pdns-backend-ldap-4.1.2-lp150.3.13.1<>,M]JП/=„@+Oy*fxVЀgLѰ%a1EjJΊyi1B[108B"~QK㰛/ZB]NLbzx"N"$3ϥDRSjdG3€T=eI >Eu ?[ WhNM6 YQ 9F85 OܾqzR5!?#A>?~j}NGNšu#J9c/%{8sW)cɳ}@e\PAip]t[e X~/>>Q?Qd ' = 6Zsy       9Rt!P![!(8*9H*: *FL+GLDHLXILlXLtYL\L]L^MbM\cNdNeNfNlNuNvNwPxPyP+zQhQxQ|QQCpdns-backend-ldap4.1.2lp150.3.13.1LDAP backend for pdnsThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. This package holds the LDAP backend for pdns.]JПarmbuild24 openSUSE Leap 15.0openSUSEGPL-2.0-onlyhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.powerdns.com/linuxarmv7hl 4%,큤]JГ]JГ]JϬ]JϬ]Jϭ80156ae2a8178af7b476e29204c143b4433dafadb6a801e22f24d598964ae112a5a4de52182a81f5d3b2dd341ed0c70bcc0e9b5d1f7d514474e4971246536b4b8ff3bf3f9096115b164f10835aff799914b65f4d651e9fa84f0bbbefde316db994d36c21e56b2096d83db548c399f287966ff082fada65f9a5d1bb72fcd51cf27fe750340c57c409da4c0fcc84dea166452bea4f11a2c1ecd5292336f7b3b27drootrootrootrootrootrootrootrootrootrootpdns-4.1.2-lp150.3.13.1.src.rpmlibldapbackend.sopdns-backend-ldappdns-backend-ldap(armv7hl-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@    ld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libc.so.6libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.16)libc.so.6(GLIBC_2.4)libcrypto.so.1.1libcrypto.so.1.1(OPENSSL_1_1_0)libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap_r-2.4.so.2libpthread.so.0libpthread.so.0(GLIBC_2.4)libstdc++.so.6libstdc++.so.6(CXXABI_1.3)libstdc++.so.6(CXXABI_1.3.1)libstdc++.so.6(CXXABI_1.3.9)libstdc++.so.6(CXXABI_ARM_1.3.3)libstdc++.so.6(GLIBCXX_3.4)libstdc++.so.6(GLIBCXX_3.4.11)libstdc++.so.6(GLIBCXX_3.4.14)libstdc++.so.6(GLIBCXX_3.4.15)libstdc++.so.6(GLIBCXX_3.4.20)libstdc++.so.6(GLIBCXX_3.4.21)libstdc++.so.6(GLIBCXX_3.4.9)pdnsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.1.23.0.4-14.6.0-14.0-15.2-14.14.1]A\[@ZZZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@Adam Majer Adam Majer adam.majer@suse.dekbabioch@suse.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.de- CVE-2019-10162.patch: fixes a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (bsc#1138582, CVE-2019-10162) - CVE-2019-10163.patch: fixes a denial of service of slave server when an authorized master server sends large number of NOTIFY messages (bsc#1138582, CVE-2019-10163) - CVE-2019-10203.patch: update postgresql schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (bsc#1142810, CVE-2019-10203) To fix the issue, run the following command against your PostgreSQL pdns database: ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END;- CVE-2019-3871-auth-4.1.6.patch: fixes insufficient validation in HTTP remote backend (bsc#1129734, CVE-2019-3871)- CVE-2018-10851-auth-4.1.4.patch: fixes DoS via crafted zone record (bnc#1114157, CVE-2018-10851) - CVE-2018-14626-auth-4.1.4.patch: fixes an issue allowing a remote user to craft a DNS query that will cause an answer without DNSSEC records to be inserted into the packet