rsyslog-8.2406.0-150600.12.6.2<>,jtfp9|ɸ.d`xA텐%f ^̄NqdOk.m$.rXr 6(i/fc@,kob 8^Xd-)'p/s*-"5s/ݙ8Yb@$:>#jaZf5Zr^+ ˶}|妚8 Wt >l O]7 &EG G3F${ tA&^3<`VtxP>T_ ?_d  ! I  9Zz 4tNN tN N  HN 0N 1@N2xN3N55N67$171Q:D@Q=0 >0?0@0!B0)F0BG0XNH1NI2NX3Y3,Z3t[3x\3N]4N^8b:Cc:d;ne;sf;vl;xu;Nv<8wWNxYNyZHz^<^L^~^^^^^^^^^_ Crsyslog8.2406.0150600.12.6.2The enhanced syslogd for Linux and UnixRsyslog is an enhanced multi-threaded syslogd supporting, among others, MySQL, syslog/tcp, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is quite compatible to stock sysklogd and can be used as a drop-in replacement. Its advanced features make it suitable for enterprise-class, encryption protected syslog relay chains while at the same time being very easy to setup for the novice user.fh04-ch1a)#SUSE Linux Enterprise 15SUSE LLC Apache-2.0 AND GPL-3.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.rsyslog.com/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in rsyslog.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi# # update linker caches # /sbin/ldconfig # # remove obsolete variables # PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in SYSLOG_DAEMON SYSLOG_REQUIRES_NETWORK ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in RSYSLOGD_COMPAT_VERSION RSYSLOGD_NATIVE_VERSION ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done # # add RSYSLOGD_* variables # PNAME=syslog SUBPNAME=-rsyslog SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # # Do not use multiple facilities with the same priority pattern. # It causes start failure since rsyslog-6.4.x (bnc#780607). # # FIXME: it seems to be a valid syntax -> rsyslog bug? # if grep -qs '^local[0246],' etc/rsyslog.conf ; then sed -i -e 's/^local\([0246]\),/local\1.*;/g' etc/rsyslog.conf fi # # create dirs, touch log default files # if [ "$1" = "1" ] ; then # first install mkdir -p var/log touch var/log/messages; chmod 640 var/log/messages touch var/log/mail; chmod 640 var/log/mail touch var/log/mail.info; chmod 640 var/log/mail.info touch var/log/mail.warn; chmod 640 var/log/mail.warn touch var/log/mail.err; chmod 640 var/log/mail.err # # touch the additional log files we are using # touch var/log/acpid; chmod 640 var/log/acpid touch var/log/firewall; chmod 640 var/log/firewall touch var/log/NetworkManager; chmod 640 var/log/NetworkManager # # touch the additional log sockets config file # mkdir -p -m750 "./run/rsyslog" touch "./run/rsyslog/additional-log-sockets.conf" chmod 640 "./run/rsyslog/additional-log-sockets.conf" fi # first install # # Enable the rsyslogservice to be started by systemd # # This macro enables based on a systemctl preset config file only if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in rsyslog.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # But we want to enable a syslog-daemon regardless of the preset; # force the creation of a syslog.service alias link (bnc#790805). # We do not check the obsolete SYSLOG_DAEMON variable as we want # to switch when installing it and there is a provider conflict. /usr/bin/systemctl -f enable rsyslog.service >/dev/null 2>&1 || : #restart daemon at the end of the transaction /usr/bin/systemctl set-property "rsyslog.service" Markers=+needs-restart ||:# # stop the rsyslogd daemon when it is running # test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable syslog.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop syslog.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable rsyslog.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop rsyslog.service ) || : fi# # update linker caches # /sbin/ldconfigr)((ߨ]L;LpnXkQr888(8(8Y8H8xh8x8(88(xX8XKXiH(8x88:X+@+x+8+8;++8; p?J#-]A큀A큤A큤AAAA큠A큤A큤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@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrsyslog-8.2406.0-150600.12.6.2.src.rpmconfig(rsyslog)rsyslogrsyslog(x86-64)syslogsysvinit(syslog)@  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(rsyslog)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.12)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libcurl.so.4()(64bit)libestr.so.0()(64bit)libfastjson.so.4()(64bit)liblogging-rfc3195.so.0()(64bit)liblognorm.so.5()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.29)(64bit)librdkafka1libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libsystemd.so.0(LIBSYSTEMD_246)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)syslog-service8.2406.0-150600.12.6.23.0.4-14.6.0-14.0-15.2-12.0otherproviders(syslog)4.14.3fLfͿeoeye#@d@d8cEc@bb@bu b a@`Ȗ@`~@`8`+_j__/@_]@_@_JC@_ ^@^;^]9\~d\o@[H[[[[P}@[3|@[2*Z=Z@Z@Zk@ZaZ)-@Z@Z@Z YY}@Y5GYX-XO@XX@X{d@XN@XD@W@WRWVV@VHVVVV=VUݪ@U@U[%UB@U>$U4@U+U#T@T@TLTG@TBV@thomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comlnussel@suse.dethomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comkukuk@suse.comrjschwei@suse.comrtyler@brokenco.dethomas.blume@suse.commatthias.gerstner@suse.comdimstar@opensuse.orgThomas.Blume@suse.comegotthold@suse.comThomas.Blume@suse.comkukuk@suse.demichael@stroeder.comThomas.Blume@suse.comastieger@suse.comThomas.Blume@suse.comastieger@suse.comkukuk@suse.deThomas.Blume@suse.comastieger@suse.comrgerhards@adiscon.comkukuk@suse.derbrown@suse.comastieger@suse.comastieger@suse.comastieger@suse.commichael@stroeder.comtchvatal@suse.comdziolkowski@suse.comastieger@suse.comastieger@suse.comastieger@suse.comndas@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.commrueckert@suse.deastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comjengelh@inai.dejsegitz@novell.comjsegitz@novell.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comandreas.stieger@gmx.deheinemannj66@gmail.comledest@gmail.com- restart daemon after update at the end of the transaction (bsc#1230984)- Upgrade to rsyslog 8.2406.0 -patches replaced by upgrade (see details in upgrade logs below) 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch * 2023-11-29: Revert "Update omlibdbi.c" * 2023-11-21: imkmsg: add params "readMode" and "expectedBootCompleteSeconds" * 2023-11-10: testbench: fix "typo" in test case * 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures * 2023-10-31: imkmsg: add module param parseKernelTimestamp * 2023-11-03: imfile: remove state file on file delete fix * 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work * 2023-10-30: Netstreamdriver: deallocate certificate related resources * 2023-10-20: TLS subsystem: add remote hostname to error reporting * 2023-10-21: Fix forking issue do to close_range call * 2023-10-23: replace debian sample systemd service file by readme * 2023-10-20: testbench: bump zookeeper version to match current offering * 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie * 2023-10-20: Only keep a single rsyslog.service for Debian * 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch * 2023-10-18: use logind instead of utmp for wall messages with systemd * 2023-10-11: Typo fixes * 2023-10-11: Drop CAP_IPC_LOCK capability * 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module * 2023-10-03: Add new global config option "libcapng.enable" * 2023-10-02: tcp net subsystem: handle data race gracefully * 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler - replaces 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch * 2023-09-26: fix startup issue on modern systemd systems * 2023-09-14: Fix misspeling in message. * 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported * 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set * 2023-08-02: testbench: cleanup and improve some more imfile tests * 2023-08-02: lookup tables: fix static analyzer issue * 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded * 2023-07-28: CI: fix and cleaup github workflow * 2023-03-07: imjournal: Support input module * 2023-07-28: testbench: make test more reliable * 2023-07-28: tcpflood: add -A option to NOT abort when sending fails * 2023-07-28: tcpflood: fix today's programming error * 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method * 2023-07-27: testbench improvement: define state file directories for imfile tests * 2023-07-28: testbench: cleanup a test and some nitfixes to it * 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly * 2023-07-26: testbench: make waiting for HUP processing more reliable * 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured * 2023-07-25: CI: update zookeper download to newer version * 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions * 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years. * 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+ * 2022-05-13: omazureeventhubs: Initial implementation of new output module * 2023-07-03: TLS CRL Support Issue 5081 * 2023-06-29: action.resumeintervalmax: the parameter was not respected * 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0 * 2023-05-15: Add the 'batchsize' parameter to imhiredis * 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167) * 2023-06-22: Do not try to drop capabilities when we don't have any * 2023-06-22: testbench: use newer zookeeper version in tests * 2023-06-22: build system: more precise error message on too-old lib * 2023-05-17: Fix quoting for omprog, improg, mmexternal- suppress installation errors when systemd is not running (bsc#1218799)- restart daemon after modules packages have been updated (bsc#1217292)- fix rsyslog crash in imrelp (bsc#1210286) * add: 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch-patches replaced by upgrade (see details in upgrade logs below) 0001-fixing-the-deleteStateOnFileDelete-option.patch 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch CVE-2022-24903.patch - Upgrade to rsyslog 8.2306.0 (jsc#PED-4883) * 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped * 2023-06-08: Add new global config option "libcapng.default" * 2023-06-08: imjournal: Add FileCreateMode module parameter * 2023-04-17: core bugfix: potential segfault on busy systems * 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred * 2023-05-24: CI: update base ubuntu image for github actions * 2023-05-16: OMHIREDIS::ADDED:: New support for 'stream' mode * 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities * 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure * 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate * 2023-04-25: IMHIREDIS::ADDED:: New support for 'stream' mode * 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module * 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set 'key' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode's value in logs when set incorrectly * 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo * 2023-03-21: modify testbench test to detect wrong imptcp truncation * 2023-03-21: imptcp bugfix: spam log on oversize message * 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown * 2023-03-13: Remove halted LGTM badges on README * 2023-02-16: Do not preserve capabilities when changing credentials * 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset * 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well * 2023-01-18: core/template: implement negative position.to * 2023-01-18: CI: fix github CodeQL settings * 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped * 2023-01-17: Adjust the capability set * 2023-01-13: substring function: enhancement and hardening * 2023-01-11: omfile: add action parameters "rotation.