libdns1605-9.16.6-150300.22.21.2<>,c1YDp9|XX㮮eIGHbrr0eu^\(%"<roKs ;ڼRY^KF o$>CiWdyW%PxodB{8jPZdăI4.?0cS t'|#5rw4ZͶe5Df[ڀ# @?d  # <`dlp      Z pxh(8b9 xb:b>3@BFQGdHlItXxY\]^bcdeflu0v8wxyz<LPVClibdns16059.16.6150300.22.21.2DNS library used by BINDThis subpackage contains the "DNS client" module. This is a higher level API that provides an interface to name resolution, single DNS transaction with a particular server, and dynamic update. Regarding name resolution, it supports advanced features such as DNSSEC validation and caching. This module supports both synchronous and asynchronous mode. It also contains the Advanced Database (ADB) and Simple Database (SDB) APIs. ADB allows user-written routines to replace BIND’s internal database function for both nominated and all zones. SDB allows a user-written driver to supply zone data either from alternate data sources (for instance, a relational database) or using specialized algorithms (for instance, for load-balancing). [Book links for SDB: "Pro DNS and BIND 10", R. Aitchison, Apress]c1YDgoat02!SUSE Linux Enterprise 15SUSE LLC MPL-2.0https://www.suse.com/System/Librarieshttp://isc.org/sw/bind/linuxx86_64!c1Y9c1Y?f1bffa4d03620ba0e42ac9221506a23b091d55b7fc3c5c8078ef8a251145d050libdns.so.1605.1.0rootrootrootrootbind-9.16.6-150300.22.21.2.src.rpmlibdns.so.1605()(64bit)libdns1605libdns1605(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libisc.so.1606()(64bit)libjson-c.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c*by@b1@a` @`N@``_#_:_ _d@_`_R,@_H_;_+_^)@^W@^@^I^v^t@^t@^Q^Nt^@]@]X](v@\\U@[#@[?Y[,[[{@[{@[ZnZ@ZZZz@Zg#Z'Z[@Z@ZfZ@Z@Z@Z@Z@Z ,@Z Z @YzYm@Yh@YZ1YV=@Y /X@X7@XBXwoXW_@WbW@V@VV@VvVwVVBU@UUS' did not limit the number of saved files to . * Add 'rndc dnssec -status' command. * Addressed a couple of situations where named could crash For the full list, see the CHANGES file in the source RPM.- Changed /var/lib/named to owner root:named and perms rwxrwxr-t so that named, being a/the only member of the "named" group has full r/w access yet cannot change directories owned by root in the case of a compromized named. [bsc#1173307, bind-chrootenv.conf]- Upgrade to version bind-9.16.4 Fixing two security problems: * It was possible to trigger an INSIST when determining whether a record would fit into a TCP message buffer. (CVE-2020-8618) * It was possible to trigger an INSIST in lib/dns/rbtdb.c:new_reference() with a particular zone content and query patterns. (CVE-2020-8619) Also the following functional changes: * Reject DS records at the zone apex when loading master files. Log but otherwise ignore attempts to add DS records at the zone apex via UPDATE. * The default value of "max-stale-ttl" has been changed from 1 week to 12 hours. * Zone timers are now exported via statistics channel. Thanks to Paul Frieden, Verizon Media. Added support for idn2 to spec file (Thanks to Holger Bruenjes ). More internal changes see the CHANGES file in the source RPM This update obsoletes Makefile.in.diff [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff bind.spec]- Upgrade to version bind-9.16.3 Fixing two security problems: * Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. (CVE-2020-8616) * Replaying a TSIG BADTIME response as a request could trigger an assertion failure. (CVE-2020-8617) Also * Add engine support to OpenSSL EdDSA implementation. * Add engine support to OpenSSL ECDSA implementation. * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0. * Warn about AXFR streams with inconsistent message IDs. * Make ISC rwlock implementation the default again. For more see CHANGS file in source RPM. [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]- bind needs an accurate clock, so wait for the time-sync.target to be reached before starting bind. [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]- Use sysusers.d to create named user - Have only one package creating the user- coreutils are not used in %post, remove Requires. - Use systemd_ordering instead of hard requiring systemd- Upgrade to version 9.16.1 * UDP network ports used for listening can no longer simultaneously be used for sending traffic. * The system-provided POSIX Threads read-write lock implementation is now used by default instead of the native BIND 9 implementation. * Fixed re-signing issues with inline zones which resulted in records being re-signed late or not at all. [bind-9.16.1.tar.xz]- Update download urls - Do not enable geoip on old distros, the geoip db was shut down so we need to use geoip2 everywhere- Upgrade to version 9.16.0 Major upgrade, see https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html and CHANGES file in the source tree. Major functional change: * What was set with --with-tuning=large option in older BIND9 versions is now a default, and a --with-tuning=small option was added for small (e.g. OpenWRT) systems. * A new "dnssec-policy" option has been added to named.conf to implement a key and signing policy (KASP) for zones. * The command (and manpage) bind9-config have been dropped as the BIND 9 libraries are now purely internal. No patches became obsolete through the upgrade. [bind-9.16.0.tar.xz]- Upgrade to bind-9.14.9 bug fixes and feature improvements- Upgrade to version 9.14.8: * Set a limit on the number of concurrently served pipelined TCP queries. * Some other bug fixing, see CHANGES file. [CVE-2019-6477, bsc#1157051]- Upgrade to version 9.14.7 * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0, queryperf, sdb, zkt from contrib as they are not supported any more * Added support for the GeoIP2 API from MaxMind * See CHANGES file in the source RPM. * obsoletes bind-CVE-2018-5745.patch (bsc#1126068) * obsoletes bind-CVE-2019-6465.patch (bsc#1126069) * obsoletes bind-CVE-2018-5743.patch (bsc#1133185) * obsoletes bind-CVE-2019-6471.patch (bsc#1138687) [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185, bsc#1138687, CVE-2019-6476, CVE-2019-6475, CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465, CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738, CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136, configure.in.diff, bind-99-libidn.patch, perl-path.diff, bind-sdb-ldap.patch, bind-CVE-2017-3145.patch, bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch, bind-fix-fips.patch, bind-CVE-2018-5745.patch, bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch, bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700, bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468, bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330, bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505, bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583, bnc#1127583, bnc#1109160]- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add FIPS patch back into bind (bsc#1128220) - File: bind-fix-fips.patch- Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367 bsc#1118368)- Update named.root. One of the root servers IP has changed. - Install the LICENSE file.- Add bind.conf and bind-chrootenv.conf to install the default files in /var/lib/named and create chroot environment on systems using transactional-updates [bsc#1100369] [FATE#325524].- Cleanup pre/post install: remove all old code which was needed to update to SLES8.- Fix a patch error in dnszone-schema file (bsc#901577)- Add SPF records in dnszone-schema file (bsc#901577)- Fix the hostname in ldapdump to be valid (bsc#965748) - Patch file - bind-ldapdump-use-valid-host.patch- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch Fixes dynamic DNS updates against samba and Microsoft DNS servers (bsc#1094236).- Move chroot related files from bind to bind-chrootenv (bsc#1093338)- Remove rndc.key generation from bind.spec file because bind should create it on first boot (bsc#1092283) - Add misisng rndc.key check and generation code is lwresd.init script- build with --enable-filter-aaaa to make it possible to use config option "filter-aaaa-on-v4 yes". Useful to workaround broken websites like netflix which block traffic from certain IPv6 tunnel providers. (bsc#1069633)- Add /dev/urandom to chroot env- Implement systemd init scripts for bind and lwresd (fate#323155)- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)- Use getent when adding user/group - update changelog to mention removed options- license changed to MPL-2.0 according to legal.