pdns-recursor-4.3.5-bp153.2.3.1<>,lbEݜ!M@eeeh%`/t:P%$M/~ޗ6M,ǝJG^-A^`Q^gS8x*D =6P{qo@5㫂a~|y"о_m(:"$l/T)9jB#;Ȉ]L Or<:E鏣~tK?oHꃶjm(.ce~}/SA/pG;mc6KT?I9DQȉRC*壠Q y(tS3//)>FT?Dd " o (,EN_ x5 D       $      0 l FFF(839\3: 3=|.>|6?|>@|FF|NG|` H| I| X|Y|\} ]}@ ^}b~}c#deflu vwd x yHz@Cpdns-recursor4.3.5bp153.2.3.1Modern, advanced and high performance recursing/non authoritative nameserverPowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network. Authors: -------- http://www.powerdns.combElamb54xSUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.powerdns.com/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pdns-recursor.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pdns-recursor.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pdns-recursor.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pdns-recursor.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pdns-recursor.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pdns-recursor.service ) || : fi fi+&r+PM`F xA큤bEbEbEbEbEbEbEbE^A_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-recursor-4.3.5-bp153.2.3.1.src.rpmconfig(pdns-recursor)pdns-recursorpdns-recursor(x86-64)  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/shconfig(pdns-recursor)coreutilsdiffutilsfillupgrepinsservlibboost_context.so.1.66.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.4)(64bit)liblua5.3.so.5()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libm.so.6(GLIBC_2.27)(64bit)libnetsnmp.so.30()(64bit)libnetsnmpagent.so.30()(64bit)libprotobuf.so.20()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.4)(64bit)libsodium.so.23()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.3)(64bit)libstdc++.so.6(CXXABI_1.3.5)(64bit)libstdc++.so.6(CXXABI_1.3.7)(64bit)libstdc++.so.6(CXXABI_1.3.8)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.18)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.22)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pdns-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedshadowsystemdsystemdsystemdsystemd4.3.5-bp153.2.3.13.0.4-14.6.0-14.0-15.2-14.14.3bE__X_Wr@_^z^@^c^^F]7@],j\@\\N\J@\E@[@[v[[[-[@ZЛZZe@ZF.@Z%8Z%8Z@YY5Y^&@Y[@Y?YR@X@Xx@XN@W@WίW WW@U4@Uv@U@U8TܕT_W@TR(@TO@Adam Majer Adam Majer Adam Majer Michael Ströder Michael Ströder Adam Majer Adam Majer Wolfgang Rosenauer Adam Majer Adam Majer Michael Ströder Adam Majer mvetter@suse.comMichael Ströder Michael Ströder adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deMichael Ströder adam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.devcizek@suse.comadam.majer@suse.deadam.majer@suse.deadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgadam.majer@suse.demrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.de- pdns-recursor-4.4.7-xfr.patch: fixes incomplete validation of incoming IXFR transfers. It applies to setups retrieving one or more RPZ zones from a remote server if the network path to the server is not trusted. (bsc#1197525, CVE-2022-27227)- update to 4.3.5: * fixes cache pollution related to DNSSEC validation. (CVE-2020-25829, bsc#1177383) * now raise an exception on invalid content in unknown records * fixes the parsing of dont-throttle-netmasks in the presence of dont-throttle-names - 9070.patch: refreshed, looks like only partially upstreamed- 9070.patch: backport compilation fix vs. latest Boost 1.74 based on https://github.com/PowerDNS/pdns/pull/9070- update to 4.3.4 * fixes an issue where certain CNAMEs could lead to resolver failure * fixes an issue with the hostname reported in Carbon messages * allows for multiple recursor services to run under systemd - use HTTPS scheme for all URLs- update to 4.3.3 * Validate cached DNSKEYs against the DSs, not the RRSIGs only. * Ignore cache-only for DNSKEYs and DS retrieval. * A ServFail while retrieving DS/DNSKEY records is just that. * Refuse DS records received from child zones. * Better exception handling in houseKeeping/handlePolicyHit. * Take initial refresh time from loaded zone.- update to 4.3.2 * Fixes a access restriction bypass vulnerability where ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. (CVE-2020-14196, bsc#1173302) * improves CNAME loop detection * Fix the handling of DS queries for the root * Fix RPZ removals when an update has several deltas- update to 4.3.1 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, bsc#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, bsc#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, bsc#1171553)- fixed configuration to make the service start https://docs.powerdns.com/recursor/upgrade.html#x-to-4-3-0-or-master- update to 4.3.0: * A relaxed form of QName Minimization as described in rfc7816bis-01. This feature is enabled by default * Dnstap support for outgoing queries to authoritative servers and the corresponding replies. * The recursor now processes a number of requests incoming over a TCP connection simultaneously and will return results (potentially) out-of-order. * Newly Observed Domain (NOD) functionality * For details see https://blog.powerdns.com/2020/03/03/powerdns-recursor-4-3-0-released/- update to 4.2.1: * Add deviceName field to protobuf messages * Purge map of failed auths periodically by keeping last changed timestamp. * Prime NS records of root-servers.net parent (.net) * Issue with “zz” abbreviation for IPv6 RPZ triggers * Basic validation of $GENERATE parameters * Fix inverse handler registration logic for SNMP- update to 4.2.0: * removes several workarounds for authoritative servers that respond badly to EDNS(0) queries * support for DNS X-Proxied-For (draft-bellis-dnsop-xpf-04) * EDNS Client Subnet Improvements * New and Updated Settings - distributor-threads - public-suffix-list-file - edns-outgoing-bufsize setting’s default has changed from 1680 to 1232 * lot of small, incremental changes- update to 4.1.13: * Add the disable-real-memory-usage setting to skip expensive collection of detailed memory usage info * Fix DNSSEC validation of wildcards expanded onto themselves.- bsc#1130588: Require shadow instead of old pwdutils- update to 4.1.12: * Improvements - Provide CPU usage statistics per thread (worker & distributor). - Use a bounded load-balancing algo to distribute queries. - Implement a configurable ECS cache limit so responses with an ECS scope more specific than a certain threshold and a TTL smaller than a specific threshold are not inserted into the records cache at all. * Bug Fixes - Correctly interpret an empty AXFR response to an IXFR query. - update to 4.1.11: * Improvements - Add an option to export only responses over protobuf to the Lua protobufServer() directive. - Reduce systemcall usage in protobuf logging. (See #7428.)- update to 4.1.10 - #7403: Fix compilation in handleRunningTCPQuestion without protobuf support- update to 4.1.9 https://blog.powerdns.com/2019/01/21/powerdns-recursor-4-1-9-released/ - Fixes case when Lua hooks are not called over TCP (CVE-2019-3806, bsc#1121887) - Fixes DNSSEC validation is not performed for AA=0 responses (CVE-2019-3807, bsc#1121889)- update to 4.1.8 https://blog.powerdns.com/2018/11/26/powerdns-recursor-4-1-8-released/ - Fixes case where a crafted query can cause a denial of service (CVE-2018-16855, bsc#1116592)- update to 4.1.7 https://blog.powerdns.com/2018/11/09/powerdns-recursor-4-1-7-released/ - Revert ‘Keep the EDNS status of a server on FormErr with EDNS’ - Refuse queries for all meta-types- update to 4.1.6 - Revert "rec: Authority records in AA=1 CNAME answer are authoritative" https://github.com/PowerDNS/pdns/issues/7158- update to 4.1.5 - Improvements * Add pdnslog to lua configuration scripts * Fix compilation with libressl 2.7.0+ * Export outgoing ECS value and server ID in protobuf (if any) * Switch to devtoolset 7 for el6 * Allow the signature inception to be off by number of seconds - Bug Fixes * Crafted answer can cause a denial of service (bsc#1114157, CVE-2018-10851) * Packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626) * Crafted query for meta-types can cause a denial of service (bsc#1114170, CVE-2018-14644) * Delay creation of rpz threads until we dropped privileges * Cleanup the netmask trees used for the ecs index on removals * Make sure that the ecs scope from the auth is < to the source * Authority records in aa=1 cname answer are authoritative * Avoid a memory leak in catch-all exception handler * Don’t require authoritative answers for forward-recurse zones * Release memory in case of error in openssl ecdsa constructor * Convert a few uses to toLogString to print DNSName’s that may be empty in a safer manner * Avoid a crash on DEC Alpha systems * Clear all caches on (N)TA changes- update to 4.1.4 - Improvements * Split pdns_enable_unit_tests. * Add a new max-udp-queries-per-round setting. * Fix warnings reported by gcc 8.1.0. * Tests: replace awk command by perl. * Allow the snmp thread to retrieve statistics. - Bug Fixes * Don’t account chained queries more than once. * Make rec_control respect include-dir. * Load lua scripts only in worker threads. * Purge all auth/forward zone data including subtree.