unbound-1.6.8-150100.10.8.1<>,PXb{p9|?1~;ԫgq=s^[~TU9W-.6Xz 7 ==7HvvZ KpYLtA*`̜L\y'OP#~Kv6ݴRd;eᦉ85JTK> wNZT7P+8K%`1PjePڴpꚱY$jcf&sqt [[o1k.,s~7uu7W[q>F4?$d   S$(8<Uv  ;"4" x" " D" " ""M"4""l"!E"(!8!(9"@(:%y(==>E?M@UF]Gx"H"I"XY\"]|"^gbc|deflu"v w"xD"y>z Cunbound1.6.8150100.10.8.1Validating, recursive, and caching DNS(SEC) resolverUnbound is a validating, recursive, and caching DNS(SEC) resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modular components, so that also DNSSEC (secure DNS) validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible.b{ibs-power9-102KSUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Productivity/Networking/DNS/Servershttps://www.unbound.net/linuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in unbound-keygen.service unbound.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=unbound SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/unbound.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in unbound-keygen.service unbound.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable unbound-keygen.service unbound.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop unbound-keygen.service unbound.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in unbound-keygen.service unbound.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart unbound-keygen.service unbound.service ) || : fi fiYgUh*; >>EXc/(A큤A큰A큰A큰A큤A큤bzTbzTbzTbzTZ1sbzT\Cbzbzbzbzbzbzbzbzbzb{SQ(R߇Za%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@rootrootrootrootrootrootrootrootrootunboundrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootunboundunboundunboundunboundunboundunboundunboundunboundrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootunbound-1.6.8-150100.10.8.1.src.rpmconfig(unbound)unboundunbound(ppc-64) @ @@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(unbound)ldnslibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libevent-2.1.so.6()(64bit)libfstrm.so.0()(64bit)libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)libprotobuf-c.so.1()(64bit)libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libpython3.6m.so.1.0()(64bit)libsodium.so.23()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libunbound.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sudosystemdsystemdsystemdsystemd1.6.8-150100.10.8.11.6.163.0.4-14.6.0-14.0-15.2-14.14.1a@a@aZ@^^\@\\/J[_[[ZaZ!D@Z@Yܶ@Y@@Y@YYRHYA%@XX+XRW_@WRVVIV@V`V=@Vii@V@VVUUb@U:0@T@TT`werner@suse.dewerner@suse.dewerner@suse.dertorreromarijnissen@suse.comrtorreromarijnissen@suse.comrtorreromarijnissen@suse.comrtorreromarijnissen@suse.comrtorreromarijnissen@suse.comrtorreromarijnissen@suse.comkbabioch@suse.comdmueller@suse.commichael@stroeder.comcbosdonnat@suse.comrbrown@suse.commichael@stroeder.commichael@stroeder.commichael@stroeder.comjengelh@inai.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demeissner@suse.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.deledest@gmail.com- Import changes from OBS for dlv.isc.org.key, root.anchor, and root.key to fix bsc#1112033- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when writing PID file- Add patches * bsc1185382_CVE-2019-25031_f8875527.patch bsc#1185382 for CVE-2019-25031 configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack * bsc1185383.4_CVE-2019-25032.3_226298bb.patch bsc#1185383 for CVE-2019-25032 integer overflow in the regional allocator via regional_alloc bsc#1185384 for CVE-2019-25033 integer overflow in the regional allocator via the ALIGN_UP macro * bsc1185385_CVE-2019-25034_a3545867.patch bsc#1185385 for CVE-2019-25034 integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch bsc#1185386 for CVE-2019-25035 out-of-bounds write in sldns_bget_token_par bsc#1185387 for CVE-2019-25036 assertion failure and denial of service in synth_cname * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch bsc#1185391 for CVE-2019-25040 infinite loop via a compressed name in dname_pkt_copy bsc#1185392 for CVE-2019-25041 assertion failure via a compressed name in dname_pkt_copy * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch bsc#1185389 for CVE-2019-25038 integer overflow in a size calculation in dnscrypt/dnscrypt.c bsc#1185390 for CVE-2019-25039 integer overflow in a size calculation in respip/respip.c * bsc1185388_CVE-2019-25037_d2eb78e8.patch bsc#1185388 for CVE-2019-25037 assertion failure and denial of service in dname_pkt_copy via an invalid packet * bsc1185393_CVE-2019-25042_6c3a0b54.patch bsc#1185393 for CVE-2019-25042 out-of-bounds write via a compressed name in rdata_copy - Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch to make it fit to above patches- Avoid shell code execution after receiving a specially crafted answer Resolves CVE-2019-18934 (bsc#1157268) [ + patch_cve_2019-18934.patch ]- Avoid amplifying an incoming query to a large number of queries Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889) [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)- Remove old pwdutils dependency and add shadow to cover both useradd and groupadd as suggested in (bsc#1126757)- Use systemd-tmpfiles to create /var/lib/unbound/root.key to avoid transactional update breakage (bsc#1111383)- Migrated from cron to systemd timers (bsc#1115417)- Disabled DLV configuration by default (bsc#1055060) - Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)- adjust for root KSK rollover (bsc#1112009, bsc#1004165)- update to 1.6.8 (bsc#1076963) patch for CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records.- Use python3 instead of python2 (fate#323526)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- update to 1.6.7 Features: - Set trust-anchor-signaling default to yes - Fix #1440: [dnscrypt] client nonce cache. - Fix #1435: Please allow UDP to be disabled separately upstream and downstream. Bug fixes: - Fix that looping modules always stop the query, and don't pass control. - Fix unbound-host to report error for DNSSEC state of failed lookups. - Spelling fixes, from Josh Soref. - Fix #1400: allowing use of global cache on ECS-forwarding unless always-forward. - use a cachedb answer even if it's "expired" when serve-expired is yes (patch from Jinmei Tatuya). - trigger refetching of the answer in that case (this will bypass cachedb lookup) - allow storing a 0-TTL answer from cachedb in the in-memory message cache when serve-expired is yes - Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff. - Log name of looping module - Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch (by Danilo G. Baio). - Fix param unused warning for windows exportsymbol compile. - Use RCODE from A query on DNS64 synthesized answer. - Fix trust-anchor-signaling works in libunbound. - Fix spelling in unbound-control man page.- update to 1.6.6 Features: - unbound-control dump_infra prints port number for address if not 53. - Fix #1344: RFC6761-reserved domains: test. and invalid. - Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor). With the -p option unbound does not create a pidfile. - Added stats for queries that have been ratelimited by domain recursion. - Patch to show DNSCrypt status in help output, from Carsten Strotmann. - Fix #1407: Add ECS options check to unbound-checkconf. - Fix #1415: [dnscrypt] shared secret cache, patch from Manu Bretelle. Bug Fixes: - fixup of dnscrypt_cert_chacha test (from Manu Bretelle). - First fix for zero b64 and hex text zone format in sldns. - Better fixup of dnscrypt_cert_chacha test for different escapes. - Fix that infra cache host hash does not change after reconfig. - Fix python example0 return module wait instead of error for pass. - enhancement for hardened-tls for DNS over TLS. Removed duplicated security settings. - Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned on. - Fix #1331: libunbound segfault in threaded mode when context is deleted. - Fix pythonmod link line option flag. - Fix openssl 1.1.0 load of ssl error strings from ssl init. - Fix 1332: Bump verbosity of failed chown'ing of the control socket. - Redirect all localhost names to localhost address for RFC6761. - Fix #1350: make cachedb backend configurable (from JINMEI Tatuya). - Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg. - upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02), config.sub(2016-09-05). - annotate case statement fallthrough for gcc 7.1.1. - flex output from flex 2.6.1. - snprintf of thread number does not warn about truncated string. - squelch TCP fast open error on FreeBSD when kernel has it disabled, unless verbosity is high. - remove warning from windows compile. - Fix compile with libnettle - Fix DSA configure switch (--disable dsa) for libnettle and libnss. - Fix #1365: Add Ed25519 support using libnettle. - Fix #1394: mix of serve-expired and response-ip could cause a crash. - Remove unused iter_env member (ip6arpa_dname) - Do not reset rrset.bogus stats when called using stats_noreset. - Do not add rrset_bogus and query ratelimiting stats per thread, these module stats are global. - Fix #1397: Recursive DS lookups for AS112 zones names should recurse. - Fix #1398: make cachedb secret configurable. - Remove spaces from Makefile. - Fix issue on macOX 10.10 where TCP fast open is detected but not implemented causing TCP to fail. The fix allows fallback to regular TCP in this case and is also more robust for cases where connectx() fails for some reason. - Fix #1402: squelch invalid argument error for fd_set_block on windows. - Fix to reclaim tcp handler when it is closed due to dnscrypt buffer allocation failure. - Fix #1415: patch to free dnscrypt environment on reload. - iana portlist update - Small fixes for the shared secret cache patch. - Fix WKS records on kvm autobuild host, with default protobyname entries for udp and tcp. - Fix #1414: fix segfault on parse failure and log_replies. - zero qinfo in handle_request, this zeroes local_alias and also the qname member. - new keys and certs for dnscrypt tests. - fixup WKS test on buildhost without servicebyname. - updated contrib/fastrpz.patch to apply with configparser changes. - Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs. - Fix #1424: cachedb:testframe is not thread safe. - Fix #1417: [dnscrypt] shared secret cache counters, and works when dnscrypt is not enabled. And cache size configuration option. - Fix #1418: [ip ratelimit] initialize slabhash using ip-ratelimit-slabs. - Recommend 1472 buffer size in unbound.conf- update to 1.6.5 * Fix install of trust anchor when two anchors are present, makes both valid. Checks hash of DS but not signature of new key. This fixes installs between sep11 and oct11 2017.- RPM group fix. Do not suppress user/group creation problems. Replace %__ type macro indirections.- update to 1.6.4 Features: - Implemented trust anchor signaling using key tag query. - unbound-checkconf -o allows query of dnstap config variables. Also unbound-control get_option. Also for dnscrypt. - unbound.h exports the shm stats structures. They use type long long and no ifdefs, and ub_ before the typenames. - Implemented opportunistic IPsec support module (ipsecmod). - Added redirect-bogus.patch to contrib directory. - Support for the ED25519 algorithm with openssl (from openssl 1.1.1). - renumbering B-Root's IPv6 address to 2001:500:200::b. - Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher. - Fix #1277: disable domain ratelimit by setting value to 0. - Added fastrpz patch to contrib Bug Fixes: - Added ECS unit test (from Manu Bretelle). - ECS documentation fix (from Manu Bretelle). - Fix #1252: more indentation inconsistencies. - Fix #1253: unused variable in edns-subnet/addrtree.c:getbit(). - Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle). - iana portlist update - Based on #1257: check parse limit before t increment in sldns RR string parse routine. - Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start. and fix that 64bit getting installed in C:\Program Files (x86). - Fix #1259: "--disable-ecdsa" argument overwritten by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c". - iana portlist update - Added test for leak of stub information. - Fix sldns wire2str printout of RR type CAA tags. - Fix sldns int16_data parse. - Fix sldns parse and printout of TSIG RRs. - sldns SMIMEA and AVC definitions, same as getdns definitions. - Fix tcp-mss failure printout text. - Set SO_REUSEADDR on outgoing tcp connections to fix the bind before connect limited tcp connections. With the option tcp connections can share the same source port (for different destinations). - Add 'c' to getopt() in testbound. - Adjust servfail by iterator to not store in cache when serve-expired is enabled, to avoid overwriting useful information there. - Fix queries for nameservers under a stub leaking to the internet. - document trust-anchor-signaling in example config file. - updated configure, dependencies and flex output. - better module memory lookup, fix of unbound-control shm names for module memory printout of statistics. - Fix type AVC sldns rrdef. - Some whitespace fixup. - Fix #1265: contrib/unbound.service contains hardcoded path. - Fix #1265 to use /bin/kill. - Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs, and compatibility with BoringSSL. - Fix #1268: SIGSEGV after log_reopen. - exec_prefix is by default equal to prefix. - printout localzone for duplicate local-zone warnings. - Fix assertion for low buffer size and big edns payload when worker overrides udpsize. - Support for openssl EVP_DigestVerify. - Fix #1269: inconsistent use of built-in local zones with views. - Add defaults for new local-zone trees added to views using unbound-control. - Fix #1273: cachedb.c doesn't compile with -Wextra. - If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write. - Also use global local-zones when there is a matching view that does not have any local-zone specified. - Fix fastopen EPIPE fallthrough to perform connect. - Fix #1274: automatically trim chroot path from dnscrypt key/cert paths (from Manu Bretelle). - Fix #1275: cached data in cachedb is never used. - Fix that unbound-control can set val_clean_additional and val_permissive_mode. - Add dnscrypt XChaCha20 tests. - Detect chacha for dnscrypt at configure time. - dnscrypt unit tests with chacha. - Added domain name based ECS whitelist. - Fix #1278: Incomplete wildcard proof. - Fix #1279: Memory leak on reload when python module is enabled. - Fix #1280: Unbound fails assert when response from authoritative contains malformed qname. When 0x20 caps-for-id is enabled, when assertions are not enabled the malformed qname is handled correctly. - More fixes in depth for buffer checks in 0x20 qname checks. - Fix stub zone queries leaking to the internet for harden-referral-path ns checks. - Fix query for refetch_glue of stub leaking to internet. - Fix #1301: memory leak in respip and tests. - Free callback in edns-subnetmod on exit and restart. - Fix memory leak in sldns_buffer_new_frm_data. - Fix memory leak in dnscrypt config read. - Fix dnscrypt chacha cert support ifdefs. - Fix dnscrypt chacha cert unit test escapes in grep. - Fix to unlock view in view test. - Fix warning in pythonmod under clang compiler. - Fix lintian typo. - Fix #1316: heap read buffer overflow in parse_edns_options.- update to 1.6.3 Bug Fixes - Fix #1280: Unbound fails assert when response from authoritative contains malformed qname. When 0x20 caps-for-id is enabled, when assertions are not enabled the malformed qname is handled correctly.