freeradius-server-3.2.4-150600.3.3.2<>,f_p9|#mv4e(e6ZWӢݳPO=lH|N_qscNR0? d ' 5HLX\u     @@ `@ !@ *@ `@ @@f@Ft@t9ݴ994@l(o8x29@2:2=B>J?R@ZBbFmG@H@I%@X'Y'Z([(\($@]1$@^R6,bVcWdX&eX+fX.lX0uXD@vaDIwT@xT@yTQzCfreeradius-server3.2.4150600.3.3.2RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.f_h01-ch2d6SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxx86_64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi fiQ> a O  $ e!%nR o<J6jd "(0L#' 8 #_,P p!3A1 YP8+ Di   Wb!4  E-T +Jv,! &]6 F? G  6n41O44Z m  !X&HH(8XH`8(@X8H8@8HX(P(p7Hy7(i88(H8HX88Ș(H8H9 (H0((H88(@88HOh(8H88H(@xH*XXXB1(7 *' ]) E8  p.&!]M2}O .=O)Eu Q"- #B:J+&<FF7x`;{2=%F BuQ DS4r?wXV# %[@VRxT krSL  k @RF }"'YL61 emh/1kc_hn  aA5f /n AE)lv~a VmL?J#] d&!g9 U" ]jL1<Z [ 'F[5 xxawwG'8 } XY A聠A聠聠A聠A聠A聠A聠A聠A聠A聠AAAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAf_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_fff_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_fff_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_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-config/preprocess/hintsmods-config/preprocess/huntgroups../mods-available/always../mods-available/attr_filter../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/totp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.2.4-150600.3.3.2.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(x86-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libct.so.4()(64bit)libcurl.so.4()(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libjson-c.so.5()(64bit)libjson-c.so.5(JSONC_0.14)(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libunbound.so.8()(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.2.4-150600.3.3.23.2.45.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.3fCR@dccGc5b?ar@a^@a^@`h@`_@_0@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deschubi@suse.commichael@stroeder.comwilliam.brown@suse.comscabrero@suse.demichael@stroeder.comadam.majer@suse.derpm@fthiessen.derpm@fthiessen.deadam.majer@suse.depgajdos@suse.comadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- update to 3.2.4 (bsc#1223414, CVE-2024-3596) Feature improvements * Preliminary support for TEAP. * Update EAP module pre_proxy checks to make them less restrictive. This prevents the "middle box" effect from affecting future traffic. * Support "interface = ..." on OSX and other *BSD which have IP_BOUND_IF. * Many fixes and updates for docker images * add dpsk module. See mods-available/dpsk * Print out what cause the TLS operations to be made, such as the EAP method name (peap, ttls, etc), or RADIUS/TLS listen / proxy socket. * Add auto_escape to sample SQL module config * Add 'if not exists' to mysql create table queries. ref #5032 (#5137) * Add lookback and more configuration to totp. See mods-available/totp * Update dictionary.aruba; add dictionary.tplink * Added "radsecret" program which generates strong secrets. See the top of the "clients.conf" file for more information. * Add "time_since" xlat to calculate elapsed time in seconds, milliseconds and microseconds. * radclient prints packets as hex when using -xxx * document KRB5_CLIENT_KTNAME in the "env" section of radiusd.conf. * Allow for 'encrypt=1' attributes to be longer than 128 characters. * Add "dedup_key" for misbehaving supplicants. See mods-available/eap * Add proxy_dedup_window. See radiusd.conf. * Added "-t timeout" to radsniff. It will stop processing packets after seconds. Bug fixes * Fix corner case with empty defaults in rlm_files. Fixes #5035 * When we have multiple attributes of the same name, always use the canonical attribute * Make FreeRADIUS-Server-EMA* attributes work again for home server exponential moving average statistics. * Don't send the global server stats when asked for client stats. They use the same attributes, so the result is confusing. * Fix multiple typos in MongoDB query.conf (#5130) * add define for illumos. Fixes #5135 * add client configuration for TLS PSK. * permit originate CoA after proxying to an internal virtual server * Use virtual server "default" when passed "-i" and "-p" on the command line. * Fix locking issues with rlm_python3. * Better handle backslashes in strings in the configuration files. If the configuration items contain backslashes, then behavior may change. However, the previous behavior didn't work as expected, and therefore is not likely to be used. * The detail file reader will catch bad times in the file, and will not update Acct-Delay-Time with extreme values. * The detail module now has a "dates_as_integer" configuration item. See mods-available/detail for more information. * Fix issue where Message-Authenticator was calculated incorrectly for CoA / Disconnect ACK and NAK packets. * reject_delay no longer applies to proxied packets. All servers should now set "reject_delay = 1" for security and scalability. - shebang_fixes.patch: removes use of /usr/bin/env- update to version 3.2.3 (jsc#PED-6567) Feature Improvements * Add "max_retries" for connection pools. Fixes #4908. * Update dictionary.ciena, dictionary.huawei, dictionary.wifialliance and dictionary.wispr; add dictionary.eleven. * You can now list "eap" in the "pre-proxy" section. If the packet contains a malformed EAP message, then the request will be rejected The home server will either reject (or discard) this packet anyways, so this change can only help with large proxy scenarios. * Show warnings if libldap is not using OpenSSL. * Support RADIUS/1.1. See https://datatracker.ietf.org/doc/draft-dekok-radext-radiusv11/ Disabled by default, can be enabled by passing `--with-radiusv11` to the configure script. For now, this is for testing interoperability. * Add extra sanity checks for malformed EAP attributes. * More TLS debugging output. * Clear old module instance data before HUP reload. Avoids burst memory use when e.g. using large data files with rlm_files. * `rlm_cache_redis` is now included in the freeradius-redis packages. Bug Fixes * Don't leak MD contexts with OpenSSL 3.0. * Increase internal buffer size for TLS connections, which can help with high-load proxies. * Send Status-Server checks for TLS connections. * Give descriptive error if "update CoA" is used with "fake" packets, as it won't work. i.e. inner-tunnel and virtual home servers. * Many small ASAN / LSAN fixes from Jorge Pereira. * Close inbound RADIUS/TLS socket on TLS errors. When a home server sees a TLS error, it will now close the socket, so proxies do not have an open (but dead) TLS connection. * Fix mutex locking issues on inbound RADIUS/TLS connections This change avoids random issues with "bad record mac". * Improve REST encoding loop. Patch from Herwin Weststrate. Closes #4950. * Correctly report the LDAP group a user was found in. Fixes #3084. * Force correct packet type when running Post-Auth-Type. Helps with #4980. * Fix small leak in Client-Lost code. Patch from Terry Burton. PR #4996. * Fix TCP socket statistics. Closes #4990. * Use NAS-Port-Id instead of NAS-Port during SQL simultaneous-use checks. Helps with #5010. Changes in version 3.2.2: Feature Improvements * The "configure" process now gives a much clearer report when it's finished * Fallback to "uname -n" on missing "hostname". Fixes #4771. * Export thread details in radmin "stats threads". Fixes #4770. * Improve queries for processing radacct into periodic usage data * Update dictionary.juniper. * Add dictionary.calix. * Fix dictionary.rfc6519 DS-Lite-Tunnel-Name to be "octets". * Update documentation for robust-proxy-accounting, and be more aggressive about sending packets. * Add per-module README.md files in the source. * Add default Visual Studio configuration for developers. * Postgres can now automatically use alternate queries for errors other than duplicate keys. * %{listen:TLS-PSK-Identity} is now set when using PSK and psk_query This helps the server track the identity of the client which is connecting. * Include thread stats in Status-Server attributes. Fixes #4870. * Mark rlm_unbound stable and add to packages. * Remove broken/unsupported Dockerfiles for centos8 and debian9. Bug Fixes * Preliminary support for non-blocking TLS sockets. Helps with #3501. * Fix support for partial certificate chains after adding reload support. Fixes #4753. * Fix handling of debug_condition. * Clean up home server states, and re-sync with the dictionaries. * Correct certificate order when creating TLS-* attributes Fixes #4785. * Update use of isalpha() etc. so broken configurations have less impact on the server. * Outgoing TLS sockets now set SNI correctly from the "hostname" configuration item. * Support Apple Homebrew on the M1. Fixes #4754. * Better error messages when %{listen:TLS-...} is used. * Getting statistics via Status-Server can now be done within a virtual server. Fixes #4868. * Make TTLS+MS-CHAP work with TLS 1.3. Fixes #4878. * Fix md5 xlat memory leak when using OpenSSL 3.0 - freeradius-server-rlm_sql_unixodbc-configure.patch: refreshed - spec file cleanup: remove duplicate BR: from subpackages- update to version 3.2.1: Feature Improvements * Add dictionary.ciena, dictionary.nile, and DHCPv4 dictionaries * Add simultaneous-use queries for MS SQL * Add radmin command for "stats pool " which prints out statistics about the connection pools. * Client statistics now shows "conflicts", to count conflicting packets. * New optional "lightweight accounting-on/off" strategy. When refreshing queries.conf you should also add the new nasreload table and corresponding GRANTs to your DB schema. * Add TLS-Client-Cert-X509v3-Certificate-Policies, which helps with Eduroam. * Allow auth+acct for TCP sockets, too. * Add rlm_cache_redis. See raddb/mods-available/cache for details. * Allow radmin to look up home servers by name, too. * Ensure that dynamic clients don't create loops on duplicates * Removed rlm_sqlhpwippool. There was no documentation, no configuration, and the module was ~15 years old with no one using it. * Marked rlm_python3 as stable. * Add sigalgs_list. See raddb/mods-available/eap * For rlm_linelog, when opening files in /dev, look at "permissions" to see whether to open them r/w. * More flexibility for dynamic home servers. See doc/configuration/dynamic_home_servers.md and raddb/home_servers/README.md. * Allow setting of application_name for PostgreSQL. See mods-available/sql. Bug Fixes * Correct test for open sessions in radacct for MS SQL. * The linelog module now opens /dev/stdout in "write-only" mode if the permissions are set to "u+w" (0002). * Various fixes to rlm_unbound from Nick Porter. * PEAP now correctly runs Post-Auth-Type Accept. * Create "TLS-Cert-*" for outbound Radsec, instead of TLS-Client-Cert-* Fixes #4698. See sites-available/tls, and fix_cert_order. * Minor updates and fixes to CI, Dockerfiles and packaging. * Fix rlm_python3 build with python >= 3.10. Fixes #4441. Changes in version 3.2.0: Feature Improvements All features from 3.0.x are included in the 3.2.x releases. In addition: * Add 'reset_day' and '%%r' parameter for rlm_sqlcounter to specify which day of the month the counter should be reset. * Partial backport of rlm_json from v4, providing the json_encode xlat See mods-available/json for documentation. * Support for haproxy "PROXY" protocol See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/. * Support for sending CoA-Request and Disconnect-Request packets in "reverse" down RadSec tunnels. Experimental for now, and undocumented. * It is now possible to run a virtual server when saving / loading TLS cache attributes. See sites-available/tls-cache for more information. * Removed the "cram" module. It was undocumented, and used old and insecure authentication methods. * Remove the "otp" module. The "otpd" program it needs is no longer available, and the module has not been usable since at least 2015. * All features from 3.0.x are included in the 3.2.x releases. * 3.2.0 requires OpenSSL 1.0.2 or greater. Bug Fixes * All bug fixes from 3.0.x are included in the 3.2.x releases, including * fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) * fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) * fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861) - freeradius-server-enable-python3.patch: refreshed- Migration of PAM settings to /usr/lib/pam.d.- use chown with colon instead dot in radiusd.service- Resolve issue with linking python3 with rlm-python- Remove libwbclient-devel BuildRequires in favor of pkgconfig(wbclient); (jsc#SLE-20577);- update to 3.0.25: * `correct_escapes` has been added back into the default configuration. * A segfault when trying to proxy to zombie home servers has been fixed. * A number of other small bugs and compiler warnings were fixed. * Added support for building with PostgreSQL 14.