tiff-4.0.9-150000.45.35.1 < > , @ erp9|e0Gv 8@! cjtϹ??yj LF*[%>gSVyz >7۱o8Ȩ)yAוOn % B"Lbܠo.{=xXB_Ebvgv:! 9sjodm_eub&w
BT ivL"-(xf$>-QsfWJƐDx݇X@_j5IX Ԏ_}@wÒ > > g` ? gP d
Z 6 \ b l h
d
` 9
: = AW E E4 H0 HD Hp I ( I 8 I 3 9 J 3 : M 3 F 1B G 1\ H 4X I 7T X 8 Y 8 \ 8H ] ;D ^ F b G c HN d H e H f H l H u H v K ( w _ x b y e Z z f g g g
gL C tiff 4.0.9 150000.45.35.1 Tools for Converting from and to the Tagged Image File Format This package contains the library and support programs for the TIFF
image format. erh02-armsrv1 +SUSE Linux Enterprise 15 SUSE LLC HPND https://www.suse.com/ Productivity/Graphics/Convertors http://www.simplesystems.org/libtiff/ linux aarch64
(
x P
8 z t @ r . W 6 2 f( 0 N 3Q 5 8 ]` @O K$ Z 9
c O
4 H
5 } 0 % ( 9 !
a yu
V 6 ( t X
.
= 9y ` | 1 F : 1 = O @ 1 f " 8 o E ^ 7
W ^
q } J '$ A 8 # Z R 7 s - s
> )
~ 3 C I% F b , | / Q 4 J u A큤A큤A큤A큤 ererererererererererererererererererer7)ZO@ Z= ZerU\IW(W.W(W(W.W.erW.U\I7)7)7)7)7)7)7)7)7)7)7)7)7)7)7)7)ZW.W.W.erY! U\IW)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W)W.W.W(W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.W.X0int32 conversion (when refBlackWhite[0] ==
2147483648.f) Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
+ libtiff/tif_dirinfo.c, tif_dirread.c: add
_TIFFCheckFieldIsValidForCodec(), and use it in
TIFFReadDirectory() so as to ignore fields whose tag is a
codec-specified tag but this codec is not enabled. This avoids
TIFFGetField() to behave differently depending on whether the
codec is enabled or not, and thus can avoid stack based buffer
overflows in a number of TIFF utilities such as tiffsplit,
tiffcmp, thumbnail, etc. Patch derived from
0063-Handle-properly-CODEC-specific-tags.patch
(http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
Hertzog.
Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
http://bugzilla.maptools.org/show_bug.cgi?id=2693
http://bugzilla.maptools.org/show_bug.cgi?id=2625
(CVE-2016-10095, bsc#1017690)
http://bugzilla.maptools.org/show_bug.cgi?id=2564
(CVE-2015-7554, bsc#960341)
http://bugzilla.maptools.org/show_bug.cgi?id=2561
(CVE-2016-5318, bsc#983436)
http://bugzilla.maptools.org/show_bug.cgi?id=2499
(CVE-2014-8128, bsc#969783)
http://bugzilla.maptools.org/show_bug.cgi?id=2441
http://bugzilla.maptools.org/show_bug.cgi?id=2433
+ libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
defined, do not do the #ifdef TIFFSwabXXX checks. Make it
easier for GDAL to rename the symbols of its internal libtiff
copy.
+ libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
ChopUpSingleUncompressedStrip() regarding update of newly
single-strip uncompressed files whose bytecount is 0. Before
the change of 2016-12-03, the condition bytecount==0 used to
trigger an early exit/disabling of strip chop. Re-introduce
that in update mode. Otherwise this cause later incorrect
setting for the value of StripByCounts/StripOffsets.
(https://trac.osgeo.org/gdal/ticket/6924)
+ libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
number of items read in StripOffsets/StripByteCounts tags to
the number of strips to avoid excessive memory allocation.
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
+ libtiff/tif_getimage.c: avoid many (harmless) unsigned int
overflows.
+ libtiff/tif_fax3.c: avoid unsigned int overflow in
Fax3Encode2DRow(). Could potentially be a bug with huge rows.
+ libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
tiled images.
+ libtiff/tif_dirread.c: avoid unsigned int overflow in
EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
too short.
+ libtiff/tif_predict.c: decorate legitimate functions where
unsigned int overflow occur with
TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
+ libtiff/tif_dirread.c: avoid unsigned int overflow in
EstimateStripByteCounts()
+ libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
macro to disable CLang warnings raised by
- fsanitize=undefined,unsigned-integer-overflow
+ libtiff/tif_jpeg.c: add anti-denial of service measure to
avoid excessive CPU consumption on progressive JPEGs with a
huge number of scans. See
http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
Note: only affects libtiff since 2014-12-29 where support of
non-baseline JPEG was added.
+ libtiff/tif_jpeg.c: error out at decoding time if anticipated
libjpeg memory allocation is above 100 MB. libjpeg in case of
multiple scans, which is allowed even in baseline JPEG, if
components are spread over several scans and not
interleavedin a single one, needs to allocate memory (or
backing store) for the whole strip/tile. See
http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
This limitation may be overriden by setting the
LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
recompiling libtiff with a custom value of
TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
+ libtiff/tif_jbig.c: fix memory leak in error code path of
JBIGDecode()
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
(CVE-2017-9936, bsc#1046073)
+ libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
a double value can fit in a float before casting.
+ libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
libtiff/tif_read.c: make TIFFReadScanline() works in
CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
scans. Also make configurable through a
LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
maximum number of scans allowed. Defaults to 100.
+ libtiff/tif_read.c: TIFFFillTile(): add limitation to the
number of bytes read in case td_stripbytecount[strip] is
bigger than reasonable, so as to avoid excessive memory
allocation (similarly to what was done for TIFFFileStrip() on
2017-05-10)
+ libtiff/tif_getimage.c: use
_TIFFReadEncodedStripAndAllocBuffer(). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
+ libtiff/tif_read.c, tiffiop.h: add a
_TIFFReadEncodedStripAndAllocBuffer() function, variant of
TIFFReadEncodedStrip() that allocates the decoded buffer only
after a first successful TIFFFillStrip(). This avoids
excessive memory allocation on corrupted files.
+ libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
functions associated with LONG8/SLONG8 data type, replace
assertion that the file is BigTIFF, by a non-fatal error.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
+ libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
tif_rawdataloaded when it is set. Similarly to
TIFFStartStrip(). This issue was revealed by the change of
2017-06-30 in TIFFFileTile(), limiting the number of bytes
read. But it could probably have been hit too in
CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
+ libtiff/tif_error.c, tif_warning.c: correctly use va_list
when both an old-style and new-style warning/error handlers
are installed. Patch by Paavo Helde (sent on the mailing list)
+ libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
+ libtiff/tif_read.c, tiffiop.h: add a
_TIFFReadEncodedTileAndAllocBuffer() and
_TIFFReadTileAndAllocBuffer() variants of
TIFFReadEncodedTile() and TIFFReadTile() that allocates the
decoded buffer only after a first successful TIFFFillTile().
This avoids excessive memory allocation on corrupted files.
+ libtiff/tif_pixarlog.c: avoid excessive memory allocation on
decoding when RowsPerStrip tag is not defined (and thus
td_rowsperstrip == UINT_MAX) Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
+ libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
old-style LZW compressed files.
+ libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
LZW strips. Crashing issue only on memory mapped files, where
the strip offset is the last byte of the file, and the file
size is a multiple of one page size on the CPU architecture
(typically 4096)
+ libtiff/tif_dir.c: avoid potential null pointer dereference
in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
instance.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
+ tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
mode on PlanarConfig=Contig input images. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2715
+ libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
Complementary fix for
http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
isMapped() case, so as to avoid excessive memory allocation
when we need a temporary buffer but the file is truncated.
+ libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
arrays that hold StripOffsets/StripByteCounts, when they are
smaller than the expected number of striles, up to 1 million
striles, and error out beyond. Can be tweaked by setting the
environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
This partially goes against a change added on 2002-12-17 to
accept those arrays of wrong sizes, but is needed to avoid
denial of services. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
+ libtiff/tif_read.c: add protection against excessive memory
allocation attempts in TIFFReadDirEntryArray() on short files.
Effective for mmap'ed case. And non-mmap'ed case, but
restricted to 64bit builds. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2675
(CVE-2017-12944, bsc#1054594)
+ libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
allocation when RowsPerStrip tag is missing. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
+ libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
properly break from loops on error when stoponerr is set,
instead of going on iterating on row based loop.
+ libtiff/tif_getimage.c: fix fromskew computation when
to-be-skipped pixel number is not a multiple of the horizontal
subsampling, and also in some other cases. Impact
putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
putcontig8bitYCbCr12tile Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
+ libtiff/tif_luv.c: further reduce memory requirements for
temporary buffer when RowsPerStrip >= image_length in
LogLuvInitState() and LogL16InitState(). Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
+ libtiff/tif_dirwrite.c: replace assertion related to not
finding the SubIFD tag by runtime check (in
TIFFWriteDirectorySec()) Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2727
+ libtiff/tif_dirwrite.c: replace assertion to tag value not
fitting on uint32 when selecting the value of SubIFD tag by
runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2728
+ libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
compressed file if the codestream height is larger than the
truncated height of the strip. Emit a warning in this
situation since this is non compliant.
+ libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
_TIFFSeekoK() function that checks if the offset is not
bigger than INT64_MAX, so as to avoid a -1 error return code
of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
+ libtiff/tif_dirread.c: add NULL check to avoid likely false
positive null-pointer dereference warning by CLang Static
Analyzer.
+ libtiff/libtiff.def: add TIFFReadRGBAStripExt and
TIFFReadRGBATileExt Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2735
+ libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
1.5.2 that honours max_memory_to_use > 0. Cf
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
+ libtiff/tif_getimage.c: avoid floating point division by zero
in initCIELabConversion() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
* Changes in the tools:
+ tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
mode on PlanarConfig=Contig input images. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2715
+ tools/tiffset.c: fix setting a single value for the
ExtraSamples tag (and other tags with variable number of
values). So 'tiffset -s ExtraSamples 1 X'. This only worked
when setting 2 or more values, but not just one.
+ tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
the client data. This client data is not used at all at the
moment, but it makes the most sense. Issue that the value of
client_data.fd was passed where a pointer is expected.
+ tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
arithmetic overflow in bounds checking code and eliminate
comparison between signed and unsigned type.
+ tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
program. This is in response to the report associated with
CVE-2017-16232, bsc#1069213 but does not solve the extremely
high memory usage with the associated POC file. - Upgrade to upstream release 4.0.8
* libtiff/tif_getimage.c, libtiff/tif_open.c
+ add parenthesis to fix cppcheck clarifyCalculation warnings
* libtiff/tif_predict.c, libtiff/tif_print.c
+ fix printf unsigned vs signed formatting (cppcheck
invalidPrintfArgType_uint warnings)
* libtiff/tif_read.c, libtiff/tiffiop.h
+ fix uint32 overflow in TIFFReadEncodedStrip() that caused an
integer division by zero. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
* libtiff/tif_pixarlog.c, libtiff/tif_luv.c
+ fix heap-based buffer overflow on generation of PixarLog / LUV
compressed files, with ColorMap, TransferFunction attached and
nasty plays with bitspersample. The fix for LUV has not been
tested, but suffers from the same kind of issue of PixarLog.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
* libtiff/tif_strip.c
+ revert the change in TIFFNumberOfStrips() done for
http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
CVE-2016-9273 since the above change is a better fix that
makes it unnecessary.
* libtiff/tif_dirread.c
+ modify ChopUpSingleUncompressedStrip() to instanciate compute
ntrips as TIFFhowmany_32(td->td_imagelength, rowsperstrip),
instead of a logic based on the total size of data. Which is
faulty is the total size of data is not sufficient to fill the
whole image, and thus results in reading outside of the
StripByCounts/StripOffsets arrays when using
TIFFReadScanline(). Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
* libtiff/tif_ojpeg.c
+ make OJPEGDecode() early exit in case of failure in
OJPEGPreDecode(). This will avoid a divide by zero, and
potential other issues. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
* libtiff/tif_write.c
+ fix misleading indentation as warned by GCC.
* libtiff/tif_fax3.h
+ revert change done on 2016-01-09 that made Param member of
TIFFFaxTabEnt structure a uint16 to reduce size of the
binary. It happens that the Hylafax software uses the tables
that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
TIFFFaxBlackTable), although they are not in a public libtiff
header. Raised by Lee Howard.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
* libtiff/tiffio.h, libtiff/tif_getimage.c
+ add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
of the functions without ext, with an extra argument to control
the stop_on_error behaviour.
* libtiff/tif_getimage.c
+ fix potential memory leaks in error code path of
TIFFRGBAImageBegin().
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
* libtiff/tif_jpeg.c
+ increase libjpeg max memory usable to 10 MB instead of libjpeg
1MB default. This helps when creating files with "big" tile,
without using libjpeg temporary files.
Related to https://trac.osgeo.org/gdal/ticket/6757
* libtiff/tif_jpeg.c
+ avoid integer division by zero in JPEGSetupEncode() when
horizontal or vertical sampling is set to 0.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
bsc#1033127, CVE-2017-7595
* libtiff/tif_dirwrite.c
+ in TIFFWriteDirectoryTagCheckedRational, replace assertion by
runtime check to error out if passed value is strictly
negative.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
bsc#1038438, CVE-2016-10371
* libtiff/tif_dirread.c
+ avoid division by floating point 0 in
TIFFReadDirEntryCheckedRational() and
TIFFReadDirEntryCheckedSrational(), and return 0 in that case
(instead of infinity as before presumably) Apparently some
sanitizers do not like those divisions by zero.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
bsc#1033118, CVE-2017-7598
* libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
+ implement various clampings of double to other data types to
avoid undefined behaviour if the output range isn't big enough
to hold the input value.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
http://bugzilla.maptools.org/show_bug.cgi?id=2642
http://bugzilla.maptools.org/show_bug.cgi?id=2646
http://bugzilla.maptools.org/show_bug.cgi?id=2647,
bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
* libtiff/tif_jpeg.c
+ validate BitsPerSample in JPEGSetupEncode() to avoid undefined
behaviour caused by invalid shift exponent.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
bsc#1033111, CVE-2017-7601
* libtiff/tif_read.c
+ avoid potential undefined behaviour on signed integer addition
in TIFFReadRawStrip1() in isMapped() case.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
bsc#1033109, CVE-2017-7602
* libtiff/tif_getimage.c
+ add explicit uint32 cast in putagreytile to avoid
UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
bsc#1033131, CVE-2017-7592
* libtiff/tif_read.c
+ TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
tif_rawdata.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
bsc#1033129, CVE-2017-7593
* libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
+ add _TIFFcalloc()
* libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
+ return 0 in Encode functions instead of -1 when
TIFFFlushData1() fails.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
* libtiff/tif_ojpeg.c
+ fix leak in OJPEGReadHeaderInfoSecTablesQTable,
OJPEGReadHeaderInfoSecTablesDcTable and
OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
bsc#1033128, CVE-2017-7594
* libtiff/tif_jpeg.c
+ only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
tag is not explicitly present. This helps a bit to reduce the
I/O amount when the tag is present (especially on cloud hosted
files).
* libtiff/tif_lzw.c
+ in LZWPostEncode(), increase, if necessary, the code bit-width
after flushing the remaining code and before emitting the EOI
code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
* libtiff/tif_pixarlog.c
+ fix memory leak in error code path of PixarLogSetupDecode().
Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
* libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
+ fix GCC 7 -Wimplicit-fallthrough warnings.
