8A @Os=1the/l%_C)N|Z
N/ Ry '2dD
ga2||'6
,v yՅhvA
GÌ 2@n$|tCz0igY4ڛL_P^X@V*Lb Um
<{~}Hh^y [4|> n!KS&;-UU[<*9mN
":bİ3֫\l\:
K`ւEZN.&裬8Vo_V6Oعw,&z
gf`),2݊挸qԱ2gl@
v9qH D >1w^f@ 'YO5 W~$pk9q"6wE0OL9ݱ*g lO
N֊u"NRJ:Ј;|NTp^ 3]+ac
R]8 .ZHex8sw}%0CBﳽdЦV! Z?%R
5Zb-v0s#nWgx>/SAPY{8`~Ls"qT!DǴ.oS˼R{VgR,D#Ks僰=z8lkIA1#qbqr/qpP . ~S+ːSZ9Y=դLn
/KB ]%(;8dŁ 5uRG $X3V>B]2] HacbWV;A|x YုDɘh O(6
#{yf+,rm1h ƥ5Po%Wg9@]%mHņJ]nvlFgՅ*,z*CP=XR
܁FnmI}zk3fVȳS_^ =#<,g4D~b# 5Mn ;ʿݶb In N©+𡅐vH :MjBnH=
@|YUdۗŹC&WM ;3?maxCB
7/x' qs'7#[ ^S)O}cE6f9oy>rې,@4H.^4B& l)sl:o5} I|ȥ
訴Y@o(ʴj ҭ8W\%{0neep 4k 81p0k))dx5BS@[S H6(${Q`bL_Y^wg4_K4 ;xVBPAD?Ac_qI_ |(DV T*}%8P /U'6S&C=6?E| \Ed&6)jOm?0}i0 jj1.p^/ I D*n^L>(4*$r\xj;_]lB22Ml}p0w##c+}O ը<0% 1YRR %"\ Sa)(m"'=1?DEN."mDCbS3́.9*1c4b p |KvNLB:xNK,v tQe,'N(%EaOMOtbQ*{M
rdciS>n {1/2дKE@6mg(p>vBp )lL8kbpWR*O."ٰ*R0+ 5߶sΉu07ր7; x[ ;4^7ߩVsv._N }S'`[qwQ
r ϋ dYoSl@ـ _n_xʨqwZ6ZMU.`D^ a^o "3?Kt]}8LXc߆ dAj/JP {d -g>FΣ2 Fu@\_֗+cRRiG<'Z^`{TL.T8 \bnw/ DQw{?
hJ<7 T@{UXIZG ^ic=ɟ^lI63HLO/ ]̨̩xyf#lo6'F "
\{>8l7p;[
mg . hPp 2c(!r08/{| ]TA4\:3=<ˊj(AV4RA2 3
`O
BORWQG} !8[T.zq*^n e3ؑ0=veN]k< a)%ܨ-!e} @Z /KZ{A< yT%.lmAXBmF!G@O
Ao trWȚe hc_hW¾ p:T0K Ӕhh 84zeDlbR[&mtVGui?M7Ga ߌ:
Fɣy2 c7(!rez!_da -S#O bX_4mUf^S.m m`xjH40
eecj%Yq gj/}3AGY/܆=0IQ+\@jmjf:x5
V q#V-6;(f~GiFn
+QKcxֲ(&vQrxT%ڄH;L9ǰ'']9Ux-n6l5ǍܺY?*_^k|Yx:$&k{@q6}m *_=hԌվW谞~__p ԾRaLb)vISqa=̚t' NמmƬ?߿< Y%Vph&ȭ[7MWn1i@aCʎ@pQ@h$8M;ZHr- ۔=Vқ]i ;zG]dw۪大UFlq
h8Nx|6u|-ĕ'u ؚ]LvjTb'
XM&
QȶyF^@uz7SJUZ--gL%;nϒ|LP =^iU]+%UK[1=h tQWqI(,Ȯ O
Fm">tነtzMVv7?2E~u!}X<&x&d^p73fu@>%'o1ا>홳x fb+߽%Y4-iAxnDp~."=/uL:0T%欆/beթ0;8jQлxQ`at4{UquY0P(0=1aPx٤OWy_x>( O#zD;r TkJE9YxAz3|E @+WSEVr)8`n tCR% 7{Kwh
۾AKF />S *ôdg /;uԯk?E\]LwF1 ~U&h%s\kp \Mq"M]6PSmBaI۾ ڒx J H/Y$T~G|e*RX쮹q5m㭞-8*kF!gS$xpqRMaܟ[s6mKK5\v^ =\[ ԎN3k@7k֖ sgrK|p;gvZrmo |P-px$%k{' [?v#TsjSjOб4;pn :v*s fL6- T?SX=D4˟rfu
`T
P7#n/]kQ!I*̛=\&9ĸύ?Cz{2 PC9jN=FpզA Ak6cȅ%Uy)+pqc,Г !/V{qQ8hW K{Sp!n5OQܽ+& \Xl\ek1A=O8ݼ"" N.6UK |WpY&]"±?OZr X.)SLG"!NES0E f!xK*Ϯ]oxC3%0͗
KU zOt{, b}3:r5&URao:TJ`'_] C˟ZMkyUJAPx>CI`m+{06^:9燋xh~aB3wC g
έrR:SgR4Q$YtS5R Խ-P˃:o|0Ce`i^HaB$CfcT*Li]!/_Y s0ĜU; F~l^ /5"lj5M%.iÄ]@Vӫ"8ҫPz;
k|hWN;S̰lqkDY7粣dwu%ہG"gZg3u|1z |S 8[1Z>QY M/^//'qf[403p] )3 |U6S|ک:8 ܿ"
iE7Cc12ׅw~0h Ax]Mz2w l[4s*]GC 9O\㉧(yj;Ɣv)Za[2錤0%tlV$o,):ȿ
k7ḣ}}\!ƛKo*
IങhGZ35IQd5[%VluRbqm6AjC( |-Ig SLjԬCN.PPM~LX\p L4:M0\5$ᓇ 3T !\m"sV4~Tl ,+Vg@~Zr)z{k*/K!ݑGxY KqP$Yj/#xBƆBz:x](:D (BĨuf0ͷb"5Ibh.zP">(A_Ɩ&b*i3H?^$",]s|5X t 'W~̖TK#^4sʋ ƈ ŗK*Vb*Q tkD?̿sZ=`(~=`cY = Fړ p{g@c&J$ϰ~_ ?%3r _{jK6;aK3 Qf8A4g7>a',^vFdS*"kH2&oKU Q>6j9!
~:iAlSə]\xGpuy4S| { P A\oroEvl}\jGJJדp6zoB2yat<
kM9_-{\A<ކPKVȂyFdU)B5
8yd~W冔,n݈3c ]2SfJ
*+VEc|YiuH7j}D!i7UV67jۮMo* O3B`a(Ny8rd&1@ > Jnw]0/NjGKj~%!}EY[J%bR ]8^aQ!E
1x߱ֆ&,X:^=&
i)DN>[fpi|(^ES7yEd? @d*yǛSVB vΌ 7 Bj~
_\
\Pdkx6k*mH!PTok] Л7E>`
@.a+0 B`1Ш{6,k&p ,2vYS{<=+ޓFםJnx:#v"4KGڬ,ɸTVmP*M|i d}Ӷg? >|3H~& N'J͔~h~iTPKNTT,2^-9G^kѯ̟B!iP+NdsO~MO-I47
4.߷J˺ķvC (Eޣ؍C:?!4Bj!QEOEWWmnTׄ b%EVg
Bo"vg/5ty (zM= WtYp|i5dĽZpiPcѽGГ˫RI(JNa8?TiNTIo%FJHO/ >y)RTG/cBӆ0=\2_$FO*+gg5 ~4idy9Xqz]×%jU?dsQ$F-]`|-Cen Өj@P6~~i7'}?J._a˾~͌ %Rl PD6ь/i
8sj6K:`3;]=Y @S6gi|j> ^fg_DXƇ+:1 n0䵒,_`j ` n
} ꯭Edkm]SWƫY"YGІ@a/m Iͬ4>5}N{_N4E# !
/C2 zG_!o4;I9/Ny* h# s'J=~+(vv75ZHJĽs5 +~Kocּ}q)j&Xh *]uK<>3T`S`rE&cqRjec? z;ӻԌ7 3;ahI[v>
bd|
a9l3gNM T;^sIPAZĤ&h 7j .Fnw58?~ڳ"UOւrW2 l4ڣ21ƒ$b1Q24@8,'Nps"OdaZ0|b[h
v VQ!W'}65eq"uGO:`&G{i`$[՚
m. |:{V6A(Z>|[|8J_ydUxIBjl@f1O4/Py;
(FaK&dZ_6*]w &bU
J#fyLg r=J D"M@bu H`a^amp* zZvYTaWf_ ziMi'+>Ǣqr~*ϚtMmcf*~ ˢ 2>Qnz ӹ0|/q3(Aѳ F : Nh+^R'3
vDȌ~~[ɸ?OY4zC{[9znP.<6$q@[.Αad6 8^s+`O<ި1O-~; eu覘9> ΝqwHxKN N9{y @4 \*fF [)DZ8 ެ ڿ^:+ R5[4Oq
h03:jՖ }
F91 9z=[.5+tը$* ÆagS[:Goat(Ef^_B0ODbY oitY0G$_"gyeMɌ&0O1*~;CW'@)8Ya
MrON9KKo ' 4|^U իU KQƙ)1 p/,3\5 ާ®&X眙;N|q1Wt<T 6'~#-,c*(W kdk:+1po{JɕsWVO 7lty riPֺ5lTy?0^\% ZV쫔=
Ë.#'JD,Q/س^lo)m.v;Pw|dЇ6b[z:`4Tq>FURv8>9>7Pfsi IHS_VӁU /` `' Wr Zr^{M>`dS D /cT\(\ˎJƦRJ I#I#]*\{+ j ,ިO`,tlK.q(ޛ (qf}XJKzԊ-@ Sn(JK.ҝ 1(Y3 |3s|2|Z -GJMN-
]D393:E/ + \irxF `avciàG!'[:
f,yڢt9.Vٍ|K~F ī0>)suЉ$8bSgss~ܚN@}evN 6A^#5aV ;8_ʹ>Weajї!
D
U;DX5wh3efqwtA浇cO>W=+9]qy=VP9s! 9s^.Yp_ejGI 281D:6H `W|8q3>FbM<&e23ᾑK
0 3EN̸lRɰ,'DV=ЙJ6mFjFĖVТi[sT). @U]c`5͒
܄ 7 d$2;rY04RO_eP [ wa>u&b@9\v1)ܿeKk Z HdL|"r'oYDyV%&oLӤa!Yp
gXX xnmGkE9V.WgMHkvQ?ytvwL ~|j_: L?^H 빏Ӹ\ ]hdSu*O ] D
ee*c](. &#+4C <~v*!Z*V\YtXcjn63].eUL=7A!UjK6 /!]mԢ/9 ~]dO ڱk%j`*1j5W .&,π(}Ć^2M.ぉ}2 xZ=
!MF!#ꔷc
, BHVeN%A-WlMU#ϡttY)d5NQ ֯3_If WIqǨTpZe?!U%Yw+}s =:C݅R?8*Z͊3q# ^v.jO25>H?jk6] +kYp`SJd2Ϙͬ}!0"*;7fMZ6jٰIZ
R=V5Cw@y[&y;2
3H,v;/~4\`-2'=(QܮˋS!6ĥP}M}Ap-jナ֫ 0e; 큜 u@ߪv2jG}}-~ڂHU>]RY`/٥bf+P:ҭKzр[3Kɴ xk@u
auN "Y#JWy1Q`]{nxMY`LRb\=FXLw5Sג/tv'AҙHuGM>b>1Zv,~PNGc߭@+J[ y] ۿ
o1U/`զk;@1 Z/]iZ #xȵ5I,Ad' Ft
K m]q.3 Rb :z3ND}`ɥlkj-nآ0.zq=FT<]1bs7Y | VP)zDּ/~ TjfeTSn0k.rJE6M.=AV8*ټN/.[mAsP '76YfZwWKEEVQM
Lӱ_m@C V]YVb
T4;5A(y7MM,IKD G`!k 8Lb0YJfk@F&P伵1J8@H,ϟ# go wly;|75 ,LlA ~zGJ P9{sPV`J3 ŤXQ潒o t*кb4xg^7 ;+3ovXcxbFX?sG
l<o 3,,-LoV(A=pcCǡ nۚq"\U7hfgr֜d
=d&,<3Jd*)-t|0^t9a?RąmFvF1Q(pؠe"Rb[Zޗn;!A!y(
2jzEuMF'.X!v#JoZ,n=3Nat(FM yΡNc2i&?$y0a9g_F! Y~ ִom˞E8(zmfN!df{
⯔B;Qũ ҁZHio u,jd5o#DT}|.$f Ywuj!/. m0s@5. ȵ]4g$(A{띾 3 ,f& x|[#e*e߇M4)f^/G7C"YBZ Rvx}Q/%DQ??@+ZGs~8eݼ?1)dKSUZa
7땟8)JqMK"!e6 KߗbQzf0h{zyANY %g8Jbt4, 5?
YA/q'Q}rG֥|NDw 68RI覐i˙-]]h;OGQbƀ|-6 :pC8 p#fb #2qL̾=x
YH,6NaǶQ scCOS!_~Aa"QqX9Q#~ $ Ug@keulAllaqd0 yfQ%vY"E'e1flK/'#:b%Q8'KNpl;564^=/1"khf>4J=G3v'HϟCʗP^QBxH{m3y
֕ t.e[g5Y(UʳK.|gr(^!![UN6+-]5eF ]}#HG3Yp
kni/VX*ATr"1m)([h&:*VDwX1evMbmΡVRpL"!I,zLײr #.`@Nb&[.M{omb+/X'r*zz(ubulCT>UWBֽ)ռ"؎
!
B}N 2EU\/Eٹ$eYQ!Hmd
/]c twI6+xJ$
S5M@NJ".ZWH$ |3BDpY PՂ Y8@AU9VX*7?,g;*)l~1 36z\Y,IjmQ5JX=^ ۛE"`xC(X Q%kn
6j%6cjhsVã{ۜ t)/;Лm9pӽ8DP
+Q5,agp f~fcB:S#td Pa*G'N:#/rԁ =tRi7upd(?fg,qJ⤗S.cPb($N_K$2jV:R`\IT=݆ {Ԟ;W>Z#I PNUo o=I4nꩿ @wbޗ况 w)Rl#0zp` WўJw._mV,!.X%Ѐ6=
? XR-jzi1^jP>/q1ӗ/e|ɗ Hҙ<=~^\jT<@w`tkn;̋>k~VՔ?t uj?9 t}Q-FR׆Vu" _7Q#}~8_ ! ͩ1O3ֿ{I ԙae(O 7첽/`7%3mV =v%+|"eT_wd5|vT0g1{**B1ʶCe
d7J\#CmϏWu FUT#m XdR2`e%k.D D^yd,ڮӹD{߶GJWMKvФDö[D giY +ErO1K>4&|oK@ A&p,.^:Ñr'#EyJR-\ᶲD vL"<2 qEl#?@ũm
@ bpt1v|C &X 7 j\ 19@ Z$EghJZuO3ޮx|?q*6H:akʶY 쎿 ۱hu^fO
]C:\LVH*f` /̆f* h^qGud@T(4W /?ʏ~o)[GFX|2zr1y"x ua%K P:Sͭ=@Gh`[x\ m{֛d"TkQǜK(_wtfRQXM ƋUhjV9I#&+a
{lMЗʷՏZ><Arch@ pK2Baǯ| +<'F^cWMk{_8\8MHS ir;I[lX ]벁TQfS m־lTIU qh
'h@ ᭦1^W hwԒįy9a$YAO7T] [`i#w)} JU߸9f]@4X4X{g 'K^4epE[!%E@?zuRW P+ `a3/HsL+FbKr-brf.GHTƃ$eicYf7<#@}UЕΖ4ڋCN Q@.l VpL| cgӵTe
'Vܹ5eEω@2%~]y0 %$i8ǽTc@Kb<1hFԝB fB`U =
k;3sjP-+QV8Xt` f<{,zԐws:qo(w#%w0jxw+6B& lrE8
)Rߥ=ymc;3%:k&{ƆB/N2 y3B"e )JhѲ;%ؼE|ƌ/ p7W۹
jf (2WDI*4žǭ3J:MȒ FZXO_dov }`{\GR\ʝ4G[3xi^L➬3*-H}z q N2W$c_#7U[~uEK^@I$hF 64,3iʂZb{SKwJ ,d9X;Y&62(^Q_l +hE^`J?( N[Vrz u <-EC8"V!y[
"pk/1=dH>פM=5SKq!cm;q(u8)uѥcJv|Lg* ?<DZ2 [T=4 5뜮=/*($1u:0 \$ԏy Kj.ƑaIt
)7.~7Dl~ITʌjzJcvrt3:b@U>%L㜣ІKC mt̒҉mD@N$-uȥRn]o~g -5]o*|5x~B]scNgR?`w'C'uKO2,cナ`p&(7HpK*4s^;̴hҮ5/QQ`ܙt۷ xlaZ`]KȘdY/ZiU.0KnV7+ufW.+_݁0ؿw;l!h N*;fSnb]%[o;M~௶"vE N}nW317&Z "ʑ:\&
CJedva$GUy1
Up&,H ߢ$=zz)='GU MZmR OA%eRn/*
oGH7\h]xQ?\]ba
`m5L2KgĚ0F}?v# M"StZ@b{;>y9 ֱ#}#He phW.
ᣣ:6x_Xl@pU 0+,IhĪ͗w" lR%RG~^ (BԮB=%ls0.._ʌ fe䥨di BDϷf[)9AtЏ!0vY
=?_JVe8Y٥+Kis#{UF<]eԐQ"Lqſ\ Spfj=kAU1. drY#-[A`Г@]*S$1eAy>_r_;+m,ƽ9b9]乄fpT*Pofƹ1xpJĵoWjE= mjRᚂ֢ځ@pXsmm'cw_XVwf =:%FMS:|O!x/n
D_?
d [=5A3 =GLlhUJ3϶DF%Y6D
]j!c_*yUc9#wa Wnf8]l- ;2nl (a.9s=0맔^yb*n vɢ g?"s XX
?*H7Lu+K{"K&#fO >EB<:= 1g-3\Ueaߓ&XU@V]УM` DyڵK yzC 3á!q% V vӰY`fIF[ZZ'94skX,J S`eoo@fyFrSuE\>M-u:G yq
:0#36eemъ/,%2$C#1+,!*l+e朳ȋliEz .&+V9 }r9׆zg?fٕۉܸGinŐMINΦz6.
Y=99, mQ]Ԁ>3ׅ(/lxNuCN(pqX\vӎ6k_ZUc~牱\œZʌ9M
Z_{&`tT!b U@@ p0#Bkt9 I(R DOїPmN˸Lyd ; 0/\2&KM1w] @$Yb2v_lݙV-JJY:C^ o 5Y cu>$coT[ 0bҭ i:+u+(K=Ki f/>7cl5 M /Tm[51q=]64ܗm"Ѥ^?9J-nq'#>.NFc?'hh]} ;XL9}+!k/VbUNzE;{\!M2S)Zo c[/z { J WfL_Sx qq2ip3e<>[ 8ؗܩ a_sN6Q}
Yz-7 -ƺ'n 2< 2 YwbƘrfGDZťq 1dVWʱܢyTMPxW 䂚!^6O XGZ
_Q;iNU.aw&gb@&=k|eHL٤EOΞѠ4gќX-_0J路>Ի q=a]Wa籤jYhFH T- QKo 0b`.d+ޱ/n,ѩ'Xpl hY
6Xj_I]+ p|Ӧx#9Ƚ L D{og'`}6W, ,mav =р"htߢPA" H+"TNS{ 秎;m
3u =+mS's̒-
iB˴_!q[NnYok>0W|CM1SP F;C*k AbtCiʐmk{.pTs ž
_>tYH"؇jGzȁ3kh
$Fj;!B6ddQL$8
`4wbbڮ%]F#@!F
4pMET _ \,II
* 'hhpw \>Ru)26[C{uu9
LonwkZ^i4
w% T&ȫPi_˸3sW^e3xd' L eYaE_諝Itؿ5ӊV~ݟ
.g[xH);CrYQܥnW-{~S$DL䕇ASɹ 9gX-WxG~Ẋa3Ux 8?5d=)
pqBPVvq6 {
|zJ
^|8idla9x$cA48Xh#@tk!y}d3~Zz}Ϣp酧 3bnA-n?HNQ 쁖,`f}VM
EHCܧHYZ`;? s6Lhh|IAw@jY8
,%-"j w$ʙtH]1Ø v0zk ܆= vsPWoxW)l.̂X8+!fL߄{ڹ McqxRvQ0~ L_]Ih>}S- FG 蹳Ѵcw$96K
|W3I^;Mh9w6Z!#f%LcxU|U0ۢ_:K#E隻em4 ؛^QJ}W91G
ٖƵ~A+
ŏR> ª[+ h?Fn#?/x=g``-Q5`)Y%> FdJ 6{ݳAK2Z gŗk}L.-Y,^"rdȪ)=எxx ksD;џO.o@t sU&7b3]{oazP}6UQVsm u 1s:CndXt+P8ѯׄ2i $^.Ӛ(|Lzi* ?bh#tBlh7(J"z7wJ $6hu!"mIJ0e12W`#]3DB͔d7w:*^1!cޕaoWE
jiS@h|as98+v'"DЗ6"-NN wp(܂5y:mE_ud_
\Ў.px=ExQ`+@&C)e?)XL(UNNZinqI 3qp3 t}qN ᵅVP):#XKWmQsƒOx4*X3+g%Ú jCiܬ@`b<ǜ6)W_#ɤi\m5+ NE=/ٖvN*x7_c j*P麘TǺ3" ?2)ݧӚ-BޛD4l鸁IZF̓%$i,̣`{#)F`AiC.Al]~!gUwcav7 q
'evȝVc\qG*
~eAͩGVy/4)O/7H1d班ivLkPm "h咳m: tKJЋ87E{Ōf*8g#8= lG|o@6c Xl;`[dW |yM;].fP'ĵ M7< Kx0eW0a3 yD;Z)J._K:˼[3 FЛv脱qnYL[{m0+230
-#X-l$F/> $5gx4:KӞp -ZU2˄b˸JVL:#`HU8)R#ܡe> 11Sz9)A 6y<@0
t X1ف.@h<;"$tx0BLp% QrLoM`T}$ y,/%|r#O+yII Er2+E9i\k
f_7@][6IseKR`@Py< W Tmvby+@%Qd}08Zr ^E06&|WPyQp}w5쯵W!>`C7]5 js#̂##R⾮G >;6ډ>qS Б^pG6=ԒnK$!*9 jmAhp#6ugV^/N0d5b)C" IXy&RgT_)!7A ؏rm~K,է/ |!Srgg誠 Vtm.`Bc Yz} Y!<SQSa4JQձb^Z2m O}ԼO3؞P>m%+]7CDuJfSz^ h*
"12:`Ou$&d&
~^L{/@j65#1+6yԓ-0< "|/j0 glNu$>¹ᗈ$o-!-{?/'a :D4+q:L DôyՅ|
T_Cf[[\,i6cN&%1S)J9rÞ5@r(Lp@=5Ń
Lyu4Y/IVS' $ۆf7`u}4^ s:!އhR뱞0;Sf8bi FV@Jh1)Tn hASi V;~= P/LNb9V2iԶʕMh$F#/ֱOO|2aTd^X(pR[27P'V:>1xU>cUzDʠ? %ǿw2 vJ:
҉pf}r?!v_/
QO$ߴ!=2\1>d+{}n$QFBwoApMR4!] ?EoYl9' ?;5\uC5fn ip}g ( PtGmZR# azmzwX͓!,,MLX2=h3P+I] x>N+mp[&H+Wm01:-ICGE~':gm9w,: ЊM_n7t4S4kI|.@8ov|S*M!3tci^ "9`eMywOIDvcAЕ R"q,Iuˎԏ%m<>i~]%xk|5պ^hz8bH֙Vzv)Cp0NU{/VqQ6m&Gq,"吿R:66nɅ"K= Y$xPy]g#s)SYO Il8ybf*艀P~w2`:,
o E[/xoX_ WSXm1Of*0C7ȁܐyw(_6zLCּkn]b+D%8xl\9vT/>=]*V2 HtJG
v_5k>\HAٷJ
, C~jޥhE"Ja 2 >aف aƚs=jVb#K-E
<V;J%@#6h5k-oZ&_]W!a A >c,nS,\G1_(yn#'mrF/k-0cRo4G`\2kNꎔR Ev
-/1/T4C[ᦲ!4YLl@?)ꎜDsR+ &TwaG^ gpe!OکPM x@XɆn]TJNlH1T{ j`gRDzOwZK{
I!X-a"'sy|ȹW͵$oR7(;U٩-cR.w-4 9@V/+iD#*9R`H?hJ_00T0%ޅcغ ^\--(RD x*Ũ&5CXbq93v| uFvZP&)-V =1DI5_9RTn8M0 ۧ"@U
:9%ꊪ4:2z{G] ;?lzIKX"5MOL
ؽ?m$ vCH$ҹ[Ѐpau~_Wh 9(wE&)W H&T] XϾo #m,`u JgN!Q*^a=PF_'3JUݬ~mgTJ̸Uh1maL\Ǘ˥78(T-7ZaVJafs#@_ S9s%az?# %┃aS "x oN:eCJR9;FL`35 F
kIÓ:}s Tfi ͚"qpƌFo ){ .JtЗ#ufsgv_a:К#
h NXe>mbJcޏ )cjHI{ŻeR !49ҏ[K/zqa[+i }6 <>Yt YWD ;W9Og6Уd`mVƿ{uK?[bd` &Iy+_] #ǟ!A5y-ijca K, '4:eYD.1UT 2
>"PE%쨮X pFWQD\jj ) ,C*4-gf̌ަ2i;yӠ^ ;jfzW~a \ ,M-@gA˫Tw Y.
