openssl-1_1-1.1.1l-150500.17.34.1<>,fp9|o6.\f}ocاu89D!rz}WEKT l oT;~qb|s'ʆ=f8>Sc)'2wg5jK| S UէS#'`E-Gh<_VC'Oؑ []՘HkOR3 mXŖ6lPg+1eZ%nDڭ舡TCW0+A(=0̔P=,9,uEz8l` C4}>D=?=d $ P\`pt  ww w w w _w |wXww !(w##L#%%%%(%8%9(:5+B$,F$HG$dwH&@wI(wX(Y(Z([(\(w]*w^2 b3Rc3d4e4f4l4u4wv6| w9pwx;Lwy=(z=p====Copenssl-1_11.1.1l150500.17.34.1Secure Sockets and Transport Layer SecurityOpenSSL is a software library to be used in applications that need to secure communications over computer networks against eavesdropping or need to ascertain the identity of the party at the other end. OpenSSL contains an implementation of the SSL and TLS protocols.fibs-power9-12dSUSE Linux Enterprise 15SUSE LLC OpenSSLhttps://www.suse.com/Productivity/Networking/Securityhttps://www.openssl.org/linuxppc64le,Px | / V+ %d'% e   q [  [8             Z  k 2 h 9 '.*]cK 1  L!p'D -A큤AA큤AA큤AAfsfOfOfsfsfOfNfOfff f0f0a$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.1ssl.gzasn1parse.1ssl.gzrehash.1ssl.gzca.1ssl.gzciphers.1ssl.gzcms.1ssl.gzcrl.1ssl.gzcrl2pkcs7.1ssl.gzdgst.1ssl.gzdhparam.1ssl.gzdsa.1ssl.gzdsaparam.1ssl.gzec.1ssl.gzecparam.1ssl.gzenc.1ssl.gzengine.1ssl.gzerrstr.1ssl.gzgendsa.1ssl.gzgenpkey.1ssl.gzgenrsa.1ssl.gzlist.1ssl.gznseq.1ssl.gzocsp.1ssl.gzpasswd.1ssl.gzpkcs12.1ssl.gzpkcs7.1ssl.gzpkcs8.1ssl.gzpkey.1ssl.gzpkeyparam.1ssl.gzpkeyutl.1ssl.gzprime.1ssl.gzrand.1ssl.gzrehash.1ssl.gzreq.1ssl.gzrsa.1ssl.gzrsautl.1ssl.gzs_client.1ssl.gzs_server.1ssl.gzs_time.1ssl.gzsess_id.1ssl.gzsmime.1ssl.gzspeed.1ssl.gzspkac.1ssl.gzsrp.1ssl.gzstoreutl.1ssl.gzts.1ssl.gztsget.1ssl.gzverify.1ssl.gzversion.1ssl.gzx509.1ssl.gztsget.plrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenssl-1_1-1.1.1l-150500.17.34.1.src.rpmconfig(openssl-1_1)openssl(cli)openssl-1_1openssl-1_1(ppc-64)ssl@@@@@@ @@@@@    /usr/bin/envconfig(openssl-1_1)crypto-policieslibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libjitterentropy3libopenssl1_1libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.1.1l-150500.17.34.13.4.01.1.1l-150500.17.34.13.0.4-14.6.0-14.0-15.2-1ssl4.14.3fIfIfaf8@eeReSddgd!ddw6dkY@d*dd'@ccccccc{h@ctctc[@c=qc$e@c*c@c@cc b?b?bblb@bbobaG@b4t@b0b0b)@b!@b b bOa@aaar@ar@aa@a*@a)@apa=a+va@`m`Y@`?z@`>(_j_~@_Wr@_G@^^t@^_@^V]^O@^E:@^C^0"@^)^(9@^&^&]]]]n]x]v>]g@\@\\ac\G\G\A\@[0[ @[u[u[r@[b@[Xf@[Xf@[2*Z4@Z4@ZZ2@ZH@ZZv@Ze@ZTZOZOYYKY@YV@Y@Ym@Ym@YOY, @YYY i@Y @Y @Y @Y @YtYYX@XXXXXh@Xh@Xh@Xh@Xh@Xh@XXXXX@X6@WSWSW_@W@WW(WWV޾VՄ@VVa@Ub@U'U@U>UzUyx@Ua@U @T TTk4Ti@T\@TFJpmonreal@suse.compmonreal@suse.compsimons@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.comvcizek@suse.compmonreal@suse.comvcizek@suse.compmonreal@suse.compmonrealgonzalez@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comjsikes@suse.compmonrealgonzalez@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.compmonrealgonzalez@suse.comvcizek@suse.compmonrealgonzalez@suse.comjsikes@suse.comvcizek@suse.comjsikes@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comsflees@suse.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.comtchvatal@suse.comschwab@suse.devcizek@suse.comdimstar@opensuse.orgdimstar@opensuse.orgvcizek@suse.comvcizek@suse.commeissner@suse.comjengelh@inai.detchvatal@suse.comvcizek@suse.comjimmy@boombatower.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.commeissner@suse.comvcizek@suse.comvcizek@suse.commichael@stroeder.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdvaleev@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdvaleev@suse.comnormand@linux.vnet.ibm.comcrrodriguez@opensuse.orgvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.commeissner@suse.commeissner@suse.combrian@aljex.commeissner@suse.combrian@aljex.comcrrodriguez@opensuse.org- Build with no-afalgeng [bsc#1226463]- Security fix: [bsc#1227138, CVE-2024-5535] * SSL_select_next_proto buffer overread * Add openssl-CVE-2024-5535.patch- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free security vulnerability. Calling the function SSL_free_buffers() potentially caused memory to be accessed that was previously freed in some situations and a malicious attacker could attempt to engineer a stituation where this occurs to facilitate a denial-of-service attack. [CVE-2024-4741, bsc#1225551]- Security fix: [bsc#1222548, CVE-2024-2511] * Fix unconstrained session cache growth in TLSv1.3 * Add openssl-CVE-2024-2511.patch- Security fix: [bsc#1219243, CVE-2024-0727] * Add NULL checks where ContentInfo data can be NULL * Add openssl-CVE-2024-0727.patch- Security fix: [bsc#1216922, CVE-2023-5678] * Fix excessive time spent in DH check / generation with large Q parameter value. * Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. * Add openssl-CVE-2023-5678.patch- Displays "fips" in the version string (bsc#1215215) * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch- Security fix: (bsc#1213853, CVE-2023-3817) * Fix excessive time spent checking DH q parameter value (bsc#1213853, CVE-2023-3817). The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped. * Add openssl-1_1-CVE-2023-3817.patch- Dont pass zero length input to EVP_Cipher because assembler optimized AES cannot handle zero size. [bsc#1213517] * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch- Security fix: [bsc#1213487, CVE-2023-3446] * Fix DH_check() excessive time with over sized modulus. * The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch- Security Fix: [bsc#1207534, CVE-2022-4304] * Reworked the Fix for the Timing Oracle in RSA Decryption The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case compared to 1.1.1s. * Add openssl-CVE-2022-4304.patch * Removed patches: - openssl-CVE-2022-4304-1of2.patch - openssl-CVE-2022-4304-2of2.patch * Refreshed patches: - openssl-CVE-2023-0464.patch - openssl-CVE-2023-0465.patch- Update further expiring certificates that affect tests [bsc#1201627] * Add openssl-Update-further-expiring-certificates.patch- Security Fix: [CVE-2023-2650, bsc#1211430] * Possible DoS translating ASN.1 object identifiers * Add openssl-CVE-2023-2650.patch- Security Fix: [CVE-2023-0465, bsc#1209878] * Invalid certificate policies in leaf certificates are silently ignored * Add openssl-CVE-2023-0465.patch - Security Fix: [CVE-2023-0466, bsc#1209873] * Certificate policy check not enabled * Add openssl-CVE-2023-0466.patch- Security Fix: [CVE-2023-0464, bsc#1209624] * Excessive Resource Usage Verifying X.509 Policy Constraints * Add openssl-CVE-2023-0464.patch- FIPS: Service-level indicator [bsc#1208998] * Add additional check required by FIPS 140-3. Minimum values for PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for iteration count and 20 characters for password. * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch- FIPS: Serialize jitterentropy calls [bsc#1207994] * Add openssl-1_1-serialize-jitterentropy-calls.patch- Security Fix: [bsc#1207533, CVE-2023-0286] * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address * Add openssl-CVE-2023-0286.patch- Security Fix: [bsc#1207536, CVE-2023-0215] * Use-after-free following BIO_new_NDEF() * Add patches: - openssl-CVE-2023-0215-1of4.patch - openssl-CVE-2023-0215-2of4.patch - openssl-CVE-2023-0215-3of4.patch - openssl-CVE-2023-0215-4of4.patch- Security Fix: [bsc#1207538, CVE-2022-4450] * Double free after calling PEM_read_bio_ex() * Add patches: - openssl-CVE-2022-4450-1of2.patch - openssl-CVE-2022-4450-2of2.patch- Security Fix: [bsc#1207534, CVE-2022-4304] * Timing Oracle in RSA Decryption * Add patches: - openssl-CVE-2022-4304-1of2.patch - openssl-CVE-2022-4304-2of2.patch- POWER10 performance enhancements for cryptography [jsc#PED-512] * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch * openssl-1_1-Fixed-counter-overflow.patch * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch- FIPS: Service-level indicator [bsc#1190651] * Mark PBKDF2 with key shorter than 112 bits as non-approved * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch- FIPS: Service-level indicator [bsc#1190651] * Consider RSA siggen/sigver with PKCS1 padding also approved * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch- FIPS: Service-level indicator [bsc#1190651] * Return the correct indicator for a given EC group order bits * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch- FIPS: Add a missing dependency on jitterentropy-devel for libopenssl-1_1-devel [bsc#1202148]- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651] * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch- FIPS: Default to RFC-7919 groups for genparam and dhparam * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]- FIPS: list only FIPS approved digest and public key algorithms [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472] * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch * Disabled test 15-test_ec.t in FIPS mode- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069] * Add openssl-1_1-fips-drbg-selftest.patch- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293] * The FIPS_drbg implementation is not FIPS validated anymore. To provide backwards compatibility for applications that need FIPS compliant RNG number generation and use FIPS_drbg_generate, this function was re-wired to call the FIPS validated DRBG instance instead through the RAND_bytes() call. * Add openssl-1_1-FIPS_drbg-rewire.patch- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046] * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch- FIPS: OpenSSL: Port openssl to use jitterentropy [bsc#1202148, jsc#SLE-24941] * Add openssl-1_1-jitterentropy-3.4.0.patch * Add build dependency on jitterentropy-devel >= 3.4.0 and libjitterentropy3 >= 3.4.0- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651] * Add patches: - openssl-1_1-ossl-sli-000-fix-build-error.patch - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-ossl-sli-003-add-sli.patch- FIPS: Add zeroization of temporary variables to the hmac integrity function FIPSCHECK_verify(). [bsc#1190653] * Add openssl-1_1-Zeroization.patch- Encrypt the sixteen bytes that were unencrypted in some circumstances on 32-bit x86 platforms. * [bsc#1201099, CVE-2022-2097] * added openssl-CVE-2022-2097.patch- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch * bsc#1200550 * CVE-2022-2068 * Fixed more shell code injection issues in c_rehash- Added openssl-update_expired_certificates.patch * Openssl failed tests because of expired certificates. * bsc#1185637 * Sourced from https://github.com/openssl/openssl/pull/18446/commits- Security fix: [bsc#1199166, CVE-2022-1292] * Added: openssl-CVE-2022-1292.patch * properly sanitise shell metacharacters in c_rehash script.- FIPS: Added signature verification test to bsc1185319-FIPS-KAT-for-ECDSA.patch- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch * Known answer test for ECDSA * bsc#1185319 - FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch * Enable tests for Deterministic Random Bit Generator * bsc#1198207 - Bypass a regression test that fails in FIPS mode. * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280] * The IG 10.3.A and SP800-132 require some minimum parameters for the salt length, password length and iteration count. These parameters should be also used in the KAT. * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch- Security Fix: [bsc#1196877, CVE-2022-0778] * Infinite loop in BN_mod_sqrt() reachable when parsing certificates * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch- Added openssl-1_1-use-include-directive.patch so that the default /etc/ssl/openssl.cnf file will include any configuration files that other packages might place into /etc/ssl/engines.d/ and /etc/ssl/engdef.d/ This is a fix for bsc#1004463 where scripting was being used to modify the openssl.cnf file. The scripting would fail if either the default openssl.cnf file, or the sample openssl-ibmca configuration file would be changed by upstream. - Updated spec file to create the two new necessary directores for the above patch. [bsc#1194187, bsc#1004463]- FIPS: add openssl-1_1-fips-bsc1190652_release_num_in_version_string.patch * bsc#1190652 - Provide a service to output module name/identifier and version- Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch- FIPS: Reintroduce the FFC and ECC checks in openssl-DH.patch that were removed in the update to 1.1.1l [bsc#1185313]- FIPS: Fix sn_objs and ln_objs in crypto/objects/obj_mac.num * Rebase openssl-DH.patch [bsc#1194327] - Merge openssl-keep_EVP_KDF_functions_version.patch into openssl-1.1.1-evp-kdf.patch - Add function codes for pbkdf2, hkdf, tls and ssh selftests. Rebase patches: * openssl-fips-kdf-hkdf-selftest.patch * openssl-kdf-selftest.patch * openssl-kdf-ssh-selftest.patch * openssl-kdf-tls-selftest.patch- Pull libopenssl-1_1 when updating openssl-1_1 with the same version. [bsc#1195792]- FIPS: Fix function and reason error codes [bsc#1182959] * Add openssl-1_1-FIPS-fix-error-reason-codes.patch- Enable zlib compression support [bsc#1195149]- Remove the openssl-has-RSA_get0_pss_params provides as it is now fixed in the nodejs16 side [bsc#1192489]- FIPS: Move the HMAC-SHA2-256 used for integrity test [bsc#1185320] * Add openssl-FIPS-KAT-before-integrity-tests.patch- FIPS: Add missing KAT for HKDF/TLS 1.3/IPSEC IKEv2 [bsc#1192442] * Add openssl-fips-kdf-hkdf-selftest.patch- Add a provides for openssl-has-RSA_get0_pss_params as required by nodejs16. [bsc#1192489]- Backport cryptographic improvements from OpenSSL 3 [jsc#SLE-19742] * Optimize RSA on armv8: openssl-1_1-Optimize-RSA-armv8.patch * Optimize AES-XTS mode for aarch64: openssl-1_1-Optimize-AES-XTS-aarch64.patch * Optimize AES-GCM for uarchs with unroll and new instructions: openssl-1_1-Optimize-AES-GCM-uarchs.patch- Add support for livepatches (jsc#SLE-20049). - Generate ipa-clones tarball artifact when livepatching is enabled.- POWER10 performance enhancements for cryptography [jsc#SLE-18136] * openssl-1_1-Optimize-ppc64.patch- Import centralized crypto policy profile from Factory [jsc#SLE-15832] * openssl-1.1.1-system-cipherlist.patch * openssl-1_1-disable-test_srp-sslapi.patch * openssl-1_1-seclevel.patch * openssl-1_1-use-seclevel2-in-tests.patch- Update to openssl-1.1.1l ('L' as in 'Lima') for SUSE-SLE-15-SP4 * jsc#SLE-19640, jsc#PM-2816 - Changes in 1.1.1l: * [bsc#1189520, CVE-2021-3711] Fixed an SM2 Decryption Buffer Overflow. * [bsc#1189521, CVE-2021-3712] Fixed various read buffer overruns processing ASN.1 strings - Changes in 1.1.1k * Fixed a problem with verifying a certificate chain when using the X509_V_FLAG_X509_STRICT flag. This flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. ([CVE-2021-3450]) [bsc#1183851] * Fixed an issue where an OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. ([CVE-2021-3449]) [bsc#1183852] - Changes in 1.1.1j * Fixed the X509_issuer_and_serial_hash() function. It attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it was failing to correctly handle any errors that may occur while parsing the issuer field [bsc#1182331, CVE-2021-23841] * Fixed the RSA_padding_check_SSLv23() function and the RSA_SSLV23_PADDING padding mode to correctly check for rollback attacks. * Fixed the EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate functions. Previously they could overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call would be 1 (indicating success), but the output length value would be negative. This could cause applications to behave incorrectly or crash. [bsc#1182333, CVE-2021-23840] * Fixed SRP_Calc_client_key so that it runs in constant time. The previous implementation called BN_mod_exp without setting BN_FLG_CONSTTIME. This could be exploited in a side channel attack to recover the password. Since the attack is local host only this is outside of the current OpenSSL threat model and therefore no CVE is assigned. - Changes in 1.1.1i * Fixed NULL pointer deref in GENERAL_NAME_cmp * bsc#1179491, CVE-2020-1971 - Changes in 1.1.1h * Disallow explicit curve parameters in verifications chains when X509_V_FLAG_X509_STRICT is used * Enable 'MinProtocol' and 'MaxProtocol' to configure both TLS and DTLS contexts - Changes in 1.1.1g * Fixed segmentation fault in SSL_check_chain (CVE-2020-1967, bsc#1169407) Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. * Added AES consttime code for no-asm configurations an optional constant time support for AES was added when building openssl for no-asm. - Changes in 1.1.1f * Revert the unexpected EOF reporting via SSL_ERROR_SSL - Changes in 1.1.1e * Properly detect EOF while reading in libssl. Previously if we hit an EOF while reading in libssl then we would