* libtiff/tif_dirread.c
+ fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
when there is both a StripOffsets and TileOffsets tag, or a
StripByteCounts and TileByteCounts
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
bsc#1042805, CVE-2017-9403)
* libtiff/tif_ojpeg.c
+ fix potential memory leak in
OJPEGReadHeaderInfoSecTablesQTable,
OJPEGReadHeaderInfoSecTablesDcTable and
OJPEGReadHeaderInfoSecTablesAcTable
Patch by Nicolas Pena.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
* libtiff/tif_fax3.c
+ avoid crash in Fax3Close() on empty file. Patch by Alan
Coopersmith + complement by myself.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
* libtiff/tif_read.c
+ TIFFFillStrip(): add limitation to the number of bytes read
in case td_stripbytecount[strip] is bigger than reasonable,
so as to avoid excessive memory allocation.
* libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
+ fix memory leak when the underlying codec (ZIP, PixarLog)
succeeds its setupdecode() method, but PredictorSetup fails.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
allocation in case of shorten files. Only effective on 64 bit
builds and non-mapped cases.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
Should especially occur on 32 bit platforms.
* libtiff/tif_read.c
+ TIFFFillStripPartial()
+ avoid excessive memory allocation in case of shorten files.
Only effective on 64 bit builds.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_read.c
+ update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
tif_rawdataloaded when calling TIFFStartStrip() or
TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
when bytecount > tif_rawdatasize. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
Credit to OSS-Fuzz
* libtiff/tif_color.c
+ avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
Credit to OSS-Fuzz
* libtiff/tif_pixarlog.c, tif_luv.c
+ avoid potential int32 overflows in multiply_ms() and add_ms().
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
Credit to OSS-Fuzz
* libtiff/tif_packbits.c
+ fix out-of-buffer read in PackBitsDecode() Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
Credit to OSS-Fuzz
* libtiff/tif_luv.c
+ LogL16InitState(): avoid excessive memory allocation when
RowsPerStrip tag is missing.
Credit to OSS-Fuzz (locally run, on GDAL)
* libtiff/tif_lzw.c
+ update dec_bitsleft at beginning of LZWDecode(), and update
tif_rawcc at end of LZWDecode(). This is needed to properly
work with the latest chnges in tif_read.c in
CHUNKY_STRIP_READ_SUPPORT mode.
* libtiff/tif_pixarlog.c
+ PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
with avail_in at beginning and end of function, similarly to
what is done in LZWDecode(). Likely needed so that it works
properly with latest chnges in tif_read.c in
CHUNKY_STRIP_READ_SUPPORT mode. But untested...
* libtiff/tif_getimage.c
+ initYCbCrConversion(): add basic validation of luma and
refBlackWhite coefficients (just check they are not NaN for
now), to avoid potential float to int overflows. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
Credit to OSS Fuzz
* libtiff/tif_read.c
+ _TIFFVSetField(): fix outside range cast of double to float.
Credit to Google Autofuzz project
* libtiff/tif_getimage.c
+ initYCbCrConversion(): check luma[1] is not zero to avoid
division by zero. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
Credit to OSS Fuzz
* libtiff/tif_read.c
+ _TIFFVSetField(): fix outside range cast of double to float.
Credit to Google Autofuzz project
* libtiff/tif_getimage.c
+ initYCbCrConversion(): check luma[1] is not zero to avoid
division by zero. Fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
Credit to OSS Fuzz
* libtiff/tif_getimage.c
+ initYCbCrConversion(): stricter validation for refBlackWhite
coefficients values. To avoid invalid float->int32 conversion.
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
Credit to OSS Fuzz
* tools/fax2tiff.c (main)
+ Applied patch by Joerg Ahrens to fix passing client data for
Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
file I/O. Patch was provided via email on November 20, 2016.
* tools/tiffcp.c
+ avoid uint32 underflow in cpDecodedStrips that can cause
various issues, such as buffer overflows in the library.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
* tools/tiffcrop.c
+ fix readContigStripsIntoBuffer() in -i (ignore) mode so that
the output buffer is correctly incremented to avoid write
outside bounds. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
* tools/tiffcrop.c
+ add 3 extra bytes at end of strip buffer in
readSeparateStripsIntoBuffer() to avoid read outside of heap
allocated buffer. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
* tools/tiffcrop.c
+ fix integer division by zero when BitsPerSample is missing.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
* tools/tiffinfo.c
+ fix null pointer dereference in -r mode when the image has no
StripByteCount tag. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
* tools/tiffcp.c
+ avoid potential division by zero is BitsPerSamples tag is
missing. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
* tools/tif_dir.c
+ when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
the return number of inks to SamplesPerPixel, so that code
that parses ink names doesn't go past the end of the buffer.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
* tools/tiffcp.c
+ avoid potential division by zero is BitsPerSamples tag is
missing. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
* tools/tiffcp.c
+ fix uint32 underflow/overflow that can cause heap-based buffer
overflow. Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
* tools/tiffcp.c
+ replace assert( (bps % 8) == 0 ) by a non assert check.
Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
* tools/tiff2ps.c
+ fix 2 heap-based buffer overflows (in PSDataBW and
PSDataColorContig). Reported by Agostino Sarubbo.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
http://bugzilla.maptools.org/show_bug.cgi?id=2634.
* tools/tiff2pdf.c
+ prevent heap-based buffer overflow in -j mode on a paletted
image. Note: this fix errors out before the overflow happens.
There could probably be a better fix.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
* tools/tiff2pdf.c
+ fix wrong usage of memcpy() that can trigger unspecified behaviour.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
* tools/tiff2pdf.c
+ avoid potential invalid memory read in t2p_writeproc.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
* tools/tiff2pdf.c
+ avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
* tools/tiffcrop.c
+ remove extraneous TIFFClose() in error code path, that caused
double free.
Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
* tools/tiffcp.c
+ error out cleanly in cpContig2SeparateByRow and
cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
based overflow.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
http://bugzilla.maptools.org/show_bug.cgi?id=2657
* tools/raw2tiff.c
+ avoid integer division by zero.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
* tools/tiff2ps.c
+ call TIFFClose() in error code paths.
* tools/fax2tiff.c
+ emit appropriate message if the input file is empty. Patch by
Alan Coopersmith.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
* tools/tiff2bw.c
+ close TIFF handle in error code path.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
* Other issues fixed:
+ bsc#1042804, CVE-2017-9404
* CVE-2016-10092, CVE-2016-10093, CVE-2016-10094 [bsc#1017693]
- Removed patches:
* tiff-4.0.7-CVE-2015-7554.patch
* tiff-4.0.7-CVE-2017-5225.patch
* tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
* tiff-CVE-2016-10266.patch
* tiff-CVE-2016-10267.patch
* tiff-CVE-2016-10268.patch
* tiff-CVE-2016-10269.patch
* tiff-CVE-2016-10270.patch
* tiff-CVE-2016-10271.patch
* tiff-CVE-2016-10272.patch
+ Fixed upstream - Added patches:
* tiff-CVE-2016-10266.patch
+ Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031263)
* tiff-CVE-2016-10267.patch
+ Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031262)
* tiff-CVE-2016-10268.patch
+ Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (divide-by-zero error
and application crash) via a crafted TIFF image (bsc#1031255)
* tiff-CVE-2016-10269.patch
+ Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031254)
* tiff-CVE-2016-10270.patch
+ Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031250)
* tiff-CVE-2016-10271.patch
+ Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
over-read and buffer overflow) or possibly have unspecified
other impact via a crafted TIFF image (bsc#1031249)
* tiff-CVE-2016-10272.patch
+ Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
attackers to cause a denial of service (heap-based buffer
overflow) or possibly have unspecified other impact via a
crafted TIFF image (bsc#1031247) - Added patch:
* tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
- Fix a regression introduced in 4.0.7 (bsc#1022103)
- http://bugzilla.maptools.org/show_bug.cgi?id=2636 - Added patch:
* tiff-4.0.7-CVE-2017-5225.patch
- Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
overflow in tools/tiffcp via a crafted BitsPerSample value - Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions - Update homepage - Upgrade to upstream release 4.0.7
* libtiff/tif_aux.c
+ Fix crash in TIFFVGetFieldDefaulted() when requesting
Predictor tag and that the zip/lzw codec is not configured.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
* libtiff/tif_compress.c
+ Make TIFFNoDecode() return 0 to indicate an error and make
upper level read routines treat it accordingly. (linked to the
test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
* libtiff/tif_dir.c
+ Discard values of SMinSampleValue and SMaxSampleValue when
they have been read and the value of SamplesPerPixel is
changed afterwards (like when reading a OJPEG compressed image
with a missing SamplesPerPixel tag, and whose photometric is
RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
rewriting the directory (for example with tiffset, we will
expect 3 values whereas the array had been allocated with just
one), thus causing a out of bound read access. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2500
(CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
* libtiff/tif_dirread.c
+ In TIFFFetchNormalTag(), do not dereference NULL pointer when
values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
access are 0-byte arrays. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
introduced by previous fix done on 2016-11-11 for
CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
bsc#1011103
+ In TIFFFetchNormalTag(), make sure that values of tags with
TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
terminated, to avoid potential read outside buffer in
_TIFFPrintField(). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2590
(CVE-2016-9297, bsc#1010161)
+ Initialize doubledata at line 3693 to NULL to please MSVC 2013
+ Prevent reading ColorMap or TransferFunction if
BitsPerPixel > 24, so as to avoid huge memory allocation and
file read attempts
+ Reject images with OJPEG compression that have no
TileOffsets/StripOffsets tag, when OJPEG compression is
disabled. Prevent null pointer dereference in
TIFFReadRawStrip1() and other functions that expect
td_stripbytecount to be non NULL. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2585
+ When compiled with DEFER_STRILE_LOAD, fix regression, when
reading a one-strip file without a StripByteCounts tag.
+ Workaround false positive warning of Clang Static Analyzer
about null pointer dereference in TIFFCheckDirOffset().
* libtiff/tif_dirwrite.c
+ Avoid null pointer dereference on td_stripoffset when writing
directory, if FIELD_STRIPOFFSETS was artificially set for a
hack case in OJPEG case. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2500
(CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
bsc#974840)
+ Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
and TIFFWriteDirectorySec() when aligning directory offsets on
an even offset (affects BigTIFF).
* libtiff/tif_dumpmode.c
+ DumpModeEncode() should return 0 in case of failure so that
the above mentionned functions detect the error.
* libtiff/tif_fax3.c
+ remove dead assignment in Fax3PutEOLgdal().
* libtiff/tif_fax3.h
+ make Param member of TIFFFaxTabEnt structure a uint16 to
reduce size of the binary.
* libtiff/tif_getimage.c
+ Fix out-of-bound reads in TIFFRGBAImage interface in case of
unsupported values of SamplesPerPixel/ExtraSamples for
LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
+ Fix some benign warnings which appear in 64-bit compilation
under Microsoft Visual Studio of the form "Arithmetic
overflow: 32-bit value is shifted, then cast to 64-bit value.
Results might not be an expected value."
+ TIFFRGBAImageOK: Reject attempts to read floating point images.
* libtiff/tif_luv.c
+ Fix potential out-of-bound writes in decode functions in non
debug builds by replacing assert()s by regular if checks
(http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
potential out-of-bound reads in case of short input data.
+ Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
there is only one sample per pixel. Avoid potential invalid
memory write on corrupted/unexpected images when using the
TIFFRGBAImageBegin() interface
* libtiff/tif_next.c
+ Fix potential out-of-bound write in NeXTDecode()
(http://bugzilla.maptools.org/show_bug.cgi?id=2508)
* libtiff/tif_pixarlog.c
+ Avoid zlib error messages to pass a NULL string to %s
formatter, which is undefined behaviour in sprintf().
+ Fix out-of-bounds write vulnerabilities in heap allocated
buffers. Reported as MSVR 35094.
+ Fix potential buffer write overrun in PixarLogDecode() on
corrupted/unexpected images (CVE-2016-5875, bsc#987351)
+ Fix write buffer overflow in PixarLogEncode if more input
samples are provided than expected by PixarLogSetupEncode.
Idea based on libtiff-CVE-2016-3990.patch from
libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
bsc#975069)
* libtiff/tif_predict.c
+ PredictorSetup: Enforce bits-per-sample requirements of
floating point predictor (3). Fixes CVE-2016-3622 "Divide By
Zero in the tiff2rgba tool." (bsc#974449)
* libtiff/tif_predict.h, libtiff/tif_predict.c
+ Replace assertions by runtime checks to avoid assertions in
debug mode, or buffer overflows in release mode. Can happen
when dealing with unusual tile size like YCbCr with
subsampling. Reported as MSVR 35105.
* libtiff/tif_read.c
+ Fix out-of-bounds read on memory-mapped files in
TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
is beyond tmsize_t max value
(bsc#990460, CVE-2016-6223)
+ Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
use user provided buffer when no compression (and other
conditions) to save a memcpy().
* libtiff/tif_strip.c
+ Make TIFFNumberOfStrips() return the td->td_nstrips value when
it is non-zero, instead of recomputing it. This is needed in
TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
outsize of array in tiffsplit (or other utilities using
TIFFNumberOfStrips()). Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2587
(CVE-2016-9273, bsc#1010163)
* libtiff/tif_write.c
+ Fix issue in error code path of TIFFFlushData1() that didn't
reset the tif_rawcc and tif_rawcp members. I'm not completely
sure if that could happen in practice outside of the odd
behaviour of t2p_seekproc() of tiff2pdf). The report points
that a better fix could be to check the return value of
TIFFFlushData1() in places where it isn't done currently, but
it seems this patch is enough. Reported as MSVR 35095.
+ Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
directly use user provided buffer when no compression to save
a memcpy().
+ TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
return -1 in case of failure of tif_encodestrip() as documented
* tools/fax2tiff.D c
+ Fix segfault when specifying -r without argument. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2572
* tools/Makefile.am
+ The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
sgisv, and ycbcr are completely removed from the distribution.
The libtiff tools rgb2ycbcr and thumbnail are only built in
the build tree for testing. Old files are put in new 'archive'
subdirectory of the source repository, but not in
distribution archives. These changes are made in order to
lessen the maintenance burden.
* tools/rgb2ycbcr.c
+ Validate values of -v and -h parameters to avoid potential
divide by zero. Fixes CVE-2016-3623, bsc#974618
(http://bugzilla.maptools.org/show_bug.cgi?id=2569)
* tools/tiff2bw.c
+ Fix weight computation that could result of color value
overflow (no security implication). Fix
http://bugzilla.maptools.org/show_bug.cgi?id=2550.
* tools/tiff2pdf.c
+ Avoid undefined behaviour related to overlapping of source and
destination buffer in memcpy() call in
t2p_sample_rgbaa_to_rgb() Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2577
+ Fix out-of-bounds write vulnerabilities in heap allocate buffer
in t2p_process_jpeg_strip(). Reported as MSVR 35098.
+ Fix potential integer overflows on 32 bit builds in
t2p_read_tiff_size() Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2576
+ Fix read -largely- outsize of buffer in
t2p_readwrite_pdf_image_tile(), causing crash, when reading a
JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
+ Fix write buffer overflow of 2 bytes on JPEG compressed images.
Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
prevents writing 2 extra uninitialized bytes to the file
stream.
* tools/tiff2rgba.c
+ Fix integer overflow in size of allocated buffer, when -b mode
is enabled, that could result in out-of-bounds write. Based
initially on patch tiff-CVE-2016-3945.patch from
libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
tests that rejected valid files.
(http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
* tools/tiffcp.c
+ Fix out-of-bounds write on tiled images with odd tile width vs
image width. Reported as MSVR 35103. (bsc#1011841,
CVE-2016-9538)
+ Fix read of undefined variable in case of missing required
tags. Found on test case of MSVR 35100.
* tools/tiffcrop.c
+ Avoid access outside of stack allocated array on a tiled
separate TIFF with more than 8 samples per pixel.
(CVE-2016-5321, CVE-2016-5323,
http://bugzilla.maptools.org/show_bug.cgi?id=2558,
http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
bsc#984815)
+ Fix memory leak in (recent) error code path. Fixes Coverity
1394415.
+ Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
writeBufferToContigTiles() and writeBufferToSeparateTiles()
that could cause heap buffer overflows. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2592
+ Fix out-of-bound read of up to 3 bytes in
readContigTilesIntoBuffer(). Reported as MSVR 35092.
+ Fix out-of-bounds write in loadImage(). From patch
libtiff-CVE-2016-3991.patch from
libtiff-4.0.3-25.el7_2.src.rpm
(http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
+ Fix read of undefined buffer in readContigStripsIntoBuffer()
due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
CVE-2016-9538)
+ Fix various out-of-bounds write vulnerabilities in heap or
stack allocated buffers. Reported as MSVR 35093, MSVR 35096
and MSVR 35097.
+ readContigTilesIntoBuffer: Fix signed/unsigned comparison
warning.
* tools/tiffdump.c
+ Fix a few misaligned 64-bit reads warned by -fsanitize
+ ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
which resulted in Coverity report. Added more mutiplication
overflow checks
* tools/tiffinfo.c
+ Fix out-of-bound read on some tiled images.
(http://bugzilla.maptools.org/show_bug.cgi?id=2517)
+ TIFFReadContigTileData: Fix signed/unsigned comparison warning.
+ TIFFReadSeparateTileData: Fix signed/unsigned comparison
warning.
- Removed patches:
* tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
* tiff-4.0.6-CVE-2015-8782.patch
* tiff-4.0.6-CVE-2016-3186.patch
* tiff-4.0.6-CVE-2016-3623.patch
* tiff-4.0.6-CVE-2016-3945.patch
* tiff-4.0.6-CVE-2016-3990.patch
* tiff-4.0.6-CVE-2016-3991.patch
* tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
* tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
* tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
* tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
* tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
- Fixed in the upsteam release
- Changed patch:
* tiff-4.0.6-CVE-2015-7554.patch -> tiff-4.0.7-CVE-2015-7554.patch
- Rediffed to the changed context - Added patches:
* tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
- Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
MSVR 35096, MSVR 35097, MSVR 35098.
* tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
- Enforce bits-per-sample requirements of floating point
predictor. Fixes CVE-2016-3622 [bsc#974449] - Added patches:
* tiff-4.0.6-CVE-2016-3623.patch
* tiff-4.0.6-CVE-2016-3945.patch
* tiff-4.0.6-CVE-2016-3990.patch
* tiff-4.0.6-CVE-2016-3991.patch
- Upstream commits to fix CVE-2016-3623 [bsc#974618],
CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
CVE-2016-3991 [bsc#975070] - Added patches:
* tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
* tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
* tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
- Upstream commits to fix CVE-2016-5314 [bsc#984831],
CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351] - Added patch:
* tiff-4.0.6-CVE-2016-3186.patch
- fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340] - Added patch:
* tiff-4.0.6-CVE-2015-8782.patch
- fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
writes for invalid images (upstream bug #2522) [bsc#964225] - Added patch:
* tiff-4.0.6-CVE-2015-7554.patch
- fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
tiffcmp tools (upsteam bug #2499) [bsc#960341] - Added patch:
* tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
- fix uninitialized memory in NeXTDecode (upstream bug #2508)
[bsc#942690] - Update to version 4.0.6
* Supports CMake 2.8.9 and later.
* Add missing file which wasn't being distributed, causing unit
tests to fail.
* Make shared/static library building configurable.
* CMake reads all version information directly from configure.ac
to avoid duplication of values.
* CMake builds are now included in 'distcheck' target.
* Autotools 'make distcheck' now tests the CMake-based build if
CMake is available.
* Fixes to avoid undefined behaviour of signed types (C standard
compliance).
* Fixes to avoid possible isses when casting to unsigned char.
* Fixes to avoid undefined behaviour with shifts.
* Fix generation of output with 16 bit or 32 bit integer, when
byte swapping is needed, in horizontal predictor (#2521).
* Fix decoding when there is a single pixel to decode
(unlikely case...) and byte swapping is involved.
* Add add explicit masking with 0xff before casting to uchar in
floating-point horizontal differencing and accumulation routines.
* Eliminate requirement for and use of 64-bit constant values.
* tiffgt : Silence glut API deprecation warnings on MacOS X.
* fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
* Support for configure/build using CMake.
* Support for large (> 2GB) files under Microsoft Windows.
* Configuration and building using CMake is now supported under
Microsoft Windows and on Unix-type systems.
* Test for and use fseeko() if it is available. This allows supporting
large files on Unix-type systems with a 32-bit 'long' type and a
64-bit 'off_t' type.
* tiffiop.h: Macros added to use 64-bit equivalents for all standard
I/O and POSIX APIs used by libtiff and its tools which are limited
to 2GB in Windows builds. Note that these 64-bit equivalents were
introduced by the CRT provided with Visual Studio 2005 and if the
necessary CRT is not installed on the target computer, the program
will not run. The wrapper macros will not be activated unless the
definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
least 0x800.
* tif_unix.c: Updated to support large files under Microsoft Windows.
This makes tif_unix.c a completely viable candidate for use under
Windows (in spite of its name) if the CRT is modern enough. Please
note that tif_win32.c already supported large files, but only
'tiffinfo' and 'tiffdump' made any provision to support large files
under Windows.
* _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
maximum size of 2GB for extremely large I/O requests. This surmounts
limitations in the Microsoft Windows read() and write() APIs (which
are limited to the range of a 32-bit 'int'), and may avoid poor
behavior with extremely large I/O requests on other systems.
* Updated to use I/O wrapper macros from tiffiop.h in order to
support large files under Microsoft Windows. - use spec-cleaner - update to 4.0.4
D tiff-4.0.3-double-free.patch
D tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
D tiff-4.0.3-CVE-2013-1961.patch
D erouault.2862.patch
D bfriesen.2805.patch
D tiff-4.0.3-CVE-2013-4232.patch
D tiff-4.0.3-CVE-2013-4244.patch
D erouault.2861.patch
D erouault.2857.patch
D erouault.2856.patch
D erouault.2859.patch
D tiff-4.0.3-CVE-2012-4564.patch
D tiff-4.0.3-tiff2pdf-colors.patch
D erouault.2876.patch
D erouault.2860.patch
D tiff-dither-malloc-check.patch
D tiff-4.0.3-CVE-2013-1960.patch
D erouault.2858.patch
D tiff-handle-TIFFTAG_PREDICTOR.patch
D tiff-4.0.3-CVE-2013-4231.patch
D tiff-4.0.3-CVE-2013-4243.patch
D erouault.2863.patch
D tiff-4.0.3-test-jpeg-turbo.patch - security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
bnc#914890, bnc#916925, bnc#916927
+ erouault.2856.patch
+ erouault.2857.patch
+ erouault.2858.patch
+ erouault.2859.patch
+ erouault.2860.patch
+ erouault.2861.patch
+ erouault.2862.patch
+ erouault.2863.patch
+ erouault.2876.patch
+ bfriesen.2805.patch
+ tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
+ tiff-handle-TIFFTAG_PREDICTOR.patch
+ tiff-dither-malloc-check.patch - build with PIE h02-armsrv1 1702035385
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ 4.0.9-150000.45.35.1 4.0.9-150000.45.35.1 fax2ps fax2tiff pal2rgb ppm2tiff raw2tiff tiff2bw tiff2pdf tiff2ps tiff2rgba tiffcmp tiffcp tiffcrop tiffdither tiffdump tiffinfo tiffmedian tiffset tiffsplit tiff COPYRIGHT ChangeLog README RELEASE-DATE TODO VERSION html CMakeLists.txt TIFFTechNote2.html addingtags.html bugs.html build.html contrib.html document.html images images.html CMakeLists.txt back.gif bali.jpg cat.gif cover.jpg cramps.gif dave.gif info.gif jello.jpg jim.gif note.gif oxford.gif quad.jpg ring.gif smallliz.jpg strike.gif warning.gif index.html internals.html intro.html libtiff.html man CMakeLists.txt HtmlDoc.cmake TIFFClose.3tiff.html TIFFDataWidth.3tiff.html TIFFError.3tiff.html TIFFFieldDataType.3tiff.html TIFFFieldName.3tiff.html TIFFFieldPassCount.3tiff.html TIFFFieldReadCount.3tiff.html TIFFFieldTag.3tiff.html TIFFFieldWriteCount.3tiff.html TIFFFlush.3tiff.html TIFFGetField.3tiff.html TIFFOpen.3tiff.html TIFFPrintDirectory.3tiff.html TIFFRGBAImage.3tiff.html TIFFReadDirectory.3tiff.html TIFFReadEncodedStrip.3tiff.html TIFFReadEncodedTile.3tiff.html TIFFReadRGBAImage.3tiff.html TIFFReadRGBAStrip.3tiff.html TIFFReadRGBATile.3tiff.html TIFFReadRawStrip.3tiff.html TIFFReadRawTile.3tiff.html TIFFReadScanline.3tiff.html TIFFReadTile.3tiff.html TIFFSetDirectory.3tiff.html TIFFSetField.3tiff.html TIFFWarning.3tiff.html TIFFWriteDirectory.3tiff.html TIFFWriteEncodedStrip.3tiff.html TIFFWriteEncodedTile.3tiff.html TIFFWriteRawStrip.3tiff.html TIFFWriteRawTile.3tiff.html TIFFWriteScanline.3tiff.html TIFFWriteTile.3tiff.html TIFFbuffer.3tiff.html TIFFcodec.3tiff.html TIFFcolor.3tiff.html TIFFmemory.3tiff.html TIFFquery.3tiff.html TIFFsize.3tiff.html TIFFstrip.3tiff.html TIFFswab.3tiff.html TIFFtile.3tiff.html fax2ps.1.html fax2tiff.1.html index.html libtiff.3tiff.html pal2rgb.1.html ppm2tiff.1.html raw2tiff.1.html tiff2bw.1.html tiff2pdf.1.html tiff2ps.1.html tiff2rgba.1.html tiffcmp.1.html tiffcp.1.html tiffcrop.1.html tiffdither.1.html tiffdump.1.html tiffgt.1.html tiffinfo.1.html tiffmedian.1.html tiffset.1.html tiffsplit.1.html misc.html support.html tools.html v3.4beta007.html v3.4beta016.html v3.4beta018.html v3.4beta024.html v3.4beta028.html v3.4beta029.html v3.4beta031.html v3.4beta032.html v3.4beta033.html v3.4beta034.html v3.4beta035.html v3.4beta036.html v3.5.1.html v3.5.2.html v3.5.3.html v3.5.4.html v3.5.5.html v3.5.6-beta.html v3.5.7.html v3.6.0.html v3.6.1.html v3.7.0.html v3.7.0alpha.html v3.7.0beta.html v3.7.0beta2.html v3.7.1.html v3.7.2.html v3.7.3.html v3.7.4.html v3.8.0.html v3.8.1.html v3.8.2.html v3.9.0beta.html v3.9.1.html v3.9.2.html v4.0.0.html v4.0.1.html v4.0.2.html v4.0.3.html v4.0.4.html v4.0.4beta.html v4.0.5.html v4.0.6.html v4.0.7.html v4.0.8.html v4.0.9.html fax2ps.1.gz fax2tiff.1.gz pal2rgb.1.gz ppm2tiff.1.gz raw2tiff.1.gz tiff2bw.1.gz tiff2pdf.1.gz tiff2ps.1.gz tiff2rgba.1.gz tiffcmp.1.gz tiffcp.1.gz tiffcrop.1.gz tiffdither.1.gz tiffdump.1.gz tiffgt.1.gz tiffinfo.1.gz tiffmedian.1.gz tiffset.1.gz tiffsplit.1.gz /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/tiff/ /usr/share/doc/packages/tiff/html/ /usr/share/doc/packages/tiff/html/images/ /usr/share/doc/packages/tiff/html/man/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31772/SUSE_SLE-15_Update/1d82dac16f3ae7a64bbc7f215e373bf0-tiff.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux
! " # $ % & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 'ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=771d7d48ee4d94b052ddfb3ba65023e410af9f60, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5fba3cc873805a4873cc2d926ecead781cdbfdcb, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=297c505488b59bbc7970008359e78da46c372fcc, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=1c63e6f6a62a6395a14a532212f6185025a4b11e, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=2a7f30ed672afc28f8aab6ceb404093a1d93362c, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=957edee9e7c93d7aac7e27bdcd3ee4b5f39e6969, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=59722fe3da99226f8cf756ae584871865483e70f, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c59b3fe53e82adae5c55b1b360b3ea354b2e6804, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=1e961a88128d37f8882b295dbeb538d6c8f8c716, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=934f4f341b0bdc18cb93388b188c805eb69ecfe2, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=febfd2b93ee00c0a732bd8e4fdc8906d9954d28b, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=b5cbe56a296c13a718a0c7205a0a293511c8d85a, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=48f0c24c890d20f546e1bae56094347d0c68dfab, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=a3255237924e4386eaae38cacf5f7977e467769e, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=ef83e69bc516ee743596f6719a9b6b981a174d1f, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c6a2c2881593e7a645e2cd5259f6d5db9f4b0c40, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=667ca79a39c35c9a3531e3bc03bd8464d613ce0c, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=51a87921e63f5115db480a33eac215193812b0e1, for GNU/Linux 3.7.0, stripped directory ASCII text UTF-8 Unicode text HTML document, ASCII text GIF image data, version 87a, 20 x 20 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 158x107, frames 3 GIF image data, version 89a, 113 x 146 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x147, frames 3 GIF image data, version 89a, 159 x 203 GIF image data, version 89a, 107 x 148 GIF image data, version 89a, 32 x 32 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: XV Version 3.09 Rev: 8/13/94 Quality = 75, Smoothing = 0", baseline, precision 8, 256x192, frames 3 GIF image data, version 89a, 139 x 170 GIF image data, version 87a, 32 x 32 GIF image data, version 89a, 296 x 120 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x144, frames 3 GIF image data, version 89a, 124 x 124 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, frames 3 GIF image data, version 89a, 128 x 100 GIF image data, version 89a, 40 x 40 HTML document, UTF-8 Unicode text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)
% * / 4 9 > C H M R U R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R ׁKJRHتG> utf-8 f9e9564517feefc7cd0d98b7de0091840f4049f84f12f6efbc260302a1a29fbf ? 7zXZ
! t/o] "k%Hk+%Yv[# GKf P1!W>=.6VڒH(\[S6t?5zHCރG`zs3Ek/Ӽ1=_Cg e G@p3R`{`7
i5%SsIGEv.yDYAL{"(aϥ8Q-Ed>Ф[R GHD֘9
S)$Fl w1ZQu鮫B&q/x:9."Ԟ3ze} JrxUG}) hE3Hc Sz]OxQ"tֺK^YÍ+sZ1+;Ibd_(߰t2~d3.NՇԜ(hZ94껂eվXW8ѭ%LX%3lUrz"<
^Qop &cy&<ҕց & 2Z*FJO*.