fd[I6I8gR r& ,3LD-j<5e )zS,.'`5* wFX=xylk{ YtMΞ"̲!F873;oʱ8 tO_ ; r܃SN?I^ޏ*5 'rc>>a, ! %bu`
ÙiK4qaPཡ*LrsY𨻋`}r5Ĉ
_p.Q\Yȉ%4/YJx=^v aLqM< -^CbWV u1jS~0,c먣4 ' T+ތY
C@Ѭ6}z "rD Uj7 v$(&6[ DߛYKɊp: \Q5-/umbLRrXM^C$;穃xON{ 9we 1ftkQͫ9b̐xN Qo{8 $BAdv2;uvS 5-B4B;wv+>m`6-Bl9)n7 1ctT es@f3c@\ֆ~ki'! 9Bc_< A#4ã>Kq"}g1_ʑ ¶T܃6>'^ uœ]udslz}4,xqIc_%y -i,G=z+'R&)'̠;ūLpю7"$X6ccb.-&+{ԅ^4L)Sb#+ۯBł'B cc{G$ZX9$[]gdUfb. NH2~8
.眦7'Мz#{i{1罵SbkK˷e
I5_Q\{M9h`1.M^[ #<n" e.,I( $ö֡൯yDK:%['*1
t/VF; Oc=oɊNOTN8l|&9C4e9T^ڍab *e"19{ΰ CHңπM%-?;*&o@yɥ ZcNOʪ͐fp1*$8˦ [2,W'2|Găa@b1< ,_]c>ξ-i+Ⲿ"ă=ʢvp`se]uȰCwሹw> -VuĻU77j:jτ!fʽE'κv
qEXR</H # b0b*&҇'їbș Wյ
"WNdgӊark5N~!a0rVپ5q{&joL( igX 9w1) ".R|Wށ[룀;!扰TGRAV\ C[oXN`1|st[By [iN9 ?ûNм!
"]Qt5OHi] ";c*`0j@iqAK3ÁQx.6)cB y}RCBSF=b{wdN3:jA/6,# j/n v S _9}Zɏ! @#ƱiJ/Լ\
/M
S*p,b"ȇ*- ;BlŽ'6mQ e"6# P3dmCjUڛRuv;WRG߲.2raXΔ%t\`zSSV̡m@p߅3 ;rVӭzn)pio;t d N8|b=^sJ tP94^kVAnP3`}S;/9Ϗ(=;-}b }=?zߝԑ v璻[]W.&VU)uۆMP*LXCiaptN
Z}ܙnrz%w
*\ <#ڭ{7G/yzU f
İEײM>h8wSL,Xj\Ƽ_ t#3qO ՌcU5\'Y8\ޥ'|H{Rt_ـAZ16 oLRDB 뻀{QV{2Md%Xa z+}\Wy(5Q5| /ͦy$fC) pWÿPcϹMoO-ٸh+Lpˣ34B(Qv@ iyڰr h '.V6乱(HBqF<|f]TI#p#U^qDfŹկ֮9*dpQ-vQ@D6:b
]+20JĜp@6qDcO7_Eg
2S:}'}n%[$V;l軩ٌ_ڇmս'}݂* ҢG_KXiIi.^Ȇ\эX_2')!eU1_{} . 5aiEτi$! XZ!7cc꽆# pX Qqpڜ1S!X6fp "]JM?eYOg- G+U'Hq-XB0A`/Ʀ䍘~B lp(J#Yk۴1:|T$X v Oc{ytݎ̦KZsAZPjW^Lbjjo-uifC9
N g+n,a C 77sv.l1e/A件DKR۴
*}ps,ŋTF ΄mM٫@:eKA%NX VyMϮ[BrgX)ԭPS'-l*AύK3 報5Zz%DMrS^ 7gmc/E(V2 EH큚Ҿv2$*bm+UDZWO:3&r5]:^Ї?gйG ~A"bM9"z3~ |E
Vx0}m g[*&&u@;YnPTYH2nrE}>T=
4[+
z,`=#g2EGn'zGuΫԩQ$L6 )^4 뜼 07¾3
ʆijfF5B֙j O57_ HPtVQJL+åCcѤac F}D2^ mm a{[L?BEW4)ۛ{ET" ,On';C c &f<=Cߺ܋iݧ@UFBāptNjXFn1/C5m ӳ\ Ni.I[Kt`lDQSZ\NvtM n]k
d$
-GiFB`o,g09~ܔ#e(jDf1BޓAQ-h^[ ,
/M^\Ėb:p\
7v*a
0GebWCjwjJaƷzjB.M]=~<}v-+ingI|`g< |vʄ=C:"/`ґ:ŵI1+IeahL8?Ygpu۠^^c*g'FA;r_<\O{uCAt@4u(&g
ꪭ('4t)\Ya+ua lF yX'/r#Z5g`kD8>0hF?PⅮʝ6Ntx=Ug#o@-9 Dg±n p$|Ȅ};/K7Й/=DZvA>ĺJ>?/ - 9bU=d~ 2Re9ųm,4wx.,|") ,i U(4=nQB.XKYѼx5Wd?a]±z6$EY&, k>ĵ9:kٶ:mĽo.]R\LqRoaV]ߑI6jJS4h@>Eg"PV8NP1q
t&; *wLoؚ`up"pol$wFbrPh,kmt e e+J& X~5{yQ8Op 3Wu1tqp$Rz"Upf;:lݠ~xB B4b4m%TlNanC5&㞚Αe(-ϧ7geT1m)ˏ vwש˔{s x %Ֆ-@: $(dy tƧ g{-(2g[sde. BszZ0ևW;l^> TAZ%%:#yg*đv*)Pq8Ԩ?{ޭn걠c,24M+%|Kк5 ^JPClR{j*=pXS 9PpMVuLs0\Zc|)\ Տ,:iG:()YyK*qu;
iz.bz<
dBk) '[ E& W"q.>
KdǴ 2Rya/)r=̘ C &kl::R>y
Wp5Qցi[p|C&m#t:A\zM ˆ'1<(c)GLStӸDw[썺+ItclM;A}g )^ l{a?D~]vI J)[dF73B0( ck5lO8cZ0Dy,Ul^ pb"IZ'%μ
BO XMSs4 : !$]G$wj9~'.Ao姉BɼNQ""rS nBXzwo&9;po}5RљSX8
K%hAAs >TDNaT;,H
c
{VUOCR }bHR(lfl"%X/X% |sG`\S8݅\LDhI?DQGCJ@epg 0?Kʖ婂 jh>J+&ȳ:MEp6V4]w4J8}ؑz.B ƓIjY0#g%w؍.Jx>tN');OEEYTD&*pәunq=DCl7%AWx[5?&_&bEZ[ @y>J*R? rK~Gw3'grNq`I7D>>_\sq= jҬxڠg9疞L̻4Ƈ]BXOm#*_
Li1\BS$JU2h54 y PkOW_mGlqmV3p뜂({P;|l(,&X=R,(yDЁDY_~
JA?2
PzuA¦` Y߈wK
0
&8W 4 S)c 6xȗRQxK\=xid^_Z=yb͚!T1iz]u4&lBBC$
G {1B' pK!]ԉo!+D0{nQ5!{1 Qhm}O~q~>L)
W>yfL2F%) +hl8.i @ &c6/vXVv-5pRƬ/2:v:I`PaJS$nv<2\~$fU4Vւ;h!_*9dʔoQ3%S@ )a< yA;!!@T өO&Yqu;,#,0AAXEoҥrb7rؑ̎ 3ȴxlH/=e!Q$ cm'53g T
~{d![~;l {ypծ/L(ߊý r >I7zrU4N/)."D>8p/Ui q'l~ynDtgo4/k)G9ytL
zml w=ġTg ;qDxn17BN1} EP:bG)!4hR"Z` 嬵;V.l h>enSuAh"SW%@C4ȘB3C#>g! Ռ.H-ΰy54tӳxQ|`.)J+,췋WFZu.fVh]y4qH~ݳm 7jdy=Ht.tߧ~ )Y_
Tŋ
Y~x
v]pMLVašG vJrd8 qUi`Q>{[)Ž5^7>+VcAD} giR8 X/̍9^'p } bWLnu[Mor/oFMv322ɲ_MnbE:I'?6lh&37N Qh y;ƝH.vO&F1tiVbKzmFs2JVQVh WP 5Ttq!5
$}}snIZ^5
p;;2 ԮH!Gtx0 f]HC{.d
L
,Gbcfe
G[^ڼ9> v&O `Xj|V"Nl2[5$@]ՍDfR;|,s֊
h⚻|[aըrCƜpX KC' @nb#!jk>̞bȔK 9bV|x9"\n8~ fڬ ݣ"o] /,Om 6,(v{z "J30 `P@4LuPo zZ傏;UAt : t\" iJ d6ؠaN4bߙP+Ķlr|79A%z-_ĘZT=y]T,@
o 嘉> FỤ7~*IP6o_X
вbܫ{$dj`PO@z_0xD3&-2*Dng'v2:
AA
a#L&baz}[3 "keP U Tfzoy 5w2DLd
f *PC"A5 ә:^mC'F7$*2Ù %t!Rot¹CTa$p 5г iI( q ! g8 ^JrO1m*a>RTg%d(kZ]b%vYV y >A_Tӥڦ3EG- 8uR5ynt=>ͥ"ƮH OXRGo} _L Bs_ 3\'گ;0C4Gw-#汧v)
|+s'33K'8b-]ZoFCB }\H8MYt܆N&ӽkJ3uyΖ=R|ׄQ#aG. uӖv7$4t0V!` {*ѸJ
7[)4d@ֈޅ#߉V_y@EZ; Ae3 *YұvYST[5ya~* SEEҙ]w'S /pUF'Fo&|+ B3+AuV濍/ܾSe*Nɏi6<2YO_]|.`us+{Ϫ4#Kf &[QS9XY4p Z!9BM,:ڝil1̼̀.51z~p.P
BTcc I7
R4SWPKnW uo\. 1u-I)"K0v}j3Wc4Z(9ҵVL0+;`
z6on+a<`[4+ѷ-h'\Aρ$k` X ~e~VrL}pEc
xe UNr ]M~氾*0I´pA5?DGʻ)TS.\뺇veNji";S m(%2眍$Ô\Ȉ Byf
f5M{4>@jC44%x\a}v?] %_OxH *rCb ?IZZsI6dvu 5!Jp6E.ϴ2>Լ5~ؼ|"zQu_VW)|$N9BД^M, e4yk#DQQ`U\ů[tD$}}gz:-| "QgßWwZ))^Ӄ597q\dʙsQb^qI NChG4F6*l7Nf q/:u֞TO^o! hLJ?tkdRŭ`_x/ ~UKԥ6hdgoIj4aUNw /T"l80M !hzU0fo{ٝ=~G> ZjG"b|2l wH 6!6t.Kllm(aGw@_*Źo3n!x
i@:ZWQ$ GUg<ȇ$z*\t_?|%O>i{WB?ʢ-ZN Q/ɼGRo컎6H H\5 @@`ro Z}(( M cd3kڿ _HO lVfyJm+/!dBe i OWpV%J 6%X@uj($4
BK 08d;xȄ(maG} b氌:#Es<3tWOP*< e/ F* i*Ϫi]L#amnA]PW+|E[c8k
ߏ[̅៑ !8L> (\ >e
NDQx"%x5_ j巋 `o?8q6{tP%EY)<tT=M]\X }J _;V䑏cSIJ>NHJVJ-/b#|u&«ܖ>'Ή,x^BM+T(:]4ȐtQx? TdvT_gpF|Xu |A#; _ha_zt _QˁV̸v tef- "B9aʪ宨2E[8l8-Ȳ5)>Y;h, N
.~
j8&EC=)
B0l[8oc!-+Oa!$
u. m4GC0 tbYF+.ڮ3[TbC3AV <{֧
F \3f1f(_. ˉ\Hp?( `.x!cn7 JMUHe2W쮆fXk]{ϕيU+z.r8| % nl' B
sdbE XN~}cOa "_$BO; 7=zMSy*!KDqքGZN36yƟXJeAw$wI?H(Kp C7ǘ})P6`>=tqx`b
5Zbn+LЂ*Qk
r:ؕ/^]QiJ4}f䰳 BSQo"~µu7R6hU!&Ϻp-Zl*QZ`36ᾀG ےIgS)ך8D37Sm>˄ .Mo3wR=FMfvƨ7ۣ\ r0ECW@ ѽf4"ZmiPK.&=QԨ3-e`U^D,VRE}
cnrԮ(F (f9m
{sb
Mi4i|Um`=~)S?Ⱦ120$&ՂLn'(t t ͚R
T]: h}ӲgUOz?\Ro) ۲ӳk jpjqqDp? *bhE~Z%҂})W$!RPM\4^T1Z>[v˛U(8c$ J(j#h^IW6~LR?Mj ^PMF{>%M 6x#4w|dY,m?Y#j@ ," 4e9dO5kcoÑm8/6~@u2&mdۡ{M" b0Yib$zPc|j?`ueޱ:S}tF⪿7'UAUkς .ju#'Q@dY-xx)LUIƜ%R7v* Zg7\z>筳K
L CA|D5֪{/%P' 㒞mA{anwmbZ$iSBM _h_k( -xX f v{M*ipve:&\D(5~L.[] A +N>IR%taJs*2B91mr&g,$d =m!"2LsͩV#8G L d~CLoEVcBy6/p87 qχe~ h١f2pW m 3 no#o![]/L ^[BZ!pu/¦{ ke ͥDVC7(D .kl^/'%sd俼ff4T UYM|uGɨylrf 7x=sK-8H̫ST`&Igͻf/ȪhLgwr 86-H|jN7'O2R A
$d |p8o:`QuwxAT}'ȌИ脵d\ǁsc _YG2WӀؗѸ$eDix;l |ي!:#CU f)xm~q~Eґc5U_!SW(.)fyM RgEP ܰ*8gdd fnҚb]\J1|M&}!_ N"ɔk+K46 *hY* 멛=Hhe ɪCmk[76Oc 4U7h7d!g GP&zCmQ4U#`_$*Ftl*6o-A[h#k֎avcv!Q~BH[59aD i9OnxןaR
|g*H*u)A tMD4QRC*zC}9C +1n يt0\bϫT ZL>3m2Y*Df_z3 1mF *.+̶i
A2Ŀu @Nɧj
Z^%*ǒmj}ir!Z1+..MU q
:4IU|5/5 ެ:"0'>[نU p!/E[!0[>/:Y> %T#+xiqIC$ٝ_x%C\b?naC$loRxo. eeʽs
^u(H;BjpLG%il˩"Hxǥwa 0yT́{3^(ZלMI&DM`0~w0sY/8_JRC |Rbp=y:){PMf|7gaN.EƩۛy]ԋ Q$ !5BM1 !f {G:QƮD dy` iG!bK3Âcz@jP`@@zȠLf%*P^S֒` u9# k! Yzrvf kſ u R7U4NIOhN4S_; /:Ӷ;aP$Ԝ>8Y,*f7 Z{)D4(njfޤ,
#w$j];
#E|U7y&O4-gVuD"TXL)SxZi'
k}*$ Ah[;7E`3|'UԯzT!} n)`\1d ˫]t eslg}Glm1% X
XnNv}-clZ0` |Wu DWzm<2UE/$W(}o . @!sdG~ . A#h6 q%B뼂
>f:1epzLnOĹ>D(H NR9-ﻡaRv<)9Zy]ngy֝ʫwTDvL'[
+) v CKۊ^1R|*5f?]-HV +\'FS$zwOg֪q
@A9,rQ;o[ !۷d4k MC0Hʪ_35S"YcAh&^txf\yp8KH1©
)ďP9kfyP91,.ygy 9d.Q+;[So𥕭T*Ghq RXx*[Vv= WTNbN u=fؤv{
;
۳8L5@ǘ#y Dov8c)9m#
CjB]ə%&tY < VYb (Q f xSGJ@u gaYE}M2`Ikx(f_TXy( s,B1s>tO b\>B F_gzX6 Tzb^JD Ue@p ؒ4cs>O$ׂ RdX\D?zeVd&]lo GǓ\ Wtd_r=* |Ϭw6v㏃
> K"*bv _\rc +랥>a{ _3 g[JszF 8|(ȴ E]7WIZ{E r\mm#L2RO_X0mt u(x;̼sKLm|g1Vv j [ /;/7D&-0ΐ!|؛yƑc֫QwƜ5Dy wu"+妚UиߞG
)/f+ltW6 .sYWtI#I @*
*j[xhR| =
tq~
cj/EK#'[z3 l$1t_ <BIBD
ykgv]ic
{ɹ)tf{>
0~FH1%geQv{
`%! Cd7uld23_N^I]Q?
j^dBݲ_1_ !uh-c(jǾmYTЮ q"bPs@11FZ a> ZF@N}@(x)p<ƒp0=w fܭ1# A1?r..!b+
5N\{bJ`;9, U"># Ԣx :-'uT .
L @ N}vSт>8"z,QD}ғQ}^W8 4s]-Kޘ
e%MЏ Ի w Y9uU@Y@m)o _B0ﮏ7,䙁gyI<T||H![ ʪdt OD>ǼPU F2tc96!^-/B*VAgn.\Za90fY8:sQ*MU\z&:V. ſkgza4`*\'~ht%K%(.
