haproxy-2.0.14-lp151.2.12.1<>,ڐ^VƸ/=„4,4%H%7ųYI{Ms9u (s8⇁#)aFdmx@ KQjC9@|L^GQw맔aQ9YCՙiaV|q }^?[mcܸR>TК6ZNv|ŁU֗Mu] xɱ0+9!II5uNXO~ſ#F؞PovPN?('h`.+1|FndkLX˧'ja@n”%>L(?d   T 4Vnt{\X V T P 6O 68;S==?@8-@-E-(Ev8Ei9G$i:OQi=j>j?j@jBjFjGjHlInXohYo|Zo[o\o]q^y\b{c|yd} e}f}l}u}(v$wxy#zChaproxy2.0.14lp151.2.12.1The Reliable, High Performance TCP/HTTP Load BalancerHAProxy implements an event-driven, mono-process model which enables support for very high number of simultaneous connections at very high speeds. Multi-process or multi-threaded models can rarely cope with thousands of connections because of memory limits, system scheduler limits, and lock contention everywhere. Event-driven models do not have these problems because implementing all the tasks in user-space allows a finer resource and time management. The down side is that those programs generally don't scale well on multi-processor systems. That's the reason why they must be optimized to get the most work done from every CPU cycle.^Vgoat01PqopenSUSE Leap 15.1openSUSEGPL-3.0+ and LGPL-2.1+http://bugs.opensuse.orgProductivity/Networking/Web/Proxyhttp://www.haproxy.org/linuxx86_64getent group haproxy >/dev/null || /usr/sbin/groupadd -r haproxy getent passwd haproxy >/dev/null || \ /usr/sbin/useradd -g haproxy -s /bin/false -r \ -c "user for haproxy" -d /var/lib/haproxy haproxy test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in haproxy.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in haproxy.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-haproxy-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-haproxy-update-$service-new-in-upgrade" fi done for service in haproxy.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi if [ "$YAST_IS_RUNNING" != "instsys" ]; then if /usr/bin/systemctl is-active --quiet apparmor.service; then /sbin/apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.haproxy &> /dev/null || : fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset haproxy.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in haproxy.service ; do if [ ! -e "/run/rpm-haproxy-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-haproxy-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in haproxy.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable haproxy.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop haproxy.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart haproxy.service ) || : fi else # package uninstall for service in haproxy.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiFV"=  -E B q!X%hi;_ % $ e 5%?R - FFC '!L  6y='5qi3{1] #T:yBFSHDGgD Hb@EFeIeqvv10 ".T>}yw9 >A聠A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A^V^V^V^V^V^V^V^V^V^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^V^V^V^^^^^^^^^^V^^V^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^V^^V^V^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.0.14-lp151.2.12.1.src.rpmconfig(haproxy)haproxyhaproxy(x86-64)haproxy-1.5haproxy-doc @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(haproxy)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2.5)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)liblua5.3.so.5()(64bit)libpcre.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.4)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.2.5)(64bit)librt.so.1(GLIBC_2.3.3)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemdvim2.0.14-lp151.2.12.13.0.4-14.6.0-14.0-15.2-14.14.1^@^@]@]@]@]@]@](]]^][][][]@1@]$]@]@]@]\-@\ac\73\[[[[[[v[ug@[3|@[3|@[0@[ @Z?ZȲZZ%ZZU@UcUPUG_@UD@U4@U/@UTE@TD@TԬT@T@T@TdTxcTuTuTmT_W@TSyTPTBV@TApablo.bravo@suse.comDario Maiocchi mrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dekgronlund@suse.comkgronlund@suse.comkukuk@suse.deMarcus Rueckert Marcus Rueckert mrueckert@suse.dekgronlund@suse.comkgronlund@suse.comJan Engelhardt Marcus Rueckert mrueckert@suse.dekgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comMarcus Rueckert Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.commrueckert@suse.dekgronlund@suse.commrueckert@suse.dejengelh@inai.dekgronlund@suse.comkgronlund@suse.comkgronlund@suse.commrueckert@suse.demrueckert@suse.dekgronlund@suse.comkgronlund@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.dekgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.commrueckert@suse.dekgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dee.istomin@edss.eemrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dedmueller@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.comkgronlund@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dekgronlund@suse.commrueckert@suse.deaspiers@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deledest@gmail.commrueckert@suse.dekgronlund@suse.comLed mrueckert@suse.dekgronlund@suse.commrueckert@suse.dekgronlund@suse.com- Removed patch: haproxy-2.0-hpack-tbl.patch as already fixed in 2.0.14 - Update to version 2.0.14: (bsc#1169457) * [RELEASE] Released version 2.0.14 * BUG/MINOR: namespace: avoid closing fd when socket failed in my_socketat * BUG/MEDIUM: muxes: Use the right argument when calling the destroy method. * SCRIPTS: announce-release: use mutt -H instead of -i to include the draft * MINOR: http-htx: Add a function to retrieve the headers size of an HTX message * MINOR: filters: Forward data only if the last filter forwards something * BUG/MINOR: filters: Count HTTP headers as filtered data but don't forward them * BUG/MINOR: http-ana: Matching on monitor-uri should be case-sensitive * BUG/MAJOR: http-ana: Always abort the request when a tarpit is triggered * MINOR: ist: add an iststop() function * BUG/MINOR: http: http-request replace-path duplicates the query string * BUG/MEDIUM: shctx: make sure to keep all blocks aligned * MINOR: compiler: move CPU capabilities definition from config.h and complete them * BUG/MEDIUM: ebtree: don't set attribute packed without unaligned access support * BUILD: fix recent build failure on unaligned archs * CLEANUP: cfgparse: Fix type of second calloc() parameter * BUG/MINOR: sample: fix the json converter's endian-sensitivity * BUG/MEDIUM: ssl: fix several bad pointer aliases in a few sample fetch functions * BUG/MINOR: connection: make sure to correctly tag local PROXY connections * MINOR: compiler: add new alignment macros * BUILD: ebtree: improve architecture-specific alignment * BUG/MINOR: sample: Make sure to return stable IDs in the unique-id fetch * BUG/MINOR: dns: ignore trailing dot * MINOR: contrib/prometheus-exporter: Add heathcheck status/code in server metrics * MINOR: contrib/prometheus-exporter: Add the last heathcheck duration metric * BUG/MEDIUM: random: initialize the random pool a bit better * MINOR: tools: add 64-bit rotate operators * BUG/MEDIUM: random: implement a thread-safe and process-safe PRNG * MINOR: backend: use a single call to ha_random32() for the random LB algo * BUG/MINOR: checks/threads: use ha_random() and not rand() * BUG/MAJOR: list: fix invalid element address calculation * MINOR: debug: report the task handler's pointer relative to main * BUG/MEDIUM: debug: make the debug_handler check for the thread in threads_to_dump * MINOR: haproxy: export main to ease access from debugger * BUG/MINOR: wdt: do not return an error when the watchdog couldn't be enabled * DOC: fix incorrect indentation of http_auth_* * OPTIM: startup: fast unique_id allocation for acl. * BUG/MINOR: pattern: Do not pass len = 0 to calloc() * DOC: configuration.txt: fix various typos * DOC: assorted typo fixes in the documentation and Makefile * BUG/MINOR: init: make the automatic maxconn consider the max of soft/hard limits * BUG/MAJOR: proxy_protocol: Properly validate TLV lengths * REGTEST: make the PROXY TLV validation depend on version 2.2 * MINOR: htx: Add a function to return a block at a specific offset * BUG/MEDIUM: cache/filters: Fix loop on HTX blocks caching the response payload * BUG/MEDIUM: compression/filters: Fix loop on HTX blocks compressing the payload * BUG/MINOR: http-ana: Reset request analysers on a response side error * BUG/MINOR: lua: Ignore the reserve to know if a channel is full or not * BUG/MINOR: http-rules: Preserve FLT_END analyzers on reject action * BUG/MINOR: http-rules: Fix a typo in the reject action function * BUG/MINOR: rules: Preserve FLT_END analyzers on silent-drop action * BUG/MINOR: rules: Increment be_counters if backend is assigned for a silent-drop * DOC: fix typo about no-tls-tickets * DOC: improve description of no-tls-tickets * DOC: ssl: clarify security implications of TLS tickets * BUILD: wdt: only test for SI_TKILL when compiled with thread support * BUG/MEDIUM: random: align the state on 2*64 bits for ARM64 * BUG/MINOR: haproxy: always initialize sleeping_thread_mask * BUG/MINOR: listener/mq: do not dispatch connections to remote threads when stopping * BUG/MINOR: haproxy/threads: try to make all threads leave together * DOC: proxy_protocol: Reserve TLV type 0x05 as PP2_TYPE_UNIQUE_ID * BUILD: on ARM, must be linked to libatomic. * BUILD: makefile: fix regex syntax in ARM platform detection * BUILD: makefile: fix expression again to detect ARM platform * BUG/MEDIUM: peers: resync ended with RESYNC_PARTIAL in wrong cases. * DOC: assorted typo fixes in the documentation * MINOR: wdt: Move the definitions of WDTSIG and DEBUGSIG into types/signal.h. * BUG/MEDIUM: wdt: Don't ignore WDTSIG and DEBUGSIG in __signal_process_queue(). * MINOR: memory: Change the flush_lock to a spinlock, and don't get it in alloc. * BUG/MINOR: connections: Make sure we free the connection on failure. * REGTESTS: use "command -v" instead of "which" * REGTEST: increase timeouts on the seamless-reload test * BUG/MINOR: haproxy/threads: close a possible race in soft-stop detection * BUG/MINOR: peers: init bind_proc to 1 if it wasn't initialized * BUG/MINOR: peers: avoid an infinite loop with peers_fe is NULL * BUG/MINOR: peers: Use after free of "peers" section. * MINOR: listener: add so_name sample fetch * BUILD: ssl: only pass unsigned chars to isspace() * BUG/MINOR: stats: Fix color of draining servers on stats page * DOC: internals: Fix spelling errors in filters.txt * MINOR: http-rules: Add a flag on redirect rules to know the rule direction * BUG/MINOR: http_ana: make sure redirect flags don't have overlapping bits * MINOR: http-rules: Handle the rule direction when a redirect is evaluated * BUG/MINOR: filters: Use filter offset to decude the amount of forwarded data * BUG/MINOR: filters: Forward everything if no data filters are called * BUG/MINOR: http-ana: Reset request analysers on error when waiting for response * BUG/CRITICAL: hpack: never index a header into the headroom after wrapping 2020/02/13 : 2.0.13 * BUG/MINOR: checks: refine which errno values are really errors. * BUG/MEDIUM: checks: Only attempt to do handshakes if the connection is ready. * BUG/MEDIUM: connections: Hold the lock when wanting to kill a connection. * MINOR: config: disable busy polling on old processes * MINOR: ssl: Remove unused variable "need_out". * BUG/MINOR: h1: Report the right error position when a header value is invalid * BUG/MINOR: proxy: Fix input data copy when an error is captured * BUG/MEDIUM: http-ana: Truncate the response when a redirect rule is applied * BUG/MINOR: channel: inject output data at the end of output * BUG/MEDIUM: session: do not report a failure when rejecting a session * BUG/MINOR: stream-int: Don't trigger L7 retry if max retries is already reached * BUG/MINOR: mux-h2: use a safe list_for_each_entry in h2_send() * BUG/MEDIUM: mux-h2: fix missing test on sending_list in previous patch * BUG/MEDIUM: mux-h2: don't stop sending when crossing a buffer boundary * BUG/MINOR: cli/mworker: can't start haproxy with 2 programs * REGTEST: mcli/mcli_start_progs: start 2 programs * BUG/MEDIUM: mworker: remain in mworker mode during reload * BUG/MEDIUM: mux_h1: Don't call h1_send if we subscribed(). * BUG/MAJOR: hashes: fix the signedness of the hash inputs * REGTEST: add sample_fetches/hashes.vtc to validate hashes * BUG/MEDIUM: cli: _getsocks must send the peers sockets * BUG/MINOR: stream: don't mistake match rules for store-request rules * BUG/MEDIUM: connection: add a mux flag to indicate splice usability * BUG/MINOR: pattern: handle errors from fgets when trying to load patterns * BUG/MINOR: cache: Fix leak of cache name in error path * BUG/MINOR: dns: Make dns_query_id_seed unsigned * BUG/MINOR: 51d: Fix bug when HTX is enabled * BUILD: pattern: include errno.h * BUG/MINOR: http-ana/filters: Wait end of the http_end callback for all filters * BUG/MINOR: http-rules: Remove buggy deinit functions for HTTP rules * BUG/MINOR: stick-table: Use MAX_SESS_STKCTR as the max track ID during parsing * BUG/MINOR: tcp-rules: Fix memory releases on error path during action parsing * MINOR: proxy/http-ana: Add support of extra attributes for the cookie directive * BUG/MINOR: http_act: don't check capture id in backend * BUG/MEDIUM: 0rtt: Only consider the SSL handshake. * BUG/MINOR: stktable: report the current proxy name in error messages * BUG/MEDIUM: mux-h2: make sure we don't emit TE headers with anything but "trailers" * BUILD: cfgparse: silence a bogus gcc warning on 32-bit machines * BUG/MINOR: dns: allow srv record weight set to 0 * BUG/MEDIUM: ssl: Don't forget to free ctx->ssl on failure. * BUG/MINOR: tcpchecks: fix the connect() flags regarding delayed ack * BUG/MEDIUM: pipe: fix a use-after-free in case of pipe creation error * BUG/MINOR: connection: fix ip6 dst_port copy in make_proxy_line_v2 * BUG/MEDIUM: connections: Don't forget to unlock when killing a connection. * BUG/MEDIUM: memory_pool: Update the seq number in pool_flush(). * MINOR: memory: Only init the pool spinlock once. * BUG/MEDIUM: memory: Add a rwlock before freeing memory. * BUG/MAJOR: memory: Don't forget to unlock the rwlock if the pool is empty. * BUG/MINOR: ssl: we may only ignore the first 64 errors * CONTRIB: debug: add missing flags SF_HTX and SF_MUX * CONTRIB: debug: add the possibility to decode the value as certain types only * CONTRIB: debug: support reporting multiple values at once * MINOR: acl: Warn when an ACL is named 'or' * CONTRIB: debug: also support reading values from stdin * SCRIPTS: announce-release: place the send command in the mail's header * SCRIPTS: announce-release: allow the user to force to overwrite old files * MINOR: build: add linux-glibc-legacy build TARGET * BUG/MINOR: unix: better catch situations where the unix socket path length is close to the limit * MINOR: http: add a new "replace-path" action * BUG/MINOR: ssl: Possible memleak when allowing the 0RTT data buffer. * BUG/MINOR: dns: allow 63 char in hostname * BUG/MEDIUM: listener: only consider running threads when resuming listeners * BUG/MINOR: listener: enforce all_threads_mask on bind_thread on init * BUG/MINOR: tcp: avoid closing fd when socket failed in tcp_bind_listener * DOC: word converter ignores delimiters at the start or end of input string * BUG/MINOR: tcp: don't try to set defaultmss when value is negative * SCRIPTS: make announce-release executable again 2019/12/21 : 2.0.12 * DOC: Improve documentation of http-re(quest|sponse) replace-(header|value|uri) * DOC: clarify the fact that replace-uri works on a full URI * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter * BUG/MINOR: sample: always check converters' arguments * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early. * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing * BUG/MEDIUM: ssl: Revamp the way early data are handled. * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream * BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility 2019/12/11 : 2.0.11 * BUG/MINOR: stream: init variables when the list is empty * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty * DOC: Clarify behavior of server maxconn in HTTP mode * DOC: clarify matching strings on binary fetches * DOC: move the "group" keyword at the right place * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * DOC: document the listener state transitions * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * DOC: listeners: add a few missing transitions * BUG/MINOR: tasks: only requeue a task if it was already in the queue * DOC: proxies: HAProxy only supports 3 connection modes * BUILD/MINOR: ssl: shut up a build warning about format truncation * BUILD/MINOR: tools: shut up the format truncation warning in get_gmt_offset() * BUILD: do not disable -Wformat-truncation anymore * DOC: remove references to the outdated architecture.txt * BUG/MINOR: log: fix minor resource leaks on logformat error path * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: listener: fix off-by-one in state name check * BUILD/MINOR: unix sockets: silence an absurd gcc warning about strncpy()- CVE-2020-11100: Fixed an H2/HPAC vulnerability (bsc#1168023) - Added patch: haproxy-2.0-hpack-tbl.patch- Update to version 2.0.10+git0.ac198b92: (bsc#1157712) (bsc#1157714) * [RELEASE] Released version 2.0.10 * SCRIPTS: git-show-backports: add "-s" to proposed cherry-pick commands * SCRIPTS: create-release: show the correct origin name in suggested commands * BUG/MAJOR: mux-h2: don't try to decode a response HEADERS frame in idle state * BUG/MAJOR: h2: make header field name filtering stronger * BUG/MAJOR: h2: reject header values containing invalid chars * MINOR: ist: add ist_find_ctl() * BUG/MINOR: ssl: fix curve setup with LibreSSL * BUG/MINOR: cli: fix out of bounds in -S parser * DOC: Add documentation about the use-service action * DOC: Add missing stats fields in the management manual * BUG/MINOR: mux-h1: Adjust header case when chunked encoding is add to a message * BUG/MINOR: mux-h1: Fix a UAF in cfg_h1_headers_case_adjust_postparser() * MEDIUM: mux-h1: Add the support of headers adjustment for bogus HTTP/1 apps * REGTEST: vtest can now enable mcli with its own flag * MINOR: stats: Report max times in addition of the averages for sessions * BUG/MINOR: stream-int: Fix si_cs_recv() return value * MINOR: contrib/prometheus-exporter: Add a param to ignore servers in maintenance * MINOR: contrib/prometheus-exporter: filter exported metrics by scope * MINOR: contrib/prometheus-exporter: report the number of idle conns per server * BUG/MINOR: contrib/prometheus-exporter: Rename some metrics * MINOR: contrib/prometheus-exporter: Report metrics about max times for sessions * MINOR: counters: Add fields to store the max observed for {q,c,d,t}_time * MINOR: stream: Remove the lock on the proxy to update time stats * MINOR: freq_ctr: Make the sliding window sums thread-safe * BUG/MINOR: http-ana: Properly catch aborts during the payload forwarding * BUG/MINOR: mux-h1: Fix tunnel mode detection on the response path * BUILD: debug: Avoid warnings in dev mode with -02 because of some BUG_ON tests * BUG/MEDIUM: stream-int: Don't loose events on the CS when an EOS is reported * BUILD/MINOR: ssl: fix compiler warning about useless statement * BUG/MINOR: peers: "peer alive" flag not reset when deconnecting. * BUG/MEDIUM: mworker: don't fill the -sf argument with -1 during the reexec- Update to version 2.0.9+git6.26b7b800: * BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1 * BUG/MINOR: peers: Wrong null "server_name" data field handling. * MINOR: peers: Add debugging information to "show peers". * MINOR: peers: Add TX/RX heartbeat counters. * MINOR: peers: Alway show the table info for disconnected peers.- Update to version 2.0.9+git1.caf02113: * BUG/MINOR: init: fix set-dumpable when using uid/gid- Update to version 2.0.9+git0.efac87ee (bsc#1154980) (CVE-2019-18277): * [RELEASE] Released version 2.0.9 * BUG/MINOR: mux-h1: Don't set CS_FL_EOS on a read0 when receiving data to pipe * BUG/MEDIUM: filters: Don't call TCP callbacks for HTX streams * BUG/MINOR: log: limit the size of the startup-logs * BUILD: contrib/da: remove an "unused" warning * MINOR: memory: also poison the area on freeing * CLEANUP: session: slightly simplify idle connection cleanup logic * BUG/MEDIUM: Make sure we leave the session list in session_free(). * BUG/MEDIUM: listeners: always pause a listener on out-of-resource condition * BUG/MINOR: queue/threads: make the queue unlinking atomic * DOC: management: fix typo on "cache_lookups" stats output * DOC: management: document cache_hits and cache_lookups in the CSV format * DOC: management: document reuse and connect counters in the CSV format * BUG: dns: timeout resolve not applied for valid resolutions * BUG/MINOR: action: do-resolve now use cached response * BUG/MEDIUM: stream: Be sure to release allocated captures for TCP streams * MINOR: doc: http-reuse connection pool fix * BUG/MEDIUM: stream: Be sure to support splicing at the mux level to enable it * BUG/MEDIUM: mux-h1: Disable splicing for chunked messages * BUG/MEDIUM: mux-h2: immediately report connection errors on streams * BUG/MEDIUM: mux-h2: immediately remove a failed connection from the idle list * BUG/MEDIUM: mux-h2: report no available stream on a connection having errors * BUG/MINOR: config: Update cookie domain warn to RFC6265 * BUG/MEDIUM: servers: Only set SF_SRV_REUSED if the connection if fully ready. * BUG/MEDIUM: stream_interface: Only use SI_ST_RDY when the mux is ready. * MINOR: mux: Add a new method to get informations about a mux. * BUG/MINOR: spoe: fix off-by-one length in UUID format string * BUG/MAJOR: stream-int: Don't receive data from mux until SI_ST_EST is reached * BUG/MINOR: mux-h2: Don't pretend mux buffers aren't full anymore if nothing sent * BUG/MINOR: cli: don't call the kw->io_release if kw->parse failed * MINOR: tcp: avoid confusion in time parsing init * BUG/MINOR: mux-h2: do not emit logs on backend connections * MINOR: config: warn on presence of "\n" in header values/replacements- Update to version 2.0.8+git0.60e6020c: * [RELEASE] Released version 2.0.8 * BUG/MEDIUM: pattern: make the pattern LRU cache thread-local and lockless * BUG/MINOR: stick-table: fix an incorrect 32 to 64 bit key conversion * BUG/MINOR: ssl: fix memcpy overlap without consequences. * BUG/MEDIUM: http: unbreak redirects in legacy mode * BUG/MINOR: mux-h2: also make sure blocked legacy connections may expire * BUG/MINOR: sample: Make the `field` converter compatible with `-m found` * BUG/MINOR: cache: alloc shctx after check config * BUG/MINOR: stick-table: Never exceed (MAX_SESS_STKCTR-1) when fetching a stkctr * BUG/MINOR: ssl: Fix fd leak on error path when a TLS ticket keys file is parsed * BUG/MINOR: mworker/cli: reload fail with inherited FD * BUG/MEDIUM: ssl: 'tune.ssl.default-dh-param' value ignored with openssl > 1.1.1 * CLEANUP: bind: handle warning label on bind keywords parsing. * CLEANUP: ssl: make ssl_sock_load_dh_params handle errcode/warn * CLEANUP: ssl: make ssl_sock_put_ckch_into_ctx handle errcode/warn * CLEANUP: ssl: make ssl_sock_load_cert*() return real error codes * REGTEST: mcli/mcli_show_info: launch a 'show info' on the master CLI * BUG/MEDIUM: mux_pt: Only call the wake emthod if nobody subscribed to receive. * BUG/MEDIUM: mux_pt: Don't destroy the connection if we have a stream attached. * Revert e8826ded5fea3593d89da2be5c2d81c522070995. * BUG/MAJOR: idle conns: schedule the cleanup task on the correct threads * BUG/MEDIUM: mux_pt: Make sure we don't have a conn_stream before freeing. * BUG/MINOR: tcp: Don't alter counters returned by tcp info fetchers * BUG/MINOR: mworker/ssl: close openssl FDs unconditionally * BUG/MINOR: http-htx: Properly set htx flags on error files to support keep-alive * MINOR: version: make the version strings variables, not constants * BUG/MINOR: WURFL: fix send_log() function arguments * BUG/MINOR: mux-h1: Capture ignored parsing errors * BUG/MINOR: mux-h1: Mark the output buffer as full when the xfer is interrupted * BUG/MINOR: chunk: Fix tests on the chunk size in functions copying data * BUG/MEDIUM: htx: Catch chunk_memcat() failures when HTX data are formatted to h1 * BUILD: ssl: wrong #ifdef for SSL engines code * BUG/MINOR: ssl: abort on sni_keytypes allocation failure * BUG/MINOR: ssl: free the sni_keytype nodes * BUG/MINOR: ssl: abort on sni allocation failure * BUG/MEDIUM: applet: always check a fast running applet's activity before killing * MINOR: stats: mention in the help message support for "json" and "typed" * DOC: fix typo in Prometheus exporter doc * DOC: clarify some points around http-send-name-header's behavior * BUG/MEDIUM: cache: make sure not to cache requests with absolute-uri * BUG/MINOR: peers: crash on reload without local peer. * BUG/MEDIUM: mux-h2: do not enforce timeout on long connections * BUILD: ebtree: make eb_is_empty() and eb_is_dup() take a const * MINOR: mux-h2: add a per-connection list of blocked streams * BUG/MINOR: action: do-resolve does not yield on requests with body * BUG/MEDIUM: lua: Store stick tables into the sample's `t` field * BUG/MINOR: lua: Properly initialize the buffer's fields for string samples in hlua_lua2(smp|arg) * BUG/MINOR: stats: Add a missing break in a switch statement- Update to version 2.0.7+git0.1909aa1e: * [RELEASE] Released version 2.0.7 * BUG/MEDIUM: namespace: fix fd leak in master-worker mode * DOC: Fix documentation about the cli command to get resolver stats * BUG/MINOR: contrib/prometheus-exporter: Return the time averages in seconds * MINOR: stats: Add the support of float fields in stats * MINOR: spoe: Support the async mode with several threads * MINOR: spoe: Improve generation of the engine-id * BUG/MEDIUM: spoe: Use a different engine-id per process * BUG/MINOR: mux-h1: Do h2 upgrade only on the first request * BUG/MAJOR: mux_h2: Don't consume more payload than received for skipped frames * BUG/MINOR: mux-h2: Use the dummy error when decoding headers for a closed stream * BUG/MEDIUM: mux-h2: don't reject valid frames on closed streams * BUG/MEDIUM: namespace: close open namespaces during soft shutdown * BUG/MINOR: mux-h2: do not wake up blocked streams before the mux is ready * BUG/MEDIUM: checks: make sure the connection is ready before trying to recv * BUG/MEDIUM: stream-int: Process connection/CS errors during synchronous sends * BUG/MINOR: stream-int: Process connection/CS errors first in si_cs_send() * BUG/MEDIUM: check/threads: make external checks run exclusively on thread 1 * BUG/MAJOR: mux-h2: Handle HEADERS frames received after a RST_STREAM frame * BUG/MINOR: mux-h2: Be sure to have a connection to unsubcribe * BUG/MEDIUM: stick-table: Properly handle "show table" with a data type argument- Update to version 2.0.6+git0.58706ab4: * [RELEASE] Released version 2.0.6 * MINOR: sample: Add UUID-fetch * BUG/MINOR: Missing stat_field_names (since f21d17bb) * BUG/MINOR: backend: Fix a possible null pointer dereference * BUG/MINOR: acl: Fix memory leaks when an ACL expression is parsed * BUG/MINOR: filters: Properly set the HTTP status code on analysis error * BUG/MEDIUM: http: also reject messages where "chunked" is missing from transfer-enoding * BUG/MINOR: ssl: always check for ssl connection before getting its XPRT context * BUG/MINOR: listener: Fix a possible null pointer dereference * MINOR: stats: report the number of idle connections for each server * BUG/MEDIUM: connection: don't keep more idle connections than ever needed * BUG/MAJOR: ssl: ssl_sock was not fully initialized. * BUG/MINOR: lb/leastconn: ignore the server weights for empty servers * MINOR: contrib/prometheus-exporter: Report DRAIN/MAINT/NOLB status for servers * BUG/MINOR: checks: do not uselessly poll for reads before the connection is up * BUG/MINOR: checks: make __event_chk_srv_r() report success before closing * BUG/MINOR: checks: start sending the request right after connect() * BUG/MINOR: checks: stop polling for write when we have nothing left to send * BUG/MEDIUM: cache: Don't cache objects if the size of headers is too big * BUG/MEDIUM: cache: Properly copy headers splitted on several shctx blocks * BUG/MINOR: mux-h1: Be sure to update the count before adding EOM after trailers * BUG/MINOR: mux-h1: Don't stop anymore input processing when the max is reached * BUG/MINOR: mux-h1: Fix size evaluation of HTX messages after headers parsing * BUG/MINOR: h1: Properly reset h1m when parsing is restarted * BUG/MINOR: http-ana: Reset response flags when 1xx messages are handled * BUG/MEDIUM: peers: local peer socket not bound. * BUG/MEDIUM: proto-http: Always start the parsing if there is no outgoing data * BUG/MEDIUM: url32 does not take the path part into account in the returned hash. * BUG/MEDIUM: listener/threads: fix an AB/BA locking issue in delete_listener() * BUG/MINOR: mworker: disable SIGPROF on re-exec * DOC: fixed typo in management.txt * BUG/MEDIUM: mux-h1: do not report errors on transfers ending on buffer full * BUG/MEDIUM: mux-h1: do not truncate trailing 0CRLF on buffer boundary * MEDIUM: debug: make the thread dump code show Lua backtraces * MINOR: lua: export applet and task handlers * MINOR: tools: add append_prefixed_str() * MINOR: debug: indicate the applet name when the task is task_run_applet()- Use %license instead of %doc [bsc#1082318] - Recommend apparmor, it's not required to work (make haproxy useable in a container)- enable prometheus exporter- enable verbose make output- Update to version 2.0.5+git0.d905f49a: * [RELEASE] Released version 2.0.5 * BUG/MEDIUM: mux_pt: Don't call unsubscribe if we did not subscribe. * MINOR: fd: make sure to mark the thread as not stuck in fd_update_events() * BUG/MINOR: stats: Wait the body before processing POST requests * BUG/MEDIUM: lua: Fix test on the direction to set the channel exp timeout * BUG/MEDIUM: mux_h1: Don't bother subscribing in recv if we're not connected. * BUG/MINOR: Fix prometheus '# TYPE' and '# HELP' headers * BUG/MINOR: lua: fix setting netfilter mark * BUG/MEDIUM: proxy: Don't use cs_destroy() when freeing the conn_stream. * BUG/MEDIUM: proxy: Don't forget the SF_HTX flag when upgrading TCP=>H1+HTX. * BUG/MINOR: buffers/threads: always clear a buffer's head before releasing it * MINOR: ssl: ssl_fc_has_early should work for BoringSSL * BUG/MINOR: ssl: fix 0-RTT for BoringSSL * BUG/MEDIUM: stick-table: Wrong stick-table backends parsing. * [RELEASE] Released version 2.0.4 * BUG/MEDIUM: checks: make sure to close nicely when we're the last to speak * BUG/MINOR: mux-h2: always reset rcvd_s when switching to a new frame * BUG/MINOR: mux-h2: always send stream window update before connection's * BUG/MEDIUM: mux-h2: do not recheck a frame type after a state