bind-utils-9.16.50-150500.8.21.1;>+`,fbp9|<؂Pijpߖ A+EAfޣU>˫Sdw76ol|@T2@QjVgo{YҵK/U9${yD'-T+lkKLGSٰ pe:Yɠ./-߳8$@BñoР y]H3Zeɋ<㉃ .`4sʷ{3ܨ!F0hI@t#\sC5 {x3{h`wLb:#>CI ?Hd  # \hlx|  P`P P P P 0P  PLPPlP77%7(%8%z9'z:1z>@BFGPH PI!`PX!Y!Z"8["H\"hP]#P^(, b(c)d*$e*)f*,l*.u*@Pv+%wAPxBPyD$zHHHHHCbind-utils9.16.50150500.8.21.1Libraries for "bind" and utilities to query and test DNSThis package includes the utilities "host", "dig", and "nslookup" used to test and query the Domain Name System (DNS) and also the libraries rquired for the base "bind" package. The Berkeley Internet Name Domain (BIND) DNS server is found in the package named bind.fbs390zp32HSUSE Linux Enterprise 15SUSE LLC MPL-2.0https://www.suse.com/Productivity/Networking/DNS/Utilitieshttps://www.isc.org/bind/linuxs390xr')HUxX(G#H  WxGXSUPPXPQxPPxpxX(7G  L#K < ]4 (9 PL Bo *%$7dA큤AA$$A큤fRfR?:fCfRK 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-9.16.50.solibdns-9.16.50.solibirs-9.16.50.solibisc-9.16.50.solibisccc-9.16.50.solibisccfg-9.16.50.solibns-9.16.50.soddns-confgenrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootbind-9.16.50-150500.8.21.1.src.rpmbind-develbind-utilsbind-utils(s390-64)bind9-utilsbindutilconfig(bind-utils)dns_utilslibbind9-9.16.50.so()(64bit)libdns-9.16.50.so()(64bit)libirs-9.16.50.so()(64bit)libisc-9.16.50.so()(64bit)libisccc-9.16.50.so()(64bit)libisccfg-9.16.50.so()(64bit)libns-9.16.50.so()(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/sbin/ldconfig/sbin/ldconfig/usr/bin/python3config(bind-utils)ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libbind9-9.16.50.so()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libdns-9.16.50.so()(64bit)libfstrm.so.0()(64bit)libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libidn2.so.0()(64bit)libidn2.so.0(IDN2_0.0.0)(64bit)libirs-9.16.50.so()(64bit)libisc-9.16.50.so()(64bit)libisccc-9.16.50.so()(64bit)libisccfg-9.16.50.so()(64bit)libjson-c.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libmaxminddb.so.0()(64bit)libns-9.16.50.so()(64bit)libprotobuf-c.so.1()(64bit)libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libuv.so.1()(64bit)libuv1libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libz.so.1()(64bit)python3-bindrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)9.16.50-150500.8.21.11.44.29.16.503.0.4-14.6.0-14.0-15.2-14.14.3f>@eYe @dD@ddd@dddGd@cc@cFc\cn9@c*c*c*c@b@ba@b~H@b3"b1@a@aZ@ayan@` @`N@``_#_:_ _d@_`_R,@_H_;_+_^)@^W@^@^I^v^t@^t@^Q^Nt^@]@]X](v@\\U@[#@[?Y[,[[{@[{@[ZnZ@ZZZz@Zg#Z'Z[@Z@ZfZ@Z@Z@Z@Z@Z ,@Z Z @YzYm@Yh@YZ1YV=@Y /X@X7@XBXwoXW_@WbW@V@VV@VvVwVVBU@UUS/: final reference detached log message was moved from the INFO log level to the DEBUG(1) log level to prevent the named-checkzone tool from superfluously logging this message in non-debug mode. [jsc#SLE-24600]- Update to release 9.16.35 Bug Fixes: * A crash was fixed that happened when a dnssec-policy zone that used NSEC3 was reconfigured to enable inline-signing. * In certain resolution scenarios, quotas could be erroneously reached for servers, including any configured forwarders, resulting in SERVFAIL answers being sent to clients. * rpz-ip rules in response-policy zones could be ineffective in some cases if a query had the CD (Checking Disabled) bit set to 1. * Previously, if Internet connectivity issues were experienced during the initial startup of named, a BIND resolver with dnssec-validation set to auto could enter into a state where it would not recover without stopping named, manually deleting the managed-keys.bind and managed-keys.bind.jnl files, and starting named again. * The statistics counter representing the current number of clients awaiting recursive resolution results (RecursClients) could overflow in certain resolution scenarios. * Previously, BIND failed to start on Solaris-based systems with hundreds of CPUs. * When a DNS resource record’s TTL value was equal to the resolver’s configured prefetch “eligibility” value, the record was erroneously not treated as eligible for prefetching. [jsc#SLE-24600]- Update to release 9.16.34 New Features: * Support for parsing and validating the dohpath service parameter in SVCB records was added. * named now logs the supported cryptographic algorithms during startup and in the output of named -V. Bug Fixes: * Changing just the TSIG key names for primaries in catalog zones’ member zones was not effective. This has been fixed. Known Issues: * Upgrading from BIND 9.16.32 or any older version may require a manual configuration change. The following configurations are affected: - type primary zones configured with dnssec-policy but without either allow-update or update-policy, - type secondary zones configured with dnssec-policy. In these cases please add inline-signing yes; to the individual zone configuration(s). Without applying this change, named will fail to start. For more details, see https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing [jsc#SLE-24600]- Update to release 9.16.33 Security Fixes: * Previously, there was no limit to the number of database lookups performed while processing large delegations, which could be abused to severely impact the performance of named running as a recursive resolver. This has been fixed. (CVE-2022-2795) * named running as a resolver with the stale-answer-client-timeout option set to 0 could crash with an assertion failure, when there was a stale CNAME in the cache for the incoming query. This has been fixed. (CVE-2022-3080) * A memory leak was fixed that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177) * Memory leaks were fixed that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178) Feature Changes: * Response Rate Limiting (RRL) code now treats all QNAMEs that are subject to wildcard processing within a given zone as the same name, to prevent circumventing the limits enforced by RRL. * Zones using dnssec-policy now require dynamic DNS or inline-signing to be configured explicitly. * A backward-compatible approach was implemented for encoding internationalized domain names (IDN) in dig and converting the domain to IDNA2008 form; if that fails, BIND tries an IDNA2003 conversion. Bug Fixes: * A serve-stale bug was fixed, where BIND would try to return stale data from cache for lookups that received duplicate queries or queries that would be dropped. This bug resulted in premature SERVFAIL responses, and has now been resolved. [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]- Add systemd drop-in directory for named service [bsc#1201689, bind.spec]- Include a modified createNamedConfInclude script again, as this broke compatability with existing configurations. A symlink for named.conf.include to /var/lib/named is created to allow for a read-only /etc directory. However it is still advised to change the existing configuration. See README-bind.chrootenv for a guide how to do this. [bsc#1203250, vendor-files/tools/createNamedConfInclude, vendor-files/docu/README-bind.chrootenv, bind.spec]- Update to release 9.16.32 Feature Changes: * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically disabled on systems where they are disallowed by the security policy (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms need to be migrated to new algorithms prior to running on these systems, as graceful migration to different DNSSEC algorithms is not possible when RSASHA1 is disallowed by the operating system. * Log messages related to fetch limiting have been improved to provide more complete information. Specifically, the final counts of allowed and spilled fetches are now logged before the counter object is destroyed. Bug Fixes: * Non-dynamic zones that inherit dnssec-policy from the view or options blocks were not marked as inline-signed and therefore never scheduled to be re-signed. This has been fixed. * The old max-zone-ttl zone option was meant to be superseded by the max-zone-ttl option in dnssec-policy; however, the latter option was not fully effective. This has been corrected: zones no longer load if they contain TTLs greater than the limit configured in dnssec-policy. For zones with both the old max-zone-ttl option and dnssec-policy configured, the old option is ignored, and a warning is generated. * rndc dumpdb -expired was fixed to include expired RRsets, even if stale-cache-enable is set to no and the cache-cleaning time window has passed. [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc, bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc, bind.spec, jsc#SLE-24600]- Update to release 9.16.31 This is the first of monthly updates of "bind". It is planned to update bind when a new upstream maintennace release becomes available, which is usually towards the end of a month, see https://www.isc.org/blogs/2021-bind-release-model/ Compared to the previous SUSE release, in this release, 53 (minor) bugs were fixed 13 (minor) functional enhancements were made 3 security issues are now fixed upstream: CVE-2022-0396, CVE-2021-25220, CVE-2021-25219 plus a few minor changes. For a full list of changes, please refer to the CHANGES file in the source rpm. This update obsoletes the following patches: * bind-fix-build-with-older-sphinx.patch * bind-CVE-2021-25219.patch * bind-9.16.27-0001-CVE-2021-25220.patch * bind-9.16.27-0002-CVE-2022-0396.patch [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc, bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc, bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch, bind-9.16.27-0001-CVE-2021-25220.patch, bind-9.16.27-0002-CVE-2022-0396.patch, jsc#SLE-24600]- When enabling query_logging by un-commenting an example in bind.conf, named attempts to create a file in /var/log which fails due to missing credentials. This also applies to the "dump-file" and the "statistics-file". This is solved by having systemd-tmpfiles create a subdirectory "/var/log/named" owned by named:named and changing the file paths accordingly: /var/log/named_querylog -> /var/log/named/querylog /var/log/named_dump.db -> /var/log/named/dump.db /var/log/named.stats -> /var/log/named/stats Also, in "named.service", the ReadWritePath was changed to include "/var/log/named" rather than just "var/log". [bsc#1200685, bind.spec, vendor-files/config/named.conf, vendor-files/system/named.service]- A non-existent initialization script (eg a leftorver "createNamedConfInclude" in /etc/sysconfig/named) may cause named not to start. A warning message is printed in named.prep and the fact is ignored. Also, the return value of a failed script was not handled properly causing a failed script to not prevent named to start. This is now fixed properly. [bsc#1199044, vendor-files.tar.bz2]- Obsolete bind-chrootenv as it is no longer needed. [bsc#1196990, bind.spec]- * When using forwarders, bogus NS records supplied by, or via, those forwarders may be cached and used by named if it needs to recurse for any reason, causing it to obtain and pass on potentially incorrect answers. [CVE-2021-25220] * TCP connection slots may be consumed for an indefinite time frame via a specifically crafted TCP stream sent from a client. This issue can only be triggered on BIND servers which have keep-response-order enabled, which is not the default configuration. The keep-response-order option is an ACL block, and as such, any hosts specified within it will be able to trigger this issue on affected versions. [CVE-2022-0396] [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]- Added /var/log to the ReadWritePaths as some log files are written there: * dump-file "/var/log/named_dump.db" * statistics-file "/var/log/named.stats" [bsc#1194721, vendor-files.tar.bz2]- Added "BuildRequires: python-rpm-macros". This was pulled in by python3 by mistake in the past and had been removed via Maintenance Update. [bind.spec, bsc#1194746]- Fixed CVE-2021-25219: The lame-ttl option controls how long named caches certain types of broken responses from authoritative servers (see the security advisory for details). This caching mechanism could be abused by an attacker to significantly degrade resolver performance. The vulnerability has been mitigated by changing the default value of lame-ttl to 0 and overriding any explicitly set value with 0, effectively disabling this mechanism altogether. ISC's testing has determined that doing that has a negligible impact on resolver performance while also preventing abuse. Administrators may observe more traffic towards servers issuing certain types of broken responses than in previous BIND 9 releases. [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]- Upgrade of bind to 9.16.20. This upgrade has the following MAJOR changes: * it combines the various libraries into bind-utils as they are used only for bind itself. * the daemon is started using a systemd unit rather than a sysV init script * the system is protected against a misbehaving daemon not by putting the daemon into a chroot jail but by relying on systemd protection. * it includes fixes for the following CVEs: + Fix off-by-one bug in ISC SPNEGO implementation. (CVE-2020-8625) + Insufficient IXFR checks could result in named serving a zone without an SOA record at the apex, leading to a RUNTIME_CHECK assertion failure when the zone was subsequently refreshed. This has been fixed by adding an owner name check for all SOA records which are included in a zone transfer. (CVE-2021-25214) + named crashed when a DNAME record placed in the ANSWER section during DNAME chasing turned out to be the final answer to a client query. (CVE-2021-25215) + A specially crafted GSS-TSIG query could cause a buffer overflow in the ISC implementation of SPNEGO. (CVE-2021-25216) + An assertion failure occurred when named attempted to send a UDP packet that exceeded the MTU size, if Response Rate Limiting (RRL) was enabled. (CVE-2021-25218) * it obsoletes the following patches: + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch + bind-replace-varrun-with-run.patch + bind-CVE-2021-25214.patch + bind-CVE-2021-25215.patch * it brings with it this new patch: + bind-fix-build-with-older-sphinx.patch For more changes, see the CHANGES file in the src RPM. [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215, bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch, bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch, bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]- Since BIND 9.9, it has been easier to use tsig-keygen and ddns-confgen to generare TSIG keys. In 9.13, TSIG support was removed from dnssec-keygen, so now it is just for DNSKEY (and KEY for obscure cases). tsig-keygen is now used to generate DDNS keys. [bsc#1187921, vendor-files.tar.bz2]- * A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly [CVE-2021-25214, bind-CVE-2021-25214.patch] * An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself [CVE-2021-25215, bind-CVE-2021-25215.patch] * A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack This does not affect this package as the affected code is disabled. [CVE-2021-25216] [bsc#1185345]- pass PIE compiler and linker flags via environment variables to make /usr/bin/delv in bind-tools also position independent (bsc#1183453). - drop pie_compile.diff: no longer needed, this patch is difficult to maintain, the environment variable approach is less error prone. [bsc#1183453, bind.spec, pie_compile.diff]- /var/run is deprecated, replaced by /run [bsc#1185073, bind-replace-varrun-with-run.patch, bind-chrootenv.conf, vendor-files.tar.bz2]- Removed baselibs.conf as SLE does not distribute 32 bit libraries. [baselibs.conf]- Added special make instruction for the "Administrator Reference Manual" which is built using python3-Sphinx [bsc#1177983, bind.spec] - Removed "Before=nss-lookup.target" from named.service as that leads to a systemd ordering cycle [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]- Add /usr/lib64/named to the files and directories in bind-chrootenv.conf. This directory contains plugins loaded after the chroot(). - Replaced named's dependency on time-sync with a dependency on time-set in named.service. The former leads to a dependency-loop. - Removed "dnssec-enable" from named.conf as it has been obsoleted. Added a comment for reference which should be removed in the future. - Added a comment to the "dnssec-validation" in named.conf with a reference to forwarders which do not return signed responses. - Replaced an INSIST macro which calls abort with a test and a diagnostic output. [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894, bsc#1177915, bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch, bind-chrootenv.conf,vendor-files.tar.bz2]- Removed "-r /dev/urandom" from all invocations of rndc-confgen (init/named system/lwresd.init system/named.init in vendor-files) as this option is deprecated and causes rndc-confgen to fail. [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]- /usr/bin/genDDNSkey: Removing the use of the -r option in the call of /usr/sbin/dnssec-keygen as BIND now uses the random number functions provided by the crypto library (i.e., OpenSSL or a PKCS#11 provider) as a source of randomness rather than /dev/random. Therefore the -r command line option no longer has any effect on dnssec-keygen. Leaving the option in genDDNSkey as to not break compatibility. Patch provided by Stefan Eisenwiener. [bsc#1171313, vendor-files.tar.bz2]- Put libns into a separate subpackage to avoid file conflicts in the libisc subpackage due to different sonums (bsc#1176092).- Require /sbin/start_daemon: both init scripts, the one used in systemd context as well as legacy sysv, make use of start_daemon.- Upgrade to version 9.16.6 Fixes five vilnerabilities: 5481. [security] "update-policy" rules of type "subdomain" were incorrectly treated as "zonesub" rules, which allowed keys used in "subdomain" rules to update names outside of the specified subdomains. The problem was fixed by making sure "subdomain" rules are again processed as described in the ARM. (CVE-2020-8624) [GL #2055] 5480. [security] When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. (CVE-2020-8623) [GL #2037] 5479. [security] named could crash in certain query resolution scenarios where QNAME minimization and forwarding were both enabled. (CVE-2020-8621) [GL #1997] 5478. [security] It was possible to trigger an assertion failure by sending a specially crafted large TCP DNS message. (CVE-2020-8620) [GL #1996] 5476. [security] It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. (CVE-2020-8622) [GL #2028] For the less severe bugs fixed, see the CHANGES file. [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621, CVE-2020-8620, CVE-2020-8622]- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in /etc/sysconfig/named to suppress warning message re missing file. [vendor-files.tar.bz2, bsc#1173983]- Upgrade to version bind-9.16.5 * The "primary" and "secondary" keywords, when used as parameters for "check-names", were not processed correctly and were being ignored. * 'rndc dnstap -roll ' did not limit the number of saved files to . * Add 'rndc dnssec -status' command. * Addressed a couple of situations where named could crash For the full list, see the CHANGES file in the source RPM.- Changed /var/lib/named to owner root:named and perms rwxrwxr-t so that named, being a/the only member of the "named" group has full r/w access yet cannot change directories owned by root in the case of a compromized named. [bsc#1173307, bind-chrootenv.conf]- Upgrade to version bind-9.16.4 Fixing two security problems: * It was possible to trigger an INSIST when determining whether a record would fit into a TCP message buffer. (CVE-2020-8618) * It was possible to trigger an INSIST in lib/dns/rbtdb.c:new_reference() with a particular zone content and query patterns. (CVE-2020-8619) Also the following functional changes: * Reject DS records at the zone apex when loading master files. Log but otherwise ignore attempts to add DS records at the zone apex via UPDATE. * The default value of "max-stale-ttl" has been changed from 1 week to 12 hours. * Zone timers are now exported via statistics channel. Thanks to Paul Frieden, Verizon Media. Added support for idn2 to spec file (Thanks to Holger Bruenjes ). More internal changes see the CHANGES file in the source RPM This update obsoletes Makefile.in.diff [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff bind.spec]- Upgrade to version bind-9.16.3 Fixing two security problems: * Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. (CVE-2020-8616) * Replaying a TSIG BADTIME response as a request could trigger an assertion failure. (CVE-2020-8617) Also * Add engine support to OpenSSL EdDSA implementation. * Add engine support to OpenSSL ECDSA implementation. * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0. * Warn about AXFR streams with inconsistent message IDs. * Make ISC rwlock implementation the default again. For more see CHANGS file in source RPM. [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]- bind needs an accurate clock, so wait for the time-sync.target to be reached before starting bind. [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]- Use sysusers.d to create named user - Have only one package creating the user- coreutils are not used in %post, remove Requires. - Use systemd_ordering instead of hard requiring systemd- Upgrade to version 9.16.1 * UDP network ports used for listening can no longer simultaneously be used for sending traffic. * The system-provided POSIX Threads read-write lock implementation is now used by default instead of the native BIND 9 implementation. * Fixed re-signing issues with inline zones which resulted in records being re-signed late or not at all. [bind-9.16.1.tar.xz]- Update download urls - Do not enable geoip on old distros, the geoip db was shut down so we need to use geoip2 everywhere- Upgrade to version 9.16.0 Major upgrade, see https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html and CHANGES file in the source tree. Major functional change: * What was set with --with-tuning=large option in older BIND9 versions is now a default, and a --with-tuning=small option was added for small (e.g. OpenWRT) systems. * A new "dnssec-policy" option has been added to named.conf to implement a key and signing policy (KASP) for zones. * The command (and manpage) bind9-config have been dropped as the BIND 9 libraries are now purely internal. No patches became obsolete through the upgrade. [bind-9.16.0.tar.xz]- Upgrade to bind-9.14.9 bug fixes and feature improvements- Upgrade to version 9.14.8: * Set a limit on the number of concurrently served pipelined TCP queries. * Some other bug fixing, see CHANGES file. [CVE-2019-6477, bsc#1157051]- Upgrade to version 9.14.7 * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0, queryperf, sdb, zkt from contrib as they are not supported any more * Added support for the GeoIP2 API from MaxMind * See CHANGES file in the source RPM. * obsoletes bind-CVE-2018-5745.patch (bsc#1126068) * obsoletes bind-CVE-2019-6465.patch (bsc#1126069) * obsoletes bind-CVE-2018-5743.patch (bsc#1133185) * obsoletes bind-CVE-2019-6471.patch (bsc#1138687) [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185, bsc#1138687, CVE-2019-6476, CVE-2019-6475, CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465, CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738, CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136, configure.in.diff, bind-99-libidn.patch, perl-path.diff, bind-sdb-ldap.patch, bind-CVE-2017-3145.patch, bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch, bind-fix-fips.patch, bind-CVE-2018-5745.patch, bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch, bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700, bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468, bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330, bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505, bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583, bnc#1127583, bnc#1109160]- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add FIPS patch back into bind (bsc#1128220) - File: bind-fix-fips.patch- Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367 bsc#1118368)- Update named.root. One of the root servers IP has changed. - Install the LICENSE file.- Add bind.conf and bind-chrootenv.conf to install the default files in /var/lib/named and create chroot environment on systems using transactional-updates [bsc#1100369] [FATE#325524].- Cleanup pre/post install: remove all old code which was needed to update to SLES8.- Fix a patch error in dnszone-schema file (bsc#901577)- Add SPF records in dnszone-schema file (bsc#901577)- Fix the hostname in ldapdump to be valid (bsc#965748) - Patch file - bind-ldapdump-use-valid-host.patch- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch Fixes dynamic DNS updates against samba and Microsoft DNS servers (bsc#1094236).- Move chroot related files from bind to bind-chrootenv (bsc#1093338)- Remove rndc.key generation from bind.spec file because bind should create it on first boot (bsc#1092283) - Add misisng rndc.key check and generation code is lwresd.init script- build with --enable-filter-aaaa to make it possible to use config option "filter-aaaa-on-v4 yes". Useful to workaround broken websites like netflix which block traffic from certain IPv6 tunnel providers. (bsc#1069633)- Add /dev/urandom to chroot env- Implement systemd init scripts for bind and lwresd (fate#323155)- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)- Use getent when adding user/group - update changelog to mention removed options- license changed to MPL-2.0 according to legal.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add back init scripts, systemd units aren't ready yet- Add python3-bind subpackage to allow python bind interactions- Sync configure options with RH package and remove unused ones * Enable python3 * Enable gssapi * Enable dnssec scripts * Remove no longer recognized --enable-rrl- Drop idnkit from the build, the bind uses libidn since 2007 to run all the resolutions in dig/etc. bsc#1030306 - Add patch to make sure we build against system idn: * bind-99-libidn.patch - Refresh patch: * pie_compile.diff - Remove patches that are unused due to above: * idnkit-powerpc-ltconfig.patch * runidn.diff- drop bind-openssl11.patch (merged upstream)- Remove systemd conditionals as we are not building on sle11 anyway - Force the systemd to be base for the initscript deployment- Bump up version of most of the libraries - Rename the subpackages to match the version updates - Add macros for easier handling of the library package names - Drop more unneeded patches * dns_dynamic_db.patch (upstream)- Update to 9.11.2 release: * Many changes compared to 9.10 see the README file for in-depth listing * For detailed changes with issues see CHANGES file * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137 CVE-3136 CVE-2016-9778 * OpenSSL 1.1 support - Remove support for some old distributions and cleanup the spec file to require only what is really needed - Switch to systemd (bsc#1053808) - Remove german from the postinst messages - Remove patches merged upstream: * bind-CVE-2017-3135.patch * bind-CVE-2017-3142-and-3143.patch - Refresh named.root with another update- Use python3 by default (fate#323526)- bind-openssl11.patch: add a patch for enabling openssl 1.1 support (builds for 1.0 and 1.1 openssl). (bsc#1042635)- Enable JSON statistics- named.root: refreshed from internic to 2017060102 (bsc#1048729)- Run systemctl daemon-reload even when this is not build with systemd support: if installing bind on a systemd service and not reloading systemd daemon, then the service 'named' is not known right after package installation, causing confusion.- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue where an attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]- Fix named init script to dynamically find the location of the openssl engines (boo#1040027).- Add with_systemd define with default off, since we still use init scripts and no systemd units.