+mNcjoPP-\w
v3O4q[at_3%?F쑼hكH+ubj >` G]' EuW=Cx0 Zeq"!34 5 v4EQ-}&n@ 2{J\s}$ cbK%$Z6! yYRQvܖܩ[GӥzDm
0!4Gb獧w)VK%R3-n> N]x"< >{Z2K_OA^<mf[np/3C"$FqzB%osvK2wpAh ƶ)pQONa5;й/<2,yDVL)z$D0 A?70' 6Բ~t (9M9hP%jp0'7
A+IJ lCWn8p慎Qہ.:#4_ P!}y(R@=Veի *mc61b氨mkg1Zz8.1vԄ6^ YwK>z -kIrO#<`{&UE,5p&>t9K@E\q՜C+\b<[˫CΎJŎ- B@VH&Mrva{ѡsfҭ"1sFRxr,Q| IœIh#>2"3VBx&oU1ieS֢œ ޛS}WEنSS}wզ @ְS=bAKnS]:1ؙ< 5ѳ(O>@'Vv=0tOO2#]w;FךDDw4* pQA S)Bx}I>b$Kkx8Z8M]K^Vu؎d7
s
fr H@p-w 2U_VoZVXE&xvE!} BY _ܱ\ wBZJ&pu!&뺀ۭ#C4S-N͑<˦g!tbN;D?9 VP+O91VJud]8eX$.YG( xD`Obx~wdm; _w9G! _bubH MѫqukDۿ)xr]ӕ8nkÏJE6(w] 9iZucxFS
$"$>(: ( {~)1
2IҁǗ?pZyz=Rڿ',q b&Ӫ'pVQZSJp'
W4Dޔ@qOXz1\<"jgŧ٠H(8D&c4x}|EcR·}5}?拆5QX/@[EZ"C]Gy88e$ ޯ@ 6jj ;߷. n/ JI"tLqb0I éw3ѥʫR l q<
Nj\ {hU& ,i vx$R˫8vEd_
IvxE.U%ttuxWTsWZ /(=QATb#<+² G*GxsO{՛ׇ$ *z}=ϊz 6qI ws%wWIr+;@a)za{Or z11& E-2ך֞4l9 y)[g vxuk/dDs s 𪇥i )(k7p{ 0}KԊ>.h /=oo<ȱ;Yk:#M}7:$lag-K`O|o"VA
VغQ>e<D%M.Qh4@] 6-eydʿո# ^@b%T~GlZ ? 凼VX+µf(,7g{onQ~R\WTEѲ9H@.lb
q'oQ{do'6븶+A&VAUލNhJӼmU2 GvE qFhc!4
NZ|[L7b^ K m;t@YS'|ero/gB^hk jKOHq slPF ud$ΑtWtT Bĝ5D{ ホ~? %'l`;JǧTq> _Ti-gBS;өVR\`Fs=W7"B,39>x{1ׂMkx*-?Bvٚ( GuOH0`' & u c#Ϡ j5]r) ,:O
.p8%C
|nx<7>Zy*K/C`Ԗ J)IZOveɲ9 ZjLr'2D2d t DXZm Q bI$pG/MBpiG
8ߧ;-ckU.&H(p` '-E_=R:( Z5out(8:7FN/9aVzᘍn Ga]B9t_qP,<@T/Na|̏$qzmB \5/>W}9ԕB9T:g~t g!D@cxxD2eKILq&3tњJ\}TBBT%} wYlz2.\; emP/X+qvdx'fX :b܅Vjx47᩶'QB` t/J>7oB~ɺNm*Z"_
`FGnHѫWq|ɾ
&$ppi; '`>N'$lҰ347_Rx:35UN 8m>{
mV
X̓g@B;Yrψeoٔ.CV
}^ !T-k w%k@;!!AZ/'Sa
X|S^2Yw8XLAB0vEB3ApÌ3SPVNM
xڼ{TT(/_$99:Ȟ. @YQ|u Zov#n-z7trl#9?5՛#t^Noṕ$ %*Y N k oHL WĒ>z+eA|!ϚOqc&FU~ϠNq lT !.1
$!S^sbޚlayw`%\&"?#0@1 J nU`ËmOlS
Y`݉4
H7 1.y,kE$DGm>%hc<Ȝ_R Dеnȥɞ u s,~MZ~ H<&
ORe3BvC]`?{*s}ۍI=U)90 @!'[~(Q껾*aB اp0ϦOu3h?p.zffn+ow$Ǿ ]S jLqU@Xq置`%{v"a♮l63XbXc߈+Y+ 7hXcp f9Sl\&a.3WQ4n6 Tc҅O f(E 'F > ~8Rp@IR|g|L\zMۗљNI$*:!| 1Nd44$~j7OFR#] oZz~#y F)J2jh/Z- 2?gWdk~H]yLCto4%"7 atxSXwf3*J>
& !<@ h'$ķ-&l- ]k ;}xuf%ÑEUŗO,2VƘ
!$KǜY[KʎbC
ѵm_I1꿶DTQTUS ?YzJ
*Pwų/FϯPΔ}'8ƌ8ڄO\+wj @8ߓZ%M n@ti
!A+PR[$ p&p, gS ?>2 : gWo qh[*Eo-
a = /
}>& 1ߋ ME NlJ4y% b{jomcqs] 9WDڧ1A! ]ZmV8X GKq&SÔ%0p*B6MR$dٵK&ՆNn3l7j
ղ9P 5
τi?{!\DMH&eE
w1=bE+gǵk ڀUR7]rbݿևW#P\jc^֏%L]&S$OȪ
L~y564*k*h"D q;o.4uĭWM#HeI$-cV#2v M
9StKpL{K
Hݏ״zȥYR>Y&Z*'*^
EVF;ݢPA_x$N6۰kK#$ Ǜc4!WCP\ dX1>c/:$-t=' ~gTP@ NlwȺ4MMH.0 <59߅ܮ:b fj;fZ< ܡJ`YP[!xk` YZzR>ߜR Z,8k2x AvBb+dg2DGy-l GAC5Kׅy>_B
$u 1ԓ)rt Y*hcYи L)V+!3Y3̴7FT,E{yo05pVIw64weJh~)h _*[qVE ]ČP( ~o'XTUIdR$vtZܵЏ:u /9XyznN6 Z cI
ǵҏ$JHn}ɫ}Bg#ϗ"z:3\{xGkdE(@ŪLo{W7 ,ĵEoZѿiN2Tu&JcYf%y;Kp˹Oe5Hդѓ$ wVWtxwƂH RH K~i:d
U3Ft,9 \Oô+Y:BЪY|KXO5Ϯ%=>
u*,CwuL٠6ϯv;X|l-syϯ#&l#?hXU*'pP
(,+w
tҏ 2JMY8vsy$7v=:Xs I=v C0ƞLNCwx( .4ܐ}82O!%Zyts"6#`ՀU(+60 Cb v=!5mX"o !9s\IT~-NEsDZV{%M
kvD@\E旑>;h% q簐H[ObL R$d TZ8їn9YIܵRJ&= ;cV," _>ǐ(E[ W3%cѬvcN @jclŋ&5So8pvJ_̜}+V1q`cWf!dP$FfuDFj:ڲ:[衡sX{s%H$徂'Du,m}ɅD
Pvn %'|'{u*Y`0^{xBcXiF+l|XM? .E( 1j E,DwzF| f]_a\'
P;&Yk?AB᳭#m=LIU
HFCL/[Q٭wTc"~N:7p"FݘKM.K$ ?WOnC7$NB"3qS_1!;DPU9ac][W$ҨQ
z*Y,Nd-4}1Ȗ|?tÞJ#'`r!L ;s:x-ƂD29pC5>]'~ll"S&5XZ4297D 5v^'i$mH 1@q=y2OlGԖCR6-9\;~sD'o:;Փ\m1p=EM
q=iVVMJ 9AfKѺC^oI\]Z >&U Hzff(BBW"?5Q#F,ʞ+CJ ]vw:XatYŻ(ԟrli$_U5{ҿ?<@ QU 2tͱiaol@, [ǎd#^#+j 98l(sVވ/FtY(8u#!ٯ < <:1,."ыZjY?QHsO vCAwS7x#ܦcRʹ>O%=lZi-ǭ)&i2trLWx{IG hri ~q,L1p 0a;0HdvVi+> !.J\"d;o5b`<f;SIWq
[Pn>"ۣ+ +UWD} =tms7^UwHWXB mL ͥ^kCvrB];H%ڞ]%纻B\q +B 1uJ{Qכi fc,̧;
p'2!0t3` ?mx;
댺<,ÔJ T%mՋNo;=yty"\GfO:?2a&." h0$kR~c\iO2ӈT>g6hD^6a
9~bPƂDl V1y+o* [2*PqǴZB=f9QUUҿGa UKYy ֩ X90).zVIg{.M^N@RN2 j-b Zk/vl"Lνw`YoSNtO/-/PhVz
wf,lJdV:g並Eay.4,21*.Zi/1u`=_gp=}Ez hGF$։;r,z= cV4's _oUN :$/싖2 BM }] 0IdʙsL9ti7Ù
nh7<1 ;+qT ӿYrV\M&ჁrfE@8S ^~GfXl u+]o je_KOOY
H~W'k+6nǨ+KG~DI UqUw~lmބ ~hl _Z(lZ/kxa^iLRdm;(7:kivF !LPD?Ȓ JNO^}
pє.jUd( Rね/A'Ub |6xnUqSu "a4hUep5`hE*Vd+Tr F*.V,WjVBfNBWaGYߴ/h@~KoU?N5ݰΊ$j7W/2D_Yjb5ե+BZ%p2F@F"WξQt0,E4_St
kN@
wVx(x` 9[Y*7 F9 u"@_c F*hg*nF⩥^
k0^k
X>;ntBM`.خ6KI#~!7u2:c10z*=tpgEPP(N봚
L?w_rH&e^E",,NE!>&Gr
8] p we,;w8H^vB{Q }Hs,[Q05Q|(`O@ Ҋ( J7nCU10 xCk% iEwz?' ]ڽ)[b?+#@WtÀgD+{xNۓRnyKܩTG6W9l~NFe~Ңݼ堆_-ixZa =pmGX@ QjWXjRu!}Ѐ'127W?7N; +.VPRSn` |[RvW.@;MlR}'w +8/wJ|CCԃsKg&6 pur(jʮaBjcOhKTxAiBh>""@@oN Mr #J0e )JU@K"M!.-"qf?KO-0nc0v|\ Ƕ^YkL3[b;h狂/PQ=> , KwbRYm: ~|Qdrƅ x̩=4*9>%eXǂD$ѦȰ =ǓbxڔvI~$4"mQդ(E_éhlym :DwTzV16b*`ȳ6mc֔eq}8KB(df,Qشk]䝞&oUL
E wwKkbs0 !9}026 H9l=^ec~5+%~ܱ
}& >Ԑ ^;#+do>$Q8XgXϲq;.*kdr
C&a ?ϻ^貞 xmeuh3M6Tݦ++*1|328.ۑQ
jnx G1aڣanG!}EXf 9JM$
utоկVh{PjRǏVZ`cH5 q
51}Nܼ*x;Z Vno>eR a BzIxLAWi2E.D C-%?&?BK3[@7 LK9R;)7F; c': zh6\,oʡŤi3Z]`Ph[]q {-Ї|<mg
xHj8{zu"3rU(-`}u$k,O]T9v҅JwXS)ا=a:T
t9Y6y6E5I.kI$1s zǠN"ï3r:14uN3 у[s`6G04H #4aLdebBJFq _%)iss玚Nvb%<#[*[(2R9+5r7偨
r~vQU6K-0;GDa6`壌 j
ڦW>twBol =D֮sc !Yuk5ۛB\N˙IXyҮ=4B6JH 8R!&ЫhaJs=ﱡ׀<ɒɀ&C'z:̋p.7!\_Fth!AH lwd
Խsܵ`Z4Zx>H_R\Kid'Mob[ldq@
$9c*ڑ5;[xګCrtK{o8.`>XRjv؇_ODCq&݊>@ᤊ1 jҢUg8dadVG( R7e eAZEЯ|:>&m e-MA hHYp
shbȐcaCI+k!gLc~pb$N?=P gM ~9xÕ 'ok ҭi0\ 0*ẋ= ۦk@MhPӮARsrn>#
ϯxVd䜸` g*A8a1ԋ:5ݯ̡h2 \AJ\ h2}|1sB V5cE)&؍ۓO@BY?kbt i@ꈸ]À KEhtmrt Ac0h1cj66e7YݗND3Pǡj֜ Xy{aw ":&%^/8tF.߰\wLXp,RpqfO
')$a7>Xn=~3Zgo SCr M R̟fP/8g9LEbG!ͤ
gu#ØUhdl"D=
{Ӎ^z]Uͳțl+XC-3 speMmE c+s_Pb^n%*_$^Y{}Yŏs>唬"exmve 9%
V_LQ>\p ǔE (]=o,S 6[y~ U<% IZx;߽qNX |^[zM˅u«/k3q,jn2ٕ>:[u\ے]۱`W36ӓڸYg R IH5Aud(fRg]ߖؖ ŧͧ )vLyVލ&u e9p_VƵ^n#z45Bzg @3vŜʨpͧIڵq`_SA{HzS0T5SZRBc6g&WN1660dDU`ynֵ̳mB@Nk1|c/aZǖ{q$ jQ
`>pNBT%PM(J3y}.^q?/
o1_'/85>\' ֵ OlkZuCSz(
fM~
gG0NP WKƆS)*m0Obʊ=T1F Z< ;tJ5FR<۟}\*"nm4CMC ~SgLΩ՝5YWtdk=K@*G0(yJo v@&*s:k4$48q-PVqhTشc )Z 1${t|YXzZ,1]sIN~Kv_g6JAR:LyIJ2u}g, !vy3Q-lRriXrx2#D'OhE6 Fr&kO Lcnq6~sz媌tH"{*9 l0N{`.1=o /kh(e] c'*Q lㅰ=cmX Ak/×K3p ?{ǓDn0Vb6>@!W#
v IF}V %뮦/g+M bʹk&YЯv`-L-+I*O,z{3on/ 2&k9|ޣB[v7ҬO1h[`"\X6oa1Ҥ0v1K\HӸ2Hl^8;Nˍ :X:^J9%I^ĻJ.'
VG{D ܑ9 F> Q"35;!oN N勞nNG s%qk3c/et
r3Ф&wu QNSҁRhhn?n 8(: g 1M A 誩.]7vVܳ2Sj"{Yz},!Y LZRk}D7<WgjQ. %
ZC ָ0
Ia郹1)k3.qϙ`QWfs\!|+PzR>Nq+nlQ AM|SuvgЛ\Ӯ
;\ 6091+ F
()\HB.j⢌Zc4BI Ijz yaLI#'0xږxaܡ,ޠ @WK3@-),Mi^@srYF_ G4[OαwwR 5Bqa!v!EiaaQf `$v?8_% 2A')o/$;п 'kX˚8e!,|˰/ёܱ k jfнTt-QrgwW~+eRcI@}1-Ɩdbe}&WOK 갌Kym磢 ӢBqON L$,~KjA773ءi
AQ9yʹvuUI! 1wN~#^/x;xWOVBrjI-yp2#=0(zn1_L1ͪ|Gɧo0C&@S`!Cw7i(v!= ,{CVʆ
~50p8_/hDY[Z_mSU fֿ8-ޠLsV}y0 /D} >\UOj?-壣UuEʵAgx E8jRB*{ 6&h\#-ތGD3-Jt5YwtVXM-Ln5_oA8@Y(ޜ[VDmOƸO<ԏUv}q*r#Q#et5@5N\X z.{aQ-SLь3i ~V֕ln^-#s ^Ts2ױ|/@jf #4Mqcy
| !Y-Or߁EI?XګB'U/_^[&eI+,h8j.&Z z8e
whY@$E@FX@ B&S^* ~\ 睅RpIϫ5Lr\Y|yvuS#9+o
ǔh+0=*,:bc^c½]mPg@@qMkVMPk{c*!9:I *J*P{8j\0@t,8a6/huZ0< `K;3¸ 5bj%+Cir)h|ZpÕW }
d _ y]˃=}#%uޑTԛ|'mV*xRߡ ޮol~ avWB ř!ni(``-9]|
>#C
oߛe%yIl
e,l;#5E \P}cOe9OB9Gf*"GtcTzh2ҙ|6,@6
/JR\7t䎛*cyz7`jFݽPOǨH23D*n)(,0m rw<?=ht H{f\d@>E6ë80։f6N: g#g_#4N=x4=R߷ɸVr@zT{$-C(UJ I 'U *X @ E@_E]d7DX)3=|#d!
z(S !d=% $6'9A<5 0 BE ӖJ Z3 P[:B[S4LmyC>
(2E
rD
is 3
[-
7[C 6F46e1Ry8|(Ic=Q J4y47c @<HO)?5ejKMウRw͝6ҝa6% WG}9tybW.qlfsǛňqґ
. r`~p(6-6=x)DE ѯD
9XQˬMɥ]+iφ$'<,K{ajw
i} Rȷώ=x+*F]>2cǬ9n.kwH0
颼Ä$*I≆U??-E=ۆ3K F9Oui/\)ap%8qHV|ejȃCs3hȇٵ}gWvq'T eb6%5 1=&q
QxN6Z U0 j:g 0"Uh q.Z0YYH.&N֭둄nm %
ʟs5{G |ܜ},+qu:fu?Ӡ
Ftޭde%Tg IAL 8.SA=Y0f~U:9N⟰a ̝a CԶd. LÚI]XH NjXTx`/ qs
bm#Z8Ðo%42W1+~ܫxTBдuOi݃b{͚T]"[
o^pӞxͺp\;o[;7$_pێIl%-"WdDԥ+5Iur"^RhVޗ[^L[P!/FT!r 9MD:oj"] hUѼSnT1e &5D@'DH,g1IʙxV?s* !xWcyM9ݲ'+ H knl4Y &bi 4CDZ'#.};'byVLJ6}q .{ @S#Cdhoު6h3zTۄd {3n@])c*9n<g +b08v.|A>/+zIlOw nOyG4Ė e|]ދ3j 1Po"T,JBw.}yfVx@!
l0ũ*t*hZFGhRj<ߋnj}#Fw[ ܘ ϟ
+O!*P> 2?NPrlZ*㭇ɍ>P] 総5 YlTKC,NDp!Wb 滘(>5|n*R@b
e
`LE{
@$05"6xR)Am]FF\
vYdi@W\gl"&k1xa
)%jі.&#lKrR;!v Gʢg7Ƞ|T:fN3=خY E.fQ24ʨ2Ls 8RDMa &f'#Xw1a bx-UsȘы- U_.;t xGH"'Ppߝ .X31 Ff;Io-R)Z!z6&T6w}p
Y:
Yiy˯ZC
HxD~C+6RUTEYcBHq]Kkrqp;ٟQ-vf\?͕(2߫ǧUSAJ%ՃHf;7 b >R%Kj~9 Ô oyw ܬQJPK3=zE,lMe`ίP"X[\Z 1o{Ny̅i E|>Չ[$Ƒ^V:c8:h:S53XCRr W#'qxmb*M_8fi | @wynC8+ #v,S\ވ? sӞI-x觫v=:Z`T-,9Y;-7$z*db`H[W oBiA^flΒ|d2eS d n%wP9q ׯ,p9#Vɒ6nQĹa N<ڄŴ f08&W=^8^Y(KLz5y7DxJ3-`IqǻnUR@߫&ilo|d0|֢g
YpQIqT BF]ONb3w^Q6Z .ËG?!
]L6%6ql1R ?X=1nli }qO"C0y= !l CG<_D prI(]Xt6-Vv IA/dlB%qH,]T4'PAj zq" B7:" \hy@eUMВ+ 2 U%tLl*rd
"D{n {֨=aGAF96r^'!qw41nq M TW. 3M] ?"}Hzh'ոmO=)Gۉ% 6knh;Xc XpgeI>L3ojLWkThC!?d㦨fh ZB <3':LNo"9]JNuWWu[6ɗ 1{|^b679doZ%F6Z. e5qMTWV}P$yȁ`1A[*byKX6bw&tWI__8yi tޱjK{8ܦ$EszּQKj<uծk4v.GmycCa"a#PɌg9jڕA=E\;3r7Q @ | >kvL<|lZ/r4{3HYp1 ' Ž/9ư")`V.xÚ{\@<Cg uqNojh mZG|&~/K/U9Υ* s+J1>F[,,ϖޘ*v$oVWgp_ SMh4#p?ԅZn̿
\/W jm;Ps=@b:44|".sqdܐ'HsZl̈BDRG`CWo'8!{! D
U1(ӂ;cX+<wmX$R غH-7J zw= -Q||gP1jB=n.ҽxT>3 &5tQ;a/ӽF2ԕwTD\zB%c`۱SXlZAl%q tZ-ZRg@JAZ>k
nH -2r( zoX]T5n]$~ し 1̋ĄG\ "IAC';[#]6[Ľ\R? F^=n",H 7fzg=ihl78.HV݉osA7i'J`٘f^ _j=GE \Vpm`J
߾ [q#1chw^܉_ޞ}i
ƶbQ kO
5ZBT1ae "ݫl$ xoezÃj(2lrcb>Є.qS)?P9
d
g4Td}o+ ]UNB`"u18$#UL
/ۧoںuISlƉ ҎS\k0؊zwO*S`G/p 2p,AWWɨ ?$ X.rYkyw^s`My5zҘ]~Ё#n&< 6gX*YG%l dA #QlwHUc""nk}^ZY~
QnE ebzD5(̺@/6䱒$<ΥhGVu_B7eZ%mfA+SCF5 ?n[$Dޘ>9B :g@+r"a:cY(aVBQe`UKQMܓ{${,frLb"#' Q/|@kjUZW!e E 5Vğ)h>ZwQe*
eQZXs!+u<`=N*McT:aP+ `VrpNBF \gTȳ 'rRwe݃kTFʵ~~-/ {`\xWkOɄڥ7/q6dbiE3 y$qqo}VLE;Sj&6h(8xE?i ΆT2֚`DWnR?+ @2҂ns1m[ZtQ؞H-) {'j͆
VwN<(E+;Ke@.9})}]}w$21Q_690W"Wl__\Rj*:/!#D%3ƈMuar0pA+lq-2Sb;єGZN9켏&UWxDI*:d/f[9t.q>d$%(9λ>ӷsحDmrc夭 RȒ0'cA,@^&ncN oM aN=: 9UpѕtBkguHaUS[c&*E.Q7ф_(t3 + 9f g4xUzs?
?H*q]Zk3\I8JyC lG\HQRBPk
$ =DDk#
W8- ?8$?up=gNs@ kLy~Ҝєo͔][k4(9_`! ɍQHbZċG;AK{aS AĘWתա F#bvET)O@e0Rq5Io! ͜P2i}_i|d-YHL ),b)zn %;W/ Tb* sPSJZwiCxBq[yDFx'm 91=!0I(vdl$t\Z K9
[$~Lk+ @xw~\ؿo!PqvG{.fՁ[ԵH
'2'FsoOiQ=" ̦L]35k*g(zQ،G9dl _whQ{N~Z;^Wt Bx
\w^z^K/!p ގH|(Nܧ C!PKZ*)T *;cc, >"&5e
؊xb!R类 eKe
'Ԙ"\gޝ {jD[I&&- NB} jΨ;`NUVmȓ: jӡ8[oB ~DB:}
< V |U V3ȑ
.@f+Ou K=gZڎڿn!\ SʚĄOx eҖl[\d:j O[W}[!!#y3{ zlsF
bF::s-` JTRž4Ma e? `V -(dL!Rm3_},t WޡΗ |ښ* ѷ]֧A fݒxq` )
)W_QQs(d 5fB,)J:ɀ}ȓ cw Ѧ%N
HMV7NݡQ˂6=Lwkh01;ymB@Y3Y/ U Т3ocϡtO*9eQ&]L[\d{EunRy'jIRvy-%(3h 1
Nkdϋ.0,ۆ(tlbq>y`/V,E @n *U{lY
¿Y#D H"B5RY)ױTzPT" Ck VlO0coBmv*??TM]:e"K!tBjL\ O{4%7*fȜNQׇsRr[& E,9]vVn#ҝD`^UjF 3"d -MQw٦"VH-*
bpIb /f@e Ҿ# "uJؠB}a_m urӺ缽-k%s
W&J@h ǑFcE)NK 377.`XPH6o&>i(+T ǽI1u.7mKrM$t,Fø"|k\w ho{4f&XB$~
JE+dak&$)l EJ\Ր EJB!=SM]OJԹY[_Kzre"* s8 ZCxX@6uiR{(nʦޮp\2 S1:OYVʇ]bJ^CZ|!C[Ҫ*1gmyLH<9Zh,gss8 [a,ĩ Ɨ
D@hzI)5s"@01+LU[R۽=13 SIʳ .t0N7W:îEEW3tjVY `#ŞEجVJPb--1E}ګ#V[JJ%4Q'S;P>;,1)Pַ%?%B
}o=DաhG
|H^(5ϻ6oXFcN亞ɗ ĩ g{ar&G'|ܲ}b5wNY&C_}r&9وʽufg8nxxI#kƔ53ɥV"Q S~['| )a&
_Ro1>Z)lKq-_6P"%x.2a~N [!, ֱX?! e<_Ghha.f|F0``H?gKuM !0W T<%7-3[^z6Q ܲ:rP-, ]wayAZL p,G9IQ\
҉A<8YMT 5aZ#Da#@#/a
7]cvT̕XY4%c^@ѝ7Vq/y1Ke&L+\D[H.@AurLdQiT_K!
