redis7-7.0.8-150600.8.19.1<>,hFIp9|996p'aXPx<L5t?j#pUV˺?bk٥ :yŪ";2?C^J#y8 iwlSTi|z 4F0Pӈc*#xm(ta)^] TK{H~P畚.@ך)moqIj)R_QTˏ:>$Zb?>Li$?id   ;6C Yev|W  +`   X  l'L '''(8g9 g:(g=]A>]I?]Q@]YF]aG]xH]I^pX^Y^\^]_h^`bbcbdc8ec=fc@lcBucTvcwf|xfygtLzhhhhhhhiCredis77.0.8150600.8.19.1Persistent key-value databaseredis is an advanced key-value store. It is similar to memcached but the dataset is not volatile, and values can be strings, exactly like in memcached, but also lists, sets, and ordered sets. All this data types can be manipulated with atomic operations to push/pop elements, add/remove elements, perform server side union, intersection, difference between sets, and so forth. Redis supports different kind of sorting abilities.hFIh01-ch3cRSUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Unspecifiedhttps://redis.iolinuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in redis.target redis@.service redis-sentinel.target redis-sentinel@.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi /usr/sbin/sysusers2shadow %3 <<"EOF" || [ -f /.buildenv ] u redis - "User for redis key-value store" /var/lib/redis EOF [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/redis.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in redis.target redis@.service redis-sentinel.target redis-sentinel@.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi echo "See /usr/share/doc/packages/redis7/README.SUSE to continue" test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable redis.target redis@.service redis-sentinel.target redis-sentinel@.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop redis.target redis@.service redis-sentinel.target redis-sentinel@.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in redis.target redis@.service redis-sentinel.target redis-sentinel@.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart redis.target redis@.service redis-sentinel.target redis-sentinel@.service ) || : fi fik6lzo]Vu ,و3 4WA聠@큤A큤A큤AAAQhXhE"hE"hE hFHhE#hE"hE"hE#YQ[|b{YoUan^ ,`?7hE#hE#hE#hE#hE#hFHc~c~hE"c~hFHc~hE"hE"hE"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../sbin/redis-server../sbin/redis-serverserviceredis-serverredis-serverredis-server@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootredisredisredisrootredisredisredisrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootredisredisredisredis7-7.0.8-150600.8.19.1.src.rpmconfig(redis7)group(redis)redisredis7redis7(x86-64)user(redis) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/shconfig(redis7)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libm.so.6(GLIBC_2.29)(64bit)libm.so.6(GLIBC_2.38)(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sysuser-shadow7.0.8-150600.8.19.13.0.4-14.6.0-14.0-15.2-13.2redis4.14.3hh~+hch=@h 'g@f@e@eod@d~cc<@c]c @cV~@c*cbK@bb@b>b@b@bzSbzSbu bi0@aKaZ`]`r``7@`~@`~@`L@`@`>(`>(`6?`6?`&m_@_ _[f_^@^ϧ^'@^@^^^@^@^^y@^r @^>^)^ ]@\@[@[h@[[[[v[E@[#@ZZJ@Z|;Zm@ZN@Y@Y@YJ_YXXX WWWWWs@Wo@V`VQ@VU|@U~@Ut2@UW1@U/@UUU:TܕTT_W@antonio.teixeira@suse.comantonio.teixeira@suse.comantonio.teixeira@suse.comantonio.teixeira@suse.comantonio.teixeira@suse.comantonio.teixeira@suse.comantonio.teixeira@suse.comdanilo.spinella@suse.commartin.schreiner@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comandreas.stieger@gmx.demichael@stroeder.comandreas.stieger@gmx.dedanilo.spinella@suse.commichael@stroeder.comschubi@internmichael@stroeder.commichael@stroeder.comdanilo.spinella@suse.comschubi@suse.commichael@stroeder.commichael@stroeder.comdanilo.spinella@suse.comjsegitz@suse.comdanilo.spinella@suse.comandreas.stieger@gmx.dejsegitz@suse.commichael@stroeder.comandreas.stieger@gmx.deandreas.stieger@gmx.dejengelh@inai.demichael@stroeder.comandreas.stieger@gmx.demichael@stroeder.commichael@stroeder.comgarethmccarter@gmail.comilya@ilya.pp.uaandreas.stieger@gmx.deandreas.stieger@gmx.dejzerebecki@suse.comjzerebecki@suse.commichael@stroeder.comandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deschwab@suse.demrueckert@suse.demrueckert@suse.deschwab@suse.deandreas.stieger@gmx.deandreas.stieger@gmx.dekukuk@suse.comilya@ilya.pp.uamrueckert@suse.dekukuk@suse.comkukuk@suse.comilya@ilya.pp.uamrueckert@suse.deegdfree@opensuse.orgmrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deilya@ilya.pp.uabwiedemann@suse.commrueckert@suse.deguillaume.gardet@opensuse.orgilya@ilya.pp.uailya@ilya.pp.uailya@ilya.pp.uailya@ilya.pp.uampluskal@suse.comilya@ilya.pp.uachris@computersalat.devsistek@suse.commpluskal@suse.comrmaliska@suse.comastieger@suse.comastieger@suse.comjengelh@inai.deastieger@suse.comastieger@suse.comrmaliska@suse.commamorales@suse.comeshmarnev@suse.commpluskal@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deledest@gmail.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.delang@b1-systems.demrueckert@suse.deledest@gmail.com- Fix CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, multiple LUA issues (bsc#1250995) * CVE-2025-49844.patch * CVE-2025-46818.patch * CVE-2025-46819.patch * CVE-2025-46817.patch- Fix CVE-2025-32023, out-of-bounds write when working with HyperLogLog commands can lead to remote code execution (bsc#1246059) * CVE-2025-32023.patch - Fix CVE-2025-48367, unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS (bsc#1246058) * CVE-2025-48367.patch- Fix test suite failures with CVE-2024-51741.patch- Fix CVE-2025-27151, absence of filename size check may cause a stack overflow (bsc#1243804) * CVE-2025-27151.patch- Fix CVE-2025-21605, output buffer denial of service (bsc#1241708) * CVE-2025-21605.patch- Fix CVE-2024-51741, malformed ACL selectors can trigger a server panic when accessed (bsc#1235386) * CVE-2024-51741.patch - Fix CVE-2024-46981, lua scripts can be used to manipulate the garbage collector, leading to remote code execution (bsc#1235387) * CVE-2024-46981.patch- Fix CVE-2024-31227, parsing issue leading to denail of service (bsc#1231266) * CVE-2024-31227.patch - Fix CVE-2024-31228, prevent unbounded recursive pattern matching (bsc#1231265) * CVE-2024-31228.patch - Fix CVE-2024-31449, integer overflow bug in Lua bit_tohex (bsc#1231264) * CVE-2024-31449.patch- Fix CVE-2023-45145, race condition during UNIX socket creation leads to permission bypass, (bsc#1216376) * CVE-2023-45145.patch- Fix bsc#1212119: redis services disabled during upgrade. Whenever a user upgrades from SP4 to SP5, the old package named 'redis' is uninstalled, the new package named 'redis7' is installed. All services names 'redis@' are disabled, since the file redis.service is no longer available, as it was removed when 'redis' is uninstalled. What this commit does is remove the "Obsoletes" line from the spec file. By doing that, the upgrade doesn't force the uninstallation of the 'redis' package, which does exist for SP5 (both 'redis' and 'redis7' are available, for SP5). Because the conflict is maintained, it's impossible to install both 'redis' and 'redis7' at the same time, exactly as it should be.- Fix CVE-2023-41053, SORT_RO may bypass ACL configuration, (bsc#1215094) * CVE-2023-41053.patch- Fix CVE-2022-24834, heap overflow in the cjson and cmsgpack libraries, bsc#1213193 * CVE-2022-24834.patch - Fix CVE-2023-28856, HINCRBYFLOAT invalid key crash (bsc#1210548 CVE-2023-28856) * CVE-2023-28856.patch - Fix CVE-2022-36021, Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow (bsc#1208790 CVE-2022-36021) * CVE-2022-36021.patch - Fix CVE-2023-25155, Integer Overflow in RAND commands can lead to assertion (bsc#1208793 CVE-2023-25155) * CVE-2023-25155.patch - Fix CVE-2023-28425, Specially crafted MSETNX command can lead to assertion and denial-of-service * CVE-2023-28425.patch - Fix CVE-2023-36824, heap overflow in COMMAND GETKEYS and ACL evaluation, bsc#1213249 * CVE-2023-36824.patch- Change name to redis7- redis 7.0.8 * CVE-2022-35977: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic boo#1207202 * CVE-2023-22458: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service boo#1207203 * Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD, and ZRANDMEMBER commands and gets disconnected by client output buffer limit * Make sure that fork child doesn't do incremental rehashing * Fix a bug where blocking commands with a sub-second timeout would block forever * Fix sentinel issue if replica changes IP- Update to version 7.0.7 * Fix regression from Redis 7.0.6 in distance replies of Geo commands (#11631)- Update to version 7.0.6: * RM_ResetDataset module API should not clear the functions * RM_Call module API used with the "C" flag to run scripts, would now cause the commands in the script to check ACL with the designated user * Geo commands speedups * Fix EVAL command performance regression from Redis 7.0 * Reduce EXPIRE commands performance regression from Redis 7.0 * Optimize commands returning double values, mainly affecting zset commands * Optimize Lua parsing of some command responses * Optimize client memory usage tracking operation while client eviction is disabled * Multiple bug fixes for crashes, hangs, and incorrect behavior - drop cve-2022-3647.patch now upstream- Fix CVE-2022-3647, crash in sigsegvHandler debug function (CVE-2022-3647, bsc#1204633) * cve-2022-3647.patch- Update to version 7.0.5 (boo#1203638) + Security Fixes: * (CVE-2022-35951) Executing a XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument, may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. The problem affects Redis versions 7.0.0 or newer [reported by Xion (SeungHyun Lee) of KAIST GoN]. + Module API changes * Fix RM_Call execution of scripts when used with M/W/S flags to properly handle script flags (#11159) * Fix RM_SetAbsExpire and RM_GetAbsExpire API registration (#11025, #8564) + Bug Fixes * Fix a hang when eviction is combined with lazy-free and maxmemory-eviction-tenacity is set to 100 (#11237) * Fix a crash when a replica may attempt to set itself as its master as a result of a manual failover (#11263) * Fix a bug where a cluster-enabled replica node may permanently set its master's hostname to '?' (#10696) * Fix a crash when a Lua script returns a meta-table (#11032) + Fixes for issues in previous releases of Redis 7.0 * Fix redis-cli to do DNS lookup before sending CLUSTER MEET (#11151) * Fix crash when a key is lazy expired during cluster key migration (#11176) * Fix AOF rewrite to fsync the old AOF file when a new one is created (#11004) * Fix some crashes involving a list containing entries larger than 1GB (#11242) * Correctly handle scripts with a non-read-only shebang on a cluster replica (#11223) * Fix memory leak when unloading a module (#11147) * Fix bug with scripts ignoring client tracking NOLOOP (#11052) * Fix client-side tracking breaking protocol when FLUSHDB / FLUSHALL / SWAPDB is used inside MULTI-EXEC (#11038) * Fix ACL: BITFIELD with GET and also SET / INCRBY can be executed with read-only key permission (#11086) * Fix missing sections for INFO ALL when also requesting a module info section (#11291)- Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update.- Security update to version 7.0.4 (CVE-2022-31144) A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. The problem affects Redis versions 7.0.0 or newer.- Update to version 7.0.3 * Performance and resource utilization improvements - Optimize zset conversion on large ZRANGESTORE (#10789) - Optimize the performance of sending PING on large clusters (#10624) - Allow for faster restart of Redis in cluster mode (#10912) * INFO fields and introspection changes - Add missing sharded pubsub keychannel count to CLIENT LIST (#10895) - Add missing pubsubshard_channels field in INFO STATS (#10929) * Module API changes - Add RM_StringToULongLong and RM_CreateStringFromULongLong (#10889) - Add RM_SetClientNameById and RM_GetClientNameById (#10839) * Changes in CLI tools - Add missing cluster-port support to redis-cli --cluster (#10344) * Other General Improvements - Account sharded pubsub channels memory consumption (#10925) - Allow ECHO in loading and stale modes (#10853) - Cluster: Throw -TRYAGAIN instead of -ASK on migrating nodes for multi-key - commands when the node only has some of the keys (#9526) * Bug Fixes - TLS: Notify clients on connection shutdown (#10931) - Fsync directory while persisting AOF manifest, RDB file, and config file (#10737) - Script that made modification will not break with unexpected NOREPLICAS error (#10855) - Cluster: Fix a bug where nodes may not acknowledge a CLUSTER FAILOVER TAKEOVER - after a replica reboots (#10798) - Cluster: Fix crash during handshake and cluster shards call (#10942) * Fixes for issues in previous releases of Redis 7.0 - TLS: Fix issues with large replies (#10909) - Correctly report the startup warning for vm.overcommit_memory (#10841) - redis-server command line allow passing config name and value in the same argument (#10866) - Support --save command line argument with no value for backwards compatibility (#10866) - Fix CLUSTER RESET command regression requiring an argument (#10898)- Use bundled jemalloc to fix active defragmentation, fixes bsc#1200913. - Remove patch: * Add-support-for-USE_SYSTEM_JEMALLOC-flag.patch- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.- Update to version 7.0.2 * Fixed SET and BITFIELD commands being wrongly marked movablekeys (#10837) Regression in 7.0 possibly resulting in excessive roundtrip from cluster clients. * Fix crash when /proc/sys/vm/overcommit_memory is inaccessible (#10848) Regression in 7.0.1 resulting in crash on startup on some configurations.- Update to version 7.0.1 * Improvements - Add warning for suspected slow system clocksource setting Add --check-system command line option. (#10636) - Allow read-only scripts (*_RO commands, and ones with `no-writes` flag) during CLIENT PAUSE WRITE (#10744) - Add `readonly` flag in COMMAND command for EVAL_RO, EVALSHA_RO and FCALL_RO (#10728) - redis-server command line arguments now accept one string with spaces for multi-arg configs (#10660) * Potentially Breaking Changes - Omitting a config option value in command line argument no longer works (#10660) - Hide the `may_replicate` flag from the COMMAND command response (#10744) * Potentially Breaking Changes for new Redis 7.0 features - Protocol: Sharded pubsub publish emits `smessage` instead of `message` (#10792) - CLUSTER SHARDS returns slots as RESP integers, not strings (#10683) - Block PFCOUNT and PUBLISH in read-only scripts (*_RO commands, and no-writes) (#10744) - Scripts that declare the `no-writes` flag are implicitly `allow-oom` too (#10699) * Changes in CLI tools - redis-cli --bigkeys, --memkeys, --hotkeys, --scan. Finish nicely after Ctrl+C (#10736) * Platform / toolchain support related improvements - Support tcp-keepalive config interval on MacOs (#10667) - Support RSS metrics on Haiku OS (#10687) * INFO fields and introspection changes - Add isolated network metrics for replication. (#10062, #10810) * Module API changes - Add two more new checks to RM_Call script mode (#10786) - Add new RM_Call flag to let Redis automatically refuse `deny-oom` commands (#10786) - Add module API RM_MallocUsableSize (#10795) - Add missing REDISMODULE_NOTIFY_NEW (#10688) - Fix cursor type in RedisModuleScanCursor to handle more than 2^31 elements (#10698) - Fix RM_Yield bugs and RM_Call("EVAL") OOM check bug (#10786) - Fix bugs in enum configs with overlapping bit flags (#10661) * Bug Fixes - FLUSHALL correctly resets rdb_changes_since_last_save INFO field (#10691) - FLUSHDB is now propagated to replicas / AOF, even if the db is empty (#10691) - Replica fail and retry the PSYNC if the master is unresponsive (#10726) - Fix ZRANGESTORE crash when zset_max_listpack_entries is 0 (#10767)- Unbundle jemalloc, fixes bsc#199164 * Add-support-for-USE_SYSTEM_JEMALLOC-flag.patch- Add ReadWritePaths=/etc/redis to redis-sentinel@.service (bsc#1199198)- Update to version 7.0.0: https://raw.githubusercontent.com/redis/redis/7.0/00-RELEASENOTES - Remove upstreamed patch: * getMcontextEip-return-value.patch- redis 6.2.7: * CVE-2022-24736: An attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process (boo#1198953) * CVE-2022-24735: By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis can inject Lua code that will execute with the (potentially higher) privileges of another Redis user (boo#1198952) * LPOP/RPOP with count against non-existing list return null array * LPOP/RPOP used to produce wrong replies when count is 0 * Speed optimization in command execution pipeline * Fix regression in Z[REV]RANGE commands (by-rank) introduced in Redis 6.2 * Fix OpenSSL 3.0.x related issues * Bug fixes- Added hardening to systemd service(s) (bsc#1181400). Modified: * redis-sentinel@.service * redis@.service- redis 6.2.6 with security fixes for * Security fixes: - CVE-2021-41099: Integer to heap buffer overflow handling certain string commands and network payloads, when proto-max-bulk-len is manually configured to a non-default, very large value (boo#1191299) - CVE-2021-32762: Integer to heap buffer overflow issue in redis-cli and redis-sentinel parsing large multi-bulk replies on some older and less common platforms (boo#1191300) - CVE-2021-32687: Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value (boo#1191302) - CVE-2021-32675: Denial Of Service when processing RESP request payloads with a large number of elements on many connections (boo#1191303) - CVE-2021-32672: Random heap reading issue with Lua Debugger (boo#1191304) - CVE-2021-32628: Integer to heap buffer overflow handling ziplist-encoded data types, when configuring a large, non-default value for hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value (boo#1191305) - CVE-2021-32627: Integer to heap buffer overflow issue with streams, when configuring a non-default, large value for proto-max-bulk-len and client-query-buffer-limit (boo#1191305) - CVE-2021-32626: Specially crafted Lua scripts may result with Heap buffer overflow (boo#1191306) * Bug fixes that involve behavior changes: - GEO* STORE with empty source key deletes the destination key and return 0 Previously it would have returned an empty array like the non-STORE variant. - PUBSUB NUMPAT replies with number of patterns rather than number of subscriptions This actually changed in 6.2.0 but was overlooked and omitted from the release notes. * Bug fixes that are only applicable to previous releases of Redis 6.2: - Fix CLIENT PAUSE, used an old timeout from previous PAUSE - Fix CLIENT PAUSE in a replica would mess the replication offset - Add some missing error statistics in INFO errorstats * Other bug fixes: - Fix incorrect reply of COMMAND command key positions for MIGRATE command - Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue) - Fix the wrong misdetection of sync_file_range system call, affecting performance * CLI tools: - When redis-cli received ASK response, it didn't handle it * Improvements: - Add latency monitor sample when key is deleted via lazy expire - Sanitize corrupt payload improvements - Delete empty keys when loading RDB file or handling a RESTORE command- redis 6.2.5: * CVE-2021-32761: Fix integer overflow in BITFIELD on 32-bit boo#1188598 * Change reply type for ZPOPMAX/MIN with count in RESP3 to nested array * Was using a flat array like in RESP2 instead of a nested array like ZRANGE does. * Fix reply type for HRANDFIELD and ZRANDMEMBER when key is missing * Was using a null array instead of an empty array * Fix reply type for ZRANGESTORE when source key is missing * Was using an empty array like ZRANGE instead of 0 (used in the STORE variant) * redis-cli cluster import command may issue wrong MIGRATE command, sending COPY instead of REPLACE (#8945) * redis-cli --rdb fixes when using "-" to write to stdout * redis-cli support for RESP3 set type in CSV and RAW output * ad Module API for getting current command name * Fix RM_StringTruncate when newlen is 0 * Fix CLIENT UNBLOCK crashing modules without timeout callback * Further developer visible bug fixes- redis 6.2.4: * CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution (boo#1186722) * Fix crash after a diskless replication fork child is terminated * Fix redis-benchmark crash on unsupported configs * Fix crash in UNLINK on a stream key with deleted consumer groups * SINTERSTORE: Add missing keyspace del event when none of the sources exist * Sentinel: Fix CONFIG SET of empty string sentinel-user/sentinel-pass configs * Enforce client output buffer soft limit when no traffic * Hide AUTH passwords in MIGRATE command from slowlog- Move sysctl file to /usr/lib/sysctl.d, so that it can be overridden by an admin in /etc.