cache and be returned to clients asking for DNSSEC records, thus hiding the presence of DNSSEC signatures leading to a potential DoS (bsc#1114169, CVE-2018-14626)- Update to 4.1.2 - Improvements * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias - Bug Fixes * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate - misc * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)- add patch for upstream issue #6228 https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-develarmbuild24 15651841594.1.2-lp150.3.13.14.1.2-lp150.3.13.1zone2ldaplibldapbackend.sodnsdomain2.schemapdns-domaininfo.schemazone2ldap.1.gz/usr/bin//usr/lib/pdns//usr/share/doc/packages/pdns//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10740/openSUSE_Leap_15.0_Update_ports/d41edf56faad09bc988db5b8e79fadb8-pdns.openSUSE_Leap_15.0_Updatedrpmxz5armv7hl-suse-linuxELF 32-bit LSB shared object, ARM, EABI5 version 1 (GNU/Linux), dynamically linked, interpreter /lib, for GNU/Linux 3.2.0, BuildID[sha1]=6f977cecae131bd16b4513ef85b4cb20003724ed, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=c7495966d7ad8e75a4296d9a5bb5434632e0cdc0, strippedASCII textUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R RRRRRRRRRRRRRRRRRRRRRRRPR RRR RRRRRRRR R R RRRR&}^p|utf-8a448ac01446833b377c149799bb18bcb7f65295f2be25dc1c104ad00215eff41? 7zXZ !t/ᰫ]"k%n60E<$#]! L)#!TBЃi2UլVÄ='vl/l('`Foxlřѝ% hNO>XPO! eQ~zn9a%x&N7ñHRԩx_W1lPesoԐTC@J:!YmZ$,eהGIb2ҡ襙~|F {9ZF[A9hf(ה7n2zڠ!`>Չځ1# Zv%AKZ)"Bkބ )~n5}]cPڿjKq%sfh#y~^ g=!"™;jO_@\JC|2ڨB_S`TB_\4"Ţi&SIoxRy3Cy9*/fe\Dh`6rEˀ*#n4aw:䳝^WLĈ1Ɠ+u(BQ.asX7R_7By`ꖭ|Rl&pD9glWBqMD+Di瘬un2VC%@e2 nE cVq0-989?- y.!_6ȿE dV6OٴijȈCP!U:ң ǒeSS$4f?eْ>D +I3 wе#9UR83\#j;@ u[EkbE4G.B~.ҳwNuM "rj+^K +ֱZ*9ԈdGu#)Z.Yq_`9Z'#@ꏩy>%2ê_kw^aW[I-)%S]vis>?Q9GZ߇~ [`DX:G> _-XgCU3[j'PG6<6,E낲~]^S{3Yn+Ïgi_1,k4g!wB&}˸ 0;C"_7>e3@^o<+Yh 5S#B6l'# ǴnTNEΖ}9Ȣ AR:%crѳk:CWF@` YdECS)4ţߕ+ 5p$@ݏ,x*^/:^9;YkSQhnX6L=& ۔|w#2a\%3V֑ױ<^d%.Me>WvRC{nd5PH;͛mzӍBqRG^)@jֈOkt/mMlt%S ʊӐsmgL9L\!5-jxK CkrjbZqq} B!!=\:q8C Z_2:Z땏aŏHż n X \@4Lfy+5Y >0Nz[(yvʂGrd%kFwQ$i__Kg sFY-7d+dRݵ)apF\xwrD YpJ gUu.fZ't;c&؇e`K H[u>̊J#&#h[[~"*]tu*Z}\$WqB&)Aՠf;Ed̻PA޸BR GePS,̲5MX^yRnqes6m$k <.O{C!吧NacMMMlhJh0=~鼽1[ lbݥD JK3Uk?;N-9U'M!z`zYPi_IZ_lz:0>޾=yvٿcۈqU;Sf+S2W, z`xU*4ߑ_+`T2o_C4>K\vZPSJ yD%1u"wu.7j!AC$,/vjv{. ێVA f/6U S={H@j|#PGp^-kK Zs?TNV%.rFQ\R{E~먘O0S[_$Af2 q/Z ð͕j bSti5VH1S9p8Y%(cF=fd/jPY=S;aسz,Md@dzw=:4 ^JoeDۘy` nD6;fVQ8ץ;rh'5RR2nIFvԅ{D3QUjX &xMWi] _˨Z}{o²t]U7E7RPȚd.Sw?pp\&Pͤd<lo+L Mas#inȏW@˂ftpHlk2* ϖǝНgm.IJIe 8\",W/<5ZA5to>A ?ъJ J2#9>`kO g,ˇi3e97Zn@4JqWMvJ-ـه@CV?5}ߧoc?: j : ҘmȽJT\mKLr{I uvIWn֭~TyΘ{~#'zcF[H2hOn _4 0],(%QlW23T<\'nPX ;]|:<WtBӺņЇ~d7ÉFR#h67]T+; Íg:_ k%xR [`x)Ć!>S#LyL7<Fh5h@֪#J"Hz[!pyF/zY(Gqչj&A 4Lb.p+#G܋C$y6xόA9|z$άEt_&RRM/6B(]|R>g|5 =g= BOš(VʜLn%QB/2ﺆÀdn|Ȭ@5Sx7="_Kd80x?Ic )(1QYGq4a0PŒjR'Ii8[߁]O ygDFnitO3G.rA[~loz; Hu5rn8Hp{ECb{( 5Ko<[$jȞgm BWLE|%Hn[3޽vX\9ZA[Ss|}c"[DI n9u #Z(nL<$(׬RR9F3~Մ%l!jρacsjSR х, ":U/׵`a7l6H2ݹ5{Wىr38SW(쮵fg{iz~4sA2 :w8]]6G8ϩq`;:q?O=P<h-^pb2<؆f&=,L>سd.fse|tṴii_~Sk^ -jC8#6 01\S8"Kبi*6ip}DL om)᷁1\mPJ\,=|~fK%ͼP7]_Q 8 s<ҖP`@{Q7GPg աnܬĴuO"nFh5ܰ>Bwq Fx)\v_OhHbɓTLY*R(Xե2;[,zEqrC-LJ\UwplMj<}M,f7_sFRҋduׄ#jejf^ެ)Zt^V۔