strongswan-libs0-5.9.11-150400.19.17.2 < > , < eTϏp9|8 +j~튉\|0rS[ 9T 9. TH)u٥_t|FkvJ7"wBS]kt4-].Lyj2.wnODEXtldço)p}WVY {iɨʧg.ZlϏ࿗#gm@ܧ"^gc]
@a I7-9Benu~Ø m@i-Ni#
Pe0^5n > D x ? h d ) M 5 V r x $ L T L L
L L _ L
a L g L m L t t4 L yd e @ 5 5 5 ( & 8 0 ( 9 ( : F ( > ~ @ ~ F ~ G ~ L H L I , L X x e Y e \ L ] L ^ b c 5 d e f l u L v i w L L x | L y z " d C strongswan-libs0 5.9.11 150400.19.17.2 OpenSource IPsec-based VPN Solution StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
This package provides the strongswan library and plugins. eTϏh04-armsrv1
SUSE Linux Enterprise 15 SUSE LLC GPL-2.0+ https://www.suse.com/ Productivity/Networking/Security https://www.strongswan.org/ linux aarch64 /sbin/ldconfig
[ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] &&
/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/strongswan.conf || : L 2 N j p N u %
< Z o ! O a [ f g ) q ! X ( V !
PP 'H
h H 8 H h H P 0
H P X
( ` X
h h
@ 8 x p p 8 @ X ` P P &X
& 0
P @ p P X
0
@ @ h N j p N u %
< Z o ! O a [ f g ) L 2 q t1 )p AA큀AAAAAAA큤A큤AA큤A eTπeTπeTρeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTρeTψeTψeTφeTφeTφeTφeT{eTφeTyeTφeTyeTφeTweTφeTveTφeTteTφeTweTφeTweTφeTyeTyeTφeT{eT{eTφeTψeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTφeTyeTπeTρeTρeTρeTπeTπeTπeTρeTρeTπeTπeTρeTπeTπeTρeTρeTπeTρeTπeTπeTρeTπeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTπeTπeTπeTπeTρeTπeTπeTρeTπeTρeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTρeTπeTπeTρeTπeTπeTπeTρeTρeTρeTρeTπeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTρeTπeTρeTρeTρeTπeTρeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTπeTyeTyeTyeTπ0a043e77911c7e831b4f5e155c5265749fbffaeef9e2f91c6115955d27fb62fd 693d34ab5bce20b358ef4745b5bda89dd3ed24349629a419f8853fe8fc89aa04 523e90fe53bfba3fdf7abb31862df9dc01d12fbbf0d193d4a68a563626fdfe64 948b8944796c530b3efbcb169f6bd34a5f172b33d4e0a95be38c1a4df5c54018 4228279fcfe9eaad01ae1546a0a20760b43348f3f340cde9483f70521a03cdae 8bd9a074a1f69c99b9c99d1d67894f93033e0de1148b56378328611730ac535f eede7a2c856d211d7cdf6c640205ff7f624a6788c3341f7861703033fa6ea632 e2aacc6c685603d0f002e051195efda64369620359628609a4ea8d203a91464c 216ceafa2fbc641f66bf5d432e2d32e6b4cbd9898bf581f1bfa1952819bc19e2 de5b1352fca26393787fcb9a0f427890750da799994b8e3e2d7534771bb26fcb d19da97d486de5635fd94fced561ef14cd4b2dd086dab7b20078a2fca7848204 5341de935f4d6c7deb35015876731d7f6ac6dc04f9a94433b514d6aa7253f3ab e43f0388bdfdb6261e2a687a48544b2180102b4020ae29ca56c5ee48b07683f0 52ee0931362b04f207f04c559538031d5a98d7515e7c6ac5e67552959ab072ed 96462246ee685cb52bc978bdd21ae745aeca2194811773c511ae4f361c1f731f 9b9d5149d1bab38de57f66507b210fb69a007a2a41076301b3f512f04e6129a5 923b8da7566f85cde3225285737685ae2999c06085bc2b4f7fc754bb756d69d2 ed6bcf981ae90b5f250af77953fc02ab866af983cc50f16ee6c67251f693289f f38db10ce54bc19704f180279f04a2ed0ec4494ea2b1bd95af202818488c9952 a62c4cdcc8dce3449d3e8cc2a54ee76c1cf7f5d44d453c93fd3c171f40414e29 64d613715f092c3594daab03d8cb9d4a5364856bcc79cd62b2ef816b2b9f7227 c634b2522ec7087d0c95832e840a0f78eee04c928dd15fa68f5fa2772ae4938a a69be0eb15914bf444c45e9ecbca06ad2f797ae44610c21344ccc6d90a088dd0 f777ba568f2d812bbdaa7da4173a5bcae89feb7008806994efacaa8355590059 641678e50a0eeafac556447be3b77bb3d00910c0b6645b7ad24a4b586547be10 36aeeb72f7b1d230ec18b7041cb487627b930450a69eeb2c84a41473b2cfdf76 87cd3d6e80b5bcf906231975ede88eaedf037e29642d37b88eb0d2cc6cf4458c fa2fc6437eee93117d14a408c3ce9108d46b652cd9b716143589f5266b5a71a1 6a4d0be5f56ff1273390428f74be3457a8b93ffcf0eed562170bfb01b070b07b 2e140b248c24ccedacddc8a12fd4633985478ea42152473f57a414987848d5f4 c796af8a832453b4e6d5291896d145188f47a335596290a86d4989019d4876ae 508f2314f836a8aa53d51161084a9d08c94a7b6290048bb8858677ba0aa9b566 e0c628d3ce24f9c1f719e8f304508d029b60c0fbfbbb0106eb0db5a8c65006e6 eb73408e37717d432eb6e2f3448a67c24ff4ba64d81cb01bbabd48716760698b 1353eb2b3322211acdf5d226bd7385640ae8479407a50f92983c96f7a8a4e4e9 34c72fe23a96bbfc0c413044061b2a5720006036e1973cab610d98726329ba1c 630c4597a8badeb621bca71df6e34967ab1a60fa286a4d1b8798320f64f38999 7339109366f7cb2ed5568fdf6b1ed0de1dcae0d7717daf7b389a1c2f59b7d4fe 1f23c407bccbd5e0c9baeeb2cb4f96d7649e79f26e744d55d7ba38e3518f0ca4 6f8e2193b238fb4525a3afb4ce5df4692daf440f6b108b0957cc0ea2f7aaef23 ddd8e7029faba9f030c7af773c25dfa08f0e3918d04f22baf463ae1d42c1ece7 e9dc5a1c0cec658d9ff1f47751fe8f2c01629899387229b1fcd8b8db97a012e3 597672a984e5719653557a733b1ec48447dec59d59bcb987bac5e88e4373150d 93f1897abbb8f05cf872659dc936abbe7f5fb4b85263c026c8c842cc740aeec0 0a63b46bb2d9216e04660a8e3421a37d191f1c00063aa1a331fe16c933e5ade6 f07b1f650e3258957430207ed716ab0c603f0c32a22d5573126380bfbac15ca5 9efc489b7fd8d134b3080b4b1f7151672ad4f74364bc0f38ee6e947fc953c8d6 98bc1d9c730f26a79f40b767b90af1c6e70595ae23aab5836af58fd09d375d00 84eadd5ba62dc9ba36ea55920fbadae570bce8a27df5e9521391c0847982ae34 25e00777722d6996497705a62a2b370ed57172239d361cdd96ed85b3c2e12027 ad15325bd6b5547bb4290b5c79471073c09c5b466e0e1116ab562185b69b8198 0ccf88a6e7b36b42a5e66a73a787777cc85454516eb61e742c3b2f52ecd0c026 bb7cfa582f1ab5231bffdb5c26fd67a91c6f1f71252bae10faf256d5b61bfbba e7fc7da842f11baca0423cc837c8c38a22c76003b5ce0cf0b27aebbe00590c9f 9f8814ade7d1ab8e96a35fdeef5e5671e0bfe58952d491dd8727499d47b9308e 780289cffd41740ce2e93aacb757ad7a47916e9608a8b4dac75364f5f519e2fb 368d854c71772b5ff7944f2ba44d39078db6f359e76ce99e7e265614ea8e08bf 8db1fc0b946e9cdb755388fc7d9ba3bab6f1878a9da33e68ca673a55aac60306 cdc4e90ab0feb2f7d21e56a78ab7e25a71e7357c4696c904258d9ea3bce0f532 96033afafd1df6b7a669ab0893cedd0d02b2477416f76eca3afdee32160c9024 ccf44b258ccb50387e5857326f7d409e9cc577a2b189e92928b3637e8ca103e1 0d3d617f8dd04fb4187fcc734d14b65aff671384b35a966539703e8296c8cc34 dc55171623878868387f213ad56383dc2eb335ce2801fa47cc0139ef23c604e0 616baa1afd3ff24ab1e70524fbd092c558fad3d5a4728e08710ee31ec98abedb ddfdc7aaba0439ecdaa532b95031f55e7e7a096725af27e75406ceda5c6c77bb 1ce442d1b0a183932c1a63c9127ee1dea30719eee4388404c14f3d56f36c9003 733412ce60b190b028264c5039bfdfa8168ab23b804ec38dd546ae5e68d20049 882d48fe43de2bb9c75cf884f50c8c895e9b759896f86c896fe9bdf123e9ffb6 de71f8992f8826bc67ca67191c608ae2f5654af61ad948b25615d4542a9fe986 4be94f58f3b2e7f134f65da40aef2b4f6079688f7879eb51ef3f3b4a1b32d93c 61e7093777734e1ee6168bc934688215038a6c02bae294d13f77d30b96452668 8c9ae90f987facb99671a18ecf2cdb33ca527e15a3ad94918d26625222b283df 3ad355a9a8723ec1c623b5ae7147998bc0e6128ea28f596caac4c9a83addf81b 149f76469a823ce2d06b22076c2610373f4cfae17c8133abd11130acfe21823b 941bc9436b5164766d743c4d6f0a1d3ba04afc8547a6440f67499bb163d5c498 b6f14653a4075b7e9ad7aee29ba45e861e97fd2a98f73781508710f1d825e23e 501bdc99087873ad65cfd9e925341b4f9f47c1571d3d4249887453f17cf9b59d ca30b7266f5a8e5a2c5156581a52b9d4a807c70c91715bc00f67f941c6811c27 07a87854ee75ce8f49db54ea4190113389e521a9ecb569cf4ef053216ca18c29 5b32a9bf2fc3865dd7051498feb72bdd574b06fa174575976ffa1911d93f863e c18d3c2d9c12c73449ddc85fbec1dce621cd16909f87e5255dcafed6fd3ee9ed 87b7786cc1dcc6ac0c6220ed08b22fba112ca95df3fe3812d3dfe6eb0260bb4d d6df273ca748f565b0d325a55d1162f9b5519b4e465339e8e3a478359b8e5216 2c73e54dbd8423a836cc0bcad68f2f9e78f182fb6c6e1714b6438ac3b9cad881 12dc981b741112908d2f79eef929e77d792fd524c4e49ccac779fc7ea2c886ec 96b907cc9b633231893a96eff89e7732dfa2642752e277cf3fa3ca456b92ddc0 c42365dc5eb851f6a45c5f57e0515d0658fdc2c6f422f6f7d391f88b007d1e23 bc1642c442c92bc40f4e6f14aac930f0781e40849c5ca594abde8d3f6eea6b54 501700e1ca58851c122b3d5f47ca93a36ced5af12f4e423453007a262eb7a15c 2344020b7fd64d8e41942c1364642d8c4caa3a187e38c2d434d053e0d1f3d1a0 a301d7edc23130e7417d1a0831f0fece3683862d81d3c548865d5ebcfd6673a4 331c85ff786010e47c601d70e82bf2981daebdb71e8bfc89bd9f5aa2c7173530 c7b503000db4765c16ecf6019a9565ea3c4ad0c9d1a6bd7b45728354f9329296 210f488f7407a7888c925f2d8d77cdd68695ab8e96cdbf80ca9e6cf3c363ae1f df2683201de93e27680718e8c373200f837c8524bb1be8ec1c404067676301f9 a0279fbc221f2ef924b7e72ff75b20dced2df99cd2e1dccce5e17c995255196e 101bfbc548ef119a848bd6d1dac1c893ba935a9b4df14a09b6a11418509294f1 7e258e98e695c5f62d6ed61b9911c1a80f451c500a2ad34b6de60696b16bac38 c70f7227d05c18455e908d321268c34c0c1693dc31717037db273509f039caa6 52023aa3ee63810d6ca4567b3520ec95dd779f1fd354ffff5f2f15d88ee17f26 d5a96f5924d4568097860b483d23937cc83c7f869a36ea0d2dffd23920a0a8b6 a741efe5371f11d5289cf50499e97e2a4a058a10c87fc3ecd908ecc0b7f65573 081706f285544bc2fe9e64fc082efd9910e63b3f4935aa39b875eba0360cf344 cbf193608cc1ab4eb5d7678fbaf79a883bbc53780d78aec56a006d8bfcb4b435 62b149ea500f94733eb5f29e6fb40473fe7bb9e189ea1d30e6fbed07d4eaa0f5 033cc419ba2c611fe2f5c81da57228e0053e96b854d648051cd5f54232043a10 af408e914d60aa1bf8465bb5729e572d527f47bd1fea3b1c02b0b15b289c46fa 2ad79d7a3bf94316d2b65e40fe11f68c9721e3a68675cb5d1fab69c560871d61 413cdaab43342052d8b428b2483d657e52019cd3d3a3945b6d60b3bba2774bf7 8edfff26d474a354aa5fc6099e6439a1ebd446f35fa54a2e772ef4e7fd06e36f 5ed54809e2c5f2ac21138d23428144f1ea9c109ae0a009ed0cd7c072eb744b31 0fcdfd5c8c188393c769526b48f75574aaa0f6b328798acb1195ee7789b6a69a b8583d6c276f5735bbbe73e575995530f89d413501689a45e57cc0aa6e130578 8ec6d1cc85db40bfb058140b3531cae8721e4a403d4fe35909c1670e80227e11 fdcd84a1d50f099576410814dcf513761e3789031e0d11de54bd3498b569a4aa caa3cc2ff94aaa7987ccd1ebe77580b1173a3a8ce8348bc916ccfd6c1d64a854 3c796aa3c09c81d11647d6ce189bfdab99a3241617045c85487075c5d473bfa5 1a8ae9ed69edd9cc9b541a5c41287f84665e2121a6959e5a888721c60b2994d2 01b01b67dcc337fd220c78c4341cbf88c29420f50e6c1cb6e6165c7484924c47 f64d4ed7954b508422d3fedbcd32ecf3cda913c9317ec53c88187ea647eb56e5 24ada04bbc7ec3509981a82ab752a5ee690f4bb37c3a7ed9c4b0a55453851848 0cb2b291c08a7e6dfc165e3f3ef66b43d47754f1ca92a9b3039c770039d3696e 5cc2f90361c0446ce59d554deb82fb0040ca15a140fdf5a7fff040930c8304a0 b0d5aa4b8b562f810462cc6cd82641a9be83875d8625b46d4859ffad842d2ee3 5fd6a2533dbc8b00510c1996029824bae68f3e3591c599b0fb52ed7844737e2a 627366a97f3d39130eb4fe0d2522e97c92c1ec82d007e89c8745e768f37c4dbe 67148c14b199e246d8b6e3fe030900bbc1bf23f64b2070d31c5759ad918e7544 8a433940b8ba2af809daa14ebfdd0427b28ca1b0fdbc5c197746e5d944e7caab 6c71dd17a827071d957b9aed20fa7ea872ed3e277fe2a662c5a53d3649424e85 36095983f71b85f87f139f87069d7e5a30095b07ee2796e3610d6ba2d2eeec74 ccf382293aba48e28f946d49ac873127ba2816a73b18ed914cc04b408f8302a2 c35117d7ae592e4ef9701cf30d44bc629b20f3cc898266bd700a58e286599a4b 5147b2077d2a7978edac426694ea0e62c317528b53be69e8620ce6560d25167f dee90e6d9aeb0f7b217c02b608de8cb358739958b589de881714c769a54665b6 466319bdd3c5d2c0fef747fa2ee703f91bff925b9f8e40d2593ba2c7595da68f 4a4886cb52119c8d628a390788b8291371cd6140dfa50e4150cdaf63ae0d6cde ba731c5d662947c3024636c51fd4ac6f5e778f36b1cab156683b8b0007fb68c8 2e67bcd90f051a603c54794360343bd32618c8187ad44d2402984d850c6f093e 9c4c3bc6fc37053ec4ac632d774428d40e3eb2f737bf09e8083300db21166049 42d5291eb737907c281d43535d4943fa13e694ecbd2889688f6154cdeac0ca55 d2a45af00f3c0cc066d0decbc459362a6be7e9dcbe7f6376db6d874158a95c39 b365bf2d8bb3381be081d4ed3b56bca9b21beda0ab66e2ed53d2fc7973b55434 ac5465085506a8685614ecdf4769068b7d684eea075a6d396ea3cb8199378d0a 885581f8b7895037e4c9a86a53982f41fc42a1b23f99ad10f126d548ea7b0719 17bb3934bfd828f4ceaa2eab9f27e29478ff61f007a1996b63819fdfe2123476 e1c97556b0d65a4d02214c01ca1ad87ddeba6ae994f03cfda5ffc9aee807a0e2 c28c72dde8e572a61aa20326e4dd3523e6b3f2767b8820b7f53a2f96cf67f54f 0f36fab8aded358e463607e920caca5501248009c00720811404fea6b06b133a c3dc844d6c77509b79a976bc6e3dd10f2cd766d2d3c3bae7f094ba755da755fc db57b44f924ed37c7ca817e18b7a0396d65c39f6ffe4ad2ca3674baf7a5a8679 a271cf63e20a5f61008f604e797ca7d7c4428cac1cced031aefe819c0beaf5c5 3037035f2844cbb291fa57ccacf5734ce0201faacb5897e505118eec84bfe2e3 f0fc16e99f8fe2eaf77a651ff315e5f4bfebe6b7a8c8460504e3871d66c8c1ac dc3ee6b4801fdb4ae149169ab998d3831b91f0ba3ca628243b4e23bd8f8e9a6e 80bc1494dfd16484b74886a2a2246f001eb30cd525ab17e2d6b5c67ef5d1ca18 ef4e72bf2473b81935b2b4e3ca352d4664028099db6f0c4da4353c833d1d65c2 8ba36814509c7fd09f10215f06f1ff92ebbccf8f208a2f32371a85baa5bfd42b a165b11d7bad7608136b92b2b2f82c404f437c7c8617c2264b875595dc4f0842 6932f1394ca14086ee952074a3e88ac88fc2cfcaa26788c61e957925026ec118 34f4c168525f1722ce0e16854ae4fbd2640fea333b4b1527775dbc19cf44490c 8afdbf90362f92b386d90a4d912d05805c447c28cbd62897068208e4028d0561 1c1ed81978d87b9972f18435c3a09d48190640de29ad4698610c40b0afae7be6 5c57c4e345c654286a752ce31d2338b7dab0564c3e9aff945fc0b7456afe1e9c 742cddc1140d10501c77574e32f0d0b2d47112e774c8211aa2bd11c2e6cf5f17 aea4ea5f60d9ef0620e8258689882387e805f8b353772fe227e7556125322106 b69c31a88fcf77da2ffec688a4ecf192169471378a3aa8dcbbf99f368226148f dfc3cae0b88f363f6a2d032dc739631007e4cb803777d16f59bd602ea96acfa5 e40368690a7508e619cd0591979d3eefb820dbc20605a72ee0d743c3ccac939e b759e8d095500ec70599363b238bed4e14576aa94bbffd791f2e135679bdf06d 669529e283146b5506721a1835e3820fef611582d49a7cf86be615c0bb3fc4e6 5b57ca8d2afa5f5ef12a8202519298fc129e0bbdd3319f2e409cf0a5b12ab7b7 c599fa86fe6bc1872be816197e8682f08ea46da3b42ef4c2e133b30c9162c44f 2454bd5eefed1e85f7acfb6901b2d3c4eef905b77ac877fe9813aabc8a905aeb 498aa88cf98c04d990e16966b158e2040ac892fefddd8cb3525ef1a09ee952f6 ee7b9c9a3cd1de3793a20ba3a5442f3d2fddb3d39cf7de5ccb4c9524506853ec 624d3e067e6c1dbfc969c110cb5394b4b8fd9e4b42d5178100b99b3dd42b0952 d9b587f7961d3dee52e0d8599f2fafd87a35d20cfc98a1c4770653e18a2f611d 45b5f3cd4f68ae32db4fdf5dc39c51481e062a1dd25c4c99e4e8d1d0f46e41d4 1cab3bdf557b5e6dd24aa793c2f98062258c0701330a09bb1630002e6a1459ab 278d7fde76b4fabdd8b5f44088e024ec9fa4fe22c72f13d81e2c09f64a1372a1 f697aa63ad6f1b34a1d5536a5781359e334a05315e8fa1244c313fc7b0fb99f2 b810bea971f219250234cbc170e7fc205b7419059ef942a682a7076f0b1e1d24 1952d6f95c9862cc9f371f83022ab4888c3923d68da748f0602cfe176a6390bf 6f9dfc29a458b785ec3dd52a913284f1c9ed3ba702259bf4e57235ae402f3c35 8b8583c3f61984e5933d2d5c2e48bf95b6b5e1a1749b76b63e973c437379c596 03e04ce84b09ba2ce47382c814bedc3433db5a21a073a2754e3ab9fa25613046 c9d6ce76ec8f27214ee08179dc782e262b60a4af43d18f4c576888bdd9480344 8170a5cf5962bd4ed4268966a34ff114ccf1d669c023851a6207418bdf7cc2e0 56c36c5ed43f25d9a7603236afd9315a0e95e97196fba79dd4d1243b11b58d33 73e39267d5e2d1058593d1a8f7d12fefd0f5bdac147302f2b52c4a177673a394 297521027fca377019b0c30eed91d091b4f35697505e8e399b5627fa08f89748 b9aee4f7fc2e85375559bc326613c82c721ad22b364fec03729ebf8d25283f39 3e5d20143240ce399d3023334b5ccf4ca8e3da3330471c00a363232558df864d d2c9b7e38958cc8ddb0f30f8c3b3fde3175e5f76805f3f99f5fa19231d11da10 573fc1a6e59307a3d2904fb2798d715f4252f2aacc7784317c827081d59a8df2 199c3fcb0d3cb6d6cc52b3ab842c9d099b25a657355bc3a4ee7437660bdd3be0 446a744e301efe909f83429c2035d624c975de07e6e1abbb71ca48e7973ba17c 6b729d5a2f5f1c7b92bac95cfa4971a41c70c1f41293f653ef88bfa9193e1adc 09c09f7370ca914ab4e37ceba38d683822ce6c24fd48d4d4ac423e972c9e3c83 e7c45e586f2aef8e74bbce393ab0dc578fcf9ecac0cc3d7d55e4248b2f1c28e3 028b57c2dfca31918fafaae43800dec96deed693f5fb478e2666517c9a169a65 04dccc4b6477b08ebee843bdcd89a2abe7df350522015731b85e01d7c293e2d0 be65da8abb1a9e105b62afeafef634de872a6ec6f422fe09a3523bfe701d9cc8 f767586049a5098915ad561c7e8cdff0ea91acf46308b1519c5d2c45e43a4b6b 4228279fcfe9eaad01ae1546a0a20760b43348f3f340cde9483f70521a03cdae 8bd9a074a1f69c99b9c99d1d67894f93033e0de1148b56378328611730ac535f eede7a2c856d211d7cdf6c640205ff7f624a6788c3341f7861703033fa6ea632 e2aacc6c685603d0f002e051195efda64369620359628609a4ea8d203a91464c 216ceafa2fbc641f66bf5d432e2d32e6b4cbd9898bf581f1bfa1952819bc19e2 de5b1352fca26393787fcb9a0f427890750da799994b8e3e2d7534771bb26fcb d19da97d486de5635fd94fced561ef14cd4b2dd086dab7b20078a2fca7848204 5341de935f4d6c7deb35015876731d7f6ac6dc04f9a94433b514d6aa7253f3ab e43f0388bdfdb6261e2a687a48544b2180102b4020ae29ca56c5ee48b07683f0 52ee0931362b04f207f04c559538031d5a98d7515e7c6ac5e67552959ab072ed 96462246ee685cb52bc978bdd21ae745aeca2194811773c511ae4f361c1f731f 9b9d5149d1bab38de57f66507b210fb69a007a2a41076301b3f512f04e6129a5 923b8da7566f85cde3225285737685ae2999c06085bc2b4f7fc754bb756d69d2 ed6bcf981ae90b5f250af77953fc02ab866af983cc50f16ee6c67251f693289f f38db10ce54bc19704f180279f04a2ed0ec4494ea2b1bd95af202818488c9952 a62c4cdcc8dce3449d3e8cc2a54ee76c1cf7f5d44d453c93fd3c171f40414e29 64d613715f092c3594daab03d8cb9d4a5364856bcc79cd62b2ef816b2b9f7227 c634b2522ec7087d0c95832e840a0f78eee04c928dd15fa68f5fa2772ae4938a a69be0eb15914bf444c45e9ecbca06ad2f797ae44610c21344ccc6d90a088dd0 f777ba568f2d812bbdaa7da4173a5bcae89feb7008806994efacaa8355590059 641678e50a0eeafac556447be3b77bb3d00910c0b6645b7ad24a4b586547be10 36aeeb72f7b1d230ec18b7041cb487627b930450a69eeb2c84a41473b2cfdf76 87cd3d6e80b5bcf906231975ede88eaedf037e29642d37b88eb0d2cc6cf4458c fa2fc6437eee93117d14a408c3ce9108d46b652cd9b716143589f5266b5a71a1 6a4d0be5f56ff1273390428f74be3457a8b93ffcf0eed562170bfb01b070b07b 2e140b248c24ccedacddc8a12fd4633985478ea42152473f57a414987848d5f4 c796af8a832453b4e6d5291896d145188f47a335596290a86d4989019d4876ae 508f2314f836a8aa53d51161084a9d08c94a7b6290048bb8858677ba0aa9b566 e0c628d3ce24f9c1f719e8f304508d029b60c0fbfbbb0106eb0db5a8c65006e6 eb73408e37717d432eb6e2f3448a67c24ff4ba64d81cb01bbabd48716760698b 1353eb2b3322211acdf5d226bd7385640ae8479407a50f92983c96f7a8a4e4e9 34c72fe23a96bbfc0c413044061b2a5720006036e1973cab610d98726329ba1c 630c4597a8badeb621bca71df6e34967ab1a60fa286a4d1b8798320f64f38999 7339109366f7cb2ed5568fdf6b1ed0de1dcae0d7717daf7b389a1c2f59b7d4fe 1f23c407bccbd5e0c9baeeb2cb4f96d7649e79f26e744d55d7ba38e3518f0ca4 6f8e2193b238fb4525a3afb4ce5df4692daf440f6b108b0957cc0ea2f7aaef23 ddd8e7029faba9f030c7af773c25dfa08f0e3918d04f22baf463ae1d42c1ece7 e9dc5a1c0cec658d9ff1f47751fe8f2c01629899387229b1fcd8b8db97a012e3 597672a984e5719653557a733b1ec48447dec59d59bcb987bac5e88e4373150d 93f1897abbb8f05cf872659dc936abbe7f5fb4b85263c026c8c842cc740aeec0 0a63b46bb2d9216e04660a8e3421a37d191f1c00063aa1a331fe16c933e5ade6 f07b1f650e3258957430207ed716ab0c603f0c32a22d5573126380bfbac15ca5 9efc489b7fd8d134b3080b4b1f7151672ad4f74364bc0f38ee6e947fc953c8d6 98bc1d9c730f26a79f40b767b90af1c6e70595ae23aab5836af58fd09d375d00 84eadd5ba62dc9ba36ea55920fbadae570bce8a27df5e9521391c0847982ae34 25e00777722d6996497705a62a2b370ed57172239d361cdd96ed85b3c2e12027 ad15325bd6b5547bb4290b5c79471073c09c5b466e0e1116ab562185b69b8198 0ccf88a6e7b36b42a5e66a73a787777cc85454516eb61e742c3b2f52ecd0c026 bb7cfa582f1ab5231bffdb5c26fd67a91c6f1f71252bae10faf256d5b61bfbba e7fc7da842f11baca0423cc837c8c38a22c76003b5ce0cf0b27aebbe00590c9f 9f8814ade7d1ab8e96a35fdeef5e5671e0bfe58952d491dd8727499d47b9308e 780289cffd41740ce2e93aacb757ad7a47916e9608a8b4dac75364f5f519e2fb 368d854c71772b5ff7944f2ba44d39078db6f359e76ce99e7e265614ea8e08bf 8db1fc0b946e9cdb755388fc7d9ba3bab6f1878a9da33e68ca673a55aac60306 cdc4e90ab0feb2f7d21e56a78ab7e25a71e7357c4696c904258d9ea3bce0f532 96033afafd1df6b7a669ab0893cedd0d02b2477416f76eca3afdee32160c9024 ccf44b258ccb50387e5857326f7d409e9cc577a2b189e92928b3637e8ca103e1 0d3d617f8dd04fb4187fcc734d14b65aff671384b35a966539703e8296c8cc34 dc55171623878868387f213ad56383dc2eb335ce2801fa47cc0139ef23c604e0 616baa1afd3ff24ab1e70524fbd092c558fad3d5a4728e08710ee31ec98abedb ddfdc7aaba0439ecdaa532b95031f55e7e7a096725af27e75406ceda5c6c77bb 1ce442d1b0a183932c1a63c9127ee1dea30719eee4388404c14f3d56f36c9003 733412ce60b190b028264c5039bfdfa8168ab23b804ec38dd546ae5e68d20049 882d48fe43de2bb9c75cf884f50c8c895e9b759896f86c896fe9bdf123e9ffb6 de71f8992f8826bc67ca67191c608ae2f5654af61ad948b25615d4542a9fe986 4be94f58f3b2e7f134f65da40aef2b4f6079688f7879eb51ef3f3b4a1b32d93c 61e7093777734e1ee6168bc934688215038a6c02bae294d13f77d30b96452668 8c9ae90f987facb99671a18ecf2cdb33ca527e15a3ad94918d26625222b283df 3ad355a9a8723ec1c623b5ae7147998bc0e6128ea28f596caac4c9a83addf81b 149f76469a823ce2d06b22076c2610373f4cfae17c8133abd11130acfe21823b 941bc9436b5164766d743c4d6f0a1d3ba04afc8547a6440f67499bb163d5c498 b6f14653a4075b7e9ad7aee29ba45e861e97fd2a98f73781508710f1d825e23e 501bdc99087873ad65cfd9e925341b4f9f47c1571d3d4249887453f17cf9b59d ca30b7266f5a8e5a2c5156581a52b9d4a807c70c91715bc00f67f941c6811c27 07a87854ee75ce8f49db54ea4190113389e521a9ecb569cf4ef053216ca18c29 5b32a9bf2fc3865dd7051498feb72bdd574b06fa174575976ffa1911d93f863e c18d3c2d9c12c73449ddc85fbec1dce621cd16909f87e5255dcafed6fd3ee9ed 87b7786cc1dcc6ac0c6220ed08b22fba112ca95df3fe3812d3dfe6eb0260bb4d d6df273ca748f565b0d325a55d1162f9b5519b4e465339e8e3a478359b8e5216 2c73e54dbd8423a836cc0bcad68f2f9e78f182fb6c6e1714b6438ac3b9cad881 12dc981b741112908d2f79eef929e77d792fd524c4e49ccac779fc7ea2c886ec 96b907cc9b633231893a96eff89e7732dfa2642752e277cf3fa3ca456b92ddc0 c42365dc5eb851f6a45c5f57e0515d0658fdc2c6f422f6f7d391f88b007d1e23 bc1642c442c92bc40f4e6f14aac930f0781e40849c5ca594abde8d3f6eea6b54 501700e1ca58851c122b3d5f47ca93a36ced5af12f4e423453007a262eb7a15c 2344020b7fd64d8e41942c1364642d8c4caa3a187e38c2d434d053e0d1f3d1a0 a301d7edc23130e7417d1a0831f0fece3683862d81d3c548865d5ebcfd6673a4 331c85ff786010e47c601d70e82bf2981daebdb71e8bfc89bd9f5aa2c7173530 c7b503000db4765c16ecf6019a9565ea3c4ad0c9d1a6bd7b45728354f9329296 210f488f7407a7888c925f2d8d77cdd68695ab8e96cdbf80ca9e6cf3c363ae1f df2683201de93e27680718e8c373200f837c8524bb1be8ec1c404067676301f9 0a043e77911c7e831b4f5e155c5265749fbffaeef9e2f91c6115955d27fb62fd 693d34ab5bce20b358ef4745b5bda89dd3ed24349629a419f8853fe8fc89aa04 523e90fe53bfba3fdf7abb31862df9dc01d12fbbf0d193d4a68a563626fdfe64 948b8944796c530b3efbcb169f6bd34a5f172b33d4e0a95be38c1a4df5c54018 a0279fbc221f2ef924b7e72ff75b20dced2df99cd2e1dccce5e17c995255196e 101bfbc548ef119a848bd6d1dac1c893ba935a9b4df14a09b6a11418509294f1 7e258e98e695c5f62d6ed61b9911c1a80f451c500a2ad34b6de60696b16bac38 c70f7227d05c18455e908d321268c34c0c1693dc31717037db273509f039caa6 52023aa3ee63810d6ca4567b3520ec95dd779f1fd354ffff5f2f15d88ee17f26 d5a96f5924d4568097860b483d23937cc83c7f869a36ea0d2dffd23920a0a8b6 052945e3c4460efdd18159bfcc6ac2d1863ed4ebdb3efa11686db7e230e26c78 c77fda566c42635f1f183eb38d3ffe33c93ac54b09661581f767cbac19a5ead7 libcharon.so.0.0.0 libimcv.so.0.0.0 libpttls.so.0.0.0 libradius.so.0.0.0 libsimaka.so.0.0.0 libstrongswan.so.0.0.0 libtls.so.0.0.0 libtnccs.so.0.0.0 libtpmtss.so.0.0.0 libtpmtss.so.0.0.0 libvici.so.0.0.0 libvici.so.0.0.0 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root strongswan-5.9.11-150400.19.17.2.src.rpm config(strongswan-libs0) libcharon.so.0()(64bit) libimcv.so.0()(64bit) libpttls.so.0()(64bit) libradius.so.0()(64bit) libsimaka.so.0()(64bit) libstrongswan-addrblock.so()(64bit) libstrongswan-aes.so()(64bit) libstrongswan-af-alg.so()(64bit) libstrongswan-agent.so()(64bit) libstrongswan-attr-sql.so()(64bit) libstrongswan-attr.so()(64bit) libstrongswan-blowfish.so()(64bit) libstrongswan-ccm.so()(64bit) libstrongswan-certexpire.so()(64bit) libstrongswan-cmac.so()(64bit) libstrongswan-constraints.so()(64bit) libstrongswan-counters.so()(64bit) libstrongswan-coupling.so()(64bit) libstrongswan-ctr.so()(64bit) libstrongswan-curl.so()(64bit) libstrongswan-curve25519.so()(64bit) libstrongswan-des.so()(64bit) libstrongswan-dhcp.so()(64bit) libstrongswan-dnskey.so()(64bit) libstrongswan-duplicheck.so()(64bit) libstrongswan-eap-aka-3gpp2.so()(64bit) libstrongswan-eap-aka.so()(64bit) libstrongswan-eap-dynamic.so()(64bit) libstrongswan-eap-gtc.so()(64bit) libstrongswan-eap-identity.so()(64bit) libstrongswan-eap-md5.so()(64bit) libstrongswan-eap-mschapv2.so()(64bit) libstrongswan-eap-peap.so()(64bit) libstrongswan-eap-radius.so()(64bit) libstrongswan-eap-sim-file.so()(64bit) libstrongswan-eap-sim-pcsc.so()(64bit) libstrongswan-eap-sim.so()(64bit) libstrongswan-eap-simaka-pseudonym.so()(64bit) libstrongswan-eap-simaka-reauth.so()(64bit) libstrongswan-eap-simaka-sql.so()(64bit) libstrongswan-eap-tls.so()(64bit) libstrongswan-eap-tnc.so()(64bit) libstrongswan-eap-ttls.so()(64bit) libstrongswan-farp.so()(64bit) libstrongswan-fips-prf.so()(64bit) libstrongswan-gcm.so()(64bit) libstrongswan-gcrypt.so()(64bit) libstrongswan-gmp.so()(64bit) libstrongswan-ha.so()(64bit) libstrongswan-hmac.so()(64bit) libstrongswan-kdf.so()(64bit) libstrongswan-kernel-netlink.so()(64bit) libstrongswan-ldap.so()(64bit) libstrongswan-led.so()(64bit) libstrongswan-md4.so()(64bit) libstrongswan-md5.so()(64bit) libstrongswan-mgf1.so()(64bit) libstrongswan-nonce.so()(64bit) libstrongswan-openssl.so()(64bit) libstrongswan-pem.so()(64bit) libstrongswan-pgp.so()(64bit) libstrongswan-pkcs1.so()(64bit) libstrongswan-pkcs11.so()(64bit) libstrongswan-pkcs12.so()(64bit) libstrongswan-pkcs7.so()(64bit) libstrongswan-pkcs8.so()(64bit) libstrongswan-pubkey.so()(64bit) libstrongswan-radattr.so()(64bit) libstrongswan-random.so()(64bit) libstrongswan-rc2.so()(64bit) libstrongswan-resolve.so()(64bit) libstrongswan-revocation.so()(64bit) libstrongswan-sha1.so()(64bit) libstrongswan-sha2.so()(64bit) libstrongswan-smp.so()(64bit) libstrongswan-socket-default.so()(64bit) libstrongswan-soup.so()(64bit) libstrongswan-sql.so()(64bit) libstrongswan-sshkey.so()(64bit) libstrongswan-tnc-imc.so()(64bit) libstrongswan-tnc-imv.so()(64bit) libstrongswan-tnc-pdp.so()(64bit) libstrongswan-tnc-tnccs.so()(64bit) libstrongswan-tnccs-11.so()(64bit) libstrongswan-tnccs-20.so()(64bit) libstrongswan-tnccs-dynamic.so()(64bit) libstrongswan-unity.so()(64bit) libstrongswan-vici.so()(64bit) libstrongswan-x509.so()(64bit) libstrongswan-xauth-eap.so()(64bit) libstrongswan-xauth-generic.so()(64bit) libstrongswan-xauth-pam.so()(64bit) libstrongswan-xcbc.so()(64bit) libstrongswan.so.0()(64bit) libtls.so.0()(64bit) libtnccs.so.0()(64bit) libtpmtss.so.0()(64bit) libvici.so.0()(64bit) strongswan-libs0 strongswan-libs0(aarch-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /sbin/ldconfig config(strongswan-libs0) ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.22)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.27)(64bit) libc.so.6(GLIBC_2.30)(64bit) libcap.so.2()(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1)(64bit) libcurl.so.4()(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.17)(64bit) libgcrypt.so.20()(64bit) libgcrypt.so.20(GCRYPT_1.6)(64bit) libglib-2.0.so.0()(64bit) libgmp.so.10()(64bit) libgobject-2.0.so.0()(64bit) libgpg-error.so.0()(64bit) libgpg-error.so.0(GPG_ERROR_1.0)(64bit) libimcv.so.0()(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.29)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpcsclite.so.1()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libpttls.so.0()(64bit) libradius.so.0()(64bit) libsimaka.so.0()(64bit) libsoup-2.4.so.1()(64bit) libstrongswan.so.0()(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_227)(64bit) libtls.so.0()(64bit) libtnccs.so.0()(64bit) libtpmtss.so.0()(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 5.9.11-150400.19.17.2 3.0.4-1 4.6.0-1 4.0-1 5.2-1 strongswan 5.9.11 4.14.3 eSa@d!dRLdK@cwc@c@b@b<]@aaexa`+``j`a@`a@``^|@^0"@]A]@]@]@ZYYYY$$@WzOVEUp=UlI@T|Tp@T@Tto@To)@Tmmohd.saquib@suse.com mohd.saquib@suse.com mohd.saquib@suse.com mohd.saquib@suse.com mohd.saquib@suse.com mohd.saquib@suse.com meissner@suse.com hare@suse.de meissner@suse.com meissner@suse.com abergmann@suse.com hare@suse.de mt@suse.com mt@suse.com mbuil@suse.com mbuil@suse.com mbuil@suse.com mbuil@suse.com mbuil@suse.com mmnelemane@suse.com mmnelemane@suse.com mmnelemane@suse.com mmnelemane@suse.com mmnelemane@suse.com mmnelemane@suse.com mmnelemane@suse.com ndas@suse.de ndas@suse.de ndas@suse.de ndas@suse.de doug@uq.edu.au mt@suse.de mt@suse.de mt@suse.de mt@suse.de mt@suse.de mt@suse.de mt@suse.de mt@suse.de mt@suse.de - (CVE-2023-41913) Fixed a bug in charon-tkm related to handling DH
public values that can lead to remote code execution (bsc#1216901)
[+ strongswan-5.9.7-5.9.11_charon_tkm_dh_len.patch] - Updated to version 5.9.11 (jsc#PED-4589)
- Removed Marvell auth-els patch (bsc#1211715)
[- strongswan-marvell-auth-els.patch]
- Fixed strongswan fails IPSEC IKEv2 test related to the USGv6
certification (bsc#1211711)
- Dropped following patches due to irrelevance in the updated
version:
[- strongswan-CVE-2022-40617.patch]
[- strongswan-4.4.1-5.9.3_cert-cache-random.patch]
[- strongswan-5.5.0-5.9.4_eap_success-CVE-2021-45079.patch]
[- strongswan-5.6.1-5.9.3_gmp-rsa-ssa-salt-len.patch]
[- 0001-Modularize-the-IKEv2-key-derivation-so-it-can-be-pro.patch]
[- 0004-Remove-deprecated-syslog-from-systemd-unit.patch]
[- 0006-Resolve-multiple-definition-of-swanctl_dir.patch]
[- 0007-Fix-typo-in-README.patch]
[- 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch]
[- 0009-strongswan-openssl-aead-add-ccm-support.patch]
[- 0051-libcharon-fixed-strongswan-crash-in-packet-sender.patch]
[- 0052-kernel-netlink-dont-wait-for-vips-to-disappear-during-de-init.patch]
[- 0053-vici-signal-waiting-threads-when-removing-a-connection-entry.patch]
[- 0054-vici-signal-waiting-threads-when-skipping-disconnected-connections.patch]
[- 0055-vici-dont-lock-connection-in-write-mode-when-enabling-on_write-callback.patch]
- Renamed following patch:
[- 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch]
[+ 0001-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch]
- Version 5.9.11 changelog:
===================================
* https://github.com/strongswan/strongswan/releases/tag/5.9.11 - Allow to use stroke aka ipsec interface by default instead of
vici aka swanctl interface which is current upstream's default.