report an error back to the application (SSL_ERROR_SYSCALL) but errno would be 0. We now add an error to the stack (which means we instead return SSL_ERROR_SSL) and therefore give a hint as to what went wrong. * Check that ed25519 and ed448 are allowed by the security level. Previously signature algorithms not using an MD were not being checked that they were allowed by the security level. * Fixed SSL_get_servername() behaviour. The behaviour of SSL_get_servername() was not quite right. The behaviour was not consistent between resumption and normal handshakes, and also not quite consistent with historical behaviour. The behaviour in various scenarios has been clarified and it has been updated to make it match historical behaviour as closely as possible. * Corrected the documentation of the return values from the EVP_DigestSign* set of functions. The documentation mentioned negative values for some errors, but this was never the case, so the mention of negative values was removed. * Added a new method to gather entropy on VMS, based on SYS$GET_ENTROPY. The presence of this system service is determined at run-time. * Added newline escaping functionality to a filename when using openssl dgst. This output format is to replicate the output format found in the '*sum' checksum programs. This aims to preserve backward compatibility. * Print all values for a PKCS#12 attribute with 'openssl pkcs12', not just the first value. - Dropped the following patches: * openssl-1_1-CVE-2019-1551.patch * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips_fix_selftests_return_value.patch * openssl-CVE-2020-1967.patch * openssl-CVE-2020-1967-test1.patch * openssl-CVE-2020-1967-test2.patch * openssl-CVE-2020-1967-test3.patch * openssl-CVE-2020-1971.patch * openssl-CVE-2021-23840.patch * openssl-CVE-2021-23841.patch * openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch * openssl-1.1.1-fips_list_ciphers.patch * CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch * CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch * CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch * CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch * CVE-2021-3712-other-ASN1_STRING-issues.patch - Rebased the following patches: * 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch * 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * openssl-1.1.0-issuer-hash.patch * openssl-1.1.0-no-html.patch * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-fips-crng-test.patch * openssl-1.1.1-fips-post-rand.patch * openssl-1.1.1-fips.patch * openssl-1.1.1-ssh-kdf.patch * openssl-DH.patch * openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch * openssl-assembly-pack-accelerate-scalar-multiplication.patch * openssl-fips_selftest_upstream_drbg.patch * openssl-kdf-selftest.patch * openssl-kdf-ssh-selftest.patch * openssl-kdf-tls-selftest.patch * openssl-s390x-assembly-pack-accelerate-ECDSA.patch * openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch- Other OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. * CVE-2021-3712 continued * bsc#1189521 * Add CVE-2021-3712-other-ASN1_STRING-issues.patch * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521 2021-08-24 00:47 PDT by Marcus Meissner- A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. * CVE-2021-3711 * bsc#1189520 * Add: CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch - The function X509_aux_print() has a bug which may cause a read buffer overrun when printing certificate details. A malicious actor could construct a certificate to deliberately hit this bug, which may result in a crash of the application (causing a Denial of Service attack). * CVE-2021-3712 * bsc#1189521 * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch- Don't list disapproved cipher algorithms while in FIPS mode * openssl-1.1.1-fips_list_ciphers.patch * bsc#1161276- Fix NULL pointer deref in signature_algorithms * CVE-2021-3449 * bsc#1183852 * Add openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch- Security fixes: * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback protection [bsc#1182333, CVE-2021-23840] * Null pointer deref in X509_issuer_and_serial_hash() [bsc#1182331, CVE-2021-23841] - Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch- Fix unresolved error codes [bsc#1182959] - Update openssl-1.1.1-fips.patch- Fix EDIPARTYNAME NULL pointer dereference (CVE-2020-1971, bsc#1179491) * add openssl-CVE-2020-1971.patch- Restore private key check in EC_KEY_check_key [bsc#1177479] * Update openssl-DH.patch- Add shared secret KAT to FIPS DH selftest [bsc#1175844] * add openssl-fips-DH_selftest_shared_secret_KAT.patch- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175844, bsc#1173470] - Add patches: * openssl-DH.patch * openssl-kdf-selftest.patch * openssl-kdf-tls-selftest.patch * openssl-kdf-ssh-selftest.patch- Security fix: [bsc#1169407, CVE-2020-1967] * Segmentation fault in SSL_check_chain: Server applications that call the SSL_check_chain() function during or after a TLS handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the signature_algorithms_cert TLS extension. - Add patches: * openssl-CVE-2020-1967.patch * openssl-CVE-2020-1967-test1.patch * openssl-CVE-2020-1967-test2.patch * openssl-CVE-2020-1967-test3.patch- openssl dgst: default to SHA256 only when called without a digest, not when it couldn't be found (bsc#1166189) * add openssl-unknown_dgst.patch- Limit the DRBG selftests to not deplete entropy (bsc#1165274) * update openssl-fips_selftest_upstream_drbg.patch- Run FIPS DRBG selftests against the crypto/rand DRBG implementation (bsc#1164557) * add openssl-fips_selftest_upstream_drbg.patch- Use the newly build libcrypto shared library when computing the hmac checksums in order to avoid a bootstrapping issue by BuildRequiring libopenssl1_1 (bsc#1164102)- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569) * add openssl-fips_fix_selftests_return_value.patch- Added SHA3 FIPS self-tests bsc#1155345 * openssl-fips-add-SHA3-selftest.patch- Support for CPACF enhancements - part 2 (crypto) [jsc#SLE-7403] - Add patches: * openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch * openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch- Temporarily ignore broken OPENSSL_INIT_NO_ATEXIT due to our layered FIPS initialization (bsc#1161789) * openssl-fips-ignore_broken_atexit_test.patch- Import FIPS patches from SLE-15 * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips_mode.patch * openssl-ship_fips_standalone_hmac.patch * openssl-fips-clearerror.patch * openssl-fips-selftests_in_nonfips_mode.patch- Don't run FIPS power-up self-tests when the checksum files aren't installed (bsc#1042392) * add openssl-fips-run_selftests_only_when_module_is_complete.patch- Import FIPS patches from Fedora (bsc#1157702, jsc#SLE-9553) * openssl-1.1.1-fips-crng-test.patch * openssl-1.1.1-fips-post-rand.patch * openssl-1.1.1-fips.patch * openssl-1.1.0-issuer-hash.patch * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-ssh-kdf.patch replaces openssl-jsc-SLE-8789-backport_KDF.patch - keep EVP_KDF functions at version 1.1.1d for backward compatibility * add openssl-keep_EVP_KDF_functions_version.patch- Support for CPACF enhancements - part 1 (crypto) [bsc#1152695, jsc#SLE-7861] - Add patches: * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * openssl-s390x-assembly-pack-add-support-for-pcc-and-kma-inst.patch * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch * openssl-s390x-assembly-pack-update-OPENSSL_s390xcap-3.patch * openssl-s390xcpuid.pl-fix-comment.patch * openssl-assembly-pack-accelerate-scalar-multiplication.patch * openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch * openssl-s390x-assembly-pack-accelerate-ECDSA.patch * openssl-OPENSSL_s390xcap.pod-list-msa9-facility-bit-155.patch * openssl-s390x-assembly-pack-cleanse-only-sensitive-fields.patch * openssl-s390x-assembly-pack-fix-OPENSSL_s390xcap-z15-cpu-mas.patch * openssl-s390x-assembly-pack-fix-msa3-stfle-bit-detection.patch * openssl-Fix-9bf682f-which-broke-nistp224_method.patch- Obsolete libopenssl-1_0_0-devel and libopenssl-1_0_0-hmac in order to avoid conflict upon upgrade from SLE-12 (bsc#1158499)- Security fix: [bsc#1158809, CVE-2019-1551] * Overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli - Add openssl-1_1-CVE-2019-1551.patch- Fixed EVP_PBE_scrypt() to allow NULL salt values. * Revealed by nodejs12 during bsc#1149572. * Modified openssl-jsc-SLE-8789-backport_KDF.patch- Update to 1.1.1d (bsc#1133925, jsc#SLE-6430) * Fixed a fork protection issue. OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. (bsc#1150247, CVE-2019-1549) * Compute ECC cofactors if not provided during EC_GROUP construction. Before this change, EC_GROUP_set_generator would accept order and/or cofactor as NULL. After this change, only the cofactor parameter can be NULL. (bsc#1150003, CVE-2019-1547) * Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey. (bsc#1150250, CVE-2019-1563) * For built-in EC curves, ensure an EC_GROUP built from the curve name is used even when parsing explicit parameters, when loading a serialized key or calling EC_GROUP_new_from_ecpkparameters()/EC_GROUP_new_from_ecparameters(). * Early start up entropy quality from the DEVRANDOM seed source has been improved for older Linux systems. * Changed DH_check to accept parameters with order q and 2q subgroups. With order 2q subgroups the bit 0 of the private key is not secret but DH_generate_key works around that by clearing bit 0 of the private key for those. This avoids leaking bit 0 of the private key. * Significantly reduce secure memory usage by the randomness pools. * Revert the DEVRANDOM_WAIT feature for Linux systems - drop 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch (upstream) - refresh patches * openssl-1.1.0-no-html.patch * openssl-jsc-SLE-8789-backport_KDF.patch- To avoid seperate certification of openssh server / client move the SSH KDF (Key Derivation Function) into openssl. * jsc#SLE-8789 * Sourced from commit 8d76481b189b7195ef932e0fb8f0e23ab0120771#diff-a9562bc75317360a2e6b8b0748956e34 in openssl master (introduce the SSH KDF) and commit 5a285addbf39f91d567f95f04b2b41764127950d in openssl master (backport EVP/KDF API framework) * added openssl-jsc-SLE-8789-backport_KDF.patch- Upgrade to 1.1.1c (jsc#SLE-9135, bsc#1148799) * Support for TLSv1.3 added * Allow GNU style "make variables" to be used with Configure. * Add a STORE module (OSSL_STORE) * Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes * Add multi-prime RSA (RFC 8017) support * Add SM3 implemented according to GB/T 32905-2016 * Add SM4 implemented according to GB/T 32907-2016. * Add 'Maximum Fragment Length' TLS extension negotiation and support * Add ARIA support * Add SHA3 * Rewrite of devcrypto engine * Add support for SipHash * Grand redesign of the OpenSSL random generator - drop FIPS support * don't build with FIPS mode (not supported in 1.1.1) - drop FIPS patches * openssl-fips-clearerror.patch * openssl-fips_disallow_ENGINE_loading.patch * openssl-fips-dont-fall-back-to-default-digest.patch * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips-fix-odd-rsakeybits.patch * openssl-fips-rsagen-d-bits.patch * openssl-fips-selftests_in_nonfips_mode.patch * openssl-rsakeygen-minimum-distance.patch * openssl-1.1.0-fips.patch - add TLS 1.3 ciphers to DEFAULT_SUSE - merge openssl-1.0.1e-add-suse-default-cipher.patch and openssl-1.0.1e-add-test-suse-default-cipher-suite.patch to openssl-DEFAULT_SUSE_cipher.patch - Use upstream patch for the locale crash (bsc#1135550) * https://github.com/openssl/openssl/pull/8966 * add 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch - drop patches (upstream): * openssl-Bleichenbachers_CAT.patch * openssl-CVE-2018-0734.patch * openssl-CVE-2018-0735.patch * openssl-CVE-2019-1543.patch * openssl-disable_rsa_keygen_tests_with_small_modulus.patch * openssl-dsa_paramgen2_check.patch * openssl-One_and_Done.patch * openssl-speed_skip_binary_curves_NO_EC2M.patch * openssl-static-deps.patch * openssl-urandom-reseeding.patch * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * 0001-DSA-mod-inverse-fix.patch * 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch * 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch - drop s390x patches (rebased): * 0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch * 0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch * 0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch * 0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch * 0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch * 0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch * 0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch * 0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch * 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * 0001-s390x-assembly-pack-extend-s390x-capability-vector.patch - add s390x patches: * 0001-s390x-assembly-pack-perlasm-support.patch * 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch * 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * 0004-s390x-assembly-pack-fix-formal-interface-bug-in-chac.patch * 0005-s390x-assembly-pack-import-chacha-from-cryptogams-re.patch * 0006-s390x-assembly-pack-import-poly-from-cryptogams-repo.patch- Fix segfault in openssl speed when an unknown algorithm is passed (bsc#1125494) * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch - Correctly skip binary curves in openssl speed to avoid spitting errors (bsc#1116833) * add openssl-speed_skip_binary_curves_NO_EC2M.patch- OpenSSL Security Advisory [6 March 2019] * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543) * add openssl-CVE-2019-1543.patch- Add s390x poly1305 vectorized implementation (fate#326351) * https://github.com/openssl/openssl/pull/7991 - add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch- Add vectorized chacha20 implementation for s390x (fate#326561) * https://github.com/openssl/openssl/pull/6919 - add patches: 0001-s390x-assembly-pack-perlasm-support.patch 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch- Replace fate#321518 s390x patches from closed pull request https://github.com/openssl/openssl/pull/2859 with patches from openssl git master (bsc#1122984) - add patches: 0001-s390x-assembly-pack-extend-s390x-capability-vector.patch 0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch 0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch 0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch 0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch 0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch 0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch 0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch 0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch - drop patches: 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch- Fix FIPS RSA generator (bsc#1118913) * import fixed openssl-1.1.0-fips.patch from Fedora * drop openssl-CVE-2018-0737-fips.patch which got merged into openssl-1.1.0-fips.patch * refresh openssl-fips-rsagen-d-bits.patch- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951) * https://github.com/openssl/openssl/issues/7739 * add patch openssl-Bleichenbachers_CAT.patch- OpenSSL Security Advisory [30 October 2018] * Timing vulnerability in ECDSA signature generation (bsc#1113651, CVE-2018-0735) * Timing vulnerability in DSA signature generation (bsc#1113652, CVE-2018-0734) * And more timing fixes - Add patches: * openssl-CVE-2018-0734.patch * openssl-CVE-2018-0735.patch * 0001-DSA-mod-inverse-fix.patch * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid conflicts when updating from older distributions (bsc#1106180)- Fix infinite loop in DSA generation with incorrect parameters (bsc#1112209) * add openssl-dsa_paramgen2_check.patch- Fix One&Done side-channel attack on RSA (bsc#1104789) * add openssl-One_and_Done.patch- Update to 1.1.0i - Align with SLE-12-SP4 OpenSSL Security Advisory [12 June 2018] * Reject excessively large primes in DH key generation (bsc#1097158, CVE-2018-0732) * Make EVP_PKEY_asn1_new() a bit stricter about its input * Revert blinding in ECDSA sign and instead make problematic addition length-invariant. Switch even to fixed-length Montgomery multiplication. * Change generating and checking of primes so that the error rate of not being prime depends on the intended use based on the size of the input. * Increase the number of Miller-Rabin rounds for DSA key generating to 64. * Add blinding to ECDSA and DSA signatures to protect against side channel attacks * When unlocking a pass phrase protected PEM file or PKCS#8 container, we now allow empty (zero character) pass phrases. * Certificate time validation (X509_cmp_time) enforces stricter compliance with RFC 5280. Fractional seconds and timezone offsets are no longer allowed. * Fixed a text canonicalisation bug in CMS - drop patches (upstream): * 0001-Limit-scope-of-CN-name-constraints.patch * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch * openssl-add-blinding-to-dsa.patch * openssl-add-blinding-to-ecdsa.patch * openssl-CVE-2018-0732.patch - refresh patches: * openssl-1.1.0-fips.patch * openssl-disable_rsa_keygen_tests_with_small_modulus.patch - rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch as it now only includes changes to the fips code- Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470) - Don't Require openssl-1_1 from the devel package, just Recommend it- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid dependency issues during updates (bsc#1090765)- Relax CN name restrictions (bsc#1084011) * added patches: 0001-Limit-scope-of-CN-name-constraints.patch 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch- Reject excessively large primes in DH key generation (bsc#1097158, CVE-2018-0732) * openssl-CVE-2018-0732.patch - blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592) * openssl-add-blinding-to-ecdsa.patch * openssl-add-blinding-to-dsa.patch- OpenSSL Security Advisory [16 Apr 2018] * Cache timing vulnerability in RSA Key Generation (CVE-2018-0737, bsc#1089039) * add openssl-CVE-2018-0737.patch- Fix escaping in c_rehash (boo#1091961, bsc#1091963) * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch- Tolerate a Certificate using a non-supported group on server side (boo#1084651) * https://github.com/openssl/openssl/pull/5607 * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch- Update to 1.1.0h OpenSSL Security Advisory [27 Mar 2018] * Constructed ASN.1 types with a recursive definition could exceed the stack (CVE-2018-0739) (bsc#1087102) * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738) (bsc#1071906) - refresh patches: * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * openssl-1.1.0-fips.patch * openssl-pkgconfig.patch * openssl-rsakeygen-minimum-distance.patch * openssl-static-deps.patch- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the new libopenssl1_1-32bit: it does not belong to the devel package.