transition * BUG/MINOR: mux-h2: do not send REFUSED_STREAM on aborted uploads * BUG/MINOR: mux-h2: use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data() * BUG/MINOR: mux-h2: don't refrain from sending an RST_STREAM after another one * BUG/MEDIUM: fd: Always reset the polled_mask bits in fd_dodelete(). * BUG/MEDIUM: proxy: Make sure to destroy the stream on upgrade from TCP to H2 * BUG/MEDIUM: mux-h2: split the stream's and connection's window sizes * BUG/MEDIUM: mux-h2: unbreak receipt of large DATA frames * BUG/MINOR: stream-int: also update analysers timeouts on activity * BUG/MAJOR: http/sample: use a static buffer for raw -> htx conversion * BUG/MEDIUM: lb-chash: Ensure the tree integrity when server weight is increased * MINOR: wdt: also consider that waiting in the thread dumper is normal * BUG/MINOR: debug: fix a small race in the thread dumping code- Update to version 2.0.3+git14.0ff395c1 (bsc#1142529) (CVE-2019-14241): * BUG/MAJOR: queue/threads: avoid an AB/BA locking issue in process_srv_queue() * BUG/MINOR: htx: Fix free space addresses calculation during a block expansion * BUG/MINOR: hlua: Only execute functions of HTTP class if the txn is HTTP ready * MINOR: hlua: Add a flag on the lua txn to know in which context it can be used * MINOR: hlua: Don't set request analyzers on response channel for lua actions * BUG/MEDIUM: hlua: Check the calling direction in lua functions of the HTTP class * BUG/MINOR: hlua/htx: Reset channels analyzers when txn:done() is called * DOC: improve the wording in CONTRIBUTING about how to document a bug fix * BUG/MINOR: log: make sure writev() is not interrupted on a file output * BUG/MEDIUM: streams: Don't switch the SI to SI_ST_DIS if we have data to send. * BUG/MEDIUM: lb-chash: Fix the realloc() when the number of nodes is increased * BUILD: threads: add the definition of PROTO_LOCK * BUG/MINOR: proxy: always lock stop_proxy() * BUG/MEDIUM: protocols: add a global lock for the init/deinit stuff * [RELEASE] Released version 2.0.3 * BUG/CRITICAL: http_ana: Fix parsing of malformed cookies which start by a delimiter * BUG/MINOR: http_htx: Support empty errorfiles * BUG/MINOR: http_ana: Be sure to have an allocated buffer to generate an error * BUG/MEDIUM: tcp-checks: do not dereference inexisting conn_stream * BUG/MINOR: mux-h1: Close server connection if input data remains in h1_detach() * BUG/MEDIUM: mux-h1: Trim excess server data at the end of a transaction * BUG/MINOR: checks: do not exit tcp-checks from the middle of the loop * BUG/MINOR: session: Send a default HTTP error if accept fails for a H1 socket * BUG/MINOR: session: Emit an HTTP error if accept fails only for H1 connection * BUG/MINOR: debug: Remove flags CO_FL_SOCK_WR_ENA/CO_FL_SOCK_RD_ENA * DOC: htx: Update comments in HTX files * BUG/MINOR: hlua: Make the function txn:done() HTX aware * BUG/MINOR: cache/htx: Make maxage calculation HTX aware * BUG/MINOR: http_htx: Initialize HTX error messages for TCP proxies * BUG/MINOR: http_fetch: Fix http_auth/http_auth_group when called from TCP rules * BUG/MINOR: backend: do not try to install a mux when the connection failed * BUG/MEDIUM: http/htx: unbreak option http_proxy * BUG/MEDIUM: checks: Don't attempt to receive data if we already subscribed. * BUG/MINOR: dns: remove irrelevant dependency on a client connection * [RELEASE] Released version 2.0.2 * BUG/MEDIUM: threads: cpu-map designating a single thread/process are ignored * BUG/MEDIUM: tcp-check: unbreak multiple connect rules again * BUG/MINOR: mux-pt: do not pretend there's more data after a read0 * BUG/MEDIUM: streams: Don't redispatch with L7 retries if redispatch isn't set. * BUG/MEDIUM: streams: Don't give up if we couldn't send the request. * BUG/MINOR: mux-h1: Correctly report Ti timer when HTX and keepalives are used * BUG/MEDIUM: mux-h1: Don't release h1 connection if there is still data to send * BUG/MAJOR: listener: fix thread safety in resume_listener() * MINOR: task: introduce work lists * BUG/MEDIUM: servers: Fix a race condition with idle connections. * DOC: Fix typos and grammer in configuration.txt * BUG/MEDIUM: da: cast the chunk to string. * BUG/MEDIUM: checks: Don't attempt to read if we destroyed the connection. * BUG/MINOR: server: Be really able to keep "pool-max-conn" idle connections * BUG/MEDIUM: fd/threads: fix excessive CPU usage on multi-thread accept- Update to version 2.0.1+git27.5db881ff: * BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2 * BUG/MEDIUM: servers: Don't forget to set srv_cs to NULL if we can't reuse it. * BUG/MEDIUM: stream-int: Don't rely on CF_WRITE_PARTIAL to unblock opposite si * MINOR: stream-int: Factorize processing done after sending data in si_cs_send() * BUG/MINOR: mux-h1: Don't process input or ouput if an error occurred * BUG/MEDIUM: mux-h1: Handle TUNNEL state when outgoing messages are formatted * BUG/MEDIUM: lb_fas: Don't test the server's lb_tree from outside the lock * BUG/MEDIUM: http/applet: Finish request processing when a service is registered * MINOR: action: Add the return code ACT_RET_DONE for actions * BUG/MINOR: contrib/prometheus-exporter: Don't try to add empty data blocks * MINOR: server: Add "no-tfo" option. * BUG/MEDIUM: sessions: Don't keep an extra idle connection in sessions. * BUG/MEDIUM: servers: Authorize tfo in default-server. * BUG/MEDIUM: connections: Make sure we're unsubscribe before upgrading the mux. * BUG/MINOR: contrib/prometheus-exporter: Respect the reserve when data are sent * BUG/MINOR: hlua/htx: Respect the reserve when HTX data are sent * BUG/MEDIUM: channel/htx: Use the total HTX size in channel_htx_recv_limit() * BUG/MINOR: hlua: Don't use channel_htx_recv_max() * BUG/MINOR: contrib/prometheus-exporter: Don't use channel_htx_recv_max() * BUG/MEDIUM: checks: Make sure the tasklet won't run if the connection is closed. * BUG/MEDIUM: connections: Always call shutdown, with no linger. * BUG/MINOR: mux-h1: Don't return the empty chunk on HEAD responses * BUG/MINOR: mux-h1: Skip trailers for non-chunked outgoing messages * BUG/MEDIUM: checks: unblock signals in external checks * BUG/MEDIUM: mux-h1: Always release H1C if a shutdown for writes was reported * BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL. * BUG/MINOR: mworker/cli: don't output a \n before the response * BUG/MINOR: mux-h1: Make format errors during output formatting fatal * BUG/MEDIUM: mux-h1: Use buf_room_for_htx_data() to detect too large messages * BUG/MEDIUM: proto_htx: Don't add EOM on 1xx informational messages * BUG/MINOR: log: Detect missing sampling ranges in config * BUG/MINOR: memory: Set objects size for pools in the per-thread cache * BUG/MAJOR: mux-h1: Don't crush trash chunk area when outgoing message is formatted * BUG/MINOR: htx: Save hdrs_bytes when the HTX start-line is replaced * BUG/MEDIUM: ssl: Don't do anything in ssl_subscribe if we have no ctx. * BUG/MEDIUM: connections: Always add the xprt handshake if needed. * BUG/MEDIUM: stream_interface: Don't add SI_FL_ERR the state is < SI_ST_CON. * BUG/MINOR: spoe: Fix memory leak if failing to allocate memory * BUG/MEDIUM: mworker/cli: command pipelining doesn't work anymore * BUG/MEDIUM: mworker: don't call the thread and fdtab deinit * BUG/MINOR: mworker-prog: Fix segmentation fault during cfgparse * BUG/MAJOR: sample: Wrong stick-table name parsing in "if/unless" ACL condition. * BUG/MEDIUM: lb_fwlc: Don't test the server's lb_tree from outside the lock * BUG/MEDIUM: mux-h2: Remove the padding length when a DATA frame size is checked * BUG/MEDIUM: mux-h2: Reset padlen when several frames are demux- Correct version line, which should be 2.0.0+git6.- allow the new master socket path in the apparmor profile- Update to version 2.0.0~git6.41dc8432: * BUG/MEDIUM: htx: Fully update HTX message when the block value is changed * MINOR: htx: Add the function htx_change_blk_value_len() * BUG/MEDIUM: compression: Set Vary: Accept-Encoding for compressed responses * BUG/MINOR: mux-h1: Add the header connection in lower case in outgoing messages * BUG/MINOR: lua/htx: Make txn.req_req_* and txn.res_rep_* HTX aware * BUG/MEDIUM: h2/htx: Update data length of the HTX when the cookie list is built- Update to version 2.0.0~git0.ba23630a: - new internal native HTTP representation called HTX, was already in 1.9 and is now enabled by default in 2.0 ; - end-to-end HTTP/2 support including trailers and continuation frames, as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using the H2 preface; - server connection pooling and more advanced reuse, with ALPN protocol negotiation (already in 1.9) ; - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers as well as on the frontend ; - much more scalable multi-threading, which is even enabled by default on platforms where it was successfully tested ; by default, as many threads are started as the number of CPUs haproxy is allowed to run on. This removes a lot of configuration burden in VMs and containers ; - automatic maxconn setting for the process and the frontends, directly based on the number of available FDs (easier configuration in containers and with systemd) ; - logging to stdout for use in containers and systemd (already in 1.9). Logs can now provide micro-second resolution for some events ; - peers now support SSL, declaration of multiple stick-tables directly in the peers section, and synchronization of server names, not just IDs ; - In master-worker mode, the master process now exposes its own CLI and can communicate with all other processes (including the stopping ones), even allowing to connect to their CLI and check their state. It is also possible to start some sidecar programs and monitor them from the master, and the master can automatically kill old processes that survived too many reloads ; - the incoming connections are load-balanced between all threads depending on their load to minimize the processing time and maximize the capacity (already in 1.9) ; - the SPOE connection load-balancing was significantly improved in order to reduce high percentiles of SPOA response time (already in 1.9) ; - the "random" load balancing algorithm and a power-of-two-choices variant were introduced ; - statistics improvements with per-thread counters for certain things, and a prometheus exporter for all our statistics; - lots of debugging help, it's easier to produce a core dump, there are new commands on the CLI to control various things, there is a watchdog to fail cleanly when a thread deadlock or a spinning task are detected, so overall it should provide a better experience in field and less round trips between users and developers (hence less stress during an incident). - all 3 device detection engines are now compatible with multi-threading and can be build-tested without any external dependencies ; - "do-resolve" http-request action to perform a DNS resolution on any, sample, and resolvers now support relying on /etc/resolv.conf to match the local resolver ; - log sampling and balancing : it's now possible to send 1 log every 10 to a server, or to spread the logging load over multiple log servers; - a new SPOA agent (spoa_server) allows to interface haproxy with Python and Lua programs ; - support for Solaris' event ports (equivalent of kqueue or epoll) which will significantly improve the performance there when dealing with numerous connections ; - some warnings are now reported for some deprecated options that will be removed in 2.1. Since 2.0 is long term supported, there's no emergency to convert them, however if you see these warnings, you need to understand that you're among their extremely rare users and just because of this you may be taking risks by keeping them ; - A new SOCKS4 server-side layer was provided ; it allows outgoing connections to be forwarded through a SOCKS4 proxy (such as ssh -D). - priority- and latency- aware server queues : it is possible now to assign priorities to certain requests and/or to give them a time bonus or penalty to refine control of the traffic and be able to engage on SLAs. - internally the architecture was significantly redesigned to allow to further improve performance and make it easier to implement protocols that span over multiple layers (such as QUIC). This work started in 1.9 and will continue with 2.1. - the I/O, applets and tasks now share the same multi-threaded scheduler, giving a much better responsiveness and fairness between all tasks as is visible with the CLI which always responds instantly even under extreme loads (started in 1.9) ; - the internal buffers were redesigned to ease zero-copy operations, so that it is possible to sustain a high bandwidth even when forwarding HTTP/1 to/from HTTP/2 (already in 1.9) ;- Update to version 1.8.20~git0.6fb9fadc: * [RELEASE] Released version 1.8.20 * BUG/MINOR: spoe: Don't systematically wakeup SPOE stream in the applet handler * BUG/MINOR: da: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST() * BUG/MINOR: 51d: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST() * BUG/MEDIUM: thread/http: Add missing locks in set-map and add-acl HTTP rules * BUG/MINOR: acl: properly detect pattern type SMP_T_ADDR * BUG/MEDIUM: maps: only try to parse the default value when it's present * BUG/MAJOR: http_fetch: Get the channel depending on the keyword used * MINOR: skip get_gmtime where tm is unused * BUILD/MINOR: listener: Silent a few signedness warnings. * BUG/MEDIUM: listener: make sure the listener never accepts too many conns * BUG/MEDIUM: listener: use a self-locked list for the dequeue lists * MAJOR: listener: do not hold the listener lock in listener_accept() * BUG/MEDIUM: list: fix incorrect pointer unlocking in LIST_DEL_LOCKED() * BUG/MEDIUM: list: fix again LIST_ADDQ_LOCKED * BUG/MEDIUM: list: correct fix for LIST_POP_LOCKED's removal of last element * MINOR: list: make the delete and pop operations idempotent * BUG/MEDIUM: list: add missing store barriers when updating elements and head * BUG/MEDIUM: list: fix LIST_POP_LOCKED's removal of the last pointer * BUG/MEDIUM: list: fix the rollback on addq in the locked liss * BUG/MEDIUM: lists: Properly handle the case we're removing the first elt. * MINOR: lists: Implement locked variations. * BUG/MINOR: threads: fix the process range of thread masks * BUG/MEDIUM: spoe: Return an error if nothing is encoded for fragmented messages * BUG/MEDIUM: spoe: Queue message only if no SPOE applet is attached to the stream * BUG/MEDIUM: pattern: assign pattern IDs after checking the config validity * BUILD: connection: fix naming of ip_v field * BUILD: use inttypes.h instead of stdint.h * BUG/MEDIUM: peers: fix a case where peer session is not cleanly reset on release. * MINOR: cli: start addresses by a prefix in 'show cli sockets' * BUG/MINOR: cli: correctly handle abns in 'show cli sockets' * BUILD: Makefile: disable shared cache on AIX 5.1 * BUILD: makefile: add _LINUX_SOURCE_COMPAT to build on AIX-51 * BUILD: makefile: fix build of IPv6 header on aix51 * MINOR: tools: make memvprintf() never pass a NULL target to vsnprintf() * BUILD: makefile: work around an old bug in GNU make-3.80 * BUG/MAJOR: checks: segfault during tcpcheck_main * DOC: The option httplog is no longer valid in a backend. * BUG/MEDIUM: ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites * BUG/MINOR: http/counters: fix missing increment of fe->srv_aborts * BUG/MAJOR: stats: Fix how huge POST data are read from the channel * BUG/MAJOR: spoe: Fix initialization of thread-dependent fields * BUG/MEDIUM: threads/fd: do not forget to take into account epoll_fd/pipes * MEDIUM: threads: Use __ATOMIC_SEQ_CST when using the newer atomic API. * BUG/MINOR: ssl: fix warning about ssl-min/max-ver support * BUG/MEDIUM: 51d: fix possible segfault on deinit_51degrees() * BUG/MEDIUM: logs: Only attempt to free startup_logs once. * BUG/MINOR: listener: keep accept rate counters accurate under saturation * BUG/MAJOR: listener: Make sure the listener exist before using it.- Update to version 1.8.19~git0.ebf033b4: * [RELEASE] Released version 1.8.19 * BUG/MINOR: config: Reinforce validity check when a process number is parsed * BUG/MAJOR: stream: avoid double free on unique_id * BUG/MAJOR: spoe: Don't try to get agent config during SPOP healthcheck * BUG/MEDIUM: server: initialize the idle conns list after parsing the config * BUG/MEDIUM: spoe: initialization depending on nbthread must be done last * BUG/MINOR: lua: initialize the correct idle conn lists for the SSL sockets * BUG/MINOR: spoe: do not assume agent->rt is valid on exit * DOC: ssl: Stop documenting ciphers example to use * DOC: ssl: Clarify when pre TLSv1.3 cipher can be used * [RELEASE] Released version 1.8.18 * BUG/MINOR: config: make sure to count the error on incorrect track-sc/stick rules * BUG/MAJOR: spoe: verify that backends used by SPOE cover all their callers' processes * BUG/MAJOR: config: verify that targets of track-sc and stick rules are present * BUG/MINOR: config: fix bind line thread mask validation * BUG/MEDIUM: stream: Don't forget to free s->unique_id in stream_free(). * BUG/MEDIUM: mux-h2: do not close the connection on aborted streams * MINOR: connstream: have a new flag CS_FL_KILL_CONN to kill a connection * MINOR: stream-int: add a new flag to mention that we want the connection to be killed * MINOR: stream-int: expand the flags to 32-bit * BUG/MEDIUM: mux-h2: wait for the mux buffer to be empty before closing the connection * BUG/MEDIUM: mux-h2: make sure never to send GOAWAY on too old streams * BUG/MEDIUM: mux-h2: fix two half-closed to closed transitions * BUG/MEDIUM: mux-h2: wake up flow-controlled streams on initial window update * MINOR: xref: Add missing barriers. * BUG/MINOR: stream: don't close the front connection when facing a backend error * SCRIPTS: add the issue tracker URL to the announce script * SCRIPTS: add the slack channel URL to the announce script * BUG/MINOR: deinit: tcp_rep.inspect_rules not deinit, add to deinit * BUG/MINOR: spoe: corrected fragmentation string size * DOC: nbthread is no longer experimental. * BUG/MINOR: hpack: return a compression error on invalid table size updates * BUG/MINOR: mux-h2: make it possible to set the error code on an already closed stream * BUG/MINOR: mux-h2: headers-type frames in HREM are always a connection error * BUG/MINOR: mux-h2: CONTINUATION in closed state must always return GOAWAY * MINOR: h2: declare new sets of frame types * MINOR: h2: add a bit-based frame type representation * DOC: mention the effect of nf_conntrack_tcp_loose on src/dst * BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages * BUG/MINOR: check: Wake the check task if the check is finished in wake_srv_chk() * BUG/MINOR: server: don't always trust srv_check_health when loading a server state * BUG/MINOR: stick_table: Prevent conn_cur from underflowing * BUG/MINOR: backend: BE_LB_LKUP_CHTREE is a value, not a bit * BUG/MINOR: backend: balance uri specific options were lost across defaults * BUG/MINOR: backend: don't use url_param_name as a hint for BE_LB_ALGO_PH * BUG/MEDIUM: ssl: missing allocation failure checks loading tls key file * DOC: Be a bit more explicit about allow-0rtt security implications. * BUG/MEDIUM: ssl: Disable anti-replay protection and set max data with 0RTT. * BUG/MAJOR: cache: fix confusion between zero and uninitialized cache key * DOC: http-request cache-use / http-response cache-store expects cache name- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615): * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred * BUG/MINOR: lua: bad args are returned for Lua actions * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything * BUG/MEDIUM: cli: make "show sess" really thread-safe * MINOR: stream/cli: report more info about the HTTP messages on "show sess all" * MINOR: stream/cli: fix the location of the waiting flag in "show sess all" * MINOR: lb: allow redispatch when using consistent hash * BUG/MEDIUM: server: Also copy "check-sni" for server templates. * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max * MINOR: mux-h2: only increase the connection window with the first update * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify() * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response() * BUG/MINOR: logs: leave startup-logs global and not per-thread- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102) * DOC: Update configuration doc about the maximum number of stick counters. * BUG: dns: Fix off-by-one write in dns_validate_dns_response() * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response() * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response() * BUG: dns: Prevent out-of-bounds read in dns_read_name() * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name * DOC: refer to check-sni in the documentation of sni * DOC: clarify that check-sni needs an argument. * MINOR: servers: Free [idle|safe|priv]_conns on exit. * MINOR: stats: report the number of active jobs and listeners in "show info" * BUG/MINOR: mux-h2: advertise a larger connection window size * BUG/MINOR: mux-h2: refrain from muxing during the preface * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR. * BUG/MINOR: lb-map: fix unprotected update to server's score * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field * BUG/MINOR: config: Copy default error messages when parsing of a backend starts * BUG/MEDIUM: Make sure stksess is properly aligned. * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic * BUG/MINOR: only mark connections private if NTLM is detected * DOC: cache: Missing information about "total-max-size" * BUG/MINOR: ssl: Wrong usage of shctx_init(). * BUG/MINOR: cache: Wrong usage of shctx_init(). * BUG/MINOR: cache: Crashes with "total-max-size" > 2047(MB). * BUG/MEDIUM: h2: Close connection if no stream is left an GOAWAY was sent. * BUG/MEDIUM: pools: Fix the usage of mmap()) with DEBUG_UAF. * DOC: fix reference to map files in MAINTAINERS * MINOR: peers: use defines instead of enums to appease clang. * MINOR: cfgparse: Write 130 as 128 as 0x82 and 0x80. * MINOR: server: Use memcpy() instead of strncpy(). * CLEANUP: stick-tables: Remove unneeded double (()) around conditional clause * MINOR: lua: all functions calling lua_yieldk() may return * BUG/MEDIUM: threads: make sure threads_want_sync is marked volatile * BUG/MEDIUM: threads: fix thread_release() at the end of the rendez-vous point * BUG/MEDIUM: stream: don't crash on out-of-memory * BUG/MEDIUM: mworker: segfault receiving SIGUSR1 followed by SIGTERM. * BUG/MINOR: checks: queues null-deref * BUG/MEDIUM: Cur/CumSslConns counters not threadsafe. * MEDIUM: ssl: add support for ciphersuites option for TLSv1.3 * BUG/MEDIUM: buffers: Make sure we don't wrap in buffer_insert_line2/replace2. * BUG/MINOR: backend: check that the mux installed properly * BUG/MINOR: connection: avoid null pointer dereference in send-proxy-v2 * DOC: clarify force-private-cache is an option * MINOR: threads: Make sure threads_sync_pipe is initialized before using it.- also fix the systemd case for the apparmor_reload change- only reload the apparmor profile on newer distros, seems older distros do not have apparmor-rpm-macros yet- only use network namespaces on 12.x and newer, failed to build on sle11- guard all parts referring to systemd to fix build on sle 11- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645) * [RELEASE] Released version 1.8.14 * BUG/CRITICAL: hpack: fix improper sign check on the header index value * BUG/MINOR: cli: make sure the "getsock" command is only called on connections * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4 * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list * DOC: Fix typos in lua documentation * BUG/MINOR: server: Crash when setting FQDN via CLI. * BUG/MAJOR: kqueue: Don't reset the changes number by accident. * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors * BUG/MINOR: http/threads: atomically increment the error snapshot ID * BUG/MINOR: dns: check and link servers' resolvers right after config parsing * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs * BUG/MINOR: stream: use atomic increments for the request counter * MINOR: thread: implement HA_ATOMIC_XADD() * BUG/MEDIUM: ECC cert should work with TLS < v1.2 and openssl >= 1.1.1 * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0. * BUG/MAJOR: thread: lua: Wrong SSL context initialization. * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done. * BUG/MEDIUM: lua: reset lua transaction between http requests * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake() * BUG/MINOR: lua: Bad HTTP client request duration. * BUG/MEDIUM: unix: provide a ->drain() function * DOC: Fix spelling error in configuration doc * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates * BUG/MEDIUM: lua: socket timeouts are not applied * DOC: ssl: Use consistent naming for TLS protocols * DOC: dns: explain set server ... fqdn requires resolver * BUG/MINOR: map: fix map_regm with backref * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error. * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle. * BUG/MINOR: ssl: empty connections reported as errors. * BUG/MEDIUM: cli: make "show fd" thread-safe * MEDIUM: hathreads: implement a more flexible rendez-vous point * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point * MINOR: threads: add more consistency between certain variables in no-thread case * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7 * MINOR: threads: Introduce double-width CAS on x86_64 and arm. * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers- Require apparmor-abstractions to reduce dependencies (bsc#1100787)- Update to version 1.8.13~git4.c1bfcd00: * MINOR: dns: new DNS options to allow/prevent IP address duplication * MINOR: dns: fix wrong score computation in dns_get_ip_from_response * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections * BUG/MEDIUM: servers: check the queues once enabling a server * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number * MINOR: threads: move "nbthread" parsing to hathreads.c * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS * BUG/MINOR: threads: Handle nbthread == MAX_THREADS. * BUG/MINOR: config: stick-table is not supported in defaults section * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever * BUG/MEDIUM: threads/sync: use sched_yield when available * BUG/MINOR: servers: Don't make "server" in a frontend fatal. * BUG/MEDIUM: stats: don't ask for more data as long as we're responding * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full * MINOR: h2: add the error code and the max/last stream IDs to "show fd" * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier * MINOR: debug: Add checks for conn_stream flags * MINOR: debug: Add check for CO_FL_WILL_UPDATE * BUG/MINOR: http: Set brackets for the unlikely macro at the right place * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout * BUG/MEDIUM: h2: never leave pending data in the output buffer on close * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess * MINOR: h2: add the mux and demux buffer lengths on "show fd" * MINOR: h2: keep a count of the number of conn_streams attached to the mux * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function * MINOR: h2: implement a basic "show_fd" function * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd" * BUG/MINOR: ssl: properly ref-count the tls_keys entries * MINOR: systemd: consider exit status 143 as successful- Update to version 1.8.12~git0.8a200c71: * MINOR: stick-tables: make stktable_release() do nothing on NULL * BUG/MAJOR: stick_table: Complete incomplete SEGV fix- Update to version 1.8.11~git0.1d6ef58d: * BUG/BUILD: threads: unbreak build without threads * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table- Update to version 1.8.10~git0.ec17d7a9: * MINOR: threads: Be sure to remove threads from all_threads_mask on exit * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete(). * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot * BUG/MAJOR: ssl: Random crash with cipherlist capture * BUG/MINOR: lua: Segfaults with wrong usage of types. * BUG/MAJOR: map: fix a segfault when using http-request set-map * MINOR: lua: Increase debug information * BUG/MINOR: signals: ha_sigmask macro for multithreading * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing * BUG/MEDIUM: threads: handle signal queue only in thread 0 * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload. * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0 * BUG/MEDIUM: lua/socket: Buffer error, may segfault * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock * BUG/MEDIUM: lua/socket: Notification error * BUG/MAJOR: lua: Dead lock with sockets * BUG/MEDIUM: lua/socket: wrong scheduling for sockets * MINOR: task/notification: Is notifications registered ? * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters * BUG/MEDIUM: lua/socket: Length required read doesn't work * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.