strongswan.service which enables swanctl interface is masked to
stop interfering with the ipsec interface (bsc#1184144)
- Removes deprecated SysV support - Fix crash when swanctl command gets stuck intermittently (bsc#1207489)
[+ 0052-kernel-netlink-dont-wait-for-vips-to-disappear-during-de-init.patch]
[+ 0053-vici-signal-waiting-threads-when-removing-a-connection-entry.patch]
[+ 0054-vici-signal-waiting-threads-when-skipping-disconnected-connections.patch]
[+ 0055-vici-dont-lock-connection-in-write-mode-when-enabling-on_write-callback.patch]
- Modified README file to reflect rcipsec usage - Remove deprecated option "StandardOutput=syslog" from strongswan
systemd unit file (bsc#1185153)
[+ 0004-Remove-deprecated-syslog-from-systemd-unit.patch] - Fix crash in packet sender in libcharon library caused by
marvell-auth-els patch (bsc#1199205)
[+ 0051-libcharon-fixed-strongswan-crash-in-packet-sender.patch] - strongswan-CVE-2022-40617.patch: Fixed that using untrusted URIs for
revocation checking could lead to denial of service (CVE-2022-40617
bsc#1203556) - Enable Marvell plugin (jsc#SLE-20151) - 0001-Modularize-the-IKEv2-key-derivation-so-it-can-be-pro.patch:
Outsource the IKE key deriviation to openssl for FIPS certification.
(bsc#1195919) - strongswan-5.5.0-5.9.4_eap_success-CVE-2021-45079.patch:
Fixed authentication bypass in EAP authentication (CVE-2021-45079
bsc#1194471) - Fix integer overflow in gmp plugin (bsc#1191367, CVE-2021-41990)
[* strongswan-5.6.1-5.9.3_gmp-rsa-ssa-salt-len.patch]
- Fix integer overflow when replacing certificates in cache (bsc#1191435, CVE-2021-41991)
[* strongswan-4.4.1-5.9.3_cert-cache-random.patch] - Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)
[* strongswan-marvell-auth-els.patch] - Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
[* 0009-strongswan-openssl-aead-add-ccm-support.patch] - Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
[+ 0009-strongswan-openssl-aead-add-ccm-support.patch] - Add config to run ipsec on namespaces (bsc #1183670) - Information added in README about the rcstrongswan-starter - Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl - Fix FIPS bug (bsc #1180801)
[+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ] - Fix typo in README (bsc #1167880)
[+ 0007-Fix-typo-in-README.patch ] - Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
[+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch] - Updated to version 5.8.2 (jsc#SLE-11370)
- Dropped following patches due to irrelevance in the updated version:
[- strongswan_modprobe_syslog.patch ]
[- strongswan_fipsfilter.patch ]
[- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
[- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
[- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
[- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
[- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
- Version 5.8.2
===============
* Identity-based CA constraints, which enforce that the certificate chain of the remote
peer contains a CA certificate with a specific identity, are supported via
vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
that the CA certificate is locally installed, for instance, intermediate CA certificates
received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
also be used for the latter but requires trust in the intermediate CAs to only issue
certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
with OU=Research). With the new constraint that's not necessary as long as a path length
basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
intermediate CAs.
* Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
* Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
* Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
* The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
setting (#3192).
* Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
* The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
IPsec (#3225).
* The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
* For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
now includes more information about the CHILD_SAs such as traffic statistics (#3198).
* Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
* Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
* Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
to other plugins work properly (#3284).
* Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
* Routing table IDs > 255 are supported for custom routes on Linux.
* To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
performed during initialization of the plugin (a605452c03).
* The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
$(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
and with the same message ID as the request.
* IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
in authenticated messages.
* For developers working from the repository the configure script now aborts if GNU gperf is
not found.
- Version 5.8.1
===============
* RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
strongswan.conf option charon.rdn_matching takes two alternative values that cause the
matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
(relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
like wildcard matches).
* The updown plugin now passes the same interface to the script that is also used for the
automatically installed routes, that is, the interface over which the peer is reached
instead of the interface on which the local address is found (#3095).
* TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
the same private key concurrently (4b25885025).
* Do a rekey check after the third QM message was received (#3060).
* If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
* An .editorconfig file has been added, mainly so Github shows files with proper indentation
(68346b6962).
* The internal certificate of the load-tester plugin has been modified so it can again be
used as end-entity cert with 5.6.3 and later (#3139).
* The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
- Version 5.8.0
===============
* The systemd service units have been renamed. The modern unit, which was called
strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
called strongswan-starter.
* Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
to replace VTI devices (they are similar but offer several advantages, for instance, they
are not bound to an address or address family).
* IPsec SAs and policies are associated with such interfaces via interface IDs that can be
configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
direction). It's possible to use separate interfaces for in- and outbound traffic (or
only use an interface in one direction and regular policies in the other).
* Interfaces may be created dynamically via updown/vici scripts, or statically before or after
establishing the SAs. Routes must be added manually as needed (the daemon will not install
any routes for outbound policies with an interface ID).
* When moving XFRM interfaces to other network namespaces they retain access to the SAs and
policies installed in the original namespace, which allows providing IPsec tunnels for
processes in other network namespaces without giving them access to the IPsec keys or
IKE credentials.
More information can be found on the page about route-based VPNs.
* Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
IKE_SA's key material.
* The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
option if --child is omitted and the peer supports this extension.
* The NetworkManager backend and plugin support IPv6.
* The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
Parkinson of wolfSSL Inc. for the initial patch.
* IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
mask/label in network order.
* The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
* The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
in the "Decided" state and a CRETRY batch can immediately carry all messages usually
transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
full-duplex mode for PT-TLS transport is not supported.
* Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
* The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
them open, which otherwise might prevent the agent from getting terminated.
* To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
or received from the configured interface.
* UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
encoding to calculate the NT hash (#3014).
* Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
priorities are used, which was broken since 5.6.2 (8e31d65730).
* Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
* Fixed the automatic termination of reloaded vici connections with start_action=start,
which was broken since 5.6.3 (71b22c250f).
* The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
(6ec9f68f32).
* Fixed a race condition in the trap manager between installation and removal of a policy
(69cbe2ca3f).
* Compilation of the kernel-netlink plugin has been fixed on old kernels (< 2.6.39), which
was caused by the HW offload changes (c7f579fa17).
* The IPsec stack detection and module loading in starter has been removed (it wasn't
enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
ba817d2917).
* Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
TRANSPORT_MODE notify received from the responder is checked against the local configuration.
* The keys and certificates used by the scenarios in the testing environment are now generated
dynamically. Running the testing/scripts/build-certs script after creating the base and root
images uses the pki utility installed in the latter to create the keys and certificates for
all the CAs and in some cases for individual scenarios. These credentials are stored in the
source tree, not the image, so this has to be called only once even if the images are later
rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
very large ones used by the ikev2/rw-eap-tls-fragments scenario.
- Version 5.7.2
===============
* For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
(as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
if the TPM doesn't use the maximum salt length.
* Directories for credentials loaded by swanctl are now accessed relative to the loaded
swanctl.conf file, in particular, when loading it from a custom location via --file argument.
* The base directory, which is used if no custom location for swanctl.conf is specified, is now
also configurable at runtime via SWANCTL_DIR environment variable.
* If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
* All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
the client did not claim them, allowing to release them early in case of connection errors (#2856).
* Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
IP address changes (e.g. via MOBIKE) and it was part of the selectors.
* No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
* The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
to another and properly update associated routes (#2820).
* Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
last received message (previously, retransmits also triggered an update).
* IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
another reset of the IKE_SA previously (#2837).
* Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
while creating lots of CHILD_SAs.
* Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
install policies themselves, 872b9b3e8d).
* Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
disabled via charon.signature_authentication.
* The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
* The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
signatures when built against OpenSSL 1.1.1.
* Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
* The mysql plugin now properly handles database connections with transactions
under heavy load (#2779).
* IP addresses in ha pools are now distributed evenly among all segments (#2828).
* Private key implementations may optionally provide a list of supported signature schemes,
which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
hash algorithm and for RSA also the padding scheme is predefined.
* The testing environment is now based on Debian 9 (stretch) by default. This required
some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
* Most test scenarios were migrated to swanctl.
- Version 5.7.1
===============
* Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
very small moduli. When verifying signatures with such keys, the code patched with the fix
for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
that results in a crash of the daemon.
* The vulnerability has been registered as CVE-2018-17540.
- Version 5.7.0
===============
* Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
* CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
8 bytes of padding) have no separate CVE assigned.
* Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
This mainly affects the configuration of file loggers. If the path for such a log file
contains dots it now has to be configured in the new path setting within the arbitrarily
renamed subsection in the filelog section.
* Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
and subsections from such a section are inherited. This allows to simplify configs as
redundant information has only to be specified once and may then be included in other
sections (see strongswan.conf for an example).
* The originally selected IKE config (based on the IPs and IKE version) can now change
if no matching algorithm proposal is found. This way the order of the configs doesn't
matter that much anymore and it's easily possible to specify separate configs for
clients that require weaker algorithms (instead of having to also add them in other
configs that might be selected).
* Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
* The new botan plugin is a wrapper around the Botan C++ crypto library.
It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
Thanks to René Korthaus and his team from Rohde & Schwarz Cybersecurity for the initial
patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
* Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
* SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
plugins replace the previous imv/imc-swid plugins, which were removed.
* Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
on Google's OSS-Fuzz infrastructure.
* Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
in-kernel /dev/tpmrm0 resource manager is automatically detected.
* The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
syntax --san xmppaddr:.
* swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
to packets after processing on Linux. Configuring such a mark for outbound SAs requires
at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
inbound SAs will be added with the upcoming 4.19 kernel.
* New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
IP headers are copied during IPsec processing. Controlling this is currently only possible
on Linux.
* The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
* To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
configured.
- Version 5.6.3
===============
* Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
mode and HMAC-MD5 is negotiated as PRF.
This vulnerability has been registered as CVE-2018-10811.
* Fixed a vulnerability in the stroke plugin, which did not check the received length before
reading a message from the socket. Unless a group is configured, root privileges are
required to access that socket, so in the default configuration this shouldn't be an issue.
This vulnerability has been registered as CVE-2018-5388.
* CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
certificates are removed from new CRLs and the clock on the host doing the revocation
check is trailing behind that of the host issuing CRLs. Not doing this could result in
accepting a revoked and expired certificate, if it's still valid according to the
trailing clock but not contained anymore in not yet valid CRLs.
* The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
* CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
be fetched) are now stored also for intermediate CA certificates and not only for end-entity
certificates, so a strict CRL policy can be enforced in such cases.
* In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
digitalSignature or nonRepudiation bits set.
* New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
useful in situations where it's known the other end is not reachable anymore, or that it
already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
be pointless.
* Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
would be) before destroying the IKE_SA is also possible by additionally specifying a
timeout in the forced termination request.
* When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
the same destination and replaces the installed route instead of just removing it. Same
during installation, where existing routes previously weren't replaced. This should allow
using traps with virtual IPs on Linux (#2162).
* The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
unreachables (becf027cd9).
* The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
* Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
changes properly).
* ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
older releases the chacha20poly1305compat keyword may be included in proposals to also propose
the algorithm with a key length (c58434aeff).
* Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
setting (auto), which automatically uses it if the kernel and device both support it. If hw
offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
* The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
when sending packets from the gateway itself (e811659323).
* SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
* The pki --verify tool may load CA certificates and CRLs from directories.
* The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
remote maps the response to a different port, as might happen on Azure), as long as the local
port is 500 (85bfab621d).
* Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
* Logged traffic selectors now always contain the protocol if either protocol or port are set
(a36d8097ed).
* Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
CHILD_SAs that are kept around.
* The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
having to put the value in quotes (e.g. for Base64 encoded shared secrets).
Notes for developers:
* trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
* No reqid is returned anymore when installing trap policies.
* child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
delayed packets).
This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
has such CHILD_SAs assigned is deleted.
- Version 5.6.2
===============
* Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
by insufficient input validation. One of the configurable parameters in algorithm identifier
structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
currently specified for this purpose. However, this in turn takes itself a parameter that
specifies the underlying hash function. strongSwan's parser did not correctly handle the
case of this parameter being absent, causing an undefined data read.
This vulnerability has been registered as CVE-2018-6459.
* When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
using the first configured group, which avoids an additional exchange if the peer previously
selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
IKE_SA, where no DH group was negotiated yet.
Also, the selected DH group is moved to the front in all sent proposals that contain it
and all proposals that don't are moved to the back in order to convey the preference for
this group to the peer.
* Handling of MOBIKE task queuing has been improved. In particular, the response to an
address update (with NAT-D payloads) is not ignored anymore if only an address list update
or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
* On Linux, roam events may optionally be triggered by changes to the routing rules, which
can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
to another interface (i.e. from one to another routing table). Since routing rules are
currently not evaluated when doing route lookups this is only useful if the kernel-based
route lookup is used (4664992f7d).
* The fallback drop policies installed to avoid traffic leaks when replacing addresses in
installed policies are now replaced by temporary drop policies, which also prevent
acquires because we currently delete and reinstall IPsec SAs to update their addresses
(35ef1b032d).
* Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
NV index.
Adding the --keyid parameter to pki --print allows to print private keys or certificates
stored in a smartcard or a TPM 2.0.
* Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
configured_proposals is disabled (d058fd3c32).
* The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
for details).
* MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
EAP-MSCHAPv2 and PRFs that have a block size < 64 bytes (e.g. AES-XCBC-PRF-128, see
73cbce6013).
* The tpm_extendpcr command line tool extends a digest into a TPM PCR.
* Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
* The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
with Wireshark.
- Version 5.6.1
===============
* Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
were removed (the latter is significant for Windows clients in their default configuration).
These algorithms may still be used in custom proposals.
* Support for RSASSA-PSS signatures has been added. For compatibility with previous
releases they are currently not used automatically, by default, to change that charon.rsa_pss
may be enabled. To explicitly use or require such signatures during IKEv2 signature
authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
connections (regardless of whether the strongswan.conf option above is enabled). Only the
hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
and the salt length will equal the hash length (when verifying the salt length is not
enforced).
To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
* All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
be based on that and the salt length will equal the hash length.
* These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
The gmp plugin requires the mgf1 plugin.
Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
certificates or private keys in PKCS#8 files) are currently not used as constraints.
* The sec-updater tool checks for security updates in dpkg-based repositories
(e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
Additionally for each new package version a SWID tag for the given OS and HW architecture
is created and stored in the database.
* Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
cron job).
* When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
to other reasons like too many retransmits) a new initiator SPI is allocated. This
prevents issues caused by retransmits for IKE_SA_INIT messages.
* Because the initiator SPI was previously reused when restarting the connection delayed
responses for previous connection attempts were processed and might have caused fatal
errors due to a failed DH negotiation or because of the internal retry counter in the
ike-init task. For instance, if we proposed a DH group the responder rejected we
might have later received delayed responses that either contained INVALID_KE_PAYLOAD
notifies with the DH group we already switched to, or, if we retransmitted an
IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
a group different from the one we proposed.
* The introduction of file versions in the IMV database scheme broke file reference hash
measurements. This has been fixed by creating generic product versions having an empty
package name.
* A new timeout option for the systime-fix plugin stops periodic system time checks after
a while and enforces a certificate verification, closing or reauthenticating all SAs
with invalid certificates.
* The IKE event counters, previously only available via ipsec listcounters command, may
now also be queried and reset via vici and the new swanctl --counters command. They
are collected and provided by the optional counters plugin (enabled by default for
backwards compatibility if the stroke plugin is built).
* Class attributes received in RADIUS Access-Accept messages may optionally be added to
RADIUS accounting messages (655924074b).
* Basic support for systemd sockets has been added, which may be used for privilege separation
(59db98fb94).
* Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
enabling the mark_in_sa option in swanctl.conf.
* The timeout of leases in pools configured via pool utility may be configured in other
units than hours.
INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
* Outbound FWD policies for shunts are not installed anymore, by default (as is the case
for other policies since 5.5.1).
* Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
(e7276f78aa).
* Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
* Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
* A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
* No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
* A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
(039b85dd43).
* Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
* Instead of failing or just silently doing nothing unit tests may now warn about certain
conditions (e.g. if a test was not executed due to external dependencies). - Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
[+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch] - Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
- denial-of-service vulnerability
[+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch] - Added patch to fix vulnerability: CVE-2018-5388 (bsc#1094462)
- Buffer Underflow in stroke_socket.c
[+ 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch] - Added patch to fix vulnerability: CVE-2018-16151,CVE-2018-16152 (bsc#1107874)
- Insufficient input validation in gmp plugin
[+ 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch] - Removed unused requires and macro calls(bsc#1083261) - Updated to strongSwan 5.6.0 providing the following changes:
* Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.
This vulnerability has been registered as CVE-2017-11185. (bsc#1051222)
* New SWIMA IMC/IMV pair implements the draft-ietf-sacm-nea-swima-patnc Internet
Draft and has been demonstrated at the IETF 99 Prague Hackathon.
* The IMV database template has been adapted to achieve full compliance with the
ISO 19770-2:2015 SWID tag standard.
* The pt-tls-client can attach and use TPM 2.0 protected private keys via the --keyid parameter.
* By default the /etc/swanctl/conf.d directory is created and *.conf files in it are included in the default
swanctl.conf file.
* The curl plugin now follows HTTP redirects (configurable via strongswan.conf).
* The CHILD_SA rekeying was fixed in charon-tkm and the behavior is refined a bit more since 5.5.3
* libtpmtss supports Intel's TSS2 Architecture Broker and Resource Manager interface (tcti-tabrmd).
* more on https://wiki.strongswan.org/versions/66 - fix "uintptr_t’ undeclared" compilation error.
[+0006-fix-compilation-error-by-adding-stdint.h.patch] - Updated to strongSwan 5.3.5(bsc#1050691) providing the following changes:
* Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input
validation when verifying RSA signatures. More specifically, mpz_powm_sec() has two
requirements regarding the passed exponent and modulus that the plugin did not
enforce, if these are not met the calculation will result in a floating point exception
that crashes the whole process.
This vulnerability has been registered as CVE-2017-9022.
Please refer to our blog for details.
* Fixed a DoS vulnerability in the x509 plugin that was caused because the ASN.1 parser
didn't handle ASN.1 CHOICE types properly, which could result in an infinite loop when
parsing X.509 extensions that use such types.
This vulnerability has been registered as CVE-2017-9023.
Please refer to our blog for details.
* The behavior during IKEv2 CHILD_SA rekeying has been changed in order to avoid
traffic loss. When responding to a CREATE_CHILD_SA request to rekey a CHILD_SA
the responder already has everything available to install and use the new CHILD_SA.
However, this could lead to lost traffic as the initiator won't be able to process
inbound packets until it processed the CREATE_CHILD_SA response and updated the
inbound SA. To avoid this the responder now only installs the new inbound SA and
delays installing the outbound SA until it receives the DELETE for the replaced CHILD_SA.
* The messages transporting these DELETEs could reach the peer before packets sent
with the deleted outbound SAs reach it. To reduce the chance of traffic loss due
to this the inbound SA of the replaced CHILD_SA is not removed for a configurable
amount of seconds (charon.delete_rekeyed_delay) after the DELETE has been processed.
* The code base has been ported to Apple's ARM64 iOS platform, which required several
changes regarding the use of variadic functions. This was necessary because the calling
conventions for variadic and regular functions are different there.
This means that assigning a non-variadic function to a variadic function pointer, as we
did with our enumerator_t::enumerate() implementations and several callbacks, will
result in crashes as the called function accesses the arguments differently than the
caller provided them. To avoid this issue the enumerator_t interface has been changed
and the signature of the callback functions for enumerator_create_filter() and two
methods on linked_list_t have been changed. Refer to the developer notes below
for details.
* Adds support for fuzzing the certificate parser provided by the default plugins
(x509, pem, gmp etc.) on Google's OSS-Fuzz infrastructure (or generally with
libFuzzer). Several issues found while fuzzing these plugins were fixed.
* Two new options have been added to charon's retransmission settings:
retransmit_limit and retransmit_jitter. The former adds an upper limit to the
calculated retransmission timeout, the latter randomly reduces it.
Refer to Retransmission for details.
* A bug in swanctl's --load-creds command was fixed that caused unencrypted
private keys to get unloaded if the command was called multiple times.
The load-key VICI command now returns the key ID of the loaded key on success.
* The credential manager now enumerates local credential sets before global ones.
This means certificates supplied by the peer will now be preferred over certificates
with the same identity that may be locally stored (e.g. in the certificate cache).
* Adds support for hardware offload of IPsec SAs as introduced by Linux 4.11 for
specific hardware that supports this.
* The pki tool loads the curve25519 plugin by default.
[- 0006-Make-sure-the-modulus-is-odd-and-the-exponent-not-zero.patch,
- 0007-asn1-parser-Fix-CHOICE-parsing.patch]
- libhydra is removed as all kernel plugins moved to libcharon - Applied patch for "Don't retransmit Aggressive Mode response"
bsc#985012.
- Applied upstream patch for "Insufficient Input Validation in gmp Plugin"
bsc#1039514(CVE-2017-9022).
- Applied upstream patch for "Incorrect x509 ASN.1 parser error handling"
bsc#1039515(CVE-2017-9023).
[+0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch,
+0006-Make-sure-the-modulus-is-odd-and-the-exponent-not-zero.patch,
+0007-asn1-parser-Fix-CHOICE-parsing.patch] - Updated to strongSwan 5.3.5 providing the following changes:
Changes in version 5.3.5:
* Properly handle potential EINTR errors in sigwaitinfo(2) calls
that replaced sigwait(3) calls with 5.3.4.
* RADIUS retransmission timeouts are now configurable, courtesy
of Thom Troy.
Changes in version 5.3.4:
* Fixed an authentication bypass vulnerability in the
eap-mschapv2 plugin that was caused by insufficient
verification of the internal state when handling MSCHAPv2
Success messages received by the client. This vulnerability
has been registered as CVE-2015-8023.
* The sha3 plugin implements the SHA3 Keccak-F1600 hash
algorithm family. Within the strongSwan framework SHA3 is
currently used for BLISS signatures only because the OIDs for
other signature algorithms haven't been defined yet. Also the
use of SHA3 for IKEv2 has not been standardized yet.
Changes in version 5.3.3:
* Added support for the ChaCha20/Poly1305 AEAD cipher specified
in RFC 7539 and RFC 7634 using the chacha20poly1305 ike/esp
proposal keyword. The new chapoly plugin implements the
cipher, if possible SSE-accelerated on x86/x64 architectures.
It is usable both in IKEv2 and the strongSwan libipsec ESP
backend. On Linux 4.2 or newer the kernel-netlink plugin can
configure the cipher for ESP SAs.
* The vici interface now supports the configuration of auxiliary
certification authority information as CRL and OCSP URIs.
* In the bliss plugin the c_indices derivation using a SHA-512
based random oracle has been fixed, generalized and
standardized by employing the MGF1 mask generation function
with SHA-512. As a consequence BLISS signatures unsing the
improved oracle are not compatible with the earlier
implementation.
* Support for auto=route with right=%any for transport mode
connections has been added (the ikev2/trap-any scenario
provides examples).
* The starter daemon does not flush IPsec policies and SAs
anymore when it is stopped. Already existing duplicate
policies are now overwritten by the IKE daemon when it
installs its policies.
* Init limits (like charon.init_limit_half_open) can now
optionally be enforced when initiating SAs via VICI. For this,
IKE_SAs initiated by the daemon are now also counted as half
open SAs, which, as a side-effect, fixes the status output
while connecting (e.g. in ipsec status).
* Symmetric configuration of EAP methods in left|rightauth is
now possible when mutual EAP-only authentication is used
(previously, the client had to configure rightauth=eap or
rightauth=any, which prevented it from using this same config
as responder).
* The initiator flag in the IKEv2 header is compared again
(wasn't the case since 5.0.0) and packets that have the flag
set incorrectly are again ignored.
* Implemented a demo Hardcopy Device IMC/IMV pair based on the
"Hardcopy Device Health Assessment Trusted Network Connect
Binding" (HCD-TNC) document drafted by the IEEE Printer
Working Group (PWG).
* Fixed IF-M segmentation which failed in the presence of
multiple small attributes in front of a huge attribute to be
segmented.
Changes in version 5.3.2:
* Fixed a vulnerability that allowed rogue servers with a valid
certificate accepted by the client to trick it into disclosing
its username and even password (if the client accepts
EAP-GTC). This was caused because constraints against the
responder's authentication were enforced too late. This
vulnerability has been registered as CVE-2015-4171.
Changes in version 5.3.1:
* Fixed a denial-of-service and potential remote code execution
vulnerability triggered by IKEv1/IKEv2 messages that contain
payloads for the respective other IKE version. Such payload
are treated specially since 5.2.2 but because they were still
identified by their original payload type they were used as
such in some places causing invalid function pointer
dereferences. The vulnerability has been registered as
CVE-2015-3991.
* The new aesni plugin provides CBC, CTR, XCBC, CMAC, CCM and
GCM crypto primitives for AES-128/192/256. The plugin requires
AES-NI and PCLMULQDQ instructions and works on both x86 and
x64 architectures. It provides superior crypto performance in
userland without any external libraries.
Changes in version 5.3.0:
* Added support for IKEv2 make-before-break reauthentication. By
using a global CHILD_SA reqid allocation mechanism, charon
supports overlapping CHILD_SAs. This allows the use of
make-before-break instead of the previously supported
break-before-make reauthentication, avoiding connectivity gaps
during that procedure. As the new mechanism may fail with peers
not supporting it (such as any previous strongSwan release) it
must be explicitly enabled using the charon.make_before_break
strongswan.conf option.
* Support for "Signature Authentication in IKEv2" (RFC 7427) has
been added. This allows the use of stronger hash algorithms
for public key authentication. By default, signature schemes
are chosen based on the strength of the signature key, but
specific hash algorithms may be configured in leftauth.
* Key types and hash algorithms specified in rightauth are now
also checked against IKEv2 signature schemes. If such
constraints are used for certificate chain validation in
existing configurations, in particular with peers that don't
support RFC 7427, it may be necessary to disable this feature
with the charon.signature_authentication_constraints setting,
because the signature scheme used in classic IKEv2 public key
authentication may not be strong enough.
* The new connmark plugin allows a host to bind conntrack flows
to a specific CHILD_SA by applying and restoring the SA mark
to conntrack entries. This allows a peer to handle multiple
transport mode connections coming over the same NAT device for
client-initiated flows. A common use case is to protect
L2TP/IPsec, as supported by some systems.
* The forecast plugin can forward broadcast and multicast
messages between connected clients and a LAN. For CHILD_SA
using unique marks, it sets up the required Netfilter rules
and uses a multicast/broadcast listener that forwards such
messages to all connected clients. This plugin is designed for
Windows 7 IKEv2 clients, which announces its services over the
tunnel if the negotiated IPsec policy allows it.
* For the vici plugin a Python Egg has been added to allow
Python applications to control or monitor the IKE daemon using
the VICI interface, similar to the existing ruby gem. The
Python library has been contributed by Björn Schuberg.
* EAP server methods now can fulfill public key constraints,
such as rightcert or rightca. Additionally, public key and
signature constraints can be specified for EAP methods in the
rightauth keyword. Currently the EAP-TLS and EAP-TTLS methods
provide verification details to constraints checking.
* Upgrade of the BLISS post-quantum signature algorithm to the
improved BLISS-B variant. Can be used in conjunction with the
SHA256, SHA384 and SHA512 hash algorithms with SHA512 being
the default.
* The IF-IMV 1.4 interface now makes the IP address of the TNC
access requestor as seen by the TNC server available to all
IMVs. This information can be forwarded to policy enforcement
points (e.g. firewalls or routers).
* The new mutual tnccs-20 plugin parameter activates mutual TNC
measurements in PB-TNC half-duplex mode between two endpoints
over either a PT-EAP or PT-TLS transport medium.
- Adjusted file lists and removed obsolete patches
[- 0005-strongswan-5.2.2-5.3.0_unknown_payload.patch,
- 0006-strongswan-5.1.0-5.3.1_enforce_remote_auth.patch,
- 0007-strongswan-4.4.0-5.3.3_eap_mschapv2_state.patch] - Applied upstream fix for a authentication bypass vulnerability
in the eap-mschapv2 plugin (CVE-2015-8023,bsc#953817).
[+ 0007-strongswan-4.4.0-5.3.3_eap_mschapv2_state.patch] - Applied upstream fix for a rogue servers vulnerability, that may
enable rogue servers able to authenticate itself with certificate
issued by any CA the client trusts, to gain user credentials from
a client in certain IKEv2 setups (bsc#933591,CVE-2015-4171).
[+ 0006-strongswan-5.1.0-5.3.1_enforce_remote_auth.patch]
- Fix to apply unknown_payload patch if fips is disabled (<= 13.1)
and renamed it to use number prefix corresponding with patch nr.
[- strongswan-5.2.2-5.3.0_unknown_payload.patch,
+ 0005-strongswan-5.2.2-5.3.0_unknown_payload.patch] - Applied upstream fix for a DoS and potential remote code execution
vulnerability through payload type (bsc#931272,CVE-2015-3991)
[+ strongswan-5.2.2-5.3.0_unknown_payload.patch] - Updated to strongSwan 5.2.2 providing the following changes:
Changes in version 5.2.2:
* Fixed a denial-of-service vulnerability triggered by an IKEv2 Key Exchange
payload that contains the Diffie-Hellman group 1025. This identifier was
used internally for DH groups with custom generator and prime. Because
these arguments are missing when creating DH objects based on the KE
payload an invalid pointer dereference occurred. This allowed an attacker
to crash the IKE daemon with a single IKE_SA_INIT message containing such
a KE payload. The vulnerability has been registered as CVE-2014-9221.
* The left/rightid options in ipsec.conf, or any other identity in
strongSwan, now accept prefixes to enforce an explicit type, such as
email: or fqdn:. Note that no conversion is done for the remaining string,
refer to ipsec.conf(5) for details.
* The post-quantum Bimodal Lattice Signature Scheme (BLISS) can be used as
an IKEv2 public key authentication method. The pki tool offers full
support for the generation of BLISS key pairs and certificates.
* Fixed mapping of integrity algorithms negotiated for AH via IKEv1.
This could cause interoperability issues when connecting to older versions
of charon.
Changes in version 5.2.1:
* The new charon-systemd IKE daemon implements an IKE daemon tailored for
use with systemd. It avoids the dependency on ipsec starter and uses
swanctl as configuration backend, building a simple and lightweight
solution. It supports native systemd journal logging.
* Support for IKEv2 fragmentation as per RFC 7383 has been added. Like IKEv1
fragmentation it can be enabled by setting fragmentation=yes in ipsec.conf.
* Support of the TCG TNC IF-M Attribute Segmentation specification proposal.
All attributes can be segmented. Additionally TCG/SWID Tag, TCG/SWID Tag ID
and IETF/Installed Packages attributes can be processed incrementally on a
per segment basis.
* The new ext-auth plugin calls an external script to implement custom IKE_SA
authorization logic, courtesy of Vyronas Tsingaras.
* For the vici plugin a ruby gem has been added to allow ruby applications to
control or monitor the IKE daemon. The vici documentation has been updated
to include a description of the available operations and some simple
examples using both the libvici C interface and the ruby gem.