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add back init scripts, systemd units aren't ready yet- Add python3-bind subpackage to allow python bind interactions- Sync configure options with RH package and remove unused ones * Enable python3 * Enable gssapi * Enable dnssec scripts * Remove no longer recognized --enable-rrl- Drop idnkit from the build, the bind uses libidn since 2007 to run all the resolutions in dig/etc. bsc#1030306 - Add patch to make sure we build against system idn: * bind-99-libidn.patch - Refresh patch: * pie_compile.diff - Remove patches that are unused due to above: * idnkit-powerpc-ltconfig.patch * runidn.diff- drop bind-openssl11.patch (merged upstream)- Remove systemd conditionals as we are not building on sle11 anyway - Force the systemd to be base for the initscript deployment- Bump up version of most of the libraries - Rename the subpackages to match the version updates - Add macros for easier handling of the library package names - Drop more unneeded patches * dns_dynamic_db.patch (upstream)- Update to 9.11.2 release: * Many changes compared to 9.10 see the README file for in-depth listing * For detailed changes with issues see CHANGES file * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137 CVE-3136 CVE-2016-9778 * OpenSSL 1.1 support - Remove support for some old distributions and cleanup the spec file to require only what is really needed - Switch to systemd (bsc#1053808) - Remove german from the postinst messages - Remove patches merged upstream: * bind-CVE-2017-3135.patch * bind-CVE-2017-3142-and-3143.patch - Refresh named.root with another update- Use python3 by default (fate#323526)- bind-openssl11.patch: add a patch for enabling openssl 1.1 support (builds for 1.0 and 1.1 openssl). (bsc#1042635)- Enable JSON statistics- named.root: refreshed from internic to 2017060102 (bsc#1048729)- Run systemctl daemon-reload even when this is not build with systemd support: if installing bind on a systemd service and not reloading systemd daemon, then the service 'named' is not known right after package installation, causing confusion.- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue where an attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]- Fix named init script to dynamically find the location of the openssl engines (boo#1040027).- Add with_systemd define with default off, since we still use init scripts and no systemd units.- Don't require and call insserv if we use systemd- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ * CVE-2017-3135, bsc#1024130 * bind-CVE-2017-3135.patch- Update to latest release in the 9.10.X series * Security fixes in 9.10.4 * Duplicate EDNS COOKIE options in a response could trigger an assertion failure. CVE-2016-2088. [RT #41809] * The resolver could abort with an assertion failure due to improper DNAME handling when parsing fetch reply messages. CVE-2016-1286. [RT #41753] * Malformed control messages can trigger assertions in named and rndc. CVE-2016-1285. [RT #41666] * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure. CVE-2015-8705. [RT #41397] * Specific APL data could trigger an INSIST. CVE-2015-8704. [RT #41396] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. CVE-2015-8461. [RT#40945] * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. CVE-2015-8000. [RT #40987] * For Features and other fixes in 9.10.4 see https://kb.isc.org/article/AA-01380/0/BIND-9.10.4-Release-Notes.html * Description of patch changes * BIND 9.10.4-P5 addresses the security issues described in CVE-2016-9131, CVE-2016-9147 and CVE-2016-9444. [bsc#1018699] * BIND 9.10.4-P4 addresses the security issue described in CVE-2016-8864. * BIND 9.10.4-P3 addresses the security issue described in CVE-2016-2776 and addresses an interoperability issue with ECS clients. * BIND 9.10.4-P2 addresses the security issue described in CVE-2016-2775. * BIND 9.10.4-P1 addresses Windows installation issues, the %z modifier is not supported under Windows and a race condition in the rbt/rbtdb implementation resulting in named exiting due to assertion failures being detected. * Following patches removed, fixed upstream * cve-2016-2776.patch * cve-2016-8864.patch- Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829).- Apply cve-2016-2776.patch to fix CVE-2016-2776 (bsc#1000362).- Remove the start/stop dependency of named and lwresd on remote-fs to break a service dependency cycle (bsc#947483, bsc#963971). - Make /var/lib/named owned by the named user (bsc#908850, bsc#875691). - Call systemd service macros with the full service name.- remove BuildRequire libcap. That is only a legacy library, not actually used for building. libcap-devel pulls in the right one.- Security update 9.10.3-P4: * CVE-2016-1285, bsc#970072: assert failure on input parsing can cause premature exit. * CVE-2016-1286, bsc#970073: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet containing multiple cookie options to cause named to terminate with an assertion failure.- drop a changing timestamp making build reproducible- Build with --with-randomdev=/dev/urandom otherwise libisc will use /dev/random to gather entropy and that might block, short read etc..- Security update 9.10.3-P3: * Specific APL data could trigger an INSIST (CVE-2015-8704, bsc#962189). * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure (CVE-2015-8705, bsc#962190). * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway.- Update to version 9.10.3-P2 to fix a remote denial of service by misparsing incoming responses (CVE-2015-8000, bsc#958861).- Avoid double %setup, it confuses some versions of quilt. - Summary/description update- Update to version 9.10.2-P4 * An incorrect boundary boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. (CVE-2015-5986) [RT #40286] (bsc#944107) * A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. (CVE-2015-5722) [RT #40212] (bsc#944066)- Update to version 9.10.2-P3 Security Fixes * A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #39795] * On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795] Bug Fixes * Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] * Several bugs have been fixed in the RPZ implementation: + Policy zones that did not specifically require recursion could be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. This has been corrected. In most configurations, behavioral changes due to this fix will not be noticeable. [RT #39229] + The server could crash if policy zones were updated (e.g. via rndc reload or an incoming zone transfer) while RPZ processing was still ongoing for an active query. [RT #39415] + On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] + The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] + The server could crash if a reload of an RPZ zone was initiated while another reload of the same zone was already in progress. [RT #39649]- Update to version 9.10.2-P2 - An uninitialized value in validator.c could result in an assertion failure. (CVE-2015-4620) [RT #39795] - Update to version 9.10.2-P1 - Include client-ip rules when logging the number of RPZ rules of each type. [RT #39670] - Addressed further problems with reloading RPZ zones. [RT #39649] - Addressed a regression introduced in change #4121. [RT #39611] - The server could match a shorter prefix than what was available in CLIENT-IP policy triggers, and so, an unexpected action could be taken. This has been corrected. [RT #39481] - On servers with one or more policy zones configured as slaves, if a policy zone updated during regular operation (rather than at startup) using a full zone reload, such as via AXFR, a bug could allow the RPZ summary data to fall out of sync, potentially leading to an assertion failure in rpz.c when further incremental updates were made to the zone, such as via IXFR. [RT #39567] - A bug in RPZ could cause the server to crash if policy zones were updated while recursion was pending for RPZ processing of an active query. [RT #39415] - Fix a bug in RPZ that could cause some policy zones that did not specifically require recursion to be treated as if they did; consequently, setting qname-wait-recurse no; was sometimes ineffective. [RT #39229] - Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] - Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't result in a bug during operation. If the read failed, named could segfault. [RT #38559]- Fix inappropriate use of /var/lib/named for locating dynamic-DB plugins. Dynamic-DB plugins are now loaded from %{_libexecdir}/bind, consistent with openSUSE packaging guideline. - Install additional header files which are helpful to the development of dynamic-DB plugins.