libbotan-2-10-2.10.0-lp152.3.3.1<>,h`e븋/=„'z0#qnL>M?hȟ{ٹsy W* 5֛F#|R81ỷy=,>CNط&]Pq4 l$Pڥ %RXI n Z"}vl-rgA cu)3Ă߆T>FTKGn{W :[I)EXv9gv?űe LAW BZhrIOO+iZi =~~ZS~ZrjNRԅf5\p>@?d # 848DH[dq      8@JTx55J5(89 : >@-F<GTH\IdXhYt\]^bcd"e'f*l,u<vDwxy0zClibbotan-2-102.10.0lp152.3.3.1A C++ Crypto LibraryBotan is a C++ library that provides support for many common cryptographic operations, including encryption, authentication, and X.509v3 certificates and CRLs. A wide variety of algorithms is supported, including RSA, DSA, DES, AES, MD5, and SHA-1.`eold-cirrus2VWopenSUSE Leap 15.2openSUSEBSD-2-Clausehttp://bugs.opensuse.orgSystem/Librarieshttps://botan.randombit.netlinuxi586VW`e`e35c35285a11e914e2448c566944275d85f382dc5450b2d2623dadddd36d9be10libbotan-2.so.10.10.0rootrootrootrootBotan-2.10.0-lp152.3.3.1.src.rpmlibbotan-2-10libbotan-2-10(x86-32)libbotan-2.so.10@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux.so.2ld-linux.so.2(GLIBC_2.3)libbz2.so.1libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.16)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcrypto.so.1.1libcrypto.so.1.1(OPENSSL_1_1_0)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libgcc_s.so.1libgcc_s.so.1(GCC_3.0)libgcc_s.so.1(GLIBC_2.0)libm.so.6libm.so.6(GLIBC_2.0)libm.so.6(GLIBC_2.1)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)librt.so.1librt.so.1(GLIBC_2.2)libstdc++.so.6libstdc++.so.6(CXXABI_1.3)libstdc++.so.6(CXXABI_1.3.11)libstdc++.so.6(CXXABI_1.3.2)libstdc++.so.6(CXXABI_1.3.3)libstdc++.so.6(CXXABI_1.3.5)libstdc++.so.6(GLIBCXX_3.4)libstdc++.so.6(GLIBCXX_3.4.11)libstdc++.so.6(GLIBCXX_3.4.14)libstdc++.so.6(GLIBCXX_3.4.15)libstdc++.so.6(GLIBCXX_3.4.17)libstdc++.so.6(GLIBCXX_3.4.18)libstdc++.so.6(GLIBCXX_3.4.19)libstdc++.so.6(GLIBCXX_3.4.20)libstdc++.so.6(GLIBCXX_3.4.21)libstdc++.so.6(GLIBCXX_3.4.22)libstdc++.so.6(GLIBCXX_3.4.9)libz.so.1libz.so.1(ZLIB_1.2.2)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`y|@\N\73[`O@[DZJ@Z̧@ZlZZ$ZZZ0@Z|;ZWQZS]@Y@Y@YA@YéXX@Xc@X(UW5VV{@U@UUFerdinand Thiessen Daniel Molkentin Daniel Molkentin daniel.molkentin@suse.comdaniel.molkentin@suse.comkasimir_@outlook.dedaniel.molkentin@suse.comdaniel.molkentin@suse.comsleep_walker@opensuse.orgsleep_walker@opensuse.orgadam.majer@suse.deadam.majer@suse.desleep_walker@opensuse.orgsleep_walker@opensuse.orgi@marguerite.sui@marguerite.sumimi.vx@gmail.comdaniel.molkentin@suse.comdaniel.molkentin@suse.comvcizek@suse.comdaniel.molkentin@suse.comdaniel.molkentin@suse.compth@suse.denetsroth@opensuse.orgfaure@kde.orgmichael@stroeder.commpluskal@suse.commvyskocil@opensuse.orgnetsroth@opensuse.orgliujianfeng1994@gmail.com- Added CVE-2021-24115.patch to fix CVE-2021-24115 ( boo#1182670 ) * Backport 4db001ca2 to 2.10 * In Botan before 2.17.3, or this backport, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex) - Dropped unneeded build requirement gmp, GNU MP was removed in 1.11.10 - Enabled tests to verify integrity after patching- Update to Botan 2.10 * Bump SONAME * Warning: XMSS currently implements draft-06 which is not compatible with the final RFC 8391 specification. A PR is open to fix this, however it will break all current uses of XMSS. If you are currently using XMSS please comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR will be merged and support for draft-06 will be removed starting in 2.11. * Added a new certificate store implementation that can access the MacOS keychain certificate store. (GH #1830) * Redesigned Memory_Pool class, which services allocations out of a set of pages locked into memory (using mlock/VirtualLock). It is now faster and with improved exploit mitigations. (GH #1800) * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by 25-35% on common CPUs. (GH #1815) * Unroll SHA-3 computation improving performance by 10-12% (GH #1838) * Add a Thread_Pool class. It is now possible to run the tests in multiple threads with --test-threads=N flag to select the number of threads to use. Use --test-threads=0 to run with as many CPU cores as are available on the current system. The default remains single threaded. (GH #1819) * XMSS signatures now uses a global thread pool instead of spawning new threads for each usage. This improves signature generation performance by between 10% and 60% depending on architecture and core count. (GH #1864) * Some functions related to encoding and decoding BigInts have been deprecated. (GH #1817) * Binary encoding and decoding of BigInts has been optimized by performing word-size operations when possible. (GH #1817) * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to make its meaning and usage more clear. The old name remains as a typedef. (GH #1816) * Support for using Boost filesystem and MSVC’s std::filesystem have been removed, since already POSIX and Win32 versions had to be maintained for portability. (GH #1814) * Newly generated McEliece and XMSS keys now default to being encrypted using SIV mode, support for which was added in 2.8.0. Previously GCM was used by default for these algorithms. * Use arc4random on Android systems (GH #1851) * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854) * Add a facility for sandboxing the command line util. Currently FreeBSD (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808) * Use if constexpr when available. * Disable building shared libs on iOS as it was broken and it is not clear shared libraries are ever useful on iOS (GH #1865) * Renamed the darwin build target to macos. This should not cause any user-visible change. (GH #1866) * Add support for using sccache to cache the Windows CI build (GH #1807) * Add --extra-cxxflags option which allows adding compilation flags without overriding the default set. (GH #1826) * Add --format= option to the hash cli which allows formatting the output as base64 or base58, default output remains hex. * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848) * Enable getentropy by default on macOS (GH #1862) * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is already the default with recent versions of GCC. * Fix XLC sanitizer flags. * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat. * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would lead to a crash. (GH #1850) * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832) * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes, instead of only multiples of 8 bytes. * Minor HMAC optimizations. * Build fixes for GNU/Hurd. * Fix a bug that prevented generating or verifying Ed25519 signatures in the CLI (GH #1828 #1829) * Fix a compilation error when building the amalgamation outside of the original source directory when AVX2 was enabled. (GH #1812) * Fix a crash when creating the amalgamation if a header file was edited on Windows but then the amalgamation was built on Linux (GH #1763)- Update to Botan 2.9 * Bump SONAME * CVE-2018-20187 Address a side channel during ECC key generation, which used an unblinded Montgomery ladder. As a result, a timing attack can reveal information about the high bits of the secret key. * Fix bugs in TLS which caused negotiation failures when the client used an unknown signature algorithm or version (GH #1711 #1709 #1708) * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data was set after starting a message, the new AD was not reflected in the produced tag. Now with these modes setting an AD after beginning a message throws an exception. * Use a smaller sieve which improves performance of prime generation. * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256 GB. (GH #1728) * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729) * Optimize AVX2 ChaCha (GH #1730) * Many more operations in BigInt, ECC and RSA code paths are either fully const time or avoid problematic branches that could potentially be exploited in a side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765 [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797) * Several optimizations for BigInt and ECC, improving ECDSA performance by as much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788) * Support recovering an ECDSA public key from a message/signature pair (GH #664 [#1784]) * Add base58 encoding/decoding functions (GH #1783) * In the command line interface, add support for reading passphrases from the terminal with echo disabled (GH #1756) * Add CT::Mask type to simplify const-time programming (GH #1751) * Add new configure options --disable-bmi2, --disable-rdrand, and - -disable-rdseed to prevent use of those instruction sets. * Add error_type and error_code functions to Exception type (GH #1744) * Now on POSIX systems posix_memalign is used instead of mmap for allocating the page-locked memory pool. This avoids issues with fork. (GH #602 #1798) * When available, use RDRAND to generate the additional data in Stateful_RNG::randomize_with_ts_input * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties. * Support for Visual C++ 2013 has been removed (GH #1557 #1697) * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL before 1.1.0 (GH #1698) * Resolve a memory leak using ECDH via OpenSSL (GH #1767) * Fix an error in XTS which prohibited encrypting values which were exactly the same length as the underlying block size. Messages of this size are allowed by the standard and other XTS implementations. (GH #1706) * Resolve a bug in TSS which resulted in it using an incorrect length field