V#3\UF> 1/;S <@Y
[#:{%/4uutm_ ./b 0`=ЫKWm6a'QMs#-; ŸF&^
Rj|k?Oh6|JBB?=y$'=fY#
=ߋ
c3=}
Vbm6 3ڍǟδP4tZ(겉s042N@ >慈yL煥^ߜ?֎JX+~=1 s up:;/ekZÂjB,dD@
bp 2 Iu qo>ˣN-hDByqk iu
KF8 PtӐG c툸f E\1*|z :gvި6H/ShQr/
?I&\6uKǰN2z}~|bX }[p8%Wi$Q hdw{V<9('r]?~`y2S{'! 3|l3 1D c]RnkقP8. 눰0_3,X/ q] 3M>j
Ofdf. Υ6L)xs>ק6~'HZ"^s-o蝥
6#$^r-b x21;d\HcUSP-"kX< }7ҏ@uo
BTTP}4Z}3W`!ٗWl%;d3f5g^4OwV .%k%2pױ~ЏN:43T;d;?b?7 T\?Q'ff[ }he#evB'%ĤC2!俬}=
$ zߴ[t\}0 j Pa7;ZʘUL`ǫ%"θ|(7f14l1=JxeBu%>:88 Y(lo i>}CH?|
Ń H|+ڶ ^QZ4kc5`Ym ^m1vlG_.`sL>% ]8 !J4V(x,GKO ÞGۻ(Gc8:Gc
/l!\)/t{܈ ?})/p]Q^a<ŠV>1 M(x'fM>6dLS8w?6gTV\ѫ*] [xӐ?2qy$U#?vig tIyY8bg~* O֔oO bq5X.JN{RQ $? _X$8iC)b̶
l<{jQt380Q KgY'Τ$ĥ5&r#|;ؽs.>ex'Lq]_ s">4JYBj-ʓZXe䌝 _O2OK1 ,ɉы@7miȽJc%~Ԧ4;lTas ѧyͿL?8/YӬ UZM)Ky?pzh:؉pwbCo{mG D!H$H *P<* F匇B!nm3;|ߜ5zKI T3&!EC* ȁ 9%B,D@ .?|>#~ hu 58Qp;ӫ4
_C?!;Vӭ&"@1ΤօPH z}MpE 9NUI\ H-=8 KJl
\XӺh8}L* ` A;lڃɔQڨᅵǍgç%5JU P9)
>#Tx2/P!m<IKEq@JkAgU$w i :b`zqTh☁{>l&e&@ $Y%8P rz
bxKjԒ ˌѹO썻E E*%}
^6ŕV:I&W!>^HTƶ46g"DnwGQ`YWfx1pBΏ{ZiLJÚVZ+U!UvNw ɁGo9 n[S Mh 3
di=uk:4P-zkͣnO@mh܅Ppqeҳ N'[a L]ͥ٫ìCF hwǻ&4̄"'9UrM:nFB*M'34KOS7ߩ6~ |q`Lp "HL1Bƙmk7FQXSbȔ`rޡZ]ہ -/gV; F &dbz{# rF"'gnu'FUtT"2|O;¡ڒ<śMCOd$R."[H{
JRS{~ 晫e@;R'9@. ٘#Zp )?[0?= $! zV&O]sћ/ȏܶ+~1)
- q4G"RJB Q\^r\|#3 ^37I+JoD=8Al[aDxPs8Qɰ -!J1oETB-Z|THTVf~8peȷ4;~
ٕ7{茘XʊnϢ1XL xbxWO
gTt(Qj:~yWfɳyDvc\5洽~we Y!nwlّUOWPΑ*%6
qm쭼|b?.slGw~H#ʟjfztZ%z0ک ֏!P'ٮlopf)8/HIPnUSQ"z ̃hoIK*p18kLG s|Q y|-؎{0wj$cw*?'F!{skRMUGuMJxdqj_)wUvbtJR dL%"Ћp0 T7tE 9o/_B(uͨT B:~MHM/@*^ o{AC= yŮvS|zq"VGcK_jI8E_!?%L GO[ Rv]i& !e??/ {3?mLAfKIƁ4;Xbk
|ge^V}qpB!6BS< RB3 J*M@iԩ H*qϭD% >5;,ɚzpp cWnRU&fLllds.' Mz?j+k} S=iS&AtQ|d W_ZJT{y
;"b*2hD jdȨ\?5ƻ Ӕ`
ӸMjVԒ
m-M~y}rZk.H⣲ѭ~7b+ Ќ$_>1ID]DUDoݰYXYtΊɏyr6|
a*JzZ~a\~I\ `@ss^POly}I/ 'Iw3|bv}nu\NmjuF_?@k`% pcO@qܨPQ'@FD1g>;7kD)ul/tfDP'a #
C"3ƨLZ߄KO/# y%U1Uҷ Ԩ H5e?0;$;
A*B\锌)_JJ|H.# ̔I1vQP-' RT MW3ՓDvܛ)TIˢO$ɳ[E7ġBqa_E-ZR%T6mKV5)s=
1UrX*cǸY액SD=ihbc ^ =<->[NRF {ky-gG5u`>ij
^ V+b*'I}M%*WfQȿ%{u8kՆ^ jJx6ҴNs*!,
>n4d_ ]s VE. ߏY&V6 LvrqS "Sr.[&9 g`0 WйAM`VMMb Xp
XGO[RRkg`fa ȍY nPzѭu@`G< ҃ BQC4艺Ag̲C ~n(m]rp*\?=d4Ҿ>cQ $c6{~ &q>lJw=-r#ڇ $Yh!A ;?!toCn}Wpy =6a`txr^,/h5 6ƴ9! Wͯºrka^
uI]
N~GE;\WG_0ieeý`mե
'!hxbeFaTmxljˤcmEG!Nř CnZaf%i B:SX{ yǘIZ{bXeGV 7Qp=n;y-&k!s#\ـ- ZxQR ,r+Zg}5PxbҲf 0Z ./ȈPUrC e`Sts> i7t~
C)՞ޡZ $k<gy
KH2:j|=2|J
q ,%~~0 G9t8̷<+3ьF^Ɲ}G s;:X 5[k{uГo.] 0:35sOj~ye ̼Wl5UXzY4I@~&i:63h:II DۓVp# u @)(M' $'2I(1XvM^S8n3S]A\>og
8}nhH W\Lˍђc x18v eӚ&vT!ut1IϳCvi;߃M5,c:CM&`& .̙>X6uGчlL(+=?W{fCkՑF4N1UpT@>_çIv4.ʖ=."_Pp:UnW0С uՎ1ԾzyJRw#Lj77w tȶc>-J2"Ԫ*[ D BP}*+x Nʰ۱S幥
xrF.n<&z|Y``L@Fϫ| *^2Ej3f ?Ӣq4$Bk3po 0-- g?{ Ir]7QŌ16g9
Ŗ+UeV@M7 Hҳ2TfrG+0_ mM.&Zc 0ǽt0J (֛(!MA|}~$xG:+7*yҾzR:W%%J77aIzxiBXAw *#w vF}Fw >SMC!Z+2(RH ^:N2=+aIY [P/;xed>i$ X7|Ʃf" = S}XI!
j
r}LT`x
''Yߟq6"LJK"Y[ӿ9CMD?E|oA" :; ܩ
]s(nE]1 3qF8 |7E :K-(8~$xKezD]ԇYﻳ6[]@{:^r]SXx* MSv2YYlWw=2dۅ*ctH%W`\թ}Q; ib4e6#ye.e/D QmDVk0q&covǙzIb؍&6¶b%mN
I M ˄Y>oˮ7z2;
E`YEV7.KD8Rpw`}{& X?K@ui+>OZ$tFOP7*V! +BpDS%QU]J˖g(su%*r߃ u
ϵ\( Flܵm/w"-VLX9q ơM}TS ݇bTt$u )ꏤU/u3:r%6Z
`z{pZ$zDwf\+ 1[];=rsY
PeN8;#/b S g^R-hq݅%ԉ=ѦWt8_{_/s\Te;Y:W ::t֩U&!_q*IrrB42SD'a÷@X;b܍I4c% l_5iy
>nJ^hpknRZ oU+ D qɰ?P2?02
x6QE|?z{kQ7NgŻc&B{izk q}=Ը>PSo㢲
:!I>$ Uf9!lY4]S'W]T1.۔Ƭ9:PfW/-!D;'8JM5 &G!} (>x+ba<(wc9m+Ԍ1Bylsw])ZOzV&9Ovbi!!9VXP}|E7,ƾ̗Q&`Vz ȄXlWxl P8
s+߉<
rE
k䗵uJj5@m<<}k&Z XNͰzH;곋?)&}pw82E%2ēo¿Q6z-=?é *=|"Z(퍉v9A?g/Kk@<h:ݸ)Y!j;B$Us_1aiI1[Bʄ8_ ǦČ{cZrA|gx->?`дfƙ*xog@CƽL\ /jRs82PvdxL _#:u=\EĤӌZyG`_ Z0,-*%8CVejS67U
wt\][B`S锥Z q`w "FZ%Y?+)=LR1j@E5 x\/zI. ˥:@Ls1rr
E%Qu`|7tf AE9edAa91eλĤp#S`-wر?Fa
Nz mJgݡ276cI18ax B{2:@t1Hϸbfa{lFP)P(`i\U4Oht0"8f0I8il yr&;}:oIJ2[وw $ppȀ8a}I )o+J"\╯ *lxbqL{N\VsP.F
)9ff[ U 1lL_oW`#EvS)`-=yui8u/לdo O1ΧZ HP6Z'ϓxm@s` 0^ &|7 Ɏ>ϫRLbhH蘊e#{w1JW,(3m+G^Q;iZ$Oo6hש--=h85w{Jns
F>o] LZy%kTjq-yJmk[}\|Aiph4W!'2WmژdZlUꣁ+Voz-)?Dr
d&
U`V$x/
9IrRl]=+ٰ6< v.&?lEbKV.T @V=Ot>7et =6kG[$@<5ͅRzƗ0=[> Iȭ'25U2 d#_: l
rvXsuSէ`[}躄S5Il]C %9 ] 8 [;@n=e. /G}z 1C7D[
!{""g5yq*
+#)/NTn r|?WMݼ&
jiQ7MqhDŽs6y`)rt _e X-QVu3FiyFE^[+Mڋ4@BV ;ꂫɫ.V }B>C(sT( wSx{vݦk$BM\c.N*rΕ` pf3e (:͔J 0|tC?u9pOocf)+g :!1u'_;Y-' 2IL~ch>vF Lsx}IJK0Zڈ%o a0 ̔\2jwU(-r`J/ZG(5ډ~ 1k=IAT22{`<@ 2NԪ`4Ā rɪ]Uu
!}i`j#X1L;#V/怶a*_ ?&x8JG"{|
ُOyg6AG8ΧX%\lQg63Wc?%>&Y[!<ÌܒO#{NB
ȃ %x%/i*'EKv5qq?2OEL`)5 zROSh%e(:;7z3YKIkT(hgڜ]fgu =Gh( &w ܯqH `4< {*Zf0om1 :.JQW 7Y]Pw ON +Nu
\z^FE_X<0&
Uiwu˴NH|/[v څ H'udpg^e /+
b庤<'FD0S@ A2& ؓ8@~5ƀڨ0C&<&x iUÖHʰ GĴSv1LPDX_+ c"aAF-)Vޓ Qw) {
+,?f뮹v
FMI=:I *\SGKyn"븥axr4уweXm huG˸lo} p#Q70sjmR# obLB`~+ NσzYc&^4+'Ma.iyJ-8-% q Ųn P3U`1Q
g-fw fa,h.)aHV^gMCl=j`=IƇ LI!1OlЅN iEf8}ėЪ# we%_n -pZ'%s]DŽĜDb5~
-K=@ލ onE]65B03stZ.+lWvT+Ӷ^L c8 eK~RBp*3BCҧ>T )`ECCem&9<}LQ6a$Xè9lxw7U`p}-֜?HU]A gU8U~Px
9]
'aYP i 8|rYq &D^G єS ,Izٶ/i -.mwa
~11GJ ɾ7͆XWλb 6:nl~*;=ŒCEl32@S[u8 soསz"SsQ^'s@px_$^.rKr*3m*i UO͖&ҫى!<<ϊEe0
>69̿A/zh8 sZwY~T T)v=R93kr.jlq^bc"G ͳIbE} }QQyrrā= t(۰6 #8)ټV3{:?7E& 9ՠ| 0~ | ,k$옅αI+i4 $߲VQ[2v=q(I>lb` I>k|zA+FP\^_'XAml >
wqH! tM!z. ٴ=&b{ηeA#7zRJ%C| JJ 3( 9^d1g:i!;H|.6.zGԖWÞ5p=
KG`'G^<ߎQH8gCQC^{L{uLn煬dni
UDҁ 7gO|VR:.0Ќ.>u1 ]lKikXއF=3vuBpz;֑M>:Rz9?r)NpbZ?v ah6-';^EI!^"aܫdː].HxB:=[dOC9j!K0u uO8CҞv N͂ȑM"w}XUI53>:L߇:Ńe_x3
}¾H<&hR_m@&KqA6cO@[ cS
0A;}^Pg) JI'Xخ-ݳbwKP2]g` = Ty-_wxC u]2n q4dv{ F`܀ݎ SV1n-4"?F^/W˄9ZxUU9Tި)]A]# JX'R h? _RSƃLNNbbm\1ʼnnM74JQLFb`ٟ*.a7!܄nU ^x~"f|t>ĺl|uvd˅mMbY
T' mLLdsZ=?D6q:& m7+o!B$/Kz4
ЪwΟ8qٍ -)sP+|dF^S0x kQۊbQE xDCv.܀(_fq^-z(oHFn#ˤ|ХTsw{?ðgb9!^[jb {Gв:Ky[6|H]^ `C2Enăշa5^
aƩgMքMZ>KiOZ}?S}OAcBkKS~&Io9H` WofS*)4h"$9|k^9ZAN
BZX(#+lwn\Ÿz &Fw(H+bjpY֤1fB@R߁MEZX5_}o7NmMJxDB17pc1-GT56pݻbG:%:rs^سC4I(_\hz.
k3"Z $\"hϏ
ZX^M*=oEnp>&14n
v"|ѡ9s6a9N̋yћ,JܻNC'QH堙ӺlTY9julҗkIz!դ?d=i :hQ '4[p!^ՎDLwky 8 2l^:uP8 j m*̹xH;iո IA(')֠jvͯSiJ:il%_3ø}B&PWG^kN~g(Jpє;8!BX\sftT }
#x>Lwp`{O]iZ
.ɩ?CcfLVA iuxKz9E,=x =Ge1B*r{ =`.O= Yq!ϊeo ̪ 4 6 W&$/9Uv+R}sȾ-'mǂ
'qb|lګ7Zt'6> ZR06E`ә[60etc8 C1xGGXctIa>
7sR {%5P|XQsx{ DK;Ŕh|7<V TD}W V"FQlN4rE&+I7#c}^ DV;Ѳ&
& >MrՉ"80=Hҷv+:(1;ӍgβP"Zu}3u8
~Þ"G!&{ C*fE's v bb axD 6+}>GAi_@v] >UF $_es50g. "3P - 4 '혾%wbz>nOB5V4z_o iڬ FbD(AsPl훏]?`/(C*u FO!I^zL@;x6>+y~cAT5
wGFdđ>53 7^o,rm7
B]65p }Y#hXX&kZ4s]y BT?ۧ kBo ZRvW$
!i@Hhzj `" 5]9
j Nd* ~z%mLbV<ORaF8QU_D낹!Wz# @ : N!|DO8GZ/cVLہF~Թ3(bu3gb_;UjMӑv1Vsd
C[!oٍp<U / Ye˘sPh^;s#hgUbq\Z&$H8 5B
bh`Jb٦+(e/<>~c_/ibEQk,;#`/JEԉ=29ӓܯ{W"r?$s @ ObG#U{|30QD (4WTH,͎MjNe&-JkS Hg퇂k/]dCd#]ǎh~TW|]TcX=)jdN%eqӧ幼`pJiW& NdWBp-i:VX3"J& ^0)@ϨI[#"j%-NRB\ږu
g61\>0ppej hvn4zӦ+^:(dx&̿jN 5,8z\mʾ ">%;0Ovur GˈĝFsG\iFaCˏC^.o=M1G}YLGfVzu僖b\hr@KL~J'>D)=;o\Xs <^XPml')0]2r'$]R zL^2N%[Q66+r*J űUEGO|:d-\ӐUy)x*whLXIm2T
kOud??9WF I6( eL@G_;}̼ oaRv89\7hPF\1yFGc#ֲN&j5%~&T6`!țYM# @FZ$jTA{
' ^9Qro?& MTl("fq
D 8#4 $kUWs~ŗs
yvNle/ g;Ie.J/י 21 Xoz9 Aja&ߟ)=<_q q lf6rՐoF1oJ"I<*nBC{`x;@ 5 uvKs [0{ѡ/jDr!-$Q:*՜Z:id~UsUQaX/K| DL {dϞBlkM+D˗ `Tg?p#v uLB#+2 9 JoS *TIolPqH
Q&0#k$tlzO0NB :sxiR([MWP9 +]p~D#o+yYD2j:n}7zE cU.m-# M5}Q(.q,bh¢tBGsw2ފbյ!sj,dF6CX+M+0/qZ=wS_ɻMPTtIUxZev3|nl]yAS\X&F}!2}`T:}Dz8;F-_"^
[߸4k;U'hs4§1k35uآR idK01P2XO+wO6bڏa7(2;z. Ny K"FaT|$}4U8Kw#^>y]Vk媬̗dX022 D@qBL a#:b04TH-<
;?`$ M SF7&
cĴSꅰmn3J~whPV>?ΪA?J >k1.