- update to 1.6.2 Features - Add trustanchor.unbound CH TXT that gets a response with a number of TXT RRs with a string like "example.com. 2345 1234" with the trust anchors and their keytags. - Patch for view functionality for local-data-ptr from Björn Ketelaars. - Response actions based on IP address from Jinmei Tatuya (Infoblox). - Patch from Luiz Fernando Softov for Stats Shared Memory. - unbound-control stats_shm command prints stats using shared memory, which uses less cpu. - --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and DS records. NSEC3 is not disabled. - #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then enabled in the config file from Manu Bretelle. - Merge EDNS Client subnet implementation from feature branch into main branch, using new EDNS processing framework. - harden-algo-downgrade: no also makes unbound more lenient about digest algorithms in DS records. Bug fixes - sldns has ED25519 and ED448 algorithm number and name for display. - sldns updated for vfixed and buffer resize indication from getdns. - iana portlist update - Fix #1224: Fix that defaults should not fall back to "Program Files (x86) if Unbound is 64bit by default on windows. - Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to redirect. - make depend, autoconf, doxygen and lint fixed up. - include sys/time.h for new shm code on NetBSD. - Fix #1227: Fix that Unbound control allows weak ciphersuits. - Fix #1226: provide official 32bit binary for windows. - For #1227: if we have sha256, set the cipher list to have no known vulns. - Fix testpkts.c, check if DO bit is set, not only if there is an OPT record. - Fix #1229: Systemd service sandboxing in contrib/unbound.service. - Fix #1230: swig version 2.0.1 is required for pythonmod, with 1.3.40 it crashes when running repeatly unbound-control reload. - fix enum conversion warnings - fake-sha1 test option; print warning if used. To make unit tests. - unbound-control list local zone and data commands listed in the help output. - Fix #1234: shortening DNAME loop produces duplicate DNAME records in ANSWER section. - testbound understands Deckard MATCH rcode question answer commands. - Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead of YXDOMAIN + query loop, reported by Petr Spacek. - Fix that SHM is not inited if not enabled. - Fix that looped DNAMEs do not cause unbound to spend effort. - trustanchor tags are sorted. reusable routine to fetch taglist. - Fix #1237 - Wrong resolving in chain, for norec queries that get SERVFAIL returned. - make depend, autoconf, remove warnings about statement before var. - lru_demote and lruhash_insert_or_retrieve functions for getdns. - fixup for lruhash (whitespace and header file comment). - dnscrypt tests. - Fix doxygen for dnscrypt files. - Fix #1238: segmentation fault when adding through the remote interface a per-view local zone to a view with no previous (configured) local zones. - Fix #1229: Systemd service sandboxing, options in wrong sections. - Fix #1239: configure fails to find python distutils if python prints warning. - Fix to prevent non-referal query from being cached as referal when the no_cache_store flag was set. - Remove (now unused) event2 include from dnscrypt code. - Fix #1217: Add metrics to unbound-control interface showing crypted, cert request, plaintext and malformed queries (from Manu Bretelle). - Do not add current time twice to TTL before ECS cache store. - Do not touch rrset cache after ECS cache message generation. - Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode. - Fix #1244: document that use of chroot requires trust anchor file to be under chroot. - Small fixup for documentation. - Fix respip for braces when locks arent used. - Fix pythonmod for cb changes. - Generalise inplace callback (de)registration - (de)register inplace callbacks for module id - No unbound-control set_option for ECS options - Deprecated client-subnet-opcode config option - Introduced client-subnet-always-forward config option - Changed max-client-subnet-ipv6 default to 56 (as in RFC) - Removed extern ECS config options - module_restart_next now calls clear on all following modules - Also create ECS module qstate on module_event_pass event - remove malloc from inplace_cb_register - Unlock view in respip unit test - Some whitespace fixup. - Remove ECS option after REFUSED answer. - Fix small memory leak in edns_opt_copy_alloc. - Respip dereference after NULL check. - Zero initialize addrtree allocation. - Use correct identifier for SHM destroy. - Display ECS module memory usage. - Fix #1247: unbound does not shorten source prefix length when forwarding ECS. - Properly check for allocation failure in local_data_find_tag_datas. - Fix #1249: unbound doesn't return FORMERR to bogus ECS. - Set SHM ECS memory usage to 0 when module not loaded. - subnet mem value is available in shm, also when not enabled, to make the struct easier to memmap by other applications, independent of the configuration of unbound. - Fix #1250: inconsistent indentation in services/listen_dnsport.c.- update to 1.6.1 Features * configure --enable-systemd and lets unbound use systemd sockets if you enable use-systemd: yes in unbound.conf. Also there are contrib/unbound.socket and contrib/unbound.service: systemd files for unbound, install them in /usr/lib/systemd/system. Contributed by Sami Kerola and Pavel Odintsov. * [bugzilla: 1185 ] Source IP rate limiting, patch from Larissa Feng. * [bugzilla: 1184 ] Log DNS replies. This includes the same logging information that DNS queries and response code and response size, patch from Larissa Feng. * Include root trust anchor id 20326 in unbound-anchor. * 64bit is default for windows builds. Bug Fixes * [bugzilla: 1176 ] Fix stack size too small for Alpine Linux. * Fix unbound-control and ipv6 only. [bugzilla: 1182 ] * Fix Resource leak (socket), at startup. [bugzilla: 1178 ] * Fix attempt to fix setup error at end, pop result values at end of install. * iana portlist update * Fix inet_ntop and inet_pton warnings in windows compile. * [bugzilla: 1191 ] Fix remove comment about view deletion. * [bugzilla: 1188 ] Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle * [bugzilla: 1190 ] Fix to not echo back EDNS options in local-zone error response. * [bugzilla: 1194 ] Fix if cross build fails when $host isn't `uname` for getentropy. * Fix reload chdir failure when also chrooted to that directory. * Fix to return formerr for queries for meta-types, to avoid packet amplification if this meta-type is sent on to upstream. * [bugzilla: 1201 ] Fix missing unlock in answer_from_cache error condition. * [bugzilla: 1202 ] Fix code comment that packed_rrset_data is not always 'packed'. * Fix to also block meta types 128 through to 248 with formerr. * [bugzilla: 1206 ] Fix that some view-related commands are missing from 'unbound-control -h' * Fix to rename ub_callback_t to ub_callback_type, because POSIX reserves _t typedefs. * Fix to rename internally used types from _t to _type, because _t type names are reserved by POSIX. * Increase MAX_MODULE to 16. * [bugzilla: 1211 ] Fix can't enable interface-automatic if no IPv6 with more helpful error message. * fix root_anchor test for updated icannbundle.pem lower certificates. * Fix compile on solaris of the fix to use $host detect. * Fix for type name change and fix warning on windows compile. * Fix pythonmod for typedef changes. * Fix dnstap for warning of set but not used. * Fix autoconf of systemd check for lack of pkg-config.- update to 1.6.0 Features * Added generic EDNS code for registering known EDNS option codes, bypassing the cache response stage and uniquifying mesh states. Four EDNS option lists were added to module_qstate (module_qstate.edns_opts_*) to store EDNS options from/to front/back side. * Added two flags to module_qstate (no_cache_lookup, no_cache_store) that control the modules' cache interactions. * Added code for registering inplace callback functions. The registered functions can be called just before replying with local data or Chaos, replying from cache, replying with SERVFAIL, replying with a resolved query, sending a query to a nameserver. The functions can inspect the available data and maybe change response/query related data (i.e. append EDNS options). * Updated Python module for the above. * Updated Python documentation. * Added views functionality. * Added qname-minimisation-strict config option. * Patch that resolves CNAMEs entered in local-data conf statements that point to data on the internet, from Jinmei Tatuya (Infoblox). * serve-expired config option: serve expired responses with TTL 0. * .gitattributes line for githubs code language display. * log-identity: config option to set sys log identity, patch from "Robin H. Johnson" (robbat2@gentoo.org). * Added stub-ssl-upstream and forward-ssl-upstream options. * Added local-zones and local-data bulk addition and removal functionality in unbound-control (local_zones, local_zones_remove, local_datas and local_datas_remove). * g.root-servers.net has AAAA address. Bug Fixes * Fix #836: unbound could echo back EDNS options in an error response. * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX. * Fix #839: Memory grows unexpectedly with large RPZ files. * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile. * Fix #841: big local-zone's make it consume large amounts of memory. * Fix dnstap relaying "random" messages instead of resolver/forwarder responses, from Nikolay Edigaryev. * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav. * Fix #1117: spelling errors, from Robert Edmonds. * iana portlist update. * fix memoryleak logfile when in debug mode. * Re-fix #839 from view commit overwrite. * Fixup const void cast warning. * Removed patch comments from acllist.c and msgencode.c * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from Jinmei Tatuya (Infoblox). * Fix #1125: unbound could reuse an answer packet incorrectly for clients with different EDNS parameters, from Jinmei Tatuya. * Fix #1118: libunbound.pc sets strange Libs, Libs.private values. * Added Requires line to libunbound.pc * Fix #1130: whitespace in example.conf.in more consistent. * suppress compile warning in lex files. * init lzt variable, for older gcc compiler warnings. * fix --enable-dsa to work, instead of copying ecdsa enable. * Fix DNSSEC validation of query type ANY with DNAME answers. * Fixup query_info local_alias init. * Ported tests for local_cname unit test to testbound framework. * Fix #1134: unbound-control set_option -- val-override-date: -1 works immediately to ignore datetime, or back to 0 to enable it again. The -- is to ignore the '-1' as an option flag. * Patch for server.num.zero_ttl stats for count of expired replies, from Pavel Odintsov. * Fix failure to build on arm64 with no sbrk. * Set OpenSSL security level to 0 when using aNULL ciphers. * configure detects ssl security level API function in the autoconf manner. Every function on its own, so that other libraries (eg. LibreSSL) can develop their API without hindrance. * Fix #1154: segfault when reading config with duplicate zones. * Note that for harden-below-nxdomain the nxdomain must be secure, this means nsec3 with optout is insufficient. * Fix #1155: test status code of unbound-control in 04-checkconf, not the status code from the tee command. * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing Underneath" for the harden-below-nxdomain option. * patch from Dag-Erling Smorgrav that removes code that relies on sbrk(). * Make access-control-tag-data RDATA absolute. This makes the RDATA origin consistent between local-data and access-control-tag-data. * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a subdomain of the NSEC owner. * QNAME minimisation uses QTYPE=A, therefore always check cache for this type in harden-below-nxdomain functionality. * Added unit test for QNAME minimisation + harden below nxdomain synergy. * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using no encryption over the unix socket. * hyphen as minus fix, by Andreas Schulze * Fix #1170: document that 'inform' local-zone uses local-data. * Fix #1173: differ local-zone type deny from unset tag_actions element. * Add DSA support for OpenSSL 1.1.0 * Fix remote control without cert for LibreSSL * Fix downcast warnings from visual studio in sldns code.- update to 1.5.10 Features * Create a pkg-config file for libunbound in contrib. * TCP Fast open patch from Sara Dickinson. * Finegrained localzone control with define-tag, access-control-tag, access-control-tag-action, access-control-tag-data, local-zone-tag, and local-zone-override. And added types always_transparent, always_refuse, always_nxdomain with that. * If more than half of tcp connections are in use, a shorter timeout is used (200 msec, vs 2 minutes) to pressure tcp for new connects. * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6 option to use linux freebind to use 64bits of entropy for every query with random local part. * For #787: prefer-ip6 option for unbound.conf prefers to send upstream queries to ipv6 servers. * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e. * keep debug symbols in windows build. Bug Fixes * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref). * Fix unbound-anchor.exe file location defaults to Program Files with (x86) appended. * Fix to not ignore return value of chown() in daemon startup. * Better help text from -h (from Ray Griffith). * [bugzilla: 773 ] Fix Non-standard Python location build failure with pyunbound. * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures. * Revert fix for NetworkService account on windows due to breakage it causes. * Fix that windows install will not overwrite existing service.conf file (and ignore gui config choices if it exists). * And delete service.conf.shipped on uninstall. * In unbound.conf directory: dir immediately changes to that directory, so that include: file below that is relative to that directory. With chroot, make the directory an absolute path inside chroot. * do not delete service.conf on windows uninstall. * document directory immediate fix and allow EXECUTABLE syntax in it on windows. * Fix directory: fix for unbound-checkconf, it restores cwd. * Use QTYPE=A for QNAME minimisation. * Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three. * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on windows, ignore null delete for wsaevent. * Fix spelling in freebind option man page text. * Fix windows link of ssl with crypt32. * [bugzilla: 779 ] Fix Union casting is non-portable. * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31. * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call. * Decrease dp attempts at each QNAME minimisation iteration * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam means there is endpwent function available. * Updated repository with newer flex and bison output. * Fix static compile on windows missing gdi32. * Fix dynamic link of anchor-update.exe on windows. * Fix detect of mingw for MXE package build. * Fixes for 64bit windows compile. * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle >= 3.0 and --with-libunbound-only --with-nettle. * Fixed unbound.doxygen for 1.8.11. * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux). * [bugzilla: 801 ] Fix missing error condition handling in daemon_create_workers(). * [bugzilla: 802 ] Fix workaround for function parameters that are "unused" without log_assert. * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in daemon_cleanup(). * [bugzilla: 806 ] Fix wrong comment removed. * use sendmsg instead of sendto for TFO. * [bugzilla: 807 ] Fix workaround for possible some "unused" function parameters in test code, from Jinmei Tatuya. * Note that OPENPGPKEY type is RFC 7929. * [bugzilla: 804 ] Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries. * Fix for #804: lower num_target_queries for iterator also for failed lookups. * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len parameter in each iteration in find_tag_datas(). * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from Sebastian A. Siewior. * RFC 7958 is now out, updated docs for unbound-anchor. * Fix for compile without warnings with openssl 1.1.0. * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response. * iana portlist update. * Fix compile with openssl 1.1.0 with api=1.1.0. * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value has an off-by-one typo, from Jinmei Tatuya (Infoblox). * Fix incomplete prototypes reported by Dag-Erling Smørgrav. * [bugzilla: 828 ] Fix missing type in access-control-tag-action redirect results in NXDOMAIN. * Take configured minimum TTL into consideration when reducing TTL to original TTL from RRSIG. * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning against petal.c * Silenced flex-generated sign-unsigned warning print with gcc diagnostic pragma. * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len. * fix potential memory leak in daemon/remote.c and nullpointer dereference in validator/autotrust. * [bugzilla: 883 ] Fix error for duplicate local zone entry. * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.