Changes in version 5.2.0:
* strongSwan has been ported to the Windows platform. Using a MinGW toolchain,
many parts of the strongSwan codebase run natively on Windows 7 / 2008 R2
and newer releases. charon-svc implements a Windows IKE service based on
libcharon, the kernel-iph and kernel-wfp plugins act as networking and IPsec
backend on the Windows platform. socket-win provides a native IKE socket
implementation, while winhttp fetches CRL and OCSP information using the
WinHTTP API.
* The new vici plugin provides a Versatile IKE Configuration Interface for
charon. Using the stable IPC interface, external applications can configure,
control and monitor the IKE daemon. Instead of scripting the ipsec tool
and generating ipsec.conf, third party applications can use the new interface
for more control and better reliability.
* Built upon the libvici client library, swanctl implements the first user of
the VICI interface. Together with a swanctl.conf configuration file,
connections can be defined, loaded and managed. swanctl provides a portable,
complete IKE configuration and control interface for the command line.
The first six swanctl example scenarios have been added.
* The SWID IMV implements a JSON-based REST API which allows the exchange
of SWID tags and Software IDs with the strongTNC policy manager.
* The SWID IMC can extract all installed packages from the dpkg (Debian,
Ubuntu, Linux Mint etc.), rpm (Fedora, RedHat, OpenSUSE, etc.), or
pacman (Arch Linux, Manjaro, etc.) package managers, respectively, using
the swidGenerator (https://github.com/strongswan/swidGenerator) which
generates SWID tags according to the new ISO/IEC 19770-2:2014 standard.
* All IMVs now share the access requestor ID, device ID and product info
of an access requestor via a common imv_session object.
* The Attestation IMC/IMV pair supports the IMA-NG measurement format
introduced with the Linux 3.13 kernel.
* The aikgen tool generates an Attestation Identity Key bound to a TPM.
* Implemented the PT-EAP transport protocol (RFC 7171) for Trusted Network
Connect.
* The ipsec.conf replay_window option defines connection specific IPsec
replay windows. Original patch courtesy of Zheng Zhong and Christophe
Gouault from 6Wind.
- Adjusted file lists and removed obsolete patches
[- 0005-restore-registration-algorithm-order.bug897512.patch,
- 0006-strongswan-5.1.2-5.2.1_modp_custom.CVE-2014-9221.patch]
- Adopted/Merged fipscheck patches
[* strongswan_fipscheck.patch, strongswan_fipsfilter.patch] - Disallow brainpool elliptic curve groups in fips mode (bnc#856322).
[* strongswan_fipsfilter.patch] - Applied an upstream fix for a denial-of-service vulnerability,
which can be triggered by an IKEv2 Key Exchange payload, that
contains the Diffie-Hellman group 1025 (bsc#910491,CVE-2014-9221).
[+ 0006-strongswan-5.1.2-5.2.1_modp_custom.CVE-2014-9221.patch]
- Adjusted whilelist of approved algorithms in fips mode (bsc#856322).
[* strongswan_fipsfilter.patch]
- Renamed patch file to match it's patch number:
[- 0001-restore-registration-algorithm-order.bug897512.patch,
+ 0005-restore-registration-algorithm-order.bug897512.patch] - Updated strongswan-hmac package description (bsc#856322). - Disabled explicit gpg validation; osc source_validator does it.
- Guarded fipscheck and hmac package in the spec file for >13.1. - Added generation of fips hmac hash files using fipshmac utility
and a _fipscheck script to verify binaries/libraries/plugings
shipped in the strongswan-hmac package.
With enabled fips in the kernel, the ipsec script will call it
before any action or in a enforced/manual "ipsec _fipscheck" call.
Added config file to load openssl and kernel af-alg plugins, but
not all the other modules which provide further/alternative algs.
Applied a filter disallowing non-approved algorithms in fips mode.
(fate#316931,bnc#856322).
[+ strongswan_fipscheck.patch, strongswan_fipsfilter.patch]
- Fixed file list in the optional (disabled) strongswan-test package.
- Fixed build of the strongswan built-in integrity checksum library
and enabled building it only on architectures tested to work.
- Fix to use bug number 897048 instead 856322 in last changes entry.
- Applied an upstream patch reverting to store algorithms in the
registration order again as ordering them by identifier caused
weaker algorithms to be proposed first by default (bsc#897512).
[+0001-restore-registration-algorithm-order.bug897512.patch] /bin/sh /sbin/ldconfig h04-armsrv1 1700056975
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L 5.9.11-150400.19.17.2 5.9.11-150400.19.17.2 5.9.11-150400.19.17.2
strongswan.conf strongswan.d charon charon-logging.conf charon-systemd.conf charon.conf addrblock.conf aes.conf af-alg.conf agent.conf attr-sql.conf attr.conf blowfish.conf ccm.conf certexpire.conf cmac.conf constraints.conf counters.conf coupling.conf ctr.conf curl.conf curve25519.conf des.conf dhcp.conf dnskey.conf drbg.conf duplicheck.conf eap-aka-3gpp2.conf eap-aka.conf eap-dynamic.conf eap-gtc.conf eap-identity.conf eap-md5.conf eap-mschapv2.conf eap-peap.conf eap-radius.conf eap-sim-file.conf eap-sim-pcsc.conf eap-sim.conf eap-simaka-pseudonym.conf eap-simaka-reauth.conf eap-simaka-sql.conf eap-tls.conf eap-tnc.conf eap-ttls.conf farp.conf fips-prf.conf gcm.conf gcrypt.conf gmp.conf ha.conf hmac.conf kdf.conf kernel-netlink.conf ldap.conf led.conf md4.conf md5.conf mgf1.conf nonce.conf openssl.conf pem.conf pgp.conf pkcs1.conf pkcs11.conf pkcs12.conf pkcs7.conf pkcs8.conf pubkey.conf radattr.conf random.conf rc2.conf resolve.conf revocation.conf sha1.conf sha2.conf smp.conf socket-default.conf soup.conf sql.conf sshkey.conf stroke.conf tnc-imc.conf tnc-imv.conf tnc-pdp.conf tnc-tnccs.conf tnccs-11.conf tnccs-20.conf tnccs-dynamic.conf unity.conf updown.conf vici.conf x509.conf xauth-eap.conf xauth-generic.conf xauth-pam.conf xcbc.conf imcv.conf pki.conf pool.conf starter.conf swanctl.conf tnc.conf strongswan.conf ipsec imcvs imc-scanner.so imc-test.so imv-scanner.so imv-test.so libcharon.so.0 libcharon.so.0.0.0 libimcv.so.0 libimcv.so.0.0.0 libpttls.so.0 libpttls.so.0.0.0 libradius.so.0 libradius.so.0.0.0 libsimaka.so.0 libsimaka.so.0.0.0 libstrongswan.so.0 libstrongswan.so.0.0.0 libtls.so.0 libtls.so.0.0.0 libtnccs.so.0 libtnccs.so.0.0.0 libtpmtss.so libtpmtss.so.0 libtpmtss.so.0.0.0 libvici.so libvici.so.0 libvici.so.0.0.0 plugins libstrongswan-addrblock.so libstrongswan-aes.so libstrongswan-af-alg.so libstrongswan-agent.so libstrongswan-attr-sql.so libstrongswan-attr.so libstrongswan-blowfish.so libstrongswan-ccm.so libstrongswan-certexpire.so libstrongswan-cmac.so libstrongswan-constraints.so libstrongswan-counters.so libstrongswan-coupling.so libstrongswan-ctr.so libstrongswan-curl.so libstrongswan-curve25519.so libstrongswan-des.so libstrongswan-dhcp.so libstrongswan-dnskey.so libstrongswan-duplicheck.so libstrongswan-eap-aka-3gpp2.so libstrongswan-eap-aka.so libstrongswan-eap-dynamic.so libstrongswan-eap-gtc.so libstrongswan-eap-identity.so libstrongswan-eap-md5.so libstrongswan-eap-mschapv2.so libstrongswan-eap-peap.so libstrongswan-eap-radius.so libstrongswan-eap-sim-file.so libstrongswan-eap-sim-pcsc.so libstrongswan-eap-sim.so libstrongswan-eap-simaka-pseudonym.so libstrongswan-eap-simaka-reauth.so libstrongswan-eap-simaka-sql.so libstrongswan-eap-tls.so libstrongswan-eap-tnc.so libstrongswan-eap-ttls.so libstrongswan-farp.so libstrongswan-fips-prf.so libstrongswan-gcm.so libstrongswan-gcrypt.so libstrongswan-gmp.so libstrongswan-ha.so libstrongswan-hmac.so libstrongswan-kdf.so libstrongswan-kernel-netlink.so libstrongswan-ldap.so libstrongswan-led.so libstrongswan-md4.so libstrongswan-md5.so libstrongswan-mgf1.so libstrongswan-nonce.so libstrongswan-openssl.so libstrongswan-pem.so libstrongswan-pgp.so libstrongswan-pkcs1.so libstrongswan-pkcs11.so libstrongswan-pkcs12.so libstrongswan-pkcs7.so libstrongswan-pkcs8.so libstrongswan-pubkey.so libstrongswan-radattr.so libstrongswan-random.so libstrongswan-rc2.so libstrongswan-resolve.so libstrongswan-revocation.so libstrongswan-sha1.so libstrongswan-sha2.so libstrongswan-smp.so libstrongswan-socket-default.so libstrongswan-soup.so libstrongswan-sql.so libstrongswan-sshkey.so libstrongswan-tnc-imc.so libstrongswan-tnc-imv.so libstrongswan-tnc-pdp.so libstrongswan-tnc-tnccs.so libstrongswan-tnccs-11.so libstrongswan-tnccs-20.so libstrongswan-tnccs-dynamic.so libstrongswan-unity.so libstrongswan-vici.so libstrongswan-x509.so libstrongswan-xauth-eap.so libstrongswan-xauth-generic.so libstrongswan-xauth-pam.so libstrongswan-xcbc.so strongswan templates config plugins addrblock.conf aes.conf af-alg.conf agent.conf attr-sql.conf attr.conf blowfish.conf ccm.conf certexpire.conf cmac.conf constraints.conf counters.conf coupling.conf ctr.conf curl.conf curve25519.conf des.conf dhcp.conf dnskey.conf drbg.conf duplicheck.conf eap-aka-3gpp2.conf eap-aka.conf eap-dynamic.conf eap-gtc.conf eap-identity.conf eap-md5.conf eap-mschapv2.conf eap-peap.conf eap-radius.conf eap-sim-file.conf eap-sim-pcsc.conf eap-sim.conf eap-simaka-pseudonym.conf eap-simaka-reauth.conf eap-simaka-sql.conf eap-tls.conf eap-tnc.conf eap-ttls.conf farp.conf fips-prf.conf gcm.conf gcrypt.conf gmp.conf ha.conf hmac.conf kdf.conf kernel-netlink.conf ldap.conf led.conf md4.conf md5.conf mgf1.conf nonce.conf openssl.conf pem.conf pgp.conf pkcs1.conf pkcs11.conf pkcs12.conf pkcs7.conf pkcs8.conf pubkey.conf radattr.conf random.conf rc2.conf resolve.conf revocation.conf sha1.conf sha2.conf smp.conf socket-default.conf soup.conf sql.conf sshkey.conf stroke.conf tnc-imc.conf tnc-imv.conf tnc-pdp.conf tnc-tnccs.conf tnccs-11.conf tnccs-20.conf tnccs-dynamic.conf unity.conf updown.conf vici.conf x509.conf xauth-eap.conf xauth-generic.conf xauth-pam.conf xcbc.conf strongswan.conf strongswan.d charon-logging.conf charon-systemd.conf charon.conf imcv.conf pki.conf pool.conf starter.conf swanctl.conf tnc.conf database imv data.sql tables.sql sql /etc/ /etc/strongswan.d/ /etc/strongswan.d/charon/ /usr/lib/tmpfiles.d/ /usr/lib64/ /usr/lib64/ipsec/ /usr/lib64/ipsec/imcvs/ /usr/lib64/ipsec/plugins/ /usr/share/ /usr/share/strongswan/ /usr/share/strongswan/templates/ /usr/share/strongswan/templates/config/ /usr/share/strongswan/templates/config/plugins/ /usr/share/strongswan/templates/config/strongswan.d/ /usr/share/strongswan/templates/database/ /usr/share/strongswan/templates/database/imv/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31463/SUSE_SLE-15-SP4_Update/aedb6c12511f29bfd453d3aaef1b06a1-strongswan.SUSE_SLE-15-SP4_Update drpm xz 5 aarch64-suse-linux
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h ASCII text directory ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb0a8772cd8c969128c3f4d5174930e422b76362, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5ee3c4c32d542ffc5268c7e8be73ac891004210, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5b35dcc96b8454b917811418979ba84657afdb90, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ddc62f61e18777ff6b1f2f422d59bfbd11b99da, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e52ef9dd66fd1387a493158f6a5029374bf8e50e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c33424f7508e41e5679f8de44c6c1c45ee58caf7, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2473e16f85686f7d5b61d0f47a738c7fa49d48bf, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef032fd24755ce565c81e00232bdba47119d6c72, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b551509f3b8e09a1f57656a31f6a66adef3ddc6, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca0a7f0af28409b781cc214599d210fb68deb6e3, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bfec0b87f0583592b0f3806761be34b17958340, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9c6d8395d5454224be35205053cc652ab4a7d96, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4824a3bdcdc54c8a165c4f220b211d2e7fa39cf, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a19d7651c5ed42c71267d93bf6968ca5cd53b66, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f995bb8e51ad4071e2dba11f19e6a68a024c5d8, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d655aee30bf090ed1ea224c12a025286287cfd8, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca81b3317a32dce924166548c1d84cee2db7ce22, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=679c19c77c726b1569cd5eeda087885614a89125, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6197ed0902a84eeb598ed202182c6069efae32b6, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21b4f3145ffa896dc7cee4cbce404755b297bf3b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bbacd446a54fc6ddf078c6e595707a5f9d8b25f, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e13072441af90bc32dc252c25d349968a01a4fe4, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2aa5880db45d34de3687363a0ac2ec537d8041c9, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b820dba23d7714a534af55392ba7efed9d924b2a, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=99d286199c07773de31895dfc05c6c28cc602f21, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d7966a610c482ed68c27aeff0534248274d5c69, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c75a5163e4127c1d380cde3e5131ee96af374f89, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc6803246c27a2e3be448cd98a895c9c7aa69b7b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfd8811e29d0f045bcdc732e80e928b39692ff54, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e6714a8a304bd4141258f415d9b4a597487a885, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=82bfd3862a360917539bc31234a408ec9ef02c54, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e3d1daec2235d328f2b26ea971e794c9b966b3f, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af86bf592b9cac3344a0fb39ab1231d15528e8c9, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=496a5d33678cfc111a6d4015dac1c91b052ddb0d, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65613363b87904276a617d02cccb739495d38718, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe7a89a68268d7586bd7e91478e323157185fd89, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd848945b728e5ede4b7387cbabb8ae659c25649, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa5f37c0fd5609d4ca3bb1e82813919e02c65670, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=40f9ae3d33ebf59c5c385cecea09cf04ea335b4f, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2c399647da466727cce123c180a6eb854a6ade94, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fb95c5f651323d3c827ac953ce696afd8e02077, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a369cbbf88546ad44738b6c6e9301873be81d6d2, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa64c4f3ac484505246e39cf7a279a1b0b338d5d, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2cbd1c554535c24991a03226f48d4392f226ba2, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=298369fcd6384fd88decf53df16a63b07ca799a7, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c241c30106fb266006ca881c55d53894ab40bcef, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff92a38cf18405f33c985159eacba16acf36331b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f91970a3782d9cd2386ebff1d80d06c48786fb8b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=83925c29ab3dafb41ee597330b037cc11e1249cb, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3b3d4056250395198ab4f6535a2681fcf98b6cf, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01a99ce2bd04439152cb65fb703472b92941236c, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f8411c35b3699433f639164aaa763dbc9d78646, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8eb927d696230049018419749af664577ab1a877, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=61e9c245c9cb7a176b3bf3e4cdc724db6105289e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=90920860d1246181ad0dcf3da46492b728f46c7d, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b3c1611dbedb5cd81fee2ff0450f2eb0b05a165, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d13b75df5d75161e8f34bcb7c5ddd22c28312996, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6ec9d2226df65f9f52065614eb3ba5a5aab586b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e2ba80b670d2ae052ce0f93d310658f070909d3, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5cc82927539d7feb4c95067f88f4eceb1c96c2c4, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6663dc8067028ea1c8eb839d8c54d3ac6d009c96, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=43e21ee97245f7a9db62aa0e6d9bb4de80cde089, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8619095e6742eaf9168077f9b2a33cccf3400850, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7c0a355aed516799ffb4882980da9c56b23cad1, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4347541727f6da429e76e6f7dc65cd5a8b5b42fb, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec0d13c1f648095e76195a339394c02d00b8993f, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b44c2341c134b5d419aac7b94363d08f117f7fd2, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ef81af47fbbdd4b56d352c071e032807d71ae02, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c25454c7be48cc50bfadc2c1ac4f2b849c2815af, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=120be317a1f7e11dae6c47c397edd08a60729911, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fde57e962135ca25146dc41f947c5be24e7ff21a, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1163565915e6e80bbb8ac8b43aafebf82a5cb75a, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fbbdb21cc60f9d2975f5e320ab061e07df3a328, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f6d61e4a004e4eef288830f29292690b6918cf6, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b16c063940239531c871fb34ce0a1ccc7a8ef6e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccb06e07c59f9863546ddbafeb1d535c9ca38642, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9329bf6c546950781227a1ab4f8f98c3d412172d, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cdc11ff12feb198d49964bd9dc770bac10185d04, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ba9b40f6af21f8f19d0318db09cc84a514dc851, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ab55d37f03c8eb8228c202499204d5089f47c1a, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6cee452dae438f3f3c6cc48c69a7f87a4b064956, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d5fdd357f3d2ba2f7f168ca9af99832a040ddc3, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d740532550130074ffe5ccb50d7f1d7d2b4a5a0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd1e21ceec31deb932ca971b85861d8e30298675, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=955a67e56dfaef8a422a132764ac6e1bb8b96031, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e3b8c284168777a6a0f55ef46b4b65864c40d58, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=467ece04a70a4dfe42041c01f4266578709a320d, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7cad05e65e7c355aabe4fce8bc86c623f3aca6d0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b5cf098ed6af693508f778ec839239d27e4371b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a60e24ef5f0b372c3854747470093d329287b6dc, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bb1ca7cc9430d750d3fd8be12e627d58f86c359, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ac639e445fd142090304ddef36731f84534e383, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a8ae255784add11d506b0aeee94cb38ccc89fedb, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bbe4bdfadd07032d4c6a0d8851dca78ab3e0334, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=88f55896464a8c6a11207fc3261f4bb938b14a5e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c680e016cb4f1912959a60b5a0e7227746dc7da, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=999a0eae3193398f6a38a139f106497740673cc2, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f59a701555fee15320009b26cd39ead1ee50a285, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8aca0f6c9e4891658e399dd82bec07bf3a5e626c, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d28d776650551da7af73c7be1110e8728ecc112e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6eb8425bb9db4a4c41e8c05b8334495b5f5e2de0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b271774795054b9dbb1b38ce523d7080140dcb1, stripped # - 6 A H W ` h n w | # , 4 ; B I P X _ d i n x ( - 3 < F Q X a h o t z
R R R R 'R R R R R R 'R R R R R R 'R R R R R R 'R R P R "R R R R R 'R R !R R P R R "R R R ,R 'R !R R P R R "R R *R 'R !R R P R R "R R R R 'R !R R R P R R R R 'R R P ^R R )R R "R R R
R R !R R R (R R P _R R "R R R 'R !R R P `R "R R R 'R !R R P aR R R 'R R P bR "R R R R 'R !R R P R R R R P R R R P R R R R P R R R R P
R R R R P R R R R P R R R R R P
R R R R P R R R R P R R R R R P R R R R P R R R R P R R R R P R R R R P R R R R R P R R R R R P R R R R R P R R R R P R R R R P R R R R P R R R R %R 'R R P R R R R %R 'R R P R R R R P R R R R P R R R R P R R R R P R R R R R P !R R R *R 'R R P "R R "R R R $R 'R !R R P #R "R R R %R 'R !R R P $R R R R %R 'R !R R P %R R R R %R 'R R P &R R R %R 'R R P 'R R R %R 'R R P (R R R %R 'R R P )R R R *R 'R R P *R R R *R +R 'R R P +R R R *R 'R R P ,R R R R P -R R R R P .R R R R P /R R R R R R R R R P 0R R R R R R P 1R R R R R P 2R R R R R P 3R R R R R P 4R R R R R R R P 5R R R R R R P 6R R R R P 7R R R R P 8R R R R P 9R R R P :R R P ;R R R R R
R R R P R R R R P ?R R R R R P @R R R R P AR R R R R P BR R R R R P CR R R R P DR "R R R $R 'R !R R P ER R P FR R R R R P GR R R R P HR R R R P IR R R R P JR R R R P KR R /R 0R .R R -R R P LR R R R P MR R R &R R R !R R P NR R R R P OR R R R R P PR R R R +R 'R R R P QR R R R R +R 'R R R P RR R "R R $R #R +R 'R !R R P SR R R +R 'R R P TR R .R R -R +R 'R R P UR R R +R 'R R P VR R R +R 'R R P WR R R R P XR R R R R P YR R R R P ZR R R R P [R R R R P \R R R R R R R P ]R R R R R RQp+l] utf-8 da88df4a1d33687cda24271d11e0b338620331ab7301181e063591f85527727c ? 7zXZ
! t/~;] "k%Fc֘f1/ u<.5 ş#mjKq,8ƕݴr XZOPPc(4Y!չz_^hv0>O;dz +֞h. n8F[8yPKBB[[or!jiYaD/2,W;9b}گDt}s] ͡n+u< \( ФH9IY@ oBd`TIwJa"imh^P
Xw[!!;9{JnV
KuFj ^v:F1Z'HhQڝgB
~;Vm=0| 5"ݿ܆.G2|=.Mqhv(v8|9ZlL-J^v4۬1c&U3B%> ڿɇCBINSxyr8 '㈔A%>.zɄ~7kIqsyY*5f/ j[
'- TH7A`Det%#d;a_5a|
AjB!_qNvnU8c&)(jT-;AdI/l@#]ֵm*"H
Y߮C@-NJZ]jM[mU&zH3@2VUxYL% J9&ÒK9ZgF+6 WqzB -G#?V>/;olupuAi=dFOS1SP{$m_+MY_fN|ޜx j{ {qւa f #ÇuJ(n?71^aqWtiV8Àߏ'YϾ;=@
M8p)b9![5&uAo.R,A&ޢ@1Hܿd:bIN&UcԹO;$:
*3e~G2ߤ@`u YC {bk̄ ӏiˎ:r-fYiǦ(j Bi8+# (eU
QֱO@-zG?U 1p1|v
JkyZ(
NN(R $Oz.on0=¥ qeמ߳> Ug4hTrR;230
$MJw!DŽH䅌 ˾1-l_]lK0{\rC#dCE1 4]c ! {,8\$ y}vH))0:5" 9C;}_ ٠=SU:e_f(f Yv^ܨ N"O44؉NS_ PMk~gO]\FҶ6}\v/rS}uT1mrJ':SCM !qSUKj$6ؕN@/w&N BVwh705"#PkUzod%-ĄEcп¯] f:ySk̬ ;%7) - g^1%Zm+~?rJ>IR5.|ǝV{{ϨYI>Ɔ㞼GTZoȀ銩=eI\4sy
Aِu](*(e9[z0l6`<ʖQK z4U; bn$ ªF{;UU 7$bԝݯllCO;W5 Rդvnђr GhFK[I?5D"g62[EnZ
h #.Zm{R$O)U)
O>=N/XJK<% {ͿƠ[~ >壊fTt}zʟ[8S?K؎eK$ #d?Crml]²8ZH_< m9r}yUkIMƘ,[х4Rpmb^XU}ܿZ]! N N*(됣 9Qw<ܤrK` ܢ+؝iF3[34@Ɉ PtW
b. R~}ɏZ=\Aˍ`t2{<,`ƙ:41O);
O[!x[SYTRf4dt 8G7|ǐ ZD &:DX<{E?vA{͆U0"ݡj@axdYCȋ1 J
'WlnuZ̛w p D/k$iDӐދU#c/ !c@gʁ?svz4u/~m2w"O"e dGSr Ljzn /0ԙ'\ېhӜl? .& m.cMOD!n- n5H93obc;$S]yGPڶ nʺdXQeIe?f" y朔 ., cUD0 zوzV P0i#V:_ 3_4"ɵ3l\v*[5]V_8+UYD.Bʂ_y]Q6J4 F6p6?29fz璂Nf75iLm\pU>l'_"5}G-ծǫN" y8H&lE:Hp N&şk7ڛPExDSU1#P4~!8АF58$Q?M_waYc5
Go t
C9#0њ2@+ Cy,e3p4
hTWE 0}>yϦ"ίTp\aSO@C?H
ZL.UdoJCL
ۍ@+ e"G Z)h{
Jn82cC੍٧l,1Aw
b)= ?ge|VS
a=9ԏMuN9P#@9/(e dOYb<͠B|Vh#OUXHa#`)P7k7j|LSsl X@K-1|#Jq>) L)97 >sicq#rM@z◯>3(=lSLϗ^ .]mM$q #M{ [уp0ѤYƘ,PF_b<@A* ?TVoi4=y (oiQ1^
4{}M0 '8[ TJYodZzj5el-Al^v*(T ؓ64wX< -=MY ʮNaƩ ]k4b\ 5nKF8E+y!ПU d( v N @1ı }
N6t Ǥ= AM>#)4*!u}݅_u8!c UupV?w ct7EI5
݉# -qhX^HXb.t(ֳnYeOĺj|49KX(D.X5ٓbvz d1";9<=JkyM3 ` 4CaCLAxYUoUfcjeI~+h)# J{FkdA]4ULS{(OVh9#=e(ˬ|Bey:~Jo_ ÿ> D+XQl`^^AuD+wp0b *mgb
wYw̟yA-i[Ktz4JM}wMicmɹ*Q% t!.Ic#V_eNBZ=Ќ
K©A7Ɔ ,ٯa]>x,0.ٺ RfEY/5d uYێ ƹF+3ay_v+8V9@p/ FO-ʂy(OŵyK KaБ>%C? X+H&x6!>JZW7R0@)89C#N HF>]{t}D@КG Fo@u\*u`Eo8p; 8yX.CR -g Fkgfsy䙲 R- r\'t3%Z\/ݶW4ɓ!l'+>F|4r0T[O|r}kf.G}4Y)M̗`%KMv)BCL+p5>M.B]J|`cxojL7Shdtݶg|1 Y}a<#~u09]So) z2I(U=n
{ ?P|$
U>.^qoAD O ilA=Ŋ-9HQVΫVUaN! Kr*`i^J[טˣlN ~F- rۑq8*] BIa
Mzb:i C! o#rn]2L_NMY U_l]~^>~uU_. Z*L[yo)/<- "[ϒ̘>a5! [0u%x4|D0R
ݬrYZ
X?#+jxٱA+!XS$_S.wN#+ wk"J _ βԼێaeǙSF$A_kgwA.UfrÏaߖt-i3vH<1_)K6U{R1 n=
̰#WQB|ǟ)JIM̭e{dE/]2ӪpJQ'?h ;a౨Fd-FujW&' a+۱] uƻ*Ѳ}@k
iNVZ, Q3̏X04} X~sY%=ѕmD7
*'zf䤉(@ x7
H+Z3{N=߄c "hY3~kcVrLy ! jN.]q~Q
^Ϯ<̰>p<tEzʼn7G w Cٹ鞊8ZH Yj[vib9 ZB^w(g*LTR[ W sc-(.!?}ϧGژ$*;^]Eej¾e2D(Z Yb `*D
"eM3M!)TrݹFG[h$8 sƆ?R0@he($v[/I%+sda?,ݢu44v Uv9 `"D L4דٜB+}7٩e| \̔*R3ߖr ;8o˭F _P.@9~:960
?JȞXrm
aw1(q8 #N %1_*❯|_3WEy\Ҥe.P~c}
lv{e&)%!eaO GKV?[!2*jئ_BY$e'ߔ}xHvI7Bgibs%)Kl|~]:xYခG&\vE_ jfc8P@<'z5 < >. ^䆗 *?-$ $&kˉLH?k,1H M15F? *Q$B WͶ:d,WbqS?[WKWӵ1q7cBКìK>2'q&@㉋kŌt6#P>$H$ںU|#lgn>zP~ {kjti{3pPzb:w gm*%գ 76-4Wܘ^|Gc Z ZK}`l4p!& LxUhnDC #dS3 (GӬq?g.T 7M"vͅ5@I`C%@kj9 GHۢ $ (@8]+C)J.*17JFnx#
~{\
`Uk(jfI|VOqG-A&N@oJADfR`#{߲ۧY2iw(,GVSϷ\`Hѵq;,,.|/E3Ց V{+oS7
5(q zޣ wQQO 枻}ڞqw"ŲLgF }pOkc>:5∜ aa+us
88jeYl~;\o+ FN{@k)T{d!\Tr镜ls5byO[Mde/
.te;[btW{ _@M:\"3s
C_ \m6GێNt$欙WyAa3vl6DV|)K0nsJ AN,|&cSTFPxm!l*5oj:;*bېQ]d:G%}ttwx1}IǯW?a
~v 枓L\}$G({yB!^ai/8cH y|:|P$V2%+eJoXf% Uخ=s 0M<7!'JweՃ;BUp~b#jw+˓Ix5`oFs!D 1eY*ppttlzks|ҌS*>Ԅ4ab =̇Lf:"D;NVU$QuY$ J/hJ OQTÓ8d4mxE/w# @̻BBM{KڱBXSJm&Śԕ q!p Hx:۠߃Mt
{+9R( ,SCZᕖkY*DXpC* CnƌήgSb:G%15] eC ̧"[2mifḸs''Xƥ%ɱENM9+ ?#.Ϲmh@U@ ze CfO~ejgnφ{mLݡRNAIwh.;FKpn{Du(RM1ʵ2LI {cҭ *J(X庲'HN| 5TNq:(*=b Ai?喳pԚ67t{8= %{jںj~oL01
Qՙ^8OjZ }#{o is(m4R Zjc) /z[uɵu\evOrK*e+*xi.Cד-tCvh/lD3ܜ '
+]NĒ: ~yjf.QzFͨ pϦ6PZg%('q~ćbFJ>o?3%)cgifR #
rS& a(ѷk>zQp>djP 9,+@\ؿ* M v ggfvz h !n6<@YaT_=8
Yc6& )|I
Lb͞Ni$ ; q>żUgG+./b AYR*_K QAlC1Vp-td. ,V2%0FMrf]g_QcTaso7TSړӆ po$g /P'CB*5;ޖ ]rPٗ4
v/ ٥IkM4h6f;w$tM´>u/̳[ H " r> 9}" ?Sp U(C%|87 =!άdL:Wvݠ RĀ"I!| oD ż
F;FYPai\mAjǔu<MqVq5>ߵ"1Iq\ib}:_ H0` d ݈WC2# M'{
Sz٧˱DdMگ`U8Ђ zƾCZC:M gnqlh 4Lq{HW4!@k=H>Ӣ)x}53ipFG SYRA"$ Z gޏfc<
ǦCz+A{Y
֬5٠,Mݏ̨;
k_lT>%tI|uP⎃e[sG-vi1 e2A'9N NeeU_
X XzĪf?,*HW lM i6 P0[=95}iogJcV7fF֨)AAY2A2&ݥ/E@bV4Mz:dk](~$ So"{jb#=W!Uk5,4r]^59E
®@eo ^Q;7[yy RAhA$' W @/ e7*#%¤ (W Zp NKYV='
7S* %{1Q^|,OaJ~mid ôYs(X?4| ?n1ҩj py[s7 I%VZ\(q<ދQ̰?ԍqW-90׆߈HzTJg0 /KOvMS =N7s=?ЭQ_r. \j@/UO@ q#:cP &I@To[X t5!aԇ
&sȀ
qˎj)(Pfwx1qZxO 7R*$sUZG. eƿt>l,{ ?F#+19$xBzT{+3^8i]wX!Ab#XVr0T236QDdJh`ApSYoVn|.L4iدa}k=E~.C|!.3Pd4\"ĈGOf%\
CL06$: fג$z,e=oӨK6냧=II$$%Q 3>5cNȘ
)@,Phr\yT V"`Uo F U T{h=d3 P kyWÆR) ?Ix-]U (ݱ㳠L-Bhԁq@sl>e3´Ѭ;pYѼ? Zml<<9zRqH] )% e.y_
\ RJzAVofB>o V Y;ik=}N ~3̅;$w[+CsIe .\t
-}g'1 '"}(*
a=WˋRJ_lF5?^ɴl*K ^Cƙ&Kw3UXE_uu1NOdP'-
g7MGT~Ń\#57>7ZpS=v6=xABGnL;=ioPM|U9#kWL0Y Zh,rhUh| 9*h["鿦Į;gc KEЈƼ~Hgڛp'6DNW :W YDox Jzj
U.o|+1d2 eE/zH
: !<Ø]9/НYhYNS4
gm N<1p
8蹨Zx=,T s #FxyK =9 )~ Ս#WL'!#3xGeNEwkȥP: 6Xuaʣ^`:_Ā@+l\27SV[u-M'ix
0QJ8kPI
_1pZz.!cbl~VvD En0.,;zoffqN
F:;%]<lF:Ć eW.n0
$ lq\(KyMšb" i |VuA2D Γ EŠkqNA:
Afw,Ƅ
x˾i3'8w
+`ErˉVs=O~8. T}.pzj^)R ^Zn/j>D-%G <煨V f}n7'jƓ#LA~Tf:[6F*OXMZ| gZF# _W'Fk%an4m=Kf1\*OijXZؘ x)RoCv
;?D !uzIal\9KAlPrw):Q߅@Ńo4zPK> B m&r+%!] ƛciD[ ^%3T>{FvUТJo(Ò86U:ӣMP}rt
$o ;ɡQ\O_1Ƅ~P ar'n* 5jouz
=EABSE8Ex-HB|joU\F~ГfzKk6 L*)VNCUςyNgՍtlݘFpq7@]ɁB%F.AzOkN":מJ'Tޫ3?J^>Sr )
ݮ1Q\CtҧN^C #LܛhMKRqwIzx5u2B!V ; 51h ]0-#"{fŞ2}ۧYW9D/ юԇ{y@<,Ė}[ sSzܫ!Tt|TFxw"D,7a r `bWи V#kl4] 8݂HK̿c {%F嘪>q2~rM,YA
]m[22RD=s )@t 6Js n|4;K&p ';vtFvkDG g;KBZx%aj|O£Ě
#@> 6K|k2غK~]D+m\ O?YpXĻ*%·[p su*V
xWDݨ:BI00\<;B HJ}"/ZwAwෟ[ j 2>t/BVB}O6kSǫ P֬%oC_02P Yfє~gI`:[@*5; g E7J. #3h Hs& 3~$,.ͩ:ʡL <`μ'tvQZSAcQ:Zi8aw7P-Y*2&YPBLiaQ[n6n tXW|ZyYpH-4y-S
_0|>3M7<`TWJ]hZ=º{̦988jHȗN,c-a~&d.4q7]
6kuwVIWS؎'KLBQ9ǝ!@A(L^/P
9{%(J7$tdќbyFTm3cOrL 'uk?A[e}|~+$,|eا{S/Vy,dr77Rё)Jv~1_P6܀;;Hg:tE 71&'C77(8:{^f 4{-.2 kff!S DT Lm/vpꢫ\6>p]@ h~z,oWL MFS_oTiFICB\9%'T/͠ZM 9ٶB{B8Ɩ1ZNltSX|E@%M,
8AX_Z@
JjrO,4j@@HYVZ~H|%|mŀXy{^{
"C+WF㈠r
d,ɲ[ޠTm#Pa/=QrG`tsD tV\ :Hu7@3F .2ozbTMϰ|J>4$Mxq^Г+m2ځIx#P0 TdԒMgr/~~7)#Q9n{RjRsVma0iXu Qӆr"(#24l{p2X05?+.џ(9 f{ڴ\T LT 0"k<w|IyK|d' |,lj,Zt|M· $ᷓ˶&(8rx.'4DDt
SmRBƂ8sz[ uvS}JZZƶd=J]~y 1CWezTm+@s_7FPM~t"ĿD'4>o߬4X wOh t8h0c7&cҔ{w>JVMï4eƫ#L=%'rH~s=sC s*-G 3}f?uVoV>6wlamXUgxӣ_tK >̨1yP Vk?# pq%zd(4Kp4 C q dPxZlot0_go-TA} uMzoPQszߐc[݃ -kNU))u {n$7W/Mej?W(-/)"Z2 һ=WLz$9(| <ܗD=ac?Z8dxHe&j
7. 9dm 66.n 1Ui1xNMm"w2{`CFa:/2D^(^yu5K^{na1D~_p7t'؝pt@75-/(\68a: D kƍR smnw;IqRi zRXE楍O y vVM<fڟKuK8"' Z!0\Z "JUiLάxy4]O%W-<Ϥ O*͜W$x؞/+UgПgS=w+ߥʩo2h,rÒRb+06>GW,
st7~=RNRc]trD ɫLŭgo54 s"&>Vȑk5P0IeOp"Vt]%jf^[LRYV7olyᯖIu洼6̄Vzrub}mnG^A2< D 2(ny
P1ډhG[ѲCwQ;5W16OIS/^kP/#c|5l;֮Dx D APv\ 0SˆG?!?:]_$BܑXcً59@{T!ea`tb=+ /a;f3ݧ6N 'j+h<r1^~n-Q c(_@̛د wT1e*d9џJ٦[Ä$DwKq?j_{ɎV}+If07 |𩠙股_H_[5>&NvW+}<ݜkRO]' OV һ] ]mWYZȢL!] Z:BH^vѧDp8[o j.