YI^{Iό56В_up>W63Ƅ3(/j;pY=dTm3P< 'FK BB>k=XFCw}D!C$ K}Ш9U/ԗ
J(Y CYЀK +ON~Ru01Lʵ{uPh.f #6 !:Wr>> [ \-GidΖia! C |~p a͏ v|FY.]
F\$' IF`!W`!2
Ea;<^K;)}-\u ˭ 7=) 8bm{t QeP,ϓ4`s;Me h݈D7Q= )8n nhWһEF1*<1@)|+ 2UDIw_p9d|I<-\#} ^DeSJ-|ӷeq|@Qʚ1.
UvcE>]k6_`v.ü Vbq> $jTz桽d3@n#9n(DG50P'YxF"$ ?o1_z@F|X rs6"}(PU YV izpW@AYI"\I6 ;T z֢G# m:s~ ũ /"o ]:HѼr/!qF+ͼX.WdEpdE*)O4hXTaKd
Лl7Xݾcy
(,2ˮ ?t@>gl$o㗬~;%3 fDP 7VwjHʠ@fj9 `X|Ǥt6px*s,p[$%Vw?ZjyQ^jbzwYTmľ# 6eDL m9C OQ3
@<$U/w0Yunፓホbdl }3rt[H'm{ǫ(/]SƄp1 qĸD\O ^ ;%]6Wo hG~#ĈsS?}0J53 d%I|{|; c]X`iΞ{uewMj
`Nѕ6 PhY@*S(Ƶ,4 nH`;z}d~t "QyUzN'G g [~~|%~:{N5%*9 f$YVܑj P` ajFfAz ƞΓ"7%W4)2!3Qx7֒=,i8!0ҶwӆSp T%' U &"8Tf
u7 bGҗh ǃwm]R}]}b L`
XjoGD
yԏ泥*KD-XH5nrS @ȽmYMwso\TnC|m#hT6ܥ2KB dN𞻰aeNawԝ2}y.02, 笟)|MR)n[Mn>~ཉ//
0g)5/Y_YL:wa-q
a$%cx K2DV0@hTXʚ# W"5VqN7V o PXcИ.5AZ:X_$4 jGu<3T\ג\mF#6fj{^zq-m&de첿 g9Z^u4:h>M uPȻqn~.O>,\Ns$(tC*~7(AC3wydEh[Vޜ(N ga[d*
#7Ted6y7p
+r_/q=qU_J:(~YVѰ"~gfF^ r
8_w} q T X Pj 1 Ï G$Krnp
X) vF!JQ,VJ6z*TU;
쨜SnǗ<9?O tbFAs
6 %`^괬hTxnsڈ( vgh'5K^w7iF̀bi 8 [V#\l Ko}yg,ZP"
EşⓊErJ ,ga?{
\6 N0!
l jKٺNΣ7¢g`nOZ
}2 H[űoe T&g3# &l`<"o@zlθA/Й0'ɲ4QQƙJv>`0q;48"a
s_TRxHkh$~m|ϨFHQa4-%Jn]e1Az*r*6NԞG_-e/ 秵>߬1hmUkI?ӘlTk6 $=ҺU{lQımf'M2K$v.ud,}I
\U z 2&Ue BSe| Qvo*9ZsC 8/ W=id8K|y4 p#!D )Ⱦ;v@ũ%e cl)M K5G8μv<] W#I|];
[}@h|94b:T`vE
m?0ڢ5ݎЏɝ濥P3.9_Aׯ/#[!lbKi<ߘܠ MDܰ@5rś.G$;4:Pجv&U|G8 v Gs:q)q b[ ҜD7p3Mbث_u%lrQOuqFx,HC*Ub|((f]*R톻Gˇ F`xi i,? /ڑv{LW%܁y>}f(YA
.4N ysBcr7ƕnA^ %3K̠|]}^ byo{kBwk` iIT>Z{}
O`^'!e$x/~c^*̋_]8 (v>#!\uRrm+7l[) z&10
lK劾[rVG:v'^ _ 6 ӵ9Ӷ49'
LP
Rk^fN4!ܛzm{ L.Nt1Si Q C0yK_maCV0@e?컔֊ܴQ/NnQ#Bi+"K)9ΘYT^[yv%s#
м 6 I^ F})2wWVz>~.CdFiUDAgXOt y Os[C
HsHK
5~b
zȄ ocO_Zw;]fěķAuQxJ|]nchY KI k.!A3d^
4 qm8ҮRJouݭy\O7S`Y?3PIۓ c 3> и Zp 5HjW:\}5ޑ\ʝ>`pH|F$w>^8}pO/D -Q'kV"ov8,t3Y B
6,3#jQ _HdRߛby("\ݿ'Ѧ z1kqRv~ƛjfp.
:v΄JW$5![]Wy@(&@;1X:Φ hl]סl㥨ɞR Ҋ/ys
`(bT Ϳ ):
[УH'lI UTuh)H;B_*!
KO_J :un&L2/JpU.o2XQ1Jts 5d2{
Z0| m6M(ƂAAxF5~?& e+O͔3-5>ڙd@bAM7;j ~7!'AҶɟ^#tQ@Ƒ9G%ETePW]} Dk-xN_#SDVakʢhG7)Þ|~2֚:Z*Z29̶{.1Om!KRG jL
*T@Pڭ=uHGXr{S|[ NǓ (irqvh@譃JZרWGmYX֑躪Koa|ɥ:}ԐuڳvP .OkaLͩMSQs~j0ЃQY*|*a "l=n .aF̊3ILo$͋l.W\ MPr8%!{")CÿU`VgQ>Bd6R "P;R6uΕSBD*qaO
p]%o`[b.6hzruf4س`*iC:wże ߠ@v!X ζ(&E[^;S0` O0b¬ih10NY;@l&a\d1yՍ n"g
m B
mfϜlu +]bN͛:l> %w Ï6{&lV2^^>ђ09/`M+ S %˵eEU ,pY # 7;Z)/IH1^ M %."XvJ!O`NHe { *Z6-pXS:ԫ2P
Q嵭n
^6xXE"CBG'-˨,:UU+ǏyyNΰQ./3_~YV 2-٣S1 >%ڶo W9iQ pYjțh8YKe k;@:DyȒQדĄ `F IF#k^%`MT (ո; 3{ѿϿ jx#k-v rӪSܤ^J?;f' {GvwX8 Pu Kx=hPDqQ3pm*4]yO#}hJ$y\J`~@+՝xL::Xvdwe#߄];b3E8sG&fуv4GK]c3^ PU'R-\7qE*jBpB> Ɠ rgu_r l2H@yƷzr$>wɟT0C7Ę@.WݶU&T#'˪(JOF`W@JK64%n9 O˕ d,I4ep7]!u#lt8XFʽSAynPqA)-">|ZUA!W:O.xky06/#"r5XNv
dT@FM;pЅBeˢq3h*drԉI(&_}}iܪRto9H̠6٦.`Xji#{ .1rםnhmj z28 6X+jxE
:ft7*7Dn/O> xH;` V&N!$vVqPa~SϝvMBq-W'P_ikyS٣!_S-\xp<8{їaa{GsݩOAJ&2?V'4Pݞ(J_Ofǩf qC -Ȁ+g 3/%I1ksgspyXqBûv\S s;7鵇Uh BK97^bܝӉb+ɘ|CDڒ AIh|H; /ݤ:p:/5!ڠWzy`DID?
Դ'nn:rq䄸XJVTOˑr0SP> ts66 c)OxHH5
`A#}%
]߶IvdWYDb:B
M6;o! TI\; &uI g0-]d(e9۞ mCI O{ {;Rq03 ; 8 E 9W2 37!/ȯ"q,E!ucˆu(@bk-ؽXg i2g{S ʦ老p kM-DpmGVҲ}9Ydo DK`%8tg-f #p:V[AiB L|L4 [`_tǃaPodWߐx="*~sC-(HR5^:}i12\b%
4"!=6_~2_, *"v͟k1ǭR>(Lwq/ <[V ^ 7
C ?Xo7ダSj
lU ֗Vr(K/Xl%ܯޟem`Hz$LF-KZĀϚ<1DpED8&TRmj Q'uRpq\.Z}.l;I dm .N5iz 36$;^^}_C !9F K|Y9f(SuLޯ{ja Q Ot/N[f cZ8Fh Cӹ%SB ;t!S
Sϯn[[TZ^iV |c'g! h )&`-۔̉j [da@rx@ h%{ ;~KzV]|l|W^`v`}$bhH.bVl| z[Z)eLT.(3<t Qv9-]],ZGK9^
>Ľ V ."Vt$ e 'XFU 25NΜLd|3['`,柮7V]!)|5wub+JL,zۧ P ȧkr18\̻&X\3A i6gq_0zF[y5
߂U6Wɽ4 Y!}.C .CɘR{ 0=|UPh)F{emDm 7?&$k *ȷ_ ; Ru }Zwd#~&*ܞN\w#B,_Ϝ3&¨\uP2 yk{(]&~kU`Ij,#^#PU'kX)"O9)T| FYj;d8bZAQ}ZM _ -
I,(2Xp#̿PFZ_ĸ
|% $ 5JǬ.M[=&U H0e&&%}mIh\T n@0\5zrjƇ*6 f|NhJݬo^łf]%GR'\ݞˤ'6Fz! ,T2'9 p:|+0_
5ퟡ [ g/QKG]/%6^n0{ʰ:7Q.TlJ^'C*ɠ
1mb[NMl~(a}h Vuؤ܆9VF`%d'xXd}@Id nU%LEJ jWKTiB \CsE2Oլ<,*Z mm֖)t ʪ;=zv9koZBҭL}K% =uůp(W!";bR;p^ОIkL:G!SݑɦyE[cjWuL368 0f
!.abk\r)( OE {v]P{(ORA > 촣(h ,̃w:rł ..Ԯ(W#BcCn7TF),2}@էzlGC!5, R@EgfWT
&-E)btkl7 _
O6ȧ i>o2d 1R9YyjW! |5F!g2[5wL՚JS;I8_n, Z|4?31/HY3yY33
W2}?a !(@pʜ\ O=6ueHw2~6si*=
z! :"[|}E>dҰ08[/f^@xa 2`
wdN#{[=] u7} /+fnIC=6܅g#pDpL4#/̸3iuoIIinL1\t 傘K4qli5Y3lA 1:
7N5i$`b0_F G6C< ּ16 ktT 43|_@EE!@_`) *ٹgP^ ^$ ${栠u7 SѶjS xF̋oԡ"7Ok KÓ`l7^`u!wZ OOg7,]oiny`5^pt3$][PL} M #&xR N\Ճtg&)>!Jc
J7 K;^jrȺ3ג>iS=dV( -@7
}J},@]0Af&/f'7EuV^A ^c_j Ю
ޛGRiJ& "u;,d_`
D| XcL<C r`\?