- Update to version 3.0.24 (jsc#SLE-21237) Feature Improvements * Add sanitizer options to configure script. * Log information needed by Wireshark to decode TLS sessions. * Allow more liberal SQL commands in rlm_sql_map. * Update dictionary.apc, dictionary.h3c. * Add new Acct-Status-Type Subsystem-On and Subsystem-Off See dictionary.iana and https://freeradius.org/rfc/acct_status_type_subsystem.html. * Add reject_unknown_intermediate_ca. See mods-available/eap. * Add dynamic loading of certificates via TLS-Session-Cert-File See raddb/certs/realms/README.md. * Add Server Name Indication (SNI) for outbound RadSec connections See raddb/sites-available/tls, and the home server tls configuration. * Support SNI for inbound RadSec connections. Certificates will be loaded from "realm_dir" in the "tls" section. SNI will be cached in the TLS-Server-Name-Indication attribute. * Preliminary support for haproxy "PROXY" protocol See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/. * Generate parse errors in more circumstances when we know that the configuration is wrong. * Add "weeklycounter" to sample sqlcounter configuration. * Add certificate attributes to the request list, even if the certificates have expired. * The Simultaneous-Use code is now IPv6 aware, and can deal with NAS-IPv6-Address. * Add dictionary.cambium. * No longer logs passwords in logfiles (bsc#1184016) Bug Fixes * Fix crash in trustrouter module (#4115) * Fix crash in state handling. * Don't alter global options in redhat logrotate scripts. * EAP-FAST will print errors and continue, rather than exiting when OpenSSL fails various internal sanity checks. * Allow admin to manually change core limits, even when core limits are disabled. * Fix chunked rlm_rest HTTP body. Closes #4131 * Many fixes around the SQL ippool queries.conf and schema * Fix MySQL stored procedures. PR #4170 * Rework connection pool management for corner cases Fixes #4161, #4162, #4163. * Final fix for double free in #3188. * Fix sqlcounter wrong memory free. PR #4192 * Accept slow writes from proxies over TCP, which allows the server to make more progress when it receives partial packets. * Add 'weeklycounter' for rlm_sqlcounter. * Outbound proxying over TCP / TLS is better able to deal with partial TCP reads, and has fewer issues with slow networks. * Fix wrong data-type of Acct-Delay-Time in rlm_unix. * Fix EAP-FAST PAC lifetime calculation. * Print correct encoded packet length when debugging. - remove python2 build - drop references to SLE11 - freeradius-server-radiusd-logrotate.patch: upstreamed- Add ldap-schemas subpackage for OpenLDAP radius schemas - Add freeradius-server-fix-perl-shbang.patch to fix RPMlint warnings - Fix RPMlint warnings about macros and permissions- Update to version 3.0.23 * Feature improvements * Add "set home_server state ... down" in order to mark the home server as administratively down. Use "alive" to bring it back to life. * Add Post-Auth-Type "Client-Lost" which should make it easier to log when clients stop responding. * Cache TLS messages in &session-state, for more debugging. * Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting cipher_list = "DEFAULT@SECLEVEL=1" * Added MANY warning messages about using TLS 1.3 with EAP. * Bug fixes * Fix crash in some cases when home server is down, in debug mode. * Fix (again) "read clients from SQL" functionality. * Fix sql_map to return values in more situations. * Silently ignore LEAP configuration instead of erroring out. - Update to version 3.0.22 * Feature improvements * Limited support for dynamic home servers. * Add support for prepend operator ^=. * Added rlm_totp, for use with the Google Authenticator app. * The default minimum TLS version is now TLS 1.2, as per RFC 8996. Older versions can be allowed by setting tls_min_version, and updating "cipher_list". * Significantly improve the readability and contents of TLS debug messages. * Allow CoA and Disconnect messages over TLS sockets. * Automatically set fragment size / MTU, so that PEAP/EAP-TLS works, and no longer requires manual changes to the configuration. * Allow "configurable_client_cert=yes" for EAP-TLS. * Add TLS 1.2 support for EAP-Fast. * Add ca_path_reload_interval option for tls. * Add "tls_min_version" to ldap module configuration. * Support running policies when receiving a RadSec connection. * Update TLS "ecdh_curve" code to allow for multiple curves. * Allow delta CRLs. * add rlm_sql_map, which can handle multiple columns from an SQL query. See raddb/mods-available/sql_map. * New xlat for setting status of rlm_always instances and new resource-check example virtual server for manipulating control flow in unlang policies based on status of some external resource. Patches from Terry Burton. * Update radmin to show more information about the home servers using "show home_server list all". * The default configuration now replies with EAP-Key-Name, if it is available, and was requested. * Include extensions in generated certificates. * Ignore user-provided dhparams in FIPS mode. * Remove native support for Cisco LEAP. It is insecure, and should not be used. Proxying LEAP is still supported. * Allow use of password preparation methods with rlm_eap_pwd. * More RFC compliance for various corner cases of DHCP, * Use DHCP-specific schemas. * Add stored procedures for DHCP lease allocation * Add support for DHCP-Decline. * Added mods-available/dhcp_sql which is a DHCP-specific instance of the SQL module. * Treat DHCP Discover and Request differently for lease allocation times. * Add support for PBKDF2 keys. * Update default PostgreSQL schema to use "text" instead of a fixed-size "varchar". * Add radmin command "show client list verbose", which gives a lot more information about each client. * Add support for EAPS-AKA authentication to rlm_wimax. * Add rlm_rest support for HTTP/2. * Add REST-HTTP-Status-Code attribute holding HTTP status code. * Add option to set http_negotiation in rlm_rest. Fixes #2821. * Encode / decode NAS-Filter-Rule according to RFC 4849. * Allow attributes using old names in configuration files, SQL, or modules to match attributes in the packet which use new names. * Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address and FreeRADIUS-Stats-Server-IPv6-Address * Add warnings if there is no "real" User-Name to identify users. * Add sample configuration to update Stripped-User-Name and/or Class for user sessions. See sites-available/default * Add configuration to suppress printing values for User-Name, etc. * Support dictionary.telrad, which is also in WiMAX format. * PEAP 'proxy_tunneled_request_as_eap' is now configurable at runtime with Proxy-Tunneled-Request-As-EAP. * Debug output now lists client/server proposed TLS ciphers. * Add support for TLS1.3 * Bug fixes * Fix long-term double free due to PCRE calling our "free" function twice. * Respect the "log_reject" configuration item in more places. * Run Post-Proxy-Type Fail... when all home servers are down. * Note that rlm_replicate can only use UDP, and not TCP or TLS. * DHCP pool lookup is now keyed by Client Identifier (Option 61) when supplied by client, otherwise the hardware address is used. Compliant with RFC 2132. This change will not affect existing systems on upgrade, but new installations will use the new behavior. * Don't print invalid tags in rlm_cache, among other places. * Do home_server failover immediately when an initial TCP / Radsec connection fails. * Clear error on SQLITE_BUSY to prevent memory leak in corner cases. * Properly add SQL clients to virtual servers. * Use better API when decoding DHCP packets, to avoid unnecessary work. * Parse locale-dependent dates. * Fix radiusd.conf ENV LD_PRELOAD function. * Make the "date" module handle UTC more consistently. * Check for, and complain about, inconsistent use of tls_min_version versus disable_tlsv1 * Fix "read client from SQL" code so that it properly ties clients to a virtual server. Also document the behavior. * Fix leak with unknown attributes in detail reader. * Fix parenting issues in rlm_yubikey. - Drop __DATE__ __TIME__ fixes, implicitly done with source_date_epoch variable supported by gcc >= 7- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- remove redundant definitions of apache rpm macros- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiush01-ch2d 1717503676  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@3.2.4-150600.3.3.23.2.43.2.4-150600.3.3.23.2.4-150600.3.3.23.2.4      !""#$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&'''''''''''''''''''''''((((((((()*+++radiusdradiusdraddbREADME.rstcertsMakefileREADME.mdbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkrealmsREADME.mdserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_authchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_filesdhcp_passwddhcp_sqldhcp_sqlippooldigestdpskdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippooljsonldap_googlelineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectorypampappasswdpreprocesspython3radutmprealmredisrediswhoreplicaterestsmbpasswdsmsotpsohsometimessqlsql_mapsqlcountersqlippoolsradutmptotpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsecoapost-proxypre-proxyfilesaccountingauthorizedhcppre-proxypreprocesshintshuntgroupsrealmfreeradius-naptr-to-home-server.shsqlcountercuidhcpippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filterchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmptotpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpaws-nlbbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexamplegoogle-ldap-authinner-tunneloriginate-coaproxy-inner-tunnelresource-checkrobust-proxy-accountingsohstatustlstls-cachetotpvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dpsk.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_teap.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_json.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_rest.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_map.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_totp.sorlm_unbound.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.advadictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alphiondictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.calixdictionary.cambiumdictionary.camiantdictionary.centecdictionary.checkpointdictionary.chillispotdictionary.cienadictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.ckeydictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.covarodictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.elevendictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.evs5dictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.mellanoxdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netelasticdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.niledictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.openwifidictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.smartsharesystemsdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.telraddictionary.terenadictionary.tplinkdictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unbound.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzrlm_sqlippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/certs/realms//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/realm//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34057/SUSE_SLE-15-SP6_Update/8f38b87e450812fcf3f108ec13b38120-freeradius-server.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDCEEFFFFFFFFFFFFFGFFFFFFFFFFFFFFFFFFHHASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9d6728fd7a505bec58d848730516aff26cbc8e6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ff1ae49ff4fd6cb82d38386b597db4e2b527d59, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d6fcd57abcd18282b17ce6b429c26fba7268d3a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f78e2ad0d4c17c5c34c0d5ac261534261391f3c5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5303fd26906b8239cdf822eaf6509d9fe531f3e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e29735601ced39048d8d198b7b30a26db7eac452, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=63fade70b9d9c1ddc2f017d7515e50933b3f7a3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=749868d7e3f4279dba1ed85279bfee22906cd25b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2befa0c01c5fb1b4d18bb303a537d1939848bc81, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5dbf079ace8821e22fa91ffba1a9f8bd24e7694e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1a469c308252f92c52706dc98ff83018a330cd8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06fb4340e12f014905e58335a9e2ac1e646e9890, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c6c72afb59b1f74f81b0eff1b9882a8650ba8ec8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0dfd83246d4e1f2f186f19bd265b4f56d22f69ac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2f0fa7d76c8f338405ee4f9f6a2aea8763297fae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f03ecf9efb67c92024b9a9f6a63907f4a2de1fe4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a33e06f9f4928b344d0caf5a9638852c5aa08b6b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c42be3f5e7bc7bdfb772a95e07c57698e95e763d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e70df47c2f9b188e83152f403387bf498dc00462, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e259ea1e6c26b483cf8ba22a66be0dfcb17ca20e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=39691a949f7c4e949f787661790e303dbf494484, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0fd59e91930b18b3a2d93a21a1671aa7d8f1533, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d99729d90e384e9cc432af2daf92890605df33a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed1fcbc38bf2fd7733373d0ca70a0838d6d216e3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38908084dc64e421bf634c299bb85f6f80889048, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=820352a1d84d6527c6394ed3376a83203e823bc3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=268272b21222a4ca30fa3479eaa41735ab419cde, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9764fd0b27be8bbbbdd75352320e205c12533d0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48264ab195118d94cb011098352e77976a7693e3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b3a92f1506faa95bb4dac45de9744853ca69ac2e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6dac3d57e8cab7061beade396619bef5bad6dbb5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8687a10dc5177c681aad327d44cda84603af0b63, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b29b369347412acfda3121953439a0818b2060dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f37da6675756b05d0a6289cf4912fac33a489e5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ade332598d7fe3b0e619e03fb84c9b06d82e267b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e36f8cda03dad3d299b026cf776011b4abf49b88, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a81174c15d35db7833b777d91312a195cff6314, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=314e369ccd289fc036b8b190d6117da95f101c87, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b277f46972a8d939eb5ba73baafd707e5cecd4dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b66021cc232d9f0fa66697d8de389a658d2152c1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=63d4d69e038751705fccd54b057b5844817fd4ba, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dcf5feaa858f3401e69a45c27f391ac5168f011c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=64e22da966395c62d19fc5c22ae7b3eccf328310, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bfab97832eabefd52977e804fa04f00d7787fe81, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c2c231de651d7b78dd4b2a51b9e5b90bbd53106, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f944874c1556fd4a585f83a2a9b022de7b7f2900, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b02860c6d9cfd09e59f0780256513710a3b4fa9a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=19da7023cb92014800e671cb5af0e1afd1e85ca5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dacd6032edd083e66305e781e33f7c5f10fb2d84, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8341add69ea44eb99b54645a7d9d3905108207e7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b10df3138d65dbbb2542e3886cc56269701813b0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2e23fa846384c169427a60466474b33cf28a15d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f6e86fc68909bbab8dc100953798b02aa37ed17, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=99bc050cc20d30bd05d937c55031c5e6383a3578, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b663e585876d0a425de4d0d370bb640b4e3fa123, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e403d2255d4f309014d0fd98fef6c3a617171dad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad4989d4130207b631b4b1f7374b2c6a50786716, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9de65e9a1afd097e60777d181b8577b2ae652953, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=80e95a3118dbb8ca0dca28ad3a0e49c354e48950, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b000ccb0d087c6bd0b9874c061b11cc9715c9340, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=5aa492f18b62fa3c9395b6dc2c44995329ba5ced, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=31aae9a138cbc431adef23b21592813ff4ed0484, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty &,17<AELRV[`flrx{ 3=   RR RR R RR R R R R RR R'R RRR&R RR RR R R'R R&R R RR R RRR RRR R RRR RR RRRR R R RR RRR R RRR R R RR RR RRR R R R RR RRR R RR RRR R R RR R R RRR R RR RR R RR RRR R RRR RR RR RR RR R R RRRR R RR R RRR RR RR R R RR R RR RRR R R RR RRR RR R RR RRRR RRR RR R RRRR R R+R*RR RR RR R)R R#R R"R RR RRR R RR R RRR R RRR R RR R R R R RR RR RRRRR R RR R R RR RR RRR R RRRR R R R R R RR R!R R RRR RR RRR RR R R R RR RR R R(R RRR RR R R RR RR R R R RR RRRR R RR R RRRRR'R%R R RR RRRR RRRRR$R&RR R'RRRR RRRR&R RRR'R%R R RR RRRR RRRRR$R&RR =Nw^)'yWlogrotatesystemd-sysvcompatutf-8995a19f60700b21ac0506dbf6beb57e189240ad0bb02af529135e98e9fe6f0b9?7zXZ !t/]"k%(fm?1 1N8[xOu( )+慳 'ceX)tP^4Vxib7$ˈl]KzO'qS]ij&#YBW"E`&ʦȜII@*1)J9O[ lfhDV%ir<7,gy!VJ{LǶe:5|Hȣ0^Bo9Vc=ḁg6 ܮE~]=/r5IJ4jJq~3vps3IWuug=6֡,Mi޽ 3uۨ>4Y{ %ƻB 7f܄\\ =BA=KUs'8krNAdYq ߳rqr%Z"ED`^T}q%'>j1-!B! lYSVd~Vlɲ˯) yt9d܁aS}ox`puPٞoVT_ ,qQ@\"=8x@~\;F#-BE>!S2jFrzAdO[+% {s5>=xdʕ8>%dIz\θyV#+z93?O^e'"`lyӔĕ~GrQ(2@)dvBer;|,.ϪnU  I> w+/EpŔNje/[`+NLf3iOwspj$t jj֗ իx -C _GE>Mj'ϗ vj^j~c1j*U8^OO=!'n|7}_ DeLO%˗@E"n^܀;k <ɤnȅ׳^e1q5dULc#xd^nq8Zmug<]'rJyU$ێ`#` ">`t>HCe1:@M)` ?NIC ۀ,7ȕ`w!l*]/Qpp;9 "obY;գw,>blfl3kbW(o?0,A& W~E(AC5.I^|5jՍu} 10aVWJ6V1IS1,۝ޗm(V ;#d`Etde}z^N([|\ IU|2z=|j2?A ֬Rѝ:&VXSi+ &^!iFBZ~uvQDs. Kq.`ZFFIGqR%CrDdA p6;M)q{KEcE0x#$=Zm&2"cqfRf' ع78)bkucJv{ͧW]`RNui̻?VFW>~\UY)^h\OEevK s]̈́gB@H>pG4:gޓZ` P- 76"ӷ k ?pD`M&d&*z>"IH>^WY ^m\XٶYE;4F|2o^b^cgNNJpJLe~ U#m[Bd鏅# @By rod`n[F- ^nF~{9.$xD-H_+|W/`qK}3_zq4V*-'\wîf{:elzxj{yZᤖ*׻s8 ; S49SPiP>q5oE^-m˾Uo;u' ۡs%>{>z)DuD킄jC ~*BE Iē|~Be W O~쭞sS 4=l)*w4S\!kbRPX$>mkJU~tȢ4 flr-)! t "B T inM]3. \c .Ns \5 +hn%"faP<>?#|'6imq5Ɔ[ 2e֪XT\&kuGJ!oը0}D${Hw:nт1 bK&KqJ7೥!)ݓ7'j[4X7h`gvP~H#Eo TD2[)mzk$䂅KbW@W欄7g{1*! ՒrF0NںYH]"#U>YC8rle*;IvO+f bwDƒo`aqOFGǮg 3~!i=ʥ+%Ƙ@VE3=pqp YL9'7.F.KӦ5mʦ'FW ^ԓrT2~xAD[gK:liMt ZfZwnfc뺰8Y19lRQrjIljAG{h>*Lyڬɫ_ڦ 3/'&a[tH9J7i<~aƔ\oŹux9p8йL2!lubΏ4 <) #bK3'. :] s &'قҝ߷W!(ŏg2\~h8'CQk[4 5 ։휈OHmy{KXG')khL]RSFr6~.x"gav{1E4wO5"RNIh<\㆝1VͮLsp i:h}Koa5q{`f:GƖC[W؜Q˱ܘ W>XT`;eգSJ0I~53W:??օ%&!|aOjɭgUgC*^ŶKk &]eygJV3oRq%gmm.vHSmc/aP`S>1m8j=e.;>q8._ˣM\."|p&Ca_8hL귭ִ-x|?5QN*]8 NPLVfyڑ2 ˖4nS+g'k8`s@Ͳπ8L7Olp-f LOy}\}6^]qs- tCԖ&#J P~1q,Aǭ6uR#AeV`Py_vnAzOb%m[ձzQP`Nxd/Pz==*oM|:. Nt ZLΓF)H0Z>sM2r6,:mQi6/- 1'VF`HZCp]ow;#pG]?pr4Ƹfy\$g> mj'ðsn9 Yt##ٶR9?,qa8_p26Rӌwcf#hG壅逡LxQbkF=$HXy6^-"zAyk+++ĐQA5ŸٽOh$愽WI)-h)F#0} k3B@&xg<<6yuI t$+IC3ȳ76=^`m{C2S(:ٻ%5Si} MO2*T]Ͽ3o=($g6b,o|h-PKH*>ǹJ̷.4r"E,k;VƱ$z8qDs cd|P}U\mNPm@{ 9KފQ'R}hWu^O8 8rd:1i&jU1 h>m(u0 :d2> ޑ`lTmx? uG!VLg}[Ɓ:}uh12:, 3T4G ܩq'L:iu2fPtHy%{?By+ΝӵFڳ㟸o & I]^n"s \N;S T'ťlʧNBOI7jWj|-bGfOH_^0F;U;nٿWNW 葚Dʧ#!#D=ᚐ+~7>phT:x"+iĠRV3N+BjHjƞѣqӯ)L]K%[]gjڜdծ۲A:P%dh]KU@.jV"뙹_,GgbE S?fϫ}bUZX6Bw2xЬ@AػcβcHb^VӀDY Co+N8MlaWo$㱇֡-Zq4Sp L3I ۋ4N|@wek3хvmܕ~*֭VҮ2̖w7ͅ@7/OTC vJޫ'DzM^J"q"a3MRN J*&ʨWq?u;wjhq;O{;'R8w@;ܦ :r_ L{ i300G$xqS⁷Q+Rm,mgx8ϓ$77Q P$[ X<M3l:@(INKsC5vpssC4jⅠAue) )_rEl9F|AVH8vKy9Zs(G3-^LyBV{\Lp XS熰3$<#s#%nӛNΪ^oV_-+2O! 3ېּS=Gv]l, *+J~r&kIAv9I8[7cgzś4 d]:nq헁K.ЫɛLe˂&js7^R L GIÀsyY'&T ~WqbvB\ zd+^! NI\TuǝfyQ:Z@ Mx29fЎ%d`/-瘨+8(|'2!"_-8ETO˛g"S>%RȐz E}~WTF4Zlen"vuߠ]qK>Z$ϲVfQԙ|=Xg@#cړy l& [ԍ?p3KBQm.fw)7;n0I"}8ё/G*;-.k"[vqק E}xK]CŊ^+7y5QY}˞f qV#&)85qxuX!},2ڡ ȥuɝ;%!+7=϶RLYoLhíœ)z#NkGY6aTn(X*^~y(ą=?KVxWyY1ۯ/3 UZqZS .cFQof8E2Hf.;ybɇ,$W iV+J"+NKYw >8M1Y^!>zӍ:jO~mLW;qt5 $Wy8yA|Hv@uR Ҟy;VJ lxx 9ASBʋ|Z +܌ 81v麋z]Xsr8=L* C݉i4 ђ5knqԔrx:cTT"(ĥߺ+5B0]\(t{1*%;,U\tVUoȴVDbй:*܃s}lѽ#_piC7i,˲;rh(5n *>#i2VG3N Plǣa3`hU'ZK1ڱbht)pC5'JS$PٙSTTH\/:VΆf09e`om:lvfjO!Nq{9(;Mo,0zuO>Gi\45)3^.]Ap ?1=zDXiڝ-]4+*MyJg uǭ%C2ŅD"~[A/q$HrVߐoUF@a+OZ1o`2oP9z%(J{˽")^)Wp W.N{ڬD5^'\Lɾmूl-mkLnM.LÔ#u֦x˥ͳc犷|o3> $/~Uan!VC+/ m,~kLF#E?b9z ~#?t(Y_Z2>p9/ *^ >Vq}MRv򪶭RՀ_PPdtCKg$bm.w^ٗQەqXTI:y]YzZ-Nwv̝Q(K.p-C'6'hRC&BNc$$S%SIɐޫHbo^_RsʺR3"ጡ1GF `ϠKU~zOe/rZ>!&hW!n 'qL}e~֎)[=4.O䇆I:Khidz +&B~%gCL䛝C$;W̖Ylv"ɋuT0%"E1:(mBU:l6uFzxLfJzE.-C500G05k\Wh+ذH/5Zj~/TTghWZ 3-6}wwTdmﴀbO~ Of|/ddT̽<- .~1 _o..Vfh#g`++_obC. OcxlFjJw(sA΄pRS]$Ȉۧծ=$9)F$RCQNr> 3*9F8˱LXI7S9Eʗ}uWgRI0'$H$V"l%ղ)ųB+v=ZuA3 #@ Z)T·5˺N2+OE`.+M|OyX&Ki=ݣ?ogj߄ia{I9V5}R61l5N3Ex|ZRqh=w3忧#[nDŅXaUc+ᷓBX } *jȋ目?5qN4ZNZbx%QTMp9I{! 9ik&t#í>R1H[y8( f>5e ~W[ՁNI'1PY}/-R5 x zջ pu8ͯR;3'Qf㢌]S<P g"k Hդ\H\4O-{t4|zYΚ_\Ɛ]6σ|g;zV sy.6J$: dD,-f >ū; ~JԂ|T_C?o,4 -\H˯q9ͺ̃ r1BEOU`M&-u#Q&5 [ĵIf}帒n=`:W.TNJC_fF/aL!S?/6AŌ =pj:% Nl!R(PbF=ӧN! J38) m; 9TXچ_ ;xWnFɶz&jfWRk4[BVˬnt:jhw[ɛ#0( 3]9ړ^U7]ÕiF[ZF ή DtA+&gpSeWާrs$Vmǎ4Q+_7w[eϮ.aa-wOEvֿ3 ay0Q nH{&X KA웪< z#`G*a]AWI+{/"='ם$+BS9*?7.m'{4m,0FHWqp+@Qq8Ry${%GIZ5RO.IW8'L{;D]p #$ԳOm<8*Aʥu춝ukcq(R"P^c9]\|81hp;R\ Ih;=4JL*zhjB˸| Sw\~Ƙe2l;Ne-]wf+}j f8(*ЯF7+wK:}""*$Tr6h;bPH̐W7Nx1NZ,{*\xUr\Ў 3HQg]eJq86 vjhg]Qg^@Zٔ2ټl@2|뿀LM}A$(K+&"QvU$@ $Nc~)qIϓ@Nw#Ֆ#f}8V&\yyG[A+guw=\y#Oˇ_UT"Wlu',0n?|cVz^ϨqZ:G&nX=[ZB9Ga^yo2 =#zM`9#SU|S,0}FG8<7%-a碨?4G8Y{,Ơ+ᦃW숕 W5쑘<_j+ݷDh4B όZؠ]T<p߇+pxiJOk871j񋆩ݿp赚i=>%h@{ `M$PQhdm xӥ2Ӫ=FboVrHIӁ#a>=;5:2hğk]AK4-+f@br(#ud2NkEcDžAM SX\/)_̕jWg"Z񳩩'+Gn#'kc~  쵑kU% te=[- 4" +}f.qLHooh7 $#W_dboIV=ԲϽ912 j}> иMzzltDV2t$(`2'? ȑIZ]$g F݅ĆGrAgֆRxT!=/ߠE.I/ҎMb*^LHR8zM_4kcuQzy[kZ@7X:֤sI4S\@Fd6IVmi%o*ZapVs"`ٺ["μ픳A<ЧX{#?}x qh"J S'N;骊uRF {MH'e^vS(Dω_i{oa {I"Xk6܃$\s_2ĕc<UPb:Cwڦ /6]S6Jó '*_SdlN 5†P,#mx M*ՃoAz/^NxQPcUO;0V0.Vϩp {p Ĥua ll;Uav76Op[B(,V:SԷY*#`TCrQ017QtB+VɘH)stkUaqH@iWr[ȱwYHRSrfٔ,|\`_,2Jx,`plĄA|mOF\s3U|rML;jybkk,mlBXwb ưJMbM}OC70WV$Gfvk˭~7}/41b:4nج-:rfQ!V~֪O}ӣ=IʘRwd% ;x:ҟ۱ #TN.<yiRۥ49S5$Dl~*ЩHs(i$F(]4o980Q(m>auZ┇Y'9i#>iI1$+L}^,;Mz u=Ȋȇb:O8-i;?I_sAyVj:". 1q.q&WQ!UI潨1fmݓ8~#bP Mk:2fHyW~qf>lcs}*SGEP݁S}<Ҍ3_ U0]pSFFcE[ v<>c<`G+M&%VzVB.{)!Į(&ְ.DDcTЃh%aaZ~fr $)&SD#eJP7DO:${iONQtԐ"&¦ªQ\t})"305ɛ 㕌^WU]r{v 4DdvF<muڒ#"W~Yap 5> [vN@ԜVDՏ,zt}&9^ JY*>޵,i)}2rfaTD32c:i>Bxxbl/ ^.8<ʠAΛ.iVX0PMnQE4mGvUmq oX ֭ߣ7_P, C&0Hխ^;-hwRx݁B*bYaYpef yFSs' FW?ӰZ1+n{)[gr,č",N@O ژLUe!2RrK_x;RElʝTu˥$ 5f(ێM0p-_-]C7c60eSDwm56(J9?nP٘[ I/fWhAױτ2 m`(!# { 9!z/#M(H |;5gBQ/03|_ޙ:V(œn7_wN)#tb"2}LمcII<=DNz{+#hqw yxJ=]pҼ6O, ,MSҾy;zTΊ{.S,#F YhV!DkLj*ڌA,ܑ}?s[V͜3X#rx#6:& ?bΑꬭæt/tSgL&"4(7A!˒%7J~v驵%j~˞{$6t4zK(p ^jR=HpOX${AEU Ǫ4ܓwGtZ(:ZD~Ub~J㒹G{0G*j.L/e_ټPK(5hQ/~VE& 3O;fJ,@ ,XKU&B&#\I8L+3;B"XfAT|CֻP0Gzg ~[ǪpJD<7a%ǘD H^EgMH~&u&F&`u++q}0Q|3`Л$2z XRT!.ڳFM`F5[jM3lSڮMo POf@ٻ'z{Jq ֍7jq&oJqrvBgMNg/SHW*r?1l ;S oD.:_7V@,F⬯62Vl%5[q諡)_LsuH7&**91oz@HF]ѧ |+J<ϯϮEnЫc|] o \)8gOz;Cn 8W|]q R# a0Uw:lԬL¦Ng3r' F XD44FGAϱs1#LoQZ:OwB \8&n|#|"kiSYY<ݺbXҴnbX/^7#YgE/Y}czJ~0a W%($鲸O̷FomW#+|kn:_ᢣ$74@<2l#~#Ks`8 #PT QSŀ}A8˚{V+pv0.Tt\+’JRvAZr3\/oV֪MXV2q8܅ϕ jUy2 j`q< đ]qFǽ'#F>3dq)'WF .(Q a m /0(7ށ5yԋR %Z`(S!$6y_ڭ$"m~1*:Ԇ9%J(^n:*{$DY,AADKFʦ,R8zޜډ>KUppzĈ6=!x y 81 &}#t@;O|{+( "YIB~w*ѡA4]0 R(b`+&HqRaUcG,<ڀ>qK4RɺTEjXU4 +$ɍ}Ѓ O|FHG[EmlZ~nECMry"e6"P|u,wĕ5O?a#c7~%!rd{.UvSWc07ڎԷ" ί^E0|wG_ %f'.Ͱ+HqfuFLuK#$կPݖ!y)鉡>4 UU;qjF&ĝ3E/ܾ9؏.%)20B%aq +;NKL4$c RKtoBu=R[\k+м&*oK-}Ik4/O@lMf]q֧P8jm>ͼGmB)w5M kOVa'SG *yDl&)Q0HвiV;1)eXh䠙I0!?_WWYMmPVY!jԚjڵךmtK-2@C+ }1`2RFf=q)_LHg6no·_ؗP٫ ݀xP -&:(ȝԢ; tW 1i6 V)9"MWfp#ZS#5 o ;A ;&*AqV䂤v54i(~hbM$ a <P#\aIk_SjG{&xrrSglM]$֬ޖ̺8I;m$Y@1N!TS1XA?T>.;\K^kin]͊y7hj\UHP?82]_8/кTJB}<\{mzM6}⓽Lh9))e&TD쫜+j* i? U>0.Vmgx-Q@ES ^ƹEӂƛJމTm8;ҔY7;OAA#`[ȽbD(s<\)D6/X`e~-ldm:p]S$rdC-42bT}/ZU_''dxTHQqK1u5*I]W0\>v 6⍪Ռ6?QHnD=1ܼv.s)n8:w #6Rz%P<voO!K mWĿ%R~c wtX9+hA_Mk`^W0=h]jΡI~x\ӮGPGtfk3r O UHi`K?zo]RAyS?,ABL[A"$Cn{hjj|¯!On;I%n50 9> XZ ȗ4\a?tH`X-@ȌF!c]i q)C^Q1G;-:ʟ'pr&r5H~N@\$}𩫼EDO]B"|peڴ_p6E 0&P^/.JT՚Ը݊QӾ'=N螰#jGKaXAt0RȺǧ0uUcha $l_}0=g9<99p^0lo GՐp$Ep0gy=KHBzis9. m_5>ZA3V>JcyvvKp]A:B)T"ҵ =DVnYZZBtͱR~U(AK"A:Uh׉. ji\&4WlLЃSgy!+-fQ4 朻#=@&oi^Ǿ%72חf7zK=1^txWC}*̽}"z@e~Iu~I`;ȋڰBջQsB[e*UL%FA41L?E[x$CH˭hYWDe_elaF*_=H׉`㉬?#o[$W$B͚!l~dʚ#Y*{:|^g*ƮMKk-]eX -2@@TUoC5yKR6*-)9$g>Z e&= V/Aflp"aB._aNl4fߠ;7i$C'3_$T{& crl\\ ?ɴ HE&3LuV`IڬJ)dXõڳt̯/.Xt.IML`X <Á.1q+ DGr[>T TKW]TQY]΅x8 z~N+wUjkzާrDUO#ei+?Bݛ3{'B`I==+e խ+!׌,Q{Y@oJşjqƥczxͦzaOVdL=@K(8LSD. J++XIAOiǭO?t)uBR^'+ap`t7ßO:oHېV"n`h%FX!~`aCBjl{{RME4T<|%2$y&׮#RaNoup΁Ry/DCLQ+KN>/O|v圌0*<(Mui:.2XRyU 0rKr1JtD*LKCsJR+%Zu );:ұsb' Ue,*?%@>KRKv;[9>W2ljAtU>G4Fs0}!°HxksXCrC=y6#N7*EqL| m JI軇MWk m`mȯ[ ȯVRy.0n^1O!DFUҝa p8flUsRR螭ۏ@6ZCOaf/+Fm%-"Mit+d?J%lţS C|9nV4A璀Wd&2h4p둸0rȹ,Y|LTG,:``+߻{\zB[]?34ru+ Y`ߌ4 +K_#.bENKKIY.S]j#;z FUE%Qp pMtePk+"yo/*`؋P8MUu3O&9s9+4 &)DahcgumqզaM<e*fք0 c.i1iCt5nruD*d| Qp7&94'>C'ـ>ײ$Ntx0-%J8vqå+]ByPH>mMDB0{75Q00UxX;<:"xOY] q۟(~3@n/o^L)1ѕƃKC?WoK wKm dvb~)9DYN_1v m2_>Gg$.M@㚪"G7ްX5M6˃*|/`Df#g-u~WpGj Љ SoNn cL*umXp)PmQ"B?m(DֿIs{!f?dhO F9YpP8󡑆Gq5 ytG_s!a5s}7R}g]@; E6,O\23| 3R~VS&5硐)Xg{v 9a([8UU[d͕`/Mb_3<&ppPĒk7M%:Q-O%p'[m{Gci"Fo20"zVMGy'7a .:}!fFKܜ _wn uW:t AjטW,b2XjA  9h,h,sVTюldh)X+_@Ԇi!L$E!o"p; WN-˟= _J܅̞ m@HoկF>*>C@~4-ƥ';DM}*siM05>j(!gK0")& >⠱zcBIqěJ jѬf$]0`v=}4i~?)9)M^ [2|;d]dw8{ewtUhGv33Ҏ#Klwu\AEInY0Nȓ/Xԥ%N>*)AIvV ./}y}\Ѥa/,uIL2VdyK3>}+09ƮE FB񄌰esNt ?Shq1Oh #HMl\x#ay NY]с/v}i>&W<:њWc|kA3 ׫UA"G +PXC2M͇ %/Xp Rm^Τ!(( J x[k/!͝nd/gy4aÇ`\Rh[!av"fXs&FEThy[&L&!꾹T;$x <+j]\" r;n?Uj~l/7½]܀fs5"1wf2',u3t껎3Si,ǹl`]cD5ڧq MECX&eUb#K֤AS9\uBOhbkyn_Sѐ6lobOӎ_@As.šZ"KPfͬŬAݐWc]G Y'_Fpu'֠err 7nZ#~`vM~¯fInU9Բu a g a"a~wm.B3'𥤐 oFԃ%r-bkImo͋;xjWXQԎd6XEzL3Nz?D,tUsAPܿG^PUDg~;xd,xL<ߡѲ P(30ISLAN[-Ǚ .\ǓB UmX5}5zϸeLi͌&$36\ߨ2.;^]{ֲ2ʃɀ *;[fs TGt"֪nrX8 6>ǜOxX60J#'06` fLh:{SpMwиWxժ34^sXBǏc C3Ӆ^vy붔g%?j7 cD=SiX"2jQu_9z'$K:m1O5Z!A D2!M}}UV8Zv CJʷDjQ?$#165 /qgt<؃S[I/E8`k'Xv}ҠIbOe51&1 w 6pF f;e8VTX(ß(h:->v]FaM!L^\`&d8J1 qílxh^>` vn*\?ah+U5CӤ"9cnѺW 51Pr3-²> ё=c*y끚 vݗ0+/ =XagmXR s8}ZaۡZZsqR\Ь4HtrM1} ~eY!dMo]X ߝ\+#(Py99-?{ٟe%t0"- XJuJoDOpvWFB0,G\5wO=w.jsѿ({d/pr'QaR>4Y_ٍλF|_d;Gk#Om(WB 0D m]l-"w\9LVQzvߘv<.] .`:C Y \梋wkD+䓤;CZ@Ϩgv情[ 6u!L:"ȹ+dcReLQuI2jfG$֤a;JmY(kۨLFBsښma r-Cs04,!"T3#p NC&e~HLjɵ'EEVR0\hnp*ZPi/bB~~ykwĥp#5/3\\kOS\&kx &?D_]N =0@qR4oP/0yz4l"vwm5MY7 "-\ٻ*:|W麟eD[x8w3n nÞlAa*hk9kIGk~O KFbxu 8^<6^e͊iBtr1. ![)t(lD!Q,795f'&?| 'i]aJ奜'JGEnFgh7SI $3cJC4u+FPϲu[ٞdAҳ%Y\ڒٲGEWLZ>K]tl89 L(v3cSfV~>MU4;l$oN '}M&2 b]ALnA]aq?`~<0'cg?_dN.ؑ֕pH|gpZ`[h?^V~ QJt$_uIZ; |(oG^ H.6rZ~٧Zzl@>6Du8.Î Di|1 C/k=(y2(Hr%ts~%IDC:w,&%_R aN6_HCSJE& ஔD#aC!D?:کWx,r936`_4; }b{uD*8Ly6vF,\ F 8Ȼ*mgiO{6Y Fn3u3ZU֥$;8vfO!(Xl'` `R A#ىJezL`aеL#`3Q=ekT}ژv,eepkzΝ3̚LXQN(9YJr݀g_ oc6Z^C4P\`rBܯOB)lnddݨI3-%IƝ1,aw:Tr̵V ɑYU\0 癊!fiz6"v%?Զ(`2tI1HoBw ^fuN_/M {#z+ϠMWi.~ & {<\fxxuDA-Qk,`(-cd4y !2B-`xIe&5!x.Yso|)Gh\]{?~e$L 01D70ҲEn83"6ʐy]9\П<98jwĖs٭o%ƸdJ ^'XgrE >.'ih&<5oSa b8י6w,'yJuҾ0={ZDwYq^/aT-XzaPӖ +&~;@>[ƸtANLGA2|fTDs 5a?q?zaxCjh)QHeҩd?{i0"xi{PqK:vrp<,Pfb 3UBTd5(s@q@㔇zFRU aqz޷U+B --(9d8SfǽcO)|o'LdmJ ;Wm{vOňq/J) Gu %"߾u8o^#0ˡz.$S?@}|~leVu#Q99C W4`{&ԾoO1JFx .Tj8%]RAۧ4_n~a*/vm.7|a=" ߃Dk / nNOnl9]o w6tw!սVo[*:.șq NdN\4:E` EGK] ~Kl[8yhHO$! ٫3ixw?F7 qO8gvW_#A0+2 ᐵ`"{wH _)dw^lXjV*Įu~ej>'@NJm}DFIcP%1ZP(F1YF:Cpx_i#kހ+-)y>OHIRLK&f鏲CɆ:gxVa (x8&/:7ӆ (Bi(KYʵ@/ /-)gKqdWOi8"Z7jvC?VIBm\&jJwZl}H$a*Wm9#\&PxӶK !JFd>9^>^*dJSWcOuUȰ$郹C+N tg|DzRt8:$E >ޗl,GP!t{J# &քŲJ״GĢf3N9Q$ h˱J턐 WK)=.FB6KGD&Ī-S~Kt,G!m"kFf`(wGwmq“:!L˨N9)N7ԁoų{~mJeqӧ_s>Qy#>*~;{DL A\z|\3isxO`e1FJfc{դ)?^Fze\hG žh'||r)N赆 ?-ݙ7N,'@#<3 qz#M-*h9k(ikrqiSRBDm%b y׬q̚SAPPyJp1Q{tǽb{l= }`٨2ګK], x3 KRO6% AT`d}^ǜ@>" KyVK'n\J0@?oR Ԟvr,J{J+TDAEGTwgkb 3zoS`N8{ R+o$"/-qIl qlCQtE_6bda᧢a#<N'@9vn^4b_qrp ,u xtŸ[ZN]g2Sea專ʞG6IqcF`c'jOzlRv G+D7V1tN[ P8O,S!ё3PčHh$(ȓ\uΖ3Q4]yX.$%e]A QHX@t)h\.urinlӗ=eeAi8V!D*̙?m~UZ\߁be h/tIwb%%x (YƪULb[Q^P/({[]-+fbdGM i"2" rٺE>]_IFzOe[z\ؐf06jpӟu>*_Sǥ)/3Ak^u@ 538`F%.:UVo.`o.%<EAE'Kyjur$F6]9)I,$%pN:PI>xRO_/2,Vx&De0d0_C5 5.'ՍW6pvR^a0 /^.h7:P|>-*9aU rI(ʾy9޹RznRB}ԅSpv6fe[{@erXZ6adYC$nOei|[bS. Mo t7ǹtVl4lV? O\v@7!PLw:>p %^=w|r^NŶeUа)J .GI;S3';M1M}~uJHxi0k]x=j@JnBZ`7x-c>LV7սkDBT |esP[A2%{Uu6"J];8w4~/ȅ9]i}M3+>3R,Fpqg>+=zjp Qf $ĮPc굈j~Qׯ۲[f,T`uE¡J48d܍)$0fQL?JղQdO5 S=)Љ;`lLz4E~e;LES@!<!%0,bߝ~Ouw#j&N%B h dQ<(I.;= xEh?Xyc̤\6fIībr޼w<Ɩp -9K> j"MW8!΋`Zi˰GƆ}!YR߆WMaHBbLL* ڶ)7cT,skdv~C4G{K|$M#-d z,Ʀ^|x(ToLd! 2;ԫ$[a@kKat_ڷ JL]PViD7uoI< Q@>ΑրP;6/d@۬6=UCLSwƘXfͦBڂC %ʪnTi+M3lT`˭7m֬ SwSݪ:5c ]86Z4I^6uXOr(.E!Xb5L!(V)7(u-@;%қ=ʾ3+!={+C.(64 wnBaLv]HFs&JTAHcT)̒xֿB|_ Eʯ١K} i5=Β'sI;ANu8E7 %yJ_nke[AQO.cdEk% T˵Ԯey kRv8 kb0^ oO~ּ E0VִlK^D$Ǵ!?UKvmq5bC޷lSi^H\YJB<]a{GwL0r J*i̜`ԃ -%Z <o$tx >p}}Cߤ"@Alm[{<&g:x=݋y08Rg>A"=^Em#?Crg@nÌzjrP6"0 |,=72%3&GEX1RLc^ǹd4DOVȌUu/2'8Bv)+1Sg7xPB `\/ 8ҁ0gbi؁]̡d[:L~>cyW\TyzE-M]{\_I6Kq6&Q|*3瞭qPhF9z.IQWEJ_4Ƨ`&ң byP~j+夘6997*[:|ҿDUtRo`SNok1_'<h3a 0K6U3"Cgr{K!m? Xnm rE=_v-Ǣ0-]f̑.OO]68@.cYC 5bjdGEkK )J|AU^r=.EKf)iG  H%TO֝1q6CK$ eJm)eg 74Vo-'A\1/܈дNhEPDJ G͡}m D?9I[Jө5eҳZԓ[v7a𳮡#+Τqd  B; o~l'QRC8:EIiv";> gS&FV7RW"Jv㢲)Jɕ ͱŊۣtӐ 8`cӦCDc=ȍqY>ͣ$-jPD+<id$QnH* VŚ%3 =IVҀ\K(W-Uz@E5pi•Epg}qXZ GOtU4{9 >Nؾipұ=p2-aSYTGv+zGDw?- *a9b<pkn8 Xj 5RTvίbE ;gc ?otytʥ )#LĀӺ /2|FQ1O_!~BrHgR^is˞Pu;)RBHC!+6uGW5fJg!A[h!X1C/Mbg)0$0d/(ﾍDʛл{D9y˦@EI N *;݈ 1M3FۧsOY6}0fG Py򱙍smA Sy0rvZUn57*荸`-roPU%zpP`=DWdBc y8ʬhaA 19ɴ&Gz2wHGJFO}ɒ!-YD^< xAB&Ml߷*}YUe|Vnڝ .a ɔQDo[OїǨӟ/C3ݻ>ByK3㖱|ς|-%TyY: M̈O@:l4]_Fc :y & IأQ(QsP𴸃"s[nl4R NՀ^~~ ,5ta˷OYs=SXh#Pvhp(8P[9W.J[Eژ4B?ٓ/ bXXa yyA*5#uRљ ]LbOU5Y:$3sMOp#@uۿu{XCZc$EgN6m|C AN Mkun]i #3H"7+r Fg#A4}NLI/S oMYO`ȋK8¹NdF&)PXf B~`Me-^tA|'QK3fb2YcRɜ4%3\zo;3jFvt9ykyE@Ʒ7NgraI KV(U) Ąq`/{+6I]|XBK1<7"45#7(bZ|-9Tymh-JꉠT>vԻ<MXL"NBAPYG@ TY:ਘQ۞5OvFj2$׻)8;S(ԷY7v!v"Hgq&&5ί=5p=4.N' uy3T}=ڋؽ~dLۅ!EY&t?T^LQ{?7iI n[*۴qBE].]o }gg~Ts]R/:\^LC d>,DɨQ ^`\3: 8K8ew+=T`"//A\@̭y1d:'+'jb\Kʤʵc3$cۄhM-KU8YjyMU17>d6=.F&X;IDzIR;jKVMo9օ /#0 BaZawhI*ϕ҇&~x6|m4Tlk쟿"= +tBi/Aںv։]z'vÄtڄ5~ P?