>@,āX3i6YȫGH]3(aN{C+WQh >'N |xjG[Pj ȗ=LĬ TCeM_ؕ @'BN|3+8^8ijoF ,CwH'8o[8 ;^Ӿ!ȆB%=*RK&m5=GjDN*Cj/5:>TƃXY,M(yę@]`z*Ȝ
@UOdnL64_]dFsALW`?,7z
B癗qʎX>5ITO 72Th"c x~l 1k2T:tB{:7QG/ t )$}MFX8j Xd+4z:)qaq|g٧n/VR4b?V ל; g[,iv刡h*HrN CiؐJs8=LQ
!7MI^/-Ԗ)s]h0(TsbbU~ػp܈@v" -h7f_IR9È$O'ڹ_`-7D"ng:}$=c}h[S
HI" gi5韚_AQ
wuf
C@ʸ&U[2$7͔z5Sqh_D?PRSxt7 {%j1o=CbB*gNJS
tUNY|
YP8 Dg{(b t& $٩+W8{Vfy5.ˏmk 2dЃE&qo:a-"VE%ȡRFlԔ.^
Njy煼szw+!>[c: Iz~$i;%NShi=L.ϋUN
O}tw3+Wk*3&^ppͽ
3';펠/<+Q~3$r>x
)di? p990"-X=
Su؛hgxa
!<^
)9 H -\ `~a Mfi AfTԛd4/mXmsV *hZa,H|ep~pg 'Za6zjx+{{ s1PPǐ:vQOxo
DJ5>g 8{ L4'!.km\ &G@gIl5m%nYQDRҌ79fEaBRMO%\c.61S ^ߜ:$`t馢z@ l+M$"yj M_T3îiy)/htZq {KsK;Y{|Pc>J!
vB#
?cI+:BcU<m^skZS"xy<
*+@~BKŰ 7\3rOZt/͇b)Ws%yO]vGM@3nHBJ"9&X6l9>aw|3E1Ed Dz4"ܣ y Be&y? ad FZS5b )F/3zU;H7g:Agx̦)ӒORzǣu5"FJӪub䴆 m=wy܇N^9,QT2++ F[4oB"ru
|% :X Ҷ0bd3oc=q
N1bb&4^Ct'<@>>4۰Ӽ-(o= "f9xBgEid9 o';wV rc"ӳ $[+
d!LDEu , %~z,q>1ގjI|`(H Lݗ1_.WΙ|FX#ϸLmB= w 122+*jVA-/cD#gta&,J}PE ̡~/NX9Y@J[x'J/FK% *ıe,nWthB7¿9Z 3sӜB1vRy;A(p4CQ-(xn@k`* );jA1-nXSҺp@tצ 2pz b{+6i FG7**_D cMyH IU*YܫX]mjeb͒qpeqJl^MLx "} (% t
Нjխ
r>ʛeGbgRi D+c 815mbMmnRb<ts|i%X61?Ɇ!rXV ւSS#7aokN2<@xU61Т+xňZtùd(NDT*wyr:!tSϑw^L- P(2ADg]ԩOH-`i
R$ Y 2XzZѕHݓURj/{ NJ!sb2T.%V91y]?~ǚv.HVd&% aQTCD M+7yiOȕZ0%D]:&Mj7pY28bZ8D҈D=K^N:S.VIBdy3
X T&,
RY-oaj sϳ<^ W!S&z
ߨN h RDUm{i
bt~3Q׳HD'0#Hȏu>f4xЦ,Dl&W[~\/ `/U p ?%@m[ty|h/ ŏkj/ 6*:n%Va ZMEFNӤ𑙐i4VľO;O\C|
M+Q
7 /Z(w|ؼ {eAqR{_a-hbl>
e\GIi{)!FT`Zl-aӔJ]H} ގP]Ch6b#*?X\4&~L E)ñPک I)֝*Vyr>0DW# 1}QkYˇag 5(͟I?Ѭ#^lzh 7,ZV~X 3岸97lF/5 v۲6 p@N,I,I>FZ "S4$f6kx\J2дo$ L-ٹ;bc*h6Ԓ g Q!1s٘D'{ x}rz; 5? ̓y&T<Wtb&sὒL@u]$'VѢt0nj /r@QW˺_#D\|u?Gfhx_G3٘$J-TI*&b y@/ iݲ?y!W0] X»P2y"!@#ܓ@q~ޥ.2EJwɔ9}5
:սrp />xFTQIlv(*2 ٶXOQ04p/GqhʏhoDAxGe.&$3^94:}FUFqZ
hQT|,73PUa |]Jl
|Ȧ%b튞TV4q@4q ,+<~?7@t%xw_\2t1%Vv`AC{x[==FxSSImu ԑ<5'4iBs"8;j=G<Ҿwe`oO{X;DTIؑrh K$T'$ D,#FXT-F%+^*()y{W]b~p iHIN'C9U;f
;p[Y=KBRUWx2͉jM {
Iyji*%E |*T_e [aR*lmUy:%,\> :( d2x~ ůaaz7ܑ/ WDxC2{<c/.>[ܓߗ@[]dBgKMb)%h2Xlt q mMK,zfֆ4̹y xl $j )fI&0\BMO v
&rM
xiy[ OÝ _4[ ;[cIMvny }N9 3s c(3ur?d8:ިl
! V}јU)&rLs8 <;bts+Himxi @DaIW&9-$)ˇ"$<.ifۂH]JA(0cTUȕk\f9!`Һ#jXUtB d˭ e (Pn); SĻ|s6w34@Žq"Z:IT[@ kۉ( ~F3l=&y[|V $( qB)[0&FI)џ _9( X pQsl`TF,_֕'Rl[ڏYylzvÿj)oDC|& ӻ[1ư
=o0$@.fDЇY[?Ay#A(M/-B3eW@29C{#q_֊K9M؝X(.7c,qS[xZ' N1ůXKO%d@>F yi1CG?
E_
Sݼ)a!%u]HvɊؑ #]? |
%p`i?|u^l(A| VGR. )},xr"9U4܇Nb췁MJg WT+ H&YJGX w
M[ÿ`&gčmδ4%&[t!76=a' .<^W?<3BHs %
PzG^ Tt {?Osyd ,#EbQ#6)g楾E@M9nk3x[ 'mZV
Іy&P]7l- #l=0FX{\M*w}0Rfo_MߴnuY_Xbj(\
=B\Q
lh ^&]/52=gri#z 9 \hL8 nT%l 1PW\KTjӔ_)/ scW .< c힐 M`9J KT^К!$S_6@z4w@2?I%blTͪSBTқnM_<:hGؑ]m"όYuAΝzk`|,ΰ J4ŕW< ,K{ TVpS9E o ~{ iq)FȮ=i~0Bd(k<t\HOMCqsaJ%
}y+̜ 1"Kt9˛ e4 $elߍ u& auu S#YR$j_#,V(z
V?PC+4UP{k%E& Ş{h.FcDBiփc\P Pge NGm%!?:A3r3vuI~8n a TΟ, ycs}x} 2 2m5F,,phx}sY"cLMJ 2BfC-Ř{Miw֤-u W0= "t
Yk{H
Mhvj$5ncr S3EA9
9TpZ| 1H҅-lʜ -ȡ2~U^;,ﵞ{hTS{֎7g$b40=l[| kL;;
*]l B\c@
Fk.+hy
Ea8cg t6>f'WV2 +ԵTb9YrX6,ߞg#5:O
3Epݚ=bF~&3>ud4;z k05a(Yʅ]1;rxc] ORN*W "I/!kߊQhٻ0`` zh S u"=K2ɿ&EDž>Xg 8zϠOoIl;
13,ޤ = ms2]>oFVf ADtHW8 qu}ę :G t
$'gcKL)ܧLpG 7U:T
5Y ?@[geޅHC26yS ZǂjF
=j 5
M̒"j9 +Kg1Ce}ua觋JR"|ZAŞ֮: Wa
'~_ N iҐ h>r߱nQ^;'ZgW ?\0Rm:n6 z؇:cRJ{
;* 3G ֽŏLw4{ R.O]mʚh?+j<
r֝F)X)c@'>ઢk,ʷL?PkkXbJsfyƪ |i:[17MXOqľ啼?8ј|h }Zdf!8:tЭƩ3&z2r %3P> xOpp_[V!+$P
L{0SmlL_4,5Ht<k}
XCb/bؘ}ܞ#pB!Rcrqʊ9#ݛlop4: d868#Ӧ~̣ Q2oP% uZ+[fY0)Л%``c g3zs0sMqe{E,WP4sVQQ oY(< .a8Jzi3g`QG] Q,1cEH Qo90s:nkz6@`Mm PGg%1M7~N$dX|J¥ăs[VèNLi7 dO49m9Yu*wA ({ :V~q3r4c i/BX=ZJxϔ[Oe? +&)p䧗C|
1ާ҂X[Y>~aF/ƺ.B{-lM!\!T|:ZrR^КKOхzZc5bso/ ; >
*kizw
L6U4zEÜC}AʤHL-aqp8 ǍRY@uA_`85
\*NF i/y nz$41LI.GR #d KZ3 ~ycF~Dsc
Vq9uPBqQ7873`N'?q_M[O
9hEeD%4yo(P#
GnY<\{ex,X*y)D BDX)2Lf
o
EfP%JbwO* {5 wHyl,Kv^ dPeU]
59
QR[rV8jP6{ӫ;GFs*ӏ DcCd6ò$֪-ܲxb'8hݷLws@( )h8 [ Ԭ_lj|3) H\egxeJ2u7H ?m TTJs0lRfVo-,qF rӝؖqm<2<< ߚ/.6~nvXM^f#v{oltI;f*X14W;3;{zh)[Qqf<.mh΅I~8j$b9 FC;.n,87?P
4Lq&Rib?Qe
_b H'W4fP 97HO-R_
j0WϬnJ˩|b
!*!}eH5GN?sVjEP -I.
_E*Z&@C=F3{Su .2]x_l# ;M (1cɗ#Z1:ha gT@e|Fy(oof^ : X5<6+) TBе)=_#u y*
A۽fE$̀Ɏ h. z6 SW D@:iٿubFcwփM7KF~ )vtR.NҨk~[M 7! =qWzgw7P+| !}NU7 T'埈Ey. XݎZԔQɸM)n.smahgQ , yci>\BRMǼtsS$Yd#-S'4B.[OؓלgF'] 9٠3Gsf7 Dӿ'd$Hu"_fb=dPɝ|4Ƚ^%jeG*(T£)-W-Y'Ab <0ZTT%9_.vVLR( SI,kceJh/ PPTQ]ϸ{R&wSiݿĽ D[m/d
٭]n*Xub5wʒU
;1ATl#%B ȮUP`ƖF5Ҵfe1_eu%ԁoo'ak0د@~%r0& iAqN@=|QuGro*(*zF6 כS.d=lYzb!>zq3{٦.Yő 6Y\oK$ns
!QV!T/ҚVùxuZnj
36C.kB9GG}oi{+#h'-M*%~?WDsN%t)azה, (ŤĠ 00́נӧSw[ ̖ Лy֞yK' b/V&UU fmwK/gYܫ
.vm%}^͋wjcr87j?) y}g%
Z*:+F~O3՜W scr C.l
FPXR`h~LY Te]6Br3 QȠiYMH=42^L Jj ts;/nCR+ ڍ,23 ʒS'n?^=óL`pg]K"xp՞c1PEڏ4J`҄EUA.C .ENpOd688UG5r*`ydiGex9 (1hjryˎ4yo0,F()
Xa#)b5d
HEJe7# ]+Ct47U: ʕoݻ: FݓyxAm;4n)Bɱ1+[$M= bBRúrKeƠ4&brL ԙY݊BExA ~hǹ;Ծ\͝as ^lQ*vVx{D6iYY aC5^IҶ?v=ZN6gM eV\q͎h
Z $ Rg B~O7+lZ.اh~6hSr(fxC4Sk?ͨ%CAb_-\,ɶ Z/2G ͥ]gBWG-MO{gݷ%t7Pۊh B,fVE++|nߧ`tَBJZa4u1\6,q, ~MB(3roD&42,˦q$.Y7Kaj[ߟH$MKd.JrC%X;;ؠDN\%ٻ(]HpS Dw}mJ) yqqDz$ R+VU_j@UEu46N"NZKta9lLV5ctŧZ_'"Ǡ t`$j`iKZc`&.F -axBƛ}Ul,/W#>
#9D7fֻ[*)/,%3@[e: :R[qNU9 2F й<{Fzv{@aY3-APM/& UͤU4o)&{@h!G:ɈoA_Ń 'AV&eT٘ $co#@Jcƻ07k41ł2B< yՇ鸍v 57_ G{#e 9,^ /x3",dW\Ͽ ?M=]D-q1MybUʈyl0z=;˞fɏr>Ɠz`j*)̆$؍X\¹R%$iTN䪉QtnBzRXM_7nڡ*)7 RΛ&+oj[):.õ-v3S{{ӚoR[L`y3\JJ[F<ʸ8\ߘ'
"TI4^;FΈE<ɦB-g5 &˵t!%wfL\#aajI< |m X]
WHH+TņLO9c
VF
Nwܽ. ET8[^w湺@rq BWb6CZm++&脲op1s9;QwI?u4$˨>i,J>[k_
:GծN/o,톛^sw}88thkZG :)DNikX3fZ1-C2@[_ )D7:ݰéqiRlf#MQ?
FgMqtʑ#ԚP$xLṠI-L]bMe&g[ԧG\=TL`M!f> Kو0R
>K]{JW`*aN h dT l1IjSgܽߜ
<|MG
>
yDŚgh>+=#"l#};/Z#-DFGq+(@{a͒ *gfGTfCŌ 2k-Y .ONs[hvJ|6{m zb> [gw 6 "|/ k"{WkNq;b*uO|BDQ_LO#L0~F#<5Kɞ#I 2& ޅY`!oS:x"H"I lwvd k*p(<K]inWwkCΣ?b=g'Кu
9#/d# b[O\sQ_QvS\؝RC1lcgsң F< | 5:ulki>FV7æ Uz8 jU *pDhϵvPG3&Ho[#_!{PE>j.
( Cui%X)2ڢ[N3N:"~}ݟKrx)$'p7r:
Q6b2
M7'?;g'Ur6ΜH4Fwژ kI6ƽIh7quNgmm#X(;G'\fA8YoV/-n"t:ٔv6 S_ dw'1 ՞40U%eLOs57¶qcc/gcj[(U $[S;"=3%hy%_@Od^aNt:=MZB ;pglcKij,z͔~wmCe!WL{p;ټ@U$Uc[F#\ˬÁ -{2Yn+Kʝ}C┾R>H(*iث>e2N"af$ W_ X#r~pn0lHwL-5:{# n5t娀*5g.7E[9-#YS,P,}j#ŧh\ 3ݖM,$S_TDt
l\O4d`
H" Q7j!Zؙi"92}
}_ExXQ59RI_W∅u`] W wim ~
_/z_2s 1$)H]mOERdv=*2|Hћe^ @c_9O gY )
C*<3Ƿ3wIyan*Vd? ]l-1Bگ4W~Z|F$dAcD,k硐"6WSXW"=kE2d:Jҟ\\$1m
d@BģMx}bS9*R_@ukHU칟h^ OE C5oZ i1nкF2S# %!ɁqI7ʌV!Qd_&ͬ 3]A1fs/,*S
7.^jLVhKlIGnՃLlcyzP_n6u .ӯANJ xS,`'ۯ f Ά|>A R`)dM4
Wv{b(yPqbʂ8
& '@/QffM:<-whs5sG5㚎 +'m*Wx-Ld0,z,Jm@ ɀ āys}4 ^luk]!q^Qʽ4fbI
%N7vdq=v (^Ϙ}E:o + -U;^V?Z A*؊m, <$$DJ7"_.7Ը7$Wz~9
ᅬ ]PW/n#P 1(%xebnߗ6zVߘ<0]ɔMWLv2/-+< =+Ӈ@~b=V'Zn4?`Ѩ;̛/`QN bDiVGClqC:|ӌ5耘7s2qB> JKbOQga[o7T;8 顾ȕ/ AQ 5~4#ʱC -3ᩥ5Be4.ˏe/Ih@~( . ~!-/ڍW$asyi@*X
n;47#K8\ *ކzIrRlf3m[8\fYC¥H%_"6~g @^\m^S ŴNHX^g=Nn$e BȒ-h)GM+o1#-ՋXK`M !0cTĨ'CY/2!T^OȨ\R~,@ņMh2VŪYN! tH=vC}egC:ȶKڣ%Twyx6 #fTc
}aVi2 ¿Px륀$"Vō kgl ~nUCK-N!%ڨw$f̅^H(2nM?Eԁ=^ 84~?MxH:]gH0):EMvo B
L}&bNQrX0=,UG:xn9;=!e/Mɨ ̊"c" Kw0kvaH ܹ㈉Q(.6u7mun +Z2a/V*dH8hZ1RϓH!WԎ30J p
B\
NQ& IVEvif34{L;$%T NݢDlJ"PDIJ RUI|薫Ƅ:S"c@ -\{l٭xu0/x Ks?Oq ԧ=m B~DMX嬇3) 7PPzd> UV'%\0_ 5? -/S$LF_}2^zE$3 )uoVozS\}]מ!kTFRM(XA/J5& xB@[|o){s dhFV;U\ Ӻnt^ +`5n+m4`&]4#ăy ~>՜ /9"v$ d47D 5KѽX
$F[:dy*'>5`v)3f0%fvYl>MZjt8A8hIYQ'#A2'Sɩ.Qi? B|[}% C )6#ſZ5N ,c[|0\tnn~- \R6sePaQ I!%\Aplوh)Gybqe,MA>)+igZ3F+GP&Gx ˽
EoA.OCLL$T-jZS5W4t Rp?k,꺢Ef= 1뗧|npvVvG wl=ڎ 3o3YuoWq Og_F˦7lJk3 !h(]Sd\g۔ԉLV)mEXL=D3MO[1j&7s oDE `N&.J6DlC8-v^&l h:J/*6[NqK {v9I}]ӝB!9Ѱ}!ʧsK~\; gޭhDzA^ԌcqSe>{ºT&YMj沛j*.?lP:" =F?e(vC9*|M湪vVŸ//>0!9 'FP$qܔ,KwcV>
K 7o
)Sfh [@ic
kyFd15t\}G}ץ_S (U__З+G}o1~6Z'ߞ) =jzsC܊X(^/F 9
EJZ[% m3)Ś d9(n͕!
*?J!-
5;?IJߴa$ ԯIc1.Z~ 篗B
R1nm9 I ލ. Ų4/qxf"jTm=ul9UHVzp[%(dA0m[h?#LZ&2fi. r Tffq]kN밼]BF'mj] - 0z M՞OK LV}^rPD1mʹP]|b"!]L9 2+J'0ww NRCHLG,-o@XeJ
x<6 )^+ H3۷[$nJCZ!$oZ.pP&[?rsFc~Ɛ.[̅tFDBl}'v ?xWmt$m !B 2,"lGWBn\~Eh"h4$[Un/;N?V ED G <#m9%b>}bޛjYtt[ |(>'FwLi+ @oh{S>h NPdfL*jLKeI6 F}'O (x'΄&rC ?%S"r+dr5 *E_)̔$:G ~*
*1fUD4Se
M#^M2a"< '<7 b'E 8tOPfן o Γ֙Z[ێ 1OFQ ("$^*˨
>(ͣn
V/p_*aŏl fh 0xݚóX.O.n{^BSqxrJ&W9~zױ#&q]r{qRQ;m $ph.lg_F¹QE6Z .m%_`} h 6m̨r kn(,MV2| ͏'I_i_'B&ƥßzlcFVs ZQAbo! 38J}͝z[5f|AÆ Pf)/h %U3wk}X8
% clO K=8" n:3Y?B$Ó"Y~G{ }sΫĠC:0. 2/L VD̜ԵWCܸ@uV
t뿟}
h i^Xc0pm\% yZ] 4 DXKe zYѐ}p絆Ӱy+CN%7?ӆR|G|[olNcW2 'M)C/}$Yﾓ%N'гf lR=wud_l .'_ArƉD|^"̙̘NܦpEģ.B>=q
1a21A:'>SaHˆ *$uFЧ7Ϸ|U{9ll ޅ&8֔ sel4zkF 9&B"~c;t";+8{jg}?<&D}ʁy938vQWeK;Udy
k$,mi?SOoyU05:Z,~bt۰ ^<{cO`1yi a;,9M ~ؒ2-%/GU̟+gLa
Q1f K\T,nϑq$U5{;fN_ƕQG٥+ֺg}
S}4v̅pj 3C CGΝ8m#o7Byf{áy#\͖r
Ae)&Mq`WhQ;>̏ ^!'\kİ9~X 6;0Ew
>jB>o*Mm`z/ز7Ax r^6)3T/R )|Wc:fUm1
KɽvH} 1zfOsP 79]Z3(~6&EFF#sl!0=9|4%TBAk5 u}T #Έ)}}Wgz,mؙQ'0Cp@+)AY*Tԍ0~|sx^^Q
VSfXCRz2!JbC)W .;R[:lUQmW^3$ R-Gog8ahݜ,8?Gw@ϤQbKE\
yv|/@ƫEmFmmr&L5,
-Y!dSX)?k>$+x&7j 魫!13BjN۳&4UHx=k)]h|as xC ywL
n\1Wq$cCWX%G|_#bLwSO &
M;@dm&YL M][od**\: >Xhet5脊eXP{ݶ}ȋ, w 7s%@g} ;4LnRBYRЍqW8Q`vlG Ԓ䫙pwpf^Guh|Mqb | `V3%L3Pl]l%Pl BnEAY٫˅ ٴ!]dKa _y>:9)OlqI[ߜ!4GKVrVUF.6QQ yٔmbCNMشiBoIrz QBP=% >!*:٢|/hsT1FTg?M- |rC< IE>D/b/Xx&t]Uket" O('~6ʋ(u[ףdIPֈP$r%4Hm_M uT~(E=b%2$0`YG9O:v(8|ք 鯛,y 8\ KZY| h6@5k~3;-Sq0w|U&ﭩv8N.? {*@2GA
.B 3 S''aEaiՎSWri˳FD!