- Depend on systemd macros and sysvinit on post-12.3 only. - Create empty lwresd.conf at build time. - Reduce file list pre-13.1.- Update to version 9.10.2 - Handle timeout in legacy system test. [RT #38573] - dns_rdata_freestruct could be called on a uninitialised structure when handling a error. [RT #38568] - Addressed valgrind warnings. [RT #38549] - UDP dispatches could use the wrong pseudorandom number generator context. [RT #38578] - Fixed several small bugs in automatic trust anchor management, including a memory leak and a possible loss of key state information. [RT #38458] - 'dnssec-dsfromkey -T 0' failed to add ttl field. [RT #38565] - Revoking a managed trust anchor and supplying an untrusted replacement could cause named to crash with an assertion failure. (CVE-2015-1349) [RT #38344] - Fix a leak of query fetchlock. [RT #38454] - Fix a leak of pthread_mutexattr_t. [RT #38454] - RPZ could send spurious SERVFAILs in response to duplicate queries. [RT #38510] - CDS and CDNSKEY had the wrong attributes. [RT #38491] - adb hash table was not being grown. [RT #38470] - Update bind.keyring - Update baselibs.conf due to updates to libdns160 and libisc148- Enable export libraries to support plugin development. Install DNSSEC root key. Expose new interface for developing dynamic zone database. + dns_dynamic_db.patch- PowerPC can build shared libraries for sure. idnkit-powerpc-ltconfig.patch- Explicitly BuildRequire systemd-rpm-macros since it is used for lwresd %post etc. Then drop pre-12.x material. Remove configure.in.diff2.- Corrections to baselibs.conf- Update to version 9.10.1-P1 - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500); (bnc#908994). The recursion depth limit is configured via the "max-recursion-depth" option, and the query limit via the "max-recursion-queries" option. [RT #37580] - When geoip-directory was reconfigured during named run-time, the previously loaded GeoIP data could remain, potentially causing wrong ACLs to be used or wrong results to be served based on geolocation (CVE-2014-8680). [RT #37720]; (bnc#908995). - Lookups in GeoIP databases that were not loaded could cause an assertion failure (CVE-2014-8680). [RT #37679]; (bnc#908995). - The caching of GeoIP lookups did not always handle address families correctly, potentially resulting in an assertion failure (CVE-2014-8680). [RT #37672]; (bnc#908995).- Convert some hard PreReq to leaner Requires(pre). - Typographical and orthographic fixes to description texts.- Fix bashisms in the createNamedConfInclude script. - Post scripts: remove '-e' option of 'echo' that may be unsupported in some POSIX-compliant shells.- Add openssl engines to the lwresd chroot. - Add /etc/lwresd.conf with attribute ghost to the list of files. - Add /run/lwresd to the list of files of the lwresd package. - Shift /run/named from the chroot sub to the main bind package. - Drop /proc from the chroot as multi CPU systems work fine even without it.- Add a versioned dependency when obsoleting packages.- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Fix gssapi_krb configure time header detection.- Update root zone (dated Nov 5, 2014).- Update to version 9.10.1 - This release addresses the security flaws described in CVE-2014-3214 and CVE-2014-3859. - Update to version 9.10.0 - DNS Response-rate limiting (DNS RRL), which blunts the impact of reflection and amplification attacks, is always compiled in and no longer requires a compile-time option to enable it. - An experimental "Source Identity Token" (SIT) EDNS option is now available. - A new zone file format, "map", stores zone data in a format that can be mapped directly into memory, allowing significantly faster zone loading. - "delv" (domain entity lookup and validation) is a new tool with dig-like semantics for looking up DNS data and performing internal DNSSEC validation. - Improved EDNS(0) processing for better resolver performance and reliability over slow or lossy connections. - Substantial improvement in response-policy zone (RPZ) performance. Up to 32 response-policy zones can be configured with minimal performance loss. - To improve recursive resolver performance, cache records which are still being requested by clients can now be automatically refreshed from the authoritative server before they expire, reducing or eliminating the time window in which no answer is available in the cache. - New "rpz-client-ip" triggers and drop policies allowing response policies based on the IP address of the client. - ACLs can now be specified based on geographic location using the MaxMind GeoIP databases. Use "configure --with-geoip" to enable. - Zone data can now be shared between views, allowing multiple views to serve the same zones authoritatively without storing multiple copies in memory. - New XML schema (version 3) for the statistics channel includes many new statistics and uses a flattened XML tree for faster parsing. The older schema is now deprecated. - A new stylesheet, based on the Google Charts API, displays XML statistics in charts and graphs on javascript-enabled browsers. - The statistics channel can now provide data in JSON format as well as XML. - New stats counters track TCP and UDP queries received per zone, and EDNS options received in total. - The internal and export versions of the BIND libraries (libisc, libdns, etc) have been unified so that external library clients can use the same libraries as BIND itself. - A new compile-time option, "configure --enable-native-pkcs11", allows BIND 9 cryptography functions to use the PKCS#11 API natively, so that BIND can drive a cryptographic hardware service module (HSM) directly instead of using a modified OpenSSL as an intermediary. - The new "max-zone-ttl" option enforces maximum TTLs for zones. This can simplify the process of rolling DNSSEC keys by guaranteeing that cached signatures will have expired within the specified amount of time. - "dig +subnet" sends an EDNS CLIENT-SUBNET option when querying. - "dig +expire" sends an EDNS EXPIRE option when querying. - New "dnssec-coverage" tool to check DNSSEC key coverage for a zone and report if a lapse in signing coverage has been inadvertently scheduled. - Signing algorithm flexibility and other improvements for the "rndc" control channel. - "named-checkzone" and "named-compilezone" can now read journal files, allowing them to process dynamic zones. - Multiple DLZ databases can now be configured. Individual zones can be configured to be served from a specific DLZ database. DLZ databases now serve zones of type "master" and "redirect". - "rndc zonestatus" reports information about a specified zone. - "named" now listens on IPv6 as well as IPv4 interfaces by default. - "named" now preserves the capitalization of names when responding to queries. - new "dnssec-importkey" command allows the use of offline DNSSEC keys with automatic DNSKEY management. - New "named-rrchecker" tool to verify the syntactic correctness of individual resource records. - When re-signing a zone, the new "dnssec-signzone -Q" option drops signatures from keys that are still published but are no longer active. - "named-checkconf -px" will print the contents of configuration files with the shared secrets obscured, making it easier to share configuration (e.g. when submitting a bug report) without revealing private information. - "rndc scan" causes named to re-scan network interfaces for changes in local addresses. - On operating systems with support for routing sockets, network interfaces are re-scanned automatically whenever they change. - "tsig-keygen" is now available as an alternate command name to use for "ddns-confgen". - Update to version 9.9.6 New Features - Support for CAA record types, as described in RFC 6844 "DNS Certification Authority Authorization (CAA) Resource Record", was added. [RT#36625] [RT #36737] - Disallow "request-ixfr" from being specified in zone statements where it is not valid (it is only valid for slave and redirect