&+r@kX+#IR3Dká#,EIM  p5қ6wd-6>n;׶ ۚr-_v>%~7kۘ">e3; uj^͜'~r " =4$S䛔 .1#X-!'QcD(8yשK]2"RwNeL/3 O22bF!V:^{Kfжa@ ZZS=(3/&RїTæI1lT3 Z^p:/&VXt c!y)Q5̘OD2C+q EoF+P!TJDjj 0 ٢Q'LcHOz'P| ۖ҉ߒdx>Xs}YYm:`KF#JL;bժ Zd-P^ۜ偶cD(/I^>I4ouXiM% gʶX54_~?+(Q ACB㩁:ߵI%IW4lŒ,SY݄\‚KO5q) NO=r|X#ogIg*bw/xOi4. T?l£*ʍJ56 ehR,;ޡ+9$37oL BiīFwVr8 gPFm%'>>)alplv vXh"Hrn5q)T*W(|dd+ЃzTqQ/6ʆe}v: οLg¨!ouKhtQRLʃ yc =R# %dn{ &ٛ%sOwl7fp??b U` tX4ToLL'EX3,d@9 (>۞z?\g߄͜6JjGXШ~NO^ߤ.B6iC}9ݤi:R|enTHG |c,)C,:@E L G&w21L[cKeIb0[ws1 &)ca0,\fXJP |Uz3С=^*ݭ˥Wk֋.!lmhθI(%M/xS!.Z$P ܋x*t|N'泯Rtx vbpCUw"Ӣorwݓ-Ջ90NTr- |3?=qҢre®y@Πݶ/P,18`ww%gt lB#xP+L yރW(NfR3qڬ4'K䀨aIc@`5dC~(AݞӋo@2`GSDî{{ejyܜ#N/@]l5jl8߹ʋQ i!5 NPHOm8J`(Un,_ SZݞ8ԸdOgْF 8{Ĺ-#?5!wCvm#G1PH#ZG~N #{fp@lHdNt{W;dk98 _7i[ e0Y .'sXWqzDWi񦲲vStGe\ P^ڢس!Lt1$'N.Fe=W:*4$h4N][%w1N24XL ";lŴ0']}@}HC>1]E?3AfqnWůۺ16qIfr~=W](9ႲƖQ]<~G}6=8w@;ܫWf9s2r^]!{PD6:LlphB2O7D=U'\@}/0Oo6&.~:{y3ŖB3"p|/N!q(2JoB)ӟnNtN$c,!!˲x,}kñ1AˆYtG]~n!UƸGo8a )%~9C2vQ?{]I]OcYSNf he_8I (0$"DLK̔F}gVԓ2AW$rgRw ))jYa b $>ÞGz܋Pw2s!m{;X(\axxPGM\:w#NxUdaf`%_#?O̴ۙ /r\*Щ2ܨD?}?Ȥy眫m^+dkԫJnoN<—F=Y@IJ+oN s{c,;\ 7V%j-?ex`l`=vSJRv$=Qd+5w)U}- ?!woG8"dj jO(K=0u年 `Ua3AaYې>,[$m[ė$ ::2X^Y^݅VMt˩ŽH`Pi7r(w yg<Ɨ<zL_vm)Z'HA0%W9Dݏ JS1t"e'ӛJ-Ua&#:[H|ff4gfM͚Ρ &BRd>s3}9P鵵 tזTۅO5AM=ez4!C?}b/ͽ6Q̀ݭcKhTB=ciB|A%qFU^u R ΎC+s J=”0d)vPJeĿ6vAqЊism'2X)`s(";GpN3ʫYJngڊ jfv0@+Ng6C*׭V&dO`ۇihF6=˸7ԴF)cZhЩaȏبz*_4C4aK5XrOS a+Xgl$k&]| +TMJ yuFys3 /nB,wn*?!jXGE"!"K$ me*XV+x҃:`zEd'm)Uzo=W6 u5HiAG_o~PYPZlx SdJMyo>Үcxa̟v[d-~^E-s˷# ;ߩp ?& P8ԛv}Qgug8պ`OAeBߑaT!wg-Ϫ|Jw=M1yM Dȝ}Om94ɪu}c#p榕hwfX9|Ym6RڊIFk}k#pL(|Jo#%U^SX=GJLEߝ(jzI9UF%#B@~阊xym>'#6! #B'Eq#*]ˊft@a- Y֗}3Q $ip)zR!>GSe2H>NlԠW)33aҗd ~[`lqZSHktEϒ 7jIt ^8 DK%HX2eA=IE8,yM#~ Y#(3m/FT8K"oZvYLUpz Jwfn;˔4^}K8k/LVDZgq}_o}hXLd}k]jAfl Y^> 2Yj) m3.> 1 N'ЪuyH>nw/.iEJ1o֙X0:R c%28Neb ^s@st01`%g09$xNGOZD&Zg%fub-ғ`n/]q0vxcOA=G^6'.ݶ7SK59yϴ)-t&J${g<.KiQ7渆5$Tc C"D<1T}*Z? pG:bKШhԅt$ ?^I,GpB*fYl-オ:H}g8cǤͫ"%\CCnyRjX^y,3X~Y.z(Cx0 O݅4LrN/qg".{xmМ 1M@ a?V5xy x=1C|ٗTvWR3]* )pISp1\x>{Q3 Gk(c;ţ^-R ¬2 ge3ih#7]QHޞTG`% *rY%g$]NlnJM:z 0s5dV /̝yI ^$.G1]yL=R [ "`1mo+2i-nkȐ! W=!kl\96H6U djP3 bXںPþX: #5BeE Ka SQ9ftjVmPِئ6I3[{>2RIqf-;V,  NP 3H#T3,2jX6IpDT ɝQ'xGQ}#dKc#W~աXk U.2""2{`$XB<҉\]k f։ൟL P=$3o:>`-Q#.T{M;kS FAlxx"o V;:ܨ{4sOPd@=G}u?& Σ[JQJGL8kE='3I:z^9@ g\է9nWa(^<1/~)  ۤrP5zdߴHs᝝&<Tފ`A`54c4>JF'N CƯ~% =;q#F6 Xl!wKT]`N&rNxƸإ BJKN v"oÛW> B9H\-A@KFQ5544 ER7Lě6Crgk%c5fꐜJm7D}Jeo) ~ "k ܶUB ng+TBq<,KXMtdmOP5ֽ@Fz$ INLiЁ rZmy .p>];FCS꧒6u¬8 ;I,;_;H%) B N)*Obw)_T ނUMWUA:iX%hg" 7Lp:Pץt&E+>3|*${/gиwC=Y?AyXghۏqDQۖ$%{,^[;/0ːDm۵r"64D:~["m )Jo]2ЦbOv;+5+aa"Mtf]l9o%RF,-;%*8p6lDʢH]¤udl`ȴieWF/5bi92}v8/~QT % Pp#rBBHAr1iVK0y(mkpC;=oZ+`Ȕ{·$]5ҰSn%l M2\b,7r<{,gJc XH{0wM,էtxB Pm*Fp ޴yc'Zx /yM)H"oZ$ax6Us<'Cc8'}SڼE{!մANX)o'0l[oJhT|(Ŕh%̮Dm,?!m #F֫/ &Gݒ4 CwQzjq 3u*ziLطD i}ﺐS+#P`bGdei$ܓ@=6dHnLvA9[@}l]ϟ)2z; Mޫ6Ia - ƀp4)yo:D L\QB*ϝ'^w n9"Ui-`̕C9-rqgS3. süY$ic?;6KHa~G9_S FO>caZ&(\riF|*XA8+,s|i g-V#&+l &^2o a3T#w.H7l'o!*rC`{ Qo`05da ȼ{oЂU@R'3'm&0532XmU!"aN潡f5}{ϕڱ-!+e& ^w #5m(!+ .?]x(Đt|tA@K헦V ƃnB|nzTQ9QZ>T_ mW6]4A#otYg=5و@^Oij ^_phkTcV7/z6M2Qp'w&r&Aodf4aj1:x2(f mYsĵ9;.wݣ{O PڢVվrr+^qI_6AP=BwKZ> NIfh*kN|)%{ntp$uؤ=9/}6៍s/ƍyGoVGL|;z>[SO٩AdQ>۰KluDH={[NsC\G}xJhD](VIb vX}ػ]<JL}QΦ+* DS=tEZv[,,ʳ;pqW aU%tgFjA%QwNBȿB#*06XI eEUGFNKI EAtkiQצ0=u Nw!:ᙦd lfCwh|ʠ|I@'TӞ+p. T8o{('ʛj E[3n/f]rL~ Y+# i.NJº V6Ϩ#xn,c9%%7;mj[(uVё?4Teb^lUb-Dr5FL! dޝߵCnAQB. 3Bٹ#Y쏝f \`{X 5}V2IΏRN|;'za$Ƶ Jv}G9gp-?rН9Dm_ N,mA '#bC [n:fRU%h$ԓU97\5eE>9`DXEr.Ӟi/w5_QV$ opHO.7E3vqT|Mb4;,3 i=FصZ HHsɵkl;qzidX7 q:Q"ae.Bmt0;akԈw-hRdF`38t :(R'D:Բ[>%5d7y#jj>,tX -ZYRML($ÅʒW=$JHGN_v.3!aSy mx_ˀԀ~ALȌiٞ.}hdޫ dJՙ(Z1zsεn-x]DuӊHhNN{[P6<(x&ڪ}op#SKV\6;z^*4 ">Yuz{Oht\PZ!0 `!3O.+Np\ܐr& zj6X חPJL巕wdB* Tv$0Q' NbßX1S݆4BpϪvA.wTOvyN$dxߠ8aЄt,l'OUnikQ91:APY~>סA,z' yZzwpmWS& ~O1 %  &Bu_y9T7kC{ cZ>;c_PcM5v&l?4!Tri=,1AotE?8}6^DP’y:+SCL - v /l>5Od*2= SM?m1pgBLiMA2Z0c|I[]]~ʪ(Gqyhr~6̚ 5{l)u|Ն:mzѓ qe=sk wrr8Hphn.0 `}3UV> &h]ȶm2PS{2LEyC. 3H8Fj,B%U}Jt4Me/)޹n^ ps䵂05@4#I7^u~ nKq>[!\2f65< 7r8RSez EztKrO!W $_*X;Iz3 uꕯml Kl; &0/,!08Y4Kl$pp?"( &j.PoPJ_1m!2O8Z#U͓`ʃ}Ii}{( ۳U2́yBE,M}$l=1\t qDgXnC3,Hj_'y5ː|(. b؛MX|R- Tb~VL\M$vCi` ,c|i' \35>)kM'<ɽZvJңF廋}k;WѐB9lMhij_ d9˸l*NoO*@Bh C2[t msPxu48-QKd).^3 vz^`Ϲ}N>htoűv2."`i2muT=AT XQѥ{'&[Zc<2ru堘lV4x :It 춘1ĞT:͇G~w66!_pkx}䝱n#F"撎ق;dks m(oK?{¼S5ű+rr6c3L V[ L϶=mpaaI>8TލBgj/]RXwWEqcd0 ߌj`j{P2{6k_p}_k(km(=G}| 1h,X)⡌ssw۹mZ3/ČʙJx UZSvLhj̆Vk d,\cb3sU/`vO6Wu{lOL2qX]qV4p$ v5^'5KWhNUٖxש.XR>ܱi׎dd7$Om(3i9ʩ 9 "F [ wLPԍjB[3W.W^pPշئУT-#~۵#pD#bLY 9aR4oU[/Eqۉꕦ38c yk* -zɃ`E}vwaE^5G Ws\]\UeKB*0JuzNU1(u9W7ʣ;Gz2ݢWO8UE0)'=ރ,C~ 3IKe763d]o3c_|ezJ9|jchQE˻78YCɂaKS 1d{uBVJްcb^r*69@ bJK؃kJ@MqN Ԛ쿗E5T>dq0Eъ<4\AN5>dUB/dm͌֯t::y\gMY29>~[Me (_ /V}%s彯}^ک BcLqMB$2?յ\ZQOqUm>m[oPl0FqLPpF}CFaM긋_5ԩ($@,\DsӡhEOj^;/ &Q%6se%^g?Qf68W ,F*+rX zcu-,fg{][@p¥s8 l;1F{4Rq*yuP,DG᭕/0<>rhKvPHFd G{ia3W%(g@$B*p_NƆƈ9oSEgjRՠ:4ZsAP6S?/vָxg~Xq%];iwpSB;:e^ xMB|;aKDA|?'!tj]w=vf<2BqS;wyb*a^Q$It uTad Kr#L/i֦B@ɴ1it7V]Apj~bW8P3yPonW=VjXǓrma`d5|*L& 5q[UdoV &8$` a]#JlprBt+ #3#I3X p0dl Tz/2^@~"vw0۸ ڰɰFdN;@شpA,e[]9+R-8VQϴ^D(mGD}++{$ퟩ|^f;Qd_dٮgZ1iBQJ۵fXj!v80Gօ!],N21|=!NV*VGz$JB4-1ǰhz=;6_4Hg;U1/VMk8Z?=,qj¦اN52|2P}9` QY⟒fh$>u  XzMXH.#R,k-{N8_̯m1V%Bߋ [-]PZA,pՑi ,rIj0+Cdʌz9:_tȨ͈:R`%}vHl!-P fsS r{Zޭmt3vY&@lb ȅv}567 na* 4->NoL4sF2#FםE 2icr0g&;5#؁{vˠ eBW+Ҫ;u }c?,Ui,,JDKJkjAo_zSXE2:l$>vPD5Q4q(R7ߌNR W*OWm tc喀M ȿ%c1}?u'~oo^݄EE_nUp&uJ" '(ՍS=3,\Ⱦr-Sa /><30LD'wYK;vusQhy90͘?2ұ7E %Tn&gj~@|,Xq4geg yYl XP"{,& Z/K>DeB>_fpa?g ^{lqhE?Hɮ(Q=fk밼"ZƐ%X7թ#g^@cDCTeeh!lۤ fSPҶhjgt:vI%sȤܦ oxb7n ?S~(z)u±fW4M*E~ywp1ͫG_+:=!8tZMHr@je@1?H)O>ZXWd$?$/'EaTQs ӟ|XM~^,j F8пd? QQȗ JohZ:1)<&R!|HHk =Rl[@P[Tk%IX7^Ό#eiu bo? -&o*/6CIv8M)UC3>᝸ik,/]!Eq/Ql +qP~Q _ce,+%ʉ\:k&ú2俑"cटRvlԮu]XhJBj;Ӆ}S-@xv3%p@KA9w 殜>qADD] ]($H'BM/,f4/ቬŭD[ٽjj]ytOVwՖ:l3@?(H9m :cj`nQ&l0<Ή FW@Bvpڛ8'`F 7NQueu- lb0RO2g[B `PC U{&mTbÃCf:>!G ŘQF?1RKƙ0R]徙39;GTς[.@YL\uW/s+7@ޖB5KaO,2A!E>ZKx9,079M/J![1h<$*p5p!e T?z*z +q4\in=M0m)nR wf2ɬΖ \"](՘˘(r zB`&H2]93 'k ,)b7xi۾4n ;JerzZբ2#* ,,r~xWŠ ZBиcyPե"`ERŒ q$xI&Ъ#A?@k^k;Pj\njTg 9-tq! 'a7c'Մ~:Z +VS#61f:aIohhԸQ3II4$nC$I! ,Y{bRAVسJkiԑpq7GbHMyҺ_ntvo\ˡɡ^F:g@i:T5`ҧEWX7$mգݒ3Ġ}CBw;DYEI \Hh`ۖy>#*tgc =VAzn8RM䍦8ٚ0jNy-/d+KP JCJTACmk0nd˖s7.Х6ל5\{ZU-p@% ( S %Gvt Vu0Mۤ΢%X<H7˻{˹vl[ķzVNk/Aז:LS4bE eC.%xswtE WLT~H/ySVI.B)DN6.i٢9EBX8#kq, A~4nv:jo+"kbQ|7`] ' _lBabH2L"h!dfK`YHuX&BJ֎k(n!^O1NfʤzHú(4T>"n<.P 폫Q|Nl. Lr=^E鈔C|M^J0+7>a@[ S 25j].QR'2S|4g{(wUףf`hc-{2 N9f@؄T+.KArRF*65m^ޥ J9I]Âʟ6.އD% (LiΉ#cYOrHPC3t 0н,MKlO.]A3M/If 9j 4ir_@3}R3_~w1N&Juk9mQm A^8zƤ@ʚ!4Fx+3M%6ZY\KN曩Lhŋ! 0tAVʫN(C[" 6Z6UKDjr+tN ,r||b8kHq~hSt u\!AK~$DV2zҢF\,:d%ک W.[~5lt5Qt+Ӿw! +)N7ðH,ool>)yWI5ȼ;VuTiӔXZ,Vr:vYvEZ8'x΂V9(e>ހctif`+J\(eyI"̃^6K 󔧳Yދ+L'rasXRa]&U{mDVluQ2k-?َNsT8'䒕m"d8wI.ȬveM^s93&V3]Vo r1l70ŰH7|XRo^I e֋"Z;ac#Yʺ,#?p*BU5v弌aU9)3M ??lg5,oBHoτ[2بS".!lrlPO'ށ|,-p_;gw|]4uŁ@+9IVJ7*Hr i#g3-r 0y1I! M SO-_#n -z&l/`TU="f%ݳPw,T3^p_TӪƜ$wpك/%>M89ΚTO,g[p<$hs2`MnOPXtG>OLY0nx {3i+t"JgA߫dϭ1ȇFUUX1ȸ)Țz\{Q$ei3^bS'U?;,VR{}hJqQ^M9E o,OP Vx\72ەAh}g%nҔ|riRQ;LT=0Nk1&ۿ?J! )ޕk(rk{4(_Z K]崧oeʩX\xTKr=,Ok{a(ׯLnCڻN+~f5TRtNB'o?6 aڳ#=AWd=EAӪV`pO{g+vp q-ISmү8?S ur>6X%/QY=t &~n;-]Š: [=&}a‘KTIt|#/,J0 ާ.^tJrENR5*Tv|N<O'b" ãy?8MtJqxmy=(?{yjrM7 vT5[8Ƶ9'7 V°86Òڈܲ:P P,ٟ=I]׮wՀKB}|C@,Wo8셐y+PKu ]8(BKgzJG?سH5֏ohO_TGL|]T/DkDլIw(,~t|R 6uբ"'a [n)wզ,%ifQGKG_CDJ=H %s5% !S׋}Mm 2D(*KFm}PB͞u%n0p θC i<\tD~EaZrpN[w|T d -U\|̲5ph-НԒY  @=]Zo~XWz2N~0tk,da_YmN@8(Ha|$.AX(GL $&>5|{,NAq$GvnUr̻8^?dڂn(x6nSfS.PpU.rz.e -ޔ0APHUAEո9TNU ZL:25]n^`tߏZ[a+cZ-XJO8w)oSԭKԂC0KunEL6%ѥBE7pb-OyH1lQ kLwx;dk Ah\]Qὒ-2M`˝XuG2@ _t jz@#^ cC pU3{o1>nhi”8/k _綅.l:&F|L h1vi5cGJAQ?Wz1N2X\0cL{g DPx ]0pHRlع"`d̵cM@l20)d8Dჼ1{͙|c)f޼qXS2P踄Wg>oVr+$'q*BgMlYtEx`8W?'DR^7my'Ɔ`³QXIzu}ou_;`]sӉ2+a`A/r9f^qS\JXfLv{ I$|GAƗ(GznIzj [weA+cg;3cΧSk/+կl' {  XvU^1Da~AN>b3u6ɖZ21ږMilֿl۪ȩ}NNpP*_*R/x) ˾f\^lE~pno.,ȟhN^(KM`X?.!W%jh|VNRGo~<'ٲÅV2}ޝ.w.ڂBCi833)Ӱ9@*ZzhoHZږ"`;I6p`Oi ucz:wwRJ/u/SXqu (+E(su Ĵ52Mu֒?-bY8g;;v虤}^ՏvѰj|N\ 5&61f6~T-E8^'9"gQU7҆^{RmUws_\[5r 1t>@zH`3~)ߏ[xО'YI=:<~A;ck&&}Nx_ DА:PKãҥHА﵊WrڈH(y%Rijr9/@6^-;"SiageQC%sHF]51lyկ#AoIS7#)֋hyܩ) Z],!M>| ;IL 35;2Mc$=yny%=!i7+\mYPDä*i0%ˏ{ECZxZ [,|:EX~7!%;wZ =)!m_onw!K_d#i+69RpCn(U¥J]ʉE;`+pR;;_6*U,o1k5ez=%4nؐv7ȑJ3&)Z?p=xn7,+c{!iJ`z:&=UqGH5EhgD6ϼ\+l${><[M@Id|xLbD  d/؉]-}Jvm?zɌu:.<$B'.dםG6FžPXdʟRшLy[l'=>Nn1+Iweߞ. CqEܒk[Zzkz^6&9R5V{-Ɉ&( ՌinvG*w? *i˚f(& C4f:jUAբVmQ6t.5th B1#M&N4 <򋈢zH@5PO+I.ø't-.,xMwm{/CnƲjϣ~eNVIO ۜ ShMFZ]_ŷR߱-`㝉9W V$5_Ǘ;Y-=j^pXŏ',(+$:'le{M; XYc*2 uO`TmQ5ʢe|^v;׌8ULܧ^EeCR$\2H*ow3\)|=SR:Z_FC;~icx*c,@J 䦖L<ʫr5V4Z5Y=AI26ȕfO~xqw## d Lg:VhdFW\.$P6iC*mhMC~ތGu&!U`ϛTװʏV+^uq+4/+tz4rjX2A>e=؃Ȭn8"bSHm 7;dEL$ٱOI+,pKȺeEN0nPvGUǞ?* [.{?:G >}<pTR;?Ic3ϩ2^O32\ ^]M+$$[XC;QȘ/oY4K+ ar;<&D@ Wҍ1!u]3 9:/yL?N/]1ٹɧ1EimLRAI݋y -=9pCSҺLW]yFqja"XZ՞*#gt$JǟT>VFAODUt19#Xn7% Ap1^-HpF2m0l&V E/سx,mSۺC˯<%]{h1_:IwKHGH3L3ɿ; QTQ̀=Fl-hqPE? }R܄5_ŗWۚWTk°o#u 7L70h%XDS7%vTOU[x4N4fL8GV/>o Ep/ -BܚBhn1&մx67A3W SK$x#k7D4qvj><;D$%RR$@mo. [>:ًJ"[י_%P= EX \ $.4g70EJ3bK 6mJj %k;ůIj+t:d@Hz(𨿭Vtn@cHQ (?=u茸ꪎKUn]Tk.)kݥܭ B>Ӓ ?@Ȱ3?j\dCR %<^|]g;хOA^6dH'a֋2ܐ{oؗ @z>iF܅`jA*8{6p3fV3-$BEVA.vRҾxl qKJҢhٵk8{ sY|Yy)t[21Dԥ˟(c9*Y)_eѢ?g- 8~M g}4OP ЮU%sWCҿ Uf89UgYV2C^i„!(r.l(hU AžWX3-ZmxNCa?-۩Dğ# S 6/[dL7SrGIخҧ* 4>޹k #|^}2؈ tSPb8#Jzor|Jd[言rRo*/B?}n9 o 8ߙTT$1oޫ@z"IqF&4yXBERɐD-an98ΡI.rfs.ܓ'&).|Fcy7okqt(z@&`'0-U[2ًueK'\+v%n ͠NmKqKӛ -5n9+uV= >V.m\=K\B6=:q?:e)ޜ L8MʟV;>(g+@xKز˖KI{x3R| 놆3J]Cl&nj?Az14z=,hX&IAƪ$꫰]i 8EUs$=g %#n3^צNa:EWDkgVET F=2MCl1ݦ T9%9 9wb<- m|-?m^+{,a) H!Lgh>kAbc;zj[>Ga6䣶`|$]w5rU8<~G>C ,[*c_Y4؂Mpş6ݙVe† ǭ$PMqOty ul՟6JÒ9Q XRNVLx H=~λ麳V_k(=ZM Bx>;x'AM稷@fy Xbm/ׅy=KO:(B_ d.| ɛщ#Ն²%$ٛwP ]4Q9(Y[u?;0FTRv-({P-N q ~=c"Egb+`0BcC*'3􌱩`OuOV9v /9L(WGrm#a˺^lEoODX?pf<Ly2>Qip@YҫD*祝߱YNBqva~GQ0qquI#/ɾ4Yp:&:liՋ(oRZ';p܍M}QKCgF?Q]d){rc䌜W9 '|rOĎ@lGm:+}IPtX i%Lo/ds0aaQvC 3c9oWéxֲR$dl/xR& ۰Y"RLbmS6surji`\)G3}go#xY8&hd~ǒ(^r^ڡ. g"GVsFW22ɃSY ;}w 騝6 ]OcDܨ[Et~9 Rčǁy / ɪ/ϋ|aCg̀V[@^=˭!yۼ(S3\A\Y z_5`wq,ݦEY~l)Id/@H@˭痔XN"b%|fS-aQ̨>s+0U#-//k nr3,n=U$ˠ]#%]#_PTwmcXrvuҽ0ش>qk^,ү\"KMNf<P?<}X@((^$) /]E\V2'"[A􃉌\k#"Ү>/<LʫCǢP 뽭"Mydv8k`HURw+ՔI NB~˨.!0P{.7;R"/b okh;ɣV&lTIc4nIX AtD͠5RN2qEYkH+'I'*F#f5ä :fJ-MV%Xӕ$?Jl_<D!f $bcv }1 DCv :EBrT@±c6Ε:f3lީ霩|,`&+#Ld; c ]SKI\%>}/*A[>Nj@{kHvİ^gHyV$hk (/R f㟕xPS5.C]6W,kP3KPL[.w^~1 A]HOg+թGR?>ϴj"78PguAM^u+@n!ETrv8&n|\bb B3!}D(OT>R$T4B"{boi@0nPmX],T'lu}CFWKAEqYfژ!4ʫ^a3ڪߛ.yCU?I~lOͥ`0_0mKx)O` Naڪד'9_â:GD::[?2,Z½a+*' G5bCW\ B&>!6vø*x妈 xv+7VAj}ՅKܦDt^ܕ`+*_صjSVcI_)]~Hq {U:ę!]>0~I4b:PmrK<<XŤQPa T)TgS_%Q+.Bpdt.˻~mWn%x`*cn ޽)Wr\b|m`8Qh_n8FE3(5 GXW֯\ym]a{5v8?Ā6$ldų&wZ;feƕ_evpAh>D7[4zSMI2=@ޟ~Rr:]x&6 ] QB;n@|%3b޹m2Aa運dd@Q0;Dbh`zxu|#v^;`pn݄ɠv䱗ۛb3Aht$@*OdvTCl/!+($&2kaƴﾙ4=>#)f L5r,۾z(Y'.gqe Pmvʁרef%7lcLKiU]1 d G(F1})l=% FS&wȕÁWQP]z#l=*>l> 樎@V VHwOp9$&B%lWQ6ApR)Nm^Wa,=4W}i:h`-t`c[`G܆Q434 uXV,c/jwE+0'$sJh, rXw}XhKLױ6ږ%`XUz !j~W7xJ52>gګ9,L盧clI5 {[];΍vHHJtV%k`fYqV[vjcpH57`+WlZ0FgJM{< VFj9bΈ5- d 2ڬD1U3P> E翬7Nxzz3D.eH3GujJ@64vZ{GGz^UA;~Kʶ. )zLq#G%= & #DAA;j@4Prh'':&pCvTq.Pd>:~S*ބ)4A!28eSCSSTo.w׃M>(ZCK;E"]C4^ ]53_!-x)cox @,Յ//h"෩9ă!С¶}4,b#*X/ml.$0EȪm6@aFJt&zI#ۀbqj@۟^Y2>GwAhB<$5`t%k^B)ļ>M L ]2W!}' ٓ;A.U[`"oNmTM (b?9fKPhe#*\@ ¹Q&mGw!/XzD +##6¤~K/A?fZ6&q( ;/Q&qղJ|y. #쯑16" 87tDY3h`p6 D"Mĺ}aB:L##0RXLN]ƅ$]IIꩇjH,ً4ܬ9/oE1مw kPrlz5wƴ8U(,RP\hrTWyICnJUP>Y ӪdZ.zQ3UXe=m)kBa6J48C^{P7m7aƎTq* Z^OծlIIq8\22[-3 r9=YͯĚ0:F >'L`BOR"5>U$ 22$ڎGIGw }ov 5DafL-of{t"bٿFڶFyRpUax m-C87]kṫ6HǏS{zCkTMz@7.`85'cf9#HZ M#ZׇTMk,ѯǏvˡw}V%e*]c`~o`@?7}Q.ڧIGQVmBΐQ5בxVPTA&7ukЦ[P'ytwPl}?>t*lBK%VD~`/cenm=ٍ[lRʾ}N1w@`XDfr6sNI1̱E͈Pk"/L3Kٙ&Śjxn“ֵZ vwKXD {ҥ/T7 hmBTsOtB8,kp \J \ye>OPD }l׆ϟXnegwѠSgד̑qsY<*2抆ɛR6uH;w;osM 3h#XI4m@@.كPyTdtWߖ>6oy [%2J9:g#|3,R["iZ}ra&&;CI~$FWٷ#[ՍOj:ۥ_Gy|{35f 3 #9%/JP"n87B0pPT5IgtR|)JBAކX+:-mbKτS+Ua 2Z3@Aʵl埆*ZƩf  ݅1dpecO.3iq1J=(N& RRpz6N7!泥޵LFp{PZThsYskc8Dh` h Ԧ@R9.^ó#–9 ۮu8Ti^as,Ǒ}Jlqxt$15`[=>  m3q& H_x&<$͍BY*-=T~f;X;EG;fd`gV%ԃ7PF?T3bvk}\I?Pڸ/te;Q@`t:`Ր^鋳]BcWH=ZC৥Z t$ZdrW!5R5ƙܼ+Ś rʘo5A>H?N3.㎨얱8@K{"{ 9iD#*wB}T#^;1ЅͬqvC+20x!S-]$ 2yIe72]p*ֆ*g^ş3ϋ(PjQ8*=<>D">ȈرtM^M<̀?@g\s?z'UG=Rb(L\\h(Hl4J#M;AAэ|I۷ 2ZsjT|+,C}Pݕ5 01|(uV.`[Nx'(ÍE(;17ߟͣ#4Ax°e:f? y aK)_ @_W^Sfe)nark"S^%}Kue 0f7x!UTx8NvS%Li>:ϪAvJMT~~r|=xD\,uCP~#s[:6m(qK5+Om?Nx %hXmSkzJEk^К!v|] JU9iY(Yn愹dC`G@ʨ'.lưi}f;N>"nj_#!t ncx w~[^ +Y[}[Y0<&:3пT85LM˜pJXmOYLۙţ>}4 Lfe_a8W<վeKP+rGK 5=mrܣ$-AC?5~f 1N¢6O`otC T:+E$ ?ؕQB%\ (0|/YrCVOOǢ\Tмߴnj֠7}vfL?*ElXEr=Ra}ucLcy ZUV2.jl?sD!QbfǷ煇ع4rY(؈FCSV\$H+]qH^!ӌ.6[Km1kmrRz䧫ؕ$[ Y˂Mtr(K?Q[ZNoA~^> 3ޜh1J:dPeߙ\gSns$OH[lɯ_Uk\xppY:c+1£StfiRGhd 1 hXOۊ>另Lf@ ԁ @rSdSp2=cةK`W]]?o0X@E]-v{6r=PFމ83۴rW[B(}Sv8(!:œ9t>օJzj]ΛΓi@5J^ʐS3i|)LqqKGU=rZcNto55Uޕ?M1lgBW-`P"//-;=MT0WVoƵ}äƭ~^۱^VRŹJ߭@_F!ƁwDkȭn ¬RG+bBi3x`v!0 WKzz.~MmNgTTPcLjO*M$NnbE`M3w (jm [jsQ%!CB?m/ Ա<,j@w8uАc6u"!MZ_&%@e} p6򵡑̝!CnGْ)#.U0Qfʌx_YQusP[ơsSkՊDҢnd>,iTE6QbxcTŦtp$9-([`\w%ٶM.fz(m@F`A>7 ᴭ0WH04 xNVPRֽfXM :Ci`q1l.c3Z0ء`$kf'='ۣ$.K[zW94HN5 ݞeѴ@Hnݤ`f ^|xԔ)7^;j1p=`ء΄]ɘANd8)T9IM"Pfb24+F@@ rj:at7 }Q%.P,0Xl4&Xv,`Rtj%Uֈhm6Hkvx619̓_5w+Ym5MO6 cS2pcoT~^@.g^iydy-r 1–p' 4앵%D2>t+nE&ssDyv^S * G)zoJs;09uFCxR+ɡ@XO)uLOS6̥~? PRUFol5s!4tJ' gL꘻#|m+rxy_M72B[` = ̗Cq2qͫ39t{^9=X6Nga*Ξs ~,:SM 1:6" 4t$dH2ܛ#՛3['ZpS+ nY Q]~\1[sݴ( ?[rc]7F@aY=T]{ux 0Wc{~flƇGO%Y孱PצAX1k_oݹ>"lf P Ao><p^HVIgd ѵqEӚIz B?zbQI^;+:gj@c>C' R%CWJy!(aF٥4o A5ù=/=筎il u}/}$$'OH,GݿKPױTXxEKqv3y)v'1T`&센}NU+5M.VYWG8gd6Vm'8őid`yD3ϊ_J"ڴQ(kE/(3^|||jj`"Eiqմgp#8JdKj-0gN 6}fiTK,#M&x?@f;IN2JsɌAGܜh|(a[& +y/qS D [d{%aZRDtP+q-Ezͧ;{B U*z{P(j\|EJZ.{͙O 4` #io<ħB-p]mp|I- * lhfc|?Mn.[:mVR AA3wTL ̑㙵O1_% y6sKTqzWrD,{d awS7زauvA/3zƅtrLjUo_1aJFMNO31nq:|uPf]M)(0D]_I 탮qFt!?@)f٣dUة-ջ0iVhH}{P!itsi=V6B?atXLY,]I3ǡ| TGTa@a!Q_qc4p¦1DUtQLuɭ%]aSN|?u Y*QY1 @ cuBNבZ-H֋"5&ӯ">Kj= /$F6̇+4j>'cyhܐv,Ha6UZQjxE vg˒ irH`G]2l_qA,M!{Tʃ/ Q!0^X+{ |kzSU7Uc'5PR"Q$ZfDm ͒1NM&k}9\2-2@^:R90ؚvoYI/×ѿZ8=fFnUxm} k>);Q][ 97TFo y_)h}ewOp'xigW`9: 1ײ=A^]#c: k]nxӴ.Nh7'B_2l= i0>4|La&I\ 2imK`S{]-v䮈@ɛd6|׷v Re7LC⦩NN&֢ЉX|`&QAdՄu`*=aC?7V1 B~?&ܟfUV751txR ZNVqWa5D=٫j Nt@(;­.Wo7Ӓ0I`kv Ym8NڮOQ:43 }YXJmX<Fq~:}# CqkV]) c@d#tt)ZRpMdP}7&vxKDg!1WVC)O "ɡ&7>M^<δ0WI63ǯg}צikPuoUg]M *T(ْngGP|,KLì<u&Uٝ"t N}(?;4da"T Lj GT &94Dm7õ\7{t#\IESW^ue9A6?JaO;4v1(5"Q=͌Γ0*c%nz:,xE%KO]AM ߎuuv#@J=eܾX(ڜ%݋I4R+_r;CO-4:|!&e@{'MY G q@K$֟е辠S8K$/Ml ]]fnZ|#v "aRjEkpPҝhIHyx}8#/.yR=aWBVx^^KZn y:EPF;6q?}87iW?-G4@h23g&a 怃|\.V}Mu *t_d3F^h(+K3`0UZ̠Ӑzǔ]V*S$#c;C4=Daq ټy&8hdd< [˴9pwj9P N\sc/,ՍƄ'QgWi> ٪nlS?`i^}Y7E$@2<]4!f.82v/9VL~ρXZ~PSBimbv/+\^Ӫr<԰r 2,߽ '3"ྷ""ط:%j9D*VC,A3+"U)tA`sDK#_ :ڸ7>7ߎl< 5+S5L&vkŵCCCѦzriZT̫O^sfA6˩ZANqAmH`觾;ƃ[@dGW;¨G OMר 5-GMO "mOJMJY%T2ƁUqׄx8h "Tay6|2jCD]#DIT',Uc5݉C4y2S/SKRۅm,id:eR|Qu1T!^SJAm^,<+˻Ѡ%qa `dJPGfԬ9fc˭+y.("(;{"CL,)Gr>ЫcϻG.