*" * 2023-01-11: CI: use newer version of zookeeper * 2023-01-09: ffaup fix : memory corruption with concurrent workers * 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback * 2022-12-30: testbench: add test for invalid json template generation * 2022-12-30: core bugfix: template system may generate invalid json * 2022-12-28: Fixed wrong type conversion in cstrLen() * 2022-12-08: Add CodeQL workflow for GitHub code scanning - Upgrade to rsyslog 8.2212.0 * 2022-12-05: testbench: make python http server based tests more reliable * 2022-12-05: omprog bugfix: invalid status handling at called program startup * 2022-11-29: testbench bugfix: wrong message injection object of instance 1 * 2022-11-21: rsyslog.conf man page bugfix: description of selectors * 2022-11-18: imtcp bugfix: legacy config directives did no longer work - replaces 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch * 2022-11-16: ksi bugfix: sending of too many signing requests fixed. * 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode * 2022-11-02: imjournal: add second fallback to _COMM * 2022-10-25: core bugfix: local hostname invalid if no global() config object given * 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure - Upgrade to rsyslog 8.2208.0 * 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed. * 2022-08-09: imjournal bugfix: segmentation fault in close journal * 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode="x509/fingerprint" * 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated * 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays. * 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened. * 2022-08-04: openssl: add support to split tls commands by semicolon * 2022-08-04: openssl subsystem bugfix: build issue on Solaris * 2022-08-04: openssl: add more details to error messages * 2022-08-04: omclickhouse: capture additional exceptions * 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection. * 2022-07-21: imptcp: slight tuning * 2022-07-20: template procesing/json: performance optimization * 2022-07-19: core bugfix: memory leak when free action worker data table * 2022-07-13: omfile: support for zstd compression * 2022-07-07: stream cleanup: move error message to debug log, only * 2022-07-04: mmdblookup bugfix: Don't crash Rsyslog on mmdb file errors * 2022-06-28: build error fix: libbson requires out-of-date language constructs * 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x - Upgrade to rsyslog 8.2206.0 * 2022-05-25: omelastisearch: allow omitting _type field * 2022-05-18: tcpsrv/imtcp: slight performance improvements * 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic * 2022-05-11: omelasticsearch: several support option for ElasticSearch 8 - config params searchIndex and documentType can be empty - support for Data Stream API - new config param esVersion.major * 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions * 2022-05-05: net bugfix: potential buffer overrun - replaces CVE-2022-24903.patch Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243 * 2022-05-05: imptcp: set OS worker thread name * 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized * 2022-04-22: mmdblookup fix: wrong copy of buffer * 2022-04-22: mmdblookup: several enhancements - support arrays in MMDB entry - support escaped quotes '"' in MMDB entry - support '<' characters in MMDB entry, when in a field - support '}' characters in MMDB entry, when in a field - Upgrade to rsyslog 8.2204.0 * 2022-04-18: gnutls bugfix: possibility of infinite loop * 2022-04-17: core/bugfix: errorfile could grow over max configures size * 2022-04-17: omkafka bugfix: potential misadressing * 2022-04-06: added new "FullJSONFmt" standard template (with addtl fields) * 2022-04-04: imfile: potential processing delay * 2022-04-04: bugfix: cosmetic data races * 2022-04-01: add property options to support ISO week/year number * 2022-04-01: core bugfix: "action suspended" message was emitted even when turned off * 2022-03-31: testbench: add more tests for rscript comparison operations * 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker * 2022-03-20: refactor: Move the parser directive to the main config * 2022-03-16: refactor: ake the main message queue part of the config * regression bugfix: rsyslog may segfault during startup * regression fix: script string comparison did not work correctly - Upgrade to rsyslog 8.2202.0 * 2022-02-11: Make action counter part of the config * 2022-02-09: imfile: Remove inotify watch descriptor on inode change detected - replaces 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch * 2022-02-03: omelasticsearch: Fix indexSuccess impstats counter in bulkmode * 2022-01-28: rscript: literal numbers were not compared correctly * 2022-01-17: ompgsql: PGsslInUse not supported on old distros * 2021-12-31: ompgsql: allow connection params via connection string * 2022-01-17: CI: remove fedora 33 based testing * 2022-01-14: Terminate all tcpsrv threads properly * 2022-01-04: Move timezone specific variables to rsconf * 2022-01-13: Fixes #4395 by correctly checking for EPIPE. * 2022-01-12: Move rsyslog global parameters to rsconf_t struct * 2022-01-12: cleanup: remove unused variable * 2022-01-07: CI: cleanup journal test environment * 2022-01-06: CI: remove unnecessary dependency * 2022-01-05: Update omlibdbi.c * 2022-01-05: omhttp: Fix memory leak in lokirest batchmode * 2021-12-15: Clarify meaning of loadConf and RunConf - Upgrade to rsyslog 8.2112.0 * 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor * 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime * 2021-11-22: new contribtion: URL parser module function using libfa * 2021-11-18: mmanon: relax IPv6 detection - improve anonymization * 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named * 2021-11-10: omsnmp: update module to current IP best practices * 2021-10-27: ommysql: fix threading bug * 2021-10-25: testbench: false positive when impstats was not built * 2021-10-25: imtcp: add support for permittedPeers setting at input() level * 2021-10-25: testbench: add test for legacy permittedPeer statement - replaces 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch - Upgrade to rsyslog 8.2110.0: * 2021-10-13: PrivDropToUser: fix abortOnIDResolutionFail handling #2 * 2021-10-12: PrivDropToUser: fix abortOnIDResolutionFail handling * 2021-09-17: rscript fix: ruleset called async when ruleset had queue.type="direct" * 2021-10-07: tcpsrv: fix compilation without exceptions * 2021-09-29: build issue: handle undefined MAXPATHLEN, PATH_MAX * 2021-10-06: Fix typo in error message. * 2021-09-21: mmkubernetes bugfix: no connection retry to kubernetes APP * 2021-09-13: use correct api for es 6 and later * 2021-09-20: openssl: Correct gnutlsPriorityString (custom ciphers) behaviour * 2021-09-20: ksi bugfix: locking bug fixed in rsksiCtxOpenFile * 2021-09-13: Fix ElasticSearch Test broken by ES incompatibility * 2020-11-21: imhttp updates - query parameter ingestion & basic auth support * 2021-09-08: openssl: extended output information on connection failure * 2021-09-02: queue: Add NULL check in qDeqLinkedList - replaces 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch * 2021-09-06: core bugfix: use of property $wday terminates string * 2021-09-02: gnutls: Propagate PrioritizeSAN when accepting a new connection * 2021-08-24: ratelimit: fix rate limiting for already parsed messages * 2021-08-23: config: implement script-equavalent for $PrivDrop* statements - Upgrade to rsyslog 8.2108.0: * 2021-08-16: openssl tls: Improved error message output on tls failures. * 2021-07-01: imfile add `ignoreolderthanoption` * 2021-08-10: imklog: fix invalid memory adressing, could cause abort * 2021-08-09: omelasticsearch: fix incorrect mutex error handling regression * 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 * 2021-08-08: imudp: add socket type (IPv4 vs. 6) to input name * 2021-07-13: fixing the deleteStateOnFileDelete option - replaces 0001-fixing-the-deleteStateOnFileDelete-option.patch * 2021-07-07: CI: add test for imtcp not correctly starting up and a Solaris fix * 2021-08-05: omfwd: add capability for action-specific TLS certificate settings * 2021-07-01: imtcp: permit to use different certificate files per input/action * 2021-08-04: debug support: add indication of "being HUPed" to debug log * 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set * 2021-07-22: Close file descriptor when freshStartTail is turned on * 2021-07-22: [omelasticsearch] Improve errorFile mutex handling * 2021-07-08: openssl network driver bugfix: small memory leak * 2021-07-07: tcpsrv bugfix: abort if no listener could be started * 2021-07-01: tcp subsystem: fix cosmetic memory leak on shutdown * 2021-07-01: fix typo in error message * 2021-06-30: OMMONGODB :: Fixes * 2021-06-29: mmkubernetes fix for apiserver error handling * 2021-06-21: omkafka updates * 2021-06-22: percentile module to track percentile metrics via impstats * 2021-06-17: CI: disable Travis CI for the time being * 2021-04-15: omhttp: Fix dynrestpath param in batch mode * 2021-06-14: add predefined template RSYSLOG_SyslogRFC5424Format * 2021-06-10: bugfix: _sender_stats reports integer counter as string- fix removal of imfile state files (bsc#1213212) * add 0001-fixing-the-deleteStateOnFileDelete-option.patch- fix parsing of legacy config syntax (bsc#1205275) * add: 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833) * this legacy setting from pre-systemd times is obsolete and can block important systemd messages- fix segfault in qDeqLinkedList during shutdown (bsc#1199283) * add 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch- Remove inotify watch descriptor in imfile on inode change detected (bsc#1198939) * add 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch- (CVE-2022-24903) fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) * add CVE-2022-24903.patch- add service dependencies for remote logging (bsc#1194669) - update config example in remote.conf to match upstream documentation- fix config parameters in specfile (bsc#1194593)- Upgrade to rsyslog 8.2106.0: * NOTE: the prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step. * 2021-06-14: new global option "parser.supportCompressionExtension" This permits to turn off rsyslog's single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598 * 2021-05-12: imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification. * 2021-05-06: imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. closes https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-29: imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. see also: https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules. * 2021-04-22: refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future. * 2021-04-22: config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. closes https://github.com/rsyslog/rsyslog/issues/4429- Upgrade to rsyslog 8.2104.0: * rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490) * new contributed module imhiredis * new built-in function get_property() to access property vars * mmdblookup: add support for mmdb DB reload on HUP * script bugfix: empty array in foreach() improperly handled * imjournal bugfixes (handle leak, empty file) * new contributed function module fmunflatten * test bugfix: some tests did not work with newer TLS library versions * some improvements to project CI- update remote.conf example file to new 'Address' and 'Port' notation (bsc#1182653)- HTTPS URLs used for source - Upgrade to rsyslog 8.2102.0: * omfwd: add stats counter for sent bytes * omfwd: add error reporting configuration option * action stats counter bugfix: failure count was not properly incremented * action stats counter bugfix: resume count was not incremented * omfwd bugfix: segfault or error if port not given * lookup table bugfix: data race on lookup table reload * testbench modernization * testbench: fix invalid sequence of kafka tests runs * testbench: fix kafkacat issues * testbench: fix year-dependendt clickhouse test- Upgrade to rsyslog 8.2012.0: * testbench bugfix: some tests did not work in make distcheck * immark: rewrite with many improvements * usability: re-phrase error message to help users better understand cause * add new system property $now-unixtimestamp * omfwd: add new rate limit option * omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default- prepare usrmerge (boo#1029961)- fix location and naming of journald dropin (bsc#1178288)- remove legacy stuff from specfile * sysvinit is not supported anymore, so remove all tests related to systemv in the specfile- Upgrade to rsyslog 8.2010.0: * gnutls TLS subsystem bugfix: handshake error handling * core/msg bugfix: memory leak * core/msg bugfix: segfault in jsonPathFindNext() when not an object * openssl TLS subsystem: improvments of error and status messages * add 'exists()' script function to check if variable exists * core bugfix: do not create empty JSON objects on non-existent key access * gnutls subsysem bugfix: potential hang on session closure * core/network bugfix: obey net.enableDNS=off when querying local hostname * core bugfix: potential segfault on query of PROGRAMNAME property * imtcp bugfix: broken connection not necessariy detected * new module: imhttp - http input * mmdarwin bugfix: potential zero uuid when reusing existing one * imdocker bugfix: build issue on some platforms * omudpspoof bugfix: make compatbile with Solaris build * testbench fix: python 3 incompatibility * core bugfix: segfault if disk-queue file cannot be created * cosmetic: fix dummy module name in debug output * config bugfix: intended warning emitted as error- Upgrade to rsyslog 8.2008.0 Way too many changes since 8.39.0 to be listed here. - Added custom unit file rsyslog.service because systemd service file was removed from upstream project - Removed obsolete patches: * 0001-satisfy-gcc-flag-fno-common.patch * rsyslog-pgsql-pkg-config.patch * rsyslog-unit.patch- Use systemd_ordering instead of requiring to make rsyslog useable in containers.- Fix the URL for bug reporting, should not point to novell.com (bsc#1173433)- Add support for omkafka which is now in Factory, and 15.x repos- avoid build error with gcc flag -fno-common (bsc#1160414) * add 0001-satisfy-gcc-flag-fno-common.patch- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the right libraries/directories for postgresql. According to pgsql upstream, pg_config must only be used to buildpgsql modules.