\y!=qI8\x? \48g]p~.KX7B6K"7͎dm.c>9o jH(d<-[(g siൔWe`evMQqv%?SY %َɅg<@
]U
.d8{ .n9oRaj9
_H?$ erB#Yi Z*u@@
g۱pb/%4짺g}.Яo~ K
xU_E~s0xl'}A ]4J=8[Ѷظ3WR0NNh.@$[ n )ʜp=%m/h`ʘj:+0](B7g6 vTai !=[Wռ-t!h,ڻ, %1BD%.C4 )J
.5Pd+}WHtr7OTN_
m;gR|hHXr>N=eu:;30lB@`kgG:eK,Lʐ{dM/ːg"sp (3eF)XAY`.˹ss #}̶K"clph_r/~&ݲ Pvcjp| I:N4*Xg.zb]a cF 9)K3jNVW3 -
ANP65İ(?#؎LGBMs- O0~OřվhZNYֹ ;duWY-jV^!ƐV EBHNĽ `dUY7!:CѮ=h96{ӲwLdN @=>?b=ISV>xQK 7Kk_0Esǿx~Ao<
=90-}JZqxF hl{|zMsm=U3=Q2+pqP^
8`
wB(m#($3=-u2ԅzB%*>>ҲPX ɕ w rr pcVڢ A4FYohXUF*xbz͗15~{1 Cҕuv*0 G"8( c.`T&h:^CJ|߃˄Ax'>0:* B[U+ c d%oV+>dG}w@e|ݲ40 fU hJ&G a5f/r!T| my^2sШtQ B
oyhއlm͵+|u ycvp
2]?S]b%G
2CM6"qׇjlS|PH\ č9вRsS
ԁK\ݳS;e-g6/X}$XF9pj!{bmR[Nz̜d{pщ09@0- %ޢP
!]s0Lg@/kK!P
eU0M:|Wٍ drH4Yq<#yը"u-PE) %E_ )-
/}j \SBw/n6;A xJa lOx@e1n`B0w/ڄ{_o`3= `Э w~Ə7V銋̳3~6iOB:p VU\>L<"Yf)֝ J8%5K |(h.x} l(?-%#lʭzF / a LEǸa_!ɂ ISvNUFT7呻s`,m(aLYL ?=L{[@
o,&2X wu3sNyFa j,=w ΆN:{VhiŭedYHq)qLښIB8XGHWTi/\g Q/ V]a
RY-O ڏ j?/ݫ\\q=t1
+ 1K
ݨ˚ jYx{O Y ҇q6%z#=$K]ʱ
wUg Ʊm ZY s\Oȭ9dS #_>GJoyG=\~k_H\G#* v60f̀~R:Yjt9mw=07pm-ck^+C [q7
U_Z8)SS;z֞+J #@ (*u PbӪ ?fKlLH!~Ԣ;Ԡdmޣ CT 5aL-ĽHxqEK'M Yn R2E8Be;lR GJM .W6x,,#TG9̂{2Yu\GSIƣ|g" mpL+i8%X<W Y ,Fdž 5 '1=hw>=][|J#F6QPDbDpn[9>mݮ\q #zL
>D$3wq郁DϨ
*ml KOW<4 *sUnj2* n;1@Q]#cH<ȽZ^1 "67v,C)9~⭛Zڔ s{2mA>zQsֱIcY8_Jcm߃$psi~pYsWK̥w z4$Y9\Vo\qDJ]LJ ;ˏuOUYyFX'ނ3r# >l,grZ&_Gw[nJ@+8±k, 1/b vC |m:c00SN4ۜa$w;= Ov ׀͔4 {d 34/Z_縆~j+ C%9Cw}7BsrS-(".ˆ﵊xɠP8o~T +@?AxM5:Nr䎊 E7LA͓h_0AkD-I8tt<H@?[ͭ@ ̿RFϏLx3m q `Sq=dM#ՏGg,l[h p$:X #GM]\ux-c kuR[}U "O}2?7i'>I 2H\xD$Kb%cːsw5cIY&_pʸ}:+DFUi!B
5k0s]c'$fRO
b 拞X.CG Ű82o9`Fҫ'-2Ŀr0r
}(n+f
YnWPD @ӏJBԛb-,&K,*n8XC&dޑ0K-6$[:j#+&GLg q_pDT 2T㽪 ]vɮkDDO
%S9_fg e]:$qbh|*3q p&5IYO6J/3%Z6+_̈-Q/!b Sk7ȥt?g#G=
gZص-_5f)
릃D1w1?` B%-J͋Kַi8 I0.FBfqa|[lǩ%mSg~%'P Ű-rÙkQ&eAA_ }sB˜ x OUt8Ժ+Ue{ 'u&*Onn
@KY"IYȶZ:ofZOt%Ϸ3ѹmޓ %Jtv!O蜹-c֢r.'܇( 3}g SUF|䰌V`8!4EC l8"5
gco!e ylw9)պrs@ ݵ"B̶ELQqȝ:1a4i^ZYp*Դv?V!HC~B~=bfCi3HZfZxCL5 zlaeʋ%=}\g9|IeTT5c \k>s r[nm#~ae*h-jo 9nK7B/qtxBEvgo~2S>'X3o:?Sam*$E5ZSB0Nm`t_IђXVz%Yj:4FR*G2W J =[q*xVA;2;lyaG^2'\,<ڟޚl1u #50N,ur{{r
/ٟ6BvP0kX_K2owhF ..9U `L@c(IFkWBfi#a
Vz]
pTP]xeC ꡷l-Bm0K\YylڙG+-"is_:R,S[w)iC}#_.n.}k(O\
w-((ګ-(/'r?N
H" R \@T+/ `rͿ! _@7
kP 2 Y[L xYR8
z45w-GL\`0'Z2oEr )r>2RP@Q*t"-&'6FR2;d'QH*+߰I{l K E!2$ȯ:n5HTF\{0˘&(
$KW%('Tz"v\0Scr,/ZP:Ex
?g=a#uXSutM2?S}_SЛOm|6ȝ3a`DBϳt1eܭ=
h噤
1m)G vI%
o#HL`X>EGu{{~!I4] }xlcksa F*Ft`}Hό׳/`%FnsOV]P 7LR1A([B\qqR?̘r3X/ ']@T[^;|KȪ&;AyyңNqEN,8u\>: ,
50v=y"%1qNFm^u 0BC==>Au* پw""*1RnC:xYN
4`0iӶ0-6|C&3n {*AN>O/QNL- 7HE ^D"&?}s0 MPwPڜkfDa&x<5 qCѠ:
C؆H8c `Kmn|G;A C+;pqt#lTlK¥s<( i7V%Z!Vcx2BXBNUo0lai $/>&A& i u$:8ӑxw}F ~?dl bBIv LLiR̓nU@aJC>A0-&}9g ))}L%r 4cҋnTWHL8kB5 [VPX6lTg}x-=+ v}Qҳcx#
s+v;KpڝHVBxZZ2xJ4ޡ
TuYfk9Yg9ےr+ݯGlN&H~tb:trj%јtt^KZlhfp uLXJf͆&>dtk^&K
9_
-]H
iFo0%aX2&ye Fsh6AݺDWarF(I97KwIuym &麚 ބR X+V-cw}JU>IUق˥ \ӦkD1+^&\ "ع_Q?蟳z[A?+QNWę0hzӸqD ` ZM+=G6 S NmWb>FaVu4nOc%lͤ7Avrs_/ۉC 1ld~^턌[& _#<1ؒ{g6
އTp&, :)Z>f*۱TFI0%p<_Y2b ,8s-w}q ~a)}x=*d E{pR:y3e rfLOˏemueV5`eV )R xndbw&4k
mR|3M4^
']Y0@ =ͮuTCgHZF.#WBǗ[!=~|x7w㗪%Xa#6u}̺PJCIF HT' S.+wb4F3F%/_Rh`0Mढ= 0{B]B hL1xet
ÂN 3&sCXZCG
voP"8n𧕝\TilTo;JA&c&,1L}.zbZǀщՅA@`W^%a*3NA G/ ߑZcjj 8v+0 ۘ}>.CB G
@(2ՓZ$$u0ZCg '!vɘ`Zci*r{t{) wO*uuƓ*f\e([JdB)2ԤUѩk naJ.W+rQKߔqʴfQe;%4+Qp@HH 'N[4*,[hGtu؝+`=>Zo;8;VQ:-){4ג
M]
Fx} C%eZ2{v'^uVn8F琐ƄDb/9
fZ%
2o4~v~Bv5F.(QT%#Af79x9⼿K@qT]Bκr0LԍX⫥Lqxz}Ξ==,֙9ytN_RRr}WPl7 :"D*>l\NRB"oʗ0YW%h%ʹ J8{>OǟFA(ʘd]t|k?dKAQk+v%,ᩈ+pjr Qkg0Z4s38W7jiDz[n%?i2RO)lzG_Tݑ/33N/
5#ݫė).,.QR~π|jq f,
xWOi[k 3.dG :5TW):pj7I"8 : %V
# WV¹q@_(aimBOCPm]܂Q|" ,N $$|s4O-a*n 'cYSnkrq\Z+]-6$n3L+1:
ME5Q0
szaM3}}bW׃{"m(g4h ]:lD bԌ{DҺ$Sjv2v}
{r\NN$2֙u#, LA?C{cm7$ Q$*e8K|[4*:zmb 2/8~}ىF>֯s[b ڱtaX5{ 7ƫa
k}DL20,aMg)46]4 S}ŭd[.S&r+xƻWTpdբQy+F&>rnh U7m(Sq*ᇐ5WɅ
Ԟw60 b T Ps egZ2Q" ~tN()7@Vʛ ~
T; CYW;gdwP"GըPs5v ZN
ǂ%!gԺL H{wn2K%; {x0lqg Q| pjWC B㐻৫@7dV=y_ffXXH#$7dfn2>x6 `ӉZ[iߴdZH Y#] z1\v 7R%WzX- ptmk!ݲ4rK)$ӑAY,-%wt6jasun3 R5LDO 'ڧ{ )8,w"ļ+ mLӻFi~P1z3Rmӿî` %F|t0/x'ySN : #2܋QM
P h(j1Y'~Rx M$rf1BYEUУ}MU?0ޯ zҋ%A21^_GiK5("v~9@y9Gz4=8aH.`&D i;qr ޑLn\2\ [t!;\^3;8 T^\bmoQJ9;:jR̐>Y| Ka B"2Jj N lGq5*4= P=J`t K뚺MA]#q?% צ`anz\}//%{J
>a}* ʫ)m&ИEmJ:%] 5lLC{w =hIrV<9&B1Y
*IFTrNy(ߙ1Zӏ *:}!$J49vV ɹxٝLtPդp0gĤT^ /j饬{ v-8Z]_-(q ~PI`@4:]#. UY3%1T_"ʒa9qy,w𑒠Nק
ŋ3SF #@O|/wYoM
cs綾]Pq"BNŶ Ԩ-S jw$[(hX㥷%K
g]LE3P॓7Bf >8N,mZcU maALƣ|.6cG n3Ka í?oZ^%7Öϧ띭G Po7z *, G(XCEمiQd- t+2Io6iLf"*1
m2/7!0v
`hiOq>R (Pg xri_T썳 [F뭷c}T GS@l9wY`W&RH)aNWpi%+9{ >{oLIع_LV*_7\&~~~~+d@s_5)&(F h.$_S#[^11ǥ#w3/h$ ~ )- }9sA:2@73oAI`U; _yFۃ
`ݣ͚C+Eo7e1 uNIfʶe~ѽߧf-Jecnض:Vn/5"铊L'NvLHk1_Ig
}M܂}gڻgY#H&/#I0:Z1-
\wzad6pL+'5H^pSh@ wD"/"D|yZ&Ë WJGB#i k ?$b2";4)X"36T cP5/?EpH 5Z#m<~Zi݅ Ϯ;o|nfAj6Y"vb9w!o&`k d 3 ;C>dž}i)Ǫqtd_:Q;
wUn
iv^;vW'UQ5=aOO5N^hJ}R9> I0Ư`'P{O}3s┆[txD95ZW%Że nbKvo z=90;ͅVb X +[]ň)wεSDGRdگ
"HoyFf9"u,̪0,U]\yp{t^6t;zMSSȧ
4Iыm"m2TB&JO9*DV-NZ -rk;m;[ `xD#*.D"FJ:}Αe6\u_!וATԴ]ej0-X:N(hUO~b%$ vp"$oapi3.bgyRJNe(~bH{bA[ײi!c0}q_rtw (;c$YL: !A6dy=
z}'gN ="|k̨Z{HKU&w3
74\Zh"Ra uȖn+MvA.4B"?Ld$"()i%+5ǜ 4'cN3<&}=~srj4;%msL jeJ*ma ZFc似rx̷D= $ ws(fBȅRq`R;c_ө?*wxN`Dj&Ό(X}7Y-}' Xc QMCu9FSFBzM^2/` ʍXO GY݄gN\Er&Ɗ % f5Y;$0rt%tNMZ[0ȱU֙tLse @bt=+ .?
}zxc1ve ^
qe 1zeBEY+dlv! : `}R%@3#, cP PKR1*Dfwgo]6|@q^zXv XBm0ߒ4Me
: f.(G{ '`UNr9US8Rrubcvd{$ Rm'S+ %qK:?GӽnQ-zXX~ບS,mlLh)iRiD|blSr Dx+̭b41Ӡ"vs쪈OrSA ֞L ]kEU?IaTI-
5G(=?-r{ ֝Houva$4sϬl& + @
{[D]v p2
d3oUw͛h1 ,tnҪ N6 տzo/8J`ө+s0rtq}; o}s&}R^6Vـjb6{gcUԴMgPoVX w't,וɑ ($xgϵV DmE- zljb
cPΚKD~JrS?u樧 OY\6).94_jZ\d8uJ/k}:Vm y )RcMP
B5MyBK`
Ԉ!ٷۯ.OSY #&%`hc8cNKpqqh!!w>CkLT8_K ^NUCE[Nckk lW&eWx:
]$⥇˖;=~uq1.$dQx[OœPP9lVy)Vѝ']ER b2;;Tqẕ-خ0?"MG5MjD4~WAmKY2j˂AP\NV/oƮ^ x6!I3+D#y!x> v q'j%
X(( i}ɽko,|6m&Q$2WO:Bz
y~yzIql7sv70:];X5W?0 جwؑ.nIdYu϶*̣"HŻL(e+Aw#hZn8# '{JfwܣW")?}>^~ȅ)8c嘜4NpB3D6OX0gyL*F j0
̲ #)F[wpSwR7&I{9'ں"KGcuFJ̛gc E8+Y}"WPix"٨d0d]BtEm2cwCnlQei"d,Q_A$>盅PLqAҋXB pEWz,uq8;*M5AqUgX*w
[q!(εwULM~o~GB,:Y$Ŋ=%ڿM>%6TmaB&iX>z$ww,d_J
txH#H#Y: ue6ՒrE W+lO0h'8H ӫ%DJ%r76gzUBSG+pO2
92Pyf'؇)1Sq{Bֶn*I[+o_9?`սÂl x.l O6kg@qFQ3qRUp}$~咕 8"2l 3-ܫ{eͻܛ-/0lmǼH?0tǂp@,/8-y]& `xsB~Y%jzg)rڔMY f`mYIaqAz5. ZIAݏE.#>%J;/3NʚtŻ!<
f#S[cJV8Ղ7KQoNA >=|b6
66jC "b16;lӣ7]*l5
O.YDpYmL?7,Yر%2|nhWQ%\gp/]3Ƌ ]131R, hLF]V3\$dB3Ui6]RQGo( (j 4ȏ!TżKdW@D"JC b +eU4d?B݀YH6!{;Efah|
R⮅rq^<:Whk[>m$|\0;gx^()H0śt v0 ֛p.U.jҟY'
-Kb^[+WyXAm,\+-J%*4H?-;j
JLAI$,tBTܶ0f- (DVO0{0)i=d#hF?fvVxAoG}0qmi q+Ģ^+D5;.n{gߺ}|2SK'gYDpyQS'c:9w_ 뢫jlZxa'JD%k)0 M;|ug
>l1'd
n*)foxGaEyq~ 0hcr)~8 W{
E7殞 ʩabs=aPg Z:{kεɷ< ]\49gc9c0 x1f"(fj wzP7KΎeKn$kt
JԎRݙ4mTQw\ =LU8oz_?(e*Մƃhmz}+t%(d~Kg!ץ6wzuG( )fs
M.[ǣYRm%c>ʮ d%\sE$EgJwl`"._{Y% n0$9l, ޏI:iUd]}wE>_ͮ۟g}I! ŰΕ "&7l4CrP{p[T8Ĥ&3($fϋomdy/"_~d40ꧺ,X Ugk\_-`J?\
FZ9(擎纪4.)2x3 o wKD*9 yEȽMNbzIMk}!PЁ{tƖEWt{[Lӯ{~-6[IDeǰUuW!I
hwvc8 pnu1=] +Zwm+u$֪pFB
kV-*JD
>ϸ|`]aUq?MԂ oMT:9^jEN*ځDrF=Yzv`:tO_G[U=q2ΗG 8 ,mHHծ!ߠ. ,#@/.b|{]fNRBՖĹ6~`K}N+}c?.. ӧ{%+E
UN/(wfv
,l #YQv libe4pWϡ;˴7F]pesw-尷B^d**Ժ/i %/7hp[} ] ł.6\Y;쮎/TYZM20]Cֵ+#]JL ϥb'+V ʪ96͖w N_! NExY 9\xғؖl{Yאu-f+F]
oX#9
~~'pSK0¶P zPQpz +> "1Kct
iܣS|WI IDXϬDY$58] 9Vwh1!tkzo^+Sx_>te }&o$v ɰpS5-'v !X6v?3Q
q
_6 -9}>T4 P3d+2{~/]C~&K`DϹ(E *)ͻ?tدHIaC6/~iC@ܦ{"xl Ugf KY =5PA|.zx5iqd! 8]/:ً};E=J%5o. 2~;J%6TS@)>Ȱi^GB!GaY.=n Ui)DoKe6 1 'εs=Խj@a/Tb fKrh)rԆ2فKW"H!50h4IL;䑃oPrVS7jH;CkPU""! Yy[NwSKHmIo"nCN۽
n{8Gk$p%˅;đD2K64HxLyq휴^WqK,ͅ=\4$^h93pn)v:<%9MiLɱ (yVٖt#b89R;+,X,vEfg T>~sl|,G|""r =ǰW2|"hHw!!vE^/:R9-D(.̨ C GAlHj#q8a shjny:J XkpBB6XӿrY͜(f )6@n8)5Q9 N iH?P:]a jCmQ `J)-aQZ[3Uë`6 B㣷Jp;LyΠ1:5kLQEC1O@N&Nۤ)T[G+f;}dVF_ qjm:#K
6ي\{x% £ 3fAaEAؗbTKVf>CrqPYƾkx*5A6Q*InsM3*|FYj ` XxDLC XM )W rmF|fk[ DUoC3d,yP' c| N_QnD.!QfS ܒW WU DHXo̪[B_ mo=& Q) ^~]536) " zz1eP61x{ لp.6np/b1[/I*nb :B2g`qt}(,Y( wԨ{ߊ0*
, M&B \IJǣ?ILyUY#Cu3Ž} {yͿ'99A-/[)P՟rB6~ }E!iYC"` |
yG?(F{ [2UAθG[6ʑM-&0dQ
Uq'Q&@1lM^Z梽/˗қ#T]5Zיr0ⷻ}:pvbQZ|C;Bѕ<,ff@ N~!RydS{n _zXZ_ UbQ`=eJZﾱo5 .b%ʨ(T'M*d`4@
ރ+5hInOg0 &&<-! J,2Z.qmc`LHmBNhX
(k ? N
ˋ Rm,(~Lř҃C̱\Pca2!jm Daj54) p5DKF~-CcjT_q"w6xaۏu\§kuռ @}Cd ,gL2Kd&t(QΈcc'EY<[2 ܔ_P9P1>"/i $&/1R֖U ,WI|3 &bOvc'v C/+HlI
Od%B 00"x{oB2? [(j} Nb*0QGۑ FALߔC ~Ca)xO:7D'.i˜֯U8 &Fs-|XK/ص}53M'7SyMPpl tMܾ ~Y:Ƥy".P2ͣgd;%UlE0x AUIHu=~)8+ō!1
ʶ@TutcC oS㢓m:J58nw'W@=D(sCӍ 9 g?kf6[=X1He_e*6
Cct}Xa = Yx%Csb<{ hI,jPIHYٽcai8@'sҭhInlH$jg=9$'6lϴ(UO
Er`Y|bN FqmV |n1=>`Ǔ#^?DBOr.l`/PXUvE2#-7 5gp 9] BG3|͇;>-kF%zm=$)&iP|F0_x6#'}S1*/D3<4vd|RQ0HW^ >!y<;8Z|XWdc^{] &EJiaqX!9: څ$T &?]g&fo!mdnÕu=0@3-" MeB)!J898XH>n tPcp+bMaV$?E J6 !p,:5 M i@&pݵ {Ow},VXnqFPC#V_PJdC٧>haF'B VV/>w.DVۘ <ZA*mA`S0bx]y _/ FLFFVDB,Xe**vdy.y)%̲zmԿ")% 'Y_s"ͯ+$>o%r7AizlO>RYb\?a3C7GDR#4 #]Lnai-۴P^ U)ϼ{_؉>pwu9fp2<)r}!|: ] \u^3k4km