- update to 4.1.3 - Improvements * Add a subtree option to the API cache flush endpoint * Use a separate, non-blocking pipe to distribute queries * Move carbon/webserver/control/stats handling to a separate thread * Add _raw versions for QName / ComboAddresses to the FFI API * Fix a warning on botan >= 2.5.0 - Bug Fixes * Count a lookup into an internal auth zone as a cache miss * Don’t increase the DNSSEC validations counters when running with process-no-validate * Respect the AXFR timeout while connecting to the RPZ server * Increase MTasker stacksize to avoid crash in exception unwinding * Use the SyncRes time in our unit tests when checking cache validity * Add -rdynamic to C{,XX}FLAGS when we build with LuaJIT * Delay the loading of RPZ zones until the parsing is done, fixing a race condition * Reorder includes to avoid boost L conflict (bsc#1089814)- protobuf support is available in SLE-15 - Boost.Context library is not available on s390x- update to 4.1.2 - New Features - #6344: Add FFI version of gettag(). - Improvements - #6298, #6303, #6268, #6290: Add the option to set the AXFR timeout for RPZs. - #6172: IXFR: correct behavior of dealing with DNS Name with multiple records and speed up IXFR transaction (Leon Xu). - #6379: Add RPZ statistics endpoint to the API. - Bug Fixes - #6336, #6293, #6237: Retry loading RPZ zones from server when they fail initially. - #6300: Fix ECS-based cache entry refresh code. - #6320: Fix ECS-specific NS AAAA not being returned from the cache.- update to version 4.1.1: + Fixes security vulnerability where man-in-the-middle to send a NXDOMAIN answer for a DNSSEC name that does exist. (bsc#1077154, CVE-2018-1000003) + Don't validate signature for "glue" CNAME, since anything else than the initial CNAME can’t be considered authoritative.- _constraints: we seem to need at least 8GB RAM to build on S390x and ppc64- enable ed25519 support (new BR: libsodium-devel) - enable net-snmp support (new BR: net-snmp-devel) - simplify BR for lua: lua-devel everywhere now- update to version 4.1.0: + Improved DNSSEC support + Improved documentation + Improved RPZ support + Improved EDNS Client Subnet support + SNMP support + Lua engine has gained access to more parts of the recursor + CPU affinity can now be specified + TCP Fast Open support + New performance metrics + For complete changes see: https://blog.powerdns.com/2017/12/04/powerdns-recursor-4-1/- update to version 4.0.7: (bsc#1069242) + fixes CVE-2017-15090: Insufficient validation of DNSSEC signatures + fixes CVE-2017-15092: Cross-Site Scripting in the web interface + fixes CVE-2017-15093: Configuration file injection in the API + fixes CVE-2017-15094: Memory leak in DNSSEC parsing + Fix validation at the exact RRSIG inception or expiration time + Extract nested exception from Luawrapper + Throw an error when lua-conf-file can’t be loaded + Lowercase all outgoing qnames when lowercase-outgoing is set- Added pdns-recursor.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x * Botan will be dropped as the 1.x branch is EOL and won't get OpenSSL 1.1 support backported (bsc#1055322)- update to version 4.0.6 + fixes ed25519 signer + update root-servers.net entries + fixes handling of expired cache entries so they expire faster- Enable DNSSEC validation by default.- update to version 4.0.5 + adds ed25519 (algorithm 15) support for DNSSEC + adds the 2017 DNSSEC root key + complete changeset is available at, https://doc.powerdns.com/md/changelog/#powerdns-recursor-405- move autoreconf into the build section- use individual libboost-*-devel packages instead of boost-devel - add signature file for upstream release- update to version 4.0.4 The following security advisories were fixed - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-2120, boo#1018329) complete changeset is availalbe at, https://doc.powerdns.com/md/changelog/#powerdns-recursor-404 - remove 4462.patch: in upstream release.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- 4462.patch: Disable fcontext usage with Boost 1.61+ and revert back to slower SystemV ucontext. This fixes failure to build with newer Boost version. (boo#998408)- update to 4.0.3 A new release for the PowerDNS Recursor with version 4.0.3 is available. This release has many fixes and improvements in the Policy Engine (RPZ) and the Lua bindings to it. Therefore, we recommend users of RPZ to upgrade to this release. We would like to thank Wim (42wim on github) for testing and reporting on the RPZ module. Bug fixes - #4350: Call gettag() for TCP queries - #4376: Fix the use of an uninitialized filtering policy - #4381: Parse query-local-address before lua-config-file - #4383: Fix accessing an empty policyCustom, policyName from Lua - #4387: ComboAddress: don’t allow invalid ports - #4388: Fix RPZ default policy not being applied over IXFR - #4391: DNSSEC: Actually follow RFC 7646 §2.1 - #4396: Add boost context ldflags so freebsd builds can find the libs - #4402: Ignore NS records in a RPZ zone received over IXFR - #4403: Fix build with OpenSSL 1.1.0 final - #4404: Don’t validate when a Lua hook took the query - #4425: Fix a protobuf regression (requestor/responder mix-up) Additions and Enhancements - #4394: Support Boost 1.61+ fcontext - #4402: Add Lua binding for DNSRecord::d_place- update to 4.0.2 Bug fixes - #4264: Set dq.rcode before calling postresolve - #4294: Honor PIE flags. - #4310: Fix build with LibreSSL, for which OPENSSL_VERSION_NUMBER is irrelevant - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk for the extensive bug report!) - #4354: Fix delegation-only Additions and enhancements - #4288: Respect the timeout when connecting to a protobuf server - #4300: allow newDN to take a DNSName in; document missing methods - #4301: expose SMN toString to lua - #4318: Anonymize the protobuf ECS value as well (thanks to Kai Storbeck of XS4All for finding this) - #4324: Allow Lua access to the result of the Policy Engine decision, skip RPZ, finish RPZ implementation - #4349: Remove unused DNSPacket::d_qlen - #4351: RPZ: Use query-local-address(6) by default (thanks to Oli Schacher of switch.ch for the bug report) - #4357: Move the root DNSSEC data to a header file- update to 4.0.1 Bug fixes - #4119 Improve DNSSEC record skipping for non dnssec queries (Kees Monshouwer) - #4162 Don't validate zones from the local auth store, go one level down while validating when there is a CNAME - #4187: - Don't go bogus on islands of security - Check all possible chains for Insecures - Don't go Bogus on a CNAME at the apex - #4215 RPZ: default policy should also override local data RRs - #4243 Fix a crash when the next name in a chained query is empty and rec_control current-queries is invoked Improvements - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4140 Fix warnings with gcc on musl-libc (James Taylor) - #4160 Also validate on +DO - #4164 Fail to start when the lua-dns-script does not exist - #4168 Add more Netmask methods for Lua (Aki Tuomi) - #4210 Validate DNSSEC for security polling - #4217 Turn on root-nx-trust by default and log-common-errors=off - #4207 Allow for multiple trust anchors per zone - #4242 Fix compilation warning when building without Protobuf - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - enabled protobuf based stats - enabled botan based code - use upstream systemd files- do not use /run/pdns instead of /var/run/pdns in the init script for the rest we have the systemd unit file- update to 3.7.3 will prevent short bursts of high resource usage with malformed qnames.