cPbʬLmH4 {=zN{6|B“7m&J;ԃx7شHoE'8 7m_^c"bl0AEVaU)J)xXI {/Թ_v_"}ftYeIk LP%F i\c`Z}K{C5jQ4W#oJ;Ӳ ]9[(;)^߇XD4$Ǭď}y5D+8=XQ]@UUd@%pqq\KA Rmoqe/0)]sߣC~  6}|TkF^}b3ɍ d7CP>z!3͏2@B| T]m[~<{"PCއ8Xxܱ0Gkr=YtбT#6MtK~"c8jf_-䠪m hڶr~(/60@2)pZeCwY-Fq:lR k1dj&ѭjNEs"nPlT /,1D"Yf t"=q>r~SZ! 9dž ~IZA a$oI*x!K1|+¼+8`rlgVOQPu!Sb:-Kv* UPR-?PW?VB.<-v_tk#Jtz!'U1s M^QҔbk%1)gnܚ.-uPә؆IM|{j"QF2P ܨ>T(u3S恫z 'ZAUx ` {Ы 37/uorHȱG"wLO*Ǎ[ip"@y=G w34xڴlׄUfM&9Uϫ[dx(FޮJX @P^ kWVǖ#͍.g̵U1^~xy8rx3`CN|$h*A9kϋt_Md OАDz"sؙ\G;;'kw?& &45wܔ֜ nir#XcfeDt#6'ȆZI~{a-gSd``*Z.nG2!lᰖla&60:nynQ@vwq!DXD (Ш\ Jl0FcQ37r*O c͕w9J(SsũQXLٶ@^ M` kY@R{z~@>eu}_C7,,cH*A\@HS[9 Qg^"K uxݼEɇ  mX1$jCXɜAI>K 3<,~ '+v2XVXZgCװK>6"70̺J̦zG ^ rD+v,HZvPi} pR9h[]0"m H Rպ^`?yu) yCH3:ˮsXl3NzYPf7!|)<8|GWd>iJp_ӭX]pmE9w"%b]v>&C8H\a7q([[5ƽO$vܜ26&ތýjnлI gٯBNk_fm?"b+& 1%p䫬 RϷkQ#Y&%У8y/"غ3r?M^biqL |f3fʰ ,6c5&}k*n3- 6S?hwjxb.9rrIe2Xdv\0X޼ (a[GF$r_wQ$热FV[aǫ&W~ xzI +[>=j+OJ2GobI MMC"4TΩI.#9T1Ӧh~xp^s'/L=9f~Xbޕ$1գUGu `Q뢘*]ȱ95ta 1"ml-WޒǷgy%ӂHE 7 F`:H&O,lRկ#o76~d-p-ۧ)ʩUgicl1xz>Ī@S;OӼz'TK/HH`c$YaQ3TJT-r2%@уj\co6.,#t+[X-W99.^3$bdzKUHdApWYQޭxCRYs (d!aw8} s҆ĖD%;Y]#`GlaQ&&~~tC?$S,坠(]`MTGˬ^zO;ckS.N|Ч)laИͧӓihfq:(R3ְŸ/U OZ`\J=A73m6f o-č)x Ks<7 ~B,I^oe\SZسK%LgTs3vYũFqGflO.]YNA0)xaO-=,#.0Q=#k5+x8ۣA|T Eԅ UT4?{ۺʢ' DuVyd~EG1|R*<̹.>O"?vDfu+Зok-4aQ^m".t3W@FE b4 ye8ެD.NsRO0 yS(Y~Lʽ/V"Q $d?Ӈ:?g-L`K)?,ۊrZ RXX* Xm7h<);xwX>L*bgDxm@}V`UYLC?Bd7%+q?Ed/لV6PT_CT@ґyQoɱ\_ţSrY|}Mp I oUzcjAl-ȳ~7%ܖm,oKj~Lpyq-hra)>[E佯h\⦨}l HǟZ}O>S S;;{J ӳCΨWJOL%e:_J&Aƺ J bfxޙ8(>w)pT+A&C2U%Öݰ^vUTVD>!6-ŘVr V`Bbض4S0[r5K/BKx=!A:>jsΨOnZkW}FMa%1]X0 x @Q:'֟puNx賠D+_ vs1#) _unu#> 8)VͤT>}= @-j;(KvQLM,S U*z#EH*D\g0sU/^Vl|f'JzUQ8S*,Yw7ivV~%x9: C+jU(iDbU&9΍a$w > !q3]#ҧ_\{*k><4ܽdO-{ Ow ̄],5Wu$6d2!a5P~$ ą>H 9&):^h.\J}|1MB8V6QGz٥hPD?ȊW l׍yY3੦L@gc+yzNѨR&!*:#~"(#dtm%vogUHcQǶ)PH᷅`/s4b̙Ġ=S}'}$.7~]|[̳(-/ ])O؀{(} K<ѼށDw҃ODԓ &(dD׈Spt5yC i:OK O!OreUzTCl5^eU&ce,®:īiBԏZ3Yk_It9Aڡ踣b!BSA*<c A=?=e~wĵ3VRTs]_* q uq-ߋׇ>ߪRfyjS-'0a^aDǒF;Ǝm,2owsq^tk%=z\a01]Ic;N43켞MTDc@a3#RE&'Z݂An*;y%EpDtF ¡reP=w6uۑNzJj ec]B53ܓ$ jTRor0s6tIfaX`$hJ#K͡Y(ɘ,F!:kɓ Ym5᫵ o$wb9 r!ЕQyFsdPË{jU_|AIFA)~<-ް,{@kzm,cUU kp\*1EU$#$UʔW Atp  7ίx#sQ?aܲ1^6/,a_#E3c~0^:@e(,hR݈Aׅv*$oǘh+}Fqɾ+,K[ YYTԾz=;\OP$_3l^^D@\,kPC/YS OWto b; hSf z&MLgpbXڽn*TB: 1͏U"`'똲$*Ax.E߭KffP̰ 㭿J&?5Ez)Sa9n*a_])Bacy=CmK3/e!?l(KӀ[m7|OZA8[ ];݆'pSݵPYW=b"֦v5RLҜЂ[g~w}[RBHqtWNYL"ef,m]i6!*^U#J _YAA`ˁˢ0mEJe-}3ZJw{ΰ;I5iJf(jK Afg[ޫ X |NxdjBLl"ʪmMcMl ׇ<Ӏ@Pٷķ~; =򂑎\ݵ>B^ecy/30&U_CugN[s|>RN+)T4h#|kNw?a7FŒLbd׭]#0 Hrk"~pQóߢ.˼SnOqQ |%K4nsJse244^:yY-9<#4` v' OV_s"mDra /)]Tg\m&W: 2 1I ;l+Ӷ2i~ O_CXTehwsKo>0O2ƨ%|넾h աO3 ~7# ajYj+/e k{Xy,$[zmdQuTr0mB,1}QkI1-Zl=嘔.}\+P  vqT_}d &hLܚ{rKL4MwJO ?xbYCܑ&9|O#^5DzIlpIW׃}JnBoĠQòʠ{Pj8dС oE iy(y *TE.K/wv61''=(e̸IdrDˡԞ7k歨Rq`t!8%?vQgF=n₫U΃SH˄kиn>5*[M}/߲H#Wm%h/]vX0OHGp')щk ªe>7FROx/;?@D('ˍ{XXkFvR\,`# PF!