in the shares. Now the correct length is encoded, but either correct or buggy lengths are accepted when decoding. (GH #1722) * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH [#1755]) * Add CLI utils for threshold secret splitting. (GH #1722) * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single amalgamation file with AVX2 enabled. (GH #1700) * Add an explicit OS target for Emscripten and improve support for it. (GH #1702) * Fix small issues when building for QNX * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767) * Add options to configure.py to disable generation of pkg-config file, and (for systems where pkg-config support defaults to off, like Windows), to enable generating it. (GH #1268) * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705) - Update to Botan 2.8 * Add support for using Apple CommonCrypto library for hashing (GH #1667), cipher modes (GH #1674) and block ciphers (GH #1673). * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default TLS policy. In addition, support for negotiating TLS ciphersuites using CBC or CCM mode is disabled by default. Applications which need to interop with old peers must enable these in their TLS policy object. (GH #1651) * During primality testing, use a Lucas test in addition to Miller-Rabin. It is possible to construct a composite integer which passes n Miller-Rabin tests with probability (1/4)^n. So for a incautious verifier using a small number of tests (under 16 or so) it is possible if unlikely they would accept such a composite as prime. Adding a Lucas test precludes such an attack. (GH #1636) * Add XChaCha and XChaCha20Poly1305 (GH #1640) * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660) * Add a new password hashing interface in pwdhash.h (GH #1670) * C binding improvements. Added functions to get name and supported keylengths of cipher, hash and MAC objects, support for FE1 format preserving encryption (GH #1625 #1646), functions to load and save RSA keys in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate verification (GH #1647), functions to get the output length of public key operations (GH #1642), and functions for loading and serializing X25519 keys (GH #1681) * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed. * Previously SM2 had two distinct key types, one for signatures and another for encryption. They have now been merged into a single key type since in practice it seems the same key is at times used for both operations. (GH [#1637]) * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639) * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622) * The entropy source using SecRandomCopyBytes has been removed as it was redundant with other entropy sources (GH #1668) * The Python module has much better error checking and reporting, and offers new functionality such as scrypt, MPI and FPE. (GH #1643 #1646) * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632) * The default bcrypt work factor has been increased from 10 to 12. * The default algorithm used in passhash9 has changed from SHA-256 to SHA-512, and the default work factor increased from 10 to 15. * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635) * Add support for using Linux getrandom syscall to access the system PRNG. This is disabled by default, use --with-os-feature=getrandom to enable. * It is now possible to encrypt private keys using SIV mode. * The FFI function botan_privkey_load now ignores its rng argument. * Resolve a problem when building under Visual C++ 15.8 (GH #1624) * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called twice without calling set_key, the resulting encryption was incorrect. (GH [#1640]) * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL on non x86-64 platforms (GH #1627 #1628) * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the first byte in the event the padding took up the entire block. (GH #1690) * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they were used in an unkeyed state. (GH #1639) * Optimizations for SM4 and Poly1305 * Avoid a cache side channel in the AES key schedule * Add pk_encrypt and pk_decrypt CLI operations * Now asn1print CLI defaults to printing context-specific fields. * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597) * The cast module has been split up into cast128 and cast256 (GH #1685) * When building under Visual C++ 2013, the user must acknowledge the upcoming removal of support using the configure.py flag --ack-vc2013-deprecated (GH [#1557])- Fix version in baselibs.conf- Update to Botan 2.7 * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH [#1604]) * Avoid a side channel in RSA key generation due to use of a non-constant time gcd algorithm. (GH #1542 #1556) * Optimize prime generation, especially improving RSA key generation. (GH [#1542]) * Make Karatsuba multiplication, Montgomery field operations, Barrett reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609 [#1610]) * Optimizations for elliptic curve operations especially improving reductions and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550) * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by ~25%. (GH #1564) * Unroll Montgomery reduction for specific sizes (GH #1603) * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and GOST by 10-15%. * XMSS optimizations (GH #1583 #1585) * Fix an error that meant XMSS would only sign half as many signatures as is allowed (GH #1582) * Add support for base32 encoding/decoding (GH #1541) * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584) * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was limited to 2100. (GH #1536) * Add support for Scrypt password hashing (GH #1570) * Add support for using Scrypt for private key encryption (GH #1574) * Optimizations for DES/3DES, approx 50% faster when used in certain modes such as CBC decrypt or CTR. * XMSS signature verification did not check that the signature was of the expected length which could lead to a crash. (GH #1537) * The bcrypt variants 2b and 2y are now supported. * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit Suite B is since 2015 not allowed anymore. * Previously botan allowed GCM to be used with an empty nonce, which is not allowed by the specification. Now such nonces are rejected. * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616) * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any valid BER encoding. Now only the single valid DER encoding is accepted. * Correct an error that could in rare cases cause an internal error exception when doing computations with the P-224 curve. * Optimizations to reduce allocations/copies during DER encoding and BER decoding (GH #1571 #1572 #1600) * Botan generates X.509 subject key IDs by hashing the public key with whatever hash function is being used to sign the certificate. However especially for SHA-512 this caused SKIDs that were far longer than necessary. Now all SKIDs are truncated to 192 bits. * In the test suite use mkstemp to create temporary files instead of creating them in the current working directory. (GH #1533 #1530) * It is now possible to safely override CXX when invoking make in addition to when configure.py is run. (GH #1579) * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it possible to use this algorithms for private key encryption. * Avoid creating symlinks to the shared object on OpenBSD (#1535) * The factor command runs much faster on larger inputs now. * Support for Windows Phone/UWP was deprecated starting in 2.5. This deprecation has been reversed as it seems UWP is still actively used. (GH [#1586] #1587) * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019. * Added support for GCC’s –sysroot option to configure.py for cross-compiling.- fixed to build on armv6 and armv7- Update to Botan 2.6 * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a malformed ciphertext cause the decryptor to read and HMAC an additional 64K bytes of data which is not part of the record. This could cause a crash if the read went into unmapped memory. No information leak or out of bounds write occurs. * Add support for OAEP labels (GH #1508) * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster. * Add exponent blinding to RSA (GH #1523) * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527) * Fix bug in TLS server introduced in 2.5 which caused connection to fail if the client offered any signature algorithm not known to the server (for example RSA/SHA-224). * Fix a bug in inline asm that would with GCC 7.3 cause incorrect computations and an infinite loop during the tests. (GH #1524 #1529)- Update to Botan 2.5 * Fix error in certificate wildcard matching (CVE-2018-9127), where a wildcard cert for b*.example.com would be accepted as a match for any host with name *b*.example.com (GH #1519) * Add support for RSA-PSS signatures in TLS (GH #1285) * Ed25519 certificates are now supported (GH #1501) * Many optimizations in ECC operations. ECDSA signatures are 8-10 times faster. ECDSA verification is about twice as fast. ECDH key agreement is 3-4 times faster. (GH #1457 #1478) * Implement product scanning Montgomery reduction, which improves Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH [#1472]) * DSA signing and verification performance has improved by 30-50%. * Add a new Credentials_Manager callback that specifies which CAs the server has