- call systemd-tmpfiles during installation- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of forward references in label compressed packets; fixes CVE-2015-1868 - commit a7be3f1: make sure we never call sendmsg with msg_control!=NULL && msg_controllen>0. Fixes ticket #2227 - commit 9d835ed: Improve robustness of root-nx-trust. Improvements: - commit 99c595b: Silence warnings that always occur on FreeBSD (Ruben Kerkhof)- update to 3.7.1 This version contains a mix of speedups and improvements, the combined effect of which is vastly improved resilience against traffic spikes and malicious query overloads. Minor changes: - Removal of dead code here and there 04dc6d618734fc630122de4c56dff641ebaf0988 - Per-qtype response counters are now 64 bit 297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems - Add IPv6 addresses for b and c.root-servers.net hints efc2595423c9a1be6f2d8f4da25445198ceb8b57 - Add IP address to logging about terminated queries 37aa9904d1cc967ba4b5d5e17dbe41485f8cdece - Improve qtype name logging fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi) - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance 12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity) - Add documentation links to systemd unit eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof) Improvements: - Upgrade embedded PolarSSL to 1.3.9: d330a2ea1a93d7675ef680311f8aa0306aeefcf1 - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4 c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi) - Replace . in hostnames by - for Carbon so as not to confuse Metronome 46541751ed1c3bc051d78217543d5fc76733e212 - Manpages got a lot of love and are now built from Markdown (Pieter Lexis) - Move to PolarSSL base64 488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer) - The quiet=no query logging is now more informative 461df9d20c560d240285f772c09b3beb89d46daa - We can finally bind to 0.0.0.0 and :: and guarantee answers from the correct source b71b60ee73ef3c86f80a2179981eda2e61c4363f - We use per-packet timestamps to drop ancient traffic in case of overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux portability in d63f0d83631c41eff203d30b0b7c475a88f1db59 - Builtin webserver can be queried with the API key in the URL again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400 - Ringbuffers are now available via API c89f8cd022c4a9409b95d22ffa3b03e4e98dc400 - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4 (Kees Monshouwer) - No longer leave a stale UNIX domain socket around from rec_control if the recursor was down 524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061 - Running with 'quiet=no' would strangely actually prevent debug messages from being logged f48d7b657ec32517f8bfcada3bfe6353ca313314 - Webserver now implements CORS for the API ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984 - Houskeeping thread would sometimes run multiple times simultaneously, which worked, but was odd cc59bce675e62e2b9657b42614ce8be3312cae82 New features: - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN responses from the root-servers 01402d56846a3a61811ebd4e6bc97e53f908e568 - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into 'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1 - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e - Lua IP-based filter (ipfilter) before parsing packets 4ea949413c495254acb0bd19335142761c1efc0c - `iputils` class for Lua, to quickly process IP addresses and netmasks in their native format - `getregisteredname` function for Lua, to find the registered domain for a given name - Various new ringbuffers: top-servfail-remotes, top-largeanswer-remotes, top-servfail-queries Speedups: - Remove unneeded malloc traffic 93d4a89096e64d53740790f58fadec56f6a0af14 8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce a903b39cfe7364c56324038264d3db50b8cece87 - Our nameserver-loop detection carried around a lot of baggage for complex domain names, plus did not differentiate IPv4 and IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c - Prioritize new queries over nameserver responses, improving latency under query bursts bf3b0cec366c090af000b066267b6f6bbb3a512a - Remove escaping in case there was nothing to escape 83b746fd1d94c8742d8bd87a44beb44c154230c7 - Our logging infrastructure had a lot of locking d1449e4d073595e1e1581804f121fc90e37158bf - Reduce logging level of certain common messages, which locked up synchronously logging systems 854d44e31c76aa650520e6d462dd3a02b5936f7a - Add limit on total wall-clock time spent on a query 9de3e0340fa066d4c59449e1643a1de8c343f8f2 - Packet cache is now case-insensitive, which increases hitrate 90974597aadaf1096e3fd0dc450be7422ea591a5 Security relevant: - Check for PIE, RELRO and stack protector during configure 8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi) - Testing for support of PIE etc was improved in b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes [#2125] (Ruben Kerkhof) - Max query-per-query limit (max-qperq) is now configurable 173d790ead08f67733010ca4c6fc404a040fe699 Bugs fixed: - IPv6 outgoing queries had a disproportionate effect on our query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49 and beyond. - rec_control gave incorrect output on a timeout 12997e9d800734da51b808767e1e2477244c30eb - When using the webserver AND having an error in the Lua script, recursor could crash during startup 62f0ae62984adadab687c23fe1b287c1f219b2cb - Hugely long version strings would trip up security polling 18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer) - The 'remotes' ringbuffer was sized incorrectly f8f243b01215d6adcb59389f09ef494f1309041f - Cache sizes had an off-by-one scaling problem, with the wrong number of entries allocated per thread f8f243b01215d6adcb59389f09ef494f1309041f - Our automatic file descriptor limit raising was attempted * after* setuid, which made it a lot less effective. Found and fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1 - Timestamps used for dropping packets were occasionaly wrong 183eb8774e4bc2569f06d5894fec65740f4b70b6 and 4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to Winfried for debugging. - In RC1, our new DoS protection measures would crash the Recursor if too many root servers were unreachable. 6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing by Fusl. - remove pdns-rec-lua52.patch: no longer needed- Fixed broken _localstatedir- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601 This is a bugfix update to 3.6.1. A list of changes since 3.6.1 follows. * gab14b4f: expedite servfail generation for ezdns-like failures (fully abort query resolving if we hit more than 50 outqueries) * g42025be: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, "Security polling". * g5027429: We did not transmit the right 'local' socket address to Lua for TCP/IP queries in the recursor. In addition, we would attempt to lookup a filedescriptor that wasn't there in an unlocked map which could conceivably lead to crashes. Closes t1828, thanks Winfried for reporting * g752756c: Sync embedded yahttp copy. API: Replace HTTP Basic auth with static key in custom header * g6fdd40d: add missing #include to rec-channel.hh (this fixes building on OS X).