$;xEX4-%7՗EqλG2nRg>G6Z)O)4"c|a[Abr+ݬb>[M̦U*UrDqi&r&`hxE%)[N¨&pc;8lZYT4Z6*sti>ZrQS%_1ER78{y)z`vLY͢2 :KJwn0 P'w Dхoo抑4nW2NwzNA '-g᦮yX֧.!ꂽ2Sfj%Wr }f޿t% s[[?Hi9]C.t${%rVAς_űE ?!a{=B8{sKz9. 00g??!} &#l`Iml1\ϓp7iK<+ hX潥0<&ҍ:}wuI[>:{&A0[`Ti.[h@#LʶQ٥\ѭygKI`6ҒeԚ(RNȣbLz)3JEl昦vi4}u^YoV[T EmӥL1˼a{ bG%cje ZL7Ubz0d":? H bi/1%{=7,SExZPK 2 ׍uʒcmk#o*_Yǿ 1L?\)DQu] :@whRBr{G ꊵxͬk,=^3{G}+TOa'4B{iלó"6f\=G0:t2|^mXA^f'؂)>EcvzSx^⃕ĴM;lX}廪1SyP! >Xۢ*B5x*Vݿ8.! /zh1Kvل~_>9S9gY˸L2A0t͓QqҰ=jjZ2u+7hLgA%z:"QvJ< T4eD"P jvWEG_Cń5' ;. n|^|?"JLw8rJ%s\e5aAS쭧 9{XrnUwM1IJgCD0j)g LSDX.x@)#¢L\1~QP)U"w}/mo?2?1qk÷_Fy\|#wl~HCK/Ҭ:.\yj**m"x+UJzҹs4ҹʜ1Ȣ*̟pD(߾]W[_̱Q 5Wgtn89ZhҀ ЋS-E.&.|5 Y#EٚށoF\XRN0C D3dT[^*"W }R[•{k>]wD} tPXr20G: jp*O9oad^T<'ᱴ3DY6/)Nj3H.ڥ΀KM&73^C\Ty_JTL++M^,ȞY`w| TCY𵏔}NDㅜ,n,|W_ ͰRꆟ]64f iG GS|䑁ؓ%qԞLq -ώz`ʟ򯧴Ƿ-bi| OpB^;Cj>-0*0% yE{(-J~QMsayZ g.'6Z0p6 }-͇S31T]]%8 |?c~+u[.Qw )VIq<)j@k/}@aSw2D19\ka x_@E \FejZ_?,ލNx>Y9E(5#0oyXy#$- LYJ4P*`KIRobO_Om3*NҦ04@u;R:=+7_Ø 2kn)]K.$!DPoaaNǧٍ́! bcpN㸧FT&@U¸гMvqsGYpiJ,2T =Wf"bۣ&m؀;@:S n^[=V:0q$rt\}3Ru`#Ǘ:fѝ82B5yb$'(;Ȁ鄨T3=hz>\ +5S: #FՇ EE8 xB Ԋ&"!!$埉kO)o^!iclWAAvM0"}kyPsS0D_;W1i=^\U\l@2ciWIbp=&{>TI5*4"7šk ͜U]w&WJ(7=>) BR!GT%}i:źl\Xp94 G yFv^%TŗIk#O}&vB *R)tR+ 6LR _k47˒]f ّ?4_Xr15KXvzZyB~̵a C)EH;!5܃^FtLS C±G H-M\f ([H,&Lș|r܃lGӽxu3t(^]&XR(LN=jO6$žJ1H'XxKCY~+FT 9+}f7%Dx3xapb`(LO9r~݊[(dtcx[][ 2D$l_N4_px3 ?Spw| Kh oӆ 1PPNHb3%/sfBOWD&`zvR tO: ZX2ooxv T#)?wl劃8QD ;^ AwI^FQQp_ )JuqDiv]{!c ӂhRI(}Z!:JoK>B'ְC9DʫZAA;6, \D!ʁ)$CMB}g+G]VۭAi^VܐZ ƪj dNG2"$"7mQ/VWkvg$vݗvQjT'. XuO z.TUZ% )<|vtESKalkDGV<9.(R=8t!)<ڢOQ,CDbPRd ƒqlڻ(}(s80#Ȭ |FV2yn{X6cXO@ [(BT#%Vfϟ,YavrzTO ~5( uWgAKMdÝY]f7e;B]U;{2J)4|bTFU-;@E*/&v73G-uqcLMQ$r? lkSb)çE8kBZ%D&R\*i%\,BGw pb6RJ.};)QNGJR/ʜhji8+BچV'JCnj= gx_['.9́m(% o D1B ZR)4lzh?[ľȡNDĞ1ylD (ڱFkg9iq8T]禱3sa.֎K.DqJv*& _MĄN {QgKgb!sNb/P.tAF*gJ_`e '{ʲ=}k6al[8+Oi֩{n^=?Q;ٛ?%*(*,u4g5)n Vh0n?d @˜=,wgO <1^0Iͬ8ݪM&נvBlDa#p`MMBA E̟W@ ;B&P[x-76+c |wU!>u´V8](H=\^}^$K"7KwsYQZ2|Je,֨H[wx [27{vhP~3S!awr{ Ҳg4A͈KSH<)2&ZɼcLd&X]`O1Kkl?ܩp-%zf͟`!] weFt[2<10#!LzhMqҲ/Z ; l׆2a 9tPi^ TTȬQ(X} _nal3Hm&iPLAFS3\XH5RF1vn3(25ja vBoN6}$Rξw% >Ut:"쫳mه:])XW oܩ!I+]|y5؍_!POrKq;4Ӳ盱@?xmS5v 7jɝF{xl.ZU.I,.^с{%۳,01Mbnԗ댶vJan6unH9!<=-6$ˉR򖦄LFcp).=!V%~Q/!#DP{L3R+dLvjUJ#j8hezC{)ӟ)` Z1/b=𘌭IgD#g#WÈI3뵖sľB]ʔY?:~y,r{~I'7}"/^^OMFnT1ū%dKº?nJIĻѕ(c)gZx,ـzfH> C{KT lҫN_Q հJNKWmYOTZؿC-W("}(DF^):O٤Еҵ.ß^/mgV9@_s4oSgQ?!~8w>d2{V6o.Ep/hk/Y4OYb }β/[m7ЀkG b$|o(\>>܋orFNv}iP+\lo,t /%సߐ/?:r2vJˠPv}eSB ,lV \I#7RaeGݑ$uz/FsL^.gfp:A22y >H#1c| \sy9i K E9f0%,SH{;~@ $*KZv/WT,ET2m}ํK\h )p(r,a,F\\1.Ia ywCf7aFU_A)kJVPvIV5tXiO lzUm054"FcrA}Kce]AaX_KW3KR#O2|FޓR Hag4M9]gRiOœVNoR%W-a(h\$R@jD*"T=;6&,_޲l72JӨ~\P;7 zoa G 7l;'M>HijD3VdKy9(\1(9 a9T 4&STKH jw~"赪Eb* C(aBe"~ QK;/GI:Q btAT3[:AK:gn*AސctW:fX+^qw#Z$:4I lWwI O\:8] Qȴû5] ^D0M9 }dsœL잸7gǘi'rKNo(iدߖ%Y'-X->oxtn?m"lhBeɓCH))^%~uy];Jg j`m+z~sBEB -`獆|&G]7NV7%\bnx9.T\2mtg6Dg)kwU{XQa~@r$F[IaVW/wG?x-גG.<<-KvJie[ВVC@Oacj_mŕ>U;9G`ҽ+<9(u둚Y@>e~PނbGS2Էb 2'ւ'ыȲ܊t9Z4XAVuD]ՃǕ]X'4ڰZ聞R])ԝ;*zrXO\?=k¿%+fL:Ks=k1{;u zOMG,VzEtdI[o鳄1',e;.Z0yF#{K7?Euj /Yu7 '*y!