- set default permissions before include directives (bsc#1126233) * Logfile open modes depend on position in the config file, see https://www.rsyslog.com/doc/rsconf1_filecreatemode.html- Upgrade to rsyslog 8.39.0 * imfile: improve truncation detection * imjournal: work around journald excessive reloading behavior * errmsg: remove no longer needed code * queue bugfix: invalid error message on queue startup * bugfix imrelp: regression with legacy configuration startup fail * bugfix imudp: stall of connection and/or potential segfault * bugfix gcry crypto driver: small memleak * fix potential misadressing in encryption subsystem * ksi subsystem changes * bugfix core: regex compile error messages could be incorrect * bugfix core: potential hang on rsyslog termination * bugfix imkafka: system hang when backgrounded * bugfix imfile: file change was not reliably detected * bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr * bugfix queue subsystem: DA queue did ignore encryption settings * bugfix KSI: lmsig-ksils12 module skips signing the last block * bugfix fmhash: function hash64mod sometimes returned wrong result * bugfix core/debug: data written to random fd 2 under some debug settings- rsyslog configuration cleanup by filter rules in separate files (bug#1102720) * add parsing of additional filter rules in /etc/rsyslog.d/*.frule * add acpid.frule, firewall.frule, NetworkManager.frule- Enable ForwardToSyslog for journald to get syslog messages [bsc#1110456]- Update to rsyslog 8.38.0: * imfile: support for endmsg.regex * omhttp: new contribued module * imrelp: add support for seting address to bind to (#894) * ommysql: support mysql unix domain socket * omusrmsg: do not fall back to max username length of 8 * various bug fixes and minor updates to other modules and core * various fixes for memory leaks- remove references to obsolete SYSLOG_REQUIRES_NETWORK variable (bsc#1101642)- rsyslog 8.36.0: * Liblogging-stdlog deprecated * OpenSSL based TLS driver added in addition to GnuTLS * GnuTLS TLS driver: support intermediate certificates * imptcp: add ability to configure socket backlog * fmhash: new hash function module * updates and fixes to various modules * omfwd: add support for bind-to-address for UDP * mmkubernetes: new module - updates and fixes to various modules- fix CVE-2015-3243 rsyslog: some log files are created world-readable (bsc#935393)- rsyslog 8.33.1: * devcontainer: use some more sensible defaults * auto-detect if running inside a container (as pid 1) * config: add include() script object * template: add option to generate json "container" * core/template: add format jsonf to constant template entries * config: add ability to disable config parameter ("config.enable") * script: permit to use environment variables during configuration * new global config parameter "shutdown.enable.ctlc" * config optimizer: detect totally empty "if" statements and optimize them out * template: constant entry can now also be formatted as json field * omstdout: support for new-style configuration parameters added * core: set TZ on startup if not already set * imjournal bugfix: file handle leak during journal rotation * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected * script bugfix: replace() function worked incorrectly in some cases * core bugfix: misadressing in external command parser * core bugfix: small memory leak in external command parser * core bugfix: string not properly terminated when RFC5424 MSGID is used * bugfix: strndup() compatibility layer func copies too much - the upstream systemd unit file was changed to no longer write the rsyslog pid, as it is no longer required for tracking under systemd (-iNONE). Adjust rsyslog-unit.patch to match.- Use %license instead of %doc [bsc#1082318]- fix includes for apparmor profile (bsc#1080238)- rsyslog 8.32.0 * libfastjson 0.99.8 required * libczmq >= 3.0.2 is now required for omczmq * libcurl is now needed for rsyslog core * rsyslogd: add capability to specify that no pid file shall be written * core improvements and bug fixes * RainerScript improvements and bug fixes * build fixes, including gcc7 fixes drop 0001-imgssapi-fix-compiler-warnings.patch * various bug fixes in multiple modules- remove build dependency on libee- Disable news by default, we don't need to clobber all systems with this for the very few remaining news servers- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Ensure user "news" exists - bsc#1068678- rsyslog 8.30.0 * changed behaviour: all variables are now case-insensitive by default * core: handle (JSON) variables in case-insensitive way * imjournal: made switching to persistent journal in runtime possible * mmanon: complete refactor and enhancements * imfile: add "fileoffset" metadata * RainerScript: add ltrim and rtrim functions * core: report module name when suspending action * core: add ability to limit number of error messages going to stderr * tcpsrv subsystem: improvate clarity of some error messages * imptcp: include module name in error msg * imtcp: include module name in error msg * tls improvement: better error message if certificate file cannot be read * omfwd: slightly improved error messages during config parsing * ommysql improvements * ommysql bugfix: do not duplicate entries on failed transaction * imtcp bugfix: parameter priorityString was ignored * template/bugfix: invalid template option conflict detection * core/actions: fix handling of data-induced errors * core/action bugfix: no "action suspended" message during retry processing * core/ratelimit bugfix: race can lead to segfault * core bugfix: rsyslog aborts if errmsg is generated in early startup * core bugfix: informational messages was logged with error severity * core bugfix: --enable-debugless build was broken * queue bugfix: file write error message was incorrect * omrelp bugfix: segfault when rebindinterval parameter is used * omkafka bugfix: invalid load of failedmsg file on startup if disabled * kafka bugfix: problem on invalid kafka configuration values * imudp bugfix: UDP oversize message not properly handled * core bugfix: memory corruption during configuration parsing * core bugfix: race on worker thread termination during shutdown * omelasticsearch: avoid ES5 warnings while sending json in bulkmode * omelasticsearch bugfix: incompatibility with newer ElasticSearch version * imptcp bugfix: invalid mutex addressing on some platforms * imptcp bugfix: do not accept missing port in legacy listener definition - build requirements: * libfastjson 0.99.7 is now mandatory * libsystemd-journal >= 234 is now recommended - packaging: * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch- rsyslog 8.29.0: * imptcp: add experimental parameter "multiline" * imptcp: framing-related error messages now also indicate remote peer * imtcp: framing-related error messages now also indicate remote peer * imptcp: add session statistics conunter * imtcp: add ability to specify GnuTLS priority string * impstats: add new ressoure counter "openfiles" * pmnormalize: new parser module * core/queue: provide informational messages on thread startup and shutdown * omfwd/udp: improve error reporting, depricate maxerrormessages parameter * core: add parameters debug.file and debug.whitelist * core/net.c: improve UDP socket creation error messages * omfwd/udp: add "udp.sendbuf" parameter * core: make rsyslog internal message rate-limiter configurable * omelasticsearch bugfixes and changed ES5 API support + avoid 404 during health check + avoid ES5 warnings while sending json + bugfix for memomry leak while writing error file * imfile bugfix: wildcard detection issue on path wildcards * omfwd bugfix: always give reason for suspension * omfwd bugfix: configured compression level was not properly used * imptcp bugfix: potential socket leak on session shutdown * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode * imklog: fix permitnonkernelfacility not working * impstats bugfix: impstats does not handle HUP * core bugfix: segfault after configuration errors * core/queue bugfixes * lmsig_ksi: removed pre-KSI_LS12 componentsVersion 8.28.0 [v8-stable] 2017-06-27 * omfwd: add parameter "tcp_frameDelimiter" * omkafka: large refactor of kafka subsystem * imfile: improved handling of atomically renamed file (w/ wildcards) * imfile: add capability to truncate oversize messages or split into multiple * mmdblookup fixes and extensions * bugfix: fixed multiple memory leaks * imptcp: add new parameter "flowControl" * imrelp: add "maxDataSize" config parameter * multiple modules: gtls: improve error if certificate file can't be opened * omsnare: allow different tab escapes * omelasticsearch: converted to use libfastjson instead of json-c * imjournal: _PID fallback * added fallback for _PID proprety when SYSLOG_PID is not available * introduced new option "usepid" which sets which property should rsyslog use, it has 3 states system|syslog|both, default is both * deprecated "usepidfromsystem" option, still can be used and override the "usepid" * it is possible to revert previous default with usepid="syslog" * multiple modules: add better error messages when regcomp is failing * omhiredis: fix build warnings * imfile bugfix: files mv-ed in into directory were not handled * omprog bugfix: execve() incorrectly called * imfile bugfix: multiline timeout did not work if state file exists * lmsig_ksi-ls12 bugfix: build problems on some platforms * core bugfix: invalid object type assertion * regression fix: local hostname was not always detected properly... * bugfix: format security issues in zmq3 modules (bsc#1051798) * bugfix build system: add libksi only to those binaries that need it * bugfix KSI ls12 components: invalid tree height calculation- Drop module-guardtime package * Upstream libgt died and it does not work with new opensslVersion 8.27.0 [v8-stable] 2017-05-16 - imkafka: add module - imptcp enhancements: * optionally emit an error message if incoming messages are truncated * optionally emit connection tracking message (on connection create and close) * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * improve octect-counted mode detection: if the octet count is larger then the set frame size (or overly large in general), it is now assumed that octet-stuffing mode is used. This probably solves a number of issues seen in real deployments. - imtcp enhancements: * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode - imfile bugfix: "file not found error" repeatedly being reported for configured non-existing file. In polling mode, this message appeared once in each polling cycle, causing a potentially very large amout of error messages. Note that they were usually emitted too infrequently to trigger the error message rate limiter, albeit often enough to be a major annoance. - imfile: in inotify mode, add error message if configured file cannot be found - imfile: add parameter "fileNotFoundError" to optinally disable "file not found" error messages - core: replaced gethostbyname() with getaddrinfo() call Gethostbyname() is generally considered obsolete, is not reentrant and cannot really work with IPv6. Changed the only place in rsyslog where this call remained. Thanks to github user jvymazal for the patch - omkafka: add "origin" field to stats output See also https://github.com/rsyslog/rsyslog/issues/1508 Thanks to Yury Bushmelev for providing the patch. - imuxsock: rate-limiting also uses process name both for the actual limit procesing as well as warning messages emitted see also https://github.com/rsyslog/rsyslog/pull/1520 Thanks to github user jvymazal for the patch - Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12) - rsylsog base functionality now builds on osx (Mac) Thanks to github user hdatma for his help in getting this done. - build now works on solaris again - imfile: fix cross-platform build issue see also https://github.com/rsyslog/rsyslog/issues/1494 Thanks to Felix Janda for bug report and solution suggestion. - bugfix core: segfault when no parser could parse message- rsyslog 8.26.0: * liblognorm 2.0.3 is required for mmnormalize * enable internal error messages at all times * core: added logging name of source of rate-limited messages * omfwd: omfwd: add support for network namespaces * imrelp: honor input name if provided when submitting to impstats * imptcp: add ability to set owner/group/access perms for uds * mmnormalize: add ability to load a rulebase from action() parameter * pmrfc3164 improvements + permit to ignore leading space in MSG + permit to use at-sign in host names + permit to require tag to end in colon * add new global parameter "umask" * core: make use of -T command line option more secure * omfile: add error if both file and dynafile are set * bugfix: build problem on MacOS (not a supported platform) * regression fix: in 8.25, str2num() returned error on empty string * bugfix omsnmp: improper handling of new-style configuration parameters * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages * bugfix imfile: wrong files were monitored when using multiple imfile inputs * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults * bugfix: immark emitted error messages with text "imuxsock" * bugfix tcpflood: build failed if RELP was disabled * fix gcc6 compiler warnings * the output module array passing interface has been removed- use 8.25.0 documentation tarball- rsyslog 8.25.0: * imfile: add support for wildcards in directory names * add new global option "parser.PermitSlashInProgramname" * mmdblookup: fix build issues, code cleanup * improved debug output for queue corruption cases * an error message is now displayed when a directory owner cannot be set * rainerscript: add new function ipv42num * rainerscript: add new function num2ipv4 * bugfix: ratelimiter does not work correctly is time is set back * core: fix potential message loss in old-style transactional interface * bugfix queue subsystem: queue corrupted if certain msg props are used * bugfix imjournal: fixed situation when time goes backwards * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer * bugfix core: str2num mishandling empty strings * bugfix rainerscript: set/unset statement do not check variable name validity * bugfix mmrm1stspace: last character of rawmsg property was doubled * bugfix imtcp: fix very small (cosmetic) memory leak * However, the leak breaks memleak checks in the testbench.