libopenssl1_1-1.1.1w-150600.5.3.1<>,3ԉfipp9|XOF8@iYXkWX#pX'|Nܞ>p'>H=$d#!ó=\uemZl0v*8= e MfIU?Ud $ P\`lp  8  L  `         (P x   z   ( 8 9:>L`@LoBL~FLGL HM IM0 XM<YMZM[N\N ]NH ^NbO,cOdP[eP`fPclPeuPx vPwSx xS ySSzUU$U(U@UDUHUNUClibopenssl1_11.1.1w150600.5.3.1Secure Sockets and Transport Layer SecurityOpenSSL is a software library to be used in applications that need to secure communications over computer networks against eavesdropping or need to ascertain the identity of the party at the other end. OpenSSL contains an implementation of the SSL and TLS protocols.fiph03-ch2b>SUSE Linux Enterprise 15SUSE LLC OpenSSLhttps://www.suse.com/Productivity/Networking/Securityhttps://www.openssl.org/linuxx86_64AAJxX4* `遤AA큤fififififififififikdK3698eb226d8e9460e7593a5aea75c942e2c69c913641fbff09ea64d0b1405af5bb67ceb304817b50eee99481dcfdf990f981ced3d552a7ee58cd641e77d9a0c45db949e6da57da2965c57ed5ed627bee816c4f7d7092225a6e87b05a27ff42de97739018dcc447f96e23522f10ef4a7c7f43934aa358bf9324ea1ab7a5ba7fe4ec62d09e0fdfc2b37c4dee9e4145457f600938ffff3df67f97d32b85e0ce5c652b6c8beace25a6e87a78dd530941f45e92c55eea0d9b5f68c45ab0b505f9d77a5042fb0409f5351b700ca21a37fb2c008a1af38096099c709bd34c423a294227c32913b33252e71190af2066f08115c69bc9fddadf3bf29296e20c835389841crootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenssl-1_1-1.1.1w-150600.5.3.1.src.rpmlibcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0a)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0c)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0d)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0f)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0g)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0h)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0i)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0j)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1b)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1c)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1d)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1h)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1l)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1w)(64bit)libopenssl1_1libopenssl1_1(x86-64)libopenssl1_1-hmaclibssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_0d)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libssl.so.1.1(OPENSSL_1_1_1a)(64bit)@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigcrypto-policieslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0d)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0f)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0i)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libjitterentropy.so.3()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1openssl-1_11.1.1w-150600.5.3.14.14.3faf8@e@epeeeXepb@e_>eRe1@eSeRd.@ddgd!ddw6dw6dtdkY@d*dd'@cc=@cccccc{h@ctctcb[c[@c=qc$e@c*c@c@cc b?b?bbbUblb@b@bbobaG@b4t@b0b0b)@b!@b b bOa@aaar@ar@aa@a@a*@a)@aapa=a+va@`m`Y@`?z@`>(_j_~@_Wr@_G@^^t@^_@^V]^O@^E:@^C^0"@^)^(9@^&^&]]]]n]x]v>]g@\@\\ac\G\G\A\@[0[ @[u[u[r@[b@[Xf@[Xf@[2*Z4@Z4@ZZ2@ZH@ZZv@Ze@ZTZOZOYYKY@YV@Y@Ym@Ym@YOY, @YYY i@Y @Y @Y @Y @YtYYX@XXXXXh@Xh@Xh@Xh@Xh@Xh@XXXXX@X6@WSWSW_@W@WW(WWV޾VՄ@VVa@Ub@U'U@U>UzUyx@Ua@U @T TTk4Ti@T\@TFJpsimons@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdcermak@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.comjsikes@suse.compmonreal@suse.compmonreal@suse.comvcizek@suse.compmonreal@suse.comvcizek@suse.compmonreal@suse.compmonrealgonzalez@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comjsikes@suse.compmonrealgonzalez@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.compmonrealgonzalez@suse.comvcizek@suse.compmonrealgonzalez@suse.comjsikes@suse.comvcizek@suse.comjsikes@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comsflees@suse.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.comtchvatal@suse.comschwab@suse.devcizek@suse.comdimstar@opensuse.orgdimstar@opensuse.orgvcizek@suse.comvcizek@suse.commeissner@suse.comjengelh@inai.detchvatal@suse.comvcizek@suse.comjimmy@boombatower.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.comtchvatal@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comvcizek@suse.commeissner@suse.comvcizek@suse.comvcizek@suse.commichael@stroeder.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdvaleev@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comdvaleev@suse.comnormand@linux.vnet.ibm.comcrrodriguez@opensuse.orgvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.commeissner@suse.commeissner@suse.combrian@aljex.commeissner@suse.combrian@aljex.comcrrodriguez@opensuse.org- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free security vulnerability. Calling the function SSL_free_buffers() potentially caused memory to be accessed that was previously freed in some situations and a malicious attacker could attempt to engineer a stituation where this occurs to facilitate a denial-of-service attack. [CVE-2024-4741, bsc#1225551]- Security fix: [bsc#1222548, CVE-2024-2511] * Fix unconstrained session cache growth in TLSv1.3 * Add openssl-CVE-2024-2511.patch- openssl-riscv64-config.patch: backport of riscv64 config support- Enable running the regression tests in FIPS mode.- Security fix: [bsc#1219243, CVE-2024-0727] * Add NULL checks where ContentInfo data can be NULL * Add openssl-CVE-2024-0727.patch- Remove "Provides: openssl(cli)" because the executable has been renamed to openssl-1_1.- Because OpenSSL 1.1.1 is no longer default, let's rename engine directories to contain version of OpenSSL and let unversioned for the default OpenSSL. [bsc#1194187, bsc#1207472, bsc#1218933] * /etc/ssl/engines.d -> /etc/ssl/engines1.1.d * /etc/ssl/engdef.d -> /etc/ssl/engdef1.1.d * Update patches: - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-use-include-directive.patch- Set OpenSSL 3.0 as the default openssl [jsc#PED-6570] * For compatibility with OpenSSL 3.0, the OpenSSL master configuration file openssl.cnf has been renamed to openssl-1_1.cnf. The executables openssl, c_rehash, CA.pl and tsget.pl have been also renamed to openssl-1_1, c_rehash-1_1, CA-1_1.pl and tsget-1_1.pl, respectively. * Add openssl-1_1-devel as conflicting with libopenssl-3-devel * Add openssl-1_1-openssl-config.patch- Skip SHA1 test in 20-test_dgst.t when in FIPS mode * Add openssl-Skip_SHA1-test-in-FIPS-mode.patch- Security fix: [bsc#1216922, CVE-2023-5678] * Fix excessive time spent in DH check / generation with large Q parameter value. * Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. * Add openssl-CVE-2023-5678.patch- Performance enhancements for cryptography from OpenSSL 3.x [jsc#PED-5086, jsc#PED-3514] * Add patches: - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch- Displays "fips" in the version string (bsc#1215215) * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch- Update to 1.1.1w: (jsc#PED-6559) * Fix POLY1305 MAC implementation corrupting XMM registers on Windows. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. (CVE-2023-4807) - Removed patches, already upstream * openssl-1_1-Fix-file-operations-in-c_rehash.patch * openssl-CVE-2022-0778-tests.patch * openssl-CVE-2022-0778.patch * openssl-CVE-2022-1292.patch * openssl-CVE-2022-2097.patch * openssl-CVE-2022-4304.patch * openssl-CVE-2022-4450-1of2.patch * openssl-CVE-2022-4450-2of2.patch * openssl-CVE-2023-0215-1of4.patch * openssl-CVE-2023-0215-2of4.patch * openssl-CVE-2023-0215-3of4.patch * openssl-CVE-2023-0215-4of4.patch * openssl-CVE-2023-0286.patch * openssl-CVE-2023-2650.patch * openssl-1_1-CVE-2023-3817.patch * openssl-Update-further-expiring-certificates.patch - Renamed openssl-1_1-FIPS-default-RFC7919.patch to openssl-1_1-paramgen-default_to_rfc7919.patch- Add missing FIPS patches from SLE: * Add patches: - bsc1185319-FIPS-KAT-for-ECDSA.patch - bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch - openssl-1.1.1-fips-fix-memory-leaks.patch - openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch - openssl-1_1-FIPS_drbg-rewire.patch - openssl-1_1-Zeroization.patch - openssl-1_1-fips-drbg-selftest.patch - openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch - openssl-1_1-jitterentropy-3.4.0.patch - openssl-1_1-ossl-sli-000-fix-build-error.patch - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-ossl-sli-003-add-sli.patch - openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch - openssl-1_1-ossl-sli-005-EC_group_order_bits.patch - openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch - openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch - openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch - openssl-1_1-serialize-jitterentropy-calls.patch - openssl-1_1-shortcut-test_afalg_aes_cbc.patch - openssl-DH.patch - openssl-FIPS-KAT-before-integrity-tests.patch - openssl-fips-DH_selftest_shared_secret_KAT.patch - openssl-fips-kdf-hkdf-selftest.patch - openssl-kdf-selftest.patch - openssl-kdf-ssh-selftest.patch - openssl-kdf-tls-selftest.patch - openssl-s_client-check-ocsp-status.patch * Modify patches: - openssl-1.1.1-fips.patch - openssl-1_1-FIPS-fix-error-reason-codes.patch * Remove patches: - openssl-add_rfc3526_rfc7919.patch - openssl-fips-dont_run_FIPS_module_installed.patch - openssl-fips_fix_selftests_return_value.patch * Add build and runtime dependency on jitterentropy - Pass over with spec-cleaner- Security fix: (bsc#1213853, CVE-2023-3817) * Fix excessive time spent checking DH q parameter value (bsc#1213853, CVE-2023-3817). The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped. * Add openssl-1_1-CVE-2023-3817.patch - Update to 1.1.1v: * Fix DH_check() excessive time with over sized modulus (bsc#1213487, CVE-2023-3446). The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Update openssl.keyring with the OTC members that sign releases * Rebase openssl-1_1-openssl-config.patch * Remove security patches fixed upstream: - openssl-CVE-2023-3446.patch - openssl-CVE-2023-3446-test.patch- Dont pass zero length input to EVP_Cipher because assembler optimized AES cannot handle zero size. [bsc#1213517] * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch- Security fix: [bsc#1213487, CVE-2023-3446] * Fix DH_check() excessive time with over sized modulus. * The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch- Security Fix: [bsc#1207534, CVE-2022-4304] * Reworked the Fix for the Timing Oracle in RSA Decryption The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case compared to 1.1.1s. * Add openssl-CVE-2022-4304.patch * Removed patches: - openssl-CVE-2022-4304-1of2.patch - openssl-CVE-2022-4304-2of2.patch * Refreshed patches: - openssl-CVE-2023-0464.patch - openssl-CVE-2023-0465.patch- Update to 1.1.1u: * Mitigate for the time it takes for `OBJ_obj2txt` to translate gigantic OBJECT IDENTIFIER sub-identifiers to canonical numeric text form. OBJ_obj2txt() would translate any size OBJECT IDENTIFIER to canonical numeric text form. For gigantic sub-identifiers, this would take a very long time, the time complexity being O(n^2) where n is the size of that sub-identifier. (CVE-2023-2650, bsc#1211430) To mitigitate this, `OBJ_obj2txt()` will only translate an OBJECT IDENTIFIER to canonical numeric text form if the size of that OBJECT IDENTIFIER is 586 bytes or less, and fail otherwise. The basis for this restriction is RFC 2578 (STD 58), section 3.5. OBJECT IDENTIFIER values, which stipulates that OBJECT IDENTIFIERS may have at most 128 sub-identifiers, and that the maximum value that each sub- identifier may have is 2^32-1 (4294967295 decimal). For each byte of every sub-identifier, only the 7 lower bits are part of the value, so the maximum amount of bytes that an OBJECT IDENTIFIER with these restrictions may occupy is 32 * 128 / 7, which is approximately 586 bytes. Ref: https://datatracker.ietf.org/doc/html/rfc2578#section-3.5 * Reworked the Fix for the Timing Oracle in RSA Decryption (CVE-2022-4304, bsc#1207534). The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case compared to 1.1.1s. The new fix uses existing constant time code paths, and restores the previous performance level while fully eliminating all existing timing side channels. The fix was developed by Bernd Edlinger with testing support by Hubert Kario. * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. (CVE-2023-0466, bsc#1209873) * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. (CVE-2023-0466, bsc#1209873) * Fixed an issue where invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. (CVE-2023-0465, bsc#1209878) * Limited the number of nodes created in a policy tree to mitigate against CVE-2023-0464. The default limit is set to 1000 nodes, which should be sufficient for most installations. If required, the limit can be adjusted by setting the OPENSSL_POLICY_TREE_NODES_MAX build time define to a desired maximum number of nodes or zero to allow unlimited growth. (CVE-2023-0464, bsc#1209624) * Rebased patch openssl-1_1-openssl-config.patch * Removed patches: - openssl-CVE-2023-0464.patch - openssl-CVE-2023-0465.patch - openssl-CVE-2023-0466.patch * Update openssl.keyring with key A21F AB74 B008 8AA3 6115 2586 B8EF 1A6B A9DA 2D5C (Tomas Mraz)- Update further expiring certificates that affect tests [bsc#1201627] * Add openssl-Update-further-expiring-certificates.patch- FIPS: Merge libopenssl1_1-hmac package into the library [bsc#1185116]- Security Fix: [CVE-2023-2650, bsc#1211430] * Possible DoS translating ASN.1 object identifiers * Add openssl-CVE-2023-2650.patch- Security Fix: [CVE-2023-0465, bsc#1209878] * Invalid certificate policies in leaf certificates are silently ignored * Add openssl-CVE-2023-0465.patch - Security Fix: [CVE-2023-0466, bsc#1209873] * Certificate policy check not enabled * Add openssl-CVE-2023-0466.patch- Security Fix: [CVE-2023-0464, bsc#1209624] * Excessive Resource Usage Verifying X.509 Policy Constraints * Add openssl-CVE-2023-0464.patch- FIPS: Service-level indicator [bsc#1208998] * Add additional check required by FIPS 140-3. Minimum values for PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for iteration count and 20 characters for password. * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch- FIPS: Serialize jitterentropy calls [bsc#1207994] * Add openssl-1_1-serialize-jitterentropy-calls.patch- Update to 1.1.1t: * Fixed X.400 address type confusion in X.509 GeneralName. There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but subsequently interpreted by GENERAL_NAME_cmp as an ASN1_TYPE. This vulnerability may allow an attacker who can provide a certificate chain and CRL (neither of which need have a valid signature) to pass arbitrary pointers to a memcmp call, creating a possible read primitive, subject to some constraints. Refer to the advisory for more information. Thanks to David Benjamin for discovering this issue. [bsc#1207533, CVE-2023-0286] This issue has been fixed by changing the public header file definition of GENERAL_NAME so that x400Address reflects the implementation. It was not possible for any existing application to successfully use the existing definition; however, if any application references the x400Address field (e.g. in dead code), note that the type of this field has changed. There is no ABI change. * Fixed Use-after-free following BIO_new_NDEF. The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. [bsc#1207536, CVE-2023-0215] * Fixed Double free after calling PEM_read_bio_ex. The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. [bsc#1207538, CVE-2022-4450] [Kurt Roeckx, Matt Caswell] * Fixed Timing Oracle in RSA Decryption. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. [bsc#1207534, CVE-2022-4304] * Rebased openssl-1_1-openssl-config.patch * Update openssl.keyring with key 7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)- Security Fix: [bsc#1207533, CVE-2023-0286] * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address * Add openssl-CVE-2023-0286.patch- Security Fix: [bsc#1207536, CVE-2023-0215] * Use-after-free following BIO_new_NDEF() * Add patches: - openssl-CVE-2023-0215-1of4.patch - openssl-CVE-2023-0215-2of4.patch - openssl-CVE-2023-0215-3of4.patch - openssl-CVE-2023-0215-4of4.patch- Security Fix: [bsc#1207538, CVE-2022-4450] * Double free after calling PEM_read_bio_ex() * Add patches: - openssl-CVE-2022-4450-1of2.patch - openssl-CVE-2022-4450-2of2.patch- Security Fix: [bsc#1207534, CVE-2022-4304] * Timing Oracle in RSA Decryption * Add patches: - openssl-CVE-2022-4304-1of2.patch - openssl-CVE-2022-4304-2of2.patch- POWER10 performance enhancements for cryptography [jsc#PED-512] * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch * openssl-1_1-Fixed-counter-overflow.patch * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch- FIPS: Service-level indicator [bsc#1190651] * Mark PBKDF2 with key shorter than 112 bits as non-approved * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch- FIPS: Service-level indicator [bsc#1190651] * Consider RSA siggen/sigver with PKCS1 padding also approved * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch- FIPS: Service-level indicator [bsc#1190651] * Return the correct indicator for a given EC group order bits * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch- Updated openssl.keyring with key A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C - Update to 1.1.1s: * Fixed a regression introduced in 1.1.1r version not refreshing the certificate data to be signed before signing the certificate. - Update to 1.1.1r: * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT bn_ops flag. This was causing heap corruption on that platform. * Fixed a strict aliasing problem in bn_nist. Clang-14 optimisation was causing incorrect results in some cases as a result. * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to report correct results in some cases * Fixed a regression introduced in 1.1.1o for re-signing certificates with different key sizes * Added the loongarch64 target * Fixed a DRBG seed propagation thread safety issue * Fixed a memory leak in tls13_generate_secret * Fixed reported performance degradation on aarch64. Restored the implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit lane assignment in CTR mode") for 64bit targets only, since it is reportedly 2-17% slower and the silicon errata only affects 32bit targets. The new algorithm is still used for 32 bit targets. * Added a missing header for memcmp that caused compilation failure on some platforms- FIPS: Add a missing dependency on jitterentropy-devel for libopenssl-1_1-devel [bsc#1202148]- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651] * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch- FIPS: Default to RFC-7919 groups for genparam and dhparam * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]- FIPS: list only FIPS approved digest and public key algorithms [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472] * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch * Disabled test 15-test_ec.t in FIPS mode- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069] * Add openssl-1_1-fips-drbg-selftest.patch- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293] * The FIPS_drbg implementation is not FIPS validated anymore. To provide backwards compatibility for applications that need FIPS compliant RNG number generation and use FIPS_drbg_generate, this function was re-wired to call the FIPS validated DRBG instance instead through the RAND_bytes() call. * Add openssl-1_1-FIPS_drbg-rewire.patch- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046] * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch- FIPS: OpenSSL: Port openssl to use jitterentropy [bsc#1202148, jsc#SLE-24941] * Add openssl-1_1-jitterentropy-3.4.0.patch * Add build dependency on jitterentropy-devel >= 3.4.0 and libjitterentropy3 >= 3.4.0- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651] * Add patches: - openssl-1_1-ossl-sli-000-fix-build-error.patch - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-ossl-sli-003-add-sli.patch- FIPS: Add zeroization of temporary variables to the hmac integrity function FIPSCHECK_verify(). [bsc#1190653] * Add openssl-1_1-Zeroization.patch- update to 1.1.1q: * [CVE-2022-2097, bsc#1201099] * Addresses situations where AES OCB fails to encrypt some bytes- Encrypt the sixteen bytes that were unencrypted in some circumstances on 32-bit x86 platforms. * [bsc#1201099, CVE-2022-2097] * added openssl-CVE-2022-2097.patch- Update to 1.1.1p: * bsc#1185637 - updated certificates required for testing that failed when date is later than 1 June 2022 - removed openssl-update_expired_certificates.patch * [bsc#1200550, CVE-2022-2068] - more shell code injection issues in c_rehash- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch * bsc#1200550 * CVE-2022-2068 * Fixed more shell code injection issues in c_rehash- Update to 1.1.1o: [CVE-2022-1292, bsc#1199166] * Fixed a bug in the c_rehash script which was not properly sanitising shell metacharacters to prevent command injection. * Rebased openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * Rebased openssl-s390x-assembly-pack-add-support-for-pcc-and-kma-inst.patch - Added openssl-update_expired_certificates.patch * Openssl failed tests because of expired certificates. * bsc#1185637 * Sourced from https://github.com/openssl/openssl/pull/18446/commits- Added openssl-update_expired_certificates.patch * Openssl failed tests because of expired certificates. * bsc#1185637 * Sourced from https://github.com/openssl/openssl/pull/18446/commits- Security fix: [bsc#1199166, CVE-2022-1292] * Added: openssl-CVE-2022-1292.patch * properly sanitise shell metacharacters in c_rehash script.