~a77CU1ՌTg6''Rr5$t#qMR|Kt&xLv e7o$' q\c$=*)vޣpy`vaiW-_sb'fj5o6 X_vP}-Y,Rke12f*.Sh_& u[[ I#Wla¡b m.W i6Ghf%>?PϺr|q3k&IkF8&i^p9#Q4$" Ӱƭ"wC'pWSg‰@txXVW!?0L2N"L^6nBډ(/kYZL|o~"(s"c#ؓP'GקRAлfg}Kj]Vmx8}-S<&bF44`p P%6;G'Tfȗ`9B )msW2sNi?arUB{(?ӪJ$K;ƀOQ xL8S8hYEK[ gwUaor;au7TX `md0X&ic3GJϯ!Jy!aRQ+Pz} Bnj%d(u6R? iOxgfb!֚F.H?|*&xuR (VbcIZ0эGo9< g-LqEк76=;hPn:J}?)L% ;atx"p#;6Pg慟%BS10ڱ\24a1NU(G2{n5E&i9#;pCAQWVDoW=gi~;йϡk$93_l)U 4fr=ρfNcZLJ2JL|E{B)I%?k1-<lo|vFRhW-әcLtT%3{-fWtXG39Ր}}՝v4tCyEZ.=_ܤ\Ɇ/ńnN) oY+em"1Feלw}Ҁs>&bY=(ϕP\ۇ^&ǯX1TXX,\hW#[ԩӸJU\Юr-Cʶ q! |pp ӃqϤ d>elۿI"J䵮xFw @ l ;+UH`fgW4dDnˑXX /:.$@OvntM yof\J|[rѡRhifـm_a(ҍFki(+5Qg!"\vZo$Ob{$/*+WRAb'= exӴ\S l. (XfŕBDVMZ+H^ cXq kIEM1s/Q7Jvph8T4xOD{g ߅KkײWD=;@*|{Й"Ӧ*jI y=23!ṫ5j X0޲B+RM69j,,yoA >H/x]{ˇ ALFW@  ᧑%;CcfܹmV/X f"OEvd,SL&W55+ QxLQk\{s+0l۝ b$_Gci!zq>2 VyKV]{*Ϫ4|A:%!œQK ϓNZ#(і]=2(^bX&iϚ!QR٠Z2qu R8O.붐 O*#ۧ}BA`ڈ%4Gzr,H%G9Lm#U"J؝O[3T֪Z YM9x-K|p-5(F1+ DqR%T/SR\u/@.e~Y˖s(kO#`6UrUcmt}7p]G[J^ CVaW|ߤspmbW`zԥۡpnGqޯdRZV>.2;V nj ww)6Yr?S͍H:Mj4pq_wEV`_k:GECgF;dޢNVGSho2zI)/,Xϫ4zTӃHY%kug9oN~|]9ȞɬP-ѯM"s4M,2r.tT0wzGDu0t<+Ef>FY;.@9P3:^wȦ(KfM[mSxYGD#Ҿ Z-H@ȣ9ǹ&xk|">,kAKD,U7BM?B̚.Osn]@n_).M1T-& ]NйC2~Y+o4޿oa ?zvcHp8SlZ D8]'a,0{5rk=w6cc~NW{)ĘDn  AaEm7'.;Lgk,gXhp> XX6I3OeNs/ t#;Ĉu?+gN+ڃ Tƾ%SFV)4 @x[=}K؊Odek>$pF';Cv`xX lt[rel<|33HUEIƌ8!_>B2ncv3"98Ja$h :*!X“ įGz:H-?Cǯ QHq"yw&fPvY/C0Tҕ O] wk7xoزZV-` ,6(=yD@pn f5+N ,$܊}8 "Z3e>64̓58Mۧ[+lI{ɱS B wV3 SS!0Ol_Խz79<.&j&mE|Q,\҈[* |r1큄+,K56tfnjFcP1#&5R\`S¥VzULLZ6blW5@Ըda+hOߗ g(,ބH 7U^PA *iPM'aK Jlљϼ'6]mue=Ay=c䭔=70Z. [5Beߧ}˰4rꐡ鑋iucc<5SsA4>omkv+]dX0~6{fl9`f;zθTK>: 5c~oC7]F.wt\i wMמ!n{<MCYTF F`ihm$kbEL]5)rLۻ}PONkU?R\(xhݛ뾸[>;}rR>}&7!Rs/?RMk+_&Yۨ70 CA܂}LWDN89h{vgY(xu~v~*[-;LΆ?fݬmOcc btyBɢnx?Jã/1&Aercn LJv[Ar6tt񬏚n<3@mHo.eeKL$5O~"`0,RBq1- HΧHEK iL;1uu>yhϞQDRʈ7IC>f-is_6nĻڱ,Jm- Wa3[Ϋs+tV'Q!6ʥY__<.3+= 0HBdÄi7 ҍ6`^;m/BL !xXUw#hOiaD-\$Q̏bWh6ֶHj] &784(fu\̒F u :kM_r| Fm/`cdϦyxL,4ץ3Ǯ586ok73m%|mՕ{2@=㨟X))e1?<PDM 50}>PL&Xn ֝|@&{7.:6t LT`<+z$ӯyV 5xE>5A9rd`KB8%ɖP\4@ѕ4?3 /f.Re(K[Y/&+:mMJ@ѝP8ZA K1KE))džUJ3">%T[p۸u dtwG 3VXxMgtpVo[[7F ϵ$*fD(ãz g)1Hy ѤQ@UP Qsf|vP/?RvH0opmk\~F̷jgZX҉$Scg Zn_I*_ 8fOysU:oGHOS59Xol3ìҸGMZ<%8ֳ4qfXEg؈c+5bqT8rqoJI:RELMJU$ y⥎x~AܶBX~;yƛgV{"K0i.^apP9N>kE(Ql=_hK'/"s-j7:`Tm3H6ڭ(^bqIvHPSWd̹vi엮o[ڸ٣8rp\H|e٪:|kZ[HY)C"SX-:x$H\ɸW*bҀ&k?U*zf$ĘBxh\F.%zRž5.gSV3 9:*Po°$Zieݙ]ݙ 5v`J[~clU#Yg|hbA0xP);Ҫ=a_1D0MY6-eJT0Wfc  !ni4c!9ྩ?oh%[簙b&~xImil$~ʇv:iRBL0Mޤ)庵AsrAETP\L`0&_ Г3 \¹沼85sr0ă'}E$E7z;3uxYͩW_Vui%JA0eӒ9"4}'*rӹ1q}C$>H\FT- .lGuCf#WT<'~yrAe<HGQG1@`-xS9ig?'L{ ^{iː8ACГ<2 )ݡ:ABO]Qx 4 |X/7ݪ6"t{W\J"?b{g;:U.1'Miat}NW f.mvJ[01+gI]qVXBIX ^9W)t_[Sx i-@HT`r܏51<8Rڐ ,TP},tbS>S;#~IL`rhåN`.&:du,Dn+@g we/LOp"E&qCc_1/ec[ފ/$G# '4A#KB耲'xm[ŚFWpZ$jϭ5~L!!+l\LuuUE5vuXNU 45620߭Vh 8z]AԼ[ ^tYj4z5LJCs!B<\?t2T1g-?YwAr;d:رE5g3uWuJQ{>#t ƿ%LB2+5j;Ǘ8xU}ig`aʎe~-hqѳOIq,5T!Hޢ6,I.[0Y Ĭg@M~\f@D3|Xy 7{jE&3ڤ PUNmn}ʩ~yuY\aƝf+uֶҙ>$a5tśuNG~Wuzv7bldER=t2)*O1W2x̿9o 9.½C,?~-TӺc4I[[tRy8䛵Or5L9דvZw!?:7DY,n}KT,{\T\/YBԧ6TS%4O`G/.