- Don't require and call insserv if we use systemd- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ * CVE-2017-3135, bsc#1024130 * bind-CVE-2017-3135.patch- Update to latest release in the 9.10.X series * Security fixes in 9.10.4 * Duplicate EDNS COOKIE options in a response could trigger an assertion failure. CVE-2016-2088. [RT #41809] * The resolver could abort with an assertion failure due to improper DNAME handling when parsing fetch reply messages. CVE-2016-1286. [RT #41753] * Malformed control messages can trigger assertions in named and rndc. CVE-2016-1285. [RT #41666] * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure. CVE-2015-8705. [RT #41397] * Specific APL data could trigger an INSIST. CVE-2015-8704. [RT #41396] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. CVE-2015-8461. [RT#40945] * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. CVE-2015-8000. [RT #40987] * For Features and other fixes in 9.10.4 see https://kb.isc.org/article/AA-01380/0/BIND-9.10.4-Release-Notes.html * Description of patch changes * BIND 9.10.4-P5 addresses the security issues described in CVE-2016-9131, CVE-2016-9147 and CVE-2016-9444. [bsc#1018699] * BIND 9.10.4-P4 addresses the security issue described in CVE-2016-8864. * BIND 9.10.4-P3 addresses the security issue described in CVE-2016-2776 and addresses an interoperability issue with ECS clients. * BIND 9.10.4-P2 addresses the security issue described in CVE-2016-2775. * BIND 9.10.4-P1 addresses Windows installation issues, the %z modifier is not supported under Windows and a race condition in the rbt/rbtdb implementation resulting in named exiting due to assertion failures being detected. * Following patches removed, fixed upstream * cve-2016-2776.patch * cve-2016-8864.patch- Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829).- Apply cve-2016-2776.patch to fix CVE-2016-2776 (bsc#1000362).- Remove the start/stop dependency of named and lwresd on remote-fs to break a service dependency cycle (bsc#947483, bsc#963971). - Make /var/lib/named owned by the named user (bsc#908850, bsc#875691). - Call systemd service macros with the full service name.- remove BuildRequire libcap. That is only a legacy library, not actually used for building. libcap-devel pulls in the right one.- Security update 9.10.3-P4: * CVE-2016-1285, bsc#970072: assert failure on input parsing can cause premature exit. * CVE-2016-1286, bsc#970073: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet containing multiple cookie options to cause named to terminate with an assertion failure.- drop a changing timestamp making build reproducible- Build with --with-randomdev=/dev/urandom otherwise libisc will use /dev/random to gather entropy and that might block, short read etc..- Security update 9.10.3-P3: * Specific APL data could trigger an INSIST (CVE-2015-8704, bsc#962189). * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure (CVE-2015-8705, bsc#962190). * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway.- Update to version 9.10.3-P2 to fix a remote denial of service by misparsing incoming responses (CVE-2015-8000, bsc#958861).- Avoid double %setup, it confuses some versions of quilt. - Summary/description update- Update to version 9.10.2-P4 * An incorrect boundary boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. (CVE-2015-5986) [RT #40286] (bsc#944107) * A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. (CVE-2015-5722) [RT #40212] (bsc#944066)- Update to version 9.10.2-P3 Security Fixes * A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #39795] * On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795] Bug Fixes * Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] * Several bugs have been fixed in the RPZ implementation: + Policy zones that did not specifically require recursion could be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. This has been corrected. In most configurations, behavioral changes due to this fix will not be noticeable. [RT #39229] + The server could crash if policy zones were updated (e.g. via rndc reload or an incoming zone transfer) while RPZ processing was still ongoing for an active query. [RT #39415] + On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] + The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] + The server could crash if a reload of an RPZ zone was initiated while another reload of the same zone was already in progress. [RT #39649]- Update to version 9.10.2-P2 - An uninitialized value in validator.c could result in an assertion failure. (CVE-2015-4620) [RT #39795] - Update to version 9.10.2-P1 - Include client-ip rules when logging the number of RPZ rules of each type. [RT #39670] - Addressed further problems with reloading RPZ zones. [RT #39649] - Addressed a regression introduced in change #4121. [RT #39611] - The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] - On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] - A bug in RPZ could cause the server to crash if policy zones were updated while recursion was pending for RPZ processing of an active query. [RT #39415] - Fix a bug in RPZ that could cause some policy zones that did not specifically require recursion to be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. [RT #39229] - Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] - Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't result in a bug during operation. If the read failed, named could segfault. [RT #38559]- Fix inappropriate use of /var/lib/named for locating dynamic-DB plugins. Dynamic-DB plugins are now loaded from %{_libexecdir}/bind, consistent with openSUSE packaging guideline. - Install additional header files which are helpful to the development of dynamic-DB plugins.- Depend on systemd macros and sysvinit on post-12.3 only. - Create empty lwresd.conf at build time. - Reduce file list pre-13.1.- Update to version 9.10.2 - Handle timeout in legacy system test. [RT #38573] - dns_rdata_freestruct could be called on a uninitialised structure when handling a error. [RT #38568] - Addressed valgrind warnings. [RT #38549] - UDP dispatches could use the wrong pseudorandom number generator context. [RT #38578] - Fixed several small bugs in automatic trust anchor management, including a memory leak and a possible loss of key state information. [RT #38458] - 'dnssec-dsfromkey -T 0' failed to add ttl field. [RT #38565] - Revoking a managed trust anchor and supplying an untrusted replacement could cause named to crash with an assertion failure. (CVE-2015-1349) [RT #38344] - Fix a leak of query fetchlock. [RT #38454] - Fix a leak of pthread_mutexattr_t. [RT #38454] - RPZ could send spurious SERVFAILs in response to duplicate queries. [RT #38510] - CDS and CDNSKEY had the wrong attributes. [RT #38491] - adb hash table was not being grown. [RT #38470] - Update bind.keyring - Update baselibs.conf due to updates to libdns160 and libisc148- Enable export libraries to support plugin development. Install DNSSEC root key. Expose new interface for developing dynamic zone database. + dns_dynamic_db.patch- PowerPC can build shared libraries for sure. idnkit-powerpc-ltconfig.patch- Explicitly BuildRequire systemd-rpm-macros since it is used for lwresd %post etc. Then drop pre-12.x material. Remove configure.in.diff2.- Corrections to baselibs.conf- Update to version 9.10.1-P1 - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500); (bnc#908994). The recursion depth limit is configured via the "max-recursion-depth" option, and the query limit via the "max-recursion-queries" option. [RT #37580] - When geoip-directory was reconfigured during named run-time, the previously loaded GeoIP data could remain, potentially causing wrong ACLs to be used or wrong results to be served based on geolocation (CVE-2014-8680). [RT #37720]; (bnc#908995). - Lookups in GeoIP databases that were not loaded could cause an assertion failure (CVE-2014-8680). [RT #37679]; (bnc#908995). - The caching of GeoIP lookups did not always handle address families correctly, potentially resulting in an assertion failure (CVE-2014-8680). [RT #37672]; (bnc#908995).- Convert some hard PreReq to leaner Requires(pre). - Typographical and orthographic fixes to description texts.- Fix bashisms in the createNamedConfInclude script. - Post scripts: remove '-e' option of 'echo' that may be unsupported in some POSIX-compliant shells.- Add openssl engines to the lwresd chroot. - Add /etc/lwresd.conf with attribute ghost to the list of files. - Add /run/lwresd to the list of files of the lwresd package. - Shift /run/named from the chroot sub to the main bind package. - Drop /proc from the chroot as multi CPU systems work fine even without it.- Add a versioned dependency when obsoleting packages.- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Fix gssapi_krb configure time header detection.- Update root zone (dated Nov 5, 2014).- Update to version 9.10.1 - This release addresses the security flaws described in CVE-2014-3214 and CVE-2014-3859. - Update to version 9.10.0 - DNS Response-rate limiting (DNS RRL), which blunts the impact of reflection and amplification attacks, is always compiled in and no longer requires a compile-time option to enable it. - An experimental "Source Identity Token" (SIT) EDNS option is now available. - A new zone file format, "map", stores zone data in a format that can be mapped directly into memory, allowing significantly faster zone loading. - "delv" (domain entity lookup and validation) is a new tool with dig-like semantics for looking up DNS data and performing internal DNSSEC validation. - Improved EDNS(0) processing for better resolver performance and reliability over slow or lossy connections. - Substantial improvement in response-policy zone (RPZ) performance. Up to 32 response-policy zones can be configured with minimal performance loss. - To improve recursive resolver performance, cache records which are still being requested by clients can now be automatically refreshed from the authoritative server before they expire, reducing or eliminating the time window in which no answer is available in the cache. - New "rpz-client-ip" triggers and drop policies allowing response policies based on the IP address of the client. - ACLs can now be specified based on geographic location using the MaxMind GeoIP databases. Use "configure --with-geoip" to enable. - Zone data can now be shared between views, allowing multiple views to serve the same zones authoritatively without storing multiple copies in memory. - New XML schema (version 3) for the statistics channel includes many new statistics and uses a flattened XML tree for faster parsing. The older schema is now deprecated. - A new stylesheet, based on the Google Charts API, displays XML statistics in charts and graphs on javascript-enabled browsers. - The statistics channel can now provide data in JSON format as well as XML. - New stats counters track TCP and UDP queries received per zone, and EDNS options received in total. - The internal and export versions of the BIND libraries (libisc, libdns, etc) have been unified so that external library clients can use the same libraries as BIND itself. - A new compile-time option, "configure --enable-native-pkcs11", allows BIND 9 cryptography functions to use the PKCS#11 API natively, so that BIND can drive a cryptographic hardware service module (HSM) directly instead of using a modified OpenSSL as an intermediary. - The new "max-zone-ttl" option enforces maximum TTLs for zones. This can simplify the process of rolling DNSSEC keys by guaranteeing that cached signatures will have expired within the specified amount of time. - "dig +subnet" sends an EDNS CLIENT-SUBNET option when querying. - "dig +expire" sends an EDNS EXPIRE option when querying. - New "dnssec-coverage" tool to check DNSSEC key coverage for a zone and report if a lapse in signing coverage has been inadvertently scheduled. - Signing algorithm flexibility and other improvements for the "rndc" control channel. - "named-checkzone" and "named-compilezone" can now read journal files, allowing them to process dynamic zones. - Multiple DLZ databases can now be configured. Individual zones can be configured to be served from a specific DLZ database. DLZ databases now serve zones of type "master" and "redirect". - "rndc zonestatus" reports information about a specified zone. - "named" now listens on IPv6 as well as IPv4 interfaces by default. - "named" now preserves the capitalization of names when responding to queries. - new "dnssec-importkey" command allows the use of offline DNSSEC keys with automatic DNSKEY management. - New "named-rrchecker" tool to verify the syntactic correctness of individual resource records. - When re-signing a zone, the new "dnssec-signzone -Q" option drops signatures from keys that are still published but are no longer active. - "named-checkconf -px" will print the contents of configuration files with the shared secrets obscured, making it easier to share configuration (e.g. when submitting a bug report) without revealing private information. - "rndc scan" causes named to re-scan network interfaces for changes in local addresses. - On operating systems with support for routing sockets, network interfaces are re-scanned automatically whenever they change. - "tsig-keygen" is now available as an alternate command name to use for "ddns-confgen". - Update to version 9.9.6 New Features - Support for CAA record types, as described in RFC 6844 "DNS Certification Authority Authorization (CAA) Resource Record", was added. [RT#36625] [RT #36737] - Disallow "request-ixfr" from being specified in zone statements where it is not valid (it is only valid for slave and redirect zones) [RT #36608] - Support for CDS and CDNSKEY resource record types was added. For details see the proposed Informational Internet-Draft "Automating DNSSEC Delegation Trust Maintenance" at http://tools.ietf.org/html/draft-ietf-dnsop-delegation-trust-maintainance-14. [RT #36333] - Added version printing options to various BIND utilities. [RT #26057] [RT #10686] - Added a "no-case-compress" ACL, which causes named to use case-insensitive compression (disabling change #3645) for specified clients. (This is useful when dealing with broken client implementations that use case-sensitive name comparisons, rejecting responses that fail to match the capitalization of the query that was sent.) [RT #35300] Feature Changes - Adds RPZ SOA to the additional section of responses to clearly indicate the use of RPZ in a manner that is intended to avoid causing issues for downstream resolvers and forwarders [RT #36507] - rndc now gives distinct error messages when an unqualified zone name matches multiple views vs. matching no views [RT #36691] - Improves the accuracy of dig's reported round trip times. [RT #36611] - When an SPF record exists in a zone but no equivalent TXT record does, a warning will be issued. The warning for the reverse condition is no longer issued. See the check-spf option in the documentation for details. [RT #36210] - "named" will now log explicitly when using rndc.key to configure command channel. [RT #35316] - The default setting for the -U option (setting the number of UDP listeners per interface) has been adjusted to improve performance. [RT #35417] - Aging of smoothed round-trip time measurements is now limited to no more than once per second, to improve accuracy in selecting the best name server. [RT #32909] - DNSSEC keys that have been marked active but have no publication date are no longer presumed to be publishable. [RT #35063] Bug Fixes - The Makefile in bin/python was changed to work around a bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993] (**) - Corrected bugs in the handling of wildcard records by the DNSSEC validator: invalid wildcard expansions could be treated as valid if signed, and valid wildcard expansions in NSEC3 opt-out ranges had the AD bit set incorrectly in responses. [RT #37093] [RT #37072] - When resigning, dnssec-signzone was removing all signatures from delegation nodes. It now retains DS and (if applicable) NSEC signatures. [RT #36946] - The AD flag was being set inappopriately on RPZ responses. [RT #36833] - Updates the URI record type to current draft standard, draft-faltstrom-uri-08, and allows the value field to be zero length [RT #36642] [RT #36737] - RRSIG sets that were not loaded in a single transaction at start up were not being correctly added to re-signing heaps. [RT #36302] - Setting '-t aaaa' in .digrc had unintended side-effects. [RT #36452] - A race condition could cause a crash in isc_event_free during shutdown. [RT #36720] - Addresses a race condition issue in dispatch. [RT #36731] - acl elements could be miscounted, causing a crash while loading a config [RT #36675] - Corrects a deadlock between view.c and adb.c. [RT #36341] - liblwres wasn't properly handling link-local addresses in nameserver clauses in resolv.conf. [RT #36039] - Buffers in isc_print_vsnprintf were not properly initialized leading to potential overflows when printing out quad values. [RT #36505] - Don't call qsort() with a null pointer, and disable the GCC 4.9 "delete null pointer check" optimizer option. This fixes problems when using GNU GCC 4.9.0 where its compiler code optimizations may cause crashes in BIND. For more information, see the operational advisory at https://kb.isc.org/article/AA-01167/. [RT #35968] - Fixed a bug that could cause repeated resigning of records in dynamically signed zones. [RT #35273] - Fixed a bug that could cause an assertion failure after forwarding was disabled. [RT #35979] - Fixed a bug that caused SERVFAILs when using RPZ on a system configured as a forwarder. [RT #36060] - Worked around a limitation in Solaris's /dev/poll implementation that could cause named to fail to start when configured to use more sockets than the system could accomodate. [RT #35878] - Remove merged rpz2+rl-9.9.5.patch and obsoleted rpz2+rl-9.9.5.patch - Removed pid-path.diff patch as /run/{named,lwresd}/ are used by default. - Update baselibs.conf (added libirs and library interface version updates).- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify./sbin/ldconfig/sbin/ldconfigbind-develbind9-utilsbindutillibirs-devels390zp32 1722935138  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOP9.16.50-150500.8.21.19.16.50-150500.8.21.19.16.50-150500.8.21.19.16.509.16.509.16.509.16.50 bind.keysnamed.drndc-access.confopenldapschemadlz.schemadnszone.schemaarpanamedelvdigdnstap-readgenDDNSkeyhostmdignslookupnsupdatelibbind9-9.16.50.solibbind9.solibdns-9.16.50.solibdns.solibirs-9.16.50.solibirs.solibisc-9.16.50.solibisc.solibisccc-9.16.50.solibisccc.solibisccfg-9.16.50.solibisccfg.solibns-9.16.50.solibns.soddns-confgendnssec-cdsdnssec-checkdsdnssec-coveragednssec-dsfromkeydnssec-importkeydnssec-keyfromlabeldnssec-keygendnssec-keymgrdnssec-revokednssec-settimednssec-signzonednssec-verifynamed-journalprintnsec3hashrndcrndc-confgentsig-keygenbind.clang-format.headersREADME-bind.chrootenv.SUSEREADME.SUSEarpaname.1.gzdelv.1.gzdig.1.gzdnstap-read.1.gzhost.1.gzmdig.1.gznslookup.1.gznsupdate.1.gzrndc.conf.5.gzddns-confgen.8.gzdnssec-cds.8.gzdnssec-checkds.8.gzdnssec-coverage.8.gzdnssec-dsfromkey.8.gzdnssec-importkey.8.gzdnssec-keyfromlabel.8.gzdnssec-keygen.8.gzdnssec-keymgr.8.gzdnssec-revoke.8.gzdnssec-settime.8.gzdnssec-signzone.8.gzdnssec-verify.8.gznamed-compilezone.8.gznamed-journalprint.8.gznsec3hash.8.gzrndc-confgen.8.gzrndc.8.gztsig-keygen.8.gz/etc//etc/named.d//etc/openldap//etc/openldap/schema//usr/bin//usr/lib64//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/bind//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35100/SUSE_SLE-15-SP5_Update/3f4c26c6c39bd824730d5558274def3c-bind.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linux       ! """""""#"""""""##$"##"#"""""ASCII textdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=25cda0d682b9ec7d432755f9ef9a5707a3fb85d3, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=f448fac8d96f99842fdc3e817c49d5c6801bb499, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9fd819fec8ce25546d213c00fec0b6b774c22109, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=06f2982d1ba7bc834902b5aae364b6fd8e1ec21d, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=345be6b9e8fdff1bbe6544b12a0a6cdaff10f2b7, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=61a029ca964b95e4858b5d67c649b26fa15fde24, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=94554e9097efe874782788ac416fd51b50ae1fd2, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=1b265dd82b74d07668bdd5f94ad1afd4b1a74099, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4102386a260104d8a58761f910ee829be6fb4ccc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d69c8f6b6dd441966bc41ff7e62fa8607e390bd4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=033ba9260202152290e233286fb4b36a3e49f236, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0d908f791b7a28b2eafbdaac5cb021082271d3d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=257e46dbc76a4cd7b5505a8758818c66b7c87492, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b74c321cbaecb3a5d8cdad2171c1283ec12ea349, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c625ea492c8cb2cbf9b69112e944cb22c2189aa9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=a2017408c7861e56708f8b3a743c0732b21fe261, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4bcfc7ff72b3c95d5596569b421d5092359570fa, for GNU/Linux 3.2.0, strippedPython script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=30d95a6d141113929ee6d60b4593c0c618d3dc01, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=a3f85d6afb6e77378bb4c337a1d5ea1443b58313, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6fdd2344c1f3a10e88c4b5522f257bbc2fd19c13, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ccc38a982f59a4ac1d679fdc63aed77f13bf20a8, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=3d108bf3c0dfaf218f480691171efeb090d3cc5b, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=f348b419e06602671f69ad0290b2364d3e797cdd, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=aad9195e54762eb42b67cc6a6d5c052d300ef30e, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=eb07b9548a54c02143aebcc3720ce4f8243dd3ff, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6be34af97691d8d580c5af046357dd7c2d649f79, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ad6beeb5672d0cd0d96ef87d5ade3175edd74d9c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=3923cc4516877ee590f19e0004d3a3a9f753262f, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=b7f373d9f6c3df9c37b83199fb4f3b91b3b1c9e8, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) "#08ER[x      RR R'RR)RR RRRRR'RR)RR RR RRRRRRR'RR&RR RRR%R'RRR)R RR RRRRRRRR'RR RR RRRR'RR)R RR RRRRRRRR'RR)R RR R"RRRRRR!R'RPRR R$RRRR'RPRR0RR)R&R"RR RR R RRRRRRR R/RR!RR#R%RR'RRP RR RR R)RRRR'RRP RR,RR0RR RR R R R RR(R)R*R+RR R-R/R1RR'RRP R)R R RR RR'RP R)RR R RRR'RP RR R RR R)RRRR'RRR R)RRR'RR)RR RRR'RRRR RR RRR'RRR RRR'RRR R RRR'RRR R RRRR'RRRR RRR'RRR RRR'RR)R RR RRR'RRR RRR'RRR RRR'RRR RRR'RRR RRRRR'RRR R)RRR'ReamR|utf-80200f98b8bce44986c6e2ac4916a006a7824ab39ae2c68c1ab550bddb0b3bfb8?7zXZ !t/>]"k%f˚/Y xK?0t׈} MF^Oss$=j`34kt Ţ~DrK`ޢ⠆Y҆H|z`Rm~⍠=Lmuă"VOwwcQ!"4/LMk:xf7N6n=TA$piU}Cyxg;qNa] ҭOSIw\N6?)Q^XW 潼61-z˶z]5SnSFT`2fp0JQ2/=rOO?V݃6K 8M#z&Z;LT{b g"G1sږ1K : Gf5RUĴjgf =Lׄ@zMք/LvqLcxʬDj#˱S8AzNN繰c™ n,2'aFaV#74 L[nTiaj夗E'B?bL}'1Zy̕fmΝPP-zFH9ZO! icHECc16i^E 5Ҷ8ZB} lf*-Bƶ5B^ [$ .~V &% >:1R4v!jzƢԂMe S'e>慱oV }_Xua= %zM/k |oKse ⣦lR; w?^Sc}c^)BDoT B#t˜u_khڵ:~ʲ% e, Z8]bWoY(^mݨI꥗u*?%lrInz|c4,'` nY=q%*: XC 1!'x7;y4wkE_t6?σ95R^uQ;~3C8|8ԛ8*#W?tkqع!ڲYppoZ= \yB ."jZ􉥼Rψe"k_,zW*͘mYCJ%&VrU"%G~~$Tl=|M[X8OV-YQ!׀dzo_^gq̼=zC moAb)CH4LJ7V{=?dLX~k޴E ;rhŦ9P}Z`f7'nC2D #3{|zl \-e5{vNX0K ҭ9ǨmBYJجuqQÊWwF>V8Ţp#jG{?36؜}gD!Gx;'yG@:J'ȹ܉#!E@MśLYyF\,!8 &-(-p&̆ۦ8?. d'UxQXQ4qQͼۆUlDYXeɌ=.VڵC qt*=(1-Eunb0}nr>U?̙SE;Mwaz'ۤ,|¶^r:ke8lS6vRbm-Za. Yn)7tGG&-(5.ۗߌ0?Fig}K<r K{` 1~A|ypDzZRHj NhyWKsR5x7Tc=NJTBTLL vT!+ D-$$$_gۄ6I#Np\s]LjN2pPM*q5]1ڻzGGRdvO ,#?rBE^ c,P|HDmd^cʽS -#bU(@bz@W֗q WITuŕ;BȈM4;!bJ&Wςi ^2m,Wc6k..=/'/1MUze- g_D!U?`BJU~ÁUú.E$*q?ÖEdVbkK~>7<뷭R,J&"Z`7^L =$6@∶/{!Q,Qh4Lׯk(^FȵyEy[Wu!ίqf'QtMkhr818.3b'u?@1DReS9͆ڶ6,x:Gގvϴ{v`e9U%Fu?PYhWu|f*lL*tփJFIfà3wф-I1h^y a"u5?7[>ipAǟ n߃Y6cqnRabb&b]0a8 A*9EſFkp-3 Vq'Qy~H7)YV!7=c5e> Z1990ȁ0–5( [rIThny 0VbW@۽+yqalp?5Ⱦ5tđIg%Dݫ,f[MUr B& -JK|_YS` Z762ROk Mfٌrv6q>QcTq~&) /ڠ^Z B˻[]NHgV5lػEA9n4;~JX:?+g]BuZͯrg)eCoIP].|qt2a~*C&MPHl4K;#աzbѴ,*EAdDekVSGMVu{_%:9%J"8d6{6_/&'C²0e2hw'u;7џT3+_ݫ͌|1.\dw 4 ԣAYbfTѡ>jSޓ7#>K"_oc~bJ[TUߘ܀vjGuSNixN2 VAuW;P}~i>tQ/a$4*7=/}Jz[&P,rIs7 `M؍( ~ B ;,J#e!B4׮:!"1:&Ye,%;Æ]@76h)*O9R9t^9i!JvHKS2'VdMǍa ʿ$F\=ի>dpմZ9GQY5|gm?11t^ss@2*A V-3(m!ˌ7LWlY L3o=൹bm Ye [HkS.ο[Cs[·O".RBlm0v]bC˜c.9&k]i6p}c\S7eKv{㹃3#$4@Oxd^xAT -Vd{7(~$Їy"E4X~4Z\ TϟU(AQqE %CڶJ]*nc˛fЂ!Bpoguz2L1U0Ó(OGL&"0v=UB?0[ _*,^e~DO;.x ,Fv("^lȻ!U ù/~*WӉk 6tE@.ɱFo51qt@LQqix1Q@t`s1r 0˦yZӸL646A.Q1oxZEfs6HqFY0樊"V9$􄔑 V6"co#jܩY1tB=h+v#PS剙|FwS%ß1ݨQRRDhnzDǛ{M(Ac@)-- t<;0qb>@]̾0+vw+Nh}kud&7 hW5"<;"Ǣ*i&Jy+dLHaߍX5`a^h#b4&OB0?:#fRJM}v;c'ݲ2<_ѝbh??fcE@}?%c"XV-%>{S>7,")XoG:GvtB`\S$'&v,a8ah4xά- ~0/_UWCCs+p~""-:Q0 9;,Rs;/[Ws<82(W^ke}rn6gϳ3p5Mf*76kK,4`!L5*ߦ {V5hlY-5xnY+s0ND!>|ͽ{VTiLPvoe+/OyY)MN9|P:G-DYv]#pGR!/T$LL0yRۣzV}546M}b0b;CdM!.R@0f0WcIY$G$@w:,&H|,f8%77$. |6k5h0jblD~j&9^6= 0(l8=" :&jҚSOYm7k_u2[j-O.=ȿ#kPg=qDtEb |G0FFF1FP A$O&_iWzf ٘4C-kx7I[}W6qs^ty9| fu!Oa$GjK2W襖.?a\gkƸ~4jFI/62HoTW")B#o_{k\QX@@__PV%(={G=ZLuEKE9&rf/Ikv?U~ o4P䶹>c9[a29 !lݰ3VfgA~'>~2XrmܚkGsN%bbws<2xDC-XWާ>I "GV~FXlqiUHq>%aSF(&'_h6#i*mbʉݾɜ(d}-.? )Weme69{,{$`<1BJQî`ZΨ ZyG8wt]{6f{#<G%Rcr[zRb~I*p+Eٝޅp58$Hꖫhp$ pur%|O EWKE3^^;HTmfSeE;W-T:P$>``I  +PJ,9"Q#!֣ ҕ={Ms=pL0gggg #9h2a;I  *N֡,sMS$rѫ ug*Z|ϫ 2lU\AmOwx*bC p"mKY~ ;6D.L~, GɂSK(ËJ$ k\J ^ Br@l:WsƂm)eVP#VB)ƞ$8Nj@_>YhӿKmDs&Ʉ9]&'rceg a8 TP1-jEoc, BYp/rtESH܌H>V'O $>[EQ*xA蠡7P#t5`BAGO?:t]/MLX:h=[ڦ[a>g[/ߠZ3ʌ_f yK!YnkU_:oK8 g)a91wnVn~ vOuoj'||\1Qx]8o6rK ~78 AR#4u @c+`Ӿb7Հ7?x#3hɖ)=zHR4;̖lg7Mg=ͷ)fADa+TgpB^HqcDjvIox_ z:vHx4W2KZeXf+/:yYg`((&2"8ͪyh߲`GFz'o2H' ;TC~`\-"Rҿ#oSaJe<@T\3e Ŗ!Ĩ%x %uT(%*Ri sUJϳ`۲?VG:@~UlskZד<ϵ爠(I^3:6MCП着緊#٩%͚[R*u7B:șUƉYTN'G䁻Z81N+$#Tm$KΜr.@$n&hL@Tor[uiD9*Jê CZu"*]&tkCŖ9q{hR [[TK!YZ@ufzGw=U '[ $BVyŽj:!D vlqf&U5{]|85*K6uI yR"ߐ0і .P.]P@,Oz *NBny~أ%]%VHߦ\)I B(;LVʉ^NbۿT,+'b\9!뀶ià c٭:|'r$ 'A:ì2]:Bm bGAr*|ˆéۿ/llЧ ^1>㖜qA*#h13 8 kD*\$Yh^]F^Mֽ3zTI>j޼jX;n[!{"4 y!-Hjk)7aB& (]uÈ>[GtnhdỲuN?ܥFrrf/m-(ߓj]Mԍ!_IQp'n059xτ *lW\souKyJ1ʄ a~׵]BDUM+α@@:h&nYgO]H֔kS2-?Gc ֏Ys)$g_!;h+1TsK82Q/޵@63rZIw)lх8ik|*De x0Z$>?ܥ9/#PqpO$vp^Tm8 X%jM'<XORG.)^ {(kN117 ,wbKB|.@(໦÷,MzK ~;ifeSnby 7CCD|r}KYǣuextZPAܒ9gSr+Fw2v,U"nѫi-DfvyYdžnkHKζaT>Λ!^/%rAx_əmJ\L!?, >Jj!) 6ޑ5G^%Ȩ~ӲU̮T IHӏpi}a{&.'"M(;R>Ift`ԫ'$)ܻt75-o \ ?B DH [1 r瞧#a2M~p9o &ıڿR.- (>=HA+bJ}C9K64;QS Qqe(# .L^ZNo*M.hP_蠟 >r-T$5IX҃lpJ44c~MG/M؄mF;KO tÙ_ 9MbBtu J ;FW6"Gq4PyO$X*-X8,]"Q ٮ<)-<)~^,WG_piiH~ۤ4NOPt(+pGpK@]]FD꽋&(Ѻxd Ҋ8δ3T4EAY~@ e(39eDɄC!YokKy ]=(|6%.SṚ66x=pNRH%V"h?,eլB,6 _ƻ-{QB)@(UfbLzoeqYm"D w ks?Li} &K2r}`UbuxgԘbEy Ťԃ؈˜5u.Yَr)&{会e#Wr?+X8<6Mm/& wwh/ƭfb\26&dΝ)J=p /LQ #B_ZAh+0S,';ʂ܅ ?+ə8]ݖ>u F  qWۓV~3\5Q~Ճ~reo8MwLBOr ~c/!nd=;2o1-2g0io`I_%EY- .3\2pP,wYgJi%mYȺYǎL҅Oݒ#q#cSb̝Ÿ=,TJ C\8lrYDͻfmxDnɒ-b@any4 3Cn*>mt ;Xp*fҺ,JP@.%X|DOL$RÓo W^%a6x3FDê\Odl<]vm}q{.9!f負ٍkP=WaI {r`z|$:r \-M+ؿkS`G=Nxًȓ>41zu)[K\.Jd뜪 Xwb1ErU@ " k-%\fIljZs]NS|BPȝ,2b˩IxM}b$ei+Y#gw* v ?w\+%p9DxT\L7/L'@TU觥Wݛl1hZZӗ~UD3q;zM':e=z qL2۷JUނC<^xI;[Ip B@G#M~Q@^B=i7*WokclԋO|ijqoHD2 $KF~3XwjPYOĮ i~9D7BZOeneR2E735Q <PoV30`RppR_1#uJ|{i% 6] R,Cjn_ s^6^"D^"?,H\)]?72(w dkw}dW>%Ԡ{UaYVg|6viko;re|wO3| $;F8/rT8)"{HGp]:K-{` 䵂B rur%őظ9}n5DѹTYܧR즖1*"qv:i Q{=r2INjͺF1k|jr^.ޅdnx454e< o׬-͵ Pߞdψ͘%,0-FgM+|j, A\6o|0VռH<2О}_Co ZBns&D9ms^aye6Pwz?˴l7¡*8eaLϖ{dO!n *hWe1ߒhȵy/()V/O"'kCJ98eDicuD5ȏhR.GT%;pDyHe6fI}[@'XgM Ewnݛ,Y;ݣ뗌 4F6 o'J m 9< A,}>sok* Va4R)0nnbZI:Ӵ%`*eCj,丘JU<֘ 9o^?xtUqPʵV(k;TM*Dͮ[Y|ۥ%Rl۪eB|噓&*i`:&1擟]1aQBu|㓋F4[ KUFcXBJ? ANa@"^Qظ67&,qM! g>V!=[؞K*SN@*-+v;+:L:zrJ‹]|>Y^J=`?i9Svp $tq)z#?MtyC8ſaaESŢDN(^/^G$uh`o}3ks&l[LUÏ1AK8@匇%86 U%*8inGYI"=FXй:oPjTKIHs8socAfR;9/R zWD.n2/u,@ ܑi'8S|=j}ڣ)JNZx>G)π}@.(;[l?Avnذ!6̥3!