indicated it trusts (GH #1395 fixing #1261) * Add new TLS::Callbacks methods that allow creating or removing extensions, as well as examining extensions sent by the peer (GH #1394 #1186) * Add new TLS::Callbacks methods that allow an application to negotiate use of custom elliptic curves. (GH #1448) * Add ability to create custom elliptic curves (GH #1441 #1444) * Add support for POWER8 AES instructions (GH #1459 #1393 #1206) * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502 [#986]) * The default encoding of ECC public keys has changed from compressed to uncompressed point representation. This improves compatability with some common software packages including Golang’s standard library. (GH #1480 [#1483]) * It is now possible to create DNs with custom components. (GH #1490 #1492) * It is now possible to specify the serial number of created certificates, instead of using the default 128-bit random integer. (GH #1489 #1491) * Change DL_Group and EC_Group to store their data as shared_ptr for fast copying. Also both classes precompute additional useful values (eg for modular reductions). (GH #1435 #1454) * Make it possible for PKCS10 requests to include custom extensions. This also makes it possible to use muliple SubjectAlternativeNames of a single type in a request, which was previously not possible. (GH #1429 #1428) * Add new optimized interface for FE1 format preserving encryption. By caching a number of values computed in the course of the FPE calculation, it provides a 6-7x speedup versus the old API. (GH #1469) * Add DSA and ElGamal keygen functions to FFI (#1426) * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402) * Fix a memory leak in the OpenSSL block cipher integration, introduced in * 2.2.0 * Use an improved algorithm for generating safe primes which is several tens of times faster. Also, fix a bug in the prime sieving algorithm which caused standard prime generation (like for RSA keys) to be slower than necessary. (GH #1413 #1411) * Correct the return value of PK_Encryptor::maximum_input_size which reported a much too small value (GH #1410) * Remove use of CPU specific optimization flags, instead the user should set these via CXXFLAGS if desired. (GH #1392) * Resolve an issue that would cause a crash in the tests if they were run on a machine without SSE2/NEON/VMX instructions. (GH #1495) * The Python module now tries to load DLLs from a list of names and uses the first one which successfully loads and indicates it supports the desired API level. (GH #1497) * Various minor optimizations for SHA-3 (GH #1433 #1434) * The output of botan --help has been improved (GH #1387) * Add --der-format flag to command line utils, making it possible verify DSA/ECDSA signatures generated by OpenSSL command line (GH #1409) * Add support for --library-suffix option to configure.py (GH #1405 #1404) * Use feature flags to enable/disable system specific code (GH #1378) * Add --msvc-runtime option to allow using static runtime (GH #1499 #210) * Add –enable-sanitizers= option to allow specifying which sanitizers to enable. The existing --with-sanitizers option just enables some default set which is known to work with the minimum required compiler versions. * Use either rst2man or rst2man.py for generating man page as distributions differ on where this program is installed (GH #1516) * The threefish module has been renamed threefish_512 since that is the algorithm it provides. (GH #1477) * The Perl XS based wrapper has been removed, as it was unmaintained and broken. (GH #1412) * The sqlite3 encryption patch under contrib has been removed. It is still maintained by the original author at https://github.com/OlivierJG/botansqlite3- drop explicit package requirements - split binary package and documentation from dynamic library package and make documentation package noarch - merge back Botan2 package to Botan with changelog history - drop Botan patches aarch64-support.patch - doesn't seem to be required anymore Botan-fix_install_paths.patch - doesn't seem to be required no-cpuid-header.patch - SLE11 not target anymore Botan-fix_pkgconfig.patch - this seem to be wrong Botan-no-buildtime.patch - not needed anymore dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there Botan-inttypes.patch - not required Botan-ull_constants.patch.bz2 - no reason anymore- change group of libbotan-%{version_suffix} to 'System/Libraries' as requested on review- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just need the Update repository present.- Rename libbotan-devel to libbotan2-devel. We can't have clashing packages in the archive because Botan1 and Botan2 provide the same -devel binary. Botan2 is also no API compatible with Botan.- fix expected version after bump in baselibs.conf too- fix unknown flag -fstack-clash-protection for openSUSE 42.3 - rename to Botan2 - drop Botan2-INT_MAX.patch as not needed anymore - Bump to libbotan 2.4 Changes and new features: * Several build improvements requested by downstream packagers, including the ability to disable building the static library. All makefile constructs that were specific to nmake or GNU make have been eliminated, thus the option ``--makefile-style`` which was previously used to select the makefile type has also been removed. (GH #1230 #1237 #1300 #1318 #1319 #1324 #1325 #1346) * Support for negotiating the DH group as specified in RFC 7919 is now available in TLS (GH #1263) * Support for ARIA-GCM ciphersuites are now available in TLS. They are disabled by default. (GH #1284) * Add support for generating and verifying X.509 objects (certificates, CRLs, etc) using RSA-PSS signatures (GH #1270 and [#1368]) * Add support for AES key wrapping with padding, as specified in RFC 5649 and NIST SP 800-38F (GH #1301) * OCSP requests made during certificate verification had the potential to hang forever. Now the sockets are non-blocking and a timeout is enforced. (GH #1360 fixing GH #1326) * Add ``Public_Key::fingerprint_public`` which allows fingerprinting the public key. The previously available ``Private_Key::fingerprint`` is deprecated, now ``Private_Key::fingerprint_private`` should be used if this is required. (GH #1357) * ECC certificates generated by Botan used an invalid encoding for the parameters field, which was rejected by some certificate validation libraries notably BouncyCastle. (GH #1367) * Loading an ECC key which used OID encoding for the domain parameters, then saving it, would result in a key using the explicit parameters encoding. Now the OID encoding is retained. (GH #1365) * Correct various problems in certificate path validation that arose when multiple paths could be constructed leading to a trusted root but due to other constraints only some of them validated. (GH [#1363]) * It is now possible for certificate validation to return warning indicators, such as that the distinguished name is not within allowed limits or that a certificate with a negative serial number was observed. (GH #1363 #1359) * XMSS signatures now are multi-threaded for improved performance (GH #1267) * Fix a bug that caused the TLS peer cert list to be empty on a resumed session. (GH #1303 #1342) * Increase the maximum HMAC key length from 512 bytes to 4096 bytes. This allows using a DH key exchange in TLS with a group greater than 4096 bits. (GH #1316) * Fix a bug in the TLS server where, on receiving an SSLv3 client hello, it would attempt to negotiate TLS v1.2. Now a protocol_version alert is sent. Found with tlsfuzzer. (GH #1316) * Fix several bugs related to sending the wrong TLS alert type in various error scenarios, caught with tlsfuzzer. * Add support for a ``tls_http_server`` command line utility which responds to simple GET requests. This is useful for testing against a browser, or various TLS test tools which expect the underlying protocol to be HTTP. (GH #1315) * Add an interface for generic PSK data stores, as well as an implementation which encrypts stored values with AES key wrapping. (GH #1302) * Optimize GCM mode on systems both with and without carryless multiply support. This includes a new base case implementation (still constant time), a new SSSE3 implementation for systems with SSSE3 but not clmul, and better algorithms for systems with clmul and pmull. (GH #1253 #1263) * Various optimizations for OCB, CFB, CTR, SM3, SM4, GMAC, BLAKE2b, Blowfish, Twofish, CAST-128, and CRC24 (GH #1281) * Salsa20 now supports the seek operation. * Add ``EC_Group::known_named_groups`` (GH #1339) * Symmetric algorithms (block ciphers, stream ciphers, MACs) now verify that a key was set before accepting data. Previously attempting to use an unkeyed object would instead result in either a crash or invalid outputs. (GH #1279) * The X509 certificate, CRL and PKCS10 types have been heavily refactored internally. Previously all data of these types was serialized to strings, then in the event a more complicated data structure (such as X509_DN) was needed, it would be recreated from the string representation. However the round trip process was not perfect and could cause fields to become lost. This approach is no longer used, fixing several bugs (GH #1010 #1089 #1242 #1252). The internal data is now stored in a ``shared_ptr``, so copying such objects is now very cheap. (GH #884) * ASN.1 string objects previously held their contents as ISO 8859-1 codepoints. However