- FIPS: Added signature verification test to bsc1185319-FIPS-KAT-for-ECDSA.patch- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch * Known answer test for ECDSA * bsc#1185319 - FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch * Enable tests for Deterministic Random Bit Generator * bsc#1198207 - Bypass a regression test that fails in FIPS mode. * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280] * The IG 10.3.A and SP800-132 require some minimum parameters for the salt length, password length and iteration count. These parameters should be also used in the KAT. * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch- Security Fix: [bsc#1196877, CVE-2022-0778] * Infinite loop in BN_mod_sqrt() reachable when parsing certificates * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch- Added openssl-1_1-use-include-directive.patch so that the default /etc/ssl/openssl.cnf file will include any configuration files that other packages might place into /etc/ssl/engines.d/ and /etc/ssl/engdef.d/ This is a fix for bsc#1004463 where scripting was being used to modify the openssl.cnf file. The scripting would fail if either the default openssl.cnf file, or the sample openssl-ibmca configuration file would be changed by upstream. - Updated spec file to create the two new necessary directores for the above patch. [bsc#1194187, bsc#1004463]- FIPS: add openssl-1_1-fips-bsc1190652_release_num_in_version_string.patch * bsc#1190652 - Provide a service to output module name/identifier and version- Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch- FIPS: Reintroduce the FFC and ECC checks in openssl-DH.patch that were removed in the update to 1.1.1l [bsc#1185313]- FIPS: Fix sn_objs and ln_objs in crypto/objects/obj_mac.num * Rebase openssl-DH.patch [bsc#1194327] - Merge openssl-keep_EVP_KDF_functions_version.patch into openssl-1.1.1-evp-kdf.patch - Add function codes for pbkdf2, hkdf, tls and ssh selftests. Rebase patches: * openssl-fips-kdf-hkdf-selftest.patch * openssl-kdf-selftest.patch * openssl-kdf-ssh-selftest.patch * openssl-kdf-tls-selftest.patch- Pull libopenssl-1_1 when updating openssl-1_1 with the same version. [bsc#1195792]- FIPS: Fix function and reason error codes [bsc#1182959] * Add openssl-1_1-FIPS-fix-error-reason-codes.patch- Enable zlib compression support [bsc#1195149]- Remove the openssl-has-RSA_get0_pss_params provides as it is now fixed in the nodejs16 side [bsc#1192489]- FIPS: Move the HMAC-SHA2-256 used for integrity test [bsc#1185320] * Add openssl-FIPS-KAT-before-integrity-tests.patch- FIPS: Add missing KAT for HKDF/TLS 1.3/IPSEC IKEv2 [bsc#1192442] * Add openssl-fips-kdf-hkdf-selftest.patch- Add a provides for openssl-has-RSA_get0_pss_params as required by nodejs16. [bsc#1192489]- Backport cryptographic improvements from OpenSSL 3 [jsc#SLE-19742] * Optimize RSA on armv8: openssl-1_1-Optimize-RSA-armv8.patch * Optimize AES-XTS mode for aarch64: openssl-1_1-Optimize-AES-XTS-aarch64.patch * Optimize AES-GCM for uarchs with unroll and new instructions: openssl-1_1-Optimize-AES-GCM-uarchs.patch- Update to 1.1.1m: * Avoid loading of a dynamic engine twice. * Prioritise DANE TLSA issuer certs over peer certs - Rebased patches: * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-system-cipherlist.patch- Add support for livepatches (jsc#SLE-20049). - Generate ipa-clones tarball artifact when livepatching is enabled.- POWER10 performance enhancements for cryptography [jsc#SLE-18136] * openssl-1_1-Optimize-ppc64.patch- Drop openssl-no-date.patch Upstream added support for reproducible builds via SOURCE_DATE_EPOCH in https://github.com/openssl/openssl/commit/8a8d9e190533ee41e8b231b18c7837f98f1ae231 thereby making this patch obsolete as builds *should* still be reproducible.- Import centralized crypto policy profile from Factory [jsc#SLE-15832] * openssl-1.1.1-system-cipherlist.patch * openssl-1_1-disable-test_srp-sslapi.patch * openssl-1_1-seclevel.patch * openssl-1_1-use-seclevel2-in-tests.patch- Update to openssl-1.1.1l ('L' as in 'Lima') for SUSE-SLE-15-SP4 * jsc#SLE-19640, jsc#PM-2816 - Changes in 1.1.1l: * [bsc#1189520, CVE-2021-3711] Fixed an SM2 Decryption Buffer Overflow. * [bsc#1189521, CVE-2021-3712] Fixed various read buffer overruns processing ASN.1 strings - Changes in 1.1.1k * Fixed a problem with verifying a certificate chain when using the X509_V_FLAG_X509_STRICT flag. This flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. ([CVE-2021-3450]) [bsc#1183851] * Fixed an issue where an OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. ([CVE-2021-3449]) [bsc#1183852] - Changes in 1.1.1j * Fixed the X509_issuer_and_serial_hash() function. It attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it was failing to correctly handle any errors that may occur while parsing the issuer field [bsc#1182331, CVE-2021-23841] * Fixed the RSA_padding_check_SSLv23() function and the RSA_SSLV23_PADDING padding mode to correctly check for rollback attacks. * Fixed the EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate functions. Previously they could overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call would be 1 (indicating success), but the output length value would be negative. This could cause applications to behave incorrectly or crash. [bsc#1182333, CVE-2021-23840] * Fixed SRP_Calc_client_key so that it runs in constant time. The previous implementation called BN_mod_exp without setting BN_FLG_CONSTTIME. This could be exploited in a side channel attack to recover the password. Since the attack is local host only this is outside of the current OpenSSL threat model and therefore no CVE is assigned. - Changes in 1.1.1i * Fixed NULL pointer deref in GENERAL_NAME_cmp * bsc#1179491, CVE-2020-1971 - Changes in 1.1.1h * Disallow explicit curve parameters in verifications chains when X509_V_FLAG_X509_STRICT is used * Enable 'MinProtocol' and 'MaxProtocol' to configure both TLS and DTLS contexts - Changes in 1.1.1g * Fixed segmentation fault in SSL_check_chain (CVE-2020-1967, bsc#1169407) Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. * Added AES consttime code for no-asm configurations an optional constant time support for AES was added when building openssl for no-asm. - Changes in 1.1.1f * Revert the unexpected EOF reporting via SSL_ERROR_SSL - Changes in 1.1.1e * Properly detect EOF while reading in libssl. Previously if we hit an EOF while reading in libssl then we would report an error back to the application (SSL_ERROR_SYSCALL) but errno would be 0. We now add an error to the stack (which means we instead return SSL_ERROR_SSL) and therefore give a hint as to what went wrong. * Check that ed25519 and ed448 are allowed by the security level. Previously signature algorithms not using an MD were not being checked that they were allowed by the security level. * Fixed SSL_get_servername() behaviour. The behaviour of SSL_get_servername() was not quite right. The behaviour was not consistent between resumption and normal handshakes, and also not quite consistent with historical behaviour. The behaviour in various scenarios has been clarified and it has been updated to make it match historical behaviour as closely as possible. * Corrected the documentation of the return values from the EVP_DigestSign* set of functions. The documentation mentioned negative values for some errors, but this was never the case, so the mention of negative values was removed. * Added a new method to gather entropy on VMS, based on SYS$GET_ENTROPY. The presence of this system service is determined at run-time. * Added newline escaping functionality to a filename when using openssl dgst. This output format is to replicate the output format found in the '*sum' checksum programs. This aims to preserve backward compatibility. * Print all values for a PKCS#12 attribute with 'openssl pkcs12', not just the first value. - Dropped the following patches: * openssl-1_1-CVE-2019-1551.patch * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips_fix_selftests_return_value.patch * openssl-CVE-2020-1967.patch * openssl-CVE-2020-1967-test1.patch * openssl-CVE-2020-1967-test2.patch * openssl-CVE-2020-1967-test3.patch * openssl-CVE-2020-1971.patch * openssl-CVE-2021-23840.patch * openssl-CVE-2021-23841.patch * openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch * openssl-1.1.1-fips_list_ciphers.patch * CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch * CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch * CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch * CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch * CVE-2021-3712-other-ASN1_STRING-issues.patch - Rebased the following patches: * 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch * 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * openssl-1.1.0-issuer-hash.patch * openssl-1.1.0-no-html.patch * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-fips-crng-test.patch * openssl-1.1.1-fips-post-rand.patch * openssl-1.1.1-fips.patch * openssl-1.1.1-ssh-kdf.patch * openssl-DH.patch * openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch * openssl-assembly-pack-accelerate-scalar-multiplication.patch * openssl-fips_selftest_upstream_drbg.patch * openssl-kdf-selftest.patch * openssl-kdf-ssh-selftest.patch * openssl-kdf-tls-selftest.patch * openssl-s390x-assembly-pack-accelerate-ECDSA.patch * openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch- Other OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. * CVE-2021-3712 continued * bsc#1189521 * Add CVE-2021-3712-other-ASN1_STRING-issues.patch * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521 2021-08-24 00:47 PDT by Marcus Meissner- A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. * CVE-2021-3711 * bsc#1189520 * Add: CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch - The function X509_aux_print() has a bug which may cause a read buffer overrun when printing certificate details. A malicious actor could construct a certificate to deliberately hit this bug, which may result in a crash of the application (causing a Denial of Service attack). * CVE-2021-3712 * bsc#1189521 * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch- Don't list disapproved cipher algorithms while in FIPS mode * openssl-1.1.1-fips_list_ciphers.patch * bsc#1161276- Fix NULL pointer deref in signature_algorithms * CVE-2021-3449 * bsc#1183852 * Add openssl-1_1-CVE-2021-3449-NULL_pointer_deref_in_signature_algorithms.patch- Security fixes: * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback protection [bsc#1182333, CVE-2021-23840] * Null pointer deref in X509_issuer_and_serial_hash() [bsc#1182331, CVE-2021-23841] - Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch- Fix unresolved error codes [bsc#1182959] - Update openssl-1.1.1-fips.patch- Fix EDIPARTYNAME NULL pointer dereference (CVE-2020-1971, bsc#1179491) * add openssl-CVE-2020-1971.patch- Restore private key check in EC_KEY_check_key [bsc#1177479] * Update openssl-DH.patch- Add shared secret KAT to FIPS DH selftest [bsc#1175844] * add openssl-fips-DH_selftest_shared_secret_KAT.patch- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175844, bsc#1173470] - Add patches: * openssl-DH.patch * openssl-kdf-selftest.patch * openssl-kdf-tls-selftest.patch * openssl-kdf-ssh-selftest.patch- Security fix: [bsc#1169407, CVE-2020-1967] * Segmentation fault in SSL_check_chain: Server applications that call the SSL_check_chain() function during or after a TLS handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the signature_algorithms_cert TLS extension. - Add patches: * openssl-CVE-2020-1967.patch * openssl-CVE-2020-1967-test1.patch * openssl-CVE-2020-1967-test2.patch * openssl-CVE-2020-1967-test3.patch- openssl dgst: default to SHA256 only when called without a digest, not when it couldn't be found (bsc#1166189) * add openssl-unknown_dgst.patch- Limit the DRBG selftests to not deplete entropy (bsc#1165274) * update openssl-fips_selftest_upstream_drbg.patch- Run FIPS DRBG selftests against the crypto/rand DRBG implementation (bsc#1164557) * add openssl-fips_selftest_upstream_drbg.patch- Use the newly build libcrypto shared library when computing the hmac checksums in order to avoid a bootstrapping issue by BuildRequiring libopenssl1_1 (bsc#1164102)- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569) * add openssl-fips_fix_selftests_return_value.patch- Added SHA3 FIPS self-tests bsc#1155345 * openssl-fips-add-SHA3-selftest.patch- Support for CPACF enhancements - part 2 (crypto) [jsc#SLE-7403] - Add patches: * openssl-s390x-assembly-pack-accelerate-X25519-X448-Ed25519-and-Ed448.patch * openssl-s390x-fix-x448-and-x448-test-vector-ctime-for-x25519-and-x448.patch- Temporarily ignore broken OPENSSL_INIT_NO_ATEXIT due to our layered FIPS initialization (bsc#1161789) * openssl-fips-ignore_broken_atexit_test.patch- Import FIPS patches from SLE-15 * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips_mode.patch * openssl-ship_fips_standalone_hmac.patch * openssl-fips-clearerror.patch * openssl-fips-selftests_in_nonfips_mode.patch- Don't run FIPS power-up self-tests when the checksum files aren't installed (bsc#1042392) * add openssl-fips-run_selftests_only_when_module_is_complete.patch- Import FIPS patches from Fedora (bsc#1157702, jsc#SLE-9553) * openssl-1.1.1-fips-crng-test.patch * openssl-1.1.1-fips-post-rand.patch * openssl-1.1.1-fips.patch * openssl-1.1.0-issuer-hash.patch * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-ssh-kdf.patch replaces openssl-jsc-SLE-8789-backport_KDF.patch - keep EVP_KDF functions at version 1.1.1d for backward compatibility * add openssl-keep_EVP_KDF_functions_version.patch- Support for CPACF enhancements - part 1 (crypto) [bsc#1152695, jsc#SLE-7861] - Add patches: * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * openssl-s390x-assembly-pack-add-support-for-pcc-and-kma-inst.patch * openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch * openssl-s390x-assembly-pack-update-OPENSSL_s390xcap-3.patch * openssl-s390xcpuid.pl-fix-comment.patch * openssl-assembly-pack-accelerate-scalar-multiplication.patch * openssl-Enable-curve-spefific-ECDSA-implementations-via-EC_M.patch * openssl-s390x-assembly-pack-accelerate-ECDSA.patch * openssl-OPENSSL_s390xcap.pod-list-msa9-facility-bit-155.patch * openssl-s390x-assembly-pack-cleanse-only-sensitive-fields.patch * openssl-s390x-assembly-pack-fix-OPENSSL_s390xcap-z15-cpu-mas.patch * openssl-s390x-assembly-pack-fix-msa3-stfle-bit-detection.patch * openssl-Fix-9bf682f-which-broke-nistp224_method.patch- Obsolete libopenssl-1_0_0-devel and libopenssl-1_0_0-hmac in order to avoid conflict upon upgrade from SLE-12 (bsc#1158499)- Security fix: [bsc#1158809, CVE-2019-1551] * Overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli - Add openssl-1_1-CVE-2019-1551.patch- Fixed EVP_PBE_scrypt() to allow NULL salt values. * Revealed by nodejs12 during bsc#1149572. * Modified openssl-jsc-SLE-8789-backport_KDF.patch- Update to 1.1.1d (bsc#1133925, jsc#SLE-6430) * Fixed a fork protection issue. OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. (bsc#1150247, CVE-2019-1549) * Compute ECC cofactors if not provided during EC_GROUP construction. Before this change, EC_GROUP_set_generator would accept order and/or cofactor as NULL. After this change, only the cofactor parameter can be NULL. (bsc#1150003, CVE-2019-1547) * Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey. (bsc#1150250, CVE-2019-1563) * For built-in EC curves, ensure an EC_GROUP built from the curve name is used even when parsing explicit parameters, when loading a serialized key or calling EC_GROUP_new_from_ecpkparameters()/EC_GROUP_new_from_ecparameters(). * Early start up entropy quality from the DEVRANDOM seed source has been improved for older Linux systems. * Changed DH_check to accept parameters with order q and 2q subgroups. With order 2q subgroups the bit 0 of the private key is not secret but DH_generate_key works around that by clearing bit 0 of the private key for those. This avoids leaking bit 0 of the private key. * Significantly reduce secure memory usage by the randomness pools. * Revert the DEVRANDOM_WAIT feature for Linux systems - drop 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch (upstream) - refresh patches * openssl-1.1.0-no-html.patch * openssl-jsc-SLE-8789-backport_KDF.patch- To avoid seperate certification of openssh server / client move the SSH KDF (Key Derivation Function) into openssl. * jsc#SLE-8789 * Sourced from commit 8d76481b189b7195ef932e0fb8f0e23ab0120771#diff-a9562bc75317360a2e6b8b0748956e34 in openssl master (introduce the SSH KDF) and commit 5a285addbf39f91d567f95f04b2b41764127950d in openssl master (backport EVP/KDF API framework) * added openssl-jsc-SLE-8789-backport_KDF.patch- Upgrade to 1.1.1c (jsc#SLE-9135, bsc#1148799) * Support for TLSv1.3 added * Allow GNU style "make variables" to be used with Configure. * Add a STORE module (OSSL_STORE) * Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes * Add multi-prime RSA (RFC 8017) support * Add SM3 implemented according to GB/T 32905-2016 * Add SM4 implemented according to GB/T 32907-2016. * Add 'Maximum Fragment Length' TLS extension negotiation and support * Add ARIA support * Add SHA3 * Rewrite of devcrypto engine * Add support for SipHash * Grand redesign of the OpenSSL random generator - drop FIPS support * don't build with FIPS mode (not supported in 1.1.1) - drop FIPS patches * openssl-fips-clearerror.patch * openssl-fips_disallow_ENGINE_loading.patch * openssl-fips-dont-fall-back-to-default-digest.patch * openssl-fips-dont_run_FIPS_module_installed.patch * openssl-fips-fix-odd-rsakeybits.patch * openssl-fips-rsagen-d-bits.patch * openssl-fips-selftests_in_nonfips_mode.patch * openssl-rsakeygen-minimum-distance.patch * openssl-1.1.0-fips.patch - add TLS 1.3 ciphers to DEFAULT_SUSE - merge openssl-1.0.1e-add-suse-default-cipher.patch and openssl-1.0.1e-add-test-suse-default-cipher-suite.patch to openssl-DEFAULT_SUSE_cipher.patch - Use upstream patch for the locale crash (bsc#1135550) * https://github.com/openssl/openssl/pull/8966 * add 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch - drop patches (upstream): * openssl-Bleichenbachers_CAT.patch * openssl-CVE-2018-0734.patch * openssl-CVE-2018-0735.patch * openssl-CVE-2019-1543.patch * openssl-disable_rsa_keygen_tests_with_small_modulus.patch * openssl-dsa_paramgen2_check.patch * openssl-One_and_Done.patch * openssl-speed_skip_binary_curves_NO_EC2M.patch * openssl-static-deps.patch * openssl-urandom-reseeding.patch * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * 0001-DSA-mod-inverse-fix.patch * 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch * 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch - drop s390x patches (rebased): * 0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch * 0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch * 0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch * 0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch * 0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch * 0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch * 0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch * 0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch * 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * 0001-s390x-assembly-pack-extend-s390x-capability-vector.patch - add s390x patches: * 0001-s390x-assembly-pack-perlasm-support.patch * 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch * 0003-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch * 0004-s390x-assembly-pack-fix-formal-interface-bug-in-chac.patch * 0005-s390x-assembly-pack-import-chacha-from-cryptogams-re.patch * 0006-s390x-assembly-pack-import-poly-from-cryptogams-repo.patch- Fix segfault in openssl speed when an unknown algorithm is passed (bsc#1125494) * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch - Correctly skip binary curves in openssl speed to avoid spitting errors (bsc#1116833) * add openssl-speed_skip_binary_curves_NO_EC2M.patch- OpenSSL Security Advisory [6 March 2019] * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543) * add openssl-CVE-2019-1543.patch- Add s390x poly1305 vectorized implementation (fate#326351) * https://github.com/openssl/openssl/pull/7991 - add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch- Add vectorized chacha20 implementation for s390x (fate#326561) * https://github.com/openssl/openssl/pull/6919 - add patches: 0001-s390x-assembly-pack-perlasm-support.patch 0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch- Replace fate#321518 s390x patches from closed pull request https://github.com/openssl/openssl/pull/2859 with patches from openssl git master (bsc#1122984) - add patches: 0001-s390x-assembly-pack-extend-s390x-capability-vector.patch 0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch 0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch 0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch 0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch 0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch 0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch 0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch 0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch - drop patches: 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch- Fix FIPS RSA generator (bsc#1118913) * import fixed openssl-1.1.0-fips.patch from Fedora * drop openssl-CVE-2018-0737-fips.patch which got merged into openssl-1.1.0-fips.patch * refresh openssl-fips-rsagen-d-bits.patch- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951) * https://github.com/openssl/openssl/issues/7739 * add patch openssl-Bleichenbachers_CAT.patch- OpenSSL Security Advisory [30 October 2018] * Timing vulnerability in ECDSA signature generation (bsc#1113651, CVE-2018-0735) * Timing vulnerability in DSA signature generation (bsc#1113652, CVE-2018-0734) * And more timing fixes - Add patches: * openssl-CVE-2018-0734.patch * openssl-CVE-2018-0735.patch * 0001-DSA-mod-inverse-fix.patch * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid conflicts when updating from older distributions (bsc#1106180)- Fix infinite loop in DSA generation with incorrect parameters (bsc#1112209) * add openssl-dsa_paramgen2_check.patch- Fix One&Done side-channel attack on RSA (bsc#1104789) * add openssl-One_and_Done.patch- Update to 1.1.0i - Align with SLE-12-SP4 OpenSSL Security Advisory [12 June 2018] * Reject excessively large primes in DH key generation (bsc#1097158, CVE-2018-0732) * Make EVP_PKEY_asn1_new() a bit stricter about its input * Revert blinding in ECDSA sign and instead make problematic addition length-invariant. Switch even to fixed-length Montgomery multiplication. * Change generating and checking of primes so that the error rate of not being prime depends on the intended use based on the size of the input. * Increase the number of Miller-Rabin rounds for DSA key generating to 64. * Add blinding to ECDSA and DSA signatures to protect against side channel attacks * When unlocking a pass phrase protected PEM file or PKCS#8 container, we now allow empty (zero character) pass phrases. * Certificate time validation (X509_cmp_time) enforces stricter compliance with RFC 5280. Fractional seconds and timezone offsets are no longer allowed. * Fixed a text canonicalisation bug in CMS - drop patches (upstream): * 0001-Limit-scope-of-CN-name-constraints.patch * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch * openssl-add-blinding-to-dsa.patch * openssl-add-blinding-to-ecdsa.patch * openssl-CVE-2018-0732.patch - refresh patches: * openssl-1.1.0-fips.patch * openssl-disable_rsa_keygen_tests_with_small_modulus.patch - rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch as it now only includes changes to the fips code- Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470) - Don't Require openssl-1_1 from the devel package, just Recommend it- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid dependency issues during updates (bsc#1090765)- Relax CN name restrictions (bsc#1084011) * added patches: 0001-Limit-scope-of-CN-name-constraints.patch 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch- Reject excessively large primes in DH key generation (bsc#1097158, CVE-2018-0732) * openssl-CVE-2018-0732.patch - blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592) * openssl-add-blinding-to-ecdsa.patch * openssl-add-blinding-to-dsa.patch- OpenSSL Security Advisory [16 Apr 2018] * Cache timing vulnerability in RSA Key Generation (CVE-2018-0737, bsc#1089039) * add openssl-CVE-2018-0737.patch- Fix escaping in c_rehash (boo#1091961, bsc#1091963) * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch- Tolerate a Certificate using a non-supported group on server side (boo#1084651) * https://github.com/openssl/openssl/pull/5607 * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch- Update to 1.1.0h OpenSSL Security Advisory [27 Mar 2018] * Constructed ASN.1 types with a recursive definition could exceed the stack (CVE-2018-0739) (bsc#1087102) * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738) (bsc#1071906) - refresh patches: * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * openssl-1.1.0-fips.patch * openssl-pkgconfig.patch * openssl-rsakeygen-minimum-distance.patch * openssl-static-deps.patch- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the new libopenssl1_1-32bit: it does not belong to the devel package.- Renamed from openssl-1_1_0 (bsc#1081335) * All the minor versions of the 1.1.x openssl branch have the same sonum and keep ABI compatibility * obsolete the 1_1_0 packages - update baselibs.conf with the new version names- Remove bit obsolete syntax - Use %license macro- Don't disable afalgeng on aarch64- Add support for s390x CPACF enhancements (fate#321518) patches taken from https://github.com/openssl/openssl/pull/2859: * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch- Do not filter pkgconfig() provides/requires.- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a clean upgrade path as an aid to zypp (boo#1070003).- Update to 1.1.0g OpenSSL Security Advisory [02 Nov 2017] * bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736) (bsc#1066242) * Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735) (bsc#1056058) - drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream) - refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch- update DEFAULT_SUSE cipher list (bsc#1055825) * add CHACHA20-POLY1305 * add ECDSA ciphers * remove 3DES - modified openssl-1.0.1e-add-suse-default-cipher.patch- do not require openssl1_1_0-targettype in devel-targettype, as it is not built (it has no libraries)- The description is supposed to describe the package, not the development process or history. (Synchronize with the already-updates descriptions in openssl-1_0_0.) - Update historic copypasted boilerplate summaries ("include files mandatory for development")- Disable the verbosity of the tests as we expose yet another race condition in that- Fix a race condition in tests to make the package build reliably * https://github.com/openssl/openssl/issues/3562 * 0001-Fix-a-TLSProxy-race-condition.patch- Add Provides and Conflicts for -devel package in baselibs.conf.- Add patch openssl-no-date.patch to disable date inclusion in most of the binaries - Use autopatch to make things smaller - Enable verbose output on the tests - Paralelize depmod- update to 1.1.0f * bugfix only release - disable RSA keygen tests, because they use too small modulus, which is rejected by our CC/FIPS hardening patches * added openssl-disable_rsa_keygen_tests_with_small_modulus.patch - refreshed openssl-rsakeygen-minimum-distance.patch and 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch- Add conflict for any libopenssl-devel that is not in our version- Avoid the requires conflict between 1.1 and 1.0 openssl- Add conflict on docu packages- drop unnecessary README.SUSE- add openssl-1.1-fix-ppc64.patch from Marcus Meissner to fix build on ppc64- Fix build on aarch64- Remove libpadlock conditional, no longer present- Update baselibs.conf to contain all the renamed packages- re-enable tests on SLE-12 and below despite current failure, so they are automatically run once the issue is resolved- Filter out the pkgconfig provides to force usage of the main openssl package provides- disable tests on SLE-12 and its derivates * they fail because of glibc bug bsc#1035445 - remove README-FIPS.txt (outdated)- drop openssl-fipslocking.patch The locking in 1.1.0 has been rewritten and converted to the new threading API. The fips deadlock (at least bsc#991193) can't be reproduced anymore. - don't ship useless INSTALL* files- simplify openssl-fips-dont-fall-back-to-default-digest.patch The -non-fips-allow option was dropped in OpenSSL 1.1.0 - drop openssl-no-egd.patch as OpenSSL 1.1.0 disables EGD at compile time by default - renumber the patches so the numbers are consequent- Update showciphers.c to work with new openssl- Add patch openssl-static-deps.patch to allow dependencies on statically build libraries - Refresh openssl-1-1.0-fips.patch to take in use the above approach - Silence the install manpage rename phase- Start update to 1.1.0e basing of the 1.0.0 split release - Drop patch merge_from_0.9.8k.patch the ppc64 should work out of the box - Drop patch openssl-engines-path.patch converted to configure option - Drop patch openssl-1.0.2a-padlock64.patch code behind was redone does not apply at all - Drop patch openssl-fix-pod-syntax.diff mostly merged upstream or not applicable - Drop patch compression_methods_switch.patch as we do not need to keep the compat on this release anymore - Drop patch openssl-1.0.2a-ipv6-apps.patch which was upstreamed - Drop upstreamed patch openssl-1.0.2a-default-paths.patch - Drop obsolete patch openssl-1.0.0-c_rehash-compat.diff - Drop obsolete patch openssl-missing_FIPS_ec_group_new_by_curve_name.patch - Drop obsolete patch openssl-print_notice-NULL_crash.patch - Drop obsolete patch openssl-randfile_fread_interrupt.patch - Refresh patch openssl-truststore.patch - Refresh baselibs.conf to correctly reflect soname - Add patch openssl-1.1.0-fips.patch obsoleting bunch of older: * openssl-1.0.2i-fips.patch * openssl-1.0.2a-fips-ec.patch * openssl-1.0.2a-fips-ctor.patch * openssl-1.0.2i-new-fips-reqs.patch * openssl-fips_disallow_x931_rand_method.patch - Add new patch for upstream: * 0001-Resume-reading-from-randfile-when-interrupted-by-a-s.patch - Refresh patch openssl-pkgconfig.patch - Drop patch openssl-gcc-attributes.patch as the code was redone - Rebase patch 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch - Rebase patch openssl-no-egd.patch - Rebase patch openssl-1.0.1e-add-suse-default-cipher.patch and openssl-1.0.1e-add-test-suse-default-cipher-suite.patch - Rebase patch openssl-fips_disallow_ENGINE_loading.patch - Rebase patch openssl-urandom-reseeding.patch - Rebase patch openssl-fips-rsagen-d-bits.patch - Rebase patch openssl-fips-selftests_in_nonfips_mode.patch - Remove switch for ssl2 - no longer present - Remve the buildinf.h parsing, should no longer be needed - Drop the rehash in build, no longer needed - Drop openssl-fips-hidden.patch as it is not really needed - Do not sed in secure_getenv upstream does it in code on their own - Do not install html converted manpages * openssl-1.1.0-no-html.patch- Drop the symbol hiding patches to ease maintenance updates: * 0005-libssl-Hide-library-private-symbols.patch * 0001-libcrypto-Hide-library-private-symbols.patch- Add new patch for engines folders to allow co-installation * openssl-engines-path.patch- Drop openssl-ocloexec.patch as it causes additional maintenance burden we would like to avoid- Drop bug610223.patch as we moved to libdir- Move check to %check phase - Split showciphers to separate file- Move openssl to /usr/lib64 from /lib64- Remove some of the DSO setting code that is not needed - Fix the showciphers binary- Rename to openssl-1_0_0 to allow instalation of multiple versions- Remove O3 from optflags, no need to not rely on distro wide settings - Remove conditions for sle10 and sle11, we care only about sle12+ - USE SUSE instead of SuSE in readme - Pass over with spec-cleaner- fix X509_CERT_FILE path (bsc#1022271) and rename updated openssl-1.0.1e-truststore.diff to openssl-truststore.patch- Updated to openssl 1.0.2k - bsc#1009528 / CVE-2016-7055: openssl: Montgomery multiplication may produce incorrect results - bsc#1019334 / CVE-2016-7056: openssl: ECSDA P-256 timing attack key recovery - bsc#1022085 / CVE-2017-3731: openssl: Truncated packet could crash via OOB read - bsc#1022086 / CVE-2017-3732: openssl: BN_mod_exp may produce incorrect results on x86_64- resume reading from /dev/urandom when interrupted by a signal (bsc#995075) * add openssl-randfile_fread_interrupt.patch- add FIPS changes from SP2: - fix problems with locking in FIPS mode (bsc#992120) * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428 and bsc#990207 * bring back openssl-fipslocking.patch - drop openssl-fips_RSA_compute_d_with_lcm.patch (upstream) (bsc#984323) - don't check for /etc/system-fips (bsc#982268) * add openssl-fips-dont_run_FIPS_module_installed.patch - refresh openssl-fips-rsagen-d-bits.patch- update to openssl-1.0.2j * Missing CRL sanity check (CVE-2016-7052 bsc#1001148)- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575) * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249) * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844) * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419) * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749) * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819) * Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359) * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324) * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377) * Certificate message OOB reads (CVE-2016-6306) (bsc#999668) - update to openssl-1.0.2i * remove patches: openssl-1.0.2a-new-fips-reqs.patch openssl-1.0.2e-fips.patch * add patches: openssl-1.0.2i-fips.patch openssl-1.0.2i-new-fips-reqs.patch- fix crash in print_notice (bsc#998190) * add openssl-print_notice-NULL_crash.patch- OpenSSL Security Advisory [3rd May 2016] - update to 1.0.2h (boo#977584, boo#977663) * Prevent padding oracle in AES-NI CBC MAC check A MITM attacker can use a padding oracle attack to decrypt traffic when the connection uses an AES CBC cipher and the server support AES-NI. (CVE-2016-2107, boo#977616) * Fix EVP_EncodeUpdate overflow An overflow can occur in the EVP_EncodeUpdate() function which is used for Base64 encoding of binary data. If an attacker is able to supply very large amounts of input data then a length check can overflow resulting in a heap corruption. (CVE-2016-2105, boo#977614) * Fix EVP_EncryptUpdate overflow An overflow can occur in the EVP_EncryptUpdate() function. If an attacker is able to supply very large amounts of input data after a previous call to EVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption. (CVE-2016-2106, boo#977615) * Prevent ASN.1 BIO excessive memory allocation When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio() a short invalid encoding can casuse allocation of large amounts of memory potentially consuming excessive resources or exhausting memory. (CVE-2016-2109, boo#976942) * EBCDIC overread ASN1 Strings that are over 1024 bytes can cause an overread in applications using the X509_NAME_oneline() function on EBCDIC systems. This could result in arbitrary stack data being returned in the buffer. (CVE-2016-2176, boo#978224) * Modify behavior of ALPN to invoke callback after SNI/servername callback, such that updates to the SSL_CTX affect ALPN. * Remove LOW from the DEFAULT cipher list. This removes singles DES from the default. * Only remove the SSLv2 methods with the no-ssl2-method option. When the methods are enabled and ssl2 is disabled the methods return NULL.- Remove a hack for bsc#936563 - Drop bsc936563_hack.patch- import fips patches from SLE-12 * openssl-fips-clearerror.patch * openssl-fips-dont-fall-back-to-default-digest.patch * openssl-fips-fix-odd-rsakeybits.patch * openssl-fips-rsagen-d-bits.patch * openssl-fips-selftests_in_nonfips_mode.patch * openssl-fips_RSA_compute_d_with_lcm.patch * openssl-fips_disallow_ENGINE_loading.patch * openssl-fips_disallow_x931_rand_method.patch * openssl-rsakeygen-minimum-distance.patch * openssl-urandom-reseeding.patch- add support for "ciphers" providing no encryption (bsc#937085) * don't build with -DSSL_FORBID_ENULL- update to 1.0.2g (bsc#968044) * Disable weak ciphers in SSLv3 and up in default builds of OpenSSL. Builds that are not configured with "enable-weak-ssl-ciphers" will not provide any "EXPORT" or "LOW" strength ciphers. * Disable SSLv2 default build, default negotiation and weak ciphers. SSLv2 is by default disabled at build-time. Builds that are not configured with "enable-ssl2" will not support SSLv2. Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via the version-flexible SSLv23_method() will need to explicitly call either of: SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); or SSL_clear_options(ssl, SSL_OP_NO_SSLv2); (CVE-2016-0800) * Fix a double-free in DSA code (CVE-2016-0705) * Disable SRP fake user seed to address a server memory leak. Add a new method SRP_VBASE_get1_by_user that handles the seed properly. (CVE-2016-0798) * Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption (CVE-2016-0797) * ) Side channel attack on modular exponentiation http://cachebleed.info. (CVE-2016-0702) * ) Change the req app to generate a 2048-bit RSA/DSA key by default, if no keysize is specified with default_bits. This fixes an omission in an earlier change that changed all RSA/DSA key generation apps to use 2048 bits by default.- update to 1.0.2f (boo#963410) * ) DH small subgroups (boo#963413) Historically OpenSSL only ever generated DH parameters based on "safe" primes. More recently (in version 1.0.2) support was provided for generating X9.42 style parameter files such as those required for RFC 5114 support. The primes used in such files may not be "safe". Where an application is using DH configured with parameters based on primes that are not "safe" then an attacker could use this fact to find a peer's private DH exponent. This attack requires that the attacker complete multiple handshakes in which the peer uses the same private DH exponent. For example this could be used to discover a TLS server's private DH exponent if it's reusing the private DH exponent or it's using a static DH ciphersuite. (CVE-2016-0701) * ) SSLv2 doesn't block disabled ciphers (boo#963415) A malicious client can negotiate SSLv2 ciphers that have been disabled on the server and complete SSLv2 handshakes even if all SSLv2 ciphers have been disabled, provided that the SSLv2 protocol was not also disabled via SSL_OP_NO_SSLv2. (CVE-2015-3197) * ) Reject DH handshakes with parameters shorter than 1024 bits.