- Update to version 1.8.9~git9.6d82e611: * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469) * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure. * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags * BUG/MEDIUM: spoe: Flags are not encoded in network order * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments. * BUG/MINOR: spoe: Mistake in error message about SPOE configuration * BUG/MEDIUM: ssl: properly protect SSL cert generation * BUG/MEDIUM: pollers: Use a global list for fd shared between threads. * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR * BUG/MINOR: lua: ensure large proxy IDs can be represented * BUG/MINOR: lua: schedule socket task upon lua connect() * BUG/MEDIUM: task: Don't free a task that is about to be run. * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped * DOC/MINOR: clean up LUA documentation re: servers & array/table. * BUG/MINOR: lua: Put tasks to sleep when waiting for data * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads * BUG/MINOR: checks: Fix check->health computation for flapping servers * BUG/MINOR: config: disable http-reuse on TCP proxies * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads * MINOR: h2: detect presence of CONNECT and/or content-length * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits * BUG/MINOR: log: t_idle (%Ti) is not set for some requests * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()- Update to version 1.8.8: * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837) * MINOR: cli: Ensure the CLI always outputs an error when it should * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors. * BUG/MINOR: http: Return an error in proxy mode when url2sa fails * BUG/MEDIUM: connection: Make sure we have a mux before calling detach(). * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes- Update to version 1.8.7: * [RELEASE] Released version 1.8.7 * MINOR: servers: Support alphanumeric characters for the server templates names * BUG/MAJOR: cache: always initialize newly created objects * [RELEASE] Released version 1.8.6 * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks * BUG/MINOR: fd: Don't clear the update_mask in fd_insert. * BUG/MINOR: cache: fix "show cache" output * BUG/MINOR: email-alert: Set the mailer port during alert initialization * BUG/MINOR: checks: check the conn_stream's readiness and not the connection * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked * BUILD/MINOR: threads: always export thread_sync_io_handler() * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error * BUG/MEDIUM: h2/threads: never release the task outside of the task handler * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy() * MINOR: h2: always call h2s_detach() in h2_detach() * BUG/MAJOR: h2: remove orphaned streams from the send list before closing * MINOR: h2: provide and use h2s_detach() and h2s_free() * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close() * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert * BUILD/MINOR: cli: fix a build warning introduced by last commit * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown" * BUILD/MINOR: fix build when USE_THREAD is not defined * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values * BUG/MINOR: lua: the function returns anything- Update to version 1.8.5: * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM * BUG/MEDIUM: h2: properly account for DATA padding in flow control * DOC: don't suggest using http-server-close * DOC: log: more than 2 log servers are allowed * BUILD/BUG: enable -fno-strict-overflow by default * MINOR: log: stop emitting alerts when it's not possible to write on the socket * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue * BUG/MINOR: tcp-check: use the server's service port as a fallback * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers * BUG/MINOR: lua: return bad error messages * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments * BUG/MINOR: seemless reload: Fix crash when an interface is specified. * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping * BUG/MINOR: force-persist and ignore-persist only apply to backends * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd" * BUG/MEDIUM: h2: also arm the h2 timeout when sending * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list. * BUG/MINOR: session: Fix tcp-request session failure if handshake. * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file * MINOR: systemd: Add SystemD's Protect*= options to the unit file * MINOR: systemd: Add section for SystemD sandboxing to unit file * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers * MINOR: stats: display the number of threads in the statistics. * BUG/MINOR: h2: Set the target of dbuf_wait to h2c * MINOR: debug/pools: make DEBUG_UAF also detect underflows * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF * DOC: cfgparse: Warn on option (tcp|http)log in backend * DOC: lua: new prototype for function "register_action()" * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken. * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable. * BUG/MINOR: threads: fix missing thread lock labels for 1.8- if we lock down the permissions the home directory has to be owned by haproxy (bsc#1077716)- Avoid %__-type macro indirections. Remove redundant %clean section. Do not ignore errors from useradd.- Ensure haproxy home directory is not world readable (bsc#1077716)- Update to version 1.8.4 (bsc#1080069): * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured * DOC: Mention -Ws in the list of available options * DOC: Describe routing impact of using interface keyword on bind lines * MINOR: init: emit warning when -sf/-sd cannot parse argument * BUG/MEDIUM: standard: Fix memory leak in str2ip2() * BUG/MINOR: time/threads: ensure the adjusted time is always correct * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs * BUG/MINOR: threads: Update labels array because of changes in lock_label enum * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs * CLEANUP: Fix typo in ARGT_MSK6 comment * BUG/MINOR: sample: Fix output type of c_ipv62ip * CLEANUP: sample: Fix outdated comment about sample casts functions * CLEANUP: sample: Fix comment encoding of sample.c * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag * BUG/MINOR: threads: always set an owner to the thread_sync pipe * MINOR: threads: Fix build when we're not compiling with threads. * BUG/MINOR: mworker: only write to pidfile if it exists * BUG/MEDIUM: threads/mworker: fix a race on startup * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread * MINOR: fd: add a bitmask to indicate that an FD is known by the poller * BUG/MEDIUM: fd: maintain a per-thread update mask * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache * MINOR: global: add some global activity counters to help debugging * MINOR: threads: add a MAX_THREADS define instead of LONGBITS * MINOR: global/threads: move cpu_map at the end of the global struct * MINOR: servers: Don't report duplicate dyncookies for disabled servers. * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely. * BUG/MINOR: poll: too large size allocation for FD events * CONTRIB: debug: fix a few flags definitions * DOC: clarify the scope of ssl_fc_is_resumed * BUG/MEDIUM: stream: properly handle client aborts during redispatch * BUILD/MINOR: ancient gcc versions atomic fix * BUG/MEDIUM: mworker: execvp failure depending on argv[0] * MINOR: dns: Handle SRV record weight correctly. * BUG/MINOR: lua: Fix return value of Socket.settimeout * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect * DOC: lua: Fix typos in comments of hlua_socket_receive * BUG/MINOR: lua: Fix default value for pattern in Socket.receive * BUG/MEDIUM: ssl: cache doesn't release shctx blocks * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames- Add dependency on apparmor-profiles (bsc#1079985)- Update to version 1.8.3: * [RELEASE] Released version 1.8.3 * MEDIUM: h2: prepare a graceful shutdown when the frontend is stopped * BUG/MAJOR: hpack: don't return direct references to the dynamic headers table * BUG/MEDIUM: http: don't automatically forward request close * MINOR: don't close stdio anymore * BUG/MEDIUM: mworker: don't close stdio several time * BUG/MEDIUM: h2: ensure we always know the stream before sending a reset * DOC/MINOR: configuration: typo, formatting fixes * BUG/MEDIUM: h2: improve handling of frames received on closed streams * BUG/MEDIUM: h2: properly handle and report some stream errors- Update to version 1.8.2: * [RELEASE] Released version 1.8.2 * BUG/MEDIUM: checks: properly set servers to stopping state on 404 * BUG/MAJOR: connection: refine the situations where we don't send shutw() * BUG/MEDIUM: cache: don't cache the response on no-cache="set-cookie" * BUG/MEDIUM: cache: respect the request cache-control header * BUG/MEDIUM: cache: replace old object on store * BUG/MEDIUM: cache: do not try to retrieve host-less requests from the cache * MINOR: http: add a function to check request's cache-control header field * BUG/MINOR: cache: do not force the TX_CACHEABLE flag before checking cacheability * BUG/MINOR: http: properly detect max-age=0 and s-maxage=0 in responses * BUG/MINOR: http: do not ignore cache-control: public * MINOR: http: start to compute the transaction's cacheability from the request * MINOR: http: update the list of cacheable status codes as per RFC7231 * MINOR: http: adjust the list of supposedly cacheable methods * BUG/MEDIUM: lua: fix crash when using bogus mode in register_service() * BUG/MEDIUM: checks: a server passed in maint state was not forced down. * MEDIUM: netscaler: add support for standard NetScaler CIP protocol * MEDIUM: netscaler: do not analyze original IP packet size * MINOR: netscaler: check in one-shot if buffer is large enough for IP and TCP header * BUG/MEDIUM: stream: don't consider abortonclose on muxes which close cleanly * MINOR: stream-int: set flag SI_FL_CLEAN_ABRT when mux supports clean aborts * MINOR: mux: add flags to describe a mux's capabilities * BUG/MINOR: h2: properly report a stream error on RST_STREAM * CONTRIB: halog: Fix compiler warnings in halog.c * CONTRIB: iprange: Fix compiler warning in iprange.c * BUG/MAJOR: netscaler: address truncated CIP header detection * BUG/MEDIUM: netscaler: use the appropriate IPv6 header size * MINOR: netscaler: rename cip_len to clarify its uage * MINOR: netscaler: remove the use of cip_magic only used once * MINOR: netscaler: respect syntax * DOC/MINOR: intro: typo, wording, formatting fixes * BUG/MEDIUM: mworker: Set FD_CLOEXEC flag on log fd * BUILD/MINOR: Makefile : enabling USE_CPU_AFFINITY * BUG: MINOR: http: don't check http-request capture id when len is provided * BUG: MAJOR: lb_map: server map calculation broken * BUG/MINOR: stream-int: don't try to receive again after receiving an EOS * BUG/MEDIUM: h2: fix stream limit enforcement * BUG/MEDIUM: http: don't disable lingering on requests with tunnelled responses * BUG/MEDIUM: h2: don't close after the first DATA frame on tunnelled responses * BUG/MEDIUM: h2: don't switch the state to HREM before end of DATA frame * MINOR: h2: don't demand that a DATA frame is complete before processing it * BUG/MEDIUM: h2: support uploading partial DATA frames * MINOR: h2: store the demux padding length in the h2c struct * BUG/MEDIUM: h2: debug incoming traffic in h2_wake() * BUG/MEDIUM: h2: work around a connection API limitation * BUG/MEDIUM: h2: enable recv polling whenever demuxing is possible * BUG/MEDIUM: h2: automatically set CS_FL_RCV_MORE when the output buffer is full * BUG/MEDIUM: stream-int: always set SI_FL_WAIT_ROOM on CS_FL_RCV_MORE * MINOR: conn_stream: add new flag CS_FL_RCV_MORE to indicate pending data * BUG/MEDIUM: lua/notification: memory leak * DOC: notifications: add precisions about thread usage * MINOR: systemd: remove comment about HAPROXY_STATS_SOCKET * BUG/MEDIUM: threads/vars: Fix deadlock in register_name * BUG/MEDIUM: email-alert: don't set server check status from a email-alert task * CONTRIB: halog: Add help text for -s switch in halog program * MINOR: mworker: Improve wording in `void mworker_wait()` * MINOR: mworker: Update messages referencing exit-on-failure * BUG/MEDIUM: h2: fix handling of end of stream again * BUG/MEDIUM: peers: set NOLINGER on the outgoing stream interface * BUG/MEDIUM: checks: a down server going to maint remains definitely stucked on down state. * BUG/MEDIUM: ssl engines: Fix async engines fds were not considered to fix fd limit automatically. * BUG/MEDIUM: mworker: also close peers sockets in the master * BUG/MINOR: ssl: support tune.ssl.cachesize 0 again * BUG/MAJOR: hpack: don't pretend large headers fit in empty table * BUG/MINOR: action: Don't check http capture rules when no id is defined- Update to version 1.8.1 (bsc#1069954): * BUG/MAJOR: h2: correctly check the request length when building an H1 request * BUG/MAJOR: thread: Be sure to request a sync between threads only once at a time * BUG/MAJOR: thread/peers: fix deadlock on peers sync. * BUG/MEDIUM: h2: do not accept upper case letters in request header names * BUG/MEDIUM: h2: remove connection-specific headers from request * BUG/MEDIUM: h2: enforce the per-connection stream limit * BUG/MEDIUM: checks: Be sure we have a mux if we created a cs. * BUG/MEDIUM: peers: fix some track counter rules dont register entries for sync. * BUG/MEDIUM: h2: don't report an error after parsing a 100-continue response * BUG/MEDIUM: threads/peers: decrement, not increment jobs on quitting * BUG/MEDIUM: stream: fix session leak on applet-initiated connections * BUG/MEDIUM: cache: bad computation of the remaining size * BUG/MEDIUM: ssl: don't allocate shctx several time * BUG/MEDIUM: tcp-check: Don't lock the server in tcpcheck_main * BUG/MEDIUM: kqueue: Don't bother closing the kqueue after fork. * BUG/MINOR: h2: use the H2_F_DATA_* macros for DATA frames * BUG/MINOR: h2: reject response pseudo-headers from requests * BUG/MINOR: h2: properly check PRIORITY frames * BUG/MINOR: h2: reject incorrect stream dependencies on HEADERS frame * BUG/MINOR: h2: do not accept SETTINGS_ENABLE_PUSH other than 0 or 1 * BUG/MINOR: h2: the TE header if present may only contain trailers * BUG/MINOR: h2: fix a typo causing PING/ACK to be responded to * BUG/MINOR: h2: ":path" must not be empty * BUG/MINOR: h2: try to abort closed streams as soon as possible * BUG/MINOR: h2: immediately close if receiving GOAWAY after the last stream * BUG/MINOR: hpack: dynamic table size updates are only allowed before headers * BUG/MINOR: hpack: reject invalid header index * BUG/MINOR: hpack: must reject huffman literals padded with more than 7 bits * BUG/MINOR: hpack: fix debugging output of pseudo header names * BUG/MINOR: mworker: detach from tty when in daemon mode * BUG/MINOR: mworker: fix validity check for the pipe FDs * BUG/MINOR: ssl: CO_FL_EARLY_DATA removal is managed by stream- License is now GPL-3.0+ and LGPL-2.1+- [apparmor]: allow haproxy to restart itself. needed for seamless restart. also reload the apparmor profile on update.- enable network namespaces on 42.3 - Enabled systemd notify mode: new BR: pkgconfig(libsystemd) This fixes problems with starting 1.8 on 42.3. - apply build option changes as adviced by upstream- Update to version 1.8.0 (bsc#1069954): https://www.mail-archive.com/haproxy@formilux.org/msg28004.html- Update to version 1.7.9: * BUG/MINOR: peers: peer synchronization issue (with several peers sections). * BUG/MINOR: lua: In error case, the safe mode is not removed * BUG/MINOR: lua: executes the function destroying the Lua session in safe mode * BUG/MAJOR: lua/socket: resources not detroyed when the socket is aborted * BUG/MEDIUM: lua: bad memory access * DOC: update the list of OpenSSL versions in the README * DOC: Updated 51Degrees git URL to point to a stable version. * BUG/MINOR: http: Set the response error state in http_sync_res_state * MINOR: http: Reorder/rewrite checks in http_resync_states * MINOR: http: Switch requests/responses in TUNNEL mode only by checking txn flags * BUG/MEDIUM: http: Switch HTTP responses in TUNNEL mode when body length is undefined * BUG/MAJOR: http: Fix possible infinity loop in http_sync_(req|res)_state * BUG/MINOR: lua: Fix Server.get_addr() port values * BUG/MINOR: lua: Correctly use INET6_ADDRSTRLEN in Server.get_addr() * BUG/MINOR: lua: always detach the tcp/http tasks before freeing them * BUG/MINOR: lua: Fix bitwise logic for hlua_server_check_* functions.- Update to version 1.7.8: * BUG/MINOR: stream: flag TASK_WOKEN_RES not set if task in runqueue * BUG/MAJOR: cli: fix custom io_release was crushed by NULL. * BUG/MAJOR: map: fix segfault during 'show map/acl' on cli. * BUG/MAJOR: compression: Be sure to release the compression state in all cases * DOC: fix references to the section about time format. * BUG/MEDIUM: map/acl: fix unwanted flags inheritance. * BUG/MINOR: stream: Don't forget to remove CF_WAKE_ONCE flag on response channel * BUG/MINOR: http: Don't reset the transaction if there are still data to send * BUG/MEDIUM: filters: Be sure to call flt_end_analyze for both channels * BUG/MINOR: http: properly handle all 1xx informational responses- Update to version 1.7.7: * BUG/MINOR: Wrong peer task expiration handling during synchronization processing. * BUG/MEDIUM: http: Drop the connection establishment when a redirect is performed * BUG/MEDIUM: cfgparse: Check if tune.http.maxhdr is in the range 1..32767 * DOC: fix references to the section about the unix socket * BUG/MINOR: log: pin the front connection when front ip/ports are logged- Update to version 1.7.6: * DOC: changed "block"(deprecated) examples to http-request deny * DOC: add few comments to examples. * DOC: update sample code for PROXY protocol * DOC: mention lighttpd 1.4.46 implements PROXY * DOC: stick-table is available in frontend sections * BUG/MINOR: dns: Wrong address family used when creating IPv6 sockets. * BUG/MINOR: config: missing goto out after parsing an incorrect ACL character * BUG/MINOR: arg: don't try to add an argument on failed memory allocation * BUG/MEDIUM: arg: ensure that we properly unlink unresolved arguments on error * BUG/MEDIUM: acl: don't free unresolved args in prune_acl_expr() * MINOR: lua: ensure the memory allocator is used all the time * CLEANUP: logs: typo: simgle => single * BUG/MEDIUM: acl: proprely release unused args in prune_acl_expr() * BUG/MAJOR: Use -fwrapv. * BUG/MINOR: server: don't use "proxy" when px is really meant. * BUG/MINOR: server: missing default server 'resolvers' setting duplication. * DOC: add layer 4 links/cross reference to "block" keyword. * DOC: errloc/errorloc302/errorloc303 missing status codes. * BUG/MEDIUM: lua: memory leak * MEDIUM: config: don't check config validity when there are fatal errors * BUG/MINOR: hash-balance-factor isn't effective in certain circumstances * MINOR/DOC: lua: just precise one thing * BUG/MINOR: http: Fix conditions to clean up a txn and to handle the next request * DOC: update RFC references * BUG/MINOR: checks: don't send proxy protocol with agent checks * BUG/MEDIUM: lua: segfault if a converter or a sample doesn't return anything * BUG/MAJOR: http: call manage_client_side_cookies() before erasing the buffer * BUG/MINOR: buffers: Fix bi/bo_contig_space to handle full buffers * BUG/MINOR: acls: Set the right refflag when patterns are loaded from a map * BUG/MINOR: http/filters: Be sure to wait if a filter loops in HTTP_MSG_ENDING * BUG/MEDIUM: peers: Peers CLOSE_WAIT issue. * BUG/MAJOR: server: Segfault after parsing server state file. * BUG/MEDIUM: unix: never unlink a unix socket from the file system- Update to version 1.7.5: * BUG/MEDIUM: peers: fix buffer overflow control in intdecode. * BUG/MEDIUM: buffers: Fix how input/output data are injected into buffers * BUG/MEDIUM: http: Fix blocked HTTP/1.0 responses when compression is enabled * BUG/MINOR: filters: Don't force the stream's wakeup when we wait in flt_end_analyze * MINOR: config parsing: add warning when log-format/tcplog/httplog is overriden in "defaults" sections- Update to version 1.7.4: * MINOR: config: warn when some HTTP rules are used in a TCP proxy * BUG/MINOR: spoe: Fix soft stop handler using a specific id for spoe filters * BUG/MINOR: spoe: Fix parsing of arguments in spoe-message section * BUG/MEDIUM: ssl: Clear OpenSSL error stack after trying to parse OCSP file * BUG/MEDIUM: cli: Prevent double free in CLI ACL lookup * BUG/MINOR: Fix "get map " CLI command * BUG/MAJOR: connection: update CO_FL_CONNECTED before calling the data layer * BUG/MEDIUM: ssl: switchctx should not return SSL_TLSEXT_ERR_ALERT_WARNING * BUG/MINOR: checks: attempt clean shutw for SSL check * BUG/MEDIUM: listener: do not try to rebind another process' socket * BUG/MEDIUM: filters: Fix channels synchronization in flt_end_analyze * BUG/MAJOR: stream-int: do not depend on connection flags to detect connection * BUG/MEDIUM: connection: ensure to always report the end of handshakes * BUG: payload: fix payload not retrieving arbitrary lengths * BUG/MAJOR: http: fix typo in http_apply_redirect_rule * BUG/MEDIUM: stream: fix client-fin/server-fin handling * MINOR: fd: add a new flag HAP_POLL_F_RDHUP to struct poller * BUG/MINOR: raw_sock: always perfom the last recv if RDHUP is not available * DOC/MINOR: Fix typos in proxy protocol doc * DOC: Protocol doc: add checksum, TLV type ranges * DOC: Protocol doc: add SSL TLVs, rename CHECKSUM * DOC: Protocol doc: add noop TLV * MEDIUM: global: add a 'hard-stop-after' option to cap the soft-stop time * BUG/MINOR: cfgparse: loop in tracked servers lists not detected by check_config_validity(). * MINOR: server: irrelevant error message with 'default-server' config file keyword. * MINOR: doc: fix use-server example (imap vs mail) * BUG/MEDIUM: tcp: don't require privileges to bind to device- Update to version 1.7.3: * BUG/MINOR: stream: Fix how backend-specific analyzers are set on a stream * BUG/MEDIUM: tcp: don't poll for write when connect() succeeds * BUG/MINOR: unix: fix connect's polling in case no data are scheduled * BUG/MINOR: lua: Map.end are not reliable because "end" is a reserved keyword * MINOR: dns: give ability to dns_init_resolvers() to close a socket when requested * BUG/MAJOR: dns: restart sockets after fork() * MINOR: chunks: implement a simple dynamic allocator for trash buffers * BUG/MEDIUM: http: prevent redirect from overwriting a buffer * BUG/MEDIUM: filters: Do not truncate HTTP response when body length is undefined * BUG/MEDIUM: http: Prevent replace-header from overwriting a buffer * BUG/MINOR: http: Return an error when a replace-header rule failed on the response * BUG/MINOR: sendmail: The return of vsnprintf is not cleanly tested * BUG/MAJOR: lua segmentation fault when the request is like 'GET ?arg=val HTTP/1.1' * BUG/MEDIUM: config: reject anything but "if" or "unless" after a use-backend rule * MINOR: http: don't close when redirect location doesn't start with "/"- Update to version 1.7.2 (bsc#1023141): * BUG/MEDIUM: lua: In some case, the return of sample-fetches is ignored (2) * BUG/MINOR: stream-int: automatically release SI_FL_WAIT_DATA on SHUTW_NOW * DOC: lua: documentation about time parser functions * DOC: lua: section declared twice * BUG/MINOR: lua/cli: bad error message * DOC: fix small typo in fe_id (backend instead of frontend) * BUG/MINOR: Fix the sending function in Lua's cosocket * BUG/MINOR: lua: memory leak executing tasks * BUG/MINOR: lua: bad return code * BUG/MEDIUM: ssl: properly reset the reused_sess during a forced handshake * BUG/MEDIUM: ssl: avoid double free when releasing bind_confs * BUG/MINOR: stats: fix be/sessions/current out in typed stats * BUG/MINOR: backend: nbsrv() should return 0 if backend is disabled * BUG/MEDIUM: ssl: for a handshake when server-side SNI changes * BUG/MINOR: systemd: potential zombie processes * DOC: Add timings events schemas * BUG/MINOR: option prefer-last-server must be ignored in some case * MINOR: stats: Support "select all" for backend actions * BUG/MINOR: sample-fetches/stick-tables: bad type for the sample fetches sc*_get_gpt0 * BUG/MAJOR: channel: Fix the definition order of channel analyzers * BUG/MINOR: http: report real parser state in error captures * BUG/MAJOR: http: fix risk of getting invalid reports of bad requests * MINOR: http: custom status reason. * MINOR: connection: add sample fetch "fc_rcvd_proxy" * BUG/MINOR: config: emit a warning if http-reuse is enabled with incompatible options * BUG/MINOR: tools: fix off-by-one in port size check * BUG/MEDIUM: server: consider AF_UNSPEC as a valid address family * MEDIUM: server: split the address and the port into two different fields * MINOR: tools: make str2sa_range() return the port in a separate argument * MINOR: server: take the destination port from the port field, not the addr * MEDIUM: server: disable protocol validations when the server doesn't resolve * BUG/MEDIUM: tools: do not force an unresolved address to AF_INET:0.0.0.0 * BUG/MINOR: ssl: EVP_PKEY must be freed after X509_get_pubkey usage * MINOR: proto_http.c 502 error txt typo. * DOC: add deprecation notice to "block" * BUG/MINOR: Reset errno variable before calling strtol(3)- Update to version 1.7.1: * BUG/MAJOR: stream: fix session abort on resource shortage * BUG/MINOR: cli: allow the backslash to be escaped on the CLI * BUG/MEDIUM: cli: fix "show stat resolvers" and "show tls-keys" * DOC: Fix map table's format * DOC: Added 51Degrees conv and fetch functions to documentation. * BUG/MINOR: http: don't send an extra CRLF after a Set-Cookie in a redirect * DOC: mention that req_tot is for both frontends and backends * BUG/MEDIUM: variables: some variable name can hide another ones * BUG/MINOR: stats: fix be/sessions/max output in html stats * MINOR: proxy: Add fe_name/be_name fetchers next to existing fe_id/be_id * DOC: lua: Documentation about some entry missing * MINOR: Do not forward the header "Expect: 100-continue" when the option http-buffer-request is set * DOC: Add undocumented argument of the trace filter * DOC: Fix some typo in SPOE documentation * BUG/MINOR: cli: be sure to always warn the cli applet when input buffer is full * MINOR: applet: Count number of (active) applets * MINOR: task: Rename run_queue and run_queue_cur counters * BUG/MEDIUM: stream: Save unprocessed events for a stream * BUG/MAJOR: Fix how the list of entities waiting for a buffer is handled * BUILD/MEDIUM: Fixing the build using LibreSSL * [RELEASE] Released version 1.7.1- Update to version 1.7.0: * BUG/MEDIUM: proxy: return "none" and "unknown" for unknown LB algos * BUG/MINOR: stats: make field_str() return an empty string on NULL * BUG/MEDIUM: http: Fix tunnel mode when the CONNECT method is used * BUG/MINOR: http: Keep the same behavior between 1.6 and 1.7 for tunneled txn * BUG/MINOR: filters: Protect args in macros HAS_DATA_FILTERS and IS_DATA_FILTER * BUG/MINOR: filters: Invert evaluation order of HTTP_XFER_BODY and XFER_DATA analyzers * BUG/MINOR: http: Call XFER_DATA analyzer when HTTP txn is switched in tunnel mode- Update to version 1.6.10: * BUG/MEDIUM: systemd-wrapper: return correct exit codes * BUG/MEDIUM: srv-state: properly restore the DRAIN state * BUG/MINOR: srv-state: allow to have both CMAINT and FDRAIN flags * BUG/MEDIUM: servers: properly propagate the maintenance states during startup * BUG: vars: Fix 'set-var' converter because of a typo * BUG/MEDIUM: channel: bad unlikely macro * CLEANUP: lua: move comment * CLEANUP: lua: control executed twice * CLEANUP: ssl: Fix bind keywords name in comments * DOC: ssl: Use correct wording for ca-sign-pass * BUG/MINOR: stick-table: handle out-of-memory condition gracefully * BUG/MEDIUM: connection: check the control layer before stopping polling * BUG/MEDIUM: stick-table: fix regression caused by recent fix for out-of-memory * CONTRIB: initiate a debugging suite to make debugging easier * BUG/MINOR: cli: properly decrement ref count on tables during failed dumps * BUG/MEDIUM: lua: In some case, the return of sample-fetche is ignored- Update to version 1.6.9+git.1477940904.ab45181 (fate#321723) * BUILD: poll: remove unused hap_fd_isset() which causes a warning with clang * MINOR: cfgparse: few memory leaks fixes. * MINOR: build: Allow linking to device-atlas library file * DOC: Fix typo in description of `-st` parameter in man page * BUG/MEDIUM: peers: on shutdown, wake up the appctx, not the stream * BUG/MEDIUM: peers: fix use after free in peer_session_create() * BUG/MEDIUM: systemd: let the wrapper know that haproxy has completed or failed * MINOR: systemd: report it when execve() fails * BUG/MINOR: systemd: check return value of calloc() * BUG/MINOR: systemd: always restore signals before execve() * BUG/MINOR: systemd: make the wrapper return a non-null status code on error * BUG/MINOR: ssl: prevent multiple entries for the same certificate * BUG/MINOR: ssl: Check malloc return code * BUG/MINOR: vars: smp_fetch_var() doesn't depend on HTTP but on the session * BUG/MINOR: vars: make smp_fetch_var() more robust against misuses * BUG/MINOR: vars: use sess and not s->sess in action_store() * MEDIUM: make SO_REUSEPORT configurable * MINOR: Add fe_req_rate sample fetch * MINOR: show Running on zlib version * MINOR: show Built with PCRE version * BUG/MINOR: displayed PCRE version is running release- Update to 1.6.9 (bsc#1003264) - MINOR: cli: allow the semi-colon to be escaped on the CLI - BUG/MINOR: payload: fix SSLv2 version parser - BUG/MAJOR: stream: properly mark the server address as unset on connect retry - DOC: Updated 51Degrees readme. - BUG/MAJOR: stick-counters: possible crash when using sc_trackers with wrong table - BUG/MINOR: peers: empty chunks after a resync. - BUG/MINOR: peers: some updates are pushed twice after a resync. - MINOR: sample: use smp_make_rw() in upper/lower converters - BUG/MEDIUM: stick-table: properly convert binary samples to keys - BUG/MEDIUM: stick-tables: do not fail on string keys with no allocated size - BUG/MAJOR: server: the "sni" directive could randomly cause trouble - MINOR: sample: provide smp_is_rw() and smp_make_rw() - MINOR: sample: implement smp_is_safe() and smp_make_safe() - BUG/MEDIUM: samples: make smp_dup() always duplicate the sample - BUG/MAJOR: compression: initialize avail_in/next_in even during flush - BUILD: make proto_tcp.c compatible with musl library - DOC: minor typo fixes to improve HTML parsing by haproxy-dconv - BUG/MEDIUM: stream-int: completely detach connection on connect error - BUG/MEDIUM: lua: somme HTTP manipulation functions are called without valid requests - DOC: lua: remove old functions - BUG/MINOR: peers: Fix peers data decoding issue - BUG/MEDIUM: lua: the function txn_done() from action wrapper can crash - BUG/MEDIUM: lua: the function txn_done() from sample fetches can crash- update to 1.6.7 - MINOR: new function my_realloc2 = realloc + free upon failure - CLEANUP: fixed some usages of realloc leading to memory leak - Revert "BUG/MINOR: ssl: fix potential memory leak in ssl_sock_load_dh_params()" - BUG/MEDIUM: dns: fix alignment issues in the DNS response parser - BUG/MINOR: Fix endiness issue in DNS header creation code - changes from 1.6.6 - BUG/MAJOR: fix listening IP address storage for frontends - BUG/MINOR: fix listening IP address storage for frontends (cont) - DOC: Fix typo so fetch is properly parsed by Cyril's converter - BUG/MAJOR: http: fix breakage of "reqdeny" causing random crashes - BUG/MEDIUM: stick-tables: fix breakage in table converters - BUG/MEDIUM: dns: unbreak DNS resolver after header fix - BUILD: fix build on Solaris 11 - CLEANUP: connection: fix double negation on memcmp() - BUG/MEDIUM: stats: show servers state may show an servers from another backend - BUG/MEDIUM: fix risk of segfault with "show tls-keys" - BUG/MEDIUM: sticktables: segfault in some configuration error cases - BUG/MEDIUM: lua: converters doesn't work - BUG/MINOR: http: add-header: header name copied twice - BUG/MEDIUM: http: add-header: buffer overwritten - BUG/MINOR: ssl: fix potential memory leak in ssl_sock_load_dh_params() - BUG/MINOR: http: url32+src should use the big endian version of url32 - BUG/MINOR: http: url32+src should check cli_conn before using it - DOC: http: add documentation for url32 and url32+src - BUG/MINOR: fix http-response set-log-level parsing error - MINOR: systemd: Use variable for config and pidfile paths - MINOR: systemd: Perform sanity check on config before reload (cherry picked from commit 68535bddf305fdd22f1449a039939b57245212e7) - BUG/MINOR: init: always ensure that global.rlimit_nofile matches actual limits - BUG/MINOR: init: ensure that FD limit is raised to the max allowed - BUG/MEDIUM: external-checks: close all FDs right after the fork() - BUG/MAJOR: external-checks: use asynchronous signal delivery - BUG/MINOR: external-checks: do not unblock undesired signals - BUILD/MEDIUM: rebuild everything when an include file is changed - BUILD/MEDIUM: force a full rebuild if some build options change - BUG/MINOR: srv-state: fix incorrect output of state file - BUG/MINOR: ssl: close ssl key file on error - BUG/MINOR: http: fix misleading error message for response captures - BUG/BUILD: don't automatically run "make" on "make install" - DOC: add missing doc for http-request deny [deny_status ] - drop patches which were pulled from git before 0001-BUG-MAJOR-fix-listening-IP-address-storage-for-front.patch 0002-BUG-MINOR-fix-listening-IP-address-storage-for-front.patch 0003-DOC-Fix-typo-so-fetch-is-properly-parsed-by-Cyril-s-.patch 0004-BUG-MAJOR-http-fix-breakage-of-reqdeny-causing-rando.patch 0005-BUG-MEDIUM-stick-tables-fix-breakage-in-table-conver.patch 0006-BUG-MEDIUM-dns-unbreak-DNS-resolver-after-header-fix.patch 0007-BUILD-fix-build-on-Solaris-11.patch 0008-CLEANUP-connection-fix-double-negation-on-memcmp.patch 0009-BUG-MEDIUM-stats-show-servers-state-may-show-an-serv.patch 0010-BUG-MEDIUM-fix-risk-of-segfault-with-show-tls-keys.patch 0011-BUG-MEDIUM-sticktables-segfault-in-some-configuratio.patch 0012-BUG-MEDIUM-lua-converters-doesn-t-work.patch 0013-BUG-MINOR-http-add-header-header-name-copied-twice.patch 0014-BUG-MEDIUM-http-add-header-buffer-overwritten.patch- pull patches from git to fix some important issues (bsc#983972) (bsc#983974): 0001-BUG-MAJOR-fix-listening-IP-address-storage-for-front.patch 0002-BUG-MINOR-fix-listening-IP-address-storage-for-front.patch 0003-DOC-Fix-typo-so-fetch-is-properly-parsed-by-Cyril-s-.patch 0004-BUG-MAJOR-http-fix-breakage-of-reqdeny-causing-rando.patch 0005-BUG-MEDIUM-stick-tables-fix-breakage-in-table-conver.patch 0006-BUG-MEDIUM-dns-unbreak-DNS-resolver-after-header-fix.patch 0007-BUILD-fix-build-on-Solaris-11.patch 0008-CLEANUP-connection-fix-double-negation-on-memcmp.patch 0009-BUG-MEDIUM-stats-show-servers-state-may-show-an-serv.patch 0010-BUG-MEDIUM-fix-risk-of-segfault-with-show-tls-keys.patch 0011-BUG-MEDIUM-sticktables-segfault-in-some-configuratio.patch 0012-BUG-MEDIUM-lua-converters-doesn-t-work.patch 0013-BUG-MINOR-http-add-header-header-name-copied-twice.patch 0014-BUG-MEDIUM-http-add-header-buffer-overwritten.patch- update to 1.6.5 - BUG/MINOR: log: Don't use strftime() which can clobber timezone if chrooted - BUILD: namespaces: fix a potential build warning in namespaces.c - DOC: add encoding to json converter example - BUG/MINOR: conf: "listener id" expects integer, but its not checked - DOC: Clarify tunes.vars.xxx-max-size settings - BUG/MEDIUM: peers: fix incorrect age in frequency counters - BUG/MEDIUM: Fix RFC5077 resumption when more than TLS_TICKETS_NO are present - BUG/MAJOR: Fix crash in http_get_fhdr with exactly MAX_HDR_HISTORY headers - BUG/MINOR: lua: can't load external libraries - DOC: "addr" parameter applies to both health and agent checks - DOC: timeout client: pointers to timeout http-request - DOC: typo on stick-store response - DOC: stick-table: amend paragraph blaming the loss of table upon reload - DOC: typo: ACL subdir match - DOC: typo: maxconn paragraph is wrong due to a wrong buffer size - DOC: regsub: parser limitation about the inability to use closing square brackets - DOC: typo: req.uri is now replaced by capture.req.uri - DOC: name set-gpt0 mismatch with the expected keyword - BUG/MEDIUM: stick-tables: some sample-fetch doesn't work in the connection state. - DOC: fix "needed" typo - BUG/MINOR: dns: inapropriate way out after a resolution timeout - BUG/MINOR: dns: trigger a DNS query type change on resolution timeout - BUG/MINOR : allow to log cookie for tarpit and denied request - OPTIM/MINOR: session: abort if possible before connecting to the backend - BUG/MEDIUM: trace.c: rdtsc() is defined in two files - BUG/MEDIUM: channel: fix miscalculation of available buffer space (2nd try) - BUG/MINOR: cfgparse: couple of small memory leaks. - BUG/MEDIUM: sample: initialize the pointer before parse_binary call. - DOC: fix discrepancy in the example for http-request redirect - DOC: Clarify IPv4 address / mask notation rules - CLEANUP: fix inconsistency between fd->iocb, proto->accept and accept() - BUG/MEDIUM: fix maxaccept computation on per-process listeners - BUG/MINOR: listener: stop unbound listeners on startup - BUG/MINOR: fix maxaccept computation according to the frontend process range - MEDIUM: unblock signals on startup. - BUG/MEDIUM: channel: don't allow to overwrite the reserve until connected - BUG/MEDIUM: channel: incorrect polling condition may delay event delivery - BUG/MEDIUM: channel: fix miscalculation of available buffer space (3rd try) - BUG/MEDIUM: log: fix risk of segfault when logging HTTP fields in TCP mode - BUG/MEDIUM: lua: protects the upper boundary of the argument list for converters/fetches. - BUG/MINOR: log: fix a typo that would cause %HP to log - MINOR: channel: add new function channel_congested() - BUG/MEDIUM: http: fix risk of CPU spikes with pipelined requests from dead client - BUG/MAJOR: channel: fix miscalculation of available buffer space (4th try) - BUG/MEDIUM: stream: ensure the SI_FL_DONT_WAKE flag is properly cleared - BUG/MEDIUM: channel: fix inconsistent handling of 4GB-1 transfers - BUG/MEDIUM: stats: show servers state may show an empty or incomplete result - BUG/MEDIUM: stats: show backend may show an empty or incomplete result - MINOR: stats: fix typo in help messages - MINOR: stats: show stat resolvers missing in the help message - BUG/MINOR: dns: fix DNS header definition - BUG/MEDIUM: dns: fix alignment issue when building DNS queries - CLEANUP/MINOR: stats: fix accidental addition of member "env" in the applet ctx - refreshed patches to apply cleanly again - haproxy-1.6.0-makefile_lib.patch - haproxy-1.6.0-sec-options.patch- update to 1.6.4 (fate#320607) (bsc#937202) - BUG/MINOR: http: fix several off-by-one errors in the url_param parser - BUG/MINOR: http: Be sure to process all the data received from a server - BUG/MINOR: chunk: make chunk_dup() always check and set dst->size - MINOR: chunks: ensure that chunk_strcpy() adds a trailing zero - MINOR: chunks: add chunk_strcat() and chunk_newstr() - MINOR: chunk: make chunk_initstr() take a const string - MINOR: lru: new function to delete least recently used keys - DOC: add Ben Shillito as the maintainer of 51d - BUG/MINOR: 51d: Ensures a unique domain for each configuration - BUG/MINOR: 51d: Aligns Pattern cache implementation with HAProxy best practices. - BUG/MINOR: 51d: Releases workset back to pool. - BUG/MINOR: 51d: Aligned const pointers to changes in 51Degrees. - CLEANUP: 51d: Aligned if statements with HAProxy best practices and removed casts from malloc. - DOC: fix a few spelling mistakes (cherry picked from commit cc123c66c2075add8524a6a9925382927daa6ab0) - DOC: fix "workaround" spelling - BUG/MINOR: examples: Fixing haproxy.spec to remove references to .cfg files - MINOR: fix the return type for dns_response_get_query_id() function - MINOR: server state: missing LF (\n) on error message printed when parsing server state file - BUG/MEDIUM: dns: no DNS resolution happens if no ports provided to the nameserver - BUG/MAJOR: servers state: server port is erased when dns resolution is enabled on a server - BUG/MEDIUM: servers state: server port is used uninitialized - BUG/MEDIUM: config: Adding validation to stick-table expire value. - BUG/MEDIUM: sample: http_date() doesn't provide the right day of the week - BUG/MEDIUM: channel: fix miscalculation of available buffer space. - MEDIUM: pools: add a new flag to avoid rounding pool size up - BUG/MEDIUM: buffers: do not round up buffer size during allocation - BUG/MINOR: stream: don't force retries if the server is DOWN - BUG/MINOR: counters: make the sc-inc-gpc0 and sc-set-gpt0 touch the table - MINOR: unix: don't mention free ports on EAGAIN - BUG/CLEANUP: CLI: report the proper field states in "show sess" - MINOR: stats: send content-length with the redirect to allow keep-alive - BUG: stream_interface: Reuse connection even if the output channel is empty - DOC: remove old tunnel mode assumptions - BUG/MAJOR: http-reuse: fix risk of orphaned connections - BUG/MEDIUM: http-reuse: do not share private connections across backends - BUG/MINOR: ssl: Be sure to use unique serial for regenerated certificates - BUG/MINOR: stats: fix missing comma in stats on agent drain - BUG/MINOR: lua: unsafe initialization - DOC: lua: fix somme errors - DOC: add server name at rate-limit sessions example - BUG/MEDIUM: ssl: fix off-by-one in ALPN list allocation - BUG/MEDIUM: ssl: fix off-by-one in NPN list allocation - DOC: LUA: fix some typos and syntax errors - MINOR: cfgparse: warn for incorrect 'timeout retry' keyword spelling in resolvers - MINOR: mailers: increase default timeout to 10 seconds - MINOR: mailers: use for all line endings - BUG/MAJOR: lua: applets can't sleep. - BUG/MINOR: server: some prototypes are renamed - BUG/MINOR: lua: Useless copy - BUG/MEDIUM: stats: stats bind-process doesn't propagate the process mask correctly - BUG/MINOR: server: fix the format of the warning on address change - BUG/MEDIUM: chunks: always reject negative-length chunks - BUG/MINOR: systemd: ensure we don't miss signals - BUG/MINOR: systemd: report the correct signal in debug message output - BUG/MINOR: systemd: propagate the correct signal to haproxy - MINOR: systemd: ensure a reload doesn't mask a stop - BUG/MEDIUM: cfgparse: wrong argument offset after parsing server "sni" keyword - CLEANUP: stats: Avoid computation with uninitialized bits. - CLEANUP: pattern: Ignore unknown samples in pat_match_ip(). - CLEANUP: map: Avoid memory leak in out-of-memory condition. - BUG/MINOR: tcpcheck: fix incorrect list usage resulting in failure to load certain configs - BUG/MAJOR: samples: check smp->strm before using it - MINOR: sample: add a new helper to initialize the owner of a sample - MINOR: sample: always set a new sample's owner before evaluating it - BUG/MAJOR: vars: always retrieve the stream and session from the sample - CLEANUP: payload: remove useless and confusing nullity checks for channel buffer - BUG/MINOR: ssl: fix usage of the various sample fetch functions - MINOR: cfgparse: warn when uid parameter is not a number - MINOR: cfgparse: warn when gid parameter is not a number - BUG/MINOR: standard: Avoid free of non-allocated pointer - BUG/MINOR: pattern: Avoid memory leak on out-of-memory condition - CLEANUP: http: fix a build warning introduced by a recent fix - BUG/MINOR: log: GMT offset not updated when entering/leaving DST- update to 1.6.3 (fate#320607) - BUG/MEDIUM: lua: clean output buffer - BUG/MEDIUM: http: switch the request channel to no-delay once done. - BUG/MEDIUM: http: don't enable auto-close on the response side - BUG/MEDIUM: stream: fix half-closed timeout handling - BUG/MEDIUM: cli: changing compression rate-limiting must require admin level - BUG/MEDIUM: sample: urlp can't match an empty value - BUG/MEDIUM: da: stop DeviceAtlas processing in the convertor if there is no input. - BUG/MEDIUM: checks: email-alert not working when declared in defaults - BUG/MEDIUM: http: fix http-reuse when frontend and backend differ - BUG/MEDIUM: config: properly adjust maxconn with nbproc when memmax is forced - BUG/MEDIUM: peers: table entries learned from a remote are pushed to others after a random delay. - BUG/MEDIUM: peers: old stick table updates could be repushed - BUG/MEDIUM: lua: Lua applets must not fetch samples using http_txn - BUG/MEDIUM: lua: Forbid HTTP applets from being called from tcp rulesets - BUG/MAJOR: lua: Do not force the HTTP analysers in use-services for all the details see /usr/share/doc/packages/haproxy/CHANGELOG or http://www.haproxy.org/download/1.6/src/CHANGELOG- on sle11 we still need to own /etc/apparmor.d/local- instead of owning the apparmor directories, BR apparmor-profiles.- fix link to tarball- update to 1.6.2 - BUILD: ssl: fix build error introduced in commit 7969a3 with OpenSSL < 1.0.0 - DOC: fix a typo for a "deviceatlas" keyword - FIX: small typo in an example using the "Referer" header - BUG/MEDIUM: config: count memory limits on 64 bits, not 32 - BUG/MAJOR: dns: first DNS response packet not matching queried hostname may lead to a loop - BUG/MINOR: dns: unable to parse CNAMEs response - BUG/MINOR: examples/haproxy.init: missing brace in quiet_check() - DOC: deviceatlas: more example use cases. - BUG/BUILD: replace haproxy-systemd-wrapper with $(EXTRA) in install-bin. - BUG/MAJOR: http: don't requeue an idle connection that is already queued - DOC: typo on capture.res.hdr and capture.req.hdr - BUG/MINOR: dns: check for duplicate nameserver id in a resolvers section was missing - CLEANUP: use direction names in place of numeric values - BUG/MEDIUM: lua: sample fetches based on response doesn't work - drop haproxy-1.6.0-ssl-098.patch: included upstream- update to 1.6.1 - DOC: specify that stats socket doc (section 9.2) is in management - BUILD: install only relevant and existing documentation - CLEANUP: don't ignore debian/ directory if present - BUG/MINOR: dns: parsing error of some DNS response - BUG/MEDIUM: namespaces: don't fail if no namespace is used - BUG/MAJOR: ssl: free the generated SSL_CTX if the LRU cache is disabled - MEDIUM: dns: Don't use the ANY query type - drop haproxy-1.6.0-ssl.crash.patch included in update- add haproxy-1.6.0-ssl-098.patch: fix building on openssl 0.9.8- added haproxy-1.6.0-ssl.crash.patch: fix SNI related crash- only use network namespace support on distros newer than 13.2- update to 1.6.0 The most user-visible changes, we can cite the simpler handling of multiple configuration files, the support for quotes and environment variables in the configuration, a significant reduction of the memory usage thanks to a new dynamic buffer allocator, notifications over e-mail, server state keeping across reloads, dynamic DNS-based server address resolution, new scripting capabilities thanks to the embedded Lua interpreter, use of variables in the configuration to manipulate samples, request body buffering and analysis, support for two third-party device identification products (DeviceAtlas and 51Degrees), a lot of new sample converters including arithmetic operators and table lookups, TLS ticket secret sharing between nodes, TLS SNI to the server, full tables replication between peers, ability to instruct the kernel to quickly kill dead connections, support for Linux namespaces, and a number of other less visible goodies. The performance has also been improved a lot with support for server connection multiplexing, much faster and cheaper HTTP compression via libslz, and the addition of a pattern cache to speed up certain expensive ACLs. The great flexibility offered by this version will allow many users to significantly simplify their configurations. Some users will notice a huge performance boost after they enable the features designed for them. for all the details see /usr/share/doc/packages/haproxy/CHANGELOG - drop patches we pulled from upstream git: 0001-BUG-MINOR-log-missing-some-ARGC_-entries-in-fmt_dire.patch 0002-DOC-usesrc-root-privileges-requirements.patch 0003-BUILD-ssl-Allow-building-against-libssl-without-SSLv.patch 0004-DOC-MINOR-fix-OpenBSD-versions-where-haproxy-works.patch 0005-BUG-MINOR-http-sample-gmtime-localtime-can-fail.patch 0006-DOC-typo-in-redirect-302-code-meaning.patch 0007-DOC-mention-that-ms-is-left-padded-with-zeroes.patch 0008-CLEANUP-.gitignore-ignore-more-test-files.patch 0009-CLEANUP-.gitignore-finally-ignore-everything-but-wha.patch 0010-MEDIUM-config-emit-a-warning-on-a-frontend-without-l.patch 0011-BUG-MEDIUM-counters-ensure-that-src_-inc-clr-_gpc0-c.patch 0012-DOC-ssl-missing-LF.patch 0013-DOC-fix-example-of-http-request-using-ssl_fc_session.patch 0014-BUG-MINOR-http-remove-stupid-HTTP_METH_NONE-entry.patch 0015-BUG-MAJOR-http-don-t-call-http_send_name_header-afte.patch - refresh/redo patches to apply cleanly again: old: haproxy-1.2.16_config_haproxy_user.patch new: haproxy-1.6.0_config_haproxy_user.patch old: haproxy-makefile_lib.patch new: haproxy-1.6.0-makefile_lib.patch old: sec-options.patch new: haproxy-1.6.0-sec-options.patch - added new haproxy.cfg to have a minimal config we can actually launch! - drop patch haproxy-1.5.8-fix-bashisms.patch: patched files no longer exist - drop haproxy.vim: we will use the copy which ships with the upstream tarball now.- fix haproxy status checks (bsc#947204)- Backport patches from upstream: - BUG/MINOR: http: remove stupid HTTP_METH_NONE entry - BUG/MAJOR: http: don't call http_send_name_header() after an error - Add 0014-BUG-MINOR-http-remove-stupid-HTTP_METH_NONE-entry.patch - Add 0015-BUG-MAJOR-http-don-t-call-http_send_name_header-afte.patch- Backport patches from upstream: - BUG/MINOR: log: missing some ARGC_* entries in fmt_directives() - DOC: usesrc root privileges requirements - BUILD: ssl: Allow building against libssl without SSLv3. - DOC/MINOR: fix OpenBSD versions where haproxy works - BUG/MINOR: http/sample: gmtime/localtime can fail - DOC: typo in 'redirect', 302 code meaning - DOC: mention that %ms is left-padded with zeroes. - CLEANUP: .gitignore: ignore more test files - CLEANUP: .gitignore: finally ignore everything but what is known. - MEDIUM: config: emit a warning on a frontend without listener - BUG/MEDIUM: counters: ensure that src_{inc,clr}_gpc0 creates a missing entry - DOC: ssl: missing LF - DOC: fix example of http-request using ssl_fc_session_id - Add 0001-BUG-MINOR-log-missing-some-ARGC_-entries-in-fmt_dire.patch - Add 0002-DOC-usesrc-root-privileges-requirements.patch - Add 0003-BUILD-ssl-Allow-building-against-libssl-without-SSLv.patch - Add 0004-DOC-MINOR-fix-OpenBSD-versions-where-haproxy-works.patch - Add 0005-BUG-MINOR-http-sample-gmtime-localtime-can-fail.patch - Add 0006-DOC-typo-in-redirect-302-code-meaning.patch - Add 0007-DOC-mention-that-ms-is-left-padded-with-zeroes.patch - Add 0008-CLEANUP-.gitignore-ignore-more-test-files.patch - Add 0009-CLEANUP-.gitignore-finally-ignore-everything-but-wha.patch - Add 0010-MEDIUM-config-emit-a-warning-on-a-frontend-without-l.patch - Add 0011-BUG-MEDIUM-counters-ensure-that-src_-inc-clr-_gpc0-c.patch - Add 0012-DOC-ssl-missing-LF.patch - Add 0013-DOC-fix-example-of-http-request-using-ssl_fc_session.patch- Update to 1.5.14 (CVE-2015-3281) (bsc#937042) + BUILD/MINOR: tools: rename popcount to my_popcountl + BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data- Update to 1.5.13 - Dropped all patches backported from git, no further changes than those patches provided. - Removed patches: + Remove 0001-BUG-MEDIUM-stats-properly-initialize-the-scope-befor.patch + Remove 0002-BUG-MEDIUM-http-don-t-forward-client-shutdown-withou.patch + Remove 0003-BUG-MINOR-check-fix-tcpcheck-error-message.patch + Remove 0004-CLEANUP-checks-fix-double-usage-of-cur-current_step-.patch + Remove 0005-BUG-MEDIUM-checks-do-not-dereference-head-of-a-tcp-c.patch + Remove 0006-CLEANUP-checks-simplify-the-loop-processing-of-tcp-c.patch + Remove 0007-BUG-MAJOR-checks-always-check-for-end-of-list-before.patch + Remove 0008-BUG-MEDIUM-checks-do-not-dereference-a-list-as-a-tcp.patch + Remove 0009-BUG-MEDIUM-peers-apply-a-random-reconnection-timeout.patch + Remove 0010-DOC-Update-doc-about-weight-act-and-bck-fields-in-th.patch + Remove 0011-MINOR-ssl-add-a-destructor-to-free-allocated-SSL-res.patch + Remove 0012-BUG-MEDIUM-ssl-fix-tune.ssl.default-dh-param-value-b.patch + Remove 0013-BUG-MINOR-cfgparse-fix-typo-in-option-httplog-error-.patch + Remove 0014-BUG-MEDIUM-cfgparse-segfault-when-userlist-is-misuse.patch + Remove 0015-MEDIUM-ssl-replace-standards-DH-groups-with-custom-o.patch + Remove 0016-BUG-MINOR-debug-display-null-in-place-of-meth.patch + Remove 0017-CLEANUP-deinit-remove-codes-for-cleaning-p-block_rul.patch + Remove 0018-BUG-MINOR-ssl-fix-smp_fetch_ssl_fc_session_id.patch + Remove 0019-MEDIUM-init-don-t-stop-proxies-in-parent-process-whe.patch + Remove 0020-MINOR-peers-store-the-pointer-to-the-signal-handler.patch + Remove 0021-MEDIUM-peers-unregister-peers-that-were-never-starte.patch + Remove 0022-MEDIUM-config-propagate-the-table-s-process-list-to-.patch + Remove 0023-MEDIUM-init-stop-any-peers-section-not-bound-to-the-.patch + Remove 0024-MEDIUM-config-validate-that-peers-sections-are-bound.patch + Remove 0025-MAJOR-peers-allow-peers-section-to-be-used-with-nbpr.patch + Remove 0026-DOC-relax-the-peers-restriction-to-single-process.patch + Remove 0027-CLEANUP-config-fix-misleading-information-in-error-m.patch + Remove 0028-MINOR-config-report-the-number-of-processes-using-a-.patch + Remove 0029-BUG-MEDIUM-config-properly-compute-the-default-numbe.patch- Backport upstream patches: + DOC: Update doc about weight, act and bck fields in the statistics + MINOR: ssl: add a destructor to free allocated SSL ressources + BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten + BUG/MINOR: cfgparse: fix typo in 'option httplog' error message + BUG/MEDIUM: cfgparse: segfault when userlist is misused + MEDIUM: ssl: replace standards DH groups with custom ones + BUG/MINOR: debug: display (null) in place of "meth" + CLEANUP: deinit: remove codes for cleaning p->block_rules + BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id + MEDIUM: init: don't stop proxies in parent process when exiting + MINOR: peers: store the pointer to the signal handler + MEDIUM: peers: unregister peers that were never started + MEDIUM: config: propagate the table's process list to the peers sections + MEDIUM: init: stop any peers section not bound to the correct process + MEDIUM: config: validate that peers sections are bound to exactly one process + MAJOR: peers: allow peers section to be used with nbproc > 1 + DOC: relax the peers restriction to single-process + CLEANUP: config: fix misleading information in error message. + MINOR: config: report the number of processes using a peers section in the error case + BUG/MEDIUM: config: properly compute the default number of processes for a proxy - Added patches: + Add 0010-DOC-Update-doc-about-weight-act-and-bck-fields-in-th.patch + Add 0011-MINOR-ssl-add-a-destructor-to-free-allocated-SSL-res.patch + Add 0012-BUG-MEDIUM-ssl-fix-tune.ssl.default-dh-param-value-b.patch + Add 0013-BUG-MINOR-cfgparse-fix-typo-in-option-httplog-error-.patch + Add 0014-BUG-MEDIUM-cfgparse-segfault-when-userlist-is-misuse.patch + Add 0015-MEDIUM-ssl-replace-standards-DH-groups-with-custom-o.patch + Add 0016-BUG-MINOR-debug-display-null-in-place-of-meth.patch + Add 0017-CLEANUP-deinit-remove-codes-for-cleaning-p-block_rul.patch + Add 0018-BUG-MINOR-ssl-fix-smp_fetch_ssl_fc_session_id.patch + Add 0019-MEDIUM-init-don-t-stop-proxies-in-parent-process-whe.patch + Add 0020-MINOR-peers-store-the-pointer-to-the-signal-handler.patch + Add 0021-MEDIUM-peers-unregister-peers-that-were-never-starte.patch + Add 0022-MEDIUM-config-propagate-the-table-s-process-list-to-.patch + Add 0023-MEDIUM-init-stop-any-peers-section-not-bound-to-the-.patch + Add 0024-MEDIUM-config-validate-that-peers-sections-are-bound.patch + Add 0025-MAJOR-peers-allow-peers-section-to-be-used-with-nbpr.patch + Add 0026-DOC-relax-the-peers-restriction-to-single-process.patch + Add 0027-CLEANUP-config-fix-misleading-information-in-error-m.patch + Add 0028-MINOR-config-report-the-number-of-processes-using-a-.patch + Add 0029-BUG-MEDIUM-config-properly-compute-the-default-numbe.patch- BUG/MINOR: check: fix tcpcheck error message - CLEANUP: checks: fix double usage of cur / current_step in tcp-checks - BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end - CLEANUP: checks: simplify the loop processing of tcp-checks - BUG/MAJOR: checks: always check for end of list before proceeding - BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct - BUG/MEDIUM: peers: apply a random reconnection timeout - Add 0003-BUG-MINOR-check-fix-tcpcheck-error-message.patch - Add 0004-CLEANUP-checks-fix-double-usage-of-cur-current_step-.patch - Add 0005-BUG-MEDIUM-checks-do-not-dereference-head-of-a-tcp-c.patch - Add 0006-CLEANUP-checks-simplify-the-loop-processing-of-tcp-c.patch - Add 0007-BUG-MAJOR-checks-always-check-for-end-of-list-before.patch - Add 0008-BUG-MEDIUM-checks-do-not-dereference-a-list-as-a-tcp.patch - Add 0009-BUG-MEDIUM-peers-apply-a-random-reconnection-timeout.patch- added 0002-BUG-MEDIUM-http-don-t-forward-client-shutdown-withou.patch BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels- added first patch from the 1.5 branch after the update: 0001-BUG-MEDIUM-stats-properly-initialize-the-scope-befor.patch- update to 1.5.12 - BUG/MINOR: ssl: Display correct filename in error message - DOC: Fix L4TOUT typo in documentation - BUG/MEDIUM: Do not consider an agent check as failed on L7 error - BUG/MINOR: pattern: error message missing - BUG/MEDIUM: pattern: some entries are not deleted with case insensitive match - BUG/MEDIUM: buffer: one byte miss in buffer free space check - BUG/MAJOR: http: don't read past buffer's end in http_replace_value - BUG/MEDIUM: http: the function "(req|res)-replace-value" doesn't respect the HTTP syntax - BUG/MEDIUM: peers: correctly configure the client timeout - BUG/MINOR: compression: consider the expansion factor in init - BUG/MEDIUM: http: hdr_cnt would not count any header when called without name - BUG/MEDIUM: listener: don't report an error when resuming unbound listeners - BUG/MEDIUM: init: don't limit cpu-map to the first 32 processes only - BUG/MEDIUM: stream-int: always reset si->ops when si->end is nullified - BUG/MEDIUM: http: remove content-length from chunked messages - DOC: http: update the comments about the rules for determining transfer-length - BUG/MEDIUM: http: do not restrict parsing of transfer-encoding to HTTP/1.1 - BUG/MEDIUM: http: incorrect transfer-coding in the request is a bad request - BUG/MEDIUM: http: remove content-length form responses with bad transfer-encoding - MEDIUM: http: restrict the HTTP version token to 1 digit as per RFC7230 - MEDIUM: http: add option-ignore-probes to get rid of the floods of 408 - BUG/MINOR: config: clear proxy->table.peers.p for disabled proxies - MINOR: stick-table: don't attach to peers in stopped state - MEDIUM: config: initialize stick-tables after peers, not before - MEDIUM: peers: add the ability to disable a peers section - DOC: document option http-ignore-probes - DOC: fix the comments about the meaning of msg->sol in HTTP - BUG/MEDIUM: http: wait for the exact amount of body bytes in wait_for_request_body - BUG/MAJOR: http: prevent risk of reading past end with balance url_param - DOC: update the doc on the proxy protocol - remove patches that we pulled from the 1.5 tree 0001-BUG-MINOR-pattern-error-message-missing.patch 0002-BUG-MEDIUM-pattern-some-entries-are-not-deleted-with.patch 0003-BUG-MEDIUM-Do-not-consider-an-agent-check-as-failed-.patch 0004-BUG-MEDIUM-peers-correctly-configure-the-client-time.patch 0005-BUG-MEDIUM-buffer-one-byte-miss-in-buffer-free-space.patch 0006-BUG-MAJOR-http-don-t-read-past-buffer-s-end-in-http_.patch 0007-BUG-MEDIUM-http-the-function-req-res-replace-value-d.patch 0008-BUG-MINOR-compression-consider-the-expansion-factor-.patch 0009-BUG-MEDIUM-http-hdr_cnt-would-not-count-any-header-w.patch 0010-BUG-MINOR-ssl-Display-correct-filename-in-error-mess.patch 0011-BUG-MEDIUM-listener-don-t-report-an-error-when-resum.patch 0012-BUG-MEDIUM-init-don-t-limit-cpu-map-to-the-first-32-.patch- pull 3 patches from upstream: 0010-BUG-MINOR-ssl-Display-correct-filename-in-error-mess.patch 0011-BUG-MEDIUM-listener-don-t-report-an-error-when-resum.patch 0012-BUG-MEDIUM-init-don-t-limit-cpu-map-to-the-first-32-.patch- pull 3 patches from upstream: 0007-BUG-MEDIUM-http-the-function-req-res-replace-value-d.patch 0008-BUG-MINOR-compression-consider-the-expansion-factor-.patch 0009-BUG-MEDIUM-http-hdr_cnt-would-not-count-any-header-w.patch- pull 3 patches from upstream: - BUG/MEDIUM: peers: correctly configure the client timeout - BUG/MEDIUM: buffer: one byte miss in buffer free space check - BUG/MAJOR: http: don't read past buffer's end in http_replace_value - Add 0004-BUG-MEDIUM-peers-correctly-configure-the-client-time.patch - Add 0005-BUG-MEDIUM-buffer-one-byte-miss-in-buffer-free-space.patch - Add 0006-BUG-MAJOR-http-don-t-read-past-buffer-s-end-in-http_.patch- added another fix from upstream: 0003-BUG-MEDIUM-Do-not-consider-an-agent-check-as-failed-.patch- haproxy.init: fix reload and force-reload not to start a stopped service- pulled 2 patches from upstream: 0001-BUG-MINOR-pattern-error-message-missing.patch 0002-BUG-MEDIUM-pattern-some-entries-are-not-deleted-with.patch- update to 1.5.11 - BUG/MEDIUM: backend: correctly detect the domain when use_domain_only is used - MINOR: ssl: load certificates in alphabetical order - BUG/MINOR: checks: prevent http keep-alive with http-check expect - BUG/MEDIUM: Do not set agent health to zero if server is disabled in config - MEDIUM/BUG: Only explicitly report "DOWN (agent)" if the agent health is zero - BUG/MINOR: stats:Fix incorrect printf type. - DOC: add missing entry for log-format and clarify the text - BUG/MEDIUM: http: fix header removal when previous header ends with pure LF - BUG/MEDIUM: channel: fix possible integer overflow on reserved size computation - BUG/MINOR: channel: compare to_forward with buf->i, not buf->size - MINOR: channel: add channel_in_transit() - MEDIUM: channel: make buffer_reserved() use channel_in_transit() - MEDIUM: channel: make bi_avail() use channel_in_transit() - BUG/MEDIUM: channel: don't schedule data in transit for leaving until connected - BUG/MAJOR: log: don't try to emit a log if no logger is set - BUG/MINOR: args: add missing entry for ARGT_MAP in arg_type_names - BUG/MEDIUM: http: make http-request set-header compute the string before removal - BUG/MINOR: http: fix incorrect header value offset in replace-hdr/replace-value - BUG/MINOR: http: abort request processing on filter failure - drop patch included in update: 0001-BUG-MEDIUM-backend-correctly-detect-the-domain-when-.patch- pull fix from usptream: 0001-BUG-MEDIUM-backend-correctly-detect-the-domain-when-.patch BUG/MEDIUM: backend: correctly detect the domain when use_domain_only is used- update to 1.5.10 - DOC: fix a few typos - BUG/MINOR: http: fix typo: "401 Unauthorized" => "407 Unauthorized" - BUG/MINOR: parse: refer curproxy instead of proxy - DOC: httplog does not support 'no' - MINOR: map/acl/dumpstats: remove the "Done." message - BUG/MEDIUM: sample: fix random number upper-bound - BUG/MEDIUM: patterns: previous fix was incomplete - BUG/MEDIUM: payload: ensure that a request channel is available - BUG/MINOR: tcp-check: don't condition data polling on check type - BUG/MEDIUM: tcp-check: don't rely on random memory contents - BUG/MEDIUM: tcp-checks: disable quick-ack unless next rule is an expect - BUG/MINOR: config: fix typo in condition when propagating process binding - BUG/MEDIUM: config: do not propagate processes between stopped processes - BUG/MAJOR: stream-int: properly check the memory allocation return - BUG/MEDIUM: memory: fix freeing logic in pool_gc2() - BUG/MEDIUM: compression: correctly report zlib_mem - drop patches that we pulled from git before: 0001-BUG-MEDIUM-patterns-previous-fix-was-incomplete.patch 0002-BUG-MEDIUM-payload-ensure-that-a-request-channel-is-.patch 0003-BUG-MINOR-tcp-check-don-t-condition-data-polling-on-.patch 0004-BUG-MEDIUM-tcp-check-don-t-rely-on-random-memory-con.patch 0005-BUG-MEDIUM-tcp-checks-disable-quick-ack-unless-next-.patch 0006-DOC-fix-a-few-typos.patch 0007-BUG-MEDIUM-sample-fix-random-number-upper-bound.patch 0008-DOC-httplog-does-not-support-no.patch 0009-BUG-MINOR-http-fix-typo-401-Unauthorized-407-Unautho.patch 0010-BUG-MINOR-parse-refer-curproxy-instead-of-proxy.patch 0011-BUG-MINOR-config-fix-typo-in-condition-when-propagat.patch 0012-BUG-MEDIUM-config-do-not-propagate-processes-between.patch- pulled some more fixes from git: 0003-BUG-MINOR-tcp-check-don-t-condition-data-polling-on-.patch 0004-BUG-MEDIUM-tcp-check-don-t-rely-on-random-memory-con.patch 0005-BUG-MEDIUM-tcp-checks-disable-quick-ack-unless-next-.patch 0006-DOC-fix-a-few-typos.patch 0007-BUG-MEDIUM-sample-fix-random-number-upper-bound.patch 0008-DOC-httplog-does-not-support-no.patch 0009-BUG-MINOR-http-fix-typo-401-Unauthorized-407-Unautho.patch 0010-BUG-MINOR-parse-refer-curproxy-instead-of-proxy.patch 0011-BUG-MINOR-config-fix-typo-in-condition-when-propagat.patch 0012-BUG-MEDIUM-config-do-not-propagate-processes-between.patch see patch headers for details.