this led to certificates which contained strings outside of this character set (eg in Cyrillic, Greek, or Chinese) being rejected. Now the strings are always converted to UTF-8, which allows representing any character. In addition, UCS-4 strings are now supported. (GH #1113 #1250 #1287 #1289) * It is now possible to create an uninitialized X509_Certificate object. Such an object will throw if any attempt to access its members is made. (GH #1335) * In BER decoder, avoid unbounded stack recursion when parsing nested indefinite length values. Now at most 16 nested indefinite length values are accepted, anything deeper resulting in a decoding error. (GH #1304 OSS-Fuzz 4353). * A new ASN.1 printer API allows generating a string representation of arbitrary BER data. This is used in the ``asn1print`` command line utility and may be useful in other applications, for instance for debugging. * New functions for bit rotations that distinguish rotating by a compile-time constant vs a runtime variable rotation. This allows better optimizations in both cases. Notably performance of CAST-128 and CAST-256 are substantially improved. (GH #1247) * TLS CBC ciphersuites now are implemented using the standard CBC code, instead of reimplementing CBC inside the TLS stack. This allows for parallel decryption of TLS CBC ciphertexts, and improves performance especially when using AES hardware support. (GH #1269) * Add callbacks to make it possible for an application using TLS to provide custom implementations of signature schemes, eg when offloading the computations to another device. (GH #1332) * Use a direct calculation for calendar computations instead of relying on non-portable operating system interfaces. (GH #1336) * Fix a bug in the amalgamation generation which could cause build failures on some systems including macOS. (GH #1264 #1265) * A particular code sequence in TLS handshake would always (with an ECC ciphersuite) result in an exception being thrown and then caught. This has changed so no exception is thrown. (GH #1275) * The code for byteswapping has been improved for ARMv7 and for Windows x86-64 systems using MSVC. (GH #1274) * The GMAC class no longer derives from GHASH. This should not cause any noticeable change for applications. (GH #1253) * The base implementation of AES now uses a single 4K table, instead of 4 such tables. This offers a significant improvement against cache-based side channels without hurting performance too much. In addition the table is now guaranteed to be aligned on a cache line, which ensures the additional countermeasure of reading each cache line works as expected. (GH #1255) * In TLS client resumption, avoid sending a OCSP stapling request. This caused resumption failures with some servers. (GH [#1276]) * The overhead of making a call through the FFI layer has been reduced. * The IDs for SHA-3 PKCSv1.5 signatures added in 2.3.0 were incorrect. They have been changed to use the correct encoding, and a test added to ensure such errors do not recur. * Counter mode allows setting a configurable width of the counter. Previously it was allowed for a counter of even 8 bits wide, which would mean the keystream would repeat after just 256 blocks. Now it requires the width be at least 32 bits. The only way this feature could be used was by manually constructing a ``CTR_BE`` object and setting the second parameter to something in the range of 1 to 3. * A new mechanism for formatting ASN.1 data is included in ``asn1_print.h``. This is the same functionality used by the command line ``asn1print`` util, now cleaned up and moved to the library. * Add ``Pipe::append_filter``. This is like the existing (deprecated) ``Pipe::append``, the difference being that ``append_filter`` only allows modification before the first call to ``start_msg``. (GH #1306 #1307) * The size of ASN1_Tag is increased to 32 bits. This avoids a problem with UbSan (GH #751) * Fix a bug affecting bzip2 compression. In certain circumstances, compression would fail with ``BZ_SEQUENCE_ERROR`` due to calling bzlib in an way it does not support. (GH #1308 #1309) * In 2.3.0, final annotations were added to many classes including the TLS policies (like ``Strict_Policy`` and ``BSI_TR_02102_2``). However it is reasonable and useful for an application to derive from one of these policies, so as to create an application specific policy that is based on a library-provided policy, but with a few tweaks. So the final annotations have been removed on these classes. (GH #1292) * A new option ``--with-pdf`` enables building a PDF copy of the handbook. (GH #1337) * A new option ``--with-rst2man`` enables building a man page for the command line util using Docutils rst2man. (GH #1349) * Support for NEON is now enabled under Clang. * Now the compiler version is detected using the preprocessor, instead of trying to parse the output of the compiler's version string, which was subject to problems with localization. (GH [#1358]) * By default the gzip compressor will not include a timestamp in the header. The timestamp can be set by passing it to the ``Gzip_Compression`` constructor. * Add an OID for RIPEMD-160 * Fixes for CMake build (GH #1251) * Avoid some signed overflow warnings (GH #1220 #1245) * As upstream support for Native Client has been deprecated by Google, support is now also deprecated in Botan and will be removed in a future release. * The Perl-XS wrapper has not been maintained in many years. It is now deprecated, and if no attempts are made to revive it, it will be removed in a future release. * Support for building on IRIX has been removed.- add Botan2-INT_MAX.patch * Fix “INT_MAX was not declared in this scope” in openSUSE Leap 42.1- fix build. python3 configure itself is useless, we should make package python3 too.- configure Botan explicitly with python3- Update to 1.10.17 - Address a side channel affecting modular exponentiation. An attacker capable of a local or cross-VM cache analysis attack may be able to recover bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 Workaround a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function. (GH #1192 #1148 #882, bsc#1060433) - Add SecureVector::data() function which returns the start of the buffer. This makes it slightly simpler to support both 1.10 and 2.x APIs in the same codebase. When compiled by a C++11 (or later) compiler, a template typedef of SecureVector, secure_vector, is added. In 2.x this class is a std::vector with a custom allocator, so has a somewhat different interface than SecureVector in 1.10. But this makes it slightly simpler to support both 1.10 and 2.x APIs in the same codebase. - Fix a bug that prevented configure.py from running under Python3 - Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will [#]error if OpenSSL 1.1 is detected. Avoid –with-openssl if compiling against 1.1 or later. (GH #753) - Import patches from Debian adding basic support for building on aarch64, ppc64le, or1k, and mipsn32 platforms. * obsoletes CVE-2017-14737.patch * refreshes aarch64-support.patch * drop ppc64le-support.patch for upstream version (disables altivec support as per concerns by upstream)- Fix for CVE-2017-14737: A cryptographic cache-based side channel in the RSA implementation allows local attacker to recover information about RSA secret keys. * add CVE-2017-14737.patch- Explicitly require libopenssl-1_0_0-devel (bsc#1055322) * Botan 1.x won't support OpenSSL 1.1 (https://github.com/randombit/botan/issues/753)- Add patch to build SLES11 (allows for simplified backporting, e.g. bsc#968030) * add no-cpuid-header.patch - Clean up spec file- Update to 1.10.16 (Fixes CVE-2017-2801, bsc#1033605) * Fix a bug in X509 DN string comparisons that could result in out of bound reads. This could result in information leakage, denial of service, or potentially incorrect certificate validation results. (CVE-2017-2801) * Avoid use of C++11 std::to_string in some code added in 1.10.14 (GH #747 #834) - Changes from 1.10.15: * Change an unintended behavior of 2.0.0, which named the include directory botan-2.0. Since future release of Botan-2 should be compatible with code written against old versions, there does not seem to be any reason to * version the include directory with the minor number. (GH #830 #833) * Fix a bug which caused an error when building on Cygwin or other platforms where shared libraries are not supported. (GH #821) * Enable use of readdir on Cygwin, which allows the tests to run (GH #824) * Switch to readthedocs Sphinx theme by default (GH #822 #823)- Update to 1.10.14 * Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132) * Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate. * When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)- Update to 1.10.13 * Use constant time modular inverse algorithm to avoid possible side channel attack against ECDSA (CVE-2016-2849) * Use constant time PKCS #1 unpadding to avoid possible side channel attack against RSA decryption (CVE-2015-7827) * Avoid a compilation problem in OpenSSL engine when ECDSA was disabled. Gentoo bug 542010- Remove Qt5 dependency, since nothing is using it anymore. - Fix double-prefix in botan-config and pkgconfig file.