- update to 1.0.2e * fixes five security vulnerabilities * Anon DH ServerKeyExchange with 0 p parameter (CVE-2015-1794) (bsc#957984) * BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193) (bsc#957814) * Certificate verify crash with missing PSS parameter (CVE-2015-3194) (bsc#957815) * X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812) * Race condition handling PSK identify hint (CVE-2015-3196) (bsc#957813) - pulled a refreshed fips patch from Fedora * openssl-1.0.2a-fips.patch was replaced by openssl-1.0.2e-fips.patch - refresh openssl-ocloexec.patch- update to 1.0.2d * fixes CVE-2015-1793 (bsc#936746) Alternate chains certificate forgery During certificate verfification, OpenSSL will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. - drop openssl-fix_invalid_manpage_name.patch (upstream)- Workaround debugit crash on ppc64le with gcc5 bsc936563_hack.patch (bsc#936563)- update merge_from_0.9.8k.patch replacing __LP64__ by __LP64 this is a change versus previous request 309611 required to avoid build error for ppc64- Build with no-ssl3, for details on why this is needed read rfc7568. Contrary to the "no-ssl2" option, this does not require us to patch dependant packages as the relevant functions are still available (SSLv3_(client|server)_method) but will fail to negotiate. if removing SSL3 methods is desired at a later time, option "no-ssl3-method" needs to be used.- update to 1.0.2c * Fix HMAC ABI incompatibility - refreshed openssl-1.0.2a-fips.patch- update to 1.0.2b * Malformed ECParameters causes infinite loop (CVE-2015-1788) * Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789) * PKCS7 crash with missing EnvelopedContent (CVE-2015-1790) * CMS verify infinite loop with unknown hash function (CVE-2015-1792) * Race condition handling NewSessionTicket (CVE-2015-1791) - refreshed patches: * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch * 0001-libcrypto-Hide-library-private-symbols.patch * openssl-1.0.2a-default-paths.patch * openssl-1.0.2a-fips.patch * compression_methods_switch.patch * openssl-1.0.1e-add-test-suse-default-cipher-suite.patch- update to 1.0.2a * Major changes since 1.0.1: - Suite B support for TLS 1.2 and DTLS 1.2 - Support for DTLS 1.2 - TLS automatic EC curve selection. - API to set TLS supported signature algorithms and curves - SSL_CONF configuration API. - TLS Brainpool support. - ALPN support. - CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH. - packaging changes: * merged patches modifying CIPHER_LIST into one, dropping: - openssl-1.0.1e-add-suse-default-cipher-header.patch - openssl-libssl-noweakciphers.patch * fix a manpage with invalid name - added openssl-fix_invalid_manpage_name.patch * remove a missing fips function - openssl-missing_FIPS_ec_group_new_by_curve_name.patch * reimported patches from Fedora dropped patches: - openssl-1.0.1c-default-paths.patch - openssl-1.0.1c-ipv6-apps.patch - openssl-1.0.1e-fips-ctor.patch - openssl-1.0.1e-fips-ec.patch - openssl-1.0.1e-fips.patch - openssl-1.0.1e-new-fips-reqs.patch - VIA_padlock_support_on_64systems.patch added patches: - openssl-1.0.2a-default-paths.patch - openssl-1.0.2a-fips-ctor.patch - openssl-1.0.2a-fips-ec.patch - openssl-1.0.2a-fips.patch - openssl-1.0.2a-ipv6-apps.patch - openssl-1.0.2a-new-fips-reqs.patch - openssl-1.0.2a-padlock64.patch * dropped security fixes (upstream) - openssl-CVE-2015-0209.patch - openssl-CVE-2015-0286.patch - openssl-CVE-2015-0287.patch - openssl-CVE-2015-0288.patch - openssl-CVE-2015-0289.patch - openssl-CVE-2015-0293.patch * upstream reformatted the sources, so all the patches have to be refreshed- security update: * CVE-2015-0209 (bnc#919648) - Fix a failure to NULL a pointer freed on error * CVE-2015-0286 (bnc#922496) - Segmentation fault in ASN1_TYPE_cmp * CVE-2015-0287 (bnc#922499) - ASN.1 structure reuse memory corruption * CVE-2015-0288 x509: (bnc#920236) - added missing public key is not NULL check * CVE-2015-0289 (bnc#922500) - PKCS7 NULL pointer dereferences * CVE-2015-0293 (bnc#922488) - Fix reachable assert in SSLv2 servers * added patches: openssl-CVE-2015-0209.patch openssl-CVE-2015-0286.patch openssl-CVE-2015-0287.patch openssl-CVE-2015-0288.patch openssl-CVE-2015-0289.patch openssl-CVE-2015-0293.patch- The DATE stamp moved from crypto/Makefile to crypto/buildinf.h, replace it there (bsc#915947)- openssl 1.0.1k release bsc#912294 CVE-2014-3571: Fix DTLS segmentation fault in dtls1_get_record. bsc#912292 CVE-2015-0206: Fix DTLS memory leak in dtls1_buffer_record. bsc#911399 CVE-2014-3569: Fix issue where no-ssl3 configuration sets method to NULL. bsc#912015 CVE-2014-3572: Abort handshake if server key exchange message is omitted for ephemeral ECDH ciphersuites. bsc#912014 CVE-2015-0204: Remove non-export ephemeral RSA code on client and server. bsc#912293 CVE-2015-0205: Fixed issue where DH client certificates are accepted without verification. bsc#912018 CVE-2014-8275: Fix various certificate fingerprint issues. bsc#912296 CVE-2014-3570: Correct Bignum squaring. and other bugfixes. - openssl.keyring: use Matt Caswells current key. pub 2048R/0E604491 2013-04-30 uid Matt Caswell uid Matt Caswell sub 2048R/E3C21B70 2013-04-30 - openssl-1.0.1e-fips.patch: rediffed - openssl-1.0.1i-noec2m-fix.patch: removed (upstream) - openssl-ocloexec.patch: rediffed- suse_version 10.1 & 10.2 x86_64 can not enable-ec_nistp_64_gcc_128- openssl-1.0.1i-noec2m-fix.patch: only report the Elliptic Curves we actually support (not the binary ones) (bnc#905037)- openSUSE < 11.2 doesn't have accept4()- openSSL 1.0.1j * Fix SRTP Memory Leak (CVE-2014-3513) * Session Ticket Memory Leak (CVE-2014-3567) * Add SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) * Build option no-ssl3 is incomplete (CVE-2014-3568)/sbin/ldconfig/sbin/ldconfiglibopenssl-1_0_0-hmaclibopenssl1_1-hmaclibopenssl1_1_0libopenssl1_1_0-hmach03-ch2b 1718203760 1.1.1w-150600.5.3.11.1.1w-150600.5.3.11.1.1w-150600.5.3.11.1.1w-150600.5.3.1.libcrypto.so.1.1.hmac.libssl.so.1.1.hmacengines-1.1afalg.socapi.sopadlock.solibcrypto.so.1.1libssl.so.1.1libopenssl1_1LICENSE/usr/lib64//usr/lib64/engines-1.1//usr/share/licenses//usr/share/licenses/libopenssl1_1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34284/SUSE_SLE-15-SP6_Update/faa58dd09c8a844506f40d91d00aeb3d-openssl-1_1.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e9866ee5615bc66c3be977757ab5f975f4148a7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bfb107b324c0e7da0bddc1e9ef6acb6a2d68bab0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5550ca988c745d04745d77538593e224cf32e951, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9e4d41fe262abc2f89996db20a816afb1103ec8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4f7e48d114d2295fc160438401e5c5eea25474b, stripped >0R RR RRRRRRRRRRRPPPPPPPPPPPPPPPP P P P P P P P P P PPPPPPPPPRRR RR R R RRR RRRRPPPPPPPPRR RRR RRRRRRRRpet;?HIIمca-certificates-mozillautf-892ec24fe2f4659147c0cc18dde0c83f230d149b42f7b1a34f4d5b4165e3f54f5?p7zXZ !t/]"k%+4"c /zC˼fӐ+YNm~iflhd2-II {CDK:[9-J7!/蔽L8*vd%>R|0V0U$ؐ^ȅḑ ap3۪cV\c~50%W#n~m&s1J*cY`&ʂ6 t Tb, ZɁaR12bbQ/֢xgh\KN->,gܲQrկ~\ t/n vY1qQ<7hb[^~pdTVnJ ٵû\%]3rSgn}N)+&]R׺Ԁ`O4F_47z@]5,K,,zQ5 [vVp^ؕw2I:K򎀦F d) g8`t1_}zCC iVi$[yXӊG/V9GyP {Vk}'ֿzEyFF1L].%F\6[By~yb#p;+Zwj@BHL=PnTR WQ؎UCG/BkA럲vagh;8cn qU 9Z_"إPtg@u͙)nBݚ =jZ$"X-i#m ѯ<{xxT~.[*ZnP *v@+RKU5< xM5PZixZ4, B9R5b{Qձ儲N~7C@ӝag7 Ë$X `e.^{$a9Z^q@G@k+rC)/)*zOMǕ)` e\u>LJEz_Zs/o~fB^5dt}j&W6Z)']ayQɦ3={ǹ*7>P0T^0j2c!u:~uN#.J9ɓToUqc~]'j?>$pCZ¿Y8y#ߛո_,QkM(S a\gHw:|޿G4p'V@zʰKd'\w-[s9Iu~,]b1KRn:ЛzIkGM\ALB}׎U2P7PU#`gKTvjJ¶|ɞJUrH{+l:H?l@of!^S =(קUEjMU8V!=`}]Y>-WwXWz{HpD5و"rSe@RT7EX42W:FI%&]("*d7$nKyxohi0/-`49poFZ>k%t􍥀dFܹ`CPb4Gz_hR/,nee2ƌJF)pEш7pbzs{1$z]]$ Rwhj3wd :'c55¬q`1h𒡈` ̀ƃM tj,˜IA'ރW6w1ޤ6Uی6tL.OZ\?i\sׁ̤RUocˡ'cUNЏWDp.wmʀj=+2 UDZ]3:&Ife{l~(C:@S5:]l׆[+#fkrt5{\ߐg#/C IbT+kB`&Ք|ͅO */};|VJ÷j J@^)ѻyQbCF2 &`)߉b c1r_߈wAwz`!nNN&f͙\J!J2!8HoQ:p/ Zqu^ɯ"= _5_c_4r uAQ"ZgUJ#~9j\r1cu:]FqG>+ c_ꐢ#Agipq:$D`U%]2y{+Qt4i&Xy粷nNJ!55O 3̣ڶK޿/ A+} Pu[*ir ˅ W@Jq *;WKFZԥȘJ`Z5!7o%$rnq <*Mg-Ux_Oux8䢬z$rPu%lvlUQ}QTa#Q ~!D{TWڄoDsȟ5}Gsԑ龇ЊuG@qw< DЬ$?#&(Zho 84.PիoN:uïM~F!0n{sFw#7 l1|e13@aUMaXǑ+eehQ(E:J=ED ZQF7_%Jf%arҡ*,߇kS:a?IvD{&Ћ{YL:d9C[',Ν55T,y-,@2IKϣ2z|KS:,,ђCNVm`{ 9('h5Y4W=aɤ9iY1$HA~.fLăzxa_qx5 &kU'TCuX0gvZFqx@wъ~7b?TC&+֗5Mqp>Wpir3K+[6P%i6bܣlq.c*; ,^owDDjڜ'.ءM[/)- zħ_ȁ!53F~P}! ωQ֮)7`ǃjBKKQ"&FmT%bIa"!21CFxOs!oGJNǕHFcT > 0!w#=%jUyu4F6mF}8C,;m [)[%pEJ!D{EԊ//y]0c8ԺGêu\-'@\)XjS/Ѿ85r=# 6p2P`0kZuRMhD- *li=0kO2VuAF yݫ+FLnEQ0$fScN!X+Nht AlR_aaROOGt,;fhW.w>[ItcM ᐽy9:?L ݮAvHNbؐ(dqA){tM̊砬F!'u G=sl7~ҮUמɛ^k}L-8 Qgw&MܳbE Q`aaM_?3h`R|v"3P骡utF(:D}w}[3u: 2`>/VE ͫ?XblXe)&A'%԰@(H"lp<`c PÃyt #hcl-2;kv$!h`R9ؗh(#D uUB|($ON)VjpM>h m^ N\,%NeT`Vc|8a UhƯ jX:D޷8h)r R1_WlZc z$6*alk:f'@K|0K KrмH(HyWR VUh̐x#W$Q\`Kwnۑf(97u%߫H粓?jA L@Z=. 2I[ڂ>bƫ^uOsF_CۂK*Dx6a:=Z:=1fEԪ^jJoXƞ%U2>^(.p 00Je. @[r@Zf[OT%">}8|9jא^f5Z+pVߗ-+Vm2)cCU>͛8“Y!= 1ec][?jB,4jllgTL ws 2ԁ!>4DV q7C߆P6RZлetDƕYfy nO{1 ͺ\̊%$=D"Zn2t䧨2wY z0UT/?W5 ljmh7ϱIݸ߽q}#(i]ԕbʰ^ij8)3֠V!qcZʛzK=ꏵFcXK4K=a0m'Tz+*#\mkkf3xz8p߁VP6m_{q+VH`8'>X 4麔W$fe4®6_NwO|;z[ڔmGI}Y3R#F+5M!cGWQt —}WVfK((̭DJda\JF $ {|]KG'DqޗnfEAs`'8, {UԌKuZ^ qtp?W2zb !G 3!rl֦x K^iV_[Y'o~N)Lo;:!-TFƨ4 AMRI׉Eh!_;C5lVLkc*T⡡NReoCw=ŧA,hQ-"r6'=#ٳWDZ C-QR.ΙE#Qٛr(}/@I<m. #g}Oc`RxK.wgѢbr>Ox##Wڹh"]b7傎 gPDTڹ΀&i ϖk#륊V#< %{[k_ 1e}&2~B?Tٯ*iY1?F9t񂇸ΜrD*4yܫVoi B-H%v8t:idÒ^ftgʩS7[(}W\p]Ŀ$]iK`{Zg6Lwj4Njz,ŵ3ʉCQUT~]P"3'6.U\l.||ba>)Tbe!d뗊Sn3VrG+8!8sAp^$kKH 6O6*Ug ^w7\:lnW6{fO>4eKSɺB_&XHBCJ7oңea;ʆ}Q 0{#R*'y'p!zȴ,ƭi(DNnJr:Y!ͦHkgLQ'+]>ϯc1gר(ٕ;(Lj8_M݊idҳt tj bDPםDϝ4BxvQNHO$D_HDe}?;u'[D)21M!A ٩Bx r6ƶJŏ+Q'Cjl2c\}Q( Z^P'.!*=(h4zmڤDդV`5Po{rUGYt~ ̍[ F\һԾҢE5R`ĀJicvJU9]" _4vҍ3F=]ޮ?V~X&˚s2테73ӗ-%*#5\&:_y!ݗh(G =M8}̍tЩXw3ݘArLH}>paPcD?_Qg^ IjCk9bM1d3]N Ζ# 9Ft-8'Ѱh]i3e,zm== Hq&f2cwa~UB3hR7,ZL&jrʘZѫ$Sr|#92&} +Ť\gڜ2}u<6 ~'iZV "& ^MdCpK&3o_8C{BٌK|soWG3]XR[[\!+wc2h@>&C$&c&ײC"ahZU^9!Z8ȇeQBctjݰga_fűxH{X"U{|M}Z*i*ҥW}E>; ,7PuJE+0= y=\io+vpFi h/0xD}Qx5yMhpm%V«B 5mN2sKbywrdWe3H7EII ^UEvH,*q}ibJuvg3B$w4.MZ9m [>JH 9jOK(S/6HD{nh3HǻEKϭab  Vy8ޛ/^iW/' QH@d釣uaQ }ٚJ/`yX~%iZByABinl|Ӆ(a9J?[Ѽw})>&;Ƙl1 gO~VQ Š-H>d5Eի%%yO M PHx# A3zɹz*N[qz<=R(H p`|E[?aaw`h@L2%{FҮ0poG`鷑jr|wrvDv.X.̯IE%oE~rQ#C素*|j_mؗi >YwBűc o_`p; WƻuRI!|̱1%y\~~&;כCC?,<רAg^rW_4u. &KN-[thԀ@LuC ADi%6%;BxH g[E5ۙ,{bPkAz넛a"G319HX 7`.20ϡH@?Wz7F *&qL%Sms 4 `U8"CdF,UU,=/v08O}L[@M=GhQ GdE.MCs-v؉'>4 BȨmۿyQ¯o@,'^ok% 'YpF>#%j?G@(XN\J.nm*teW>M ;V_=Vj.G"398< g;1mXsؼ`cm%σR;[jIe@N,9i`9>Adl̚ ޚYa( '%E`̰Pzζ֯Cˍ!.w*ʦS~`0Aԋ1->n.L$zڳmFs=N7̮d?;v,xkTd ٣P[ ꘢Cv7NK%Q!sVң}1FaL8 *3z K9`Ln(lN,H^!*u/& 41>k8#6NȤюr9ɈD)Rh|9~ƙQ~~3&R % H $M]sU]"TsD=bKMcU:[rm}+noBVuyӻ/1Ǭð9/;@')E,4bi[72΃~ Xy/Nc>o-Yt(6;Twքh[wjDp㔔Yoxg}'P}.̅ v>RYkiBl[Ӝ+N/q@MyÎ.;s tTv-`)gN;眧 nJ>KN+RAvzEhz:R VN3ڍmUJs!j ՃBHQk{5M2eǷsj#9\gD =tϡDR!qB"rt+ۆhm=!l#&-tD\!tn>iww:Aߘ[]aY$ɆDfw3A!c1 `gf~&t\HIѮ#;kŮ7% ϝ7Aoj&HgCsƀI/ʼnzWs)?wY=G[> vt uc䩘IBOţטu]aվ \.h:ئC,ntfa<&D$Ac/]֒io9b՚=%t3':Zl>GD8ġ3w[$x{k'\qFH {KwYZOmAυO{k:QUQ!V\d ݤEa߃s MGxN® L}D~nU}= L2F=êI `vR,9a(hiاw^ D4eg3N%B\8 jT 4U>m苓npDwxwIvz~n/"}P07 .W@_nSp3*|S/ەav6F4mDH[ b wwىXnl*f&pWJ w.Bd}d,4w>AmwpJ4"|w+*>`խ>.`cx5V3IN>M&~hGz_p7\LR1ȲH:v}DNףIG& zuosKi -wePoQQsHtLy/w6NxxQ\bŸf(f2F8݋O4QBX=ܨ\y;"׾6h^0>bjLiӉ$ @*e;k쬸ߪ/Qv!~5ϊ╡$ϛlfQ? "e ]G^y´-Q7,vixh:sew_L3*d%$LJ}/1|;l-,wAVH80{${m+ٽ✘XΥPLrrLd|CRjOS0*nU")2er K&2XP5؁]h7HlDY|?$]Epϸ|c 湎;x2 #ځhg{a!-rۊ%W|>6&js:pK''dlS_5uYmV,Dze5 JӿHg)i'+^NX٨Hm+^\#dūg #SKGỽvE:/T̻E >n)UMe u/=C  8ʻL-A6epMJ$@]IBypfلvSWBVΚ#[$],PFn7=?ﮅD<#:c.E3 hǃȠo%G AH%:y3jI@ɶ֮V%jDu1IBgzC(L,0~NθlTyRA^}, mNt WtIj{FYW"6?Gd$)e3O*2?{%715 )ݴ ʵv'L*{=੗+3KӃp8jG NDo\Iڌ0^&}iN a]e" YP&p`'Zi`"Aw&I_M5 \L,;n)FSBϋ>t^oNGliy̞Ik~ 9nwd}K/_˒폲skBR2NV(:eH֥ ypO Y` Pkv N,l0 #W W|QF8bsۯqT",: s H1K'˼#<omQ>vBd&D7VgJ ̎X#C=ɀz$ܻ Ȯ{kxf(~;}H˜H{[ᝢ8,xwÃ\m6Ŧ=8c*Je9Og]򂤽e[F8V\_)aƜTf$3$q`>&[̾\4Vq*OH.{03ubv25{%@\4|[@Cgη_cb~0љ6DkZ y4ݷt_(Ț$+om/clfLWfcuҰoi2c d ^i՜]3H/x zqd iVXry1?)}l|vOC)4D冦sĶ܁YJ aa͊cw550S vƷLM;:6-+ضsJԅ[t-ORh( hq ÎJw9 'z*Fr)wPib.HBqmcts l ScMN{`>nD- HMJr\7ɸBЂ~Lzs&b5Z݇#A\nʾY.a=zI;F/]Pkf{zӤ"-o4A#QOR:Qlq?%e`яSVhr h/XtC)B7Kx3v%/ 0sXN]5 `K63.BM"u}6%$&z8: ;hcvspJ<&/xeB|uͯQ2/?Ԗ1KxnޛVz?厊VjP1[urt)eOjB}Q?ӿh=YK5kJuPg' ըAfF3wB>S4ru"΂bLkuȶT6eD,ق4ĸ#wP"h*+k$Y@jt7jJ'+ADp|>&cYumᙴ:-L6O ROc>m\6nHTFyg!9qdM[KZjV2Tl&'Ւ+ee° Ve W' vt+oEB.]^'}v?.rdѫh&j ZުPx+ѕ\.'[™?{փءZ af蠀|2|@>GPP=&R#ZcX;6x,3DZTHxDI9!69cgpt~NQSꣷmG8oV3?wЉ4҉FiO]Q|xR4<$!l>Iۀ /9TҷȠ^1[eT^=[uקyH0zF=3>3$teQܕ5UXT቏tj>.k|x80+v}]">;(bޔLgHp! _$JdjfKJbuz؝Iv 9 p11mC1M[z^!V xuF#%Elſ$ ?MI6Phv{HF.?h0ryKmkOl]?Z{ H~0~_li{"sL\F.G~6|.9`E嗴o,; f&RTFZ[a3j@Ps,E`PSye&"#d=v$qirl}P^}__Ersg3'Bݲn803hѯ{TTpdg׏-/?H7Io3C h: %z֘!UoK'jVGI1A.`F{yFc'B^AAVQU]"pQ);1oSW+>d&\0 B?&@o7mP }PBukH|NJbJjd-{swìWNG]f1-w2\,hA`#ΖpWj;8nQf_Qhg31>26~?$W!!}*Fj)g2UhW5"ŏLT4_hY{45)WD)u Јٳl 9D9aTn '/>[p Jak<>- ءZ\==ArDUԩ*kkOy.a-#q[?wv?d([g~{,/YT]3J4ӄqĄe"SPG}~Vo 3n\uxk~< %v,,Å %%ff ,E;7~x8\:s9By%k^zcN! tS @󓺎EXݹ-q(Q^ĘX _fb%~FS֖GѮ<9QBKpv+ >F-Nk +rr}X _ns3jYn ςSmE+_Ӄ\V*j>n,[YF>N;jlO 4^JcO[2y<^,0Ҳ(v\6H.gNb0; D \96/VS(߶0Yc 8=|x#(3B%I;. Xѯf> 2Ö@B- 10S:1@Ĕ{v Ҕ~%dOa x ކ1BLH}5Մ\PlT {l{;Sk4v9)g? %sy.A y)ѹ }8#_R6y>PDBJ+e"lREQH(d8^'@ٕ?r0lGrROw1ye`ɰN$[S<i=)1U#ǹiw-uiT>>p F\=d|C7YϊMͯ >«ɗfn֎~+aRUS}] )jnPf*D ӊxCmY̤~E6ǔǐ: G fji$%i1,:ZpqdBGWfF/Fw&τ}YSy{b T}AIPHBiF/e:rL@-/Xф܆5 ӹ6t?@3m9tئѰC6BĆ}AX`^$I>10񠥢/ї$1*I[gSWȖNBV.B[+KPo(P9kRI1\c%F%H7ܯP KYYE|%%(C~rr4OjҤ=Nhz0ƮVDa 9nS·N'ᩝ;S'H*3Zz%7lj$eP fDN^TC!בeʳoQU3CaUXgxbPz*U/|bfh}bstnZy_ἶ.Jeh ji$ƥ3*oAk(< rCsE2Mx13 Vuhr_sjyxO&]@/vMI|ѤJmgIc h\|R,gӏj Sk'M8x`oٗTk֥ tȌwBpt8N!^ ;% T>j =M=@?[ L<|Z{ ?ѻKa=`*|C+1,_fKpnij&Abibp6sLZdrr3m7/'#ǎ$[ d/?$R_4ߘ.7Gu zaKcGYqkM{|? YLr$9QINEM)vt'ԓivIv5>Wِw!`~lٛwݎh~_ ýE7FSmGXpNqRvE8 >w&Ia3JaAk{hXxdfK*J6/e7`ЇPQc:S5źԪ_tYM?'F!T 넛U6Ү_p/ՉaW|mHOʃV#e˵jYH  8) ,NST1l!r`j9'0a7B5G@ϙVp^ԱVK%k,IɄ+zK5XP|xL'2_BDzuEra&mӃaƛ Hdvð' P!ȳV!*fP:"HH`Г>w*%(N``S !CS4Ϩpw9-`G%hΝZ3=z-`a?C yJ_yo8]FQvXӗ?mmgkY{ᡛyZIy@ PXmOP8(3PZ[G0m i_UB,E~li=:Ώxjt12?ooNC"%SCd3 @DJ _Uޏ!1dX= vLx2~CuE1a^V;:5a64_tRdVѠ(Hƕ=Z>Fܤ&|j-k߿AZ`/QFP+e.$F 0#2 #rAE¥!2Bqܦ؆jܓKûHԾ~]K2ֈ{i%i6vMTI< D&NѤH, <&ukҐK# 17CI6jh& Vx6.7n~ %ZԺ+[nLd?ߕ\\,V4a=8AL77򻜹Mer { mqUR2@2*/@'\"X+P2_XsEa#|kлSi,`^蓃ΓTNQzX$OHH{탴vJ 0k(I>3Dȼm<]ʴi |N_Yxw6q>zL~k;?oBQcYPKl<ϝT@#F- ӎݤ/ϻtySU0Ong'Pm$Y tAzBQnotD<9*D:I7`5,qpuoP&,0ǃRw5;Tm?E$:nKq1&i麻D`3&?U ^fOJ[eZ3 r&`;= wn-4IkuM<h]Q~ѩ+0{u1O߷%VQ* W_AO76K#2Wt+~QMQ]'s9Y=J/#ݚlW[Lq@$J\,@1A-@ۀ?2܅Z֐aTn>b\pXP:9K ٗTQnl҆č8oJ剑ŗ5MlQ۩3TiwqvjSZA'l#R]gC8f5Y2# , UN?oTp 7هsRyt04a,=xY؄X%)%?%zdSv" -\ l]jSLY^lx Dz97 Dy96HzG.,Cc8TTbÇ[MWf~I40{41Iãz#SD*@- Q`N'0F8ÄX>§$AixkMW0w)m0f6l#]י9paHӽ cQ`jb]Bg ө+S^j{(|#8szE\%].%va cts~z"y|Y^C9VcT5y:I=!|#M5\MBw̩V[Ǩ ;X_͔ǷP9nzpnp3+FHM^>/ mTmW L<,#)^bBslkoG02p)$4Zi^ gOH= }Kcw0ʟ̖CTtZ0d6ul#KY'=wi bc6]B׼$T32֌~V[qC *!9_:Qw@*6z>o ge= ͅ{}p̷Ia-MӺ#Ɯ5Btk,o/ǎ'RY3%oG5I 8pK 2 [ b,~b_S։"[#kdL[>WBe5Rs]f\!IDSPDio;s1l{W!">Aq`r{9+`H8 '$; *4Zܕt;xg=/To(p.%LڋܬMx-b$ -P.AJ'7<@mvSbVJTBYiB#;s<ۘ!u;CEWcnZ ] _ +5JFMQF0[ΐWx{v@e[!\IKhon_:d,Ea+ئ"L<Ҭ)]hPlp6*閻i矉KDG#8DOAr 9b-_4  ݒ^{F=:'ņ`O+<͘`)LFR?IgVErn؜TbV-7ҋ]3}JZsUJJD4VEޗ-\Ǔ[RCAԗx Bk^ Xl(e >BPCL.ŕ˺s4\ekmOʣh$?M+=$1룦[Bo]WY)fX}7Sgxpnm˳؈~ ߩM@Ӂݎ̌.J û& ۷kQ7Dg4 7z~T)-y}˼Hʗ_zXn i^EYp$A=,6Gy!\j3o]\H_TNOP{l<xk.`Nj!Q7b:_OzȦu]$xuL*T{NՒWx=jַ 1] '9@}5 (V.pҐC^mq*j)2/Km#} :#zjKnXm#ڴӐh3x51PݾTg݁$ޟAz z\k//j.PFyOdva1=Z FtpC2qLh/K0Hֆ(^6O$* ~Jjjg4>bw^|āyf(z+O΢j1dyvsl'xjupDPkl 3Ⱥr9ݹ*Ld^s#K9]a`{Do.z>P%x@ujrY50d/$MO`}%iIgj\>zN7I icS iTu`23"{(:bm Dʂ'2u5p"XJ`#1W[Bd$5]hm1^ndCp\z`GEKESkO N Z;U։.֚[؂(_+}0*3M,gֿFn~d0r%ܶs,2B@53Tڎ$$x]y=GtaGxKW FzE/[TYft_<#$GC~NoŇ\ )WD,#_ 5|-32ba#X?ҙf`JVċ`Fu)"q$G8RyN/9U1@Q#"W>=A,W)C5S lU"y"cjRlVFV4*pg^Τy7pSS^\r&sDYBdTWev6r(y" Ku$/D1-:}WiM/ԌI ~?1u+P@7#XA/*0iPwy<%KEkp9`?ץAGTA?WPnh/!ymӲ՛*.`3-X]\քx'{N> ! Ic)zw|hV(QWSs/:=k|T_VhDK'p{JcH[~V&{BX6xrhDO>Q{M+\ǎ4XSmD!NA\精۰'-QA4F>@)eI><4%A2I9@5{[v^tzHLP[Ac"[y?߲9+5wZ9nc7(JI>aԸ|ϧ`Q/R7Mo .4d-VdoISՁ^\O3 ^._0צuU o~ T{&$Lr=2 G;͡!d='385`Stu >l-l C܊T% 5%QmûZ%jl)K-؉44R4G6nMF@%ϴ1<0{lNqBr(v#lh`dֵt,]MQPAqgGx BxdJ5zFP A´?J^Uڻ^׽lă;T'}7+bRno, <Ֆ+h@ PUy nT~de/ԙHOJ%_ew* w顁 &j:G삐._}GlS|M)yϺLcEv _'wOIMډwm c@.ueIy 5#4{A,Jyr7Sl&ܣ2`OwmxyaTO˾{-܆-b' ÖPgp()izi"7M'a)8Pu=c]?n~o_ l1cUI&C 9“ݗDs(Fh !?Ce! U {DžE\z͞s _؄ZzZ.g ҔJ\@ٓNy լh Gf$aϞ^ SL@{<۟=!M5υ] ~5 k ysV$z}٭N ,?_e= Hl i:! L(]"dԞ%p/CF3S G@\;X\<4gHoc[B#TޛԟA|16`lN:ۃ^.U eq_BnZ1x飯l 1u]YVR4P1^sp [ Kzdg'4+q?GLQ)qUhπec-$p'e75/LIW2=bh!G)R;eɏM œ:pݸK|4WmǏF!6Oy:ޞu=͡K VFNj[ˋ\_4SjN͛kNrtnCh .b$=lǍCE Ыǧv8 ۥsbRfHI=(8lސ~3DhU9@>6"K [}chlM~>/* 08 vmL͍.-Q1̐An]4' }l*ix:ⒾHՄ ԳQ3S6si)TJt=>>k(&{=MH;?hXz~EVnb딴|D? ˍ YȇSn\S0 ٟj| uATB[-{e}mҳ30E`7>q>Gn<ܖ*3ck7݄]D5ȏވCˤF ˍo@oVʹ7=~^{O#]}0_cX]$"UPqzlXLgqe.uJ[v$Ȝ>Fռ6D^Q ~Cɲ0NO'AVWx,_S{q5w~U B`ǿ5LyۼdeJe늖 Gε L#7p}lX6$k9{iC]'Ww*hV0mpEhF/ɶVs}|5|st{,G[Y.I$Dti.s.RW@~/q7' G'hTqӝދF:ڞCj$i8 )1^7O uyBVuP3ҽ9v<σ}F6<ie)y.Y<ụ_4W6nL(PT#IwI~"忾3Γq>E>ń( esZY{"6"PG4@AcWЇ1vKN Y Qxh _\g>j{{o_r涱NSVX/UFY:78-kPQ<_HMCDء-#Gx%T*놰ZGBr$Cp󦦐zEEWhNazqA-;$M敻U3Q?E\ Q7#@Wy`Aϱ ex??Z.؏jaԨDx)rpaŰm[byhD%7@WDYMD?9h C4xѲK5ɢ{tKEAJlȐN垛 NjM"\ uibH5B6#!o"AoyTfYgj^ $_o6[./ L d%l&l3 huH,+yD$s&0k}/dGmy+Q [ɶǍh)CЈ!vHPN/H2kݳ#zҰT3~݇6ׯ|zCR3PsrqtE&ĭ]2)!TWl慥@d\|[9^[3n9HXxR`0P?+1E1UNymvi3l@'bHR;u)Xu!!d@ d(ۜ5 ՗qSV-< %Z Tnw> q?p]jx`P]"vj{fxkL0{GB״_"%hp_wo ̣2C{^ vz5nJ)?cSR2orb%B!0  RWB8y@dj]A,P߸Dh-ҍgمT&0ڒ!aQMa۵i+$Ȣp8,#naږ*UD$nN~k1O(nuJ 7T^Vwˆi [ě 6A &L ?ĻLɾZd(H6~:pyu+>B[GmlX!W`!־p_;S#iZA20 :ֳߙTN5rH 5wE0z8A z-_B@]XU\/N?J >WWj"u`YZ"\BdQ?,{d/?A׀^:a7o&w /%c5!9u8SS6p%Ĭ[yp?-U}Q>震No'@x/?34^<n e1x)z9VDzYIpL!8;@8cf*tc0A]yF"bO@w"` r>Rg'', 3Ӭs&%z q@ᢒ[*E+'J=K"+:Nj>"@ru+VgwS *WuM`{0* [nu;jvׯ|zE!>"?[ʑ"GuD)/Z՝[c\{&苺Mz5 lK"/4Xre{ChF[Uܸbm!QJB8};}jq왼Z@͌7J昮lzbN grc yOʽ4 Y3,om ·52,xdpO_Y-nkP"U.8'ضybIM#/.gt3I_͵CLE_ZhiI^vT^2):ĻHWmj"%dD׌ 3-ݖ,g|AfB >s`PޛPXúͦ Mk?䙦spW? <{ PBϗm 6d۸Hpؗ䴴d'ڃUЉ.] ZJ 'lgzi}bZؖoRIЀ* H6_<ɧhS0$)}uwټ:rk$*% N7;Yt1eD&t>%@cQ oN GoȄY2n(MTl U%--rGcw/ ǬeRk]<-?GX= є yBhM+5xDf9 ҧHKlؙh:,3X%ke ϡ8LW"Jgw&LH)jIbs,-x\dɸρp!Nx H 9kjsV2J I\p}U5@a8622ݯgE"v.E/}Pc'{ 0қ`hߴ.?k:hzᅖ(}=0m57~_Y+mԸ{a 6<,?w򀋊WD70ױ}8n>y=؆3ܔkx$kVE`Zߥ)%Oȡet|xZNyii~$g:iY.%xJ\ o,|3R _oUXxMƢKxø7EF_m'(t{n,)gjP"9 zb } ~l/܇fKqpUݔţ؋"bB&u-dۈ@|Ev1l(.r2O~7ƛ$J-cB6&)#˥/ʈ׳L7mq" v=r 2KeXգ9 ٹa'SkɛA)k+Mfexf2Q0R5?'Ԩ3I'5qcO1lPy@{x7roL,TC:LWRdDjD7Y"'cR<@ܕH{U( *n3RyR`\!J4;#M`;qTgĮ-q_,q/W4A1qI%㚪?ZĐPYb$KG)Eh+p3@/gF_7"?CLnUC?[ v๼<ܹdZbj-)-g,.jn$iRx} ʚ3ٿG8%hݫNo3NRYN*ۯGQ\μ ,5J%d) pԉB-(ul2i?LZ R|I ,L߈1q ,4c]l8ÑAUɲ g@:p3ȀC—V=`P'Eb/Xo%hr2C pTDۅCQjXb\f Cɯ7JHA=w-kF]ABGxB<=a6hr!MTb|ͽ -.ZV]9Uy".Ae\k=fECQw1bZ#>rj?b:^!{Q {Mh/$<:Z!Uƍ@Y9I oȯ%GN'VYFE2qVp9Scϙb ~+o)A0<͐AύD5!nu.dnBCot (>mzh3'H@=xڷY#)wO5HÁfPT-}r1[b]C%Ó& .W-bAs Ne_*Sͼv 3*'^8m{%DYY|`?O "ģ~K͊c:VAבEO8$e κ9W Vq$T "Eғqh)0bvtM>kX',B@Dx};3Œ!ea*ώQyu~bb x|zYo͕S%G=]Sp(l4d4d :H4<Ȯ*m ڛ-fk.W'n4HF7|s4HkpJG92vt7m'hGfڠu埜$]Ʊ('Ivq}ً-<5S/OIA|{DV䋈rsԨ ?J E} `}~h_h7MlXф|Vw{MEmЋ]iYD[,ɳEV(7 NRG<: E1?kt8n0N,}0\'_۔ dk>b߿ Ty\X6LRodmø> c4DбEDk73׿~P'xgAG87UtxxUJ21-is>3hiWWZ;Val5縅vݹ_(d U+kwk3àcrrOg# \\P—E<lw,0g6G6Kc|hÑ1=B-ErPyT (f 0:x?z ME,| 43r'x&38ȏ~*o։t\{aE.( (/B:3͜\!Ԗy;OώʟB0!wu+<IEKI|nPί)HK"!$r ~@ jg9n. ܷ 6(UW!Č($+%IfZru3ѝr{^ly7tD*h>GlEH!O,|ctR,whAQɞHT`mG:7@> #b3}]Nqг/84]Z˲Ċ'$U5ꛥpp| GD+\h%GNkeX77 $>wnMhɻ fqOiL8~jEgu@S7r;;ӭXY},Wjξm&%/t B;:q 22ȯI2ݧ> ofK'cQI!I6r_ d؏ KO7q\G2 h ,\zAIM-nYLש:ԂVT3)_ Ĕpam5”[z9d} V;~F9R5aus-ot/P ԝtC RHZr)2;摚tDSE: C73cv(S-껽Uwkj48J{c]t $fNن+g3U$Y4p+ijK9 j/dV #mm4'J)ܺrWhϿ$/-WFQjCƀCÞǤ\*Ib]_˵Y"}K}jߚ J#rtB+3 "'*~ObO6wMw茨edqViL"o{kbF+ZMinVe]@Y&Y;^iAt.0qt*F]ZH,L*K mˀsP%C\ ֭{N]˅1^z&1":8_ 0؇Ĕ}0c\꣥Mu+W{%^&Acp2;ns-@!B g;JqF nl4YU{td|{$GpTK~P dMnTpP;,bzFY_;;-c,lsIsZ%^8bLV[JK$#\W镥t,ܨ~@18Vז aԥ*zrwVCArNN.m׏?I;Ur4-E>R!"Έ qPu#:bpZYClw.cU vj%'=lt|'fZ[J i6oVY},**kkf®ָRcY/ T OEèňPsEWcM7K!>Xg "r<} %Jk1c=;o)wBWֳ?ƿIm5/2ǥ s& &s4Y.VۧC+NmƿYW2.]uoV;b4keČَ/- ފ P6M.iWwUJ1sy->t{Vp݋k2 JsoR&Cb[0QQ1&,<8FrAbEqt4eXlz?|H U/ ~ڴKuȬW^B: Ƒ\֟u5o89T-7ѱowT䡛?SWFFa[ 0~OЫ5PJ Q_jZl>缨32ò_|HV,7!xG~=x"}N\XSLIN0ϤhrFqRuK9i}Qa\ lP ~=$&51$@w;,5eZ Tx!=Jk~.KķR1ܼRLg$[(̣䆰:)cRP ˻wUnY8G!Fk~V~߻3qXR>R֢7'蓎^ U3nCna6H[0n]H2yˇ.>n*)KdHݬxsgtO#|X۾y?G1wz'G#\}kUE"` N䓮Gْi"I8_9Vty̦茀L#zSeiLW),Ζ1'`0w2`.h0udjNU%bnc)esQ],Y 7*FMv< w?tH3սD-\ `}1)̸C,PO}Fz (lRK[u,$r\Jv8PM&+ ܖmwWk[pVވ[Cn@@\mF;{)6UH+C7U N -*Ȯ˳Zk66O C9^O2C`k"=_6t9PDxxIS2`QԶgkC`w?Q?JI*n&ayD^X8Qƪ 6x NDp^RFU)xմ0:=}*^0pW% [ jiG_yM(G2o:z]LȘ!g~c1=^Nn:K8'uş+M,#`m^|_TOfbل\ \4yCxZ8%c+JW#֏uHkc~:PyZ[eHD[툲"g3v*{Sj%ܩ;Ֆ -Xy;}c'lqzD1XեAdΟU)CPf,`0t[,擞>aY__!ǀN&^,LFAA/7rzqO3r4[6'GgxPt _Y̜J RZDMaȺF~V1 u00 p"4QL,<*GbnrE!ꇻ"ϔGXtNČR8ġB\#-Ŏ]YdB(T=*׾65մ6h#Պ&)9=Sjmp*xqePyZ 1jL!FNc'V~|XMP_0>WC Dr}v[o Ny> M%3iKQMugc[CJ!KnS2B+ K9krNmO`r(" ɥg{@vۘ3q2n[S#IZ(+ؚ0AjE`ȅط|XT!X IMRxeJLMgWycq3 )Zɤ)C{m/  <<1;pxtv5"~ɲaf!5v#tI6Ia6h7eOagл5;fp*Z 7>8{fLOj^KPA*yq0eicHsF[>FQ%]0?-/YkRd)eЗ;T~4d>| P#0akM98{p[.)ՅQxےB=#spR~]b 3 %*"O$J4xc"M 7&::IbB nݍS0&qMSt=r.ŧ90`q |U^0J}+U*|Zȱ._3<.Wy*,S)n^*)7du:<)MÁ+Ů cXֽ`hgY$FFv43eBܓ"?(+t_&J ӻo0~)Ydt(8JD~W e|boShA<- c{'8op$v_%aԑr}G~Sx\M1yd^Meھ(SEBb[gM0p[fԋ\eњ W'V=% ;?Ov1|CXxm#T[R7~  nLE=Wu?>_ĘQߥ U8)DaO^m誾$o1yvHTg8$P[y`6v˅\7gcv5)ނpn[dB5I78IJiŷ `Ēo%QRբɠA}Dgba"}"Oz>oe>K72Ue?Q1!f)ZG`:+GCK]UBCضFR.