- sync permissions/ownership of home and config dir with the pdns package/bin/sh/bin/sh/bin/sh/bin/shlamb54 1648735197 4.3.5-bp153.2.3.14.3.5-bp153.2.3.14.3.5-bp153.2.3.1recursor.confrecursor.conf-distpdns-recursor.servicepdns-recursor@.servicepdns_recursorrcpdns-recursorrec_controlpdns-recursorCOPYINGREADMEpdns_recursor.1.gzrec_control.1.gz/etc/pdns//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/pdns-recursor//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17451/openSUSE_Backports_SLE-15-SP3_Update/8dcabdb674903f18147eba4db3bf6955-pdns-recursor.openSUSE_Backports_SLE-15-SP3_Updatedrpmxz5x86_64-suse-linuxASCII textASCII text, with very long linesELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=36e3ba97fe1f3fa211a48b79135f8b602b6df125, for GNU/Linux 3.2.0, not strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=9cfb55fceed5a31ccdd125fa41524dc64001c9dd, for GNU/Linux 3.2.0, not strippeddirectoryUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)11R:RRRR R%R'R&RRR RRRRRR RRRRR2R.R4R,R7R8R-R1R+R3R/R*R5R0R6RR R"R!R9R(RR#R$R)RRR RR'R&RRR RRR RRR-R5R1R/R8R*R6R0R$R)RR <<K`+ 3utf-8f08bbaa7ce311a9ead21567e546389ef80f4d1236a3de5629e70a3192bba82da?7zXZ !t/]"k%b#Pw{~WgR:I#el\xL,BWujvr4GCcz|'X܍- #/D .]x`5@s|F+pf_՛"W 8Fk..U`UJ E: ?8Ѝ_<7Nt,d;Kl))ҢV oO+ک>hQ32I 8m]>0J 1I9m eQ-} HNi7T߄1'T!J#!h`A,FIޝ -[@^- Ҏˌ-?-3&:p x륔mAآEkBR7g-3=+~vy!צܛq(lG'"87p5Crdܾ&(Or/8+7GKmy' 3~bJ h< PU'Ke(k>+DZDgctu+͐8R,1hSVKMGA3^4G[bt\R"eFefi6=V }/ڐ㨊'+og`ef?vdOrNj6+mQ%p0,hh&z3bN s{/⣘K%-.4o-CO4уJ*yҚCOkkP |uk {%cqy8Cf+H >VriUKyj1C& #iIx\AV &4a^OE?إ6[U]/j„dnd*@ wzk.@+(G5F~D (Z ZUJE66;<40(YZRR$>_(q8tvv,!WZ4H]d{z?"`cf(gAHzBuLDѹItVA;nʯYLEA} akvG[G b1 IkphY7tcy8&_؃匿:E04Tf) 4i!AHQҋs9 OF=,]0ٙ8?r,S<.͢H2 -*oJ$%[Hsb"G;;lMe.+ I͢+0j[}Lx h*&jEjB۟ sGp^F7',B,Xkw><-v˲qdT#@SBF.&!!\љ$^c͗yzDdl ?p{U'L+HU 0ΉT3=xNKI'o.MaaTIuD>jj:n1*ykk&wk [ /fkjP?JѶɼ~I`2=X+?xNc5A}pY{H8$mr!߸|wͪKu50~lh3XL-٩ k;Mjܜ±v > bAdttOj-Gr)OW! G%tO+vvq]0iPL7=uOr;",546{ꩄ$נ$լ{}=b{̇ۆS{@FL&Wik"4kpd=cnˡfNŽPSKUcnh*`3']V7ɜօ_.PC^edfLBBp%]+$p9Ac`=2Bp+i>tK}QB>#oぱf,oNĹr3Nا 6Up\bvp90ךqT63ڃJކKlDPHt3- fgCjX^ "-##zN4po2ǚ17nFh9n1M˟j/bHuY;@GTb InO4 ]6*L+ٯ6M/ۺ@Ž3f+M75߽ol#[4D"ř ї+GsBg= >?| $L̓mUOvZ/d!+Y=jZ:#!Љ~K>s~_ڍ":gp&8B nB z~ ~󅉝7 I3\"^+xHūLfM,uY˜SpqݟA_-zڨ2pO,@Acw,7B@^a,g'3{?1|CcYW2fza4ԙd.-Fc_WY<]Mr3Oqrsw-xc>$_ q0im7d(HSqTulA[4f&{5VjcI* `)piM,N׼14Qb!@ԞIu@{28@ ! (#Md#)p=κQ|BڰWKՋާ!O"~o!E2^,a@87R~̴}VgaPֈ2_;{4$zkuҸ|D3(J\18z-p:Yj ]f1pZ܋SڏG1W_kWYW=]mL onɄ6wXDٰ׭َzpFfvVy 3G^/$+G2(>[z_UX{d!"MGtϚT4"eKridfD.eE 3%PaɖD| TuUJR<͌=HCtυ.%yⰅY.1!װu~FO|PPW ; v !2oa>%08άEe\KႄxjH+,60W9F: -l|2B M0Hu.e7 0\o@nnp9Rxj!JRzvfncE!13mC}ǨuRio|[0g1YZrI"Oa4YUF\xV)pfd= k^3ACxZ( C'w"wRR_o&_#BI )1qhXD"e0f9v5iie7cžmxlzg7*S{isjEZ'MԳsmo\ۤ :lq9 @ÙFd;A$8}@r9IljxAumDiUjI\im4]wdD$^{w^"Pslvi6i< `D;%%(SY.k$5T'{Ey!:I&)EB;$@RrCA˙qW{F>vi/-]\laPn1F^-GFg`L\h:~ٲ&)`(lc,ٸAT-$_<]|KJ,ҖjqF1g:nb򜲙`mf`'579^xp"-rҲ 5 _ǖ"4w`r{:`G ۊ {VlI-] Y޵Za `4|<yJN]ɫ->` 2U¸ $V)z{3O7ft2æ" uf`Pu|9B4u+FWC0D{įC}^\UֶA"R% d &ЋH6/V R3h#~ZLXc)G(q(3E%YK~V^|&݄ hdFX`Pbd:"UgVRҬ6Ш7(TdĮ}R}4 .3zL!׽3GM#/bFfm> 敝\O.@X[ 894ǁD̩6iFQ65nl6 ?@T/n`}|k1(4Jcl~9Aba/ _0!xV8"fb8z3X.jMg s2NYx͘r"X 1_Ԗz h@Q׹U̧d< ".QD*!Z5}.J~A!poWQ CC*RXweH^9rзRzܢ;3TL.Vb*hFUJ1Vpᮌ(>˾1#i󢋴Q (nb4v~DLvB1 א6;Е/أm}_+v{ČU9ʣxm8\:Qܗy*aG!᥅ #H0:HXR[KtG)qF)GJd;{uߚ *xXLxlо4u͚vC#,Vhari9^ 7xA~ڻ:"6X[ͩ$̋-n/* 9FW"6EΥў=SF(p{D秧B> :$zӹ:XW'j5 :nUZJ/P)8i.W! _-tǾ5?չmz )C,G|E=Bi^ȋ,6!`Kbv9Đ#1>UgMmI%OO=3@{}[G]1J6G\/ۚOӓXy2X7U$i/=RAAeOEBeǪ0hf}뢿@N+vx6hM~~jـ3Pڰ/a^R"օ~^c0QZ{=[z.kcCxas[nQk|bJm?< v8-ESs[XY#w6֕jYvkmRDBĐaue7Ŋ|٤Hx},8;\"[cTr8ŽxRIo ,lt_.% \Kx m mxz[5Rzb.ޓ>B[B;mΜ6Vι;>#{uO?bbwo.`°aܞʆ8/H\p!v7 ,Uȁ"!D1xB`y{d\ꁲO ?'"*tws٫wbףP3]Գ9V`Z&uq 7~DHQ&RZŧjƌ‰'-H"w{( orZK`vH)'w8Y;'8`NQmO+ 0n;X (X'|%NI*Y0 ;Gt"ly|pBߪĆ\Rqf>0,Sv2'Nt'b~Y`ƣdfXI}d7ajBbY's';lQe{~9 uJDK'o~pUd#͒Ym0dRKRb,Ljc"65>K0gQ)zDS4xBNViv YӍ}z";q4:;F|ct ;cmbKH)n~h(Ӈ _$M{5wn"e0E9,9 0W2s{>@, 4_*Pmۘ2޵EZJM*ZAvFY6r}Ml0"D{PcZp>JOߓ48"/+[ YjX:FIJuH,'jӳ9mHgۓڳ̛ux:~뫘sӽg%+Gc o#=}BGi}:5?<է cQvJp%ϖ,V >N ԝʂ8j4i35,>+pS}Q!03hJb*=n 4Y׭'7_- ^˘pal|Xx{v#l .Ze@G. >o%NNpxFpE0le!lݟQ;d"WPRć\E8K0NzE!qmKnQ?1%dΟPE(I*/΂ xIX/ZKH&ۨ nOLŵ1:rVfbMzGL=zG.Ikj#xqM$r=,Ry'-o0sCDƗVHY}3hH&4Us0K.YQ`FRHCo]MA$E1ϻ{"@\/ x6p=C72\/߄0(y.KjGEE`TY`Rq~وۣD9%TyteL,gA|W/@2:< ۣSH+qx7mĥփAxZA|) _m Sv]3ws*PHV:SMǐ=ւ| rNl}e^ʍC5,-ʥO=.ָ_楘SO(VmqiQ]X=wz;F;D`>?GuDi+Z B!h7 .oSzjCSNV&*_h ?"9l,Hc[ɗe`%jw?Ѱ~~x1h=g8&?PlxF”!9ݞg1HcoS΢`-g-8Z?2J"yM,KڻCN>ht˭ǞU2VcUhcCjkuI)+DR6FW}% H)|QR\5$*h`l#: >%ޗE(@lN#aĩ/}l*¸c(Vgubkm Lж!&lٿn&k1'$3.G¢ݧ_ IӜ]KM!]J$j縯|2 j;Hl.ԉgyyQ#bcxTH\R9*|hSWA>j#4Z⿯!Gp [ o"7p CHݎf`:vy?roIdn={S3"^BSrg˱*S6Lr;UTmK9XuuOS륅mD 8xq d DdJ-H$% p jVRsR ĎƆ J*WJp2q!Ưݻ\Ê`x^gY oq‚ȩ5yYz*kZƂrd4CZR8r$I¢U9^FôYJfnf i,1c*63)7hML"S< }Z)^s(KF,4.:Z7`$EQqHOV6F/Š0ꞇ: 'HWˍhR\3;]h[PV>\ {aL2i/`6n?\ڄ6r'I!OVEqv1[}Os4F6kaϳ`5ww݇ncGE罈^C>o4Yl w/,S z{+w&8<염;ׂȪfynvK*5RrTy& cւPd ^WrߴsBآe8'4Z}=8i+[9w҃ ~k1?7fypC  WNgtEL*}'HP]]kygfe8mܷT/6yU݉mCY_?=țE'nlJۮ{{ 0h ׼$u|,c8g-̓Y4b1mC߂υ|!X ֩bPIiγevHW|#sa  йg1#y5̀Ζ"ޡX9;YKm 5:Q'j6l@&sዻ:C9˖TD^{rD~yO> x!Y1.! ܇K:4/-Gs׊g¥b\qMШpi tض {`bszCG"[;YS;FS6W t}* #j;IDk5GZ̺iUY6r f?S6+ot3ÄזKCk[5^X&1f.~._Pݞ/h#p@"4EUt[sAna^WHѪ zܝmvVĻ2m'1ϓhT Y+z8[ڜ~ȤQd7E& _g&{q _+ͫxQ 8h7go4_T0u|/k$qϯ]5LTu/ekQ`3jJx| T>łkأrW׬>veS1cX4}H:F$ne:cYi^Ր1r$ dM\DggNC,?M }P ed.RL;r!. 8mM<]G@hN{ ^ rP0I&burLu,("ѧg L,妷6-"荞ytPCG)e4\-\|wR/VM]qm,Ep< H>C(%q9MzAV96¶CT@\%8})|.%ѪO*MO8Ao-zhFDV Bf!#w޶fNoà)dH{ufEō8C%b)Su"s( f=xY V{ YTvg%:AfH*Z=fmF h7 bunMJN:co=IRb .[INSXZuq㌺5)zڛ.IP"'Wڛs0%$]d|%qV >LwtMv~|H RtY6'@)n+#)iΘn>$VAc|(6,Rȁˢ+/6Y`w뜭MY=([./nv !]F =Y= .ZNO%0,S jMnj@$/dr e`]JaY%>Gc|&GڡƵ5Ѳ$@im|fQ8\=y*ozԩּG/wUIGc]e+~fL\%V^]CKCr6d۳Ck'T0kĊOqb$#fc!+W8cI ɡs2:*Bk VE4SNo ʲjrA#dBD\tNc-tR{bV7m{vM[m(pGw,XɘCq>2G q\nOF$d9RΤ#fubzOI?[HN44 ([D'u61v%'JC-|:B\kz,J 2ކ :) !^9n ?T!8dC|ݛ76 /\1-b $tE/Lk~ȻLS3'ޏ&ȅ,M9̻OjEȩ!,/r`Qn;ʘ okx7."p? i,M3 MF+eްz-'"%3>{Y@mbcVDC;g֢31~\p˨I̬kYمK $f-}%IS#t&rN⺋vGU,9GH{9kD@qq&O AKܰ64^[y7$]պeWྦྷA3ڂ{1ҵ1pCϬ(=Q9XSaA 8ښxeTſp[8 -/M;WXs%fOj`hODxWd|nѫּn 6[1hBTe͛!}B$z\Fmc]Ne_y} (uW'%t wӨZy+D~sNqC3Iip ܀Q,o<\K̏ WiXƩ @l&2d )e>,|Z ,s܄TX\xq qj 4`(oG M\вYs+?H<{~@ΔrZkJ #K > 8FZ.O\^LhF|FE=9JVoK$c.PL]]Q׀(B&%AlЪeN$x ƫKJ! 7#-ͨhf-Lj_ Οv?U$A րa1nXu([ Tʚm7Q|cYPZnTO:|DgXUuv-@J}߷ \@%j|xt-"6sb7MkT24]SM#i"z\2x A>FyG)sΤ-agUGE!CO O '%έ#>_#;pԃx+Kzr/v%ĜH5ӔTX)zvnLPg< _SX!WgN"E #]:Ѱ'J \)7bʓr0}_dU rg3\Pc1+Sc-(1,&Z4i aU;lHD tB͓~5!ŭ XP'Pn3Y =|`$a_IdnS RL"΢2nOqƃW3^vg6ZLð4q-AحL>A$s6$#&xyчAN/uJ y[M2f?ݑ%CӶxuz24:A^'B|&S7pKxhɦem/˱BHّMx8kX8G=gϳl5 ҅tC!J8A޼Nsb[c̹>MXgQR\zjODw@ ^=ؾwc,o!DpEUBm՘$6.$n|;I }^G@d\Gʥg;A:bv{wHBU0!EL1=ϹU%hШd$}jD5 N#ݍ(y3୿VCO8v]v]/4p0Y|YMyJ-_{}pND~ _aӑD %(-VMͫ}{mW90`m$:Z}53h3$qcrV̂;X,f/f"\+ic.b^^=a/@Gi`D5vR}NJ*Z1sA@qo?L2rlx8eP"^ buv%G$PU4 nuE(}ɻRCx>xd2*MkEʮaO BňoR*EQq",Mvc(3`= +R'WYUlBaPT n)68Ѣ~U<ڹ?mI=Gs&ࡱTsD>y#svEUWoWxMn3lmQ.G!&N8BIu]0*szUFx!hpَ ~óPc%:V)Ağri?jV* ψkPbnF+r6i)g?jW!L}>vE4Wa-ۂZ((G3'!}el='7ROjH,〩4 ?9 ̬0;n^ֹE|z䕸nꚺaa@ud%)~-Dg0T-#=)pa]msN-bLAE $jHt_sXQ~EʹHi_LZxϨZKWCbiQEb8C}f4\5kYIbsūZZKbL>tT+8jb-@[U YpLs+2UՋDi5`U%4> g>9$p_=dnR% LSakPœ8gr{QeEamS∌wZR0} b<5TR*|Yb,djuc1VRQ 8>! -xvғiSpCVreWD;Ѿg:Ph͊I4S̍~T r֡eFT4|g!hH)}5饩3 ڂj8Jז\l6"tlVjJ<6N7D8 #d1H{+rB[nAIRe+|OѐFvl3,HiXOX#)c*s]у[k#N,?W(SӪq+{MΆC[]EEGK˚ͨ~&g7~GK/'6ߣkG-M8 Z;n -.7{lJ7 pJfN.ƺ$hYWB:Hk]q X >d Rv;\Q URrtZn̸Z<8`0 x?!O R{F/[}!4VSp\Ɲ ~h%J*/ X1x\4M*e@5ڈGhiE?xNv=BmIR0 Β% 5M(r+u 'rMɘ"P*>ES}@U<@並 + kpxD :\噠[ DHbos~)& N)&]s>׃n Ytz^uתdHpo,h)G{⤻jҷ9.u4Kj[XNPg]nqO֟&ĽZ\Y;U i;@XEN[#7v [Id*88+tMAu3 ׿+V8RO ^\7\͒e/}ڿ?{}?>8"r"L.Qu*$֜?Nt/P"8\DwUm%i _JAj"z dugxskVnl~ ҃'fluq1%MޗJTzdL8w9=hV23{*#if{o*2LKhsAڋ]V&ʴD,DF3T,$06,@ƂCe6_nw7)u&9ԩc"cڝ&IpՏu?DrM/^o :]V:䱄0W_a.Fc‹ b@7E^=KU=C`!l1N@*Qv[~6-P,6rL >odZ9d؀Bmk#3Jnv0#(~2X?p,X;<>ZDC-MP>W|C Dè7"0|Дs5[ }Xri5׍?'2$5\%MXT$ʇ_D0 y/L3 =|Yü/-" L 6.H8oKN:F%cXy?t6l"=kw&V%Q':V2l Q g'zXM ՂyfR5txs jh+Ξ2Any+. ikĭ7P4do>33mJ1_-6mm-bWЯ;F @@JJ*tMhlĉ:DY8@)Sm* uFi8wmr G)3VNZ~lxyr6̈́t~H9%.20FaPQf3`4%}xwrNHtRjR=#Vhc\AÉcHm4~T:蚻FOUhG0^RNc:ޢfx9JĉS/B;hXG<:o0ةSom ے-Ft{WiY26!)_Nw(uѳ6ŕ=q5ў WQcvۛ:YOzbA8zWIK PW7n-"Ir⠂°2/py8P9k ?q49Ek(pgFfrYY*oIpҸ4\N MXBmŰ5h8>O`~Y|$lsd/[&%Cb!SDV gx)%j"ؑlm[^j`"\IX?a9vsRo}PqAXk[qr#5Ad#7:YE !@[õ &h[8:ge_ڸTVS5?xE`qCc4Q6G)(ҚX]ǙuFmfEf ж"ʹ϶Ĝ ĀFem=.Z A ts>uWfb<4σ'gf(NgZ"l)៣* A.Ze>14neE$7QgT6i)<Gf=/Ȩmb;# LN<4VSp*=bb8o!ްg\q4mR$WW6< } .JoðGLN߱$ ""xu8}Y;7][ /B9M`vqP"{ *;d$ ml5KPА;+ s1Bdog먬> $E>)^I ^3O. +v"Rumm/ntx/ή)%UXAYzfdEW~&O"ƍ9m2 К*9!셝sv;06[k(`P?a\SzY5VXvpK"ݮW;AO͉0^7`ǖVz(\6-6".Ho"*CsH@w]!iч&Iē2|v0KG,K]Z[/cbQ>O],+ʔ+ v]4ޜ*1ц?E= ߨiYO]tNJV__W,ʹVmH*iͭlhb1LJf9A ~FSL'^zD6zN(a 8iL f9y(oHgl4\n)<3%`H 6%1bt6C"-E:ERuS(=5wЄo V"^Dቱ7b#쨊m0s!ްBuedI"6Sx.:j>MEY>w2JmV-0~ CΟI$۔yYi:}} K 8 kS+|@gח䵂e1_OH*Xp\7j Y^bS7ZŜ|U3ଵpJPy[~o{Fʃ%i iV$QЎ~YC?Aކ]~%u=*DH79i0ԺpBSnk&ĽߠŰAvۅl啋#sJ@NVqR*G?]