- Update to 1.10.12 - Version 1.10.12, 2016-02-03 * In 1.10.11, the check in PointGFp intended to check the affine y argument actually checked the affine x again. Reported by Remi Gacogne * The CVE-2016-2195 overflow is not exploitable in 1.10.11 due to an additional check in the multiplication function itself which was also added in that release, so there are no security implications from the missed check. However to avoid confusion the change was pushed in a new release immediately. * The 1.10.11 release notes incorrectly identified CVE-2016-2195 as CVE-2016-2915 - Version 1.10.11, 2016-02-01 * Resolve heap overflow in ECC point decoding. CVE-2016-2195 Resolve infinite loop in modular square root algorithm. CVE-2016-2194 Correct BigInt::to_u32bit to not fail on integers of exactly 32 bits. GH #239- Add gpg signature - Cleanup spec file with spec-cleaner- Fix Source0 URL- bump SONAME to libbotan-1_10-1 - Update to 1.10.10 * SECURITY: The BER decoder would crash due to reading from offset 0 of an empty vector if it encountered a BIT STRING which did not contain any data at all. As the type requires a 1 byte field this is not valid BER but could occur in malformed data. Found with afl. CVE-2015-5726 * SECURITY: The BER decoder would allocate a fairly arbitrary amount of memory in a length field, even if there was no chance the read request would succeed. This might cause the process to run out of memory or invoke the OOM killer. Found with afl. CVE-2015-5727 * Due to an ABI incompatible (though not API incompatible) change in this release, the version number of the shared object has been increased. * The default TLS policy no longer allows RC4. * Fix a signed integer overflow in Blue Midnight Wish that may cause incorrect computations or undefined behavior. - Update to 1.10.9 * Fixed EAX tag verification to run in constant time * The default TLS policy now disables SSLv3. * A crash could occur when reading from a blocking random device if the device initially indicated that entropy was available but a concurrent process drained the entropy pool before the read was initiated. * Fix decoding indefinite length BER constructs that contain a context sensitive tag of zero. Github pull 26 from Janusz Chorko. * The botan-config script previously tried to guess its prefix from the location of the binary. However this was error prone, and now the script assumes the final installation prefix matches the value set during the build. Github issue 29.- Change build dependence "libqt4-devel" to "libqt5-qtbase-devel"./sbin/ldconfig/sbin/ldconfigold-cirrus2 16215178032.10.0-lp152.3.3.12.10.0-lp152.3.3.1libbotan-2.so.10libbotan-2.so.10.10.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16333/openSUSE_Leap_15.2_Update/bdfdf7b0848ee1509e721c75f0188a46-Botan.openSUSE_Leap_15.2_Updatedrpmxz5i586-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fa61a019252820d23137aaaad7e00897d641a7d, stripped0PRR0RRRRRRRR R R R R RRRRR+R(R)R R!R#R.RR"R%R&R-R'R*R$R,RRRRRRR/RRRRRRhT_5ՅCHjutf-82963698d6f29819124f0585bafbb37c6701bed69d73a08b2a5394c79dbdaa9f2?7zXZ !t/]"k%]e8YA6BywqWd"࡝D*J?N,MG;# ?Ǝ4~[\|@̲qD`RFA9D:5*:Bo衝R?s9jkl,̨ƫalۗrgfb/z?\β#NVl&?i2g_@"=l4`Ԏku|] [m`m@YLL$;3 eum }k#2=7XS,cǚlmuCfj?}KV2x֔B54lk٬@Xj5o5kKU8\v*Nh@m'c xw cWfA+uǮ`h;x Ш)~ k^i>F +Fbk^}ÌUk 혥s~%ލuJYXk35oIwo1NԻQ˔dž;/z6)F1y1 z2m)O"wU٭GmQ)N toӶ-GfZQ Iw jn$rIKXpњS0Gf0s_1l0xSUQrfg3DGՃTKC"T=&\=w <q΢*n§#25_ 0jԥ m- pS)!:⹾@hRLTAQ\E>̃.q5yapYv'ʐҁKBBӊ[n܈&xbmk_s=9,a zSlo+kiƽV0u!/T*qį1]8lE9GOų@~, 3X>V"&=Ɩo-dN)g3ebs@4z:,R DZl:t=y5Eg9%j xRJTIYk#|+1qM :dXikBq5dٹb4 V@wh2[,jP(xFfL5J Nx ?":F+spy<6a}zOeYID-"+}T]O;s:*$A)wY.}ZAV 0}naywܡ^g\/( [^̟ pLYτv{@yv<1؍9[8j&1ݙ{DLaAkuoZtׇZfw<>ѢEQv'Gŀ_`b5k5V(ma zTZ$-^Y29-CA92VQa5-$it> 3XMshrd& /8PkD9gCVd1@[#VzK`t3^#lBeJcB%IA#ݽfSg]hwa,u>q(W^~?~V d^Pr$Ynb j |BGRxM2mi&t4"$0/{m'O=P%JܕPSYڢ|V2D ]5qJ,VSPQKlED]F &]8y+O10v eM83e?Z[xO:mN\;{n nRmwrӬ_YN-޿3Kn?`lKgHuTqnޤh^ݶ3ja@jRO_4ƊVN$Wj>rtn_O xbZG$U}Vkq | RwzI_.ER2smGwۮ9vED9玮\- QLX_-vc&YT d"tv KqU,(nS W\W; TwPKw`Kg_@3|_5WqdoTV~~S8aZZ?< |/*%$"?dbQ+-$Q\>eH? E:1YC.JmY3ܪq9TzQqC7`+|P rЙ91`OO}m'P5ӪUBߑXyYყbA=.`M kRs,-K &_mLRcN $d)Ewׄ(鰔AT<<`ZrQdP>:I,bP6֛jJA{P$mn$q|҈6){p^^ՂOp\Fz94Ԓ8q7RkfJv&`ɱ슱._Z3St]3,JmoL74iCk.Ŝ/2BW((3eO eovk j]*r:`-,Ha1Nו$7_9`| hVK+d5n+Qç!Xz@ĺ2`}D?bmFN_7,_=i5Mvr 0eU)[lʼnúCB_R umWXxXd3zaH7C=!5|mP!s <0׼}}r93Et+)QlA5^>KEm))g^fyUK{(gcZA"rM6_7O=_lw6Ǔ˄83Q'S\w xrMPr(^zeEfKfbjPC|G(PWFj HYqQ Tm !9BB3^Rne#ȏC_6u&8Xw|~sr^/P<ؕ@Q.+ 2v~(ͷh*-~Q^8 ;Ι+|M v^ɉv>e_WRv a_΀"k8ݝ@ '~9 񴰕}n]%ö+ȚOhw'iWTZ9>IUX7IERJHϤ{\p[u#'07WbƟjTTjO5v B®~۴ma.&:"Zvo7-s3=AG܈GnNgU`h8SRT|O(]JF/ϻKp$2V@QjZ,f8bgG:r}Ɠ HBՃ>Udݑ_W)j$tz7~}SPCsFYVAY p(Ea2ye50:rrEitK!gGBYF 5uQ|$+7])oŰx[dhMܲE@m_8t} wV"M1x/V Ro?s T!68zb Zt Rڰ'=<N7EUť97S `G %k $/!ZÂOCK3NwX/N&'b Na3=RRhUo,l oDôD˯cJ:Dlmd5ܗԹmU ]z4۔pɊEzn|lB}E-{WmTc /x^*0$gdI/N-Bt -ӟH@ J.fOՂ@7\ok@"GHiƻ) \V=ϖ3M0qQ뎟):mQdj{{ =nm wL;)Ho( x/8OcVx"I E{8z^=:_BoZRuWUU6uuzbcJkT됤) qTQ=AEuC^#+J.?{CZB>9SgnN@e,;w=eh\p0 BBJ@]A,&y!qL"Qy3̩^B,mڋC??U}AVCFV~v%$ށ4NPٕl'*l˜j ^T&ZtuUAQeEේ  |R L/LQlzW\\m7w4yf.]wDcYErY)~><$rh(㐈{<4W?ߞx:1G\ɸ;J#]c S)QyB$Hz6VNwԑwh$?7WfU!c $Ͳ%yzDX3pzƞ1I *nJFHhtז@YIvȬ)eI[" B`eu2xrDkcGI~!@+Hd֑uZcLSQ8MGFYҚ+<*g2ahԹ$#6/!0ry'T"DGz'af'򱼤x ma4+=[\Ҁĝ;w9m.<Ԕ 'Cx\jڬITvD.a.HBc|݀7|uy?&K`]'ن?3m95 #oEXA[ 4qFM,K]Sy!)kB|n[J(!4Azan5n[w4t,Ѓv%W98)4XFS%.`~n??w0SXs}ji'+ 8&S"( G3,<1)ٓ2$Ñ9UDRz4{=N0+ g5AV\ײEQ=maǃv+S Q@hTM2%N7γi Xu d "μ qE@~}5b2GiS}?E ?LT,x^~5DڦNcQ9$5!w!\Ddy0YJ}zp AiΕnswNhB2eD8U_(5 WJvի^۸:ODG|+>wz5eHز8<&H>V+nܠP7\sJ)Ï+{a++_9O5dAQwVH r3b)RA5L?/#bdV;גO>,+|羕 );x/,ӑ0ىY\`"$q RN Ù)2U^}6> 䍐&S:-.Ǖs3Vrz'}HD;grSYkUW?]n[0YXR@4 DT5rum &15]2 k{T,$_dТJt4F Ǟ3 VJ0'~)f.]0GN :=}6:\u}?{ y/f $6=^uflD?چIJnx%Cv W d80tWMqqZgZmO0y]Q/lW`Fs߻&0$( )'H->\: gֽ P&QicЉ16vd'g ؋)]΂1Mhhi43J[~1ŸMX@xXki̭$,B˩ BMR[8%mDJ#haG,&0w΄?ܖ+i){`^XԄ3I,-5U'5JKm\?Ӥgc>fL٬-8WJƕx~8OvRu=_Ԇ%Rn7nl- x!fQ،VKYQ ͫ=de"$19qq.lti&ba=*xvAǨ 7/yե6TLkCG*=PٻdUl@p+ێvy@/1V֕dKmӌfMQ"q~H`2b[Wu , lzΣ[E7CG%=6\;ĐUV<@-*ߨmSCV ?wq}Sp=H^uӧ>6p8Q #tSFk]nLR%VfL1<>[Ef*(lt^-ɪ*ɀX, Z7}"\o|7J(ѥ^d$(ƌbP^ćI8N%vdG]?x;Tn,Kaք^ΐSYϛLbLNPa&ċ$ג7 {,1VP:Ep" t&ʁۅVơaNGY_Rn/R\.+ W-|e[O%,Ҵ EբDaT{9$.9a&ǚ#&j-JG@% SO@x]c%A, `HȪ ܿEmi9NnGw\Iq( pN E WA\WRM}:!7Pv/}u'}bLM0| %^KA[pb1P҈bH}}cz|a,[ {vK\k#7H3JAU/*gncP7P)W'<]v H&Θ4X޹ʷ}\}4GkZ0Eb⒫[soQ]jG3S޲q.LixM ߵi2c>)ꞛ ؄XZNyT^/0 {žu08.Nj ҏ9҉EXMGCb<uiP@-R:E95@/,'uRp]ds=''=k{-sYSrP0v22bh km1SQΑl\jwq+ |[&t%tC( 'kbGIzD7q)ƗS]-g$NJ61F$JvK y-TJ<  ޚ \h]'Q+i, F$ߊW|t kdY#IWi?y$]4IP.ԧ:Xx v {eA_nj79zzjE>Κf 8eXwl,p1q/JBPN?~w0Ȼ 7Rt]sn@{4H)¤+zUjxN@>B5^rp 13lv&H0˿9}]cNj%.XSsֆŸ)N]>BTÐziM؃_2ĞZ#eV JZTJ{ ;lKtXoiéYn`ET9J/va`&, x hoNE(BKE{!1$ǀ?th,S1l]z)0߻EFv#ُ@A~ Z#J엫$b-G(O1"9w (L#aYOq{,_`lyu<,Qaݹ'xQMZ4~%Cs"ֱ}p=!QI W>fe _emZ<ߞa!L#2̳S"ꢥUqyI@#( a6=5!4dݬTREDikڹAz> AӰܓ]+`sӰO_d=J3p!O0y rb {-$D!724E?Ó\lÔPD<5lXn s5K~lRThXj hUGQyoliU=Nz ioOM|U>$`D¦_0q_n/s.n?l',{LL1 ٜ:NA{$JbOǯ_ѭ9C9 &JL.Hj馢"3I.[*BWOi~ sj/I(L9֠ߚT"Yy}`{d[]X"驽tB`>ZjυVKt([BlpDe%`}߬U/8LY{߮3)YX|(=8ܠ=A QR9H(W"YP\u4 Y"Wg.ԒᅺQZC~>ֶW8\CU.斍ZII5!a[YKs 7@| Ac57Y(ƩҬ*'[uX=?Kʧs0‘F >U랂,UT+˒Ȋjm?@ʮZGs9x\JiՍ Yܠ֤Lt6})tؙ2'=-ʯ AHTFDo60ºh=~iKj5*[}[ t|RаD8@>5o0u#);; YD\RW]tHwG Wlu6g5nKt+OݹokqCZ PtyIn-EŒS[^Kѧ#5ϹV<20ѥ֟΁qfnQH l>ZTPcΰ 6{Q>Z')5t!=9H ~/[ Hk R9|ǩqɂP=3.FX( 1EObiEGJ(lcz[On'#`zb1L;4cuvJ/wdܔ V6H)W3xL>c}v>K<z1]5or  5b^ L?IYހPgCxr0S\ (um7Hi f612KM"RƘvĩ7HM23"e FBWܛ^ (*'( M.FK\J!y>Е /Ԝ B5Aܢ5QSe^T0R--F TAfV.sP+)(VӦLZlX0t#'ݢ.:^ W4>b7ۏuĢOG!DRjߍ;dOd !%/C< F`b,~τ4sǵ8biCK J` ]~KoJp| ឭǝD^f7}ظ꼲6J@s qw{c䗻H_mBFG ^P@g ,\JN-5y 2+Sq 9P鮸F+6THN\-].ΊDZ|z0FR"4NXCà6MV eʼd`X&6Cq U7{B@]!#F7gS4P"A 1I. |Z^P?otخ"C%H`2`L6>5c {Ʊ4|Ӆ=ItVG[3"АrYѕ;@AIB_;`&XUU=HFƳd8LW͉L~JGiAoT4Ѹ:V X$ ZV ;u=rJo=@+28+xCh|K32R" {dH;.E+?49 ; ^ÝQFphz"=_qhl r]* /p;h][X^FWnke򸛘/,RRF8&oo.Fa5,  [Ͼ0 !A._ n-[Q75⬨xs{$Vْ%]_tpL 0r Yp$T@Eph' sPK9\ni_}L-y@n(4ZZh+:)@vM<S+5]3x`ő!^pz'6;tp\boz 8 OP1y{Cr5+>WIh=䒴C`Naz޼0g|;e[vÝSRn_ʶ|PgM7K̫2Srw6'O)yXM:$람D .v9a#]ȕohQffHhMikEyXCm&U,:Q\$/ I@`NPU4f^ "-5'd.0PxtE;JjG 5kmrț9 ,ZʿdYMse`!3 Ct}^90x]\UF^cgϬWCh4?|oڰVe/x{tҭ=([T K/Amx'V&/&Kqҷ0e8ĭerL zULrR:i֠ݸvz5_T0:ڮv&`2H k7d+^Oç+N9zwC=w͞ZԳD@F_H:R&J+6*(]m4oL$C,;plB={ lqz%bu+Zv. '_iX#tANxW;;̸ "[Cڠ|*0g&t wU4$:YxQ4 G|χ9JmQ,Ff7I;\aEҜm -5Z%EͻYu1_[(|+cB?E <Û8Ss8b$)rJz,'" [)!fAfİ{PX-̐g%#"LcFộtEI_,KvQ%D"s6W:XN4e$,;3:)DOHSLi6>NZ?ޭhYbێV@ξFi#;vh{2 n?Z'&I+RęJ* -ad7Cޅ^ X#_@TrQ7ǿ5$t͝6FxT[p@^@z*/aT;:1N6^$MRzfMAE &F} -<36 F",Qq*<>J:NWeTbo(ԃHˤ$x$Zg B-e1:v?Dj۬H/Eʞܥ>п2|S~saPቦf dYhdORlVtepPs?LeR3ޤu) PWin"b;RAB$u록&d^ڻ"> )`J) }wD"}̵] wL @z#,=6  w=hwFZ#0{^O&=(xw؜"Z]:)£cVI\ǠaxzFwջJȘ.*OaԪ΄%0Bh0Nm YRW;sT ]Ⱦ\|74@N`~*r )g2g}⊷UEZs>@VL^9[%jrJuelK}p:v`? #ͅXO=R٤ҪZ`^}^nl:%1M=?ks>G!S&DŽ2-R?JDu&ӂo! PIPrv+Ƙcncȴͥhlҡ$S':?39eG-wDaq\ @-tӲqϙrn^^T `Qj!c ܰڰ>b6Ɲ)^LÆWrV =ggXBBP5?6.%'Bi6@-4jlG&"l*4 qߢ~rA`Lvϝ&qCqJq=[KD?xn|EKYC;.dG߻ 4gmlxsy`zu b3ɕlU\u=eGNxM.$m)sKdˍ#ϑXmҐ brMȝ6^!dK+Bq02j tXHbϨ_ѣvQt4||_ V>V9C䓉W;D|ߣ֚kB ayN2ڳjSO1PDh0`|-%9pиD0ho_!,]ԓ]vִT߯Js^ě@jJHJ]%v3xZ{I3 5~aSO:U;ΡLЕ"_|2m>B:(|Ĵ va8HqI*3ѻ<޾[Ԕj7bଉ!m1'~QP,.2r ixBmZG!".& /䑧Q7iSH?0{f@2!w5|_X^{}$ݢYR>oQ ábCPgFUt. kE lT8-a?2Cγϔ2'kKU# J%X\yezI2H04PUݝ8t28/ŁDBNÞU|L{c"`jG]U9jI1N̘\"͉1R9IG pu\c ɘ0 ѳ|8W¦]X6o*{wU/~JbVGSιfn?}:hxA* mM7"ʕ:LZo.Ku޿P mEc֠uA2Ŀn0j lߑnvx$O1(v8:<9LP^[%ne/ԞKSI0:7/g*GǵS_V@ OilbƺeX ̷\m?xp>zΧ5ѩN_62-/AxBXI>>P aY͚ƗuX:eQ1c7֙*;{ ~l +]MF~eu-^M[g%Ti(%e0ΐW0V[D2ȉ)KgQhшo qBA*soԀFzGB!&6_:;+ ))ױ1> [3WjAB@(N;N@5D#.bO8JZ /3GA6g@nR(wOK@&GHž$'&=xF?3uiHi[!l4c=ޒkr~X-MQLs7t`W(qD8, צn&^B|_ 8ڃC/6z_Zc$?i#ЈlG-)D-GE5]9+2`ql\Ir 3O0=>ok6"v C>1Hݗ5f¿+F*k\{pwTG KON,vx8LU>NK-&C&H\OsDs>Il1\?j1NENɵ}-7S^HX ܲ}4䝹iysW&VbUFIc˓ @ArŻѠf`T& yA.7zzzK s YcXc7A`$ΚȀj>ǡ­z7{cz3qLجDѰUgͥKׂe~-I+/ó`B y{mf* ze=ԥ0Tfv㞱6taTrƀG܏ )Z/ ,Up]|ĺ|bWJTƆl#SWX2ckWRJe.Fa6߫&-Ut=؍iB}+JBICu8DCyJ(yfW28RҎɜ[jZ$( tP3jmGy\%p"]}()'yr 4F v80([a_O8CY4H܂̷G[jܘ#Rv qbd4>ׯrQsYQ>$/`X9|naWn%9HI0wk2eEڢ"z :/R]m-SW$|8,ްa[ ;Q7aE1'~ّ(1qׄ,U1Y=G.