- redis 6.2.3 * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729) * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730) * Fix memory leak in moduleDefragGlobals * Fix memory leak when doing lazy freeing client tracking table * Block abusive replicas from sending command that could assert and crash redis * Use a monotonic clock to check for Lua script timeout * redis-cli: Do not use unix socket when we got redirected in cluster mode * Fix RM_GetClusterNodeInfo() to correctly populate master id- Usage of OPENSSL_INIT_ATFORK in tls.c raises the minimum version of OpenSSL 1.1.x to 1.1.1, say so in spec- redis 6.2.2 Bug fixes for regressions in previous releases of Redis 6.2: * Fix BGSAVE, AOFRW, and replication slowdown due to child reporting CoW (#8645) * Fix short busy loop when a timer event is about to fire (#8764) * Fix default user, overwritten and reset users losing Pub/Sub channel permissions (#8723) * Fix config rewrite with an empty save config resulting in default save values (#8719) * Fix not starting on alpine/libmusl without IPv6 (#8655) * Fix issues with propagation and MULTI/EXEC in modules (#8617) * Several issues around nested calls and thread-safe contexts Bug fixes that are only applicable to previous releases of Redis 6.2: * ACL Pub/Sub channels permission handling for save/load scenario (#8794) * Fix early rejection of PUBLISH inside MULTI-EXEC transaction (#8534) * Fix missing SLOWLOG records for blocked commands (#8632) * Allow RESET command during busy scripts (#8629) * Fix some error replies that were not counted on stats (#8659) Bug fixes: * Add a timeout mechanism for replicas stuck in fullsync (#8762) * Process HELLO command even if the default user has no permissions (#8633) * Client issuing a long-running script and using a pipeline, got disconnected (#8715) * Fix script kill to work also on scripts that use pcall (#8661) * Fix list-compress-depth may compress more node than required (#8311) * Fix redis-cli handling of rediss:// URL scheme (#8705) * Cluster: Skip unnecessary check which may prevent failure detection (#8585) * Cluster: Fix hang manual failover when replica just started (#8651) * Sentinel: Fix info-refresh time field before sentinel gets a first response (#8567) * Sentinel: Fix possible crash on failed connection attempt (#8627) * Systemd: Send the readiness notification when a replica is ready to accept connections (#8409) Command behavior changes: * ZADD: fix awrong reply when INCR used with GT/LT which blocked the update (#8717) * It was responding with the incremented value rather than nil * XAUTOCLAIM: fix response to return the next available id as the cursor (#8725) * Previous behavior was returning the last one which was already scanned * XAUTOCLAIM: fix JUSTID to prevent incrementing delivery_count (#8724) New config options: * Add cluster-allow-replica-migration config option (#5285) * Add replica-announced config option (#8653) * Add support for plaintext clients in TLS cluster (#8587) * Add support for reading encrypted keyfiles (#8644) Improvements: * Fix performance regression in BRPOP on Redis 6.0 (#8689) * Avoid adding slowlog entries for config with sensitive data (#8584) * Improve redis-cli non-binary safe string handling (#8566) * Optimize CLUSTER SLOTS reply (#8541) * Handle remaining fsync errors (#8419) Info fields and introspection changes: * Strip % sign from current_fork_perc info field (#8628) * Fix RSS memory info on FreeBSD (#8620) * Fix client_recent_max_input/output_buffer in 'INFO CLIENTS' when all clients drop (#8588) * Fix invalid master_link_down_since_seconds in info replication (#8785) Platform and deployment-related changes: * Fix FreeBSD <12.x builds (#8603) Modules: * Add macros for RedisModule_log logging levels (#4246) * Add RedisModule_GetAbsExpire / RedisModule_SetAbsExpire (#8564) * Add a module type for key space notification (#8759) * Set module eviction context flag only in masters (#8631) * Fix unusable RedisModule_IsAOFClient API (#8596) * Fix missing EXEC on modules propagation after failed EVAL execution (#8654) * Fix edge-case when a module client is unblocked (#8618)- replaced /var/run with /run for all PID file paths (bsc#1185072)- redis 6.2.1 Bug fixes: * Fix sanitize-dump-payload for stream with deleted records (#8568) * Prevent client-query-buffer-limit config from being set to lower than 1mb (#8557) Improvements: * Make port, tls-port and bind config options modifiable at runtime (#8510) Platform and deployment-related changes: * Fix compilation error on non-glibc systems if jemalloc is not used (#8533) * Improved memory consumption and memory usage tracking on FreeBSD (#8545) * Fix compilation on ARM64 MacOS with jemalloc (#8458) Modules: * New Module API for getting user name of a client (#8508) * Optimize RM_Call by utilizing a shared reusable client (#8516) * Fix crash running CLIENT INFO via RM_Call (#8560) - includes changes from 6.2.0 GA: * Integer overflow on 32-bit systems (CVE-2021-21309) Bug fixes: * Avoid 32-bit overflows when proto-max-bulk-len is set high (#8522) * Fix broken protocol in client tracking tracking-redir-broken message (#8456) * Avoid unsafe field name characters in INFO commandstats, errorstats, modules (#8492) * XINFO able to access expired keys during CLIENT PAUSE WRITE (#8436) * Fix allowed length for REPLCONF ip-address, needed due to Sentinel's support for hostnames (#8517) * Fix broken protocol in redis-benchmark when used with -a or --dbnum (#8486) * XADD counts deleted records too when considering switching to a new listpack (#8390) Bug fixes that are only applicable to previous releases of Redis 6.2: * Fixes in GEOSEARCH bybox (accuracy and mismatch between width and height) (#8445) * Fix risk of OOM panic in HRANDFIELD, ZRANDMEMBER commands with huge negative count (#8429) * Fix duplicate replicas issue in Sentinel, needed due to hostname support (#8481) * Fix Sentinel configuration rewrite, an improvement of #8271 (#8480) Command behavior changes: * SRANDMEMBER uses RESP3 array type instead of set type (#8504) * EXPIRE, EXPIREAT, SETEX, GETEX: Return error when provided expire time overflows (#8287) Other behavior changes: * Remove ACL subcommand validation if fully added command exists. (#8483) Improvements: * Optimize sorting in GEORADIUS / GEOSEARCH with COUNT (#8326) * Optimize HRANDFIELD and ZRANDMEMBER case 4 when ziplist encoded (#8444) * Optimize in-place replacement of elements in HSET, HINCRBY, LSET (#8493) * Remove redundant list to store pubsub patterns (#8472) * Add --insecure option to command line tools (#8416) Info fields and introspection changes: * Add INFO fields to track progress of BGSAVE, AOFRW, replication (#8414) Modules: * RM_ZsetRem: Delete key if empty, the bug could leave empty zset keys (#8453) * RM_HashSet: Add COUNT_ALL flag and set errno (#8446) - includes changes from 6.2 RC3: New commands / args: * Add HRANDFIELD and ZRANDMEMBER commands (#8297) * Add FAILOVER command (#8315) * Add GETEX, GETDEL commands (#8327) * Add PXAT/EXAT arguments to SET command (#8327) * Add SYNC arg to FLUSHALL and FLUSHDB, and ASYNC/SYNC arg to SCRIPT FLUSH (#8258) Sentinel: * Add hostname support to Sentinel (#8282) * Prevent file descriptors from leaking into Sentinel scripts (#8242) * Fix config file line order dependency and config rewrite sequence (#8271) New configuration options: * Add set-proc-title config option to disable changes to the process title (#3623) * Add proc-title-template option to control what's shown in the process title (#8397) * Add lazyfree-lazy-user-flush config option to control FLUSHALL, FLUSHDB and SCRIPT FLUSH (#8258) Bug fixes: * AOF: recover from last write error by turning on/off appendonly config (#8030) * Exit on fsync error when the AOF fsync policy is 'always' (#8347) * Avoid assertions (on older kernels) when testing arm64 CoW bug (#8405) * CONFIG REWRITE should honor umask settings (#8371) * Fix firstkey,lastkey,step in COMMAND command for some commands (#8367) Special considerations: * Fix misleading description of the save configuration directive (#8337) Improvements: * A way to get RDB file via replication without excessive replication buffers (#8303) * Optimize performance of clusterGenNodesDescription for large clusters (#8182) Info fields and introspection changes: * SLOWLOG and LATENCY monitor include unblocking time of blocked commands (#7491) Modules: * Add modules API for streams (#8288) * Add event for fork child birth and termination (#8289) * Add RM_BlockedClientMeasureTime* etc, to track background processing in commandstats (#7491) * Fix bug in v6.2, wrong value passed to the new unlink callback (#8381) * Fix bug in v6.2, modules blocked on keys unblock on commands like LPUSH (#8356) - includes changes from 6.2 RC2: New commands / args: * Add the REV, BYLEX and BYSCORE arguments to ZRANGE, and the ZRANGESTORE command (#7844) * Add the XAUTOCLAIM command (#7973) * Add the MINID trimming strategy and the LIMIT argument to XADD and XTRIM (#8169) * Add the ANY argument to GEOSEARCH and GEORADIUS (#8259) * Add the CH, NX, XX arguments to GEOADD (#8227) * Add the COUNT argument to LPOP and RPOP (#8179) * Add the WRITE argument to CLIENT PAUSE for pausing write commands exclusively (#8170) * Change the proto-ver argument of HELLO to optional (#7377) * Add the CLIENT TRACKINGINFO subcommand (#7309) Command behavior changes: * CLIENT TRACKING yields an error when given overlapping BCAST prefixes (#8176) * SWAPDB invalidates WATCHed keys (#8239) * SORT command behaves differently when used on a writable replica (#8283) Other behavior changes: * Avoid propagating MULTI/EXEC for read-only transactions (#8216) * Remove the read-only flag from TIME, ECHO, ROLE, LASTSAVE (#8216) * Fix the command flags of PFDEBUG (#8222) * Tracking clients will no longer receive unnecessary key invalidation messages after FLUSHDB (#8039) * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229) Bug fixes with compatibility implications (bugs introduced in Redis 6.0): * Fix RDB CRC64 checksum on big-endian systems (#8270) If you're using big-endian please consider the compatibility implications with RESTORE, replication and persistence. * Fix wrong order of key/value in Lua's map response (#8266) If your scripts use redis.setresp() or return a map (new in Redis 6.0), please consider the implications. Bug fixes that are only applicable to previous releases of Redis 6.2: * Resolve rare assertions in active defragmentation while loading (#8284, #8281) Bug fixes: * Fix the selection of a random element from large hash tables (#8133) * Fix an issue where a forked process deletes the parent's pidfile (#8231) * Fix crashes when enabling io-threads-do-reads (#8230) * Fix a crash in redis-cli after executing cluster backup (#8267) * Fix redis-benchmark to use an IP address for the first cluster node (#8154) * Fix saving of strings larger than 2GB into RDB files (#8306) Additional improvements: * Improve replication handshake time (#8214) * Release client tracking table memory asynchronously in cases where the DB is also freed asynchronously (#8039) * Avoid wasteful transient memory allocation in certain cases (#8286, #5954) * Handle binary string values by the 'requirepass' and 'masterauth' configs (#8200) Platform and deployment-related changes: * Install redis-check-rdb and redis-check-aof as symlinks to redis-server (#5745) * Add a check for an ARM64 Linux kernel bug (#8224) Due to the potential severity of this issue, Redis will refuse to run on affected platforms by default. Info fields and introspection changes: * Add the errorstats section to the INFO command (#8217) * Add the failed_calls and rejected_calls fields INFO's commandstats section (#8217) * Report child copy-on-write metrics continuously (#8264) Module API changes: * Add the RedisModule_SendChildCOWInfo API (#8264) * Add the may-replicate command flag (#8170) - includes changes from 6.2 RC1: New commands / args: * Add SMISMEMBER command that checks multiple members (#7615) * Add ZMSCORE command that returns an array of scores (#7593) * Add LMOVE and BLMOVE commands that pop and push arbitrarily (#6929) * Add RESET command that resets client connection state (#7982) * Add COPY command that copies keys (#7953) * Add ZDIFF and ZDIFFSTORE commands (#7961) * Add ZINTER and ZUNION commands (#7794) * Add GEOSEARCH/GEOSEARCHSTORE commands for bounding box spatial queries (#8094) * Add GET parameter to SET command, for more powerful GETSET (#7852) * Add exclusive range query to XPENDING (#8130) * Add exclusive range query to X[REV]RANGE (#8072) * Add GT and LT options to ZADD for conditional score updates (#7818) * Add CLIENT INFO and CLIENT LIST for specific ids (#8113) * Add IDLE argument to XPENDING command (#7972) * Add local address to CLIENT LIST, and a CLIENT KILL filter. (#7913) * Add NOMKSTREAM option to XADD command (#7910) * Add command introspection to Sentinel (#7940) * Add SENTINEL MYID subcommand (#7858) New features: * Dump payload sanitization: prevent corrupt payload causing crashes (#7807) Has flags to enable full O(N) validation (disabled by default). * ACL patterns for Pub/Sub channels (#7993) * Support ACL for Sentinel mode (#7888) * Support getting configuration from both stdin and file at the same time (#7893) Lets you avoid storing secrets on the disk. New features in CLI tools: * redis-cli RESP3 push support (#7609) * redis-cli cluster import support source and target that require auth (#7994) * redis-cli URIs able to provide user name in addition to password (#8048) * redis-cli/redis-benchmark allow specifying the prefered ciphers/ciphersuites (#8005) * redis-cli add -e option to exit with code when command execution fails (#8136) Command behavior changes: * EXISTS should not alter LRU (#8016) In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key. * OBJECT should not reveal logically expired keys (#8016) Will now behave the same TYPE or any other non-DEBUG command. * Improve db id range check for SELECT and MOVE (#8085) Changes the error message text on a wrong db index. * Modify AUTH / HELLO error message (#7648) Changes the error message text when the user isn't found or is disabled. * BITOPS length limited to proto_max_bulk_len rather than 512MB (#8096) The limit is now configurable like in SETRANGE, and APPEND. * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107) Other behavior changes: * Optionally (default) fail to start if requested bind address is not available (#7936) If you rely on Redis starting successfully even if one of the bind addresses is not available, you'll need to tune the new config. * Limit the main db dictionaries expansion to prevent key eviction (#7954) In the past big dictionary rehashing could result in massive data eviction. Now this rehashing is delayed (up to a limit), which can result in performance loss due to hash collisions. * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051) This change was already present in 6.0.9, but was missing from the release notes. * A new incremental eviction mechanism that reduces latency on eviction spikes (#7653) In pathological cases this can cause memory to grow uncontrolled and may require specific tuning. * Not resetting "save" config when Redis is started with command line arguments. (#7092) In case you provide command line arguments without "save" and count on it being disabled, Now the defaults "save" config will kick in. * Update memory metrics for INFO during loading (#7690) * When "supervised" config is enabled, it takes precedence over "daemonize". (#8036) * Assertion and panic, print crash log without generating SIGSEGV (#7585) * Added crash log report