- Renamed from openssl-1_1_0 (bsc#1081335) * All the minor versions of the 1.1.x openssl branch have the same sonum and keep ABI compatibility * obsolete the 1_1_0 packages - update baselibs.conf with the new version names- Remove bit obsolete syntax - Use %license macro- Don't disable afalgeng on aarch64- Add support for s390x CPACF enhancements (fate#321518) patches taken from https://github.com/openssl/openssl/pull/2859: * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch- Do not filter pkgconfig() provides/requires.- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a clean upgrade path as an aid to zypp (boo#1070003).- Update to 1.1.0g OpenSSL Security Advisory [02 Nov 2017] * bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736) (bsc#1066242) * Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735) (bsc#1056058) - drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream) - refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch- update DEFAULT_SUSE cipher list (bsc#1055825) * add CHACHA20-POLY1305 * add ECDSA ciphers * remove 3DES - modified openssl-1.0.1e-add-suse-default-cipher.patch- do not require openssl1_1_0-targettype in devel-targettype, as it is not built (it has no libraries)- The description is supposed to describe the package, not the development process or history. (Synchronize with the already-updates descriptions in openssl-1_0_0.) - Update historic copypasted boilerplate summaries ("include files mandatory for development")- Disable the verbosity of the tests as we expose yet another race condition in that- Fix a race condition in tests to make the package build reliably * https://github.com/openssl/openssl/issues/3562 * 0001-Fix-a-TLSProxy-race-condition.patch- Add Provides and Conflicts for -devel package in baselibs.conf.- Add patch openssl-no-date.patch to disable date inclusion in most of the binaries - Use autopatch to make things smaller - Enable verbose output on the tests - Paralelize depmod- update to 1.1.0f * bugfix only release - disable RSA keygen tests, because they use too small modulus, which is rejected by our CC/FIPS hardening patches * added openssl-disable_rsa_keygen_tests_with_small_modulus.patch - refreshed openssl-rsakeygen-minimum-distance.patch and 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch- Add conflict for any libopenssl-devel that is not in our version- Avoid the requires conflict between 1.1 and 1.0 openssl- Add conflict on docu packages- drop unnecessary README.SUSE- add openssl-1.1-fix-ppc64.patch from Marcus Meissner to fix build on ppc64- Fix build on aarch64- Remove libpadlock conditional, no longer present- Update baselibs.conf to contain all the renamed packages- re-enable tests on SLE-12 and below despite current failure, so they are automatically run once the issue is resolved- Filter out the pkgconfig provides to force usage of the main openssl package provides- disable tests on SLE-12 and its derivates * they fail because of glibc bug bsc#1035445 - remove README-FIPS.txt (outdated)- drop openssl-fipslocking.patch The locking in 1.1.0 has been rewritten and converted to the new threading API. The fips deadlock (at least bsc#991193) can't be reproduced anymore. - don't ship useless INSTALL* files- simplify openssl-fips-dont-fall-back-to-default-digest.patch The -non-fips-allow option was dropped in OpenSSL 1.1.0 - drop openssl-no-egd.patch as OpenSSL 1.1.0 disables EGD at compile time by default - renumber the patches so the numbers are consequent- Update showciphers.c to work with new openssl- Add patch openssl-static-deps.patch to allow dependencies on statically build libraries - Refresh openssl-1-1.0-fips.patch to take in use the above approach - Silence the install manpage rename phase- Start update to 1.1.0e basing of the 1.0.0 split release - Drop patch merge_from_0.9.8k.patch the ppc64 should work out of the box - Drop patch openssl-engines-path.patch converted to configure option - Drop patch openssl-1.0.2a-padlock64.patch code behind was redone does not apply at all - Drop patch openssl-fix-pod-syntax.diff mostly merged upstream or not applicable - Drop patch compression_methods_switch.patch as we do not need to keep the compat on this release anymore - Drop patch openssl-1.0.2a-ipv6-apps.patch which was upstreamed - Drop upstreamed patch openssl-1.0.2a-default-paths.patch - Drop obsolete patch openssl-1.0.0-c_rehash-compat.diff - Drop obsolete patch openssl-missing_FIPS_ec_group_new_by_curve_name.patch - Drop obsolete patch openssl-print_notice-NULL_crash.patch - Drop obsolete patch openssl-randfile_fread_interrupt.patch - Refresh patch openssl-truststore.patch - Refresh baselibs.conf to correctly reflect soname - Add patch openssl-1.1.0-fips.patch obsoleting bunch of older: * openssl-1.0.2i-fips.patch * openssl-1.0.2a-fips-ec.patch * openssl-1.0.2a-fips-ctor.patch * openssl-1.0.2i-new-fips-reqs.patch * openssl-fips_disallow_x931_rand_method.patch - Add new patch for upstream: * 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch - Refresh patch openssl-pkgconfig.patch - Drop patch openssl-gcc-attributes.patch as the code was redone - Rebase patch 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch - Rebase patch openssl-no-egd.patch - Rebase patch openssl-1.0.1e-add-suse-default-cipher.patch and openssl-1.0.1e-add-test-suse-default-cipher-suite.patch - Rebase patch openssl-fips_disallow_ENGINE_loading.patch - Rebase patch openssl-urandom-reseeding.patch - Rebase patch openssl-fips-rsagen-d-bits.patch - Rebase patch openssl-fips-selftests_in_nonfips_mode.patch - Remove switch for ssl2 - no longer present - Remve the buildinf.h parsing, should no longer be needed - Drop the rehash in build, no longer needed - Drop openssl-fips-hidden.patch as it is not really needed - Do not sed in secure_getenv upstream does it in code on their own - Do not install html converted manpages * openssl-1.1.0-no-html.patch- Drop the symbol hiding patches to ease maintenance updates: * 0005-libssl-Hide-library-private-symbols.patch * 0001-libcrypto-Hide-library-private-symbols.patch- Add new patch for engines folders to allow co-installation * openssl-engines-path.patch- Drop openssl-ocloexec.patch as it causes additional maintenance burden we would like to avoid- Drop bug610223.patch as we moved to libdir- Move check to %check phase - Split showciphers to separate file- Move openssl to /usr/lib64 from /lib64- Remove some of the DSO setting code that is not needed - Fix the showciphers binary- Rename to openssl-1_0_0 to allow instalation of multiple versions- Remove O3 from optflags, no need to not rely on distro wide settings - Remove conditions for sle10 and sle11, we care only about sle12+ - USE SUSE instead of SuSE in readme - Pass over with spec-cleaner- fix X509_CERT_FILE path (bsc#1022271) and rename updated openssl-1.0.1e-truststore.diff to openssl-truststore.patch- Updated to openssl 1.0.2k - bsc#1009528 / CVE-2016-7055: openssl: Montgomery multiplication may produce incorrect results - bsc#1019334 / CVE-2016-7056: openssl: ECSDA P-256 timing attack key recovery - bsc#1022085 / CVE-2017-3731: openssl: Truncated packet could crash via OOB read - bsc#1022086 / CVE-2017-3732: openssl: BN_mod_exp may produce incorrect results on x86_64- resume reading from /dev/urandom when interrupted by a signal (bsc#995075) * add openssl-randfile_fread_interrupt.patch- add FIPS changes from SP2: - fix problems with locking in FIPS mode (bsc#992120) * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428 and bsc#990207 * bring back openssl-fipslocking.patch - drop openssl-fips_RSA_compute_d_with_lcm.patch (upstream) (bsc#984323) - don't check for /etc/system-fips (bsc#982268) * add openssl-fips-dont_run_FIPS_module_installed.patch - refresh openssl-fips-rsagen-d-bits.patch- update to openssl-1.0.2j * Missing CRL sanity check (CVE-2016-7052 bsc#1001148)- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575) * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249) * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844) * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419) * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749) * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819) * Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359) * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324) * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377) * Certificate message OOB reads (CVE-2016-6306) (bsc#999668) - update to openssl-1.0.2i * remove patches: openssl-1.0.2a-new-fips-reqs.patch openssl-1.0.2e-fips.patch * add patches: openssl-1.0.2i-fips.patch openssl-1.0.2i-new-fips-reqs.patch- fix crash in print_notice (bsc#998190) * add openssl-print_notice-NULL_crash.patch- OpenSSL Security Advisory [3rd May 2016] - update to 1.0.2h (boo#977584, boo#977663) * Prevent padding oracle in AES-NI CBC MAC check A MITM attacker can use a padding oracle attack to decrypt traffic when the connection uses an AES CBC cipher and the server support AES-NI. (CVE-2016-2107, boo#977616) * Fix EVP_EncodeUpdate overflow An overflow can occur in the EVP_EncodeUpdate() function which is used for Base64 encoding of binary data. If an attacker is able to supply very large amounts of input data then a length check can overflow resulting in a heap corruption. (CVE-2016-2105, boo#977614) * Fix EVP_EncryptUpdate overflow An overflow can occur in the EVP_EncryptUpdate() function. If an attacker is able to supply very large amounts of input data after a previous call to EVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption. (CVE-2016-2106, boo#977615) * Prevent ASN.1 BIO excessive memory allocation When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio() a short invalid encoding can casuse allocation of large amounts of memory potentially consuming excessive resources or exhausting memory. (CVE-2016-2109, boo#976942) * EBCDIC overread ASN1 Strings that are over 1024 bytes can cause an overread in applications using the X509_NAME_oneline() function on EBCDIC systems. This could result in arbitrary stack data being returned in the buffer. (CVE-2016-2176, boo#978224) * Modify behavior of ALPN to invoke callback after SNI/servername callback, such that updates to the SSL_CTX affect ALPN. * Remove LOW from the DEFAULT cipher list. This removes singles DES from the default. * Only remove the SSLv2 methods with the no-ssl2-method option. When the methods are enabled and ssl2 is disabled the methods return NULL.- Remove a hack for bsc#936563 - Drop bsc936563_hack.patch- import fips patches from SLE-12 * openssl-fips-clearerror.patch * openssl-fips-dont-fall-back-to-default-digest.patch * openssl-fips-fix-odd-rsakeybits.patch * openssl-fips-rsagen-d-bits.patch * openssl-fips-selftests_in_nonfips_mode.patch * openssl-fips_RSA_compute_d_with_lcm.patch * openssl-fips_disallow_ENGINE_loading.patch * openssl-fips_disallow_x931_rand_method.patch * openssl-rsakeygen-minimum-distance.patch * openssl-urandom-reseeding.patch- add support for "ciphers" providing no encryption (bsc#937085) * don't build with -DSSL_FORBID_ENULL- update to 1.0.2g (bsc#968044) * Disable weak ciphers in SSLv3 and up in default builds of OpenSSL. Builds that are not configured with "enable-weak-ssl-ciphers" will not provide any "EXPORT" or "LOW" strength ciphers. * Disable SSLv2 default build, default negotiation and weak ciphers. SSLv2 is by default disabled at build-time. Builds that are not configured with "enable-ssl2" will not support SSLv2. Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via the version-flexible SSLv23_method() will need to explicitly call either of: SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); or SSL_clear_options(ssl, SSL_OP_NO_SSLv2); (CVE-2016-0800) * Fix a double-free in DSA code (CVE-2016-0705) * Disable SRP fake user seed to address a server memory leak. Add a new method SRP_VBASE_get1_by_user that handles the seed properly. (CVE-2016-0798) * Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption (CVE-2016-0797) * ) Side channel attack on modular exponentiation http://cachebleed.info. (CVE-2016-0702) * ) Change the req app to generate a 2048-bit RSA/DSA key by default, if no keysize is specified with default_bits. This fixes an omission in an earlier change that changed all RSA/DSA key generation apps to use 2048 bits by default.- update to 1.0.2f (boo#963410) * ) DH small subgroups (boo#963413) Historically OpenSSL only ever generated DH parameters based on "safe" primes. More recently (in version 1.0.2) support was provided for generating X9.42 style parameter files such as those required for RFC 5114 support. The primes used in such files may not be "safe". Where an application is using DH configured with parameters based on primes that are not "safe" then an attacker could use this fact to find a peer's private DH exponent. This attack requires that the attacker complete multiple handshakes in which the peer uses the same private DH exponent. For example this could be used to discover a TLS server's private DH exponent if it's reusing the private DH exponent or it's using a static DH ciphersuite. (CVE-2016-0701) * ) SSLv2 doesn't block disabled ciphers (boo#963415) A malicious client can negotiate SSLv2 ciphers that have been disabled on the server and complete SSLv2 handshakes even if all SSLv2 ciphers have been disabled, provided that the SSLv2 protocol was not also disabled via SSL_OP_NO_SSLv2. (CVE-2015-3197) * ) Reject DH handshakes with parameters shorter than 1024 bits.