$K4\8=| w3hD.tۗ R1̙:Y]hS"и%bjD vG.@!m˵IppkD/hI}c-rkk45 'ZWqћ$ 2R"jvVͭEIaV=~E#1L
vFԡm볕Y8`c_<Ҥt'/Ycy@{ I"6ɫ\
LA,
U17H<)fٴ5nMaJi Qf]sN݆{ cN8DfyM_>]RL=E뉴9-#Y6\}3&Ji 5HUe z[B-;~hCl 6fU zB:]s: Q/Cc{I)cߴ@ڀ *H
īR4[ta) rg$LCy/ x,ARhMa۲ @Z?yfK'͗Qt4; Ń
D`Qzsqs/w{, HğyZλ9:N@Ŭjz@0ZK4T&˂e%xH h~R
pȎπfZ'13c-ˏq- %. N 9y~$L{!4'oF; Hma$D3 +lVTF=YESGٮur%^!k?[8)k" =t!CSA NuFqJ[KJvg3넵JDUr[y(v
{'mPmǿ/p<{G5G ? 65~3s>ucF:K(`U(i^M YmHm=~-| Xp-pd %߯fR%kUo},cy` i>=n[{STc_&2~-a2>_5in
ִ
Fql^֧^~~[dz/*_-
`lLzhWZӤ]6~:EcbsL[(vD1KfhrwiAvxK|~4GK]2y3˺yQxtC'7xd8FL?Ѷ,(o4EZi% A P P\؉ | +{za?%) w dS Az:8
7+TiuOi I IIvU&، Bpʛ@v Vr
7z)w#*y MR7N
L jAogʦټ,` 7?d,ΫO@".3.wY=
S} .h5KA]߅]Pdlŝ*xIP` n p xOr1 vJϠ>a*K * Y#3H
7'35Րld+x>dK?S1 .'DyH"O*`p/)0a(,jza FZ%?GfOo' ^8aYq /a
p=j(
{sm7?03 *e᳃|T7h쿮pGȷy,cxϨCMl'a`J&xwZ|
] АTԓ-JӀG
oQyk=T
],RuE8k3 _!?yA|Bljd#`&J\0]![ʔyѿ- u zў>9~7ė8"t|TD/9;%j^L +h#SSd .@ﾎ}nW $)I!5#[VH)c'*vH!VFj)cψ~VbC55$*ىܝ 1-*3mwvIf[3Z]97"-/
fXWBwm r2lv!(n$ \q3.hDlœtpFf/T /Ab@J pXG]'u%̍r Շf
4͋M4 tK!xRJ3#D"'Ǐ#5)䄐 "z kNS]I,X!d9Թ,͟=#]&}B%1|aOg/4A
|Q'']+*TӔGf!Ҡ&jctnB
bݭ[L _/;ytp } ta &po˷ %?<2LU/NLVޠ딖m [^
;-IJ
99YDp#F=2u:dw4f2G)iw8̻dKTdImC~;
TSdA)XWn衏ΟRENLJW\y Pewt 2
X|6J-̀
rב^9l=~P^xb(4 ڈ|ops(Br=U] 5^)/uPTڴ-̛y!SQK|@l @sKHEd -p[ Y<1W˶8Tip.q2%%p)%8
ub;!z_E(K'j} e@|ը0y@{:Q_qWjܰO#sajY ]سf[{
IΎ8ӟjrD3?KaWuu`")q$e,{#b s:/&8c
vmbChD~ܫs oJDиuYїf
%2$} Ԫ ߀rRn ǍHpcm}p\EvL`OվOQ&*<*K P7P'X~i< Ugyc<>i0
rVCuvIUtP3szޤ/~q&2{ D5c}#rZ)M'_{Hw8v~U(x74ШVY4l䛢ݒOwyTNaR (2$5۳2FMlZS6 fp>,.)@baAD a?Z(aEMӖ{2, S NYcF>R=ٰoڲ9߆FD*bUDjI"FɹX#1;5[l M4JhݸpƯ4W I |@ @M_Wʅ{Y>FB A}e)8H/(Ġm% 8=`Z=we×1=Wh&M5dȺZ4p%eI0'}&Cw5"tcQxFaٍe6ȚnCQ!hI4z'+OHƳ2PҌ XθGA0C+7FSbDYxU,ԝ}?6}q6/d+QP nKtx9M TM(/):̮~)QK{4N>hCgw0W։Rљ[;[e ˸:L4Av~S__#]=U K=9듆"t3'g(.>>+} S, AN$Y D7С+rHzxd*`I
'eAJCfAXe_/[.-iHI/F?@J;[Twr\8ƲPqԷqC%W?e sv+M`SI69x0y=u,bl*Xv
vw"sTzK#B؆9"Sq!s%C8/EbV8Ev_$aX+h+eq7+2RWǩčJI_V/%*Z_GfPI,-%lL~Fw`P"Xu/ό(UXk,ĺ9+38, C}"ϊf9B!Dç j0'Z F8>#k.&c5^C>T!@? *a@DKnΗ g Cʂs,1|@:Krr@:aٞb [t=_
%=,ۓ[y͍ e&7
~!Po\+&ignjhICo'h~Tڳ/̚Y>"[/<EX@*1+UTrk
cj~Ձ8e vyA+TX٧,Pw{@U(n 9Mlzڴ̦S '
\Oz*70 fwR$djۚTPU
#4N5&BfI`6oSC{ [h"Fu=E Wx()7 <5TI([y+y )til~k3G!u4)aLYkZׯEywa>8,A3L EVqZdR7I3tY0-R
vC#QTgV)^AI ߵy. +%u( Pֹ='E: By%`hjdiױ7nu a|9m[6pXT^r={1jn! rQ:U v\%t{lGd;Ѻ05N%38\
a`iI쫇 |TBƴDarH2 E#LT^zB,fÒi. BK
LZU.۷RfhS |Sn("Ac^X=z$i.i "YW 5X2y j.9wV^DK uýQL L[@ \X. G["(
:;jPxju4 DE{W4Ћ}
!@W1xQ̯leFJ-IDfhVqT,}';.;)^t:N[rkhv bb+ f-ƞ>@I⤧㏀fBk28/|Xbc99F#wbwD\rі>!vT(][cEA2Ul담p mWQ_e ߙFEԀzbnt[.xPQz0(dPhb" _D?=l^Lb7`x#ӻEg DC)/r[(&8turDԤՍL24Z sZu1gc ZN]V"k$qD _ו !֧].IМU.
*)qkM75,iuwtmY?#ӀBT#;,܅g\3tQ LCY̱ʷ}ב3con^~ #$?cVh|f 8w%KFեG3W%|V撈yjYnٞɋze">0툤Y !%x, V ݦ]bĺ{m(gf6p;"dI^M4Zsa8!X, ȶ~nrqGy''I5^`_xdzp-w^ }1HQw(Q #cB7 4U3ިlC lNy@[)E*"Gy0&p֜q 0i! `mT~)l8Л O,kߛg}b1 90
L8 )1hl
U5x!qxvv*QtٸknaiF{)GI\9 kg'iF]M{'^9 =Q ^UGuK,L8h525?Z íR 8
*v<ɠ~e<9dN=]Zv"`-e}SP7߮Ijkl
&ɶVi"j82--&Z-[X"{ᒛ/#;` O_?YOqt" A>"y8)rXeI`,Rr܂,#ԌÀgq`o͞=x _ڠAfnϟJq
U =qDζ_Pr=
?ߦw(;GE29ޮǷ|otMy9,t\,]a>djj})ZAGSl\+Aڻ]w]TƚްmKu XkN~ j^ef+jm9:'_ʡr+RW 鹌:C 37\}xe5&L%(jEa|?MSWaYfCa_iާH: yQ&ӀqaY9Sr' `YqR E1.Ѳwez6e{8nw,PT- = >Rw
jF'=
:yp! B͞;f3̺bHS!YLC NUv-R8 y10.ͪU2"DZ9oo/k# ^j)^;DBn1tŕ2c **̐o>LQt`ls`0~pX$| .*\ / h^ۢ@^
jDǯ히`&О
=d} MSJDH#
I} ǞjxYs ~PerRM}t)ðǨ?&np8Pƽae؊ C2&zIv !̩V{D6w-yL]n/P6(ӶO6O -2k;AK='7眮h# 'l?Ah2>D ~
koQ[/T@H|v`n_͂3D utB/!x28N9^`-'2~W `/5kB0ZUiFK +Es=Vo/Y~Dz1Uq<3LP睉^c8 ^`ftp%~=ԚIkyM"zqz)Hc %?KT7w_
/O
W#Mg̅G,v垐a`9SHS> k1Lf
4Vbio푸mOkScd|gJ1F;?EG`䚯@ []q#FZ5]٧-n '?D8GZ@W¨NDvIp$7 cZ+h6zbNWEI
P% L M_DekhT78kt.ԗfYiDTVV%mJ2~( n5o myB(w -s,E^sz` +M ]p / UQm$}DD FX
yn )ao+>[Wn]E>NP#pa?Ta/\겢ƈ5I퍝˓o A(X ZVjғlW;U9rK?q =\
lH7HFd?KL|3,:Rltc #9`=%vw!{-F,XزɭhSLe> M?ƃ 1?vj4mhyKh0m
Ԏ2 +CJUhg whϯDJdF%T 6|GbnLF"6Vu76>@5)%ǩpQYgtRKquͧ} |G
{?I&"yDvTѥ (+ >iBT`p^a~!ǔWdz:2ׁ*@b'rȋ)x ?vwo{ϧyoDUߗ+hqۦ$OF
W %zՇvG
{i/ gB 1퍀(<1YpEW 颉_>NqCkբКvstǍjvC M=E*BHjB
FFD?~3'PXV.eu%A8pg}p0w+I&e^,*-!b\&&Jw lXTSDfQ G^z_(gRtK^$IfD{f "\.~$^~תּRv -a
b4+wR_;psy(32E88>15drQ
bxmvjR { sj#վ5]܈j8f E`&VSP24BD@_}VpaCzb/F
?T'.[J7%kѢ443 gXu*>ֳ }rzq}pu Kߏͪ,@y:,=ەRіE3i@X/ew91|_!!56Q VS+R<"^%Ky+bji)u-'D}L4 PލQ-4qkikps]o~mt"ϗtâ(| (z}.u.Mj|((hXR-p\$ :\J_ΐԍn)UoZZRԫtˤ$c%p1 mT,{_k$yPؙ@H/IsALWUy* s F,ӕMd
k
x (-ipaBI(߽9_g@tgČ"
Ì\ N[U Hj]xhtئ |d*+CT.vG!8P/JK`_ YYsheSG 7@)d.1e]XքBuUDu"?(!b?XYԦu0(qP1u[o隁U"i yO(Uvs1&m]'3W6@asZ`-Dl%ҿ#sKF`:e།~@ HXL#i.Fku&QT 4&shr͏Ab *=&#/T]%tD@P
BzC|5 x♁" *^+
rM^ɬDD_ =d$:R:0|]u)N(BȕYz&Va
E(&\O/ 8
G
G]YrŴ *d=D]i.R}% EzDNx~W
䉤@ ^M6bީ̇ۉ,Z!Bx/0H~GW2qb-Xtm8@*f;Lpg_R@.N?aKVgxǸx6}Jg1:{ڍ_OJd_vT'ED: 3[ /e tx`KT7UDc8-Sݯu
7æZbQfyƤg+hdTp:)BGD#
ˇ߭K⬤ 7R Wo7d+ vN,mHgP,> aՅɞU /x
e aӄΔkrZ 18FxwD"i(+KRV0mDa%
J!d1]ic? z%rNfd;Cj"r-PfeX1UWDH)
Q yfWtc0I k.b1N Vy7B1J{}T3P1dJ,Ag6L94#q+pƝoTkM]N/+
J^7qSvnnB9W r8dXq_ bKoA:F`* zG0^sP 4ObJd<,kDS }y21<7ǴE5#r]E&+ۍifXf;/wI'jD:?YY$4
0}|q8b 8z9Fӹ t l.W h-bE 2$\7PE 0g a ~AܐeQrB"$@D|۲ Sy^*gLX<_7=2@
xjD,C(ܭ 9{ðA9%wHzj#G#'~d:O<,*v5QXS-t'i=QQ/̱ 7v8ƣƦ!Ӹ ̊#FVD @dibO&doN
*s 鱰]S
~zH]Q =&|w=~~g|k72
} L@.aCBc8ݫBA8X?nER}gn5W^J9Ozu7q ZC BwQ`cOp٠+F57_{q K%<0Ux wxn
7ݨ?|S:+! v>[?L97DތIwb+.`MBER5MB'KK<ێ:KGeWPSRACv2gGh:n>|PE=@( LrJkX9&n@KP *| 5(,怽xpE@ۛAVMDF,e)Zwn:J"R1,9xx\% )zh]~ b_B)%ɭ.}\AY0-31 tʰGQQ,|B8+o;yX|X X]vs3Kǐ0p9ys{1Fi Sw!''SIEM &Rݠmr ';g=h3o+7|ruA [ÀC2+a93cYJ`Mj j̼nx$ !`H ga ZӴ1 F$+? _LWpQQ;P+ݭV$`SY~~xZ8 ౮F"0YIU /fÂFT3f^MQ>5mk
mm}W=.ʿ 3kLVΣ WQ<{.-"!&P2LA$ȥW/?$+4魣;ndrA"`&2N1 `Z*GAEf4Qz T_/$m̕Ő^aOpY h t}P%j ]؎"w0F+5f#eΑ~+R'H +̏Ƴ D nyCt<:B<=_!ݭ'糞NU6Nҡ܉lG|s%SYpht]ĕHiٳ=c( 2qo>Qƅ40.iT63!8ĤDb"9@| I 4'{&
6gaA^j]4L $ |* .: |a5+)AzYUg=M% z/r+3u DR g}cctx-[ /;ȚQPtvx*Jֻժjm9OAVBzL"n 76 8\ i\J$d`ve\d
!fDLg%ȯ\!2b`AI
q!JhH-!9tE%GNėJHB9ꯔԱ }, d!W?ʇ֨Zo@] X'bbT
S
au ͳ xOۄS̙c4;C;tG4Fj7b,T8~ajNBd)bV)\aݖ7n귢Tsfnw5!;:#E:.A!;ZW::9ٞ:cl4XfMO tUiEiQO hφNg^ +EG D]o8/LLsI?? H3ҞVb nri~fv;1
SԮ7ƭ CL#MlG+Ju%![ Ot·s aL9g5<@F&LKt>_l0Sq ԔE ?#>Is]h rhqNCghMhT|Ў%
۞b)ȉw!IAى=Q5Vy:me_@oz|8U={G1w( sPdD[Q-ʦ:T
n {zB=μGX{l(:}2%SZx* p%Fgňk'# n5k m :Vo%ۂN<<-ݺTDA#ɣo$ /[Gs ӏ??oKE݉2i'rU~
1iԎ{fά_+h:@;
Š
\aQ oqk U\4uee]`۶6CWi,FbBkB]íz/$%%En4(q[5n5 7xAǾa0e5Jwp@7g#!D>]_v3 +t ~FNuO4t׀#=MQA HK]>vsd}BƎ$7'0TNvHBJJ+"I_v]3|i*5Lk}UJ~S e rHdX . 9]-w5<)GKy%3^S Bk9XVˁN"vh
6QJR$NiLAF^Δ WЋ窻Վ^$Ș" zK!{t5l0z
Sh9 N@J
riR6Yq+*-)n2 [
#XW?* ꊥ5`d Q%:{3Lrr#˸8͔rkw {ܠvG-&YW/M (@?LmXSRmZW^}3Gr'mH̠"Ns=!h@0 HYD#Bk`sS1_#kXW}Ó]S=
ڰ wBP}O7I%H
lR8} 3 D2%=p "ѽ|Zҿaՙ٘)wlwpWVYe 2 3C{~ҡMJك7NǙc/<^A*&9MSvmxIv-1OFYL 䃙}Z9D+J_ + ei d5DM%{::m 'נyH/Ih[N:*yDm<zt]5pFқ$ȷ$,
ވ&'E*8X90`d.|XeZ/oDsxb+z EϛYWh8ƹF7ycu >y H6{D 6I
|X2_52 h`DyK\_ozj(k^םT}Vܓ?[E,^ >\i~e~B#c 7K+?%JyvVluR̥w5u
6)gy? ov-ͮT7@~/Z~|ΤŇ[ɛ1rZz[ywF k͉ꖶ#˱79N ,su1"ԹHjZ3~r u?9V,*F8={RwZ$>W<0>+5؏v_̀l af[r! &/cm^0*$Qu/,B>qty+L
"1q8,IF~-?u5?^ռL0Dݖ=8a| cDm M|^邏^9WDEEdȕ,cecēoޒd,"A}zTՠLtPA@V`:%%=>]y\2('`1Ϊv@m0ʹ D_B$ q*kɍ.d|K,v)G[a|OPp )~^ߟ4> NU$ hǩL^I1bGd
k
ԻZSEjoJ;ET2~n,IjgRs}&69h ]Î'8 6PEZ.L6/єKtyrJbkfUd~\1Qi'{GԎaUXTF@Ī$bb%'35vucq0CG57Mla!?$Zf͚ :89('sv]^
ٌay<}5 !?z闌 jgn]mQ(S>rl}@ B
2nk>xm ~>w_B\(3|JhUSp,yaGПk+W>2=0K,,\%WIh:s 1_qsS_Q\.`f)(d
l]^mmNsqdx@*w r/FG/G!Xm^F = 跿S]qyNpp'%[.?I8vf| D :c3^?X&5wrsJL;YX=r#$/{cʮ hЫ"/|) 8e5"AJO- %k
Y]PVmXHPpxE K@Zt
7> 6, rȝ'sGZJrpgP>J~X\*gYZQ'
M+7ˑN7 8D vٴTW CA@r<̱ T6VG *$LNT 6"K|.ȶ lFJg#rr_DE5T^
2\ q $얨p8'`R?* vxP*8~ @ڗO%Bqpj@-Zf25C~s.beDِ`fBq9iDSoǐWInxm cul;ޅ5]b%ސլ %?!^
3~9UuaBxvlIbҽMq<|؉ W5/I+?x/n"I-ȅ MT33"h8-3 n6Ov>0Rsxs& ]ndB#?hx̖%x
}i dOu u`COu|ҳ4*s 0We;K:Fz7[
,ʐb Vɣ5fL5+{_~KV(JvƮXz,ulз6͋BԭWZ -U8K95%'s;g\>ڑ~5s8wǚS1;GJa8)H.)r/e;Apю}jF!}8:! Z; LTD?Wc]svns#?.nam_ 7SY4 [zF<'Y
s,J"w TXÈW#UZAWod}+3/B}4 MAغ54jk+(+MSLqahvzB r-X5
W؟w,4du0 HNd Ά֤ڦdx t SCe֢rȼ kl?sz!/pVzq{1'IYmkqK/ g?>,nsςWBn :+".ۀ<ȱjБIIj ^pO-kG] ~[Ha#' |Us^""_T Аy22Y3xL3PD5毪GChl|SVCuO
f_ KO>|H$(/=: 2ah*D)H3
;163n6䩤:
h5qMv #hq}piS]y>Jj{`; 뾫}z9Ψ dIBh3@,8$J;RYQXo"7^D hi!ȋ(MV u mbJHqV=>TDgy0
6x53E=A-l,ZCtт.D Ƃ$d[aD-û.BH{X+
q%Cp QZsNS)S͎Tn9uD<=z'hF鼵~] _U
J8s'w|Jn:hl{J3Xu\O}6mHI?Y Dn_^70
p-惘{~jq77ݾ#?ڢgsYZx0Jg~/Sx̐w
u:۵P<&hm
>dv\{c>&Na3k@v]{KH l:\`'#>#}/&[u!jce
Tٝ\L#tH gJ۫>H =LٱCC;wxm6..eX1<нDҧ$m1DDž2=6XA9)w&7m]'D M\ݡ̫)+g#E(.hP uz+nQ 5A97Z>P 0T1YǏ2|_ 7BnAD]"LHRA le zs(}m)a%hɒqBKx 'N͚mqU%c ?Pø^ԭk *痶N*^VË]z Ĺ/f{A kh[~]'
duEo 9P9 <㥙*W"y^5z [dī X00(.JW$ș Z]붜$gK L@%
=\gO0xLa@3I p?Jُ9gT% \8>T1Q.4#r۠RJ^]lڋɡ̋x<(ĕysԫ!% ,TK
d\Q ~L4qpI! Qhnt@g^WiHŏar&o@/(%Y+%̓lnR"$L3r# ;EoZ zWc3ȭF̓M_S0(xETV :jU.b5M-h
OY xf> }?d@kRpRRhA&#O[&b1^v4I "hW|f B!!Vx+\`-w*Dh^"\}Q!vo
κ䳝 1TyFU(S\^Kxje!Hdw/EtS +g!E˘pO`4WR9(tۋtne, $]s@J l:.cAҠB|USjNTѩ ܛw6a( Ir07;9S8i1*≲B6D&L"MLB:}fmfz(]w$nlE{wO -.00k{W%gomv؝ub@2 0T(\'*7%fYnsl>ZJ= gBp1΅F`ZǴ6Rzɣ{!}hQ$1{
I?~hqs
% &[R8a>;FhhfPu%hҝRߍNnK,νSW[Y9 e87.3M.t;BZ-Aӵ`SWɈ wW_|_ Tڦt=@XgQ;~TT ,5y3!e˾HuzMòHx;fw ;uIZEMw D' rDѝEI{-=(w{gX-R3YDuwv*qA[ { SԢ^3HVUd}:?nUCRllpUq\ CH'-7ˏ{5%b|=<9K2
yYu[=,lAjZV9c)n;dw T80eq\Wfc(?NYDZ1S' I!0xZdʍnhBmnI1g2%i!=eŔ ,F%y×|9-N)_%SrqބW hfwē׆ b#H<~ } JP )sڢP^bO2oMkF=MZW1A:NlU 45I ]v-~Kt1T| cb<7ףj |
_
Bē+Ŧ#?5٫Cܲ4u/e(ԤнbɂYE_l| ĭyUsx~˓[s
`;atN H*R]KH 2 z PCY/eKL'sTN8dxb:
8N=n9dzm̉F DE1gzc
C@>T22
Wʉ+AJ=`R3ƺ:9WUU5}F;` 7ȱ1l-çF(CdRal褵C:+?5+c*E *$oenQ=a zM4*
;;4'2hSHƼzF]hl.`Q8 0BQ&Py!.842Q.5=0%~M~ u 7[ϼl\4J0*:g/r²p!t3 *i#N]mU5.Ch-E;X8Z#ŷX ςnL4 GOʽncn*К}|a)WX]nm.Me;տfe_F皏>Ky|/@5 ) !iw.S
~NM "C p\V2W;+Qo pibҡШz-} ϛ/ӢY($Sz(;4bXD1q2=:fHՈȈL:C}+Ax=S0{0Kf>i!bDax~Vƚ:bUdkWx|^. +r+lmLkgf(/x*ͺ4Zw܀\&Jȣz۴˲x2,m~na i&*1ӷY:6*ڶO,&L)Ot?wC`
xN?Mlnk3`z cO# WYXG$Xkak ;5jk{cL6_Wmĝ/hNL`zkWY87[fLSund2 QpCEmli
: ItV *ϟ&|leO`7[ܳP?6\GKMߚ\(۱ ] dE#K;#ce ~
" b
Dh ][ .eU`ό9Ӎ( ی VBD;x?w$:vCl~u r 4|r=B0+SMWyEsbOO/#XZ~݃ȹŮH%ic =.tcB<:!r>/FϺ%W Z Y 4I<ӳ!J NZOoí D}V3eaيgu"@Ä|]|\] YGRC dYAY-ɷoAy:ܐYÝ;a0XY2Q*7rGˉ m4ђ xz䡾Oӥ/R #eoD>Qt2viUT=eqRgMͣDzNCEahgA8 Xn]=ߐ\D=sxdn f _饗Bx$ 9筼wGxWPW>g;P/2% %g[ ?5py,S4?!lz+Ybuxn0; Gn`X a=_3̛]]0ɝD7=8\t+J|S5:{ Ƒl頻!10Xi& %R-61;hZN^_Sf5X0Bљ>)OPzox㚛I;Mՙٟ!6lg "bȣА (e5Ihf3 `tn"h
5~?68 iwG4 g\jy7(kh 9q'ND#;B R;UY29;2㶜r vR^g1 ~kMB5<[4y< n';G{5MGD=(}SZ;:ǠMy52q~d-Gf@Mz ٙ9cث' {C& p9bj lo~ DŽ%CO oXdz-pZM
%NeFcRκ
sw3뱸ݙ4g/I
v lhL(
- '+Q7*mB*2_lHdž<0xeCW*qA5g-@C%\w` 6>~JԔ,28jcAokFAMT{)Ǎ7N
ǦIEZʈZ qyGeMS
b_ehhMS*J#C<:o?C 3ԍ\n rrg=%ăպV K!:3 %9_xo#=X3Kd֢{gpUnAalF{22(:³hgzi9 aUoR eIIǪih{;TxlEU '5cgR `z ezTڣZz) 9HIJqm+R]eq{2Gy 4yJ
@K=> _2gOkuvrygT8v-;oo[+qy.DK1%a1Bnh>! _X )Hzޓ&n)n=۰ynu yV #VcHkƽtw.ѐ)l1EBcnH#dK_y udo u+jkhMNI0Ki/6B"C N_Ǵxll ݺD?Z٧^Ec݈Aw ƄZ>Ќ`=F u> ٖojBy:W
EA>0gxeXQZ!4]
*Ittg>M8իW\%%a`j tEp˾4:G:{n ~"(*~ɿG:Kl-Y_sf_ޤ+k}14] NR ,XxL.#aClӴwoEa/
Ç+ n$1 .~' a25b@1Ŋ6k2:A1K%G. _R9i g
]06udtP.߰?m&\>!!/{)Z1Z]Jz}(2@Bo1! ΰ8]ipeKŕ)m}JDJ=QvS0!Yv2dx=6诶8-)PΦȒf :ћH:cJ\h }"uWuI% 3o4K<6Rve@Uadx$ui9)Ew 6Wajal([ ѐOj$ӨЗ+jnM ZP1sPƗѵܻLާ"U 4c|PFJecr`mkPknJwN&5_*p
;T(ߥwՙ0x_э/ Y$CPbK$, %lE+Zޜla%}j{b%!h+k E
cbW\de5yvU7Bۥ{sD
/^F e64sEim3N&J,pQ0
sɥbԢrRkNqyݪ"´:Tޕ8i˪y;ACB7>M
gP9wjBdAyE(Ĩ=g-k,p<;O*(r5S6JQNR ;zۢ@S۽b eMtHɳ[ ^,z Ca2 bOc ,&\n\ ыW0D&,59YtUTv:mV
[L8uX"nlTh 9يCE vs!4Qtf4c ~\ ]̇,ɠr
rE $L2`VK\ X he
!W 0àO<|_y>U;.;Duܓ|/e,)*KDkS ls6Ly?u[;G䲐O<k(2ǝy}D:Wz}8z4
<%ԏ.-?Hv,KwYj"dXa
Pw
J\1Hݽeʭ DȀ< \6fleT>3r?哟 Npݝ3Np@Տk s60O[2R
Q^lz lޗs'<
öW%\UZ37}A91hxS h[U+-eZEf5ubR|qP< \ģL"1<$m}0;:DPI; /@гAi{,qn"\X>ĵ\SQd468PyS'e0e>BHC$ LҝnF | m{αXd kn aɲnw|K CF3/P]E{'-IQ?Қmm0#<* < /; _ՏuR\N0Ћvչ']"YM:LU3\v)?st5x%\R%P)=kƊ;L Nq uV`v]*ϲՓ8iBZDBx"g L&JTp_<0VkjIkʢY/Ti b8)MeZ7vr{
A@:a ){!qspSs7t=ILZjcIOTv{ވ.Ke\a" kN-HKp%wsXG/4қ7l*9]6"T5v͢&-W
.E+6Iu㫪6n6#̅,~$m~hj!nDv w[m Yn @lCv"X!m$|ǿV]+?fiw,:ޓ} ySv>-I|G%=*AV)hٌep,7GWERZ>7QAa^
Qk'{tf d8Ű nW(tt=_ Hz4Ѷr!6dkKp M(Kq9Q06@Jk=l'^8ur\pZKG] ŵyȑeBI"mFt㋓Zrxbi|I-i1 X^T
{؇ sg"-&ܷ:#L&@VkCy]TMk'OVq_'S!GD+_&C ۆ85\5b[$#F̅`:%~&@LA<:3
e][܇)L%K&/
GެpCn`gdm #"o= ,d"47) J@
°cGH)2bLE8Qzr2KUtX
e M l*f.N %8{g],\=6l) 1Oy ʌ!ZݽrqpeXC>!^jtxk1GɄTE:db۽I+G5-d֮$9:8OcO# D%2 sÚHެ6_iCV ԛnB#G5'/?O
+( e @p.}0a,tۺƂ*=1֥p,0lbf#, AI }C{Ua1|Q2t;JTLǭ% FMg˝qWn--b-?"yYc9JEY^kmO M9k.TDГ sd x9 0>"<@nAP1kB u j{&Y ¶W ˥ H WL-˼D<K+HTJ 68;~.9 Q]LZd@ IWyP d1öt@zDo:tey"\ߐOa YeXUrB{Jϱ#_9~KJ7NźK hm WM<)g1Z3) bixCFCuXnӦXizN6vb@$f}w*?T6~ "'fW-*VyS`P2
rj |𫌶!Qs 3[lDPs-w(jROU8a}T#Z!|ܿ~E _Iz'"w"efo#D#zGW
R̩ccڡj7Qa|zk0 Q &?l]&5/`wY5E3ad;_5HO !)N
=4Iax%
KWD1k:,1Sq8PdjŽ]jDȬ
DP M @H~zv 6~)1ufG|Y``qvqSH!}uug Ʋ9 Z&OȤ 4 e%o kbHI0 @H xt}Nw#% ڕv?riS16Wϯ7'[D"Qhg 6g=t'SZ /4m ^=H2bѢqg VX0!Ďv
&qCՅ{9#(Ӄ,)js[Y0 ϗFZg O?Ū~X8t1rWh*sJ-?:>&m
l5y4ȃN.
E.g2+aؖ{mB[KH* _-«ב/Ou1>g<˅JЅltcq,{(;4b 4z$(.Q *hRrw ?+BWߌyz%MC5jr
"C3chVaJy 4r""ri@>(;"rB2ۥޯT}^e
)KX+W_Q2$Sm\ )vXͷjߓtLQP7\= n.)JqV40H D
/J$$}E 94 ŷ $q2-*=wO4 a 0Q)b9w`gƺg-Ĩ
`iS*N0ƈպR5" /8s|ѓ G[\!UEmǎ cZ)%BN#f>lO_ !.n Mtzߍg G9>u`sULi4Prwd k}o=j32!m u T(j\ W#5[ۑ!pi=A
GA_ÅfGDԳ4P(
%4ԝ3`|eA/Rr nu4(ф~%8 5O/J4lӈZ87Q0)Fy]^5\UwP(#'ߥD&_^)Id>/z {Sw<`gdC
y: ůvg(
>/G &c"l~?,a+u"~LuċhlOzH|dٺQrʅ,ujo ř4җbp `ZکM⫴NHG5?ƾ <[
뽯/md9/ bcy+fڔjg-6A}Ȝ4B#IvihDz2Ζz13%AzlF -] HkUt:TRpǺ] tVԓ ţhQ16 +w_=_UNc $-Еh:o-<ʵxl,JJ- }\Sei%tZi!KwXQi` _ߚq "72:#;k9L Yrm.
P+ = :%{KS֒;P-5#+qs,)}+MFqj2ϴ4Kp} يU1贉E? AցedHR
KPRu}^hZVDU?7^Dl#Xc69 &9DUw *+ ,wf%֪7">nđ}>P M텵pD|c-GÇ2.˳+'^! G.Ʋ?۔O4oF/ѓVrw X 6Q4YW.ozV t'| 5eE@q_ 1n*ZۡU7Gxr^;#5mn[ӷ
FY
DSX9.EGDlR'Ne8b4}:zB?
Lj9rC p;%B^ae٩SM\W_K_ooB `R#ұ/Rsu(j%#i/ ktmuMOUi x Tf@
B"
'ׁ $7ܖK7c A8ЧۤJŢD"*'$.Зn/5@E+Q[&}Gb3O"0H
PC)Ŏv (EZL;-CS-zUGnQRƋUM
#"V0EM2LV}hNOqBg΅Mo FnZ',LݨI&r6F)@z~V~C-kUo\:x)'
>3OO"ӃKf ܵPCr$:6_Hh#u g6(PޯB4út%MݱoaB[auA %Uޠņ7N%?\^TՏѪuCPGN#7
{Ep=
LsEb%'4ۃ5ӈȠS$-bYOgeWԩjU@q}W쐪B5zŢK~{{ʻ {uSbAHhD?]} ߫ڣ3
%q8M94 9&Tx_ݨ&* zҚ%HA:"/XVXu!+Uk?,%/ ׃ܑ90U7Ň d+t`'{2S ̅u_^rSrQ7RD v/CJ1!l QRNƹPoMܶ!T|
4 d|U{؍nIQx:0d u36bg?M`b I0֤5F~;qqNorz̏Ѿ"B|kl# R
+Oa A]bl_
#I?V2 ܄n[R\ }SD5a
Fc϶ CL Zprx$\ yѲs/>4ӌ\QjCTT`*_(=h>`3י( ; %ǘ[Bp?KASJ^r^
pc ;{ /?sPOI[x J$moMQ\uo{%1|jM4Qs%Pv6H#Rx~r~KR @]M o
^&͆de:frLw+45BC:Q ?UmC6S [֝2=B
IULi` *L%,BWVm+3PLc˥9{h9%& ?ȳǧ;RUi8~EOa*, D;v)A9ڡq谆 ֝M] \MfQ7 ĸ; /=̯UQ+˞x2ȭbq2OG5L1ſb_㓲u5cc~VJ|x(G9^ љC
ѱӱh&۞Ci+KHx3cTʃ H%ަH H$G[h0H|'(ef&S_-U3<R nYTo) f -Th-k
2p6Q[,/o+ǐ *3dvb9$hJwQD+ 0mqMM` t> "nd=R*7iI8'jSjכ
2줆
3vE<`CdZK /[K! @Gi9i7!ks߆ Pi/Wx"E99'V *' c贙/=MM*x6JwR i"Ha"jZic{RA> B9ăV4m` 2
Ṫ $fl[do
+iG]JZ|f(PȞXt*F捖Ѵ߭ƄE=&EHC\˱p9d5JSD 8/ !)T1(̚ѠK%q{nbv>"Clo_J80`>|1EUDB /tzU4 24#{He&_݇q `ENw4=Fၜ? Ix'l @ϐ Q ?eslVd?o_;Xoln)b)*BϢxOfrϖ89zx ;9] ǜ+}ī6evEް`5Bu d&%4GZ ]"%7ӿT (zm>!r m
f?ərrxǴC!ŢV' )/|&8: Dld~%9ԱUBI21JI M2'~" O}_M(o]?ςqqxT2Ud 4Ip|^+=785ꨩGI]֪PyGzv[]2_3UiJ
_Ewen;sK./ax]j)ud* 3i`u`fTҞG9 |s)R 86iN(di(Fr
[襦4Z] B٪L&fHaD
@@ :hej-0T{lQ41f-%dM ̮Wxbq\ Z+ HD:۠OlĜ3hA!T !qX oy8˄
c.F`ZTuao-
1 [O}c|NMb&zQx!gvx0CCBP:A5lY:} ez)V \Nl~?//{,"2Kv_9A CZ3s T{< Njҫ7Ξs;+Z2"&H2ȹ"Tv?Mqh
QH5bi3^C+(XjRBA H(c:V* ti)=iЩoxE{箛7p$68DŐ- Y&f xV(,HZ0:)3 Ƚ© dBx̲]lh&;a
+"'#i$Í\d@`7 %U h"
݈wPRؕ o%]ȰsQ}09Idi/A"H#B*" "k(@DP^Nz"ϺmW3tͭɵyf@Q马B95j`0 $^[XQVkRV,MfRHI'mnnlJb
&4U*
N!%,bTrj50dN:HtYoh aܢL VrD(8 vAT3WkNK6=YܭHq`
N25bIv!&aDTAc5%xVYjVTijەȵU _!]+`R$!5)Ahda:KRX"]zvB* I$ KTaT ! P
dq
-@Y!x )
AN6 ΄Jd & Y3;-E8$ $ A4qT b"k+
݂݉~6D*
* ƁQ!!Ėܢeƭ-WVA^S V;ƭvOfz+ϣ
Ro&GRD4a!6$ Akم1Zf1T7A2FC5P̤1\L e4T
-3z͇n:Y8T@+l<,T=OɘsKWD5zn-{.*!i|Cb\*9$dS~F{ݓVXrVľ0m2 uNE[64ݾ
F겵.zi )ֳ:S9J ̪[1)^E9k}c_^#gݬ`l1͎s=d-jR CT)HҺQMs\SV.k2DFRQUE"`)QAN,Yp˖bIHB mxo`,%' Vr03fJ}D/f3
UBK%
pa`S@;<w ɂ` ? )"
"!D"* " %Pj0@XJHEʠUPZJA"Obȉ m$T
$ (++ 7Tp V R_ّGKS_C
3U,.H]5@z}7 f~u9jdGzK QH ?