- update to 1.5.9 Features * generic edns option parse and store code. * Updated L root IPv6 address. * User defined pluggable event API for libunbound * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding to an IP address while the interface or address is down. * OpenSSL 1.1.0 portability, --disable-dsa configure option. * disable-dnssec-lame-check config option from Charles Walker. Bug Fixes * [bugzilla: 745 ] * Fix unbound.py - idn2dname throws UnicodeError when idnname contains trailing dot. * configure tests for the weak attribute support by the compiler. * [bugzilla: 747 ] * Fix assert in outnet_serviced_query_stop. * Updated configure and ltmain.sh. * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja. * Fixup backend2str for libev. * Fix libev usage of dispatch return value. * No side effects in tolower() call, in case it is a macro. * Fix warnings in ifdef corner case, older or unknown libevent. * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma. * Fix ip-transparent for tcp on freebsd. * [bugzilla: 746 ] * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not set CD bit when forwarding to another server. If a trust anchor, no CD bit on the first attempt to a forwarder, but CD bit thereafter on repeated attempts to get DNSSEC. * Limit number of QNAME minimisation iterations. * Validate QNAME minimised NXDOMAIN responses. * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in harden-below-nxdomain. * Fix compile of getentropy_linux for SLES11 servicepack 4. * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev. * Fix test for openssl to use HMAC_Update for 1.1.0. * ERR_remove_state deprecated since openssl 1.0.0. * OPENSSL_config is deprecated, removing. * Document permit-small-holddown for 5011 debug. * [bugzilla: 749 ] * Fix unbound-checkconf gets SIGSEGV when use against a malformatted conf file. * [bugzilla: 753 ] * Fix document dump_requestlist is for first thread. * Fix some malformed reponses to edns queries get fallback to nonedns. * [bugzilla: 759 ] * Fix 0x20 capsforid no longer checks type PTR, for compatibility with cisco dns guard. This lowers false positives. * Fix sldns with static checking fixes copied from getdns. * Fix memory leak in out-of-memory conditions of local zone add. * [bugzilla: 761 ] * Fix DNSSEC LAME false positive resolving nic.club. * [bugzilla: 766 ] * Fix dns64 should synthesize results on timeout/errors. * No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. * [bugzilla: 767 ] * Fix Reference to an expired Internet-Draft in harden-below-nxdomain documentation. * remove memory leak from lame-check patch. * [bugzilla: 770 ] * Fix Small subgroup attack on DH used in unix pipe on localhost if unbound control uses a unix local named pipe. * Document write permission to directory of trust anchor needed. * [bugzilla: 768 ] * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report Shown Up. Close handle before closing WSA. * Fix time in case answer comes from cache in ub_resolve_event(). * Fix windows service to be created run with limited rights, as a network service account, from Mario Turschmann. * [bugzilla: 752 ] * Fix retry resource temporarily unavailable on control pipe. * iana ports fetched via https. * iana portlist update.- update to 1.5.8 Features * ip-transparent option for FreeBSD with IP_BINDANY socket option. * insecure-lan-zones: yesno config option, patch from Dag-Erling Smørgrav. * RR Type CSYNC support RFC 7477, in debug printout and config input. * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07). * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf, patch from Daisuke Higashi. * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked by default, and can be unblocked with "nodefault" localzone config. * ub_ctx_set_stub() function for libunbound to config stub zones. Bug Fixes * Fix that NSEC3 negative cache is used when there is no salt. * sorted ubsyms.def file with exported libunbound functions. * Print understandable debug log when unusable DS record is seen. * load gost algorithm if digest is seen before key algorithm. * Fix that "make install" fails due to "text file busy" error. * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error. * wait for sendto to drain socket buffers when they are full. * Neater cmdline_verbose increment patch from Edgar Pettijohn. * Made netbsd sendmsg test nonfatal, in case of false positives. * [bugzilla: 741 ] Fix: log message for dnstap socket connection is more clear. * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the chroot. * Fix cmsg alignment for argument to sendmsg on NetBSD. * Fix that unbound complains about unimplemented IP_PKTINFO for sendmsg on NetBSD (for interface-automatic). * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS. * Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. * Fix to simplify empty string checking from Michael McConville. * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot be chown'ed. Patch from Simon Deziel. * Fix test if -pthreads unused to use better grep for portability. * Fix mingw crosscompile for recent mingw. * Update aclocal, autoconf output with new versions (1.15, 2.4.6). * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined, for Linux glibc 2.20. * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the source code, so it applies cleanly again. Removed unused variable warnings. * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since they are not portable (unbound-control-setup). * remove NULL-checks before free, patch from Michael McConville. * updated ax_pthread.m4 to version 21 with clang support, this removes a warning from compilation. * OSX portability, detect if sbrk is deprecated. * OSX clang, stop -pthread unused during link stage warnings. * OSX clang new flto check. * iana portlist update.- also conflict the shlib package- add libunbound-devel-mini-rpmlintrc as source- revert the previous change which would not solve the problem as the library package requires the unbound-anchor package instead introduce a libunbound-devel-mini package which holds the shared library and devel files with a minimal build requires.- split off a libunbound package with less buildrequires to allow shorter buildcycles when built by gnutls. bsc#964346- update to 1.5.7 Features * Fix #594. libunbound: optionally use libnettle for crypto. Contributed by Luca Bruno. Added --with-nettle for use with - -with-libunbound-only. * Implemented qname minimisation Bug Fixes * Fix #712: unbound-anchor appears to not fsync root.key. * Fix #714: Document config to block private-address for IPv4 mapped IPv6 addresses. * portability, replace snprintf if return value broken * portability fixes. * detect libexpat without xml_StopParser function. * isblank() compat implementation. * patch from Doug Hogan for SSL_OP_NO_SSLvx options. * Fix #716: nodata proof with empty non-terminals and wildcards. * Fix #718: Fix unbound-control-setup with support for env without HEREDOC bash support. * ACX_SSL_CHECKS no longer adds -ldl needlessly. * Change example.conf: ftp.internic.net to https://www.internic.net * Fix for lenient accept of reverse order DNAME and CNAME. * spelling fixes from Igor Sobrado Delgado. * Fix that malformed EDNS query gets a response without malformed EDNS. * Added assert on rrset cache correctness. * Fix #720: add windows scripts to zip bundle, and fix unbound-control-setup windows batch file. * Fix for #724: conf syntax to read files from run dir (on Windows). And fix PCA prompt for unbound-service-install.exe. And add Changelog to windows binary dist. * .gitignore for git users. * iana portlist update. * Removed unneeded whitespace from example.conf. * Do not minimise forwarded requests.- update to 1.5.6 Features - Default for ssl-port is port 853, the temporary port assignment for secure domain name system traffic. If you used to rely on the older default of port 443, you have to put a clause in unbound.conf for that. The new value is likely going to be the standardised port number for this traffic. - ANY responses include DNAME records if present, as per Evan Hunt's remark in dnsop. Bug Fixes - Fix segfault in the dns64 module in the formaterror error path. - Fix manpage to suggest using SIGTERM to terminate the server. - iana portlist update.- ignore absence of the systemd-tmpfiles command- update to 1.5.5 Features - Change default of harden-algo-downgrade to off. This is lenient for algorithm rollover. - Added permit-small-holddown config to debug fast 5011 rollover. - Allow certificate chain files to allow for intermediate certificates. (thanks Daniel Kahn Gillmor) - Enable ECDHE for servers. Where available, use SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to enable ECDHE. Otherwise, manually offer curve p256. Client connections should automatically use ECDHE when available. (thanks Daniel Kahn Gillmor) - Feature --enable-pie option to that builds PIE binary. [bugzilla: 699 ] - Feature --enable-relro-now option that enables full read-only relocation. [bugzilla: 700 ] - New IPs for for h.root-servers.net. [bugzilla: 702 ] Bug Fixes - Fix setting forwarders with unbound-control forward implicitly turns on forward-first. [bugzilla: 681 ] - Fix that reload fails when so-reuseport is yes after changing num-threads. [bugzilla: 690 ] - please afl-gcc (llvm) for uninitialised variable warning. - Fix mktime in unbound-anchor not using UTC. - Fix 5011 anchor update timer after reload. - 5011 implementation does not insist on all algorithms, when harden-algo-downgrade is turned off. - Document in the manual more text about configuring locally served zones. - Document that local-zone nodefault matches exactly and transparent can be used to release a subzone. - Fix that configure script does not detect LibreSSL 2.2.2 [bugzilla: 694 ] - Fix deadlock for local data add and zone add when unbound-control list_local_data printout is interrupted. - Fix get PY_MAJOR_VERSION failure at configure for python 2.4 to 2.6. [bugzilla: 697 ] - changed windows setup compression to be more transparent. - Fix config globbed include chroot treatment, this fixes reload of globs (patch from Dag-Erling Smørgrav). - Fix ub_ctx_set_fwd() return value mishandled on windows. [bugzilla: 705 ] - Fix minor error in unbound.conf.5.in. - Fix unbound.conf(5) access-control description for precedence and default. - Fix unbound-control flush that does not succeed in removing data. - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution failures. - iana portlist update. - remove manual hacks for relro,now and pie and replace them with official configure options.- enable event api - enable dnstap support- update to 1.5.4 Features - [bugzilla: 644 ] harden-algo-downgrade option, if turned off, fixes the reported excessive validation failure when multiple algorithms are present. If set to 'no', it allows the weakest algorithm to validate the zone. - stats reports tcp usage, of incoming-num-tcp buffers. - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal scripts. Contributed by Yuri Voinov. - Add ip-transparent config option for bind to non-local addresses. - Synthesize ANY responses from cache. Does not search exhaustively, but MX,A,AAAA,SOA,NS also CNAME. - unbound-control list_insecure command shows the negative trust anchors currently configured, patch from Jelte Jansen. - ratelimit feature, ratelimit: 1000, can be used to turn it on. It ratelimits recursion effort per zone. For particular names you can configure exceptions in unbound.conf. - Ratelimit does not apply to prefetched queries, and ratelimit-factor is default 10. Repeated normal queries get resolved and with prefetch stay in the cache. - unbound-control ratelimit_list lists high rate domains. - caps-whitelist in unbound.conf allows whitelist of loadbalancers that cannot work with caps-for-id or its fallback. - RFC 7553 RR type URI support, is now enabled by default. - cache-max-negative-ttl config option, default 3600. - Add local-zone type inform_deny, that logs query and drops answer. Bug Fixes - Unbound exits with a fatal error when the auto-trust-anchor-file fails to be writable. This is seconds after startup. You can load a readonly auto-trust-anchor-file with trust-anchor-file. The file has to be writable to notice the trust anchor change, without it, a trust anchor change will be unnoticed and the system will then become inoperable. - DLV is going to be decommissioned. Advice to stop using it, and put text in the example configuration and man page to that effect. - Patch from Brad Smith that syncs compat/getentropy_linux with OpenBSD's version (2015-03-04). - 0x20 fallback improved: servfail responses do not count as missing comparisons (except if all responses are errors), inability to find nameservers does not fail equality comparisons, many nameservers does not try to compare more than max-sent-count, parse failures start 0x20 fallback procedure. - store caps_response with best response in case downgrade response happens to be the last one. - Document that incoming-num-tcp increase is good for large servers. - Fix lintian warning in unbound-checkconf man page (from Andreas Schulze). - Updated default keylength in unbound-control-setup to 3k. - Fixup compile on cygwin, more portable openssl thread id. - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. - Fixed to add integer overflow checks on allocation (defense in depth). - Fix segfault on user not found at startup (from Maciej Soltysiak). - [bugzilla: 657 ] Fix that libunbound(3) recommends deprecated CRYPTO_set_id_callback. - If unknown trust anchor algorithm, and libressl is used, error message encourages upgrade of the libressl package. - rename ldns subdirectory to sldns to avoid name collision. - [bugzilla: 660 ] Fix interface-automatic broken in the presence of asymmetric routing. - Libunbound skips dos-line-endings from etc/hosts. - Fix crash in dnstap: Do not try to log TCP responses after timeout. - Fix that get_option for cache-sizes does not print double newline. - [bugzilla: 663 ] Fix that ssl handshake fails when using unix socket because dh size is too small. - [bugzilla: 664 ] libunbound python3 related fixes (from Tomas Hozza); Use print_function also for Python2. libunbound examples: produce sorted output. libunbound-Python: libldns is not used anymore. Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns. - Fix leaked dns64prefix configuration string. - Removed contrib/unbound_unixsock.diff, because it has been integrated, use control-interface: /path in unbound.conf. - Change syntax of particular validator error to be easier for machine parse, swap rrset and ip adres info so it looks like: validation failure : signature crypto failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN> - Fix that unparseable error responses are ratelimited. - SOA negative TTL is capped at minimumttl in its rdata section. - [bugzilla: 674 ] Do not free pointers given by getenv. - [bugzilla: 677 ] Fix CNAME corresponding to a DNAME was checked incorrectly and was therefore always synthesized (thanks to Valentin Dietrich). And fix DNAME responses from cache that failed internal chain test. - iana portlist update.- update to 1.5.3 - Bug Fixes [bugzilla: 647 ] Fix #647 crash in 1.5.2 because pwd.db no longer accessible after reload. [bugzilla: 645 ] Fix #645 Portability to Solaris 10, use AF_LOCAL. [bugzilla: 646 ] Fix #646 Portability to Solaris, -lrt for getentropy_solaris. Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit).- update to 1.5.2 - Features - local-zone: example.com inform makes unbound log a message with client IP for queries in that zone. Eg. for finding infected hosts. - patch from Stephane Lapie that adds to the python API, that exposes struct delegpt, and adds the find_delegation function. - Updated contrib warmup.cmd/sh to support two modes - load from pre-defined list of domains or (with filename as argument) load from user-specified list of domains, and updated contrib unbound_cache.sh/cmd to support loading/save/reload cache to/from default path or (with secondary argument) arbitrary path/filename, from Yuri Voinov. - patch for remote control over local sockets, from Dag-Erling Smorgrav, Ilya Bakulin. Use control-interface: /path/sock and control-use-cert: no. - unbound-checkconf -f prints chroot with pidfile path. - infra-cache-min-rtt patch from Florian Riehm, for expected long uplink roundtrip times. - Bug Fixes - config.guess and config.sub update from libtoolize. - getauxval test for ppc64 linux compatibility. - make strip works for unbound-host and unbound-anchor. - print query name when max target count is exceeded. - patch from Stuart Henderson that fixes DESTDIR in unbound-control-setup for installs where config is not in the prefix location. - [bugzilla: 634 ] Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing IP_MTU_DISCOVER OMIT option (fix from Remi Gacogne). - Patch from Philip Paeps to contrib/unbound_munin_ that uses type ABSOLUTE. Allows munin.conf: [idleserver.example.net] unbound_munin_hits.graph_period minute - Fix pyunbound ord call, portable for python 2 and 3. - Fix unintended use of gcc extension for incomplete enum types, compile with pedantic c99 compliance (from Daniel Dickman). - Fix pyunbound byte string representation for python3. - Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. - Fix validation failure in case upstream forwarder (ISC BIND) does not have the same trust anchors and decides to insert unsigned NS record in authority section. - Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. - iana portlist update. - [bugzilla: 643 ] Fix doc/example.conf.in: unnecessary whitespace.- update to 1.5.1 (boo# 908990) Features - Patch from Stephane Lapie for ASAHI Net that implements aaaa-filter, added to contrib/aaaa-filter-iterator.patch. Bug Fixes - Fix that CD flag disables DNS64 processing, returning the DNSSEC signed AAAA denial. - Fix compat/getentropy_win.c check if CryptGenRandom works and no immediate exit on windows. - Fix crash on multiple thread random usage on systems without arc4random. - Fix log at high verbosity and memory allocation failure. - Fix libunbound undefined symbol errors for main. - Patch from Robert Edmonds to build pyunbound python module differently. No versioninfo, with -shared and without $(LIBS). - Patch from Robert Edmonds fixes hyphens in unbound-anchor man page. - Removed 'increased limit open files' log message that is written to console. It is only written on verbosity 4 and higher. This keeps system bootup console cleaner. - Patch from James Raftery, always print stats for rcodes 0..5. - [bugzilla: 627 ] Fix SSL_CTX_load_verify_locations return code not properly checked. - Fix makefile for build from noexec source tree. - Add include to getentropy_linux.c, fixing debian build. - [bugzilla: 632 ] Fix that unbound fails to build on AArch64, protects getentropy compat code from calling sysctl if it is has been removed. - Fix CVE-2014-8602: denial of service by making resolver chase endless series of delegations. - changes in 1.5.0 Features - This release has DNS64, DNSTAP, better random numbers and ub_ctx_add_ta_autr(), num.query.tcpout=value, flush_negative, unblock-lan-zones conf. - C.ROOT-SERVERS.NET has an IPv6 address, and we updated the root hints (patch from Anand Buddhdev). - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation option for DNS fragmentation defense. - unbound-control stats prints num.query.tcpout with number of TCP outgoing queries made in the previous statistics interval. - Patch from Jeremie Courreges-Anglas to use arc4random_uniform if available on the OS, it gets entropy from the OS. - Add unbound-control flush_negative that flushed nxdomains, nodata, and errors from the cache. For dnssec-trigger and NetworkManager, fixes cases where network changes have localdata that was already negatively cached from the previous network. - Contrib windows scripts from Yuri Voinov added to src/contrib: create_unbound_ad_servers.cmd: enters anti-ad server lists. unbound_cache.cmd: saves and loads the cache. Also warmup.cmd (and .sh): warm up the DNS cache with your MRU domains. - Added unbound-control-setup.cmd from Yuri Voinov to the windows unbound distribution set. It requires openssl installed in %PATH%. - Implement draft-ietf-dnsop-rfc6598-rfc6303-01. - Feature, unblock-lan-zones: yesno that you can use to make unbound perform 10.0.0.0/8 and other reverse lookups normally, for use if unbound is running service for localhost on localhost. - unbound-host -D enabled dnssec and reads root trust anchor from the default root key file that was compiled in. - Add AAAA for B root server to default root hints. - unbound-control status reports if so-reuseport was successful. - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X. - arc4random in compat/ and getentropy, explicit_bzero, chacha for dependencies, from OpenBSD. arc4_lock and sha512 in compat. This makes arc4random available on all platforms, except when compiled with LIBNSS (it uses libNSS crypto random). - Patch from Dag-Erling Smorgrav that implements that: unbound - dd does not fork in the background and also logs to stderr. - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault. Initial commit of the patch from the FreeBSD base (with its fixes). This adds a module (for module-config in unbound.conf) dns64 that performs DNS64 processing, see README.DNS64. - Patch add msg, rrset, infra and key cache sizes to stats command from Maciej Soltysiak. - DNSTAP support, with a patch from Farsight Security, written by Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c. It is BSD licensed (see dnstap/dnstap.c). Also - -with-libfstrm and --with-protobuf-c configure options. - type CDS and CDNSKEY types. - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue is longer and more tcp connections can be handled. - Add ub_ctx_add_ta_autr function to add a RFC5011 automatically tracked trust anchor to libunbound. Bug Fixes - Fix print filename of encompassing config file on read failure. - Patch from Stuart Henderson to build unbound-host man from .1.in. - [bugzilla: 569] Fix do_tcp is do-tcp in unbound.conf man page. - [bugzilla: 572] Fix unit test failure for systems with different /etc/ services. - iana portlist updated. - [bugzilla: 574] Fix make test fails on Ubuntu 14.04. Disabled remote-control in testbound scripts. - Documented that dump_requestlist only prints queries from thread 0. - [bugzilla: 567] Fix unbound lists if forward zone is secure or insecure with +i annotation in output of list_forwards, also for list_stubs (for NetworkManager integration). And remove ':' from output of stub and forward lists, this is easier to parse. - [bugzilla: 554] Fix use unsigned long to print 64bit statistics counters on 64bit systems. - [bugzilla: 558] Fix failed prefetch lookup does not remove cached response but delays next prefetch (in lieu of caching a SERVFAIL). - [bugzilla: 545] Fix improved logging, the ip address of the error is printed on the same log-line as the error. - [bugzilla: 502] Fix explain that do-ip6 disable does not stop AAAA lookups, but it stops the use of the ipv6 transport layer for DNS traffic. - Fix compile with libevent2 on FreeBSD. - Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier. - Fixup out-of-directory compile with unbound-control-setup.sh.in. - Code cleanup patch from Dag-Erling Smorgrav, with compiler issue fixes from FreeBSD's copy of Unbound, he notes: Generate unbound-control-setup.sh at build time so it respects prefix and sysconfdir from the configure script. Also fix the umask to match the comment, and the comment to match the umask. Add const and static where needed. Use unions instead of playing pointer poker. Move declarations that are needed in multiple source files into a shared header. Move sldns_bgetc() from parse.c to buffer.c where it belongs. Introduce a new header file, worker.h, which declares the callbacks that all workers must define. Remove those declarations from libworker.h. Include the correct headers in the correct places. Fix a few dummy callbacks that don't match their prototype. Fix some casts. Hide the sbrk madness behind #ifdef HAVE_SBRK. Remove a useless printf which breaks reproducible builds. Get rid of CONFIGURE_{TARGET,DATE,BUILD_WITH} now that they're no longer used. Add unbound-control-setup.sh to the list of generated files. The prototype for libworker_event_done_cb() needs to be moved from libunbound/libworker.h to libunbound/worker.h. - Fix caps-for-id fallback, and added fallback attempt when servers drop 0x20 perturbed queries. - [bugzilla: 593] Fix segfault or crash upon rotating logfile. - fake-rfc2553 patch (thanks Benjamin Baier). - LibreSSL provides compat items, check for that in configure. - [bugzilla: 596] Bail out of unbound-control list_local_zones when ssl write fails. - Fix endian.h include for OpenBSD. - [bugzilla: 603] Fix unbound-checkconf -o option should skip verification checks. - Fixup doc/unbound.doxygen to remove obsolete 1.8.7 settings. - Update unbound manpage with more explanation (from Florian Obser). - Fix tcp timer waiting list removal code. - patches to also build with Python 3.x (from Pavel Simerda). - improve python configuration detection to build on Fedora 22. - Fix swig and python examples for Python 3.x. - Fix for mingw compile with openssl-1.0.1i. - [bugzilla: 612] Fix create service with service.conf in present directory and auto load it. - [bugzilla: 613] Allow tab ws in var length last rdfs (in ldns str2wire). - [bugzilla: 614] Fix man page variable substitution bug. - Whitespaces after $ORIGIN are not part of the origin dname (ldns). - $TTL's value starts at position 5 (ldns). - Fix unbound-checkconf check for module config with dns64 module. - Fix unbound capsforid fallback, it ignores TTLs in comparison. - [bugzilla: 617] Fix in ldns in unbound, lowercase WKS services. - Fix ctype invocation casts. - Disabled use of SSLv3 in remote-control and ssl-upstream. - Redefine internal minievent symbols to unique symbols that helps linking on platforms where the linker leaks names across modules. - Fix bug where forward or stub addresses with same address but different port number were not tried.- fix bashisms in pre script/bin/sh/bin/sh/bin/sh/bin/shibs-power9-10 1656584991  !"1.6.8-150100.10.8.11.6.8-150100.10.8.11.6.8-150100.10.8.1 servicesunboundconf.dexample.com.confkeys.dexample.com.keylocal.dblock-example.com.confunbound.confunboundunbound-keygen.serviceunbound.serviceunbound.confrcunboundrcunbound-keygenunboundunbound-checkconfunbound-controlunbound-control-setupunbound-hostunbound-streamtcpunboundCREDITSFEATURESLICENSEREADMEsysconfig.unboundunbound-host.1.gzunbound-streamtcp.1.gzunbound.conf.5.gzunbound-checkconf.8.gzunbound-control-setup.8.gzunbound-control.8.gzunbound.8.gz/etc/sysconfig/SuSEfirewall2.d//etc/sysconfig/SuSEfirewall2.d/services//etc/unbound//etc/unbound/conf.d//etc/unbound/keys.d//etc/unbound/local.d//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/unbound//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24859/SUSE_SLE-15-SP1_Update/55573022b50e0d066bcfc9d24e65aaa6-unbound.SUSE_SLE-15-SP1_Updatedrpmxz5ppc64le-suse-linux  directoryASCII textASCII text, with very long linesC source, ASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=46268b743c7f5fe3e4eefa76d15dc349eb2cf5a8, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=d718c5c108e5dfae453d0b520d94a67e76c76198, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b27e9240b002902888239a9df0b40c1dcead948e, for GNU/Linux 3.10.0, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=be659fbde71ffbd9a9feb0eb0ddf8f88a1b31d73, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=2fd47f5626583f63585fe80dd89e4300995eaf47, for GNU/Linux 3.10.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)"-.2  RRRRR R R RRRRRR RR RRRRRRR R RR RRRRR RR RRRRR RRRR RR RRRRRRRRRR R RRRR RR RR$|Qe3da"Kutf-88d72c4f5bcfc536735487eddff9a1377ee629cd20e2aef77f26c9ba3911462e7?7zXZ !t/)_]"k%UY~S-*vYDV%Ϭ_yB6 txhR4QxG0wRnN 'C sQD08'\0Q7q!͈ &ۈEE Cu®9ӀeSY:w]B>TCu~ VICaTH[4@>Y7$GPSv ЪG,:D=ذo5xYSlW塺aDWpҽ׫?}9:@? *4Hsa4gsBM*I8x@}, ߇cYLGפ64Z(!VZ3M;6Ł0-R"S!Tʢ BcO@\ 6| ʾw-&N%x嶖6H:JQ fڔCqqH}tXQ.9X1 ۔16Ŷ̰xD .=r2e2 -"'` TyA9J89mdx/eYۮ3׻36hG=+#cmTfh(AG(e?~<Ц 醩.xzV y2Oǯǯ\g|WrP(Rtc=` X$`+D.1RRlXMX:мrGz~ォIEIN(3?Uf 8e!{Q,aVwr+-d]á-oC(;9Aǥ҂75 ֈTɁO'՜t}:ԫb:7Y )~f4ޮإ.7ajo`b.}@·*D{+fֿ'#BӿscXv_ 3l.I߮œ߃wOR"l{4k$ʺ&\RZV>fgCq/h>\tM|alVZ߸HKz|jn6-9$_غ UjI$mk h]xdۯ= moyPb uXc*Ml{?0eaJO =\2p&n&X$%^SO&w-&e+Yyv(|W˵a~fX! umi3sBrOC7^NuiNZu!jTxp(Sf<>SE6c7)K^6A4/b ĦM;9}v/ )D,Z686{}5S>2zRK@:d9HjzUv$wY9I (mNDjOw,2+{FŐy)CEOrh727D M‘1T=\xНa;LtM 1@*>KuR?6V9k ؾK |xݻ9LoܛII3b6?$>sa4~-88:QKhQ&czbk5qG .sT_e^1Tem7!v|.yb |J"p{N$@24~>ICV[F?J,xWH6:\b(;w#)cгv3嚤ou(XW$Qo@"uG-![zg"XMVG~RYUb"v:iߡ%@mG1}/deQ2(b)iw2^̤'7C{皕?i ox&}"B%.>8Kw7"*ddj,9YDd1)թ f[haD$d C !yYA#ۂPpf\^IS}?Pm䆿RRqQ~ZVw=4 1#ɾCz&H|'?| ]'f^C캧6J(J/^Kj܃Pfvn81aSUJ5S\&=K=ɂI 7ŃjD$5Iי "`Yxuפo=TZwUDu4Ǩ>iX\"X΢+WN `z2!5| 1@Dj @Z [Ѣ,s"JGouʘOp؊ޕVeb{c:h\Ƶ{9%n13F0d_DNw[JnaK:B$5kK H\WK}N(`>QDOgY{kNA1/[ .jؙm(NWުz֘t]Wnp~/"VXOՃ4i-=^,猣T {0#/:A2T0ԀcSsg̨Mv Xtp %kVg֋κ"(˸Lh?