{$">+#q4B ê0Vӓ,~xh%´ r1Ut%8 BtʡLPwNsϬ,~d&>#;Mǫ: :07L^%bVIJ2:-5i< G }g 7f]<B׶!6{vcƍ|SI\ܟ`;VH;7q')*6tDg"ep386dz81)rבw$!k閘/?Kě+/V!S`1 N:` $!W'o7L wfy:ccݖi)bgV=D#f KBz?OJ^0%nYL"IbNi[]EN"~#g)aSDJ.h(ػD9I:h] Dp`X Iov&4{z4 eDξQ(-uN:k$'IVުn6d.qk[R۵g]b?v c%߶I0`.a{9}q aFI#|5/6Ǟi5̑QW)p,b t#܉ E&~:<x21TFnvg+ޑ,)|`ɲ LoFiS?vj3=ՠ"d WY#]^4dT E[An,Ps &)a?3G 1=1-BheWğ<88Vqb|}kҝ2r} *F6d;#xa< A;D,!Ys Nu:V]:HTI4W|k06ؘhKR#Z ^ -F48SFE~±jh>1F[^m7" I TrYw:h)$2Xp֟u\J&,Gڹ Rg`*4~7#t#a72]'@̛N\ׄKj yz2@=XqGPnG:3׳2`-;7\M.yN ~g XDޗݹ"C>5Ȕ >l`= m,*) 쳱-ٖEdH6/En5xO+),m%ljińȆoPfqC?! G͕Ы\e?Lwo]50e*4D6..kסּ]6/xp]+ۅ?iMD10^AQͪt}B=VZs2k :eA^y (_L Xu4w}˗"XDĊ[foz+՛$UG%zc*0 ]? R&_>7V!? T[ ] AՖhG \ݐXUH"~Kd Wa(@ˮ&޽ 2:$ eFʞW.5_?-+Zv÷X8BY|gRSP[2"Ps_ehaIdʯ[RvvKsi-9+&Kmu3 ſaRNԈE_Zx(c~[^fȟ_YjʏX彽 G% n!#zU1\tn٪|2߲6#Ĺ݈ mD.L&P0NQbD'1wzTT(AQVEqA,5}}%IŶwS3vh zv` SaΓ *5qw /O:3ͨ%?ɬ?'X:-$f (рyL3Y_}~Ʀ2l:u.Oeڣjkg['vR= dZCs~(tPpQЩ[Bݙm<ӛD"GkKVjK0r D.m \Zl/3 TܧNʹgD;r F[N=O_jM{Xb)^: Q9 x;1R} @V~p}V{Mk3(&.Ft4|h%yCAABC$ڄA۪@#y ƴׁJ q "b!;[.s/ښp ;&_1`NpnH6a귶LiWgkp#+ >Xt0K^m THyjِ# wƅ[y;'~%h\'UM\yyTf**zxT4BhDF)LIz=A0$Ԛ?Gh{MB6L;a!UPۘiѿ2td}O2U dw;,aYBD[m~L(#@l*8#]0rx:z.rH,KK߶TBё&&kؚl#h %0G AK'1jK n.OjP˱HǦ| Z8kH2t}&!DaKKZ`v!*:IZjB:'.". p諶k^Z6]*+hGt{wYNX6MѴP'2W@[ ,^U)@4)tsh RO%i$W^>ۂ/A?"*Vjfa_9_GX ,ޕn]b"QXOa@Hl2jȃ톍 PD w8-.*R V9'jS fΗZ"x"tvH`V]YrϠ^ketpYuI<@ؠ^ %>Gf5k:E{R>exLkIq XT`xR4]8VIsw䒇yr]6% ;M.JxMP/=[!i?cE\{Pr=E Er9p8 ֎ӣ<¹)ʈ&Zhr~{)D7pxh(Rꕃ£^SҜ o08o. Y(6R C٦j 7eh05݆ ΀[+:6s(_VZq/r}<.kD} 5`k<|~Ub,ıf4fQ'HFY@C[CһJwWQ[-%"`4H'p* W v"@dڞ;:#ŒLGTIRپJUw[~XYio ]S-i+EWUgq CFBC ؝<\SPN_V^5*Hğay\ g'3=94Tnk=/xغv-C(H_hRembsُIz,ra bP (c=R,TP'- seM^Ba؋W.6ӻeXԥYpĦHRP2) |Yd :;lՠnn)Bd}TUk{ B" &!Pgg?RdirZ1k4i >$BwӭKd4lkd F9[DaQ3cՖ oo{+jb5!錛Sn@'wk)!#\6IΞ]Ư6A=]J ޿מc"6*a:'L3祛2SUYgzN.̫c[aԱ 3d*Bv<K8,0^7oEz`ڿj EFJMz@#XKX0CwD M:HH޴\5M52bҝ(fVT]p S!3Ptjmdtֈ:&`-1[:;F||`R. uBVFsgMf3}!AʄjpqeZz܏DA6®c/D}Vх-A yYEE}y%8C,RMTu28iMto\,iX|<-\Mۗh)[JED֖?H59~ufĤh"^Ens '@f#v՗&-=qVđ캐S5CO'SkBWdᢪ ̜ s# aP (Ie/!t5fF֋YF7_Df'tEq|Ad7'ObxͣࠕtyE-5>GyWֻ*E֞:{rtC%t# 92fo.0qryϽ" bV^z2F=/*}QMv!xp43G٦\(Ϙq%&+6)/ڱ>nA|+x2`HcP`Q;pnJKRo U OfM(BZt5b 5vb{*؇{NrCC {bU͇Ё暾|s4*EuQaJe1>zzoZ*k @f {=?ԝl`*Miǹ4"%q*"|j:$ T} {ls <4ArijHFe`l.90ɷ@BWLGh<(u*w5IJKx$ Bk,NֈpDYY*ɻ݂)_^ F.ьrt07nW]<t#oˑшDZ@ /5' _j_cAE0эXA4z> ?0%K͓J 1!vi4y?\ejy?MLbm"?u 5N+HL4,'[lrnPN>t P/>g |9@/ٹXAVO @r)s١gcM@3G qA鲗w *xux;&7L~ūmE+Cx{NG*C-3.N|d@r&?iU,C6 30T AHKC&A! r =Ga-.$JU_ BfWCQ) k9rmQtV)Z BzuM)t/_3? ;7b%LgfɬOD4guoIqCciʧph` }pC9pa@QK)DѢK`pF<}~Ӊ飉落H9іϖ]t?>"7֛ ebCO3ddYR;p.ϵR3Dbk _2k_d<'Hb8=/@/FK3 W+Z%kEf;qxZhMi9uN>1ȩL RtҪʊX -"6 _QC>ނxZ hQ BLY?d_jP4]OJ:_Gk2a4Snsح]t^~{R _X=i셜5ڝ](FiC$%:ǙHy_+t#2 v|ED)t0#-)Bw 4|>@9]&v]64 dSKsHu{jM.TNi?3+ﭞL2tq; ~g$6Ei,gv5!N-8s^%j]h\$ K^z0VڵْM/ kPOonl%E.>mM=CVZЕH7;ۜư_{٧ CY~14o=QM/1Fm'9DG)_e<9=nM׋Y(E .Uo2].n: M\)I9.@qaTai«>LV4C#2|LAZ e}@uΧ>Nr?!ѫw )b^ڳmI`pζDzEXVF–UYsg4zhJre+7j.e8$ZGGy2}7 *~e ek]Lb"K{.@t2UtǑξKhu9b`R:q%З¥RHd %X C~,NXM{#}r 8ɇ! 5qy@X.~]aEH6rĿ{7:YaCaOwsUPSl)bsYEd#p?pjA2؝قCʋԮ=S$ZwcQg~bbZ3}XgR9Cfr>O@砥Gdםh! ?F l߹WWxrfCGCʹq#Τ{Mŏ jyZ.%>N>:]:oذNT,EEgvQws`Υ3rd} $ٽzseHd~X,+Vؘ8F eo5+yеfz1,@j&%7S|%M@z&Fix00!J%Â7p6U;}K7$* n$y,ʽw a R*v9Fl*ӭùH<}80lS!Ϭ=,"Qs[mO #k?9iqNwVާ{8m1KO#FBƂ+S;*K9;0a7׈W0=l ꮌY8ꁌ#Fe%@auYH"z:  ه5z#71n\p`>ŭ?p*o`m|[oچFu.ud#p!nfK& S[g܅P @? eJ2n4WC*#҉B-v?0gM8RvҼ< 5H~6ǓOxJ]F7^^/0Ti$R>p1d89mAm:Z8Q:K.*(J'gZ$4jT|>xpCR Aִ.ӟOTDyńkL,u^Tn-2nWY İż/<[1Թ󑽉d9KH7E3 u]bpے;=uW[l Bͺ`O\ #SN@v[-f'\*+یܝ9v^C B)i.}uRtgwGCs&w޳1O6 cdp$N ! mi)rM0C/Ԋ/Z*1  c31_4~3w#At1UH5M-2YFZQw｟ ;]} %.,ϣvUBRY㒝xUKJq1(I~dhp2sJjkan&51Jؤ%baJ թG#a0!#se>0:<D?SSqЖe3je[>y1< yF|r,TQHMhwSԐDn限 Hj*t#@NI1y~{:kNCs m}/Tov(=̺W>%2atl?OJ[3R1{noA;"25}ZJaXZLr,+( HO:0qUH{}z;8˃A)rHz[Ĥ5~R0cOA}gs6>j^녯{Z`"(.bA G1X}*^Nuz*Rqq& ,,4V>;x\kSB'rZ V>Jϟ2aIMLkΘ8X 'xAdn6 /.znEϰжߔWϦ{AR@y8\*E@Bt`j1 |eјfwJMlnJ-e"//Wހvo`>ׄ[#M(OeG%sI ۼ!k-O-bT{N$9bmIε sMr=.OEiQ8-.tX P ež)~9- WX`UOS37FyQ"R՛Z>=ìTr~S^W:FQšxVm؆° Zq/PGlYQ ܢ9Ү LjG='V@δ:UQC7nO*ODvK Ki]J5l;M#E`4Q26}W4 ً`N$wG ,7Jrm`$[=:6e+xoeqlo$<'Dtn8؇PIl5v?92J[ FU$?y|ā eМ tT܃n!{w3b@W$ج;BI-8⟯ }^{][{nD u2!B5kZ76 ވUЀMWB[qRvĆ8dphk76>>bVB`d<~ܘ0#pְԖd3򖠯ґM}P i*Hc7R hel "aFԳ&m:f&l92pqJ! +pLPA 4~c>x _3hI53YIXt%l+Ud2}V(^<6sQl 9r' n%%_rsE'EJC|̭PU陱ړc{V4!p2 Z7\hlIl])4VW͠`Vr+Ma;OߴK"~ŷd^t)@eM0Pw{p9DSm$n&,2KaܼX I\(5u~&8M/d+L0☱rPtv|4bm|9 x*NLeg]rW-ҳ9\ermVM}Ìݹg|}t`nCqoT?A϶dq$Kms v~"v(R)min(_mʋ{m) ۰K@8RcOk֎t960f OT?gFͼTұȇ>#Yb]!ZK8v43IB@#>ӅpOx? BV̮GYK(k!UOO˗ FXrPW"ڈ0kۓKCUQAVIQ֒9ɊFf.xWB4޾;S훶F<}~55 tUQҌ \.(A^;,F-6Z N.̬?+̸0@Kt%h#erN n-(Af#lِz@]K?$#Y:3P_yvAAgM|Jܶ8`3ޒDa'QӼJ}]Cs1Gt/g5CxX0(/%Rr<<Џ) ~b#F3d ޯ]C&=O&5ZY=֍cNuDC'/YRO:U&TdҦ2b)I4zWK5@X'/2=iyLYm,sVMwQuesFyF/)FÉ' %`9zX2{< 3F ~ !Hh'GLFA,bf]eR9EMgSP4AHrqOaSVR^ӸF7]-xo,C W9pJMëg|>Ģ,-KQfɭqN;npbb`AU滜!G/֠=N) [F]Ag/Wjo 82sS;$Vim[x_+9eec,Ne|*Xi4gdb(st <# -ɫB3[uI$׸IZjhJ䘧Ղwsn F]y9is 7=X;7A5vD}Swpjtj(2BFϟslU|pMK0[X]}krL_ $tXSK&\de)!q_$zT:ɑ aپ^n87= mېE¡F1mrQ#ik #g԰9#_' ߭%ؼkP`YI5/QS~BVt_s Y-ퟆ \jE!Ԇwiv*;Q#t蔷(} Ӻs+*  ]9II&F.W:?6D9{M9Ak4)Ik gKEW7OYaK?DbXHn JRKItAZhlyMb|p4{DV9o P`Aup󠹭xIzU`6׭mؚ0vZqKuҸ L_˘JB2vEY0|[/M- Ez[HGGJ3b:`V r4m`wJtɢ3CBCzźH:?UhU e uO2_7Ѐӊ! +D)@nzO!-g?<*i58z'KmxLko2q+5>g32uX*xxƓ&^\>Cmo= < k c/w[޾2E 6,2. uO^=JPj/X? 9u ֵmϲC̳Cu~Rgaz %l6{?R "l6{9c0suӶBXY2IgxIIpbl>Sǡu/\>#Fǜb.>̈́Y gyzv5"Kzq;83IGv'dM!'r6Ukpz$`(5 /JwaFGKJj؝kc%"20>Xè]QB?c<0VFHK J^1p_lJksaU#t]$iLW: B]hzp" Hh^sTWg/B6kZe]<5kbf"2vw9tAfI?vèI)^fϨ1)C"&$үJD@ʈ pWLMt$Bq;q_͓E$$_-͐UhC9 ^pPh HPj1׋/~ltn1CWw~_T:.gAwx#pD-c79桺_\gd ws;9a|.;;;q 8vZ< `Aph GpW^1,Ooɯ*5>)BZAZsR`)3eRD2ETFb, k+1zQ(@fl#3o?3Q~0z۫4}D[]Y',aGY[hcANf]DDZq83:1#W_Vv4l}]a1V<1f Qw#xL9f#?n ~Wi GpfHV)q}қzD< m0Qf!R5te>*BЛy +"M?GSjY$y?Y/V Sr*9qC$@r-CC=N_{rTWk-!(i]<,Hso[hn#th׈W+>|Fּa#T /0ӊY&'q ㎒xt.B;.+~Utc;~Cz[6ݐrZz͔zЧw7`[TD@m[P˙ϏԈ Kp7 ʹG[՛vSoPc| Nd?8SfN, g2ek|mN,Z^7 uY݈y(!T 0nILU-m$=6pi Ȗѓa  72l-̠tx8pPp@*k6|O STȿb&r6. cFP}QD#GoWo9y1Zv$f\tONGԅi {qdƓh6PJ i Uw&+ҚLDC  |7/%; Tj缢=Y1}];m^Ehb<]D#CG6+Qw՝F'La- ͭX\]t eRE L`F6O# cb3/$EЅ}0% = :W N*s=< ;d4AHJg ?R<ݯ댲󶎭oI9䴘Zq)$P/k. ?eLjFwXW39Lh֗DY^޸H`u6':IBCYO3[UpTE2FM-Kol?UZ"uN6= V&~Z5ĂIrccH3 xڍWR!;ڿm="s|>]u-A`W# ?Y ~$tI1+_ @clC/EzAoP|KQ7p L3ߡG\;)\XR&]w+CCNF_.P(X,Q+zGA {m5w7}c< ߪyCY_foچ ('uNac L5:W mv M@I+%PCz}7_#. U8Uf'gFK$VLA427Rds3Q# k_T|~Q{ `'_8X+֠bįe'nGKLO}n<<[a`we~&g k+[t04L?z6IK{’:K; A^y\VA~زyo`@Cb82Uy,f NP+r;L@qʳ}&R9XFO A.A`DՂtkwR[:@ZWyFs=OؗeP'Ѯ5Cq1?0 2W'aM|qEh[Lz ڬ^ֱ{O{MW煫teq`:I <ƒeJJ]y.q7Q^ AA}R|6qc%/4ʮ%//ber>٥*aTYr,LۗV<& ?f?ǽQ[ ivi1o j=wxꥸ5!)k+G4f*Cf::"=2`>%@_(x7ȲѪBvӱ57n Tg80ج|9&vO{y@zV #}$5|}l)7' 1"pZsܕ-4ԟ;CqwM?*i!WM58đV01a}0l<٬3xJp8]BW.P\З]f!} 3L7:5\ 7] (DN1d`Qsg2:hRrlrIZB7cm:~M@A컕{,qtLNgTΙWQ@ne!Yq$YڹnJWbhw>vdjsV6{Q+W cNI36k"˅|8`a–Q3y38Cj6"&C>p۳YԬh9# 41HR(歂q=qLϺQ8ƛ`P5VS!pQtǂ^?=t%e>6Y &`Ece}q{@+hלNa:b\cհ ?74U8h[ م0'"ͫ87#l$&2IlS|+bmJaȘ<:; M{̼.R7;GCR&:IQ!r}m58jo)ǣ#rj*N_y6^M :}#jÿJ\wdtaPM|!rYt/ݿfe&{QH/ET/~+١>%zEg8K~s=X(!eH,j,0^L<>*oԪNv K2A= Ikh!]̺YGe#N1(%UVIt֣kΉ֑̣# OB1 ;uovf '4N߉qT[hnr>\gY:~[V ?.KRGWQM> K+#P܌y*0ZoxfJ/A c(\[MҐ6_:~iPKCAowX3?^Pb;rwvwMI > ?Z*]L3Qm/^BD)2E,T(ߔwPc$"3[yɞ@;^ -@ImOn')u~Ub_P8Ω2z kt)!}SqF'^WVD0=hwxy31_rA9loudd:,(CW=υ"o !Wbd{كh˼v1I^Qn>ֿWGmnhЦ@Y9z?-k>k(e%lgm> jkli2PrHnI[kK%oxF5:%qٲS/yRbսW 6гo"t%0m#/BATTLXMC9쯐ޘCT񚧔.pE O.vOÍoO0o[L3pVy؋^ܶgƈه[lVʹ%$EL אD;$9E0R-C^C=ॴhTX$AF!b8[cD.,M 0{au72CZRB;΢ع\Ω9S#c_ .^?,W'DlP?xC[owLF-$;mZF d,eeh.ef-|-PN$xRH̲+8+yA jYほ+R|U'CqIn xu6}tݥwT#]Z+n;OɁ2`t&_% FR%7|fVWM[vP~k \.i~C'mxOeѡ"U]pL Wd_wa[:mj!y..G`Ld `ٞК~I :v ~sJ+k Hh:ӈ%Eߡ5n5F3RG-^3fAܔlS̵]Yyp[51֑#OVc-]O{w@IkuV{,~%,`E!D^Uiэـe:O3+ݰˡ?c@*sm 6:eMx,6 ;Qyu/Ql|0dhҭ`.Nplo~ 6ֺb蠁4F?͚"T_[%jYĉZ^Ckf w:\1,Gg`5cn1:\ĿԼ!ᜀy^]U(⫼mҫC`F_e"_WѲF|N8#-ep,Թ2IwI@=Z?;]#0<L>MY>~숣Y670" N 0X̞݉4Wӵ~('ޔQ 34{ITw`d(Q$&C5߻JXɁsaMYBT|Dw/iN+IG1$ߐ{XK4W@7XXuyGWW5t%hg­gzt)?<:qգ(m ^߮43%OǹgDf:jx+] kkBf)/˄QQ?zcW^ېXEñZ~'+P0q;e Aŷ]2=: NH' G8rȰO LY?%V$ 7I6:kX-ƦH &̏Җa xش)4#L2/5G4<#ԁX(Ao^}3bw+ϤV?%,74&гA} XU_tzȃvœu-$H8/ p߈]E'rI)/ipjJ7Ed@O"ҼumM^e%&*+i;!2dJro $[S;xV;u eL^bŞ*&yQHqdtlbL.n[l%gY7Su12b 'Yln%4|!Ij_=vh*-[{^І&~n#\uɋrk{] I'\&܇WJ]kJ'qKIJeQcwJr8ɉuM5:^͛ n;=$VscHD=6j4LrFrNd:vYT| Qk?~'lE'DM)㿴0LfAh]baI|S-. FDoXiT[bk牍XоͳXǨ_ض:|)pENGt|zYhSF"F 0Gъ>pВ([5bhoRQb3}ԭ)U HRp?&KKO! c B% Sn +6E9˫桵XYoW jbrUnhFeB||31Y e~$omQ˕+ Sl딅fpEi*ΧJOt;܉į1Z6j2Is[ڡ̎kFǣ8wF^΄c\`l$'[&u$stl)3E-BNӴupJ G!|'(@&}Q{=]uJN: k#_{L*bQr^0'.z^pil[NL{H\p=' ar#2k~,p`j﫚1I?]IOM5mhzqt=A`ubmW 섽jyUaȒ!醍o;` J EȦ.rԍjĔof}T+N[t/} Os[^QǸlz;5f٢nZ2'!$lSl_b  rI?G":|Ld*9y3-+ %5Xv9` \q R|<93je9Jauv] l_D?,7Ԙ P@RA&˻{kЄ/./=KѦy6{UMhfmꎍed S`ѡp",. l u7Bm9߫&~%Y54oJK2ƫGc"Qc"faImٰu'2mA֐y};!ě$gҹ">X"f520GHMH)(Nb)6A[6ӊH2Q)2ɡуsKZ;qPgV@V`?q=Rit SP놽h.V"t3C-GPKmoqWBN0H<`VSv=%R+x񠮦-0l86$̷ֻ^Dp9[/yjK^2)OU2񄑒ulNE)T^ļ?nbȃuL:L֯_.^ہɖ lDCtx>=rjFM(?}B-byf`醲ZB]B6Bϭoǯq_pOQ~'gڱZH! H:S̥%Y| gg'LrPR>yړt s)m+5UuG 6v'_l_ށK'puB,7͘+,Tи.$t9C(nI,QU0KU}ݯٽY2kEu\3݌X2q6gOF]Qs^f3;7.5,UG,I YbMu ;R7>+AuPs +lw5t^7kvF akjwjR`9jRz8.{UnBU̞U iհ h~ ˏIMW)_8Ws~=ɢa週YW+@ 55ag)xٞy(QyF/`zJ:;n6/߬=!JNjFxJ˯"z$%?<ۏ u!zxCa`FxPK*"ya?Izwu)6xvgX.q–~`NA8Ə e< e-,c%,ҫ"lut 36tS+8Y(;54pX+sb#sNK7E~c׫w)`轆.Eb'dtt mUSWجes?kIC mmJxUx~j;Ty?5}?qcL2+9qɫ^ք8+RW שyznAeҡ QM:-񕷆^kE@fFTy"4;1`ߐHe7B}D?!5TXD Gs}vUMNpx*GV8T4V,-.'{W=CdrGi?=:ퟬ(IǛV hᒡT5eqS]M,j%Pyqt~@Fn8V m shukiZ8/5-ޚ8N1r>Sz/Yō? 4m쀙IpK,!wiOo;H"O)M0^f;>H<؝2*T sݻǥ>r"~H7-ty\N pm ;tGI8 ݮ錘piT2(IED)CAsz_ڶO7uj=; l\c d81ZmgAS軷]*Qy$@Q[ ѳXNEXR(svƘ^;϶O4 y^ Cڑ/9 3@x[8ZCx&WCl:fJfh1MOu)nn+1#-ye^(&l|E9,Xx[@(~ Jr{a#p.\B ߀r`r 90|8$ cI6kqo1Mʎz|~F˼ۃi[qL``h3:'$sF>QO>B_{WW>HBy3]BT l5ˮYHepve4;4x]G٦"_@;* ]o#Ў) qI| ڼa Ui>AeN:Gya)F@"X';Լ4l :a#4 me)Vx2G(X)o+'$dTI)󸞪SK599҉~IQ6bM1 [$yWҼ,6c;3g)^(%0<'^".ޢhMӎn@¢ysgajMqb2v4Dm];C KŸd1͕-)[IG1M;wG8{1#{VswkLMg=Viρh9.H{up6^ͺS[3S[kλtK*нIZ?ԁ98, {,W{ն-/_ƙ,1 囊SYvL6O$u^k*q tx"ˋIY덋ٳiU;ͺt3Mj$L%2'FUE}]N#.)jkufL2%2 6B .P!ޚ,18,J2{ʮto{> ,AW5}4{EښmsVͷ!bEj-a=2vr( [;،U1me!y׽7;p5a˜/tD.4"X={|D+ v9] J[ '5h+hL:lF+{n$+Tu7B׼"/Z gOkΟ0XgK2wT(fs>ʿVQMW% Gh|x~ ~SI'bkd$&E Q!H@ajIOb@ok>V&"+,DS,=-H0!?ll&줄̣WGuJ×{=OR))KW8EcG{G$/< bT< c\ƙ>e<j,; 8\U1Rg3+c+li(XNj뾡T* H,6^5&"PCƶr_xӋ([xuuc[.K_l]o/PϬbd\F.a+%9g`?ђ?uHeRi6ќ GQ9A![c9R!2-i8X+i!j]m{j~KS"*Hg'n뫖6u׉K 2bd{L5aZfo_cӁCh4r:i#FT1q5ńj5dtqy@8\pk @E Hslp ̖w`NXn;AυaEAo=ޱ>]j8DJoyp%434Nl{盨3X贊e1({44 #|֘kѯlgDsj`v>w4ċLL3#hv#7Iݟ#?MOҧUghC_/'OV AM䙲딨([OeW~j}:,|6Q\ Q>bʮ!Ї:I#sH:YyjѰz$4cϰ;Gͤm1:xnԢ2! a5n# 8/*SAc]|]}mfog;D4󠟹gh[FX4Efi se9U0Z W+@TMu^VQoŕKy#4SPsQėQf?Q9㕄WF@`ǁXi{^<ɧP~+BX|Z+!*: @.)wX@5_'1߶Xt4]!cL~\ڒ֮=!ïi$i\6HNB(e|[5b_-grVg:.Ъ>Dg2n:Fk;@Z>Gw{y]*fnlKZCfY(بPAЩ-H-6vNj᛫d^|)Z?9hKR@ x¸W1:Tj{fμ**_v`%,0bt#1ME 9]=Τ 1;0K 汜 /C;ǯ(=NW=KS'R*e15fòc޴_''.M:o@2IرZx_#;tc (t/>'%yMmM?TO{(GA)qN%,yNh.PC}"4>=cвzܿGS5ւ~R@2/۞CJaTt0D4n/U00s+US/lmB[á&sr9p8Rp3CγYa❁CF*ȿ<8{:a*7Z߄ˡ]+a)ivu`YXKz@ٝbו Y9`|%AGrepٹ!#q冷o-AA: ՝js.0~*َBIbMaNL+T=Ό`;&63zP<'^a}P<۴F2cg.0FG?kG'qx*c,6ɂVܗd-2,c畛͙/ac=Pk* Zdѣm) 9Y3?Ǥ{&w,tȶooKK6ᇟ@( @8R^7] _g쩂7,10>.FzDqg+?Tjd^q\b=v ica쮞,k +u+'j[cEK}[6 XnОCK'MrQN)ʀUe7Z\(mYpjR>J5lU|>1߽c{5C Qeu9C>'w[G\W` G%nԀ7C,:O]:$EHNDIE8>_~VtpUϵy)>KLl]NӫV_ݭ} SKU}7ؔ v/~<7C<ɉXC}{㣌m_#1ꣅqj1\0,fxdJK}⒁ՙH.JNKP+7Ǟ!1! EPI+?tWA3tk7k4qV]9 ɒjmO40cF9QͽHR[bH,3 NҳWW36pU%]C@,LWKH' M'ǧA';qt#ܓhNp7uU.{F4B82eBWĪ5JܤJT/?C< 8:g2NdʋYtֿa^ppoQB(SP[&x/|eK|Ŕթ9ZF[Rg/Cť}[iYnR_qI.~ƿM"kt6kfb- zQz`\p/"+?NTչ \)!z#39߆^zAROB6ʫi3;sܫhSp$1+*ROvɗ( qR@Wu,uO;-ix!^'ZN[1)9.-7 .Qmz~b:l E:kUhu9 T-GԠfL\{GklZՔF#$Q'Vտ[u4: $){؏i\Y'Za2_V3V\ .Gi~Cc7sR,|DS%eÛ9䓴Uny6mPK w#옓kF`$JʗS*~,Je6HAH}GO͕/V:zwen,&]_eTN Nn4rx{ p=Rى<@]sP??2j5|l dd χ^tL n0>VViz u*[AN?M|u&yZJ ʘ1z4Cg0.5> riԙ"WxD6WWE=.uU >\; X6rR / 7e2N}qRTJ w~ƾ^}5 BzUH35zM=\yn=3TYw"]N!P/^T_#tȷn$En|77hǪD 8y<ۏ}vNwBM]Z{zDS?W|BKLf1n ;p`%PsSx@R]狢hFR k8@CbZWM*RcZS歵y,4|s:FjM!%pБp+aV,` {Gn~`m&Z:ڙszU0(Tw>D f=RiY/~OwqHt%Jdep^3H'; wߡW`d &H`(6N` ?%I$vTgь5%/OޅK#6~1R(>=%VBZLzi\ m'LRC o:>jg#N2%OdO! c5- )z+ h?T<p/^3 "8 pI`0%gƯCE3i$M2UN=@s2.̓]}0XWYSj.|Q0z 9Uغ:Wd`{2З n>_E D>eȏAL݈7}3:opp)H k% &\-zv𲴮W#ʔrJa(Jdn`YQ19c }"^y ߑp%JDLzBVSE]|G&/IDRq0(68z[ {AnE!v8{+%IAG69s@`l-<nj& 7[rWM# u DnR[nbe~p8[#ƙwnc4wgؒ$uw2Z"肄?P(BQec r F4gQMR`uKb[׆txBnBIOlI j5-!MƎ0FWº1{lNrD2Q+q\gh~j+Qy68np0]cV펩~'^MyLkY;q]XZz'Bk1 0.|^ w)(4C=$y,$s\CMUC:;R2Ge36G ,PbG e;үA48<~P܋Ӊ^\Ƒ!Y-V51Ӗe"S5Em5%P^/@ȕ7ޱ-1 ?)|v( p)/v˪iH' ddo]O0Z_uw9hxz 3!X#!0$00"~.󤙭PB [C8隆ڶf-v9㪽kvp+5{ \hR 8ZPqH`V<}kYOȶJy)j7[͏|*XxF#`Q T<"DKh[]Vꪋ&=qD.@Al?GyWz: -&A973=4pssw\"^^$pGۊCP"X'D 3&F(n$Kw-B{:Ğ}9"Ͻg-+VbUOdhXhb+Vn'1nyAJPiQ0Q?y/QaC}?4$ĵ3rԸl5/Sl- BBD ! [LJLcDϗ#5.C|Vn^ `;#01 0[ng|92$; oVÂSձp UPԳGڄ} E4qbl Ϥ$ڞ\[gӑrC2# x^U'sUr^qΛ;?{nlZЯ!_Pw:% v@2%Xxtw/5ҘR\fe'>_ WnRrV[3l4v|9 .[KJ+.&z4XKj*0}@sR|l {vTblނ^{L8O0M(یӰV*hUy-']iIf[|Ɋ&-W,K93# rToƀFN3h i|~. &d&3ЇoH ГH"K"` pnhY"#UR02)(u ~gi]47¬,V0Z#=v|4r"Yda8=e#s&C҆'㟌K4ڵ&P>1L^y]u=ڠ"ݑeUb,U'`OyXtC^t9MrÂ]$8);4 v2L5P^v&R0x[H RaHVÓf:E):?ʏԺ\ 1rBC̎40f6g=3.4F!6*Ue(ȅ6 P>5i -PXFdߜs1~cahwhA |JXB0ΟZyBϴkwZjA8;]Qg@VT@Nԏ3o5p?GD5NGʙ=KQATs.e72زFT|siu$xIn=V[]07HOΓ!\!. ZB6hXoX_}˵5pԉ$s'S`8."d*Ea.y6EۥW{/Izj_5^1^@~de'/>_A#KBky`;`\0q#Sَ G{YCzJó'[왛ѫcq3N34 e^5T)hOR;> 5cMb]k+!ŜSw(tqpd}US k]q~wYMmD= :Z׫ꅓ>^Q%mL"[͌ia6`y>F v(ݭA}Pjސ=v1MOk+C5LR['әZo1u\:1[w.27HKPq,2R t]21({(@ObO'ɬ[.뭢pޜ&!D9Rt!V#kL])w܆GL3•iwB}IrC=auD&x = /CӽcPM}HIErn7<6ԟ "]ʀVrۉjA6DxYqfISƬ {+`v=,RŇC._?4$>:_s ʖkӅ b) H62S5Uh圢~A+ /OQryEmZObSexPno DQpaP=* \ظ3 B]Hc?$ksoas,R^5i?7گ"J;SWvvktCzˇs GXncJTXx>'h}q"[?kZF/]#MwpeI@]~Dެd]^m0tT{_XC; 7.5\qcZOǃ7Z@6@p. }{#T/0i N!*È.$:ON!xA]=6gQq@+&Isq^L)RhM :B=?7xA|UÉ󲯀l3+0+g=X")㉤| ;1K >]j0W(zBC۽-4E#e%Lu1ivzf:Aߍ&ZEW< `H9ʀ^s!SVȧQ2eIjl)z`"^Jk=(BdF^K?&jz8:^Jo5I?at% AA~{AD dw|j"'+55[<_@CU~k[~2Ȁӵ(k1d5|29 Oa Hmp4]3Y/3JBRmCU}CZJ/vHexi"b$Zj,{Ͷqf4l(ڗ3}z*0ۢS<)(YJ zOb m4NK~ 9W'%{Ch.ha L|] 2v+^}x'cFk; Hdo:)ܪn z 'O*8`nydYA IYZs9( GSz3wf(FIJ\|hUi"\_bb|cJIʄ%Nus< D;>3Ư'< [c9R]\[H&c ڼnT-Ð$%aXXV4fkL'N91ͷ9?jy۬F@3M Ѻk $IzQXeQ(Wl0b¶L@^m4UT7&@S;:g`/3j$0J$~iWt. R {1 SY0W,= mo@!znV])!ca]ZNt!:%vJ4\#%SlzVs3KL`I&z|Q&ڽmB A [~?f?yl\M hm-&b3 2P_ɬt=Laf07(ڳ1" Q)`GcVr;6uC!Lsx:_H@M׹ uG4?ЉBSy9r@5Y͐7~s YPTf;l~TyR&Sـ'NL>.R6z/V"!yZrn츹X:?l={j7ϐ$׾0݅Kpʬk)7@7ZyϥUiz !=kT>iiy 5@J0H_-[ɩzTV,SpقTuvJ- *O+~`2ڼ>= JF^ {` aXd~%j*1\[gH1ž]}| ٿ:_' = SV{݀GE.i +h^' SD5sb]oC#[X vw?IŘyC|u%a&P;4ܓ#cDhL5M)FuûЉ+Kg/*vžO+EtS(#B ֑f]_I.MZm}Lf}6uGךݺ`%C*ic # Fg"L@"dJ|Mn-ȔZ-D"b4o:Y(ݟ%zsN[aE,BSC IDMrIk+)z5 TLIpcɀzA] }lb2SeQI< #b2odݝ; C Kz7 <lj8[xA4 N#.C. cY<sBln|돈Up_e?zgsK]Qh 4ߏ=qmf{/@\P#%P#|[]}i6&|.zZ~̘ ByGDP9욙'6Gyڻ, =o#i~2SB{XgCT=wI){[X(\mc6ƼԒyfY'AoG$ cg9Lz\$C a9,"ս殮\~X*)<:V*ߎvLOb#' R(CN@4ہ_}XnA>sҵ5B"4uİUn(De/=ά~M‰Z$ٰ|#}n67I~QT2Swnus?tl/]XsaTL :Lδ#iQ[ %KQ~.1qo}? 6XͽJA2Q_(s:a%9V(* D)`*t0{Ä?gxmv:|1*l@00 c)N[{ਜ਼O:?sfNBǞn̏Rx00/'0 `nmy9JtK Kܠx1g+viK]r3uW gTe-#垸%BӆpQ~JGfV)K0@y[*U6{})UpACՇhQ:6Hgd/a]9>*ٴFcm!4[֎t0¹N 1DyK\*8l0m+F5¢r`0q6Wj!TF/b]aJl?6puk0%g:e`e6rq]cH; bp0dRU`tRMά"gmnE[|L dh)~B&E/ H>Nlܶ_+݃"A#5p!Fkֈ" Z4gjʌ8Y^LtxK o@ڸ"L!{_re _jMG C:(ZQb?)bsR6RR ʒ:|i!a" )ǪK_iװ i/-oaRzbʎj٣Cm.3DWt}^e.