@VeZfdTq,U<:omE]k5 )(|0 M$Ӫ0zgQ<*w/X ?u\;^ m6LrNmSD]I1iekXBڎ6ހZS(s[f6th:Ӟ\2#mb)%-< brnS {"l"FW |3R%{nk>=Z]{+2q< `WSB:D1Qn:!7{cئQ22Vth#Ce]0 oyqTBܣ߂lQ̘\S&bRjV>h%neR$^(t軡d={ ܕ:[-_l2>QiG95dy>k3-#BYT6`rz J˭f%8fВ*k.c"8L$dBr,Tca`rrp75h]ki ;]WPuֹ~Yg͌31shj$0k?D~YY7wdoZ#@=Uvxj58LĖB Yy|0őaFEniakb:ΙR*Jft=.wy$,)eD.Cs0MܳNXtdGZШgq%ǰ5ќ֬Uv2K3ͼ wTmo=HK Mz}:T}l@woQ.7'`f $`H0/@Lԇ)8f䷇'xBǺl*zyV~V滠~!1|RxɋU6ձA a<%`*ߒk\oYͽOyR3͝x3qcܽ,c!hiI'wp%?.Y km9') v>G z8Y+ %X?,Qs)ky v+ˇ"C% ,6$T=f"*`HB?&Kwm*&&3|s.(cqqj\Վ9+ \Y~4@'ӛ69 ':=l*|~ %bbsIOUZCF~d.B1êWq͠XD6m,+LR[ʕMa/p h*Ș8'p96\0rl=W*٠mB@&,1xf׻pBxt.H.}>WDzܚ<•5{JLh&[p*uP},h)@z57'Q=m!ƲHⴾ^)cG/t"lTYT Eai/^y ‘+PX& _TA% ΐ/DIBkb)[A3[L^%p UtLQXoeYmeĢb 5&| J!A"-]!1h6ǚ8~hon۪c#0E%d0Zq$Vw,"sgoz^zT|>AmPN`cy>O=+odl0gy#Q{%4 tQSwK9Ęaw2p Fu ÿ¶ %cƝ_p%u-e|tXPTL")rk*dk*w&ּ#ZL^_S7?R#Y-9vfd 2I=kǥOZm sL5үLmymU\(=8yi j/T=_ޕ~+ u2i)A8KPoO; Ŕ70wy+ }Q/br2䇯p:怙5(m-s겕K^\;U$ɡ1؟d)Y'#F?TM*l ̌w+U N2T'q yica3?ƑlAu_If<~ MԷn xXbzzF},Kb'j5L abՌWIkH.ի#TZ }p4W"F͠f:&{c CT:F}6D=hgXr<}Q:yLe[6TjGT*un5ګ  1*Tfy(iOfū]o0K\cix$`~8 d +Yc`C/q7Ξ)K{ꇇa#{J{*Lgx0Y\utYnb YPh<gW Ib$˿f]#4|ݵ&ѹR&2ޡe-&mĺBߍO5*C6í"9Єw ? ^$Yt }CwޕщZSE8|֒esިLShtV,=9n> <(ą'f:zN {-J"hn0' ѥOU퐄iu 68~0 <|퍋fJ9De}5HQQd?]B)Kt6^yX4nY A=@6K:ECH}.GZ*4tCq:Y?cW=OpTRX3?@|ɴ~>ySlA="+ N@}78R+6X:}y9ֻAC_6ْeV3րV4>;260[|kJ"٬8+*rSs[s3 8T']>8V:g$ PB\j~a(b9~)df jAm-9Zd7\JmZ{($_6ܩm*[k`ebMi2-ى5j&ͨdJ */1r q >"A .H4?hnNA o"yb.VXީ#uYm>IAon$H=;"O#4HgrYDÔem"wF%D,D⧦jq`{Xt#{L/-A@$U ܊>Z=Mq ^ ?0ֆ&U3dmGwD %?Ībr+V/PdaHxp~G턨0ѷSqonXZ^ñڕ oOi.͆#~%4 S8Ū9 lKLjHXHaڐn{`u;{KhM-W &XMFblUmw(o+,KBc]*#sDUO֭w9=R T[WV9eRL`Ƃh9H?'>a?߅z[ZICk|{;=)81gmqUqzTP)0E'b/;ȈP)g(8DŽ5gֽBxTdŲj**, „_\%ɗN=>e/o'7I MLId!_{ei6[ }Q_##MuJ^fH=E%YϞL4 GhX؞~q9Q;杖9\ӎhaIFyDm9W]kе8bmPa ʗix'Rw޺ʘQj 5=ωAbi%Ow_tGn.G%TǯREHլ`签sMoqK4+Jcꛞ{LOE}{ 4/N)%zTnV0,GB i;IK)-]֞=E|#&M_NjjV൜;]?$ۡκ0g,C-g _I1Z(f#|`O59&copR| gvt^_QqSg;zxB[Ӈ!DUݲߖ'2m|%cm"%mC_z@^ܞ赁$u+%>?~.j|pܒ2䥅} B>84R6}N`Y~(»)"nA0 m ]vSwPJD5GF rn.m[7xƖ{4)J Q*|K'D1E6.Mkp_VzieJ&SqlJ˹m@󗪧aD1Ԑu v(d.w3U!_'#4 VmJ\`{Pw-65UrHKvY7Mpݣ7mwfܹkC+[D?g\ýM^/a[@ vhqW,1#z"s=~&ЌDfaٵ5aY_K8<7l}~)=u vuޟc^Ϭ4oь0FhtN\g3%6ڤ|y$aF+(+vEZqRjQ%]3\5w@ͺST Е2z)ףdݺ>%=4Ѧԫ1n& }_PC1%"z2 o4 GK6Zr+:XEMm~k AP$p!gPwde:[Y'=i7?CO~A>>Sn vd}"wǟݢXXH5!!^(%;H"1H*|"yFc(S qP-/5E[{4\y3 -c^{DADr+BW6,vA/%aH Ӽ!̧IB7AI8S,~Q)ҋVL,~.9S`B?]!uT,UoUrHЃpYV=lho8X&qf"VY $D|f"쉩sIԮ=#$G#8R~1JZ=i/Bg{uAFWr^X@VlFDFI沝#;Eh !i.ŀ=7yo5N M*#i&_cJHqus'adž1otBh6^\By:̀TU 8xOC?w@? يL,l%%*d^%ȮANiy֑0%RekoL25Seϕ#ensH0ZFK= s2FϨd+aenr4<@To7 bqjԿו& y>?Q亀i9m g}Sfپ8;+rQ`ɔ3_Y6W4sڿszmrB-Kve̩2>;E8@@MusHăjf&<:b9s ?tt_П`6f먿̄[~7^2n3q8mUxm:{ vq ,)j";(n _=MsZm9YxBw$MjKqp:2LȻwҺ>B<'YK?sdim4s&\Ӵm/ K>xK6d~i)TY95*獍-4jaTGa (n@y)\JTf'`X VU i(gSkcTltõW 13ܔ(v4 nH՘ obAנ#P=kz+~?$^%[Yc"΋!O3: 2[BS+?d`yQ#R!ywRD4H_p ]v 80p@FN+=N&ꚼ~Š3Ta#-9 ^m!L:g6{ZpCjbyZvo&{  B%^<:vJK{Z"}VߢQ,$]k?4G%A-϶CZ3,D.΄S8`e $fݙ|]S M}}`nh| ]Tx+"a׍Jk4[)OʙeH@n!~"#1XR: πƄx^i= ؊Csw#l?T$'%c<IbzEF/df~ egc(tj esӻֿUhNFȸ3ݗVŷDs˟_􆣂I˽22#X wUNx~[7ГנJ<-^ji^QY$1U1쒂} }*QI#V7mYY2aloPG9/lHhU(fy,0z[,kxz_4PNkfBuڱ o#9nmKz/\fr9J ՂUj7~_V΅<;7;/hzzر8"Jmcs:,o[!q">N ,o!nCRnsiBqá2*E 4 (D^߭05=&): 2RZ؇do+wSd/un7͛䅅$1z:]/<,n9[(jy6ן~qjR/$ Oj~'j19&* -6}S~o<@Y*- :vtDgv ӠP d:વ_1Ն`CP 6Y+'1ѩEڍuixǂ)wi4v\ލ.  