on SIGABRT, instead of silently exiting (#8004) * Disable THP (Transparent Huge Pages) if enabled (#7381) If you deliberately enabled it, you'll need to config Redis to keep it. Bug fixes: * Handle output buffer limits for module blocked clients (#8141) Could result in a module sending reply to a blocked client to go beyond the limit. * Fix setproctitle related crashes. (#8150, #8088) Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation. * A module doing RM_Call could cause replicas to get nested MULTI (#8097). * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108) In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't have been restored. * Fix oom-score-adj-values range, and bug when used in config file (#8046) Enabling setting this in the config file in a line after enabling it, would have been buggy. * Reset average ttl when empty databases (#8106) Just causing misleading metric in INFO * Disable rehash when Redis has child process (#8007) This could have caused excessive CoW during BGSAVE, replication or AOFRW. * Further improved ACL algorithm for picking categories (#7966) Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER. * Fix bug with module GIL being released prematurely (#8061) Could in theory (and rarely) cause multi-threaded modules to corrupt memory. * Fix cluster redirect for module command with no firstkey. (#7539) * Reduce effect of client tracking causing feedback loop in key eviction (#8100) * Kill disk-based fork child when all replicas drop and 'save' is not enabled (#7819) * Rewritten commands (modified for propagation) are logged as their original command (#8006) * Fix cluster access to unaligned memory (SIGBUS on old ARM) #7958 * If diskless repl child is killed, make sure to reap the child pid (#7742) * Broadcast a PONG message when slot's migration is over, may reduce MOVED responses (#7571) Other improvements: * TLS Support in redis-benchmark (#7959) * Accelerate diskless master connections, and general re-connections (#6271) * Run active defrag while blocked / loading (#7726) * Performance and memory reporting improvement - sds take control of its internal fragmentation (#7875) * Speedup cluster failover. (#7948) Platform / toolchain support related improvements: * Optionally (not by default) use H/W Monotonic clock for faster time sampling (#7644) * Remove the requirements for C11 and _Atomic supporting compiler (#7707) This would allow to more easily build and use Redis on older systems and compilers again. * Fix crash log registers output on ARM. (#8020) * Raspberry build fix. (#8095) * Setting process title support for Haiku. (#8060) * DragonFlyBSD RSS memory sampling support. (#8023) New configuration options: * Enable configuring OpenSSL using the standard openssl.cnf (#8143) * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046) * TLS: Add different client cert support. (#8076) * Note that a few other changes listed above added their config options. Info fields and introspection changes: * Add INFO fields to track diskless and disk-based replication progress (#7981) * Add INFO field for main thread cpu time, and scrape system time. (#8132) * Add total_forks to INFO STATS (#8155) * Add maxclients and cluster_connections to INFO CLIENTS (#7979) * Add tracking bcast flag and client redirection in client list (#7995) * Fixed INFO client_recent_max_input_buffer includes argv array (#8065, see #7874) * Note that a few other changes listed above added their info fields. Module API changes: * Add CTX_FLAGS_DENY_BLOCKING as a unified the way to know if blocking is allowed (#8025) * Add data type callbacks for lazy free effort, and unlink (#7912) * Add data type callback for COPY command (#8112) * Add callbacks for defrag support. (#8149) * Add module event for repl-diskless-load swapdb (#8153) Module related fixes: * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037) * Improve timer accuracy (#7987) * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)- Added parameter -p to all install command in spec-file. - Changed file redis.tmpfiles.d file, replaced from /var/run to /run.- redis 6.0.12: * Fix compilation error on non-glibc systems if jemalloc is not used- redis 6.0.11: * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len is set high (boo#1182657) * Fix handling of threaded IO and CLIENT PAUSE (failover), could lead to data loss or a crash * Fix the selection of a random element from large hash tables * Fix broken protocol in client tracking tracking-redir-broken message * XINFO able to access expired keys on a replica * Fix broken protocol in redis-benchmark when used with -a or - -dbnum * Avoid assertions (on older kernels) when testing arm64 CoW bug * CONFIG REWRITE should honor umask settings * Fix firstkey,lastkey,step in COMMAND command for some commands * RM_ZsetRem: Delete key if empty, the bug could leave empty zset keys- Switch systemd type of the sentinel service from notify to simple. This can be reverted when updating to 6.2 which fixes https://github.com/redis/redis/issues/7284 .- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830) - Make tests run by adding BuildRequires tcl and procps- HTTPS download link for source - redis 6.0.10: Command behavior changes: * SWAPDB invalidates WATCHed keys (#8239) * SORT command behaves differently when used on a writable replica (#8283) * EXISTS should not alter LRU (#8016) In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key. * OBJECT should not reveal logically expired keys (#8016) Will now behave the same TYPE or any other non-DEBUG command. * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107) Other behavior changes: * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229) * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051) This change was already present in 6.0.9, but was missing from the release notes. Bug fixes with compatibility implications (bugs introduced in Redis 6.0): * Fix RDB CRC64 checksum on big-endian systems (#8270) If you're using big-endian please consider the compatibility implications with RESTORE, replication and persistence. * Fix wrong order of key/value in Lua's map response (#8266) If your scripts use redis.setresp() or return a map (new in Redis 6.0), please consider the implications. Bug fixes: * Fix an issue where a forked process deletes the parent's pidfile (#8231) * Fix crashes when enabling io-threads-do-reads (#8230) * Fix a crash in redis-cli after executing cluster backup (#8267) * Handle output buffer limits for module blocked clients (#8141) Could result in a module sending reply to a blocked client to go beyond the limit. * Fix setproctitle related crashes. (#8150, #8088) Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation. * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108) In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't have been restored. * Fix oom-score-adj-values range, and bug when used in config file (#8046) Enabling setting this in the config file in a line after enabling it, would have been buggy. * Reset average ttl when empty databases (#8106) Just causing misleading metric in INFO * Disable rehash when Redis has child process (#8007) This could have caused excessive CoW during BGSAVE, replication or AOFRW. * Further improved ACL algorithm for picking categories (#7966) Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER. * Fix bug with module GIL being released prematurely (#8061) Could in theory (and rarely) cause multi-threaded modules to corrupt memory. * Reduce effect of client tracking causing feedback loop in key eviction (#8100) * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958) * Fix saving of strings larger than 2GB into RDB files (#8306) Additional improvements: * Avoid wasteful transient memory allocation in certain cases (#8286, #5954) Platform / toolchain support related improvements: * Fix crash log registers output on ARM. (#8020) * Add a check for an ARM64 Linux kernel bug (#8224) Due to the potential severity of this issue, Redis will print log warning on startup. * Raspberry build fix. (#8095) New configuration options: * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046) Module related fixes: * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037) * Improve timer accuracy (#7987) * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)- redis 6.0.9: * potential heap overflow when using a heap allocator other than jemalloc or glibc's malloc. Does not affect the openSUSE package - boo#1178205 * Memory reporting of clients argv * Add redis-cli control on raw format line delimiter * Add redis-cli support for rediss:// -u prefix * WATCH no longer ignores keys which have expired for MULTI/EXEC * Correct OBJECT ENCODING response for stream type * Allow blocked XREAD on a cluster replica * TLS: Do not require CA config if not used * multiple bug fixes * Additions to modules API- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821): * bug fixes when using with Sentinel * bug fixes when using CONFIG REWRITE * Remove THP warning when set to madvise * Allow EXEC with read commands on readonly replica in cluster * Add masters/replicas options to redis-cli --cluster call command - includes changes from 6.0.7: * CONFIG SET could hung the client when arrives during RDB/ROF loading * LPOS command when RANK is greater than matches responded with broken protocol * Add oom-score-adj configuration option to control Linux OOM killer * Show IO threads statistics and status in INFO output * Add optional tls verification mode (see tls-auth-clients)- redis 6.0.6: * Fix crash when enabling CLIENT TRACKING with prefix * EXEC always fails with EXECABORT and multi-state is cleared * RESTORE ABSTTL won't store expired keys into the db * redis-cli better handling of non-pritable key names * TLS: Ignore client cert when tls-auth-clients off * Tracking: fix invalidation message on flush * Notify systemd on Sentinel startup * Fix crash on a misuse of STRALGO * Few fixes in module API * Fix a few rare leaks (STRALGO error misuse, Sentinel) * Fix a possible invalid access in defrag of scripts * Add LPOS command to search in a list * Use user+pass for MIGRATE in redis-cli and redis-benchmark in cluster mode * redis-cli support TLS for --pipe, --rdb and --replica options * TLS: Session caching configuration support- redis 6.0.5: * Fix handling of speical chars in ACL LOAD * Make Redis Cluster more robust about operation errors that may lead to two clusters to mix together * Revert the sendfile() implementation of RDB transfer * Fix TLS certificate loading for chained certificates * Fix AOF rewirting of KEEPTTL SET option * Fix MULTI/EXEC behavior during -BUSY script errors- redis 6.0.4: * fix a severe replication bug introduced in Redis 6 by the "meaningful offset" feature- redis 6.0.3: * fix a crash introduced in 6.0.2 - includes changes from 6.0.2: * bug fixes * fix to client side caching when keys are evicted from the tracking table but no notifications are sent- redis-disable_integration_logging.patch: remove - redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove - getMcontextEip-return-value.patch: Add missing return value- add BR pkgconfig(libsystemd) for the rewritten systemd support and force building with it- Update to 6.0.1 * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES * XCLAIM AOF/replicas propagation fixed. * Client side caching: new NOLOOP option to avoid getting notified about changes performed by ourselves. * ACL GENPASS now uses HMAC-SHA256 and have an optional "bits" argument. It means you can use it as a general purpose "secure random strings" primitive! * Cluster "SLOTS" subcommand memory optimization. * The LCS command is now a subcommand of STRALGO. * Meaningful offset for replicas as well. More successful partial resynchronizations. * Optimize memory usage of deferred replies. * Faster CRC64 algorithm for faster RDB loading. * XINFO STREAM FULL, a new subcommand to get the whole stream state. * CLIENT KILL USER . * MIGRATE AUTH2 option, for ACL style authentication support. * Other random bugfixes.- ppc-atomic.patch: use libatomic also on ppc- add hash file from redis-hashes and verify it during build- redis 5.0.9: * Critical fix when Streams with AOF ore replicas are used: Prevent reprocesing some entries upon restart * Speed improvement: Clients blocked on the same key are now unblocked on O(1) time- Use the tmpfiles macros instead of calling systemd-tempfiles direct and build wrong macro paths.- Refresh spec-file with spec-cleaner and manual optimizations * Remove Group tag. * Replace make by %make_build macros. - Update to 5.0.8 * https://raw.githubusercontent.com/antirez/redis/5.0.8/00-RELEASENOTES * Fix Pi building needing -latomic, backport. * Fix impl of aof-child whitelist SIGUSR1 feature. * Fix ThreadSafeContext lock/unlock function names. * XREADGROUP should propagate XCALIM/SETID in MULTI/EXEC. * Fix client flags to be int64 in module.c. * Fix small bugs related to replica and monitor ambiguity. * Fix lua related memory leak. * Simplify #6379 changes. * Free allocated sds in pfdebugCommand() to avoid memory leak. * Jump to right label on AOF parsing error. * Free fakeclient argv on AOF error. * Fix potential memory leak of rioWriteBulkStreamID(). * Fix potential memory leak of clusterLoadConfig(). * Fix bug on KEYS command where pattern starts with * followed by \x00. * Blocking XREAD[GROUP] should always reply with valid data. * XCLAIM: Create the consumer only on successful claims. * Stream: Handle streamID-related edge cases. * Fix ip and missing mode in RM_GetClusterNodeInfo(). * Inline protocol: handle empty strings well. * Mark extern definition of SDS_NOINIT in sds.h. * Fix revisit CVE-2015-8080 vulnerability. * Avoid sentinel changes promoted_slave to be its own replica.- print instance name in the from the service files- Don't install redis-trib.rb, it's only a dummy telling the user to use redis-cli instead and pulls in ruby for that.- Make redis useable in a container (drop size from 100MB to 20MB): - Change user generation from shadow to sysusers - Drop redis-initscript.patch and sudo requires, we use systemd - Drop BuildRequires for procps and tcl, they are not needed - Make logrotate recommend, it's not required for redis to work- Update to 5.0.7 * https://raw.githubusercontent.com/antirez/redis/5.0.7/00-RELEASENOTES * Test: fix implementation-dependent test after code change. * RED-31295 - redis: avoid race between dlopen and thread creation. * Cluster: fix memory leak of cached master. * Fix usage of server.stream_node_max_*. * Update mkreleasehdr.sh. * Remove additional space from comment. * Fix stream test after addition of 0-0 ID test. * AOF: fix assignment for aof_fsync_offset. * Rename var to fixed_time_expire now that is more general. * Expires & blocking: handle ready keys as call(). * XADD with ID 0-0 stores an empty key. * Fix unreported overflow in autogerenared stream IDs. * Expires: refactoring judgment about whether a key is expired. - Refresh reproducible.patch - Update to 5.0.6 * https://raw.githubusercontent.com/antirez/redis/5.0.6/00-RELEASENOTES * RDB: fix MODULE_AUX loading by continuing to next opcode. * Missing per-skiplist overheads in MEMORY USAGE. * RM_Log: add support for logging without a context or context without module. * Cluster: abort loading nodes data if vars arguments are unbalanced. * More strict checks and better comments in flushSlaveOutputBuffers(). * Improve comment in flushSlavesOutputBuffers(). * Replication: clarify why repl_put_online_on_ack exists at all. * Networking: flushSlavesOutputBuffers bugfix. * RM_ReplyWithCString was missing registration. * Fix to module aux data rdb format for backwards compatibility with old check-rdb. * Implement module api for aux data in rdb. * Redis-cli: always report server errors on read errors. * Reduce the calling stack. * Make EMBSTR case of #6261 more obvious. * Make memory usage consistent of robj with OBJ_ENCODING_INT. * HyperLogLog: fix the fix of a corruption bug. * Fix HLL corruption bug. * Extend REDISMODULE_CTX_FLAGS to indicate if redis is currently loading from either RDB or AOF. * Uses addReplyBulkCString. * Adds RedisModule_ReplyWithCString.- update to 5.0.5 Major changes from the Redis 5 series: 1. The new Stream data type. https://redis.io/topics/streams-intro 2. New Redis modules APIs: Timers, Cluster and Dictionary APIs. 3. RDB now store LFU and LRU information. 4. The cluster manager was ported from Ruby (redis-trib.rb) to C code inside redis-cli. Check `redis-cli --cluster help` for more info. 5. New sorted set commands: ZPOPMIN/MAX and blocking variants. 6. Active defragmentation version 2. 7. Improvemenets in HyperLogLog implementations. 8. Better memory reporting capabilities. 9. Many commands with sub-commands now have an HELP subcommand. 10. Better performances when clients connect and disconnect often. 11. Many bug fixes and other random improvements. 12. Jemalloc was upgraded to version 5.1 13. CLIENT UNBLOCK and CLIENT ID. 14. The LOLWUT command was added. http://antirez.com/news/123 15. We no longer use the "slave" word if not for API backward compatibility. 16. Differnet optimizations in the networking layer. 17. Lua improvements: - Better propagation of Lua scripts to replicas / AOF. - Lua scripts can now timeout and get in -BUSY state in the replica as well. 18. Dynamic HZ to balance idle CPU usage with responsiveness. 