- sync bug and fate numbers from IBS changes.- rsyslog 8.24.0(fate#320546): * mmrm1stspace: new module; removes first space in MSG if present * KSI signature provider: file permissions can now be specified * omzmq: new features * when the hostname is empty, we now use "localhost-empty-hostname" * omelasticsearch: remove "asyncrepl" config parameter * omfwd: Add support for bind-to-device (see below on same for imudp) * imudp: Add support for bind-to-device * imudp: limit rcvbufsize parameter to max 1GiB * rainerscript: implement new "call_indirect" statement * bugfix imjournal: make state file handling more robust * bugfix core: lookup table reload was not properly integrated * bugfix core: potential dealock on shutdown * bugfix ommongodb: did not work in v8 due to invalid indirection * bugfix ommongodb: fix tryResume handling * bugfix omfwd: retry processing was not done correctly, could stall * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on - contributed modules not enabled due to build issues: * mmdblookup: new maxminddb lookup message modify plugin- Replace pkgconfig(libsystemd-journal) BuildRequires with pkgconfig(libsystemd): the sub-libraries have been merged into libsystemd since 209 and have ultimately been removed since 230.- rsyslog 8.23.0: * requiring libfastjson 0.99.3 * KSI signatures: removed SHA2-224 hash algorithm * imfile: new timeout feature for multi-line reads * omfile: improve robustness against network file system failures * pmaixforwardedfrom: support for AIX syslogd -s option * omelasticsearch: add ability to specify max http request size * omelasticsearch: high availability addressing of ElasticSearch cluster * omelasticsearch: make compatible with ElasticSearch 2.x and 5.x * omhiredis: add dynakey attribute. * omtcl: new contributed module * RainerScript: provide a capability to set environment variables * lookup tables: improved error checking * queue subsystem: add configuration parameter "queue.samplinginterval" * various bug fixes * rsgtutil: option to specify KSI publications file certificate constraints - includes changes from 8.22.0: * ompgsql: add template support * generate somewhat better error message on config file syntax error - includes changes from 8.21.0: * CHANGE OF BEHAVIOUR: by default, internal messages are no longer logged via the internal bridge to rsyslog but via the syslog() API call [either directly or via liblogging). For the typical single-rsyslogd-instance installation this is mostly unnoticable (except for some additional latency). If multiple instances are run, only the "main" (the one processing system log messages) will see all messages. To return to the old behaviour, do either of those two: 1) add in rsyslog.conf: global(processInternalMessages="on") 2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1 This will set a new default - the value can still be overwritten via rsyslog.conf (method 1). Note that the environment variable must be set in your **startup script**. For more information, please visit http://www.rsyslog.com/rsyslog-error-reporting-improved/ * slightly improved TLS syslog error messages * queue subsystem: improved robustness- rsyslog 8.20.0: * omrelp: add configurable connection timeout * pmrfc3164: add support for slashes in hostname * bugfix omfile: handle chown() failure correctly * omfile now better conveys status of unwritable files back to core * config files recursively including themselfes are now detected * refactored code to not emit compiler warnings in "strict mode" * bugfix: fix some issues with action CommitTransaction() handling * bugfix omqmqp1: connecting to the message bus fails on nonstandard port * testbench/CI enhancements - Build requirements: * librelp 1.2.12- rsyslog 8.19.0: * omelasticsearch: add option to permit unsigned certs * imrelp: better error codes on unvailablity of TLS options * default stack size for inputs has been explicitely set to 4MiB * performance improvements * miscellaneous minor cleanup * fix: potential misadressing in template config processing * bugfix omfile: async output file writing does not respect flushing * bugfix imfile: corrupted multi-line message when state data was persisted * bugfix imfile: missing newline after first line of multiline message * bugfix: dynstats unusedMetricTtl bug * bugfix build system: build was broken on SunOS * bugfix: afterRun entry point not correctly called * bugfix dynstats: do not leak file handles * bugfix omelasticsearch: disable libCURL signal handling * bugfix omelasticsearc: some regressions were fixed * improved wording: gnutls error message points to potential cause- rsyslog 8.18.0(bnc#958728): * templates: add option to convert timestamps to UTC * omjournal: fix segfault (regression in 8.17.0) * imptcp: added AF_UNIX support * new template options * compressSpace * date-utc * redis: support for authentication * omkafka: makes kafka-producer on-HUP restart optional * imfile: new "FreshStartTail" input parameter * omjournal: fix libfastjson API issues * ommongodb: fix json API issues * dynamic stats subsystem: a couple of smaller changes * foreach loop: now also iterates over objects (not just arrays) * enhancement: queue subsystem is more robst in regard to some corruptions * enhancement: Allow rsyslog to bind UDP ports even w/out specific interface being up at the moment. * new External plugin for sending metrics to SPM Monitoring SaaS * bugfix imfile: fix memory corruption bug when appending @cee * bugfix: memory misallocation if position.from and position.to is used a negative amount of memory is tried to be allocated if position.from is smaller than the buffer size (at least with json variables). This usually leads to a segfault. * bugfix: fix potential memleak in TCP allowed sender definition * bugfix: $PrivDropToGroupID actually did a name lookup * bugfix: small memory leak in imfile * bugfix: double free in jsonmesg template * bugfix: incorrect formatting of stats when CEE/Json format is used * bugfix omfwd: new-style keepalive action parameters did not work due to being inconsistently spelled inside the code. Note that legacy parameters $keepalive... always worked * bugfix: memory leaks in logctl utility * bugfix omrelp: fix segfault if no port action parameter was given * bugfix imtcp: Messages not terminated by a NL were discarded- rsyslog 8.17.0: * improve json variable performance * new experimental feature: lookup table suport * new feature: dynamic statistics counters * new contributed plugin: omampq1 for AMQP 1.0-compliant brokers * new set of UTC-based $now family of variables ($now-utc, $year-utc, ...) * simplified locking when accessing message and local variables * new global parameter "debug.unloadModules" * timestamp handling: guard against invalid dates * imfile: add "trimlineoverbytes" input paramter * ommongodb: add support for extended json format for dates * omjournal: add support for templates * imuxsock: add "ruleset" input parameter(fate#320667) * imptcp: performance improvements * improve interface definition in some modules, e.g. mmanon, mmsequence * rsgtutil: dump mode improvements + auto-detect signature file type + ability to dump hash chains for log extraction files * bugfix: unixtimestamp date format was incorrectly computed (leap year) * bugfix: date-ordinal date format was incorrectly computed (leap year) * bugfix: some race when shutting down input module threads * bugfix tcpflood: did not handle connection drops correct in TLS case * bugfix: abort if global parameter value was wrong * bugfix omkafka: fix potential NULL pointer addressing * bugfix impstats: @cee cookie was prefixed to wrong fromat (json vs. cee) * bugfix imfile: fix race during startup that could lead to some duplication * bugfix: potential loss of single message at queue shutdown * bugfix: potential deadlock with heavy variable access * bugfix ommysql: on some platforms, serverport parameter had no effect * bugfix omelasticsearch: invalid pointer dereference * bugfix omhiredis: serverport config parameter did not reliably work * bugfix rsgtutil: -h command line option did not work * bugfix lexer: hex numbers were not properly represented * bugfix TLS syslog: intermittent errors while sending data * bugfix imfile: abort on startup if no slash was present in file name param * bugfix rsgtutil: fixed abort when using short command line options * bugfix rsgtutil: invalid computation of log record extraction file * bugfix build system: KSI components could only be build if in default path- rsyslog 8.16.0: * rsgtutil: Added extraction support including loglines and hash chains. * new system properties for $NOW properties based on UTC * various bug fixes and improvements- fix build on sle11: use package name buildrequires instead of pkgconfig- build with libfastjson (mandatory from 8.16.0)- rsyslog 8.15.0: * KSI (incompatible changes): + KSI utilities: Added option to set publication url via - -publications-server. Required for signature verification. + UserID and UserKey can be set by parameter + Fixed wrong TLV container for KSI signatures from 0905 to 0906. + somewhat improved error messages + Update for and use libksi 3.4.0.x * New contributed modules: + pmpanngfw: for translating Palo Alto Networks logs * pmciscoios: support for asterisk before timestamp added * solr external output plugin much enhanced * omrabbitmq: improvements * add support for libfastjson (as a replacement for json-c) * pmciscoios: support for some format variations * improvments for 0mq modules: + omczmq - suspend / Retry handling + omczmq - improved efficiency + omczmq - added ability to set a timeout for sends + omczmq - set topics can be in separate frame (default) or part of message frame (configurable) + imczmq - ZMQ_ROUTER support * Note the upstream supported modules not enabled in SUSE package: + grok (mmgrok) + omkafka * add support for building with libfastjson * bugfix: invalid mutex handling in omfile async write mode could lead to segfault, even though highly unlikely (caught by testbench on a single platform) (bsc#1000488)- rsyslog 8.14.0: * add property "rawmsg-after-pri" * bugfix: potential misadresseing in imfile * bugfix: re_extract RainerScript function did not work- rsyslog 8.13.0: * ZeroMQ enhancements * Redis enhancements * mmnormalize: liblognorm error messages are now emitted via regular rsyslog error reporting mechanism (aka "are now logged") * networking improvements - drop rsyslog-8.12.0-parallel-build.patch, is upstream - drop rsyslog-8.12.0-gnutls.patch, same- rsyslog 8.12.0: * Harmonize resetConfigVariables values and defaults * GT/KSI: fix some issues in signature file format and add conversion tool * bugfix: ommysql did not work when gnutls was enabled * bugfix omfile: potential memory leak on file close * bugfix omfile: potential race in dynafile detection/creation * bugfix omfile: Fix race-condition detection in path-creation code * bugfix parser subsystem: potential misadressing in SanitizeMsg() * imfile: files moved outside of directory are now (properly) handled * bugfix: imfile: segfault when using startmsg.regex * bugfix imfile: file table was corrupted when on file deletion * bugfix ompgsql: transaction were improperly handled * bugfix mmjsonparse: memory leak if non-cee-json message is processed * testbench: remove raciness from UDP based tests * testbench: added bash into all scripts makign it mandatory * bugfix testbench: Fixed problem building syslog_caller util when liblogging-stdlog is not available. - add upstream patches: * rsyslog-8.12.0-gnutls.patch to fix build with gnutls * rsyslog-8.12.0-parallel-build.patch to fix parallel build- rsyslog 8.11.0 - new features: * signature provider for Keyless Signature Infrastructure (KSI) - bug fixes: * imfile: regex multiline mode ignored escapeLF option * omkafka: fixed several concurrency issues, most of them related to dynamic topics. * execonlywhenpreviousissuspended did not work correctly * core engine: ensured global variable atomicity * imfile: segfault when using startmsg.regex because of empty log line- rsyslog 8.10.0: * imfile: add capability to process multi-line messages based on regex * pmrfc3164: add new parameter "detect.yearAfterTimestamp" * pmrfc3164: add new parameter "permit.squareBracesInHostname" * supplementary groups are now set when dropping privileges * imfile: added brace glob expansion to wildcard * zmq: add the ability for zeromq input and outputs to advertise their presence on UDP via the zbeacon API. * added omhttpfs: contributed module for writing to HDFS via HTTP * bug fixes - packaging changes: * build with GnuTLS support again as 3.4.0 is now supported- Documentation does not depend on the presence of anything- Adjusted apparmor profile based on the suggestions by Christian Boltz * Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls * Moved profiles to /usr/share/apparmor/extra-profiles/ * Blocked capability block_suspend plus some other small