J[),1 sYиvHa8/3 rD=NKѦ(a۾z,N6&ḛmT&:!n]˂eT!ip;:/H?j{eR=VY>N*&_ΣR#q@(X;ꪖQؚHM֫TȪY.0sdD2+ :AOXA0p[DdM𾿺XؐN&! ڡPk&2}s4޺ɬ0W=O獮C:fTzTDBgd`_c+\,@H-03}kPp7s#i: .aQjCoѭk XE ~޳D5/=x?QnʲGZTP`5'P_G5]d*p~L[ܠP:M⇑ʱZ82""4pLD1BfLvRcH,қ4#Oٳ=n8MNtqhGg$v'`/MQKLJ -6I|oݛF֞?D*poN&qܗ$"K95$y:0W%=D6gSmd޾oQ?-M!* x-7WhWWOTOTBoE.Ǜ9\\'FVrZ@.d;Y,ghu>L19Mtrb&m#*py+UGA\R6Ye Ӆl*- ?uvH' B$:G8ptgxNA>YҮh^SYl;9:K%7z|4S0ZKI4 +N"n_\tS㿸kBj̓g5oS8uAPn^^V'^ƯU:3HHɎ4%Ax>`*|q]O Dªm#(En:_8eYѮev=/-!ӫNJőo ,/zYE"F{  |mJR PBVPNOe*> @ܵBzm.󈦳y8W9m__~iK">cTP燸B{)+ hq4[=ND$ɱ;hvFxd$>QgԌc\A m۬}#\!s RѼƣ sSϸ*Ƨ#0*`?:/v= ؏VP(Wcv*7_Ko nhcv~Ѱj\gLk4FZ6B/љ$2cpr~?WV~٨.ƜeCk󵾷~:c&h.6q*~h*<`ۧ/:l3AI^ }4ypჺ;vGǿڙe qG3p+!9[|6=AWgr37wNzE"& ksJrvw%*qYI`E ('yrX6anUWZ䧷wŜ{a2L A&5Zuo=ŖdY?ӕ&  lc~RfsWh 9֝v6' V2b~YZy9#vn^/X%-ZX|u=#àe}rDŊcevdIuH^sXuZ190VL[5r;kT);?b"f&T$KLv3W2ХlޘH@#P8 ^ .O4Ὤao1l3KA+#!Ϝ=hD;n! XBD 'GE:OH:]ԓB%Hݱvr+Fb'U;ҽEXh=̱0`|4[VPB_NqXL&HV8>7㙞r Q ˘mN{=rSlA$Cz,.b$S(׫Rtjj*ܷr5F DAlGz 6=|5H`wJQ{:k 5d(f%&!Fm\d[QX{xpCVDů%S%B48(i$I[ &3q&W_br4h;Kؗ#>6O`Z l5 YpF;Gc'\RuPٙ^UcQ .]lp0ѱݩ)0p_w*=[74a*9 ezĪ_l"Ĵ\f.E&O&ZaEepP]9et1e(,l%~1T/dQ0Re= u ]JvE:X\zA(0B4NIpL(hη$5,t<_w\ѳi7mٯaMD={nIgCm)T>xԃ"u6b""8ē{0z95-3P3ot7߻E,\(R_vDRC^=cʡCqXΙS ?O31=d Cy= Y*UMtZ~9'ȡY{qaؼ܌ĤpY6 [ <64#;=K IqVCau]wN~}?8ݙ_sodM{ ;| ޒ~!?i u)^#HY~@AD>a$mm&!:=aqػ ˄!B-(1@rBtZCr_|v^;8,ɵ!^\ES43FXp%W δYJX|?CײڿWf1pDkj@jDPR& +a (ηX2k)?d;"[Bjr;۵ǁY}"K#\Cc4 tGhȎPh5")ٛF'*Į x@tŖ}be^[>JW^×߅xJ'e „j/qez`K~í/QLd)W %%g:l2`-U=ΞL}Be!L[m@7:=\-QG`\ ABP0M ,j cErxm9@٘-kHވu>HFCĿ[SDI5Ywkda/"Vҡ:DJyB+_%{DlN,̯{;4ڃLӛD ^ #s8Y]StT3kBqE2TdWBTdHzT&j"! ː@?JBLD sNWLvUd⎟ (DGֶ{k3mBQhc-K}Aa [JtE—ͮܗܧV/Oe8DL(#ǿ!|C"ry0yNoReRvZIw_3Ww:y-$hgƹb4~α"ͲK#&$޿jvpW՚w79fSHŬI&EJihH#U =c*_TUhb`j(? cC^ٵC$rZ{lp/#~Qz|e=Q/tPjHt2 3{5@ 2YM95@)7+0ϛFg,'1o&Ǎ3NQM+IK΋fV`4~Ɇ;AB Uuv tknbz3!ZUgrY? B H~0Mnnxvъd~I?v'h{W"+"cP8/5Oa[jՠ&=l!`uPQwɨw_{u@J '};.@P'b>2c>䞡}GRscZ1MjWԔ%liMڠ"ҕТJ^fU*a(^E6f 2O!o/z^Mjej\)UmQǤZǀw#zv'*c+ ^Ꮍ] ,B)ˮ`4:xn!uPɔ57?@/scxyXP], h%}jTm@3m<[o@,{ nXetϐ  @ ="7[>㢣}{9^4jxo;h:60voBѤn zs9DѦbG rP4jւeǼf$2 c21qQ+7-è<'s{ż#93,`Lً<(BMv0Gm}ͅ}wō6qL'[6|PK{Qf1)y:=-iH :H/G6`^N5 \)_mI@:(VKz!$(7z4*-4s*G7G^zWQk?"=H°fEydgʗZ\T?]~\!ua\RTEMZ`.J0)07|!oڥNëaϪ[lO'ۺ=ޭlO94 G*faxUPXp@Eݡ8d@;/p W_0]mr_!s6Cg `(0LjJ*Կ=+ {[^Zݴ UW`uhCq0Mqy|0_~#a8ȯy[>b,t5 ,zhr .m}y x{Bv[fnDz,b=%ȢKNwȱ4uPzB\@QF -jߨڄfĖҼwa7a7d\ULA ٟLgm5"Ǩ ~[nj\Jue$ay/B'$ }E6o ,`x5ӢhOSĸ隬&]|u{R)@(O46 Ķ頪@GjGHMB&*ɐLPG>U:䛶.\5ԟoPY#񙩿)6*G%i[V~+PNN]>>g=1[ K9_TCsH+In37tL*J`]01n:D UIȘA*]KE%)`!$Av} B^m N;a w(~x_J2?{sz.18̥ wbH r|[ F0 Oi2a F `ݏS|kZ!$IH\#ֵVŐ  )Ah4#[#Bǫ40a|XL3brxCgպ dswQˮ x>` uηɄvSʆ{t)xo'Xo i5KUDNE?cʑ  4s5jzMW {&r±_ߘ8Zӛ33n-GIAu'z28NO k1S_)j uDĂE x]:JH&mނxSL"7'LNb*#ِ grEI<̬-z1Cx&ϺD~v!!4}0`6A-$n;HtZH-ߙJu(Ͼ9~` TVѩ'qJ?TɹӖ/)^Ǎ%x d'|t"-u!b×g=vծV&'2 v%w7 zn:xF$qO"GSeg' /l2{1XR\YQS3P˄VO{i^\NSᓍN4:W{>0L**#:;!ZhF.eA+ O:|ɳ=3U'6]5|%hts?