19. The Redis core was refactored and improved in many ways. However the list above really does not do justice to the changes of Redis 5 since the core was improved in many ways during the development of the new version. However certain changes were back ported into Redis 4 once they were sensed as safe, because many improvements were hard to distinguish from fixes. The most important user facing improvement is without doubts the introduction of the new general purpose data type after years: the streams. Note that we worked to improve and fix streams till a few hours ago, so while we are not aware of critical bugs in this release, surely there is to handle it with some care for the first weeks. Bug reporting will be highly appreciated and we are ready to work immediately to release 5.0.1 once there is enough important stuff to justify a new release (probably soon). People not using the streams can have probably a better production-ready experience with Redis 5, also because many internals are shared with Redis 4 so the jump is not as big as it was between 3.2 and 4 in terms of how things internally work. Well, many thanks to the Redis community and the developers that made this release possible, contributing bug reports, patches, new features, working on the clients, sometimes debugging problems for days. Also thank to everybody that adopted Redis for their use cases making things work for users worldwide. see installed /usr/share/doc/packages/redis/00-RELEASENOTES - refreshed patches to apply cleanly again: redis-conf.patch redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch reproducible.patch- update systemd unit file to fix redis shutdown immedaiate after start- make sure that disabling/restarting servers works https://nordisch.org/posts/hooking-up-instantiated-services-with-rpm/- make check && true -> make check || true This was probably meant to catch an error in the test suite, but with && it would only return true if it would return true already.- added systemd unit file file redis-sentinel - the unit file uses the same multiple instance mechanism as the normal redis unit file systemctl start redis-sentinel@default will look for /etc/redis/sentinel-default.conf and expects a pid file /var/run/redis/sentinel-default.pid Please make sure your sentinel config sets the pid file. - adapted the default sentinel.conf.example to set the pid file and the log file similar to the normal redis.conf: /var/log/redis/sentinel-.log /var/run/redis/sentinel-.pid The unit file checks for the pid file so please adapt your local sentinel configs. Changed: redis-conf.patch - adapt and restructure README.SUSE - move the LimitNoFile to the service file itself so the user do not have to manually do that step for every instance - move the apache integration into its own section - add section for redis-sentinel - install sentinel example config with group write permissions to indicate that the actually config needs to be writable.- replace some duplicate binaries with symlinks similar to what the fedora package does- Refresh spec-file. - Update to 4.0.11 * https://raw.githubusercontent.com/antirez/redis/4.0.11/00-RELEASENOTES * The disconnection time between the master and slave was reset in an incorrect place, sometimes a good slave will not be able to failover because it claims it was disconnected for too much time from the master. * A replication bug, rare to trigger but non impossible, is in Redis for years. It was lately discovered at Redis Labs and fixed by Oran Agra. It may cause disconnections, desynchronizations and other issues. * RANDOMKEY may go in infinite loop on rare situations. Now fixed. * EXISTS now works in a more consistent way on slaves. * Sentinel: backport of an option to deny a potential security problem when the SENTINEL command is used to configure an arbitrary script to execute.- Add reproducible.patch to have fixed hostname and date (boo#1047218)- update to 4.0.10 (boo#1097430) CVE-2018-11218 CVE-2018-11219 https://raw.githubusercontent.com/antirez/redis/4.0.10/00-RELEASENOTES - Important security issues related to the Lua scripting engine. Please check https://github.com/antirez/redis/issues/5017 for more information. - A bug with SCAN, SSCAN, HSCAN and ZSCAN, that may not return all the elements. We also add a regression test that can trigger the issue often when present, and may in theory be able to find unrelated regressions. - A PSYNC2 bug is fixed: Redis should not expire keys when saving RDB files because otherwise it is no longer possible to use such RDB file as a base for partial resynchronization. It no longer represents the right state. - Compatibility of AOF with RDB preamble when the RDB checksum is disabled. - Sentinel bug that in some cases prevented Sentinel to detect that the master was down immediately. A delay was added to the detection. - refreshed patches to apply cleanly again redis-conf.patch redis-initscript.patch- Update redis-enable-bactrace-on-x86-and-ia64-only.patch to handle arm and rename it to redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch - Add redis-disable_integration_logging.patch to disable logging test when backtrace is not enabled- Update to 4.0.9 * https://raw.githubusercontent.com/antirez/redis/4.0.9/00-RELEASENOTES * Critical upgrade for users using AOF with the fsync policy set to "always". * Latency monitor could report wrong latencies under certain conditions. * AOF rewriting could fail when a backgronud rewrite is triggered and at the same time the AOF is switched on/off. * Redis Cluster crash-recovery safety improved. * Redis Cluster has now the ability to configure certain slaves so that they'll never attempt a failover. * Keyspace notifications API in modules. * RM_Call() is now faster by reusing the same client. * Tracking of the percentage of keys already logically expired but yet not evicted.- Update to 4.0.8 * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.8/00-RELEASENOTES * Fix crash Redis Cluster instances during deletions.- Update to 4.0.7 * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.7/00-RELEASENOTES * Many 32 bit overflows were addressed in order to allow to use Redis with a very significant amount of data, memory size permitting. * MEMORY USAGE fixed for the list type. * Allow read-only scripts in Redis Cluster. * Fix AOF pipes setup in edge case. * AUTH option for MIGRATE. * HyperLogLogs are no longer converted from sparse to dense in order to be merged. * Fix AOF rewrite dead loop under edge cases. * Fix processing of large bulk strings (>= 2GB). * Added RM_UnlinkKey in modules API. * Fix Redis Cluster crashes when certain commands with a variable number of arguments are called in an improper way. * Fix memory leak in lazyfree engine. * Fix many potentially successful partial synchronizations that end doing a full SYNC, because of a bug destroying the replication backlog on the slave. So after a failover the slave was often not able to PSYNC with masters, and a full SYNC was triggered. The bug only happened after 1 hour of uptime so escaped the unit tests. * Improve anti-affinity in master/slave allocation for Redis Cluster when the cluster is created. * Improve output buffer handling for slaves, by not limiting the amount of writes a slave could receive.- Update to 4.0.6 * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.6/00-RELEASENOTES * PSYNC2: More errors in the fixes for PSYNC2 (CRITICAL). * Quicklist: change the len of quicklist to unsigned long. * Quicklist: fix the return value of quicklistCount. * Refactoring: improve luaCreateFunction() API. * Remove useless variable check from luaCreateFunction(). * Fix issue #4505, Lua RDB AUX field loading of existing scripts. * Regression test for #4505 (Lua AUX field loading). * DEBUG change-repl-id implemented. * Buffer overflows occurring reading redis.conf CVE-2017-15047 (bsc#1061967)- Update changelog with CVE reference- Drop SLE 11 support. - Refresh spec-file. - Update to 4.0.2 * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.2/00-RELEASENOTES * Different replication fixes to PSYNC2, the new 4.0 replication engine. * Modules thread safe contexts were introduced. They are an experimental API right now, but the API is considered to be stable and usable when needed. * SLOWLOG now logs the offending client name and address. Note that this is a backward compatibility breakage in case old code assumes that the slowlog entry is composed of exactly three entries. * The modules native data types RDB format changed. * The AOF check utility is now able to deal with RDB preambles. * GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not supporting the STORE option, were added in order to allow read-only scaling of such queries. * HSET is now variadic, and HMSET is considered deprecated (but will be supported for years to come). Please use HSET in new code. * GEORADIUS huge radius (>= ~6000 km) corner cases fixed, certain elements near the edges were not returned. * DEBUG DIGEST modules API added. * HyperLogLog commands no longer crash on certain input (non HLL) strings. * Fixed SLAVEOF inside MULTI/EXEC blocks. * Many other minor bug fixes and improvements.- cleanup service file - add redis.sysctl file - update README.SUSE * add info for socket usage per service * add info for limits per service (LimitNOFILE=10240)- Update to version 3.2.9 * A few rarely harmful bugs were fixed. - Changes accumulated from 3.2.8 Two important bug fixes, the first of one is critical: * Apparently Jemalloc 4.4.0 may contain a deadlock under particular conditions. See https://github.com/antirez/redis/issues/3799. We reverted back to the previously used Jemalloc versions and plan to upgrade Jemalloc again after having more info about the cause of the bug. * MIGRATE could crash the server after a socket error. See for reference: https://github.com/antirez/redis/issues/3796.- Update to version 3.2.7 * This release fixes important security and correctness issues (boo#1064980 CVE-2016-10517)- update to redis 3.2.6 * fixes for GEORADIUS, BITFIELD and Redis Cluster minor fixes. - update 3.2.5 * This release only fixes a compilation issue due to the missing -ldl at linking time.- update to redis 3.2.4, including fixes for security issues: * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code Execution Vulnerability [boo#1002351] - bug fixes: * TCP binding bug fixed when only certain addresses were available for a given port * improved crash report * Fix for Redis Cluster redis-trib displaying of info after creating a new cluster.- redis 3.2.3: * fix replication delay issue * drop CVE-2013-7458.patch, upstream- Test for user/group existence before creating them. Request shadow to be present for the scriptlet.- Fix CVE-2013-7458: unsafe permissions of command line history boo#991250, adding CVE-2013-7458.patch- redis 3.2.2 - Highlight bug fixes: * Fix Redis server and Sentinel crashes * Fix GEORADIUS errors in reported entries - New features: * slaves support the slave-announce-ip and slave-announce-port options. * RDB check utlity is now part of Redis and uses the same RDB code * redis-check-dump utility is now able to show certain information about the RDB file including creating version and date.- Update to 3.2.1 * [FIX] Cleaned up spec file. * [FIX] Critical bug in Sentinel was hopefully fixed. * [FIX] BITFIELD bugs fixed. * [FIX] GEO commands fixes on syntax errors and edge cases. * [NEW] RESOTRE now accepts dumps generated by older Redis versions. * [NEW] Jemalloc now is configured to save you memory, for a problem a change in the jemalloc configuration did not really survived when the 3.2.0 release was finalized. * [NEW] TTL and TYPE command no longer alter the last access time of a key, for LRU evictions purposes. A new TOUCH command was introduced *just* to update the access time of a key. * [FIX] A bug was fixed in redis-cli, that connected to the instance running on the port 6379 if there was one, regardless of what was specified. * [NEW] TCP keep alive is now enabled by default. This should fix most ghost connections problems without resulting in any practical change in otherwise sane deployments. * [FIX] A Sentinel crash that could happen during failovers was fixed. * [NEW] avg_ttl reporting in INFO improved. * [NEW] Sentinel: improve handling of known Sentinel instances. * [NEW] Redis Cluster address update (via gossip section) processing improved to avoid initiating inwanted handshakes. * [FIX] Critical bug fixed: There was a problem in the way a cluster instance loaded the AOF that could cause data written via scripts to be lost during reshardings. * [NEW] There is a new very powerful BITFIELD command. Check the documentation here: http://redis.io/commands/BITFIELD * [NEW] CONFIG GET is allowed during the loading of the dataset. * [NEW] The DEBUG command have new features and can show an help with DEBUG HELP. * [NEW] redis-cli show hits about the commands arguments to the right. * [NEW] GEORADIUS got a STORE / STOREDIST option to store the result into a target key (as as orted set) instead of reporting it to the user. * [NEW] Redis Cluster replicas migration now works in a slightly different way. In the past a slave could migrate only to a master that used to have slaves in the past (and if there was still trace of this information). Now instead if a new slave gets at least a slot, and at least one other master in the cluster has a slave, then the new master is considered a valid target for replica migration. So if it will be orphaned and there is a spare slave it will get one. * [NEW] CLUSTER SLOTS output now includes the node ID (in a backward compatible manner).- Fix installation example in README.SUSE- Update to 3.0.7: * [FIX] Many fixes to MIGRATE multiple keys implementation. * [FIX] A Redis Cluster node crash was fixed because of wrong handling of node->slaveof pointers. * [FIX] Fix redis-trib rebalance when nodes need to be left empty because the specified weight is zero. * [FIX] MIGRATE: Never send -ASK redirections for MIGRATE when there are * [FIX] Lua debugger crash when printing too deeply nested objects. * [FIX] Redis-cli implementation of Lua debugging now allows to use the SCRIPT DEBUG command directly, switching to debugging mode as needed. * [FIX] Redis-trib is now able to fix more errors. A new CLUSTER subcommand called BUMPEPOCH was introduced in order to support new modes for the "fix" subcommand. * [NEW] Redis proctected mode: this feature improves Redis security and makes harder to run Redis in a configuration that is unsecure because no firewalling was used in order to protect Redis from external accesses. * [NEW] Cluster/Sentinel tests now use OSX leak to perform leak detection at the end of every unit. * [NEW] Detect and show server crashes during Cluster/Sentinel tests. * [NEW] More reliable Cluster/Sentinel test becuase of timing errors and - LOADING errors. * [FIX] lua_struct.c/getnum security issue fixed. * [FIX] Redis Cluster replica migration fixed. * [FIX] Fix a race condition in processCommand() because of interactions with freeMemoryIfNeeded(). * [NEW] Backported from the upcoming Redis 3.2: MIGRATE now supports an extended multiple-keys pipelined mode, which is an order of magnitude faster. Redis Cluster now uses this mode in order to perform reshardings and rebalancings. * [NEW] Backported from the upcoming Redis 3.2: Redis Cluster has now support for rebalancing via the redis-trib rebalance command. Demo here: * [NEW] Redis Cluster redis-trib.rb new "info" subcommand. * [NEW] Redis Cluster tests improved. * [NEW] Log offending memory access address on SIGSEGV/SIGBUS- Update to 3.0.5 * [FIX] MOVE now moves the TTL as well. A bug lasting forever... finally fixed thanks to Andy Grunwald that reported it. * [FIX] Fix a false positive in HSTRLEN test. * [FIX] Fix a bug in redis-cli --pipe mode that was not able to read back replies from the server incrementally. Now a mass import will use a lot less memory, and you can use --pipe to do incremental streaming. * [FIX] Slave detection of master timeout. * [NEW] Cluster: redis-trib fix can fix an additional case for opens lots. * [NEW] Cluster: redis-trib import support for --copy and - -replace options- update to 3.0.4 Upgrade urgency: HIGH for Redis and Sentinel. However note that in order to fix certain replication bugs, the replication internals were modified in a very heavy way. So while this release is conceptually saner, it may contain regressions. For this reason, before the release, QA activities were performed by me (antirez) and Redis Labs and no evident bug was found. - [FIX] A number of bugs related to replication PSYNC and the (yet experimental) diskless replication feature were fixed. The bugs could lead to inconsistency between masters and slaves. (Salvatore Sanfilippo, Oran Agra fixed the issue found by Yuval Inbar) - [FIX] A replication bug in the context of PSYNC partial resynchonization was found and fixed. This bug happens even when diskless replication is off in the case different slaves connect at different times while the master is creating an RDB file, and later a partial resynchronization is attempted by a slave that connected not as the first one. (Salvatore Sanfilippo, Oran Agra) - [FIX] Chained replication and PSYNC interactions leading to potential stale chained slaves data set, see issue #2694. (Salvatore Sanfilippo fixed an issue reported by "GeorgeBJ" user at Github) - [FIX] redis-cli --scan iteration fixed when returned cursor overflows 32 bit signed integer. (Ofir Luzon, Yuval Inbar) - [FIX] Sentinel: fixed a bug during the master switch process, where for a failed conditional check, the new configuration is rewritten, during a small window of time, in a corrupted way where the master is also reported to be one of the slaves. This bug is rare to trigger but apparently it happens in the wild, and the effect is to see a replication loop where the master will try to replicate with itself. A detailed explanation of the bug and its effects can be found in the commit message here: https://github.com/antirez/redis/commit/c20218eb5770b2cafb12bc7092313b8358fedc0a. The bug was found by Jan-Erik Rediger using a static analyzer and fixed by Salvatore Sanfilippo. - [FIX] Sentinel lack of arity checks for certain commands. (Rogerio Goncalves, Salvatore Sanfilippo) - [NEW] Replication internals rewritten in order to be more resistant to bugs. The replication handshake in the slave side was rewritten as a non blocking state machine. (Salvatore Sanfilippo, Oran Agra) - [NEW] New "replication capabilities" feature introduced in order to signal from the master to the slave what are the features supported, so that the master can choose the kind of replication to start (diskless or not) when master and slave are of different versions. (Oran Agra, Salvatore Sanfilippo) - [NEW] Log clients details when SLAVEOF command is received. (Salvatore Sanfilippo with inputs from Nick Craver and Marc Gravell).