E&z:4<|¸S98 F O IETCIT,}`
IR;Okeg+##0.Ele 1E=NનAqA]x. yfj_fPLr:#v)(}3F`0w5iX,>mٺ/l{*(T24xDUG)r(8k&V{ t,1uub.` H'Ԉ=,<ۭJs6?4,$$-h2 Dh;e^sCQ9d
8Mv VKȏ3DoQw^LLZi$dyxDW38 D(AŎ ] oH9p9x(+Z~LH |t8
_kP0ukT gCL:^R^6 UN/Tktg7ENX&?P?SO%%֥ z` (
ЬMI!:FOxQN/Q^| / \G`bP@i@WG-{*(y.7 ^oY5=ѭ)hh #1mo]ز)'<\טv)vtoS.J"(Q-AiK?0f\_/KF/УLPj)r/;I
a߭C"6"qZRG7O@oH=x$*<<]G J_EsV"iS+B̫KQptbG" ̘Gn}x*h(?A`mEŬ7uWO|v._ю/Ϛ҈r
"jq K7>88{LSxCWק# `Dx3I4Kwm3VU^q6!S{\@VKq*Um=
H^a=Cz)x2K
~_fApnj%?(CU7&UMm"(^(R'|㕸GU2fAzTC\ R}UK +AxM`. )p $(IC fU w+[f K ](F Ǎ4O[ >tyGo)0`lsȌyOYV h E֨8an/"I5L-SNzό<
hp>&D/"znob-~bB!,Sѿfҟw?f*=&+ƔBz$eO />xhp'AOMֺXU7čqovߗu^
wMрx5UE,!Lp
%VNkG?7D)jll3mg5vQ1Trs[Ԁ 7j|^:FGqnCVWY=8+xXo1ɼ26:P}&RIS[w zF3ZJ|>ﴶ@MU+X&o6` V:ro^m_p
!#
kGCXr
܋?""T~ Vmڢ RU18B
6`!>;_URF\g&tv$0Y0Ae[c #qNƍ4Q#7tGg9cwR1ipi e1eS'i
.}
ڼX`!~ D۶tV>h3Iqjym1WMhUW'
=v.F(ESb5-K4ډd?+NKDŔ1xZ? %T
@"VE^읤d۬d"nDXbٖ<@AeGJq^Tv_=FJ:
)p̪( ]È8: 3E 6ƈ/He[E|Y
\1DD4DG\gP\}lV!cc|
|gni VŰAOZ\Qs}H\H)5 F?lʲ54PkRU\SL߸i_:[ڠ![JA@l dಛ-(C9 U}c!0yKjR~v
cDٸA8^
B ҁy]Qܤ:>x{ ^A
JF_Ƶҗ% 3q'[|!Z7L _ﳛ>
6it ZyIoZb pXW}yVX<))Y[Ĩ^qL4;,2V[ʞX*
.R_BQDXѐɓvKnpJ2Hbv=aV~|>_fhf8bZ0uOx */] ]%Aqga^7IZ6w *uip6y\zі_%ӚZ~{@8g)i'&$$L@002ؙWsg[=s X7G .|[PA|Y<1dv+
C[Pg t8&jڰ;_*3sLiHv,~RU$rpٴ2-H
S [aX>
pwR/1t/01h̙.%3VxSe0-ڭߣۖV_zm R1u3p
UE(>YH|]
-ݛp TpF4W"UԊi
z|xVj^]9J -,`
D=2iY_,+)ʬ\<6'J2U/ ݇
8r h]E-Xb8'*1b̼#U k 8iR
Ecs+JrAlNc]Nu_x{˝gc~l& KXjBsp^ޤpgz{l 2]$Eȥ[ u@m~7.G8-sLfFP@"U6MZ*Rp[)ftXoJO mdVwe?w/ ^دztڽ;6obXkq1߽;z>| ʑo>SB2G`EsȯsԷLnP /v=Gf>uq\4|͗mzq6Wv$Ju\2<~~R2.^]Y=%q=9w
~-&J3D$㓀!P]XUSWEeU łɎ^7 NQ힄aJ. ÚN&! ENcvՐK#w0n /R:S8m8P[0S-3puz 3/c-c b T9 $~KMCt$YI%jFI-RƔ@O`g}ug&? w=a(yỎ%GH5vpL9D?Ɂİ{ }m))lh}X2$μ>GXzclƀef"1aP& c|HQ}* JyU:N%*nh I:N<2lJ976Em!7GK nf tkYȳgˎ%P~2A ruw1?@Kbс`aѢ ;`5fڜFjA f
rrU굈w*ҙ5Fx1-ʎGڌ:S{t! ,8Ul/K p"F[S,ʬ/WD˽ o \a:Έ0rV"nA*2. sSQ:d*rCOqLD:dN8˓{pgʤY°Fi0]ͣqYgdEp}aQ*A<1 H=ґc'g~VXesoLK1˧PC0]Bُ up).,>nzͯ5X\ivnbpЇk+
Mb53^B뚕f=sO#͡G&AT<1{!^[ tM㞪kpu< LkZхޢj=m
7ǪrБR "y#Q`N{ƹNOR`yBSW cl]*V=/_]6uD8ML+s{&w 6đV^_x6Lp eeds'!y3Ũ'djK)|/f)K*O6N ]r% 3Khѭݸh{EHӈrсۦ-wIf oY z
*%VA
i8] d%JޜG) N W* a~Ns^*϶aY|5L* ) )B8[cctJ]pDNIܯ'zߏK O>f!rzWcDe'FeISSgwۚCτ;2b8O5a(E#3~a88%FmSڝQWu@ ǠZ 3 Ռ +MuppQT;^;7s<ߔ
0bA1ka7;EBJ8,Iآ=G[G4wO6AQסt2(Z\ݟy7zj4>DS'S(3. R7~Ydp}v` dg{Nqpemt+j^¸
Vmzb$ !J;ٻ˿b!tv UwK!T2]3ʽZ{ђzKƐ>OYrךF;!y<*| `J!M0ϭz5e:*7|¹}XV>
KJ>(r3t1A$sg|%Bi53B| -h ;(p Uф>LH&z~"+V&ka ȳME6Z#<Z/>{=Ƥk-.K%HT" h
d:
>]) =@B
%$$F0/#ff
4z͵
r $; %RL'w䖟m}7gG}\g=N挥ů '^GSDh#G*.&@v@0iAr̆;!^gbR Q6UczŅћ`h1ϪFE{gIHцJOjT&wnX7.g=Ys=il;~DcrXf&]Fs&\7d5\7cgбLL 6G/OZ}ĘL/ EL%ilN2`uM(p5̒| F7\6 ~ F?O :" MhТ+ON3U⒔")x^ "l KqИJ1fs鳣ŏ E!un_ൊQ`QQ3 lASw N Rh'`1&7I?N" N[b '+:r49O b^Q|zi#{ TH'̇lmP , ,,srQ<^%Xi^,^2!gor}FZu-L5Q=u{D>w;UdLںW(& (t?0>{JL@yivvW `7 yީl|V2ˏs㕥><ܗӘ) \&!ZGcw/"PЀ%ɨ$3 ¼ۛ2d"֩l,f/z5(\ܷ+ۿ~F{gKL(M6Ր?Vve(XB͒@U _O:NHI *} 2e
@Km%-F,Sq?-U:/ڮ^a$ك3sk`g
Q?#AQf
| bV*UШQ4,bjGCn2LZ̤N\ZI I*33dۧ0fčw/~]Pفhjp?m
zJ-*\> M&9Zvf"o0- ڝ&[ \sH9BZ̄ԈEm_0^cj{>7 5 50N"a o ߦ4.%EI#Ȋ*OS:Ї -Aw,, P4$ ԑІU K%B8nz@0z IuZDx= |d:<yIYk1~But&ߋ;wy9x<('eax~M/BC?D
J3Q8;?t6sj.6=5SD!Bs; MV!sb?-$2 kn{,݁ G&*}ϙg?Ӄ^[`fHN
g /D#+V_}s" O#7@ч2tC%aP0W{c[6m°͖q\f Nu~\:߉}X NiR< &-ao(2IrpId
T! X-e$OsV; XـHQtv\yY)V %-/eDܛhkT7ijl6 _~=E-[g_Ɯŕ[ZaHyX&8q ֭vcBU' ]O. .ЬwBD|%n6sZG#·mׄL_Vh]';|8D&IW|y<>[";9{W7 g $ Z/M79EAFhB$ τ$Z[Sa^?є9aP&?tYfRʕ,گUH sX' V3K)큖lhT]kǚ.ii¼ $`B}a:ν"냏?Zlu+v8vV)Az^YCG&QagPW-ONc}a0ɑ3*W$E#< T vSЕg0w^7\C:X,
6^,pE~Ut3[]s Iq*{XfV ثW=0 3Ov"uD^d-y~S70(?5|-])-CT#a;k?Y q3l;*@,N&o&qep]BLȔSs`/@9, (oq H;Gfeͷqw(W[&ϓ4݁ϰrС44\.(8Qk{f~}i<Ɯ8Zʃ/<[bͶqH x[ Q+(PAy-rjt y4Ez6#LevQ
-F '=gn=n6IWnH3rg- + h&
$jQ}^k L< gtdnnAI
ڪ ^oñ6CfX+s٘N+ `1+Ht*i{&t%S }K.ye0V3/ ZqHdɮΜOgRJ`F#Qi"R~5Cp vfH6 ڠg{ĭ ͼ7*2Bu$8u. k'618n$"pZSdCuE5Ljb> HghJUqr; Qg#;'Ѳ&@p,*V1
Q('-$k h2FHR'D @:Ns^&!s^iGa
C_B7O : j{tx 1UaE >6Ωن4V_FUPn7b=$?_
.%#V?(0otcֱS*o2;?np5 2L$giyR))9)U[Ϳuθ @¯np1{ 1f~j.e̿l F0IO87y$RrNk 13sr,w 㷶fҍIR2-D^$9S /m1mAb"Brҟ ?KA0©17 l Dlb=_ɽY"eGA c
kp|,A.HC;TL -hQKx/dz
},Chma{8Ӕ1 >8+ {nl} e+Hѧ֣bSu~(~C)Tr ]&D@CNNzJSî
wf5*ͷL];27Jxh*Wi^]Č@91)4MaޤNd<|:{,Uަq3⯱t_ԏKO v;ƣ{8s1? -њ+*=Ü^C#`65NzPmX2]Ӄ# I1ucVAX\@C"wõf_e
R`Jjd}JVk*C6خZ=) 1/r! ȹbMuR4Ai|Tǥ` ֯ 7A Hhos/ţ)B-#eݮ sКE7KS[_%Y[7U^c{%0܇t8sPY2
?@m>Qr+4^0|jnJg
-(f \dW\PE*m$\tKs,KK:d+q*.[{JU mpB`se!U~l] -":aZR|,}ubҝ3lR-7Iߨc3k<Êz ߠ'tNYi&> h~ЀP[2a0P~ͪ$^DKD"Y Q{|/ ^ 9 TI Cc]')OȈz6Wl|CTZ4 w ~BP.ZX
EtvDnz!5 5 ( ;J
)lBLq2J}̢\
wI_"TgƠj1_ "쐼li<&: j*--Fp*t<_D@ ʯL!;I3(27dA3tXv)TMX7` d< ױ=w$)_$ um>( ΅k]= )ԈQŝr#5z(A( ^[j5 [a hΉ cJ9<-!${rKh^oX<ӎxPJ?"0- 4J~&bb4@σu)! FQJ?Ew!v7 ,d98vͅ}& /H|]ol㼟O&rN U폩Z Q,̂K
,·k{q c~ִjoY0@]#-ލkn nׄ|UI | deho $:C G
%$ MqfUPX%VUOʳqr,=P*R}uxS 15`]C`p7
`-NAP@B6A'|dhV!t$ɯ#j&q}:ǑzM$%)sPXv|}
>iҤRU2t+stoFuRKɈR9[#Ss% ^ b}bO7xmRqVrȣܘNp Uǿ/}WN
v R T>*šY "PϿ*NszrH1Eг8jPT ݷȦ#* @+ XU. $ x)jӘE7OVdQ2 ؤ)WVۣؽd`̋~l ZҖ7zƨI#4Py9j$;&\d]'DMtx]7p۶ fpXg:*g(\nض"RftibBpƥbwu?_\*gE#~_ Z@ō [&dPRߤ/ϿM2T,R(:X Ƿa6Vg"5+$0ڲOµ/:ݻpm_dػD79wT:]> Gi,?~(,wS. yhvꙻ]Rt0yH@Ñb ,+-%, D3H#|sloP[
ߊm)Zbr!0̟qƄ~E.sw+ZNKoAPu`l7S}2.,
1 9ԪtaeIJi\t:`#vRI|H).%Qz^%,s=; *L
%i\-Òxa߬WfxoISEnn귊>"J8H| CD`#R=팀
>od|5gŊP {%eΥؼXdIj_N4 KV3lbLV' .T x-)GK="s !z?*wjnef>О#XҨvN`.KiSFpry5g^kc#G8eݪvl?I:ll
^pem |-
5-C4A.n{tgEN ,~,D ȫ~u>Nb1ܤkF+Pn^FqaHЪF< Wn7u況ߒt_!5#q(Ӂg
j}N[OK11oj Yvt6DVm
5'o8h9Bb&kk|\wwfk>|纵~W.Z 5ƬѶoFܙh̦+3/ŕ
e"[!fs/5 Z\HOo1ɲ@)s}71$QA A}iFG'..mDAơB+ ,{ [A4\'HEIl$砗r| _7S\B8 EZ$IF]K8F4zOk(-"]yT=ɨRQv\'[G\+]t|'];F=sǟ9GS4 =&DQ {.YLRˣ9 nn
N[?}M=fr]!p/ gH ,y^?(S[FLj,-!UxmE!7-&CB&>m/|?SbZGUtn >wx]]OO1Z&tn-#=ߦ he@t>6n[םHxɞB p'\}P+Uy(דܮ|6#lꯝf+X{;1kkSPv8pPDA#2 (hʓQ\Uwwfb ]:l
ukiqjb9:KVWhxWNFdI =qtQ3w>7=lC0`#Th_o 89 k ۳lpjsiH11ipUZaVF}TO(Y*+9v_j#)h=niy#2U'
&'<&ԭZb맬|eh.-A.n~n(O4fG$[ڈ1Y| FRGssrQ+&`]oN륛v4wʼ b[)$ &Trknq=RQ> Q-``
S4,nԼ!~&%k m&~
i<0HB,ӕNLgY!Jt4]5D- 7l& m\eǧǙ?B6;~ e#
ԍa vɡ F/`*%7[ wzQf(
9
I ->+.IC+pT bJ}ҧYmR,/cBq
Sj# ˹0 3qh)8~q
L 7%rS( ŻLu[N[Vz`M,Ĉ5 sORHvfu8E#A ٨ӷ$'JOWT\)4e v/,\xOvEAK c.$Jqg rE%b_=m.j+RT.X5UjE~W/ZV ߥrSǾ8R^jӛ1d>Ì2y]#kT (CR>xeDH3!XX&H|8g<2qϳdԱ~|l,IL;_ݖQdU b%i w"kxҗiゲ=?s.֬4&8c_ :>|538Wd$- `֨,aXC'H WO֤ۤ:3xFG`upy-s&MF |TxC~dszT(Z~ؿъ dnl"k~~L_=!' G
|6B7 6ּNtv (|f*A)E{y-&ƯgKyS>:]" K [qo 9 Uڞ OKEN T)<1lWe?Hq<8䘆BY7я&;0Y^N;9JLlK +{آitT/܁&ǜ%S_xeWNϴa w n'a:X ;՚$s;8-eT i 8"
-xCrf[Kn ]FvΧ T3u&u9,3
5 '%(6K_o`ctcRmb1U>.vҗH[}; |C$Fp ٰ=.e~^ i؏Ryx
ϔ8ǚgh*45)[8OA2)٢q (6&4{w?h 7eYTO3 VLF[dXȷW9MF Z=%`}=xltM7#Lи`)vC_%&T1>U(@jhM( 4
:B3e<>y'{zK?R(V ɣ%Y[ɴ0I1"P{LWrg u*37{$eRytUˡ֕3mT&[Xu-Of) 6Ջ5@ VԾAZE~Tf~ǂu'ͿAy𮘳cV\)'vCB
W\ }=38è., /GPp !.l:>P6D'dNJp5k-*e9k{"8la\z'pMQ n\$KHv`jIXڽR[gƂdҡ ((; _ڃaI)g6ف2dCBIU
d-`,a7`b73#X# @g_譵' |k9j1eƓT(v@'ͣFsK'ԗc8~C- ZzUWLEF;U|'2IÔׄ?$U+>gSi~euIN&
z^* C} f7wZC%L &ZWC߈H!PZ1);j7b>if!bW %ۀYc(~$gl@ n+vXæQm0"ķg=C57F */n6bR-MY =
6݅4
-{=3l zB:A+P D e6I~
!lq~k4$pEלՋ>)~լM2F9iwp$u0 g%X6ld+b4K]#%5[k$u$]Qo씊_e e,d024_u^={vw-by}@p\[y7̇ ?!_BǗ86 |3vf.HoER9^v+Γ^JaC}K8=Z'Fhp&u6CH<ru"7 }'hI8"Hg7J%-Lp2
G+Ps=v_V^ U7s\S *)j?( ¢Mŗd˰P2lu#<(PCCvw1=#h%LЗ.ߧu uGny$!b[9N>Gzd L:IIP[q-(Ck> &qȵ/Eyǀs>T+ G@hZW >,?-UKUfRדC{bK6A؞T$ GUֈ7`wfp$?+Ol-n˲Hisq"rvudR6#D\M HOuw#c]?@]bШṅ ܑfZ$?؞w`BhC$ 9[b elӞg չjm\ih,nOţT7 ܴՀ .w
gS.hE֭ 7c {ќ .Nݥcu0_rN9@ Ds%3_SB* @[sy bp~3HUCY˙ H Ep{37 "
xd=E@[Rm/aPYkATOD]}hG
*< a
È E\i Cd"Sd2/' Y>Î&l?WLd Q\!)]T)PT ؓ+/mly'+K}cZPoX"x*#z5?zo"a>e9#/1dY{(بK Hu;c:lrhu)cǗQp7Ô_쵎=G ԲW.^A!fGmOv{/Dټ6a~Q2\#?J5v:s 4"[ ' Q.+k7!:3@!?X# XATGZc
%6j%ѯYҭZ7oPm2xRis
*OPΚ{mMH>|#*j X\pwѿFazv>hR2JD
q1N Fiomb9vW DR,L.rO9XiuE\hMǁv :>I[(*Vu=;8kL
3Z)R<:lHA=d{Xk64p6~Y.NNN*a'
/$MH5B)/ ҭP Z2bYeϖr{ypݎ0}E X6J õ:apo!|zѲ'CXtCFYǃ3
Eݻ =U "_x fC-5p M ^w<d7'$T,/(W6"}x,)i PnG= yNgPYp0U_KY8ZS0% -jA6R"c`!ѡO,=kQ8E[/ RA8/^6`535xxjٱN x@k^0o` Q;KY8Iα KC34Z]>Yy Domp-ԖWSx6ouMz}6Dy{aob %!?@̷aGz Xif ㍬A|)7O[DŽ_qHh{\sn1!@]yZ
MH`t [fBMr(GpӏZǻ8"WAy*ؒbϾ^+^j5@[6vsF
`+_ hm˅өvVT{!|Wz ߚc xsw^{$Sq¹Oy gs;o$8$M Km$9q9$Zo R-ǹKhI%~6AW?0ohf̱ϡ>lf40;A`L$y-4Z2הm|, g*qC
^1r>#Dj]_ϝHc<
:_|H62E^)MoS8o'{!#V<ݿ xup|qd3%k t v`i ˂?lvM!˳rL9L6Qߕ\"J?[w\u9z0+U/J ]ijQEi3KZah+lV?3{L{fb%D,!@0z4[j-qG@yDL çu\y?nd?i'&FO}xېciʄĜx+C{P6 z; ?/"19||;Þ,Fs阫bwd; P t4ZFgMš Ϻny@{|t=n*nNfvj\NYd[ų<Fl}2 %B\
j~dFu Jmӽ v, j[XyKxA[)k00b3e3@Ŷ
璚avsJb٢_,ê_/Fso7y@3/2 µOp/Nv̄.|W.3(pj1(.c ":X(Gwy/D>叜QcêBƃ+&YF `J/.l-jE(T;`@x|=< ԇtl 6FO[,sT{2M9E0j,0)afLR4Y,Fs[8z^:]k%O0MAN+eh(ñ5:sE-$#ǥLzF[ 'y*۟l|! 4-BU
D1t54/s/ EuO
KwK.:<
E'!w3Z.n@X䰄:(9ƨ ѹ=82#TbNZalG0sN
hYi%אR$"PWU*3eTsގjk$?
}#/Mz*<)~0iJ{}-0eØXUt$kkLޯWk ?ݏKQx((rN!C~a?