- update to 1.0.2e * fixes five security vulnerabilities * Anon DH ServerKeyExchange with 0 p parameter (CVE-2015-1794) (bsc#957984) * BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193) (bsc#957814) * Certificate verify crash with missing PSS parameter (CVE-2015-3194) (bsc#957815) * X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812) * Race condition handling PSK identify hint (CVE-2015-3196) (bsc#957813) - pulled a refreshed fips patch from Fedora * openssl-1.0.2a-fips.patch was replaced by openssl-1.0.2e-fips.patch - refresh openssl-ocloexec.patch- update to 1.0.2d * fixes CVE-2015-1793 (bsc#936746) Alternate chains certificate forgery During certificate verfification, OpenSSL will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. - drop openssl-fix_invalid_manpage_name.patch (upstream)- Workaround debugit crash on ppc64le with gcc5 bsc936563_hack.patch (bsc#936563)- update merge_from_0.9.8k.patch replacing __LP64__ by __LP64 this is a change versus previous request 309611 required to avoid build error for ppc64- Build with no-ssl3, for details on why this is needed read rfc7568. Contrary to the "no-ssl2" option, this does not require us to patch dependant packages as the relevant functions are still available (SSLv3_(client|server)_method) but will fail to negotiate. if removing SSL3 methods is desired at a later time, option "no-ssl3-method" needs to be used.- update to 1.0.2c * Fix HMAC ABI incompatibility - refreshed openssl-1.0.2a-fips.patch- update to 1.0.2b * Malformed ECParameters causes infinite loop (CVE-2015-1788) * Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789) * PKCS7 crash with missing EnvelopedContent (CVE-2015-1790) * CMS verify infinite loop with unknown hash function (CVE-2015-1792) * Race condition handling NewSessionTicket (CVE-2015-1791) - refreshed patches: * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * 0001-libcrypto-Hide-library-private-symbols.patch * openssl-1.0.2a-default-paths.patch * openssl-1.0.2a-fips.patch * compression_methods_switch.patch * openssl-1.0.1e-add-test-suse-default-cipher-suite.patch- update to 1.0.2a * Major changes since 1.0.1: - Suite B support for TLS 1.2 and DTLS 1.2 - Support for DTLS 1.2 - TLS automatic EC curve selection. - API to set TLS supported signature algorithms and curves - SSL_CONF configuration API. - TLS Brainpool support. - ALPN support. - CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH. - packaging changes: * merged patches modifying CIPHER_LIST into one, dropping: - openssl-1.0.1e-add-suse-default-cipher-header.patch - openssl-libssl-noweakciphers.patch * fix a manpage with invalid name - added openssl-fix_invalid_manpage_name.patch * remove a missing fips function - openssl-missing_FIPS_ec_group_new_by_curve_name.patch * reimported patches from Fedora dropped patches: - openssl-1.0.1c-default-paths.patch - openssl-1.0.1c-ipv6-apps.patch - openssl-1.0.1e-fips-ctor.patch - openssl-1.0.1e-fips-ec.patch - openssl-1.0.1e-fips.patch - openssl-1.0.1e-new-fips-reqs.patch - VIA_padlock_support_on_64systems.patch added patches: - openssl-1.0.2a-default-paths.patch - openssl-1.0.2a-fips-ctor.patch - openssl-1.0.2a-fips-ec.patch - openssl-1.0.2a-fips.patch - openssl-1.0.2a-ipv6-apps.patch - openssl-1.0.2a-new-fips-reqs.patch - openssl-1.0.2a-padlock64.patch * dropped security fixes (upstream) - openssl-CVE-2015-0209.patch - openssl-CVE-2015-0286.patch - openssl-CVE-2015-0287.patch - openssl-CVE-2015-0288.patch - openssl-CVE-2015-0289.patch - openssl-CVE-2015-0293.patch * upstream reformatted the sources, so all the patches have to be refreshed- security update: * CVE-2015-0209 (bnc#919648) - Fix a failure to NULL a pointer freed on error * CVE-2015-0286 (bnc#922496) - Segmentation fault in ASN1_TYPE_cmp * CVE-2015-0287 (bnc#922499) - ASN.1 structure reuse memory corruption * CVE-2015-0288 x509: (bnc#920236) - added missing public key is not NULL check * CVE-2015-0289 (bnc#922500) - PKCS7 NULL pointer dereferences * CVE-2015-0293 (bnc#922488) - Fix reachable assert in SSLv2 servers * added patches: openssl-CVE-2015-0209.patch openssl-CVE-2015-0286.patch openssl-CVE-2015-0287.patch openssl-CVE-2015-0288.patch openssl-CVE-2015-0289.patch openssl-CVE-2015-0293.patch- The DATE stamp moved from crypto/Makefile to crypto/buildinf.h, replace it there (bsc#915947)- openssl 1.0.1k release bsc#912294 CVE-2014-3571: Fix DTLS segmentation fault in dtls1_get_record. bsc#912292 CVE-2015-0206: Fix DTLS memory leak in dtls1_buffer_record. bsc#911399 CVE-2014-3569: Fix issue where no-ssl3 configuration sets method to NULL. bsc#912015 CVE-2014-3572: Abort handshake if server key exchange message is omitted for ephemeral ECDH ciphersuites. bsc#912014 CVE-2015-0204: Remove non-export ephemeral RSA code on client and server. bsc#912293 CVE-2015-0205: Fixed issue where DH client certificates are accepted without verification. bsc#912018 CVE-2014-8275: Fix various certificate fingerprint issues. bsc#912296 CVE-2014-3570: Correct Bignum squaring. and other bugfixes. - openssl.keyring: use Matt Caswells current key. pub 2048R/0E604491 2013-04-30 uid Matt Caswell uid Matt Caswell sub 2048R/E3C21B70 2013-04-30 - openssl-1.0.1e-fips.patch: rediffed - openssl-1.0.1i-noec2m-fix.patch: removed (upstream) - openssl-ocloexec.patch: rediffed- suse_version 10.1 & 10.2 x86_64 can not enable-ec_nistp_64_gcc_128- openssl-1.0.1i-noec2m-fix.patch: only report the Elliptic Curves we actually support (not the binary ones) (bnc#905037)- openSUSE < 11.2 doesn't have accept4()- openSSL 1.0.1j * Fix SRTP Memory Leak (CVE-2014-3513) * Session Ticket Memory Leak (CVE-2014-3567) * Add SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) * Build option no-ssl3 is incomplete (CVE-2014-3568)openssl-1_0_0openssl-1_1_0ibs-power9-12 1722522647  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvw1.1.1l-150500.17.34.11.1.1l-150500.17.34.11.1.1l-150500.17.34.1sslct_log_list.cnfct_log_list.cnf.distengdef.dengines.dopenssl.cnfprivatec_rehashfips_standalone_hmacopensslopenssl-1_1CHANGESNEWSREADMECA.pl.1ssl.gzasn1parse.1ssl.gzc_rehash.1ssl.gzca.1ssl.gzciphers.1ssl.gzcms.1ssl.gzcrl.1ssl.gzcrl2pkcs7.1ssl.gzdgst.1ssl.gzdhparam.1ssl.gzdsa.1ssl.gzdsaparam.1ssl.gzec.1ssl.gzecparam.1ssl.gzenc.1ssl.gzengine.1ssl.gzerrstr.1ssl.gzgendsa.1ssl.gzgenpkey.1ssl.gzgenrsa.1ssl.gzlist.1ssl.gznseq.1ssl.gzocsp.1ssl.gzopenssl-asn1parse.1ssl.gzopenssl-c_rehash.1ssl.gzopenssl-ca.1ssl.gzopenssl-ciphers.1ssl.gzopenssl-cms.1ssl.gzopenssl-crl.1ssl.gzopenssl-crl2pkcs7.1ssl.gzopenssl-dgst.1ssl.gzopenssl-dhparam.1ssl.gzopenssl-dsa.1ssl.gzopenssl-dsaparam.1ssl.gzopenssl-ec.1ssl.gzopenssl-ecparam.1ssl.gzopenssl-enc.1ssl.gzopenssl-engine.1ssl.gzopenssl-errstr.1ssl.gzopenssl-gendsa.1ssl.gzopenssl-genpkey.1ssl.gzopenssl-genrsa.1ssl.gzopenssl-list.1ssl.gzopenssl-nseq.1ssl.gzopenssl-ocsp.1ssl.gzopenssl-passwd.1ssl.gzopenssl-pkcs12.1ssl.gzopenssl-pkcs7.1ssl.gzopenssl-pkcs8.1ssl.gzopenssl-pkey.1ssl.gzopenssl-pkeyparam.1ssl.gzopenssl-pkeyutl.1ssl.gzopenssl-prime.1ssl.gzopenssl-rand.1ssl.gzopenssl-rehash.1ssl.gzopenssl-req.1ssl.gzopenssl-rsa.1ssl.gzopenssl-rsautl.1ssl.gzopenssl-s_client.1ssl.gzopenssl-s_server.1ssl.gzopenssl-s_time.1ssl.gzopenssl-sess_id.1ssl.gzopenssl-smime.1ssl.gzopenssl-speed.1ssl.gzopenssl-spkac.1ssl.gzopenssl-srp.1ssl.gzopenssl-storeutl.1ssl.gzopenssl-ts.1ssl.gzopenssl-tsget.1ssl.gzopenssl-verify.1ssl.gzopenssl-version.1ssl.gzopenssl-x509.1ssl.gzopenssl.1ssl.gzpasswd.1ssl.gzpkcs12.1ssl.gzpkcs7.1ssl.gzpkcs8.1ssl.gzpkey.1ssl.gzpkeyparam.1ssl.gzpkeyutl.1ssl.gzprime.1ssl.gzrand.1ssl.gzrehash.1ssl.gzreq.1ssl.gzrsa.1ssl.gzrsautl.1ssl.gzs_client.1ssl.gzs_server.1ssl.gzs_time.1ssl.gzsess_id.1ssl.gzsmime.1ssl.gzspeed.1ssl.gzspkac.1ssl.gzsrp.1ssl.gzstoreutl.1ssl.gzts.1ssl.gztsget.1ssl.gzverify.1ssl.gzversion.1ssl.gzx509.1ssl.gzsslmiscCA.pltsgettsget.pl/etc//etc/ssl//usr/bin//usr/share/doc/packages//usr/share/doc/packages/openssl-1_1//usr/share/man/man1//usr/share//usr/share/ssl//usr/share/ssl/misc/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34949/SUSE_SLE-15-SP5_Update/7412097ededdb0df51d496b6ef5925d3-openssl-1_1.SUSE_SLE-15-SP5_Updatedrpmxz5ppc64le-suse-linux   directoryASCII textBSD makefile script text with ".include", ASCII textPerl script text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=6ea9fde9532807d62949387b01d52969a4ceee51, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=fe21fd1963130ae27a3adc2dc2afcd86d4c2d2e0, for GNU/Linux 3.10.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRR RR RRR RRR RR RRR nl[v#"utf-85509f1a7ec244d61b5d487101d2ee6a52b9c630a44ade4ce81662fbbd1f7d95c?7zXZ !t/ ]"k% .1'<|{P>wWfϼAm \&>t7Xrc/CS5blj?nvh"b&JpZl)'g4c,. p'3S=*i*~}CΕh];5w%j!Y!ѧiKgxz 3,iȌks O?f['%Ŕ*=ڐXT߽dI2x^_ %*[PJLZZ ( 5 4zDiL2PO0]?pFMOz{mqLmM!fPVs;S{RvR)U¼Q4?d㟓JbSsO &յOKXKÌR9=PM{ LyJsh,P<pUp.hޔ\P`wGE=GR.y6f.Љu+y{%N< M Ρ̸Κ|KPᩋ58ܒUHiX+46/}XyWǰ1!&qc2gf8́c Bxa%˝]4xʍ(N _!!Bc5XbK6r.~G!+ 7#y1~ Z8 Jٸ(n׽ݽ g) b&f6dxn/BqlqŠXI gA^$ؗJlj'BҺ>>M{>M}Q/TDE!{(i?U$.fڢ 7M@O 3Zw%&-+d,"vlASOrWQ!uG.WՄE^3`T<7J4ihڳ3v)"5jp!-7J{Fo- ' .Å-R\ ;fETecc9h1Od7;񥞅["գ%b2RPHT!#+.3,NC-=Bđ'!"]Ksڄ P1&/G|U-NՆEr}1,}yB!g ʩZ&ȥsI 9 QBa&Q!&Xe} JAEa6nzj3s7A4T5&ĤuO l"M/K ZM CGV(y&E* O컜p"Y{Nm׃/qTT譧o=b zj@XQ;;3 I|\=jZyRtnޞixm B{o([rC>:I@(/l[6Y*03.l v XU+p[ #7b0J4 A{5coX(&i\*+Txa!QaI.;< ruJ`i?UKTn BttKsYfEck")\ɬ{Z)A8QkU*YV=$ݩvh6验 dЫ%c3rVn %=kI5Y`߸(+ť;X̆>fE&ybw4C2k[Ib6b[ᤃ$J(lݫ7>2:KjSS@3fi/W5cKFz@v76ھB"wZ2;nxDpEq.j՜ T"ȋ~\+SOg#@ѮCqk-r=V Dn(Wg"(X!`AVk8LA%{^8[R|j.^K x4fγ\_p`34kT`N-6~3J6n@kG!Hm4sߺ/?铷&=XYD߼jI! U~Ѳ9U`*S_'!x%`Ѩ*1Kv\ GD&1x>&V6p<|%SFBzB87jxX{Q@XA\/4^~Βbˣ݄2P*9lَօoؒo.1e 2MwDϨV3| 痸ɧy+R0ݩ|GXJٺ ָy {x&l[5gG ˯5G41٣qX:7Y^! XO&2:(y}0#XK LعԪ.*k#Œ|ϲ+ zm{Ez#.l{&o)D>*$K6焐,#jN4VZ}WHgVElbINf5Ÿy/l"uZʆWQ0/hEHZSxITv8bN1f)x ocgP$Ӏi?0Q-;lݞfm||.$A(ݐgK\10*o!j`]6`#D}X9 bEyھ [R+ԀnI$K* ҾLKvniC rQ, JH#e9םPD̞uS4#yƖ*'YnԢh3#K;]9G u [_tM C$2Ng39h4,:E+! + w0WLB{ՁȘmU(~5vb)b$%L>Y,c^Ӝ /qQ)/)MQ_>3b cBO&lǃ_;9S S&iG*j^"f zz\8}8C]]iG@6;hJ̾ puW9~_6}[^\6ƧŢ1ˆOUvj4/.Ѫ^Ea[bmFKlIF)\wI2#gn߲GL<ª2ulr_pq)?npP}Q>̮fGuV[GeUhuy7GH %俼F[!@("ovinu$6lX彃>h~:6)G y~2%{z^%,|xH (8s/j%mVu[W]KQ^ϭKG]OVҎ5_9d )VJik,|NAwE+F&v!r~c8$Tcu/AX:~|kZSWPR ̃x3HHFc [c=J9D|۰eILN^P|F6wDĀB] NOWaIU~-0hiF%9lݵN9vQg\fV6U1O0M蠊E, uNCD. @%U5ZϴM$$>,* _#ѱDm^:6-O9lݍl$9'_gF _;<xg=3w؁|\Vz^7ϾO/#1<TѺ~-yVK ?.r[.<)E<4o>ɱeVEY Hcyf+s`n o9V۬ny%ʔި6Y(cOB,IPT.ڎ;MԀyEݚ| ~ynW*<#b~zT~d:<|G \@dxM50פhye'۴E%&^.5zMVɦ :P̹`KZ<&s0y-i5,o9 _Ks]+i,V #>šOHݖNv d%{h*5!h 7Nr;*w_peޖ%Iw|!O4EK[Kg;c^]qTʄo`:v/=KcwhLo:GgϞXFO~Pҋ'&bu?-0j;ǟE*{i:Q"ZlNK2{o^Grۜ-ȬxF$z,o04^g[S`⾫r#q+YmwaU >(lH%-z;OY r9#=qUVU`*~:]h[4 T=N]:d,+A0|ZUYp(] ͑?* EZ=߁#ku: TY屡@􊡬}xcG>)}‚!c$@pIYM|k(&Y݂+o{/>WYD.w d䑺U`  . q1 DGȇ|$Rq>q03^zdD$^)wM`B p 63}i'Ȏ՞^"{_QD.`NwE2 ⚸8L4͹ee ߘX\NV{‹[!RVR'-T5+AoĄxLBQen~*Z*G^t9paJo xx*&6 9G پA+=٠D~ IsHVqt DZaࢤv %AA[~#TVh^I-[:n) ;J}ͣxMj !@XzHTܹ:D-%7>D6bH7{Ό!.b`1O*|b`K0@* *kRzL`- )=#ʍ0xnb[[EL.57h([QvFtyT$~*,k#.p,hQT2y'!)*.ssղcerdgVjf%VU-rj;O#/Oh;>u#/{uˏL#+EyFS#L*E9ܦ;tѲ6GXC)[﷩fPAg |&~䀬9+-_ !_4ϝ͕N8[kJMmWbnI ֡o mNB 3 /<'g7 a (GsV׋KXg oױ=]z@\]TXF6$v?^^ؾ~u`\k.g-p`]IQtj]ݏُJtkF`"3FkC6q5Bz ˝ q㔿MθnM)Bvq62:Di087_{5OH8nmfg@N>.#U ;n%?':S&q3gD 6mDs zIl<ѸgR6#SvakE{p)!FJ./N]Z39T]¶FcLxQ'wK Dpdp[dPG8ꭢF EFʊ\/XxucdE ՐSyv$C!)F5oJKnuV$$!T‹)#Ȱ ׿lYLnmFS}/0UkfeA:m^ZSbg'#yKGކvP$ZЭnaV #:Fj 읖L&mJܠS@7+ (9V/6n љDgJvS"3 t37Ho_.URP$3fz=(~hQp!rQAP`!arvX'=?vC2+qzAQ=/7A&I뇩'EzDZ`sPh9˴z7h켂Zn쎜 ˤ^Np3YSM)]g@TA>$B6j2>~jG([R>Fzڗm-;}= x(3zK?52!S,nShF\E+!|D'8JWiFDĄr)X[.v˘7hߌ̬}ck?FTwp]IO[8mMPp:5w*det8r .b- UĹdKS r%#e ޅ{Hē2#g /ҧJQBxouy".ulʰ=\ Fxm 5(̺Y9eyFS..$!M(pB.ջsNr,F[!*q^-0\|@ٛb8MF(/EH \W(*7\;e5VF&W ^NL/1O/Vp໾s7\ϧDxyX1lJMX=wa9~iVN-lK=Ad\xbX})bv%wآ6i>c$q+AQ&Bg岜u (" 72i2Oʱ܍,mGŀ\j 8o_"MÚ .IP\aP t1~5&IVmLMD hg9ۥD}C0J2PWG(pnoBmtU/FdT.w0O`Q}mt58t/`CT/ǜWRxF@tu2n]bd=Y/MՐ5lx*äD#&9(q!yijo|Bک-[@ I76PiNC'fIa'Rk E&2+iLrJ8-s?@ʉu으 kQ?PL}M}NV87 JSijr@ uxMq[Z~o__j9+>3  ]4&|Aq-4Do[ E AۺS`? y֠[Q%FgǦ9}p&Ѓ c_:3qh9|A6ݾ@{m1qC@Zg-VAM1!W5OҭO]Sb7ʮAA#9C>z>KDa&Ѷ:3{ʌ~ڹ=6!p49Qzw;V~#U&>,nM=ldnlq1HM S̴VjEFUY݁õhG!rӀ遝H]Ȩt#(Nu<Κ.<~n*eߊ)I+)J sIIQ(1ybd ,76D"]Mj5tJpt"CS:h. rKuhhDC9˭~NNC(|F?ֱF4U[]B6H8:H|%?z((! tf8!;#V*@d(I'LHIhi+7s930Ptpڮ0M B{SȻE u-Q).|_ٟ5 #88~I~/! NBѕ?&D -Lm`EgEӟHM;`ېb{ȧƬ[*p7\q[vT{)jt|C1j*4Fs`d/=^ߒ=5H&HÊޡ ۴\5ʿŰCǘp~"N຾Ƚ;._2hps`Vx /MnC60u:InE97q+ bƭoҿCR#.V4Bo:d6GXJTH7Êe쉓ȕ3|QGq_ψ#wL˘7*pɉQcVjJ٢sۜᰶ$)gc[*OW*&q-}><pS QSDH zAi%}a+_!AO{K*[_DJk/Vaꪋj*1!(y#rgxBdK< ^R(!*7ԓ{`a0We0~fM$GFl1lM1ȁ<ʜc]*qtu$N ?@ϵa2  `+N*<^G݌JMV: ţ4Ia |+] Bmt(+.~苍0+׾<撁ZMk;jo:->N9P'VvzBP2DWH噧)Xg9JDSݾ1}j_ 4$()5oJqQġ8k±G}:6 3 4VsP6.;{IF20jVG'1掻ʗwi?m3HF"@pUF |l"3 bTz.3Qx8) ᢼ7DdԬ6éɥ֠7č y@G22*sw Ӂ?J=P 3XOD.hySx*Gz[X2;ys2e/vwO@DCE 6$]>(x\uŋ/(2>N@ɞ{#N[3y+?E Y=!96 B": M+໖ ѻM.=]ngs2L"By9~E VC>cK` פG $5!?fOUwVd[O ϋ!ewT${@"?wEsRXˑ f,+eǒ vlb䣄@wՅɳqqPHSU}EN҄ÖN/Ch1kE` )_!T4)%Al`.ͩxtƢQ G ad0e c8A (c  ȿŽpˑ+[vQku}5zx?I@82۩Bt8C@qTK\d"Dhϸslѿ8jJm:pnPAqJ+!-%nY(I7Kx8!kM,Ugqqz=rE v?HPk[7"A)l`D=&(<:!{ Lq_tM0m ^U򆸀 ;& -'8EŸbe<{U}mPY`W ڽnYɃ|R<cj9uND+J g515 ȇ '^:Jc=<仨k)g|G`V>+$*{|wx)(3~aeK!8dcAFh,pХ㯱8!Ji2BnLQ%E˖E\Eȁ0hFƊ}*:s~ِsg'9Oj 3WE"HU%yh]䵠-7:<8j}dBiDcA_v(T 'qd~++sXo;p_i'SRƦL4wƴ~P\ey='ʯNW"bs n*L;C""?!&7s x(@5+˜o#Y[ WjqTI-؄b"՜.kYxj疩JEU\*I>B40Ծ$t,ab e r-MՄb1o8=5Lr8ƥ ֜gdJ_w_\keX CVɅѝ~3LH93axo)/pmyʺH~yx);C0F&g9hs,c0$1yDit|׎XAU_ ^?@E'ju?Fhwp&\V !l2Ymjxm&bӑFzƠ5{XdD2 ~^s#~CqsZzB/7)h{I'T'a$i6ԪSaSYe0ꞛ<>_FxZ ʲK}i'owᯅq !Я/%Y~a&\4tD`S[@-慈FB~RjMD~EQU4Qm-fB) 0d " .O }ۿM# ag\Db鍱$iCξ)^xQ덳5WGEV klGƩ-ȼQ  –K|(q\ b XmJ*2Ju '*5Q>Z{7v-n_,p?oCADi7-+0F|CIPK ~|Bb(eم;A%Α1)QBC -`l )WKCvsg`8vJ ۡ~ݖKJPZvbjD1M l9ȝTJ,@:8"h- ^CRUO@l]y5O#0l{x3([HϥS|q!Bxv]qR0п ^g=7#fCɯHQӍ5={G٫?rEgq'܋hle{k :tQvqCmHhK^p̘eZ< r0 u ʬ/|2Q ֙)l/9!Γv4eX}:za[B sza֛vP+aˌy5lꙅRKmN:Fe~·@ O'&}g\]Ey|j QTݭ`dbi]bU8kqBe]%hj'm1Cԏj#SzjpVPZ(W^$iq%QC=5rvNtY$vPf'<u<%[iGGo9xڕV$`h%J l,$KE  |)ֱȮ9-?ψ,q3b폍Aw6[RrdGQLn*w]Hf.M~Aq\xYEkߦby1kN76#m$"Ⱥ9vb{kh!(@-m ME1NQFW/V<gǫ^>XNB:ea`- oWu8niKTIh܄۶-Xnͳ CBhU oޜ6k*k>NBGf }ddfVK1Gi߰qPN]">Ѫ#G}$z3?׭@d8=1{Oה$)RR UVꩡ@tuFe:8Q-6;TSmX5M![iѝ93K'XG̠Oa3fM]jŗF䠁~n,҇ܽ̌O-CG{T@{CD-%F *Jbq lyI thԎD,hlrsXTg2#HkbяZDyV"O _$Nڡƴ 1'$QWF N?ugiL2VEY `,_W'st,o*̿l#֧+Ua6du&ZDQcuYWf^ӿͷ/0d b=3%֢&<듨t#a&[SjJ/1J񟻇HqAW-W%r rO|(֩l'|{7yXpF57\Ugg 1EV?2e] F[\[|+OOMrH=C>e8x͗Y2%* JS#fLpxQqb xZJ_8Hh]!:z2޹pd P u7;+;#}䂵#q{F* ܚ@"W̃D6CIxbdC>FR xB [xJ"3N /䫽9#,W{S56U:غ9V~]!!Ժ=hL`lD9d(GF!Q$;$I 'q q ʲi#.Ph+ubGJ0݊Bi*N֐5"* lsm;9]&hocLqĬ&n Qr)]E7c2ea;z(1 Dcy}rxf,H+#Ә-oK#<#=Y>B^Cm0(FIA<5M%(Dnu#59V{)ɰp 1H`py;/`H| ֔2NA6j]˕hkiGjWk_>*R!uΐ}" }2%bl;A][p.914EZm9 H9AWzRk)<T(Ȇ }L6AgKA[`{Gh \a&p!2פAk4_ fso)I݉o}>8}|,ˀ^ HR;(񦮣d_nInqZB:L )Qy8љ1F+& W+"yM=SFaԞ]P^zCdvB@4`Y8ƯdP|m22Ԭ|*'c-DDvҌN*WL7塮@BY׹xE"[fEe.8`ё_peN;s+vބ*Ɋ~zFY@p-X vZ W[/l({osIioVYj1͊^@}9~ b,`8+i :qx߯Ӥu_*'soHe$g$ yw{$\$"8&zcߞf~8;f=W(%;5`'v`F^Zڠ39c2[Bk-r0/8I mEjF@Ȭ)ANw]K`kY΍,#zGLnq&3d`%&97k^y6dq$MN`=^f@n5|T ^"BdLl  (Ξj[\Qm;cM@czmiVI L6أճYd3X)v=w$\n(.SJ.t,=5$h-3m88eX/!'Q-NX?^_-Uyߟ}@ؙY.;]-Ɩn䜥" LyL9rJ(+4.vKx^Q/,ofe|I[W( 79]QpjԢ֬iTvX\T.kۡ7JIɇwbrU u4vdNiW90{yݒd:f=D>Aub-2D D+E2δCKOC否y-}!W;@*=gJݚNV8SG$ٱѦ ŊrI#o8aE ,z\As]ݿ<~HL64kMBRJ̃.մR̀u3?vF,N39֩$} 8˖!X3.fS0 s͍UrR%Y=|-XU(M ȃ|A!$`<;mk2IiCTOv,mQ_f류ބާsOqgROo ˔"\KX*#H~o8:AWɺEsm*& BsuDm|$n!3%p:~ֹT#GA ~up!Kˠ]q(6˄{e8c7B43mP@XK -|ӏ%˦';|>T2Y%YNs;B\n`{ߐ!!P6E;AnQz\s_doqY6ӍR5AJūba2` Ptc4 ;‹{5cPCV ϳ<Wx$F )ZM Jh_ψk !D֍@D~nm L-~T]4)zشP&N VeP0wnڝ[wghȠ!!K)z_<a;wjƂz-x˭s NNB ʠ3"u?A[=MɅYbTsK=D֋{'"?V^e7$ Emh 5/ӇsE{6yλOy@׀?-f. K,AܶpL"!XTa ;=Uoo{eՔzd8m VlCT,3i?)撻[Ol)c?VF=4 YíS A'7?RA~3%bG ymyl &5IV=|1HUk 7 px3M<u-73֋lt|`AU) H椕-GKU}< Z631k#2Y[e2L/ITknnS:=]t EFQavL'kJ0x82%r&+ҏab.J yܐڎuuO{޾FjXEąӓ=y/Oc@[,TYcq΁?@lZ)QqSn7-Qd"Z3֭Kh-thdMKQ(C_引mlE-Tȱjԏe}vn6rȷAeװ~P=pryupC~zOe ;F1'5|TN gIfTO^ELa8mEzfK\Om]RnUnLpj7^;b(hMkHqz$͗ 7k4ʕa?O'#yI Xu=:L"*.F?/kYTý0ǝES |CfGPZFI +ۿ97^[Qf|A)h֨u^ǻxu{QyN `iA\B$ѬW}x́lJ?-j`vF78u9VZ!q=VE}̌uNJ4Ss&u>kQp댉h$\_;!3weUᗢ#|*U1_ 4Fk+GL^_^K"-]N8ιCwn̴t*j-J3!8Pxm1lC٥Y4/-" ߥ6fdiz[Õ H.gC *jp~b $86 TԜja 76Az 5g)UeLuL m V5fM3E芲"n.)|B Q:XCrFV`>DT Rd8:bڱ1t>vqZ6,mH-%bL_h @9bD=q7,F:j%kZӍw;ߤL,%[N$[~ tSŬcUt  j-OWd~<uV퀕tFg >V8m*H߰f@*r6!Z- RW` IL t`=S"~|_2H H<Ձz$ŃWGTd8&эcfv6ĭr;2(q)"Lbfb.fS*2AxD6!մUَ`,pE 4׎?uRO]6ద5'R/єM[]qu=Vp3ma~f`Na{xB'dtN2XZXr*7 Ig9J%Ꚅ3M\sSȱ~܅4-!29amdX Рr>C@oޑ81KȆ4M/΃ã42qiQ&t @1't5&x7JGl6db4zAކH/5;Y U$4./zkYl }HBo1je|1rZIMΥJ b~ di/mV^BLO BDR15|ZNCPQL/1-2VQTبssC#~#qϓ8+]57ilDK'R!}#$>;K$PE3䚆=C 697i~vEH,Otl^3-b:aR$=G;yҞCu:#]71G*9Rp5~E ).p:fd8;C7t#b9fK! "KH1*i=&Ғԩ5F6*cgpO`/(0tpŬ2F|<=FvJ&\;4Wq޳z `9z)*շ\Pv?0NҾH9'ƑA qm3I̚epI~w77;`'J P>IE5/2:p NrX2Hf*vyuAaIzAݳzΡa<=Y6(tejw و)x@ީ_NE&g5 @B-9@SXU4T]!m:07)b*b;İ2Ӆ$Q"H@) ]EO ~]{ĉ ;}_FIqj *-!8eVbYiƳWr "C[Ѣi;xFV4(z]nPa~gSS oݗ!5V)6jWT~v7_[+5ȇi|xy7/R g# hem]uwӺigl4`:@@GojDTcܨn^,2m1hH]m{pWM}&t'ȺHk5p\fY%Qc&'k- SpB6ɢM`0[D^b5w_Cޥr27:4 h>9p u'i~Θa專!-(/.<djHfPф kNɉ RUmP!;}R[}1jŨG]7g0㝃T+ mւ)΂eSeg%`4r(*"ECLq|sS\Z+:Lՙ :PDR?=E/Cu^,}$fͪ`--~:QiϏpd⺤xbSHM(uBgYK%ooדjW\bM;i!y$# s]zR䙴+6Ѡ<`O~?bLG`q_NȥX'Sx'>E TiPWJB+" 0dȤMulV#+ȳ| huMˉ<6{>ol=TxK_Bm~;|0b7`'a:*hz"_&89FYachU5H^`{nڅIφWb K_6a+צD>={(;5JMs_> aZWRƂiD)0gE.{mFcg-:/\_ݍhh?Ņrq1L^Οq~B6 ף $In; +Z.yʰ!͏y& [FNxR.+rYa}<ɉ?J-] h^QW+dg)4~wфj̺oLP븑= pyv@Y^L{3f tNq䠾p LVpAJN_9u<[-0_ULm:Bm4>BGFeR>"ݓD.:V۠OklN43bhMΌmyIM';XٌΛN#w܇"q›@1?Qq$^PP[yycZ;X'H#AX~baȂ&,;'G=$~beMB{q Zn(C|yBM, ipΆ`6r t]:MHn2ϟ7@>p䳡oK'3DuxzִkYZ - )Jev9"0~f y풂tV׭V gaQvP T@J80'a2awy<ﺤ0hzc;i~cxL"J hYG7 5d;6S"ŏ=$;HɰhJR|phiP(T6%Vi3$v_B;1𮸋My|Ul?=ئrH0$ "<޶N lQ),a.KuJ4Tu@TJ-| 8 v˞,Fwn2G] }SZWI21ѵAs'aܼxg{mBTT`˖´ ?%z"ZSGh1PZnmySDۯ^u>QNNy$?چTKVIjݰ? uX 7An@!4SCBOr\0B19>MeOyڝ! 