(`w{"U2Aj9} gnĬ g {R@<љ}4}zay .4|q'kwJbd>R0?: ۞I/egHMf*GStl=~Xр12 ,lYgT dJ_@a'ax#+$Co jr0}¤^[]D Z'^hbk_=HZZ,8 {Y]ϴ+mݻٛ8QU,J`=7AF`puxYT-Dwߜ|o~.vR4Ս̞- totvz#姟}"c諸$ʩ6@x cjzšC4X:Bd?? x836LAӥ aA|52~% ѿ\jESZ.ttiE*DY,ڞ> q#늲b5-W*H%r.C3G!Q{Iģ /D:2 _?xxuG|H=g4̩#5NqhgѧmDo_ T1x1g}|Խ2،rH,^bTQ8;sF[H"mqjW܋ŊƵ"CnZn^,!6D?`EbPٰRAԈoЖ`Q?Io[S@6?J7?"q qr~TNWT⫒jI=|cHէT]FoPK*맔Tq2{S;Å޸M2)xw# <Ǘ%s2,iS1]tL!|l-2엹䨗cTY:;]r.)5tΠ+ O- q1Q1Osէ>Ӌy'A tdEDTX.Žܞ'i-MuXƅ #v7ES]4E޽]EB.[ T'GKlQ <qsLE$B(~/% βa>s7!QT?$.YUFۘL$B1EK/K0OGE=Ίe`k}7cS%SA@r?m@uqW/>UxũZCa^m}S?Zڀ3&_0sB1 &H<4;H[#t U<]| Q+ 1cfpnF%Oڈ&F?x>T;!j.Iw8%Ҳk;ȷE}uJN`X)zn4W*bkh}z^iĨk=NۄW9J+:P`EFI2Z9\َѢ'i _ l{2_MYTP썋80N$`9a^x~BVz1x׾mTm~7K=jP`KvG{*uG$Gc).0+@5wx;[NH&LR}?sV RW0ϼB7trյy2埞u gRRPHӈ@05*rP}@TWPy!-&+)IΝɇyPA ջNq_\}v^ LcD$Z!W В#!)$P8R*WW͵.'3Kf!(Z]nNfg҂ewD,=݅4ב)WNIuǞLo2Ih UIl=~KO7޼u7XUzߌty-<_.ApA⑕TQ@c 7A"{фiQ܆IQ+PJ}+вDݿ@ L61ӂa6vK(KGG"A3*YZ@q|Dt ʲEQA]4gAc%E*A㴳]!›"wEú+h9؊xԚB_=d< VYWx+}nud O0s1tQYU $hR8ɯ|Ħ#.]k/(ٺB-{&6] E{݈w$}ލ0qrRə&+[XU^;ȉyb Zٙ 3g*T4V{KsNpMZS.K`VC?ջXgXwUE2E3[ ވ-]]{5MjD6pr ``ɣKB,&l`G+rE-t(KuwzR!&vMWf0\ԯAzn4f9 o [|WFuy@>#ȥ(g<y{D^SΫ̱p"Ii,Ww@Qv  +vNI%%IawxA Bϱʍ`J_n',uXo ډPFX:n`~YInz)3G|IAfXNjXb{ҔG]٩O-Ik31 83ʫ*|PD u> wEI;QRPwwZiLbn˯e^1.y4h)gB @~hH%n5GlM$gϒbY?;Y$/U?t[hHй*{WhrYG Z9δg#'u1";Rʠ+7xrߗ5Vc)`3G3Cʻ@NG<u=̷gi2pi>E 9?!j2 0a~A.1 a+>oo'K~/*0_V!#3l,N'Ln4e:_ F̈́ZO-GL Nfˊ#_)!j$K:דW`6`̈YnCo'd\`텃5SwmA&R'1.7~ NQÓfBZ!BY\ ;EgKW QњG{ Z=j5ڨ3r ~3$ 7r(ˋc9P7ȋD jjF]vWSXNγbLeD+f^*nQ,r7ϣ@SD KjZ(a|?L747h=.T5P O@Ł5n#йKgRiՊIe$ʁz}s@"i Q)ś,M[%7吆@+wm_;u⩽ >icDn+cdq?x0 gęPlp3߼A]¸xJy]A3TgÝ̽m֭&k1 ~F 1ƥ,Q_z98-`Taֺe8tZP02d nߙB'6Ӈr&1ԍ%$Ȏꙗ@N@Xosg(ҫ]6W~5)& LȊ5/ 2>h0wxdeDŽPt9*{'I7(Z'|*` Oф%c_.ٽI /C~tm;.$ue%oODF9BBL~Q"{K&}̱ Zq*~2A]\’ ~`M9; HC0aV@ٔH @,noK;F]]O-4deRK16|;'.k⣜_6-H$wq]Щ 3_qzWܔazez<44lE\C|ah0+ڲQ/CKpL.{8/ Uo}B 1*ͨ`C<`˚mAJh~k$5MF+[x)ERFX|cp1='OHPeO%8E~,|҆Cи?Ǵc gCg@Uڰ "dԒo/7ˑhZ" +hs]5Rc\ _l4BON}8NoJOܥǟ~^րZ2]5K'9־?+Os\;z$t3J22ŦhFUh;utǦWS$s7URG@4ӑLJeT|ewf٣ "B?8?xka''pt$i@%-Α)S4uб;)uk,a fqt c죠Wm$rovJ忰qkc^`"n:~d OΈeNj E/EuL"qj]Bvaϻ 8ބh dAgiS!8d?)6:ΊRcgXP;UE-tE1ghQpKlѕnC)۝P D܈00=6}7Zuym#UW*``ʐ^=ey˛"zz{mњ{[+ >XR`hT7GʃesMI%&tRRW PF zsy7ًq 9Y<Gwwk0 c%}[m~H,9'"}9ܩ#F.;:%eM5_Ǵppy5/%]5;ikzWZ~W<G khqf?JPғ#YXOK^sderɩRd v!?p+n,+eՖ+̓|r\XSgu.WW{(k&˛\ b©%RDR> N#Ũ^|dy)=P6w.+Vj#Uֿ̪!0BI UD((hߣ@t[% **THo4lg&_7BcQ(nNX57&8Pk AL5*U))LOOHk:7XKQ{$^ de;upߗU{/;]IpM^I`p\D#)x=(|ۅ85Fn.#K;5.D^ЉE, j 40td k_ECY]ъ_XA/kAܤ[`ΏS,8 'wQ姳㙇 ?Yh^>>M(Sw-7DGKɁu2#Zл` +sԜG.p :77dzԻ1ޢ+bh~ē4+)@HnC9|y&Y8d/鷓bo1 %_5(S(@F&NPK"s!9Ѳ@5@(ʟ2,s$фM`<8)hPx.xAtm<6^3mܯ(oRveɼ .Gȶ}<(ژ "NkzM7n [R1ϜIpL$ѩAGF2qy`LʴF[8_Π(3zoY_f?ۺ׭AF  q`h%' E21c;=qߖ+`cٳd#= ~$큍R`͜i?Pt|Ay99 RۿὨF];;wW6/O.@jhH"룢u+'n3IXbnBo$2s,3ta, ^ra$H9prh~9؈)HXy埫W2Ǒ^ jfƜ›$|_ *;&@'ꕊB 򷪗!Dq\yv&+S׶.~[l{ЋX?.us)aئўS+ҨSD#UB6a^ޖZ@i~r )VAV^gL`FB(T* L}oA.qx*KaXg-SVI-] obxhл#\c'i*Wpsk$}Xc)$;?혍>?P0 eQBP o16_Oe:99c ?\OE8$Od"&]п=U :gR{b_ty@VfCU>g+'4qVřS{u,E22 Nq}[J )+(.RqLa wv٘Vp >)p0U@tc/) >X^ެm@ze_~`[P=,n"uI]ōhc|?B8MkAngwHT镜mZ[9cxLJB8zS)i B y n؜hw7.]".MdyO<`N@oE 1HCLAV2~B^xQɂ=Du8(`ljgmQw#@x+F:iVΌrp百Tv߼TAR iӸ\>w೔XLLO&.jakV O 5Kyq9JD!x|hpYν$i43VlWttSD']fDFT7P>XE!8A( t>&;vR1M?3/aሿZ%΄Y~c$Rj:tJ1Vb5F_i$ 1/=inP,~0n1Ó \Yn ;3jmYԩ(4&0eJ/Vژjaڅ/9LR*v7ڑN"O# k\1%9VQy_{.>i~mW;V~q"OAWU"m>7wkxWcWX@4i .㌿(A'Ly4X@3[s> ć/4Bfzt^Nvη'G7B 0'u+u2rT{k/e*Z85+u8+dBSⓚw|EG(sgo 6\#88-PwFbE hT,D)VKֿeB!;=Zmu[z6{`+hƸ9ӎZ7h&V'AB>qz )40bnj 2F eGt]5g0NG6n7kG50~ף[ RӶ"VtԮki/[-K t+j!2"ϛr/?>sEn4D {r]@L)$y٠۫;ؓ]CR3xk8o鰶U* &5UfBV%Cud5G 퓥9obZB(Iw1 [<ɿ2 ^Z:m ?U)T!0NWH/K'?vD/jJסݐǘ%ڎNMV(-#-~*;7ucV]*7K{ok}4K,X#y 8x5PPm#K[zwi[;s7(7G3}`Nq>HK ?7ږjRrL"##LHVry pGgn#@Vxi+bn$/. ha3yp8&>fn3<$MZY6)F~vO d۳Rq4Qz1kFw`)@\ -6pBh+1(eMl±T@bzC5&9հq X0u@c|(簵zXvyɷS;lF@OIoJ^}, y+XʕQ|}3[C6T4\캼ῪTQ]CZ|^AgEz30;JrLeQ9]CᱟOYG\!ܯTmf5#kYw]vxEZbΉ۲Qli;:P'ҾVOs476ɀt6sM3- 6G@4Mmc$% jWV 7盂 -"w9̺:Һͦ=ُlhzC`MdqIw/Uׅh3޸A>|h?g }^0! NSTV ^~SIQ}ពeSIcy);?=nݲxx#*ji?^SNsNxNJֿ&b*/&$qRji[XL! ϲWf;`Ěޫ/9G.=<hseMq_ }#VNELIªs>Y裂)%/gó(yA?_ st4 ʌ<,a3{$dfLܕ5K!Uk>YS)uwCQ!N.@"ջ@[sфy3EJ&p Ehe q avl=4'_H+TЎZt&5ST[O CH>MGazWU-& eiß.8( 薺}ג1KC7EZ 4Bs] 7B ݃+J33m.yes(I݂ ȳ9tV ej4 z*Hfw1$7H0[ &k:'/?m$\ꇀ9Pu\?Kd DAduEby 24u1y|'AfˆuU)JԘ3aeUbfDuSnx4COœ )l| @0x2_,xHY{:sXjDc3 VwrIskQT S)D"lIϥ9j#S]ٸ<ǡuy ҟhx\ul/)aɮ_9AԲ pzqդB2%&5h+BΧ>hV%plq5[R^" ^O.TeNyB/e:;TixKH@3# ^B3W\T,FM'"j݃- V0ׁrURPdjt)km8GEdV "m†5RTg+?5nH(GXS>'~û 1R2@n)P¹ Uy|c'o~Flk[(y) 4mt oaQ+@' T+Hec1˃u.ߙ"81 CB1-D{^d}1on[ͽե0D`;=ieU޷Qr"r#v1.s@:d>6u|椄"ٺo?uk;Wt@(oT\˶r674n7_4TR uwl e͎>`MXm>UsA1ƥSeT86fb3~p_H""?}A|8: DhmO'c("/Itt\pYq!;[h}U]ZG\K}ubo e|!nH9YDqn>bۅtU'h=pbW%W/ܳ<8mR(.,М|y]Hfk*Jm;WfnY~$ShӔWcx ƒ 3ǗN렓+.ъRuVw3dLlǪ-('>{m!mbA 4˪ ?"6=x睩qHyݠFe!ޛwL Bӗ 4k L~:\W N{XP/~M!p8 0q Nƽ~ZƆхjazfBsOG.%}Sș A㻶׫!Qb1}; .Q;%y_@5h4}g86x><}uCTs $9g&lDT 4gii$ˬ\&ct;mZdb;$t!b1"<^gҫ~1(`$L>j,Jq$wBo_K\Pt1%=Ty<$.읥2|R a l#ž)-f\~c0*_Lm%#2MPl#z, 4D–;>G}0أ%t0stlSڴvT̎BX_hݲYO#-}D;vyO%)̚bNV,G$6&U<[ca7 {l>2q$NT5Uj0:$}2.fl&jR /P"c"yҪ\tA ߨ<h %*=)/ۗe\3d|掵HG3w$d>BϋVƄs3v>n˔uX`D`",;ei>חz2Et7SMTfg=ƻa$/S4:c L*YLym݋Q[a!LNU"e:ax MbYER[z 5I>{L w>گCr^WOxD 1DLGtKҧ}R@X0<̷*qQn6u{: Fz|*=)R?WmNm#~@Z|1- ! GKKU]UMIztG&hNV9U1P/ܿ~rї.\mCYwn(0~l7fNbh܃)v*/aHֽ 6ƇQ:J|%~u_7 ;ֵK>x>+(bW ܎i8i(ؐZ 0/I8-Ikd:!}_M=A^2`ez?5@v7 T'3 1JEG=M،%` 'S*IeV",rcpB?+ ^xS  gN~оi&4~%Om5LuUP.}Ҭ^:= ߪ*su{s1) Z-Ew`.yU)B áuaNh)s&Q>; +ݻ3E÷NM2::ì6(j0ɂB-5m xL˳7El9mwP{fXQE;g{Xwii!_ҴBSf |M H&؆!ŰpDP(|prSՏW﯏%aS2=қN,-'Jb|"b3(Czz`浏6${a_pɜYwi_91+y`~NexoUǾڮ+zPͼ);\=)"H=fAO}-[' Nr*"04pɇ4osQ3N F.ovg xUIL J F@|aNQ$ RV 1)wEn8D7_DĉIx®w}q<ԲFiuo .ÕQ$^ ;|n"3 c*'4%Jw)&eEs 7=.iM,s4Zډ_UÉyPXhJ ή@HJqO@a79S#twGj;WD꭯Iz0u\Ezj7^#s(x'Jzrм==ЖeZx:)ם:@2,IŒ" pz:#[ϥ7@E_))-{ѻ5GEXÂ`/ذi slSh ϝ¸_:3~B.e/lC>䌏WrRm'smhe3cOU퟉Ps9p/.3ZRzod"Kmjߺ=vhCP&$2:h򒖎QtyE" vQΥopu%\ʣWi lV sx*[RUKoi4q1u}Ҍ{ ?ml8ei,#<]BpH 8N`]\k| 8hp-2RC6ّ](q16.ʦJ¶<5"@ۯkL"̙e'LV2%氦? ؿ]˩.;"UlfͺNCcqtS.R+X˪q 9QR)JÃtZ޸s$FE*Zf19?3L׊29,.ȆM@E7|{Ấ0+?QNI!'CҦ_oa~8w(GviŕS =seZL棢r '4'~UCa7=0.x'& (L1>!S*h쩮Xm>˷_b7]!GQ2Ն[ZJi>ɭjB؂ˌ@ܐ^o >@Fˑ隗9) 7HHnA0\VʜIG'n:o+p왽ԲgbU@1/Y2zVap ʳ\°{_ J gr`ha9Cƀ3c][Y鳙$KT$;0zEe\tzKsX$4+\c4*V܄e*%!XcT~4*A=9 V5`9~C~7>c 5uÄ[uY ۋX9t[?<|Ru'ڴ@T'-A}ٿ༴/rTחaPvn'xi˚{!gL 769;Mo3=\x1lN/Ϩu@ޟr Mu Gr ^Kk@Kʶfl-Qgu.Ŭo<=g,BS5 @8s6Nj_ROaDjXp%P^CyJS.KTJ׶M/@ۡ@zo6s@ p_xWF ,SrXEEx_쮏b?=L$Oݞ"He-IU\)>YEW4*Co0%/7A\E8>w8ЀOD]$`6#Xӆ},J hQЄ8?fl4D`K]p^,- iX߳x 'xjghwQtnjnZQÛ+*I3І3L*GBe#ﻼ!WΟ<ZGeJ̙*rչ'%C2v}W6O]+CPHPĪvv/kݛ&4Ps%%wRtb iƆ!M\[;{eP oe=, Y.NdƩ5j߶.ǀ{NtlKQ˭Z7߾@!mC*[-nZފߦL9|(&]Z>9eWޕ?a:zGWyjw<dFH?:FP:qa c&K~8f x }TLBQX=*Z$TAO!5IDklA#:7e hx`Jc2!"iMGiRrUioAz%|J-.D\m'*[?*Bk ts#1!䢏:\uR]Ћ E`njHXxwQKrD5'bg:Q\wKSx\Q]&S\ҭN2|Ϳ@%LV&u? mPrъl 8]5R>=$wmk1ԍ?oI)&ynܧQTLb,ڨ[ N|Lm0ђ㌊(ڇ|j w4x/B􃴰_H\+B*1>UGhc?[>e6;;i4K5  YPs/^fJվ6=2峼E(Dt"+O~r>I y&w(Nu JQ UTl:i3sEd)39v7a PYϰ~v9Y_;*4(P6Ei {n Qt޾׍W \xOȃ,Na~m|ƴ6=bk' xNU6b6},po!3|^YxGH[_];%=>=?Ð6 NqЋßk(SWd'sF5C 3Gp~=\gu=A6"*%V?W27ߦR{zKb 2}l~̬JFqǃYN;oȷk.Z"=mcCV$$%%z*cBRT+aQlH+OUUC#\t4VUħ.PVm'o89OSȴ'ŲAJ8Ka""|+tEF4CQg,Z*H,.|e#CQc\uf`P ٗ<߈5\jao"*k/90!N׸XһPG'G&5~3cuM5\fVE`{*$TOPѫLVbfVYUO|ަg;OӸM&&.FuܹIx׫;nzkjf-kaB "yaok?`H]#V-=X鱩7&Ƨ%E@ò}<,r!}∈72'<,^wLUsoF=5?2c R1xLCq\+r.Pqwr|/4!t{!J2Av@*f4bO2flx6OU 7k6Xt?mA^K^nW\z5D\6o y4 mZ\ZÑۑ& ]XN# ;CWłoV⽉x-ҒVݓ~e;&ˊܼ4Ws4R.|$<7 U:e2C1i~s1-o$u@AP:v"*'Ox*iZW p Yu|m/G,1'eݬ_TV/eq#BS_IglZYnvrS.TbJqQ=#rLOgڭM ͥhJuդc7W&!3e`Ax @(4HsLoӖϙnNl@O^ &\AZ25֦'Y?2:`G1 ɮ&$Z^KuŢ zԟ{x)%Y0"%*ߨD[<1mIOy8ycLDz8@uދ0dP_Q5o$HTTj2T@iKC53HbH/8*51V Gx#,l$di0oe-C5ú,nQJHF>H_2tIE*;vA?pd9&+ "n^@"՝rTt#QqsuŚqJ8kFE/ Oyf;06LX]8*%G_$eR d)`9Rыy L\؝㯋INޫ7#nj̣])PI|}L_WErzytfΆ#hg^='ITF["`:V] Y\ O*$44(T nP;Y*̷Q.6{r;'g1\㪗J|t $ pJqf&C׋4WǯɈ`O5lwԁy.-黍"滖U 65Xax'Ԉx7BIՓB-p~Tsu=\Ƌg4V^>=$n@ z|{[W~J}Ӄ/p(()" ݄-Ʊ/(+nhg :X={]SАvg\e45֖*r|*}\α3:w\wvZg3o >fƔDUBzYGtӃ.墨gSn)>2)@f5ġ-NQzCtzDŽLgH F(谑`O b>)$SǢ4bC*5Uiy3S@/JzDTFk< ~̧Ybp ac 8f׋ uge~-b y.71u7Zq&;{v1r#k`JŽmI]NA"-dIQ|i@5DD'mI5C7z"k VjQދeYAP@(M "øxlB|LGSJ=*eÅGHCPr;X޴h+Ι4O-)"<[בm$`OJmzIHv)2`yw'Nu \G*LdzN*+` *'AIϓ -P±eP^tX1X"tz*pv4eU)me Q] +/i 95_S>>55 1)O O|Z7 )#pM}-$!R܇ŮƆpa+맗TEjd]tz IVt7qy.va4K a,7!S&;xN$;YXΠ=OJ%V{SNg =UUNF>j2B/ TD'~I(#}qXj3Z"ߋML*:){a4L] {m8 ykM>Z|/-/k 9o(Q }/]_6'^~fpԹRWnkFά^i8FQ3DB?!yTdZ>.fS9yWbM!łYI4t"f%AzA=z{ԣKDɤ($}CfԜ>$=+R,`iB`wL3#h9o<$AC`Ԋ~vXe2m92[Codt]]OAB!fɀ$sQc78O2|xe_ӥĆTep(?pf:陴6 =%ϝTkn^12l" (,Яw6q;t߾kӼFNy؁D4\V5a˜e$2O?GlMF0 Wd}ʸY0:6U:$؊EkqH*J:gߔdⲇmt"FSR.uZ /31M؏8P 6*nZBG`+Mf _>_2&}%[|~:yq+荪U?<`ȩ@%3N̞e"bJx WiU\t] 4}ͷ,0>"pʅ__5Rd@"y Fn~ 3yyT < }d0~X0ބ]buﳚPs}W߽ڜwӮ9!n$T2j .Eq70l_&aط] ߸/^ m>/w7n?4}cSKwƒ9x/v\UNf KPEH; 8 7Qqt$Aeb5o Lŧ$P+Gl8v!ӗhraa[_dzK@pk`{E0ŭ.l.~Tf,P&n0dW4=p 쪘n4ˎڣ՗Fĩ7 }['A*Kk 坧 ^v4pհمg7jE14={W0y{$30B] ыbR:N^\>1͙`O5p!FZ gЛ[TLޥ*ʬtN\C>ozwކ˃_+dg&X~bj$ XOG~i5\ߑ72ฒ^Uͷ_Vƹ'B'p_D_̆;~/|#aC/BN0oXN$T4# ThKy_/>uIwrU],?B ^I%_R&w@PbO4X+VlO3@.ܾn Ad@vPd>sNmr95OeL(?PnpO(TBN#o}Nk @]|7 :l͉v%5{ڨ A_XP u׼eAOY(};ؔ<^HI2O~eg;n9Fq$mb}T>Eyj(}te*c e B"ʭoм~/d(lOS'b!q9T%fQRE{4IķX2@DswVB 9" F+[*5m#wIgYb6+ +poE9%Ck˦Mڂ$ ɏ|؃TcPW?q[_sHcQ/jN#̔*{͜'ɺΨ,{ӞUp JR~kag?VLsdv!Z-w&x<)!&Ķ# 8(k(DR e4L^2 oTo,iG^x}`K\M:+J 2Y(c^}9Y梮c/0Dή+W1\Ce){m{q[qq]Y,!ymQ ӗF# (閞]^?Զ\|7uF +VVYT2PVX_/UTؽb15CvM2q&Ƭ2TEX՟FIygbTJo9re_ 0ȔOƻzT:{Btj1M$F]”q_%IA |Z*&P,Iܻ{;mnK" go珂K6[co|16M ƓF aCw!vkKQQik%Xu,VKM;q7͆ML?@x;ǸIֶ%zG5>ھɭ>mD`(tx s9bCaj#Yh[xQIݙkǦ@݃lr+p0%rlw|iB1]>_S@!TOSfɭ;؉r=d|+ٺg OSzqJ>Up}t5b6"6Jb}-)q=_P k( RSIaYRsʢXH7vRc(b՜Agc2i7k ~KILLOH&~fjH3"\Ă NfUޝκ،s/hRwx**+m Gk佷O:ǻ䨜gUD&T"u^(T2)aVמ^Oߠ< a EcAm3yK )"WD} ¬i}>?[Ὶ {ւQd[W$Xh( m`t[k|~wҴ2_hpGM#֪AO7NT =V)Uchӌ5@;+1hS^_|~WyՆ d;0@Jmo²]ǡRF5gG WuH/ ̒l,=QJJ ,xewOHBb /nvKfqT:c֏ 1u+',ܟ07`Z]'lAaʇ^ψ/*04XfUp"Tr>dgM=pIUI `ż/:(1A gM]+VĒ6C瑾IjF܀fbEp Z;(DkY5p, ; ˴,1,C'OW?bLQ[}1A%Fe{oeJ3 6 B^KYJ\{z9{tu҂LO l]T=X`%l/3l?TzCExDUt *r!9hUy2lY}6'ha!Nt(U,a ]C,mZf$`Ef9z2;={me5#I4D%H= 6q6zyYGN>/CHAG)#- y*424싙:ocp:SC>S@zIb9p>܅Z𼠽e#;]*u'3Z.28.GW2P * ;"Y0O:y$z!2L!7%8x԰71lbkeJ́i8e;&w$S%2sрrTnvnE/w,hn*j:-dnqh>f'lmԶ mI6n&rh:DːJ"d>jSV"#%+O;~eWǚ" P;xB.r voӺ8t GGxE~IJ+6OzaCݐ-ONo(_ ըQRA= s٢yXďg9jP8X 'ArћUyN4h 7?vyP.\Kk`'H{W^EN6 UJ[OvψԬ,_UlN6k41‚ 9 *]CYE`!$$nn1c^cG|Bnyz@R\94 @f&Ba$݂ouMq Oј&Kdd56#%V6S1T>I"K^MȎ(9r >l @2ΧO$s(e>n O|zdh3;|J3%k!~w%09WU8}v >Y t-(rS}%Ђw]Sj7/FVHFΌ?A[o\>+ ^}hrX} D- |l[Py؎L d2)Öi,v[?|\]Ri7aF*R3V5LJsЃCݨJȬtpJJ}/\zCϏ&jAg;R&mim%ӭmYVX0G$ꜛ==t9;Qzm I_j**MB٦ж*Ԙcp.F $fE܆G54Tj) χ_./`gbCZaJ:vs_ T x2|жnc.1_GWj:(6^?xklZ+TT=q!-3j =:}cw3}i1r i}]$IKpMo.BQAx$)L!phqXJYhBƎD9RNH,r@ATPg=Ȣ&/x. ^طiȚ}~p^)!n2rG렒 /5i W;*tU(kaSbp|x$Iwq,>GyI6(#+nRyPpP j7;.s;=9f9!UP-wVoҢ9M0*%8ݭ%|H% "C\FGs w=AlŰ2$!e1F3YI}w F3g5?.\:Gxtص =EQ''ErӑeXKC{TAH  \ɘ7:t/ &G̐# 1q4*hO LLFy;)$L5|19PynG( $W좷x!?71* $֧5xW7pH|d`&ҡHD0`>w)|C|J< ćnv(]# Y@4# \5}=aǿ#ERZ}:–kdzv* zʃѱȸT.$\OkfBGc8:T%<+u;ja \dv r}cOoHG؎tcwUy8q,h6pޙ]X6¹aڊg .xTc[85-e [N iG~3Deam5K5sPJ +Cq|eIL`_=~<ds S_k4pn=_͑q$XM:f]N~ ?DAÞ2f=Ջ۷Yu%3q~U Uv#Zt b:`g;q^%Ѥ mH1̄iZ`.oMX*VGaنbٯT

e]#{XλCJv`s{R J= 7(;[G'RO6p5Ʀbq֙!bW\`]@@X v V/׾v_ ړQD?ƈgWNmG\V_6dq{ r=]mpͧP+a^x/ $[ֺ!:|tI!r@EdWg0.ui,%5GסEB4Hn/oStT'Xp)|{qp\2ZZڌؔT{I|#( PP4\.F죖3޷i\2 I0w6hӚK7}T/;DOǾv >S $WX!f3n{c}بxUnb9oXosR۔c+dL*p9<k{QTF%;8R>!-fȟ61;*FsU6?զ!wR51?Ӽ1U~5u4@N)I5Z-]xCV3'#'I 6p~jЀPQ2(jpmyPr H[ߗ›5b`"ZIÚ:-I.Ür#jH; _GWHDv61p*P"cQH4?$%~^VZC69y_j ^LØ; U,lcx'B}=:"fژ/~np[ wHEy\I#)w ҧBbarVj!ȇ+`w>99F(wr}q>`e m(t(TY+q9ڷ-Z<(*HϜ-@'! Q)YS]80F$IDZX$R=7:LZ|CD3YTVEC=ȟ)O"_W24lYbe94U#vཷCɦ)Y*\IBˋ7,οh6T4>޹.ZčfY:h@:_^ŲiNjN b1VL,9 qΥL -|\J\4|m2qat3:zkFq7v8(+yd\I+P[ Y S/T 9[oDԻmU~m& n̜~4 % ڇbk,!ڧϩjwkqXSG%JF s0A^ }jkThҭ9zR4eI@{4z ̕i =!Ik>H'vdȰ|VEC Ԑgw5G5MT?M*< >9rn+C?v20,Ď=΢-YfW$dkɍgdq㌅0kPdŐ?Ghs4;Ұy!Dz sk/rD0Gk5>iMϙ;݌n&0:v1xc\28g#B3q3$W@J٩&y}39Nѡpz 4"v|Wp 4ٳΚ/9 QIR$ndd~K'LilƸ@nXCP.WUX }T? 'G3B>y$B@Z*]L+/_F!j`L.J"hWTi{:pctk'[.Mn YZK_)V>ŁlAWx}q):Y96dxw5:pr], izS+ws힑EYTnB59[-&ԙ+ Mq!v('!=OqJLC=.ބ?HLnLzMQr>8 Dq}XV4D}^{/DgwQ ucibDcX*\2pQIPc|[~3Xv1iZ7p~/deW9ѭ6Mf tsT4_hgԃD}Q/XIǂNDkO2^Rr)U.Խܡ1J b9 :Gj| ԕߍu6ϝnPlC1F"?n"|*Plr&{QE~m3#qBAϳ޷2B73c[ɘyx\7 5Q C>WӿjLD#S͆k*Mb-4JZL21\odd\6Hm(c4ag:0I c֙NXm ˟#}w pE9Rţ xO:7TOH96ѯ`H*.ƭ|#Viwtn!NzSWxcVtυ7#RwO!w`pߑ>n&GF9SA#*6/^y ĩa 4 P|h  @*؁mr@|ֿ. 90g=gWО%GP*ףx`y?O2 Z,9? /K_D$Drd;$^|"E_tR>|}嚁GKB7՚ Wyw[q Ew=i#~,^%30st*H%TUHt}._Z7Z#c׆ j}3GYt_NJc.[xK/ vMOq<ݷ1?CSlQzp6;=s8@r-߸6PR3[i!-\Y~p1&7-ѦO-ֺG/^B\4DDɳn9P; ~jY#,\chyg pg?(9I "]d߶Xώk{t1s߱J)Ypwo6/XLhvfMid?9f]֢^?iK9':G?맓J;qzI|㐌)* W!G \b:wf jA7&іT))U0dku9NK `DG~=v9jB;: F7Y%>פ'Ԣ_~_R ͑/j4,Nhzab&Xwm9"gufl]B `Uuoop[+>rP"̢PT~˖ "JOCg91]i֘+21Ǻ#M=O8k"G: *(?eQJMO2!.%"ЀL^Xz_ʁWP@T;'c0dK(՝#x;Z_$o6]VG- x d3Sy"MqT9o[9Hb07 G/J)!*\J2C7TQZ d`7e<;~%Bt3g|%5B'l?H'K$]%5 L7Pę'${oESu/l0Yu '۷,?`@G +J'Г 2zxsۼ4SIH3wh'`,n+65-Z:NtN3\ڑ\Ъ=մ\Tn yQOטB'^~o~=/g*m'$H!ͥ:0{ B} n1Ig\dG& L73v M(V&'Mw|H36q}ǥ%gG EDL?3QfWeNwP63I3g&e<)`;czzi:N ** 7NAH=Ӄ{+<͕`ՠ7+kb%WǛϲfpԀ[Wa.7z\Q>?cj<_oQ$pϛv>޽.,=S(d&:jNqrSse}r!D2QXMHl0 61PqmKa̙muP[ E0ʛOj-E޳%_%A5hBѓpIT@:r ׾[W5o5CasſTΤ)x֮޿6t<bgR$*(A=|kzu٧tAH_,+11;fOYCJ-`/-m qo'k.P 2=NUٶ5ٖ7zuO'0eOuIX t<*TEhtJ@)s"fLT(&g&rs6a\g+A]62sbWʵx W'n&0?CU.5%mĵ\ĬsTot#TM8I0qQgAr*peT$eoPqPȅl]*IB;˸oe;In~ȉcX[7w|l`1jXNԘ5n#[ iw OP{.&*|6DWeL@L8}jlPQv ¸ eAIIE3U0o*aľ}d)C=ʷATVntTkzb%Q>; я`МS_TI/Q1C" 6Q0*iSCYc2 .`O8ߌ°2+.Yͅ'UةD)e2HHcV[(abnoLn|OHFjS4OK?1HƌHv|9FXo{tIl(̿sq~a'Km`◸o_BC_88kXbƱBm{G 먊T4U⪡4ܨ%wHz6^ZNZ[ZӘEV8NQ̂Owq<5:J6}Cm{/$5^4& ҉v CgYWm-v'jhB H޵EH!2 5ד0b\99jKJ-{I&^" G(#34XePPwKvpDбm7n-qZmgg P{?fX| M&YĢm$ShYɎdsTU!(a"p5aC=l6 Way_E<\&͵vU;R|C,M,@[!'F`8X7"伡8p1l*:Y%v(-2!0oBʴ%U 1vyV`keX~poPƯ86Ory$>+fNOF+:5B{^֟el\;' B{1A(1( uvމwn S˚zM=#29Ҽ԰,ӋSA]#:GmD_H|99H=y;bV޳CA!bfh|[+WJM kc&є:+. h$; \f \$YG& @.9}Ĥ&VxbBя|lqnJ L4N|As|%px6 s e:(oR8ùB˻GawGa $jE]`A@&lC%z`01)*xT^cE1TE |IG q^;_wV3E@mcqֵ8%Ч _Yc jyiźI3_| t5DP^坋@0 qYv onȻ&{{I~iy v޿兊]I=>v=R*?[u >gXrH,&H$&ų,&' taGW=uAc&JsE+] s ?.q{adBhDKꥉ5Xzx"pNP$ޘY҄z;Ԓ .׹;Sc㪋 z저C>qz"Hh[E6Am$$ukTOFFB6z^]c2d%*XI\fs@g_gJ򶐶<? ;Qhb/Sؠ[gZIRI${~i$/S1 (_r?LyW!h>\\.㒃=67rEp<5&_gl:Ũ#i9g*Swg z0Ah_hDIXŀ8}jf!'xDQUwFx\4iÓ8p{+ΛՔt$9uU?$z_$XBaBx#h՟O*8Mp6:Hb'Kn@67(udigxMxC5*Gx{kYBPm^- =z mxu͐8k:,HQW8ϲl^Vxh5.0 @ޠu86PoӍ\;/p%4.K`߭(TO>8& &?LdY| 0,~_F֭Gh}~gPR<ڸیcE&Seh0#ps\|&نAz4)UP&",e)ci[EZ * b׏#I G9";tSCU".Dnm|5/Rqyz)V= [ 1RD0=h)dk75"U=eLȏ9?sC~ZX׌FDjdɾ–YǾ0b_%z@,Q 񋿏2Frq')EESҷ.ZquվB}0‰k7\8t Ŋ oNDy 6t l0g_ G G_ʽͮjkI~A* HM%D8*b>Y+WU |Ϯҷ+*W ^޳3л1[ć?ZN*zpo^ |nAy]B5nVVn匤D,(kLsp8MU"GޢE# !dD5=a'/Er]۫b|OΌw u?{PJgwHR]%x..hY8j@Sa %9gJ]6>h*aHVa8N11~z](w҇/hN#}g_;Au9-N'!vUz,+T0"Y;Ē kG uت8|6FO9?8T'\m7D3ZSMӬ/}GHe9(ypFdkiUVQ47> "kE.<}xt6x$ '訣WԾ̮rr0H</#8WUX:֢}gz-9m!8h(EAkg.ЪDiu_ !+Y|iqw.;b;@YB*Y3r);#fN}ZRV6gr;wSGX\c:m}YL;YMYn >=PHj2ţU#QX6p =[iZ m+*_7e}.A)+Rߒ5(w?!(T .7;Ru~o3)VV! ]e@ V;\rV{]mn7C6Y>RW|wPʁ`!h-1X whYm]qENJjqOcd3TZJi1 rK!XMmL.2U|A4$޹f3D_ӻГXy/awHŷ_=P=3MYm㱌\?p[YS7B3Z. ˜yUĩ@/Z`2sVc:J/B7bb0o `m`$B [&_)$,Gk ݊^A Nð5E#.\9cZ{l9,!/+:AAndY^ۀIK6a2 h+ `~;$ufhJXYͿF Dpd ?cg [5,( c(/EʙUBE D|V, XPMI1rj#F9^tn@"77RT{!0ˌ2"d$,N2bL[59w=I P_TxBmpu> zK{0ug!n z۠+[B} ,t ً@M1>X^=TKOL/'.HKTL3gTfu8'!9;|67 !