- update to 3.0.3 * [FIX] Fix blocking operations timeout precision when HZ is at its default value (not increased) and there are thousands of clients connected at the same time. This bug affected Sidekiq users that experienced a very long delay for BLPOP and similar commands to return for timeout. Check commit b029ff1 for more info. (Salvatore Sanfilippo) * [FIX] MIGRATE "creating socket: Invalid argument" error fix. Check issues #2609 and #2612 for more info. (Salvatore Sanfilippo) * [FIX] Be able to connect to the master even when the slave is bound to just the loopback interface and has no valid public address in the network the master is reacahble. (Salvatore Sanfilippo) * [FIX] ZADD with options encoding promotion fixed. (linfangrong) * [FIX] Reset aof_delayed_fsync on CONFIG RESETSTATS. (Tom Kiemes) * [FIX] PFCOUNT key parsing in cluster fixed. (MOON_CLJ) * [FIX] Fix Solaris compilation of Redis 3.0. (Jan-Erik Rediger) * [NEW] Variadic EXISTS command. Now the command accepts multiple arguments and returns the total count of existing keys. - added missing sentinel link- also pass the bind address to the redis-cli for shutdown (boo#835815)- update to 3.0.2 * [FIX] Critical security issue fix by Ben Murphy: http://t.co/LpGTyZmfS7 * [FIX] SMOVE reply fixed when src and dst keys are the same. (Glenn Nethercutt) * [FIX] Lua cmsgpack lib updated to support str8 type. (Sebastian Waisbrot) * [NEW] ZADD support for options: NX, XX, CH. See new doc at redis.io. (Salvatore Sanfilippo) * [NEW] Senitnel: CKQUORUM and FLUSHCONFIG commands back ported. (Salvatore Sanfilippo)- update to 3.0.1 * Sentinel memory leak due to hiredis fixed. * Sentinel memory leak on duplicated instance. * Redis crash on Lua reaching output buffer limits. * Sentinel flushes config on +slave events.- update to 3.0.0 >> What's new in Redis 3.0 compared to Redis 2.8? * Redis Cluster: a distributed implementation of a subset of Redis. * New "embedded string" object encoding resulting in less cache misses. Big speed gain under certain work loads. * AOF child -> parent final data transmission to minimize latency due to "last write" during AOF rewrites. * Much improved LRU approximation algorithm for keys eviction. * WAIT command to block waiting for a write to be transmitted to the specified number of slaves. * MIGRATE connection caching. Much faster keys migraitons. * MIGARTE new options COPY and REPLACE. * CLIENT PAUSE command: stop processing client requests for a specified amount of time. * BITCOUNT performance improvements. * CONFIG SET accepts memory values in different units (for example you can use "CONFIG SET maxmemory 1gb"). * Redis log format slightly changed reporting in each line the role of the instance (master/slave) or if it's a saving child log. * INCR performance improvements. >> Refactoring changes (no new features nor bug fixes) * Blocking operations full refactoring (blocked.c) * Client output buffer memory tracking refactored. for all the details see /usr/share/doc/packages/redis/00-RELEASENOTES - refreshed redis-enable-bactrace-on-x86-and-ia64-only.patch to apply cleanly- make sure we do not daemonize- finished systemd support- update to 2.8.19 - Don't log admin commands in MONITOR. (antirez) - List of commands flagged as admin commands modified. (antirez) - Lua cmsgpack lib updated to latest version. (antirez) - Add symlink to redis-sentinel during make install (Rhommel Lamas) - SORT: Don't sort Set elements if not needed. (antirez) - Fix zero-ordering SORT when called against lists (Matt Stancliff) - Update redis_init_script.tpl (Ben Dowling) - FIXED redis-benchmark's idle mode.With idle mode shouldn't create write event (zhanghailei) - zipmap.c: update comments above (Sun He) - replaced // comments #2150 (Deepak Verma) - redis-benchmark AUTH command to be discarded after the first send #2150 (azure provisioned user) - sds.c: Correct two spelling mistakes in comments (Sun He) - sds.c/sdscatvprintf: set va_end to finish va_list cpy (Sun He) - sds.c: Correct some comments (Sun He) - Update whatisdoing.sh (Serghei Iakovlev) - Include stropts only if __sun is defined. (antirez) - Fix implicit declaration of ioctl on Solaris (Jan-Erik Rediger) - Silence _BSD_SOURCE warnings in glibc 2.20 and forward (Johan Bergström) - Mark whatisdoing.sh as deprecated in top-comment. (antirez) - getting pid fixes (Serghei Iakovlev) - sparkline.c: AddSample skip Empty label (Sun He) - sparkline.c: mov label-ini into the AddSample Function (Sun He) - Only ignore sigpipe in interactive mode (Jan-Erik Rediger) - Simplify lua_cmsgpack macro and fix build on old Linux distros. (antirez)- redis requires sudo for the systemv-init script. As of openSUSE 13.2 sudo is not implicitly included in the dependency tree.- update to 2.8.18 * [FIX] Linenoise updated to be more VT100 compatible. (Salvatore Sanfilippo) * [FIX] A number of typos fixed inside comments. (Various authors) * [FIX] redis-cli no longer quits after long timeouts. (Matt Stancliff) * [FIX] Test framework improved to detect never terminating scripts, cleanup instances on crashes. (Salvatore Sanfilippo) * [FIX] PFCOUNT can be used on slaves now. (Salvatore Sanfilippo) * [FIX] ZSCAN no longer report very small scores as 0. (Matt Stancliff, Michael Grunder, Salvatore Sanfilippo) * [FIX] Don't show the ASCII logo if syslog is enabled. Redis is now an Enterprise Grade product. (Salvatore Sanfilippo) * [NEW] EXPERIMENTAL: Diskless replication, for more info check the doc at http://redis.io/topics/replication. (Salvatore Sanfilippo). * [NEW] Transparent Huge Pages detection and reporting in logs and LATENCY DOCTOR output. (Salvatore Sanfilippo) * [NEW] Many Lua scripting enhancements: Bitops API, cjson upgrade and tests, cmsgpack upgrade. (Matt Stancliff) * [NEW] Total and instantaneous Network bandwidth tracking in INFO. * [NEW] DEBUG POPULATE two args form implemented (old form still works). The second argument is the key prefix. Default is "key:" (Salvatore Sanfilippo) * [NEW] Check that tcp-backlog is matched by /proc/sys/net/core/somaxconn, and warn about it if not. (Salvatore Sanfilippo) for the rest see /usr/share/doc/packages/redis/00-RELEASENOTES- fix bashisms in pre script/bin/sh/bin/sh/bin/sh/bin/shh01-ch3c 1759856201 7.0.8-150600.8.19.17.0.87.0.8-150600.8.19.17.0.8-150600.8.19.1 redisredisdefault.conf.examplesentinel.conf.exampleredisredis-benchmarkredis-check-aofredis-check-rdbredis-cli00-redis.confredis-sentinel.targetredis-sentinel@.serviceredis.targetredis@.serviceredis-user.confredis.confrcredisredis-check-aofredis-check-rdbredis-sentinelredis-serverredis700-RELEASENOTESBUGSREADME.SUSEREADME.mdredis7COPYINGredisdefaultredis/etc/logrotate.d//etc//etc/redis//run//usr/bin//usr/lib/sysctl.d//usr/lib/systemd/system//usr/lib/sysusers.d//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/redis7//usr/share/licenses//usr/share/licenses/redis7//var/lib//var/lib/redis//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:41029/SUSE_SLE-15-SP6_Update/084d19594c4316ac750a5555d280af13-redis7.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=16ead92c4d5da0c4368ad84f7fb752b542e87316, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=c1367485a8fe7d00cdc8f350603b3200c7aba287, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=b5253b1247fef1894a6b028f3407df67a4f112c2, strippedUTF-8 Unicode textASCII text, with very long lines-/RRRRR RRR RRRRRR RR RRRRRRRRRRR RRRR RRRRRR RR RRRRRRPPR!RRRRRR RRRR RR RRRRRRR RR RRRR RRȒd׭vlogrotateutf-899f5e64840fb2d650222060662eadb81fe41df5627cf61492731fecdbee7aeb5?@7zXZ !t/]"k%jx ^P)֚i.z b'שbLC;gJ2WgfCT[70?լ<5IGuɩyXU- /S%L#F5h~5T̾ͺ r*YBi tgs "\dufaj{hj2d*B*O-;˒'ȱ-| pWNRrE&/:C{c)t)v(BG=3B :d9"xWyY J&i=NYbҨ57/ܨM$p(.[+#ϐmFqGI wIi g:ߙ}}'םC=9f^qo nĶ[| ;ۏN2*XXb ;=|PnTܟN:ꭑnD| 7UH+MgOy]`XiE2͟+FzؚTKt>`Sf bwވzӣA Dӛ7LJ5mU8hfaVE+_(@ȍ sViЪ6ж G#9 &h']zfA =;Ǥ,JSx4U)rcv'bHyR\<@윀}{o%!/G?br5qK [.rζe}75Tػ_4<!T/yMKZ7K^p]IDUγLdCAb 3se1znA>FDJ%N\&/]Ol g .HUZ@V b5GtB|e0QE%NIIJ6ȟȹtŏ7iѢ)mxH=FU|e5Uqm M=֨V1X[م}yJ=nk=;t.5ݬ=s}S}/&ܫfhhaS6ThgjrܦZo寎?e# ektˀ.k.˓ ċ5@;*1qvgR|UM>}Nbo*mR/cJ ;n+[Lyris/& Baebs%j[tԓ%l40J֗Gؤڽ`Ӭ7m} p knɹFQ7 G)-W!yhu&iWg}ם6ȂWk+d#tsԈ+hdnmҼ0_@hJWvEUHL 8,~ aB^#dqJ/20KO(eoQ/7 RX;N;6[H4)lĈ >gl SvVYA:e_x_#9](R~+ڹAjL\)f7.yvӫ≦=D%Rm>lȐɐq|0g3A8 _Qd3d --̜b"Gސ>$Sy+Om<1, ,.=>-;-BdZgXc)tD1v # = '018N8x#m?Om_"Q4cO : |\9N}y-fOqdOTԌhrKNP[El2ԉQCghFeMY09aOo('XtI*^{*)i'⤺:3ڒ+TĒ656o@/8H>U HsT9K\6Vxj){/9̍BFXH?*:GF;NCo5 wEJM8FT:TE\˽)NQn><{=\Q\~fI%RU@-7ˎL?$_S\Fo*M$$"59Տ!b5QƎ`,_wv{_A7 fi 1 cyq(l$xQbx&d,W$Zu2$cY2ŒU+( lrF8d!Eu~)iRed6<'\0kx,6/\qQ3& B.h;=$rs3rZ.wQrii\x)u79'gD\|?L|@y;Ȫh ʼ]W+|a-O1#e\ցU}:|SA2"!_rt/X48ڥrcSۀNK,u\%-[QaAr#f"1v6#LN>c\Q(RMWvYș5BܛzRAF P^fʉzcʷ\ElZ4ieR$`6gyAhu;5 CKp)Zh^o1 0N_`tG$;g8x8ץ0[M4Trj25<]dN^I>a^KmC ^ .2'y *)X'`tA f[D1Y[rbqQ^K$>4Z 'ARɯӽi3`Uq&7)1-*k@d* 6! \%DhC[` _{OszZ%˹/U#:i/b:+:6FBbA+ ˋøh]5S&* \c:-zAqv}dsT~apqݚθX1pvͬf|K|Qոc8f'U zM#ėO ֪K> sy#oj5Ly"ͪmJ{9Π5Ҽf.oR<8ؖaX4mIGRGN"Y5A5;HBj+[▖?ׯK(DsĐl0hlZF}U觾D!=/ ޥ02 5/Hc5)w]f8l]D=cvEijs9--oIT$DByլ?~$cmcw]>;^dV-T}rvԩNZYxBlmG_ɡyۗc˚(A͎r݃鏇"C%1XtQ_`nH.s↓6 K>NǠW!>1ʜͨw#4Xh)C-aeJtU-\4JgT%UXُ$y&†Ah>:ZYeyTŻ4LQƟUZPz\NiE:mOG58%kTPnyF) hCcojzV(v| ᦇDLĎ=zdEveLkM5}\ȺMɫdzn9#/%J*K@g;bP3h׾lth=lPFwѷMvPxډ:>̌|F$JS yaN$I o@DfR-i"U#Ճ,8 !Fߘ|!i Mf٪̏ Zbg36Qf2ͰjH$*ypU7"7ُ?uxj=N.E*~a򥄴&Q8s1> k>CCJ8@{zz=ia4(`➩;fWr_u?h 1.QЬWsBm{_ !hj*1診wŷ,jAK.Gt$CaD6DlE<.jJcl v{/#EҮ*gE4XZOBZƧEC#E.@-dgɒ?“~Gp"n*}iŧ{rv gU ;wZ=@q@ി[]" J qY?|MCXD0_hz&ٮ_+$ac|/B|eB6 o}ҟvtr7"lq'%Q}/ḽB Z_ R=J!*瑜^ƚ K ሿοl"A,2$v?M{2;NL K @nMG;V&ya8:p8).\͒$@Yg m @>mB,h R5eAs;( úFpeCXRgYS/x Q˘6flhb'^%w|ŃF짗) (v D? ,A/5:"e4nkR-کk7bx1w F&Q[%Ft]-.DDm(8pa+Poi-q:WAt#.>:d$΅Fiv=Š/gfpbqTl5K_zð#jYhX ?ߙYg$2~($-' V>f78'ahSk)k J4\&]8.#gyV|p⣱0Q{M_B/N2遞w;*8.~W:}Χj{_wS>W.B#!u" ȓ q_v>ic,9%F܎z/HAĊyʞ.Ő(}+M9M \شEAqxUDA!x ih2C&"ΡzTzm2V߸8,FI}}dLKE_ ,mo:% 3fmc)o"+͐<~,QȎޘF(VeƔ/ Rr@suߣaYda&Y>zH3/x[g&-`C Oc#;y񳿐I e^.zN٩ -rPi_>@Xyw?1y)K~0vJ yOU =y1 EQH\ n˼~KGX{OU_͘=_iOa֞(}׆wCTi?2,6Q#hf5lV.^l6OcOѐĸ+2|uw;kasO릛:FCQA[/[1©!v@m&n#٨o7˰g3j[UL#ܾuafijA5ǹ4V=ِ ?>s(ރEJưrl.ύzL9%ƨoCC!8)b'mDnB4VE/pwl7*[)H$Rt͉ˌQ8Y0G5YNw5o]Xqx4t{ot)HdNo2aV jokFras6_2#YՄN *39p+R?8$5(voټ/a<:n+ 30:} 5;דcOOfcq7#8?AtR\(Sekiemʣ*POjFU~cדҢkU\e+rg/'vGa;PKףyԨUbra'S1]mζ(ӛs}sG-.̀B+-L;G/GSg۝v_ udTL58fۚKTJhǔ]Ab:SN 1r) 1Rn=e)EWoލ2L%zgj# KAuFT2dgo8?rwqĩuLQ޿*L?F \54:^.4Ufc~cJ+EO<St?^>c"4G\rU{ZeŠ __+1WEceKEdzsyTB.qEc2 |]tX녹(TgHx!$ 5t-DJAE}g([;r u<[b *o"8&aO~Dٜ-/oӂls7߮Xʰʞ*1O^gua5tTg!Bu̾!wm UԵ5ՠ3ݘd8R.4f~5fU4[-!i="'ܣLq*>Fbń%0WmYcY8ۥN}QZO# &Wn1`o#"TcȫN}Eؐk)(O抨˲6$("9 1sZd9ձt c䯤`1#Y 6jqѢ"!^~ :N~N2BYϊq}ڰp6UJ oBysG"i|Ej'2D Ndq#M4>C:5\)BwGXވQԟoV*dʋLO0G&Qbĵf"Mƞ^ $w8͚@ hϛ |B >WYOѹFc}wzWxStܑ_mUBd;;s^ɉ}$G{L+*2|D$=a z".:d8Ϣ/7`vbzL޺(;ޖ+X*@ds$Vrg++hٌ /As魵$9kƝR\ZeڴU5NT*Hȇ@Byڡ[+j ^H@M؍Y$n>GSmIu e_lzА ɱ AO&L,nƏ?qu߱Q_b<'a}9`}#]M0h+u~NC8 0x*jռ_;^ʟ䟐$&L9pz* KaʨU GzF˻و,LT(`1xS *^%#_)" Hо&Ľ@)PH)sμz)@pV\{ E?4>4&O]|D,*gѢR1‰:*D G#qiu>ZT~./|Nu4-¿c_sfא<~'Z3Df>y6u-)G  Yx\-ӰgJnF.h鞸ngqנ ⱊ̎OYͯ@cs]Ϩɋ0Z9pkQӉ$[i[V*.hByZ+Q3Go/H'{#gy=xlR^%a|޳l%; GUnL2#EeH)(_:nnڊ_o{k6d$e-K%bw x܆/ʓ[\fE3:w[eJގk)] g $vB'Mg :Dok& ;̱@x&]ݪRHdjZ84d['%rNG^)>d:L n]OiK6$PiaxڡL[+/ԈI #%szq~"c !QOKXC;99(lǧ5C^Vxnra֭a Z=38zLg O܂e ``Y6WL=\ )7n'4#!E"xJt vH)EPȁF7uE:]inx7ގB2cWoolÐz@Y BrZ9ZSI-9 ,=gCQ ?3K D"&߆dB #R徣<ڮ?iΞ 64b^`s6+s E:z.uŁ8AH`+zD$E9WYrF9ī<"vZ)Iw k^@B{eOGa88h: 1hH?p_cCGKYh5re,F; Jocih?lrIMMƱZayC.R8)ǙLq>Uܖ\zC;p+)Rv EGLDPtK)HY V07/:nhE8ҵ1TGzm޲/(>s3 9F]s='S'V*hLn,yWrҕB8X IO#<É#+hb/2}㱴 /ck9&h>l_ {xanl![ baGrhj?9hQ}pc!9dи!SZ sH}^ s%ʴCx> 0[ax]l _ᡶQJ$^Bji4m_d+z+Za!.:us 0ꋼovj'lG 5Z% 'CAi|0QbW!rCö{9uLt_ϟml^ ]jL{ar{GkE7k崁)[,r :/yOa-;XdR&?f`nP`ݟů(l"׷`wѰSFxB0q/}dweG XRײ&;ӞrԵ.k)RNۘ@qo[A|p ;a9yM5TXmc>/J7 "1b6RZB]Y7Juj2õ&x0\))AQ"ݙGc}}ȓ" ևDԷu _DݏKY._gʙ .ڊO1ޥ0{bW&Jo4#d~g-쳏?hqE4{%7JO4 8Fky HRf?ܢLEzv1S1T$o]&q 4 ZQjD%yά=D+2pe bM2C D.D>>(GhXs\.h4F=F0R5z1غt6&}*ƌlS N3 @wCZSG7DbN _䂘{-+pFOśQQylI.*EӵVGهT'bFbeG"]@ĚX9t?q3+S9T54Oq{tŪA<wy< @"g6L6^RXek2`~ "]}~\eHd|OkA=m_{әnʁQut6|4\[7>U\ Rp1 r3wiuN[2zbqӴZ|Z,20E&5`Ҡ{׭Rut;c@u{L0jo$KS<+ 4S^InbZ0U/ڼ b_Jg@` c-^0%%{nB+c`qlildꚹ#%1ｂ"!:v;hJ=`ҙlֆ霵*W(gq#@M}T݆FXq>6ԹÜCܳp::4џ7M `gXRB7oKJ % W͂(g x3LՇ ,1%l0 m%൸=WٓS{~V*5mf8׏ǝ~xwVͬt;+ehINb:3FO* R3ӉXhWW۷¬4qʔˮ q,2R–KqZ9j|&'݅ZQKl,0HaW`)rx>s }5d͈5,j4mEY_R2'CuS׭2#&W&\qaDgvFjؙ[^z\^DҡRggrih U %d;$4iCx۵e[#5NAM% AC:7z5ռ_B{M+fvm]l{SGֺiЗ[,2jV.,=U%&C(EFUP'р}<ԁ'efBB6~ߦSX}WpPkloaz06&:'7 .b ֝4믮4B[Z]nǢ{\[ũϋoQ'Sa%qpNZѿd# 2yPn'OwE85}X K"69ь9*_o&X!#^]̍RYIYQRw8&PTykp36ĂAtn‡?xra%GbWϋ4HKnv 4%9`~TPTG,!VbB14*$S9=Bs44xmv] ÓQ<]CUҗ M/-w#Y}YH3bG{8j5T.å$vy `x4eO5=+X ;1:PJYX]Lśf4 gubxMb-K{qEY1;vלfc;l{y4H0=t{F:uOUS}aFiP枇pc78ΟNr* z&;]>wrC*n߫tmo Q/G)ŐOy9}Am@RB9Zn؅AJ\{6GL%o!kQ5Sa.=V9?wvB5 z"m8@-|1})*c5.Ihm$u )^7I 5͵K:uJra#C!/u`+$rT7 Fz-Ay7_ WEݲx&Erf`5I, LՈe* 4r8!p,ȵcCʁ yn,Y} b7h8d;Tiso޷_md|yix<Æ3F2`if/_ fl`2zïR #dГ8B8B+rTeVnŜvcaZ*7Ae4kVF EE3sǹİKX!*=gֆƘA #uB1&6lXz}z1m}@U[r~khs A'ۧOwp<\FkCwЀ)"Z~vj ,O@X80w++9IEǜ=uJ02L''O5η֖/8 W;K/cD3F ΍h9"Z5w@3 IhXJDPʿ-PŲ]l^PDN. 9X|2/ :t(eܹ\gk!:iiA~L0ѻPepIj[XPqQ!jot9Ա.U׶1%JS-b\>lhpzLZ[0+@cr;܉vf[/$ictۇṙrt) Av9 *EpZwDђ[iVx%Cc .>6#3K2 4),gb32E`:C,!(|X.aQl5ͰaB,uC8#%a+;~$ٴӋya@Miavxſ|L_ }A۳`:||*3뙨P #IF! kcc*M/ hq7j _BW?%SmX$.0iχݢ„VͶ _ycAR43p=$\~Ա!(K0G`s|'heB!-Zf x>";Mtf N(uSBj?2uxX{_B9^ƎYd TǢIo,\y[fKn0:$$V(K= LLN${TK{G :M%N}XsZ ?S90av zأ Ď~5 (bG쟀4s%3WHvPǺ7@ /byrzw \j.kGhIs4QH~2k.EJOC~VJ!"伈Z I|QJZ(oAkՑehajߢ{"9U̕ gApHOf9Պjhɤ(,V@Ph3F۔(k4h$i*!?Q~ݱ"pw7\Ҙ>MeW@r6  b>Ĩ Ou2r/!2$$v*ЗaJ][(SU*o9GQ[W w `!TL?9z,493 K샬M/6Sm kY Eb\ķR|h ,a{98" ~Lo{sDcwJzo{F_+UFҭ$VŇ bv@}蟫2Vknh5%poR5cXjdD*!Gעbtz'>jPĿ5>.V=7\ Նw11MfM-yVoM\Cxy1l9ݍt:Q1/A(F1e[w5δɦO.<fVځUx ֭VOm<ڜ{r4zZ?Ahn*QDni'|B]=$ }u'PϏ}` gHTՁx.Cdĩn"[ԥ6;vSyr;GTҷOv|PAfHQױ9 $h]C=Vaw)M}A~f;Xh j2%1Yfhbs-$xǰ.G&L4cnkLs 6߾t<0|q<[ŷ:vNT*8ئ3N34/v wFl~V.(8SYliy>B>R!UzS|.KWbn~؞12$i'ZX$|o3b&G$uDZ"*B)vI^(^ct5"cBJ;}[݈cѶ 9>Y34HvoHy#W)dKW 4拆Hcd'>ҶlS}8詘|`k^t"x:ǡ7BzCELL}.wP bUX—#_l@'~W$ҍA|N_+09)qf+_#OpCtGg_4R)5pCy$lCtl9}-h_bS> wjYh888u (BȎͩ]H,ܠ ƀ aXxrl`30ODw|z9 n_Tpm$ &Bq+3dǛ&و2(ZysѶ]6W !Z)2Vpƈo~"}3仺"or/ܧ\#I5s}eݠ0пC:xN~ 1Tn Ոd>4ul(pz&b]v!b͌xmҒH|׸G!8'@|2˒\<x}t㠱g& gWυ`:ji)x C/ O%$F3ԅ1ҡP)aܩ|JogaN+` AǗ3jG"Qft|tCDkG̙* cR\%vhcӽ]ӖxsR&qm?]u LW_ْϚlC;ݼth?AIu%߰Y-*dYA N°gӲ&^ ]oB#xǙ;ܭߪLz{%F4SkT!t:A+Iُ R#$Qc$WIY>"/ao(; lJq%)V{́BEE\ Pm/=&7_o/zm2yڸ~sme;Z(L;E폴| .Y z?(ZokEYY^L0 i/-8ݡtఴK-rBںKPݖ6cr@눼&aTXAc]_}?D10WyK.Rf+d: 0nra?դ ꒟$\?M}+ZpPi5 h>^ ~̀Fcɰ{ oV5y^f@rk,zUp\̍CgaVݷJa4yD_joچ@S",8caq/h_nGwRz^"&1[&F~@Ѳ`cF9ʶÖjؕ^gbOH XQ"f*>Bx& #4b>^s0Ij(}2QWdav05SM/NjY2~PPCn[TkwFij5 ]LnUn0)ԉ `_hΈA\.VlIozbOFd9uz1ERYْ/*n0FM'0qߕg6Ҡ>}ll_Rw]fhuU/j\`VRko7qHzVBjm)9iׯc֏X x_WO+g{ZT?m" k uG|^ck)@' xFtdp-| `/7(w׈&RHDRUVpV;t'Hf&NQtii3%La"f5=vRn ^Y4m>3a? esL&}$6Wzo+ j yd9ɱo1r(([>3aRy4s4^:N'_F.8 ^i[>ӄ1OBpqѾNm񙲎Ǖ {>BR P/ȭ'xTfg0E<- xͲeTM\[Q)v_#dU֩$Q:6;6`%qr!Φ}N޽"2 -GӶW o#K΍BT|Ć/$@g޺+X}QG g ib_c] Ѯu, T9ϝ>W#>$GpguV2n"G<"NIHu4qp juz:هBMIk~Г'#< ؽsX1ƶ ZJ{V?L 2}%RM봿缮gv?yvOf ϔQ,,_1Y4]1!*@H< fa`)ˋ+O5l!f+bGcɓu"FA:~ ?<& -|H .柼@x6|qaм/X“氒a눟_\Tg:FC2P0^FZب5mFO]R7ݹܹ`V,|w4z#nx?}oePfdC{1}iHkif 4F"zQiNfTYʴW0.N-}{ @wg,:C/ǰ# SniwXΔOhq 'ZB=TirY0<!gV ?bޒ[qX@o%K\rdyh )HE _-35Zn.Heԙ%{"669֞;N Kh(zXނh.{Lw2e7Y{ TdWɅ{ v,\f\)*Z2^YYuw!xS_M)pT )dD ܿ0UZwD7XG9`8ke/Pns%n efBzB. E6WAz DpirB؂/4%pKfadIWP0xN9;s F% P1SbOt~zfU%nI^/=ә#{* P"&oyɕb<-o&3 &'rG GL9/tTKjv@Bb(ӱNԖ@I78U])NQɕx/@A;0,!I5(nH18e͓ j,Ra=;*ބ.DI_k146IiJ&Bj܂'3}Sq[ia!f޳`;c0d7qWֈZxTtݴF(h^6x+e â?W/ 'CwrɃ=Dž`4v{lN|]N՗d&B:L#q/1!aEwxDBDmbq tvˀ‘b-׉_]Ek7$ wB C'Tpx>2R[c Ӱr%$}Aa'^Uq q"mgJ}g)}[р"'( sSq(:W&`@Ӷ~m*3k0@SLu>Լі x]ikzs"Mu@U&(6)1"S,߶3 \|CԅL.:WU.R裫sὤ?\KyO ц'q8A VHv6)ϴڀbZB584 Wh+dlVS RiZW]>XUj{FF$5ز;m[y{jRDWۦtVlZw:^4uw<£[^^]JlddYլW2&FcZqC> GYGc g?skq{Z-nLq5 vRx@BzY?&9 0]]+aB$;:^[*g*rO.OGgeL™ CԛW{V ~/2 l-~ $U>:]k7 Υ%[" C0DѥWeĪtzX[D(3595~ UbJHk΍=b[p7"!ENnJ04, ϝ adR=him}ջ6eX L ח aMn "ǭMyw`21<ۨӎTshM;v-C:GlCodGiẁ \0;cM@RCnV* R|YW؁2fs{)JL!9{Vk $|M/!@KiJ4̅Mwc5!utl4d2PG6`7c[ Z0w_-\=;VZe_.q@m%$;9p KAd*|TgAu6v< 2\YEu/H}ڸl%ji@8TL輳LE)w@P:Ij;Dq@wYlWa~nZ/v+bW>)`}ot行">PO,𜽿qF9V埥+ arS楳@vҸ@~1@6aO0ڊQ8BFrpCCP8 Sr?>?!{kq(2]o184VgQP?! YfS4Cn}K}+eӗZB ۉwO0̵#9uVgOC*Mli]7'D)("1nS! ln5۟oO8Ll-ѳUh-!;ʝ6D94WWش$ڋ7{J2rfo>(LP[9h.Aܛ o%29vk)jMs"1܋+Ɖ 0J1ͦ:$%׶+JnstdSr[~bV / M#l(=gI7ߍ<{v^B+68eރ7xtra mo`b vJD;l@0 ?~1%' ydUARU M2:>pYIȢ'Y9֚ m C\WFX" {[1CJ.fV2Q dd9v-OvWsIhɉ)McUzɊe݀JZsT[vz7F5|uy@cYsAr IeTܾ ˺]k%_˻vW[u9}B)zj ȌD@t|&N%[aKߏX R@stǙXĥX`uqկ?%T|{}-UFcOo}Ʌt'cӣA.~@z ShVOOѼ<(>|l9ɸBCvs#JB,$y80{4C$c4D85R(7b%Ǘ;"rգR%9\oQ(Fj+(~C66!26DHKk]*b6;bp\tIYR봺ԛ6楽=?e{ Ql9!?Ygy~`K?YسLqq]`?-{wKPZ $P[B!=\BbtLZyI$3mf/e/1(09Zv{bCEPCRn)?N6|%O>PiW3ksXnS i@)UB*ekׁ/iPMk h'߮qTi&"YʊnJ-ÌL&<No~:Q/J־TSԄ73(\FD\Tjkga'e~dzX)R}goI>yڵ2Ͳ& Z jA=Ļ3SxmdFؐm>֥+(tͳoN@+gU{:vl9yzAGgcn} vp=V}QV۪d@&,5}5^kC)}f£Rhd&9]I$ũ'󀉇5zA;+5C 5 6RMF.pq %Khb4aF=tA|B>1_ NP3_/:ʃa |/73fOJXNQe>CE)ir .0O G[aTGU @,0df:$1#nd>?' Y ZwEHF)w]k^(L[TZE ; sNߤqiX_b/ Zsd*Np*{u0 e0C& lGpp_70|S4Klj蹽FZkT)'<v+,#Ycd+p:7 BAsÀ#)S 7). 7Y5Ϧ;(E#!q/GvdK_sKevTz~Lɫ|:k=Ժ-X%Ϲzb$gUsAza[v˹tΨ@Dd;|$_*:@ %Ըc0Ũ]E8r}ye/8$eUUj}(^q%Fpf3x!jQv T0R9əF:P7" YUn$Ziy lP2}|?C`^΅޼;[᠘*P7A(,n&>WّXU ș# PDfPr'p +P\iK0](פ?~X&1K>zU[w,cõ7^ˀHSB?׮nC\I*%0:Ÿ%P2p :)8 [Gnn֫7FXzڒO~K@BMH9*M9O;+p?a'[S+{E{f*E¯9dl#D"Kw(Bb&3&Sʝ $ Cx gD xoHHX(X=a'\K}zmG<1gwV5SVsqtg} g[&aңK>kʑiafrp 59?%E_[,`m{|@sz!F ؂ OfF_PYU|^STt|&2O'M%@l&8VOW\}!m$\{uA+h1~ӹCJA ZP)Ҽ;Z76/y6{m>ĤF)BC翃qϲ&=]WZ9p r] wW@&CЛcJ6JvnB &>q)dTt]D|"8Y"xr C#F~ͮmf˶M7iXGX#4D[c-C=9|ʬ~4'IC1JMNӕ){/-ˆu<,#j (_O׻Q OB#3}dƁg$FL;Q}D&K ԰SL7i76Ќ ?5K_C4XlAԞrN3mZNxطkĀNA0!GzA\ fO#HC>s(UH-Zf@&MɲwF-!`;rmUq+/@GI\[ڸCc(?@bNՋ 4+/ʭ ɠtx=,=u^'6v/;]O},?|)o2X D-C7F.w?<+-[qdR5u1wA&vo<_s>cO.}!*i^[`ObO)u]Ӷ c 56̰|R+O~Skru )cP[ w"|IFDIahX>QOgrlF* Ir5.) ~)hiaH]4řn܊v?Do'“*}YBQen}+WK-zPt +ȃ;e9!H\7?s$ 04| @Ja(07d>֋WenvN/ǨYb!yFY5+mh1U7g@yjW=I5f1+@!>]]8CRE ;]3CZ;RUW4Z/ؓTib~F n=ݐhI`ibzzA:2Z31` b@7-rɜ@.j8F׭5&<}->5sP q1P. J}ˏXM/j1vcn)`k=sxP`k f;)ZX+kOT~!E,uDzu|,0n@MB0XF[gSbJ#f@:u"5'GGw][ع'ǵMɊMa1myJ.j8 9&+piEkG@ 6==Ƌ4mKefW KqӐ{qB䚉0Pͫ ~`pե]>8(-Ce]eAxUB1mɷO14";GY7YsҰK4zi2I?6#C@;t*0Bu+~m@zkNsvkSU;u B)*QPG6I?9 .&d70 @-YtIo9vVsnڠx2rÔSv uo^#*|,j/Uu}!g8";"P Vv1aF~ϒCގR,0u,1 1o՘7y_%jB{=\ƥ{u\~Ak'KRꬒ4 0C._jPz{ )d?߅Zy)2tC) LdGP[ݬ@XcA5fB'3߅q'0pugQCK@m="ěz[1SBzٕCJS2{B '$'-LMbc֬(^ˡaʟ z:#‰y!N|>x0bW[_|D2c S'"hOkѻd'-ZQ"F9IDqt=xق\(;RKGY>}޾~后hOZI Tj#u(^5?AiMHFmg H5T|tyg 5,J|͝Z$7s|X[[ge\(Ye'ep'2T\l1l}LKT!n RW_BF㫍X d{0HeE)B_Z;?0*)+YFƏׯ ;Oin02:$v[{wZ;"niX u% =To,!~\^lD:f*>"~Sd/eL'T\+i֬w_dRlOTؓ0惛25m#|D9E$-#IGvBylfUQ:oCcخiGkmշ0*6WxNj䜬|p#@ WY' nfŢUz/TȿgX{^e ocТ!