5i~;ŎȀ}B _8Sa)+IHrY\|zxCK>7=W<9a`77:Pt ԕv H Aˇd/_X%4eXhJQ:Fyy't dki/um,ցG&+~_sHH! ajbCűVt9D5ɳIPzҝ"Li?kj]Gc `_]EU Oj߱rVE-H-bwώm}܊Ɵ~F'I/>/*"Hj⟧[ɺ +2{) es-pگD3tCJl҂@ (R1Ҫϝ>Y] 4Mv~<#m3$ yܰEP+JT A\N2 пw^D&d-#,逨w 1oijكNCٸ͢C?\sпeu%*"߲(ܧ~ABl:^ݞQCWm2hmf臐B08.HͯJ}yL̴y;X=SνMp|tMaK'7U/a8?:qMcF$gh M-ޱLR@4*O\j6y} È:(؏0D+KHKn6M{|&R"Q5OCDktbAjPdJQL|'Y"5k!;Vy+kbȏ98I&1_6sMʙM, {8>SbԉFB*pFL-g⮙5feö(Ei 7*ҐF-W$TOmnU#oQƛZu0 ?{/[@|eV^{y.;!zmla- u[[ԫI)#ſUPq|; 69/e7o=w&= P`TSsЮ78gv*x>8Z Lb߉PoCȓ hg`řZWd͢9#E75?$[zzdM Вg^25-p40,|mHBYku-C  f̓b-t_N2`XA`Hpx,d C.""(ȁ r:;.Q4,P9aNPj۵E)>*j]>s_6wZ,&{a2*[IۖORPTߘ8OTI[<~lTpy&*G]Հv!j# o }Y™]~N%j1TaJ.ߢ1%FJռY]E%+JY:֩/<Ȣ;mAI^Np΃  iKcj89[ޝMOFp嬊^.mUٷx ASS$}q :8k8!n7P%!:BDP4aGĕfKTH&{I䫫S,:ThҝEQ,:RʠЪ3ߟc!)تˤQ'*7L8mɈq7oVx P-J)Hڽr<z E2({%|W.T8zcwnK19dr@n\ZIGFmMϑ +7>,{w zy*U `SCB/ %Bt c)p~xd6fnؠC'dc~V F/yl>c$mF5f-d fb >8\fo Id(=}6{ |&43QS LT$y:чx9%>i БjdoZzFI_VD(q׃m-Oe,(#(;j?Uџ Fƣõ%3tŘ& {"KH8}2zLmH.Rwi 0`YTا=z 6Ygϻ]DE8A5L=yBi^Jˬ7pIKT~AΨG h}]]e@%P=(iZ^TQ5rԱhHl²[;b;b>:rb'Қ#^j˦xm[ĥ|MtI80bƾzƿg.īcc/l-fKx^f: * 3Y$dt%'l&/H`ET/bpfӂ0#}ǝ7'x ݶFF~3K>!(36I}]r5hrʯr1M~|/&_EF ?\σAbQ]&9m$^Moc395DF|9CFCL 5GItQ)y4j>dž`1󡃤JnA1'%YY >ᗙPR#&H[5aPo`+ 3r\y>7 iM;<%js'p Ш O*UG^w$s|~nj"fSѕ+wPK,8rRhpϕ_?y4TqfvnS7ioĴ*J)Њc^ƫ LxSϿyIkoiyQiL9 Ny2~>?I*':Q8TN+L d}N^]1˫J=ɩd#i !~ǩ T#`bbAi DU.9! :hdu3FB{05TNBn}<ϯ-ar%ˇ#Q}l;&z\ M.gt;wZC^^ ӢHԬ!_5_(<\Ȃ‹H6*2> p^ PF̷}Ի>ZO_*AW|,_lfF䝂"6/>PS̍%nT_&}4|Vg\C/wn M6?~h]dW`e6?Ew*/>lltMAvYrOyԪu9'T2/)[N> J\CGw^"l4)!mӻ'4TO4`ႨkNʚvT;K4Q0(t y>H{Ԭ W;X8\-e%D"s*N98% VmmݹĵT_3ۑL`+\KpT {&7:30((o>zEXrM^>oC5O8]KqyZgÓ fu,j3/ Ɠ?J0|f>"LeF#AɜSO7haw/TTݖV^+zި,3=] %RXϰ>#2ANuz7Uew 1y$LqL/S IuVaqI {r J<T Xw -ÊBI#ѼP`[; YL~ɣHx~I$PURG , HDϮ~1"ɋ˻`P~1x1쪖؜Z+v>Vf1ͮF[)TEZuQ HPAѐJ)OXh(۩ w.3%7zAi#KMUP6]GѾ>b/: bϫJ\Ip?$$ժӺiH8V(>s`pK[zs1wG!?5Zžb@bry#k r^/{A8o†^7V&kQ7g>U̙mhøo.Ŕcˊ/эD,^%u= K]¡UKI7 b@^0Ok;nY/H(of|x"h_Yep~XUc`\Fbs ] J9ZRc 3[9z,ڔW&tbhs|r|ſŸldzB|'cª[6g2Ak?k{Hk >ݘ-SN]]0A 8R+yۅchU״[x]RbIIٟ*M܅T8f;$~Nh?Ltp̊lO =ѩ\`KmeVYMZՐUӨF J*r=s\MM7Ԁ6rxՁG.~g?iY#*ݱ +@4yugt8sDmVq+—:lKlcDr0>ޤ褢gQ6aIe9–dSe+A]IItVw4łLlt,S?5Ѭ?=ưi>g@/|I%PF.KC E`͠UiLJ~pӦ$dZLҼ2pb52:G:k *ͦv4`ɓCA‡vJG^rLxaύ`a/&AtAuS߳l/G{ *G>_=fҩtkWlWwA`qXm 9}-gDUʿf""M|eȳ'nG9GuyfE47o)ghώO5KƯJi5^I1Fb+na28mM[ฟFTq)h2'}p\@:%SQąJyLH> ak/gvB"2.7AW'~RW*jel{\ 6qw-7h)Q  gr–NN'2ߧ-Kl'K-PԵcfgj3SMu ·i_zr<2y%L>#:׉ r]aVY(no9gkKty9ɭAw{˰MM;8%)M1%sx@sA%OWrMh:B/< K1")CBE*\х a20dk)كrjvfxOZb''km$DĢmM~!rv ŀ"곥t7|z 8 7| wIeW7gMS| MO[4n"lwঁܑ+Z%״aJ*tu)ת9U}{`+ Iڌ{ Ln'YiՆ |JpԺ,aknO^(3$R?޷,2S nʮnU<{*`݇j"` *B\&$L|S: /RJD# i Rh(O=nM)M܆O Q3@EU~gBc3fBSn&SaP"9tG+r6iϗb"S("b$T&JFԢ M%c;z4sbgjax- Opz"%,}lݷ"8C0dlAda`h͙TQQ>u!4x:=bzjQHkٜeh($˂¬WnKfAwEH2Kl15eXw7c7+ԋ*ޤc6ϰN|U[_[H.LtSh):- l G.XfbLԞKV_Jx\>7@cuF5/NYIBx:lcT`VjK^1=3%+:_Jq ߠ6Jr&AE2"q˙pp'RKsx&E*]oCG&X, ,n6lt8Z=O;@`{VI:P-E>+}6z2ChP(Bڗe |ܞLflBc=\*gDqQ UfH$#|C+w!LV}*>#hQ-OZ2^X?||w:c]3uRLBL 7GY|AfB\mxRXP1Gm7Ea!NO p'#l rChNXYa{!!ϱyQ gk5ze&MMwpPmI+&$m(z67Ի-TܢszЌ/fX aWݼ [@‰ >}o_s2?3 UFU<kw9exXԈGP p1U g+=[~BV+TTzV‡nN+2i>xaU\{15e$Qͩ}Hz`|f\]]}K68S~l7QSj*d|grc +̕A)lYSfcT DGc .J׍Nы";N‡NN^LM2,Kə8OhҖZ*=ZU1M GIGn&U9utj6 ^Vnwi4ܿQg/v!CFefwqv8Ml󋷝O1 .ns/.Dl҅wg"1F5_(ܔSr_l`4*|vIoF_j!sV{w/Wy^$Lcouk0X T0s~zv虁Ka79z:D*|QܭUl`2P 2V_oM״U g+I`Z{4)c?v%D&^=xEa؎+vdf Ţ˪[1˯7 H@ǁK ;u'Ilf])GNĔsק.2Ws~_S(Ŝr%E|/u_(QeC-Y.)CφAvb/~di}\J˒~9`B<4[&I:-Cuۘ! `%yB0ߵv30)8%m=Xܚy~oűm啢Db GC.Qلgԯ3+4-䱲xDwmRw#ݡ1HCH1Sk d% C^b{̳Jidq 3BI 1KG-6]9qA[|: M='Ҿ<'3(m(?g^:]v7n%5GBXiSt_7 ?&DBRPemfh(i+Gfz*QaDYq(碣k{ģSə49?&b7ՂK^ sgI[jw:"֢ ɤzx'q2gKc܂SW>.*g&j&CFq R_bdd #w#bL<0Gzz Ki"T/(\#}8Z~tFBï?dDKn&VN͠o)5hLCP A͒<9SS8"585D]^Jɑ~5*O'ukV,x"voa(>/ߗTiT_dЫ {~0[r-:gß#ˆH Y41!qKIeޯt ޙ={(1A{r^*QDT~PYNeƑ0+oT` xZɸ9ϱ5W44Hr(>}ߍNn R"۠9yUn,7|X<1x,:5 (H0P/:=})fJn tKnӏjn=ԓ:*/VޅxDu0$v$kKŃT̾9y(Br Av;q QKC /]\M3Q4W-!^aD G>?SU1Pu40:4ZnJh^ =V ;NB>%cAq0݁Dq )Zb͙ԍ*!s/g[훃i>fL9)-mlgf,d"!Gz\I Tge!eq7wkCޑ*J] R,8} ` |?&uCo .GYۺopr0V\%c)Gn;i&ed 2ytQQ [hſ[ Qc vᓯ"0WbpOY1+W'cgX Rv|tG%w?8IlyOh8BAһs=(Iuxn OhϺ4J=oab=@,% F[%Pr 1 mU]PXuxm" _w3 ,:Hcl]ǯ?c3TlsT~wrO,lд 4ז',0_q4uD/v%`-epP0 ۘ@[_Ӡ tngV7 ` lIX]8-НOb"/Eͻk{ J%xevy:NNy* mYԸʺ`P Fh{Ho%As(5!!#= 3w "x)JAөD<'!RR2 <7'="Ǒ&n_ )Y*|[j.(QA]γvQZVu{(<[*bU h}jrZ¢^h:5Trɲ˟!%FPD>pԄAC՗G;UUT1%Rzw0WpwA{S{xz !W#5 3Wp9=\>aWX6Y~HG̀IjJ]ģgN>$MyS: H3QrpmiKIӇj^qL3#RuU%Y8` %ebOv!]OŤxHun>ztM=4'lX$H ci-^h]c'?qB}4V }xRNuU" YF.g~M{wOݵ<!i%:h0<HD# %rYH)WKg/&>=sR|͑a?@}$' $ OQE=aJ~{uߖdͰT+VND.j+tPOcGOjzr{\2b|#(U*ԝ +(AZ4N7`hmG#S5Hq9Sk8slhQ-$Ɋ&W΃A*(s A}x=0+_MdG:k[&{# AkK?w"20srfѲJ/ ^W d>Oj+GvfFCy=@uzMU]CLO:exۅsGD& ۖͧG\sw%,>Wh"K3'C}RU䌏Q2\ʇyUJcQ̧ #WNM[OYLࢪt͓tWʋwn{uaW6=>{y|%鮾n1)sî:Wu0<[li&RR3zls]s)p2*#uB#e>JrfOXR#f.dO3c= >S#(>׵^-/Co3bRQ.G=!'Uë1aCB``ܯ3g)%/x#f| ȸ_m7T 973MiVRMLڛI͂\f XjmM=,Emn,Y! Tg3y:UrHe#|2cVӟ2,AAx.Ro.!!:~:$,"VDtJۧ0xD#A*hzyX.ӟBfZ-5IYei[>f|#TT;K_ |*kӋ[g1BП#O5t\1\Ԍh Ʒ,p?'O+3dFD.z:MҌJ/ 4Sѓt 138W:}1 dX'm޸5XI3H%o5.DG'vI? EB=҉᪢f˻ƴ'5km H9%*ÊdŹ=9UYt_~S?%t81\{&uyplu7֫-aN_,]Ƹٷ?hL$>t4ŢCLV5<8n;@!n}g=cqj08/Fۺ0Fa_$T縀%fHTKJ%(V$qLh+ Vs4>up3B@]D)hWj^W?3agp"9y8-$+hIB8vo#y,2U~@E.̈-db%j{QԖZ<m3_H*fgwf LP&A]b(.7\j'mgk5xK==]>aA kgP7ɨ^88XG߆ETBXsgױK̨hSXueQaNһ7RK]mdNU*!#5?ojVDpwh$p-<^aBFޞiI󥟈>$m{Bt2!`kcU~7j`Ykk3@͓BOelLAS1McU4(p0VcsPz+ BJ=k0O0b*=nuߞ4Lm!ĸE &7@ة`lT疳aPrC Ru.fr}8ax< -jtǺ6}ijrH oӋWvgU!wE rl08Xk< avNA:gtT.LvƂc%!fƂ>2}[#x3N< M:_.e¨{mғ]LQX0fh32V?ԧɤs]j>&at" S>I@6s)oj^(&@5t4o_vDDpw{47wS[DٌNsJ%p?HOgO.g}+Z$r^y ӳˤdktP}OɋA8ࢅ&-޾ IzSޣ q3,QVI-ӡ5%E_vgMM2Tٞ}4p:!߿ٵAU$ *z9HhhA3z!J>4U-ẅ]u h۸N;wh̐Jg ˾'Zc'Rp n( w#xI֨[2rT|b{-XZzY(1ޕ.ScҾ߫w~:>q=! )nz5fz?/n@Q$5Ual8DCc[HPmn@ xUQ`I{0,,t4BqbHCuw61X,|w//zC"Q u<r^ }1[y3oˢ rBO~~lsfQ hDQgTq0QOL*AUxjT6D4t2cM6̔:PT%n9/@=Y 7W@4B=Nb鵴\8>K87):nP *P-Ԃ!98UvQODSҨd̊.&itG^FO?Ft~}|aLxx7% X*Q \Jb0 feςW=p6A?S0%Bj Q5s"܊^i\ GCqbVm{oDFWLH,}4p{P!\ Ж7Gw AMY3ok[z?j'@Fȩr^S0X)7]6X%J{yqv {Gs)A|`夲~ lj;<}Sǀ7]͔ vX+ÉqwyZc׼uM[N{9w;#~-?KMW!T"VphnmٳXC{jYb63bkFoNX, Mp'wCvT2H"%8h5A^XS0zG9R J&!E҃v=YsMoU,ʤ x0XDLkvqfMCu$;܍'CV&HWkY6 rDoAM{ ($Szt)kqykSLd7ݕE>emȈD:|c2U!GS89p<$"篔2 >WQr_0EbM]؋I3O6f!Ei{EB70aPϵzTwv,<&nSkZa%s,=UE]&EO3D32Eo߯ ڏ6b)/bDy _9gH8cfblAtG 7 :z\Pf߿;+ŭ0ѵM%uLL042G=QamᶂrKPooqbdEy:bV?`Yt O'WGpJz]W}/諿 B*#?X|w1fBEOd z]ن=wB@ ;zV\0 ąxM jo 03@Sb=|DתDaҀ쉚8=RЊ}y+| ēB 9nI,TStNw+ϰ% (8 u^FD.ݝmo@8UECi$.F~B\vKV(yPB߀;t^"mM?ҹ+3rw.p&90& ioUp׫;q-Ž ؐOӧ5 BKL}#öC`w1\% jcr[0尘1umTr_ bs[6*39`tx>y:څb9-3L߇vr( nnؼSN 7?w- 9%h̰ii0Nq޺)4%]*yT|ִkȞ$gӕP #W U粭n$ ])n9%v&Uҡ8% VĢ2Vao*ZP1$aq*1}MkSIJvʘ <.:~n!koZJ7x(@J'0( LwSB &#%4.Pku@mT|Qj{x A }+8De!,:^A˕clMkJv}J֗An`7etw_ڛtA? oA"vBMZ'#A=*?1֨4yA3cC5N Tm y KpT tS<1 }>foH$Z~x5I!CܫsܳlE IS0 `]8XՂ`A}n9e_řZsgAmU38rҢkPK*/ @D@;0QqQn&cP^wfAD6 tG2Hpز}lY=[aZ E/(q${ pI\t>*J (jgnt׽Y1e2bozFa)dP.Yh5$^.l}Qoב+ Sԝ>)Xk2P+YJnY K_cz: g!$ra"(&(]N4496s:rQ"yME[{/%6ACM cᑋ;<%&l\U&'WU&Ms@ڵ =C&$B)ְ 05u_JPyNp7ԇ%QWe=bQTNI) ƨ1VK#O[,mP`|<{dC5`m~7GUSq2}ev*RĔ0nWϚ(RytUʏq Jy\x#(9]ulR3:h8Sq#QS`.F IWWZJF|0Ss\U1DqBtS[V$!\?]oh; L\.W%mA}`vf=Ns$4$j0P|إA BxDUa::`0b6gq%)z>1~>_m@,Q9ں\^YN4A@ER27r*~S)yYYjH]h`L2g*ťxC8[_l=4a*żP\J=cB?а̔A`"8|38`@5|"UpPEz f#G@!K< W+:Srqh .$@B _ƌo{\qO1!(lGla^ޮZ/‚ڍN]¢ْˉj0FwEk+@Gs(:ȶaS<.WD<#el~pǛGEo}Qoځգz{*`׷,F/ߍn=$%Sh6g譥_(DPj`y-0Gگd\#m'󝏫Vϸ+5 iI)8eWՅM{a9HGsYza~xt'rc2#ElP2D4EJd@Ic륎MV8/^~']02ɕnPyIzk3wP?~NZ\Uhal$ߛ5kWuuc["YXA~ߊ^0ڧV^#}Ť^=͛cKLng/sӠdjrçYi`Gn}v6}mD|;_D*AdjmtFSDJJz2D芰sݵqR|90N4vW~6Qg'oM % wFxt ]O cG - go3,4~\ϪR ^dga0V4CZ¦V,! 'KcT`UN/{GJYJC( 8m(p<6=3"%>F֜h$&Jf&Cϒ;[ʫS̨kJs𿍚XaٖvxSt[n3D=2QCmm3"-fƅZݢ9˃՛&<4H.ȃZ~>Oz~S(U +|)ơ}r ISYڜy3kėt1L$ǂxgV($Nx1A/r*0@9۞w"Eۏ|]j;U c{6j(dZ(Gzb?zS xyg˯J

84?Nwu!/(/kio4 7}9k9#6>(%V {%4U +KAȫbى [93EAp6}mef|=cb#Qj$%#,-cZqq @ d &dIU y(ff&1J~п!ĥYw$S/RMB5%;BtL8 *`0f-+;Aթ>mqBV2!MkgvhqP$=9&?4 gvv΀+I(lo*}G]^yi3"y0cCrp4͢5x<.}#_#ZЦ1PkqFu#8N$C(D #\w&IߒjN` $]jvYU>^1>D L _kb>ɮu5 ]+s^&uaWa`H>$tЍRBe3ϤJi+=}A2%bh LjβuT.a)#"LԌ*i 3 ?-BCuƋcj|'H%V6Q䲳f5BNCu?ьg"g6=c}.[5[ת~k\I.9h)J?h뒝#SiuގۜHP|s׋Q vfQI KYy1UzYY|$:Y\nr%g$^zD>ܾ ,Ʋdqwm\b#KU[-6E-b"^nMu7H*pcn|gqI1u0(}Z=P<b]l _hrOH&ں^qQz5!ʀg dEA?|. )\!䟅ߝ L1T1Q&v/z& aq|'iiz]=?=0GDdm.Fh {7ꏔX¼+uq!(k-2c(5ʛ51,](3VG|Տ" Ы+7xEh$a'#`V3Ò@J<=,ȱ,B8֨Pۿq !%hETqOM*6|aXλAa~[h<:N IB6ׇj4z@+Y& :yd՜o(jLKIY:8 ,)]㯗׎vwLH&ەdYHyA"?Jq8(>/5?>ZgBQN:ڢ!. C&sKҟ`BYpy}1êog`gn",;M\쾍?82L[pVyB69EIJY/DjI @XVyfMdO.*<\\G s=NT$m͹Q2Mz ]A.Q:צ8xC<Gg|O!fٱ0Ñ "4u`SXo0S-4Ѡ2"_ScB@*Yiqq(!0P6~)}J'5fWtKB4s'v d1 uAiҀ^$%ÙqWz;?ZRVJFR(V3GT"zz6B\) (۝\ ea 5LsJu+A+T6 8*UQ$nژLk.鶏)ճaoܡT@ru@8oMJʅ*l}+S/Ƕ9Vx ͂Cw YKk۲\ ̒AuzTrPOo2POf,cIW$2 kI4eW`§WEU!離qP~Ϯs@q.񖫖ͼ=o$A(WfMC(kݻ'? ЦX(h=?)8| i)XIQ?_8zAYeT@d}==MKvE)݌QZШJyM'=) WH:A6 ڐ.!( l(Z!JuW@b݇j@8/ :q:mly6rg9QYP[6$1{.B B |'%S FNW\j?Y'oU7#)׫SvU?f )dczqj *-*(PHOQ }ᨂ"c6QBkOy$pca:-nCZ9\(^?\TK/O?CL֙C*-[YRr>mQRczׁGEP^aCW~*r5Ҕ:\,/|Aۨ( q"OsTRr1⹏['=U!ط<Д آO>;}O6,dOY9/+ `UT)lc¥ps|R wC`MdY\䔢}Azt26`qBPva$%^t(wJG(,ļ+סj}C]y!1D\$3'TXٍ9 V IǕP` g^4 g>X=a& S> ʌ WW3z;O I870wGQ!AYd&du,/3*M>֞^t,x!`-Tx١C#fuI4e;[sڥ!qoˉT)YzZpGAWzjZJ= PjRmenW /∇X'kVBW[5Kj!fҙa"nvOBҷ&xݽR4ȝ&߮X76Vk59UtݶIJjk7`ܲCF؝ tAbDaU 6(u"1GyګʬX/+305iuH#s"kl bƈ0u3f"ׂkǞق:]?ǧ.y_ܸcj/g/aU} !r6$3;LEBSF1'yTpPXY΄pPEzWIe E4|E"OeKㅆΦ \qm!WR$ډ7r5/ <#%I"T^=o&G X} ~CA̰:VESwQbƄ|Α);spITֺ8䍎Ba~8JnF#gsG Pal\ 苢 :xi]Y. tBb ?Ô?na=؋cȣ4j)D높I}gbZSAm"uኲxNcȏRkWLIDTJZz~ =a`7Mƨ$ɪW^xiva^s4B1|EA%~(Bp ؉Dn9bAw"/7(a+ԩU!XhN1w=[p=~L1l$Q:S$!<}[l7'$瑧ɲ-tF3S mag,mMA aV?=ƃ DZv`h^ƻ%1^e<(!]J.%_׊;DTQf$բKyQ_(kY,A޴2{V<$UDoPJ6ut9pcql,C%^m<3gVX~j|U@O/_䳾g,;"ickC6̴78}9 |;4&Ieϲ".4 z30.WPsc&/ up> ڑ`|!Wn/P;n.^p0Qr/bH 0ˎȝ3 돈89z֒2ƫFj(6aƣKUaPWG[ \pD8r3SGsjkl76lFRN Í'^qՖ Cc߱Y:}ER,eC?͎~e'6^Ei<&ӁE5X/ Tr_Ӊ?q  Vd*{9.dVM|Ȇ `s?1t yZ9+X"o 4OP #-K,JE,K|h-|vstz;Q`rATwJj=KxW86+E%g@uk/~=+0sIQ[۹I939^eD y,/PIb/,Riɸ8m;qK(u|wmA}ݠSicJuN ʘJOle9u dԿԤ8Er1>SNG\;&>4HAwx8_|kJ/P|r2FOH"0t"/bBR93Χfg 3D [u["a1iE2LvŔiY;g\@:76JzL݊67(s0lѯqЭNrKk'e51:m|Y1y f޵&W9#,DTGHM6{US>: ͳF^Yi^@Ib^rTaW#O]E¦wҊCK8c)X ٟ h& w6C0>[Y$ۤ/y6.;73//* u*p,y  t3ʿ|+$ <h/lS wcKtDFo͌ B*+s9JWP~N?}KSi LUwSN]!\~${ `!7N)͉2B%`P$aAB#] Իj]W`,$aX){S-|}ݐ2f~KOyH1~sJPQxG? -L&~߱:s(:K pwz( ,KDTbйkA6\$fn,84Hf0)&EU&vL]]8^xEE,yw7xuK>qq7=/R*|屿Q_''+ܕw~;П]ȮY׳[7{>cH@39AJdgڍkW? /= b f,w4P$)jl+wڊ|[vkaY>*v"aͻA>p{ ykkzIVɪIn?5Cn3 FN$>̝@cE]Q6>xLa,>RɧdDx 8eCw A£TO=pYU M F=^[)Ko(:3QY'@%!sXr} ΓU75eݟB5VJ025>/$o7쒐^?̟'e15դ+Yꁆx۫]|R@Aʬc@/,P~"ShYÔ/ڽtEEPm<^Z\$6!T3u1u 5JKhFӻ*:F>C=C@cޔ﻾ |b,?Ζ^"Ui(A"qs1/^5K@lN{ITGsg KŌD թIsf Zz ;!raO?~>Zg7}JO6( Plꪞ/.1⊋!%mV\4k; Q{z"mK_?E3ċĠ~>I[WT=pEJW!/ j]\cc2LeyWX-UR8k ʉdTJCJFSPڹ`M E O+|פف働ʽ$F#݀/DƏcAeZgӝzObP!m/jd%(SJɜx^x% ^lA'7ByJ:OMS/Hm.vu0,zkL/D9C,i]G&heyL{ʪ~Vdp{ Z#q Cs޷Lr}3Z>Dj9ĉeKWƇ;⻿e;ڙق+Vui9^Z$MfkB/Nuӫ 3Sʌ*{ZpO0UOr9=jzx?}t;W"J*6=홤O[H䲝b Ǯ.J[^(#b̴ʡRmT 5چ\wN ߋ`v=׮SCGY!hPET3ߦ2}AwI:?_,rT~~-Lqzh?< |=1ce0:l8 lu󫝂8rpuŽ34ɍ7O2f? 5̭Um}da482SUÂ>: -UH3fW9},S/e!3ê E۴m˖p÷mL vr'xrסaV͆( S&@y(HϦA?ؖ`fк\aK3?F Ja X@J xk)RGNEg' z@NO5H(Ӹ%)$9vFW0o8ʒIõ8b9$@,jف I洗RzX`GIRnt D̂ᤰJp_ WԴZjc I^Ku4 Ihaz͇BYmc\I)rmXtmW߉ͨGNp $za1qBP!/ގ0R`.(rTSWЧU\͠^l&qDK'4ܬ̩P>䷐oCR[6|d9 Eg%dP I(g 83WgtjD<-b-C[mT.]wD/ETi:MVY[WԵ%x fHhqj9y܊jz)*{{,1o#51:ÏP4~cQ?0OP(cv >Wn;u5ʷ'9grfGDI׫˵ 0px٧gM*w9dϜDյ,idw^#}I|xL֒{w5@qQa)WhѢ\-.?{,L߼rP#J8eϸݑ~@AsOčB,/Jg6&^,tqڈ%?^&ڡ@-Z>_m#bCi>x@"ѧf,({N@]tLx'÷7Vcw)*[ĸb.;ܟ(ɍ'IgѴ`25Uaw+]XgrzZY pnE1gT`MVv󉦼O%ʙ!lQ\Qd+4촐/Es 7_K}+( $^<+WŔJ^X9٪?dEJY=|v~&^dGo~!L#zW<63©2d\H 7_)$q qa~7;'V8[QJWaTVv 1IpR.@ " kkiZ9~H|t8Ƒr2 LW 8Nj)c;dāh,#*kR}0YeK4`+~-7)KZ?Fh!a,uRtRqVMReħ|'Ѝg@n\`Dgc,KٛVZlsY~̙n]Q$ G,C8SGk}ͷ+? nN!Iؿ(664ʉN 4ځ?-Ee|5gh$\`0 Fj~SAa˓"')fY ]Cnk[WV^~3ETc H Ò!7h|fC84]%( lyK N ds=Lvde%/z[BWȔą갘P /mf7H`J"/2$ =ve@};qXP-;[ "ȀXndí=^G5CHrJI& qX@DŽ$E"-񶈦O'4qwSE>V jOeJ_?۾dXs)i,.ۚsQ+D%+'K K^J./<{`k<YxtIPmGW-#͑ EP|tu;Z5DT 'ŵׂ%ɊUl=il1՘5Ez4o]Yy=31".͘oHq$£Rkʈ+k! \o) GHi2WzSts%΍SQƟ^BajU.G^Q1q7 f 8*q >GtstbI&3r&īV,[紧X6,>@u7V='!*,to zS8=ϝii&:ZæAel+ӛB%­/,$7W &ErBo2'UNSPX)S.ҧ<f%zu#t4O +trd/]q'!]"oc }cѯY}%\+VZTjy(Ʃ:҃;8vo9_0wl}@&M ~U"9\R=:C^W+5ZSx %X䯊Rظ>1>=KHTOTj_zJ u# .N-b6ҪB=7Ө%Й>c(+pMv[{oҨC^C``49r+fI.!G&iRZ_bܽ 2wYa U[j5/l6'qdȷZˤ$QdX571\j~ڛ@J^@eZ7:sǐ@?QrbV$ˋm/lb[Müv-~H[(AL<W%Y^pXps% |hKZ\뜓.IztRwto}c]d Q\: Ƒһځ!l&E%?1#)^GHNbC5,Q(RO;BN#(~N hGPƍ PCB\/B#0;Jǩi c;do0y:(tit@o⦖aWWn!WW }b[-Z%`g<,]$* ݦ(P{=qfC=ȕ掽\Nn!V#P-;m/8$)tHspƃ]L b%ڑ'Y5ϻ4/8T6!%Dvm?>9ٚ^/eBu_6-aYjdML֬|8Ř10wVOPX.rMeJ#<]u?uXh)]8nM)0MOW %`0C>6[qKZq:7_ C ^JƍlvJe6'>B Ls)=e'E)67 vbpZ=N/^xRK<җl2Lg h{2cc\nIwjQJe l]U Ai`1+s0X 7`RvNAep[_j /+)~ѵF 9i :oWS;~*s V886% qJPwͿ6)C47 y$V -QLM34V!5 夐}PO{IG5bŁ7"Mx̐"'}v6|">i`&Ͼh`{!^!!ˢߪM4 \ao%KM_.v%+w!mDZF(Ꞽ5@auLaդa~VSd:? D* a]wB8֎xkv7*8ggP]3ZSJ3I\ΧggtĔIW[Vx }eGNZ1c\įDx\[g j) CuHWVhHc`{BP#*sa7.;:_$X\Ы^b"f @mVN@3˷]|Cً1ncH BXele+4Ibj_;lI(_7x]z-ciOZ`vZTkk ,AO‡-xeO|RY lob#\,k.XSLϵr$􉯓#:М H4m\I3!"CEYNR:xh:PGH~k: ܦ! Fvs})ìT3&D_\\އgM6po }f ?MEw[0Wm4U"]<: cFkgٍ3-$f}>#J>:! #&oS4w;(<JDW쟫DzF x#M$|VF3*V?`ý Ugb`\{Itu$CZy *Sz4=nxH ^Ђ% ͠/fRoE=PMdkf%MBTjT90W`!܂ӌ%xgAF44%L,=DkF~t#@7[ DSMyl(}mm9I$KU.-tA-*N;t.yRթD.3gҕ`<%w1T<2o=5k֍(TIl΅5 "DBoO@":AX%[_MP:11!pa.{"j UgϏZk[dA;S,BN#Re ʓj{:bO:K'kV$YA$fs0fзtKR!9@;ii:n~ﾲм|E8K+I JC7^k skhpt@ٸa6%l i|a s4%W1%'v<:\#rz2z`^XwInh[-\kχSy378y.櫫g`]YS1iVwH.R'Uyz1 a;rB9oAo"I3cY~c4p<f@X??3⡗G|X.AG|Ad,)zgdP M: 0^ 'PYCRMưÛ);fA+' =H=pɭV08M}a*kم"3]=湡#/d<,5%V ]4P+@4S jHs2FsZt[$=V˭Yan@Xjt~& dF16zu["v**h8'-$0 3q_\kdXШAtl!]h;|MoKe#0-c@B+3k;k {lFRkA<0Q`${].^"FXw6_7&/v34Jb'OD՗loW:,1=-N~W5x^'gUapRvF`!M>WS '7řKfK.Lkp\lb}4-w3FVKyM Ǭ|H؆Mv8D+"2ڶU3ޛOJ=v/HIX66{%ӻOWMYGKoVve:|2spFA-4.?j6`ʳiΉCiӨEƯU: ŗh߻AFgL(ǒE0*,idΟ}D XQû~2&ؿ7a*A ;U6_=ݿF[ctZþ"Ք)u !Xvڻ0)6{VjƮ@Xѯ,ڍ|[{τF.pD,;Mf`a8&h7)bGr|jSc %j9l!Av6FnNinArɔ UG7mEW VS=53Wq1dhqC}3eD6@I / 8hlJʎd_-tz@(rp><U>Ԝym2SR!m#pm̂h D."#RN 'umZikijL0W QFH~nCzA2D~7qh QH.+zmdQa!j)`&7k$M}ŶIs)4κ(39'qä]&pEz&9o̐ǶCM %C"LBFsGBK/@xQ&fg8hm*ܓ9 7b= iJbZ + t%7ʟp2~dZ;Kh-D %y$]URs3l#R.!Sˑ< rn)>̏')k8(lŭuv ~1GRXPA\am=Dq{( w`ۑ#, N2Ѭ UU*ΊaJ%fب"8KTif`YC;\9wG?zk: RYə 5%T_|H +Tp |7REgy;Ew*KA x#=zT٠(lZpGJY*x !|o7p 3yLNB'GF5UTD3(zT} :X~W\lB]ng9Y_ޫ,y x 3/ <=8*AYÒ 9H>3 [wn nIOIz^T]C joCNG EO3)Š+1?0vf D Mݡþ~tO _9(S>w k}7+L=6*,+7\IZ뎳l,h[~K^ӻNRPBH>z_u;Mf8gG\*xZo`jG#F?[G.^sȫ)Lz:M?h>P=(T`%bs8}EX5(|!DAJ6:CJ~8l3cNJGiywYf&MvsXaflXy &@-hEjɡtOy `V!lZ!mq, Uz~S:W͋yOH샴tʇxfAHZb]sM28] $cA1-O g[IfdT"/kZ+6<)#vi|ZEb|C־%|X}/=Jgն}b`%4:KmUq?q} ^4P=X>mKǎ+ҏPA08Boy`w79pZv# 2P57M-#Z$]p  -Odo{jVa|Ǥ6o;m6//!wWbSOܸ,K(`8>JmTD|41Yٲ$^-R~J,?_M"2.nUR) l,+:ipaR9u";z9/*XDNRp5}޻jKPZR Tlf_D}$Z`-m  ΢Nf?_cۆ@=}K;o^Grȷ3 s}{0ZMsdf'wS*>he\)ܙ#;ΫDy PlTnodYtՄ D%!ݩg_w]r[ëϮRҌ&I]O\ H@}L]F|.#1 7˥v <8.Frۈ.#HEZʶNmP|E4KI$V龑yE.%.7L%g4;)QD%^h4"zm{lKȆ~|2|3ֆua]9t2aS&a@>a&e&yh*~{[~TP\a Hߣ#EXp)!TN}CMBj+k$ ۷Ua sg׋tŏ|nwctu0|$<"Έ,~Q츺7ɍr-Zr`(.lTi 4ig_b4.-xYh>=:bmg- J?R|V_!@,ONWEFؐ!ReЩ2zvd}@,Y'l$u5ccJ /һS}&05k^}Rb)(,ׯ.֘1$:D˥S+=@$(T%kH[̅ND|aqӈ*sAKUrm<; ޤd`E~ZlQb09b[ƼjvRQgpmfѽuݹ>Uh۠ܺ҃VU|?93mI5uޚ%PѨP#En4(  0?Rk T&fF }k\!<2Lk`DFd_YD7AU`5HHq@.=QaSL5FQ+~` vwlO%n(`r7o6O̍fk EqZN㺛AmdQmB`2*+Ci'i |ZXX8PKu/Qav/l1!gȅHMmu9[qL6N1_ XU-9%P`j~ֻt눆mY^:Y+nO|" O3A{}'M Te.t렘RGS?KÂPa#U˃f%В$ɤU$7ÍЭ52={CKq$RI.KQ+.%VB|.mNV;^ _ꆭ[4/ՆLI<8Ct9sԼS]ffqބqI?`?c/lFX/21cnu읳u%ZxGu&θkxN{cBZ~RW,*vk]wVS=E!R՜4TrqWP\3*q(n.dZf= ɎrEZ`r ` 7ҵ*XI^F)P 8vdQbK5+jQM$描~cT P&GSuyC;KZhb(مlsG'pM궶vytfH=]I쒏 M;%< Lp=AD4%dWp!9=1]uH$%BvԤ{9Z}i#LJe`ªX=̲كm>BQ='Vەyd[wfGv|qŹll& A3jiya r& W F&dYIcOS-PV"zСhj4̆Y_n@"sj@DyVLMrPzǗ oY^߲qA"6A`-A),wD8X'wBȮ :ori翫iV5O:4f\wl/* ec|5zI2ciHp )*mh;wRYWvCxx7O<^P -@;kf5" jtXX[$^K0$o)0K  nm"hI bUTv \=FyJ7R dN15_o7|!B~ }ȝ!߃sݴQ֞,X,b&$8x?@ D@%cܕT_} /sTPʂ-F~*>~ F}qeyFe 4ͭ$20%lH"P J|>Hq9qs:HI&:O [~ o!kmnݫ9бwcKLPaP(0 ZZZwnMh^wie@JH4WD!{p43{Ma$5>…y>p2vQ˸R˲ѓ 28CJC+"mT;#F&̚zoN晅zLZOm0YkT5Wp;s[*>Db/45B#DJ$1xulwA1|g֪ws"?"ڬ&R5qcRJ^N2fq/LjV(7%SW -ѳ &;)X-ozSb_Mis~t΢%n6׹Pv0քGw*״@q+CHG{j5lƙƼ48CL<"2C(6xH20u!bCR:sĈv=J\1ߣF,[ןifΣQbH<1DT"[oݯZN(sT;ݣXOʐpoz~ zK2Yd' x-_]:$rh,g15FKK"?i&3ϘfN!vn>I8^g7vP)RIqf3Uh؝IS3LYֆM6YNbRnк6}֟"3T1L[Scݪ }O@790qҿ ۬gWRD/-~|FkaԨpkoBVhDh!iXON Iy k X%"ΈeaYwVaa =VS&ZT_F|&ĠsoY@ℍ+n`3yn@&xﺽMD)e{gVRTc<;Vn1($g7 =<9CWӿ<<-x_֑\E@< 3EF\spzu&XݟAh)MKߍ*={x6Đm4Inߞ •g=: PӢ'>e1>l*ZKK TuC.7;Up6]]O.ՔoIns"]SV&^("7%yEfE|yg`U:`_25Gcغq}2/+'7cnsB!tڣG Ǥٴ+vB j h@iZ\D$Yjeҿq2;e"J fS1 q|Wke7ch :qjɚL1' ă>3|r3[*Ɗ eH1Mb-MiqI4dw=NiX&\+ 7i77ILx:@~"ݸꪘڦEXw۪Ӟ5$)(sܐ JK.ۤoX_b̜Mo&Fv3lgFMWC_?ź 0j˘.uZK=Ϗ MPwfٶdXT$<-Q䘼MVaG48&ЫyzHÙ\l- کl-K2vE)Ps啷iq+7#Su"BL&EVe$+&zu$-H@>6k% Y1wUywlG@.Xbۡ[X8{wQhJ-6mISXŌB?;L]׀E(?K&9DχA7=^г_ u{rȽ*lJVKg(uWHTAk+jR?[ٜW Z}V wbnDjR,ݒ{R$(|Ӷ⭩鈿#?qq7k*/_ 6=b kANgVH7mh|= l\$4o܇U:1AG3MGi2qL5&拌yV"k R.;X=D ߮hۍ{Df mR|@9Ug(iOR*QKz/dj_]0Ƞykђ&Hփ,ÊnsX$= 8O.GJ@f@ S"M,bH肭@\oVd|7ߏ&ovTVvBbfGA[Y]C/AS;nfњ$#z:[^ Y ;[[PX[< yص4-p0ͷflwԂ$ N-CgZLafpP=;ᜇ&* gxR vWu84Fj.LV90<±1X{Fc8t@.$# Ty΄/֬9:Dh2n5IQc <}a679T+JVJu, n >p"v/,d2-Zg.m[b]0t\ltp꼪صMUnU}{]e^a?C !J|nqQz[/]%󴈓J&ڃQƥ%z9ZASF+U]sZu)fn{ϳ~QvmJVm R}SxRf,)ɨ RHmDtcWS<MbxWB ؆^_΍g+Tn|s=~YJ9Tk n#ۊ"> R+K;V*8$}B^' 4)*pEޞpx-7i !g:2p l XVy ug I0*zpkTґ4T-h!|;! ED &yuJwƨrcwr/e r?~cre^)^zpMNʼng UVڰdgjI=#Hrֺ$Lwlj_N_GK5?52wk{?'|I9 <4(gGk ,YVH:@@항= 5=[RB-Lb(Fq-7g +;jCqꕕGC}Ah_Gт?-<֒xbzUC'~[8H8Q+OvtU$w"!;> .)ΔdWlSu!G#^j_M!iۦ{iDJQ+$Luoa20:t_mE}U+>Dhu  ߟv\Pd.}i{y{Z ])3#F}&{'A >iDr&h+dZ7.^j ew+t UK45KbW꯰ǹ6D~ңʼn\]<,Ń=勤ҷ#˛-f2$B孬qkO! ҕ:aqH1yֶ8M}ø@TzmpGD*K-!b7ZY+A h>)-z# y[r?J2ЋfE̠*.9UEğO~a1'ճ"Fnp1_*,V.{_q 2T[G7&2e^3 J%*"<d΂dm7NXהp7-GNo9Q:dBx,vj]ؔ)ɒ.XWnY{x`"`L1gc-#kIU%AOohB4UF0 ȷJ,vEvpd@ȧTJA +پAU~r{6ׇofT<PTlaeͩ(S~g7ڦB#nبK60볿&`*rəOTf&It>!#Əߤp Kpf-9M=rۤL;2Iԡ7 e)a&cG7nϻg%ΐgbJsBArgj%N$62TacV,Xf4Z)܆HZˮ uUM7|Y~@ӢgdAJ8gY7Wf9NU^RHs-ȂmD UC} x:D"54^L2$w԰cxzd""4V7:G0H 6|yrc0.&øR}y@_aĆnxYTR/Ո䴗Yܲ(V6W @=Q~o?8P@=qXXeWpo{S@J;D; IOpVm@Hˣ2P8TA("^NN hAQޗ ߬gi`}K"'NV4!yale*]%o~ʱTECMyJu\ y-TH:_ 7.?]'jEӂy+Dj҉& ?