X"hK@_hf/![%%µaV- UhjFh|A1#YDb[ `1 <
@'|dWO=g[[M{E$ێ ߗ1]akz֗kGAxRPvf!}"{օEmO1~Ym+N
vS?9_ZsyZ%EJCպ1H+/6W,MR0HUΪ_3n -VuV[nUQ&'硭# t(!oxݲoi4K+a)Q'R5]TfMXn|Z[y]ĺ58]uQ5¬LPQ[(>_G4ݮ\_uM}{=1dm#koRqۄP#7oXKK˕y5ώhXU;!PSz/Ϳu<Rw|AW+ ;Jْp B.^q ċVkc7'4 Sɗ5l99 H гbgoyX6q9 9U*en>'ad&~a 2 'F#eo8S +YQ&`ĤE ڿ6R jHf -4]U*woyEn@zJErZB &ѐ u?z4/ U:(EtSw(eh*'n'ss*Uͳ1{W|Z^b5v:gk3
n?mh{z1bDhvt噆8Hbo{º[ӿǨ8 &YTMG\[&)=Z>+gdy'T czIZK :Zz7Ԉ>w4^|VENl6& ,t"Qe&u\lD o壚W2B /lK6 -2M1+]kwi>1t`a Fn&ub ABj'Uh 4:umt3?^WޏӘ=A|!^ 6
D6L*N4 y3l1&y7 Cc.D+ݿ{E!/K`̳U6 VޘK ;
xnOؚ & (- 21hOA2kW-j)q1B(VV.eAիJ
5mY 9}z ru$?ǷA|d77
r̆Hٰ7 &==%#yr >U8:aNnJE4y9 *"S0WSXA\
TDd:ϿyƱ$;U6` k@'.WM>1126X6@g @Z-'mF8(@<62U!Xs:b
#Eg7lc/B1$bg©)=Ҥ<w5ő%rod\$>P.O]OB.Q XߡcRU!NãXh7 LT6>5nyx+ɾ%QG
l& bͤyd: C?te8Tȷ 2;[U*7un>aS=@f8)B u>轤(t9 r5U)el@*$yl
Բ>P\2ԡI>gʭb0ak1m|iKqd)iUIeH*Q.wR( 9o}7[h=.Y'pM. hiD^7j wFGE 3Wu֞ X6UW,k%߸0ˠ']ت#e>Scw 6n|s
@Vc&#!jPˋhgc-`Y$lv}nţĩhUNnzr 1ujdo{҈w6Nqؿ" %yf KhC0jq1F_ "FSһUR}iVN_
!b_*2TZ;O37N3?NjpmkfSfơq%ǘfѓ`%ZH*V))WVMTl I#'jӚ׀uKٻ|n~zz2 Qzz}G(3gê mJ~lޯFpLȤ)øCЉEKch GY#Wx, c4yȡ ,oĹ!lG!4Բ,C >15qNrH;#B\77 kGM{bD.xIJPv^ FHLqmp\HwPt[~g T=W|B5ֺdv|KA00@Oǥ HI {Hλ
>Ok
e^b KzIΦA^,N[ +]1I7l Xa?d-
+vuĠcĦK{.WhƔ.5ݡ7~Q`u: 9c}k 7
oUkmkD? ӝ0 ..D38mNخc .#끯6Pՙ* +Pɡ?t&&=0Ei]{5nYS&_pGB7$F*Q .O=OpJep jv P:dϵv@^UR&J8:l>Ơ|q0q^V-ÚBq{'qt۟T-|z &A-HiK
=>y ?/~K
ۼ#f揃~T UXmiuh`J IoRs䜖 64H)Mf(-lbWχ }Z&bq>j{lMdBLNprSbL>w-xWIR Qb3"WEf|lSKu:C$%Y1;ç-ǫm7f$x)Ml-Ӎ $(qҞ+k ?5$g8`_&e#>&O *x.([_}$qPY<.s!&1]3RBL}pJv
q2ڀ۹.g"`ZQf $QÑ;]5<7rT jAn$ nyP_G@Pq
8rHu?61
geYDQ q! Lk+fW33?ڭ:qJw9P 1
D ׯ _6IH 2ҒfubNMwpp
)#B4J_..3wCuڎD2, 'mGѱ{ u1$
xM6u") )}ӌ'44wNv杹0%}4qw{V2# ;·Fb./tهs/6 =:JJy!}I Uhh
!#lsN8~,y."\:r͌<ڌ)VߺC4M9 p_W}APY Ǵd(KnlɚOx̩k)U(Ęqv ޡuz.~#%1ydnl.t eqd{wۙ{,=yj MF(w譸_ڄߵ,c?Kml:|%䃽1
Fho#ڈG{.rؠnU%}[Ns 3faRB: q@7g ( =.8ƃrA_)$|}s)V-@E SANF;zmWL JsbTh8?Hsܩj?;Փh)"LeDlFk
_geНu.i :r々$@ϭ
Ӳ:p0@8\˝ϔ(I+~XZHm 2 aCh}4'crǮh
=pvr|pCp{a0|U["J8jW#0A0
\*" [8ĩ=NKS h)ЁQD-+zЬ
VR7x/<黨
|4F aڮ ɞ@
H:S AQ֫:wZzAX|ݼ
N,TL;T|Cؐ4@*}S8x[JPb?x`ϧl+}&{7Fa*ɤ&D0~'߮ qHg>p >H8$ɨ1vv]0 B?gm
kA 1R/Շ!l:0yE wpP!K ܫŇ_;3wp
j{'GowHݿiYw-k p MFuIZH#-D J'şhHѭ.;cgb7Oh4DV<'Hr2VlɇF:aN ;B" ӊqY7"كSܒ~AD'(R)J?B"ADVTT| ի=k懒l֠[!|+~ ]j>7y<膿(0yxjGJ 5!Ӷ
#D Y {BB
ШuCNR
'o9 š([Իn2h٬doDA$^;-[Hs+(piyA%YohኅMYu;=È
fh$ъׯ{F7(c&?7Vpi|Sb;Wՙ`X".lMBD"b:T6lD,l,匨m?Dz? 0)7²Wɋ} klW
fa9)lUsO*+r۲o[i&$s* ecZyh1=%P,= LLHTƲ:wK
"xe"09ڊ;f@ r-UPj J5g ;SCzQ[g ~텃%G=!Uښ1ũt1տ`)?t6tw&IM:~[KH}AtB'B s 4ˡMIլ#g1D:Ǒ$ yv0&6!vOT<̈VMs~P+/n`^84%
8 +_]!Ň^ՅlNH0朰^lQFFypO+t V{wum >|
ALe}ts.yɭM@ twt;,ͅ@W1B|ji[
<9Cr<-;>Nv2ofpRL$4
< U}L~Lw "Mԡ2ڏQgm}N_gS$w'~O!Y:zg
O(r\rzlpD6 3 ;t&e~@@5I/6/\Z D.I\.
MvEe{3,;CsCafpp/mrpP}2H $9Nq^A9]{:pOѐFO o|ָ+/%𢘂@CpQts Ż;tP>ˬA~]v1 lnU!|m~Ea8*-+,~:2&>7Fl/T _;`- ǃQMA3>'e}*ND
~1kU0એdk6 h bBc?'irP?b(|xEjFwۭZD[V ?|L0nFH
Ų7.-5ca*j|仒873ײ\IBE|ԼK:*vC8DSK?nS/_%>k,] Q'#.lct-R@QAVto<8rƤn}E9{%~ e]t[y4,AHҞ P4])Mh
@ρh r)LM/o">ř/(Eh3zsE190 !8M B7% S>|CI-TUnWf{횺#fj}
T(L_2'݈!3Vw]q]BuX$Bx
qU$3j}[P& ʋ<8rhrc9CC
+L
#Z2C[
'VbU؇ R?63ԯEZ BZ,8R=>fBK^1DCvDblڞ-LTKarCBCkZ34,B^T#OZ{SE#;5NI=E=/4(:<@Sc
7W%
P}%eT:¤ ?D8n^ !ȇ Ǣ13?ٔi| e^3Kk˟yÉLYB >cc@,7tsέSL$ft
Us;/0:X%V$^M}1wMr-4e9sGRJG b-J|v`N[
]N!P7[7=p!skc4 -/ˎ&~[G~;6f7eϲ.q+BLyK .Yʌ {00R t qY =KXpR$R\a "}J\VA4|v]A0?w@^1FOG#.]n9 @Oa&>v }DDA=PT s3 5 m # TAcO]
@g[GGd!Q)cЙ$W gx 8S;a]: H{&fOV/ T(3+&+`4\. l_t a<{*wN=t \:F{/ WѼgg'pK{zKމ45ems,J0=Q =Pq@Bζ׀7QWZjArPr \_*<|U BU $˄ S 4mUjP:jb( 'ݼ-h?$j~bjP67|PIbg1x'樹.*9Mp5 5fA ra% yfU
~ BU J1ⴡ-imӼwr͉B28<_b[0A 9` 9 `8Ma:Q")Q0{]LE.!mH( Y2 _RE/X<"Z!]|)7|if0x
,a lNpP=H *
M$ڤ,
b
:ѵ)Fv+ݮFn }(M ?u
:_bW9슼IdP WB
#2|j P qO)3oipp[pމ2 UUҘZr ]5 XCχ$2@XXAu[/d%Tdv'U&\iTU ]`msթ+i9QO2&o-S%F۬
|=%] +iM.
&Л-STʯ71xj _,I U]KEaWGy مIXFvFcwY,67bpăF } З/nIVYh3˘FOd6raR+\n%Yx=H5 ]L=(D< ~G(ĚTxI|:
PҖ=)O4 Etse! Z,x=/xkKA%6PR gˋ´$1j\"1_lG2f1^J(("{ ҕI^H/#̠wDK\y}W 5TXAp>+6: i ZPt.lAWb ˁF gX 5V)!/ֆyb%o4Ew 0#Ђ'U ᪳.e 0D` Sf-oGSK[ G4TF }S%*4YK x$E>}&d1"+-[GIz? | S-"w@\]+ox+EV $ ^i䧭-"Y^Rzo
,`HvsF쀻@@
~DuZke#m7p|}_[n G"n7?Oޅ 7Ē+fR3θPOx#1ԋd&E9]z3b^,#p-BppQP\ =Ɨ]%IDSmoN$5 I(]Vxt{=)C"nS4Ln!
DD֪"#
ϡT!X- U1ƙr0AvJPP2^5BmD&{ךU
פ=^SBÙ Lis5
eݏ;4 9z j%<xDY=^Ddbg`uRu`Exrg1lH\Z5UΧEG5O[HzU#A; 9#M2i6
`x] N}2!n$ # =%C<ѥD8j] '~/vG-Yg.v2bh5X '+AXo`U K%QUMI >$f{r\8+ʋf ƧH29
-"ՙfyծ^*DP'zSM۽;ҝoGIaz8VaH]*̩qtS65C2ܖ6a\cccTH$e*HQ0} "~Gù[yxX*p>Э~ωn1bq"i!Q @ݘF <7o3 SKZ%#g8F㏻2ʼn8.ɡ #(N52]YAf/5ULKzO8ز)]6o9@ Ͽ_yM5'ڧ#da52X̝R 0:VsͭkPL d$?at~vR{P={ 5B#ޣ.p@<44|B #sX,SZnO) ciX/Nґ6vF2D҅ ӶٍXo&m嫩V\ la]T&3t r!jFQE(,=`u` F!ǓI7
ip[ N,ՙ.--&Rp( R4]~=w[O
yy_/X .7œ͛Op Lju$םaf w]i|ʵ;km-sĊT%jB h;uڋlTi_\
HWdtPa܁7^<;AIi܇ŊjEwef[`s2JQxtqy
Mt"
g>؇r0յy](&>!'Lo Ϥ^E9&GQg-$:2K %GHr@|>EEihuEH۞&(h?
VB8egdGs\irM Y-d=_Xދnӄ^ԄN
8N#C&($0vˇWy/ }},tT|tۙt |#k¹OnR+ Mbs:?Nv\Ǐ`}imaj/-ogڿaWd,jO_)APysúe)
1$jgv lRp2N. duO5~p0_{$5I
_ a 6 ~sY 5 l'n5_We@DSܩۃPc௪ZTx#4]-i*EU3 |W hRT_wU=T\JHúC`tD]L=MHPGcяs 8ݔ} [YgV`vݐFPF )@o b: o=Ct)iWS e\38xm?0*]RoVQ v+Шϸ:;EtT:+Gde1ù轫n0&]. ^h9nAtH{ YqBĥW;D b |T_ wJCեK&էn
6VrkÙJEtH x&٩[(G*e@
"<M`08m&t жC :zS]̷^N$l%7c 縚~DOKJ(ڱ8n-GYnG
7.x@k
W ۊsYM&R;Xa|dY.} y J`ᡱr(?}?!imw DxǠrvXpbWaɺVrvR?Zgdވ(
*ĝ8ʨ
nTu(m=$0Xl N^}\wy]JP >m)-r$->
d2@| 6c8Ҙ,2 xbM&GO7` ?XJ뀃 ɺR7vY}L֬ `FpGWk5f)5}o& Z#n/ F + @jvkJH 41m<.dZPe0|l~4er{Eۏtc˩ am@(A`G7
2@7]uZG(nP6Cr(E-P'X1j`O|M$
ԟk$){':C>2H0[^kL,"M =xgW o6Zݗ<|YYf*vPP-\Q ɎQLTUE017ZoLd6(Ko5Ubhr}29)ZhBjJ<ǐ{Y{.1V kE?AZyo|c[a㞯ڂϪ! ,(\Ês<(M?v}5:MPned S_5zcEOG\,'9j H]4cZlOBwtV{o@-7#E ʐ,΅2n{ĩ#M>zOKzTtB`Sr dEA6<#iC |ղ'3΄ǃhf磬LGƍƔfi'F͙Ѣ9^-wk^ep&e c1 x8@Xw6" !ZSi%d$1n] xMBmz\=QseP%Zُ+, "Y}&u0Uq3'1 ؗ)r P>I2x%n\a'dm@tDU먩kICpJP4JY mVMrkG*'se_E/'^/U Iw{'qgaOG>Ѻ /<)>4 hrqvrԑ}JDZA]'PZE~FϤ{`* Үch@ k싶h57]nX/7Jj0
.cHVX%)%]c~J
!Oqѓ*j4Z%UҖ8(B5.q 5nc?qݥl"Fɮ=
5P'я,9ơ WSsQZ.ݯz<1
PJytQ>oaJ-8dԉx 7?Y scꃷ}RC[*pO\*'& qۓXNP&mn^R?]l0îay}jbDX11k)5PA+IQ`ɠ wI\ q[Pi_n$f
P%jCVgh]'2
yz8Nh0k,h߳1];54]Q=Ie-4f،iRmr&˽,%إB/g5 $_[`PN +V;kq$QG36Ks&T K _Hśdw ;GUI3z4: e۫jreS
kN/w߲72߲%o+b
J_Xض6Z#pkMޭhB>eT ^ eL^Ά.GvO٪̓21 Y:yO`R u 6p3F(D uFM(!ͧjh HB7[j- @ ݧC/KyT'Z$R=ms2Or#4ď5,4\OQJ_RISbW} r,}tcd%# s,l4ʩp6OድY`jgzʺze0Wb}oUuJ
ڝ[S@DR45K(W
0U#(/D#(3(SPc%V~ ).{"\Ŀ?r冺3\3D01UNhn 5
hB)7{sO5tDBT,
ƞ_N i1C a{ղǤ5ן Y5 =& h O3RMCti֑=pIk Z] F^ ^Y .h&<./3U5ÙJ
ٝVy+\)dEewzG`cUlu&3> 6[l8G+EDCUkIzܻ$dKjnq:M8%YaYb.ZӆbCh乳?LG^rpuOu åӃAByջKP.79X7E%.v@V^+iKs^N3!_ P1D[K *.)?h^kŝUESFjH 8Һɡk٫y>Hl٪ע+0&3b$4,d*$+ؓ'=Khiyea1b߰9O,ibe ]K8 :ua*'f-B2K5ȮzT7aeSNq~D^EnrB_S4x;P2KzUMJ˳bԖv + 'y` h{qvRabp% މ`j \%6RKMUBKkZqg&ۓ[5p^?8yN~7
w4*\kH\d^v_ZUU /C 3t|~#̭Cu8L/;
s b߿;nCq&Bciʡkh\0mCY,b%BS*ۛ~,>уa$>3Rj$0}c2 ; R@WJ% tݓd%#͑h6!a=P6h]oęmnfdFϗ{ʛLq0*ϳqJoNeΐSIjE ,#\dy@+]!;2gvS-Ċ/Er(mH [7_Ҧ*.)m3n+B CO7= D
r:
C`k$
=
Rkc$WC@֎) Lw+ bژ*+ 9K fr7_YQ ݀ du//R$Q enbʂˢ2&x=e?w2䃙qmNi[3WX,ʌ]q܂Ww;L ~q$ }Nϒ4[ Kg7N .K) oct$M#ڿX}]/Ft90۩EH]DEcNZ^="O7Ż*$TI{ƭ,.$n ݍ|a6˘8>"}G蕉Gsl
ƻ|1gʹzxu$-NO4 yI`@\?9%NG eVL,Hsi
`fDrN sFze)+1pl &@?1o|`p^)#տϴA7-]ۻYd. )?_xS3sNmO@_&eO-Wh=ay-b9篁ߧWje}[ {ݒasLa!<2(7?[( ^
p ⟱C=zqֿW5]>Ha-DS < g;f|2ji бS
Xd%;v on]Hȁrr@b e[-nKh7+RaCi2rUy fU+'uF%ŔVÖ[U֤98i ߀^5ࣶ |3_MԫB
rʉYnĐHʔ $ 2H*Xqda;OXv9G,b^Y3ZD e r}*(vz+wSɛe @\:>TrpmɎP惑̈́p̖+BqI2HdJSNDsfp% sb!i pǔ}µ9)Ve7D jiD IۭPnW_ VY i"FHz#TЃ 0/"=+jaԢFs7ݤ|OCkh ` N{ɻv) {
q1JI%WvYjQҗIYT
)=QdYc;]F< Uh o^ѝ;{(i; 9 q];lbEΊ],Yшʟoi,~Iɬ$S*͐>LR`9(FmKp*ػ
ۇTLށ@FA`hk֑,Pl xw$r
+)dAFc?mS 26CfrN $ei;E|ԁa]فƛϓ<#ӤUt^-o\2i2@y3)BBV !Y~E6Ks_F ?,Uum3^:%W W
WKyx:]7vIU
NjsR?Ӓ/`$S*
T96)Wx7i2Ck0sT3D2G.T V ld?&wsQ-Zє r99ξ挭>?ZJDQT+mz^ 'E'
/6F}m"/3A!9E؋@5Jt# W+J<2 @gj W(#oNgv=c_kOvT|ePS؍Z$sPuĈ{$%5W@3`6E>V߬3>=FLc "c
6oc55P %%-^t4SKr`)WƻaP}ϓ0̀u, FI?~!E;:B^괥3$$C:%sV.x6BTi%hLǝTLUbRukA͙(t q>cu - <]aڋS#ze/sҿ~yr! ` gf:ֶ
hi?iAT, kÖDžVRSobZ`lF $FGZ[؊ʾN ]Knz L}Q;sTfP]^
9HX)$˨ ˸ֲ\
KV|=HLi9agl4}[
)QQ3&cX 5j s)I3?5
O<
1n$z!Q&9p,V*cd $`>ჾ^p]}&Zgz;tWh3ǖ↱ (}oQΚY 9Y qIxDߤ`
/N:v<]=Clւ\Kr
1;; Fɱ$}4{NT"jYJ f_ {H027X =D]{SߟtqzxihϤHE gJfr;PX]JoQ? _nz;jc]9۟Bq@
Wb5rchBΩf",ABtt{! A,~GUU1%`ʑ3BMf{dL5O%K+SA&U,~]SYtLҐq暪L1' t| &:uЀ
1P,j+a:+VQNpa$:ɳ2hjkRܦh";=Yjf/낝/Q`o0CI$ h=rFLT6rD9o#Wc,B{|y ލ!E@nLT}̮Htht CRu儀Xm_t]I-d6R%\ j0
g}ࣴ7KY|np]a E;b|O F2w_h; IF(.[e]W?5 -YOs{' Ͷ8Mk"Xy/G"HMp#
B7OyY[Sno*TսnZ
\q
SI@3:b1oq]L+7XUBf
8"bLyXXlZ{ G;CU&xhPֲY%fK{
_}#o t6Y{Cf_ Цd =%j&`0 ]jQ~B'Ī{/(IcG(RK DY RGܜ,x
[<39\z2hi@`7 ,1"Nj1 x{`KU4BT 0tb 뜙S:#4O7j!z1dg;
!a:{Vp1MX sy*gdNֹ _:]mQ|dfEж.V58'$
Lf+f:| ƞ(pObLP晹d|Ofa
m+3# G?3PCc"VOTHSඔcƛJV
a(( u)P!N 3t=t'o +`-NT78[I <_YJ
,m% "\fvڳ4B:8 Kb@f" r*s
1 x;̚|eTFѸLT-
>˙%Z 3+gt]L[ǵD-%XM|){MQ(Y Mz}Q ߖ_(*GMbL` xdAE F" %鄪#V;s\f Qu疗KZ m(6E.NXf>82qP,B']e5(1}^eH#`{Q1}4ܛMk?Ke b jG?NҦ2<i.>.gskKԳ0*0 imBtؙfZmSۊ <7IROX) оY:h^rV ++=x4%i^-&&!gۂ+ϙx>f]eh
gD}_3 ֍ r(+3=urB{DEIuڮi¼y # &k' -^*^J)Kf5,|=8 ',[/e~!֓z (b
x{
xI-X<#-{Y)$k鹿&iT|.j], je -O3`~"R.s/ '&eVqk=V2/y4S3ɻ세 0X'EU:qdH{P\J y<{L+
vCC\-!ܹnj 蝛K &
;!r`["&-{0Ļ5*q 5Cy `w\4j''xѶ z) ,tqީJ Ay
1#s{̠]pə7U+cg:̚Gc6Tb?K>,?
$jw|X kL]2H>K*I̴ѧ, _KΛ{{ ?%ZX3O.MUp1 c)EH8T[w7;I-}&IHu2+ɘHT4+Xaxg҃~EdZ>3XO%p1 9 vG\; 8e Ҙ}W.e=tTl')ui
G(Ny|E˾E~q˃kN>ɀ_JCZ]y%!"H t=N(XzDU3CndA#ྰЌdиy @Ν/:qܽwΊUm3
a8q .L~x5gRfNj7P5_ZÁ+!o@/=V&וJ/{05QmBs%uHANw#wtq=qP1~ڑtmVR?Nx㋆kulf9i:jk 俰a.EVo*
xz 5ɧlj9}s]>ģ)?3^'/ܞЊdҹxm?U|
eoζ~\$gR|ei-Eţ]0gJaas*h)(
svB ZC69@Yr"r$ U"4\"c
+C!ͮs 3,K0YkTŗ OJL|spj y*
$R
\F݃IMSa> y_QБRg4;esY3^x=Aq⸷?X&dWЅDN\̌ 姑C XC ^sbr3!Qg͋bKt^uZ"Vn#%Kmv6e
2JQKX/Z6RH괊Q
2bL_N(]Gksϸ`]-Hszc]3mz鈖J]P Rɾq(
k 7"v@A 0wҬ-c,4+%G&ʠj(yP՛`dcV!sać-YHFD9E ߑ; B^
0. ;Us Q{Cin瓓JW{SZԐH *R^by fB=V\߰M=Z`ebhѾ;| {ѱ3"'D[|/ 4Lu7L2mHoJRo_& H
(ґ壖ΣCd,xMu-[ dil74KX;Mva
KNR b5T܈UQ*ւaaGG;ngV`6.!4oi#ߖG@Go;Q:dywy&rş6 0upN#4hV_WMLXYϕEq.nLR}'{:lƇ->}]_>*75QiՇ^oE=B+oJ%̡{+#36_[ LzT1zK^ 4л.ohcx, }&(i!8 g2
MϩaP88|u1Y0ÝsDw=
A Sy~+J6e P}FdM [tpG0i!N /N 'aw5C D\ h"9=#Lvcތҟm9uk_xBE
^
y̏ "Đ'"qlOe&"VdP|}v
>\M}ŭP
F$u51) ƏV8a+ l <:lkC
%ufr $/DڋsDD&,~Q!M坝n0 |I u ȸ7=cu(2lXQiBS5C 4DD/9'X) exl^} 1US 6WE4d
651B7f% . = ?Σ9
. jE{3m>LmjVVzAQٌ`(6FTY],vm˹?\Ds9L>20eg.?Q~^"0v +#1
Cp}
FIKj_=⇖ItTف:-.V缿$>>"&^t FJjle-IIrҞ _!ocd@Mܪ_`ӤmOJiI[kwU}\qg(sؼ̫ [O3,]"[;*xh&kbI1 SdooI]5}dEGBȇÍˋOYioduV iAL
Y/Y5/hjce7uٸf˒< X4HVxG.$>%TyH}4XH N@/#u^q>QGt8])ռ eɷGw5b_4x¿YR1@A/ r\љ:4W]w
#v^Z1eGLMŪ?0/<ߵ
XS,5oZ/E'v&uؑN\p [ GIA@ߧ:~= ;wZ{xh%yDf3 .>vpm"8TہS==, bܿ0kW
єO-3] j=;@E$3wTƻ/ ک~Do\8ƕϊ MiA6oBw،?`=_ޱL2pzv4<>s6W`!Yk,A
\ָVL .w px*IOcXPVڇ;27@P5DMr![@5/ј T!B
CTg f /yș#V֏̣h y KZk1A
# :7Q:buuĤOک+7eLUܖ겉|, 6D{
:l vF/lK3뱜ànw/Im=Y.