ՙևEg|]+m @Fͅub7=KMaNeep>"u6k *+<8wv7OkUr/W^ZG倌92µ3P4'-i2UDX4<Þ}: Ii ,&w+m?j-R2 }SIhSImeڈs}icKXU􋇭3`V.脜]*A9`ar--[LR H㒉#1벭uz dp6KG\ߵzuЌNJ-\zaDrFȷ4cSq4=3g|A_c'CϼɃ|9^ /tCE0#\8ȋ]%v_؂#Et=C-j"EٵO}#'~Xסm5V?.xqY1ֱ3)b\݅ Ñ2d-7 L٫2#Ed'&ȁ`&0GO⌼-;Zi;?)-GWSlG&A RӹH=8;J$mw~dQ\3[Y$+#t;~oU?wH(Q`A\Q>4U  bVݞj;6t"niO eXnQHpR[("6oQJ+4E#Rgdt-D#"Mm/kL@7/{Aődy4O)F+M1).ovAl2 %bc+۩Q#cSPa[(c/SpryF 7XGv svܢ%ĿTZ()xWt@P~e)wFLuYN11J^r5} gX4Vq ޛ͚2#{O".!!Bj:\"J8BT- *@5R!ID}n5s_3=t5Юy>fl )Msyaq2NH;qbl%匶n3Fn: vcx-Eek?Y_B_P`r݋-ÇHb. u̍_w%lO .xc68nOR ."h-=NJniZ݀^x ȻZ۶R"4"K"YBZ|k%*)| psFI&HyHQRp\F2ș1Z=sP!h&?f%5k&334r|_6SR0 ipwoLM <ȣ$ m@@*!♰z_rYٛb4phyU ]3 oZuNaC;F@1}Q$n:X8+\{- gwKtlz/nڧKR80hܤkM ֹa[:Dn--s> Hbߣ/I).n:试0Ÿjɴsp1w \ECn(3ɉ*"O>-ʌl Q(@yVY⡒*lE;4c^@5Ho>זԀ8&5:ލhDߣȣM v#TTE]2svx̎"XksTlq\XņO^s;$"y!y%^U*S6%ȯܔؠQأ%AE`hZv+(ow9B{B<>d7msp{Z/V֫f!6O]gWYxł;iVa|߂+IAN8[[bU ;do􌲵*729?Y;J9 7q•0 {BŽ9dk O*B@dRaAT*pL-{8m8%(0Ć%M/p9⟮F5nW\s~L5 09^ޖ"l\(5KZKڵ&>S-;*p3u \/yAء݈TA@(Tg-r|-VSNaݗuO* ̄jIJm5x}}7<{%TlO\qHKWos䍴cmimV{ClAOӀU+%Dl-)LÆ7S6A _!Z[A8]2V_pGC,ҦfRti˨4B1Uv.Z>S -w/ǟ;59 lܟd;e<^%x  |ғI >vɭ694Ord#pr #/gAY= />C`nG2j;eQ.<{7F{ '1ЂH|&MsQW{0+ *.Rk'F#J&mY*ζdg%0N׀hi7G NIYZ )XLorCmCkY^m=^h?Έ<3V^e qmRahO,+렍W#U7}X$ʙH(ĺ3vyR9eg@S30)9RU+vZjoYv3xfRxm#z.Ǘr 6U rCqQx'r0^ou,LD#:?-2/T0 ϴ/.H+("S*Ghw4+Ye3ywR/v7xC@Zi_K|݁ițXz `9Ivymˢ,Rf4T3m;TisOJ`e"9Dߍl7 5JEۄN'r =¶>߄k@av>Fvs\1q`Q' }.,t2Dx5l( g2a4u]*>}=nmSRHLMyRaIIuc= mK'qi=CR0!ݮga|B`h/J 0gN%"`(DPgpts^9xNXh_ 0E59U_ryrX%AGa- g7{9,ѳgm?l(>7"U8ƻd 5f&l駇@}EcQꉏ@OCG։v1Aqu]mcݱ>w]ŵJjG>F3J, o'׊7565ƂAB9/h}8/?7>.Kuox>tGQT&? S}:mAΰp Xt:76Bz .\p.'68Ԓ#Z|D/gWD:'qFIoYG %!-.,^x?f9 [&B{+T)&x&pD@3l}Dܱp䉁 <] Y[#Gs]}jcoNj$SȒG % 4,67E7iY C2c,# g.xCJln8uvu\dԄӍCtX ߆.Lc7Yj=IX]n sSE;J&NNR5TFh:4Fa& lmVj8Cߗ&\i&{Ǵ0HFX)y-{pd9-odFhisʭݍL{`:O;#::KB3=_y/[UC5.|Omq#=voͦ뽨N=}8GTĆ2rͼTrPނ@tzЛJ4(P8o4_ڮiARS4 .X x䀯rg%imm%v0mdIF-rLn"'v]Cm0l ŗ3T7y_JsO`3\( "ݞc~n;Qy+J\Ά⮑Fm 2eb R$-/ERɅք._qzC נ kP | 1`fWfC+Or g+Im\O *NÃK74)O@Kzg\nPSnB'mkaYF= _ F7#!CIڈ 8{@=onIU\:Uަ6J8Mc[yYecҌGY1:ƻt}BGn'CqHNmX'-u zBCFf8p)oϕ+D4>G%ɠ~MJomB1)Jvuᤏ^@'"9|xљRl'mmzF#Buz}A+!G-bCV3XG1:sҐ $l%㱓y"~v ꠐ^,N)6hP9R˔k5فZ[eJi0,KU+jɯlYV!L#[D|T.A4 <$u ž~[G #sS1[ -]p9q ;Sb^n[*FY1;=Ch좩8{3f|\>QMk`ࢸ2OAJ%;cK̰8IcFe2YiG =/Pe=*փݘ#Qq'݀mNUDe1+1"vy^j4K 2t~qpǡqk%ܵ5+fzpZEfGyHD9"'N ]cȀ滯xl4~v2j Ԕ-+ е};/ϰvq#[Aُ-aB9:X{ߨݘkA>pێ#rz[d+hy@'} l4*%g.[3_Fᲈ\e.Hר)Vɝ ]z.c{5W*zV` + jTA!Pu CUA#I͖!z˱xkFWGWeI]ۤ5ւSQ9¼&SjHq Q/8H %"t%mY@%UM>t6$LqGl|o+xB&JP)v+ꏀ LipdX¾qe"~dY(ݭD㼇J \@MaWF/"}R]oo! NGًN0/-=*;NtۻeRIA--[Das0u Echc?VrD߬k ϖ[k:6COZ9f|,oxts!+cp/8J.KKt]uYX+U m<"i]!.`"gGC6FS0L0=-@De&ݣpZ9,&.ƂlqR&9^ <?#x90^gzZۋK./w3Rc,%Kϊ1h=|۞#%|M cM˴cuRa_. T|y)tȏ4]5 "v,0+zɿ.2;2Ώ6U24IS>feJsV_!웛k8W%D2\vw`*U,% ؝)@` eqo u Mhz'USK&2b) Cqb,ʺa&#`: 2,J2`{OZ@\ CTԾgp:N}3lɛ-6?"nMJ$Mԓ@0@WbN-[t45@2`%?kG(yX4FE @ knӆ?$ꦫsTܗD QNO[n^ǥz3y"ܽ之T$Qf[52qqK (^sG(kRiO= k<N 15DC -AH ^\Jt~&ԓʔ8'q7`7}>~OEH^ݲLւx5H!(3D+>}@'uiHk-3N`yReyq]%{>':MV-HUC!-yڎu.=SW)tv*U}ilNTQR~xвCj^Z)7~PEHQeFHsm˝~Z,M-iN;x+Ӧ=TtLsaf:0Ho !v-θU=K48F^>mѡa~#gMPC9DqC@bEC84D]fei)Bi7K>>~U~ })[?<`x]V&u\jbpk*>Ƕ?1 twjt*G9%2a3MA]呴5 ujm>ڭ#АFtoqQ!N=~=z)2c lVqR(>.i}kgw'Myø_jjԖ|i t ߇6Sa$4JA y bWQʦ$x=.ORY)vjW\1茣b^dVDI)C^kJJUr`u%͈Pgww BHv;jd=#Y{|60.zьx;J ˻70V{뗒ssXNU?P[y׶Y>!Ԭ옆y!6ɲ4M~]@PTfjU%{7#c^ނB9N@8_pOŤ@/];7;8S?!mo~g,1ֿ;W #%~-Ip#ݝE\ t;HZbB!+hAFǂM6'}2fj`cTU6-jxCjAu^]8v70ԹkfbTP(p7So»<xb*eԌmgԾAy1O ﮔwɓڮS#Z/WM_`%DDv:{BMfƹ]G[IY $DHq]|͹[0;07*T!  y"vplvA yӾ:5 CGqtb;қ"=6S3 Rn%X/鵮X ;'ۀ)ڪniF]tiQzwgxW_DD+,2ۿpzk:=m >ڷ }W!E$%s5KQDtBeg:qҿ$jۮH6GW)uCc*|gǹʕfݗhdDRǽCU#cG[}<˽u+^l{'V; iMٮXHJj'"Q|b~N*)k!7~@Kzj4Z G$A'Xָ.8F&f: TR#pQ(o1 յ1m/4eo𱵣B> @Tl) E=~v7=N,ƝVڬ@Y6&Ǫa Ӑk3h"yu:N{,?"%,E%߻Z9 Tq/Ӧ,sj=CeWbȋts\r q>E9MF|&x9xKKw'dkQXIU` !^5O[<2f2%ڐݯt4":Hh 2&Q~KlPs킨3 ?ƾO*XM.IڏK s#'{ TR1տ•LP}U"Cٛ4 H/@Sk=eԠGtg(W.5I֪}~8ק{Y3!t7Y d"Z$Ňo9AIߏYE2R3X~ï` 娴7E$6V HvN-MCS;2$oU=8ɺxi4+9l2rd5N[qY꿻̟`0M(͵sq>o6 S3d@kܐ$쐪o(3*P_4ZyI(N{Sf:#[vx2?:`YB3:YGcGvO3N4P}btIL挼7=/9"ݼ6IKu֥:cզk_a+{Q" MAWYX(pS(P dhfUslahDbX;PrQ{˺h_c>rdK̑ѱ7;O\r2< Y٬qya5BeV ttEY7Q"yx?쌡ݥcvz{MZga+ǍA%i8{Jn _oI%=erd.`c#6β`՞U<:ܪE2-fDH0;cZ3Kݢp7.6sD5 ޹aݒaS*V{9fa`Rßz Gӻchz+ 2Nsߓ^;M1J9rcvG)ſ& `[UbEt@N[49>Ro@QcwC )ڏ=!rw5Ri" JuXj+{y7K`?Й@V]Z~}B/OW f㫿eOK2# Act7Hpr j+ kp"NӞ yN׌B=*ջf1lc+6+s(e5 iFŗk5#pc9Y3q@E6)DG}g8 +@-TZ|ԯu<(r3F-ֵ] -nη\K?"e!wC,; b/']-w)@KR¯x:Us(Dz'zR tomA}@pog#8dPɥ/KgswȨ:gp~Gb?R9}|.d&a^ c *U}}$]or^$Ź6OL(PMm14zVu86g"X"%bOgP4 ރibkZ JnhaVx/ !U\JpR?,h1^F+b{ Gj :ɵ!RN!9`m+9$Kf_oFުaY_bH\+_o\מo=ͅHe hc3:sF )>2U8?Fp>gq`HTh.2 Lh]h5!<Y(I:D%MhQ#-z&d":[d'׷&B:!`^´j2 Əx:c'XBJ(LJ;& e6U_ CG7K|=,6 iƵR)Ѳ+]mD9Ө3H`v=RR>B^0c Veݹꏥ=j>+.,I2!˂lkh\IYyD.V7Ӻ02A{gFN7~Dʡ6{+ &qM)!?Mp#$~H4H6܃x~R,L_]bz%:ma;P/Ǜdh|%C7:jJx0.UYj:Tc8}j2QuT$#2ul{67v*dLJ>̡t)-q3%j w NuP7Gz+7آ"RPqAK.H8$A(0^VEzsj P U^Jbx @Ѣe'hkmc \ݬ?wq{lPvDۦw$a$b>ۊ^6VoSs^շ&]7WVz.q}%5pA\GYu^[֚FC5Ltˋ!|PF)[JnDD~SZ;_=(]Lbz6e}H|[۷>?/YV :c<{G?/_Q4▉''`(DF&I >$JkTڃ}@][œф@RbŁmW;6Lqד'ZfEt5%1q5^+tsǗѳy|sq h$@q00^\hx}[OrO  S ~n҂A+2^.NSP>ޛK=9GSClrF"?Dש2.Lv('zwmrѱreexr"+^RM݁9*[:LroA̫ID .+{Dq_>i9:զ8XjvB4.vby}΅n2tmS =?Fz1&!S lc'an0W2Vz2AI4qQ2f!`ӬB;B}j.62eoJT/9IQSUzGE$[Yhz~V"cf0E6 '*Dcj& : -I[[ IuT4cqҬtrޭJ.:=ހ}9ݪFk=–]5[)l}PҞo8QE{Z^@hrTVQ &XoND:J>-SqYUa2K _ UJxGT&|!Mf͗褔ЍV1g߶:$|Ȱ,Y*~7j3-FuZRSAJކ/^*//4&dՆ H5c|ܹR}P2(jI_-%pY+T.n\J1DTWu`cX[}ǔn|5J[1/Wkq/)Go%Nşx]դ<'^hXe}8E1,z/ŽT%vWęqFL7{t][JڋEC8'.d,JGfx`-++_g@Z KB!1q&u8_(c;AX(Ek۬~72hoeRSh}ۥFyt-TԜΝlXK YXcSт2TMqJ}ETVO0 )& w`U6Yd]5"xAU0sQm/ >5J\(r3P(rY:si${<}8W:9TcF}o f'.y}Oh! hVnɳ8bS`aG@8y'A[dAՎ28^d})эEw^ $Id'+sx\`X^qza3D8fD̊P4R!*΁Y{!0;d ¡`Kt#J38ed\U~)G$XsD0%|"XȾ0`G%M4&8S} P'I##jlcu\h1'3'W(H3_!k"Sd't%c]cf/>i'X{:v9i֟: Ec{K:"0Cws`HtђݪZ-BWD9ƩgУ k'-!6,FtN&aDoSO q GЀ$Lzu՚5|&yO`̲j+.87t{꛸RV}hgKFRSLܺs}ђl 7+:;A{3%X%&D_X$Kxg%Çd-tYKY{NJ۞7V#}Ilx+A3eOKĈ qc;p6m"60Yud<{$A}=Q %梂:.ZKʛяO:9 eUc/5\Qk[R;TwRk|qU?@]Ii>kx:qy"uANJ(MW7f:W}Sبd=6"80iL9h0VU7K{L|g!E ) ; .MPģ.Y=(~6J+b?^2vGU.]' E(=jđhH<#ҾagށiICaű!琙 fu700lB E]j[ '!H^ Q0FYWxhbLDo!H/(8gA#{vGR^wŻ% >Qy?M[~!;#".#"DK+hEe;_-r  b) dIm{@NPSʍCރ.4c]YSɧYx ;pA0J YC0dTZIa,cЇe_X*?ܝkw7Ֆ2 WgAv}/XqUsEz$JYз AeI8 5g^ ^684t!9AyɠNuFninc,!`pZ.~:&V+m*Beon}] 6]}K5*7$jipliF5Ix7y }WZo<=vI<^󄡦7:R+o&Y#ɖC;ئA'.1h11Xpp!wcdqK-h,,R^:D] ⃉oU%`id_>^1RFf`{[鄊ZƢǿhOns*e=D=-6I!s 5W:q"(,Xl)9m Yo6^g*!]8\]b/H@@z.+#w DGfWMql\Wʄ2+a|*Mx1ow/p g}I uuqWsd=r y?p32O붖֘ Mƙ?AӦn[uV' t|M!h%EvOo v OU\h2FKZHkm٢62!{߳@"=F˵Oq=4*\^Řp5 wAƴ|4A nQh?~,< _GK w]RCjDUa76Qg$>Wڍ!? 6 Ơ 7YuNd6lj{Vje): Fڃ(,;=5sj*k~nSAsHȕIcC̩,$bl4KNϴUSO:vdQ0[O!_%Υm=qrG(ٮ2rG?`XH+*Bjmx +mJ*AM,a Z}ɒ^{;Nn^ܤZ& @RhN7uH0ڨī .뒳 K;g&C'sa }M+vOU;[9%V@8^V$')~,tXA᳣m̜^jq#a=_Oǃz垂g\*r9MyMӇa3c;( Kd?Lk}f,/U [S 9\q9zF_4cS:l@SKZ.A - NȪ ܬsR?-{s"RDU#L ݔX U1W}mc f*(1oy H7I_hr  wexY;Gfz1|m}"< ZxWg3s ~\tg S*U[SM=AKrue!uez ?\դU˙TsMnh$|eܮe8ܝAۛg[h nwb5_!kSt؂~Fs=s8n` o1igϛyB-EFܪGlYcs_7a5ԁ9@T/vZ32,48ӒYS"<#èNqkLDk^ zE¸0pw;TAD߲ǔxkuL,f]~W$*VY\e30={Ige6_*4sAƤ gli4_͘C'qT=%Γg/E,3̃Y%XbnG: -z&ϥ`n`9Okg0t vgCbgSOiXgs W!tJ*;jE"&އ!3LByI.6FA{|;a% PO*Su78diS B^P!+ G$n\Uf|sGQ?,bDDȘSau& CH$ߚ6F17%βuw6ۣ?8J &ݶ#={%8ͼKHsm6rYv]K {G"q["i?L? ]ޒP\q5ʣmCB EߝiBQ zB^c?8ʏ.BGK4voWxTKf)qŵIids׎Hxj~w=yGU BmS'ۖW" 38줶>Y:H9Cnn-z֊oxwM(NeO/oc_sꂕ6Rvӛ7| vX:a:U\A(auI +ȩveU&'t޷>&a@o=w9gqz,@ jdG/㤖M(bz@x?Dt5\kK*Kq#bm UAcܝSM;s&?y"|B Z6s8[ץLD&BѮQؔ~E/;*rB#jX WNԒ$ >oz4l߉N?C.hLvX= nV:imElG;[_֯)Nqʵc֤2bf\vCKƻ毣{/u4! `9Eɇgqv/&ԺсKr3SǬBPG j;T!1hCI ڷbF~gEB]QΑb 20(Л9i"l0Fß"BSgݣeݑS`4J 5x`Q.-b=|:6`k4 L"yyܵU}P]bQ W8㽽YW[L^#R.2$yHǏT S$m g`|2 (r #"BnZ//f] hxxɤvSp|h"C M]&+my1Jދo&I[ՅC6`:Φo)NV-2<+>t ~wQp* 35y Y825BK?VIN&)`?N6۠ㇻ9|̈NEm<^Tpgw'kyBLq; ;|`ꆥPbA,sԌg(l* z}3ZbN0`Cali_nP YF2˦B8_/ßa؝љ"!c/Ê[ ڨ\L׃Fur ?0Sg76 J%׼O |[KWBi+cǾľټh%#ܶ]?ZO >ײn\գXD }'1Cp H*{ku,C=2 NmsIhy;3^Q灴)'yzAXutf!0Z8_x#&;ևh zGع,$VZ$R}\(a sFEO?ذͬy@`,>ߘ4+&,jKv>Y 7.bIzYYQ<Ө~4 $q @Lv}{sdOۖRapϧ[{H>3ID~JnHs lSQ {UJ&R єqq\\0P5>b*\; B/Ƕ-`$m[Η q"be FQ,uȄH$ZcGW3p!cb&; ƓN N^SO_<Lϒ_Z1Ʊ~7tSW#(sSm1a)sݔQ@ 5ϽƇZ,Fe:^LAgsbߵ\"+M$ @b:w.- J>Z5|z2mzG D垙 zh]#;÷"e^Cƣ5wzJd58F*1~o7gwX/ycwDSּ'Ψni3DG|Z|xmo-]M$Qc;vL.!Ɛ5 "o R JӚMÕ#okȆLb_p Ahs7Kwru0Obʗđ<50V\u؏Iڷ|zHX6eU__)M;.@-M@\QW| {H5$1_u~6wBG0m~1툸Ca(3`'"IOBdmmB>cgBb ?PWR՟c9FzʉדVb=.6dhgyny} gMrioȤT*۴S{a'WFLta0A1BנPf璜|RkC_6?Y5T5ԧ9I1=WxT*K|̩*`G`?p+@m]8AUG[J;ܳ(nkWi>l3=%CExm0_ti4)\mK^^ҕ,CQg- ;"MDpIt-ƍ<,p԰R]otۓЙdÀQR ?AH&hw+U ~;Xo5SAl.Պ S{*˽4=ܔ}[ `FX.Y6xuGQSnh|5i7 .S9W =(5@HpnC]/g 'lg,>+ิ uV Lj_VyI`__ lcԱ KRki`>?#9? k:%~Q$x=M Oq&T(f 1tw`Ytvm%ZB\T2,6su57IU xH9'ݝ缞El8tO+Au{t_n  +GS æg.@>`W; br]x=3oNJ*%7el/԰ڴ2U:3HM?d7ؽ$"3Ct試۩Sf*9BcFgyME jaϐ+` v,8$5mX(+Ep݄Zted1B22xX(g ~.Osfa$B>K*L*B4 K:`V3?RWf<*O蒸JPW(L|>u/ ]2JGHI I}ڱS8ul-.@tcK0 v@! Bnw/@>.&)$hFkܖ ,Aʩ Pz `!P&EڠHEhxN*H<&-d~N D՝k8>4zy?+:N\ĩ@%t\*x{kܲW[/#?^HnC`:&x:79uC+Op:|3n~[yԯALnFk4PTBƔFm蠷1̟f>g P/ z a5[ҦldH2ݓٻn䣔Eb11Tۺ@Zo0qpR^]KTV@2xx 7kj|-EU59#D-cX"8ُ{MpIͻ|R AO"xuUEb*3N}LMo7!gn\ k3M/>]8e廞2lEb/ʶǾv^eJ#\^~XbbO}ĿlߜaZ+4,Ҥ]#DFnL}->Cz_-`=,@`s#gmLsYIayNQWfuU4Lœdej,j&'8ԋJs2PT)ڦKکXx( -SiTpz`054&3l}Bw p :SjP/,9~[b._а {X ďJn S؅fRx59( GsW. n)T4t X D$tEAMukj2 kӝii+t;]~Jp_]W r_`hg|zYm\ܣJipi6Iq)]E${Afv*&8Zx{7ԣ}׫| b2d?ab#8kb_mKy-ZPJȋ#sɃ$|ʊEBqE+a=-4Ʋ+ç OMBZ ⴐDKbNY;#Rg-q :|i+XշWBl8WoVtXiU> b} |'q5ZRGs 553҂P:uu nH]ҖyLZ:),)((e*Q* ĸ-EԀ!eΊTjE\YB+zҕPZ 0C| y>. WW~6 OӐ♭xF$J6M {}O/QŋyLn^[n<mwC#FƼB>RcBȭ N=;ӌQ!b3nI`}kTow%P} 淄lv) D1wFw(giQpK5H,Z`;kP܎u/Mڪ" .d>pn `m+#Fj2}]O'~JPaxGp1n>Fs# ddt۲+HK}Y RU?={CR`;w MX]?g\%@(qg%Ss^mڐȽ,~u>3/ut^3CMf;{7=uY(Κ6ih\qKAeJR hn2mT;oʚ r3ﰪYF =a k2ˎ,&!PO?4v2n;pE]PQy"4+$S?=8/>ۈV @VYW-d?p8hl4:}ۖ݀.nXcHBrS 3f$f#kf]*(Y ˱iKQ}l&Ajv^̈YbtR_Y?A6h>z-l{|: iwJBC̟c @e>%Dj*phA3oYo'qM{x./ '>y@[,=2n > T% q@/.zZ6 q F4'ebv!VH8P[0݋A%;P^1W rRM;Dr9'z^}E^ԏv:d}+ nuCkg)U*-4Yf\8E9I B(>uD5 ĥŧ`AfY0 .*PZUӭu^㏽aOCV7ykyhB &a= 1Ts,VH˱72QvciW=lK$PW,f5L(ɣT#K+G0- TsnɜKF9H$QralĈ|aiHa #OpLVC*j7ZO֕pLQ9{}5:9~$!\aK>0K.,YL9/4| ŋSsX;z+SP;M*&4UdMB'\7[-AqB)vZg~gAn;o#7OX-p-y!x;:Lg{fs)Lj5cyDF^[8iz(.@ȋV YT~i)Wc/t_3j"  m7rzvvCrODrDCK')6]=~ !y:MxNDܘhyR 6sy0o0Z2Jf,IWer}(9\#_Z|`-ڔ6qO7mʩ6_쾛h1KkG,s{5Y@WsNf,WvXHZ1Kq5b>vPsi׿? XԕQ]:K@9rίF 3:Ah3 1:2|YHFiW#Fpō ߒ_l4k@Y9i/`gs9Y9=9%xtZ3D$D=E ,aNX:97[ |1eu( -@?Щ"EMG9e#[}r1lN*Iӯ6^y}B֦,` 9&XUq gw!UUCc?sgĻGp#uE*0(w`wk#kLrJRPkUf*blVB;+>Tb,6#Mg?ˇ\C^:ځܹ͑6|E`(ǥŧm5x${ b\MϹgzdMDXGQuvq5+ⶓڈҁP8jDZTC7{ۙ6Ar GJoG|R)^Z[Wm>rGtW%ʧ 8g-H8g]ko5}0(12 B芥 nC5}MVWO+!W0sQeMbC ^.b2.u9Pml{ pe$dO6b9~y OIJ%^F$;_ A/dLTcB53TߜԻx_̀W*1i]m\ ݓ2eÆ\<]a%mxvY_[MY[>|`M1dRPB,DYn {ކ+I tXÞQ $ M]D-"Q Y>m^)Įb/?COYX2̸1Kl5Sph'떺![JungEό&,,v c$b Lˁ4hy;ɕLF~Ʋ[׃v5W-_w+] Os nS.K,ؖ["_p9PJxiV?%0U=<' &"-d|oAV cDQ+OL5 eg1\l`rsĢ @Ɨ^;Nտ<̚Sh[v(^IeQhyDwJ.ˎK i)YtK91G4 -=L__'+,M$'eR FίYLVDk!A"T  3nTAye0OO5a[ʿw4hme18M58@3v%rwi¶r`hHMD9{WT9Zs#GG(6FyO5CSݠ'JtP4|)an y)Kve_=j9+rG5.i(TT4\slftw&8Jj6L=g?U u0EQG*Ͱ% uV[s@FߐZ=aG0S7H+q(e{*(w]ٴh5FۃxFW46*Ǩ9dHAsKKS3^ɦ"gk'z2o8%Oh0\prތ\">EFAa5 B`odH5y=񶻑MJ_p‘8=#D)p >贸5^kLfr"^kaGL>"m]p-}쪉꛹jX+}F;ʵfqvF8| Kpyxj⟘} NTWЁLWk X lޤh8ƛ hZj@s=ȷXD_k:v .GtLY=fQo곆JE O"LD8 ԖnOn?ڄf7k&m\7Bw'q y{]k&RZ-Wƶ6TJ|'ڪKp}6N3v>sŽu#Q\ghU:ܩK Uq<i#k7,R)JdH [s(d΋ɧbT,/p'O'PEݑ V{Z!\3v1 \ *%5{ҴbK7%a0QweqgYA^KWUejö,ew$O_+ʝOm4"nq`S% T7و9P㘉xd|x1gȍ]:|[hرT_.pK=:ipu asZ+ u99!?ؘK?fF_ lEϪYI,jmc)i  l dI5(49)"#Pp$Ȟ{-s\}\I5m|(<{$ 4|l3]L:ZO 2иPY;?.BN&z ')`*Z! Bcʨ%1&('sY (m!psh!Jy#Da0Ո9DfC٫K(# =5Д䔀= i聒eEcwI"w.%E3H% iDfr!C Bi+ے)@ݣɾ"0S7&}Vʀ´4> ׫} a($6ς ? le:#s)Rz]*9vӨ!{jvF6Ri3ߟU %cvxjM*<79^ZDP&+570s }Ũ<6YӂkVmWRWh!`Al34 !7Xu|Hy=M+r1kQysYOG@-:["{aV,1Y̙=QG8p;V jXU@28}XwZx.vޖf8 hhJ;Z)p%wH`ZdT07{F"ܽu4b_0ow Bؾ[<12c&J% rzUַ~RHn7.7K6̩L&u+4 Qoqhr\ue6J ԒeYs)9jS[1jIG RAR9˗{~ւݗB܍@!/4%9q }"my$ٺh*ceejnUu" 8EhS?^Ioh Hħ zܾA%rS+VMtuޗ+1k{h1D*$H'Urie@g ^FBE1G3_š~¦!*7ј'y2?j^_@\ '?|,U[KR/_&{'6_ýxO>=1֘bبP,X7"c(?jՀ슘H}Ȣ+̷ kQic2jaQG9_m7 M?1{fKʂÜtMR:{x;~G$Xa[dZiz+jQEF{+e]:ƒbi`'6b 60\ie|3",izr7'dLP;k= t֔ mA+66.#^Qeyg bIpròZ=՚396fgLL0urM9W.]\FOvrטϥ&}ջ9tXӲ3,4P~7ژC^mT*^OPM{z YeԈؿ>T KIYR P8/ȑdkStN&c">]yc& ^ʵbXsѦHzTㆥ=gqIGP/}Gު6GD[%'2Ipg7'֐WD4RW3G6u=>&y;9a?74ډ8phxj5y268~GY>낦_0  l1'awGD$EOX‹ .t6@:gSi}yg(U(SR͒7P~Wf~g]!\#={e"Z? Q}YYK8^wNxUvH"4U/ ʮyҾjLNYq1eT?mgr m+ߒ=&"' ćoU=RztB: EpVF𔰴6::SX+*%U2HbW9E[p40Vn6j\ΈZ*Ӫ򗋸rx:rѮcB ל3Jop9i8YV,vkOXv>g7+wjjlCgi\0)Nr?}F+"h  'CTh"4^ :Pϯ1.0 5}KF8ɗ]iZF,ۼkmo}&wjB+Pl'EKL@j+=Lxa9X~r& 2BJAU<'^zuUQQ% Ϫq#oQз)%@QY0*KkHI*OLgc8%⢃ (lZO,\yA@`mʿ{LP+G+3W.xRL.ί| ʵb [aWRޖN7FCYg߰A.< pv}^ p˔{ȡy2hܳ~kfXa`^ZZ[C<;Rp?Yޏ>Tf D}\o]&_9 Zx٧rϡotɽXu uF|1{A\UAZl(Dۅ#/t|B1ɫܬRmf8e4!#W5] 84rͲ@Lߠe^4qΤnJTo tYG.56iDb:u 9eF'\"N°lx԰;-T6HvDG^Fpm̳ ^ǔ󺰍sɫP QL-jWzlM'[j6S%=s>чGAj+!SEE_U/ayny¤c4taxEҖЄfJZO{&WUdD2qca"{ǀ1Gp*dVo6l]|]s&NNO3G,hЌHBm%Ai%ކZ#Y!"Q51W35MI܀kEMUTͣȉsI>K/C|&aR4 qGqd'f \۰LT53 j\ ӄ{X^AHps?WھϊO.ǝ)~:=u]N*ú!z@? ,V-խACS>^[iL%gI6L^#Y.o‡7˾.iJvẓ;bYT+-6ݗ`e\h]6(咝#!xCm+,y92]H,UXY_ԁ_ 7Y^[Ex">f(C$8 \Vg0$28Laշ3B2wߖ J2C[:[&zv`/W(tb&_=if/UriS?%(8PHH3wn4Ww\~pI/7*5)\iu|(tJz$6x{ e Z(zE\2h@<: \l%n&U=)(3/.."ଝ@RVTxD>QX` A$8gt /,S5o5] vAcׂ 4aoZ+Yj+/IX߭O{o2+-VTn7`0 SmE??xڍ9Cl"9 d r?IVrV~\abٕ\ȭ7h! ^[% I[~ LkI2V+Cv/aҳ4"7~k=B{\@)߀"W7pA{?`K5ǸΥlIpɉ[cxDpA3 bpKF#R s\rOu*X}X|}*Ik4 "dv aؠt{1֯]?zI}gK wY7F.pEBф1KlTg?"hxrR r<ŧPfl%E6MaDzݻ ۷ŲAo 6(T\-~tN6"#HwQ4XC1(MrN׊p' U ÝP8BFnlYޞ%4 =:B6!+ {T7qwc3!YSM(ˍ) k&NAyj]D& f ~VN\`jymx.l*oT.XItmI*%_憗 Ur/S[A"iz\!NOf23ÝtªD|v՗[Rԗpe:HUqEm]ԛXs+ޑD0PQp"|L6#4QUh'|v/̞xGWd蓰۬ 8̆C'{kO=zI~Md19%g8c4Y2*]7B^'~Z;EI.\R } -59%Ik 9R*j~k:Gy(67?O݅Kb=" ]5@+^ջ2!/ H[#-Z~Y{{jxKK}GIn0_mv%D ;Xy(MJU}^A$_hB{4uْ߃nrʧ'LO>ԉ;Q) Y,/%x$Iډ`Z ڻ$.6qY3/Yt!59Śet'P5v(Q"Y tiXE+[ tL"C2s+4F$d/"c^ݸp%x6E/¯-ddk鏴֝2\`Fk1{HE?UAp5 Ybm 7^.FYB^/VzU3S 7{ 1t3EOAVmEqF)3U$*i#|j#v&Ƙ*?L9YЍPj)LeQ _O#0W$ 6 F-G^4 52!WO׾yAd *<-GgIphT.o2PK[_{ŧ@R/6rL g!͏jJVa N~}HGq54l%f+p}: k_JHf&$zm*}?5a}}l+ Y&wmA@ͽaA%@=DIģbPj^Vؤdgޖ ;y@lSeJ;q *,0>Ǜgc ǽ 'l3勆~sn/σ?kW\Sь oYZjb/CʤXYۄ[6 {_oۜi/`Ukq ZaԁŪub>/#;ZpRr(RsO%]T16:+ *ŶBt,kd>ҡ),ԆZϗ<5ŕVKKlCۋF.>a;A+Bf;˞MۉHqG@֤s(KEMH}F HҖ/!}+ CFX#tCs+!=j~-(u~w32Z @Ox]+҈{#ʼ]=e;!%{@aOw.NER%Aȟ HrqyGq[5jxK}04k7HF$9F%J)@Şh7wp\*ZŦhP 9; w_pBM:C Հ_ϯ2tQ'(qO:y0[_ANwOo?OŸ ,FW ʡ*a 4WB֖ _~Rll"H3եfG0V*"Ush-ZZLȲ^'jov;%~(#"۫^}NiբyмZ?)҃`cibx+E|:̆%џ^n]߹$G0reuX(WrB'Δ<5:jvev8)nKƉ?]jtˆ[ɲm]|.9YJiCC%8 Ax0OYg%8 !G2NKDL2Gx@76)8yߵ`r;XJfVe2^Ks>J.Uie):㗓>amN Rk)J8@%b[VKr \bګ?a1Λhꙵ>!QPrŕ}%t|Q+E0ʶ_JS{s 1Ԥ98Fr´q cWkS`.f~l3R|_v~\`0(Ee+if5):}*t_7%4/ahOKIZ ^Bp:c;^"R @-zk| N*Fd9moQ5iN<m]-R0prS#]ZJ\!19&+B7&4._AEp{D4z gaybtӔđ|֝4#^,=S;f5lyM7I&;ѵ_27]3ZD7yNllXKoS3MH7\vv6nACMUt2&י0R 7)x ^yW[tP.MQR6[垧%5TLOL5R/u;蠢Sb+Xēȕ`Ҧ}q_ڣkIOS54r3z@zAlN2Z%"\J]!4V?\`GQD =ml,'X#'S֬4;Y>'>!b##bj cR-sk53(T0a,f|.. ߦȈ՜Ścn_xlv+!ͣ%R@#=b؋]o1YpؖOː_*Piz.oܶbdML$3iz#)Ȯ4}A_1`>t3^(?&A,ш wJyyh9?#QB#3i~ʾNе)c[A?KH{~$0Q!fm8D<[Kc1Il ʥyF\yj?VF\ITSUj?6LC gN#ny^j6l͵g?o'dŖOBL?==( `K9$EM`95MA6 \/e Fb CܕW` ]=|7S"LSrryp.}'"R})ذ?D;x ]A't4\]@X.*rh91t: }8U݀U(G-;t3a,Vc`, KnYMaOa-#o*mD2ʧL(>XɀͦƣJ]W؅ S;*XX~tؑ}b4 D[ȡirvt!",-8Ai=ߕOq61)&GɁ 5l5W(!1)vυԸ9 Eo2oO14+P"^m\ |kѻ[\_ͅչ ˒+;|AnQhے CbL IfyNAPJR9Xo.R6}X`LéiJlG4e*XJ%$ͽoa)NF?4ܒ =4>HE;; E7)(` |e8%/E&6E` evGKX.ֲeIU_|}3 Կ1+<ͯk[7AUR]EΘQ~ɫ: A qۉ{M~ +-tQeWߤ+^6ػ1;(**3{`bj򄒇.ЛDje>M)ѓ"AjeV޷7KԎ2WO^)S1Ho L@!J’P(*%4+5< J:|}-[˹1:r`y53YPLV$':74ʪ蹜 ȷ:MY7]rVAU REVB4 cH5`DN$X2bE55Ƚy$?*3{Tz7#CpN󜨶Sq%ZCju+šf_yES[>D 0Mc,4dtCJxW"cd[%ψ[+@FF9rV%TGѪ~d 8@uDH~q) zG#G0w$X}d^"7k[>AxRTbpk >< ke輻({uy!pLPk~%ݪ6>;Kxe.f J(I,Ц? P/_ѠN𗲚ka@f[2=_(:)ճe2Ѡ#b1oѽԎ^4OӾZګATFY7l1F.3W_V,wL~tKt:9S94=9+(G,Uf\Ix2Mlz`D|pd(٩ڋ޴zSzu.z5^!aQy\K}6?"E3p6O SK!Ӯ+­;zf]ұ;6GWBk_J M1dt .vr0;'S@iLq"QVPf$Iv%aKŅIs|6 {v5B}{SgZ3dw.5orl+y'zWڼȴ mZ}ҳv Ty 黚E!~)o.J-:z`l("HN=P)Wu, 4Wh y!KU31Edji <  ?swX_ ̑V_5]'Z8ndjVy}Ó[TO5SJT DWdPEO cv%--q?~N &bAnE#D6;E4d iV 7mexj5'or)RAj-L&[za'b3pgRzu?'|xij:V\sӡgϖn2l8m&tnrf(Y(>1Rl?@Ij/M.wٺ7INO # >glwWm. 8^ 3ksPy%*M'$KKi4Vs~ ÖQoY.e c(@U(/޾ă$D  `U$4Zm׽ڮmee WM`HdK׉7} @,j~sVxZ& 1+&)o]l h߈ H\Z*6(q#< .guߌ=Pc ? ERݽԗtoE[s}emKf|<7YfRW;sOU(ǎ+ޔt0Rb )$Ζ>~8HMYؤv1W@;d4: n2=?˱KW޵ahlƄ.@S;v+:O`4MA,ivBN!v: _EwjQ/lOV.䶶~`Hm3/r^{ wOLv405B-lIe\4npjZ]: z5&z8V1]"/5oh&Y6=e7`K v秆QWVSg?="32btpӃ˸ʵtWf{}rwȌI'xIv^tXG;Yo Mh7(m-N,X[@y(Np%ة3<o~ɈAn]]l0l%߾%q Sp0 H%"a{5ҧvBVinpg  7"Am'zlE-Z_7E3<1IgDp1. #a;=OZ!@,PWr1A+ ׉=Irjx9ӏ*{w%AH2(xBh~@5%x& 4,nm KI8v92ݴ:uS8L$E.F( qX6@&#R~h'Dlq}9*l=#TBpJc竭ڛ;VO&s69}ΠIQZ>vƇtI2Z?mJ*3s1a+"*d :YB>pƑm8͕֦ZqVۭ{V^uq,~ ٺ;㮟ƚ$> !g)DbװF(_#@$'7"+X"Fw@%-^R{GnAlrxirH[{EƤ%<;A|eϮ}27W7Xu(4LOaI7T]})ؙV;RB"4ⅹAн+Hqsr=@})8Ka.j `x5 8b0S϶N9P!