\OSj<H7 =vMAvJ)G6=rVЇs@s#:Ƃ2x244&@^~#Cj"DO& uwI`d!2\NfuG=)JQ>ӸkH,o!w'i ET)]6Iq m?X3CmEWmhx#5VWֲ0|Ⱦ .a?֭gZ{'le[@:fqM^hP7=}s[8l'EH3ӈ|T[>KN4)j #"qu!/X`;3ɲm7R/!u*{-`jƂ"j ֆ?g{Fnm4v_hkYD3@,갞T; ??~*>hD7I07y* ac94݄:lcS0;%tRRCf4ʹk^d($xK%BzuppD1_#"KwihXYrV^D>K4;qzyLz}oKo_EHE6XY JdYÿGJ3foD̺:=~v zdC8if<@RXePw-sLݬuzX;LvjZK((~K6 ڕS T$еfe6xg *5.lQΚ&Q1c.2тOq!\m:uR\0L8=~oB혒'LQL> H^wR~/QXVVA0#h@2$SoO&j`n+ >y%X82Q>ſ(Op*} o_HBuޔ >SfYeiS.}I~{-#<@{Y<ŌHM=Yg٪$I -_ڠN[{z>4\)kɗTdl>X1Fy`.]]0}'|05'=E*Qd vZ,֊ȄfS1F-pxgsPT: =̀WtU-3%?||[=n-d"Nz7rag(ƃ&jU3D^-v|6k ՒU^=1}0ڍʍ X "ZiEB=q~'5%}!/?Fe/Ow sjL8δ~k>mTײL\zQs{a$JeC<3h}ٱ{I^a]G_@l |^<+ B!d.Z^Kv2 Vp"Tz A|[p~a}t3`<8pT.Nw˲QsGm.# Yrߌ[ cPYY`u۳PY2̼W<*n[?|g:!ܴ}I%e:}C}@AX@sqLz }[Oi^o|/ GSAb\*"F| Zp5;9^lb:=gb^u;w3%Sbi|SM+BC4Q@֬7J܎`XXBh#:]sw|X|C=.q_u #"]'4Oَ}9 ?c^^oi˞%>MnnkTYI\k `^CZ?lBS8A˟Lo:6VmvzZp6y58E}txar{*~LR2W"m 2 T;~ע"Gv:mLSyIKx6<щ =<|]A1>k< vJҶ]>Yj5ahr>2]/vnLL3 X Z ;4RնN?@04Ν#[;#ςmd#Kc$U>P/ ȇp) "=_C{`된!z>#^>Z0x7S#?3T7.}YH~Uɜ4]?3I@:6k(_OBi; XLԃPa+JRGH'c[ٺy;9u>^] jY  ,B萿[N]qŜFiJջ)a|?vI#lL=GP*.r}QsDeꮌn2~8b7 s\23[sH\+}24%nXe|0ATqV&[)] 8QG |aTHOE][I-ퟨ.<ƯNƩ G隔e {:2>Nߒs|{U~Cs#)i7< b)f@PZ0^|AO`-?bAzWF&+/.&AKG4sDw!EK4Ym]xR`pCʁ(sҀԖ.~lȤ`ܙηC%18Cit;]&8'HZKrS®htdLWZk)OC*(EҹcCI)H1\Ͽ)z;j;I2ڃl f:,t{Fˣ+ {\~!?:J⃔:{ϸRH;;8)+rsr iOʳKlti%d*כ.U2B` IɁT MJ8}{%Tz_u(#sAvd|\0i苖O+%2moDR+LjFz5ӗxo,Zqzx~y@F4qw[|f3]oj}2eY6+ĝ`KwH'[n1d{.Iȫg D*caD\dn"QWױOfB/7mZGsZJ~nZ=$kHHS1ԮT' uk{;*x28K Y}⑲\YS-+r7"l]RYM 4jc(ФNxeReJx=RUʙMU|ŠD/}δ0] ;L'\!`&+4']I)8!#5[&^XU˷] ׬O"62_5QboWfټw-p{%`5Kdy2B6&z̯|nnDJ8G/Vb>3Ç̶s>WjGij#9R!\j.= >)ai*"ٵOZ 8en{T&Y =h\o P1Vl!h[Ks3S.Ye5cQ?^ISj=PTi?(۔<Uw3Yt>!6bRQ7Oy'M)lZ$V>m!~@yP6Ñ[At\}0i,}&b) 񋳆.|MNfxfQ '4Fphq}zpՓLT9K{1n*N;B(4BLdt skpdQC(G6v-_HU Išc[cX!\$\O:O”=A?J_FZ|0TÇxLN{I4*)٢bVMz|⒗mA)5O`'q%?ZVYǺLTn!;q/ yt^^_4zF@=\n'N` <ߙ?.l5g{'9CэY1{=gX>^;3jr;d-ՍNj?y%Ne㲖7{CSJ!atx39 ƽZ)}V G?7f孃~*Glenւmd޳}_o۲`F^ Or6ZϨ_\x6BYZtZl{(%t^5n?3>H]Gx/t?NQgtʪ [k̟aHbbV7 j4XB)$:eo-FKBaGi<߸$ 3 u"CS{,Dܭ #]WĸOcbBB$_pXJ7KSطOh}d9NÐm!_Ry 7~ O:F}h#`&Л8%w3XJItBXV09&Xyq`1mp pTcO,,_26W\kI 6 C)EN@qՑAc}).Jgf$VI%tb0Ve/s㯛MD-NP857(Ԛ[`'H֔ Ӳ +1+SRi_F; VYl!@ OY~O~z‘⢒<:!*E&O1'Ƣ3p*uZ|^8Fqj|>bmHy::/p 89ss.Xp:gW`3k ْ[wcF|%+"4-g? i=Lclx_kaZeRQrt?*47c[T[]|vw}zU|ފ a #8<Ѩ}rN3=錮j.tCQY;nB\#Gnƃ7J?k'F:py-D}"f+l0(r8twuR`qiV&•I,@W:.Gڥ>Z:ۜN> Zy0TM$)2;h+5%Jr{uk' dzԮsT:aQhU<Α?YSTCv}J;ąH7pbQ`j5j;7^iu%|U/RN4S&cL~4ulx}_:fm)zmc˼iC/~w A6ٹ3gI0&GkH)39!-#/uNȧ멗C\/BBm`od^D n\0+G*jFKauzz1AL6ђbfߖd+xH$tIQ+1 9r6s>)_xCh%iDA "M8";c\╠ ^H,8/VP؍leEk8p3[T rr:^5PK#ESlhEKCs~t ľ^q+ko-mZ$˂s'[$.3.Q7^윱]ťUaJi}LIƠZD0? /e$ە?= Gt`bz敖:T9!olxvi6E-9%hcI d6KZp.b bGǿ.% S]631 Vy=c{y %@N@O4hVj93 rwSn"B$h~o‘^"QU7pBZ!JFw󒲥={jDc8"|3q= HX2bhjv#9?8x (Y*c6)бY 4r3ȡ"^g$̉v=(,0I:ٙnOhLwr0A?0DԅzlIW0pzLÙg-ĂU`)t3һ#eHYf*qgNh[K#H"W!mgNDO/M}E'#0Q%-Im*Z`~z+Sk~ˬ #=R% YL+(J ]fyk/;:ݵ|%j`y^uy" K9)$*trl?1ݲ1|$B,ipkeԐOh*0w;q3\BX01M} *~T6jBV^5*İҁ\4=8i,ʶ46r(Hipb9#L')KᾏB7#$D_oe10 %%`@f~n6/Gogz1.ށ84K'2Iii{ج8Un8m5ط|4QGj6 `۠[`,[e>nIa0(Z-{xM7xnvKS%GU_xx$ityJomʣi (fCŔy"$7xP=o$RGMvL?/r עGcʚ>7U'ޕI#9I= Εru"3VYOޘ75ZLht`q ,8 ߿ge.> y+ {XE:،4TUxwKʃ9^"~jl?\(Ϡֆs<|#X!׬K)(\\JDT\8.KH 5*6%y.2$y-̩XN=<N S`\78Z5V@P rl^KU5sD@4Ev)eWw%c-l ה( {x>$Һbr,ХA],{a*=H^rԱ^ZM'OFI*_C5DE3yHB ȅBhSX#nWO('ņ/JKKCwx^IAy_$>4,3}31Z)+T=HHd|B[3g967;HzDr|:.tdr0xt<~ʃM ^O晛| ^0 5wSW\?!`PU^H,zfA"z-wjT,gFi&Cв}mMkGXWy&,i%n۹a(LIB) %,xn& {Vk|XZŷD٣\VYL18:iU̜m4tFIDtR?4B[H_NU˱B M핤n0-5u2Ǿ"UΣU#=(q@,snf!&G:|Z+L @QkcbA%q} L"h'[;𪑅Eb wABwun|.x!D)Dl'oFɸfb2罛 +6cN`X'jǻv9$ ޹v'耋 Tv ZU|YFi8ӕI+ya!1*@^$I>i]2c\[D:p3pW'?6j={R$ݥQf3K0x̢:"\*gpMܻ^|QlckF;`d75jiB5Q#-arӌ/qA,#a&t;{[~ Iz}8!5<@S&vP68L?ӆ'Xep& 8{YPܜ`7w6:C.@=ˢ&('$ϵJbE#k3Јv:K@G Z(/{xa "knȥ%lz0I.\mXwep~S(^W=&sN4P< Aqr3xFEjfuxΑW 9ei0Sb`j[}pŢc @.]Fژd0)~rjz!@Gi)L㼎1"way}1azS@n xZE Vݎ~g< 0pfb֖ RvdC5X춤699κa)(fTjYiʭTIJi#lP[O:QЏFa?%QM|B?ZNNt'ՏANő3n`"9QQ"ׇ{l>7QTd}Czݳb4h%5MM#T03y͡GJ=i9̞T5  &LfPO/{ j_1'ᙄvmWzͲ1(ΆϹz}kZTcbQ^C֟8]Pi{ƿ-DP/F|^XvkxS8%]> (YnB0P];9($QY'g@_æpS;B'+[Qێ: AcVB{L8rKs~ybfDwY~9`2N<{F$*\P|.S \G2ʴ(R1]D9)0ϲ L[S@ޛٓ&n3=SfPn[̒6"6YW$/꬀ )(~rϔM( Fqm7Yf]/j(G|.j6A?&b`cavB(@ovTSh~D4^1¼s椸T{Cг" d۹y8"N2D^~fiHqh=~ZO/Ǖ1E2k1@JJ;fbocAVTRtk+@K;{#C\q9 +h;a3_*t(qe_zVoA ?} GLHtT|]j{3PM P똏v_ .+ka$oYOBm Ƿ" 7*OK9;4J9]ՏB$9lb%X+lt 8MzG>wEEf5٢u)&W c[DniRffuOqW!psg,Ct|TvN-es =.<_ E17eS)Z5~>%қaC;+t5&"P.ZWU<Z|ʏ^Δ_Z'v B g/0$7ە'(KLi$ 8WXo d$cvݩY}௲ -`nA>; [gPŧ妬5Xi~߱b|>ɂC|`g$=5$z2Zm(hj4H\HTlA U V`OXH&o42>r-JmGoV; L9Sܧ$0KQ3I {Zak0!eE+%Iq(Fh'U]Mqw5a>V U"d6Nc,RrԯePwd^4k/aT,[R@3)(,JEŝm>vMq)Jr6rᜥ=e|ڜtz$qi׀Ĥp:Rrΐn0Mö}-@&41P:2qL05K)PGw]s?q_MT qݷaԻ̓C$QLm!nW 7I\ſJXBy&v2fPT_Y<z$n3\%SgM(?գ@lx'$2U {z>k Od6pP  ms[b9vg=ݒ!#똞K{WЋ0i\B7HM!u޿KXX95ע=A/YhzM C~'N^2"PaVJ]hq6C(-RKontA5_EdJ1W[/a,EP @ F;$(-EnkcsBfH[2ˈqx!Jv1O<\Uv^eߗ-\PrFM-}3VM"`v6'jo8mX>q`)ke! 5AF%Lʘgt@2bțE1r@ ~胯# &u}Y~p/xV9X,%AxnQJLi@á80Դ'1~k;wno]Iԫ7. zga ʈ%5PO~~8殑1VEܰ`zVΥ&Q @(Jk%Ȱx龴j noLv(鹂 47f3h(Bb6Yo@7t6$4>{O['+B-_P10o>OO5pJ2~N(ݱdsѵAֵ (g٢AhLX1 '{`48<]$XoOAoj <. po]kUi$Xo3P`/9U9k`ˁBVPM`tɿ:;?3t[X[f Vkw .= R).]]Զ63'_: d֤J NPaUlݾn^k2d&pV9lݑ7ʾ~@$BcQފܗDLPJly"z!VFj@${?0GAvEj"_ruútoq:ߚ~xG˜?yFh촀%9T )$KO_{Ѣ:G'|rI룔vw>B>N}irR-{vp0l+LLs b|MhE0Ч=|-1FӰ vfBUNd_pKGĻb4LMͥ{NVsb+ɱ!Wp .gk1C /1859gʓC;aG`kS&cOQxb-O oŏcnA:K<Ō܂v F-˅%}TFsj !Wy w}֎qB ~{;Jpbzj f? }2޴W1q9J/7yơDjI}V.Qe^})kH#޾M8ZY0 ;;] 0L.T5QY ";UoGɾ4NRLrGL2kPٰ;Gc9J}2~)@$pe>_&u͆#Q߷3VL^()vpܘJLyb)N *#ejsCO_ U0P&(5ʋ."64Άmh P[BD[g9*aߞ7pTIȄћ'>X[djA&~NB޾j "Tg8@5,Қaq}%ryn%Z5tb+!}/p;efueR6&?6zTjX %N𳻟zI=|D 4 ~=M~Iv<idjLD m) 8Vv:Ks=(9-WKV~Q}/$ ]Gmö lZփ? fOP zNDտncZr%)EZdOZBDM ">}ۅh<oM>HكP_~~.Xd(Qoz6EsTP|Ah&qU !<,\%q1)95a葻y.2rQR3aGg%;*yK&7O.kw|`nvN꩹}DX}%tE۶Q;YpʾQ#cO&Q>*;K yPƉHCK 0O3BIWC?NYe,fҬY!fhӥ`!xc,ӸJr'W~ 8&`m wYW̾nBWPf^$>3(ƈmt~Y)>)lAO8[=ND4E @ %lQ^,X}/Č;v-K:b3[S2&ņ6J #,]vwVn>t/BFzTWWĆ]ګ:kkJ 3yKjے잱C1O9_WHyMyjʘfM]1~(Y>0 V~Q/)T7n;aJޢeJk1Gj6ƫ<2eaZLC, O[pч"|HӐi VCϚybaZXEYk' Џ4@aQK'Ss=wuw|ދwWqʂ>A|ny. J<ϯ& O14%[Erz yvr㯵TOw}2]ZKĦ18Ⱥ u"xuZHj8~OHJ/ٖ׋6 Z ԇZ'CGVu!ݒ5%Sj[fY11)R*ҾfϹ&cNKRA8Ȇ J22;&AEsY+~7f``Ys?P5PYU$Sh+y%CpTt"uܨ h!`-4w3M jJ29ՂWsT2SO·< zhdG9cv1>}hLG$7S(S-S3$ݬ*8]kg'ȃ$qKqS2d@/()'(GȈױ~>|bCC^#T*V{+YXw I&j]'۪:sF=J9c&0&`;ʟi'@B#5YTC|Zlm您9f4]ZC0XMF>hi-nSTt㤆mQva4M'$Y9!RnA?gi-8As3`;n~Fra y0Urֺ0@qnBtRGt,'<Q(jJ,qazsJD*ox t'Ӭ4*Nx((nyP. ${ /(6^сx }:p/an.Q(S$ZZ9 ‹=k I9O&BJr"̀EDfxd*_ pƣ~XxSlM}[1#.r¿]pwL*O ЉvC[ +oO2$n'p~LQzh_!#3 $d+]rkljd򰩨ֿa@VQb|5%}rƭ" /.MJ2S\OJKt;k"IL}-ۓcEwAmFlCFcJ`> t@n[VC&,Z.AlFgBRbWUO"aC$1X@L)6Nvha#}/ gmVNo бj O5SۄO&+[Y aM:ć̹u˿0sF2SU^UꨯޥN֚?~ c(nhFOj8|7IԵ?(tkN!9ò N ǣ$ELܴfG5xǒJp;R݄u_=c)~}taéʘx!fԆ|Ö҉kpY}Ѷ#1ޙV.mq]rϻ/Gc]`+ȶ-r4b٬F5)F] >kT"]MuGzBġ^0w_!PǀAs4ڇ *bjnoIГ ;w/u7 V: +7WS}T_vd4?٥W0U3Uf~,cִLNkql䄏9jc)$wZt_w{S!ħw7}ap7ce/}BdY/1UX:`/uC54XHzP\kh8U?'{7ÅaQWJm\AӸϲ_o('DՒ!jDx/c|`\h O۠[Mތ[7,;ʜ1?IsϕI\3Q v3zR],eo_e 'gsy[X ŞC]u_mu]I`S6ة]DS^]INIw[l:?q? k<T|>IRB>LTNqVj+ ht ";9Bm]Fy=Z\@>Ӹ)n5&0}6v܁60X큦Ա`\$[|D0VoH>_JJg$.ܫ$1Uؗ@J5|{&ґjAa*43dxwa:86) l~O,XV=7ib2+tw>gTr@KVV.)zb<kC+ T5fW(MfZr^Uq3(-,`,4$9z E |2OWh较bffdU?hY ng]Ɏfh;_ɜͩN5n.HpOs{d[K9L}&A([ ͍cˍd92u$H.cy2OgBT&)ި,1l\N P2[ =s  ͦ;<"}H3qBw¤?B Ek|2( ᇊb5HPSSclN-dnYYk(q" (K5}8R& 6cLT731(b/X]?b8ٍ\JN[Hk`+&Xj""KOfKI"CfL-n1 \լ>M@}93b:?09R{z% "d0xTw}Aj>fQҬZ+Y7+kA/\RF_r6FOULoվ#LjèP(JHPI?/>D{MPhZu_ܒΑ_z&cc,9Ήx޷ i t gPhx#6#GZ9L4V`XRݎ(-|zhV8Kx [ko.vg6cOlE%['u p4BT4K/V8өİ-%Ff@nxzej>M2u_du4SSB{ݥROo5rFix_1x~BzU9y{r}B^{-W3CҾm,MVAm,ʽ2et&m29br|kKLLn̚0b?̙[޵RFt͈c$cVRL:Oߵ .˕A+l9`h:E0_8U@i7kft1^鳎/0]aP}\O 潨ؽ Q* =yOTC$xʞ29 lMјtU?k0~˦|Pl٣2H)@Ye6H3+ 7D fBgGk')pSj럱/%k ~&8 ѽZO&)ݒl_:C93*:/q YƃIL(eMuWެKPrx1tYݿ,v S ]5UM.W"4C-C3-K,AIr }pUM-#狏t\pˆN#ype`qE!{I, HdXnR$]_@/k!6sQ19m=o.\ ȗ޼$id0*P=p㛶XI\%t0s&~CM)DyA[GG]5z0{} "j0u/\@mic\2`˙oۂ4b`бs~d "vmU׎&! V88iuju2PJS(=te$l}%Qʌ/Srȏ$fvJΤS4֓?_TRB}77)ؑeN~̗ڒ5ʮc[X~򜪲^J&*@H#%qAҖ_I ߵ~VRN.ǝ-mAnKE7ZX 1l9(Tpo$Q~{ZGқ,Svɩ;㤛64x$sQ;Vnu n/7/K8ç)aFohhcq65s+4'̰"#9%B/E8E90 [-ռ΍=ki2YpJ2xl {6H⺻;7XSu⛮BYi tޔ* dڱvm s੠u5\ԢuњcE] kk(&M,"-ƒq{J)0f«eT^/ɞ1 ,x7֝wǖyN&P aJ6}>gnU?j$=xиBun6wq# )=ۍbyCpߢ9R4bN*̾vL<7 F "؍K>gDt4LƱQ6n $y@Rznhz4u WPuhTjԅ1+ā[,k>ŀ r<e$27aGaxQjUp}6fWhQ&Yhbi~D|/$ޖf^O/q@OGrK@EU,p2[jl&DɺqQjvړ^+]>P\<?sp7]N=G~TbXHvr\ YGT Rch]rUKvd }?im4h1{ta]` ̒`@TMB,C$u]v݁;SY?<%JEjwYmQ֔a9,A[&Z!ȏxϺ9M$+6dah/""}F(-U8CFӁD%LqR$h(6@ BVFvS4A\)*1N&'M̷`UzW9?]%6"h['fM㜌~i4Tqr=E_]>¿:VRg\ɝ0?c!!v]q>vS~eq:<rzjdVH6͸;)c.$xIHX-`qPb31l5*-KkcLj(q5~a Lkkg{Uk#wp4zt^ޖ=Eb:U 7@>ĻR*ޛ3o; c67K}{|DD/ #aX*R1S:#s^1/BκK"& sb/A??;G8*'&<"`I_=sS*bctZ[3JSķ9DiRCJq*95$acETW Vh +1D> d}D Lh6{#l VK̄ϯIQ{e]lM@oY#?a+:@LAtCXļӲ=lylVª]pF!V 7x[+l|Cl-T6Ұtcxsz8r:C5+6LulBmɛ3~eqȏYewV^cxl(oW])8,4tT PnO5y<(soTɅ.s*{1tFF/h~vPݑfTbCm*m(hT۷투@aG6 ~q[׼5p]'C bdv=BQ#VC㮼q֗Ļ`k$B{S-*NkW+Ox0S}8ZHYIGg !e.8fu'Ι DA6ʹ#+w}"4/,&F0Q 2azmڵ. 4W) \Bq׀Vق]kًɻ!D=ݛ* .@2eX+Ғ/P\;]NGx q4zEl^]Z &P};`;^EtcayŒޯi LLN:fAq|<KK#D) ܬOGE$utL<%HB^ +VmHZU'7U-?pȦA%!qT$ rJW/q<ʏ3zin !;fCa\ph¾ϢB&e{+;Y7*qdV‘UrXs?x<໢MjnboVWj'zz0\MA"k埁wB^bPB>O…]at/NuQ\kK/Q\fqE(Y?dސK9huWD+;99W h;0 a6Bf_g,f}b /e!,vW@iJKq^t[u]#,b{(4kc~@MJ@bG`60!(Ϥos\{+P1 z֌4VϘIxIlޕRT}NmJZbH6aw83㤨Wg5o# e2c+Sw1:r`\y䩱ݸB KշiI$TVf^#dklg 1 zEM Ϋ-5Whw5s/f6K}X˜ɗߗPE{A~WV@6vQ;3uZn j~3s0T:S'UU>uJ&0<56WT`3ʺ 'w\k8-Kדy*LJH Y[5ZNpBly;X2.+W 5f uoH T} ,1>^ UJŝ(nng9$U B q܏_j(~2ouaLbaw CO[a:\Ɛ5##2JP{+mdVaP[$O7pXsă{"VlJOG-$Wvqd?BZ^^r!aN?xtYrT<7<Q~PQbVh`T֟ʕ38:5鱥msHHd0|l`FS1Z;pc34wȰUXG:E#nܖEb~ >Ctaת A~ٿ@l ''ʺL/ 4ͅ,_U,e;wlMuf #bO@Za?߀:??2,DoLf o~OvK#WRW9&Ke$ ۵ L{w} 2!ֻ,yB( G'~89 ѵںp)`ёy@F `MW/._4Re iR"s %?Y8١"W1!;pOpo;k^0`-DP3 (QL?L.Ÿ&sZg,\QDsX*.k,}>+&o7jE8eςcQ,?Y6 B"Cж*!SZlv¾C뒅`{d=.èP9JD [?hxd]sƌ&XTi1Jl^pFJ fAfTs]w*'l~p6}B 1|t}MY}Ȕv Rk3chXբ~#+z&uu1=#&Bi&HŠ3B8-Svקq;WcӤmۑ*3ΠsSDLG@YP%rhBB˦ Š7U Ԇ~8pkޟ`,\L- *RN#ux;pՀw H"E>xx|8qm4/\Z=%fºۓ ,:)%Ha畟{͢L =OeM-/aMv3X{<)lUВ=7r@ |7JJn|[00`/!1mm lm >%B_kމ\PzlFEպnS`mm(_KAtFdJbo^K&/iaw}3c.r9-bYyj`?,/8V%D)O7~z{Muo1h}.{v#YA/q+6/Fm1䡮YZ ?