~0gY+os1޳Z&vl VDvW X%?izf ySTM-ĵu'M"07 2#8T@c4jv'c.)RT6qR 3/nMEأNN݆.d H#c,/{TNZi⁽߀>t`lnWOdڱLkCD&!`SJ3~zGO AaVfs1penV9_kA'g?PnAД7H"KoV}m;lly-|~7؉>$m4JrH#RDk+2hL R & Oɇmj&Ti<3̎>=vEpT^WRaͪ1]kVi,օ0B3"8G~ 3+`Kaņ.{gwۚO`g2n .8܊ H.av&r0"n\P]7&ъko$cK_둦QCfy2Q p1~V+dƱ8&If)I #F/ }/]'EZv!E`b՞ aXnٍ (~:[P=WT6䑺V=ODp* V}%En1J[zݹbxe#j(V["4X^xg 7=gk6YЕD)T*B,X7؝Ooc(?1xŒ y>=zi-_eUn`h F iIˑ7Pчgc27QmMPWCJ_.pB_#%}uJo:qC=)|Ո=9f!Aw&pY$INo/bօ ar0XhV|.Vr4Co#.FyR?jǭ>gvb9Ȝ)P$fo%Α)CeakMZyӸ|a+ǁY2h1Ñea\BsEۚj]DճE 'rn02,<} <v}#VŽ7|G :|pv|(ZN$O3xQlФ_Iz~OU0`Ssk?{ T^)w H s̳|ؤc]$^I$7Δ>Grx&pj(]9 "Ǫe=q"Q8=Mq)gFrh6  ՄvN8.^)bX\N6}q^ON1>`E׷¸Jը/-"ۮ&cdK*!Er3ޒq~/\F}\ݻ!4WfwN!>;_$YҌň۩PeN-^>!dh+rRЫxዋx|:=E&ԏPH =,rZ7yo^%hZV ,qQ'$"Ju7lݰACnV/V8FNlݝ{d4 r}2IP~`.ٝ@0e4 6'OB:LF߱VTwW#/N)i;.&_p]C~_@ 蛒{Y5C-nvs@8zFl=!i[W H]I=ˮaUN~-tR2fh nK2V:=h I`h !0 kǼ=JW PD1}uie!ӵe9 $N̗nc(2%:sȠ]e(D@7GR&daXH'_ R/Ti,I]dr1%p"ʎ FalS d$.v[sazR ~HݾƑHmoVuٽ_c\Jq!_^r4?p93.(H7QyuRv ֧SOcpsƶ!DsM#MְF vj)䎢?m mhڦV1Qh;ffR{rZJ Pɓ¢x_ѵ(3@b%x|mLuڰ&VYKD]:Lt)pGGS]Holn}yAo+|{gd#e{ 3ð% vB">^k<ijpl]ͭCPO\`[zr;0i!4NbwAW$ `9O&Ÿ48^ʠo Tehua|:}~3G10s8 x 44g|,NCq'D(ש~-}񪔸>=nU#{>pZZ xa^s) xvUgoL\EGt-T[} `,,eٓX\x <ēe:j wioN,9<]l7,ǕyN0! l7@yx5VSBP +*/CD q 5/Ь`ݪ/Wk-L:F8eLAZ\|N}t82~txzi仴\>3 $g(qR J :,e>ҴѾ( W r\یZx(BčFs*013^"J֕ F.و >Kܺlg<*v|'ăq+n#ɋ>64%W Z60ؔZ>D{Q 3hM)AJ{(᫿eѰ `1eoTR`GPq  dm6=Le`N*oR[ɚ1Iqְ#gE$- &74 d0 D fh'3$ZrkhJU<#(q#[tצ?j"d׼%7}BRL4|(*փ0dv 7?sc 'tE.*1 {KY%c |NwEoI>Q|6Jl2Wvجm]qJp(Jި6k^{ipiUx"ux1?i"ⳣ(Edau9 w1\Hܠ1'Xww+ӕ-$msH?lA{UF։+>e^QmO8!X g:]޸FOD]9R6X@)\9ԥ33 M@8% c?no|(^7LMu1X%:sjgk@E.]p@ĎǝO jmkG5pnX,WP@ObBqWB$2U@--A0-l7*ZZGVRcf鋬@ |&v>~ڐ !׽*,#Ԣ20{۹ N]tE{TȻ2aw[aUsh B79Kr@T?iA2) )@pv; }wdV[!Z?HZd {0D8R%J.\g :krלRb'*O0<^,pRF\vJu'mt c~R|0LD%%dF(jdgoU( d6QؕnYݞ4c1!=u=-'.I3mQcЇhݕ}D/LZ }2[δ嫶 zt+׸W!&QPޛ, 7Q菇~IduȔ7A7q*y8`Xw=3T}MǴ[ vwY&8Ʌޜ7';(MbW;,}mS)u=kZwK\KbX |D$céZY?Կ5 T1͘Tέ6vl` ! 5{OSZʗE^[Ec#E"}=‘fh 0]xƮmkڏ79'=sLrv#06w߲`2􆶄e^_{$1o6]HYl~=SrXzWk H9WP0g&476W :`mܸPO6_nFqjc:[K:&QSIƖMhD<\ !q{׮ܐp wh+$'I|x4o<:,[%u~>/c&{ZXBp\ܢEA큸߆l"Zd7R'GP< Pji["> #~pY!f42Wd}_@jtq ~~clk&,rty0rq7S>!&\b'&eI !WCu<.1bRv1z؟%saV.ٟFOWe2]bmjj`sa_Ǎ$nf>n1xۗt=le+Bw6?l ȲeGܝxm |>d{g.beg&i~#0ͽqI[!Oj'#XڢzY{&j V֨:[W=77=`_$y|:T5ot 8QY5HǠڥ #Wܦo- ıAxk4*ov=r]~^Zȅu.٘g =obAoV.n2 nBwҞ 2>ZjRuG5dS",+s:"[Yjj7`s$U"N.'hV30 B5/V怺RgXnds\;o`GzIz yrnd@upJ&xc D:3W*+QQZQz=T M%h ?d3ThJݠ?d.TʘU6b_Om+d`2_DLMp7'G^"[OW}RY`q4!|w;d e4|~{wj0<$;h[HSyT6萉J9}2Q_Le׈8"Nr!țԲ}60D<^q0irt1kf5#BܒIy-J႒cڒDЭ;@~FEgp !)[as"ۋ ߓ䇲$*\iXH=ez-\wZ#Z 5ծqU%NF4K &0o;|.` Hy̩j@w'0`q!,<1g GG6K/xbsléptŗ_FEvL5|9MFh'0`KO߂AI%͑~}a` g:Gϵk;צ:xU AC k\B<  㹐O8+KZ.N*+q:3)ϛUtm&CJvqzkb3 >!,S#\(ywH"^$f.q %T2vJ>W&)T.;L1'13CXƑ6ݯP]}h狤/!m\ǸP]ƲGFZ:)6.p#ԟy챀aIթrůkx+?R6"1 asʾ1q6_ vBOG4"[䃫rjPrJ]l6A }im}_hSZM!y󈘶OQ9Ay5֝5$nƫ;99g\1&Qlz#Eq.;UN%)v)yMLrJ I_6.W(̥yRЏm3 #Bz:xi(33s3}^A 6}vA}_f9v"M4Ufl}!)kCqGw>e%l>,i IƙwJ.,Gk+^G!jyk',$#Yw;MK/e1۳)}$&z4'K6/R[n2=@ 8νF$2ׅKqY@26|hY\G{7э<đKD h'TKB9O&S`Tn3:[Ȧ kE{gb0wk A8b;۹b|ݠUfX*]JŌ..h[ Y8DʸSX?oS%X)Ͳ8HW׽Of&EEJrdW{ot&\V+k ӊvX we:30)40Eௐ ŸVpd= y9}ZPM3rYo0rsgOoHƘ~Mu7wC.9qZFJչ*Yڗ n.ih[I7?UĊ2h4jSJ[H.Arkb_!"WÆi1b`]pFFW4F^}sCZ4] V!_*LU`Ţhk:Sӄd_a W?{j 2Ny H EObV@~ֵ.?PwCwG U"hAaX=Eɤh}s6 (V; :iYI .ુKZΫ_oHs;#|3G^3``AŒ3JT< OAw=9;\R;خ6uO($z.6}<2Rw|Y]gANaa8Ʀ}~Lrҫ]&>' X!(\1}/KPyʎl)J+tBߐJ@;Qz.u/&|ig'~^hOɔ^7y-yo9p֭δԧ纲%M%7zzj p1q{ h :+vw/ x~SuhZu0J6P/~>ｈFU*QOA)M.k,@s-=B_x5Wl^c~Ejgn hp9~6w5Z˽~@YX>E^?b*0)qI+B,wpls53ޛ H(b ׾>:cLc70h&@R@9OIP3-`Dߨ|6z&Yrk`Eu̇"'E,' wgiQ.3朴bJ\Ζ!b p.N ,b_qI(d Яhl2O% A>Uŗ2E" O|.v<+$RcQQ09)aBĭŦL̘@H۴ޅ]~.Sfq]qNWgo.܍:0'M5l>mYF*b@!vmeTjRz݇XV> ɝKKO/嵽0.i* !F&BD"+rSm /S,@k{a_ *Oj2ÞQ#$Qe!TVL{.J f4Ce.e-Wm+oٮM3,h>vSh$sy-B~< 䦫ٿWNf+p}W;_N?Oq(/B"!ƁB{M [,ԼvY헃xskeDD] 9NpEųK$ #-D0' \J~?{ҀEvl}*zu 44n1}]CL:R{)F ~ ]Ɏ3( *L6]i$PC_pj͵r PzIM{Z#jf>FKaf-@ o edl VN3X9t\GC҆S3X曮-AxPz`IfnZ>33k PV.vbe r{ Rc57_'U8h 1O5_O< $[ReKX^¶㚑S]p`k("-0JY 1<܍Xȳ2i;nB FNnaAk_hնhoF#/P [T(&CcdYϑû9~96  K7`#`[9<7ZWcae|XSd\Js9H4ei'wD0^}n_HZ&m-1C^&SoW@ՕOXi#NJ5O`W?뺮͎Olu'ܜTu{iS-b湨/>%0.ad|MF `Zk+/oZzI 3t6n3 IT`899u:kvB:܍̽Lz!v 5Xb{Q~C޽j8-$ZYdΌZvʓl0Ϙbu%㋑tD6Pt9Wռc#`@65 _fv&|rG^ZRV|p"1NƾYoOG;Orbh&<6MۼFrEr>Nm1c,(]ҽ|^ 䠩is쟧Y ; lt1UԻmzGG Eht#UޥH b?POJ\Odw!xybX.ri펋[¬Aψ6p5ǮzU_kOTgJ/ʔp_7PB(?Qm=S:){R8!-Ӈc_ @Mv77nפoad@ƳN eQZRE|#yj)|G+a6~[qc-Yu՗4ցó?2ƴT;y~1 Ϋ9Qte `*z\mk}#T,sZo97OxR<̋q7~>U؛= 7;ncrĀ-5Vu,I8o$!1i3.ɡ /0PN{o:NQܽ_Et}DD_)Lt۱54ڵG+"Ԥnry^/_/lE\ݧK%A(̀#f+ēoӒђlQ$| ;aLA MxȈuƉF&uj@sb ze3:>T]үÅ.5yVSPy셻] [؏VH]K]"{+[}~R!q A{J]UlfB'kW=v79'N'sEČZbo.NPD YM4Ͼ֚K#eҹ9g2!Gi fկnczA(xE*/\vD΍ o .HidU+ |<|(_pBT_>aө^]< ɷ0eX.6D4%C'j>;xlOoWHNA)JY%; tw[[g9qLs$S-!LS\[dIG, {Ǿý AyYhW`SВy Ui'Pv7,C;/kRsl݀Q|8愚AJ]PJ@8Zj>X&A W8YĈn&_o\BѥC.M&ud!U?9(^R%P] 뫒W;C1|U FOXzy8bNw<ܽ ~.Ηi$aN=x5qƖU۫L*\{ ݊>*i=wk*L7)+= ion}(>vwak a_bW1=TYJ<6?ν8NT;V^cᕵp"|ݼM`c80k"_Y7C<>1$XX~[ Dy4.ҴC `aKF!M\U nR Ǚ7YewNΝݷ9JzX~GlνH  >9{Do_Uᘗf 7.aG_DH3kLJ ʏp)6}taﶢ WձLThdE ;7ga,kX!Q;;kY~I{vt_~'< ɌVjEީ̧/ǃ,3#q`]*n#­)^n3uHHe 6gm\-iû%z'8`" !_hV+&>10E%xgMF 1کr Ƈ.J8 .׼I#:kr(Rx/0TʈE2χ A|M š~ƦP1X#G LwrX$yPH_ RBkC?"4FsD;N TYzp1;{yɃ_/q ?$cvQ2NIgಫK9O95+[ To߼&TF emPͳOe췤;%t߅*K8D~q@j54P$F %:Ưaw$]y=I%*Zw<$ U3)A$` "1;IǺwY#gVza(Ϛ[HJE} e}@\ދah*@{_'*Fd}[@`,I];,Ddߨ}6߉8,>~'+io 6짧˒l%C_ldoRX-A2x. t.$1L]v_+@>=]3:F`F ]NBKq8mo7|Q癮4HY./SmYozHŅ?}ߢZT\T$]xlxjSs#:T.U=L` 62-EXzL&`DKw3lYy[Ȭe8XtkvM @&QO_oaϺmeeq‚DdϞ:9.scGÎ7EP^ lS%K\=7a6Em툌Þ[JЊ6a(@!eig)"]06nIy׸NJeb j2/ ]WL5oJ45u>#J7[Ҩ#|90j`PL kf#е$%tM g'|'x4UOD|N4؏6V~N#x9NSSxV]K]5Q,pO@ zޣ;2 Ƒh opƄH c9!E[ us?GM6B`6}ay2R^~A:Zxci]e <,^ ui-9m50[#L`xȳ`o$UrT?>yeLgg+k}ĭDf`@L$mCpN:b7@Xu§K[Ei4a: P{oPH[z%ނnl?ރ#"?:dPd x<5JlQ%kvWz9MWPr0جz\S էRv /#guHd8Wwi1I?u*F1뼾; cH 3 L:SZԘ]P urGsBFqhF"= AB&྿v ]`Rf;҃ P O=$!MUPtV8Xt(E7HʮԣR'vFEYէnV $^U<؋#V E5]^)E31?y`e<ѠWhHus@֚vѮ)MڭĸY7Y'QY\q 1JnB[WM 9rF gbH>s/V3D^~Ŝb.^ٚđ0ucv+Plf^z`ѨE9ҮI:G؎ KJP))C[#5LOD=rpdb7,@x&k [ޔS^NS?@g5I./ݳ"oDsDzPlTH  Y{2 zDи9Yܵb_ue;b", w:^TX@zyj, 98]TTp3-9k3 ʊ]}?QEPF  ^d\G] ZؾH^P(-Qea/g30j654mJfPVr1 LHY{JAp~(Fu^Ꭵ o+(SNdeM]k{usPGd~4E"p<<:y DiKc-S~2$Cݗs2/PR#,SdmB㵿g^pKq+Ȫ@.9&r=S͎N VoLYc N{BE ,rXtп!`6(^l3aGt}q(Ho/Ƶ T~^0 W4lrQȑ E@Zdya_rn9_ Zw?Snи1E91]H?8ֿxU튝aKBkYT\ 췰2:?)3O*@%Kn]QmrHUTzi =ڻ)f/y4<,h=o!V漹g0=Ꞥ2SE>(cNJkW]od;G͓ܽE6)A s-MO-,\wc]5<$n( K@?;D1Ճ#w&$Tpݗ`e:t@ӛ"dA n`#Jp=wgWu{wfX`2H00gBT2+VO_7ò%߷)زio{=&0gjl+Ċk~hjSLPT7"ʳ쨊#xF-Uy[sV^h$;EP!faa(6>hZg4F~U%n:7 ۗNPP痃BY⛮z]tJ=RÖןQf[(ѡz?V8ٶӫ¸I{j|aBq;Ta,}+¦!վ5=$5棶97v̯ԇ5[X f4&=X5;":a:mcpHb6P;ڷnT* o߁8{ي!Om:^j-DlRq:o{r9K/ +dv]uvCnb :MEM?7G >oVtu}nf}G$ۍ7齆+j6[J1?[%μJ镰KJux3k:(2)!>]i|p.CwMA渺fil*Ua[/uRŢS}j:/,tbS.2cid`ONogHXaGqwpnTR̗x* nr ҎM4WܪN^`,: aiM$gtd"4X[,ǯR9/ 8>(0yB|M]~%#Bz:cYpKqH)@{)( mZi x4LאqG!,Xٳ4BE s| ?XGlo13/WY:ʲ=qIʢZJ:-DEEFH1kB ;h4줼IA7 fuYZ\x>m0X\$$9;w>{.ʮTAmP h m {F%<9( 2a#C|k[_ޱ?kHv 4ݗ1C%aٔhY6E"dvvS1*Q [E!b/ y/L-;HW󗠤U}^BA1^ gui -m͚FtK02Ի^TpnxD ^N+LCи'P|Ju"rAcS}2b5qz> 1"nJWt;ڐm\S4Tqj@ěѮqVFGEF%RC-Jz OnAD&' 螎WShOg&>F׬A@^m!~ͱ9F), xYz} [Xb`H:_%Hf:zix`ɻqtX[xn̆ ' b8-/={n#ss+[VZ6A / a&]Ch\EvV\$V' fwrπ\*9X=1dk2Y8̗(G#/; )oƈfk۪Df,6#kB@~nP}ǚtÏc>f_XVYgX yTZuRVS XRms_7 ;Ҽ٠#fɵ*/龬"?pVgG$\Y&w N34amaӲԭ&;\( |,#|cY<8DaZ\X[|ig (A=O\w H ۦv7X@rۈDKL$ 5Z' گ8UUq)=N]|TUfOSslQ㟗](IUn8/^%R>\(x4ML&RD.-,Y|J_Pv89RN%mC)Fq,fzu"Xh@ZZHY|Sd TW5@ȽnFȧՉ0m<3f?hw:g'Ƒs%TVmrĻ$Z$VY&ߓ In,;|o}KmR٬ѫ|2xr3UD+K!S6mOP 9ԗu_ZOygn2W]*dc@%H0|aU8 .2i).>lQAgo\ )C]NAcG[RPƹ̘+TgBkArU.Dy5tΝ=FHwM-2$#T6UMjlcmEX];jO.=6JFY@/#ӽa(i5y8Uz+-+=rFJ3!Mn!$7=A͋,15@nvm ȱgatC!1XZ-ƢՓ\ZvΟPbm``c"7M:%"SL.⥦\pwGx3ef% miNk6kx ߔw)_EP9&Yt*|x6u)߫R4 |e7<+p'FR?+ז!\4V}]DwcjO5^+ "O(܂wQ)޶9sۮ`z%$XO= 3a!RBNFEKҜ9 Y'ט>>/"7O\ߴ/#9ff8{9I@$Ft,#UlDGHJl2,Kp9(1$e҈U59B<@F I$_F-z$TsN1!APFVc@-4̫%ɁnNxW+BAIG;n5].F`r:z1??ۘu.:e"bǥf!PVx^Nn}Mj+k<˳"cƑFFكcD>8K^6Bfq2JƿŇB8E iG}oz]mj}ΛHv}gK& 7|HǿvڋÍڌ;ԤUv ,x{=\; HAkntB@`Jsk)ӫlL;tFיō[%94 $nIbheٕk^i*BT7M_lQ+ƃ j;pU@캎kx0ɴy RD#O1AɉaF'x^onj:/֬|%1SϫS;oc(R1AAb(p復;t$a^%f`y>=6]a^wӵ)S3_  x.N,"'ی,*NKE:tt/y WbDOVi*&M0)[QmmP# WWN`&s[@6+iAe6(KS8DZX^e3wNY8StF45F{Ah+?Uy<NkUeT4yB`S>섭~'}dT]2$&V*8g~8nf(B gQ dW#ԞW ?I ~є@YPϺr T7FkQIAVBv' cÍ1҆-]NPZI?tu``LkD/D04ɬ:مԜ^ENB"u$wvO%q1EKJE,'"C +gK,t֩MdB7}x2" 2H?a4ȜմF[TE߀|w<^f%'sbAU\ ӛ$Sk>|h|j/|tsUda%@"TT|E-#&˖ܼآQiplK\^׉ ròYu )=AN}U[5s/e^YhS SiOSN2 TeRp %AE茕;0!DOPVqUwNz\i ތ"IeE﬘,mXIcqňµUioɑNJٝ=́p >p#Q < Ab-ܒ/wn՟JoKѧkeUk$Чi<_xLmpӃf6ߑX.U[I?A^c g ܹ؇\nR$C-B+zX{)G>=FL_~R=hxr. `麘f=7~@m-b HbGc<%f{e26ت/TzHLrg'yȞ1*tN[Ze@BoB*9 fmMH'F':ׁ4  D:nz]nc7l=Tc/cQebBw)&tӌ(8 ;+=-0AK> &L(΢Lvq su556!]$,WK("m8o=b_aY$Yi~S/XJ)dvred!jH@y.ݤZ79+uB rGI*Itjnj/!H&( L4`kc"(AD~o:r_&3s[HG,ZfTq^i^iTRoErrscޱ#KU[r"5_Wq'6c, uR(y=[~9Wɽ|DY4}|Pe>p>S[XGA,|8#k<:{jM#ch+`sHKM y] 4Tnh]1Fo]j,I:ތF }x%u*HMfjN nϩ!Ӊ2\2Gجd#v/xne` 7n@ G&ـza%9maZ ǁ.u]I*d,_{lw{67 jtW 2/*=JK1) ׊2)uұaxڦi6UYuUŗq#cuvi܂O//Wעc{>=Rb[;uz\i@'twUl婢%iyuQ~IQmv$).ż2uVVya"[yi1.2{+Lolo9CDn;cIѦUT1q H{GHXt sX@˟^*P wvQtdlWsLAT!΃$)-ƁHPm^`>"i~A3+-##T6AZgY&V[{ʲ>J%($^H d4իV[I~]~RUz t]Mpͩˑ-4F&&){[v˚?F&HaYK1d[#j aF$~휚]zaP{äda]WQiۃO0uMαB/|} Cr^2=Qˎ+^7KC\#{ svk^U55.q%[\ƆIn;heȉ_pw26;nx(rP]40>:Q s^i^+Y ҷun2kؼ~ LAes~.8 Vhe߬cĬIH|R]>tBRBcPG,7TzY>fX)S8a$YKHF1A($Zʂ֞X$ԍ&iP[YLW+Xhv5)ii-{Puvڠi"hB/oT`G&-<wiđ3/LUߔ@u YU/ wb,O,^#2?pV;'p*ʔk"0=Bf&?:CG̷'M^(@6b&oIe|^IK|bePS z}ؕu$7ʠ<Qs8"~+XyUU#U;tG/p0Ȯy#I+2m@RyOYrn4O؊s,XVFGf J!񵈭܁7 o(0ƅSKѹf+mT!]Z.pY`[n-C=|ҞQh&^ϥibsb|WgX;3|EA0Q@u,J-O ?Ba4 ZZ VUƛ&cQ8*X}nv,bF=/ѯ'QN?Do7֩G[;ׇ[믰EĔ m;.즘d< YyZw"m- ї}+QπqVHёtm6ZL1f*Z(UJ/8k"W-0-o9nq6oFY7=A\Ӵ 0YCnz"L-qr,RyMhr,}SS 6 cY^YmE( h@Xą&(f  ӘYQ J0-f@dज़䡧hY$AR<֊&Y+v;腿|;QW;LmN]1xʸ/8*UrErĞU T*޷$ Sp !KWrG8!w0B YG5:W9% 2HO zzԤW ; On>ryV^tRu*+X断rư0$jZ.p8QDjЍ/<:]FV7RJ6˕ݍ6~Gm^x7|z(6cମ֥MV9D1i>,wn};Qpڸ$@[%ruQP&Q_ j k)}`I\Q1i}APN 7RiZ.~Sm 숗.|L"C!?rMNW%H!ʲuO>hY?H{Ă [Gi"ms\)d 1e9QͼbU{:;9tkw 0iR#Ez domUuhX1ȹ37Jcc%jNnt@+cye,]BYI8θX:Ug`Cpdܦ)A)*mMNB#a\* Ib*Q1]@J_ꩱ["cqpXlUvvk;i[, 3"Jd񪠅L hZy$x d8u" ~YtNK F&eW$bkGji쑎v O1̴HTXC.\ C {^XH`cj5FKnj%*6u17^+ ~;  ~oJBB<ٕ4B8OOZ8 s!x}7R-#W+Ժ8(S56ar[C!Y{c$O:>q(U|Mm[U6)q_lMkaYVric#dlDK ӷю>"4 ^%]&ptQ` "X杬vK7CTy+6J@>XRR< VJWۦrFO}R ?͋\7'??1k 't:6=f W$:8ވI7}onXdZJj}1C0QG>yaNSM?ѻJQF[!*U'g\ ( *8- RݑYR}+qق9:Pg^V O7*M;~Ц^N M{K=2 O O3Pu9He C:PR?V[`a/e##x׆廈N۠8s B_i1 ҒᭃpR[-I];vq)GqPwW-"ݜhlxR0e+:K.~P>o|1pehM C*E[cVl+\byAUDaY>8F?y JRynlvwb9 T{H#q*Y ~kF]2ݩ3_awx6Վ6Cw6e-od`^F>5|m~Sی/(:v#9 <_~$;d[`3J+?6Be>)˝ȂOuDyxUb)1Fl܆.KJ h~Q^yBa>G@c[lɶ _Mbwk%} ?+;oΎc,`h^S龕{/tL#RAw>.YbاD^ fJ,i1ؕc/%& !<a+b˲s3IT1%ا U8Д"iڋ M f??IN%e$SwbͲBbͧ|Uǘ-&ipf\-]K=JT~L擈t 6LmFfd-1 2XTצgg+(JwB& XǼ(T}yprXJ>85'CȻT.2T2s,lXwOj, cY/Ca߿A^!dZ"lrt~Z|_+C+DV˲,iՄF]lYZnoQH wU-=G95k$? 2q2=6[+hz?۱?d "1q8C,*tgrSp@gszbf?19[ :hlFWtc-}dD5hGjjknlg x<Ō|ad+Doo@xs]Ύ=<5ߗ]jȪDj~!}#|qM qnvl. Fzb덪>'J%CavZ" u\s u/2v>b:.DUa{G_7a4 ?c Z ?3сp^Ɣj= XvIJ#G>:ĝu €D+<ý\Q߼K@/%TVIi"uů@?};B=%XZe& M0UI7;BmM3GCD\*\Ө΍g7MʑOxf`Xi[v2_͏H!|KT|"S5. }$`S'n]CaO}ORJdNXɡ-)Jț40SȻ"MKGV% lMo# -nMw䍥ѝ.5SO\ő 3Rȷm,z&p~r==U^icR^HwʒT J#D's1mz+PbA=2MJ*8{ dRAϙ Wԧ$/UVlzR֙h7rޞ+%Oy,ee>{Z赏e9Q^{q0Rno7Dȶm?Z!zQxMqRs@H?E}&o.$Tl|`=*WA6s_,jV%i:~m*u3%tߙ`pIl,Ώqr<~rTjYѤ ͵b27fl̀?~=ڀ l<egb!"KWZ3O c8Kw i]i7L8#`V$tWE 8 OP!cn|?Nu otl{N2}/ҍ.J&j<'H>PU=Qh[@LgEYD+4Ĝ) bPG\Bytv^ԩ?/QI,l1|!Ѱűa;Cf)'4NߋQgx2rX {I!=¦IZ9 DgU1H+JK 8Wq1YnR]+0OfZBZdjJglI&zcᩍ1q*_̣Yx1۶r}1h\,ʙ -bRhq//)d^&?k .\6cp Əӵ]i+7'뒱ܫS0هm®[C}`Rz5"3Ņva@~ hgU[E!cd8s09* ԭ 7DTMCk4KKg}lqj<Ų)ۨ_9̡Sfͭ>=b~&zˆ:cBdѦ! @X㪯y$55=Q#̊HHymhraNud&c~oL UQyͼb56#l'|rB<<"KgoD<5Jd}# |Vx,@ נoCE̪q_\RWO&Oق&!/ f`mȦHUcSGdwj{e=| AZy}{O)N@PN;, ~BID(آ%aSwHH|wՅP!%:bȎqh->C/q1u#WRXUGMi}?q>yo2z$ ۡ !f(nPB1Dv%Wdui懱ȱXM< f˯2M":fnJL߼*iŊ\`t9!.59{Y-GHYS(` Klfz:dTOx91؄!;sZN ӏufpVlP[ȍFK f3AatMx i9g^BUJFbʗ z٫_%,*PL'Z&IqTQ\v(pdPüLrK1E)fqm#.~wY^Xe%%]l_ڀ=d@vPt2X<n'U Ro}'2(].ZYHok^EP8]7ƽ]; #IOE_F۝=->EN*+POp7U1fp&m]鼖+i _mPvо-ߕ|#޼4$QIaeeyXWRg}}%Ev@s%!$5!#+P.c;vZ M얪Qd; 8pi]TeL`yrDegϼrJݣϷ3֐`M2S_=>!ŃgIU|W|(NB<-mQS| @g,yQ*f]̷ϻI+2- e A Q\NDڍCmGxdWC4oG3❗uW .Vg3I.^Sr׌9c} ; xFZwc7R^"ruW]yjcVk߁pi [G~%V B4Xvdc]-MA:l _JdH#QeTin 9WP=tCi̯Nu*23 BS3rV"xE}`!!2ŧ\µh ywsnh9j]*v֝9AibYs)a:j_@-k0/[4U0Ÿ)_tz2X+ {W/-G`\!*͆@*Q=?yWc$Q'uF ޻ϊTW?v>X $h vM.Wn8ť%Yr-M9)U5iZv\d JFcp .Mlm1} =¶8!*M˼<'ח*;90 0ʻ1RcrZ_pKgR./y/C(9tM=ڶ'g@>4b#YX9R8'Vx'ڰOKq,rxGǤ#Z臵?LXΘh=|R8&-@/_$(wW Q^$J%?Zy _^Raz2k0nP:<:K[,( qV{T-I V*3!kƁ14w{t+ƲɄ̇ nix/ r!IM@vQBÆ?}(f)i'Kt!qf ғ߻:tDܰ<Ə.x4{H#L\˝йq%86dNmI*|ԽqQ*8-͛q1iM"64LF`S*2S9(jHnbq+ ((98!e#~Ix:5RW^,R!hH y]v{𸫳 E hUc1/ݧA\C(c- YdyK:Ær^0kB@+`֛Ct_BM͈1<~ѓ.BВl>$0:6V'Pr`7%~WVibYM e9}J\^ifҏ6+n9!L5cMB+ !΄) x}gzۿސ;|OcILeN'J;2hzϿ><20 odYZBvF6XĠR ‚&97Ӊ_w/SwW!)=M,ޫh۟0Ў5rL(#f϶>&;=0-O2ukliƚhmRԲ<^@.ڤpDirb@G%wUWN K /s/"ڑ?4-,:Ρ` /28OI݆UjadF=дzi=H֑0֑z7@uExKp1"1l\ фPf{H͜-S%5V$}Xκ`ȢP$=玚ywL%(TX#Kl 0tZɇi`c|#Ha|ZgA^7 @[*Zo>v si'ɛBԣo+Rx/"H;d7 _ckCz:p}N$ASzij.KKk/}$4OvYGMPSv#1b:mmaJ(seKߓ>LEDo4ezI3Kη_yNPTmƆԗur.#xpfqKHD􁽪 j ܩIӁߞlY&b26(Y{?|$pZnk̞>.n4K}TZӿ[v5tY}`qR4aa ^~>^jo= /ܧa8VLn)a`ӳ{%GY~,WW!IS%E ^GܷYG7\0"ZpqV)Xsdk*^j"0H4LЌĤ]A[s|ߪ? 9wldX[EsY;Ya$v -?zc3|VdGcefMwm)vnk0엀Bo 7$tb _xdT97y 휞3"Oѷeg}R9@3W'>lsd}]{GlHJr~ty>sګ?5U;Qڰ(%90X8BeM#SCc?/IF-p]ƪ-7'Fbbcw 8$q Lx<M.6cx3Q3j*A>r+/Ilmy j@pNHMy'+VjG3\Xs6L7C/8i?:eE9DYRCEm)]4iVQcޥC t-2GT z{;_w~u.ZoKIX &Ğu.ꑫD/yLs!Bl!:ߗb+N^eӍxA-~ SgoĄ^s_@Ƽ`ț~]ɡ] a Sk(RU*ā숧G,]"ѓeV^oxo q2Sv"GZ,@nl;!T&m>tO+~NfMٹGpOZ Và A~_~}p\nAB1D->ʔيLH[*wA@˛5qļş1%FOܸݰcVjhe9Ikd_k%Kx-CX=U86D^Θ}ׄDk7=Og˻S,x[ZQo D(\S1H+W2r0imLZSaDT TP7L'"8Gr%EWW޿WEJk}Mv ̩2YKxtG'EGz>o!'F eS6|L>tJX>`Y]m,ޕ|X`r.Ѫݾ EHoBff0lgx5yzfP'ذgB  PVr+ʨjb*2N4m끽BL=e#uUvR8c`V?!1ޙc~K\YZ|ncHduʥSŋh{*%dz9=u$A7$^T,YCgV NVc9/߁4c,/<ێDUϮl8vAŖt5lj (ruW"Qq*.(UBAXɏ 0$^!cCu[8;e*ѻ8yM,H M~pb!ӾHc:NR41֠"w_osUSTWh5lqGE 5 #n xi,zwCOy;4r =0ONjN7P۽zǮXÃs%^s v*G8U{C0# U]6xsq*X1+??PNK^BM-,T뮢Q+LAO̷ks㔱nRG3J 0/6}M!4udVSPCd!,Wi3;jd;kֿlD~9҈ɳN3R)85;p\#E(YH\2Ȑt؂vod ^O[ܮfI])SHеG$UZйB4f'4CWbc)SPCd9=_AWBr셿yv |ݖ/U(+{ a>JlY`ctTkmJ%ɧV>o,h0IO\B<J~{7VpIu}H>9>5e fcm6%jbtQiW>dpL'ͪ`#{7΂pF \^.U /ݗSCJ+]ʏ1C];C#-y NŴ0C1c,$GgD˶%'uD_t6% V4 3}N$/UhX#zy,oT\@蓫ݢ݀Z^tbm诵46 9FlQj5X^n-]n;8?=|x@1I!.h9 ѻutflZ&IWT٧q6i*`I'?>71Od5$hW#bM\wrc>N%G_B\fy%hAJuhwJZ.}֦jڒ{Ya'x"wnHfC'l?j"Sn7K\45 ^xW(ma.&F.V~"ܰs; $aͮz 1|v}FQ]x=qa \U,HK~@C9cr7iC䝧+Ee*jA0_;xFܽc:-<_P-e'z \с0tcw?MV|%61a$kZ.P>j|I); J@6 sJWLR9TO²7h .\6Cmm~Ӕ"xKS=p:dC"3K ]1cOyaaƋKwO?&"j2* ~7:o"qy4|qQc4hU/jUgoB-JxbG=Wy{RMx'^{TX)RX٣;"mY5a?k|2dN98=7܀ظf4'K;Qn7^1%D[''0\K<21.4kRgHhZj9yRv9d" y ~" TĦ)# @`h㕖hnbaꀞ ~Mj!Dĝ;>dx9/:e #"}* E^k7FmS.`;}ɚH!p+?z;|?; p@^k2h __a\&wn  @/ؠ%Q9ޥcYNd=}|acj9e*1#; W|(cP&]kMTqj6ٴp>NŹށ69 ô[Muc(fY,0g +5(/1N1q2i+>s@+_<ˆJny!g$z(;[7]&O XfcA㔰W^&(/?J@hb*`[Ν_^7ýPh3|h r V3G`7y#y },&e ޞ,UWOS)ANDV-?-vFÔԸvU,#ñKOL[~-ShŠt:>|ofk*X (Z|>Me#[}oPTs -b|PRoK M 468z[Id^Zletu,؟'S0F)-TIE|$~m/`$<1jSJ~'X1\pYo$b7tt"CR"᳙OUqU-Dx:bhыaC]d6`jX*:~_J.$Dw\7 &!~D.G+WClXJ*-QB.'.E4hpҖ&Jl2s"[c ?m#?@|=&בXRHL8: .Zn!ɬo vX,4M(zq#r&x5IE泗;,FQO6\0* #,]`}}goWd_[=ykύ}WTxDD>&ؑdk.b $951?ᔃ?)X}_RW=^*GHlEt8 Cz4?CFfSYgeNf viT5k7`_ʷcd\H9-q ,32Bo, IheƚW9k(avԖhd昚`bs=14kDۚڼZ-=L aql;+\$<$ Y$T$*IEe{73ɡ΄틡)[o/G:',G,aNb3'M9HtGJG;.7A4ur1v3:}n}_UbS)Le+Mc8QytpHQV uZ AמH Jw;)ɔ_c媁I>; -;28ES`Lx[osUNxH6k?