\pކذ1RXd2ԋsm{zߛ(]qNQ$oAuw鈎q%+f _,oGBtlOK@yzBhI_ v-R<D!]1uN3MtT)|3%Ba=?!J%z%kV&8̹Υ@DPk{pzXmDq6b  l D%^َ{FP-KD!z (?,bkf~biRs;2)J.F/yFsQ͓'PxzwSɄ R}s|Ƴ\4J.?xZ,wSke/⪉d=]!CK%i b! Z.vRuD?'&ȅYQvWpRw\E"x6[%5:,I,z~ۑ; =to%BxHAUZpIբΰ2Ma߲VLPc}owHDrTDGf}Mth5E!ǃnvG˄ Tl6x:w6\c},Կ.EMMU,:PA4.~C:C"qI(@#È"};^z7͙@|Q U`t)j΅Nl3x.LkF:+Ubt!@\͐\8A][!%Ls{($4td4C|Ħz,Yy$>_G0(m0Sd kl_dcO+7-NR8Њ0~Z'xW|xf]N6QS'3Fѷ(07JJBx,17zeJV"_RsW"v3ǝw &;tHgY WbM'27`w%դQJzwI~'vAxSqT v]* _ȕXZ֢ !YaD*T-^({-)Pt~mA,Ɂ`sm#JH- CH dDD{pݵ4}'|8?5l@.ન m`!uz£Oh/b,Dգ4==mjPiQSB`s1;+ܸ*2ZDùUfdAz{h4ϩ4 Tԉ9xEsku0(di|/(SMpqU&xQ} 1&vI?"U R_U6V;-6,DJtK%>$=H0ψGlW|5j_|ǂ)f Ƭ0$ kχ^^A:b&d\n[Kq孰v7j8ƔT۽G7G 5˄3>{J^mO{ {3w*UD`rq/ dӸOoDl?d1 *ǵHr4ⅰ]xM5}HMf!$yb\4 LJ<ĘoC|ދz+ w0<yf'J J(iYxoq@;7uA3kN"N5T՗:#Ɓ;Q4~0>t!f~}3K^ru+S xC[e #RG< 2q\`(9?`[zlG[ Lߋ@PvϭgCTQ.Ny>M|E9{ _qW1yog^~LğmZ a@EJT6v{$\i] r؅8GL LG\K>RpkM.rse*'[-8Z#2p+yr~ΏEÄ0i^tV&x ŒS`74AwO)Pi DߔΛ,o Q*x=6L[pH.kQ"12s;|UI²WOM3=GCE IsL*)iO9 M4R^ G`|rSD1#LK%βU3B(}1ڨ@IaUn2ȭlpps0;6 ێ$ge׆yu5nIjGÜ֦ܠrlD@J>_þu["VAcdE[jpro\7~`S¢Mz5unNG`ALj@*^u Wwt_dvb.g8~Faݰ:i!PnS",Cl:EW)k9Ǣap3?< PoYyS h]8fwzmR[,mZݷ;Þ*Ʈ4lL`X;e(#UicRBszGgTx2Ɂܑ m:ρhizJl`yͨne18L0%"Ǩ~ptaH8UҥyUZ@^QxYV>*<-|v oQdTr;8,Ԓ"Dm¤aT2O2d\9,):e0!Zgא1j*}7ߴVz n{v~[j_2Ժsgeeh+'YwAࡅ{45T1P5"ߪWUIpw6u{Y̔u߈RzW>GB7G^F󨲳W7CE)KADžyve|X 7Z$ 7Hqv؃è쫆:M |;bS>M}v~EiH0`/s ΕO(}x #\b7@G)BqjN=xaWmnNy8,'rcAG/i<qXfj&V:r,#GL Y}dS1"g7M:VVӴ~ww#r)k6soõY!e2r,E>+ ͥD*"?)*;p1a]|,OT]`5).^aagHeSF^r\kI3蕀A ʜ4ȸ U#r(̈1#;.  䞡tmEQ}u1<,a5g<[Jyd\ES`JERt̆@eʘVЭb䅠= ᘪ9yj'O g9Wi~(Bh>_)%`%"cy`v懝 9\Fy;$AOisZܫ0F?jnF/*F )VK k75Dr{=NPUf/ >#ku$``2H\en;\em Z_j&q8G`4<ww^}G)B،'ѭ"[KnmDΪ?6!s ╂.TJH(h34mY[\/i`ͦ[.1[3&+&V==q-L g -~(F0:908z|Vʙc:l@"B5tw6d4ӭ4ŕ{|)Qe7m އnv!2 :W$ox+s[%( k\LY,AtÊe&`T~U֛ELckZ3mOحl ʄJ~)AKu "!%Jq ,naGg :Kx- pvn O mªפ CXzyVMWMO* eƜC дQUOWQwzͤT2ja-U~kP.M2/tf4|E~AI V8T l HLt,ISr̮]n"aػyy&=qޗ%}G]8\bGB7o) ^bv{q7I;u z1Dk<fc>Ϝ۰OFǃ9eF M?8ʿSj_YI< .gs|Z -픤G1x4(IigReTÞA9?'2HtfIA$ RKu3F[<08GI*6\BS9ilwrsv2CwyfD!@PD:R8R jv؄Obo~By|ߒ0Ezw l=ѓI ׮&M;E%aQfbS2.I<p\>r*1e=swn*D}'(*MZɆA3t6"@YISa;Nq:T|5va$KXk91-vfOTk@@ׁ:,M;Z[Q@bw5/4X ȟ>JfH`zmhre3%k97|lot* ҧ I!-j7.%GJ{?>~4DÚǥy|Gڏ\(/=*P8G=ڴC!?}tXwHz7K9(€\essUZyhipцK]גq^Rnt#$܉(Ea>oސU>2}N6Q?\Jg~́ce8fdi0*4mJ9\wURV 4GN>$wyc\kDgpr}y6Uɶ%h#{vnN'K~} NR(^ 4ΫW/0D e6Xw[(vBiceJE@f^LN Ț}zjv' [cW\4ژ#YTdbpwGM+utOr$DPD ]0 W8 -jt 09 +#+"Z'5.0V tIu22C4*nF]I:\ ڠ!ׇ\V~_[* 3$S337F~e,pxz oh"쥯a4kT fDqDi2G[qu8T1&ڤ zͮ [74T\/)!;,{=CDz۾g-0m-pE,|_{'K6o>XmC 1q Q:"ۈp{_ZfuB\H,}BVt ,NtJryD,MӉa.JJV. ըj{<#i9%],M/j)#OI#{O2% l l/K4{4sLѢ2͑hr;s]yxL g7_#Nn0$oyՙ5΋~#gZnsR]6W¼UpaVI< #iw[0 )H-\-%+hlop='`L@Վl+IȠ".^̽'g7Җ7Rt $eA:ܠWe"$(as0[y쇄Պe$)P$DanҰaB0Z{M0!S~_ti[4N='v@P*\=]x3?1j$,M;"dܛ1ڴT9'oj+ >nn qIr.e  wYΆ[! #?-H"n]B8x'pQ1,mkXcF/ 37Y njMˇS6 ' xQd*9RJ 6]=hPv. 烏߆mKԩ @tE_\?O| ,OA Z,*+lC%G*aҥU%*1pogQwŠy!?NR1Ѥ hHZJ@r$R~L7u= %x N`hIJSߴ{)B_,cPiI\Q^n#s en7"p"Zj2@:Z0p+ <&W`NB802t#M ¬ݐ>r,Rå;&w^A'x"*h GnV2LUCEAlKxV  Z(-SkJCKrG'IIpՐ7(Ў1Y֯>Wk2yv *=~As|M( ;b]e 26^)JyŽq{йKXjgDEW =[ B2APD?&qVČm#/vTPI 4~ :xƂ3|%!d ה%o&͝p_MѼa^q _G nLP98Е QEw } 5}:!;A"TW)9 ~_O6 ATfRA:Wb+ᐻ~8&s@=Ov?-/1K]hrhZy^h V8U ;i0bNѨ2*S 6rJsr3m,2yVSn$^qOm%Gn6#{#Ly{ٙ hE( _Bz|hc\ׯ=@5g6ЕCpq*v>"vu]hG|a?V$.<3}Sc3;/Ѵ4<t!,LKHZkv:-GCM1 -dOMW t6b#bլ]:rUnv9o5:ƥLx#S5?w5`]gLk:`@_*q/;."=K-4JaG sX(}{|t}NLaj^?c^ʷ߭:(0WיǺPڄNa%g_8 't/ލMork/R#X\EH+zҤ@fwnXk4BE6fX\*}vTaVCkN17؄10O9bvF+n[+TCNwWM筮ӷN<|I^qwґ3ޑW9|3Z1gSɭjLz ❗bB8cu'4+1U{L$[!Pþ)*5؃ܐ9ܐn vD1(7hzUEYA׉ӳ.کߵw+6 :2oK^W&&g'BHIW s&8 U<1ԹF;CSJ L,?U,w6ʪ& P4=.WwA8X-p(y?Kܶ(.Өh#ߗ5ip$q(I,HBn1^hn=;SF1,S z©fUΤ P%/9+X&f˵κ#-bM,Z?g4_>9Hcf *SṮ#_BCTTO}%2F:yVkc^MTX0VuA+#uCn͑ = s./H!hΗ( ׍.wvBqJ]͏YդYsfC6.Jΐ*NȽRe.y,+{TC 'z C)֟V`W0AcPM!,-W`HfjXo%cU{̷+=9y!1WwƲF6qQ\a8e NV0䚔~2tp">mS豤L]Q]ịCQp1Ƽu-;W-fNO ġzj橵]ͅӊyB"_N-HK/qK^}YO*1B sTj|[Ү eoCuӺ?acxVQrt1@?"wsbovsF6(Qn7:7)C:p'XJ,Ts!)Y`U5[зbEOS}Rŕhyüjeԓ46%9RBGAg[lxO Xl w/̜<‡ A ^²ݳwr-2:}s%Zi*::m9,jZGi2dZkК飌ia]7 ['YtQ ZNᚎy.s]5M z(aӞrxgt<&v淇7PnX0e^k_V& jC/Wz-wjOInaKV!uidp]X5[=vЫ+&WV<HZ*C-DoOՋo*e o% _fՂ&O{@ H~*4πnQⲕ{6} W ۇՑv.QKa*e!6(/7` wAT]yi=kY2lL?x82 E 1ҁw@+ӍوW)mvܖ4. ɦb %4gd2S=3.8ONp"%+up;_:OR[t'1.'ђXGkxkä`$."D~bΊ({l8U! t]8MWM?'9("&Z-K3Bd99F3JaWeVyљA3km 'x?,pmTy2u/8ood# Cc LoP#YF٪f\A9hry8J ^|Y b^$Z)z\Ru'Q+6N/qm\ߩcdVZQ NӷۆMNoB ݥ KK~0>H 88'ruE:f>7S0j<$.0uDZN VTs[z w3MEdյHmO"a2 yVL>@ \҈'XPO6 Hu0T((z(h; _2+]0k"[᎓莪_}_yK3kI,,ŜJϪ YrJ|;A~L槫P/jSSKޟ2 J G/sM.$Sҭ{#PlG숟q=A 4ڰe, $Fl3WUI=?H> M=vӠCR< K=m;yb.^~ޅ‘XdfVިBՁlX#kaNm~+}Xѫɷ޿(ի,I<[S^[еcq+-إ*DގQ{p'ЯpMݛ5VR:eqJyn3k?f/{IO= (Ȟ *争#.Q}z^B#w:B6ht"vFYZ~ ï|EPh.Ӏ|8k{1䠀5̛#GbTD y50;<2% @}SzTZ? zb vk(x4[1,x=1v ihYX2190|q pVO=H4BIޙV}1U%ݖ"њdV18O_Y[_Ber8L4,ID1NsH|OTeT UB+?•^}al[5, q!tehw}}(Ȝ&{gEM+*$meN&OR)D.=?NdXZ@j*120`SӄrKԙqVXn XKpG[4%sd!F%#GݨpyusVKO>9_aP4q/A_`*:kOWrz$ ?ks3tri|֝$~YsKtُO0EL BC eDRX~sŹ(u1qB6}|YjP:F@#p`9۫eipSUW̠7 ^V8. 7xSYdgK\ߠAU%Wiz5 \F\LsG%|ffBR:-][2dw.Kj¦|G.8M9̘K š7E0L>wRj8tuQ\ E# Pknad}ڣ:.t:kdOV '_ܒ|mF0|7 s<$J Ҵʎ *VGQ*TxT/setq`y>^Z# w r ]5!ZW%َ Fogi|X$p0enɖ}Ք-Vmi Pu[Sh8n1 ,;o ӫt?[$_Wsas@Q_)4Xa%ɃG\/hH nkg%a<y{~̌_`v. Si0f373~dn&~}O9Cs5=L \Bvy ޕ+Z86O> ;r2>!~yoMbONwu0RfEYpc?+/~]zmo $ e뎡8 ?# *;3A HC $}1Ŧ Ge`( ݖ}E$@{3q(1Y{.40N+K@B&̆܊rֵB?tA^SCH֝: 0۩XZM >؝Uס3IGAcjoI( 3VQFsi'v7ڷ0k>:uf knѧ*e#4%sdMY37rㄏ=t) uvl<*cw{3+9}V3.>GO{h`qOβ.I[Dv)|alO8{'cz1J} aU@Pva-Qʟ_eN>O>ڎfbp)XWCHkNU p"tk/щDqm:h=ޱ93W@7ޘs|'{V4^=h9#_'e*\-SdN5)6Y`YDGRL~ rGlfܮ඾Y_I0i .f/$,^C-27;P||B~kJetp ^%l*R{xsZf-vr?@G.eeúF|&24c}۟PsE2> s@X'mJUV5(& e|4셯H++r/Gƿ }P6'St@|Y{d2r$]>#쌣J?OL ]}`9Ə\.n,ث0Ey`}w H2_EQ]6惤 \'o^dM, lJMZ?`Nr޵]L2+}vK c2n|&4T,y3e&DtEMgc0OU@'9 @ ` @%>w ɗ$ǀ`0QN3&w4;khY`L b"m>@ud:twUIO}UXYTw[5ͬGg!}SVK2΄ p]ff}ID Z,W:^7Rط+\q/n$GC6=V$s?mxZ~@BX֨3=[ã S]U J53CdMŴ3*ؗݖB9N >JƏ֚ (eXV95.pu[Ў,):ֳ7T WU2S[[d Vv.L=i IS ٠.9ymNI1%qVXZܗq¡)zNP 0yύ\i؀h Gkߗ!:ɼ,d5Θar!Ry>9LJcȤH)URbzLR8 F}+bsOKx$))[a=:06}+zK|Tf.g8o-ЉDL^X XAfO\/.]~=+b$, y^ l >s Y8b8ȪWyu1KI<2['2$":u\ RtY_/*1"5YqLqexM/Bo!^+$s;,!.nNۤh(M) z)v si#bT|&)SH)s$TҁnVi6a)n6-a_KJOgRLum*M 1O{a"3HX,$R*-ݮK*Om.?\> p| CM>']bN:b{pP#ڶ糬+r31`d e!Un;ʚߑE&kDrPP y'^H)̨;;7+"YX…١557tx(+(KCG s7 au&+w\ɳIJ󵺤eEҙj峾;!ګo""z8EmjN{(̬KJPN`-\|FHIZ߸.9aDzMo>F9|4|ٓN&h9{ mg>Զ=NycTyn&˂5ajV&*̾$T'ncà9V&G#!v=4 UJ]WB0d'(\IPY˷?{$_ !bt: yӧ`]z5pL>tjPcJ+3$fTUM>dB_ j^RcBej!X6wH>y6S@/\k~(Y5,|\lva Ch1niƲY !n1=i t?ٿ kfȂqq^E8Lb' '+h%dl##Z"WSU FjA.#60ޏ _{?o$%БQ\["lj=| Pp|_h~*,j5TvdK>dpt;\KC(= L5;FK7P'acT}T#طӧQ [~ADgE7T׽e`=6١[P &?| Yéu0N Y $ˎTZfrӀbhDmف3|f 1a.&6} =-)W NOVi49KCOTLCW,mBKMtf} k s'5^5X@^' 9O=[%_:{0nHw%T=r,Q=wjaf ֿrpw4 s+ ۿNŻFStZ*4#"JGwKc"HGͅWt*EzLeh:)_Ǐfo}CuQ VW=g)&&ҞKiz_2*nrli\v+XGNA ++ g/sUޠw@DNJd7̛g,`3BB#}$iAD8v V>'*5qSm}x6*@ e`خ[rySY ] yRmoZʕ> TaR-=_eĥjq;HcEa-+8Eu 6! Ԑ+:}b?W*G<|J-7/['gz~ igR3qQôi. H(tE`up)r<3&uQ䐡BC8;ef +W+sKS7fM$[:V I8&-lg.pJ #7LM=DYxn_俄W6φ*f}s ̎bd4O8}_v`Dn.6ǴSMxaޗQ/k"Y{VG2]Yu:wU۴hu¡|?\^뢅 p,#1&5T;re5oU|cevq9k. ^i"t3aÜ.к/j/hCruޡZ+¼I;4[:h7bhGg=#g*Ut]mDMGW$1BZ)\}|%ʅPL ][e Ip>FVwRDve NV6L>Ym+ 'Uu-HcNH}@ON!bx{,B"UG~((XE"Zd)хXe؀J0EAʟuRʓ+ 'Du^_JC$"&b@S1*V0aֹsu*z9J0eM< ʕCc7e@j6:]/4UH{SO5+iZN)@OU09ܭVK~uۊ("RQХRqag=O%ҪȪEW֬HQ{+&8kSh /0_ =r ofu<;Exċ W?Kmh- {*OY,%Ä`fQЅHYkvrQظ9tXO<#l/a9 _ wؖcփv@/ pX'=I\PitsԛO 6oFx9DGd[*ǃPpF~{o YT2/濍l6NSߥ/{t^^a8\ҸXa Lb pXnSN؈._OGo,B$RȷUV$tYhjeAHPW\[' *F p6#Hg,@!Zh6*O1sK-/>Ք)`C䍍/O&>ll(Wlp J5 +{dKpW9w10:x&#n:}ޜZV蚦TCr5YF'>zGP\U˱ Q-",1@Z_Y*^vi%TؤM:<=3ib?B\3|5Y:Ϟ!'mi" A> MUtsZ8Qa7?F1nͼm4/R`z~LU Д]$Gٳ>֍4\%qa%0 okn O&iSòK›J>6#*nxyfX*+RVc]u0m;'zbb"5-x[h$\١8@p!#\s*z!Yd,70)1`Edd*hKl^#aT3p3I/֚Ubr7Y9hcE戨Zָ`9=~l_UN͓}_F%;%7HD+U צUKyebK $N_Qho }8dYb!xG)ԍŝF(}qReJzXT4*mbJ,lj;cWW)LЄ`eݛN1Ȑ񧛍HBH%'Kl0#M/-L0:{=Z2C),r @'޿N" x$ɪ+8%1*;u RH:H5nF\òMw&F="Vn<[+e,N#7T7**5qRlg4ZL9(7v%xjS+i [90 9.~Bz`pߏ2j]ʹ{X]A<^>6|XJ3 ~4Quum^٣1m 54YN@|VUO%SٯWn͆Jy/XTVPPƼVkL>dVSAZ:bL&YFI56sh5DWyzJ2o;?g}k ?,;AjSPVzc_OD<BH gT Wp.ZOpWQގ1BlHӟc}%*y)~&(iYk?Zp`cx*d9:MGх^uR{o-ð&3Ĕ2rYϓ@.ܮUu ׁ'PD6[v^89[;95FE&KY?=]z/Fjocɮɫ*4ӌ_];VADp\?:W]=.?AT@j4<|MA8X_Rz}[>8mjP@315Big"uPtIP,#d*4 \-V&*È%k~P{?=MNN6D>L61k.91cvy7u:5`6-|WE c3kaPX]Z_b.@Nz;T1äBOY\z)a[Sfw-Ln*$3u6$ +-Ե<>|sc]!_MPk@ɒ*m k=8&bpH 8ln6M;z:m |VkNڲ"d&s76+ղon=81 !a۸,m`E#n(BpGۘVj) ۇJ ջ~VtޕvFʓ"3AŒX1;LpCrB-҃K^DH3~_NJƏיxtSìdm`^K/-o"kfxKn+4T( [ش!56+$ɕ*L2TxQ¦e/ȣ :.=DWrk*UW vf\&Qrs9C) (?NW4hܒC= ۱`KfJ{M*kM=|S[7Zu*e3yZ5pPOW~a7$ռTj.׆ lAIi @\ p  *u a0"b,!Sf& .;2|9=`pwjFĿкvd^pBj/ %B =: qrn]?al#i2lT 7`yv`;'&zi/CAïeŽ廎t~ /hw )6—"ߗmI:VqQR#$3s/ S;N,M&'cSkbM  e؁=ڳ|<_$qD,l|tɩ 5\|n kˉeTtDl+NyudP߹M}峫CRgvĦS 4nTdXEoCHF^ڨ̷ c(ihu~'{~J4;ǒxq45OnJsƍI9ݥSAdm9U3t2$̻DR{.&^p ,`v \YTKVf_/k5+HaTRytȢT uZD\=ezӣ*Bk=VɎY(O,}y¹ʘ'M}DD`uzGfuHD;8*_ L(VQ[ʱldFba'|wjr9áu*^zTJ J;L]ŵ X$ qSf=9i -sV ͧHH #s 3+B}Z%7f-F;tC}NvʱbS[k>E6ҋ/ j$aoY('EqzyuDxK67g3 .KH~6|.#ǻ(pNm{f!YNpn Wu6fd07upG^vFbDI :NģIKT< 4Oͫ/s3k nu#ur|˨JWHa py^ƨ]RDI0;a'y5*ߣ1 $Ꮒ<!%UH[2kQs-\4a~Y^ |q8 =nD2k(B'3Y8>2ٜh*s8!gXM`Z+.b1- a4/}䰽C4 f0ş ĤYJM=ʤ ǭt'{?v/Fh+dD4A'Qp|jI6.Nhf'ܷHObVZlAOZ=#ulHjާߦqLrEY"娕s9d^h}d;|mޚ' ԋl$>Ad_y/7CHU)m:/t$eac˿btz&뚊fw% N#%ZL`֣pAϪ wdo. x)(.$wN {Y_xT exnӤQ;䗖( ?*gyqDB1VC w1&Vj`ubGzQ`]v:fP89 H~t0-yT(fjW)4|}A= z2MKˀ`}ʨFɨ 7„֙m ^w*Ƒ%S\)RS"s\ Gc!.i}E"$Xߎ+w!v&^fHȹVPL9!2aߔyPC~ ~DX@$ԑLgRxWPtfj{mMʧ"3"ֹ fC{n׶G`s[W&-JE+=0yY3\95){ :c8aH,v?V6X[ g;a 3#Y{k)5ʥ%ammmHm"w<='K8?u5{,6 >s`E xP!bBGʛkB긘ƫ34(|bFOw|/3qj; ywWrx+rIg'Hr{ܝJ7[sSȃU,9u鳺`G@받x>5)L}\6^3ӈ^qsan]@H'U@2$Eu "E=/N8<6Ws8%0zYs/T8,F.2=wY7K S]v*xI*Ҩ@z64ǸW$5gAq~R'8+{] uPPĿѐ䢈pJ%T6DR(҂d"- jJm\ @0:imGZyv Lj|,-'A.,{n_׻CDqCm- tiqQ&ɦ֗qttȕ̹܄ܩqkO4USh:.Qo,uu Xg Bwٝ8--n[>ĎzbONC!gZkѮwB&o~smƧBԽWUŨ1c@1 F建`װY/F`QMX&dh&*[',2>Oy}O?o;o?\9*UCG7u y%xbm(9&"jCPJAC\?PN:/|'q!d^ߥۢK5?贻E*w~Fſ2vEuhj]8,.-JZW=Vƌ-{mwq-Q;(d|*)HB*k1(FۿhP87 {45ñF/cp-}vG-b: E¤KJ iu$r>w< hsEF3Ӛ#˧7 &OWhWQ(t^6o7f\\oZ{q:w|ǸC\nS/jja.g-~';d9IZR3'^w3\yP}hK;r1n3>n8'S:{f86N9זbz[4a8_VHyJ0_YYUĸ_pW9suc+:֝'gc֭~g}{wWwl.\( ʼn@lOgA_X(+ Tw)ށjQ emi9to{O,>A^`% R">1c YSh4e9,sߦ xX zc-x7sDWecO2W-6S A~UivxD7j8-hǔҝnhOavjQ9鳕mj"ÌĠ28HZ[9,OFyͅe[}ݘ؎.)eć05h ̊O>5͈( \ UcG6VL@T0ZhU}FiZ @i5*H_P'$5k_ִ*M=O F΂Bm *>^e\"2;t); o)yYYNDKD B:2.‹yVZQ(Iq68};491N>H{^ I 7 b#,`BO a跂KRu .W_O9z_s.ǚ>^J+dK#ڙiFDWv =jy]Dڔ%:M>j<n);i0ߤzVM|Oⵚ׫_uvNMץ`Mn1$~TUH #a-OԀV^w.jWeʌ.K`ݪg31kRMd_W&\dXPV٫ >W zYiqAT-D,/kN2m>'Xbuv8T + okH>"j}7~)c:l;_(ZԖ'՛ 2O툠`5&#OYR'b/~Tk,IZƿrj[=K.4Wڲe3QNWTlSUj,kX߸eZ4eOW+dʘa l5!?7,q G}Jy^DkoYnd$iQz+^Uw0^W1i31 -oV-MTR3PfN'szF+.%&EhRl|mTH} a1r0^΍3@{jTʉa輾Cz7qawt O7+$ r%1=뭣Nu1 tu!p9Aʛ_WiO ;ݏhR {uLU%{~$8YQ+ܹ:=7Z8*=GITo{YVjOja"""8vODD'IM2ҩbu9LwkUkllQ}_9?` 6" `x=͏mסO B-+jiֵ;DҨkXYPq63_~2l/9yl98zYFfרsE#K|\6fBT.c$DG Js`3FMLL~S_=u<^VGvuŔFNq5J55mod' Qh'v"OttքLd7w vCA|^$ 4tZjZm@I圔4"7N iDmc1.M(eؠJƺRqjrSsb8,٥ i+6l\?0"&-mvxPӦ!7;%rf tIW~x?^D :A@@ J"m*kTQOϛv@Xuxzq|ńziOW^6 9$W i1XMK2>#H\uj@AJ'}S}8P|?8KI$9HQy_f?C_=HUQt{| .K4Y׹ϛo5 bwo)|v; M9yW)(A@GC5}?7(l(@ # @Y>/l_s}{,:k:|LLLxF)8-~ 6]P7ŦOq#-䝞/x 8hf~29UϹB ,X9s8?8ڹ%jm -׵5WMQ.u%Z. h hn2aMӻlt,(%J$I 4{gXP [%^e s\1^cM6#8tE腐-0s3Q CbW9Xl+ dl{xƭ֟c } x񡽸{ כInMxgb{uÆknzbo`Iv{KYil,-hC,W)S՟ZJ&\Q9 P#-ņ<ߓSwlnNC p졎D#D$%pm?@D (,) Ef8+cAF$*P<|Ŕ ɽF +v8o)2"҃ ,J'djܽdctb k9˓x]3pיߦ@0"FekvEYwhJ(PTjSMEWװ[@t k>,M(w izme;9H~, \Wu,wG7JՂCH[p1﹞N1C .+keasz^7;Kg;:MrɀN*?.a~nk'>+5~V ~tFmۭuɣVwc}.B[tS;/~׻c G{fiܧǦyyX _`vI#c&sH 9¤mÇ }OISkA@HaY*7!Xf?1|˩[`۳n\_ɾBu*0TCdz _)BZ֐8M@\1Uմ&m轧]w/%U^Fy2ƣi3TtԞHjuSQ{=cb{uQ`72vʅ$͟ l~7\O GNs$ʪ#pڳ_ELUJYVU]4 "`%vZcB #g%BFk\#eo>sw,eHkӊOfsh@+#ar2mM,TV{?fB'֥g*Z2:=T j]&8h2aT~3V4ҎYSAœse}bl>) d0hNq,a.@w'3 -H $;OQp@$&uSq~p Z8* E}\ ]Rޙ'R\(aНPy haYWymuUkF]TXG}m:&l3q!D(wr`90/,Ek<} = ! V秮JWU~S@ 3?͊rbuhlۍ99#EjF`Chso\}Wk.. ؙ?8?J d Q9GFڕޞ';Zi~15vcbK蝣iyv'亝&Cqe_kͥ6S߶oբY~K|ިհ?1X:R1 ,0:pXN|(Gh[~ND@_{^5ǰ^ԺX볦eZQQ$ڃdo_eA68C:#1ߧHD PgdkV=zOWhΙ T%laJ$յD%8y}j>SrBA~?Ҩt?;3/#sw@ `Qqګ?qjʮ+zy˕Ki35ȱb&V`H;^NRY1A=_3B!2WtajTNl hRE*`~WWV*1Xx٩,j!g^˳Ǭ`H~t%N94_^BOgAD::r1FMG#kJakm:bjpi$L) A,ۡ jrO.$۞Euܱ)hIv2n%H oQ`e16Ċ$ p1:%xWx7y^wNKw{yy4Αi޸DdKwr)(,0+ܤ1 ݶAP[A&bb=;8tƊ7Bli& xM=#.ܹۼ{uE)`$AK^B:7!1. xyǝ %r_'tas@[3eS b} _AΝ?MGQfEL}fef [BLpm`QUF9ٵՓ< ܁7|cJDZO[ ` JDH4e@yO%?;z? `x4l]@mGQv].|O`Zݦ/;V*^XI "nnmQ$rI~dnR_*<;0dM8P~e;a4¥ɫ|pJ(klNDX 太<3~S zp05SQ@J,w܉X0aSyǠzdOh0VEC >?Z ;Rzxy ā]^E[мi ch/ yzD3 gc%F?ΟLGU?iVa*mV}گ&檾ey|O3f[4eQ5~]WtO%6=]1a<<] {+v5y!j j.r.}GrF5Х%`-ٌʢIJ z9pP*(R RRLt\r6\BNw];[9z$ v9&$" rE] >6jk_ڥ6V)*V-')ixLr|whdJL'9jFTZP1L 5@b!q%IJE7 p(DcCfUĴ$<:eU% Ww̿Y.:xD}UT~ʭwz`2xU.ǂn xf[QqcXt),8:A*󷅬t]2ehd`0YQ[AQ}Y (mrOf6Lk.oa '!w*s3LgpQN|vi?U1h:M|/])NP{3W0u &d4w.=9 :=|ҍܿhæ$'/N _K[eΚKp+4OJ:N+&y `[Qrޞ{(&sGP`@ 5Y(B9 "zFg4lHk'i Ljf@ tl\~vZP)? -(usChQ6!8Lg=a ajAǚJ] A&2)?CnNN+9!B#8W߁|I?ҹT9P-8--9 sr!)Y_33'833i u'jo?͏~=1cr"սЭ6rFxWSYM{ok+}O"vNö?>@ Jȁ{P X)e~& _CHa,J#aO=g2 VHal ,4m)1o=o :4P-rJ>?~MtsLsò>3"E@8\?45@"D/οQy|* d¢'\Ȥ B %GFlhW'(d?5F@_NPC_$},csxToݣPR[O۬]ݮG})畠D!G,vm#V(+g-< qKrp4^ciI>y 8'sicz)nBxEF:ەTIir{z^eWNCz#dapY̓$r2m#sA2 /%>"{. [RE`[`$Gb>wPrx/ \*1n1xWYY}'d-Os`_ڠT?Ra92pl-ہ48s²P A^Hjջm=x##5|/4ra$ƚ>W9O};P::{7"sK*Iv4 5lP.]"κ%b|qhs % 2+h_:ąX~ C'\dKe,/| wb'%R!r\X$^; ǒ^4 &z3^"1:A5 /wsL^>wx%|y}y Cx)p HsCV*=Οp=GD oyOh9~/sS-= ` 1cV`- 6b\X Ha6tQƍf3:s8{t.N9/g$  _}zW30S˵90zߏNJKT+0'H`H7ҹrp? yG+yٿǢx].MB`9ҥ"e55yo! s~2t qW}uX_{~~ Φ=-rۼWԔG|Mޏze|@2)HN#ڷr䟩/*x2\DyG6xÃ0nȍ f,AVJ=y#]fU}hm FдޱUon[\#Y%ۗ@QO '&M$ۼϻ r*M c +UŜڬk9߽yI&0\Ɯwy'?ua-dḨdXVPN?C`sjH.grTSOVH=?DNr_; 9 jjpJ9:wx?j)v m(.'j4yrxPlT|tPMY]čru-̥$Z1fJ?JvWvW5G_!zTj7Upvىc#54Z&!qtlڗu[70߇v̿|۱Ru%/t+;lPPupP]˕uĐ3i!n4() Z| rgl^$ d/n$`y1%3Pyx\]0ō, 5j_%te͇x$'n̳6MWʭ &|UFe^IRIEhës3ۗJa#gs+qԒ e2"JL8$0DN1/"0IAIVX&mbYsWPqޞTP TOmʪTҺWzjuj;beM]N7dy8NmI։OPvb5UbGL²iuiV)[Ng8S"z :rD6_ 4x s|i*ټN8@L@H6Xz̔ڊݥ9y dg_ѧSTŻ\`i<]NBv̥x=?q]ۧ[e?o1f׿Hw :evߞyO Z+=Yk 'ـa3v5s_cc??isVUHR6y@Z"j[v/g/o Y@csΝ8KOͺ  /zZVDԪJ7hCӻUY)ԬI!kz9jZv:/O$ȻN" ٣C8Y)rݧ YclԺuv#vwB ܊.hQnM+uLx2^!WZvW ɦ\jI!¨2T$W \;h&7(!yʫkSY!l-W/bi<6$Izq[Nr_Jx{d.$T6wTvȊQmv9p|U_,[ßwd1x$5_y]&.^cޝ8 $u e5n5Ѥ٬ *atI_W|a){_KeӍ#"@0RH& `gf3Tڨ P h'&|P'{fœc0@d {9mm'#l(X'њx'] fIxI(䱱T}_)FKF[Bc7*o=WqQ%$CF#Fh5p9˻1˦\ۗv8E%(0fn#r['M\%K] Lnܬcwwvs\66 ؂ -.DٹȀFBN:Qr9F\9 ]Es\KnTYE,[:ܫ3whdwr5rQiݷ "$-sct\1,r H6`;ݸQR#єܗw6+0d9ur(vcIcrܷ#S7]9;'w5s2E;rQDܜ;.r`.r2r'7*袤RHwt@L:[Y) 9,2Dw]-tL$;۹)9ssrJ(1EN&I ( hbĂ;9r(M7.̃s]D "%4E\'77wn\w]ݻ:sXŐ]!$.ݍݡ4hrw "&!n1m˚ƀW5Q(cnW ]ݢ#ʹ\AwmTFm**KwTi%V5;r.Q 2s.\Q*Jƈn.TtX̍9k"c2.rmp溉FA6处D$, ]"Z cSW G9P殘ѳ*Mc(QR4NUrw!4wrΚMEhEcwN64](bSTٙwr;(M%;N4M63 m㻲 H.Yݷ:XӺ4j,inWwliZQL]rnh4VK$* 0P0{C^[q0A"2\̫[Qim6r殚kXڮjV\NW6k]̛\(shlW+EXʢŹ\֮Dhʮ[hjFɴnj55r[kFȫM;`'=-'74/.Bѐـ;f% @ֿNσ~!|SoOx'Fi|@k$\HTUC'qHwǖ@u\5YqiFwC:37Sߺ j5#h\OtläqsM`2ۣ !3J|Y$C ԫ_Ԩm_n5O{p-aTޥ{$a,I&#H"-:T+d4"PB6XH;12[l}xk]gq,DǸ5owר]YdȜ@ B1^*{6-~k|C*&$TE{e@JCq?Mwe*TЍ@\KXJІ& afv.DO%@üYܥL5 , jc @'[t;7g{~E[{͓s)tnoomـC|n;o7Kϣw}߽Ǯ=%{1B2Ɗ4Z`dL@hŢ %LјfB bHm*,h() i6I4jE5mH) fؔ5#$єēE-0)"SHR(3Pd#lla*5%!Qh1S$K15&JF YL# 6+f&&`m"AIjRڂحbZf* CICb!)$L4Dcrfٿ5ĕ%_%k͛] R+J\ FёZ3:!˶N{xG^KǑ((i)(ѷN06&T3\k6AKguH Lh5%MF؃%w2jmH0o{6~swv˙k%ߚY7M inh/0zf s%}u7۬ӋL< xt r͞& GɆ40 A& 6@c C3_|.h9hsnMf{w>^%=_/Ѓrv<O.B4W.QY m~ 6JVb6cjk\MWnZ4d;䔦IJD/,ĤWj#h֌Z*^W#F-~q65e]ڮEFbMcɶcTFcgrŋFmkh^,T\ֈV>5rhTm>>mx,ؼW-TXY o JmP%&r͵4&Q{C~}υ/rܕiR)b - 1%mmWm(\ڊ6r "^f) JJ@?/yu@GyLk2!lb4lK?~8 o9#$>'QC>>O:#[bo6:J@MI?L`) IWm~[6|g{ɲrc#+pM WMx~n+}KO;w&@BP۩O㲜YY}a BA %A`#b bFj,RXIUՋA%%lmVE66PcEEV4jlmE F6i4kŴUEkh*"[Qj EEEhض6mkh+XbɨmchbHZEƴ[5ERmhQ6Eڊ5*-i1mj5mchU%kE-F1ZѬ[jX66cQEmE-W-\lFՊ EY6)5jɢ[Q&1ƓZn0Qj(ƈ֨6ح&؍DjlFKQ 56lkQZZ-,XQբj5[cc[EkmsmV*64TDlTbm%hрѨڣjأQV+-bV-h*5X[EEQ5QcAֱmFѵEUFhՋXѪ"IJ QA&)#b4jL#TQ2,! BI6a4b2`*eF֍˖؋A5IbcV mFڂ+RX mEElM2hkhō֊mQcTkZ*UE#lkEX-FKDbض5+E+-[Q5VlbƱ),Vł4UQUQ&Ll$5jlblEkARՙh4l(cRi-d5Qh-5i4b4Uc0LTP6MIQS#-%1ZSI0hH,&L3ḇ,rtj4Ţ&6#a-Ab؊TVض5b-DjEhQ6E*6dh6ijeTҚ6ŀ$dJ1b2MEEdƖ&TQA(Ĥh4̀р30"Q(cb (ѣF0Jf!J#%S1ܿyPD1 33m9&@6֋*'I&b7UZRC_nS4:_V5;/l.2hl$&jX yK$_^{w$QT G{^K?//saN; [ 8!R5Ri՜AW턤@=O߲5 tEW8舥ҥIL3s%DD "M7G٥""I1H2HLcfE b"Q2X@ab(#id[QI)6ɣQ#m5Y!iF$S1clIR l (%bhHRIe(#6S*ŵlE%%E F#F(dLcR,h,iJ  *#A)"4)f &I"hjcRY4lj-1D61E!DF1Hi4$[ 122bѪ1Hj4cDZ2lUlkb5YJeѨ֍1`Ւ%$`KAD06ŊFI@YEٲmDI ֈ2Ѣ#&FC,m&d1bM$lE2hcEQ 3YFQ)!2JE54BA0LI,&,E, H& 3B1"IdرM4!h,,ckTA5Fɥ,R8Sr0G?\(qV UV3_jKowĄc A"4=ڔ5\Q5ڊ}۽+֢$!~?]5q|{}9z'Tؿ6x5B3;x_VN>7Cz??$ ä@R B@'օƏ龧~ Ӽ,3- NDYPd99d&qmkۛNmzN &`QSIW`Q;Šʪ/V1vEK 4Jӳ۷sOqM,2l Ck+]ñ-)3s?+pg8h^z{ ㊝2r正KdںhcZӤPoS p9?lW(w*ʹ89Kf*GMy~0t1J饜/nq:]4(ʇ޵ufE+ߓZHM!UUAh8U-QRGV*_*֪6,b4m r(nwAGPGs۲|hߠxA.  S}}[&mdR7nDW900D`}:mD}A';i3[iLca2" P^bd @kcZ$̶̡9[l޻`M` 9IUӦnIV~LnLspߤ >$np%% ɗ`Epvs+)?lk.faBΛ$HcKATR̿v٪%ZO15 r0@9 D+OSXAVueǺkKQM 0?+vue_OnPkmg+?Ş1T7C;05qݧ~Wi;ZA'΃S~Apf@kVj'ǀ5P09Kd"lod&zYdg +4xP#|Ucѻp*޸TZ t9Ȓ\C'i20i Ne7bղԠD@yOܚn@((s3>{/ػ Wz X~oˬngW oF n 叏c0b1X0*ir0m?Pld0[|(@1d@m&a=Qy6|ŝ[^cwШҙNg8aAj@O/捤v]2ƬPw<)]M6\͵gE5 k}ntRDm$8`C@wxfvp:oȊ}%EHuH%̥'?衎 uHeo'v$nr짫Rt HJhm ql>˿M2۱#FJ,ժ^{Npm/Eyo s7qbz2f+ۅ*<^=zYw[Cf_/[e]??v}屌Ӑp0bB !GSJ%- C&R5# ;x5om-mmՋKƯ*9\voeyUX,VT)2mroOr3cp((D2_g|%0H?i;O+vcҿJ #W>dž5zAe[ 5d 6GDgT B@N1H(58uYg,W?w?%¿r%TDF(6k`AL (ۅ^܅AAQ46%JIW9g3 (Os>fq?(x8bM^,tտ5[j9NRmꪬy e63R{3"tr닷Ɉp AAvzJӄn kWM)-*J9-2Zz^{3m$z) B~TQv7f_bQ祓NxӲb.6%k?}hꑟΔ;i23d -jG;]EjWmi9zG~n{H'ʎ1/Sٝ*ar 2xNN&1UNWvU)r cv S\9;={Z$ D@KK2Ѥĺac@yMCeE㛼4cc{9+λQhNsg޴ \4RR4%,Đjl* fljF&A Dd'O$XR GYhd;& v-)9PY4w$FA `J,ʧ@HX]v};$#9e<#f)$ZJs)'yD3;cμ=2|6ML/4:Ea=Q?iUlʞ]kWC&f4(@=U{n7}0츂[ ixt(kzՒrb"5m >*61U',2~_ѥ8ZSwR֗oKBP6 *,XVUU@Hn1Pc}AnD[,ѠC#؀{՟<#-~#'߷Uzۈ Wչ"`bPd&&xHGVLBq/*+~d(?5|۠"{v7wx8H$usS.clWj;䈭cʵfŪ0<MUz.)'[i#3S` Ml &t}Hc ɾnƟ2H1*Y2D|QpdZ悍L Q_T7\ONڞԍZ buPcMLSaZ=o!($)⌴W(ig<{-7Ka5κO݅Oξv[5=-;j*pS(lP~tP`; M3},~1r+V>f׆ەg-a?!칷J5xFJ[HiXuR'GҧdD lU OrSsYh}vۆS Bc.J馘ϸzUl4!BM *l$P&ݻ 7{^bss2򺙻:mMֲF.?v]yfcvOݚ~yF^D`5pIAJ2$0JHDMT`'A/@DoI5J]K|-9ܒ!Y1]fg~QXBQVqq/ {C㢨 `5CJZƏB5u+<5#y~ITr>' wvͻYo?ȼeX&~xQ#e }/{&m7%(jLJtR4w ^;1a敭ST!?ekCzSBڴ@_/BFJ~|L@sPLm$ 5U-l>*)]>km]P w-{1ֵXLgK;e W[~_\ϝ R\LJU+8ꗝSuiNIo6fmM/j}ob>zǒ+vA`/p^T({;Uxg?ggeﭢ1`RVhc5YYE`L_[ЪLL=!zm A 䶶M[fٍlϹ=f ӯeT׹EEH߄w- ûH Hd0F&TA^˛!Ȣ65ە6r ̂ <\2nj1QBe"7w$5yzǛzRTǟ^,&d(#92t*篁ۿO''W\w>9LQz7e:t߻*]fXjF_˒Ky=gy6Рe&b3((%{)@{Gg}z+@c/^PdzM*y傮!R)Mx1$*nDvq|W˿]y}Wѥ9t;XGԧ=6?_ۯg|soEURuV77XrАQ) BR%w3.lXRui`?nh;K+;oG9}J_I>²*jwrp^ݵXbPd$LA\5rI7K*jj H))VٛE4&ZwW|ܞ-fDBR̤v$4QA?w}q6mI+&#ۍ~s1PSM0 `&,I~?1_,>Oguшtd`?{UbD}a߉snv ||[0!=NDyV] 9kTtYX6s,'^J4ljRYz~qu4ZOrg[,b2tzq>Ϲy=]rK{t쳹@*$ħ^CQF:P/#D Bj $>ϟIlBE>>$Pb1R2$m!Q#F,FK`4#DUЛE2olC"dlf&AoJa# l&6H64d6D* f&]Ha$LLQ#ADd @ @<m^`2FqIw]֝&.dܭMeabPBLlͥ Y2FJQ%u$u%f2SdaCI>w쨡!HPFc#D3LL{ydA2T $lo8m o1lEXnڻɧ&ÏZtzԶaA4p&fYHq=6*on((V`KQcp)!&~5k^q)JT<:??tӘ0p / t tBX}.*4Sim6e=|]R%;ڲE:"X5f e$'yZ+\Wfuf9о.o0WM]mqfgſm\3Szd 57Ysm"N4pSIpz39RWȅ^kX>gDABcAI0c)p=MTXNm,j\#5f4e{cQGֽtF!m{q?&hۺqE,4a2*r^ S&9HGJ 9Z ^TH׵Hq>cm ԯfZWҘ.Ae)-=ķ'|w6!.3kUҖ>[Rvqpkԉzk^9zg^p2FVjkT)ږ`k5GY,\!uH -9~Nj=oeRy?o[ID]>2&r9S%}tmljlUe'g'\s 0r~ԝ~We-<>—|%W=K>mM7[< H;)33Ԭ?^:^^*s3 ۼ<(x=sMh#g)+A#jF=^d! 1 _gv*hդO!Ff U"` LHe).@gB}'r "'?IbHyn?lf]c.9 b;0nL- vFZUђO(Ôh:є]/gwG_D0s~길yG=MWm0hC7_J\8!M0O_Zvڞz# UF>nt8;u ٸc!K.}nM}S"pL1%J@XIT$˙-sZkZdS=OϮNД%f)3)C,qܓ0JsYl y=Cm\ ̼]8<+ɳ OWJ=)(t?ηZVGyFvܹMfzI 3T^TJu-6x -ű.2;LEguscyzB%EHBcMX!]<䛛³Scx2Vr3yq}{to ay9iS A9j[b0_Z%͏]XWg\1/5~[cVz52d}E|e{m~վ[!xL||?LGTWߗOM6pl ibr3.n dۅ#4 _UE!U]UfiMվvq;XY`W(60+ph<5D?98YɨM{յwyhj`EUC<~t\EuOϺg]P`~1&[WnO y~]ɷƙYnƈ@xJ3QXY`|YcqXtfٓ^|;im}n?H(xw_غk.L+r|u[9++^)ryi /9֜C 567ar{V\ggmi.