-S™2܈cQ/cORPbt!;ChzC R0 տ+VNNkf=v.kw` .LJ5j:t[?Q3ÝbRI}TdsHv,K(-afXN.ow1OyLĮ|a#U)ʕ< ?PNH#" S MBcQT_CIɲyR"2v#}V_=f֤Y"]GdqӰWĹߧ>:Sy!0۳nCtU_u[ZՄ8D uwaａ,Tz sem]ٕ֕ͷ)&s?ÝMw8w,Pf&PJsaB!ռeE 1YڦeL1ۖQ4_7|`<rORpu{!~ӓ T9w@}G ¬0qH-E'+Wbޯtʼn}z4)}L, Wfl7ua9,eI- Ra/&qS{)2Tyd m0^ud( ?]{Bk5ku~ģ NX +x%$?gNF)EadG3n՞D]YqN>n^hٕ4V/˽ҩ40Q +<;AA$9 5,mDo<$$oΊ9|u낌 j8znϷ?D_q:=GklU'6ԷqDcYb0!AmP i1!~ur+xύrf0U}8s^8![MOt[`Sk[j/V6}W꿸V-i$V/uuУ23/9{E 93;lB2%OMc~1=d31{QbdHw!YF9𑖮:8h }iJ(@-@hJy)#؋y#{0 cy#F}H:y a@X/ãWwf8gTve=;6mJ}lbpN+$ z < -2\vERgHh'^ٓnw,Er"}czXHܡӐ9T E 6R'(0ɥo[-NGN$;(==2.sGmXzچvQ$_ĴdY-"Vi?kA*o0ǚ ȊgpK| 緛 1M5 k/FC{d:O ҧ$߃QIHZBDIE"-/j͗3" nK@:dF*+M%t` +]=k$iM/!'sz?fdõLC SRr-Nf='Bs&2;aqn5ǫH+(Ok_̞ʧY!uups rP 01OhcS 9|_^ & Q?N 2c?c޽D-W#zi$EkM9ڬ!}~4 a:s s 폌qiSYܧ  :W]MR{fA9c8/o~BaE 0eT w,%rD7IfеK."|-Iq]Y):P'Ȩ~&h/4BTNy'I_ g[ H]f>ʉHu) F_R] $]0ZC"T yے ?i^dxZ2uxL⥴P6`/ LG duv_IRnP nmK#Dݕc#-޻~#9;,(É`ZJDUʌM5|+(j]߸‡1`X>K(s:޴vɃŖuU"[dZ(ߣ6✔rd.6gYK~ht݂gϯ_c|!rc^f':gJԩh8A-u{S, Z)5)\JT2E>= @ηoAwaRnVU;ڟķ |44HL"Z4q–:izVD! 3(E,Z0jȚUcǙ ii^kq,5*^E[ܡl?P/@dXk./E_w\d*O h^l "6k/ǻJ M%ۃ: ])w"Curj! n&eIw?1L+_rqHl` rӘ:מP5)iVi rDkm msd%=k!o7xޣ= D M/y`T>{ux{9]RIɅE|1>EQz7O.7e~,ت?` '͠c7-"x\|㈶$jnM0yH@||&9~# wcAxXh*xfs21v_`n,I`EõE;=6u̖ыwHkSz]#GH2k:{A|jnYauSgK=U-o#c;ByǥuQoK- mסnϞ7wYnC $#lwrb9cYC)>8~ Wq rUp*jO]{qJbПi݁X#"Y*כa|@hj rIlH5N]*ˆkE& rHd [=ŒQA$j]yp\m[/5a<FhI+Ds4 AoTʣ \b =J9kc-f])O) 2aNk]]l,JU 7c Lht>E ;`] u!{mϴo Ā]eǫ}:E}$>ީ8\ ^yQ߆?b;-zmCbsldj3ƆHV+4rw= #d!yiWTΨyHKL/, :P}\.MqƮ"ON"aHnI$ Җ4|[McʤTGkBFsrբQ6;͓Eģxd۟L\œR EZ|`׏l02,[Js+UXob;G¯ Ȕ-*ӹ"]zBl \u=_S櫟= ayd@6y֬C0GΕIl.;FβRaщ+`9T71Y9* K?894qԟ Wd>@bbAjSƭ _ fn.+Dj *1BR:,%~y؁%S: wهBMP--\V$cNCmaÛO@ɰ1$yYEs;IvH/E_{ĴO#VAS`ΖyBoVQ]˖͠dƠ%29x9`Sƕ2y>fOȍ#UoM MsO>;sk&~܎?E(ILRF0I+)mSz^wd @XlQl/ll(p2rIm{Yc oc~i!ҲhFgUp+$=\I|TG }֔I\ /p<?Fa/{,hٙ"vXƖPMʾZmćtxX"LH@cc|IuviHT>6=I]o¼Ppd?3ps%6u]zbU4!iB¶`#.lj$H.CKޘLQÂZ#KB+[YK2yD]OϺJx*UcѮy~}$ڝaEY\Uq)`9 vSW$'OV>%*Yiẅ́g{|0` :FesJ}OTM&C[svw v2=ln49"e1%5eRoj3٭8LM,|~89*6ӶW` ,E"fNy -Ѣju9u,4fPBg<4MȺC5mp<4nVNOKIvcZn^#\ML&YF:g>(U21A;Oo5 F@Vu5!&EU.21tQ$@VpE@*xI$gMԧps]WQlKQ߱S1nĉ\S=f@OJ̋qO֢}70&HxXw.r-U18F8跰gy`a[q6C-bڐ57R!yx(}^% dsmAEEC4ZH2a3M>Oɬ:dlE)zt+L:im6پYՋl͚ٝ/4ArIƁGg0 <3ed2ZHKrpUױRfsB1^95+X*؊h#\6#KS,/vEhX0׽v+=KqS9d h|nm,ơ1kٳK)KdTK*fCv%傕^`sTb]Tr\kNxD<Hm!󷹎V}8 0m`?iUP;p;fww͓$뿏j%Ej^{8v2b.L=85uhBs0bA@59_kqI'Q9J'O 7h0"w')'U`g(t@%^_>m*j；j. Nn008 6F(J*XJs:Gl% F5& 꺧FfcVfX:1t>C-i^A7]dmԃcZ}qa~?3| 'ӻR34Ftxk]F%vffΕ_vLFm`pH!fPCK QGV^hL).53sR]|¤|V&GPwy9M#({2H=fjwn.:ݽ"Mkŕ36zt#v#- Qhז*z$0tDQ 0&c` '̣C0Q*;i]6E~D\.7!B < S}wjV8Y`^X]˯/}. ^󋛾ϋ- bP ZÛjAuP~Bc7w ,g3Qb@nwtز(+.6wmE$0!\ _Z ^YC1.~?xSt, r]%߆,/Fj\MӡGupsv tTjCRz.h\ #nYw#ƵE)#AlL.tmav3<ɌHZH)Pb5 3Y*_Bw+VEe*TEI)y' q_|VM;J9rVۜ(aNTYk([^zPUގn(.$;b[@6i#ɡl<9U&=aqHmĴ_CesqGPB`"/W˜p#~盐ݴׯ_Mݜi B^G}{7erkhC;]֌ߚ CO} tI؛_F9|:Ah'Ws‹72%l_E'ԁJJHu0kbU:_׾ W4V{ `dBupo=˷VWkZy˺ڵ#%RCd8pG/6 7 +V[{$ߋe\Ax+Bx萻#4)ufciPfdoگPigna!|٥C QZ_H"mKwp0v{c#l<[͋X(6EXD2ws$m`8{In?5˦Tlwf >ʺ {uIV{=G#>'-_oQXXeTpGnO^f<{ȃ}}Iet <'IYy?jD&2Νv`ex݇8՟S `s'G 1qVx6>U!F+j͢K"}챻cU=- &J9r5teq r1 f>*h}A llñp 晫8A*seo$7oLtI0F؁QۼW5 ۯ oAM!;;xOdӥ>7-lsE 4笲ѣ*_ȱrl/s}d!?rDƌќ -f H@#9]">f MY?,@#gJuE b`;TɈsvt[I􄎖ުJۂ@ߕQy>Nw!I"ccg!irx P8RVsA޸\1NTͮaJAt=Rg+xúM-['u6zZS}܇8F&mߟV2%*[1_2" :v呍ju~xhV([m2Z,tu(py :~1i|SwQ} bV@ZK=1?@(信Ww]ȳn43?Gu}wJu Ԯ?%.TLB_/`T!-P`୦oO#uY ڌE1 'EJ-꿎(oBCCN" T4hoipwqd+U]yIe0`yT x5%d+֦ $[c?ѱ6@0@ x Po& >H4k\Q$sĖjn5VSXSK'~;tw|7rQxʩ3 = &w f;,={2@w&DKƭ^/DY d nY*#%Q#FbkjU!lsHݼ5yAz|zc4N&D<ۉZ-X@9mDV6/M)ݷ=xlx#Q>n+gM`^iwۓJy҅|>ٺ\yɮtRor%FFq>9׺bJ$nu8,>ßhOY  hኼYRoK3̩ N|LkKi7XȸNGp4mˆ߿B9bg-6!L8r:)*L7rs&ǩ' ,Q3EBYh_ 3SǣkOi6ed3@멲wKJ+'b;e$  "XҦFOZ@V+~5.FWo/Wq;8*^S@7<,΁z91?1KQU4`d>5,FWWi6h=bVe[d2eTB6_1EjC"m^e<@)}}&r1Of?9/ 7 )|#Vw}K8JtȆUz9HI+n;GF'eZ4m};-x\|L++ƣclI*u=0zLQR`ji]z^>iE*I卜Nix¤14Zy02*\3'@jDx } oVxe/)S2;iH5NüTj.s{S.?UE:W1hWdQqoGḡ1hChWt"CS` ፯OHN6bW$D..aʞ<6%f;k ZW4ݲ 7{\ (1M=hɺktc\F~Mu(0_~kS\dU5`n;o_6? D' dyH/{/ =cs*(UQ]_yQVO,TPLIZ{Whq1Ys%g)VAK~'9B^?VV$хp]`ΧDA&;T+B< GOyI77IT!.T(HT7je/ do;3V%%@l^R$Cd]f x ((Е8u{ ~,A 5Ak^>~&LSʠ54}ag`FI)}Y\=o)jʹg-.=3.4Lk5[ 8(>=o,9n1EH!Ry($*ͻ5 {qaӊ 6j-wo{M{? u`4veۙZ& /ZH4U攉*,$^v+*әiɵ3[m)Gn6,/Ft-=X)VG<&F>(UJ8L7cgt 'RE립1WA^>KDQr Scp׷A>3$kskfW)&[ɎyӪh? I#nl*`;^T;XO4\I5KJZq袅IARaFI8!/qP|̾P[kwC%֞.(| 6_*Do|vcfݛ؈&`+ Ly")M|\Y3zP%aDsuҌ O oL\wQiElSG̾nQ>ѧ-TcVK>- Iy* VҜFqcisK3|ϳ--l2@-gL~.g}Ry1w6X%1z%Wa/K[jvBsNq%qT4'4m @y.cPv_?*_1ّaK^b8CHH.ܗE%lll-_Ik'|<"<) =tmXt?E6sg9GhwL_XOblLL釐u`Bly%c`EoU~xrW@|C["PDTt[KǐΓx/-]ZИ _7ꢂȬ(36focu[~I̩\S&*Hw)c)zPk;Ŋt*}rD6(ZlD1x:a:\A <%NI]JwZrP@qMBo=!x%Kˈ Z;u VސxfOM/5iZ)`L+ bqc^S .?d -8~ 0`2(ũ>@2EL@..Mmz3P0ód`$Zँn0 Lp۹!tfI8-#_5)4Mj3#bMCHFTÍmdD5kobN{Ӳw hdHLPE5*$x c EMkXkVڤ(ܹ`6 Qk Lx[ř!2B@D#PII pjJ6k饐ў:GR_+i `y`n@0@RMlTc`1EjְRC>־ UقU; zg)X D`Dɰ&RH6BBS-(lh4hbF6EEvWVlx66(߷0#CMTDHM&^>7T;he .6`iE!PC#bosa|Ia@Y!1B@4;|K`jI3ڌ$Se L hJ @ٶ{HPf}ӊr^omY$i Y6Ȉej`q6Xn^6ߊDaa4k"*AcP&1Xl# Lwu4FmLEFY2 H ш1R* m2.bRATzܲ I[ ai @߲n!1`cO7]&Ivud5!l&|AVg{t߲M l ,Y`Q2A"ےL5!øM3Z~6 N^86vaBz'+ylk؁ , H k"#F[ o$_U|^[@iiHpzjfƷV6}Xdܷ0ȭJQ14i4df2 e#f 0& eDb֍fh*(@B$XHԚ0(VmQa"1&`ſC_r+ uZmXb!5!ک%r(OQ&I0St6Uc B-P$2hdF$dD 䆜F6yܹ2 >kI5PBó4bۮI!_g*"l%JF,lm) &MDkRăF!aXғ3+3S6 S,b %ĉe$TkJI3bmhDY( Qd Fhܺ:{?cgqRxЁ,MvL7z0 /Zj$ UXѶj+bQE%6mFPL2ʅEA@Z( hhPbɣ"hֹ_%6Ųm64M1D(,D^nak|ٷuSWX+u^Oco!7VZR/iS+e<͙]΢H|QZkW?)ʹ.o#\z h,*X܇ל, "El;t""H)N_mmjו[W@dMm6,vsbBidڣZֶ*m*P$$ (m߸$:҄ I=]og>GN|/s|ߴ'sxpXt-tS$a @ @ _}U4@aHUI%$~J@ hBC2s$9N{$ЇT$a/jB{$ Y$HI5&te@v B $!uHS!,$]K!d^퐆fBu$S!$ d hH@`rd, $$2H;iBg`IdR@7PMz  1qHH' ! Lϴ`!I5&tHTӤ$;km~V+ZKmQ} 0`znQ$;x'2 HH :MH<X@[UMa1` 4&VZ~uvձQѭ@% , 4 $jHIH'`Ca$:FB@ mV6W5m}M}VId> gRBr}嶾mƶ[}@0$@K!$>v&oHL?m|dRDa@:uDCdB$N0Q-kW5kݵ$@!I ,'%BB!dH%20ɝcHfa1 H IH RMt/$9 M4 ">]А홬&VE l´*6a$Ł0"?ˑWBy-vf!o݁\@mZOd!JR٥'rل VumX֯1+j+ImLcFFlZ}[cZ] @3. # oHVmdme0@HAV HOlfdcF|'C# n!V)Q&QOn:w]7֣I092g`ŋzm$ McY-QkEbR'pa_]ixWvC%z M-B 9,,bB$^H(aLCaI v)H}%:PxX3it^sw}כǨv]bR)/&nA8 @)cL{Z| P@ ñb.W1e%T'+/罡bE?Cþ}@=p,}k֩ St"o@?|wlF": <6ΑT\=` V7\~w} zDԛ_Y R* ELh172? C_ 4Sb@ L0><%YCiNEn&5/#"$qsUgF灘?C[Nl@w`){'A=ж] AXozÈ& O3[DRH[J6{1!~gچ{1ݻ(_!H5|nҞhz_M[X"f z㎍4SiU[*܍s8kq{Oٽ@) ^غGuIļ&\%zkĿ3Nβ1¥f2q'H6i(.kuƸeZ ܦ~ۮѶN8@J6C0gޅmGeTYS=3C !}+R>HaBmЖ~N@ټRș:>tK:ڀZD 6PFNJkPe ~b sZ o) Nivq׎-{k/#4w]W+qá]J[KW`Q{E<װs؀#p(-eC1ۻc5m+!N JtAP' c.cU!jϯtwl=NO5RN1Y],p69΢7YVRx"P^ab3k5M]#ggOI<ҟ˓"$(H}5,1DPXS־k9_h)HȈ#Η߇UdA/=q}8+(@)@i( 4s-UU\ŠWY}QTY/$ He3߱ؒЀh;>mPEX0X& #>G!P5ZG1 Lxb'7wk yx‡e?"ᚐw[Pʘ@DQ !(q(4izp?rʯY iTNNZ2^ݽz]f\+{Gɹ8=?+s!jƗؠn w]eW a]׍hc6 $@_@""]i[V{_%/u};Sdj=;El'⧶< G) -Ja 1GV}""BjC}i)9 ~n?Gy=+{oq Aqi8D=ӯ5dz3lu.`Xl4G߶, ȩ(zwmzncpdi(C߱,u=嶒s[&)nb "p.66`n&h<)8lMsSe&'9XlN HaU{7&炸jϑn?{~|7? xBk9gi7+WPJMV(zb9 7L6I[ntрhFwknw{xu]J 1!.K^;}< )/DH)X"C!J ph@IByT_װmd t3>)j AA~t\26':dqMddᯜupm.rή U{fd7Oe(BLlT!ȀB(Y Y&/u9<6#Ա$4&bT ©)6BFTviN5uݦߋ:-|S3$T_Us+١vY>uxyeǂ𹔀P}8En@.V )tjW1Î)Y0b7AXc(,J`.b-;&ǁK;BGM'DEbd_~yk,f_[}Ϙ-Ռ&g6ݿenQ5 7^ .am3T WgWm:o@: dHQ L.{n~*ζs[8ͮ $W¼klW4%*<4 y Df<_?_wx% 993`u3[ Tx!ňr1TBώȽNK7WqɾZmdwDDA{ 켚[p=mI!"B""i'uHzRrz9;^{nC7g]4_ړm-^04ō~}?y^o2a٠1 ҍBxD |Y_RD ! ̣!kUl'F$ 0'iqqpݱ^:$xm;W~]2,Rz,! \P E$[䟧%S7L "JP$ؔgD  "Tw>w  [1ɊyMU.atʑ5MO-{*0u͂OKүL?hB3zרӄI/PO3ם`) ;Z: ^?cgzQ֣ &|GU!T|M8"l'*Z9(tOݐ,1-kV̺kOl0*š϶UR,ļ3"HOG88a.Rgi9V&Xs戴.fs70.>/4[hw :dr4:?8;+vjBmPU5aNh6@d{ 9]`HV۶0wξZ_k>37W?"RVL,_9YsPn(UXڵ'kV PaD dcSUpPPЅBDz;M (gB!@P,Aw 6v1Q! ްSӡ;:A&Nt&g~@bO9L^=BEP*Oت0PB69Vd I `∅0ӖLpSQSR MwōEj Qw%-@%0R^i7eMLM PSST@E>Xr9)tMx?{*?nia%%%% OQ ee _(BZ@!4ɎO_'Zv]-6Ř%C,^_ !+/V[:>h2s7~-B6P8ڙпBz=@% `0TW:*1IHd^(z*+lF?n0A-.l)=.0f05C8*szFg!]YY@,߷דUg TUUpZ-UQ(*5RV+ ST!QOPQF* R  I*C %EUPasl+*pe-]majFk4u[zf*p5YZPw6uZЎjQ-X)**o!WXJʈU_k5YUez -iյaXWX"@hQ5^RGuS_okx)ihYLO;r7w#O TUQD5R& d@i4(SRTSӌ`)OT=A,EMAjG0jA[VaΥ[ %vO'a?W> m-xqZVXLZ`G)ma-Vn_^ZZ-iE+H3bqĖ /_]gׅ~b"YX55y P~ba!Ef(ĸC9K-6u،IC* (_/@E*!GIG:(tCCDT `g<@啕dv$;{t4@8;?GQhDF cKhcP@HJ)PY O7<{ρ`"| b=1D>087|#ghZ)$MwsοD.x"@7iP$%^ ,\ _:@~ >֎b_J#.WQb\ 3/OWr?>?F>-j_%__AAbvcs d>oOq*9rઓ$T $ X((@,&8ﵒ-}TzZ^stZ "!*R |EYٳ䅂9q$ZZh!.4:)e-eɝLk Lp &$1IhSP3pE ~? JNL(HD) {m{`[+.psp-\߸-?;=oC÷]r+?<^"t/vð0_|u-w{os776Dž |YcY!dIc71䑏Tҕm}} hr0PF\660B <$ @xA y`#B|$/ 68krMnt`th3d>rY˘񖙀p,@e5jۯ*ҲE\_\a,!e!D ΰ|okTϳtгsP#2KKEa!a! DRԘa!!!5 +555 i# cS6QD~ajl}TjS@h Y8LhhhgE0N(4~ b|VBvBo5o}Umv)M}jvN׉ootu )<,B r?W8X?{1_ڐø*FpH#B[x3U;㭳b6Tb$8QDI5)(i F#QI 8$Fs]|ڽ}\]ѝRlVhk\\4/1x-FڛӝMpa6o λ [U?~?߯bM hDnuX[>>53, %I *BA[Bp3eY >i& m|_ɨy"^\h'ZTB >#ٿ/@L& RZj K@A=aЦ"ZN~cwi`"|q^LokeuHsV ~>OUlCÕ\\)q3x2#~c@DBݰ+%HI##\r=C?jBS|-̄X IT<(ٝ9y)LެBdH@ h 6$1C]On39no _s_naiNY@#׮]< b`Z]p>ĖQD0UY(d~o}^(]BBriĸ\"LaAO K2H wZѱvۀ_팊 7oGl8 @̺(V -xgź清@-[mi\9ݴ<}HHpHr)4lor-e۾w |LDy|3 -a& }GX._>S"w'gͽC5PX %&ydl<ߡo96i֭Rbb=Bi6"",2u|bp0E`9G+VꈬPon\zoy:r^\j-AmÛc0 |#6+6zpE!<~}Ek'uIE,ajsƖ/F:nmn-a9[|d}Au] "{wRT>ENˋq!z3Xa)=ёB' zcB)tD y4cΦ7m1>ƞbq$l ǐjQD"@Y6y¬30Yq{Ŷ& bi,]s5$MM=B1eͶڌ=|`<=owFYQUd 9d(=r16.x>>udtq\<zLXI[e#"th]5{e*pZ2h,EaA#t9=%ă c5O3$&{(n˭l{1 7@zIqxZaWN7b% "!r>fآWTLs9lsT@hГ'a z8ԭv!Fck s.103Lt~60=EfYUA2+19C`v;#yڡ֤ !`?$UdL)Q̙MO?/'+W^ע+ٜUb.*]s)!,L(GRE!HbM$~}8D sG!PPYW62;v S rw؟jereGKbS4pZ' ӛaNqW=G"]`,m0݋R&[76,pDI"H`paÉpڜXP"MILhz:UZ%(# ꈠr6#!dS;&R&A,je <! 'CJ6b3)ЦJD+M0MymbK;)U0gf@]Ha;=! JaXFmpDzNmkjػ=~óT7PM:XؽHhS1j`b!5CDb,ZԌX7,o&v( }_q EŴmj EmVm6h4Tj2XōLDiu4/Ӽ<ڥQdé&$EXWH-1XѫQFڋA [ouo ֋Zl5P>/s|фRP%F1[;IӳVuͺ< A[ (H,մ`JQ (r"4dƤ%[BEG4RXCy>`'馭Xɘ:du,`'kDąd*kߡB$xM0w5oӮP3o)NIBDrIe3;%Yi]%(HSb­b7Zfjlɶ" "2yDrXMTSRpڲ q'Z2#8Twr k"R y':On*b0DN 8GV._+BEUR oOBM`Њ1DH+8B P*T T HmkT`}djD8*@4dkve~)Y@4. ĉƓ"#s+-\aa"Ytآdps8:hR4F*.F!ciFFtʒ5RJE*FEI@TI*W2ZJ7Z$q\=Iڳ1Ȃ1*Ys9>) !:]"M|p#["7t +5$) JIU0M(k0 KU( HEwnxKBVChJX*Ed xY,UUH^e S[0Y#(v%!4vB>d[JHBiD 5O:Y$ғa8FұX I!1C$dGZY`pU[ `%f ZnCb, \ʌ6R.dLR, d©6ґuk si |nNfqLHI\eΤ Fbٓ4Ri51]qb:4$g6cxԚǢŌd,!(̉VF,xTT'vZ[X!LIH\Ƀ&<*7&2e8e]s)bHČ+=2`K}ɩ/e*M4(xKZDav H@6=z[yꢌGd޽(4&"('{'Әd E/;"EιzC 64yZ 2z4KBr$MUaJA$S8>dͫl (ry)AMT D$2 YH(SB#AbHɛʔ$W)]tc* 3F;$^EUS]iE \Kqn-@\؞G$͢xVAR1q'!A^(@P)$$X , Ubllhٶ[^}77Hm7* k%B@AHG6a fA`if,ifiBR4YVdȉ"($j:FEb;L'JvE"$ !;hs*ty~L[?7 8B܀V("e0DV1XiܫlsV*=RB,Bv6ᭁqLfp͎U@^oVHQER%HJ`ũ-Jɐ3)8e.7E`L֮Fm9UBIief֫+M BDk ZRe>hJg|Fr,DrPL-{o ZW,PaU#{>*Yy5+G1([9Μ -a^u79yk]96~f€F0A#Ff>EB97t#aab3 +\!F>=D >49pCES΃Vv({tRvIG$Hp1"?p6v0G<1s=+",G[d,t",ON}ȭXI U7TTS4q9f;BRbi*[qSSκg cm%U;LɲiJtJA_#9S1:%,hޥk6! RYЧ(t`ۘHBۀD%bB2T͜uSZx {kkFrԨ⯂4j3&F@gmC0H bU,(.^ aJ٠h* ur0F3DlZCxJ :Bɍ=(ЛX 3[d2Z̍ \i"ڏ!6=,)BۻGOڜ}{ cvMo@qEj^n|.z{R_D DceJ(,EVg A񧂋%gQ7ensЦVFK˽C; :/DR*"%$85)95j-It0QCk.15b)4mW2㼝M4'nx º_w~w&kڔB˦7Rb0=6ruG(||آA !Yv՝rjf!j5"- r!2ed˚[$X]U ʌ4Ou˖_37.0`2 dIi(2rKWfXQ=H }+rٵjT8朁ERyS<<ʸڑ>ַ=o9w&Ͻzx .QݍVV]pUui(hZW P=1P:1#*EE)|>P9]ΐ6 ˻q-XPRIxu-aDF)!L+ ypYZ!ڐ,aշ,pncǵt4"`2 1r7wV3Ѹlb *j_Efp#o1HXEXmN7$x2mg)04\3oɛ VoKCװ0Pǜ0^Ug0+n=ɬZc'&Pqfoq`ҭzʩV5d[V=9Yر!6hziByS [u\QIP(˴C=۵_bQS5Ԉ7/}?@hSVD5w%@Y"Y`8ľvˠru  ϠqʜQ j':g`n$pH QxfK`ohn n#N +c/z7,O;iWcBx˒h[kG. 2bOqaSh&% u lDuڋ >hv muuqQ$qP'Uc~k(b*QМԆ՝^f M82Rs-+a7ܜq>"$Dff Q4VsxVa^Tn^.i_ w*ac Yn4@D =Y;-ڎ՝aϥ ;MI}8O %$u;ћW}DA{@f,YUS\eyx ô87(u#wC-#{cȠs!-zv˶V@$]=X=/IVBX+{>Wr5WG7a.%$&I-Qr2Q8O|2Ԥ2s.gU'k$<<%g`Ac%n(3˫@v:-$ŶY´x KYaĄ\Nxclj{͎pu<yĉ@ blLOxݹy9D%JڨU0 ϶EOOK&  L @W6` R{@2`@ 5o-5֍(@+AH7ڳAwQI{(BT ЩxO֓]i&oSRN"")4>+W`*1N ?wW݀B JHPDD `P8.?o*O;u>T}+$,!^,cV}mf6bS14k@ `@ hD?m̄emU=]zs2ఁ57o0̒@zqMaqLdrI l@B~JH$Pd'ԲILH쓥d Bx) $ BHI a$M *Γ3 pj Bfa$ RI>q@x$!4 (hdIιRH@Y$$I<w?J!.5DTRTM=kA5v4^9G8mhP| .rzklW{{Lᇓffvs]߀U,4c.<>r\~nvQ*9~f1?}DPFws`j[Q[` ~ٵ2SNM?XN]i]N{$ }ş%'W]p0mQʸ赎,ϿSk4UӋ5\&1ӋtI4 IH5I._ RξI'OSIt' *U-E y7>d]Pض4WsM|롸<}tJҸ[>Bt_t@0Jh Q դtw{kDu!q˻wyo%zr'@CA-Gsfs_0‘dd,YJ޹d1,>m.CY L|M!73?P?1 W# (?N3Z*N"G]n< U1 ؙ0]lUfMh!9r^ɗe4T?2Q\(Vi!ʋS4=']iZXbŔ+gz9nv~ ImΡ.O\ GFW1Q nK-%w'r H uMV@H^]O[Kr`):橭ɸޅuc@9 D 2E@2K B}[ m MjWѭVѶյO5{ݶ2+[jv̒!;FL@``rko15uVm[tZB#?7@d`Hc$!3 t$0I@la6)$a@ L$RE;,9l %{Y0@sT0A?eB1dd y1P>~7@,In6޹HNW?zI q>l @r1 ?pKCF.\(aH>Pd݇|FDu$vx)ivmwGU3M+xit8t1TAt}r Ukڥ\s*cl?о͏E;9Y"Mgᆞp UnE4šc۲`jpu{HC@+=ַhfkM|}'D&H@vo54W~w~nyFiUFUc75."HѹNJӴ5mO,q kKUʙnV}{9. EhvEYB٠v;4H кŶGv:{uo9 #tC -ƢݥK{$s׸~ҙ8]ޏR@ |$yH@D>“'DCI'?= `\ ؁сqC|ulo10 աPwaos}2j.zb(3m } t{ nC2VAfLh拜>hD9!,TzG)}djW$aWm"œpjH*LB7S<.7Ykכ#U n@wac1śL\́%vPbʯU!ߨیl"0- ׃8Y-2C?C+Pbjaea$F JQ$ ݨZ/;߾|dcؚsD=5PAmy'$V)'0,xm8Lwzwv@E #m LtH|_z'q͊?OȐ*=Q yZ? ?ɛ>ujh߾zO% L3@qHg'&SSooSӧvLG‚ U v~?Ƭ$%g b=kޫĴtIߤq\#-[`sRKVуv+iF8B9@ UjIV |EguHw /_d2f\[}N[DiHHITmTnXܤVgjKRhWV.ѥGcf˕̖k,[&7_ c\[p2E)@8(d!v#jENi4)PDF?O~%sً9m B9إ FSO8r }(b t)0C3XALt~QNd I@+KUtX$f~Bk?}v*4"gQOgĝ Ȋ)">w_S hgy@PFsꪾ%[y-t;+РKknbeAp(Fy6L~eUi%]w;4B!mB@n3Y6emXֻM:a-lVo+ ANK r~J8Rً19}W< 2TOURNoX>ge~+ f' @ ,&v孁H7|uG]ꯃ#с?Fqg>{|0q}}U*4*hYϡӱsgdI-' ;((B9tw PY}ig.Q{:@ c2 )=ጄ2H ttK=0+<5@"` L8z8H@`@p  ,x R@h!@ RB]` :lQט鹸Ʀ8IYuFʂ Έg[݉ΔɯkZ ^($@BIS*[nÙX1O LlUS|Sp})|Ja!ÐIBbw=' a2rRJ<,B6(WǰWק 6HP7G|L'~YAK?C7oi|k]R Ĉ4~B3ܝW2>i U)BzB@&I %$65$-4L-$ͧ Qva νLY$}5HC;+ei Cu!yM& !"y3+n<_-}}|פ*D.Ɍp.Ē j "nCd //_fud9+=Ii5\e2>Ǐ6GRyc܍ړ3Aw Q-<%w{ېPn}[!hd"?)ܑ(݌>?\s7bN0LF_k2mϨe sH "+ƐUOh66];]$@u|xgC6>gl$%R"$# AU]_V֘_0~0ho.gs1)Cqr?(sƫ㭯Ys8~4V)˚V#n",+ssC8^ èrS4EQSaF3/}1/aQO/:̴e$b3~mVbbwZ!#Li)i Qs8 JPHL+x<6>ֳ5s.QoBx̀kEbH|BNk!sB8 FHY)'a7$ O$9Zލ,%?o _s a$49L D0AQaBA!!HvEGl@(HBD$А/G歵7ZOѩW?-e6:c(tDzլ'ڔֱCV`^{tu(\>v1_b~m܈SXm뽻/I9jxv6ؽ=mͅ6I_N"6EE R¿yC$b8J|>;cP3GM{]ruߍ{rHt!v|:N7:=IYߡxw\MߞNO> tW!9(O ZU,O$K-V%T`(w)!/?MOddd߷>,?2|$;,XJc@,=Nosiw }kN'LIt1@6: hM%y|~9L9ԚNiOmmKpr~żYԡSWd7SxtXv>X+tK+@çz >u I O'aEܥmR$B@>x2U '&Y:M:h{:boB(дNO gpnB*$7=l(J><iG{Q^$#bz87-C6WSpiƌ'5.{S;f*-Mx[߻(Z4Gt/y{h;%hFLg'4mb/~m*cy~fV` MK-q[?&&B߻n7?(jV EU%c~jL`:Cy 4 D]7CʟPaha:B"8ַTjgzmmݮY6ص@I#_ }V3Lm}a2I3!ֆyi  ϞH8c)QUw_l_v}fegUz,[i>uhloJЧFoy@>N @e`.=8s5m0l?6 +?#UqwJ?̡ "\P+eS)]0!`@)C0HUh i (˯}g4?/;bT`u]K-/" j'JZt'3.'h)D!7Hmcr'zG (]qvM,ě_ Q oyNHt6PLqs:,\=.u;-jӮ"ї.0\矻C $9 2V-HP],+as2}g+VOK}I1U3zAXB .9 xĐ]ۯ&rsKeه\R@' [&'7@(`Cf_WHc1?% i2%US))u_M[5]+벊'7rչ}L y` NHS$l@"1V /^z{a>'kջWr:Tc7 HbE|iڠCku$ | E~>CW6'Nr yNsLӥ1F.MD37mMmxwf^. B+8EحM_t}RW2g-:;'şf(9찷ZݛFv˾Esn2ZW fkb{۬2nH)nU+tݏW@6LFK<4ﹳqe>mVX{[(sq=+(H SMLniƭk&r,íJ 8` SDDt h2M۸λ+hFguq2%D}j4˾AQḤa^J,`ck#m쯌V |*YԲ1%$aE}L] ۜs޸ $F!=Fl%˱F_E@吲+cqǧ+o:sZgWRc$e8MGS;Z݆ceɞ >ި~z\wF$5~_cA9M&;{ xEgu!womN=_ZP恵63ڢ>Uئx; ~؛̏畇a~˶IW)<ƏѴrZDeO0Bzy&RbɚҰ-P\ZJr00\e[jȐ2* t~v@$o<}$$ Hw,RwOP!')HL VOI̒LBIv@c d}*H@!$ @:hQk|vwUk;\HP >dK 25` P&YI&I'0BC o!'ȲHBhCY$ ) H9! : ? I:VIqYi!<+P&GxI7/^H}_EѪ=&նW/ȭilGG{͢ lsn'^|pz9#xKh+dS#6+mh\朿\ty~6Ŕ>6z ᄐ$I'@?;$Y|W|폯qq2(ebi8[MS谘ۖr7PzqQlmt Uwsjcz~ίG.:8JŁո[7ٚjKm(x<Ê8T[fed?KPOSJk00ֆ|p:KN>:)OiȰ1cl%~?,^*;9]/E:7ƙu1 (O(a._ӫ: ˅5|.Q_#tSp<76.-j.\iqztrсr]u0zy@HZ,wWAERmm74jxhpm[wu1=mED~QW+cy>;> {8+xtS֝_u>7W/uV Y ƃRK$TP(& d),] l.^Z/@B/^^"ގpq`Ee6r)XT|3^S ŭ ԮL9j{ݒOb~hVZ:,=UJ ۶Bp+^[[lik4.K.;/ 4|KxdC31ȭSJḽw˼E ڸg^s|})8-PD8.1Z= WڦOg2H2  (c-@$'6 knWeF×F{@?$$:.o 9OW:wƨNo>y$/PdQ_.O=cIXL,?" 4I0أ-O*-!%YSHOyL@8@==Κ"lܸVD"BF Q={fCWXBNO9N_'#(k};_Kw&,QF={tճ_W>'zc,4utZd+F[=i_y6zTTpޙ3ߪBX떪wTD%z ? N`>Cq5SY"T>T&q[7&-pw秧ĕo>cX'58I.W>Q*y[*BŠ!%|{Fifq|f7T02ΞlprlWhPz7#e,+ &LDBHCCĹQ ^ݜ/۩gOnH6 d>o7f󾋷<^VXdfB I'=!dZ!jW N B_OXVlCn؄ISG[Drtr^&#Dq:d"Oatvyw7G俩댷բ65y=h (ݛ&[+Z9Ga'7JĞTzww%xԙT=`|~JBI^x71fK|]ǷΞ i-ZrTy: ZX**T00̦0X[ą`%Izx=Sy<8p_ށ>Ib('rfe_Q朲WSa&ºBEnH3mV+׾^zVv[yrͻmy$&Xj`C(IlV"LDD{g~NT" [OyJtu_-WAu{M{7p/[nIߟ9jYv ɻkc֥>~{Ė`{|k|S }~+:UD6U%VpdeC2fPcu50`T $ R'?wO'tS3!'gÝ\ױ.?n5maR$6@&vI{BI|B+z!y4_ן{b2 j5lQK~(9Ju2Rڋ6vHknr<橏;pn)"}Fk Nz{-ppznvk ^mߒ~,<lhc]0aܛy^ɡC,рH@!9Ma fRA $0h<!n1FMUSA`jqmC#U#n`_r> m^o6 y &= +M/Ibce>+\c(v|!gOf$!ARlb z8})-gEzMVt~ ]S~E1,}3*ߛFצɵo7k\>Z!13`jljfZ4赽d8N֤Ym,u9ꆿ'd`mԕF|q}ޗD0z\$E1`aR K?}4TkS TAVYJt%rPhnVrЮ8[573BԚJc\}Gwҧ`|x̍3)tקZJ.!6JC7 0U<:A{]}dQ& zt!m6QŖK<ݶe%6P#uT:F0](Qttwۻ&R[M@ĕ "jglh6@sNjkP88pq dL[F(.f+c5j@P"l-,4%-}d!)ɂA}u[ :bº>Ef aCPʌ r D-O#Fuc5Bq\,sӕ,$v/:ý 9McS˃w4?7UCʧ E,4ڽA)9ySE3ϕ s;~s S?*CQH4gnU{58D*svd  HPb2ҚUoL=6ċ&)d`R_#nN㵸 t,F5..?O-},<<B"dX! ceH+,%MTysOM2!-+y(!|՜֭2 Es\LQ.QFw]cW9cYFIyŠDŽMC=# hVɂWr٬Y)ʥ`ff7~Vy G}lRNB[%XرdlV␣zWLIi&J)^a2HA4 S˦TY7$Ka4:!%WHԤ.wC)Y y+aj5RV%R7U4x]wJI$lu1j%B.7_QvãnX4ޫ(SG9x-yhQ xfnm-Z[%m}Gn`/%OK_>{L>oT&t)ֱ ncɽuS^HY %@>%2H`z%ESCT y4`P@Q`[$xױYަPR%޾,{.)RRQV}ۇГp~/o<rsO(eeZ/{I^Q-J!2U`ꕾ(/ۛiQ8df/?{TfHr P"f, Ii% ,BK+'xLeBp\7Si/cu(DP.!Ee$7HքB37dq0mHH9dYke0H4% d[AM.J%IiZ7AJ$X˗Uk̥b,M #5K}~~QE|,ٱY W2eBV`Ze[1Cρ́He6CaA\+6 U-~}#_<@GO*ɝ 4{3ȒI8!=6XBk0_RّBBV{ʒHѪֿ*/*Z6)! H$"’MSK dxOVq wRԣHA8IK4x_ӧ3Gpw8#m0 Ѐ;x^ {f¶+Rݩ*vo(}_Eͧ7l-h;qйuyZ]/@-Ki@[qA0VfBq.q1 HC Bftoo6ϭvJJZzn/cu:j0H y޳@x) w=@)q4NXst[]PY6ʤ-$~=Ee?y7'D kq"vCm6p.OgB^>}I$)i$?+|$ U˥ -,E{&2@h@2HfL$:vv $'`_. p8{+1gbz"OM@+ 7$]Sy[p|-On>/UcXXgGs/)TQcȜ!<@Ջe\P `(x6s>'}jqVjs-I7~暏qjT'aOD$&GSWb44?6a@‚ Og]FYUmI$BH#crHk:$JCBOc!mWH o&"a|xsr+պso#d9؛87LL+nȬBdG*{d:{i"?-eQKQݜVKfmtͶ^kzApU^/ethv۽ʧzyǰ{P%CX1HՍ0I?jP!T<{ C]+E !یHlXw*$55G[Q o/u$kT4!$j:I1,aRII7^%WW$3>^p0꯬Qx3Y_װvO}ܭ2~(3C@`k2%PU"_x F5 ͑g["5D'GZkz=˸{娝e#U%$Eb_ )1]6諦wnv^FA,fg]Iђ!c~ci2c2|u!|]pCd) I&`c% i_|x!|M5 "V=}џLT1#.Z[ I ,C,p%5>G6ߋS8L (E F@p]:7~|0Dgz6hP!d 6!zCpI V[-ZBId3I3`-@TH|@Cަ"O  !۵ndu*OjI+?wgbI3ߣ5k7?H4h,_/s0/:<{ۋtCH˛&u 0:)]`Q{_9{i1Mzt]Ggήe>m<&RNߴ?'ı_^}[t֌N I &\ؠOk &*` +1A"`t3<'dw|'g2H,8zxN_Xa!:O1a gbZXz'̀, ީ A [ B+ K^w/+lت[mk {G8k"hTg5owu®/ᙁ(e|:YTT}*T7BzO6ݞ{vf9O;ل c)]Vr߰$KPX0& A7bqL}x.?F"HAV)]U>//cYA r.Ā 8}N9: !Lm2$Q TP1zzZ|koP=~&N;O[ppBb=)/9 c}> ^C@wm!o@RH5pՀHlL^XTgyPP-Qh[shUgS'YLՄ~ ` _F8H|4s~&F-xu 8_z'G@Ee fF=bpyu3Ҥ"x8.Y%H!JL&ݮ\=[l~9/﴾mkqh`xuwmOVhbRUq?}fD]iqXR>;\bXR̆ ovjݧ*P$f"o[!17*# ôYV y" &l3z5o(o2 kD21Ϧe̽Vfrn&1oĊ WCx/{cW@A;ij3ڪ3v`wҢޣVĩUcM]G?\ 6u⌌8#`CK>?`XI|Y !6BVthɇDV+Gd7#!  >N@-騅d ] *}z.k[bdo Ido}jQCe75_h>RqĥW%OˬR _M[R+Z4qgyFR?_ۊ7XIp3b unVK?<AmӌxgSUS( T0I`Nj6RH/2d67`l\5PQn頜Lk QAa+Es q QND $ S18!'Q+:Z 6mP#W GZt~ʃmZ[TRmV,bqOӁxky,N#b4a4I6pINf]NBrP' SV!.$ TEKRj~$3/&!!5yigS?F10@Bw\\ 8o^Eͻ.'^1٭$X@bǜ21DFPZeB"̓L]GyN 3#$Z<^{}wuWD!n }v!+ '$\Kz~|2CұI OqߠWǓR?o9huD/E i[OiDNC_LG?lP]"w%6=v t:{|=^ ;v:YTM 4!$)8lH?shl#jW l<!ݲgh? B 8!4uùOevQlaw{񘇈}cF$\/ ,)8-X$=R]- -RIaJIjRIg$2UCŷ`h.HZB;zĠR)F#Ц4}w"6ghAmxQK1#&&k@@Wgdxse?s#YԐ<46qI7rց˕ D?=rV'+L* 5 T¤P&ti== Eh'Zrܵtt4:f-$)7&mfB `8O@)`@XL TÝ4+T""seXL㰕q88I#UcLF011./-1^sל_=3A)Rnݝs cNԽnĮzcyr0{ 2 #ŸL;cRVMz]U>j;t]/y3,tr(Iʈ̸"QLYQk+w7^m6UQ?@N3(aO9`Du 3Qo^elXхlx hojaAD^AwzfW$cAM ndf/.z?,mRnA^Z婵( :85>h.IwU@*R\6YETqsHTD)@w %$F1 cJ o&=|::OɊիN~l7'qu=4kec-m ~].mqx< XBKͿCހ޿]xC,0jRs7`Mma,'ê).m:k_G=:={*ZwPmd7ck9 =fԏ#~`:{]1VXnwJ]FJ|3}w:eGܧe쟇76pSV!N4G۳W1aޟ'3_{i2/ZY8)ɺ6 lWJ` wѢďB{h߹:Jx6^5#@ɿWc |g}6=ug?O~.a179Ӹ!F %\0iw:54" B$Pgrf1 S Bk1Z,N*ABT*"ntjoUUV>;ݶ%$,7LӕU欧oЍWWM.Armt9B|z0ԯϾj߽i# .F u{2}.Tc./||>إh5#LŠ$  JQ cHWTR`mp,%*V0"wo|v"[ڞ=F^a_dFz݌tLRlfjL*C}'mQ 0Ι#ߣp(ᎃг,q3IN5I}3:QVZo^ma FF"Rr 3dhgm,\P l0:@v"`( 811j V{IP!1b-r["Z]=>ryG=M;iS9LgȧϮxT [Pds |$?Z mGFys:VH\Ld6d1v]Z욼buWWOezCM$A(Hn]-'Gӡ4E'gz̔4kêq Hv+c ƾԆ}g6[}xy-0S"Zi`B|NѯJUo5c[w7[|:HQå/bM6=7;u/5엾~=N}]'cOW]м;wu7( 58}+Qy4آ-~Kl_w|R\>"ñk)zT[bޓ'q{8!\HRiV#+;:(oDo*1ł @ڑ繁e/i "è ^fg3I .k Q9ΚZi"6-K~ߤyqdSHwgPUɉ"d BH1@םt 2b*g{.И6 vR2,=6)SȒE `, 0"Gݧ0L@&vHiō@4F/.8~~m=Caf|4 Lco$|_p}FDG\ py*玣λ,}z8%nYXSI@U7v8zwQ.7^j/A8cbsQ$ix*aG G~VSGCw]|?[fBY{[ebƇؾdcQK#\i;־n1;:O˚*?'RñkzmS[v)DtNeZ]LKa%mEY[]t>zk#ҹs QX&J4T" @p[[}߁>~̟b /cW-`l[0;id|k譾U.9OF l5pYLqD'_А3T!%@S-cЅT jY$Tz,;v,}KPMfʨI!gLj/ˋ}UaR(ctዲ ʻ㴐j/ XQLr~1ewm\@'I$TrZ" V~}6_N$;q&WkU=T/d$oiI'i !rTa@cCQx\Hoj%aŵ)<]fYPO61aw>Ηʝ>MI;^8ݓe]&eޯcav~No[ƕ* ]PAa Pkcf3qiW@:ִ2!(1 8RFHZ9r/ @Fʬ#%P@8م]@2BC.cYĄ>_d944(-BB1(xaG[h5 NTw<# rNaTVq~68'p,#IGyO2TĎX? s>f_u̟ޓx>Y6׳bU̟v6gqi 5 f -0+M eq1ae^qx^qX.?dWw%Z pxOf{O39YDTbQ*i-(LDY$K1"ŃXE?mLEj-i7:ANkͷv " גwNn̟a>i dx$Ya9@mlJJUJ$i.[%Y2wXNE}7!|My@A|?#TTi::`Z/X di+CQgWd ũ$>}7ySRW5Kww2#9 eҨC hE֔0t5ؘ3vvT30u%kN) P@ "^PΌ_#,]1@"9cHyb o0sG2w/v9A 6 a'l~vOh#P>8q=̠Rl9!əjӷulʯo*m4MMQ;{Z}Ki X~{)ʾ+E&S! ^[[\+{.Vݳhp!9PIa1b {m!\Pu,EAΰ`eFerX!$,*Zsc&KmS-_`ҡJH@=\{Ռ'b",Ik4a!_O^[Z m t?:ϯ'ΫlZKhGahPH?lRCM鸞[K{D:,ߍ}9w;}bH/zǤM O,_琴]*c[swI{E7o]{>n?sB [k\mRWI@-XZ0XK=P!' ~&yldX_i<ҾN X,ƪ#m#kW4'HMQ* kްHL@9 ~O`u»$:a]@BY0 @qJ!Q(ZS"na6/@G\@D [+Iq{Iۨ߷k 96Op\?O[hLAAR>ïV}G]w:Þjy%,x:3bAMQy?npA.@Vw>O!aހ) w74u S{%yw hP@ Yg=߽"NpxFH7^ۑ@ = .ta)%*CM!N+T0 a<$ lI$Z'co :/)%m̔_Kɋǩg.,B_h(@P H'0B$XIf!V~v: ~ [8cdC34`XbJ%ULH2z8v!L ;jLU$/R>aG|1ɳ`H?ceXP7;K;SIt{N#]81@]! +V70$0!Z46$bXJ0~uQ TmD  - 2 X)v+oaOvXʏZo\;)ى1 kn͵I0`aTCd>\ޙ.1G rd خ5?0,HTQs'.[nx_kDZq$ -i2x\VX_P:'\4GH(nV)k tk|AsAr_44fNpk:9-Sw+SUhwl4U#гEO;MR`pr<εth߃nճa=\GMM MA3vrVuzk )B,:/ƙv`a!L`ؠ%Xtd;;$RwͭVck6yir;6aիhį#Sf(>tP vF:ɟڛZtG/q@H{D{.\R؍B$kt}ePv%M+uvpTXI$0 )䥞\ iAy?gOFs%$124r`d CRMp^œ?M@kŴ7N4 vMmp\V@rR*93vlɟ(r:qGBJ ,\t*S$d&QI($Aaj}:daQYB )4$  $2k>z)0 4X/ޣcjYf5mjAql1gﯪ-/o\4u7tHЇ}$ۖvg+yɆ5i-jnr+]Sn' ('^eq&~f~79[cË#9OgmAu/O%k k? d`0w++kf SNliUQ:ai !1 kD7&( PFCe_o/%V_RZ}' xVy(2FdhbvYAor_0C|}muvdh [RQьĨ_j0)jH,""ቄ \l 3]Pdg t|{zϟͻ0W͊6ׯ{ڽ{7R^7usy.$B)Z ÆP$ 4Ph  aK}& ;.`>Wazhh9H},9s,^|vE9H(i 04 V;@/)'xnyx~;9㶍^痧,10?}ůZԙ:+Aocrv+U9oP kYi`ns4+}֕^U;~ 拚^3Y۾4jQkalJ<^h@񙬏cE}p&OCc_4961jҟ;߹Cg].߫'CUw SM\bH`sYfyiwp>GξfTUʇC;\.’X@h jX9p=[!BQBDl /u$)Ĵ1bP@BJM9MK&v1+؈ *L)*0 /:1(Ȓٱ3`6Q{JnV 4jAc3}D<-51GNU0_eӆ\EHy,5cJc qm/Šsjф&Vs1ӡ[}jYηt(_TP kl?y|0oQP[FlRmDr@a>v/ FaQc}79\-5kv==9+ovz]n37nvth]4]5l ~.r]AAK%eقN{Wٽ{tWTF$WE6޳?yT-a\QzVEjQ|k6|}͢V*D/$0jGu͹4|83zbZzTۤ^k}I|tJmm2'& 5P2 i HT%0/Waj$(h ?($ʍ"ل 4BdI53; d2pa9FfѧxZ[B(#%хLUo)&V>;4}EtZ²9CraN8PugN@hؙhFS>! $ ny38k4HR«̵H,; 1^ڽ_}X[eR)TDx|/l*3dS',T* nB};G `mT,4fcc'WFtE3y_|9q}&) ^0o‰0J:WP?,L-*T+)C<ILWgLq? _Ս|nذf Y? ,^W#iC;۸8󨭐FM2}"WNC=JEAZQVV+˸~:=C^y53>Y7)Ns&0ҮO_آ RR #ƞs>L0qD~oʅ7p0jXE'HXz:+I IUlג%Z ZfP57٩$ f C!O;_Pgu{=X9l=xz;r"S-Ɗ׬+LLkDOv8Jڰ131Et,&^bjj MXo(%ˢ/iA5gX%h_[5]s:'UŅ vGz䏵=KsFjs$$+3fٿmB4~NfM)dl/rF(x<9-ݔ-|#u>N+TNQyw+z9HW5ROw (X=ABmrM $SDٴS:7b^tQ16T]MX迄7]}mgz=D .i1_u ~:i' ^l0$ogi<װW^UI.