+<4 K2{ƛ=mF1s_tюNxlt'B8 U)WqE + 463XK0 Fol,~J9p)۴j9J80w/T]ƦT/ w3]Y*r&IN=̵ml'hNm( <*0vS=確QA$5am@?Pc @. _}0/1n6w,~vi*l42D{!2av,uRoOW0F/"nOe_VRDdPdVi|d8d]]3-,By VI8E>Ԭ`QF%4H#FhNͰݸ)Qlt/a3y.o"̅Bգ}6> 8q0o}64<>Z3#1yKT>Me/Z׫q %w *aT=+RYy!!s4 VqvE gd`B^JaƫT3 MҠXC"{*-HA{TZr8'@朝G H,f~i )@6NJБ Ug_Je1ۙqH鿀Fٸ|;0a ~8&:$?+觅C3ZѰjaa{ڏ5=]ЋB뽨Q~܎zF(auk<1]Y"ؐ}xؓ({O7퍍:;:mzl &3WiN} 4Iovc~W'=C47 i7;̾fAС鰍'N5 lR!4e<x9mk,x6C6D ;+ڢ} W729#<T5WO\5o=[F(Mw7Qx̶$XAjIJc-i2ٶӔ bT;P=kKGM#k0ui6: NIm0J^RqrGҮCdu5 25Vb={\fЛIU42-G1bi}z{9:׻{}RrKgдm.`rT΀+Z:s콻Z?gnQ zrב~Z[T-M5A¯O1,çK'b2$f/uݣW'5iHSWZtz[<~{wŠ@@{ cI92 wqMoR#)/+b*pqwr9 FCSgq"ҟ}2'ߚ(:_To1(mFine/_ܵO 朂*_,YK]W+orZ(|(T,~Ci "NCIy3oNg`2Y.͂V5D]{`>gDM'_fr)#Z4qvxL-]l}K8r=RgEDۥeS_א.W b 1Y3\y˜5j>|0pkX& K@(lHLI^8P?GuzKlǢF>/x(GZ(d"(q3w> ]>Feu]#B洗.嶞qeE&?,`VQSĜxb&){x"ihFhn~`EWK'*i0\^\D^Xa2[ )+Xޙ4O-F4j'~tJQCxɑm "M޲nI c059ڵݱ\rslۧܰEW!z wH{y3D `A0 y$C~yO.("AI*`ٽ_U+մ ~Y4Z~h`0!Z1>\J|ʤ[[.&Y*$dŠSy}_{u-a2iRgO#`aN4Y(?@lGE>)z)fgƲ_4zqzvJ1+v2QN2 $."3&\.vԔT[Q2#tF9VlJPlvkўn1Pv%Ȓ"Ƀ7 MSw(bVs;3j9yPQvFa;0 "-[*rcĪc ;D ,B 0 5΅]vDLC%a{.~JcaQ } */![:6yLiQF, jvR({T9[Јajф~y}ɺ˒(ц;oozbQ)aA(AM(kj#n5!m7kqA e%Vq.j+T;=)A-Re((qhi{{beH1"ji&O~TämeK^d״qhRnB¾x`ǢZQtK;!9nCLoנ34/6G `!AXʦ5 "mɲW$ӮH-g5@+L(I{`rU%B v ٣\wQpuI@m=.EbJBbD֐tOZėr&6Åj`̶&HZ՟-@M,~&d"K"i+Xn.oǘ-,w噦Ʌ#&$`?ǐ8g6ۡ>b9V2mت[)vC2Y)k~O <]+4~Ocx4dՀH{NCC[Z#,CTY^, /2ma[DG, c[]d[cۦ@Xّ }ʩ|ӱ3c[r}l(2Zp>3F0vWު U}D,ҍ8L;b6ф^ 㮋R:̃,Qe]⩳HFsװ7fʀh®Yx ykT=oP=iwCCS(E]rlx]k)JV؇\y@u- YzT9̬*4g¬סbH$ĤX{>6VTDw$/>0e^l!%Dur$#(X=6>>z5/xZ7H2UWŇMDOr_n3I-!s{GA6('Hbf m+ӼA! c&yS1үk#XawJdbD\[ҦRDҸNjz"O9BN$:ݓ?lzA 7-JousF& -xo>1X7ؗ\V bz~is6[̅ K21vY+&MJ w{|!pʆ"S>v;dH=H0)(HEKx&ҥ`> Uh}5BK_E&93Qg|, _?P;s|Sr@W--;\TXs~cӛ8 f nO%QLG(Xмqkk{ʆZ6C[iqtɥeuUCn{;q e[,A d֑Ƅ-rv#is!s6dhIX8k q0"{@J l8^9j #f: ׸uOfL+CluoQDv3JkRiYXO/TWTb4t2*<79 Vgp΄QO{zc><=Wzi_rV@ _obȧNl\%TC]:ƘH;N./Ac)WZf Uh6?L<9L juz/T?C1l Fff JyM6p+xa ڌXwiq-ŨϲLqL,u|bq860l1ED#C]s5oh/a_98ubzLD@ς8}2f{fQ|ؚ d{HR574 e71qC2|gц۷iqHkAmMvϊ1z ̿1H|*q#0|QcTU$Sֽi5/11FJXur<{"Aؾr#.sكzZvt[8 uܮE+|ֳ<ƚċ浹J:|8NA!z=(,> VCݪ?~6} 3=ngf_d46+=~y33ZYT߭麟UjjݘM-z&}fs\dW} !@?Hɞb9 VIǧ\-DL=COG/wL1N1ez]PO %L^ 凰ŵ \HyJ+_ \3tufC*F.G7<31aQ6e%'EIĶ؄($flfg2ysx ά)vLhǿH#oo6\e&&Hs%f%)|8Dܖfˏ>Z49vA03'5YXLw-u+.۝bq ]lc)70ҫAXc3Lط${,pxaD2|D2Bn96(Bj9$n/- R\ɱlW9[) FbwV,$I@dX"R/Aj"MNemR3Hx'}PM'ovzI|"g5haiM4Up|߾Ձ!I>w8}\ .&+fIrnYxB4$LPaSntȇ4 䞿Vf[!ցfWd5`ZhO_Jh{hn(|@2)KδgŬV>Mߐ9g3y K9>} tc@~Ctx;(VDM^CYpbw7M0KUEr,åy[`S.h`+gj+(j} +̆Vf9vΌAa\RF ! RSmD=hmZ)2$)S2ہK:ƓDvrPL?a9C6TGk>e . ?]3F%敖H Hncἂ(Gv ;VeA O{-51gY^nf'E(iGzrN!ԈG_o[б Vt]]ë$+WD]#PTS% ]g͂@H`1- m|ovu-\r{Rm_N;+oS_kU3n>HU/ 9 ̰nLIo6ycGYbmRd}2$w[8o_>NjquG*WFvYC>F/~."/$({5JѧŽ!o9p ˈe_]E2p.Ct=@E!k󮦵;2q[r1:Q`XauƆ)sr8vLo> ^-OEr|F. X,exa½ f#G*`kʕVz'vyM0 HdzZI!3qUN?5A|3zUԐ7"O8I>`L'4G}4 7z'}ԍ =Ϗwzz)Hܭ7O* ^ NBlDH=Whx8uK@ #Qu{e)ok;z,7yf pְLG+$o=!wP~-ܔ-|\-ZX@ ] (8`L?[)5ނgWo\ x%!v/S1~(is]$]%$Pꚙ $"K(α yXaSnUCyYOˎҩB6DIytm5\6<, Z ky<,wସEpr 1uٷb8b)ęmhx w* c෫晋,dYU艽.Op'r2AD}Faezq+$Lُ0(`,h:Le!F !<{8Cx\E(1$F/`{C e$ Zk1Kw$ ,s {֓ѮE+ً@?9t_>ɟxӭwDÊHg12 =E܃Nq+ǁvVx5 Y#࿈\40r|9(J'(g D*oi4$Zu ȧx(7:+Iu[*ezԣEQW}{[\#јwPmځ.]EbEai+BqJ-${AƑqp%R :cCWQHcag[EdtIo"XR%M0 D|Tf:Α 3 " H|AIfrM6s' ><~2z6MvV\>DC&%1""n&7=G3CP:H#|6bGFIeȦT9 ^=g ,Sj<xV<#UZ$KNbw~-JѬKoK@#*ƠB9_O ,4^KI*!ʙKa& /_a('_t;k6E5$DA6%ظdNnh18 -b!@ւs [pƙkV0kwh7{zb1"|Fkr*!SZ!V2BdEE 6*RcԊe 0q́&;NCױ8g?X/Qn NbP5%ՍiiT>?㮋E *V2vR|9:fdVlJ2"68Yd_.N# I#4 Oÿ{gtx"z%I8&B"!X#{p.Q <7ETӜ%@nLM>a}Cw Wek4W/ Cx)O5cx6OɡGP]a]pNV.)J22W]8YƇ(j =3M97ryTSyT@7Pxſ? nDZF8JueGqb63'_OJ)c U+6O)Mf^y_w25gv]W]d7;|f+Gh@i_`3E%Y8"_q[o]q2Av%mf܊&Vrˬ]b AI3w3'؜wq73^l8*w5 uTsGD$j߸8L!n|Xfܴb~-p7I& _MؙphnG&'候#Ü::,EI ?3#7+,B/l*]^P,^M[)"Ť9ZzT%|_qBVHAI?YWb׿˅Rf} (4oC,͜PceϽU%a?!JC?@C1 &`*& AHw#2W2Ot=:9>y} WóŁ>Σ4SwOb7lbt yCԿ8 sȅblmXnZ?6$mV74Idb-g[+;ޔcF"R:HdN81o*~dҦh؄sV>{@ Ù/Wĝ/q&GSjsui|\Xu5c_F}`b'j* ޯh>W |D_"iExtR%iN[=& 5]"x'j O47&s7DX\=wxRrI̘xï<&gQHb<#ӑ~y7h3.lt^Λ4Cc *RЉm .#5:Ki|np<,ףJֱWS}i:7'WzKrJYmV!]-"ծHIrbJ{HS_9@F!+5Nŵ ((;UyDu˪dL{;} x2ƭ6 7GDԗ & .P$b^=no:Ye;JY#8'"f*&QD&s6CWdY"ҏյsѪYEAUT8qӼ6IGdЊ189'F>7b:S7GF&}NvJ7nHzj߫(&5[7g6S{D~*?",\䃧Cx;]ج;o_4"7 l-3陸 Nמ*DV(0%i XS$}!f[@!sr;)zQ{TOTv^2,9okdiBSUG8! cph:LH'{Ιo(V*'\A!d[Wb0_My^zԇ&\E:X驡sh 򏀗 CQˉ0ج]MLy`C/ L@yfL)dNMXVil#zʺV@raÓxR GH޴zˆ1/iʴLmEr0ۅ -@x*NXZU\SDZ45Os@OBnzO`/c0;Ggv{ Ԃ (@TEꙧH5%*RX&ͼ쿓+0"4˲d2qj'2@=# B )sO#!U{1,%5T " +G`x.sNGpoqe{K,8X"`1ZԛY5q~g1ǭq).lF''/,qk#3 ޳@EޱA JgEMUfLߜ)ΧZnw߉$p{WZƘ|.M&Rg礋,G$zT%Ij_A#ub (P7}4,y+9PU_JܞF)tl4bSr7m_%{07ʒ />L8RӘZq:I[Yǭ[m7q%l||. SGKZ1nb2\J)~r9N2.Ï\[?G%Y_*Qm64Gv9I.Id_oYwtQc® uZD@} Nhd i=Ux8;ғ~1 0i >Ȑzx|*=]oi~nXxiJ]D$֤psTĐ:#bUOziQ( qE 2%yE ل/{>rq- +2 }1II@S'*RS1;KKh׼pQ/S29!2c^YkWh*Y>p1S[!1ɑov(?Ȏb- K@} tH"v .FAå|Zpo$d.¹Uʸ`lGȗa39x%GJ]:uߋcO[}Qe"+&*L洝 L2"?m8=,IJl8}x*2@5] BӘ=ms:{r2$҅tiqңjLLp۶~͜rycެ>qI}ȑW(Οߝ{">eKn@|GdgjDOamԡ#H J29z߷ȭvpssSJ;@SmWSc;N5&ޏ˧8wKzځp=hl>@spЭUֳ{U垉s=6us/cC7p@8 VgHSs!&M?l6'$S2&F89לaw0y )>z7204<709f?:uK=gm52W-脏F~!s׊ϧkf͹)Mo^k%79h=س"{ˆ)r~K7@>Ԓҳ%dpy9HBplT7spXi?ugLTR!r=% s-+-HDHy`~9-JUbަ큳;o P|lV+p;Ђԑ6ybhNW)sʾVѽĨRv+^5IE ^SdCܞE&Q+q1:l%38nU(4.sYt Mֆ(tQ_0]n[z{FeT2:R _hd@ }T , gmWC|S7bal/8.ΈfI؁<ϩn!7Um Ո?.Flw>t ٍ-@%ϮndpkS ̘VoѴ t]pikPmOQ.4 bʅ iѽm5AVxP -EĬ?yT@u8|R[5Z21aǛ$!턵`1^7r r>ap(pM7տ%vdؓX1qgnyK y77b4i RBhE3RO JzwΨKLؿn(c3WS,Aayߟ~%}9-@j>15PF䅔a`eD{f~UkrLq:LdgT^>ϱ$YSN-߅Vy߿~9yD^>{Ks;z&qk3kҌ@6Z׽P4Gc֪kvTt `q!v̿Z=&-TtdjW]kBFTu|< Ld<]r_]p 7 ҁ)VosLi4r6[Z4OlGĊ{6N`]6n١|Kזo )]׉D"}:]^[s=`CZ]C顠<&XTpSLB:4ߐd)މx3E3fhAB n 5j"I > j ->)Ca\CGe d1W>|I~V̞z&+k*tc+6HD3Yz3qt\LŤӣ|]swpvvآ=ag2#;+WK;-r ac{]FLB껖#pwV(y[W9 ;=أۅ@I?z7.؆95{hRxr#v$PhNwvWhY>3K%XD(g^{:y$g[1Q.&$:,Cx9ڽ>Ldjeፐ3zS[j [I#"a<DWʆB=r,w .:Һ\jwcNaQ8lHUH ,Pz`$zPx90r9VS*1orZ33X SON @%~Fό7!7M= mѼS \s|#tN6^}QtEE~xi n nb^ 2Rc~fb ms0>ꋈ^=vGY' <15<=%j1Qt]2 -/H'CL( +VRh(@Ze^'}ZyfL/8CZ9qZYszR晍"*1{ ;9 5xQ9Jˇ(zH`(tr^?o2sWc O2L/Ep:D 3SV \M#H4Y϶>̵K0fpy~aaNwv$W3*ܵIұ\},0T̶G&?}\lo)>̜~"v8fiٝϬi2K\l>ŝ*M5K;$C*a%ߪ̏lƃŵedaNQiʲ^Z;8VFsA#9l#glm\O/JYnMğom, U>#H/R9KҌK'~"Bx/&9>I,}8Xx4w.gILi7s4NC]/l|dB6ɑڐWB.=M%A䢷k)0UDcB,}|8+ͺrv޹IU|3?z +(X>hH{4S b&pS'}0rkhAffcr*N,qLWy^6@9}#6T!$4C;R PZnCj.ZZO{B8b X 0f5EM(d@ !PO3E"aIBO< {}.2R3 *(w ":VB_ ۊh[;/A{Hq8Ut/'Uqclg/gOkQi@Ɗ1nC$+LԑEDZiD2cu+`J֌|i R 0Em < 7 PxGsH{tw}nt9g-Humrt ',BSVP FZ G5tTB `\@ ;gR]?jpyUL7 ~)K({n*]WA WBhcsN@o7yl=f|$L[Ϳ),oTzD#Xi"v+pe yZ%Y3HOTfen&uF*lfSՎt΄8H\%6M ˠ[$T !;@( dQktom ,1so|Qd'W S{¾.rl,Pfo(I3ZvLI,/ VoE6p0^; O`U /pC&M_xc&SmΌɌ۾0E KLJznV}8Fg6ʎ5i!ӴUC{\X<4=܍f PVOB$@]by@xlu8/cnLm0ḁQ.IX]/VyOzvs#ZkHм?z)8pa4P? -um.^s1;ATp6GC9w4~$a֪T:ى G4 qcy\h7r0jUwO;x/wiDsFs3^8 RX<'ϖb O-awWRL#\XˍB#0BdWfYy@VO,ɂpUDL!Hq/GiwR^(u)1lgCAXV|MT$xCoZb_=fDUS,U^P H}ؙEF&2T͈I֜6NI8lsw62ξM3=. D_y , [e 1WD /ɀJ\Fnw|oCI9x>G H1q5c37X&K ~10 (qAg, juUܨ[թn/`v~,Wإh4fyS:G+<\D-Cʐ%&Akht}mA"‹($wuU@pdU3%o-X{v)VzG[/14xrCxȅu*ɎJW\1ShnPB򤾹5x_p52h֌ߚlB9AJy(L ]Xp*Ѻ>d,h@q;n;b?@xH5Lw^70 ULNT4I\m E.ٶq%6 ,˿𦗚^F᠍\. idu4"L + TVYWΪDteW[Cڒߋ@>O5]yO7CDu%<ڈ{"NVPpC1;x O% vл68\{QK*x+1:֤p|/$Iu (XkG@9{هq' QbJEJ(*撎k  wqv} e|"4^&ں'bMzr6R8ƢV`LNӓ7za[(wA.,46Im 6a1.Ixuj$G٬c㟪E Ҽ/f4)A)Fur^u!zV>%'&y@jwɳs$dQ[*Dr 8vKBr+?(F[" „"FݽF|R:a`q_}Y%m;E:wyǷFT,aD~_8wt]\}W8^i[ٖ<8Līںg6~B5x`^? mxI.w5ng׍N*rTW[2ИςⱾ)_dsNK@Oar[aR&je(bdj816Z#i #7qdGGrQJ*a|Ab7˯(tOBvp?wWL;.݌; 3le\n.2JDpճ0b?`zt_/>.."4 Q^~?4Rx nZ#F]rB@P_ y?5G34zAʲ,m-ۘ_*yvp ^e4~}њɂdim2-e\5M:5b#%"?d;¯KFڹF`zF by4 Q΁vi 岕--*%o:cFg WNmvxI׬{"/$%s{ǹstr[0!*t- v4BBYThMS_[Vҍ^()7^8n $?執\L]+dŷUşGrv$ j\nso&h~ĝueMCdhb6!CU~"OIzKGkMBfmau=<FԾFPb:x Q~fwlI{Y=us+ۻ0 wo.;9d )o%~xm#H^zmKk ^lު`-Ԡ\ȶíG͹ 5b@SX\gE쌚]صMc-mIe΅ꜘ0!9F)hVD(udn!,ˁ/£N9ZJY'ՙD+%A|O:mT!Ke;؎`7bbBq*\;a~5is(Uw;7!w/CC2m\,L4ܨ/54s ~Ma6A숫q ؎0w7 A4vmڬYj#p-W%q'G\P؞y[x;C5(E0fşuE4}-^h XI%L[Ѧk2U9'n7}p )Xp،hZё"w dH{ddʺkG7^B7{p ϯL=썅|F=qdItBѝU%T!ju,:]&c(@U6./Z1_29-IC}zq}9e 'ACvȋD&KSXƢH]v-dpNuXt1BIq{^0GҮ;[W;k Q L d H"2D{JC.-L-\'[$E5Ӈ69n);0r/wƈĮJ˄JL=L6d=3)r0]|>L,dBֽnDO>T("3G)*Vu{K>=<.KbW ydGu MkmS$9xOBKL͓"u?~|9NDιg?$h6`KPQG]mr&&{QSkć.&ܼ7H(s:"Nט:'6a5* JG#|/*~VpǜR{T1.ܭ^>PsW{T ^.;7x'z&s'u:$ Cvěc1`Ӛ؃3W,w07J0c&.@P7 q>d3˱R8B:}[dpgS 7QΖwyްdC, =T)z~howcH63JLf LE,s*du&`8H x%/ =O#qg3(6uM]AHR6bw31y<%{s_?kk7_oFUQsWDg2 /G=>94:b&5RȋD՝w}Q?j@3Tav? 6IPf]EhV ld5AI28 gWL32&\FKMr{A3f{k2mA3RmM$}ܻ#MBnn[׏%@7{)11 X=*kjյ9#nxt<5jȞbZ"ǯ~s2^9E2S$#l8L~/0tPT}+wʮМ=B]w#FWP.mQ =l^V*Py&BXhNa0X G.Ff εf9rAcIu?cf $$ՠZ{̏#,ø Ʉ zxF i @E[A)M {=I<^៦AQ:&مq̾2|+Bv~@1-2&ݰMe1L5ƜiEX¼ےB ţxPi߽=Y:xܲԚgzGbCs:}Xr\P~6)4Š2[bCwK>K영a2Lws} NSdn$vYVfZl }'DU 0taa-QdM#k8YpQ=M-۴:\Ul88JU*JbbV2A8U~ YXݢN_,Ϻ"W˝$e"6ӢMp}v;X=ږu =;2=wDdzVOgQ#%LY_`Bh=zbBFe֗DH.:^Rh d[c89:0 u}dzԫ(8Df6% U#nF,HEhNEø$Cۿ/lk"}V ?`L.`G2Yۥl36дJ\јDr7;é|[cDyq0_i%0~ڄeq، =Y*˴Sl 8,"umMsr>_}z<~ YO y/]Tn e  ?eV=6*M~7#ISn6ZSo;U0GX8bͿor0e -d5d%DV*NX 5UZcIi% &ٰT7 a@47unl%!omQ~nVH6 4;7DFNaq\#2i,PGIU&4GCRgn{STIKoK+,d7HEuwjܩDpEA S([ ybdq/UYo׹y GlD؍CDmt(0v16/bu3O6\Qt"W]OH}m>} z¦~ \487mɀ\)V_ս,+4Ie  ]@El}9ݚ7؞ oxE⑫@#,Hpf3D &-H 953TM}BVu]n{\5(juz?[@AϛHswEGʿ-ydSpHgd }}n3l$բzJ^F! =L*HaW:Ӌ=4UDd3K"Gn'ueǨ6XQ_2kµ9ZJV@4:7覢1ښߴm=}ܑ~ OkڠL|]Ϯ(apM[|_IJ~X~O`$ϸ; ϙ|#I^FЍQ\Wx"$둞lE53/ڞyjYu"Y tu(_C}D=u(qYQo:ӠXϢ _(KDٞ8EH먈>"a{cO绂>etΡ73x86;Fk)؍ʐͨS+ "+j$ס}QrVsgW%*.֠y *k@9,'6Z7 Al=mcI6̌ZF] ss0W.g!Zy"bL o4.-`e>1nh5I6w &d.f2NfùF JL\J=a9}1$`T=$m (g{,wR_9Jfpjф<[/2"s[ @xaOo~ urE @.!kDarFN'e iJg„zsNQFs"D-wňrSq.FYm)@)&VZ#=3FC*B5nP@CQҝ'+I0ܠJT'q! 5Y^`yyTƟl?ypJ%-c*Uj%P[oGdWn7ڰm׏I݄e~ rqlP  J>&`+1A) /2(R`h|@LScK#01N\-]"`3墮'牘SO~ڜyN*"s_~&șES3$O}(f+Ef\lIy";h t+Og,&;Ѻ:nL6uFĶ&U̴={ cjpmW3HBi&Y.&L }IFV-9]CRs8#wĨ4W 3fԱT?0PX'C<ڌ\; B=C+Y/yF4L{{~d2:QP?QG$w+x_:w(uugTWus8k%k55o"cUvb썊UԆ<@_KkgrJ@U8lHR4-R᪖RȨ qТ>Q33| ]?C.Ct6k+ $I[,KTǖp|T;96'/܉Wn [TByj?v:ԪV}PȃÈ ȽƤRaNq9f7>v~7Ce-تs1a0E_hݑqsX]I:LSXK3I Q>zaK(ŎBf'&R:4}F} K(02 y%}&֯^G0-;z?B/(j.9tB<$q PI).H ؼw"3+JHS۵\¶ߖl܈׋lR@m"wQJn!K& PByP9.l8\mz'{&ڛB`քAto %HWg;CG'/6%n!_a$<BFRIoV>U%0֫X G^a'qZ|EM͎i/ڲYn>&!LwdT\Dn5Db;R0as<$D%? cK^;۝'j5oIdfcѳ|@^4>)G FnC$=VԐ?^5U"eIvQQ,#: )$t¥(^ɩJ}cPuhkP.RVyr7I \LCb]_l*~ O20:+\vJ ϥ<Є'HF.|8.|cM–^ cA;v*O吞ݑ`}$aH5k'rdqUo>q(>/ _4xz󯤞UPBF^qԙCKJCylUQ@MX)NraBa#vbV@LJۅkEn%rZ85䵊- MtZ V @kPjTոõGs/"ZZöD04~Qt?