{οP@pc]Llv۾ۢN=Yw?IyW#+k9w[.iIy8u^;;7-fIX꼗fq0jN]ͻvo*R ]u)6_%n 6otJe@ANzRSL : oRIT9^;6&&ٞv:_eSi'\ ${WXHG1Ptҝ6L`*Ɵ'{Gtx @HM(+$Y@[T$pczMp{s׺gZ'>ov[t^eOC?Kp`fBm!o{GN>>2p\1s UHR_uWOߕIo 꽿~7{`hB%J*Ţj+b~s]߱*d(R*Fd#^DOGu!1סo ,'Oji;x=.Vp1jX,O*#F}:7?_#,mK G3e`"Wt8Co0SY0r O3BӷOKA@ m6Zӳw+ٹX|3 ) K 0WurzEJr-oVB-ĝjU;%doXpe#QzE)~5Cf<:@7Q A5UMj+&|pb LT{oHKE==\VQ]믭ǩH4ȕc3`XhcF2^/|cFhq {G|b?"|տZDbx8dpSlWRQM2Tv<%"P`n)`|Ytc}OgN[r>+Ez Zu!D_s#qƿ&8<7~?s # 2C`9(~)Gr~aWQ"#"g9#rkw8%m%qjUBF`=n.SKs?6@sӨRw ]Ғ,x>3f0l6| W74j ^y?IPsON`5J5u4\R?\RY `tP$G C5usjc;\Jj֛]PK6$UM MtbhxWD3"(ZUW051N֦%lp0EEL4BȒ죉$]t<@Mj`n5X ywt.%%D׉*$+3"ԑ$IX>}!$f~&]?W.u(OlD w"#=nꢍzVӡ#WRn?(A~sKpڐmVzwPsr{N5M&s_oO{0H%rU ]: Y(Q6TjGN%0JR`_rX!/? cn/{ iއh"; '+8眛ECy8ރ=sFt֯œXcKi㩸\6lCF}߷ڸ.Lr%ɫ^lC@(-4o()L-xuӏ`lQ 'gs.pfy6/Uyzn/~~{=W결sMvLJʯHo]8 &#Ye^Ra.m]$N.+VⴎZE#eSj1zՀf,U4NuV8wQn|#ŕ~A{ Q. MifN=8ӥYZ:g%%xyI9vJe á/$Ȁoy= <Yo[jU!Iuv 5GJ l:ps|{RL q8x;z|}FsݍkNFMw]o.+MqA.5Cx3Z:hI|7N+NnǃJUw?Շ-plg^q_26~enk{ZmFtМ4,G,ڄ:h6UthA/R&/@F/J? d/!-1a;A5RTYhjW0&&"א|0qZVcѣeiQYHFWnjXvqT\99!e_׾,Β]ؠ&y_˸VAQѳtĎ;b)ߵ vux$?t47mM9J!^3D`LGBJ"P`)$ܘIPJ9 c"Ҍ['G"w\v XEQAa9:MfbO4^G='Eew_z'M+K|iދf/k/Ƒ/2™:@s;7o Hۼ:ћ:LBn< z/y_rk~dW=s gH DD r!7a/T #}z5^64 OTmmo?غJ$b01G΄ǁ]jtS6׎5y,v^JrJuAۜPuWw1wz 鼦gc(0*$(Me'm۫nIGb*-ys|Kz9Q#YTJ1&LL5AL3FLҲh&4|ua#h &")'==S7{z_?am&dIST3MC"[QɁIIɴ X)!`d&a+0Dr;s=WL6%V~_6AԂ  ݉ncPQwp^o: FË_ҿokQ/ijʻjZdFݹtG~cy" 2d t8s12padsʕin}>cuk}1aG8Bu-%CD#NIAA5b 8H]Eo0csXzB* 8, &틊LY-+uo_43-7(]' W qéV+A!?iQ9sk(FVwk%dߒݮVZўtscJ$Žs$st `D,UG?!A^ಸ<.Xg"" F ;2U (Im5G6.5uG!)|) &#dW,. o<<|l9@[Qa%TJA4Z@2icZ QCFh͖5cDaWŹwQ#:<媎{!#1L )f(()#FAb4!J, &) UwqY,FAͮ*4j*5ZB1Idl$ƭEj+bVXJ&Ԛ$1fcmT Qd00щ#3Z+WEKEˣFIwn^9wW`TmzZծnr梌&ֲjwMsi#mQ5dt>Oϣ[7r6UƂA&$ ..N-&װ8Kӡ#c4 [''*6Qh&jX,Je-fIʹ!=~3ڿj:ܶ'hDXh-IktȚlC2ѱm]ZQZ\2 @i&65\֮jTk4eDbL `[ֶ*6&i0K9edsr;t^/.+pNnAr#r˚wrw+ z\d)@ e@B5W b-*F,h(H(j3;ts9ԝ@F8".mߒhJ[t=bymmo{8O@eXm[Cc,#"n\nk˛xbNx.j:R\r)1nt<y_O8gUl5FF9Ή]W\vI8xO1HKI޵- .fW73-϶noFӸ\sQnk^<^ nk;?ۑ\F@ r A*hcre<KcCYTݻCчW ~gN:;) .Dt&[ӄ(A#gɬhAHb( "cX5(NPŋuc`B\-c#QPQ~O'?#ٵ#t^ av!k9rAuC 3PAgrs6җ ͮzHr$bc!;gu {!>7_-&WSţ8kEqroIa{j>ˆ0śl5xX¹KC0^߿;#59**6F=ΛX~UՇ^71IzݔWBlI=ٮow'zύYiE(yˍE%pvf}kdv^>?_r 9eK8~+Hi\tu ի{w1m̰HA+a#1 ]߱'%^ (]:?2a+ZY&l02I$In ,yڸ24\ h.Gq ,N1qGRhRcWD—P-[01r?])K_g=//+1^=k)2!E&#eg\}Vn:+c IH, 5zje/X6vҎ0<l}"j -" )Kc1jve7$]ʓ ]Afi($=^drl&凭\ͽiDG#]4{ 3[*!QIO? *[&LsY&DӦfhM''etWק(V6c;{`teU@اVUCJpdƴ!M p]4y5@(' n3\$ SqWV]С˾![. vSh%u L\ק~0)8)D ]Cgh]k!MMJލVW\SHja!5h۸^襰7 \LC9X~OnVS kqoqckEo4N'>w1V0lcpN?^NjŃd|5.B+eAH}Kr?mh_3# [A>2YN] &5_s]1}+ .c*m(Wi@A73D&Db" =6{/Fk~̇B?#n؆@A#"A cB a9֜ny~nWmtzte?p7Ăa8IN B?o<_԰~gh^0S|X*A$6!I6a"1j%9ӧ(oփyQ&n?giԀH(brTUR blky\1bwfk>?_^"=gx>υr~=_E.dSTJ/&IA%D^sS^Z `|~ɺ*R0ReOZ<"iFuJҷ B;dH8͹̫;N~Ġ3nf_6&Bh~uTnRpW R +@$A Fe,4ߵ7_{+>|M4ߕA=/o~9ybQJUm].UAA[tF=_-Nܧ0~\_Twuk!k)D`h}aUKY_)E&hUt2z(Ż4D,$9ȌK9Ү=fͭ8opjl6'-P"s2 @1XG?g*$|Z쾙4,ZEprԖ`b$q{~N#!AR1 a4Pq).0Xmgm)gHkHB@dЂ G <iuu],w"ڨ߁HFr9$1 B%$IXA@{7D I){zm29;O!s*ķ7c`g݃N n]ڷXw1eL!lTmX*ٵ3)-jUm$h@wUlmĬC!Qʮ;s疗yɏJ7̣r[}вQ$z^V5-5mKLYV HxF=q=NszKw|i4TwmZgұ@KH"aܶt9jNkpjZS4n~q/?G4pdL;;^mff5 &EZU O9˄i9TEܻCϘ8.FUo7|8/'mZߥ8 7 h\En6ӻX}iP6\d<𓋛]?s3( TO=G hwECVK/wP` /2YO2t U=Z˻~ʺ,[:F}[7~C?/(~H@(LDdrB«o6}o1>18U;W%oF[W3]ǰ> σ Yٖޜ#c o64L-Il=;cuȢU0tigg!3[=,s*WB 0 g˷y<)JZ$i4Ji]r$ǖ讣}D!MLet :dN`DI!M$l|ؚa3?╬_l_F?c/G~qAX1䃘njq#OV'}2C{_Ię52 R:5؈T ^w)G9:t*F 8@[xt2^׹u.K> |g gQQijm//0I3'p9B cF cXoK|׾Hm|xDb3,Fs P8>?̞ NsӤ _X#[Ŀx_ouȠޏ3Pv9xtEAӜɐlKd4@ +?_\J9h"e-F)YI,OܙMAH Rvh&Ÿ “^d*rXn= l8'ϴpR6߶VXyR1$ hf2?nQ)ivyQW z.gl)-S5qB SG~7M n!#LdHprzF+4tSh~{BFQ.u]u%a E|2LF .rAY8K)LChe$%4<]rDCDM=Nrk5VKLA1{s%M}LzWie Tt?N\G|sMs`NtV It䊝ofk~}8WIPd*4n@uPVrT5Bl 16t\ 5ˇx(>jm۠3y)٥A=}l+۾!kyͭbu \UOݛ|a30%b|5k#)>>4=hrrVPs0 FF12'WZ]_IF4CerzI 'R֛&G!a7VؿSy-ܐ{ ,Mbrg_8u:G,M;EߟȇȄ";]Bc r\FyџZiHd@FGdDQ`"G^Z(0Nr!7M<z&2SZdN[EfZ}|͋w(ޜNe&=_6̯;t =!|(z7G[LEs-0w͏_IZ(x ˾szT6 (p%<>?Dl~ mvYTFF'`wE'}QCa@4 1 0s4hZN4,sO5tً+NiAukw/C>}W"iXQuo} OO%n5-3sAo.3v53bsVeB'9͉'ج S)V( LyoUv^̀W;t=k,Sc{k#߈}dG-K| TaM[G^03ZfK|3;2n]Jٯ123k'!l"} |”38=EE:ms|fL:t`:#wpvgR$"5}z)ґjKz{7XJn']cc*O{K5>ve~#fͶo%oy]qw4)]oC> /;]gs+jsEl3Pgqkv{n(KqUp%uhh$|3u<^OѢ]^}U9％s(6 b.hxml#8wL}Β$+T1iWOnhf~<{}mN Y`c'|{[`؜12p@JMM*B@=@po`7ë`FCk)Cު{wY}iԩ:5G٭|Ź2]RƔ1z|L轻j¤ԀF5EH~';+ WwoqR64ĒK9.2V5KqՂ2F&SֶQR}F/娗ay1MMqvI&FKKQVo?&ɶv_bU2 " F;f01M5i`1ayaV"ukXS!NLxI;,oNQJ(㶓IDc%/&Co*|X 39YIx2N-H!7Զw<pl+%-2h.O;7 /JwSy+;-Ȼ,)&6=l3Jƞ%'q8f; IK(şͫLSJ]mo=67ڬs.1Px$z]O^v|)=/|)|~\{c[#2q2XPbB̅}=n{:|ēe% =KJeOx%60(_pﬠ"@14g]߯27:P&8p. @7vgF%OF7T!b)p|gA\N[Pbd3  ((%?w6`8/餭+7bѷen+v`MSH)ۊI n/C %![QQ6۴ƖAȑUSKHxwtje6rxCs,oo[rnB=IlA\i ;Fͮ~Iiv{7­v`tL 6*D0gW7ذ,GUz(][FyqK-]4v%PXO],2-6+'?Z~yJ,’Rc O4Ngw0KKb頙:4 CUrt#u<-,g_?s~S~l=4%Yln Z7]"cqQ`嵥QI(lMk4*ͼ}H)mt*{]=},VN|W3W;4RӇ]hq+S<}UmB|UjҦw+zϋXN8TydTOL=ꙺ'=Wk b]eBU8HI(pH#$c g YV}Ǔ Z 9=) (_KCa3)L^Ci#1ѝ`+VM\MSKfYjy[vT֟}mz~R4~{okzXv^ .ɞ_SW{&ֺ\;KftR{^tٮ FhmTkME+V1},Uai^8HäO,|lԨܭNU#̭R . E}9ؕ_bqW?Mew>GbfZDZfY1 3JLNK9~\4(q}jD~R#l=?~&+$h㝡Zg:\ܭz*&a0 43ΘLQoS+'jv+Ŀq6{LMcRY/[$ lUkr7 t Sګѭ˴-0ŃN?KMmdOM𑃖oTsu^6=oo4~% Vm=dgȞ2ݧi+Yck4^f5w/٦Qܔ;VOce٦'k'νΫĻNitݽfk)Or{N T/Y:Q/m! :gQl6{p9j VR \RT]ubfRv֞Okma_XkI57T@P}Cg.j#z?_wr>Ls%{[x>VD)J8ضV%D3@s1+vVP+¸cYC 2BHy+#HJ4iܦ'q젒[:[f$]އ EJ~sT JVQW^bk{/Sp2ӟA]pv CD` Dl8* 1O孿-[ fn0"# @>a굹h6Ȑ`#(G>Hxooh2&~[Hé̀.[# #DcTH5ge)nl_.~z{1Kܾ|WLokIѢkll= ^,Kյ r1x=w~ܯU׊zu޵(ewvPU߳PKm?Aʔ|/)`R}ǂxD2Q$Z%A7TDۊ}vF#=3'K_S8p5-Ή3R> ˽L Տ~kRL,ҫIWN4m5$u(Z}K@*A C]b̯V&:k! &~ÿD}PZH*G2gaސӦ#ܳһ'76޴=] M"/w4aE)vW/HbXqjH6t3?1΢mNỂ(AL;GJTnW4c+HZuC> BXzר maēN)I/Y72UR+[{!߭?~5(8w3y<#T Ki;h0ym[T [wXn(ݧTt #FAe4Ĵzy0_y& 'yRfY=c9 ( 80 9c;"@dJJqTʷh4S|Z#qB/NYSb"4`EIT^0>_JbsM=4E0ny Y|$h8}T$)eL0v3XTϠ(oeUd̊7D-J~ޛ6I?c.⎇~j;eo_ܾ1U6#P8Su`o7[ 6ϐT*8 5$YwzhFDl_lǁٚ^55 @nff@d>$}5H!\ˆ }7[`(}gVTߝ>?'O/J|ͿM:~///7:4 @$"@0"FT1@ hĚF|pSK|u\+?u<N45O,߱L7-1^C$fHXnOP@H@1!th(b1qvjz em1?پw*s.$ȱjw̦?nިVWo:N( l@}T|≐D%+ߓc:*SNn-KQeE  p\z +Efh/+ky /ąDKզꀇn>2X[=Һ GU[XrX5<')V'r`HƱ(s򲅝Do?P xb>ȲpWHpbsRE=3 llAz>[r3^\)g+L@K\2o΢O/2`CgaV"q\J[3ZTzgg֍e`z֗U ~iU8IO6rׯگx9CkF^Y7,e"S5\C|Ɨpӫs JsY/0 ?*<|}_D9Nwj\l83Z'z_@YS_GKԦ#٥iv43JA+U$P'ے{"X* UM?J.<3.Qi=z!uЪ#VHe=ur:O+}%y#< pڼOKe˄=+ ZZ.1Kإe_'pclV;x15.-f1V٥tL6.51N#\];~ҭ&)v>F1VtU㌀zJ%F-33N<㘼y-}Sd'T٦eiVhv^?ϱw?{7}|ŔD`dr3͑[_=ʪAgrs2F"*D_YSI+~FcLdOi>wh[}.ޞ'775tK-6Eܼ16)i[ưY$N$cР5}iU'0[dD0s!-㨁s'Q=$6)R";x+&P:t3{n2xOtI/^S;!/ӶWeSJ;v_ >T ;c!6Q5*WdKqb;TP' BRTogx zj⏍-Otzv36ԧh#`e0-wtF)o+&0{:Uo=Qz6nvqe<4/+%et\'ٚvo5"֧GkWV:.HLREO~rS,[2 K,&ǿ8{yIyeVUǤr\fsC(M$WXu0o&p8G~[zUfnuFDeH` &xg{Z~IVuل#گmG+FXUm/z[ޡuf ;j'U8 |GL<0:rQۼ*b:| bu4TiX4yM'$UM=tEL|s>ֆ7xƁٿ;{Χ`|3G]=A'iu4 Gi2z鳴pye"ܤe ~O{^Q5J8DIFhs-$+vfHz_,Q8yV:c黆視qQxJ 0Q!QalWKGoY(9;ZXfݽZFQo]ʅQs7/;\_zW#$U@\ɔ(FaG~HɞODVZ<@N<눒^t<.rkl 1P틣0'i*!$cqu}hyґ"Mxx8ePI!  ܒKM)d)NP$7hOe1zNeu!WYVМ2^oҁ%u.5hIP B//j>~[hwp~/ veΛs/\?=jB<9;݃A/N I76Y}7mkx"AчmMy} atʒij˺- zdSU[:-;4 4l|CP˳[>w>6MBAܼ<<" ˆ/NjQhNU/MJ "8%UhؘRra UJ Yͦc{8ʯ$R] - Լ$5 TB< fxrNc~%_泦|ʜ~t.JS/JN+.zm!ʲ: {(0Q.NJKd[E7w+շ,t| siψ< oEyzGGiiw)gn%YF1?*5v~ &ۏ6ϜпX|-e2^= ˗O9ۿGfݻ"&ӅFh}}jtP+c؄*G] 7DkFl+.@gurl[u[R%.KBwY! <>! >QI/֚{_=ZgWkrsStɞ D[lj&,enPsOp-p jh_Xadsh%eʉ|ZՋ*處6u/_`Vw J 5 HJ ؚa/h饒CnVܯ4 aU@V*dB~O0tUum.gZi*SH{Lzfb]-t7`Qg ȩF=XMct &qR;Oj=v#5YT!rx/u6 %~3Wʘ5c AS4 >On(Y$\8z=.4>fn#y[AI{t5LsMQ1*5 k7ki&#IƇ|NnR^ō Y-W[ACG<5'lٻUBXZHW R(öcNR6MV7kkQj̕w4цJX9 Rc*}iZY-4RմvUEcBy G'Ixܣ9WnJp)RuN<_sC91H^9S i3-QLM.Ƽ=.qs]YKle GA DURb$lӊ11}tOBbҊU4poF/):}f_S8?Vjϼث)Xl IyV5s=b/qd^z PNm>TseT> X`ۊ.[y_ة0;,kq)?x梵VUOaBqƣ=ӱ䭵l`<cyזO=3#)s _9O}άF}.F93.ag*=_wG%AZ[{.-· Lm>#EƫO 4ӇB7{E1=70J1mp%A(A%Fx xyd8}]Dq>h^;>cрzi1PXziTkl0MYrė kЇaYx*k}KpX_O3cgƧW*?94{d Wt:bA''z΢f1&N, ps0o|\>Q]Ʈk0l}xHC`)Yos?g1 r lt$DC ic &b{4XaZI#)lk=W8uCJqV]8e 2<\TDI "BDpr1 ,$Yvzfw-q]KdlglӠ`eTH1(sF9T:c&hOOi* Hï=m?d;σDjL0j=CF% G#E u_kGVܜ׻WQ55]N#I \ܞsMN_~(4/+˫)HAgJ&Q$TWW~VK[Nfs/ 7WWl߅Esվaqpo-`ӃC<}EmbL͉ͽg} `7988I A4)f$ӱϧMYշnf8һѾA]qhq}Eڪ?{Xmq66F"Lono?ܺqR萄ydtHEb =#M@9Wg:G;wEV5vM_ /ޞoQX=_.kuq+2^gm}i<vۂy p1Äg;5M꧙NUq^b+ ?s;T LOeG>ց&UaXfwjL) K,"IY!%-*T'@JBˎo_'jߥ슝߿.~O?P%aDO@~;rKk6_,5ϩ_ṭPr}^L5KtA]*ڋewKK4I b1!MX&c6j&ګWu?9H8&p-H ֥{(a_Kh}%M2˲9ġHGQ.kaʥc*ôH1%Ag#B[ J`RMbGBl@Yx;JeY^>w[i-:7ceٳYRU|߿o}O~fO=~A/*Ȥ(cuP1"wuHx&DCԁN E &X~vl%w|tx3 @K-/ [Fr BA0`-D&h  نQT9 իtr1l,ub\LɊG؇CWgucgS,}.PCG}eM?ALa Р(ӳ$ QqY(%&8g;)X~#(MR8Oȣa/Noˠ?e2Ȃ((ga 7٧[~m<12s/Ȃ]chi =l26Jٽ*].mFn%/ g'5ȋMFSmQψJxDդjX 88]Q9x\ZFҰg'=kƖFT+2~TS)dBUH_OXT/m::YxF u_]dɟ7ioMg׳ub7f=o?b?K h䳜 +ڹQ@[%a7l`SN](Vb&#XG/Z &c.wZS)TPU0\H -?g7X2zpk}GJQ){+Du qwCCnzg=2G4{8uI9e򌡂nZ[$ c2an`%N!0 XT:/mTᔧaGS%z^FjKb^A#F&+]_e~vqUʈtո_yT EH$xpO2d>쟡x0?~ρiH:*C%J$ g̛=ָ `v#М7X(1oꞇdDC] 1:ç|xX M 4ԩ v)r,g՛('Lzl3oW٧GݲIr< ȈC?o?z)uf$>hC"jJp5["- gt9;]7~ۼcpZwz{N_s( ; 7np2pH9 k4+[k=]8t$])P9l 38JW%+/,0Rps!$W9cLP6}g=)jQ&6ܾ)nAyxL-[|}4A6&<洷8EwŁ'\x'UM^H9X뎑X(Y#!0G": $A#@e,p5R³yrWQqAPo}Gj*z(uf3vGvt n6iRg8$vY+|f#Cz g-Gk(Iآ M?JW2Q2PJ~W%AZ;ƧFbaD̒ڹalo* Gv|CriA I)@ U'0!ΗAڪ兓eMG?* do.G04(bl?jɦXKm"2Wo\L_/5OuU"Œ/bV1TDop}%xEup<7H {DnuKL:kPWo=&ϜHb(YwBJ4q~gAlVȁ?PbrHL776:lD71ZLn-y’`̣_OOxr`@ cM9U (%dz/y le֛tV#!ǚFQjJ?aЊ ' /z=z'Z700T~meZ(ǘlҏ ̫[و.ѥԺBU*4aV(%Ӿ^^J.ؕ.6.wt). U%Jޜ [?,: >-ߧ뽶))~wvQIyBmsJb bmP qrӎn K̫e( g~@H@PQB(* h*UR}rz6rM(A&xl7hu';\1W'7nNn5/:WH4;9`t6o7-stQ\zדvn)8%@ƐN*%QH$i5o{obb8xGKPZҦ$R4+m"U*J$DMhJIZIE.ANŋe+KyPP }NGB)Ș1j7m2,\9&UeTIk4- >X&4&>v<='} >" 9ٌQ2U;q`1&$߿d;ˆ< ,-SEk+shٻK`.]y5>CeϧhJڕE(`@~A#ex]^+Pp(%9~؜o :ֺ~oYvy#C}FU#. ||/5k ޮf:t^3t'I$ƍӡ $^c:}Ow[1uC\Fwh"%T""1$ust QFDE?"&DE$\U;̇ A^(Tp3$GHSzoN`aᆼ_;χq-&(̿rTjtWM6XQ ,|.~5_a7hB1eu3𰿹翫OY3_#|n&0=dok^T+I\A%^+_ 5 Yx9fw?/cwA9I,%D $u)Ŧ`9  yD=x S[$5%RZ:ªS1X{$3Z{p 뾑Tˋ.V$hd)嚎ˁp O~߂{ !ٽY`z¹\1)? clO4ɽ9Ag1 ac` $I tKofy xr2@;gKAS0uK=yB&k DN$a*pp7sPN{c8xwd$8h Usqzvbح$hjV#VG_2W[|Iپ ǫ73iÀ `CK^%cG`@@NrG FJ8 ȹ=KkK;}O@wX0ِE]7Hmmmcaw. tPA1^#m^ߣ~Gy[yw{}I;}jWճX.`F2@1@n_ .s}O=ݷPSxsM w٦40J/Ms=\{#rx?3x<嶇LcnBs5k_m3FhtǾY@-/Qׇ8\عuYAmgOzz;7?2ϝ9tI:EXdЃ"rw#]d7,~J0W)dX̦9Im|6:aDa[m%EL;n ԛY8L&9OD9U`A% !zTSM^FzU&f U^.۹Rh{("DwN /pxwbگ[0Gzq$:L{8KkO @(6dE(8hf wo0Qt~2A) qzEeZi]yRy0GzPZKjb*2xMcXrRm7KnWh6eIK?)뚾3wȴ݇9v#HU*$koKڸEv_] "5um86gqhNٓ<pʻW`@=n0yChwЛ_Ӫ굖l(}͜MRＷ:ђj.O۽BX8BlAS4nsSWԑ~uvgAA`@޻0 !@H$YdI8^މ_`IF{}a/2Y H`"M*v>Aag:g A0 yyH * ZjuU@^ZNAv'b 5؞xSPE):.WaF ./t3WMfe*? *lf X-pGÃ^ Ghzd}ʬ6T7m9_;X4q.s36Qdb9A-템jRcvTb0NCR ͟^*Z4o*ؓpkSj^YT_7Rl,TT0YŶe+rJ@=|kxs [Ƣ%')Mi2*UvvRR^kH'V N!O??Y?HF V`;:~Cmw/g'U;h4_86ǵ^)Y؆N0T2(R=>+%i%8 bV-rԞ E5ZzFnJ S0Ӭ&`5ㄝL(0\4㒊W[f;FL-#v^-`KTIEub_f؎z@LQQ|ѽ*-)* H5x)-NHtc 6ٴo+#%H%IMb-FpW+l7+.wy-6n$aBA2tŁKZgS ڴMM|W5g*AoDNˋ;=zh:S1it{Sƚ;$Nӻ\n s!p%c b#Zsp1[tǁ=Q{-YvHB7(z4DyfA#Q:o>B89pgSqU{;JRWU7rS02FQJ=UX1/^FΫUR]u֨?*};{6 k::~a9M̙.Qnz%(u L˻9+'xYܲ@-RI!w~d+3ɀ3yB. C|wry?QJ{;-YD(5N*ܼS˄w.Ycm'xs_dN{u6 E8IM,6S<2?=]ejj hBP}:G5q4A;ğpRcS1>3..W)B0p`+yEQ*4x6(et՚y6ٍِ҆CPj'2׶OaGu~WdaUUXLucowkצԝ]E<ۂ=Z& QX XS T,Oі;@w1X”\G8&JNW{ Cg&.:TXi8-ei8ANbbh=.w`-/-[ YO:FX*nsG1Eq^*[z9eN sG9`?}Uvޮ&obS\'+ r-i^.س \/ ]SS kPP&)B=*5^ILF|ȬJD+!y/H1}N2\g :h~6uNY29,ȇW,{rzB'jE2eGQ\­Z؝ F%BWr[CP /MаE8e?G8ZSux7h)mM!ӱӋ,I T y$Qyhب~@`FaHǽ';/Td{tpR+h "4< ?*/p΅YMKNu^3T@ J>o˃B>@ DޚoyeX/ݯ"#`y2W]HcW+\IBmwqA# XFC1TQa9e5p#FF9EhcZ- >x.Fo 3tUi\7|hg}Agn~ODj~^A$,N+DV\pu2 dyjV>,laq粒Ynv_9[Ѷ hI,v6uT(2(ُr)7㓌~Z?L" f. 9ď`۸.OTEP}Ǯt>COLgՁ*7<>iN=cSbIKݝ@)_z"e`M-[؆qXGaޒ`8ۚڽsX̸)TafCZ1!= wCў)ذ![SP`jYR Q['T43*e ;ϤpVRc<' 2Mi&gI~XB斫S֥3Fq1plW;R`|A><ƄuH aH ВFG/,Bwq׌J9//_5lch;:]J-qScii`MB"1ȑ~_S-If;>R 8pN>(QK_DEsn\vPjC,0zIÂ?[KX/j< Ȇc+-Uf*o }xŏm!'®Ed'U3c{9=QDJl0e3Nv4 8Iw4=4d· \4,.K&,K@U*>>ϥ) ph 6и瞪02ÍB7O܂,(a:>?ݜ/9Wr1$V<Ƃ6C"oR0SEUkC.\2}X^m*/Ys*ć̗+ Of|:6 /RIdxߗA~k޶}3g/qoQQah >+e=On4om˜bkQU"= Rkg͡F[y>[V Y,&Z؎d%ZuFK6!mѕu<ŮU}!纒O5>/ƴ ANUȧqQExrk0Kgy#n/qS=Չ"5gZx U弓#$ɲ;PnG0["l%,HϘ3GK׷ XRhy8R)op(J"7Pc{ o@OG7l ` kl(5t8bYzg\UI$ ^K,|&GKׅJhFpH@}أn0; [}gQլRNV|xJolNn&u,V8-2w cs7}ДGYI!*r )M𧻓 TTj碅xV 3`s 8܁tdu}ő=(ʝ\P}y#XBwPuHPvziiwt\7FML A]:R7^``<0ɬ]ZVcV~_ᆶaޚ+trojeI&V xHHy;087"0|^Pr?,#NI /)# u-TX-/79C4Gwm%#gm NdõגE)[vi*"̚" s2*4HZ*ZURȦNaw%]݁Wܒ(0Ҕ8""JWGVpJK,fn*b| J0nkѪ݊ K9 k:I<@T-vr [6gD@o 61=e-?hzn$ 'C#EtNaO+9nmIsK`KKʇR5\\ _WMDa&ŷHP/7@~ mKc@&RٌԴ'R.fTOgM.~\Z7AĖǦ[bc'_bu9@y5p F$*s, V5atrqa6>lwt")`q^gOM(2(zpиia.ÇMعL9/IME WcYp GM GB}=3JUդ776V&vX!3˾_zg.*m=yv@p}"t&`A{V -J.er`dnwg6~/]=,nFmh-ȪSصvL6ʡeo҃4 22I,N,+؃x2-+4$*3S#RRЃXF-y0Mo>gv#Zt yS$ڲ@JG Y*)-oxW\GǍBvI]n&{kX-d6Gj@XW_~ 29Ø!4zɹdI4heup,-/2 Vp:GxBMΩX[Lץ/`T/6duzeԙQ̳k뭂dQ2G^ +AŸWd7!3ﰄ N@(.""e6_A}*KlmUj!.gq%Ј K:栄~/:RrNqD^_<~F=>eL=Nm%tضuyHve0aZ-6@Zr<45ljXaJ|MҽaQXʾIiQ|JRN/LEGobDA}~?)ԑ1*^UIj^ᡡpȺMGb`Bj;ztTNlx!k7gTW%.RL(i!,GRLsdXРX1!6#@>ٜ;n A]Bq[-Ls4}$VQabgoh~I?=˨vrc>d8ИC ju~A2p,b y}&V#Z2kg}udiYzqT Q+d?ٓ ʦB\J~sՉFsJ@jhyBH@9uEhr3.϶N]JغaHڥlN;UHaVTR!͠³ .?wڑv5+ H"s5/kt]PpSc\W|MWEh*+vth+&D`^vVty-CR"I\Uؐ)(Y8=.&`M(yG֣ f?@[#t\j)(. M,w;P^:T0RQƝV51FZ49=hš"G-!ų> 4f 4:^pēY;% `C"FkB0w9q3НL<ϑM""+"7{~ =t'I6cGT$,l./pz,7A1b$ cW% дie_Tarpg .Q}_6 <Pl^K->fp .H'I"i_6Yb#X;Ee\ayvy$́īMD+LW[g;lr0DIBm2u?9z\JZ8SE B7cOu_;opY|=]y[r'IfJGP>XdIEk1lNg '8ĽՋaGIDC/^*3!c!oi8¿d@7#D+{A`3!n:2U=w&ڡ5ο`Y2=2#ܹO _r*AҶ2n` m R'4n4A;W˒%g^i.̳N3M_0RcWNA-]2d:hكBȕΰNT {y5"iԑ,2NM"v,dMi+"|㒨f斖Z*>" iceqLY=PæG:mh,^KuAj$3C>ѳF&$VLX'Ů` iEE~.UttV].ljوgtjd 8x #Iϴn%g7YZ8:۔hH/еɔJgnI+H"J'cOj"KU[LGLw|e&' D Xߚ 2ւDrUa=?JV/P EٞCHZ3zV|S'A? :͢CekF'm&>}J[/)nL`._q*h"/*ʏVcG^_TjvBo2Ћ~phO덾wǹEvFj`lϏUt ڌc>[TUh?&g<Y͑3}Z W|Q/[p/!bpU GY?x~F_ J0o&hB-0hhJ5@%v)zr̔ոW",l+BSɮ)KԚyCxYq::td_tJB嗼׷ cLLEs2D=[5e-fhzvZH c ~ #`!L7`ʑ7hdcsfGtm?z.vy iق[ku;Z> Hb,BwA(uJ\p\N:Gi C(yw7 yr*s *,3X9ϧx_֤qlw~=FLy,l:L\SV; L=Nς~xn^tjlGsC dcJO!K})UŠV-\Yˎby5>dvK[TN|L{>{}aH<92hxYK7ї B@j#( OU0?x[7]%&aJ jG3 G;b%B߂SǞH0B9XsTw%A;B" >hֳ?Wj hsm V`uW@XFeݱCT%S{lWlWY<"2wV+`FC@ a: OeD]0߬{D& Z`7I[ Sj໇?Ik̊w%hxA5$Dfˢ)/rZٗYZ;zoSQQ&vz}z,RWEk4K"BxbjGVi*'v4F+i6~Dɛ!,{D;$Zo8ST#̫g6_5Đ?Wqul֗[)t'R&1\5kѩHE-bs̈v6: .l. H5~iqie5"6_*Akc2 bx8"=|Xܳs\̉q3>s_][go1@R-JMXa|AG~c h1 xvێu;̗DtK-z,0UT4ί3#i7H l J=ߝ_}e{H<^".:ZBL{>RX ̣~d`|Kj+_GrHF.zN=J4 LU@+gBL*Z8콴$>%_޿ǨHBN+gq8+)PHԗ1mF?⟄f-^&~'4ԥs?G3Hln9d;I䬺?FiNWqۡ=LR/GB }H.{PRFb06 ,& XB܁-NH)[O -+k VRux> ߩCGfU9^Iv Yq QU.iUK8_TʺvSrV< 7!oH-ױ*Ȣ# / 8"F߯lZCDv7Ԭa[2 nrjR]v?G;ųE"q@PN W7JdJ@( PqҍSXVNSډlEq$M3fW_}pkc|U3UO{  RU:rqQKvu9 TڽHK9i^0K2}f֣i-̧qH'3Mf l*6%|E /O+EpX_!0ifsb\Id)&+\|%css:a'МD,efsB@?=̋-ʊg|9mŭwOW"v7XMBk03J\E{׏  F=F8 =><&\etu۫ 7JȻjOZśtg: ٯ 2y:A%wtpS5ccq+!r압-c:FH6>${&p @*9>@X*$聞N t|L^oaԅ3ozŧwNzff?]2.y!8S|%u`GϓE-']YfM"µKV~k1) qS449V,(}?:U vMK3яlcka:8^ G*qUX OR!)J,*gD lNfePc''I]o_ lv6 x$}P$I?n,!wAB :V0Ms߷LOU*}'7ۺOkYI׭qTc/Qb[(Ƹ1Ѧ:i̖!Tԅ-񬩏' HP)eB02H[$#GKy@AE$p h/+4V=&6G'VO!GOx"2dO<&B};^ZOY?eq|c>!X+9@qr=`$1+;Rv2ʨ_ӗmt;9LPX9 v&c%PXc =WYS<S{xT%JLC F֜4^ etUn!N|Ou=3GKsxyxK"2֊2D+e?ԑҧ H˰FFR`^V+7Mf@Glx}<q"R 7%}s,&o{twCz.-3gTuì5 ;z:Fq* )zWKE-{PiA?6E<WzꉖPQ7SDž82ҶX3vՅRŊiG/R5kfU% wIQ{1"P(Mf uun1 W?r¯4BzvJ"YsZi-jFwLYT xZᩏP̨tyK[t_S)qBr&7V6ٜݝVo&145w]y9W*0ڦVxawP[6#! S4~4K zw--T7Ūhm{\)PahB"'CVREs>LtCi9h8"^:(CzݒSrG6XlIaPUx%;Wq%i9gMؔW@ ⥬Nw7wazsw oZ{Z,o*Ct{ztἰx`j>/{i:QY=_|+$+)r09`sX<ڣ9O Yvj ng1Fe|+07qcGoĶBfnJ$ ]SBj?q$5P5v /L…f,.C[duHO^ @SnW2_ELYJɣ^ BsTSxƼchvKCvrʡ SF|(K50bs4iHv%/Bhecj|n^4^nkH`=o2Ė!5uh#StVuE!rIZqI>H*Q<&4,R}rNw׼}xAJʫidmYw#s B \wV4LfdtՒNQDb-XN6/J-;90#YpT%k\HSvRзQzS(5úf\bBNkǖ QҾQ.M24)Rn֨8[Vl$ 82-RQF)]\HO0qs~[032uyuv(v5 C*ocijn< uX-Odנz V3qnnl Hƶβ[5(ye&\NJ Mf AqGp=pbCr#T{́&XmV%p2d >_ڸ_~>^M62#biw!`AXBt RzL٭$ r)zl ē\,MWT~8z7/}N-ӖTρЗ{jPAm|#MZ"B$PzJUKF̉=dwKXn0J.Eo=^/IdL<}DTAefoj&I)+`Op?Q%66jA8?5X v2Νu/,-TV{cJF?m@XFE]{a8 lƖ;Ptb^Ӳ#Ci16֛@w!I 2ly,7Eٕb _KPƦ?#O5nEgrG D\OeTlXs^1VeG%솘M++0rBPgXT5-Ɏ7}Ty`ɛ^Zk&k䓸w4 ]Ur끽};9hED#HKx$"-C;ưXG:%ƴ4o &sf GJ:5<*65@GQ^>~h'Ѝ(oF7kr\Bia]#.[L=wȡx25_1Df]n/CQax +Q{b門4`7c.d%,-L֔Z @;'0ӛ6X{?V_?Xd'*;:kF`AY"GW\jMWSsS83H斸zS^ickJ?*Oq]9~e{:ecY.x" Pָze⒀K֔/ ގ:N/,FgtjGOZ8 FӠ[OK` (0CSJUɊ IуqEe˛(&mV\^`wD=2z9)1X+b>AHIymhO+ul_ 񂅳}6]Z^tY_wժ`zhmp˥v^-N$JO+{IJ\ =LgCxo|Q6~f5v*Qu(j)yJ Ώ_}x+H^vR 3N@NX`7|G A*eF8HlLc\&,-o#'{rx oW7=|{ ig}YYU׵v[R0 t1{aRuӘ6 24-^с' ^>ǽÃ%7ysϮ,qQ qM >CڙL3wV2!&y:QJf5RR13Kv՞N+H \LkCgAmlD &t8 ${SEP1~N/"^ i 2Ol8`2Pht zXL=[Ht,`x*'Hp\(0!< +\]gE"CܘϨk6H;h[{S6MVn$z) SGuL$<݁Xi3;-aeI}ьH~f½G)&jLH[Z,&rD4CD_=1+Boe3lP,ܻE9Q1-S{HM$lH,KD5qrP; ˟4, y+HK[m$h!n јafû HO*{ Tl3SY!|N^A#PacM*dѻ!F]eQNE8|g?*BW#=PYf-HejQ+fs1Esflv-y ]05Hm]#8Q]Cu".i Mq$:gWC̄aLf#4Ad*"dd39R!̻up`zETOŠ/UGbʾ]2>.ŋ.ѩecvI}'e|A&Z`d 5iżQ#mf\x)6FLFG#~m0#L\J1cYJԖE)Le#}sWbCUP/V[Q] [r$#dh,%X4ЧiMH).b4đjhHZuR=2%N0*`¡? /ȑޤ5jF{0@ ksPXhmF]tbzg)1o[g(e}9 tH[$*Kv;paeiV s ǥ;AnCyLCWAԒylkmRlߔ2/2$47&͏7n OtRZ62[ɟaNѽh_XOB4Z}L%In:ͫ]RQ}8 K!]:EccNbKwL XՂmEխ_-ɚ'UO`^r8pJN얳HE+Xbr7)u Xy}4E@hbжmv_NeS -f%.q[pMg=H\ Byo!!$8vT\17w /}\-.ojQ#5؇lMHfRz"+2cQ@1J`ݚ:6G^ӷ_5")ɎAqS_xЎA~p?uB/75"҃ Lsh?EM ỸӚi"S&' #7Q W79u[Dfxs*ʻ4ǂI^ŝ$ϐx֣( o'v+EFq]U scqFd̍vc,qsDu6Fo[ i|iXj'0 9¬c0>AgNol [$\{PLɫ]7 KrZ,LlCiKZ=I63QL 7n|au*O^Hl }5\YY^8Re:14c?\?-E:Cl)/ #)h(M05NY@5(: 5DxdY3(ܩʠf{5u0?@ؓ5IR޸,rEP3w߳u =,9zJ71j\Ԩ($9k>8Pafsϕ;ߢ*4E1;P!D2ĥwe?S1/{+%  $ F>hVURBWE|>B`'z#-#<n!d@ 9CABrrtXyT.#̦4ֹ `^ν+rܰZ'YLP06y*O<~%I/9On~ڀE;L B)j2YX-:J4*-.f7>e8!vb_,\M["<CV~gCAKUKLWp. CrHw;k#@-€Ҏ@~ީiID:CXJ9dY*TaYߜ6Bݠ^ET+}o$"W@zh \(+6e^ ^lз.Szө:8U~R?u: :Hjξ/QÕgRǡ |m.2}k 14r!G 3W23B,آQ[% @f, z7ðnP [7xu$>ȹӨF)k]`CRoΥCG=4LKrN"[k?B%HcJQ*IX[qPd(hEw|-g㵪}5Zs^zG*F컗.9xƜg\|o ˅'sڭٸϴ]RAq. .5; _G v$/C-I洂p8EA7*"-ˍavFƉ zp}]QHMHxX6˳nC%3pj,(Z-vM9$ΐS޾Ӷ#"Zkk˸Ugs[oQ q0{~7 zMe|GB_Pڀdm 7, qE-IaYJuɚqosب8ڋUz'9ĔzEoNZ )ZU9u1t*MG33=J%v‚v U"@r'r9}?uSeuR3h.S }]&'fn}JW;:r*Jm^'U=5F]FԎe~0^I%Pz ՓRrc/fl;(Qn+ `oRމǚMXU`y'0^2$#!}*F}ﻝ]\6;40!GfnXrKcU3 @(Y~ nքXFb_+? (Ffw]ƀfFU_@`3Whf]pxo>.Yg\|t ;w()9^>\ /ˢhs $v¹VY9ۃ<*R&7 !N򶲠;?eRkHB(@3Tm%e8%ES @sW@qa\K>u4L#i`FS=90: ԄgkA}1n7pxz6K$ׇM P C*6YNv+WOD7vw'/Y}ae*)v~5!!Tq`u븂. X}E*: dodpN(0Ϲ&nR)!.ӄ2CvN/qTyˎV#SnLް/_Fݹ2[Ϋ c Z%L^* ji%A6QrJTSr9Ewuf H1>6z}_l9ŕA MyQDvJ{.aBVLIi7궵%"˩<{"ghkL$}_TgUZ0.z$unѼ 5 ts\8%g>zTu(\u7>hJק2<;/.$cl#`njoaV Tp$jԝc֋ͩCMؙba!is/Nbj b@@݆j.oSϒ9 X(y7|Lt`Wܷgէ)Ji^=Dz{$-!-Lg"v0}xbCZW cZJE>`ZEs5lzD"]WɇRv/uMOX~bF>$MUz_ox k_;9# Bϡ{z혠Όz\uWbX DD3V+,ܛgm5]| 0黛/y|gc$ie@nn:KQ"rn=h 1 A/H 쥭Ca$ J}L,D_H%:L| 䥰G3!ք@$M¿g/dj; i3y6R/떡1~\U,Jp?LpK@B / 叚2]AK7ICDxP&j5dInTZH_&G 2nͼ<#ZM 1V"< mˆm"',xxi0qN՚-sUs1>z1S j#+*#'Ek"(EDbW:]YMQ̀^ŴxH5pʹR엺\vڂ`jgC?[nWE?ξΚՂ!.W2vmB~[B8eD/Ԙ!Rߎa-r/f O]HK(XRMup #C] 8uyҎS;Ą-a.HᶘM 6O%\sz7fA$u8kԉd: }v []1 ֙&`2ZԻ>PtώO.l$ !d,P>b3Ǭo EO `Wb6'gӟjHijup9")~o(* 's[|ա#KzB||wy߶1y67 q|yKnt2j\^[|fFSB,I al;CqӗM]iy4OJFBf89)@AGGGKm+ l]- Ohi`[sS uYށsQ$lauld ݆x'NO0UoW'@ԓ=l~Od=LkKtC ‚f=1d}ed q[>6@BJqhZa~ :@f$iw>7)dyv\a=IpM3ձJ YORss 7P~xhۍI=y!6C9|(UğRzu lZCn-[D{#b1cr{km6 1'lKeG9ŒUw/mw'?JbXNo.sek6⯣k9GuUAyec.۽e(#G:پP=VpB]<J}}r5U5ƼL*h'Y|ۂW/ [B2RqW&7D6u%q~tkS;/ U+ny4/_*ѡgtw^M' 7 M7poe x(}Z4G/4H8.GplH:qPl5ws  e@Xn \q2`Nh%&|C"+m"ȱK.gI͂cHkyDFJ0Drv }>Qw1Ͳ&M=f9t,SSvOVH5X `ת=cO8f53*OYW-U?NYSʠ >m.L>&gUS`9![(ΉO ]2PV>jB=t aGSP@zqZ*>VfxYi1I l.f hBm]d{{ipBmӊ<4s4Ydi'U O▝i&s@k8(@]+\(!_$lZ`i\ѽ]R 41EqҐФs6u,=q}3xà: G4LQ*B+W[i %^#Rhsˀthsc;]ʓOG0ʯ(L;}ij.&ƼjO`*&:`,-WC/`$au 9)Z'dY-r/ \bŢ3SWN6h6X)Ҍr-  .v%޲m-n~>RA窩ˑ6c gTurք^mDKlھբ "vJ W4qsbF[qO9QONuy/KQ9;j< qM-^4 w,$_Y:n f"yu*tܵO[pN*FXqX{Q0R:e^[,jRZ50314_~8 E;v"G'eFtQڿ(c`Nv5Nհ-N{?9|^4$2V혖Į 03JA *-sQyځUB]'2\Q@SzS~>祉-JoGwA=."_mVAhs*K7SƼ>c%;\)nܔ'5y_+ SǭR!Qq8y=*]`<)Ƈ ,~*-MC Oʾ-6N0@E/M@t~:x\L.blڣ:/,+;fO(1[7[H[3) RC ŀ d|)bf ֞_m %ī̯N*vYs9bUp4$ђJo6>=>}VD^\_%/Cͬ7}5Rz.