(c/f@>K'Նm=7򴘩zac:#rEͨ~6J-O9Gq^*t"nXjf +x`gmP΁I4έ4icOK#eqtKȒAel+Ww=׃.,QsmΓY|$[hJGNc\;aE&TR!?MCd\~lYQFD̈CօpN'I¡Sj$xe= K4bÙdIDT0/&mnr1yuN9c+nhSa3}̺ejc03fVБȺZ;(8,[SP$5ʄly&uvU'*딪XP:Cm&O0 ZԜRC|0/sj~{a %r,[in7b:NcaEZ#F[*祮Z(^|re:&:>֞.2}sdpzոPRgzȶv8XY%2t"||zlFxOzOOt=)ޮ]tv!mTmj-W⭵tUض5?CfAbP[QGVA36!J, (;5f JYoE.URLSMqk3ZqMoR)\ֹ-y-_Eʤ+%Y5I89b E%mm+ch[XѵƱk⼍Fv=F^v%}M#%Y+] X1BS[(c, ibY;f2f `ZR5)T4ZQ3ָKC2 3$@5cVQm\}kfLݢ[@2 /%P.,*V[6& MŶWmxH 1U\ؗ՟`bʽ 0)JTf*Ԓe0f6*6j*℈ ibaiv{J`nko%&5R4  RE TѤ %(„Ke>2\ DDlAZ_c86&OUOZ֘ {3 q!ܽ&<]T@˯<ᕶh6z92-!Ǖ98/-1]Km2Se̩ϥ!zvE"U@QY3V:_x0 vfH(O )Z'fBal?L?K+B4L?a]9cmyJqY((<ZO7R;'Lvz'ߡ?psZXdeNC.Lw=;ă3ټiCP! bj1tI 3tOhz. M!@%A QXbM+PKZۢ pJ >3N XgEpK=)dNmcsKָ1@q9"A‰S=8llkp,bՁQ9&nQku$$8?뺆h(}h#Xu ` 죳<9L.6-~R>;6jdn!NVoZp.Gs]VŤ,Ÿ:2ڌ*K`wN7f-]Y~=r0/b?쵉}4XUiZp7QUZ;s'C꧝Jiԅ_Ŏfs_2mx&~UM濅oiEWIUTZѯNmUVpXk@!-|J؄(78wJ&`9%s޸H9V0ms:{_~7pvl)_Qch*άF1ow~{7髉  ]XHն{]M{<{FLǕfqju7s%v&jFr ת/w). wT5U3A St_ܑex\wq;k mA+^[v(A2@1<Լ6y j| 10<2= B"^,bPoi;f3-ƭb&ha. 3dW֨_orY.]$b(Xa 8 ouBN18aR@%Q{\\Xo TgQŀV=(io*l O9J$"O]܌zļ pR+$8?zt> tnƧ4 ۧS+Q^ԍ*IG,^bw l̛nqfՈ! p@r0nO.漑|Gs\1xͅJy~gN0%k͑ [2)t0s}jW|g4b6 >WޡOYA\Ƶ`'iWC+RYs-nb>ۉIKn W:e)6.e$3Riݽuqq6縊eJ=uWZ7]dpKuL7=Tv㽛.\Yιe'zvIA5v +=AWJ8sƻ/TͨhPbm&;,e kS9Xo?nPy~3 N7 Pb1޿+ (jQq1*ߔCA" MD׶!_ބ68 3 $a@ݕ?*ٸabjz[0 q@q#=HV+|*`>bO sF4]ꀸ:RK4q?99l,[vҲtnV t n̷\Uקrm12߬9UԽ=bm+z *+[sAٮϫc#Yum:3v%X0/Ы.SoͥMZ-hMhwE'^ ҇J\3zE8F{E>^'Իy4LK HT@͝+Wܿ,#g/8vHqėi_Z< W/ucƋY Ϝ Y:Pta'hL|T bꉩFAJM~8G2"P1ɶ(1BAMGoZw5HzHUf{\ &P&kR "NҨ2ʜhV>g g(clm =e~uwWЎ+[\]Y)혾 e^S+h9I쑊GKJ1*)^(|1iQ PC"]r_XD# 3ǃqէ~W @zD gxP vew>7ܼ F! QHy>08]| ;L̏HnbAz'-z9*plm.-sGPRhm!_(%D[t5St5n3ر}"9jUisk.mS/_%߈vi7yhߩR0[yHÝ>f !eݤfP6Erԁl)@HNv,kZ>*Z0l~}Bν(JP) :Qz~y_/!pL-VLr*I]|ϰ[gy\ tLxfob|/ܤ*!_WhS%J*F}/ !y.`Ey!ɌOxs:‚b,aG(R.Z!@:9#):YS)c—J!G"jgކCQ`yH<`\nN+;Lk 2!%Q_+C&n0"M@܏`~'ϿVtw=r?$C3NꄩBDRmcPGDOZ?eiZ cYnꓽtloO?-WξN{h[?sc8ԉk3f{0dBplΟ;8C֗f9"|Ǡ(G >'ר&J Ĩƾq~ ȁʻG~_鳘:2c^oI/oKYg;oh1QǘaZjd"/TAe"01m~fz(Vz020*;MPCU|_GyW#HS%=Zji w] Pr}"Jts$X! \J[/U/i`AyD#PȒL%&SM OU>)[Wcx큓:W5ʄ p TmgI4=%>!p7|wF6?n[jm(4oQElQo{QdW,Wi)RпØa_;ihvv/㾀fOނVڐC`/78}otvGgۭ)W~?w8yG(j\h\^]NJhPoީ>,Oz||jwE# }_\C˃_s[Zs䪬|(:~I/CjvUoEʎ*LF 7`USa`+a,Y QF}[P 4g@2( %* B\ZE4Omcx_ö ?6VGd!AcO8 h[O+1{4}o9Y BMw lmQn4dhHSԳCA6Vy0|x$ +5Jo|G 揗}t]*mA0e6XT^ 0@'`b.ԍ&㝇v}jeTHݭgۯtfPm_7OOmi*?z'U.qMi/]^gC0@W8uSp5m6?tD4H jYki\$Ke{)oơfmuq;qʬ;~j=;|-s}بER0pi 3c40! #צqo5$3xwz)jxa=qLgFdz)8~W%*%Ez")Y]ۯ6FeOC"+ta~o p E0 W@KIJ9%JW7<^6+p[1!%ȔBq<BJB*VL竸'} k e L {sLGȣ|12 fKE!ۙ/IY:җ)/W:p6m=}RȃS& ]6#A1)6ȓog.R[E΁]q~iۢC "P@‿-֮9B4" d3eRsܞ38e3 JtƪMH';.vvݯeMmc\Zk NUM=zOazʷ4N=i~[o=(-̊ޗ(V5i쀴Ji Ts wOA5^ͦnzlFB!AƂ;xQr%4wV)eNгv2kc+2fqpΟ~N )dqac3Q,K+?eZSu'LQ [-}yeS1Lsv` @DE qKL&M8\06iΥwҰ18Oةvo=ysX^9{xrP!)ѪQJBQ"/㪁$ @X&m}W+~(o5# ,K?-9r>ЕHv} /vUƶ'ܮ0-<6vp;6)-Rҿ1$m*' `p1TPc9W z!=ЏIiiמBR6qu>t@nTqfJR(71]eS1|tof|J`D?${-O?"ò'`ᕈŮ]i Am7dNJe8MP>Hقb"{!=4A{Ur[r`}+AmåkSH'&xxJ3w@yݰ'GAr}%Z nm[ `%ԆH[A]ԧA41v?Grʛ); 2H=9psٿe^D 5ppH9T6ڒ %\#+Nx~aH\+O'u;[fݣ1 ̡˶㉅qι!ÖGrګO#8&u&S[: FSme]H ~~·oy]Q<ι,ɚNOm͛M dt޹{/&߮Үt\>V͟_խR݌V+aDIoAM>/ yc[~L8HY}/G.Dm&Xǒ"( 1LXeл #LpVff*x]S(|h `ryۑRvAC!:a[,ȨE0"oC'4J@z@'E 9 ,4]=IПN qH̓N^I$Q:3B:(3'\y)9T͡z~,o;sM׿Z[(L2~;i^h6Z@ D!6!%)!% (H&L651hVq%,JCTqRI D8h9-w!Cf K}os$+3EH&R (i2)]31KӷmwJKwZmކWXKފ뻫y"0M d(Z\0U)h- ZD @lD/=@'2;]=#hZ!9 Dj}D89wtմ42RxfpJ: #e s?I|`[;M?;)v]{髯ɡ rƟ>ɬu%6*쮣efx-Shhv6v5{ٟ7/!3]JWOm:hй֤?mWJE ͿMa֫gh0뷾T pF bJ~ DT+;jim'*O-)QGʐ=Ԉ)h9AH}͛%z9JL HSv4 "/ӈxq~ݒGcq*;ȭ7sG/_='ņCs B}!]* #ChͩdOk*]QiÁ.KKhv)x2*jMK$n6#Nzɉp)YIn)^tmh;j6V_=8{<=ܶ8RU'&ȗIFg[DGƻS]5m?϶}`Sfk*{N>w:qø}ǾlNre#t)>7_W}ƙ4VŢ ja@q;$ B"ZEH`7:K"l /k.h#!J&kBQi$W"3hDM$C1?#Sl0l,%x-zX:Wgb0#3c%WU)pZD)it=#3F[$f8k٤{^A6 ܦxwA( <|^P DeE$D¬Da)%\Cș.$~uBARi1!Ù() rNV1GiBB3J,)g(l#i Es M#2AM-*fH̲%;1& !NK!4v@.xpDSZ$B?}mf_FTBAVDE2JKۭVY |( eƩX0?gs` ~9.wiSqh.`~-˅IA6 G1;in>d,@ה}EJ,g6z_(,_0C1sz|DVk)x/Ԏ>|dA{N |g*Ӊ[hf>N͎2KRXCrcj?Hqz#s­Ud8AefG? C 3gIRr9c?jD+*c,RTO6W> MRTйM܂YPd:1L)jaS"{-3褢!aJqHHAA0}< S~Ϩq?btBz,%6l+Qor̒(PanᆉUjo^o1cf.)?* !%Q e3>F6\rޗl[J1?<ЌM2񜾱e18ݨ!!~ P$AGdpwCKHM0@HUC jnJ%Hd%ccj7J5o~:W;dcEl&foZ$0bxtpfDegoCyecQkarLV<MatZBM7 s~og1ӹXL"1R2ad> EL}iS%R2^ߪ+^jxb ڳ!B8^qʿw0bm%KqPV1͹]x>o-u@M eQN#8(N})LSB8YI]gV&8~6c2uZu"md y"3޶ 2N C132(n K IeZ6ZH 3TLUF(J؜ĠO*cBkRČX93%D4dp"Ik{_hS1UbS4 1ըc ±d;03ώ|,ةb H XMs~`+IKm9~~W=[28}/@IskRo\ 䡮#"M$+ 2=*#bxhB4`F$2sC<'0nC S"')¯ϙ$$4rj$P(%ExcjN 󛨚ц4+K+RtT@-I6*^yԹS}cyߓ0=Wkx+om0g2+8Ci(' DF s6-WOB %|j bVc6͈ (:Ӧx{}^N ZJ*j= *3$7#p8(/w %+"F#lzA,Db_Ay "VĴx$L&SPY-A$jAlaC:-±dG缗ɚ) H4ŜI#-)) E2HŌ;!<"$!"R Oe@V0?[ьCɬ-"ٕ3%iTN2dfΠQzshвS W_fZg=*ehƸ'༴tF,Y1ے'UZ!BGucr;g"PഌC$8' Hz9!1dRW&وV֥kWX,)I\5I/PȢmyò7 "{{7Ҟ^fVD"_e5*(Tzվ@i^~1}>u|ܟU' Jsc`ǐ^:V34u@do^:B)u"b$HuI}-D"~PnB՘+V~Xf MoBɂ+@Mmh63EJEtBR/J1Eq=b'948eJ.{eJ)ʈ'gLǥ#sb>>SogF’cIXg\S?bW%9ș ?!UmZ(jc@{P )FJ:C#%Ȍ٤!P"+j|gw׮/?.FP8gH51oV0YG%{[fv*""EAX6mcc[Y$`NFRWŒ)7Ws75ϡ`A p'<XN s3?Tk<(D={Kw5ؐi{Ș#i뼯2Yi2:NP@@ ”H"D4:b*!X9 MLӸba~~P@FC ~Bq(;~ܡpu#]J*{Z}Rdi $xȷҦ 4DSBRuºY󘔦"^OD3ɐnZo|Ԁ]4@?U\͓fLcPB ޗ߄0i6@M֊6׭M!t8ь@ qk׻6Xj0?w}xPrtQ1K@ tno!I s 4ikP뭸6cZÔ=0L拇 U1s! !Ibд1g壦L m'sc¨-Tn,11yfq7op^C'SLpL `ݱًEՇoq)MFaɼ@v!,orV4ڼ¥P45Cwvmv<9 p"H| = s  $ܶaP`mvueAjhP)Abm[4F-NM bсEAICQ0@C_Ő8 L"_Tߙgf05 30J!W/\RG,7ùN]TZ2$9(o@j|@GoPq30p!j 2 D?ۨ.ep>i\ B[JPm{0K3D CFDrҦ? qc]. ̈́1Ri4;a27˙֚`j5"#~n7ͯhgՆ& !(J 0(3q?mqСg {݂YntO1'$)bD{&![ g|?mjW8H0ɖFyҀu!GظYN9%e"{',6VfT0+,v($!Sc61# TvU&m"(sXJHIxx%WnZTq UP ɂ]Zt3Ze5eu3l -8-+DAq\Zd,ΊeV'5Fw<}Al&H}vR~ұ0xBlCqDeP#߽[BNRӪаrJFm7WbϾtBP(O^R;J>Ŕ1 mOEB0gXTpe]Ჟ(}"Gk~M#02FC$oRa%#i.xaOLRG;'|{,[O#+K/URFppDa[/cN񽼟U:Ħ>6Ϡêc艀z_(G #Q#蕅QSVG_SZ9}<9eWQhv}Q9_ye#r< P #Lm {8{PT‘k b{IWjN,Bbi]o-` ,xsZ/͉F햺{~[;v[ȬzQX.F-ʹ6U|N%:`[wCo[g> qt9(?*a^^$1.'AC8(f]O /~'~U:E7m9Uz{D64u=V;Yl9hy4)%BzZkHsc=FZJ-HI`+GZ ?+KGn7߅St&p ڊ)B_"`,0T?Si>+HT'#)ӫk{= 9d0俌,?h39y R_-&),rf4C) sɛn,?я-U={,vҠ ,I'go[ژ:Gg>ؐb~:4/'~WH_AXoüV­^JrR/ # oh`a!86p\tYd>Yy;vbP[}P0ouWhU/?IƗm}g]Ƚ:5STg{:ؒRJum 7{L9wStp4u+C <*d|(ʪr4UCKW* ʣ.w u|qOQCBt+3?j@ =Z'[NIPF4ҲI㜑Tf>VIKXTq |x:z/Iz>GFH#aF._K8׭GR}~o~`v$ O+Sl'g8ջ__> &- tz 6D*=&X4{ ȋE79f nrPoUNO_+^{D!PP L! HA@:NcL a,FB":MoO n)e}CV=_sW,ugKtXdB#*z=MO-غQm;* F#h:7O6vRhOwP+gjY; !}Ѣ$;-QӝJrB/`3M!*6尪n_Sic7㶌T M[>$06}% &0v=?OQ^/dh+n-8m9-`{>ԑ*a;3ozx=]~|9E 7c$ \N~k\-i922G08Je7z$"HPIB$"(%BAY %3fp ̅"ETch^Ƒ4oea@!jg&~*g@T2<œ># `XVRA~qVL\UA'rӋ{bms"LPW_k-^ȧ{2'f WN9sJ (nɈ 6v2./ZaJ jSQ,kQAJ%X 1K2KgkGr%n yr?M.fk9~BrhN~Dť댽WE߼B +b"dQYNg|yweNءw[&쯷~yiI_fZʻQ)rbThú.~w AeD,G+Ԩ}oHǛ~6bϪ͸:1άbghҜm)֟e0 w?@%Lc49 C2W5+HsPOݠ0fVʖOg J$c DRaJDq3z2\X)z(Ryoێ!~K_3Q7YO7*\??q5F?<>Uh"$3ębQDK P ,u,*"ь 4d|ڸG+?~8ZP:Vjs#15! &3ioJ`;b L3c/W[> .V!¢J Cs(Ƥ@" 0!V3z`)< LqPal_\-H$P/iļ@eoXI ۙn5YD٬tj UL y|'\~-+ãMmoOmZu;fLd ,4;svޱChwΩpuwZ7i5D.!:w6;Zӡ!5޴ǗW}'?\ =4V}7?;'nhUo.o~v?c'{n J3~Z5u>Bmƹ/`MTx{{8؅34-VF@85FL쫀 "z^hz>wd7LAyEU# h S{ϟ*~ ؜ |FA5 QKd||ڭ8H{Ԁ0Pjx=A&Snwgr?p@?{{Jհ(D%0=7hqքRGQDf}fT~|Xbـ$qJ EFȄE$"A>sGK.f_o?-#iZU mA]LT$1" ]x>.Ovǔ}Tu7qsΙ**Nvڪ(hdsVT!tMlL)j MIF#F5]sJlͬ^/÷ci=3|i`16XBR`Vڈd{iuڕN,Tc-ؾU2ۿQ+s LUw:n~5^*(/$" '_7cHR!E̬2 (?vQ[@ob-:^. )D2:T\7(J`2$LlHd6LM] )ʗ)iMR4 S 5gk)KșYホI2QSkPb v)"F3b2TEZ+13$3Y ;I1'ldc.VBHaqpM5TQ*(YJP}f(]i Ғ;䉇ulW)O ƆFEʺYxg!=_e BcUf8I3K_f#$*`suВ)KFP`A.e^l*JlӞ)4勤w\X7K.,T,4aqSM0(BF7D"oNJ,.$A3%pqS $!& ~5NQ:GNOSD NBR.} -rVYQKbɌa ) l2"i)0,mEFW(IbU&؁a$d #[7>3K~};yE x2.AAl~.Ɵ.[H?4a Mz c9 3bs:V6YZV)It\ (pg 3ZikQgkV¡{_j\mE8Ŷl`A7Tq99PDݭ"顦: $$ ! tWkV^^ko-ֵZi)ZUj;{^VLS7+7*Eyͪ-HQ K{ĺC`368HKea6\5!BVx' sֱ0\hT6"L9q3+aß{ UQTy_BY8H4o_3o;j4xs^_uy~FZ(F̠u[*]lj/E<׽R,Mc@% Hr,E%x2vxO 2B IidJk6kw]jmmTu[o<" 1HcDKUaJ%$i@Jff$ĨCNqJeY(4Ų ) hBI`4dҪSjZ{h3oF^V5QFmb E1i0Sp®`* f0b*sC842T% 1_QpgUt-2'SN)h[pz  Wr -~9nEo:.q/y~wu5d!'io[ l5]Gm=pqխ& ٖQ DI2Tlkm-F(b߮ʛ_ CQ=!]+) s|f{s  'Y>O;j&{< s$UΪ{c%`\0yT2G^G~6d?*+L> 'ms\BY>;FShcz|oZ.瑼VJr56]zP!FP^z?#4-0A1:\n/IN59c]b8=gϏ*fN(V8a:9xU\&GZsk$Adabn @D"I(5==q^Ϳ Uof%ozc}ǘ];Qn`lhCAAg~S9bCyRlo23l}ػ~ֽa34ٽ-鸂q4osM3[KT_?A ٴR[]d#/\so9Dm5jpvs\ED`|EF?u.Yc{d$_Ǜ"Dz@A-0 @B1JP Dr.'gQ3o/W,*47bG]!*'C>BiDTzؾy^pAGܸю$!Vk+1H~]8kѯ߲3Yҙ?Q=Ӑls 2gl鎑TvH.+ty%Z%; G'Tw[ ?5{BloRzrͳ}nm/]{zF&29*|3W.oW.Xnrw,{W:ǧCdlgQT涤ZJyu n>iK_()LBj;cgx>_WOSqe|端%S|8.Ok,#3l5m1J⟓M!3\,}ѫlktqOD"u)>kr_no}y&cVGw3P=rMW͵'k>?9k#^qRL w#>r- v׃u,A|;.NcD%n7~hՀo1^M"+╼}lw9oT6CO ߖS/Ӟr8xί؆Y !񾁀za+Hlv>όza(9?7Xڼ_[1eƉ0M ʫ[qTdv";M[%yof}#0@-CPD18wװ oo_=\]]%yWw>]6_HN?ހhFO܃_T쓴 /+h~ m}k+b~iYyƯ7cJho R֛uR1ث!rgm_Fk=Ye Em9u?%-Aco;VƓa1,l1^S5j|ܺ|ε\/a]+j!d}۪]ri3\g5=72X.-΄i]G+Scu^Koј y//eߥ~ww}f~|gR%%+n:[20o&_G,S~)ɘS:MȠߙnWw(RR*/n| Z_˩:LKcũ SМ緧v S(ZZޠSH'/:v-mnY9ʶyUs5f->Gb:r^O'F* :9ȯ*ŵ.ՏzF9-[,^w_e(g]w[o4|(ʇ-NA8'kkCiH;H?Ga;61 AcK7ِWz|{3Sط>WtsY) bP絿u~̣-ZU(_+9[6s6tƤr@ƍ^Sc"U%J8<&nvزFvmqk(Dk%I!Օ~# dBBLCA9E&}~oۻ+jbC4#Hs.!nC{p74P3\ɔu/ͥIn֛Q6sG=`$cG5x$;6{!8\3}5`!˧U33u*!-%P@m|$?Ή̡/bs=K1{;O &K *W*6A[@E% 2Va dDϙM/Wo~i^Ɉꔠm28zq pkIϺz b6XzKI赓|mzZV-68K7*cb́crm6(Hp!k9QBD@2 tYʡwfZkV6i`*"UY-zHVg[͍|mկ,vif`Bw*'zuyoz^bUskpÆ@d(A$%PXl XSs6龾3mԳ|Gy.Lvtw!-4 FZKE4WY8cx ,P(}~osJUC쭣X=IR>FaL~MzBW9 RBXCH^^}x`FJ!'TvSn7Ld}_N4fyx $:GzB?BK}aَ`e2:S}aW^2B '}Ң5bVQ@k &T+=*VUw7R50Oր)]g/ZfqzF&;V?hhgSYnGl#@pp͝—D3ed&X4҆JeaM$&[( lĘb!) |"&IFҡwtR8ǔ[B'lk!ԥɇ{÷:uVA<8NlB(#y>:ջÇf[IQR'ݜ3?wQՍh/&.g%6|ER*=z 9{PPA(xw={-Um7>3X4y_t` N szZ{>\VU{vhh^떀IXK4`ֲ9O߫FyN|7_m {3 Cmk_/ÐUn_v;M*,CIiO=픺n1),&uS&9n~2鯍|Wtu6;{O2W|=UUVJX{dp95V#VbvkKe0 ٫ī%+4kf( ):vܻ:v0_yR"5c%fWung2E%ࠐ!"ئ:T=1AʀqJ5ʏ:s2v4ʇ @cN}fkn~K]oM\ \jnGlX&/EgۍS:HvY? KHCcMU٬[!<ngn5*MF…mGZn$C\o?jZҩ!zbI>Fk0ܯ54sY$)g,;QylG9}L3=K@1I/*<8~OC]`T.υSdUYAT9jB<~4H ek6®}؅ηl!}j*;;6%xpW]+ˍ%z ^kZ(AE]);, u7ۂ@wv][iO?93vZ0əa]`zoA@1zN+{~lkihwv #֙&dXI-ݳ)0+RD٫jEo{](RvƦOqZsF+-mp|.VK_MВf}+\Z@W#ģCSa~wVFs< <'[g[:y ŠщYo9 B۸LJbp9W <򵡪'2Ǔ[dm}p*#-MeWGɑ_͌=:8!CC, ?{~mɑf]<ྦ)bބ!D㣧}xg5M^#ehzacp;ٌ[#MϼZ NvꟂe.qv7k~Ze-u6qLsȿ:t:BdW{[7aX6=hlrLDZ8nDAA/tAX_ ،ΧWr Y J~\9 \Yznnai{;X\ɥ`*RT P;_a7qq>}Yf1f%ޣgeqL]<*&IJey/Ý덊w/m-睰]g,^-U}0+d%TZ.;IG~Q k, Ns;5~ED@uS쏫9Ӎ[I&[hy)#/n{74gxKrŧUB;Wu΍B9 N# OqVDy۶ t:ҧ^i@cųj mwaSiQxUu\KƭH6^}#pm(Fʐv?MH9?a9PoHOeSUg v@pRn6ѕlEi{Ur}[M~oqfMi.|7_?Qk-') RbcAÿܮatsup>WuK3 27A4$z86nxVv?{+?Zv5`z}ԆCS(\ɛ&KO-]{-촳vL,jPgk`=*쭟*vx Bŭl\5/g9 x~;")r:YlǙrȩbW VagG)   %i҆v JU{{Zg424-ժ4bJTXD{bIfiѹX9l%ƴxU\#0?"^W$ѥU'7K 80 4.%'W?oq P*@ / FJihԀO)ӹO bC C\Tq6,)/ӖB,QHBːqh\cn't.s#?0I| |^))s<9JsvƱ)tvO 02Do%G9KӾ pyϢ0]M-,BJf!ujnmx1ƇIwgo5ӿs _@?myGɡrX``D] bh6bD"IcA4 ad&4bD&HkPh K2dF&9߹Y{\ _`T6jlW5O<R7 QY3UcPBmlC weqxxpgBY|6 3Dh5>D?`UgjgF%j jS2bxL_)Oo)yKzQS߄:-\i?'%e:Hzlng%MD(i`uO)njv5ZMZ ;% FlrW)LI R99mL EoB s')Z&R)f.ɰV{ne3#ݔmA<g'S64~AG y-~g9ӨQ2uH|r/un.~cUY)i Ô9+u">z,|z=ΰ} <C?UOD1Q0>/:U퍼լYpGEϟ9Z@D@~)O R\${5Iom9Y:$+}KLh8N@бB" N`!L0g$@s_4m6TO{g67.SK/KחIoNΙLj^N' v;rK22ApvF86OYhߞ_Vq4fep<ezyt]g9i]w|9_RаxSH!H!rHxXĖ]RlBQ }ijjF&7M&ΒJ3vx Xgd?'zN}Gp(XL=""[QpSp>ˮ#ӻM¶nraY4C֨Hj :' }~]6J!_:Bj mUQtS&Bmen#!WNɴP;HcWSjP.Uj"%pa4hHC~K0:d"_ic(iR!`t{&F4甹CbyJ;'fEj ^! f oEx&D,)&R)VYUR9 vУf77w' BI&P9s|,p՜hdH'w1 , 0P8A\ '޷Ȝl2vQG mkrlOwק 81#mxؖzA6UZѴmo's(@d:wu%RQp}YMnƾ׍: OX"E 4casG}V`(dR ':FsX[gў䈩 ҐtԺ=?;ϝ"DT,)T T$mhJ$f FJ-QME#)&kQL1$)2"= ]6=i3*CxaY#ӆR*DEц|zjƇ,++W}6Nmݭ^yG9|ȁz4sפhr-r\}uE$I<{QHʋvTb֤@WJ@ ,D/;+gwLtۤ*ke=ñq )Ge2ǃcA׶p=ƏCf3'V{ A'!|^1!=YE^ 5XQr?V,`/ݻ__- vF)[e\o8 D3}~'b7( NB3qAOaN˃a p:'z-I γ;tؐ#9 EPO-]JѰ4#}95i_[Wֶ1q!lB`- e#'?A8ȫoO)S /|"h̻tL4T7H>m?~s/՞ڃRvNox! A5ehgiBF`IlߎBk)QOޗVx.?ߦ][?sV5~CF"(.cv_1}t@3ޔU, .⟦!~xod^U Է\Ylu  Hs4 B)[V8#E.8aOM5b6jFI/Kr[4>ER&v5W:o~NuM~_6W{^ˇ"e%䚩c4l&VBȥ w"S.ӷ!ƶ `:O9?n#XoM`gثnYQE"J`?{1;vxr`a Q$(BȪ@$$p e `筣^?l3 t0N7w;:uCvI|[9k~{6d!'>skg2+IWJcjz_zߟoYa~sp$&P`()E BDg6ZA@]׽logJQw^F"I 5^v,IZĖd *AQ!z!{5B4Zf@YvyWFŊeI\|7r3{ipsb_5PɈpHFBE 3 M콬QzSh8`&j;0Œn9u]l ]R Gg v(* vWT7hSߵ^܏ץ杏أUw\Vt`ep0R՝ɧʃ_[%&d3Àq)Ŋ(i0X.<hF(6 ѐmB0UMȋJb"!&KM B`)pmԐ"~G!Ӱ8۸4#ב,D2m(yh#[wo){cʓezژoLfFJt@?4 3NoBEt}wY[Oe'ߋ=v 0<\cm!ड़%8"\"Q$ [6 #WgGv2?2r s23(oa$]9rEdkoz_2XbH!U( %a+hUyj!R"/%7O1jrILoi'5c`dFS T"J%L1C6Rw~o:s7XˮSbe[$ ,sHNvHI-c5aIV{$MvB$f{y^D5B8)R_b,CS2͚6jI 3k^cϙ3BM9ݫkjٰHA+q؏a=^ex@:ؘAH@dA?DSbMxongtǼ~~}z;4L Q 1ogll7y}KT9,[8ʩمE6(m:2!C^³rF4d6-UǹY+v|^Ro]'> Dn֪XCyB:y\^Gn7Ogorf [m9SǙ珉TJ: wZU_㠱m3Աoፎ\zD JUp?^mV-=V㶈҆GBUuXuҥ?C|HC}Nn{7=5Vxn*=tSє;Ҽ V&(6@b.PI/2_ nxd?s9ȩ1!Rj~ҟhSje";N]S)AriIA}쐖i6̵cmr1kkZl`7(Nq73ByL` b[+ZK]U{Th-aReIE|J^=ҭ%ԲK] z:-+Ĩ_[ӗ𣻁QSf4}E?u]cݙ;kjLo8cKr3cb LeMIYO 5Ol(8s&",1'|Ds 6f;[<%A; J|1 2dHH< nR{eB]mk mo aM^$|#5J{х N|2FܛvEjXp<}LH͝myއܥ>_k.m$m._[DL Iqv)cGФ 4K$]ҙ 2? u7 9mΦɴ*)aq]DL?)_.#~=%1ijћ NKVt9>fe5O$Ũ[civ*;mD9vXّ8CYj7ⲞuuY,ҲO\Qۛc2rݍ0#J(Q|Eƙ,U_ng##\zNGȓcMKp-M^!ECF[#qAˊ͞[~)`ծIM;Se=9 s-kZ SWϣkaa}ۆbWY(RNL-&nj-*Sle[wV92j;(S֤!g ,?'3/WOJ443ZL[G,,L>qbp#"rMuJt3ǎri3hi>V4m#4+#-W+uK*Eykc\Ì(堈Sp\lJf/<)_g=´pL^8:JDڹTxȅX&p.&G;[Q[NrQ繶ؔ=*yגˡh~yen>1n[Ul4aU݅IT8eb-5e{)+du ށ.դR@ ͷVlFj.z= Neڵs-&%ac&#k4V]c͘* 9]Gu eW4*ڸLٰd&PIQ“qa&LBӖ* r>]C<ᾞcxKMGYFvA5F+a-w3PZaTe^nU8^wX#l04drA،p, bNKQ# H[oUh5=hj3KᇊHCTTI=kԣЧ{%,p.J(BMҹ/hQ㊄C#nÑwFgdV$p1tB2_bH- Uvĵ и<Z83񛊗ZFcs-b'hH(%g:v(v!Zc Iq&EP2h6 }vYm$ q0zT{)su8RU.$b%xպr-@fZ\3NV,vQBxC(쨔Yf86vI!])]QԻhN֌V3򚰤g,8s`tUȡBp4$۱^DMӔ/Ŭr8kGf +F8n1iaĕ!q+t݆@Lm G$Ue# iˢOZFnjt&n\deJ.+l`(|i6Ց yH^4h26Џ6yЗ.ǃ%%lxsԤ c{ڴM<|Mx3g30ɕe*"6f"bKQēCOHomZΕ#"Rwt_'#oZqQMiҌ(%aɉ_(niphsP7=h!̪ G vOu+:DFyA̘ߦ7Rs7j '*ys|b9>Ô_(ѱ-IMp}1]Y ɣ;Λ%ޣ%ڷ[OW4-#۟B{[,7vUY58vvt9< ,̮m}:MwER糴>;g4g9|3릩pïbs CN;oI!Eb[B1?ui]kk(z')uM Pc0*EScvs]2u3w>֊PNN ojӞa#34F83Z\c!<n;<[n7y#nIfȉk߮Zt=HCA/`p[Mz(Bi &Kj'A]s]ʃRr6NiҾ4ۮN۲>]vN I\ȁe hOe׎X(b3~6j &9U2 5>}OyL sFfmk.lNJ[bzlh8!]9e Od\t(lcyOpHm6,e r֚cp2m5ÜvGP5.znӗ3~\U:vz=9h)C! dR*i絷I&XrmLZCABiǠq;gs%jbJA[V+RQZkynR()A)6>4@[Ij~]~b U%CLY1[&ŌI=mnTH0HWOݻ}_e묕 Rt~#$W?CSe 2sK؇ ::u'D۞b#3s6m{IV; כts P;GM0C$eB@M®y_kgѬw/0;Xx^d b{>!~>fr3V .5_ú{1t>~o(Ms%qNΙwOh-7^uߖ5ˎؘkr| uky4\8>%1z[-:% n/ȺBs̄K>K3lΰOC#>="cl%|f~:.EHokٽ\yQ6m=l+˗V @2SԂ+|Ϡ]%F(Ε8妚!kgg>2,!Xj0۬cL*v9kg$n>-ή-p-oDbCׯa<:n]Ry1`5ݾZ3NT=Ic(Waf1 xo|(it YK">8ЪS䤒VyPK xm\ߒR<9 T1zXmMu$ճҩ4҈ǞR|y2\=~S+{9j̔Ad$I.kU#9g 4ɷ4~ 7p-f ,3ݕA,e:oZT-o׸sJKuJ낌gʵ\UJKHRZ&Rzw9C!^s{NcskKٶ#L#C${7ueϨͳꥱbϜb^^ԕYqJvZ|#>+).\GtXsV(.]vk׬eM6SYM:6eM mbiG>e\ ! \3[9ǂ·^ǐPczKfL&'U$ ܭQ;~h0H:9/i8&N|i"3^[󍫠YR$ IPog/sy̏? GM>&羸m:{֩Yyaډggn;zTia=k=}O"ٺtfT-RdҖOºsݳ|p;gԫE7S+hN;qK>w۷^snweۺ>N庹lѨ[~55K/,MpnwuJ薩k6}f1=}1ǥτzwzYZXC~8mn8oq׊sE7iHMo1;.{heki'Ia*xb7uvx6I v<'CztEV?b\aSեb:lQv:VGN65.xepcȘh*a5m ӱS|wǶI1*N'iMٮN< 8M-ȸK3]0p/m>\q;mc>;{QB=ǻ,+߫~wk]S7.+hI4kR8e5nj_IXNMj(Xݵ5-3}5t˭/o^ѷS˪+tv,W]f|M99a.zP QkӖLUF&6F :It[便^TamKSVH񵺾ogku_{6>;~ .Fa퐽"򫋊8& ؊_։|Ϭ)>qG&.WX.^='{&˫޲#ώZʕtSߞ9bǖpm_oEzWXKm\Y/c{,zi0|N}%}(8fjUNVuj)[a%)#ӑDO12)Up- /tXNh)x& S9HC'kDX̍mytȦmq*:0qJNJál4RLt4?M%CE~3Gs}3(}".5 kfTf4K[#1m;Mhr/;gKjܸa;,M2)$!qUj_v7UKr|:OI TK팹Ӟ?7jPWݚl«ڋ<9v+m$D-69>:\HxƳz;Z3d 9a9̹.Gl}-R׷tw9t^2bdrʵ1$=-qcN)PHR+)TD{w’=P^V=GI|NTOnoC{lJrsv㛑7=~ASh'VOz-8#u7/}$?lMY8qu{X+fOCbQU¸zF4gtJY ~_󭟸.DN*^nrv uei:"N٦2 H)sfF^!/^Yk)jPf!pܼsݾg7J1lw% ]rqo*j3$s(4+Uab"Y*T)/[w.po[$~+7s=I܇O62"%Ǽ?DA[PO}X0c4*Z`L֯.ӌjaxI9-^CScEvB^ԭmu( %p9:y8^\PD6kIS[S;|SFv$dJey(1a[GLdnObn= Ӎ7%t9ח:X[gW*a-%|@E~" ADDP%"EU;e9nJJ''H.,-8LSL t%КpgWڤ^3d+Cd5N: 3 [U=4=VBk0'_oQֆWjګ?-属f* ^db*oƳQX^»e"^ }UHꤘm7m:jmڰޟ|21e[u`aUsQ&qYX;tжqfnd)SiOCܱ4pgts%jʅ|M[{bxhٵl$:Sx]eԹ4Vc>:rMsjPR)GU1n:7*eݦ|%msKd/UCZPTʊ.#_dWοؒX; ӣ/<,mګ@moޥF Ud2]dkC!8۵@I51d&LH$H8/]o#{헪Omw~Wz!~!鄂gL#:[CXB'B ՚*k ?G 8pۺW"zdd-mH]DSwJ}2}=Wg(0GyLղRڮWmw :맸)!p {Zc{ݛ O+ ^dk]I K5ΐ,&-d@EܙυK%C^찳.XbU/U>t(ȉxPb  &h,vbTfiɞUVIDuHKNqavDH%1f7}nߕVo&eiP`^%Ddא687%_)) 6KI@Y"EUII kaĠYn +%)IfT 0ɷO7oi+906{^cyf#!e#E6ITT Q kwu.u^B֠ IjQh@G**.6ltH0 0 @0˚myywݻ;W]COj8Zutԑ7@#B,rky)1{ kk/YAi3&t;Ӻ*Çӣр0A!9orwFL5vQaA+)nlPwLcSz&M8r;}i KƅZKQtݎWF/QHL`}+l!6#QdII8 LH,H0 -fUҀDզ1#(0IRh -pXa"2 " BbbqiS(XC0bq. @:v,_iASfsm-*@DA2(d} ~]vrT-4@y%f]fڔ6|h(85"L,B2KZ+o ӂ66˃г)f-:ygFQ C^}|3_~Fxep8z`5`cN9f\+:Yrb}z镧NizcTn;܂pYjUύ785}[mXEW"Zs>zzՙJg'WKʟSFE}T|J+u3 $0 7& P!%gmW.1f^c;*<.NReā#*Jtsg:6h\Us?ru2ҹvORh@#Ym6Np}^*/7u'<By'ZM &US6Ў*m; W=zZ~GtzNg}/b_l"UX5wX yC29 YDArB~-9\?vzNh 8-Z=m488YFT7>/ڹn.Û,\|2é:uFzjr>SwuSn۹J܎6,5kT+k.]b?:]LzGysf&!I@ `NWoƢ}H-4Uro+s?/o\`9ZA1o8o@a~?;[?ܞxU)24T;(@aJB60V@lҮ -O=ٯ1鷰V۝iĵ^vx)ma>V^El/LNo{ S ߻ܶ4UG}! [Nxr`bqE6HOUvp8Wb\Z0g#)Bh'j0)%=͵߼>Q}`|Iȉ[g1fqL:cfjv}/i%gI|A +`GE`R`pDʚM𡶫4>=\[m,]d(Ɲ\s;rg1wi-ں[ Q>qyW/nQ2J:ZE;X_۟R?j|Ϡ|ߏ2ZzUuW~%O~g8D -@(_ x-%(e*ϸ(bsPg)SϦl5AEʒS-hPkڜ* `/M<4PCmAK:+ᬒOnOi!SK&KS DLBP( iEc&[ CB1`d=Gs]SzkhߞQb-B>ha3i`6P/$ԝMa<X" ZCxMW`l}>sνeg6&7kĦV[+4 C)1%I@3O=]^ςspu43Id\Jh'U*:7S{gA`UVd] in3L <_lǜ<$!Ŝ2sV" qJ=YN.w D ϼ8+z~҉^c @RoUM+gzx*#fޅma 8@.pȉ"@P` H2ZPDD 0P:m{@Wa ) y`)nNn[/mM5Sre-'FZBC>e4wRիxP86E#@ш;/Y-5i:`]Pwk̈NX[=|<&? "vPE,d1hfb,k26a6L_5ϖI2?f39Z! ex={oW_y7i_;側 i/5HHBpAAhVLe"DMiE87EHPB' g8Q`f"H( /a߃{O~̻1}V=0`?_}'x@֝`Đ$$$f3e!&bXьc 1LBbEbU@&b\ !@h5)y//y,e R$ N$V,GwX HՃvW7.o[BX+wAzE[V Iiaէ*x7~R{* ff{|ڬELU<?/8J}K8OJ4zn@ҪpJ`NpaIyT(Jo,Mt]Ǖo5*z߭DcgY 3c@sǸBJ ڠedCE"$Jm|?;U˔eGFetxG<> =˅劦YYG{I-(*p&b fB0L] oN6Zrk>}347TC'?a rmz+nķ1^2{!f00I6Ybr0=E_2a VA+ *jEi r&)ְ*XELIJ k[<?FkT;*M0:BWnu]VXݵ-vjUS'm$uV<^`@CMU ,B(j٬] r:y|.dȁNvQ(,Q RuuShh;,xn~w[ͩwA6K,FVu=\a!\8E``zץQN![7nnNw3J EUe5ْK̟+ؚ;犿$fz_naEy?O:?SLEܽp55Ö{p"'#I#lr?3OJ 1?jn\\H?t0Vۧ̃s?4 2*2~ϵ?^gH:%)P-YKuW!h4, )*Ɲ#7@E HQ7/s4Nf7\,ziIH@":$Iҥ#Q]դOO#cw:ao64ˀ'Ճ̡klۢR7BDD8N:3bm,asZFt,Zg^ΝkUm_-vO"8`zUG<σV2t_8\ nNHC5@)tՄ:ȕJP6˕1տcT؏&zQdj -4!m~S'z&Y]|+2PQ-nRij'/7Db}eY8oCB-,t0{Il֭}5>L -Lpeh˾CgZM+[0cz$6z8><[{7%*e,^@!d耥T JYu %$ &$v 0Y"4_Vհ=vPT p Mh \,egW>3%K8H#}9[hkXmkrEb<6ʲUd1,=>q@ *?&$P/|Hc,Gc{ kg{O'y1|ҐjWka]Gz]YxII8w5- Ʀ,4%5*Rp Kkٺ=ba+;=-rf;3dH54?A"0~2T'-: n܈\L~F)GaX+Nz@7$z!NWg!=:s?.d<碏i!A:M=zMolr;e$4Mˋ/`.Š[U+ қvNKU]$P Nϫ;9tV;w"w8zaD&gdAQ8o EA 8'4G=&2\ {m TCY\O oz }qfq?aWY%aM.-$`aiK ag}.~Ã2I3؏.o gXֺi͋l O|Xo )544:ֺlˇj߯r _#>ǰر]z+*^ުTbc\T@&Z *XHgDs)*$~v )@ޯ+N.mX\ 8@6FfajGڴI4. # &g s~,ި)x|~J{]@8A*lic/4Yf ≮Ѽ,}z1h2JM?LɽMaU88*9ʀc[Rt>׌a ;pFEi"g T,i# ^l<y5F.to* MzČb_X`/6QqӴD̥U{.AWU/Nfᠨeh5ao8$nlJ.}P0]H%pe$ܤR@@ %+Y27f d2FX5^(:mL'^/:|;ΟT* (HIRۂP˛K٥zvQ,m׽]黷B_z{zv\-ݍUuֹooM׻ty;w{ /nvq 0W7T ̫n/X/v >*C+F4^%j~qè'Fx|zwn띷6Ichvb@lOP'@ @tL$3aDcֹ7ڠy:]d U. *DKzAOm5l-[SB8'1ZF}OaYd༟ipw*Q-VeuAgGN| 3߶c[QyݯEŸwye<}cּn4a4#DX+S1dKVb ŊդI.TjMD *DBLav+xDEW0b'ty͒giMM>^= 0N\­N܉Lڊhc YT'nDq )K).ChǫNZ^^?pGرU!mgnlN7bP^i8=UR,j 3(!Z- S#x׉!B1a6eg>7N(#vU1n=:8#F9oǰ{͑x{!w ۣjА"{Wjits78{sL#Zt~◢wGHcnȕWkBXdi[~?U_ wIk卤b)v u"ֵ".׃BEbO019HjԜ%_gI4ImVk~VkzD}FhH!W"8Cݙhx2?eYqBܧ3~\4|~p{QQ9+S*ǜӦ &1w ̄8r7ܱZKg;<[1@ .WԆ/10vSfe08$ʼ_h6鉆\fV( 𵕇 4\/L)ͧH, .}hL3uㄝ"\ԥƪ5 Ԡ3OԹ]Q-B@E`@> $" PQDSw{ÁKmۜ\k|O|ћ$*B@ۘ[^gH3< %"/?)$P"Z"%QcRgA@32K@hgEd̔ 9X9+;Xi/Nv5+:dHR*a=2 ׸Q~>:v-NUMNHJ`H :tlP  ;BÁ?QaL><~#7Asq=7wysoVa"鈒 "F5U\Kzju@ zlVL~4Pr9j+qx6aف{C)yrE‘O r){dX}y]X*$ @( ڑIR롭 xr[+FJħE1 q_s4iQZ9i|S*ؽIN |F=OSFyGa"^9^Tc߁q#\)`y)sp\ltΤsi<M´]_P,x A A?s'^s}t1h:v`##h^6,]!W>[WMl=p,@`"rhz$gaXLBBE,#`TFAX9(3c(a$V, eb1cs]x/²ļo)1slfqHk9@qyB1wt7Mh S3<Ԯy %tWly$CmFhda+$Dϕ_qjgA9_Ӭ22kEǟu”"^zx s=޵<"=zLXE fQnRsW1VPQQibo~c)C : v(.[1I 0[e!3Doi*QNdЬ!0f{hD-v <].~os]7z4Oj(Q5^ eJ> ( v1iH&3 G*ܕORrtR';h1ދy+JOUɳu(>kǴ}6J??.=XE!o8Ă4p3 >Ɓ: ) m-c/]B͍g]jTPcAw?]R֩,AeꤻK&,K3S P%fI3'Lsd̘)V q 2" 0Y( N #e*yeE~󁹷%A bĔ }6Z.--]0VEHg$C8)/ryS 'Utj(RjPT.IJRZ?6I>tsa@h=nH.:*D`T03L^㌽>ڮ*v=|NKOofD\4NDܲ?QR╿{>}=kko]EovoΖ#6SȠZg4qg쥴`1Y~J"A'HuƋJGi%gf$a|s-+fXx6b !jT1 $Aa!:F >¢-a\je'`x9aDF9iɽH0n- XXtł!%_hc@A%, *E+J6׫A U %vkb͛P(gY'|eu .ZfJv޵VEv,z+n޽&JJdI8gYWpՏb֘ߣ ,|nɬ+ʏH?'w :L8%[MrIa(gP/ՅƈI*#)? `WJzd@L@ 1uƿ3MZ](kΗnߝaP۴=j[,Bv/]ӷ ~[VJQ!R6H& tgeXM학rh8IvQ5*9_ү&*Km(#u(iM|.B d[Ȍ/ϨDUMIl\a*Gz2FʒBNDJfteABYxՍvRH(^htrGuAyKwW8 ?NJ۰CTE\n,J O6lR~q":6\%?rS:5'!^3+7,%lJ%X9>2ٱ2Xt`yUJq\L|FfTr4%( \&hSݙ{%ew_64%"8tlxw|VLKYu6oCҡ" SR̋#+y3X5:%;JF$cSKfe91\N4fkAa}2;a٘ pZ 4B OBgd@|[E)z[p1/ iVNZn6u|+]^hKQ 4B/EaR&جLtU2CC05 SccK`Zy# ۨ#/̾ĮU:q1 yy9p)=^sP.TԱ)i'8*2B9+fΝ{UW[PT4ޮ͠k\`bp4?G>O7ѽ:)RGg4,/մf/l3RleӴɖ=GS7)f5 &_c-ґ969=Wy,Xg8}o~Em峂uZ!0c;cq=zjUtX&4 dk ɷ2zCC}bS-td;ŮzkԎ ^mQ o6YxآU_Fcnt-g ia Ʌ$D ^>i3+T$uT2W%T?6pSYȨ9 8]/A!'w~fV", j$˳B g{[l`g^)KiZhд19d0[YFvNISH1F(&$vHһF sy;{d( Y ey޻Q65EBe J)UTtBH' G<.$EyUcT.> !0As@((<\dӓo Գ`NSQ,1fGicb_IEWLS%G{?}v^7OXiv'޸6C&Oc`8e0d4lQKqTbmk6|=%lhfz34g[03t9w`0Xa]d^l40@HopfL>`f뮟iq 0jwG{_\Rم0#74τzYvMJ_l޿Jm/7l{=8ssQ=>0:2FNeVɁTp (fT<$Gm&NBOF"#='Ajn#H.g+VsZ;Ѭin]-5/ܙ 1EY0*2ہ4"]1mb_P;Ho +#$9-T#N~J3O]\ө##.@^ouH{i  3n-UJBhRe=f̟Nq?q@>W_8?Ӽ\f!T$# \4^'O]m4):J(g:/m>3H}|}?c.̶J6}qE A:N>a7؋#Tq-ODs\@&i`zgX,##^u[- Zvv~`T~& }{I>ÀH$I2`ZH`[PHOc)z_J/wCV^RP$ ?W_`LOUyufRb(K2ήm` *Y ah{ aKܩec>)۪BfcWq!输w|1jT^ǘ}9.UvpQ}vT'"Rxpyy*H؟q5H.߷|))PdM<1VӮ #NU*56n=!*^R0T<(z&0E7nS Df˜ ƽR/HiSq88юs}\ή@/.-d,PGr+P͡c[Ogx6 u[ny{XQ}or4?߬ۛ}UyP&!/HWwGx':\ӼF98 :QmQ Vuo5f7ICv`Mo!} <_?.~pqW%Bބ L6=A͡ZwRr!BS!O? ~9D%B|moב@c%L2$rZ*0>~:ZgvklKc3yk<8q}8ߍ"UXz2ZDԙBdW \z:li C!Zٞґ%rM|"1E@(GCn(8N\9(/=M=ίi[9Y$Uf1EC;:3qR裚\BuMrr{s|9'3I9+j~sB="+򖓧vH2ۜs=jCL+מQim=n'N*glt#Fntfֳ=O02CU rE dYHVGw?~l;q^NV4)Q}4` سFo`0>%w7OTڥY OO8աzC^Q3ꛓu?9 jyn)u"dqwyk.;;KVDG,icLg~E> CB@[. ,Y-Y :f}fk>!,_@w ! F`D C0$3ǕN)BtZ CDۀx@A.\0C0:-F|Xq&YZCM$!ZfW'%QkLFm{$@ Xy ~C-RoLTA숕n{5oh;'dQBH1 %fdI%)'()l ɵ{ܷ6#y\: ׫V]3?3ǭupS5"`RPvãRNqWh&'jJH0~Z/Ww_5ԍ5Bh?_i鿿N9'Ⲧ(ҡLl)H @I!ԄB ;7I4mjE0Edf&C; oc`C -;C!bM]ζj\%1M0WbA1)3I)A]BBK=^h޽+O]Id1^soL 0e3@2|*ouQ:AP.Ba)3B$K2bPoSSfx@>_>+D(L!s ο v~}927hs=]/Y1 W1NrH跜х(^lme1}4I*~s A K}> %#߲O?C>ts*v x|*cu=/teǖ/ɍ3f9%gkUuQVN=q{0)`\5)j~jIwPSUa@WjT "DDB̵HW(Pvۼ0S}p:*0aKX1-'W~<ﹾho[?l 8&8FrZs^#:;$ &UմrR_TMU}v6bg9g??_i-zŽDR~^O-]:^YJC;o/>\^αD"=KR3.zD mjp[.s g58\ Lcd/vKM&y3{X^y.'NG;AJW )kYRD%Ia}Jv%,U\sPrF\ǯ*kcZ'%ڥ(&䖣5K{hc"?=8aI|oopю8X*0+dk/М?f\ŋzDx YοQڪ2̚*ސ%z<֏?>Y٬Jw{˺)BS2ԡtup^Z֤E_!-0亞G 1noIUDml%n_`K{#һlEݥBU)Wcn ,ӧ=}j|1e~f~7Y|F_]@u,ܘ@0M/Yv '@nيg1"ɓTi٬؇Ov-:5,jC x]Š"!O ^dRG|jSCT,GqI<l[4w`_L?