^!35V߳@ lO1\"U M띃u&5)g]5 ^e:ޔT3u궖:;^fCB",(/y p5yr8f z~+$էG֯@|Owh!THIaD$Hbv vw܄uÎ|L q>/DVGX&ZSzjÈlu'" {'Pޛ/Qx̹!O`\ʍd!2= A(BDRW_hgҩѥ Ӂvi+3uH632kHDtG٫L*$"`XCG-򋧼q5wo?YqC{}B.3/$]'^q~"YainW'ݭ.NoHX h'Us8$z6X1l%)O:g+o*.KS75;w'k?}]%ebyuU*IFWC8|[ *,MTYi,,y%\LQii6˺ځg$դipH&KV; %ЪwR-ŢcN[MrP&y {9iه!cL*$~CP^QzBټ"cqYPq4H lfP*f*BpE6GQq'(SzpbOXȕoL aEm\_ SމUS. j?[S,)qכC^KQ!/S S/Hإ]_q9NUcd/fCާԁnL Xc¥'RnI8Hh'˵9u,U] %sQ| j=??/<[Zf*7unh]eG%% I@G젉d,gD]?(% ]o5E1%5 >Ҷ~,m Sb'"Tt!l1iOEң %g+6`Q}a&<<뀱yhE1&pXe`n%Q$\F i-o é%T?yкЏWѽ'j 0B[T3Q71.~X#K:蛂=")^߲/d/CmW@kysm @>jJ 洆m&خn=/~$OA ,Br9acL1@ my̷%{BPHgh>3kh^ZPYhSдЮRUNL7X8>"E56n3P=JK0OMLNp6)Z*"%DJ~iwn|K%UH2d򨖍anՆ/o|`B#L=̃XbRA|ilk땏9lvmN:6"37 )>2."n 23j[0DzNѐ'j(,/ ,!ˏ:sŮ4Ŋ$A*VHl>uY>N6-mD!,9ՔV" q?|>1pd&_rL[cJRM3rWWmEJ3lDg!!n+FU>Mr=Mw7vL溔g\TC bs_JhrT11dP]rC6cJ:_W[egDU~W. QK7i-9#NK={tԝΝA0\}MhŏC6> ]XOr+}cGF*P '`ohtT1JBi1Dd¯:I&9%p^txAf I\)]&&t[W3DÖow E0; <$CO}Q7 h D0U Xo܂hS]t _z$Fޞ{ӠSǝ,Os\ ݹoYРB%0`q;ʑH)`'UciIX j]Z{/3خoUv^LWmx#>l h=ܯ FM?KiAiWDϢZ6"ys Շ!Ami Hw fƄ5ة/PHiy_R\ض.h9u}e$9ͮS`T7'4!fm!k;\hnf,Ӡ :֞Ku;bq9 mv!bmforN0#t(RC;>!Ɂb [Nd8 % b:-pVƬznU--ڨ| ~I83[(ˌ Es1OEC))U4!ݰ >bVU5~ڔ&.Ac;~i>ACY}9com&U."%W9I }S)IV'E3NiǪ0(濾~@)sk*K6U[1~ZK )⇉ܿyi)qE Js|P 4N9A8 47B[Fěc? Q?mԃ46ȱ_dgle5Ds-P}D2ZtךBN^G&{SWiؐӽ!%9vh{.͊pn;ޘЍtoI{II(To0Kl^~,kA( K+N]98܊湷˧+L\+_ĕN!.2A3!6Fʩ*'7YF?lS?"UcP=#ɷа^Vڣv}M&\@dݮA_-h1)]ϻ(A\-@Q*r+D߾=w!K{ZA>I|Rb}a&)qbYI啫3_!Y bQ2vDriqLb`xժvpk}:$15.mxűa-*G:wc>^SL >[ hLE5&BG +!cuObno`!s.x^]>'(~+yuw3L5@E<;V;EZ<˪C說H&smo;['}ll=q]>ZǠa@qi/UY͕(xjܺ AZd l|S9%# };i;)#W.?rnUA!h0f-Dm`e<߇'J/@D0=*mWqEFBT3A24տuqy+ .;m &bĩs]!7MS$;^C_tu-8Af&iO"9|ꣲz)u(V X>̇7JWEpCAi,]A9#p䔣V ؙV]s'у34` c`D?Ћ/cYJ'ؕzt08U.۱h;h{ϵBO| @fOcğI If.)8LͻO wm;FTCMgii |a}|>6n'wbQ`7=3qjRſQ2Lw=JI&9҈#(@:to06doOhwU*C}eqHmK&Z Nh(Yg%LXe0dJ`ͳHPn5 9UW($"P8{pP = vW7#txnO 9oWYeP`VHe&\˃4IT>|֩+}'>z+ ?1^JSE5S# rc\BdJ R j쯀.Tc w+5&A23 |{s-ut K*q2]ZI@岑C0bO˿1a$k?Kd@V;jP 7-ok.p 3T^Wn S{)*O}gVj1uo(-y7+U*8e 3۽i7"Y9bJZΟ0W]o ?'u)@z}vU-"]Xhcu>zwKa&}ｮ7ũQS?Sѭt,Q\A N[UWrGZR~0"iVFS#41W(lf,1P"!xX*r-oҬͬ#u,󈙭ƈtJ0VCeS6;=3$t7@b` *\Rd[#eŠs Z_{20$P6 iXa'ɜWaQsOl V fOOXkTOkVe&oޭr.^*c$41Xyv(R~' ӡ\\HrĮF4]YBp>*e ۓlД` Ċ,H9WM^"M1}鿻k4V,xyFQŴ<ִ@fX6!>N`[TG1,ԧOu*eC7Acxv|]Odu_JC#/cUS:d!T=6S]?\omE5(mCzE8>X}; [m;_QRC=K#?{ϥL4u"poQfš٘:3/ Z1+KZPs;g $f{&=zclz2ZzǞrgzrFg~+Jl3T5x8 L9y]$ cA`GCHa2oNe '$ Ӑ8uI\ \eK-cF73!Ц8|8PK4[d 7G1C׀)mIID,a xD9 ̗-7һ$V>05gû}hmWNT\Q;UȐ5e 828pWLz7ZEj2{B_#Q@w_p Q @\aiH{c}C4GQ+򨇍|b!$̛Iw` V {iu"tBQX{3~|X]&b 1ѩLE2=CCP赊ֲZ~0dE Zd( pO$H00JYW|i`8@c9B+{nhA:.ˣ9B )3E "q|-O1J\(qQYVZʛ_=}[DZ-%VYy]gDf> O!Hlv3G5jYU8~4PáT2n%>)ZN;ƃrmTj. ޗ%0u8n ˩# Ia~[fUBF DÕs&.Xޭq?UuI>^h?jB򃈠q6w%5n%Gu([1iZZ,ع[r0墒AAj!͒0>z#a)~TCtcմ@b9w?@u|I#m/# j${Apz v?趇9C_pJu̽'']~r ;" `soa{|aj>GFܹVH_-z$9,⥆=^#Hȿ2vю_r|r/08[|@pWo*pRf.~YG[(x[ i^0TĶP^Ʀ4𫎴 L{Rz v6QO]xw  B-;JaXXd׫JL6*t֮ ˗U6t[p҆{)9 8$`-3j^Am9@(5rh(Pu3;cȟid4Dy~]|D#_HVɿ-#:;sIPF,Ӏ*9W/ Ez4돰>hτi{T^b3A:wǸ`JP9e/06):&P"c~p8F&谖ؼd}<َ2XvlRcͭGȄ $BcL{(W#%IΘ`6&9*?a +D;sZٳ H9I8n<t.w&ߋ^`r[" ovKW+4fbWOuc2I(j튚I_[zIi_Y4Aq=F N &,{H?/R E7kk3b&ī|=*X-l'zHϪ#t!zÖN;m9U0%MU^y%$^I%u9m:0s!abTC2YhQːST? ."tORY htx7Hı P1 ZڋXs a[d0!+45 ~vM"@j?^[( ;uZ&rg4he%> {A -6d(đ4\׎P"G(䘰L(]*YPco)!l ze? [NK5U5h:uNOwv( eߺa#gpn:Hݽ C'l*20[j \ ߬"_rH;S- +?,|it~t4: K$v:I}B[}픘c?vXL jw0X+Evd*!:7Y6Pi);(`msCߊvz`m,֭W^ucN4ju*4dRڻ!f]e>oZ^Q yN61ל8ZwJ d{<`3|mj\.]d%|?VmY</y5I+(*;ªO&^obM:都Vr齙3o$![frY#=s}f`+H<`i~nҔCVD6`Sl܅a/S ˌa=VlLR';k8V`~I*>/WI4W`^;eyZAsڝ$&M:j#gnC%(;̕@n/+ _g$[^}˜R04O+۫Һ:" 6# jJv}l5(Tgiz 0at= gsR[{-dRQ\lj/YKCD>r473?b n]A`TY"";P> Bee*J[{g;TYTd}p&7q] $8qscKNt}U"1ax-Fq,VV_q>b]/5.wIQ!9oMdMg& "e^ܩDI0r d%>)X^@gR13C:iHFjt[)1YE6-W(3 %L +O̡[p;E(*T]N4ط"\eg29Y}cABmKF? Ϋ&. g#]T" :9h>ҁz7dgF5. GME,oqawлu Agzf|b *? CcϨ|X}>~ՕH:ĥO%L HF:5) 7u[xڇ$X0{8)0.#[d%ǫr2^DHh]GEoo4BSc^R0Ms\y;^Y[u 8HІ>u9obæc]wJXΫjnn}>{?+Mn KчjOӤ{a45}&5)J:銢Mqœ9ӤvU  D*'&RFbucB;,ĶY;^ ַ:6 +p$/n UԨv7:'.Lv `Qγ%>]b;XA Dn j7Y+b.XgwY>)L;Rr,kcAsә;FϢ"VSMs|ԏ5Z|&[ibkl6d5yEڍUKKO;zE&}lm.B܋Y+n R'oG~-:IWO{_#r]$ޑ %\y*%8&e!Luru~:)!F} $y۽w4 B "khZ Y"X4j2yCOUTDgEKz#S8-BuMb5::Vҫsj׶) h/{2]'-@W h%. :j =R8P^/[!%r #hknĿ|sma~j hyNXES Ajx-l0OD5R`h+Ӡ| .Jnv[PXWW-q^הnKXGѭPVDsu=i؜)2-!mL+CcB>̜n`ȷe,.hDbsER̚NbiPBe!$HQgUכ*B"{g~_.c]<WzH8sCFF-ۨTC!-R!MyR1BeײVMX*]r~n OKAZ-0JV M+BNDtJ[CQqG1Ofq-Cl6bl>$cv3v| +AH:58 ViU񄔔 1-$@!q5Ķ{F >^]Lg<22|̀Dz1i%q(l)]&`Ɔ<fX @Qk ܏űY{6r-T B3oI64t0՛6-&c\dȌ7}r",4. 7k}K!ʒSi~߿I~܃T$+H+h-fvn+G~AOE_~W=F^[QzP?~ӈrw\]RudUy~?d B/ס[hbce㷎ܘx034>ᰩqvyd,+?bD;I%ûj6Y!P pwA ? 4 d͍ c mYv-jd>vZ6D$pec`cϝ)3 /[2-$7K7SFᲨag1KEO Q$EXт}knݶs˅os}4P,\6`UeqEf#A(^w>9I]zII7_V:c~6i*f|Ȥ]i=w_잂<)=BSK6o%PZo eUSՙtY Ls2&udiis8G >àD?r, ذXst@]Θypl~pJ bqRHןU'b0y/lcK띅JEj6<^9;Oz#RUgOGW`t柫V-[ZkH"qaG6Gmg('UDL&]"܇ATc;gaSV=ʩڊzwC^;k\>k~&p=QYbLi3M Na |bm; נfx)ѸnNx B߁o8QSî'~5-CFŴ+7!=i;?Y1jRs+ cT~)۸F\&Tkq̥?e&Z!|yZG4dndźA(HG~Goo}pp- o ͚jC Yg[.gYޑ{渁E\bq́/Þxf]BV^13 I6L '|e>phЦ%v8vk KI=_= 奁.TGĒ;$:J *"q(( ^vA4v'T-_Cs[V]BSP<y Q-l fILT U|kSQ.b{xdZj׬TE@`5 أ 509b6yrtTѪ*BK$qET140Wʞ'إn?,0Rh m#D$ދFyf|zo}k ¸0$p% ګ5TP@h54!Jw^vX/Խq.";"#mEHǡudx˯g 4]bpyP 3`$e ta!~84aF sMج Iܬ!Þ#7?4"D;BDz?q5~BB͢ c/fÇOG`ں MGf}7;0Se! P/>ݾ3; l%aݷ׹i򧊽?@\w{0 F@rN&Y #!KSk'(dxP/0ʚKs\Kʷşu V;Ѿ)yDD*9\>p |ǖRMy"O^\la3{ eca8`ک,Y,܋1Ց:'1jS2')RaLPCcnx(mn+fI.̧+1^9b zٝT@uo_ڝ*+Vn"m}wt/Tʛ(c%-*nJ 0qZQse&Ϗe|.[/eK„8wgY1:{Pˌ~451C `a!t&8 f}/w#6ovl5'Zxc/`_ Aa؊ Ä5dxJ/A Ht :}Xã7v> (XSoi\#Ƴ.թţ[_Szc)y -I 9/@^CwUKZO1|P`>ϧB9۬m>~bo#hE(NR!BzW?<T5Dwښ2f@^"trv25k,Y3TA@ &_ 3E^|] W%뤵ց2H5'<Y'YF\DN}+t ı&bW{[$o:Ki"]rWp&}75$[)̾m&n6Kǡ6MgQJaeR~P+Ttd{\BhHV >Ju/ "rT\seؓtB[C P^\.ELeok_ 7nOeja[cD4uؔ~:1;, eZ:%W\BoijYMf D8> #"gF(=7SL:E=[jy| 6܏'_S^u,Hp;W»(ӳDJ*d:V֫k ! >t~Xi e ċݯgݎHK_8Q*p燄NW)~YhMn; E'ViV,򢪭 WluA~'NQ6 ߒl8'*IP&@"Cak6o+/:4ꢇ]ݦQ9D6?6G!yB}{;E9(-bu e^=ZLRهg ^r}Q׳ZkyXƿh|d;WU> Q?\a# h ^C8~&[?mJ˥r:na>'yAmIs4ðwFCՒX-f# L)c/uW~񚨶x/ZWjG9)Y/58/i.q0-eܒG-+&v?W1Kq}$_MҲMӾo|*f u6"GOml 6Td"chƬO 0mBhTwd(IkZ+ՐxT Y2 {c3РQ0qO2PKّNT8 aq$ U^meg5漙9`ɌoqLhr{M \ےziO}V94,o|Hd5堇:9M&}xJP)פx?L&]m!VUvՑI7 !w9GsjEs+= ?XG0lyO2}#(|"eM?X-;Gv@-Aw%g9t> cWνA8Rͦn`+;CfǞ7vG6:bA0Na|ЏP#va0%npy.:Jėt{[ގ{S5#{HDZ\\0&W |FvU܊aA<<K46DQqo u0;8V*#+I;(p&oC0 ,(~\Zi9kXBw t 0̄h.\ ?kPVzs ;iAxz*H[{Sa+29+ q,MMMvFlS R05`"b >s{,iN,Jh⨲~ WP}Jd"qhUZ e4Pg^?Sexcub.w4g9iuwP>cYZ8PzKWpf %ː+vᕑ].]tZR>o.Qc yr;.a(΋?>%N_B\ gHvܓ iC,s Cൡѥk@n% ஧Lsve\Px323XXXVBܸ`%+2Mπjuѽ'N;khunfc)鱁x.t* HzsUlXc{4=锘MŦ5 cq+@q 9ȶJ|[=vb[}[m?Ve lN,$% "'\|ϐ5oK̷Iun9 8aN |[ h ,A@ݵ}A(vV]x*n/]P@yi6,D(rI>LY-GkR_V.3a wP1?xxFl-)v$ˑBMAx;oֵt0C{]mqk牘Q=k4ћU࿽]) ??$>}akFBfb8 JXkse++Y?Q81pPC .Nj.ӑ58t>%u,Y]-]ͳ07uIQA0 lKrT*)#d#]T0twÙoǧ@[ܫ9,$B<>S+#u6 ocFT-]=9mc?vAVseYOQjdڧZίXf+F_VvEg/@_! nRǖ%V|fgo}+ g«U|d+ !^h7wT ^b<[WwE,KAU=m舽QՀoot q`CjI] YkU{ON (Gp6!s-a6U=gZo mަD6ַ:#uh_Øf{7L!I\褔(|>8yN]$[r[y/牿Ζ}fQ請 c2܆ua*G𯋿/HVފy"}a+Uӿ#Q`=Ʀ7:u'Pf[M3g<ѸN+%QaIH.Y۷ʞ|aD+I:5M]oI7II:l4.JZ/ɀd=jx < aɠo^pt3ޚYk;X'SoJD#}Vݣ N`T1($߄4B +-Ǘ+c` lK"u^,AXJpa22^ht}һ_}bX q يg|u?1QhAP`S2#R?^AzzMk5ʇu#TuŶU|/N ?#,CQ'E@i܄ُ㫼>Pj@A1 {وP( ހ L>!tcɔjdwĎ'C1E2xQ.6躝L\^}[J2utv:(D9m1.;o&;\Ģ+cQ=9Y֯"#@; VUH)#jTi4PrPi-?h4|'VE]~0lKQ鑜$)d!@kͥ"~4ބeH+vꑁTe^`7f̛ \c& { 0ɽѓՏ:y x2+!cNESw@n 9BX[M]G;^yISc E؁yW6/%䁄騊o.\Rr(5 `xat ڲU_mNo0 !w*шY># Ooϊ7>v$r`iͺag[; H2|Y @oGR,YK|^羍|Q^IqÏz7%)gÉ|&THԙ80C1p&i񴹧!k&eg.VT2-ss=AoPEUYؑBZ\~WT-Vxxjg F,$ץSܛcHʤMOnwe+8YM&ݖz@pf:xK?U*Xty+lצAe6+@XPتZ?6ԒN^QD+pD͂eU f++3[|pr#Qœ_N1%_Z%yX8e`c|,No'$˲ڊn;Bj:>Rk7X%^?Eau"D3IlZ,InI3@.kpsYS$vP'U0>CNᯟ[Q!*Irq ϮOx1 P}Ob"Qrճ4uRE315LY,['k| bfWŮ:iCkA<Yv@"ޥRKmV 9{֮-[9eO_hY;¼S6 5SԫǙ[v9s`_-. 'tm6Dz`9E9 j#Or\ĬM9:o nWh Ѥf5MdTzq^GaHŧS{wW-3'čiavY5KW?F5W6l~?~QP*4#Vb<6}lfF61'Pv}_AMBW3{&2@p o.v>{aݼ!逫(&uY6"ZBD?xYо l)4sjC#{G>_Lc!nBgU5=ʂ<{s"l' 6( ^M4wVZj=dgQ;vZ=_:}Z%&%k栂5pqJ)H}Ԗ6CDg^>*-jQJ靓 o2+|?OZsTAc%U|`T-p%w–?H~139KiPNPk;Jz+ XirV6%+|IaEnKźl,wIǜ&"y&VlOI`[ofR^'5~mA]O@67hHOlsyzKa3󛜁?*Z 3)?S ӸXmf)TsbH0ή%']0gqlXWg}BX74^Cjdvziւb4wl]6{C6)G&SRt#V۾ VsDp3@'8eKL 3a SίQHKl =(J=?&J=;!BHx=D+I B{!],yZ`Ym VVMHòs1 N`nQW2%eٮاL*L^ JN!V` CQA+C5N075` </N:7 |\1í;;Tp@R^?,A`m1shk|QT1 JN7*?¯Ūr2(6YZv!)r_z+rnq9 fyolajDZ08ehK",0sB{A PyJ-`.:TToKya?coLNUIzkt96T_*XWQގd>m/ 4 :}uZ0y)6ÏbJt bK1KQi7K$ u rA؇2':[LU-+UvtmΞ ]<6Yj:R(z&$4!L@D.T m'k#JSMt:{iD@C9tO:D#QY ̕2c{(X Hqo_r+ix)FkQ[AoXN/$bG/ aH[qBk&.k"{y\pnT)Z*kM%kyYa _4 PوN4L984xreaptƽ)?ӤPиewtΗbc̈́o{͘$Џ3/5G D˗aLUt=n_ต_G{8֡?u`d!7xcHq.O,es -7)Tޡf$ͣ4aHs tǯQ ֈbd1%* .:;aLrS,VFcUFgN)U'ݚ+U1Ŗɑ {{G=rHjkG34eSiiZeҚ~]ۈӴIH|ktKDT6IVS>W8U,x{^V";^[0͓kYHP`soIM;mnߎ MփFWr)(qRtmXmsq| Rn] #*&&.`1|f 1S]cELD:%%-K<7) `ҫ,+wA*l}1%FcNͦ S%n'ԋPu2UuK0_qEձHh5KjEJT(_lYtݤQCXuCPJ1ԋ-QU4<]qC7\]}߭dv^J$kKɆmɞ1::jHP=_A{tlfs}AX8J~N xm`< u3Ѝ X\F Hzwb!b'"?W~3/ Zk2T8w1cmK(S] N ҶrBuOTɐ XZ?"8L=X8R]J#8嬾ӹ`=u,fwbT94B~u8r@e|yEK"^ C[2L܈iP/dV\x5L`l<]F>NYZd #J1"8vF#0H3<'puck ߡH hcqyM vU8Zyf!(*G?w0 #&߰QyuY542T) &m`']%:̵^04#SuAn> x؛>@bM _mx[<-ǖeSE=s 3:Îι$U OK n}5? ONy^*xn;_ ";[=;#6\0Ņ}r؊qԥ!TEuAYR@p/.2>܎GIx x\?\1KP¢LȠb"^\Ã9P"y&W,>2ZsA@ʠK IlؠܯE.G~Ҵt#Ԭ.xIĦ{) LV^_VU8g2ɮZ.x81^V*©uRWirA:lf*kܓ3Ie7ZR=!8 ᧥rKMyۣШ1"ׇ2MŴM)=Œ=1[vl)?lɤXʥTQE.|Pkg %heɩżv5{I@J#M Z)ODi ,$ǝ`qS:ϧV1Fx i :\KGúG_XSZ'B%6)u쌂.%%O4i~H&'/~k#(8tU:K*#;ߎ ԉq&h( ԙ9@HZ-Ox$](Qtܿxv,Av H5^[A-'\?r7a .jk^߇`+9xuS .2f單9̤ݦ6BC(,x%kׯIc|/Ўs;)S|c%n'-9ͩղpxSތ}Izxn>XZYނ\,ր{ejVZu vfvRki+j4YƂ/-CPVxhA!iΒ[,YZ~D3OH;wwNUUx;Y%UGNS eI&0 oˊszϮyFyVX #[.V=kpwD+QL-ӼMd %:ɜ6CDNbk'60rQC?hlzD[̙Cc ٙt1 *Eў$騨z6AH^Z`&W;Gh#4؂dbv(5jlgTʈcKn >aóL oܑ!?fh%zV/ 哓^zqrl+u _".J~ZH8ID`PݖJzy!Xpn =c@xĶcz/2ъ4PJLk,e7>EX a޺7圵~:qnVĠ":e#h#1%R%b2p0QbIJ cz@Bp ^aϺqaemZ4W3Խ !֗Y5D!մ:^kn"N\qy- 0 .o aQ .~\aV2ȝ;B6M1˱|49 9f߯e[N򦳲\؅z/QJ]MYU|=$7K^\벇`8 LtmD|; iX%2-ӝ'ycfrgr$_JGEo!eJuD=$lS™ટCN.Nf]'F:\2c֬70r}'a赋/\&_hkU`@|Leu+6_J FWkd^̋84 27}"O zR.Wf =!-–3|.ElY!;-p>׏$LdۿypܬUذ u; QRinz* v}HOKA{NE1%ф@Ӱ Q+)Ap#/2Yx@]kFt 4s`z Ms5M,B =wĺV1+\槞{. M?:d(-N3Zr*`:ۄ]۸FgpwK5E9B7WYotp&Ma<^j!Z(GIڧO}i.v:lIBL//aa:lS48<Q(G 1!7,'$uI<̙^6bͶ1t?%%DT-)hS/i}dF&(]xWgw^}0t3fˡSH5.@۹qJs9dYyњN)!.XkV\K!ޠ@Kv~OXBu@2{ů<wkO?u] A&̬z7'[_4eU_})ʦʒOBAJoz5鰊# \e_~{7fWe`% tϽg@LER@mu*\W/głR$6zcե%O=eB2 <`?YkZo&=$: {zok,RZXŢ|[#59.1UC[X+ m]( ׮tD BONI.?U&Dsxڿ>c6B1bw^g &'{@MԤOaK&=]'i|ћ1ɨRfx~FwD\g^puFT j{ٮ?m^ d:4uY>\(UM< + !t-+'z N1yyPfT56<'3o0A^gG H]̛;i)aJ\6q:z]r^@Nq0. hoQH(oU ¦3م;ZSrSBK)$ V/# ҊI,Ͽ  mSf[u'bWV|11F͔ :.A(Ӧ:<;!i~r{i0'a[['d!RYͅG~hQgtB^H0.d+'`c8#z?LJ $ǒѧQM(p}-y扷lx-4M([lyYe=k!M,#!RUsu]`^1SAyYZ ve1LrJ!{J}w0\O+.V4w ]ɦКWTK6֞@㬣WSɃդЈxz.I9j{/K+-~齢&1]!eV_:*Oíu,5ZcVF .Y966X2K]'{wfO+K 5=j:oN{T:8<̿jQ5*eZ;''ff|KH~ x = PB$ac=/W᳣oOCUϙ;8N$2VE^e)b $WcU{zpvxM 3)IYi1gџ_D!~\2A vUtW̓v+X0pyf6AHǏh(c^O~AQx"n~1l?b؄b d3RbFeڵm*VLDtΟEw^?O36*vӠ66qy|}dm-:d12o$X)1k7-X[3"LJ7,tRCf;KM`'0 /W]N ^L&Sv^5(kNLf$Fva"6‘`RCPf:sw3s D (ҩhECAf8賒%=R@:]m EڋtvG\ܱBȏ!+ z*.e׳`]13ftNrYDe'X$3K\}7 UTuH+m8,H1ׇ]%aeUVͼ2NXC yGG'G5ڡcPb% xA3uj%8zb |GjŚ.HAu XÓQ' )2MqR0dwx1Ǚ`-,(<_\yZI JJOAzҨuA!kҙ)po3bZ@T)T4/ő\Dfфr`^mYRDq$B˿&$}ڔWȚi+7!'x-<gY<$@ڐHVBs [\20MFnfe5,!N]EPF"<$H\>f]'QfzTH(t|FZd jA|g7#n?KмBtF8 ~C(Uɰkf3I㡻pȆ 8,-ӉDI|}(si-w!IY(A@g,D*pDZu7̙1jnۉlߍ9@öa`Gpʘimm Hԣ8}`kh{SMϭf2ؘ\a;ds+`^O 5*A_y^pIh6C oYS@g~e'2 gL9"جH:]}l{Ol-LnBWӀۈg%pTyQ!n>0,N'A^hf1!#r4|> Ϋf}XrG@HT7}DI*2f1lXF#X\IA[G E@2Q<n/ Q,Kxl:x"C22?dFXM~] B D  H4X8Zې!2'3x_HBuhtKqS HEIy9raPט;U8o9+`F_Q\h/0C.0tc AlBu cuΨdem3/3 lCf@\TUONjYw7@oaĉ#4R_Jx %Zi\!UbM]ܳ[`')ኯOTܶN(`6 X# lRYĩvbAAd`Z<X5:L,f^4UUܫFhîo l&͉OW5!c8Ւxo#;7$U2겻@HB:Nm4nK+\U3qRT |7H-%;bTZKwkqH.$\GTmqGi{mkP l?vD#ڐw)^%6a՚R,faE}UhצH|-ۣ)Tܒ?sNoh[(lfGD3D5%`x޹B@']={&̞Ugq,jcPyV194>)TUd_zb*h\)`6itߞN O7ʹohk\tHLtnG%\f_N!A_@> ǬۡZC+aЄ1v,qazY" Go(QQhbgTƎ>Ut5'Ry~Ӳl_9b|v[= DE#1,feǼk#ݗ-tYzgStQDlj j. ?&迪m " U>y:!hY/EmAԤZ@v7U@zܙ]9LT$]n j$ٲvEۚH mZBO;/ύ!M$%aAMh/KbHp_&‹<^Ձ#->qNvdP`\Y$lDya'1A@wG~j}u@vQE|K 'm [$IWͿt[[.~& ;5g:b7$H E#aM!T>3gN1>@fb}vb臣WklrB!/'-bVM(~PU#:?F]T$-)\tYkAfLZabqU0g)}:D'ujo tsO0obl}G) mE=V!f[/h碈,C _'q(f"$ڠJXum-|K'b) Xn {5U}?T\ek&I0d "M4@KBRV { ]yХ{e* RsT[.wP Wؘa亖jvHKD /,XMTkGvy~ t{q=}!JR",zq\^4@-p1±lw\9xx6A43KDz7HajF*ON1rI_1Ψ ]K7hqF]S9M槀{w\p9췇aI~= )l&Oaڄ[-U!)ވ deoHK ) vKQDq5(wyeh,^b=$XXmA#$j1=c^X8"Cz$8 P(][ hˤLƌX};5|&Ki t1cP nm!^׽QDi!U bhM:XKiJ*'p{Ţ%od5?(:K8n6k \Vw%{&"w`{yTRSღti))섷QJse ),LL/e7T=ZSAFO$#-m#%xx,1fnD}1hвl82ӡ ;҇#^,v0gر[-]'{;mzZi/JʻwpyaUIȢ:3s 8}9\>aFoesVQ$IW-"VB݅w)sZ‚x9_qɊ`Rpcp f;?HUp$\$3ga4{DZ&ljnגb|;ɉˊD'g GoQMKk?v?;VŻ6۵1GrѸLH됃HzыI4nUW % &AVOC6 ڣҫ;VE~{>A*ѥnc2,jQf  g1|Ͽg̑-.&[+^^>ޙ&֤>N!+ßtĬ=\-x%{[? =gZ(Bk==Cf%$>PVםjFBOh/RvIJ* <<I5:#q͝g[A ?:ńސƀ8o68 ǽ>zRk~̓d7RI<9im`{;QfꙠs'2ʍ2;o:٬Nڂ1B`; F(,<7lrtPl@f0n&٦VYIs8i=2GϜ{2CާL6m'? 9 G HeGfqn ThlLLheDTgR\Bs'/\M0E1營RvNnt/ @0AR՚Է]"!tn)Nw98B9dH~?l¡^Kho/g)P+]$ J8cR65/aR_?Qܿ?Z [^]迭@@R+y̒ݒvq5HI="bVMss]/m-4ٴح2/P?B{I$qCq:`zBM6CIAvEIrfA\\7%7D[zJخ!OcIWG.5 !# u6ɣ/![4,V,gM <- HJaYxF[)jpP\ :]S[.Ar)73VePŚ`XʙcrDE\j1ӪGO}bA7!\^Vk67&hEH-#M"aN_YwY˹]K+Phv?E$`|7׷OQhO[JGv0n] ~?>&B'Zs[`A)%6hhՓwNpɤԹux]!OhQS.&ۣͅsQCku*ݭ L)+d 謮v)dB.XԽ+6ke(= Nٗ'.Ůj~Ux`V@Kx J8eL Sx$>_iP^@s/.Ro(6 pš־tpx.`r. ߪ XVTؔ"\ pzVX݈51hV6gYf?2H+~|!`7gq>e:[4cRz]Z7v tuڈg6?'=DRՎT0x)-@Főd>UW|ƷeH+3o/pft-KIN2S 9@;`.FeixQj E#ݶ&ZtYed=u'oYJ<6ij>pşN]zEDw)֬tnbuq/4\%PfJmKG:?Pr8덆`7% MoKjpZ)@Jp"*k/h[IP|XLv;"Zα>u`TU8u?瀩)YD1 F tWsd+˅zpO@}Z]7xpKU܌׻2Wj!Ox{5@tҴ כ@'WKžD?$\A7]r*DXMkٸ9RGf$snlBxdxST4wSUtg'" AI"1pѰm6YzD${ sfii8kꈋHO%.63Җ Qvz_"4 #BE[Z/$;ZMivy/{QGN3B!q{,ǁn'3/xpFgh.[h1IHhv¹@TtvKu)r4^ Y4+8I{,g#y2}(3)/3rfo7S>$"97.;Uh-( ݢ"HpI!LZY|v!\ptTsQbYiXi"+Vn#e#|*ZH8( @01rrg]fru<ոtTrI"SPloXJ.j\ Y@{1ƂLVfk?VXqpo=CiW$V0o\৕I:-}gHhWhW\wIWu#aOmbo(>I+>+ӥ>e g,.EJ@8Ӣ&~ADJpve/qfoͲE!O(oQ o#bO7Jd* oP\IbQ}/_,%qa߆ {mH@4Z"WEMے:xyn_yD֊H,,GMECZ^<2p_1zcZ޽{..Fp pxŗf|V~/}g[qcnx"= _N՘C(jEkv| :$ ,j or aZ\IimGLGHN~CdVr0T:9GLl@، o@)r!=Y m͏\oEyomFsz^Q+ٞR$n!ֈ}kY֪}lCE3w{|gwQ ٮQFC)R楇S7ޤa?m/ЕFJkW`r M"UB" ֎  WQciklgCjvWKph"3;o Ja+%ثLF:d7x`m$A<55k FUn^k.Ge<=ܬSYO3~Du}S9ٚR{!= b&6o$^U܂)pO 3~L7eٔ̚ H>a譣mJ;*(~f`b~5r(LﯛT$z+҅%fMCe=Zn/m[[r?D\m3sf oc|Oҗ={A2N>Rhhn:r~';{&nW\~iEIBqݣa8 c4(M=A>zNCڔi'Nhkt,tGS{(+T5wbxrqcho燣g[bQ +|O%/4yo ?&a,t(*{ Yv{T*# ljY1k?-Z!7cM+e,̗2Rfs`8Sr QjV˔?Yk7Fw:9`^-/m縲slFE& ~sWj.K)|L,x vȈn$k.C{P̙Rx{v̮MX5moooNh-7v'q;N/fj ɝ Tur#_ȱ.p$'C]誴 :h[ CrKU/tkg 8-1D.HBjK?;*ɢc?!rRE΢Z~O9-,G&fkJ_e+xUm s\S_8>H͂Ls$Ƴ @UXn_@fq6cɣ\%%0lPPK걓mXE#!io >Աօ莻|v;Me'QSUIȫ{0OS?w9}gJ< SeD!ǸP BMQq|F80g תּQ}Qҫ3hӄ+77CG.sP/}NFppv=TidT0#I #5ܕq`sj?c8]Gfj-s.7d1Zzn@#J_`@F-@R)5F3@D`ȁdn8VP4 fA"9Kh6+KRre/̨/Yl%93D}rn[-'l &_0sAWpyW(;/$J^oXHwa 4Qc ap^=ßUvN pܮqh#>yzf$W+O17!C>p|d\;{| c*]IS_8N\yzB=r~F^CmuU=Je}mmq&*j`wW_J4׆sc fy<ǰ9nksl#y [Xъr?Fݿv8,#@&hG^Ap}ʶߟR;P#8s#lS23'+8&J[81R;ơ`vh+݃aEV}?렭(:uюe)v;%G@bsA%sMǙ$Z"Y *jyRSW 4j|0m lSxy$z2仴n0M,cs%إ~#|^TUD䣨O7:Wxx<H$B<y 4LP@x{Clw>kbף9!;s^&l ݇+ytZ ©ЇY[728_I.L7S.pWo7< ڃ4/펴 aB'Or*3TPGYnoƾlD=ôtkQ0Ɨ`9l,J9Gտ%ڲKqh f&Mu;IEke7*!o P \zڜ!]0Hl%9 3g&sQrBC,T'Ό$V+gr;W:1F)hk gʇbN/iQiC!1EuJ9j5CA.TRFɷ39Ç\P {YUyo.P9{ AʚREZXb.i +7H^&wԋNCO* 4{nQD3ZGUa_ #T#=pg3 Yj1QʙD0G!xr]@ʵBWQF7_WH#f]-KIcj6mMjbeJ,5y|63>uIR5Cl'jXl5Ҵ)G@9nV h.1~xEpHpB&/UiEcW#W>o51`"Wև9 c^7F{Q+1A08ۓẸjd0=na6_A9f_IRAb`>^x4[HBl)E-:go?e}7]1W?m!c,`g%NmcE낚 eI7^9oQ-8|;D<5zTaۀ#OehbՑ@J+w.͚BjX E/~]F-.~]2nW|oY:9\^po4`ꦠ{sbm ߇w/C7G80N+9xĦ@NR$F*Q-"DduIU ¢ڈq>d;b⛘" ˫p)'+#[4{.Zn+ZE*5$YŌYNS ӟO  q-o N @#w ,Zn*saz??u]a֣X5s132D&5 QX3ギ 0ZȾ|#Aʰ^0!m͙&+Oe_Q4j5q4S,@۬Xl<w;$ 8,njKɁ6 Tj(gY"y\{;הY<3z;*#"cɃgLC&q|s36P(Xv'3 b~dΓ5ap_r]~vg&#}ڵ2 e>wUaM2cOŏ;]k o6q(ZɷPs\ǂ vh9q_Çtm?k!ot.a8@R4Hg_uFՎ"o6 {jF_U&l-kl"q'aHG!D={4FD?̉9'$6H^l#MZ8"·<ݖ2h_,&7]KV$ vu:!$Gq>cǙYA 6szGJ6.\ 7M$C|_ZBQP| K15#凸l6ihWBWFykMVVs")0hRJӑo-fRiQlIW<‚eqے]ΠR`0Z#`b$!R&qF뗢8o@85`E^]/5 z29; E'o9iJmŋKr:B)LVoh8+zU-Sڈ 1QƏp==rS/K/Gpf_cie5SoR2VM+hӺ^s6X[觖==pR=g{\L[[}rQ,qQjQ/h%YFzXThXa4O0pp ̴'naNżW`NWro̬T&NHñ/|4O;V;lN!+D Ջ%6\4#U;Yh/ YY44 dȦq~? ]L)q}9vi"W'x,Уy+(O`P@f{]*0GHq.$ ) gE\`eAMn!*UlXYt*YPS)΋/MgC~@b+샦R~P&I@+P*1n5{e^+Τ r˽}on+CF_RNQl%Ȩw1QEJYd"+AFh_:8{XRidpWtKm걾t+"SCa fĔx(} 21 h#4LiU6 XEn.+& |oIa]&6sn>-)`q,ſ}[[bn30JEoN5}G{,+C~6lA?YQoQz;ɯH iPxߝi|26݊^% &=wS Quf)8JlzHфBE &o;p *bѽPLLt>K1l)S!V*P0 4UHe3v| v\EYv=>\>iwmfwtxDNַ3JKsUB)vx|_pb(zSˣ]]Pǖ-7sȒ'?ڈUnϏ맆UJ=Y3p>1SO M1ö8$ o#No1agʅ?*pO&4{֎evbͷ+ %d Lpغkuݹqx]?.'pf~>c.ڊa=7:װ%ʼnD" Dc f7~BqEyWL[0dK I)og\Tu nǨ;|ĩ510HkRB0 VͷwN miJ\MW3^O5dD:jӇA̙ί!G"5it*Ne&z,p.LX'R*cw ~:h'{*$p̦s$T+v)ںLNj%QSQ=w.& M5+,፼k'dr~\' S4ɹg@B>ͬI񎊇US$1g2Z7ڻn0E}CeI? rve[Ut|\lrldU) 'D]dS[@CS><#,۾I\>a0 i*qek806Vf 3W&K}Eӵz\󂋬!8/` #w|<2מ@MZ#x3-3*^fV'(%qwKl"&}5^}mtKh/RoUe!P _ OJ}"hR襨YjG[OT\}$&3*Dcns]8 W0tmlj3nuvj81\*cs*dA< 88#JZ·ኢ`o%ut@8 X 6,q-)ґR/$FS}DiPq9NZ$rbeLRs,I@(dĄ׈5bymr4~ W5&la1:GJM"cmʈI/KiͽLYt{,ZJT*&^o m& +0]87,HM lC14g&-EⲲ᭲t"/AE9:7BCs.]520Z?