E@U"Q *YR@;lzI'MXxh@Q
_33:2j ltRNkE+BH&cD b o)$RId$Ps^:hm537xX$$TWeE kEAr*l"$l٩j 9D)H0;:}1al+fm-AP3md/Fcq&B^.XHCl EDTH}F BP,)(0X(B"U
#(R*T,چX`(xWyU L${1U?BE"`ڡedbja#B5Zz D6N?+]b)W4Ɣ`{4̉UQUA{:eUc?Ae}rbOZP0 Twpv^SxLx rṬU aQq /DQSm8*/ʊ/A%=HÚ?ܲT98[_*p$Q=Ϲ@y T(4(CB렰T
BzӣyېMDƂ DKP5k]$ Z;Z#3"EcլSDBu >nѵ5Y]4VAg+
]|}nā<&;HCe$1He)E!T4T,bMpn^-
E 82!epimn8UD+@$Ii'% (ZJBEڽAV(J᪲6~] ^ 5CNkD桕 fC"P Hd.<=}d07mF;MP異`5,nA XDH?Ԅ"$VtLig5PaX8h0@vijTY"a+zXB(
Na\6C
3)``¡"zb!%̄(RQHV(1PH(
5A|Z
.Z,<Cg) KU ݸD! Y$@Ŕ !d\( x=zazkk
JLɃL'@Y5x/ʩf1QRp=76 U>()
4EL
J!UB,IU/p"6I[$PR
Dg1HVұJ6e0 !Czk6<Za?ASVu -]5vf@t҈#"TiVK)DZA{a;Mvg9ט|d֥¶A (Ű#ET7l4j mnK3EEQFU7ʓ 9̈:;t!V%jPkXԞ
B !
jH/PE@s{'qU) D V. |ON^z5 .^M44Ti,EKTV,%U5spV=^C JHf{
۷{JGTtel#6H2Z %P٩0e AHն ivʠѢkM)bM67_P3JwrfCd~U 'iPp JQ[Z_wTX! w8w
,ab,!42JJV 5cOya
W*HEiww2Ub1 =u.nIN 99<:ᙙ
:hiD]u;
.A5>,| | VUQP{uIo䉍pl`=߶֦s}Z}XUINY>ԡDDTE}RE
R?d(?+r;x
~A uM 1t颱S)NBy MNkcu]RI}Z蠛mMkAÊ=#Tko˯MyNOס}Na#GɏO W/
8r]\БC=R99(-IgTu$6
ZjU
Ekn]5Pj[B©P 5ίTYòXVԽ"vZhNƛ|q;U&_bc_YȌ& ?DX0DUdVQcTU ̪B4;
s0fa `CtQH !I]`p35J
ҚUR#[I(+$!;Ä9 K]$0΅SCDGWR H("IT-/q/h.0*%eBEEbnvQ ^R1W
)ٷMUXMd)H "} KNU"Wly Pm; ^*mJ`_^ܽhU/U 6u'`w2^HY 1< 2
ń˕*yfxpĕ ڝLb bϚ:ܞ{148i`|*A:4w2mx@ޣp
~)V|ϲhf]
\,O m,Dljy'ϰCBbTAءbA)` J, djJ,!dQl[کP `E !n]W *+0ҔOd5K(uu53١oBqh6wqP"Y/*cd@.0[`gM5Lz]\ԉUKSFՒ`{U7UH(UggX? x8Շس!";T
W)kW4"Wd3Mj`0b+:Z~݅ K*\pP/t PV/{<AIGHs ;]p ل` 'z=P8t zx/iC^q(G<ݼ(ڪRMI5̍
J
/8fE;VsUGg?i6t%j))eWsns5}j.v0x)rF} a>yU``mlL:r=fY
wH'i*:2JY<YǮ"
@}f< @r@(I<d66pd'x[&ckNd&f{L;~9gpcH
P0SVj
E s`䀮Ji +.= v.3 O5=9A\,PTDA``ʦ>֩Q(
Y* "s',R
bؿ
]5 S'xMdy{z3M"""&܊9BNBի ѓQV VE@QAPX*}
擙X
(XC `99(a˵s,P$3H PMmV𨠍] FQCZx
5 oE(I&:'}'yI֔U{j( 驅O`Osz$ !ǽ^L, _WhV=Z#I]A ~5Xyoql|M0Xu~K N>B `$1cԦEELMʤ,CAjԈKz(AQZFET3ͲӘBd!J,R{fb@ޓYg*wQ|n0D@FϊTw|:3Ҍh6Ory6$UN,
`lgʍl $ vx3XK?z<GT @IEzY[] @)mKb*EdPPY7+#} "
"ZH%Ed 8G8$~mIXDA1=d
! 3<˞H%TʨUR$vU@܈AEQ@Y
!ڵŮU@L 9r*(EB ZiOogFA:m# z
sJtbAW긌bEU:cOn7 ɢ8͠d
:HXsuS=ӓVHNBI<
q1̖6OP<8[ ~ƶ P^$*mg 056?ycR"N;
({OBǓ.s|]kcf̮ HqH0="98wCE.a{Ur{ma˜XwoWvK`{Tgy,~ v]wh |kro~{պE*0`HeUCQg Z!d"(Ȳ)R0?/{K vwkvכ |*e/{贶UOE7 jCI 켆V5i"aTp-VNvqH#3tJI*k ⢬$FQ**'Ёɪ&(9u1pK^ =(S[~%c d4WmZ3ɣ[ ȪIY&krh/~''fOdd>N^
6T,;*T)XaLPET`k%r s@&ܮe@Y9Gdь%hWeoj1RɶҊ(X=UI$9Y7spE hiЖEXKSl63UIh tK Tb5T!Z*m5?sNTcj V?mcءV
l%hY884_IUʮw2Z2*$=>k Bmvb9h}6j) ̀dH WB@AC!@CR`X) U{;X&)LAdB7/T),1bUT3wEY%) YE)
d&.R9f&W ,4aII)!1l&kQ2{UDuk۲S5[ªa
fI5Y(kzmXuTY EOԕ5}m2(|z s0gBDTe`eWcRۯ~0Pt3jALVAȽaC,|`tÚ I`ԧs՝sjB s ~ asg6<݇i^֩ { zz^?/AJ(۬}I,)2PgAOSߡC9?c{lxX뚇<<^`Y))Yz-c¼ގb/}bϘ볦 "ha^ c,9('×MɆlBarah5x̜:W0:MDQ!YzX
OcAn_ ql@YN
Yل,!E6TE]BLJň{݅Bܡ7Qb".Y9#i Hr? fL0,Kkoh 8ԑg OBɨӐSFrކFb 88ڙ,5́{KAb?^-Ç\F4bQf.c6!<Rk/ҍBC~OEe]Dɜ tb5j](3υ *ܠmU {fjύYaBв {J(LT*N
ϱuqЮRVKa&ҨW!ur1LLR,u)JdRABk)EȠ"(!JHk>Ca (
R,&( хH ZܞoϙIIEUp6KPU4ޛ`* "ooV ܝh~ C2B P,F1` ,b"E@l QB 69碋-o| (N_)4a_q57I.
E @ xt5Kș0uYh(_" W (@G
D@+" )h! Z@!U_PMU7LH
ȘpT6G堣.2.J@! DX '+@B JBCaz2@PCQHMX)5I z հ5H
+!PEȊ-gS1% ~?{H")v* 1T=@"[C9oH*,
zR{ T\H OM6 {
w\S"TD
\REMWwQNJ
a& & [F-&DYD5Re?,Q_Am72HYF (,&I%|D Éb" QT @f@m8tWn0'd T d-bE@ ,2`'[Ehcƀ@ )
%`"
zR R S F@c$l|uQT"tߵd;I̒I') YWEEPN @@+EĈ#P9RAO!9q&fI!dXt9b0Q AXo5$(T~dEf)l u⨟. tS!Ƃ"&EQ`EP P-[҈"8qĂoQL1$!WWnGm (vM2+4PEH(+((I *ED2eA졸 3C 1H`(r^''gUAwN_
MgӉ@ @zk= AECDhCY.dP9v* 8 O*mz (i,"(Ȅ1d&d'Xd(`($H:
m,ޑMD Ua"} B,,"Bb1Q# ~]J@XE
XM)B1d XD`?ifkWO R:&KIb}TgUŃ*&$:"5
LPop) (f"z=M ҂莾" " x0E +&2@Re^M+# j2!7b
0A[ eD2" 5P@ H>$f(;Y%EL(p"̈b`z"bHk!& (E5b]Sdj*vt`UR!v(@LL oE@Mt.
9YlL~pRsQb^jx ZN^ҁQkf(aƋK0y11n6B.d9~Qyݿr^ o%RUxC,utA2|fjtUQN6b`X1" `RPgRBP\yɜ
QV$
Z#!3+Y G핁9XN !]ЊuS5B`Q)tY%e`&7jօ Y83Tłn 8w )[+뵍uV吪n-=TꊩVjK45E
s Iqf,Yb8њKO) Ad~
B .{ZSYsJVQH QXfQ1RTh(Zz)
6n(Yj$|oc%e ]WB+r ֥ l.a S Sp2W? GÂqiAW9$Tvq:UL
idaC,adՙ Φ,ANJ}Rglp:*]oT],tx
)%!d0PY 8 q@xLU ,2(s{@&t
+A?/
l'i@ A{$SHnAl2yA{ Vx^ LC/Ë`Tڌ&OCR8R}Mwv t:U/UAJF! <ȇ2#dPꡥCNU;dd"$ "bPEXyRp
!6XH,j!<7hr1a`su: 0;ٛ#jMDډK*)t_vױ"ɘ%^2UA`bt2YqT(*xlq%$Rژk_`ihZbeV,0P5!D ^L4i VP%bE!{K&J% DE))@$R'jZ~o4C %Z@C&r-B=D.A2)O{
I!JZGXYY=F,X_@J@\ư+37 Ĝ?,@mssp!2 ]`? X}c<툥vD2R #PN
s9O
#D TBDJb "H٣0 x%a Y
PPʈ
amQ<>ˠiab BMPʮ fKГ]OTI
@ HL̄U")!}Cmkl/o22a62p0&A`)2*S $wʥ0cn # = ELhlDoGɂZA@Eހ!.n<|/m(7(npvx -
SĠNtu w0Wz0&vȽkYJz=$ \qqQfJ.c]t!6-
;& l0j$fLKKR"adWV*͐E,J!LYC&Xb] 0D:)lujE}DtcvI̜K\O.0S(fQpi|\n8J.q.!nɬ@B eTPa"CHRPUCj,D+TQ
DQzS5\UU%U1Fk%gjt,RVVikbjBU6)J4*[dCUXEU
%faH]3}1? ѥDwkô5 I|d8.C}N6Ǯ|R-IٔRẀ:9 $P{(P^!՜,ȶ ZRǤl"D 0sq'Q:^ΒD3pUĂ.N>"> &Dʂa@=" ͆"کIdN~P2;͔)t=Cs*tPG05
AY٥'i%Й!
D<%Iz" ?_z2ahǹ\}cR6Ƽ>}/D]tZaMdlS>b278_&'o E|C#YT*c
4ACT R0Rh $g m6f<7fUv j%L
~zz/a 'DXb `֢hB HKF S I8U$"H`T$)dS,f6NZY 1a
}>mcv?o̱Tʉ/53SU: B T
WS;p۠)C'Hy`qjWnUigB%VI,l.V 'I3$ljP z.F=Q"ε yB/O@ & C8` cQCBr{<1b?_V.^ vYnnڅ_z۸{; ɠI$?yL~H[T/Y.;$? hV {~n 9qP)<OC O?9蕦+M-4uD p & VXރ/IE р!&C[iOU_
p1qsCd#$BM|B!*#E@9^( @UAZe!ǽLX~/K 6r0ʦLyb6C!}3MY |,g%I9La.$(",F"* P
ĐItkn:,`e@,=!*C- jR Bck2Lk-@,U٤m(?, kM` |.hW[iadg/jdbe݅X{V`~)>!C}ekqq=ޣ5gmR)UNL$U1IԪdd3H)R|v'iz6rكybyy: 3:S Q^% w&X%4d,cFBv4T0@mɫCfplUj }b߳D;bI>I)8ކ(Z; A9,$w ./^7]s,Ip%w^KBLkĴlˀ#<[cc(9FE!TS PPZgߠQǭVF6\~pLɝ
CojNrSy }V]gi= %))sSRY 5*0(E(EY4
E5mG5,J`" aP* o_xh'<
ҕ T4y*mX-< -c與ar&p5W솤:i, uedCINm?+Nl'i<}6`Us6cOK00`GT/uagإ 8L zɈ(t$/;NQK, 6{5'ŇBibH)"*H#AN.WOi2=PFFE6*Ld \ew " k^i\2(!L W_0ki \tGf\DMQ ݊&})e:
"
R4#8њ j݅i6
l<+@Ab膗yB!<*&4E%M`5[_ !PRrX!W2Ta)?ߧ4RQw;QN!
P I*}zײRNƪ 4:kc: kuN:Z?p2`)6p,%K`Tմ,(~Z*m@= Zd!U|
XUxsrٲ_l|$*qz5u3 u/
̦b K&FMEsHǒJb7'I
/gL$&ePƢ
"<-ʯpٽ"1a-`LS&ӷ3]~1bm95Iu" 1TDpQ)\fe1bL2!=a X&~m
(L}șʐ5V2;>ZPv ^wQ 'k&84+h.} %Z;ߌT0+˵%:Jp6 l$o;ўxsm0&jlh9 V8Ȓ%S\:H>r7 "):e RRCLrlD(8ܜ(9zC fR rbҠ4
viEޤ(OW/cfWKJ 6h"2! (jM}w> Zc$o2wM]XP
" oNl s_>'::4,՚"9 *8A!F!8Jbv+p[>/S!NCu >5lU' $CX@2ᥲ0D B'nN jAA>'>䬍VA+ـZ,|WT7ܘ:T/Ndi
lhK`x35Ex4 nm8Kjt75k )_q e;ݿ*F!f*[=VmM+Wۇaj\ȣ*,U;.&pwcUH
E: ģ
h#Q҇lv!eom7 aU &qxV;)pEn]bSKSXIѻ:^
&R
R}p<).[\8,j, G,]@2TQHɊxFug
O5(; Ň 5;b5'
mu՚MhqǭIY7PP@^S,#JAHb*dMj
Ub &4RYDTQbQF(E(*vTQUdPQe2(A`ŐeB4X@0P*DP0Y"T0Dyi4sl? n쯫N3XDLe0uƯ6(bkk[!ljY]k#> 6Ag 4M V
W(/EG.ܳ0 2:/[ِŕSdEc[bla*H
1q&"X F|YI ! som,@ƏzlNaLi3k pxv Mj3bᇟ*F0cuG* <8ݽ 3){&7U}ǭ(i\˂ ގ>o1F7RFIl毛_uSXr6@IR^1^w0`VѣJÐnΥ?;|
nx:9 ac$ T.S-4ew WV#o9UTNAX@ 6|gkj^QSa^OюGI@\:;69m Zk[A"pzd
~}rЩ5'06 '*A6"7KIwi8z]{pb4qP
/EĮb]c/7Wو_GH[6q<@אb adN\ ݬ$ (Ml'P 6E;K{pjeSqt+oO;cAHVJaUiӇ|
eƒ ޫzX+a ƭVPZTn¶U11w\!)VMaŊ A O0 H. aqVЯ1ujMNj.JWs0N^@a@YI#%Z4O cZ͌ەFkn
C7M gT
tפ1:9JҤoj\Ckgݞc
G&vJӀƎ~haΚDT -
5Xc\F55>=Kw jd X6
I ClIuلrrN Kr-?ڷM1Cnt'a!c`:jeD"H O,AoCzNqv
=hy\;ٍ`GP0*ygEb&V(UM(w(!G,;yFK}R8XXD D\G6,)u?x[sJ:f?vxJ Ԋf 2D<.;.{
sV*d2o0C n52~ So⇩k! ό@fQ|'fmLl*a ҄nCMu81
BARց` @t(mz&uZuVHiD1_ G8 U! 6fgƕ XQ"8 o`~&ıb -ҽor~Dն@ jlC:Sѧɰ^R:JQ!6|?E08< djusa9G֦aс79StG>빕23~U:
peZU=dZ N]Nlp*/NJ_YBGY h)#pN 9YX'a҈y_1AkR S[[ڝowgU! [c-TR3?~`j0ȐKޓr)+&W0$!lWNR2}aw^ 'L%pw5%*"Z6WQ`8T.M Hty`a
?듂%A*/E ijlNJ-
wQl@0 ̀2{kd?hIM ^xʷGegi,gYd9$sER`-8V qyJ5 o{@ +;R.s@eT3{]^?R~ {Ow<ύ .ߍnC. ?z N*nr_>~ SUP/x%['gK!OW!0 I)iUH-ޫ ڇp 48ES" ^8nF`%7{$.&E]jd FA>VV]j< 2/~s*Hj("*
mKb` _
! _ |E7N ot}A `~md p ehm:2Va)LW{j ,w{t< gl܅0zA$]1;
bn. k:SBRb =e$ qS͎q[&h>
ڥ
`p
dEA& r'Y&b&2)ʸIFGF1X9Y sb"#p҂(ج1mNAY. d(6&͐$u[!)r!Vwp|OOZ!٪K !@") ZOSHTP&}!vX%W<63d5sV|ݷ|,D;4@@:+!\0!#1A{Bcɜ3.[#PB}&ëW-]jm[ -&tRK,l/Tnй)?oe
hT r R0}2|VNˋ\TԵx0gss7к9hx 1i1|%?+'>! dB{~2 }Pqu5 \x1W5 Ӝ=
n`b( uP cE|Ǣjmw #/d
h[:>(5w g `dK[uC$ } $&F٨F6Bz* w~CL ΅x5KsvBpeXMYl/e ֖8u i
Vle" '^t\w|rro">+-q+ l**~A=(<,c|roİ. HHSjTD~P"V"U@YU
YUH"h
CD,Q
{[dA@nSr O L7[|X_lCH=nǃkvӚ04 Y ڕ Oi9gV=:0 ᆋ li W 0\YzG!n@2§ ]cd(Q44Uۓ !S05 &1k
ԹN.bϘO!1[' 76p(
dfŠ +KagZ"$(-[ˢgkw+ֿ 02 yr Mb&~Բ n
x@\ 84%2.cH,>%9>Zj֤ @횢,YQK<~nncR3qi(U%k~ j@"y KIҽCQC[` mzpb8 YbQv9r'l+ڌOrS& ^\XKv;㘔 b=|W7A/y6,\ѝfx0
019D8@#e+ "y!&101>! &FN-2@T"pGYd`!|VhtY/_o Vƶ@Ǹ5-8hDId&0@ E"î+a733Bsfܜ 3 <ȍkW)6CˑO LXb*A _FpIvʕ 8eOh+ѓFM1ej] fN@nr'iHJlTrpd B10G
b}Yv8 k+P.^b ü6.o% 8vtG_}qvbMjnj, =Ənm͝ڡLicyusKCMjWxl̀_g`ϵVzv
Yu:B~~ɬ 5h m
[zg_]]ILZM;;%۳-dГ<ӳ ,dkDHiK`zB؟f춁0GsX{M]f{5y͎߫~+o > Ql6
#UUEA {xExhRENs]F i/8{DaCQ
V,ъPA*B°vR2=*y^>lT!p~|(Yg#_+vwBz78z~vR`M6[ j=VT:BY,HMG5 } @c+9 4,743_l Xư _J@{=i>-۫Gk ]?WH{(q'X]æ= ţQ Q[#{ϣsbh{/`iw9s*..(v4::ۭyO'^~
F. @ Dlv yݭO;y]0B)_qe#- E>~ G:"d^@@_mkF%`9W x-!Znܾo\+gu|A悡0B]Ӣv
3_Gm">ΠuX'35~pa)q 4n@!k>
TbfAk9_ws -iVoAAvOcnD$5j&&fV+سy7N_ENs A_M\
\\58,v
ijH[Rڕ} ͏ki ƀ"9 }K'`; X΅*dR,e٣ 4 cw|
F QsLP+4˦|x> _8C?Ap(ٱhSj Ɣ??|HUNʂDB:Qѓ<^STP'5ctJqQ:a 9c\*dN'$b`Z>:2` -]3Rry(-}|#-19kSbQ5IN
:u:5e F(,s8H (A ed@ 䮵 [H6T' Ѩ8"#
iѢbC^qnφy`֢ݹd# Me59?g|PiL@K\ɰÓb\c( 91SQSb*EB
2T`(?R?Y}
JEEiK.˶={O>*[x]Qp]jP ӑ0\FAHqBjw]/k@TbT)8.u˙+(,ZA Xa-@G6.<N3܅I .7x (FDp,PNeAMdp./
INEHED2[`lڴ"VQ@sdBK%ut$ sxKFF2>W?QmF ;: . .I]{zz QnVyn+ d]vbz
ecxŚ E-[ #)7bR$Giy 5]I*uƙuc;h- #G9/w: bۉֽ_(C:s 8++A2' NJmKߗ`S~9G GȅzߑΣ?M8r
]IwVR ne0J10@(dJR:֚狪~b4
S_uChWmڐMS * ]g^#dVQPz2[`*5mVRbS2 ݍC{zO.AP3r0h?4*8ࠐ 8 _ʼ{
J
ȇ
/G46m== |*u OZ
A7 GQ6&"[Sp)Ed_+Ǵz"~zGhz|*<,zڟMUoSo9>g\掽5E{_3W30f$bi8[ ΐ@ P0
2ɑi 5x{~7xN 슻6
!oos=n^Tjm*@M= ƊtyF lg)z+l@]~ J|2svovEkIΦµր邚.{u{M qB ݤ=Z! xaV+ӾiiH1@= {l6IB1?N1血gp1YɗlNDN ȶz/aK 8m`6P~D.FZ@BD9"PI1 tKCŎIs%tYdLM'pEPP;:Hfq~*#C(Qٹ39;7SQwR*PRPT)%21-Ḻ@K7_fJ?=͟qO H/+/ MVp"G m([. .B$0NQ"
M?Xsgo*Dy<W黏
OkatQr6!NY'+`Ǒ;/A1)rN'ei_ xj̒d WD{ԕ%XzD<? ~UmHppEBz6P]C7 n◢ S9hցڽƳ;sV]5'kH'1vx@?*:i;~iTS{ ?~G75 tp hU{}UGSQPQu/'U0ƀw&۾eF9s|VWCQ;Q[Kb. ^Z!(D o.<`r/cxF@>_AAyz >
^*HcM~ۄ*4
w:= _6O2'cCuz"\6:^НCQpO@j ܶ)4{ 6 ](5$Xy3?p =E̸# GqTb# '0СN8CCتP)7k*ygԌFd@ d fm6q:lxvx>WEqP!<\j/^g| (ț*y~*1ylq)KC-.5Z&͵gc7j
4]pxwV _ȩLX` n[Ռ6
QC2̸djATEU( [[lx`'")3_3sV$V 2¦r[/:3D"F#4Jjī\9 GRY }hb.OT<]dbA'9 F ZC;j.F2d rjC*gχel dC
&&`A$R@d E 2,v $}:̷YӉ.W
Cπ=)pJ o;>E 0VA$X$#C_K\.1v(!@6D= Ȉp ^J[>OO]ɀ tZFJd>mU ;ǼZx1/C?kE'g0*;`[UvUB)6lxjW9N(
-+ӢQsnw{5h& &ҡi&X R~@W5T|nc˴D2>w^k. ~DzX=awS&zZ ]qz eHkE-}sGʦ{*aSfb#w˿Fn{q{HOJ Cw6tBYi sT VY UN@Zb^@ D<Ģ(&3-i
c<:fv#;p2h MYb# KTpo^eZST>*DU[:p,` ~WKg>SK;g|=Fʵ0CrZlA&NN 4nbH|:N Cc~< w8ΤlK
Fe_y7@3"
JLƟlOٲ7E'CWgtBǓ zΧŬC 0`D
e2
6jHrH[{O_S-"80Oj7s!sq_o`z^%1z[-#PZ!@_~пzQ>tɑa$; < ]VŊi);d wǗtl_9kE^S2{XH [_o64sQO~x#=,z?}_}9K';;x.;H<Σᱥu^:>/S+aq|@8 s'EO.?z((W{yߦ PGE V_|-_$*ƦZj[@6 >dieuH"$s> rnַ6Rγ ",aŲ[V ۆ V>ey5 @
tABɻ R
@5"KGt$1mt5R2W-GjR|f꒓Z<`L5h ATkUfVAE1Ffbۭ
DNG,cK/5Y(Ǽ־ :
A&ujv}`JD B3?]CȽ2<⇏Ber RtaC1TcY9YߗeBx@%
d`O !Ѡ
_;\9h _;5f'Jfr=Mc_*;σ$\4y>^._A:6DD \( q嵨Y7ͭYSȝGÃRɆUhfȷWyίexR&و KZ@{SD TR=Jcq'?-hJ\>pKATL-QqPJt AuyyH3å0oJdP ן4P \4,^ơz
c
sp e}i84
4+e Ol
Πk=k_Ն8t %4:"met=P!afM2 UʽBRzWᴶru}DZx?W
ӌ=fx*Ʋ\kQW*Dp
$6Hrޭ}^o2Fh%mD?YO9*eSS@/0OÀ}ez<|W h"wU
NFl~wJ S^e7YCK
NݵV[^IA0~-&~uPOd7Rζ9)[p3W(
ĸCt}^FncѽYGPɝ
(B ,*T H% A\ygEd| kQ;5Z~T]g`E Jǥ* }J9B75DD;}Wf ?_IK:
gE} 벡= afWWRb97PNJ
hdz
MƊ lMQj_1Q7e<؏>E4D/1" D%ءB / 2ا%'9( vM beD9H0 Vf.+ĤJA7[qRrGO#[nQ[6ùXPK( %&/#z#YY"nĘgqo .R e<@Y'" hYj
" @ة B-If("Ö"7ҝwv8O-A!jE|d!0 1bK( .J D @gyQ3u ]TFGӶYV98x=vTlSbW EڻqڬWNj !ՑFuEY%RM`jljg+= >yQ.7/IA~ fP13Adc"!_ }$E=U~_"6AL!ՠ Ba {d!~
i;R ,~̟ah/C!bx O5Hc ( 5@y
ˉ
:g`^f[@B\^8b ;ämiSYxJMA^*~
79·I쫛mgu\Ϟ懲
]FOxNWzfsɐ[Jqj lanR4lP;5]
~ʹ" J6(Qtz?i3} E"\1pLE L5 @ zO͈`Ȭ dY3*3i>-kO'e@3@A!)9漂iԲ#j!ύ]VL
aꏻ/QB%Jl;
1ZSA.9UF SI,up7w~9- PcV? ~[8ݑBEhż5[pU=P]CTի7wʀ @? T(E :HB@ oM@ BD* 'W؋ EzDAQC{V:G+( O*܊v/5<ȗ+l +,'ab$xu0D+;aSqV* Cy]]Ob #u!HmR|S}fS*h,5x ϷI@/}%F"AU@QgĄ!$$ߥfz@9Bq} 3WVlY8|=z[ڿo 1 Ν70c `"dŲp58 M UxS\ @Q B۠Zا ] :vy)6Zsng?eҷ71T;iмz"˿ m0mɖ3ڕgW}EH1
״`|g*OS!@^xH.SԚ
.