fixes- Adjusted apparmor profile to prevent aa-genprof failures (bnc#925512)- disable GnuTLS support, does not build with GnuTLS 3.4.0- rsyslog 8.9.0: - omprog: add option "hup.forward" to forwards HUP to external plugins - imuxsock: added capability to use regular parser chain - new sysSock.useSpecialParser module parameter - new sysSock.parseHostname module parameter - new useSpecialParser input parameter - new parseHostname input parameter - 0mq: improvements in input and output modules - imtcp: add support for ip based bind for imtcp -> param "address" - bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData - bugfix imfile: partial data loss, especially in readMode != 0 - bugfix: potential large memory consumption with failed actions - bugfix: omudpspoof: invalid default send template in RainerScript format - bugfix: size-based legacy config statements did not work properly on some platforms, they were incorrectly handled, resulting in all sorts of "interesting" effects (up to segfault on startup) - build system: added option --without-valgrind-testbench ... which provides the capability to either enforce or turn off valgrind use inside the testbench. Thanks to whissi for the patch. - rsyslogd: fix misleading typos in error messa - remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch- rsyslog 8.8.0: - omkafka: add support for dynamic topics and auto partitioning - imtcp/imptcp: support for broken Cisco ASA TCP syslog framing - omfwd: more detailled error messages in case of UDP send error - TLS syslog: enable capability to turn on GnuTLS debug logging - bugfix: $AbortOnUncleanConfig did not work - improve rsyslogd -v output and error message with meta information - bugfix imtcp: octet-counted framing cannot be turned off - bugfix: build problems on Illuminos - bugfix: invalid data size for iMaxLine global property - bugfix: negative values for maxMessageSize global parameter were permitted - add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch to fix compiler warnings/errors- rsyslog 8.7.0: - add message metadata "system" to msg object this permits to store metadata alongside the message - imfile: add support for "filename" metadata this is useful in cases where wildcards are used - imptcp: make stats counter names consistent with what imudp, imtcp uses - added new module "omkafka" to support writing to Apache Kafka - omfwd: add new "udp.senddelay" parameter - mmnormalize enhancements - RainerScript "foreach" iterator and array reading support Thanks to Janmejay Singh for the patch. - now requires liblognorm >= 1.0.2 - add support for systemd >= 209 library names - BSD "ntp" facility (value 12) is now also supported in filter Note: this patch was released under ASL 2.0 (see email-conversation). - bugfix: global(localHostName="xxx") was not respected in all modules - bugfix: emit correct error message on config-file-not-found - bugfix: impstats emitted invalid JSON format (if JSON was selected) - bugfix: (small) memory leak in omfile's outchannel code - bugfix: imuxsock did not deactivate some code not supported by platform - includes changes from 8.6.0: - configuration-setting rsyslogd command line options deprecated - new and enhanced plugins for 0mq. These are currently experimantal. - empty rulesets have been permitted. They no longer raise a syntax error. - add parameter -N3 to enable config check of partial config file Use for config include files. Disables checking if any action exists at all. - rsyslogd -e option has finally been removed It is deprectated since many years. - testbench improvements - testbench is now by default disabled - add new RainerScript functions warp() and replace() - mmnormalize can now also work on a variable - new property date options for day ordinal and week number - remove --enable-zlib configure option, we always require it - slight source-tree restructuring: contributed modules are now in their own ./contrib directory. The idea is to make it clearer to the end user which plugins are supported by the rsyslog project (those in ./plugins). - bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used - bugfix: not all files closed on auto-backgrounding startup - bugfix: typo in queue configuration parameter - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imuxsock: possible segfault when SysSock.Use="off" - bugfix: RainerScript: invalid ruleset names were accepted - bugfix: some module entry points were not called for all modules - bugfix omlibdbi: connection was taken down in wrong thread - imttcp was removed because it was an incompleted experimental module - pmrfc3164sd because it was a custom module nobody used - omoracle was removed because it was orphaned and did not build/work for quite some years and nobody was interested in fixing it - includes changes from 8.5.0: - imfile greatly refactored and support for wildcards added - PRI-handling code refactored for more clarity and robustness - ommail: add support for RainerScript config system [action() object] - refactored the auto-backgrounding method - make gntls tcp syslog driver emit more error messages - bugfix: imfile did not complain if configured file did not exist - bugfix: build failure on systems which don't have json_tokener_errors - imgssapi: log remote peer address in some error messages - includes changes from 8.4.3: - ommail: minor bugfixes & improvements - bugfix imkmsg: infinite loop on OpenVZ VMs - bugfix: typo in queue configuration parameter made parameter unusable - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imfile: segfault on startup in "inotify" mode - bugfix imfile: could make rsyslog exit in inotify mode - bugfix: rsgtutil sometimes crashed in verify mode if file did not exist - bugfix imklog: pri was miscalculated - bugfix: imjournal did not build properly - bugfix: mmcount did no longer build - bugfix imuxsock: possible segfault when SysSock.Use="off" - rsyslog Version 8.5.0 fixed bsc#992146- set file permissions only on first install [boo#899316]- Changed BuildRequires dependencies for SLES11SP3 - BuildRequires: libjson-c-devel - BuildRequires: libestr-devel - BuildRequires: liblogging-devel - BuildRequires: librelp-devel - BuildRequires: libee-devel - BuildRequires: liblognorm-devel - BuildRequires: libuuid-devel- fix shebang of rsyslog-service-prepare script/bin/sh/bin/sh/bin/sh/bin/shrsyslog-module-guardtimeh04-ch1a 1727338219  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNO8.2406.0-150600.12.6.28.2406.0-150600.12.6.28.2406.0-150600.12.6.2 8.38.0 rsyslog.confrsyslog.dNetworkManager.fruleacpid.frulefirewall.fruleremote.confrsyslogadditional-log-sockets.confrsyslogdjournald.conf.d30-rsyslog.confrsyslog.servicersyslogfmhash.sofmhttp.soim3195.soimfile.soimjournal.soimklog.soimkmsg.soimmark.soimpstats.soimptcp.soimtcp.soimudp.soimuxsock.solmnet.solmnetstrms.solmnsd_ptcp.solmregexp.solmtcpclt.solmtcpsrv.solmzlibw.sommanon.sommcount.sommexternal.sommfields.sommkubernetes.sommpstrucdata.sommrfc5424addhmac.sommrm1stspace.sommsequence.sommutf8fix.soomhttp.soomjournal.soommail.soomprog.soomruleset.soomstdout.soomtesting.soomuxsock.sopmaixforwardedfrom.sopmciscoios.sopmcisconames.sopmlastmsg.sopmnormalize.sopmnull.sopmpanngfw.sopmsnare.sorcrsyslogrsyslog-service-preparersyslogdapparmorextra-profilesrsyslog.dusr.sbin.rsyslogdrsyslogAUTHORSChangeLogREADMEsysconfig.syslog-rsyslogrsyslogCOPYINGCOPYING.ASL20COPYING.LESSERrsyslog.conf.5.gzrsyslogd.8.gzrsyslog/etc//etc/rsyslog.d//run//run/rsyslog//sbin//usr/lib/systemd//usr/lib/systemd/journald.conf.d//usr/lib/systemd/system//usr/lib64//usr/lib64/rsyslog//usr/sbin//usr/share//usr/share/apparmor//usr/share/apparmor/extra-profiles//usr/share/doc/packages//usr/share/doc/packages/rsyslog//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/rsyslog//usr/share/man/man5//usr/share/man/man8//var/spool/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35836/SUSE_SLE-15-SP6_Update/04ef48eaf34ff02751381f97b4adff09-rsyslog.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./012345677ASCII textdirectoryemptyELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0ecac93eacce7d8fc95ab71de267a8134d8eecb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7403ee67462b8950a3eebb93757200ddb2a278dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd4e5c9a1614da5fec51b349c75a729c6d126456, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e18b123c75a64bbe959aae9bace1e762b7ebaf3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a2fe03b1264e7bf3b81d121240d635c15c7b9f64, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=77cba751620f388cfad4e78a3c47c4f47a87a5c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac3be5505ed11578cfe0a6502114d7706b41f543, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6fb8804c961976f6327a0bf62c3a74c24ad3c45, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=11eddbd5069d94d5d1ab3b3d3286e229fd10ef49, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a75882b661b0daa6e593b07993cf56adfb016d9e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d72d1bd115e8dcb0940274e5402cc8ae94d2c66, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=659cd385f60ad6ecebc5f3a528f93b737f47dd54, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c860f3a4a45d033061d100c2f27f213f6dc3f065, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08161743f30b8d89cb81ef8f7a5c4ddb408dfd52, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fea1ea01f797da776fecddd2b06642ba33413bf0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=27a51c6559490fdc4e67d4880eb2349bed02da0f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5db64d2f1336114d758e9321acc98355c778836, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75eec6857e369d3e6f2bd0a5c600ae9963e831c6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0c90ed4a253baf90de55d506f66919ed9ac279c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7351ad20b16cd650fd35b666c97cce9ceba15693, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=18c43d7def8c30f208ab3f08793d0b1bd03dc977, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=56b3c3efac572fbe6819d6496d00fd0d15cf62df, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a01d978f6633d1ba427e0914136c6eb19490941b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad131430a1e99c5bc0a7b6b5812cf522d58d3617, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=83922e51c4ccde5bc5784c32a07580f762a4f6f7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f8c359da43c2fd1ef69f46be8f04893d9662e95, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=62c88124579dd8c47ea8292bdf6e8b5dc932c5eb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a0284c027f671f7ad475b3cf611bd4c58027d3e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b28c45a12037b1c599db4d8c91dbe77fbb22eb4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=14d509a21c9123b25a30d8f6818110abefbc89e0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d425e299a4eeca25e2e7e5b6829fb593c2fc659, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d0cb0fe63544b830ad6afe3a69d7dbf14aaf2b3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e386ab5baa3ffc31c95ced0dbb2a6c1b93b5d96, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e13c879b0d8c4b612ed12249d457cf8b429fc4ad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5c7f0e250ac9a5b30bf84d055d423fceb6ce4fd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c6eaeb292da5621249f2e96e54c1c01db1b29274, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=17f326d4141bd211e7a6849d90e6442ed1e56718, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca7f5e4581ea9524d9b1e21aab5a01c6c5189fdc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ce8cc792fe6d5d65dde89dba06dacc020754907, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef10dcba229d02ecce9e12522163af2db38c95e6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=94af51cd1642d06a39043e86edc991a4a9a8d0a7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=58cd909bfb56c768497f467659cd074ab8833d24, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b22cb96f5981c01565b36e3663edf1613175a56, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7cf338390d4e5a7dc7416d32f5c69d326cfc6436, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0fd6d40017a8c6dd58eeff9d973258171877d713, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=477f57fed3ec664816e110b36ce30c9f91775402, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=64fecf4d62a525979bd27db30bfffea8956d0505, for GNU/Linux 3.2.0, strippedC source, ASCII textUTF-8 Unicode textASCII text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) #).15>CKRX\cgltx~   RRR R RRRR RRR!R RRRRRRRRR R RRR RRRRRRR(R'R&R RRRRRR RRRRR RRR RRRR RRRR RRRRR RRRRR RR RRRRRR RR RRRRR RR RRRR RRRR RRR RRRR RRRR R RRRR RRRRRRRR RRR+R RR RRRR RRR RRRR RRRR RR RRRRR"R R RRRR RRRRRR RRR RRR RRR R RRRRR R'R RRR&R RRRR RRRRRR RRR RRR RRRRR RRR RRR RRR RRR RRRR RRR"R R RRR RRR RRR RR$R*R'RR RRRRRRRRRRRRR+R#RR R&R)R X#d}d|/usr/bin/systemctl --marked reload-or-restart ||:/bin/shsystemdsystemdsystemd-sysvcompatutf-850a9420098d450f4c3c482d3cad1877c24bd1cec0df73ab6d6adf5f2dbbb3cbe?7zXZ !t/]"k%:.kgWE ljTHœsi"V=3\'n2ڴpKb`aHfn vфQw'6/x]7+؜xL&HJe9x&.Ы'߂@}[KjE=P_D_Y.ਁW%[3-IW#}9ᐴU+BD<<ܱ ]rIsEg6p/_A_g4@&oY#{3T t=1FE(=' !MΠ9RTVcD 2jے k$#LԇKD :EȨ>/Ջ5v`9| |mO9AN'N#G$oXК]^;ORoyQ`XN7{ ʧ9Rl0Ш3*m$>!FSG5LfkY` .