zones) [RT #36608] - Support for CDS and CDNSKEY resource record types was added. For details see the proposed Informational Internet-Draft "Automating DNSSEC Delegation Trust Maintenance" at http://tools.ietf.org/html/draft-ietf-dnsop-delegation-trust-maintainance-14. [RT #36333] - Added version printing options to various BIND utilities. [RT #26057] [RT #10686] - Added a "no-case-compress" ACL, which causes named to use case-insensitive compression (disabling change #3645) for specified clients. (This is useful when dealing with broken client implementations that use case-sensitive name comparisons, rejecting responses that fail to match the capitalization of the query that was sent.) [RT #35300] Feature Changes - Adds RPZ SOA to the additional section of responses to clearly indicate the use of RPZ in a manner that is intended to avoid causing issues for downstream resolvers and forwarders [RT #36507] - rndc now gives distinct error messages when an unqualified zone name matches multiple views vs. matching no views [RT #36691] - Improves the accuracy of dig's reported round trip times. [RT #36611] - When an SPF record exists in a zone but no equivalent TXT record does, a warning will be issued. The warning for the reverse condition is no longer issued. See the check-spf option in the documentation for details. [RT #36210] - "named" will now log explicitly when using rndc.key to configure command channel. [RT #35316] - The default setting for the -U option (setting the number of UDP listeners per interface) has been adjusted to improve performance. [RT #35417] - Aging of smoothed round-trip time measurements is now limited to no more than once per second, to improve accuracy in selecting the best name server. [RT #32909] - DNSSEC keys that have been marked active but have no publication date are no longer presumed to be publishable. [RT #35063] Bug Fixes - The Makefile in bin/python was changed to work around a bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993] (**) - Corrected bugs in the handling of wildcard records by the DNSSEC validator: invalid wildcard expansions could be treated as valid if signed, and valid wildcard expansions in NSEC3 opt-out ranges had the AD bit set incorrectly in responses. [RT #37093] [RT #37072] - When resigning, dnssec-signzone was removing all signatures from delegation nodes. It now retains DS and (if applicable) NSEC signatures. [RT #36946] - The AD flag was being set inappopriately on RPZ responses. [RT #36833] - Updates the URI record type to current draft standard, draft-faltstrom-uri-08, and allows the value field to be zero length [RT #36642] [RT #36737] - RRSIG sets that were not loaded in a single transaction at start up were not being correctly added to re-signing heaps. [RT #36302] - Setting '-t aaaa' in .digrc had unintended side-effects. [RT #36452] - A race condition could cause a crash in isc_event_free during shutdown. [RT #36720] - Addresses a race condition issue in dispatch. [RT #36731] - acl elements could be miscounted, causing a crash while loading a config [RT #36675] - Corrects a deadlock between view.c and adb.c. [RT #36341] - liblwres wasn't properly handling link-local addresses in nameserver clauses in resolv.conf. [RT #36039] - Buffers in isc_print_vsnprintf were not properly initialized leading to potential overflows when printing out quad values. [RT #36505] - Don't call qsort() with a null pointer, and disable the GCC 4.9 "delete null pointer check" optimizer option. This fixes problems when using GNU GCC 4.9.0 where its compiler code optimizations may cause crashes in BIND. For more information, see the operational advisory at https://kb.isc.org/article/AA-01167/. [RT #35968] - Fixed a bug that could cause repeated resigning of records in dynamically signed zones. [RT #35273] - Fixed a bug that could cause an assertion failure after forwarding was disabled. [RT #35979] - Fixed a bug that caused SERVFAILs when using RPZ on a system configured as a forwarder. [RT #36060] - Worked around a limitation in Solaris's /dev/poll implementation that could cause named to fail to start when configured to use more sockets than the system could accomodate. [RT #35878] - Remove merged rpz2+rl-9.9.5.patch and obsoleted rpz2+rl-9.9.5.patch - Removed pid-path.diff patch as /run/{named,lwresd}/ are used by default. - Update baselibs.conf (added libirs and library interface version updates).- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify./sbin/ldconfig/sbin/ldconfiggoat02 16641785009.16.6-150300.22.21.29.16.6-150300.22.21.2libdns.so.1605libdns.so.1605.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25226/SUSE_SLE-15-SP3_Update/3ef49842c4d2fcd06cb3dbdf5a7b8a33-bind.SUSE_SLE-15-SP3_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=853a59386841446cdeb23e801ce6a22c9bb677a8, strippedPRRRRRR R RRRRRR R RR RRRRRRRR/v؛2h_utf-8179e8c5d7b74845cba2c5a4cb8de75be8c1c457fdede7f5e5105c57cdf4bf546?7zXZ !t/=]"k%{S6y4G 1gC4^ SUn]B{ "WT^(E*#YztLO|a;^hEpYǕ*__V723q]~ȐԾ+m0{l*nudz&a',5% ,Ap-G< "LQͳ w$P{4$FXȊi;0e%X,]ی/mxe~)ۇ]NolyGV}Dۆ*\'5SLK`% am;؜f-K̫u{do5:0. RzˏafNe~Y~k+1? /ȧ =$'Op29KE V̚4^.?^:OpȺ!JƼI"?c> B5O:-ڳ{- \б{nհ qU5ACT+/d)JLnj߳K jP.4]\cȱ7jKB́t>&c =*=X:>E`!pw"\f]Y?1^/B>.uaz kؤO3P ÅP"k%D@lk%=|:.. "aQzTcVb*q$q@$YphDۦ6Bx1 W#~ц'e.XiNRNz ~ElM_,Fn PBUpx4bHcuQ2LF)2yƬWv=z< ?(ۦs}[`a ?3;VpFRP n5y޺oЭ^ Ū)N@Ho9)NiAs~-Pyθ}#jSnl m $qPC7up%!=D{'_3Z:˓ QHqZdUu7]t/ScI0`}Ean";"^Ǘo+dcVFU|!E6D=NՕ)tQ[~[*'T_N 7Nb3R@a,[Ŕ޲.b?]U?8j@Ya% Yb=,4ta~ 鈀YW6H {NI:瘇C7Z*a5`CY_6hB xl5.q U$CǶ_ֶXk_zp[:x'>s^eCC93ؓ`VߒBhAФq-vƑUc{@­cߤnc)po2l,VMTmt&O.?BHg;,WGIuS.mFz sP6{a@q =g63V˗SsEEIzyhsSSk zm^C x1<7ҁ#[t[1> NaA SV e<{"; rF9[;CѰ}Y42TsY zJ጖XO b"q=#"`Q0>ݚ.Zw] ^Rk$1M>yu{rll$ةAqg$ţ^'2,[ 8$(T.M% sd1݈E}:""HD8Q|E~9FE}4R[K:[Dr1!ˀ P 'RAA6-eAq%eL},b^m'twc3/ nRxUJcvmz)e9Ԃni*W\.,jA= eh;=Cx,!Ytdz.I_kysz⩤-1Yxfd0KZc7BGżɓd3fÞ$^/lX#g^[XwI3Jl;&H BMQAB2-u;]+cYŬyI 97| xZYl\OW-G![.y^QP5 '2RNg`O{ p!ЙDZcFvNYN\땷=Et>\1*I`,& N4\ \JpJ<]*tuHI~9/Wݱa f֜|Ϻ,6huB8 3WChVmSd E.}WͤXmNi7T/T\sxuݚQKy/wy)Jt%{'g֔dLq`hS;w, {#<.ONbDV]Zsޙ#,Sur N#|TUl iNlpRw`.V$2Mfk{jre/v)B?FՊ ɶńXHKĉs]ǿ #w؁Wi'9* EÝDl me@DH!>< RW{x.C[:9):A dٺƎ$ EN'7(&:!g'&RunP0grq 72HO{V{"FO%-y!l$Q{m_YtG˭@< =>$SZzKKt~֩J#?BPQc]MJ*(U\Q|T$`A厛☍OL2P7! ʕE0̽5WXgEΎ=g+Up&\ Uh1-̻{7mQG丏"5̠ l.c^jrU4wl$tR6`G9ORZ2*| PTf4Q :^Y*ħ >|Ug N.T'^<'7(p[,7}ozOɍ"hA~d='S'ir)%0xf ޓ015Y!D31qTSlR}gS{}^mO-4iZEQ>eD\|\`^ SG)C:Yz߫o,֟[6-S*yŦ u} Z[i3A2/;"Hl&v5u4ꥫs|#kM&x Jǩ;َXƉ<:x3gߋKcS>j z2v/=n'SB<0?g7K93KjD9 K\bo3F̃7NNfQGV%0Vb ;⿲ں~V1dyvn?CN\Q.{E@lؑkc 7u+o{;1Eeso.Tp[dHs'A*Z11%^6U{;pw*NOugFZd3(+80 46*C@$mBݗƎ8\m2@rhE3xּ2Rc| \<%/g2|$Kl*=+6~:=w"!E ;0LA\*(n9n0o"|-|o_>,O:^hKHծ%O*=+2mr48HIRq™RNrQMiʟT,0%1Oj7';NԋĒ}Q}|+"$vJPZ7dfkhtmxGA%2UxD\bWҊ+!8 iF"׳i=q $s*J$6o!qڄܰ*; o3 ~w^Ey٧_*0 H"mCaWZSldE-! DU38c#gܺrox\~( op@*W9Ty-܏ _qmZD9&nZ_X֒4D{(r9MD8SڲX2]&{`&<"J>ϜiIS-tVtU7yEf еxp~9)^ԟxRY(=5[owRZR)YQ;=5g-jpjܑhQ-=zk{6Ĝ,̎]@ݳH̀G+6\EKOm{,I)Xxc&h fEdT q1}c1j @sIK%L6g7\0BsDTRh; R@ئԉ;n)wsʉJ;3xR=$-[hQ#=]C#:gAE5AԿ2m%yj0l . 4\f- ڽ2k58i/ k6 gɰkW"jmjQnzdr Dbk/_QrfNcУ9ruTGs0O1ԙ"/Q3QIW&yA-qf27w&In7ݱĥC_3Ocw,JF2?%@{J젾hX sUz>gNp=Y̛W6By=pRb| 4´+Hah$=Y x!5( 6Y?sdUpL|GMwGL.Z/#! Es#R5xCK]сhUS&HFE.nmfC<0HpkȠ` L_kxc]C*r&F/WI) D\u CNc?e 8F]B"xj⯜3Hާ\V)${ISwuuG1}9k-o'ܠ'IB/wfqAGS%4 r"ϤȄnPJ+C Ua 3Y'r%>)g[C袘ڛ&O`'+l +퇼&f؝3:ո%ϙnD6}%? PBk?qWtn ,Kų |^º SM`bFFyZÖs!q{h䨣$緞ӡpS-z-!ke&06a{]E7P#gᭅ"z8zcy8Bʑu]˼X1DVOs]u#[t~t^[-9",|lSBլ/B;ב }.s TYMz_G^2$DqxԇG.)qJ)w8nB߷)UL)!/ڏWD:7̍]{5Ġ$5G=.g`QAb t'E:<@D>OlRԮYh$!|^&td@y 8;k5jHiz&w`Ac8FݞD [' hv)J?/ᕶgt+.=mN6T900 p}Zo2e J ]>&eb sH;^}Q AO1H'Y TZ÷$NJU9A/) wͷDՏbkDO%(>=#Q@F|;,pܭc( CKNMڢ_Xz(j,1S0>| G۬gOZ|1tB=*?JMa2Vu7G&b4&5-TlG°,״#0yPbA )<[ UF'{~HVV&]Rv(GXs6kM1,`}I)}?D&m vbTbw"VV\H_nC*O O,i5ay|\T5}hP7/cKP `5PxpbN\.tQ6ׄ!m H8ʻ|H𦶭$n 3L4vKz ̝Va娤%]u{ ֥oӓ)u>_"f;/zCflcHSӑ?y PqU᱔\QDLNQbP\!(y%bM7[t~dkUIMȕ_yJz 잂hʫ7?D l;vGAթ. keD]:J{[cJBv3ZcO:"C5/+\sډ[sWNi|j;F1x꒴pz}wji&Ͳtg {h6XG|JʉlHj-w~}bd,>q:GGI"(碍NND֓lza%/`\; ر 97Äp)+pU>c"bP8FW(Ga  ~~6| 73RU ږ(FQeoۈWB؆M1EH|hUE'놭xWyM>pJ6r|t?u{-(<}l]x^"Szd"!/ F/oL%9cT`][) a `eQHQ7͛gcr7Aŋ)g;K~ҋݕSrםzsˬ X\!.;uXZ`Ho{FD*pV0.9w /$ob!܁2|+7FҒL_{S*+b#v-P]t J&k]X}aU`Q٤l<|I*"p,JTȍhYڥC߯-ǒL-95n(Z:;M$U،?v"\BL\coXn 34fg71޳#yJpG6~<ٻ%F;|ӺִUbFBBCFO5*2:s- E\B7d%>>L50@T/ ;1ZcB$/Bgx`Aw*?TfEwGT [ؾ(  RYpQ-+Ŏ 7ZAdGϔTo(oޗ):dC3~~D=+;!nǛ'A2 XXn0ګaۅN^T{XE?cUzCG ًޱq&~89Ή0E} Fg:l$SC\F0ysUPeD~W~]crj 5:vz7?t~T׭ξm:*0&zno^D}wUS .7 F6s߼ӑ ϳiEw󳐕A!pJRlѮ,ws,pJ.v?I!