/lo U1^tZS`D=rNO`֡]ۍ^L44U)$*Fx~^ o\.7d'J:=TZjmkGղN^-W˸yE+͢8hqJ-H0ZUr&溟8ᤀ^[g"禛ߒ SAĮS(̻C0t+WzyFN;yݏvWc%]Q\Z엜_[QeS6z{7Nȱ]&[ D݂j .^s,Vaz~:'Bo"fƾ'qP6~4AG xW9zjSHQ|U&`zS)+48 ^sӄ33Rq I4"!_=H>mSE5[98*%f#_ѲǸ5-{LvY~&@|Ћi9FVJp&*-SJs+N7>PIdlTHָHN{HRu;'[IT4k+ øgI&(y݅X#[F0;'3<@P43Uٸ%X~7=\?w Ϥ8##D5o±qHۡ3+pk2=&@ ! lן#K98=QpQh,+s\ujXbPYF0a("jPpl0:=4d`ε9%]=[1^1[yV.ljq5T$ih]װS|DN>v QoƆT> jH.52P ζajFP\/j^ 4G..ұ*f1g՝K/39uDc֙ 6ÜXLR+aHi{ O#n .A\A u'ϺձnҌ =@'Y,r9J4f6ʌ aQux>p 95H4 7+iB7~G4}өJξ<%K]L7l@hm6ml 7w&-(S|g)ꨂEMv4H)5:lQH6m+5㹚.wk2Vu1/Mc 1XjܓSA!z`ID\ [D _<~e~6S2z3(ק[YM[ &|[4=BܵP`vNB )+₏TVO& =6 k^0-T2k`hң5b܃Hz}l.vmLV!N &qmf݀8S!&hˏPg]ug'GUujFZ ˽xW\u,ZճBaE֌#L !ux]Yv; / eǙZD}Kܹ/sys'2@. AvT%&=a"Lro3_Jp[âO(;|m>OREj?V1 H0C[ B2nHX`,R]H\bWHM5%ր+S/#G"p4#}ek_D{ o<(zcO5+e%,_4m2\u NdmT^,}80']PةOeEC0xR!<5GY|F]HȬcwkN)lrG%Gf0IāucT1#=ڣΙW9~ z@3;Yc4.?TtG[}W Se*ՅUJZZ6.W-Ï5DY>"iJP4qV= 0s@֢  5f^Z+tUhºm& U:ti݁Ld2> SGVLa& CB)ᥟ[O^BȂQj6PFd"ۊ5XV` W:EX@/`/#yLA!>05޷Q5'0,}}r@S1~gᎳ q,׮Fo. 1b6å,H=q H8ω$UEj0_,e-DAO6AՇ-0eAB2wuդs;1-fFXtZL5:lV4ɂ c [=}gkto71[Vt8dHfqd`_9Z<^sܰei?{azfΊf4c8 [CS,} ͛i]U\ZY#r>BޮNjH)5eLf;<_gӀ`ZQZֱ!kLv+U$㢵?S Ia|iI];Ol4.kͻ$-MQ6T-x, >6s F'qp*KKMG7C i@k=^ķ=Pj.ΞUrAy,zB'Cvް;'I@`$ԫ:67g_QoFAΗ-mVw=\l Ek=WybX>Ъ[e.H;r{8~uf5 NmYweD'9ЋAѱ2Oy|ogmLV[f8ױ? 0p # (hKB3C{Џ?Fg4盉 -"xqөMmB}?&`&~V'&vM&Zɽ~,Scxn1i.^!w nBk!}R!V7$/}OͯfJkTEVѹ9[;Jh4jvZޖxirnR3>j 4gY^ ٷ<D2&_>(#mGGu0%kt(==|zV$sƖJ wvSuKuյ}ݻ~CD(Zb~[vK y@U+񸟵7a%Bbԇ@%O `0Z+E]NI0 ֻPyp_-la#A5z-bҳqVJjǙ4>#e[ !ns{2bj I`A-[mOfGLZյQE@E[ۙ걔:”61jY!-'TzisL<38هPFN|MfDB_Y 16}8,)P 01;ZyQl^9ិ X`Xlhr ҁmS1[KTI%\X AŁ tnOfFL gӺAExw#H,C֬;] |+K,8Jhk#!<*kYYȨF]?TYTlr3klC=Aw}ݵ!Q}vo~2 >9 ` I}'tbfHlKpP/6ޚ8ߎBzxY-#址Ml饟IG6B>X[rZ ͥW,QXm)xRq[QSrρx uKao{peGkb/e9=.NK>iX,eЙ5Vږ 72 5pS @rR5ۺpLjx$%Q>e=N*>J/EIЏvwݛf@Y8ps8##Q*yWIx ^rp;&h8 +P$LGZ" )}:Ks-eUK\ul1#Ѱ{wpV;lኂ2b%ڀOp[ih x]=}fSY6a7gcpO v[sfEJS7 YY;nb*$W-be1ډ\8=aD!NIT?3rX69C^no%0cLuG{9x?8uCcZ*0DwQmN8[eG*3L( 7!!oH濫cqN8^t% ڕ;#7^ܪ ~&Fz<\voj$vY*MxLN]g4ҜD;/|.ʸ>n xyF:؊ⅵs驀^IXN4 Q@mچAP M,2>@-i \<3=?/RNJ9{)QoS ,36hMXmSE:U{e}309+$WG}; u#g.J 5C࿁9,p?H zӎ!pb&Pԕ-toa0sU{(NPm&ăX3]xߝS.i 8:(e89`# d٘KB Yr]d%טּ|zv1|B5:9 vlpA9 KZ<Ȉ/)w[NS gԤW`+:MUM(@wUzWK)SU> WN}ecE,>qGe@v5SEX{\3eljOvkKИ.jnMgJIpF9:2V>P:qJK9^$f3%&CJ9Ӽ/%7"$Ӹ6:ЮeA'VīT:T o^ҟa R?۱*5cꆀIR.!u1 ôz;g@^vpI._J{@"[p Ej<<3x S!g [_H@r1Q;;3cZ}>u\7 ǒ)Ύ b"kP&  'C%3Τ&a#-W m{j6w[xah.{m  c]x{yoIbaYZjE`0[>ck7*uYR3ȟCshOWt%mXs UZ@m-E tn{FP;(DG/1hJ$AskkH,0;7G[с!\TEmetJn;H/V֐ _=+}$h>ٝ/fD~["Vpn6>ԲGG]oOē P3M`q`Ť/% p-؇1tە *%YSb>@tW Ho>.y9:s %0'+ÿw+sg7]k-lM5|+lre7 bD?W1J24 K.('MCwb7Ql/UrYFR|*E}`r@JJ,E!?=#$3X EM[U]^04a*ƌNSz0oGLA`cnN6m2mZNn,B S1攓':XL1egWU>Þl1iٔ|гFg(L*pYlP%fT./cң&DSA(HIwkEsW]aR QݹJMvT9>9З׈&]l D&?S=;l&i[ئßs/l']22@RnCŘ8=# ys `aLH\RR pGߗ,SIX7g=VDy}AmK%ZeO3̘.te6Eչ(Mt< ֩=^ؾS{` EKV E#@Kj^ DF~~lR%kf#@^GD۳n'C]I8f760I&ұ]"]˶_sޓ JMbrj>i'Kij\h+mt&\1vzZi-Al܊˖ǽC"+=*.P|jr).vIӋ'͹ft95W\6_+x+jVիL} D@2* 6[%m@>'?16z߿ܛ 'sP}Geia,b}4R )D(U_8xN9Ȃȫ2w練k1 46mxnm"``UNŇ ԦI$Ad3C| @ݱзG:Q9`]@s<5DDu\gxͅ9bZ`@ح>`]Q`b3«S n- PYKO^}&MJFCdKNlf1[DY=qK)'kS߱rT"Q0CF+͵C>66uu}څQY4@&R3wUwV0A5q@*w@8Rf& ѡIP!%4 fu)*[B%יx:FghT$b"ܿx\8;\BIu9?L#5ڨBu*v',ū-9!0M> R Y+`~0E \<Dž];mܘhul8e*ߦ+Rf&u_J2b󗡄2J7 VEJ{Ԥ_1MM~@ZP.Fҩ5xn-1C{T\2I\,-%z h*4^{b妖RwG7uL Jg%**PZwŚLvٯR8\>1p{TUQvLpk1|)0 ߅LITGIǾyfҋk\zUͯb"Q, [*к֗U_t۰WZnQp1~ 8/rnv̈$BY EjjB Y%;2kA% ]S{H=ۀ.)k yWFY&koRFp<\'Ub/?bOcetutD;"N!Rq(J']'oAX.NB5-'<|ݨÏŤcV&oٌ?c1o[(Tπ{ [tE~̕B5euu&Yr>\YSl1~#yx݈% od5{uX!?oϵoL\I`aPe@x_W&|YbgcjlhATn1'Xvr뉒괄@NS4t[e d,`H^ڮo/g\m !L.~WQk]96P *W *E4.Ij@,HT[$n*_$}-v&8IѦGՙ9 ?ߋxWS|aX%H̱3h\Yݹ}~8lpJm7zwǺCL &XjHyI\C7yI1Ha!瀃 rՀoy{ {0AO;<(CKQgSȬyae)X0s5^pInbú`Oq00{̝\J5H6^v;˚ɩSWϨ:3L]}l&OŀH'~Nq'*O}k! &rI`$Zu[dLv0AՈsK :h'9쨙@[o})jjn1A.e9szY 'f<1+fڨv&ϛwi0@[R;D}̩Qqa2ɇ"v)k{[&c3rxv7ϲEVS7‰ҕWgOA3DxWB]t{j WNUIg)I1w"~\Y{rillgpk\] iPka.h,~8h3,`?_g^"S{9!i3x>dHd>{{v}ͨ_f}]'+ƛ(MiD ֭]>qh-$:kЍ%0^~W}ޱ\m:, ؤ#xtJrZcK9ewq'Zr#!fۂպ] rBHWS{h)5UDwTlk'"%uU"9(ѡ5d~4 lM; ) -?Fb 4Qy5WAL^wQ$Vg`(S_Y<\m:fqw>\e\ dGe,~ }fRe2&2id#y+ˏ kg!ItR?5ɖ!jje|8P$E܆$B=w=!zy&s@ȩ\dqQ: ڤmyFB}JK|_Ź')y]ܭ08M0o,Y\IhR >~(tCsNxlS\PhRW,s9E@k3q_x:Æ(@o^;or>q&OATiKƕG,@%Qm-R0Ҭ$c4ڡ㦵4cûiڐ2QdvZBg^ c>= F}]7`z Iogk0҆[H=M,Tw}dsTҍlAܽchKknߑA^+n!暵 s]eAeuX'F5óȠJgK1yu◀uWe?p4DzN/@HRNrpN(N4m[Aݰ݅%A֚S@{tFzV]u+kVޡ$y-%zG[%)KEv3Rn4OܧYs OOI"~Q%M9Vf-5j!lq2;Tݛ HjxSb]iuayy{lCEx 4[ʩDSJ6sSNySGn M9K$4 Fw7t+$ξADZ<ۘO) z4.d@2!5Ւ5z qYz#<|JmF/ߠ KY_L)>X`XFZw86࢏/ۤΟ46%DMv Q2 ;o)vWSڈ%OЏDyC] (?LJPuПwjLr{{2G`Mij%oRm\V-\٧/9 *BdPr38hG}`Ug(@}6򳚻jM(zKS[:):K#"*rf"W&L1w&j߾N )r~"ݓ'b/rw,@(?bm=cT#KP0|_`ҷ.)>h~O!3$4rO|o C-2UoJ܏%u1 [dVh~.|$%5#dIy4`R)z>Xļ랛*R("YPi7VJ9߸F%s[Cx[K/̐lUJ'H[6V˽p\d: vd>ΏCF#ɡAȰm>Fa~Yzk '{S8Wi#|KږeTn'ɭ8qX3ʎQ8g_3T)-DGwA&x)}1Ww^WІg+Ib{0 ÂS-[)qW(HGoE(O\L2pB bzXq:J UG&<_ZĔݢ pTp0d~Gl&mX]R\"ʺ`$͂ ՗U[ZwЩj`-ڂ @ϥ45k!si:ZùO(jBr(r&fk\{V7I{\~AcN~þr_j&Z jzVOAȄ,sTSQލnDLzhՓ>K0OZϣM'4C9w$Pd*A]  `rJH{Yz]K1M)lə%D/!k.}kYB2b^KO R䀃{/Tph$dOyuY͕P0J >aؓ9t_U`%uUݞ`.3O2OL5T[޳( +Q_5!ݘ [2ɖܯe].w.fd+>WCZ Ji>-XORq S^#ӭ\qfush F4k#2JZP5(=1""Mo]l.ȿ:B9vl" 9~ȵٍ(\ϧ2#kqN;˙C%K#H(8w0gUS\Y`͍ˎ@Q!T>Ǔ,wmh`39Jml*h?{+d st9q^,{l-3-}9u"Du Q+QK (!Q ͗u_+lЊ]zZe9f4yҘ2Sڝ;dfp܀ğ)۽)T6)q!f6f">M!ە齓 9rӈ\۩rWFC= v[{//*F/(*{@S6& rܗk$Y@S zÛQZŃgE+;ޮYmVVjocbM0t.xrE.M^!߇sEߟ v(ֆLڸ ֣ 2ZKnqm4; x{7J!pҺ";Q Ƕ|_ݖ'HRd㔩.,9Qio͖6 &ǡ]-@ֶDϨ$8 7Qw 6O~+ m6P5Ipa$iӝT)w&mtR <8]: (>uJ~M[cf#cHF]cP/xP\uu #J! Ɉf\磀80 +BT shj:~jd]D|ƹs29?qz˒M! P4n C&>R 쏅k(_Q=y$iatiwdW£X2r8AK_Xr 駘i_AL,]H儻4hJw:4(o0j"Z NȔ4 &gy9zaL`ŀWoa'5t?.9~ԃQWԌ:nx;pG֪M~`Zpq @| VsK%/Am؁r:W ń~9aT$Jj\u0 Wr2W"w2~QrKam[Nj|jI*oY &qgg$DHqyhBߌՇ\ =QרHcpÕymJWPQ4 y[|C'NXrׄ"v fGIR"9{\lT?ߏ>ai\s0kU'oM;"Cm(:E MMT㼡C4bICz]JN`fm@ðC?.fgCTerֻGs#08t cLl6WQ̚afebzSj" Ot< ~:Pd6fn- ;Nr}^/gM*trI/F=ɵ[7m<^&2Վz@%,-d$ƭbFqyi=4j{MW#X}Hz#4Ɂ٢T]38$ p%g)ޙȋd߼uf:dL`bNu9Jmp}OwJ a0]i *6 j0g#dsLdtR  {Tv?aB4o7eSKa< <`[.PLQpli έo =it%AtG@Q)*?XLj x:(Lo19Y9cz\ ?9K4Q_Cfy1?(}c#Zq;;%; !~H:_]ζ P7YKeu*qIle/^fsmAO)W?DHXAV'Ͻ}'#d=| Dmq4 .&Il=T'3Sg^a?}~:sJV wt嬨9+]ș1+\i6gJj8 |Bl4a/P_T\ P( ձ=7(4*,Dx%wYq%=$k$QqNLuPӻYOG|cfS3{$ϧK?oˮ7OIf"/iVo$~[Dl q6 f{l#X> ;Pc22Ǘk(!bfRѝF;@P^um>dF2oi@ KebhƸ sV+LSQJC#[}zF0-c ?*c4%@/^_3 ޴۱kF0Իf;|ryތEdi٧O3#\ @s9u+`NzRS!j.>vPX-xfQ@G/sa)RR;*x.QP7&B#~|B=3`*.3< ^IWX[[Rwcb5ZQI\;J/at[ί2 ߏB20 >f\GwUFƽYa/vf_(2 ]4C>H#DrV"ncuoF 3 K8Z7 kаTp#tI_t}N<ݿ1uש:*l{::V`a~-7ZEo8hϭF=tGL-mmHhtxc^dYӠÆOt+Nk< %~CV"ψAc4F\™Cg?])k6^4I/.Ř @OGñſF$+G+!n9ɲs' T9r==\A7%v Z~F Iuܒ͙@yK|[yY}B4+Ѭ,xZ.M0I_ѫr~Q9UElRYgܼ8MoQ=YOeP8xALT:d J(ھz>j L!Ը/M /]~,\Wӑˮ6[(ca_oY+ZD_2Ke h/Skkv80ZT4_ܛEb~,)w&{ÙkZXKi7P(@H° `T]xQ?X8wz@dzoiL(iI-m4u#%0o2RBI|SjlLcXҷ$2_n3 CEt֩!.)gܺ#X/LP0bS=L:}RZM.(o294n_LR\3vj@˪͉(2岧eǠoɅ.7iq(lI~3%4hTxc~ ])x3^E)k?D2LJ 6t d/cx+Ew14)W|: kK_q̻ m8v&5JѨj@!ilƭQMe*v֛UpXS+Dv޸LN~jٲ;+<VBM"ںOjzSt3ʆAU,eRtlP'NI2%-q63qst^]I4P&1o^dweIb2-FMmDGHkzZwJ$G t,K0km3]ɂɳfeI ^[]EX't Xsg,$XI&"8G3o)>07= GP8D gdP@lg EdBJZ[NJRo5#"3 $F,opo'x׎+T&CϪS:c&t\ଙq}YJh G|^qt!bm_,w6 n;[HxTH.ē_< #aMO`G]i # ("ֆᾛhj%˰D=Y` @ -TtG̈d˩=kh9>H,Y[]LJ?/]sz⮤fzV'J [-9T۩(^W/d1gU_SэLN&xA?1{s<hmOBSQS.TN_MӲ5JBhP,]nmdViBe[e Uޑ*h S?GNQIuT jṛֹH~@l 2mX+1T;= ŽTՋK%]ÌSnv[(; ^]G/~AAi=i4V֧`ϓe0>>q.vU_V e|*x=}^1<НvБ+NjeucUUvcVY+LBh9 >@ILNNA3jG>(L 39UN]hQq+ѺN(5^^`/V5eųpO)~ug}$x4{-ډ:C胮Y$iBSD `EGSߙ/ݱ֙ /D}Q҂xBRXyvPFr19BIm56񒌌CsYׅ ˩ N\DXXJF&2 [ܣ> 94}bDCMb ΆkcGl6Ʉƽ=3KbBI϶(w'd,qnTKA(aP"V64#qSY|]rxE[:y`1GC}yY+yXN){P,FаFJFahڗ_*ӡ71FJDYi!mթCa8}}w{W)nqI=wun.0E$UkCzU_f JF$pcۥsuVaϣx^J2(0c/O9+}:Ys2{ QPRKj֤y+ƽ LQ7ɮlM!RJb:A|&ߣ&0h+I OǜbN=nsKs~]^eB\zi[)@\0>Qwf :3[Lv;qQIhmuAǻJ=8%KRLV] zF2Cd6 i. R2*$ E~ItX{ږv?ۆma,Έ@$9P-W,wHB"/ AyodwHdW7׿d? x:QD]ـ`0Yrm11'hqi"l:|u @ '#Tm9AʷP`" p˙_3eǁCxʥs4"K=њI҇QtUNp܃=b"p:uR&!yNV\%A!/f2h,~߲LP@ytMZkf8À~N]lQaH6f@_? W ٔxy=.Av>nx,3BQ47=:9oU{^;K@^*Z.BHjg5N,BWeԮ(5k 31)tU)a֕?fl7;Jڍ+E,}+}8t&(<7C"\*в0l2x& &is U: 2>OէC׍W No F{yl`ӗQk<o\w)G[_gèC^kNd&1L0Ιn eLU&(ٛXL̏'5>?m*wW8&pAQ,dd!;>" 1@IK\Ǭ!f]eUuR<;p~.AL_cWoߕi]r˰8)b> o=.]%3Ҙ\*ȕeRAPdPQ0oX,v꧌#$:x5)1UGs#f۪qW6]qF +yB0 Js2kbJeR̡O{;]5bN:xd PE5DQ$*rk˵H zUEKku95~ %lo bO\sLW x,u&T WU&q9npvHb5$<0 "=5up 'A)!RX9}-aWs|1xnt `M :,S91_(7q6e:3)Uu Od& -{Q+,1t' o6:3/DV7뎶QbicHr`=zڙ}4g 8&e*!i$;K_NN9sybҡ*t4 J tc `T@@QKMuf);O+8qZ_K?ߜr S1ٲ3@u'&gUf>W7]%I} a^m\nGAky} @\;bvKZg8V}v]mDWg9T1MflFH _S 9A? eGr  |`'`8Arʿbξ [op!̳#Kt".]؀-si}Du%*lOn Sҡ&C 弸,݈HN>YCƪ{ (gW`-!dO23k ) F[kǃMȓ3҂rO[yfyqvEҡ+X}u h~Y=~''R1ʟw/H`iiQ18f;pt>}1e/8Pu 䓠3Ĭ//:1bϮZWrR#J7 *nD"ڦEtњ(`L 9}N'-ݥKZb|토(8uٚ*ESER4ڲB_$K<1G1RbcU<đ &vr@3fL@ 0b0ZUGP7ʜ(C T>>:kJu串Ɣ?#Qne|o! rSG=d5~B9ynd0'0ls)ҍ$'#FGVijm e*ZP,c\N2KXg5CaV$is9ftw>qh+hP%^B|ն:<'2t6p4z[= #tBy(BҶ>unbrd-} <VM &RqwyG[+-z?.f]Ϋݫ9b $$j4{$N{DZ]6ߥYt(J*bA%-E`Xj~{SB|/suߤ$s4>wC>^w~SX>EPCJd(6v+'AI6OsaԂIC4+h]HV\4?vv ^w9ฅ,U=H*> ؍e9=LZcu}2To0ʠ.TU'C;M=ur3gfqW%+tl`^a]vpK C=w|+ 3)6ZUtG[`hZtj~$sv>epcɞv)y]_ƳÓGcM_u4u"x'%N/&5_Ct48Rȟ Lg+uiXv&ϝ`^ lHC0=۶"!fpHυnKJFڞ0UyQw Vt˚C}LcgyVӱaaL֤@@ Jcuݷ)~qsH:_"0{5bKs7 WpgB\zwzH̡J0KX>a/vݘZTYkʼTj F G-hoq";zF/a \SFY=ߙ!N=ӋL_qJG/0U}2)_&*%H7tklhL\F»?AF6}z]oq\(:|rGw$a dȯvzykBCozZ:C/8C᚛Μ*B~1eM~Qu@ѼO%vj"Al!n TZ"J]Xx_ *g)-p:2U,֏Ā{{i,4d3ncbCMi-S@[ AŞ8,<؎h^5:ҟ'qjЯdX&>?ZQ8ϷRXʺyvnF =C<&x亥_/N&?9A=Ͻk\l̥ C@ߓ 3p&SYcomK].<̻Fn7ROo݅ vW~bMȜ.wH]3yډRE.J.nQ^O6Ĉ_n!Zr6]7RCyw%f-4Aach~W*W$rUW,Ƴ] +,{ADrTqk[2-"YU>@Y K54"1u^åV!w ¢}U0қ йsx]P i}meyIѶ "!˳RRRfI8ͫ%Yx5fz|$6Iv32{zzf|&UYfRιVhO*t0&|K >bKEv~o\p۷.M`見-ĵ{2M#3F͍DܪҵbiZ>Y. W&kVѤ[ΰF^ȟ~YXSOU'HþL;3.vi̅dԻb:M@Wrw/. vUAy8㖾YZTx>ʠ(LO-s=WYx=>FЉ!j$a19'l0VLKӯeסA01;638,P/ z,7S <̿K5lg]++LGD>W@/ԪI2 1LN#C`>S$)= |k;xQzUvTlQkxoqă쏍6xvwQhQc!HAyCn ސ 9]w/͇6$&t ]E}V1+\X$8z:mB*>ZCCcqTe'C+ܪ|P>)nN*)aH~|0<Ƴ;f gj& kun!|jd30 %QXR<[鰫 jw@g \H)[ex{@h"}i]rI+BSXWohO f6UDŽw OtI CӐowGNlfS6,aS2etX?o4'LN@[5f+oI?|i=6)l$kVY~ۋ끫sA_e*K#V;! {J|)!*B8:Ɨ'fcI.t>(DpԩlcN{GF.Z[:vGCd.' GU3PzwaBj r\LJN*`uGi&-71 (i]3`$¢+"Q:=Yp?[v`HjSö^C)3:PxMp4;br(]vhZ qo߲[b%lzK/Y"wUHL;ܲZX3ea"Awʡ8R- 2=]Wz螾s& q5tKPllG FW ,gG'CrJ.͊}u&q j~+֚0z} T{_cZx`rzaBg)!?W42!OAUj_2eYn03yz/c]fK:=/؇eqǗvfk:N<uS [*J[@r."m[ 6] ozMAb?ð_nG[*9[1d)bu 7eu[Y ʯ[Xkxε9SW{9B$ɜ&"]UK:< r5m)qyokG)b1`WW$o@ 18盀/~,<_lCBĿ#O:>u>TAD́o(ë9JG>5UF[m/_Gp sa䶆XlX.RޛY9/|}q5 "Kt ^]8a]d[z8-f1dfm$A̤zE%lb A ,xRU\+c8H(GX=E6 HI>௮a/w4U | 6t=6o}-$7 _R1k]tYjFjs1Efqk8Y(#[D!jIriv!_%.IA]1/A3 ^fͮ\O %b=U3?>)xJ@VɚNn.I5 H/—ΰľ~̇Y$2N3䉯 Gew^ʏF4P(òE:9۵ MH\/8b0.ϟ084U A* 0lirIjHꈔzĎX}sѺ4O HvABs(|,TlMxw l[y4T]LtQm?3[hVvd\#'/h6 pKɪQкrfi/&,r=D~l;sV (8 Ű?q"\5}VHOA+7D$1shy@6!z$f+ CK78 b19Sfcp흟swO G#u )I۱)x'Y,_R: Fub7 F18W_Sk5~{N'ބjY[)d1}@N1>Uh!3Ҁ[UDt!,1qx7Ȑٛw/X*;Hij@#I}LGT!9"3= ≯=,C}4VKYOEh{ʡ+:wHt+ +$6^CXtK]x/0`BZ=S_섨I\S2K0&91,1lFV'r2 <1{CH M 2{Ч{w@ΛS?rJKޢo2JMy-VV&ssie8bP9՛˘ F=ƕ`,f}(DGw.g,p.OʗeUʄ,mfl(O-1ID@4 Kbko=#/_ LjR :LFBvҒǙ! OX"-5e[߶DйjLCS(LjF#r$[+3;K Bfb<~pbdģy152.w+=ܖB@;ɿx;EKU1B꽌'F]=妍>s o==_$lWJ;F Lp|u5S8Է%BJ q.jIpJ"'> ?ϐI91:981o}s?L80=A)cYv-,xe 'k!Zwcj\ 3ѐy̧$4q;y(2IKamȁ\6c_nwHssvڣQ~*D< ,IYK"gI[ iT0uj'DžFVŃ2R,Pײd蝍Oh'8.+JQ4Oؼ i`ŶdjYZl=,&%~y+_5n_L%WqE/E5ߦ)n<٘x,50G 񌖶=b LEee=2/H=TM\ıa#OBQ̀bb؆F!gq3|.84Km>>gų\?kos(TvLzIA:o3t{ 6w8K`[CGa1 @ \B=r}Z08bFv6˝W'Pl騻BTꃕ0ӂ%5a4SB*PboE=b&`1oTH\;%aY/)Li7yaUݮl-ZX:rI`bqrg5VVͻbygIJ,Ž|Ioa;8,+P7<lW;Melg1Kݛ7ǹ=@Ų %O ̅)~ @MID~E¹ڟiF%i銿of/BM9Z]a=W-%v5Do6HW}]a J7|Q?jށcOWKMa&(MH%5czHNFꈻ5m rԩ Qb+oC+C|`sx,Y}YOw=f:_;+Sl9¾ J"oe8[Qy>X|48~(aC0~Tun[U<$F[{B^?6ٮ^GNxfɂl_b✑j~\}uj4h(0G_ܼԖ2, S!Q1ʺR fk9z4΀*tVߚ2pJ؏fi4\^"nȥW5/Q.1qIS˃6voܔ:73W~6nt&&Iwg-k:<P|i2x*}6ˊ@/D5@[S?ت>Ez4%ɥ% bW3U-lgq=a-㈮-Yk@3M~IlSAU 7L`e>WSHF^4vN qD"\s[ID$% efi9螛tGg.rY++iqKb >աq4)E4ڟT-/GP-2ޡL5on'3\"8%>G&t&oR_sqxS7`5le[w.kQמUR s:QW:X?j)lnOgf;M#/FvfWp2$N}#AC@)%P >E5}V 6q-]^@~uG~6{CM,t/᢬4I~Fu+~ou<v2JQl0:.Ғi8NG,gg+v'}!hh#HD@-W#ZRCn ,qC=Jo=F ~x`D^k3kK|L`V+6MA=xP"-ba[]Mqwn߶9>A= y{$PӸ O0 Wr RMa?4|v 9@{QJ@-6-&4R=onWB|$/)Zuπ^MM< 24&C3݁3nڇDVӍMYTl)Cbmcgyx=áAG;xC+nC٠6ğ1ykF% ^zKV 0xfv0MM .?@E4a$fގޝ/3TcEHjybtwDC" - xcAtX1UU0_HrwT<_╟Hc!!{LA$=9嘭^6ӳ=Y QⴜJU MxҸYC 6^9{EG,Lt"/0eUI>:S)mvek&/L-f!WZ !_9J៶SɗIlK Rʓ$E__Mqt`SYUG Ok50-/M=}xe@a:%e<6euMb,'弛 t0=(#,6',FNT0a};IE'Xj3&dXWTM- sbORM/u+LGbl++ԕ#9C 6.g7=khi ʑH] Oۮ_e ^u:3^~tCq+?&2e 9}L0 ļ"ra 88ߑz 5Bja03Obʈ+ +X &;dby\B֎@@Z@O DTԻy'qxvQ#B=c`5'8+n—oH B^tu AU\joQERf3*&o  aL1iw(lVzSh݃%;\N{t[z ءUUhSR`psosf&1[X[ڥf@ԁn'a|SmLTۺ4@-,GSpԒS9;(na;oX2wg?>u`;`P9ZqrYKQɰ} ^l\D]_Ryɔ入leHL A!rϑnW%YVv;&g``BD"BsP\ Rt,Vԟ65ǡ֖gh5~ Nnc2R1\fl8gϜn=, x=N+]z1GFCFK+hKQCW =Ny7:Gqg+י H=ϭ>qv$UU9!tbb Hz*V{?Q1O=pJDzf!J }z9, n?di_eG*x?SgZpc?)f(oW#6ǜvH ؊,Ai1@ 4۴cĸ. FI}Q"+9M?A+aVlE:}PX7$K[PƗbG3?7~mqq3 =MëYJ; 2s-%]^H*Nt Tfpl&\I o“u= X\Ȏ_ЛBt (q_.Ⱦˎs&WC hf`җӷȤTzK)YS&h~ Hj%k"mr]R!9L'NƗD !$cZ s &[:940b}ȳ> ŘAO~.95N%$l(Y= drI" i%l@FfᢢfG24^; v;F/$WZ;\A$; ȃ|eklDR{5b\ KQGqA\8bƒ$Ij7sB蹞(#בUl!>J7Tba ӿ*,w&m72W~_NB\rqh^)yZ#I>GV eݡb uMh4-{ބ"dǾF^oV\eWttP*SЕ9/9 tfw크,byº~;kd,$%:̱3剖GN,' B{) bpIeNG@ ҹG?r҇6۸XM⪔b'L[*]#{sʠcQC{&ïuܹrxnY=!C,n7<.v`7k:!j DL`ܮ( LХ-WTN>bpiMd=u6_c b㓳Ig`jlh}~Р]v|WL 2in./7FNe'm T>=pN넣C*71 DUMXO l;gOf([_zCrj8`)i4ƐqʣLz9 B?!5,p$GPV+u ~NH95H/*;-aS6|%}D\:`ƱBn t>wOh$xBG5NH#z|9h(%r`0iЂd /@m[U?TYix;qJ}\۰iqsl:& ʓԟ]a+L.P"o<~Xß`ҼJx^-z:z;q_^xF"# '3+@TYJu"Afk*g#>ײ|4UɦVҶ+ ~޴>'[3$/nФN巨 ;!!⿶0"#- >!'Zg{)M0WrE[jϷ1IJD_ j$}e-[nx޲ r؝6A+ew4G;2uhYZ#;0s]yF30)Q16VkiB,D" ǫsG:{"/2&4 %E&`"- tm*}O?bPq\ݿKOjRy4dE{6p rVYU/:B9N,>&Lxc^ ֙٣k n}4_AWl6lY,vMXza- ,yLߨM?9놄AjmxkѲlwg І> L{=?bGVGP8bOnl* uYĻ)t1f8:k z/6.f j L ?02|tk9SHnk7Zr*@`iœA T'UD&bڤ]oV}E?юA0?K*JaٲÇ{L|h⎬/g$lv05Qo}:6:qtLd@&ج8)(j= G{Z[ j nF[ZR(!H{R3©P d0@\}db"&S~e#k7~oԮg"EYInӇ,7ZE㬮li@ZGI'crr4i:eb Bv_lûtE6; .g(@LZ_˜ۜL򻢑5[r=+>e˙\*qwZYPgK5*Of0ݦ1v=A$Ѡló6Ө4S}+cW XIڤǔ4fZ*"X+0E"$k*Y+lC^\ E.N^ߣilDK1߇sP)lf=`zcU DB1NqKqF=㏓xj}4n,b s| #I91!Wʕ(p)hd }g}2^ڌSG\ᒨF+8O%{ 5UDhېc̏PQ =4X%4:$( #sz"fxcY@ٓ>fR]F碍)M c/}l%iq} GoЉ*0BDeM${I#p8uP ]^lػ$3#:R$TԡͦXj\ʻǪ?)GYhwJO{,G8d4%Z 4}pڊs1;7]D@M 4Kq-0\MSA;VgQ2rh#ޒOQ;+EQfn%SĢulFhs/06: q:(薴$K~>QC"|`M7oo焛D 0Z>E[I=:v9>R>HlYc+r6#p!v;C߃cnIvT}9|ϲ;LOoP.L!k sc{@EATcK;5<4hRԪw GA"/dŧ0S_ ~ngtVԜR Wխ3P4Jхb:e +"4feԋ< q`20 Nj:y9UZ -z|I}`2,3!rI1MCd pa(GjPL˼4O=a@ڝ^'><É=!Xg$4j=#[[xA /D>y yQGorJCEo1-ݏRSFp=9uo#yʮ{$rҚ ڣQ"rQ"^qթ[qZ?]241NJ=s|uINscBIjL6첍kO ALٗ?#:l!Pq lC8/Ǽ0yHȬмiO6G]A8;?3}&s◙rlD 9yx{/n|J-)E?4ڳ!bxɗe_Wo/YO{]ʄHbP_rܾ־ hjOVSN{p4uiGp!;pYҒFmA,Hfx?lO/bƒKyj oįh^[P9)TQ=+.n)&(K% 27#Dy_XuL++-.Z,ν6oi^z{$Gawj%.lO'SGĸ7 HG"iO!SJW?u!uq"=at \I {#CW?$vCoݠɛeA}V6dxPE҉mX1uRY%&裮I-UB쪌KT%$uv]kz(g$ UgVx.I.#TYMN[ H1凹 xYO?Y@rڦ=\npF UO^54+מ\ כs:zȟtiOwA5_K`&`mp8 +A4!ZZ),Fbmtry4['ovM`>]dXL2vg ;s1'Y9VP-R-/4nsʾ[RMڨmoAW qRHԚ2ޗ}:0ҹtHnԱ'2C <`aK@bT/2`“s\6!YVi֙ZnpZNqBpH3`~ieE_>a̢?|`Dj=p8-|ff)?N,z- G-O+ `VOpȉobDdw~|w$DXɵ_ڢafb+J`h=v?ǪYad6D%4ZEǚKgEYyu/ 'W2oQ}ADiAcJ_VۇMOzi%Zf x;o@zB/q/u)t%_cٲK:L->$yǪ{d\0n[Q %J!G̅.9֚-T|ʤZ\EjA,PFbQᖪ6u:N!!nRȎ}DLۂ,B Y\)G?R!5RAؐ-XVW{ jdh"&.I_WHxBcc-`r8Z_gc{Y$G\x!2jPkbiF{/+ODg0ݶKvXugۻV DK%ޝ/P/GNhx7u|&[uQn>ϠUɻ۠<<>2L/q%BZ5p kixL2DU?N_ C!"QI#sHot?^ n{èp-y?"U'M.5cpaU n;S\/ܐ35եsGSMLĦR9@V7g*_Fi<WBP' {3o9سo`g-|3KW([J \Fp6#'@dfr3`g5kv%"I>Rf7JgG!L S {, eubŘ`6Y"z9G#}`B\<&@'rF 8kMY c ۶Lo7)Zu5KK3ʌ%24F.jztpN>]7pBx|EHv( <rA*&O$"R9q䩠+9/@oӍ߻]dp6H ~We\]}? `|Y͢fW"4iƝbqG0>zC^η[=\H5Ri`یr0`B]=_3n+V-6ĥ8, C-h=Jڥ0yPr'LĚ\n9@G l,p- ;/){"ʽ}F(ld ΏQ|Pk(xK4qM:IbUnI\?&v45` Bˈh`XRT/1>d?Hx z5@kYs~M~b;'ihowƎGdxu&qS4 LՅMVCOMz'Z+i)~f*Rym\ 0q)q. Qe^$\ދR/նοer ?aީ<܋B>?滎[J78]smGo"ho6<lw ؐ ~NyB{eh6Zk.Y"gb9!ӱΊ@W; emxİsŰF{2¼Vf[za&'  9 fbUF0[G <^ZK"]+ϣ0z 9جlj3*W>Y]h=g9cbzEU4 | C՘6T?O" D@7h8BšRCԳ"8S.W ΄BtYzM>gaQN.gԹ)[o0rp5Y_/o jO+m^_o / Nz{˩1g9ΨBʟ8Hܟ?\@Sr 5[Ypb۟k8^#n[~RR~>Wcz{T8L*sȀ)G߯^q_[#جc̋f>.vZиcc?V\XT~̃MwaFk,ɡ.Й M02g"Oim+Gj*L ʶkjy8Y,.1?ZXTO~z&TFFSJKqE؀ QWUą-{aaD'r)F*\M^%-UnX4đh~_)LBȹBU+XuQ櫼 专;<-~_16<}'ѥk)+lJw s%BӞigcsjOE|X2 /hkp df~vos<(?^nJ:GA aU=OԯFWJ7ٵ]Y,A)1?@hfIwe}U?a]YKtUSbm%]RUtI&d oJaY+8>:Do\qDYbFe3YYc_lj +ŧ+l-C!=s.\pOTQ_UMJS9g$^6h8WbC1 G8qk"M}:=H7`qy@١z ܵօq3gL|  n> ߣ,R^Xq ¦"-xn. er?Lњ!7X.1Quwi_.]x{1y{L>WlX U~PO"q|BZ1E@KtQиO.|}WIqʕ3y*t10} PA#ȵk,ɲvbF%+h:|lsn9ցdc4 l4g,M7G} =5`?~XCen eɝYouQE3}T2ly%lYZvY&%>6]i7baE35ueIG_+yG2e|k5rĮH =CH*!Lw:d+o<W:ì?뗷7Xܴo_c&˔V+( Ԩ $ĐNqӽa|W|o esCYS2_.@qmzi6 &N6˺@вYjn) ylq8%)!|TW#&!OF_$‡ުtR_"cʯ;Klw^Dy^ Ve ~1UÞjCd.1~|\Al`dȲ;􋯩ǝ,7Dvt@4bxb ÈM-yk:C?}.|UZU:q`;oyv@{}y3H\Sgs&. ^MՒ6ğ< UhwB$7z|0folNzjta2t!Βp<0ߙIA>6jد@ p%$̾}'F mF,NEt 9lnm~K QiJ}Tix:TNaT_xCd%M4kC޼qY4rf6C>71(Ye0kyصaEL:T@&ӃBTX,DRIl7sgךkO,>w@a_lNH,dT_y$!n>|A`fɩX6ۏY4' ` wwr5E\x72Nj:\]eA1_; كih.Jr m*Cˁ}yhh5P<4W:XPfӍ§/\ϮWWrB72BT DLCM0y>,'{8{ZRYW\fp|DtG!fTQϯ@_̙ 2:`Z/Oy@2酫N\ 2F?/g1I]CG ͔7P2zHdͷomݬ~}ZOrNyjx4 dAMF㯧ݫ8'M+s*@'ucP %M*%~ (KAXRFG_p括{~d7&xP>GŮ$wcKIT`ĉaIlVLp;7vXΟ)ĂRvryDSzlCa orU4#hZךiUvyXMbQȹ-eB B7ѷ%1PC`(-ŦleIB򟏮~po .ϰLyɤ'E> D'vAª;8F֤Eĕ͗gqr?Xh5r-y|i>`?(c(_Bu:"c'vَ%/M_Fj)u}Xu  &ie GGgP{s-̪CWO}w[:)av''~+w#DľWAF2Fa$wMjdg%gx,LgD TZbH+i ,ҟ$g \jcYkgP v/ku0^RUz[rm @ZCgUUyWmF^g;'ŏʳ۶a.v./znuR?T[^XFdl]Es"rɷ .>+VS5R(CbfHCFi?LGPfQ]m㻦žڽX޾a]/`oz "ڬPfk&8D\[:K}s86ҍ/6l _)o2$W)iA Vl>I s,/Yı͙2B'6,؞ａ{3i!֗NCOY 3]:31|ݾ,'ѫZ9tAR"^YToN٫,nD /^秹EEb0X3Jpڢuf\kfpUP~._* uOH䯵 I' ,80MۿsRPBHz;@qx8~TaJM"SnTp¼3QpX 'rVZ+^A; \ T$~LaoB +n%Ш`-Eΰ|Y=@Plm9 o\y2zeupi5eΎBܥ%qxzDLw#helݢ@f1Q2Wך8Z;N:i%f'mE,dtFwob_E LRvspt1q)[(N Wf+r4o* ZOQ yn:dix(˽ H5^s>833CHx 2*؍il gA>Qn Ji5m F1R3,8񳀚cnSt'n(7:*:?"h偃**I:fB˲2~!U}L3ny<$¾UVľmK~(%)G\VSJo]BaE}'E!i '&8;IZ6=C$ǺGhmv^v?9a&%#&)-Xe;. g}NȰI 00֞Dn3)0tgEe0*{Z6ahaANc~UMNڻWT0yE$&E8"Me`kky־k5TՇ|֬` #:?J@\ tJ4KڭfEӀ {J݇D*ͩ9nu}G3Y{t=JCk,etHhhF4/ ur1]v0WO&Dž?cL|d z ۹cB0#HAhϺ(`8ΡV1őrJW[1[ߤptB! yPV)Nijzni !A߾^<};IwI]#$\7+!^) r%X ۈY$F?έsW!;>Dd4Q+XDgGfwLɧOBVnQڻ3E皲 0_y 2'T{ǨnE %Pea#w`fD?