կSxf,.k!r.LdLCM&* ~t9FB^TUFP`@WlUЎ ͡!uDOvJۏ'{?aWg F= _}+{qK+Q%,s7j  D,ޘG ~WOa2'Z߄!SAhd̢);J!x3}$ЪD˙v1\i=c=j妟`S!m)]be{K5/ 8'+8F(1ntZ [ >Ex{X֚n1P5l]r޿=O܄18]B́w*ݐZ))G uy{3K6*sLv-|}$HM=s1uۋǪ֎;jX$ X+Db_ ޢY0k"1&-%).:2K&ФPN}E 25TwJ/xfp8,PNCΕ~¸Up`'͇o (m:\A!=lSj[ -!L-PR><8GeTXvЕݰڄ#+ӾJ@]C^\X۶ƍ=,v>h%Wqw'y22ݪt_Y"fZ%촏&']I~;X-p0tE/b-X-?ƺ H}%kW:c'|¢in1?:#F@=9 &&l78:muL,yt #fV- -&@T.MJiԂ>u("U 4 pBCSgM˙J7f k7X6( v}əQgAۜYbݏÀ6T#?:znW0#O*2XnWZ4@+vgoi.^tJ99-ElN..\܀@j!z:HaIwxB낒/3/=v]kAb<h)V@*Dˊ.'ӌ'$R%">x.mMޤ;1QIRTfܙ/Ǵh[[HK>8sXcz>51@`|?$  i7Xٙ+@GS 8cNo31qd9d ww``?`r ({\]0 uŚ뮴0;1J=%i4,!vo)`0cUm>4ɤBK?bQ? J 2,=93&8deYBc*ؓ}"И3xћwrHN^8&Bi\CxuIK K(E:#N-bL^4 ZލGN30> ֲ6[d85l2']9?bl%Ņi*;shHݶg(9^P Jx^^q^ 3">\Mز!Uqbx(Q\u9 -yvʳ̃}/Eyx0x?;5J0B<`*}'jK :|ufK囚Q)GNX_:NY"{y3* ^UUOA~bZ *I;X`M! h,dNvAxi8pwB6s[&/-aWKFilMP "IprƺeFh|D[Nz2.Rlݎ.P[Йu}$cUIjr.FU{$K'ؔ9rK)c{V/Cp j-ezZ,Ҕ݃ˈw 5>Wy3gp ܬnVc ڬRV܍y"嵳Dʾepiv:+AFn p4,W;-y"=|a^d9 KʻI gCzGL5E*{VqkP}}d>E*XFp\Gkd3`ϳ6lPh/ēH;ϥ3a"ŐML'/[+4KyGo\jqF8^%.UW||<3IA*lzvv DnXv਴d7s[  !m LLҤ 9/tlzZqSN$ܨ. "JCCFyrG+q֫+H&קrF*o`N,MEf1DYFT2BݷbA;Ϫ;H둾/_9JA^ a&b0lz Jds%-s1+5HS4O[/MϞqʳ^Ȅ)Σ}\"w;'Vq Su,A?NWWsGkC -`l#j9: K>>E]& B>,9AS ˊ"#Nvw_m[-?âQgMx90~K? QWP" :'MBoܲ[j՗;S]NVa|],pCZ,{a!%y2fgr#҅&FSkb)Dݺ巊\k8\\"<# }VPJ`Umc - YxL\5^ mtw;9CZ+8xY[,[4end\R[@ƺ;<9[x{WTqІ6au$!{i\5E.MRzJJ,ٟR988pĿYu,6=q\~0.U|̐^N0@q?jlh )R*DF>tP˵՗` UEƺ/#F[ou(蹨,YdfKA˽>w;Y|ty9;JDJ Jr-)_ipߢӰQ\0/|W 6W͘`nD#n&dC%o34'cIQ{3<,4s-OjJ.pk E3lߢQDGLyW5efaO c)V&p<TPrbFwQ?ȯk&e`9ngc42Q:z_ДJD%RhuZPUAVSX]@ ~>;X3B<F9pszf>;x<``jS0;阗 ̔|`> 6( TY$g!yJ=!>9dχ,;ʤEaBlt3,4U /FD$ PUV}7ZK OrSwW_-2[E:! :v,G5eQ[N}ulh`)l+8OR>u\{|6, ȶ!yr2HX{[ۣ^pi]A,4{Kᦉx5&ȜMvR*UBπ.߿ć~d7l꿬 p:yt5CJ\l&+l/Ew{>,Vy@w"A9@Phޝͼ3 :_]P,06©IOJ8&9Ww~rj?\AE S) %0@ tr3xa,O~3L6qjPO%U`)\: :᱃*b<,$PV篽X"Uc9S$ķkP)63sXhǖSvp.[AW2 %E嫿|Ξy[SQQ&ū[6HV^0/?QCÐ>SN)&q( <@#,CձyUMХg+1Zp7R?'i Y)2ږ8j![<ȋз^l _j!PBS%3Fʹ-8ERdjeoqF7:޶ZqW>.ok%.㣁3@Hl{?X&zuF+%}=4f[vVcM'oTieѲyf˜y^j]-vt|I|q28:@e!XSc`a7itpXⰍBгfo#k8b&(%eF$ҀryTV4lkH`]KI*ղW}JCcѩϭla~U0Nˏ/ן~K$⊯Q\RO6dnJ7O4Nz#z^!jk&::,EXT5gR>(>@d'v߁Fvc1nR.EYdtbHܿ@S&X糼t{fkV/zߥ ~wO˴&I[|R6F S#olxB8hDba$DMl܈CYi7811j1rOhv?NLک؃'2"aWAx tVÈ[nZJmgdLJb b'GjWPSW dMғߔpG{A s|w$Tc{т9nF$loR;Jf3u.05z<g1L"sʡo(E:Id65g1bV9N$0xN4L :0 H7h˲,Ņ?g Dd*K֝:>amb5So-m|H@עieG (/pP5Wsc_d[5oWmW8qB0Lt4m9t˫iGS. mj̗C!pWay¥JL8As 9[ә"|{GpM8*9'N(/7GFc DP>}hU3ܷ@[ S2]RPɐ)8=;OL&;P tLl_Xq\fS|Йvuo- Jp䈙J^fW;q1ZDk {ߗvAGon#|ue_LV|-%6fL{퓀(;xШ=Y`Xpz23iO/)Ø7Ipk[I 1;A,|wrXƴ22; (|7U`*r+ \_Tb$<:5)q ʆZDBq:EA-Cow]ۤޔLbS#PQQ9KX8O~8 HUs7׾ϑxe%}]AĦfZzQ@iKL9r ŴF+:??tz[N x?J|^MלdENV(AgC6VC`,Di;8[ʬsQ|0E[o`AsHI2 kTg lH5Q4 ^ga:c |JWZ>TEAZ~BKB] ><{T*)кH-)P01Rac f>ʆ< 5N% *C.I PQw Hrf>X^zlujJv>bl6*#`@JXur2gk%'>CՌ|@"Rvu 7PѨTuY^4h.]I`΄"xC(z 2"YD~ir7GU5%l:2u 2Mj_Wt _nLcr3rT|ZS\;6^CA Ntu1EL{38I5ʢŕ `ʢXNY2N9\1KIY>@6;[i^#zOfVߝ:+ -1,F8sUg:׭6OxkDtVw^EٺUZ,.?t:Z$ ]Y1YP/Ê:BHqg[“ PDqEW~}zg rvvTN5xR0 ]Dx뿗Ѫ%;Ἤѻ>N:X Gz׌&n2o6ۍ?nK@쏦pG]r9##c7mjm*7uJ"v돘[->K,F[xMN{fkbyfǻ&t>MW. Ԯ(SKZ-ٔ O9M F ?Impw0`mx[dg1+.e˺H̃lZj >IU;w{q ]ʉb~y)$]+җg s??3BNPY$~sCR:vA(i>@fc6SҌ1~օt5]bFȣ2< te3(tJ2kKO $ȓ9>=uv#[>Y!)?B`~>F6Y΀.)N=qЫ@jn2?~ ݘV0$# =saI_TQ u+~FB>oQ 5*:ˣϓ/~,I󣚍}u6/S2"k٪62^FRQ7׺řًOGaI@1n*~'3'&\˜Dd{@(Mb%1+>SrG*܇RFL5#U$c\k.V;pb1qlO `` ޿[~9hof'3 O^(MI"ȥQ_Om[JˁZr*k|hy  %9@ 25j xАj@vi &5$6:+gv 4w wݓ_+P9ue-?hN F'4&?erw0c|# x(>aՍ^Gl'R|"Ra +nA'yzGds+dv~ `0oBКcFF'xd=W 7G,%sB\qRMع`Nѩb1iD\X ]I1H\g!]JUB) ӌ .}5 7 '-rL ~Qe@.S$]yf+۱&G1lQ{uߤ}C4~rguOVCi!])3rVE?mXE?z.~U:mC/Iv6!aW)VΦ"1vLj0ΖbtАq3yډ9\DS $L[]@Pi}T4|N@o>(R+K4v[#ь]ltM'R0fC {[Źܷjr! =ӀhX|3ͨ2Kz۷͈tQ"aٞ3wz5]Q9z}ο$P{Y_WE0]otٔ\`{}N9F-QY\QWTXZþ.;,P݈:f|8S,$ZuIq$Bˀ<` L*kt*t{sc1[}yο <UھwdɄCy.2CS?n>#ws7eS1g[ݗ|9nV/G [&I:2oҏr3{wDJàlG&0Iw a:A,y:΄q@V4!#'m](>4;b)NZf긩/I9 ݢ,$I0 jɲ2Mbܲav@%eF J$}?C]dK@ʡhڠ"Z3^ZfHE!XG»8SkCcAH=13]tWdGY?ҨS0MAoCڍ#88\ mU_*_1MV;ۋ(6l_-Ps}:=˓6r`k& qo͂(v-3eOp vV-3tk|ա(7@eHTQmNCe4 =s)V"/7w%‘c|X"v,L3{7i2Gs՗Cdކ&&#G5d{=F!y N&p8h1:f߻Lɨ:iAԭ>W6Cyv~Q\rJ9+B` SZ8*hy,O馈  T-^TG]e"i3n'JxG |$\y點l#m'[^%``zUq_+[AQe4#`E2̐Wv@ Q8Cq쨁>%CXԤ62FJkrg=zL_mE+=_gaV.ÙnڮhOn_w9AM2u+ 8KN舓+hwУd P?6~tXg&T^>iεZӉ + *`y8i7 gyyⰌt7o-3"]J$# ـ6Rz'g%gNsP@krդj>:%~Άwh%¼ĘKobUS ⴿF@p"I0>|Oz\kؤ:|Z`5I"/ ڴM 4*jB}6onNюY#B]&7m Z /эSIYΟN}?l:0oBnYD% #/cY}>ż٬!t|xK>KZ:{H8v%{O8x9 w})C{鯉7hI A?m4W+=/2 T.|=*j1ҤޚS$ jc~$Cm^ EvK<fi\%srrMjZr90sm?f8W?KF9(VN8DNW҆+ e|XOkd9"4ęZ"N$( xI6X7;s2?[UwH _m͌8/+.%߀[G!U]L#biݨN6`ms-@ۺ 2OK:8e$`RXj.6vŵa>p~ɋlm/^smphπN[7@viQG|+B#.>Ovx~26& BDCtZsa}ET8(JXB+ {sXC<"k3KZV A{\߸ubrVOS+g{BX7e_Y:vBmrri$MR cuUt* G9tY%ۮD̮GK]ѻz G~3`N|^&u34dK@^@/ޑ#h\/*-Y0)0Ƨ8ynmƘnSZ%" VQh`I?)UpDk~ΙEB3aLPW qS<## m.P\r}q~op U 5J)|7 ֔dP>#p?|#ffz2/CmI+~E[&H7  d˹CMjVc-d0,N:&|gO`'^D%ghfZ̠|.IxncDK2 x_LJDÖɒB;`B:v^2Xzczz~) :/B۟ʼQ'ee*/2sA ~Zڌ l!gR^d;J.8+_[̑s\R*P9xzȠ}4h+xY`k]l--`Mhh2U߬p,WZ9?|uEzMcqb], %"ؼh)^v<:ͼSJ[֎nN+WDMv/Ww"c'ER*%=oEIXGa[F*8+ ERKH9xʂ4P*Twn_,P7/_!x J1fx6nX{Zݢh4Q(7{n<):u(:ZCof` 0Q|\8>0xh>!bFx jl&ZVWċq4Јƾ2f!?j>3da,dB}Iݥ=d1!XYzKKC\5}N0ɤY1t2WP5]L*7'r]&5wЉᮁNjZ5є7/{;APR"f)b7cXJz7nێ\3^pmQypoLթL y햷7ekm]$S,䏜cnpx[S#aڶT4BbEbjݥGc~ KHD_ϲV]i׊07C+B]+P6+EQFVR EC˴O&LYz5$ ^d$ 0#һn7?Qs̤J~3+x&BL]LJdR1sWlSGj/z#f4K%d\FIMsovo&(Ual~Ǻv2MB~vifЃ$ ЧΔo{cI_1*J($qO&p39se;Qή0*%t0822`?.¨MFq0 3}VИ+읇$vMHk=[M6B3T.$MKx`'=)t(jEeN dE9ܚ WA ԌsoZoK' 2ϕ.YX(!fR$)sAPzŰf>AMݬow&cKkQ4.'TbFdX V8mvztM'xIrjLMI;H߻2(H`!24%/gBER/o/y-p(148\>q̖HUhu4dRhk^3ksKIJM+<ىkƇDT:͇yr @f!)G\mF\8ɁɃZtNj3 \= /PyY`i=h b~Ԡ }CUŒ-f+]Ֆۖ4;f{ B;"D HC㗤?cIe pߦ⭘7Gk,Pz4x10*TZ1ԚmZAaLș(CNgÅ1B,w-,%۽ ƈ\b0R 9[ފ g䯅QZRPVG8KZ?)6D6lJ/΍u(%%'`c^CENie;Q؁5f-~ @g>2ɞ]6"0gkr4ATV'VF;. J^>dP@6Y2D K#K_}2[sqRPHgM#Xڮ{bKy>!&TIvmM)Dć3a5˭:Se̡7 즘,?apauRV3Nm$ƹ0kd*M[ g : )ІP BG)+hj>oUE0dΣ;#ׯNUvmT-iBuGSt1LƊA/jO'<ڄLi|l*f=́2J.OYFؿ {Жe8O龃O=~j4[Br RsP %KE85&d5e( {o N?d1anV{dL括g6C RFjRj2L,\=ӜN1& ;#u+KO4w'TAFX"p5 +q>-;WyHl%loC'yP ˴Sv 3_+)?>găO>=$fRYjµme;GSHdT|Q?T(-ٰo4u yLU__}O `nIɥS6Dz&A  -3_pjAou/#"j(+ |sD޴HqLk|5.Η0zK\+I%.'A٠,O>4í#@_RseZLmIH74K>-7TH1HEU:\OkT-knf+LLtvOHL*qRh&Ѭ*#1E%~+3 8?  ];QW. t.$ aͼ4 vnW$̹<9|wG*ř _H$֥|GC< 'mb+NGv *SuFB*,K;V|+gj c7K)2wf};8.vlNs&+=[\RMd@Y|MScpxݽ7Q[v8债[1OW:iy̋D.n#q@} XsTsEsJA'qZ b7Ǫ(Wr`tgBKF&Mf3(\Z55yR&Sɪl*^˅Zvbm݉3(MgMXg?'E~Z.Ktil?0 Y~u&TCh#RGMo3:L)}̸*HX-SRM1DuƟ[v;sy撂bUߠMʻxp'hu@BRR6m/wֆD ^D`4f ꔰD5\ IY2'u'u!m& yFN؝U>]M԰HۋmٷksՊ1i—H].Z(DOMVnx*ӔA]*|h$߽%ҕdP2]n}eӯhG 6 jK2 e(׆kX )lSL>G#b lg\>J &/KfiSEVa(rx:3tTm[;'bwIz:Y ꓜvJ{ MQnBGO G0tk[i4RW=5~/knnEݛa*b$!Nr(B8e: BX{ˑ6͹390Kخ&nVqF hn`͂ ,5B2 Y;9FXgiO P'ￗއ;R3ulB),e{̾+TA]khN#wKKɡ{[=˴*aSP2عsз=;AbAUHRw{ sFmhT''tȨ{~ iﺰ\;l4]#w37jO?f'sy[P oKݏ5sHU(lu[;ݦl>?L< ab,G]ԡka\>j>k +{c2(41LZK)3:!3H0AVR?7\W j}SjW.8{Y8 cK6ھ@`Y6lO2[u&0yy44E#eEź*ờˡn`-Eg>X}=y@g!3tf5w7}Xl&=O A ;h{LK1d#t弦٪wrXF(Z߀ ݝ#*LM]p_Cqπrx&]J!Sl OjCzMl71EmM@rs!/X^H Rɐn|i<O; E~b) b'R83IVn7 v;,`3Am-)J[3K{IR򝪳 WN35~4@Vs"ml"Gd1T V*Sr^Ժ[]n9Lr]i9rIzoSx4u7SV#fHޚ26Һ{Ob f} |X^Zgu?1y `İ۫Ia[X4N60c\wVm_' (})ynjHFsC>) ވ,&1nןdu*77)w&?vy+n"?Aϖ%JriB5U]N?$` s%Lt@íA\<ނ懖UfO ZK :wz r%#(J̭ĔıH+J=;6ĹVg4bE%+_vSj7#Lo)T{HdP64_ya<^|k;+d9Bqz",RMc) P/l<?232n YpBN {'*5"thrYHDp):] $ͺR8 oA #Ql'{x*::f\rR:jxg?V~8[/qnua h5=_,!$͠"pH'a;d<tz:J0?!m!Ol za(4)z jف7YFSY_vAOf؂lLG]䦳1LȦ9Ѵ%6fBVW Yү<0, 1 Vc8fJ ZQ* Հ> )oTpo=hRxV{~= =- =Ȝ# #TM r0K"+ Na6nĜ>7I5!]og yvvtQԟX,Zk 훼+٢wөB6>(mSckPy/9Y!v9L=^c \g#$  p|r]eA\\- *Yp-fPԺٍoso*cH+u7=^)h>K,q @rەIuJ) UV[:,S,~AW{!K굄j6`/'9w~wJzL;0)2ݎ]]{ =Ol]oW,?oCl!ܝoLp̱9 e;X. @s`>P@kCߛU]cJg.p0Dt>,"_i{!x>ۄ{ӹTL/F_>4#?}!xilD~ n!|t/@Z.qLobNHD#H<{3Ϭ͊1c0"zQ#Ѡ| si+V%" (-WmL6.B ?~GWf/3n1@̓-~V/險>/*|E#'t:[ߑ?[G3T)"ү*$o(Jⶠ[Lanmx3(*Qhz0>VZ|@|@MsΞ(ak& Ä۶WV{LYR\])xLNyi: [c΋HE^usݯL;H0j V:h/t3=6a ,f8j > uc4+ﳃٞ(-ӌ zK颗t<$ue CW(0ıH]-)d[3rNS5q{oh^&(98ͺ'?90y˒ ڒNoK+ՍC?tl :/KF9f\3^yOI=th^cн(KX Qr4cmy^ G:P9W6ѻDsl`XqJط[/Li7=)`FwnP-#{EO=z<_hp`|/k7/2!be (Z;U2DSKI.sa=q[}"v KGnfd: ˼+(Q+7%Kw1M(af2zfy w1O3=_p%om!Hga$mՊӚdM&ҋN߹y?wb+ A/e5M&KFdne1cC$FΩf'LX3[3[K]iޕV?f>}4P3Wa@Hڽ֚.[1Z3] oJ(?ofR>W7t$zCP! %)!'Gh5#è̔4Bf:VʿSK%c)߶ ^jpg8XlaڌbC%O~<ßWJ?XHÀ~~J@ mA>@[EbMWV7UEW^n0/EK=Py;5 G?SR\ ,YsCr q5 ; j֬T!$‹ߝ =*pv0w}jBK= %;^h58QKN .Y>0Gy:F^C^|_NCkdDop_)Z7*( IK˨"vmPk }Re:ވ!K,{=˧Llf[\B7Ns.sMS dIUә Me>Mr}$*>,s9ӈvt'9C97`l\ډpi{&_\3zQ.т`Balѿʡ8I!sKt2{v.4zY<,P*g;7/ sƖ% ><d6gcVD+)|?ٴO.lȶL8>K`=U&D%0̓IyT9_➴#ZGQ#MSO01̔qLd, k%5Fgp7&q Sq%C5{ܞDg_Jaaa:| ) h#@re<]AWgW %$Md]'l6o1,09rڀ&'bXXrpUb7JQT6AbE-ߗVM΋ކ>C&a]i :b #˖}0BsP#;7oIe*S!]e?|XR:FX^٣>.Ĝ10c'FrtoB2+e:99eOMQBc8 wuN`" BE},M\:WXD6 n6'K7\ċbK؛+{nb/FlS2i]:Y ش̅M09KԳD;黯$C_jD6۽m`=  7 gr3t!KkTù:}Ъ^Y W_WzO> v^RuD=N0Cr_\H㐽Ym~ڐROwd>,ϧfq{dBNpI)XDPlV=;^Y L?W^h* $Iꉣ/GNo(3 cϗpqK苸1Fv0P E9\(l|: Cm0Z]o?BE>9-f^H)P<[D`4|5) ߡ*}0WM%f- 0d, --6PPHw?kT׭jIK*x<ҼB&fqK[ˤh pV|m2](caEDUIfS(ʅ׍ z<3h8Kp 2Ř{u [}I6] jfpoBo|[,E Ug ƽq߾Mo%92{ z[;p|fÊ\XYjE96r%4g\OҔ q6ίJQ 7tNlV-U9,8&uu[%;E%4 td$|.I%rE_uw C ѷ~e:"Mۖho`>.ʙcjP``-j:G})/&,N~g-S*e0DN| QcUU4 t*X{G71pZ$Rҝ]]f_AtQZ# ̗&O<ÄʔQqNlM(~ܔz&n u+#YaxU~yH7f͑t 7? > P04 ov!@n,1Zt~cocNn~Z#P?ais${exCvW-pL#1xV2 Kcu'ӆcKBCKu.$8'VRfPdp7@3FKc:ŃRx('U%IY3K?D]Zf5A- *-.{z8P87uc\Rܺx p/(9qQk3ҫs^ߩ yl7J~\5ԻwTZHv"7I.ҩ7Ù`IJr۩SIZ/ƕ+u.יvX*Tѥ:V톥ϘY)Q&eba59ETF}2g4y ~br*5ߔU S|qdVďsk` *hlZUP l}Q|ޝŽǭUi@Tʵ0+7B{t+#yf䀍@=L9vRe1E&Jlivf#^t BNx/;$ HCڍi\'/:WiGV)V;J4߈/N<4%&=8DAٛ\kG.JG|޵ډ"Cj˖Inai2vN$7tqv%lr<I,c@)p7Ȓ~gm5 ds@0NUw%,T4U@ Ho9);-O%PK@sc-> K8Bxi*6>c_Htp^2C(pl 4W#69 ^?,\}a4+&gwv : t0]|J=+Vz!l^q qEU8-aD Mf{Wx]yK挒}i) _ 3e)Jʍ+sQEP*F['(p ':]~HD=˝=N_ w\ڨrzS8ȽNF$:f' ImI 4֧#4LVWwuQ z +sGZtUOER.vxiN e ˅:l3? Z2(lxL{\BXtgJ5np fTDf`|+Ale"u630LH1qd([|Ejd(q VqUqF; *aȑ}M詷JO16YB틪趃"4\S] ^[u 9ZpĊӚ5̫؃Ԧ,2M%41DKC#LO=$^\)j&<1Dzv8f[Z xB&RW唵n ù)FD7&%N(ם>S$v1~yvOFw*t^Y:׉(oFKR쭒i.G]'A/Ik }NR$z1G K9``)w (ѻk%$^fbTlݾ@Hb&p pvWp* }晐QbFV "Ӈ%fLw!xР +3P64-D^SR$=,;+o$NpP Ob`zpD~!hz\X5m%aR~S:5W9i<\yۑ%J&_4@\X []Is?L= 4)*^{yc ƌ";Uk׾?+`N(^n|~KU?w=S#7XbR16@ NE@bLGǎH9rNg v km{=꣔`#BG4[\6ȜV9Co.Ĭ$ߓT4ȵ`CWK5mI[L+>ޮV]:VGm"d5 ?G8~oPwBuYWSwBuBbX$zCUl0O_b辭̆ pg;wPXH6]h֯Ă]: 0PyUJ~I3O< n'ꮨ< 8Hf84У ?녶ɪ2ˣ<9 -u_23*о_ٸĭd"?ti\&JE1@ PNHfO_Ȝ`,3 J=9ۊ}2)~ДO>D-;D fGHo5w6_~񝪂&Ml2R)>]\D) $T ms@]ALD՗t\,;~Je96YF=H063p!@:yFi!&ka<R镸JPO +bcEPjN K75Oyd|f7 42ݪ¿NQ&\TPGNަ~UH5abm2a%!G]Kz+R"US,¥]{F UHj}~o[*#2#U43M/ /ni6CMZC6c| P1T?8z=7ui/},=XpƎ9SU>swX*ր#-s%Z"|24˽2Wry c n.MpavD&O;! T=bkشѨ׼ fE^zo,v0oW# _(>pͽvB9v45;=Z> T J,(|$PL-4ZXј P'M`ܕBƻ`\-sglFp$)XvlqdkxFT+|+& H˧#h< VqcJ6:{˾]^rN0f4}aݢU+v5[[b*E\pTܖ՘sN(_d H DJu<2cQ @m7Q{W>3[`{[@ ]Ŀ[PB\̎%?%'g7SXEMcezԊFӓG|UnZ k'+la/QзNh}dY"cu/qKt-LbFnͲDKvUzym1 -j?awJM#al DO)Y*6B%VS>Bytl 5^M7q2?Pڅ0cj %, ,4zMD bǾ-ʽ˽=+\/5I7@yЍ*rxl1&Q7[UKx8rRYh\='ܷ_Iڜ"<"\>4g.`ףǨl q^*+Lo rD~;#et^Z2pRʾ ϺuPƊM`3̴"_5G+;Yg`r`MȤk/x\c-!'H naĬLCg,N ݱS,xyfyǠczxO@'y®gX۝2Yx#RBA2~O {HʜQfgtkc>7uU}\Oz!]YOB;kјv3L.4Cߛ]bpWlU|V3_|uq\oxg};nM_O|3 N"LՅ#1?H-?\Px27,7k^- X/:q.mw*&%wkY0<̾=dK!.y~>kn$ X(=ű>^Ƥ* 9B jNq??M M;ߨdԖ`:]Q6(Bnhp[ 'OM@E xU>%q$+*dZ~a38Ch!N5,w1[l:DnH0evËJi\R})N :0J/ΈixGd j E?mP ytxey24ƕ[v6/1^P}Y!@V 4WiBd Xuy;]#Sd~%fx0|:%ev$,5KWI%qta.Uon,^ +sE^lvhl Nmr'x6{Vw㕋67Wɪ?kf^|<"QȅݛőXaVJM[_,e0d.<VAc2G+dkV>,ՖaG&%Kyž) KgDot]FÄE^/@#E'MqCq{VH"rn#fj3Kfx1=55àFmg'杫@{Cʬbv}Wd,K1-DX\|a!,4k,ZN wѐƧkpf,p[7b]1^yd~SJuQdMͺ@0 R|+PapNH }bL{}M$E2amxp]d1r <~V:a'? f%.I1ozܪ,K)8={Zҗ\ARmw5x֙*aP")|vFy%5B0` #f9r*D\g@H4*zItMɔNE}e7Gj>Fg> KҙE Jtѵ*Z,+й:Ѱź,AGj|ɦ&-@7I-O>ؙnU]:§2h*q}{a^ P>SBz#f#|6b:@=߇+"Ԏ|2BE r-QEYj3<qb^$TЧI'':_㜭3+}B&=5BĹR01ewC!qeGcۣ3Fw80lYio(lȌd]1҆Llźc&AJxh7 2[V0,6(~>fͭBkZ뽡 wVO WU"f0/q1`Iۀ:RH_*{pOb_)6v6-h'?:_ <(¦8χ;u2U>YBk)t>>ɢc瞜Bdy=!LtV picy+{EXĶ~;Otr58=q<ĕk]ML\DeVzf/Ϊ3kbEl*odQ ޭ;}EƘg)5"Wx)GVWK37)!ktP.8Is#@<j$ b :oX>ܽꚋ'>Q:֥ninş< $%a =E )V+ `9iദ%goLk\K>="?i /BJ`/9dyU'=;d"g1R` Fx/cJrsf׸IR@K|-bwpb͵h^[_- 6ӏ/9KUG zI2lNfwQB@O}9S} ygņ+hhBr< ǸW;5}w&8 ERAK\ʌſj]ퟻ,񳿜ufR_=BԽ;JS%[gxk#VCOuCPd= ;6 b8B @@!g1ى21Zķlaa^$M;p\fK*s5X:'GB1 kwl)AO X\>D'qEryg'.8Jp /v?qv-<*Su?,l-}#.O/a㜲2K5zB~j47~PX ShA5Fs ġ*ѕQ!3LL Y )ir#Z҄~Nh7toa,9$$ _)A7n\yџa :]#?֫N3'_^پR_sjð>1k0x?{H~grq$- <(|rծ< 2Bjüf0HQZ/W_8ظ3b)plw~@nfXSu?_B8HYV:$ef5_C;wed]ߦ_:R;]Q=W0˝W4:Sx3뷶w(,:)b{J^"jSʇ}J5fh{sֳZj PkX9d2c|<4H rV[~%ͪ?Vsfq5x8 cg#g\2zczYL0o.uE%`?+8'kaɁZўhы aݭ&/ ]6Bp]#NYRUMmxd|x=: ,c0^{N'08T7e.JK\PCD1O@+KR\,`ytm80 Tx-}Eᵇ ^(dhz ̷] U†pm5 ;t45|HmbjGvr gRIU+P|Pq%T)aMM-yE;ژXTI RKrYX32LnHf?A\5jdB7F}p٤'\V/0."!Ι7ٯ5ɐ'qy%ja1 ΁` > ïJT,^̻+WK!) Bemn%&즲Ӭ3ǣ%yljk$0A/١p46-PE|lD<fMv&0Q)O?jJ}!zizUϲGF(.q:? vΨJthGV'3C%Bp.~%44 w(% ib;8nq8X-,9%={/fmYCO@h<ы|LV/)M(:J7?B$P|}psmXdTfϲٓ4mז;]fxo]@hV)jA L./4QoaJßFʼguLxZGXÿl{ui7j;/&ǍWj0Gz;x!6D{ł0席נ[9N9_#W^z/cܐ15qǏ9.Vf:ō-(?Zkw }Ob3|.ivs) 8HDI`ˌ^2);:{jD랴A߿dsij1E̐%BHjK$FĻ2oC-I۷,e $wSU͢,\5irm_~-WŗmmA0wz!NFk6E,7c/HE (}%s٧>9)]ʈ`h0'{<|0Ԙ@3[0nڭ gIU0HA{WVE?i'*k9j߼mcaD׌C\Ll;R, k-'=eWtPj:ޚLxi޿_ǜUd\-&X#HiRzq.w<8Ѽ+& #RF%3Β Ol"6s=u)(e/,gyƇ<%[k/N7w҅P9 89p%% 1޴u(2n3#s>㏜Lz=^lX 2>ߝ&w;ҷswb$i8mf#@Z{B[u0Q ,3)#1hq`K4nKH`Ofd)1IѺzU@9Kїs.UcOWuO(vjLtM bKؚ/ՓKpS>dU\.rOe{ 0mrf.founmSAD 8>ƌIً"oZ>Z)2Aô*?7i>/l|!7NkH:*đ~BxWtyj$;Kiv#J~lNI6(%nDMpȝ62h0y\j0Xk^7MV. ^ORdj&rH*P`J}LJbJyڎ@{z4AcMdFz7bCVWU,Rc[a[^=c?U{!ڲN84@(=6{맴kgn =\]}/t&q=np}.oZύM$&ȺvA\nUd h\7",27ptd!)>gHXvԁ[ČȤ#/1Yޛ7~" SԒnYA8uIr§gK)Ȏ}*gUY*ܶoK?g&d$R7kFay kXAMީlC{cRxѹ2gOc6P4eùzS%Sb(tn(#}=-ç28kb`sƃe$sÀHxuoU(.{Ÿ~ zs'JZ3mK5z^?6OB-<#? 'IPCmqa~bYM.sԤ)r&O~X:oxKgt4hg.5y|o^@2`J紹BO 7nBr#d(6z M`m?Tu,|͡ݺX>otsJ.Zl,bR),U Wns8F^< iX85E ;_}cv;7CwDIj!,ۘN{oRRVW2j"#J<@`0)EXO8DXS3#f_ 6QɴJ6)#չ U=;#<tIh)tOz<Nrz.Ʋg9ِk[E{4i:O-h=__ "Ea:-&%>||}X} WGc^5G£Ɣ~C3D?vH4a@45A\1}] A+[4-u{\Y&ŋ Axd=Ʋ&R p]o%aL؍k6Vx=ʾs:~CuD΢Se`#ea0A^+ N5-x<,PJ}.rcqKiL&գTík\?xDt(aTyq :h^lY1,,'WSv*G3O弞*嗳 oU2Oiz@CZz#ޫMts/ 0"̎Ե(xk~'98RM5bkRsDqhb˧BC? qfP~wsYA rk9,LVo-R*ƭ7.T##駶dGwtOGɢ o{`MEYk1k\{~Z}""|ؽ=Au`eC"gEwh$Ż ؘ61nC>s'Ɛx帳rxS x]=>qZq( U1,v nl-d4:4r")hfRn|4 DH4k&s|`WB@η#?r"$<ńŦk.;Գ:&tI/~kSC5 /dz+D}}\{B'K@fjLVzi0.+jZ[{V<+;P)Ǽ(|` L‡-fem# żLq]aSǕJ? PD8FZcR̓Fq w\E6Ebƾ |75SrY0RVxcH{`3+Ն0bɻ仐}kA;"@Eq>eb-3(nuMom2#dQIO; }[֞NW pVp4m[G ǿ]gr ùKFPKyɝS̨Y$ dE2ٗC-¬NnȄ` ?Uf@.̚!7K|!~7r#ݷ\jBQUxLH֏>ϗz(5 N`&<SJ~k1o%. M[%\$qlFEZBG`WUQȧrH>y vi2s|uni M,`i[~3Ju-Ա%*x%O(=H(8>A@r!^ԕsKYc: Q '@3qr,;{uLI0 w}fBʳAH.0iݸ~yCAڹOF#\ZcA.+('sZSKPʿU`kOHgT QߟMi\(+;VLu1d,@@p$[UmH?3(:JI=M9V%&G*I,S H^eAJV]qF}- B:ķr"W[+*Άq@D v9B]V9Pm7'hlX4=cC;y)Mp|{zii]pxqI\ܳXß: C5/^j\N!As:.aJѲJ@K\E : ԾIw,qRs2kڸu\l?V g*bpb}(MHKz)%dI34ZלL1g3;Dȕ.D |;IVɌtj@O5rV׼ĶVJ{l ؙrV ;'II078޾1|>b4?pK, ]^"&f90[&a6ޚ 6=PbQƕCQ]h[Mߐ35'#x'?Yj\(v,_%36^9ף'"Te Z.Վf(up9fV2Փ 8 l3A5 )[Вj!yūV,㫃&W6;,5~;5 /*m5Ztfky\ŞL2b8?DwA12uO0鵅zp^aQKb=p0 Kɯ kHIO*rQ3kcķw~[;<5а(!@ kH3qDʃʅ;+Ƅ_'H$8vSZ]6#\Æe$6lP_],[ȫ3C-,a$sCSQvĥ]Ms誐1VXDnoqxJCٿk_Zrݍ$mvzM'y(}Y oy i+]]Av!@pFN^a`~+^+3[ 7k!g1oxƴjWs_u9;1fB0D4x/ON(n]+kR-VWьVFl9۬G|BËPJo{?c,+,Jit0:f&ev ?u/:1-xN-]D1fyy%Kd5luQ4'J<44h^Մ7=b%f 븩P*ɬ[9@18>{tޯ%ZI6 j}KƿOﬖ)Fa`PvwէETtJЉ6쳅²k7 #s#%keŭՔՏ9q~FhCGtCusq^fcDe3"'vXy!r'r"gSj A@݅O(εȵ<qUѦ ,uk#D)`illCʜLc-}^32n;1g1RˀovLv\þ%X>WG9w^>stSwsuʮA`OC|!qCߓ~&9xğhj{88&o¸θ) @EH72ߕH99$ y,Ѫei5ֿFe8,Oa6%2Bʽ"Lp++Vp[je~0osV՗d\&]S3Uj=YֺjduO7ј^5QMlBy&DORqHO ѵfM6D}gt;ƷwLgr>"Oi5q*D±;UѨ}k_=Ia@rŚAD"|.rn)åͤ= JId3ua·B~N|C4^fÎ dr:<"R2+ғ(o0a~nψb[lbfa|HˆWiBeQK١~Ņ1\:/%ݪ%*>TLs41?n\ߝمR=M)%ґHB}w 8bU^򡦬DiYYu=D"=Rsf>ZHb jhx4 $XӿŬNx"s|o풧]-,?޼Wo(a}7 Yj|g|g@7 "鶁YF5UTob;'cH#E&2i*l2Qj&UTx0+&v١Z`zG 7doqH狙]z׋Q հrsi-,;I*&*#MwNzvDwL&<(VTYo (EqBmUγ4um-6A+XHu~=ư@JԚ^ʝ⣛iq^ 1n'Fh3Fy!?tt oeׄ#$UҰ\9F`720ʫP3kΚvO<4$(f"XVI2e;EmcJB^fC;i?f œx @_uI^)[P>Lx;6\s+tqTׂy+uݜH-JǃZ4Jūh['$5u_Y iu`C<a"epyH]NN1[-6_of밻!nZQhg{:,- G.>[1Ѵ:I_%0ݱaGY v>%{>卌K,~ jZf_t^=9U4/7?QTzq.H' ]{-&>wrv*Rj<&:\>S~uw=Fsλ,ևJB7_BJk$2כZ>xjy﬷{lOA@$QC|sZ ^Pk1րe )x 2e+%n Ķ+ 59LܠHP3h.AWG3n-2a;~$bxjD\ T\~" (8AtwB&w|ǰZDsw>.O3 ^o-'%$|)%wB]fk.-lR&O͡X rozvS0Y#ls[NW]P1x?(=<ty%XB/=o#OEm~,ߕū̟|D 5#*Ku xY0һ`eV9I:i؃pDZ`i2}Ю6}M뺺FL)zWFޠDh*YV!?F\KA:S]C'Lal&_,5kf#zWu6v N7NNũ킴4sTY}Ll{2# Uf41];g,`聱Ϸȳ8F vdnSk 3X %҅okͲ:똫vb Z($y+;n|efS/BiiE*ѿoS@4#l ; o[Yi֑w,DЯrMؽT!h^W?NM[K*~W0. ia&g({&`nw^X,$q-Wzފ5pO%#3`tpS^Os,\ʚ%Z!hz]Y3'{l[FD81 -rà],0],ϞF[0_a.PhJ,Vz$bNtmJAU+>aw Ȓ2J@=w&[*XS! $\֊)l=aߡr'qB!Bzn)oa8;wAyjx a*^a($].:4wFrFz|]LJsP+_y]lՍ}6V4' [FH ^܄F4P@OENag<.cw1hw;j2ܩ .a%ϟ;BtQg=eNO%ǒ۬B.>O;)"f_9X{,8^9~|[jjk55u7 oſnD/)F#V+k ^FhqB@8F6iX).o!<fYP27Q{/ωD) 'aw ] ?@#q%x~}.>Wovޓ~5xVC|ٌqD'w=L?lM6XS{hҨY?Fn|XQhGzI5l/ /&!N5ƿŶŴn5/D35c^@h QD؋(@{Q_m@̘x,k9: 8:ø*b^*.,DJ1u#l/ΏV>as .D̆'Ӟĵjuj<س}Jj -+FX!9<|b=lA[h,,9&e |J*VxHwlY,*{L'i EAyFe"WБgs3| /']؁êW7R8R0}dGi̥:;_A~+X6!hp#)95 ')W'e"$c2lGM[k^k#1?Zj!:˒uzhަ*qy<_{4-}MPYWe k3b$$ᅌ0AFMS:(f~à`RUE y \ Od{`$alDYʈ)Gz3ǧvUЊ;ͨ[?RخLkt%!L7DXk.:}BcvRS݁|<8,4-M{^6I#8E* Mwk^{*lqVs5#뫫tr潦&Xqǽp^O5s(tTA=5]&a7TR@ $㈔-(bID>(`X~GsF2`A8N;sRV/Rmbc77'ho` ͓0=2] RX_H&G%S:LLTdpJ u4& f6WY(cQηMs ]\RՀ$ *@{UTr}zئIh'ŏJTpqb{ Dʬ3%Lr3Pg!ʼPC+z&?D*+ې0e#Hpxx<"Gl1nUk-Yd+:S{< 1KS~JnK͎Z})YK4ʨeǓ柂X"ۍ{(yPnloYœ.9xi+i77ʗRz_s6E8(G_ xe#*۱ ȔrثlC!5g?̛dȡUNZϯvs pMDX‰N4֙F czc)kb ऍ|KVቮ ܅ תâ ˍr#R!!x3cGӛ p9Ŕ۹7rIEi `ybN D,Te%\,2Nn3D=vgOl$\f)^X߮Dvm~obkFT 2(R=l3*PXVO:GhPwlYbxU$?rcPe!L|<<>#Drܫ:}NkPsU_[HYU8PٟFeUh.9<Թ  [iCdI*j?3+b#ǂuZh*Ydƹ=_0ò E Aq!&Xs;v\ߵcb~bϮ Fceٗ[4L˰4}v2/}:IkhyF[Y'`ԼHeio9hݶmZS]B2c'  .\ëF~LQ4]$>; 3k)Kgē"2  K*>${Us0[J*3޾AF@g7وwzoY";R}CĻozVO_RC >3]]ɩfy9/ # wpӜ "ܼU'cxVp>`*s>^"K2B+FPaX9WPaԬ(l jj{7!TؙqIm7d'%li@Pγ0 ua:||lbŨArT+_(FA6+82G's?bL[($]~~6㏶|IRhZ^L|eoe,(D:k۞Qv3b;Y?x#i{)Kk!kNe8k͆jRM{k1LYkœg{A[^u x1:Mh)he]y@v~cM jOܧDZcL3u*ltP]@u뒯ћ ܏|̓4Z`4;%?Pњ8MF|fSm;~%g4kJhcMjkX/M6iZr_LQz&Y\>t6cn!ECpum1[ˤ.,'r~Α$g䠼Nv|[O-nFqWT57Wkּ=,VXDXK0 n>|FqJm.8/Utqn%C8 EN?轆O(} ڙQvvR[)o5dq\z>s#xӴ[O@MbbId-U Y q5>WjĊmu)Vb>p~  0Ze=kp:n9*5-ʬᒔFC~3?FPMulc7Ð=MɡuVHgO݋][ZV4F= =-0otwRx~D~*?[ʈinƔ|!?FNiWF9a0.3o= KYN\`„7L+i%AP<_lؕj̸,$qRS; k 5vr0`CáG1poނ.̈x-lIцNdaT -#b'Zdk`[|uhׯ]?*=sG^TNMpjC9D?eMZyݳụ3lHEBNp;`1#$I?9`[4PNEnI'Dq6oےBmF!/:H>wf.ᇖz &syUf;[>W7Y;٧n&Cx~fDPw ̗vsֻ{ed]ZAW9 3$0w3-xqUܩeN!A=Q<8mرX̮҇|9{_;LpEcT{#UԒR@c;YUD|CHb1>T1uOU2bN4-8;I HC'`y/yQQm0. "Kw]9=NU|' MQ?hI"ϊ[_`@HP)c{ !_vR ě*~j2v_}~ϵyDO3V= UY!T[AV™! /,BXpw .HdmOÈ$ 򥌪z{iBIwd~cwbӟ#yNm:_)?ò,[ Ru?WԷ]j.GeJxn]FOON7nZryJ9a%$Cq pJvH/Othk̼A%l)#pq^zI'2h"܀4"Sy7οE?e?Z ".EбjNcGh8.<-l lD+ w9 nCP!TiohmvCbSҢ*&0w74 :%'duFH-KO-D]DꎫTX@(xT737q2Uܕ:୽ ZNb:kļwPƇ=쮯r9VǪP 4&h4f0>s#/tqJ։cӊgR3&&"c8qE\G+mPtBKܞo4)g%x2c3^ r4A>3=gB@n!j?'Nfj4v"LprO|z{k~GkP3($Eש!=`ՕxNߓKd%d@ (r_A<[Wh&Q ܏&Iߤ~(mt+A/MzE_@"wy◸JG0iYhmDU2V&Z}@YPF$B> 9y4jlB< Wig&fe8 ?4틊:Yq )J9SJ=H_8HS_6yrTۂLBEff/0QȬlx!m>p\C A؄As32I;;s^`4]_F6f]m1#`;.کĒɚz4.b] ?no0&!°tIt/P}ۨDeVxhH&/)jhm=xΣo,UwhT爴 ?%*'mNwi KHx=Tf*뽰{fzӇe\٥"D)ԅ <";^XR:#8 :[ %s"Ă+xS):FLT{iㆣ(P_1KtpFJiv?4@o-9ߡyWtԇ yM]4'x2U2qGZpxDfee4D)Z`Laoϫ,hYC(Q˲rK#}dևE_S6#Āvx#PLfHM ̈́5ɐ $kETc腡L{"Yw('!OߠC5'h蟓<0HPټpjR V޹+S!){:4 1~xLU\D%ʶk_fe,u"P]>kXFidct єS Qp‡fĝH;l);]CI`veAv~]BOz+W+i)K6?vǍͨAnGK [[?sfă,S/֬EcAX}t:DP8=lyTR8`Wv&5Oİ_Sҩ;AZʁ۽'r;_X Jɱ yNly(<)GTx8d>ے,Ӄ ú~hd2qR'#V6AqNUg.7Dgtz~x!ka.ux. !;ZZC!ȶLY߁8ƤF8|SțC[B :ڬui~;yZl#sla!ny=ek>ĦV?baª]n~5p"3"z+"vb_|+fZr[z0żQj&H{" c: rhnX~hEǹz4# {kǨVYҗ# e!Q9n.م'!EqrI4|$7QsZ|5I+XD_K.|.RXJ[i=96Bm=(aOܘMŸh>:dKorFJ8cj0tFy&}Y9uYjNvfMY^7,<ז#GU04 d9KHؤ #/KOs(߂W'I9t%j ^;@%~40LȝU( 4(Qn42f=<\ω(d)\xպzD}ub03CsSo|FU$>Xvf !%iaz6 j|WKY½U6H6nʲq :2LY_ޠ. CsE_nI8o> ʈN.x7WFX5(4t| o:-h  ;xTД:@"ʖ4D"Z}V"}R6ّ+Bͬ>Nj\>Cw n`C=ˋ`B08kMJʘCDH<_QF/K9VA/<]A7@Ƚ7J{3@ Z.G9XU%` A?xZJhT Õ+rwЇ2#c-(=FwZŽ'+ qŠ$C'z]Hn1s 8*FCdϼ'F: UH|?P*++x>7 48SQXb2Uڸ#(*22 ZRy5iY޳"E#Zs7 B5>oB5xG#G xh "q%řzʼn/4rJjۂkp AeF]wk @h =5޿Wktr[ Bu[̂p{gfE,Y^ܜ)v񉣍MϼHz|N0(KMA24p O+Jvq14odD$NDW/LRl vsG+p2ҟ|jt2L8\xA=:<-q2"P6pt4͞#dpj 8"1Y cEρXq%J5TTڧޠ%)Z>%) (ak YZ