>-h`uFb. L6S QHĩb@ "/#×~-J-Xw\q.kWnŇ&*Ƚ tMNE=þGyK!j|QK١u'\Gl>F h&+[,X8,
1V:H<~LA٭}B}'% ԭ|Ou0S2:o{%L}-d G侒+Y<wrw/Jc<ϞZ4j|}Fv
>@}!&y)^ǂY+.-gC
5n --W%dB6":qJʍՕmBR qJ4E3
f %$!RebN` eYܾ4B9?|
:ZղbK=dG- jɪ`ԉ6oD;hf2KBZ]U(; ++R ˤY-e) ?om8Bb^MиO
bQ>I 5cW@e7F pXDpQp
kdZ[7+4]@n KQ-CspP}Ŝ tJa *mI`8& "A?= O) ˜ٱ˥>h|K (ABUG~J^9ٔlzgzݺ֠P)pմmuWl}SDv{Wӊ9b?#ּH`
l{KK7GMiز1AqHյ8tj8%Q @Xb9W Nv[5=܊ pD)% ^ yzmh6g ;#av fR ^lDf1'ulũmSSq; %7U%[ 3z ?Y0xQVmϡkZ0m\Hᄱ\ +2gry k9b zO:l B3 (~[rO'{SyȰ &x,Vv1,2z LEM [)DݷNK)o'̣ 3˂l`[w1l7!eih)qq_ 8-[z6ޘI
dA~00xm!|+%|r@Q)CU(;SL)=Ie"LtE 1dCiβsdlQ+yzAڟR4w-Xf,B,
xz9lo|MeIbӲ a43$C/m @Z(X }`B P@m4QD
WG-ԷJ e9<Ps@;_Y[iL0"$loԮjӂroӇRBK>`bZa~SRխ o8^Pţ ikH㦋g9]nOEӜV8X:9!:7e@ [3.oE'r 8gM6q8mڊɗ:*Ur ? `Q`1oH2q( x;L]@&0]vA|Hw/&%i_B)N~Z켛bߺ49"s& d(h+[lTe'jRn2`ZO/*\ a㬓T( $d4#/- G% 5K|ˎN C[ sESPE5*4h#Q|'4m|#\ 6"οLhbqwl1 hfH"L-Мi J 5` nTad* 0^Ao즈~qU#%H]%[=1.2&P&[d.)RhPKi) 7Yڻ {1ꮮPTdPk! ˾kiDI`O<].Ygbַ^&-r]y$nQD97N'ҟRRd*]t7u(ΣRq-C m5h; EJS%o1 z-yݽ$ ON{'dtB1eO#n Jv(2EP S z)myx QZC(f5xtaV\@Qh1Ac+A)\EA0i@KVGU J
J Dd5 n_ݏ7;Tغh *&]xi؟F-@y1쬗9Jʜ@
87^) ,jIhW`1fB;|-(dӠ%RQX*aBX95d2^ײlܳ/H Ɵw`q".$hcC~YdaH^ʼnx\س<
{KM# oc*C^hiV
< L؈O?A1AW&Q{ wLBau~1W!͊$l @<["OԠs,s 9q
doXWxVO_)3{˚c| >˷p-J,0'yi?AҹJ`}'0փ7KIEцZkU(Ɵ(nP ۙt AnD(f%7nCS"[7\GF}uH.M>+4%pNUMg~ZBA #uϑ~ V($ U?I\ߺ 6^ qaI4V
NH^_iͶQڞt}֭~(wggpŘYv' Ԧ(UHX@EDhf nIX ܊uNk ;p
v05N V2
j=0R^ R_Z$)@eMgA~lev Z:"25}f Gx^쪍[nCFٷؿ;<ɜ5`Ӳ/ zr) S)e^q~.F cb 1;%_n4iqAWjrʜc/\CULfsl ;Ljبo_VnMh
uhvG$݅CmDM- .7@ʊFzEYz\=Zl$H2Zyj1)]GAfUoڡ&Qa`Q=!wF^Юr^6A'Πͼ_J$aƫ LpXnhVmY#gqVG!ɇEFh4@+Kf )D.yK}[owrT8U& Aug'J Q/;&* ̂},De~_ |֍`;Uc ~ȨS
ZȚ^mKp?hQrbP "o fmm`{Ȝs9Zc/6Y @\g`TˇT5x]ט=|"{:s㢜( δx/o> m5Jj*ȤĦPFCŋ 5 6%acgƌUʋV.z*aPdN]6ZbQL55 UrBh!~G_QwҮy&3Pya_Z)ݭ_+\ \CO[l"=j&Cn" "E+ּ ~(0"JD"c"s'֖OݓP8dϲ Kf~ul$Ra4,Իg ?Jī@^M4JW82)m^ VbpџH9d)f@V:ͤ8 `0@GKp&[ѱ
ðH$jAMptE1:Y |7(VZJ8i5,vkn#ᩰClgG4յxbn<5F>}/V!q5}PIJ}I ք5Oth緷 B, RB[vRtppm O)P0\$KOL7+C]kMt3[\GutJc90vmU$hL8ʣP#Dϐr@"ٟ
(Ԑ.h3Z$t3\fHk!S6Dn`2mD8Mc!H|բn^^J{Ixx"AK7 ED
ؼ ]e")} CDG"SN_n
A#%tĤ E~g0e<} hV̕ Uh=`U@TY(J" zq>ֆ\x"m@@yupjcۘg 2Ѡr8ꨨרӂ@^lFH:_|!lejg¯ pɐ mjr)̀yC54Pӌ7#6b:aDiE6>e]; 6ɖ:}?`ieJej,C$RW
9C][[ To9BpWZT?RAԄȠuDf9#]mD5 ĝv}.
Y0Qml̶ZPW:}̑gy$5#4PL' 扬w_dm<ѩնPyS "TݢM'[
wvnihz
wTCUz=,15w݃
F]4tSZlɎ9m͟Z5$]@P>>dFl ?߄"C #-_"ygjI
KVC"L@mrIK0+D^cp\ ڰ [Z/}'̧xog~ aYq(Hi,Tъ:M"\Be L65
\d jfvSÂ0p(v/gtlЕp҆gNWufInh{ꤊqvy>U`ƙ`ي2*m%B WlL<5"{u
V}G1SUsaHRΝ
a˔<~(]HEDeI.xR!ɝ RaQ!^KPf|Hu뫢}s{]v+: ;]`SO&OrʠTZg
`ZP2Kpd5BwO o4"hM- shaFA=!loʊ?I0zfp%AüG| 昩[ 'DxFq*X
)P
jMO]g2 ܅2wsaQi d2y Pj!;=*~snL
;!߶_N SK0U }7
^DMN*EXKVQʸh3;~ YvOIK ={i>?f^̓x uDَؐLUZ ٸ.綐yγ\:mpH73(츚@حٕGCr^4w}|d[#HøԳ9ĕZ\{.IL䗢Flqfps jMebQڈ7IK3 nڿq,L"K'w4 1 G*{
ut|6LJTjv:1pFyx2Oz MɅ"v E^yrm.$h Qc4KmaVN}TJsnd>fX4VBM
qAqJKч!>Q+6]RեU˻I,Q-z8%0zLm&4+pa> Z#+C#-/]0@M%1HU`-_?_p~D>=맺Z2ĿT*hIUdUigɡ@ymq=yB A%ղkʇ-u9:۪ˉ"ZNͪS֚-D",MQ;'ހ| H Ƨ}K1h#qAtQj@'7ŭS s fJ"7-h]:tU蟰୷a'lA**7 U EYK*އnnI?>ڽ6eѳ}x$;@匫WW!U[}f0f@
?9prV~Ygͩp|PRehCITU|gJ_à
pŗ R^ a˙
TaM29J+_FڈJoϚMu^M.厪Y mDg/d >JsNԑKYSr-)f|0 *ԀU B}8AIoY4 !L=Ojƚ兽BS%<Ń%,AS5خB4.Z w?EBD5[H=rſ3 pӤp VNԆ\a=
p%0ٴkh?fzpl19C&? u
~PVH7(e'܊ r;0Ɏ1ɤ;DԨtɘ %j,W`lÐ ?, =BZeaS&XYXt
ii1Js!g !F-W%i\p-aR|D *}}
6iZ찼"\/VY*
_&yD6}
SDݙ
BobG4'Vr8?ЏkWL~!5vHasտ SZJE`B/g_ʇkO ΥٺN_9rlx 5GKIDdž@JR=S aH]~ 6 v`2JЃ:;dIm+_=XU(-vFXJl)?EjXM
iXmf`1\)kiRhy]sAJ̡}Vg\D>`[8''^fqz@C{ب/Ⱥf.73;J?
TT &t&
l[AxM1K;Qp[#~/̯oE Ξ>W U1 0[oanWhQ
G:#w\yS)^
K0[x.R$ q~UN/F_LW2瞢do "d > .]$$&TꜪvhWҨlB7LFzx?aQņ\֠h[*sñ?زb@Ng!p A;B\)L;='?]'#a %mH'U?!vv Q,8Տ|.;a1T4 kiS 9)JV風%4ud'{ [] Ci]2st! A#W_Ua],s{~JI/ohyBq7nuzj
(A~CH 90aNn'L<9ݰAURPkTZDv ,!8B@mߘF.b.Yc3~vX ửnRg-K[& Z1=mk[I[ZOB
t~\}.-u;6j DP\,q&tXz"R(9Vr':L$) \P&U7|aTp h*?Sw°!ћZZ0qTBGKlՈOw^ k I & F`C+;j+)O"s Pp.y,iZ_J3JE.̌* %Ώa&nhή(sn S Y|)n/!-D ` Ӝ]ZwgϠd~\BRW
M%i#lb
'Ӧês_/C! qsB\J:8)!]YkJ}`Y-%.t5z!U:i' !mTig
IG~Xq%#3FiV =rE]ߞsnk[=} ~)D|3h3ԙj`XiCW
gg{/*dsC ˅'&0F?+[Q#2` ZM?oLgׄ_l,ELaQ(RYAMybꪲ&˫zt?^l\K) Vqt, ~@4gmIU"}?v9ǵo,$a7T-\e#RםR\;VI|]*jAA Q 7&D K3H [zHka ѱ^L -\: P q9ucp·+8Wн4dmh0rV=E&ZG`@ 7gA?r {{dz2{M0g8ZnA8 UÏQ=jy"Wk_iT{0륜V`E
0Cxk.}Vw _xDrzO2AMP CYBםGB
B397^xӷkSR8+UcJQvJY)PWCB(9^wp;\ғ(bW$\!+C0OQ ݚwG
kAt*ĺt-F9ojRZ 7ۊ;xIzFaHQL* i)5Tv{l MJ_@Wc+\0E 7' ny˔
'o0dsbN8) 44LpJo{)!"ۥ\CƓ= b`pzQa#}&!6Lݩ b(|GhN2CAl?» c "kЛM$~;3 275j'YiLfʹ}uEkX wwb+*e=%2Y'u5=
UF3д}1Ut>Wضk] @i_)ZjGEZ.͍VmArԩ|@8= &CF}%W "0V xpitNO${cVs301 ☿$cA@ =
@/sNi( bc(\0E] KFA
]0n Y(PvC'@ l Ҫvx2'1Gت @=3lάU]RJ&akR5"M" V9
:B_s|)$@bd@FV:#yWlGgubY8W8f Aֲ,>#!x fA9t6w}y7ӏְGVgTĜ-NG 9ZU-\)6Wx#]>*#c D
0z߉C 1BRjϥ
r.X YSlBrIr͊.wܞ4tP%94[{%Uv)Q4g9eֈB3/!*cZ*?lP
GQ1 tH"%E>'/EQdp6S]X; K71hn^6Z}?R z%)BfFfT9φ 4zobVTM':
-`9u\ݡf%7~FnuBs[@ ajd-LB7 AςUסԨ0ϬQP= ?gVswW`]1_:C{njhor[ 9/"PF士\f;F \@| 1$hZ /Z Im^&^DzE. BJ'( [+W)a EmbqnP$u
&bm^W|ũ k3[#ҎH?UDyUXoyCNqK2Xb.G
! faNaWxF4Ip3e;os,~^n"Y+&׀;肑]5 6@C X)ߤcLя7YR_8!1֡͡)N mRΜ/9ȅfIRt wG46@1fېjYJklW+&EZt δur
[N/(T,OWdRyC my
V <_98.PYH :; u
_:~ɵ"Y(d ֮O)6BDxs+@uh pa* Ο[bY1ojY" aa^5+Q0d: Յ6 mfDt߉q|CJ;$;жa<ḁzE+y]ժ¸Y8־=9:K *nI3x/bVvg$ z
#ɓۘOW6" s q|;#)DB%X cow\}L˧3WfQf䏯V[Y=sJ@\CHjihrʾ b07ru!uL!k5{ ,
] /$ Hћ)ʾ/kGVk&䯖mzRg1 DNfT!H)(VΣ`o(GÑV'?~Ob"4ap5 3V-쓬6sYtIt [^gI:t$QyXh4ScUְoCw|_@SP̥~
}QP~۱#E=OqrȀ
2
}".>cX]R mnqւRP<4e%⑯D1THC>*bQ('yHG]MJ'=C̻~{2'i(I,~Bº<|<Ս
fKÝ( oj9"QYd>&#Lwe *x% ,go ߗ/ /S$\ LQn ;÷ "O2Jg/7k컉T mZėP܅b*Yq"7߫ PP,_DD[3ȉÆjZ6Eηޱc :8UwSfyA[5m
wܚrM>sjիΙ㵇qu+sv#OӒis\o
~pr mF}=u\nn]OZحkz> j 4ك43rC|:T~.Nۖ?/ΙH,@3ʇ NQ.ʶS
!|qV"k!4h~'T Vx_+zҔ?ݝl4<@)2ugQQ;ǁFƺ ;
)!rq[K; e2{_s§ m 4-gď1g8n _ aj/@VTk=NbSYH_͗87bc/_g?q$v<ݫ cvȱ݄D T6Y"3Yʓ Sb5TkB+}
N n fEs|zZT}cL 5Žt:xBs9 -i3C'㿆? ,~kH Lm6 M=On8JuKT!<}}ɳX:qYQZ$kSG@ ,/,^qnkזG56X];< .K0oj:2Aj*eZ{+)A0Mҁb[㫝#
T+.GcJ*"V^%Cj9+EX&iwmET6.K.!Q*5ٵNsi#O^IrBmOe-'[_a]>̽_#0@ xIa.J:j>"[{ =_؏pi~-
.0+v>kK8 \5aeC,)f013=j4擡Ix]šSC|raS^qK=1BVFeX'K&Nݣo\6wՏb0i$TA}8F')k L[jjIΊwErah]C3 EGl7B3 =Ff9| Ӧt!`4>Z?kH"QCZj0}o{S5˥)kSJT!4 WR\ 1amfśE!;9'ɁO|Et+vJ93#R`.FK/oJB%/瘰 ;uWXMH
a{gLP`#&P&}T߽z;!{CS^-tڗʧM 7eK@ІSRaJ SYb| }/p:ūgFrǓWլQM]ko{)?2w Kӽ]6Otђr ( s ^
bP_; X6+[q{h)Hxn91e#zDze)
TEIyuSXka F"d qst!rֽ_&8Q8Β4y)ZlR;$@;Hϧ_% #H_"{G֢˛hUf3,%7,2Yη $~ZsĽT1_
gU# K+mr.d ">߫NQ*^h6~ nYF4T!+60z^]P"t 1r(Zx cVآ8xOݔT U<
L:%g.۲ˤiOH$+$nM3El8=θ
Bt{9|<
H1`ky>RFARمl(pqb} \)L x?UrB w 0~ R#Uftx3ٝt"bG,V[:lCy7QQD >
TFhy:f3U7&ˮ #k Qہ+,Dubĺ5 hZ
ɾNGa\.mzLasa Ei SgKHБYK 5 /QvITf)?8sn:UKbw]tORnshNIMO Q`P>X8ȴ&YCj/đ n*_ ۢ1".ڢ "|hMftXhG0#{rZ]߈#D<$#Y;QRG CWwSa锏|Ry8zB\2Ab쿿}0R-`5E:i 0XB_ ,ajh <7k|pdf
`knWzбiw|њ ]Vz@t Z
bJ2 z9= VLnphmE#` w+TCB0nn֝d>o= b:}b8[bZdڬVi3s,Sܓ'ic\pz-^ ѯx]:!&2uYnnqmAoXe~pK7F'aӳi&65TrYDI
ol1l2l^`n5?m'W9ɥz^s;C*`TB#JeeW'_pVYڠ Xh-k lj#SY۩|ZB˳ o,@ A(X"A`F?`L-潑z؋Gou-6lBWW H~&)i9!+oDap?Nq˪OQ˞Y~JaEe Z0@P41:!)xکqZ [
s}
T˅E ZaqW9N
+[|u6OWQPb
!o5&L%cgSG7O
ץхd ZJ&lI˶s.'?UxYzo
34O
bnV*th{XB鎝1 :iѧ Ӂ[I1 $z + AvXLFv ]hg?S)0lmĪc A\{IEOk7><
d{?Q&5Z9}Q+v. G)C.:OܑlbZx݊x!{ D AO1Nͭ/B0ҁ h
2 `_hL x?o 8mZV3 f{8V
b/< ޘGBKzr">Ҩa =qXG$ m"ݮ7Fߡ˳OƲG{0.2 Z)'
c5d ³,IҪ»uʡGGi`GY':L
PeO*
_sNU(*w~imO>Zztަ(V n~+t qLoτl 슨.Y0Z="aJtnM8H;:& Z Ǡ Ōl9syUtzR|`Y ;/
_@ @`Ym¿˅Ɩȳ>YTvRPH
Ξ^+ɼ|
7FNjL.jލʘl k 5؊N>,êPS` -dwE:(b&C! 3fxk-XM?iuJc
) % y9j!.h۱\LKyIc͛:Zѳl7wyQn]U
h' Ԯ ȉ )}KBMr 4y1\%14* B$Ya!VLPEl
o0B~ʅYT.$6˰4>SS-j3$ҎSM=6ı$'.B2RwJ~3[PDr:+Ȋ 7brw2@®$1M[qPz S.+-=ۏO@}8;;'`w
E )fOH; I_۹Imq! $4NFK~Wz! ,g
+t] p=
(]Ϩ A7Cr1ٱn菈V5BPwδ4M
|IeYӐpL,]m r)cQO#6%[QgziyRe
4Q ^jgNH+Ej 6 M ^k[6WX(.QB63Pɬ0Z j9!*?utj 䏓8 jOE٬mOZJ"Ґ0cUCf%?'CE{z߃S`%+!{4k5a"r
x y ewc>9+Cߔb ZlD͵gkfc++Eb6y8Y kJ $jIbc=`x伆ivnIoѺp7T-."X9O*U0NG2A6w=UvޜcR`visIsCH6 <ޠl?mvۨ+ mxBcX GǴsM-[mZn*-fV|37{B㉁ FMwoK/_1C ԡjfXi\Dc7IJƟ!7 ԫn*:p6PV3$Q3We $k~!/DZ MkZ_+z `\nEŁH"O`+h+1`į&:|R M? PW`M;z3;G {l.S\$zڼH{
N77ã?aޓ[l<rO[/K k+xj9'|l(?r7Ue_ S0"@e$ ۛY{Y#J2d{V]em,4o
zKb|]Rp)ҧsQrAifXRύ
k'ob 鋈*a0݊I~Il{ Wv
eq buP*ivC @_l*eذ%[+3Ѿb{ڃ'YߟD*}jhx iIpm`/ ued+aAL22˒s_ /k%o xd{gerJ×JfS/țO$Su"f[L ASUzFLlrVEVHL#&>M
?,8}L>pb| ҄"۞ MzODAf[q%@rvu6.r~{w?: y_TϞ]r IԦr*] գBpϔF*xw Xo:B}/S+.S4:LJ
~#$ctl|5
:9wsD#q} ,#%/ u_Fnţ.RN
Mz]*`3~<ۢےx@~Bɍ
3CQ\˖ zFYťFEOA|:)#@&__q [
6,&GV z杇?en0Ǒg:Glq?V sߗwJTVG ٹ
y|wmḐdT6wm- o},`MHIC-\KqD@YTH/ZQM*:kj%wӏay |bB$2K'@QJ EHp$vJ)?9fS(='[l_" ;ΜdcUi{Q4[qIMJ.@eFdp \5G[(t @k$qDX@z Lʼn prZW؉V*y; =xYZ,X|Cm@!E6 LmP٫PwHm𗓛@a&HrпEw.rw:}wdu UV/-@p/4']LRx3o>rYbȯ z8F
"JmdM2AJɓ%1U ڎS8;zu`3\҂aT>k'^9~匘>xɻѯuvPo+h`j0pP7EY͓ -%aԶfO/X1hBjgMmb z ·{iZ" &V
p)KQ Z~F&c?E{DQY~g+Lrj{R_{, SMľՏ^Y
,rUq\ݨ|93 qjW-ulK)gr"4 3j=uL~oK霠?]@M#c"{ЁOC~ rs}!Y7(0\! ?k/F
.mw^+- ET B+}=
O0
{ VP%-U M>GV1s ]z3_u! B S1kd3nϜd5ƳRl
57Y Qɶ]LU_yОj#DcANCzLf;fGEٴK5% eC=Xq ,qyⷜަ
GJ
YZ