- pulled 2 fixes from git: - 0001-BUG-MEDIUM-patterns-previous-fix-was-incomplete.patch Dmitry Sivachenko reported that commit 315ec42 ("BUG/MEDIUM: pattern: don't load more than once a pattern list.") relies on an uninitialised variable in the stack. While it used to work fine during the tests, if the uninitialized variable is non-null, some patterns may be aggregated if loaded multiple times, resulting in slower processing, which was the original issue it tried to address. - 0002-BUG-MEDIUM-payload-ensure-that-a-request-channel-is-.patch Denys Fedoryshchenko reported a segfault when using certain sample fetch functions in the "tcp-request connection" rulesets despite the warnings. This is because some tests for the existence of the channel were missing.- fix bashisms in example scripts - add patches: * haproxy-1.5.8-fix-bashisms.patch- update to 1.5.9 - BUILD: fix "make install" to support spaces in the install dirs - BUG/MEDIUM: checks: fix conflicts between agent checks and ssl healthchecks - BUG/MEDIUM: ssl: fix bad ssl context init can cause segfault in case of OOM. - BUG/MINOR: samples: fix unnecessary memcopy converting binary to string. - BUG/MEDIUM: connection: sanitize PPv2 header length before parsing address information - BUG/MEDIUM: pattern: don't load more than once a pattern list. - BUG/MEDIUM: ssl: force a full GC in case of memory shortage - BUG/MINOR: config: don't inherit the default balance algorithm in frontends - BUG/MAJOR: frontend: initialize capture pointers earlier - BUG/MINOR: stats: correctly set the request/response analysers - DOC: fix typo in the body parser documentation for msg.sov - BUG/MINOR: peers: the buffer size is global.tune.bufsize, not trash.size - MINOR: sample: add a few basic internal fetches (nbproc, proc, stopping) - BUG/MAJOR: sessions: unlink session from list on out of memory - Drop patches pulled from git - 0001-BUILD-fix-make-install-to-support-spaces-in-the-inst.patch - 0002-BUG-MEDIUM-ssl-fix-bad-ssl-context-init-can-cause-se.patch - 0003-BUG-MEDIUM-ssl-force-a-full-GC-in-case-of-memory-sho.patch - 0004-BUG-MEDIUM-checks-fix-conflicts-between-agent-checks.patch - 0005-BUG-MINOR-config-don-t-inherit-the-default-balance-a.patch - 0006-BUG-MAJOR-frontend-initialize-capture-pointers-earli.patch- BUILD: fix "make install" to support spaces in the install dirs - BUG/MEDIUM: ssl: fix bad ssl context init can cause segfault in case of OOM. - BUG/MEDIUM: ssl: force a full GC in case of memory shortage - BUG/MEDIUM: checks: fix conflicts between agent checks and ssl healthchecks - BUG/MINOR: config: don't inherit the default balance algorithm in frontends - BUG/MAJOR: frontend: initialize capture pointers earlier - Add patches: - 0001-BUILD-fix-make-install-to-support-spaces-in-the-inst.patch - 0002-BUG-MEDIUM-ssl-fix-bad-ssl-context-init-can-cause-se.patch - 0003-BUG-MEDIUM-ssl-force-a-full-GC-in-case-of-memory-sho.patch - 0004-BUG-MEDIUM-checks-fix-conflicts-between-agent-checks.patch - 0005-BUG-MINOR-config-don-t-inherit-the-default-balance-a.patch - 0006-BUG-MAJOR-frontend-initialize-capture-pointers-earli.patch- fix bashisms in pre script- update to 1.5.8 - BUG/MAJOR: buffer: check the space left is enough or not when input data in a buffer is wrapped - BUG/BUILD: revert accidental change in the makefile from latest SSL fix - changes in 1.5.7 - BUG/MEDIUM: regex: fix pcre_study error handling - BUG/MINOR: log: fix request flags when keep-alive is enabled - MINOR: ssl: add fetchs 'ssl_c_der' and 'ssl_f_der' to return DER formatted certs - MINOR: ssl: add statement to force some ssl options in global. - BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates - BUG/MEDIUM: http: don't dump debug headers on MSG_ERROR - BUG/MAJOR: cli: explicitly call cli_release_handler() upon error - BUG/MEDIUM: tcp: fix outgoing polling based on proxy protocol - BUG/MEDIUM: tcp: don't use SO_ORIGINAL_DST on non-AF_INET sockets - Dropped patches: - 0001-BUG-MEDIUM-http-don-t-dump-debug-headers-on-MSG_ERRO.patch - 0002-BUG-MAJOR-cli-explicitly-call-cli_release_handler-up.patch - 0003-BUG-MINOR-log-fix-request-flags-when-keep-alive-is-e.patch - 0004-BUG-MEDIUM-tcp-fix-outgoing-polling-based-on-proxy-p.patch- BUG/MEDIUM: http: don't dump debug headers on MSG_ERROR - BUG/MAJOR: cli: explicitly call cli_release_handler() upon error - BUG/MINOR: log: fix request flags when keep-alive is enabled - BUG/MEDIUM: tcp: fix outgoing polling based on proxy protocol - Added patches: - 0001-BUG-MEDIUM-http-don-t-dump-debug-headers-on-MSG_ERRO.patch - 0002-BUG-MAJOR-cli-explicitly-call-cli_release_handler-up.patch - 0003-BUG-MINOR-log-fix-request-flags-when-keep-alive-is-e.patch - 0004-BUG-MEDIUM-tcp-fix-outgoing-polling-based-on-proxy-p.patch- update to 1.5.6 - BUG/MEDIUM: systemd: set KillMode to 'mixed' - MINOR: systemd: Check configuration before start - BUG/MEDIUM: config: avoid skipping disabled proxies - BUG/MINOR: config: do not accept more track-sc than configured - BUG/MEDIUM: backend: fix URI hash when a query string is present - dropped patches that were pulled from upstream 0001-BUG-MEDIUM-config-avoid-skipping-disabled-proxies.patch 0001-BUG-MEDIUM-systemd-set-KillMode-to-mixed.patch 0004-BUG-MINOR-config-do-not-accept-more-track-sc-than-co.patch 0005-BUG-MEDIUM-backend-fix-URI-hash-when-a-query-string-.patch - dropped patch we sent upstream haproxy-1.5_check_config_before_start.patch- BUG/MINOR: config: do not accept more track-sc than configured - BUG/MEDIUM: backend: fix URI hash when a query string is present - Add patch: 0004-BUG-MINOR-config-do-not-accept-more-track-sc-than-co.patch - Add patch: 0005-BUG-MEDIUM-backend-fix-URI-hash-when-a-query-string-.patch/bin/sh/bin/sh/bin/sh/bin/shhaproxy-1.5haproxy-docgoat01 1588680390  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~2.0.14-lp151.2.12.12.0.14-lp151.2.12.12.0.14-lp151.2.12.12.0.142.0.142.0.142.0.14   usr.sbin.haproxyusr.sbin.haproxyhaproxyhaproxy.cfghaproxy.servicehaproxyhaproxy-halogrchaproxyhaproxy51Degrees-device-detection.txtCHANGELOGDeviceAtlas-device-detection.txtREADMEROADMAPSOCKS4.protocol.txtSPOE.txtWURFL-device-detection.txtacl.figarchitecture.txtclose-options.txtcoding-style.txtconfiguration.txtcookie-options.txtdesign-thoughtsbackends-v0.txtbackends.txtbe-fe-changes.txtbinding-possibilities.txtconfig-language.txtconnection-reuse.txtconnection-sharing.txtdynamic-buffers.txtentities-v2.txthow-it-works.txthttp2.txthttp_load_time.urlrate-shaping.txtsess_par_sec.txtexamplesacl-content-sw.cfgcontent-sw-sample.cfgerrorfiles400.http403.http408.http500.http502.http503.http504.httpREADMEoption-http_proxy.cfgsocks4.cfgtransparent_proxy.cfgwurfl-example.cfggpl.txthaproxy.1internalsacl.txtbody-parsing.txtbuffer-api.txtconnect-status.txtconnection-header.txtconnection-scale.txtentities-v2.txtentities.figentities.pdfentities.svgentities.txtfilters.txthashing.txtheader-parser-speed.txtheader-tree.txthttp-cookies.txthttp-docs.txthttp-parsing.txtlist.figlistener-states.figlistener-states.pnglua_socket.figlua_socket.pdfnaming.txtnotes-layers.txtpattern.diapattern.pdfpolling-states.figrepartition-be-fe-fi.txtsequence.figstats-v2.txtstream-sock-states.figintro.txtlgpl.txtlinux-syn-cookies.txtlua-apiMakefile_staticchannel.figchannel.pngconf.pyindex.rstlua.txtmanagement.txtnetscaler-client-ip-insertion-protocol.txtnetsnmp-perlREADMEcacti_data_query_haproxy_backends.xmlcacti_data_query_haproxy_frontends.xmlhaproxy.plhaproxy_backend.xmlhaproxy_frontend.xmlhaproxy_socket.xmlnetwork-namespaces.txtpeers-v2.0.txtpeers.txtproxy-protocol.txtqueuing.figregression-testing.txtseamless_reload.txtselinuxREADMEhaproxy.fchaproxy.ifhaproxy.tehaproxyLICENSEhaproxy.1.gzhaproxy.vimhaproxy/etc/apparmor.d/local//etc/apparmor.d//etc//etc/haproxy//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/haproxy//usr/share/doc/packages/haproxy/design-thoughts//usr/share/doc/packages/haproxy/examples//usr/share/doc/packages/haproxy/examples/errorfiles//usr/share/doc/packages/haproxy/internals//usr/share/doc/packages/haproxy/lua-api//usr/share/doc/packages/haproxy/lua-api/_static//usr/share/doc/packages/haproxy/netsnmp-perl//usr/share/doc/packages/haproxy/selinux//usr/share/licenses//usr/share/licenses/haproxy//usr/share/man/man1//usr/share/vim/vim80/syntax//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12517/openSUSE_Leap_15.1_Update/26948813d6ce949fc73308096ba1a1ab-haproxy.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux      ASCII textC source, ASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=5a0ff2b8a10b657ee2e30ced9881373c824779de, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=10a1fb4e5f144594936c3d18f8b598ae94a3c253, for GNU/Linux 3.2.0, strippedASCII text, with no line terminatorsFIG image text, version 3.2, ASCII textISO-8859 textHTML document, ASCII textHTML document, ASCII text, with CRLF, LF line terminatorstroff or preprocessor input, ASCII textSVG Scalable Vector Graphics imageUTF-8 Unicode textPNG image data, 974 x 768, 8-bit/color RGB, non-interlacedXML 1.0 document, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)PNG image data, 596 x 180, 8-bit/color RGB, non-interlacedSE Linux policy interface sourcetroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRR"RRRR RR R RRRR RRRR R RRR#RRRRRR!RRRRR RIg,l\.Y|apparmor-abstractionsutf-802ead2b8245ebdd9cd9dc60e8b321d3edb0392e03b594f63af3ecc586d171c0d?@7zXZ !t/#9]"k%Hp .g1Tih Q~"x<5VO:'jp} ʡszG Ʃ'0EiS[>x֦4UNvK]R'.Nb拲8@dFx_߽i10Jbv,V` Hr7ܿ[3KL/eik-<:Ee{b*5WR]7t˿tUvA~ wO]`3q~n>=nod_a񇔲JɝKVQï}tиDWfQɶr o~>l>=eU|᝶w5_p ĕK#俠a T>EG[:)|IN{Uxt7\;0zZZA߱ l~Gg_t 0m9L!׃C5TmBS lNֈu!I ™ZOq ʃGD%n=z 3\գIyE16E!ܴ{u54ѹi-6"G+\UAl3׸!GAm'K&'b;S]/Hk͚=m\'8wjsVbw+d̄A#B25ٰYMXe 6v>t2%MO% ;!O py6B1,gqr(j<U ܝ4R viW8 hc[y޸9Pkk=@o(d t'Hm),w?XOe+?]:#;K1qg;_?+Էe9ŭp"ɹޱr)&yl~]]| q r-JE=$Y+b(-nf]WD/ÄԶ<0WVC{aXV yqԪprƄI'ewiiu_&%ê &(0u$rPu0}u4xa ,bUD9 I Qᴱ\H=ׄ>v+`>8%Ph.S"]MmJdÅfS`^B<<'G4, DgKЀ?4,Q/:g@Sv,V1lbw 7pg]3#6rz78/lʔWTd\YTU3;y`5ÿ+1:ȅ<2' 8 rws d(#By0}y`HZԠН| @BTtr-L8Yp@/.OC{^ E܆ xA) '1u*]3G1,=`?ྰ/w`\ pN-4/]q;uN[Zap,3TU͎+R"S ʓej@HWJMe!\ѥ-&-^RTMZvw:#%A.Yn|;zFHwd{-/٣c4Ŷ҈ y#I>NP 񀧐9,cʷ;{$ܬ0?I#*&RzEC\Yۨ7 }gU+\;agxr*IjVd.D~,oԔo'S>(9'dʹ$|*/:ӧ@_IU!P؛Ҙ~}#9w+|Sr{5 赺7j~ Drx7]t*ş_Y@UT\FyPd[oõ⽫bC_gQZI9WUP1^A~:w 5=*F>i z^]Mw=wX>cI/| i~f NW#O1qWّ;݇FO )b_SLtQMN1>4L:}IDpG]\41ﳒ G?ΘuF=}6C8F͆ vZC]12 ߘ.sʕƥqAۉP8{j bZqRZ,E_T)J"pjueͦ`z|Y;+^4hf r.{GMm"33r <:gsmAG0Bcp-?`8?KM*eJL=x뾂𴋎4*QI B1zH :%sŻ P\=Yc`xDZidPRaFF%PqvD#TPjCЩj;;my[C`7!m^đ09Y0aF=+z-} _Qd=A;pDm"dd,.)5zVF"lqYSy8vxRnW08W^%>f飔ύM\}3egJS"LuĀ"V=>9/R؇ZH֎.R.ޯ 12.מ1wU ²0qkp*`[Mf5>QumRn180? %.9+.i :/BWWADHlWdLMَ9iN|eʉ.FIs?µE"qr,g-sQ&H.6tR֢Qg&׽5TEP82VE= m0R>NQQ <;f5T$vꋞZO^H0^Y VyWz !$xn1I5 &'CXBh [Cnƒ*Cty-Ek3=gu xz>@}H@b9.'&E*emP^JbMsftFPqt4yg,s v+Q *k[x$zc] g4OpZP0=5pY< B+8)ZNApiEwZ[YbMIa'(-DsmTF4n⬐|Hxm{{ۑV@3aHħGR/n,Ē/z4;ާ9khG82* OE| 8SR]W7$~ $ci)Zxy]Է/vښ."G "}f [WwP@E0' 1#4zPmbd$ΈViU$DmLOL?hP󑕷YM&RdѣGl3!?3b{Lpheܲgj1}zy69<9Eʶ]:V"_설JtRтYm+!oKKYu#XRq9Pqi} ZY; t;Oki;ͰᰞQIV{&Xr8E1{NVU&_ F `5T}CK栊sr{/kVkp*b$,Y n #NF\;L,*d(g(|S L_5wm25dOxۏ3 ZCԏj"fPeH]LpLܜ W^ƊgnlgΝK{ZOۙ(07ƶ=T}^wa| ~*!&bX5/I;)y΂ۗmb_N-uFOO/q\IX]=F2Qg?D{QMq#Wsiaq=Ygje[Q&_-?|*DPcR!`>dnV9*쐾i6aVy^<NEr/Kࠎ{$<~䤓^? ZUti=jd\;+El욞dS)KI[UJZ_4A`5#X3,#$wtg̓o%HA+qUF֪c&3DL$1a3~^`Pa*L^A!Wf)J&ZT/$1,*F""BFT ӽ|ƃ|sM~7>~᭤_w Ac{SpǪe)=M֘K9C4a=zΥfMLIX_GIYhկk4FS\aI/i! M^@!经|Z6Q]!LXzp tW 7ԇg1Ucl6o 鉅ïr:΂$DTs_6Q7R!Gξ.YFžYpYB3]"f|1|dާ[6`os?呃8#|F-["z.yCVoKZ6'K`JeϖS EB8#oisHww^e#ʑJ0"j3(,~9H[3FD zہZbyFWyG7\"9Ew=FM|x 稘*'W5$ܑ*+pu]-)2b̌`ZI~|0!D[Zoj*Ŗ-& .z*?=-Bѐl]@U}&Rk FLgB-$ f̜<\]w&,ѹLjUY'ʯd)e<>1c4}t'6Si+R`cCՆnW:@z 4}anFaݟd4%6c]yJf38]ʼnr='p=knd#bXrЦ0^<Q%Zxf~U+—xYݷBDE)%=kr[`Ǖm(Wl-2s(̱=HK,IM8|e>'i0辄`e:K+1ªY `a5hʠ"3vNICv>=OOK{?8Ա3{hPwIz+dD4 I -1>XƆZy$`F"P}Ӓ:JcVSM2P`Dxr"9BEIt |ok"ciw$M1A{ ř7+2_7 _PU Ë3d)4dWOq*dAG{8>>viP4 ڛ;g%__hɵ%be_׷ 6ecv[5V1ؚGdj xL 2{0{<'[\oNQu@'Ujx`evE!-0LQÎk?ӡ]nhf 9u_ 5EK*3aϩM}ˏ6HIl/[c3D>(ݛ44-LnZ]'BL踹P+!Y*.L.pt M:>$=ŧ)rűNej򟫈Xeg<Y 6oSy]J>$h!'ۣQ>kVT}Irɦ1Gje"Z.[_ L%U%&㛇yfaAMc)zS*0\3om3>u膑 q I:ʬ;~fd;䫐'->ÜAŒl#nnޏ] qk1ZLx[GPLnr̶:L_r x:TMm90VV B8XdvDe/)w½$98ܫ-ZΪZBi,{GH&_jpT*D9hm 9#1_+"R)Ga[?@(r6`;;1Wp-Y]qT}Ƶ[* A)b-W:D_A'ctCcW䐮yXX2p-ӏ#*#\q҆2LQmr曆mAAVu CFW9ҵwq'9xev{ZQfҜ:{N8 =uFB䓻>yVVPyqE(: A|wHˎUš) (WR;]ѐˋ#ȼӕϘc.c  cbM^s!HDr ~;%Ȧu񫞢yh )JP>q]ym<8:uz\iP1B&M {;D°f1 ^xUN=(`vPs&gUt#! 8QxpYSmgξKzVVLpZd/!ؘn~F,8tqv$j@ʬj=T%Œ;N^́n'YCi4Vh:>ȧ')׈,s5/P|Gf{:ƧEݏOfd;YUF3ֈ7;i:kXI[q'Qv}U P\ԤJLHk;텉kbpO?bM33P"O;}'o9mnzt4cۅ$ړrie EIRXO3, `&op0glz4w/)wњEMηZw{twwB$lMRYhƗܢ&}=rX;ZOpjLɢg*BEyjIEYw\z.`Ǚ+'%ʭn%QSQ7.z4jVZeeٿ_PC>0ٙ10ƥ;h%;K&}د(pM5|K`O\(eR3:ȝΗ =,/g&y#<*y#DLSe @zJ\O;F37EszP,ġlud/sqHfsWgR#b=9`oTu$u]y ~=EX$1d83 S{md3 |Xk!;TDҗ{Z3Mp(a8cַi~ ud~*4yɐ3$@ˊGȑ WBKV2bަyWu-~>bW cb q8׾e\  4N-=9>yM|<5?jQL1c8֩"!}QU8eЭBKgeto5mf^I]D KVfTK=;09rBΙ3\n>o{%k 3Jp."ɳr$,5f]Ryˑ-Ч[8 Onnk2-[ !:(oS>ո ˎre9F2Eo!, %V BmnPKA W5lnwKOaeT,kDaC0ͧ:61x-pr17EjȍwܪS3خV-vܱ#qD;s?Œn▕ՊZx$y`i،-gU(Uw Uu694#VW[\!7#^f\ v IUC[,`&>G ϵzmgͳ3gl[fquԒSqN»*^xc ع#T'7#]y쓓al屬$TtlaK?ZF|&=GNMBY>Rә5Aw+NV7>$zRvL ߔ(s ]V!VRq lf63evV V :Ŷv($4GE׽@\ܦ(wc!8qg !gD6ZgV?D0v`-xM_vl!n~I*,{_N!э1š+lvA)5uxfL8"͓d1s24X,cߠbR8_8o[`5.ͻr^`L$]I&5i0b{6O u Ɇmq)pk`"5_`bíĺZ*?`1eޘj)S[@z,;%GQFCoju%N!ku^ۇ SP"e XllgNh}_:w\ wD71 W3X{ii}>IQek7{ 1.!,_f| >>bf,(El#n_ E+V}PԦOڛA>kHFDܠ c'| T~'@J+P&HƊϊ ˔޹;[\L`JAP!of{~T(.Bn Ϧ^) n No'C(dw-N9)!z&JS_i(3'T2X0d!JO3VOq)szք]3ME܅Q/L(T|BRF\8 |6ʒrb&}ˇbvxezi}|r@DVބ[2ECH9d5U$f 2Dã)va!#z,LՆ7.8T`GzJIAyS Ņk<_cKm$<7H6 DG9TbxsII7cn~Lk{)Cp~qOk1#nh>|bE!(Ws!;f?U +V DbyNȶ̄LQYJdTVX(]'V]ࣿPŚP5Scj+'U (_{M:J 9`A8]S-7uU:3,?ܕ!mҨ F ˡD^@)vD HO 5,PכF_J~F cN\p_ `JR $E5e㖺?0H@ G su7AykBX@m!9Ƨp,+ _ W= 5dKH(}CniI!댰T5-tt$27=EF0%o}2[boZKlZEC1$1$r쫘"fG% ANۺ9Iim|c0oI^as_!Z+\HTYyjqF:e$^9`zZ뤠x9gYB,|451V!F GGD^oP+gYWS/\Ji11 A7SzӪ*͏6/|dҲY<_Xȱ]zV5@ZƝ-K՜r'%@je.tD7hsG vк"-qP䢮::Ɨxô#ո6k{vk!o;%W(a%V[udJ9vm7pikTx;晔Б $mNh_lPFYՠtb]U%7cF`z0M]ޥjE*Jeb^Q3jn;gRsjg_uR;I言x.k{*c[y8q#h^jRTJX`'JaXbO }a ?j:2UTm4*z<0M]QzD2tL*zJ"ղb 'Z#a[d'-_&fz|LD5gn^Y1:NgISv,qߑNoQeb,1rE}̗ipCd}6%o8yǓ0 f7g,E >N> Fs [B__,V"@4®AD?J~G$)yxK;f1qUX70Ih`/i> U yvʧmXɫG}:?e"W'G`Z@Y# yv3W.ކ|@/;JH/vk HFNrGz>Tk:i3P`n\eH* alʕ +Df ` Ct 2S*:Ů+!;{K0%Ps=T.*ye1*i. bf'v'% ꎦQQ1Rae醑eR/27&jνpG>ljشk(~2Rm}t-k`«:GKwr-wc,nk3'5xa-vjau?7w-J8 ҋB|my|MĹz5n.&ɶoi d4 S-/oa঒^SROR8mӞOG˓NN ߊɑT Z& SJ7aM&ꮤr$Ƨa$CI$ФސHN1‰!~n=8kh}Vk}ff5KkKSaޮcA0ks J9poȐ[FA /f[ɓ^ w̖ruv0%䈉Y87_ͨ Ifzxv|B4;v`kяlG9N ͑*.(Ď"L||bw̪sܜhv F_3n@~SHlO$:yr, su+4Zn–h{'vF8/H7*fY + hF_watmo^Qp#:-u7OX`}?3E҉l{KQ güe^z82zz7#ŒZJM0#?Uͣ]T=Oۍ+V{gKe$~ Ak Y+qDRBPb.P٠'ߓM(wJI{_Cy6%ӰF,p}wD!Xh̅NaHֱtJ^GrSn&ËJvL59] s\Bkll_ ^LN*+ր#jU:QfVUٿ ̤I S$TfL2aЀ'&BZ ,^8zn)%Q5 rj)b6zex'_S[>L>Q^-LIzx_4 11lQBYC`tC_I _j#jGt#$3"kŸFuQ`uг@Z&lUN{ƾx9^M'KJKomq[ sNFO6y3VN4DŽ= "r$d"2 LT=T./\"ٖ sv ͜EXH0#͙3l<&^v6b!~@Èj!Yyv ؕE7m2ٕvmYܳwl, /Urݴ,:P%w[l:(QAVԌTSS,I!DN'/^% ߜ7SZj6q@ Xe5q:od5:Oوm# א~}`%~qs$Ɵx9Z\</0*5O^O gFEQMGu>h^)<\PRWʱH-w4A~*E~xyDe?Ix  ۆH&Ӯ35嚸 SdR/ 1-t !9HDE7fH1#Q`7E%@I/dnb)aH\iy,&%ܹ[6Qvٲ?|ڪN3xrH`vZV!w*7TX}3vE AԃFP{Je95.=iUcl)V-hfi!nf0샬n[:t}1z%p@-Ydu&0E>v%-Vj M^>k'>RyI]cqcْ cٺ' *fSIU,:Fc}5^-)5ր0:qo(*пIڏ7P˓JY9 't^_#pr0e$5Wf"LC{2v֨e~][]5FlF!kKaeDAf:. r!f)3 5LjPG(\lD&g_?qa _)[RY8=.6nj%s+f|!sպ & A.tNE CLo%?jKkӇJ|жG|W^)^}-Z/^ﳇؐ-mayʰZHrDB_G]ot'o38y(mVs+lEnUgzoD<毟xyf4&?}!f.7zIxIQ:́=ݟh>k=#^k% D75OʋENPL1hp$MsRm#̸ =4 Xy|;tU W2WNx2YNa6Ukg<>Qnp\RIR(hԅB@ }PɊ0[To-0}@9R 0U+*&J ɮZ<4s ҇ t i$b<<'-87,p8_r!:nqa![ %|4M 2*3T8LWՏGIXI_Lc:d5 ѶAogD\yaI}/kqLk}CK@6Ϩ>g@`.]+nW^t 廂&ڟMw\yW2AEOs긥ؙ 3èޣs6V寫۠N36DV5bV?FhfI~]+K7|״Rؐ89D FT07{G#98ʯm'>1[~y~wk br`peqY: C=~*rL0sw;ڌ}*-Sv]'I6qPpħT*_܅68[3з'WݺǃS,]8k/Xw]sC] x*]b1b$_FBcڸ8]0sqQ`Sm3`'QGhbp*+2/KI'z6s0@o@j2I~; &FR4 lƫl/68*v ,Q0FE%Z.@f6e 4h~xx=<ݴt_;-^yd7++ ? G+p%Jv j;˲{I[N9L +Y7!"x0s"3zq;Wc-c:={h0Kq#*>쎛4ߟ1 ȷX򄲤aB" ) %oR$.Iµ-G(S'ږG!$*1r-¢:gpIQ}qv8hhǨA kkS21~e4ɄጙcMvW;<ܿtC1\v;kx,j#*\lx`!6 wUK%g0j,ܬ E&`v @O;v2Q)!FZ4.FsV}3"HMqM plyDbA?8 *m,ὒXe~ \Rn}i/v<8I[) |1H%`.7B -rh S3!?[m091$,CBkhk3G݃<꫈nq;1!/ǸS[$ߡd*P+pJջN'Ӑy'L1<#6@vuzh=(g$[KByvt:Qm^c3 C _05𹞄-bt^ v<)CI}ԛY. WbݧX aQz9MIX~aJr}UA=}~` k'q "-%&('ȯ2ZBXyLaA h1HrS Y{SgfBizUBXSk!{'z8y'[G) 0Nnc##%9&]iiD ,rcU|щ[%R'V a5Cq/%[$7wc5:ɵxP;W5= :ٓZ]қz',m g9baM ytݛ+WY`}5ef@p;Jb-#Gb ܏;oWnY>|MSFy{-2z`κ`a1HÏ&ͩ/(UMo!xĻg5e&V?IkYdCL_f㧯zMG~$vyOIؠqmʟኤ~@ b#S  6ze;<f3~c걽y$VVL դ/,K.A?Tۅ^ZVC j6P볰:B\T>'x@OcYٳaXb2ZxF_#>%E?N((,x-on`B$Dp*PcRG5RJխekU(A`Ю \(3Ѕ%0` ;=nR Tׯ 6s'M!6 oQWP6qcn=㛫T6JT.#K |꺔L@HšԲtq⍖*(x'#rT1sE V$Towsv~`-sAlOn/ M?qsS' ro/Y{?+yaj32 mTZr8iݤ+~!LM.~ DxjЍFuИE(RKg8MUcE0WD)+5yVܘlA6Ƶn!?#$q'(UHd>y&HEaa˻>.Tz F,W kܹb,ԥC=Whp6;/+@+xgO䥉X-tJѣB!'Yq6pP~/qe)]6NFϴ_K),J)g ۿzw\יn!ZED글T nDzJF>=rfymJ6-HͬV5ojvMI !qJZ܁G| +|Sq:Sl+сd2.!#`^41i$@*F vY9'k^ōZI޾ޛӪ7m]i=V{ѺTl_qԸ!T80ȣVqi7I0( #b?! lX2^jnFmแfS!+rrXOcP~EkUuKTrfbY\Rfuϛ9p'C1jc L!znf2ǬP+Hn"z%Fg@KW2Z[MCgMrIL0[mx*^y}4_p^>pt?~UOתpC82bhUȷ3/ld\M墝q `.`:b`H^AY8Ahaj(zkYO*/Kv46/\And- 7Lp99s үח'a2:VB @IF5֛HP9jh,zLJCF&&v(7Rp;볮zh/k7BG7vxKceq@a3S^oNj~N7W+ю(O>g9\}l~R\$ƿ^u<{pjC9\gyi(3shֆ-? :hI=a%iDB')}9U YW |ۆ`V\w1)gDW|=AkرVhjd!myX;a[lXD-w d3R<:u3TmT2F)L*KojHZSSWԠR(W:tlXl\]x+W $gNF\&͋ߍ.ldRRױ(YI`h!b*{g~& 5ŸZv)p 3YdNǠO٦Npth bCEJH5=h'p`U<'x?nvT0ӹN45 ZTL0CnPek_h"͑ ,le9b 3JO+ˣ\H¯;x.Zo1H jzdߎ ^0>BScf*A3$*TΕlw,T'#ahՠ l/R)l7R+~1@uA %Te.$6ǿ9]Bˑ{+iw0R I_?yٖF0|m1p$PFucjp{peCD<>Xi10F p<r ({ugw~^:Cm< Ǖ<7mpx]aatT oz0Pi)]MISnv7`2DLҡThu?O 2n5T;B'zrE`Qj&צN&=O݀^N!e[K2XZp_ҁ CMS1O ge2KKbZ+=b=)ڸ0 OV b815$x}`&=oCex.&F8`z^sk5|wu a,g.jy?_ϻq_ΔX"9G$"k0nP7$oFAO1o%%Cp>(W A+8w pZ4伨K .啼>D|J&i-Y.Y~Dl @ tzs"QH*PK[L_Ba -,p2fjoWd;U@w,K LC*L` `y^)?ig&VkT Djlqe.N\BWvi75QKQ wi8TCIh woD?~|8i9dE^]\y?g^-⊸m!D>bTpp}_{Ӝϯ?˃A0M ؘF Z7ria>mYƍHxӓMzu>cJX߆h3Kl.7A^'[xޠ,9TCh) ue'j*ROC <%9lEcț:X]["Gjc77 H׭ LJFNԂ{$ӤM;Ec@C+tx-tﭰVR=:P|r^nf lXw .5_BU!@?gⷺI\dĬi|B^C,7%{s-0xWA+)(> >| ,ra:h_QcTP[kV's`c"kKb&v@|K2]X f-XN)Zz䱪W\j3›v XAtlIyޛ/{F\ \B8|\OJ;~K\Лًy; I_|[i?s=\2R*Hv>lsz "h`W%&tn fo7E])UXiWZuY$-xmb)j:dy3W/ pZ@G!+\ǂ~=}[ #ErY -CƟr*w[ӊb+'p;3;z"mϓ6(Oc{$rqƾ"d'hٞb; #Ej7 2鉪Sӣ!K "e%\B<6GLJTmp}}#C[9 IozE7']QJˇu$ks:`?}J|RAr7Q{zHb^oԦk> ;.[gs%PQVHᅯ&eQRSClHހ@3*k# 59ˋUt9 ۫@X킳¡l"?MXfSSZZuY7:tZSj%ʤѷ>sP8&=&Iv\myEΈ.xUX_rS+6 !J4cT5aѪ%!J:|8QEݾ5omKy}lڇ#ì'Ӿ6uCR[GCෘeX= ,m"˯RFal"N܃rՇ"_ȝ/y8, O=K;[49`Tl2>impV;q8DAugR-Qn`tbVatUfwv˲?h`AɘL%&_)6{⑉΋9UP?aO,*3U_E Q!x|L힉<;y{'=dؔ|O޵8ʏ6tMD}>G* *)G̵#D(IHțj8Ѝ&ߓZ*WHf̆uy-tEA^ vC~/&]ɨJ|R$%Ͷؿ'n/x0^8K(]avliwX0$7O*9)f4Bl% ˕rq:]-ɻSrƀs#]N5aW=N^%,ܸ/CC u;q*%}_A&fu:D>D+1J@o۠~?.% ^EeYѪE(LLn䔚< f hl<riJ|6:7(B\ޮxs-&),`LD5 `^[ >z6|M@8di?,d۳GZHr3[oC\4zP Fۀ/d!ӝ_NJ~ۍ?3zE6)-'Vo?yc l9Gh+25jIy{?0ɇ~WlL=nfLAe/1fJ[V١(vqQ{ e/7A(ifn !axXe_j"j\=وGn 4ieBgǙكef%Њr= D9& ?tr# DUi+rz@dpD\hqFܩ{aY~^֭l'g8:՛]&.AeA{L{v0*%))>)ud9Zɠ%pr6Pܪ*Qީnƍ#>/* &Q@+0/-=YkF1V!UP+`vL8z7&1~E{Y_oqSL460F!d(˒ %?#xR:掤g(33YvrQUXӜY^QLo1;2‡V+8r"fSQL[\QQz=y,wgQa| Qa℥6UQ*HI3Wv'uBǁ4D0Q\CI\PI8 6lKuxn1paaCX>JEd6 2& XTR4Uaӂ :nr8.M@)&74#uo1ֻ,waFOuw?ݡڝʎ<@C/~}!0P0C[-2T &z+!t?Iz1?^SKA ;U;V"ClćJh'ӏ1:C]u/n2_-K8k[jΜFO2ȅfSdki/#SHQ3kFGGoP+vV}jXdP7MHD 4SM".{6?^c((pɤ}S{1oP6^F\mr{>- )4}t-vz׊F5PݴMs6Ȭ>ͬrǽH}sV^SQDD}`\N,Jzrw89$0 @q{;,>&z<*&ջ}bt[ɔ2:PIb#Nm̞3[Fv'Z2^<SiO`/. K)vxd{gH`gЈ>9U#~"պWq*|m۩vvWdk3HW:FI~Z9 [V8xt= lKÚ9LOwN jm,,V9.ͭ" V4^MVn!Yh`@rˮٍO:l`їBR'z0}T3l葅`LLcPVxh;JҚ| `adqGB V;&u:lio5S:D%Sev96;29XJ}@{ y6в8ĖͨOkAʩ\+;;&c]w%谓aE}ƞY^-;L5RR^r  !( AeIZÕ2W+F)r*b*M9@ 8y* N:uHZ`4/׼dѻA BM#P֖v0MÓ R5&myŴMjTT_·bUsei2vBy(#֗gPP.zrDznUmjGGrkohѲDqF ,,kŒvB^Aѯm]KL`w 3AnnxzĖ#@?dǙ2X쒕 Av6i+$FKqAyjW˝zO-j;쮟oʵ8)'5D!RvYCtvX;d dLN)\L`W٨㡃(eWu_pr*zJc;K2/nlSD7p(OP 2wgX ÷j:.apq2vԣu8ǡN|:T4v[t=2Z焔]-Ý5UzƉ%TM3q\NG(tVm bՉ+:uGC'eE}i( ĸ1VAQC埕:[+( s31*T7aΠ ]Ap8/sA<ϥM g cMWsU#)Ji,}ܪtokxcU2n~(.1CW쓺1c0t7)CZd*Vx,h./{?I-K{Y#vf/}r,%NVޑƾe,SӬʸ!ڥmqCKVqI,Әo@o`,d{BM2t +mF֫ؕD]I4)#Z#m; CHMrd ;R9]mZ˚8ؖrdh1d僰2H󓵔*J+$U;!d HHs`X/!|y\Pw` 2[ cP+ϸWkb;_]`]!L}) 0|h~̛J;rz}BOԚbN9ȀwE|-Hpp茵5@5 .zI8A}Bpܯ$_4iݞBʄ>]&@j`H2d5~gm'VG'Br9F.Q0)P|Wj"+P0y<5dKpk[QqC]trNw~Hvyn!>` Ӹ2&^&=lYbRN.֢Qtyл?5lX:+u rHLg=Y<>~~'#M][x܈~~^GL'|J,fRR.mGQݼW{E+?2O2˄vdF_2boUW2t,BB[;iLV&~UH#~M!7#!6v~I`©wAT*ڈ az:D%:^4>7].u$!tb&M 5> CTl`{Zrm.+#wO{+'Gu@ ^ʺisε TC™½AC^Ti5}IJwz7?X(#>aUE yTi !n FP w!J`Xup*}cܿʰ$zlAoH-u:@nN͊uVθbiF%n&˓0_V#:nդO`*]iu@71nk Qu~!f+02'- b q[s&ޙ Jh#ki-E=&r?AGhsU$5[lWJ.XܗF:%ӣ'VPS%/DkHǙmzYjj;vQFϓy$̯171p˽ <J=W؀ rTjQ9Op%X?aK=r40Q[*X6b~y'Xv7Űykc ^dɝlO^gWxִ*|{J7^|9u?I2"EsP78>^=,k9SCda}NTf?[BXGQ<9Zz D嶞*3YRC%,75T*hES?gdU!!~/ʕ&8TyF6Ioz)ikhmN?=Ϸ.Xb/8l|ǿtUҭm|08& pn=P`J5#SSuofk2𥉉58mPMrW# Ep5 DN˞̈́).3.Yp޷IxDW|Ԅ,-4[gtgMVgAvh{m- =Iߥ_Y[8]LPg?<"s 2WCpxva?}$gvn94<KEr|1s%:riU?,Ak D$Ma k>d||raB 9H/Jj,}n3(A r_UsF)ҙT{ԃ:z[eS4?L5e~E^PZV[AnT7yDUOmÃV3J{\RЎEL^B ϗ)nyVšlBp/7!֧h?[IX &G|c9d͉Onws͸o_lg ,"3NE/{uVS)칕G'x2]949ew?P/aPYa M@qq u%,^^'.UT4^n)<cpgR"'o5/_iAP'~U9ǩY$T_~"%dn_W «dʦۤLV2-68F']k+s up~;u[&[I]Oa qzXeŖV?+e ᶻV?k#ٜšɨvu8.E'ܶNw ̶*HhtrrͻzkWUqܷIi[1&v.ş V)=bZ8ɳdC7-&\To]|+HA3(~bx~%V&D 78]F@[&HA X0֍E>LNœإ >ݖ|&9㨩d[6sm̎-SnD_޳d(iHxq4'߳]`]xrY-B;._&8IRUʐ{[X#>B ͣMxR}O-F.JxH;hdU}ZE ݳE p+'̪%dvK ݸ;3@+Q62j!/:HXT QaXiadu՟ǻx/ uKpį _YO"9I>ؚ>x( %7\y]9 s'OdĞfK ڝ.5KX0zb)M/^ Ѧxՠ~ܧmWIp1=ES]/ NJ[Xbh0 ؼs -hE6- :nEU|+̹!XKF&5ݞK(yN.A'Q:Qpci#/`,b,ulMs' |!J^ˣ"0P 8"4"SW-)@-(;-X(_C]K ݧ„U3u{̺=8kZܻ&J{z/XvE_,MhRԺdMDLx5!%;s$ 9%(\ԅsWHJ)zL_j)tS`eX=fy\?yx) o{ݎ \1$o +ډFqJ[FH/aYՊ֭ q|ޮ{Nyu\0*C'.SAw.xnv(S 6Z>ij 7 䋲藺ϓ*wdNX?Dl{h^g#?6V \}vPja5{5y? XꄨC0A;=UZYks,QiPˆ11G S!z!+%4ߕeš!jqӇO50?NW1۳᝭zK"rLf P5$kY$mh݋}pγm9 2M}b ӜOqr\$%Cg(x5X@[⟣o49K>AT <1 sШI(I/-'GS-T[ BH O@X,8&!\+Չ_&<1:=Fbl]?#x+[,Dyȋy^fE78iW"e8[BuZMOfKB d k~4.3H - 'nyʈrMVWqfuvMZd݆`yq+7N 3 Ԑr "~% |ο "7wCjUxL:e]@fM=vN.5SѲ=M64qkiS`ϒ!wC L3TV꣟(Cz$‹K"GFhυ ҡ ar+#I,Mb7>9ALf~yJq'~Y6#VSBi`NkJ |~7=r? 7?ptdmi'^dTFO?e jkEzFN6X^?pX!/ڀ>a@W{OFV0ܾGX5V95`)8 ZTx$ LE-L4~YF0"Ns=1A6g۵kdڜPNJɥ5ĻcvUo?ׁҡGA`4lӜ}{ ^-;90"\V:^pE`^k +c2Mؚt:roBR. ..y5 >sPِj!:\& 'b XAٟ]&*_xMdjZJ}:޳*y@4]R5cϊc݈EʐqƾJծm.b'Qr:cӝ3lW,{?Zp(9Ul axMF NtqUSmO$6ZJY(rD8W`ȴ*-qt[w<Չ6ǴkclH h/zfvY~~\;eǀy@@͕'>(#֢@uj{ gU5Aedkcx! Uo,ꢩ߿^?(s>%X{XSZ'klBNOOD@rb7mؒuKՋJi02t{Mj*[.\S"[MI1ךcܘY="ca>!vab Nk?;"zǣv1ەl){ƶePBK{HhIc m[U`8crO̎TPjR~ExfP)JΝK!  ع9<$LhEGPpFq O!]TDOĄ$.pU!y,WIj1v6_DHHES(HwLq[t챖(}>V%2E.- ?8 CCY³߅ D-+Nj&e4$/K(~[hF&H%e jj;Jb#>,Q`{^贿R~aҪUhC>Zv . Qp$R7P=j.pjyAA&9u"25[<`TH\u.tNw N(6éԼ(h~xfH Cʅ_#~dUnu5UV7L}S*^($(9宨O o/G``&CCG3)"mǕ8oy+x`x/-iU+/7UX`8U_hڛIZ7UXb5j4*CˢfcO^^'yDS^BXGt#W:pjtEKہ9#8J5؁tKhngINzg`[}).0&ف‹ٹJكJЯf% RrjM{H$<BLF~AjH"^JjRWVandz݄֚R-DL:ybFc{V\r:u<3RTUmP=cW ulHM~k-!R^\?v{; cR h[_q;p[-YJ\yؠ_D]I^)j |a1jUCf /lJd!:edֳ fPL%;:>Vaĸ1?+A/J+,f\cLyj3PE&)bðO8إ '+߸C1 # 7߾%5a*KW:Q/249F :ll,!,Y 2Him(trÀh|gÛ$6,n^X3GG>hpM.F;%=_?)觖p6I%y -hQ\U9S~3%(OgxK\XGMn49l4^,#/zqKOvPS`ցgd3Hk`YtOT_.l;e^}k5*= Qb3xL׉.v]2/i6Jj| e`KjHzuB}ZptP}G6ADyWcѹ K{ѭ9{jkv?I2Q>JTdA?w1vw]@R7f(ٿ;ߡgMƯz(SYs/2Ր%[7Ni8{|=/1nUbԉ{ U8~P, |7:tz+a!`ܷ3~gHVjG-ұ[I3iqT7^-|Q^BacUM^q.&14RIϦVg|we-QDܦKdkN?\|l-B4OM @_kpot iL}A;āP@;Vz:_zWgϦ 1hR:^@Ɗ7NJjja@mc 8e_/k3;)Ser&ezX$0LJgMIaRJ(ekShyA",;W%`pmT+TD Mo#OyY|N۲ P1f$? 8R_~aֱ(^ y]mXVơ) ,ak;2//FyAtdqT&g0NI~ -)ĠTRt.%2kw/3?D@e>pN-UW? G' Z8hjnIF8RE v #yJ}s"*)dacif6WqMwdJvPFox$'b9̂tDG̟CKW)n #N D^[tvwި+H!s :NSyE2B^w 4@/K;nF#a 8,l)rL ˺!t/9įBZ4x\Xvȫ=˝ Y!b JPqU(AZ?:!ЪeD"ʉ{%Ჯ!RY,^ɲ˭ ^vZ3(ݑB H!L5>bQfj&kYä́Hd`&Ke|`Ҕ@|lyYEǨSLW%yi,Bno  F+}?m%#ߥmx .хg0@nbBUWLhE; lfl2,K(9-x,3&;m Z }x #/a>3Zs"?Z"] `ޅ$juNx[м>A}+]bYw#di k,W~d/ǴB.TOҋCuh`x|W J8,TUb,>N~*RfOU`$'5{pmùFċI >Q~w׀&aY ~֜]9gFjW+ }% b<>+zvcZWst!srAkf-xjaiMi^+^\B~nO:8i7RsOoU6\t_^{+Wx|v,q=kbT5]$*o T8 .E;hqa"*p{HvRz6\!da PR>,Ϳ7j * \H Y80c(|h1[:q'KIkr??j*r\q{rZdMz.w`̷%h߿3"Cܴ VB䦾z, pmW˩F%P!.5 @p6Ya][D>ӗB/ 4S iRP"Bj̫z7B.ϡsQM޼|>Bc7sRyxmDsK v C{匓ϭk*~͊rw*$k;'跓.6ףL^&`̄c쒢P" x֏:g`T^OyY.!Jڒ kyT+ `1HHaEz[{ԾrUKyZzV28e"* D"%PfzOmOm+q+02pW 4ؿр.S5\9L=䬝`^]DWp뗬YJS :X#jdJvѱvy _K P}' ]uw|lk8b(l\aA]HoSL0P<[m<1raxOEȑ ik5ҖrF2x^ۨ|O$-~iاCMYyT ¡M+'$eac?_Q YTloeFexVUiNE^*УշK@Sҡ@n ]ܣW;(Ae>7wN ׽g/;RJ?.o3;q#z`L~?[}͇Tտg:r"Ke/ ge<.ʂ@hEp0]D:͝R)5/6F;q?+;0ujPuYru{a"srɯ1v]|%?N=a)E[fs@_)`C9eZ @ϗ}=lɉ9}MOy)b<o ]<ą `KV#LGj *PPA$E3N~=σס:}8z3z#mbd3k)`1`G3ѓ?T@U]z1( tIƯ9T e S"bn A!\ GRZ4)s{kwNUdM3ў^Kle^ U$d$P7ܻ.u8dz7f&rB4Hj7)@nFƧC֍f->#̺ENtjOFI# D7e`$1;&B"ec 8h -RNrĠL’췈Sl%O1X<3+ŅR1o- q4&nۂ8M7p8T Ş?ctz%W;؇:>d" w 76&><\ǬqRۯ1wnZO3i65 oU#s!0{ mEG^o\9oN܇D񛙳Vɪܡמh[;XI)P8S;~pF=6 $UW֞neѺ gu9JOUG3=rpoDMo," !W۳HXdrlo-7Zcɋn54iTK|yi2DO4O5m3$[[XU ' "/9{GvZh ^Qa l֘$Sm՟ *d8tӉ= 5|CR^Ng1RcV+vdزg$Љox̐N _2KiִI< ̜cnJk;O0 ` j*kU}6c2L[JW6Eؠ?X4VH/$&2{#^aȗT[CYH4֞_uxLbC9Sh'ZXaz3z>f5X3; A}  s3 1Ex,~[}Pm >`1_g8# MI+p=?gCh(+}4ׅ$5auzLD9Q[(G%((3mi!ڍڔMK%˟XȨRPn\[-˦=/mq,jcCK̔8Ė>gwA?)U0[II(o(az%{1ѹ<.T؃PU֢p|$o\{F'4?*RV:+XV]q "J bsUCenǨ|jMf&;mdӨkQT<՟uUڤȿC1GC%&~`lY!Rb6-?d:0z#pϒطƭ5!<.%~~Lm` F5s}\իK:RI/ Nkg%OmqZq6W ԼD>jbWTlٌpH!]?W3whf$-mںHYβu@|2gǖ0t=v.*P$攘^ONncFA 5Ƃ#ER˜n4 ]ӻVJ-){%ktY$(O1NV1S>qU~QtR}̏A{U}Ӽm҈l 3rݦ/|"GZ94}[U A OaBE@ڮaǭBt2$ Xpb ZfU~2t{-&/i1l)ԕ'EiaD`ZQMjH46Twϔ ޜ4q p'i稸o6ڜ's߻o"G֚{6 ׈;i2\ S|UսinEg"ځsD~U9Yj S*xE~)Z3dI/Mq~{/p,8 GEAq0ڀNM z zQU6O3n,rx*-"/+y0C#/Ԙx8ʰD##n\լTv>=| sPz1WKr'z0arZQ_n>.~Dq`ߒuPqv9G $l5/sݗ`4Q+_KZQȫ{\h( [5z(o|<wTBk<]$tfS6s_{+{}Dsvbuַ͛Vh|.:8e1;07reqAk+qP _cpiG '^kKŬux+bU坪\w| I~-fƹNx8\ŨecATuѫʕENjc"i=Xh,LG[6T [1%gV:Oc7|!310$ Sݐ,^vu@Y[Z>XP"IZvgԪѶV{Ƴ}FhhbfnR:=nAp Zg4tչzit,f ~5~0X+uK-[4ycه 5AVUD!1# j v5S> l@4D]"R>}:a^,Q`ݤm}oș A r`NpY4BfNu)f&DңtSoj\giINJhSBR$ׅliX!Љm3#w`%눡#0 QT>@9(zx, Ѯ9J=_K3[cnP,bd ߹_rW>lJኺgr6d%L% Ze1x)#iH\xCs` (^ lz[+.R8|"|,"g␰(kp'#(9,Nwo2όҸy1N!,dݝ>0 p٤ab@H*}{B6L_9&cDO+`ɴhP. zTZo Nʽ=fi{q5THz2gTm7bE B} H꡿) %*-E#s\oʆWvv?Z\%ӎ/7Sy*AGhF}LWO3YkU&!Hlޗ)j>kC:ݔEcrPP֪Q \阮Ev<hOIb}y(y9CS,b7l^hFlh˅j՚ޝ^ {Znt3qĎ}d!+.ȧn[)t|CT#.ptG1Ȟ[e9pGW8S \q$;[Zcv{l,m;.K=>jmX)݇+Slah Py]Td345t2cj,A-# [,C rXN9A1r*D 5ZYRQk NpBO%d<ٰB!,t)ȫn:aXNc yScɴRuU^86` u=ƶ7!Ab /PXܥm!~S΃it?A 2J{h;HZ@ak0D\'7\"wDEaЫ7-{l5LLm ,QEUg>[5Gl3ӣYJ{YA*)Mjlth#;Zi:CڰȊCVZe fj}H7圾sw1 \aqf.~=>kx]h"f`Zg7dtD5P {PٹF; iz">MBZaѣC^QPɝ>LT0* lgf여ʌFir~5fc;/ڝhk)xDI߅7Q/CpN퍺:>w/a:GzsȂUmb<^Beb!L g7xqqD,q(˴Y p=BƚvZ%)ĠwvdWbp1;t[jx ( f`=Tt6ƾ4'PcUv HY '.)+N]M]L)MٓdKeqUgr΁>CżLQmWOyn\gb 4 75Ȱ0B: @=Ud.͚raA~s1&FS\,1K'ئir1* 49,$jbŴH|=>o:s)D-dȘH̰! y:N b|0\8gII/Nc,f_{a]\t/o2X@+M^ȅ:z-y]ũHzho |za >Zy@^O8K-w`D}Y{D$Uma!× uX;uȃ0[Erc[DOy5ξN(A㩌3  lsZM`߽`yhr̘بUYr,|s_!/wRpB-.\E9"(I 35 Ved@A<,Jf%ӬG+ [!`DD`/9ڸl]3U)I ;=&gAY@zY"bpȢ"[kmƤ>6 uPcJBq/$k`gBl G7kC>;O㌶zΪEd.=h3Hsf/v5mӃ pN%T2m-/yf1].d>hY4TPzGһV $?38=qMk[n8$|dBFے^exsfn%5J~c}Rg ^:nѪCVgnWd! R -߇݊i%I\_F~z+@\žc9'L2bۦ;("KD fgu*-/= KۋPz@Q0o#$WK.I{U !ذ) uA;i {[%ơ`^M8hWʉ+EF\a $JU7,rqPQgi_jp7r3(kɑdD} rG~=ݑ@#Di%5s< '^c$<,-z4, fD\X,yW90cfATzgpeBݔĎA9ĪX>Í|11AB:aй0.!4|Y _E_{،ƊLŏ(z"]tP(]L-nX׋ ?t+CˉfbTxڦjῊVk01X_C/a?vlr2fVncb$[;ǀ;'3kP6yRxz뾝W334%2Tj0~ l"X vG] 'OE?|_K(1bL$旆[ߞSQKhM +z;0Y3Wc#y6fG,$+}zU 끸W7RLS=$ C rר+e㌸ev[d?1B;GiiP\>˅DC'&0[2o%}凒&{H6bG8O3lJ"ZaÅ3J Zr!Fo+!` ^U|\! +i̲+ہ MԊ{Ӆ.ǦY, WE0F][wKLRV+zX`h' _{x)vWHct=1W ZNWԶN+'%T#k%JK'[D1v0k#lj/@EHS-E:EUP QSdsb&7Y_1͞eIwh{R*کDT2waľ}_6vm4[_B[3Ip]}Zydˈk i?h(DXeY`]ߘ<4}S,"{SVޗsiVIZ(k7|F C'RzɆ{fV4HK#${uGx<'xdmW.p"RD9nMz~.>XPX;tȞzJ-E}v!kfO߽Op#be)J_ DK&i)Qk55X2?YάZz DgC݅e~"|3 Be 'W 7kx0|@oL.X pMHM&f^޻ Eq 'Ko!1 |i#I܏bØ^PQ4ρ~Edu lm:I4Ƚ(.(`o&? i{#Y-|_ . ̚rbZū'"i `NuUmvêH/ߠE C\߆Qh|P (v` ~so1,)hkD%1i&&[eT/bf!,p*1\M)Ihc!o{16*vR ޝ$cVUZ=eQOw귽NG};_=*Žm-jCRNxs f-Zb~ZBWAL8^66 @W"K_UBRoߓ^ )Ly%ך)F5"2VW/qJ|+uҾ~ 'x@ ;v`P.!.D֟L4e>lH626־_4)_}j]AA)ri \Qerހ2]U*œJfCŀߓWAf*]pE<;MAS/' ȔSXDžBFWCծ^2*f# Q a| y), #KxJx n!Xw_qf*' [e]=f#> "|O#gߙӄoٿRym J5Yfˊrlla̤,^i&ox1$Fߢ^8&ڤ@h~bTW2Pbd Q e㴮Ka`@Bɝ-.I{}冝(\j=3\՜J/_q?;9,ka4o! rӄC/pQJ~4J%Pnm)߷:iأ;IUZ_{Fli|T셱} _M-$XȄDZa!y׌R0ZSQԛB}TN#<D C Ljf2HVK>\X=+ T wWĩxh|7z'RmXW[w7bc9=B>r:9~7^uz) 7#ҍ ,ĴjiҿOBLs4h0&"Jי."zacO hG(֏ƩQer(Y1 /'.yW](uIOJDLĀ65WLB1PĴer^ⷓ0ά#`ynx]Q+CA05pkG'dsv@FLΞ˿mc.9>X5a=. , n8g&K@r3wrd0rrHֶ239Uv$.|2`H~#a տc|Gg|nz2Zӄeh 2duW@2c>"޺|!?:lDt, h51Z~1ƙuR2E2s͉^!:ܵ] 6592c,,B[u~*d{w C:xZW ӈ7[r/yziC1XCfݣKﵷƩ[},RzR-}Ux?_-!KW=&7,aG#Fl ,?J`cЬ#tXd.W1S4k!Tᛜ}|}na®V~ kGCԖ;0`;bng& :J_zi QΗFdZMU# 4@kgn㋊u<⠵)mK1^6N)eS+X-Zx bY|4B?_!Pz?PHY*6vQP;p9}X\ w`,Tg۪R@A@g3f S韾pd .v?.K޼rp5klr56`LTO7=%7}ͫ]g %Z/Wmv8D=zbgiS]~WAD4zLXx?|[,Z - 42:k)*Ec()/O|krSdդS꼟Kbݸ' h1,$Nmk+лqK=GE|Sb%\(ʆ|yCϞW1 t̕?w^Hr;n,5l [.$?vZ:v[`a Et~I]SD tc3U諀* *1y:J&*wm(GV{_f]C`m0%o v6Kkg7Gp;gL0 iP 3~ H|SIEO4Hg4 p"" Gjcϩ48I1' GHhSJO{/"h|CKk7,(yHO4seMB Bk+a;P< P`ĸWZ7ᵑOcok熌P@ԍ;ͽitN;6R…K}+#6>P6zhq ^`l[hn V1f0{ǵ3ljB'ŝ9h05R<8e;d&Jk?zjyDTcaO-%kz)F[("^:qW3+U#%խo8EŃ' %FR/ KIҠ^LTn!C]3Axo!