=vrcXڑt@d;eAR&`X'XöDēe1Z" ?2s;؏,x/!7)qİ͹meK#11`G\swyC2sDd q/[#&L]f89GMSؾ!o[ qT`blLUprL$]DaG@jzHit9ggo,xq<< G9A_yIIج!4@y2ɌfN 'z߹V9l bP븹XFe~U`==QY (<&[(M!n 0|>*U#c]r\kҚS%=)12-p0ORc1G߯PT$:}+g蕝IA\IYY"4`p1hO|\.H%[Po )]oS|H@o _.woaHIП4:߯QMHgȉwγr{Qn:e"#*}q(%3Pt7i.|' "ΑE>8q{JՕvF*ǧնMD 5,^r{NPwEj&D VahW$ic6<di]GWS`D)-wz}0es7(ىu<|3OWW.a ND m|_6ZU;/Pzrȗs.sHy69ќG}<$\p9$rEEmSO1kV%r{HetEHkBzk ;vҸw?M xT'x` @X^;m(6,DK]/Cx{b4+kJ21@ g)Xټ-#bO-0xyf͓5հ`)u?k0gz dBRn%H* I;0rJM'kdέNZyT*½8@UwЖMsy5=>:09urRг̯,UẏvNڋHf_z%gmYEP~-0NSNG-Ęē}X5S0W<)1'w:g *X2FGc9CSޒI Ҟ7f,yâLXҳwm;҂S]CrxlP^[W [KIb'fi:L2f-$vydaM;UGJϱ_\m7#kOu᥅ }N0(<Ի}j_~* `k[r1Lj_?;ԦI|V'䄦Pž!rEnn ?ׂkd<a~76j@ +݁q6[$T;Տ! Z:tӖkCi|T(P6 )t%L):"&WtN}e]p̘23'P (Y-g t''u8_ Wv._ Jk;~ZKkz߾ӭSb~w< 45X4ZqodWIbU=J5δ\71J>BCH%h0#8 ǧj(QdN8{%st{`c%lJrD$jr=?W l֤fTʵse @ RU"6IA%ֺqLHhs/ˎX=HlXs"NDAdyG}3wq][[$f l4 ͨUUξgEzohyn Y<4C>@Yʶ Z?H1^ QvtiG/T`H#:C)"V$1AKUm@mLp0k5=Z!>7/1l_4ӌ^(9Y<'ק*-0î_{FWҀ0[t0I¨onXO4uۺr|xCŜxˇ9Iv ʎ`SZGhQ=ٷ&~4aRSG}A)ehVqRpK \.i!ĊQ<e))lkd]& zlnZ'!#X;.*" 2B3TsiIo+p0GpmmUV7"|[y!)~$PHzobѮuU˞E+x:;I*|Rc(B+Cˆ.{CbVFk|@DfhNO&̺Ӑkxіe8}Nސq؇~@ ) gHk!PE 0K7fY.ҬD쏥݇8nLnHv92ɤLBWnt:Iba;n_?2=\ Sau}ay1Ao*Q~P`8Or+.P_͵Nz6,=A[6әn kp0غx\rpY@ˤ,m?\$kl.* WYO6bzQ'tN>p@ʤ3$&ϭe^$0(U+Tspaς^}ؑh|}M$j; <ވ^L8 ReR ?@frwy#3_·Xz"RYκl[ O^K7NQ8v: *^^$gH.=F~s8bh磀{=Gz_8-C\-eC<Қk,3Cg9c M!.s<@ɌbX]*qs9@ 4oKv\<3zfi{V\>#> L/-Ahn}_͈ GugFTRBN5@g?\!oD 'c6Y~ճ)-AּDJ\BMj*O#YSc[@R> FJW_&G΅!% u\>ͥYӨo7/ Y i"%j<;/'1|34vCuDp8|4%0"RMK MP"wb[O#ON3etX^6ʹk*PuQPO&GW^ BE<¸t2,]H-կI],}xċl2'!-Nٌ`(P=xfCev<x<5-V Nv$Mthg 7/# }tc]ݖ .v8TUoI{u@ ڋ!ixBQ}n#(59 1ĝEތʎ}ӂ񗋺 tlk)D15D9O3o3rH/$%H|X`Q "bᛝʥ>\*1^ہe:a 賧Ԉ]/&,Ǿl!Ab+ ,@|¹loʍގt7*AOZ\l%39"^lȲ-W$sC\qB]%tNuard#.N8AZ7&=U+wd9VC/ }~v8m@kTkm7roYI\LvXvdkB#%ӍkGA0OCX kunf0C7&\q Ov , #B+n5UV4}:i8݃8Bic,M>vanpAG9ܵeTڳ B?yBLevhU0Wtf^@֣ȭeѐ(@ UP,Е/iʙdm r"Sg8}T:h0JDƏ,\Kj6QsrM2RAa{;z݋0UW-U0N\I[^w-xGkn۟wsL"Nh>k"-Bb6<~qLM3T6tj"5`$U (;rPiMJ4ouvؼտ5$3&DɬWTc4~ýn2RϘ.Zk Ƨ}>sx, .4/M՗6K\`],Y=Q}6 e l{S\&a% rx_b!Y7uohY ʓW^?7{t  S]#ͦ @!c a%ai!fyWVx@̏ix:$]ra7*2w3NC O,Y+@KdHotI#\C2-y HeUv7NvGXf⭄PE;no8+)DTՕO{}4=jmx^tCx DjoS*Ƚ<5q ~) 2jW?ЖÒ1.IclK(ЪJ 5TR˃O=^Wvv~x O 2 ,E^x܈` YI#-yy{sg{T'Y|],Ε㰷ɴ^ L zxफ>pkQ09l`[$4CKP5$W4U#)WN1%PToy,mgP*#!y-~2KzyJi $ [Km6C7=49;6J:h`tDz\n{(X0 H+ n PaGsABT`8}w[dpO(t8ؒ񿻽YI"D4};"H`'`l|}.W'rQsQܱdV *VV$ سTޝ8>X:4 WGfPcÉFzF4R.ceb qyb׮G:T;!S8YI ]w> >0Lj)˯B|*libj/<,ct1?I}}fӂBH$2 .i*߶}1j5p3=mvLcqޓ[gnuabPO'_kO=Mh I,q->XFo&ƃ5a(dzVk !ߚY)(nÅ ,V%/U@ W҇cE8J:yzpY LUiBT*UI %8DǟeQt _} :$]) Tk>lL@XQfB|se+AzM {Z"S/aGcY [}d5mP ga!-4yoO; /tP$Jo!V]04hT1 B'"GMO#vKk}Ԥa='aSҁ{dmEdbd/m"[f_ saKrI \D&` X*,c%niv)J]5V_P1g׫Bkv/yy[;@ɨ^k7'9{,X .QS%TUW~YNi]#=fCFxMHwO('ESQz,Ezr8~rcouKQP#Wtb_Z(]_r0ohNeqc[(t5,T!udyӺ48=v_'ZKdaeH'F-'Bqvf\=G J>r7v!|Hzk0@q(()=JwMuzmWSB[T6#g2o5ӫhϕy >AXP.6~x!ߨ={Ѧ>Иb@7±!/˱06x畕!qԉq k ,#s3jaw%#81gK?D3#<]SyU#009OX~dрWZmA3Wn7DAxu!Fygthu!ppʄ{h.?_j pPm"" njna#6@- @!!$ 򷮮ҥx~d{Ew V2.{/TֲVá S Z|/U=bY?0xJTr(: d, Zh@65^oygb7eא=[rDL@o7X ˖, 2pD3Xr] 3nS:hlZlVs~(E5r@66]z@=D:s] i ' <20( T$;;j*Q) o]V)WAf PMv=`1Dթu$fQc n*I?*;.#A.9$+24>8h;H69!2'ԇzc= )TX=\^]NK]DՔ47,˃Ju| Y˩*]XWi ,Ɏj2Ox/mk]q䜕ZX!'Q* d(9AB )+9Pr6V|n2iB|>?E7nbЫ}IxL pFwQ#lo%\q!!ҩ#ղ// 0Xuwk*tNL`FM# 'y:ׇxv6qM_7"`D,R%K| I,a*/3Ehv,avP'_}ipXZ\ _Jpu[Pg_s:y}6%G> FalS1|/t4Hteǡ"|>KwfJ[|SO(CԺ9qG%-؟… 0f%<ͅm,AX5da7#Bu`DϰZo+,u 9[z*7؇ɛF5IKƚ rhk)YHrQQu{;t{,B,vj(9YĉLㅴkq?jct &E?}u`BE] = '%/]tăw/3]{6="X).jΏ >8z کOK-Q{ \ kgDډ#{UA6IȑIQ[<.6mWَXZ]^Xg;Gȣy z4m8#FfsۆZ[Q@n2RBјFK7Z5i7\z歼^\4n2Kk4me)R4aKY}H k oR@ņ{NwS>2f3 :xGܙ3e/>f|K6ʫ ,Cs]e"!];Q"R \j̋[-A[W1"6 q̞!e*ci3Iש+U`,uY>z?$j'9r jmRlfi/ jL kOSڼ̢rJW5"1?sQdK$w$z#)+Xd$,hҠ%詗S/ y6#xQwXFXILz[ kz/Sk1ЛAskl6L\-i4hތ]ɨ֨RiZX1{Y$U)}ŶmE}*)ΣhU4CX~Kd]8fFK4z.{Rkk(Z7 ZflN7dC9&X>ph%}S)[o Ѕ9A]6ޮ<+O e8mZᲀ+$Ss5+VeGw+?D{Xn=Ig8M Pq62W&qY:PM{b2 }kP8Y>)Q ўP7d+^omXv2|/!TGGŜ_+шȌћ 'lzz\ PHs=&ad#ϋ a_`BSJ!vulK6G֋E"h,bbCгS9W; P_ ,,!tVP;ilV@.庄zuk^ ֽJ{X'zE7#qU>;ύWur S#ӵfYeHsO~ VJ-,v*A-.o#Cue}P%,+بڗLumx՝ ޘ01M̎>Jk2 5ټS ]HK۴] (Im1Z.-ME |N$?8ѷdq.96-Eᅌsg0*+wjL:id-hRAcJIII| ;b@`Wcʢ[?g dK̈5RF.J,|+*V*ji-ڛgQP>XȭϘo.)Ȭތ[Q8vR{V 3`Xdzqge66%YcxZP&k103w |-K7yU"Xkc1뇽>W3mc-v"!K j. ! $ڈ$_i]3`#^*%iE|r|TnzZ$Za6%^v[PC`_$hndD&nE&w[Dھ;*4DL骓XEzvC(LƯRkI|c;:7'jK`#c^  EhN013pwRU{ 3{p=i1 ze:}!Α)Ɨϼ8mr)r/vGs?z>M$v pnsg8o^Oɮnm !qk%|7{;sނi9cK*Ze; TvXL˲dznQZWaoY 2VlbE55T>4NT#rqp m~ף"VBPx|= SmeŎ 3bm8#5j<d^gBc\4tۀ%_"[Ps0{9:ErLKa{n8cBvl0ZcۄϾ-ĄY8FQ E,ڜPBѦtkUֲ-ŮyC$eX/x|#\\C^QvxFcPڐLs6-ay~[ _pEg<QNZdBAM`:4U׏LlZ<6UaH>3Pk{)~?9#p& Z !\$b;$ʱFaAm% #gor"n{hp2Hץ'݄.guJd8f=ԣ^"ʅg㸝42#QrSecx}]'6Cm' =yzAw{&ڌ'u ޴NT3Vl`) 8`#|| .MGGYgaNѮjmԎvl0kU,|s܂\Oe>H8f^/i[e|(#q  JX6@uk](keu#Gz;Dq\j鷙0D'؎46BDq-@vq_iɁZE~_!t;=%IMi /@+<rE>&qݵBkh:CQ)$#sZۣQذWɘD>H?G ͢/${&~9$Wǩጲ"vHxI3TL\,YM#xi秋R-@>F'_ ]jR=K4v126~|/)w>˖rnP/;ݮQg܋ CH/ 16oحb^.@C+eKZ?mH)!L1#Lf3H+-.T:j(w!sڵna\{7 =mKUYJZZ3o ݗG|| Jc&𱣎TJHX 7"=\B.:rѻӢQ&"DxՒ^Ȥ3:;+^0mF߻2ծp·_z!"9PGݼ'uzWTFV(8O `EBE=l蜃xz뎦$;ؽn[=>'!39j5fYt!Cw}I?O2Erx@xTzU}A g" %y΀z{}Ekz*3W) yCL<3$)=v=?:lX|d iM󇍤rW"b_ʼcf yQzšm ZuQE[%U.y^`>#gT8C#Uz mX!wiIQxtqZH*"a?tcf"/uf=y"0%VVTS%?L{G1iv1990+s3l@̮`C0fc:c V i77S9(SS';?T篴/h>͏N~ӹ`$8%27i^Cy)[1b=v1no1vKo{i0Q%v=8 ct\vro QDGWZcngk{1s1],|ñkS%uѨ+l0- dVR`뿋~W3g$SFx#jH\ZjޞqתQ o(}ic6 AfM@{ rRf ɋi42a&S|fb^7zH,,^?wnDUw3N\.ڜiss?xVW@CԪ5)ojIߘvt*ԇ$HZ:'!?>~jsv_e6AXRα H΋ɖs"L T95Oѽ?Wy/AO>kF7r^(g}<ΛCo ʠ# /C/5]X5%pu6WKɷ}6δ.,A[%S~,M_;Q3;A lcД(  s.pixU:%7!淵9*Kvw0@NYwaۺ"nBe|k5NyHjֈ'8׭ύ}Q |Д$ofbk8`'z"7A^6FKԩ*5AuX=yM2rH̞62иJkui%$?]H@f)Yߒߓ[[eW_Vԏj-_M _sēwг%@^\g:mJL?*glg9lL?> Mm&p=}C3ݬ_/^\ !250zK[AD QܨdVf9y &}|XLJusw=C8J?EM]R奒x|5d'# 㙛 uY:+@V EtJYA/j̭rF 7|! Ɣ6-<<]?|L[ʘ0f&/k0ڝ!`DKΕ$,!D[$7f\<6O8.*8}!1t;$l`{Tғ:(LA-(T@o+̝R1PjimՆF,{> GY搦w,ɷ )A (] }1ZuǸb  &1!5aXBn]/n9XɹY(V)}yJ=/O۫`ɃwTm6BQ͇J^oQEaB3ׇd Ww->XWP>p1#mNzml.;=e+<'7Ǔ~\Q9-Fbg&/sS?;Mm݌Jł4sŞkrV8ț*(h´(vqX& QN p8Ь ?@n9Qh;I+xUd%!Xa͍q۴Q]CTkOI-'#Z}NHaQ|ӏ{*q,n>s*sQW;FpCL9.(9fEe }mÞ̹ ua)&8#D-^8n<&F`5bSXIlh<ˑp@Dڵ! n9O/?j:ɷRc)WmM'SG!Bc2!||!DŽ&2}l R5G2/Y` 5@?<4@E*ɩi0an@lZ5^TID+4!zEV-na{oدAD=lWs6#v<Ds >V=uO!lh!E6eziC6OՌtk'.UN2sr ⻰&]JHD3[71U}T/o8m3.3Z5@{*^-D!8Ҁ qfU; ;#uo8Q):ckgN6ӯ+FQvS`'/Foеw9ć!(s4Kmn{_%O[$'[Xzc8$u{7n>9' @'Nl{>D3Gk-.R[*}@ Fe?LA ΪGVCFwsrʎsSj@2sB'3ÌMAu35\6al^ZMov/&ɢT`GR,uqH_$)tFK9N$3KIn D84n0P"}EGsܗmx A) PC^wG ?xƴpX|:.ų`ŌᯧdjVS֖~m ts@@[^.t֓R'2>r-p/J6;Gpg6:O a&&cvBd)TYNV{[$|Ze4 klnu<+9de>}k:w׳ O/P= \'|=%BYndaSL-=5|-4># PoeY–I}G[3uj7zO~'v-%W!*I+w2ңKvYOꆫ$i5sp>u1$Dk:Lr ҉~h#1}NɡP-F8^NIdv=͆6YNF2Y X}Xٙӈ;HS 8:**](g,W#&'2h4 >A2usG-+0jkڤfww/)۬h #V`8ԟ*' b.ݵ/YkY8ﶅj>N?a^sKEca]AA׊8Oϧ 9uN27!{qaJa 5·k>JLm 5e 2jCjB$fezW.W q`FKGGBg%5v&N{݀5@z`ڎKO֓RqEL#4V s.A2kl@ul1ezչUd R|:°wtĆvGMaJl,@сzoO!1t?WsF:4FO;S*5pO2:G |b ޘ)vӄu42s VkmZz~<\í;mې.-z)dPG`$,l'<) _0k.GkܝE#&&7)}EeSMG e}+=p**6+\RO 9寤A?y?RŦ`n3Au7j,vo9fXV!!]ȼ< ssqc~ %}[';o[>0ܻ9#0pQ*@VՋ1lvTr6a߅t |j/85 \/NB3`=zbk|KIH^*3\1u2;>txh^i9Iir1Ѳ$W3o{i..]w1Zl8K>FߴuX(^6 [ AM)\k@}ǩк$$SAZt,pw(Ź^5>TNȺhV-/6<= =H.K$:UL ӿyOVVJ 7 {+CzB۽)aeUјPYZۉ7'):^;"`]8icGYn O0qQl[bW^OA ){?n-.$IC3 -Heos#gp}fIrl%8pR 0x.cizHD P7M|Io$*mL\ \-KCl> JpȆ ݂Xƻ*vQ1aƘmMrK- )7fA-*NPlQABvL<ySFB˶]NI[U!:)$sH{ݟ皎4C!lCW-b{1C]GDgk? B~1}qY<"P+>!!+Vc6)*ٝj2:n FُxwN`UқwoU/^t42b'l <|˳GUAcm{e? B9a ѐ?v܍1IfnQfJb-X˥g fDWv;Sk|8iP%W0ݲ LO5 r9VLD8P\O%/K,ZzdR;X*&[ mqyPY͙԰.Ț(yME/0e\@X Zb{i_MV+|ڵgmfTf2TRtYOE)WskzQ{{T@b%'w&G}$ҝ{GX0B$h_|LShI#ӭijcof qЏ)Cfc֬m3!dt,m2;z**EdON NaKax$ E7fi<@+Nq԰Y2A;`RxZ@ [vg:sBZydQ3Ei]֐~B,ߔӫgh @E21Vڐ5E< {""7 nKȏ2C0R H6. e C35I[RA} Gk yɷR<1$eT?@nF.*cӁjߧO4T^A"hyvO`B~ "ܠnQB%0@UøZu3q&è[zCRF>şT2@ {qg'\3?;e],iyr-[zZeWQ*!QF$\"ύ>d8E'u4d8@ΌCMo7f]kٌyIKԤ96\#b+L%t[!YEtqL`^ӥp7!H_Tײ0Z7j,I'mXҴȐ` ^7DA %r )}J"e&-2X-?*f=7+H"NN^>.I2 oٻKH᠇5ǿUŗCR@ڠno)}N,Bdڔ^Flscq)3%MKI-o1ww hMܭx[[ (i?xs8A,⬪G O8@<|%kݷ*@GI0o}țD'SƩ(XfE A,-S4Yfldaɽm E{pu[gmu$7; rW ImLPieMK+4k܅P.{{ƅ"rtR3TTI*#cqX;g4Hq$aei PX8ԂlyR]z<wfGtYDе>w~zn)tKiGc0Ps6cRؕ^b{- lc['[U5ͼ[dE }vE~8PCzV6S&U h)nc-{urWj<HuyfGD&qumDg2R֝xn5?a<Ɵ5@B#l٣l¾\,!i[,L`&QwQ*pwNcL8!B?Z ŘjSJt;Zӊq'o7/ozrwk!,Mvy8P 쓄m~y|џ 7OK.T7xAp1Hů=T%JUZifVQqiz6\3 &`y.ln7Tdkmkb-*4J"-Hх6F}j4=&={]ݾ޸ Msw[RU,C5SHqfp򌃷⭽h=}Nj"6YK ̚^80O,Q"[~ې#F K,Y' IN^$ܜ~Q!+{ټ?|g/ÿ3JATʄ+opl ̀:ɪlG#+s3na[ E8sHOL4mێMYk0(˺mvY|d7Nqupڭ>n!^"dOC'SIT T br( nW(B@14o7&\*4+%`~GV8ք$y:BFa|Q .lQS,%OF8\]b%u5&7B&rOrrDK%HoʝWPH EΪpOO"߳ܬw=T=1goF F']tǢٟ/Txڈ ]UΓD\RI})Ẃw 5M-᝚lS V(_V✹Sd 4KM{ޖ 2eIC@^ܺBqF?hc$arm\H U8AV[E֟v39fq,䎮kӓEVxYYHKi新pG[]& "540U' {VqU\ H{Aiv|S/&_L}*ۢ3W7ѫc:Z&"vZZgY^6C.x/`*~oΦ7e+|XKðk9&ɊvYcsˡZ{[>2f)6Q__ʻFP 5G0hjZjkmLKUt9"qS$׹5xzCKAx&lSO| 4R;ATO?;je̞H a#f'iob;[Hȟ҇&1RA/@BAF$̖ LDgX4O,֊fShRwJDRZ{tJaHGi{KgrG(G*VIp0DN#]Fbnυsy*ZK)~}BR@T ,l6]{4!B2RU 8'Wqȴp&AQ{5%3[#XWüQrh,OS]~#LPEx{-)n$<%U{w;_'^8g74]p_Kw"/kh\(#R'ʗę酺YפvC4=?38KYL4{a30ɡ0s=qi&vr5=H܃3E)#8cR Ȧ=jl?4i$Mۖ5F3|KѬvm;33iȈ.Xl3h!, 1BCî!29b`|\7¹5*CW2acOo zGQE$ـu2 wrd7\Uuuoͷ-n|N;ũ+W daD}. ~{h@.