$Sq4^5B5pΒNCa`'  t8bıT |!0}OK]%Ь6B#3n\Վ fgOs`)O{ǭ'^=M67̒W# 8 HE Ü0Jm`ߙ"bu7v5%U6F ecQ[k;t^R7v'4g=2>A@,r3 \JS &tN3$%G`Lᦵ9X:15&BO$bhВlm])+DW49lo=jZ.kхpt_|u7>* JbWEnH rf|=Yƻ껑V]IZ"`&ƕ5TIJq&U̙4<Y *pEbG+bXaOU=4y!eɭ6\'e{tZ2@;Sҽ_6sSL Snټ p7JKaE@GΞ>ڰ<3]Rz0|rV4֘J sK(LjIꬱ ݣLS#ݟJyN̐ lV\p䴦k#|vb \;bR ]\FYdDk0@9 q;(r CG_@ Va&rl,{_L uuؿ: *erE0Ob}37Ʃ+NȀ_TKtq!8+>ĽikXԤBxXT^$iͳ%0fL*ZɉM?n{$&{MB|ӋqR^jm$?6̻hU JfƸsݪ;C`mCF[XfrXɽ䤄UuDŶCmbl0Р^U2D@}T\{- Y0%ČoJP`'0}9+uZQM 3)U֝_r;Hv=q=q}?JK(F_O18/S|Z?sB0}P7`cf,)p<^2OaX c(HrK&\Y|>{LÌ[L:8` hehC!e U5"nI2CR.s4gϸgc)y\s [2!:R$\rP%P>XCI[lޗvTu^AQ8Fz{b@;'~tEqDxe:PP>1 ,9`z I^Py9Σ+H I҅ 9VZ=׽Ѱ;~Qbl迻Ϊ,t,H;(@MQLR=!TZHЇ^nɜIˆ $*9!t4&iHcIL_ۄpGvbԒ Ŵ{V^^ JdAϐtY0e,std=l 9u2(- z|bjd"E p:Ny y>(pD^;Ѕ'v#z ~NI.xx,;犞AOkVj&puLF!͓݊CH|F- Op+)|,i[#h!U9{Jr_ǫY;izl !^G9RyG#\ȢQNB+q0/y bV/6_E9USY_,9iMp:Z؇jGYf޲;Q?3SȚ`6"IN'==MyPg]rjd(Rz@BwSE ZH4{0@ǁ;}L M^V)S]@ǺS t-Rh@3Ӳu&l<ϰ3C8$}$ý$"٣^ Yo>өԌ?F&ƾО&4#0-$  #MѨ?g3؝(Z-30ƽ)mhxN ą= "L<|\Mv$u?FK!|R\zN%hF Exuj&?!R2G~ x ?jN{W8g:=| ~(qqZDhR pTk8۷a Th*үP #ݻt<9A=C6D 4F)"u?15i^r )> ``m|g | )}=iþ hPzX߃;8BJ*?H@Wyhy&yS ~m'?^ҍΟ$@635QKƱG2}rwኅoǟ*gdU\=b)u;|X5cpX%E1ej!lu y'&nZ4~)68LN"嗒``MݰQ~~~nE]\a£F2f'2" o63E[+!А]wRTk W!LUoxvU3#ܜXl'JiL[,7@c:32':_H :B =M1"i ~V$-|"J>FC )OIN=.+k`wi/FL =2s4! `CFrZNI&d=,B5$ǘw.B}I)J_2͊^gz˸=CJGb>@lRp^-Pd3d1| KHB NY(ZKhqئPr"@\c?<S`>ZsY;_}/ ꪷ+}| 9DG{Ύ5Pnd*(TRa ^VARRMՆ5&3 kF ޾lF"`mMi+(!>Yncs)wp<\8uo-j̕CX3 {:.dr*i"[عu{<鈭YM9?> .E?CjvX@7uJX:*<PG͂kq e\ i!K._Ul߼(<"}b yAKj ֐ر)OSk^6O3h9)W*IYu( B3 Tmw?p= jl'xL?$bTA0AukGT汽BFRomD{G|4/m^}P=z+TX1ue'6e/8O`/;7ȚA8+p{24]~ _GWPċ/$ABTA/pib *5 -G1KᲘ˚b@RQQٴϯ+uәV!(Q^-Ml-@bS5{jШ=; Ů< r߀@aSb œ=a|A]%w8Wɥ2jQdT\pWۚ 4NHլkTmЊtש-*7P3&W)mr6m'.O-];(l;{KF#,YŌHwÍ] q6y͆:Um5 EXCQfD w߼E &32h}KW[oR㮕 ^`~E%֞In⅗TE蝷-H,{''~."n/z#xCĂ9^{N2q8V=jhҍ\(IEOJv)'jUZpwgBupv$:} Gc̭{$YgvPPߣ#X_lͿfP? ]\]S[c:s2L>Mf|qHNL3g%\"CˉRfmzos,mGjD32DVA/1V#녆/Jh ȡէm%k &z?\5$Id}>3b=;Ϛ"94@ٛ}DTݾ~@%<|q iLTlaeBˁ#z*^'yBs8}¼/R3>{[D.Z⩸Q8.@1 )v6C2*Q{5_$KG:i=>"f`;fҫp|=&hU!̮ P7D -q!v)PrWct^!ӗn~AV`1.A*0ٿ0=`k2n{0ޖplecwEZ~ši-ZoF0)B.&LRToO9Q"!.T;c1PWYkJ OX׵'Ό.~Uki;բCmVr+⩓u^.E^]ռŬW*$u jΛl3*錗!As͈9(" r .G jiH*:R $\Xw&oKY4QI*wVHtdrӄ3@t%N)S4/+$D!6됭;Ӆm3lMGI>npiYÆ[%T0fҕ g͔ݡ3ʳ5;R_7wm7emRh4N̠BV/ܳIGeD@^'C(WVOETO3FhڮƛFY:ʕ?j 3͐/[߰0Q̅+}wvYw3B9+Dk vdFЭfYk+diUb[ gbvXL?s53Mm:?{^FXziF~~SaÈK44u&r7X2eEo1pRmLN [m([{]eC)beuY amF|)畊Zg0(<|Aky$ȁZr?,H"!gNl2sX  *@-&^{F][e -VIPw&WL:r4 Q[od"fsdĎSjL/h3?C, 랈&m_fKa]}1P(6fSE"Yf$S%a#&!k z.X̶0F? vHH9xbb~.)aG@~JizB+f&Y8IAKTHɓb<$Q$? O <(sB![ @;bi4&Rv]!@e/)u1ގ^s/N5>$ oJoq~PB{R`mgL&7Cgos,B&VoWٝ˿Ұq@Zq$4tEtTL2*332H4U;ް#sPWkr:)z <N]\ nE.9Īg".P:"g7X-8wel21x7cґ GkQc[nZy8ByS7!<:ӳTJ9A.)ໂXfXx_^hDyNgԚXˬSE'(ϗ2ιg"_`6tC)Fd6}/wv@VqQ*K՛  }f6>sT5IEt١ݮ| -W6sI!"ux%bt8fiՀx-4FHw 枲Ǎe:-:HlDZռE9G|*j bc lszN#j~l>4_A5VAF fq3&}.W"ȆN )X0Sgs7tLf4n5͔~\5UEk`=inStR@'?:I4c6_/6xuf W| $cVՁ_ɊˉuP@HKYKPi-W;.WUfp2ݩ ؊&Jx 㷙H^4ީcyJzx>'EW4IzͩڬԹQʧeF.8B*§xJjΤ\)A%;x`91pz\RP Be7ՌqýaQM]TktÍYCOV6=USְ!}&K39sC /umoXx.of_{{]_'lt+>N+ +,\ 7\U'X/ _IwM$^Xb>8(ʟ6(Xb5SSXc̷Bh]2e9 ,V(u=yΩf3kZ1&ۚ(Vzؤ<`FBF <  v$[w,Պve>bbvg TҾ4ArzM m't 4+: #FnkERcyE}X{ϲ>8#YOT}dhǒI Na+}ξoOڒIcvt sN_NfwI}6]ɪZhQ%T:^$83>G(kr'<;?d\#CPXmHGv˦I )+ñ܅h&>:'Y p|&1*п]::$,9}%O5kAlޏT]9H'Z _3Q**r`{ ߧRaUpJ$55Hl誘e|oӀB\''ɠ>u] [(-  M_r?)^؃(=,|e n=ZoB9ߞߝŹ_b@+{aqR@`q"n]qJ$G 9ėM1嚌N6g@ېJj^ It.g&Dƞh`Nt2Dݔ0-@QSC0x d3=Mev_lAY"3Ĥ<+)y?'x;^) M)f7 DjW0AǠH5j08I̱Cĭ_Ľ]CȎ),j`p-I aR#[ ߴ>#mpyMɩ-6´I!;тҾl6_'2/ϋ !y 驨*3QSUhUgMۢFHЬy ,wT&\Zm75>svYQH~$񶵕NhᱢEap "\b+bTڋ/gWm#(hPTrm(@ckFL&ZCt a2I xZ1<g8Rh+(˥ ?*+; Q ~iBjxruNyϳ@WxUF(TLqj~icg\WPմ'i@Gq^-Fpc`lf罹p[H_ݗN,TN7}a_/:#!1dO2zYϯϊBƘlTz4ư03FC'yBD̛f= 18Z/+^Լ;',dOx`-U^LO#(q%NY-}%K6_sǾ/gxFjmXeӱ+  ia`Sr:D=jU;MMYU4z1˴3Y7_y'2dKXWtW nѦT3@ y&LpP(6kځQޙ_ >5Y{S KI Etd[)(ڳ6%nTQ3XGkO@(R0_j]QJJ-dqQ-Ѿ5ӊs ,v 8~*я\Zk}$TLㄜFfJu#K[IAoFi\/?Oz?@ҿ^KO5Xcx9ւ<2hm" A^-HuTcuN0]Kl/dc$?,Hl؁ӝ<> ːsE< -.29+4e.WyPx<6y.Vp .E=!C^?~` ,tX/*&H͗""]. {6Y=TVX¿ziӚH[sq;14M œeLԐ0FGU_I8,Hc+nR3Ҋϡ t?&oa_=ډ3,`V#7?-sW sHs&Ǽ7kX5 Y0мjN czR9Z!Z&屒#ami6d`-.0Q(o>fiG[z )Uc#I:֫hԡsy~GĶbrWhȶE#Ygeݘ+DCD7Rq)66 0XO'Yeo߭ n8_eE S|&5V$#u*ޠ3$@}qLEdAbY&D0\~Ն5gi 6;4ȉ׻BFSBu wcd]w`|3~ڏgA=[<:ScaH&z˪4Zg LÇg|6`Y=UQ\#t= ;`I1 RmtCMz< f,B? Rn<xfV>2DĶ67,M]Y],0vG2p" n$*2G'er {0J!C!Zx&%5̮zg)4߫ N!& Akz6d툲qrj~8料 dZ#*~_B`rI((oFOD]Pvk-j9ChZl2af!1LooC%N(XIǗ G(댏d{rxUPx IW \#zeZbZ-TIɾ G`+٤g;$C m-Hm*d)>tqJږD8K*]I.vL0Bo7 Lj=~$?vi'C+" qS.TUoy0rI!{f_zXL5'ّO@ z|+0k~ަOzٲf<_2%ۦqc $MAgQ&7§#qq~(cXEEcwp5ih:.z,udXLuW 6r O 9kx2*eTz$TR;ݢЙ4, Jxh @~c=nra6^ {zV3j")H=xZ'P8xpfA );|ӯ"ݰj[W >Oc=_杘XhGW׼R軲 'frS?8vm] Bk/Tգ~`C Jؙȣ-&r)#m^s(sEVpsXׄ3/3j@<{^ `r 댤zecXzWKeǞhkq- #&9Y8 #![n3$kL~y45s: @ 0%>DE;-]}^G(|g!U3AlH#\ Q m"" iՐmpBGyVe}Xo^n2Wkə ? Ƹ:?hwcvx#aA`7l| [ s nj:{X=7=&L6i-Z)C#ehgX@dB^7= O}|P7tC`w$`$yWM "0/^>.Gݜr徱WH 7J2y񭙁lZb4gb{ezj|=#ȰRQBR=D Ng%Ͻ_@K.}x@|w2]EtsQT! #ܤ6E+5i2;܈&"zIHA.:aF Єiͻ"Ix'6OT.j\O K9Z ՔqT|z&''?hn4BXZ$ZYV/\:Fmru92[Qᷠl}뤃Y20MbցmqB[ƂM6TdQć+?(P! fG;]gYC',~-l&r# 8t|~_>1vEs`hFyԋZ[LN~peQ7䀛ng'@usydWAcU HCj-]F$<{C:5k°7z==Og! P mԸL.{S%G\jz,Nm:Hb$C_B஄F~4  ?.l()@]8eL/yx}0꭬v}lDX [ v'f\ҺohP˯LG vZF&mPQaKX<-G T7] A$C#u:Fp@YMMBҺ46m|ѷe5v9QDlDFςiɍ:MukAu4[~Wd!=zQ-ep8xSF%- h.2ۅ9EN^gŬ`IH~J؋3#~?WwKd+ =}\y:>K.}5tPt"=!"r6lJ|sEK"uQO=mn*k^qV!rKD<  ' },߫%,-@BCFyulψy7L&2  N ?S&PA2:~%>{Z`OQgUc+n6IU'rd[_TϻMQLsw~ 5'w-aàؗC[9NRہ-'=x;yƇ}o0ϬMʰc@VK6i h+M8]`/]N,u,&]`8*93qif"gmqoyi/~3-wY]BgF)>h|{I&HgNf>+n lo̎셾\ f ݧ>N c}G2b@Y%T1V/b*K*3kQr;)ǎ)*6n.udzbQe+uMj*zBG0 Dʐ&?U `=˜<84>Eɚ^B$q^F(Z#nO*q&%5~ (M1Cݪ '5Xy<ž=-m1JD kc*0R'~D-"XCi <}ɱS鋙<X ʙnf`EMMP|9cq`[3'G\m+ 3>,?ߗ.;\ooy!wȶ4slDX\XC{''o[ +h#M+A7s[q6feeqca}/{J}GڏT۟:bTEҕ"Ӗ?QƄ4$[- o5z"@Fo|skM>R b c5v3z u!@: UZ@!CpO*MVo_25|&z~jF9^@~YuN?0tg . L6B{rVP\ZI@I0a决&FLl[wu/GS\;s DɅixǯevj@MpӒ)DokjRF|l=bKd#Xq*m`"y3ʓU@)_8D'z3V5ڴ>TZNNnMAU ETj392-s-@e0S-ZĿ.Zc~$#&fCɾ}G۴7#dz!૽ @Q">׎]/ndzK3p>3S?&) =Tv&6L`^ m@inPj[JCy,! l >Z F!2`oxBqb)|46hY,8Ln'LׯfM'‹BvBiG2c xڪ5oA}_P4Ga g~y+4w+Ѽ \V35rOlt05>v0!^;M=]W7"ӹ=nR~VR<# HwUt,9s;]yboз$Xqv : O<ƣjcǮ$}/:m>p0˚s/nX!}fBtD#Ie_c:nWW1ֲyG/NKP=eoMHp.*5tB,kF-d; 1a֠4,TUq5T֨)@Rz|Пn gnCb.{JK*MӇma6X8l{ dB[-U'\5{<QG6G|ƫ1tZ ʮfoʎ%7*7f j7Ȁ.C17M"+ Ln[țqjOTESRG3g9G mǡ@f?yZwnfГ'`yĿO鱘ӨKN*;>)$y@W!`-+&M v91\cNq;%E{Ί_2IKxDϟxC7df.N}Wvw20)Qi]"d ȎLnjpܖÚ׋'76o"A xeu۞sĞN$Lh[wDW5G\͑XB5Zx&XvYIe&nOHl9wb0ܹښ@pc!=7/&}Bt (X =&k;M/.bdN I|G ~ahE(p>o$_8)U2Kk7>Oi22XB#$m`m< :>U0NEd$ -+b5wyvDT?$>ѶI{v\37r$s5MGlyĤ=wj`vǬ͜A+xgKf(wH2Ma,)6O8:(!-9*A|^mm>LD61lّgC ݦ|vXX6$#C|ϊGmQ+i H5J6ަe*_Wυ\Py0W sS \xvA֣2h(2PN݅4Ω?͑\Chj)B CgwF% yv&JMQ! Fr:O @ZuLNVI3}]}tP-OxeCO0OkӻKK(ċs@(Q}WQ,*^ܲմ K/we(xyyEWR엳E4+rX.gѽKunaĶ,0NM9%7 Jey\#hԏ~$f^E"SJx7I#^}і{#Ϲ'I葒r璯n?3VZ=Pt{7j/t+@ xjPd-49OGr2E)ғlο21+](Y]Fjd`/Xb0lcqjE&*"(XJy0<Qh #( Eǒ-1>`39r9!$~|,HuaI~|ftQbf熿򬚑%_E6NXRc |EfIHP3dm#$g53R{OOAhv ;xLjrY8 1X!SW?|2c ioQR*ՅRz\p- ܍aNg&pn!' w.yǤ=FbCoOӋS.iRc~xbU!8Xʤn]T/o%u{p5[1JL:kV 7JD d2 V?YqBeM d#VV3/x- ?z8|(Z\cW |0 4/6oջkZꄄ0I|Co)@b?Ez.AƧVΥL+2(oy[Ѱ1xd\&7-o̗FT8vWK06u`@KonSFp \ߓ-]hw `ͤI6r<<OQ,sJyF}$^ ,p nsPa̝6b2eVH)% 6@=Bd83H:%drN6d{9VK~hj p(-տ6AIJve+0A.K~wOC_$uH:kK)4)3xGK䶾Gƻ130q;5tN|!E(SmHFCxQiu NBYqZJ &$H՘5,GPA!*j;Ìwhi޶Щ@ CP0X RCFCu,viI;{ƫHYSgؑʖg3l2}9t$c;zIi$IҳqäM)^!ܬfj/qQN86{OȌ\W.[<1a&uxӓl +my i4fhZ "Ju J*-Y8w1A;Lb#\ڏ8E}ӫ&RDQ10߀p9A _6{M] J/!a6?C=sM Ao@s`m*oњLF"EY=/#v= QybMKs2lDE*;tXٖ<\By_ښe׮sszG^$Er>%#o"ޏ'V: 襜8RxS*On(;:栋Oo Jޠgo0$Rg#;n;}OT9ࠬ [Vu( 1P Q98jˮ1ѻ[j <~_N(1R|=W*^gCǖ`}QNRߐUv'@r(qk6 ŷu1&_CwKE#EEp:[ ⺉ؘȗji_F|AdZtzc+p5y7᤟bԄ"Y֚pl!+;t[-ن55ҷEP_ÀA) 7V%AfAHG&nxPt*,:1ɐh(wwXbđqJwa/KwƸ;⽡d I@= vQedZE f%9\)F@IZMrx.:JDElC}@כ-y `d2zAiB9o-_$;XqofUVQB3͝vqp)n=Vh g bL*6xo@6VtHяoGR6)pΏ /g1w WKF<{B'1;v6OEMߩyӀk,~ h|P8*b‹`YяU> 6$Pi_^, (8ô5l9ћGm0YJ6%MrW\1lYHXG~޷,K t1#j\L-ĊDM+K,G7bN4ꅓvB4+.-ܔO|0 TN}hVZT|U<{r* se;kg=;`+mЪsY_M1g~y 8 `toQrT*eq 68m=|l` S1.'|[ď/Np'xDfmp'N l8HsṬ$ =U#:tv1V rH+(k4dROT^ 8Ŕ3a+F_M_*iEjj$Z+%LE~>jC]€b܌ybԏ7@{ )[-Ʊj elqRy'lү0gF2!ƴV9$b.qz.F󫦠qRYcbX0/-nŹƹTUlHW#&&1JV( fnq9WU_k(Oa9=ba8XT#~PRAYYŝ4~RI(*(ol񺋴 M.H$#k!AȒL{\6 ֣7nO (Sػe y}KkFH#?Aˏ#S`y&PXaP{yi VX&d |7 \e\7Q; ȎW "ܐ]n񏨮Dn ,=[ֲ):=}]$NSuR״r+d7a&Cqw1;?ݙXoJH[;g VN.ӿT+:0*?(Is01ITsT W6' ŕnbI M7RAX@8Ĝo]֋HOJpfx b(T wlK+'TKԝVM_\: 9+Mx4>ϰcר@oMn@{dRe\3#.K5Lb0,}LS iB0W> FjFٍ ל=jRA8L7yZi4> 8I*)&گ2A{ SmUj(mi2M! '|r~xx62n  @xG ofhcGbh»6Ђ:B7s2=Da]Zkn&P5S=acI W48'Y"C1Hsa\[=PO:6\JS~4Ǩ2txZx&5A.} )Íyzԋƾʛs 0n)C bO+*k}#7V<;# n(NK@c`3H ҬSaPq.…^L7$X;rxy:IRu, s~&$LJ[n`QG>z|+)50+5̫08_EĔubȺ+A)W)IjeUjK9!ǢioԷ[tMKw*#GZ̫! 3}J 8`G mGFutd<ϦQt"KaDZlaá_9yhs^E鍬hz6`G X Sn;QS >3]I/,$BR>&P?s\[e-ۓKSi25H JJb`4g[>1s<#[(h)րQewKUGeئ~2[{kh)twƐ O@OKTQ ݹoF >-fyh(%q69>̤wNsWZm}!t Oɧ1Ʒ,Iؕt88).y;d2r @qL]Vv+`K9ئQi l&L*Q7-ȧ~ZwlJg, h}mPP"i!ANF-٥a@V{o;k4Jo?K7aYT]0FnI+exU#J[c K.[|:S+ HNbJm|h,{*8}tw_41Q[@RHW"`nQB&~݄M!(gܗ܍;b~Δ $iOys|VB O#x ƋtMP\ų$9:G9UtjZ"Н={Lee dUCfҋP vC mp6pSx SQvN0EMJ ̸8'n!)y09D }x_M6bTdbk" FXNʼd*b\5IAgE,#@eJIS 2q'W-˳ME_/ڭrh'=I yR{9@K0G>0ub)X$ \53^i0ƹβה2k@ :XǓm ohT K$ժpfj^6F`٣At, 2R =:>f!#>zD?@mo\/horzQ6Cf|D8 lů|iA\"!)(6s+>SÍo06$SeOvJ|=S#_Ac=WpcY\w瀔پ&CujMk&#tyvkp@ R}:Ä8:789!cgV8J^S+]ƗEd%L~1vxBbkɣb)T݂Q[V@K|]I>L+y"eKXmO&g[XOO$g@Fٚ[* 5fH8Ztxn@rxqzѐi݆6bMtJ /bjc2asUç'Z)#;R? iЫ@~pN(}T*  Q6l=/op3 F-/_⊨?>aŎ\6@q =d[٦F~" ~ ;-VK)?mIncؚ}4\c\fdGoF3}KAK٪J$T%D7k?.r{W*.:pz ;u6S]S ?4ic{ fo1h1Q"xNQr 8٣vQ[+0;YS1-R7:i~UZ?E'2;ZtNB]hwU8?p (SWk CyWVDsV\ؠ_!<^5[9Ӊ,a 䀸+TNF&gZCT2X7ZҞD|J53ԡtj={dzԸ%X^uXތ+.UJo$s^IX̽li؂)ު<<2yǤ);+jwE9JVvh31өKr*8<|<G.hY,\=D961pS1\ihԞѭGл+áP GŒ#390{i./*Cژ7jUFEX*X\>kUc(ܐsr:rCu+W'3(隧w\|+1lk {~*"ąGjJ8!wgN ^I  ؄ A ?#w౰4#}+a*?8FJҺR_= v8ҘQH`S"'F{`.)5X zp/y Pc[5A=Ux3,RvbH hj?d>5V u{C s顃stЎMlnDN3ňG0:JfYKy (jQЃK}Un_čGe^3g{ C8[j3[% $rN3sj]*{l(2Q忀_sd$8l|jIIX~Ykt{8va(Ap͗s-T:us %g W;P^ (I#xo7(7) aσk.~gsgL~`+ ]}lkJ ƕ`2_ّ8U7`"lU6BkY@cʇ7"Wu#LB)b`֊ 56dE9aˤH7 >hEߐ^*OꍉѠ\MX $vVK0 uWdy"1o>ux;NA#/L9;6v(SH4BXX)1He`bG ՚VYi&π(( W7rJNq>Uܥ[g01aFͼs.5ldZڀe4.9C4wlliL1)qp~!}7Y~# oO@+=#)_eZ1gnnekJIOS 9 ni0 uM*QN\ Bd/Ջo ;ޥZ]"z n8)a"X6gH/b elC;T O{t-?석Z8HZa `GYI:P6Bk@ nsTx;ʝ[8 T-66 &6Y-.mLdSm319 gRQdI0?{h;g>qlbTa"u]>aP爦sy[a* ;VzBo Ni/1_n.f6fn.`k#:_J_|Ayhb;!CjV]dWʴ{T@#EDٚΖ`η2$ʔpZ!^ݨwtn 7d}"jpzʕ;%fe q\>#FYHl]VMUzc]8ٯE~dHYӅcQ w:B;ʺjIg|-5x]s?b~ƣeܮ0q?9ǗF2%[0'cw+a4QwIoO:td[o[j ] 3PL;Ni$o̒eU#k>d|*jk4ic%#!jas0]򞧿_BRCwZPAA$sqk\NnUk&\o)T}:;ȥ]F >5jU5&#x>Y$߮x^8/FXK32&mM|o'NE8 (IYCwfZ ȬC=EKC%r0W1QYb}rPqX^lݔn|IdA@hv$ %~΄RK#{Br`lhA 7-l3}`TveG2+/MQK_K|LZ[bh?^QB-*$&OՕ~ߩT6BҧM۠Օ/'{;hAxA=s<좻Ee4SսmvnXS4rޓkLMB%ޘʶ6/.e"lS᜔b(|ľщxBS-> MLQ}ZuG( EuxZjrSc#RG DEp nIpPݓљu3}L4]RRd[rTaXߕh]2R$ԫq,S!QWs&/m-F3* 㵧HjZprL_\#v_38KxJk|,ܺ]zG? Bǣu.OK4!<%:L*CZ.Wŵ\D9V1vCg#20%K}.-,q͂DQpΆ\D=EèQGK#TۄajI [5\ %[2UR #|Ld@v QG*{ Ez*_%rgLϩO+)]/8_oC zOsi狴")_6`-Ew^sا Խ|r_\U c%X< `ovܨ{Δ"GxA<JβEo`"ypFrg`_E/<V\7Osȸ5޶=RAfHI?RÛđy?-=шbf>26MrA X-JC_n Q_<6+JעU ;OO6O-z)H_ Lg|t6C% w[tzԞl=?1ҡn J*1x4BdI&'n*+`|#s=l-iy>(M}\y6SDsuRF %~?>ܕPu'U(`&1!Zaq z "@g—euɧx 7oRR۽)]H[2O$}c'=sãԫ \MsQ 2K'췑AFO4[rd+|!f͎2Lϳc2F"=vzyk9U 9c|Aɸ9}]9A^O&p& uD /sViтm'' ΠY Uj;mQ L#{±^8g!Aڹ8C;z;L;@0M0*dxy:-ih$jQ/HM ˑݱP(@q0{dOUe1],9 1XnyoA}m[Ud-ùi_£lӅ2cCDxY^Xv[ՠ5Ayt {.xF+R?ii9=/~S 8 ᤋODSa*(2b/.,X"żZS*Wʭg3SW;ZjLbm`>TA4rрLHXQYSz\X Zo`H0"_OnA LL#CdL^i X̹?xVD~1smm׹InCdz|EDӋV1 x1ڣsQT*w0C-{Y//8" r>GRykXIu=W<~7NcQܯ]o$9La[—2CdV-i{ak×KKhd;(عG= J-s6+e@!++hZ04q"e=m1k$+_bGF2p _~Qxqo%o 0HNvcY51=0P6hÜ.N@"Eܧ\#eHw11л8C;M3)K>1}P|L(z[7i9zwwO8\8qV) Ki  xqcBO\ZI>ŲHLrߢ^?؈zҹAs5vcp&M外h]D0{mMRBB4Vd9C1İ/7T$*D;llGNlA =^e^!ÜO{#w`pbZf!TRA`-ٍ8+?_*c 76+_Y)]~ |Z{^ KjFvαy@Y }}EyCz=]HU*+-|W^ı P/j9if}9Ђ|yB]!jޯۑu? =ǎ!m/=?+uPb}:Au=o$XM~0 .jhoƚ41n'/OԠJ78Y ff0(TӾFKW2hk\b(n3RQ\̋=vQx)"1փC3Zfmś*u/*d<طTN;I 5 ^7;Y%B> dGKxQpU>|Z]Ǹ<Ph eWU] HL£LzFD)Z+P#Mj"f3A;l5.N8FB-*5u4paW$5 l>k7 i䢨 jgG9qXբPk7noD9Šj {1xv2Jzv)`\777j8}gulHL"h9lW5BVЌ74zl -u H yjY;6{I>r}Gzm^W\"br>g Z`M/] Ӻ B.S*{!@hRV0SRou1JaVϋfsqK$AzZܫ{:} kRn&(b ^~#+̀k:I.eow`"ERD?V gv7׺:=ʦ" *򅲛,^R^w zpi]lAhaNG]F6Z W/*~P:#7`d-~5rZbe@H%`[0Cs olߺ>B[1\6,<sEpPv~Dt?T20`a=,/KnTZ+h]BP̫`$޲Z#ǯP @%R>8 {^O@ϳ+['M- Q׵{<ƅ^R@*6Xgˏ.DZ zzv]05& n-># 0ZVD+]; ^K\}Oop{!/6_0b#^ .)&7$ke-FlpN Ek i~ff|;Xۅ'6Ɓdh4CW {s`lJrL6@&뭭fd5\v:r5Vb [13BFk=Ҵ"Ms#qņ2Qڥ3heguVMRY uS<0IK4 >wazɔjB"K!F "dběyb9,|ĶT%O[j&B!^$N04H4VX dɁՕv&-QT`檪-3YJO})XԜD_lCbzW/IaaXK'R<܆c(LFБKnL8$h?Kn8RQ侂"jHFMښ㛓 Qpa$\.~oo{oL"t ~6B,0nJjW0æΓOB6"9#ݸeXzQ)D{;ST.7:?4@6O3N_IMre!P1L#ܶyL֧=+]!ֿ2n2GDLssRZc宯442ڌrHMD5k;N`qw}1w ŒRoF4p.wLO/Lq6 20CGipL[|lTkha3M^c% BVH>45 ٔ 7&~O/bl5[ɔkΛd|gnoql/ݭ?遪euZɘY3v`%mLw)B5h1u/+'_.=L'<`9$+fM @wGOhVK֚3]>э0-|:o [>uA {Bgmܝ<9|9hLS)V68 ,4MWy_m?g?K)3NH$_@Gl8<6 *qIpMP| LhI Bbz?@`@':Ӆn^JPd_u6M_y FVb#d.4yvPaFyXjjş'tzk T|NUF=P1_Jam>Wvr (P7QrCHaE1[_nTGt:=h<OF!aRMSxf<Ϙ;~x/A$lyVc,q"fKۂ+a֘qssMpB}o{\ ?ۗ4^ಜo-vKKXů_yRv! gjOuh^L`@gTBk0ǝA d[,*vܘsRy,zwEDD%&җ ڐ&+a^2lD$NGыaT(yD&<:dÊS>lH_7 "&^1g^UqWɵ>3V6"^v#)z(M-Wǽ⠦?n|^ϩ42U R]m:Wy%;X rY=<[ N D=&y: kٿ*eI0h2Nsm{eG"!xYJN])وr5?w$<%ˏ^̓-ܻPWmx<+x cuFˑ-! G6c*&}k.a8BZ1ǽ[ϗ5#^C2A>~6+6;iDgE @ښ{sJ{ 4}^d2 L[Ĕp0Qmx'" x?>%9LYLJB pǢ +pGyϵ}I\P yD_h俦38yAYdJs4l9APNC˞L92BX: >0mc ~u9U 5-xseBK÷RnWG?nga1}{&Y &#Άq W2%g',pW3Dža ~3TC}PbRN9\IwŢ^uV,TѲGyF'~Ȋ >+NkWZ6˿^ȱWE˰OJ yH@CU|Jl-Y&%*V6d=H̕[Q8f?I9̉>t:|4% $6XLDj@&co;w<~Tzˢk'T0 Hu5xK 6 s7ƭS -U%&i/{IG |W~ 79$z88{riR~ f ϵh칹? ykUCɻ+|y[Brȸ͑L>N/E>-d${"nhMYwɰ`J%u'b$ jEa $( f"ei)Pr:L{uK >mB0~Q*KML*ee\6)_,2Funu+omryo3p f(uu1d+ߐ¼!cFzstn[*evz}wz[*2P~s]Q4@2fw;R+_]KGc֨$ä Ƴw#"ynJwyA]Ђ.?1~<%gF^ųY* ͸>4/5pRL&W<-.1l\JT:]T4oB{@b89ݿvWX(;H~ݴ=DǼ'~/קk/HHDK@m `b n7:UR in,3cA8>I2VװshHhf .Qz U~ř/*GХ!oT Ènwe0:Ɋ'ZsWfƍ9x``o2oHNxSPIzn?5E|NdK%c/b?ȏT/MNw ܚy[ `{:w} aKƨa,r.x*V`3V M`af6$s +IpktW)mMge ^B&lX& wXNi{RWU.j%P⛃,tnA%ϊx3Vr +o9[dWoQA<3$jO͟='&pN^ OW%Y掌+ςX\ΝUIy{8=41>hi_NG3ZM&$A-Ggg&Ô;Q4<\h:ٛ˻&…`)?#<(\Q~uo# #w`De+(2+iK汿wsXN*znQ-¨t޶#/>랧moA=R=SPp0 Geb7Vbfs]x}6`Nt0U.>uV~rv2V!VeIM)?vnlb(ɇ@fLSe Ԩ7Lɐan02K)9:Lߛ}`{8"ӞDgSƖulV?mNh/`r a;IT$5؎~PDn'ІsJ,@;gWeqwIno.kFB{/cFfua/64ݢE'ȧAy36Cـ-K <䣆UfG;w;u-)RhuP3rK i;)D@8րiK36$M޴Z^m%l %~os]8NpH5=WR3l>/2"*ǟ?l"Ke|nDX5 Ffڲm6 z*VzŻҕ^M\^noθ5Z02#|[CJZmG%奸;m%tCPz`޽9$c rGI Vlua*nwХd1.Oۇ]KLm .Wt{4&B$btpEy ODʣJEK>f;9zrYQ|ڡ܋oc l8aW1_N7X 0=u@ QsӭkyAhO;f)Nč¼2/Cy0G#*E6ėbv-Uo;JA:.RN2ֵy?"hj3ؓi#'4,t!1bWFY=?ccق#!tcvTOS 5 R5 :xZ۵E3aE[)7[*{jOrHzD^RMK (dZ-c2xGq}GDfN  fdY~3vuzgVXϖ)h;'s3vX^|~I %K.q#B;EޣSbDYd\Ϣ>\']CJ|ߙK{Hu#Ƣ-提(!hsxhzצcelC\?fZ[.*͞CBN+"IT$KąwƍsTC*N>z3񀶱&R߅ٳ,g`UΠL[ѽ û"V.lz{%Er$eϺ Z|πo=Kz0^Ak+E f%K,{y.cDkā*W'd4!QNa=0:5<2W q0hPV:, 0IVWpm4VHHn2홞 ˬߤ;&Lů Z'4ˎiY²[r -qXm @̸JLj6A`c6w&WPfYC@Xd(Nƾ4> pG5t` C<>{fsa;?J4_f(bkf&GuLy3͐u|ٷ,ҪͷP$hxp)׮t (G;s2GAi |bWk:uMb`5bN̮`+s@H~DlP>MGUf}(hƸf*N31LDi"BBfY!ň"h {%^#_p- x&6|>mSgAQ^maت($,+.uz[C*D5+/DQ]'3] =_Ev,^2ӕFMOЬ` DqjxU'Q]+lGi9B3Cȏ & |yoESJXD lgMȭ]T("Ƙ0Ŕ0'=>N2̠nt%0{b.aAmځ;֧: fWrj 'Y\TӧW޷,d#Z!cE;")mܳ` KL zq.YdSn#ぼ\15t L&SR]&4 ^Ș?|KEEΛё SRBC£=was2lyaɘh=0G6 AFZBPfG7L磩7 %K8+G˝v|%ib}>]#CzjiH"/>T OGGI/@YJޏ:xhd $ʥ Hv9tL'H"۲sXgwsXD#s@Y16ۇ>ɂO¨ylᚗ(~{&-y hSA*u[*k֌mBi9x m= 95" om29|tn3rHZ@ ֑11B-rɪUhd~1Օ'WQRdQݠх,(8W/в`Kz0%yȍ.A^W7>w%l35Rόy$ϟ"zJ ZcYؼzK eG?ظޖK"ϸJ)[p;`'FljTSɮ.T*N^L++w/'U%_/0 \}cס:'qnS9,#q,esS`zB7oqr rJ+cqOK ٖNFzfi<N?F4jGU\|pO5YâO(ip!Do*LOD%%坞zF7m-0-Ib=ڊ7U}3mĉdѢ!ʂ-¿ieþ=4 rb>:Sw2΄DxO8" '\dM4/:%莳PM{ k,EWCPE?LM% ۼI?|4I3YQNcN/Ll􁲤GXBD~nxbE(kt4!Jذ~zc 9{XOt WGU%=Uz?' 'Eۿs'WgMkt0آNKtZ?30M,˜ CL2סּDWbqq%+Xp-'^U:RٙQe@|giJ%;CXɩ9: EhW_4t5t1֞e>hm@OVTl[؍ A&Tlt)cP{f"@¯7T%zӊrŗN'%t)޼nVWcOZ,Ei@"8/%kلCJ4^ϕ!;m Oq9dzi썅%xW'[;!