LTeCnTFYx'YX
! e; dX(&>,g.ԕ6L&<$*}ZVl0O9= iyip5; mkXoBVK0Q"NU&j=WAJ XQK~cWA2ӎC 1#muu8dLv
,MEnFMrX6-r|,v# #]"̾l٦0 ~*{&~
Ybڍ.Nc#oǰX_jBet
Xsz/Z(DA+ݔ50e > %J|.X?ٛ|%8({2 fsz@kḞM2gϼ62BiT)$Jj-qhҷ@ y'Kèn^Yap*g).X9xa OO>Ee 04
~~NߒE[fU~m'U
ͮ &gy$!e/@ 7592Rvc)rݼKwmx"yI_AUW-1igIE*-c[ `.%^>
@ :Ư ~n-faFeiBoo* ʭ#i( rt$HG
agMS;\~G*jwιO-u%VafHCsP{ݬifc%(u!t ]W[§S en:E-NyVn2xپ6BڇT 9/ S x/vE`z?CLwOI`l_µM8049t{g8 D.๗֥+|S>3d4Bj}6}͝˻ @Yw˥G93- >$ei0_mM)AkmkOs;uez Ie)ƍ TX,V) /ux<$$/|D
%F8JGKvKF~T[z10Cy9O)H;& Xz+y]m÷fr2szneu AуȾ*5 *ݻ++G~ 5 -"YS60ke$cK25ydpR\4| B)B BcόAQ ykH>Cwi+cXnʙ!!8ူ
ۚ^{8NlioR nI= ʁyS`7Zlwzt!Oc假SdQʑw
ښB~k#&It4;{t?4 x_>潒}u%XD /s>*_ 61]CEqx&Jz?|p m,*Kw\dȥr;-ǵanM[C0c&)iZ(*v?`GvK:t
Oeh#A6)*w }¿@
kh?f EŃFZf*gIAS~u" ҞSe8'{Ȫ:c><Ź"i_.$C/HT
WKփ"ƶ*Fbskz9i1dHg[K0Έ7`4CC4R얋f 2Y8jU8.`%dJ m/olj[34{]/*hqF |X;t ./hHG{K}leޕg ɓLW-cy@~ف}VerDQ7h&.oZ{e-a V
QsW'3d=ٿ;/G۪Ɏx{Z ÚcEqت(ʏz &ӽڤ`[p؉n cHI6\Nyc
7)QY$끪y9"2u:aMBtxq)ϧ/W%Ӥ&rߤn]{8
2 Y]^ьe9e+ nz"p5xYe:ʗդM:ˆ߫1J*j,p˞q\Xq]s"[KQ~F,=+ :HhW64%@8 ?899٬ =pf CM/ y3*]q2x2Dhcz'yKS h$ے9 ăQ$jBǗVZZ< )fB2*g
<{u6/p5uˋ1/O]iH(.JX'5?1I\S
ݾI ry9v\q 1uD^7Wg$=y.r([qm 5e~?,0B se9Pv;&yFP5~;"5=BFq=k{{5
80/]B1窼+5;.3:E;bfۦS݆Bת-}ؕde<3rݣ$&tǑq>e7JzQ8ՓLH
&BEx.bwZ/RIf,G
}DڏK9GGHݩ]tBQf9o
>MJi"MP0NY}]_ _}
5!L +:>`Fn|軼,=Cش)|il,㕰 yÆ:?5̧]jKj{
5Xi' N+35#7XUMKg`/FXq:,inZ0z2,BDad5(
XA|[/͗xKi.&={zXR n<T$UOhIUBuiEDrlΜyN-M
k) 1d~_ oLč}[-qr5Jh؞j0}ӂ0+UMo>忞jp4܀j|n uDp=1al,4jI_hҨn '|NyBBE C̴4`)^#^mYa,y#L~9
A;@'4g6oEjmWvR>`OSq'jsba- nqNߙ]Ԭ]=Dj X rc
['w|ŲƁE
Nm= \Ҕ )V_Bl?sB]X^si%^GlmHGs/Sϯ/d2 EK<@g& &MQAiGoš9jA3Jml,%ǔԄ\A**+Gy {:gyT%9|k|c_p?d+Xmi$;O.WM->NL:G?m=|ѓPuHP&Z{C5= ><3`;aMA1T ?]EcZc륎o$ x^uX}PB!eWqD{s
^Z@>ʕdn.Cri_;mMlnv\t:UVeY)) 3$ϿEN;2:
]E8MCȪrߙDBZr +؏E*+ۓۣ#FպƐ.2Q8hw' ̼` J`k]\O_lr "jiݥ(@
T6֔/9e|@~CH
NӤ@k;~;K:
qHfX Ѷp-CFLc T< 81? .6зE0r@Tӻ:ÌbDʳq`ɹ0.V+Ax[!{x]h
mh-EQ'NT%,uH
a"OL)ErU~HTc4-t,76zj
ݠD7LHm̕8OLv1gU9: <4ۻw.T
kۂwWIYr2&`&f P %mn'9~ G%)Nר:s 5F~.bE\ARBG4e\vQn Zm/| G6' \M\NNzG7;t5.ltCP&a'F> !XIp} zi=ݯZՇ]O hNi4F 4mz4$>֘GR(:
k"a
Pĥ }V: g ͭ["gd}@t~w
>`C~3!ẑuFųy^FAO GLٟQw3̧|biim[$WuW k٢ wx/#HuOJ+~wK#~e ҉hǒSa1㠗Ibw 1*U}f P,O'c&;Mm\V}`oiȇgޜA"MտlL(vg
mFK;b'0'$\|B / ,QG] Ḏ^To_MGӰ
`l\uTް}̧HOX U ͮ 5-\Zq6 8q.:S}[\s"̅I֩}?4/IͣT
x&,U8g+
5Ubja~vIJ"mr2垉2A~h.L w9> =dj^]5rH4ݾhtEh < }^0Bڹ%~1rPm]ؐN9#
4K,^ ,}$x"YoưEYMNqXRx ߗEŊ7p1j¿я F h2FCC~#[ЖQ 'b1A'+$Ŷk߇,K ?G uk>腄ܷIkS^!|;'~;̧ ^k|A '$0 q͎n(B\+UDxb\kdk]Eek_~=XUѤ2eYFXz"F'UsnvS "-9,rB:+>a y4YX ;U %4`Gb+57fZ( p C_}omwbCjY~ ZzQ;ǚeAэqud s 1EϺSYS)D֕1Wepȧ$y} 1u ,B/:F GkYvF}U !lǺu_ ke orf ٱ]m:k< V
l CɓcA oV =x8+ ):
TjKn MȭCl$bYIHxieϠpgr*D xDM Iʥщʌr\g8`wqt'%t56)
º˵¥ff繱d^ ȓ#v˚z70T9 a_я^vA~ =˜ 30vԬ>Lb@ێgbos6zEFm۲ # I/#}FwԵ{̀´ GI r2[*PKIn;RȎ"N1+}2Vަ1NsђA
{B +E BMzt{&q }4γ*5BP?yrs,yn4Eo x&bǖa6 ߽L䉩scS 6, 5V
B6J2m(
D-VLzlq& he$L YBhqAS.x< zX:`PP T`t}m& Rr a[`NF4Ť3+[M[HШk4TAG}堏S~{{#'pj pb B2GHKk ?@Q!CUޖeJRIMړm,샻ddmJi'c E(гovG ,AP *(ྴ[~밶V^d z&ϩ]윙m,͑45sUX&a߆TbalPچQ]cWh` P F:[8>" vǷxb&9 ` υv%-6jc?/}.\k+*p< #oKƼݰ:؈Mp(0P$CH
iGC7!JML]RZ+n-RΪo J3L]E%Q6ۤ. %j-jLԕJ<7TKt[;&?bKL&Px tY6 Bozw(Nv*sWQޓ71䥒W͊䃔(Ǟ
) ݨ. V͑җ `E̽wL['O w/kgqs;WMbj?{kfЩFj#}n
bWVAў_/>c ъ!4M_1g Q(7;kg}n5*R1
(~#LbwZˈu}iz{sr7/v$ @GQ2OVa4y+}~c2SkH >k*0 q:a o#嵸$0K ޒ WV]E9z
՛9ѶfOR)\suE x([T7-)K"A1%MX>cFJhޱF7OX
"
*Շ)X1_6ðC%GC09ݦPȱ9#ˮ\X)UqWH⾊uACD"GO0k #S<Z$|jP:.qQqu C {$Q5~z\(8I*`] ( ^W1`:t;| @( =kUt bTJ?) :3T ӣ[N;vKoaG DA]͠
zn0F:o[ Q7g` !4ZEnq)= \~VD|bOxmJ CxSggpN/ -p1˭hbE |$K0*Eh<4 Sl7? Z/q)۸JEh u> $'ج KuyTo
30VF֫d4jȑ'hjގj ŐudMHT )8ygMnxm
|:Nu.~W Uq~P
˶j"8; Y5fa:{>0L)2r
ps8Ө- [,ԣ7`.HTm"z#G_3aC΄>)QK33h;4QK#oW w,-@-eFbLOPEf0
ze`$}AӰ)q/J|h%5̼*#^vK/4^+)۪s Q|zN(eEy-RnBW \5 "7%_8ګigMEg>69 Sȣ9j;@''PvsQϴ"ץ47g2 S"+H,*+ۮ]sSrO 11mR u7=dLeT !m;Loq]80Bz2K[,}G^{W ')+iZ P7EX
;ZXmZ;K09vǼ&dxMd8 9]COEWk +N ȏO U@f
*봸ߨ *U!6urd%$Lȥ!s>42
^_DKZ
#pL1A3Cj(]r"R@B5
t{C(
zk;Bn{zd9@z(G`ep zɛS ia
; {%5S,2e]T,~z9Җ["7 a
Vku
(+! RtVz蹃 G ute L4C*CFFƃ4wߐm.!U(!g9(!`Ԉ ?B'Tk9o dF jZk+ %y#tYIU3<9BY7O'gSv *Hm'7
]/8/i1 H_Pj:Pumg?P!2ބB)̱uv>-t8ɏjs 'A1Sm!+hA7l;# VlqCNo
p.ʫmի "G |qwW~B` V}Cq?' 'oX>JK}97=~/oC(D%bkV 5mLrWZ
b >u"=@= ' lPRsi)eh_~(ڦ|\!CpYyrB?+$9+ ˫ji5owmWR;I
G2+ZU[ Dy2-v&ّ&R3bF6MгXg6nN9nLD~2~ / >cjdx*ULj̰0W}H~,`UOU'XY$Cs1/Jt-.}^f3? zch"y P]PvU?
3!Yc (_ev_һKYN|e 1ǁr:b :!D]yJ/Z1~ @OS͛:XpFXr7ol)v%B.jC))#Eg 5^חPQ$ [\t X7ǑRr@-H21|BƐVð
kjj[Lh!3 :{ Ѓ~b!~Dޏ.$Ne_i4 _;lB &CP 26 t';tdm47 Ker=*/rs(:PԻa)o6@Bl$d}7 U:;/F[n~S|2hw
EEdg, ]kd5KWpfƿLC<,[rn<ƔpjEtX[x
H- Gz#3z7-%<^` ںl aYe_gQ@w) 4p7xˡ.T) ;j?~̡euwv1G%b| IMMُS3hxd~ /᭱&Π*v1P%"V[u&=#j"Bk)٤Q 'ʡ]f 'ZIfNcHi1aݝ苬Le=%V9BJbiWD^~ }r]-C@G9ZL6( L[_ebTC ?|W=u'a VZW
rIǿ ꑮ8BUC [I?3hŝeV3Cq2G>gkygϝdi B@Ҡ^ 7m,wAv|x"c<i|&ρ%f72l RKc*8݆SE։.K7[VH3
u1Z-q>tJJ\Tr
uI[y鷯oJc`MR Q0siY20va2KK !)PGg b*)}" kk 7MqD~¤t=<ޮBNYeJR,`.Xs2J_ {ǿb#SD;]6T7roܩ G݈.GO DO\k
Ǥ TU< #G
5aUn,Lmr8HEŎ,r\l} 5nrtT\P NJM}}.7{ KWC9=7 <\_G}mdx
Inm'ZP&xK1vɰ(F~( 囚j9H1wWFgM>Zr6G%R |*Mzqqv8lurMm^RJѕ8v~x#ڽtgHSPCf
{AwyI<% ng<%h_E\➕zvLDM4z |l0=BW <'q~
k8:BvIChF]:kUJ N! JZ(Jؙ>^` ̫$~nSU:-Rp2$ ^BaVed^J, @4Z{ W(n-?ť} ~yƎ^>K=
6 Ìt6'N Ϲ;;A{4EDܝplΠHZ'j1_kwQ-ùoKAS8
aQqGP |lּ-RXBVN̺yQi<wt~5d u0:>M &^F` H_ sӥ-w(\y12UxGՒ*7ڋlz~V/Q_
< #WиCoI>Pw :f 72 F:)_ϜUxcII`ɠ,r$IaTb7P#Z 7=ZƳ,]fXO4oA^L(%-e[ { Em'-z5aA6iCW]rAJ,@]I-J`y+b44p; 2 P^; L1rn_ Z\<_Mo9XSL=*)R̡qT^G_
G ULU#qȤ8E+1ZSY= 9 %aJu;Db!6]:"4 sĔp/&;lct L$ZJ?N| *L^xx7 *AM#]}/BKdt9e/|d
пy`J~YLji3)'-`- ^T\4~
#6XyI< 9U^j_NJM_WUy529&¦|{db:.` Ck#w3 kdfZQ@sz6=Dړ/pƖSs#So)sdY-iFʸ5iƤ",% ǔ݀kCaFM,x2'GoITZk*x]`,^ڷ}%pRu_,uGP1j{rDe* ) X- x#+Aؚ=0V@72cKqy
Åw:^F6$8rN7/k t^S Vfږm
]WknUz)X+@)ij (O4p
tC41 -U.UA sR3, )rabY5 B(r vdY?T- zJwI2 %ͳ eKc% N+jЛ=`7_!SF@ V" ԔOVy'O
Go?GTmu)'4Z=bzA/Eʉ ]<ęڒ"ܙӧNHZs
R&_\;ޟiuG%`.} p^i@#UJ'w$zUe]F[=o-"Gs-s3V];?1| J5WT֢=˵暮{Z!z, ^W5
rNW&ϧ!nh=P
bIr JYjy9
: / eXK// [mԫF_qͦC/ #yK5ĵ7չаN(wn:8Q3SfD)
$5]Pixc91kʤĖC %Bŭx
uxcXʿ3Zt29'5iQ ^pxb͢ 7Z,} &tbбU`9mX1[v~avk8qG1%$/ŻEPX#xz1d` ޞ?4uIy ~Gth&Gap^"p[e ^H4H>|HjY+3[`w|K0ҷ ,+谣@.%$
t۷k(||tnb,Yc6)FmTAhIzҽImΏ k=3)W08wVm MŘzPUp5#YwRUBM=ƌ hwBg8λYO.g be=O8E 鍅+ӟS0U& _p3Tiͦ3>WHV̚}OdQ7ӬIwS Ygo3ŀ ! OFL1dQŢ1n!J#7?OQΫ9(efR@ioTO,Xq8gqlNҧY,ɞ5 B.H>ou|GxH:\Js5ij*鿖hǎ niJ:p g$)2? ZA7iv&Vdl--%\N 1t]r"Ϯ3l^wu2n
ͯ/n 2@ P8
n\B krĿ"{
T)F5C9 \6_DcD
|Z-yXZ2rA(p]^ik@r*U#[&!|ˌ5(eb'!aqgBR֎'/k)L'ƈ:D1hجR =UՎ\b\'Rqk!-/:&U>kfȹ+PuU*%Lå~QGi:x
+'8q#<,*܃:}4ꘂ-Cm%TA5RPe~8}OPT5u9ݜ!QOv`8 F6ڊm,T`Ny h%> \48=ܻPēVtȻį(:9C6gcΗmtQ#cP!,>g86@ t2i pb6Rs&w!GvDikCEE XUn&y*=ÕQhs=3@9w9@ XvG!*P~HX
!\ \$.F%DG] [;T n~+2yVse-ԍ s2RVxGNQ4 *}g\1ثx WzaL#&
s
+ڻy+ew:PhUNЕ^ p2A˟VǺpʱ6!HCp'~`p UɼCK M *"
̀-bQ+<]&wRa8 ݷF X~| g§ȑv4#eA\ȐЧ<@htx We} .h}eGc Ckl.QAJBgRhPw['Ah R0 'b"
_xbQD9`.l@M" Jʴ,k@KPXp>yA hGe](G.".R;HJcnF >[j/ݝN Ecub8fnyߋ┶w I. +21 )v'P$9`dHp=zIW x
4G 2d.0*-CEAeFVstTpΣc¶"^"AX+nce{ J_J0%Ѿeò_H<^W%]e#p7eZidcHO E&!T)ސ?#Hۙ1(Fa༛0iF2 DoB
4OHLY]m=tOycC:DIa A%tk,S"_D j˟mlkf7`|'x=05miW27C
)(,
&p5hhP?>/{
w & <AeHSD^̮eYӎ%.Wnြed] E/j p uehʼnJg^L8%F1Fa36w Y.&Mb`kc}Qum Õd0 i[XIЮkҝz"
Ӟ2l {*U`{
پ'EpTL9Ǭ3 xklR_I*ϵ>Cyb_\*7 62"e~V+x\Ǫ)--IOܛn+.!2vTw #8ɦTr
^ Qj:!O bw
yΠ?D+Njh/]wuѐ`; d4%X;
{Fv~C)Ua1$ ee7L!|(n TX>"crP{~5 ĵ1i{ !M}dřd 9J[I?@bs
?m4Bph|;1,ت?K 6iUhXƿ,S1%(Db.oq
~6; 3 &GęTX[ q n
-&Lf1"
IIuu?kB$ >b_^Ýs7PZNAX.W<'Pʴ^QwZk`<\E@Je ۺdC+yuo5ydjK+g"0x[ ,k9[N4 |R#=! T#VFטHZl}HD'%B`[q_lb+}"e#ˢNq ;nL""{*K?ùJEztVYp:bwaD Qs!i>̾_鵈?PnjGsq( &!R@-VOTnEA>bFrUR?*WMp@&2:z`q~bB
|B J;IB!oeĽ~sK˟I)p:/F'>C/a 6^;:[6 ٙ ;]у l8H0֩xO.Ԃɑ
Fe^jXRH-w-ݕ<6A˛)8 ZS7x{wgfhMGތueUa꘎k `C6uߨ[dl=d-ȩ.1|͛ʗn n@Snu1M0LJV (t]vvNqg"u " @uJUU'EI^[@?`Sao6{)bHE'^r0ّ^
7^fs q ]Mýْ/h7 JfφV9㼎}i%wuL%PˣXcd11Xh167':^{(;ZBCaFњZ;RMqFBnmgfT3IX_ !Fl.*_bpWsLH T3-AΉUf̮Z< Ocg"\4 ^c~@נvoҮD{} Ǒ 'S5q*Ԑ F[ccKSAH عlhD<|ӚC %M)?_Mɭ ڭYL+C< R\]het-iol*AJ'T*ua輆}sDis38痩GlcQLDq:(*z0l:@.6d&ꙀdF$Ζ xtY]ؗKS'wMNIVg
suI*G0{^bin_Mg20(Cz 8 p(;CkK+IԲr 1/M qC>c礽Kݯ;L̎_Q?
~_4R&/JqL{#4~.ͬ(Q[|X>(%T:U ս|.۫&ȧ,ʼ'ÅlW;S[ӃG q;e2 !