>wQc&OEȸ:YI(+d6C g#OcEj91X7M \T=:5ڙ`%?';EoU3kd_cP%.eɬfupu ɣܑ# vw^vT4vFzjqwQ2ћ7IH#V2E^Rl댶LsP$9gж_m=FJ-v3XIu)u,.0`YuO~B5ҐzhG&Ճ2#gw5%N({DP[+57.P8g*Pǁs.L_ `2 ( ;A6vDq{v@j 0u!!Ò}J)Jojo=)iW-7WB N_$ϮNE)34=ǸbA='z/Z8)ٔ 6[7 K9Q$6.|* Ԟpsw1*R'kN3Nl9~ u<,ns Ёr?߅=st< 7g"`+HB"hԈ\?)a dv]2Ơ>dSW3*rm8g68;E C~PUf_W ``.cִ+ҍE`ݔZö!e>ў6mL}A5ۜ.=EȦ A,")5D3^2bA؝hƯ0/>#!Ow^ }-yb_JW~n34VDLw\WRߺ!OZ p C&5<<pD2u6;_-Oym)XE>x1:onx<GD)u>=KRv?Rĺb'<Q+*G,.: - n+(M>=B, Giӆ5+m9QXrҋ$:"j\C6[Xaј$mUN]˶Rh@%NlUq#tO^7bu a5yAto-}20!US}`OYߝI~r6$'~0\+یxěySXF_ٌҫZ}4W^f$sɅQN1J1R`zO6"ɚyT 5H,EB&a_% [^.=4L]: lXS cK|0h2YwVEGkQwM! 휏4c#u yb##*G(qoSb*IcNcnG! ̉m00phU;DP"aM?' lӯ/t%@ۙ Nڽi]a}2N-}`Y%qnQ".+5(ZoVnX {k _nWm.砞g5V">Td[0oEV PoS D{4Yv?y.p-L|lC 1})8{m sc;W ^f5L,X\Xя 2j{WO+''+i*!@+Gٱ%)5Bs Nc1[J*A+7Pu]HX6V-t}^I jO  BWޖ}Kl!ilaYLқ9aB@?(9iR Vl  fukK/9$!.@P]{(ipV6K*(R̐0+w"mÄ fUhP1D"/Q9g6 [D4eg9+Q/SR .>Hٲy}ɣ,]Pz>)s c"EN٥ U⪥w7>h :l TW 2hR{x:y5CƉ -noA<>M{}z]7m ҧ/7ʈʍ|QduQ*Z&b@/<~haak<5Q"_vUЁ~\D RCwrQKUbS&9 t <]/h,Rs?UBzVnv <̧;sN2N tBf$@e|>m'Idv=ne2h*Y]Jj9y"ƔI. b[95 l-M zRrK OM>7|ELc^g sUc{I̟̐"@(6[pWG98Rl{TAk/mN4w;IP'Q|- eґgݏT|Kbkf!'ο+ʇq߹! 7.bb(c\?BK˖B)8VlcwqڹAq!fϺHuG+4R"L93jiBp}aP{U4?MMuYnV)̹тNTunԑXVEǎΈ;iMZ!k$s'ZXq69cOK4rLMQ?dUOJAI+)f='Q?;6TI _ 2/ PCZ3fg)y.jH|t&i?Hf7Oy 4,]Q|Veޖ-RdzHE;vQJY8%v(Ab5y/:"Ȝ+SJela]W˗`RLXޒ_|Yg`k_nZFِX ٛr3|Zxd] A-P-;-pxN$H\%&[~L +]AѱHW_ǥ(S!AXk ^? Lxc@;צFQU"V 5?4퉻M8h zwY󬠨AY'\ЬdJluYP_gE-L5蓎Ĵ(Uݚ4o?/ш2[3Pk7=g0*uS.#};P\w3֬քj|ʞ>$q `1["e(?.1nK;dW^u?Rcym~[q`ږe:&*fYj?3]렇ˎm")3m!O;_3n?q'.Pv FJ)J`q3/ҝN-,H Ǒ80 u="/S] CP&mGJ0ToA"uuB2>o E[p', GTK^%&P c+-ĺexhȒh|&8[ICHO??B'D-!pQ5t >޳)+Dh~VT^Fz(p}~U~UVTŝkΝnd=6:H&חׄZhW)':˩ Lk?|W\NpAѿUԷ7;ffıXiCNuܤ v9s.ӝYiNg:Mn$lۂ:@21%eĴI S(_ OO?˝eC>)z\9To 5Y`Ivu%NҸ拻ˆQ<͒>noN2g #o='_>iP2 E\6#ȌOqJz UWi5qR,Xv7#[o1MІpyc~BNlK+ϧtD 9%)7 (f5Z֐GzR<+?R|LyS^Лͤ#Ye !d{Hv7ɃGH>Df@}hKzd'M:7uSK^'xТ}oZAv~>yAPMEMS}6W&"lj}80Mf9CuRC֣ }Ј >mZ`Dծ8t{C|fDžz=ExQkvwbZյ1"aZžz$\ե23mVLZ)i%v:W[n H%.|T/:qLN}nҨ^-,>%G㝆=jV_G~oSk4̾HijJW/|p|{.ah4MN# #Ǭ(Qc Ȩ [M"Ot4s$zKx8d##-"VAK4*[|p}A4Ry:.Mm&deg >~|MW#n  gea)hѿ89/VB :%Bs2/_e}ʂ=Pa| B4޸گF)"XZoo!_1iQ 7Lױ jR}w[Pk؋Yy^d*`8f*QJ趽a*LwħeoiV^9cAƸ*Oq~nhrl=T$\$WYY TZu}aH{:UeBY^ʅ~8me CȚicU$+7 Ї |~hRkDem(`-'`?|d.rHJj:5 6Kɑ1e+;l &xSQ g47I`Ԝ2Kiq3]8?,at=+Ja9. $ }gx(AΡa9aǂYs #-xYN]x.=$O@j]Mj0%o[g"*ъG/ FƇdSȤ@'G BLϑ!ɶ.a80VIL WfF|ޅQ~?}1ۡ^g(16'!2;L*j@) 4355[8zлR3"ZĽPD?&9Rp: ʵY ]DhߤLiDqouxX2 sI9Gz/x&A%(G]/]\v>RYd|9΅9:TXw_g ˳V w7uZ, e+d?׊21:z05*b.1;|TE#4MN $^6#QWYQՙOON_Lkpt+IgԀ02|#uq((BPcၵAtAmj?_[ML2{y1^ &hrZE~?*0HFLKL7&轝vk2P&q1GT V.(oUwcaTǸQ}r BTe63 d Yoa~}`25#0"b[8'`n9QIFy ;V}:TQs,u6W'=,mït:%58KV?>o$(m%}n:b;D2/zt "d@E1_YXH#&L XNtOxPҐ%96YBԇ A!VE0 5$_p9aa֤}UEko>?b;CS5'r삙Rge31ޡ!0Hw2.]Q=DIR.fл/b Nc9הlBmn @e=O1.^*8RԞh2ve8WQD8x&)w mc.G4C*Khkx#R e`y4s3| ]Ό2 IR{@\BN&7-Fdh}/d庂߼]9%ś@At[}Nիp9NY>z޴U5"ԕ5=u =Y}/ܞ^^.g'c*dF֧(a*CZU-H-gpAx]&V5"e {6^F-#p|mCdsvYg_!&6cXB&y1:#IY!3dG{7I]Cuu7I]Wّzf}{ DA8߮t>HP;,(q^dnM|`w1 5_}H%FPmQy]Uv|DS>jگߊSg^Txi: n3VA(Nut j.]ș۰X/fxL-\U BVŰvwD(8kw@Sd9,I|qv ÿFa&@8LV*~˯AWy Ӗ;>h~M!D$LxxU$J6qM]-8B;`b z>[>bKrH[_8+HKݱdUWm+HhEđ-PV?qf]Q r]ZHdl}d翄>*n)<RzJ@J5b~Ht FϋsX΅t֥K1 f3ʈR/|xv2lFQ9FIqfܕK;"@o I(68':|ccI~̟n?GP42Y=#|N{ GBxI1E-d3uUJ|&K Kpqg@CubWn#yhƣ12Xe_8ە5%^-* dEt.qܯ/&?piE#ImD/CĚ7}(RRon­'䋄+ch"N*omWh`s]8еHT.^E"+z%D Y!^_LR9 )4z.9]9:BGi0$ZIm7 ,P;zW4_)]إI|x4s @ePBj]Hߩm yڄ9mf Up&u8r;Pws6F3(]-uAXIȒsanFG/#cȝ饂RtdSpS Fzf$ca0ÀN*@( 2]d7z84b''haЏNkPMA9xr.(9CsCΩح/TΩW+ omo7 * KFdCAn3 =[訂KKMȓH t~T{kt!dzI߹0VAX+u`6 vϔدf;6 IdmBc8 K"=^E^_ik<<*MRA@8:"F 9utҹO4F42KR:nSv-w 6躿4,2luHU_~/..k*6?U*sԔϰlǔj!-+ ^i%O=5yG$XK\X2 y`cwg&˝^HO$rD'M643\ ,f)Q4%;%Bm84espӭė50W-./Ӱ"`l7 5a&Z﬽Cc%~~蜲+†JdҀ}R9le /h: \O.J')٩Wf 14xR˔<;:%B^>"j!W<;icpjGj5Ys0ZsDJYff@ P@|)$qjʝ[{#2NLm5D̦ڥ46O6n#z~Fos*|1UIr1-|Bh=%COW롌,j  (eb06S%aӑUݺ% _˟nZ1:\y֫{X06kٰ'U՞׿kuS bhfkIC "%= ~?evTY F@`_~%| PiL'"@"1Sí~ ܦa^:x)=|UPSB3¥?%kФ=f6/A7]C(kY`/C[q%~u-h5.QnM01!;u|/B{# {?d"pك^LO'u][\LQp~O56'_GOt<蜴G坺bda*8R ]t+XK56| N̛8ev u}QQ D׹TmX22%a^) a5w$"{ Ի[l[Ժ.ϩ#Y׵;8Rx{%ߗVWtO7qvvF ;MBIIC(1Rȣ5;TAKQ2S0|cas:W-{Rp@֜Q01Pk?hOUҹ,8ӈ@hB(j5׻ny+0쁒@>WsEբйP f:MK=D4 Żo_;f . )`^N9Qy~;/p۳8j͓3;ĜJCW @ " cx?#wditGs_͎z{v~ a2^dEe8Ŏ^ZEL^LbmH( @6 ] :w&d :%.nnyi0"3Mm *I"BiMTUrUxƮm-& 쾲ѡW_lųIvx;u:U1ap09d,m g%Hn!dDuZ |~l߳_UɕiJ>~]DJep.S:C`yk?=~I]Ɂ kSob."Y~oIY񘈈vN/W:mr1}?зalh /6hW~˙KkrSDi8xsv6J?'}gE 4<+@:&LDaKD2^ofNJx~JȨ7< n\6o}g҂V[7'= }1a &uR-_ylQqD;D1k VY\NmS{=LSf͂NiW}3[LUp |v<ҿͥd&7`kGYQkٍs-v>a$jZK%g>Sq?yaeM1J&7ݯN\`u]?Cfz>90ٜ#&J?rcY .[-ih9PQuDNc%J˳m~wS( &6 #{L+hˆzTGo/CҼ9*Ĩ;KK| |}~z /CkG | 03!s噼F'A f>Rs,ZHWBaev(u4&HO|yzM\+_hloC">׺?a L@K:m+؉YRFV>&0"Itȃi8C~c\.CC1pB⥋ cSs6}ÅLc /j/K8:7TX8,;6g֫;w4L`蠈 y@DPCM_#}>imwԹ_F᎜.uu[#lI;~aooRndȀ Bv.sp[]~E{Y.4.}Ov=^= BDK TyBxW9i$*fPfsđ㴐O0WH&_€Ň0Qg`"( =G N}4 *U ~{BG5xl0׊%ϒąs@@|yo¨?݅=5BRƂ"k)C#޿7%TyЀ}4=yP]dS!TQ%xO3Owey2d(w` C} }>we_Saix{s6 /i gᕨ#"PIw5' ї(R*Oϟܐ9 ebk /fmq[$ہiokn u~zRoj?jM~0F+2u]gIw!שakdٴ8B'=V3zNCH~O%_y]6s1H4TקZ\{MfWع)qqK!?3>|[}oW쏷۟㯆u9oЄ L@@H9`r"'Ly?j9-g݊e- 8o'uԈ @ "BE1e3{vG]CpFxu =a߆t8?7so/^J8J ~!sО=WIzl38uN+SJ{I`cr4J _E{18>,k{Z[2VG# ]K*moٛlnd`c4fS=o;o}19SŎ pyNS0~WW_DޤM!0̽qteV_S5+v,~E 囚k_ 4 t4"91uv ܮ4_EEn5> 9Ewis[Bw =S_}pAg4PvohJFͺM uu${m&}^d\9ZlYt-uAg p! b a*K)BT *kɣ41zg4k#ѝ1[oe]vt*S= ًW!(RMMe9i Ϙ͗=?KI`tҼHhD S̢ jOGO?fS KL*/I&gw _2UMԛ%yi}ѽi&ƒ} rQFl}&ZS:5>n<~cgYԑEqkˤ3{2Z n:ï/@D]gD> >oPqygb}*3>&T +2@%Pg}}!˅Q?'Ls҃rrDx? (rS_؏$пƄQ1O*;@`.qg#`gv>?d |y}tSLm oAMB>8ԑ"}̀>4L&H/@݀'ȕʃa삏.!D2 E*}!e*BB2"y@^UyRiG_ϝdU?NEl{AB=Mɀro(ؖ̍^1|^N ::H;X6.e6e_>ѣ}ʛ(76QsmOϨ 9ct7ďOKbB}-Qz,Uլ[Wd#;+m~{ fkz߹~|s;KU<A)/|!G^>Xflp=$7`?Rqm7 rh8`!37=߿~v3AY)R_&zPz(Gl-jskt  s7tR6 ﻕ2 :$cWa^3Zv NSP8p0K1Y-_I\WbהO^F0ftOhe)Sr aTGOӻ=[7 g'\0[eӿ v6Qت?5DZw9e <74Tr9eqrLUMԾh(_+==LcѕaIJә:A2LD_Lb;BA",ߐ(? s0!*4&BƃK_߂#^wizElyo{/oY{|L6r%{Ū\Uky_-l|s&ыv7ʁ{~vkpSx;or{MK͝޳iuYh04sN?(;wGP9 :$_c=X^ds`>E8-`>ZWXỤNQ/2Q?9$PNU(=)zc?dWh0@*? "?O!ȞO GP!@t_T=L%(&EPH#xp> @G800H^F{3yimvI\{,o&X\@c56D)P׫wүqA޻Kq[%ro6HRf,zWEHw ^~ڥՃ+7' ? yO!w;KG'Eϰc< !0O͗Ê&2"SW<&K53'e-\mvz~3sG7Qc+I~u7ܳ؁ =ֈu>dZE2>ry+5ym*6i;=&3#.Qf%8y Cu 0],I6FZHQ&YKq3Ra еy%W,s  k<`#f݂Apr?RGɧ^gZg&So݄F10˩b@Fdp!U0yj|MB&Ԫ ݏꎊcV͌PdA.οfH98*)޵߃H˿Km$YM>+(š+z]ʛ}|_6+{WÂ/yܻFk?M2ˡ Egцsْ.-%Ai?h8Ͽ+5)$Mb#OxX?n\$-AyeBHo,d~@5_Q?W=4Zzn_UZH~kg}'wdnw5 yzo e9#đ̃yߠ  _g{ 4EH?sʊyO}oa} sno+I#q"%-ܣ_,nZ ̣[`V܏1?A)S^cy! 1l6KdjjKIBV#%ʇIٙ&If%'@EFJYFU@c2hO϶b0 Z+T <@4a#B?ω. F"4ɨiJkF vusoݙh.,8n7C%]vuA]?m7lj~V*ӟumD]%vwUHY~kt%'ie ¾+! d7ٳ@dߌAC1(6/˺rUǦGQTlr)x`ӽyb_g?p?okãkXvZBE6jHIZi#UHѳ_Z[c-\u=Ԋ‡@>:xW%}fgGZIs} F'ʿi9Jrσvٜ%}ZEfy ^ [x״3մ pWsHA @?{ƒwHTv>JIm~?U12m8kax.P)'IH~ LzYYf 7d`9)mcTTP1goQņ(CviDզy].B+va@UJ Оkڼw\&,I#1myg0=>2ɯ4\< |PZ0Wݖc"ՁkLK }5i5>e HFx*Y&-9|sa H90\=NY6.Jki%7:g8AY&0øu. Kk80E(GRfKFwL{~YA^ a!LQIEyd@v461V@LM%Q6Y4[LM$̱)ȠIhiJ 1)p0P"-a`d.֒m ׅgWM_~Ozo#޲eo5qi%o3]E\OH׺?}v-n͡N?rxG?o:IumXi&9>~&}FC6Rƕ&p >@>z[~'h <si`=ݜz _=R%ÐߗW۟# >_D3ķJ/< بzGvO׃' Sk߭ },D˓t^_;&͇B;ZT)= Tytdj7X>u/b\38_s4L: W]-3}~OujVn=Luy`}XFǏ ű{Emx0<)UT1-v采)Eh&Բu"mҒ$&+}fWd F6PuuE/cy*?& /X7Z}_;eLlcӂ7]^QgKAiW bvEmkA?- h NLEiPxP<@&w9% D0}-%"?*T n8[]J@!3 o{aJF8CD ̱r0Q/ NXj,s Cη/?EN_gvͲO۫sGȭ->jV_.e504y;ovssGv>Ui{k3w]lBPB?N K8'>r=H yІs OL:Z#EsHzwv#A՟N n[?pH~"~į@Uzp?&~-RA@n@<_:p#6(6w^Sru]h0GS$P')\+K M\4`dsjW命(SzȵLx jA^W"09l1yٚeO0Ѿlي@%ƟG&e%qտ& \]^?mw; .TE+/$j@/ k]Y :7i|x̢p '21&0һ?$\-]=D/@l510a.+ h d3F&1)N`i9ϐo3!v 13БvBD.P1#>R;!RՖAf-X,zEq !DN ř0_)*H 3V]dKhBn546mP;&ȁFP7;L,$/Hc#@d;$`u"BH |Xõ՝uav rhB8Wjy3Bq 1l߆(ED5M6f\B8šA{vNے|.EZ,rУr5mM.WG,;D&&5ٺc V3ۥleu!kv!UaiJCmQ>UEc( QY`C@hRKZ&ij(N݀2r-_0Yi2W-5`0V7z:*켕wu}z9_5ԏzճv$0lyKa 3eTP6}eQUdzL}l32]Ns \bO],4얻ELRj 8Djx]9J㵻^k|E~pBvԒ1#'mS9/3r7d%?o'^hV{ٵ)7zJ+佟&cc*t7 Dk wv[סut!uZB'x(1\m%♎zhm,12gq|W* BHRg4>3:^_9+U/S`f3=VhMbDTx[d`l]'{ČW}-sn؂HtFzwP[-^u0Zo,X+2o\+B'馗O?])͔()^G,$ʽutOZl\GpO)3/ѼO?uX@[D_Nڭ5y|ᓥ=6d>C/pjNY *5xI} ׋cO&h:~H3boDRLG᩹R*)o)U9N2w:q{VG7GV-Vn$Nq.1aiAm_2SQ ݻ ?ƈ8p5g^j;V֐g.yG콿u-w)ӝ%XKPB?oIA[Tz17Csgjɣ_WJC_UoaP]g"-Na5cJ/uTzCӞV|jp^v>{MsmGxkg]@m, }J*O!R3X:j'v6W^nyiOQG_ꏆ>]m؃ ?JC|^ג:̈*83!2嗄P5N囪WC_Sab^Gw9hFzLV'?t杝ueb~s }xh2pjz62 H^Ӷ_a`T~^)HqlLT=XUpѪcݪ{LvjD") ')kI@gkK܌O e! 3xRh|Al?Ǟ"rf?BQ)[ZY 3gQ;ҰyR,ʗ秜4P$̓JyKU`y3Vd'qhcHQ"V᱌F:ݧVD|Bg ½ / aPYByʔt8a*ahd;" /#c@akpPYaˎϚBBxC{=?m@E>dB?$; BeCKnl߇+> 2Sb7H!;@ B%zܽ+JR;2{lxH#E 䀥Ev}V[4\ءf!Sp>>G%x%Cw9W޳5/M1$~nxeJ_!Äi%2H:GQP`;L&>m? sk 5U_5?Kǒ.?( 6#eʢpMofmkTr|m&pE Z8ȥ"n Yw+"3U@TKT#bƇ}ooɥN `$;X(BRhO)sqO%6L ib42%a;2AH0'Cr4Ox>(pGɃAɥ-jK9YA qV9' Evh(O B}$y._?y5& Ʈl4>}Kaײ` u]!%,F M]>K7=} f+7lA7Hr6L(h-Y6! bzNqnB#nP($Qmd@(Q@8܀>}<~ğǶȠSx2@RK&b wI?g`k顂9: nr .Gvw,]#!l'U/qc;h~'Ǹ^oI{=s?7Q]1^|MЋ,FA`Z@ zI/Y' ƹ!S7QCC; =ZO+GN!`kƶjWg m Lw-ɦ F9v)|*$Pms&L Jp&`>6˾o_=%:0>^sbq$1JDDCṆZnURJӿHa\; @6j1gśŃj L/ ' Tj&rKӥ߅a9fdԕ_sXc~8Y` .(W\4ggj2Nfszm˝oex5y"M$Zn!gIPh7QEՕ&I[PE9$o*=Pe N'*( cj0AVJQWYε5q_[TRB_3,D-VVPiENLkݘ5\q$7gVF|E (VBK'TzL3-lb Bi4 F"'{4p"؃͓GE TJ^&(ʆJr y^ „PEe@l#[%ASP?e*|EW'&߄~V;&\^=i mΗGPDɉYy,VP>wc\E_}ÉR= ѻG\5|n?¿uCGE);e}* ^Uː`f5u_:옰x͛B |J]5Ke/kAc po@sW'9%q'?+$~\dO85 (@\1< I:{Ş(o/צy,•;A(_#**5)5ܘKa^X5g0`D bp$zwdeG(rnUFw}Ͽc|N}*hcy{:pV4.Vrzv!;+a8J>#:&%E}J)'W~֊=9i*9j_98&84^$ӖD™CF2e *%7Ob5[PٳW%k9@ܹ.,`jӹ8B r1ן{fM[:B̬Y2y+_48Eu<aP|ȔI t&Wb+߱ YqH<5+zEȦa!$i#jy9B4jd, xz /BZΒ3ߙhR=f1!Wk ,vᰶ0M i/1^o y |5iA;a7u_DJ1T*sVt-kmX,H&?IaO4Od:Q>7 7Y{4y c+ӸޑdmsjK kph I0A~lڭ)Hd]qNrh u d@(6EROH/G4$Y݊ ȋcH7 =zm$ɢCgҹ鿖ŏGr3hu aJp|`pίc9vZJ/96]u1<4 ۱QA4LArDSaE!x>8_@wG?0odkIiguފ@ mC[{KgջUd k{~[>  qu}ua>>5y ȯS1{-?V xOOMi+ݯi*PPyMJZ@Aw){Sb ΗWu~#w5a QofbuCeNԉWJ PL&[csx*,Ɉ?kYfQ9S9BS0zJ((@C&Od{0B~b]BggCbjģ`K@/v#ϐo f1{-Z._TɅɪ0J_]zۨ;'486!@o6^iP3sZj {gؑKxF4o.uEP a`=#~i$JUK(eڶfG 3  ]ߢa5dnr2خq.|ұqiEȽBj*F3ߛ3V3i7IcF$a4}c/?q?o-ϸb䝞A?X yla2k{yJ'52rhلf Α,'e/u9JzTR A$h2ȕI.kWoIOlޭG{9IHiןX! ~SIy?ʵ,5즒L*^YYUikI8KC?h~%Kql}| .d FQ/RTqs$ۀgo4_I,:EPg <O}΄*rMo{V%LK y֔+6!޻S,+W?®9 k[XRq:T44Y e ?ٙq(ؠ˼+IOS?ڿ&n{HQgm:}m&O)OhR9S++bj!*K{"br1v%taȇ!w8:* U|xkVw\#qIn)[#2{_[?9XȢ)x*r '> =fl%3:"VR5-y3Dܬ/KWϩeutioG(EѸo)!N̓E^lH I1j>ԍ#5ZJٞ3^&ǛsW_/U]Iy߾==;{]ښՖ.l)dY[v@o+9\ I"0#Xh j lP7;29& .J m>N,++4 ̠`El:kO[Xd eu) \ 5/պy?7?;g׵` Iޯ&s|e"1ECέD @J{R, z(ɝн/jΠP[a*!{7+bj H@bNm1RDlW1~Ƹ<2sSf6uX 3ͷ}ql5__w۝@%>s4'SHiQ=AɱqyAyo`a0di h1Z2C4br_goˎ7O̝2ĚK C Ey 5Sajl'Xcڧ'_dfȾ_'ot+ɑ/Z}1U5¤͔נٶj˰QA;ؽπ^)AUM.ȢloEH<ղ* fEkgL>b16|{(g;+3mvisReJM},)&:b\wȧơ:[,F/`ixviUv뛡|GK?2u@i rTjWJuД-|}Œ.`RFgyА"@؂-[\JIVɗ3В$ߩ%h?LV*mDtsWch!gn%ͱ_Rw) ؀A25-PX2P )M_[?GᆱǛ߄⬄ֳ08z6y{4.n@ n,sE;o`ZMze+Y4i@l1Jd!{ʿ! v69KqU4$C޳UL$ ^{ MPklNI(_.̐GĿBO f+ѐ~zAN#4y ⥿-1!]cuB:F"dBُ8M5BˏFWAjL5WSSheҟ#F@:;Y\ CpzǴbS  .W 죚q=1òÝO7r߿'țx6su;zE~A5ʌ_Z%*.YEJ$V0y`.o/r%lVG`6!z^Cm:Ӌ1Zs /0EW7Єx@zP>A|Owjw4Ӡ7/:/A7۪o衽X▊ WAs2yj|TI#s2|9d9>D[wPa܍I5VWj1T^|u;u9 c\$- [='  Tu*dBXG^9wS5Jgl״ZTb%#ʬLqEѯ%zÆ Fg ICGY;V$I6Hyw݁dBXzR2j*!<@ ʀ`9`o3p`f`~D9 &@5 '5z^O.V 4Ii8ǁ.76 x0J%Ѥ&Rtt 3I RJ򶬌/]UF|ѿ?-~ͻH2ag4=y،*V={c*h򱩅L ~v .WE؈'M'SefW3\TߤWn-wXnv1& .XQt5i/Е~*a)֏D/BlD2\aXAsysqa;ݺfS<:*^2g-6n4lΰ @i츌ȹIkODVky [7{^7*o^i;.].A/q- k!qiyr9`c*8~גis]?/BND*2Q~,i ׹ENF԰GXK`&?1Dqt]ɡd|H 3 oXz`4ObB.@OnecX,φ`~ V;'j$5Q{S$_4'_Gd06I-\  -dxk6 ]obUl]s&5O?l^v5{+JOWzT{퓆;y'$߉:ɺOG[>._o+HRahJlMVJ?(AX¯CO!vL@{-H?zlY f gZJ 7ȕ;-*y_TGa s9 /$?Y!_+Y!44*>`3úZђn]_/_Vӑ1 />IR?wPN9-1y|w~lO3D@+Ľ%%;2Kkֽp (L$13QLh?Pr,Bh )u[+ZrqeI5w~OQU˨Y@X>ØƟ5y 0JO` /]E|t٢USCw"%`cAO6^ߓ^ 3HxمSƠ6uQΊz*1C ׬ i3Gyв*k]#{s7rX`U!x^%X=H.?V(O/0GnKˑ|U~Hݴ h>2Z}[)(_!EewuMe|ؤ˫ivc&霷.Mf<Ăpf2U}+p)]- ~M``"#4e]@ZNI Uk}j:87d}>(=@D^s8\30`~:NMͻ.P'(kq hH5Z5P"&Yҭ5訐R#dQ/fs8>5^]QdTui^dIͩpӤQ^סZCNa}bBÆ]tL-4+vZdmP*4| x|_0SKHC0H'2{Y// σ-] l۽_:yvIs軫{P_\}!Y VNH1F_:pf[maoP.z7t}{Τz-XmҨRp2R|5ay=7'mۂxzNۜ(a3fצL[ק|++@$0զ3ݷ#ǝd H0n:(-4#թqtضͰxBM',4)]<1U_Q1 ~a4eҶ"|_mDl./~Be&v{Da^!6YIw*ھLjHٱ}jwYs㔾,a?g{j0ϭ1KQ4A4%$Þl ײx|u:׍@b M&=S,? V,p `T !2n٨SaV 55sISAG@_ |Tv1a8C(\n;Hɓ<Դ:r퓚| JxU|܀(puPaħe`|c >z' *EuH{Ը8J8 d6"%rE| o-)mJ6m\`"hؐx7‡!'QVKܲۼU7UȥbP b)$!*8RPI3ipnPdZL̦T¥ckJ˅S>.K\Duj )3L!гf%-1U?Rs+IѦT} GX6Aߝ|S ـ=qphn ?-u,'(WJ,L2XѝMelQ="&$lgk72˃өm:ȿyX>"sYrYlЀrU-:EV؆lUwEx <#sN;sv Ԩlc,&+%sSRc Wes"L|#HpD|\=FbBT\.-]T*k˗ B47Z6՞D7: `BWeq6 *ئi 7^+B̲1l !sLdGY$K}֑X \$@ @! |ޯ1 T$.-YbvLH, `o/]ɃwYO]n#p9_ܦl, Uh")|aPНpĉGX#DOt l>lUnGS%1k5RQقF_Yv"=sU`qڷzb*_PիLos !ݗH2ģmDsj@IMrq NQ2tNa=hbYw-l)({ov(-#')Ѕۺ6[ w{e   Ն횹Hp J&BjP ri]*5j00*F̀lvY 3|SJ BW/#t-#O9C"CB!mIuNIFeN`*qJ(|{-mS |sWsF%Th6g4 {q5Xȥ7L,yL۬VD5ҝka&^ kM=ScѾ~D5_K8_'pp|꫍'TyO^t@o DU7]b/J^]`HO]8lk=et$KH=OoTW ɷWOV2r5)kr>g$T@P$h1=K[E 1.o! l;B6^f;}70w \RP'B 4PED}7GF?A5_6 7 AsV HǸ $$궲q܋ٿt3ڡ}^ TY LGi/~ɩ4$n MfLB@Ԥ&?';f:rٓU| 3|C|-V?WA[ΕO'PT^.x2ȼ`M4+}:"yg_[8Pq> cI)6w7kcYkJBD;$0f<9G>hG׳:/_%<؄4(?WHuoGꣁ813q9c6DkV3V*@I Z*I<͸!Uϥkc]{(dPiD5; Ƈ1kӸ9 w6t` &d~SER.̣CkNmhOÊE(K8~E><;HUxCt>0@Hɘ'Y p2T:LCD81.QZW~`y@|0Q }sOq(RbXM $:LKdęP9vb'T`L\K. _}j)Weox>,vwEuNt7{ j\kL uhEXH=1v9S;$]0XlI *.t8N\VeH %ms0QY´?y ?ۺ-a2tHAzf= Aތe81{|LD,\1P$9y 7osbfMQM,_yhXz;a\ ^B#܏/U(~&8:6Wt/?K a.A+VOóģ$դ@ հ5ǛO5RT+N@6iڿ;8gm~g~3[w O ēT3H xB)R3+5#vud^QfQ 0/'S ek&I!Y40 I dtpXxn6$."cJTZ;y)IiGMLmtkjT%' xj+){O39̻qKI%:L1‹*؛pA 2>6R=zDHpUVA8:S;"ø$R%L'LuHEίH-ICȀ=QЧ/<\@6WzŔ:aպlQ)J,b[fd$^'2iȘj48^_mL1o,St:$00kVC脑#D S^yO,7"Ʊ.z zG7yT$qIb?~{1]ߠna#u{Cպj`T n\myMuʱqI'> NfNQ#Bd`xx/Eĭ<0ϱ7(Ȁ A.z1xh+6ѮВFFxl" ,/Ax$jZSl%<ڰ%]j%h H6 w[ݕ^1tbbRU|O'_ yW12&Й 7cwy_e3&G DZ1B90\Iz d㶕Q< l!HT/0;e.>)},'^k~; gSu’7^͂Vg/IPkl>Mfrm 3۽&Ąe=,Ch?y\J67,M~>\K 3IM+4K ^ˁPȴ[='}Z/,2Avos;?[p407n@,Sm}01I!"x%;i @'ݣr()"7^Coo[9o#@]Jֆ!gP`'sҚj `e . QӐ$2_9Џ WP x1=JBGhibGޕxl3Q8vd10ibW[mq+nR,QJٕ@}U]5o203o</dsbzN(nt .MUG+:+9:cg %?0S:n3 jԻq~ 0 #AȶI.P+S3R J_Ax "A|K[!$)`ŘHR I[=H$`)mA$ȂXcS5終hZ%Ubj12]QE 䥲9=i9I1^I P+]ʜw4TBd<$*JVB!DUPli8sLEy*w 9J(ԃʚ$O:a<- a^tM2V{-AyeJtL& =3TRj륹\vwf`z€9ꗩxPJl@`5Xɕa0H+}`lS\[zݝ(Y3RD%REGHhI)&$@Lc!S(.1(h[򚽲,+w2Y[HzX@[jѩpӥJ)i%q+68#AaZ ߵ~@ v1I޸VUTRMv%642rAruPFs` XM-ryL2r- `5-)94=-:o)K&!QlӱrB"9 QJ ;VԄ9U& b伩)edV tEiBjA:HW( CF[, VGeǙb)RtK)g][6DW12,uZ1S\*O)ب&"9yyzͺT,Mޫ!U;eE+HN&B 'rra#+.\S :cJj%5,C(zŒTTCUt $TD3Et\5D1pUotH,#)$4"jRVعy +Q+*fv7X3+5I9ce:Ck=EYJ j=k򶿘xX?cYZ_[ L#c?;G6`uڴ<1ĝ{K9n[sdn6ҙ%Ch]*& DD yВɟR"}˅\2SmN3/J(Z7Gߺ2#V2ld[x#锶uA%c4^|λO:1/iT?O#bSU D\ ~fzaf3nh$ ]m2&nG#-'IPP  !M4- uO*#CoEvfs{4q-Td'8?Fug0.Ƕ>'IgbEea^[:*/- `=/.Gtꄟ0] r" H-;e ^3];~u2? lhV!ЗAd *`Wnq< SwdXD+t Q3q~EJ0MItiw:jy,߷ vȢ2N@>_{MQ~k7BY_L ymbKBFuC:g >5^{8uhν唯T++*hr(龜=2_ EhzdfDlvrG1c݂ o,px. F[=fIReqQd<ϓ"A*b"4r@\tl^-4M Pac]*RcN1XH3lʛo֢pZ;'zMng5-]e х8و@͊5q>l;rjzܕA YF"98Z-lX/#}h֐yeDʤYb@Iyںs%Ãs`](A JMOܼ _|j1ietըEP޿Ru*^9GDDsB/kga=U%oIx=GzڄAM7R) ^`Tп@91ŠLU)!v;q WpVE e*>, |O !!չBs3i=z{K^}g}3jKG5iX`w}c]g;]\ֽRKcָBNOWLnN/>?Pxg1F8 dGfoD醆%b=.vyPou!10dgxn(| t%#u!בce;HEq vUx09 A+HEE*8`dE+*Le [&keU z ]A" %T\!"d[n߾M_50ޜM;mi\x1M4SBv &&*PTs$ ԡKoWA&4@"jR!yCz#XVt^VMRP+}WT)1 IQ$-l/"nk f=vh0ڥbHL8A]_U,\"x:܊$T`!? tE*0EtXrº4HY:dMr9@!Faw.=v6,MNcc^t-@䆃=w:%fA+sadֱ%ni6D7M0 2r@ 05g Z(Kj.0$WU1s"X[z0\:c9)$*erq=U-$s(B;iaBV ښR̐r0$I&2%(\vԱ2kS3KBVlOuU,$N2ƺO}&`%RĘED.ˑj\6iЙ *edMMijYi"8EIP #c\@Y^* 1¬ȓ nę 5X*V䫁bɘoZ8%B́db! < A i#x{]Z$}Fw SJE?^1,(RhH3 PJ@O2"`1DdžXI #*kP*#i /?1.(9ṠXt&4 G'4E"RP9 1r'sEkuwj0%^ hʸ$QQScYT` ZtP6RoK(A^mT* OX6߃W<,2Bp<ѓ1`dL:S1dTH1ºR׷l]U)jl1QM+X0,k,/@1U~gP: (эؖ/4 TaԵ.,^0Q11#&",kPBh>i.=GB -M)YrOF'264=$k+̶1M'i^zx+nLZQWŇB'¦S@ٵ;" i$kwyC1B*[B'TlU-;"MUYiaPpsy)KPn3Cu;UؐMM hii6PDѐ ALvڜаX6M ۮztr+V,+* E v<"_R k:Y+RspF"IfRQP`.* kX<é]PpB੦S%ڪTZTcdU55PzCe1jzeZ8p@% ^VU\V>4@.>X2֞|@Un6n,NFq`75qgœe<" LJ3!4Q@ʝ,AXĩT2E`]EH])J#IuĮ,t+g"Uhs@r*!^T2-N͒oE2DW$Rk&E,*SM&QJj'Cx]ɦES,ST^YyB-&iTMIP]5rEC8m{?;Zʿ8(;"1(O l 5!4#_ hlݥ;Zy%}ųw+Z-ɶ6#!i},d"acܷ0C_}\Ft/Mж]q":M.-?[x-ˏw6e5T)Y>_؋CWF ~+"Ao.lqс@6zW7CHtuk}ٟؒ%p$mlJƖyR.f4VbL]C22M՚>$Y^.hVګ~YH5 4Zn8yuq.XWBRP@Џ}꿉 lI}J1Hͳ&ulmmNk[8-E8~XPR^I\eV?cYZkw /kY/%q^-hIP%xXͺtA# b&Զ)kh0Ϛ1]/p* J2:tӡ;Vx3UJx8CX#ۤ9z#N-(Q.7?e3kj# ײqx$~h䥰p;$n9}*3z{NߔD-SG;?7g:P1(CrT^`5Nb8| 0AP|Wlk!/3t'"ҜƦ ´1 B;EV{) |x@>t$.OFz/{HKӏ !4 A2a-m|+Bb~0д͊SB8 Y(1[ ÁNJ IٳDtY`R}w}h94 hJPv2=7ߘZ/ߦ>DxPiV #a.Bmbz70}9jf(~YmJ*&03ۊ1ab?8e!I;6`r>vPx+zQ=yD󳥒~]o1^.ҹ2LNPbVZ* p!)WK3R=e EBF_l=-G롗 > Vh+Dz_VF{Hβ"Wua2ʯTgNy%OrݣEh3tOQA H1eEJ40+g+ *Н&u#g?{[VzmH;0kB5@{؄/n_ѻaK Ԑh*m "Sia~/GO}er?WAOHYquy6ƼփKhe׍ (x.QAT#ʥ͡;TX1TsƱ;* 2AO+;N=kz.;ybXrr# sF&0yJ~\:$vkb/9`ЁC0'dPfgx*X2++Jڔ>%4c$G2& ϛK`Yո˵rN31n dW.VЏkBESOh0E /gIGiRQ#BE &p<$qX^il]$}7tgA 7P͛3j:ƷE#+h$?p>y( 9!2w5Z,s&GO_l064S2x\o!0&'H>r"Z?twFAj(zĀ>܋{#D\$inAX(XqLTG Ùo}Ik9.J9*> {nR)M?*]gs&N+?hPB ox%zRVtk)\GZͽoAlYPțx"`):-p$_¨89k^_͒^:ט{9#1XO&CH:n&%.$Ȕߟzn:pZԽA:m JO_[1H7s5zP CCssX_E7z34PrO࠙G飥jnv~K/e._ZoMފ+y#\47>7o{_IXmIvσ(W,Hcŏk>[-h}} ^=vaQÁ.tF-[k$Yu,H! pwd =$ +8N\yV)儾tCzq _@s%bp֥!(ej(_üspSw0p9sA`ia @s_VDCG䑤Ю :!tl9b\*AI~ݴ|zu 8f ~;%sU^WonsRV\Ѧ6jDDb0# gyz?w4vA 0vj.;].)e=c_K`lc3$H['ñ206U$|wۜJV'0'~?L Ew:Oܦ?%qC_ XO@A??[s]~qv4z ̝ `L6\ӣ$?s$CŜ f{r([E-$` @$?Ӏ* O"=bّn@fNhC]223OFER ehI)ĉybR)XUPR" Q'wx$760mHaǟzPk8'H'Bn`Ք_=R@!>2|}&sb?C[O=GW%/X03F\1#4 ocq YdۄA E&w<3o#Deu 59[VRb4)R03/>C}]lum!G|HZޟaGFd<06 [=f!h4534yB>'k7V0/;uG顙p? WfwĮz @r# HHG#Ξ^I 9aJ%,@P6x Tg!oaTETߎeּ{;=AْYݔ߷i˛6f;qf|-ҚSù|wa)Y(c1:_uĜjݏqؠqqOZsm/$0!h1(M+V$K P5 N'ZN!j C1fRSk/lT?v)E@H \M4 @2&$2q 30\#L%)HQMkh+R&:\ %W5RmSke[mlY!K6h"#f1v.ϰo&M'_Om9F%Xr//PuUuSpyѡ|Ć,"0K2|f)w~[ U:a2 ts!ԅVU!aWeUPJ*Bet:_vyq;OH{ג"cH”r @d,Q~7_g?, 'GJ㔞^:_tO/0B!l>'Cl$E CLm0DДAs0Z S8NlSEE5t;9Iu߉[_Y>n Ѻ}Ѩe'>bW;˄AiWȀ~/яL Hh2P2se!1>pWޛ?!z0['bowާrt.JuuhfloaDRip ҰEAiװGλ@ra}D(ﲡ?)|Ns2m`>R_872` 2Y#D?3lj.ԇX{@x(迗c|w&_6.,'3-YZ\Ǐ!|k_̥~~ lZkbߴ.L8_`~c 2腡ҒJ#4_*kş|wX<ց(ZQie?̀LnR\o.D"(ϓU' _sЀr!/ZWô1]^rm|[z֐Z~1'ghMW:_S$1 OB@Oݡ(atg3*lȪ]~1nPa/ҏk^=xcQH"] ]eq]]F|#h(doZnu0(7|N&m0v.35Z4M^u @,ۢ!HXa&6o3<"o/l;[02Co~_ϋZ.[BьX!8b!*9e8FY8Ų;7\hT2%|YUzwIQFYܨq|,oT\O}A 7&1a#>yJ Ls[lL]ye=\7Q4gx=sJ3lgjkl~;֝8~gh 9H[cz /h7[PjqҬu(fm (膦]CQX6JV5Tiɧ.1kaN'*բqeywRwyXt8NG"^wn퐐Di 5R_몵 v,0Q4n h5wgrAu!9$U 9uuNa6On?8ύYI! ;w8'l2>ǴxOȉrxZGڷ\В_=^KDh/ Ͱ0N5]$-< z-5M FTDBE(mҸߒz29g1`q #DM [|W'eKs7~v3ih#eiaF["Ѽ0•i򺝐Q_@Z4 9kz U¸;qعKd-v9zӊݢj+Tz[G >7(Է7b]oqovؓUr| -h7Y8=D,‚ ug"m0lMJP3 D!1CCBAU$GDY[Wm]N%@[GJB`LlN 8 GyU.-Gϵ]źgʢ"\*y5lVL"DA@k U-j1V NʉεH9Z` 2A;PBwPL4(L"n0V"?%gG;,ԖwmIC(Z !ڨh+>?~ՐX"d`TI668;o~&o~_.rK`Y9rl( '(Ru64 ||$|I`0)4%B@$CBX42x0u_6tG3D7SňYQr@ 5G.+k|a4eXWՅ|L*;eZzPkNR^a EjB{tѩ7[p;Z*WGAhJn\G-*% }Yi7cz+п:%ΐ}Y,BVҒʖ4|*{1Lyu4qDQ#.㦁gܧXnqy㨦 V Hg[q}c9Z-*0ϟyWS 2I wgFVVsf!#CHkSxV/x+?KѪ.iUX? mzVlV (@zV~_1GeBK;zu1ESGs郾4Z6jt͗T5)1BGr'1 W\Edz̀=<,2B04~ĸZTw郩~ Zp%7ܱ62}t{xߑ?1|W." 8pa~C-1;|E?t<=vI/ F)jeZc?9-~y{CXTAxm%zHZΎ H6rrY $|#u2Bbk~Lzg>e3O28#˚r]+W`cZ8Z0̻"Yb1+bלG/cvgӋ0Mb1}5`\=6y mzIے_ fe{?IVtCG]alpT:tFt `4Ru z{=>^?K6wilaGHҡ^]nI 2 hmk]#"9{4M3+v]%aoZli{Ii$HPh 9I1\š˾{a=~}wI ݼ&u7/]x}7pX Gk }Pg23TxKi~;Ttէ1l |*&eђ:֋5j֩*# +%w*Ahs)&(@HC)3 =w OP{ gk1.-?zkT5Jpz`k.H /(`*$,v,G*72{,qiu@5Q> 1~Y08b \tu~>7A[` tbo]?E@M @?IPf|^1ŜmjT193%xeAzWu~]Ǜn=W;(_ād,{d.I2 ^|dYY6Men d%h-sOI[ b`?ԤH~43i<\]9MԭjKBA `m:ю -'D֋95/plm%`d'`I} w';2wK,pwٟ8xP|nUځ~~p^T& r:h}*{E9-^Kg)Uݠ'o1Kn!X@y6~+.. wU o3lcXWw3/pw8IoOnmI=;*Z=xևjx2[Y[(XAb+M o?VNr|]G\ytd ;Kzr+2õ4S_)uX(kA-˦wK(\^oH"Ӫc.T, >?)?C*Fk#2f@(*7.MHё}Ӝ@M^THC\M=|nJLsRx>jTfpҔ4s{{d b6+Tt&Y`A/ݗrZY3H~GMSÝn5g=%U@Axb(KХ_4,M}[g՜Ats:ىIf9FaQ0%U1!n ;64n)z:d$PWvq" 雛J6ok ߅=~N˟?~])ML${@9?vUoiqKsȿwb:[ňtx  e޸zz'Ah2I 4"3L!yҙG24WN PuPDBj-TYՉ*NU`Nq/#3|Ƀwx߁r(5$,h_r__2ͭFJ,e3/PSQQg0 5C دU驟`Q}/ APH|Mܱ7bG8##*工U#ײMI4,9 lR|(&L@-#0%KOSw͖\ 4{JgE>۱t 9!Ըqߣ0'{oк?SȲ!/a`oEoVe!- {[3G˽4ؖ;c@#]y8CU-ٲcjً=]JwlU~{SsA{Ĭ>*Z9~jhm,JqĐH|SԒ`m(5ҬČKwY\,>U8B]HCĘ DAk={eh2d2-Cv7B^s+}$ `/j˚遉?E1"! 3 щ'Lr'E:=$ֵ9Q;GP2&D;%W*]{}. *YגU 2[\EAmiu1EHC @0~x=8耚sK*q%' l%Η: IlnrĄvzpIV3mJ=Na?]!BCޠ"ƉQ /7//di8ElFYbCڭT0˿eA`]wDhI&p0S3?䑍MVG?,eE!*{](ӥS U3 FN7@TSk٤牄W.%*ՐR~0W?EV J <˄Wíä  i/ j3""0l5 ~n̶AIrsݡ7(X kTÎ1f^9 )\3^ϵ<~:7BMO{@C4d<$, iCbnd?%:O1;~9k(%/hn9sg1DUbFKt;#sCύ<1M,{nytJQpa3@nTAs󿊷,mum"9 \Шc_5goR|Ə$='25T"tlKl۳N^ǫhp>wyw~/pCN<~9+A܀RfIsNMH 0\3RW{U {$Qcff'jwG T-7pt:l.?=Juy+0i$SgT(-7 m9wY[ o&4$)[py:GQe`A,&|Kڴq4mmu~T*GNDgQ0=;okX3)Vnj# )Ď@(a){ҳ.#מY! B9])5#H"n7 e;.^- >#?,ux4ϲu|,m;jF>9{i4h}J K@9Ü$#C$vb1/hiaQ4ȹ|(f{?w3*cۜyk!O%=W֞{+[3k™T:\Z51/yg+]3״@ },N{A'2\ M]z i-⠄p'2V<ijJÜ 0"!")( Bi()f fr]yKAM-LEQPTT^ԄU8ķFI:uy ŗ{z[5Qn{_?ft~K~N 6"N9ShkH U+{FU~!%pLtY 1=e-13Jc^<~Rat´ yFZ_Ś{tv;hx5lڔڝ$B~cW5In.?`/dK΅:ΘȀڗkln!VΝ%X]ҕc oGi)" tR0z@25A . +޸RGx*j\!TԄ|&X2E9?nU[H]׺S0>q8$trgZԅNt^ _A 0aV`XL{sy1& "7 *XRh>*`o# qgv'( Ph ]k[釬.d )Q#(OS$I `u +gse@7(D3xLHăŮ8軣EZR5ʌ^7 !R#˜L_}Ȃ#l19,͝u/ҡ*<%#е r|'0gy>V5'r/ s إ.R}E9^] i_ V 3DRvvbQ^Q\̞l mhBH 38#X# фV%3 X'|ik NMYsNq! 3`Bq ]=.!=*>/O=&?8+#R7ʿg9UHJZ/vgle΋~u1;<ɱ}]*-I5hdPr*+](;?W87_?p7Z=sL7%(֘*̳t0!y;^!38Y7hIdL6~z#gxf(gĔ6*.:ng#^˔z z8kek}\.gzȲd-Wn?Atƍ>tˀ3&]Z-bqp< Th%XKI29j7jux[X!8j֫Ʈ+P7t[IGA'AޜuiT9H}N|: j}>>nz 5x346|l?@;sA;1 #ݻe7ʁvv-9:xej P~{)k7:TVlѢB,O [.2=KVíDIlǠb\RON+1yjgdZǟ{BceP1>b@;=$ Eov]\Y"QJ1֐clc1 5A#0b{ aN7Udw l6c$՟ם[ Pٓez v=*3iG󿳠둌WBQpc UIeSy&r\z)Z*հhX3C @P1\䎴(bO{FS Ъ|lIUK'<$ Lo 1b?=)/ʁM3{R.h&xac n%AZ&Ֆ"i"˓w(3`PtyJ*wduva@Lca6 F;תls <%m>󥔻s!IC  jt3o+F}Z@w?VbBGX AA`, am@q AGh_Mi_=#< xv+ņ0,L *0S0!ߔ i XǃfVqkН-1)[RFȼό O-{J 3]Ӊ=oe!( %mBRzKkѮ;_+jΠ0azEe$ӡ_qfcO1%KjQP,1{9g!Qa- .Uk3;@мK46jM?[2j^e1z"m/k47M0m\N]"jpges^. ߾9T4'" <$pY򑀘tp]E#D586QXWuGݸp9:3#ۑ54FVnM|dw\+} vʂ [ݸJJCRHwf+ m?w' g%;ph_HJ%h ~CBi1Ax?RXspEns1x>eF4nJ+ sS#@uom?rŊFs>^}t?-8Ki:M4+#/0ŏ!'9Ûd@_N:aG Gq EG MYf:lb)֕#*oVSܗU7@"zJF5ws7Dvn 2ۿU;Ʀ 5sst7,(-dn At ѝ@V]iNf',%YDfͣKƓ-Ds4uKK?W[酘Q@zLJ!T66 l`$_5;$~}R0k\[EXM,#VLLn@/aQ/j-`< ~\}9RD|fke>cD8vjaJTP w >gQ>|v}p"|2PYbclUoA^ԗ.,YV3n m-![dIeuNIrkꛫ>s?<Fm ǧVivs=߲azJE+/„hpcB~%1Wk_~)ȀSEc; /|$ WNְe5Up%~z_Hb!/$B4^PSBVy5RbK°1}aDzE@A) =6-WԿ Pb.zscJZ MAkQ!F#lql+1KJ@˅:a 2:o__gԗ(9p,YD"},EkHQ)E6ɒ{_@L@c%Gi.w>h:3?Tߢ?7{`$ELDCLM52TA1x1~{8s& J&f3HiA%,㹅J`?=T #5ir7y`j`n^Ē J @H N%Qeœ'3MC>}$qr/#*ʐ wgй1Hpl"S#M2A z!4f|Z+38 $8c?2iī/hű*ը~:mM%X}˺`oOam5"x (iS|7'"6!1X*f*lIWJ&Dz O9]6cmKIifaJ}fـ!!j&Y}C64ʬ-zP9He ;2HM51`my).u%u4z^K}fb룡vTEut-[: J5 mX)'-52jUU 9>;|MF*9_v], d=mK˼.9ӡAZv\wPQZ3 !ޫxI@Q{%039-a)* cdj\WUKhzc jґrGÜ<3ww٪s)*Ie bNu7V):t˜c嗄MT (nJ$R,_Ӹk#}7(V&q8Җt%?.)}'[M@<Ɨ=@naO'| bG NWR-} _>NX11w)crTcDO ϬBڔ&YћF}5>~2k)uR]*oQWV>Rd_"ߝЛvNȯfe.j-ޜsNP PN:L5އOi83^A֑7Ft\^CS>kފX1w=g!V%!aD; H@70c:l &cxЎS!0{WD~T)OXG ʃcu-"˴.=wחqd 3fgݐ~ع5ЉeJ=wTz/h|zzd:X9d8 c3z\Tݿ=pJhݶZ@Kl_?ɦOriW͵ /sĄ{:Kə^ȨhBռZiާ>) #,u59jb<{pHWi!)Op $g~-D Df>5Nؕ~Fҭ!W0xģYsZykP`/s3s- !rퟡ~`zmYtS򶴄HØHdDow5_KL\װ#ᢂJPЯH (:>Q -^GH S'vA T4t8kF${o5 @1+oӾCY|UAW"C1#*yJDDK^![H3ƭ5eP`ZCeb *HyCu \x3ܱ 1MP4 74l/!U6n{/xA]$]B[˪,7ADB{$^^PMtlOYg,nɢD11c{ZP*;V36$jDC 9PF}bs9B{s iL8X Ò c!^Ɖ@PXTGk\>6_z`kj90K3d 粻_Kq-zv|xق>P{ N e"#`L4YT7Y6MDdg?E2QhT^X;j,8SieU -/g#6"$pvEd-!&dabbdVv[j:$) ,1iViaAߘMS:i:JŚ_7+ {BI2SFG:uS vne{I/nڽmer}OC3Pj1Ljg--kzgx}+t2pZm~ת w&gT堎1{9Zu@SP\uFڹ_~\XƎ!!Nv.2(SuUh?EqT(6~Pq O%{'Qtf#y`ӊY92}: s%m7<>I/Sw\E/<1+!Ѹ|KYIw~'u.<`mtMǜ~%$},nߍrB!TR>&s(E<@Fd kղ;JxK!B]%]g7S^ZM}riHj4 f0$9 >Ab# fطXfK-;R 2=Ak˵OZEQ9=> ZƀHG13nphDC\VlH{_7eOfe'{??> Cf0i.92Ny@muGuی:p# @teݪ.BO"w~Gȡ_!H?ܿ|ܢ:W˴S*.uȹo&>#0#3ѹ lНNFoh36loF=Vri M.s % %Z btj(a94)j*i h"()h*J&"jfb*PJ" Jh*NPAH0DK5EDAENuӇҽ=yۜN|ČJQ2KM4đRQRQ PBĕ1 IBR CӜ9rz; 2nnx=gñnYLCi liclizw <;YYvN/YsW!̋:w|LUg`tdF?ۡhpÂ1(. qhX33`pEHl"r TjŘ<|w!Bw*wÌqM3Uv{N%{bTuosm|_Ո MO!{{yWCrV$ዡgld)*j[6^aTIAJjb5wdZ#d8&QOfIcɛ:`&~p2xeDr:phYIQՑ:ɫ Cv‘ eEncЗӅ=oo?l#8\iل#9 ߿9ۀ8͞]u3as. LD %gHZ$ZE֟7| +mc:pKZ.wC__4m*gx9qm^_Wu@IV/XOת !WXK}/JXZ5ߖwSSYC$kqGXr˝&ؾ7 to!!e6J2v- ԪRA^01h4|oBg\~z"6Cn ؝UM T%˵ ajw?e-7.WϨפ) Os-aΐe)':.^֖BbRmk TsMh8~VN,T!'_D$`@Lz3mv29z Pd]mٓcwə5N^s~/-\ܿ;7"ab&l L4l˝30WzpĖaNT7Xi ='(;#oc]5csPYǎm%sه[3 I?7##>=f:谾P}Ww~ W(Gs}ˌw^ h9jd/4 l,w_WszHJ{RJ?@>l.C`HohGuǖT9LTjɒÍĉ :.!kP$igzRWXH~z[|Q'ةmIAÜ34o?sgYK:jaHZZbk]2e%mt+ Of”En+}ݒ lјFC*_69ƭ]+S,[LR = yXJd7zY{:5~7?6{-HeQ]q$㓔 '&ZĀkO9Ǖi[d@x.ڄp*yIjHoLӝ:6;={{] ETQTTSQSLEI!Q0DLTQUPDM`6fڸ˔=?ܽ5)~׊M~Xbn=ơl [p"L>!Ft+1DxRH&6ߚI\D˛ euze!AAW붫ЅDB+$Qƣ?m],25 Nߔ A.4#oWmܢ #8.¶+3^JK81i}K oKJ@e{>\>?XEJZH(%fz?L lKA>0p޾l<Op{W۟RMPCDlbf5_K@?2輯ʖ˼բhH &kq QEFF2//ʇ: 7yM'f uߚCOj55.2ꄟ8 zPʓA=y]W3>Vu?9QJFVcwi`7y (C6{d04zgN]#u)',3BkY`L^ %^ 2Hpd&X#Gk?wkۏ?w-`zm[Hj rlmCܖ@R2N6Lbs_bE3V452DF{NG.1,5U0OޏziA f(G}ԡk-(xd{FeK&9ɃsG uGCZ$G0È LƜ_#ߞSA,2|&En]ESC6*_!wN>S5}ț0f+iϏ73ʮP=Xn,6(7;7WqŃ\Yvq\zf{Ww.=:['߷髞J8i#6- Z.};;E,qTRs.trqI|:XKK~ %?1L_{<ip/0\7*BȈߙv?S(ych `N 660RX\ζ65O?zN˵~ǂ<㨁PlմRݢ/u mu3Zҁg J 0TN*L=T.؋#Fө^t<:Kh5!3}S5y+;nQWb W4ĉrjRQ¥H;;pօMO Rg=)A$V^qm@(CoBTRɢKI_ޙK XyB!;[$ y3u4yfc,3KپMImc.>ep3)aRRx-`Ҏv VnG!ׄ^l' 3Z{|r)a«6Q*Pq-[3 }hb06O=5}С0*/GEጵ FJrxd' i܄lYdF Դ΃!h%R'ᕩqnR-eS_r;#y:Ma%Ȳvb)x~,;CdD?e%pDZ>%H1 7\WS|{^\r_O 1 )AOqݥb}maG=iFx3-toS|L"+M'Ve^Y rJR;.#v@@){i&o<jc4gj| )L-l\Ϫ|tׄУ͇K)|P&l5CLvNMYs"Y-BRѥ;ɗ۾9?FzXiiq `pVvїo(1Uz-mf񸔄bVY)]h]ȣa5~ILPgshAUt6DV}VZ0poUG9nZ?2hg ;ԝ*3$Ы~<+" ȡ DL ̅sQ)H!%Nοg[}=Euhd򻍆15&/]Ep|΢N-M"3a8uL==o_0s{N W#`XrĭoTڎ}Aּ^8I$;-mnx#s^͊ZߌSzEԭ1mX#JN |Y·$p "רh%ϗ[3DfZqe2X4-^ 0$'Œ3U 2t (_;Hlʫ Vt_J=n4D0X!?(t_sRrwD"<ᯮGr&V[S7I[`jT+@l9sp/zUv1*t5٭pSAbtP.剮3 7C^f.hsmǞzt"oX,rP&ݒ+-WK3e~BB[Dymj"#Gf{^"-?{}Pxyl&\{VS@6L!܁srʎ(Bz (5H B-c/&]ȨFx 6@[J%}5b?:S [a_Nx\߻UD<][ dFTRzȄOakp#W<BUJ+Nc`{~8CGQ JvЯ"i]*qe_1GO54ycPaX|A>1}I!S]ǏP i':Xhp`SL&G+$uim>*+rl-q0Ц!`P} !9ӢBR֒ć8>}9,%W$:ȫyVV`HbyB1Y9S06 H^!U^XFlH6—]d`n[Vcd3Ḳ9E lBozxWoE$ ;髕.ړ'_ex[%-UvVd ."?4o6q1bBIXc ~-l6rcSKo>ھf$~7Q~O NfTSoѓDu>۾f?ėǑL`8g#A+ Q/'jSr ; gUbm5 3fl//7 }KW!QDэpn7C=>ZT!!272X-Ӫ_B.NDTu[Zϰy 1x@^8]&=Z2c vi61:vN9[g1 WYD 鮾۩山70$bc;{ ñ ?;{U6;OS99wq2[LGmU2y{tQj`PkK S%_ӫ͈Z'28$: 痊G;t A.3-BD(Ei~WMϏ졮0o!Vu+G_ݽka>Af0N4rVB 2QC,~gRëI>J3i{:scxw$P4O`s`1^m.hŚrלTwiB*x.ir6-aӔ&[_4x 7[/}G ńr)>U~жt} &B넬JVP}#1I4hcϕ %9ܛ~x4ib /d fa RT=WfsA0q"sϩi"v<Ύ'p;womOh6n*/u3Ys}Kiѵ[;udPEAV׹P$zȵx'wJz4JxsRZsR50"-й,s]nTeVD$ wEaj3p̒ Fh|"Kֶ4ϣJ8S.)]FcLo wĈ;ܽߌvyv ;)Z(.J&'w$NRƻ1O- *kP*wd${#IrVk#Z 2F#Ғ5e *}<6'LovKsR줪5Y KqFi*+ojr |/ KC Gj; f~ۧ+SO"N"f{جrj| @J{ʄhAr]qh€QYKfz)9!,ڽ1so~20ZQX0  esݢ ;'p͟Qfʞa<: fZ43+PZ]Q9rhGl5dxMXiE?*.Yeӻ=;C0bOg ;>lR݊T]q[0HOstR|@0c.o|ZxW$vnUhYywE84X4B7]pk`{*P-h 7QZt"nVCY4r3א|zC>3dw8 bYqhZ|(Q`9f,zGJqF€#T>4;ap.,d++QDu˙!'aX]we(ϱ"F="Oc\1's'TTksMMл)Ba:xT> OGE1Ib Q)E/er<} &Oաpme%Ol5{"l{v֕9H n_F?1w>Z) g9@>|* #Y}a_Ӫ#ͱ8o_ep‘V:]Ryc0&"$JM;FA0SUv%{a|]JV`xUPQ۔ B옑o^%aPXs9UaV̳ p|us\FG]GD#%6`1UGDɎ!4Lj\|QŹ[ED5Ȅɯ]S=E|{, KHW yovHVY)[9W1 <˧>@f}o !\. kVšOy S3#<c=qLHD@uOtd؆O] ,;C/*9|A7lK=MG}F cPUjM-`#Ds+~8g$bBԸypƈ⚞HΆ|JFPz3FJ!X'Mni[BJr$ !͵X+'n1(%KFfQ?x䶵Ş ZpeȞlFדU}S'r5} ! (?=",#SbY|r1@қ} ]Ҋ+$;lGw G˶><ZyI]fo]H7C9߀>gY!kePr0pH~xi9H\yX?)fc„؇G0-^K1u5伤wUVUOc-PWEY 8ɣ(Iq=3^})J<^@ "g@mI^L">|lǦ'X_O K jQšbd~>ص(=9g˺hOAʡs:CO#k/_jyk>fL2V$x2Xaz.9QyYv+ :V`nJ7TXD g#7> S p1(g/ 0y["os1? V+6-#`tIm1}b=A*x`lq2Q#BGW-GVhe x2|}95ʴ&OdT Ǽ0h4*t&oW׍U|ڠ~9}0nT>KLEބƊqJiiV]2 cQrDRWL0A#b=dN [fLp?pi~0d{Iz(Uџ2hWk);I(.Ae|>,^05?9z olm|Ln1ǫl{+i ~q6bݺAI _Kcq^·[ye:}u"[r`Uh+oB=ˇ<"U+ 6fF(`%::\sɻgBGVƒ$ꞹOpe5YGc"_uroߐԛ%[/e'-y>F c{-.Rktcްd.vZ<5h=wꗲpS|/-|y24;|Cv)}>I,LI_r&GpB>pp).RPSUBZ6-95j%O" PsCdj|T5-j ֚t5C}# lc bxI7ocDG}UMk y҃qC[uwdIpV=P!]R?iN'"@5\[tr֗9Wop^g3X>>̏O-!ekNu?oDƔ_7nBN#=@#o(ZjfPnx-[-5m0tAX;L uΜe4{6Ґc_%>VO]}d"K_2ǓgNtAw y=zt) \/4m}xzS b çu"P0-o~.cVAo. ʼ)u5n}A܎U Hgx?fK36 1\6]{{~W>t.`cwas_Dkc1,!>5zI)N;i?"] TiS\kcRx+05'b\jDf8Ir  n-ꌀGJ@fU;U1Mť(Iɘhr] )ϚqO[ mi*3b|AR$$AQ Hԟ`Bg؍<7P[6S VH$̕srW[qrOi`̏Cpj{J'Q:3TҢe6 ]AC6jI%FQCY'kN`ғ16ACP҃;`gE7m+ݟ84UeMJKir놵Ф6ْG[xe082uԝ ɗL\6%v ^a!-ܛt}xs(3՗VO+п`k,wdχ%"7J|Ŗ7# %.JUؗӨ&ֽ( ^_3dl6Hü~Ո եӼ+2s䖷'|+BZʜb/q-HE=1޾"'imu1X9 XQ)K4L9T_xo5}} H 1dI*]'DK<!4>&|A gVLhBDq%:B0:<,Lr0na(o[#qc" q yivJdc؏).̻~N0na1@?[B t5[Sm \z=Y]9 @ZJ"|.0ggƛ̋8&{nKj^V({,I׾MeAG$N2DN89<SP 0/l-Bu I? !6;fWc?pr`x\Mr(ܔXQ#pf@Q&xY #}TCr8 _La͛.YNMXZ;(bCy^kE& VJLljL>K=e7Դ-KWkl5DZ}OsaϑLmB= ZfO#qVjLo>%;v:a_3i0H!(CZG *v&a7TԼDH!HT:tLk%#mKދ2Q!*z9!>ViH-6ub'h 1}fnK|>2i53due[ ڶ=N*KN\2j‰b[R(}E4ZfX~D.W~:e~)cɐkOP#;z+KT蛏"9RN{&~,KFY9oRaf6+{*0DuMBŏMǔSȥ9ILW3k'v>虳~ǺMKY )λPd歙)8\,fV-\xJg8%n0Z\Dd]!{}tϿկjKZH>MQI-H}u* *ǭmXQzU|h;W,xAji>s@TAԣ %d%)qgsԕsÙPeR XK?Ϊl<\"4컐tV=Q0;0?bUan_s6~iGw*,R | DF,+&Nz9 m؜8,f풃jbnN8v]#h95P ~ ]h_Thj6Tf3Bo"&Ae`ͨ5FDd먵9!٧B/.3+v B!\\d{OG a=^Ta-"ʡF#;GP*hp?op 2w2 `~3%g> 3-ƱX,݂8`l;ǁk'W8M9WZg?3+E -Nq필j^O*I8s6\U9V;$ yn;YwvȋfPEoc`/Aզ?P$\xj-ଲ1>L@{$٭1רqa-<gGqa/:5s_I몫I%҉sdJG/1Yeq 6'VU*$޶9*`6wR(E=vu[sV`a Aj8;y(mus3*Ӊz=@2A=2O gBl0fgfY ˖p:Dk^RM=^{gezfjHzX_11Z1BZQ1MU%ň̈rҷD|H~P{TXY2,%F2DžX͖@(B=~Z_@ JɴF giy < +- LS%m^9'}\ Ms!k4|T.gflbsQzD)%JY >ou 59XiA)I1_l/a⑕dR(eE T N^MK&L~gbOdž g"O w" #+ ]}w}սc 0Ae+ "ҟ%f dSXLmשXжHE%Emy㑱DtDbwn ILEȣx6网WE ~Kd@HF Os 5#6;^獳JȨ}uj -ƼFyt3Gӫ }H;{\ _TR;?=pءaSY|#HM(yC= xz)AzƢ'nk=/-r'2pJMs4w v^4VҜTnry}|exop>يz5[7q+Ma ̱ch;6P\|vY> 5Y;G3[˛[C[oz)|H|Vm9>9Ad}'XÎ+Ү K&Pf)!vDg;J==rJ Sztᖥړdq8A82㚯h_au>_1Mztb;I-|Ӯ=8G `FRBPjUYk,`N/-3ɗ:dͨMh;4HOZKE f \g8RGc:9_QqGў k lB)ʖ;,|4M b>ѽFV$fWgKLw(?\vIu Ѓ ͢QY hBۛ7+wsXh8X8'[+_34id?kU&M S\1^g ":Tkٜx6c/Gų8|Nܳ3jE9!q-X,GWVJ-VZOi29YiFJvLg^wP]jī3gVi$1qoy>)F*y":f}1 %1/a"8@OJR}(9kѣpJ)ց4ff3]~Bw$Ԗ݌.?UUrDڞZE#/}V:x+ߤ5H5o[敆fL)w'Xgj8 jA*ƹ_Ginz-] 9>д٨gbPN9`?H&ĕc~: xf)sByVU;b#٠e*5b5p:KGY|&ԯΒ eQA=%քoPu |ΗZ":`%kfdbf}u4ipqkB;m4q 1yG^y?:k#I unJ~.X-2:E .vcBd|ڿ*HxŚ Ǩ=|xaq%sc.DŽ`z Eh_x<`>P.A3H5T=kh?wt@iu4pkܣBrП$k哨N^i=!ɨuF6}hx~kE:Pܖ<5(g2Lrm_zq&n l.kt%L,ƈ‹/_ l(=Oq"aT$9Yd0hO2$}GoF7kf*uA4#GM{ʰ19lNsg:);kR ;:z*[睯dZGĹz%|]|窧T +:##1V9+z¥ַrMGמ%1DغxD?f2 ԫ xߢRNF뵸4K%uZVK0nS%Ev6⫄P\5L~uZ ;F.KK}WSg71\Ji_~M]S|Q-Z5Dy!N9U=P/ c1NPI%m@oJ\= ( !cԕA #옡S]uЪ{3oX aj i}GX 3kG1~ NgXpGgjfLywhT`cCxư:<7Tͬ.~Y6+@hJ}{A_b7Onz2WV|v V$0谌L |stblUA-ZNvӜ%!1#d/4!dM{KHa9%mR!JJQI>eX,נG{]މk1WIܾprgl"appu|WEWdr xҘOEl,Fx1E0POワt/ygŚ@n>Լ%3E%cA@]kyϨv!: m.DR?L\Dc> ]r. Pwx ۝prptx<-%7Ցi fVtc->%\BZ}x6AQ%7!z7;{q5dRy> (H+!,r|\v- @.ۀ釁*9f#IT\YOq(ix@j u<:mS(pޜ$:ƒhWٱzyW=Y:„Ⱦɽ#!1lA'17+KՐ/b :3wq c{^`[_WԶNzU#*F$8Bc 1vAXK#:lːɛdusD jhS"liH?ㄶhJ J*{0bwk'Gr(ǽJP-*ԫpPiuZ,Z;xDe='y@pʖ#&bl!D/, (1a=!,DiD,`seRrfT/(X;6 'a}p8ٟ~S!?[)9cL&M(^ 'SD9 9Bc  >Iumڴ*fFn 7E۽ǍםJ %21Dg-H~hs,5w<;Zw&0j"($Au!N'"osc4 Uz[~ԬH絧 WC;zLW74'@@#=~T)\*Z6kDE .~-N$=jƑ&Xe篒'{MEa *yIѕn\\]gӇ7:7 :AVl[c*UwÀ%R?8bW6_U]̀F>i0~".m6ߧrU3Xyf[Veg0+3ΦÑ>ګ߬)ygYc .vaT/7-Y^, t*.Nr] rx~VܗDߥ!%>lctЛ<*w4 b˹zSGJef>x[lX97QYn\O\RY!L7C]7BQ)'X>2=̵0hDr*,91|)9(qCX90.=fbĚ%O 1l](URq&.Ϲ9:S5/Ŗs[{ƚƪgp؆ʚ q,- o_  ʐ/FpC8&ؑ% ^cG#h%9VW^F5P+Q_&6UR=Y:2.i؄<I!QO ZBR\R *[C>q7F)^[\́&>s.Sͮ?j J;W>~~adIz`gr^A4TmY95Ylr߃F~MR`̐\}%f7{ A˧|Ciq(ӝ4uA*zѽKDQ]3yz7I '5Đm;Z4OZc&{=@_b:7ȝ_pa AïbK(3ET Q!0?S _\4q޷}nJCz96CHƍD7`$W"g2ldRuDZV3G':v=tKA##zԑ1~\ZNUglv@]51%9>ס`\4:m䎠]`.?׳h8+Ci .[ai#|΁qY$\U5oTLGkOukT?}X/ Ĺ`*}v(HmWRwLWw=3.ȝ`tH26פ%ޅrP3põ}maO2X2>yzuGŔ}KLl?eqyሤsG}cZ4:{+t0mPQ>=H~4$ӈݤwyzU{do4DmE.nP_}Z 9|뚟YkYgENlrrУig#dzBTALY\gr\0@=Pפ_VfD3*+5uxUC{ב,&@1vo8x|x2o9$Hm@^-( mjvcgOST]ϽY܄ٖRŋqSSx :?urҢqN) [m+y]B9 VU a[VgÌR޸SY5x->|2';&~r l[,XtOA7MrXɇ9G M'~Rٶn=кW=> r)q *`{E8 yT@PVI`yqsU}7%ak+x1V~&$q.W5kmN@n /(t^a(}inV4E4'([,=<"|=s?0*> kG.bc#lmJcA4h" x1 i{h~БhT${\Mt~.0c6Xh_ ]0˄Q[Þ :Sucn9}3]:!>p._u#o:zyY[jQh!ggV$6y~OmPu /s]~9v nґM.6UR@V WGBZF&>0ߥ+碗kP9l9,8*>#UIP7ٔpsij#h *ʎz:{XX? Vm2ϜkBL>brxc0Π-r'/_e2>=ǃ.]Mf2ؗf?'RǧV~L+= V8֯cK;;$K }hC~u*Tb{ΕÃP s2n14YZUT]a}uvdBC[Nz"#{9 1 iDͱ7چv2 z)NIV1@$1NmW-*ZE@}Wzᖧ=%YNLgMֲ3 O;M>f<|ֆ"F G#{ÕrgL5<VB9T& ~A8Zn(S<&Z!O?8PRնd|^ J\gN֝!@lk[+ۤWspO.H=$k9"Bk0v rdw+n7HQøugM&%#Ff4i_jrEx!%gIIdMymRL$Ifw7GA>ܟ $J ܔtHuUpX[.vW@b&!M=Z2rq]@ӛ̀rC& Wg}i~-Q%:}*'PPMg&u^n0:pt[LðP8?B㴏_aEd.(/-|(x\D:wȈR/GzY% liW oCO/p|5`)imiMEnY͏S|޴b)xCnérkyg&)--30ؠT_z3ME^ĤdMԟ=o^2QG&A6u\ =ĚJ f% |U`wo(E9ܶ,z!=FuS<  xAʷT=x#gUeds'2Ay(L=y-'Ap!4~@LL+'"zK IgQ'b>&<8IRiy \nx (s7jz9x*#Bepd9'r:M=RxL]|K#(eT}6wV[e ^j?77ث${Z ].l]:_ɽZn@ q8 ٘HՆ ]k44[@5 `w 'ly( {Im"j**E͈eQ:0nXB0ELQ -RF]X ߯W?. &29{ޑO/i:{z&f oLB4G8I3lqUvXcDttM'W5eԧ*g@^Iam-hd= :Sl2ݤMm?yYk&oǍMK]:;HaFBҩ][𷖟x$mH s>ͶZ3U3v%;ÏKl#+?93 "; Sn򬑼A)8ZCc8o\BK:ocO {Ѐ}Tdi'vnL>zVHͻ*k17Q7lEsGq,hAg2'iʬWL1%aucA Ɋz=jC:t4L٧e,1r(mس#y{h/xTӟ1t}TqX{?{~ ٫VlÛ,NJ׫7LrhJCj NH@-:(ب5RFpD\y5ˇF"0擪c4qf7 fK3402.tQIȹ=9)ؾ\rqMc0Əuc6ȫd0h$[}PSOa@\}{#MgJ648m]2[75)1ܳ6ӛ7pXeXB5>oFTOSJ=_X_?Z6,;b_Y;v@) HYhF-5>!z|*-scA#;ˊFLh,pcL&)BJ"fsq^ʊ@}^KNfJM!uŞ\GyUD}qafn2 2\ZyS~9X#?oqHiAF US0/9ݠ=Ơ3W Et¡^C߮'mImw'r9?ksg FD|p<=NJYK:|h",|(4h.#aJM0 -tzArJSc/0;r4ߖnt; (d1ZM#_Y^/=W4Hr.! [|/Mfi]IF jhaت~dI(0-J` *NDbh +/ $gU֌FvI~`&>t=Bz\'a{g5JÏCa9oXaSHG+f5 UQ ܟ[B4I*_n]7T"*Sɷ,5lzhN3 /egi0gbQzz!3p`IiikhewLĬJЏYBNm;5䞢<ҿ8>4"M-Z̚N!գ{kuEN|5;|{`nOgƳB^qcf_{DvyTr*991F1ף+u?m f?'#oradԨ1^L*l1ejMW[?G3#=rKLmpG3P]QQX5OS/ɴaW2$3{6 tW ǁA7ӳGNβ{> ?*_#F 0+n)I>ʻEf~U!3{4;mp{)ntW\UW }I^$=nn[di!V67O&$94"_eCCAx" EAZFiE[doGɪ0—׽s)% 4J8^^X +@q􍭵ە>pReY6xAXLЏRʴRߝ9Q%U3!