=LxbW͗ NfL~FGhu:W ·ud /1b6Nfp7z/DnQk4 "UsU\D0\)i]'6ҜF>m2Dz0Y~~HU9,fW{;$P Vy\&<0"I83o)2,Kok~) xYl`sG1)-RC [> VB nM3_?jY^O՞tسZ^29A35?Gqnۖ?p5sJZ &*waBr[Z(Kف"-z n6qN']U;WQ̓z-#duQ+O֜qY})ȗڲG VN>ayZ-XvÚQKsŤ|p(eB0b+$nO/l, 9 wtrUZQ< tP4ӐN9o+[=tѢ#?PxȪo!b%jDv*U= j}?cOz^u/.7&-_jaH]w&b>ʌE^WwfUL [^ Hb;R#sizzB:L;d,f)B|͘8k$ۤ% & oiJy'yZhpZ{& 8uω~by] cyܧo+4+'߀>\ wedz-bhV Yhx_e9;dn 3!l`ZH/HyUۏ׫DĞZӗl5eWZڞq,C2@AXf`7 CP:\iÇY]X :'0vYF#3RO^U|6ա3gvgڴ*eUyhdq޷CaȒ'p6Wִd\L  v/t:d^rw0 }/r՘ܕ*pFN4=C#Ҍ|H>v*3aEec&0.D4֟qӥtŸ߂?VKĝ! y -IeXBe3P14sQ0h>+zf0W72ñF݊.@g>#0[dt c^s2wT[UlBD^J6=Xq)KW+?GZڶO)V~2IThr)&ua:^ޖ*,ω$91 "!@քk||7VZ jSnm]&~3՚9+U EC *$qrTqجMp 5`tG|9q 0`3]{nD}Y)ݪ<w0^ BFIyN|p)shо|z*x|ٗ0ޕ[o,V3"F)(2$M4D.HL;LTp'ࢬ6Kyn,%(qnW E)}之'n ; XEditvi~YRW0^,N~^SLbyŎL(c.'B)BW[ՠZfW/p? C;:ըwMj¹۶U# 4>rWRmoD7pIvOFx٫& "i.Nwd8M8lX~@ x Yj魒APAgdmzUq)fg Seo*:Q(%u*) *lb TaEƍ4SPsR k%Mns_&UiS`qnCj2os;A"YzV.W]slP/X1~uꥄV:ZQDFF0u$X!@`$B8{* ]pxI^Rm![VD;Ex28bHA~Ĭ p"1y)B>բ=+7bjk3IeƒjghxY1 yCM>]}~S;x,@b[7$^tՇ1d^o7vޒ@DMWow0 {tr',('~Ĭx`yK?|puݽ<^K)z~/Xՙ͕DXXrR,Gsw4գ0+9zL讅Ѯ )dDx%)U}-J{Μ4ᘀf>tp@)1?D'} nLTQ,lvFtӀ. e$O|F^lD Z'aL:=mĥ\TJF0i}Kuΐ88)F cIͯ9s2m8^_J>e"9z?G/at] 7R. n|;H-zY\? vH$W];-%y,)c 7ʏ{.̩s<fMKI9Mޞ%hdR a~?G3\ N >GNX T65Ɖe:Ǥpau$J!Rx eAbxl'h64cSc7-Z#Qآz4[@Z~|BC6dQ#rZQͽAuLw+5a^IeUuꈴ]`4HzOP:co |КCb*kEODMv7.SAS)Gi!.j@KxfmƮ3*[`} s KV9bX`X=DҌGj+V3qo-y2a9;= e=S#=1gxݫYY$TjonQ?_I D9~MOop5ҸSpbH_-YŌ(UeӂN008942N+D^4OYʄ9)t~Yc :N˰{`+0{C dQ93碑*][]6+#q tL ~l2ic3EJwzaM޻/d+:SpP , S%lTfPk+ $]_KPU\tfr D#暊*wiBFYVjucg}c~/޶ !U<}I-d*6zrאe~ݯ # F:WTXE'~[)BEm;+2rk0m 6My1Kh|ӾO^ό޿%lⳲ dG}]B#@QVw(A@8Ȑa:§ OPpLP*^H??f; !su38}Y03M8C^+ zF!sBXx]a$93 9Дb+<\H{-v^@mv%ԣ_?܁u  ﹐{ٔkDWQHrq'|qS<{F j_/g1oJ;Yknq4yKwDCey a,D7+yJ䍓]S_9&};=2lëPh'hW܎r.ũyI,%2;IW(ѥBX.IlHǘAW&9ً~9L<*!;|~ FaWCBsP;\?ەic麄u؞߲Zfǰ(cP`. tH/0֩2+=ƭmTN6?ni WG;+/K"\Pp aFZX#6[ :˼s* a<5,߲ 1G+z]gen7`K딥2=˛{[y$phz;d( 3Ĩ1N);ep-{#( Hl.Y:}Rx|2E}-/ *[g +5WV$'p"1X_ [`I* KfH;}'gEL]g(py!P8` RJq&=?!*NX2߲q1UUPb.wCIdJ4\$%iY#yxRkƱC,.wtӜ;k` $ѣE>rO9`a_YI^?(iRmZG#_,ji)Lf//x\cFݪ^WR2]kz!59e6M]̓P;KUf#p.B܆&qk/.u4h^o+$8rDnBķ^X~4Jb=b^4ͣxlq\5zs[JUypǜyeI.\.wK?@+}6QW8ܮIN(o hp#OaC_p F)aY*vWFbHCW fL*aL*|GV`qJҮWajy!)*yᬥ9)bgN/umf⌻M/0%_*b4|TX[{wowՖ~.McVK&|CC\B#X"d20),Fid>생Svh~6YU*ftVrt1?7yp/P)8HW¥|cPNqFPn.)e1\B/YmwS2ץvᨛVR({ v)kycUcoQ#3d2NCjS»vx)bcf%{On]U D=*8o.ffmW&9 #qTzޕӎP6L 4 !fw!;gNۀ2 kDDs T/A[{}Hd&ae!Y[XpK+) B_.[W3S^'ҝT}I=9D_}R̈́vk$k{\.ߚэĞzޘt8z¡LH|1dYZ zr*f}gX}Mg^WJZpM|X+7w^0+ uM&fܒ3WcsۦiEnв(A=X2dqMv!)%!Y~:yCk |8YDЈJ7PyW9Y eRDFBVټ#l ;߱al3} 1] Mvta`сV@^`L5",W`Nҿ7.v>n>iCy`ĸ:Jɖ eIXJp`j̄d+fa8ӓ <5pѷ,Y.u"~r]Tj w5/;;%BP&"Vy*q N⭃lC2xɱBqCj/MC4Qϛ( xzNf yQ=_Xoáb?ZT>SBP%D -_@mVcX7W Βav޽Dz,!yi(Jx1V/yTvc'z\MIXHtb7w fpZUQRl)+O/ A zyjt)zՍ>q-#k3Js'2Kg8xһ4?R`-bƹYr#qU=-'cK2d;K5xU=S ?|u#N6fi X 4Y6R{*r![~BԃGgSn Q3Uv`S lzpLHeϭ `k/ 6`WF{ܤҼA?jD o5$Q.`DґbdDxZ \=S7@JafsA6`J_L mܞ.#k0赌?h.:U:vKUȘ6^,q585Ѳf3F$ 3&29M:i$]1tW}L]UhWMn?,s(he'D~dc"޵Э9X峧W^&>7'l Ɔbqicӝhf[1_urZbu_IW[ŦX ,.O((m),o+_m- jjnng] $[0M}ƒRn*W|z6Lj kFU廐x{Hj s ^e%r·Yj"nbsд`UdcrMfCQROR]oP=KGq_c)Ma#C%FǰL9C|03|񃔨^հ*e!8KsNS3lAJҫiNGR-@г/HϛRe~G_ܫ.|7Vɴ r#!D(6J^H"lAKNV7i?-H!L|: WZD?Y$ Oxdy1%~=0;bL ⻿#@=E)bIY|Wu-Yr}duզ*3uSAIYļDɟ-S] OC#3<ٓK,IANK3iuv\Ro{3m_ I\M)FGYH.X Ɩ]O@yE/էr΢XĀZ ]62wzw1zB /0 ՏsJDePAx'W ߝ eum<ܶ t,/)N-:} S0;hO|F&v *GK_QNc\N$SъG517O[HG52B;pSdRیTޏwyQ,CΙYG,t m;Hp+*-53dh/4`^6 UwM0;;WNN/HhWT Z<aЗɱZo֒=%SzWaQU'MGO.huRmς_A$TX~lUnX*$MP͍‹-if\#]7B3CfzPֵء[hoc[3K<qaWĖ&$ jqqtDHfT+n$bBXcuޏ f K '3G-[u1t!n؝_?s`Ⱥ3̄ه6\ L9p[Sp2V0qq `ʇ0O2X-l0[}KŌxy @ >DNeh}8V#iYcdtؑ.]*Ǒ?_VXUO*]CB4 4~58M|˫ Rc"aP|ȦTTҐWdχ) ظBQ>&ؿ^27B^+C!ryKES02w48U`lR|ۈo|tW,f; E7ZW&ea9ϑTdg  #H}ӚϷPI{[?n;}WNM;-'YyE/̎s= *ռ%kd4LPF~ Ѕ$WV%XNpm:b"X̻4U:2 Zcy(JՒDc6 K,B;{$&ΫbL⻩IF/<ѝ*sx9fxN@eA U`o]sm>rk!\>ݦ~F{͉o'?MszsMK`%OBO'9 m/Gj zҎA] (f}yAZL@x9-̾L2a"QG!CL>ʄZMa:/^{~gfHKaWEnaMh(F/#PdI]{O"0]鲘X vo`yN(@̱a+y U}G&ir/3`u} ($ ev+h4Ra Q|1}:cZie/' /75L2φ"UR)]uUr1\TJ~oy58E>F*tly .-Ch>s×!<x.we0t p$ʋ:L<`o(EKشEY0c<-_GfXBqӯN6VpVaTՏl!h6z7VLqd81 ˭ * *㏽j Pߦ߽r-#)r ѣ\mbBe2ٰؤiGΊ\c+À㥆'YY9D82˻ߑ~cDR+8lj>*K&Re>yge$<3)=VpPJ#y1TRs&_%*ϓިǫ)NJQTaՃ`Av;G`zTQ12e4m%/߾. ~jj%K)ZV 0WS٩$L2i^ ;~[Ă*~= EiDԖiRmCƧpwR2jTqD\wg8rh2BQ ow3䠂kk 3k!~c Q%>m.z>@9Ínr$cHc2蜆Xz`ou9WݦIV̕ڕ٣htl~ǘ]}TBVsD0=kr' (9[KnVhu9^ "Fcl-)6GwG;t7ܮuCNxH(rFbR;-Ȣ]9w+I-"ѣ{.E%TP0]C7~m>Gl{T,O@Nio2f4ly9C7G;BS?R_ʍ :߃\{\ 'XՌؚ!e1Yi$TMW #Ip~ 2~!U6s_@4diE_B$)+] CD|RޫdY*h0%R XNoc|b ,^a6^\e@VwdžL[<7,c;oBìlMY[e6q-.$̤KW4ea\\ڎS>&HBc//_wXˑ},]剃,y-IQ{ٟ!r`!IW2yHƙ Ff.OR:pDXTv*, ܎Ǎ^QI͒h;V wlze%54\իt s:m:s^Y,qFZhܽizCEZ.NW@46a3&Y !k'R S%c-ߨL|*0/\ EuKU _ kR2 QJ_GZ-=P0d#GACoSUubaAj6yS'lrPML${sb@ss ݋ithQpc+!LO˩mBe{YVJ{ K(sC#^2p:FŔ:;-B`/AJQn30uiB[$p2f? P e8C+'UP5b$ĵ+oIVrgYf+-!N[ .+H]G owM.+[esՌJ,b| +@NT/dMv̆ ={3nW6D)49Y`{Ӊ٬bu: t; k ƀ5=vx\oxK$k2< 5MX 9E٘ϸzY5x LF_%p\m(k#A(;Yb- :; ቕ$0sHQyށqa"zGIP˒JhFP;ɕLkT4ĊXzIŦX@!]\Q^"Mqaªq_rv=vCoYtexlaroG2bDfnz&dރ-# fПhӓE :KZWuWT~_u Z?$?G!=ZAP49*+;feba =kJBXd 3J*B"s~b@拫?+ eXit١YG(8:KAI6<8үo3"ZZk j \f 0Bo"e/b}oin`}ρ h"PzR +~Yv}Ath]5Fš4^Z`(hvEK$4_ Yxg!E1\[Q~ FI CF $Js T#1-S bC.lC#\FH@]]i U_@r `WI՚+SvwP[Ԁ a @%pMZaB BH?TK 9W%<'` 508݄& "nb6~3,C:w=?"V*8S Ϳ؊p!OV1R,Ley_HfgqPwv]EW-m 5U2Q[Ha )\Н_mHGpwŒQP)~ǧغCq.I4 GBLc4Mr b:V=k> }V|W]Q}r{5 LSzVOE27嶐%L a d?/.*2w˔="lY[Z[ڮQ\H[Sݷde3`+&HPDxUU/ -c ͛layV%#;$ -)o[I< "{n jr`9^~ȐQ .JmK]:G]g +)JUoW*,f:E?z6?_m|>YщtV1 p+a 9P]S~Pmu'<3OMsgh_ed՝Gzd:>]_|0./fb {֥bzuܒBuP Ϗm<]z].wW5I30VH'%z<(7۶j *s*lmdJ=F2_DʄVƇL˰^ ~Zy:= xm h<ܗ]:{ǒPVoѣ(ɧv1&,KR$3t"tC=(,ss5By͘k[zq5*Ά9Y.wZaeN_1\}F^9b>`ms6V'SUSiNV<̏iîN[rZ\7=QiֶfxFHfq/G`?wIBcղP >Q8qmµlTsH} /;ؐM:}AZ` Fia@J-!Ȃ[שgk*)vjOYkZܱ LbeEo'7҆0Nc%m$8R-uc(:%^>$>yQ( qRG:*)fCʀaɣW? X^k`B^==F5xYV7_I[p:٢U7뮧?md :7m#ͤTu,.ԝ9ދVom09v[D]wHB&5\D۱f}`A4CZ-%v[kw%"#xy",P㼙ϼ<@=ɔo7L;^{(SKө-4 yIF2O U(KRM\y =?=!t:h.n<:X!q8b7V z87H&ScKʱ *@j;'vA>2 l˽K\af)!h)4dC}SG''t$Vw GDӇTFZ:O@p0)ȹe+Zwqm*][* 6yc0Ĥ~50m9$4E$+hKN*;Ցߏe %0~DHqS>$?MXb2Rưsu#Q`j.->{iGGSٵ;ASkDv܏p+˨SFn F #7x*2ym/Lnr3nW1fN"Wm\=c`)'DNUCKʸݘ>O]R&tB^/ZHz*jG7Jlcl'fI7|NҒ@5o"U\gLY"3d[{)! &ņo̫|ئ$_ Fc؞ Yq bH_HBH]#!;,mh!xE;uZPd#C"bL ?Rxk6|)x|#.N$Q rrRbյj"CA"#k]1x {L'Ǭ*El@ZEVopXK~V?攆DbP1in$Pw\? +Hvt>tNmlcCc@8 &6K':zB$B|r)F&a e\/DyeuLYĥyrj[u,5 N(1ؑFq/V {>iCKiOwgК]~Esز bOm;ߘF :fRήl#7=cG7xhыhYg.q ҏT/x Nm h'`Lu{ռzNPk.0R^$U%8R @$<?yz Ȳ $`߬0#,-Z,huT}#P:̀:%d~0oj4]mgP3=XIXŖꎼ:L0x(% ",CXE+kowpXi9Pbnwc,ܟPS菅>^k4ˉ^m1r Nl ryckr *tPnm;A]1rheY6}ǩ.Z=r*(a[N)ïTȌUK;t;` ll!ϵ+:t~L;찇/4u4 |,fjhF֎y=:CBeϷ{XfayYbO]`0]XuHYq_@#` nY([oF+pis/sk,G!W#Z:p0'gUo#vӐgm:tdžg8^k6Nvig{-2-"d ֤Q)8W߼=N,ġ:Kp*s;0:9d֩L[<ȣ~C!jr* xn/1I2Du lUW&xtY Aikdȷ활 -VL՘y#Hjr^2IÝ]Bό T"תk$GҹP$9AG̻ spckWKeY*v^8XZu 7'RB04EM)ukT;@WTHxL`dhGy5ſ:dӠ'2q) J"~3ӑRVkq5)TM9Bc YRg~"y j-F"B]vW8/QȖMp_J5/tM^./?]{!۾$z\SK(]Q'rޮŠ 'RsE=3 "49Xn^f!Mdr ,yFcf%1Q,g%]Rܠ(,<ԣ˖xmri8bo /P "f4,2n#t= ļ`˫mCM;2[> }`>.~W' yvIfZW)<> p@ 6SLkAJd_ҹ;)eY .6`%qCaHn%:l&l\鯟Q㧦_Ke~q*7j9t8|N3/KpY:o%- O+yΦ"]n/ށtSPjgR0n{GKEd@ETE2}w\뮝Dk./7yRL](seK]6Mn#3N?;= =u hWMݰ[sc5Y񖇲sL3胗7} \ܣ;,\pr:H^ g2ƴ`#M(jj go!HAN V)MC$(y-knlhH&ݸ/| R*F|BYLHslZH,1ku+M<,"QmLr-wRudvPI2e&L׶a>MU§y]~ldG {04^}Q ?o천$ɼ$*>؝BX-wf}zݔ[D/*:?#7\1 P[Լ`oMD_u9}죦8`_M,AppCa2yGq,8|윭Ei 담*-9!. bL;[FUVP%˫HD + th``/zo٦9a8Lsp]&mAPYcQEN?[ ƿ!=AřGif,}e<2[NxZ#yf=ՋJ{/`QfHpvbo[>X=&w\tuh[m>W_ r5EޚkK)sP P/s)%ptjω!fx+Yt;bo=kM 5t79nw"hиNMqg'ɋf]\qWR>`ʂ== '.A-xỜE1t8_ٹXp ۣ.Chw{ EQ =@x{l*<賟yɉ""[-*`Sɣ {;8!flR.THK;)7_ ni{K4`EB8\lG.~6%Nn:R͛A{Ċ2$R=$-K}rУ޿/ZkNCk3 K Ϭ诮ׅ?$@عz*e]Nλj?dnV`W! 2wciwkv"@68Iľ-ޮsbn "Zl RtjQYk02<;⣑>D2Gx{U+ hA<8P{4C͚1AJ5K ^ .Τ^R|+= >s ScXB4݀_c2($|q[Π/&n孠e0`*ÝGm+cIi3^gR3һhgGX&O2.d0 ]1'ǥ s~613!v:."%p7mPN'|`u:pwSubP㼷F=ɠM5E19:t%htdsLk3P(kK޵ *G;ܡ`EAoHv\aGY`MKl=?cM?ĺCkOyvq"nF$cIjH =4n^#e~ֲg,~ N,UMm{Ѥo-ėiz$c BG7nKf$186}rh TN8N6t̶Zq)h]X'RQUs`u;מ|װcB є JlA/a{A":G0ѿW t>`V57h| Ca'OqQ+LT+,pM[ ;#))!MB#/a=ک~#hw\EUXv4T[}HS) #DՆOĪ y۪ A~ WЅ~յ.On5v5cZ"oNK"=$˵73`Mxb hdΆ0NYMve fu*QL9x}l=mZmp(:ev ]v9e2%P1 ̣oo7S]-:Gj:EZcĞn;pF8-YPyr$Eq/5F/E'lCYQ"Ln`%Uю`)vqX B`\Y =i9GbqYѬ|@~Wy~-&~9?(ZYFY2 f!t0}tM6atu'}R60K ywх7C{ۨx'!-}06]^,byYs/nR3tÌ3ӦQ=3TNN@xA\+f&0t#YMy)>sUxc Ez^M)X$^C:!F[OJ#D b7v 2ɰ5zW4I8']{ٗ$b3}~-?!"JZ G]8)`˂^Դ-3L0|R.%nI׭W7dAdX ]˴ιjѧsp~/D'3KO gU$as)P:so^e*YBLUK%`>5c;qyR%V/szj~*?5mb#Nv\[%"BZF=o(Ԇ97D`ș]rK۞Ӧdj5VAhU^]M(~ 3Dz NGB$-|y$yCTgW'>ף^=]f6ŭk`%suŎHY*} C04֣yk1γ~'ɚScri=Gk䰡& M4O9ĵ+*$6aV&u}2(k\$.x%P}]\iPz7̬2&cwӚ=]zLVߌ8kVV1\x. b*-[ul9&J7J2gf&\x.1Ϙ0Uа:QsaIh mf75TI "79rw1|_?Zb9b !/Ȧ LP}en.`S.eaALm`21ݭPM¯"ŧ)6+P[>B|Kl^< $!Q~0::{68L}W )y:yT^0ByLtV;®K:RES(z1ES7\sLcS "tBO u0 8iu{L<`D?6nPesjd=[_|ɘ:-^_]Nbb'Ni´xi_c-*8$(cDX*96Vr3 H~H4=Oᒡ1fEg%=,-Ϧ >:&T3cߍ'͉xUBȷZP2uWW#zF.BKB5&o,N.o ևҶhfD 7LIB*lkC4)#5DŽyBv|e`l8R<oͧM^ Nb'%{`mU)uٻLA@B ^GbH8kWB{ *yz *,j5߲΋ݦө̳wTCeҎgbj㢘|733dVvAV >WUD˵MPR _`dTza:%fe].