$#BaougCy*8 IiJ31q㿋7揊xX%tQF!U5Ttr>Gk:4Ⱦj!R)*֡wE¿v]81h1 bW.7`1m)(R 0qm!Zʄ3'%):I;.^F+D"HqbGsxX)"X QH7ZFa=(]w@ ipƤu#Mc5e1S p]Ժ8>z_c+PL1!3 /$@ wYJb) f' Ҙ@sv~l6LJިWDP*q"i?ktΠ 7&p`A5?NݴlIiN5u(6-m>9Wluq#DJ*ݚ86);Pu6M7~'s𬆬p#N̆>ȑW§GrsRh/A|@;*]*Uy  T>4+/0o6p"hGe3LI<ϞǦ bG:u1M(QǺ[8i.ttJ2,/i? hӞVO2gsgv <̧؟ K%$\҆@vÉ~FiU"$ls.]YZ;l畐:L +*6PCI'm5.q=! c5d+};/ddxjV"?RT3(adA$U$,%pS 10=/Q*!/Q- C:O3kLV *n}ry Ū\E@{Y^zDdOw+hQDzGl[ ݟcX$ `P^)AfɻMLs}//ջx^@T[R6҈H,_Jsa.'&u!>RŲ/y^%IUbW5Y/Vٵt=OY@,AtBhL gx|tv0RJʪSe];t*,FFQCjW~0[ǚ_0 ^ײ,AW0*( % t{rVyhln6i{Ҟ`f7d aH( oDӲGe .8f$+RNb^Hkk  rc [ʒ/')yW|-?ףg06/q dGoq*&HgNW z3 ^M(z#5 s_n-iwKcXs*0=-De;AE0}E 'P}Y@鵝ɮ: r:Y eڽִwh|K12'BQ8^ gopgշSRžjZ[L^Jbqg`T]ޓ8W 6]J>]Pb{d|+fCh'1NIhН|^_=]~9 ITz܃lJ[%B9@V2DFnW9.3'Iۘ4SI OmbPdlG?$o1f;ՔCR M uJ=i)8ZY "^ KցhwvPs0M؆MdPU)H:ǥ'ٴ䆲v)]P$ҍb:Mߗola]E<̂N4g9)"Cw6?qo+K Vo dբwq̢#Z&`|ԧ65&8IcB'?oC2I=n:LI3M7? :},fyֺHyGg[.oR3y)m3$>C[,.+KctFT5xK쌷*Y5raYRM6,=݃+l"q.w[Ǟ\1tw<F[5#$AsrbA~ŀ{|Y/Q:߅tze*fIJ^J)w1@bD@'~|cv߽`,: }5+_"D.wo8C4O58`'QO^8=ç{h1N6&aN;gC|Q&*K w$ Ay5Sׄ8V10.'rÛv=%RcUQ|=gRfQ1 t.GTn0\N'H#^շz$N J3Ǧ/ұ|Q)HaVYoTv8{5(B~W:@:}?̈́+[bvbh{uH4ANZei@/m2ZD:P׏Ag~kძ~\ǢP l,l|J߂`kf@; (GhE0ȿ"cW1^R)u+, McL2 n&5r\EӶQ$v[bV0]BmWz 8%h@\0F)BAF߃>8 =T3LHJ*3BRp2 \NKgHW$!ca ,u*q"M/xBEhkbj>oTև29L@y4s޳&[ > *@ u/osR ǵH$a |C1}:ظx=nWY- ysM96Gh/]ij~7 Kx]mmJwO ZEA(^*R8霞) &˃,%ڸ$ԢZn0-rV q Rhۀ[I(l6k"e]5p<)HAcH¢΃8D)vWܒO+$puP1ha=e=k[q#\v$j+g_0fW;ܻC&3RX U[U.eT 6ay{D5$2(+tmܷ b2 2YuX`;F$4|w67P&ľEO8a/ NUX=]ՁO qMl͝dG ۯєA*^NC?x*[zSb/y\=ek*>$֥['Y4`[7T$\BaKPtX>!/ dڦ 2EO c} k7$BZ%Q2$<AU;E\yF1OmҘZAUm$Rǽ0}$u4un`䀉R\ h?5:I=\-vPjsLFڦVkt8+jzjh.7)*kLUP&b6;doOcGF4$ekOZ%X(dl3P/nF?joE6(ybʅ Aݠ^d;lȕ4_g@6ZJWO 8{1EU]B*50:BORm lE[6Ҥ([;N:Z&-Op@tm=ry߇Vt t(8Iz;-e aFD.JPIzs@frke#FK L%;  }'Eu|N {oܒ5.j!, k"ck[V 荟 vڵ ?)No؏"'mhπ8a@C/H&_vyNWv[}BiIGqOb0,>d+"Mq05 e`øIvb: ͛ Q[N O2#"b1\C <0vΠ#rίA)fR=E8F[s_gd &Is.*gׁ"D]1l*@ej'JI+N&lodHcۼ}45RM^/hсF|TR#7g8>&l7oK|.H1;ʚp 7q%e :8i1eN._Upfy+ߏg$y2K?7:8@MV>U_ _ /R|ξNST(̅8Eޛg}uNJIT 'dm)M= totQl@L^M^J~MnA/ m]`=W5̟N3Ul_H4~΀tU&끱q(P\k775܃GّC.wAB+j@ɐNaE)$3F1![[{YaCjNH) D(9|].l~fo4a@ˊ*Ux} }^\OɻML88jRBG:ώ=&orTidUFp|ۉD=$?T].4Pj1eCuEn#uvNȣ m ȬC>,ht;PyqCn@SmH۷~$v[:JT+D Bˣ@,>IZ*$.]*d,Fjg:#5/7Fk!ZZnFV?՚3ݪVMU {,O+Ut8P05H2Hgp_|7l$yV/-gK ׆xk%Mjj14$.>m,Н pBG+memof!-].>۳#scbrl5x%lv4M b:hΩ򧌫}V*!' #K5uQ<0a[/*fuZG8[[#QtҪANbG^Mz;<!V2!ܨE|M]:)KS,E W9#-}y7dhS2X.AxVslt9\s*=-֧7Ǵ'y&'O"  G7v2Dq &6kˏP8Pl>!_90"x^T\ʛV>TMIPZKq5.R"5*s4U\,RL-~r/R;?{D5>|.S*QoϚ2/[2|\5c&,hU+/?e,ٮK V6 2>A#*C_n pv|B|207 xsBrS҃X0Bp'M7)Z5LтVx9S7bE)($S{0r 1#͵-1uA8E-u>(Pӏ߯rֱ=M!Bc~}@7u142s[GLk[mSfq3KJNE3*qneZj9aD2.L o߼#̣GE:hE}Ǔ߉6.7JqD]'>_#3󿕢c`}h꺲 )cOv[3Hs+T3$x'-vcɰz"?W[iCt١$\meΩ9TҢQCv+y Q;š5-1!܎ .zDX9DS+- :6~a{?!G`V잎BF*! lM|Kb{ ? Mu,b#9&gs(fG6؟7=E [PՑgub |&fsvqV֟Ǵ[\ U5l%`L@KɌ,R"B^&ʐ%f ?8үa?8:PGA.lPyJZۙ0# =x\CUd4ov1,d仡kC.9Ʈj0] M6e<Z@t_'b>$lZ6M%F㻬H{ zm4!H97U: Y}\ʮ#0=.dO-:7jLYX`uIgCx[z;e "y˺iP],|M2,u+wQR( C-%+CAN7:OB iY-pFDַЙ[A* 椮 d*]8=~2k!5psM`ᆗI9_g=/<9쑁d.VQ w}.a7'vH0GAzeq򚮥IŔvn~˴vF}!jz ?0\vN˒AZe y<4V#f`lZcghgkϤ?WO'O' ɄJ!6듂bGzT6NJ2gHB9[*&A̽qr4+F{]}&P_Ö :l*Qͦz}.+$`ǪtoJs1*cY2Ia̅RPNp9jG Tx;f!OK)9p78Sڌd6-oFn:Sw!jYY2c6yTwd&ʛi~56SU N~ VQ:!ڥ.\=Z}Mo=a`dIC-_ȖB?LQ٬L@Mx '_sVCT/Hti2oW7qRQ`<Ԝ4ѥ#Y߼HH5y< 3ci-o۱"qHGV^6ګb=^dnSHNx73#<;|l=:'( 9dZ@ⲥaL</ O\;@Z_w\T,s,n4`{/ibQױνGΎ8ION34zPڝp66!r6~w7YUO Yu3S<t`;4 d:jm%(C_> R:ZYk0U|UHRXu2!xo*w"0oĭB8k18GTqoЎ2ZS \HM XH-)iF '92薧BJDHBx[t mPoYڈBSԗ xOBj"xWS/q31NBdžvuֈn#uJnhQg2KzU7PzRu" ŧ颉M:]KCB_Q~7j6W;&3n{8% S"0FR3M]HQ 7zG'k /;|Koب%;GF|"qJ4OQ>)/l 7ło柒r\_bi/9Ѭe{O!=J^GsMdN>txq|=k!jkD-w׸Aӎpӥe½$}\]/+^̉Z~"WFHDFy{@4ןңpYGs:_0?o٣%GI [-+]Z<1 "-%B:YD#Yj-OK;UO*U1ST~ofe#tuŷdʍ=zԇ [ho+;*.D-;eO+)k&pT]2^M $R<}vj%-l/U/?ϱ Ȫ_^ 4Oxs#F.sėWVwtk/pT\ @iCXq\ 0@V{% KQv5hII`&$bE 5rx} _( #*\>CMwӯf^`W8SbQ@rPWٓv jTBRc&WC(R[Axsp.PC&z'tj;i)w- i])޲;cb]^:>( ֐V?݅(W"w^qBL:a"RUx0 /[8ҧ$Lxۓd]ee 37a3>t)40\n6xgAY e@-U)<Sqo mz ^tMy:)۹ݗ_qlHG>.%AE{;p tNJ2{6̝vj]T.vߡGʽ'qيQy/^s(z*[iePc-4*+~o CL,-įXG>N1nަ8))Lx8"t#7NnLŵ{lEdܩ?xmmK%ZSw)a4w22hHZ],FV=Yh Ӧ'ɎAnUu'1[rN[7 uq>8Bz~4-NuE:C')O ![֊'@3]}Z7~ãihԴ8 X<]V3cL:=dFh5U\w0*֛}5L>ǯᄁ0t[3-&+[FmB}٨7)2!3R:APo4Tn((- ,Rm*+,HxjɌ-7jS;Mx@`b~_'璲Sa{v?U)^*` %mBx&Kv1TW O)1u8ɇx>H(ޚn;gn &uzb>h[sFl/vb6Z+pic]u$mWTf5e \mDnMy[=s*cs jq`<^)Bqc+Bi,lrtd%l6T@)[7P=wc|Ѻ!=792Dyu}Փ!8 w/^K;BWlg'FYV*Q qgYŞba2tL#RYpQH9FN@{J>A] f*<|/DNܻ~N"]6ѻln5+>O: WATv1K0ZÒ_R9Λu>ZH-n-wl1j1`-n %[m&VA>!n*3*03wH4l9G=aZSy5>^3G2[Wl/i٤ysjj;Q(1\DrٗM;Et-Axceշ"kŬxen_ó{^ 57y4l)y{$|:UC2wݱְr]a"$X3P6U/Sì?y vXI7jY!!@CSe?dY`t>jb[fd NS|3w'нAfMqV#16vBR4qG὎l3~si5n߁?[2h@(VŽ'+""ZmTu]23Cbw]9F3⍵ 4yyt 8\@X.gRz@-`(T0AW\!FK΍AJ6oږ*.L܏ #ϢU@N^m 3 #QI>QoJx:RJZޒ66ݜ&E;%wc6 #7"npRWZ5Fۯd2EjsJ[ya۟C8fsj55 7EY`@ܯKq/!JԸFD43X?#0-/H]K[l"OEs tg9i~bj[ y>9%ƶ) O 3Z< 53y\{%ܒ 1w h۪h+bĕ2S$fjsMZWg_WМ$IiqagȎKxg7bpKBQ`&0 dWY݁ mJ:H=;'%va m G47]y[{.{Ɲ^Z5oJfWLlyo@ B.k/!gL}HT"6pAy"x_ztTc6Ye Z 6$x{|or<@bħBccBo4\|)!gtHj3> ꚣGZgD !TWq}2QAz~+3>/)+ $)o FN!} d#J~x,#"ί{M.༯,엶TZ:E"Y[岺ti/ eY%]ͩGgj\Fفh.&Z+lPjgV 14 t7,?h9MrUQ`u:bc~fUq&1QMygw}v+cӹ#*#]A_)Xl3VpVkH:W}?xVVd[\" >)gU٦ay!O +zZuWpiPU^OA?ZHrR3r?}nmbı 8d| SB@-w'opaGޙ"_=>S4a2O|FM`s/ᲱRC ɛe)W ~dm 5.[VU߱Tolg+Ќ >̙jыXMi7g? DZ(Q Ez&@#nV7<Ad_ͻsHP"#y:IQ]T"eE̗b]MAkVi)4|Mܧ?v9K|YhEvRL#=Y!U^4BI%㎎w~( sNTb>/#Am<$K \ 4-$xZA) ?'m>{5\5H 6m*[&W A7{U{JWNECtyJҬ$INHXcp*j4-먬OHR9?}L( ujH1tK-MC }'B9$RizkGhz *"yώ 1Fٛ {^،D-U J0y AQ]R9wGos=V]C&UV&nJ`5E9M /LuH ! f2;,=>/%#נN_;OJ?#'dfmACyvK|t]CDz{)ǩ$юdD~FYz nZ^C)O>Es)i|ԍ}_b3s}$CkO o:8n+ggHp$PM 7YCkaξ ,43Ҡ8潥_" +AC@zQE a涐*nJ/nmR%ATcZ!sQp7jlUs?qL!aO$Usys~lo k+1jcWͱJ7  џ;!ң7WQy3={c7]V,TC<;Aj)(6rn߸#W'>ƳQ|fΑgay@kT l7u mcJN@:anגLe'@qpar&,( YD帑ދ'0w`>{9j֛Y$Qz?oKɦv!,WJJ"o>U6)gԦô@I+<~t ƹY>_Qt13Lj"!u [5`Du3]6_[K񟉤itJF$Oߓfv.X<[F⧦Kmm:Q&7P F^hdFII1G.*H8wr􏺧ʎ(vx7r*ʥUfڪ*qio^TGv$ ΦvdR}zkd;`jex+Y@Wٔ4qLмv '{HQVHZ5%Yz<@bٺ`dUݖ) 6/Xl£X^'+4 jS{jq+>& &prQS<$lnOrzg*="tAgdTP1I\1w.qī$]`ՀF!7 5NHnpJt &I~r6AuVߍ9WEF-`1-R,%\R/0nڼҏyp(47=/.iPVE %)jC#zki;iNj]?:WlW:zG?ppڈDbLNU/'f.;Svet?@("ը:%tqv[p[ɺyJgK`MGTC{DQ}It^Y÷g^@Ri\Z5Ͽ[/cn*o8Uұvx`&<4JX9vES7w} xr=⤿AW/? =bT,y^Z `Ch ": 2q6A_DRWSTcVRǷ1DЄJǤ]X!gx.WP;p{R`bOCt3WNr#J9#x <5^gAG3Uy9Bm׊Բ1f0U/}xؙq4Uc/[#I aOPMA)i6PJvas1Zuy4Eg)G,qQuTK2ڴow')J*l yC^o}gHj.;آ s˹y)# ?UU*KA]%{ H3FY"W+ZOv|wͿټ`IiVewR;_zOFؚ},llNBK.^B#ʏE0s >؊V]VdgqÉllf*:o۶-2!ƾ1b}4^!RrsuLF$dsZl`ADL[QBO: &lk_ʾOm<5gq/C ]Ž\u.@tP׆mۋa0XOn3cXHWnB1&|Z[Z mO䚸Ä*b'|m}ohoF7x+ʤ vNitU{bd.d4reVO䌡B+!sAGg/M ;@p۷А^1@`C&ǑbMJpMXm:{GKQ܈$oXI'NN@ "GiHuIL܇Q$uM#%8^d834Y-SדJrk'!_1a)y7?IA.\Ʌ&RE(h)̓s6:wH+xW}sYA1){Y.B]L/B| VhhUVeipmnDwiм@"3I7 Ţ,]9P-m$ :X2N)1ܑ`nGU( ﯍AN]>sOi9%_xi:irj.Dݫw!ѕ頒9\j2Jchw&Q;qlnt? ʜ!ޞdv\"53q:sG}ʘFͼj]ISD{YTE%p) j9@w`B8|L;h#%F\13>>"[0x4l'6m.hj3#se*[!x>=,1T6 To wىFdHԓQ @(pMUk?-Np6r;TNVlްݿBퟪ8[e;[gWjPԂ;DIofDm;$]u >ƛM-m]a  /ʈ֔6ISטbfo8JdBF @s~-%Kt!p4*F8>3>B.ՌsYy @;'A>Ӊw]L7/xC~woLfw#h:dkLſ{>i(s/Q6셱#8DzYl°rWP*Xkn$H<5mGH؃4׫kCI1gqCn=;^` rͰhqnrIn&l5US~/xNuܒiX(@3b$S祤6y@ND>$t|e'dy&g.5BjxN#Ƕ#K\b9Mo|X#w'E d)t -X7]|.ލ>+*=Zh7gpz2Ҥs-GEc-'N/ߔ,~cXWJfM|{=mR`g'roNoeʋUSR߭w.qBU5t*i`kާ'ĒܴA>eWtzfuQLʸ͞cк 8T(|RwFs[wRRl)Tv R}+IЖR]GD/uoA0F|ĭTC*C$k]U4Ȱ3N*UWw?R~4٪AQ*aD;g@_^Κˠl^ YaZ16@^=Gz?HA,=یF]Q:1,ʄK.MB Oy#GZ)&kbn5 ֕tj:˨II`c2u[79͔ ֒uN 1@(w Q!}\~X^|/µa'0sMin[4p2WnY=i &h3]*,mN M]xfn|dmF@fx=2NAXˌ+7{{0c|UD`=4rK("0HRi9U_=ւg_|= 5nZZxu}-۴@ +#0&^3V0&uK@ˑ'Qp oﶍ]rg'nL Fi%mpcB 7I#\u^:Wï0e?TC {@"i0aQXzSĈCLrq|҅kG(?Fj wgcpWR/j_v?ئ)޳P , @c]R8eQ3>m`_I#\2S D)5閊h>h )2*wO#l].ȑ EnGsؕCN>%B^4vɩ6x,6[Ů"\8hhyx'rrH_)Ѝorm&V9 B.gͮ֊,[@&7]n InPĶwɃbF~ ySo&KTTGسi;gB*,!%B_6YvL7I8$frsBAʖ1n?us44>$u[Nٶ*VV;unYAK}߻H vyZ D':ÌH#";n ? 1Q(O`fTqei(*w d\mi}7/ "ce;?/&I 7R.'(<v()y ,P0{:;4/:؂{OewOYum0Ťz$ЕE/`pSȕUYb(B$: 5RY%2\Nש3'N[E%E-@ Ο?Y8$ 9= _}NZ urcjxAf3=TwṨOtgAaq-b@Áho<@GP\c(t)~uJ Z\S$ Rc:_<ȟB;)(@3xg~Ѭ2$vnA\:ONIf!GBS bab`_X8ZAcx (B Y;f !ˎd迶[uB5p:*$&!5?3'!Y8׃Jzio]ݧffN$W0C$wĜӥs䤸u0ØKnO-p ?IL ].&ky5zד|h P$̚|9}&T1e;OC٩_~v'i\:-Uzy6|$E0ʧEɜ40-5U07VV"+HӺv3< oj=J(2 x(O.z0^b`6;/#vB5r"pޟ+SZ1XV9x %6NaCnyIGQ 0_S!864J拶_+˅g3ASO|uR$AܟJrCE넏=s>zVp^qdQ퉀67rzugXY8t ]c) 3pO3Q K3`rOiZ7[q'1\^>!Z/@:ՑOS];}RL?U#\{>غ˿M;Gſj;$wWJ֯ό5M2gtk0:*WlKE'QV J-NϽSe)e~ nAț_?:c.waaC{P~7C"0اj kYpjN)[ODiw [X3*BM7w[ɽ!VoܔW\]*H eZ" $r-P,`]\ 4c t]R1+S=g >넭yaCE:=a (YCiT9FdR;>QQ/jLQ4-l%IgcQKyx{w!p.#S|Rh@'\d{|%bgt:CspR8R!-i-3>{\}/WZ#P)d .P!#vL0U[,K:ygk9 #j+\8w?Esdq)!t;]lۥ3ş46˴>Kl280yPr$ ^mY=6ӕ?ŊFxsnP.& UnK1v8yz([%fݲM;&tu,bdʞ c9& Cm-JYJZ2O}%x&EPoVnu*= a3#x,W*6^*g `f.%7/}~afֽuc k^L8ȹH/hu7R=ba {ۂu'\b@LB!$-j4vvb*LݧEck!#t" 6iɑh5 5Qb:84ya_d ҩUi2+ǒ,|ȾԀps:N$D ɳb~<٧3PNXձ8] iYBu& VhV+ H ת''eW)Yt>mwv_i`ubTe)TAnJ$<˰_MfN;?[Q!I?Ԋg:`PwP+HВaFbbRK̶ڜ9Cty54?f.H~Y@{, R9|oc\lmcY"'E;R'SSLlF6(`6Q+Ԏ'vY2[q}B㛐l&uZteŜ0&esq1]w!|ϜN38 ~&گtp"QF%> +{KLXu_{-$EGlMni]"qV~Ou[AȪB0YVX?Nda7RP ]igNĖ|"̌mghf cҮÛ41c˹-iSڦnSeօfɧ`JLٸs!