<4WX%F(ý iD5( K,ylߠŞSi;9 [{ Cqm9;s/*K pX>3=~-ߥ#׏+\6L?p#6\Q8/:M Clt~I y^h"Ѽ%E~[޻z =Ir5$>6qxh~]&wH&nba%V-r_cBȁ#kҙ$QۿcyFuج$gPSqU㥑y>hL2 9nЏЕ(7HB 9OܱPYjŦV9Q(YOX`ǃDV,m朵 M$T FꡚXZ)b[FJ`<)Dy10Ks%W-WCM RXl*[]@MlvW9q´MABCtn&ߪ”xW_!5,z A .#*!^wu\ 3N} R0T]/pzb܊a~$?BQR GgD%0U'&ǾpwQ":3AJ1n.ri8=-+K2gjmնM03x ]cׁ8ބuoL %MD̞@;[Jʕ^+<<|*e6V(8Fsn'wCLMx{5)lMR7D0E'j]Ps5:$7T! tIw e 5*xgt;.\h5ȟLw\'JіG[ĂxѐSnLxr "~Vg6:Yk)*!aߋ( VsrYэi$[G6iF +ǐoR h1B54㳟՝`=:d [Al!!g0t{r_u!31mϸW x\! ofjJƢJ'6>^JcAs{b5@ߔ)쀸,m|W`Ԣ(25ɕp,WOB0T^.f$H/eꚞ0ao@W i ьDcɛt>c62~vl&F_dy=ݘjXFn wjy;9!wD6wv-@aA}\Ɓ!|!Ff> LP#jB_=އEY5)д&HTHlC$[}e5d-d3w_G|PXё_B$˦ϐZ*E8[?~p {>u <ծ'Ah `>~=X]#~R>Q&rg U/k@OHN *IX@n^{h\wi@R84웠t.]]p[nJkt`)8>G/h.>&n`^4nILvcYYO1}[ f|j}{Yh}L{dKfTF)%+t9sU=mB_;"]RtF ɍa4~=CEoU7`u~v}nj)08%'u~J8<WYR}fsO0] Yw5:yUbcIkw]:j2Q:HPb^J>A9hE.˦" R6k6cz=*ɦ~5^!}.o << `wΙmk9 U" &%ͥ6jx&g>0 p i`/-TO:|85 rcK Ue<]~oTp (ЛeO%]@qTY&'NNdY({G,*z!טCvOj1U1=﯄u;`c!?jH辉\PE3N̚CL=zLen̈́ƙ|ʪuLMjbˆ "" #K>^ pi]K] m, x/ET77Jq,HKntܜd,Bs?,9 v25BtOA&yWiƍl b ~=^p5gllU"Su #~?؀|'w#yib)qwB!x?y@sbCTFaBZO##ӟ볆&&9˯UPQ)Viɮ\L@\cTEIL&13\tJ׺]Q A +~&HB 텙u1;":@,;r"˓hS=3-9(j+De=*L8s0Qe%_SPTKԍiztPV\"s qnq~ MKRx9`43f2J1#IiX\Zdҽc #_8j(PfM€'dv.׫Sv<2(ՁʃvVXEҍY)TuX68lyٱpE]lzX0W;G4P|Va8/k c fVg=DВcjpq,o-nDRxE&P:@X|UE$QC+}Ghz& YveϸaF9LB^+lSTi˄J1vrnGPڈ~+K 9f{Bо+7*SR{=@T;wQ=7N5(p˅9f2?Qg?.x+%"$y;uϭ¡=xz8jLl?H QkjjAH@܋=v~pvE1 /djK)|Ɏ'.$2[GVFizP-P?>-"`żYGSd=ҋV{SuErKO\ylΛzrT~1COԎ !j$qbSk.!d?1sKEM)"pC35GZs];XBN6u[Sc@4Yr,_T>+丛v~v΄z KðZy!bV)$HR 2UyYy[vM>\ϕ\<Tb biB4I|֍2)chRgFDr$ k.ֲ,Pxa4OcU~֭$CZ-%&j\C4ڛFv} wIiFS8"DദGMZx諔,&ɩ YÒ<س+uM?~ C_jz'\odR$|Ӧ)&X&&cq6B% dtvv׸>,@qduv:MW~1Z/B\g{`&i;` MwFILcBy"?jԬXݞ)j퍄D=Cʏ͘1dwuKᣁ 4lBѵo|ȍiÃ&.?i7|ȉ~+|Fф6#Z~_,ċ3ygzsNQ&ԔmST7i$i oheH"%,f@|RI'o N8lA^(1r6[^{آ#aCo\ntn@.(Y c șr uu>1K,Ttܝ񻬿w}y+RRqgǑEeь}l)nV-. SjԿ-*'[˿\@X lqn5<؅!aJo<Ir ,fᬇ%#묶c}(3D*TГ!&][()N `s(Sclq[]rb<1 o\Osm*\;=esT .GU6N45Fn ϴZYqLko cA6#DTؑ0Iܕ鐛(?ZG,?Wg 349^!>aXkw67-ө{nݤvA Bw[>Z M'Xۈ/5n Z쑔Ɗ3E4CuOz9:/*PtiUƐ #ت2λ H5nOrVJrNpJ/PA?U^>@&%fw\6(Nn~ɌrfSfɞo@1? g7yP]Id^n ZGҨ_ZI7*"OWV@gB5PZN<nkOGQ CYk.) #HyCSNԢYy*^(d@v., " T̜ 㤉g@š*JD|}x3繢SO).Lswd:pКdpsS痆uuH6V1bԕ9WHvIYX}4n*g_oQy3J(dsIJl[40f'-Ӑ2L\k9^^˲t2,,)L="a[6*UU:NJ4&Hї3Xn, R "DZ lw01"l-rě>gwM %>q A<kWJ yCѵ|G~|ظW;2-lPdo R7wcٴyw:7Uh$xV H MJZcZwGk$XaX9 e%!)W^{|~| ĥ[AֲP™׉Ud%iS<qn 4*(~9*,%1kZoqL{&QQ TJ!A\Y|0]v!~NoɕW,#'r".jVz'vA@2_g%Cr>i/o $h1Xh؟0k .46k P+!oeo:Jh<O]Ű3ǩӏ9qBK=rI"Ȭ_1Xx}d2N??[B/5?-*#xP[lau`3KauL YKOjSVGHrd4c+1ا) )E(!NX6<#8Bf>Qy $c.7*M>նRa ^MGB'F;$5(x^tv= ^So-i>{c>Ӈ'SkGbm`!Qf`҂&RoB"4?wA#8Z"A-9rݛ%5i6)ݰT] 7g6{PNa6H ث&$lHIe=axFΫ!*%!%械WZ̒xD`}FIʂCîZ|pu]>ƌkE*R٨. e!Ly@A 0C2j#~ӋnAʹflGT)cіТ\b pu]qb *p0H8~Oj_Q6\Sw<+ -ٻ0K\^ ˙P'ABz <ֿl]}Ȉٞ Yͻ`ةmaůҩݔud~<^!'.1.V}{}}eFŮu}u~@q\]ƥ4ww{v,^<^al7aOsƞ{J笛w5xPhC i]ҝM 4@P LhKH;>KLDВȟBBh{F!?r!-8UxkAT䏳%rGuk?y1bgP,T5V /xHtZLi^/}Jc!t1mdxnCKI?M#H] 6;h(/&%dY啩Sѵ0fD#u{"[q }eɄINܮl(=FzI@ɭ)Nk3m9zuԄIѳ\83iJs lƌX}9dž9\:#[ch#^X UDRNfD^ n eҟteU.eM@n8c'r2rү7Z&wij80q A0w??p3#WouBO]P0yIDf7b]2Gkg4JS4w3N(Ė|9ItP~_րO[ʦu{Sq2Ih81`d&P -Λ 'XbZ1/O@÷W)SbTlp?%H  .|Ic@s3Q+Vn;r. 3ya9GF=+>l-[FXolBh/=a93,%GbʑuOCV odgco)ɑ>HM|sSI7E:?ؼ"fiH툕[$J|:D($Xt4Q8Qko:; ?M걛UsysFXg6Eq4\bwN}&H{;E/RյN>!f}$Y%dy |&Uy#10 tԷw[kk]Iy-kECtY陬/+())|ѻ$l ~wtN=.dV) y5;NH޹f5)#O7Ljɔ7Ź.oe(p y. H HNaRx,`[CG=ё֟H O~VI4X313s(-:}->8j/{K=V,cH7fSbITl*H1ԘWV}ZUcl Q{&rk5YX\xZBgߘ@9IjQkwa g,Ԩ/$,A YVTBA#~ZCBks0ZLMѢfMU )(Ya n }(fnmsK*݊A'1w[F0x((>Vx6_|wQb#7yE R#X'Z[3JÍ*;fr_™wrFBu`KRO!9%4sѴ` v V+c/()E `![.( HH,վp㲦w~J,sc7[65Եx?O<.LXdqN* ]RzLЮ& zoLmG m.K3r b^̹<Wx Ȓiܸش Vÿ OAiN5DaHTMv산P;z{pkV4%%kPf"~ D oeT؈-S5xM} T]DQmm<$sj/f6 :)r7eZCy&xڑT.G"c_&^.;~=/,3z~LzglaN9r=l>@xB{ah8 | ,"rx1YYd{GBh=jG1 >8p3eXvy°VSl9 J7v<.fz+8lOYW?4–V3F'ПL̦. h(~U]q5s$4 p)Vd\qD}C߶f1գD|_${Xx[0/m̊(gR">'ʘG3+jS .*oB33 v >dfwIk#= ̀YDkx=m|NuM~g6(ZQG&l&z\1G )|p[qXqG XhN]7ݻDWT3R,z '0 CO(cTT)LeNF/Y0|N2^RʓTy(Ρl2 n BkEgbK`͖WrKWAj`lظ'[R„MV;Ļ/U 6tPqm"7%;3^8\lD|ӲK\ hB$Erx?ҲA5l kkjY?"BR}ޯGawi-ߺʄmNAh!:~'HB.7lljP¡}Li 5VwKuvgtKQGq  (Cm/Xޣ/=%x%q~*999'\&%(Q !ͱ >$2oD0՟VU |GW/z_pz*%:#X:@ڬ_f%I)>5w-UT߫QTvmBX&"4JFa; XOGm(l.X҆'|R ?$t2ԲCot:4k"hcP\NLN B< !’xRrE$<`NqL$se< ISiaIaAxz^zK̼}4ic ~ 7$ʪDA;Ho%Ż7 F6'cR6 wKl6}4ʄ|y$(CпHv{Diͼ>gIS7ހdo]rgм/!"3lw% ̧ch2WiJ T.}@ ,b1,ҝ[6%G?:"_)IEU,?.xͦNJCnY~KwݒzX2.;a6*&JiuCYU?Y~;`M:"HBXuN)-~B@W*1Aܱi5al$F!4K_n>Q@١7m4ȱ ~ezakN".tEX?jzwVcR!AvB@Xz Ɨ>ﴭ쒍f7N|U&HdvC}VU$]}a0q ri€7hz196bgγVtmeCrc25t O qS{)L\/*H'`e&U5F.]mt_\s$kAՀd@s%44,f4ƣ+Hw3y< )dY􀿤,8'Kh*7zJd7Ϫn:"4C:r_G QU'@8^PvGpmү,N>S pk^t~.HSOJ%m3ft\E d֧{܏ ćΒȚI7iIs bAgx4-\ <=QNK+DWR0QP@ 2듳dvk&+ԍ4 ;o43Wa&;D=Wr&;'?ڵPU`tk ={+[Az q»ʎϧ>jƐ*Ri@r)^cX4i4f?+t8v@yڐ_YmIJ:;6K9x,'E;o 6yplq$ՙ" WH;=vd>'8[xGa+-Q,lCLUDg›\2NQ8Y4 G*"f%Ru&n:ACmvnYhuشce:4y8Y̅)P] .J eMFQT0FtPxRZKZZS{p)[>v8?T|z`KNcAimȊXTqM,Zޢ̡':>ڡ[8wް>X ذ˰ 1@K$)ҊG'!h"pBParxȕ)w3sOIlD$ jMII,[H~$2XU9J/9KwM_w-lZ+i^ "[Oܪa;>Z9U|x:F4;v`ؗ'eW0FȻv^c̳|Ga7k{Y&v =hpٹ7a2@ㅠnE^)ZӬ5RQ+Hu@+oӗҏA"w=<քYZlq2,_a0&~#eA|kOcxN Qi.Vx@vJH=Og0t8M74WȰ*Grv3f,`u~gׅtCAܮS+ O{E'/_v:ܐ"ks4Fg;XAau=xbntnT]1eDH2X6=(\juoEOFwMOxʦy:'-",C$?v4)um-0즽<(f~GaXFY.pk+)kҡ|Yr! ʃs71Ka` ۏ$lM ? DŽ\k/2uK~Z=5rId0Edab*7ƼDZ0#*,a;/oFͪ<"YIt 7stncuQ6q?8vZpagO.+(Xk_PX14P{E p__:p90[X#͡8Մ{b,2RDֶ:ޗ -r"" 2=I`AvnPmky[#R^zݥsS.UXs3 $0?{|k5%uGOߝx7gubq tہ0k1W9=r0GHa$Z("xf`9٭P,%F< g%7뉭Ǐ.-?HrGA뙄,~s,^ޞtXRQ>4Ű -B(KTRuznؖD 8I$w,N , DDԘ ^-ؓB*Wg oA嶿q ) iGr׶7HY)EX"8MR+˜|&X젥]VB VDuBܭg:{}ق";Ȣd|[J)B90T* _2_j\ !UhE+q}%(rZEئǙrx5W1;hg0$P АES:Okv͚dĮɰ t|l1Ei/Va.kA>X{/ o@t}FV߇VAV1וi`@@Xv؀:<ỰB.RZ.B=)qj? @u|( v`b⊴i@Jiv{XΜS9HP.p C8LN)Cv\$'ڦBg[:;AIpT~/B'~lem70 Y%8.*Z^yl 7gkrnKzX ̱h!JjhNH @.!\LUK ٣IGk9]̀P6C=͇tG3 yU;h$N@ٲI%UQ#+wNMz|- v\W*'i]m-?GYğOE𹛃(3>|LH6TgLOR-@{̩ٚ׽NKPo.2:I<>h59?9Z·^ Ż ;{Mr>ydP!pcD(ypzNWs jKpʬ58yb_ ]JjS9@A9={l*\-7+&>anQX?sZCBd\)jкn'(mzk>CTTs{B`I7$l"!p5R3D[k x+L,Og#}OCTFp:0:HΙ=ʞ^ڸV)M7[}q B5E$Yr@(Ɠ0szMƄq92MؤfGʴ!ع ҤxX@SCk?5 H,|p0ǘg, וG[JDݥJrϛkyl (E)uBs8}TiZ"d- .u :!u&_4LsZ_w}fkZD}'3hElve]5Q$3Wl 0ǠمުA;)4^}"]&;Y_S) =fDn0n^࣌B d-{m.쪙(ıDWSu/JRRj-W J (k! "O'DNDqRqǦ"-ngT0{C  $9IWnՑ暁{c( VVi 7M5^V5ITc)P?9ˡA-e%y ]0{ś(k*)ԝʌ_tE$0ۭ0VY{pp{L4_ut'櫚inS3»м]^n#6J\wSwHc׫r8K]6:}? A(-]}&"Iw8hMFu.?w0wVf-f)8}E@c^0Ǽ.60<F/e}2Ԍ~|/`Ud5?V1TM ~wn򊼘Qp]. P,G,VbOm\!yR]*d}/,ma 87I~tX3@ٻԐӉY?*edn=cKő3blH/'VD~Ƙ۠Aɣx~J%Yu0]N5!!"sT A4enXT#r#fR*O珠"Yn8IKWm\0Ha#zƿ5-A)` #X)àE^MѶkK9~e[?pE9׈RH&3M?@|(gT.tj?FQC״nf Lm^/ƓUC~HY$tZI8mɂ}2RNz!/\a-oWS[`zw>5;uP7կȕYdX1Uؾ.Ų_whg._)ǕK3i92y9:Ά$/$MlD/y 5gdr:v̉°3I}:K߹酛^ѧ{%{ zk/3_!]\kjzq-\_ Ɯi=66G1Pt# "if/N?Q<|aD5I] P!_ߡ@" mI' $8@ޛR\E8]Rp_5I/=JKTϔ͚t\p,!5-[4~.Ҝ~,H|7L J90ؑw^8PLD>]Ӟtși-:cO3aq~R(Ch'ɲFQGJfswq {Yg,o&8Uo*[ D!WuSVQC.96wrRi$L`k ..JdO7f =6"{q'n/e_,!Lu2@OA0^jlD×'l!I)xA؈^uH[:3ǃTwPUBZ2 dWkNԥtlɧժW[cVM!~A*ݡKReŠ6>Iu;OD.#ZGۚ&a)|yKj^*x?*Bl!/rJIQ.b6lBQǕkS(7t${u[ 1MyI]Kj.z55%kvZ R..7~ռћG/KZȐȌRE7΋|iT#2U 4b[YVOTu|r1aN39 E*[-W(tnߊp:C73.!"[*G:eCQk4g>B 4~t< tDy-s(P6~wwfN۳@2GIem h(9+ ) ܅ E$3Z5PI̊V$RsCմZ]0Sk^渞zKbWiy/i7VquOJeP% UHsISڑ7b;mƮ%'=h$gVJ ?cewPmCƪʬtH}Cw᜽Uf;^[sfxŤ/+!ɬw h.л PqƴܳFkpms'!rg74թ8epDspu"%&)YwMkc_oa"U-Mb~+?&8S·J[:#xL lg1/ci#VYRw[MӸxtywP2/p-`2R8ZiqtZ5 ="f ^܇vx|PW&gjX2!4E9[%" #r@f_pI2U~-R!Ι.]+PL\Tqmy@tcXS:O/#VqvR5Ćù(-7BF&7qu(($2 7uDfٻ 9x׍ME@66l w)(8=GCc}y,\f}V1S ż!2o1)Yq9 ?H{E.m+Pz-tI-u}3u6J/șzi{Bqu>cB񢢫$[jTk~%u5އvdd^ˍI tĆP:}wo!]_5pstdOTڋsF~'$7Ѥ؉a"6 0jmb b`HUD}c.YDʙHbWrX'P50Q&B]:׬pN0n Z.VyZ5*#vG*kcy[Np/߭-MCmiO?} Mɯ'_tnNQ>抲}'RGv0@q.qg-i%k;0uMLlA "}%G] bĤhf=A$;#٪B x6w)Ai%T̏}dJqWkڬbnL.XLӻt־xbe\k^]"d>ީF4ՍSab485O>5(-oYg?ނDX_g_]l!EZq]mSkL%$`3'F_i3ȇHz¦җI 8^=bSW"CxWjYKBm#&d'78'HI9i/x! F}/ͺxϣSsJmd11"S`CMvzX<4Ş't\)TDYJ[S(QEp,b Ƨ "ᇘK(|TY(=:~εāR,5h~fI < Ŀ4g}~-Ĥ2ʙuȚA?O2Rk*5>AכhX ]#zZxOh}!"b >k;  hw~MS]\ֶ*aG5=~jNPq}g6Putu?~X%qGp1zuA)-i ^KNФ֬bW/+dghWA2pMQ*u †)n~nױ>\?PJL Nodw7tЛ ()0EPf %#j'y}!jOo6c=׶sad!vU0@5,j1UnB0aqiO:kՆBW/Vp<])&H*!NF~ 'zXP"4&m?Ƅ9 Ckʶʼnĵ4T׬,wfmK\kP=>0ygf\t!'_5l26A TE]9wЗDxY8qm%_XC&ÃHHq$v%>֫EK)qJp#XZŏb63 KaDH]+ud:]-l/PbNfC!;w.3˿"0Yu"$.r7C= ܦ܀F Vcy1]X̹c(#fn+FM'VKH4! p3<V(jrvi.C1j=:@^h6? [~ Ȇ[GyNv(gyAt/,]f>^UM+M{ knP?oiçft_C{4K,ٖ"W ZvyeXjCS2Z8dk<&ݑVRiS#j{_^4|O.WK~l{,IS&+F(*LX};H:y'`3xJռ{ĩEu7 !Ō;eC5dQvjP>$-by0Lko*CB{^o!BvKҔ Ɖ^>-u')-M"u}s>.2$ 9U= B4n t7s4!ih:Χ.'ˎap0, # `u.p$M?lI)j\`4M"WäqAk*|E}-;_ :yHqn1Ԛ;âa M2a*(d*\C]MCcTж5I*mfSuunFV>+ÉGawf}tyyrYI t׍r[ 9 kP#:gUVTՊ7:ɁxfS%"_I)z2B]-?ٙTWeo7E\4lD|u60 ,YCN kR=Z#lnIV ~ ԟj1&賝[<Œu\FfVr4q 4V2z] FVeȩoݓnOqQY)􄿝) \A9)_y/o,<r(zq!*y b[cC ]!v,v%zzS.n_4>Τ磎w\o6&Rܮr,k `4m9=E^Ū5Fϛ\lm"lwPɸ3ELer-QJԳ4|i)~᥈sH<? Cj{˿ܚ-!h2DǾCֺ>|B=0/z }#(f, ۂ(wQ*i0%7lsV*騇믷sX$@CߥD"1PiH&:b^%?=NE3 YM^T1q\Yjƶu3h:[/[XEhD">U86儂45* 3bO!MB^rD~`标,$(LrMD&x՝@@zɪ$9F"፺Qh SS;1gzPɋi!\^g .~: jfR(lc<"<-+MVk$ۿY@BR{Axi9\1x2}lh/lLmֻCC׌Z\T I7>qS:XggG/|_n1C N+޲G+bkޱERJ4sA IT[)ԗ>30CޜC)ؗI ;Z&q%-/F2&Ppy'Wm,WO>T~B!8i 0Gn}2I΂hNt5 'Q{F?rCc̗Ӑ0NKKgA \X=,zxHte MDj1|81j>{#ĕ@N{ݦ[&U17=a]8S!Mc6(|DF'.~OI]|nidOpELZ#g*”Зe|SD.tZ7cn|^*/;6'EEPUֶXs\nA!&V_5z F0!S˗o626*sY|CL6x.i: ٹy4HrLY)n(fnU1YὮ&!TuH&amW@mfқ’Y%iJp8bcn ޾om4'MD)rx cyvaѻ=΂>6S,u\:4(EE8Մш iltQyNȼ YRބ}o0}`^&xW&,H5*c@u]%F6pqcAByTe(ryYbL6ߝI"^}tX$ țhGYIQרL Ȃ7}f Z8aKš^U\ҡ[\E {dɌ|d@}O%(yl>6 |cihP>(ƟtUJg(أ&5_ ް.y[B)E-d{7eiVOe9w6Svi@Wȡ rkFb'md2 8au儬0fـ!tzF\BK$_k#ض8H8?ȧ GIh[Dciޅǜȑ9Kl5#vumת}ȯq(=Λ!וN'\ r"9|d96AD,ǴhRwb(Y\=9L^5fЇ}68"FIlPv+>Ŭ.tҶq%eCr(+5-'?dj)ɔ !MXtQZ;_?D+BDwAUL@+RT̉?F5",rDxb8Q,& Gfp5ٹDA]5 ٿM1YƬV[rʧw_"u?b4Gʾ0ZxLrH$tJ`|"y *>I3r0TS~`W|uFUpz.K, q: S DQ^o+J@d򫸍$fώE&rb\^\Tnž=V/^IIS~$DTߕjZlJp>ٳQBKPژ ZqⰦPەޑ94,ϔh #m)qE6Jȱ y/w$D]fWP ꈪ`C18gY %a_?bra"(F'UwمɋBoe)iO`Y K{"FڔMӟƐ"XwBC2ma yfûvR3κo4MM[`$[  Oj)vtvP Z򼔺^jN13=VL6źn B:þrA)(o3 3`QIa$ BʨF1&[z|b`WMt_ H_md#lھph#$`G}3;^;3Yb!K XLܰ9{#EoXq̠)?E5vT[^+eGc?d 1pQC(`LYf-7>K:VQ\qG=,G^)" v鄉3K6|LЪ]䭁ޑ8z. 믵$w5aICĽP5D4e(>vDMc:0V%&nW`9\ v4|D)Q`8]c}̺BGT7pfyTuxj\!Kj],M' y`:b~=nWzF&RǾX@8f^5btSk߾E0ADV>P|wDxQAE e_O+5Sojd݉?%kPjw-BigRύ/#žg!o\d|ـjnـw?Nz"R%K(p䳏;r82m/^"'$bIonjC^nONLIRO?U&kl H%~g_AN>^lWe<*wpId%)=KoVa(SL"=jӴnj6qM]RqOCa։%E/%ȏMk_)XV|5^uQ*YRc)QDYpz<@`KX,Ɍ준-Q0EUEF X5?{#&$K\ ;h 8}RY—ݰ D?RGY2Sc"(DҤPJ6s9sC%wY<% .\$$VTlx|!x' dc~9Bgnhi&](lS1Ņ.h[@\ATшmfJӋj2 ~b[Ⱥ#hai116w ͓Y-rJ1Sg.#l2_}?j7Qt;g>EKНp%oڝ3ÑK 픗Z9 0ͅZk8x8]-̕|.q#os9qNM:uEbo߾Vk:YR}<'Y+^oL7-mQiC[iXu̇'$ܫ u9)UѯTu-M|%j  {]m+hxzW0xdA+&xsxR$1u Q|gBb$ڇ4ӽ H;{^q>fyegLT7Y9yȽQ>._>&^+0T\4ߧ^zM5sWF%hg}¤[QAnO#f,*.Yme&ânxMGY%Z%#%VJ$Ӛ@,1wwS $4RU%bAtMAy Pso}O ݜQ deA5o`RG ':HD_4exL/ [*~^2A3wzZm m8&ʣ5Wǔ*  FI}|BO`y=65;Uj)i IuE驚 3Y(KoE@~h}Z6Ngp9o,o|Q+5ݷR"MYk=׏ Z`8(`f@BaIMJ\aԆKF7>b%'l_ y4 N-)'Qf {gnk M(źAT# ?j3GT6e}`bd&a:BlGʛ0v\n˂'  R!"+ג`D ji P3R096$:V~cgYkj{XV+p(HuLmBeNgk6P$qDk 8.I {X=#󳁠۳ML1X0KAz 'U1UxZ-Ō cu:Klأx^dڏg"S~Q;kVińJr4^t7X$v?)ɯ\AG‮1Tnv+0yb0ZF+RU=?|7V5眆%uP-pux ֱ=Q}ٛrpzkΛ`em}v>>.qQ>DZ%}7RۚC}%)RC}䦚T´Iv_9 vLAf 'K8 hL_y8#4e_ BOXhWAB@S2<ز$ڸΛ0F1gK'>734U dp!.t*c1U^=СiҁiYC1gyÛk㬝"tg: {-jtQZ?+ެ M6,d9}\æ%#|ʡl/ 8Z?VKy# e!9HwӠjBgb;0&T恙֢)$!С(C`eb3Heձ#߅ۢ.;~L=E7@rj~5swD~ӫWT'3ۋ onDFuĚG 42%>ĝZG@I$B&Ϣ*~3Мʦ WjVu/rqʸU&8XځBA -/9W*%d"X Ϥ= ͞67N*ng4*r#dViĻkijH̽<`L/ .u[1z:K[?,`/Lh!@s*UVA$!#00WvxC!#'_{4]{Ha9sm 0E5ˋR$jr.3)3$ZDB6 1z:/[gE(.wg,y+i>zV[gbDh]%.綘aQ{UCe>|RatHE`ԥgT.Լ&ʠ_ch<~y: n'˯~ ˂O ><̖!t?1>.Gqxg)Qv <($nTtRkZ|Z7_ )Rj0Orۙ}A10@y U~J@}hQ^ƁB)I=* jAɲF<ȣmK gr2 /PW|jn,6D +a^r*CbuU[R=9 z#HB6G&=:?<dP@[}_6ҤQ4 )NBKV[&"Cn^hvl"R>8 Ӕ-m (Q{bޒgU%}8~lmL>Á5EBۀɣv!sh|`J mɪt.N&>v́MlV!dN=\m1xE#)MX,!j=@Ρ 3n)xLOpɏF6 \-4&s0"=X {^26/4d4rp]25qd@j΀{D >kjE^mGKY㨉vrΔ3ZOX JQ"Ȳ2)ѠULK=F8kB┬Q#R Pu=`-Wa_S ry9o6q|?V9X\;]Y ?/SXiD1hU}̦aA/T0읓>jF Q,z+:nQCw 6rwy}azPWmY¼[Ie$gAWxڙHwn(*+pYFq5N(.ޚXmirz _?ZWR"TJ2CGW @"MT"Xv/,[,y!VZܐT̙cCրX 2%/F3΢;1NAy^K\n' /*"z3?>ayqzj>JCi3M۔.l8*uPBʆhwP}}LG.w]b0b6J$OCj.f\~v0 =ݝTtcLQj9x@ު졅$5ڻ NMacJYH?u刔o hX@ʝȟKlR[H +[{9Z?TUs<^+Z`>w8H_ëKf$DmAwcyo `T+Fi%GC%4 !`4#&x@ ?sZ=( Tsy^Z9W3G9LM O?WNUȵlQڕgˍf/2:H4@}8`uc[08$ 2l-e<YcSk Y~&"3WTJ;>a˨biO\A&YXVe(ݟ5X2Tl^5'\,4m/'NZ@!6lT ؼ]S>62XA'X]\z8mȦN7lx@p9:I B|B~ Yg84;6U0~$R]Va}үXgz_bpN'dWU[vD+]Z8~J==f# ު {jL5NEt< Wu Ҁija'6Jz!cjs<2`:w̋7S==`nT!s֡.EtԻ _[?5aU@`6H2 s 'lЎnX<>=P)}?jz>mhqf~ ʄ2upŻo?zbT[1hi@>GV }eCG/z'ޭ,$FTjEZxK1'j7"g Mp#f/rL?[{wϐ/#?(fb(Td4 mOBG*.m# @ T0*W Lk={zRD꭬t9]ވ[FC_ȟzhY *Neh'wB [Wx.xv΄ˈ˟~'R~~bpe}=JMM-6t+:fRjUEɵR8y߄O?ֱה61:3kqCp67|{hmX/ NK/V&&Nu;!=Ƴ  [ì; 94 QZ` d,GPZD@EnoosӴb8U! k4 `J%O|Xd ;\[Y2j%wW!i_|<"88ހgސ*dbKZh'\-dF]Z(/Ly #ȗkE']^JrT2+G#0n譣RxanXN ]MrhJXڿF]M<ہT.vm9"~Gzua ީG{Fc`O ^{½Kgha_u(q8\\UebIFw8w%g=fyX3t0aWOA)au) rr7)4..r?>GR,ݚ yڡ05İh'52a0QyDXh`yݛ?zV:#9?}'';[Cѻo8TVMf–홹dvL6JPZC&K`h +kJ~9YRs6&էРDD>:MW@3`ؽ 2ƭ@8G^<50ߤ0kWCa>0&S>>b1 pfUǵ  nQxb4k9J_A3 ֜\M71])*'}K^v:Wl?T bvdn_,;GϷƆc*"gЁϖta(*0G3:7,f+#71w X4 0C DlN;qؿxaVB ~\ZC15fE^ir8tqy0_cHMz-lvv!O)7o?$~i#g` Ɔ_MDu\,O#WQReZCt5 yeb^cJR9Xm/>)Bxi{azʱ(v\!q1g5ܱKz]JW]P`;~`%08H=Q'C6=p&*ФW&W\蜺)ܤD'9Tmw%z dM V5U PNRyu U #$pfr< Le1Ax|SC >\}B~z; U#PQ&7֍ hdU=ZY00ڈZyōK*uieU#ǧ.mPsྒྷgK`&njr!4OTLq'ˈV_l/*Vx2pi=bƞ?ós(ȀeWήF/Ph2I`e 8#Dѐ*%iGxfl{JF_9.‡ӳXJ@]/x"p'y v`3Z {cTjjjcPԾg Uu2#B#(Ocw]K ZT>sA~1CWz.m=`' F\M klǬEK=!xbvzt%ҠթrHZkaT@`S}O|18(wP1nNuY&]xk&wKP/qi% )k*{^B'3¶5L *kZ >_MPo˨щǾ5.bц :HmT=SƖPBNN3JmCMDU_WrDC[J4o|gjދL:}:D6p.%?24Ŏˈ tm7si5NA8MHYwh9H9N_=0#1x[KQ;닙\;c8nAifL+!\9D}#5eiS9e1ǖgS%Pt"I9V;s򷓻& nqEnJF"ZHM0cy4~d*? 9!d=/Ze-H1(t.մlRAjB|%#>7 &{+(bw2cdEL[Bڣ '[ yUE 71_idCS!zCkߩQȴ [{zuWSFFFսɈP`brO2Onˣ`B>X2 dB4NrEIx|)*00Tu毳I&nc>$ð(qcN)/%:@ERhf0n3 ~Ftrf;v>,ć{-`kw!y)G!xv@$u,Kt !lUuAjYjoLcv5 ")ei}^W>}o1!~5xgYS]YӠ |Du1d"Sa/#gѣ@3RF]̳̓ۖ,wH-kf8өC`E>*(3`Ro$8? yy\i ;&0'_V=5vwB5OWdS"/߫h ?!OXzJ3}D;&5ibfgɌUp(m͗ ׬$#JII/:H$2T<25!t#w`>{Cn8fUd3h0H$:̗$Lii%$IE2qmu\0 eK?8EW4G9S**9]S` >h3 OLKGz9sd+t璈0J&|pF{4AVTD*dNvp7Ʉ-Qrqc!>އ A&#%&.e]πCA Je]չ[/o3dmKTT43a&=_3/} #AV#Ԥ$ b6:Նi(֔U+JkЌw|NztR0՝&Y|S 3tót)2. ʾX$#')nPq4U>̞5ak\e#̢@;ǡ0VJea19L<"AY2WF˽%wdU'ZkfiGӈsC<!U+v\UFkV'ڻ6i1Yl{XF%ѺCU*~@lQ-?Dޒ~_*|W$t mkR/rPuOks\ؓl˙J%r;:bܚ[""rnξ*IaڭlE&aW?x#@ͷOdTW-raaQlbGU p4(rT# /o.]L֗.ʈӾ. f{4̙,g͠[tE$7<]дb$:ZGaSuTgҷH]+}~\:ꄬ.ٰ%WPRT-[tc͸-S"Ȓ=tBh 03#n-*`ߧ m5^JruY#/_`yQA@Ŀ<؟p0LQo]9ڼK0 ُsxˋ=כFU1U[Fra)Lbu 9B9G)%дLRdžFk+!9J,)SIJu!>",ZgYA]8׌6J ,rHԮ /`)z Þ5Ae@,nR28])q}2Fwb;t]qd,o=T±viU,]c MG0$=tzwB:G+I,sfkh~c0ҷ#GIq(r7ۡI0W֎asR+h {ܠҫ' {c؈j!as7lyM4*V(VJ'WzȭߞDWfK*ʃCv vYzA]ZtHA9D;NA w[$2>i 5-l;K6efX7`9M2GL %/,o_Q>1 DR-9์+]bK28!Q cG~ׂb SZ5`ul#B𗐕̜7/9J8Ng뗾GMiZ)QBs7 1繼qW{ 1Ra҄3)g72\pqDKr41l8 Lڳ#FP{R˝OPup)%E 4 LZXQ]=݈S,՟!V5dMs/Ut|pf?w'FA4AEp$&5Ô7L65 t˽' N<$M8 $G-lu;:+0}Ds<B!f' zt8om x7o+:B/RSDlaھޤ;Ъ^fݦ#Ȗ@SwѿȔcHĐN՜X)Fyk^{ Fb2979 a8 (JeF+qJeo!03Xl.tPo]3[Ps"y#Sc<5fwJ^\4^ MvqUacw qD؅?ć~+rc6G% p C&Z6 i.*}q(H- E^(exɕ58FF{)j<~\ fMgx=V} P#b?_WYD&:}ʗeѩvqJntVu5vp ' >x?ڣ1'-y̭W 2:%o6xK{:Yru薢EoZz 7bݝ۽P߾ KBkPLb/_-w:8^RGsT>žnڕ[eM ƲƧ>$H*\qbw) +Zj9 )gB7x2dqLzjh 8J`,ulr\6:_,R8aچeG0.q>.ՊSe"`3s2'u 2]XOޥŇRK@Gl]AN ?d} ɍnO{'\ˋ˔(fen YN#aYRݼN ^y@i]kԜk,UdՄ*ѓ"Wc̋ͥaCRp. G}Z{!hvaeLw g8O B‘ܡ[;$k 93+PwxF;N*작br$B|;)ASפz"I@`;YQS0s-W>a0Y_=atHhAvWk6gvPR##Q^e^^P.ee;3JNH'7*ckU݅eg quYN}R?BTqaGTv`dx#mGφk\6jp1N*)K)֦ ߰G<(ǷlN>$48WeAYQJ$|S榮Ej5(P> (lm〝KioVmLً(a|f0j4 bY?9br~h%8=>EA25y}J8ckꢯ:{Wh5KWoX582uRn[.?vVISݠE /Y. ;si$Qˎi"&38~3cw) mwHw4J4ZcF=Cs4_*V5  ɕ h]ݞ[RhxkM\>L)VN= m)JL&'6CkeSh%|F ,KLٸ,S5}Pl͍u k{Kߊj$2B!}xQ+`("L7* 28Vzhe`{"% :aL65Tn,5%}gv7džzv_7v6_)n)Ui[|j" hYʊ,r1Bn]pa*BZpzta.aݙIbbnԫ& 3; P fH!$ زiQY"=x$kI[h=ˤz'OQpCXjΠ}\ 쨹[l 2X7uF8O鷰T?y zs'4b.G>nch:1` {8PZσ|0^7WDBz.B ""߅_5=}k/GA 3-9Y^&룠4A(hȁ(5Co%`J׺t(W[ޭ`ɗ\jh8:Z,$[k]<&ll{W4%/JH4<{^АU kg KHR&]āO/>r㦩9"@ ڞggթ`}W;6kp/BlxFfDѵ1V?id&Ҋ q*>D:=Sc GJX UZװ{OiX8qiU@43'D\ {TR#s-;{ݣ *eQ!-{L !3t(ȕ$u0(ĬL 8:nvُF}?N|>wܲW,,ZcdYDw0/IyM4^'aERvtu]qk$̟xhix^;_|A;C27\݋%9?ygȘb49 #,xvKCr[<4a[bc9՛K V E5ӪPhXJ@N Rh ^QYfRU POgP S)m?µ.WpMREI`| 6@z;m8:!j1(ݚ6R~ByqS33@> '*ww.rwW9s#1fh@@h[%t^)35M9&DF=wd[>*Yis~ 068} JpӥD?hSƿ:#码 51a7A+dk/7wNJmH\FWh 8O/iR;7Q@f2I=wW^ EZތ%'j94YSy2.uR/>+wrU⳩̶99sZ\팀$voZis)E0xt)%x)TPy.bg$Ao#_̙z_)ӷODU ,ak];8dZ#j$inNP[\M9V*溁"^Ll8Y)1.,ن2!3\>ϙ++=q|6HWLѷ 0$a צCh8݂ qݏqy* |oz|T*~f+HB?p=;ܫxYH&OQ1l W @Ye(4_y7 Erң''UE|C͓9),t<ΰ^R>z|#p'-w(ۯ*TeR]SMP?(T#Ig@lZC^Z(2S\r uMb2¤Ya\~EQm (;4xoD(U7YnBHWle%pC!cħŎзc<+*cp"FcZ5@3Z R}X,LE$nچss|>HVI3v7.aG%$38 -06=M#YXn${i_,eZw,<Ҽ k[!O)CLKW*OM 4+Oy{svmcځWK2m1xcռMW(*e9f>;\v,¢؎|uL /}CdBlׅ8߿RUH[ K)4'J>O6/Bߑc x0DNRaZ:^ G2Ep ǐ\ ,Pxꟁ\]}tc8>N;2w]Tz#d P=RS`kF*g8kW74IO793'c@HFE(yV|Q vO~ѥs듡Еt[KzBTƕ4\k6“@>ik\UW|RBޙp733tdo ҝU@7Shk=8{{]0qV xm~4DF(.",{\4YRZ6/`||M:u;4l\u\3ifP"A(xa ‹$5r0/FǫTZՋp lWXIS,Tq琳'W ?ٜrAMa9U&20?eFTf-1*B#U*v=ݷ_{*h>{s`˷$>e6@سҐ!aaÄԚ~>1>@36=y˓pD T8wo.}Lg*L$AH#X'i KڌqG^J(0;JwI=ӵ Io|i|t XXI%?wz}UTxC@wc^pX2Z5'*\ X)׀8E|]5.Kn8 |F51v=>UO%廓y[!ZDm[ IXswW_X5f ,,#sԄl 3͑?dM ?F BPfjɋK!~آiO}$-4^vĺS4͆ K {}rc~ԳιW܆v|I=wqDܳ4s59ҝնx:n!gBp @lK)vEr{(X86]gtbX 挩)e0J2[x-:W-\'؃IXT:-iHPzd`q4o["\]q\J֧T7`; @,'}l`Xt"Cc1 R6]k >Og[/تf 9|+ ɌxažsacҊ ?T4:ٮl4(M7DW_H4`{Pi8:τqt˧n&)hGt7IhthĊɔ&+ndWz(Ӏ$͒laL$!&gxCFCXDcevd)1&^6)%VO|ac*a+< 6.HUtd ,M(MA(IsVN~z1q1UUYm"t]u,:cŠ,aHOBzLqVBrm+SD?^Xx!\JHQx҄&g?$2Ф])ub/\:l(m5llN$3f6~@^yb\,])FAiYi!+.W$ι*EW-3z:y6-XFEZ8̳F̥R|X Ч̿2PMK[y!,Ua&[Ss0 bRK0Y!Z,-@Len8{UՅH3Tv9ш@9ƆoHzd A\`2٨#3݋-0v.yN+JVE:#Is](m^G:FT3]|lLcgz[s]w;{ —5O! Rv$Fj<)"WaH(?^U*luŔ!cNJPSd /#eFYN?XydrĪ@гI<[33"R2L53"1Kyƒ;w~"ƐQ/nAnddɞ`Ȥ:})!Ll|߅FxRYj?ܰ(lG.s4N5|"dFe+g^酏EFjAIQyX2o~=5)B)7Qw%l2JecOmʥOf`؅OsFYNzpة`[J9/w,/А ^GV٣m-b&&e[ز6MTF0J9 88̼dJ\@oci[׽ 9wžI B`,Y?8=E}4"O%+=x;.s #Oλ[ye_sɔWiÜ(U%0'4{n5fwi!}+&UiU(hV˟e^Ϥ6Ώ΅sb)HQϫdM?O0}So;so5GAbX}% =oy8S?`u1vN$BbxD V0pad0}k\-Q 7+IrbDmo4yλ>>>!G NIWf_Q!9S8E!tH[M%@ciV͞1)s>o{ ʒTCmh2.0>tPI:(: !i1SWy1։IDא݇BZqkZ&ŹdZtdԿMBkձQxHM 89A$" 0_v@r3-x<{ꍔIAdS鶩jn+վ?,Ç{v0j]I!6X^pQwktOFQ 1$ ]1ZW!w)}tF+ڮ.5ekm?1jo~f~AQƞ k3]_ ?!-hszީU1)LTX.mT`j)SIRZ7-]\أٛU$#@Im) \J,~mMRQ;\Iпp.0&sJ)?o!