ߡ>nj$ET>on~TVwBU}$t{v)94Z)C,8 /\U;"]c0 :i?τ,]+Rp0땻p*46Sbq6.l9lâ/Xœ\pw?ws)߽욠[4o`ܣz7G]G hw`CT `&u}C ᫇CH9R˲4K鎯w]ZLjb n6[ǝcsbu-JG/͠aEOI>LIVMvŲOlޥ#Av% UwNY􄛥 yh V#Wm5lp$Y?"h?V] a]DNf +OZF[ /DޫDMUEڽ[ &s BxؽfߘL;YӶtp~f8X[Y&U"wp,\TM2 3zj#[k =)3NX TM:(vXCZ TeU)1J[if!h_بݫ1i4r Eyl]?4-h,`<2r23*%A,׼ Vcc% ~ ۟&"gH%0Y#k^`ȯg!ugSE"SYP8Z4A 'Fq~{(khٺC2:|9}AV+Sq7L&seXwOQ Wu.t·7`#N{Z>@x_LO")+7K ,٦lbM,UB;-aT0%1tǞ,JcQ4AmNg5z":B!MMr%xE,XkAv45͉ \f%jbxF} %|~uKe,mlԇD!SCQɑ[`U[e4%r)[VKJx!^/V)X~tv$Dȕ[dKT܊d=jQ@Ta <)qmǚ6DžUnuN𙛈r'vr&`!Vet1<\fz~rotQVG<޺n1W+[!rtӞS01Bb*nB8fZ+|q/4_5fgi`luF)ÙkʧE:ăXe cui%i uw2DCP ɾ)-~`&?6 u NİYIfׄD @'Hr#||/*h;䁠 AMAqy5=~YV̽sOmy9HDU 냚\mq["<|@^u[ta7&ـxWu1hp4kKsԱq'-0kz6gI.Dk#kb޶l5IS#C,# '^g`PP>~8ԙ\-2Ux*BKOc>WX_5 Zp*ۢsA 0El 1cD:GK؆FNdjyw,џKj_L3YY"V)h{=Η'.ݕXC>C`);_>Z v${#w=ϸl6;;./K6BaF8s|zO{Mb: pl6&Pz{Oct*+."xOgc{\sr&>oEsHחV (Lht>wQ6l [p9&-I>u&|'E#wa#hC\VmTCD9Jfnl-@U7oEړ]h ]%ّ [`j3I| #gP!^Ww Qp rǕ;ֆ`$AA1\.))m`,SR.94N_xRg;h2E*T"t \}J$m!Xx9czh`s,;hŀ׫*+M,WSc.ö3tzn>,*L13+ 0=0J"t[ .{&^o*p਺'o4\I3F(Rq@)И ڧ)6VÍAWD5d7P1F, lƜ؂˿и) ]֗Gˋ߳i`aA,ezn- V̏'IL(SAu=Ѷ趎'~nW^-X?`}tߌ_@Rѿ5kuKiӜKYq?RcEڏ9QY&c'V%?qbf9O۱Edά/)FϔLy;3_1YDU0>J xd%7wR4]~4@G)pHՀ594|Q : 1Lp kښb+="$-&Vr+[c6<a:ݗ1,4y>0ɤ_6X4e-?aaf.ݣ8gp0Ћ ɪg6׈!ufۈj{Yk[kQ*܊x u]`Xh\OA%__=βÕ"ωs3Gl$^zn-VSп9†G-P볅=M{;o^cjՔ1z/)Qf͒ܩ&O] :&&K6L-pyŠ=Uʙ3 V vYy4iB !TxHz@Q맰w+ȫi"a,Л-u7+w.>7t\mm(qRH7A!)r)~ ݚ-/&Ƭ2,nP6eޯޑ &UJ''ug=%?+~5:-+/1s־Di)&tECՃ3JB#fM3GafZl+h8|xyEZ$>' 'յ9]?BFC)׃-DHmė50ݖ ycl6ұbʛ4iAO# pe-[u$nagdYl%M@Š#`@.I(i}~lRa4H} V'\]䉅cp'f qŝV?i?k~<(XFRjt{CUY S o>0Z)Y Jb-K}_rh-8( .2yZ R9Y+ ڔt>|WkN蠍| lWZl9z2oo-xÞS$LV>f_ hja9=eFё!?F7؃h=64kG_ G [ A8ċ*.,2%m4Zu肹ulJ⠃lzr`g>5`0#Bң" O #N脾lowjNsv9XL&uW:C̹Xq_r>تAjWޭ(A;"gmvagL#xbi7eGkpΏ'/)SSc) f..Wfad \L,DmQec ASm}o _iL?8“ב҃K.i^%G<\򂎨@_,uL(J[(א?{NQޤf@SUp]>I>"\8f &(c :`v˟C>%pS]a Yc1 <3Y /jf;-b_ޔh}b^&=lTh[98q g]ӷ\ZYRGQ_yz)Xˁ#o*5I6ɢq%R*h|g a{wOCǍfo}>E_"|Fqi3A֦n;C Źi`2OdT_7'vGyc0riO>Fh.U`$Ac F ʞJD;Qx"jzMdoΣcFj$"g)hB&4>P }rn/b5A Jw@]#u [pN,d9ezԐ⫳u#Ss(x))]3G8fmႝqҋ4P?׵{?iG6)vhDw!;3<ݫ1oP6KB{qerd'ma+&s^^*¥)e@jWή,OH|a:h붙cZN?GChdϫdP rp4!S4.G v+CÃb^˯yPLFZ}5&` 4 WؗN(S6pz2j_8Wgo43`Uck'q-r;n|=Igu~[}JxW2I#?# +$t,C;5392Gz`g-Z56i/&l3$dkJc]Y.I ^Gڛ#.PH'?{d-3s&t.pa6MozP/zT)iFI?|n85EٜGBXkslkde+Qx=oB1靗ulěPWb;{Pc$z9K0_ÄC#Te(B1 M]^F?BC/̘aox|eIhi|9^0/Iç;c9ƤQ|_uN^i"S+s|DzSOcڞFP 3LK %=ueqv <]Odlb_pl>|S`3ƧXMo9<_ͫ㔱|5ԊImk@`J%}Ui"m \<@qThbaj3[EF[\{!٣2KeM1ONpvnr/ D~!n(Os&rz$Dg3{粟E^IZ7J}'^iT!5'p.D i#=}uDmڛ+YhC;"r2J6A'[*? "j7nT-m웅etwWGZwqܨ iBQ^L/h%QBcbJYK Ht[e.qM?:)ߦVNXLs*mB7Y|P hbUj|^(QV/c עl1%$}mTlLd0oݦ1te>G1RO(K'K͝wUIF_ "\[;PuP_7n;' /lI",_o^hT&Y"bศJ7Ӝ?v7UOj}qHpM:Թ55]OHC\9cb>cӿt=a⒘M< [o-<^>h&n r' \NUz-8 ,w@0L?6vtc*T=U2 ؇NywܾWZzW~>,-܌m "|ʸS-z,|ȘɫdqFWZ/˕V|qn};PJ>T0H#:?UL?.ֳPUb^fXV vy`[{A>}I,B(%s}R䝜LsGxzNp}oXͯ_/V_ʠs]׶5wrdN~ZJNBLҡRmJyz;gHdbZ<mE둰tnnc_CMn@pp*9!pT2xp·s֙clNI lVˊk["Q;k|ˏp,!:etm_dv~ٺd ۍAM:,T4g8 GUa1wiaSLnX1|ksY`q0#hjY6QEةam սĊ_Ds[g)1RD}xgroO0X0ζY? kNX-p*,s-7-92'Qw$h f&2ij^\wT* {]@ sG9*id$GvcN%// lqy A PۤJ4.|R.ʃ2D-PMmY-|jĨSг<~ڿYۍmZ}A)R-4M.`Q&@#P0kmСvw-VS)"T-sT@ J*xը19&}lV/^=(w)﷦{B4q4IgW#}%/zn';g"1$OھE=5Fq>h @Ky,EWjo`bfP 0J2t lo*G=zݴTCB bLU! [4` nHzv\>#GEGb.𷼔 ؙszs S_t"鄏[-.62< Pʇ>ǢAY@ES,JPũYnzʺμZ9 p/3WU3X m1Y(Dg@覱(pa&Z Fg6i01Aa YrmR6TYTT >ؒ%Y(bY%xLA &"agRpWtjB %؇ߐ%zLr=< % &AڪR0-A|W;RaR_]qC⯩{[ u\/.Det<puYYع4BŮj=E!0ɼ`|}QZC#v;hyg` o te&컝pnL%,mg~lj Fѯ{'r:xATnƪԚl]~C$$QHjE  >t%tu2$&D@═l)+(B(/υR7QUu" ́Rl Lls cSU"ERlѤIkAӑT$ȁa0KViK_ix6^jk.`m*$wwȁmCIbaoR΢;y+eM]?-@ll6zqvsΌ6-‹1(.20`κ \JÈuSj!/|;+Et $٥̩1uM_M"vR%yOi ]2)=5\U { s;lQw]Q% =\Kd#W&Qg6?{͍9*>YUM΃Y5/Y_<Խu?YiyTW_`/bf*+.})Kode`=lCs}˨(&] xtecY]X`j5KiB5Yu.gc-=]Kt欉PVwoUAS9d."ZRv$n\1Hn[{/ #_0 {QVh|dMzaK[i9IZs!< siHpAup*(^;xOΩ޶x`?K'9#mYwܙ .u>Χqۊ 2TQMJܾ8s;}ere DMp1b n 6M#:lxM0䬽`$-OiփAeki~Y؛ùrz Uj5L=6dl!)f F$Dl[?gvUcTcYt}Z \^ҧ!\[\9tՙzkؔiլ$TK{=r6KS}vC^8"[E")f 2A*kPIih DH"ZJ. FJJPκc[k*dY&j/AVt.FTxT!SXP{N݈=(TݗєP>o) 2MQbQ-*mm_[[o@A!Keox "cŮ7E5.O2rvqHXIíjk-/L*yvN2M&o&W3t˺w_Y? 9EimZo3a 7cF_G֥v_u ]Fz a\2 0@J8\4,0 -]"c}>nsf_{uz(&FDܷe7cj\W^n5QUAVKz^^P+}ڜ~4T$B %>K<t~<̀v 4Žѫ #br cj&LA(cG$lɣPChBF]^}ۘzEA*ru"=r&ƃjqhJP~u]MMOW#[cº{˭n|?$ُ  m+`΋!E4ckgh(r,c,ҁY WQ"/[zVO_QŇyݧq~(>&)wh@AX^b2I%1$7mm*1x< %h`FbjErV͉l22^3x,UM^Y8}@NS~^ViA1QoQ_*4K|6 huޒAW7c?9Uq4jlk~6dLtѱkFPZFvrƞ\+BZr5OV++Fʺ&#qrGю.@}+ݝsy+֌os\'}u?{ ׈m؍q;ȁ 0dQL2gYODh_lxE\M>zANh1 ^?Kک/3]Ǥ#<\+CuWMnh<7dCL)DN?zqZ4 A1_&S2y~HEHml |k=] Ix@>ӻ]t2cۋ1]c J5瘼J< Y{\fk7N}Fr!A"99xFәrDZ,q?2/[ 335-sF7gXn hϚ f@'`?}>h371//{&h :1~Ȓ)U6Ιh㛽se",y6Zc4~C}#5mqmeJ;{=le ιB;7_v~~>{{Ԏu&͢=d0ɛȚe&td?!ϫ.;hjhDJ[C. VLz}(tb RwzSd!BI2sukiÊ*/v+3"* g@6*^N#쉑7DԢUm4٣B:5 E ax|A֔K*Ȃc8$?.eZ1p:=);Kv~+TU2٨773kl\4:"B"!iiQ)NtKD@4`_dFUiSz?N(ܾjV)GMs~9J"q]5%j]LpiNÐT@bCI]*0o<>Q"cr ҈LU*zgx d.,EPTu|QجTFPUD*#2qEFeP ?E|0Qfrj (D)྿z@JO=8 !ţ1j*ŠQoF$a`YZayQ/wNG~Hd$@fY$IPP P^4^Sn- ˣ k|&|vF8StV&$0c'*7oy v=|QKPem l7PU#j~sfۅ< ù*7.tC2o DJt3:VnsW]7\T!Zj 1&:#UU/hx] ܷ!` !A?8MlvfկYl~4&px[faPtgYYL|lEƳ]$`ȑN06%6h Bk2ds\09*-"M ȗk"IeH sP" #[ϣ3{Τ=0dw(zRDk& rC 0xyKc>:X6,A嵤$mF~Et֭,lNo\ ѡ2g+_:  ٠LoykHfl1q&;UPŸ3"65RcyT2 Ea5p?{Z z@U j/?+ʶX%,dZf69Ю?Pqv\>C #l8&yx Gq%q%W>/ZL7is 6] Sg&!U>ЕP5HHm:ϵov(cX`xļ̕[<ֲ0g H #@o#zQqxisĻ*QC϶"EVLvK@Qբ0 Ӊ N@gT=nYMA逓2ӿh_@,^tyԁLc٠mz{*R@:<j<oxɢt=Aկ HZJ>7R I!T@@cdc.9*y:݌k}5پL b64n"g>9O.YrP#ߗ!:]h~Dꔁ:atkEGs۾z9{dfǧLk[==Y&R ^Kow+3BQ$fX W4Gp(ކ|=[n%nt~d,鋔27"T` vI{hX\Q`5V C#)jWQ`GV GE-^4d@FC8ŭ$!o6}VQM&WfҠoIqe'Nڂa+@W"7&ycw\L>0k g],ޣFY81}zvJ;7K;,A!#Cƻh8j\C=V4+_*'+;@Ϻc:T[9Xs&{VG7*{eQ|F֚^0+qlwש˔7T6[W\LG0E}ٗ>**P͉F(FfDff/t!Bfb |^;?ym{jErwuQ5t`Dx5ٷ.`G񿍺L6 -NB"&trR@o2\4YY( 0`[fSDu1s{y8QyYjԿX{@gFr<15ι1X1(4`;F$)EIJSN@ KedJ^3Ge2 >{GJz=ooS{38`ZyEJ]:Cw/־l6v ş3o9ʲ?V,:f€DWaj_c:Gcx:IIv`TdD?tm^{` xO"ӯbJ@(IPc6%G`hMk{V ~jv:3nܾj~gũ x\ym%lC"}>U8Vs:ay &C?҄B+U;[uqqBws=IxI3惶ujĤA0@5Ȟ/pTB907RH>e=d6xh"PBsJ>eB%ndXL5/b{W^Az2t?C0b[{Eotǒljk\hW9M%j:Q\9yӐԀ ylCÏ&y&cp泵Xh{6;v7x& HBc:F'; bw}HRѻsJ'3ـ`C/YEZ= Nܼ9 `ۀ6k%oQ4+ja K/8Zm羖 ^m^H2c{; &C0\u)ۊ;Kՠ.- yH /B3 = *?]״_kZdRY3iV:$[hu-)y vaa-Kޣ%˿RPu˟kJ~N>_龶>>,y㪥;}'2M-u‡p,Bm'czfڊX}WTY}mGduwS#S?Evp{I{6%xn嬾~,1/u?׵ל\wyV%fMafdo1Vrcv.<%Q/xq䮏:Gw27>ݡϖߟ_dĉ:>wꢵȖWrR(IUt {đKYC:ޏӐ{;uJ'>6T*^#ڥxS(<үtp~{y͹/576Vr{Or/y +Q~&66ym>VMyL^ʮݺWKo8x9;e.9h{tSycͿf7+}եq5r;r>/ =9#X3l8 ގC/ooGz&6p_KG:W_ti:4$|XbD,>i|oaG[3>>Diӧ5"`/`uw}#UT"ާՅȥ˓jqݴ.~ՠ3"v &`B<ʕa;ݫ._o֢̽|Z\xʋݭ^y1nܫmWZ]D/.jgb‹f2cr^w̉Gm{+8=O x?Y>&_q%2B~b YҤ;+|{;۱?AGнh?롭^wN\_ޞ{V=t\_=vU_cfjX`oxQwi{W;ثıW#ơ})WO?Cʹ{> &k1b‰o҆tYirv0S!o+oݰ^V璿{=}C_O?ͯCհɟJ4KU_]Tox͞dLw#i%-+/\b[{x,sz~⽸?ߋݑ[4O8/=_w.NfV?a9qc=o[;q͞swji|pZ Oy#eFR]UuW ݛ#=3,nR>}űNjAYk}bяןy`CГW֣}$_Tl./v8Oqϑʢs?/?NGxV/Xi}yW?*NF&sIz~n=f%t0be͙z'׹ﵜؼ{f9k &[Oe9[zSz])a4iV9ΰKo+R=Y2I÷ǣUsr~Oxpgn:|"hoJwF vۗlz狰K_kGpzYGw=BO*0J% hazrPF @!rޠ=ʌg4I 4+M$Q +5|~E0#~)luҷ .n?T .V*DΛ[Ĥ4X9f&SE +(Q@qP}Oŷw_?)gUUr|aD;n嚪's 6c֍"uEId 0B(N!089(j=dˋ 1I'pz9LZ7SSI!YCE-߫OCBI$SPώ;ׯ51]7E! @A'kTw{١R`a:Ke‘WKi.-!ό0nۡ׶n~5K#rdЩ` 3>#M?Ï7~^!(kQz>|#?BXšwujcO[}Ÿ Vw[u]@Ļm~ƿ_Mrدzl\L#J=U!ؙ2J)-\~_]ADGCl/d@YGX>YH-RiVO/ @WRZN% 垹M3զ"I2F=`N{<˙Q7W\N#Ocv;C0) 1l?L[5uIѿWjcR 7aa7 ]&ٻ]bf yL !>Hp6 KG2@*nEuv_B=] ~WOɎ߃Q2ݿENEz)hŪa^&tX9ܩF!ΝWkA$AM?5Vi0_V O$N{?CQ&͓N-k@|4samoox8eu5w=6Js6 .2,X.Feؘ Tid-pNaO2`Q#{%(F*i*?GPjWfmhAhw^Vm" =۴!H‚ zS i][Rr//{q Mu&9.E>8Ov)K6 >;x`A=+9thqm$vfe*)aS[>(JNVKtŲyYC5ߒ V ^i[+X,w_gQ] wg69ʖ4:Ԯ-U֛˔3~ҭ!-dZi _G2^ԉ~t`+jRsr.wЛ}xT\CR̩< Gp˃s x]<&'5tiBZeUd5фYcf@fWq:=#tblo:Ǽ['M-Eyne>C 'd}7]4Lo7WrF`A|qRS* |k(p;`xx// cFY 2dCo2eg{}z̩nὰ{cսpmHG:jrn87O_ط8ZBgjJ8z*AA;-SelS=aLܴ=̴Զ`?1F@~>z8 8] oG >o@;uGZWii"|- Un` v%䳳nb2=SR"%ìقύ 0b+t _tOjN.WW#:FǁZmq6T5'S/БpqY?i_ [-dl["N[>۴ U:>;T><TD/PTK* AI@f ڡ*$ {_ko}ق t25?8!,ݧf ]zG58􇊏%_ugғ3 fE@;@t1GOEӕ0 qn=|y@_ \O"xR>3߃v` Or.ghs2RwзNHtS_~'ё䟩?=)gI,xgLbz .ȅ<|_}N.!j pc~Kؠ%~_|cRG+-Yϡ;`{cKC{/ a+} ||/Ӌ䳑?/AaKgز"[d\kO':hIpJHc0h'8En]sq|쾢xP9()_3vQ7UT:>di~K3inJ(>{sxo;#?UI5dp,Pn'*4@V-@ _H.2u sw"+RHAsI&Vfv5YDR%\gw3L=ߚjSb^׳FE$$b0  2QFBHbL22B1M5 2J& 64m0J4Rc&R))4iHA ReH"T(A !McZ% "LI32hDBC)B2bQ4I4$ $ifi$̑AFd``X  BJV54FS DL,P L2$BK1 D$ř@i$4 IIA4 3$ 2bB l(L R&&ɔьĐcE,#j+^r-mI i,{ ϕ!@%qi( H.6*15[rQB82`DV#TPJ%RF` C#ZfIeԒcRUmy̮kd' TUu6VQ͒L*j[66fYd FXBiV)ljhlJ+M*BHCT9YlHd &Yz^. vk2G\JC3{`&ҊQUm*P.N,VZ&4֖ˤkFYՋ3Y55];%+gչtڤ[ⷛjhmlT ז7cIdifewIM $A!(dC(35%C;qʷֹ]V`B* V^؏6b*J,P;,Xc CC%dhbA@2Ar5)+S ^mDXGv6&SrVD) T\IS 14C TE)M%X!IEB0`HB4` %#HEWI-1tIEr1"6mmT;wRWFWRr(ݍHRC@q!