W))!̨B}2 ĭ t Vшhfmu r)V/E;jX'%ujבk~LN.5 Y}ht`}_E<Kە9T%pj}f0RW0> e Z k~0nMPgaP鄊SI&)
_J5[K -Uh .YsjG`y33P#ug0 &4PVj+Y 7c
#U/1^ۧ;( KFtk,i&+$_!Lّfٮ2 /5EÌfp>Ƹ<8odڶplS1'4!SsV8 0 |D; oClpƚG4BE@ Ŕ̥=[g3x6`eK w`ɮ|8l"+[ ` ;&+aQOdGƞ1f{[\Zt`fLjj Z,_ 0s `I ^߹O|1tVT`&a
fJ7QXRةWWg8J_z.$kPAldҗ9=pI:02RC_.utֽpTAy+>Kkvz>b+1_B@; ztE2Z;6J:?infBYq,RbMp)T~q \[,5 z!-%GRi:*}3 SMv
p>R >NJ*&?;fT* MZ}$+y&͔܁!fF\D* qnU00ImNe@4$0?v{W=!7˵ z~x< dg. Dz/ F1Ey%D9xسCRLiʨ8#fe%E%|h:hhjI 6q8y9 TI9M"x 3HAjV,CD56Qo2J^%*~pV tgc$ ̖{ ʬ!Yy*rYOT$FÙT xv#31%9- 83$ѼAcJrݴ;]i%ΦLh/yv
tp0 8 ޙ "s5kGن҅ ;II?BMI-K~xp Q߃G^T47Ka!t9< -gǸB#$R'Gѐu;oۆYYS
IJ:ː|/0 28x# i2M5B 8R87 e[_e\YC6Ȓv Pb 唘z=OůE1kv>?=&/u4/QܒJ,3({Hf%v/]2%+#k%u~+pxՈIY
IǢ1Qk
"U*lc|3 ##ȿۇ(^ c kыj@ 0 pݳOo$}Hc`ۅf:l Ƈl#j ibcS8TT*jH+LM;,vKL J_+97/Ye=a۱_f$һyS) 5R"B(m
5ƊX+__JHwWJSha88˹5NiPv_H TqKuﾞ!),}j4w |;otRyx plaԘ7WSJ悢wMӇ[Yʗ%8Y1Xޮًn3yN2oJ^LCU_>c8;6,};3P.XYvӫ[9ٗI
") -x=%j7L q
}O{c>wb2aлWBC %[翻e61Xj.Q>>-@jE;}I+" }0@#0x%Z(%oBk!HUIk
0}cCcbu 9aA"dI&kq},(XJeRNy? %(Ss:KC6*Is 4 iw ōb\Ħ+q I =4+/i@`T`i!t2zh?QQA 7:^˶:m(RVx`?>xɇ_ͽYwv 0a9 aA \09Y܌Ⱥ0S U`UJ$ vJ+`>r3y mgJCz=٤`W MKݔELi$ueWADd[ &; _!;4"a
u>i~M3e7$1`>~QT{;˒ݘm3![ oGz{!7CR~,O Feh<"H A;Ãe)UG(%Q-.*ז͑wq~H!W:QXE(.oE6l+ᒙ|H(v0_!FխI)J FϿnrgk3dh
z oվV7{Vc}{R. g!4ǔV=>HmG35f0$CA?=N zQ4fE2{w"h=}3[BrL}ڝ X]e殂1*d*R:(f̍ޖLYtwk`3B:7<9/"S] I'ZIF7g+|]FۂӉge-^F0 my|h;*VI0G)_:֛c< !5|mzaDO:N?#Q5h\J홓qS~Z s@sQrNncĘ6b}65C-Uz1plj3!&+[rBSu);^0
(scIѷ様 b_6: v_S,f͎#-\@ŋ_lL{hNNR0Csc&mAO
- \oJdƳcHO? aEf<gC߃_҉7 khb;
rK=i$ӄ(U %y\%^eSssbRqJVD
yR~*u(@̫vР hMy)!T8Nȁ[Svxm ?^RG=:t2F߲FH-s8yK+7v47~1B5wCL\vp#?.)β
Ozb%2hvnj
6fP˞ V̀?X~|Ƒ~*TQ78{ORxF6Jl+5ٳ_jy9,k j'R<.)1&ʗ]ЙϲLJ yHj ,r^h
=?7 Mñ=a҃`$]E 'FЌKFn [Qw&gis|kK=JVDk:Vs';VJ6Lj*0 ][ O y" >*Mz{BTMT? ]HApZ5 YZwbC}a[p:O KQ8GyeWQw
PD= q
HџJd t)b<!Ql7 - &ZloWR; |k.bÊ7W5?ÄӆEk רT"MUtQ^ſD,4G Rޚ럏
ݿ<'ׂ ԧȧvϫfc#ͭz JSC+u>ײoEAD%HTl>2{Q$۩ǔҚuɉ, -oO#!a>Z {l#{` "^Ubm[9Տ=]
\;k?b_n'$'tcWo3'w |d3)*|FGH -f69ႆf)Iw5>Aps$:Mꖦ~ MM"G\\ PHKlVE to
xr Q uLؤ%pa0UPS9Љ~#X)+ M{S1@0dӚpF2,\>vA&n& ڧ'|M]FC憺^/۱yAxGCt4Q, = -i^b#r90p ?9@'C=a*?<n] !WZW:,ʂj:4R+lܼH4LF'FuxbC+ 0OޅaeY A( Wf'i
^x)D|tXT%LkmfnWEHgŎ拹 KtH[o !`JPډ3'gwÈG0~1{J|g Is/dz1T'GPM6!n8 `pS\Ejl
32hnR[Q{[pJߍypfm^n OKfK2 ))\\Go7X .Uyrn$CmZ6zJфsuʋ#f
zj L|70V$Q>,o Xx' nnT"r j19Hv k%Zkt& ;5/_
UîU*^8gp'} Vv T Ή紐讠|ܾ<ܦoi(7 u/jRO2ZˌO["NH KH ',-!&+Vxd9SrA2E3tCիnwD#QJ
Tk(+&Nbs@W G-A hR5/6֚kSl y"Gr-Q%8Ԯ2S`zc&0e9p5jz
&% DAxFj~ &ܼ )WjHΖH;;-{_VbNI};Kvje SqKLYo˯ro-
fʢ?N56k)g >Vg}\a HF4({jbI;_yI>nH[ t|ȁUޝݠNRbmK d,lQ1 xzg -$%H3 eI͓,HaO"Kr 嚝 џCѴv= *Lq_gx({A 9춗i0W
4TsDz\DZ/Zђ:
b?6>B8沒 Wx%WUڝPr >"8ajq.xQF@C{u5uZ\ƿ֢"3~0sdS\ µ*@BFg`I01\x
gEx-B(v21
뙭I8T&p% l N=R3 S~,ji׆ؼ Yq]MCI-ЩA\BhF\6tpx?9y/om\5$|Kq 4Q7د߄oF1c͡=77^Dv*h7д1 .47@-r x<5 'RiNssP#@۶uePhV.r˓P3S5#V ^bl68=T\;w{W $|` É>\NyvkJkqڷ,"~4dne \7 8(%1Yaj%8Rk#4
f/CR^˲W@fT=uNh{B9-'R-oo^Hz Lw%`J7 RS!F,XdVDG a
C99pb'۹ C Mp-ȣKNV9K@Qgy<#1F7 1&c
t^ZqX ԩuffM8
ILDdPLcho0uw
r4iqI 1\zIA-s샰F0qnL-u$WVq^J|-u9nFpVڂO_ "EV ޱ&3@!f,yk3]\wDC1PzYg
9
i z)B$TUXZ\ Rm ʝw+f}2
?;`4Uk\Qu瑐鶃v2uj18 뚫v0"2!x r,>L e.,dpVqJ/
>]xfDaKq W.kIݯ~?dݨGF"c(M\k7#O` I e zR`ZLT7]剽)
PJHHhM!%ײ.a mGQ6o\gI)p3fı_tsuAͲF\F/^:NTcQkY@мWz|Mɰce5q9IhzʤA#I?CVڦ>2^qy W0L~)5 0~ IR3Opqn lx mWruɑ63j?z vE( ;*މ$GOx&L]_v/3DvӁĒ6e~ z@]g)Kl(I)x*(oP&XMA`xuk
BR/Y]mޑXA}(+;Oa-{2J9 D5LxGO-(lyOr]YeXVEYRҒsƯ 6uBiCoQ >V-V8ezKqCpY=CLN ھ,
SNb z
yܡ'e,(cnDmo;SlـM;@84 CSPDSwǔ@믈ęlOI@BP3pj4* . 8cGH۰7,&^~s&DIܯL
A7 T$t`
%T^B& k{02K1 ޢamƁ&
݄`&)n Ī?rQu>!c\ ,BN#md?rb%8|r^ZU$F #XگbŁ8aS7=کV.
B6ʉ^Ep: F; y\zb9l+^NB]}[rLj}O7Z!
{QH*<*[:q MPHzس̈SY%V:"sHlUcNuƧ$b+ѕ? lXkΆ5QѦ
ȿ"+|? xN O;p*N@>%P{ٿ `S8ZYS#")`
he +*pYItӎ]=aU ?Qh-RgiL`-I[s
Lyul. Y鰞oTYJDvemH;}f4#Q] ziIM.WZDS@x
0@DU NcX-:BJ`dRҝNvfoAwݟ? p,R@}4߅ ߍ|_gTy*c@
V7> 17ܼ>unIWPww%O-) GIӈ+yF ¬4g_&ܘ!;/ $e~JV 'XcјaXzZ"p4]1ў xՎbņ^22C9n#tGxff`ۓ'u70gG-$Mn1ΛՎs={H{ %04OtL@֜ſ[@Er'k9\jZL =\%֪8ܦ+26?q+C1i+00`&%qXSfۤ
U2Ӣ`r?&LH
hA J5&i1eQA9 k"Ctz;2&3T6 M 4S@ʾXxBYYtZT`!
cVV0uQ?LHVHș:C cZt{ezć9Ȩ V3~ˆ5(;S L.aHZ%LSUv<>>L2 y.yW>HTpYb+M^ 5<&{8\#9_( 1 ʻn0Q/ /VzcIY!nٿV8Mcla m @X܉ >OЫ#췅pȍ
PR
Yl
7~6$NF=y }a;-ȊQOeL9ҿϖH!Ң9'f* aa' rlr
u6d%Kd`vjœ'` "S XhAV擌K'[\h ƿmxʔTHHyD]oAxַNP $gVELv;V>n0Hׅ)Gs0qE4Sz#=4,1W?G{YM7$"U]ݴr.[M?wvve0w{+}f%>FH\s pHyZyr:#BܟNbo706Kk\@~?tL]E٧3scSC#K0'S u^ $A./N#"n~hޯ$;.
}hX
UH.t|HXBtX7*.~ ˳=5]6K 6H+OeUda$iӅV]Dz+V8KYڜe*D; 1:d,ڐ)G05dY>$XK'_FWaN>C] -k{R >! Qc0th17O-(zhl pеM\ pq
q,K)t\+%8 禛*)B.
iXp{ Cԛ| k:~|wn} JvӌsvQq0fg:qWԼ4V`zV?W! -D m9PN)D* xIJWg)"[x_< /I Ul䁀BIN³H^w0ixBRYhPҧi ڡou!)LG|s;]M:Ψ}{w[|
1MHZ2d.){
ƢjOW*ݭze& yd^KDxuhTTb!<8& H1v[ J`7#Np'2xc)ʓ+_fssÞUFEƣ'2&Nl 6_q"^12I3qL`LeBkvq }1E X 42dv>j:zoA
dfe_Π?& `c|un2딫/V
옗uS; bfua~C({ozy 4 ɘ3 ZF=N;kx->!m$cTӍKz +iJ~0UC$w'?}oǿ2~)ˬԝaBIo:j`'R|U&Z
!Lk$}项CAEڅ^ݥU)^sIRI"3asZx;%L$=4ݥF+ 1ރ:7xrV{kWԻ[]*~$QGjT\Y
.&qD
:=gL1&rH}8D LXa32Ǵ8nN 5 hT wRHN 8_e[#*Z8d8# '4ֳ5òQ`}F3/}#כw
!ܢaٍF)u,ވ?TCf[Vrl[?ŘPu|Ň@RK2Ox)3T6IP6.Vi8nI>Rχtvd +gii;{KkT1O/ZVyQV˂=-ߖ-:Ღ:% 9k/Ln0bߪʦе Oá0 ( '_NE= mk!y)e^25HsWѮяRn.A֒K ~ 樀Wuko;>ʸ{7Ke)U&G|QGu_#s)msO(& :8y88[Siti3ℹ;7#$x1׃ y;4JUݩ3252
bn=QZǚz>NgV]ET_nYed.'1%߫@)$'Zib Z3.Jw)ę#@4.5 ݞf8k!T7ղ
<u7-M!K`R벭NhtGuM'`l@b}ҟBrU:""Q8dM&x0' ~sAVf4s[mؙt1Qdtk#s{RFTB)'aLI7ͮ7aQ>G+M e?r +Z}?g1d
ƀKNr{#:?1"2`Wo*?j0ԣ2l KreccZ ۑƊď@,ꃐ |OsV|nн^
T-
~cP.wx!ݻk2]z]p[!OH 3gw6迺jvXʪrzJ4}jQcgA Z Op b|O;
wSjDc8H!Cfϯ5)\ 1 ?[AY8 ϊW1dg,Koq`_tˁRHr@ Y)kh8TԩPynVQ}Fϱ6L֙Jy@Hl;:@,W L%zd&?hdt V
'*
z|i 1AV><3PA &P)r \Ҍ
3/2+7-7ޞXNz]8s"u@nؒ&YET=fKbCXdyK3D`AOX M
+g*Y(hȂ{xz.ؼ-M,u)G <Ua5u+s:/J {3pnϷu< PԛȯϗA~!r 8
?"M#bڛ΅
RIEة~_@]nyᑡq.1'F
_"8Y!nz= Dg- n
Pҙ4p|$=SRkGUoT{ KnZksuI`(dTU5Y]l_l[^&35&{vokL8g'ɖ`)P,pO$d-܇\
פG U qpeRMVl
?D2F!®k d ?G ``J
-ڿ= j3x>' Z@t
b ֙EXamUe!^ @kp`禼_7?.] Aխx +C1otyxe.G>MVs<:]/mYTOafjُ|Ӑfx'w詽S^rOǁʿYY ދ5%*brkvh6#[/[k9O*Ab)wZ;쌫7ׂ* @E$dFU_Cj5;Ek'sFͤ6 *:-nD@x"$0= ՞A9_=kbY& # z jۖOHHZ!f][7E3 ?LBj
[Eض0=*!)߾w #
>@h"Nʬ
,)!Wre&%ԅ)oQB*mUЩ1(0P(Ƹ2;6G};j,>:KdO= 7;ޤ8*I"h>XGNyA56g* ٟzd_zZPjǰFv ۢu;wit
Jg _!*
ɉ,$ Wny|$س|EzE:+rh
#!?F ;Í`X467Ȁ$~
*bW"z** ci'K"LG94UU"?-
=W>+RzbY`f>iސn^+c4&O(r9EiNHi]P
@ҿϦo@Z,A{Ȏl_UjX3(Xy{16xLC&ϾB?mE$z+Ќ0p
۾AAۗ ؎!5d&hYQiODi]^<2i$!C
qB1(L#N| ctzyOA0L* 4tH@t(İN#8աQT>qn5vJ0vɢŅ[6b :uTcEo^(Ѹ{g%-"[;fbP7\ľ};o`g=40|\GT ǿ0e"HM_FyF6iQ݇=)eOc:(7Ic &7Ozկ@'. 7;ɋVvZcq ҁa2I'mK ȋ$WwIzIMesP0[-tX UhY C?ڵWq"-c~W=VKD n+{f룢 dwTqN3 Yx(Rp{XRz{Vc$pJCzC-.!o {&hץ~krp "NpiN>yE ]ڻ&{k"
T_M Q [QL+1Xw6Tf/0(z IfEz
{cYB(g^?fk}ElnCnvuSN}d6x
Φ_@0mr Jw,˃:Q4B,rnp{C~fap'xY_7ϩl@($C6ߺ LS:m<ըP3tx,fTmp })ԐL<Ѱ h)`F((g VQaTxk_D hcoJ)
H? 4ƀ_OżgSd Tښi{9[(4;.~<]96|QsML
Eͅw¡HwzT¸)6`'q!Y[]xHQ*pi։f&@gТIչH_
^ U HK C0&Y
"
UK2HdYLXf ~0=%35u8CԴ oP.fm/5d\aUqHKT -r dɬD[+_1
1,npu|
V !h :Im~%nG*w F3=ց7|H:QRd.[;F
_lAF4@W(8[ԞFTD/,PHS:?Nx
(S&& 8hw;J%H1it`&pU +hZk?8Qx/2Q8F Vb\ UVAik>
.0Ws{#hw`b)ZuR|
@9t8ZI vܴteХ=?&gP5ҳ P4yU!=* ٖ'; ʼcu ߟ9eYd둥+i""-GSGsUȴo4
֝a8dy~EMԮh)a f!2s$BV%;h lЃ Q+%8@%+ϭ}BN 8@ad cĐ儔;oX`RQO ܆gXc#MllAߩ,Xk|HM|Nŭ[zm6!)HQMJ;M!(qzTJEsn*M;骸 l{6/{s[6oHu\@-{q˳5@Lhu)ec+Y#r^ 3.h
aNaVl]HOG$ ʘ}ߕPbxTo>;!'MT
Byx+Z ֣50l6X'^`blO,d6*C10|,4!$LԸs$aCA}kxRRB6?