aUN3)(o:lm F= 9]?iN^ 0`* $^ UsZ@O~?ChGe@yxY:EE:<`, SW7S?V o` z?*m=Eh<!=V@T,d\G~9#&s(UR$P." A *v P8"B wTQ;XQS[u$VS2.^wnN0`ckL5
ooRb7 ؠ` PX$;/
mig0sCq@{YLR$jcmJ! lE@BuNvHYSDV@2&H(Hp1Z7 yWߡҬ@(825lPr L t`ȯf-Cھx{/rB*m7P2"}9c%3L9~Cg aY)P /:ت$ŞLIU+*Ŧֱ`3K R HRLT`@RSUS%f 2
31s҃Z;5≳β.,wȯ9<9sjA26kˬQLcoB`[l k˅,!CH\?gJJ_}t[\F`2K šG(Q$Ws|E@c#
Drq`o pO̤' PBY/yv(@P
b4HCq,)"ۆ ٞq %$4HaI P#VV j :4.T!D1EabwWUvp.MPGD06'OB Qp~ Hr}*(堆" [(qOꅱᣈyW(Es 2V Z: @ " f@O> b T
.ʦ{aм>Ȭ mKFՎ,R0Ī+*Y(v xf8nxcj!Nh9W+kZLɬ2RY4|r"iDhtARn/@ (iLL /0BK9F}
\Hulz# {>X0gh88N Q{n+q;3PSG A[y `ӊQ mq6.4ԍ53ʈuz@AiO"<]Tru :|P"H \#"qR! \gʛPR_}RcChme
%~ yMC=ד9Vh#Fl>G:?w4a~LƉe #Fl#w
DJ3^*[ RYP4( N?匄3WȻu&m>Axl EY ". EFBC-Kg +>pP /A7gKj Ն*.O
QjvcD[[ƻ!DFA.6tN: ܊`N#2
|XdGDqT
PCE>6ƈB?E4sw= s1:
B,XxUGWNJPR]렟 `#A6(
zM,Qw@9' [ؚ=Es jVUr^w:^S :0X8'TQK- 3מ^1 !f*(7h/TR88`'i05"g5 mF]#k 3A`ZUDX( 1tf
k5 n_ CTuq2`G[KJgYmKQo9VF, )I . kaau-ip h| 1u8v]sOѹ6
dw=6~K`
cڄjio >:C:pk0
FJ^؉CDE1 bEZ PւLi?lcI6-V KVL0Pw5x
R̘"SLD:ߴ|4zɳuXmEuS
Qc430 Sma s 雈Ɂy::`| n `I`o/^( 9&UF,Qw\ìf-NG- %5`Aj"OB7F2J7*@[Ri3cJ$ 0 1T8M*
DpTTQOMmq݈ۑP`۱iNNx*| Щ#{ G9 @54"/rB}=w).g%G?0{"~
I6>闢*|0mDE{G[Hq 4
栕R y*2 PPL9r$ϓ א堂_A?"ߜz=ty1]|՞}جBR t :S$rnU T Oio}cMj#dQNUZ4pСwCY\CaOwr7CuZ Ec= Cib\I (D=a VSA@wT$QGbTnq~"+T!ȇfS8MW_'VH|yDdv?ՖU+ܙ1`
H'3穓ESAO_'?A5ySs>,0U- <( 8 EA8wI>@ jK}yw_FGT ^* ]0RN*rc @]Y tG /W JW%P?۫XNĔ] eReV"!jƻ5!P2кђG
eTYS"wd!]sTVȅ}5 GzvW
i3"?P_St:?~dTS Lj ,D CWM\AEqʈ CRQ ~U Ø;>ӡ C4\+(hXvxTy|(eޗX& !e3dڥ#-zD[ F8Il,7ԃo ~hhຏ ]P%{=#ê#XVH i[kUBoQ4Uߠ)`܊|L/!˒JhhDW` 6pL|j-ʅB<5Yv~բ
~ek\h@Ϣ~ɾz ,@; ZT<>7я gpE> &IwJQvq_fr.v}K}IFH 1
[3& OX-` E
Y9dy\-Ti.eVF|rO$: #S ݾ߇oCeLyvpcR4s B =Ь)] KUB
bQn2b9i S! O NziƌotkRi w]?cĽ߬ CبNG]=4<0G0a Id~9XE~g.g/ң O1. ϕChd@/{<|uPOym~}4(n"vMUvV|NS頞V
{e E?Ȱ;MOnԽ8\BR*.Cbq
CxkQIm1X R@: GE\YSG|<XP'b" wyOɄrR`=zQľ1I $p4!Gwurop~r>b9->KӴɰ[Fj|Akk~Z^1TO+U63"G 65ZU P^']V2p8 g`X/P/P= D]uC_ 'ɢ&us@x90TE[!t݀ts C,
6GOy {vӧP\( DK7 DžqUQCS,
=I"?ctS۠i^zBg/m.v/w+Ln;8FHWwVXf* %ƅRVY\#><6U%}+ aY%x`.]a` O}(=nCPQ݉Ӗi0Y&B#( Id`dX;؈`PZ٬oEMΏu%թ Ȼ 2Z>7hgFu%FW=A:sU=pc:^n(p>-|]t|2}8}& bȃ4l\Uu[j8seq(}SkF |"H'>\z2 jSِ?j!{iy\423Y #xr:"x:nV Xz id|DA8+םq|]
Zt 䲦I"7 xw)qPL#.GS B#'TՕDYhn:9+Lk_8lGJ`+aW۾5x `Ao| j!1V('Mg UY)*Fuc~?D:Ջ,kB?XWi/
O#t~MI Z0?ً)/ɽg#W _O6/L|JfK|:tP=_Wc r5 種(_G" ie{?ɵ}8_^j@<<(k4y wmN&"\|?]b$EwEWP/(F khػ5œN[C9d8@c$ n1G }~ - R| }R2ŞjZ ^{ۍ!ptJ22&M g`8oZ1ֱ))dx
`rB VnI@"UX<(!ciAt4ޛʦQ_5`]8fb> yq|ڲcbb#% *yۣ oV Fm9a3Y28Q`Ea? iu{R殌+"!|-Ha}A$@D,m;vN14^$:nC'kndC:$H\ fueb?sujmj$jR> #2 E%Q0(`TQV"{0yd`;fXf&.#4Vw/]Oq4kͯWv){(tR 'm{;豈KKgRRKAa-tSou:gQNvwfq;XmVJv9˦|hخg/~ʎ(n% Bq˹s4hpD4 4pDG҇(z]_Bl-[3B߱:$ 8 !O Sb {R&}"0iĀ -/( ?IPA2% AV _| 0[@&@ ՜\fTEL pTe#muD
cYlfPI#JdW>!⾃sPr: "T+Q#!WeXh;`_?CT%0Xj~V JfJA
G ?#P8uպ 8$ւSUsnb: Rh8tDe
+d
#A1=?[VM6Xwd ,ٵ6Tk*qxyW..A\"][pE=H"4",QA~;E*GR1:Ɇ.YPJȢ.BaxK`aX ]
z~ژd AR*:Sqfq*P^{D,!t"D)lzM
Vzٽك}r}]nadOl 0nUBWWi>w
D nBm)*'e#jyq*d{J:VB\a]2maHNs9?ild`vc) , L!gR\2lÀ39 +fGL\vA F b{c
[baK4eS)0mЛX G6c!o!M~`%! %L F KfAnuGX8pH%s
d sX*.UUS~y1*g$mj}fx ) M hBiVHQVщ"1Y`TY-|g}yx^E:Aº7qGvG1MۘlO=b)
JQ 6c ^ <T `~=^"<>'__[v4 :GdE=?UHU T~?R0V}Tw- ƞeGMTL\YY%` 6&HdM~@[Ղdu""9 "4tLjz 4i |kBdLi*Ƃ~ d.4FJ-Re TV\ ck H_ v/^(slqA]fT<!\/-}*r28,+T4ȖK{f㑊0uق
k"BPA註[4%؝YgP Z!NA";!:KgU,vRJ`F-W {w6lL*㱄0,u.s SMQADEwj6lX,W}vhٝ6KIbyj $XıچKU%Lv`G>˂;0KbC_`ゆb{pU\iD?Mt R 6L*L, 8Ԁ`"1t{
.SM0onda[ヲdsX($K<:1"[bWD`~}IqYڿ> a !T)mUdO3ESG`tQ ~'h{ M t8Xy>&ߐSb)c/K廎Zi젚)MNJg>;g΅>Tl2½G.tb 0j 0C&pgi\,aL_h Ń31w6[C3XЊfkiMV8ors-y0-OQ%+˽ *q1@+jh&JLP݃D'' U]歂A/lj+WA{ N f&)+}Mky k(&3ҝ qiأsvHmg\O iL]窉1mcq댌5Xu/6} 1
̻DMwϥ+^:8,S3l,Y}=qY-F:~`+T7ܞ+[<,(JcfZQŠ<hAG;!bs.> f\[p][bkӉ J3a%Q5svmi'>5 Qf6蚰m;_ږYwY
c]cD$"~Va(SKT%_C{ <͵_EMT70W?)1֢%-6bjW'd8Q WwSʚHMǫx4sSބN+{5 C魮{{Gx>Ŧ/)9 F)`r U6pSO[
Dр./Ⱥn.~,*: 7s/_K :d9;a_\NuJUEQ딑)&m,p0)gqަq
xmW/7[LXiE~s k,0klLtq3D[0xx
'UM c j}*1Um4]6Z¥Eאyaߘ$ #f6 Jō.Q'^eS4;7B`M=<1 O!?7Ҽif`Nvil){cZՄ -9lB,iUwpYQjJv]@s U;!B0LLӅ5QEm.yV=`c#$!߀R0u yin]3ś*kh5&10ÂT0S0AE FP*`Re 5ծ0z>J{LB "8B2ylX*(B@|6 R*dHR@Ҫf$G[̖{vm0ϔNOdk ]LKaQL=aՃߖ4"BͰdH/,wGlLa!˥,XI9 jݎZ7Zlf rL<Kø(J|ZPBfXWXq"c`JZ-tW׃ Q Y_CG䭍7)8>^wLn9(I5.jbZ}櫭 E:֝ Pa['B(%FîZ\i-MKUïF
CW1T^%)3BcĽɓVr%MhX`eZ뚃<]'Q^.;TgH4ԟHz()LR|⮵
hP1BlcY*U {ìV+J"3 PQMU6lTFo;Pp"Q5+ڶ l<3{j}GVEO
B(I" R &RC &6V ؏aڂ O窩ea|NAr59}y mǧvZw_2oKG܁34ÜIJ's@ .4݈l`(cU|vbDB\@wdOܩw^^PGMT,*$A"xp3ƆWPpy2Ơvm/ة;H 9! uP# !2"q
i[ON6-Ϸx r{'R7P/ W R gU =֮oj1b{&MT4"HǠ0l ؠ &Y1gs .z"RS,4VVK ӋLX9 !uJ0CGa+4*u]OEfuKfAu3aUZv@OT3x(yhh@$(a$MM/>
Bܞv5 L8'8ቅ j7D dyV
0QeQauS5#ɞ|g R
eXc}X F0) +3+ydАʞqp/5T&=XO[c~L+ǓD%\X1>hK qƑ ^!Hl>nL7Sa+RY5^qd^=GS,AHܧ \8_ 18BOyv§ X$vV\ 6Ԓhj2 -5# *ۡK<9b?С:HjUT^V"$B-\Т5T3u=yᄈXKO/5[20EM2˄yvE(Dߔ0o>KJ~23LW`SAL' NF2< LДgLMP1-n
*ӕI"s*a ҵ=EAcBZfYO͖`㬩Մ6YpnX)hDh\tCR4 IB! y q8zlG8O0wk
c=dŹS; :ӎ!(ZgP,)Vu(nXlj)]5Pv]m:ƖX0]Uʘ[Z PPD.0M-4=)}
r]e[A_u;Cf=TCvD(w&̈), (\ +)ދ-S) sڂxC 4Ug'XPb4{ґ&*HZ¤$ u?6Ybt <ƽzU$^.!;| { )O|akafB\f
[ ?snNY|^ry҉uxRx#(|+O@CÚ5ksRmfr s vFH][
ckU'VݞZհ5\7US<ɰO H!!lyYPѪn#ScPsP0Y XĪv,BAt B0Fn.4ޱH mL
З6H$I%yǙgR4"3,u-
,n ӮWPB ԾKȌ !O]6yls ߿BNS\q矕 (xx64 -Azj8DxCIe̊"czuX3`/JUIiO:zXCߔz ʵ$V "C&P +SdF% UZV?,ţZƝ4 0BPrʅO2I ^[z
] ]ԅ 5> Ջf q-n:fj3YSYurhhԗ& ͍r:1U!Sn=[Սŝ%K LA~-J;x-3\8RAo[NSZr7!ep/ceQ,
!Jo6*YeE/vu`9yS۫_^iJ+DFBeQ:
^" \֫.c]=o:Y(5_;/czϛr5b@~FV.N$Ѣe
a>m̺'9w\xqdQ
GG']sfg6tkԺdi0'Xꂭ%Cb
4f \b(KfmT['ER R Q8gq O 'S}Z&4z{xT)+wSAri9~䵴ݬ=5yެ*[3M*k). Hel+ߍv>!:?@ tjѠ5QPj[tUڐP֊6KXMBq xՁ\KG':b%ANRa:SXV rs6UF<ZREIQmACH +LDA5hXU6jRޥ-{ZٴDͬUkRSdY%JEeW-)e{T&Hh9cʮOG:"~ ۂ3hWm .sQuYaZ 4xL䖬CE1Q )|ٵ4pQ'*̥*PZE̐
MCz"!F9#D(! 2kuSξŦp<{VrӤn>*QKG2l.8t0 ÜEk2rZ8.&Cq(`
bBI3췒ܑR\}:#ٌ-f*f\J K6(O@f S 5 +T?UH8 0A 8ǜ}e5d璜]wfĽ5MӅM\m20R8ΙlYVl6C>+i
R3
.o=%sřgքJYN 73eLڛK =T*R( ů8,\ސECz-bJa\jԤJ5TZշ. ;T`Q)\ ^8,RN9MqɪZ:*t!J:46k9FMVT % "Ӆ L(8b(;V ^Vd6@ 8ti \]S٘8pίfBK:8il1>!+^^q,UZ͙nȵ5 \ kPk
OY5z+X'
3ׄ o*` e[*pN}i.M(4U J L.5V-m1վ6
yթ,;+ C T50%THssN 4(\xi
,zXshBx &OIDH/c69Nk.1}
1I/ !~A(2
3gGeQQRpBcP
I
jZ"6J֍1#[8䄘)4U'I\ hf PŃF3H =d{vn -.DY[bT:n+pU 1ېg])CXSۯC߁uAf(EpfMGJ o,q{B8b'@Ә1fy6((NRH4d`*o ӋJvw.ڰDk@CNTh7ymeLZ5/جHW t]68Ee
١VCŬ-Qe+
s51kE7|^$%,@-G>ٔI(2aj5IlsxKo8DrDhDE+^ Q%9]m݉bbwEN! VB'
5Ԃ@UMjLzkk%Z}M![3S=-E 4EKRμYQ^ ۄs _Nˣfn{ pymÒ"|~?uNp;
/0?=z \Ϩbfۦ[<֖|*QA&
H@wv7[K\O^
F$
Fr7z_=i{k(Y
G;HZJ_.Cggv?nc9H9x;xϰOBQb;u֠|K؝N3N迷KGYB'Eud?.g[)>]t9l_WunkSx` 9ڿ*2Py26:n
ΨlTWv4`xO"E7글WD q71>I&k A
F<+!IqI'*l-el@o,Z5`]B0{ dZ07c+J&2 ~}/MF0Y:̎G\Cks FI .{^x߬Myq1DV}ШNVUQvKx{l
C 6qYIC} Ld:Cߍe"8 C#Z >$//}2HL@cbXvvE0NWe~pFYg8.fCw"Ɗi z'_
A"x|,W.d&: Eb ڟ\,r3F݅3m5p q"v-\F
%́Om2
B C~wrYۓ,3q5GUcʖ%ʺ$ "CD$NRxp 9֤%^&q2?Asmb (R. pmwX\(9 )T "RtT):: W \*ϳ̱$q777B᐀(`,jV+5-HFxGI_/+OIL]1Jv&(okeZ%Dwe^6+6uF3!#
L29jAeghJ=o\Lg@:UmÌ3" ZG) k_Q\*,L*-IݪVtQ ENF̺ˋ$Ґ9,m2-} %,
d{
KQ$aq4/,N'FɁzD=:6Xy:0GzM L5X5@Sթ§ZVԖj97jpB7z,ABb$Q xrYvHѧJPA>'iio2xH*Q9f& .͑6Ʉz'96Bvs(VqE 紎ZўYKa$㜂o Vq6E]vqv'RN2aŁ 7y8.P 7[g"6P"E}jw_0I-\,.iH[?cmi>rJBli
2tcݼbo-n #21t}G| ;= rWX4 YU`p5$NbP
G/wQZyǶ# ؇ՖqHsdé7$xr&o i10~e?i
uLJI
|De>&GwH$ !u'Nw'%feA*'ﭫe2c+Tj OBq;˹ ҅a)ӌRWJ֎2b2C%l0cńL1db; Kz69w 4% b*taK^ @&-a)['Y/Q-N'x\mIq7
7ˏQv)2iA Hv2285*<2"]\;`*n8-a+lwWh.w,y(:VBZ!76lueT,![;6Rsr<7H"
\'xj.\}lRX5hf
ک[+ynaVߝ= jXxByq0 _ۛUT_i0fm'X{Wa NF!1ÙNt StřG[+6~f/A=M<[,1pi GYgM^v߱&r^o6L} >tp~=:g
eG/nH/˜oÝvʷQ _Gb]Ė{1k bOs-vq $&Q`\jiV_lY/g$'}qpjd؏#.møç7Oe2
Ib3:{引vN/
n!EXyؖ縔@|oTa韜BǠ6Ɉq| $ΈVY0!qxIΆ{VxWk.
i@p!ɋ l %G'HOc5:FԚqמhm8\FmlD7g'Zv]]rjmvd0.<|,NP3C=12lZ:
a0$lOa7q]!g N{ @}owze dDoɟ#O7E
) C
X ] 8dc6\s;xQ`-X$
Tf@_<
$ZKY S,"Rue, qQmq'1&zs FSy
Z$b;VNS2۶&p
VxZm0c]H VcIhk1 D;n6U Qe+:nr1ԩ:' k
5fさ#`c8qj6
jO6N۩nˇcb&9h"SQœ9Uz6, m财oVS_̠HP:k}.=rp Q`G
&Q;ByE!%Qn@N=MNF3T$?]`h( l混Rd/c)uT@>TVpMH=ڽ_6}({ 3z&=)-CtȲSRƔʄF I(6O%-+YCg.1EcZaekK絴y=,Poנ+7Zfz/}'/ȵ8 J7|KUR" ǚ` ?38}ˏG*P0\& w#/ ӒpDUrH
Q`~ˏY`lsR28ēAFڝ&V 8'1B T=tW?5t|Ҟ]VqOTCsOok`@;J`> C@w7Q \T TQ( ?4^';^un~@rPM&nT=G UDw DwKe>8ݧw9mK]jdL䠤fDRg Cuh2/sw/=&|ڍ&GëS:N[}Ahƅ~3- vUFG- (f|<;8/r2AHYd5GIRAU䵷 D1w; {kZq!wV57jNgElsqT+ B (x++sԨtCH(fA TK,
`:QgU]>tygǰ O ] %lGCY 1uzaE W羃0H5CMpNv@I3(.vh #8dE lq;IXs6 iXңj zQc`H*9/Ej_JM\jXr`UA*ڢyoGE,N[P*_SeT>-v RN{lՀ:>uf,Xiz z9BU DL .N2L@=$եUF?1'D :#" L`p `l` L'4iC_~ #XF ^I `J!0? GhAyQV:;_`C) .:HAxjS߇ܽYN'ؖr1W Y;Β)Եq3> s 3^I駸}$cP{66~
їQ@VwT>X gKR~EozSoW (u ˝߁Keu03 ✔ ԹbHKUO\OsUUL:S=O5yHx(z {;مc%v ;ݵӞ 7ˠ <xI*+ ʪh d][;uÆn N*<F!#g t
Dbј&"vO/ѱZq*
N 738drCǓ 3* d`w8ԸAN}*2A,~%ʐF1: y c"7`E゜ ~:8 Lߢ:B Iu9 }zE$X"
B ǕHЌ"y1}<;?F.Q [ ?{Zr\|Ө!BFIc"(?Bq
1p5 a!Ի(굋g[[wC&G<=y
i}a>`*#jz w.I[^P_^jn7 =S
Jo'(y@mRݶP$ hRoRIًE>@͒.w;Cc -ŭFåzG}Y2o4H S-xkf Vӟ|:v%v/5\D7-阀{2F(ʔ,-!H &uN CBG
>Rtl k 1֣oUEK _6)d?SN_W=Mknwޢ?͵C9Tp&j?*
O\~R_hAcp1ǒ?KTP>jX7eO LPTXb4%[EݕD 5s /1|rn|%Q59uʂh 2ӻc@(W*iWP!g dUmop:Sǚs29;ꂤTbꠥ!XT.$<|*<>'q|.,eȚvl8(S
wNY e0th| kPղ_x]O[ kPK =S&u"5'%c5@ "@͠H*Q}6 -xC:D!-(a` V(߉[hT _:MR!0+ ! he¸{L}uQ ?uG!XMF%xB`P*e- H":S#s[
4ܑkUT\)o5Os^Wy
O80T n[L,C x`=J҉e$=˴oRgPCN7O* OH6Xi$ASi|duw
% B*9 dX/ࠟSkI[ jN .i jd?r*S4 2Z
}maI#Nb Ɣ{3:=/,o˧DH Z 5xT˪kF"VNSI >O9r ,/['qZ}Fq$ G?g=Mk;cs3,YیKV
,Re3W~Zc;|s#o3rҘ d]WOzyU A}(XD=F]D`t SN曷8{mebH(
<~
ujy t5 B T ~S;ûK1ɂ"R+eŪ ;u G-_K }Jc{T;5 5< D
?qLx G*`~UUÞ黫R!?@UI{G((H:U_IJs[n 0pmB|٠|%X#Jc t俘lpRv %XsI
Po0*K:PcQ?+< cb^g $ r ֡SfB,ѓƴ7̮av кIQQ r26}P
ذ/=T~4MrjIJV&" t2!1}揧# h#R'}P
P*P$ͩ JNӘVlq_^|]VUNXT&x+ђK^SmVc/'*W8cAj4S8WhMk8n
ae1z4z|٤n8V}B
.}tA켛sI7{z#L+K*%> @½j!䍐%)1Wk$ E>с ӒC0 > @bhȏ%_i}Lz
~:kUʏ;^ϵ<:eSR&c=uI 1#0vfȁDQ'Bm ?)Jb=@s'(noor
W
B@ hDߠ6x4PF<R /M]
=ZҤ2Tݤj,C:dP'=B[6pdfm 6 }562 < [u~fH ,Hs <1`{qczaR%ؾ23>q
/9]sqz];*BNP2 51mxR U< 3F\;i7M ع"%70{**Q%rFXBK6 /}AߨO鰷{o5
opώ VH}יg7ơDwCKlvot .N;Tʘ+dwڗ*5=ܴbx}wjALN L.0̙9ۈtڊ a`{;g6`v߉\e# #焰%x !@FDJðC! xhe+g.1L&`R!|D 4-֨b蘫F P|~szA$$B⦮@ ,̩p
)Am_\Yztєj$M T^Ifc|p|c0Q N܀,6!5W%P \ Zl ;mTUX4x+B.?uh!P"yS uF GCE q憢.#~\@ZW1H">ޮB!ޥzx#U@Y*fF+[ޱg?cta Fw.łCHZ=
OsC=m#5?Ȝ-
4Р=V'*eܲrɧ1TEspY@гx9{i d')QbaIҸ=NluݺSHy^ÜchQeqIk::Tb7V /V8
u.^Fs);I0 WGeDe=u}U ev"A.:e" i
cR jc*?'p1! 1 S-]* ˰"F/h ]%ZF? 5
A?,C}@5c祥vL0 `!}!ƈHL d2wLK[ b[-;)uS nV\2T4r @l#pjkP9 'ډh"
"wd(T$աs e6KKWf0Z6Ga .ίK85ՈVk+:4+b?U ?'(.HҪ*8}U'\)0RFI2Xb9O7ccx? ?M2obˬ yMk` \@ i\ȆJrNdeAP Иtc{[9ގ O}}-Tݏz{Cˣ,:J o{K cR*!@qbN=Z
?Z'
g ESQa機+EqBdž#"ydD 3B%s; 8 0M;ڋ/*q-U /16IPnQ1cb +1Ȋt:ZFECđ (ud8} *!c^ jqE|JZ)lf~6gu(3;T h#{"Wh<Ӂ:q: *$㍽_p@-c꿻ߩm :qj80S?oVnࡋ^kkKys²`D?[8~%uaY^қ։E:/Vz,D 0@Hztk*R Lw=sOu:(vshEDxd&z&14*]Y3xXJ_Y\e~b т̣=1'砀1w BgoZ=BQ)VwtO)r@a!<0Z?{O۹%k
夅) ,FQ>o [gܸ 2ؗw_X8PAg, Y5K #^!c t~eؓ48x &v>EiVoo>ō
{gYW&INP0cp$9=e&Q awC@JM1M37s:@0y-A({s2 VaMiM92n构" vJ<뵋~6>7kY Rh
:&( wȱAiI' - I88t.c*MM
l̈XJ`}yWyfQOG"8ߒ (HQDNN!Øϝ]~G?N^ycs{:kH0Ft pX b őFJaE-D@5NPG 0lds}mnP h]m!Sn)& oaa/ȂžyPHn3qƣZrUVKˮƽ ^DQmכ ( ӢQQ_] "d wT{ ^ݺ~DYSa߃
M mݻ繛AI he!
2DmYAC\ҧ/k|DH'|ANL!9; UTL?%,yF2`Cَ$YlQwеX`|;:?Y v S"˺\lDNTƧy > 1܂qf0^4II D&Gk]9 ^` E i:.DB1l.oķu]F8"paG%Gd[t`3Z U~T) DoIQ%[-NHÃ`5YABp[Tu&V#9I
XYu3w=Ë(mسMC`ux i%"2, ۭ)lP"2蛓F(5: RA"!QMJ
LJZ jȩ_֮Z't]yXLm n
~S0
e0h_@yq]g8_nXMku?e9;ՙ)cPHxӡ`_xsJCbDu3pjN/ฌ "]4in[ Z$Ȓ`
baiEũ2$Z 2`UX}t |Jan^[/ry#`|>W=$]` DJ6
nf}ЩFPec3qx" y_sTʨ z 8qe`[IJ VzOf[Q
T@g]d><'UPSZ1!G0RRJ^J1Uql[β?E5K:~WsY <ȁ`3bJQ:y 0HR\ ){~+'3924FDC1ۡZybBYrl"rQ 'BD]{l1L u/!Ɗ2\EwP=eNPR
:0$ hgTrzWyҲۿ%ʫJU\vV}f h4 UC S=յi$^n\@d<̘z?<ā47Cu몮ZpYpw=uu\ddC+Uk0 #<=} Hh p' < KrĦ fŃ5ɿ{ml δTDjs_E 6_Z
<hp'FJ9}%pfM;
,FAєCjT\c6LtnIExyI*?.:DiVU(P!lc.e;2Kﭸ8סּ+PTu6LBd"HL
)dYdɶBm+@X `<,ua)H; p]*2 k Ák>Qi"^}n,?O$ V*H*k$@UYOǞ#?f:8F죤q~6A>
MEF L>i:&1 m e(_ pHVU 04;.kوXhھh7w π~;If#¸av4t"iF@r:cy| s'=m@tWKl⒃u!Dhɑ\l2Wrv"鍩L.RyDm̭*@0w0)?)3sETQEYG=T|| 9g@DsqEu%]t[`'SpP ~c#ɜ\{2fh(?2DXyFy\v^5 qHxuO T6@{'1C ѭ\=FK ¤ " ;0_N]gQ #{m #Ȓ
2JE
b7v1 ^rT^Ek
cV1TTbMWKb̰J[4N7),! dAШFe E-e}e>o'sgjp}Ṷm`ݪDF}T خ dxSjh 1Ų6W^%d/*X<<)1V`P XW߯`ܠ0`TfgAt<:J'eϼL }84qp]/zz
fq1 [Sl66< ! ecnԃѓ}D`ISʀp6;
opt6" s\+j~P<QQLBiUirD?,2SMt:l[Y%\4jU[ 7oVh^mnaa{U5E*lk^gpoPĪY
c?)i9czc
b
ٺƪ`7P@PڞHi
Bח(Mŷ,qa'˴OҝlHםVΠq4 ס,B-CvL/7m, H˺0]tPKYȎT$Ur)~/ ݯi\-Rz`` (@V[n
U %r\hb]2r O#nS
I7c,B֙0O M"`+щd3nf A
7Y@Fע)hE-j0U_%K
D-FIKEΠb X)MS
FU5*ѤiK[{ WLɈk e*_)*.U%QM])WeW=K㞮{֛~ KIj(RSE?pώ8L)qD9XUVCJ~;.fU u ^[UVŚv
ZWߵՊ][P(ZEꘚjRn-f@mU~<-oF9簊 &I{Չ@G8dudB*<w3 L= Y4e f
,-rI
; `m)ݽ 3%U7#up2^zC{zcQC&U>L[/}p2ԩ Q>\z2f&I AZ´t m p1}6h@icqF<%pzQW tҡn_NtN
.TIY,EP% eU tΠSV 1
Ci_`KU0+=oS6?-v_ _?~gGɮ%:ɿ8U8bI$PRwG(۲ebEl>06 ov͓ d, R$XVY:F,f+ DCk@k̷?b48! \|^Xsxq"CTbuK@c`yqq)abk^6?jk>`EL [UMeT-MUS]> Ts(
L
T"^xi%*;ڧ)X 60!d%lіV
(Qckp2 #DX%EoBFU-j-oZ9~6kUYbW\2 >VC6k(j1V
SJp!\QD~߳tdfV/ 5jZUU!RY
@0wN{,;鞊 32 fkeU\np \ O09fۯ`_;:|hyá
; qUPj 6P <߽_=v eT CCvU0py+3G2q @r8w''AA1J"rgS_NJWijim3%iѺk?L;n"hKҁ9
r|T `K7]_ ,v) BQAGndI=gBl3KB<
pySP_`$SL[eB4s1W~^N"n=n0ň6]uF6Qa :wH0l m- GDkv{纣#㢁C-;PqgTPK@sĪ@zrY6ΡϾo=.O,+8 UСrK'w1߱T~w}ee&g0+y$SIy97 )Qs%IEn֨2=V Q-ia$'?ۉa't0X 7<DD =r6+FqP6`Z G:_-HBΆ :^R$+&{ H c)II@YIZoJa
d%* `Yjc\π Hd3!HL"0Af($#~ԃxp!
ו( µ
M#jD] J
*Tq(F!JNuX-Eya+ES_m
3 ݩ;@8njΐrK2PJvdE&ź\>WpFf !h dpH, Y VRr* =#U{(d%Vu 6S_yXlҢv,ث*/A8}jAؐࡺ,i|_dlbi4NalW7>n#z:NC&
RA aQTWn_ag b,۶6[TB?u ܣJzMBəBAJiJ RR0bc.їLfe=.WX]D^.Gi 쓹!4E EB/q_X{_YY rm|\GjRC
)NgJOڵXlc|] ;Ǔ]@XǞȘ BeުkR}HzvUi*]sP
>wK,,fhh/tb'e|9شB5ZCeɁOlT*V@c\@FfcǂK+!3;bL̎_O]e/ Id-d,> f槇nӾD?~ݍ_~قRdUSaޓ GB@[b Tp7#S-BljhFʩl˺H> RN58G:( i{ }OɌA l&x9^eQ8 EeAFY߬,Γm>VG n@ޟ#@ʧ-g!Q۞pM#Զͬ|B5ey`Tz^ŇM-"@x ɇ
Tf#YX?v8mn2T7COvbYn l>?D;7.FyX2R =R)
~,8
NFgϩCWYmqǍ6KB@ee=g)_WjFzK( ~!7agv4;U7{6Ms@^P8Ϊ65+ ȫVOѢo\g$3]Gbć4uu!w:íELޣ$W-DX[<iwlIU:$Ɲ`iGA
*M(R/Yytg36 |7Fbu%̹H+R8q6dWRLP
^NW}8럃 >mڤZ]ʘDEXO2$ES> BDƅ{kcm/E KyުQWb bH 9[]D*.#Z']C/)mjfLt3Uz|!Mǫt:t̳GLEg ʧڣep \sPQb A?;'UFԘ1 O%ei~o +RVt$M
?qP YYizl2CG_@+?wK4gg@O ` kӏepCއX!=Lb~F|?wOۭ#= ^#2w_v`̼"}#1 ye+4R" QؘS n
x1kek4!w b pS $enQ[E L] hE|c #0k[^8\V JjKc]Qk+5H?戮m 1LXm<+~&Sl 7ؘ# Y5gT *p6L7\ZlPXHo0ϩ ],}!mԯb=N S.y&Lc2p$t.4Ķ{X9
"7 |?Ts}싆eR1"RxLfВ! CN
b++IDPv _nX` wkЭ@fL~F}^?E[2dbu>?"%RY-{UdxELQQ q $B?Ä A +y_MXY14+|vhcG5/-؟`dFڎ0>;j^o!S캚s$N F t<55- SRMg F, O%ilbX9LZV~AT1\k6b$i^M`Eo/njED\6
κ;8* יۖJR8;\ωCFiƑ0_*(=hr Eq* znI 1cxdo8X
3_U!}̤_!0 SW+9u7۫'F/4ضcabGg3ģ0@{,k[ۦ$B3bt5U5uE3"t/<{X>~_24g-tr(^ۏKA ٛ__ؐ o+Yvv~P;¸[ !~
vRد6e>|(sr-s1f7(0fGCW ."(884uGᩬm oQ)c}nؿp7[55Ȋ
+
"Qo K z+,h@8M >
m*sO䀋Dy({!5,U^r'=Q&ثߩ(JZ VY+}msUϫvP9b' 4gy['gWV"^BkЊb/+d/.yNU")/r IhLtOțnEqQ0CX1cD vTN+Gk~kiЭm\ N4T6=|}j Q}^nVIvBJG#%="붆L݅^zwǒ~,[VvRrp@++Kg*vLDX+>d8:
Lk7?tD0ҋ ^e8 + ;VcqE·&djtu/$DE"zc_rC?S'y_Ze-u?Yg$
R(}c̝g:>mvmH[$Qne+ !Ls\
/SϘW}cGg`%_[ Tn
!iz /F E0:9;b{|*@k1IVeT`l:{c5uigOv%P
5gP%A%hd-'`w'}
p
ʔB:>T$y>.#wjxk d1BhlP'!XZj,7w7'q2!j(S^FDfi3+*D@i 9L\H#4Sc}dmjL^h6!oxu0j}c00ŐĐMGh5 UuMUF5PHF8]Wnٶ}u _ Y Qʢ\-@2jzcK(9meQ&c̿(Qilj~Az@~x~Ĵ5hA~KM N:Ψ!.Ӵ [h*q^#Me].5) T v{ovߎN|$V )OC ni#"Ns4b
ّgP<Ӓ{ +AHZr3F@HVf!2ݧ| 5GI@;'^-rPzB}?IAod+?iUɓ8|O/$F2,jmԛVvn'rDȭjw F=ռߨU DW f&1G4>Ñ-b+@ -
F5V( l|؈8k/lYxY7 IKuVXwjVOb#3H\j=vN=<*##!!&|b.jL?Uw De& ?Lk ikYU8j sG^-k(>V:7_b&H@${'QOF#D caC_ڂ&Z8; X&D*v+JMgk\ X-&`o䓷%^FmgĎ=t=2Ve|'t<= 9$ѬzR[S ye.r-">ŒS -:)BmR
X_RBd141T988NuwAǩ7",Jdڻ/ZMrP{Vnc/N\T1~{429:3Τ]'+g=<#,շw+M~TV{Zr98E"]EZ 3m/(fwOy5UN.u
WP?]% ӱ}1-[v08Xn\HQxD9zFo;AXZtJ?YnPʴoʍ}yÁi]5{8EU{F Tl5 l 4kF |S"'MDS9?refC;ݠN
J3Z &m膺WwZL__V3"=p`vl+n7FY0ݘ _7|IyBDj4>)Wp߮"Te(c|pN $Gw/
KNW[vܫwj7jti+7ǥl}`ai1;|Vߚ]Rŝ%k%O[Sjd jd^Ju̿oe6'0Ҋ V)!Kǰ\R ׅ1-L߮Gt+ tt:9 (N˘X6}Ab'!Si<<\DmPQ}7%"ysZʝ' J-j9\_ܿ=H_M5g7Ǻv
\#!݀fUBG63$nXE"i7_`]5syT+:1.4A $^Ag:s SA|G(',NwX9e3֦ 41ԉ~lnۺ'8&(f8[)BܘR⻟WזOMkyYӎq`"> Gm(iOQ~zn<ˤ#P&gp^ߌrP!o%=L,8ߴ x[꾗ax*peIy(Ќ#' EH#䮕8~< +l
F {(Ý{38ك%Hz
)"k@L9z"$DHJ"DDDHQ`$V ((# D1" #$7XC@D#b"A"$Ac0k ] .,Vi` W!~@ i ga
U='
Pj Dd0t;}fR36G nt^"i9mNSL@HDEF DAA$DDU*m*DV}WSO e_R F*x&}3\^8 ́C+ N~v8΄9V=v;A+nljKl()
@Q $@\qJ.DzJ ϭ<\FME? iHw
$ aɕmO5Q}D |Og PUGH_fټeTguZIQ )dPPwU
C2KbBzB ݧnezoeɴ^vr]ka> ?rR
V;$OJ*Jb@?F]`fuVz`T8b$".֗ { afYw > }[ ^)2>nHق+{gbTA@q-rb ȦUG& Qi_g1Ee B.?'pY
)kFbZaVݏ 4j/IGkD|8Jcr "tgD|DޮHj?":"U&wu˝BfD98gR(7 ^ZӢɴM
Gus SQ*'#`t B vskD@GMV1PE&@[QB; Qz&i @"c>'/ tR)§M$<\sZ7q@!P]]Н7؆ځ4A# yǨ܇K7{C{jŐ)
4tC PՕDO܈yKZnn1P4 \Ryh,V q[-FHᗇKp_/ȺqlJvE;wj+oz)z1kn%p[1`
Bo_{h
<ņmSLýV[,O
I $W8fE>VuUݍ4 FI"q.麞U$xԀP0Ϙ1?|bC.0(`X&k5çYu0W&K6n|_gk+7L@Kd短,w uQkrÅ'du:*wHÅ| ^c6k&zO=n lƮY ΥE3t3M UW88q{w+o(ri (ct#brU-VZ(]y.ݻRZf#Rm&oR3wǞSC ,y|{-NVriPh+Hozk8]{krdfe1!mu]w" Fؽs(2;2e[zbPH 6 J)'<lPI"+uR1!A0-L;ߋ^OOc/G69|jyK ,a-l/~K bpsg~&"#&r蜻w%whOM?۔V iW{DVX[{{gz7R.A]koO}rΪMͿ60u1+cs/g{ĢA 3sr"8 s1M5PH|u,T$ `$6Մl(K~4<}Rڼ)؞:b 9pQN6W|6rDnBv hk о~
H6 .A$Z , +y; P{"uo9Ps,_Ԃ! W1)#6܊I+>cU۲xKj`
#6;X2.㞬u݁[1nGO*́% h "r9}N_iVM۩yi%EkUnvLFUu<|3"_DG-G
&>A_3:Ӌ3> ~ĕ<yjL#_UL]3Fqpсs?Y b,XVuw
R.B/НTT6[Nh9(#Pyi
$2g|3櫯.YZ$W&6 ۬܂ÍAMY
ߘۘ
Bܒ@ ~ 8N Wώ?tf=h&Gflp
ߌ0*kqDŽ䧭7>'a l@OBs,@?RR,6d&,@b f,#ЕlY`f;(͟?[HlbE4 LK%+T:L
b=@E3N gLI/kI@c=]xC5U,A HYekVI AlkVE:ާ̢s3}#<[Bl 0)e5>*'yG̡v4Y.Ū R- x-fkm 2"n^ ( N ~ ˰m@w
HT}Lxpe?]GX^wws]#p'췑r@_"5}U Dd ]dPŚb#IEZ%H
"LГ@XaJ
+U.RBݨ\dt?7/άLp, !n^/ z5jj#_j 0#6:CSAɢ;%SqG;_[A6b`+vB4Ҷր|4i%! 1X\ ;4R@2J /X0ꦺ;m q*i.QwUDDOm S KؾCi@bP6x]O qcǧ̿C
TTX` ( ~f. j"\W!e}bX+QeM Y9_pꦼmrAP/p D6Pmօ@j{i!HZdtU淾ek=;p] GZ.>GeQET siݯN(_KZK"h W힏kM]De X !eqp=SPY9-LY@so)FM~66ߑH7¼oWu?~y "
偆=Cab1PtBOa 6Z
yiYdU8xq 2a `Af(A^G8\࡙7`S0Yj.F'^ 1FZu@^[lvegֳZfV NŞLa m]lOb#`Rr#) *2[;#tP%;2jU%c )jݺ`1i~"j\Ɩ"^6Aed?h:Nt:..h#JL<+lL Ax E;z%9m
F oE3qs>@\1#{]7b6!o#
l
1'0,Bq|UKB+BÓg)b%K)S9>z 9vQ+r,L9ƩzQ;-Q:fo``#BiA-s&D9'[H"iJ6.O otU P{( $J.(S eX֝"iLuO
eN"@ p]{/ {oaaWVp\
7E.4Wz-; :oUyxM8Α?QbnِqLj>ly> ,#2=DN;&Fdo!VMlGٹ0@l?4~I: nms>>q#˽X7da\\2s y
Fv-^W^
䂁8-aYBRRC !A0r;"$DȆ dȻK8P;=nUִ7\Kъ}KX06 xܝS\BA-&JJbxs8o[M>[ݡvs,HcΦQJ4-];/83Y<ē^V2-oEbt|W.,}AY ف)XUpEmpeVPaAЋ~C] <4 Nۢ}aee|QG}ۀ1SoY0^..7<1pK=4 QG4 } % s%
}<=$zzHb9Ӂϟ˛DV6 ɼ~ ν=oA@6d|uBSp_];@*-DXNr{<܉sljr7wSp73|+eOLU:oc]ThgpDI
ՏӤ#RsR鱍`=1۩juv(#xt$I.y|\Êd9\;I!v2wɓ[(OiXb%n)"\)srUW#}.(@%WߔnxT́ Z/|7 7M9E +8MڟF( mIv/&a)v UUJ ^w-#Pm z,_M 5Ֆ L`Oo*3k9n9:RDq@}f1*X1>qAt1,_k[+BA$ $-kWH!}c ߗ𢣏nqILNK1SIc8G,zۄt~ )+!7FfFQGnY &O D=o?]Z<+/S8qw|Q ~qr璊 I}Z<ĵQ@}xjHg ^Xt(6?m짗k%\;a-^01 >;撖Η wejØސH\[!~GzOMcLx ܢ9ڷ?|
a_` (H$z
Rz)Ο>
~/95\)ryM_*}c۞"-kJ`x9ɵaϸ
Mh+R @ =_s^fXxxMcA.0t}"@ T Pe 2? tSkg <@<=<[>(3EKZdp^e䧁~km [pWGVUf)6 23nif3B ~ ʤ:Yk2>; 'PE
́n5mim[P8x(Xa /w?xOĐ? #Ć #0=]5?OtE{ r ?`CǶmJ=ZقFc: 1W zFciR5mݗ<1Ğ.mJchh
ȧ{N~>#y2 D,-{j zwؾ dMB]' Wnd K7}X|v |3hEU/٠ż꼋zɜ#r H9NpH8Gc2{W C'xi 'gELh3(r, J&^H2D6(|WI }q|ƥZ
Ǡ"Q@_Ql4{ݲ\:_"r>_n!n,b" ֦-=#|db i5w.=lWeaq u(-4>%Bc _,kUAű=.U vL=ބ>=rBz\uԱ#۲1("p648Da";;l좤K^&v ufp$>ǐzMI \#oR,=iYU-D
/L$NbWuMF_~F; !on:j[ إ /^< Y[.}7
TiiY6ZXujfџA
(HR{KO_w} X,F
0$״1- =[@ Ir˕2,` {`{Ý`bk [~ N페5m,fbpʅKbr<ɖ: vsFX 7hC26m cg
$L$R Ff~!!AdkSba
&l0ɑYb6|˯0 \//ǣ8Wy^mEI^t vD|r{2 Dܜ{~wrq -ġ &@3Kt~ C!(e2)w)M) NR!߶0xyųn B̆M7꽢{_YQ qPf؍9e؊ CuyKK:AcZԞ j[GUS,4:i yއ*%me3c}<&K܂Ҿ=t c (2U{_?@ |EnD?