#+atznϾmC#4LOwW?Ӓɝ5#tL94)}VL>,&r)IC2)w ԽBEB@pjFݚ8=/$pf#O?g_xlp/ZlVPIOoTPz""\fפ99Lmy \܄1 p :n8N Ƕ<}f˝\C)2dpE ..q5` Z2#4AL |Y({[{ajkDhv > q{hgPm%e|qjERP${"C#8 RJAP^1^$Vq)*Н@dRF>Rbt2'_}i9LѷcN /yܝLU+ XLAbSjE5 ґ5#5sn#mr+;[Kgq!NU&y?m=Jj6axAFpm?T2ށ26 5p?}`g5r'yȖ2L-+ ?coT'͚|wanH / ze6x $q5;K @# m\Ʀ >5:i%;@5^rG[\/2a$l=im$_ 'VQv܁=olm¡䷟m"MFL'%Z2 WeĄ߲LL,o3PxP Fcʇ2BSy7U1p@OW A*;5/N]XP'oסQ9]g%^1.v?EdQKõ+'~wxֺde; 0+TS"Y2!?9'\OhH充9eyKpؕcT$\}(h+-毡dZvS b92ؖO+M<1uBp4tL 8#B90a:{Ӆ:X\o+810P{DT~>h KyԬ(nzsO22i VRt1LQT2 m]Sۧ2O/)lH4 zdj3)H`7H&NXUG+ZUya6 _aMz?#\z;5Db޿܅Gb8/v B"l  (0cfL~da(:{rq#bZum&{cFLcr)or*[ YEwų[a@a$B TA3JҴKK?7,aT-]bZQPP0КҦߞ~,s ڇL E-\PHƐ"= TOTaPLtg6tr7 %&Yꀿ-<~ۈגc ߙb]Q)ňg9ʾ$\[MzN4J8 kW_,L).q.a%|viw%ETB5WSr+BrXA _aMAVqxPIAITOdr g>- 5?a>pQ#n”cRBb(N2g8xd_m˫"uo *'0uՙ3FI4񪑧*!4 j1Kmp,ۢD1W0U vֿX2O?VQ_} J>&RBJj(Zэcqp"õEYɛNO3#3޸Wn61Gۑҵ̐CL\xzfy6Ř}jUs (,_y ź-$`D56sN2[*@7ei8ռLn;fB+,kggiT/|w B™+)黬:4PEo2dWHki[6׀}f1P hNX֊8@wP}$uym(w*.`)n3,=D ~<VjXohyPHN?$jf.p=+yl~PJ%ʱP-$ |T^!D38Q] ޓXױ{z@6t=N^4@ A-SKȅ? RV+$y ͿMDlx̖5uc =lTmݴLydSyŷ%+rAhPڲS uV\~ڇ\+Vl뾟-F!Xzu<ȃA (3)'9dC+u4 oSG/6TyRʓ|8q+vkݦ͢k!JMd.{gZ4U"Z:gH7 , UoxCAXӑ*Zۉ0;*)ƜU!CXWv B twtA!VۄOք>`E*͜ Xq'/T񜍼C7 Fty((S?>d7n/"% lT&-' ~dw % n0;ܾOP}#BI }Z|X og*" eo?7S"댚 "أ \,|vb4Od4H}F #~]% '-pw<\eFQ3j}@gc ^*[lCA 7M Bۉc;0׋G3\1:N^AߋuٝwӜjC!t"KX<.S>vz5m:p/W58FgAhwwZ]B?d 9PzU7{2m̮h<>w=F>! %sx~g4IƊSq^4XG4_?x٨&5*nJq.Tkc)XU޲3ɈŇj@!C9$ A]xWx5J4)uk"5k^`VcPnuGA5iX$!G5-^ hU萿rYMO߮Fs$;fN:-`gtDqѵחα娔T_ORK+U'9$dBz?m}}GQyNJ1n1k*1|ѽbMΣU1D;ߎiZEu׸_ WD3E'N秃=F*+8~HSʷ̽ڪZhĜ~pb]2vRKaSENR[Sχ4vKbn;q_'+=m<!WnᜱC@@`/̺j5[M5SJ5+-ca!:aԂN[ Лo"}W%s~Anë?e, _Sֹ9$amQew@jedu=Z= |0`\O@a݆})YɤV?(.]9yĞwX;W{'4I`w{/PۢM^*gz'5wȟKwi-#|9#>jS˶L$b U+$ EbFH oRcܓ8g7&Q(_&Ҿܲ^O!J|Mc#9T#T7eXИ3MY/Iicnn| egu(P%%Du"Z@iui/Ihb&͍@V]Ѽ-\n+e4%<}c/D*˂)=K&3˟"\wZͧBiAMy72T|߶O?iUpP5(bBg ix1Hf5f!B#M;xWъTq A<\͖(X;h^IJN2i]Ye4n[gC:-9Չ!V*oߦ!RȨNŨ8"~V$ŷ+m }Q)*%JE+ ꘣Z{jCĜOL(%:5|\M.~@w÷v@.=6&) `0CEo2{D`]ls mգ>=Ӧ[X=tw"2u6"sΎCk{kJ-*S\M(ӝk6`Pc [L!dsu:~<0t`lerB Ȃ_sA\3|G>2h|֭QEL0PQ^)1okm 4U%o#^ؖkaטqHYlk/e !kyaoXor HqG o_ 7(9?{-a*Pon(?0O?HX˛=!0WTXG|ۣ.c\9ׯSF]a2ZW,H׷ȣbq$4 (KUDuWjDma^̿+d'oa?Hai AZv Рc+ Y!-.6}*"8"&g(g:4(+H/΅XłCE 8}g ]݊]H[1<:D3 h 4(U % ~#R>'sh@NAn]l RAg2F|M%|5fHūhrZ0B~.JѶ%hLڮ_w)RCW QK]0Ql]^ IY^N;fA}![UMBGOҙ~>:VoI`½Ս xu?D^K1okf`_shJ ]> b@.rl}Dk`4UFc+[L+XNy,Pw@NMa%+cȠ5D }!,}!#dpǷ 'O ]*tY;*-Cd3*x0:B%BAg~5tɏn'l0dI lnAg,z +>fvj#Y4,ջ/r)7հ#K`D P2wӡO k^{ZU$wHEG-t~mb֏]5J}Z7t\F}ZPsj2day(7Z}Pw_? gqgQ$IP/؁o| iI=Sj0ď(MLH3 SmN6PN6% 4m?>jl0 74n$3HYB5wa 9M#I,pCڔq˺FfoLXW6P uA G{śVdž99I r?}P^$ #K$ӜDv\G sߦOD~m_MJXnQ`c +!9. M`(>>Y?*/ g:r'mKv {h'RDj_ө -Š;6M%-{qRjwokbe|{{\*Kt^ǟ; _KqdK%*]rE:]Xj> t<&LJ hុJVL5fc cS⇖ 0rˈGs/#Z}k_8G7Cu}pGEp~Ih(K%7'k+$Ҝܳr* TŘ^ZҊހ3H:sNۭ *|`(m&[{%h:ΩWoɽMEc/&&LD:lLl-m*Oiˑ5m9Ĵp'Mкݠ<[d}j\g/# /N _qP!7 syS<㇛.?O1>iWL'"b!`!zB޾kCNG\vI`~+&Rϩ`ɺCeKV~8.16껗ʇ`FMΣD 4TPFj(p9vH^nGZ*W}- %Sן.r̆8@ П)b\bjz`c,w4QLػ}fq|ԕC>{_+UN.=}D|!UmTRVP=w-b9EvjCW 0bݻ.~k 05lmx(uU.p 8NR-q 8qOm|W_= .6i*B<%W}ʓ*Įbih*NRp@Q"^iP'p[Gr딳S !JY(h,8F&wQŸ00O5{O_.Lz8_~A)}5IZrgdk\(9*υ!|f[T'Q8ͼtF%4"ITfn%ZGtLUÝwW !1ԲspBB:3%I8  X؉wߍt_D&mNh1Tג/HQ4(\^A݊PCCҁ!!^12SN[R4Zf0EpY^8MHZưWSJ f]!xu` ,כɴP0|o5C nlQ`8hB@;mrɰ(bj֛GxL¶]Ta6v.%HSwn&??eS/0_3D"_DM`(=9'Yt>^f HW Wϫdɽr纀҄g>q=!t= @豯g_!#6_*Bs Ϛŵ6C.^*ޒj?DU- 2f!Xǽ2ev~$m>&2U@+ hs(#: BQK0;mo/ja{Y3`Z_ٺX* {P ˚r,$>32OЩGV$@a]Ȋ^>>Ȫ=愣:X (q nuC&Ŷʮ;WWgȝ!yd(\UohQ<`46=^#sԮ[mEz]pP?s|!sD==Ba$lTeͩ84Mdܥ*Bsa^ LulW'}7+||p_xα.._[ 5ޣ_zdMom</`fJ#+ݣG[0+AP9ݴl7|{ˡ"'cTWGj,.v)#]~k7 PqF?QW+g^eUtP}y A:|sτJ d J3[e{þ]uFPγS -[fyHOŹEހXs E=*V$ iUj(v&FC*QZ=Io< ;Nǯc f%2dQ-׆vIM'1<[h(\k5 dphpy旡 ݄͔7GAl릆۫BH ٳzޖoyƴ@ŧ^n,Ӏ6ݴOQ ~z%OSU,* ٰtqpDBOD?5mȀOyƋI.EoOdk0].6Bў4ΤTPf=\61B >2FoBzE3ԾL #$*+Ep w٨^ MPש8Ÿ׻ 6ZU53;@c $F?u>rnxha5[!  ERP;+v)A1.x?Jq} oh?  #@;#:[D{{xHt'uX̕I^qJACjE]pŌ/x%ɛN(9zod?&,BOC qgc3{/Q> 82tyhl^thj8sWGb nɑKvHef,,WF>ճ# N#&C$r*_X&mM0jF$i/޿юE<.۽L)K/hV8|EEa)U3,\}IԣTqbTo.wވy\U n{8~uA/Y"D\2֒N25Bc Y6ñ<[?-,כ8! p ?j.M Ŷq b܊CvfC\Bir E)J&ǩ ɿ<؄2i\9ziLX.þ&z`"cZnygsQԐLA6"T ?1.ˆ`bUL{X5 8fg)m@Rj*a{ Yy.J➯vb 譬IwnP%odar"ْK0H+I4ƈbpb ۩Y{A_ …@l]t50z[~8h]n/zCv EqݬUѧ(HPkJ0 z. o9/E 1U4zs]$9 %x$8̠T&4 g_m2I]_,KBynׁ*62x"LsP mL_8˹GVm,IK_9nxllq :ț=gdkؓEn)5WZV-4m`%V[7R^M*?3[؛!@7UL!1YV6k(d91 36" ٬H"p{wC 2Lʷ^r>% k`s΀[85y8n$bU_:s*4~D1c '"c4.-I~ͻpxG*@9̏7]/j |s~8o kN*``N&]1 oǐ ̷2|3R%~{(O>argA*]zԗ,皪`+Z_ݡ'(t>[7BsoA~21a3S.^ESI*"Nh ]h>ekU$7m1z TY4|g~1/8ʫ;V,:_&ڵ}3h"kLkTKE׆+(˯pKH ۃY}aBI#=p u,qzos Z!u+B`BNeyI}j0pnZNrF;traUvgD}\9$c[TFD oPݘgۑZOO`|E{C(墴A9\F ½TtiL&6>h,gfs=z Z Ƽ*Ay 0h`[nQᵆB)p&uDa#0 4frXLJuU%u&)گ7lB[?@/uv%t6.$8b0. L(d\E5)͜k$Iӗ=B(jm17-_HZ/ˣ!!iL[!'].) ?z7: :x0Ҿ5ڸ_/)B1^x?.-QOhYUXʻ_l2 ǍNNhK) f$hJC (ږfuGQ0gp(2׾_и~D[.Fj m${wZ'#N&p;ߖJ}Eֹ|D 9m<~ w8{MdDc7,鶟Kr"d3$_w/lt)r\td?ZvN81HHqP8C8)GkXvtb%XODOBFRr8Ej0투_,d<q8KljwpHi,jXl+FRQ7 X^CP{}ei䨔~;2ms﷿a*K8]o_ՓrQ05ׯЖGzhT?O0j]PcTAf]tحO#A'"JUO6fۂ~^Z0:`# 1ΞSKB4 :)-A~c:Ɗ\fNX~b ebxF_j-jyv䓆(Ro1T8s+T19LbԀSw:P#PmaQO ~nT)I. R={O;aG<` ZB9;r%ד.ҟv.1Oh1_Ɍ}.Hf?ZCUS%3CE s M O*X38w<95=TP/)אQ>.n-EX ;DYVV0"Z,XFOq%rؒ;Uq2?"}Mุ1nɏ+b'WΡQFpTe P9a;$=A^MH%_E>}8sF V1gCr;s.LZ2rѡB}*+Q6F< 7HMQCReSW9oR%}V.<ݑT`q^OA}o8CK4邰 8ső|EĴI<䩝5[dB. Hbk0\ODt_o񁞪j%\}NjrjӐI[ RbKf=!ssa/%=\/j ɯL%jv[grU'UY6'j$i[S q=F3h,+ pjKO4w.<!H>__"Ր0k &],8@<,~ir-{V[7TܨfmTCQfłl#D'#LJR & WyB!6wװ..ȴ*v*~,B6nNs\GӶ`s PʈdaL8as%4{@PhynLs|> MH\G#aQ,7G*gۑd̙߫|^ g&@xX{Or 84rutQ[wb{(H0 [ S6s븳-6åf-\0^E-tHU1 ظ_Y}n@pʋ~[E/3ib*=C.ȑdi_/ᘶ2gZ>/ˢM8Ʒ+̿"K u2$mY[ #EP$`APN=^]YEF'm̔˸;:Jqz"u-x6}Xi݊-N*RSGa AE3ۜ~Ke8#\>RE9cU?{SyQܑW,Ol\ʄoN%mIQ5zZuNo'SǍ;&|v(Fo3mHwf' &#Sk ? ^8\l>p{m8U^- :u\=K{@cϹKbiĂV啜ҏvr8"B5>5tV*~M) 9_uT_.`DF@(ZNNV~dpiqI K!{xZ>ဲ/JOքMߞxIoA9aWEeV}:uH5Ž KVusہ^AV^u8;# 8<@3P^Kno>a =1Mb~! ] ; #oR׿ȼ^Jl{w^'CdBc:nDYS䀙I(ZTPff MpA*2ur(ٛ<2Xɡo$ %³d鶹7UFzj`7Q-86)yaӎ̾saW[ ۥݓ1%1`l-)@XM7w4Og\Kb隣B9uߩsLE{3ASxbDż|vgZId+gry;f2z# %k>$:}'Ip $J:uЖ Vǥ9Hdqu=c}H@q>Ӛs9Alzƪ4[!Ib鹻7cLT~uZYŅkSy>^Ԣ7u9a_D3Tc5:6`E#f6Rp\}tgglēm<8qh8^ŵY \b!Y U30^Z]nO=ӷbSq= cek C\i7z.ςDk1a}#s3` CH?XM2g:[3y16vYC ~Ѥg^ODSЕ#]K9x'T BE/N"JoNwo8 `1{̞s@\nD>z&2{+β~l `yT15jĸH~Tr27<+ȏL#[L+[~j"TfC ">lN|wLE2+<]fNşM\iuIcrP:uZP]iu7o lWIu{}?i(bf@(Fu#. uYRigڄci[m>RG5r)ͼvw:)l >dʢݹNWNxtV$q#7|~ḰUӊZI*Ut ؕc0/4ri-#[=$5__Oq J91*V~N&gQtLL(ω@jYӅW6kɮGsxePȀ_J/n9eELΙ۬I>(,?̊4f2g a[T=lw#KL}y-+590M8ee)m>$2ѐHI7Oq HG sELѕl>/6ёLS]{4u<tPnU QRnqo8мCvϮg=g+'Bzgc|cSx9K8HFCBfڕ{D-1Řacl /w[<ƀp8r^AtGwCk/_W.TwIIe"&mC l&H`C/# v8sX3Һ[\`O@*_ Ǹ,K}nT_zC{RDVmwG|#RpF(G4ày ի{9~B:7ˡbm\3o8EmElx-H%όLT~Jۍ_G0H,М~iUO5tѣyv#''q71h:d3r`l&y6F/,Hu5ȒE; 'IGF7R+"5t_"ڼ|FnW2 9*VՐ'FHLxuìM/+i|hz;/bSn%}:ɓjN,J !Uk#ܠI XeM 7Rݓel '^2@5͊.>4f{/ƈϱ^JU`Tu\V_ipd04\g,"v<;XpW`e"}џOޗ+AD5`.)x95;W `yT-%»%+"(ϣC)~/ZQѶsBc5%dČzk9](l&p朾_b5Y{iʺPk@$>If3:i؈y8lņ Ds)mVx hAA{䌯VVּeM-[j6"xbF eԥÑDJD.Nv3@YbO 2V%>wIQxozSj*Q鐪0,iQ傈L%-,?m2Y{/MZQqgNOIYPD0)`jzhs82w(NRoa 'YǽJR=[UG4`>k9N/Y2ZR\t%wJ.Pn b:{PHZf.F\Hyfqy A2o6RaJ+(.ťk*D|Q ^~/3vjBP6Wn5sfgR\gcۍ7{vͳ%.s\noI2Qjy^`zʅZ 0"t,x\&  &&,xn-l8o cTAtk1%eHȭo;hW'ҁ"iWFņv~52['yߔe F@^E$_)s ڐreqeȤ9#򈳃 9}KھLrh?_iZJ \3zNm;%u2Az $!!}Hh'zI4{%2#RڞSMFqLu$0Me/o't%Fxca8jK'V(ESvJ"(ąMF{3Ԥh?f݄hH_C&G'j9B/`\ 5j%Ʊ&Ҩ <L\rc2Gm$u`<$)5ܴ.ﲮ=bځHCBpqh )~)G?./)+3PLߤ#Am,M̦`_v66Tuq Ov[Fަk)S>fr#')]2g}Ǐ;S>RM@ltIc8Gv*blR;6]&ǂfyee{*V|g'Z"*BMp%Us}V4qەH)DQG yM[1$HrXvnں#Wp*"f^*DcZkz.Qd,8,#PɨHdg7V:"^u)Qyߣ ٭G6@Xf "jn\Z.;~,Ǧw|SޫkAt,䦢 h{(NjjI)SF)F7dX{]yGVOc ZeR數5<R%\=7[{jL7?[|N u|7ߍD!Fv聾.*NroOx@)*EQ>zQHh/0 hd@>,1 Lvmҹ<:amg&rg;k!,y42^- (8nB-.7SBLzX:ȑPYb88uf>{+\{\y- HAˤ0b 2I^smQ́Q +dL Cu^c8,R\WnyJ<-X (pJFN~ƕ:ƯR7 a{P B VF|1[S}- H#hcY耩./V<.-tYa2ӢWnXҡ9dM+>pњTդ4L\7EԳvYnKċJƔ1~7ޥ?h G"~Me?D\wIm?VP( C .{G.$r*о@W\H-OP֚RYs' sP ڊ+d#{sp-҄yl[mnGĞkU2$]Gr e)pMr'c?#JjH[#yL-`V'-DΡAf)^et^(Z-F}p~" 诟06:e{Zn sK`ĦZ<޼A9w^*|-B|u!B5eAC\'$<>^Dsa17Y[VđP|! }̛Eԯ7"wwF{8X;k )VI&䓯|nQv*QwN-ҫz\ndpEb.ʚ ԳOH 1Bn=Y2tbyiw兀``Q&Mm&UdXfēVMV7XoLޑ*dRuU'(D.@4E]zuJTHe۰eTvC*=Yqm~٩]3$Ur`[$ǟpV[N žd>NGff3$~1:ug.Tts쥑nmT%E;@1:wӅT7FͰv[ kۧNR3ְ5E 2HF*0ɥd/N/hm0Fo]G7UF/qm)S*MPgHAWwJa"Ҧ# 1̪w@rrڂPK+7-AWMcqqdhF^S[Y|MF>6;QDi $"@Yc`N@@ZurkÛ.O,國jX@gĚymJnٖ+MAGز :6P— O /օtݨISQ ݾCx%s%UR, aQM/NM+h,PZkSqy^I΢;;sm/JTɠ02',! 'Jda)vUJ0sؖ*B# W𿫒ZlfzYe"hq7yXl2xlp=>; 4,Hy|n¼HH5Q?'FMz'] TAēg$ k~G7HCb`8bDzOϙ}[L$#d%2`qNY:єmof_Muanާb ?P k=yEmG. 鐛ds0%2Z0uDj?@&8Qn<Xڱq.=WhyN (*_l'%.t_!Z1火UT_}&R piR݁5t+moKZg..˸sY銹ɔ3PFҴlžʄcws(%Ljo=aUƭ.fOCz.OF\4[Q|KyIڈpz!q)s/_阵"En61oyx! Lx俑7'*,/eueՒZ:].zŮ1fJ_}ţBq-܊XunlLr~>>K9EAK:1>IS_N@1l M,> H^&`tjNL60J٨MF AHEσ"6^Mrb6:y! |~=Z޽Yx`Mͬ (DKaj_nM%L<&WS  #Qu|kjN5B˓3ӿsfEVI1y({6VQR֍C[z[ZO|4뵑)'vm,yHF-BK(:CVӊy3P"[, zu0Op#5?An0?9X~]:F ? ɭ/ FRN];JB;v Fv7yT5CٕoKGa |Zy[y7OeڦQ/|`%簡N_2umI3p;7Vb~ 0 E!ϞU.21FpjRJQ "hbd45g=N Ǎ6Z4Ng0?mvj#L ծt'6gV -Ƨbl",qf!Zˁ ƳPwݐAi8>XcjoEazF],_VDGx\w|캔W Rn} blUax7'X:0׭@WrJ0︢o(mC9`ЭE{ڋ55EMd|1G{ux-R,/Dt\mM,cBP@_B߳c{0v;\:lIr_+vRxkfY,krކ<{ wXB:u[|K5?jo#hF%K7i'[K:XyXЂNRY{.D I/z$Lj%꥗>AbyJUhFi 4s2-4d/ŦUĸ_)2sm%Jg5jd+Rq UWՊ \ I7 P1%aGi@ K*MSݢuE:'x0nꏬ6!li2S[C܉LdE;DP[pDMڴ/CrX7`7>Pl^h SL$kx1ְvw3,weI@JMA3"D8^Cݽh>1/ k-fV@Z֊= e};13←htRM8%:..*",;џs32ge-蚗,β6 '/tR Eo#>AGy|r=" yGe(Qc銝,x\W.,h#ҝ.i:͡ߕrM?-#SMf+{u7pG"lNåPGTVP!?xI1Bվ%h;Y5 b(\=nJL `Ls+(b?.rl2RfPXMeA4hتNIb]%BTKG=)|0EX=z)M2D[C %i3yBn2b -J63W_D.Nadx8RBdG\dWtuh|F~/N^_ Ru( ;Bm{μUL~($B&CnyF ( ޫFb]^04~ZHJ-c#F /x9(x?W,I3ؐV! zln%kDOd^xBѣw\]a~#j0u3@kڏ_zA.*ёm&hsXx|'U XЀ2A3dAH|n #M\i!ڵ#QՄE etV /Sk J>RU`\ P c h> b/&B(R=L[zw4V"*7m~Se(Y8k od{Uqo/}݊ѭ |2p,DQp[j`4i3݅s1ϽA*FXk3f`ǔ 4שX>ê$WFYG%1>>EVe 2 zT-4"įh!iy3$;\#YS|vi DdffWF3vev-eS emMǐ-hƽ.$= :`?tOA5&$?Gg7s/mEb!cMkMW>%ATնG:͆+Gǵďs.(K߰f8Jc)RрN&݊$&}+D%z?n/XljI!|WN+]{ȵ;{TD&ֆ[PAlN${/_Q|ޣ#c1WtQ! G/ !ϴ|i~u:$z5CTA"c9÷謱H()0fI&9J&_QT,tep/^Mģgǩ4쨨R8xSZ|QUR:nΚ6?Uҗ˾ ) Gd%55U)HÍĺyEӠ2Z}Z{v t(Q(`dVPLuqyr^rkה[̭KH_!+YCrW_ ؔ 1 ia$wm;0kj?iᙞarXġ6 mE`zXyQ fi:7iֳ.hwУ#_yԼ#|2w72ښMRCX(Rث+Zy AR"*8!9{ =<VRekZp8yl6'͘QD2dA\tߩ[, ygO#= gzB[%5-gʔj? bEE854VkZ\gy`Nپjr':ẉa_urNm1E񦫼Frv*U5=,#xU|WĎ{<-A0o0:~փ3 ƶʰxς}V`K_ذg.7߳# ˆwN㢘`'$rwȄHAcGɸM+,cZ [*Fƥ6s+"aƀU-;/sù|;u/+uK>.}[xH7k<@b&ӑ%xeɏX\fPxI|t٩G3.1q1½tABܬGш mcbmgv@_%(mܼ*W \^evw++E,)$+L d/%[f h'5RzaldFI \]è~o*lY \pO1lX@2FsB})c.~SY.AK519Kݵ|P`(-]43PPLRS`B6 `2RnGka  | ۴"WYE}Eɀ2Ј `[X]吐9Ol KX%O:Cr8?/ܲmǐtnAM]]kճٔ*~؊Sx} pd'aD`ٮjOW'/#%'g9/Z1Wr CLjXX)CXvvyrh*h*7yn{]/Y4SAߘ!Ia4t֌zejTtTŁgҊWY&`0ZXzrGRauG_4Jp@ޥqe[6AkՇJ@+6YffX)#=CiXo6#`2a~C$sBDzwXHԉr#.i\la.3-Q3m0TUJ됃P_ GLݰw0 =K'iGɮҼEMrtpXy-BC,ۃY'PW1IhČYWEʮ&~qAvz%<{lO7h=tK^8Cр%\V@ؠ.Ӂf:dV|fџݰP^dJ8&~o9^b|x,Z~0@dc$P[ĹpJR$/Xx*8z{bswS >6 $J+g>ީk;db,:E*Cց1#O'Gvu}{i,6FS+Uv|z3|b~Mi )z=6xqi,0栨�y wplx͋.mhVBì, 9օxhM e ۸Ǯ?m]6- $f#k~jevW?[|axzb,,~ڿE sb.SIA}l2Z}귎0L>e.A{I 1>k3)Fi,&ɄfƥS6J1a9d޲n4k(aYΐo~GLK{eptڂaZ{:ąsVMGJ&S<@qm!7F&mtKötJ39ՆZy/l %#Io[Z%*w/:tH˗H_bݒ$ZSuPZy*(-{s;>vo&9eO"-'՛{Ao&ٮ#fe;)e,xlΜy,|S/UC}!T UMͰZ^6}7],YҔXc0v9hգ!XᎀJLG_uMO?ヵB+S^4*5C0ݜ?LH@Uz c\i{xafrr4,V ґ.Ƨ@1+VT /'mfz N5m,nyX%󅸙(6xܮ³:1dj%Yŝm}p E͢C^4ƶLcX~4Oi2bBW@ocG XedWE52GI5,-g-)db -$SсWn)צRBf_ſc8؏Sc@E %YZ ECb:}Nje~=Q`")a OzW|;%,Efd$p1J;.V9_rw3sZ 5jqRĸm{Zhm5"B}G N#-{̽ XU%ߔ#gI3▋Nl1eօh_܂"B %"b0`L~*;㙾3PRI| COPxH~X_5N.߾r@J;.z?&.44=C MU0 y (KL3gQ8!W^ޜze$"Rq)dCƲrF d:q5Z"WFbrۀI|g7t[Uc;1_-"B Ҋޗ.D+oE`r#fլ\@PuM2iԓzfmWn 6E&@065W}U L{l=:w=B_v d+U"^1iCHY## 2Ijv^ǯ$Ή>22!\(EyidE0a.niUA._6UO*P(igyWEhh)qEBwVGGNPęTnղLV*T!g#MԴRfoDIJ쥟ȴ.@0F6wRϣ.>X_ -ۨ~,Ls<^+(v@zu]jsNћw b`5$mH q$>E )l.0L@Hwq^/J! wG]i8m2:3rU2x6 +?1HfF*%MܩH3!.5nDPPA^S;Slˢs 08>nC1 XU*klrJ?ݚ%hPaB5.91? 76#{ Oo`R:R;- {` xB7MY_zہnPH"yS?"ǧ6O/W},|0]`:4+2@̽ OBd^:{$Y䎏z >AAl`@MYҟqZ`pza̰+|J S*3&X~'>A5]J,VFTo롼ɭkuy<ʈ.xNvcC2BV󺷙 J}vN-s? V< BR"Ճ{8z0N3赶&_]24ݎ }d_BR'H2rf[si  "MmBD$*A?e#%Y> Òq26![gDޟ!/ V׶ӲXiB.ʮտ3(`+3]1&:jAXy[2d pg{lIDZ09ޟyp$^#h&ź!s;zbZ`/Vʜ;ijEl4)t؄7Z+dUEKa> FTg; @%xj>r߰e-\tzw"b\ еą) I|rW%&v %y1eَ<=W.K:I)Ǫ@!z+l'nHsdc?3`SMi%Ju)R*?ã_ "t> b>:slX80nLl͞1j]~׺ oGbɵ3XMoĤOnu^NjS)d2Kte  e|BV߰w70|i#91ct8&-tj.E]3'гh3e9!-ǰb%6wp>rcZ jNzOo(Y$g/"qmWoUb5r|:SI ryż;S9n3*i)0^ uD{/{)ʳA_b .5$TGє ;=,']mlLMR{uꍺKg^Ѽ} -R&m i|(*}6g]էC gbpZ1^St60uƉn 4|lCBM14]ǽ"nqO|#?/+֭Xbڟ,c!W =q O&YtUݰ@ R ]/>/oX6Nm=*켾hU3GzA]}jr(@ia{ 󳾨i_p]e`Xc orp`߄e(t۽`щN۽cy0Q9< t[2z1R]%ZA$<SZjFpmL77x3vH zG X碫2uÝn:ow~p$շ%z55GʫNnj:]FްUJx%d,e$R~.e y\}hlqrrt;p!|8F&ա^/eT}`fHдtXtNE2ͷoȎV;dր{n贵Rj}օ^``ؘwhFQOU; W0,?dyWaXiV'u=uE!J-jΫvocGAIĻks bn(*_(C֞$xMh˴m ]? n^^^'#F` \>*xJӉA'T,%E "CWC8Ӫ>0wJʖ%ZjB;i&jϵD|iXJ)i9ƳAJkFYPڴvv`PFӧ!w! T@b`eǶW!@CfP"jC1M9w.8l'~vz -|մvƏ݂cXw&%U^#6 DiMсon1RhЪwcy4Z@ij vl+h*fǸNɊ9(ꆪ(LugZ<$RJz267Ց@K!*- [ Uy|ޭ+R\e-$ l[꧟_D!X1sFQyIbsS5V@өdxN [)[,DgAsl@(#*W3U)޹,3v>ziO'o 1&O]6*jzUU2]gdiW/p7l]D/wigiBmltFr&R!6K-6Qc^eA|h׸ "̠s(Xe󸚻-=<'` tZS :l> > ccQgblcW Ch݁Q W g`Apf3D1wsؕ`Z[~:zE;V42Q$)ɛ;iZ݄L |w\Uiج`(wBc'FYv ő "^Fq*"#x:;i73mЌ>@~+{pc}RF~q̈́&5 Mhܸ P&Q9i`̓$;~Б<iWv |4_{^9KŵMVJ/?VoVY [ts)|ݪ :W+u%R( BAxȰ&ثd-" V}o/ᙹ1EL8GoKN81p^@gyL^ҙ̪^d Ib^#tbX2 F(oZJ.kCTo|d:M:egU?Xh=o{iQ6*S;N#mEB6sa*xaBV1X*_1H&ꋁ4][dF> R#8 w;ĹpcBֽ@;:a|"Ma.xոVT;Ѝ&Vz^]- i񱾺⇘gM ] oM@M?nmx*Y.uQ0x^0R8gwj7zsIԴJ8OGHgjsH+IV1^4Ȋ> F)-edZNJC;$1Teh''~6D*q+Q]G6OSf2LlOa CbƮH&Nۛ =ޖP!27k7ET0 -F, @Y/J\s!J PaX+ = "HTgs(A]0c':L 1"JKzw8vFgGrM_u,:zUPfӿ4t9vfMT~J1dTK7>vY+3bd^xTJᡙdt|x(:Φ4HƟۃlu>=E,ވβv-OR1v?`b:YV;<ĎV] _TO0 \:t ÄUPXF7j"'W+"E(V̰=aV$8fϏm%[6[}[ gy'Z帒uT5KOr陜}+l'S?t@V }yw"IK[E6+H{fz5Jz>BD~Vځ4BU$/3n²#1tVjށoXdpPp߽.SȚ &!DGJXT G-`(`x4 }S*IǴ?'_ﶄ0"K,yngCa:>$~DU_OE4K%1k-x <c/Ԇ7*NG(J. ܷ T}>4qB 6z{4ujq}bP-MmK>\E d&W}foaU4%n7RWѸX&.槾~`d4qo٪Ыjʖd_hn*YnX y>cr+u~&aJ$_*Bl4Hf[Mڸ8Xg.Q pQ XP}oKwMzdA)iV;L8s6/; _i˹t,35F%@VT/[қ%<=qߵ\1?mkOiqQAz;bF?QϨUfPԙm uZ~}t mQrD0&g^8BKy}cE "Τ_븪31~܇ 4N-oP\jqGCŧ/}famLqB /iqz|/aU+~o%0\p!嬙-8m0\dz@J۠yt+1!76^D ]4Ώ)lpp;|-VTo aP/X2q8\ϖleCBAPT4ust-jz)sQ:Sڭ7F R'h<(Wg4;.1En̞M/ F"ZOfd zn`⛞Fu zTK;S@ܔT>P3@{4׮PqFMMf{\E}QRnCx(UEGj ռ-=r T80U>+ [tc<(k!Y7HJҁGlMR@Dv /F hbdU|p dd u'*Jr,`. U %T6oPiǾ-}Ds{>aCR]FSL^Ԍ!(Z߯SfϿ=R1鰢:pMϋǧܪrj4C%1 AqTlݫLm߽B֜DzVRa+j3ftrkDu j~/գ)2~j"cȾ3&}>3*rt-|(C :2 ir'o|'QcmZ$ );tuxx`4:n{WGK4FfkHSX?P`fpF6?o4ljtxk==舍R{JEkM~)"<-u̮j\jfwt2LWvCT2 XOjHUW q;~ЅaUVGNjNX&SME'&ٞ=0ty"__5vÃRD뽼>9XV?z2}6up+r}Yf@zW#w4@'@K68CjgG>˗G2ɫ Y wЇܰt ODF ˢۼAx]n S͗)4/Ciҹ4{[OBdYAPJkf49z άzZ @0Vp*j D'M=uє曽R//= 9iy?ހ L4ʲ d@=i;8.C- +9ƙ?Dk8Vagg LeEŐ>Jxٸp#YpƧNڝQںT.3Gx6)xa]Ӳ&S" Z|v'_&*-DQ0HJq:A;-}2a\9Of( Eǵ]dc9ŔC=pF7i~mf`ofȀ-@9SݱEЈ'kmH^Us]e(HRS=8{a~'$s01n>iNWYd;,7G3ۊIP|t]qVVm8 ,-&vSzljYѐQ.<&?2IeQ,Qr]>Zґ*0(Tp\!RFܻ}/ ކJ,.?qNܗ-^MmLҮwS'x5R$N_4a(&pFP դQ|<1$2PT9>&F:G뜶 n/ v]"M%4X`鬁L==3OuAU39$w`7*QWƘ -&2.$u}I67Z)FT;u>_|_#8?ʡ׹^3#}m'Ϋ8ᜬG((1ٺ^=̰wxDZXK.>􋡣˖2XR;y~yDLSm<=JtwޭmP7I$CY8"f듦=EL.<:ps)|G>([A:apʩ~wTƭgwwZ}+ig΍ }꼔g`ԪK+9 ۼ/pP0+bj;=Ss΢oՄ&+ ?eV wR3L۳B3OJt\,X5M~\߿%.cHژr kϪ<7#lJN8))Bu"qިbΗg.I`C)2VFsVemhң]ӻ4ri͠'~+ *<.Uj|3 %F[Kf-ν3LPYK hE-aY| 5E>qLԤr^#DK߬4i&" J-&i*2tcл`Ѯl_]Q]iUjYE^Wn\Wj'6Nzro_~ ?6 G-/c:08^ӵ??fȠ8.6x=8'5!@twV , W,XJ!FJ8nˑ5;ܬ@VKU@MSXZnˡSgG%ƻYr_ BuOk:ZػԷ<7H9Uuc hM%p }PH?