~9X[ʩ-G>aa0E!z *(2/PnTQp%`68@Fϴ.- y?q'ķ@0AlѬ ڂz;i !/&)$_&L'fb)C1#u塽79<2l׼7I)l )nm4%,Z|*Q hbLAPjF:|ZGn} 7d(  8B@q3#(&s 2FOĖ~EVZUO5jymδTǵ_,ʬB"O8GϪE{vPYVɰ֤k/vF@vpy봴t:&[ HH!XxrN2 i<9LlU̳{ i^s%Dtz'%;gtjƮ+t"ܢ r3v==$eL=0qt:^Y -_ EPDT]yݽ>ۙox1hTH66 ˔,3\sN.nRv 0 Aecr~oǂy_𣀯f- $|Ȩi7.?BXA y;7go`rL(y+j9!""@ :ё.X)Veg6-gxYuoK·pU@3ud^S/ p,Ysu'Wr34J=?Fr>:s->zRqoQ GuH$ #̳URhbK& 5zEsW'SІJK,M(H I ?A;qsH% W@]͙,[/mʫV\`d_RXZ#IAi![P?0ijo{Go|fUe1 h%:TɎHEr<H*P8 6k:ag ,q:V3M#a)`N)HNE=-RdHAw[nmf? ~?޻/d}_|GRl=y6nX|/E~TTe|LgG@lZ=M: + QtК&HhϹjw5 o_+yyxWIq1p%)i?%`7Z[-\P'kgvDQu_?A0igiUR`ҁ3 U44U #x@;M[ybܐ׬ JFSF1T3"Dzn6VG2C9'p=5oD$ap'B؞0"!o_Q/1&bgM.Z7V)rnugmG6 9MO©1@L! ˛pZzh8+Tr$Z)2:lfn$ j<@Jy_G)@}:%,uFD)m.$>Ƌ?$\]xqz(ǘ룐Fzp`̠HAA'=G4m"؈.p`T6uq!w>;QtrV Y]7b̬lx^m(Ndgr~ g9rй˹rl ֨V!L{PF-IY jrbe)-ɕ5$:;+\ '׋?:u~Y6ř_R2@".Q ($\E%:k~bI!UƦ9$ (`9 =קS^viVL.lnq}ok<HD$rC讛jO:*f>CN޺j7HB%)$uɛFZNS,y蝫[/͛PK-D憇SV?C95߲߫ȫS8yɜlhhAMS\>{a1'ۙmg;bn>~ ycȇ:lxϒF)꜑>Cա8w# «Xle"?&(.Ly h"lK~5?;y?q??e 7O=ʍ%2`0 H NZN#]qͥ;~whW{JjuLnKBi50諲ԱQ\]fC]bhQyʶ^ٞCgC>:OS5$B:sj2tSJkj5/ms+);\gF>n]|r糤o{iMs}c/.vX60"dSI߬{ZW ,y^01" b# c^V 7I=%w5'`[YK#."q`c # ĻC:Z^vzYZkJI/TTQca-K4)+!(ȧB20jt[7dz![!@@m@-X΢Wǻe|w,o?X1 *hY*g(sbڹr-("!CNOƿ71; J%qi;KB[~@ۮ u50uwrs}zݭr+ϑz<USl1zUP J}.62}y'{ikk+td$HlF4zؤ-(^_ldWlvSgh5Fl3YQ`joG1_M+N t;=K=h,!J_>/;5-ZlnC7p-nm,バO4[:]ɻC6M;ĺ;7˕ ݊#Zy;7&wuw+}yܧ{ #rh`% 2H`2 B>gHI45-eUYC Y+!S^G jw?'My{-^-w?W4+zl!!N@+Xt+U6*ߕnLhο_KR_rC&{#ysNow貼A/iOu"ըk =^^s۬hdV?-yH\JZHCN)BֺNJ,'+:S.u,iZ}<ɍck>ȳ}˕b #sNOH`b&yzvwlya;d`B?-2rAmHz?u#O{=Szj.nvv=Nμ^[oK5'{ơ?:__|j,͂S11%~/΃ThcrZp"xp8"RْhBEi ͑VoBoT5 @[%ʻ 1C)ti3ΓGsoӲږ* I-Ci=?Q ԇkNTuJ|6+QFm}TRJ8ϨklT58l[01LBwK\2smHلzv0-*չ|m=I ջVw+՗n xFhaid*Vp 1踮íI3{o򶰟/hBkeǸTv{ԃ>^!$非r6F S *w|5Et6,)Dwv1™.HޔX~jhEjN}>(L$Se 4_~{1]߹t?O6uæ@HҐ7452[G]/x+/_zd  @?(C7sTs~;iR02sOh>511y?>ғؠޓ J=5jk?O2ܗ@$3jB _/g‴*~!/Z\n7Yv~1w^fFԛf HHaF7&pUd Bҧ`lj(Vg;,t8=N Kk-F,/\c0ҜVSV˭k剄F-yz5q2Bֻl"/x7xd}/!(lWNBSZn֋3}2]||N9;#АN'!#u ϖ)%x2!2Ѣ^T%F-ZQ)LPY JoҨ{w`<+.i&)ʈo'JH@l!D; 90uAu9g~lxk}M`c+ftE,ldɈ2M 3,b MD0["B1ƶnm5}d$ HJKON;W3q~gڤPٽj>:| Պ𳏢pqIS:i"IJ玽[ǯ[}.[簷pԪZ}4 U=PJKc;/{~ݞOۙwTĔ08I)eSJ!XO2pX]2ŀ$4;,FH34"Suwb~FU+ڇBaU5sWrH JW7.1w/Hpu@p_.^Ǖ!#D3zϬȚghDfHH=cR4u*@To:>>^gӝ[!ĺ$e"*rOăvX}ZcGT8rN@cxu"-m^A&^{15v ۮBpsi# :)(\uR nV]0Or d 'Ni{kQn'uW.~V NA!?ڇ=:Z1ޅ=K@8{ígHidb]Μy}֪\DX2 &yMwN({t*uOdw.$$%`92X ]kE BR"A L/a{9Q/fwܰK }V;>C:_AO,>k088\҃ hOV}d;(Ys38h3hzCQ>*(D@D7n8}i͞Qݾ_ |\k B\`; /i,ui 3(g-P`1#i[ȯe "4Gp9e4lgEnݕVhpwf^ zvAUDZkG-giwUA=gҠDds R"r-䖵Nqȳ"W>,wLdrPM+یKCX/I+P\.X-6< cC:H KeEb:-MϿ9Gl.oV0-;\@'*jwm ulֲ XΌl\)h+^ɽWS+=yKK2g|{ܡf WLZgő{apu g٫NZaL*6zRd2(Pg=^,Svϑmp֠Fx #(J eRuI%1ހ)w8j?@G x7b2Oy R&ک_:iQ *`t&kGv0)f2]I .r`Ø%)\b(9qѢ]5Ƴ ) Ny_S{kɞ„NKܛ_1 s sh6Я8f- F/{m :7[su%c[> /wf%v3 xIbb*K_.|Ş=_}]7{atKtI\c)I;gQFeyIV8Ũ #*cjy!jzҐ"v'gɻ3:c/h0-#@AY{S' (K%BwIw^dU}E?GSp \8dm}Ⱥ B  Tgu sz8FljTl3+,~iE8(ci<af+vpt'.פ޵T8\8f \]: j-&tq+gF]0et! "PҘBg^"4F@{-m,%(Fgb8L +Ȣb+>Yv)MT3l8kDߊhN//"[4NߎڐGh:J7$XuPX `}u!VIv^n kě⛅DV=US |_ %\7]"J4Tcr\Bjclw2.Q_֜sVo.>6T9%KZ"_VޘG=X5[/3̈%+Β&ɼ:}*A[i l8[ wg~S@~奘< YUtȈHN;]xrCj c|FĒɓEd"-8uC99ɺk)z>",]cbÍ6#s{BkfD&,CPY_Ҟ[^꾟ۑ%MV?n:.ucқդ!␕[ wQO1aP͘ e^sqlxJ.\I 9S 97.25} RU8Ud$ZT&Zkf8,qMd6>6Nݍ6J<t杴 t6I#r?1&-H`S_8h8J4QNMza(嘾Գ 1ٸ%OӱxRFlW:wo,n7 Ϭ䵠TQU+qHr$*T*5mH#0r.zitAStVf-. [z`ab#/ $b{۽)Nr#+L;V>jVC^&-U.: (6ye`<' Qm 4GG܍ FY)Oitk^ư^a?ˍuMP2Ygsz-%37Qϟ7J8+!c3h^5.IkX L9f wIYEMj>%>l Eσ@جJ8%jv'50wASIUSgJ :zu2, XPM% nΥg bx")jf;d"[%i=ަu d2<3[46E4ވ3fK~,Y5&3zǫ%$^?\ jhO:>n\yay8"ZZ8},C-0iGNmpCpc6#+3"ybx{Zxvvw!Պ:\Uh[XBrWE{NFhL6-=`T>}cܳ rCMrfҒ.roS`G R/>[:vK+SrQgMJVus}yC Xp KTŋ ir_J?[c&D»#tv; [Y"` ސZ7+\W;>^P E1ٷa B$~ 6"$0o;z1 kR'8b4**wLB]kYu$tO+IWW"L},p85'eXp Rlo c`BOpi[O!Kah؄T˩=̾"? w^sHj.a uzS&mY9ߎQO.ٲA+T|r0Ц3P0%k53E;W'd@̮|ȗ+R/($#ˆ@pe*N9}1S pPeDSʮw3JTm[+wMviX0 D~ ,7KSkU3i+%f&@mwR"k}c_hæDH/LG@1AߒVNۼ+O6HV lGYX! rn\|̛9mUx<,Xo>$m2xiˏzWVŇb jʚ:TܵхۿJe|>O J0s$|z7rٳpGUF"GؖE΂GaA?W,GXQ0hФ!KVw6ߛCz>JEWe/6Vr4i?u84:̅๹ 'Y~MJ\uZ YTk1Uz xfxп@:z#P.%8la-8fypdT g3衿Bf+' &>*ܠ :4VA<_ˮLuch,]OL.g y׭X]οg\m=^پr$KZ#y9.VX^`dV$t<̶ASX ??ZG8Y6ɴӉYs)̞bo2W/3i>+7e6rC.bܢYB$K͍s\.1- zRJÒUٯ^d 3G%CTWG=*RꌵIgk0Zi"Dc8<ʞ*ܾA9݆YoE43 O1r$n6[*Q`<6~М%%:^I3dzAnKw, B65q]Tncsx],wacqw{C/!WbLLr/QV™lV1n[ >e[߹c̿"~ނוb@j) C⮶igOUnrcʠb-l@j`!aac1;W]BZT$J\S7 W޾Iwٖ=8W}"1=D<7t $YEaI7? \Osy=-;g KYݿ n [w#NH=TvVNPt a)ۧRh>F Dѿi4m;*SC<uJz2A\e;=Xγ& ~U 1 x *sh50 ]vYQ8J?XŸ!>uxhxؖ~$S dl% nΥUk_za)ph'1c (rTN\T_L\NHy~12>i5/tuue"G>b %:Z{d5IO=FzwWCs$ `;%~)˜^x;5ۻ0 sL%mE|3%!ws)U [dۉ4mQ֙M;'q@Q^Bp>Ҫy}O(a0AV61wd!qE[RgaժF ߜg=yXɰSx=F`pmJ-i)y '_G6h%)Q[fdB[#X =1K, 䂴Ac*ǚE dm0t_{ё ?!z*dDh9D㦲Nd8BL9q1~;sn<|=&I!䓬`kVaDgGcMW}Q)X|R 53W=&z="~m`ҘYEʜ|`hy(\-X{bHV١.w0F.)X.QLaYl`<_IPkލL(c jeaR -kq\2۝9^1wzHIܕ8.9+QY9s8sͮm W7'Q5 \#>f0;#"ZbxGhAhxؖA&>cֳpq_}Iv-"ʾ+@A J[B7FёUїP;ƅ'hIZ~*A۝ppn# Oh5pmH+J$Ơd! z |8{b#~$hmޥlbb. }}D6sE+,k{P^}I#qgS_rg2JF>QTdWΗKp0Iբ4HhFQKe&lNCH$]n|% 풖bڂgeθ+[ui_,f:+(u-/Ƭ #|Ozn?0p% wgD+B wP虸43[3[Zg‰ß(XkI="f/!b=m |ݢ7EJ",X7 saj[mJlsڭsZmWC- 0WM[XR#ih$`fz4`Rc,bx*?7tməY.x=uAEu%toR\HH'U[ mI;T}gg`,@y5P>5m.Go{cV=q,^m =?ȜhʙL9_c^oĪa7wiI:6zl!&Uh*U)ԁ̚~1:\jɳF+RA.w|SO~ Ev/8#0=Ȋ,FBfr}͕;+.FSv Wa)_tAXr ;-1(ɐe{1uLy+˷3yzǙaVefIOf{_u=u۶g /oel~kg?i$>/K(ò5*!sb@x x b)'$8JB]BV-fm1*Y}~Xk((' a_ X76 6JE>sfǭQ|ipQgZ?"Ļ 4/y|v1=7T^p.%ʪ(mB'Y7xUsvd& >Ji6MZ%T n ne^ }d >Z'mLE RG 7KBnHmܴ0*G|>AߏhD7`FDG![~͎#;'b(\8U3jg?;=o{ i]ˊ)3m/d<2r,/6 E K 3:.wF_XuP#}o\y=Δy%. 7@C90Uݑt\tDG?c3/\![ޮTBo:2{L'5/-P3]UBM4⯉Q]pvWPA%I2L@k(wd_@*/?]fUm\!ЭmFDM >.MuY/'Rz6JOhMFf7(U E9ݷnbe"uѦBuۭD-MG ."C>s&Bf;wu Sxߡ4:#bذ5WNӹMqZLq$ϤS?nX< 'W!LKZt%CŞ@ .?/7m<>O^N,\cSk:h_c>O" nT Ynl`.sqHmF9g7xlLO8vZfڥLwP1|!3EwO!e7#Qb`-Hk,^novOr•'քM02H䞤=;֪cZ{EaTZ!^H`.~΃'b(ݽ#0B5p"Ѡv%S*'R7iD欄+xE~B2-'@듬H׹HdHgN0hd&N;SBsn9FOaj1HH[g[#, m YNbb51FWe[Wd\{\|rP2/vdFytpBۏln"@^~f%| 4=C$܃YO* <#oTSrzbuOVvCj0ܨ'G1iR20*&<hх6Z]x%ml C&J+j^eϵ/lP0tYJ{3ޝ,\Cl|2ndɧ ]f9KOl?lZLiܡhj!d@[>XpSI{?*ENIi_s}.$GۙI+sj ջg ds&.lYڵmK_~ͼn:ez3;J)&Rhߡأj?dB,|IzU>cu b̟f<*_E?):fI)m ˇhA":[ mnspL4uhAv.!tgi$]k# hS]iKFѴ"9 ǰ3J(Cy Y'bg'T-}KߞnOayua(ΎK_~!u3eJl~~}8m/ubO7OiwVgf8/Q :;o&?8X+ؘ\}2_@+ћWeO]*/0ÑhJ!'VvfnpMjjTnBBtm+ܛ]g9R#JoX;bF* =n&t_N0kw=TC8ƒNҘ/wZɑyE(2j8~gɩ>&O~]1Ebe Ʒ/$ K XϮE2!LnEqcvUZK04<,w)B)*xblDZ )(5 aDv'l~h;^wTxO׆B+R<|5hm#f Mc:lN}̎{+y _ .AIxBk4XZZ ʰ/o 5fSot$AD^G+ |N1St\0)H%W6N^WYk@qp~@u<4zT*kp̈́8thzdyC ͇fIܓ'9#V|-9PfhibB JxٽG zSဪm}*Sݙ(Wp+nxo%/ va_5c"4~4Rq޷ha|m9,?*0w$xl]BuOz+!+hcBdߛkt84+:Ԑw%3, "LRJ>5KXj szN4 t׷"ILYI|^,鲙B5n<=oG af./5om8u۵ JvYآ_=~ңv%n^f0iVۄ6l'd-hr[ގnE67>i7`Ѯs)^8JjKۜ k =(U6W 9, >ҝ` 3t\]Wt\y1k D'(0ڏe&qut55S WsKE]QbTʸX wK 9~s@˧UD]h?bݬ-gGSlNm12DXb tM4cB⵭dg+NUg; W+ sgWIGdƘfaZ~kƖO/r YW Q C[m,xbTVqb1{UA72=Τ6Xrن1P/hW@EN a75 -ĸOGo|NW7QTL8A6*ݒ՟) %Mw.f亂 `I&A(M h۝`CCciKݥ&>qS)v)k;OڣƒجLl2{ 7Lh 0. \ {a4OHn?8e_OJQw'kgX(5-kv3̌Ie>o1,hvۚ'O/J|I o(Zv ,jd[_5|l~~'>6v݉W[g v$"s k^rz+zMgw~#>e9aˢ`[x1P]H;*0"i1n感~T/cLqIv::񦍘dQt^qm|A|UyHrWv=Ϟ1xSqM #چbf6IJTSN;,j98nrƅ{bW1dĵ`Jpf"@ {] ]wՎ7sKS+Q4-O~m$R!XJ gs BCBkMyt Al"&CCIиIWyC?! BvX¬mzQ˃ꔄl6kK#GH?Xu:B*̰Y]=$ O}[ c)߸p햎-nq/I"n2.:w#Eዣ͈j,9Ɉhgckc#V3^O Mylф¦-5F3aT/){I0(Ij&o#,}trG u?ʠgtE"eU⪩ JF c " 'յaag?٭x6UDeH\%o lsZCQgt.6XS:C[@q@QqrId\^OCà?e-?quڂM6E¢_@3CS]ܢb4#x5D$3W jOV#MG+rB_KTk o)zW~m5}TR:PYJ@XhR]dtXL8t4}S%cZ(_#&-_YcfęjuV!6 Ο%Wfkp]eItԂQ}>?@Η> .IiT:ȇZ+N͆L,3;?χ0'B-?^>=c.V6/R>HFxṴ7Nnbτ4jH?7脻a'&tnԤ 8T=VTƐˮe iVeHzZx}'z#V޴} 6UA1[/?C=VǒDhE(f6Ǔ6 ;ZʹJ \L2D-.ط>(zz{b{IAWق"1qCG KUjڎ;|^o~ اR@h|f`]!p7Y*_5-;D>r3- zlzD=La=$6/@iAd&5Vix>$ߜD3M_4> 0sEJžu/L2ku&N],i`tdedCAqhI6=+'kxU^cۨL;[;s?//2PiІ-j969$XHl]4~ rxiP~t2Sv%(*{;UqP87IE^oy"u^UԤ/Ӎe8P=bϽ= ݏ%W Lo- Xcj ׯdwX{By]V5Ս~lAIf b 㤖w&K1//؛$6H0w{a^fcƢ_JB& p6? D; vQKbXZAMvhsm#4oFccapw"X)RiV gibqҜ)bĞe|fV|ߝ0ܭ˙O"JW.kрNX1c#su~Wnwi1x(Ntao`vT5teCAxeӳ< YECŸsJL@nV+6C1ֈnx `ƏLݰUp;2&)Qkg9~Ԗ*"Kvy:)3,⫓\,%jnau^۫tBmIKo Dȟ0;O;P~I=K#-6GXwsa;"A H-1 ظa >-BWf]Ro,{ISLY:-SPM[$Nq,S,"&lw S۷<:mjt\ιٓ20R0wTζcx-첪E)f¼x -R2?]2T#h+ E~$RnEH-5&}Ɨzf({ < Ɩ*ZEԄƻad,?fq%!If -ߎGk8= ە;6SG&AxR5;i28( :9'5^?S, Fp."F%)7-ȝQ(DT1pmjp_Kw"^\Zq}1 \^7H.,{1+rBڿi/_,݄WfSME=fH8JO#㲫 LWnHB#'}\PxDӯd@&/G@5&u sYpo &a}\[.T# Lբ&E| dlg]LMڧU1Q6ʆp֍\s7iq y Mu 2Æ!Yfl}QPx&IpZZ݁Kvtvnw" ,>諜ڻ)VAWٴɕb_{Lɻ5;CqprANh_kV vL v MюV!QR S=+272(YpǙ~9=kXx\6-PD<ќ:MRGy)&<f  /\*JTam!iSʙ9 *"bgnmN>[qٯ^P8"Jɥ\on r)' շƫo}2k(pN<kxp@g>X2+"=mVr?L22w8q>(kO}ii-1\a^u3#=v?ҝ%:'i,)As2%%-9m6ڡJ= \-AJS G*X(f:' w9YC*Q֝3n - A/+-v1aL2/.Cxk3Q\= LvE+~FL 2ūV4Wbg[T ~fFkUtMJ*w3; XƉH ch1WHJ:B7**?\|Q&UhY.2" *[d3YҤ!@9{byFjc{+H2Fx}~*&>+]Tw;8mU+珰}9an VUy@! o:& %Y2s1ѧ6]c;GAJ錭 t'gyt2DI">Cw==x9S,8|Y 1vco<ڲMi@? RKb6)h/9 ݛbEm8ڵ^1.RCL:.b lE־3 Վ/Э2㿪[׃R$$qԃy]94%sjeTLɝTC!rryΛ-\rB ;h85*Ĭ^&65m ts^nԧF?AOj@x<f7<:"1/7u8EOɒYB&6l$;LԀҷQ1>EH 4 \-i:L(0-gYy)$+4&&i N)C cC: AJh8MHRv5㫠"U| Ų(f{R Bå=xS䋇HՃ{Wp{!xB"ͲTF$iZ&Ys 5l`D_ґ77mO 3]םo$!T ̮hj#WsKo~#fo+u-~`]%bװMf4bCZܳve&,1I@e}衉اW3 u7>;ߐgd)}/)A$3% v{M p"^Nft8\\yG+k 4ݓRȗr-oWq2G '95PvU!#6zuu%?9#%+C:Aw`-`Ȯ 2jNRI:$t *>GO˗(?eh+f{zRxC+-n]iRd{ό\ %Zo~E3Sy뼓k"j3RI\rުKP|d";ߦP~.%l)Ž*C8K!NP`Xcl𢡄qk6 ]z:`0ޠk(ZG_ G;9|3c-MabRaJy&i a eC}k&Z[0Htgme*k1Dؿbhpj%=3 >d,"l-vιAä&bI&0;׆t:+[p;/H_1θ)@OHVo)bv =VI@cI!6DJtl-Ì#$$Y as0 U=I'+ $<QWߵid9p\:\4a3$<3\1ag脏7CH V;z8 'C _-bv/ܢ91kGTBGK"]mߒb4 -yJޑ՟7ȇgȍnO!ѼFGGNe ?DDž'Di$!0'~)O U.K-7 f4}Wxmf?˾yXJwS5vDEϻ("MN~D{X mBZ R%@!.+!XM'(TO!2:KvމfH*Hk=!i>hL([WC i4./K^7A},Dא^ܥ۟8nɑjG yv5O˄g'c j=o}7 1Y~904exwFg380\\c(;M)8h,}8—M&d0]&^hiʣ^8WN)>HVZˆ, ۠*ivxN]-HUSp, 3 ~ 5T.}BJdR虱& yC葦~ƞ=O,ʊklO1BNx;ޱeTq _e ֧-n:aLiV0|V@RW2[^njb( l`B7'@vN~Ռ6܇,;Vݢv^X\LkV}#i$.v"Ů &c ʜuFĢG.#{#$c)Uq.)DeԻ0{g46nGזCw+2N@zhM61KhPt_h頞6<]m:5-aҟ5EΒ韏obU"a|cI }eC09(H&G,OK.Wo{K]ZFh^_\sthPB̖O\a'959C]8.oOWf ,5; ݪ?i{3f.$Q *F ~&Q tZd7a~?i#dNkߩ-$sW)ɥD H8U7^$IerMP]' Ma,}1B;t4* <|{k 㦽FhŗXl )P*+'cz wXKFʟcΜ>ApvvJp1L;Hil l8Ũ(<&4w$(l!]~BĢ|f,s}TmN\=@&V9SPa|dR dKe2ƥ^J**pw6UzJ3{qQT4&Iu;Yr z'KVA2M  @ncזAS3{{GF6[X̋aj+c3 |:\ 3(8͠r8^P Ր+Ä:>߂ď,өʼaK;C ]s|UJ吜,_qkG,ÎȲ+vz[twr/`R?Bx$kF#nɴANl30%VըrEz:j)ſsUHn*Mńb)H]2^ixlBu^68۬ 1 GwysuK¸ZN=7@.Zha+A+|R._i\ԨmƾV9v.ڹ"^BYK+/kFE2xv* z;Â~PN.H|.vCxۊ.!3'4BDH8)oUl`J+A316az~mqpɰ\3Q`c߀UD J:QD )s fCgW;Bl$Ve/eC4$z¯j8zi|4@"v 3a "G k)dX*UYL&:K  aq_T[T͗t7~\u=34e)@$KRoRqκjmKTÒ-:ec~KiT6ս5nN EXX"y,{#.ns-/ 炷6xTY@ f(&oվhH>r^Nr9k gOu'q%8=RӇV_&r% G/@.vӰ!Seֵ*WE@;`gk~˅`FNl0%Eɐ <ܩ++T>8 .ʿf[e%k !߼[WyN\M ;YWS[Ot'cQ5`FA+_hwCfb]ɬT_>vRģPMzFNz]JvIon\ յs 嘈N=Ŏ$u,[peHٝ}|sĮpDB_u+ ?0 ah8| ػ顄[# ƈ,!<rؼNBwI,Ռ^4:f󃖌$k#x/Ƒ;_BI5OOݳn.;Eskb(2/l5oe]acUh5bˁzY2sEگ}ComD3=R]`Z@#rB4zT3S/UKRw3rl)*j[ɶK-DF.!c8gA#b#-uQq27d;MU'4hJl]kHE1)o'6K겏Ƕ䉙oB)XIK sduz[FpZ}屽ȿrkĂW(˴G}91djWO;储K00xrɋ i]Qx\םB0٦Y|HʓqnY vB y=զNEW|tՈVx6?3\9EpP:hmشe ,im&w J,1Ҫ@^E̪KQa %͎0sTS1Y\\@6R<Jd^4j 9I paDJ'~FRf9T{*S) GEECh}ZĒ&΍;pB0e疿,OjKFe"!룏c6Ƅe-[I桡et\ `#l%G,]][GkWxd<[Žh d I")'?򓠋a7-65tи"&J̜#K{NщiOW#NłIׅ+ku t7ndOƅr#ӠNJ,#iGN)V]@C-G." WMdHJX'@VMzģ7DǢǴ pi~؉Z xn= dy쐇z (7jk:QGUSfd /fOo1Aވ8b^]?cn(`7\ r?|QvORs9dNfe X<&"{@Kʣf%_A;2SE#}dIj!c0ӹ썻3hPaoiݝFKy^9 ¦H%_rH 53 bՔN,)ԁ $Uh[Fz |uw!{[1Pi c-/^@3MCAzJRtIWelM(S[v5ăhV1w9080+~PF 2GTaGz%P3£hK'CTC(S"} eͷ` MQş-7]Jdn[/8bRlyQA'D|0ln9WS-jCb%$lQשqS/E:siWq'5|!r)I2uorTtdqKK-a' miA|2Q :CϚŻZȌܴ(pMD)~üjICǶwݯbzGmwv <\/4+ B/03_܊-6|s{pɻ_LP+զC)4}?T~ ;1kiYg}CO }Xrs'6:hl5 85 +4Y H~F؟ s~Tek+p~QG+)sL#Y;ΥW<䐙, aHsQݩ{K4T0)hhyx34[T#t^y- \8Pb'R {RWdٜa Ƭ^z~BL\~5(aكQU=~| M_uKr0Nbvö]JM닌MN"Jv&e] X/,vn^?M\-)}75efmK޸mMk^XLYGF0;_SX3 knq[F"NĦ5\[C^V;Nȝe$nO=-mY@=''~aW Wܑb^|k& c+̔lD>;# i95BWYI&D[\ףO_F>6Q䆾TE >9r:M( Pu0=qbV#" [ S}j7E&p%Ml?_I("ʕݷ|-STYldo9 T%Z6vJ45 &66c<!ocSRTխדص3b `^?[m^;8daЇrx, [tߔ, 턦Y<4mm̅Up"ξ?Ц(o)!v$k[ /~\#9vefwTEVbr^:C6>~@QyZeVp(CI?#!B4@fb >4Oi7 -ʋH͘:-\ǺjЈRürdw7׺ƒ% :0~$<ϧ .|q[BMQLh(ςIR3/ ^TƆ_X~=7N>msṈޫ׳+US/e#xHm/9b%&ͦQt?=Ȏ.ufa tmn# g1yaEY - S%}-6*TM󒪨  ~T(r'u`0}ך#ʴXbtAo>*i?}~ÌD)hlK]7rNMa#P^{\碼)"-qْ\)L8!TQ@!z8Hri/63VLa}z 7G,ťʻz_&m/ABhC)x %T#LPGy_CB]aBPkuv.xE%6-)f?j⧰@~dsA_jl[0,_oLtEKi둌@w$z$b~<~h0R G'OG8QFH-ǠÜiڌX5ɦOzky84)*|gyIE^'cRwn.r8.ɠ.&o@ ^]IvRuQ؎l !C'=qׄMo_o<Mּ  i`.% `BrOwdxm[f`$$[҆f tq3d {t>-qy NY+-{o%(ɭMICoV eLc& (Gka(}O1LataX,WM;/C8T ʭ8.݊P).1βyiYoNQhJP T5o[ӐdnW`e^3}AH,ȴ?= /.vz^.&/]^Us*>ĺڍ+ȣ fڳ'*maSq 4u+!vʢpbyVa/qz˝Fn{ƒQ7_A@9 ıp@ !9r$J"ΘxA(xUW#f~bLN9wtuUg + AtHILeq-s?L8黻&F(9/R;e4tc\u[CQc>Rk]cTƕ~\|O{ TF>=$\%G/ 6'0*3&L02lr)@ Ba}"Im2J9 -PK`zaKV_Kҿ`E` (^IT>H{f(n-OEgBZ!yޠT:Rj\^A>w2 6TG<U 7ZmWqugxN8gO^aεu `['ւf΀;S*Ց@8k.$w^R(Ny _mSak#)n+!P1 *_f0&NXb1kNU$by3EC׾hJH B#-?p<(ԍAy9w#x5y՞ʣt? ӆ.yJn4Hłܫ2[ E9#]ϥ缞CN* nUȂF@p#2\ejD$1PHvDC֡a)!KDCGRa=EGe}~icT>)E Kӫ.x\cȕ=+tЅ)lqtuV׽Xn>C C`MZ*A(Vρd3 N#9vhM{W0jYeS<{:u_Kdl~r'@ Z4j@u[8f ,m:pE:c fЊ`J-%2FPI $5](4BPT\'d+z\=ohn]w!eu[XݗԤ]?/tǒ5FHnl45ێV/`Ung14p|2O;I'^?#x|.Q˭_ bw?XC}z#5ګwp.X{C&,Q3@$$>FcΘ{_a־~Ks%Qɜ(Zj;'JWϭn:`;[ղ .b zSq50b;->$V9+Mɘ|=Ωh-}U,t O83Yw/&\u,&ZKZl<5V7( jF9K*:; >I^Lo lQ ɟZgY^dj(kD+ 8W|>~YDjZ$FZt1P)3y j'Ay6x:j{F)֙#+npHZ6yWjd G'V"J3сB5DD`*iyf>zC'S_ a ?fPyцƒ2k6Jqex*]9LՓ2i. cb\smW@h)q6&Z!?dPP{tKD~虯Auֆ:ySm<_t{ S<0X$dAƗ9( SԐ.1K6\JtSYl9b$2MJ&Ύ ?n'Πvο2{N7JPZGJxv\ӧ # yYiJROV^Yr|Joy9HGYgG=FW@0D9U>2,Nm6\n"BvRAcP$m}'ix%3`ʍ;+j&ř*ԫ,W ,1lRafUU՜ƕ&u@v?|>dz} .gob_#!cEw2asBS\U O#?XVj(+.Fi `c־gskiu_@ҳzu];^R|[_e ` V`Qb"4Hki,KCih:jW?GRH9(M8aQRC5B \C8FohG+ bIgS!C{U2pHlֵt2=:]ɢIf@#,XB#+*#C JEx'{..v3UjvLdeh}+x{㱂AQdzީչ条/ fӽ*8Ě{wGb$/ᠴKCCTd\ /ȧQJ&a:0~kt^9R b>-K"ˎD#-3 (C*pC KK2`hM. MIV_sn0q,4iDDJeJ,Iю"!, O?a.V^҅8§s91~ByM#t,9!_}zʈD8խꈆzQx O*qĪK`ǯ|ly寉$ͺsIL^ (AWt1FX|0|3|lj}WKڕbRd~]A2?}zWB~FZ*J><i2FFOh喒4я\Ft92> M3K:koP]ӄ\zEZBza<ܒgCJ,'Dԅ,+LpNTNUb!U3iA`Qͥ[vڸ*_RrS.mIw^G#1gN(VZ^8jݖ:Z7GtdNwɓS+d3~ 賴}ݼKv4މdJ?1$y<P)z*5)R(u)Sn u l?'Mq ku{$lAX|cz99.y%ҨI P.&c 3eGJ)Ͷg 6R`c ,.in8/y*l{w CTSeBhG:5 +΄xl ~zFwq3];"Ue}NM0&Z1,MkMqĘTiJ`Yo^`Uϭ#6anz%=: R&Xq:_.4-UhP\)3Py$9@( usP)|'_+._xbʎ D7UUnr\!z?~zekN^P󗘀5N8j;6]Y٨'(sM~ 2wʕi9:7G*R$8 {᏿8 nbtsB|RbGv' _.s#@W{ .W2cݔa4BB}m TxNFILk%j{CB%k#%>R.iLT.6+ҩ- o oI'M!3@0RwCAd`i~4rOr}c,ϴd3ǗjvtIX@+ȩQ8;7_[WSۨ2#[qA̱j۲]W~Ds'KZ)@V)B[6ViG6`Ӱ raRee&em\\afŶJS9:'SAM֭'5d+ )2aR64qkYs /h:^|G ?" vWb/#D]@ 6~ "?ؿ!`Ѽފ$gwC8#r=Ia?9A3tԷMqb-d"dI Z,ؙ ރ@8B$c_7P894E̵\w8Qt${hne120D? UE9v%]\zp(@X(r$)jLR^$Uݵ~WVġҮdGj=6℠ӚO $CnZiruZZg[jJ7B3>5Q{Lbo㳌@B E+L8jýg'/b+\gLlUI%h휴ޒ͒-J~CZ `Kɭ8f6~8/|tiҏVn0,;ƣ9;MM/aqk(f,%Tڧ<($(t݅lmo5RgPUUlxԃ")w%7Noôy]](jI!F]],8o-G#a*gLx`e>u`?q)r΋n)`o#*T=uUy'pt4w7/>A3Is~/GoC/VH".c^[ӝ{.ΰ7 i1Fe>ߍû̷B|d %0K#.GX'sYAW1!QXTmk[uK4+F6-s-KO[b/ۨ "%Ð_hmQKv{Fp‹KRIٵc?JvhT"}ײTL8Q3G_by>S4EZcl [rIe0ˆb$=KT4K#mPFPPv:b` 6jf5F{&E9G76T>Ⴔ:Y%byB,A^d`甽ٲn`).$ w7 崩dJ.(wӸj=vmAHt%S O*n39fa^x:mO-6Xv%ﮥ#skLP鉰Q_8NDv YyCJ7K^v^e5 /yMTJpCqwF]G%t|dI+ ="Hy s SP1jbҔ3X8[ۺY+.ȏegb!|'p;scs g> U++o=Y蹯yO$cn$#[XiTX8SEPSㅣd+V WLӪ%7BӳyE2}'->̩$2ζNQ|q[D~@M{{ف 2Aߓ?A0drkunU!Uz*ўeL!EH5tp/XPW*N\y԰H§_S΄sTڐd&b.d>?.$9Z-2N TlCk_sp3ok7xmta2?.ka<ϔ=֯fA$ڏœν"[2w#OmFa ɛNЊ &;M  Q6iXEx:i*1KQóB%$0a6 \  K(85AH 'ѐ9kFRqYfU~$' ]u~b CrLd:L o4'Gn7Zّ-v=XImopmU@a<,Eh SM%:J69Gle&Rެt֡TbuqkߍG@$QJn>y\5`:v=7<}dV~؇b."l/Wߋ˦?n`Qn-F[uT_z-Yj0Ty˾[2J [pp0:G?iv"}~i qw٘.LSr_^SQ]sZz* A31%昲Q)g-;'HCyR =( 41BkXTVOƀM~m)T}vxaCM zutӔ|Q_הU|-@Wpm?OA^$:AS5J@%ZFZ?!ːXͲV%jL(IG'TΎ0皙5Sc$g@Rڎ*V}<L~׋}Qh7xklN RH[GZn%ЕEҖSy̾W(85]Q?=VAmCjQT 0}]rޙ+М}"YbqCZAyBda yi1i`)GoH#>8ոѷpAtCY N]|ھsnR FSGiA(M]~]`~p0u˾HȽvBW$~!wPkɌ9 .5K:tЈ ٥68>n.] /eWkp[ނpJ]`#Pe8a=Q$LLMJfa Ia ]eO;X<5 d흸h²`ǏlqSo%Ɏ)!NVxSGK_H,%=CӘ%T3I0j[FrRLiUܞ6%h%Za*MC*)#֊}]||H2d+yEkb#Hn"@~VydIIl7w"aP^TgVw>†S_rxµIouhͣF5ê{O銀2MHJ+6|׺7]) \*Mz z"xTj.,YRDUHHSADB`ī0{o+$Nnܟ*X4ٯ`KcMeigzLL=fFxjvkgEBJAy1t[x'i?76## DTegOmI8s_{:X5|A/5M+r(2S5/䊂/?3@kGiU6F!kT +l%av)- uuEklb^ϺEm/E/é7LRAic̮-ny*_?;On Dso)`xGW1)<>zatCCM J3N6sR])t+&ڂȻagrETg/ƛU\:jް5#Z(Wh9*Fgǥگ D`Ðy)Dupmwr49w.y}p&'b:0٣#ټ?u(bA+9AGat?ɻ'c_«\ꧡħKXr υ@vrD%|&)G)OV urzCbs2x9]pFeпcdC&R`i^<&+Pkn襠Hcf2ysfs[j4 qw ]d#^cϥ\p.cȵ5S~]ۇ]gJ*$}oz${+ιk _hOSTZZ6fESԊ RZWW[kPtǩֲ0Y"Op ͋7dklTmʐa ѷ :Υw7ڣwrhtJfeVvl1kZ,OGhSt\̑W<#8 z\5fm%zGl%(FNQlU{׋7: Z)t^kI/Lq֜ )͋ xrwREfʇ+CI^\+_yJ *%ѷfLJdЖ|E~E)Vm{_]*1vStŇh>>F+;#GJ1X%mSz5iNXO҅t]\X9m\gEnn>xI?) ˵zWUK_mj0Iw|1m梂J ۊp&j'yVD^{&]V3a*^Zd<]:bw^UܣE+ع5WL1u? [k΁%]n|2hFIZi_NW2WciyCf=+\gcl3vWʰC3 ,9xt,8>pM82IJp|r=}KɎI5ޕw-qlAW=+?CY KT$NzCKo6ueJ@@>7cWKtQZvhgGB,NcOB4b-?$K{T4-~vpŌ}btBќ w#]35G#%U4s9?BD)4ViBGYMҪ䛉b\xޜ/S+;󤑆J6n$#Ʈ5șw4af읂uŸ+2@p Lwa6Cn:Of*ebtЯy9w$~i.fNɗc'j~sSU%JC6*tG[HkLπ_ SlPG]aM2$&=bVr⨠i+@H'eF%l9/RXRqV w~G5=c q;CU20 miHmWsByCMLGjE6% 1[IfA|ni ?3#dQS5<h&Ǐ єZ|kk:eFX_{@)JW|cͣyjf7gi4ۉf|Gnq95тUg!8ɥTUe,\%㹯w@'} ߖT%rcFգza EknoY|RqI~H͂Sʘ@{30ڿ9l2讁iG#D` \{1﹐YMR f{J,?=}ίFqQ(yٔ`EVKT%r7)&Z04of̈׏b"af"FdCOɉIKq{NNPDD@^ΜX)+Ὶװi;pZjP͎TA}H'TxR%2 8L\Ԅe5f__`vx!9糝 Q$SE 5?meS1z S5/]aHL'0Gx30m x#t(=¼muN65ZYAI'רC% NbySMtUx#(DtOGh7^92\ O{G_c2xӳ gѤLj);s+HQSſ%%]kiS&wo&,C9w19xper_m0#D/t0Ut_DbMŜo3Uh^Y1}Ssі'ȮZ61D%)FTCkjtsS6O?THG>[M>UV7pkVS`e| B{{4r^Z=yi&41EȨ ťiV:nI|zI 3T4h.{z(Iы;'aWT$Ia㽈i#2&)ffDA{L5":5Qwe(:m/ŠR-t}~ 'iX\uۯH솤4VௐtuYčAAڱk _=Mkm5~=7leZpaVї]*U1_jaGlfmBо89u67(>vs6݊V-=o]Y_nԀ gf0_e 'vC2;gB9btKI0gG'$-[5Fm= ۖ]KI_vw./4y44d5|  ktYk+oa9rrϠ:xcӑ%RȍCb_7`W}Q]xKJ:v >5=Ͻ20u L)[/{9w:I/a&@eT[ l_T 7~T^Ahf5O,)otO>zIdh:fsG9\m.r!߬=t%q'VD&\>ho͖~ks@x:K1k[_hk/H D e{e!O\jfFO@,Y\AF !%#,(N~CRܶ$vǧ)Fdy˯K2.xa1v0L<^^'c9"Ewݴ%/j_iRhPn" Q~//?a[I=6ݏCdHuJQV}cğrC,(mͭ׻^5k cy%/XjC= 9f[N[Y9Z}7ax"]. <0s`IJi |K?Yp%#e^ \$Q5i.cE͕2FX& syrf>aEe:dԄ+\wC&S0[f9gJ\65^d'"侎s^.n:hPD~QfĤN ݲxĵƹ. ]2 N%%f<WM x+iY:rB?[w _'[1E}+uw.;5uTVfIMXra<0qdUm1d;@,ƷJۈC6`(ibtL?⩃S``X*Xel kjiN|~^}rl7[`VZw-iJQ\6,l&e-c$9-`-l&STHS/Qqnó94oLݺ /E0H##|L&PW%Z yXv9H7{lgv,$R6 <VMfPy:T<F1@{dA_Y{P­w7nDXݘ!pO_lj j6~6$XН0|5-~aML:"0Nyw:@춞2-rx).wDM(QѣnOWRp_ d?{Q΁fMom{$2C龤׾3+D r pIDvŞ%L~.˻HaI*}6:iYO9"/5hR =O31Æb[5LVUBI>N3 R19#'NU,II4`NX#-'ʣXV7ZFAy|MXepևG[boPܜjVwPqb42q호1,m:`\ x̽Ј4~[S66{YOAnNIs,#}}wY7fEb~Q9LDw%“5 ̤~RʦoK}qiqJgZŌ\-hyc=n8PhC)X  찝r n((]VyzIj3a-ֿEʦ.~1^w.U$_*#TT +{5^lZqP+W8F~Vϧ(#e* Y K"xk>\/>%ϝ,lޠ3sd7gGM@5(E eU~O羆K"㡍L)} G/܀S>|"^#$UWfsuE :^ ,x"磫঒3iM\D ByxzaEYb) 4* ~/2DwXӯt4@"Ӏz0 tPL8VwF$E8/|`-3V߅;xOy#oH'q-ֻ;8il 1+]%Sm}2M(8VO&^ Rf;hW P<:3/XX4p>^-^b]jMm*jzAYosH3L O Ԓ7'ҁY[Ʉ+Ii`ߎ,!:ݹy!%B%ztSzplx._1aA.2b1VyW(@#ƭ0i@BULZi*0I}>Kwq׈ WgK?6u/{$VUd-."ܣ1W| h_u *Nyo |g >B;^\aȽ.刱[,Z5雮=@WJ͠l,Xq{y\W$l+&~ΎM ,BՏN~Dɩ<s;EWP>~;8>P*4bpI9Lҙ[QXGCj򀂃;`;Vm[H6룥uD`ShpRΌ2*z̿0eq")JMuyZ3ieRZdyZg:_S_0PJPfҠTY^׽M2"~kI>`0yjv !w te3D`#OХO4#> DRYShyM\:СxafL&34u2|ȎBj0MuYp:It @-ܦb>Bl.(Z:zA3%l1)K !+"S?ַje /߬a+h}K#1:RcxSfzC>tu__x ݿTbbPW~<)] Ss些$_T?7'1hIFG2_r 0hHÕ{PZ%iWzXz$7 :lm݀d&#| n2kzuMmS<ޗ=}r*-0 |NEtYx6$_(\U/!vE,Fpqr@  c+"V(*q4߇Z Q TgB`!dpc˸q~YxU(_Gň>p +K*\ZuHnPe Vq5UJ`YHk\>rhvΕYI?qӰ8x k/E%Efbŀ74ŕm_ŊCTel|_$se#: 1}|X>qٚ'Dv ܞm0WTlZ2 _go1}!HCeqh$$҄_إەN˃ƺ͝s:q_`w=vE} Vp4 A}Wu.8˥mYmz2|ϻ1OO}I}2!< ٕnH"VfĠ\Ʈ4f") ]n/x/{uRv.GUwt7fy y+纼 GIpf6L\U]z}9E!"7pwqߡЭdˡ ccRF'KYc)qtYr=Yqy`}h3y )ER|i{}$g֡p gtm|?H/" 9J. c]`DhehTㄟńgcn^iGDW6{V*A5 ?+v? LqPb3ƾ UI%v4e@|ѐ?v7C=b?5]1Iƶ&֖H}ƆV&ԺH oytѷ^8O2Nۥ&E>N"/!E9rB6tUM)R?|.6;n,Lr5,gj٨76N$ К,\`6L_Ý2"س,L5WZXgRݐxf~D3mn)n&&bn0\^w\k x$%umƀ%r.K"f,+[,}0UjRdU].zN5Sw:IF)x su>3EV+< Zǃ l Evoe6C>ԁѢYU Y\bye = -(+,J{ȉ2"Pto?mqp2g,P"ժUrHL(8j>wik *v:gܣ1!޸۬/f.qI,vqse1/o(]QSIǂO%*LԎo> K@y5۳n:;q $l{h{R7ȻsMl_KY8WaYvM晗U+ErRЫ]YG qHD| |Q }}ȫs$c2f`_tO| hbv<ϻO>|+=Ƭu>lwN:2YtGWչX./fyp%3b؛X6x]=zG|k9S^zǠS;1a]RM_ze wxBث}h¿ ~Jlg*ɶ[¢7hKVYn7#Ii v%˃\]RlĢ '7i'I:'.Lʥ:ZU6[Xx&75*$sDI{k~1 {AY HRi9g,il-16]2R4.+/RXwHbƟ3DB)} 8O!LcIE}-!N 64Cd =Y"m5iit$tp"'5QLoKYJRFl2'KDbhWb9+eQ0F=/h˳割AX-HBSqp!M^YBĐ}FJSڹFB%\:kjh|YOY+*buP"]u씪fDPm c8.n8 ㇒"p MN~,f>p?ZIOr7S { $yvY;dek.]lä^1'ݭ;3 b9?mqMZyCſpɷŞwK+ xuLi %Njt$ƴ@(7ʒyy`^71 ksA8~m_TאB!zFN S~A}( 0 gf2D!fd8ӱG *j\GJ3R޶!Y  r4ӲBB y(KODlj%u;r:Il䯸*s ꈶIX=a8i^^_XĪ/.VkRJ5<@~]s^ 5D1Un@xZF.cͱrf@j+7IM(ĝGr&gJiNPro,3qGe۫ȵVп|˽k ̭>hiu2vQHkhAYѿf#Q̹$G,[u $ K.`Pg QV\n+Nڸi*j!"xs'Vdxd7ꏠ/*Nf:"tp7\)%v KR/X4VB]aRڙAş@X<%r>!Tq꧜ݕ^̒䃐 1ZDd;S? GՃbj}GL17~%^ KNpӍ2sKa"]z.r$NTU쨚d 6NP/Lj(%Rj[4bF|8\#cU²)K&Mbu(I Mhk3_EnItug~X74 ~v@y' k6t@xfw4XoX`#.ɪ}IPy f;W`S29;(߾m1t{`Ԍؿ"|nؠ)DP[0SjD|WkʼnAi7(+QpXnNȡXga$-۞ۙxOuBrLhuulmJqߧ˯"sDPsh6$ա#lۺ2=usgj:ӱVC`UoxnEr%gj *eݦܖp]W6 {'˂Ɓkڽ#;u4l/{J39fM\W>޵ҿmW/j=utMT:ٵEH'>@:`vkS&Uσie"z: 5X3K8w!4=bo,t9i.-h]ᵌ3p!s@;J,4,Ug\$ϳLS$PB3xeDR%>N!F5|p3#}] f{KӋ8M![+HO0-kzu:vN>qڷ~_W5^Jkg)"LΦ'da]n|;#M A]Bb3x Ă!$F\jmq4kS5ίVvb+`Q ާv%[Sv5ރ=T>sW=h;p M(SI 2C"( Xn.njD`aCtQ,T,!7VlӇ3R[E]W=mXU:̖tzБGS?al8~:#l-Mi` rD,V>t1:e53n*}*BMrx"*]R\7cݬ/ q3]Sg ˋ`,`glZ(;}^Nu"IwcMu!*k5 W<`]*DÀ ٖjVI>+p? &YwGz46/u8H+>0I-f;nd3Z Σ|_ԛgrƗúUѳZue$N3UeF {d,P^M 8_$ysXj_Puu!Y=1[O,qx\)ŰwKq%>;*L[̆M JD񚫔նbG_Cyi\ xo8jM/;/r2$ s}K*z>Kxda"wxOM4[y\ȣ/:+>Ban=/\7g!ELh@f -h Ü"*RZk^9/faq)ha'*jr[lbۆi֋Z~4Rr:{j>QCfI76IsO,㩰"8XA2a 0 ?*|"C,H|<>+nEy[Y<4UNэVFAqq6 ՝;*@*FN|[U?CK＂3kO5vC>fR)䬸(K`:6hY6sMā3[fv2g96 #|B(2tJoz8d;`]H摛(Xn/Sv&g4%0>Ew11‡sOlEA: s||(5gFBr8]yW1xsRhs>fӛܖ` 5|)ưةv6IE_0yC3d2!.Pm P1D C`7B] pluۆޅ!oO$5$ÑB@ȫzjJc0& hY}cDZh,ߗӅΞ B8Ģ% tOVg7_%U͎*OEr1}!Xi-)vϨپZڄOƅG#! dX;P1á-UbH꡴mSKmM "i٘UI{σo u#:MVʥ,Ɩ%Qy!HMLRe1[*8|E.Qi)KK$nƗ6&:|#КpmaZR?Z[约+B#D e5BC@cY넺-F‚,7֊DPM(^u7/7{vkDN`G%B۞ :_񌵢,dcޭKs ^!? xO0[`^oN_UtBzZ}Jg\)CB`~W ,?_(1,ezdU6H_1'7` 7IHagXpk7vPUE *rz%6́;X;q_^ O#΋uP}:Ҹ + OV+->+Z6>jG[M'ѫD $X¾R")(hDȞyK1 JbO)dL\iڥGYO% /SkӨ1@!2uު]ah#[vO#~e?'kS3yণ/-?bCG[v :Nx-X[ Ctc1m=~D6QoU\~`xripiq̽cZK㭻iFCx31FQjՠC"@]㖆αSٰ~0-  a\!8!δ@SB"4*҆*Q> 8@Gw;%]Uk4'~FQ#h8D Jג c|IXE**$An$Jb{V-?f6p˻)!E 2hG1?Id7uJER=lDYĔ+l_5!O9KgZn9>~$~l[2 j!_<뷱U8=-b4nٹT` %wV#[ RiH qܪZuv/`sNCIGӞ?cA.KAn&ufh& Od{݁FGg:\?_qH'б1 /Ì%v |1^CH""O4?[R,l!iؘBImxQ10[yMgϬ6~oH' $O PD:{@""}hQ]V |_q,AiPta1±^ڔUbJV<@VdG ,峉/r. ~0. 9M^[~nR!sXγf!pf.RzHj}vxH^.eO^A/yiuf=WfA?ђ W^9'3F^]«^\mkoQ;i@4v 北b_ c18rp4dm@,#[ڶ~cRyMo~FNXnwmT0h_ Z8$QٴWlC-7h;W~χ}k,XywZ! MhqM dve՛n A> 4@;G?bZ`f#rL 1î4+h"gh#;U)\=7 f"9eskI>=5VFͧ,fx"g(Bx/#p?Z~NGpu>r:Gѵx-KKE-g4.a)=,m{ &eUY܋b22gGI!