>;ܢ
O ㇀kہJNꌭ%MXr[đB pОbm Sl"wtH=oWxaCOq6?$Ǿ\ ڀ>
Ay;~.ᆁtYcF [=bN%-3`݇,PgD#̞G1Ǿ@h bb aӉ,Ohj>܌?WwPPgdK#f66g-9Å `}v8:E WeOc.05͙a~/SVfΥ96kXtZPu`h8T0ĪWR$+ ߲>[t*j0yN6:+2ZkAq /bikz- v'>'m: ŃU3wbwhTn7;^VA-˦NOvwqЫn,QҠQ{HS ^A4 Q>:vaTX4L_CI0L">%0oNłia.o" 1ducw|En< %c|rWl,87 jՂ_/2vFޞ\0B?Ε`,e6rD&}(' $l{eȒxԤE$4Y fI&xdȿ9$C)}VՍDy:ٳe`pˑu\ rp6 憜Ǐ.2M~wCIG%|viStxV"}Y~٘zT1Uf վHQEJ' eh ~;T;Zo\~\zG' t_C BKQ(y:<|cڮs`x_Io+xxuEdMmO2EzHb ̣Ⱥ'1V> +A!YƺC s\^?
>
6]{rk[dR5XH33E VDw/'+v7sP~JM;nkQe<8)^L&1лh.3QDܶ 𔗳vZ9 #Ӂ&KZգCd-[B@0 S"qDk2YH#@oNirX4><# Ԉy{V;oi',̋9Nmffzĭ }{ᥖ1Lh)3v+"@K 6dI GhEIPAS3X JO0
@ajU*U^H=1v21A
E_/m@owl ;5Twp,>W;וkCAtI 2.{_/C k|71
4xȭf%"/|PǏRI/E<:IQMt yߞʴņ (ad} bEM-kT1v
dg?o
HBz_C/9H`5+h^W&f{ضҗ6z
\w~ QEKܑ,]A3#r=Mb02"zwgsRIdJrbX^L֓zxcy g3)H4xQEqUn#9 EE3_}ԟ!V }gڿ-{q/GAja bM4 qL'?&ř Z-UGRKCnݓyֶOdHV1Z 0R ?Eړ]x$ V!nl>.o~[T^T׳ e29ir\qd0dپ o2 bl"ψ+QjLwv/OI #cP'XF6
@&XQgD>9sSN*Ŷubj6oBЇٵ%v,&=f!LlVw ~ Ė|>o Tm-a ˆP% It6Y0jjg ޮXfbqu~;>3`xŴ[T>TO(kb}M? FsbSM /ˣ7};,hvߘj&f owх8jD(L0Q9eun mJj`t 8,)/ʜyکkY-~9F&I%8 v;nSksrCPV0MH~2x6Ol¸J<| J4+ft41"MoV8xFAqH( `Sk/فd<_H|)ׯ7<kb*n!#qd o n9v<3>]g_l#|wo˂55˔}m /͔nuq>:QV EYN?; /rqCOW=w 2+!ּ8<,t5R&3&9Y&jiYI0㧌
CYjm Dp-J`y8Dr(˧ v+Ǣ27ڏoIdeh1W¶+ A GxN[Тs * La {<%sd?U 0GKYX s^(B7F7x# [;l+"\OgT {Wcxs @f5[Slh!!!'e
IKu,P !"mH7h `AkD;),CŠs hlDr ^*v10^F@B(Z1fJdWjj^{7ߎ&׀lɮ cfvj>-B_`+ bFՉ:kuU~:3fQPna y\^0H SUGn1E樚 [ll~9 j(_ ,79.S4)"-KeL+' lu=h<\Aɑ21 hL:91Șð&*% j7^|M-"V k9|B"Ӵl[@ZҺ Ƀ0 Oֹ쏥[ָvS&ɫXz,z٨CAOKۗ VV֘@AȐ<>3rc
XvU{w^FߺM#.l
{pԷ YU'oyt.@ W"TY4ylZ
LBZȮ`,bNJPYH4He"w ÖbSboO=)qԺCYR HU-{\i:SN{(\Lv=@ȀC Z$igm{ :*XѸ9{xZ_ڒv/df@OJ3rE{I]4y'E*ݟq 7s1
< WGO"Ętn3V xAHs tH> U#
"UlGeS_^(0+IN1(P3 D|c7_Q EUR,$!mI֝;#b32)~DՏ #} 1 :'~Svh^
ZXb*NHI2 Mv7`!+1 ̑`la/׳|;z3#L;!pRgbX/[BQ~. j) B6:҇ ēp e} ۥ4~ͽK*Y'xtW KD-"% %8 咴-+fAq8Mj8vX>f"g~GreFr7IĔ|{ y5f8SŖ3I$!pQK}1m NH; J617,`֗
Ss78j%r|R86W Z,>P /cgÖQ51 +Qёl*NBAEfsz4}Th QE,0o!&7CIkU CS"J횶cj
70j `
,!
-unD ̊&0@̀pj {4/ N}*/5.4:]lw]A )ӛU N;iygT@=`D)N?Yu=ԗy_ YIEY
YmǸD' `ҡrD}R=C ʼnʣcE 4$ȥroì C7p~q
4l;BSjEP EA,Q@
h}( fR,KYK}?+ibus{鰺
MhYڴnQG
ҋc:PH6Vx5-1pB ~\('e;+
rTr-Wck O!QANnGk P$̉() r CթS* o䪄#E
u긙0pZpCMĻ,&hXZ*K5 ˜oӉ& p ^
P%ITp`ㄈse8!A7S ܇SSmy~h~ Z% )9eZW(P8'&d@0\Qc?Q@mͪR8t#T!R g[d qƻaAW+>A \cmq$4UaFF5+Rk(9Ax:EXgpގ1(5;t ZT+_cMh~WɏQ*0v z:Sׇm rj/aaLl-r <_tԼ\f+Ov]ŰSE#lc@BUm( [Wʴ2
]!4챷]Qc&4FC ;~FT#=wroA\-h\~y2-l%c%#sK .v ' $L>Ar /V` z4HnN 0kCskv->; ʟGk_:]A'x
F焄}^Lnж~۰q.(V$^! Ϣx_oP 3yoé4&;_N| O=ZQ%<- l/|^z88X-JAlDc=^?mm%g{wZ.ne2ڼsp:d g6(~Mmq%:9' c7GYrHK# QZo#~ 'ce%m e7f=/o7!4єڡ~MΩct *ܺt=ϝ:3ZBluk~D` ^e)R >WޣW3,svaf:,'=2 z ?;|)P gWp$<$@i3y|%Uq3A
Lrl7|-=1ȋJd c霆Jaep@d ̀f-
& HC\N9Z6Dw&4c~vuogK7-1yp|OfO% d⍼ $AEK|o7vmo6f`Đz է&*FLV;"/h IMɕ6fC=c;,,dߨ۵ 1ySym&8=5M-pkouS{e$h:\їLl[}D_v{` 2\ ՙ^Z^ukk \skl[ ڱy>q|F[dY z3';˒K س@j3@lYlj~飄Msȓm£ĄbĔ7T#6 Rڱ`fZa a {gk>T$yd vʽ=]iڐ.Vka,ooj ^ ")TP qqV @.sNjE>.`$&o nؼ͕d `F0nwU\>$voU/{x ] O }mvg7[-S[d.(!Q*0)Z[B-NՆpz`_ک: ܄H MC)X
"!2"@] Q9 KN3_r6[`")n%S(xkա 9>b;!9t[a _jy_]
uO\=5w9#xYJHM_B4EӍ eu@_͖+s,tlaΌ 0 zZM4u?(qp<={. [F"dq8y<*$'tSWBo2,ߏRjw8e۞ߤ QDE_O{@Bj;&}7# .!iwiLCNd6ˮ y Đ}T7/txElA,@E ſ9b
50XImk`,c#=Xݻ0 9 YDga&H#! ]Ճ.Dz3
3۪%}^I_d/{_ þ] VӂF{ P5 }/ɐE:pЉ^*! *W2nZ7"CޘQ/H ]B
V~:Rv?=Xc}@P4n4$)
%Y+Uj i35;H HNqr5>}IgI^b ! 'Kn"h,VpoIv鲫@O8^$JXG
Ʒ-/}gߜ ܱ xzsCZ$s"Ieӱ~F[GvmYm N @g-Е=_vߧsh*s Ŭ ̏Mp#_)|<xԯ ,1QQ`dcHL,BTJT6m6Κ6E|^Eo "bi<,P}ZQ|5uj n vcˌ ɴkSLS23;kJF̒'b|f'm0[KuF3яE]/l
(kr 1+ml֑g OvԵ-1
xݾz;,*iu4|:#m@h-lilk{,_]V( "^Qi4@Le" ٱ A6D H WBb!|xۉ f36 6V ]Bmn888D@ Q<o$tQ|V3WK~CLRdc ?aޓTQl"f ~ò.H @EdBU:B}OݮkYqTcQ
S
|룑c(npXw )}fn"
}{,m%jʣKfp 7-j6Y0ґԢnMJ~ op=op
0LSP*Z?LC&xBTUO qr#I+(J / pABy^c &S
?} kMØjH)TSe&8Gg- e(u*?~4 <Zڌ
*/(/D*!ԳbPaCp8sm%KYc?3g[aD@
@"*H#@@)Y"Y غ*FŕQdPX )Აa|,PX $
a"R,YrXPˌUʊ(N0DC~`ea.{@T gƣCb'boPsLчzy ,T8hg}
%u>>6{y[n}.@<ӮXY`,Ch,A?'lK-Q8"\puyxxm'MǮe TTp:V !3JQ.zeo7zZ ]`0DR4dD]
ke N?.pM8Q d rŁ~#RCe/P"hf4#aic m Ìys"Ruyu|0DTf/MS;L/
Oq ,F)!+sA X
;g£8tF`R.6bVU2]ֲZF1%3K J]u`r ia~o4HghnqO-}]2
S 0 ~=^ S5ۥ\K
M kuZ/eBZD 5u"W2C-N fxy}4
U -; M'ߊ8KX!'呌nlao.w5(BjàeJ9N>n,mCGׄ ʫvY?5fh1 ㍃cvT-n }WŶ~?| nIld@:60TQ>r
lض-o$@^85ŸjC2M#CT @w}ה7$rWgEd7o9yT2{VsmÙrq#I
\69&2Ed6Z xGF~J鞀(Ӱq@|X럹r]w}G+O)A(
:qs?/_: D#*Ȋp25I%esgWy+]nhc]f 38ƛ7gaAݝۗGPNZf nu}֎ y.gˇx2ZD LXIy&q?$fT_Bt tE-]PXp~
}G彽~Mv##5onh~e_d@V " ,@.# FV2 tKlB+1*]c1>)s~u#- OCh?%<;mo
m]ۡ M<\
mD>>3BxNGn
XxϨ0َTC}.kKi_oGA&`qV_ a2lWfjqT6vTD ۭ3W
Y!2}&?L>4 f Gnb(% B}æ^=,
-b~5ߧj @DW'SƑ7~e&ؽn0Y߬(3 8H2Q)|(\LGZWs y x KVѰ}Qg[3
7b;QgY
6zT(F v ߳L 70^@ DDcW #,pMjA;01O B{M @ 2KQ6vy 'XF.ڞD6PM%?6
\²H?%+ɗ6#c2jsi/J""XS9xs<
ZJo+vQ<31#;
*PF:F״TI2p& mBؾ[@ yo2Lmcqڹnd~'W+܁|oX=by 7KyKKPI_,op?s Ok'8b@͛ u=fyC |1j`uE]@vd&!mo{ 4puV[u
-緐cQvP1˙ s f8:4/v-':IÙ0(aG|˟\ 5+xjCD_"RSNݚ)?NY:gB^s$"Fu D?*dQm~|-OMF!gXնawP (]~[T^WhGݣ]b7d̡ZݼկFɋM ]Xs=#[ʯf#2CiS ֠z.`Sr& `FKTDzhI F_ч8bJcBFceܩ
S[ɼ) 4 AM`~u|m༻s]Q-8RXؖHljGC@%P]Yj+R^1yu H3Gh L$Nq4X=E?3O{-jo3ĝE!Ce]9%iР, kr"i7Q bMx]0 5wյƦ,I<2%d}WVYf?"qø7jdKǪhP2*Ñ@HgT qcB)su] R7Z1>Gv|K0
Fϧ }J,8J;"0{;E|y 'rjE09F ]im*H|YZNjr" dOۖ' x=v:M]x#R o@f*wzgZؘkp5 w7$qz70@_ ]I ]N3H@' kBk2;
8(1pʚ 3 Ct冴J}[\|G[]htu2f?i( $
{:XB&oM*NxtGQ"͜"7]¬Hz!A=<=d+)zmw^ #%7G?9Rum/YbP pC].'xXڂfasi8J0)zkCYl%d[bM/eEZ㹦sL3[Î=2/idɏb9iNCz=N#č$_K !/G` IWsU|Kn
lkU[0L˹*D|PJ @^.hܗadȭ!/u`HAbFF@HPjX}>z!a) v]U`4#Z(`ͻ Fm!LzuˈVC2q \kv
%#j+9büxK
r
$ F N
jR* f: V/V߀KB3Y4"?Sޤ K$.Q8_" 闺Т(yƯf+2?ɗ#grOcǔ3 2B%3_i awx9Fl,!lel:t~/y Y}t
|hƄ k:H8U Mr@(E 4!XM> ny
_\| sXpܬ S2ٱxȀ2 !P*)
j(B vĀ@6vbOYPHM 7cq
Jo[ӲU*ٙ n7Owz!E%e L[h*Y nL 5{+bbtH1 CY5ewu̳S% D .x h: Qu` !w?uzSy%?)_:o)$ *pGDɞOmE8Z' ] V(8^%E@k`ugaopSԗ1ٝ Hyop|?٤WP0VHRN!|ƤƏ+G?<8Ź0
;NJk$)ު6șx*2Ec\G
\`^-^] ux-9QfTV~.j P׳~\ _~Hzٝ &MrYFki˨s3tqg۬W·2v !=o%F[w{i\=S p~+bPl[9?V 7h4rٶSĿdPw9+!9*piFe왧W!0}!K'+ hu "#UQpQS?&Cpl܅"ƫQrk#?^/]x'6rAPـ@zl=UsP8 `p,-u\>-6oAY)6p@@̣tض*3ަ3P =CNXet]_ZU2{2đܬ$9Eg@huU jʔ[CJ- YW1x'YA ~I' _#f֝œX4:"C~}V9_l» ~~&9s3ijGE m=ަ`>7x ۰.=u&^z\#C6Nc;D }DaT
)Z a *YjuȞŗ[Z=-=|IT0 @U:o7 \bDi YAy2ύMUٷ6$\ :ȳZM,?}EI]rW[" XWy*GECP)Lch7Im0p]ƃ@a dA d cE O?{{{`y]. )`Zc~:Ky1\v)Wzq%=5߱(tYm}DQ,wv )h˔6"a~<
K oH;kg5ePa :#UV(j2*֤mJ%A(i*R ,6,UYTi/Y99ˉqYJWGANUgpk*$jmWm|"ߤN>n"Gs>oڭX ano>i>Gaxʟ!}"1gw~>Ԟ[nlRA18-JUZKbmjYŪ0
e~+UP|e=(%R_R T[U/ IWO]i\ edSӽߐtK^eDܣݹKg & 6wN) ͺo ^z
3w@ ?u&WQ30nRJe$%!HB~g ^rI P g02!u3 `;*GiQ0gRRhaƄnNwR4Ѫivt~x3:o?'Ϧ$u/q2 77wV ;QQ \o 'cܻ%7{Y(Kc Tbh=.jG 2-Ȁ/"" +Fy_E? |DO;"7,9Wˬc}`\Psmԝ/Ԛ^Ts]ۂ eݯՕ
i@?KV/fۈ=_;KwH鳷γ覜)5('G˦:`teݿ4סc 5h77% G~J:.nnӡj c꧂qʿ_ՠr51(wfLW͙z&
' \ : 1۱Qa2*D+ oWi9 | 4xF q.]4ja87_%fb=壡A l?>gKSȀPL %S}- woPHGIFRֿ}++7I pH]fwq#}xicL3T#j'c4&?k* <_$_̇Z_)3OFpUջ&77S rN-phɶm:=ۦb8ΦBp@ a0f-ɅNVN[iYH뫸#L w
}cDW[\>m_5guȺө{$9?
mR=Ģ/~6r(y=y#. 4itk'R+yu,h߿H7+WZ|mZV*_^R]>2X
ŠH/AИ5A0˿UGٺٽZ?F
M08MeFd}/d_wGFsn k:r?7o'ւ|v G kOVsv!*cuMOb&m1 m\6 ,js;<v}6@1S" A㦑1032A`NԂv)B{ d_q@b2 c(vm5ch CCX|F5b,q+23U>.}01ҭSe/G6OS 338?IA+o \Z$o"GUINcIX)Yt
1L^pwGA})wl_黼ku?N4ХO渶8 lj }H6;{EBl1} K$ k$\ Ke4HL
5&6_cG*'e>dA㷽o| PXnmN5_'^7zn3=Uv$ߴ>vp-LjzskTYC6HMw+U@tpU,:V AFW ~_-cQ:ujլh]ȿ}' ^am~cH~,S1 cЈ癤;VO oqbJ
aMJ@@/ةp6g|<o&> hoba^Y-cmx`e4tÄ́vu'tVo0ߋz 1gF k]`
{ Pˏ>b庛MNU}f
\QIS<>(Llä݆߮ ؙ݊3١%\i x㥓hdi RWHUh67|^ fW*v8L{+*'jv7o |k㮞ΉB@AdsQ '0eP\&%*tC*O; R,7ArS@ b$7 bz]7@G$HDIcg"b+6*ի6aOƁmv<E*? tp?Puܐ !(#;'@m*$dž N LNL)bmR~1_3M ;!X ! 8Ѝ?ݵңϼԧ >嘤 8+5ў+/5W{Ph C;.
Z40Q*Ԣv%CF[Y78Zڐ4aZc#q.7QA+}W48Y(N&x
;o!y(7O[ W aئ 9শ}+Th4c/
O!U]T '4u @`D`3 hD]j;1|ooKZI2A.UI< _7g`~v8p"6YXSm7^ 렙m#`0!u
VcOl(P Aa% V'7$mE B v\w7rKS~`h!Z`T "E 6 *ul=FFAh؊~զkg\/^Llc4Wqٱxfatޗ/md4uKL
maHeeZ3^th =*'uA캄-K3I|2c =,E(z!YY"lߥC⚶ >լXw*'h~>NM-~Q:u &]}$ o@ݶ2&¢MX[_=;a+.U D\1L6$ܣ
0R%^/̑Mz~Zl#H~RTNq?\ Plw7h=
LYrt`qZ`6K꽫j C
Oec%<nH`7G ~RFYiT~(
V;,AYÀȌP UG Ck;ga>6.٤~VI)OA3 r5
Ac``)p0u(gYdka5nUJ &3/ $2k+QxQRݶ^#zvsOWyP($ڪ槤wVD D,ydr\OvڎKcyQ@'"-gƞ7c?A/9m v. ۋâ0 ۽Q+RSO
N#1D?t~W?7~>J.ÑRt\q3RI6Q;>!E|mI2%t0̆9 /q}
Ɲ xm
j50 L
t^zvQ ,KcxϱY /tA eEQn0>kXVFhJuEzZP54>ގ(.N 'dgZk[S1?WlK+FFw:nMzXٵ8@ ͢i}ܥ>C9a.>6 b)B8X~ao/GcM2IҵfR ,Zo~틏c 0iv31U>"?2m, =`vRntY
uu# jTJKΣi;Y:oV3 Rf?kJv:K `~?%\nT C՛+R0qQV쬂;.X WX\4ߕf3m*.u<;-ͥc "tV{o]~$tI[l>Kys{o lhFd@ CвLSG1^p)(N_#fګ j.sKDhUd1 eWߕk"ĄӪjZzM ]O3KswfiOavwMƄgyqT@q:ׂjwϸ}wINoK "V< >c`jY[+nJ/,o+z-kfXi *G:XC|l/ O ֨P# k ۹;LoZc)݁YTX.V lLAY-ގ~+L9\ s"PA
Fd`3f֣fQ2 Hΰ5=+˱Q' ̯>/E?)ޯM{ySPv"%>_O==5~vE4?! E3dW2~W9->]2"[T >x)@/
4Fp.}X{Ѽg] nM1r oJ s벦1;rwJ{dtH'u3
eE HqqQf=OQ ĻH1 kRFÿiע5nA5,C;>sҁs+TY#G nn
h= p&'=Ϗkkc6Fk5{ܯ! YtյyC@e@"_孱.CC;rOOs<YJ VZ Y?ѮC9欵 Lb'# ܜp -H) oï>Qd3J] 8 8Ճi0[:u\-*BS?K sS@ kjԂjmq?3K_A PO心CqN"O5mDhd ؔ5HK0? PB+ןA54*7@ Rb<\aIvMt$ejh2exbښpԩ`8~suss%t/b7CbqKVwi=@NZF" J[f
ϡtYS43wnYuFbÉՁ`Ū@?[7_ QȫR"Zͦ0B\
Ow1]l߭
j&w@p:)Ce~VY <.Q'Bpn==qA,gҏߗ;6l0;@FN88L\G.0ٹjiBeI9t<#EJfzrUhAalRA5=w}(X>= gcA7n{?= Q>;̇o5C{CV[9ʵg hbFtM ;^ }AlD$`e/VTIo9@ VlY\ L
jr7]Z
ne^[A̩хEzy)N,z_~7/+' ֠ҏj}72aOdH4!PS~|އԡ inxAꐴ<`w*?>4 .Knh"_k.ڕ|rT(:S!
wKnz)5/wSVkJSXo>cTԨv)Y--&5 `F2*j oz.ސ6lua+
h(*}v\W`Ğ*=@ k} \jby~C ]B 1oTP%*;|5I
/]E[-#0*hgh <
kD*1˴R> J@ /âcL}<GVgN,pRͱ&-Ny3~M/K ֊ʀ
D057TjvqdM>7JXg%[ƚEKxEHG J9+[߈ /e@No;_? 8w7~,s.U\אHi
8>dWqQ@⎱7^
M)!AG%povF]F;㡯ng@Xd 2У/9f ٽ(K%%1a5*_H9m3~OD̲\r(@ō@gXunXm ,0jW8] L{ !4و-lrF-ld6ok8=О,pzn߭hfOR)YiaSko%L
!\ Vk+mF]gr]NV5qk|"M|*LI,AA X9ϫ,2zF -]-#i Ú,u&f۷Û4M Z&˘>b?sט$coez@k[9^s@>.&w2`r|*bF XfFxֶ47Hj\ˊ<{
9F gvLpݾ2$-E;pm <[~XvδTԶ̄/o铌
GA48gd3-$r6[Ogȷ1e8e}߫?hdG0?8N\gv__?м=hOb<+-O^
{=9ooj f5NSw$*= uvqa0
#|oP XK|@lgSS 5L*_ŏ3]?./.P8c&2TE &owO&{IBRm0p%V8.O,v;]DcV/43nՎe$E{j燋K,Si}RA|vˎNnY}n#oˤ(X_I-z%:7 >7 |NF* > s8NU]3G
|R$ 0lߤrR^/_r6_@y!#] 4֙oԘ7^{Y<]W@pv09;/QNg mIa/7f5YV@>|lڴϘU+B&ɗ9CHǓ^"U
gn 7eqs?n@ dMvy T2 >ZE un1әϵi3-7
* uśj㑭 Z"h_y($6XNZڠF,||gdžfjJ~϶wS_H@iҶb3 Z h@> sEOɵ xVGXx? o#2 Z있`R^>FrJRyњ^ǔFO# ;jXܰl+xca
L
R W*~J8<
92nkO0PS
Q%i6p95C6 a$`? ̌$J#2_@>Hiʳ+~ ~>D|v5 B>4J MZRvcFB3C+X(hdG,wff*T7蠾g?Ո F\AS)Ψ*IOdo H(k" 5gCHpޝpld x V8ïVDnR !_m|TGya
zw<@~GV?LM6pUsRg 9&p< .6g#1HS2
] DyIA2x%^}wă2G EN7 Yg@ ҏZt' bXOyU.*} h+7 ?S&| wzxdfCq]KojZK~ US̫[ҷo_$kϖc
=,L2 ܬ]cRڿsX Ҳ1+dSW户S}l!t1;(j76PVw+&7ϩ @7VFo; #oU!UDTF;O99 /8Ĩ;yYI \a̩.o) M7;ux%ᐘ}j 'z̥չz|D"Qw%nolՔN9Y B~GF'|$ ihR'l^?%;k34|>4yzg0#WlQ&3t 0Ą.Xd.l~f(@9HlmagCm SJP%+pDmz< MB$Xw@ .J݈:YK! ΨYCٲr{~cjRQo\ؔ**;ТV!8ǎٽ5I,ઁr&/Mo{X[<
0ݧibJlZWc [ ѕFg *zU,|yY;vud$w]+%3HSBH27zݣ;_sk`W`vW ;$B4E6ekRVvH^NΝ0W/y@3I>#?)RqLPlk
?Ҍ4{$pG,cs fΑ3qH=@V! Ä 377' m9*2Fx +z[ 9}Ŋ MmbrRf#pwbW"6PMBֹ1MS xc<^y=7'Kkke)FIx7I5Ci+#0?5&{$DGh (952@ZI$9&TP:pza" f!a,s`U33O&E'< c
ͅIf.XN·g97ͽ_ԖN4"""Y YnwG>|}@HY$fjq lCv;.ˢ]ǻg!]Tk rջ *OB GUj?gJ0棣2:2:#'ٺ`~3>~@
dZ&qzʱGk +x;CcsnKzQnHCIמҠ7ӋLHJƷκ"1C)DAq:mQC{!6ݨbg р_:s h0e<+rtpt_%
yYX!aVA6\{:45yCeAPھ>F' Gy1$gO32i {tAB bD+ kj%(:׀R z97 *ǓwQ90S Ϭ5D\z8W >uÞ
߽؉To-bAl\fǟ?[؇"WyNtU L MA)K oܽߖfh`BL ٿ41y"%f*:S^U±91Fx#MYO'nl(Ub0MM$쿲ȫq wSNsޞ1ڴtșN:Q6l" K[C%r. @ V< ;u*0( ^,W@h15oC B 'T}tĨAc_l8m_2qͦؑ^ o릈ex^r, s0D`fҿ}f3߁hAs*ehXʦrq~Q_Z-dpV-mҺn&q]aH2х0H
YM M_YAܱNo $h)egY@~Z";%7#`ʞ Ge2.Ey?ʠMcń48LK~ 5W
=Ƹ
4f4 wn"Ԟ=k$kK(_Ybj؏~} h t Ūx O@bB
y(!ˮ)% H--ym/n,1TpҡpӼu{^I Q}`o6^; {x*smo{4(fO j3?fճf= #^} eC@ =ט$6Fߐ&~ԫSTQM f8 e/C\ ,H5JF\IˁȦj< - %+jF?tS9=p7u(f:gq0 }ޚ >g
L-x~x%3 l B4;pV9R +TWpѣ)˒wLa7*` +kU_nOb}Ƈl"ZBAi]1JڕCVE$;> MCNhFWTkJ/
̲mc7G#u%j dpgǂr6`w5;@nkV,|-GNcC@ njB,w$Yy
E4"2Ohn#kwiYɸ68 Md0))ӟF
+cmEz.7l3oW 1 w<ֶޓTwipy)CE
XTGp4қKNX>MaP|sG vv e<hCwv%WCJ|L;'ݭط}hQ
WD2
=x4\|R]F.0 ^*Nm8?xHY8ւqWze>r]&mug@ {ipKb3Ŗ4{0DsÀ0E%> 2h<_VZ@A#h**=~ GhH u_ 4KA
lh|l-ՇM
\QU7[zV#>`o%CWOh7Ҵf/n. N~ jk 768"2FԈ#3J1G-MFr:qWrkwR
(ye{d͍.sVZY
" xn.)ڨBʝI칇]TVyG J04+أ[|;XXǛ@cf0 2S 5m`1g"X*
`JsS )a7W"h/+~9*vy~
|^k{uBELcHm>͘['(oivO<&Ⱥ iJ{Ьu+/7 Fd13Lw߷dHC07V (̄
%J&1`M
iD\zǓw/}?0!XF5M !5v&Ϯd)M5OzSfQ>}CKHªjRWQa'B+C7'|i8*[c2":o$!!OQxv`:6ciqm\KEK u5|S˶"W1}zxz}Xh~K[\p szB1F)JrZN+T <( RƪS%{pl$洟((6Y02\oI
gyMBY*""<&]RK=]"Sǥb\N2ˈc^sTY%TmA#t}e̚aL#*ox s&;Qfh>% V
w:TLjg4ަH%|wBF aq,}qedeDa]ˀS +LsLx`> csJEYC|?D-ϧJ/b9ϓHUtm${"U<@%ȿ6dt.HKpS'=e)Rl#q͐(F{9(PRLX!;i@iP='xEÍGc,г ڈSQ>9 XtyH ^y}3 >T@54B?=3RZJk:KSLOd{Z( Au6sF5n;S:S:ԋy~L/ g&ҝR\`ɱ3
Y?R:rFtC:x^)"gE68{ lT&#=Ҹ!]=nFG,v% }a_"$p[ (jk >YFV!b?JG2ū
oEl_9lpW!f3 !IvU 6@E2w7b_)kgJ }c=TqOaNzZ\ҠuU.CdSΪHY0`h HłН6D h.*K]~<2fڙ3J&@ש *чN{z2
U ,&~3u#7BbyJ|*" YEwG`##r[>t/&!:T
gar2wuA9H +gpH=vd+ ! n2T\J̸ejGobN.N֯pS@jE j0]H<gةZ h7`yrm|4Wu0UnW7=5QL^"?HKKŧiW½Fa>-nXDa}ɇ`OEw&Fv{RBљ(&}= mp*D˵1rX{i4p"S $Fk/Fy~@[$ n jc"(ί ;+Uo֯U}x_,s:gCl<i~h| xyI( T^,GX6y2W}7NoZmm[7) xAzIߛٻ~{[ I#UUToid 5FQG-Q*vǩ A ^
(GO7^G9AnnO
P@QOIv-"ŜI@i1 }}eNH =l7v>#]6 Js?+]1@1.cb^U Uzm ~Hcп ,!H+c\SAix eζK=-/vչʘ: eghMr:P
Ok`,ΰY2N&ϼBʸ64gݦƩ:e¿YOhcj!Cg.p]&^lcX<`Q橀Od'؏5*w8stvz d>qO CX|`z_}uk`&ƸBtݴHFyS'
:)j4 =8
TNtN!r~>Jpa}e C0!czgAE騠[0#k9t*
?F.drw_ad 5
ق2&w@ h_q MEV|-{(qU+
^,ău#.$BsN $GoG-qnЦI?)=tEr"Q/Je z9}y&gw LZ(D)@vC]50i @%5^[ɉ XU=+=q 3U(Hh^51WBF/#&
zbkBtΝEf $7%U6;6s*&EV5_jƋ_^kCX,̐yΛSX8QڻH]*
lFbKB3r|9( osZ}6+˙ݨ2\̂e+HG)3H.[fgӊ)y'q6i ˼80qƼ 6 .`ԖO'ʘ_vk]¡/+3AlAn}5~Vr*gb[ge`f-GpκӖ)+ʩX0 Yww8>o)(CPBmGU$eYUDJ8T
zLfQ߱b]`O ޡ2J=BӰqS 2x]mSdDU58JCe_M쉊I@K8El9s7yCLn#CRnȞ˯'|E>^dl_7i)-5=oMmMt9y2bj^6e+k$=&Zu*r_ ~ ;5t[ p
t M_,b4 t0nfUGQ|fb8wŃ !)SXlu0 ЊΧ23ՖYa=A_ EvEU`
e6
T&f 6XBeć, C7gC0| =] .8 dL$Ɗ~3 aL(u_R?R8'8RunaMY jvI^ߑ;X'^)A^Qq sZisIT!vuQ[H,BQ >pY2^8(+Lk.?rkIwJh#ZatMŽ#HX2"h4CI#_F9ՖfWQ=VqJB_B)D&䲜3QykW w9enu'N s1'ΰT3 IY*~+gC9 .#/,3Q>#TrLjLK2qwo;D
]r a?҉}L
\7J*.E =s_B֕ 6ab2Ø/5"nAcȬꖸ YO1B@tR
.scE1 ̊3.421sjLEYg
sΙAm?¿>4qr$$lKvpɾ;kak
46*RP>+u'
cjr*KǰO!E
9Ր!U#{[J! C0K8KU CMa!
Bk vH :ypi2ˬ<=H
w jbX8h̒$)/}b YHs#%i=v_+`b}sEC
*H j J# ޒ0WJu$b ęXdž{&"ph)؊ h;Ua\ppJS0J)_$&;Q*M=dk#puw]% FRj{}k p#j7J۹E"a|2Gj ^B 9|.EJ DB3i`ɵ MpJn<ܯNf[ P"y~ 4uRW}80NUv!Z$u) ))Ÿ ۦ%1xe
cuia=H;P qL}H|ɝ={uh
mF)Oes
#0Ʃb8a+^)#w_aޕ܀ ~A`QԸ
ޟR|F/)
4YU5F=qnYP7
!ʗ=X1 իQ]k ^O ؍ /Ė>?(J,2:ۖGj8#; ,1E&Pʻ > u6\'98SW
vw qaQ!:e5UA&wדsi9_V$G-%a'{6O2O7I[TjSԕTx:N CdIeir7tGTG25{ =\"77 "yڐD^u Z}ŰUq&
GOh=-;#U{PFa$$_UΤyr;wE KEl{ *mrv
If6_D)免L < kCZŬ {%fjKUԄx\1w%jSc:wsh*~d+d<`uoF rݛvNGJLҌ\'g~3_X]By?qID PU
HUA*(/WޟҒ7Hq\l'Tf>ko4a
b.Db_Jc9fB9_tCrvgk~F U|ST ! !}ږJC TM/61Nt$QWX~51 / -5*~^4ّJpb:TЯ6U}cCB&(}t]ȀӪsKuǕ*=&VcRpdD2D4A͛.TzT oϥo?@])Wws.}>Az B^;crҺ*I@ $ 4JmfXu ͽ3}͋ wtβ"߿6C8 G0(22@
8T\ C/S hGOߵz 2# &ѯ$A
cG Š .E cZ=if*}UY FstJDg[
5 /f<ù
bT=ݎc0m"oΑ\}Y*ow^l\k G*5)SIK]DAGxtƵoS "T5oR0ݺwR H\ch魸ԛH8$aM2p%G#Ku& Q/%W3rAPk# *^ u3ɚS0j-Es9vA(yNn *Ԩ:#[Z 5
d $=,G(ba{ 1܈4O)w_8vu6?
j=qLۢ)RnQ#R@,T#f*i9`[n-Pq$ ۅ ގ*uM9#G 4F_ʉ]sW?Q9W1CZs7a iý
9㥿s@_^?Ly_00 k:Y 6x7!A\9Yҵp_5# V*SvfP,$ `}u_|^yL `#eqn{
k^YL3f:x^?Kw _BNF*~ɴmӸ
a/Y Tm/_Bþ ƨHݧgc5,_X#Yqǵ>\20 4k T7><Q*OHxH(3k l(oڰ_IF@,UO29_;_}<{Fb#;VB"95G:W߸l
û|P夛8=X4cCUI?w̰#kW:ƿ#9?9\6WdA2U;fʷ5܁Ok> A<ĈA=y!1l
ɉlM:?nlW9zlE(8j[9 /2 : s;iq.9{}# ^Bz~B_>R^{&ls "tezh6hZ4#F/&bBWAHpwc.ܻ|OHeܜ@ X0:Z6d|k0(IЕCw>Zţ $(˥e~#%@-~N_), =%iNb*?ȴ~b?RJߦ6ѥ1,}6b2{tn/G+'.3Dk ;<.lD>
|(L^E?ng- P %X%S!j{NfQ
ZL~N"R⳨K}#hK ɲ2I1A_J^lL͙x$) YPTeg uˤг<ц\?r[j1zf)pUc ozqj{1`}7a>_ Wd&MM_I,!Re *lI;(/4Dg G;' Ij-I{"ת}S~켹g G,^5r UQFQ>+Rh 9#ӑؤ9{8IYV Aɼ[ ,.cR˰BmqF=ؑ'? r$rJMBF Nȕe++)-w(f_ެ]Ju,1F$ IA@Bk>ݍ' ȇwG{9 CvhE$,
kt̗%my93x\%8mЫMQ۫E@ \\L,iѩ \~BŽ^E<2+I 3ҹ@) 5fY'g1 322g[!s
O%f5.c)s8o2h/BW(g'ٓn1-ni
(O G:+A{VlU8$)W ;Z
:)đj6 i#VWjGUpb&L=`.>CL㫝CgM ŒT"۫k OS.{xiǜV>ʒ_ڞ~^BG轵 c<o؈$׳pcxK9_ľ B,3vg @ U
ڴhL
Mşve*oF h:a5=a.ԮgLiN*~Nv Ǿ _<_ FTZuH@=*QǡYsV{~o{?oc{+uo73Mk1̤<>b^,R=~)y,-9B3Դ"15I[Z @XOT8{w _ Ylsm
wq6
c,22Žh~)¹U 6kh}ɩ n+&`ItW9ʏ1gv܁"vRMS2
!R|SDdZ799o\a ߡNk#~-vLi&n06!]:exc-] #SBׯKjAL]" /TCQ2{м@>LxV3Xt '9qQV SnKF7 i3 7VHgQ2DQuuR0n;y'I
PEGt7vMP;[!U,$_:Jgjr邓u#86G$}kG|=v=FV`rzq{-=')I܉TZuNM X7U{b; `n^D<& $L鱗>i`"M ~xm)לNGh]r Yx< e'AV5ْ(
'VFS7K}<%s9ĎZdi)7#u6K>A y"@WX
@%xv^/_6
)#9=Y!7/Ed{ncp]r]J1r!s$W8EqW| p5%rC!.Is49z%a ]q*YHս c ^N6)
Aג:wP yMu"QyBmjWą-CW 5Uyu? ƱvN-&t~GՌHOEy^ FNr[9O>+_붑Goͧ;Ixv͜EA:SVLvd4_<8HTt'pO~7=)')ce'gcv!FI>PZhjƼ4Cn.5 [?s0'P\\6ET ۵ Ŕ&nQ>vn7Q,6q5ro]tG2Yhoۤp aң}dni
.LKx $bKK)ы4]i[n!W(''v<^>l槲B8DWEN+$9|ӕS.۷ h6 UM:6/3/_ {! X@wd.\ y$EgS-xe|>HHQgNv%=1ud(aDWjbR~g< hX_ݯtH\8uaZE!& z yce GWGvj k]J)LA2_{KpfSq4 W1ǓYkmbo( 6, ۩664Fwg]6ft-$o-o
6PY
ϭ۬${zP_84 `҉kg(e5 ^Zn'7A̚p{l+ )L,4D`R";/F D@rQkE4N nA IoMM 0V? B^mc? 1ij '
iG 쎢.'`tѭ4.[Xr)%;?|(u0P?lGL 1
*{z9A? [Wx}l[@ u`KVr!>j s LA+CWht ) Dza[5a~C ANg F]3BZO^ϔBiQ"Jo'4^,)Tz/[?Lj(iT4t &ȆnԺCцCl;5Hߝ04u2g+ׄI`]g/3b:U Ӱ ^?s*F̘LYl\^, @/5I薶d{W{^NWo#h譻ￏӰijEEDxUsV/"D:S n= 6CYx)\F7b?|)Q93Z"* ^[B פ5zʋ- 2RkKf2"[kR--=(v{ xay3sZZ& U1wCG<Գ C{eLW>;j"E.7cJ~ &F
z'V Q Z]Q
7&o ]DE_ ڬxE[l;!/
H,il*G= |DFof;\PE oёje%e ;e粊l~=UwUs
hy} 7ދ vaKy}t5
=²f,?y"-/]Co0߃β"ɡv ``Z {LYF+ں70Y<@c߱CUyR2b:Kr].yTܓ'P= boT,̞`ac@AQV\&VzqʹQ ||UY\aw4\daF"D!LIY4PT o_@ 6vdAAѼR -Ν.ٌXv }
q,_D`A0in+]Kn@AY]ph"κv$a')39&ғzF !WF̝<*XCw*em} ?GFv&ғCl4f%y<^ m?L˩XnkvۿG(DG1@C9ڗֱ>k^} !-F$/R̉.`F$D ܇h>5\-\MGDQ/%:1} xq/ZQ}o1
WjxtB 0P
ƽsoB r('ja )w+ˣϐ\ K1fn@_b 8ޮyi
0 ;&a~ S)o(
s齙! -+ Ʉ+fQ 0~ը5-v4hhvhw5[KEa@h pKP.nYsJ'f/]F
h≊w !55*#*p Qrr 2NBUR̓9PihPPj#\R tK;f V\rg|B7:cb\Xm'
/d n
^Y dǦ^*+2nȼJ~Gq!hK*j(ad\n~DL @Njy ̧:rÊ8n|1
kʠ#O7&xA)-
VPuw4h/T]، .;la@R&.S r!T2' u7^"Q.-o#>M!L+ -bcv#;K>]V[ B`Eq6^г}M{ dͭMpyj.&6&_u _=R"G nYLҔC79B!