(G2M&T-\T4-ϥU~9 k*s0!W <<6tѐ́m:uprt1;nĩJj uG"ŋG1Uۓb\9I@oFÈN8Z.m?@G G ,Av &uf%0t[EE8;gdSjٙJ)OAA j-k#(= F%TB5=C jw`$; [ $TM=o NĚw;Cꛈx~^-fQHNPF88.Ǡ(~)ɜiGg3F < 1d( K?@\QKD^k̥3^98 `4WX[mW/em]Ь a:srߗKsY6X_< g❧SBѱ#62'dyb,*֊3?#;q6;^{)mN*c. K,f=]otLՂ6a(XRמ":T[# G^f_v#,-FY_šUu !h07s×H>3{Jc7eOLN enɡp@Dvdz/xp_NȝN '= Y!F@IU)lf9lĐ]հ_rFεdCs|_kLʞ0K}r L%PT3-tC.w|@F;'{ڬ'8f3A쓳b qVӽ9[nGIWb)3eѴbaΗȪ7v-n#봎$f+V!Ň؞wX3)ϧyLW~ h1> ]qʼnUJok)$Y^׻%vо",O~RE#jckϢt~Jߧ^go;J4u&TGf2\,Ais+xp;%G< & ǻڛ K,D\$S6jf-lm)K} ~?uu(z4`IɑNÚ3 :s-5( ?g!tb)&Uc!Hʗ$UN!SR,R_2MBiUj6U uग़2~nOLF=ZT?H<>tf/ GhۭVBHȒԻv`AM@5hSzE"vNj 搓ѕ,gnyqQaXfSr`̊ ߥA9=!XddM(hD{,PK&F]DҪ^z.K 8fSu0֮}@Gة] AS)} H|a_(h"4!`c[|@Ы˸aZѨP0S|]hw5*[hSpxUt0tFS0`9jd1uz3uh/{Р&J\n1VAsvt^/Gc;B8ގ iHʞ0c-1c@$nH#b6Ӕo@gY$mrPʏ}f%w_{[HN-zH#dZSq] )a9[fWUZѷ\>0y&ºQ~TYAL<昮a.O_N1}VդX>4fWu8mЇ`:gIr{$\rB]  Žn!n sm) ю\§$z1/V 6u.>˅]D6-ڜ Ǵ*ApZ˔E`O>m6.6~6d/b*޷%J }R5NMCa qJ8K*LvvƮʆ '%/'e}$wO *qHi[fi vҿ lLָ)?'{BX'Fːbl1ʰ( TrgνU r̅3قnB=o8 ͗߻a;ˉD 3ӭ Ahx.aW=VڷL|k1l"vw ؎x/M$a=rLxs#iz3'g/eW4_$ M[59\4=flq7foY'>^eJw%#7^?Xr4~' W <}I|\6˨mFQj𵂦U(x@@% tp{Gۖ8@nxejxCmK^ߔ%,~o›^pʘPFX^g8F$5ٽD6`{hL h#UllԂGT{TyDr#6f s<}FvZ&,ZŦK3uYTJoP`IsepeDg%FK`iiTZ{:75IT99waCgqr9/ ),?HUh4eđsj~q#!*,`f@~d3aYw*ʃ`'N-û"g!*֮BYzfHBG&Q{]dK"%(5,4ec1dyFYcs.|#'9(klp=1[cVn;b.=PbF+cQN㲺$A5;4/M݉vDCںjg ТljuZp J߱m\&2ЏNt^HJaBcQVEƝ5u,>F_>97g"(eAE҄B )e72# u8(;[@`UlDj;f5˻r4uS,hr-m a|Snv]R˅"fkϜ ne 0lٰUflR9<ϧqln&]IM-F}vR2h9l'ǯQ ee+MB ǖbPt-`c m8n1lR#Dg>XmȋAu*uq ;tz<(0&r'RBq2cǭ{z AD)z1kqx*o A!>:ʼnn4Ïfa-v%kjcݔLEQYƮtSOg21=Y-CȘǃ"jMk*-7۞4i,n."~ `v .}"ilH< EJ@W[-Cv[ 3NGP3.*@˛BGRJ ֏x)y|smCpuM52^wv'Ef8?s/r3 42Au H.˱Wc"m3ɺGԮ`!L+:́ToU ΗdRazyM&kfD]X^G[ެAPA+z!jXl/I#g˜ b =NvI_tT".G omPq?䫴נlvdGzc`2sGLNfb_;zLە)/3Eߣϟ~jg8X^TBܭ0p]mCs(d]\ KަH @1BqChZAJ]k9׵v ̄k{"k+~Dmx;ʝKi5F Eh%5juir;AEjKn#V(F35RޚaZVf{Y Կ`8ph+κ sT\O聍kk3 ;$lx-LdoNj)%}NV&nz~=F`\aPzgAdoGdЧDcm<2^"bMH<C0y.3K|||RN7=ii#J_{|)J<<@e~gNO( @l-T[IBe39%QL"(Aog^.e.jE5Ɇ]@3e:L11ͿHe㏐9ulŌ =,XU1k<6EfEH?A5 micܽ6dC x,E~hT|c9QPf[ _wzT ҅FcvJnϸ|qWZEiGA=KO2E(P !:8W9SC< X4hx>CVdMYI \g!r4|Ոm+s8\sp"aeIӡ [vdi{g#;vĆΆF:zE]48LlOw8>+rܩclr./yV= `uԴބ  OÚTFh>M_̧>cTyxV1h{)zhgrq◛xyckWRh qֽ⹿_}3O_D%z<# 8o/8,{TQw#W%2 Zƪp jE$m;&^)k`$S.QWX|eH d`s,N&o~M%Ln(tĶmJ5<(N\b'Kgτ 3{ ;? ƈkNF @-ɉ;/dDIv/HlY!ad]Z5K T֦sf %OfGB=BGՔz$<$rjdu)qPc>xjEPEU׎#B^epPhg94+q&oHRX_ϔd8MYwZ$f0I8c!u=()1\@!*А*@3< mIyx.e/ >1A_QLRsBHWm%PUjk~b*Rj*]47>>Ĝv}.ݐ{j$y#grŘ z#0;$XM!=57¦-uP Eia  vn/(m/ȷ/wQ$_} j϶ryHZ>/P1L/1%N:T7ӏ .}IF:->-ZQiBPG:׋"gu(_;(v@΁ {HO¢`bI ƀ2 Ul=뽛c^V, O䶇d - qE,ȔQGLkfe#6[hܕ ~#)- 02)L"F%B;j(+:Sm߼,rޟ6Cm .ZNZU)mbFkgʀ%]D}6COzdxa5ֶڪA#|,*/]BNT\ǀƶ%}CpA@͡`Ȑ}dT2߹/1Il q=ɫC'zۿ OEAlvtzDHǓ8*EYfґ&MM F07Vu.N~H k-+()"`4Iz\T/f>k4186qޗv:0basE|C&pn +~ >i:V|hޒU[0+MV~):p JXuUZ+aVnZn2AH#!Y?RWAo@ٟ3f﷨pEľ}/s/WS-hra3> GVre^&3GTghMOމ*Q?Á>Wk0זKɘd Bhl}y+]'0֏Y5nfsGtՇ(V[ٳIb֠_R=*4m$[X&n(x hmPYu$U)UVc? m~-};`^,T-̓f(zIzUÃN+X",Z _{s*ղ0|2G30~@?$}'y*v^K;;`k&@Ovd'cQS37c*p˰zgٰ~yܜj38uOaz ʼ.4[.8%*k`>;Wl+A=Bv7ډgJeF`WEl, #γes@p5!ܴ S4ǺVθ̀*~,0ݪ̙ ;}BX nѝ'Pۨ*!QꡎSu_hqrOCs](۶]O j*5Fي:xB6#FJ bz;-h>]?+kV}wB[3jNfwی @|{\O< xPEvxēPorܱ)0oNӨq(x|ʨs-ZcíMKVmZ \%:%W7 A樟L9ުJmj?{\bzzڣAhPW,a ALeorb#]F ph gHW(9JZ5_vmQ f[kD4)d8-q8IR'T};&|w 盳ӧIYnxzC3@`V5lf۵Ĩa-w ~hA-gn-`oLb: >XYCH |WvU(@WbV[Bkڅ4|J'ɇ(]u M(i" r`j,m^Twl,-.9(H ~Uv՞76QaM='+ &hzA橀 dPQZxGZM(fT{;3 DXazj̰St۾&8sjFy항$wNXsjh2V,\h5SLK øGU >X_j~)0Õ 0v?p<+߶U4&jllר|(i(]صl̒~}'wIȽCPEPr 1wN_7,ڑ ؘrq31 e{9ɚg5̆D!dHeкlYW)$cs%g^riL 1q!8z;D6^۹qLtw4wbW#(dIn\vƻIÞlnyI:-G]߾b1m])p_ڹ_~) *U Hh-&ľKaıeJV]oZԺU#rR$^*%wp"]ǂMsVN@"aۻJKO6i=DTa#orUک[ĕI^4 ONtG$ @T:) &@kGxWacs!‚d!o8-L Vh;k.I+9IQ]@1}':/9uoB^Q!~ƻz>Ҡ9!e\u~x.Fxe&Іȅ(H|qG[B$Yԭ"l.c'mb&9璭n7}H_;48j,{M{&Lj:&DRSU%\-Fu9QvN"lvRTwFgsM //3j ιa]8/ޙ kp!`ĵ{شw}Ύ~}! v6Ƀ?qpe:~./&(gy&  4# ώ{l% bD7qX<CrtLo9y$2~,Q3B&沧"paVD}|#G2e~~!41qΏljpdWy{0pŠqDAʫz7oz,c1?tsffX'p$E4ٙ+F\K:!ӯq q & AUEHOhF ˛PK;;;L.z*F)(7]y0ZҔy}!LA?Q4ZX.閎1㪩n60I,%OoS䗒՛Z [%}}ѽƾx܌ \[f ἂ}w?27&Bz)2NK o@]=6#kQ\s&@ES&㷐hBt97e^$g:eN? K2sTt0'pPoUie3kE;j/'7Q[% D̃9fCIi&bҒe#s)u3[/?=.E ot`ANllh\`WFdW]GMuāj_ 򗇵^g,^39Hwd(:-gK\#5+G lIjd`=]X>z3ڿd3L1˪W)HwŠ}mf(Vޟ0 ,eUۏYj̪;xNu$K^BL Wz`'nڤoMS1ƺ R FQ{^@%{NBDR=nife"VoQ)b^>pZSeVG1/EƮ:̟u 1S +ZI#*ƾo.Iu`qah "qg+^ t #r,tk-M>w³.E oWV:(ң䵤7/bc6,YU5HҺF,rPU |*IKW@#%A(yxMUzhMi.w Z .1tGU@KhaÀ(*6JI?liv@^aEzgFQ>*_hVՁs>T7 Ԥx+Xƪ93k4 g"{,NgҲ ; 9N!"ሙk"H6ܻw0H6+{ʒ*ejĒH1´d=j,5ʸ~!#3:_6MTVqXfYBSMdt(e}{ *bZE0~`WF'$m% M0eD)p"G&|ڼآ1NVݬ R?J>R+X"xyzU_1#ptNsttćoMJ9Ic^pI0,\Q8xM_{ѱ)lE6̦`oH39抰@3v"j|NYwQ PhaC崰H)H.1nes2J*!W+EKrU\/@'0/03\D=ТFL}Aqa~.A(2#N$:<6ۖt;t0b P~:3q}].lemo%W;?шq- UcˈyscyЭADǸv/-SK[ _k\ԁNWƆz ~\*ffYuҔi3$/;[}`/p#%00ԢN/α~ImntSp|H[QŤE U9iֹܶN\(L)w潡+TBG9T5N~auX2ЈN Df𕘬v/CFBkh@ο bD2գh' %yѼݵ'+k_x/6M[Gg!ȿ>0S0`~vglTs%FN&T?Xrm9RW^RkNo+M#~ zf]yw Bcl(\\vP:Č53O  B-XQ3]ʭI aTwIAdߴ:j,_g褺?タ1oL gE.>()Iί7ߍ?AV'啢q%ݙi\} hIOn (͇A T~}T7a5,0mbp n~0ks|YT5ל$0o@B'"ϩ%>>e ML Y\s(hwިK_@ЦF|cƢa:Z+||/V 6?7k@7#Ōn+Q)%H01{"&hMî=`$orM:2 ^δ02<}6}MA__ǻt'W,34@{ډeIpl1K]h97: 5'b,# *_K LUʼmyGt\zw~L44}EH"7]kf&-yt. MsJ-NdK 0t`C3ڏ{؃d|!ybLfVɷoǘ8-:>XQnVXSN]HVFX%Z盁F'id!Xt[ ZD!H?f҆CG6VZ%5k9JQi*`M-VϒlɵʢإXDBJpQhXmthqVUxidc68<ἁ" xHjq4$KK,.j`+㦜6d'J'>Yk*ߗ9Auw1ıԁ5K YLaӨϔf_v%{?1rpm3طut\3VIi] _p.3H[9 suP$ 9Cҩ's }9_q}8PȽ~̘fuyG"#oODOYrh)}*ν/ro!Dڮ{£ :X y&{Sm<]HiiTER?P<̇@ά9y YN !)@=T~KN[Yohֳ`D`H3u ̔ݗ33 TYEp)~R[Qh aP5'xud Z6H^hthXDDZӭCf 禒T1˷K Ĺf,+ W p\"B/E؞c|k35곓CcrFr"&!ߗMǠeS1I"e6"4 *2"~ۄBhJJ:N4ސNB &•!CAs8=}vkYTMngG QF? LLgeև3\rÁFs>Y"a#hhpsqɬ6`N4ſWᅟ/$|3QeJ{&7-7SAH5áRx,$;((5E;)tj4Ur;`d/%PlyV'ړ}Hb=F*~_,{}z 'dYk?xDOV+q3b=_0M 0x0"\'G*uI)iҏJӦ}Zna!ϴ:v'c'0rl ed*S4*,cr6YEz< ż=)6+`ۃН5&(ċ9$ (70J08uc (m6I(gk4Wmܔ(EB"i$5 PPMgUkkwU87 =0fi&h<4Qi;M$[i\z[h:iGXr،(x#LU7n][9m"t^-v=8I?ݮhfO4tզ~';J2` d0~|gThbFa *mkАz"|gZBP'Xmy"0G MĖbVZH*)-Z&MfҎGլ=a3LÚagf*&!Zs8da>0\iؓ)D1=ήcۙ=G3آ^Rw.$9t7y +uk^5σ*`̣ƿnYu$=d4դzd _-oyJhu:?I9bq ('v D8OcJh@A.z206Ma/k|*R]\>x.Wg/H9+l0 0mV~mNC$p~@pkFMLN}@D:Hc3%9 nuѺu;QEm(_ETĝ;ѣN  EuF贶(6Ojj*q1I-47E&to#6oI'ʲ8s GmMp )7=j[{Cs;>'K;n={ѣ -qڗVDye;* CgQ.h҂j$`̖@#h܈𤯶 mh`z>(?Faчf_9@ۯZ/~}{:_v> |d+7[?yeN@I4]Y3 ˇ XpoAu^|$XIU}ct:n+bb&())kgS_|{`(<(cS P`xzk:೸_ӝ4: {׎g/5폱C7O~?~NevhTd܉kCkEk'`"ǰwlmUCa3_:B'ך#3IwP*wgŬ+%M4a`93d9.y `c+@j\vSjlliyzd^ og5İ` OԯN{ u7\b=o=8O|-z6<'(J9q[N1Y|?=K @ Uf:Y\#"V2~읛Zr/Z;]E缹fjz䛀6x`P=:h5R5׏_ Iw (+W rq ( _f2jz>c|7a$hd~\!7M9 8f~Ql+-?uěm2'-+5Y] OkKg(MprMPZݑSM-Bu ?S,?|JGsu{PouU+]T5 k6߾ז1f!Ɉ"M?1H=hu` ;@^$ 4[#vIl&xz4ჾz!lZM8(`&v<^8Iuv4N"bnK3}ɔLc8hrʞ~?wz&'&^-JTuτ0Ǫr8Q8(aG0\J7^Χ[fdmэN8Yx<ݭl:tlW*:~DSf_LWFDqA+9VUei/ymqnQ@.DJ,b˃3$M~>BB"e bi[N%8he*A1ӗB>kT#C*\x榶' i CmfOiOXp>_IB,69^ܢT26d0 KwOaάVjQ3^w#B𡑬/,XZcdUv{ Via)B6 Zv33JI:*8"TƀBn|K<^6.)cN- nl^;ɀΧL*\!t )ۛ[FspժZ _1EI2x nY9V~@l#7 H3[#Ko 4\pܺV>.zʮSÏ_~X[a}R-xn'Eu3.TW&L<,RbX~3A8xI1],zAHmPR~XuɀBDZΓ94pW;ҏ(TصN}"$ 8Mx~'WF$H+z>vnpb^hcXSe=ᦹDb#:9lᄧ53M1zŌLIlf,Zj+oDԾD٨ 3?6Uv ?l|T^oirJs} Hl7i꺌WIR>S`T򿷇JUza.L[y." ~EP`^od-(ɜ&|@R3-.0c N+c"ێ,8HHf̄0;]O^<C:s!wlL +5tNDv _RՐu#zaKzVlGծ7ډiN2`@ 8cntZcַ*iw mPTy)PF~؈ O7V<\0F)e*iz7W"HՎ:>t$hksbM`ՍEMo1[ 641v>0FMO?iٌ= aIuŰ|?1eĸVoP3KW%~!$0Qt9 >{,GWam5PuRc iI^|`}ѨQ~hQBPfR30+tLLlZmqxIMm4Y:?E.!ejǂ]@f/􂾪;l?4/P @U=-ΰ:Cr+AvF%v7ƹ_\#s`]&_ 0Y|gR3LfС?&t텙B  8XoaB-QY!*/[ԗ"k^:8`R Vc4OXJLoCІiQd0bNiGGkk4sJԊ(c 0{Hڅ$(-gi5&$M(t /l2óu=oVL:ʫ yswƨ\%g9֔OF# zo1H@i9_.3H˲ށŒFVېǙ$t1k/-[#ݠ T8i^A,GYTgg ~0*cJn_!}S- jYL91-KTWv*:(Ϻԇwfv]7IX!۾ * u'rf *>cBp-d<*/hpF"{$ꉉN1~B'$_|+6c6_pԃ \[i@Ȉ +YU=5f7TM./-%.c7yI'þAx6AGkl4~#^"WݔSXS {taJGXʾ:JQ@)򴁱lѥϲrD{ il>Uu5`gS;xdRt6]M|g-hM%o h}?Q9%&rQ~-`!>~y*]OPP"d) Ht UqPK@{ZK'4`.gqBVy&UqR+Hǃ-.g􆲔ˑЮ3o$I%5f˔ebк ڽՏ8zߠs+=!+'e:*BTk/|mv+Kqb,?۽ȋME(G'X9sv>Z'uwx6tfUnd^kPQ=4`8AOXo,rN )lY,D\>4aV5AQ tAz%\)#~&߃8[ݙ2]eQt0C'sh1t9hDz_toY'%HBXǻbqm!޽' m v4N- OJB@E_$ W2)"}Z>o^ (.N!z%$4W_d4ꗉ#(_S*}dövAN [Gv+W+ 4DhOݿG˒ίx=Ãjou'*;!shaK+]I3:9m e >v\o+pʝYP~-b b׃?Vb-oG̃ ;2l0Vfw&%Ft) fv'ĔpzB3c-cQxri t(7M͓ _$iy: C$~Q^t5Ym妶9t&}?#Z.I_'FzD 4*veO7o#2)e_ٯĤѸEo @V0&#vc)Xk?<FqSLPo'#k'^d^؄tڀ̛ o{>]sGG?#dRaU js*idp%R%t 5 -^V+TlA/p=s:?>EXS?׍ۈͱS[}յ"0KTݼo>XEP$*V;վq1.& @TEo^jd]G 8QZKfv{w\a#~\280Q L86v<(!ss]Ǚ2ZBprʜƂ^M_Q Xو 8PiI 08zEԸ 5i9I l&g 1Xh ޲vű88BB+3VE cEE{?L0.@rilO:+f'dY3E8츆H/M`!wB_S j!.tT W^HՠHmC},z[}LutRDzn ;d&|yL4yycM78.sCIp6P$ ݒR4m?V& @ʅI(nK:$g=Ʉ'hmdqhN϶GΫޮ*Gj[}9AyՁb_c8:!p *.4kgAkfR\/^eHY,#)QϕdJZk@ЍwHAq+!dSj }#3<+C[EESջH+*IF ՚L"5m|ڐނE*&kWr py~ډCB sp|!ix$^̽ĻV4x|@&{ -loOQY-TrXyh4hT'I֑}i*noEγv p\_ʸ.vۻmT+?qlLqͺ¬ydRjD0"NS/J"s 5MD:ց[(4x%ja`8ॼs%( 2yNppo&)郪}kxruɛ!Sȴ@ݫNQn\:jt$^.3qUy}]JJn+W2`|ky[Ўh/ ˵~>ff-,Ȉ 6UuD}AߦʨL KҞs)[*U^ղ?؎ t,H!~Ez^n[דpxF U<*H %n^ jqP8`]XCqC3 VVkDF]0lXgX0/ocrxT%al0/<ƻ' jh~3&^1 VyuF)CJf T3PI6fðZdH:V: }+w``x%R JbYQ&{4 5|}߾_ޙTR8Ę3G`e Kt=6Qx;\JB,Y.?|HI|[xOoȝ y.b)^E5w^JRĐAd K}Ɔ OxgG/"r$x$V[69aBZ{ 1Ͷ11})C!Rp>{Ϋx{9feP۬3 wesp卛0<Xصdɟ=ٔA>^_8=>=Cѫ"vM+}B~Ag,^,|Mޜ(o@sOU6m>5w Bc$j+H !1| Q1WadADբ|2>ꉛQx'yhIt?83Aޏ1s2TpK_duW|mF1@o!XsFq\Cդ/V〛:÷P-S9p֛IS%K4--Qit+'AOa}io6KkQg>&6 +[s^X'|D>LN%o, OMKRnⷭ+B@ mRlhӡRSCSP=9"7JxPT%Jk ЛP(ul%^|Gdm*^AAnn#1B,n);gBo+FhɊݫ|8C ֽގy6ԜLc ٺJĔ NMS.PZ4#2ZCWnȂ44iCf3c :lgTBX{=ڎ%_ؿk5\SV?G~#NITa`F,/l_bTOFk6 QKH}K^,v%kLo |F0`xS UM=KAZ{GM ή\̊Jz}8Nǡ۽@Y1QPJG"^{HviI?L' >iUwp*rl(Y?FnˬD&@3D`aZu3gw>.5<h(EiEdNoT*szpKɒ%yגDlZVtkʡ&RYhREhΏTh*驫P]I2f*iBL<;umi>ZR ?:I&m\ {Ji"mbI9O\ t' E[;N) `PsRDF'YJG7bM'ÂvifS¸ɩeCh\LFy3ݗs (L@[0C 25 .gXs&9q9cu@ N7h}NT7.9ՌijEVSc_^"̠G 1sHB@ KR/ ˓zVX䩧tcgԣzeM8j z'0iͯ l~*)+%%$k<9iGv1%` c* s)JEzMJB9"N_:ZCB0i[̺ *{f2*##men=8/$Ο8vz$<$8 ̫[QpfQljF Ԗf0U>0S=}8*a-U,wjS&0v>FsS@ pCho ˥ a-$;ݮ-Z×%7/r~$EL_l2d7Iu?S%u.(z_63 ^$JK=AձޠJPt C:gXxe-s Ԩnɤtx! upXY#S< '9ψƈ qsң.BMߏqR6фejk9#tBo]Ly{i,ҧ}pDy>sJ3Q"GG?ωoOxq8~ v$-kO<Ka0Tk4W(m~!-GeSfG:_eo ۧ?'2Su>KմU.6c"kG fw&-j2L) 3oPӋ|-*aMLVt* `ce QY 2R.#腌hK־tg]6,@x Ftb@P.Q.RrY51> '?~?_}"#M3)׿7?ցc}!ھPtW8ܪQʿx0PGmuߟQK=t"#c/_UF1b=1ŔI/LYX.DlKa8.&mjqeX i?G{( dsW (Б֠ 6<8n+k+ fU6~ӨM qҦa~xxx="d؂Fq|nٝ%\Yiw-d=խlhg@"1ܙD2 }Łi?Ϩ 7R'5x~I0E5u7eS+Lf9I Ʋ{^W=ыE?瑿 WOjnpL 9ۖO&DH\FD?E޺_u/Ci'JO0lh0+iXG!87Iޝc{{&)wٰ[mYZBL n R_7g^ޤݶ\\:ũ7ȺzԿ.`h[OQ4>B?ǖ݃Ƨ)DwrcC KUZ*^pښc[̋SlPYx`'HcT גdu[.Mȡ?bųcwkjh}p& fta!rO/r~ sKl Sx}Ne| 5 rI7Y7>@nXX,jG ]1iy'D_6Hoي'%p. 9j4ЄW:36L[LA=q RfL$MIڲ!b8VNqȆ$ڟ`9ZNl4f1Ow}1mч(rU<ɸvq;#* v6v(zyenqdLm3Vߣj(k_v3x%FhK~c@ă{yo]F0v|֮&IG`Imf҅6vR"9k4mʩ+n/Pɹa.zWc(1W:+\~vf՚݊P"|&"sءkͲdR+6%g?eA~[u<4fCh^zWT`b^MXq= dE}3z8nfNZQG&5>8Jʗ UqIB^dw})p, "jŏ; OQN#'5 ]HTta'/!MI@Xqh!G븞^7jȬ$ ĎC9+"'KkbgEu/Gbl \ufWWmxli&283lF8.-IJ+LyN| L1-EQIp=@v\QLX\ZQK6}u+< _i80Iߠ-@A2VH2voe.\͘;^ص- <c=&Y^ɻuu\v팙4{N`Rȓ\̸)BSr;0{ple b_ԯz멝*xq v~+~ }zFH7%/| *V[R *NV۷ͨ?kS ֋Hd!_cpUV F7Wk U072PuŪ>IkW_Z%Bf܄cd7:mcT:Ac 5'gaoN(phs.#,J3k8Cؾ& s=ACj⾹$rtI [*FxiC/`aN vͬ!_ 'Oc$_ėJxg#F4ԘZ)s=LՂa5VZ!0Z;H lcҪC1ދx 3DZxfZ{ѦI%庑9gAAkAhqBD U_ #x Dy%}#)̈6hwɲDz4Q@zTXm`yt"e0>mv\~~g^ML' j뎘D|4@qU >PV7ȕD{VVS9<:w[~_3k;1RMƜcA+X?Ԏnl1}FOJ>] YBzߚ0b獮5QJ|} O@DbFDm[Y_L)}˟0kwwQ.$=E'@cEVL0HڸI@j@ͩyak6CX39=4θ0WE$"ψFiD[|mF^hnQ2{vvwI@9T@ƻl.QvVҳٹ0d {Sf93|oԅ ˸|RIУSl5>6g.&_-kPa^u.fmZX"*-1EƘ ^Ō)M%${)w=q"2Lu%}(֐Ĩ]NVmheZʹ}IH⾩Z&irβ&V|C)z7c 76$ȫ=٨78_$]~(kyB}7n-df߻1}qߺS=򆹾q~l&ˆ ;``?٣jI1A4fW>m94bWIvT@ #'[rw[3A] %*=f,9ZB  e`wQ?oMJgLl#eP9g6Wg5j/G2kyi ;y}5O|D݋-9 uNʛTVSNΘ9B7%K%@,u_B| AP5z$5FCAlYn5!6BX|e\CaV hKi+0mg|FB*aFX&(\~DFTPG~ )E^0ȼ}1OyBqL ui)| UFMAeEV`0naI|V. YFh:>9K{5cnXu0BdV&K]S"-{Lbb%(FGH y—M?Зӫ<,Tm;RH@,B33B/ܵ1M%r ~9&q>ĉ0;fߧeI8)5G,)*T h=R^ش20Ƨ i4L8/ zv[h) ;[qsm9-M硡G YZ?psV)ע?=pwWżtO -SBڶ4,BJ`r0'?F}f1$uJqQo5#׸XPY #R ))0P{PadTI\2ARm?oZuJw&А5|y/>_?. 5^@4ĝbyHGEs74ZUfmE:tB0ol+N-.0)%u6p@?N4]`O8on@1Jh-j!0q@eGɷ43bCapLXݩJB)*HPV$jnXpȢ{Ϝ*6,v1@M^Dlہ#ә/-Hk"?j@)yVQvP[/{Jd~=jsƑNByatkNbHXc}2]8QM̌jRд g)9heB#;拾7~|UX/z{pdAiW̩:WCQ%0,:-LTi~C3I*&y2mHV:N:>7bc罺l 6!j)wLmbvj0\ 쨟wsxHRyQ"T!v=S@ϱgCnm6|`^J,.'#YA F"+N-e/։CǑȹъŠQN7Ʒ,mlF-nʼnislb=`Xʹ]&D@i(}|чҗ#n5od39ٺaqbpkqdǟǤTgeDaθ)#v!I&"LFҨ3 @8W:+C=[oAÛ',)2[+Il~c`(sH?]ޡE& 4C[;c>aFb|6ױZG{N})(v95xj7YW92V~oJ>(74=9 1dɇ(DI m-Qߊ<&YXT|٪FuQ}ISXa~p&=GG$J] ^* :W׭5\WIY9„|'h׃Z%)aw0t:l2΅KOdLv{ -^ܕF?<| cGdEDl$BoApZ4;Z|El&MjXu -_fP')Z,:<;![ZT0FcT:.[6i=i|;(~)Ticsrx>Y]Co8R7DL(3ϼ& *npV6 ޳8 71U}QHr➐'U>ĭpFꚕ# +>e Xil:V WۣZqˑ`3H~S{5k͆f:6\w g HTs_pMIzQ:eزeu~(Yݑxmw467XE.bxgDSrJ8BvFoQxzpvg!&U} fx.FD^S',8M !+?VJE1XyxFo Ns*m AеH0N yo2'Ր&eZn &`|Yo0-h-Nkc<{!f.ehŏeIKx~wiχ?6M~~jEgXvA). %-6f&wZgV6gbE6G+uRs#!H3WC"jM;rYǨ^l[iS;-N\]QUd᠐ +.RsK=ks/'X(Z'Z}G 5d齴Ax~sLJ~NXXy{3֧/JX*j.iRd[N^)m8|5%G|]&$QD I8yY|eȽ==d}}6}բ{u{gGwzO7IҷCYU!bRf? `e =W;6&E|@S -c(ğϘв_gKnˏ@D/$l()-/] /bݖ0 ' k#2>S5 N 8]e{3w_;;9!Ƃ,tS]r U<&zF+Ϝ8Ç"yO]exN/dK^6m7aJG5(tZ$ Byr &Gpɜ2)+HC}lUI: ӓtak{ogї^ 2+e5QŨlO.֨`U:K%kt۩-aZVɒlB,3z C8o)k g5**iF! UAY_c l⒅c w鷶I#K"QKĦ-+0+)$ z\T]I-'dg]噣nǸQ _VYΰmaw  ctL@"`ʜJr f6y^}xm.Di ?ۋ:%XQv 鮼fNnNNaэ,bRT_)5(/ j &PmUz+ʽٔ V+H:e`.]aR}PǐiYb}|zX}btv7h6}rnʐ.v[OܒFM9 O95j75*(-7M\2g+9[O{;y׿[^[W(\<ϪFYm B5uSw@;+ZSdT"@?s7Q@tMZbS˸SH)"v>VRl$zU`7tJM)#jNXIbQ2U^\XR"|䋧@x+ןkb~ل Vcr[86ι"aA0<)۷MW (ʭbڑr +KQ)|v#Z:UK_-EZd5V+փF$H5 +kjy\F,0$^>]aM ~éClNuQ=CS={f5.a}rgg"6b~ŜHPH-+iÂ$KWH.ZJ!*S\g/pp +ʆ]U-]*>6wAkAbA#'[K4|Ŷ~tŸ-nn]IYᒮxMjZe]]qSWӏ;ONK5Bɦ >s[u.`w䡆\\j֏R{7 ,;:n XxԂp6E!7qIY/ (K({~ÇSprHSHl¾yaО^& N>ߗBn2(u&M//jE* m^x'(w/[m~|M uC@g륹` 춼:Gm}^ vّ冰U"47Utykg l~OxIRgx*^|0+Rp>z1wYwJbc8 s7BЊ6YP`Y*)7-tK04ZH$y*<J@OwveRuDY :7= {;ڐgQbG6қՌfz<)aQ?{ MZQmduC=ʁ\nΝ~, o1vINWY=*ih%P1Ԣ/0\;LD:XQFe?OeW$=C> e!WD.\ ҳQάLr"$JR+B8ț;x hM, ;J/<%ey` !`zD"@DwSvUjP8Rtf7Os;>ks"tY!Ep2JBX\k:ذ@@0baB8/"\A:V]A¯tOҺ 3tSa7g3^ :w+Ξu(A^Z~UK4rOFMbfuʪCI ra<)"H0'%>m|t}<()U S)۷x%sE2Ԯ\vB<j pW@0Z+j nKvgqkȵ"rjX'Aq)Vnmv[aɳTU:*2=F ,׉= cq=oJ:f_!H zׁ;cQ?*;Moϓjt^eWBQ~\B_).U<˰mܥ:Er/oQ KP81ۖE~ 4V%w %!6`{X x"jMN.F;-YqC9!wk++t>!M ^Zvc*T/KyN!:nЗ68q Ȯ ? Ws4,m`UmYo."TEZDÙWvmX8ma9U}$3iZf+q 3xl^c>Mz;̃#a\)pd>4J1{.udט-|:v]v]-QP/ RYGad9琖AՆj X@2㒋VόkQZ!Gϋ[ ~=&]*<٣63헽\ж)ZѦtG^ ۥL][!eiLo_Q;! "v|{JO.//@.9|̏4DOSC E--3@,&̤QW!dfh_.P=ë!0 \xOH:5hGGGg'hE;4[(Ek*C&S$ 6̪Sݾмer)P?@=QOT-GYSk" Krw}^M<:ݻebEj?¯ )TkC4cV6g "7D)qG*JNZX<[J Xhjk1J7$Xzmu>ʴI0&~P؅땕*fT"[tLbO0CCJFD$*ЎR1O:~ST&p+"kjƲ]D_rU8x9"nܖJ}XhGP7Ȳ 9$t,<͛:/YřpM҇e2c{~& ;mF}cvKL~Xْ4jJGb#6pRbڕLbLx,=5X8^kY>K =&8O YT\wG|; [!m)~9Zb߳ĹS@ 5K Y80ͼ8Xcw*y8!D U"RNjrx(K V̇6 2]yķ/{3eQ)&.">h3*Q¡jD }uahܧ @259)ECh\`Д,UMU>85 h'T!/!)ywH*d,e8uvrdU'3  jLN_J$){XORq?7Lxi хeRpg!~4qդ\ϭ; ʉ*Aʲ5ޡ5ߨY}'Xx5ho4D~,͉q - G#'`p9#',̬WUɔ> .*Ȭ%!; qls$l#UnFabNC~]aV() #谀cy9v{nݥ2-{]toIMKu\#ų3^PѬ eبE2{/%&\!uP~ *snJ({@OaT'vf+T1aכ p ,*~! a*x:% &.=4\<fVSi~-E c^|x~'e~7rထ9~CVg˴cK"viga|LӸM Z:TDl\fJHxC-܏"QUIAB8z$co+tj⢱#7!J_zkMo'%E[|p\uqg*Cac_ %us/<0<ҕF-Bx 1TYq(nHdm) $#tMi+sQ\ů`2Eoߛ;ʅcZW$G;Ww$ /aÂ0?|-+σZ9!$ѫJh*.|  KwS 8XI1!͆S̈='-n@EݩKd6S}8vu֙|?;W!ϼiFf%-鞃9 tָݑc)t;sl|}Ce G biꍗ'Ǻ#V=EAޱj0>Õ`A \xmQ{UUm2o9t>q7AJ/)le;V@kc??F"t(vZvZBEj <nYݭjEwUVS ,"|Clxt H=4-3<j$ot=Cr>Jieb@*iX|__V(qX *o=Aۥ4jZP4Ӈ_ 7HƜɍV (:a7Z,k| pS*I0Rp JD"[-+syJe-}#v}l[h f4ˏ/Jsm[XM^>M ս\ZE,gp润P>:MKC-6KzC\e@/҃aWH'T;S2}^*)N^QaG}7N龽񻲾z$,'Qr.}R`yo>r3y}crєW{Zn.X9_djR} :s!L۱/NdȝUaxiB;RMD;í@06c&l&fUvw)K3({>M^ 7 n$EE+l¨>Wq[Uf3 ~99PjS̵4jTI=&T %5[8*- ؞:ԟЊYæȁ9+-Jb_lIƻGUbԽ]yl>3z 4J +F ӑ2c5I2uTNh eghQJO)PƇ+az~PwA d@„w9Ս|OK nIǰ/(ѻ JGx?,w1i?R]@!;l܊a:S6# D^E!