%N2DnETK&΢d-m`~l&v4(TOr3xWq:,!@1ޖS{xM[eC*R=!^SDwE KD?3WTn?!~ FKF w" uYlQ3o5FGdz]n2_+ ځˌ,o6x̝V?b:ԒŁWzH]hO^>kuX3&NI`AD!E7*;gcbB:0tɺEJ-4`>}3q\lA]!}+7Op/_SLS(u̯:Wd>G tL9&-jXFI]1-$vpA!)s=N\؝U;_)\->(Gl*ZWS; !Hx_ܹs~M-@&Ue[6Xj"3QZAC9uB).mn~hoG]|X)h96Nޓ\]~,b͚DuK]sFd%ǺM 5} CoXIT]R~y0%07`I'^ʻ ^fFL!'◡P"* l `M'8KMdn-9Kfd [\ {THܷ '0U .A H&nւ/QrVKd;;7giBx;+BRٻGkFoG ^nĞj%̫\t.6фqEZ u=ex4+5KGڎ'AyIfm}}n8)XnNg0=Z}:o cbciΌץ5rIw*pJ:+nW&-s˲10w<ޗN/T{FM&@oŰb1 bO+wS4ʾwnB0%\DEmDlS"QTLVQED oZb.F < ,)VD^Z3.u$gi'q3Dפl,WE?윆< 9/WK'AUIq/fX k~AeT9';1jJ n L|P3a pu_QbeGmVfLcNF܄d NI8YN=b$/(EF -8 rw!״41ڠm 1( }hY,J˞D0 !Dž)hϟ |eSa}ԮW'{ٔ}bdࠍ'[0>Xp  y4|<32'1&ue?UM B>$җ51D%&`oUqngQEhWaϻi LB9C"-Ӊa/z n0|r;$.Ψ\Y}-k7Xi'ppD%u8V8 Ѹ㒿uݍ(,faE53,t0ҶlP r%C-L7p?WUNGjl$$cʷtcjk+*Uޏhѽoq1wCgpe s;aA}SQF6FMٍh*p fj8Vq[n+ ,UmC&`O{dدdʶݎq%xgfs{,I#)qpă[gU>B۬ ?Wi4 XoÀ7C,ǡrBԛf lPodtQrP|4˲U Սj@q՗\rA)|m|?]uLW r˂|,(jfwZJÔ&cVfSʝ R{2"&DۉW ) Vn<$¬[7S5{NkPVEEY1;˦JakМvf|塞S9?07d+(DB!)ED<8mU-BBۨ n7a6 "؍ F dR͟=kJ1U3E+=U,$nfe!yn2"jke3o|p7 Hisa 61 ]p>@3q J>oZ }q5Kr.MDaEz8*E7:0zٝRU;6;Cq5v}VEY؟nEu)l3m23GUv;zп ג=D™j$'tD"jK vh-x1.*)cp,mp`i`,Hg7K1HfXcQ1'iSYGRy;*G'}9%mJ @)Be@^_]Ox7-tAUHSv C-I\\7s1S$B NStP5(m .*P ("Lw /*{^'ܞ 7-i/ 1)A' 9 @ɁM4 gH;7NJx9)r|Mg6cRls ^qpv~20_J1w)(/.٧'3 ԃ6,0:!h/ͳU 4YIpPђWvSQ |b#tER{0@)<$tM0!q%2 d12S4/AոhѨf+;9iX3vle f| ";bMrI<=?Vw2cTA6r(#!bJKrVlRnT5!{χTwt!Ήbbh{UyTkwm'u~r] sThƅr',]&f/Gmjr} qV_4iM(ɼAswOhw{ ){YgɁ ;oش%a)k R(.gcvL;k% &`S1!<]ᙉ0t:j/Bʈ-fqb5unl2'pV&y)O8pV^r[-(0%h w P՜d}& 2>N8cB)Q}2[ao>ٓؓvyhۑ=\7$IC\?XqBV~AiFV[}@#OSx/{l;Z>9|ȄWdt3l};HO^6-VOtqj)X/؆p셎X;"w'r3J}ݺVbfƘ1T2)#c{š1e^5WCdUٗ]aBಉ@8=/֑UG&y,bZf ?{8t%`!L&]4kއK.TQJ7\ oNG>'q-ƚ~KQǑتRn%Ӗd;b-gR{7FD-d0OZ(4N<fcPLvZWRQY7 \DTLq]4ΆQgwA||.auozϱ 0.)>J['Ç\!>J]0کX.mh(GJq`Oy:u>UoPVn᧞,#Ѣ ?}-LJNr$AiU (xy%Q+6B`=L[~%2RQNos(b0jL%m8e+ =M]ևKI ?Kd~P ޹A>xTאgP,ΆTٝ AϜATL qY@bI\ngf}p-ov^Tn`kvSXxLG?qőZK,@g2(o>UA|zfquG '.R-{kЏ7UZ(m|uH/L_|rWvm)C /TA֊BS/ ^xW'7ȨcXNG%=MAw䌾ZSV+l?BS#:MI?=xzS/  H(]%!j(?'tXp4W5뿃w̔}oTQf#~m O~>7WV9J{FU,NP* Ї`lhE*.F OHG 7%3DIohӜvLʙ AwR,$Z:bv5{裓@bɹ85N?Opw |Vj>d 2zfq$7/.`YǠ[u%oRtFt|f s,-wꨆNB@S4Ck]/SG!8u֨WQ&8ݣL3Qn08_3O~Łc̾O̿iwtۺ} z{yä띺<3eed:A<+z8թ=Fl!ZQ*/o1S݅@t&w&_qA۳sBU(Wj8mBe? G?,lKj55% 3:[7}ĝMN I/Iu?s&I2o!Q"9yD͍OwiqbЃǘ,z镌 n8G@9 +Q~Ch|(1P>XWhVeqXO*o,a:M§Z'JL?gی?ApV PVJv ߔM:u+j$9(ݷjwlsϘS{n9G^ߊ44,p w5]ph%vHjs&<]V-VQXk;czmlaPWW2h <2QgG[5[lˤֹ4䆬Rܿ0f3TX1vBj[?UUvpQX P+@@HO4>8ZC*5XD0ϝnc@@IU\,tQA %fg()wjTyj F)]ՇYp, L]{c^_{L舝Ŵc^l"&`AîUh[iɖ l;55)Ր~>Ǭ@Ȝf^s.~ŏGu&^W\Z1ŬZ,l[t ܲ F9OC7<%˿47jywP,_SM%5:jGƓ&T;Yp*::Ifk1.X腲,uiv]{&Zص\Ov\c {,,:08a#y"ylwSX}ԑ3yd/϶R5gd=ܢ _ Cy]-Zر E -cOyr>p0CE2qzd׏A8R_6 հc 0Uv]B XEb!&Z7?pH k^ɋl+!啘JfUrGk{_x%l_lnjf9|k$7%M൙|UI:٘Β8 rw HWіP*31b+1WYK*k`Ne*v߼9aUPcL0UICvSYbsP!~_B}S:@k$hCw|Zmm@'Dk Z%@ueZ8=ƒeҼsTgG\b".ZyBtԖ VFPSEVwrhX=&❐Od=fNqKAM?{)uE+,~B]->$(}$E25^sf+яkJų$hX& ۭ5ͱ7Axv`tQe4jwt4>ʏ Cdܞ*5SU6^-c:4^,^Us}c`>/{R]'fp6#]UŢʶQ[+#ʼL Nu='JQ~(yjlAT(M4C5iZȢ7ɅkId5:eaQBo8*yɓ췫r?v _ c{~aQOsJ"6_j +*H}+IC(ZN{|umr`w !*J?Vۄ:S:I$` n,7ѲpeE mJ)!+˄\ѯ-0/tb7vkGp@ռFu%< H+cUaWѺ:+ .bIz)uH]wji%|}$up.otlМhٌF8V._БpÚ[ }/^mXμS.#9Ȣ9~쁞`b0Zץy;(cxC^̞rzؚZG{M!뒡})UG$TCӷ5̚ЅB(81)%j?bx#\"^dgo? #^ή,8_j'!P<[&K0N6 h 6.;v}@#qE/S 5WOӶδ'r˜y9f{R=8Y`ãvpiMBoo&s{ А Q |V}~GSymH+-"r.f:M@nO 㳡)u0oÎŪiEۍO%F4Tzڕ)1,]4iHs0x%+N{']1ʞGn[M X ˦oš`1נJzY_f 2 Ʋ=kBkz"o 2m<ߐM2y+J}0bY=^Z[+NZFjM]ԳB1 ÚC:d_*n$l(ll~9hOx@ܴ<`jmcO*b sJʨnOs7$L]!$Z/5gzٯf#rdfb|Z_ԇ YU4bmH p!E.pYQ,$j t%Wq =j TbD8N@ƆEXMO2㭋X,SQpT ,ni<}4H{{#mSEQGz&f|-XMIYՎ FmAy6p7%O 3zuq4 /OO$LaZp.sAt ti L CD܈۬mZ42eBmu )3ȡj#M_KW$F6vrw"}` *t9X SwZ 6#0[hD_?rNq#Nj~K ԕ{ O2| !=- Ҕ&YpJEsG'lۖg̘XPț̝M {!4w8p atXP/#߆`~^4 }w(g},ҝ5Ĥ(Ű~Ks@ +CJ>BJErr@Xoشi˵=nk&|m.F$r&U5 kWɄIdΩs3m2;a&%Ѳ {B`-]{pKl7fpɅ|#:b?RaawB:'vq@#YKA ?kRd2n|МZ 9LҨskP5 ؼiڤ{A=ZX0MDﱭ2Zd?Do@L袰8(QV U>GMjG^_MwJq˟ȊŷVy̘ǂU:Cw?{F:f-(d]aY=@n>Ni~,0H/evG',TMOM˔f=jN4+Td]vA<IR֭i!3M,U,0JRfPOfvKHE @'G槰>pKi~l/;%m $^LjSH'c˭dm ef?\Y1Xላ d+3Fh tS[o3-utMin$9aߋ\=.;4l\bzP'sMP |u:(6T8-fk@!vV0Bչp=Lq7&|uRzw&=~}5~W-_iS Q: Y8S1k0X-7,­o O;Ly:coRurٵM`4&B`9Śe=Pϒީ, < %m*#ga mc .n BIU'O7Kyb݉dBy뚺fndF_+êF1= ۗԃ!퉚0Tzb] >yv][ ŗU`.i"fQGH0"KjV>rz0w %jĭӱ'?L^?تSu@o  Z/K(y1+ ;ʽ{^L(lǚqr˟[8DOu ]%ݘ~&G tX~!#=oi6})f#~Vrx]舝 <陘눶hKy%!T(*+1gڼ@/"!X͜dEFA)ґS$0 b ۙϭ֨Yv떧Z~ͱv<7n./ WlXܽGxVtfC9_r ;sփ? CrZPW9x;[Y\Ptq=ჽzlNwfrBm%r, %BcIT zM/$GUN Q]/'ɨbu2l*Pv1uI !7{W+*+xuZ0gCvإ<.t]gsG~ُ)3B@;b:9Sx9!H%-_R=̔G/;ޤb>2 6$S\cx7 f%DnXełp4b&-!6"^i)+2 d1r!]BWnՎOLGb6FƒlF t6 FyCNӳ:ƹ4#gVS+Ź1녡P9[`ͮpߨ<?O Rɨ NYT + A.~Ρ: Xtζ`L#a^21(q|b{D s) ~G5'Y>JueP,IY mhdM-@{Jn]͛c;:ϩ9̭lk.gtS6xfKE%Yi9% 츢H+uVS'w1̋\~ph5|t' Y;2g N o-zJ~ k_ Qur<2*sBw&#dh~9 (kGޢHs{+{eTb>hqJh& &zjTA9yu(a 0vA;IT\q lkiL}cǴ52sسߛA /A.x8&mik?"N(6Z BˆeɥOHb{y^ Y\HecHY8+Uag'Zd-RdUTZQcyE)WJnOzțq*wIb}Kf|?Usv.m[ʡ'nXFscpw|gF3i1gɹ!5hu*JII"4P Xc-hTFw}ݻU.xkٯ3RhmIkNLrm^b]7wˑa¬NT[>Sexqz>ʥi?3STxM +Zd !\*mLg\y 1TIdNJ6vo Ei _|4#o'yA&g_LS! 31t9f,Z(c#j`̪̟&Vsq-q |&V>L*_ŽoҸ?-k.2K|rzufzCMGn-fKIAqVNz1~qEy|* h%Fӝy_"9+oَ›)DN7VvxDž5|tKZ[ uR{LŮOLA)-?^RǨ~M33<ӵ!ԙ՗h y.}j4;fajm)tPpCD)zKqBXMi^zm>dk!dRo~r`B =(]YD sbgd-aN<뙿崨 i;r`H1p3X^} x y L,;c,75H&񕼋y/F7 ܦMD<N>j[&]Eĉi8q硳C$ OuH hndEa |n2̆\/3bÏ0i[ӳ>vSp\/qxӨ [f-~MMP`׉-9d$Q,(Nsy5#a(k SHmC6C A.%m8n_d|58CTO j[rk!d̽ljooa(`K-:= (bO=BO/"k7E]F*6v4l٬ қp F$$ƳV ?T!<1]Q;e`|TЗ30N2s\o9]'Ì2|%Ǫ;~J9+ '8H"iOh7+63.z0^ޭ4%t鍖MU{;űgՈu+?vLʯITg^u WLÇWIs nv*)=Was]ur-cy99 1D *ueyƕpzV:KI3_ǬtbVTQ-6b@õA~xjז?pC8bR:rgAnj|:URΨ&h& u;?ZbjEAx܈cE@md)n}HcwJj| \(ɠ .Z++5Bt3a/wo;N{>mx(5"Wŝ ߡڭiy\mQ$eO~Fҽ>)e"BF{7F=@UK7D:D;NrNGp%CHRt H2jA,XԄȈ#p_qqMSkr]kڛS h{_-ϔύm^;XoͲk-.Xg@GXw&PhxTOL%;CozSLp]?`45a)yk A}̰;Q8~V۬=@Gze;+$0lQ!h 4 2bSJށ4w:=t)8 : $6/]DT 1pgg,*5GG*O{zbq^һH6'^\ bXpZlDNʾA3K' U*hȏ?s*0a{l]D 2jE\AKP'֡:8=ƶ%YqJZp&rw<6X(i`ZOoTnx iv9jsۉeDN&a6ijgox&҈3ߘX58!l"_'5wi΀ vU:7P<^;G*Z}5=vTAbQ|sVCyRW26m9`TLDV/|IY pb-zq Gd}DK(֧? <*UߞzKR[l <;gx+ B/\R u/>`-_DZcfU:uHX՚BW.~秉 8gby$˓K ):uē-߶䯱#e z盹xG&@iZ:gg.c*:;b<Ƭoc 9[ a'-eu v$$ixkEb+^7v"-veOoJ\PT0-em$n1;Wo8bV K$f̏ǤEnFj8~xv߅]RkLs-:[Cur Qޖl}IfdHjR䣭GY=uTm1fR6mf U22[h_Ny;SJNb/.uS=~"+G[ Q乧$[ElHPt{,u\f̘UxDQ()~zʺ8b֧GphUA!zpǁ0gt@M(߅W:3HYcFƺ&fHUd0,BCAg!+j}rG`!euZՄ0Y"m:hNDk5;Ͽ/F1IEď3l `ݸ$:3S=i…YB]s#8s=hl@؟ʤOiߺLbsoAV=r#<vOܛI 13[^cFN:BhK |bNŧ+ C?Ur daSj&lzPg(_zI&urqq -YCV`zy[!49K;zq09eff!Xȝ=O@f-tU@!"z o[htrkږG h(FaGPQWxVm~eEB31?(n6˶R|]t<&R+2ⲆӑFրx7jaU}b9*:[k~BQO#dӡDEerqߤWsXY ˔dDA*҅5dq| 3s;Hx6d%ͿE "=WK7,  tފ>}ݸm/oq(F\[9KYtVE&4b?ɐDqo*O4Ɖs +ni=<WI\JRuе}^}UkSD`Pۚ2%ʈ*ࡧ [x;Zr [;[̛jK{/rX/!uN!GvW@ᔵt+KD?_CɐJ.SBxl{z2j<~إ~.bl*tF,l(3 {N) dEB!^o '姯5 0Ι{SLH\ci|XA7}d6e;~b"^U@'v=vH)@ c"ERB>TjqPcυIckƬ 'apn3}!3-H.o}_ Cm'qͣFZo 6+J#NȄ~$|W?w1Z?c-=861]P4.p`mM%sY4>3O_%rzOh/ƧAtg })t {iDeaT=k =Qf2X:]`Nqi&5}4$QAIPbaLyxB^@ h3"F6 q ۟jE{tPt0^TU_ 3zNTD' <ilg~)>mݛT"+!O(L5Aa"f B{c%Q++ڄB"m^w [Fʭw:=Д;μa[G\h.| m A!8 ]Kq؊c/jmJ]< c)v')bۚdR@ڿ핇 м=#R6F0y@Wev 5gb[?lSE{Dv\.HydX ^G$krB~iYHvYMo; -6]S<#~;UJ"QBLb@xZ|jPgCKIm[H:un$,ujDӟdmx3a& k\]n4ʾ*FH Qm`LӦPw߃X}B/Ov8R}=b5ǠmJb}Y7ñ5k,|ŀ}QPHq2Ak&9] { 2yYf[p~SI^ $)r=RWQ"6i<0t 2V2r1몁Ӡ9.y)=)' O ׮ fz>oDIf \^3҆MPgpxjk*Rc.B!)_a hYM?%`ZQ07~Q$Ge(a |"0g9=n"q@NҀ" ߢ]O~\迲37;}rOϷɜ+U{]((LĨmOٯnE+Uv ֠/ޜ$eHj ·ņ(TorzRH0!È$)%e}3~oT>v]@ș`O~ʎo&џ">Rn`cެ$^!W#&FXŸG]6f0$LO= i{ ҽ+lZ }Gr`=`aɪXrh.q^iٽ+q`v0ȫF㌃U~o:Gs\#]h<ݱ>Sej&;Y< *О:F$4t?&X5 S+nS(nAW7QXgťJv˦6О!*:scB[mY!UNVS>"|M*m oFz}* +)<58\7_OSRbe4-5w M'ZRAY@^YܝߊdyWGyOz2Sc`O8EfcLa']]h,Ϗ7OGʆ!FDR( 2NX'VX϶-,[ gºIQ{Ԫkb$U^C'J: 6Nn$TmH\,(8\ PiS1վvMQfh鷿׈-@ں \@D!݌gx< L]LvT4lw@Y_+)(WhU,BSXh՚/Z%d s:G)@Mq"д/"г,/pw@0 "Un)Owsڗzt\Zqćԑkw@8V/ײ bXĞt;elWp2 $ @U;=N5&7I21AQU >&]QUh)Cֵ0iMAn=\GXRXw=1M1R`JǶB7ܡtGL6ٖ;hTȨ+VdJF::vop-N :qU0JRGK5j$g󖲲f:V?*G "nv\4fZF9dFC!匩0>Cm1||\"\}]ҶW( JDs(MD9O~H{H]ʹHia9*pZ6YTV!w~fF]*88fJ1aF9JD xtJ(Qt`J=@t9F!OůAt͚m#G@Ț@04HqK6H~FxױF {d1cO}$mVjA,dù=IrP6$N5s\xƆqfVd,]kM͑\.`YO8d 4}zjɅ{oJfSE.)SK\Ou۸zc)+cK8!@0AVsZp;=&xUo ]tmhUE0ggY"hfbJqdUHvwPR/I4.xx̌/Q*Khx/̴"Erk]TrP[j%x{1dl)@ԧ( İ#wgԗQGw,U87vmCy9,>#r^&hՓJO:O75}[ kUN/\f$S6 BF ye,KnZ٠ =NO;9Fa/Tvګ@D͌LSoj/2 y=j&(S@M!zn}L*Pf4.'UYc4 F&\J2WӋm bSD\̘ÿ͹cPuL o<>B5;L 3.P4W:aɥrJ udup´!שc.>:kiEd$P{!^K=;3oZ,mph$B3B9>e!w*2#&e`iy`wC xm%DjW>LK>5Y]Qy(u$߉¢s0:.(>ks6Md +a(x^MԂeTLyt,bZ_}ث#JT JwKfFUs@GɐWv*ZToXDMs7dI~ XC0 jTZXQeZ|ot}98 U85M)jYxH̓17l,(Nᬛ͖Y9׷hHT9sNf ^UIĤm .Ww'ZP-zS@N FkǵCp.H{QJ wiU*s ̪FbtHj^@yԉoaMzh Wm{MӨ10 `)@t 'ͭ&Zۄz\ޡI*+m wI.VcG+5r7ƪ"빣 a4.~}neʍ/F`غ:N`` xшOjP9MaW* ?_!zŀP>PYvo .'ܤȜŽfZN<}Fgr;ҋR%s}}ȐDr],f)ޛ6lj߼JeLj#faMxcJHnQ--W Xv7vY+iN'u"= ݯoZ%BB Ya32qg8D8LFC\u嚎j{AdRe3^r`vۚtW-.~w-#bS~NA:[ S秊͗mٱ7s#RK/ʨ4͢λԽ_50ZDw3>63;8kۙ8rI/6]kMQlƐܸiYcsh7'9 P6% ⿁KE I~2zVb 3aǓ1}c-6$[LJy̧qzpV3~d1 cDX/3FXZȠKONSNP-VDCOui'M1Q"5bS6q⨕*3hkvxSCķ/)B=S_(SJ6y:'<{J*/I&Ěta~$:ݗҊAzdb3CKҰ2=\RZÕ壵kh[E_kZD_@S14?3FWW&X3<-yWkx09D\K>gy,TpzU#Ʒҗ1r/ޅ{B[cIJ*z'I(LhջtRgNXs[$%'*NĺϔG!!P"/ l彈`ϿRY;B P>} S;$gnlgTe9%]9"_p.w^+>Lz/5iA.X=`Dm)6 ϒvB:h끼@]t}mʃGAEIvgSROl]pk3QMLIb۽p^tݭ%.AC7W7֤!,vgIH{.ۇ]8]K9Z:?af:\$:04uT S2KS]j_QAx|9)g|6ֆгԦt=a qGv*5hodh_=Fܒ+O 5Qŭ/69;NB) Iݿu] N/kU59' /^aSaFY(;0b)r Lu߆ր~U䵹SΥ&Tdt;~C:.U^Xx LKZ; 7V'u~d>r۫s:9Y Lo$^H\ zdHf~1ȳYsʸՕ;Xq]Ogk"Poۚ_ JKhV>b_pQ5ٟ'3$L {kQ0qbW^%9d=?y%VqbŒ RB@I ц6k @̤Dk$ ehL#I^֝Cl46ԯ|a:$v)hɏ_5H8g;{y9;}4w(5҂lj aPtZclWeU 2Q)MkS뫥b ]0M 騄OMK>٥WJ݀Zcz~o)XvzG }S^>󧼳YmyOIєx0fTL m A#ޞ)΁qHC[YZ<,RxY &!9;?WD_cmSGLi(" u-'*/Tx؉Fb0|4MޅK~'Igd^E9yMT{1c +{CqKN^A~}[m5HMw/Ysfvr3{>2vQA !al6ԉNEA|R̈ /s|Y*eQ,=>튲SD?@ac`=C^)jV84tL |MOTPA)qc2y5K ]WT=\Hs}=ԡqyӳHUESUo'4C9a05ō&}y"A*7JjzLG#x`h}K&[>$(J[m~>'c1ؠ|eMȥT^5oȏëDm EU97X)X-#L(-Z=Fqb;?n=r,e+cכ̽YW@4ł0%M⋙6urcP'Pˢ!%hgHdOҰQk! l;+0?ow%=21c qk@: t8TR[Q[ u'cƢׇ|uzz#"԰QP1s].7SH^ne~DyB)k3csDɯQv;[@o4ZӨ6D$wtݗp;2az|-c>'A7vѷ8V4`桂״JhzdΕHWu.jޙP/H85)!_ Mu!49Z.5Ⱗ+ʁN|9 Hr3>[It H7`F苸{i;KO 2'yb]*Uy9m4mgaE)̀\}tL~UGtc*5  $FsHr`2 hb33Ce͙ Z~.oAP5Ӎ xY&F#¾z?x6|`S$D Uӵr!q ŋV굶aHDӶKFt۴؊֢b;ODr5]vbyDF\.g%ݐ_ &uV鯃g})\ _T 3>Dd r{M1Tg5{PeziwIQNOg)I X9G* \I_]#Ԣ1pOB_1|[Fޏf\CfӈڠC~cM#2䣕Ү!TTʞ9%d+Ώ)J" UM%_j1rD-ҀYWQnRywaqo,LH5,:e,6~E I!mMgxlHrE" =坅f[*%qS(eS!t8 y6>2_|QdזŃN41vxL"E#]VBCr#*{ʲWI,BϪDZ \ăTzBc?l XhGi5d:C\s&*g*%f_;P͋ aWX 0y_jJ]M H*;vDIR LNP#Ik= ,J=|[VBw-u` EJT5"ء{ PynUB<5M'd_к }>D^ZylOBL"rME󶞊wYssm~h{?iұBVbp*+d=H7=nr'29ojN/hVcdk:}jUzNQAnڻliHغXHt!Qt:%fe$X$ws{E?- `ol%SFFseBxDlz6C!B%O dXi[p]5M{gnArI5Է41KS$BQ33@>4 ~0'n,xSLAqӜIpyw囸ftH 6Q0-HWYJI; fDo,&f|"^W?-ըHy wo&P2W`Үl+qgDO tU5^80NB1 wf~ުa~D3B?;<Vd%pֳ[4H4^'m`yUL+L* 1EVdHJqnKvy%y_mq*_)1|=N(`ם$TMr5S$Pdk4|Ӷ;lk* ϲ#t)TX:բ1tbnÎڰ ZTp7} H-Xyډp ˠL9Y/ Iqvs:E9f6PpblnB/bc[Ŕ#S_on(lxfM _KK[3mqA9҉0R=rO!T\)m_3,QfPӘrStbp~=!y+bR1$3tPhHthO-P"7]P ~2wv |DRf޺ׅC oK+ų#<]ڰ8GȸIv/+?܊3F(wR+}$B?5̌cM0@m@ ſZƻWRKL<> |ae6ضF<NG*=2#5iˢxIR"ik%Ē3KgO>Vyhv<5fG[g^M#lwx6lvɑ2V.l;R>D`(ss\A.֘Yo_Fݚy0剮bǷz_._Lv390"tW♊@ATUb_RBrdȫg|ss\^\D"IZvdWgftK6'WPG#xwV$Wժ-UVxWzM*Q"v$c= 2m)ŽXLK\VBt !$^3ܔ(G[6ɼ{& oU}݊iXM;z2&Shcҁ`#HRre-f>nTmHڇrQ>{c5=wȰ1/~*tU&`xZ&ư"${;l#;Eu) / QT!zc8 ~8r"$-U`7^wM.|r Gn R~ Rgr݁G=Ô'Qp5Ʌ23w(Rݫ2A[ɮzԏTѤIA$݈z}y?Z&Cjtۢ@cSA5 HFI\ U kTz=Ng7AcAe2B.ފQKU|J \ƜlNB?޲4o6zpUAyFuGU>n ϲvR4YΘ~ߠ o&_ R)~5kQI̅#H(Yhq=~36|lA#W B)-F2bʴӪm"or@[I"-hW>|Y* p%l>E|gкΊ Eߚ-s.(SUhӭfeyYҔ`~Fxx &=ΚF&UxN| N_yQ&6h}|Z9`4G #/f#M6V'Sa7IϽF'K1 byst%FGmfXPaC făwń7FoANBB@e'\ROfST؝hqk%c}t:)PPHfnC=@GtB,foE4=;l*0-}^ˌ)[ )F 8*ڗ`otI liyB_5Ʒ,LC?";] gΉBBq,@OnSԽ6l$ 6ҋVghmk;.<՞uJ  UV`ؐOې/EBQ- MUX|&~Z_c>=d"A 6:!"IN)(k06<1䚻&U@:b/ˀe@/ `cn4"MTϙm-7@H딅s*D"?}ҋ4zE+t+ZSؾ#.?W!|o <^{U"p7. F|/@3_Lg^v~Y蛙g4>ErnWͯ?JnD@Rw,;i1Xzʻ1%IҳۢڢPg,f}N5hjwu>E uLխ<ŃmloM5gX`N7 i- @r,C Y<u(öȷ-Y*eg*w!wԞ2C8!Jf#PR;Xhj_YDrJő#lH);񆇘6ҷoVbYe@ }`I,Y=ir{c VljBcRlVܞ28s+sטO [E'h-7zk[_N#D/I"t;d"h;2B9ݻ8$ůC_WƜ}x;daŒG\/ֻvڜEI `/Y`|]`g $I&+aOƲf޸kHwV4*{}Oz- =O%S]ֹ50PTR?aNntqGivA6]!:b~5.PŝN wg!>|%eWW.r p@!W\hY¾xI OE_7j|s2Whff+P#=01`^1mj.xh40+S"=,+o= ByCqSQtKGBP6Y -X m|:%>.V[b..96a&`U %̃%koآfP]bбʳ~kx[b_uIŃH&KhaAc:̑]<3v uLk.(ҵ>PbhpS_sj%v ж!Yx"{<,t.:4E[-[xK{v(1‰[; {m{ Hw#jԾ)oB7#sS˪ =$r aY}ETQd4gZ^f#"HRj:3;;f eTQD#Wcu\TMw.`+SNK>QΡ}J\0%`ywbHAP%=;ꦏZs<9,#RW[ԫXR_`9J7jl3Px?X6fCH,[6(|Swopl [RԅLD4m`C[-9Lb]Z)u0] 8fҞZh3@Jg Knk~u$ /b宸J:'t[_?l5-5XWA 6.UXSS|ϘF2G(,"ʆ~5MtTm ?7;6I'T۹ji0T _".;@i`7^B1Vz&}$BP"$97ΦPpD2AbkE~F-%b2U0S8z" ɋp^-z,-f*MmY43F$g?vyȷ>iQXf~L( ]ipeӐBCnz%BvTܠ~$*#&A_Yb?cJAKJ}fmLuȽ߼IOLLPTS`go*4H?d{m]'.rJR?B3;ƫlv^,WP#8D9' _@h_C1bs9uD΁մ7LRcP0ЧVEB_ G)KvߒZ y>SD==XSftxY& zuz{?(wOv"d[ ]ɒ|.O4QY~6XS i,DYOPDGb:Ĕ]kӖ[wc;G7gL\d€z2G?>OG.GɸL< >8WQ>*}Qa%=$eZy2N+9Sp?ޫ~%u=* CdkP8uNP j\s2ᘵJC494i8xS@J, &F,X$ v, "E;2ϖ3*-VV;h\#2RN` tZwJ,,H}ҖF WQ2ڧ[X2Yi]fvp<”{.笫ioN5tOVz[>x$ňNf=B gXH]]X5Lj$dSZ@Vi̲qQ-YyY0=WmՃ, 6\M_2weckF͑;Mi(}+"M3eV6CBUdqޝUnTvõ,njze$S;31EM L~g1Xs r6=d%8C-Op$ zԜ8G1bMfMDC;'Qyv W5—~UX>3cv)#2տtaD|SEON!@%D1mGu;fCD.RVKrʽu0U/t|[P~Ya?!]uaKYN71C3w=LGߗ1k\s4+4'P >P]FR/wԗ0/jmnTۇԡeE4'ᇨv0H%P[ps!~ʁ Mg"C0N3'ĪҴP ;+۰waY]֩-mcK_qYS3k$)c֣ETvUtlx΢⋏ N)Lw[E]3 :fBE0 jo}G0HetFC!h^6 \?%U!텞Df]PQT|(ؿm--R鞿if*Ium;%n'RW)`Ybe^$*,FwͬH9bW(aS-NfzӃzqOR}yڥ8u O#3]_ZG2{^gVn:} nza:DM ZWrO`9:lE:rĦG) oң1(9]#Z]I"^$UY52C2 oM+hՇWk5x"?n5B'D(bE} 3e%IZe0ؾ" h ^"Am(jE "1Wm/o0#y0 \.ajwCMY|ê-o z@(qzd$^/Ax:ͥov͛ɿqIepGv["eQ%Ԟ,V< 5j>8 pt\lj^w-O%<Ddmv||WYoߌ#v4*pw"=aSn'@(^A/o\-#4tR*}( ja~?ԊsEi𳮊\HC ri榄4[.=ҍH nee Jc6S1 0z-Pɧ=14A 20hYA.h"av]&]V2iҳۇTO;טTWv ~\9f?\gcM13%rRd1Z^yNHBF؆Y>_d\'ۂuC jϭ(_ c Y"fAQqNCk'ˑQw,/։Z+ 7F [Ahy2܈ zxw8  cA4 v\UWg*d$m^yqtFl(K^[m.S3ܭ[@HC:ܱQ|^h8m:ZM+\${a(nN&"$2ld %M&7LrjQ`úuOU']Uљ<"`v[ .EӪx>Sv4pUv_tl*DWiU1[%r?}^laGY }9ύV2\`̘>:Re.k %|EJs#_&H!˓\زs;.{&wbkf w765V1Ǣ6);%詓WpEXեW6A Zvug,gd8ojṆm||1 _F7ЀΣ~$r`S-63WoӬ4:A5:ms&rf.rONI75FTӨ]Hf}Cn@aaaE,o}Q"4=Gx׉~CP&j|^/9yt s \?F??/Ձ`gz }gUbo]Řĵ?&4l6Z۲oLYq鏹FaJE ɴ*S2]Hӕ  %F\Hp3lc%זhOFTIlǤnml,qkña/mh#L올RG!2~kbi1h*J5ҭg]N[9%՝%;a-7W_[wbA×Ƭ煹^!èS?#OHI4һ~PS18~M ?XAr(SB7{ a[]m كPzĴnϯꔦ^6bE\ܨrMI +G8 PYfUFg<*]7N+G,wx,d##_}n '##ZEGvDl容?TWZcc`mLbwD#֛ZGt7ad]hPr7eNOtDg+*;[1p"lJMWT4nY8yu=6?tܐ/s(ot6@`ɧϩcWO^P>#hhYXAYrڵ+6_wtx#6d@n04Ѷ:1Gtj U5;]t1f{f˙{Zz1Ѕl|وlP(s :9k:wרo:3̀#bQu.,?=Qa9VB9IKT j-}$8H4T^ήK}pW͵Om\u>c3JMQ''8"4r+Z $hu.}=N!WmU;F:bT_o*a ~WLwH0q- K Z LɫF&GeI \71ܪR$0["5PՆݠm %8 ) .xyAdx 4~ЎkA;U'6o}0k?U>(BPfP "`9fkiIG\wQ3Ʈ箫AP+yz6=8 c2b67nܼ2Jf!