}aLi6RZ4GwE[CfrDrV8:‡]_}廛p):b쪹y:0M"}*c%BHz^C0ȷ֡RZyΧOgƵtG| G rh #nWKuఄ-T AvO'I"PH"g΄;);G/N.)4m*;I&(\StT&X[))bp=64 'RnifT~y-rš3zJi}ͥ9xRNZ+lWZGBE<3'PSÒ<fpBPw݄VJDu)(4 s Vrw>cA\1oGJ)'}{&Ono`;Bn?L}Boׁ[ZdCF*FkFݤ'] chGo~Ot|mD:ǏRGN\B Le9fQ/5OB|JPdDglн/8YoS(9d5 y=/i*3p: R C<*onQJ,6uՆ]hT`9ܼ!*#}9uZ\s01XH婷!}M=0˥E24iڡ.;gq_M9Y92S$ú!W<.{ODdؠR ,s,r_p@P̬CRUy~=v#䠴id&(=_ї~4Q]6?//rZw纀aTѶQ?3t \I]Ͳm]>ߙ'*Y`<\dqSI]ʽfQ g 3z:Ϣx\%^Re3vOަәX7'ܺdbQO]?wUįg0] iᔟjm0T v&9_ zĤ_Tqٹx+441zЅ pH$0K 7ue~-C6 su(ͮ +Z`J'_P 6(g@PA~oc  E\}JăvKp#"%*R-‘:ʨ` -~ _SρE"; Yp(ަP^ir%ѩB<:QA7`f "9,5[P.2O$>`籀V(ף4 WOӞ<-v]X9FsCrD/dvM|n;0bZt~.))Mf#ֽ-@*gh/!e4xI2t8K090w!TߣNM&nVwÇ+i_qvAHrҖR+Sf/o_ƺѼFaL\V O]uxrx-w~Lj$`vX&NFT[3NA\/\k}df2ڠVmxd-nv3V+O摗M- ;RK4-\sV++vūSy4迟z*2) o2T1wN#OrڍYW4|#@:1{jtUqtmp_1{{ɸk?4EIrKGAu<̗9a8*ЙL"L Ǖ'nƲ"!Fa[XJI5|Fw\b.HKVe:1T#K#NA(IO,*qEv A'"\h̄A7'؈p ^X;uWKוf6R:ofy ?/^qQ+ H<ӒZ' ̞R@t7blDWz;j.h fǩ=̗׆C8q:g²ܬ>2jOԯ:Pf:j̻?8AZQ;u7ܞ.Fc )KU?nt,9L^(޶/kW[ܹR;Q 'ڜ5 ṢKKcՌH}&MkzEV0wգ3|B* |Ȋ)X\n(eng&[)-+j:ন$-ވYȭkCph v7.汭ޢ<2QRCcQ:_2) !HA$et)TovV`XTl$PmwIL(è%6lkR n; #>W^lpx<H}S뿉T/NȜclxsD#R:PJ0%P{ajx8̿H:43 ΗG{ njܝ(l(070;R'@8CxK8N~\Ñ5MXHHlV2~5c)vfcƂvi<#Vp|dj0]}ihX6gE3-)NLQ u`7(c8%7Asΐ:~V9/ySQ^ (=IWO+Fs)KʜXZhlW LyƥuF;ϻA:i<67&{<DċixyV$ +'T!-qkڟ^їFYWmV3teforp3N}{<`o&͟ν8CX|aŶlѸ ϖj#nVC)Y49\fu[A+x9`O8EۣVG ԋir<=vI\9aƖI.Y-{d e]ZRU*{jG~(ݲLӤL=+X>(?y}0XȀHÏ$*v#}eY\V)cǛO21Aob^p}yYgaP)޻7*u 7mf-b´a:b'$jSݷUwU*mIR{}[i)q t@%,8B\yj' DK"\ym:&gMsŮUBg$qf Xˤ\2V;ddpic^V˄ƹArq@]I[1Z=Hי"&eiNp]&饂sOg=k vsF2O*&*e  ),5Ejw#fʅLB:ʒ h_)IWcŎLj46tc|{9p,z Bpy*dDI k2cQs3~=goh lꨘc!N';4?If;l&|NV[pJ3iz rn3֘B|;)Csg{ ZڱYbP$!iٍqQ3 1ĭHeYq0۝4"2oCSV5AE(j&Eg 4Gy~{x6+J VTGQ.E։wnZpJoܝ%j&ߏb'F:M/(5BV[cz\WhϙE(?=_7, oHld.5锧M^,Z`Cls9hYs-n%FDAsh:Ţ00 Kr~I]TߐPb!W4Q]DM '^Qo/B,FqFޢ6ib Qh*_\ýݏcLT0& ⤙m2&dM@3"ub]nX`.^^xJ=ev:xkAg, NpAL`Cv-Šb׬0k5IuOНjD*T?lZfi{nhϟHLO=`l:'+ z3 2XM.!ED3`&Wpɞo+Wy)lsM|Vjr}e(t͘%@fBqbg],`|83/{ȵ(L0uWJs,E4fГ2v98wicy'}I!/-,ӉQ a-gv}tS+S+WCbJ8 Ow_jC~k74&H8SIQQAs&&-g Fo9hX-wįNb[}$E ݼmA[a& n1>9ljsܭX za񌂬461 "lsϔ@\68.7=;U: y1BN+ء]=|AK69iTK+XqT(m'h8肨,bӲYY.@nZwܲڟ+d1Bj†]t9U\ qRSs3U^fhNwszڂxl@Bݝ @y#Mߎs'zn+ ZG/"V9 `e5ߜN̐acl~MQ(ý' uڙ{ _>sljG$tU_:ҧMʡ1$/emYYo;[Tg 0&rY$-Ǒ?/N\Ti(8ek")9"kwSKce۩+ZCX ֯\Ppf7)%7(>!7hINdVf9N)?纭?U g?0_{Y:6 Q@Nzo,I]g#pkӛ"(;q21KzTXjzL8:OH-+aNyr3.iF|]Tc7 tSWhzL{МwB_4ۂѷ⁹ؗcdHL2o( #NpG7ww]5ND?0~/Si`AHh:He0]l.o W|GR|ש`?T*UK {- J;:.;ި?=&Z:η vF|wOn'yp~<ߊnj(k$OFpxp$I 2, V\?3^ /WV_9?>8*|&iC7uR{z +g'Y`0]_%9_lKLn[i ]޿*1`NbnEc9nfH>M깲PqޟkX΃@GASv ʠyx" #y ߗ4+rC2ND<⡥S+!:3 `\t@ E|DMh9=Sj:nlGHY&ģ[Mˏm ?npǖETGYT'2JRC8o*B{g㵻SY^d ,r[m137Uba֝I8~zԁHUr/A% RJ\~{g>#7&6rG(*12:~s64ϜCA˄z<+  QWH9}Qyᥜ{c|-O~R>"qQ]ˌB_@jrSAzA].O<^+AD,~j= Gk# ~!v!$O:ފrH1]'6@i'#acnF_R,WC0hJ Ӏ'E Nx1b]^n >.=TǓyup[z6 3xWƈ%=49 Ē؊>v8^,N#&S\BLasӨۦ.(wq:~ڳ_y%Xm:]|dmfW sssJ5_1J cw"n↰ LƑ G!S*DR)+u݌j{پ2, .|+D% P?1wk(g(Bۻ1A s52E[q2%dmIdxs՝`bjjBg)Wn%s1ɜ^zl eZcBNi/0b7h %6_G'^Y`gJ zWBa\+A4$/x82 C9<5&ҙ 7-glbG!p7rv}v ϯHbe,PIEG;^fDq,YJ#fS~/bkzqC37PKf^*mE&hMțogoy??mo<]JDELD##S+ 2 R0'r]ǘ혰ʇE(A`П aIP,1|| _OdPp=:⦕y4Yh_.X B!/>wU+l6d?Ȁu:O̳ cWiڍ|)$Hҍ֖bf+D_A5iQs C~U) F+0m*vF%Y2o:,rJmޛ @R|M<%i:\pnMƯlU7W=w;0Ke"ʴ&xXuxǹbzwv՛g7Vt_qz',\hJVֻUo:my5to3W8/ ;Nj-VCٷ$ &60L!rf}\F9Vm8zLv&%(^;k8ģqWRWC}hFA]|Ϯ҅[HZpʛ&{,[d$iak^xӂ~ dgRJ_܂njubukalG9|^-Ԟ65u4塍ҊCC@W iwOʁꂄɃxĈno,`:OR)Aɓ nƸ0i8X, @__7Wp>MZ\pnZIX8 T!# 4Qv1!%gXl܊+}stڦz~IkFlvC9nX':&p6@]bF^]HUwjVbbGc۷<;*+/h}xQ&+9OwvO$OY#93np4ysGX$o!y?cH7'nJqCv9vfCџƤ-nLs\&)"o&ӪR{nh de'nSy"XXDGLQp#'u%9D5j꘼? ðy ucS/'tg\`8d[ e~pr7/NJ؎੃ZU͕Q ZBҖC4.T_ )X4 Xu2FLmtu(g r艦=b6QLɃȓg@taQWܷU7k'U}u< VM&cjaׅ2("}ս!.ȧ#dMJ&9bVQzgls5V#cP߇lb}JJW1az_ aQX 3^ϵxvj$)¯ZyoW  AZs;K1s77b~nt!00) ;yYV6H2>͞S9*i͘氩h 軈GQj]~ g[R/})ZJȒXPdNW&>jo˟'wq).obEXGδHlb(ME}san- p$D?TSkP*84;& l@8%}idNvtzdKc9 Wcr`,2댨$d0nz6tvrTYo&b87%˕МI]|#_N!A2zuRy#0XL) 3&{g d0 ( !iE˱:=52+.%Uyi.+i.w&iݹ%3 PE*$80O+&T6?49ras3yV\VI1#"]mpƓK[[%1;B; ,p#6}#7%7AɻQClm6rJxz[9}&;/`Qb |-8=xT'˔=jePO:$e85D {s Uͳ ٪FWa{p>>q+s0<[bC@XdƯsSEveO\H..&UFz"% U=A7@Ԩ#V9>~')Q>}s=NmQBc\t:MH:`+[\h(EtáY #$O0>kq-:K8OF0&+L]p(*06%PY^<7}39R К}\+ ? 's|zYpZ^A&zb_A@S&wc+=+?SisvqpRV!"Ё!krβoT}F9C,'D;VyC m䲝 g<\:o^*(XK] ~b aǠyyzi{h&:P%79Fe$+?РБg(qG0phakSq/~:Ox//;FtnRf%چ@%#c> wpjqdUT "1TF@Yǒ!lɎ"MBǫɕHH)xk.2y R.zv`Yy%V3$0i;$:>-~)h6^JnKwu)+:i+0sLo;rgRe h>l%ɅjŏK6;fý(Q?XH4TnFEv+r9:6 7JM)0D=(`1T Yx'eLVcF2ޞ ? 53|΍mxKi8K3DMfv ܘ敾ZOSGlGr!;3md_ٜ}Qnufj0N\^,1{ T|;!n" U3(ϔA`s59^ IGW=T=%#Wj7䉟y|N~9Tlbs.cEs&.y5$v^)G#d3 ZM|ӎpbu-"œ%~Ч놘 n'ܐƴ~Ϯ° s:zwk $_ֵGA[;v?0[Bj,ԥ19fp.N>&^?I*ӎ`!얟8(-ashl6ou}c>g}> ?3ijXNw[A<"Bɨv%XE ~^YAKCfSȑXU)Bz0rArOF [o08W@Yl|K*ܰے.: s\s-wp%,@sQ[\~N $95zzRy87%pLjFp d b%f_ k߭0s28,ͳ}Zɭ7Y/b'$weuZӷP;YSCZB\e4WX̢ǢfN5b `qԟW .Bf\\㕻yc:V+w UPsd GahX||BeU-P! 4<N6╸ӼOtnEY=.grS,$dxHVF8=իrDU7!.sIV"+82LgBmqr  |J7Z }^ x֮dn5d4_+='Bs"mx*.|F FxFYظ飢?>7O1*7# '<ާ[cWrD\2{ƹd 3EUs{1arg-잙=OVгtxaoeA_[1/9VuJpđD/vS&!J!Q dVd]?Rg}5LyWFF,GAH=N!^kzS!YLjf: u@_چ[jEP17=4(9!aJ4CȚx,StKD_oʵHP b^3%^CThnq 2k޴ߡ]P,U1ړ ~ގ Ԥ4+w",e@ ~T~6|FI g}΃Zg!ojgCo 43qfh!Ž8`<sdc͉r0 Ej;1[yy*A*jr\6o~\DI/o BR7"v0k>ºdϼq qڐqWAUZ+@It'u4 qw@>!S9"DrQ{v%HWvO~u-Břsd! I S]39Nq%ʷ3=5wtAYI>*:SRRG% VAy O\Q#e{ǰ'Oďb$vzĄ!ଋu5SM!մ3HH wn+g<a LxUؾ^P ҷ4&KwWDsTx*|t( c I1PDVo8yR|`hȢt`cos +^R2) KBٽ{YwŬƴAw{9ueu4*sF09TTl",g4Ld)>\qYpp)Ue}ŴȬ &`ɂ~m%M<ΓՠCyDwTyE ~>SX-Mm;@a%O$ib6lnM#Gy~ˇb[|^ȱIz KxxKEywo׀!JxF9\*d^bg0kHWwRQX+&3 e\*49cjJL:ZK8 *Sݖؚ]mg%B0ٿ K‰]tTU'%ڶ0f FzKL|1EϹƳo <&Vue"_Q)j>uہ!N\@ [Fz6!J5{oAuJbB@὞]~Lh4ݲH e|./orTOjIE4LbԮűBRO^oAb|7_]v/03bV:Jv+Y WuH]X7{˥8%z ZT(w ,P}2+yA)d4})=8SbP#9s`@; hKNHhz/'L@*(6okF {r1}m!"Dq=ab-v Mnau'N,; zI7[OJ :YȲh.=ȩl۵RZfB'G#ygsBy^.'YFO$T*2u+]!v+mt'MNFdfpj'+ S]IEwqүrG0jST(Rw6Su2 -J3sM g&Ӗ/QuyAX`Z^&mçI58C<Ϊ7X/{+`/:O3,silTzrUQшuH}WM3c`6uaFwY`NU[@ *F~'\dޞ|~zq\·Q >:K7;& i}@RG빸:?`dž5ڞd T M,47b *>;&?J(xӎtyD mKh4xSm$P:kggwbMo&G]|Y_Oǔil!u@L렛A"3a`3X~P NB[1S0yȅk^I"Qy:e圶Y$1G͒'/t*Ƣ+<Ji2]6B TY#N':*w$}K eܗB;(/MWI"m9cTUG .5.ЕLo3.?߹u P8tcg@U2nuB0]aEZ$Z̋Z!ͨ^tj(W5#zϊE;߬>D-ATixEE5 va}Qƞ$JgBـxD&2'pRgmЂWqN'])l cn=8MٯN,Iy;3`,h€}rO_ [7)TOW*zJ: .aK픴zZcӾů(إ(?OQ8Z-˜5M7 !'2CsYWz/& pY>ɩDwm)xIʝ2EKpeetMn~#18NDC5` \\*G 6H||["ozg"3uץn"Y'_S^dL1K[W߆jl֧˗-TU%N:Nu. -A'EPEC0j[bԈm~<%4EM-!^0w˫49T-ڣ,q%|9D¡yl!޿̡ !r Detʺ>KJdY#Y@~rA~(0{ƸlM;+f(<~Z[s;זSTjRpF"]+iЛ;[E_ D Y 6T!,"i :%Ls{GZ 412o!P]wj 4¾\xp FK?({i=#͵ܯ)[c,,W{a:h{j8Vh.DCQ13!/OYSmj[@wDs'I@Ć,㦏f ۵\'( SXHL؊tnQʦ ӼGs75țLHd$4^UB:ԴbEj潹p/3lO6jܓû~@BdB* ދ7M!`إDI=YBB0=x &:VǙ{5fu[3UD=UɣW1΀I,p\Lǫ))6Hq4}8µ 00i2w} 2UŀƬ~t^TL.#dQ4Oc aSgJ1S`y{Jn<KСF;loMT 32L-tw<_W%䀡}0N\Z<,E4h :i% >]ra3k:%ͤw>2!cCK56Pa-'<\ ڇ>8$07yeB7p:zh4TMɄڝj{gd|M;n @ļkDw`+ȕg|Y +ULtL{r&ްU칬FcJI -U86zbUȠ bf\CGtm5 p՜Nܯ0O[d|c::݁%qۈ01 D!?ީv Ȉi/.XkvZ n]\AؚiڤB ozB\=TRtܜ\E.l持"GeȰÎB]fEW.ss^Z/W AE\I˒jG[]˭Ya[ˆuB:šX8G55Llo~n Kw2:P! /B%m\ CI<؟Od0 L ;Q tm+͔wrht3/^dpla}HUw"fP/snV1jqNՄ,h2xP(~޸Jq ȁr;!l;`vW=X+AN9Q ݖ3ɿe[g D.ivQ [c{G@cAJyMop,qb%vN¬9}onE#_F`Sأ.COϑ{?R(X}*|_4T S)Ps \Ma2m-?Y>b6n )\n`)z<$VW?<dL!$.{} jב)vqxfVnEB~[r(~CP (L]I"lhAyY Q5C_ aI7jwM&/ďI?C4tEg76sCقnmSc#++QoM0@cUҭr*؊1͑hruBFs8¬']_2Vq[L-Ҏ%=F$>K˿rDmz \S O8Et't`9T;7/)#)MAY.!~"z"7ZIYhO#>4@9ҡuoSGf4*|U'q/Yò< quEDҜ5R?R!A =RV5 ׸ΙڛS ?c)qCbl;D `y0r$_?է+i1{ R ?XZHޯJ:3xƖ 1}&b,9Μ8g# ڠ}Dl-Tq]mf{BhB461V9'^;['% %5(R\r?ipWAƸk٨[HȠ(-ꬥT) ʫl!Դ$?t#o9LCYD_ Z7_ê˭ w;eB]O6霁|=9¿kL"MYtنj/ޭ$2_%Ʉ/++*<LqGĚ=!Q B95;Eď2nk(z:jyZ̞Ȣdv2{I`Fhꛎeb<ٿN$%ߛ%0SSrÁf!˰A D^ڴ}=kYQKJ68u^o*N['""IYpuZ.dN*SMr=Sѽ C77ql! ՑCzj?9CwB\ěͫEABd)x6R?=FScx?jY1,vz@:՛\gf)JJiTK$ 9ϨL虍^ڏ7ՙ%19{T#S39̚g+['#d4,fwiaJ%-@61}@9%ؐ&ɢ=b.Vy -cx%xÃ/]%Ek$홶7l - h#q@|hU1K % zl#[ԸxOEM I# ÃT_5{enLY/q)7ly@`hۆ9RtxI۫v0 3ĸ&# ;$ZcrpE>M-\X݄(nڤ*meOMХ ,7(^HH+ȏR]Β$w !+)>V]e)I#<y;1@ ˙]v"SqˉkN#@ LH.wzc5'ԉAXܝ$ X:fB!]v,O2aaoPH`zaFip-WΌĖw.O}@4Fb #ouAk '\&$c& )@\9..C]ceFɒڣI3/ ڄ#䰙qG}H>T!M2HϢ7GY2^b2=mtCji#<흟oh퍮bqU&:m|Ven J$#Ӈ˺ɕϳ5)`M&.(Mm#M5Hx/W,᪚鋾 |hU='CVs,1S֙rx'e˶B+IuW뺝4FmwJ} /ꪭ_h?Pj ,LHd%ϴ64hn bkbwb^\'+Z vZ7ŵui"sfs{o%eZQ H-8τ 8m!XjN]N'N,NP Ȅ\$O+8^}ރ4邕-k/#fսtмi]f$e綿s HEryhay Iw,l=a)GW* %ZhSR"- KkY w+r6ZYWB%@L=}D6TAT2N\rnn2W#'pE9~#Cm*!i# н_|6Tɲ)dChaz_|^ v;ok6,ϛ VEpx! ,_7#h[{ v66!75E"gN+dop&@@'괯4K7b^jⳊcnʦzw[wwXS/14[[|2lxr=_8:TJuc/AV-$& G$}.f^a> i^mHe'l& oWSJަpCmk2p i1w!_$ «a=`Ȇڂ0U$K طo[{7 `V|tjZF:7<&j?195aKpoaaQzsv1ʼ@^cPrUߖ至 :oeO(CA eig}B<6_V$"xh/%ZU71kzѳ5ad{H='k׭)C55 7W#nAtQb(_igUpu Y8?<Jc(׬\Io4ഠ$#w1FpTyfh{MGv:G0(//HiAz<Epuda|H ztEݩ#(d0I:_YU J.^a4'dPK/Vw\NpV/ZsoN翴Hn m%j j<! /=>۰ \*X:;I[مBП*QxW2YsL"sbcb%`ymHq/#[$mH߀S#wëR :2A d]҉K) $`}T˩L*OxL2d7HS2; *yOJ@M0 ..yj 5bTr_`q7ŝ*T?Jۅž(d CZ erTd3*ƎI?TЉ}./4b++o$G0P}Xb6VYϦuV\VnaVDFQц?L:~;WGx`B gKY.B>+n*巨M2ӈpߍ L$#|Cȏĺ/l»'s5?Y5jY-1(9Ǭ*xfW):j NL89uTD9w|f&r ͝3l?^;T_Sp.5 *!c : W cCj5#Nt,1υ,u:M 7mS@CXu5oG5նi{ !6|y%6\{̌'S%'Gw1=xwxTSڞ~JĊ@\lsW?fX NVqWkzR c|47 ;GZ5;vℨ >#Pݢ> *e~l$4 f=]7:tsk!ŝ,QZ;\d E{?d tVj_Oj;bT&~~r+\R>zL3z!`H,D?ƓS~t_7~GS2ѝxArRvky⎉o::,7vg C7"C m[ \dg@!D6F`a%Y/TۋrZ r#nzQY{ (A@|zfG,o8A*y=s+ݲLaM1m( `->jԎHBەLHOd="8½`2 7Ȋ'Ep 2K쵝Rm]:  _l$?