͹^Yk&DboQ&>^T٢쾛2mĽGsMiJM56'°!΂O:ߕzIſyωj=Q-ē0yLnb]Q}f-1dnd>HC~W 33*ju?Xq-" :{ur&b[ҨOBtlpYMY2MK91c s5QaPکY@m^Ul!a;ˇUMn/l "ˇI9v\ތ1r;Et[c@1Z≯" }]5.%ڦzx52<Q,2'Н#^X@'$]ϴz ̉N"cv9Nl02TqD4XYv ?]`ڣ{Q11XrG)OP޷6ɻt7#y3 }IB-͓˫12 {7)jmU(^'0~ZЩ!ki dBٞl;FK$ }dK_kx: P#ryC[ 5y3S`b%iٖVF(>LG,2o܏S@>[ u@ OJ9G3|{%s[C6mri9Z[2 sJ? og70rcq0B qm*(*;lgts2ױ'Q8wP-sb?1HHTnUjۊ gtaA)FFjp3'bNߍeA]RKڵFCFB (DCFOHɱM_-)r^"9+O|ѳc;ywC.ލnT$#+b+b70JC/C`"f.Ӑe)HYu ꐥ}HUω| quZaCct{ԋ*7Oj~O3}rpُMc;Nȹ4^%QD[O[ =. 5tCy t6\{( p˒6R};0lz^Mn#>O>8D8gʟm;p@ nHӴ4cH@mo+~,oգFB*3 `)q/Zţ&.F7%x Zk/^D4jtbBX\q X 1 `wu;-e.2~˴#UapG_iei OmZFB.NRtÈgcal:ѯ(|6J?ET{XxN(O^uchNN'lܐ@1W*TJ. ]zs&_ϩ+w_Er".ǚVӗ Kwu1ViuĒwru"ET%ia t=DZFJP9Zh H.g2iw :MΪM K\<0iM$M1"qsuy}GlO/<bn`̧h|哂ȞVFgdm֍D+͡ȦXx6'7_j& Bn1g lmjkRܜp>13wDV̽5p(ʦnߚ%e9øgzp0%qYh:ˤr*>kwgNs4)o & v|DIu˽rtS7;j*7H; (~UW4hV@fFh-0 Щq}I &s;D~Yn7E(MQ̧Xv:~QuSĄ1pk6&Mݱ;ؐb QJBW]ԛtW6&:s]o)= V^?U|`3g.l]h雭RIE.SpUD)2 at @eq Qa󜹐3ToR2=a8aӸψb;n3YQn`Lʿj(9qX\+P\VptX"BJ0 Pw :BMU͵P:̈]s4ܗ#W}g5Jm2![֛=d׹ͨglWqI\S*T0c`e $2wJE+g$/-( f9\Dsz' gs|;UHr@6τ*&5t]*S+Sjt'<o! 7qV(y'X^T^)+bUk5KOb(&e2sB*ԂgϭrZ0o(is9Z:Ɗ1Uݶ{F] o\/8ÂKA/ ڤJ."Ah"92bʑJv_v-[Y.OU@BȺޣV_ 'w[Vh,k+j(U1^Sb>㽦vkʌC[L~( ]VtN7T]cXnS8h{)luQ]|G8l)A&g'L[UY/+nqVNCT5qXLr_Kxj/:=61r(ZVH吝`߾(}ЙJheetw/>5Mcj{>^bU!;-OAp82aGJxJz>(s c,њ[gs0E-{ lVBA}z4nP,[ A*e ?>%N$)4}hq7z#enm &̍iјL )T•~ɔ `:FaRrfƍM+(k}qT5[yn!!Rj4>Ŧa}_!(}zQUl5f UVFH|bci1\ 5Agˆ6(T1 VN<"FϓOڤO]usu72-PTf>!XGC8ńq<(ʤW ^%0iVg:L 0 7ØVw߿ h8{|?yJkfgE[&êRP:6r, U-_(V1bS&tmiϢ\ 2Ŷ'Ĕ(Qږ'>-NG0%U Egk+gZ*'gԔ@]KegmTl7;qӘZBk˒;nU7Ƈ1|ZtEZK,KmFʚMg+"(]bPfPe~k䙣L% ~gB:W䋐tyovȡS6!"uуhZцlD1 Uܽ| ~p&s#@ te7cų$ajRh-R^ S]x)9 fYY(q4k~X39ptSR 4su4M{nJIqDZG@ l)޵6dF#nw `g4.t,,Te0H:iBu`Ĥ郿c!anF)|͢R &ʓc:UmTf`@pT{ڭd\KEpHaMyJ-汅M}icEUDq?j*qosrxvR%)2h\q?a4Uj4[R&4k?e8؀G~~n&EٺON5+3{ntl#Ƹ1潵v Ћ[a4V~bRO@`[DEC7=!^1?1,1(6 mp_ZD(L#գSɪ9%{#H{3 T|]ʴ--T&9)#V{;n ܀3MtP_F55&T" Pt{nG"oܖE2WzC=Ri~_8KR my1=l !A SʿK ?'륶57,{r~D~߃@PZ*WYJHr+\;_GRX(7|TUkwnӀF Aƍ0 ‡ckDͲh$Z$?;I}m1o8_CPЊR J砍(˻H:Τ U^zM+ޫtzĩ-k5I,8,}|+7LmntOoIqqWuNܺ>}ƾuJ2(IJ2yEp}Zø||}SZ=+Cc"FaX4Ϩ )2U(I,,>_)\M|3'9PQ:@G9ppܕy⛭1+Uƅ};0dĚ+g 3>|X-3rَK<-*١=;I,/nƁGR" J{%_/̉bGc/jtb}wwI`@Zo.Yے,yAbrȜ/ц8,)r@^rI}`z8x T.TIROC*9<+'-fg9m:`wOa?aYt3E~z58&@Wq9(vHdž^v_,`+j=-ࠟ,=Rvps`A)-W/͙7hp.8x ICNll/pP4 3?/[EQ>}?6.ĻR=^- l&Ϳ:<;AX*JrŶBb UP܃~,|,f gmp[0!WSI$;=.GM!9SwO6a$toI^:: _%37.雇h.y{FZ P+rdZS4”q F@,(yI?!\,.CjcdMQmJKf%u.nrl: @Op| fjύXY@jwO`d‹GGe8떏 ;mpnnl]Aukw 8cderj5mHKFBcģ6 Bf̤BM`oL,trniGa_YtmEYe#мv~+Eie=s3mAP/ߐmV}Uy͎ 9 pKLzyLU5)msxgJZW pZȑ|J@JqTH4nUO(9 U/J8e.p,Į|s'|V ~I]>S<s ) [ɜ0u!}/L$̀Dp?A.E Y#逝Z'O]mĆ["0LYG2Ӷ?#fj7%;ݩ Lg7l MaJ gU-k4fC4Ƞf`̙*oʄCݤ0L!8:|:rVԜ5]i}!X3zEpxx$?CU%ݶFT-,X-ubu":aj*gGu<}%֨v9RH9\n<@>'Ԣ3zXkB6O'" "[#H"~<}T-2!mk.2{v4o|⧑A}92aL,qx'H%>.gjoTivI%Qlq~jS(,r[~%Mw$/.7AnQ EOPP%DM;Lo=5LNQ:P)ҚZys[Д_ %mE^F$$*aPe^a_[V+C"p➁lh|ܧ6UE`G l%y)ޝ +ð@jY˕/YS:&yUwKOg׮Яܣd[{hjaM8[Qp@ 1ʧ{Iw.K`cdokΧyN ؗt2Hݑ:1c@9tm@oԔ~1?;|D>ǣm^ KvDqXY K\} teYV4E[ }Ϡ$&{SPoC"[IzJ&K;,~usgMQT$m9x8 3]( vT̺ͱ'@/nwi8q Ioo5mjӮ/NIU;uRTW!ǡE6om0J߶:fpcDŽ5ofȀvރ%iYUe)RsOEDϕĊlU? YdutA1X=֑G:{A_0H^w%N:2*X O_h Ok)xXh|f NebT;tMdhI8KP)cC*B29jm:%OU^!)v'\Q+ދ8&,F^s ^J]p^F`0I3aec@ VS&-2k["N'i4M Shaj5цAᣅnJe%*EU#Ԥ rS9) !Xp7kLzIQD^B7_0*;D 5r?\x/ xoT|29!?+ ^{wLQjT_{od&V&'<-Q'`@ jQ /\*CcsǵW@McQmPZOpFEt]l%AL(wAbh?n7lA]LW;OG^0^ ݲtVzyk1K<-8e?~}Ԙ-v:AY͛w]g܀FegvllG%FFKg;]7.Q1Y4s\KP?Gnjw%[D9_2_;|22N\ѥ@iomO"Be5KBsmt//XңMG}&ÞbcĵB1^3Z9BI?]`%?=)s} 5l&wDaO9@e$#[~@TycP᝔!։lΫʼnטq}|kC8vYupzOH?h)IJ:9I45X:q M>/,`xnAH/fCpJBiƷxNrXXt9ԪeHnm^[~{>FVKA TҔ6OLx[-GR\չ jd} r_B TF8S5?E>Q:Ps!k-k/^0EQ'Www{ jF`-kd)b`XjMN䖀sВh!m9sss"sHFOvTر? YVQҭR HNqt\Qa gr{D6UX V^=)[jQA.Ǔ T-ɦ opEZ;/L׍?җkɫ=ItaAmYYΒFj5+S{@a:o嚂0|i X )o| o|D,!]۫IYе7sRh i;Dy}pV3Y^ CaU]RGhm_ ?-B`qO>_W`1Zjc4 Ag^.?xCv=(ai-RMԤwJxg$fphrA R3 {C8lI)'̑]hBW/H̻;>ZTa?-q%Qk)z2_op%al;hsՁ;Qq ;Xnr>:L`ͥBJ^dX)CL T&zO:zL: <=T@F_5sl]**$hY\"=_ʉEy&SaW?2?qr_#F?O%j fUuLM<re9P자=qK2(قf9@ 8t&@2CrJ J# @Qm hanX Ф]oR5RǶ xiͩ͘f5p[h׼Zil `7X#-'_0ϖKxi(<_nÃlH)`$Rs+X[v!l@hrݙ+#s.ɒ?kP`"7*+&85)gpPr xb!8 i83k{6%pZ TOd{cZ)э$@J]M4̝QMޓQ5Hoks8d}yET3Yb~i2ei(tsYsQY` 5RZ 5Vo g\ŰhI# P?wtl{ާDjJ!H;mZg9D(Qq󈡸&$FހoL5XŻ^N%4T9JXEh"Rz4ٿ컲m|[s~Zc~e 7i\O@f)-7)dTDyݻ9'L:-6P[@"OCw%J[Rc.auK{5sqd ,d/Cf)tBL:OS316sm{z=?r믎}U;ha@iT-s2iY'{ Y-MZq\OhI3֝!V4&@K;.^ȬR3:·c}׳4R*>o~ԁhr&&ɡ1!_,21TZzXzNԩ-{Ľ<4_1ΨMHMM:9&Xkfi]^h!S[VGl ]$?̌~Ys4ܐG5RtZ} [l 1sB?u M"h27o?X/+ ;tx{)Cz'Qdakaf1*GS+B[fCbnņ/Bfu z哶\3_FГ4SIlY2̕YcϾEL_( Zw[xс̺S0m~A>`Ќ8G lxF>b}*)Qz0?(V#d{22Xi0j%_+w\#/o:DBH&cTYLL~һV6LѦ>ޚN'CQˈ!GFz@Rv=J ȰLƒCDl8\yJ/^yИhb5޺՞܍y5&LOkQ kd%K6xŒ=lk|FU';/?&¥T4q+Y} *1L5^\<vJMeg JWؼSY*qQ7=\ b[BhONOѺ.ki&?”Sg'YmS<;oݦ3+7E1|xZ=F. /V00l,F{nCPqXv8[*;%ְyb]2EE+j-eC3lSh[LB I 8i[Yeh#*w~ 1!:|Gl< !cUXr}DU36X3yY0kDW ]#bcjs]DW昋rQ5W-MPJP#+4G63˽. 3B6.rz&37жJ&%Jy~d%RivG8l}fs'G:v4[* PS )];ĜIlBƃw8qN@^yf~R5Y 4Rt3X׀ܳ]nk,3÷!\T1FöJksl,ڮV D"KfH̩-O0C7WۉդZdퟗ{XR Δ V@;,NrU &8>̂ @vu&XR.t!)cAJpoΟ}jwfXx10s}# 8EIo BZbHBgG^a^(.U)j+rb'{x@΋Si5ܰf"MxĠ=|u꯵#p208 »nVPT`@wW>BԇYbr!z̀"C`C xT7`̀fQ/>h5@2hz_h Df699ԍɓ-y2U;#6ЧρuKH +mUfYRwrl_|KSId sHZ~ )4y~ַ[ V+X(=rlzړZ~O UCQaCe>,$k`CJNt\٪XgnAKsMy R`E;rVd5/6q.Jz/{#O%"V[~(GAS+F='];oJ PR:o+qy|s%W0:Bt 7 gX8Lژdy*bMĿf?DqGE2(ʂObͫ|ĨvN,cEeV#<'HT^BPݳ =ZLr"/w3UaXN, ޣB8Uv:l΅8 I^Ļ}&l徴JٰqErVT<烊cv4b6ȅ@x#OJJ|i>ST̾/674R#vSR-S~}m &?#:k,*5D4K_'Ɉ+ i=LˡƱa(tj1U=ҡ,/lNl)GI&;F"2u>DIN/?0 "(*0w6<Vcs0\8'?g@kvs)M=Θ).z 0Wg:}#%XC1 "n8 ?+,%5]L,q~Gh.Ƌjc66hV'g.rE("A񬂞jU.¶@5T8;AxGBmE[Ne,s5นg!XtdaSx&ОBiP;t+N吋۔ۥ8Dحv~HFH 5 !>D0gJDkzAhӨ|tvzG8HV6>ߚTP8']Rb3 ײ^w>YȀ'^%׳~eH6L _]%.fNx'z*nxI-4nivqF=E%hҽت鯲UqOEbn& +*RyLL;Ht6 hlŸxn/.^!1sLQp"1c'Ä߳{ Dߎ^ĘE4Zz1V'H\UO\9j!O+9 Lz&>.m-hȊ QYk #e?}˒c 3;,Y 2r8Kv;"gU 5;R=i͞P ^ D(1y:Pt)u %oBA{c~{-20v=㝙S܂Dnj^&HߍrQZ\}(J Fq@vmWAqƒxfUXx(%?NlSĀJ,|0)A^p$AO͈ y۔`խѪ>7u y+JdG&rVëM?:E71WGi\boawuW -MDKk0 %n mnU]0?cH6Du˓? v][9^e@sNAZs, zz߁Ypt,sZ3 Ma3 nxkm9Olߗ^pXWDJcMIo |/Q^ESj:[V%=1XZ x\nkӚ@,6'ۭn0/QY Oyp,Jt5 Um7ԦSߐ,O;7 [` Jv8qZ}Vuv?ۙEs4e"Y3ۇ+-s~Vʶ$<k4S1`ܻ٬mY W>t *aI$Z+T jejܓ^jf;Q/LXBAK3}@ OE.&G"`JZ= kp]=a3' |si=~EXw\0YܨREXRF^nj2^K${7pBKTT (s4sX{xg) sdPbBqV`'Df/u& xL`"{sA:[3;{NXz풮 ?BvxSH7Jglv94F%:uk4vHHȮNVdj[[z_Kg]zMsڼ aVE-6 4T#;g隗xJ!¿LyM0 b9ARNR7LxZCh*pJ7M76WLBwJ)![G,]mQT\w݃[fևbAW!L#ojԇ>ă6YhxdOdd ?룁@1`sm D9z꫃1ztUdO/ B;}{OFskb):CX$-P=xU9@Pw6ؠ-ӵXd6ߍ6~"N"8';TP؁kUҬ)OR>+jHߏ!>)&Jhtx ~(';|.A,m^woF}t֕]sC=ߎFUȋ{Gy-! "R7;d >GRs|;Q~FqMGzRPFUoљaPe,lG._yChD6+,&2sů> +0k}JΞ+^ Ld\^F3 \a󷳧8MR\ɦuVƓqӴƟdZ1"y_ ߴ ~A<Ł2a@܉ޝg% v6.LjPilx'm™uP4({" /P$AhXNQ~(EC`Ц_ma0 <3`!; hZKQSz׌g>-AxgA cQ=#\GuC1ᖝNݹ_ F4"%zwe0s' r` fb[^Bی(/3YO"ץ*oVM/kfFmJlk-};@֢N9> tt?U boh}8&ie/R)u*ĩ=jLj9t9 tB9ՇI,{ (Sx\ES6$ Ģ@c=Hql;tPwK;%PUbMqfM 58pi=`pp /\(oSN*+K^z G֏4l2dL}ѹ9ߎ&uZk}N.'meP3S{:_#l! |79GRe6vWT#>*ݏU&萉%U¨jtq-Z dI(ԅxp9cӧD=\|Tƪ:#zrljԢ8\M0vέRW<`DSժ9\tl̨;Af~v(%;|}&@)|,˸iᘯ)9Jd_j&2QM|A xY\Tu⋈J@{ QRsYDs6w/gs2>'PI# :E˷9Af3VͰ;9ꄽ^3}؝cb~v4`}f5kh؍5aTܑ\c9;Rv.Dg:iR^SM?cu-۸ }m}}!_)y| <ΡT^&SJY/'x};KMVXR"A46tX}jgwjg-'HcKmB|JPDwJZ- O@PD]K+ 2SploSi?XqNuJV h$<Q)cqeĭZfiCBin2kYЂx> 1q-z(cR>ݷ4Ii*n]}/gQsϘl X} ^fc[/M*gG::54JL5 P 1Z(u6,-$񃥊$$#.GKAyz 8DveIlJ8[>QᕱE+AN;^nY=,29t7ns,WC5y}r g!}JUaB3Fuk mM$E#LNv~\M'H,Qri {T{nàQޟg>1W ')^M P:XѨmYpOf%q72ln  BLQ*EjvǷjn װ-:P^x`vf΢ Tfnu/"T8$8*#sF ъ^4#DI+Tr@$湞E ۼү#!C!ȩ-Jo9TlŻ'^ 7pٸ Df;o">CP*]i:Yg,?t! w=WZ~w+px?ZɾMUP5$Ϡ .ňos#7n=Vo",F,)JmZg;XQb:l;2gZGO2=haΏ̦iEAЁ7j A>nvY9`B*jsw\mkk㵓<}^x&|%F̬Y?.m{]>d<鮄nօׁP옖?n&ޘ#M&o.=)Ys #nybNC^S- OFEETdFʀm` .^}X8 @am  UmtGBQ7aUVf[0^m ?˫ɟŴLDt.D(CNZ3p`5 jy\x``}#/81cvJ q~W:<%8rdw1$EձQX:DeyC8壣VņHo)nզ%\e>.FLi($Ζ|m*/e" . *U 8K/Z^Zv^1=l;xdnR6l )۪ίHxO U5l͎95tyu/AlщkFX@ ^V|ƭט>4z\}.:>:.Y z@)  aUr.KL)mھ090o=r'.os_=~ XYxXpDz MaV@,7z@!eCx-Dպ6vLGV(Vښ|{e^<_U#KCV߱6=[RDIJQTDon _0Eoy[/f3jp F­_ԛ/o /a߅J2zL}bծ3At( ל~&Ѷ?G5uLLb[=p=crz:{&5LEq %q0{}" ''"= jO(ˆ}'Oי9{@ۿ 邜¤趽 =) #%AT: =uIXygZT9WϏJlg4|`lSb>^f4|27`b@<*3ʥ~Jsn\;)ZZst:^"}3,[p6s4ЈaFO5دc*!?60c);WqGj[/*"kc+iОMc@ M?z(@Fͮ=HG6SHn R1Y)d'}%WU:jm_`z'VFon-lgB/^KqﵚMZ Q* $pz=[ޓgf >$DFJ!_è{t)s_>V~y2N]jklNR1]'BX,J :tT䒊"v\w!T%QMızh^ 4EH'bhU W]p> 5O"NWZ#=Ħnu>(3"}LCyFzsfJB*I}sMa3T ˴LK9,uDlDIqF"e8woH)zqٴTa#p8*́b L6'd0soFF[1@]'i|l(aJVa"}ǒRQE t|F`Ė֯rbh`M=!o^g>eS?ޘ{r_dQlSd8s2zHr:#L';qaLrO'[~8虏m#H]DibH\FPy2K֪lևz](6Bj$'Bv6j@J;Q03^X# gA!1X'*BPڄc_Y>X&=uyj58/un|8Y/e3g)R ua]0Ԧ TPǍ t!\ABWƻ sԩA8,l6:vkbwӝ i?nv40CXsƞFuA >$ eLj_㏷jc(g/h6+%jlw:DEUK/ݧxxlz%@QP`c!>IW(#Ch5,"*2j_ l21&}bb>*&A(F/j ^Rz754/c./3n?f ֪F]! ;pl3X|Nh,QpAG:C(sU>eF uyf!Uۻԙh©ß S[Ơ1^Snl_C 6],I<#+5g7 _?ŬAWq:{F5Ղ&u7#**@N34”&F=z:. IMȐN{O0h!F<9 }GFf[h m8gGM YWg#2H◆OHsը'zcă։A9tKnzzG.uPV;FI?HiU强@;4s%="cYU*  M ‰[aO4x /}YD; pIM#pgH0OM0.M `0 {Ѫ" ~Q tӓE$A1ٮɻE5m`[=U%DNg~@H6.db"`Nz uVK wEԇ8`"(X͢q/ cSQӔjw@.M1J#FD ;X/K}7ܓܛɧ F ykx4\t|k_Bm$_^r\{׍F.[,U/>H^y3+RHxivN?ߦ͗|J& Y$W01Ta⎉5 @ON/ #\9r`vi^\n8:-}E6P( -g}Rf FO"_KVټ5Gyցug}=E؈R{S_Tk]Gٛ5\!VPPiDD-vi* Qbd<+Wu0 낧{EO7AYTz ߬!/oq!Ͽua?Y G%$F͜J?j"}VxTS9z sȉ:m~.?c8$@[W ˸P)-}Yxj~ ǡbj 2h yRbE&ZVĖ XP jck+ٴݟl $x=w+hɆ؁I`v!iAak)_P]{k:Gnz}k[KȚ\} ?rH5ƖEu@@S ҟY8rQ~~;J{} <#[YG~OJԐ%Q=_mZ9ws.z+6#Dg&FYSI^/πmlȲ?"ثggqF1^X$@s7y$1c1`>lXxy~Û^csN;oݟ{~0VtP,2]l 3\S)M־%OSΑ8swU䙎?&"hAv9}kIyf^hNVkqǮsSO+B##8.  q6v=,Nt)ZcFXWnŝTR Mp6MӢĘlS>eШZ׋>e{?H{R5'RYQ\s}zΛ8A Biީ£{cfn`yq wK{Sq#TVXGAho_?љ![BYQ"5gfl'Hn\,̛D,[38KSqbp[(6ѷ#;q钶c bNDWZlyi FZA 𹤈;] AvݰWaq('cG6$ƻu=0-]~D8}n@X;'Ѭ.߲eB3Ew%"AGs˽Q줶`=Btkt.p/+}`f;/g]el #pmvi PaĂ9u R{Ӆl+g蘼^ꫧHw9|}>@xDe7*u`Ȅ J@I Pň d';;b"ϑc4fia`ASdJe;ɨ)B}%SRw/K.ܜ%R>c; T,f.E`KmĀwOEʻ|S1) ޱ*{$iKbh7Y5w1ֲXwSgrWQ|WB.P̈8^Gf:}Z35f1\/hafts:PBVFY{;To73-fnfQ5K2*~NJR?)rK|sw/9+E_=` by)i\పqϺzH!|9O1 ETHNmO7 N>ݘ9ȧr%zj\O-=4snOZk~ ZPyQ-iP(][\"~&S}5LCGbT`oKzѵ\Փb )A[((S'b8eZ9)  a|YΠJMw5k? JF~!Yu`2He95!]pيmz߱iaB|ND8Ќa#ˎa|!- iGK~Q.1j,@TԻ[x zK >Lƿ<ꃛb X3I3k3@IMkaP;ہ⫐ /&*xrZN³UϟLkCPлni39/dN8yEv g6Aȏ ?ÊJ_hLʿXaMN3ոx̜~v\{c=9eghn ҏMVύaY9,)su}gn9=>ZU'T?ǟz3j_z W@!;˃a8E]yaԙTW` ERC,iT {wwP஌M;v/e~I2_7M6,7Ob>w(Y ox>m-ڭbr<3^,U`:~/$`rp÷Lϥ?˜%k?/%f|r #i{-id-S]P9B >iTj["+zb\u]:!P^^rax/w D3XGbJ$eؕ5{iBJ)%h޾SA3_0{t^#%mW 1!ӧ;GK .0;}wn94} -~2>; R'sm!q6'}QP.Ïhqͼx?7Υ[ߎHfHʭi.q@[Yo&]9"cіj]}1!V7Ł wx$<>yٿФHu@:o[ -?̓:Fx g$kIuW"]wAy5gH&:|l>2GTԸFuBD_ B_(~v͐[ᯡIaqQ'P }V [SXeƿ2p̂l*ڕQ-Ot8]-:,s)ꇙL6ψD:_,Ym;)<ţV8r>.'Zn=5Es:!}}DoфYDEUtr9=&mFJf~^wNi ,}~`9M,#'S(. OLјuv_UM 5Z2Nfp#1R :fނHQ?n ̓\N? 餽<KvYtJ-ٕNv ts}f=RFvv&[<1m6Qx~ >4*йV)Wiݲ8WR.`[TlD v) zX8{2tu:3;XXJ 3L>a$dOG H__mDoLc7XeliAt?܂:Tpz>ىRWA7Dr9|[y^ {@k~ြ(OCHf F;ٰPJ_~߭t#9踵&?)IsG ]YH(Rp6FfsW>j{ o x)SEMooQ8yDZ+u=8zHbܕreU`opfƮQaHզ?`Rd46]x+xU,\orh |R6WW$a0X8JkFDO8^F0xF ݂8\KyLD?s_xN?^/bpiy?^%75Bp⟃2ZSUS\^ޑ5~em[K&.|%SL~:K0zDM 'h:rӀKʜ^RI@  <̡V3Hh >@N\T`h͗>T R:܋3"ӷnVf!L¡3"(EsKRazV}7O<%Or%\7%$OLHsb7|[uVbCVaJw5AR4[ Jv18V sѕR.Q3Taߤț SC7Vl%԰LCn5>"xIGzɃ]vUTl9 -BUZ 0`]=3Q@H?_QoVL ;[/+r7HL5 n(jFs]R-`/SS/ApĆE'U x~coxbnbҳtX52l%VdIOPtpN]μT Ӹ lB`hˉ:F2[z`>Mec 裐I4XRh䥝Ep;- &2v0#.1c~t/w~*نmJ̋4dG bkx?iKp0忧\+f3W8(7"Z̾ \XK6oQyDVKMleNC\s?jS/ż b?a@c>wm[-Bm)N2F?9د_'ѿWZ V(W!/TRX4帳*qws!0Ջ޶u-'Cp7MJ}bWZzC{0އEx$%oQYV(p%pPVFxU*<Ucn4 *倧[Ф &1pf r~bdy%Ti Pcg,Ux[21PMAH1=$ _t3R[{KV}8!Qצ&*d[ާ!@0^LA<(1Gn WfѠvj1$聼d! Ӗ ^̈́ 0Vu(: $z\hlԑh!E-0g1rx)Cu0RT3Uj!iq0 :du?+gITaVe; ~NT%R{S{^6]l;myI}PRoc]9h\Izx|Ew[,q9|i LQL| 5dZSgTSZY$ lZ\THwO;Ix ~YT,i22 {ES@M8D4"2'bA3ӣ. EGVDW.9I/A~u!Xz-(?x4vH,d\ut<-XvyފEGt":4}( t8W8U9X($_G @:z) bEmXW$h TX::1h?8&\0)1Ԫb<`gNL;j%ìD9 {Ond\کy2)f LW:=#+OZ RNLဵCjx8Ll^ʼnHGr(qcYxx|A4B#  ~ʳ0>C]roxyREo @xH5I yP;A/C[t43sL7͛Jd~RLqF*r۝T6{K[[om05 +'`꾯ރtE5P<kSRbAz(Γ/OrFR`Cn>OL{- `'ȉJ3@G9j` *\kSo?ؙgsu!B2 f㍙!_p)p]T-^ Y[t}+9/dhCaQpҒ BCFi& ]EWD.$nn PJ3 h.`BpPg8O!ڒ[}ab;D$$6En h5)V֣[ i6.9e:Z/.k xA]4?ї1^`-tR%Cӹr3ATl3O,, IL+xm?AlBSկaj=}<(Tu9iXC^Sy ХUy.qTk*3a]?Аſt{#j+R1CzX@vX!yLHIy. /7*P#ɨdw{C pPs(uGQi%lÒ<"BԷeA^CM%^p4t8an|}BpN >&gjAM"UE韣L8demޒ}Q׸b#ݟw1 x`>-^߬n/g^_ZED d$F򷓏_ŠגVP ;b,IT!ށ] 57?zJ5QƝ *"Sk*OަDg?_tJ̖ 1qlm߃"m5 }5f*#N82ѶzTeW5iK}r&15bfl諱&T2~t}ӫ ?ϑFJl&xtuڵiTT;4Sdv$N#xgSV!.[Y ΂t.2^L|?L.j T;kT)yfUZXxt dPTH:&~:0 \GKOۄ Cc{m[M&<-UC\5aTS0zORO (Mq20w4lzeJF,ׁ>!r2?O?''/p_))Eln,lLX<>d_7oyjw4|֭@%= ZOly,/Wlu)r%?ULFډxiAS@%]B~KE l!Nު4 ZKoӂqn~yb=%+HŇ Tjp.rHA^v0C,s+S 6gmbz|fWI9~҆sSǺ0X#J[#E,_Z:w c,g$N 袂`wa؏ᩇ3@5@knհy-L;G45ȴ۪1a;Eͯa}yx76C K7N 3OARŤ{9O/nh|  v z]Vw1^d£3!I(ǝCB#:?3D]M;A~DYg 63^zVB1+[зe!+BoL1-,M%uX>z,!Xe[h<}%BYva/jaə1^:bWBwhhݤ^ZclyOnLI͂t);!-/q,[Ɠ]QXG 83~bRҐ&W{'eO;oA8֚|򛾷x7+P-`s2ج`8/P}qI0 ;iRh e(Zٽ㖮-{/m>͉bak\(m֞;]'4ɧ z@ƶRE}c{mΥ\k7aɿ{3ٜVdv(JZ!:FU{DTnSG,OM&WO7n][#yAtL)Ie/XYgw@pY{H7T1'\zhQgGLW@7yH\K̐I/(.1\VHDNs;7) 5E5I+1/^ơɾ_hje8բwƸf1ph!%$7˴n$5y?юTzE/e9#Q0`o0`C .7bE7кiX(ܳ(7E͎~hAﭧ@IEwY㼃FX⊬N۾°cX0?b44'g3%"JwUEX99#;|y`Wyeɰ!f4عt+6Ih ȵOu 9hD kDP `6](<( O=ԅm}A8t'IvcC U\ *J1:G4Ԁ JV`28Dk083D{k 2Q^FFtDm[Cf %xAt/姟z~̕;|TRzm%uD0R$;)㍝C{LH U, -Iа@v ͼ36"VbC΅m~w2icGAdPNQ~G=X=*O<+E=?S6Ռ_#|A'' ͝Pa皡"'Uaw2v1:0"U-xX2` EvEU`L|_. U#-|Btfx~s,D~ &nIןzHhv42 ݻQV%Ɨx"OhI|0\J`aD(• e(-T' l>+ 2F g39Lټ,em;'TmmE^NwdYJ#9dAښg'2l!kqpRxeU;rq[hmd :a,ג-%GRO} Jf;ЂT}Uir1#PZ0 c݄A&MV z 8Z0.Sʵ۴w])*y~c!īyQ%RrPli0D23ח!ϪhhF"oNH2YL!tǒ2|sVUTHCQ/\0Ͽu̎,6a`𳂢Gܚ($u q-{ >3XaQ%)NEMg]5&r:l⯠D7C0%օy̼OlIA#yBf.*t՛/\EEuF]M2pCD-AkKK r]y $ BqB|goW&˃sI?J\;x:-Dzhz/ K~]YS'=ݒAmK?q\ib5i/ wjy3b·g$ HG-Վ/# VΡ)  =춶9-螇1Lzi~NYcb D?d[_ڑHg*;#:&ApJi ʅumFyL޲jPǢzVB%Ŕ&]q%l7xcTTs1 2d q [J]R]fъd'rfQg&.Q-]:2{j4ό"[%)j-xЖ!3dmϗxExWa>c_ݪc:AclN4xu{<u T@W6b\|GWVנaKG)9q l&tM֓Wx4)}|ms ohҶc=87<DvW"J\h l`w>|Bnq_6ˠe䋡{T n3(vfDsJNЯP65?]V:tݛS~']2VS8ģlsYQ;\yrp\K2 f8 #pP t B? ɦ#Pa|^gNUl۸R\jv[u)B!~xSc߱cT* ;/٣6I2n ǭSƱ&J(!i&X)hJk5m EYx6Ĝn!UwUCO " g P…ӶIa^}Y'ܿ \$JjT>4+,#ȼߢ!g^`؇CT\ {*S!}i<]fOoa;7:BJ9?k>hVlE: \D2›gv$xǚ^Zq6D~p0{(ٮ+!N%6Ɂ} Y Rsn"DRlI *&-Ѹ#},Ul@!:D?.sJZtۋiִ /h~@vux?iذϞוTedZI w Ϯ5ccςrEgܵXqfrMx l:ɄۢλIpO(WP": -9EHbDCS1}&lyxD;a3|R #.D_7spQLOأty|QWN5jM M2$Eo5Gi>n5GXx~&H4"Y5U`6Ƀ='wACB}/.{˷R4AI&KY#8,@p"ʱhx;r PFRI9.l夶lەz0c_8@w2gO* أǼo{{biUr10`LhH2#t7-fe/_)@}0S!2BlmK(gP7N,G/Ic(Kݪh&EOU=osM+DP2)Nj(Ne[o>/d+Kyz;avTHAMu%+K;:LU3;bə:u LU׮jGvf1< 4j,O$@JVn1WTK Şq jm {|=$[դ,wݴ vG3(/ _qN?jhkfVf}yNZk !_QYo9bg6Y z<(8U9 y>Xc K/خ:(](?EUk:hR:x,oF6T.=Ϛ$+mPw`Zb@6dnڶ1AUΧ%<&8PwlédF{>h9&"*7L0@zbO^l`oVͼC 5xBEU7޳#E8[zrm0(-LEH HwpHi-׸k(:gр!*xLQ[f:26xd/@&M7y@,*ܪ}YF!ߋ44(񸮷<λ0ƒ#\C Z|rWw4Ѯa?:}J x>j6[!łyFAI+}_(fSŠ 5}7rD4LV+(g# YRߩ#ZR 3̀ C$ED)JX5e)<7gՋr-Pe;[A <1  +n^bqP)'-'=#@8oI=_5eʅ\LC= p?T˪ͪ 8]"P+X3F|ԑ[hn '( !6k{K;}AJ|kZ]47= {9}_t(%(UH|-{ Cc--`aH8 Y.ڪ/&<s{H Q2;h(ma%"+u< 2d7:EVl7}5#̲Mp3s;R1?叙RW7!~yu1%4zrW"--C jOx.oIz(1n6\פ>)Ew*"U2 Opzk&Wm_r>C*+0j.}u&"-kJ"?l3k5(Ƿ>LįDM6$:], hL\ >PTT2-$Y h6%$r:94j+[kQԠBёp>z]=<Дm){Mp!;~ h1!SOF0.JS@>2c>a/@A0)KMZvLXntP#N6&{դeK诮=$ElV9NaF]J[_Ix'P_~ݗe(? x;vV$fǸXnGpkVPXͭ+&UfAt].SS c{>),v=qgXҿxf6uE.N œ4JzȔ&z"YSXX` 9s7 ."oDҒc錂.84*y XDTD$9V ^uO\Q%R̰M##m#b )W˻]ot(RГ +r6E<9WZ',V1p&Uix & Tgp |.dJN]coB6o`܌8!vL46A~˦sl=%S(Є]Y14bEdiOՆ̈eG < _sc>$9DsdIS{/tbi{a_pu#eux x҃7-.@f0 ;9+q;;tUtr@զOI`1q$vLjblD,}[$+$-oO JM` …9]~&ažp:A@ x-k$XV X56Y.Ht$N_uݛ'LVGY:eUÔ KFE ͢ѐْToFmЅjZ< _f!af5B}H~PMqleVTP(^y.n9F1KXb?t=]|-]ޘ[:,V=ƝV$)&$"eL7lX5H t#+m!wVE@M A'͠K;zo?=HۍYCeJ("rE= ~'qST#.n|8FGv'`{6"hJ.@%oh<%Seo }?gbǃ}P;, % 0AkM Y+~hu/$FiA/ð-{Ε}R?|{…2i"u# '*%$*јJ\8qP}ėv:+DS˭j3pSU MX/^Nkδ/q5}v0 XqêF(|&\i,$dA(K YP~HL4@!i׊S7SlGWu>C] H' 4׷S-瞙0:k'I(8"S}3і|%aښbϕ`.qJl P79ܜ#hGga<5|{Ӊ0t gj o0]-8;pj7rprlS_cC H-`X&#nxd\7/YxkY |v =똁* 9MDZ7mk=#PVWa{*PiT!uoOSEZFN%{)~׬9BitvM)<'e-tۭ~2lTmcʇ>Q@Yb)>vw9s*l\%pXrY]-Y?L0"aJ~IUOoLĎkм$V\$Q;"m~|]<&| !sa2R)# ήrDgϩ(Hz2!a肻/ WQd3 !0?I\!'0 T3 'u%uo04 bSi;8J<;$_REȒ?Ft+&+HW!Zm?1>\De:UlsI4@8'&ya$j||8ϖ^zդpAi_.ͤd0u%+olWm¹={)*_D]EA.Z2P-7a[0Wȓ"Xv! D'\Hrn5=CK`ڶv.;dgKD0H`N__ie :\0eϽ)ZQ Cļax5[SPH(d쯘d pN_f!ӱEǿJZjBڐ*#y W,=ex {-`:rl癩;.HC҂_Z} *dF$~'_1zQcp1ŏ f)?Ӂ 8a:aݣ%L7 n+V4lxOˡM$.Y-yރvɨZ$Pҏ㵶yv!JB{7XSpcE'FmGwonn  wa{}IN⣹[ZG8>v ɭ2C_)Ib0Z_'Xkt "*{Ic{(k)k'd Tšt4iU| q܁MX`MG:Z\hƎ+Xw .vmyKY{ۘz.% #ή 'da2p"h،0S] "Tӗc5&K@).I` <+0ܝGوFrzA:cTl`uO ^Ug켠kU!Jp jZEJPN_cҺiH2@oZa29}y {h=||Mr"t|^Qs[N'eZ&:n8oFTۊ<Ѿ@7IM;q E]Nr3#niw56o'JFWM$OHת ܯ!ByX8Γ> ]dp󸜂.[9g[O-.ڔvVQYyg|/gyrp2=W&ϊ2E;%}N@?qiǍ9䋕첁3I\c:҃QދOqPɝ.6D죰c.,{?.xټ<};]W_m*0(HW|J|N8gWJ9PwEU&J<@sNj?jEW@Y摯$ITG,Mbn<qiѯ|\u-) qkwK4 :x֜MSΥ59R~X;ɬL.'DSYbJAq{X ya {D$F3G-1V|;ӟT-~=F&CZO8Mt٪͟nSފWpvnwW{?yJYӁY <44X/P{!đfenсX$Oy 6t.õeGWW(9]Prb+ af*"5Y>81˿ĿF3 i|K1Z PDUpL{Bs La~u AN|coRt4`Cbx7xl V^jc U$?2h.zn;Zf֙UYZP r(t_߂4Epuduyݴak+|WPW)Q'aFUr6*SkV=r1Tw˒}]QA,›J}UY!k0ç'끹/s-~7ʨm 63y vexuӼ B@,|8ШԆ[I!ISR*p湄i +˧wUEUhHSuO(󏚰ɭƶn2ZXXvף2n[j`ma6K*0ZFէMU m."!X~tPq *(hlf2㗩.Mkg1BG gkn9Y )=h%3#ɦgrYUZE+}54*Zׂw/R·6in˱)Dۇ2)WtV:'BW]ZˋO*=>E l;Ie RۍDJNM枆tpQe\S ]&'&(03kZWER>p4zOx ȐjmUhu-T,i3G]4U2 gtX mU#X34 +0 ggE/)3 ~ʊу}f:c+q=Zl%>Ʌ]Aٕ +x7v- .b154n~s9f-ջ:^SE5 `BIngm2jژv0|'IcìB7cƅ ,(LO9 2ţ1=.;fiA;Q>$sȃBOEvrЋd۾ZQ{."MCTz(kњbsW%d/B#e&SƅDQ6$,`Q>y10_ε(Hk?I>"J;,[- I`olD2锬B3!4.)Xo ,~yŘFf>tqߟ1M@R'ɰ둔a!U5OSQ_ڟ A&숉sCnXQia_G/evHY41(;ך6zxfI _U*88M>[|ڬY\Mh:́N\}(/7=~w1NVq1h >ЩUKO<+݆-Jhsݟ):*9o4c2MJ@鴴uQf_Δ|gbn 0JtGB~^V-颋#T|;Ī%u'߳ZNqtdQ?y0PI {O>|G{gڣH!S9 Q v+m<\j<|;eMޮAwRO.Lc+]!dxGJOT pV$c*\ R 0)!C$X1ؐy0Q jc ~W5u.jm(T'# R܆*M?}>v~RUzBa4HN NIh]A͐*NGUp$"j"GY>&,P&XLl%y_r|oYB/bmꆏ~Vs^ETR !g)#+&UbT w +)aM?A֙BŐpfnSY`r b]PP1} jCO`S% !ʼn+'G0꽄 'iּm #qհo(;mpvVN.Xq =5A6տA?DE jl)`5jLH ,Dߓw.9>fg1Lۯ]|ǖ5Xٳ>,iIu4@U"w}7wuB2y.Ov?JIZD%cEX}=rQqG ?IP*aU)pw7Faq1e?(ԝ75hhpTBŠ7 ]UJ-;*S63+mg^foI) 9^gy NtV7J.UF3 --]TyG,F=zݠ:_k#Ͽ nB@ ;=(|VA*[% (#Sɹt WΒ>Nj6ȼB٩ൢt,>g6 eb‡|3/:yn dW4]k00|6q6I+뺤}:=ARRUϾo[Yv=l2aǐ=qKgRFd{).cp@-U[x%.\°ݚ{ sCTF@von/Bj?,7UPZfN&O. 0BF&%<&^}G ]Phz:6b&:89`;UYR%nrEI eW/r5mS ȫifNxԹCԇ=Zܡt1f@@BVQw#|S?;SƄO gQnbNh[(9`s?vEʬyN MUm?`x;ǎDFKnBt>`Uc/hx?M(ba~jPC֓kG}q a- ϣ7Gמb,'QisXnwhVnE<؉/u4Lt[6NGs&_I'ziC4:r/JW`n'Ѝ_C*e^TxqDt&-*;i1ET+\_M)N՞knZ'ϫ\+rJҘZ H> hOVf,a[)uepc3MA^**]_@1;49wHfC1y.ToR5y11 MB[;ϊXOl``7NmMZg 1'JT\ Cڌ o {-TGim~pl;xWe}`Rd~tVNF9MyM(LZcAoS ߿6cй,Va+' iʏ@-7/ymʈ/6 pieAbnI=%j8 y *[fnIˇتY=@vNj\@"F.VÔc1XueؘAeQu(,>mYg`a8pߦ jn{<}FM DC|#tˑpup s7E< ŒMw)bS51Zb]-!폂ce&{Q6/? ac\+GW(JP1䫞?|sؚ1E \0,o+\FzQG$yw@|r A_g3L#ʂXB8Mh;dɍ6u.\˰6nL{>F<^sC԰ -StpMJDט#7Xp'c&[TKu]CBҜE>5jmn{8H@ǤA] mIf ک?('{!Xbd7R&HsT΁]<O.q8ѩqt!sqrF8%&Ci'~n${e7p׏lj]y(|+LCl.1bۃ=:;Wjl1ϗAi+Jœ::L/Z@"HI5B<6Н '\S:$} '"OJx]XN (|"@z87fGt;.H_?7̝i{oSyG`RD?SibP QMh@v,s18Sh[o n_a[~t;o+bys:_+z J65zL|dppӛ/?DŽ}Oek@{ꚠ\ ,4iL7 s. qU.5/ζcG[k2g_B;^ ,5ZCvDY)CtuYBl`)ԚtCGщGM4âS6Ū/1q2%AA.JRmH5P!(,puy|C6NȯUUY[NFlO/G JdDi _ewCfh4@mAtGIHy1>7/!}j*2_-E[jѠv P1fG{KomFr]C ~9<?E3\Ya #(O v<[;wa ?Ӭl9ңa^lPt՜ t X ;^pkÈFf"Bmhe!{d|΅.| f5nEӶ+IImia>x펨'q/[Lhą2z̝+Y~sE`()7l0>'CcFŰ|2b(v˨˵BNi>e Kb&; Ox?EVTu zv.QjnEnҲQj7kN"޻G6%t6/Ȃmr9T0T7C=;> eߝܺЌ#$ʛgzpsl.<ފTx  p:#c3Ӝ?_?:6Y-z` qS]R$U 4Qc zYHty|h"}HIq-8vnF R0#a ѫ7lێow@8y}S/N Nɴ3ܾHAh2iz> Յ`Ge>mSIat'{ZW쳞|'(`l\ *f4aq<,({QVX}K,Dv;eG?hRބ&CT"_Aqѐ$wa@zJ*s|VQd2kfّR^?WF&GekuRtlbCuhw`WE?k_s}:b*k]` /l nvop!(ՋZuRI&ȱ21ijYH82^î|y0\\LYX+] 1u+M!8iŘ_Yx7;!ŔCஶ9"w*UhX UY&X49Reڹ!vW#^XQ^wd2:7gjQ_z,:sQ ZlD9s=&GE" $mZKjހ>^< .ڼ3mWyX ]q/Kɺog<}+fb􈊉GݶV/VaASK|*`#qCJ˜1{P#F?q§ \<@Ex@˩T@8;f> ^Q-u9g0Q*6˾`k.hAj:Msk5ĉ9̿1pCHK #$K*v$N\xƻR%ލ;à7h:3g %{gxs>/gY[,79E&aS/3Z@;ꗗ(I yȼ%4wb @:}۔#1sӷ"q5RDu1 Ff"k }ﾔVG<5(erg ْͭ UާW߿-+Lk 嬼O?VgcLn+K'd? &;V9Np=^T<Ẋ|vn D&666bdQr|'ȢXq-5d:/8Įsz.+ Hf3\A(`\Zٷ|F4@o:B43liJ? ̀m\A58__IEx4GAbHB0 3^[Uf2VO}>Wtj!lnO$Lp5N?&ݴuC,L~ luhco7DZw&KKdr/مu"Tl*lDt.4zcId7<@}f$K2r.Bh`6+W`Pyj4EząS4+2N!a:1P 1@V {4"Ctޤ#L>WJD2\m'8qzq0#:"6 seM!$LF{T0]CuiqK[CT 4cqd8mRjmΫW}'7-n sԐCʍA|w3V1wd١F 7XE*x'k>j#Dzkұc: ϡbifUr|4~xYNKU+惨V,Γ Tg6MQk3z;|@F`cK\^6z)?#/e}4\9512Ql˥foH-o_XtUӛVs|.w # =.cf%aP|$^5l #$8X Rjh,HeO,{k1GLUD5AV?hZzgĊ\hm{ܲͅ*H Di>_փwv`Y43aG cp:EzPN$ɊyJ&i*]U`;?睜 nM#֊2ӥ 0HVA{r&l=[y3R2QZ#JcݴtIqתsXJJR~_,wKO*-]DE\H!.+W%7xk9;Y@D=x3uSsԞ 7VIhkI$o]ac^LR,<?Z^6׈,1ˮ$vtW |Zf;)VuL'qsn__B95eB%s V݊WY慎8j<2xs3isX |V!>7F:~ۺ)7%7,fƼ??i[D$K*##mȒTڅ,,&G- Oy37}#Y{"9۾P~eOb]T>ls`-V/fg|9NZ,`cq`}z'7.>#|&3=ꯒS88P@vU|CFWl*3QS{Xkk.r0PyMaH^ 9G2 |RŸ*-uaQeHuΟ:QgC;hQ@:mo͚CA xY!*9-M|gь&=/D>2d덊 6$C*1*a5 BAWs% Q`<֕B%}JÎZU7t=}l{n1Dğ>C+U1*AL\% ?"]t~CÌ;q *R1_35ΐcmoV9f7jpZZ $ʹ&̻YHvPڼt[nMuGwS@8Kb;2ԯGE&46OC"I]0)^=asw) ͏_DLYFR?7 gzS$n?Ȃ [:bXԍ-A:a}q3OHbR.үक़Fa*k[ISZ_݋* ]JɾTw}aQŨHlO޿BHrX0%B*(PCֶVSMb@n 1OÞD9o^h:KKo8}M ӹTO$/ﳼVWEJ2~6)"W ڏ[; "bixSxYjE5@F,DJt5Nj t N PFI)S*"CF#Jykko tٓ=$wwfşJe)F:Vm':3GIPBQ#Y׫ 'ڵC"u[fz S/ֆM3 Y4B{ދ iۏM `~PZeځEuZ ݇HmF0} OP_}qOO%x]+ L$Nu$2kUއ >97uSn;Fce?GoBò64/MOdQB'ᖘV|:%;44[ 4K13Nt>n)Nʁt/T$q5&ʈse{ 3J{=m5^FjW'<~ xy@c@[6pi( rPv/knree`- `c%1jK&_OUWMdNWdx;Q [9A#B o^&]`6JOIoþa-^bNV<v 4Bt3Zؓ:sxxՆ3"(w\l& Wy/t-KwfH^p{cD \a`@BHoH͏5[thj 7xDFX}E?5޲3O'*yd&rP^BEvPiUT PCw :~t%8:פ !ڲ y"IeP͇ٗ y?Pz⎜rB{}8e0ǜ&uA04<{s;J-$T]îDN1@5MWuCi{BHբ/URmUq Bho\:~5h?<2L5fa V-RbXUuhqV?oэkJ%m$؈)Wyӌi@'ij;o5!}B`x)oyҳ_::3OTFbW㻡Dw-e%@Cx Nvtlc}71oEرW9eݦ!/lI8jO4[vWv)#P0y0`3S ̦(8E-/TC?YOR]փNEބQ={>e_c7jma ;'lK_@pIrZk zm^!=0..lΑ:Sk|픍?%6 ^EhR{g՞ )Ꮂf j - I^~- )d=5Crͺpmb}ieEew? VT{uIJG|EZHkC3K1ֵUI:T~:мLu}ř+|A$e)P5{F Y#РɗI17A]np Ť ,b446DwW$2~)%{2 *9kٙg=UOU`Ϙk9l䃢j/mY6Yt~,Sj$ƢP=! :'ekhP}(|_f 4~b K>HS▶8qt-O4Q7h;. KGt}\_z-on@.wiR/jȌ2L0'KŏΒ~^*F53'es A\a;tyɉ\Zϩ)sGόQPe j*na@AY7`) #&ID:p2$/̛m q\=:VS)?reIR=J2#u&75~pGUwq(d-Oü12N\񜲧PP.ţ>bR:뒰d85; WWy\ޡQ=uۂg=*< CCÈQUYi{MpτwnqPܸR@/?ˤiɯ˕> ?=w,^tހ W(ymxxzin1#gpœId5>;yv"1RXvTɺvޕ"lqU`nRT3:b 6RGnȸ1@⋞V;F"s43 1Miuf`·?;SskCF u$^%*=*; I4 [gY߳$ Yg-y^Gwcb&z@zU34QCiv+1Ć>tQax#XTSIpkq^yhMYVhXgI14@܍^EFy=tu]4̩hQQ],[Jp9;^/&y.d[&ONtv™(RqBz¼Ⲟ#``{GO8-GYU-0ןF2!*}&5,[v2wxDZCdYm A%bn-{$X-fNu1,<{$pcdHR*-'@3 {L}w.A}ƾ9t}<71, l0mHbv )&ᅝFBeג#SH[ʹC 1@}XU-p| 3y;*7DT ?5 k6˝u~&>Q)?^S~*Xjn] T_}+:|AYzig#9n)]H}SGRLં[MsBf YZ