*wp/80=b-/x6@ !롊zY\^&ɭ7Y2%*v,Ht9~ƶN^oj 97WdHҺ:S] ў]|b߭4Xf?ȑLd d t4OA SKQʸhy
krxc8z+.0"bA[ ]~1dcLMxW5L_{ ro&jm->zcgF,'+(9ASᶟzt.DO
q=Pcdb|1k:ת~Ј {aڜy *~W?ͱɞm2(P"#6^(Q`Mdc :!XIУ-te
;{ B #i<% @%}eDEO rF0Y kajx:V;l>orzJ}©
5|r@e>Nc9l .\ 73CN>96,6f]D+eZ , ѼP@ޮ\Jh-; <7J4AT'ԯKqK&U5gNi L;Kd:n{l 5ՃH'] -#Vߎ"E}Q Ag7 G$_ !Z#c+xL&=_^~ RVtzAy훙}
1$h0 ^0EzoQ}D=*(}#PÀy C\3 :sbƟIigg=e%$ۢjf5 V4$6,M{{Tb1 maLˇمF`!BiXHGBp> B%@KP'"tڝ+oe.U(7|d찭%XMSYPX« GkK^7
z9RUQ'*G+ QuKEVLY?BH5ܮFc9I%$'}Ds$Ѿ/"ZsZA>q(Ό-$"U 0yW@Jru
*1x6%H#}i 8m ħ=1^ 4xҔ!D g^ʌl8
0sp@2P?- pX
vzPy+,:`>|k[N ⱥ!ѹMzWLjg}f|-Yx]F=ݗ]$:^JGde$`6Fx}]#Au5GT%N?}ͩ4T$,>fE&'!>[:\KUh MZ8ϩ-Y'շvT˫GE{ a%Ѫ'!--ll
ts(o34& -`8Ejo:SKY:a
: Ŧ=N&Ԣ|Tv}˥I'%ahc)/gLQ7E7i,dVWg=;q?!G̉qO"'hqWv:SШzHC='E r
c%]א%jU4AۦuMyEPLL{6&zj:x4^P.aXE,V~249ׇkiz(,6
~G+5
6˃ 0B
DϪ{!آӤg).,m.yaa~%h~ #G;ql Y~ƺѢ-=iXݸѭ8;ʽW u " =b G#&&SɅ@ח2<ELI1qkfjQ W(f!@i`FkE֠J?41ުdZQZ$PgvD""7 q⋜ӕ|iX.)x02G}W
CV]o2áW%2.?PT|%[ϋ uQr pHcdlQ [caCP ۈl,vwJ%bp/,C+W C0X,jW }RPUsgE_FkfhJT
k;iSvU;
19F+0xiE3scݦ$xm A{Q)HKpXeL>c RsO֔|)xzb
UX9Hpaу{DcmHIs
Ȕ9DTm٨¦G C ́71-h3j; D `kkhb ,-)p=.:AP c[m6 +]?7_1Z4vsI Ti^ j`kf.BbƵ3h_M7fD`sã~_rQd#4H^8ے\ԩ)h $.݆ o ߂DD)`ۘ$
"UO P?_Jk~61M<ʶk ؽ^.I@14HS$8`3:ĆYn2B>WKɀEd1Ba)'y?OdrGLA
[Y1Ӄ6W|e77H{\f7d7#tF1=g o^G3˰!Mf>*Lav Gn~ddmjko |CS`2Zƒҏ.ņ'Z"7(`љ,!kyN`ԶۥBR14 }d_ NÁ & ܌+9shBŷΗ x0 q 6yt4ȗ]}+y&0N[NQ2 67Iܣ|hd(ZFAz*Er0c. \øE @8 nyٮ#-4 W@9J `X+NMWIii֦'7ŦDIJ v KFm$Hk i*Ci\!^ GJc }x+tIidžf_DEvX{T*Qq\: WbmT4a#HJz٫bc z & afЦu ˻2Y JidqXoVRUA@[dL=vġ1ϋ5B`,1kPO.IhUJg`_?v(4I; Ή8k
-v+v*{FjP~4i=y.bU1-\QbSn4XÒ (8wb*^j {c*s'@!}hb\Q+v#3g-N/X Z ~$`@(P]`"PGY\4@u& je=:ؑHpo1̂#p~^Cg ұ/%G^hDCz&+֯K G^BC7).<ZxQU
rB (cxሮdyoɅۡ{Mul!$80x7 ϑ2Z][CL*sw`)QÅNzWF
wT 84\(*p/'/jW Y6tI8T畐a z ?-)NuEFm '>FZFЃ=toj<ˤԏjW:OFJ"U}4"h3b b#Мf`}Yy`iTե{3 w5ɵS:<[ (Ri#99 dP*N Xi}uS*+,
m
oLɍӖz yO| N5960R=333eO](Ip(0st̡uQ+PzJ]T LkJ&[@BT #
&f:f~z{&i턙I|&Ñyvm苖<0R &odsLTPO5n0E_CL-KTh1 WxC,* gFjrH{]T`[NN ب (;|;Sa x-(V1}Xޢ)`1i{9 z0 oX~o!Z< f>TyF>YNAVN ? L:pH(ĖH]Ή
'X0N1 ?^h3[Oq]^/a$8W覢i>613#zZl
5.5r CKi_7qN6N%`!-gL (rO(^LX{K.t;K+{ # N7YIHPrY`tNDS~sAi쥧yRmc5$CP+ c:Zj7xq4[8qN}Gn1̿B%t#i}BE=[\uIlm hKԵY_xE69O)*xF.6$xWu_yǝNHBd^Z[,&Yu303Q sM]!Q8U9HC!Ilz0"f@+-A/7| [F8&RUTe7̈́ *%Dzv`!VWs$Yz#R+X`ұH Pl"2nkJt~+;Z0,I@eVpN\d@cƒ=lKa:qeↄ!IY'=kyƅ{м0 a'M !l7ևbv{MptQl5&Ť{7= Mt7G(O w?
eM¼H IMoQD0&c -61P-N!c_XC-]7rmgPnj1wD8V!/3,U(ϗuv( L!&(N}d `0gj\^@h}M^ \#eqJcY,5!po>?QMk7@quZnZ@cs}Y/gA*V s(|؍B nZk*d,e2K|r` 'mWlw IsᣒzƇPxFݬdvJPzZ,X_ngb
YI;̥C>ӗ"{6# T*Zɚ H&/vNz \)coK8Vw_ƘSfؤL) /:YEbtw5GJNdB&`bMM$gY홚qv}~5N # שXhZ#m,/&䎐|YU5 LΤRu n{s{=.!X q@] ˗>e$0۲:joz99@ U_CS/ld_WyC &r^'R
@(ZW}uǼ#f8tZثi@*C8 X9k_Ҩ^9 dՀKK+&'N}2\Wd?Ir=Vw;
Bz?/NBsgӴZP1W1Ie k$zlk /m71r+ O A] ᥞEڎ '~Y.uM
g-Ŝv EVnmrwOO32$'Mlr!Ƚi@GgR֟)6q(~cн, tŨwJs#8+ pp: }xw;@M G@yҰCz 9.b-5ƸI:{IZqO$51dn)ࢡ6eNk2V&jG0{u'fp h=<
,]},rw
>ZItpRd%_( o|Up,TO9!(C_Wr拇,1Xϫ s즾07 %m1ePZt
s$pm`3QJZhJB Bۣ`IT&µ XIӛ儣"PI|vs`oףt\GOlTӐhSs@e1B"p9sʃ OPRs%pv]h Ç)>G9m
; uةpo5^rA,Oqo<*˧2=@ѱ9Ip.5?86~cQB
t[oY&'bj :V#?aLb .Ą- FgHw -? R4EUmԍ|XK6(WV[H;[
{2/ aRqA0psdy&`6Ⓚ" /t({}JV EJie-S
N?ݵC8;@ f%Fە O 'LlZ]n vϤ[>;Y?ںN2^ь{+ uyFծ2iY~oI}B:5삽ʗ+W|1Y>NjSjrb#k\q RuL kC$>{MM
сBc k+vp¬]u5a jk0z'.eH?'<'? U?ܩ}#֤7:v єqQCp1UO kmo'qDeu% /h& @f=0Զ#,0{ ϸѴ j8"0Ȥ%s(a
q0.&<
O, {K2luɡVR1 m$^Hl2K|uPCҁ8!%QAo
K?+xHvr+S4+4C,ty 4Fqog4펥 TƮN=˦{&r*]re'5v)PY(8CA>ay ^.eԒ TO!6CF7":!1l%6sTS:pͭ5`e6b.ԯwA,I &Jf< ĺo/a;v l;p Ђ>K a@FzK; >Ewgm}>U :F d@́Luv$,]Iq:hsZ%Tit=8=t
ߺ@ r0K1;kEX
ߨr.U
lZQl7Lrh{*DZ49Y~1" 7| R,꣖)
&P(Ex7<c /* n_r8H:_v /k>ȮLO:0&0)WoRѵ6$j 1^
|XL^ '}
dpyhVzAfp7E]xs_s6P0#N>.Q2l I\ ~l:EpBpxdIߕBĻ}܋)d {3 Z͈\@Mx'Ҍ e&|ah f* hY)+fܧ6® puNڰ Z?= u#'^<=T Azd|_h3 Ġ! v91x =NEq4/,C^]\(Xb}!0kk^
~7 %X{tH}ܽ9-W{Wk 7"밬= &Ec
16ŀ ލ+04 "]e)՞K%O<+b
]WѳGe^7\b9YI;nBS⋾S-74-ѓƋc݀L(PN7Wk8e$e$*rk
vÀ_ˋ)~Vo2[,hg/,Q5$\7N]%4˂%c> h#O'W [3nRDem}AG78- 1a/gk>|a̱Z0EkF9vIo E$-{7hQZg^YD2z9IXh~Q5Jh ȿDT5Jg z+ _l9QpͮٿU C
ŭBziah]-t֡1gȶv>ZK3ۍ6@|˽HH_`~.3'A45CGU
4eyv1ܴxԔ!ߜgI s1n1DTR,@^rSd&Bh8(Ntz ϣ i* u?@eȻЩ܊îm$I^i7:
YAo] odyIS5š/SdRa؆^ 1>-&TM IV>mPtIG~'*T"*csc~ L>:??=<#zKU="Q:Թ2:~
yW/MC5k ڸ`!0!B'J8 `P}Ro[hKБZ\r.ݼ~1?EIJ RP1^w xΆI㓯O-ZJ mCjPdꂉ8S̃Ɩ.S }MySU2Y01 r:|/J
okb*
Q^v{Fײj3bܛ,^dh"YPR*,H@{#ʑ\
XtQ5"rx
e-oo8 _63=:Ԙ
SbTә2m]
3vNl bI/j ;Hv͚O# qy@J)FHJ ^AxF8 YֆeҚTsԜ Z?B/6;*>] Ma [ݒR@a=MysݭSUa!}ȚH@96wcu0bL;nүG ͯ`A,esȐߟXmGg P!FdVjT}@VݬV~XZ%B)[C 9Iy%id/,-Dz
ioN!kZ h \Nc)'dL7a ZH~g.H)}q
ACvxR
وoTæ@TٔH8$f ,..]hA.J
doW#A'[?m;@ I.7)SBVhv]r"};䲋O 5JW Aw$Fmۨsa+k&II`ƌفs^ԙ`4D8g>j]&eϲݮ
K2|ĎUE_Tˢ6Ƶѐ:pM!, ŏ'bHtk RD#;xs 4 {4X?f ƛģHxiT[ &F/` kpK ;Lpa`bC:lg% ml 4fF\_yu+7=ʾ: 2_r>q`݁rDB7g [9
2&PDoP17g~DVBokVR-Ӿ ^4 $0ME"_g(czMSHnh zm =pc]#&7lOS|ǷV/A>kn=&DG IOljd|Z:oZ!C|O3Y.. %])"Q <ɘNi9d gDʵ-R(d1ca(N o I L*Xf|/ĭ藾H$`p#SU]*Ds%{_jVk&'R7{buIõ!|eyH 6+^ <= yHצK/$g1A]ڎockpSKeZ~@hSHbj|H%Ȟ
:O S!$FN:Ujs3RR - x!Nfc fLj%̟5 Db
l ~BhBeD]uZ-Z)Kk.vMn=e[=$/^~!1s:v4e-\~ vZ ^u( -hb,_mB&|V}O,A bȝjoӕ|+drW!7oު~"5leu3'1,Gڇ[G@.!`!+Ҫ?]?J\?3i%{n<(90XO8.\,]+u+ .3E45UK:B-4滝e7emY٦}~%})d
)S'RIo҂`_bhQ vu^17 UpUCLC(kAׯ٘] _y0Hc N[Vz,'& Al^z x>%lȪsÿa %Vҝ06 Uq|l ʃ&3*2t%
,gOPJa;JQ
(O q"5/4 sۜSG ^('qebBGѥ鍱p݉@ r y̴٤ݜ2~V{AQO*^T> ]kg˗s}Z2c&d ܠ"'0~
Vb.'..AWK$Gʎ. e_ozֽA#1Qա0Z_'=fbxD !H%z cO^Ts
+#hnp49 -cGēj p#.#z%ujKԏ^Tm!+(6HWJ0QqY)\=f}g'1 fE Ws/|PbLPCk웠zBeVMG~j
Ly~"%~E|%W=7K8BGqx[C+jTdz fʮNO^o:3J֎yn7W7k u"K?5|BuxGP#L?yǢgN *y"!5gHBP3\ $w$I oA.(uS8 ij$)d!Q6<_E2 x7Kf͵K17<6o7EZR į(TA2kF3huX8Eyz ]FK29@%U?,&2EGG=Y +ޛދw}\Lw$HRR3ڄޏ严FZ<1c(nXr;c 9
Lk\_%NLybǠVdP)?ؕ6dq< ۛ0:(5a۽cVYКw˫bG3hd˲N>(uz︎ތj)K]Q:jɪ[a5\#9twNpqz.{élYHhr3 ]+`)G^^ {stNNaJ\q'.YfOG_|M6e}"ۡz0 IJq y$k32.3 /fbSl_Ky{tMzYzKRͪ_:⬃b
h#[60X̂sWDjJȮtS%҄W?0|'PcD\⨀%䌙!51D AWnm=(V[ޚ+,5xF!'Mnz2$; EQ ~TN:<ݸ? '2 $@Kn
ħOb8=qO9: } ̫֡
YZ