*g\]R}>"NS8珩@8:qls3 ~ aCG DiLC&xF\:@QՀ x̪'4w i5o;^blM}Iaggx?e6UZ|2$Uub$drYl͵qWHf͝x$A*]d֩mۓ;l yr ϮVɣ^O얦6nvQ.mF3(Zl h0, h;)pFdntM3yZzSqB\:NMSF nB)2^~F 6n*='Ņ#qҿ wQЃt|bx\;2PNmv+$n#9'O'Rhѻޛ Q-Э9 0gVӚ+0j5'73#ۈ)ā
v)BgA%w_PT]RZ)8 eD
aXm>AaёS9Cd2k71n3ƘXmhXxxFB")"s=b|M{'(
v, =&k꽤TkK-#oO@LB 5 NEf!
k- @GEP Jzp R08qv{AU{ϑnqo{uR2c8[PAt 7wJDR'}d\ a,w0]SM%$ȊF"0sF~7n=$ͅlXec<:.YoP
Q`I=8q@KmB '\ u5V&el
?ь 0HS#eN\r0
N ?!1
iF=Oˀ@ 4[ ~h 䵊;@4;i\r{eXt낞߁USnEҞJz>|ANy>$ے[,- i 8l6l,"y]N +^W6{'kV
7F[ӱ9l!1Qˑ{miE5 pO{fD}l2.$BF2zRj\ +h ͵XT弸(S. '9ltLstRi ~to XD%5Ec =y,Wʝ,hh[}"=n):h^0 +/{OOqn#x1E;${
ͫ O Bbh
msJ V:'K[lr+1Y.L h3skA9F8t$6 :]3k D'g|
I 8ULe9G5%!IF ꡝc)'[Mf . ;,O0m6Hk(_xwv><F?%}MBIi!LΥ,hn wQRGS։]> ș*t އkjn#T$,SWmYˣVy@358Z-o+l>HgQa]*Q[HE67u-X1ʒ1 Jχ ֳ{SJUa3ԬT)wkVF
$eVrt
aj"۫Nˀאt2!bI> wHƴLU: 4`5>p+&K*l&B9c lb l9ވObze=H) GE' =p\>I*/Y]Nݴ;T.S|OCo yFp-ar@~('f9IzcBO U%jw08iƨ%0 NpN"Ť{ܤKY`,'F٧
%;&mC
PM:ԳQVj"]uU/t;{;sDjmbqT0
)HdYiVs1B-o%А}ke K)ܜ
|\1톴 ]y[!gh'j ,J:$3r8:$Ш$@xDp`> 2;'@m6*mcHZ;nAX,
&pU$+ABiG ߩѧ]h9q6I6HݤxO SχuK N;e$* PA9^2]o=@XPbyE )ͧis (;yA}4~$(5h2 K `V>kBܓUC`^ge\AOEBdgLkj0B}SF.j~_kVU=ڈ_;uY[$g@ PL,lj_M >P>xO*5T nxle^e)iÝ5ZkI'c8;zK%FdPըXo9N֛U6x3P䘸³cp ?$mIH Kz# 5LnL#x.wt'qxT9%\#:"g88fL5l~PoЄK0[ f-ɍ}3Yjy 䳚^,r m2TxdM\2hEeO+]%Eg⏁id$ $:]{\/*mIĄh=:BR)-JC6u5 !&:R20 H|zQa+ 3y_.UDtt@5|<ƥ\UG,:c [د[ޣ!.ifӖb-_i)͈~OXZOGRHxD6) 7دsAfsJ (!sA1 4:ڸ 6(SЂRUos*$ctM)1_ XA<<2JOtR nu5[. {i%4M6j J4XoXFʣ%βT$.Kp
29,,ivi} Ap^tB;iCs~)LaD~loAPmjqHtu}k*l.xɆlV r 6`}덴 c·ٞWz§{67dua T|MG=^Ծ懽tUu 9sM!_ؾ Z` ]ޭ~%
J Xof7W9vpvpсχPAnpN 2fk 0 iӗ!1N_NQpݎ+0Lj҅h[v>J&Y~9D@aw?-%9!Ck
Y ?d)ͨLA i)e`)([3|~ |+43 s'r}*V !% L&a]NltuUS]4Bq 3Of,MbJ8Zp,F_l5[aAv聑I^bF>"/ь2G ]XJ='4ںy[
eEpwq% b@c
ٮWf ] Ɍ@tfv ve *},9o* LN* qXxVX{X|K|PUROќCЃNצUgY^lt7>ma 4Av# O!M]VC^Қ{#.4% _U&ŝ"td-ג T9ZWcfm /D "0eQ yp{&:)! tx,ܸm
;K` HtV$Fk 0 Z0Ǐ%F/O=y7A?8q5R^ S5
px}vrfuOyJN%D.( CN31>yzGm9HdyZZscq@PlCГ|omN)`H&~+ Ʃ`ӗ"/]A k~Bжai<8ް%-fY:̖kh'Z}?N{5+OMʸ}wDLvnROY'VʀF]V6W8:7sHb3b1dhdqɣU4,, :^:JCh GE),SRA,,}#q{B !q7uβ٥-Qtb-;.wjB{@ w: |{oړ^S2WU! ;&Z՝9i]1i"1{S9/f-aS'懢wtԄΌkca~@KZMOM1 ~9Vy )=)YwxqN+`>_/ؼ1ATf0EH WciT 'hu||oX~s 4ɝ1r nadZGoѸ]3. &c =EF`Xwx<&Ia 4j$UڽCv5|Kkr fh
Rqqnˤ*@f"3d܁ k^mT# A7#-BhZTb"::vqj ㉐?:WM6*$qyp%6@
C\z!℠K=Mt0A&G0hs^r*jx9|9P6S?@QOxT
Tg +PbTsjtxh rBy%$
Kl@V[O=+IJȄ1>3GXK]eie3Ж ,dI㶺ݗ eL'j4_͆Bߴ_͖4{wfOC>5C 5EI4ܿ`s1?j
rA4;&;<3&F{1|?6a
`Pc 4DĖ_)oc{9 xf ;WG1V\?U>AK`
NW<ߢ2ÏXl[e
qcoF!ĊF P=P7 Iw6lAV~gA1=|[lxQ =_ༀiJ86S7l m8ڨ6 7fPp & %"#\81k'"@/p. :
ZdtRq*1
3;@0 ; ZǂL1H_7\!e O NNafN-(3GgqXz@ a ^g4B2
K3sdٹ3 _z" ЖaR *-=rF
Zxɼ4r/H%ou Z1E'ϡSdZ'hї/k@fꢎnzl *o560DM"U2$縘pJ}$Oo8kqr15 t2Ƽ_ܑ\Yp`PpZ8'ٝ֝P1df5 ɐHD ~ F6
^ "q>[h=?9CO4ZW5 5yJr{ ]4x H FRxvE3
e@[ n8z$g7\
;/yKHHg`8a6$z
L}7~pCDc[3{I
[v{s1 "RiPO`,Fھ~a FH`Z꒣[:hJvF'D\>=xdRir(Z% (H#0۞s[p8@;lT2$0j|=K,jTV¨:Կ
چ/ϱJH>' !!/N4\crᨪ&f&iyJo
T
0I;+U3YL臋2(rgSc3?=WC8dZap;M$NQU-ߥxW쮎4ɕOy;ane)v@'yJidw~4h#i-Y&h)H\~k:#(N-/{3fg(aI60blvALE玖G TfRǴ_\8%+tK w m̕voS'fz öj e&,ֿKOWA9q?,g$7@J88hRÆfIC)(Iz.RM^IޡjTG@t8!puBKqasi7#prb@_}*3$=̥>jSP 3m75MR,RxA{}t4 bdjyϑJL mL,8g 43b
<:$\,& 4N≂P2:#h#@5=K{Ґ] FGUj3}vuRɥ
[M¯ڪ P ӞZi}tcs m^jg T+8c Y5Sr˛NZv7⊡O\lqtej)X٨݃u>`\:WεvYtEZ ú Ť ] Xr2LZ%GE> ?Z{99 _D >)3#wP↣l\RY4 IH-4UU몮p7~_xV ;@9' wཇEN!~~^Xn G@X2pb);TaTܥ & Poe6="i g[wھ5?GdJH
:Gm0;ɑUh*5Q[۾.@✝LvBܷ⯆_gN6
^yҎ!th+C8F
˹3G<¾?T5g]I ju9h B /hi|Wp/s,kixtε=.I۠v47}`.TĎ0պp O,.g ew4"(BSh,iÛ,œ W#O}?f͗|fؼ}ؔwфYOG v+lzIQdOB7dnw
c ) LfxL|љ DK b0J|. %nծMpGFK/ԉG2 &:9\h l["f[l=)3&[{S˳4m^b5;ORKٞ,jŴUϰ3bqBkͶuNE! ģU!$s b➮~
j#& n
Ą\LXٓ8k9еjǝ(z4ʏ(rY oVD=u|.y`|'YJ@/aQ.@2( n}C \+mM PА!^kPjJ]KBtcric?$SZ4iQF"ZBj w ce vCҲ$ C]`Rm6̙Kx&q%sɦ|萫Lωn{M4R9V
n ̘- ) ωl!)9svK uD<``x@R4z:RI~tQL"*7}'bu Yݠ#ݍ5c_ȭM/2SQhy^kFCBOKC2+xw&b NΒ1b
AN~;nP̜npq9fʑ*>y Kx J\L{|R9`́aeYv|V>7ɝ]҇ճ\Sk Mۘa 8Y|E Q5m@kgU1]~_KϠ{8ʌ/v #f'ǾD? Bl_*_9?Sq,Rw G0>"(#Q xv<iyw|(J Cڠ [ u9Ǽ:uLk?C\2}}jh^b
VkN/{j<6s2ډeZňC|FOL+v9! &J> -!4XҠ6Dod*qړXu( H= ak:7y\
Ic<~ZV=֭ċTr!h^}!HaYY ZmmaCC 0CU1dI1{zK ۙ,,݉Qrgm NE +Hhk44ChEþ' &O&_
&qƑ_n}u* 5`pf K_Aк PA
r:R+dN\]7G]g>)sճRiw8`@)^I
P_]Om84IaRhչ%vqcr(7
iI%nkB ߍr*A`oW̗gaiz QJ#K CI["&a>P.;KIړV
~&^ 6_頏q4
s
ZS9+Ee_)PԶ% fm{3;z8ZqiY 93
=R/3@8_c{05x!hy l%d5zAu?AGsO [,y*c
"'ˉyJ
HxFF#Iyjø<]6'QP>6#{x1~67?g|]}o-:gMH \Í V` `k H}#36aR|\sѐeD
щ̮Pz}/c$18JIr\fO3a[ס̺Jlt :fAޮ6{U,
Q,Z.+1Z( 4M9͍3=.ߢyܚ-chGj@ >=oX岪(^6~9jbOWUD1Lsݔ'*] ~JQMjf]+h"O(*ϟ-,ͬtٌ7'Wm ;[-Y\W\x Xo@N7|
or:BoSv]9}骍!;MTnZK
AKpL^t
we4%s%F?!MS }:Aݕm5:+ 9+ފ|d)8[ 7y =9-u5` DU[IR4M%U#[Y9lKo
xèT`7.D~6pqX B6iɼֿ`jn(E.\Ks͈wGe
>|D/
Vw@*aވf` KTmOD* q ARI_V}|ĂyfK x#*
ԇr7 =_.RC)ʼn%ƞ1,[~ e ö%3 Ǯ0'w{SC>^K=ΔaZl-9J:h !t]W↊!ylͿT'^̛oզq 9v
c=_ (6l !"!vq};AK>)q Ɋ@CMeT-W= a˭I f{p: AO!R\ BQD;Uw*
4"0? aAHF^O=cJtKB}"$Gy"JPa@*Pf| ) djK1jP 8R
l4N8 ,v(r;#@, і >;KOh;'<9T>/RYCrsN ƒD.N˚X6<.Ճvk8%D!nxߞ#c8 &Czy Y!q?d֞Wݣn_2UvL{Nqpk5:[m뙁ز3cfX
cI X
ŏB@ʌBi;%QL2'} q&+"KI4jgܽ?"oԂH|w32uv&&jں{ZopkZbCMI}NiurG4%['j尚 (mdH`^1 /?N,gC=i94+[ĎO Dm3Qwbm eMڨgfוd$0M[Gq0
9ji?9}r}ǾdExރ#{➏l-\+POߗݓ%Ҥ*RY+SJX)o_f5Ȓuxis(̑' sc=WQJ0F
+I&CbNc%ELޠ4Y/n&}h.2n7i& X#1`48q@i.e +KeM$/o '0fCsQu6(M-OIuvɪm3&_/l&@~6\r4
@Ha,/b~so YҁlG/8Y|{ GiCbhp0?bnU;:8ܰh@r>ro4'\qQQ U`_f4p 7
:5 K; :G0$Aoʞ6aцpRg\,I4Lsi45؞ON}LX)܀ӎ7$ g;siܠmF]c747;~1-V l6pgpD (_;̞*>@WUj]jՅ8q̳~+8v%ȞghNxb$GMld8 -;p_;}:~)״k^fe>`[tjZ *V վT c X˰VВp?}[nSb||1-oMDhF-D_\A:gM~GŴiF2=Ovg.uƅej ?ȂpNԧ^/&"(B!Xnmct#G4(a^8v:N%-d;sɢkmneD%[&=-*R,+8 BZK,#;Qp)IO:*~^'vP,H
R0Mwk '^c褳 6ntkgK$pTG%MQWڜD2De4K`1iIy G(.zoo~Z+
V>I=_ #=H]}p,M2Y,xѺj8 hs1^JJ0Zn (Nv|K X-P
ǓŔi$ւ&OgI4L*t穻 $.G*X+.ÿa:[r,blࠡgP4BŖ/ZF"Azcp 'zIx0vC& ;V}u*És̊y!Gz&dF
!_)X >\wUTW3E6K( t]7㪭hSkEDB*r_۸k]9~>\xĤσ30٫
1;;C>IY*Fu&A @eiUVFQ~[74B%Q˺<2-7R^8]!pWK^K[!`ﴞ+cDEW% t`fCŒ BO2oH`k͌ ʲ{va9:(z}ܶ%٨wswzʇ@8r6(`f!-F je;MMU&@J;UuSP_ WKXpÃ6!ZT,JF[6
c-1ܿ-(]G`]: ?UGH77+]Nqk_u=BR𒂼b MIwt`"{Zoqp\l*'cM}8傠Ӌ:oQ> a-8CnCF
d0Px:O:z xHn )A-?o89_Q1ɑ`1Ȯ&FguZ$1ses
ϧ `1|DRxug: Uc0gԦW܁~6Qm2GML/6?b$&I!OI]\pjt?)|\+t^\3 ,Uy> -1]Te|ЖNyEqX<(_ҢiG aZ1,cihCr,~kt[%psbCN FBHY
y53NE~dj \Ud655GGlPJzx:(I=akS5?D! 1w<
PtOkI`mۯ6 L2|֒A 3a 74r[q&0ſSi ]1 _ !Hކe> z kɳ#'ݰpHY##CX4Y _K!_:5Pn~]v̧SY&}L8'M /kQ[[E%fò8uS2][vCcEdCV0 '5]*]]0&@uL%zxCϯ>qXR; b vqQ{9 u,ڹlսlϵWGz hb (&sXRܼhv#х A (`ؼ]/N!:";hh 3]X7%Pd99E^U W4{5`U$~g+KH:2j˅){E1^xx-UɕCSqK>ͩw
dΞ,}6S&s9yUU0(j̐ ,4u]{M'@īdJ=KV6_Vp4X[^h( u| * f 3d3E!/-?7J(
%ΛJIxIÝ(\).E^a M>0Xpf(4Y-pMr3dt g`a'{`/'v# qbR ڣ
zʢZ5蘖tǡ[q飿+7},˅\jlu?l5H:!,V/ބ{& >O]n";CCl[ Z 5jIUPQ;ji9EۓLYXKԷtmʬEK&iEtqQl;娎 3Y$^`,M.,Wzz EeQVT@G>s7Cpцj!!,]%]{
1VyNy X1?Ks [ē eq
wo/=v7!1$Bu
&O _2Yqd{1f5j=@-rwb7#}%sLYiM+asCq$ &:9 |ѫx̟P" 8s uLyϾ L b%< +Ǘ a ?x,|AnParŁI)CT@ou;6~QtBYR?\b=xa/_P4 n'7g#SW'A t$Ր X4#U8:f$T͢maS~X)eDxշ @3(~(~3&YМ\G3 #XL>%eYZQYG ĭiM\5"q&2^6)OʱO8O{S}qQ[}l:9ʙ%PVAAqjb}m1]{f%COVL ,DJ8Ͷ6`z 9 svcek3B~2HX.ogM|,QG[mW<&1?&7tp6aBT:uU@a
W(.60A
)Pd+~pƦ}xf/t 3eWu+U
v)` )=< \Yx<5/:Zl,`!4ͰiqC=3{4Y ÇƦ!bV..A7ikYvjڛQ!@k; \L SymljγG?WuNN44xx{@g ?J4 -+mEYÓ6}]p+R=w^2 rjWYXM)v[m;3ad, y lLC)N-rXUt&n+8jC #1Od}xvg`Ɛ<}30bqEظ K(`m{ϜL@%W^HoJX 6P1BYܡjf(tGx.ơkYB+[c!x5W{ `}iݑ4+z5hGk X*E
(ADE|XцGO R̫LE7l͎[TC4.HOdW9sR+kfSxM Ww}1[ng_%jb 洉㲍J?Y˸q^; %8ZiRG5ë:g#t\}x֔Oqr7ݔPϒN`KŚ/Yެ̃sM# EZMSMH_~A6 :>^!ܥX"w
G6/ZLEubZt1DZz~!v,ecgiT$dcT|+ j9>8#o=Amc NN jqC|ĞD=}/ZO AJ҈{RN/+]jHxAGL60R ==&_U>7h WmzcĔk$5E=#Y:ҧ e~p:2Tg%lt==Ww9{]E-B#,nȜ,(Vw<,YӶvM]%ےvʮ?f3
Ej7_#`_&{#J MY4sDԉwaN~H1rR5,}ߔ9I{`g ۱_ 'lhHоԁғAW(đN# }`=~.Ϻ ^7\eIWӛNb&*뽼oy`kb 5ru',|FԿhZ)2r CJ_4$c^%qPUf״2y Uo OY[W`z[N҆ժY e4ȇl̙)l E\9as%Yɧbf +dΦzs
חۇ95
BJFzC2#+§@oe<成Nl? -YfЕBVm 㹰Y[K ,3{lj g0qCi%81sݲIV#f 9F& <>bc+(Q6Q=+*û`bv2@bx<Ҧ2-[ sA
z.!Ҫ1z; y` \lz~ˊ#'FW?FAZm^{e -F:&F|*k=bڗ!u[MY/DZR? Te{o`Gu Vp۟&h T5-9d
xugw=r QX9^)ܺ7ZVLp\[@_n?Zr$@MhLy.E
Y;Ak4Ѐ}&I;\k( T
0
7ΰf
*=r!Kڝ
}Z0>;KSO;-"+ֳӨܷ^L@7 ky8+/Lsկl9ڲ;W~u|2PƝn2$br.| l0to)f8wXS%< O,y0!U|*UZXrV$o*bJU-º^OKV*ȂΩ%!KvQ[K,72Y7nL!Ǿu,kLRی pL*'P&kp~tMyp !eADxȿ䚡 d6Eëg+~rM Z 73M7W>mvQP4k:F-4CEVu
kIfȋrI9n
狵kqps}sCCB؞F&#j3Ԉa'o$! C qE(epd+JÑ-/t1_ ib GLj`mZe#bً ˦LeD5;nlu>X unirSYS6Z5W O̪Kל̗0TX`n Gg;4~LfNH8!Q^"T'>BlUM\Ȅ&k IԸ czQ*{ f.l͐jJdA($VxM( ]s *M.%I@G}~ b f 9qa20^&rXQ,qrҎ'N
X > s=ʼnJ x. v DɡM=I+RTcσ
vә8iF[6C
a,ӟ 'F#b<2T*M ? E4E]$`|-аw54`jJ]&]dХT|g N}$!VkPcoV慄sMplEEu "{n\G@:$Q9"+gY@!Cee6-^8]atN] P p
ƭ&Mfօ;= 8:8iS3!iZptJ@y_ V$9]"Y&wCE)95o#3&d{Sl4/QqK A|',!1fFd>,Xtm.V GG "?\V c_ f[s~V k B$QJ0 (Č·F nXk +dݚya 3q O hf7|2ik%ae8Q/U
m%3)7ܮD40
A&v9CtjA}2e beE^od` }e1_ F2~D`pd7:_]8Wf/;-V ) ¬$Fp'| \78p/q!Y?vJQcW1>FMSS_zB^ 5~a]PW m-ž3-⤱(;' mlp iEL5ǻ^ 8cQ`wa(v <ʩuP"{ƕ $M^/N$jUJ rlClkqzd`a>@+ K6e:Kip
36QIG[IL3DN ,8b~E ^(sg\&hKc=[lox 90TS
g8Va0t%yx _/3ci}[8eU"y l #Oj!AYS4y Af˒J+4@FYwYɣSSRk_ I2Eu,.bė?g%Z7"76p_gs yά0>#/D_1xhb=uӸ
%w38ol
-9r<ЍW,o557xz;ͪǞ/a<<\5}
Le(|jYK6'DYB7lV+!B0ױ 0od
7-EQGrT P qwh^^oSPzY_ FʖlWX Ŗ|5^5@^C_ 9 ~ˑR<r H߮:T+9-
"#r50/XX˙3sh6Q4!M==&R]`ͮLJK7G+ q*|~%X̗M?0< =F@2щuqFC[?TӪKzѻb,lH8ZٷY>!w vͪV;%\AQ" h':OOr
0 8kM|=Q }Bohf-&.B<6fT
2:/ d4
Bx'LSB}" ZDmӹUUN٘Koar,kzoIh"?- uWgv3 %8߰Ρ ېj7#WeDz`Y;o0+;5TeOyG2Cn{4YysW~Ej"zh`:8?n|t""DxZ
rċ"{ ۽Wȍ OE=g/]r@~HtmW}Y]ϡۀ) 6??u7B/ mb^0jr(`ή)pg:}] BhCe#IuQyW(ăBr^->1 ?ʘ`Ⱦn-6\
M4sw`aipnC#Knّ]&^5>s"=$ۭ0KiqAG55apYkΟ [{436L`^Ԓ( \E44.zI$7ƱO*8(!K<~!ȓe%Or B. , ZUST
H^8!7\<(bl$6{2\5MQ(
h6TOjSׄ0_ lr ?Dy*HU6>p㸥Kj2 )ߑ܉0n8Gi}rɦ@؟)% }rOXs@[p;9X)`K־c
ϟۚDv碿2
^$@ϰ4` _"<"iXTo
D yN:aHlQ% |`1]Eo^ +M@ēq1My
w}lubb g}z,OASp _kd
F2[n4
Vμ&SPf}XW>ҺutnlaD+9nBP,(@xW[/BOÔ)spwoS~3#R-%jf ^5H3mD֙t̟v+HH Mހ"Kj
& tR_a$0/+S|Qҿ⭏z4T)]l5F AV/z'' Ю8IAgRFqK jZGQi9VUkbXlٿD%D&ȗ2ަaq| xJ%Sf}2y ܁]pt(;-}fFԸe]$Wy5_Ϲ ҠT0 <%I{vH 8W:JZ]U?x5 KRyLڵFИטUaoXye\xXƵ[OI+o A?#τK'3bxr : pJE; k[v1oZk O13U.@VeuI#Јӥ7A vHwIՎ#0o3}h֮߱H"dg(2eSr (5*1\ M oHK~3^Nco'~,p,3w.-(AJ+x3Mfw k! T4[yMkD:ZO/3c_M=ZȲ6ò ~3ue_sYJ?I`&b>ɼ,> 46p7c]v{v@$Q7{h:M2 p2}曱N)NsDۆ-Sմ;*O0eCH4 EW7\bfdK~Sx{C>e" p'ٴ7H' _
+HKSbNX*Gi `Joz`]Td+R7|H=*/ShVEHǘ NYA@#]Qq-X-*M: H8.R3 1/BU:JYjZfz
e
;믿Azi$=z(l铘<1%v*5w9C%JdAY 8Sx2W0 XsrgBبLT+^6{[T
ݜ X¯s=Q` 7Lȳcc(a]
WۚcBh PaH@CX?8Tn)TT ^1'Bf
g sF8u]{Nl-i"o;W\n[O%wLy]YI L a;-6-onf PX0NסU,)Cʿ.:*;\>
IWGPǗoc MBPp M56~Xkp*F
g,om Nn e 'k6lVj@
h0A4#qgN'sl Ȅ^1V.F 7=r( mZNyD~\Mp<%e 2wF@"L6UT
bzAeN>_*VtZ&#=ΰ^xn鬳:-ť""c M8)n; M,NYA U>Az*TīBӒ3Ã1Գ'ӎ)ID-*'.x2 L;G d'uGOUbGVבV9):[ʼnK [CK9砤_bCg j2- ݺ@ 3ʽns m /[B1qX`jlwCع/od-8P2 nZv Rq@4>\l#Vx%˟G1zMψOL V47r*e@pcf@l-CU3%&މ c\k}emTIH)hPsOk:Rz e9s#.ViϬ:EIhƒ;>17EY;
.*iڹD9M ,{g{FMFG)<'YFgq9)d,9@`ogh %S@\ [ʓ)i;YwZhɋcx,Q
{]DvӘ0EINZL딭bDdYぁ忨{:O<_W&͵s @ lc2=\_Q ЁrX/xg削z$;"M|XCm;β=%X=`s䋈:Ki
Y|
[1lM6el҅C2Wo 2ђnV})Klb0s &7RgF2t,sQ_A%lY[#,Ո <{ o`lhs(wQteV^t%,鞅#| \41LЈ$t{ oiNE}M"I mBh4n`(.g+3[ z]?7' ֣.ڥ(8($[.7i{o >ܭ/Xb( pye4}߉aaT&oRf34 2`" US{6f{o'6?T+k^߾2@ydFr%kd4 d쳻Մu[ ӓv)噔w Mu 释$FQ PolGDT9R}t5:2!Y/a6 15 8+V\4͏DiG<X p)ibP8]=Pog%CIPVEvP _1S?L?ژv7/0ȹQѠ>y8=mLӲ8~2qI 1^e '$I㍫ +C6s˭HC:
"ST0-~Jhd ϏQ E]9s:hPr
j*πfHZѬtҪ? 1=
[Bϻ-T}`΅є ؤ/zAl,[#5! d'ķ NXݗ d1c6~
z. |Ŋ/L!rF M\Qn'9"3I2d[c1@!YY` PZeŇtɆeF(E+*[j#n`L*{ˠxҝ6-/3pfIj@._]\ɭΑ >X1)g*6myQXP;~cQ
'sK˂h!ڌtf伮WD?Е{`qVʯ.Gqt~Z©u#nѰbS{"J vX>zou`*>˔FBAzAtv<MOy
TYh^ 7"zMN.~p8ɲU0ϣ!}3R#,a̺˱;![9 I5tˣ赖@̳v._j@*꧖nNH]aM`:ݹ`ǐ!E2H zyly-7_ &_ӞV/R Ծ6bC}v쨙߅?W| >+iC@1W~C1 3, <{wZW vn4[+
'n+Q{MuI8r *0.O ZK'؊gu.r^̜<Ţ_q.] WHaF`FW$i.U' ̾gd
ֈ.xF8ԫ Vҋ{/rfZIF/XE\MIc1>c3U/*讅F %)-* ["K˵
L)U5n)\3(d@Y[0Md+lQgђ `?aGqBG+N $Tn(_۠q܊ B ?EVuE4r&wU/J-=mk0IS=
@km+3! eSڟ<9O-4 ۩*S+I粬uN`:k-};n LnGͅpn;E"ûDg;}~
~4N `C,^6)poז ѷnBN=.,TI4,873y b؝EA@ } ɝ^,E]`d|7^_X::`A+ E@L4LS5^ 7@fB*г^I_C&G z|78?oHʼ݃;eU Y.q*^ yՈ掁6c&|fJitS-^ IpvQ?wq?Xt*_ QZ U:4Sj ૣt_k뼏*cXx]KOq2nlJB%% P-!%ɥT>9T\ ~![墄-\3}naTߛM ~~XJrrۘ+<۳2<,}
Mՙ\
ٙLbj=pxdRWb>frIꉣؓ=Xt2CLCxJe[$Yxi]%SWM@G}mƜDT8.
՚Shڂ>%*P:&]-0*:_¥#ԌRٙ>o{Q% {X7k
^+>M
シ2 b Po=[ ,& ?HlMx;O=rX| 5GHW[yQN"k5 |g& ڢGg;0^f5
\$
@N[D <g7۔2P\O_\o#8O#^P#qg #{ӹHke=G6eNP!36Ѭ@uP^Q9(O'SvwO!oo^ R|.|dw}i{~yU4bR,}FVɚ-r&(!3
? Ҁ"Q݈d5r 9@:z # >zDHڿ ge\3g|sS (xM:!v`ܦ,TdaVhDń\V_rkl[D\nvRl]Ԓ аhիD# YNr&3 wb&`nf#Չ$Q{
%`|=rO1$ glNI*KXLz dIxp(;M_Q1{MhaK_M҇ԓIld!& 3s|VK$n1Cw~lkAE░; 2akh pFXiV0G~gLT]jo ld5}$0|:;3"Ôu1 ,Y2)TEi(q
3}z0jmEX;GZ`bon
ZH$k`ju!j1.rEk|Ϫ/ĆnT|L kYg苬4(⒫\t}tRU G(0/C;!U8=m
P5a ;ס"_q@r#.,GݠP% '
`٦_ yV&{ /ǝE9sqaJ=JEyS4$">b3 o^"\fʟe>ZAN\ ̪kGT 6]Aࠪ\,+CbRx%b "iu3¡cک{='"Lssx0r/%hT#}%ܕWI&tN*' REay
8F>;z_ɦc z*|Ū HCN(.Vs>& x#"<(D~ Rצkq2CIlHA |}q˪J\ 8Vl;1 oAIV!93M'Q +ʏn*+!ݡ FBs |rp 5s"\}f{ִIħ҃'W # 2Ѥyn{z
?V4W Mߐ QǔmI#MBJ /|.?6'E@pb4to)iūdǗ钍7֫GBZzÝEРxĵ1C_kVLRœDsz)igucd^3cH;0Kͱ8h
f`+O8}E#j8j7 8 VF@P&8T %͝ 3VINWߩՆ z$ rc*!g3 `Jwh.εsp_yK#30^X
WH\o~[$&Aiݮ^*r
)|cl } Y`/ηCh3k]7dR 賨zUZ! њZ5IUeYu]O!ǿLdU91f؝xцX(
$H|)d5- @AΗOh x7;5;]{2SDyt1@Weݡ)/OًeW$%b֟8RUKq S{⭞쮼 zqd^O4uZ>.4|ZX[ 6|Yމ_~s,&EXz BUk0f>UN]6e}lI_o 2 NiVM
"w [uW.SV kdߧ`Z ۤ
/<^V2Ճ0 Fbv:xS,\6 D-' jxLJn4}hȗNryB=ES}"f "yo_
QkcH_pxqcEe ȜRY'% xr"r 1T:Zh7
`(
Ns^vLUvve-.θχ~\AX$dx qDv/5h:rG(neK~"z vy 6tJ ϰ!ҏ䱃 f/o!Ž/"PMncQց{CK~*p>&ɸΊ+~m,A aj [X2箶g|',iJjPWNoy6zĬ$#,8Ͼ`lŐfUig<1;b| 7oQ ۂ0ˠ0G8BuݏڸUAЮBa^ݝ `7Z: }ns/J̈́Tȃ+}Aʰ0\/՝>cIh]!6eWO{S峀in"˘|(e?,g/Y+kӹkQ>Y>W՛,e+͵{_`P8 ;V?uRJ1A9<)3߯}zh=J03#bF<M!*3vx MmKlf]x/;8r{Fyx[HPmnJNܗt /]Y
}(,P9 ._Q-֢rꢬhC\Ffù>v,. ![˸i B vH+>YM?,Ltl``B6El ¾ l*HMzKG/'-LL e{ J JnFJĈ7.5n({v ]lOGMsczj 1 \v @m=6 ٔ@Ҕ`9baTFro \A.KU$'+ؼY|nAgeO-a67
Y7ya3ǯR0 <4YZ\LLO/.΄ |d TdzYAңy`݁GjҽMَD}Pv|,6Rꐷ=g֩ U M4δ iX@vOm}Wk6