~B(Lk| zN%GxPNU2b@Ӎ x]O @6P^_,EكyO4~ej?f 9EkRK5]X ókeӲkTKًceX.ZQJu{5JpKƮ闷|8BYԺ0F"(ZځިL"mmb!U@VU,X1vT+ݹ{JO>`H; fA h.C\}Q3o49Lk\G9Ywr3S{iys@` d!ʗ'u'(>(bft>c+FPs[[6psh^[M7xgȔs۞q =`$ -Z8Qy \p3hR rL>\& LFĝ:=q^1t\ Pŵ~Bf,42Jb(=tcc;J 9ǝj)U6ˉT˼@GIcƇ4ēN9%CpN}>2,8 Joia* m$vc 'aIC/XI~->[1- WǴ?&|105}bׯ+YS<WU>Z[EMdG_\ka_l](+(ŭ+lj>EFwrYhoe_^-6&O2SrT5lϢIrG<"ÿ1SnyuL1"% qZ"PrrHJ\Ν#Sp"/ 0 )4Ѕ/0:hEQjM@jq@Epd͠Bktݢ m-y*О6K,J%#$-[{]7ƛ)UDYWtцf*/Bž2}A[xycS|%hrt#ܫ:΁X]U`tH* 9}I@fy~ͭzݸ]y< ZFJ'2{RL; a5Bņ +"A.lh$05mO$Ֆcjo&U{,QFVfk uu"ipO"5WҤ " 2Z";Q4o.dfp9 ;mysҜ p~,YEΣ Z4Y2 * g J&rhT3k. iF뼴;r̓rnRa`Po%'έ5KZB \{|pIoS%GetA6diX M[D,,yaꖖɅk:(^GT,K 9"lvկIy2%@_8KxuՔ,5Av=Id=qve_@XH>ЖlDA= 82{кd&qJ FReUNAHM~!/໖|VS`(ْZ<@M?Z2l:h>p! }UV_n \?b" \JZfpcYHCz>˨B)$9XțM4^Gm87|"CA.{FQ;`[{VJ7@-g#/gid/L("2E9BB&X@}RJnaն(2k"Ow!IS_s0z@V60A__:ٗG(˳ՀJ̚NV?dO4'g5 x襃g51LSy7UL)٤P=Tp']ZkTk+{2[KSfǾџW1R0l&!+UwS3JsK"G0Q^**IJ(qW̢An$Abj&ZxUc0@{#OP @qloqCr mzl*75 s&3!eK$ۻy4!ޔ)r{u形As@.ChfARƛ1̷Ѐ(1)c780l*{sJ_2,a@.6zDk^`oW)yu^Qe@v69F8A| }Nk4҅ s[^D)ֺ.6l"jdu_0q9rL;+6FV \'xeIZ])KD911|Qv&hHXOeo=P)_h^IZc=ӡ%e\D|:ĩp;c%Vn ' u ͺj9[H 9K+ )\ͼ/QAc܂SōAr3c{ˑx=R@67>*C[  ΡoNStފmxAQj% E%Q8R>Kk1m=PܽVLhGҔ `:V+P*dײi1 /ڨ/گ<}h PCwTxfbؔ`TMqheJ"lj=K/sB*^ lc*z8p Q-(!H>+GQ+kS\o5ȶmRʕ"&OI2xLzG!@ d>҄)rS9tU@i10zKe~>țE8 `،蟒~wW/X5D'>@vQrIĮQ!mu&*x|h&MIeqx-m&F@/"Ƕŭl)Ap?sK>몞g}CM?W_vږZ%O'pξյaVF8m&<KK@CkvupB)y& tcOUcn:c?ӳGڽYUF6-Oנ&m}NJ[ o"HX!iG~Z/)?]9BKNW"2Xs抚옽 :0{''2{)/ ) ,*?K0&4 dL DL5dT I2*T(8)i!"6u \& }xC7a. lZ!7Ic^vR0]J{0V91Bط(jT(Ip]WS!mSLiLO Xk˴UP.6g".Tڨ{|혚 K\,CYq5.Y?#yX&n v@']+=̋K4d&b$`z34Ńt!?|*&fSC>uA"=U|F&s ɝOZ!jb4U=֝!Ea-fa]>oZ^izf1 4SabX{1 l!JƄu#0,~QdMG:{_r}&B~*C\[)QU]BHخ\9xU E\f¨i&`T+-+%=LIѱ(S8z 3/&(ve!t[UnorMnJ/rmthC<"6H5+}6pX 5:i{ۙ!Ņz2lъ./\dzQ@ipE4_`#NB2˷&s9H3,L{(-(̋D\s+\])`hIf@29DMu8-.E4mޯ01m|Z$eg]b*H68cg4BUV3N*K=M$&V6h¿G5nIfdZyՍh"Fc" ݣ?^L&Rۭ\g͞bȦag .jC&á*3ĸ݀0 ixx\TPPuS]ټ0qVKV7?Wb8]-@XY {u06ՑU c*%8fS\@Y #' Fա+1 ԙ&(i8aa?ck<sCf+sVU5IrA 7 ˨~ w4x>?%8GƔqlM΋ff]L 6z)b XU z}ɓҞ'@Vl,z#}n*lR>J@{5F7dfkr32L)6޴ffbJ-|)Ĕf`Rr/g=se6XL#u;Y;-IkMcO[Z);!Z-d«1{pc!5"o>&wzbrRw=OB|t'3jW IP P 8~h$VNR4HtO?3B5xч.m>WM%AnCcL3 ;-b1H{s";,K0ga\&ۓ㇇(ɈUC )d׫Q>:jR'և&@C%Y3M"" T7>S#9k+(vROiZ)zI~)ɣ1QgX3)u`dFZBz@XFt,O1J7\','dLLKp͌3:~CEDt+柽ymi|.:19@].*kuP42Pg zuE@+`*AGrbF]|ݝChhVp%%Bb6*x-9l`80?^?rMjh2Jp<ԇ:VQWRh4#D/S,]UL~! Eq' _^wTt;ߖpu)jY2wZ$&QЛhոVB'sPv3H/6DJACEM7n H~TxWYkj0(fP؈%?cpj^c|4mߞ^COz v<]I0 .-0(8wԱæd/$VR<<2?[lDxB4}"a!$Ed" qq&P ?̀uMAKEa>Qゥ K/Lo7LR+;58;u!>M)ցc@d>H_9U,нAbbZ0!6Vׄbeufo.h:{~N&&S"dBT|za~ y(^2n\IIJGt mk"+ȄypEMeIoBjvg)I;hr2odA1Faf AKb ^ڟw(/gy kK F:=h;3v*D,e7V4V2G1@;'~$d/ y{&7X #L --KJOϨA]ur{yCXmĊ[VG\[\'rkQ hP" *)XSR#,xf RlK_d03WLJ[`c>mPlkU (ǴBSL!׶gDkVAA#?1y\uϏB= x"\:Jc&"{P"d*6[nvKPX"319TYa-T9c;Y*:m!vFPe%`n{ +(DPlV@LxDNPG0b+e n}‚LgvA3 e5\^}"F(t&XvO)KI)`hj_3TK6zwTdҁhcH$UO,{ѥɗ7ʓ6 y|oԩ=zl,9ןp)G&EbIT"VQ)?[w% x+cgC*w zD N&S i֜tίEѧ Ñ$`e鷘zG0_cjWTv<Wē<3JC=6dZsm]d>J E &(%ڛ&l(mPCY56a]) CŴ~_>'tRœFvyD \;J9B6xra0:6節{nNrnF6c/C?H̾~Yh6$أhn^ ܸGPq(z ? C*)qC 4(3澧BuQ<`Ys/j| '8g D]gm7_1(PȠ>'6"0go5mWZ{ougg܋כ:GF z/U~E<>_4jhYء#ZxFanU=Z@z5Biy]evu!̍j 3,|} UDhO~DYM6b2H}("D#?'Ǯ*3?m52x#W_'{H[6HAORn c",-_+~n˯ӳa!tɒ.i٩Z !]@i3~vvY֐.R3k4N-R!+0% B˸9 J]d JID9%HV|]? |{kU޾՟H6֣fzyZK~-葰beyN=)&Aj`7!kxC0{V8~٤-8#-˥PL|SwVj|MTJK(FFρ ܂Bwu gG *N=n#2+;QR XT@\w!Qf+uwj\FMf1*qsjG$ >0`#WO漥Wyi,$M}|NhUgNZ o=Y7_C&#%:`jXcַn{$R&iY>FfT_k0Bv>9~J J_ jgmUE0bF`Q@A)d3DgZh9t^ Ipx,6VƢ\be]hU9-N,D7AR,%ggVNt鋛'97c_xWJr(28j.8%^Mz_EA6F9O9+&1>|3,kk47)U+b}z؞cnhm̢IOMY'P *2vKHOd(Fyg:X\ISHHi(0:/B)Z"Eq(PjxW`ʙI{m-fq4@@!pѸĘ9!r-X v""^!wXtꌧ2]0A.3I[6r -B!(^h-zN˝jKU;VoqٞC菠ik1c&>[\OT%N]b-~xL(c5E  nJQ0?'5P'Co ab4Ϊ&I.( qU9 oebGe󷈮ժ[ {_}oX5pBܟgcV䈴wh/2֎zuڋx[_dw ӂJ8nN+cL錼jeY P<Nstrz-qw'S&(?ُs 1SЕg\7\, y|U4Eb@kiK24&LIGv*#K@`7ƺr\lxDI-4Ww8py=ZS7u⩤cNLܤq8\E4e~l:M "Wh4ƚf/y1B0!{B U-Bu]>H`_kL1711Hzd8!{Fڿ0?%g89TtfoӐBr_Ǐ?|`O='mWP Ȇ)_1r0LͦvUD?;L؈ rkz yKs9d$Ȥ2%VD ?H't, ni2" xoB482AjtL$W.E!!8z7k 4u+n UރMªuLvOVghtDZ!_.5O]В</n_[Wf{8>RuU1s2(onCWdHeK0.(H arC+(v߻DYMb t+ˤG~rJ<_^|tcg6}#;İ&w!~2'Zl+ȘIjE)t濒 2&EvN^6+[zd[L0bEPǿsK1%0>N9mYf`/ !k̢W-Gk2 ޽B4ro` OτJhym]_A_mwWXd0K<8Z1"p5g2?n&0h7vZG[JJVVy@\͖ajS,~[Il{m%aXD{pRÖ6ܫT|*$ol^D|HU^CO`nJ),A9%b; I& tb\i i.G{cPC+E,y%\3˳ŖM_{\ug =+}hNʢ,4Vu%֎g01c$NFb5iriU{5b[r 0M%9UC-U]ls+oÚv-ZQgk4gx.B6+8MN_e=$ҭW|NTq?eFyʇhIAQ $VԧKDMiԧ2Ȁͅ Oeρx( JZحǗ+ء\Rr$ ¾2KPx?e΍q.)Ưx9m#Y-[JpFYzv{c TBA1wU8%j;ml G.i=1;A'U N)NGd^av'Pn5^_lZLb"G;})@8]S2g91еh?Q"}]!쫤|8{#:UlzVGf(mq Aak}{X #Slx;vg1lq .QA6\U #O؀p@{p$HēԵ.~dkqa!J0`ׂ }-}٠ sD!b`~/7KS$JB6-ɤ[ =:̷67f$ +aηIau&I5vAB(rkOHO,XTN4YTN_u hKt[lF~%˿vF duVދA~b.u@9kwGiDž WѥP>>I΢UpCb(,M:ܰ}5{8Ac'9aAb@{U4_U][g7g %9akqTw<&@ۘG4! $9&h쾔\b#(0YҤE'{ ^UVR|N߅cN?FĬ[uG.(t#ncnF)oqg %ވ y_7;IJKR"OY? x^X;eO1.bE?E)H̸+kW+0w{`l`,%&ƵLX5b_eK$MKPbO$jqohީh*9x\ ;,v\uVtpsuQ :7?Z8fp֞&ǎ?U ^Nta( b8b tO=wT+ v9ꋆZ܉uWO!| @r)ʝ uDl`_iV|foPFb3X¦~Q."FLP|[}%-[^OY/'{@ve~D(@N,}%hqZusn[2K-cooXtDBlldΊ" [a9@$\X#5mȟvvE#ok6MB 4l\;6tshמ"hKe$E&=ؤ1VSDqtݱ GxoG(2GDu殂FcMټ3?TXҘ{  ĺ?7wEN$Zw, 2`iCR#SqDMph ;ھ.0Q2ۃŠH~$fD8qśL e"He\ebnLkB׏VnSֳJ,esz{$] Yޝ?u5Nŀ"~HBW0n-yO7e@.Q.0a۪f~B{.m&ʱ9mUYNz 4؈*ZPP. <_Σvh~yB_> )[tnYC7T] quQ˒7f43@HB$FEK \CؼWWީTn6ûx4 $X4cS:ɖI汾sT,qB/ydc5b{?Wd sQ+P&|”+h"E-']9OSX@1)QapaO4)5XzCq^#&ZGhm+k^*=ݔPچ5'>3_f;Tȭ=d99 zu>ր:7/ 肳 q_ӌy,kgoM%˺|jN4CrN%ʊnݰD<ݒ#TǫJt\U>|ڑUlW)uq]le,ǂ򿙃QڄU` N>6z/"+%;[% (|._͸P}+uGt4ݭo$|RK\UkKmDe E%Ʌ @ e;v#W&32_Wk:$>[B&r~mIKp=]@NNb"fa+ f%F}̑\,V;B kf MI #PH%P9Q:`CvBG5nR6ɁJsѳēMLJΡ HCSëa'-pU07m{u[sc݃G;N\IĪd(G9PTR^!.шuP]- T{&ޱF l|Rzj Nqi tVc4n!ZG5P>sZX)yL,Oװ{(Sёu:+DT8,r:|C%QV/[ ͈q\;J4&X ر OG="Y^8Z\gW~ r%B1u[(.S[u(kwє`ܖC]^u '2iE}3e_ƕ2¸;W'}~4.FxZ{rnLmuGt28442yiN HvD*Kl}Bٞ-l`& ݾX7M.XX#ȃ u~#Q3!S^8B,7ImJ =Amg U35l\6wjL+d+fj`pIǽ>ֆ% LQ(-">~w;Ur 0 iu?^heA_p)$yctzuybς!^ĐA~m)Nz<0T.jVbZ{__<=|ZT|3Q9=0uoBG]0cd%Tw" Bzo !>iz9.DrhN(C*wl `gy.u7jp\oI%~B!^٥ bVNK] 'ΆՂg^wћMoO"W eei*[V RP!v~3rJ멥&Tɤ;A*n/u `u;0Wqz$%AF~k*!(g W`ɣi&Ɍo?A>-3yqW& RJM *LIiweS Te \iR?+hm& ҟR^&0C*k2<ZW5>gBz LtqG D{wvLI*~ֈo]6njb>T5L7Cn48HZ=ٮH'R57(r(vp&e18؉b 80LAPg.q:Ugq VnN`@RJTϯ^ܓt$n Hm>ng^ca}Xg"0"BƭFHOD0*p8OJb8χ+ F*.?;`ҹGD z+lW5/6Y[PF뻬tɥn^R_yҟ =du/f"4XhT+DrE7j/sjcDRpoکVn-M'vwњֆ$Feqm~& P`z/`Fsʿ[ǟjvQbr43hۑ,%:(Bl{TptY46K}nS7tPYul]zYT/,:c;7] wHAh }?:N`倜jr?gË `uPT> R=@U> *#BW`ՕB0|l<Ar`L ^l6Q:aLȳZ"@9%w `gK >ď.dOK++-?2 ab9מq{ .{zd"BM-%{CA_ %I8Ù`T`ƃ\.$ gaZg,]ulFZjӪi 2s1|HgEL1Yqv!1CcC,Q %v!Эjұ׀~F.wQZ&(cQRZa*)tFDGboWƛ015>>[1CINp{/ s_9{(Ƀd6ub7dQL`SE3 VE'caݒ\n6 ^Bf!,<2 kJ欒_nR6Û:5IZ.i;b@ J7Ƨj0u%*g݁ɷ&>pJQg^^2 41¿ҽJRӒǴ;ɨeFA<$Sf4.d@~2ff'?rHOUF-u|cڙz) ְcI7"!i%ɪzGRraV^1-,~zYH)*då"$%I0R&:>Y褸߬Au0P>p 4{7E[i#,U\.(=IJxLViB%^9Ʉ2(.MBVM=z.t 0e`pLv4zf9g)dhqކ(~%{,y0`lq;x`A6AUxJ}+\!jI,a E0fLYiI5=[ya6CZĻ2v>Z1⵲`+TEWonWշ&?˿$^`CF mB@jd,>ٟJZ'phTaJ҈v8Ѣ>^ ZJ! bx>ञ:Ay! /Ox˗:4&AU s+CntkBflBGyrNK⵾00bw\Zǁa\?kd~ij[dͨD|(Hz1jDIQ-2ڎӵGYy4{p>{IAA#=Y)V``oM5S.E0Ӳ1f}T÷iw ÆL'h %kԅ:0r!΂&ɼ%JkfS[/sE Jx#ZgxqRݬ]zQKѬkx]TͥB5)šXuu/uQZkqcU:w9s}别AiZ^Y~B=D ?ʗ!sl,p[&֐qtXj$LdmdSWY2r!ߙG.\W@'cpMSӭr*1&7J}'|޿Dz+bas#$F|c1_P?,vl$̓muz$޳,j(,,󧿱qaҜ&b:`^'^E҉BAy0ݾR^i⭭V*-&x@wn~( &wlٰP\$o[yZ$$uLiq0i&䖳 !LHˍbjs\|;!{?:UKՆ30}{n@Hp,A.:5x)&Qq Bf}(*hBP#K!(&f벤ӨAA.@4=sB񴷛̭,^_BE'0ڌa+} ,&  ^:B(xVO Mbf:k-Ϋ>GOF> 3ֳOş$ݛn5 c9iDvsSk6ύU5]C@Zw+q8N4iTZv?%k]0B~PSlDR0&x,u]{锈mB <@)Q_Rⰳzz;{XgnGWq ?a kUL*bk}&32F*b.y2T^ }~)Q7NQ\Zm!&T[&*JV6q'`lÒ4nlG+d/K*yvYg0blm?҈w47\偁] a5R??f:_HZhf @0|vi|$.lIvaj95?Ub]B4ʖ>!dt6͵ טW!GgwݴhK<~(n$,J O!6[IWhF0b$H}U? ;%-qg;65I[{2ڤ *R2xBGP%Z>`* x:VAf/IEdI33!v-fXZjpXh[bX¾>bkgo@nS0Ybi~1DzDC{f/Svҧ`i> x_)\J ! |:՟6/6N6Km/~wnR[{bAA#'#[771' ˔"e併e揂{~g._jS>'L ,>;uB@#^!%e\ =wִ[Fa8\2VqѓؒhpJxfTB( "f/nzʅeD7aE!eyAb)«ٔnKX8UJ USo݋ΌP"A>V;44䩓Z9 QIp1=sa[߁V鷔Kח aHw Ct8K!k ,qx,f@2,QXKĎANz iq ߪUM؀,-Nn/M=O>'f73ԂJߒ!`m}rZ>~)E(LQl8bn<܃>uo%{gM`NBˆHNg}\$A'㨏ozT.ڬ23eoο7_,!QOmd8,/[w~4>@+e孍Fg- [(2E-_sWgWDa;;3Oܦ]>]{BI+zf/c|֫ 4*+27Qk&\q΂͘gRieIWoGJe O:*M .fȢ!no u:ߥh&ݍe}oBɩ6;ܥtҁrYgt~CgC3rJ^]s_``3saJ ȣ<n0d>芌I|~3 K0{A7A#G+`{laz-)WA P1E@ Dkp5ʯ/]Y酯֥g @^tܺ \q~jF()嘖Xe _ȅ"/)er/1UGb:n"6賄^CИs9VdT@WV&;^zY'Y~#@D,!5d_Ryo. 3MUOY<+0} jhخ{oc^Nƀu7vFmkl |lپy Oios, +{BATݔ^9Ǎ־~Rr}L-<.BF;_1Z= [hlܴ'P@q{^W-ʄLN; wBҠT HNZu %.z:J9*n`@V^L}*~)ۮN#zח_(採7ַ{ C}!&|_0q;1C!a^N`V݄~"p͋9 3뉰}@M#2RԒƓe3-IWS}ݐM;G-.~ ײ.n+=gꌗ޴ŽD$Nq6Cmhx1a--ߜmSTWEIll;N~ )Q]`K&KMJmSmzQq(b'f8@[)*A-C"~ClhoL oF`&z!X $?eD5M1rޅ;X*T!׷(`'|ѝ*mL1iJ~"U7y`VW '/PGq6[ K\to^CnEagSkZccD ԃTcz'Z ;.V V&2#7bq|}E 9$мqSf Փ1* ҜiQm5.}KEp&YJȕUfXV'g|z`{_ńlg/{Ȉ&<,1DJ1 c{'U>^wC(: jKsZ|==gX<%N(i2[Mҳi6;_ábx7 mpS_qJk%2jLkfn }%Dכ8@>rnAtyMB*& .k(tRy71` = vF3z)uTg 4)XI84h[?}M3ΊxA<'܊{XK(fUq&M)eߡ۹*%Vv?S]TScAǎޡIg@֘ sbXj.!B~`s( ƠϞb1}gOW* w=`/qn9| (w3VrUX_/~lE43 yuĒ-HCȣMסShDi* V ܩxF<9zo ̾ 'A|AEffH-Ƥ60Ѷ4/uUk belkP}df )=\Б!{3r3^w]~˨ ^ YzZa [˚KݵlŊ~`}'rOJQOQ%hzeyR g*΍Vf. ;cJaC٢u΁I_7,$ {+&Dv2.f*6ps'u:Q*:/Ź'2NY6fCK2=|̈,ż5Ea*b0"ڶי+%|ښ/[MLdOZzk}^z*Ec*dBM#qģ+Z豰 8Dr"¤ py'h.yN|a)v:aS0KnR+G듎X"!}˷S&]1{>uDf dʱL/Wʰ@FhtMdԬe87׫~e z`ynH#y/{8x>d}2]_1fn>jHKppf=OF^K Gv1)R z|։F8xΥǙ^UYf{C&Πo*ŕvSb4D P'-(q e6-ɩ2{jt)9<qwtV0Y,ADѽ]u?A3韊JQֲ tAf$ %M+*![ l(̰YS9/Y] ["!Ʀ)п=}zF]Jɴ f,l_irE&X1L R:hRc9 XQʻ?~Ozj G<-WGoO ևJNe{ (o^鲻(Mo+b qmZ3OMl bJ#c4Dc5F)R<(`wVQ4 .u{[pG$j#~9G7~/`п ]`%Fܺ2UZhǷQKCRw7-c.FA,*zJl5w+NW*|'*Gg"oΤ/q8t*ъyCW%OkԆ)(*Np7FԷ 8ٮ%5qxL |KiڅcqYCx^/p[|/NL}ortPŋ&֢ɑke}[ƃTPOĘSaAdz0Y$oj5jSj*liG t Aw5b>c Be9/ Tˠy3;ɚQ 1;^bD;eAI `}>4@~^uG';]WBi) s/MI"aAXq?)Z)_nU.b؅h#)K@+&"q/͍^{Ra M;!RԌ-H{Y ` Z;B{ =vߦEs ukڪȊz. EE#.BM59.lO~i+K3gm=FS\l=E&k J wal)t#Obҝ{bߘ 6 |(s Oj% rɛ=:%P [Pnl_NISckZmz4:aRMxW!{P:xc/C5u#$OX aW:s*Tn .(RHxs2t^wglȰ53# x u\m$MePE@7sњ.+wBR~b.<a4}\3&z)-!3GrW ^cDJ]rҜ=,, H; w'SSIq' [\ DT|w&cC]KAƥEdu5y ZQwSy5T&ZlO2eo0CI2~#~A5XxX 9y/69XPlz)ÝЦ[/+=\rn.xPິ8:Z0?\jP*cE1"}'"aVgW]H3S.om/7:e4"H*t T.y|ERm,c9NShX'ݜzrU57?ߺz9fmKsL¿t`h]n5Dk7%/)( ĄՁȬ\s S(0sB9 msU]32'`qR-64IR5QmW_m(項\DX;j@ەė &DZ{DCq]a8 b3\e$̨1=6|Fy_~7/uS8a Wn?'hU;uM HP`Lv@;xԮ|OQ <(qE@ 42n v1>Y}bW)iٚ_/6}X,bZ(T??Q8Hԭ'l[9"K?3D%ggpMvqr'Xtnw tdeEW5f0T ՊJD.bmJ^3n5.%pp"N)Y_L8>bjH~nnGI龯NjyU 34Tn϶86d@GIR/Nr%EDl-O(Q䐀6G (57uasIodsJe[ 5nS Sm-ОI7p)VBfO;TYPP@ ls.; }j#F^ hRuЀʄk{s3"\8atwG5B W6aqGօCx*ixǧZ?CAXz }kQ--i{]hcDG1.|PP&~o WeӾ[#)^K3H->O[C)lk=i>=^.˖ TܩZ13f1ԳN;䊣wSFqD0WDG*Ί&6,HpJ)'o+_I]y @?4ج.4%ϓ̜t7 _}RFo }b6}T.@$ Da)X9Ud<= Y$ S",@uD?r^ &h6th)? i[K%6M0=Zbu:1ΤWByvTc(=Z=N)#oKyAٓq"1*_W %WN\ c;962v *VV9=d0=ڸ{Hξrlߠr.hW-wr2inu^lt4]ٺw{Ry9!lҐUBtl9G:A:}EKF@q74uN R~h;Q^t]Yxf@Ş?tוctjx%byOG'.}fL >³HlHC0Ynh GcT@=o9iI:,KdCԫSzQҤƗ-`F_ X?ת*x*wo֢b+EفW{JYzspۼ 0?`F&@#NcAմ&:Ѥ7, )^53֏D\ 'Tdu_QױEWNPtBih }3\wތð0shN^@OzHc -6 Ht4 Ԃ:{=zPn3j.3oO~]t:Y2nدy2݉!iؖ<.en_F. =$@l7p, {1{PHzi#hh3Y)%"OE$ Y0u/8rDbqP>'fT}h}rȥ_¾Ys KBԖ yۻKpV lZB6JV u `ק>?4FU"GiaaLJQaМtCc؜ǹ4llqwE~|+u>4 KV"Y|JlQJ—>Ʌcx\0:lӆ{{\Lvo϶Ȟi*y y]k氂' %}dsӅGC8\&Nνkc/1{5PU |+CͲ0RѪlFg@Ui(u@[1I꺀W{+,Y*bD#ٓ, )?Zmہ -.xW5f.Z/zNޯ<V fp{IVBrͲy}̴ԸC b[!XOb]v&>$~6L1eEDl9e+4(FMAtqR g91'E7adLKQK>Q瓒Yۨgƀ?46HL& &"N+Y_(H!rv x3ƪP2W=6.dc$VM1Bv3/"L ͘zE,GҒ S 74K;҄:Ke3ĨY+Qᴼ S{pUcӻ1.V@XA/ /sϟ'XTZ툰@X,%(7-f0%!7eEEGbYLEP*Tuݮ)@3-0Ç>4fU a0k@ʙݦlV*𪹮[$OmiR?} Oi[Rnk M{BZ ճMgH_/nkej7< IqIc(Y+cB`tդe.RMz5~A칓yHhS-to96:soM~$HK9sEr~h nβs[&iē^mt/O\@-Dq)$InGc9 %m^qX!AI,ۻZo2xb@ϡ&t)N lV]vĎ|6:2&m*-5b EK=zVh0]&Th=\}NYx@gmN!g(X7ezaZyh>hS{а\SS܍.갖68D#Y}%gىÍ6FYI+ {-RN;КdX8VT}_\#"U2KV߱fXjx!0Mk4nz&~ؓGBKTʡ+ *2|ʋiEG-vOUf wԲcYa-s9ofF7|h),\cL`BТ/8Q&~di~ }>F'Y&J_VA]~` UOJ~I>[ RkOAr;貺{3׎I|rJ.ŘkR2pޓp,A:_R[ЀnCΪVQJm1m+40t3Lš==]&҆慨 JgcsسpIˤVl7=S7ȅ]L-y\W;I40Pe)v)[kFzE6Z8}\3anU fm^.j3ÃhcDž[-ghcݪ.t5[~R6˪L6?]z'9Wf ~EVh5o4IFfe7m a9z;<\07KFZ~PRºNOz >mEGK~5jsJ!6f[W mnEV>]U[?N4조~Y vTplL"y֙*ۣrǺ7R\dOo50J@%D9=LgW2a7^Z,/m>.2W53 ւ'Ux)v6^; dpsS7k4n$[ Ќ"E6Pb髧x ERn tg[ry0&CKI$+ 㠲2>aƏ=MrԎ[֗Ϲf=aFi.$q*1 4+۱AYo~4&ܲ;(D7"E{Ýa(3rl0 BQy+e>51-~ ¬3X¶Tθta`BC+1͑(j7MZYd[$[o4hfI\?{S n哎@4`ۆAX]Y;_n| )xkIkB0A*WרND$/]4#Tг]e~@&/ozoM8rAJo7J$nSs_ FzּLAu#o#+GhPĽ\T(iUL98Hh geIw={]4,u5; IY.ٟdL&*q}u)ΖQ0.??3*RY1!KaYu/#6̖S]}z6o<:ʴq3 $W*sc=ޥN +$G0(G.#F26*u`-0"UF;E#J}\t+_`NW=[Jd`V&v":1|AXv$b[@پG~ψɘ39@-JxGMj;b!&1^Y!wfYWZ'9+U{= $5#Y'1P FbPm³<j\ k&x96kUh.ʾɴ0ںaBA^C `2d#sCᙴlnsDҝXWѷbI;`C]HFu J)URdO~ybzg{Uj;]z]%ocIVE)QIY֮jʫ\"M;hoڴIµv΋lw|'uu*>zcԋ~uXx#>jv1pNr%r4A8e#PWՇ3og \z*}_S,ˀR7,rm0y#IKh@6bk_j()_>=gHgzr}FOu4`PJ**n5~K{;UIQ~8868)m!HѡNZCܩOrH?J8Ni}BQN˚͎CO"^.nKM^D_[@'dI-- v,\B:ƌYZe h>٥Lmˢ 'yjzfV'w憟iCmtE_YL%MH}vDުWcjviF&m΀*Rg86>ק0\ݡ܃51o l -@,(O ˸rǩE;!e䒡~~D=Ks<:ӥAEJ*@'ΕX_Xϗe׬mb@j_*#nv3GxKO2 948m3:K㽈Pk&7p 0 ;cwLܘ>,XDKOG=bf Of%W4ɞ@5U_=jr]vb}EI|$C O T,dn)bx_G}N"m?Xw: om_x_ϋy]|軈Op7q-WЪ_;4STaaߴKM:Hw˅sQi=ˁ`#aʀKR>e^ű8ЧyOv:dF}ੵZGZ5$}ml1ݎ6M=idZjGffy- !{jfud/Ȇ()`t;_ z~T>GP@ST]u {{3J^clʹ[1M[CMd=47^*ibh.ܔa*JC%Y 9*iVXr +_yT|stU ްÏ @"Gʅ!x"T[~sq@w:IS]>__&J{Xֿw:Z۲wE&(jPvz8X N%i#W+E1l}2]7+bB%yQ{֖ *S,PCʗ?Be\ovӯgCǙ%UL^oàwm"4[# Y'ᾦoݽiNK՘4ې&'dN!BO|)R3ki=U ˯~GjƆә m@RȥV!!|XO5V|sL |㤞`M Â-<"9V[~/ Wdy1y Ɠ M"8WK{%ʴcE2 OJHxR|.(Kd*vXF`tY;! 3HBhZWVJˏUzEdIJ_|9\<䥠_ُDeaW%j e^;0&Nj.7u P[Q<=Js.#Z|5MP#JZ"x+_ 8-0zyzzSi'[WT ;9A\Ѩv=vwB򛟏E?э,Nu,#{%z"1'5ᤎ@x^GDg)2fO$Ja 0Tj5e XKdΤh(7K+Lm8t;-)v]:y p@l_@9WX)_^8N(m^\ۍ2smC~Տw@2$FkHKs'_ɱ4Ac̀6"Hy_ײiBL߲۰Q쾂Nü`hsN_{uÆZ[+%!GwG\mnҿڔ9r) †I_:͕Sèƽs*0]p%{ ZRE\F"GYWEyXBԒM= T+r(^wߖ1͆Ɔ]nrhٻ?>}nm &$ `#&nvDd5pGT-߮Z:jujU[0\0Qx!UokJSu=!.),}Xz U Kf.a5 xL)mJugPtz4ᗦ;͹n΂CVX۫]}ok9b>Yr7温Xe`N1f`{H-a-|jh7S 7v`OgEr0SW:>cIbbdI52nW$sԑrVX~*x!3Bb_.32~X$Di| 8)υ S7+!us^v6bRPI\OڟFsP f"k`s`䑱+!Pp`HY]֣RUqE~.xsٖ@7ԙ!-hz|Wgxe {֮搫.O'l!H.Qǀ}rPzv6T_|" (LƹvZj{bpCtJ-Jӕvié}Ϡ|S|]C퓧Ų'c[)؝\b`{P5gXKDvO1|u*q(MjN( qrh?|fr}cg W=hϣ|3n!&ݣ$)G DE+[Ik f<$~MKfHp% ͙Eh{GPE $EbsfKSG;X_P)6㎄Ɓ 01æ1n;9kM&? BDk:/΅K2O #ܠVI?IO"dAImZq=˸H'4ea/ @Oj7H{5ApXrS!#77GGLlY(Z,,|B-M_#9^Q;(4l ~te$.n"sp,YK vn 6ˠ<[b7pagqVg cT,\ YA1B3oS⮿K x4+B粚q+_JqMda0*I9iSc.$7"Su^-_=$-,f)( *mzBNůk**7ID]*zar3dX;`arjNWjm>֞'kC]:F~D޵WÁݟAQ*|ש̡ )CTR]_)_#NkGAP\_8{"e[_ԼLÈ7翶'F;o`jN ]PDGItaʫ1x=mWԫ 0W&G4‹kء2f*ӫY-׻~&cg zʮ5EhfDD3W'8ސTWzYOc?TI؟2Y 'eI &Ih]c5 =GssaB0~ցgT0Rj$CܲO; xu¿2 ɘT dGOLpge hfK ~ݭ/\@% 40bL?P HGCD17.q^6 l` >v)1@}cY^}Ƥ\~BLw3G`?.;RQ5E!..@o]{@n&}dEK8dܼϖ\n+ ^{)e&mY{S7ϰ3E>N9syq7 ) R4z6NL=?u.@B)@D{_u ĕ!n#M+x|~dmR+Ǻԧ^@tGNY--,'J~x硠퇉B5<8.;]l,Am{8N9/05^No JQZ+GUAF̅+=b}vC)%ދK0"gc ārrSRg$Kr.X2kI:0rRҲC>xEB95HVtYM_Z3/?V|#t-O%@СW(rGr\dgvEOg"&.3g H >AI ESWm);mupgdun/2'n@OGWqsTlp*Mb z}M=O4@+(PGh >PK+\hx #)Il^߹$B$NqH^?hRǞ|IǒmY7 N@Zhc\I? -^J72CuO~O"Nrr=zq$iwơ" p>4R^0aسnFD4fb-@>Ud4X^DR%H5k*uz.po44VL*ɁuWawr*ݕc30RI}~?@i6a,|'jfZXWK*:ܣrGH ${eҒ8fUu.}& `YSgj9\\ L]XJ x|heB<- ^ ^ZTJ@Md_ca܂Y,"ٷ٬$Y.x!PidU܌[X\Iǭ osacGQY~R PU S\ JnO5nRH.8/u4F˔$]k!_'^* Uѿ7WoeUjbrSFu.頚RLN^L:]ObkQ]pUj8U{'>鰷 J+ydDI>ޥRT}>h^4E5ASYz28L_tj> WDq n͌ݲ/1]ci_[BA?2=ķ D]{1_+em6bF7U_v ͈j23H4ف{V"o2.3bǫHovlR?{ٔhAU7,,ً:b|b݆@AVmrOIdV,A/M;pFPvvG% JTE` ۸ wQ.=&"̛Unxh򆁩4=Pv:Bt#&!]ˌOox#f(~2+qE=a~[Q7¿r)uiYzWok..6_}E@$cR\}Xx4Agq&̛ -:ZcKc5Ft˨4޺*ӺI]@8X6'wϑk4&?m?yzV1}XYN #cT6VB-DŽ t۽z֑F9xW]WÕϰf V] J)uَ{D2l 6uW–%?E86ڐm(E_".m"j={8ؐpT1 CDz;LGQ˻>٤SE`{Ssv_!PIMK{ AA2‹9%D֦gPpH3m_f weR.SN.vXD'zj!u p;"kSRA&d vsF6OyHn2 ]ȔҖ${b'r?DfdC =i`=ө{fRGxe7aV9moɶ@SӭC8I $Q8tr+g^U!a򡎜Va3H$MUg@ĪCGl UG]}+ĥi4*=|~ Rp =( GgԻLU0`wc~>)gF~1@ʑZwx~9 q~t!R hRm~H'L<jÜ 3޾{z$Zy#?t?I} 8:Ш; C2'q0+t6 ?tv5_.sʿ{cCWlD}6[Fjvʤ'Xf#@-Ty`|<'Md5 |)#zV4y,o[_KOd=/5@'{̴+^tNxsٍ4j\'N"-Ái/=Yǎt.%ߛlkԣ~}Xֳ"›2"Ͳua #\6+JuϤm*GS{J_&YZ kN;-$R%5qݜ_Jsؘ#RBȗ{ )܀C4rsb4;nQ@O,Q7&^ ,ppdod4j,Zl5ҪOe1FaiƳ}B;-v#6)}3u-'<Ҝ՘{W2+ͮ~O˴|98JY_&ա^-6 n{-4tqK2Y{ɱYu>`պyXq!o.=Um?Wwjp ^ŶY{NSLZ{lܱwV/Fpi./GO. Ыu{Z&zN׶[fW~,1; i7:ɱ@K utgQ%S\3/1$dQ zzCGO)-8q-L`Z@Z|Saxd xWnK zV Mt574V8:rrbzil k3ٲC.Qc30#kk0`P4PjApvc#_;r5رlQT,p?VQ8:' bO'5Ǧߟ0^OdCPu Xw6up:w@uH!F $M <3Ca,kX pel9* +C*2cP "i7~J@/>5%!Y||PI#G)\ K:s͢gd-n޶Wfxme%#2K{tg]F:Ωrs9Y&p[-4#8+U|z5(|:ĺq=Z^y#CP-ضR{+B:0YvP7zco\|ۈ`ZbpܞWv!8qQ%k٥ ӵBq/eU)Lp[Qm`탿H>8Xgg$ۖ0?;៾O$࣍͗S]DDp6<1N?{~ͨjlWd4 Uh !bGL4"~Aq仞;dհpD}iyWWZF]3 h+ P0| E͝En@V0U!x}Xܴ6h>e]b!'NQ.P-ķi_ }dfB|ͷsg+j:0G;Se5C(6V>5n$58m6gpަ*΍c̾Ѻg3k})= iDoThS/e}C|V"? $ݞډ{/5Ep gW͏DjơƳ\.X-&&tK@eG~Q2_Qcpy(>#]7 x 4^Ѯ@KLvmGxn7-}":mb P}r1tŭ!eπ%#LکӅaϰ9؋H X )}1&=}Um_.%/>QuYLCbfzivM̥ߓ\gYh^y;n< \kq}5a99$XeX63 jh23s$/%\0y2plNj"W&UoxO$î=Q\7!.I3jG6i~fCU }F*~TNzmÍ_>rˆRJAY&$^tIT5XU\vL24[Iծ1BRNkv]w!d;|j~(L* *0 ̓QM!4e5>«0d6O6 ,{C@DsEhO )ERmTb?q;D]P T¢va 맶AhgԂEh`.göd~.+Ptov7*6|\yVYcyxpt2$ 3L (Is@ljVO6~*<ס2mr]YJzo3G#asqW5C7~`?̑PG2 DGqn̞wtݙZ!JP. N<&׼Iz*o6C2pF)gEވD/´9Oˁ8dT&CuAH f]˒$v**]KQ }uBӹzL %ussòxրIqeYVO_hڮ挲a~1t6|U >a'o*́"uO$**\T'bAĤS_V5SמPoІWT"~yUp ^v)m Gj1 I;woÿXkC?BD֟@lodaG4YhLMU(ZA R&CB]aN @r;8nldcTIH9QM"fFxxfU]Ǚ*ʛ%\?{zqm*u*.v=>ht#аuvɓX6=đd~%TDґIY$'r0p;1(⮡r4V`R :X95HI!I53Z+5l%9ju§ll BtXJfDD_9; I4,ݯ%t 7tp~DQmޒ 3*ق쀼fRHK{yw"[D/)eT NWj _7F8}S4yR~'s֍q@*ȗ_?Q8Ŏ >p/)?|ȢIr]2:`%7xܥx?N \o~}ZV; dL5eNt- uBq%X  9K%Cq]66O ȺF=xnGO*\tKWײyN1uVQغ̧\!<:ˆq ZKKڐn87@7+p!Ľ^7rcg?DGI0>PdOZx>`t[\]eM=ەb 3WpVi jMEo{j=:ՠׇgu-.!̥## >B#Wgy'ө}]]B/ІD>]C08'' gnoy:TPyFypA`H8\sv Gɜyl>=U{lC~31Z -,W)h/4'Z]g@rYb t}$+tioRr@1簡bpWKYTXU #{(ICԖ?YD5%I+]>+tυ[C8^ժ.b~&U6r"C5ŽӅiF Ğ&nyu)/@w+ ~b;c GwNX(#:]jKfI>`-oRp&>Du-̄PJ8q`=vVuDZ}KP픤!xqX²fTDD/vO)DŽlQHuu`;o4 ǮrcO5/wáxrX#lqbkRfYj _"AՒ L%:ҷXT 1!O?ͺ٠v$=)Kt 0FdsX3TJ۴aP2BwY؞S~A$yJ ̓QwoTyeBL}Gz9cZt%=ii4X.iphytӍU:k6ZDkK1 yjn>($23т.'2J[W9<]k!T@cY!VH6Xw_ ^|q]FOٔɆ"u;;'{l*Z\5Yv'W8q#b 8Lg%pITIL4|SwMEU+ rƁBkr|Yܦ\>sڃJMM{Ŷ gz$WKeR8qj{!m4x&IzRM#cD+Oor]x>]!JhU]uO2Jp^LV+u,f*G⨵ˏ4 "#eW,ޔ~?z%),f 8%Ii Q c_B/[f{ϵK? 8ʄƼs3:f~ w'FV@T2r2Dn+M{"$僩ěOwGR \sTE|л7;jd]no0`T/ dZ3-(8pDqT [ SH] >*<BMZo0m9!0(|T,} .9%3a._ns1-,4֋4E uI[1 a]&apVWhSK b72i@p;{봓^iQ#VYN`aٺ_4I6pavݰ}Tj]f[U8ƄD\7D ENU/E-]AuF(a^t؛f)m 8 ]`/oTUuS+?<3=̃`[{*"'7'-ӖT*đc[7u0tj47yW>wpۿ ͕ >B\X̂M'#ɵ,zڝmp$+@y; *񪖎¤$ C`USfT 8-r2=tJEr[F9Z@̟V/)ׯ4kM\ݠ ?Z#vԀ6Bnax _Y bU!%KL f׀&ɌPIܟ Cfw^Mjџ6ỬO;@.!8DbAmer p@7d 94[4c/g3ܒ0!zrO׋ ώm;'L+DYaKE1o/yvy~ᏹ`q%;q>m=t}it-rOeVڨkAs[ !㡨8 vPO[A ahu-CVO ^hBG#!IݺLGZv;5SL=+fk Dl-7~lT_MxNqBØ"65es1^X蘱XϼX %Urt00s9e;1˩ !/#TfB80 ~iVGQ; `' ҫ=D`dj/j| I' !-n!$ N;m7_^?̱XT9pE)C*i6T-[tY8rWčlf8q &6C'Yo7}PN)Amz24,>7hŌ=Dӣo %|gVETȮS- @L n'zu KfcyLnΓC-Pf/mCy ,e@X1b Gz:wDBZh}6n׾d"jԳgRB!=4הaNz8 K=|?]$ӛ?l1ZRᐺB˄了q r p].UPRX]:p{}p*.>(#5Q_%+"8;=X ,fA6 i}MZjδ_Ehb ;'RDDE>jjV@; r2}Uˢۮ>9ithZѬG V7 tb6YG]V0=SJ'Hq Jq@>+r5~hE$:vpE,=b9K_7\ZmPP#z3MA&]v3u@fXF `̥GirՁ }U6K[cza\,/4飾Thgz?7|LcӂYlOdf[ny٪O5SN)א~؟%NlF \!\iNJM! mdҿl^5AVRcZdJCߝ@;q3\;L%jG7+:PH|q"zճ=WWh<ʍo[AȉS{1娍܇wW(,}^з)lxPLv~T0!ͷ,jVgC4Tԯd ΰes &6>k0 3bOhe` 3qt}cH~ [~K7ϪiGUl:oޞߪi\Lha:$-`E$V.3\MPCMP/0Z_1Lёrk٘q_&xWSD0_FJ$q4K T fkh>#Ա~F~f#;rY>Ocv}g*e6ק U⾗k5~1^ӈ.Ũ<+B+gWd3Ӟr1ߢ[]7ZU4̢X1<j͉"&u+1Kڶa(qJ:sv!H{PJwY!G^sk2y:@IKa]r1D6n[$$"Uf.1s|nX4.)Tn0ݻ9T;BGԊ!CVZ`ҏ<2BO M2c4r%ͼ[8'N.JodB|>vdd;("ZvA@e])M!vlf#6gyȓu$w ʄϦd<$*0md:v-Zz]]кsvpϞވaALaf2BNgt07^ThSB.s QN=&@|NcG~bC :yĻxO4)3,4|ESN3\sowWlaDx#2; ͥ7$]C<=#&@В%KPRFS+/s0>E{~އ/E۴1m8`(D"U2-vF>ex@ U֫e-{Nd]NYQo#BXև8xh1Vv$yn {ok. yæn(1LNwvt+ֽevCN Kc*16qrm~Nӟ NXlpiG"RI+Z˿ˇQ]:!yO E}MQlY 5)ܒ3Es5=,T?8nyESaQ6t2hp@Q#x>[#)c*38ҩb$52 1EUBR93wiv1ByBJAmU=pC5!sk,_>q{zיK NEb2?,׌MB'ܔKC_o q3glPؓXڑ3YвIL9Pq[8!m~m';';f) 9>^(Z^Gvuũlgm?Bl=p!һq*r[g5q4H,yƋ=# Ւ|IzZwXaêC!fLi"&F̢Le~w!VF}KpϺj̚=Q$5X> ee~Ki0SY׹th0BVK{w u,+cRwc1, &RL6dMRl*y,%p0[K?\҇0Y'%*친Vfp_a,:&T-{NuHĊmw#J\J]dpt7w4cZH4rVBvqڭo0)f&.ft[w;VV,g1@-3F` "Cf `λXL0[~ˮ|@⶘JT b=\ o+q,˝72":#S>,jQ9:y\N2f-l RhK gG(^z1gs gvu}~tz7Cvm:E5h&ZU5_}dpOMvcٜ'>y!B2KɎ#G;C? @ i _O2ҞP IV8 ς{FCWRh֧j}:)wh|::3#e~C\}x盬^RVᒁ|(1d02*U;G.ʌu8wW'tl}ǻ.dӱIռ)PQ7ƏPINPX$'"ׄLKLg"`buh̋[*f Qϓ{$;[OAZ;Re?e{(d\..Mɚ*T1I&%,"ˀ֝-t:u r-س[Y[Q:8e N?t&7S#2z9q}A#ǕvX;xu DA"DDX6cb~,@ҏU{)@j?"3]1< (t<Х:pm~N򠠫_UtdcJБҿ SX+*Nv(:Aec}Xd*0of'C! ŝ%V!xٖȑ/"4Źz2yG.hYEs>=,4m1 klQ^Xh]F.W %@IQXHl\ HyK)Ѳho%`Rn)Ac܅^Y5Cqpb^hHI+84D%րjp>-fU8;d36zk px @`W MLO*sR8FQLr2 !GvZ]`Rn7;-hG*sq)<^"#?RǬ*0-(Bw>{RqUUAqcF6B ʴɨ8Sؑyc?/4ْ.&(W}>hx2H 獘2~mȻAV='u@T.=*oTj;~n_Tʝh@0W=}+Bo v[ ]滚)/bBbW~'L m7K~ Hj]ֆ-ĥH.M5LRxT@" 2' +)h@wUU׋ yA.l}77) q5 fsKS v3hs@źCi&x1"e3tJoyrA=~,BDB8r~(פ,vb.ֆr~ػ?zKvoGgE,` DT..9GRa"]tHeO=JL҆}V!no|˲r!yʶ3g9hb2҇,a`{N dIJ}؝+Z+d>vRP%HƐ(p۪jOSܺ 5aM#V`j(=5DӔ4U1g(0YAzOiI.ؔh}p5tm#s"'4DBlErXW@&;RH Z2O:T *)x+Uh C.v8UWH>s-]fHn D*dGIq6e(H/Ķr4:ݮҾawLT m-*&c!?/D,࠽pzfZCTr7KVNV.YbZIy}kО|ճ@hD~nFj{ W5tXF}i3qv@zϸ$Dp1)§q"h94>,dx g8*đ^/yH "4VC3ʴPM~?\ܞSڒ;&bqr 1+ g%Sb]wR,xʾ xV\2~ZH7IݵYEubqyXSCu  E_ ~žQ gjӦӆ$_dKHr c'1_Jm4C| "(dͣ&؋ 1|f; t0峾,6Fa Hew/,r&Oqg(56\mbF=e 0ysPJ7 \y ؘb*eJ&>NI(m޺aRP#+amӟ-oP5\qGtzWcPV;)-M\ !=Fl*a$SE fDpGf2O3Z=vMX]; YMx2/ Ǿ"3O{g"#aކO{g};7ayma`_:0HKl5CSbw_R.-t[WQ(f v7YnxU `V}ݐ siWey=0 &Vڦ(u?YZկ쨯l'̌9苰]s]J]i|ˬ"TmewC\CZ 6ܣfOQ?jJ4\!@Rtϵ"IE؉QM."U:jZl " n"!j2Pvu61K! vqT7fz#Hr.tfmv]%ۮvv.*' 7h 7cQ/ t?M|㧙٥ȣxS8F4mQ|Ð XVwe:` e/z^*w.Mq711KdZ!ج# Pe͹Zjƈo yDpe3kDN)Ȉ2X;ζQd&Ϲ hq;4˟YYa΃1~kح`YFDE[#*0+N0,l}pжDel*mA? @kwʇiѧ07,3 *oaC};m]k&=(ÆQyW5 > fi^mV[6I[CYl[j P` {D1P\{(ys-RX;u3Vߠ,"Й>*^jmϕոzbU7MKO-ڄr‘. _'|NOW/3ƀʳ&w[lI5zq;XvJױP]]#0>D^R8b?x- h-p.ߡ~,K~C_eqHY`iܣ+ԻN 1suXO45#'t(Ճdd=V|QbRF7Q }~d\No}9&IR-;N(ҭ+~HP:CL4龍YE;S@#<44uqiLg!'1jT3t @1:3g:?J~e&5`|@qpDۜi \I\ XVMTȋ-pɹh.IiiRtg 63}5NbkR=)҉y ØY0g/M'+`xf6 })̷uů 2Z?5v;?>Pi ܃khCYq,> l^ʁVp3:006ITs2ۧw켋 S,%nl{Rgcm5˜OJKPKuQe?9%3KL/In)_Zݫ/;m$ Gv! vArFϧ0}r%gp|J[ot rhF[^Zbn/J-~aұǒb O #|>WlLEq d_fNˍdmţ]O>j2P[S:ƣ5~+2VY9M\g=(^b6Z(azug3]0/O6g6F_#uΔȖPpEM9R{ә~@j7=$*NQ fUI&LbXJ v"3D BrLsWflFT U;W*(O\( B xի ,5&Q2"mGM$(qw & 5?22_^A|AL"Xr&s  YôJ'`/,;RQ~UP|6|,{ԯ^Ķ+Јa\Z6>Ă~hJ:P]Jk)U+|a-a!=؆` sҡZ e:"e_yV/y^7oمY"uxg%0tL7YL]Zݠ[եc?x@=|ү5q*꼥Tn@PtYɫ0ݘhlk CJJ%aG;Vc(~ȴ{ |9߆4ݕܴjаC]+u("‡<0% ㄘ&QyFKE (x \{oo9}8jAaHϯL\C ^#c:lIۚ KY%UZ6YHRr ] C'5W2HHgο/6%>9yVͰwr.shttOv*_vi1Is0.b賰A!&.,sjfΦgL lyaoDcvIh퓹E2RTJw/^%Ȃ%OhZ V{Ѿv4`Ba<jJ=\PY9% * ͪW{*m$~vp uu9c\G11&=lRVP70uǽ&:KLaIt& z58(/jߩ1{j!m}#]V֌~HJie'oGӿ[0$!Mfys[,+a'5-H|X 9' P'*m#*A8D.fl+N=f#!NVg}uZ7_TePtOQ"Z&eQs].a=s]BU5Ժ8]v\9`m^w p8i: J{c?}! T3Fz*_zy7Pu'>&ceR!xO-HZNp`igK62͚ɲz<[ɺ~=UAm™9õC CB '!Td%q1XOPWk2v:0 ƆGl w% ]DcZfB7̫Jӷc#KCrKX2<a yr;6[#.$".Ξz'Ǜ26%v@K0#cj{bY!Wo|9SK#*ʎZ }H a,!u#NUGxC;e0/%\ yELuw1ư{k'rBj {m=vO aA>僩$a¤Gz5"l⿻w[ޥ~e{aWSsYtLV{w?o$P;XHʭ LP,1>Bf<<#wdcVPj]P+NH~P%^eZZփ6UҬY-3YU:%0] q=Փ EMx>dv! RSmu8Y)c7̷]@9X/?% &uBdsϚ;R0#S{2]VEDC2N~~jڷ^ˮbD{#;~^FھITX@EarC7m/:"P6fOUS[O,q>ˇPn\mH;a+=xhO\1J[nwpRH k~ gUy7VSstH6)H`uvwAA@Z])6f9xhWI-h\OnxĶ'5b(Ľ`R{h UO '+=#vbiQZAumM챁зwnl9p*³AE/^o8@H7+7ڪSYtd֔U*4͔^@bţe$I+e14\,o*/6I/ns/,pЧ/ wPG5-T<,6Ub4_XakBr`> :& 4"P71:\Fǎ YkUA$/[ oe9;gXOt#Cvkۆ[9Fo:8>Hz-0DJe/?=sk`kƙ&CC`Jepo}Wq>n宗p_lcZ:wgw;>)3V:̺lxx$JN ,|28ʼRWt3g?p#w6۩$'SB\aa#ܽ;*~.B:Ӝ|79x:h{fuq۵[p>)^}seU1oY&<\x5ӫ=9蒬EO/{$  vog.9B ~/)`mPPlt˖\pzH(J"^[S=m c4-SR*먡1ZL^DQҶG9c l:IxR1 EF^A9 NK }`?-+NO,*@.6 ?AMoW*[fQDf٫ǛUo*)<)R.Td>ZX́[ N|do??' S_ǻ^nDŽ?w0!I.Z3ࢩ,eӆ9qz@T"c쵆9y%ޕr.s'ӆ&=ram!;0# #KVU]XL9#>0!z[Nq^tӟ7-p Bs Yg)Y;aQP-Yd^CH/!Mãr#|1U, 7,+_QDEv Pa{*%㏭ =Rfj&ң5@AU<.] ɥ-+'u''ee"՝:(2(XbO8,};ё2m\\<8awq]ҳy6؈P|},Y;J7i|ݚ*ib۽uL8Iay!,FХ^hiFFfsd]O9͢}x:(#, HN#Ƀ&S/`fPn dr=is+9`s worWĠ6]q9*D pݣ^DJ/hJCASgQLEQ;K{8`Ұ_vCP 4l\,SY%HJWP)O]QSwm ݫXn73g p*e$ĩz&R%z)!,'EI^)@Ug ^-uK^|^=mALoÂv+kA ArRƽ"cܦUNX+ xvKM%Tb:3 y߂S6-R?DJ?Wp?٠S ͗'mk@` >Xe <*/aXߛh mYS#a 5R84'RKu2r*uޢ-E\}J(Luɠ$˧I(>:4EZ}1x+K?H{`J fdg#peTm{ 6B pqM5*,5N5nR"^Ѿt8>2gD3Yb<3RLzѧ*;o O`#8*oN ZK5eH <}RE(afIEegƻb<[`n,jXO%N[ˋw[K<;/aаh/kH@1izHJ!}Q 1&-g&@|a9v:d汑Z\Ô3f-+*uoU-4nwwoK‰ $db̻/G{9߈9z? '=hy!Da0 (.I }2)K|Qe8!-5 C/~+_yM!Nj yR&bA"yI-iԍEtX2x{Zm0oᜃ@W8)+Ula .gt $sQI&3%R&OsPys {K2kQ+Rs`Rn, :bdJHA_x9cy,ߌ]V9f0@-(Lfg3%D9-J(rFY³0$UPT gL֘1"D_<"8VB=~ۗpk1;;W%j n3MeJ Uwlz1NxY>Z@K;R$=lxzBQ>|߻mV3I ̘-fųI%r~wȎwYՉEǯ)WSqC" o\#ZRo*߆*G^ )+q%pq^0IIT6T傱T%r ܶtCEK}$-ŭ=1?M~! qD4ΡdX|nb`=Jakpj7+ضof(J^ʮl$tkNoXُI-쏔۳WhaLo`e4*C`;rqٲ%%Agxx9YY'Hn]/Txۈ*Ʋ'aUDPqgxk.b+HRZaXyuk؍.KwwG`* 0(ۄ`@tN4nOVO+{3 ̮;S&YcĨXڥ}7 З]$=l S~2]i2x h^_O28٨&Ny }T…_,lQ!|D o:S|?22'pY0=ύ1#g:MeD^N_?FΩe|;*HIyzh-rq.`j&ٹ50ڭLxl,Dr!=]xQŪlPmk^j&F"1k$MX#s}Aݤk}󥴌Dp"8WpObđZ歆֣ٽJbc'΄$٫.C(ϸ.Oݲ>>)(z!*DdgbL,R.}M23pmBe9!B|-"=aStC2PI\u-< i"Jp@^щDS`s8R]HUk{F?MVA[k+7 'N`={C:BˑnVZ/.W0Hy)Ʈ79x ~#;w`*8bYMWF-1ً(J|vΓn7Dh`4'z=BIֲtyɜ/YӰo:)k3>jA#kLЂ\%1 Ƅ?Nh :h?(n!O4a:T}Y'UZ)0̂䔃S 4<>I1a)#^,ABҙ>06 X9fd|iw"JG^%Hݪ5>S5' EʾJH} jS{(؍P&L ιʹPN8fk`Vӆ%ven|7'o+Thsp \ߜDz3+ =Wlе>l?8B`?˦@ %v5b.lwA$Ÿ$p˫ʘ9*B01GI>j z4<ɳ3WNOD!y<g-aJNXi_܆2mY4@hfԨ- ƤKY ͍X2a@!3L1}%TۥEv U=E:U*qZ&fN?{R /3Oߗs#ך9 $ z.A'@IMRpZZR ʓ oa I M= WU,T1-Pz/J\8{id"U;4`m"edZC~JIl:>bEOrdnP[>,;.nwͤn'2*ҦJl4P lx#S>~ԪF%2tVKt6IۣMp_w0}!e2QSUIEw5_{8mRaCH R#QU˷刢m=[1 zL-q Ǔ zlFmy T}%0\X559YZ)w@kO6x-CTmރ=BẎ߾5'QT$gHKnHZ$kңpvuV;P9P;-9-+z[O<%> }KRHKgl+T@EGRW>ݨYH/~~m|sEh2^Ep^/U`1kMc6bl`aōR/ A>P<^K j7WՃ8@ Ɏ(^H6g96aT%lh|J(P:"XA]b#7b:cgz@yRfW(T=%!q+Q &K@P='rJjBGmFnEp>?|06JՐ rv(Ox;6Pr2Db{_NJ?޻ w*=1JsWf lwf]'=Cv՗u˔ҧ127Kl>W˘Q:2ez$GtƦI ё+UE|ZM9UCGB@cUޗh&vD/GxJ ;rg/NІr &N$ثɟXT.γoz(Z|};Ը:k`8EgC"sXR;(-PsaKD؈E3dCs6O*D+o:2~ \43o5BDTpsk \0Tv^-25V &b#ȹ!_ c_sR|iqA&oޱ!3Ѳ3<҅>؏7GcHeo9^sG,  y lhd;!) j1dWᣵ*.:}_B[эoY_::O0 @y*_s|mRuc+yY|֍x>/ OɅȍ3о KǸtvڻS ޮJ\Qm;EWNv% Iq~WZnaQ$-3Ѐo4ڧdeqq} +Md@UQAA˹L Pߥlx.C:S;U@)?OvaL<3_i)x7Q65UvARC XJFN"wX(UH 8к#[[}T_GLt:<Đ(dll`5n{'φnY&XVa~B ||7NFK$6ze.=<D$F1rQm*H_8('76S2 WzCyf ɡǡ]hnW xct'r>g^<[? 0(Q`c^0n;[8$'Ka]hH[s>q63.Z>kDks^_,h1`!Tٗcղ^ 僯,YTP#Y[_*<惟DOipRA-?^{Coiejbwy>H~$ܚ ^&t ˚'Zpcp `Ru6} +G]k.zJӹPϓ?I r>uPw]4O ,-jS9NYvIq%kz(}H+~{u%JE)cHy-q֤ /%ዻD+xU QJK{bMBj3_\kǧIDO$w9իC,p nyF8^֧;&ShHs0JG%r,oX')s{@_,Q՟O~[Q6*%#C>M2D(ET>-]C(m)Pp(&Q 5\9`o j;R,ݞߵ|P37U*3DH{3)roR0.xN(DNzx:VCM{PPS'& %tae(\~8u1ɔ:eݕkإ:̬<-)@1ts= h2,|aM^չ Qbr"a`gGx{ ѥ62$F7W jlcDhސgVcW,qITA˪2>Ja uL;sb}x8 6IΧ?8)7|;Xlgf3 ߞƄ&8d%$&UdþS+S)ԗѬbV.Š8_x^uJSTl#{:`8OY]JYP!Egi=嫸Ht/ ?TWfkޜ7xIH: Ry}PK2難prodK33hkyvifg㩀Kͽp/>.^7a*+&5þܚ&A<Ŕ!RLv]nʋʪbsaPalESbK28m@o27H)hT9 r7br@?& ):QinF)AdV1pR]"[1^jeZ lR$7IJ ;j@' _f89)FD&͖W}[mܢlpSDzx9 XN~ =z)$!|=6QO *l RRZ9jӯ+<\^ -8^PB}XPsbaߢuʥŻms=[$?:vL:?dP8!R$s-85y8u+07b:L} AU/Č!3 e̱ZTxֈi?;2` z2Fk3t7ֈ%,`8&ˋ -oa$B)2l-:Ԟ  #1}I1g~܁w7롱z0*M|K Ү˩ʥy q.g"3M& G"mu . f ġ+̱QqIpZZv(~D}gh:I,L( &2:5B?H.OcߑC,p굏SS| ~ Mq5Rß hْȷܼ/P>GBz`[H28/"`s.ӜTu7F2Kjsg qZ{1&NHer2US e_qNhDŽxx4qS97;bΉ0&L.jU8STgZIF&}|[xWic&C;]f[բ ߤǼ^uMML*#;hŻ9u_ΘPN{B H~c`C2۩5P.K1-XЩE•;ypE8^J& ,G.Tĩ7 H][kOIha8`ayNpWEVU5G2D:'](r'w JuWGxT tXۤWC79*jv =d _N;_1\]b(5OP[̸=<{+0d{t1AfxeO+u_q$*_#p磷VR=a1A6jFż({~Vxbh|U~@; 3PN7,ήh44~odb!sfy<5Lz|"tq*.C*t b 9ճȒ 0ғnµ | vʨʉ{|d4 |HNs}IU+x/6:-pq M5 Gv[>HTJkՁ|%aL(yT1҉3U6zU,V:,}`] 2ҋTA%hmz]$cFm w-AćY[Lo}4n3`n,@c)Y]h?P *FeْLbce~pPH|"6e.R/ʠ7, fnbRS(Ԟ1x|ɰ"̍o+pW<ޕc#А%4U(#ҊC%ZK\yTS{ïfĢgҎ%ԅ) a Vj06=ڹЃmD(|u$uZKvjF8qK:}&pRD\/ o4>+[$6`2R <gKzy {x㗿CI=hm#_y]41:}6+zۥ³$%;N%)&u.ih.Cln'y.9g1 CB3`_ FY(J-0+3gHKpl8ȍ(꒓)VYȰRZ͖'X 0sff̹uj]BYvh.C/t!s.9OޚDD,d?0yEwE 4s3'#HpQ)*(ӈy)h|6\۾rLi_qxfgFD݈wL3;GMC6es6- ABp5a#J[9%Noܑ Oz=&ŜS48*5Fp`@ dmCOꩤ{_AzjqЖ̦3!d8#D6{&$nU+Dj3Fh$jz@{-,(؂g&q88-R?]*s|VBϔ]zccGY\|=*rJ-`aTR&3:ܖi̗y srI":~䶮ufʱ{}&?by$sՂU/d"򚬛lE35[V;v32 &Q``FNXf$|}Us3;Α'(WōMe쥼Jofhd@e K=W G,g!EKj߾dJ»TnKG\b6P?]U\ش^ Ihވ-(C%"}D3sAZ ؞~ګ';p٢sх:FxE݄Ba:vt#yfڻc~ҕ@goOޞ#ݞa0| .5N`4HPR23N"|3fQNPa0<ۨEi@Cxd2 Cn \5\>DOor)F"8ק Rluc#wOq %3&9c$__ :b [zӂ|sV)־ {P\2gC'&t1t c#'[BZY_Se=SU z5V6.L1s7*M AoL]Sg=vY> R'#PkaC7.3 Ҹ SɉO7%R @^*ɖ}|LFiBb}NUt(H@ %cc*b5^3, #+&XTWOzť%=Z:4Ӂײ1w u-.5-myJ<5zH*ެPt|sL̦Y74%#9;މ㸇. 3O D χ /Dhp؂*j'Gp`jU-{Ien&$vp9BUfޙsx<2Pn!\Pl߷5UhJkWpo_NPkLpDG/j%,(h]Y}jRaoli8.1ԍf@%J)}d[E_UvV;9Ćd4L+,rǡKeRrft+|_⸇hٲ/99"X2؊^.IE".ÐD0UC^&dODŽ[>Yr$y~-pI9JD/l],LZ%+O (vFlW@lCd04ydEa =@7~~|pѭJ $$\dPyV+Rseç¬c?"83)*k!}X=gXVAMO#-6$KJy 4cpjّ]v7t+"@BL3:n-ޢ .S s'(-(J8̐wɢ."t_K#EOfZƕ2*h^bD)c3 o n[*r rr4 $# .-?YFBzm<0`hxGQ(0@ӹDE j &ߧ/W*2?nu'RK9,}Ps/-D\uKWd>YXW_7]s(AX;nop) eiWڽuϮ6_ yxJ Fj :vu֓5A@!]eƋqLڏ(hH vvˤW(xn4BkeJq7)̻@?I %Ka!/O=Ԓ鳶pTq"ƹS'2F hU\<9 5Ÿ-+H\ҀqNH73o!j)wf>9jޏW?#bP`(EF`-EWR#+1+!&=3 庆/ AuOQ*Lo]P xK27.L: ,s6g),[bM/J+_pGKDH=jl9EɬAgvWuͰչf]aؕ[K QAE*y1ik61.=ux*I/D1-@mn1ȥ`اqb 7k|1_5|_i5h]0썏A#p2|[y3+'M_<(ɘMP_Jz;-62)+Kp귬 'M7L7eXnMUF0)p{>mn,5CW~́5H莝RGt/y zp'GTEϧxa|׮;5;0جct6FzF1Z<V۽੊ 2(bVRT3Ӎ_Cym"D0v^D"mS l*cnyl)^lJd%$Dଦak2?-sTtʄ[. lpA.ɽ2T,yFŤXQdq,m`bw6m%d۱TR=-&af=.97Г1JMn%޲ukj獀&b`m:}ѵ{T {z- My =Z&EyVƟ3GP!hwcs4R%a Xm8~\͵Y \7l^I<1́X|m_F`6?RLG i]RA eӚk=~ƍU:m|,gVtf(Rz B-fِGKEbu`f%'!ąo㉣tB\!sčӸ=& nOz9U]U]-Xk` h;Z*W4c;4}{1ZҜ5$r1I*rAq)hQj\TC5K j)4xܨ ކ"~ 2Np9.4_O,1Qo=PmaoN})ؓJՔjbHau͇}0a.vO.{kJB 92 E D %yd|j.YDc; kD[)oam vޝ8XLd' s8d3tΩoo&/ā/V q{rXI%!7?bD.@R_\rvGm/xm KZ2YU;iJA[i'*[^{ނf'e`f_'uFާ1gԴ,yՂ6V 쇛RwA}V6e9fؤO:x%C߄1ZQԾ C̘}\ ŜHg$F;kzJ:"{S=Yt)$rOZF=@nYtd ̆nVތ F[#JBK7,X*^xkkN0s5R%Iia ⦿g+U,بňߋ1g+,|t{yqBA"/K/^/$~Opbޥ\)˝VJ0fS8%ё=Kh s(%EӂNG92!}%w5@d9XoơE^A'J6nu/UcdMQ,do|'k/iTF?5!WTΤ{Tȇ'{@ɏGaN }=lר`s%'H@cqF7Mݚ #}Q' a zlízreXRo/[ťɎ bJMȖc;ϐJħҌ`Q7Iy&ptO[c=l^3E蛛q?:BS5H̘n鸬y6ƬSI~QNNa3&׫ » QtMҗ^#bBjo(WOIo0 `ؿRdsT$%p}DKu'0P7V1̘]~h_S4-ϔ {0há>:v6ny\1| (۽Չn`!Z0xPck mRkտršy76%xGj+,EͲ$@z6)D˿S, @Ckΰ[+O}i+ o);QML?>l.Rx)&nAx>}q{ 0퇧f$Zk$T@ŘM}n7Jq+u.RU8xp0qr?<@[ beD0f>G>:!?]*W.Pi,!3~ ϝiV /xU!pߤ7s[_srC\tڸ1dOR[HqB+V<afJ*!;Ͳ,{WZf<;uv '\:r0I%T}94S3 ?$np;)o#AyqBk!^=+TėzlХm'hT -`OzY>*c-47:0KAO@VA74)3nv2f0F^5B  Cx>iF e <U=`o rfdEC~vU'pW,cgֱ"i[o*f(p0Z\ 7 ^?D4QX̒~ ΄U3+:]O=,C #Zeg=~,xS" {m5PQ8_AŞ) #!o<:J]e;a+==,2ޘ$ V_ (w-KQ څj+ j!۽/*Q-l/?,+zWd xtn޹bę~LT}o]27G_zgǵsꤱj^'Lh XR C"a&_Ct-&X39j-Y/epݻ_, {1}(-[ƪr=UՃ _,=#}wKnֽf k-Ki\^ba8A"[FJ[@2|&(PЍ`X`xBS2+ڻyU:aBgte9հ+z,\glŜ8H)ԫ,}$Olԅ'Sl8>"ti+Gj5J/Vw)HjC'C^ 5wCQvEtvlj3?+ouP^ 3VͲuXpGj׵K")>>Iˆ210/Z\ HirE~:a(l+8 gڼA3,1U{ΥOL<"%3RŇ]8_DRyi/~wyd)}.oA˵mG? 0!G℔eߊS>Av˅kO.1ސ)D #4RҲe21ƛ!g mpq.̬Y;!6N8tS>4!m0ѹpQ_:EfY,Kz9#hN6}p6SkYJWJ/Pr䷐ût41dn㴥'pb,C ~"_Gc滋V2RͬC~1$H]@ * #2N.k8 9|&%wbRkưyŶ"0pN{DM tP:DՔn˾ƨK!ex~T0+$=ض r!nD'Ӹ"JoQ?{ 9kpIl>\8l*ddXfF#IVyfWDR,%& d~ oa]J{t;|=_N3KY HfVaV66qLIIh2`)32Z͝pa vF1cL8j 4)T]@'0 ;v~-<p7kϣX#΋l~pշLRڃo,\Jx"l <]K͑#C3Y̤gZUeT4v<(few!0[W>M䒱LWէ[^]Lc&jz@Rǟ Uhǟocm0 dްH0@(Ô28cShN8;$j܄*l*zJ/_sb\;,:~5bٳ!o$?xC.p^[ǘ2YlMY nAgũ+1>shywIFAmEF؊]q:{,Y⍋ݥo}ºߺs9sZHejwDIOqCγ!+߻G7'-030>[+dby Zߩ^,6HdXI R;Q^fQngj_ۯM{1w\eC6.4DP(%1:Oa*Bл3=v_&@w@y0bHpJd1`vy cWU vMnSߴ8ex{]m}uݬNn>X7è3&ӴM^"nbVO}C>`x>4'MMDu<XnEkT5\8̺2 sg7k 5^ ¶64+/؛}<1l҅RFb!H̺GC nn ě?9_4SɰliS0D1y$R%J%UēߴbM/_9,|2<BU`%܅wҴ.OF+1wnpTL‘ţA -7J l`MQ)}cF^D(뎁mtӓ񛡍(쨡C q'kɟ -[DD *zrU,~Ay}4 ć[L}0^R׃=IX4܀8d_V`\jXtk<+u_WlO,+k&&JqHFZ @z.;Z6JkSՈhz>Fܟ{"*7Ÿ^N@> >eD}XtqD+tVdXHTw;DyiʅtJ8Ngqߑ3cL욍׫EB*(-x];oסD1<,։k6(^|p]UYL?yubF n[Jd=l~߫U~7)`/Z\^Gz2C9 bfA|G'0ǣڊ<֎Ocu_q6`oPo3p6Ww9zK\?{$'-{Un@nխ\ޏB]uqq2iaqRS?jAA_ As=n+L k GWiKLh38;1i?ke&duvPV];E[6V[2~-XDrg q,%ZkA{X$ϘGc봏kA>((5eS9 ,.9 i[@Gi AqnhaS@q{XUB2/vcOd 2|J8Tn^'7a5QMĻ:jYJIЙ$r3g}f;Etttŀ_A:珏-ЋVT,6ͱFLtb-Ma`g.jw`s'߮Xw#IL;Rn@84_]}pEqrA] /3zO5Fjr4PyjFB&;ĕW8V2GhoHPbl[ Fj< p;Wv$էL ~JMh 0VUOgb]B':3tTjS$#Œ*vO/H3h&nP>Z,5=ǨY1)-3,/45OTְ Pxw{ِ^6"*3^k`{,`4+9a\ Inޙ#rDKATvw5'YKûb=$iE>1C1pXkTUTG[%oQ7ȿOjl7[%vEhmNE'@úarCky-gQyR-~]5\G5H-7.I4ccjG{@ĩPn.Yι6ݤ\rasn#Y#ulJ.O -<-ʻNDOFF;xd+._ No##dEO LK {8 G =ln<*Ttڟmy7Nԏk熰ZAm%?TrbfJ#o|@Qm}-P|ŕ0K4W4yʯQ/U?U UW# oeK.sU]ӓIa=C V-r1qj3X<[7U7mDdRVX ykӔ9O~:ZNcmB`(푀?&“9m({h_kW\%ʝ^1>xBޖE:/8 0dB=S0Sӱ`5RX6sqj+Kz5hD[x^V2J rR' I>#5forwY#V/ɝ@-N=pU*/#:ymigMz=@ GLo P]~&&݈&!h Gt e" rqڅ2:4Ik (5P{!BVAWviGN X*З_9;%m؃\ FC);=jKj_ Xse}P9B(*O' %.tGMsk$j*jpo;BLRm˴ԑ2)!yў9G^tM +@V d*q{ Y>zh XN ޵}}mp@L>R%(:p~PK:d d*&!S۷OjF4AX`qJC jD2dm0l\ fL?rSEX9`xSB֕'!~`=$=8gk,hg}¸Hã{YǞ@9ofC9\S[<BcB-ŗb&MkPv:PR:tRf7ps[ǡ=E_?C®~r[v55Kl? eOA̠x(K^(ELgc~uRX`6i#J ˧(fBcX:Ξz)S( 'psEWA:-Uʍhw],> "kVo<}<OR| XjݦeBY:OO01^oеJO.g qlT"eҲ:[BJJ V:mYa wwC=ԗٴf'ezc)_iib8F'Y9E4;ݺ3(xu ?Ȫ//I"񇽃8|..&pes;k9zGӕtrۛƴ{faE U[(gZ5UMzqԛgqVd^QJ7`EO 8fJ((a kTW\PFZ+(kklMC|0 KyUUW@mH{Ռq-2zRoĂUz`a1w^&i`y];m|rJIߪ?̃F'˽IMPj礎7LCa@PyL{ ܔ;5d k]o}Oܰ x.] <3u+Z9Dgjk! $՗+FS?7HCbXqP"KCU+N &^-/۞X:01iCXߨ$-=xbЯ!GE"~W ,to=doAM5Y)SyK5Х\@`I?qh Ϯ$Hu!u9*ƹ(+Bfo.[8;6^gd) N1sOY6w$ħꔺCnU<%$o8+6\սX+IU2u hO#g|漣 lNxunKO㒶m^rZ9$s>|=*'qĻUt` D<Ĝďr#|̫UIM b~7;e /[/ a(p Akߟ~)d_cW:vJK|%drwy㤱us~+噻3Km^)f=Q1,k|pRo^߽0++Gx)lVҬdJ7 'eey*tQL5F#XdeiŷOW::O !Zd3xl`)߈)]$ ^[o}<:XyADBU`pٵGRohhz32&-"޾,"l{'6P6d>Mgnb LreeK™8~6rG#. ~Փvxw5v|YF/8 [GZvӼ g'U5Lw4,ʖvi+7S^l@/!aۤ,XU1N EC2)f٦5aHϢa1-ZA7}IjE=ț/5l4ηc3$о] hzIbS jvfo"&fLdT̖M%IuY梽]ȈO4ZD%rE?=~f0Bt%L;{ȫgTY+e]51OG\ŦD0CD|1Ig~\* ~GyW?/O_@#.il@-';9'SHD Ÿ7=<8$$p ;}0T|<(DM\VjItcplٞu'yg(şm~Żs7uKFsiR,PF{sB4qWIg"x$k@ym]͍$}Z1r6pplt`tw*T(Й]):h-0s\3_NxKK} l1S=}%="؎*cZh,qYkL3ť-|B_`n к*2a#k ﷞F>prOúq2Ґa5J\ω/׉bo%@J81xGOǪV뜠[j@(xH}`r擕M&zkߑ_9]A~^ZsG S{p䱵$ ֊czrjp1SEY jIǙJ:y0ֈ RjqEE-CZYh c;эPJ6R•=z b "HD9+?("aEOW N-6bp—;>NȱCI73DɍKD%Dfٜqlnaw=r̮X)7wESz2X1RKKŇiͻrLCI~^L6zi|7~̐/8Яu߆<*) ΁ ֌vӑ0U*k.hr9p}"V\c0촘eI!xN 6<=)3AnXYO}y Vǩ36^~] -ZzED@ Ov1#X+1^#>c\|OQaFJHkĉv͢cZ&:x7{4$cG]c ,\V1N qiN⠉ #[֒zp("٭{ɺd &2`Y[Ҧ}%A[R# BU*pѿI.q}1 9sQC4@ r< h0dQ2֑ 47N獙</5* aoٿ5Fm;cwA]BOKBa~LM87h&? JM!O_G143E|Xu5_A~p6r5ю#RSE8q^ݓ\bu29!3 }ֽ뇪pQGbʫr*+?jɧ> s۳?"Q1 ,I@`  m{/9%8 -iwA6J}0u%-gv xR)PoNiKO&(REyMt~b ތ~}PU2E2 |\M(uЦ\ LUJ驐@y5qVVǸlųȾ - Кt 2%ԍMf+&ח:g;R"U1L I%ĎiNvzuLe%`1VXDz|*68)9pk8+$؟