ڪm}WR~<O[9Gҧpte ,<;I.E^%m&RSCvo۽`P[B")l+d V~8)6uRxq:Q_S-[KrrXʵ?a|_j Ws4 m[lPq֒`6"lm QiJ "i|Qy؀@UWg=5O=YO74 SkpBd!{H$7%qɡz*ͮWER}t  m@lr;?kQC3OuBo͏:NJ/.%[E7T*WsXJ*})HK Oo`КJ@8s׭†T"lqJ)wCL>b=_Vy;ET|!<4t>pp L'ɀ&6{̓<-i2ŞjlSQ#6Ű{Byza mC pZU>Yl2 f1gsȈ]̣#jWƟ;z)ɬ> 1n + V8:ٵu_V:rs f+[.O'z6<\iYj{0G &4Z1_˱]GMUך.ȑr6aNHI7J [bIw'Ve&4S@U婜G޻eF[5ҢaT%2 F aw­֩PLx=hPo0i {Lr8-20T %9 UAҠl uYX /.^e{rCަZQgGvQ`i{Ch@B3 nߺZDez )ݺ\ e|,"mb29A`g;`@:qL+pJjD"8b &bX'̮/qKB4}=N}H:R=wxnWIF[Q{5H6kNG+G-ܺ"gK%dQb b{ur\2bt;&AP4^ lZjW K3Mۚ {͊e98wz1$s@\DB"toYcӂo t+QDnc;7?0FH)UH(øo`ߍ lp~8P)@kCNŔVEͦ>`4O[+&K-BY8i.k4Ef:Jis[ M"˥UlҊCߑ~-Bǚ"Rc3دbq3)Qwl#-_w?XР?6D M8ǓTeqp<_@ '߮+凔 _vDK )i"I,1i$Й D*Hs?q7kʝY]|+ᕥvT$`W!# j3 67"g\AGAQ6$U;#V>VL{۰5~]>$] 6"yو|CY`zgt Sʈʕj[ظhcA̣*A!ҏ{u!s񪱗,fMC4; }2Huv1<ңˈ ɋD&K됆2IoCIL4al <2] }:Ҁ;H3Y! yg9at%]Rxd69 ˤ[IYGImn~FvH # Mؐ&e.;}n6x.҇(\e"@x{sA^8|elТ 22'(}s7 !$v:J%->Bxwn/sڭ8:PT'W=-t= ^)08tQ+Bb|.h IxJSf[A[DwdGM#Cx㾯N奷OO31IHKh=Q.uszVZkizx)&ּAܯse܏!1OEF&%¬Km=Ø4jkO.~EBC`Kfx|2)VfWFb\}^Gz~{$GҔNd&фpplܺorȨ:a`cNbJ;&KgTj1~]@z0̛LsU)jFa&:<eصϞa싄 4?P.!ZuϬǃBy{\iΤ)R$}m)vXArp;-Jt7!/͒gP(.OוO(X[.\_{d3f ' &<ɞLI΢j.DbR/xCPΣDaqSDY$nRiҁL馀*p@9ƭIvϛ-ppMtq[-${:ޠ75)]kn `P9@xQ$h_[6];>9Xh?\X{Y"䩧 5^i 0ӌ̘OP.Q.N,(p͈u:=jc,7Q_c =#qd&h `漳G45=Shhg3Fv?ۿ!9b},'4>aOP=TS]Nlf2ɸsBk#K (y"[m^&zƪ2E%G)bgKk⭔9Bk*_TzRuk\tXVTЌvP*x$b K \;W%Jy$4"c#{8]!³ sF\úfTo67}H,f%4$#D^Ϯ. sk*@rȣfW-KD2h[N0S 5m!ẞɞǭu'st+/つ4XN@,dB7j;}~'蓲Z$yrAB} :d{|4A&¡T9E1Zq8\-v*2锥&9H [ iaP}JAӴK aD6>?uyH`a5Z3Y%-{_=@!$~OdjܩfdG'dF O+ȑGdjTȢ~+i tt;ُ qv+91uclmfFD3q5Fڢ $P.(9v K}Kҭd^(q[]py ܼ$~Bp=Gޑqyp-t$IHӠ%;E9;C*Zq9'84Je8V_O)Eڂ Kchc AjVǕ7T37hLlݣOӃM > BNamUuAjGZ*cbѿEI6፭smsxf(3c5reQ E vQ{7" ja-ץ6*>3$>.{NkNDxV'@٢+r/ΟX*ùP9z))4P?Yy@4>5fPbn>J4&7vh @1aɬ>Q] jy}×,Lh>Qd |%KG_&z6<:!w5_*uOWTF6KLH' "yBL}.na^bQ8d/@(D_ p9],^tdGgLo ÈQ,V6`^&=y@8>)xĉ)7ۨAPo;ӋRiqFGVFf98%NƊ3$KWxP`A/]tX)-¸lgîˍ+vMI+BS6xk;y>E7{g7EK'vb[e ܹ?*I07kf|hi؜۵N]*{סO \T#;q"U8 efs*$n72+ڜ ;; HΌPl9k%zG_ 5+Qb%C[EI4S8?Ed-]#z 92hfFi[̨x?{BMY=-manc` 1f#;[!yBZc> kmv ~/J;nrntO7bR0?G>2\7 8cD+Yɧ+e~9 ~Cr`+Ʉ:Ȩ//`T>ohE;i'A$k;I(xTa!B-KI cƅ&Q{"__,t'-Yf&>~Vh&5NNhIm`Z^ڟVoұdai*ĵ Zm>ˡl0IU "^#p e ${}An-4F8Pvc[y)KY鍝LJnA7Ғ#r <0bc[Bim&jHGb0g%.{$p.U#ln *{"KyPj:#eY7QZ~#mS4R D4cP U;}&M}?~!_wu&*q~u\g*&q,o%0GKKQZ"Y0Ynđ1Z^/];\ fE佶_{:8~\;Q o!kfo8(Ѓ])2Jc@N[V'"xMm' TkY$7rnxA^>ɜ҈˗)S>\w->C(a^ǪO24 */;m}L;X8V>CVXhfy=̜p#uk{ 5%YYd#g)S}tuh9o.,aܤi&O^T09t& m0I6@0Tɗ]9 fߊEiLXXԢ\n u1\l@p-n^*i.Sfxf-v1֯z)Hh&|5edWb;\.7{x9r4U7+3WfsnQi^6,ո_y|601K0E.$ר@U1Q~!{i:*SV슞ʐiT\{gW paW)O>. 1CIߵc*,MܞD{J18aI/pdʸs~ך3 ߫tlv'W 6'BV?=8@3@Q%_4IR~H{o.E!huW'0._2HZ}OW@|׫LdzkvKF&ލT;*+Kv4(M K+}O1#E5%}eEIoug7/0P!ca[FM۟l{נGYv28v"=kzuGW_kA]#YgXzO|C4;<'gR3iӰߛ:5@b@ {C|:udU2Axl wvt+P6+B3R!l [lNi5cA0 M'}61L0K &ͺhť (JKf xaҽjxX:v* 2~^t5i]O\W@F6tCv5.!|{$f$|8;a؂XjHEYMhFA% 9Ek+6ɈGz 3lxӕ~Fi 4)`ĥBhৣ]"ںM#w?ܷbmzjz$Y|Nj>_"#Z @$wMgt֊*Z'XW/kX=D ߨ -Z1.>Hd[VB<ô_"mbͰVb񥒡0t1A٦&>$D5yoo5|fN;[##!)W?ɞڂArT,os@ZؽZkEGƃ>ǂg=f7F-}p-߁5ljpa+GAqbg[|-\4Ok{PTqt[Xc"#UR~yoƠ:aX.+u Qz o7V'q>A:ly'醩]Q1ukvNO>kPc$=IJ.=kLݚy6LʧtŊA,n '24S*>* SL%-M@:a=Sk$s%u V|24֧(v:<_ KSd-$-lO6ƣESq}~px9?g' Z6Z߬Cq/V94}f7I`Hn m2;U}n A g![ f :Dx$ìvMY陈[~HT & -y'8J0Vu ˔K.F~ 0zh;z4l1:v(b^.n/;|p$JxDC*yW.0 V\NY5z{\^YИ$0W81X}8Nn¯xX eTeރ ~_-)Y1m(S Ոq.\ks$!iu t'&Ӳ[@KB+`}61_Uߘ+U. /cه:-5xqHh h`PECC ׻J SYFo8m~.ѰyբWW$T%huwh?;*ZA4@މ^l=NHE/B\]"8?E2V!(,2%_:zK 5ȴeʃK E 8l[՘Qo{yEMDPyosNfh4i=~Yq`^[Ke *6fЭ#܏hs_g=~izy)S¸%Q_';%vzá\p]qET 1!lW7{)y.O :„@;S-|$>Gu5C 66=Xb[WdHc\3d:F: J eT VC(dDݥ & yK*O|кP7vnϻQ?/"gãWVykA,`CS2)⁨ ̂9bh1t=j_ FohJHd.;)!TOVՉS'3Ht#r1RVa;?cͫJO!EJ9i(cmY&wOun[_&+R eEJyo2)|2 )Ñ0O݄d|-"iͬ6R~kꉴȫ+4ki+]^UX54ho&7?oẗ́B_'=h cR>zǑi KUov"{yaNյ!^7U;B6c3\UϔÇc?2eoY1oPW K#؟u?4:GsB{eR.}Wa ty\+bF~4?W4G0iF{$lӶꈰ g#faS4ϐw f,R錯@e*EdѨ#3tkkr#H|LE{ȃ} *vxh$`|ܪ3o2!)K0(טKﯳDl AzIbc R8A1{0i;:10,A{c*7[:ĽG;^%S9G 0_A`զPmqY4vHJ%ٝɦɎqK=6%Ꞝ0 "_;-K 6,'Gp߱a.o)zLq@0şIأ@R: ^pzDIujɹۯ/ЌLu^. w d^XN\C|U4;F4uˇb;hɤ9Sc.䣓O sl;4RdaQ5cV`zLl \̫V7Tk.g}) ö_$la~d<]醰Sx*_ q2 lCDAp'٫]r qɺrG H.5\oot|XvlK&ԭ~];/go8]C.RF˜@B @huzcӖԓgR)`U-. W `z؛dUayFK$(eYEH͸N%0o(YDT*&յ[qx[2S ݈ͧ,/$8\իmS~8ߴ0:7`t䎣=ȆT-rR |y+خj i-'D;qװx `nt"[H>Yu]Vȳ̽9L(\;zdfv6= V|d}6eə:&$ V7‘21͘^s _}ŶϯGVۓ-ɬk3iVA+|Olcxzũ0Q-|#'Uh!D2I*5}"|Vda(M3N!j?x'eԄѸd>H@6`Ht%ؕ4.ɡ>Nb֢W1%G\W.ZVW'nO@& G4fA4Ԛ3fhboKTј| 9ߓ̡}P6_#]O$J8]%;R62QRSA ƪy-ם,gH:c5PHK(`)5.3>F>N LWA*ATiG,҃:$~6 7xMݨg෋辴T9'fHf>%RDbDhrYBveM`Cb 667('%zi_A딂MMey"Vu⚐3~A(XHq"ߢ-:w$1wX; *d9Z}n*'>Xif ZGR[ST3,"rvBe RH>Z–-hnm)BF(nnzb%qSE^:6pk U D?\?rjeLu5'qT4躯J5 nF6W_AGIH<;ɝCY\{PS4c7KMJ@@+⡷9Bބ~5bOb9^Ah>^_™5U|\G 54{[.jכLJm3sgmCU59c39,t{ZG` $L@iQ]iC՛p_؟&ĝ|rTa*(])nFɉՏېl7)vjGvrW 1 TZEDb#_I+O4퟼N ֫QsH®W D RwEU|ĬE]PoL괹B[W8C8Irܛ8cIqaU;$~V`@}(_rFrF+=]('Ku&v. 2Ng ?'lO0b+śPzWs N)&6LT/k*Ƅ/]5T}VY鈐8e܅>)CՀwCXpԅ'x#V3@bu_Wh| fk%xW2j`![.XJg+~ܒV А~§y?9|yVWU|$gVÅ__ܯ ht$aѓZgKn+W46O4(rRieG]U~VfgѮF3AP!XYL[(ZFOɍ%#ۭk.3'B˜GpwU{cZ޷BiNpx0n[DHU rl:eHZMvTnM=mp'r;\{3Kok;i VYxt=uH:4)*"hs6ԽCĖ_(M~4kFl%dYC: AirV|XB%Z~m67(kŝ7k)*xdHJ?or2*߭^dj4) 3I(smC2_ƚ=<#؈n.~@v1aHsji,ݖ׿,yjeb@1<|Ho>F%_at\ʩ|^0ȃ@.3 ?nlE+@OXM!QPIg)ɋgrgI6CO Yêޘ4` SF^&$8"t8U ^ima}nJUMeix3^+d1lP275ͭ@>A=bO(N g믎Dx܏ݶ<Ӳ-/% 73S~E 'X>݆=Us`äz>c VgtJOr0{G+ Op!_`^rF)䫃"b[Ϸn5`# f2k2 vA^KL"Be dc?V&Ko9) 42c'IlqHW3dۤkUw+q@Hp]qx:KqJ Q;' cAdJz?(vXj5_@z `@t!@"-Uo2/CuVȠ{2h@ŇpJP_G ׎Vw>"%e!x!WZAҸ>{X(vybs1VaHABzt*: {M{w{Ϟ`x5%OL_Z"5)'Rˣ.}L<z߂Έl6O6lNVqu(nƳj7_3 _VMŢhJ+ksdá5WdKto\<I4-@ FDj_8/Zĕf-!yԢzO'a%(setsV*o3(Ly{:(ŷx ˹Aާ#9m[5]@QVx~StoK< y\Q*l[tm 4X7yZLZ?˶Gx˹b;LD"!:$K~OPTr%AVֻLRA*㞁p°#9eZAa~+X m3M kIk#e }qeΗv痟{@BӘ /YʆlgQ]|\NOǩ͕]TL-R-ˇG#0dF/qБ2<(wZpOl3^fFz\0v,' ެY-gF ?``S OQZH\ ,rWHECşM-ZB!ҏT{.ont͚b3xq` hQ)|]Wg4JZ%<n[UP˖n&]Bpi?[ 6x#.!tIp'S@AUHzĦc/8pH|fv]^HGZƌ ]Žp*u{HK^Tɟ `8bm@܃xJ˿s 2qzzj H|af22䫀RvO!e}[xY#/8-t  MEMb@ZNj~IV"MOλUjcd=GD|B_Ì2Z )`T.{215h4?#SKЄm#0O.3j|6ӊr='tz=Lģzw7[T]` UǓF^THfwcˁG\٤vJM0 "#f~svڂ"j\E^&& 'ŲA/>2ӺyuXǀ8̷{@x+P9}\2D|-] ܊[NWl:O:KŢ[Oj1#qGV2 ye{W>/gjeq܀ao*Xw"Sx4 l8gvŃ; N ED߄b|M&7`G Y~OxkS{ h ʥܴ3GC|4֧ٕV=l :l?^HV'3iۇ:zF)rQf{h?;.N:لVD^fe ڽW\:14Q$S%*N^%5¾>P"I;%4R3xG;e ew<]hIF{nqϓdw+V2{hҝ^B1E(5%ގzR 0ZY-7ȩ8iΣN_}tɯZ/>mf+; /B-#: ֥SZLpQ'q4iRhN4=hxjM? 6Isܾ4Brb:A.*$~ιb [feAw ,VSI H^~X'K|1o?g)lGbʹFO;}@㐒jx^HSY51Rs_/egyFتGIUtғn~^k\mR?DZ{C)վg6x#xߣꋶf _V7 >ʏ((;}$شôqm.y(-D.I.+9Nf䷦'. m&=|.ǥh]$r*ب-v0yi3,#$$U>ZOWo6ē\]Af8i pLǼ!% !ɥ;%RP]ぞ 81>e=os \$]X#e .+>|՜LeA+;don}1.'',X z""kV0 32(*/ ^F뛖o%gMcqTP2UWV=6<{y@z>EN~m{p)<ޠólIJi@c|CB÷)Թw"M&R `fpp90RӉQo0ju@Ep\O*蘕mQ],*a`G+N.{FBb'`t$თu‹"%_J\lc@¶ʲvmA^6狛rks슅Gj?Fa(-t;UC-  u\\pr%k@Z 6zG׿ F=ۥ>̳:hQիbĔju-Xc{L|JF@NJl9 p@9(%0JL x8N3N'GX{aX,)]@tmsCLQ"`AD<(ssLj&_x{l}GBЉ]Mx#__IM8bNMj]9.cԭaiq^둟\N 7:ab$]h4GF2?8;!!_:kBJf˂}o @đbj[ U\<ʵNWBW/L.@V/8UR[5 w=hQ7L-(ѱquKmJ v7{#K*V+|9ZN+ٱsFKn f6#ِ͎Mk^Eqj a~t-)R"Z4oE$=7|fe TtLVh_A/$1qM\V0yCF *PÕOiW{5Ge a,Z,<|)E|wJ' ځ Vof5FM_-}bfK0^Uk{J 3a Yyzd-'-Zȼ AHe02]g8Mͪ9-?2Tz{ XO]E6 n!pit?DvbG^ _ :Ic+nLn|AN<zZr?:j" ^c>/4jj ii ԣ4j~ J'| ODži2FpZF/Xh u歋VjX4Ѭ ;KOr\RA47̆CV!mnGz?{R+2LD;Z?4ҿU1"\2F隧޿5`#:n2jVꙬҍR"es??n4,ymnψ q]մHGhC=pm(ש{py2]I3~@UOh-GMl߰s^d֦c$*1xv &[ *:}ak{Ty0BhvS'Z,̂DJ"f}ņ=\!9J?5 xdJȽpA"{'L>)>Uy@g.l "&m]HC1<F+7 D+۾$:fLh=86] sD{q>7Ǩ"̘G7mŒt Y95ruͷRB?/!S ` l\ӥ71/YFc'pW&᫼#1ɷV䤿ϠX90+N;z#+On0G_b;*aI*Cچ5M) !0#qr?bKl۟͢]|fFU#i5Nld)媖-yT2ߧ(Ԥ.7HZz GQ{.k XR˫S˳C °`rT |q9VRt=L`N9cb?@_}f '>g^/ 㔟eG @%Ư0+u2fM֜>h.J ~iևOϊ Tj@C{q&J\3ܕ߅يS]0EMQ h7/] ,:J>Pޤ{tzS-ELoOha:"2I9Y)mN ne9g zvA$w%M  E+?mCA:-rAޛ`|A.srDbOdr( 8wwCJs4DG#IM^.|:+JYlvk`સGXR%^}_i ^!g8KVi肑v`hbz*u8Zq^͗,7dmǜDf/#I3hN&qQ3|}\T6H' hP/EgvYhdfVkWV:敒 }2)+kxבvR:LsVj%.G'aP$;\Bfk(O1¤kLŃɵwZ]W<ݒjYPC .⩹pG$z+LF<=^4҃rV.QvB(v2$}4!@mKW&n"Lr- 9R(P(Ciru .]٢y&@oZ^ePIyK&zV(}5a$>)CWXcTիmN 99Pb>568!52_qAbFTl7ng;Rc :ydJw KzrhO+̇ *nhQhbYxP/@-7O]"LŦxg&up/]}&G{фD;k=y(]]n^ǹJ)'$xx+ӏnyjWSdJsZsshs ??Et {)LTTڼ:Mmd N>"qi\]wԑRiBXܩxn["EQ^aZJ+qqx(פ)h-0XMWOv$c2#xjX0hM%kN9 Ad/32JA%z X9ę|pX%v8iW Vu Tm+ʦaӄ ?Ÿqycf! o(I73AGf6hm|  ;/(?xw6T#9Aҥ D\C)@%&ίv58Vi`i5mؕ!lelDHAHwHԫ{;Ge L$hqH>} g^3yOKCNu f_0NUk ipbқ?Ht-F4tmTDqY&)x]7?k ⛬vdb}ƭW6K*Fijx)4?okr^E6o{u9N qЙfeUS&;7`wGŜ15$.R:|\t:ijsSAzEN)U-hA>cn ^vBaݙ6p*)zJ2H@$S| bû+,w}RG0er(S^D'C{xt3Xa$_tUm X_ۗ̈́Iջ %a>H=Q/={ ܲ}Lo"Mb|Ve m$Ǭ? ?n Fg|ͦ}8v-tc 'R`lrnwO!x15Mt F9Gb7ٕaF<{ME._!(t4S;"`g67!E(%םS("˭ $g,4Rh^H?&|^آjW<x{8yP(>% wne|J}؀w3\{%Ln9%ҕ~^} H2c{OQ`bx9@eQw\Ī}eqrnݾ@\ຍaH|e ydx~]H!6TO OwtJcD;LG3˓&\.&\§6Xtv_i҅la 3{yf;Ayr1uU~ճoq؃qWc ` ;/Uc Jk~4C4W^Ă @hn;achK,ls~)4DySLiײַk> 'Fro- M萾[4P$܅G5*aQNjj# {I׀9~OghUOMsޡ!U`wBf\/λvtQC5w~{{1~O¢tf(틴jpŸ͒3t+_x&h[',RPhJ_Vҋ~+>4M /CPASHU1ڴaDCў )pzڶ$7 WN. A7^u ]DaeR蝙~4(qBYY>zR䈺##Td N% CEBTsny ΔXVM'zK*GOymSF "OkNL~DNf셌uQAkcw Ts<0u q/{ _pB1 p۠ˬ]Kq ҍ4㐴zI8Lk/-r VVB"EK"E6tO! /@{G0,чsJ'Sj'>>3:Ҵ[bQ`jkt p+-@Jq@[A业h.w± @텇աvqCmJMpP'lQ25ě [ĊH~õA5*Y7-DSJQ@)>}H}"Bʠq1m˯FDRҬ19(X,U]nK¹fJ}.75e ?[Ջam{/j-r$6{ݬTQn1+F:ˆa #(\ي))GU"K!94kUEL=Wc f`ҲW6O/1Z?S,91v"^`dAٙ85" (pEԯi!qgoh?[j=Ă;WG\8V0RQ% OH z9sm5Et o lԳD $&5ơ[r@+OD eZrkP8Uг˚o^Mi+D3Dsg\c#`]u͗/Xx ~͙b"sNrƵ{;ZQ"H,͙  dSF##+Vuw F'I.K){LTb^O$_pCJYOSfϟU¾~|z6h.6c=n׎6 OKїQ/WNyǗxϒ/3aVw&Wsɽ#^Lw\>RB[ؠ=4hz<ݗ'}Sġ|PCM#^٩%ld |4`2bjl?G'mnsL17"[$|d]m2p4P=W ھZ2qOj>l8f9G6'Zm51KU6_FyY7>V=H]@Em$Nb8X/ xB.v)rgySǂ*5m =o'|Xr-20Lv:0u>T(J\SylةTWpx'KZ>Ӷ_&^P]agvt}0];$ B}Zt, .Nh(k΍ dUwma. 'eT1+ &/Z?r&jDʙbAC(t# ύ?lj ǜW̳;v<_Q-ף'j/_y m_"~&=#=zQ!s䍥9ge<)ڄζW)n B ;AHh!X{ECPwIG99E[;bexkS=de`/c?ސ@u!Y_)]} 9yߓ4X؋ W}slEo{X-!yǾzQ!OJ_ezsK:RK v _#4x97>*'- S3YjIKA=Ijr ~l#fF/LLmyƀy,p-h B8\U=y 9dU1ب6(60Ɍ upM>&'π~`xgYȏnUt4'NAo>G}e=EK*4â0$;8Θ)k06_'q0'= .3k4`.]Ov Pďi\I+B#H]9tHF6Qѷ7//1y>e8>\mra# d+@&}ΰ;P3u]̬ц"k( r2O)A.:r(yh:;^(gACfW[Л([NifSkc_SA mаZhdQj XOl͋LlIdQ3hÍ4?͓+M,"`,r'kŸ~Ԍ$ w| 8 iKYfC~_8m/836*\DAt;XNEqzS 9ED|+LT%t2zINw9pLatm6u,Y'Ƶҕ҄Z hZ̉Nɡز GӕBT+RwvNө0f!(?vழJcrlWuW3|B@1w8< 8N^dp1j0F!#p~ K /` Ӛ7KWjͣJ$.V`0Ӵ*}Ə{wƝn'gkvͮ,0LyUE2w㽁~*>$ Rz\k y\sMQ >'mEaPh+6ܫFG%Э\r~]BSA +걐UUp;U?NHzYz1vO(("YU<;P،֪ S!"W5{0FH2&@L? h$- h[2%#(|1tmlmڤ*^li kx?SGvs!y6bRp#щ, g u<ɋ`ʜ)f1`OJoD}dOO^ yB/m-lکC7CQ}&y--K5-K$%ReV]A f\TxGR5qrGd]D1gv 7 VO˲r( =j/zACK`܍,"N"EoUce TdH}c1XRg7ķA}x7MYW)NX*+ Rz S77UӀ ?2qK?Qk, .,u $k_((j :\R6nQ'sզK;'?P`HJ\JKa~jGВěʵFw%V>pXa~bRD"3q6 ?&HcĒ`x9cʍ4IEW*brJejW)6-Hx_ Rk zeC?GXޣ4 H7 ܛX{([}Y,pb)kMz6P'C=Ɓ.IxJVLP4Ί bV}ȟh#wԐ?m) {/capИ?-o췤(Uo+5BչU?z wSw;9$2 ˍ%xx^ JpAS s`Jy6=o.Qf񬅋0WL3-!.J(oK$Yc~Bl/@4BEZ8aKj蠧g]j+W|%LQ%/P8(|3[xZ%\e/͏;T1aN*]LYt9-kQFB 9N~Sb;r >A?5ª$  9u=C OcPoL/C25Ooҧ]h!R!#$6A/;V-xC\*XDZMt}crg}4I.B .\ 8B w7U`▁ʁ3d oRd$U8*VclଟjְDmc%+97dAnɏnb# `ƍ ,آ=׊鱯nyMz|>>RDv%&QZ5Pשz !8/=-eu?Okp?{,"<#2EV< LCt7?|mJMm>S3 tӿDr~E!w߱c@^{b?iδu'siM>HJ.Lso #W,jF8W"RȏArX+zL@vZD^xjzsJJJ ER.z]p8VELyFDJkӨȽ]&7^R_PZlJ77[xtFH9QjZ0ܜ[=ir:eǚWfDYsh"OqEnE,;F1)W-eꋚFc"SA3p:oh6k@1))&+l1h:@h5:wӕ`B^kӯt2q@oUlR|ǍFߵپD>vxI՜z Vؓ;YBaB3Cq6Hg('Ѓə[ {Pk=q@kB @!,5CYtA^=B Z/6Z_71\e)|8ۜpE23u}#=XpsNTkoݡ,KKa7>3j-Ku0w;X7<:ƞ^y䳑x1]T"5Ӗ=Bʀˌ}| ϡCh,"HTy@w7[,_YW {S<~)MT0L/#_BT96|u6 Qܨ70&6k oI..PLjS>S[{Aҩ|u(/›H; Mc1iIf0twȉ?ͬYsz{xI%W|\u1n?tXu]J+5x&2^ނd`\lNڒ\DY` ⽟Dղxll*6@_(n;W:r* w#ēWj S{_$$V̅B[/<ߨ+kzEFk&4#?oG3)Fq*_%r!<*QY!9, ls]DC4ÄF -e! .~(ǵlkP׎֙Dž|=~v'z>o!* B|iEK#A-!K`C%C0V{ eVy 6:p4Z©>3v>suZY״]zϦ]ܙ i良^ܺXST/p/ byiDe. AB͸JPJPhIHr1i;` wr&;)Ltj*Ү$ݖ\X.7Xw9S!}nj< ~iT[^ E 轹BVu8S8Oo xrks6sC+..`+D, Zx)0'v̉!yh˧/4qh֛鵻V[eH%_1RzCy.DH]Ѱ.%zc=MF<޶z łDo.Pq;Ž,4ݼe?aԥ^Yފd_s1!@䳢rF9MG JCzG~{狤H{Q%\w!m3@4ۨ>$LʢxUAvo1tIykj^ʯn5eD HAK+B[ɃZPai*q/%j–G4]=vwAoB0bCVgҼ]n՛u'{o]:yL1˫YK/12Ҙ=5EIK]}"8ĠʆZ_X9#dIv7w_T1l\}Y ;qW0~\&F]`sjtGE!Y8IzeO9]mq ܡ6}~)^96T)51&he3{@eKikzQsHtC=`}tb'bjg$% >[ >(4vz)QM˟riXd! +СFd+]˱8}$VY<8uK6CVoq/F%쾣so<0DD%~DB?KYn6ʱ!؁([G!HEsEc4c]~h-&`=w {3ٮqǤ l;ڪMՖ@mSDK?!JIܽ:oLkiuęsW\r#F, {BkiU6-N tB[<7C"l;D΁ u K/H"Ӫ$1tm2eIޔ$b/ףB: s=W2+Gf+Pc&^Pl3[ 72ӬտDx9}|hQ. 0$|- ^[^Ǽ%WiT?pKƾ:At+uHʸ,ik1]0/[w jjl;2+dmS(a,c9zL_ipÇu_^Xm>/\|hy֜Bd{#>ALҾ}G65;z4doxuay,/3xm/v JSu-*% ZA ƫ?.\j2ttgGxv1^  ?Ƶ0V<_E5O7qԹ%v!3CtGk ې5~]ÝD]#=o%Jz[KYnCiUڐ*]+j]O `{jIVJrUQEe C]3@6}nzS6r<eaR:޳{i,u,N $LP&ZJD_Z|{+ώH.t "Rs mS ن>rlۧS݉R/k4hJ|f W' m3h9m\$7 d>_ ;V u9SNK"FԾ[-JJ6|: [UQko 0oB"(/%+lF`jlCfIWWR Ixpl ~TI)ECFy{*um= Pj:w~ʥ7w.$f~?_E7g޹0*=X&'; hFjR p=@T4:~H11W1Y_5 _D42IȮO`=yd#`-j\Hnm$( OŴ|DǗcx\ib'}51 )L>f=s?sȡt|2wejJ{\]6d['o 2t-QpORb#2hv۶ZFZ>ï QILb/Ȣ /QBS$2z|st Xeo/.k2O-[qBt!~!J=DrЇW~[)3 apڬ7lM$81[^\(h$FA!)YTd։B>|E*-+ߺMNaIhJh۱#SJZi(x)4ep DH= )sg{-ծ|﷡ u15\\u߾'2et> 4ъ 3̦J ΓK[J+1$RhaU|%'6*t&;vg6Ox{+/s,qj(B)ϡdu{-egi/+{&`Peo.)nWA k9{k M .%7rkI^b7Q^L_!Y8hDpd8ڥ A56&Pj_; ^^ցm˃^@N1[S@eG Uùc4*0"\ܷ]6!p2Ip RWB.R"CwdJL=.k% c[#jE :jx{W*uqdtXYl6I9f;!"m׽wS#4Ԙe**?0~AY~N@\)X iLg@-hD%s"J;֡G yXiHh%TUc?Z*n#؏2U6avGCEQHJIAvٸH;pr ,7ё$&m$cGf:&N&jLɆ`@SAUv mA>uvY:v$/Bg>KNITB31M4{e>YH` SHsq K-^ \Њ9,E"6Lk*,Z$ipꋓM6&`Tˆ75PNS!X@ȹ{2٩;|&r?p!Lq6Nk0 \39kwi4 $i{J$ֳj:7S~E3*ֲ͎.>+\*GAS "&٤0mv*y}݈qwgZ6rB#j($xfퟀB F vһFwJli+DA7V`˔LPB(CT Z+r~Ed5nM> BJ+wU{*.4s?5 Q^5)幋i8h\1XY DylvBdno]Z~p1YL~T *x4&8ud,>@T+7v]x TTɮh% #%BsiKq0D:3 V$Mh3Ux\5~tGL~t %w-Zh~qqG"i/ [m13%tA15yFH[Zh;l8N &U"m'FbbDL'Tvƛ{ŀ;hiUTKCG'|Ht=`{ L`._~ۅ Ɠ*[n Xi'/:EAphl9g5JEW0dMP= +/G_HK9"bfЧsni\ңTpIxL 37D&PȂv_p.niՋ}г]y2ãBUE:.3kԴ S:D!lezqXHwua`b4Eiqd>̽ok: bnϡBrf X^rd])#C@^@uLC!K8x?ΒDK"u PnSV9?N4ixmSt^ٲp!*GF0iLjTuj鷴xt#MQZipX1˨Njt s猚zbYB*#&9QQ(qR"(4A5*𐢞rP>;<ҟ@rM)co0fkԎ҄h'KúDo 7Yx x}D挋뭖o*ӨWӪ_: p:˯X{f.^AwWξ\Ÿ'ұ ȊR]0{{ҋ#&vBb6{{|;OϢ}bȕox!` eze.CaG$}ΝPe͛2N yy7AbÚ^FCd9PfxtCL]WZ.{@ _ƤVu&YTrǫv)5ƕ P APL9:!Uz"j3b3(͙s7-PG FyabƤ8=})(:|cAynG.^[06'cxoi \ 5qx9Z*$ԾVn ̔c5VHƎ̏z8Onh`=%2iºVk84N:nbE ˽qz<*ph7̮WZvcMKDp$Tz̮ -@+4a?}\nPhA4U/s8;iq0itm^mW.&_^ԍ@Fc_mkjmWx(^Uӭf9)ۥ3F-q􍁦1%!6E`;Z;:-MAG@{] 40=IF">^eOQ[o5HYW\A|M^vE~/z:7 zü90XwyĐj'Wr:Lr#L/u'M'#M` t[i+)NГ:ql*u(]ܖc/ i=Ab+W\m cDeNoNڷ#6So.)AXH7icVj@=#z lNP74!wnmvI/y^3\ӍoNlML󚙕ІwK1 PXYn{xVC ,t1S1?Ffc#8_̺rby(7FW@p@"a1HR<~Zlcٶ?S @D on^4]R@({9R4rݦ{2%}Ѥ\}KOڡo0_}G"4q選 kU5m˝rԻyQM꿳 9g#HwC2HJO)wuUa\ zfZ_a"0 뮫>Ǻ^Xc;;竩4U{L p;&@]y)@o'E *1 h!.s!7a\i]Ixof6?֒9n57DAj.u!"Ѭ: GqA \SFb0h{ jr1Ns=ÌZ(g Pz "Kq/(NO"Ox?:U:j=Fյg4ur*@=2+M*8j0eHpރ& ^.*nfka4A7爮I7bujSf&ëj-Db &gH"%5A+YovzeaLUiِY wi:><"TmyTYr:PnKJA&?"LMXw vq9h`۬w\#25OQ0Zw߅$Eatڅ'') p+*˸fG4%)V$&bt/QՑTc3@Gw2҈!I,JTu)̐YIw~Ɏ Kf+jx}<UfS3Ħp+_1\UdXWߩM3'&y GqUt(O1}^c+{Ϛ(.]ȯ8+q?(R5]hvm_9Q8@N\P ʈ2)ڵ∇\py'ѿ];p+:B$'JXƑ@b24H1}{Mf>WP^S|n(sGcD̴JC8݋U?I*~~|lFmS{tnKܑCAMNR^fݗȝy!e\ ps~?}Rf=8c#5M|DI!Dx5h]F[2+8QhJ90 o o2>_)ŌCc5c8cWCrySAT:d‚{IaE !1 8l[5 Hcf Q}lƅiao:؛C:߲Zc]:O5rKף- 4 lj}Y9i H<3.ty -004,R^-)$guFԼ#靡U()#;^0 +]]ׯzSi[TZ$L(pTg%{פ%e``>'YҘ3&V%9SzO~% =oQ~0 v+c2PnD$;9XYy&-x6|8L C'W@ XԹH_VrٝMrj>#,[%G"N@#+{l4)p>B<О>-:yX*Afӏ@7Tt\ Qbpn&D&-bJ!|Eh_ i#xE@>jHtīx2kPRUi)7|ցnB-І/zoiKkӀ{'g6`D$y'V5l,:XFl1.Ԃ6T]eX8Ňz|ѩ{\6g \9G֊0CVŶ[Gރ 8arK(D;C ,SYj/m']Ɓ\FRuqg*v#ӱʯ#/-hrO3k^,lJ9g<3"8XdxS|e)Ꮢ1i L"@{~ml@&[oȨ^٨ˣh#rf8 hL'uQO #Atgn1Oj5Bz (0Z{Z =C=gEq pP3^ =!-.rheeE!㆔w~e,҈T۽"m^Ls̋TC٢\:n44\ʞ/ٜs|ܶ(,:TOmtQ҈)ًwuĆƱ|h΢6*e,+/XΟ7(Ի?Y09/VNLRu~%6m80h owF6$8r\!f,6\@N{3ZK/ᣱ|c sXVO#DmNӝq)o3 Ib]vKة# aҐ4]u/trȪu)I(O2bϴ Lb<H UbeNfӿPq+jhLFҿe%9E 8o15-*ٞΈf%ug74R&v.iŖ!!Ltɛ~"t MgebE{xC\SS^㘳ˮ77(5VpCml" M1g:E"_cz0ћFU'Hxͽ\a.ev]\q-)e1T 5lGTӖus&E֭rmGff5Ķ,1U-ٓhr* S䊹3AEgc`$(rHMPCM M*fY 27JTUcQ\pOɱB@ϣ]W!Q'>m==!8_\  j*IۂXtYodZҢM&fk ^!#xuS{.zN܎ۭmu"gï{'a[GN~Ea(|K#`ínv/$϶ YZ