&#a[bҬn*'[),RyŻM.A^-E$ u <ɧ]=nP] h1>ͧD L+H e.Rda ;=Օ r" Orv$)2jaLP4Iޡb's99 s^DC@[-ŞC 6)UJj!cM!hOpކE]Yǘ(m*&u 3$.jEAM7=y]`O$=}>^bK5 I{XTy^@AԔ'AȬ6,.Q8>uLussgxczX]&ܽ4\6c*ʳ<2to)|F&`?P%GZIҷk rp#Yf& kd? `2F7>6_͝r!W>6RqvrO}-igE3B@]OXꔼx ݒ,^fOLJ6E9 sς]ތ:`vWlvYͤҡhRl]oH'H|oquv]ƴ %Xss0^H"YjdO(m 1Y龉eЩpU3N5k4jF͆0ha9>8\WJ5Bh$T 0ڷ5YIPBTK46#IvQUrNZϷ&bMQЈลXK{r9k ]xIFLg9Ec qE?_?fLT6{hp>) 2JuaaJdZz|OָDk7Q]ScmĪBDiUcI,F,πim]gsb{nAKĭ€/3gitnf,Ryi󮚦mΤJͫ.BZp WPX/LQb,6A?? IT^E؄YcYe-sv/Lya?6| ¥ !P?}&ן,D 㳩㭴lD_wA[MHDU[nX 15?4\~=|Q9!è˿:tP)Jxʑ9lvu yc!VIAOuI\5A*魜K?y`2zN|nC*~x$c WH *D3I 8! w%"C\t9A[`UCz9SX;T>Aw&3C&sY60ה:U[Pֿ' TxRc&Nc 9kͧ6fgRv 39W3ew$qYYv'T#^D1\ 24iY~YŪK |ɖ6yٙllJ%L+!|CVK2}'PM/92}nv}uO|^a C͕çOMnhlT<#ȴ߳o[E>CYDrU=%]*:gp/%aAf \[e#{`gW#*oDx}YC A߱t7cKSnT{+Y6Ou+_;_Ya3bJWc')$ctaYKF~c@fex7<HB|hOC1E㻷Ur0_18/u%1=5{. lLIxj+Tx,y\c^Â=J-y蕀h՛Ru`#B#%UBf_dc{ZM)f:Y]դ$< T9ilP#R-jIZ;"y[:UH.C/dQ'۹NvO"\''?Y`(_֟'PE+H3=y R+S.ƸLd;љ bx GTe&)|!nIGۣ%j<+^S{p'+@TF&6Em3$%1{N}zM;}@FP dF&Md4.`'꾩C̑uۡf+D=,fb7t>nh50fGʿ҉_\=n1%*©1"nIڛ?&v,ܕaZ_ <6ntv#WrKQH鹐uGgRyk?Q0Xo]h2௞6zFcs#a{ @׭@JYA1˩ﱺ1=V?`YrmSθF `\&qw79=(qV,Al (%q/:WbP:ww@:hSdKK_ה%s 0;7Tv_t| ^Q*V"Pg^f l-bC|'r)5!"Θ׺SD%of 5*`nڸbhMՉE_|`",[z] IUwو2:}=†-fɏL[Q 4<)drO+$WHGj+|K{ 2}mck&.Ob 'I { U<8;V;=oIGb1>u`N= ¶syc=\l!:)TAkه- Lj&9g8 ;{21dBHJ 1<]3}бtN' $LirɄjj8qL[ 4>ƍ=nQ$2eJ @8c8G,m -گ"GN˨"V1]ž{ ث[ Bp|WQkGrzQ !wFCE|JjOÉĔF,NFEϽenNf0UXl%hMʁJ FO|e)۬EJg3H`Dg5gxA="$so`@DZa`$C TW *,zI֔ SazǸw4^:%?ɱrOCQWmzpd/;xoit a5Y[UJ>g$_^U_%6 ,s wn4I0:cw4Tɉb ҘUOzܚSPW`*d)?)1%_g2c949xE ᱇w̘f}]4HDz@rZ)1P;Ҹ`<}4\a xXrȠ\z,;G2<IEjpC}N`p{$ 8-5 ]IeݼZJXWe0>fքfwy()ᯀ\gV^,}|(%y0OC\dv>.vlER|cUN@0˗D,Ծ|q,n)a~$]t rC 읺T ٳ@KO8c@{͛o"[2 _ }&$&&1gof$F,ݠۉoP/%\k@݈ Q[%s:sw3@&AM/ ``m_AHU[-4~tC%YGJQ6#Ka܎R#JAf8Pf屐j|! yEG~a̍zAY~l.H ^+ T-֎kT$vD 6HGC!!0+a9.,v=Əd[j{j G/O,<ɮ#ĩa:qh!SpHû:RjH.#??&_S[vgd[ q 5~+.%F/awONc1fd-n[8i#V/yzG6K=W&}`Ҽ=pk]eA3!\+mu?*VN1Y3E{:oIu&T:x-1+o#.Nh -ą<'ȑ)g1QOWH=oӀxJ'* O*yr$,- {x xncf R4>BipAL+L*,K2`5ܔV? {MWa~jB=T'$4ś7,[iBf9ߩ dyT{[8>]XjlAi/} ~ _ՌŠQlJz))%)+-J1-+1;䉝SQu6c/8Dc+mP%= "EAC"P(ЭJ!a"S/lNh" HI! z`MotR(QF~81kJ"Rd.4Ьބ͔9{L}7bb3~;ݞ]=ɡrޘP$mo̳jh:h)r 1FfE))芺oMlΕ;%jf?AF .KQs[׸YE]g% (&I `=(dYb̝ ,,>yZJ|o :v3B(&u ΁\3rOt}z҄/&(yX6hG;aڊ> )p"6erv3pC̛^gWB0/_T$,)خu ?!? e^舓NvfRw9W ' Ugwz77߽Y>fsvc+'y x={*M>Џ&ڙں8LpLܣJS1_tk/g|za{6oVSz犉rYB)v46Ak9eif ~wf; KD8?ef30۟륗vzkUӆi#Y2f4cnL/졾D=ʄ% am, O@R.$}lƚ3b3"hjMB^@Lg {UȦ ޛ]I7qtoL7y{W?F2HA-fBD̈́Ea>T%yLMĽHRjY} ɌiI19LY^~b3tɜKo-؃uOIn79HrӤ_֍mJf:^-59!1G͇BAt_Cg2)+d_&y ~e gpbÏ,d8,4?3Hbln V| .w߰y?75`BvWk[bąw9b<Թr,Cm@PV́ViL!^dR7+KQj1*оS GՎyƪQ l]نjhؾ_vஞ.*"gj[H'q?# 5)=I{@OHN[bb%;e?46M0cP aU&Sr~G_u5aqU!dȠ/=B$@چysʶп1R 7 GՋZna6(e9MkeE+GBS/_nXN:  h:/Ai $bwK@i/N4x ťhpCx9xNo*OX# LC){n*c|b RQT;<^ػa@)'Tf5?.2[dZ!Q $ xv dDj-+2МZSp-sAxomXs(9:mTl\}§ E!-}_ۑsp!QHǀ@ :w?w|u^Ux?Ok&?_.HҶKIsaeO- '*QJN% U!DxLEZ\H4EZ1Ö]HH6;WfBЛ5e+hݼʳ'(+`B8,GQ\݅ 4>CY^.AI:=uqv|vD#vBj?ccjp̩lŸ/PDŽ"iJ3'kn 0摵,ӝS޶$IFNmח1eN}gT)So0nXkοYT\AT'`g\hL}3} ̈gЫ 7|t݄,4Piȁ!81eCCDʓKAC x8-Čecw-!ū 8 t4Lꔸ<@{Hm5?Qߣ-{:p]"a*3ʙI|^$>+2=qV7ל5ziVh"{=)~CސHIf \%%!*">NPK<`/LKB75vq،&}lyQl`r(_9&2-zr hJ8;q{_V$Yׯ֢o@!|N Ap2@hA[kC=7!a;c}#%ڿjnB+Jp+)"8o!LtxK%g肮 !ȶ YZ