Ҏ3j+P x2HҿS~Ӓ4^ 9b6֧szY -kЈ:JC;hdi|R((ǬFSS*^r }%s+0p55${%08R@:“O9/c3lBFeYŞ:E-n=w/FM!LV0AR2Psx .*y' ~23Yc!ْZ7%Fg?vSNab)\9\X9@K~4f**8 }m~wS'JGg F0OXOkqFKy3*47uf8c5` [yx]U8>YVڮK:hbn+(&}*Wjr?ۀ$ 7gnoX@ɾeI`!{٤vq3rO\x\5M"i4l21TTeubf%K) 3Y)Gf03xfOJz,!HUP0C}hn$MX调Ȝdd!f(]IU v#1͗XQDkn)(#MftZv8Рאv޽Gg_8 ~[Ӿ ;$kFހq%aSqB2Z+jufbDQBEezͭCm=bv{Rn?L<BS Hoi-{dCo+WG ps)놚dFvp|VAF|ܜ9e@%/e9#xp0#v4u;~R$M?l'8uie]5 A~sH)1L\e:&<0/#EM/# A7e}XmF[%[w fwBU"dcX_)z̴_}%QO+b C#c?9$܅rI8^M.[./pת8\$V,m"'d!.]ߊ}Ìbcbi,>.$6v|V2)?![=9eһ'Sot$<- kxM+=s+ u@9 i'e]B8J*s?SY (vx$_x;cug~eL=#4& {e-nd|ju=Sx>gUh*۶o^0`۩ x] w-oz0uj`>HrC( aZgiJdwG^ mSӴZwtorS`6H|3RÕ,aӸd0r(6Ff=Fs%H2 T,85(xE2ƲwurXz iv>vŘTL֢B;0&^ oDMM=m# J*wLa e=;f'7o蹔o1ߌHZW`лR1YM4ŚHoSTd.KE+mU ! e瓀Dy${>Aev&US꼒ZApNJkpIe1=}d{V9Qx<8oōs'kYu_.vc "%И}in t֮'ӴS:ѱ^c6C+?.<ɩl !\nJ(;ULB*sJ-z55 ^Ovk&hW}NM 5'Ǎ Nc3_x}Cw۰7#]ձh vۚQQN[,@0YniVɤ.&Zu﩯EN.ESLFٶ4ZҨUenj'h½C9ZGNt&sc hP//OI'!66ʗrh˭la^9dbgփKoKǑyӯRcr Gm;;-9X5>wKlU@: ];HoZ6Wt@7nxN\Pb{gU'2\.U^zm>/rxkS;NGLR *T$y19, Y1DY /s?XMwv#uQ+ !lV-M65Vo_<1_ 6(8Bڬ}6*vx5L; G˛cU8TÚtO[,S|faOYP3b(a6u]9{UNqޱ=51,IoⓃNQݧ@*=Q]tzGT]AC9/sUh%n-dE0OI#op%4iqm( r{Uy I*? +~+ G$Ɉj(/xv8?tmGmz4pSzr_ pGis :KH;NA Zyopj6TTemz;ˍp-{c~e&M%b%Z Y'~q%M[ɻfto4)wȝ)4l'v(bjLws6`U뜩 y.P3w KUN:!%yi xyb;xPh[=YԦ6l m hg0's:{ҫM{Y}$#"˼- [R Yg+~klے?DJY,(7aOAK ۼ\Gvf~61[p~..{*v6ؽ~ńg Q佱2*SߕȩM5R*PpЧobT bFbeȗG6Z4WY8?5+NHhryG>fzmJ,̓X/u֧?,YGh_ug~aZlb~>,labf`AC$8X"ݑD&^A3 Vk' Ag=T^n;h1ygYW \-?H"#y>swH_p9=_e^S;;}i(a*h@22XivH)g9e,=U3[7jy2b++O͸PmtR{)NtJTqڔW*On?|;W/`r=h_lhJ?\]%K&(DO|>Rv Z2=5 s5ِ?ŕr".GH#]vz[#9/6vul|ypZX)>GnCi$bv`'K!'pn≬-rd^ 8%Oz)$?GS4 Z^ yf6><`/3'.mHfBX ,ATR8Qa[!ڂbWT)JY=6u=kO"rК,@| 5g;@4{¤lm^ qB>6EFV@EaIR;Ͻ`0i>bA߿4Q ۸^Jt+|'qk^frtRCClc(V`~k۶t(o9 !1>PtEAd Kzᾏ1i)Ҙxd^=%v\g"k:r- s&i⽛bbێ4 `啭{F>e5qv+VT'iiśir*0!Q{w;DC8~vL05Εx4}L73zgklG LTÑTxZKv\U f;hR,rCC6,;#Օ"]uW VZBBL+,ͳ#WD%6G=Vays{%a?HBkAm-f+K3a2nm= 4B79S7~(!kV4cxыEϮC\֯zx+Ȅ^Pz/或p$zguCQb:8✖ZƗj@1BA7O`snQs1}|rrnl` x&C>նTkE˚u 3ށ]w,9n;0 rQ<a1w@!6*F)C.3eO`l12\z@ldz^PVh$pChW eHj P0y[*ZLWT[ˡw` IꟿTGZw"F >7SUF4,0-wYZ9^k% L0uP %4Q$__+U pd Str;ιѴVSv 0kS{w_%;9fErjp4T皍f?N' '| aGp&n :@zI2B׃%_EytEGu8T J]R8vFyt@.3ɱ$pVVy/;Dռ' 6 N9JZlWElq>t..&0$>x@ ҭT|N[b Gt|w yZ.f5Ԭj???ӪRUOVQq,٨we0=?7T-,RhQrQkhti<+Rcdl`GgynR#C3?0^ŨB 5=3ĥ[dħe/(mgv9;t3eUiia'J' Wd j[ٶܻ% pG<-'z&e sA "b,?_UG 'ѓXVP$͞ Xgv W qV/aj~y RǢ*t l^/!der~& eJ=j^ߜ$ɫXfW~pM/ߨ<*J\pe2$KS1/<*CK \z*I2t{`ykokqz) 0k)SU)wP"eC.-q=hROX#ͥU]#?^j0GRı^߅ZͺL*:W[o+.F:&#N%? `KY?)4R?Mk% s ^cvtHh?}P]1L~S U|E\"eN܎ỉ3I|qilk'9}|y:5u}u@Vf=l\X drHKW~iQᕠk@;Spdc 3f-ThC*7nOM@B`w+1.g;׸R,–4nS`P(Mqb&52rH|&W[0!tyoZI$aC0po72T9fY#nlQ'(s'9*KhA'6s\ޭS!Z货bʪ..CfΖ uS`ˤxZ_iO8iyYbieDRd<*@Pvb݇1MGwFg Q"zIp3ζ`8 9 1f_ 9L*5y_NYm9\}yt*MSUrqo2eɡ?>[*]]vv^gAug&'up?$Q\8}AccA,2~Rɿo#t@reJ)׿7̨YY 7`uxDgag>2B.ICjnG >̣xS?Xժn\v t[bo*ce}.nK,2J>xܛ %u %~{zXK}ėB]c!wZ EZrAl('{De(3fe'`G=#ǰa}=z>- *M9y+,CKvePd9rjO֬l0׾;lXaH$mgU߰pOJv }#:*?BۮW ̨N:mBT>2t!?sV@ގ&4ڔ9lZ0}PɡA \jT/B'P~̩ A ډBxN 9W3ϊ͌LCyd"!єć ˴bD5 tDq=>ȹM$Y̘.psA>i"S6b>JثqOe(#wx+j }hأٝb9 p8]W&bG̘sօn;kdA#^c 4JB%kʞpC ,ƁsNy'Ϸ?Q 6%M/X N GGwzu*91dzSs3^mK%j ¦wz$|LY;ِ>)P#KL9yoBuGre+ΰl2ЀJD^LVEmݚ(y Gˬoɹ9q4 / ;N"(X̡1K#<ԱϵljĠ3]083S% f >)X]aYzmv\̼ & mVq &yH7ES)2GGg{? X f v?*$ ͯa]*YhGFK$!h?O5ŵA63oFΐՑ 8-v}MOŋ;7Lq) ԾЦZF怞+.~"l@62VۿtcaXզӛ cx48<-+IqV7՝yxp?h@4!/ZBzF$Ғw):E"La){HMb6.=&6)g)d]F‚9Oq_&vm̕ҭWy;t1ATl'aJg_=xLuU/&_GjuSg:~{ڪt:oRxH%:߂:M26gA{bx$G:'6xckk>+Rg>R_8+dCIu1.xϡ03w%}ݳ!jbE8lT2EP%L_$f-/~ O.+ԉMI}= ]s@fS ;:@7@,yݐ>yugWa gTUl8{;EUtar\aUb@+M3TFb%^ Jsᒚ)ϧ^ΧnT6La_3.RgcBHq3@h<~S,T@&33#>ǜT`rS TpZSSe!XDhbeӋ>8)UfP!(91._bcZ{;VRw`9mYXz& ˘7X39GK:4p=L/`(5Ϧ81Gġ3z~'BU擨n/ɺJ~@B=?L17:4X67?Rl|scW1%R5!3¦bhͩ9c0&pN +kcut&cH6L^&\CDhkF\=Hg7,Pfo|nB:wT=l+!4|#&Exa(OEgq~oi?.S Ag^ i8v|!}GP RWAT4Rl11Fut91We8zUu 6z}ԲNuܼ%V{_6u)@Ys;=W[~ezogqU4ƗťHdǁq0][];]"P(-oZiwyՖ|~uV`VeRH>WYIH0Y6{-B6?N:ڇFiD̄9:TcG^~W" Z=>~tBNuw47q9Ir7U"苶48SP[bhgkKT]!.M'TɺIZ9S͎[gwVf'?Ó8Z=CFy"~:Yґ'-m\ /qRL;ߙ0TG q)c*, uSf:0FY|6] v&e*n8bDwMw&k}АBЛڬWڵΠF->.Md^]"͢ E㹇 T&G ҇$sRvXQ+8-m}\6[؍Wm=n~ o3JTe皨4zc?iøo NC2wCgb#S>]<8HzۚZ?jqC4+gSr0@ғ ~#en@|ZR:kƋpmG TRpu;#^1pDK%+n|(`_NMϬa 5!C0x{l+3S-Egxo0hƦxx&bQT5\|lxv_]CHEԢ`z\ =ۿMx~)Ž"SNVuiѡtf3.ǕNC.\ף`C\Fpeo9:yk**SeYIH Ey7Jz!VU?s'M h$݀FZoPrk > v Ԩ;R,> $u;XG-+[d_[WW`kXQb?V0.@X5a*j`} wk)gtп*3cl]A? i:˒)j.?vGx)$Eٯ Ͳ Xdp#h 1zZMp;ܖGA^rv~ڷ5fIbNP!qMyRz,IZ徨.ۭX*x_HS(O"]kFQ661TĤZpqJhrwʏ61y^lr`#//P.a"+&&:.n' rL)ujk)b>x͆bj8m邒mضfu>hYi7p3$?Z-o®86/H2;đdg8PBJF0 vmfK  =3-.im/}7чhw02rGKyh-[(U[.#p~LG=GBwt(D1SqB%X ='(r]y̜ 5Ҳ85b2#MerW/ A6?z!Tbd~?\o> [%L=lڪ"30=2Hhh3!_6?= }#O,by ]Dww,!k)PIDP]>.f0L|W6<<;gp&~#lh:ozh =ȚVNdtPȒF=|7_ ә%ZVz*d(N+}9]s h>t3|Й{vvG)G߳ $*Cّ}i0-E^f˸p*5Åz5EtrDaY;WhiLIbvpSX£ HӀ3\ Қ5~E~~(/aI7}Ka35C%T $_oܙqJ0l (YW2.M_wč3i1X\NI5 qhdE⢼3+Ujވ߁hlV-$L1M}—9<[xf`8oen{۵?S!%d(Ќ=7c0 zPrl0*GKs,~Oq";],/j,(kї#rZ߇$#fU3Uf(RC<>V Y*{\ 5zz'`%$*H5RDJo`:| G7CgJi޲6 yW$(Z!}39_hV߮NnP=&zgS*iM7~Qc=uk-cecgvAwDab;Yq؇ Y2 hZ CQg45VkE;c@Q`}joP (C)7±qic+2A7fΞl>bdEF+k0]_b^;-BȐ;3'X:+1ݝ06Bn+(Ve9tܟ*)X>RT-ѸrS6g.Qچոh Vt-V6z$/*9+3 J[)=Y=z)`L |t_0>u|L lq›ʾNdk뗐}"}eKQY}u{s"K"N Xz٥C_wRk tRpN{ݯ^'.l+/xcK\$g˗q{NW0P ]VtզaV8[_ Fsn&R)JB33O+e>OˍCg0]U `*._bg^"eK^0"YG}o%^PΜ$Ikw;Mn Ù4Dd<0w^YUXD ʨmekw0Y`m(Ow?'0w;Q 0=!R,{Sr wLc};Xƌ 5\ 8XpyB!_ʒA *AaѱT|`e8!YLHD"!ݸ! 2vSˇ`@US^ztD2kדtZwr@ߦQ[]FRk>D((4wU90~qt~.i>E$2dc÷\)zq&^t?"6*KȃN#|f5~zUCVE6f&~>{ ^K_|`sͤ4O/Q13<sX|g6|z?[ܧ0=p#4bKVʐ_vPAYCNŏt=`jAӇ/#C9e eҍjmcO^¾|)##+od"E:s 6:oǑZFVjsWޭDTk'].)ܥq^1Ivb;d9Q>PѤJR5ZCvD@']SVs9 /M1|9X2%.|_]H#M Y#G=%⯡&0/Tk3UD$t h7=3D;M_T_y;ubHWJqZdAz@9oa H=iGPEH1Ku)&e׉JE&8@ 읽}jr$ WXt1Vg$,䚁 )1Bt>AO'k>[/c֔f;= s6)1t+Tik JdüJW{P{ t渓&$ _QO´K6VQDg_;U38fᨇ{OO>X7/$ZcS|W}oĀ[-?q1zM*t$%6yx!aê~7`R=쐵~=5R\Qy:B[Pū=mO`k >MJC\=FCeP 6:5mTNf #5JMXw,ʇ&T= ]XӟKۀ{H͉޳.yln]@$ڈ9tЁeWsElR2Hs'-2 H0iMYyyx~p2[hYd豶l77"Bjİ:l3k𛔛:HܔDAE Gnӵ*$m>@&G$hCvq5*j3 |"] @gi8ɁLױ 7[@[fVڶ:U(*Fh680Z؝N>Ll6qԞ^wIJ}vZL0#8?=z((,>Fpc)yo~ /ݷ䱻)RZvӝ aJ^Lbj$vV J'A/8HY-v/1~"]?|OV=|{rޤ£gbeۻW Ho9)9cdYDQ_Q$Thm> 87,RpyF9p$lbf+\kTEils;tB@OWH u>s{@a(uS=M<? SoȢSg s/3\3wWokմUy;NoˉP#~.d;g(P~:ݘ]7rG6i"! 7a K?nn LY别C6LOAh 82PZzQn#bO);VrqdWM`mM>cr-?2UȋrG&5 VPSxazߎSѿ".r@6/'0p0Kmh/8 tAu<2&D Sq `]l\Zӹr0Me6 hE+:rHUcq>}/5:H^Dvj <Ir'DIy>CpoNsp"Rˆ:H1lzȟ|Z٭c;%(tbk 99BB; 4rH AlK>>M_?ig߾s^f`Iq։0}fnB %~HѰdR17o}k: Y1{kb)H vG<>E!֜Ż"z(~Ayc]uw(}|FE2tgG&ZO3{CylQ2\MuťYy~ d¡3@b]#R'_4Y>$sK__q{ͤs煡-+ hT\sv˯/EL><"7sQBV ~@(BBhݤWoFڝ&,One3Jpepsz<uR*bob;+t?sa;$'bRɋ_$Udye}L|ɹι>rpǘGڎٺ^@|':2hC}Hj,|f?0[WC܇NI7pIhd2 *1z׾Sd"c晢Vt+U6]3~euaQ @ g-($ʂkPڔ FJjc`a)54)Maӓhwdg+eIC2{ٚMxQ 5%P'#o+YΜwO*I!9UCB7` )ʹl@6&R) SYF7.Y#x|MG/4C%Nm!4|R'Tʕ3O u46UFAU|=">V6EPm!_kz 5ś`Eiҗ5O?I*yi(jY";2<+*0 L1qSRo*r dU.=Q_næ+ءĭwřWj/fQX99I4޷LB+m”G0d<Batl}J!'N5x; HUOG7Gwe[:Ѵߧ1[WY[&X{EcRvV u^Wځ"ڵ 3[zANC)@Ǩ룁 E!VCKjY)Z+}Ÿhy)iz_=ls;,۲c|Z{I){G_E % ׽ &c#I_Por TAjl LiLkzu>:6\$=gM"LLpw+cko K`@.w#%B7LlAIWV ~Eo(av;EyUNydJXJ*pwg7 Ա%zf5Ѳ`"8hw_bC]cAJkj_܀BlkoN ^-Pĵt"Dǖ߉%̎5$8˾qn\XN^Bd/):},&sV,::E=S|8KW_SA_Y\:7iu/i=p.\4XTc=$Ў*^1r3:/C'F_rD0sнp[#9E7U1G)ged/vB%{ )\C, F޻ -\&$qx6BGJ4f>d=KIJ*&*k`@tU@Nˮ< ؎HG  @APO8f\HO{_z qGT,6Cˀ#5jyiϐߐA !/;;M;Ŋ2ٯa69Kr-SȼPG* ANi@ ׫I,MtJH$K><茹O;Lj-f_|h~]Z_Եo;6wh jKp2z=8!CJQHFzuZY qS)[Lq-pObC&_,l4MjL,QjS 3'*om/ XRDu~\<݈Tϊ#6l R_MNTGV{sux>D}:{Ӹ)S;zf(ȩƵeX+/cv=ȓ[%6fJ*lS+5ص8 y--FP(B 4z5ktZ8'`ϱ|Vz>l~,˧ȿ P<7 DaZ>^pq:id"[;Y Lz}%Yz%$qv>~f\IfC_=z5TZ ehi#~ᓅV;_WjE;Š"e&H2=tH $3/`֓&Ռʣ[2׆"rt'-dS#'إ  d-an2(:}l (F[&{etFY*0ÄLpR/9Ɂ+n D8j 0WZ˯36Fzyw)ʰOG:qZ^# U(t{{C!Ȍ'be!R?/.2Ŕ>\\] ,B%s3dl84d~9.yxfjNrJgb6t 얔I=ʤTn&xsK^k v3l%_BNnʖLw8PaBq|Vٖdo՚sy'THt;OMOi+S@Y+KZg qBשW~y>۫*4ঈn~&n hhޫ(zȡ&;s~X8EJŕ1CvV{YʔZh缗yM&B{)Vc6r42{ ,gn@VM$P%":ʼn,ry<TUSsRnI> 49\bQY "&rPJ>:^)~q(zD.NV@Kb&_ }_EZiQ-Z}C`cjCCA/C,uou%Aa0n %XqԘ}F'&]%3PW%V" N_EyEJOmQp젚&W pfR:J`NzX}E g&= ~u齧Cd9ҳ$z”C@cn,3 sx(R zq s}D^\?wrh:@YGY",+AۓUkIAk1Kt=߉_:} L#CK#QH͜8Du5^8^,Cl[ģ%@@ȯ][{)y;CZ5a9([>os1#Tbq=|QGiOAB*nq+ ^ Nᾷ}T6$GYtM`r4@VkR/(e:B}SB:}.gz9Pr\ԩnk1bq}$&\T;6IOC6F*Ҫ8Fi ;bƳF`b<#Pcuţ.]H[zŅ6|./T OVS* œ hD~objN/`VO/kY2w1^E/,j`}jn_4p3|aDUi_z\^^?٢ Yߒ5p([1dMg[uUv']k\>Va 7e焠_xo+zf:ؤC\O4#vc,>9cL9Oa>8 :huS犒yo#°^pEbsp"ʯ&jq|V1[X6dCY{~(O 150-ވ 4o7W?ED64q>{.IIY͒O~#! *`BzǙVt= w)dz/!uܲXtΊlbY|.6XJԫW U!IV0Jyq$-8FjL1YW}sϫdՃ7^׎-w4OX$eQYy*^ն!׾[ŬlEr}>2X|DcqQ ERPwA?|aRRyJ 2mI@6[*al{)>0׹wɽ*_gQ\c/0H/U&U˃3)7E<2BC\FF.! Nz!/ƭOlc01 "C"k#9@tZ ( moi~ȖFd39_O qu=Im]ٹJyR)O4gk.WmХ\2TboUnG0)G K,N\Ц~d{X|1@i")6ipX,Y. sԉV=ʍW22!'u7z"C,͜z0DlG H~ofm;Ē?S!*|WxGW.+8; G/E!FgLND_n9 I8AXJ{fcy2y"qKrvx&'\C%lP/{:鉶yDz^Qeݲɐ)lp WbuџM5pxʖbMZs-fa`~^)26fW+,'ueCGV`1k,1/R[Qwاch]F#uW<]2= /p @=Xl㩛ʧaZF^ nk"oarNkШ_[X:6 -U[|ήP ǦNIc11O@նVM `j3a[ӈU*vO-lƑ𹾝_?#- &_97V2YjʨS%\@΀gx!_(11b+aUVƞzV+/c_`nMOŊj*| ΀?h̻64Ob]l3Ҕ1io=jJb#?WHtW#ZG[:琥}Ӧ9G/#fQYw_l%忋:?~r}x_IJgM45d#T!Cɏ^nbIO-$0\+ WܛlDc:L{fw|SwGWB keι&6G:dyO.Ang9'_hR{ő'f6䜝vzv#l?^:fnΰ)ސchgkƕ4tQHX75z4#j3TmB\~z/#2+5GσrnÔjZx ] }5$]BqA b6StF5Y%HV@cR־s'>wgIN/ƥWy!Q"S#6]PV6%{]/wQkΚV;"\HO _aASnSsB[%QNx'{}w_`c, vsGzWfSK%w9u0kZSsБ6?r(C_ur#O4uVP\[  ͗Lq8J$E.܉?Lƿ TVPXiz(OktjU!lnmmW;nK'P{MH=KۙrީH 1 lT(xz.w]ƛI*|k.6bA -\|\~ +\޽u0& U-X l0WuhjaQG=gj3sQ7,lWnr;@W8{-QBٱyg3Lޚib8$]@& SJկHlŚu1'f M-xa_;Έkn70Rt&~Ԫ+Wb| xMPAjD [{n`R@_`zNl:ѣF/]xvBem+V(HVdT5Cl%ui~ !-I>[WibFutwv6 X~H Tu Ln]|{2զ' KJ1"y o)pSl8yY^A{m 8Rs q 46|%SX*xFK%{7O]12Pra[_CR>i[OMBğX:s7&?D8z*wl1k1B۳T݈ӃDjs)$zS_C;5~|L ҖQ1U4TR :rm$*cru:]&ݎ<0ym,g(̎)^JQme9KZFLJ;-VeiE RvM&i;&'Kb(uURޥ:%!w,x xTm:6Vc ScL|ɽ~my$3 jSAo h[K(:}&%{$zf.h4HF5l%B יFpR#Jڒ7I҇1lbN@xQ9Al/bBĿJ׎3oS1_k(+WMrA]]p[`@$ExNJp4a'pǔw\^AZ$>|`Դ.Nir=#ZY(<ҺPƅݜ SO/dZ|?PzSz8 x LL.= #gW;7L,;l5O\ `< cvxOhتYAh {mI7|#W)^Q mC *Tw@O׆UՕ(+J;ŌMڦq]V*-$KI&3/lԴ|ŧAgõ?D"3AE|)/d" "3`RY/d³ǔ(YƱ gjuBf2JI~"T: :1k]d<ijŃ 2w,T?BfxlC=(fY:Sh𠸸-wD3TLD(j5p]Zkj0&=yGs̉LaD3Tv7%-iGTcfyŒ`KB~m{);Y[5n͸>~3LbV:!ugRF;K[  5*Bl,w6'E 2*[FOsT:9{yH ꠿,A\}ݓEUmOZ6>!۰Hȟ7)%! %{VZ"۴:E)Imui~^Q tO%&u=p37MaW`J2:޺?Q"!Xtsc'#]B2`[_5'+Cquuҽl{I_¦k!SvpN_)Ѳ3Ɩ @31u]llC]9~ʢ$8K@GSHN.-dmX;~ZJ\+Іٺ_dּَ"h@c}#:@_2L~75j\iPW]ډHTv[ܚ,,h N \}Do=*fB͓NZ>+U@p_#s͉ "UNec}kJX*pQ�..fzp{`6៿`G6:$0[ *5Q뒪MUV܆f=^8$;s6 ~UN?vБx@y)e@Q^ulR2Z4"yI{RJGd!o!|TSInQ}1rg4g7q %tь3@KM<&.{l QHPe;QA)N>*df{LFmE`UvWМ%5˺\bgEiXÏ< FVZJ?6(5JGFub]_[8sLj@򘿡UncvptE{F/HD!ߦ0fInd$j3._K(N{-59әÐ=Jik CeLq5N-ίzy 䄁eTͽrK9<9k = U͉~33ө!)923'5uO1y= L pWׁׄD%V5kι}90)_S3^ ip,`;T:KHxSƜT3Հ%oGS,(׫| B7^ې? RrpxŬ@zq= P+iTG+l߷(6 !FQ0}|iNDTmW#m`I{yy0-<} Ȑ:H>^H74dH1 >v|򨶰XZ$|tDp `=ˋ9e&Ն%h(1ƑK+#sg~x(<1kw?NNܓl*p@#-R 6+S&\Z !fႌk͈% ,|4l/=ҲTwoLp-m>'eZ[3?gDR3*Yt|R8XЀ4!*-~# duel pȒu>TQ4噖'FwM\lG~>{vR:5nƍ'XЫ1W$]-KXF63jKY9wXĄrs[>'>1S5"m`>G/>; t!ŠLW#IVwC)=6%32o Rw%p+gVHLxw҂XJK^$9zI%ieΆ,K O=v'wo(z#k{|믢aQ[jĶl cZJ)`/HShl+OS :oBW;E$>ayG烐 N!-n$WQD-j Y5&W TX7󻞆r2*;dqVq%1f6O[[ ^ @ ,̬ހz1LRk4f4aͳ$1"̤1'O6Fp%|G*WX:O tYz7/)\ *Ki'Dh/-84^)D4OR7uTq_u}Jǵƀn*SVo|ǃv@ǃ:Ҳ\Q_vU} @q덵q4 [;YiZFbW7m~AQ[o3%UO[kc@=?d;K z2KK]`Esv 2?cut#LJw;hlRj٫í*ЈtS"[l~Y՜|`E.:U8.pg)c*RsZYXV ;b;]7^v|',`058LZ@HR!N,.A 90vhu8G/$Ry|hC*(9=H9]d\9m)0 n^XE<*BjRYK:`vy[C^rʞ@`>ruPilUlFHDƃ蓙Ghz6} c=LdÂe|ZyH~,apQR X.ܑEAY`(Nmvxgavt3|N9b?ZvT3n*(0FJЭ;'(UQqhsl, N7,!zqչ[2_(H-#R˜ hAqq:yP[ywʈn;jMK̵g$&Y'ciI0M+a8zb#cgB2ToQ}0P$oDW>*ef# gw&8D.V^V5@=!nV3B }&RA,Cή@9\:DZx&FE> AWyS*VA" x7I\>, Ƴ(py :$,s*h\5!fЕJ ^?ՓP<> )S*IzFŷ{셤j|0h'ABKωAZ죕:Ӕ!KF(P]Ի <-2.wdդIS~m/~ƦLpd`x*z_-!?ߒO}ΓOºEvWCƖ,v 5pqGa9&vZ(.pˋ=hY "$,,oE&V __.3!Hq0*];et@.=JY'<]dDWZ+u} Q"8۔Ķ*#ks;5de<{ D^0\EwމL[Y~ @Y`U"V ֢;KBgv07MGj.L7 N.nhRJg4AwfHlcϏW$SZK 5zJ~E7obĊY jZ7xVh$O^[p@HJ""}[E OV猪i% "~7zČgI^^@Kq3*(`K*X äe G&}7Tkpm)X~c v8wO6d!*S˧`ag&'搻K9XUF5B^7/$A27g,v`o5 7Ip*LYs[X&Nx_/l OibdV+ڂLĆa<#9_-&$0ΑMYtŧ@m^q!@]~E]Q~)AT &Ċ\5rnsa\$:Ń5YmW 3ԋИry29]E| lR @59z^Ikl@((oTHRG3+x Bj N窯 p@B?W {0kZٝ7y"Gq0̏xxi\cQ9d_]YWT)ș~'(*ޗҠvPWgX $[[zS"D@;R^]1vtK/[4$b:8[Olj s*TiLJ` JP;8K-S5:{+w߂|g )#nF 7-k!LYzW*@;&S3Uwg3ʳqFF&mc:kbI %ڛ{Ke.^ǫXB'_.u闾 .u4w`3! X>Aݠ`ߨ62NfR DRsE;!uq]'CKQiyQzdVVs| "- 8ug+cU(`oAn'Fk6{+s8.9M )CU$’(#25LT1-#T3SN2\jYw⠽Ut>ڦxgHTٝ+֟OIh^@\sna+}{6yINb~7ҳ[:Rx^lUia$C6B C!Q*Pܱv6G kf}߿kA\m zwク:MKA}Z[1%Ȫg߈@jiۂQ=aDf4o_4DyVв $5/y8 YF/R[95_x"+Z{t?'zNװ)Q7S 6\,GFdggrĦkSaƺJ\v18xOoñ3C}p"%w@OY羣D{B+Ѻ>Xzy$},>-\{!'zw嵱V#R/u+ВEd~4׭Wޢ,H_Aqh675>|&slXP J;e%BYR.am1pʑYI?Q@g .ud刣b,߻捒"Ć8e}G:]'edûޛ Z_lԓ{spXY8zPR&cN/Q~LՑY O1K7Y % ; .BUz'5D+Hf75#4D?&wHt`@2PȚLtPْ6z~glWrȗsXNBF`w]?O=b1]M:Y AVc'# QP[*t&\_g?trX\P*3OLДt7֘R@"Z<'$:I>"=r09TK!T.;;Ev02,>pFEZx׵?l̜oZ` }|H1|*pKTC_=])]%go)Wp~hc# n$.Cjz8wg-b)lqP* V % OuG[y'Q<ƞUQ~MPDym+Jh7U2ʁ~E>vN hς5Ye|S ǧ"=Y:j[kF~ 0߭'L ԛňn" _ ,j )3:QrCH+ zㆁZ#5ASogz΁%5<6jS-кA..LQ|)/>gy9fhIzE` >y}1)46ZJaY \j _y30֝ ()j53WIo0U,a[ 9d]E#PkZ)#Xnv Hݶg׃v(/.4p Knvi{PrA'l69 PĚf،'pݥ 8q Np^E=9}+@qcxT`ZY O 3U=3,-|+#.b⦺ГQJfൺKX8T?TS<:4/J_7mx[Чl58iC|8507OA>g[OÔ(M=5"e`"N46\*ݐ1 |T"Pw5޲[0vj##C:cwZF>纐xBy3kʸ@X6m{ē[M IլO+k #x @`0G YrGcH6A`pQVZ8^@l\l<ئ R.*2y{ԟ@ZU:۔g$㢽m$d]?'EO LJaP0HGq/tM.7z$lc! G.^wMb66 =}p<<~CeYo! +Szzj?}NjdDm[D (t)I y3d G4]QΖ;IԳO_υtA뎙):}:2 ˬH˧xZ ^t;7n~tqynPՂ`p =lox̅vm|mlt5xi#Gm:~y?8xy X}*xCJ5O PR NyvJ!ʗRiլC.n $͍Z {3r(LGcK+NbWm|rƘ;&%Q9qtp]giQt,?~D X{:O:?.V(k- C'n:z8a#:TԎRL$΃#*qbSleQ%);c퓵Y Њ1nb4fwQ@׉$ng2)cuCp͛#9_!u:\t1Mibcq7<^|' #h[X.V8P;3!2R2QhuδM:3&Gl"ȒR;}c?׎;z#EH;>ۿbrʙ_+g pѫ&)V)K?y%C&JoDdRnLP /2%1+~"/?e~=z,|9IyJD uol( `8+ͦBKPkZɹM 8PQXLw1oIܦ#5I&C`{VhU( nFBop# OYqfSqxONygZG 9WDF'GOw.{b>nA{vfKdcdAQ40KinҬLA>f@OrҴz΋Ѹ/  @}>F>?3 렵Fu@>g<k)zN5khTFjטX@nkӝȣ*īC"[8{ߔm?1O!wM z5P1壃8_7$C{iu-n5v 6|En"mJZT=V]c &SY5f=fzB4d+fxʂ '0FgVj*o^ďpb, fS*,zsOVV6:xWcdF4A2aVQxaE+ϑ}MuNK)ޥiJ}b*wdH|OÉ??O.dK?`P Z" C?v-|ZT`/Y 4r'P) OYzhHJ} aOCJq=vo4;rNQ,#h0R)CӴ53"&8IaK)_@2CgDK<pnxkȲZJZm8ܦKVYc+hN-OnؙZB>c4p@ʾO&W#iQ3ZaatQ6bJ"lm)c *TYL^g~ 2]PIs8^mbg/ ST,6D-[w4Q>F<]⨿A*uZG;QˣI|hM p}"vRgto JjݥYf1^$Ưkwi(̋YSImCm?MemRX+w\\榻1 g3q;՝걵>Ů=P߃mxʛԴzR1`eyw2S ѸNTHjh>(2zF˚^v5{[`DiY?W ʮt( UoP@]yLڜ7ZseVa:׹5.F*<*E$vH/^ӫ> 2$՞BrC5c ?:ǁ*mBV]}ՁǨ'uN0+'CrD}DJ0.}B*`j< '"+wh4"l11 2 5aӍ|]&E@oA)El`N~f/ȑ=Q%Dtl$JDI Ԟg& ߨGnZ_$`!}{M {(Bdj~LRn\`Ae\$Aе$;E+Oa㰀{_NIxj(n :"@TȲ4=j52QRvO-hQpyӥzQdnvDRv1,\1 ;$N@oϲV

ݷuQz \i()+T15 hrtOQy>SۦeQBt״p~&f,֩_R~`aE~_Ul(?GT&g|dwH=Q4ӆ])'vzj9 v]NQIEn9OԕH%&XFD'L8X~NS/bf;?9iV#cVZ3v;(eqaAAA_J뀺dz,B5̩ Q\iMʞ4`0$ۑѶrӵ3`5. 6f 7bjCoK H! 0v+ӯ;&PLN+{2\cHwb#xDv*) I`$c]?qx*:^UA*TYWOO;rݱڭ9+b3]Iڣp!͖ҕipr*H.#FAw1hEJtHᬃ@ݘ`87S]($2fI r'hP^Ј(H7="A(2 וΟjcUZ?'Jy:9z7\Bˇ4  i=ڹn[s?&\B׿&(ݏYg/)ʚ/E 7=} BF&6L͜˖[dY/1` \8_PiE"tȼ3GF'!!i"+74<( >Vc+=`sW??Qg0@;RENMsF 3.&-3.I[%i˼#Ai\RtoϠ$Yf|^M9VH.d"9JGC![ ~b̎%* AE!J(/Cz=$/9_+5yKT)s6VDN3GhTgN {Wɍ!NT-F=qY, `)UCHÓY#=m(ρ@Х#5 e Teu!oͺ X&0 ݣ WDZArFiuw$RD`HO ]M*+e^ƒ&: djef>Ali,?w%2R|.oW"bG14xm!u[9ə . t̫"kw''5@"QLG3T,4Z e, s$57[UzwN,d' kHj}Ҁ.jdϜoܴ>N5Q%Ps,ZhUn|U$A& AwfAk s;2a@_XDEP&I\1OQ7%Ct h]|ٛrd gcUKnjPkyAZ4^*>XBP->!<.HP4(Sy ˁU;iM_DT3遽kssзw;#˻T &{iAv&v=m:ҝ4r$wHwoWV9 f\3X)P׍VV6h`v(^p+sۇMbu0_oLnM:I#]=qto6MF*"/h;0rj^̿H8FN=泌 kr&H`G>5kӻ cP&ֆ@*t> - LV;{ñn*ߡt(m9EȭmRr4a .PdRvOz>c\@Tn ߨ{حʼaEk42ɶ)#)Y|u fNOI#]>RrvwDv6o~PM(0e6t2%Lu1WaYxF"1$H_V8ef+2t!)d MF*[Z ; 9xt9 I]Ά\:)5#\r€->BwY's\Kr} -̢j2xr ϱXauc18x4H t跐ŸMm_ps-~aRP5BK `,kWino@CH6}Y^Jܖ!opD;u^c`Nӣ (Ǫr"W"'ѱEM/stvE| L_ oMm0ǩ 1d4=;Zn{O[ޯm`?7O_i4B>^5|x2Iqd?9{ovԀc&rQQ"}4$pbIiR9=i(ឝHGe-}ۃ)͔{ _5T%Ey92l <c0@кgfcn؏%K7%<.)_~+ tƃ$%(|NgZ_prUĒ~E"CG8$;v j rNU7.P:hNa_1/ʵvˁᔹhKNhp#l|7S6D1G{o eZ!̲n߷5H$+Oa:+ģlB5sF1jx R]cڟkw W R-@ZoC o!y\b..15owWNmNUw" zu &^&F,|nA GDy};4O$4<ÀIwH*JHHa>֪؅"U?/+ue/VvD8=}fbe|_r+YcDWy*jb*ػPՅ3hw YxY O*>n2A)Ɣ=\שE3u_`R>hRA(N&]~uY+FbC4F/bkֳv= vp IBxvnp3f(a0v=9[Zp- vt?7ǐ w}*LEz[/CؔP8_aFB'ӫiA޿7/hk|URڰpəɋ*s[J8P:9!a"\Ow]:cC#39ZS~|245l>W{l,q 'Q!Ww?ORٕnW7:neU4x ik8 #L>o+3|%9V{Ǟ4t7ybx{kDǧ|*\P9^aV׼PBΛH^O3oC:mu1ZvA}nw?ad!NuUsrvS5tWNDylRK-EL^vGL>휼XMޣ,<7{K*1PI Ǽܷ|GӒpJ+}q\;5]0,tR\@ȰmfĹj^hCWnykS&h_+fإ%UX: ,Hܶ)Sp=c\Kn/]Zo; T>쥠eܞe; 7_i{TLx"Ԝ5MctΔڷY/2@ OJQ|Hj4Xe~l[Q Ĵk4ӲPvGN-6 ޵yQ'")K `p$LThPw'6[CKU$R!m3}ۧW B`<ޕx\+TICHd^l~\;pE\dr+sL䝩8&߽' NX%W@4݇/>GcC607Z\[œF b[z7I1g) \l /=b\#=jw %C# #Dqt$*D7 p)IYƁ!m]DRP7b4U|@ų"dkkO W| { *D?0.0+Aj7ТWgPhke":S蚐k%1(q}0%UJ F?ϙ>M)(7fo!&h_G[ gu A/֓~_n E_BSh>PpNR[$ƷX12ϟ݄Z*5/ s>CP~ܧX.',ţb Kb3bEXR ɸEТK Z@}1hhOHYabB6:W6k&+9TV:J8>Yj\M焘) (҃磀c~~..!Y+nGI@jȖF_}KG.t;KM"QT9 Kކ)qöm:719g!wFj:0Uݢ=g7WW%`Xp1Du7^UN>yԮKu: @Kb[taWݲ4,B}cwr燴?/f]R /q?.dՅJс{:K8 Fp'#G5>YRIa,QLT9X)#w[*zGBۀS~|9ɱ~Ф6Ԑ/]Z1$,ݾ/?;9k|JTT,{'n"LL!AJ6Z DXFg@]1HcƥW@TW{|;cn ^Z& Wc`+_dg*k(%!5`~٪nXFz6P* \@X(_˚7Q+25" \#k23hv|AFv Ay@3ƥNqgR"+8&Sw]=^:PDƉ |e,UaEGJrgMpPH{^NsbM?bqx]aEs7>kًr{dŕ[+?s;~ߠIQcɄYu~8ȯ5/ȋ(dyb(CbwhH/\z\!=m@|?q, fTzGc!eF2gQ%*#@Z,Ny!Rg-+XC{Me(o^zO5ebKAH/ ^v\>Y¤|q]478 ubG{  `MZ$~ hytjBgj0FƣJRf1n}5Z: r?Iۃ>m{]o~ܺ,[(j°!#⺯'6 }o?@Rc'z' Ew4fL[ʿr=.juW*Η"P޶[[HSVa|Yuf&{K֬7?H(dq \6R?T{vqh !0Vc #0)_ VXMZCiSLkkHݡ XyY6x aôi)#1.mNNrLԞڜLφ WFS똑JP}?GG.&:Vn?8\xJ`}eٌ`Lup~䮖- KǘeU>|m%` ~z*`7= _=5vDI 362''NS6xҎhT`ca?UʫwgԸ><6)BSWЪuLkw2e7|kU yJ%,- `Cȍtrn hHˏ[(_8LG,K4kg2+EحGL_x; Z((gPT35AtQh`[LcP, Fr jpfVjZ[VԎpʋYxUzo hb r @zPf^6cx\RaP$=Qဒkz|9c9Mv%;XRfC:}7-Q]>ؔ 3 +vC o~\ C+`ɟNwvB5}q.o_<ΪAX҂[x4 ݄sbƺzܘmO*vNszc10ƥs~cvsP0d7!l^qVFaaXhܯQmdU&Yt1 ۴^7ɑӐ4, J_pRE62.xW}G o5 <9ibv~oMm^V|"j8`7  !`6,|,trj N2 EK[4njtZ]KTdCpK愢R&paQ:?^emfBH(g-!>=z>R#^Z{*2:wOڤ ݆Љ#/o R)ELӲ[}\ZBekUQnt;uGm}_qu=fO5@y3P3heɫoxC$mId>Fl3UesJiʬEMQgh&R"0[bE c-ǢvP&S7N$Fc_iЊ)%"u}TЫasLJFYq3fhqiKûx*LȘ]]2] I:"[t:L % ^9G-ξ^,{RøZmy3 t3[ޒۼ յf1)")24xƱlޞA*E)i'NΊ%sB_iҢD! 2.CE9&sӄtK=MbsTxj ؞cUL% sÅ戔 ,J^ԑBJ+3G|TRa'.xۜKoI;_Y\jhtanR6&*"4 nm{lj4nYH_VC\[E;Q( :3FGQ&M1|B5دL6 In) Y`! n'zo4"l'\ȁ &J98-={<eE=Q$z&Ҹ2_)j t&y'dsMm.h[V TdŰJjyƟn-t~(ocBǕ;+C'pPjBDM,I7pCP)!ʤctV3)m7,;BYBB~vShZ/T3cx,CUFf BlX-g.Jat;hUR׆0\HIzNMxϥI>}-(\dBsBJ=aR"B}S̴u_x''ֱeRBYxZ/v k&CVIܔ|T8@0\ }y|§PgPM}GOFYf:֏V;aJa0ݫݯ = &^=Qw }a73fi,-eU"{-S% /q=h~Ȏ/lVvx4If82X?4]yo9@ 2{LW8Tw]ܸjHm5l؈ USRYA 17&JS{,"vĢ(|Vd|zQ!zgLi2A ?> {Z96_Q2Y"f@JT<7"5F'b5^^ZرƌVHYl}<%!zU"%=jUfIug/뇫 bJ>eoj&SIRS,ŇP -iYi.w#uz%Ag&Hsr'yI}bx8 0/B jV+\d-4dtt" :j@ >`Ծs˛EG8t2`Gl =  wpEa@@ͻRZ<FJqX&&sUdY>=wym? 3dEVܮv+ #>ձvqCDIff,K8AuX!5@m*iQc؎V7fB( \"_D;"0!;>-1 ,|ls:6M8MkB#EQa&"UMҧqr5nOgR%mGMuGEJ{ CpU2bOx6mIcq1nuVɥj92WֲY ,d}uUD1Q9)_k_ǜޗ !T3[ L v1 F{WOXTnC4fG(JVf<'Utቱ a^h;F_<sҖ@nq]gMnT5 ux0* ?dr2AOD 1庇Rkt s s*>z/2lQ4ڬ:EaR;}g!;A0fX< pm1ӝ[\>f_%֎N;9S$زm`p,]}Ix8+!: ߯jy26ʑ`/킴l~l٦iDdAcnwFa-b8NcТzJP( d##V3fUex{ ox.Q.b3uGGT4^> 8K󵗨1o(I߈sQfwޜU4&FO| q01$^ E/Y`y*zv)Tbz&K]v퇾&p}&!; w[JTv}9o ]7uK0seZQ1`$UoxZᰅDيa@xe9NMZ/XzUylɨ?)n:NuuͲY7Xܙ$IT@m`?_Kf4(bC՜8β-aRɰDSYvlxҧ`D}UO@z?p~%|i׵V)6hX=P[7 K'QV`^_;'Dx+g#\acl8Z2e%`L~qy Y.R94DĈmXr97n` ^&׫<&|DQbkBJ6S2F@6^ 䌔96N_) ?( NkJFAbvк/ag~7m3y*kZtW;zn]G)v" U񐟺J|i-#1XdHr L@F`OށCH P$y(uۛdHAC wooﵡ6?LlS *I淿w;v|5A?85u *:,58cK39NSȤ$Wsȴ `BQt !rzy[#6j.0lu Ÿځ&n^[QDʘ~CzSt᭫` wb-a1FmNh,~ZR\ T#©SK|$ގ+vs}sU}@تf`2o ?*'#CƱm0bhU7qݡw|x2$vȕgʺyl?b nZ4$8K%]`F?2eUߏT줤sCLV!G| .{tML4_Y#_пsārToW-i2z;*eBkWm8ֲN/>B^]1@O_݃aýȲ-&spk:zBK'5 à 'xبxoBŠ i9)mzsiwCtj#k CsђB/*eC0G\ԥh5+(-A2’aDw^ͦt@XJ!p5&rХ73S{bC `xN kϵWcߌ5cu6 C.gO R .hfJrPTZEQ6EC^ŚkaBG8iabm΍){+N:puf R KVjVl ywOQK5KwU17LMpHI Q6hZy8~`ecUDߒ[Rd2..cvqI œv:.${Y=$w+rB*yF"և޽hBtWeBFwW-NH?qɦ5*moEF4 AmG~Sշ$?daNQ)sn9o>ziZ61e7H3\<5h$||SG=P,\W1=ҹg3_Mw}p]ԗ3['A }_6O@('25 t"<8&b-b]#Raaax&jfTg>3wR \ 8l L.hwg2"PAjJRc/ʾX.yX3]]":2Sr91%j>w TL..r2UNG5 E՜Z6n*;>>"uy2i> CVXj~E/ R%u?M7.|y ;Y6Y΅WDV{%(EB,zPUE;  KH*:n l.oشfDkc GPbX-DA`# Z4DVՇ-],| ==bٕ.r]yKR5w .߳4=k!Ckh9},Ej.$Ac(?r8L"p7m[g+8-t*ч!ό`"晆 4qxڇ)|w+ro]VsWwF3kaW 4.CdA@'U'qҘO~ / -Ό$1O[ T`2 ~tIm U^Cg3\۫M\+ysNYk-09nqc1*?Pl MԧYJ Qp}&0]vo۱)G @7P P~SMXUɫ+HIU#ײ?SN ;xJӪζ2`!dv1^eԍ.u;O w [+zp[{ zD3-"9g=@Rmъ\ޣTomA~t+9 *r6T 6.aJ3ߢcfyUpP&^:TDFooyYBQg ndsFYOqbiQ^/6wX =nO9LpGǔ0DL_n":&.HƢ&EiزۭG+~#&^g>\{I6y 2AM63#@J66Y/#ثA6% Y~a݆50R+Q^T`ڞ I#e` ᢓ>_7+qyԁ&WYϦOVnBeʯ\0P&ބ)`^C|RHjTzz޲fLqjlC_iPj8/ e fK#9+Z'_ߍ 0o8F՟ڔф-^A9r5_ɠ?- LY- eE} c~[KM@pAH5LѮaBL9L,mf1 #U#ͬxR\͠lqͲ\~Zs]o1K >َfxl ,ɜ#2X~IJP#I{H;xh[yeH,zlZr,ܚ[`M{\ A!s^$(۔gcgzhEeT^h I'x[?z,Ld:9hN"] rW&w.cig`H S1(lb+n>R!|Q{J |<\\zt[N5.G7h?ܕċ="/~aSd'{˓! Ԡjn@ni1jKAbҏܖbq#ItD*Uú4pWO^^kr!1!2GlԢ[Got__tSF3~NHxRŻ`NH6H#eŔcS<v%W dR:o%ZPxL`Uv>صr{m/u׭=lf㷕j6Mtj5Lxk6,܊\?)Ф.LɅ7mKo?|gT&] n/cߞYa8$(yʝMpm ‰hZW*BWrڊMShOiA7!K~!N2V1M=Ga%2aI֛~YKMf L4OQ1w uzN.#f?Raklptlm@ᶄSJ_f*Pn8(&yk4&3}!8h3A'n<Gl3Ue5꿸tu_6 y`Qȶ3c=9TA$-N`uOqU.Pq\y4Cb۩Ϛ#Yl p9%})_aD%"4I Iː{`T/ ͩȼrӉ%x 99l=AN2KK3ʧ,Y ΐ2oGV믔ESRnCN@M2Ruuf:J{]-̽fa&4f@wVMU1*X1|/mD?X4AbXz).4~wlSjBˁ1-F 8D#|u-kth?I72; ӳfRQTcmoِ[in9{mf9S"0Xy=ua?e<(NŢgH)hLU40Q2OWe}ޛg,V6= "߯=PdH$H;~`t 'U7dk契X/ľy{X#HXmq{8GHM-t*sψ]07U06Cm^R@^u |x}y VN)(=<[V0:B|WA90?}?3}kuRu$d7#@?$78 ,هDJCKf?t0+@ZgLsd"-0d:kά܄!|RGKl(U=Nom#80R"+%H&Kg"Dw?MN%,1TEn! &.KVSzN*|T_8 X\ݤOlj=7akm,%CQ鑝jnVu`7_CQuR쮍C3>‡bu9,Leppm\Tܿ[Qّ*ëM&p[6Ҋvr-:FsEnu-#d9'"OϹ(EقMl{;#zvp2x{^N?i!I?<7~6!I ȊVt/6X4L3 KOyYt%(tusDŽqjZ}5q N:$mF ;,LN5-L%sǒeCrF"hC<3.cƫ=f3զ_ez=.lI-]O`!,F )AIB4LG\= f(*lj s̺}ROZӟCz/ &kQ?_|yA>ƍ7[q׬,. fe܀_OΑv`1pDvU70C5r{jKHu]׳2\ w kPN+BI&GNk#oU !=@v!msYt 9}ѳhekڋ U(MDLP%#4dֺupHͱKL-5crc3L{oq%faOPîċńh*-Z]7, %l+@wCjC)ܘ.:z_f=ns fU Ur+K}-ΥǙ4 hWx~PmySm50Qlah]Md,s!Ȝ Vpf{Wi*jj[hB~=cx=R$WVT1j{o3uw-XwX&sj=sa:b5i=QH]{m2JƦf~BeG->`#l_ UVr!hSޡF">lhѐ,obIm)"yficQ1"t%'1ֲhs IYQ /d!wjhu1G h"T1* n<-ձ"yC엛oQm!jgZ1Y–$Pq?]nmM|f!i&NE^bPGtAJ<cG,޸`>{ I'?Vu:85IZo;s )ooEUR)<*3wTR]89Z؛LKFxοǗ1Ĝ-H>s!l`@5[52;[J %z3g_tnȏW[Wu+ODZ;,:+ `֚pw9(]_:xΆaTL7%^ɸAb_2"``^Wj|Vj"?≑q\^2.M&C 4?휶V='#]M.:kXƾ Q/3BOSerG)1x |*ű<\"ُRv^/?e@98':Y?1.ϯ< G t/ѤⱯt>4buo^79Þzr&ԑk]kh\&GÄ^j*l^A8-.-1|H`z+[J"RJ(.keI੿j =N,uf3BOXF^^p$@j@\C"n$D$ҳm4c O|@7HFZDwRAr3ȳߺ8i?~$ٺVu'=$ӂޞ[NZ;&4fzr#:BdE򥡫:vvW: {~_߆U_ Soj׭L=yFvR5P_~q4cjeUr Cm, NuzL#&T%tSIotb{( mjs8, 17*c5Fi$ꣲwT=NQgv@V%.m2#gaG/"gb{̪Sp^aӲ7W')Sk\g`zfڍLiN+8z!deZWD55WkttCG({?6$ o]Lf QEXTYleQc ,G98Ņ̃'Ikx5*‰u]_NXits^6b8?Dݡ.mz'd4kn7 oq"겞sƐ"E>{ +DQY!|M "?p_`\׭'g fW/؈wlh2M(-_u_^#D!6"E=V@UIZ\F."k.=H}qjYޮݿ\Q['-󴼏BWyn0YH;n?˕'}nEJJB8bo2WQ>UxvZ߈WOroT_}D<픵Z>z8"QG1?b4<8s`P}Eo `)Dmku[ !_*3%;bՄywBU'W.u%=y*_#d\MNS*Q|[C_A$]F4q$>tNu;T}J$@8E#XNrA}+㑡Sd.F /J~{o15V5NbNpmoɥjlTS֏\-* ܺ˥_/FdO| $'[F.*2"oEW]oeKڻ+q7 H,CyϋU&_;?4~Ǫ ƙ|rHE ٭ܔKvehpKNRsͽTk2- cI*溎#-Ƥo()v,deڥçnYȓ>T<_$f@i L%`Jw 8pC@uEWiO*Z."lE՟1a 'c]s|nGE6FV}yM19]8p<:@gG=R Yr㌵0e yS6 sN{KcV[v'T#_iʊnQxvxl͌8d\23\"]fXyCE 8~ )aDf1.轢z*gNV*3/#|Bt9EVDh"_*㟉u쬉m ;zL<(OJ]CʲJ&nKKwfC1U݂ B_hD]Av|_śGpڇ[lІȨIzeмI-%Qَ #v41'ڦ5 75^-37H]𰔌 4t4ۉ CwI۱u l zx^b-ŊF[Zq.FVf#άY|4 R)8XwG W-@Mc7s(ViP5{8hUkp^޶B0]~:OVNMY3YAMT Ft:Ará|$1 }yn҆^)i).|IukEI)BYnèZ)Ƅ f| Ch gh}-wܜ vEi/`GAմ>_ۖүє;a<:ZHK伞,TZ#]1I%ArU쎌rQG2ctd*Yo,HL[;ڐ=]l7>v)2f}  Uи.OcK rwLj?7> L`EF4}zE}7C?8e~ҩ|6nIv+3pyÎxWbo_m1)#sJߥ+*@ybhcx3}%k)D8DОY: R#2{N+\U®AzkY6X9Ȋ`M4aY[Bɯ^fz?AnIWsd,B5"FK+W9J ] p_C8>J,2@3 lf̫9@j럒9%I`y_|'^N"to0VtSu#= #/V z )*^Y9CnM3G55k9y2D V@_]0ZQp*>%[0}VRzLs{m"*mZvA AFZj%`6zpyKG9}3|X@Nmuܽnb4aը|Vcƍ /t#QK&$Ryti.<,滏Fĸcl-U%㺀VMR[_N&CѶ3ZQ+FV,.1:)s 0lA9:I Kղ=o-lp"X} c d7o=,*Y,BeL((i~H=\N!ʮ'|SbҺi9!IF>qRZfٺ1^9i'75o^[ut53AʅWv6[*r!~%z\idн4FMFL((`:$\D(E*ZyWڹ,`\a?f̑aJ֍X3o CDm=Ҧ  OXo1@}ğ$ٴ|Ֆ$S:J9X0HU# ®KWtT|i[fĩnMTdEZ?y/1ρi# mQ 2Z%Sbi޺*-uQ߇LJ,&i=PR'g:\<-^|}F^q\FmKz#=y?',q"l÷kpzz I!}ȒWkCX ٹ25ǟj\Eu-!_ՙ,,H2oղCA=DSvJC&ؘ f ;8'^Z+jo}T+n Lʠ}1Y|իN0!cL*ڰq7PT`8 beqGO`~5& =f@l9 yU5] `J ]M9[j<+ALH58=̖IOm*Ā{ƌ&Zd&ru8D';%ms$dM}p&{LVI!oRm?CZc=Ax#o q$5hi;zkQcwe 'fBck&D܇wDgb̘k"u@E`sA 8{a{sp zi|d7 Ls#C8SС1P)M*NWFo\2Rp7^;ز>z:c_:a s=Qyp/Bki#n%aD* W|'džPy*iNQuaR#J㊎gvah}e#c2lz1Tpq̼|5TFr7T\oʖmh%K lwfFʼn ~mQT3eJrDN8ɧܦG3z?!yV0,_ b@n&B|fhZ]lQ#q^diXc^ Qd\͇z*ǭ6+=[lℍH9W٧vD a=U=-VdN`Y>k)uLm’E~,Ö6νxoiH4q^R(WqE[gƣ!\?lbϔ[!@Sia4`|wc`$' M;aE%)YS"t_B( Dz tH?k-6;_vbk&Q:7zţnm3qK lfo5@xHOWUy߈2 UlRNȩ;/˹3YEr?w ٕOT7e (%ig35 <ˡIp- Xjl;ci3i2xK ?ܜ2ʆ&B q]|L武"*0?l c#GQ0ovNܡk~lwZd'[/ÌXl3S`(nWvsalSe% }Ky᪸Iފ\|Yvzfa= k1հ !ջh*2WF+M_流@~{CC~1WPGoYG<+ȲACPzXݫ8=tzމ-"J@<%AKҭ0R^B;kI/kZ.`'qJpDN|=rw9w$QM9>JOW?p{Qh,Hz,baT-+Lȉ@ އ 7b'#xxٲ/MK"[Ү]iGף[or6D'"C!`L7竮5WJá) C/ rlGe6v&J̏xr鶴Ҕ<0Pkbw&zN|3<7pK)K!;)^ېgxbⷣd"St9(.qvtMrݰŶpZOIB!TGa˸ni 8WPd9,1&ɸy`g&F9LuAe^ üL GJvĖ 3ҖS$4.hɹW{IZ*hQBxejE3xH`_Yp&XF}""5Y DqjBgpc,Dt>/gW{v`Yhg4z`|w QWߤ)`u^i&0IJeVAZDc,b-Cn}l*)N+WHh*1+Gvl,;@(H[˥xH(J l~>BֆӶ_1ֱRg6>o#l%Q G$Ew񝗇-pHfJOs{JpϸRB|ly CqH9"@aR5OK5u0+0T^!Yu蹲o{N|շ%pF^I0J/ODt\4bYRoS*lqY0oٿ|:KvUcޮGfOm9$R`-VXֵ  8ĭ,$esP8}-ymVj/6(&:<q@^ 4jgb Uq Gya.l !`IٳL_ %i^xYo% 6d>*U.oupc[j7<*ZUU^J }i_TeuPyu[D8d% W1!a{YǏB-Th^dBT{iUwQ/E)HHQWn g41.T$'pQtSH߼Q5fpvzO*Y'͊܏' uoBE5o7?b 09.4?3&hC$p&3)gU'~c<J aH(򤵶 GF8Rc=CwQd-gבw)zvCwg Z̘Ʊے(IPUg)@i[X#$>QR7%l&P$ҵyг=F"ӐD]&J4 4@8yC[${PGD)Ň82@y7ay3i.ia {*&x`df+u$^ :PDx]ס{_Aw<>Ol k5(DcPJasXN =FeოxqLWG~sJ5yNQ=9u߄,D֏sUUl`s6I:}? a:+.R =ISa0JO}#dё](H]KQe4*Dp|77^)&:m?ƕaۍO"aUB^H'W}M/W+A୘[PqGUW[.Fv'00]oW8УEF`&$Iޫ䡱U_B^9Ty3Q5fUL)`E u2:ǸZZ^ :6 S-y&}>m:H` }9Z`:ﲺ,Lgr"DmC!(;Aj_TY_H_Z-էKZ+?%4ز7e sV zhz?E5dFuO^^oNۯpbbTގHϹ TlqЯJ^E:, f9ݰM*; tqS@KqS͙RT+s*)x>h5 $d|b)[,JRy"gKl?pGRrrO<FA2}L/"R/%'Vޑ0~ e+ӳkSۜdjКo&Wu録e!큢Yeqy JOw6rM@IL̦\AYXffwPpY{BB"<܃)|Y Ѳ2,v'3*[k4Ne U^z#~f6q:\RAtH{U8r’ș;vUS]Uh?&9zN-Xcl0% 6"&:iZ+Bٲyz|Π|/.U|yvYCvz׭noM,!4LNΪ$ଘ}TwH ;#d Feh]pH%ɺJrި <%Gls˥F|":6%/ Ce8ҡ.6؞hJaSPpD)R/s~^Ϣ?]CF: `~`tcKY<;>n.#U ]T0}Hn,-&dlwj4_u$cڂls }xIZ7D}@]>F z&?7zrp7*% .H}FӴ0A00gI0R*s-?z{*QV§4v˳KRjE 0:ݢk50NRԽE4O.]\`+~c 1C';i3$Gu%B'89A/n=/lHڒ"u:R9<$+ ٮ.c[P*de(w`Α aCeh 4"92o o P@Ҁ/adTÊ nY[ 8#ZzY7?F⾞{h<#@^Ta*+ (!G6g6}mQZL vYUm>N<w&%[Ѻh6d2qrqno\*9J'TA#!")ɏ4ؠ(czpQQ>&%1eP1=2IUBY*Kg˳IG.jyU֘?v웡taq%B>7EI\aao*׽"WW.жY/ӫ$2$^5Vqܘɱ[knxA X :ȺC^f\!Ґk+ZZi|W3m:wEVy0, obPCzhW} F'FjƈcQB݌v'rEQqMUũNnr1e{+"lVrX ћt8l},Mzt4'ҁqv\j ƚRJNm&ۗ*'?؂tX+d ‘T3q 7VyrooGC,ksz>$TNdJq+m7^2 :)-g#a}@0Ug89֖lt20v<)ȎE 2ҷڵ"(3h @k-Я&~[Tݼѫ_Տypcv* B ƄN~s{6ѨEQO9{ueݱ:m%g=i-"qs܅3xI-ntm CA<4R &-T?4/} T{S`dVN_bƿHS*zUWQ@QIɃmf8VdEh`I3KT$ 8aXטpGn*Bm]x "a$^bx-t8~HHLMzڔ\mA}LHL%_RGqDO[SȄ2$4Cv/pG{7W8*r~g_8mŁqk i7@*'uWn ,zQ`խ瀙N"oC2.שMpdϣǶ~+@W!!y͏/>Zi'`?{R EnXbf+ֵL8@?$iؠwX.Tȝzz#lI]Xfo5'12~FSK9{?YhTZ)B>|20s2%aBރРELCS*Րf B1+ swHLG$3!.}eZ$[-cNOw4o ň,4^0{Q0@d ]T91"s^%)>>}D^K bc b Ippq)K.@b7hK- ~R/m@'ڏXp,}% BjjwI~SL-qWKp]aΞx1 sq ꦝ=~ui(h1htXQR߹AP=gi_*c .TרX^ߡkV[m Gx˽u1jC}\SF3*`Ԋݸ=gьwXrIa_@p3Nn7B(u?"7M=2aR5e! rA=ߔ =5¡ǵ/ʺkGLL[Jgck|Έ7oN]kjgX>Cz:-U_q *RufXf.lZ447vtW?[T_8\̈́:T>nlC^Z K7E6:P?l%xڞD$;eokZ Oh>S\:ƍH IP?}uJr)p(]="(ݩ)=[|J:,G^o(H( ٘x%0yGj)CRA\ꔃc)3zݻUqOŖ0BuHב2[,wkhS^X7:q;(ltmH@T Jd$&?[e =; /7zU;& pcy7T܌ϵ/v)Xt|Ey{4,EiHæԮ5sVs+o-<+- XkO@:5~ܜ#j/GSl|K(y."H@d_1f{u߆ j^Mp:l$^T`*=J R1 b?짊lŞ.ǡE J1h2Q9>3Ǿ2\EhDF 4\km I߳H!2mPEW0~- Adw( %pz7Y:8iP'_ ytN3ҷ#Tfhx6'h0& ~N#FiXT_;J%C+@$ 2@rg5`=z!vdFdƩQ8ٲ*a;X7ihՐ2L"ߕ7`B ِ^vJ8\Ƌ%<-Qs ^}p+Ɯ}D/ lE1tͪܡx~wBÇT}0=^2SK7.d:'a߼Z[o +zf<EO38QcS__Ϗt ~dnyԪƃ3/OLC=pWK&b)D`˗eZnPHLz`n(09s,j[,%SquVJ&m(rΘA" ֞+!> ?SexfS﨤b k*/ΊϷ> >xxO5U z}D0X̙|ޤ}XӀgzq#Gr)u:BBQ*n2~?d~LIuL "* u1۬ H䏡!zBUo0HÑ]`IUE%D  *q?iGsţV[ ݅ю.B6iXVPE,*5@!g CQ_gu=l?+cE'7`ep/>xȃkuمg NzXS={fǖgIvooNiCom6/1^zMy +UKf M>o_B> Jz8jٚX{>u#p1AnDEI%YDĺKN\aO*^r8O@R6 i%XDl7 [*{]RNݽ‘ 9d&pY2{N# [Iy9k:3@JA8IIu;(˪0bhgG"7XOâڵ%8  5կ]KupU{`u/@8"HI|ft^[Zk=Øޜ@=~?z7B{=I.7њ}t _g"-6ZKuZekaǣe .@ry":vʛZ8N/$Tۖn`Iq`WQӯ[B\b CKR7㓇FE_,-dkmٷn";^S=@bP?*9H KE}l QITѷɠ2>h/K1؄ȖEՉ^H*D;`4FZot6˗bQz_0UT{ã7l5U8%<خ6a^1K@]sXe9<&|`': ER_7ocȩt;,yMԪ~l/f|dYf0FoosYHt/AOHBzr`u7bkW;&g<-kZ}Z}r揔/t9oAؐmMGSU]޶Ca?x8!D _/BOS[-*gJpX0KAr׳' Bd {Sή=%r̊hզa`tLkƐ{wݨ)꿛M.[MlD9E Ťt x/b=lS?zlh%/G$e.%srO#yJdOb*ـm{1ݒ,:Tq5iю,0< |w@2G7QaS:Ep66nr›D6cGIVLܿ\_҄Vn׫6Mz q[>lyç.k`e>V</~?ܯã1o?i̠pH>gFr܅]ٶ%^HA|fDWO{[]>÷Wpr,Hg%\|Z!B+R% pc[ v{jtAs()`MIT}2 =U0][o]QÝkɠuB+7um$E8Ǚ )˙2;x>C0$jQ.r'fݷ o2ֺ,@vlCZ7(*J!ka`)KJbu@t,9;C@@ٖ%TŊ,Nvnm"`K,ql!c|Ct5Adc6&Wa g#T.ϊ9zĆ 8ㄇN}#:!ϻk$r)8k}(`)dc'kp@oJ˓ 5guǣ d$n*a͑xOL&F3A$̹~.t: tkX|xLT-\'o7ƋJD;}]9< PxoLUlU/29NTDұ ϲK&3N &ONVVcT9e찧Ը)8&OxWIS6ؑ/e :70W$ᰌ tOշbHE 1 ybX,P5Dgۗbvy /ADB4JIZ(s&, :u |?ҿГնg =.saP_BƬ>ts6QVѪc~ 3y0`s#tXAO.Fu'O"31 _hR4h A;lh־Hp?pt3SE=E*6yZU NHrQNd۟JM>9E@$YCQ jYU.c 2+KSJR>4=E_b=$Ψ *[O^Ѫ 3NS9梼+%.0!_ fJWuKudh_Q;BmVvDyzп R#ws ׆*Adr+k=Ɍi)VaDl֨^v(zd"m6ߩBďQ w/(;Ʊu;:*Wk/4 H>'j'o!<Ɗ}M(&Ui1tw$x.z$A;f&Y7҉)9'pĵ0G4SA+_9JH7Oxl~ Tb,WJuf zEƗ%9Hˉ$wWGdNgG'@w'<ԂTHfB-k׳8Tޖ=QDϻ]yWۤh1gs|ڞ`H4}=d*4N?`{ɴ2h{0gl闠肁jPC8%\SmS~ [hS@e.\oT^IrƭP!#ˀE0[mTd WxN>$-?N<ы8=x"Zx7@`_}zd&Gc}+ݻ"/I.om ID:I⃶nN %hI^B^Evb i%0Ue1Mݕ_劣=d$Nys28TA5) }cTnkrT(:F2ټ(X]gJs hogQo-?Rh#bϴ\̶p3`:Q&8h%s]d\q TD1l^KHo/M(WxE3X1@`ap3CeV2=D|F"&x—ڷց,LTrYuQY*z7hȌx, z_8^8J]˪KPT~?8m5jSpyoG3 ɤ~Za[J y0s>3ژsakKu1>Oz:B*eN% Q;Vm;'_ἐr~4e j8iSYdqwVX-ava{$_`ײ\*00 Ѵ#yv*?1_ⵠ=dHdjޓpw.)}4p)aeN;K:7"5jJެkww!CdjX֡!`ٵ!;)hL?s6 h%XϽ'6? Ne%s|4\%-m!ݚoA2W3Qk=ܧPx|r&6ԐBo;[5u"h^goۣhc+NRw r)_MGCMQcv*oCB )6=dk@ؙ`aWϔj}#^RAnpe/MI~` ijlF6MZ!Gxp?oW&`uaJFD_fAPl)nԗt0IbECoyYj2$RЮ3ks OT[> !>@kOD&i m]TlGbF׋\IЂșϒŭ6.Źč<./P7IQ?p3[ʤG{ӻ=Y!.ID,pJ{6 O筃55bOC<֩\ޱ\-4j+.1ʷv]fZ%IiK?eL>d%gRG `W$AM2L˜,Aa#t Psk`'::yLh_u+Cj74܇RAi 짥>,xh \ߐK(`~0-? 'm;XxuaǩB!EY J8|I$>Rj8\,s&mk?8rA=QP°A6\"Q^GLS?MT0L(.k )s.Qϋ1_9i]5v=W'NK9Q_2J04G '41 .Igp?0߾s6;ys9Cud(uMN8!8T,D0$QJsC cm߁t@΀6/iOlOȣ&֦ȚcKIԃsãZw!1)_rj|H22f5[S^5^i<7;;OE cw={$QPjD&~KJV깾/,P8>ryP^p8(Qa8%z%Ozϒk*FsƇù:1v@XzW71(uiZ^tAe_RVd7 ZDAA zIr[k8g#8 LU 0JtMօKA'Օ wS}1v ^DO1Zf?NQawV=90E`QZ14Ԇ;N!\ ؎N.+|;#(Q >ɢ٨g;^B] E; +7Jr^E9b fdh|$?~8ezW8~佡Iv=5Z#Ǵ; D Ɋwk+0%:pN-~]uA5نdh=Ca{&OI]D](kDUc=i/ӸPTN 6m:TxHDk}썙la?ΣH)Tzq-r +N:\|4zO/Ey\Y Toql)N|஽?sNQ9k,v2p(A5ؠhP)Vb4D܅qkA jRLb*zoE} ,>=.3tb/O!S< upVI8CʞX,KX٥靖4143n7tdž{0Nx?AB,# ܵ'tJ 9}xpoYZcyǂJ̣ȽY=Ej?*YLS6?B)i:u:&` wᚕn5j<8X0yCN!2\R4sYӈw)B?axg>4 V S5ԋStfȼpی2/$]jR"dR]Q]aP޶di{IQ % Z>L(-:gpl|IgLc\ɩŌ)( oG_ e:\TX ][1ykgX2 ",c+uZJ?v<= M Tq/b9r ǐt WHr ~6Y W4Hn42D6xئ1-w>ءsݢݷ˲Avw=\21`+0B8Qằұҭ\Rz#=+.V={+ Z->n9W^!eT#?ZJ/b|_?bv =V1jg_V[֋|AY4Rg\xƫpo5Dpp3jt*8uͫ[`+W1Qz<7 s:O9L䳍}S:9HMIuݚlAs;+ 0Hw7oԀ?tdXg'BS&W+̒fC'bGhPODy?UgnZFh*L}~v.{%d۞}F]IR E!ve lɣ і`e_i O/ŐYه:1(Cf8?}U̽ex0#y>F-Ppd;~a=lضR0fμ&mjG'y;&nHlz9dίzcu*y+}U 'JaI)>'B]TK2M\} .;W 6V^2J,Hu WU(wgL2y\ߨj69N)ܧ3|3N1>'a`{BmΥP:2NMAY]ԓն.\*t4L7v Jq3GPK P./Z'Y}?}QU31\N-l e INJqu܇( PS+ΫT`yuuWL0GeAz R,S]]I%]*/m1r0SnŭcڱWҒ`}ZҠ&)/YBℲ+Kd"4Eݚ|>*Xù @Pyy C፭xEҥP%OkS?+'rU;%6u16ۃU@3 lFMCj?(v&3a TDkDJ+;V־'B0 W0*#JT*i7.8yCrWx"_b]Dus&ȿW#m׊qgdwb:EV%DsiBdDx_|"]9M+T",Xt&)2@lV@Ѳh-)OGi{+y3bJhI] ߨ$)72+)48Yٳ9\NBF*9[`pڭ)ߤdh ,h]'(S]$cF: YT6POϔa7%LZuZ&GV"҄sdNV=u𣧩'Ez'wm/_m*YGmdpʊiʙ$_Zf9Y<3 I8fn`C%^_:?эRQ~{8M&/ @AA~[BN~n`^: A*!uWcѹSXT y ([i;5,ƒSn\gkMGɨwt /Tlr'Ns)[8UoBCރQjԟ)M!0A/.GŨC8ϻʩB=^-Σ8..o*N%Lfe\_jġ5%+R *P}<ܭíU K(#RJTƝ'JS|]CEK1+$Nz"ݢੜJi26h}x==f${E(Od|}-go=*őkpށ3#6q J䆖,R\QDi<w2'OCQ;ƿl:!D,&/wplx>BavDu!< hGkIaw\_p#r >}ZE0b_\JHQ̴G0^æ~X8о l'#j&oB#6j5Fof OA &ky/ 揰,e 4Sk;<臐Gx^!g NX6 %&BQ M{J}i0tZ/v/O?J}?lR Joz#!&Va|fgܦmR2>x |4. _iqJwDn1!qSwQc^j %3,.@TsM3VoU1c| I"uM5'Y1[I]]sûk2܉]-TvIR)f<ַs/UQ2 ym2+Ő-[ 0}kG}^ Eɑ}@K7\?-j^9av 8>;6+^Ԕ﫲b,%Xå͖V~b6ﹷ,_bv٬l|O6Gݛ;jZf KNmovzOAҳ^?sD\eD07 Om$@$y`^<.6iF'*eQn*:0[ʭN8`~kUvK5qaviu涁@bkEgRJ 3Oy3f< QӐ. }^7-a`l[PLߥkaW;r-䪴 !s#ZjE_ܻ5:5jY3rD-  Z%P\zѿ Vva}3i׬YӮF]N9NNzzWIםH ; /M,J4.]1y<X SokYsr8@+Zg5cԞaex %uV 3pNȸR*[P=$>P06gt+kihg^@]'?y~tY '?+k<'a~Z\@ CPT  ']0i]i \3+d 8_IA1&˹f(g%F{\&i%H^jUڒGXU͆?|:>%z9Dܲ!!̗猹 $ `nbT;Kv@-G6p;OB+M9FxQ⒳MX*O(웋f/fuCkuwD~c3/-t3៰6.c :ìJLx*:LS+*Kok7V,R'$axz{)&tݬu<7!~>Ye$`Xb頉 CX 7߹! |'iɨ习<*l kƷ ]p W3haQi:d$_*5JS (MlLm6C;]UZYn $㣘w\t2xtLuZeF*a5N{=J1(,:dw~rZ#X^ejmECQ() ,ܻ͡{!h0O^u_"#b3_sC;ȹ~Y }`A+ *@" dUV4 bd%}bs{Dtu?{ZwN]" Ji ΐ)V"tX.,Lzn|47wC/{ U4N@E:5=GzSm7ԊNZ w$^ԛD\y?M&#!<'[ 8v0lȜߤR7ynN[.Vy!ZiqEkom #*jϯqVЊ2$b{́p} U+CG=ҿVViP&1 4oo~RY k2+5M'IVʽցm>U4o|Y  w`P{^Y*k0{~(-IqrM6ü.^;s'D= !zω-e֏U(K|gPJzi(hoza?=d] @ΛޣVj/ںw I.̮CS菮*{\m$nn,z0H/ Sprw콺D53S@YRٕۗ6K/k_ v+o9`c.ΐTu9ݶE+Jڔ"}c#n4f$70] \M5|R"{е`s/{t ^š;WQ:_9EMc͞oB4?G}4N!G/4O)4peEKfh]AW^{Agt{\}"l?b?¾3 ٯh~߄T&:H.ɭrvaS-F[0G5`yR2,ק[w,W$ڗ_;&E@Dq⧅IG)_G_8}DhZ-wPeRvٙ jH=M(zhCpai ]ȧR18,oxud(8֠8\8Ἄaƪi{'kT9_#C} ZTKtx<:i8tt0Bq-'lA9CgT%)U$ EC x^Bp-іW+K [Eg0XC!| ">v}wiN Ge:z>#6|S~3Ic2*#%BDuk=bݺ ;ATRd]O ?L !C.q^a/4Bg,1o WZL$;aԿ~+"Sń ƴ9G iU3Sxٟ)+xm1jb}lEx ܤq|Tұfd`ٮaL&` h2Tmr|9u}~U4>f""bGuI4!/f)l8[ pPteqVq7]ĀzΨj~xF ]NVWq[c%? `X 龖@1DzPxp^fw1<n'\(+mHڕeUii3p/vZ h_o߹{e#VGc}*ܢ|_z6s:.:ºly:"`>h|!TE>*l\$܂v 8+60tf[%M"ݕuѲuu%<'j!E툭W\-LAɼ)aOB`fI-􊨨F`W֫fwkL=!,mg+\9i[ i oqd.düPRʥ@MIDtzӭъfBv)Rr.qem o[&F(M_MZ0r u%.dy\&e dW!CR nXh|yl1_+օr򏏀n O c(:O|ݦĴ&Drd* Ct'ۃm?t a LXsTJ@I V9dY m|/2HW8soԨxk/o-ңd,zk^"սfƭ>lw5HL\pP H*Tg9yvJn]$ M6r}JP`iiـ{a,tzF9`au([$5(VZ{u`6sO(BpC󻿬xl v|ngϥ0F"Do)4ji۹|N\ڭC!&lmX1 Ͳy0239I$J?kxZd'TB?]L*{zH0/'Q`)R`.h +޹v1` YZ