#VԔZ!HTFN=Uޕd e 3ai^Ca *v[YR\(E/beq`ORTZ<8\`/B3GG KKrȸ{dD!>m,B b =3<%sD-鈦Ѓm7<0 07M^:Lң*o  iPgi҂ORMۧ(hа4gR<١ds  }|D@1S/kU.ڈVܕH}RSX*gB)FUSgo״檬moA qk 1^u'j G!?<0T6V7oxzgmt߀2l{FR{T^e Pzuܲr.~+&|9Q*MѨ1_0ϝ]LC#F8$d0RGqԲ]W  _ _E/w>bh)5Bٟmk${bom(S>D״sȅi[O0ˑ`0| DvQJsEJo>G,ԱMeNY%I]hQko|s#SqyyCKML h-GzVb@.HAU<8%Qi3NH~cJ6};4DM0}jgC~\ CO[![GAtvKSZ^$6VCSeltYYn=qKuo9 ]21YG16Aj!5ӈlїz 1!-R MNq=(p ?;>^JE3WO*LZZphp9zE߿L~I/Vx\yo+0Jb>KJAZm%jD}s<5:"䋃"K@6pixw w:3ś( #g01Lx{VJL{Q3a7GezL /Ri_.z,5bY'!oX% g\&Pc{ȬSAG7PI~wb[g+Q/ v*a`x6?4nl8CaS\XC-+ Ʊ1;UuT埮 a]œ_S8 d] 9jEp_ѫ:Mdmd"E%VYWMvy ٕvrT¯Ww%%* lZ{6dXp֋b P:D*kp'/b P)Y 3ɟj0c hnd7(Lwtk!Sxk# mǞ> z\edCzZFHEY'f &0!#n&jKjYo Fp8jKO+'KY1zCGA4&`p?,.!~u =gͻZ$QǁLz`r1bH4:^qQjl![tZQFtXxٍ!{I )Dl$N'lKA8e6u+A ùe[.hy~1[jg{CZ ~f7Zl/N%sՄ"T8pG ۻcÁ M P{S{ՏnOe˨L~jr.񤓇muneCT7Jh nIG$w7C#턖F bە)yIRJk7)ـD9;/|?]1tyvpB=0Y˟ϗ^إv{z ^ py1=@>63BKϑ7ǽ.G2fj)b5`1-]R" ?Pf94:9RVQ˗hiMBZNIn:hiq\KA z,25Fݐ Amuz}77_;g"\)nN^t *sJo7/]L}=CX_u;z rPM6}sT#Pf iͭ~Jk[ђU:( aL8M &!+ K5h,)fT,Υ Rxrj_RqdQտAf7 >^E:Dѧ^#Z_v>/< Ҹ}"G=-ʚa~gQvGGV$wwm*EC. lG㡳G sf 8D5~N6uIAj0lYUE`{ԡ 4U{@TC1i?Y Mת5x^k?zhڹژ~E b ` =@)T_cn/[5K^ ur$Z_CgeqO~a)ZK%Uw.D8'>WIH5~FX8!P >'ް2?Y yO:ˍ +۞d˂X˫.˾qvi^ͭul kيmls!؄--?ӑqN?bm99[`,,fܕO߿H8EIa}SdHq.-}-d>W  Ll{x@aADiO *ȸ.|1Y.d*7lIJsYHe`}\w1FZ oy3>*6JbFkL~]>ͱ`ctӂ>,m9|+4mٜ2M8q["=r0 b&BiNĀΚȼZ7iLTGcg@E!nhL7 B^r%iAmDYAqu-CnEl3}v^+!wdz*rɔ쥏0܄_O=+?'a}u5)ŏ"eҌ֝DqYk#notztg/tUtV;jos ZP3O(ڤx e^ܪ pʾ]it3v1h~&`GsNYVn܀9mlG^z`\̲y2\`>Y2$8«,w,O>-ɲك h Âǖ}CZR9.Xm:Y/)ظ[Oqv}>Gj_HAꖂTƵK~j<:0e<{ Fc/cX/+fڔ\? V@|mha+k"$ktN_?RMxZ0v~jrM!&i8xj̒J{Dkg]|=u U]II) 1 U=tbcUCR>$ȳ{q J6)^ѝ>NuRFRnZ>8_cy6T)ICzƪ"bĪ D‚Q>kٲ>֔KISZCI icqp.L10RG[a W<#疊\:eB {UH/RNV iwBhV]TH- N]>H:w~vׄe4nBTܧ >LWUedzN.}V:cNV3wV2EpwX4ն6"sU? dE-@nbѦEp(Бi^+g7pFM'(;J_G7͠By.( wYֵ}͑o5u l}edl22!Ҵq I&/}to63W,¢-<5dDdh =}w;jdF $n$_H_A@5L,R0!5*6w%%b_D,()ܣДyjmA'%x Fr~!똅8t`R8)BA={&}GKcDiHZMTNHpF7m@(zyy5Z[WU(3HE)GF}e%K"3Қ]YǎϮ7jp;BG}9e?Ȓ9 6j} vA7m@%iAvg Mָ6jEc2DVe2V6hagKq =s|TP n[ dQe;;c7\q?ݥm2G.wBR*1'`i`kUΧP ;Fɝ+@qmHWQE[GeM8mlS8"kv4B"F Aey4>FF{)veͿBC`x5E-A{0M{I]K"cx]?U&4!\`1TzsUYڲPק݉-Γq(ЖJq/W WK esLR*zpq' g{\X 6e|ipQ: 3XLؕ]i@-QqKelkGF 0K@1BXs֧B.ZS4WC"YCWAt鄃Rـb޼?b"7\&9%- "wp j"݂u1\wiq.=}+cSE?t^77*7.?#-| ."0HKG)H8;*i4Ōf/l <1K|J&5%Ih -b3O-q%?&P4*VH7 7{+TeHDT?"KOMWYb&}إL"%gG+ qDpܓ8(Zqwsx>P:c]ap!PR4{1YD_)b`z@A6bga".G8Ѳ?>TYSCEGý`筩p3\$Nv0bg7N.?+אp#RP¹0}B* &q,g%MieccϨ`1+(EGA!lRo9$Z aE~5)?smhۧ ͘T_XLHK}7-{o櫥7n( n&+6BU_.8sºbA6Zc܎I-nO1-T^Z0 Q;Ng5fW?IErJ4;VGO-(yEh5`ydV+am:-J$d"ߺF3 yIrq"Źv츾oB4grҌv_I~jhaFfֶɐո þo`NVrnTI1 [NߟpMv?](~'4*pj*iz^֓_Xnj( B=<dz{, do`*~NͼN>~˙k;UsE5ܗÖ5PK9եx zu]Tiq͋?\tgm1J)W$,7~5$4ry 񙳤j\ܯqByaEr窤c9жj5-Ӕ鲄?&Y1!vp3E_Job(ܡpIDѧ[a1Xw)<3D|KZ}@l3}2{A,{7%_gתr'̪.4ƍ/n.Ggqj[q#Ek<&"eeUg}jX]'/fJ C+8M/OԀ`J\LJ\ .,-܈o 0hZ E\"f) DN+2iu1'.V[ue MվhKp8G0V"q"o>ILe)?^;CU>WvXeHq<͉LqCJ{=E.i(y ;=MV0lms4zu]OR.lY@Z΃7ǚ鐄lU4tXlYKxZ@}1q{h՗$ݕE13f/`q"ZxuE^uܤJ,[y^:6_q9_{󽍓R^jxr&*3rH58?F||O)YbxۿRR#,Kh{vxK|'n!~Ev EZA;GPQn2bIQK5$2B`&t>U/ \;~9sAQ5QÔ-bwQD"yB+5OCmdamȱ)- t͋=OX*NBI'&a1jYDXчӣzv|l]FX)\< b o~c+ uW#ܗH$וp$1j a;[@W=ʤR/K ׭g6t$1L6lHZ8ť?|" +UZJ>iy)ٸ-v:ke wr Vz~oG^vM0 e.>qm+^8>}8Ey5,~[^Xoz%fžl쪄h^lsKQИͤ]5$[g6cq=¸ {3~X-QwZ@m CUKKǾG{.$Q,F@ڸ_MRz ! 1_'u:=V(UH\ƍb8|(_?E#,0y"Pe>J+yu_yjyZES:I-/}`@t>1{ΕJ{\CK =˜~ ߸I6~5* 7Z?:3+ L@Kv~c mpp2ik H`fk(z@7mzN4/tfL7M1(1Y %͟QZ>eY3ukVJu#!]Ey&x'ZƹPM|M[  \rHqtHDac}l dCRM[OU7~yC2 =0Gb};/b얓2@JЗaDw/~ݔM4RI1cSVRakmHWVA0C5n׼As&vcpǁ#FGj%#+ᶙ:64%Ljpe6 Fn}ޔeg/x-BLYJjQBג5:OÚގP)1*±kt4 udOP ˿[㻌-% o <[TxlL& ?tqDzRIyy[ H]pA23P)qej9D3ci  ifx- D#JڤAm7Џ,=J&+s"!6 /dP*S/G@]Z.9o{V7AgUf9bBaM_1AhQxbέ&܏W4a`DM>UGQl 1 k痠%g5lw)KiWWj}=M^Q)HaP+ҵQP cR'])VVջ ˣ1'MK꯰t452KX[{ SFvڜZhgf (v~B726@|2 C!3}8}`]w({Gl 7LGY ,aΏ.-VDG+ܩLX-aZ 0p }zC싡:(i Pcf/BWX_Pң.z]U #3MYKzPZR %S0XpH){B'dy Y8hPq{g=.S/Ъ?#&sʃnzlmtbx6xhnnCo1aZ,[rU+ $$KNHHɚgUGȔՉ4ȬuGb[ 7)LP+Ι,zT%#"Q76om` XUv4X'k|Μ!Pkvk6ߑ{3h:v>$xU={=`iEagWzKKq®sU[F؅yܲQ#rV)}*ykgf ԉ9( k'}逕Y0M*Ǿg\[׷@vހ'{L3_͋ɾ7YGcG6PȃU  9 pSQSco [c3&{YA ZBdvi£V$Q?8`2ݗA*xC6(RNt@*k袔ST@)9q߰Ӯ]φi㴀塂q5&R*pSF/;鸇Un^AnVU:fj7>` $)_:r}qÇd/Qʭ,v!Hf9 ]mF[DxOk[yuCC):${g%2=Ǹnr^)j{g3,m`ʧˀ3{n*JX Z_ߩ=![՟5^_zu%gy%fosa±Xeef ig{]EзŠD(Lv5SVd +U(.*uK{ ¾Xҥ#39DY.Vwf$}gCCNs9p⾻o9= J]Zgy݁I^K 1ws3Ġ?$y5PaZ!ٜ 3<Ⱇ0dO=my49\‡{R>YrBO<@Ft _&9S|{ҝ?\I|0'iq?즄mjoJ"`e=Nd[/o@yMϴ6UK)XV՗](6`t/{Xb[gSXp E`ހ:+MzhsKL$ߖ VOj"oSǁYZ|1dsVRz5 k׺(qWّFb IՏBa/,˼M ۼ˵W=/o$9t`͕w뉵Py É֠ GC뛼!Yr ru(y븤F@$Pv7$X ۴7rddݽYt3jXvʑK ; luXFʂFHn%³9pZ+J Ĺ)Ľn?o]ʯm;Æ-s3|֥aغ0EgtM9g¼DugێKeܱ>!?P4e?PY4 ?@PX+,Ci3K8pM(mCa\<$h#* ):f@5ʍ@'U8{۷4yr̶qٞCUX8X?peuy&v l~m~uN}F׭ȭ(+]m:ff2ߛ7.Qx}YN@ §9MqBMhzo篱v80) P ܩF H1-_\@]:%?nF)7! nzK$Xꂠ5H8$¿ p-"nt%ΛK\%%Qu%Suhm7:D;Mz~(ѢAtT 1 m")|Iqƛ{F2dΎJR3eZM;nG !_k9.9L6kᄭ*TNC/JͰFN'Q(GcY"ht3o]~3bMUo&ͮVPD6EhsnbTYu? tk<`xh*{Q*ds%8ĺN5Rr[`DKH wf#="xSbjQJO[dm&&uC{zdmZg[W_@"zu*Y"(E@ +V*ck6cŤ /gGd@MAT!~2 iC2UNJLtf#Re J6̡meR83dy1cZgV]I 뾣ʝLo5D~I&(>5,j[ . YS%IH+2T UxO~NWFZQYЉl-600Z ,dBduPb ᢄ.%9 mYάǀuϱUי5NOlב'gfr.jxqNp"CL _̮?Y۷x7,!ǧ DB3nB s/nDϕ8>(In@#  fHϓR(6~ΧԽ-mcoǔA*Xߐw"mq^^Cbt@Py;]W2P m'ifA">]lE 0zf'UdU+Rj. '諃 @7؊S s)ń8ݭ"jZs_d!ȯ-[/iek+Z ʩsNSc%PwI玸hz儼_5u~(AG|7O3W fQEi{M {*tzTy ؋#Klnb6ZB ]5*K&Z_];WvœSp!t,dBǠf8*|q5SJui6CӞ;QoޅO= K$H|!"aݤ@@8g;N :bS4PZkYx ~ 'VH3䨦+OkwPj 9q|ݰEc]CZYKq 4ZSo\Z#"*e8*ROz7/ϩANMPD8<3!KH(-7|}:iD K'x [8'9Xk/wNWu< AZ f|nJ_T ~!}* z*T/>5Be=X\`*梧>=E~Ge<D9wͺfF?JeUmi{9(a`0Y̟׌]wwNpq'{4J3+\ӕ}Jo "7Wl(BcQL;L%|="Mws:/>%^m,RQVo^k_}'Wu-QMNB(4eDIp L$8 (lNsiR֐ӻ_2Q0bj%?4 oe yCqքPM7 J< @`Ro52Vi(F{DMѐ~:f ,MyǡDg2X]98P>̦(nxv`M'M]n|/l,5O@'ug9?-.J73 [=C#zLJ({f>\x)-Z {'s7$Fi#ZBB]k0`q?$*jg^Ӽf 5MYA":l,{uҫFaQddwߓHP^;6hzI}U?]2_a>泋h \r5F&, ^Up ]yUTp O4h 8q舽{.LXd'mʣ58 AU_շJx3V<UpQ ~n؆M;,2\:lLexcCKndU*Z|*efdF{36skK.;3%>6iYeHOxxٕ><iqdpg\ r#kJ^ jeՒvgWA]4_ TwUzRW=7e٬ 9Gf~Y*[뜢]80uрv|a3LiaǴ} 8ׂ{Kj]l-2KG몐sìSЪ .г],I[D.NW%4#XD,gQMb)-߆ɦ^=OqeIU@x.+܇gF7u@1)O"&ڢWT l+ӤSJn(TgÒY"co~FqO=Ѱ,KI%ȏ̶(P`M.4Z(>Om,*>,Iin  6_;rq畼_<",_צ:tl \GXGA!'#1o`aHN_z}6Uw$SpW!E?dmZſaUn4_FpD"ek,3,-KEÌ:.>5hgiێ{qdABe(w)iб's)mi "H':F}@(r@T[_l,\THv2@dZj>=)Α̧njX0XBa3= M A4VWyX.0O=@y+1͠Qy !U([.}Փ&)suh?\#-$ zA9N)W:b"҅J~ /2 aDGݳfoqDJwcҽ<]Kؽ{b!"̎􃥸֘Fh@Ne X\aAxTK#݈xމ fbx/Ș `J醜xC(zM+Qշ;x Y IĚe]=*YfA%Z6a$`d09m빀VLZ"2š0u.qFpt^3HC'ɋ "DLneA=NndS dInF,~?hSw;R̟6Y#ZZbfŷ:P/qwp`:Ux^2C&ەUބ*6j+RTh/ G$2CeFul6`CCfl+}H, TZI=F _nby,<{K~u͛)jL^R]7㜿mo4X5$w 2IIbϾ/S ߿݈$ în3"2lAӡ|!. {aw|} &]"tÒ|J4@Ӽg2EfPwֽ:Yq^j Sjc H'aFq)z J Jk29F>$L<>ן$.vzTT}ʐ?Oqk\1` 7cO%: E|I7ZCl%z}~ bvmOiP uʲ4< v:_?f$=Ug^C6;YZ >l4@[*IqKĭ3 &*^.>[S5[ԭ)ټOpDO01k۲a49j|Ruqg+q%UfG9`"Pvyq{ ,GNٹ>0~(v{ iSW/ 8, {6PM=.c0NК޽Lɩ+FmB3^ uޔiD?L֬WJ%܂ῡYVH琤f*)'MZ%PG _+h&uλC̖3p7mi `NS⾕xk Yך}MfMH48@32¦mcQ)Pq|z{(kK)}Z~!N,$w37ڕbuHw8&Z)N@c=?M-?jPol~ʏdADLu]Ɖ`bjlz RYAmՄ1oaI\*=e6 \JXNZ׬}9׻uA)B-IY1rƱ[AF:2T_k4~*D[xLuۆysN+oCW=L`-KUã#npdߐ/D&cu{cXZYe!vU[","9C0zv0Xl4cSՉp5|Rhd +Pn^1k`  JvX-(,?U -kqi1+<~_B_vt"SOޜWB ?bUU5 F_B6gǙvB~$٧hbrlQ=R,ےp1Om`B)C,>q)Uڋ"J*W{Y[ޜTžct7ߚcŝUFpEl/)ǔ_T|xtq^# ^?3~H.NGMeowbXH6mbvNTZ7!JwUNcƦv%,+\8 a27Ki)& ɟ#6sq0eGm.+@Hܞ &#gѤf)/_t"x^@%)piq͛D8#k_CC[l7}[wjWZe&M:/Uap3`4<,gV0.7$ezwݜ=ޏi%VT,dr'r>reԖn@i7B7di}xaJTCb.rZlQna(=mFjf;hVFi+cte Da͵Cod? cvkı. )S)dH{0/[W"r3򞝶f:5id56_0 Ys`D?U}AOe %8#.?F NS4d vymu՚M켾f¸?qhӜcF&γZ&SL"3]y $F?m^9~h৒`g܋g.p)HlњNvSmy# )൯z2m?D'qf58u.JJqaտ{vOCp~kQb{OVa;|Ai̽2oї#8g]~.BC@5`EA90gm}o,sbCUrw|aj=a81¤ z~` ]Rrы^5LA\qOL)t%5Ef)PYpo>5JF=L+0 IAAP^Fu7B`mse}mo jܟ|wg'vFIyrnyn _77 Zv(b o˾x9K;Q+}Y Xn\?"gnlEx)?6ª! S5MuTtږG"g*Uf[,*1ч:\_lKI? go]lkR^fs\6@z*$em#1rUQl*HņHq#(鍯 5CNӵޛH 9w\ ,Mdn:BV,~]Db w` ͸JO"'r ''xl*'F ,n'Ux+<8Ns;g[QX9,405qP j.QfKͨ K9e{Ml|CG{jlۘn_}P:<i椉-]q9QʹƸ9=7gAULQebs{ 8Umy瀾*L;3X13e;(6yG$*jbmW*ű2ʓ<;}CoϱD%,0zb IL Ow0QLw>AnCnԟDx1cn,M9~qVc1DB|vfڃ5.t#No8p?;2s?`⌂X%g;`>JR/T7]LUyGO7J0?w-8DAǮŤahN֝^}C͗>|9w)+{AD7œ%5F Mߣx+n E;k:qx e, oڰE\xC}2di 3XjsQ(zsC?[/|2~Ņ~,dyp]oRpb4iQ_OǾ+)՝E' G'XصYz]9T:kNdmm%3k) D9߁{%:Nk͏/d(Ch?xq-,cseԊ-T<3׼H$e!˕C=.,7U̻?sqfU3^Z-&p2v=D8|t4-_@^j]"К;F9_.+PD(s `bQfDOW5)D~j O UW ܾ 0)2~>{8@C{(Dm/?ΉI"^c[qZ\/@n+^f$V׋Ng nͽb| M]i0;NAxSngX TCߓ1Z!nܑq㝻A~hHUu~DXsw 7O2c#6Ǘ6; h,,_YhBZ>g/6MZWkrKS8S'5r{ՠ1S%!|5l]# X$Ww'3jGW">AH9CD;|i'[,_z>ІuяВ;'@.߰-"堸z"`I-0^z~fx{(x]?Z Bg(@mȉ{۫l@pb,YcYq3O`zj"%^Gkf\-s.']8Q^jk)E6fA wX ){e4I~ q_NWyMGG] wcIŧ*y_= >\/v}%q@0TBA+􃽗3+W 8HS~bIo z]6\'B82UІM%^ `*k1&P$iɑC~QhHs2X`4f@:)F.ѥgYz % _PiKӫl M4gW /oQfWe)Ai۶ ӎ7s(Ic=6As=*ՁHmal"CJ~=C^zFa`@Ã![LUAX 9D P_okNO4hcFHdj_o"(M%u0-EVT%BP+(ȴb+#R |&W}Z}q*P>qf>eP΃j1PgQ-*-t~bt3گdb#\D Dc}Mp/zyӰĆɧߡ^||6Ys^?&p]>q}բ4nK<&k>KM]boY]31IQBc^8W6jY.E [Y8BUXK‡T~:A>J(nE)"6wz«{M-oT}:MCvpj3J[r@g'+Ec6_jX5x TmtѴ)0'3H'ڋWuyqD6@5q*x^,)Am`pfX_Fʾ.$øWV%-]h'ȧtwcJWM6E E }m ^ܒģ)BQ2q0œUKȸstsc4V-8n *q]k -Ȩc-?HSu6uڬE8;T)(USn9EݽhxJ16Մ|2?GM*>*i@ڇڔl :5nyڪ)&v[>rT0YQG>_muF,F/Is ¦ń~M )yA41~m$ʂ~]鏍^'; 46.̒}[Kuup0:1|z\`yܡ?Fʣژ/·WW ]zry+Rj*\5QFg20+@(%vGn/r V> Õ#N3{?XR]SE޴=ۤf}9E*aC55xP5IOԷ,W Am,3~zM\.FY-hb$梲Dx!}l|غUd|,0c1J,rM,|bb|qK,K%/hn-N!s.w&HSeVoM%c <8yIp[]yVjԋA9jwTglãbťfVNgTRASxdF˃k00Gݎ91 \] B {Pk5FOx9a˲I-~#䧛Z`@OVgztO h=se]zJ2㭎{icp25(WntL0m 9d+m\/OuꆎܩK;}fCnsXh>n^~=qf x~tŘ?rAFU 2^IʐK!p͉nE Įq.9N@2 hc07`R3"(&˧T)BKXRn22Y?jSKSp,Gd:H@Yɂ7Iq.,4RKB'~Oo8Fl-Ļ˳17QX]&O, KDwFL3C |:Kٰ7?Xztsq?Y ꑑZ Uk<<|~YlѷQ,ؑ(yd9h"x\wR ,]@F㜤d46ME!$\_5#%RJ,'tqsz(H~/u(Eq}־G'K/ N}$B`Px60, B@ОO Z,e (겫K;`R$ LCq2連 О4 L]a-TQCg{pT7<l:i=_ZnJvHPOߘߔtjyfP:]~fxG`6!=h*&K tܑ $.x5_@l]3ŒbJdol*)(5`ZxSk*_`S]nƒk3rm=Ւ8ran[DBJrvy>/+ss[>+e/&zuCytTc? ܆HO}}O2ƱB XOd8qg+X"B\?us^Qsɕ=ca)r=l\%&(@2vꥲT&985(4 !6pY(K$Aa͍rƓF[)m_qѵΣ5&/ݛ;fO9QxBZ"4dσ{AUuj97PAcfu$y`' d؍snb8YqGO@MH%Xqźh8 ڍԴ""O(x @VScS,y,sTY4^p+ĦG~SDt4u1 }NwarcFEÍzRlX:)p(O =! 3]Uy!OE eQV|bM{]> W[pLJȽ/;{#إtӭspm2ABL~ĵle^4?c#):CA"VGii=Rw?jm7?sYŊ,Iz.{&|nѩ7Gv(y1Nx>Sa`QEEj[cx__ɿCtNsEG~B O"B\1œ(Lg \=ļH[D P&m;%.Y"'PX$Zd>5Q` s ) [) n|\j 2sa#) UǮad%]atл .6V`T5e 5G".<\)e3v4d!<縕_g@wH3O1N( }ct%Mw(mctF6BDI;,va{ w jBzy3c^ÛF\y#|Y׶MD]/i٧kkiqv#~RU ܘ飢KEW2EmloW2ܿ> mA Q;*(.~$CC>$4L></rrYom8?C 9xB2$ ?k^ѓ%2~fg\ߌ)$p(ջ7)"ušE87^g\] TJS{JOħxӣ_%}C+شLoqW#>|_seBP nf"aw:0?cpTy|H7- v E5/#ܩ FݛUR+~.CJ&fw1cnB-޵~wa9 * =ݪk@:O1Sdmh(xpҝ5@j{5m, 7ȀǷbC*$!%s)->3ʯ /ZN lhӾI Kr,턝FT奈h2,%6kI\3%+֨tb3nJur4muz7;zx A'/y̑ 0nX7¼ xm7l5\arAM_9 |Y'' {䬒 @1B̆ S]i y`.>-TGRª [$[a. pFH:(Oca&aPjPO0b]` mP^XI瞢 Sw9!fR(7P:8ѵ@H %liKlAm՚@P S}G'G,5L$l=B;9;eCY;dzbfM 2tw <1ɦQ㡕4_7&0(B"2׏FcCFMA/!8ycK8=hkܶH[J0f4%,i+KG^='~O/2]Q-LIHf&RYW.ƞU%|S4p7)i<ʬXu!y<IeE/-Klc4wۉ@'!yJjM6!;d"рUENGi9t" `&Wzދ]5O= .[OXJn[[1g_YI0Jt'J1E$EJTxR[xwE&1Ml|B) _ox 8!RN ߥ$&?[>%aC I#rX4->c |.FŇ. nd/0F}$@K- ,>Y֥@h/;Bn}S˂vp5_\n0d`9o M/ dTͰ R[4h~W㍚dgTU.z*_.VgxZHpXO ?շ0̯)n%ߡy!J{Hv1$4r0]jx>Z(#knvL9:(G,ESYMo,Ԡ~sE iȁ>]kPD{8tG'-~CτKʆb7Ppl &7ƨE+1fӆkP X=JŒWͱQyL b\Bi}M:͡:铋e&@ V^WxZ1jCfUh~bZCw+G7 b!_#>ˮtig{G)Y+D|/x~ o|zh?gRB[ LB!3nmaPRxI Rw.s(va$V ʱ?CwqZ=}%-\ acJziଊM]]l `阁cWr{qhA?guޥ"߾Q1)+`4cpX'O+Ek@k!dyXRB=U'[3,*R}!d}f=JNό]ke{3>9VF+ iA.yBA& 8؍ePдi >M&X-]6wÒq8JIsz>^U\~W0 P5MCC{\ԕQ PVI>p$)#Ȑ|%$8Z.#*KwjY^pT|w\ JTS W <35gr[\CBz0eYBZQx7vGvyv2Ř(^ڻ^TM#:~|d89V\dL9J\ }L;^lfN Tiz{FХalSǷgdU2T8{~D ć㻘j, TD2ӂ}ǏӹV,@wls{(+F0Wh6~$fjŠ 5*/ʦ'xix3Z*@O[(y*.37QY '޳mUZ!|8f@d kNj)f"O(2j'L{!˜MZjaLș&׮,tկԩ"]U#z0IԮQNeuwɗ8xƠ2DF!5мBʯ*^CaǠ8bFXzL%b!(夳XA ͪST sH竊`*@2TȾ&3&p=#^7X8#3W^{=yySNK1ol}̵sht:%ǡLf?7wL9J}O:DzCA[=oWhh_XO8bO*!6R='M&"W/P&*#qWggUs`#MQHY/ⷽT-@؅ޅ+MsFvt5m^Kc|!4N7CPmn@ d~a?=NzKxHҒil };EW3TeGj:{}I;/d|aMlS}Q"]io l^dSx<,oS-ܸƲn7Cx  WӔ:ܿ4kSזBmQN ypɷ S~=j_g(m.,P$tz"M?QixEJYKmo{ӈ"4~\B"ŨmtoP>:Nq {ucPyd8?0"aod9qf6`fl/C\aZĜ7gSyN↣1΍R8kW$J VqG=l^e<,c/iydZ4-v k2U9\* (^[r'Qv[*\2 ]%>b)5-%(=EOqKaQ@ ]BR"Q.^LqaH~rt} 3FfK28=nq]G[M⍷o2ms?= #* ]aU4t?z`t r|"pͥ,0mY\e+wxsF]IWs4oM `:P7H+!pbK\t!ďlҐcs_?= _gXyQ_ǘ'T+n$^cfN}: @Jl_z|nXAWUSQuH1Q - fN>Mл#E&Kwd#蓐 VZ'(01u|ǰBWֶo?=5IHIޮjE.,G# x#*XOg P>5VvoGT%PbBSA,J6 ]n\ߨ+?}zsu(F0(&5o<+襖~R) v˨'Q2  q#3\}pIy"b)w[2G} 1BEH6P2DC@ n/uN"N0Sxq6&vț@dO=p)=g}lǯz|XRaL~ӯbN-m>Nt2OeKH YvM+.A X4[cKՙ%'^ +>97y{b眸N;V|hSH#j-~2y ݦ,= Ӽ6{z1r*oپ 7=9qɉ~ sz\wIc{` G߂Ṁt%yףI/8KkN٩O=;UB˙ExJ p~)檏%x~&t`<0%e^*G0Q,H{,V]2$o#@ Y*;GzM齐B* ,9A8$H$'f?gO%S룳7wjf@wh\|oޡ &17ctȖmp50zxw TRM[z,n GXr}t^ JHv﷎o՟{,u@nB^YB+ٯLůXEPVɾ٠7>#gE#T0Q5/.՞eP:7#i5ށGjDlSP"s7gQ(ybv8 dG__WQP#iOwݸv% 8c{eO8ͦ]f+p vbgCN NnVdd-c+3]8gdˑf-8@aZgwġ0e&d%F 2 ~رDždgέ̏YHx悭<>1qrK~e3֮2Ozw'RF2; |F ՝, ÏY^/A1 oCjX- LΎXye7Iv5<8l':aD"MRLb歑^Ơ?|!( ׳2 1sH;}}'y\#DP)'zB ?]_gk9|d+,Yz51!~TzO!1NeNOյAT$asc(y|n\- FWKr#l̳rb,E3IZ:9bVkg1 n)Eh\F9VWwD>7(NFCMքWwv? yڮa/%wIe@X6ʘ%4Y՚8,J㯈d}PNp9HՎ{3hCc}t|hJ&>gE;PS Xq bܵ{zďFNbމ)a<`@޽\t淕>!%tó_H Nak_xzO4טřC`׭ZX&1$$B0#LUP {&9P[=Ƕ8?Kj(S La& 7 ^=Lfy=oGY(S] x~=C&Dbs;cUPf?)33E[ZLr<̞e5pYf/}Kirf̑2[c# q^{њ$xR$L,FXIeW2vb\F)AapPwfL{_=>I's]|;=@"JHIW]ѫ!-~`o$Љ*TXyE ͪdn3hBW0qmWQҩ#n(* C )!JX7.P$0I V.qvocFLܞ }@;[?x!˳[.Pn{cxf޸X8ǣg}~V /Ywg5ću UC3{"馲Ql'RW Cwο#ܘPPز8aҎue0ٞhMK44\f޶a!l=Mub׼\z-dc5}#Mz{S}eW1&J}%G٤{3QH}4ˮ ?C\m)kK#+0jGO,agIZ`oK>ȥnGT(DE$ ?QB5*%AEBgڹ`y%Y{ TM.c42>9-WHp)0fXUqb\}A(H.[j0NJfwg @bcDaI{I832)B \%q?S}v˲h_i)MԔ5;K!jˁH u-NYb.ØQ雽'¤lI-X\ 3X<9A~vfZvlD3'-Hf x58V Ews/r d3FOKږO km+e+Kސ E{ISN4.rAw53޼T(CnjcC-(バHۇ&B3F*odwD(dWPcqͼ/qA^ o.wsfrEJQmjI( 4wsəϧL"w*$|T b:oTec_W#Og'z=,M< qp({<=H $gŞO=Ca_8Xةc9a`4FL ,{k#5pg(+oQ-2_[7w6S&&TTDQCc؞%w'=vgO$h2Q:Ʒّ_cr22Mɏ!;;Of *!>s#g{yiFZțt,i8OWiUwS~{WCٶ+D=Oy r+v奶.)|+0[(S@mRpLn?8):W6.lkHin1_bpٚ󻂙[gnf#gsOdwZ\si-@W:E<тE<vpRB:ʱV3J> eU'Omroqlߓ@9kd q?dtZX34'/3 H.;C':z> "fEA}jQ8[wEGd w:v>&%->gVBub2HeEp$[ܞt#Y _ءg+M@ NLjXOk1#@` iYlXx{ʹ+h.=Mx`^d  &d rjݙˬS WIf`~AKB+z,=*3_u/ֽ́rQ7Vjar7 ѯJ[u[oIY}M!RՔsQ fv~1Zsoɑ V,Ž RBr$DyKNPO%1vpݥYM6\ \k95^AOSfk6n.pB9M.iGfkffgiDOCr(ފh7|~h앵g[@, qmfu=d 3a姌=T2=!m٦ctBh: fV$Q|;SQRA;+0fӔHN36ɿQZmSSND) @@q?25nHfЁU$]cX"\glX۾2LvB>ZBI$[5ۆ,>D7|AAp~rsت "pa%GWL~ul O"qkfKi6?wγ?jP"[W~; "ˊ#OHCv? !AI$ It˂VEeܣHсE=l1窿)Qe'ƭwuml`]]5DхDV4X3oRNalP|&V \}8`v a$fPIWՠn!L|f^o]V1Xc +k6Rs{BFj CBWAyitZ7 5*B@u WBy[vЗOeC,̅3EϪN Dt?߫xe˜'bm~R9U'VIoӛ$ ݍygѩ2V6Yʯ!Zl ['R x\y?氞!_*Vy cnrD>i2ob:ЏԕNs|#N%?]1L݅x"qڴ=ةR kg>uaե-78^& A=Q#A_[F f0}uܟeJoút̛ߓ$V} ߉ixeh*@3+/BqśC[BhNY9t{Ԏ$cӑ<'wO$eHzcUcA iԺ;k<}aVD.vNR bTA(!0e1A*$BBu01\\:CkuNtAƹէ Eө!7^':XcE-&Jg}M֤8ԑl W>{-𦀥Dmt5z~8dYdF*=g?DR G@U JT,z CG}8|>iqkm==F)h;Oϒgbήqqߟȭ^ϾlO@\PLM6N؋;1'DIVBFcZ ,#('G^@"6DR^/Ӗ ȟ{ wAn潵0x}yJ(:ȟj4G~J dux_>$2gt\s+3A> M%!|ƭBk@%5lf3d9Txײ(\ 9D D׾m58D{e(9$wlE+`p9 ZV|sZn$L-l36'3?q}2YN`eEmK]hFLN m 6яҩ|s=$`ՠJhAPD$-QpNcuf@24 Y3;٤0'H:%@3-X^8c̵0Lkü5H!,*˿Sɗ6;.0Hy!d=;9V:0fVJcak8$ݷW@9*er_dPɔx~v=ȕyTKA4[??x)䈅^o\Td{rhTR75<_ͦݷ/JIo_Os`Fkp)ܒGۉ#ڡKSņ_l&<־L~Z^;@rb㚢 vjK`CT">6JihiHZbh#*K?wC:^q_XN[wGR\o½6B ܺ_%'їXBQGܞlO1`C)ɅQX #&JAV1譼ƖZi5*涴$2mSLAcc:CUDp-ƄX(%.g';`0uT1fPWuZPz6CZN5 @Cb' $}@Pswcff랹QFPñA:`(s4njR5`9uF`_ s X3$՗ɪޢ2xD.7G~cѓz/'\'R`J:9YN܇<4_w;mJeZ?ƉSX#qeG9N<}mylm5mvÞvgŃf'j(= ټUqYZDUxDWw!|B5v!i0.s0]`ڿۂ%z% paa,$i3@I?N㡙dg.0 JYvD\7xV  :M!bQ dzN}k*pM^e;X2\-t=~h4A !h曣QYOXn;4 qyO\9ޤnkHe*ӭm 0?1jf uC(V81R9w'Kseӟ_ Kɱt~vg)Cl21h] 1D`}HC*OZ7.yم < ɗc9NZ)T>T8gP\x0(s/r:LvUn\w ]BqN1[^*u`7;ul(Ro{ aZٍ_&X.=KD2fkg 3.]d}> Xr KEwjYǖr5`@""`H_{B<\0-+@@HO#RyԠ="5'iI\RxPt.縔܇3_HG׭Nj3x-%.=,O' pZwެVщ^{kdycp%aOpB\RRExp+Ϣ;:uԖyϥ]W3)QR/ј#rZyDD_064 ۗuDE*QjT"@ҵ:4LA)ms:%nYl8| 5+"BF֣8&..[őB`fC\m-m>koF~Fx! UO'ZQxkNm3"},GNZ磚%b"#(SHX.rD8՝e?=暔O_^N}8@ }&G0 `|3K;PߋQ,ɶY4L4 vv3)?. @`O`?vв]E D)%82NUXOzXW@CmǢYFȌNh:&fff0 ᝣ-.X9'r{sپUe ip7\x+w5q4L7xUאU ٷ ^k]mhKNvwT輄9`^eIۛ7]OjY{QE9Azܑ4w`!<a :R[$Jq477|f.Р}xE ܥNM՞Qv: M,L %~6VimEK5  <UÀ7 W5i.plMa>a3U#M89U"ՔhBnz+j"nJ+HO%KQKSoz5 BqJ 36-4}(|d]AR7kx,B]tNnBsqI ʛw(WLT,|R9UW;X@6k ߠ_@4?-5"(q'ۀҾ :1EOM]C-@.>̼d*3+g21 s` h)Lllg ZJr!)to{,pFzHkmж5D-RR #toB3CwƟdau oΒ!6pvP>}mm7HyBTDY?~iYS8˛ː\M z_ZucgcrVYMeɾԺ;Gf S7*Bó;aF(YQ3"5xf0Mh&VDC" ybpIq%\eWɤZ#dEk3rZxc csLA B~&)q{A+<ڤT/=imkkĮ ̸v`> x+Xp82%FZg}L=MO8ݘGoXr%Դl-q\>9ֲ?/-miuA˰jw9GOgM/Dk;^ߓ ?3hrEazgb߹*b+bU$c /Q-Lv~b:taV,J#[I/R~Vdkr7AہGZb`wI 1x[s5 1.B' Sp[EҋB2<^1!?'񏞈's (ֹ< S}(nhvqD$|t`>!z#5ߤ*pԞ# j_>JHD#OG5 ~:$^([ns[TKXx'Զ1V]SZ- NF IQ0-f :Y ׶D4J|YQ^0tOBѸ=B,Cy!8 z%Q5eĝ;TyQچ@\m&h[4qV!6KkJ7T5⎛ꪈˉgZTf1"y= !RBABg,?new>1u #ϼVn2Oy"uϰT Z[HA-86_E6qO@0*=wW2*y݁B<X|IvQ') H\$cOVe3-bXՎkRIMB$ܡacv@&mbz`!bţ &shG czicHnM/5ԧ9Ϯ va4ɢ6vv.{Z̜Ų '$Yb7x; YO}{ɫ!YQMMGD;ig1NBUyCA3-ȉHxUX7DnIA 'Bc':V澩cc:Sf2GdOm[DTDFf)eT8T#6<0pdӼ^F)H P[NZĩpha)so CC=KSSLeAs7f?36רn)})%^q!153̴'8msL0"!Z7.N!ai1>j}fLzGGE\90}R8*akpϝ9CpM Y[š(N=jLaֻ8I0noN])T7ڶ]rfV,[Lz dF6'F0 |L -\-;o]S5O a j e~U9PPʨbyẾ92FhŒp֠Ju=8hdwhs-E~rT]X@nkW鮥+a -t]&#a@5fCpUV}U7,:t a{ *AִVEybdxFy°HV`>r. ) F$aI^u"*N 1jXq[s BBYSzA5o&7!