\{3"OS)iO1m6:edqM%W.ζ( /;Qީ..=d&<>Ùk 剸pWlik<΀?19ݕNSspz< ,[zzpΌOϒE&vq*%v4/ňc2(9i>gTn00vgXZh/jZqE ؊W Gq1pgZ2fn΢?ы-R!@sGYAd08G"G8MSdl&d`JoI|VӅޙ/-9 'i0ow' %AO'zcMᚬcL;icѥM/jl D>"qfK\U,/)\^ڤ68cو\)IRV+'ڴP,q=&٬e~_7XX/%oZdTQKu0_&RPTT!';!gkE员̮2\sp_QTscrߙdC^Jm\Y4༭PJGEy8eA/;zA_nw9;`=eb,'{fovGL6K%o5|TT).a.[m\MH:am̰◠?C! ,vT/*u|f)û^":=1Ͽp'HwCe_:3LëX5 ,ͤTA.Tap2ߊ+ުa(7:UQ i T9}C|nR4;,F"U^c)ۇ[vHni`w[ =F*CnDŔ`y0Rg?md &IP1l;IJ"[3&M5#aHMKCi>Wf00WnYYڪ1!s<'anfv+v{~,tP40r:a#VK29Di&­d:[,r[Q8Y0I[Cɔ', E(U֙w΍Vi76g-떀+#c(#7TX`PHͣ]~lɗэLI*8d*eMvwIX`/b(JjYvv<:q݇}͕F~`t4XHG&Dht U db0v86vz%@9 _W .p\O忓i+Z:lxο˥K@zh:Ewt55ذ>}sNLg!B)ߘ;-0"ѫC&uAxJ&C &4: Lu68,D ;qx貁$UQs,uGJtיkheǥE9e,4%6E8{N<'MSOx@B~E99]<Th+"Q5r 9zz Fi^Uzo$`Zi.apLA!HҠX30LPOu8HT5N^v!sazrnvQ}6.`$+rA`FqeT\~K07+ǰT_-pN@@/6sa kd At1} = 7ȩVl<$[jCZNeM}pt<&qc!φDruI1t@ÖK<lu |JOV_ ԇ}f.MGRnpҫ*S>2BvEǡey lr\_Q )=8a,i޷Y5AjcbC_[7GfdBȭ%j(J+#HR MbUWAEf"(tMS+`^Q֊Gjf0 nߠ/9'7U`R`A4lElHE }G9˧ơȃVIpxԑ*`;bجC7Zm5=;\ Kb{s*pz\$=vUI]q-YY Yv8 M'?zPHbv#d/׮J`P@7+\d[Ȁp䋂Y/}];jw@6e9 ,N'B׷gw3#y$+(L6C =\N&_)7:d4 31]{nlԩa%ʺрv9UzE_9)]x2hn,2dI%4-Q KL|G6qqkvi׳9. c>ExJײUcSco3HD:cqPDtRsHaɇ$@O+|~@5d5*TsG_t$o/{npn,n"Y9c9GīU<›:f~g*b.W|~?xbM2@>\G,TCptGgC*c"[0т3jS68JS I) X J8pWBk(I 8C+ _s#emcG5^JQf!9Rwvs{Jϙ)˖sώ`-; v{ 1I\&F!-21&: +scڧ;\`LR×k:zpm,r} uv`ėI _ bD2 z"g=Y{hTjw`2"'1ɬ+-)Y5N\l!I9>KDB9:$kvV$p-\Zz&^%Y {^rPBlxC։ȓ !Ξ:l滏Yq=z$6ί3B0dt%QOC|Gͱ v`"A8OD>`zQ4#GQaypy}hFfֶ'3R;E˧3<,S c`]% <;|A/yWVvWy "jVBm}i6FiٱmsJsk8IjCl "E/kD%M0n%(GDѕȥ gum6t#Gaz3W ]]ڵַ֢1@`/-Ok4wdxaS+oɛf|CB.fzRl SSvLJYk˭|ϐTT?L?+F&+& d 8 9r!cl]`]iB?3PQk{tvmҵ?𣳪 [{l: ^"uXQX W=pO&JRɄ_INam+&XBvQ_;\+ z2|D[i#^.=8 MŒ z_$1pʽF#]Os9bqns穋=K $j؎sWxMƤ^m T*+lx IuV4UH#vJxƐα7D};'b$zbooŃa˲!'Ҫnt[l88V. {y X-r;k,җ㧒_CT/+4.c\e?%1GloiwFOE&rH| ۥ'H26)9SZU.-%+ޘGO ,/>r!m>o[ }rO"aB  5y{YmPCIJSj,M*~"eE*chWئ)\ǝ1,F~d%(Ax{k\ * bur_`D5D޵8`VY[αNOlāz 7%xImfBMƂywͲ-5ā[pæ E, kR^pT`%@B~|u.ә0tIŷєy"Ʌ`(6cKRM.Byz>pKѐc?1&)uՌ)dDKd|ɽ6!l;b֒{7c?,RŚf;^h dnw#uW,ސ@[r~P;+k *a212@g{XT=t&ުOmʉ3O-CĩlWE`'1[V~3d IQ;d6qWNBLr&9|SrYz (2FGb4#D"jcOT  TW$}i6ǣJ*HE,7eA{y~ɼJ#ֽN/u{FU'QY]|ZLI| Tb r'Y6}Sј-:y 1ڵ]>i cUr~g:eCzAg)26Y'ÊSG W}?!pQ Nd ᳳu&Àι ͎#Lv<߻<HƼZpp`Y&7R;;R­z4jƦ'׊5ve[%1ƗaR[jn. +F;O%0mrJ4ťW_@>Af%,ߵ6f!|-V 󿔀G{^lT\!^|=u&] €7jާ\wr8Qb>S^_8fST;Ubg|Yjx?s dWg1U;>g:Ci/䙨5E6͕{A@4!k#¤Ite=,韐Jfq3M?FT%7.^gSGnX48l !?Nf K(!As:cYF# u ÍdF %pgY%g@DܦE3-f$]UqֆȺӨG1Ƽzy~g5-@:M[(޴X.M$xg>Q_Dm@JwYXFpW3vZt6]}BY/JX;vo17>2˒K p t!c"~G1Ꙭvx"`~͚w2(:$+\b[q`k?n*sJ\jdN5@-ganh" Leo< m{\j;Yǒ?'֬޼P/7 #8K\G,Y+;?'2ɫ%cD C/^s~%ͨŹw\f=| JD}`M ~έ8t60m]vZ$Ķ\R/a? FC#a8}j$Kr )VKAr ͳʮ/xz ӜiKc skVm-@l$!O2ʽۅ!! 7/ikARd}beHiI Ql/%ix):%+!{$ ۷cۺ$v\e7SsbqSg!:͖8FfĞ45(PT"Y}㱏Ÿr h*g}pDD8p|X . e6Q9! lcl;>wSρ/;xSuP+MP gu'GeAZ)~8*.9յlE 8,1 'ªUy.g7y5E"l1ڦT9,Cw ;;@Gfke9}X{zWAIOh,pve|{RhzGi-ߩ `uY-U"7ԙoV=zI<cb\hc|N-ޘ 0CO $W(PEH*w(.Czy@I|R ^ƜG^?,>>vlhWI3 LwF&SUѵL2.Lѳ*Vb„z@Gqj*}t{$JOs:XFɻyRXi1b]ǥ?b)LGYo5dA" } "ThHs Pvl&,T$QL]>n<;f-"]B]?H ]Y#a:!]uyR#Hf5b(#ƒHz\έ*EzSLvq/PDt= +q#VSC &]ظZАrQP|hG4 ٙ@#sq篒y蹘Bd:O7ǯλ=ϱ#3}\ 9i1G?Zht?` _7xmo8a}ahC.xoEwa@͜#7Re7t+DEo_Vڔf P~#izIi~ _KkJ5L{ñU]T";wV cѻ=ػ)Szuz錋7=,S9: AkvbX[+\RFnQw[/=Ẇ`|́%ACׄ w@h~E_frB]7%K ghӥnjQI|9(쨄wcw(<QvBhai]Qt<}dRnpqe7 Ǩ%+b6BʲS}?3WtyN?exd/MöV#ݕ`& 5oyX.!7gD&0pܭ2XPdU4"fM& ɘz ؏"v΂`걆}`*iYYij= UoTZ UZBFwX?hL\yĽ6w8b?QxtTlz2.' q%«z,t5%g8[z4huCM.xuH $6ڛq!.^!= t]<$JZkCUh@("62%+b='mR9=B}s(oZtr)jQeQߞ]ʇCu!ś]vrÂ0J9jw#hHͽM]5 e9цI]h7}CS5\wɿrq(— 7_|?0@*X "vuFP.fݱMAP%dlVl89z)9hAخd/Iw`%xebmbCn3T&'(5H١8Z"ΌOrx~@$F./ c3xn<u=qJQW1z+ [0$jZLQlTQ5Ra[=l.d(/^|% /tS}Ep&-"g[1W Tjmj8LS1s#eZ$=:-c+I,FKo(q\L& $i*0Sr &D=|r"Ve/Y@Dag"Hk=B8cSXuu5SD6]$"x8(iǭ;_ #Q# YaQ_"nycOPnǦⳚ!+8m~K~+ >ѡOfzVJGր9.]`2 51$oa+Èh?0 LO:yȏIPk" >tNxiBZN r7fV7M; *F澼jYl:[`G3J(fڀJWD>8Ƥ<u/{O'ўǰ}h@Q}2 -es@☑[͌3C #8^٫*gkcd%# p-M 8XΝY[-YL,ez# % hP`79-0fsQ-F(:1IB0Chi;$PzR#FMwyxO"E!%: d]8Uj_DhyICdC F×%^xW{$YVlLecdHfhP-B5$[{.-H@S4/cVJTI?FR-4# F%KUSGuRh|.IL?{8L&.|Y;MXa gO^,Nh 2T5OCnS~[ "ɉ>7$zhrd3 fAj mtD.m=$ (WxenpdCvtIhؗס+x|k:Q;*/RQR,Rzxr(i*FQ2&6ElQΆj_2r!iOJ2)AHy@$,pM޺[=HOwC[Qon)3nfEDq"? }>T t`ᑱc!4>2[9缃fW[PXM?tZXżQ + ?1TJ$d3d]XOU݂唥M{%76rƿThhqF.FX}yy[o|Fm@%Xqm6T0^;D  U -)w@ugu0N".ٗtTt} 1(Hf$kK·MBՕ ;OxLOUT\+[A]=_RRXeO崢%@i۳K~P|չ>1vt7 {d×Yb hң,2QzOښ~#FܻN&x tt3t /Sbh`9 tUj>oHf*Y%{4Qw^ '|7@6 -4_$.:لf7w|M"5 $ӛuL'f3l2lg;Q]_{:o+Xcla{?,&:2Ck$jR0np{|$X>VKX拵`xH>I¨ hk*(i)Tr’Z(F~9 dj†D<@;|C֎id-]Xm-:qAO^ q(ʘn V w% _U3D3*-O} Ku;S߈;ЂhFI]X\6,}߷t'SIɕj6ј;Ͳ Z}IqVugNv Qcd{%=]~2 qWQάY5>cRLÕ_o({d0km]f>tgd%z v=7!dC Ҷmֺ\r9B.*j)9q9@kJv"ҽ2Nًb5RiR1ęS14M]*5fQ /syCzbˁue3>j&NȰ'ogOE§]W'^2]i4pp/B{Yv)hgF>Ziu0aR Y잱~{U#S0E/*_5Q=6+}&Cad\4$ːNZ;Ѵz_(mJH-ĊAiY4ZPbbWgq ~xfS]:{8εDܸI0R{  5R>]7 O/,Bxs,kICSB^ܳx-ːF|J.*dy% 핺zb%VxeƜйL{-he? mٿD_}lQI< %!eb qȫރ`߄Vg M*SjsI1Ħ Y)gS9}UZq 4r6p]pͪNNz8Sj}  dz$Jʚ93)O%3=@a |VyM@״陬/zqUl'tf*q"y|B!G닭WKَ타u!{+(¥20CG#sMLH#j(c%IOU$U݄<0 ]-"KٕE&q gw?0_]EޫLx"ղZg'F~n?r/, !|ũPq؋kj02!bA)p{;rjeS hWwYt֕XSʲx:)iTϸW~8fs ۗu[m1LTjh ;`\gLuD*|\'p >&ۣ>B]6k` ޏ ժQos[CCe+ة(;4L=;_/4ƌ}0a` #)V.H th[Ī~x[?M(H،:p[*UC5Vs8+2:n\L~^Ҧ5#ɵ>ZW{:w;)m~oK`yoI027fsdKh/`wB6){G[ fQ:.zOWg!v41ito҉Oj>r(Y4ē@]rW}AJ$8 MEoA5E ULc%Q6Qڧ:սg8Fm3 bDK.{/:.5pP_Z~ F. ~늷3 iuoMEu%_m3_ž ʄi 1!,Z{Mf%+Uר%a[X)_}tu}t0(R`+cP%ő!7 rzb9: {J. @_h}ue'aMf2 \Y}ˑNyj5n_iv%s+BҢc1Y ߌ5v5cWA+uzo|d NS+./kؖ^^jscJUawB`<ᕻ+@H:jjLztJWQ@ǻCŋ,KȞ ֮c@m IQur8P| roNT({O0 uZZy1OA6K6_A?SA~[ua<.BQ+mlѿ҄+{g8(Yufonv@I[=9|sd7.5RotbZfC)%EUtle\?ƈz]>UK p7a,Tx1Y!iGV"RC1 t 5Em`m^"`!4VO.,YrA@mA‘_9AITϛNdJlGUb\U?G\eBbƒtƦ14cxx~<7 zL>fs0D<,$@Pp;sTUO[ө9QqzΏpO}PK":V4-Q{zi^꯸en ۣIS{QcQo-7·([˜'x·ޙz{>ƚ:F1:)zRݩF7?tʟH5îj[TT Vqy;YG_妭NfqH'#QZ:3 0?&-[DSkeCd, ,@Ic h]Mҗbg?~ ښ&l E`=X6yIs5s*mDaޜ+%:l-BsVi9Y4!AXd׍CRDuۨ'Fj,ɩ7XR9j$KтX- ]ҪVlr|:f9\ _cG/1KU[ %5^{ZwYsPG[r! qE} 6btw0_,cٽC} /ʠ| psA6JB&S3NRsmןRΤ"~2P2 r0Y-1:eIlOi^m2$H|h== GL'{uVٽ^[֛cq#.HAnl<T1 . ⚣W _Cu-l] j6@uټ Ix/- C =m'o{%\(|hĨ$gROxB][ ,=Q[[=CY#D:VLesP,.8?t䤹\1SÂD(|{Pvj9)Vh.u h37I"ZT}[""[i4a<(ۊ^᤬+d!_\_аB>3!BAFB~~4K϶J2}Y[Ӵe}F>Kl.D̜p[R3f!@4hx4{)[s3Z$ʠg+0NY<)@k6MTg zNpRwo*e%&bCiyjI58.qqgK^A!܈(d1 1<~Aw` / :ZV4FFdjewn篨E1aMBv,b:Vvq:Xc\J]UQn:K?z۳I86^T1}*yd j'JZ߮Z{N\ߧC^E).a @n0d':qO$'$#6N+;ݳ\@4j$#"lΛDv;+|S:ZȦYOi{*?)DCWa0@۞mJyEq)OtDqS=x Hjr<ǘC!辄a&/>K^{]9 |`z@ T*ЩpN4M8b6+3F }4RKF mzۯJ.Q\W_)ly*~ ݦwPh{XۼinZHZU430͍X&[e`·qǡLvoY1-Vv!,9je'uU_(+:3m/u!5;>-;pؠ &R ZT9QX;[Edki䰴ՋڕHз&n3C`wv$j~&l2ppπ.m&T{=B.;kv˩)SS5:tFtXQjJYz»RLg2K*rAV#wYVfԳ.{SS(\jz;w]MVԃK\9,c?krFxt'@VuF*g>Y'v樢KV"4khqyDS]*q;FJU2Mg&u}M $@wT=mRoɻ9qp/3TH^ux‹J\2$j}}ލ͡‘A3nY[ cØdX:O0_cSe2Ŝֿ]̵zzwqz}V2Iwr' :1o|쐳 B h M@+[g/{n$SL 6+L! cMi SWd~B fB9 }~Eڵc%-q7O "\-2=&CS5a3*hYp[睻DOOHsU2)L| 9dhXWֺ*޽Î ̥=I>?J}_-Ro4OX)z?Ұs@:CSsDhpGl(@к\aUEF\ H"bC!cDL=@Ewe!0Ge8U #-ub_0'[d꬏Qa. Kfޘ\5tq9HFEʬL̅!aejzUƀ/Qs(= 'ַڟmyc+ӴmW\BkWQ`p}ȹ>Ȯz24۪^5s pbG[+$Ѕ  m9~3I[pW'e%ގBeƝ)[C&+MࣹK2|mkQᡪo#=UDU}E smhio֝-rl7S?KW0XY*`.A)>cz3Hڄj_gOFlBy<1wck)/b-~g3Cr*Lp:j""P=*qLh;BjED?Z#UK8ã^n0 KF~} :L$t]<'3`>4W@}Dsf@#r2$>eRrpqaWV}bL(yjø*BJZovKazmVaJTjM`aЧ"iA0Dw}Wd 4]=Oz2:az6:&8XAL%8öLZⱫnO";P3thSLu0&!hϾN%̾{f<]=ĸC_D+@hbv⍓ :$wP%jŠ6gqΐ`PGK.{'-_Z]WCZ)4aL菥){yAr5 "/ACP5"uWtXwdFf>RIFwC1Z1DXľ ШV䔠J>2Q{cőh\3[-0b7 ߭墐cr`i|QqЬbәϡŹ2Fnpx]a&C(AuhNcGLly2l`CC?D)b]EaTtEX¿NfLKtZC3%6Y_ fwsr[7MwS܍}ZjLtqlr/p "=:K.# {u1ƈkJW~Cp@4JZFGA*8A1hJV =Cel8  R<%1rbt hId4\3DH;+&SW~xCn_@Wn+6a 5 !T"o>=?kܹ4$6HO=?]S?{Zh'?^[YmLM}^!i>)EJhwcd_-@)iڗ=d`iJ̨%] Y gjovo)X%qi1+D-buYدxꄓRp5x>.(#aV+dzRIT^wTnY" y!zA2fS#xq^-Ugsqv+y  !(nFy\<K$M,1%?~(?Ґ)U@{s>ԽؗAةe ըeo6~y--MHزg루V蚿#(ϚŖkG˜oAsoQMk=I|չ2(Եb7c[YQm ֜!Ďq`$?X*A |J&9_FOLMisAXelZ#Sc _aBټeG+>H^nY'Ў5?Tn+7\?;lPYuW~ގ9rj~ÐݎULi[Cߍ1fq +PR\0u`q?Z.`ArE 뚑(b2(ޝ4T'*QO0GJ9>Ia4Uru7oH+ [ҩԌ#DTM D#rm*h)A rgM i.{Pci7 R;5יXb6b"`k83Q(ۋH']\o>md2{>A(tӸ'Z8c@ )vl ;-9">$wp1qN8w1;f&p=G;vC2ja0;agϧErfǦ]!v ަvx'ށe%SQR8@5GKd3h4%=2Xk,XyUU5aPZxS#8y 8zJ{-:=%? e4xYĨ"FHW6u% ._J}aUiNٮYICiUel&dy TEIwnf=m 6(F,O.]SmL?):F]ӎjQI$ |dAϚQ.4u C閹…|1L$atSp⹏uY?"֬64*EH_˽;L'~靱[* $b .IS2S)c`ydћAYg2McEI6#m9si%v%IhñGqsԼ\pXcⷸ&!adC,{(Y`.PhVG'^$/Ɇn!FZ¤LM]rk1+gk {|&ĦɆb18(Ƌ~Aֽ+]KTR:t&F˚}Bj(̓W\.9m11LS{?w>\0uڂ=GZl+Y O/KvsH2C.Sח,jR--W@ ͍_&> #veh[τUI `ɫxn.Q5)EOKIREmRsڙ׋|y4 eD&+!h#L4%K;WY]l o_r _4+'7+iZ9{<hƜ|'PjTzZg\[:I)Ur̶]ʲ0i^W1ȋ jىrCsRX;CNUٻGoK>v "򙟝-վgM=r&'=t] *G+񌈆U ֋  ~m <# a xܺlֈdӲJ'tbTTwZ;*2"K ( ;d/盱/!6 "ujsD[͚N@5w.daR0S7 \MYxIYؒ= mXקb%곲T:X*M8HS4zB@k qs;Nrg퉭k$=3G7 ]z +7u*˓ #ua8u [d RkUM|Gn#6\ztUXUeE33R eRQqy|ObݪtB(*vU3U&:cB*s4іP B8T.pwA ~yvo0хo%}m$#0:6">8x?ζq}R `N>}2 'QWG*mwRM&F1b:ɰ ǝ/}c@7σ̊Yo.BaZt`@V<)(SJm_iƅ*_ WVKehwׁ#[dkՐ-= 簕ms 1X@~)|QcO}wUimUIJ|h<)X{d=}I.i4vm,FV0Ô@g AqC3>Q>S w)ײS2Ղ%P7aHѹSmJU'pf.Ntr@82]NSL77{O6yDz\qYLyVNJaJģWC󟳀?γ}vcF]2cB]aG%`o;4_@!IÆѽ>@qҀ{ JZR3?OAxҲ盫/`')b!%;}Nс"] iNav6TAxy?Ie$]/#[\daEVT@"Ni0G@LF AM@Yn6]]m;G ̩,ՈuKp7KN(]}ҼItqs &@~1#.wW4cɓy/'$, L$v[@6IDv>B3f&s?$ʑ6;ꨉjpG*Kiġ{i5ju YZ