ԆHc6sVфS6^\nҵV4rVFְ ZiE-kXŬByf+BaOhY+oDY#BT붾xA-ATls5rPhJZr:54fBT$;HAH9yXC]05Ф-jH OBP)iSɑC#Z>ZQF̌QF=|Ȩ\Ϝ)dIWLbD2EPE6*淛r^Er\$D30rl 8,Cnn&I;P5CX1#Mk͵Uk WTdݒ#["vYT Lk1̄ܳ-|j+tFU|+2 LHa`M[Umʵ͈I_MD(:3zw 4-j鮔cytז-ʵ\jJZrەW9RQB:n[1^Un^ C27 PۖAoQo-SM VK4j [FjخU+yTCJdbI մy*Ѷ\%NU+ u RjiJLh,%0Iܢڊ-yQӞW+|mU(VIY k%f *`hĄ"C{j픭6UMB%"kYJ'iU@5*IRc$a kLb) #LL4Ҷżyr*sUvPK5&Ed;Z,-H#Tw5bCMUN01FjJBfSrOwVF։xTJrd;Wd.)2*g.aBKlVԑeVrrŭ\0+d"#0 dR(j6kdYK 8Vֺ8+H&r5 PR1"B+ͷ[Es%bA=\HĆ0 :L@TJH֤CjBj/kmJ6+*^z\=jUubؓXj \/H-bZ淖jMYFzr=6ѽ!$dT V \MBMΡ3f.I!*dSvJq)p-|k[sl^k(ʺo4YٮEG.pybѷ1ʹj6*5^jj-51[֞jQZr*ڒVr-r幨rF% 8Rȡ u &7 d#u9!6-\kbkҵ="2JrF.JRQsj㸵^VwFb5o*[&بwks[QTEOvo^[ĕ𢫚ק('5髕E7<5rj\ō'4 FIM1Ki aVH&(DR!R$ݒn TUb&)Q2 -d.ٻg& `!FEG% Gp$ڣY8TsjD`&4bԊҨjCna(U( Bj]JYvHj @pk Ij8PI jDAMF Qm 5  MJ%;k-E]*`zdEy3V/` V<19!xC#ٍ׳Zr/cF1d[%"MYHE$e# LK* ̔)M2@{Q% cWm]lSa)& I̤RB,!Db(LXM͠q|1DU=M[^fBH*BOkgJl͍F, l]yɩ ʒ(Qj$Ilhbc&Dѱ,j7~~׷I b"I"̺KEd6BX`XnwkkĂelQn,1R Xd#V,o=!]u5)"dYXIM؊%ajMlM3))##oUQIH5~{0 SDD%_o[^TȦk#㢊 Rl(jơrQX(qnI /ſ6QIdIlLљ;lU搃2R4ATUKfIP1mj\dNF%2Hbmi3`=EƟ7kBJ&y۫ ש ]Z\Bo{woSIr 7kM:O77{acpɑ6kSp1ZXdm2gy\Fg:%(wu19EX5k,>cEvAMPnQFo=;(+$k$4wf"%z@`@m@;`+I npaH (րBPBZn|z}goF`kx 5ٟoeSI>B ҫ!ݵUHOx#o`|]҂:/opp@4 4*1mV:1U*#IhS=*"UHMJu*m@fšM/&]rRUS]}N R@ ᢄ &M4ѣ!dd h14`&h L5<4Ё  dFd6O!16CLL4ɓL}j0ϠYz=*x׹~\ݶxsKYW{(ySzz$|KB^' ™ྷ e 71A 3sO$荱P[3b S'2W,BM{"giZyק(5I6(&d\܂ݗ6cߐO`,rbA7+4҉!@X&0mAy_~+cu5sԝ?:xa`Y[(Ga ^Dk'42X6~ɢbNn}BMv7w^ΒSţmV<{45 ؙWo(NqDtg;x ?$' iTAa]pW 5S *Ԇ΍bĝB%BH"sJ) ll~TO YKF Yӽ51h ް."83g5U@H5%~VZREqAi"5H@'Ýn&w&8w[ߖ@9|.nv➎9;~ ҂CfTMQ>I@G}~ #_~&!lN0*Q%_hXIfk8$ @qG蔹SUYr§`B Q`WbVk}΢ 26 1b ~DZbyj68NTnY8Jjl+vd%["1R< tb Dm_rmNڥ8uSQ͡m 5$$dwc}΍%> QnϛolԜ+NjV6= Ҵ#E& ۚ2աƖSeC{ո/!Huup4FM@8$&`,7GAeXd8qGÝĎڷ^D'='N[u?O+0d=Jק紶d>^}()H~x3Oh~~t7Jz`07Z">|yR &!@WX" =2FWT5s48*"q/Sf>ff;:+'VZߤO^Kv.YątpD?9Ç{!ATETD I DF&ȘDY6D6Qiid`Vl[cyzjdR laA% "oH;HwX=yEoaxh)AldS=UZRHsCkKqXucj<05/{_[oiZ* "ILlQ1lRŠ)X%K 3bЉ#F4Ф0a6K54#FLԒPFJj2i"JMbPTb)#kFbXJDb"J Pn[Y"I#Fdi((FF5ZB2km.q*/#rdKVx],?sxO):uS@ӱĖ} dYxaQ^ꣀG RbJxzŔ=8tyn1(w|7{ U:0 %ǟ($0T?_c%^C(e8"*%T$a ViՍ6 0 @fn7C=Հ}=|xb1S9g]̼SV־% j;Uf$FIizp Nyih#P#s:j쥤uXO4' [M:n.$7~ޯk *̦/_^p9ݼ< JDNK1dVae<5cM{S{ L_ȢuGA6?U fkoۈ羕.۟y~^^+d"e]7.yhE,b>^4DPLd"¦F#K*$dLadJ$DF0 bD6"#z<5"3!lm&h [ĹF"lE`CbѲbœfi6-bIJMX ռv2[ĉ3h"JSRYHxiH`!hHB20!$3 &,Ɗ C4Q!Ze!HRJhLT7GZh@F0F2؊6܄IF&@fj,IEEDLԚƑ5TDh6 hTi(屐(jZ5ZM^1p  M@P5Itu='ɰsKt ӝiŝn#QLj$F56rHϡ덷"x*VPnOn'#2Cy ‚?+oXK{) e Di *u|Kܷgaq<6ksy">å&Cb#]ZydܝPΛŋ댖W'!.?)b]lbݒoaK,uZ \Ȥ&:5o),o}BժUP.&-.nvFʩz-64QUBK:^O".*eid9!S8 &E+0g ('U j>χ;şzڇ/|$lE{vl;Ҷ1Pvٻ٥TвxOVzfx>?&tK?83SGIآCQB6NK ,A %,@RryAMPkgQ+O~6x?tfGmѭs.,Ɵ n&Vt8S:Cm#<z=3G;!]is/vh,éܦ^OAC* v~)m9i}sqHo/[zW[q/yóѐ٣}{JiNLھTw97Y $r\ tWz [zs۽kZf^S~?u=8ݗy]=99T<>9j"qguz1\:}E56ՈG9Jy8;5IR #:fƢ 1P;֌EЫ{cf+9?RhȧLwOCv̀@w|.(1t(4uFf/ (([|/mo7my? .x "5g6)JDv.=wWFG "J>)<=g_P% Ȟ <2O so=qPzrPH`.+=rT*$^|.. qiHi@veHTD-cE=QaBhPpiWqf*(,V1j%2h5S#i>$p1@(!85@]M{#D @dJoDRKH\94HRЏj;1)*%!y\U,7wW#,"POebpyt;ng\wH:b@"mjȃ%V!Vh#^V|/?\!.%_BQ{r~zA9g2Jfܨ֣Qlh(j EQDQY"ӯ3̹=#?oHFKAhibU V* :d @)4%77o;> +9"ѭ|Ŷ(@1 yrnEػ\O&E:n_.m!-!]> ZXLtj@ 鐸0k4#@PD҉(K<>|_w@y<ɤ) 9dL:N RP*]/:|P5(wiT)<ܼ|SrJP*j ܠ"*m 5JҠRЀH(AmBQtVOP!;;:6-D[[_&EJ"3G[J  "g; ^A<6ah*<΃.`Q6QndNhrcty1~Enۦ $?b3z\ڛe>hN>?ŢrJ92F*b>vȫZNG/ ;4^QfTUƥd ~6Y@@B\Qԁt<7$u19-FkNQ65T.2b$.Ca+o2VWD}av]Sy웽zm [5z]84]op&o[3^(͍7Z1CR,>u-{i~VB4zAp|r7o6^* ;;">Co!7ܭo ~3NXL,ˠ*8/ CTd3/gʢ;Mac3l{5{XcvGv\O7!'-q}#6W/xNp?5H|B͋Ud5\{lB欨O Ŋms P2,O&24 Pяhۓ!] =MN)\]#=fי9|q708a/W||+^@******" @ܮk]jk5'?"xO TaGrp&E@GAqUl1(MA;uQxMvzyM qw(d [O,LƒID,MLQzeha|2=wT [w]yI1GfÜTڧ}ih_PHDuڹA:swY~յ?Xf*FOZ] ٷW[65dNn3+zݛ?x]sa$U;x/*R/gҎЅ*#.(%P4TIdاp}T7[ r=lϡG۽#!R=o͞nd0{Nʃsz[KO}Jlܝ>6oaK˼blGhksoڴ!!wE|qټEN'q.eM̧Y!s3dASi{L| ][Ȏi_EI!PO3S20Df ,ۇ:m˃ ȸ,MpӤ wv2pyJS iD,4d-Z-FVW3U#M8|=hC4f_X Ŷ5}"(*R!78'}~{ȮOMKm#_ɥiHr,GMit].Mu!P?7:^@>Gh4mOCE"4[mF\\**+pX{͞gxc/l\gg2Ҧ{ߟC5(RH)2a%!Hp3g |XR= _@iiR)z P=$ZT)S.^f<)KJ:K3xϑ ֎Iw?}@,#xmѶ{xTVHMƅdG׸q1GtNR57) }LyۣhMbe+H lVƂ5Ff *q|%дLŔ4Gu~VS4m(:'|08^V+ Fs<~Tû˷4՘3&zl!P3(^\&&~2'kGD-W0֖\NGAE!f-p%u _p9frlPSH UM9Y6\}BA`D&K,*_/UD$%c4~ [ ZY8 ۩GSi/ ZRVvpC0eja$wWMDrgW^Ú-z}]'X&޵-8g!uٖ5K_k\~Mw qAsVsO;&.6OxcrJ(q/ < yۆC`#Z'`\Y1F#?n9 U3US_ =y^rOOScQX'Hhr%x)_'P,GeZF1r[/|$ӸYy뛱k9S"=WF^NefVAUV{y~+BNu_zTf:rB_c N9/Z/" NW n*1ۇ8hWʧ[mcy:o8IDLb VֱeJR fUmm//˺ZUcdB U|wWHk-kZ^[7S\뻗LnΙ;1tɌ7.un7wӕE C9]1;\IW4Krs:wq˗4mGuKjE-jQZ%ֶ\UrhU esw3Jۗwr~04u.n,et0{t;wLWu!R% ݃DqۡMW;wt$jwiJ8y286Ҫ*T)SLEu(Y`i -S!]fwNN$AF$$]CAcs.cj֥Z66ʼnhYmQ#wr.KtGMҥ)KkDTkmK-%b"z&IIͱ˝)Nr!ҹwm*Uh(?qbFQE-[m)km(4@m[e[JQiiEYcД˺~+=7,Q)lmSf 2#U-J_ٳ-DW۠by+ߕ睻 9Đ3ԭ [h$bYuF&FLTr-IsR]-l\"35J& 3-5mFɗ"*̖idl־Z0ѫb)+i=ε2V!DJp{w4r2nq&..\tq1ݺ).ԜbGfN Crl%u˔]ܐMr&5 ~?d?krYPQa!!%IC4\!L%+ W8b% %/KJm̛xю|KUAq.PU)01%F *ZLIPG6VVLV*0PͲTQBŊѫ̳Vd-H`!Ɉujec ȡ0DYkhkm*%2FF&bʦ5[%X6JfIw&`L<]Ō[v.C1Ex5Uy^X(r(xViWCL1*D~*6,+v̎0RwQs݀Su`\aPQI\O#Ud_DQe\f5sjg9&1BqbZG Eb풶e9Lx&M w.40UDVET?FPDxiLn7-^탻;0t4ֱWb#םҋb,Xŋ &c,^#I(ͼnxExasA27Ut9 j6+=x/MVcuJ*k ʈEy|iM?TĪ(!D*ꐨ2Y^>4IʸȫѾ8zզʞ:HXŷWK/ $ѷ9d΢;Mh=S Jjə4E"!J ^s Mn%4/4gr^JI{vE׶ԼH S]'39o7~'Ol #HG$8|bR[TZdLb2K E(K&љE*B KF! ^zz] ˆLר"h5&kQh4Y0QY,Q|^ҼEj*(ս^F6/?Q" EUJ)Z+Jo("{>dF4{Rr%mKR=)ÝmD`L2_XsU;]{ŀ`ˑ׍x亠Ϯ*#ײazz;mp%'u"yODYf09GC|oAqm0VWMYVՕe16aD Ƃ74ܢ8%rrH:ɒZb=Q,ŵ5Ev|Ey2 f`֚,ֽ;=UFd4$郧VOG`9104^dLS'Y1/fنNB̺F&b3<׸} 2rg>F2w=B!'4tJZi׀R0!zyMMAM j*5cׂN G68$@ChŶ"шAf5Ā[ ʪsk;5wMÖEa =ۯ]S"=$GܓuC$rZ̀S=4n͖øsà^igvó}(uѻƅeeI',1VOndHd2C|,D } ;@%zGR<$rh6 `H(үPjAݬzMtBn"dx@'nt JQ@!rm -BqA3#vHVI-G CMxl;3f.OaED;(0  C~@Pw *@TCɀY OgP]yn!O0mT@3~iOG6U>߽ʊv ɐaI.WIb/ ;Z*N8"0T/O-kkPZؐ@CL3fK g%>emѲiKaX {@+ZOQFшhkFڲkXU3U4V+cZ6 [bضj.-U*" |ܢ5*+wȢvaW*Ј'EiDPZ*V|O^^r,⻙vW1eLmovDP]2l2bά3 [ T(#GEf[k+vfj7ɒ@P`QUDU%UQWȨo$P:eX&(aS!n]sx;, # ${2$4lW^N6 k0BX,!  oELJxDP >kuΤFa!酁 2H1`n׸mfn:i C$!FiΜߛW1aWhE2ql P8IYz+sMGVNedvK d~uo܇T*M0 NPN]=#ϭ',~SZFDc-tyJ"s`" ]ms\,Mݤw`cJ SiTTLاIw1\]T^>%~W̞Β/ 5>[^IN|SK`{mU$lN.:yB뛞x9<诚!5W?$=W`E(F>/9 \'z0B{O~}sh#@XD]#tx:(' 8~M}Ds/Qv"1<Ԃ)d9fcn{p$Z.=9:/}]a,"f[5}}%yt:f 8A ڋwm'Tqdk 9gY'wzM^R!O?+l!"fg߻?MZM0.;S0Ϩո\6۵c%bB%8[Pt%H Qj33O=14^ۮL$" ;b;mu_t}j FpbcpE#1c1E1 DbL`0J.3ECp~2cOVPPQE0Ӥ;`V +UM&#sCCyBベB mzor1wtXkK$bV:R"GvMtكMt/ӝJEn /h,,f#*Rb֔Gu?_u?{쒠Dow[ͺ\pn]yJDg!s}?<գn2e&i @!X+߾N2|K (24_y63-I"Нk!*JhDi'ăeEԈ\0hTD0COؑrE2rrD\\S$DPH" N_G #av}1O~MxWZ,%+ϕgˢ,Ù[u}׹$Ӵk{D׫ٰf,ױμ;qk?@@l*oԺ,݃jF8ph{?$ V&H޲tOSRAN(( UCQ;z_*޵EbN gzkV:+ p]K"Ii_o?Q/%xG(M2y%|4Mi;7e8 ""6DD‡!Ps"$D"x?O /Ȕ;Rq!"(( VjNc2_,-mTBιZ*$2rBY)v糈ZF+G[y *, ~^W$AmUN~WfJ2Gwe_:G\ N CpEs@ܢ.4=RIו7oB{]௻UG`qS帮O?k,e-\d *&- OWW&XY7 6[;.igpsX×U{Gåwa hgNɥ/4 p>(*٘P ƚ|Pȁ5l $ugkz*眍>nXU9d}=pWya8~/6ᱤaѽ2ۮEg#[T R/h|?wQ g~a%% ôyؿ=Eo]xFܠ!I$<noë=o772s8 fg KmSD0_=?ѽ˲Y586@\[.E 3O5[ӭ5ŽnUo`U^o 8ۚ7.S}asK|7*P.Sԫ_RCkz&WƩ8&H2D7= IbB%" sX#&Ïwa?ВaFq #J1^;c1x(J_)JRxFmw;YeZUD[ 0L`\- =Y"О}JWL4FHWPI[%K!gY: >ۭҝTOLpV~YGmh9∈/(ZB"ePWto;Nl1<(m@nT=T$Q )\D@BD>Z&uK[n3Ϡ2M౓B=[ maJ*U锆*i_)0 0Z߱.YVK ;:K Bn`lsW36a/[#h zcxAY .;ZT:0HGAlsY<6Εx/\Ր}Ѭ1E諘E~\IsWAR *a5ǫE*wo_ԅpSowxNgt?T]펢t :ѣVwBN~#]e}oa#eTjuVP@ywηﳲǷ8AL!J'ySrx W~&,bQIƅ[0Nqk^}V ZAZJjыQ،c[5j| dP% (%Vͦjj+oT*PJk2E+@@(l72+[\sCFƀU=Īd䈂EQOѤfcyp\AuDΫqg<-EU6^ 75[}k{QT60z#DDT@UHZ s\ŗ:ѹs,5Vܛ}z}=exO ^/i ǯxyl٧ΰaeۦ4 sچ߱i=Wfլi,˫=]ւ ͏qw"_@ D܄:_h53 M<žux bmw[ϧ/Y؜X75B1)q᯻sd wY.^J+Xtn=^<8U}HKh}*CRu9rEΈS@# ~mT) )dlrL*pK ekcuʬunDe$3Fںְ6pe] Ԕ0b>2+W;tkwIYe \osizaAZSUY1"D1[]UnZLH۪a#Ttê4vg6ky^08A)Yk=#+kd[2zXfSzICSjH*Y3AyjQ ­ uv\rBF EJ3h1bmTv]+Zڑur .G.+Ż+Yf 9$󱷙+K%eBJg0g*bv@N9N` \ Q si<:L[3 4LX,gѺO;2Z޽//>3["8@=ԤJy )ɨDMV.K`x[m|)p|r0^їhe 5 BqiMqP_c T1CE,,! ͐ocLĴ# FnڔTR"cU kb~,o  W . dT@(aFl-a ,Q2 +,0a$YLn`Z5lS>>Y#W(|+uj+V/#7Pc5scmMJjRi,/1ig#(LVoUR*DŝkX5 bkE7zVhp֛J;NMM3i> Ɛus,$sYDZ 34kYE-r \έR-yKR.[@+,@TE [+#1slX\)%Y\fB QF`EMlHz\FL&Ws0KߚpH} B^%ph r>g 'D;XosRUC {MS^{Vv%vg7-#XʌJV(0u+MsH6Iիet*Qls0Q$N5+b!5RAcR0bVUA ^8E` #v,`ይkB2+i*ڼ!R¨YJX`aVIۊ2W< #k +,cuoŕ3*0j }*|"m:*+55 r-xMk-Tf$9iS< $2.:Y]pbZ9 B& V&1xCLi8@*V:!1`) 9.CۓPqԦTXLE%`mbUTtIL94ͥdYEc0UzZ,z`@j VŗhdDι<2e Y+a4Yn"BX¸CTऱ cu.;PE5SSۭ%fҷ837|pb*Է3 d+")i3[n'OCWov~|$/ 6Ɛh"O{Σ&EXW{/ô`Tx܋wq^srRj .SJS2 -AIsbM{ȗTQvN@Pngux^5xt[wFyQ,ldxކ.뚹͜kmnhk`AX\ǎGy15EѮ[vy/]=}pkd+,LdXPEh "alX=.0qQI=Cn;t!L&P(,]a`9i *6VXF)"f0̭,t]IPLV,.TLbAVV#` TȘ!h)u R2;Z5S4f4Rm1mc oړH,L.:'.>TcU:e-OSB`f\("o.h#6a!0e%9:\pj+0՗10nUphªz,%eq^2.!o9 ,%L ^,da% YY`!V)H%uqjA력WpNUe6m9{ P{L sfVV rlUV@@^Od cXrhaU@RY4@fVV#$Va Ev@lzhHP25 Y.݇3?%Jq5"lUfZ-h4/ Otg@-5:j(Tetd NccʭACa:-2@ ԂesM+/lhdL;<̊BfK3*0mmI*0lWn.^;!m-jCf_t&|8 ) |I :O34pZ?Z]eyâcASTT0`+UJȔ?sz4nbq5: :3B3@WkR Q  x' QD @B}PKҳYyD!P^J V#Kt=; :L3z]JF+rTZ -kEDRhMmX‹I(꒒H,dR2" ]{D3%@$1),{f Z&(*X4RjmMnO: : zAJLBx%i+o'+k? 5kN):@F+$҅GWQt*d/p! 0 h i8ԢW f{Kk\378Fw5F.{wDdȊ0e'cPֿ Yyۧ0@Zh1y_y\Q ExyuKPSbPWGa挰q&8Qlm4 2K8.7R~"Sx*yd&Ā;HIƜ~ Db]I|RM3t̢ >Z|- Lzvӧ^w67Q{{lDMbdmNI"=g_-k$cQ5*'jo[/>+r >HulpV|kU&%{|~}LQMw}r8o}jݭL$<5 lʢc\+6?Xذn~")efCV}vaM(,") &/hӅ-Jz1fc?