%PTsc+2.6sx`Gi<3(_}q!N8tjǞKK5@CѪl~H b0Dݧ=7ި ecz/l'2\J9V4t3}uf>ZVOhVjhrjoŎڦ#ع*Bh?l 0md1R6:3t7)#&!:HZ"A@қ:Ofu)hϗH3w^Uj>kΏׄs8/%Xɉ^52 *Ήse_ _לGњ!-YIW(-(7]8慗u5LF|b1 ǮR; .37L| |E)<{35{8j'N<;5RXt!2Q~ZJ+!=nrр=t#u:eGf$kzwX7X:XCa=\t`ژRb wKz%HqCFJ1%!1%CjEhr͂`/8۷IsR'6gK4:͹u箇L1 h>uqڿYN(MfdW3 -fgbf'sz0)L@ gHc޲Y7]+u?ѻVJǃEDȣP,.\KC xDE¤'#Qm7!碇Fzd_~R=`[޶3Q^0j+c^N>o1ciw]H!6hou8AкYVktxlHŔy*>Aq]Hx*ޔp:Y)cT^WF4eĈj&*k)W,!EVekWrW%,\`xF{u~?r73<hwVT"Xu5 #U_3^qݟ ޘ8I.G )=t H}{fAbI\<m'ԷSYe#.wBG/p(TLO_ N$dѨm߳:d,1Sgh BY>C<] pZ47 *8MFcOS$*O; ]u)csx ν>ě@8]Κb]b{߮`QQ7#Tyw`]#%ZCqxBF!0omML:^EO}ܙ$h@;Y|~MfRM {2X κw*ݡ/C;ܑKعޭ$ls8svO9A0_*v{/k#'@&Y5nhU8պ_+^zjDc`O ]8Ln"Cr@3?J+v9^sVԳdDWAL(l$s=؂2΀[71̺V߱BWb|TPxxLfJ J j_1 ^ոMB@*38QYnh.e$& ,.g@{JZ󲏌R09vv4kr&9I2gGTU415VQtF<\@1Es 5)W s[7a r(AzcګS˙$G LB#KkKoᾆ5d2IfWV:z(U \p] R]*vfHR1Zeo'Fډ遼(c5}&ұ}0P*k", 2˿.&PK!/m fP:;k&az07t;: kX_ֱ!G}1IȬBڥy0BĹlc4޸SĽkIT)P./gȃ E):Tyn7V xNL:J4f =tf.\h5_9'f@>柅0Rp5<b/WQ|'0{7֫'e Cw-HxxdeBj? QoT|/D5J ~W.S _U.eJy]/'<{启{Ίw"3?UQΩwñ3O]gwvᅳ6]? %[%T/h[&]  J2sq80h+v0r#8qW1TNRAj|az429iZnH_.~kCM4 ^ۡDˆN~C慅SbkI}"-u7ڳZ~A0nDNH&S9?ۮLc%P7G:vS)e6YguQnc)&p|pK|,A3g+k_APmAt2x#/KdV:e27#pUiO̷%?Xte)x1Cbl_![-.H|;k"mmIK8ʨvH ~镹uYp[~WvC0j`E{ڵV(k`5`Z0= BוƿSqLKwDڣ 1*ʎ8_ibZu;7"|93`&c^ʚ@~A:,) FÅ-LwJ  orwQ WT@Aaw2k!s%nm9OL2h#3q:,{TaT=mگUYʾR^1"-æ[x6YX@ DMYEyw-X\'{sLS.M2Q|S_ҋp}Ǟq4ƛ6\]KdS -ku(^kl2h\EC.\7W* τ j|SDfDNjW&K|LImr6-\Ḃ:gT_ڊV=; }lQsw!>ae1s,zJ+'{bqw{ (/>pFrb0<vŅߏiv;36\~C#w~~1D=X03?ћb )b98rv_H|git O1Tw<}snQԴZ8U].QޤFN煪ftTw+mÂ/Cx$j22%x: 6пD7#{\S9=//P߫)1AQ3c_Ф4kR#0Sb5u)ŕynĬ vVl^1$D΁h7;eOm˰U.HQspϲ0Լki}mI'VL?3+CZq]d2ZP/zSd:܄`y#[hĖ,y M e&6n5dߪ!hCq1d$ ~wQ-Wh~8d5\{~ !whG /30Z޸;]ZߧzDg^p:XNC̞)K.5SOi\IrhXAzUpҒᨋxOx1v( jYL]/){1Ч6" ڶMzTRy11[LAw 191G%=qҖ4;G&M-aWJҶD!5jä5@PZ,eOSnZ(ҭ-ƻ™[;>!bO&F~D͵]ff `F iTP8ש=6덝h狁f9C~\rՒ }x^{=mQ*7ms@5C=rjH͖u0wlǺ?0|lq™f8; ,@eܙ/dJFhw.mbfg{\ہuΓXND(WqS-}F] =VX6@r2Q ׅlڈ)=/ Ҍ%avHLa=V|2ӡMSuS5OJiS*K!^C,0DY\uko8o$W_[$ U~]Kh:,̔ ˙>ʱD(ʋC ow wGl->ƏCj=4O:ԡ*ی9YlSr5}##ȌDjtCT>dMmjܾebSJ]u4)m㒖 ;bLԘ%胆ωdR6AB-7^q5EO_x/z<C Q ĢVѲnHPc_ymOD) Exdv;o.ihZHں0C`bQܔ,/e- YEܦ*ܚj DP܈X%_B6C-}$]9Fb&90ߟ5Pc87D | ՙpw4 $ápr`'F1~5F(!p`zo=51z F<&tL!.#QFLCR=gZo"sAgZS9=τc o"<-,%bf*c⯽y^'h8[i5 fЁn}o&=:dcr/{-ڀ}ࡒ;ؑ'&VBsIl?Y{v[/(Pf9]bN< XeE+tQքIrXQG/?HiWn9A!hY`ݲdA ?4lr=4Ff1peȪ2LylQ)b-U ԧ2 ̺: r6_DElq1GKc:'#&Eeu3u0azr-Vv/=,׿Xß.غ2a57.{R" ܓj Iy9H]k&eZXY ǣ.PG,Y Y NkX2"r+*|FOrEBvmBPɟ1mʵTXQz_vs<>^Z7"_AKn9seF: ģ;̸lCeSşl щ:Z9Fi'[];͠W 5ͦ*\wŲ" {2Aa4ADӖ.?xOSg$M52wSl<>Ab"٨Br"ZeoTYW9T_~}T A) ^>41Z=:E-(݇4 NvޝϢ+V O{|, ע Vo #"h] %DܹC8U/4||QBآ B1-qECRYlӜ@>08mVًi5Sx:(jHT.32AN m;XA{p ?NA&B-HRB"Kئ2 QMȷ/<^T]cɻ7rǤAk3+"ɣQiCʰpL 5qBo3νobDP)١A p@7EĞDa*g^;ȍ N'ܐc(=&`egnӗ^ciuDHɀkV_ oq'5վOqv$JwB#$]=\ Jv?''GI8זh Ct%e& %hd|컐(~)vjhdnɏȢJ4[(l%NX_2*V9ZRhi J=d<7CSAğҦ4l"n)?ٷn@Een 0"x)HsQ [tpx-E( tSǯ(3 7{X ާ]ό>heZÑˈ|$GpD<jRW<9 kTAQ^V^" ;kgXɯ=⭤3OlW/R2ISb~P|~ѮsAuId ;%I1>U#*Ml3`"4@9HHiu-q'ayi;nes&Kp}k.+X@ xJ.f$?"uSUI4f!t^~6D.4+/,NAY(>$0H@LJ֭UH`߮ma]{jq7<[GAZ XT 8~Sy5?Y,-ךL*:Φ|kC~/LwrmSZE39Bٵ b +H/! Jpѧjl_./BDɭڴb-t§E }W[U?ouy=i}ﳞ9uQ=.4{w'k,#:hozbuG ߪ#GXgf(yA,H詧lͩqDyQ-5ꡐk1vzAh}2dc6QX2iQ:[**0&G8j Qp#[26C:0 qȔ6MqFeJgqߊ#Dlh siKW'1P:xaPyZN,~"](4V4_DIXt߮-#}7Kvk], \I$`L J.'; " mkH$$B4n:?vӶI8g_5i[6K+}ɮ>OGhήc->u̡6Lh=u\O ]iI[nKF8 OJ\ҡFQtdSs?h ztT+ ΀LY4RXއyU|~3 eM:_'CKGWy:*~cH(6ҕ%r#S3`h< |)%7hiPBi#{n & =a^{bҚlQeU:J'">;ϕR/zhiqhc[za/9C9ׄ Q&-V @.J+,ET KWSk}3,jHj7Ő >JMnu [ rc4P7F@-pE@ftH/|3X5 Qng )O$Icc?;` rQ-DU^(Pf`xY`780>phr[/-Ҷ6.s_B hAUCq%cP:&/abQ]JVi,'n!#ї HVBkW`+T*GoW"nLtk̸Q߫q>yӳFj*쉳0*C'U8g2ľAR>ēڳ;ݮHvM4"ʇm0LIν3W9:/'Jn?u*Z&g/} HӋqY~ ItHvnܬ&Mج-|uoY C{oœj}TZtoLiDI+u/;nEq-qғG$ۡ~ޡ!H~G$>U4Tz+2N_()he<>☱>+ t8_maYOuf /P 5 /NEvXaV7hת8#TQYE@ڱu782I]g`f$mR&mR48Ľz]D z7l-LY9l~ɴu%2J*|6".Jl"3܏ZzŠq`a̹c` (Qi8 ~冡6+ $vO#> *wuUJvr^%JDOo&ڻM#b.(hShZ:L+Ҍ^7m[61xQԸL m+λTzHKb %B賾\KIHck@PL{d^ 0ck`bXq1޲y* R$l^GQbϖwIO"pAȋQV3lr~mpUYTpO|&ug Mm=1{AL(:.ҡoI 6*DHЌB%+CrGNXG#4U٩0WTx1}cƍq쯾PU,(W2QKHF$*i]\?E+6܍3H-%b݂{\6ikE}D!qJo.*JG&@F,?zOƈv^b\X"n>/SZ$(fv\ٶ=R ]XF1'O$y1lGqe\7]'۞_%Jt&R XR'fnKf,C\sOΨhjK;om쮕s.~y '+z,Jtb8OZܚD 7Wԝ~4ėZlH劻$ iGMJAU(±uaq0_3" :Hga'd Ǡ% ה\[2oxh7rs'J7~`wҚ' Ev62&I=┰?$#ϒI\\4Nt87&x;$f2O}^QM) 1'4J3e ؏$%Ou2ăaNʕ% 8MS+yRf @͸SBxpf$}\X)p'MSJNH IB zlACѓ*`{L{竓cߦb duc\9_qկY _ o-8j1 GYJ=B$#nA[0.P:7 _Vޡ+UQHfҎ Mx S+&Sn3Q+"Žޠ-wF pH])G>F3ᵒS G|% U͒~Y)ɫQ@Oi+}CI>o Ip[;:̔_ h4e/:6s(S6>fvٞC6 F 80 ݸqgv77E]8wae;iK+9Tɢq[bTUxέiTAaVvfWj y#c W%i\ b Pt gJdq*ڷK8)vk伒I =ɶrL33푚@ mS4`[>܋zmXcS2LZ}{l&5Tw>;}o'K[Me2ZY~z1SOQy,o wm 4PKNjb (񐜗6EVDE{>ȷhڌG|z ˛Ei :v<iK3=p۸ỽX1{i3YbFx%).n3 !JxS변/(Y}he$۾􅦚m'pҳ_iUA< LFJumPSZg eO$L]L'd &!ߛ@I[#L4k"b_)ķx` nOpm̓࿕i/P&#Svtl'اqΑiq钵k>ӓ$ҕdyֻ4="V`m>cAƷ!؇w{t, pӠ2~2hJ`y$$^=O.02@}CBw8y=QM(ݿzA܇'9ߍQic65hm|/y洎|c8t !Z, ,4܆{R3.( i?.u >߮>|!zؾI!K}XPG|{3VHte'HE N?Gw7F冾G-!!jcG3"--_Ƭ~N?!@-d)cYαy˺Q<כ=Y~We֊۶6hʍ^TaKESYIP}EC8 XTbN.Ië2A]ID%:+2$ƌl4ar3n?թm;Oj5!bCdHY)Z7J)YT>4'jf=.I@8F0rMٲ81ΏalhpD+ hUg(  ā'1#7}m/i%İ^h!s8#޿Wno# [lTl4@w/}Me\bk)aXwo7AA"[xXdQXYx'ڑb#Chv`-<Ў>?"6-}sa%WM\S,٠D5TEorGh{ϓu4lj8^,\L~;~|!\wqj"f*Eץx36"022*HzWwDLDI XؾwĞs\f z!z@( ~ҎJv+^jFiik*B SGS#ip>#5[jL1Mk(Kd>Y'/l=iXG(fya,`9Zvhwn)U$x5a|?ˉޫz67͞M`}p%wO}0-X[yFQ#k"+ lmҹ6 s>τ4NXx3 pP89 ݬ` X)bsj8B!3Y8}~;nV?b!Tc40BO^p6pR£rb=p9m gvt M`ˀjSUlCz(&]1ì!e{zkbݎY)oZ— _ j{9D=_>: A;>4~1u'_S)(ˑ=k㳏;秽t6 Ym@)ޯPA[:7*i陧Y+s%W,?nĂjz9>_ YW!Ԋa\>-+0=M*`Le6gv;`sK5huu3 `WB eXM* zb=ۆ9"V\;rEs*f.U}lP(1<g醠fYy~3T*SȜ'uT@*j+jrUkǽB\mEM%UL^xM 7Kc9$CN$ŸgGcOMM>A:X1hl*g:*}4]<G]"L~MzUl! 9Aw]̂f `c#Uf“=\[kZ@C-QKui {0E"L0 6NOF X} Uj.J, IW>/zB$\. <"]gʧ@_43 vO^-NQ ED 88bSM*oP*BHqd[#R"a9ڭb` J̎~ ; cKNVGMwjKlRr̝6q%dҘ=^ӪUk[%=x&gM7 [$c92$Ӆ41Qo7E]Ԛr &]IԚ樛-`fo/nKb|(%"4ECG s;}kpH?TO]w9rX=\3ou)P{q,oD`aS %'.;i9ХAgzri[?=hfv>yC#&,F>X fhZha֗ڮ/אS /uaOǖ(.UU@cf%]gXugM);a) &}BS-D&;bV2nl3n-=_ApYߤѭ %*P%iWb Gh٧(* KM%_!UoHq%AF8ݪgݡ虝[LⰑyI$xW>gC2MH_>V/UˆӌD|bJ y&٘B,p lU+8ǫ*;wVn^`7-z}emP,u&H ;&kJ jiM~r÷u8O]`@Are-b& s q)Yfl\ )xB/oDCŃfm~ݲ,D`ԙݣ2v֣P$2'[x(]aW~ԁ"ߎx,KtSy&!MUliMȠŏsns"c`S4Dq-q5sUP~#:dbJl$K=GBxISHBeτE_L𐟕66-eq (.y4,޹jܝgKYr_Wg\p%v537hM/]2G9.]Xm0_Huæ6 ̱dhf)-sEY&"(Fܱh:s#\yE'QsW0ի1As p!嬽s)N A˓)i Cr- @kƛdl:97q_w)4VUp~r3qs"K3&..o2830+7^]cZCHjUk3E•9SlogLXc <5αUZ0Is5 6nb=>IulD#N?]g-7۠tٹP1i hB7 Am).BJ6}蚼Ga lATӨ(0˯Ź*2NE+HZFjkUSSU68I$.ʮMP%:pu t&:oucZi6-Yr;ek D!م'[E4Y;8 Q-@AYjrv!B$^r)6>C>l~U(Ikи̏+LccHw/b9h q }E˭(}&\Q֓Z]?_Eͨ׆&zc Tf@=#t5XSjpJE+8dp1>R]qblt8٩ UFZ߄(}Oa?]D 1z|zxmȱN+@xKP@M}C^MLTtv"_R ,NcCEI݌:4  ٷtvMtxCO-Ihnžl꧙|O-$O&e5_q>fk^a-za* /Or^Qrz.OdXRh._Obg>+Akpv!_v{9NGw*qM֌UE|߲.ѕڸ$FV}oWA8[ Zn:!Lrf_ވukVWJ4='P!0gIX_ hMg]I\d32|(w[4NT$q3јoʱHWvd)AVt$ pNz2BV՝+r>.K"2aMp s{[!kvVrla]>H0ԫv/GraWv㛒¼.MyدWR6| ~eK/0HA\]Pfy&اD#v`=YTVm 7 3T;G8swKD 36IhV7ބfzIKg9TJ"p$*Hм4s% / ,~3T{<Kg3:(zMR9$`@Q=f;K@OlW|__WG[Ja}z2QkE-~s1$q#A06CIZ/}l{Rr!\D!BlVl iUv)6,KKBeq7_bua4On3" dqêUgxnanKF( k库l~9jTOj_]rD6yGe6i{Apzd*@!7O_%pS;:9앎(|hL"'IXZ;~¥^sN -d., 3RCӧ:SI@ `tɐ]%D 8xkGxy8^3 3 cr:<D}yvlE1y8f[j2ȲvZOiԃB GToH3S~L! e1}q-ޞ2sdؙ/J̞Q`kr?tfC^iuq?{(E0cxpIJ,7|' 4.2Xh *x';E޸@]@U̶T!=\0&/cB|ou&лf̌mֆ,q\V] RpQ;HkK.ʦ=`~7o8x8V^ƦM>r7ʓG8XBD$ /Wa\+]PlР̊6`##l yE䛓O~Cx$B,߼|ʆ(q@Um=vi$"p^|FC} _2{ù2֘3nZX 8d"Nŝa^ЕY. zr©_K(Z[| d"^WbXzX”eޙ^5=(4I h4pl xH KmnsCU"@'uT#&Du y*uUFOȭæLeȎyj,s sH:B QYڼ[yR̗].W)_8;y!0b sKU~xL^]QV{ o_jVFN3TkaH|5 (S}M 6XEbccukNX9p t;|6rkD[T_F"$~#HlJaJ@*nޗγ8(_DZ~}~WCZWÍ> x0W2e ^kvčᆿ5$Ef&jXbsJGuTv3s. 3$Sv`ѮgHǂ CӢ!fu_Rör܇FWu X ۡI7wrLjc#h3 &mN|zH [sWh_dw@3ʰB)(^դL+VPMl}3cP< ʉzDegS]'"ރ;͇Yj 7LWjŷ/e4 ,(/Bk030K6w#(58rl _Aq dqжcTg`K(]-/=S9_*Rf/DۯTÓt_ ƻ޶Vl3]4;hU %J ؿRR/BeNs63սj^p?PjrLԖ\ aO?o=I~Jd%%t)mfͼ eBf>bϼ/j׽ˀS6e'';Q ܕS(Q1zj߁_^n]evLTNZUUzs(nGnqug!ިA"5/! vJ利T<X7DXI$"[m6L?ƞ.T"h2{deZVBTe ?Q\ȡ } U QI2{3|Hύؗ&`TߡC(gݖ P6<J\Kqh27,VOMY$6 OmWE([уZuFMGVsk3m[=>Y|D&F,^ewfn/4ǟzW5X;]Ҫpilv􆢘rHWfqQn֯̈́Ɏd@KrE&yDY%'jD1rp]].+гY.-e3 ^ֹ4IFdI41ly_OLK臱Hf{^mb`fֺ0ݍ 95LBcOR+#ۢp9 yCc]&z @HߵaKVhZ?%g}PW+- #:BDYP I͊ ]<֑ZTIXubdo8-:=@TXrR)J] p@sA;O[wf*Rt!;E JLWI%X ;!R޸Y`9dzOi5Ld(gHdžwҥrG)%n.88WLL4 8P. kL+a#OHH6 |Ǿe'I&h'9{=23ΥW%ͺ8f΃d)ڳr^X7.:AENĺcFbu-< 3w{::ͭ5 EAM4E] /e;'ޮLl=|q9_P06a/6",+gmJm8K4 V.4tlY*I@ 3Cy\/|SKDAwnu=~qY[dB 7?`g0ڧCOc_u񌊠pٚ7^WHBMWLGQD*8F(DD@'}Nq ZA_ IU ηC `IZj vHKv^r^xϒłUMM Py DU*^3 ~!1u6(n=ڄTiQ+}l6n!L&yW9l =VX{Eû 1uLv{N"jSoT{{yysRցmwEMʺ?*a 0Ս,Za7Qä jPT7z9^Nsf*^,˅L[ɘ:0_q{f摼l9v959w*M5j$,CSt!H Y{?W< +SϙE1M7kɮEfX5uɼtlskK{ ',Kj姻:6bDr.t(I '.0yئ84S_y=p A}mlAM2!st:qp>->ݝl҆ s(hc|ʠ.,cN4bz`6h"kZk7UAnR]cbKL/3lxg94hH}":/3iCWmy>ow%} ֺ4ܪLt^hq]00L0o~?]JKdꋫV޴b>"txCe+ݮa`Mb^x6W1:zx|گYQ+*.ƶ#KԀ{i":"Ȫd73A/FEQn6\!]7N0gReوjxzYUWؗLa4D"ű#Uo/LyP|#A. es ZFYمGﻋa)>yP2r]a#2nCpt\zG<^o*&Zj ߐ(r^Bf̨'ڦnNH,{822$66fEo D<5`o>&4':\ E+hZa^6 j+qVj'O)j*#K K}}_nG%VhgblIS+ "h)tzʧ ~)[Sa^hR-.#\L oWow "|u峎Pߝ,,~͐tU#~d$Ne?%GDgB"'-O/f|Uo2JXѭ.S=ll qXu,VeGo>v(ð*iw"L&d8)* s|ܵmdoYuJBB6ʫaU,lW3"+Ԁ9]~cBr@ ol: oVe[+JNKwb![dB lX]:Anf󸭷KHF~r# lYY_E0FGY/\]9ϘPMAkȿv.lJڂ]_Pĕޞl$PLx_Zf踨{VgC*ѣ6YwtaX0_PIk~RT>ٞ̿.8-uWg!cdOEXł;6[@K z4 /Scwh5s*ZRx֖K~;`k_%S~/ Z ~' #Rh0U^~# <7奋/W٭}"Ikb,gN.zOcof6e(1;EDL<@mo ?X{- d^ !#:VI;i0reӂWb P -!9yEE{%{^ Vei w(c|L8-^Z] YIr'.ׁD͍ /EKҚNJYQgW!gY#Va1 OD"c9{:p|[Ju.lJboUd4m, :‚GQ{QM .,l}s$Z|c%YX0/OWkZbT(: ,P >ۭ,t]%Q1W?$1*jz/6Ȋ>PCMb]:p tƑUcbMBa>%-]r8j{lFBPp+A3in'G.{vI* "X+:]lpRv I8-@6mfC侄,䗖/t֤5ɂTW)fY橕O3|tӶ[{ `+F-QشQ(!QP~u4|HCAOMH5AF[gc!ӕ}Vc&/ɐaז߸>2= #AJV|(h^*G;ǵƿԿEw1OɇrRWdZeՄjk̲|L^ys9RY49!>FB-n*hh+=y/>"<]od=1lf&1xM}E$a|fԡU!2/pn?'~. V,pvW-[ￂuX`UX>!Kuq\̦PXPBeOYngAhO|9.i$Q(+q 5/ K](%\,կn$ύEX\UZk3GBT+pB*?LޓF-Fu{ӪkbSU1#FD&EXx4 =]`՘ʃf\OYY_H& ?NKꁸn]٘X'I Rht sO* V}\|AlNx6U,YΠj9"nu=v`PvoKq0Ujg(7<X4{gQ!/c~Agr`X%a ,%ƣa[>Lkd7oVJNPx{oNT40V  4DDc ;>H _$ $#>GZԯ՚+ OQ(q㾞5y2"k^ݍؤC&Jn_VWiͼSh:|A/sAIs;Xo FVk ,ٮ]\@vw*"W3j ѻqSɭeHQzd*&A f-`<7cg.g% ߺJ"~ ً/+Mt. T)1߰9ei ?h+b13tз/"5(LGe'd- ; ^<&gG/9@Vº޲3UlH:l 6FmLCWkJk]?h֔y~IB1%!hnAlUMmjL+C:bsdTzϊص?E듊k.T?"nNspᅣӖwoGC|o5@ JØ?u%is=>t~SMҫ 'V=5^Iw49-̇iʗdqEY%ܓz'b,bP G.'M~blW\Y z~|jtvZ^aJXX gA'v,j^<7yg-fsK\&ۄ͢{sZOEv s0'7=? ؃-kU>&|7)Q0/ tXT< }+0cȾjCLS#8[1i9"9"ԆdAg2'%t. 0?jbK(&l"M©ETXex sSJe, t w]a"܂hjM:Ev,:淪4!}K/פn%R+4f4R5qd<)&NJu|}=|L5qX46CeKV0I**ۇW*3Դ(d嬿C1}Wn RkL wR58ݬKbMmQLvV9Z!18,vЗ2Ph~ pصyMM'iS}ÿa,|sk^J' ]q4Dp,>$' ^f0(M C ߖM!gx4i_ ˑ*(z-,UiNh]M|h*Kx) xnÇcFF)$3Ă}9P"(9Q`dEݘ%^Xӑ=#jA$eQ0iNIh~vpj[UL<0)OT1qB4)jī.Φ26C{mRT}K 6O&Gܨ*lVT'L5(Zd ZDɅРx̹:nID[=b$̞nv7,})Hatn[vF\W9νmօ0Ʊt7NjEZWh?y@^R\`ROXLeo˿tʼn-clח[9ʾ'7q%7WݽIb,}ƌ;]BĥSlorIvbVk=T*!T(3ָ (2rO,q77ks_00MzC$~ v/ju_נ?WܪjѢzR; H-iQ*A7sw`9KQS[Tג ݡ G{S܇'2Ws4rPAͨY>w)#Gh΄w"c EIy{roc}Q>M/RzءJYRM%+^8 %q3Tȟp^+~ꞌ7HkNhOygOx턲؉ȻC'ٺ~Eh.$Lr qv|Ш/Wۘ-) CVڈ]%7+oSK,fڷ Я8:ոq7yTls20"JX2>~m JƘUaCNejߑcֺ:Pfwֽ?:7&&n(RC:E.aGf;N?p-]X_l)9S +׬#^6^㜡YۺlYTA_6/ߚ_=X g&\}6==|1,sۿ5ؐ}MI5qX E; X{bqAs_jc`Y,r:f֓U[Nvx#rP b"QnnaRX"m81Ȩd *]8'@ui.}֮c6]3Go\>v~Ų s) B1Fp $.@*H|$+EW^l~yYNB$k`U@WcVfD.zỲ0S/Z(1cf`rȽ#Dl M(Tu՟\ (܁gtdA(bh:IVgԨ@swdov\C;bWkzF?)^ruu^KVѵaQy3KU7݇ji= F=^O0Y{w%0{B m#WIG9tR> sL4MC8 è}16h[GXݬ2!N]r9IxŽ2uw 0|un͐? x鐐=]PQlyi}x| "ʮķ,CD$ #{*.w@N1Y@9?Y WA$rHۏ&mIm팭\4)ZsrcBwYJyӈ6]bGFW-f$!BNxc_{l<S_x b.Է/ Zdػ+,dzjtKMhb{O|ȚۣK%zd0Tr^.%B2sޅzTc*[ZU )M4bZy+ՙ~c?ypI<3]NVBAY߆z8cMQx65F:NΗ#v9bxp\yM$B:LeǼ!0@|i=;9eZz Vbjiŷ* }&, I&D{NCKDD] nNZ!sSvf8vzY AYfxV nlr8YO#BXjM@kk'1J t1ҭ-jZ!䚳R Q+R]D%3^/ߌX杀< H؁' +t>V*cE=f" {6ơ+&CA,S2]jrt~ScYK@?HPmNnO%!"X&p2R$oXj Rj.d{3kՏ[{]pVTe?Dzàh֬e3ϟ`Mk#f>ٓ66Xs>ȂYvϦC\KX~ˆo5gnuGg#9̧cٹU胓E9.%( \ņItL#m|>uvɐ0myavzdʥ-Ao-ϐ`cV@jؗ)3:1>,%ZrAӜQbQxU)ʯe;=(1'oY΍-N< ?S1xhCy{ ^ ?5F32D:htBabD'bKanrGF2]k"."nc5PZ{;($F~|!16M_Ϸl1Nw_/C2tÏ8`ov4 'v(%dlZ䔗r{d(Q͈٬뒚Qcѫ{ν̝+c{c=P=O3f^NYíeFf8Jp1:̀*߷>d6l8$uՖuȱ6-g$/ejwF[nIG/?QS7u\=a_YؒI(=L f4:J bMnͧ`0SP&zgmC{B?𢽴lwLx8O+z׏@=/X$Uo.L8`?7ԫo#O"L;6X :U*ڴ_,A q6\b ;fXNL:l#]N65q9shk▨L/rS͵FLd;Yt:"&ل=|'@!9e %{Tm_;Cc\'|rZѾ!1K<x\ $Q}2iҞ]6m 7A|UɭuFI^ 4=I. ҩ%O4R2U8 SV.1l"IIl$FFh ?'RgM 𴂯jTr?]V&;#%ZSXAd/BbĬʌ@Z{vB$墐b"~ fJ>_)"bQR~u]7f[WIՏU0Ǩ֦=uדqp v:u3*nضA4@.yC{)o_]iLOVĊ_y_~26RiSܹMZH!AnY¿Jn4 6KzUa[.< )tay;} RB3@~{ D_60iZb(xt|gQqWJcXD%F?aQ>_[9 }] OVk-QC7Df4;șa*_kҶp(۷;/w30wUR~SY3SY2t ԱXGWҢAg l\ v)Z䡖+_{L6;[MFkE k|{Ľ WgD}b"I5 ;)r8Ч[ LN,i.T,3AI[˗{?WIB ^Q4c0-pDqa "~p衴j3JX>uMRG%`؉O7BU濸׶BFU ěbAd `ca[df 6IѨEh"q}& #k/ 4YnCDWg ql '.d)O*9GG]K/2W71e`2~J64MjC̏"g0Zk$ wLĭ OH7Ylh-r# TXhh%ѱzpY#'- gEmȎ'zE±|;TS&#Qĕ8L^Z@ vsX <[?9R')ҢS?>Up"o4 J@ Rsfϼ`trVKlfǼFy8K`OYc)*`7:p{1wꚠ& ;Hs{3kVHK ]sIHi (=Wm1Ϳ.is`{rFJ`c:'%RA[y}t,{+TZO15}P mR bk$.N8e+B^R i'p7aREDĎ'+ AsW'b j:`!^o=0j}mƘSQo;TaJձe?e).F̋a2gG,C.zW,%r[fhdϗnX-vp :!,̉}E5`։'t0?&$5%)֜@Q_,kbƙ10k!ռ٠/w|@Ժ}7 W:(iZ*+@h+h eI7w1EFXހw '{9p>1n^шm@`,0٘"+ۈwc,QpuR_2+%u4rWL;Xq>..˰)cs5X [TЅ [^MmN󄔂R%/BX<&U)$ ;`f(!"%IE|o {@bu_N};3FKU:a3;uzJ'iP.L&,͸r&Ou|/l-$a.|d2 %:*@UBة$Ah@n=@Ur Cf4&p8lo®ʭ4_w'`f6E6 ( 0i,u1IgvsiVqUt˃LQ8)/Z]SCw(^%l"&I\sFqLo]v\h$*-叉OSd$6}.wK%Uds0N.le lʥ$rxNΌ:kla6;U]B1&C"(7JoPkBc*ʯn,J%Ҙ4w…cN+j8Y@J13.:D g6xմOhj|:îp6uL(X< ڽدHRM8@ , &nL1|&}_:B(k3r}LQ7Wsix]ʪ!˞Sv~!UI!ThGI.K*| ɖ-Ă!V*h6f} vԓy,7^&*}1& 5Hҡ#kze0bY0qaj4zls>F!ৣU@^x88kI36)Ko=Į97i"O[ *l2 LXza:nh ^۷Q9r,Hng }{Pwoz0󁬫**ho 2+g{kp:O,)Fܷr6o-N2" -<@^ ZxřiߨOҭ.z\ˇ1r IDlnt1Z؅!}d`PDZSV_ G ,ێX3ond>#ʥݒWV jkCHu F6Tcϥ4kAOK8OrJ Y 3B\q 5 '%-϶Nme$rSMӁOI5(qV x9)t&p>KRMN,z!ꥷrxSojJ37kyVR'-;-1~5kwaMfWei5U^khC3l@<65WL\]u~E+BT=) \U(~W0~KfF*Dw]Mmff0}FiVdEX>& 0f[MK v7.AY@q1:;x<]֖-(lҩ#Jjhٴin(/e|~fUt!;Ee* ]LɒQa;Ψ(|o . ؛0{c[*V2Wh-`6k8x]>bk=e(ۮ+)TZKج܇K԰S0 xOME;Z|u3ΓK<Ɠ 4k+t&jpP\QٯV+7 dWbK˨l*/'E03W%H0&ˇvQMku`V#8:lmfHZ:uEqް |5[a=+RLo%Gߗn0 7bNN`&ͲPj%1b'"n=GQ٢P.G5Հ fpP5FKn@nILeyPj m[}s@m2^+1Lmj>d[91ꝅo cJ&Ka֐*-% 3+oq"跢Ne'@2 {zy gHOz *H %ʆ1R3B5sDyZIw歓ap?%dabޡDj gK}~'8;uOqߪz)A҂vx{I+ibFJ7ЁpVɁ^4gTኇ{ett,<Ϥj~=z? b mY6R=jsPEEQ ձ\7JšC#>&w,zؤSeO5`l%5-G c񿚐{ eg}"*Zq scq}%ǖ}}]_Ӭ:fdlk2td9RZz)L֣ ST@#~.IbXo:I]Woy'H?~9(GI hJXMPsYѝD/&#~Ƿ3?2S7mpCcL8R ϭpt @_Il#5n k^3a$@!Яn8]l>n 2u0^\F% i;$`-oM[Ez0І@S#Pk^׼ź3 qJ:Rף֫zGI4|ѱ9jʋ0Q/8F#?@ǭABَ? =2#$W޻3/|V= K5˰J5]PwW~P?ZV|[*F^.A U&6 P^!U 4A0OS@+t1&Bf 5ADTtl8#-܇5+-4RF:%b;䵉i)n{s ]>\ &rizF#jR+Ł6%hbFcRuj.F.2Jxbm+7&`Vcb{_nŹx@e{L2J9N$mLn$4 7sA;R(sBVZ'RUՊ"lRE ]hQMIW\MC^Ix?ɄAm0&bE, ^QXOOhnZmMsP1 x&CY>*P#`s w6! 4"ՇlgSAF <|ݨX5?QFN,Do*9x EH=s9غ3l:k %"t0>82蛇bHf>NwBCZ3s$|ٯ+a" pJ΃ȋ @2JRG\&ln"X9V;¶"XIo9BXҀ{BSȁg:Yfش Əy$3q.[%ޮKb.*/K:WYO5 Td+xRx s3iDYݤwY7)j92CU+ďЃ9EܘJ̵ڥ6@Euooꈃhټ?rgك^t\O~-a*`Q%uw'SьAUT0,1 R)bOߦx%IͽYo4 `zVE[)D6B@nqU@AQWc5 ?2k0`kG!.b p;o촧 Zr75dJgŇ#zJ_*x\eƽbza a;S-OMwA>5wx,MoTdr+ţ(\<5 Mksк6L@$ZT"&x|%vyƠc>$IJ;R<.DqzCV8cjqQ1|ʘӮR< ؑOUل$ZTi~KVvVh e+XD _OB =G#Mp!|eM59G2 ƫiԆ&@v!y/ _F,UCo%^0-DnkD Gٱ ҖǟQB JW-V/04W>! +WɡȚ^F?®BM1?+Sv0+۔j d}CQ-f`m*{ FUz'$?\ Ζ(_@6ңoQwҰ}kςz,Pec ]&@؟UZue0'"ʸ뉤Ҏ]C2A'BR}"#` |^=[ ,Hja0"XdRFص9[ D%@d;Z #~&s>h'Vs趎<1ldz8-5X|̫zZ=oIܱSq0/Ψ:Z!+`Y;5w,ibꘞ9QZ3v ,NZNLp *z 8_|)H!G~I! #GuDք&&cws3"Bj3h<4=C%a.b0=вm!"g^iPJ-|g@1MU>A Bjyar~+=TE.hQ*)\udझ_;$}]4!$c5^anxwXX }T:2[+]11nֳNUϜ9'r^x I(ʤ Q={^{d>*€,D Oj AR¶Բ0$ TG86WM EGv {3jiJ6JBh;, 3j|o$0+zm-a} +oqSN3fme*',ʋ<5L/OF/"Gwvnٻ2$+ŦīY y,JYBPvLT4,['s *=/`BJ]!LYoyq/ -