^VE3|D$J!eB* ҌeB[ v3"2)YՈK |`혩sEnMG'(c<@S,,m }囻v_l twy13o} ߭5;Giejl&DQV1.R5{QzzMl޴[L Mmkj/d" &iy'ʈSfHǨbNʎ(9sYz<4,EOG-7)2Uk,P Fo^"}Teoy"cx[xk"wi\4 vۭfˠ-zVqgHrزs;z< pr 5%&>Y6 {= )SvB{@]Ă50JHNxNx3U}v`/Si>"V+HQ(oȡC1JJKgy1E: dw|n @%][?LUQ_"U04i F౨.eZnʡb&5-6œ(1,WCqVT}aXH<ӡGS)LH/ N+).u!~-ʧ_T" ``j> kUB[1E콓Hu їo9q@Gi&yK8 <u|o3gΏG%&hM6jEJfŏcd8?*Y(ArTKY- i>(<5dd^ 5~vp^18 TthiDcZ,㱡͉0`֞yTDE{8i˂JH;C64]_CyE1D]b9XP*{p9F!K(49[v$MniwA|7й\8G0Hb7r^6h|RhNhK4x5gz5mOE^biL!,:.Öԓ/?sB"@UnF\$t$E:AsXO;&tj8u/f&T'{iPkRv`,Pbo5dicG, 7L-;FS7z)]&3=ȌqѿQ"pNs9-u#Sĩ?8_l{?jhD#S jM<}!UE{&y .n+d`ØKf+&Ӌ&ZSGqHfl튡VC##J8Ko.9~sq͂~aZ֝axdԸ(6oj);_`@10kQ-x.9] Cwi q7S&Z}/K4|-xzvUy9⹲g9Ն<&TY$rbRT 琄.PPͶsiŏ3<x=?e]nvoĭN>(ԃ!sjd乃5] @iMrr;2`<B*A^bmi}F玬Fu G q7,a+g@l_0B`-#2P9Ou&XL=IgGl!e^*WMZ=IXc\XwέsH rVhO4 iskI@ `(H=fUw^jlJ$w ) #6EGtUo@Z亰1g~O_ `p8(r}x_b7<͑c4'ImsTOƋPGÿ>㈅E6{l _ hG`ad5*b>l#zzAS1B+ h&[$!ksC,\24. {ax/ x",5`@Gs& v;j?G9#e-xbi0hmNh~.ΰ&GIOCT_\%ql0(#oW"]gܫ$3PlLQLO*2<)# fjbܡ9d֣KY{}{;repA+UHNzgZN˛vcǠPD"v9*W^QٝK7HKja*BUq>9(>P) Wbc\D+(@m+5Fe~M uWt'fSet;DѥdPޟmUGiU?-&.\\({iv9J('XXZ6E2j[+prA69 (1G`3(\k2p5 $\}ML+k+w;e߭uq0Vy1CT_~kWB"UrK8$U}~8[J&lg!`oo}-] /iR^ŝfPcjYP.H)^~_uֿ{;(不o0:翔P"j]N%[Q#1C\tBs- ]n4GOxwk=\6oVȍ+}A%ʆ-E=D ڐx. aessġ;~a޾Up+Gk V PI zM4P> 9T-_9kO! SZ,sJ[A($D})L?~ E4HQ4){o= Cx'1X8^YK#Kajα+|RRL=^X"ۑ3|Lk#bidO)U|Я>f )Ar$_OR̈́@|'ƚJ} M#W ɒ%[LjK8 fNH~.1I(4 R;d748׈ R G3{Ho,s" 0Ub䥪l*BusQ0o٨ }喊07 {/NT\S;wK r" x(ez$IOۭ-$e%G*:61v'J XP `E d, ɋ3/Z m fuֹ,) ݺ!e +G]`h.lgrrޮ}82y Dn\? 1 xWdE1Fx Xԝc&c/b\ԺpQ( =oB*Vuj1IW4{s%K4)ʶOox# "ZS Ga3L']MuX1GI@  5C[}&Cg^wChZ.^z/dK[lyW݆6h!Ħc5iIeȥQ]-Jʒ}CHcH^8k,S@=/m3k:}82W4J Fqq7cψQ*8;I̒ءZҚ/ ?g6L&4,{R=ڶ{r_>6wXΆh}m)GRj;6qA:J1,q%RPu4Av>^);S/\ QN #bi^?^Z G. (rl=)#ٚlQa[m%֕&lT̀S5G+P^R& E~j<۞—MOݯg?%O;cB c@xrzQXs94,;Y x*L|E(2祯zNqf}u` FxkKsݭ*rQ/ fOjyIӚ,6y~1fY1t;*)?T d)/(O 6bQ5HG>踳NMjΧAzq>>iUNǙY-1hH#wA eᦧ@A>n|M %+5/9J;~Xaً,ZlpF|3AT=1lGgX9Y|މY!K|xƥoV6=f;/Q'02HH|}TUo\)љӻA" b] SB@v*k**G!3k'=bYVOo ~jD#J<в|[;= l\iql܃g9+ՈqQwP"ؼV} ?Mc9UJ E;! \ɚ-«k&sSvR|ƟQ|Ǯw"#` 5I87]ځ1tXVT#5FS{vNaL$Ogdeo,L_{>Y|GM7]f3vÇ-wECvXnX^40xDkUg Dp ~FϘ&@G`&>&w3k|S>gFWbVs>߯qfaxw'lKf%g*?gDɾ`s_ɍ=Á2d4i4Xn`l|WJHa( T7+S} }حSpE?rN@srȡVz;.fPై[`8a-C׏9;Ϊz"~u )da~hLh D3xjom]ыzGc4FNηWK5&V čHSpGXo{g8z#XRA;7}O}Vɴ:$A%fm~g1LM@t&%&rVn.?ֵEyBe#iD0mMx(EZCDy>1*΢*,oA\nR뉝7Ј‰ @ꊶc6ݠF\F{~0ľ1+oy&c :,݅<ԸM ;C)8  ^(/iզ2wގxHclC"b7RE6TُVru,Kc{C8#nJh'{[w{u{3#M R1yRw<\j%'_Wŗ↬*kka[־nÌUyUpN{bOᶰ7?ꔙLpzMVBcN}HDFoWxi8Bupz3bEimD>!-gyM+s |?m OT3E sބs.-$q+ s0ҳ;/8o49ΓǸ+` nx.jQ ui-rJy+Mу"w@_]L]!~AvhwGe7w7o 6\9 dCXݚK5!KYA_5-ý1y^%O<׉% P&4ك $ 6.,CCÓ-goE Mn(f3uaމ|_NAšmUhe#hDAMb ?QJ=db9_ b 5;tIgy ޽YWCVqZ4,XS[uCm@'#N%nN\DlF}'U"J4 TV$agrTr oknK*WCEN' A>T$*bSlMv./W@LHa5t |Ӳ2j@c2Vʈ۳fwB|Oћo! bgyUDzW;s\|M#4;l$au l}YAHqp. LŌM7.NJ^ [@.֬ߎS(.VYmк@{1O`p$Jk?],mn+к);nt@ eR?aGoO-tspVE yGv7 %){ݎnw(|07G7vlzH|}$U%~b_~DL)˩&u}pi6W˫d> jd+ˠWNVhy dbV~'!D׳|dX:da@ }7n#p^QFŒfLa3Cu8gŋ|+_onuII+怺Flĝ]IjEBtB6SMJjIGl[KW1m,;ԫ.ĕ=_p"7וG1+l{OIۮC&AkŜ\о+wn!Mܮ|l>r'6VLyqYf{Y~7 ͔k(A4O%pԠ8OV!"0lot;ia;4d.If\p#I)\ur[(.vGMRiΤz@Ո/JvZ, \ƃ# M|DM@ŔgĻi{- pI;D;ֳEQS '\VR}S c,$y;@2z9;B׿íOcIs4ҼG)dcmߞ-#KO3!x1ADfcCuʞbm?.7 `R{)lq@d-5@L*W"L(ͣ  |"Ym؄q[W+ K}ϺúYQtY_/)2 ɬ|Pݮvyr?kfNy<^%R^b,pϮ樾UPKUOlt]4Os辤{}Xv5m,>S?9 8gj||Lo(9= Z9F=ȵ#X+)*r=?1F?W=ʅ<ulӭ/UC?L)*j "}< BӚ_>ZȠjX>66'+dό&ZX`%6Tacy9Z(fݰl>%xB&V):ˑBw\pqv?-}f rPLjz]k}wk;P&v쨱\| c<Xט[s͙wH}fsi^ 2A|JBdsP"V+<  y ZҰTZ`2/QRfÌI@("'e.uI^ &@T*eYI&,( xp00/I>~(wJLM(wB3Yy( Љ;ݪxV upA6!~ԹSgVM_ZUţkZ·G4kP^(\FS 0jŸ 600}% o,[1Q" vฬT.sKnuC0ѽ ZSpsH,#K\w¢XoSgU<.^;KĂz6Y;^3q-7@^mnx p25*YzW2`Qz#ȥ~ @ڷoy)BR_{nk Κ; aHIj$&y}Q7uLZ{1 D@;wCUw;nRj._WYcL;@MaNH:Z }E~'3%ÿϽk[(َ60a7Nj]>(/v= ; MnAg7IoGFn03lK]^L*xnXw{SJiZ|+~30DF?vH٧1yPnPe&g5ks9v 02Jsa&brzS&(z23 Wc!znJ3bәulsx1:6#doVq63R})b"4*;Q]wGjQq@1uI!Ѿi".}Z#/Dp_x\#@핒NsE!wJc_;z"Vip;{X(S:4W#UU8ʒw^ \Ζ)Xp"Kϴ3pR/0(7D򽜐$3)'8cȌm̥-l("*x. 'Ƙ@}| ܊xq`TԺh@WcBYsAS` >F\/*A@4/hE@kQka a&l1 _[}瓵p-JPG7aEtg}E'r;<@i&9 {xقnnkɵF|t~R])Ҹ]Q,`f[U:h{ي|wO2\p3N>e w? L?%YoT'ٺzIR?Kb[Ωc{& mx\4zQA|w߆1yxF*/b@_xϴM䇫ZwT 9.Ƥ}! 6+eu5*UpmzCrx/?^nJ Bx?tj%BP{ݚpJ ;sC%,XV:=!!R;jTn@㽲BN g&~75ibu,#L؂^'+a_l9iNUO&I^5: t ܘp@`)h$t8[PiP/]e4;/;YOnxViFn%!"Hk-} yuB%bо lt|\q#ht۸ةM:RDH6K.F:,)P&xfYP;`M3ABw4SQ۾\7}}0*Ю4}B}$) U^cggMLƕHs4F-?%]e(ZA-66g[Fd|2~ێ67:5aڌ i 쮵 Aldgl* gy[i_]C;yI;!7Kkz;x_MSۉ8UÅ}j.2sڤ&U:և 65_@ܖ}d D짨$Q0}s׳5Y_d`ېn +5Էvr #> sGVDŽ6;1SCow~*e竡_C M*udQʊű"!mќK艩T^C!4ͩQMxyתeoAʫ 8I퀷ۉzw8h9R &әvOޘz?3ɓܴLƎ1U"K$ gC /zrtWqe]Or|π{!}uN[U?AL\ҊF(lW"1K.cTn|m\TS>}h0x۬`c V<*6۶-dVQ0'5Qw^mN%TyZo @X ;Oy]ZF;ۉx(dKqliiIm1+u"O;jW9]U-Q7H,xYd)_zg.F:^gjXf]SFE\w_׈ź7#'%Xev>uG`^[s~TIY{!6$Dy)h>/+yo1t@z$5`׉8hs¤|3F W;'hڴ(|-3\ 62;@%|K1%݄ĥ`p- —58PC/9]ǤV65D|!ʋĩE\St4w0 !P Jɾ%Y1ɰm-"`g\:d \WA?,|`I k~ u~fCᫌd cJV>,Xc\nDqB ͼQ&{Y-O!֯A,%''c3ƓFYF~(:T⻴e"-X-{Շfn`[>6lB,lAY8 'l8󶇟 ,Ag/{\&G)yH4{j&E4"~lu6;+eWjT=@s{L 1 twb+]}r;T*P`4r jĘQrp*L(3> ':!-;%j{;ٗ=uj&y4—ó9h=U q-lGS$n)wP UgZ }Þg&[wYhiHRئƤH(h™9z"cQtrA4$@!5_e IV}t3U3VD'<@uŴ0*bT|Y;s8gI"3#S^_Մ M Z8]tJVGȾϢd׸Hc 'ׇNkç`' =g+NEШu]cCɥ^(YCZi!n[lr1p*Am#WpM3}MdѦMlu%Mv}'F@`>!wyP>eV01Y4.9UtE`s78Tq,G)2ө9V2\re}fszoc`2<P)Ru}c>vN1 J.+R#6໺lWdիfV۹Rur\i" "%EW10*oH׃@68[1X}h= `Sd(+Six9MV1. _"J4?'?/`慘Pxp[JR(_^14c>cioځ4=㕠f\ * {.9aN %GNiaEܗz*=h"U!%P4=^bvV~FF "8 hc qw~mM&N-׆9ьLF( >vE4(Zğw3թsRBpϩWmo)M ,*S;e lbkicfMshc{3M&V2=R IQ͈JbC Ixd wEP[*2`='x^3r^\ă6↸v5v)&E.#Q=7yn[mcaw "Tj4٫tCKbYpt\6' ;G3tH+Tg)ηVZ2|]bEۄ:BWʶK }S),ə0Byx+H I^"CtGD4;POF;[/UrYԙ4>yň7cQ6EpРl/x9zir=82G||*X#Rxd>Sphg$er_&1GωQ|mX8c0| n5LLӭنluAcY?p-32Ɯ8R'ů BN\.15Vߘr#3= L.tihI=Ϗie@eWsN@ޗr^bWhMZ^5YT:F2LDQg8!4c^w8;Ӿ7aܾj5ʹ+-hy6(oє<'(P\U-5!U K}p$~>os@|oXv|K:jKn~djvdf |uDF- x5͘Ύ6܅gN>xW|lAAIc ;kR-t'`%"TȹqVդW].I3 Vߣ7gH=9R*54,GjE`W! *rr#5WB뙡k< G0T3 =b¸{KY.zaz[x,o{Ӆ=T{̺uL+[!5tM]~ڀyQˮhۺO|1?cvY&zH7ԍХ-؆B)?n-* c߆KtmCm IY74&8p1$g}c齠wjE<^O{trzc*YNդ%q14ۏ["HmRM W;8 u%`I14-㞔4i.KhcwJ haomUhRsM4Wn2f}% /X[ Kͮ"A(7qӌ3ɧˑb_7 ~W9s`L4%ѺIV'@F/)EE5V?0q,b鑄{C|Jx"Yl:(/^ ;0z)em$B6 Mo4{i{ё q2b% t|0ĎUXDs Q1%$U-a=O^͵hh|\5ݔ<H>q*K:*<g6S݂w]]5Jٷ(H_ʢQG@Ficɛs﨏s\/:˭K5{`MVⱻo>7DZEfT 2qRK rZe<}~ o5YE•1J M2ՍFkaK)D>_;8r7o{%iڦDu'KΦnϓ L!۱ĻMS!o@-ֻxGjA5 ^`P8o(/z{M|/8Q9A1708[:#N1~Ft\u qLnj@ho:q"| a &|_n,S9Ԯ@-F#Ae¶72~\,a;,'2K t$K:> ,zظrZ9y}ˤ8\!(AMrNTN>YٵP 4؁$=jLV'rN)ńP@ "F=u* S:ѓ[K=#*\s$bmoՑg5}a҇H!߸Xnz!h' ۔}ES n/-:Pd6"r0VLO;jCyɀoԂQ^nԣB1_>8ϓwg8uzHg3Kwr<5ӵ*yAM>mt:9\YA߫&Y{ytkBi!t,MMs_(8&Qy`wZ=̒RD`s%@-ݣGU->f/M | =ƠE8.3%X6T^_)ԝy2@Q9y924 Bq̛_sjy1z7[O.rAZP<{"<9mA_22Er4-dTPcQ_:yDʎoI=ŒP7 j'GMl!#gvxC_LFL PR+TDgyLÔ=]e vp.Q.lŤ#|.l~.q6) R#< )2 ߀\sO|[M:Z6dƆH*zi*,v{ QۮֻUQ%8C^ 1a*.z}ՑN> = V/F>veGy[Xm ˈU>*{&!\N{}46/[ 'c6VZ15$X=Ȍj[[p(t&OkE y+cS\A QE‡ǂqS!In1렛R Wol_Ƭ4[ 8ٴǷq?S֠Knbt :x+|=ZFyc}&^=ߝQAu(N_aKdC]$A]zOea]QV-+h58.rocn Ǐ@EA0B{$|7¢#sU=rY-o ``AaM`1Ta?Zg0\4pTbW_fNRiG\qhDьEżqr6VgaZf%&B0o$^;RW=vH|ozT@NCC8 5~`Z9 lN /ޱPeu'g~û7 ~?Kk)mp{tG| §2->}ܧs&"?_?XoUpsXDNq3!g B-Y@;z9>'m i0q7VY ԯyT_$Qd95f_\UR"q9_$ d֊B\Zhi].;1eSF)( ݄Gd+J/f#ʤ~bWݍaВ{^پC`r[;8(.vK'X^uzu{eo{nSY/٪i=!14?wڜu_^z&qN{>c=|n#ߣߵcҲe"bW̽F )-Jcq1HA;ȷ2i۫GZ)PF4؋H{BQ>x-x6qi%qr(J5XYP2Xr|Y/h%|YvcJVNXDHaU{6Bi9Rl.S'/y\Nݡ.6sB >pShm,K}R]Ļd]IꒌZ$Y!?Z;~w|gOPr Y@G}0X %  Jv"-bJ-@(ښ<ܮ`~= m G/* b90nIH\j9v`kIVjL;yF8zM(k y5[aO%n|s2#Mx닍m]4G$KjՄK5RK҅'v뚻_]gFhRtN,ǀo߷o2 F`}ڈa}vHZNYbWa" ʎ&c 29<ҿr ߊp͊< cdnWDY_Vн9P){L_@TI¹ J^,3@{*.aqҹ4XĚ:G6},Neھ|@ݠyr[f[[- QD"QD=_vYp_UFXag$gȣxG;Ӎr ɍ$ l)?,n p<"sktޗF , ,U _=ce$c՛ +Ywi8l#,7cr(VNr\/fS &׆%BlLGDOAhd`9̝-TKECG. r{k8lZI RkRҁT "=a R*k9{>$0 Z)HU[^E"aǒW3(W֢${A,չrzze[בB7̊㓮!NBnTήC,jp\X1jH@ um&_6sTRAL,2(F1_RmRcRiKAw5Y(Pjp6&EMNSĊw.Q@ߣ>~dۂQL<E$VIDlo:4s;,Z,)`N `>x8ޗ1؍.r)L-bĜ|9)u N@ [vQv.|(ö#9% 7TBWVUUPʫw?GKoAKD4M ml-*&]/fjg/DZ%֌҉Pvvq%dH vOuFaJmD;WP]: >Jc9ݺj %'x1QoL13;Qqݎޅ^l (rvަrs{jQ U?^fbzUX}>(dq"W%|} }w#a]jBV %uK,VSbvǺGzR<|@"AMb ( `)It<;Z_9ճڜhv'QzO%{=X0~(69,z~A$|1kdDJO]`B{Y`}'4ê߮0;ڬp'4&c\EIʡXSϮ!`kgq3̓=ˉX gZ>s 1,"7MO,i_h岆X8oD+ُPrN@lֹX Q wg~Nfao$~]L'd#j,n#pU"ǎ+OYaW Wt{d}.ID0#L75|dy\ oSo攥+\z@o_?wL+O>]ÐIri0,Z?S]W_K[H:kk*pY窓i@iKT+TD2f̠ ka*iw'8[[Jֽ[\>_T5'u"gN]z&~8G#mw {ZyDpυ xDULNLH^~,qx"ݑK؍-AV"El5nGے{p֔7Q0V< KONK`R#00T*$-NHv!߸zte FM*_TMQ-ٮAG&0Lk,l>~mQ|?&?H@,tbN | g7>[/1Nӳ  .QZ"Mlo*!n;:vK$b}cB$C%r͸Yb!?v)ES:>MU3z  #䄱*UN8&8~RN@/4%;7ߘ~x~$bZ-.Ԭ%Θ#7F>|atӞ(S! ^'8۩YxCjIfC߻&ՠǢ^+g/ L׌SWxwo~ğH0QM>B~ͬ$>{Dֿ3MҀw`=#<RZG{ZLab! )gk/q+}=KuťmY@]_3Z!wgnCK`^-Dkmƙ(!JQ4bR1 (AyzoJHOHv+e6K[v-nTx# |=.\~^XO̶i?BӇ%kiq;t"VΜh˞1b/_hʏں+sic'LҔJ|UZms# en-=`|Z۲r"B˃X6`f Pʼc@p}Gݖ˷ԤW'9qkO:7>4 Ϊ@/lZq'OPjy&7*b1 qwaF]V cț{"D\셛.Y";T=])z M2fby!YN{QҕjvS-˔m_F?:/ ;C1T~!_\6n`1ޝv]A-ڑFACI^b+Lh۳Mϓ72 ۷~t#|!XlٝPr[  nI^ITYUZYs[Z|-=F?3 P L(lZ-[?ujVċuKt곭vZDykMO:3_Xĺ"0}&p^ /b4.H1w8l2' PI[4pkz%5 )bTwekeNW):YkY5@hV `DvXr4Rg0PۿEq 4IeѮXO[&INYe`PZ|Q_ҩ1d}kHWZ\YY~&no5l]U-Ë"bXx|^Qh[1`-ISln&L^FaE32mJD62ѪHSo-ZhȊu`-Ӊ{Zh D&QCǢݖ0ye"c%`+?y=?[ˣaYm(*lLO0 uzKC2B+ҡqPY0B')1 H,Iy=ހ7' 4_\N 2Ky̱2vS7U9Eg 0WoGzY4&q`>qĮY궕āCo'RpwTYpwSt;8KȖtPӥٳgh/[,v!T_waz=䇨5m6/]&X_'Jkd26 US6l?MhO'K gB03> Z坷p>bZ3$HVӥwr`x,!K˸l#C@QX8{w5915|>%dӣfiۭF 72xhyKO:Wg'v4AR'7$l ^sEEm$%ex,O] &qnjJ򽘵 "j^CGѓO |N;%J8Nz6u j~Zc\UKu$(I-vn)P~7H$s!|u*5J?LG#zwLKfmT*œ|,]u:zTㄴfTۜ.̹ EA?F+LZ7͟K7/ 0fdrޮx{ӷE l39Jf?٬ځm Z;N%ԀWe:W#v7 菒KiW e(2gFh_+Z0X a8X|VfW- zhTW޴5Y9yӢ 䝐=f25mFAw 3 lU?ѵXSf2gѧp3 ։<^s=>Y*8XP VIO,{MB *cU@yOkC*X||zIKq }! 59&ETXldZXW]Gatu/!s<4${-0Z4y+z:k` Cyn&A1]v%FOm8Ne|nF%,{K\"^{:6m܍wmE( 򮹦s~GYbdS`m#W֛ 7y.~Lfdz^5>]I!i~  [tחyKawrܨkN=\|?J#Wj:EO|.ǡTB!=o"Ƚ}Ĝ^;<D!Ôzb?B5:Y&A0:fUb9po*ql7˒%o|'';򴬰D*{ba:j]tBt9 {掩[W]9 Dhbw`iP!&ƃ}1ꃔ˧V>eg4xf^ȼ~oQШ* Ûg]`t= ڪ]^P G j2/"W<朦{1Mi+ZX,$˜QGzF>J@@4L{LI 9Tl=9jsMyyLOƠD ty$C앩QMjpl?uCU=3t;@XJ'PRT\Hׁ9cqJAzrhvݘ EhO!aLo@gZՏќ[]qOX ~é3%Q۴C ^Ehp9iB>i$hJMwmyQnV[UV&eVwm voA>!c7U^Q A !h=q6k+wOÍ?j}НW30g A%o-]js3{VU'חzT$+!.w v}pҦ J{W!_k},T 9:r,"`-Amaz-@Ғ-|o U*5EV*_]G66U)$).5`t.YSG? KQQ=xSEOURZ9eYRԺQ ⃟Fi*kGhW}fmQ-$0=goߴ%dz+hz kY}?h^4RriM{q,B=s \I`k*EtVa#+-wn+I4hl' ފz!8 ՞=OSZM{5tcZǗ^U^/QRKpxVMz 2lYScꭧ2ܮzX0zg#]BaljQjL!nVk#=R9zM} C je$N"Rabv5(M"jܞM¶FgbF ?rO)#L**]zetG离ۆhYs_@ɅvAmʢMEB_ٌ+ ly [p!5y*U\]Xo O v,˺Q7,xN#/D8.noʑwcfGF}]mVՋx k" %.Mjpso8u9/B&U^p$K_(uaYNh9\ E]6&*l`AQLI"oq҆gfBn~wzYM'i jxBf|>ζ 3ΏX,_ׯI8 BiV,ޝ8wU SAk"K? {1CDOy 17oATE%j)Xt ]9YncV!.ڦRN}L*-+ C_Ȯ?B $x G⢚O~1I1 r>2yj7G!,ƫw?윯 Œ@zt K27%t=M_".nH?3oIq KFW ]2ٮ|4U*QGjU>cl5kn/W>v3ڹoف1Z- Z~&X]Y0"tHb4nfcެ^hoLo}mΗd*?7kCa#Q^:MLzIU*qWWtdj /(?y|g_x̳油jT ȉq5nG7 fV~)uhK7zБI|7/ZGZ/Y.˰v#]{™`ZF.UP=hBTv{$,|[` [N<5R;#OG"ܙ3/ENZU`H;wSDHk B0byx]K'\$rws8j3"l~Oob}Pumx`hJV AKց BYէLw7<e7:Mp$>W jRx#'cDNznEJƒ^\6'9pς$pQ*]H$g>;ÑI ϋJg;tmpj%J7[`16lDܽ!]l~T=`Yk]f% Ov鮑!( :S-kӜk(),_3 B?67Y%2^]4Fqh0'LTx{n肩j=6 3< HEGf (y3+ ?F<E7`??.2ARxp?J-|iPT*@M=۟X!?a1ŒtOĺ}ʔZ-~@ NE{zji|H*^εZ`M~0-CxT^qI~j2mwSVk= OO ܪwk / k@;J;T Ʈ)_$jgk%:`XwHp?ȫgN 彽!d˔hH ?/]@'ocVH0X8B;_9[+kҤh3Tp}U{Z tLf"­_HWAY3hLs.h]y-Uo]>2"?,@i[} <4ofe64ʕ+`NLxwZ`B<^ߩ%w1ۦx+^ _?!6Gӄ#6ꣵ{7ÑQ#`?vRnF2Am?x Ec"pme:Z= FڙG4o58vI2O#\+S@(<-z\!y+ ~?*L 1>Ռ5vPq[:OO@'˵ ?ͦ)jiLZYvªVNcaf^2GjV&BWP5S儓ݯPki'hg lgZTũ[&{e7>HF)%5J3lL&56hG'wע 'bߙb5E,j.w@K%-]K{.LR;#u]uaM_ŇK`e ɜ{rS$ce%ZM;ITpf{J$;I3`qyZvc7y4nGƎ\I[v$'$uv4.,yp## H Jrzuhv 3>A)/RZZ3 ;8&8E7@jD:1]Cm4pepiI{|oB8qq:fTij U\WɻFЎ70^lJ%ēY%RgbL-b12P+PGgb-eHX$|!ąR= ʋܦҳNK%oSsK*彑To86,ֆ,liBVܵ׵y@0B$EFDE%$b§'| Cz W*L|wo7|2Ocn@(޴9l/+:3HoYfI2g* BRN)>w#n Z1"1&*=do~9R\ylU7`r~FE4qQ̽~%DžJ1PJM9DV{_gz֡:^}tE&ԫLZ0p#~Vtm -cXdz8C=z$(fMHxߏ)]O*QK4m'x$Jm%Յ+ KDǃpB DNJÜ0|_JXhc4?|DIRySҒEKRRAnhu NǏ?骻k]91+&0O8f l&ͳ} BoK}3'r<>H3t䱭Qy*o-6e8p=n~̗1kD.,f[,1)?ǩϞĊnWfHw. 0 {] ɸjPBe>t]}lGVG_Kb@ .g^CH!yhHĴ b qJt} +hgJ>BoPZH{/NJSɃ.VWL0'd19`sbTaIT`OK L1}h2yJ镙I+,'5d2{+z[ )_[Mh(¬,tceD!6oO}0rQA@Ć@]eفM=qJ(SYZa*Avի)V&8P^,Ѵuc%p@q◦؅;odBw^)/Mu~yShڪ+}&!'蹥9,c*bIa󪈨uu5מoqܪW q:Qaj{"0lXDWW,T{OFSgF _|xL|1pglEF𽒄\ͨSƀ$uMvc7H\ \ C '|Hy4 %a fd$zhʛ,;*NTxFC2 8tj\piNNF'R5ϯMRTk|<q\,%}T^Aڰ3db.Lx{YK>CM&gcw^/Knkjүq?clI7GmBi6'Xbųl`-캸# l)Y Hz5GO$?xmTr)?!pOLOC{d3 uhVzٵ;t,7ϓ1%7l仜oh~QvL$26ףr{BP&-z1R AhR|L^KKu؅Ss5%ÉgW) pG(,:f G"NkKcCSW ~@k4οTBwij7y4! A+cj;xKn#P} 2$!^$0u[xӛ8gd=D `=[6m} t/sQt 9Q.3a-?!jtt/@gTFx뷻hQOV8ٖ/|T6?Uʀ]PHG/ ^-͝*;QX@%.wAmǒذDO"p\b6#hj>\ dUYxRX #B3=  dف2lHn%o#jvg& .dƠLOf%v Dn\{d4?O1k #|nGXOE8NiPQғaC@R>^m(\g:[HGb镚Cg.WoG'ߗW:sT\&$p0 B;P!6 r= Enه^&`?JcQu!w~1k5U LRc`lbt{# [-&҃[9zkHL57\eu"rĜ0)4+mLvLj6mp i ,D7&5%ѱ"fuKѸ WPNԆ:X"m^<űVN.}ky4CZі9O%6`|GK/T/Υ ]{Vg/!TiX#PA]o?e.Oޠ1x븀_]WCRZËju *& (yoМW_(a;-)a!00aF,@~Фf_}ֶWĆ^O8lí\zܑڲsK!'Qj Wa^(h>^/D ?"F򤅁v1͠t ۛ #58sMq{4[[ mP<bLtl0u$ %Z1 /%Z x'0U(aayA^XU R ܺNe)ID7"{vat3$ЃNZ[H%DLW0anhouߨH͚)sLhެ & ."*:&qAeZeҞdNKV,{LϷ].w}{g.pvЮX⩀CoȒsQnz݈ƊA ֩'ʤ,3*̎ŶoE7y&59s9;I)׭@%>S$=̉5 :UU ޔ8cySΖ a[Aţt؏׈V+ ]N35 <+Hg4k#·57a`3q Yiz+2ƒJd8=Vvɏ6h>%HmH$ !n1tG[β' ¿IrՎrdvGv/.աͮy_ &4)s vS`q=>]0ki, <ɟ{˅ 4%q%WC谲ox]r P0޳;dl K*4h_cx%&r :F)6'J{ĄyQ~Ѱ_ ȶV^ʞFfP8fƀ_:$aȄ6:M(F.ZA~@ysaP;a.|T)QJx̘޶@C9S,`gG:ǑqyqtճVa GszeH5RVK?#-Wl?[[jP읂ZN1_OmmDR۞ *@N[Ticc(_fD3T쪾h#r0~&iJMa8b'O#VvDAt8dwsYRJd *fIFZIh Ͽ1ٌl%aܬnA" wuyz?r} 82$||п5_s0~ۥaXV N VAuK4= g7YdGFQ)=9h [ ߾ @&q,CG/2!lRCW֣)D)g+\E:ϴ?st gx(bG~:{fārc 8㤗;7WAJ;7B wS_"Ǭ ŒY}H\(V J l`Zro>kߺueZ?n,sN#k@Rlsh(7FOP"w,w>yA Cx:s$boV W+Țt]JXx5 ZZ.2 ꩱw1uVl_Tqq녍kElZC҇Y+ (1k$c6 ⸅ ;9kZFUgV9rj σ/ZCsJ r~ >6TWWE6þ}(ա'q Bdy<$M{ezrY9뭚hOƱd=K^Z2%ck$L]`,m~du 9L'O=b %*^ZN8'R_Vw۹ZٝVbϿBBo?;*F N+O~rʈKid l⠋ WfG{.؇ .KOwԃrj'*ڍ%xcʷwcB˘z>al6>'T4mڤ45N$>88Z=eAyLk0I?!cuLmQ"10z Sߋ\XYTf՗R6r_F ZKn>ٽw`LDUM,Z}|A/{АA2Ҏ5.1̈';JSv%Sf?X_T{qEPX>VW>E`H(M>XA󝹼n+Mo"<+&A !SVtڅ0 BY9.O0O½TG 0g-1]pQdnnӫD5>HK8ZХjC ,kd xѬz'P5;*qk_>t,ݽ}iӌVJ2IwJ{I0JZ 10;,:G_<'/0c&"F&\~X-䏤L|F.Y"3-[[iQ3sN$jUE=.M3; ;enT4dY3=΍1:a#YO.Pvȍ `U7zǁ6p[0"O5!OWCi%M)o,6@f & '4ٜ mpk~+WdžU߹In0Qc^~H[L#m[tUs͆"0ѽ?QFe7)WL Q*BX+y]MFIPTIeN< ]1DE<- TV߶vg"LLoA!6x^N 3 =FY%15ॼAb:)2m=bVV8,CeTjˤ>Ln?af1A~#/{)%%_"5 f~ j="vmVå$jy*NrO@*G$s4,ȝ @y\L~r% 0ҥE]MJӠ0Qfl #O?OгvZ>Ee,pFKW!K}*rI.qxK\0dQ#Mkr8lkΈ*!H欩bɿ V54\݇GG/~x%{Jz_[Gl&L-"\hʪpT*&rg`F n f+kL8dpd3}mͯ] >1¿ :^ qs l?;IPjKWv!V)lKB+L涩i c}mzz}tkrz+W55C͞'>%^ZLv SX8CEW 5kzJΠC:\NăiONnVj G7C$ϼdt9.NTDp SXk3;Dv{YzvCKT,`7s&vd4;jF`zg"GTT{IFrUcsցkj{djP3{źCU- 6ųq:WV= \}j¢c&dJ!L 4.!ނO;eB9HiROj´#xJor+&+k {!ξsG7wWʩ)NhiFi ީ%"؞Yo8'm2D[R\9#Sq| wa>"/#1]Ĕ{:'"lTࠟ4~ayټ1|@}OD] aJ ߪoTT.XT7E8ȁlC.ab_pIdB 6,i 78(hILs!NJiX`$ROpS-媐IJ(_w}iޫ8?