@ʵÏP8N;><.X!|̦ |^ 0וh>e*[D 1\zwlTHpgveIg& ?JZz7fcF,9ӃqIGџ[{ <ھQ6_mf ʢ >?.Ǭ[8 {S 2FMd/n"&.|Lu+R&Ч nW"yw$Obaj ;?Da}U9qXmXf݆Ч=pڊBK% HO [ UuCAV%q2MoV$Xȱ?9E#Yg2f4Q n].JIOf]Z;QXN >WkC@,sPC$oV qJ /xZhL_&:Lb.*LBc_BݓYO"|~U {sl^y.M_Nߜ*$. f ?HOs uieQ¯:[§6-LH`|$pzfr9wIզ<;DJ6˷.-޶SdB ʰ& qZp]5#m ??`Jb, Aێ Y[ḠQmljR_E֌77-੥zi%9V Hh2lİ OpW| &T刏@6$onٟ,Ÿ`:#LCФre^uw-F ZHÉzuo ULJv)E60&ٟ-%ϩEL+<`7]J7ӧF̛Q1ܨ(!n7U0Fi?sbEn2xi]"umȝɚMzHfI4o o5"`eL҃<0t5w'6oj@15Q +DUݚbzע<#aڍ qG/VbˀS)AT)ۈ^UB3ʐvb6C/n&rܓaCdZ)觋 Gixę`MlgKSUv}!cu\3gBg_;,6m )&ɭց4ÓQ|h$攚gaC-ם'.z7 d`M'-~|ĿgX!Var` U5BqLS򡳝}0'+HOBpSbOmP҉$#gz&c:yׯgT~ cFv$~(r.OAl^R =Ak H 11wsxS% Yr% 3Ķ~HS(={mw!=4c*jbaBd#A3bӑ5q/'/So=J5e':]{8B(hҜgV%(znU8~ ӡIሢvB{AIFί77?\P5 <H()ٜb(k\`Ɍ?SA";S9upBliA<1K'[-HEC8YhKܹ:hVj]RLik /ALݹEV禰M\,=D/w| \ 9_v!0>܁fL9Kg Bшh`ݫKfnḘ9"|kw]XC,tSŒj4w,2͆nUDf8=L&z;+֦qg_D ob/AShڴEfoyk{]%r#lLӟ1HDhq]燭P1gStvЁ;:dߏc5U8+BLz&\E]~Z ۚ+$bB5WyCm4^#vA'/:oFm#P٩<r'K4Geagd"?\9UzBT5"B%"̖}2Ff:bmPHh쪜k{0L#]~gRRaJ]Oq7+Ia%ƄH,ܹ s=t= ""a iSp+x*QB"rԐ,SpijE a_6.yYd~9NUU4&uo0݉,X7ciQ`9t}_udg~E^)ҁ 2tpx|!<~5-a)lU!x9DB!-)mr,Ze3EW4CsW HxM Ge,1\'$gJU$6sP~U/T5hJ6LH)]XM1eKܼ)cr&<ɪ3<7LFy@ߡ|~=H @8iW&cլievz,.?.@$(ts%)VG bR*-\վP;,Rʏ.U ǕCjNuZ p;7Es K@250Ghbg"ޚ*җ!GXu ljW|Y184b56hzu|< P\JzaZ~ ^ oVrX ľ$f_uec#,m:כJn;F& g1`:dnUj 봁! '(Q /l>[uO7=o,_3$A6S֤B+Ol>e F/gT} ]Y˻x7 n^dLxljPN U@ktټOT~% ?bR| Ǽ'Nͪ ұ:BmnX<.Ũfrfo]1Vx' ~bD˙|ahR^Q/?~]%hAΞ2!Oҟ^T"=7>w %` TbL@؅̒7+0kBgY-iQ:[Rϯ[(rpeᗷ|᱁2=VUoQ]cWHR]{F,ԾRbV~H270=izWO'oRRpģ[h#cyS2=^V"Xz6n4Qݤ D'x^[N\¯#~}cͫ d : ˂&zw_7[~&]die8(v1l$g"'{0 n2#vpkiwCY$$p zItO H.4/d@5ݎ Xmr_lY!cMVBK*WP(H\ա5S۴z)V@;rAa;ߘbu„[3]?; d_<4+Nr 5A+M%'eȴYM'p }'wq-[:c5zFfk^b͵:A4*(neO4'ZAӌQg(w5 ɾ; WR`C)ju-Z K<"QJ;>`sj[w" WT`E%IyyuLC/il ()ڊ:j8F!~0e}?sK?N0Ȅvv&WxSH_fSvݿN8]oYyuˣӦoN*!HQGRm,g+u#0IPs<@&U~njgE4A)1G0eETxjxJh:HZq\fyu?v~2)PG z\10CǷ3NBoϘ#+yXV۶!T{>}=/Rĝ򪲷-I ΁+WM[A=x1,dh{<\T|z`yرA tdjbǵ%]q\y {-Z苵rY_>[)FtIYVhd˿ƷH-aeqUx_~x `|.^c }:͟CJlKS h1 FΡaJ(29Z9c. \zgǑ32gd9 T?U3J4?6'5h:pS1~+{_YwSНIkRV-SuNj('ڦ[Gh%‹GyCm-EcHvkR&[q7klohL/da_sy(L}`n! s6='Ȱ|S[t5̟G*j1ަq6t$dah]<ɤZʮ<$3]3 2tFpӴܩd= o:}$GzuAͰYؚ F)sZf0Eda\@VGtY"ڵ1\㹻[erȣ &/$L(7e+T΃3NW:)D2]QbW'yYՋށ?Gqև*l \T\gZtn2t}!藶&bc V`#CI5͇lJ~)+0.n JwH }r|"\|2q"]}'SeԪ8y[o{3[`vϩ-A5Y&ǭ%#!|P5=TɋN^ՕCԎiK'Q*WpFEҾY%&>BƐ{Qs2јȰr7*|`@|P䛽񪃦ȜrpJzhʴ=W>rhqapNd$V@y4~*T- Z#?>T^3'av*AѱGcjXɇ_)wHlBXxYWڿS){_apLhC޵aGxm>*`:n'S-"-.*u5|ם/+p oJ~`."'@Rq쒋ŎkW cFsb& /^t~L*QJ'>k JB>>Sɶidod+eMH)]3'ך': !.:\%1C[U),rY,3"Mh3, $4}2mq-mخd%K==ZC/2WVD9}\l K46Xn a)Ld#Miٷ삍>UPX̸5€K%_1ǢS_XY9c ߈^jBhV 8KcP.鬛yVƄjMq[iW֌3IwV/=u_nFN! O˔V6"7v =qjz:WE@.?@-`Y)Pa Ken,h>Ϋy& jCkFhG~:2,\ne.-2G!VYfc{ Qdlx YӮ Hg'8SW͛dTK'LiDѮ? ^d8#wU/:W:rJ*&]G_UT:=Xxn 9S$C=Xܻ Z""} r |Ծ2h%H4n(ٱ%lo(-hzlЧ/7#ܾ-FMAC 6}+[hBh*И)f|.|a~ߢYmm Ӧ#d5Js[76Z3dn`'n5B VLQ]jQr@>GO`?L.T^K#L$ixdR D~';v[q.uA\&phsuIh(EvX`CR rScS-rUvBi >rGLHFc4#Td z*dvFYl"wΰqpƃYA-KښX6v Z<æ(Cf//H5\/~k3v`Iyr#6qxelSoG2're5b8t꾄fGߦQg箘R"z_X+g˒XɎjë }:JF6 ՓEJ3bYոRp vܦ^q'-D`"( `P绱e=9H)#ң'% .6i JabW &NW&9drITܫW &,˟̂t#$e3} [ lq(ڢ~?[(9LVLPzF>I*(U! g38/JV!SD{@r8e2-!Q0`։c+]L:)HK Xnf#IiBgp?Ik30+Nҧ ۼ6n/Y,HP7`Zx5J?qR,8ZDܐ,+8(2@=ą%yi}=@DTnBahkԼH| M]j_:q[`=+\~'(F@/\a̴- sϦ)r1ު|Qg1o hehYcTk {S硻cY6Z$Zy *ɇ4K58AK_j) Oj<s|q;0{KF, `-_@.Won|3yjM>;@8h?^}sN-ޞɵzƚSSMyyH@l~ p\ʃࣧTg63$ǿlr=z*Uxع&ޚ¬]'[Wnܧ}\=D6Ucq K!=yY`&$.6jXSG?*bcx.yjK+9t'LXV_8uݣ쯚aEWq"e_3^[犅*n=wp,$cD{VRN|:qy5 Ig{S1vA4 K;^teb̢4-/g$_e/\C-ws-3x=r0(<gE]3^bopkikB uU7c9a_9y>eȬn]ĊX.֐=?w_`:L*C^KwFaΟ:g1Zyeiφ8IUP=GL5ǧ~lCU\l-D0'` yfr[iGQ_3JlS?LYacYY 7WVvrLM' ,K%r1F!T32#ۡox >/^x(m}QѺy/BE0ݮ~{`o:#cT?Q JzU3q#c,9T^EWY=GHiDB读}$w£Ya-K RaMEaW(ogwB/<"=@ڰu 2GRg~iv [5ȯ-MH+@StRmY0Z94TQ,hXIE&g\2BWm&RUښY_TS#Ѽ2PX jR) 6R(|+iE2_Hʊ;sg%pVᐅp5\qԎr, п_(W"J7qZ 3T!:/kXQjf %SrCS;l[݄'عԊ0.ȂGQʘc=6:SWX̹EΟk[bV+'Y9 E^x#&ۑAbhZw5 sW>>p/tYesT`3DL2wNO$v1 9)V(?;*| _,82ick"zwYUf TPwO6&Rt姧ԿT7Gʬv~z@GCnЏ8*.f0׻ Wns;l&I68ʂ}}fP|x2qvORn*H8]M$,;'5sRēE(rBUNZ+1v .':+|ċ `ZיGt΄Tẃ.^oD␕Pl.Jn JپTl@1ݞ, cRhgosIʲiM~zH/\?$S`W_)jčFE'cPL:,G ˌcabt /`l&wl%’!P*_dFqC!dbe/T[3}.~4{PS%<9paX az:3v "`g{0GcXaީKJTGvw۬" v0AN;,91PV׫W!NEDwKMZM,=RY|oAT&bȵp:VpVL j`Ǥt^HeV%K,_LGƌ.~_21i5'qn6=йurih[+xJK;@2ED3M][m{;=ߟy6Q@1&.bk^MH*~Xl4<&E_MnbI=a6>=-; -_o'k P{xe{Q}ګW Tk!X\ i6kEE3J^8&2x+SXd\ /oE؃_zk2 .Lږ4S5nVַP1 A̓];ֆfe*a%(Q}p d2q])nly )m%n gdtaIk}|C=ܟ8=h N9=q+?)M aKeG_b~z4ۊ+}fJF_ ^MbKiD],v4s GhrBZ9 Lf,:<@̹, ȿwɾ AxD x%@ PHjJ;MvO)qh{Pm:HzǞV ת~p&0RP/ ^Y}BIJmڿHzV:3 WQ2XUeaji] p}?AbQ[(Opv]kfp\J Zi.^nI&j[~KԆr8 R(c4Q^LóϕϬ]xEF(9 >[0 KT֍6>|1TjǛjT@V,{A{vM]S|]Q}GS,"ފ [:u$;+" ;nyE4ԧ2%%8Jf+B|ΗB  -^j%`kVf)27Re |!i"EMN7mi`pvx.GMa9@s#;oѲ]l1 N`靰2|F&T-"0J"| O& CKJi >Qܠ:2Z?1I$$Rc V۾yǴ2o "x2DT_otc(|:_ ]Ӌ$$Yzi1d fD`&6 E߼S[ +Ɓ۠h7+%˜2&Z'K ʡw- fXyhA& y>,E"TtTOӰjڃ_ 'jr# ΫZNBg;]gGUY=YQE?L0YK߱>Y,ʳĆ*7b(b E9 EI+HlRX{fۢ)J2t/ W]ieJ0޶]\ZUl.ڑVtmt2*H w.o҇:\aG5 C__6]~^y ^QMD ;%oV8+sW 1)\<epi5:xɃ0x[PMafI*Jbh$Tgd-Wϓ!s`̚&F!uW[Z В@đ{-ER;ůG˅\UHg-ſtE ; qp;;7q0_Guߝ;4ٛA¹ıb1:?9UPRk,?p$?y;:vH_;֍BJzuNw+'wS7{Fy~y%:m"G*dJFN՚l}ucgMu cGJC+fu_cޏd ]D:0C9Jn.=8Nimz*S蝟PHnSbY= #_ ٣@ ;-O j_ڊU7_,Tol^PIS}A/ff%^(t!>,h)8' BezŨОKKb%uxc-Doϡ>|ĥJ_#j)䷋82GRٰ?qmJF.?7!0620츹N0C:MH1[cXqd૭Y]aWvCw:Af_6q"TZo&'8LOd&O#"q_ĐX?Aw9_sMLRψVznKmXw'8Y7ȩ,kwTͣ?.9wt-4TM~:NU,{=\E# }b\<.E9zIzGb DMVsTqKg|p_{JS>AGUh7o]( S|7 ]rQܕjle^6*&aV"~!ejfp4J}W*t#N $bOsh hY%H1U)0<"A!FE弞o~ݳƓ טn[ }*K=C]t0Dᗌ(}S%nj2 grOA+BĎ;B@ O-o :{x=]LeVr-t)%p?fQ'kˡ316NjmMez\\{d,u4fuFŨibD*#'=UPxe+!=\15yΒ<J#q$ttrTN1b]oݫuw YT)9(/xu}`X+Y8Y!zy;r4y T^*wZ&G>ݔ ,1PJNש,A"w Si 9~A> ?:4C4tBS]eO W = eWa0H^JfB`+^;YJְn3_uBQSZbMҲ*"7SƯ>o>plr2:*A&.aS+~s|q{4* Id5p,SQpsbpU a5"=HXðSf+5VXw,WPxAc a[/VCKӪ_|%lypS3Ur[8tIO#$HXqFSKy%6-kTC|6ZɂZ0ڴz{7f,mL`̬rcsYEB L%p7tթ!sZw.:/ɽJ;/z Y,JcգF{R^;m[8 8}zD`tQR$@'NRZBhv+i^ir'odxNoG70U.MFC у\std$?q׻^*z~Q!8ns(ܨ{Ak5MNr=u1+I_G a" ߶|K!!ˌ3B܈%bR`xz%>Y/cV7SsyOuH}$V2U04gZvk9IFz U)Wv}r+zLoO8uB~z:bpPJn+vf5/Lތb$BO }Ew:#OĚ 7N?f N^˶ -0ӲbkBj/j^,:a +ֆ  \ gfm37iC)/. Nڭ^*eNtRҭa.7_]bџp 3-azb/Gnj5[e!%JV߽CoAOU*h)"d=R>!Stec(/|ϔ{OYmr姥l]*^ 1cjUF:=|޶V㊛kUυ̭St;1m]$Q=PDq}Mf ]RlKbxq7;Χ~5O<2)24FfeDVɌ5S`U3ЗUEfGIO __N*T*"sg稻fljdjP2SjuBT[]'_\'48g7u΀\-:#*ցK6%J-މY4ܽ  .5|ß ] E6*Z<`4n-#*e?UO5kŒ+Qz 䌅dsdЬ[ػ@wB8PvAvnxJ/S_}FCv.˝^^ o2 oD#]Wԭ˒n:Sws`0P-nV-nj^?%Qzo<qwUze2+֊M):ۻY#$S4/L{UŸIأwXw£tn]Ņ1_2-P1JN*$jܷω(!pdm~ fptxxL8Ӹkk-ݹ33Kۏl&jfk]g}^o3c~NS ,P =m,5Lj}开r+.b8`1519k.H>sx |s ]>5=.`xBVBfFP; j!]\!Kt#$(9Cu?p|2m YR帼*,MHg8;Uj@|b~Rժbൊ-ך鯦|pZözV225>Ҡ7PL|1 ʮ ޕWj_v5_kOV/ OoW3. 6OHF]rY*=D2KD3d, ͋18Nm8-aNXUn_ι\S/",ӒnfPK;Q4[unBY}CY#45ϯL[eQB_ '3q/u*ec{EEwk-=&,B\ D`d~i&I28$'( o"j.4牾fpGY>]mSLb(6<,`|* f9Bc)ee}T r))+I6Hlkt+ϪE7*,G rdDCe-GG0>S,3CQ `vSpV2WI sQTK%jT=!g* _POƣCŁ+`"N]=@pbcFͰ<86.܇lw4dDL,Q8^P5!#A f!w #čg]?N Á@hEcm?)HMWbKKaaXL>I\FJ6e4OQM꒧_bY|? Y8LEmJڈ+m=Iܠ<$%L*Gn$M XxJWɞ^|4PNڡ a <.o4' m+7fy5߲.?w1=ojD)W&h{T,УTKgod$*L.)J>*d)Y5MJJwS? (̆h L'G= ě~@V8Rň^ @nߒI,_09+Enp1%dm 1[B:f:&GsgT5s2ֺZNec˜3QivL\Rܘe_uI# TWTwf-7ˮ U7Te `$Dp"a *_S4W4ζJԧ={3LRAQNw1kʪ.uPB~:Ցz{ n쑻)S>RWa^dg0fm: V;BZ7{`| .eAs[r)*wN|YJH& w% K EL,Γ;=[ H5^-Av="5hewIu.f,aTHN:ɸ`?SgV6ڦ!kTQE0ɹd; C5鬷OBNN7޽/uQlJZYHlk#%$HCyJs0a 'U-:'>ea5"i/J܋`!oOgr(DuRF?cFgo}*9n Ԏy21€aFv$GmTÕ(6Wvh/sE˦$)!YCK)|0Y=|$:;+<(Xy~%B VU6G'8 㱫G8M}9r @4L iND=gܜD2,8`F:^E[!q>YgnXdt% ,cKZFRyXWE$u@a8T6Öޖ{lKv*p WUe&2#"Y's[GY3W[|+B֪3ub[L }DX"D8ppJmG|"aine//(|0pX'ygB;yla/ U|^f,cd-$^4{1+ mj5K Irieݩwd*b,Q3%CrSytyEݥ3F4mG(迤|A ZhLݓ"4u寚[ I7_]h#H2a\$TSc|ƛ&%zxȈ޻9li;A\b 4 u~ta)+my i88M#ºEd8EW8K&7[BPvMe9!vҮ-~eNz+^D*kGݓɨlF\߷/ xIE`N@Y153hQrlzu@̏պnAblYs1R19 IyVc6)+=ab<\(SvgR0yOP$fVy%k%e@v8M:Ea"N[)ڐ^fɐyjE OKh]䟻i:Uw.IoP)'r\!Kӑٌ l޺o6C}Jpu_LQ{$kb4'w?|$%3]$\CJ x/.rB?z .*δh_"60K0=*מDׁ_r7hࣗ JA"ێ/JwZm@l m(d"yB/Jd WM~H -Sl "Y+z.-YI~zWONVz}Pm,g#=K}q'Ry*y>afvg@e,/"c&۾'Kd>TiOY39H4gx:2ج3:>שA$A}; 0*iy p/buMU7EܽĜvs̐ϺvF'~BV crtRHNQ쵇Ut6"Cj<2ATm_QY1%Z[9Vp,n=J<񕮯{g i_K ;emN|ґ474E8~ɋ7c> ԭuW]"+T7WgP7xȑ4"MװcّoJrzArwvxS5V AKGX "$AU2W阷rsGR?O\d=pAxM?{?pG3# DGΓJ/=.cƛ 0oA'&;ΦWy)ISm:S&i>}&O+4֯wf#M2X%rQ2Pf3еFyt̘`#B +(OMB1BuQ" L1GA2SĮ0pj%A+1pG'!(7-Q"ĒAŘtv=/bZ{0`萷s`Rs9AVAJ>3 DӚu]`NDtya@ 5]c}5XnfBe> v`ҡPr@I?>to ('"F.-Դz^5&MHHc@?@\żHfyexQu| Z0QFvFmz!Qu F5؄QpketNf9(QG5RU6۱t{p I6sln/(tsxq'[w0IQam)0^6X_+QR|'= Q 2ANdvP?_\~u±>Lunmsmwp HOL,gQh&7 QJYyc!6?_! #:lk X ?iÒ0W-'Uê4BFvM`Fk<ߌǰS.Brg€/KW3&PRjE{XtTm}ƀv8QRSNOO.ҹՒ22qH{iy(!r6-nP5 JIe)ԭ.n~u=nMU-8'sg'Rn`CKb`v+ߌlo! AT+gֺ"UgXm^y(:w_K7]0偗+F@ xN0,_X'w4C P*r;)ZJ//7/ xlXᗡ˕\YXpqt%Vvnzb9 (%vRs 9u"5ϲufo1MG!$W`JW1/6erw[|BY !!=z L.aIэ?n(RF$+(R~]F_ J=[F K'ُP6B(3319&}8,A s^ W[ձzdP)9{KQDوov?:t?9'[:^/ J_T "nV*l) )/n<.÷Tz'1^Ӥ)ۅzsu΄A0 ,ɵ$B\FKllZORIkjM ٔNplD>0RJ߱ dc;|Th+\ث'$l3Kj.쑲E @(3 YMnKUvSAj NX f0^pmZ˿XGѫNp`$y0MVoSm7񫮼ehR,lK30Qi>"LӺCdր@aۉubc.#HɅ>A 4Y<VbaٗnaBAM f1L:vg_%6 a>I듌t9}@G61ͣ'{E#17i&X\%ֽg/dv9kS mo؊N$91nqX!r:6J>ܝbr,.8B*$K_7r:SDC U#AOG{ Y1ɱKr1 Իz PБ)09eGZM>e ?],P@&Q>.jkGߍpf$=*Vc^k7CLAn1p˵o#1&ege^F%8.EңUʕeMI?}}Q\@D}8E|C;΋nGh.p=^."c;Z{Tók]BH,gr! !681y33$yR6&c=Cn]Sv[Y攢fn^4=-{o^*'un@^/ƃXȍi==}gZZKR~ iNb#gO?߁Ttr]5R(P5;v:bU 4FH:&z~&L?O۫cP&/hFCw'!~B{JfR$Ggr[3o^&Q=OKvm9p_^ @nJ =I1ZXAv°AZѯ2J|&Bgc°%Ze ⩧; 쬼𾀲B賓X9\T$/iZgp)lQUt$HeŦ;`¦mweu4O̚ϭˢ٤[H"Ȓ B+\G򝎗j|,3Yn t4@+Ou:r*Ìm'`ۺ'  C sN:" ])i@G޳9 [[8 =t"o囝G!n/Kϲ@^z@/tagZ^b`ܵ2F*Z$ [?ubi+vЫ57͞p:"I!/roY|{L8q$au\+d^ _ad8rɶ78&eS(SkʪҦ*g,*/{IF Af2 I;0U!&}LX)nHl>>cBZ7Q<\"Gr փޑjnDs %eΉ"zک0f#]`ix @lI.,uOLhu3H$;Mb3(A1p 0 @,&eZ=N?*J4 E1zZN( XY(,MQ<Ȋ@pRϴMPQ%,DbjOb{M]P :af)KѶޭS> AV2v' E#AsϴWY3v\:19fQ(3{*5r[֒RK)'Ji)5ChT#db[o.ќ̴׎6K\e W% vmB>I-hiQ"td@Z h%qeԅ7#Is5SM{Xf$8dshZuzpEq=Vm5fБFFLfLÊ맯˝lU=E,Ab|5F^֬5R@\x"*Y9ݕ&J37i96j8BIf-Z˞%`Dt8.248,\0[IgvpnXZe2ھzڸ9zFy|\:8yA _uΧ0 ɉ*tѮd3@W\sq8$U'Ir[E04]m$kB7v<媹1WNDkP)+n9SPNZQV: U}$ @bT~} iѨƖbIpH5GXnN8|92dl~mϸ+A JxK+=*n&ZV͌J;bsp#Fc³ ie?Md(;12 ~7nv'N$1eX/=1=&T<[D9Y)xse gZ`ҴiZ 2!v~5y>Uu ;!XW;.fHpUp傰uSV,u4Г;_-ކfXIĸ,pIMX|ڥd/Je~m0p } ,:!m8.hsbXQ]lulc#91O;IA4o߷vXrp+T(3'0<4fveʜ6ܲ1w#}\߮>bK'8 ?4)fW'Cv.f7,XYL\pt0q;_*1,0+R1=,]XXPʤԡVYp#s*TFO0 ~¬I}R M! , O7xz kb_(UB+< JUʩ۞QDm\(۩u.55(M{}-~&B"#[lOWzn@6{J͐SSZcgMx/ˆy XO%[@5`wӋT @Ђ ӗnX׀ _;xֱe17C*ٸGݏ|ʔ[a p,2;/ȇ`0aיH*Fh^qATIM/5(1ZyV4k&oσ3}Y#&w uR hs]lS@, (fr%SxgKxbWD^2%SSKKaO|5؅Fi/x~A4j.reYZ(Ǘ[tF13$(z%4Bho^p>#GO#`b=:_r9'7Ӑ{-#f$b^}O} }-OMZnMjd r$۾@xnJQ4Hrl>k|ǢõAft֎~!n*f DD7#ڈ P RA1:_wg>k74pYhn"$=@B?)`8i6YBLxi?>w YbL0!ue:*ߎ\D*[Y:15X,h>{K]<(45^s'6B4=''D&Vl5]9w{wA"3EGF7wraW4R`Ң3qeLU7DHc`xA5kDP dnd^"I3SbfB\&v{U68 ڌn0Vz`ݱGTqrU`II?| eNCİahd pL(\'Me3`# ߌO|i|B8\#v֒G(cߓ_)tAx^ZȸCsPzDGQBEpɩ 0t#F@rAٹpR Ǐt*ލ݀%-h~cq"5)zE2.9ԇyCTP'Q6%Ԣ[WƂV [i`*drG1R<ө\VYBN{7v o*}hHh;@O7 ,$^"oI ~ ,3ky-"Wx.Y^X256ی xXF)D & /c3ma/[e?&ΓHwܷqɾWdkț^?:&бKbc$b|;D=Vu8 "'GxR5ൿeg+n ћa~Ç/LfD.!A0'P/ɝT& m- JVExy]$5Y>TW腧'=4 Oj 멦R`p_}2hZB_~@2V:xIsHd<`I >?_R/;" ׉jbށ~TDwp^yhh6d;SІ!koĹc`j}d :dPӛکjgRlVEב.VE7 ׎[tO(?sskOEި;,O0%NCAZÚt'=6 x9tK~mMy`f P"6淰οJMqw:0N 0k>/lܘnqF]b l]67W\o.zYź&mr2⩸Yݤ"GJ^"Ź³RMJ[y5CT[^PVjRl3tA]g8k.8з,Ci'v2"å[w kp Uo鄵P^W~d]npxݏ/TP:D;GIa}ΩNB}Fumb.w$:`-@Џ|djm76a I{AIΑ1i m/*` Am+Ԭ*^-8ǕV7D`մ7wy kKrஂ٧$ʸ\SVu7s_NyqE|g=og唢b >FJ`ڼ_4Ά3㪑(;"!Y=XP: hiFGj$eL>:"{ߢpK{e#t>8>[0D R EmeX[m 6ñٕl a/&H3ܪ l7C%?Cѳ2@"mqv?~?:r 2{Q>E_W%#ݰTt75b-Nݳo9EsI3I:.[a r ·:yS"= h#1܀ 'o7~$א6g3 xS`{SaD\*3zdv, @^_$}XR$C$?ƃ8YBʑ+RC)e#%@A#Yg=ּi$Ce_FMZԋ}R̹Eχ`m1)uHӴƉDDT;T7:^/l ZV_DOĜ ln5+ܼNhY5-CV\:h| ru( H5l#;:DǙ2LBذ8/A@; g,jn2oI"u2R03;֫V#v'Zı{+gx 2:ז6t'Ok$׻(Y+[xU=j"N.eDW 8~RV.h?ً Q=Q C=SCI]l>X}*R1}cCJԛϑݽqYӅI4OiT4 q|sԌ="}mUR67}aDȳ(=y^1Jn05ήy ܮbǎM88Jhtŋ6yC#5oz s00kқkY1Aes4>A73ߠni0Sl,߸v^nRhGT XFpT &nwxQ۩mSSH/y/ *E*$Ñ?9$id%tY?f[@S\J]d3}NX2>{ ?BxYC;1݃5i@Jpԯ LF]Kd<92Q*Oi} Psp|,U<x=@,3GIuhF@9³HՏ??ug6͙ 2a7 UP&?H@_Nɨƒ3)%d|Q,$-F)bBW; l$ JSҥQN:ܠg)T^VhD%3( eHϥ** {Ϣ7~qVf8 }<(82dSPoO#s; ͏?~2A!P @ٜTIIr%>f oA y¹\XozlY䥍tJK,ÜO08c(sLCnfؿG X6K(qyÙcD F^n).C\0GuUU'(׆,oI Ħk<';}"V^Weī_;P&l׿o7g)|7 1{ ~Ȅg3,LN#St5u 3˭ 'սL^ӬM͡uDq_Ş+2_2ED;+>O;@D(D5;"DۨlnƛW[Umy}-jsLN-עR\,hIh p o2?XȠp5 4o/}1=D%Ote_AJiB yfUOH#I'%s RJT%"G-]1+铇HRnHI/inY:fsZ{?}#㔒|Yb^|qY9Aؾ=u L6c=NNSgwa7Nf72 ̌gh1O5SP,Vȇm+Zgb^_hE s ҃dT1ǩuO|JLov OϘ%&:EAybX{9WBp>kte&W 1@+87:ւh%Xz8zؔվۧ@\ZqkRat`< ƣTbVHU·|&RO嚼6_y[ I-ѵ>!;*%SF_oH{mm3 Lb(@TC_8coO ӈ?Fg8 Fە(MF@z _3)`5g5|_feXDȭNׅ{[p]$AQ%\C7;݁A}|8!;BazQm4[,o;-vܪpݶlAG0%zCk隑afթ:Rna9DއlcJ?Vh8AxUz-Agl=ӐU'Go(nf wS'^oOe^N5Q?wxR",ɞLwD*tgD 'H[z-B]_Ru<',tl4%\qߢ-7ODbZ I!E_enc%{pǜ"`,S;u#[p Bv8ԚL9+ YE4g=ǀwWQ[=xWfrQbScr&oTv7>1l2`rE׺):~ɜV/0E{Mc',EiOZ>:k5+;\ҿ&cE}nd1p,d _n+F zPhr-[ٴ[>&NZ elsqMQ"%:@u(S7i?4IUd䥎}U ˿\E1MH"g0[gmcCpX#+j)2`PhVBeR?x)O}N;Ӻ/Z[9EtF,>Ⱥ}S΀BIIE_~]|" 3ZwԚudN:6G 61aB%ʤG8Y#@XIKqYT&fӖ!teJ#0[X.%ʈ?0=~9#&*f#M=$%#_mie/n,jHE #~`>)q=4S:t]zb"àr' JN>cQ琗VϢAۣ^cTA1 Ƕ^T_ i{6sT4p<5*|ۑ Kc*XC PJ[)Eܢ>/Z A@r  IL՚>%vmSt ݼ)+xRgw\=:vk{\!F=zB(=6ұ'M,~"4 unw8ovpZ3`V8BhKl.G?6H0Ufz,A5Q[X_5ܲ[-FF\}v{66ogVV>0kq$ {#u%z_f'Uظ4Ȏ}/Yx>} bZӵT)͐2鲵#.P}iX!qrc#j'W.ձc勱f`/R8Ep_g[.PW=I[i {8/Io> ?\F&e7O^!NIEon 38~5ĕi6Fi"xXB~ QQ/=!yv=Z?dc܁+{=. ){8N4y@aBDdAd- 9r7TCVd {A\7]y+EY J$DtJ\e0$9 ;k/x%BSi1ݐA @jk*@Dtج)AI5k`05|Z2ܻkT*UWoJbzGO[t?p{ m S{dvy[jj~v4ӦlTSd=oHO}4$`U0_*pxFMWjF#nHݒoj prHd 68(PQՔPKx{\^ޯrz7f£na;0l6jmXH&#2M=%R٤׀_*^l$=3/2DH[ >Zl*ƟEG5؇ 8MF".!PB'lps?2ؾyS"Jk8V¬ގa:ц^cRV`XOYjqe.?Y\>4d,ˮc*(rګB4Jg]hhAT<}_4[cU; D/~_Dq Ȟi!e<DDhGɮ+S'o߱}³Z>﯄9b@+A@ PdtC826!U4ԉ؛?:i OuV3ߥ{9pj[hSfg4BY_ԕWt4! #*̽R'<2vQeY %dfWɫX`t'W/&"oֳa>`cB8,j0>6"+*M>SiyĀ86=^ϕ+{V3|'H3r{hC 8[ -p&9+v59Ne/CI-Ɩ>;qHfe8$귞>K!lZ6 M Dϱ˯RJ6/Jt0: +`a k]>6#ǝ8swDJўF7KM<WK kpT ۟1T>0EXp.T,{=7몭 p sDJ0Pomp8'ZV]NYy3?: RXg)\k~9{@?R?8 NJ zq!@5&W-{{%>Tm3`z,TxvA0w zPbSɻ/.]yRv[րs-2d=D)O.l2r8qY:KIpEUz),wU` vA!3"K?^0RTrѬvo-Ŀn O'h$Ϙx{E(CleGrק{Kbv֑0\9bѲa'wICFNGJ|ٿ#D6B(u<S1Ф\_t ^4-R%HBiEk"d!G|ZVxQw2D;@cE0Il\ZCM9D,1B7)CڝIB#2Mrwb8zXkfӭ@dQxDcخ&=H  \ƒZI]*p$k`9 gWnEcM^뱄]:9_CB7\RHndԕ똕~u @e qb}M͚zyr@e(q#M%;}<E(I;_? ]2RPaEN (Nr:!aY"* #uBo)ur ݩ4Dܯg%eE(Ljռ7k%a:e;J]DM11,ƾZyccٸ.4}QaIJ&;ꅲIš; =ATxe5P1 3n@1q9.>2yܥ4e||3(i F(yD׎QwBak/,h@3GoޣV"A<|dWn J*CE5D`… _1xh;NF{˰SJk:w3ƟJ%R $UpyuwZ5C|4XSnQt&f0p4|tn`A)6N=nY j?}U"#"|mCDj%Q<ŋCi5pϫbT$'ƇYKP`oW/[omE]J}U64X.ksIr42Aeqk{a~cRiBm\k88*X͠:ǡX6/ld㰡*'z/T u~Xɦq86qrp?%Xp(r}/+0?Of\i~}qtiOkS:C*_79@>+kCLUY8ОU1os?`$=g2. b zXyIs&Z+Sok.`jU' MQ/e@^j!5҉) !F1~.1XmPU 𪬐yl}Z[Vٺn• =vQ yTdLiE8 o+wg67-6QWrouJ; ,*"8A4.7@m,h 둛An-Q zNS+ԟ<8)< {@?(jˡ9?E "$>x Ȣq˧kI ^EvƬ/qM0q7}" (zd*6/ð*cg0{W&i3D (EgTf˪&Z79*_C&e66Ɵ&輆gW'eNމJ"żFK}#X;uVɥ}zf%>ZK sl$)q 7kZnp FK-nb 3?R\xbm#*p?,& eiqGʕPO!MmP3Y>t{~L>Nxu-B!揞/GB)3S&`_<`s\%pZOP!u?6GG'`i@[HITkb}M #VkB@vӴ+\a$t'5g3)m+$&Q adP%f~47g|HŢW޵D.Z-a*qPBU)\W™܍@;4tos8%'WâhPM^Q.;.GS|l-\X,~_@y%,XF Cv` `.pOen oգ\:h 4˲Eȝ*po`6De[6Pl^_jc #nURlx$XQNbsg"ގO@ąXhξ"T]SԤ.D ,穘qlTZR氺_ $xF-lag·)3*ޚEo`gI~vܽWKUJ'̩Lbzߏ1EQ<^H"#تV¸xϦёiB~%3iOʕzh\*A%/@^_=?(\ 15(U(?M'}w-fm$w_ y#(&\;›oXU)+BQ~AwIycr8gu%n{c xُZSNG?xJ8W bO'!U!0;~ D{)]Xs@jW!*lgfw⦷3+rrzEFЏ >E>xA&pQqw;iUf3@.AVW^A1r(Owt>\ 6I4$PxqdzyZ<%аp Qh'iYmx59.R&O?n[hTfW~#i Ar Iبw@켯vvw~Qx$u9b vbI $?t)}w߮%4BP:64s_4`.*jݻyPO[meJFģXu;149^OFSa'{?}(klۢ%Qv%x_/1L詠tT|Zjm e>Km?ejWɸOz\P_f ^z`8lP08\%*"3|XoDE>xk sE'M䡯~7,k7&Bn~Vj3cR*}=$#CI?r$>D?T^tPe=Mx=Yg4rO~t 0HRWCjB5IDL>877V VQmbM,~r;(A"@)M̄2nf߁BMi I,3[dg+"\ӂ(0R(HnTyj"Z7y:2Z.Tבra߂ws7\a90(m)@'lLw3Pzc:ݖ +,WȚ I_UZzO9.D|`i ;'šؽ De5P:8X&RL-fi6J҃-<_mb#zS]T"oVY4wf5E3䙄ʔ0bǚV"^q'^Ee1jɾE Bfr`@^IMwdӐ 9wT##EKV>ZlFԱLz,`\d'o͌H49 HՎ< ({hh"ߺ&kS@s$[9#R#jtǯ_;-t *EK&a~T26ILPR ]=͕  *,}xxZoFO5 HV;h,얖)pUR.35W|oz:E1r5DUfQ(xZ)(ۜЅ~NlIG9ҥ(2bUtxJB7cà:}19>6A#}d'C8aEVa[\AaDw]K[jQ9CYwtINT3+!ɚJvvPkCFa<c;V8-aT蘷gȊRZ OfmⳇD.\-xچ / ݎ=+O|Ϸop-CY!FSz?>GZXi.u"Ù۩x'Qt8j*M[TW(3. n}Nc?olEld6“kd<YtNk7b o1 xp&`su7IEYxKtYRVPX uN5Ǡժr`:4~O#J3w&|GX8p}$St_T٭#qNE. d¢v" =u7đĿ2 < Gjx7 9qܴ=g9"+ UY2[ZҴ^4D./!^ĵ_|.=P~@Go,p'n5}V2<]*  Gc ]3}ϦqT*c?eN_wDZ݆i&)`bwݕ$-򇈸#$9ue`ych>n>tmb #;6FW$:݌nx]BBjyzb!뉷%ړY=@r"2  OC$4C._y2q&VJ |Qd ]_Lg%F- #+TkVRzzb8Ň{`R*M 1vͫ<ݥW}8MOi("Y1Uu(1If(Dg۽~#ؤw+a>5gd?kgW>;n{UH=!^c"=LS[4Y vpK-o #37ƪpv&}W7;9|`eZ?QbbMinq!OjݦOL1-F1#w Y} e`OGk5B墉eB\/4jftޏMq"oQ⌨Џ_b&TN<q;Ӷ議FRyHZqv4#VE'>7L)n>>PDH6֑;*ojD;KzcW "{y\ փ4B &ȯUQJd)[2ʇ.t (FM X5fxk)CӢ0Y쩳-!ډLQU:<3A:iݑX)׽9`6vzX))20N)ĆY"x\DĻ$L8?Gu͘ Ԕie GZoҞ:9u"BL8Rs ԝ %9q_A\:%F+{cD˅l D\jJN$M.+,AH-Zff b7c}vЧrXhKx1NG׋]WO->{YmT‰Jq0qσ߄V;o-`d01+Dr ㇿRÿuúlY\YuF}, Z8mpyc!i[\%{X d.YB5Mz"轶s[BA?6a`X NA\ϰxJC^vp[%)v;{QD?ٖ07>u +]lF)4iWҐ@(CpI_er4ْ)W#9ʾBnSER*z#Ґ@]G16v!(Zct&E[j7Y'm}nJ&)]={dr;9\ѨU΋9]׏<gv<~ Qb0$ʯD‰=I^}*L`i *xw ƈqU\=Q"be7Glr,fRg@+* m!˳PRs@f/|'F ( - #Iٹ"-1Q ƃ-Tq;*,G`v\~ c!BY[@=gAn}`ױ?n;ȃɺd :KBuA{kCʮs?A(bZ8aulӈw]?L nٕ UGZ\L72qi/ "g^ YZ