ߒgWL9fv7_uME>d"YRflw2}C"fS Vd P 1I[ZyG^ l^miN9c5a=sʧᨎ$Ӆ4s&1um!I^"̂j8Ȟo7Me!e)5;z/>0v6]b)?ꄘhnG'v m~#ϕ~=o'yUeel~p$3Xݺlۡ@fe7mn/hoUhDM()BK jQC4Z֝ר?켽!O|8cMwmSXLe^W0{ lda\"-hO}AFl1&V.3|z ﴰm:S%b{u녇_zp)Ꞃ*zTX@(-*TU`Yk77Q hkf65_[5/ʼn'ϱsKG`rfvlxRk Փ6eR t^=2LGGj6<*j9H.{ F𺷜p1C—:fDhf(.i5vuEy<ya^4c>Ux_ XDł >:t+5>\w\('Y\'SH :X./f/D;LH˪GQe" h5uc*ʥf<麒"`&3+ 4(rbčӮt" "3TkӉF*L]tQ2/@_d2P-*/Ua%6fnQy(͘A?&[yp&u mvVsL,INvzt7,9s&Acp0hSG[a ֊_߮k#.#Q=7ǿA# 0!\-~y5џxc51 uZ*~d^3$V-@_ɘbgl;z6e(~̃LVwhEI䃍ַ5N0[#q:?_ 3wW}چ m\576/]d0`5 n \p殭e7tN!tׯF,=s_q Rڒ9ǣ2 q+R'7G!c+7b;#C/'m6K":0uZ=yliStK1oV124 ?똠l7IIQƊNy['NeC@D-tk%&hOxȍb戅DU[;^t>AtߌxEz 8'@[k#dtnMj\ŎLՄ&EIZd6D%1i!͔;orKBR-2W\ܟE;j<s4d6qᐇÃx<:dal,M41%,\!" QtVQ pK].E.ͩaX9y/o1OpC+ R@)Q}qg>W@ws3 Zڛ(jJb RڣCfz3k+DE  yj2~@ r+HDr!/y1=|Ak OjtͥmP-X9My`,8$eJvu` R9r !^:4R!=_3ܥ\o]nxUPXx@lˏX6O#O+@"5V: lR)I?֬ܘo ZݗF9|.?Z[o JS?i>nPۂ"qgt@ݖF!(J=I5b8krӬN>PQ1NXv)׋/.G.#90bȀMIiuDt3:=|70:#iѨ3eK[0x\ŗ6pW0|/JƅVPx'fO#a'vne܊пrgq2sgefxoiZDy:NMVh /k(; 7%.#l23R3M:S;b炕OXn=ǑZ-[UG[0-GZ 硽BB_H$m+=A?XCT nN#$; %;#?#YxipC׵{7sNZHK!m;'4/|~;;t7u`۪#MTC_]?b5T<P,jd,zz6.yqNڇ)fcJIV-v1SN!ڝ=wO>A_G wnp{'IٔHMk2. exT8]!0K݋c6Fl:wO/'2,u4cۧInR܈}"miRމڗPd=?+ʤ]Ġhi< [M0@)α,Է8SZQq,>b(F%$iqޖzCi)ފ'H2e:2NR:\ON3"m3LJrIFy<1mPsZq=`l[gIJۉĬ>d 5j}>lz{BssEL1^da2S 69i]2ʦVK u$-DM \2[7aSxG",196RޅK>,j=x4hd+{o".# !h1/"ZL1mh8>=ZEpy}?t Ļ#HY²8Gs׾M~#̖+ {SkV&zϨ< &8Xu埯*|8VJGXz,SOyY,F]t'weߋ+|FOS#M 6|f*5"< {͑囄JK<+49Dj<"lǼrpXm鶺h;@K_Pgv)|th36Vf}[[KB Pʧh­e'R@FX:htMCDiIO7imӫT-0S0V51KB PCcqisYSE"n}-a 1z^ZHd[ՃZ} wR03W\K L쳥[K5ZOa 2q8ʅGy&;4r  RN'?n5`B&~q*NAKKƣ -(;l`hBpE…aHrNv`*:8w< s3 Ź rY~SuxX;qF%i6!#K8o0?BnHx3؝uXGSME&>gq,FEQڿ"Rx!\*Q9VCZD2pk\*#cC}YKX348ppG#0a2"x?,O042%ʴzqYnJG3nS !B=^Zٍ)$FT(e fs&G *̅Zд(_溒JB,D5k+,<' ]Ʉ:LsIbe*/9΄5pz^!;:668`DlDm]Aˌyw(IHI w$ЇX+wwn-T]RT-ӓrB ki8WW9IpѼx<ـb hL0KO#珵p0 O0cZ3@om=y۳`[(t|/MgM'OoIZؓFvRasxQ94wtLVfP0 gR{ub!GjW3uoK#ݐRo0=AY5FNm~L=O*V!ًˣ_wNDƳ|ze|c  /dYȾaDTQ"M[ހnj)@b8VAV[Ot+d>01r t/v!Sh ۘ/#)јR mA7TTez,v(17gi;?yixjiLyR,k%~"wg:%I^ Ujʟ'B8y֗ҢC'+e6ȖZӼ Ut4~O ̰I=T!S޿֠k5w!7zqunDV])_Z$XQAijG@9TMِIYy՗I0H GItbnnpq X* Ԑ GMP?0 j vAS(^˿g?>1&գvydc.!ɝaS*а(X4fv5ғ^̺(D9hH\;"ݑE0fOPG=4ݒf⼻[#^u ^D$9ȕA%GwG Yt#=Ce3RFiFYkCEV(  X%]Ť6s Mii=z^>־s$q~UotA,e,kǵ#t06B;1jR!g5^<rOsUQc>e tR{hfp.7PB: u&|ҵk^ž?x Qkw'!L8rE$Q!~eYiP0g*c:>Cn%z0v`5GMAjpD+' aogXkjHf-CpJ,"«2þtM|ozG H PGynO7k 0[\0, )%cAJfϯrJ7n.[1 Lѭ ,ӔQQڟsl$>2{DBgqBn dնP!şrE$DmJ˰0Cʤ<;Jt/)x#U x!۵-*9/^P}R\E:=sSe.@6V/6q{Wlmz9! *HstK$4%O&"Kܝw1\bCNk U>8LMG{_0ڴs$dÑ" 6.&$\c9my Pj8x`/|ٯqS.  ? 0ň##2ќXgX#q*^h_}:LXѵˀ1i%bw P9%jOqE{1?xXj_cuxj&xbo;c[VC0e ;UuhB:'3=UXk@w~WPNOfi1^|nBcz U@( E$l3)ÒOOO(FP15 *kAe (iΌ$e׺4yŎ^][ufD 󊎝Ky-R}cѿt;7ڙeƳ$+N\8c,b!..,4mA"r XVyA`(s\+a 퍑/sO&($c/P3ii$^B7G1^^Lg*M49lFԌ)ֻJW$Vx !z󣧥(}̓Ⱦ\H QqECM#H2d>9֣/4H3m|c~Rcr@xi?oaչ(^[`}áJߒ&ve&Ӂ@u$KQCė;=$n~.M-eqX@D].Sfrc>=zCq[2[Umxi 2Mci ʥ监.MX(*GX\t̞4(Үg2؜Vvܤ"U4yq.ѡ8K}{Ѩ \$o޽0#߈p&`=O%*U n(7c- ˞W*'f|xI|PX*~>Np LWFЀT4;i&HrlKu;,[*_>ZD`Qu[U !ٿǯuvDqS1 Dٺ %lQtQLQ4ǦM)-nG*]N|z<|4,W]=!W7)l G섹/bu6h޹q b5Qp^Iζ\P eIp:L d/ȴ5lQ+vy2xvȲFn>?طo>{*,ZU8:dxS@k%o}r  c R0DS[ ,SyV@7ihzoS+4 VIn9jٌG9Ma!3]¼ZdWOq7V<7!(&{ҹVۢb G2\q@GX%=ﳷr9u/" WSmBo9Y2m!OqR~n9+W "Vr kFZ4sg8KྊFupqVR+:+DR'aߗ,t92K"v |(\\H[&`HBbSt#% j}YeI}O`]ӽ7 [&*ĬXE!6,CF4^vQ3k1xɠ4L!S|8j?_( n[#%eJV?#;?jOЦ>'IESlJ֜/#HU؃WLnMj<9^~p<8ejzBGSoʷy2j71&lU SvXW֫ /3飚D8W#tf$?P,~`C6 3=?mIb,ġ.贙b<.ݞ+Lf\bH! ̄P)q%kh1/:=D3bڇ gF4#p6F]DawֳRvapey@GjqD;;ms;YJrxw쳏r)Ѥjڰ{i4fM;(VN*Y{LKPy>C&W㗊 0}FP.>j0п+kٺ UVHinCB;ٿҜ* ϐ#f mpCUi"x:W30e˞\U1GJAiX Lid~'PFr,KOHAnXPmϞ5N NVs=w}_n@iA5龏ѣ"Pl.9!kI^Q&Noc,6׆^Z3}ezpx.O^rΞh[λsRa$GAM d\!`6YVę{vo K9rE×L%|Ui/*@&./i{N| PA)K.!R߲beO_\ssVdNBJ4CjM 2,Z kXp?KKc:5f)lUZITJI1k%Ԟ~TTЖv\[R S$ An6!qO}):Mf /:b=٠'5A1`a6/#~ފK%l`JT5Gbgy< ,n=n]r1Fal_ծfrP8 ukU&i^@-8(\clPo$|%ՌWzfq:OD"V·{.&rXЄĭb {d>/.etWGU śj\MW0]toa}zJH%^ ks"i91K:;yٽ-r,>O 㴈Zk!V(ZF<+1Mn#6IZb`QUXݑ[l -ܦN d!9V^`6gw0K WC̹wb친`drcZ!z ˺ؤ,WtWw !#a e 9;@lID.%6=Vg98=GPm>o?cp1U(,߷z6:QLЊӮ i2+`K`*M:٥|2Lac#Gǿ0gޥ|_#%?I0N˓na7HJ(ZPZvN2i 9xC0:U 8^h̰T^BV;X#a O+ԉOk}jz>CD[pjpc~깯c~y&thlo詴#ʉUUVvUmsd '-{>Q%75hib]T#@9bE}\6h{3גͧL2ݫ) 'JREy{B=r ԋJ¹v-v⛐FupUY lٓfĞ-E dUۆwBc<~naci,.93` Rz["y=dǩT:'%q}~SOCJP, FL] O. U)xlYH]\]IuicDc2J\%rߺl!G65mlEc$V(D3l5ڢQ`whء2b'7ٖʖ}G!M#emVP7OQtE$OnJv+9NFf;#=+$OigoG@^F2If S^rk/vR*?yb'W^? E`!ָ|ƽ2U)!KFoJ$ɳ泗U{9t~vڥhLɳ[ z_zqVDҠPXpw 5rѠ8<*mjm^zd';CA@ug!QIݍ@L_rEdqp XR(B"rM.q6Tou IRL1陶8Go*Q;*H649{@A!9ne!4SkNʌ ~g}f9pr9FjǡwklNX \% jSŒuS̃ѠR7g“&b2|O˘!"h\^v1v:a)c&xLkӧxQ4|&ZGxPP/}f~0=VG?yhjP+W=T1#^(|I&Ĥ#3UvIyչ)aMB|/SU{ڰa3|\V|_Ia00閻D+IGv$7CHmWkZ߲Kf !TCV=hȺmD{8b/gc^_~Y^0wdf>LHӒ(j0|,$ |=!/g&cs>j&ZHy҉ة2iǓqf >]=?|L#/C-ɜ+łdͩ)&: 0Zam1yӥBf0 <>4Y'vh.mQos܆ !®Lr?I.-96H4uLE)ѫ@琸! vvt/E(RV78c~WR*-!¡3 |\oeŌ;@BTC94]c7*PWV⧦up:D> l̛6g*aZη[.#Hg]# 7'E ]GjHV:|A?C`n]N`t3^ IaKM%:T8 .@p2e}xjO w=d«%Sќ"icL@TL~ `m#°+Z})Oi;0g̞aPI JP6.[w QFy$(4ef61ԨJFq9صh&e=ǧ?^RT_]~-YI#y-saCU+`é(+C\aҫEN2-Zp CEmZ/tJLLuم.銑8J52&a01 plۏ-W?hʦ%;P9CFݪj͟hAa +MmgّWvU%_~2 =XXeK +=gl*57kHcC67|DMWm)wwZ`J0U0&;py&\ɲ`>}' (Ӷ'SKfZkO{Q59WqM)JGxk`F EWP>)(XΊxu!"7ܧ? Xgsc}_`h }b2vLF u S qC,f 6 ylߣDP91Nn!JeɞAb8́or20T$VR葉R;GY UۺAnP=;b?MS&3v9L@kf ?Ud83C.I| 6B7Uk2*"pB{AE)%'>2ߣWFhsy.&DY\5nVMWt4udzA r"5Ru,HzY .d9v36!2%qpZ&P4#r "NvYYؙZ˙vLZ-}],0?6ӭcjj^8MD=B[Ol`F39#1,Q॔e55r*RJHܻ Yq"^x[HNejW]N3Alu gG8|Ca&Eeˈl}y[儽ʱ%&Tz U'47i*Q_kƬE;W9hɨҲ7;K2hڍ`6{(.RΒx4^̋C'tSP}7 ^H}QHz2$e=ڵ e4fDyevʵ!#0F N6.O,Aʆ=p9O'nX-pO{_)"-r0R8&}w#xqNjV*"$/+O >TVK;6TA9gr$c1g˚fdZԈ$at%ǗxVJj P{sol:2ټuq^l9$AN!0}c56Zqぁ~?y+Z?ɡMϟۅ.ȱ3aid=t!uG+e ZD++x;O|LZGL5wWs <@O;#G,_ 3Q3.of)=KEcPެbqYI b`jXKvPe3(2#0}f>U>%nU3g)#/97x5~gPY2coV̾d=w]p!,7@k›%ôFB8Qpn#P}&G:;bc)M#ZfΞ<!TyDbpX =f̒]f Z-@E\v.; ]G˨*'TipgDfyW}[h]8ď!_VyxTTTM#ވ'5 ҷ~=nנf^xqʆ Q5x|grGp@x ސ%E-De?%9 ;J+]X&]D-fjkRq H>oh.OKD By#5D)\<9wfhgU|"4(cz\<Qjhb+xL&bZn"=ʹ&%P`/.sNB_Vr(J„C|`ve=CunL]+㨇Qd5.@>oH0t +V;V"  p}qR=cDa]j]iΠOY6mwluhӫk18;en0"B^P?c|EKUuS4aAއX !M,g76Ч+ Ց2݌FbȼLo"JfbAf0dC$T^*~GKY 8H4I w3Up]FϕBc>Hun6j-_:E4Ayj!; "$eh>ݰv0?>xUe)չXF=O+~NӮPpU;Dʁu n@BKl/gSC%8?u3vIyKme]vzPke9^hT]۩q@N8g4~XI {հJl@ѱt]+yYv).O6/MsM@4k_M.HAk}u==(3_C9cjĒ0%+HhYćW%#),2yIkoDEP4 ;Vc1ь ʵ?X>Dh0IT|g=1@<;WE؜dyZyI-Б$اo'V03:ZZxdD'\F= MӉoA8;HI[}\cjJVw[[ )f*N;}iKKi)_AN։Y Q09XOab?9;"n1@$*{=M˴c|LP .HB֏C):c\-M?ڮVTwbG(v#ײhnmrK;]k۠UcE]B_Y 3=CЃ)uMr_;шSP bexr8˪\nbgKyҜ;* [!^},6*<<<Aq؏ H׶TePN̄?+04|WVP#C!:uCfPz}`]}sx|]c[.&^J5T_nTxdIegtWu<mMDfז-Ū6#n2BjX!<Z.S$l՜eK\CERZ"l)bxVC@qÅ4WH"UPSc􄲝괏Z@_AӴ5cvvbOTXȵ*]T3fτ]JxOr_&ZP]~ADB!ӷ(s5V!kh0y9X b0g-;}tX ObY`*ߺRlEI-XG~.C$f3& @pt< RgDh Px e^‰),&dF+g0!>sn/?xRNv˒-0˞Sc pu~ T^,IHc1:n1Gc_dm>_ :WZg? smSxM@KilVsyw\@ixsb?~nѦd=pK\4*=(o2Ҳ}IzZd^ZKDɣ0:w:!hO3ޣ6h\F4/vxCMLsޕus\3<7hH)9\D~vS26\Lo U?RP+(;7|H:o{uC2 )B ä=6cms6wAXj&;+'|Uá @~:TWlK| KJ%FFf b!L.9+&MZɨT㮨oNTqd=53#s).dYj:0uU"kWa}w" e2k>*WJ,"k|x"Ž-#,~Y?[k[Jɺt_f9ZH/ `XW >L #G_.td :ڻ@Ui%UHr-;: /.O/L̮uerDh^h6!\TzZ+&wH%Hd7sΑݳJ[ T K-26WO(O7c ԧg ' ፞yc8G l k1"\5'hcRΘwm{wZYfҮWxe$?^"q"x0'jEClBq8ygQZ->+,;ϵ<4-_~,Op68)Qmٵpbzyjc ߶+JՔebP ) fWJμ*[߃ӶK_sȐi(X>'=gx/9č=lƞn=YLs*pUlԐ,4~Ow;0tGaئ ta^@1C#SH>4omdu5w6K XBU] gO-[ABni/1^nPe F5z3D5c茿-Nn*_gkr` øf|@*b$5Zn2LZ`*:P4tՉ?F8r gv_޽% `0[:`"uzBCqR^+W?~8J VE>iPNe.R,XHْss=>IH'c%/ַxi߀/TЯTx MrDz$kcCS佪b5Oϱy|!!'uz1M0N>/*wGXh۽Xu1|ƃLNx IoM OHUX?㴉a!Uhty׶1[2"y–_i0qCjT2{tZ d5m+d<2~ȃ_A\k/%=BVhM5ϸq3&GK ݠlRw>]PW(jN &V8Nk@ e4SyC| r\5ծ:Q\rdJjDG;]#6\P#m%3\wmk;^ԫ$wLkV3sMNw1iXAXk1d":@#(en}sO}igs̝fN' He`P,.67c]tx4dwQ^n?X n7knBͦ\7 /1q<' /cX[}4DИNNBS Ii =9@̹\50Ԍ  9&*J? s 5?R,>8Љk/ThRM F5K"R掆hy-A"z>_4Uh K]8J Ecڟz0mqE=QSn7G.e,q,LB+i6:m:m97%BJP7ljLbEÞf 'weS}0cg:uE)FfdWTrW@ xKG^h ڋ ɽAp'Bb,C&[x\hÈAl O~VIYrn-w~\#Ѩ}md`7 ޱ6@pCdzz_xLG]-oyV-xy| i€Rvw#\8 N$ˍ"U8@ڋ(ֳ/c/ +K~7W94r =^5Y7 ?29[!\KA\Pk2;}'H|y?LcYpO}r6AArTLJ!19^lQbXN;`>c=0js5jjͰDܾ]dinW D gwrua:!Оd%Gi;dJzvUB&>ij\+ SWP 2Ҷ>!4kdA'\`>p-\Ka%"sƃr1Ik[,VئzL{،m@dy=%hĊMs`zP$l1DpY:T؃vx6~ۀL w^}Ji@'qb7u)q;cZiz/C}l]E)blvbI,gUڀ#LӅ-ᎵZvkVLqkZfl/e- &aAK71,d~8y>Cfmx>*⟘`$P!5k:t>Vm&^z{:6X/E>2i+Rw"qPBޏE4wP S!G ulF JU3ha)] #,"!lEC̀o#ۿhjGw 3C@:&$rň !7(B"4 JQvƮl)/hýo9 ꕠYƜIF&_snMwnqXV9Y@ܛ|I" Z]X|I,LB4)8n;2Gf \qHWBO9rDנ*K\WG&7M 9zORC {TmcdnFLeعTwwϛ }J_s#݊5ۈ"P9RJxp5ZU vUd7^C- +YΉ /BT񓎝Owlp3kQCJ̭ov/q ]'mߧhGY<9093[*urσ︋#FywBړm|17y)ZNy^аP #xdc#'_ `w2r<7JV43/J85N$>t"H;,M#$wp&m 5CNE 2 `)2K.,̐ܜ]bMLj59[µdyŶQ@* :36^˳Q#ntt?P@w2ݦ?gl7&:wEr@#@;նZnZ_r] a=g&]!6Ƈ@8~fbXyUVax/0RC[A ;^ aX"QI[q;b٫ y|Uvˌ̞QnS'jo)4%s :R`MG׮Ŧso`v+ YTA:'#-y }Ԛt+N-Wc-G*ߘT j^]GAGW0܏_Rlux筻A[]ru|{"Qq^W0mgHpw\!+iM AJgFp `Osu]%x_5h$h)KK+CAv}|˙(o}1;t__maB*t{8{20AҔK]^BhUΥt 00@k?˥UyH\4@_%%FHΥ%KE,iAX<|^E{n&qg ?ܲyiD"]V>ȳ"*T?&d4tCCD9(]>h2q&sE )H#"ˡژIvva=1-XM_K J Y9 DC5),(V{rlMR#F_ 29MRT1Ez"2!}gpmg8~y){{t 3r:&Ue'C=? c )Yi(OD3OB J0JkRT-GF ,\j~^]D.N(7O+U9)7X`3%]-U Rg̦,WiDG n`.Qo>3$OVY韶\Zap[du^F+c_B3L3R%d6nE`bp40`1LWޫZ@6x:.Z7Jr%,5ݤ-'iirQ0-@X^ζrWfmߊ;A]C"p9m-*_0U\؛IKSL5w70[dc +z6|v`<їN>ėգ0*&\?qiup%t٣hIp̫ V܏M /q[9]EnwʼW"VQ6P\"kXfd|/2ȬU8x%hV# rR )zG,~ƦLj⡷f7G6t~Œ%/Qt rzMѕI "Fdm=4~Z #C{jN@"ʄ|`x3XB\u4]}e k` 5-IHQ-ë%}4,#GuNISP?1nygf`)c8axMhR!bjj*#kcZ@NwaquX֮fd5y4Έ& :R(sn;s p2bv|_uֈOSȻ\M~NFǑvAB9 H=\1xaJO7?^mx\(bEZk#(}sy#r3iȦ:ǽo~|˽'UƦz,45t!y,;M O UP +z АTjH|k8|qN+F;ùP l%9rT_,b),316,T)EaSH-E U8ՔA0D L@ raW^S4UA>Y!se!(z;>~-gbΉYp!'*@ݨQ[i3*[S]}^ ' 19ӹW_0db6 *a(@rSh#|kzX:K0R緶#HK]?+]VL'w 8.4wT9գ1ˁe+ n:ILUԪbΨAuشS腠'5jߏyAF./GYoo}]ltqu͈WY-=yHOHu +P3Q`(?zjɐxi{4)qg.:oR;ghlD?@Eb$HPV+d{*ce "Ap0_F%qzbk\[Wh;6}ʥ]SDU4`'m ꯅbu`v;wH1.[tz،os&?dn{p:Y DXBPg $iH K~2O).hB"=h`qgsb, z6S(KF$z8B-&ٌk"$&3l hs-G:)NeUI>mL(̓t#QCFK鷤s 2}zl X=D>ڌ1tPBq^S:BPѺv+@,>]-ʘCY%C2NѠk3HI97.M zVsroWhE'*.C ZN5M* 3 "P.`a Ey]C./7"it%5\Npy>^?&]Lqy9ZC o8妬{NfpU]cV}C4su7$)c"s3HVc0{%< *s$qY͸ %P FiɇQfSg?QHPʨt@0Ub ꯍʱsQje]jnMgd Zt-f$%lU;eP'deE-VpO[;CD߻m( ۇRenD^,;Y5ªq-@X̲%06eveу"AM1.0 2^$ |Glևf% 9\Ykhk5Ø'$-.D tN/ 󶀁ep1TagܥTO2WsG8pTB2%ތ%4{Xaҏ.W?iƚ{`(2KfEX=ZچR)cWuhP3O.M7>I9|kj E||ٜ4FDuG`V BbzHw[ĩyS<)=bnHw"Gz`O`?MHQY74H=YD:$㿃b t2n[p:wYHy qȐy!bɧ&  gTqԫv̄ 8]ʩC%u>}PAt4UD/5#WG}qX%]NTc rh.IAqj*zU"z!d"5әAȆwa|]ǺvA*6dٗ>f٩H~hsڬ[Sj)_NO* ߖHN9Kjg(MOJz #2oo?<4Mj`{ ;y6Q_ea S Ir7^qHQ 9חX=G."Pk ]9#_ǘNlVS;@ٱudO\]闛ֺ(/% w1;e^´9JdP[X;O z }Pu"Lל;px&XA-6tjC%M'q}IQɮͪO$5g4Izwňdkǥ]oI^݈fƆ'yLsNv{iv=]Pcoeܮ᪆uQ<4 {*[*zG5BS "RRub3Q%YbZvDp&ug `jxٜdc9'$jQåYr2O:D?C3@a&^I ;#*pΡ)8r}r.0dÊf'+]FOYb-P kѬL z'R֨1&T5+ݶFi5Rc(9ͮzR޺DO(B`I 0(< T$Da ='1ez艛Ĕ?E=aa.* pؠviDIalޙiï跟alu i7U?/f#yc(6,WMVq2qQekϷyu]=;&:is`eHehꛘ B%MeCF. >˸9XH`EwpIFZ/) Md 0Mϙ jFQ[*QhOdl=vR `UWaB&Lyv]U1CzZ@A"[7"jA)I 9ye? n S+ۤhO47dsCnLߐƕ]f|jy/:DjGP؋2 ǣ]h aΘ?jӷ ;I0S†&YЬc>7d,q$R)|rb#: ~KuBv2$(IzQ I.2ԫ,xq1S⃚ʿHcJH)[I|aޏ:mތS;>+/~DxԖO>.<+KTvEfjEwx,S{$ P0W}fּ {e6m'$ϋH ʚlc݅dk]MT'5p54k("E67KN5p$<¶L?cޙ%g]C]Eٻ{Lq8ϓ@83%OWllsvuΗߤQYߪfjV9S :K杣\+Fe>Qۋj/v] OЊ4h";U.eM Քk3:sԜ; kñ S$Z tSNfPLa($YZR$0Jm! xNھ0iacOgNX!]L ic*UƯ9:kB]f5&BuٸE숴!7oC4Ȥ*|(M'hƕ58Pʣ?Qq/4"q:{z!ENQ /[_&YPT}rn"O?C0D9Ⱦ ?-Tv\sԳĘmG+FdDxhUȉ = 56bpivTb  nu\>Qj ܖ-.nvՕʧ]r7ܝB4_>>l3mheT޹+5s|M g P~ƙOCEAWBz+5(=ƜV~J׫yKʉǢS8tQW8s}@)Hk^.& e;U%)VSA!˷\\2G2|jj C'A !&fB<^"Of6pi6i=^eLLe?l;uS_AXv;?==sa#QB?EHE ijX9ӣ9}_oH~;)nag5vWj:c/ P@Uv#4Lo|z I]e ֑TQȎRа( o[ ~4Y֡! (>LJ WdPGF)p$jEKs cuJnPG*qť5z%|"JӡpfvZÁ_&)fu[Y<5͹A}1>!‡[DD|eߎ 7%$gM ΤU9sn^%{V<' /ҘڨUfb:PQ-۹hJW  L=pN"sۉ_"n,@v^hRĭu>R~'Eh3(!Q 0EQKct)INu %I[$>(F,Γr\ڨKO%Y%ƹal**OX?'Nb-t82,ˆO/9)W9^΃gIDF`&+ H DgA߈>FѤ"=C|Ë}Lt\ei2z'٨܇̿p)G ?-ߨY ,ƚ2u r. ߯NN!A-sR VSgϕ@F?#=RwnBG UW<c"iJb*r1` B, ~P%uY0| Yj"f=?'r¥_\c8XyUg{BDJs5ŜRП9bEQcQDzȨ#U|$dRB_.*.hU Os^w$޷Y1h1V>% :wěL!CdI3>!bXy5b0c B<8#AWv`:>sD/F5vKE\\烔U|ԇeV&fbrPNZh[$BJ) `O@^f c"a̬:&;ڑv}Գ,::[:n-;t_K 3T+IFoȈՋqLT` .VF:¸9H𴔸B$1gz` |0ӟ(3C-x΅Mty=qDo򨝑P# Iб2&27RvsY:w;PNG7QBm$zFSvmICQb=h>BJu9̃y]V(3Vp@D@sIݗniUR~^j$]п%wui=qߧ(^yڨK#" ⯒R>m# Xc(Wa7 3_9-nW~}Vl1ȿ!JKڗE蜄[y?AkTD9n+3/TChL2?2~(Y@Q;Ys{Bn'%3EGT0ȅ祡z4ʯ9ؼ?ײַF{c#47j}#kv.OO:[)$RŅ&@2{9rnmE^oW d, <5:glv/gݜyJܺbgҿR8|IoXE Ʊd.GjqX"%1.K`pcP+(c1g{XBU^W/>Tʐ"3sYQL9NEgT5j ^4OUN3_mYe?"4#Bx<^D$tu.+U vơ_#?Oc%/rd#, qt|dX̳fE@fk7[?D9 _#חH{=$*~+aW7\|į+хdFmP Z傩 Y<JV%tcX^ 9D` H4Vr4aҝS ΰG9*m\Qh9E"([de-_ڶ`Na(^j>yV8uܙ7f)ooG=fS 3r v0!pL`3M_~۞˒$4ĕ< _]~N/ 0N`F=(-TM[~C$G!Tg`N4@dR6CTQܮO#* # B"o.Fgf>z mq mex=uᒈn{3 -_״˹jx|]s@weZ=y7^iRۃJܪFl7mya} #Y^ !xɅ%Ľi)Yj_׾y %Qoff97oak4>ۗ"uі_yRoa❁RObk,'i).;{0Z]5أćB`>Ŝ8& d>;BI0e;厠_'&MD@#ZHb񽵅 uڊ\( Ԩ."u | "+NDyD>1<[zw`oPx!S;$hIrP?K&Y(j1VF.FdTO~5Qتӟg\+#wJ (OceBrVO+zyFHb]?yv0=`jARٷsdS@] 3">%˹ 1 ̞}97F =-ԯc9: 6ur %RTL8|\Fu;E2zhVHI3מ!]ٶq c_8iap pdw9KхtEID0Rεflħ:yY)CbRԕM,TV7aLς0<$4Q* V^7>}u _uf=t+\}VE]DsBdx}YɌm2X(5Q}tB۪ݬS :5-n*VI/HarqւG\2@ 2hQe5}y2%Xfmp]2uf&&=-7>/OHKa.X=KƵRArmDAɆ  wsQ)^*ނm؈iwCkX}ˍ]֨zN]np< ;=J>=hđe8ҭ bjc8h݁iwZw $h314Z+4!Rf{Na2z:m-f$thfaqt3, J +-C! ) T~zR<3f6a>(nLcwj%^þ|E=wLm>F,z& g]IXbņug ݊ru+M%tM99j:N]W wgf-R h/k-p=$d{C/žFrϬGy \XM$3"-ҍ?7k{G>s֝m$\1?WUz>~~Z)l8 %N:%a=Nag]쀈g5°?,X $n9۹5 "e]y l>rmQ@M}xyEt>jmm0"1ռ_͆ŵMF3V3}2/F8"zQ>9gI1'[@߱u31 +Ƕ6IQHMOx4<5sL@NV$8Wy;ֿpMnZ {oϒnjӺi+EK*6a԰HXbu`KDdaH%a` O 7Bk>7nx7aQ &D?Г 1 S*Q(~x *r,܅h8h(@@@d":Z>|>u#XyE%y9H sP,d^M;d,a'F/FRwl.8 & DGx|tήTvI|X{$,Yovd -9S?-Az-T1dſu|kvBIQٯ566pYX KM'e3_3>„ VY6ADLmyQ.$V+| ;Nsz@N…NsTeE"rWSʈdmlth7ev&356*LX?Le濲g١"!8įp%Qb~pKwx*DYjt.u I')%3k @rɘ]}cWXq(M'oxV,}|+yT8 Ț&G S8"+?C+iwP RaQiujC(4C(1V⽤A%A ‡z^?eQ{fI9za7QHT̍״ Ƌl {ٻ80ZJߑ?( 9 4|U'%;kp̪E`M0j~ $rI ,J)魣{|t |jsB~?fT`3MmhǗ4*qvZͩ IGj.U]ȁ+,O!10\?w3ɇP Qo |_rOE+2dgAeBRD窷-k{cdqg`|OvH1 O6 ?3a4P㫠ĄZ++_Ly`38ɧM*&pJmi"P[אn?ChVXf:_Omו32?f%WyM͎+KtlYdJ|ݑ|T[ hB#R[@1nZ(옟[򾩏MkޙfqWf5i v͈+n^TC ЛcP6b92?aIK*19tX%J-Ɇ/c SC9@|"g'ft(m& @8P$cIX$;$|/`z Y~C ~%w?oJri )*K;_c^74]յ@s%`(CyBsz!ͣߟWC voZU?AIg]{ 0a5e'WRu>Qzs>0K 1j8SW6xˍ\j[>o%&~D7Qv($' YD#+Sa=i% XGP(v%a^kdK; },dnmLw$d Sl-?|8ƘƆml (LUxރeLNYJF>U8P3&&ln\<>`93H.L=GLw/%MN-D#J9ǀ) >啖G)UѶͫ1cKbP͂6TY ^5e)T`:rGDWVՃַɐ{$^,_} ʆ' 7v  w (ؘϧFoqeҜ!{Vsp@0OT/sqɧ`! S `~'G7i%׉*õe1D"OO/I8?O\Ȓ;eqv"0yVޖexm YGjLÐ$;>a\Q10칐 A8,GF>| iC<`E9aKr5x/#vռ:+Tsб6 .Ax; j pW~Zpv7ם!V!\MtO1qk|]65&oJC(YpL\ ?V1YCp.Ok@?WHm5졜& }U.t(k* 7Gb΅$Ji)1iw^@&xa+;QA8B.jܨіɴˍ(u1yS5p'ڔw%J7r{n*]п \t2㣴]lPIoIP$f"utkK!Ȍ2I4 djyr7 "-:Fŵ}:{Dtf/g[}+ Ͽ0u Ih~ _o J,V@3y`E _5G`aBuɟFK;vM:oe ;ޫYW8FţM3_w.CHuB+q(h:Q\@{+-yj (Ő]4,{5)zn Ce HԩU%'9w 3e{Vugo:@|Hf8ԍ㵊q 'Y섑opbG; S[Ҏa4$f~ AqGxnq%TVIs\ BSM%S/O2F4qEw9HCYBKՋ~ 9{O_>ҴӝPO:gUc$Qv#p;{Kgҁj)R Z1r@Y 2Mo7"9`hJȓDRRV)缙)BQ}ǻ#^ĺ@աì[v_O 4^W ؂|#(ȯcrP[ lU03B?bCݮ!}@h҃ɑx/dFu&_20:횑ZLNi)OsH+8kMJ"OJ\ GֱzX~mx! *c }N0rVFL1hߜǠ9]t"jYT}Ā7y*'٦F( OEMwmt[/}L1eD4O1cմFBDsҝFg p"s wCPS+7,MpmMcb\ؒustmq V2Bm8d]?`ЛL3,n2~@u2kC,q$;(f|P<FߧJg{vH"5^n;0t,:OTMK&(6;&L5ҹpQ`+Sk)=l4x΃$cdÿIߩh+V m; 02Mұ`Н)tQ;XOrR {AY*2ĭ9c:Pz6Xg$i[s_gŰIݯ$}r2zOl0߉K̙Xk>Zt Oӧ홞Y!sMeuJG=e{fԹﲳ9c0m0u1?}Sc7`v"=I5p)$u7tp$7Ehz8AX|lYqb K!ke=ìx.08v.](GV%p6Vg7SG~ ^Y4b+厌V03ex£ o\NDO7덥/%7WUV^}Ҝv}+~OvʴcBd5() gl4Юreq@~Fb-eecgZZ#Y`g'm!S7C8:m2r 9F].8@^Ym#COls!* 7'Fwvfo2ZovAE@|x8K͡a%ڡ?@qg{ .3d)'w23v B塭fq4 q|2$x”5L *8H[;Kq" e:t7#{1 ihGΔ@»IGL]u)ݲz+Ho\ch.rpL>#vGsVvZUn,jmOwB6Ok !:Av\Q5=,|Aq|t+=IK%AWMfJҥwkB()#v+{c x w?%_\VԌ]#$Iq1yU1:'d1yBi9,ުr,z<:T; #/Lզf+[4/,i3-DЮ/iM%#&m97"΅Ctlb/ʅa]>*P9Uã\vyN R,ˇ6r\zE U>Лn ozĉH!YPA`R:A@G\C-ʨ>w["e.x /4Gk|Iyۢ{ D:ʮL%ŘԗW/*-9FVY2F.ϦKx'tC"OS'Ġ$]?&V-%N YRZ>j_v ?s pVZN/Iv,KĈ3$}٧AB~:EUcxz1?Sle7%vo}R-J/T퇉ntץ֛PkŒ)DPY\nn#σ dzkj0U Rǎ%Ofk)/_=J*X7F2vuY*h 7 v֞$VoZ@OԒuVL#`&xOjTʏ;V[G;Qv3u/N]-,Ǣ 8`|"īZ_ڮMy3ZMa+(DUΥFT<„O}(N2WKiUac>E:>,?m~JZTps%aj:ZǁQJBe%1c{~*4%;[یjm|Fe-?6 39\O#r'k \";1o`V)VRy8UuٻM)džE.p噥vEBJ+whԾ먬;$QK?O"߽# wهH9Vd&-C>]_GǶ)>Ǟ^E_".}ЗPȾ2z൭ǷϒaiݭbVJ=z49f࣮^4;z0x0]BԣaY|JsQgOƸS/YC)Oo۷Flk>QxAyU4/4- g7V U*ޘq_6+fԞSa{ +,Bz g0uZ:X?Iwc^FuJˠkMa\uAi+arIUcUz%[FBovaRI FjycCބ!}uzβ~PT" ,0fݿ_x_mF0aE&y$!( +c,_=%$FiqeTWuњol0u}(y`dHN){@7Cw 7C5_U)fkʚ?|z='t V,T'a"jIe kT(TK]Hb<ZI]\;Uޔ1U]s=%)yw 3ef,{&)4)MB:/?mDGB7뉼 vev>ҍAC,-hM>?ɍM!=Q:링=] @T7]t<=O$9ܹ }Y?G;KnHu1JҮ+)Zc-9F_m%`Jw Vn+HQ`Լk";vTțFxmbGN=syXndGۯcU4LKLCqo{إ)4Qp;)wZr@+oЄO#fь4urv~G֬Fݵt+oE |Q˜޾NKe>}#ÖZ}P%Bш.嘸UoG=BFhZ!`DиƼr(7:Ř0]sL f8?79ΆR4q`%J[y{A͌9c=z!/7*\"L86($hi.`VKREĞ820?{TJmPC>KڜP!Ze. Mo, Ѝhқ@@l_'o{\ssa!yFVpضV*˧$ %+ݯ=vS iLU2))4m&o#0"Wrg[d1ݔ"ۜL'KkzRI 0azYB?"KLrCc TL+cYCd/5qy ^?2 㭽#T%a7dV q igTas5p̵6@CX]/S&&`ݧ'?NEsX]ԕE?ʪ!:S*lmgxXNaJW`(!A)^R8h7uzYÇOÞWၦL{|j^У6~Vơ*B˫/gWZѓ zcyD߅"Xk]-6wQi.uPe# J׋@j+<ƯB93e`ܬ_@Mw%Rh;wE+`!U')S^Jp.aBk1Q eVm>Az;Z%ΟE{.[u03j?SXEv ]T/`3Fܳ߷1KBqVCRI?]͋8 UDoUC#C|H]|7'dZ='zm;sݘ]o@t8-_=jrN\HtSaFzA}ne_jFsa[ Z :]HicA̠*ey*!VlwRŽ}*8($9#,fq,JQJgoT"% Um󲆈g#W;ư2ns$-#&3yj?+~ ϋS);l ixKzL-‰vrC:G|=iksaP4%z|}B@H @ n$湱] 29 n;ؚmRKak-d*c.cQ8~Bxa@sg<.q>ݕq%d> &QəJGf׎wbG˒B_xQ֕]S ȩѓQƈ) !.սb$Fr5W':>xW?,}-NrhXrfQG16G68c.@Ex،j7]4C4hEzp)ÊLAc-Б$ )Vv}i=KAԋ*6LhƯSvL*"7黥uz{2Vjho;%Wd^~Ɗ-ʥdLȣɲܾĮ lȚİRQ0ySQa~kjc3 X?rB+;/0 )) ZGa'ikmI8{8~&+>zuZ D;~{aX31% _j&hCZf%ĩ uQ$Ĝ*.Cc齃fmGt:dP*UWY`ZY]aTY(GLnLJ>ThBbUZ:lءVϝ c whBq4t!+{/ ^YuIvF%A4x痹8E娒u%ʍ]pY&<$lv HTLVd]B:"@P)ʕWjX̝is_ *nN_OK,2cj}dmh&^t@)2ƘѰ5:wUv}@?3VaIJilŰ=cLX>+i7sE8xNE!k*1"?":QNM- WBmPA(MPN}kW>KjB@[]/@i&Np.oLWWbIl5G7&낛ɔ;B?&%KУgyoX!Saa$( B5A usf2u'!Zh⇾:rUC _C!7Zwط6(e0OQ-3·0fX(!j5=n'*f!}QA_B5౥D*:\⺺qxi-i[mQ_~+jM LFs &mS_6lj!c9ʮ~"YH/k pLG"9vD1?JZMO{GhA |BOJ@Te}i9 MQXaQQQI(D hߜ̒(Uä=@ӷ~+i5n&YX&o!CՌmSO5ox*QI bOmr] )VGHk;0 j.ānAg b4 ۈhVNC 3/+&Ď?FB"M;sLDp%Y@]@q2J/pg\R!5jbXW*1?4<2=+aZ);qVyRP 0U:; *@yd,# )4 fLq/ hhu1a i!ءg?Ɛ$1u}xD4}˜m<:0a)]㏆ bZ8t,#=F8̧'r=4~u852#@%;o`v0bƒ4ֵHS'CwzhgzlES}[-d:@n6/%al(Ѣ|>wSphl^X/~SmXͷpR;_jX,ߜZbbG7ˈWC w@Th g_K- seyH3%:^;l@Qqإ&xx#jtmdBs@+UqPq9,Wlc tCTc>%DU.M:j<N)E*41P<*d:kyMy)|Os{/j- \n} x@~, ^Y#Iqw0(fhb !-Ko3qHa;C͆+ R {AʙC^.j<-[`WYR6%kwpQ~.=ތFqTlf2 |!0GJEnKf!UM˯ů%);P(J V% ^µrwtn ] 'SM\ey= vaiXV,^W9mS^pk0joNR1I!O_TߟZEsT<7H59@Oi#⿼Ҁ}>yD(l0c YZ