#6]UBL_XMqbs?6dSUmoA=yǘcamF`?dKM5B]!uw,\(h:zTPսB:=!Nl %]t0FF =F.xŬxH9>AuNHR-4:|Q5]bA+mYb ̠8Zv5>ޡx~)L ^bQO)w֎#~<3eMͭ IaAEV,pHQaB>$/j}sXl̇N+N"D2󵿴pBGzs2e/oiАQX_ q&k4++O)09ރ6.L}OaGhS/Mojt<Zō VS~h&CWt _n}X>xPuy4~^}>4'w܉7ՙ`RH*S)] i"k, s`knm:V}c,VRv]⊙;Nθ\h4 L^yz7gr_8aT[_fZՋZr%Y z;۬~bpmgQυ(=v'Z1RL0_ח:: CoW|M"r{h ތU9t7/iIJkQS׍"T0Bcrq69iq*}ZRl"Ow4m#"-.b 2MͲ}s%֒>%@Q4YPa_|}S$<\= <=C+<ξ: dzC|L_;'dG6@M~EU5H+8cx{`VMtG(%P/{ac|#O[^'@<%mcCy~x`G0r)W9ot0Jo Rc3~~z"UA [8;Gmbr^v>=yL=gj쪷dZf \xhNV-ЮEY DBS3/+0 ]LO[2mP~c(?Rw"YD'|ַCozgVrADތ#7j邬˿@*l-!{yPALq~0UX*o:O);yy.̋ PĆ hAMe9$lZSrOzEm](ش溊dA5R?GO&B>NF~F\mՀS1ؾ"Q*#OCвSfQ~g#%^SaTʽ,]/# yK)>n/qމ= SG<ة}ʦY\P8KXA>O;MܡYΉYŶ`D.^aה3F>w\Q FBb<V} iʽJkt>H#_8 J%,T|J>D)?ϔ2ո>!}d\i CѶiiiHQ)y2ZRu*\o8B&|H:L0ta2N1^6 Y2 .t6i#XwP[_&PXܾm#աX w=K}N5ؤP7pYy9R=ߜްkYq$vRý£?]v\AK-Qͤ`7(Z#,Kϓu_zׇ Hq_u.ʈLEcF#5gmGDDR! BXYk'0'Q rt'K!~T=w&G"#CCo$͖CC~xP4G|ϑ&=S Y|B@H~Ifڜہԍv:GPF.M  ԒcF#%0f7`ύ# ֥j`%OjzqGoCa-xTH! ㉸| nWC͛^Lp57FM'<C| hwIv2KlzZA[#zWZW ϊT2yk?y,ʚ\~=,1[ئ/0BʢKzm"sp"d~㉍G 0A!rP:'D ^ oo|ך9<KY^WyT@ǥY$W$WyU[\˅DDV̪d_0x١T1j')>cG2,B5p`Qؠ3ƶ"h*TJj6a5=DI)grg/vqR*I^p8(sBF=-lK7 \+\](?'[Pz@)fdHMS xu0J@|b֗c%'+~ vp~$4E^H6A1bQ!TwھP<6dIG 逘}CYo͟GX=> Suw5)Š`FwC՗/ݺP6Ȟ5 Y.-zb~U)O|NYfL%A᷅Azz-oz9ߗw7B(drXW,=)ןݣ5y7QOmDb=_h)1osԭIe3И#*/[_ "T1pPBэ*a>ϲ`xHu[qЎߩm&nC@W) pp!k^b0 vUHZcay4 :S+AnEX*:N֗kB'L0~zĀmytVhj:d1X1EiR.VomA d1%;Υ9}ԔyT X{'-̓?|hm*3כC]X%wDoh-LiꚆLz֒ʜ"rq?i\[I JŽёz@g'|Wmp>~N1&ԩn D2y!&̈́_+A'V;lWR`2glzo6&_Ԫ m C$$W,s>H<֣z-+ o4hۊ4HHlMBui9pa=ɘ 3$ 2MDE*kFY,+MB駔tQ5~0e_f6gZ"Oy r f?js|B'niBʵL7Ej`Xo{>o5r HmM>rtBQtObY g\+Fm?O| a8:f:՜ҿ 9^5i9]'{k=n >5T&ZYY7ᅬ2 Ps{ 2Ny(LqG*Yee9K"q2Ym9̊}V܎'[ym=7?C1B '8]l]^]NUkA"ANrGC[Ô/[677+QYdܸ766&y Cgշ'8ftپ]xAar =}>y)oȔ~$NT&4z}P{}xiwC7؂וy6ڤl䇭1"۽s.qۍ Z ,UGrի= E25YM [ %яG䢊N{6,ys#=4RaX5Z ny%J!hL=\~w~*&k6`:Uál#I)BbAW:_?|Eq.qP7 ъlu1Qzsf73?z>_A6`kH.v֩b+veDV fK-| N2=PA%.{3I̓檈\vuO8fHVmZ*"㳳YMiLV^fj~ߤU5em%VhL8IXY0>f^jl\(o9'^HfMIBm/4Asr[Ґd/r4,upYM9SPgl`r}V71Toՠ~2}`ix.PX $vXo{2 wi>jRd(Bhqf(h]v,>` >`eMۡҺ^Yo.,D}VRX,IX#j b1H"P&^ Eh,e /E>t1"5'Gta/uSUa7s=DPaS )~eKo 5|zɐ hrM3D_="4;GFAD u[x%X*5: ڄpPVO9nz}] J{]2-믞W}/xv`Sk^ ,k\+/ "daA}Ao~~voMw x(/z%K\/>丌DmK\Gq[rD>{< 3%H́K(h=|SbH7y d'X%"H'g ݉`Κ_3*x ̦:-.),9 ԚCHêчo0sr G)q( :S߉oK/=ªo.oB# \d=rҦTۏ|&q (lƈg00z1+P.dLM +=p!V!S'YJIM'Aͼnw9s5^f8O2wM x*\d8M*x4.~bm6^{*6qaV [Qa0)dhn=8:"ڟakֵu/P$Bope߿'< ά!: g&2]Jw.\A".5+rYZz`\*>n_ PA ^ܼh/ j6կ !w<98՚#}~);&Fg,6^=硆C .v%oF]nU4|fu/06B;T59dpxAb=Ϭي|n1ž:s׾FPY+_Tp'`gmeci@ɲ̀['jLO( Kj6zb. hʮݳpDӤ-73.`g3ΨqY$m{ӭm%P9 *6GXz3I#X J;=D-*^z|:uvtPN;'@W?JueBp|5iYqD=yT|z\@ {>։Ɨ<̣e(.]uΫdC5#'qMcP_q b/kw?2۹dK/y7 U`# R#(YS D~8E@R,Z;Q'|{!^?I?"0)!& 6ڶF*{-xN<ڌsD51ЫYfݤ|_[Gk W(G,}gcбW#-LwIR'FA:^Ӗ{zh"HٶAXc|I^lav q%/w$C^㣫V1yacۯw5Spk_QjTg3t<2qՠJˍܕ^G^eD1--5sgV_N*]~INpUOZ8CV9>+\+\Zz=Ztv>Ve2&zuI`JomxWֺSZ9{w.مA;o$+}I6:|}Ms y82,3 WJr*b7vXZ5g^ O%Ό*Aq 1{,;b+iLmQߢ$'̘a Bf OEYvJ# iʹ怒' IcXq%'B7 .A 4D;po+ \ >1kiF>CF[][N|- $[ "ٵ6RSK\D^H -VE?= J=FWlEC&JVYKp.ƖؒXSl/|;EX88p-?*; ΅4B6b]02`SPr3|o46oRMާ6zz"USF ^]7ʘi# ]H|XܠbC yp{ӿ#a)7 -E, 0 n3I3v<A9ˑD;Hsz4\~C\U._~?AwsRif}&^&&'KQDqskd]C=dϊ'}ͅm0͛!Ҿ#F1 iq q;_qG@g?r 92Hs0b ê &˰݆k\-zkGKDtM(ȺL_:0e7|v>o20KDbgCdS-͈^ad=PB1ڐ7T mwAI`\3(Fm䓈8ˁ|Sq/u6j)$}?m@l*>!yoFyܳ[Pgj}8XJGrOf0^D4GTkp'2E5f48m"1QGD\Dzy-_eaRU2 B@úp*Jͫh2nI(7Xtqml*QMV/7:.{av0duѽ%h[ ѱVpL*OA+)u{? 3z;DJzDAaht\)7 Z|Ƒ 3hS+YE 8^Δ{Pw _jlK ' Ag8o(5"MCqnޫ;Y!f?b"l 5Rirvfk( n|,܈^(ZI".˷}tjqd6x iϋVzȠNmb_0?Y%3H{)D " L&DDzf>keܳꖶ6ˆ@PaMEGMs߇}t`IBnCCQy$uTPh 3oJsk}ͲzuhX>dVu$ S_hW``9"0 d 0Z3̗٥|(La1Bn|n9,ZL5hg,@+Skh 4NzgRmM +6NŜY> ]M0oA1c}lޕxgVFh48R*[E,(Gո9S%b؋]xhnA+4N( _[Bkѧ䠈i}Jv#_4LIHJ|p$/ \#-Qahofus܎cXB١oPΙ{("2!7UQk|xgID߆˗. qY`IhUXv5'ߌz832pv@zK k(k)\B5hƒaiG߄=Fp្3Ck9rE?RR~bë8.{x5k?tdլ;}thG6 v/k1\dd̗'G{߁sWXppx7%n\@;1DvFis/(6 ͣc ] 8=IrY*Clj'n4P| Yx)Bx Q՞23N < X:bOdhc[l32_۶mSOΪ-̣>ii+%)qs7\\+SMz-#p!}x˃K{h]2Ѯ ِ` i|[o.mA贬n3ز]&eoe cl+Ytou b Ω8놗HEm'<46 RO;y|Sreaf lR;#+ň?\&5gQV˄b>Ϲg}&$]d'b3CˬCn1@bvnP"tO=4W*p2<Xɔ=V)xa+,o%bG4k[ВݫCړ T/CcLϛFl!匟s9&eKY VG|*n*rYJDS ,sښ8eB"Hfa4Q!R$,J9IƆfڦ~yvHF2I3 YQPo|LJ,<&V$ +>qM5dפqn Ӏg+560-s`.k&y^yQev䫇)xnFU;䒩FO #" R89)|.UC6zjW;~ ]י @wśgHӜIAੈP,Cnc)VX7 ho]%o :GuKt_-l=Iv9$f[@鍍@_VJ7XO`. hK!?mɿϻ Pܾ_v0sXbO QWX۬ҟ}Zyvzܪa.9,_ߵ' 6n?ĝԠM6ܸ!"F&l=q~D5`5ǽ!UBg&Mez3M}l_xΔ_K 'x*!rܗ&|3$QZө&A' `f 3Pfc5sdV2ݬns)k``Mkڱeِ}j0@f|eoXNjfaR4lҴQhZ7!DŽԝ2Np{Gs [̮v2حѭ.wfUXKJzY=7nMlKn5YWwgwjw{Icޝеqf}X(VncojrE VkndMŘzY_l$:y~kC,F};h#޷t0um  G.6NzWzn!G ͬ *(74;p/BC:b۳ieT?056ь]uZ8ցݮ9Ig_e1wz[ܗ]dmqѓ ӫz9g?{/ҋX03ʐ??pK {]AHIn8S|BsIͫlUqH~ Z;+ȱ~AC4O֎z-L ☼ ʩ)޼MZA ـ;{[2AW5Eջ>Pfv7(I&دH!C Na/iM/Җfyz,.@W&wYFokj:`s(=0XBPk|35Rt.>"5> uQxrW=&~ַ.;`q)ru!j%!?h<_WTICf)$b#RcpMk^vy?gI <"l/ˬG\'2kz/Kw=5-VkGpWMѩt9V}&Yܠ90)YMكH˅3{ 'RՄ[t ͧ?I'elBCYzz(a@HIn%̇ 2~jS2s5($;3Fk22QIE݃S(ag=P `?v4 k״(w%ĸzHeL{irꚑ~4`OݒؒXn Zw eTݻ$X)m Zϻq_o`=c`8K}4if f\P 2ƴ qXqE7˵+9{C8JE0urIN tz1cV>qP<[d*?/lsȦ;jՐޅ_3RQ3+=,e|-}_ʌ_[2h-SXDs. T}:Q*%^m=U$}#Cuj)p]btJk(mF05r7Lvo; BJэ͟4Ĉ)GWBaÒ?G>nI:Xݥx܊]qGX7@q6sq<>Z,v4Ջ[e]~ßAz^}rT6r%o[/J3Qޡ0NYD^ 2VZtr۴rBT 4_=JFJpKJ&S r|ku%Tv ӻ""(s%ҌT7,Q3Q/ x'yhpw9QpH0Wq BddYrDej4|fM), RՕ>#B#Ν#ߜ;>UUg'|4o2RxCfH{XG4cȥpiHMS.  Sؔxֻ5eTMRJ~Ni~'xuUm*xp&?O&4EŵgkTg hU|ˍͤn'>FvA /]G! lz'h}%2^˜$3ַ* 9WXMtl0rsIe,lIY5,tQɝL8RA1FKBV5eLs$&Yq]KEm/K.bhLSi j4kĉ Zʜ/ՔSm٧6gJZ&b[O7fx6z YlSn7-9C/b=C=k;AqC @uxfLG dyqC1"R8#c˷jVn+nm C!7 (rH82kß f~k^rTX@xެoGz`L3&z!<7 䖜 lK/Ms5Hgl1BHZ4rמLYBAԖ&je?[?\~+6vOT-^}C!tMٲ)IlcG<%gE,9p1D+9R{WHwl]u{lV̠U㐴Z.هrG@ xDK M2xJ2ǂ|vsbQ4Y)pB&g={Q\ZS}Eo߂? ;@9O>gǥpo$=RJ @2? r͸/]޾ kYFr (ۧ]R!W ,M0B:dږj컼MϿU,3*ʌQ|̻ (+)Do?"%n3VMc)V0+/ÕaO˧G,FuaM\O7β2t;ٴc^?V|QYcB5Htm} DtR0(_Oi+1RgX -iiX6-a gེ ^%6iv6hճЬOKa,Dֺ='j嬡kf!3=~Ƭ(kF]w.nB [5>VԐWq&"Dľ}V |r+p}i?/rҦVeoq$l XS4=] ($bףY NPD$!yKC ZOӗR,LY~ч ;{z}:ւ25RY;#FKKw|֟=.^|2tttK-f$@Cgs;ieeƮ/k$ aR^wY  mt*6˄yiy|sO`!+U#eȒ}ꤣ:#2uIjK nSg ~(ْ(0a=t +d7\V > `OS2sz 6D ~:_e >yU ^nǠc 8y/OJ一)6硈&% =;~3sc9j·LDQ)QTC ϖxO|ͮķ `E?Z֌98g5ۑgD j5&:J ՈV9dLvx_f4/3aFJ3wq;P02h-3a\D(gP ?l޻/aBX"0&̆Ϩ-2V;w&!\@r'W<]d*8yI3H:-Z#)lRzX4PGkOt=#*zy7WnSuA)ޔrϯ`05Sy"7F]cc Q8d@ROcB'![#I{zbyf=,袳JB?s<^cN|0O0܀6%0)zBYv H?DR ge)BT%;dL?a젧}}~za@I5wb:[KKw܋;[xUIGEWh\@ZKq>*8٧w%CX'Rmq73VW)!w @Dr}ڣ@5іPYA&@ &቞VoύWVrݫlSjĞj0o)QyrYrه\P~b{lܮGpnI,"&ӕ5~DĨc^!)0X;S6] I\ƙgH($_ zA]l\(úכ~̤_N3VmUx4lH(PZ3?y"G BæKzy4U#k#JUIqk)sP {hj"uZd\ Bc2ȎO ֱ9ᾩ(r[{{Ys?kz]Yd99 .dN "LuT|BrPDV!$DOO*'",JhVMxLS=cL cZ$p[:D+%5"5!NQنCr}$ZaiPWD sk^UF8mf|!xv3)7RłH{Do s9`_[G_T-j7e]`>6Fgȑ "KUbSA)RVt||I@G}RLb=W~hQpj dW,rgjE O4 ;HB}CÒޫD4_epQlL䰯} hJ=t\&ٯ6yh#۵FI^+oqZU=F|qFin9FuYa#svMd{6ob<0{<38 !4nZ$ DؿMDoz/1t]?뇑ְ8SIJ ДDA3l$WTiC1+EH6&9~FoS:ax ҽm\RשJ4 [Kr}of61׻YDO8hQ'BՒ ٠1YɆ(F>BEaGsa+끨0fզۗfHnUB]SN']~ J?Xì{RHnQtre>iiqѥD#IjzLewooo=[bq+4SF%]Tm&ۯ=OYEx k5%{2u;q iv!U1|'SR com,$dCHtxbm,rP*G F wR 5-09{tDzJrBoU0a:Z1iRﴍ_6@f@^9Ms)zFesGl^p+`7z0@ɕw_(L38Ef? rwHq':ϏH+p,8 e5LsD;rս;MCo__eDg6  }!FN໚!b#{˅%`VPlQ]u͎mG5eWuDA]Kyܱd; ABXbze(x ŨYUWOӄ?J!eU}H&me{+u/Fn 0$Voj$,ErVXNgn؅a-)NOm>]0/"CZuDd&0ž (berG9ޭMpJzZ1"O_(ɾ-EnFXwPS4%gT⡕$λ.cuܷ.hK2g:k7󾃰YTTP e1GU?T~l7԰V%q. ǫyi_(C?g-R8d@~kV6KD_˛ )"=% '.v'օTtRֈG#'Qw V˵3M8lۊ u:…k}hV9} = /-v96n懕d-X~՛lI&zh"q8A{uFH(K'[>7mV2 -/BLőjm( ]wZz`R B.Jg2kc_WXRs9^UGC@sdJ<5~cy`M0๲pE()vyO}{Y{p(>=%3U{S/$3ie J} l?[P{ֺK C9`,"+^ҭpb% .ϲ3[ӢS4du=b45$<011Rb*\.V?C,TcIt?{lX<Xo *Uꏁ_Nxz=->*^M&,ԝGS:?*&>{GH X2χˁ:uua hoO|F]|{~yTURmHv_8ѡ.izN"|Ê[4{(,WZw0Wj :jz `]ǁ-X{Beb ,H|eAQ#+V"3@rVQp襪v1s Fq U±W !*QU9TT6OS"qq:ʣ]N!z(Qҿ`{% by찬P`-+FvTRj]$= i~huL:" 4s =2z# hAuwA^=FzmSEjh0`jStT]( Li8gLj VI8Ɩ_9vz3 ~0~>#vQNV䭹txiȦn1y*}tW- ynV2|ˣ΃X(W&;La[dtqfQ" ; eNN^$SD[BBomQ ]@°^2_i IA+@P"J 9<(ӛYTjxd @|8 Ib +bd'~&hbvj냯'3- Q<~ޚ)ꆽkE[V^CXHA}>P{ ;K%έ^㓷YJux@#zFTXA;EQ7@b##v ΠƃnO@HS$!҂lĆZ+HXۚH#A-2H1Z`lQq"X9l5L q{!+[z+ޮArn(*E_ѽGwpؘ?¥БK-F> fX `8cg,p/@Yy4inM &,60646%@P]eY:&7('Fóƫ_Χb4}:m+MB/ӾIcqFIEȘ;C9 mb??( j2Vo}(!璘4zd-fC!tU>$6B7څ.0u7nm6լv46*sk4D!_q g^l[5x3s~;i%׸D V5eWc}B+. 8</n]{=p򚮽XSHR;@#QHM:/f=hcyO4/R{)и%4=5]ADZ1Y\)&E%HE<&UU=S)~c )fd@Afq.JMgт{ "kFA'^e|La\T_㣝W,LowH齢t|}++2 G.v~d, EJ'Rz2(YDШQ96IyA?& {)\ΣvlYAbؖJ :ooRv=?{]:ahNc582oEdG N@G$,X9|OHgay\VJpZ[Cr? 1F\츅t8R6ҥ =Zj"zyiןWU9p_䈃X*!Y9WQnh\~qgt?Gh53O ^x ԭoyi<ܱq|ͩP]ה4W 7F b n x9W>E(p=#U!8-E^8ǑA(ʏwZ7Z?L t6qKw7-KIbƴ1J$FǰꪼCe? +YoF1^T(w hK3Ԛ/\P3j[JVLySCrJMO^Twt*ק"DXəX}o/m,jfRf&QtB+1H@K Pmt#Q̊h`tQMeU=^JL~)lƗ-к3Y1pk•F QS%uh\,kpM) NT|F:@\9is/lBs T Z}u"цB7ze0@b:6r2cfWÝ"6 vTax_F]<04g0aeactq*i%ƺaݩ*e%#%:^n.Dvwf*OA^-Y+f y`v2;:C0a w"v^ Z_;u.w%GlT47m(szq'7 3V1ոП\F@zmceO6cvA<%eWNJ$·qsS0WvqY̠YtLQSgoyTC_X3މD+mx3߸7gy4yԙ= [nJ?u[X2;bxA F*͆@牷V}&`?FKQ?H,T7J`yABF}V v(Z619Cw9m[Vͷe 6B~{%[Te<[ʘ#KHdI^f|dp^S͚/GuQ@KLCO jy_)nWi~G&bp/q tߒ0 D@ {PE2Xs7!޿HTvp\m>!=HA-}_ };Hvy~K*m W*/GtJ7I«bdQnkk:sߚZfnla.gi1S*؎xI?[-h`2-c3=v S͘ңI뗖jQ(bKUo rqPRfJlٺŖwu3`S׵[DyrhB~ Y"wȳ(ΔJBU` [F5gzS0Y!CJγ님 %Kүg,ղ2ܻ5\O) *6ɕ fr ujiLd*0C@5c΍Kg6ndw5qBWMTj)8Jt]{t t{pņM7OO>cH{BhyVQ-D Ҭ{e(!&ƎW? CXz5I.UXhW'ykRR譆c6RŢQ >OzہX}٬E0%K5qHz^(Ó5U7hq6E9xa]EԄMn򬕕,.BH^+z6Y$VhNVxKУM{I~`PVvQ L]d_I%qHf0g6skhyb"#jW@w }[C8wR%t@ :UWFXK$}"`AQ^ٻ? B&G dGrV0hή2Yt6VyډYA9(9qhDF$VXcRE~ƄwHpWC WЬb1 k@ӗW 0}rߩX afơNOc @fv/yn!4CĀR,Vj5YѤXԓf@=UuqR\1W6w*e%5k(Y߈OXUvx4= t&. IpKvxq]n~_5/nKd%Sa< d% :QKb W&q 0JdsF K=)6 ڛ4cgO[tRe@X(ٹћ-J;4=fK9n~T>I4tˍh4Dҭt8#2n_TvC)Xsk\dka=WV;'gX]:ԑ;/R;PG)ajB[mDobG8VZO!z;0"Ǥ)mSF|iаEy7]%f<-st :5eE7d)y=R}+ʚmn*egV聴t1rϴ1!sZ4|Y_|4$X5w\|~e}L3< e|*tW&6./1"K ~`sg;#8"ejdYJ9M4s/\.ˠ IaU3(Y@Ckb9_l T g)uT_6Cvۅ@k>1lABbZENo?xa`wHeN@՚ 5KeBAu{SD |x'!"N0H՞Zys')\H|^CU>v g40/q!1j(H4E,qdQ^}Dc 2֤ICY[rwD! L92z0 }8-ckM4sQ*Քd[GCv b)<%ʁ *.-_0; I7/mU]/xTppB]e`X|R 6;hp(IXB!Zn+^-Avoֹ'2E8, [!y4y TC1'bQ1HSmMO_jC;UU U+/&z~oELFMzZ@EKN޴ |ۊ}-IBf"GУDb_* eF;dFybYՈʬ 5~7D{M./`lxe1|DfS-D4M_H&i;ˢeOL\(n1 GxuO(UҘ GP8 b$5V?yp \: Ȱ,Wjgw1Qp|w1 dbp.)=a oZud|a/AC:QL\q ; Kv$b/IFCάқƶOM鵬qyҾ| =vNR!#umCi l&#+Z #-CͰBH 2MX;Bz hpP f ;y".؝]DImy~4&oT'(!Wײ02V5GR&>ף6A]U$3px BUXB6 ]MCEb836@ lC-öfz/?b)T՘Z1shaJCH>EM\] 5#h{巍!#&~mB_S ^yXWC_z(]Ö[, ׺>H hd19!zෳj kϷAi+KYO+bjddƙtJffZ.Aӻ(zl:pw1PE~lFaq.1d'?$=Ǫ8A6=ZhUIO#cՅ}j1[mڵftSdC=SÉ4 WzIS&c;GJH_]|Iy'S,tjBRUVjbS%n WL QN %\DT+ \ʨe',< NTs-<;jvAj"9L<F߭t&3kR"~"T*20+&LsYk!]4>|);JFu cl13{#}7:5*/bok谢Yowe:دp̷pRg~D0 q ֡U`i"hk}9Pw"aZV̦cJɴ=P#K%PF"%jv0U *s{> #ix_n@Xʼn;0,y`}Q+`*c94ٳ-1[j#VH?xB5ǒRRZ#fPp$(_\ ~9"KF=;8&3U;n-+Ձ+UХ^.Հxe'`ĒH?hRP]Oco ~փFEpWeTA(1U<&RW`ө5)ih&ńFH߯nqwS3 qOdd0*uz HK>ܖ͌GC('Mmz(*u Dm /&%rC效`+TfsNn AY2AquBvu-]s#*+|Θ]&H& buGoG&w(žM*ͳZn#pJi}%Y?vh|Q/gm[;IRۊ; 'c }l?w@)4Cljآ ģoPaRDeX\?`z0?9ݺs ]W.sT' @u񨆨U8x{,)9(*,!.ClCT% &`qj$ ٖ?!.ˢ {HB}:eUhfI0Az"9Z̪`e;H5#o7b);ÌL؅(|($3i/VRKZDwÊ"C˟:edr2quϢT"eOlG\:,JGODYy'3cwd@rT klXrbAVO~:afx B.5ڈQ}+`M=A,=v)7m($1rÓٲ4AD}lKZL~ϝǮ`0]Q'Jỻk'xh%S(8Yϋ_Ģw?4rLS_=@vݞQc'6o0Z9`T895wR21nYդVZxu=:,̀;0'F⟛![onvL)NȥvI!%e´tB2m[Fm_GsI|~p`^ʤhP{BsSפkCLc+YXhy z;zr`Tnm1>wrDzMI:K⳪o4(Ŋ(VU1rHa0ɳQJHˇ!,? IBRik$pPXu^ &;>A?K ?2 fUlVGx]XDХEr[8Dz0Ǯ@d0w!md3&m(M.`94^vJP/UD_7TKJy4|͌f484T;hF?.JkdbY]uqcWlKQ:Q%lM.)ն蓇φ'@W:D8f K+Lh|;ֶL%Tvɐbg2y TTbmW&cH5"hmBcAvډxo4gLtǾ1P%lB\ck7"ҫxF\2tЭ`$3,)GPϼ3KJH s97;gڕ  ٲ4 [CInXþзG!YERg⿳w,[h\]2`{@1g0oP% be.4Je MP{2F  )L3nEHp6)0ʎ:5Ke3.eD^AgF z-ѩWb+Qee+ycls3q?T^Y2Ch}^D4&l:&Qn'kmM#3pYd{N ,f&q ̆&|όc>[X`؀ZCJ/fhxw`{qKxqqlK [|{ҧO;Qm? P :RR3;;~.-lK^@ ?"ytqO|.IF lsMLf B^jKK˄iz ڡqE;-:P#[*8M2TJݤUBFy҇#I2:@Vr}WV7iW("x6 Pۙ[kްR^?Q06eWn,r\ٺC t&͆noS8OMtvz:VfYicfdn9^?S?' B>LNL0tA.x 8! 8?WT=KՄ˹ιt+o¢$h'"U٥5Wq%THnXp!,v̯yv%^ }#k^k>Inx9V}*:E?+j*g rZI*qr(6{@5,+5V,= pK)~%"!ZyQ&"@8Y2 5@Mll{(QҪV'D/!"닂~l-ICdnSĹ[n:,!f B}eXl6j/`R2g~]9~a\@dVұRC|)OYPkh²K&G3ӿ@THw;~8gzQvcm!Nf9@f3ڬѬb<*AK_XYO H(YtԗB^#: CV(dwp㝭\.&j-3mDv -U@wELmGRsZCsyeP>)~h9Y1V!f8z߱ >CyPĮ9t)֥*:xf~9A0_0㔷MB؂#(H4#Ƽ\K?*lLUD?o;Hd=+~ڲ4%ڋs8Adv>\w|aʽ,oiIؽ%.rվ4*iZfKn>"hh<6wS(Rf\"00AGpXN m|>&{ @JtZ!Xxohǁ.b~'k;H`Bj6(VfU %?0%r)7#9y?6Bл>ffhAĴm ܍>G Etv񱜃W; ,HL5f)aq9eZLB6kj;#JLDܦ՘-_<yCi+뚝Ƙiʝ\[n8 _)K9x /Bn&9$D*(.w2%MH_q8hmp &$ymXl8lo9ߔ zLlFI,>RƛӛѰ% ?s7a2ܱWZG' "Ys+A-zw+)EP ]{L\ؐp{!voS g=LM 2J4aWxBpۥ|h%sx>yWie"OHAYP0G dGV)Ix,K^[!bTT1BtaȤKNjٗ1l",{Xr!Zxm EuOQ./fىg֮ ġw/&wV$ægRu" JQ|؋5дg8POL@\(FlXXb51MO\`~ݐߒ vλ[^vLI0ţ5g14CB͑k|*aM ?1\:٘t50,`M}]W5PuNӯVx,:}6_<2{@>;x'3bLTfgYkN5fv >詡)9r"mz.? Jb,iɐaZǭ l&LPKWmUh,Gw0b 2ç h4~u%~PjČ^=m(z5M@?p*.'SJVkK`[PC=F(, yJjJLZP#慴I|gV_C?XBrJ2'Vq 8?rsmS``%vL+6+ɿƎ0j <cV*ÐAւ2t5ƣ>v6(hrOٞ%߄/ȯYpJh"@6RO#Q=肇Z8Nf,dUsO-:MmcL/dTTlsWs&D:z@-r&CX1&c=|HkJ4ܲjƧ - Ɛx]]Ll1QGvVyE|Cˆ'Vr2p] ]!.|UW7 5ڊسn={Tr \٧f7Xt8y-} +bGxپfާ@7%kwMC_&@>N5/7vj|g -6?'`?OO)M 2+IZgF,v_)RZ;ӥ_©/!8MZB>/*Ir$^'QJ{Xv@X;_EoO`gLјy가BSY#@ly &Y*/"=b<| wW`]Z*2qoFop݄@>h ApzћC{ew@Ʉdm:չ|jNǓt[m?:*H{2ɦ;hjgtf8pTx 3|ֱq^b!~`eIGs'3VupU$WC1T4iY[(1؂ÃSEH(n<F)D~XʋnU1tO~Wޛy %WpТ#cVC*! ̇`@K ĥA#{2/IaL U _B{)+'ֳ ~g$NN(udoQ/`nECfSKMƝ>vTP3#bgߖ#wd2W9W-÷Y_sT*o%8]!}ڍ/RjrVkȵѭCB1=𓸎Eի6|dsV ~+Aʛ} p+Zy'W A:Tҗ '*TRC",䪲=Ahϩ$pzɧ!?Tj2Z]2]% ]5ݖ({iNC˕@Jsÿ( >A eET2]f' D7% ҄78$f#$4ė6CM6id?W@,*{uU,:g8C)k ^=t5UJvv[?b+p_u:šнBu+8dpbS۰pц`j`&P{. U.Š#G}%=gc.%RzWbzݮAuTט+)Ŷ~{pu[`n1elN@|
zWlP&*6"XrOx5rQSƉok_sů|AfuR].:R[ݑM9΂ȋI]2:vw5,QMc])16x_XY9o[t;ՃҜS)LNUqr-N!X{F dxjXӐOAeL{mgPN(,:)PZCr8/ jyϣ$Pqƥ]_/kaALĿ%niXDŽ $1<2 QȻo-6b0N 2lⲚb %fQh]|svL##-O$RT%rJ;.hI¬2e.CVW-YΤa~^5 phvX+`O,0pɟRmÇEs.GFin0qQ:o }Z;h0n?/a>kGb~N^N^Rpk,noY!e^E]47#4mxtlϣ.v#Ϡ0+cQ  WM~ մug?_o}lI?Q(b{6;ïHda'fK!? nZ-62b%/`Li+ꀕ YەPůR[ޛȋE *;e > hJNI&UA_eøq2LYhn2@͉%g-M`R(\ ١4+$7ZxyUzcfMavqOFE LusDG{3I (EŻ)RC^SGQ٨(fYrz*z 7O!-#~dn}_kݷk݆B͂#H6e(66+r@O+ղ|/m׺Z?:sRHɥ2u/kVBPأQm]&e dr0BSȇVB}RSnJ)OUЃWbF$AAC2Z5罐iK|T v2;-X4-XD4Z,=\1$M/xVE7%r:\.$B톍uwe(A&d~ ʯEK ="r|(z.7,2IrW<IRv}!ZNz oŬ%$ ޯxD`vP[CF@`J*[.0Zr7㥕I/f2w/o'Cؒ[l*$,L.45Մ pOFC9=2 CB>|[T,wMLWj'ƼhJ+A ̲SʩR)b7|`<]s/7X*D2nzxOe c UrDK1:^1,} $@n "S@*#E%AH5/Y&bZ5h9 !pѤ-fȀ6W&PJs W`z=:PYzw;ffI})reF0B7 !t0?SS/(q|zZXoz 8tj"2X0bu;(V4;W4Miܹ-CAfb.u/Abcl~+l-%Wԉ qǿtn݄+:[T`%}mVR|eyw㡌JžXr O{8ѓws> W#aZm(DŽd z LTG0|>k~Ut ţ=ž VK03[0=nK'y!'iN)w,eV?*2DД21{s"l ut|l^n [h[Ϸ=7|.gŁm9vԊö2(rywL\Tj 5lRwTO`r޿2.Hw<^kuaDSڂBۯQN+.ղYwK˅T&jkéկu>Vo]pbFJj9 b2T^QpAɗ+wKPY*=>`p^XǢN- =Ԃn %t謌Pʭ݁An|'iIE-]i7!&cZi2q# ^J<>v [vEvax7w2$C1 r?n?; p_~Ur@UEZ Q 2eB4BMl19du@z|utҌ:?qNDz ^˭;9n{J{RЧ?h9G1(}M"ijn!n&DZ8p/,l9#=?ەu `&$E*.,r Řci z!ZzΡ̑GQЛJ)P>p~" (ÐFڐ9L\0s-a m!n\@,D"{Az=JHcZ$8?aW3oXK+>OOesH;KNp]I- >c`MCN]mJֳ}v{>e#RDpN!X0u. p*\r􉊤 8[>歷PЯ{8(|Ѓg!QFTEɝg~D4. fHgUtvʫGJiSq(&V+@Ί9YrɲS)*&̶OXFóq*Pt4ap$r̘1F'