ԅgԒ-ܴE?(Y9vE< p .a^sapnȱnG>4#W jR&!J΁ i4qcV:cn%`kV;dC)BրL/x-~dqfd}qt'Dh)ork5duJE2 q3$ޥd˓-VpGgx㴧oy4(eG'5rM06}(=(Yt7X<(\Gcopa ʭ3 QԲdCD2rJJKj!E Vkorz72 Ls:: _MMĒTh4u`I#e|:\me,Qv _;Dos&hjx}"\6znK`y\VD6aQcLZ haFJrZ 0N_#GQZ=Wa:c@%es8n"afP<U{HG~O DuY*' Hn8#P0@&[sq9k6,5=&4ufSaiYn'Kk& 7jDb/U\ѴϞa@m_.IS%B;gic^U^*+&K1?uS,X8<.r,#'?,I͎Au\gyK ˱ks|kC z[Gϟh}ZWn(ryy3Ee6ON6\y`;O_nf?֣]d%9X x8ḅV!/ɰy(d izh+fh`Ϳs=)FĻn=1_99WTκ Z${x6=)\:(n_qcc:BP+t0h if F] !єq돰O]]ҽJ՜Sҵh6L[zz*MM;$40]9hD+W~;Tz(-Q:͠a AVMI u0v\4yơH:`WZ5͞Tzo7T;tb#=HvfKϥͩ:;bx&bBrBdMB).~tr5i[`͹`?G\V?&.i[dD-+UQz:Q:ȵ3Z3@&1v|)|){Z.*% hw8@D}6ցyB)A7s &/"5gt9& ؜uӾv*OVvC߭,B&N'2 Y  ,9k$>(P>B{)uXiV.KPx"+QM2iիtV,<2P9TG6JP`Pm&އ~f-%럒6}h>J_@G}(h$XV8oo&N\ xcW"Y//ߠ`)e0 +k~[\ˠu&Fa ؈OK"EQ'xCrM.DsX\n[[+˹~ (ЋYRgıe;?ٷy36eJMÖ)=*ꒁ.jZ֤g,Q&ۅ&y݆-kN ϑ~5p!tSf?4 D+m.5U K*X5`.p2iG"@@re8ɎW2lgХs#xKWye@.ir"ܳd\ZF  b=P YV]CYkXEdvϬ!HdNd_5g3=K6بkT>6<#~`1'S -?vI)TS.n4P&RmdFDf)BA-A4b,\4C tJ<5*LlI}֤Dn2ˑY#B]45<00ѩj2֊lΞ ZsS D2% FyPZ9a9LjsJYyX {N6ksZN\ޒQ0|yCS==PBfā9M3]^4`jAJ*saLV~/FaZjD?LYۖZK:h\sUɔ=Ry1wSmoOr6FWø-<9BN̋ S|1 w*U;Z kr(ͥ[|ݤ +/TxpzOqQ6 p0~#ቤ=,Ĩ*T ˦UYxrNuAȨ0W!~ ,nIy pm΋VLihT:Bh֠KyoƁ!>~xݢQ{Mtǖ#ƴl/ "D=їqs[ylrYhٟ ؽO7;rqv4Rd9# $5P#s$=`%I)uKyX|r?-QXsvuNJN`73`)b9/|QwHSTYni_p:mܲ8N`UmvVdu]q6]ᚥ6Mݚ&|f>y٠.7aѹ/ڤv;X^{C۳"+|F#rnx ŪkKԉ2AX4[ '~wc#WH}D;ɼ҇*ښ┍(R9͗>y`S Yc9mw;|j^V}jL"f,](s ag4(]L9#69cn|$Cē"pJ _h9/޳g♲h635#;+.Y^9okՓ~ErP,Sc Μý0X^,~5 VT٦\gJH>|7.0Ml7`UβD͊=RpV5ڜ 5 6vz=K~d)Y#7q8\E X^fYO2A5&Lfē܅xH@hW6 qP,Qg![$W4`:ʭK XB+#^ c~H+ Z6 )Xaɵ%1 FNr']{D'LfsoXH0~J: ebwVGE$f̃*q $ŧ* (es#t$Z]=`=1Z<=J=Xו.5'َmNB<)`"> U<;+ƋẃNka.?fmg4Ke ?H2XIVMFk$phtUFZ*Yǃ턚I9~+zςa(jgy͢^&YHp$kCq#gV9ÇX^p|"B;tVck:A!)) к-lt꟪(Ld h^PrrL~&[=rB>gfk5|%-J";WUc+ Ldr '.zBXc@D/rT3 gpapvZzjR`GA%3zyvM" ᕣq(2x"o\#饾Nn~M!< Gͯ/Ś<(w{n(:n$rojn.啒[MXA)[KWgYl)i~um=E!ǷBO`5*[|?[t46sO&EnBXwvVڔY.eS^Lt(m߃~㒱Z r6C ߍ6⭣x)Xci!@zqj== S,1Jn3s^jĄ1Z؜J!{qKשyImcN{% &m8z|Lt [.TuiC~I.G⾃$Jҷ|g~&նMnH W4l2FZNJ1%*qee+&s5Bo y fv$0w|4]S$-/|0l}DUtx^?n)u ٿswث*O(Њ Pͱ`]y !yQƈZn?N{a$pmI^z뚪!ti 3Gg4l?GFpIYQƒd nObeL:3p5̚Y$3y!s ^zFW<ގ6ɐ:#&yd=@vDf>tkJmh3jo-"u֩7Ri:'ǧ1I})JD HQ߿xِ 2 !/4l_Nb6OG~c)]EPU\(NF\mBz)0QSB2Ph1/.XךS~e C5+_.FGm>b'דzܫ=;ijf m&Mv+Flӝ NޱL V|Ktl:@C{;v}]AQ+W` =!ϲ(g+W5TDGsc?d*ER[z L4|U9p, 45Zxo,@Sg%_4K/9ށ&2!@NDA{ܢA<ph`Ð4#e;*&i/IQȮ:^JThJ T4"^XRL4OЖf*e:&G#l8;Ҡ؞A>N+kTÞy8Z%I k_$#0k}Dh $$:yn_t-{@AW?R9\x;)Ri80Ǧ,O;Zp0,m_dX<0L0ڸݱHP룛,am+U%G>Z`YkAyPgPDeVw܉UuVY s=,/; -sG<6(7Cs\OĤɢ i GI~>V~NV#0 ﵗtqIl ş=9Ģ&jsg }/DNjlO tzqvΧraKMs3ov:vPu EvQ,8KPe47PXsj Ѕ13x c;Aj59$'LJe Fg4ħ(& ;L0ءUGFWh ? *GJ_{͕ W(Df/H#lf' ]1F=dLDɰq3|Nf؎X0)p?k|W#+VZ6ɕ4ydy?c?m$(^];K?NetXh&j #u  ZAYqpi&_^Wq QzWxLlAHF}փ~$L3u @q"c $84/\=J[ņ8~OS{a5H¶ztrfPJѹF|n8dCTbDgLSeb-R3+D&@<](VXbYtōDO|&f ˷ZۆJü"4mJ~ޛPx`:mC,x@m;\ Җɷ"+5i'*x~Aᑶ_05%*[ p҉Zh:xDWJ=0m5]FCeR:vgq7 T=Keڥb~|Lnf0l$&T$V}JuVXfٽd$_S?Q-hd!7>2T@L*4j7b{~rR.zr\. n,U9.xfC05]_ CqNGuwdjLQ_Jt 3g}I"Q1,n6+^ؓÚ+iFe`hv#M|7(zT~2qA"[U!69, ʡ|-|&՘`ة+7Nl ϖn(Im#;yqdpId:Qtϑ^N eJ;@Fi'DBZ8g h+zduJ?cӹ}%> J+H34Hfu0g~XR!,0㞑`:D8"ɿRet~ \H@JaS3X@=ĹLt)ኩqׄ#qqX#skyYͦ^%)^T[d{[UV2WQh@Iu_ L1&։KwQ~ #[>e \n)7YRzU!htp Φ"m8M&tT dȞT{Yj{)2q8Ǣ 4Gs=Z-0X+ys76=^E4D#~J{<ѡ#L^8"'qaSI;ߩ/GQg+deR86gr(8 `\Y/Mb9DY#qOǾt0J+`1m3L3 ]9gfC~`S*:gi$0 OuY^;{ʔ.s#|[}͓Ss16*^;+Z_GM5tnXL +{zCq qUr/@֞xU $70U}wP+<>Wh>+r9UmtǛ4]a<~QbqIK֛.aT~A)+(ok墵/j7 J6ߦqV*/E(\wV?<047ھvE! 9wW!C@`(% 'S҆໥T1|z@ X&+>@߼xji֧Ms2w}Wgt(q8!FY]HKA!)-odȿ Vճ;$ (M}^>NU΄IAۚQԴ?xT"vƐj_\3A_:.4o%,x2}obWmYP)dlTyz$i1Rmu*3 ~S,׾}\{߲D)~ 4(_U*#s,Rl@li{dD4a5 M⫒'>}!0u Es@j { lkp-^A$ѳu IZɸ)~5 =ˉொ-g1Tmc4KZ=7me.H8a &^O1>o 2*<;a~"~4< ҄DpgG{eꊑ[wsM׏..D* l'tx߶!-tz8 <0'˶ғ=ju۵fI.Cx+5WS Ui;z`u'E5b1p(=fn8Ƚ@NƜ j#k1>Gtឡb?f~n(&=:L&.q 4Oru*75P{lkW.\"4 l!J90Խ}CxP ׶EzEz=F+Xlg.s|;氐v @7 ȒmWֺbe=T{fӱ$-j2(&6cC% PW` ]C lHQnyZu( IPWفk>Ƣ ru愶*4auaI8IoEhW~Taz n2AβR5<9˕  ~fl6DĂ?zluf{Xsؑ-4 "N)[4vтW٫au*}d_ty |Sgu3d@{k HA£H9נrZM92t+`}aF~]ʔZ^UG* T2? ;pD@J Q\}4]ۤ8Ǡ6\R|B ͌rAhN.v/mgك'L~_4*DJIf'Կ+wmFt: NbQ:1~!İ9{ MDžĆbI,\D@Ee3ed^cͩ- EYc/715C-&) uE$ I.u[ 9ȋ6܆^sTLTџ#qQ>^ ^EIZvҴQh0l0+f3irgVtƋNП>C* iQȫf52jÄBǜ\Xɽb6Xv:iDEISIKFB1gv0X:N}r(Brw>)GkXaR: Cfۚ3s&B~jZa뇑D|7(온I)3g9XĤb>Pix_ V9 |{Ȭ-颥Gg$ A%MR Uс!S5j%[bsHCfЖQx5]VtMbVF]~&].Zi~i٤6;?~1iqaşyy98?rWy34/$&/ῒNsGYN2pt /_kszM.D$L}ڠ-u؟A'r1'L>a,?ڀ {aUP E'k(N.+7 }ߒ:#ZyjZpZHHu PpJoARH#xF5PM u ^8ytx뿵ÁoLdg" mq}$Q^up`ٚ f#[D~T8ʝgda 32Zh UG:ZgZiJGW)̾߁6.w; xOS-h\!&=QZԓPZ|~{ m!fX|b?'9Ľ'FQTg^Cz/(B먋\ Rc%Y ԟgC+w/'LvwbϹ5sc PN0}G.a+xvk>|gϰC>ENpL`p R,gF"+zU:*^Yr7 j8 ?zDnCcqHˍK)TeK)%1J/~)a0*"ˈlD Mpօ$]R X!\ҷ8?9Kn'ܩKk̤ Ljѩ#kQ ]xŒdرb_F++WE9ACDزRLff1~1A_~yXĶKN -IJƳU"5'uEzm}Deqm d{?'#STmА9LRDmE0M@JB1*rB鑋 :LT,QaaP,%M._K `搬V9{m;L*zGΑ!پUD;>}lkF?>/oݒu4jMuFpI޼dwf.iƑF 8_eI R#(VowLnt.|fʨ#wx`! :V&c|[3.$,D>+4==>SSR*zi%=qE/2hƣp.}o!>ߡw?\{@}[Baѫi[2Ŵ u|۞B$'HSph̿6U q{ڨSσj'\IÆ ?bBQBQ^vWcs^UBQ)K#:Nw_ 5;9?-B(f.kCk394AY1az GۭHE|lqecbZ9t* {JymǦ.W `U$2hGG,Jw%p@$!ض wbMAns2ē ĮLb 5N Yl1skDŠ|V.Փ.tpٰ_a_dp]l21.n&}+{5}0{ph $5jQ-hDJJ/%*g!OZ.EpLf>>X?Qi?ُwk TkCm:xxFIVژ=o=PB\6.Ovc8{VQ%i7<b`wZxx`6#)%OfVYC *(~_6DQ iVjy\Fv(>QMJTRm8_+ KNJ&g.M}ߜIn\$=bW1ehtx=bös㋷J.~VP}bGmB}tʂa8m8Ā4xr_ح |)dv mՌd&!`ԡz`t&M} %h t\D^/F6!%*u0{>c!3%n+v=pdDMʡs"1 dvroM&Jң*Cݦx0~9v.Оwg zhs\'rd0ֺ G% GjI|VXے:)0F3J=\:w̝uP':``>9ƍG 7㚴MhC dM@N{mM_B)w #US|㘁7٦t<\T\6&D\6w:%:0]+gpU<7r.y}cffIf&wbvDg6{j7L' iNd.LЫB;-i8~pasAuwٍv>yM>ssXR d٠DxzmdYCl>'7ZR=G,75 womث06z aC'{sT~ȵeT2;U/Oˡ*K4/W2ۄ@xtV)m5c0jd2ݺ'4Y> пAtfMlYōAe/Ob1P0ԸhL)%Ydu%K(6K;9qzE$ X$ƨa_C/XD!|aArE$Smi;$G f?Td7jfچȠ&3fG}&WgޛNB ;ډ-Q2MySee|d-JUsu{z3-a:S)7?q [#fk$]"6B=dqIJ݊2Y+DZj^ζEؼ"Dw0sV4}ܔZ?Q3K[0$-*fhς|#JV.l*f^z$/lcZ^Jsk(m e!cGcUKIO&]bb$ T*`#*_kŘT ֣#ş|)& *T1)Y8HNwVjW#hʘa[˾rF:IJ;8dV)n4MYÇx3 \"Ћlv1ԉC>5(Wtҏ .bb FkٍjH~Ue2) fHkhk.g_2C3wv^;*hF̍Z~^XcL|Hol*#G wطs/d{@|24H+$rAE WXSeqqFŞQn.yHI ̏b!Q}Dc@cU>#M`+c\4^9^DHTײEM?@"ښ,z혦[U;.gwΎ'C y"liK"(i=bH;M(A_|{y#yMW֥IC chW]fbE˗Q-yJ.ty)r B!PV>V,?${]jF{@Y3t$ve̱a7)̸4+Em=-5kʥL|(AнvX&8{wК,([iHHG)+Sƌ4K隕hyB 0QFYu4jCh1ز,So\oU-o̵n=VwkQia({V[ҼT KFlRXjbC6 Hm]ΏL^Ivj%CZټ.rtHav$&}j"QIzXt-Jzpӆ FRn8}R}#6"Yh=*(Bʍ=AR&浊=<+F#D{ 1LweDK堭Ku><>$xEؾ/UAlK{v*YND]#Kc -@ƲWՉRt'BKڒ Zem03nޙP7G!i0!vzۙ6O@D2D8+{o h& TktLOhYC ӏk;o[ [MYzyu ܳ{pL+"wBɎ )ˣ6N|ͺa(+P{|1 HEyRQ=^(ca!rv1s#cȮ?LWmF_Aͤj^g"a @>F Jy&Z.Za`O ı%Ʀ֛,SW_GB\i[2854Bt&ؙRviϞo` a$7FOGЭ2jFXȠ-Ƚ)z/tn0RJ{UEHhMut?H܂6qES(dYR@?>zbz`9nU,YU ?2g7 dۼe<7 a<:Pa9Ǘ_ȧK)JL$Gm&юPGA7R-!>jª 2>C-ֳܵo}Ab!R[Xu)qRyfgT. ρ# D+]x'Ɯ[`gg |T0m,]B.}Hm1/zG#{lED: -ST08hQᄂ.(rzLkDۊX ^Պ$U }l>;|Z(SWA݈!Ƹ3 f[@7Qf  Qk .Kr;RE}\7u|ߎ؝b,G:>lcÝE/E.v2P ¿=T.|=7N pl;-k=nvtHcOS>=Mu/W:nM'.\ . 5[fÅzwp6?VPHw23f@3|:y)XE`d;zR 7/B :CvB:qa3jݾXD͇j9yy7Ěט Z=׎/ ʋͱޯH۪o|!p^2h =Zkm>Σ|ɩ$ZuQZmJ>6 ʾ,(!*, D{՞~7pus⭡\@$*6Aһ һ$Q[ =M`bhn3ѡ@}|E9ŠY-?IBiUNHɻ>`f)Nkvbل,Ea^tϽ]&:=(w׭nW>K_׫a:i`&ܣ:'{;/YmY2UِUHԋmsE't .gJ L|1%㚢b9hBo{Bex3v>6>F&K3Lf(02ү0@u7oIԫ?/NRXyDN:`5ߜ%t2['?{Lkvj9fcW(z]K7 .o(!`w3s WF Us.[5G^aMJWJcCU֣#p?V׾٩`}Gg>dRn!5%/h3J]ؑ}j%8;]B7kQ\Vֺh+QSDE$Q$Rޯ˧$/2}2R-5`K]Dk IC)^yTf=3wنb. B9mǫ-&4#2DjI+>Xl6 wzBU"1>J# d?Oj68;n~NJ/Em=G GNpð2=}hVWeZ!@J#cC/\@ 4mI%Pt>J@\ TGRxZʋ.ۄm,B\Q@\nKd7uS/;#\{I7"FxD++Qn{C&>ɐ:zL8ՍjS9 lZ} #eZma *xkd`CxFN|KVdݩVhX41ӆuuAQiY"V:Z"?ӻ(ȕ~P0#Ii#q`-#듲1O0+lwoڮU|4~*8%02F"BBI=bM6.PXkܖ*A G['8F( Khq>W<_986:[0|hz ,gni @h8)peUa` f$X3,PdnǶ!b|;‹9k ݸ@cee9 gV&b0|ƶ=C:굓(uq2*8fiA %~jaGyY m%ڑJw0a(9%jE"ܵ}ZC@vco\S\Um0 nl N9-t}EFC8DłJxQ.TR`M9?{1(X_w݁jc&@X3|)pGK^M!M׍D:ZVnƺ+A21p{nu_{ GVa50n26mmG8<6l&՝*ׁq9FthB6x2 &W*h)D3MA-=7,;yw m"~EJ|%w2st"+/k㍂ GG UycAzVOyvZAwc z^vOr^c},#_VcFLX",0H}V7D{;܊ԅ's ^)޺ەCkˁQ؀JT ,(c[|l1C&Hߪ * O8l׆ e_C /jʱN7\]Rz~MOa`0j 4k e[Z sepHG Č1XZO;dذN6UK$`^lgGp9ެ,;Cq$/]$Nۣvg՚yĻÓ*D6cBXDY9D8/0,( .<,O7tpX"ф̹K~;:4D-Ƞ0ţ\mnO)yX g?~n7) Z~c9O$#5QTrNJ.bp:L")ƬZ2*eOLԥy `sb$\ܶq*޳7+}G( U1Ѻ%9`F4= */t\q_+?_n;L U) =1l 78K:ÙAЍV-+kygX* 1|$Tn\Gk & HD߳Xz -D䎹+3QЊ= 1%6sX}i[Yqtv;3]RWxlh6iTuZP_$3U,ߐk"+g0KP*rՒ@0% -%UP[HNYϾQv؉A l w@)D4#N_Kie 90]+~|{dQWK) bO}io_&ܘA@ణI7HС;bXq=w6s_-;'d5T#@l}:腮sw>鐬ڒ S`h x5|ȣݜ <L Ku[ .y. :хIT~7_xnIDPup6cZqQG3k ht*LMM^ ɚ65=e08p49.a<,/_.g41㷠nM['{;%\(9 x K0es=.F e[㾰CSOY ~hQYy99`C=,0Be]E{ )]6tXՈO,1 G5SNq#ԐlߟJrekif_YiHcr? h %92F?a~u='>#trvzI Ǥcġ(rlYz0?[ǁɸm]SZf٤aœV!V3q`~jgh~U, t-KMf3kU*mD`M!\_ܣ@Ìxe:cڲ ef6E9͠k@;أէ85GҶ(+𕆠z"L PdsA<% u%\@럘3pG5m,axxFwի̂Z 'nzlS)_,X7,.cU$炉vw!?߁ˆ~UzwҪ;v^<(Zbf)9tƻ^o̾0Lհ@K~bu(nqzZޚaVC~iDJpvӁMV3xuf mx+$lOKKk!w_ujGEzy&]B7uJY`e+t%¨|dO1ÚcWZ nזM }"zM/QDߠw"t IZmllJ~g' $;ٔ1:cWNI 1;v%;a 8s<\tDFzb{ׄ'" sRXl0}zJU r6Ɛ}|b[%Xi9~L|{!Zoؕ/7h"M!9ΑkkEE̡~ ?|0[VC&^1,+< ]m,hCy^HȃTG[4Cbxq𦃼iKI s *;[~J͊:{߭B?7LFRm@`NL%7lxpPqHXcwt>HʾeaOg7O]71(}h749qKTdF*Ұ5dm.MRt?yޝw1m/1u۪#PY7x2CA}`ԗ37(P0- wZ&%A]+Fז<pV7@a'gv mD\W.Rx93ૢ(B;aj?&hNjAR>6u+rhQ+2GB,_6"wfasΌm 8x hմ":[W2 )]h8Z-%9:zӸbgDGAqP8nccmR?U@*>nZZ[QR3Y@@uljMh껟;'0jD7_ڀ,ߟÁC7z吨< )\q»<_?f%=׼e8f@tq-:nJȸR0b(xZoJ@&>^=UB̊~p̨T? q}}ViL$`On׀-qU-c=j bJtn%w# ,r OꊏF<`/I1? e/W:[a*m] ɼ\eɈvsmAX)#IhIe?5./2Xv'U"vFR3+T- ^)`PQY9*iN|;yN\iԭ]aDmܺ-\"CEs˩c `aM)t~vQ|]/m󴑔ۘ~ضCk-[;=%c#t7V*R"JRȉR-vpA8^v&ܠ>ڥIN"C{[@눚 :՟qμ{Mګ\" ,{' 'P@6bh`?^O>Mp{qU5uMNk;P)! ѠW*̿.X'lT`\_33&=3;DHC/M6 ˗@ c<߼c:\`.W*7^)Z#I4ޢ &J+%ph|u薠nVx$^#\&aBm Im'GI>'ԻYZ%j0?dJw,S ~mN! ]. FUq% tb*KK%cK!T!h e٥WJiwu'h'y \ X0\TXW9(TF XjBJaCRa+*zG!pg_HT lwdj\ {GI7fc骘\^GVs^|H؅h]!l' >49r9ť/=H[Fy}k iI.$@hH}t{7iخ7MTOMuCg׷ o+>^0z}\lz*;&[[XwXa_&vJx>q8BzSC Y A }.͔>&j a_I\})%ޘ)Yմ!eB=y@~{Zx 4D`n J?H 0Dn>ta<;JR5Π$"S\h Ex0(lt_KZu\V~^3b_вL7 ^^ 8h34ssm}憸;=!`L&*Rff/Z Ϯj w)Wz|E$Ep^-2Xh𣐰Q9ǭ40\)hG߭PXزF1K꥞8ڽ@5BS>kkrdrA&OL5 ٺѽ11H){m``b'ht[Jr;%ա՗q Phjsz"C5@]s1Xd@,&NԪ ^ ޟw^Pv [d c_!|F%88/\7.-do ~ļ}m7yЪ&ܽ/_ )Y4#9/[M3e80Jg{%FG|{7RfLHq#7VCImÄ@4WXL,B.~$4I< sl%*y;f g웗P[``+r]Ρ$צ]q|.K#ZB,x ܛ4Ih' [M]/kݖN|8LK{UA#&Q iJS>l;xlk;O2 1NjEz.$BpFp#(SdW S8#_nZ֠zlu j Rzi)ϫyw5AR6C23/D!Ѳ̊LDuɾ 7}RQ|;o p[28Q?>?< _mwzr첢&/h OĮпk,Écuy>m.i*oа1B{aU 4U3R(IO5Kÿ]P0x>x9W6g\"ȈbG m%ၗ v q623,WEjOT$DPF|0}8Ҵ{Ue"/sߙDf 7{Mm8 9+sR^!gmƛ'BB-:>886R ;D[96sTKddD Y)>=~f)VqBoWfUv zeU1]ўz] Qo YZ