_e}~݄uxDC@U.:e@s;90ia?nJSIJ{/Q6. nޯaBrW#5ƫAϘ> y(2U65X> 5߳D{G(HUOi{ɳfPl5&-Pl IAQ r*@+@=}rѭ ڢPI,3}_;_Puڏ_Hѹ b@:3+?ˣu/!g!_ Y Ah3lA;bȔrAcNs~? &@^InVn`6{xvk<~kaf:e-횽DBHDhTLX4CHsxXih^8BA$Q #[sj L<_2{o7+'iؒ>DZ?b L" sr_o/mR@~׶͜E~>rMUYw]z{ IͿ?t ̚1BGgg󊥾=F#hH=ٷ_b`|6y=^D-vPjʣIg4^tA&)p;ev3qom\f 5cARUS- }=Z&<"dB{[<~Om'O{_ 9PrlCi-eU %1wl{}nfr.gqW:9>2*=XS0JG.fd'{c)0j*P++Pm[wObCRKu^m~{HASebfmMMMGڵRuʡI_][e[ߒ&6{]} ?Z&oRPP[gU/wWleߌ2qYxF! ?t=Ÿm Zx٤AbjݷF,}_ M555*2ۣl]\&l_dW$Nl6׫{.f?Xˋt=>չqaSo92dɎ!Oޭӻ03/޼Ů-|rբrR呇R"1( P1 TŘ~;]ηg&BMDP N_j7VC I*NPAmvgTRM AO\#91=zA}tymk9Sola K <{N_iKˆ5H ^֨ɓ0&FPP@(7]\79OO@z e~..A"$b]G+7$~U:8gXJtpT'3\UHjul P.Nq9:|Vf돉TGś׵YqCi (ir,V5*5>{Q$V0~nTPmWJ75[=\ 6 cjEh((ٕ{ݕ&1鐳4F6 I),JkDZ i"3*15z>xQi2H(7nFLhbia&CI6M`+릇w{NAD! H XX3iJf4m2{]$Q!m0dC]R,&3M2J3fX͐RIە4E5eCƹjYJ[P1 a)_h/SY3ޔ[ȏRv>{)%AWȘ$>yD)şm<6EcJeT(34QIW74tK Ə]DҠJ'M`4(5I1W풒453LlIDb,ba.amJ90kus>} >bvM#h"TEJEEZƶe nvN"']2[1Ĺ,F z#dR]y0TA3aG O+:e;I$좚ZlQ"mMْIp(6Tv<:wy8X;5P61 &2N6$ 뢍@f38L.@ήjάͬQQ=uQ^v i<ɡN'#U8 =Q5~C03mNʨ# {Oku3 Ȍ _{p93?S֐0k՚ 'hҍr$oSq~ P"l}w]#ͺ"ɹ]/y|窩^ 70~^BA pqx8i&AKٯݒTwm@>-N"Y?V< սo>̀^AEk_U'3 ]JKŕџLc5RۑũgA`U %J: K@86뀯95(ʱ wU^byn7J Ru^{<2C:eTid5m(r, ii{MFAC}r^gƙy׏8ҥH-=u^|yR/M.TOf8lY{fcV&"&PY4$~5L,([a)fR TLJᙗM_ٹUE*y>cg=,sŅ6];^yBqo_ YMb3wnzm֨bcd|/q<өXUA+jng߿ЍҘ^JPW.ӍO&'[x"PAB@ qV ^z^LDZ\'}K=zq2䨮2UP+pFS "9TqAi eO+u< An7;6iBUP Y}߰5_a7ğ TB]?_e)s}n5ϦOa¾~d^anAk'I=5VQg=߇|:xS҇|lnӵ):ڪ:j_eB]ii{-nv\/ee_hH<7 Ph:r"$ձ0 _JtH'Ђ )a x* SzOzH Mi\a8dN.:.N"&j, U3|ШPNqa^ n8QZ+ FQ:FJS}';c俅΂csWqW׃Ni:X&Vִ0-fJo|kjVQf:򮔍M潮lk5mE5V :oc;f,p9lCw=\6\TB$;v[$%9 *(qҦ̘~:Nzp9TGk;[jECÉZ D dIx->"[s^1(PPET$rF|Stk|rk[Hogzvo3"j uT=X>/սȡJ+>G:֯J>˓]88^0(P*O A=>/[Ѱ'[((9j) Y[#|'#GȃAEQQnE̡յc0 ʤI}>[~\Z@^&K~?}ZwORE(Op/ku"# 2cҰQ[j[kD73<ŏlx㰲 [iam[Z@Ŋ"ƮF+\T)-Ohjb:֍ 8U]tnUZpLe׼\Ox*67֌0nC}:{D`Q{dչC~7quRI*ulPǴ{@!& pNTC;@78evi$TH`Nݨٹ'$Rvye` gQ઴PRy:5(w; vX!KõBTIFB$JIBw@fd h^Ö_ֵʝf/Z \S!@!ߥqݲiE#;"xfNXm4\1I(NLyz mkyi:E-#wV Z_y9֛SQ~sW,woc'CSs/+ScH1~m?%*R}_I9e뻦}3"d'$kIbWz>.V!oo\iuJt3B I'a8$\kt1Sk+L]K֏mpX2aOr@,Qe\E,&ui/~9A&{[VƋ*cۑe$j b,woa #𭐭F[V%UM( V\0@ " KR-,)ũWza@ʵCOrSh6Ɓh{?Eѵi.A`rE fG60~=2lEJLJY{]PҡNRTh Iɿ_VmPI( kLbD\w\zJV ~Vy<^xۤ9 0g/bZa Á9RBAHmZ9p5wۥ6]ى Hi}܈DcFJƌdŴTiZh1 X)(,0^6.=\4j XHxƱQj6PT@i1 HQ"؊LP6LXV),i3"1)m 5i=w19\TP7K=7cbccJ4͐hYMaSLhrIr 뫼- ؔfcif4iFM%*l(#HPp]-js*faE)R0E{My6 xld@TAd2R` riP<]EQF+\)xmtoiRmFJM ܦAb(Ѷ]i6llULXdl &$)6LKF7 n$t#3D%bD2S@$1ss EZ0Q!)%IBX$a,Du3/]FMM! f(+Ichfa4bIm븯Nc^w,4٣$y7vHEeL؈%YBGR-p'ȣ%ɢK$MM؏;QWYRn%-1 jYs}f.J+hn(e"G(Qc'ww5cϺT`]>!8Z<*9j)W=ӈӮk3#҄5Ib ]^޸xrC(o8{SP52H(?缲}"_U;|ټ_U2-|T3|\LuJUO\uW˽k[lV:Ue/ʳ֮- |IV5~ih͙rˑiZwK^QL0Զ0ϯm5ui{acDoA,߇σj^IK ^4VUYљuE13NM+oUIT C0W=#T{rTf* Pʏ@3zf Il㹝sPPKCϻ ' ; @Rmۙ+*f U=tD̎Jm޳[\ՕX|.\<  :^KYfA'Ū. Kf %  U >K׃(U&b>-l Y ;Y"ZC"DҐ5^TP._Op{kʕc뱔 5 BsrdA2ռ1VXB9?{Ul_p[ 5JHid %p;_JVi]17ۇVT+3E˼TpEȲc\ʳuH60 [IzTʪ3+\q1|URե,J)Kq0WUPjJ?;3]rɣx%[巊()nL[*4duTYE)W$X)<2@Q%yw&Zߜ7e`=iU"mPAKv9KEVO\Qsv9C,\{x/}=XWшm·_wOJ~~ɡ4fX($ D;!")(k3 9L1:O'(,T^O/n)&/>ֹQO `E 3ykaSi]Rۭ^ƈ9̆6)u3aŸqA< dJ-{fxI(0HkzlP"\HƢ7~Nہ lQq`PTEJƺRK;EUA~WrefBXbX H-ѵ5[4H P X*&FŢijHLZLQZ<;RJGBuJ"9<<9>Nַpٌ5,PF"#R@SDbaUK,gi"7gIB 5s"QEQ ԚY;5J}ߡIijyE2rpEt4jJi2ܸ)F$A(O=(apiR1$H 3kפ:xd^H:I%H&)(`bAϭ|{K[ޣPƢj`MFBXFR=)fR,T@=YIw9]d ġeKs4nQCج%T*+I7kN]Dpr]za\8ƪU2̣;dCiĉb VV3"c<(%CYR!, E4tsaGN؆nW.TmyldHLX$@$ PYu+Ū5T H!Gf-XB$4&rXu׳޽2O7ݻM h`wy2bVL3iy' ]$IB˜; 픥T~Qc;%lyS (d&NgGE?*S$DˊPH%$+Ev}k)ekH. ])ߔ^=K`.3% )*,rY53/E`TUBPQy L6:Zb~lckRA]ܛUP@UQXc _>GGP_KV5=Қ; DJŘfno~ poNmQvW2s5m ײi]nQJ {=~! "B}abulO~׃_ *'cJX ;sMZ:?]rs- Y|S8BQUHGصJʟO旊p[)Q 9-{kw0Ֆ8J $"N &e> vwxZzkނ3":=݇[Փ§bBR6T !ݽ~Ԡ$  xx>+ˣx;RH QH"#I(KEB7{/7>.A ]R\A*TG qRH+!<e5x>+#{Zfdv)(J`U邐OZ`赱rwqxEǭ #P]K.pAr/y*m gyS9VNJLoa˔2#U<ڦn/wC|1/6XDR6Hj*@^X z·7:;)D]`5jg'2%iJp4Bas m&%&&!\L\[7"6#$#9olᔾ. ƊԎrgz(\oG̀'BdP/;MV(1q1qpm@5\ <@wdz8TZ~4T*__'_yam6qh ,e,WpCAaȰmPio @ =/GWG1V=6FPл A-i§- pia&k P< CԂp23\)/hY VqϮ?- ;zޝ[*sqg<W(=Hr]IZ! *UwC(\? ?L!YfrRqr8: ^HMI#9)x]1xK1s=lCJ}w+-@x^JX@a4Za2k@Ujt"m_cwwZҋ j4$(ĮAr Xy⇋9I-cZԻpN.I}+2h"&SNLZVd†A8Udh\hp7&vLڭ6-J{}S+B9Yw7OG'xz.~\-Rwȇs33 "iU9k}a]"J$H&uޯN}A}xdtSܼ+鼠&2(a lK!w'.cmKe% @A* wV? ovbP_z9O<6?/MM*/PŮ&SͭŮ|,maps\EPS/lF~3 YDX童e:ٍifvҩC)H{x䘝=.JyTxM뮱E ZUD@ZcC%$5<}|/ŴB<۾W 5Ggz~/7y{-TX~YL%,j&D;!q]Y̒b)Q B^xv3yIb L@٪W8T"gڛMmKFSpIjx:gj;UJ#$=2:qqtD:zn&o\oC)wQnG¢) N m3Y&%Amk7ZdӠx e^m˿=aEeztCf?u±Nb]K; -Jjniwo:ڵ%:C橘 Mw!" b  S?# Z]e񍭍7ޑpD3$#3Aa/jܻzՆRI,Rˌ DSoBP҂(@g^~'SV&֨?7doU.УcrdJдP6}9q_y E96hw{6՗ޢ]D2fswr+cf:9g?Q6IP @1j*Ѫ5mj@E k*W`Vw?6ru_}~%2d]€@߸~&8J PR!H( <_(^NUH4:K.h\2-AUP]! ("\a$Y5N_3eVvL)^dA5 'ABCDHc9YJ :9@ B%<oYycO{JM roXZu_69dϲW gܗfViWFL03Dk]J:$Ji4,٫Me6IGyyVy]5ǟ=~{9.nNH'M4-=203[VgdQ";ѫ7o]ڥ+Y1fQTxnHQn 5._RZ۶7T9JeuVJk6$V9M '-׼]=K~κܭ: yC ꬄx9|WwŽ3{]g}k@iR H  /Nٱ~s[wUyyl߅gm !i⣳vN./P#Yl{ V\?KUW?#n1O%6ǻfm7Ճ*3UJV2^"q`21+ê"׋0DJ̄i6V;64W}_ɕ`$qTwjN=B.FJgŧC c|l+ߕZ?lpœ5()O )Bx ;;:H)rEЫ`݊# L6*Eo/X 46Xd]D^`c ]Ё=_ 19֨3_1i!w@/WvxO6t&>P[mejlhTTx{?2| K6qrq9\CF˕hf61.CC!gc)lƒKr[b-⥽]e.#^Ѳ+_~,vѸS Ȇdc,ܿ`zPz2LX;=ew/D] ͪH $-dA0TYm!"+m0Rm|\,`T0Rӗ)eS(6#*Z"e>[SQyQh<э.X/7{؎Q" Bʌ.i0$/¼0iHHH ZQJi! B-j! @TA }1"~!i8wuBT O_PT✅SSSONT>⢢uMIӊ{ti-3R؍2TA̲Uݞҙ>a.zK{owi۝ۨhC]}4UqmgMqmkr)Rj*t(3T< l_pjřW\fCڽw]o*|V74T)בC0W44Yd011=qk,%, v;xvnCjJKhmf[ݸ]uI Ś^`bbLӳ7c98763ӂk/c~^pË#L8}X7vgtwFtk0C*px6~Z|K+^ m=`9rhJ`zWS uY_.ϳ|TͣIkiUA/?f3{rpz,,+ Un0痞 Ozo/~{\9kgo{h ~MEmyU9-'NԺ4\O/ۯa>q;\LYˎ_`Uxw=ASȕ׎1@wJԅJVgo ?e<v4ٻ0 ~^/'x$>2XO?>K%Eh'WD+ +燤m"߆݆ 0:36Ȟ <8ϡ!L]B4'~d-Kr-{.4oA'.RqNL*~}+-bs0QknWΝK. x}0A ooq;(`s!|_c!2Rv .AVbHsnQ@POj槁*Gag'c:L2!ݸTYi 'y팬]0 |os8g]ԾoC5'^ǔ1hh c} z_/ﶝ:q:s;Ýθz{fԛdd$&c{2Ȳl\ro_,ٝ*ӻuD)ZIl!+kpZnj=mWUfpڑBz+VKR[Z55l }H1565j5ZOXzr"|eқU-Z! rA r֭ivH);FCr%:=Agͬ3%DWWm&Dc%s*}YOI n{P>RvM|>W̷zSl9{vp'rUqA6-6_/ؐLƤD|òй÷Y{1Э"/0zp\-q4'pE* |[XxO.w0VzFס1ջUVf2L,z/E|eq̍;~+m_"?"""!,tA urڜw"C,'g~"gvԯcؽjch~}2Ǟ&&uvV7=aЦog NN'$ (n0]]F} ,N0]oH!xHj13MG3v&.䟜0R;|0m\iCrkצنgjWV`%4ڣC46e fu3 w kҭ6(:݊lMA+Sg~oYp 6 Ř+np6@{=6#m Ǩ;Iu;.?mmll1QPD|g|rD] :C @W^^W{$` `9'n  J0 -YppYl;;59@$ԛĆRl I1&0DLL€@$<90<:[ @H2$#~3Vi6hT4s 2` LB@3Xbs0` 3xg4 2bL7R& ߲4C-էfiĴ)j6kjZ-ZfkjjT̼٭жmBr dLdvyGx*OTt<luE؊ZAEEEExML.b^L ({/^ջ}~?x{v,AYEnKcj2׽vBtqYfᲀ_ejYC3%()Kխ~<<6O?fq`pݨC CqзyM{zq StK5tzoY2c.CW" d0-歙ė8u BB-! y7n?hC w%y5U{5虆鐅 ]{O R|yi\ h[һ^$O~n3k,:6a!V(!]Uɦ ډ7iC,={ |su6ݎd9 0/ﺓw`;S@5F@)pرիm^o.pbr hdޅ٩}.Y >ou~-(d|t-xYЯyO}J}ѿUjK; E4OYKwhW7\S:,0Z7_>.b|rРH7KLY>2 ]xXQu(W(l i0bC:9슗4F?pK{WfaWDGٌXDK-kշ"xZUhU ˀO_5cxcD- w/c PW]XCF/*pYWZ!ԾdbhO}]lHȯx->p"(b.( wPӻN]t%Mb`ue77x!c<12y6qwq<+]=8?ZkrΡ}$pjHT#eUlH~FqHpF Jmȭ9c狽1m!ףO`>%Eddnl:cO;G$70ӂڸӄ_t{½Hhcj!*Pb lyD:VoǪK$7O[yocᶦQœt .Kl(A.Ss5hIЍϜfڪ!tjӏke˪MGoPwypc&ܓuǸ'\.Bh+H;Yq͆4D; EV,`ܠqNW/whEXG^ApyEf]Ő8s9D^Xr#|bfg{%-W\u-\ :~')3Ǥ;%o"rn(w~`hҿO`w' zYV`*yh\|SPrOp?e0vJt60JO/ЙO>Š,U`k T"rm\(w8*oaރ*a`{?PA;^< {E&֥onSkKJbqEJ aezDyHZsr^ soa6jHC7U{%u] g0] ,u!-i恧+TQp?p3z󑸸*IQ[XD(8"(6e~%Lcƚz>ڷ)gjUaL&w*F)#p>lɒj+?}2ܧ`?s3"JгF5:{F62ѮKpIf(@V{PDL,MƼߠG8 ½H-vq ٖ^k;Po~6r8f='O}R0g!8J̷q2jצ(i_O%^y7B͡RD?jV+zPqOkYp3@4/ DP䝭c/+v"1.jD G!Ehy3#n.ѹP//23TzKa"49ыwRXh !|ᬱaD; Hܶ"};T[һBSu~.oH:B:%Sb3dȱ>% TXro-TAH[`V=.Hh50 ,ĆW`OEFWCUb`m揸;9_D[*Ge"[A6v#+ƪA *yMcHW&:T팤OkU81&,K#+y. nomZ~.}ѯ#\=1"\#ؽ.|:4sEd[*2:RsY,B&B%W: <|`;Eė&km`V-5:picqR8b-%armCaوw)QsQ":Kc!׬J_QR%<yRkAV" ]_ r@Vyto Y+v%7L TY9!ÇIhIR" L<~{,B+c"#$,>o }©ٞNi ?b6/ia?BG1RrC9Oѐ 7<a "c)fP~sa]+Ma;q$9/,8~g3nUxq3UQe:!ãE eA C.ʽmcaJ9t/ ӗ v%]C m߾C:9 l̅ZxzX({zn;Th+A^" q)kGd`A"(CG! :y&f9KWV&996Ϊ[NkNxU7|*GA jYf5,sH uotI1߹2B9#4Yud \sxCEA豷lF8%gyꩩc72?1cդMRHpgϠHi _@f-@" _(M r%G@s2?; d'+L $È 9~,|M_M`Tu>h%[2ښuQDC@y \j\7xi8cG%=!{!#+B~HJDƍ 诋"eOj}-vwݨ ӣm;dK a#}T1 < CJ\ji{ bvpԯ&@ݪ> }ˢñH:.cQ,,SfR;5|}8Y[p>;FCfөoq-\GmdqO Hm$%/#$ (Q*4._S/'$*׀bsL o1E4kiקe吢g;}߇Z$_"<\ YkUhTey٥X}T5B4cn7 g6pV u:E-0?Ρ2ϺىBQ|~尚QEaUÞhm/m}Ζ&T"RƿFH!  yl|7J7?jV{`#u<4m0A ġBWĤ|h )BɊ,ƳWuu= BV\4FncɃlHbfv0;9NN'z/if˛HhA-W bZ qdO/aڞn2eߧ>]Fꔿζq|</"Ԇ7yv590@%s*N­u ocI i)Ȋvj"Bx_ 9TJh&|USmaV>;kH39k35i- t{Ԓxhm༼xBfY2Q=NlˆŇ &Ff*v8]@/6\'J["ݭV#y.1t7y 'ΫbTS~>1ȭQU}亚RтNdiRO1fJXiy|J' sń)':~ND,&$µ2bT n-fu@W=;lDȗ _)"sE`-A[Ӧ\S1+\vgJV8 'Q6"ȰaTuOd/,.C~tj{ BYl tL7 u@#*d4f{;гň"7p.UE5`FJHv0u LVJd<$7&~YJvK< g [0~7,ۓh,LCFMe?ëhIZ1JSS.d9T6t/= $ɡf\71g{C$>WD anCЗؓ%tz_<-LܭeVaM)p|f1.(ƏFcpmU HfXTv_*V4Ff̛%< ہ1όh~BYZ.l^rELR*OgܬwI5soR+,EIR|"jF neN,絬-*3̺D(3!^{f^M7CQ1Tn 4^d<­[D:/P1t6 .KTT"OH)B5ڗ&Ij_MčD2QsMaU=2#(]H͔,-*FJ# ~0z\pWbyEL3d)bX01PEVw&Ss5ʴ)g&6$.Ԅ/DEN&@fIcԨݓ籼Im#Xw>{_=jiz'S5GGѪ%tw{ݹS_bTnXxuiyZ!!a>7uf#qUitbW ߟkxE;9Dhhd1W#,$_!:pDMf)C=&|j=`p3>}ه 0 YZ